diff --git a/.commitlintrc.json b/.commitlintrc.json
index cba65ea51..d2572e133 100644
--- a/.commitlintrc.json
+++ b/.commitlintrc.json
@@ -1,21 +1,6 @@
 {
   "extends": ["@commitlint/config-conventional"],
   "rules": {
-    "type-enum": [
-      2,
-      "always",
-      [
-        "feat",
-        "fix",
-        "docs",
-        "style",
-        "refactor",
-        "perf",
-        "test",
-        "chore",
-        "revert"
-      ]
-    ],
     "subject-case": [0]
   }
 }
diff --git a/.dockerignore b/.dockerignore
index 06fae233e..353e19038 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -5,13 +5,22 @@ yarn-error.log*
 
 dist
 build
-.next
-.nuxt
+coverage
+release
 
-.env.local
-.env.development.local
-.env.test.local
-.env.production.local
+# Local data, secrets and editor state
+db
+old_db
+ssl
+uploads
+plugins
+.env
+.env.*
+.mcp.json
+.claude
+CLAUDE.md
+termix-plugin-signing.key
+*.tmxplug.sig
 
 .vscode
 .idea
@@ -29,64 +38,31 @@ Thumbs.db
 
 .git
 .gitignore
+.husky
 
 README.md
 CONTRIBUTING.md
+CHANGELOG.md
 LICENSE
 
-docs/repo-images/
-
-uploads/
-
 electron/
 electron-builder.json
+Casks
+packaging
 
 *.log
 *.tmp
 *.temp
-
 logs
-*.log
-
 pids
 *.pid
 *.seed
 *.pid.lock
 
-coverage
-
 .nyc_output
-
-jspm_packages/
-
 .npm
-
 .eslintcache
-
-.rpt2_cache/
-.rts2_cache_cjs/
-.rts2_cache_es/
-.rts2_cache_umd/
-
-.node_repl_history
-
-*.tgz
-
-.yarn-integrity
-
 .cache
 .parcel-cache
-
-.next
-
-.nuxt
-
-.vuepress/dist
-
-.serverless
-
-.fusebox/
-
-.dynamodb/
-
-.tern-port
+*.tgz
+.node_repl_history
diff --git a/.editorconfig b/.editorconfig
deleted file mode 100644
index f8aef6cbb..000000000
--- a/.editorconfig
+++ /dev/null
@@ -1,14 +0,0 @@
-root = true
-
-[*]
-charset = utf-8
-end_of_line = lf
-insert_final_newline = true
-trim_trailing_whitespace = true
-
-[*.{js,cjs,mjs,jsx,ts,tsx,json,css,scss,md,yml,yaml}]
-indent_style = space
-indent_size = 2
-
-[*.md]
-trim_trailing_whitespace = false
diff --git a/.gitattributes b/.gitattributes
index 140887259..8c3b50383 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -1,22 +1,5 @@
 * text=auto eol=lf
 
-*.js text eol=lf
-*.cjs text eol=lf
-*.mjs text eol=lf
-*.jsx text eol=lf
-*.ts text eol=lf
-*.tsx text eol=lf
-*.json text eol=lf
-*.css text eol=lf
-*.scss text eol=lf
-*.html text eol=lf
-*.md text eol=lf
-*.yaml text eol=lf
-*.yml text eol=lf
-
-*.sh text eol=lf
-*.bash text eol=lf
-
 *.bat text eol=crlf
 *.cmd text eol=crlf
 *.ps1 text eol=crlf
@@ -25,10 +8,10 @@
 *.jpg binary
 *.jpeg binary
 *.gif binary
+*.webp binary
 *.ico binary
-*.svg binary
+*.icns binary
 *.woff binary
 *.woff2 binary
 *.ttf binary
 *.eot binary
-*.icns binary
diff --git a/.github/ISSUE_TEMPLATE/beta_feedback.yml b/.github/ISSUE_TEMPLATE/beta_feedback.yml
new file mode 100644
index 000000000..d6c12f2dc
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/beta_feedback.yml
@@ -0,0 +1,75 @@
+name: Beta feedback
+description: A bug, rough edge or idea from a Termix beta
+labels: [beta]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for testing a beta. Short reports are fine. If you opened this from Termix, the version and setup are already filled in.
+  - type: input
+    id: termix-version
+    attributes:
+      label: Beta version
+      description: Shown in Settings under Updates, or your image tag.
+      placeholder: "e.g. 26.11.0-beta.2"
+    validations:
+      required: true
+  - type: textarea
+    id: what-happened
+    attributes:
+      label: What happened?
+      description: The bug, what felt off, or your idea. Screenshots help a lot.
+    validations:
+      required: true
+  - type: dropdown
+    id: regression
+    attributes:
+      label: Does this happen on the latest stable release?
+      options:
+        - "Not tested on stable"
+        - "Yes, it happens on stable too"
+        - "No, only on this beta"
+        - "Not a bug, just feedback"
+    validations:
+      required: false
+  - type: textarea
+    id: steps
+    attributes:
+      label: Steps to reproduce
+      description: As few steps as you can.
+      placeholder: |
+        1.
+        2.
+        3.
+    validations:
+      required: false
+  - type: textarea
+    id: beta-plugins
+    attributes:
+      label: Plugins on a beta
+      description: Filled in by Termix. One plugin and version per line.
+      render: text
+    validations:
+      required: false
+  - type: textarea
+    id: environment
+    attributes:
+      label: Environment
+      description: Browser or desktop app, OS, and how the server is installed.
+    validations:
+      required: false
+  - type: textarea
+    id: logs
+    attributes:
+      label: Logs
+      description: Errors from the browser console, `docker logs termix`, or the error Termix shows. This is shown as code, so no backticks needed.
+      render: text
+    validations:
+      required: false
+  - type: checkboxes
+    id: checks
+    attributes:
+      label: Before you submit
+      options:
+        - label: I searched open issues and this is not a duplicate
+          required: true
diff --git a/.github/ISSUE_TEMPLATE/bug_report.yml b/.github/ISSUE_TEMPLATE/bug_report.yml
new file mode 100644
index 000000000..828794780
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/bug_report.yml
@@ -0,0 +1,107 @@
+name: Bug report
+description: Something in Termix itself is broken
+labels: [bug]
+type: Bug
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for the report. A maintainer reads every issue, even when there is no reply right away. We usually reply once there is a fix or a workaround.
+
+        If you came from **Report an issue** in Termix, your versions and environment are already filled in below.
+
+        Is it about a plugin (terminal, file manager, Docker, remote desktop and so on)? Report it on that plugin's repo instead. **Report an issue** on the plugin's page in Termix takes you there with your versions filled in.
+  - type: textarea
+    id: what-happened
+    attributes:
+      label: What happened?
+      description: Describe the bug. Screenshots help a lot.
+    validations:
+      required: true
+  - type: textarea
+    id: steps
+    attributes:
+      label: Steps to reproduce
+      description: As few steps as you can.
+      placeholder: |
+        1.
+        2.
+        3.
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: What did you expect?
+      description: What should have happened instead?
+    validations:
+      required: false
+  - type: input
+    id: termix-version
+    attributes:
+      label: Termix version
+      description: Shown in Settings under About, or in your User Profile.
+      placeholder: "e.g. 26.10.0"
+    validations:
+      required: true
+  - type: dropdown
+    id: platform
+    attributes:
+      label: Platform
+      description: Where do you see the problem?
+      options:
+        - "Web browser"
+        - "Desktop app (Windows)"
+        - "Desktop app (macOS)"
+        - "Desktop app (Linux)"
+        - "Mobile app (iOS)"
+        - "Mobile app (Android)"
+        - "Other"
+    validations:
+      required: true
+  - type: dropdown
+    id: install-method
+    attributes:
+      label: Server install
+      description: How is the Termix server installed?
+      options:
+        - "Docker"
+        - "Manual build"
+        - "Proxmox community script"
+        - "Desktop app (built-in server)"
+        - "Not sure"
+    validations:
+      required: true
+  - type: textarea
+    id: environment
+    attributes:
+      label: Environment
+      description: Browser and OS, plus anything special about your setup (reverse proxy, database, SSO).
+      placeholder: |
+        Web, Chrome on Windows. Behind nginx, Postgres.
+    validations:
+      required: false
+  - type: textarea
+    id: logs
+    attributes:
+      label: Logs
+      description: Errors from the browser console, `docker logs termix`, or the error Termix shows. This is shown as code, so no backticks needed.
+      render: text
+    validations:
+      required: false
+  - type: textarea
+    id: context
+    attributes:
+      label: Anything else?
+      description: Links, config, or anything that might help.
+    validations:
+      required: false
+  - type: checkboxes
+    id: checks
+    attributes:
+      label: Before you submit
+      options:
+        - label: I searched open and closed issues and this is not a duplicate
+          required: true
+        - label: I am on the latest version, or I said which version I am on
+          required: true
diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml
index 570bbc396..b2d6ce27b 100644
--- a/.github/ISSUE_TEMPLATE/config.yml
+++ b/.github/ISSUE_TEMPLATE/config.yml
@@ -1,8 +1,11 @@
 blank_issues_enabled: false
 contact_links:
-  - name: Support Center
-    url: https://github.com/Termix-SSH/Support/issues
-    about: Report any feature requests or bugs in the support center
-  - name: Discord
+  - name: Problem with a plugin?
+    url: https://github.com/Termix-SSH/Termix#plugins
+    about: Each plugin has its own repo. Find it in this list, or use Report an issue on the plugin's page in Termix.
+  - name: Questions and chat
     url: https://discord.gg/jVQGdvHDrf
-    about: Official Termix Discord server for general discussion (not recommended for support)
+    about: Ask the community on Discord. Bugs and ideas belong in issues.
+  - name: Business or priority support
+    url: https://termix.site/contact
+    about: For teams that need a faster response. Contact us to discuss terms.
diff --git a/.github/ISSUE_TEMPLATE/feature_request.yml b/.github/ISSUE_TEMPLATE/feature_request.yml
new file mode 100644
index 000000000..b6eeaa3e3
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/feature_request.yml
@@ -0,0 +1,41 @@
+name: Feature request
+description: Suggest an idea for Termix itself
+labels: [feature]
+type: Feature
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Is it about a plugin (terminal, file manager, Docker, remote desktop and so on)? Report it on that plugin's repo instead. **Report an issue** on the plugin's page in Termix takes you there with your versions filled in.
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for the idea. Explain the problem first, then how you would solve it.
+  - type: textarea
+    id: problem
+    attributes:
+      label: What problem would this solve?
+      description: What are you trying to do, and what gets in the way today?
+    validations:
+      required: true
+  - type: textarea
+    id: solution
+    attributes:
+      label: What would you like?
+      description: Describe how it should work.
+    validations:
+      required: true
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives
+      description: Anything you tried or considered instead.
+    validations:
+      required: false
+  - type: textarea
+    id: context
+    attributes:
+      label: Anything else?
+      description: Screenshots, mockups or links.
+    validations:
+      required: false
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
deleted file mode 100644
index cb2a696d1..000000000
--- a/.github/dependabot.yml
+++ /dev/null
@@ -1,91 +0,0 @@
-version: 2
-updates:
-  # npm dependencies (single root package.json, no workspaces)
-  - package-ecosystem: "npm"
-    directory: "/"
-    schedule:
-      interval: "weekly"
-      day: "monday"
-    open-pull-requests-limit: 15
-    labels:
-      - "dependencies"
-      - "npm"
-    commit-message:
-      prefix: "chore"
-      prefix-development: "chore"
-      include: "scope"
-    groups:
-      dev-patch-updates:
-        dependency-type: "development"
-        update-types:
-          - "patch"
-      dev-minor-updates:
-        dependency-type: "development"
-        update-types:
-          - "minor"
-      prod-patch-updates:
-        dependency-type: "production"
-        update-types:
-          - "patch"
-      prod-minor-updates:
-        dependency-type: "production"
-        update-types:
-          - "minor"
-      # Major bumps grouped so they land as a single reviewable PR instead of
-      # one-per-package noise. These often need manual follow-up (Electron,
-      # React, Vite, Tailwind, Express 5, etc.).
-      major-updates:
-        update-types:
-          - "major"
-    ignore:
-      # typescript-eslint declares `typescript: >=4.8.4 <6.1.0`, and TypeScript 7
-      # removed `ts.Extension`, which @typescript-eslint/typescript-estree reads
-      # at import time. Bumping to 7 makes `eslint .` fail to load its own config,
-      # so `npm run lint` cannot run at all. Drop this once typescript-eslint
-      # supports TypeScript 7.
-      - dependency-name: "typescript"
-        update-types: ["version-update:semver-major"]
-
-  # Docker base images (docker/Dockerfile + docker-compose / compose-dev)
-  - package-ecosystem: "docker"
-    directory: "/docker"
-    schedule:
-      interval: "weekly"
-      day: "monday"
-    open-pull-requests-limit: 10
-    labels:
-      - "dependencies"
-      - "docker"
-    commit-message:
-      prefix: "chore"
-      include: "scope"
-    groups:
-      docker-patch-updates:
-        update-types:
-          - "patch"
-      docker-minor-updates:
-        update-types:
-          - "minor"
-      docker-major-updates:
-        update-types:
-          - "major"
-
-  # GitHub Actions used across the workflows in .github/workflows
-  - package-ecosystem: "github-actions"
-    directory: "/"
-    schedule:
-      interval: "weekly"
-      day: "monday"
-    open-pull-requests-limit: 10
-    labels:
-      - "dependencies"
-      - "github-actions"
-    commit-message:
-      prefix: "ci"
-      include: "scope"
-    groups:
-      github-actions:
-        update-types:
-          - "patch"
-          - "minor"
-          - "major"
diff --git a/.github/funding.yml b/.github/funding.yml
deleted file mode 100644
index c14d56027..000000000
--- a/.github/funding.yml
+++ /dev/null
@@ -1 +0,0 @@
-custom: https://donate.termix.site/
diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md
deleted file mode 100644
index d0b31d4d5..000000000
--- a/.github/pull_request_template.md
+++ /dev/null
@@ -1,32 +0,0 @@
-# Overview
-
-_Short summary of what this PR does_
-
-- [ ] Added: ...
-- [ ] Updated: ...
-- [ ] Removed: ...
-- [ ] Fixed: ...
-
-# Changes Made
-
-_Detailed explanation of changes (if needed)_
-
-- ...
-
-# Related Issues
-
-_Link any issues this PR addresses_
-
-- Closes #ISSUE_NUMBER
-- Related to #ISSUE_NUMBER
-
-# Screenshots / Demos
-
-_(Optional: add before/after screenshots, GIFs, or console output)_
-
-# Checklist
-
-- [ ] Code follows project style guidelines
-- [ ] Supports mobile and desktop UI/app (if applicable)
-- [ ] I have read [Contributing.md](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md)
-- [ ] This is not a translation request. See [docs](https://docs.termix.site/translations)
diff --git a/.github/workflows/beta-release.yml b/.github/workflows/beta-release.yml
deleted file mode 100644
index 524818119..000000000
--- a/.github/workflows/beta-release.yml
+++ /dev/null
@@ -1,206 +0,0 @@
-name: Weekly Beta Release
-
-on:
-  schedule:
-    - cron: "15 6 * * 1"
-  workflow_dispatch:
-    inputs:
-      dry_run:
-        description: "Build and test but do not push images, upload installers, or publish a release"
-        required: false
-        default: false
-        type: boolean
-
-permissions:
-  contents: write
-
-jobs:
-  prep:
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-    outputs:
-      dev_branch: ${{ steps.dev.outputs.branch }}
-      beta_version: ${{ steps.dev.outputs.beta_version }}
-      sha: ${{ steps.dev.outputs.sha }}
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v7
-        with:
-          fetch-depth: 1
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v7
-        with:
-          node-version-file: ".nvmrc"
-
-      - name: Resolve newest dev branch and compute beta version
-        id: dev
-        env:
-          GH_TOKEN: ${{ secrets.TERMIX_PAT }}
-        run: |
-          REFS=$(gh api "repos/${{ github.repository }}/branches" --paginate -q '.[].name')
-          if DEV_BRANCH=$(printf '%s\n' "$REFS" | node scripts/latest-dev-branch.cjs 2>/dev/null); then
-            echo "Newest dev branch: $DEV_BRANCH"
-          else
-            echo "No dev-X.Y.Z branch open; nothing to snapshot for this week's beta."
-            echo "branch=" >> "$GITHUB_OUTPUT"
-            exit 0
-          fi
-
-          BASE_VERSION=$(node scripts/parse-dev-branch.cjs "$DEV_BRANCH")
-          BETA_VERSION="${BASE_VERSION}-beta.$(date -u +%Y%m%d)"
-          SHA=$(gh api "repos/${{ github.repository }}/branches/$DEV_BRANCH" -q .commit.sha)
-
-          echo "Beta version: $BETA_VERSION"
-          echo "branch=$DEV_BRANCH" >> "$GITHUB_OUTPUT"
-          echo "beta_version=$BETA_VERSION" >> "$GITHUB_OUTPUT"
-          echo "sha=$SHA" >> "$GITHUB_OUTPUT"
-
-  verify:
-    needs: [prep]
-    if: ${{ needs.prep.outputs.dev_branch != '' }}
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-    steps:
-      - name: Checkout dev branch
-        uses: actions/checkout@v7
-        with:
-          ref: ${{ needs.prep.outputs.dev_branch }}
-          fetch-depth: 1
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v7
-        with:
-          node-version-file: ".nvmrc"
-          cache: "npm"
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Build plugin SDK
-        run: npm run build:sdk
-
-      - name: Run ESLint
-        run: npx eslint .
-
-      - name: Type check
-        run: npm run type-check
-
-      # Before the tests: the plugin boot tests load the built bundles.
-      - name: Build
-        run: npm run build
-
-      - name: Run unit tests
-        run: npm run test
-
-      - name: Run plugin tests
-        run: npm run test:plugins
-
-  create-release:
-    needs: [prep, verify]
-    if: ${{ needs.prep.outputs.dev_branch != '' && inputs.dry_run != true }}
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-    permissions:
-      contents: write
-    steps:
-      - name: Checkout dev branch
-        uses: actions/checkout@v7
-        with:
-          ref: ${{ needs.prep.outputs.dev_branch }}
-          fetch-depth: 0
-
-      - name: Resolve previous beta commit
-        id: prev
-        env:
-          GH_TOKEN: ${{ secrets.TERMIX_PAT }}
-        run: |
-          SHA="${{ needs.prep.outputs.sha }}"
-          PREV_SHA=$(gh release view beta --repo ${{ github.repository }} --json targetCommitish -q .targetCommitish 2>/dev/null || true)
-          if [ -z "$PREV_SHA" ] || ! git cat-file -e "$PREV_SHA^{commit}" 2>/dev/null; then
-            PREV_SHA=$(git rev-parse -q --verify "refs/tags/beta^{commit}" || true)
-          fi
-          # The last beta may come from an older dev branch, so diff from where the two meet.
-          if [ -n "$PREV_SHA" ] && ! git merge-base --is-ancestor "$PREV_SHA" "$SHA"; then
-            PREV_SHA=$(git merge-base "$PREV_SHA" "$SHA" || true)
-          fi
-          echo "Previous beta commit: ${PREV_SHA:-none}"
-          echo "sha=$PREV_SHA" >> "$GITHUB_OUTPUT"
-
-      - name: Generate rolling beta release notes
-        run: |
-          PREV="${{ steps.prev.outputs.sha }}"
-          SHA="${{ needs.prep.outputs.sha }}"
-          MAX=150
-          if [ -z "$PREV" ]; then
-            CHANGES="- Could not find the previous beta commit."
-          else
-            LOG=$(git log --oneline --no-merges "$PREV..$SHA" -- . ':!package-lock.json')
-            COUNT=$(printf '%s' "$LOG" | grep -c . || true)
-            if [ "$COUNT" -eq 0 ]; then
-              CHANGES="- No new commits since the last beta."
-            else
-              CHANGES=$(printf '%s\n' "$LOG" | head -n "$MAX" | sed 's/^/- /')
-              if [ "$COUNT" -gt "$MAX" ]; then
-                CHANGES="$CHANGES
-          - ...and $((COUNT - MAX)) more"
-              fi
-              CHANGES="$CHANGES
-
-          [Full diff](https://github.com/${{ github.repository }}/compare/$PREV...$SHA)"
-            fi
-          fi
-
-          cat > BETA_RELEASE_BODY.md << EOF
-          > [!WARNING]
-          > This is an automated weekly beta build, snapshotted from the \`${{ needs.prep.outputs.dev_branch }}\` branch. It is not a stable release: it may contain unfinished features, regressions, or breaking changes, and this tag is overwritten every week. Do not run it in production.
-          >
-          > Found a bug? [Open a Beta Feedback report](https://github.com/Termix-SSH/Support/issues/new?template=beta_feedback.yml) and mention this build: \`${{ needs.prep.outputs.beta_version }}\`.
-
-          **Snapshot of:** \`${{ needs.prep.outputs.dev_branch }}\` @ \`${{ needs.prep.outputs.sha }}\`
-          **Docker image:** \`ghcr.io/lukegus/termix:beta\` / \`docker.io/bugattiguy527/termix:beta\` (rolling), or pin to \`:beta-${{ needs.prep.outputs.beta_version }}\` for this exact build.
-          **Built:** $(date -u +"%Y-%m-%d %H:%M UTC")
-
-          ### Changes since last beta
-
-          $CHANGES
-          EOF
-
-      - name: Create or update rolling beta release
-        env:
-          GH_TOKEN: ${{ secrets.TERMIX_PAT }}
-        run: |
-          TAG="beta"
-          TITLE="Beta (rolling) - ${{ needs.prep.outputs.beta_version }}"
-          if gh release view "$TAG" --repo ${{ github.repository }} >/dev/null 2>&1; then
-            # --target only applies to a new tag, so move the existing one by hand.
-            gh api -X PATCH "repos/${{ github.repository }}/git/refs/tags/$TAG" \
-              -f sha="${{ needs.prep.outputs.sha }}" -F force=true >/dev/null
-            gh release edit "$TAG" --repo ${{ github.repository }} \
-              --title "$TITLE" --notes-file BETA_RELEASE_BODY.md \
-              --prerelease --target "${{ needs.prep.outputs.sha }}"
-          else
-            gh release create "$TAG" --repo ${{ github.repository }} \
-              --title "$TITLE" --notes-file BETA_RELEASE_BODY.md \
-              --prerelease --target "${{ needs.prep.outputs.sha }}"
-          fi
-
-  docker:
-    needs: [prep, verify, create-release]
-    if: ${{ always() && needs.prep.outputs.dev_branch != '' && needs.verify.result == 'success' && (needs.create-release.result == 'success' || needs.create-release.result == 'skipped') }}
-    uses: ./.github/workflows/docker.yml
-    with:
-      version: ${{ needs.prep.outputs.beta_version }}
-      build_type: Beta
-      dry_run: ${{ inputs.dry_run == true }}
-      source_ref: ${{ needs.prep.outputs.sha }}
-    secrets: inherit
-
-  electron-release:
-    needs: [prep, verify, create-release]
-    if: ${{ always() && needs.prep.outputs.dev_branch != '' && inputs.dry_run != true && needs.create-release.result == 'success' }}
-    uses: ./.github/workflows/electron.yml
-    with:
-      build_type: all
-      artifact_destination: release
-      release_tag: beta
-      version_override: ${{ needs.prep.outputs.beta_version }}
-      source_ref: ${{ needs.prep.outputs.sha }}
-    secrets: inherit
diff --git a/.github/workflows/crowdin-sync.yml b/.github/workflows/crowdin-sync.yml
deleted file mode 100644
index 653ed2e79..000000000
--- a/.github/workflows/crowdin-sync.yml
+++ /dev/null
@@ -1,83 +0,0 @@
-name: Crowdin Sync
-
-on:
-  schedule:
-    - cron: "0 6 * * *"
-  workflow_dispatch:
-    inputs:
-      branch:
-        description: "Branch to sync translations into"
-        required: false
-        type: string
-
-permissions:
-  contents: write
-
-jobs:
-  crowdin:
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-    steps:
-      - name: Resolve target branch
-        id: branch
-        run: |
-          BRANCH="${{ inputs.branch }}"
-          if [ -z "$BRANCH" ]; then
-            BRANCH="${{ github.event.repository.default_branch }}"
-          fi
-          echo "name=$BRANCH" >> "$GITHUB_OUTPUT"
-
-      - name: Checkout branch
-        uses: actions/checkout@v7
-        with:
-          ref: ${{ steps.branch.outputs.name }}
-          fetch-depth: 0
-          token: ${{ secrets.TERMIX_PAT }}
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v7
-        with:
-          node-version-file: ".nvmrc"
-
-      - name: Upload sources to Crowdin
-        uses: crowdin/github-action@v3
-        with:
-          upload_sources: true
-          upload_translations: false
-          download_translations: false
-          create_pull_request: false
-          push_translations: false
-          token: ${{ secrets.CROWDIN_API_KEY }}
-          project_id: "858252"
-        env:
-          CROWDIN_API_TOKEN: ${{ secrets.CROWDIN_API_KEY }}
-
-      - name: Pre-translate untranslated strings
-        env:
-          CROWDIN_API_KEY: ${{ secrets.CROWDIN_API_KEY }}
-        run: node scripts/crowdin-pretranslate.cjs
-
-      - name: Download translations from Crowdin
-        uses: crowdin/github-action@v3
-        with:
-          upload_sources: false
-          upload_translations: false
-          download_translations: true
-          create_pull_request: false
-          push_translations: false
-          token: ${{ secrets.CROWDIN_API_KEY }}
-          project_id: "858252"
-        env:
-          CROWDIN_API_TOKEN: ${{ secrets.CROWDIN_API_KEY }}
-
-      - name: Commit translations
-        run: |
-          git config user.name "LukeGus"
-          git config user.email "bugattiguy527@gmail.com"
-
-          git add src/ui/locales/translated plugins/*/locales/translated
-          if git diff --cached --quiet; then
-            echo "No translation changes to commit."
-            exit 0
-          fi
-          git commit -m "chore: sync Crowdin translations"
-          git push origin HEAD:"${{ steps.branch.outputs.name }}"
diff --git a/.github/workflows/dependabot-retarget.yml b/.github/workflows/dependabot-retarget.yml
deleted file mode 100644
index 15f052275..000000000
--- a/.github/workflows/dependabot-retarget.yml
+++ /dev/null
@@ -1,157 +0,0 @@
-name: Retarget and Merge Dependabot PRs
-
-on:
-  schedule:
-    - cron: "0 6 * * *"
-  workflow_dispatch:
-
-permissions:
-  contents: write
-  pull-requests: write
-
-jobs:
-  retarget-and-merge:
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v7
-        with:
-          fetch-depth: 1
-
-      - name: Resolve newest dev branch
-        id: dev
-        env:
-          GH_TOKEN: ${{ secrets.TERMIX_PAT }}
-        run: |
-          REFS=$(gh api "repos/${{ github.repository }}/branches" --paginate -q '.[].name')
-          # The helper exits non-zero when no dev-X.Y.Z branch exists; treat that
-          # as "nothing to do" rather than a workflow failure.
-          if DEV_BRANCH=$(printf '%s\n' "$REFS" | node scripts/latest-dev-branch.cjs 2>/dev/null); then
-            echo "Newest dev branch: $DEV_BRANCH"
-            echo "branch=$DEV_BRANCH" >> "$GITHUB_OUTPUT"
-          else
-            echo "No dev-X.Y.Z branch open; nothing to retarget."
-            echo "branch=" >> "$GITHUB_OUTPUT"
-          fi
-
-      - name: Retarget and merge Dependabot PRs
-        if: ${{ steps.dev.outputs.branch != '' }}
-        env:
-          GH_TOKEN: ${{ secrets.TERMIX_PAT }}
-          DEV_BRANCH: ${{ steps.dev.outputs.branch }}
-          REPO: ${{ github.repository }}
-        run: |
-          set -uo pipefail
-
-          CONFLICT_LABEL="dependabot-rebase-requested"
-
-          # Ensure the bookkeeping label exists (no-op if it already does).
-          gh label create "$CONFLICT_LABEL" --repo "$REPO" \
-            --color "D93F0B" --description "Retarget workflow asked Dependabot to rebase a conflicting PR" \
-            2>/dev/null || true
-
-          # True if the PR already carries the conflict label.
-          has_conflict_label() {
-            gh pr view "$1" --repo "$REPO" --json labels \
-              -q '.labels[].name' | grep -qx "$CONFLICT_LABEL"
-          }
-
-          # Wait until GitHub has a definite mergeable verdict for a PR (it
-          # returns UNKNOWN while recomputing after a base change or a push).
-          # Echoes "<mergeable> <mergeStateStatus>".
-          wait_for_verdict() {
-            local pr="$1" mergeable state
-            for _ in $(seq 1 30); do
-              read -r mergeable state < <(gh pr view "$pr" --repo "$REPO" \
-                --json mergeable,mergeStateStatus \
-                -q '.mergeable + " " + .mergeStateStatus')
-              if [ "$mergeable" != "UNKNOWN" ] && [ "$state" != "UNKNOWN" ]; then
-                echo "$mergeable $state"
-                return 0
-              fi
-              sleep 20
-            done
-            echo "$mergeable $state"
-          }
-
-          # Phase 1: retarget every open Dependabot PR from main onto the dev
-          # branch. This kicks off a Dependabot rebase for each.
-          PR_NUMBERS=$(gh pr list --repo "$REPO" \
-            --author "app/dependabot" \
-            --base main \
-            --state open \
-            --json number -q '.[].number')
-
-          # Pick up PRs already sitting on the dev branch from a previous run too.
-          PR_NUMBERS="$PR_NUMBERS $(gh pr list --repo "$REPO" \
-            --author "app/dependabot" \
-            --base "$DEV_BRANCH" \
-            --state open \
-            --json number -q '.[].number')"
-
-          PR_NUMBERS=$(printf '%s\n' $PR_NUMBERS | sort -un)
-
-          if [ -z "$PR_NUMBERS" ]; then
-            echo "No open Dependabot PRs to process."
-            exit 0
-          fi
-
-          for PR in $PR_NUMBERS; do
-            BASE=$(gh pr view "$PR" --repo "$REPO" --json baseRefName -q .baseRefName)
-            if [ "$BASE" != "$DEV_BRANCH" ]; then
-              echo "Retargeting PR #$PR ($BASE -> $DEV_BRANCH)"
-              gh pr edit "$PR" --repo "$REPO" --base "$DEV_BRANCH"
-            fi
-          done
-
-          # Phase 2: merge one at a time. Each merge can make the remaining npm
-          # PRs stale, so re-check immediately before merging and rebase stragglers.
-          for PR in $PR_NUMBERS; do
-            echo "::group::PR #$PR"
-
-            read -r MERGEABLE STATE < <(wait_for_verdict "$PR")
-            echo "  mergeable=$MERGEABLE mergeStateStatus=$STATE"
-
-            # BEHIND = clean but needs the latest base; ask Dependabot to rebase
-            # and skip for now (next run merges it once it is up to date).
-            if [ "$STATE" = "BEHIND" ]; then
-              echo "  PR #$PR is behind $DEV_BRANCH; asking Dependabot to rebase."
-              gh pr comment "$PR" --repo "$REPO" --body "@dependabot rebase"
-              echo "::endgroup::"
-              continue
-            fi
-
-            # DIRTY / CONFLICTING = a real conflict. Try a rebase once (label it so
-            # we can tell next time); if it is STILL conflicting on a later run
-            # despite already being labelled, the rebase failed for good - close it
-            # so Dependabot reopens a fresh PR against the current dev branch.
-            if [ "$MERGEABLE" = "CONFLICTING" ] || [ "$STATE" = "DIRTY" ]; then
-              if has_conflict_label "$PR"; then
-                echo "  PR #$PR still conflicts after a prior rebase request; closing so Dependabot reopens it fresh."
-                gh pr close "$PR" --repo "$REPO" --delete-branch \
-                  --comment "Closing: this PR still conflicts with $DEV_BRANCH after a rebase attempt (its changes are likely already merged). Dependabot will reopen a fresh PR computed against the current $DEV_BRANCH."
-              else
-                echo "  PR #$PR conflicts with $DEV_BRANCH; requesting a rebase and labelling it."
-                gh pr edit "$PR" --repo "$REPO" --add-label "$CONFLICT_LABEL"
-                gh pr comment "$PR" --repo "$REPO" --body "@dependabot rebase"
-              fi
-              echo "::endgroup::"
-              continue
-            fi
-
-            # A clean PR that was previously flagged has recovered - drop the label.
-            if has_conflict_label "$PR"; then
-              gh pr edit "$PR" --repo "$REPO" --remove-label "$CONFLICT_LABEL" || true
-            fi
-
-            echo "  Squash-merging PR #$PR"
-            if gh pr merge "$PR" --repo "$REPO" --squash --admin; then
-              echo "  Merged PR #$PR"
-              # Give GitHub a moment to mark the now-stale siblings BEHIND.
-              sleep 15
-            else
-              echo "  Could not merge PR #$PR now; it will be retried next run."
-            fi
-
-            echo "::endgroup::"
-          done
diff --git a/.github/workflows/deploy-helm.yml b/.github/workflows/deploy-helm.yml
deleted file mode 100644
index 27b44f206..000000000
--- a/.github/workflows/deploy-helm.yml
+++ /dev/null
@@ -1,76 +0,0 @@
-name: Deploy Helm
-
-on:
-  workflow_dispatch:
-    inputs:
-      namespace:
-        description: "Kubernetes namespace"
-        required: true
-        default: termix
-      release:
-        description: "Helm release name"
-        required: true
-        default: termix
-      values_file:
-        description: "Values file to use"
-        required: true
-        default: charts/termix/values-gitops-example.yaml
-      image_tag:
-        description: "Image tag to deploy"
-        required: false
-        default: ""
-
-permissions:
-  contents: read
-
-jobs:
-  deploy:
-    runs-on: ubuntu-latest
-    environment: production
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-
-      - name: Set up Helm
-        uses: azure/setup-helm@v5
-        with:
-          version: v3.15.4
-
-      - name: Configure kubeconfig
-        env:
-          KUBE_CONFIG: ${{ secrets.KUBE_CONFIG }}
-        run: |
-          test -n "$KUBE_CONFIG"
-          echo "$KUBE_CONFIG" | base64 -d > "$RUNNER_TEMP/kubeconfig"
-          chmod 600 "$RUNNER_TEMP/kubeconfig"
-
-      - name: Lint chart
-        run: helm lint charts/termix
-
-      - name: Deploy
-        env:
-          KUBECONFIG: ${{ runner.temp }}/kubeconfig
-          IMAGE_TAG: ${{ inputs.image_tag }}
-          RELEASE_NAME: ${{ inputs.release }}
-          TARGET_NAMESPACE: ${{ inputs.namespace }}
-          VALUES_FILE: ${{ inputs.values_file }}
-        run: |
-          set -euo pipefail
-          [[ "$RELEASE_NAME" =~ ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ ]]
-          [[ "$TARGET_NAMESPACE" =~ ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ ]]
-          case "$VALUES_FILE" in
-            charts/termix/*.yaml) ;;
-            *) echo "values_file must be a YAML file under charts/termix" >&2; exit 1 ;;
-          esac
-          test -f "$VALUES_FILE"
-          ARGS=()
-          if [ -n "$IMAGE_TAG" ]; then
-            ARGS+=(--set "image.tag=$IMAGE_TAG")
-          fi
-          helm upgrade --install "$RELEASE_NAME" charts/termix \
-            --namespace "$TARGET_NAMESPACE" \
-            --create-namespace \
-            --values "$VALUES_FILE" \
-            --atomic \
-            --timeout 10m \
-            "${ARGS[@]}"
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 299ce409d..d486744ce 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -4,7 +4,7 @@ on:
   workflow_dispatch:
     inputs:
       version:
-        description: "Version to build (e.g., 1.8.0)"
+        description: "Version to build (e.g., 26.10.0)"
         required: true
       build_type:
         description: "Build type"
@@ -22,11 +22,11 @@ on:
   workflow_call:
     inputs:
       version:
-        description: "Version to build (e.g., 1.8.0)"
+        description: "Version to build (e.g., 26.10.0)"
         required: true
         type: string
       build_type:
-        description: "Build type (Development or Production)"
+        description: "Build type (Development, Beta or Production)"
         required: true
         type: string
       dry_run:
@@ -52,7 +52,14 @@ jobs:
           fetch-depth: 1
 
       - name: Resolve source revision
-        run: echo "SOURCE_SHA=$(git rev-parse HEAD)" >> "$GITHUB_ENV"
+        run: |
+          echo "SOURCE_SHA=$(git rev-parse HEAD)" >> "$GITHUB_ENV"
+          echo "BUILD_CREATED=$(date -u +%Y-%m-%dT%H:%M:%SZ)" >> "$GITHUB_ENV"
+
+      # The image reads its version from package.json, so a beta has to say so.
+      - name: Stamp beta version
+        if: ${{ inputs.build_type == 'Beta' }}
+        run: node scripts/sync-version.cjs --version "${{ inputs.version }}"
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v4
@@ -74,25 +81,23 @@ jobs:
           ALL_TAGS=()
 
           if [ "$BUILD_TYPE" = "Production" ]; then
-            TAGS+=("release-$VERSION" "$VERSION" "latest")
-            for tag in "${TAGS[@]}"; do
-              ALL_TAGS+=("ghcr.io/lukegus/termix:$tag")
-              ALL_TAGS+=("docker.io/bugattiguy527/termix:$tag")
-            done
+            TAGS+=("$VERSION" "latest")
           elif [ "$BUILD_TYPE" = "Beta" ]; then
-            TAGS+=("beta" "beta-$VERSION")
-            for tag in "${TAGS[@]}"; do
-              ALL_TAGS+=("ghcr.io/lukegus/termix:$tag")
-              ALL_TAGS+=("docker.io/bugattiguy527/termix:$tag")
-            done
+            TAGS+=("beta" "$VERSION")
           else
             TAGS+=("dev-$VERSION")
-            for tag in "${TAGS[@]}"; do
-              ALL_TAGS+=("ghcr.io/lukegus/termix:$tag")
-            done
           fi
 
+          for tag in "${TAGS[@]}"; do
+            ALL_TAGS+=("ghcr.io/lukegus/termix:$tag")
+            ALL_TAGS+=("ghcr.io/termix-ssh/termix:$tag")
+            if [ "$BUILD_TYPE" != "Development" ]; then
+              ALL_TAGS+=("docker.io/bugattiguy527/termix:$tag")
+            fi
+          done
+
           echo "ALL_TAGS=$(IFS=,; echo "${ALL_TAGS[*]}")" >> $GITHUB_ENV
+          echo "TAGS=${TAGS[*]}" >> $GITHUB_ENV
 
       - name: Login to GHCR
         if: ${{ !inputs.dry_run }}
@@ -107,7 +112,7 @@ jobs:
         uses: docker/login-action@v4
         with:
           username: bugattiguy527
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
+          password: ${{ secrets.DOCKERHUB_BUGATTIGUY527_TOKEN }}
 
       - name: Build and push multi-arch image
         uses: useblacksmith/build-push-action@v2
@@ -122,9 +127,29 @@ jobs:
           labels: |
             org.opencontainers.image.source=https://github.com/${{ github.repository }}
             org.opencontainers.image.revision=${{ env.SOURCE_SHA }}
-            org.opencontainers.image.created=${{ github.run_id }}
+            org.opencontainers.image.created=${{ env.BUILD_CREATED }}
           outputs: ${{ inputs.dry_run && 'type=cacheonly' || 'type=registry,compression=zstd' }}
 
+      - name: Login to Docker Hub as termixssh
+        id: termix_hub
+        if: ${{ (inputs.build_type == 'Production' || inputs.build_type == 'Beta') && !inputs.dry_run }}
+        env:
+          TOKEN: ${{ secrets.DOCKERHUB_TERMIXSSH_TOKEN }}
+        run: |
+          if [ -z "$TOKEN" ]; then
+            echo "DOCKERHUB_TERMIXSSH_TOKEN is not set, skipping docker.io/termixssh"
+            exit 0
+          fi
+          echo "$TOKEN" | docker login docker.io --username termixssh --password-stdin
+          echo "ready=true" >> "$GITHUB_OUTPUT"
+
+      - name: Copy image to docker.io/termixssh
+        if: ${{ steps.termix_hub.outputs.ready == 'true' }}
+        run: |
+          for tag in $TAGS; do
+            docker buildx imagetools create --tag "docker.io/termixssh/termix:$tag" "ghcr.io/termix-ssh/termix:$tag"
+          done
+
       - name: Cleanup Docker
         if: always()
         run: |
diff --git a/.github/workflows/electron.yml b/.github/workflows/electron.yml
index 576af8533..a3e29608c 100644
--- a/.github/workflows/electron.yml
+++ b/.github/workflows/electron.yml
@@ -117,6 +117,11 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
+      # A beta build has to know it is a beta, or it reports the stable version.
+      - name: Stamp beta version
+        if: inputs.version_override != ''
+        run: node scripts/sync-version.cjs --version "${{ inputs.version_override }}"
+
       - name: Get version
         id: package-version
         run: |
@@ -220,6 +225,11 @@ jobs:
           npm install --force @rollup/rollup-linux-arm64-gnu
           npm install --force @rollup/rollup-linux-arm-gnueabihf
 
+      # A beta build has to know it is a beta, or it reports the stable version.
+      - name: Stamp beta version
+        if: inputs.version_override != ''
+        run: node scripts/sync-version.cjs --version "${{ inputs.version_override }}"
+
       - name: Build Linux x64
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -355,8 +365,8 @@ jobs:
           convert public/icon.png -resize 128x128 flatpak-build/icon-128.png
 
           cd flatpak-build
-          sed -i "s|https://github.com/Termix-SSH/Termix/releases/download/release-VERSION_PLACEHOLDER-tag/termix_linux_x64_appimage.AppImage|file://$(realpath ../release/termix_linux_x64_appimage.AppImage)|g" com.karmaa.termix.yml
-          sed -i "s|https://github.com/Termix-SSH/Termix/releases/download/release-VERSION_PLACEHOLDER-tag/termix_linux_arm64_appimage.AppImage|file://$(realpath ../release/termix_linux_arm64_appimage.AppImage)|g" com.karmaa.termix.yml
+          sed -i "s|https://github.com/Termix-SSH/Termix/releases/download/vVERSION_PLACEHOLDER/termix_linux_x64_appimage.AppImage|file://$(realpath ../release/termix_linux_x64_appimage.AppImage)|g" com.karmaa.termix.yml
+          sed -i "s|https://github.com/Termix-SSH/Termix/releases/download/vVERSION_PLACEHOLDER/termix_linux_arm64_appimage.AppImage|file://$(realpath ../release/termix_linux_arm64_appimage.AppImage)|g" com.karmaa.termix.yml
           sed -i "s/CHECKSUM_X64_PLACEHOLDER/$CHECKSUM_X64/g" com.karmaa.termix.yml
           sed -i "s/CHECKSUM_ARM64_PLACEHOLDER/$CHECKSUM_ARM64/g" com.karmaa.termix.yml
           sed -i "s/VERSION_PLACEHOLDER/$VERSION/g" com.karmaa.termix.metainfo.xml
@@ -382,7 +392,7 @@ jobs:
         run: |
           VERSION="${{ steps.flatpak-version.outputs.version }}"
           cp packaging/flatpak/com.karmaa.termix.flatpakref release/
-          sed -i "s|VERSION_PLACEHOLDER|release-${VERSION}-tag|g" release/com.karmaa.termix.flatpakref
+          sed -i "s|VERSION_PLACEHOLDER|v${VERSION}|g" release/com.karmaa.termix.flatpakref
 
       - name: Upload Flatpak bundle
         uses: actions/upload-artifact@v7
@@ -429,6 +439,11 @@ jobs:
           npm install dmg-license
           node scripts/install-macos-sharp.cjs
 
+      # A beta build has to know it is a beta, or it reports the stable version.
+      - name: Stamp beta version
+        if: inputs.version_override != ''
+        run: node scripts/sync-version.cjs --version "${{ inputs.version_override }}"
+
       - name: Check for Code Signing Certificates
         id: check_certs
         run: |
@@ -468,14 +483,15 @@ jobs:
 
           security find-identity -v -p codesigning $KEYCHAIN_PATH
 
+      # Betas never go to the App Store, so they skip the MAS package.
       - name: Build macOS App Store Package
-        if: steps.check_certs.outputs.has_certs == 'true'
+        id: mas_build
+        if: steps.check_certs.outputs.has_certs == 'true' && inputs.version_override == ''
         env:
           ELECTRON_BUILDER_ALLOW_UNRESOLVED_DEPENDENCIES: true
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NODE_OPTIONS: --max-old-space-size=4096
         run: |
-          CURRENT_VERSION=$(node -p "require('./package.json').version")
           BUILD_VERSION="${{ github.run_number }}"
 
           npm run build && npx electron-builder --mac mas --universal --config.buildVersion="$BUILD_VERSION"
@@ -534,7 +550,7 @@ jobs:
           NODE_OPTIONS: --max-old-space-size=4096
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          if [ "${{ steps.check_certs.outputs.has_certs }}" != "true" ]; then
+          if [ "${{ steps.mas_build.outcome }}" != "success" ]; then
             npm run build
           fi
           npx electron-builder --mac dmg --universal --x64 --arm64 --publish never
@@ -555,7 +571,7 @@ jobs:
           echo "path=$MAS_PKG" >> "$GITHUB_OUTPUT"
 
       - name: Upload macOS MAS PKG
-        if: steps.check_certs.outputs.has_certs == 'true' && steps.locate_mas_pkg.outputs.path != '' && (inputs.artifact_destination == 'file' || inputs.artifact_destination == 'release' || inputs.artifact_destination == 'submit')
+        if: steps.mas_build.outcome == 'success' && steps.locate_mas_pkg.outputs.path != '' && (inputs.artifact_destination == 'file' || inputs.artifact_destination == 'release' || inputs.artifact_destination == 'submit')
         uses: actions/upload-artifact@v7
         with:
           name: termix_macos_universal_mas
@@ -618,7 +634,7 @@ jobs:
           sed -i '' "s/CHECKSUM_PLACEHOLDER/$CHECKSUM/g" homebrew-generated/termix.rb
           sed -i '' "s|version \".*\"|version \"$VERSION\"|g" homebrew-generated/termix.rb
           sed -i '' "s|sha256 \".*\"|sha256 \"$CHECKSUM\"|g" homebrew-generated/termix.rb
-          sed -i '' "s|release-[0-9.]*-tag|release-$VERSION-tag|g" homebrew-generated/termix.rb
+          sed -i '' "s|download/[^/]*/termix_macos|download/v$VERSION/termix_macos|g" homebrew-generated/termix.rb
 
       - name: Upload Homebrew Cask as artifact
         uses: actions/upload-artifact@v7
@@ -634,7 +650,7 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           VERSION="${{ steps.homebrew-version.outputs.version }}"
-          RELEASE_TAG="release-$VERSION-tag"
+          RELEASE_TAG="v$VERSION"
 
           gh release list --repo ${{ github.repository }} --limit 100 | grep -q "$RELEASE_TAG" || {
             echo "Release $RELEASE_TAG not found"
@@ -673,7 +689,7 @@ jobs:
         run: |
           $VERSION = "${{ steps.package-version.outputs.version }}"
           $MSI_NAME = "termix_windows_x64_msi.msi"
-          $DOWNLOAD_URL = "https://github.com/Termix-SSH/Termix/releases/download/release-$($VERSION)-tag/$($MSI_NAME)"
+          $DOWNLOAD_URL = "https://github.com/Termix-SSH/Termix/releases/download/v$($VERSION)/$($MSI_NAME)"
 
           Write-Host "Downloading from $DOWNLOAD_URL"
           New-Item -ItemType Directory -Force -Path "release_asset"
@@ -696,7 +712,7 @@ jobs:
           $CHECKSUM = "${{ steps.msi-info.outputs.checksum }}"
           $MSI_NAME = "${{ steps.msi-info.outputs.msi_name }}"
 
-          $DOWNLOAD_URL = "https://github.com/Termix-SSH/Termix/releases/download/release-$VERSION-tag/$MSI_NAME"
+          $DOWNLOAD_URL = "https://github.com/Termix-SSH/Termix/releases/download/v$VERSION/$MSI_NAME"
 
           New-Item -ItemType Directory -Force -Path "choco-build"
           Copy-Item -Path "packaging\chocolatey\*" -Destination "choco-build" -Recurse -Force
@@ -722,7 +738,7 @@ jobs:
           choco pack termix-ssh.nuspec
 
           if ($LASTEXITCODE -ne 0) {
-            throw "Chocolatey push failed with exit code $LASTEXITCODE"
+            throw "Chocolatey pack failed with exit code $LASTEXITCODE"
           }
 
       - name: Check for Chocolatey API Key
@@ -784,7 +800,7 @@ jobs:
           mkdir -p release_assets
 
           APPIMAGE_X64_NAME="termix_linux_x64_appimage.AppImage"
-          URL_X64="https://github.com/Termix-SSH/Termix/releases/download/release-$VERSION-tag/$APPIMAGE_X64_NAME"
+          URL_X64="https://github.com/Termix-SSH/Termix/releases/download/v$VERSION/$APPIMAGE_X64_NAME"
           PATH_X64="release_assets/$APPIMAGE_X64_NAME"
           echo "Downloading x64 AppImage from $URL_X64"
           curl -L -o "$PATH_X64" "$URL_X64"
@@ -792,7 +808,7 @@ jobs:
           CHECKSUM_X64=$(sha256sum "$PATH_X64" | awk '{print $1}')
 
           APPIMAGE_ARM64_NAME="termix_linux_arm64_appimage.AppImage"
-          URL_ARM64="https://github.com/Termix-SSH/Termix/releases/download/release-$VERSION-tag/$APPIMAGE_ARM64_NAME"
+          URL_ARM64="https://github.com/Termix-SSH/Termix/releases/download/v$VERSION/$APPIMAGE_ARM64_NAME"
           PATH_ARM64="release_assets/$APPIMAGE_ARM64_NAME"
           echo "Downloading arm64 AppImage from $URL_ARM64"
           curl -L -o "$PATH_ARM64" "$URL_ARM64"
@@ -918,7 +934,7 @@ jobs:
         run: |
           VERSION="${{ steps.package-version.outputs.version }}"
           DMG_NAME="termix_macos_universal_dmg.dmg"
-          URL="https://github.com/Termix-SSH/Termix/releases/download/release-$VERSION-tag/$DMG_NAME"
+          URL="https://github.com/Termix-SSH/Termix/releases/download/v$VERSION/$DMG_NAME"
 
           mkdir -p release_asset
           DOWNLOAD_PATH="release_asset/$DMG_NAME"
@@ -952,8 +968,8 @@ jobs:
 
           cp Casks/termix.rb homebrew-submission/Casks/t/termix.rb
 
-          sed -i '' "s/VERSION_PLACEHOLDER/$VERSION/g" homebrew-submission/Casks/t/termix.rb
-          sed -i '' "s/CHECKSUM_PLACEHOLDER/$CHECKSUM/g" homebrew-submission/Casks/t/termix.rb
+          sed -i '' "s|version \".*\"|version \"$VERSION\"|g" homebrew-submission/Casks/t/termix.rb
+          sed -i '' "s|sha256 \".*\"|sha256 \"$CHECKSUM\"|g" homebrew-submission/Casks/t/termix.rb
 
       - name: Verify Cask syntax
         run: |
@@ -1191,7 +1207,7 @@ jobs:
           META_DIR="$RUNNER_TEMP/asc_metadata"
           rm -rf "$META_DIR"
           node scripts/generate-appstore-notes.cjs \
-            --notes RELEASE_NOTES.md \
+            --changelog CHANGELOG.md \
             --out-dir "$META_DIR" \
             --locales "en-US"
           echo "metadata_path=$META_DIR" >> "$GITHUB_OUTPUT"
diff --git a/.github/workflows/helm.yml b/.github/workflows/helm.yml
deleted file mode 100644
index 4f8e3c66e..000000000
--- a/.github/workflows/helm.yml
+++ /dev/null
@@ -1,73 +0,0 @@
-name: Helm
-
-on:
-  pull_request:
-    paths:
-      - "charts/**"
-      - ".github/workflows/helm.yml"
-  push:
-    branches: [main]
-    paths:
-      - "charts/**"
-      - ".github/workflows/helm.yml"
-  workflow_dispatch:
-    inputs:
-      publish:
-        description: "Publish chart to GHCR OCI registry"
-        required: true
-        type: boolean
-        default: false
-
-permissions:
-  contents: read
-
-jobs:
-  lint:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-
-      - name: Set up Helm
-        uses: azure/setup-helm@v5
-        with:
-          version: v3.15.4
-
-      - name: Lint chart
-        run: helm lint charts/termix
-
-      - name: Render default chart
-        run: helm template termix charts/termix --namespace termix
-
-      - name: Render GitOps example
-        run: helm template termix charts/termix --values charts/termix/values-gitops-example.yaml --namespace termix
-
-      - name: Render Traefik example
-        run: helm template termix charts/termix --values charts/termix/values-traefik.yaml --namespace termix
-
-  publish:
-    needs: lint
-    if: github.event_name == 'workflow_dispatch' && inputs.publish
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      packages: write
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-
-      - name: Set up Helm
-        uses: azure/setup-helm@v5
-        with:
-          version: v3.15.4
-
-      - name: Log in to GHCR
-        run: echo "${{ secrets.GITHUB_TOKEN }}" | helm registry login ghcr.io --username "${{ github.actor }}" --password-stdin
-
-      - name: Package chart
-        run: helm package charts/termix --destination .helm-packages
-
-      - name: Push chart
-        run: |
-          OWNER="$(echo "$GITHUB_REPOSITORY_OWNER" | tr '[:upper:]' '[:lower:]')"
-          helm push .helm-packages/termix-*.tgz "oci://ghcr.io/$OWNER/charts"
diff --git a/.github/workflows/openapi.yml b/.github/workflows/openapi.yml
deleted file mode 100644
index 54f1486fd..000000000
--- a/.github/workflows/openapi.yml
+++ /dev/null
@@ -1,32 +0,0 @@
-name: Generate OpenAPI Specification
-
-on:
-  workflow_dispatch:
-
-jobs:
-  generate-openapi:
-    name: Generate OpenAPI JSON
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v7
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v7
-        with:
-          node-version-file: ".nvmrc"
-          cache: "npm"
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Generate OpenAPI specification
-        run: npm run generate:openapi
-
-      - name: Upload OpenAPI artifact
-        uses: actions/upload-artifact@v7
-        with:
-          name: openapi-spec
-          path: openapi.json
-          retention-days: 90
diff --git a/.github/workflows/pr-check.yml b/.github/workflows/pr-check.yml
index cee0b3135..8809af565 100644
--- a/.github/workflows/pr-check.yml
+++ b/.github/workflows/pr-check.yml
@@ -28,8 +28,6 @@ jobs:
         run: npm run build:sdk
 
       - name: Lint
-        # npm run lint, not npx eslint — the script also checks that the
-        # generated dialect schemas match schema.ts, which eslint cannot see.
         run: npm run lint
 
       - name: Run Prettier check
@@ -44,16 +42,10 @@ jobs:
       - name: Run unit tests
         run: npm run test
 
-      - name: Run plugin tests
-        run: npm run test:plugins
-
   database-dialects:
     name: Postgres and MySQL
     runs-on: blacksmith-2vcpu-ubuntu-2404
 
-    # The test suite only ever sees SQLite. Everything that differs per engine —
-    # the RETURNING replacements, the read-then-write transactions, the
-    # migrations themselves — is only covered here, against real servers.
     services:
       postgres:
         image: postgres:16
@@ -100,17 +92,12 @@ jobs:
       - name: Build plugin SDK
         run: npm run build:sdk
 
-      # Each run applies the migrations to an empty database first, so a
-      # migration that does not apply cleanly fails the build.
       - name: Verify Postgres
         run: npm run verify:dialect -- postgres://termix:termix@127.0.0.1:5432/termix_test
 
       - name: Verify MySQL
         run: npm run verify:dialect -- mysql://termix:termix@127.0.0.1:3306/termix_test
 
-      # The same repository suite the SQLite run executes, pointed at each
-      # engine. This is where a dialect difference in a query shows up as a
-      # failing assertion rather than as a bug report.
       - name: Repository tests on Postgres
         env:
           TEST_DIALECT: postgres
diff --git a/.github/workflows/redirect-issues.yml b/.github/workflows/redirect-issues.yml
deleted file mode 100644
index 7a23ce1f2..000000000
--- a/.github/workflows/redirect-issues.yml
+++ /dev/null
@@ -1,23 +0,0 @@
-name: Redirect issues
-on:
-  issues:
-    types: [opened]
-
-permissions:
-  issues: write
-
-jobs:
-  close:
-    if: github.event.issue.author_association != 'OWNER' && github.event.issue.author_association != 'COLLABORATOR'
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-    steps:
-      - uses: actions/github-script@v9
-        with:
-          script: |
-            const n = context.issue.number;
-            await github.rest.issues.createComment({
-              ...context.repo, issue_number: n,
-              body: "Do not create issues here. Use the dedicated support repo and issue template system: https://github.com/Termix-SSH/Support"
-            });
-            await github.rest.issues.update({ ...context.repo, issue_number: n, state: "closed", state_reason: "not_planned" });
-            await github.rest.issues.lock({ ...context.repo, issue_number: n, lock_reason: "off-topic" });
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index bc60a618a..9cedee366 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,10 +1,24 @@
 name: Release
 
+# Stable: run by hand from a dev-X.Y.Z branch. Beta: run by hand from a dev
+# branch, or let the Tuesday and Friday schedule snapshot the newest dev
+# branch when it moved since the last beta.
+
 on:
+  schedule:
+    - cron: "0 15 * * 2,5"
   workflow_dispatch:
     inputs:
+      channel:
+        description: "Stable release or beta"
+        required: true
+        default: Stable
+        type: choice
+        options:
+          - Stable
+          - Beta
       mode:
-        description: "Release mode"
+        description: "Release mode (Overwrite release is stable only)"
         required: true
         default: Everything
         type: choice
@@ -17,23 +31,45 @@ on:
 permissions:
   contents: write
 
+concurrency:
+  group: release
+  cancel-in-progress: false
+
 jobs:
   prep:
     runs-on: blacksmith-2vcpu-ubuntu-2404
     outputs:
-      version: ${{ steps.info.outputs.version }}
-      release_tag: ${{ steps.info.outputs.release_tag }}
+      channel: ${{ steps.mode.outputs.channel }}
+      mode: ${{ steps.mode.outputs.mode }}
+      skip: ${{ steps.beta.outputs.skip || 'false' }}
+      version: ${{ steps.info.outputs.version || steps.beta.outputs.version }}
+      release_tag: ${{ steps.info.outputs.release_tag || steps.beta.outputs.release_tag }}
       mobile_version: ${{ steps.info.outputs.mobile_version }}
-      dev_branch: ${{ steps.info.outputs.dev_branch }}
+      mobile_tag: ${{ steps.info.outputs.mobile_tag }}
+      dev_branch: ${{ steps.info.outputs.dev_branch || steps.beta.outputs.dev_branch }}
+      sha: ${{ steps.beta.outputs.sha }}
+      prev_ref: ${{ steps.beta.outputs.prev_ref }}
     steps:
+      - name: Resolve channel and mode
+        id: mode
+        run: |
+          CHANNEL="${{ inputs.channel || 'Beta' }}"
+          MODE="${{ inputs.mode || 'Everything' }}"
+          echo "channel=$CHANNEL" >> "$GITHUB_OUTPUT"
+          echo "mode=$MODE" >> "$GITHUB_OUTPUT"
+          if [ "$CHANNEL" = "Beta" ] && [ "$MODE" = "Overwrite release" ]; then
+            echo "Overwrite release is for stable releases only."
+            exit 1
+          fi
+
       - name: Guard branch (release modes)
-        if: ${{ inputs.mode != 'Overwrite release' && !startsWith(github.ref, 'refs/heads/dev-') }}
+        if: ${{ github.event_name == 'workflow_dispatch' && steps.mode.outputs.mode != 'Overwrite release' && !startsWith(github.ref, 'refs/heads/dev-') }}
         run: |
           echo "This mode must be run from a dev branch (got ${{ github.ref }})."
           exit 1
 
       - name: Guard branch (overwrite mode)
-        if: ${{ inputs.mode == 'Overwrite release' && github.ref != 'refs/heads/main' }}
+        if: ${{ steps.mode.outputs.mode == 'Overwrite release' && github.ref != 'refs/heads/main' }}
         run: |
           echo "Overwrite release must be run from main (got ${{ github.ref }})."
           exit 1
@@ -50,10 +86,11 @@ jobs:
 
       - name: Resolve versions
         id: info
+        if: ${{ steps.mode.outputs.channel == 'Stable' }}
         env:
           GH_TOKEN: ${{ github.token }}
         run: |
-          if [ "${{ inputs.mode }}" = "Overwrite release" ]; then
+          if [ "${{ steps.mode.outputs.mode }}" = "Overwrite release" ]; then
             DEV_BRANCH=""
             VERSION=$(node -p "require('./package.json').version")
           else
@@ -62,26 +99,106 @@ jobs:
           fi
           echo "dev_branch=$DEV_BRANCH" >> "$GITHUB_OUTPUT"
           echo "version=$VERSION" >> "$GITHUB_OUTPUT"
-          echo "release_tag=release-$VERSION-tag" >> "$GITHUB_OUTPUT"
+          echo "release_tag=v$VERSION" >> "$GITHUB_OUTPUT"
 
           MOBILE_RAW=$(gh release view -R Termix-SSH/Mobile --json tagName -q .tagName)
-          MOBILE_VERSION=$(echo "$MOBILE_RAW" | sed -E 's/^release-//; s/-tag$//')
+          MOBILE_VERSION=$(echo "$MOBILE_RAW" | sed -E 's/^release-//; s/-tag$//; s/^v//')
           if [ -z "$MOBILE_VERSION" ]; then
             echo "Failed to resolve the latest Termix-SSH/Mobile release version."
             exit 1
           fi
           echo "mobile_version=$MOBILE_VERSION" >> "$GITHUB_OUTPUT"
+          echo "mobile_tag=$MOBILE_RAW" >> "$GITHUB_OUTPUT"
 
-      - name: Validate release notes
+      - name: Check CHANGELOG.md has notes for this version
+        if: ${{ steps.mode.outputs.channel == 'Stable' }}
         run: |
           node scripts/generate-release-body.cjs \
             --version "${{ steps.info.outputs.version }}" \
             --mobile-version "${{ steps.info.outputs.mobile_version }}" \
-            --notes RELEASE_NOTES.md > /dev/null
+            --mobile-tag "${{ steps.info.outputs.mobile_tag }}" > /dev/null
+
+      - name: Resolve beta version
+        id: beta
+        if: ${{ steps.mode.outputs.channel == 'Beta' }}
+        env:
+          GH_TOKEN: ${{ secrets.TERMIX_PAT }}
+        run: |
+          if [ "${{ github.event_name }}" = "schedule" ]; then
+            REFS=$(gh api "repos/${{ github.repository }}/branches" --paginate -q '.[].name')
+            if ! DEV_BRANCH=$(printf '%s\n' "$REFS" | node scripts/latest-dev-branch.cjs 2>/dev/null); then
+              echo "No dev-X.Y.Z branch is open, so no beta today."
+              echo "skip=true" >> "$GITHUB_OUTPUT"
+              exit 0
+            fi
+          else
+            DEV_BRANCH="${GITHUB_REF#refs/heads/}"
+          fi
+
+          BASE=$(node scripts/parse-dev-branch.cjs "$DEV_BRANCH")
+          SHA=$(gh api "repos/${{ github.repository }}/branches/$DEV_BRANCH" -q .commit.sha)
+          TAGS=$(gh api "repos/${{ github.repository }}/git/matching-refs/tags/v$BASE-beta." -q '.[].ref' | sed 's#^refs/tags/##')
+          LATEST=$(printf '%s\n' "$TAGS" | node scripts/beta-version.cjs "$BASE" --latest)
+          VERSION=$(printf '%s\n' "$TAGS" | node scripts/beta-version.cjs "$BASE")
+
+          if [ -n "$LATEST" ]; then
+            LATEST_SHA=$(gh api "repos/${{ github.repository }}/commits/$LATEST" -q .sha)
+            if [ "$LATEST_SHA" = "$SHA" ] && [ "${{ github.event_name }}" = "schedule" ]; then
+              echo "$DEV_BRANCH has not moved since $LATEST, so no beta today."
+              echo "skip=true" >> "$GITHUB_OUTPUT"
+              exit 0
+            fi
+            PREV="$LATEST"
+          else
+            PREV=$(gh release view --repo ${{ github.repository }} --json tagName -q .tagName 2>/dev/null || true)
+          fi
+
+          echo "Beta $VERSION from $DEV_BRANCH @ $SHA, changes since ${PREV:-nothing}"
+          echo "skip=false" >> "$GITHUB_OUTPUT"
+          echo "dev_branch=$DEV_BRANCH" >> "$GITHUB_OUTPUT"
+          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+          echo "release_tag=v$VERSION" >> "$GITHUB_OUTPUT"
+          echo "sha=$SHA" >> "$GITHUB_OUTPUT"
+          echo "prev_ref=$PREV" >> "$GITHUB_OUTPUT"
+
+  verify-beta:
+    needs: [prep]
+    if: ${{ needs.prep.outputs.channel == 'Beta' && needs.prep.outputs.skip != 'true' }}
+    runs-on: blacksmith-2vcpu-ubuntu-2404
+    steps:
+      - name: Checkout beta commit
+        uses: actions/checkout@v7
+        with:
+          ref: ${{ needs.prep.outputs.sha }}
+          fetch-depth: 1
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v7
+        with:
+          node-version-file: ".nvmrc"
+          cache: "npm"
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build plugin SDK
+        run: npm run build:sdk
+
+      - name: Lint
+        run: npm run lint
+
+      - name: Type check
+        run: npm run type-check
+
+      - name: Build
+        run: npm run build
+
+      - name: Run unit tests
+        run: npm run test
 
   normalize:
     needs: [prep]
-    if: ${{ inputs.mode != 'Overwrite release' }}
+    if: ${{ needs.prep.outputs.channel == 'Stable' && needs.prep.outputs.mode != 'Overwrite release' }}
     runs-on: blacksmith-2vcpu-ubuntu-2404
     steps:
       - name: Checkout dev branch
@@ -110,16 +227,9 @@ jobs:
           npm run format
           npm run lint
 
-      # The plugin boot tests load the built bundles.
-      - name: Build plugins
-        run: npm run build:plugins
-
       - name: Run unit tests
         run: npm run test
 
-      - name: Run plugin tests
-        run: npm run test:plugins
-
       - name: Sync version
         run: node scripts/sync-version.cjs --version "${{ needs.prep.outputs.version }}"
 
@@ -133,7 +243,7 @@ jobs:
             exit 0
           fi
 
-          if [ "${{ inputs.mode }}" = "Dry run" ]; then
+          if [ "${{ needs.prep.outputs.mode }}" = "Dry run" ]; then
             echo "DRY RUN: would commit and push the following changes to ${{ needs.prep.outputs.dev_branch }}:"
             git --no-pager diff --stat
             exit 0
@@ -143,9 +253,9 @@ jobs:
           git commit -m "chore: lint, format, and bump version to ${{ needs.prep.outputs.version }}"
           git push origin HEAD:"${{ needs.prep.outputs.dev_branch }}"
 
-  crowdin:
+  sync-main:
     needs: [prep, normalize]
-    if: ${{ inputs.mode != 'Dry run' && inputs.mode != 'Overwrite release' }}
+    if: ${{ needs.prep.outputs.channel == 'Stable' && needs.prep.outputs.mode != 'Dry run' && needs.prep.outputs.mode != 'Overwrite release' }}
     runs-on: blacksmith-2vcpu-ubuntu-2404
     steps:
       - name: Checkout dev branch
@@ -155,79 +265,27 @@ jobs:
           fetch-depth: 0
           token: ${{ secrets.TERMIX_PAT }}
 
-      - name: Setup Node.js
-        uses: actions/setup-node@v7
-        with:
-          node-version-file: ".nvmrc"
-
       - name: Merge main into dev branch
         run: |
           git config user.name "LukeGus"
           git config user.email "bugattiguy527@gmail.com"
           git fetch origin main
-          git merge origin/main -X ours --no-edit || true
-          git push origin HEAD:"${{ needs.prep.outputs.dev_branch }}"
-
-      - name: Clean up stale Crowdin git integration branch
-        continue-on-error: true
-        env:
-          GH_TOKEN: ${{ secrets.TERMIX_PAT }}
-        run: |
-          PR_NUMBER=$(gh pr list --repo ${{ github.repository }} --head i18n_translate --state open --json number -q '.[0].number' || true)
-          if [ -n "$PR_NUMBER" ]; then
-            gh pr close "$PR_NUMBER" --repo ${{ github.repository }} --delete-branch || true
+          # -X ours leaves modify/delete conflicts, so settle those to the dev side too
+          if ! git merge origin/main -X ours --no-edit; then
+            git diff --name-only --diff-filter=U | while read -r f; do
+              if git cat-file -e "HEAD:$f" 2>/dev/null; then
+                git checkout --ours -- "$f" && git add -- "$f"
+              else
+                git rm -q -- "$f"
+              fi
+            done
+            git commit --no-edit
           fi
-          git push origin --delete i18n_translate || true
-
-      - name: Upload sources to Crowdin
-        uses: crowdin/github-action@v3
-        with:
-          upload_sources: true
-          upload_translations: false
-          download_translations: false
-          create_pull_request: false
-          push_translations: false
-          token: ${{ secrets.CROWDIN_API_KEY }}
-          project_id: "858252"
-        env:
-          CROWDIN_API_TOKEN: ${{ secrets.CROWDIN_API_KEY }}
-
-      # Off until the machine translation credits are topped up.
-      - name: Pre-translate untranslated strings
-        if: false
-        env:
-          CROWDIN_API_KEY: ${{ secrets.CROWDIN_API_KEY }}
-        run: node scripts/crowdin-pretranslate.cjs
-
-      - name: Download translations from Crowdin
-        uses: crowdin/github-action@v3
-        with:
-          upload_sources: false
-          upload_translations: false
-          download_translations: true
-          create_pull_request: false
-          push_translations: false
-          token: ${{ secrets.CROWDIN_API_KEY }}
-          project_id: "858252"
-        env:
-          CROWDIN_API_TOKEN: ${{ secrets.CROWDIN_API_KEY }}
-
-      - name: Commit translations to dev branch
-        run: |
-          git config user.name "LukeGus"
-          git config user.email "bugattiguy527@gmail.com"
-
-          git add src/ui/locales/translated plugins/*/locales/translated
-          if git diff --cached --quiet; then
-            echo "No translation changes to commit."
-            exit 0
-          fi
-          git commit -m "chore: sync Crowdin translations for ${{ needs.prep.outputs.version }}"
           git push origin HEAD:"${{ needs.prep.outputs.dev_branch }}"
 
   merge-to-main:
-    needs: [prep, normalize, crowdin]
-    if: ${{ always() && needs.prep.result == 'success' && (needs.normalize.result == 'success' || needs.normalize.result == 'skipped') && (needs.crowdin.result == 'success' || needs.crowdin.result == 'skipped') }}
+    needs: [prep, normalize, sync-main]
+    if: ${{ always() && needs.prep.result == 'success' && needs.prep.outputs.channel == 'Stable' && (needs.normalize.result == 'success' || needs.normalize.result == 'skipped') && (needs.sync-main.result == 'success' || needs.sync-main.result == 'skipped') }}
     runs-on: blacksmith-2vcpu-ubuntu-2404
     outputs:
       main_sha: ${{ steps.merge.outputs.main_sha }}
@@ -249,7 +307,7 @@ jobs:
           node scripts/generate-release-body.cjs \
             --version "${{ needs.prep.outputs.version }}" \
             --mobile-version "${{ needs.prep.outputs.mobile_version }}" \
-            --notes RELEASE_NOTES.md > PR_BODY.md
+            --mobile-tag "${{ needs.prep.outputs.mobile_tag }}" > PR_BODY.md
 
       - name: Open and squash-merge PR to main
         id: merge
@@ -257,16 +315,16 @@ jobs:
           GH_TOKEN: ${{ secrets.TERMIX_PAT }}
         run: |
           DEV_BRANCH="${{ needs.prep.outputs.dev_branch }}"
-          TITLE="release-${{ needs.prep.outputs.version }}"
+          TITLE="v${{ needs.prep.outputs.version }}"
 
-          if [ "${{ inputs.mode }}" = "Overwrite release" ]; then
+          if [ "${{ needs.prep.outputs.mode }}" = "Overwrite release" ]; then
             echo "OVERWRITE: no merge; building from main as-is."
             echo "build_ref=main" >> "$GITHUB_OUTPUT"
             echo "main_sha=$(gh api repos/${{ github.repository }}/commits/main -q .sha)" >> "$GITHUB_OUTPUT"
             exit 0
           fi
 
-          if [ "${{ inputs.mode }}" = "Dry run" ]; then
+          if [ "${{ needs.prep.outputs.mode }}" = "Dry run" ]; then
             echo "DRY RUN: would open and squash-merge a PR from $DEV_BRANCH into main."
             echo "DRY RUN: downstream jobs will build from $DEV_BRANCH instead of main."
             echo "build_ref=$DEV_BRANCH" >> "$GITHUB_OUTPUT"
@@ -295,18 +353,19 @@ jobs:
           echo "build_ref=$MAIN_SHA" >> "$GITHUB_OUTPUT"
 
   docker:
-    needs: [prep, merge-to-main]
+    needs: [prep, verify-beta, merge-to-main]
+    if: ${{ always() && needs.prep.result == 'success' && needs.prep.outputs.skip != 'true' && (needs.merge-to-main.result == 'success' || needs.verify-beta.result == 'success') }}
     uses: ./.github/workflows/docker.yml
     with:
       version: ${{ needs.prep.outputs.version }}
-      build_type: Production
-      dry_run: ${{ inputs.mode == 'Dry run' }}
-      source_ref: ${{ needs.merge-to-main.outputs.build_ref }}
+      build_type: ${{ needs.prep.outputs.channel == 'Beta' && 'Beta' || 'Production' }}
+      dry_run: ${{ needs.prep.outputs.mode == 'Dry run' }}
+      source_ref: ${{ needs.merge-to-main.outputs.build_ref || needs.prep.outputs.sha }}
     secrets: inherit
 
   create-release:
     needs: [prep, merge-to-main, docker]
-    if: ${{ inputs.mode != 'Dry run' }}
+    if: ${{ always() && needs.prep.outputs.channel == 'Stable' && needs.docker.result == 'success' && needs.prep.outputs.mode != 'Dry run' }}
     runs-on: blacksmith-2vcpu-ubuntu-2404
     permissions:
       contents: write
@@ -323,7 +382,7 @@ jobs:
           node-version-file: ".nvmrc"
 
       - name: Clear existing release artifacts (overwrite mode)
-        if: ${{ inputs.mode == 'Overwrite release' }}
+        if: ${{ needs.prep.outputs.mode == 'Overwrite release' }}
         env:
           GH_TOKEN: ${{ secrets.TERMIX_PAT }}
         run: |
@@ -338,40 +397,83 @@ jobs:
           done
 
       - name: Generate release body
-        if: ${{ inputs.mode != 'Overwrite release' }}
+        if: ${{ needs.prep.outputs.mode != 'Overwrite release' }}
         run: |
           node scripts/generate-release-body.cjs \
             --version "${{ needs.prep.outputs.version }}" \
             --mobile-version "${{ needs.prep.outputs.mobile_version }}" \
-            --notes RELEASE_NOTES.md > RELEASE_BODY.md
+            --mobile-tag "${{ needs.prep.outputs.mobile_tag }}" > RELEASE_BODY.md
 
       - name: Create or update GitHub release
-        if: ${{ inputs.mode != 'Overwrite release' }}
+        if: ${{ needs.prep.outputs.mode != 'Overwrite release' }}
         env:
           GH_TOKEN: ${{ secrets.TERMIX_PAT }}
         run: |
           TAG="${{ needs.prep.outputs.release_tag }}"
-          TITLE="release-${{ needs.prep.outputs.version }}"
+          TITLE="Termix v${{ needs.prep.outputs.version }}"
           if gh release view "$TAG" --repo ${{ github.repository }} >/dev/null 2>&1; then
             gh release edit "$TAG" --repo ${{ github.repository }} --title "$TITLE" --notes-file RELEASE_BODY.md
           else
             gh release create "$TAG" --repo ${{ github.repository }} --title "$TITLE" --notes-file RELEASE_BODY.md --target "${{ needs.merge-to-main.outputs.main_sha }}"
           fi
 
+  create-beta-release:
+    needs: [prep, docker]
+    if: ${{ always() && needs.prep.outputs.channel == 'Beta' && needs.docker.result == 'success' && needs.prep.outputs.mode != 'Dry run' }}
+    runs-on: blacksmith-2vcpu-ubuntu-2404
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout beta commit
+        uses: actions/checkout@v7
+        with:
+          ref: ${{ needs.prep.outputs.sha }}
+          fetch-depth: 0
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v7
+        with:
+          node-version-file: ".nvmrc"
+
+      - name: Generate beta release body
+        run: |
+          node scripts/generate-beta-body.cjs \
+            --version "${{ needs.prep.outputs.version }}" \
+            --branch "${{ needs.prep.outputs.dev_branch }}" \
+            --sha "${{ needs.prep.outputs.sha }}" \
+            --prev "${{ needs.prep.outputs.prev_ref }}" > BETA_BODY.md
+
+      - name: Create beta release
+        env:
+          GH_TOKEN: ${{ secrets.TERMIX_PAT }}
+        run: |
+          VERSION="${{ needs.prep.outputs.version }}"
+          TITLE="Termix v${VERSION%-beta.*} Beta ${VERSION##*-beta.}"
+          TAG="${{ needs.prep.outputs.release_tag }}"
+          if gh release view "$TAG" --repo ${{ github.repository }} >/dev/null 2>&1; then
+            gh release edit "$TAG" --repo ${{ github.repository }} \
+              --title "$TITLE" --notes-file BETA_BODY.md --prerelease
+          else
+            gh release create "$TAG" --repo ${{ github.repository }} \
+              --title "$TITLE" --notes-file BETA_BODY.md \
+              --prerelease --target "${{ needs.prep.outputs.sha }}"
+          fi
+
   electron-release:
-    needs: [prep, merge-to-main, create-release]
-    if: ${{ always() && needs.merge-to-main.result == 'success' && (needs.create-release.result == 'success' || needs.create-release.result == 'skipped') }}
+    needs: [prep, merge-to-main, docker, create-release, create-beta-release]
+    if: ${{ always() && needs.prep.outputs.skip != 'true' && needs.docker.result == 'success' && needs.create-release.result != 'failure' && needs.create-beta-release.result != 'failure' }}
     uses: ./.github/workflows/electron.yml
     with:
       build_type: all
-      artifact_destination: ${{ inputs.mode == 'Dry run' && 'file' || 'release' }}
+      artifact_destination: ${{ needs.prep.outputs.mode == 'Dry run' && 'file' || 'release' }}
       release_tag: ${{ needs.prep.outputs.release_tag }}
-      source_ref: ${{ needs.merge-to-main.outputs.build_ref }}
+      version_override: ${{ needs.prep.outputs.channel == 'Beta' && needs.prep.outputs.version || '' }}
+      source_ref: ${{ needs.merge-to-main.outputs.build_ref || needs.prep.outputs.sha }}
     secrets: inherit
 
   electron-submit:
     needs: [prep, merge-to-main, electron-release]
-    if: ${{ inputs.mode != 'Dry run' && inputs.mode != 'Skip submit' }}
+    if: ${{ needs.prep.outputs.channel == 'Stable' && needs.prep.outputs.mode != 'Dry run' && needs.prep.outputs.mode != 'Skip submit' }}
     uses: ./.github/workflows/electron.yml
     with:
       build_type: all
@@ -381,7 +483,7 @@ jobs:
 
   cask-commit-back:
     needs: [prep, electron-release]
-    if: ${{ inputs.mode != 'Dry run' }}
+    if: ${{ needs.prep.outputs.channel == 'Stable' && needs.prep.outputs.mode != 'Dry run' }}
     runs-on: blacksmith-2vcpu-ubuntu-2404
     permissions:
       contents: write
@@ -421,142 +523,37 @@ jobs:
           git commit -m "chore: bump Homebrew cask to $VERSION"
           git push origin HEAD:main
 
-  docs:
-    needs: [prep, merge-to-main]
-    if: ${{ always() && needs.merge-to-main.result == 'success' && inputs.mode != 'Overwrite release' }}
+  prune-betas:
+    needs: [prep, create-release]
+    if: ${{ always() && needs.prep.outputs.channel == 'Stable' && needs.create-release.result == 'success' && needs.prep.outputs.mode != 'Overwrite release' }}
     runs-on: blacksmith-2vcpu-ubuntu-2404
     steps:
-      - name: Checkout Termix
-        uses: actions/checkout@v7
-        with:
-          ref: ${{ needs.merge-to-main.outputs.build_ref }}
-          fetch-depth: 1
-          path: termix
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v7
-        with:
-          node-version-file: "termix/.nvmrc"
-          cache: "npm"
-          cache-dependency-path: termix/package-lock.json
-
-      - name: Generate OpenAPI spec
-        working-directory: termix
-        run: |
-          npm ci
-          npm run generate:openapi
-
-      - name: Checkout Docs repository
-        uses: actions/checkout@v7
-        with:
-          repository: Termix-SSH/Docs
-          ref: main
-          fetch-depth: 0
-          token: ${{ secrets.TERMIX_PAT }}
-          path: docs-repo
-
-      - name: Create docs release branch
-        working-directory: docs-repo
-        run: |
-          BRANCH="dev-${{ needs.prep.outputs.version }}"
-          if git ls-remote --exit-code origin "refs/heads/$BRANCH" >/dev/null 2>&1; then
-            echo "Reusing existing docs branch $BRANCH."
-            git checkout -B "$BRANCH" "origin/$BRANCH"
-          else
-            git checkout -B "$BRANCH"
-          fi
-
-      - name: Overwrite OpenAPI spec and regenerate API docs
-        working-directory: docs-repo
-        run: |
-          cp ../termix/openapi.json static/openapi.json
-          npm ci
-          npm run docusaurus clean-api-docs termix
-          npm run docusaurus gen-api-docs termix
-
-      - name: Commit and push docs branch
-        working-directory: docs-repo
-        run: |
-          git config user.name "LukeGus"
-          git config user.email "bugattiguy527@gmail.com"
-
-          if git diff --quiet; then
-            echo "No docs changes to commit."
-            exit 0
-          fi
-
-          if [ "${{ inputs.mode }}" = "Dry run" ]; then
-            echo "DRY RUN: would commit and push the following docs changes to dev-${{ needs.prep.outputs.version }}:"
-            git --no-pager diff --stat
-            exit 0
-          fi
-
-          git add -A
-          git commit -m "feat: update API docs for ${{ needs.prep.outputs.version }}"
-          git push origin "dev-${{ needs.prep.outputs.version }}"
-
-      - name: Open and squash-merge docs PR
-        if: ${{ inputs.mode != 'Dry run' }}
-        working-directory: docs-repo
+      - name: Delete this version's beta releases (tags stay)
         env:
           GH_TOKEN: ${{ secrets.TERMIX_PAT }}
         run: |
-          BRANCH="dev-${{ needs.prep.outputs.version }}"
-          if ! git ls-remote --exit-code origin "refs/heads/$BRANCH" >/dev/null 2>&1; then
-            echo "No docs branch pushed (nothing changed); skipping PR."
-            exit 0
-          fi
+          PREFIX="v${{ needs.prep.outputs.version }}-beta."
+          gh release list --repo ${{ github.repository }} --limit 200 --json tagName -q '.[].tagName' \
+            | grep -F "$PREFIX" | while read -r TAG; do
+              echo "Deleting release $TAG"
+              gh release delete "$TAG" --repo ${{ github.repository }} --yes || true
+            done
 
-          PR_NUMBER=$(gh pr list --repo Termix-SSH/Docs --head "$BRANCH" --base main --state open --json number -q '.[0].number' || true)
-          if [ -z "$PR_NUMBER" ]; then
-            PR_URL=$(gh pr create --repo Termix-SSH/Docs \
-              --base main --head "$BRANCH" \
-              --title "release-${{ needs.prep.outputs.version }}" \
-              --body "API docs for ${{ needs.prep.outputs.version }}")
-            PR_NUMBER=$(echo "$PR_URL" | grep -oE '[0-9]+$')
-          fi
-
-          if [ -z "$PR_NUMBER" ]; then
-            echo "Failed to find or create a PR for $BRANCH."
-            exit 1
-          fi
-
-          gh pr merge "$PR_NUMBER" --repo Termix-SSH/Docs --squash --admin
-
-  publish-youtube:
+  # The docs site reads the env catalog, API spec and download list from the
+  # newest stable release.
+  docs-refresh:
     needs: [prep, electron-release]
-    if: ${{ always() && inputs.mode != 'Dry run' && inputs.mode != 'Overwrite release' && needs.electron-release.result == 'success' }}
+    if: ${{ always() && needs.prep.outputs.channel == 'Stable' && needs.electron-release.result == 'success' && needs.prep.outputs.mode != 'Dry run' }}
     runs-on: blacksmith-2vcpu-ubuntu-2404
     steps:
-      - name: Checkout main
-        uses: actions/checkout@v7
-        with:
-          ref: main
-          fetch-depth: 1
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v7
-        with:
-          node-version-file: ".nvmrc"
-
-      - name: Set release video to public
+      - name: Tell the docs site
         env:
-          YOUTUBE_CLIENT_ID: ${{ secrets.YOUTUBE_CLIENT_ID }}
-          YOUTUBE_CLIENT_SECRET: ${{ secrets.YOUTUBE_CLIENT_SECRET }}
-          YOUTUBE_REFRESH_TOKEN: ${{ secrets.YOUTUBE_REFRESH_TOKEN }}
-        run: node scripts/publish-youtube.cjs
+          GH_TOKEN: ${{ secrets.TERMIX_PAT }}
+        run: gh api repos/Termix-SSH/Docs/dispatches -f event_type=core-released
 
   cleanup:
-    needs:
-      [
-        prep,
-        merge-to-main,
-        electron-release,
-        cask-commit-back,
-        docs,
-        publish-youtube,
-      ]
-    if: ${{ always() && (inputs.mode == 'Everything' || inputs.mode == 'Skip submit') && needs.merge-to-main.result == 'success' && needs.docs.result == 'success' }}
+    needs: [prep, merge-to-main, electron-release, cask-commit-back]
+    if: ${{ always() && needs.prep.outputs.channel == 'Stable' && (needs.prep.outputs.mode == 'Everything' || needs.prep.outputs.mode == 'Skip submit') && needs.merge-to-main.result == 'success' }}
     runs-on: blacksmith-2vcpu-ubuntu-2404
     steps:
       - name: Checkout repository
@@ -571,10 +568,3 @@ jobs:
         run: |
           git push https://x-access-token:${{ secrets.TERMIX_PAT }}@github.com/${{ github.repository }}.git \
             --delete "${{ needs.prep.outputs.dev_branch }}" || true
-
-      - name: Delete dev branch in Docs
-        env:
-          GH_TOKEN: ${{ secrets.TERMIX_PAT }}
-        run: |
-          git push https://x-access-token:${{ secrets.TERMIX_PAT }}@github.com/Termix-SSH/Docs.git \
-            --delete "dev-${{ needs.prep.outputs.version }}" || true
diff --git a/.gitignore b/.gitignore
index 458fe27ac..b2496f533 100644
--- a/.gitignore
+++ b/.gitignore
@@ -15,16 +15,15 @@ coverage
 
 # Plugin build output. termix-plugin build writes it, the packaged server
 # gets its copy under dist/plugins.
-/plugins/*/dist/
 *.tmxplug
 *.tmxplug.sig
 termix-plugin-signing.key
 /src/**/*.js
 
-.vscode/*
-!.vscode/settings.json
-.idea
+.vscode/
+.idea/
 .DS_Store
+Thumbs.db
 *.suo
 *.ntvs*
 *.njsproj
diff --git a/.prettierignore b/.prettierignore
index 9d9f404b7..11fe2e1de 100644
--- a/.prettierignore
+++ b/.prettierignore
@@ -1,25 +1,14 @@
 build
 coverage
 dist
+node_modules
+package-lock.json
+
 dist-ssr
 release
-
-node_modules
-src/mcp-server/node_modules
-package-lock.json
-pnpm-lock.yaml
-yarn.lock
-
 db
-
-.env
-
 *.min.js
 *.min.css
 openapi.json
-
-# Generated by drizzle-kit; formatting is the tool's own
 drizzle/
-
-# Helm templates contain Go template syntax, not plain YAML
-charts/*/templates/
+src/ui/settings/settings-search-index.ts
diff --git a/.vscode/settings.json b/.vscode/settings.json
deleted file mode 100644
index dff3ab474..000000000
--- a/.vscode/settings.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "editor.formatOnSave": true,
-  "editor.defaultFormatter": "esbenp.prettier-vscode",
-  "prettier.prettierPath": "./node_modules/prettier",
-  "editor.codeActionsOnSave": {
-    "source.fixAll.eslint": "explicit"
-  },
-  "eslint.validate": [
-    "javascript",
-    "javascriptreact",
-    "typescript",
-    "typescriptreact"
-  ],
-  "files.eol": "\n",
-  "files.insertFinalNewline": true,
-  "files.trimTrailingWhitespace": true,
-  "[markdown]": {
-    "files.trimTrailingWhitespace": false
-  },
-  "typescript.tsdk": "node_modules/typescript/lib",
-  "typescript.enablePromptUseWorkspaceTsdk": true
-}
diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 000000000..ec8a614dc
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,34 @@
+# Changelog
+
+## 26.10.0
+
+### Added
+
+- Plugins. Every feature beyond hosts, credentials and sharing is now its own plugin with its own repo, and you pick which ones you want
+- A Plugins tab to install, update, pin, turn off and remove plugins from the official registry, with release notes and a beta channel per plugin
+- Developer mode to install a plugin from a file, and a plugin SDK on npm to build your own
+- The community plugin registry is open for submissions. Termix can install community plugins in a later update
+- Redesigned UI with a Manage tab for hosts and credentials and a Settings tab with search
+- New full screen onboarding where you choose which plugins to start with
+- Beta channel for Termix itself in Settings > Updates
+- Docs links on every settings page, in the Plugins tab, in plugin settings and in the command palette
+- Plugins can link their own docs and list the environment variables they read, shown on their page in the Plugins tab
+- Report a bug links that open a prefilled issue in the right repo
+- `TRUSTED_PROXIES` to choose which proxies nginx takes client IPs from
+
+### Changed
+
+- Termix now uses calendar versions (year, month, patch), starting with 26.10.0
+- Redesigned host defaults with admin, user and folder levels
+- Simpler host status: online or offline, kept live without a refresh
+- Bug reports and feature requests now go to each repo instead of the Support repo
+
+### Fixed
+
+- A lot of bugs across the app, the desktop app and every plugin
+- Several security issues reported through GitHub advisories
+
+### Removed
+
+- Downgrading to 2.8 is no longer supported. A 2.8 install has to start 2.9 once before upgrading
+- The donation reminder popup
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 9db7959d3..0e97834e3 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -1,8 +1,10 @@
 # Contributing
 
+Termix is a small core plus plugins. This repo is the core: hosts, credentials, users, sharing, sessions, the app shell and the plugin runtime. Every other feature lives in its own `Plugin-<Name>` repo. If your change is about the terminal, file manager, Docker or any other plugin feature, open it in that plugin's repo instead.
+
 ## Prerequisites
 
-- [Node.js](https://nodejs.org/en/download/) (built with v24)
+- [Node.js](https://nodejs.org/en/download/) 22.12 or newer (built with v24)
 - [NPM](https://docs.npmjs.com/downloading-and-installing-node-js-and-npm)
 - [Git](https://git-scm.com/downloads)
 
@@ -19,88 +21,55 @@
 
 ## Running the development server
 
-Run the following commands:
-
 ```sh
 npm run dev
-npm run dev:backend
 ```
 
-This will start the backend and the frontend Vite server. You can access Termix by going to `http://localhost:5174/`.
+This builds everything, starts the backend and then the Vite server at `http://localhost:5173/`. Backend changes restart the backend, and plugin changes in `../Termix-Plugins` rebuild and reload that plugin. `npm run dev:electron` does the same with the desktop app, and `npm run dev -- --help` lists the other options.
 
-## Contributing
+## Useful commands
 
-1. **Fork the repository**: Click the "Fork" button at the top right of
-   the [repository page](https://github.com/Termix-SSH/Termix).
-2. **Create a new branch**:
+```sh
+npm run test         # run the test suite
+npm run type-check   # type-check the core
+npm run lint         # lint and the other repo checks
+npm run format       # format the code with Prettier
+```
+
+## Making a change
+
+1. **Fork the repository**: Click "Fork" at the top right of the [repository page](https://github.com/Termix-SSH/Termix).
+2. **Create a branch**:
    ```sh
    git checkout -b feature/my-new-feature
    ```
-3. **Make your changes**: Implement your feature, fix, or improvement.
+3. **Make your changes** and add or update tests for them.
 4. **Commit your changes**:
    ```sh
-   git commit -m "Feature request my new feature"
+   git commit -m "feat: add my new feature"
    ```
 5. **Push to your fork**:
    ```sh
-   git push origin feature/my-feature-request
+   git push origin feature/my-new-feature
    ```
-6. **Open a pull request**: Go to the original repository and create a PR with a clear description.
+6. **Open a pull request** against the current `dev-*` branch with a clear description.
 
 ## Guidelines
 
-- Follow the existing code style. Use Tailwind CSS with shadcn components.
-- Use the below color scheme with the respective CSS variable placed in the `className` of a div/component.
-- Place all API routes in the `main-axios.ts` file. Updating the `openapi.json` is unneeded.
-- Include meaningful commit messages.
-- Link related issues when applicable.
-- `MobileApp.tsx` renders when the users screen width is less than 768px, otherwise it loads the usual `DesktopApp.tsx`.
+- Follow the existing code style. The frontend uses React, Tailwind CSS and shadcn components in `src/ui/`.
+- Never hardcode text. Use `t()` and add the English string to `src/ui/locales/en.json`. That's the only locale file you need to update. Other languages are translated automatically, and if an automatic translation is wrong you can fix it in that language's file.
+- Keep the UI flat and square. Avoid rounded corners on panels, cards and dialogs.
+- Use the theme variables (like `var(--bg-base)` and `var(--text-primary)`) instead of fixed colors.
+- There is one component tree for desktop and mobile. Use `src/ui/hooks/use-mobile.ts` for layout changes.
+- Core never names a plugin. If core needs something from a plugin, add a slot, action or component id that the plugin fills.
+- Tests live in `src/backend/tests/` and `src/ui/tests/`, mirroring the source tree. `npm run test` must pass.
+- Every API route gets an OpenAPI JSDoc comment like the routes around it.
+- Use short commit messages that start with `feat:`, `fix:` or `chore:`, and link related issues.
 
-## Color Scheme
+## Building a plugin
 
-### Background Colors
-
-| CSS Variable                  | Color Value | Usage                       | Description                              |
-| ----------------------------- | ----------- | --------------------------- | ---------------------------------------- |
-| `--color-dark-bg`             | `#18181b`   | Main dark background        | Primary dark background color            |
-| `--color-dark-bg-darker`      | `#0e0e10`   | Darker backgrounds          | Darker variant for panels and containers |
-| `--color-dark-bg-darkest`     | `#09090b`   | Darkest backgrounds         | Darkest background (terminal)            |
-| `--color-dark-bg-light`       | `#141416`   | Light dark backgrounds      | Lighter variant of dark background       |
-| `--color-dark-bg-very-light`  | `#101014`   | Very light dark backgrounds | Very light variant of dark background    |
-| `--color-dark-bg-panel`       | `#1b1b1e`   | Panel backgrounds           | Background for panels and cards          |
-| `--color-dark-bg-panel-hover` | `#232327`   | Panel hover states          | Background for panels on hover           |
-
-### Element-Specific Backgrounds
-
-| CSS Variable             | Color Value | Usage              | Description                                   |
-| ------------------------ | ----------- | ------------------ | --------------------------------------------- |
-| `--color-dark-bg-input`  | `#222225`   | Input fields       | Background for input fields and form elements |
-| `--color-dark-bg-button` | `#23232a`   | Button backgrounds | Background for buttons and clickable elements |
-| `--color-dark-bg-active` | `#1d1d1f`   | Active states      | Background for active/selected elements       |
-| `--color-dark-bg-header` | `#131316`   | Header backgrounds | Background for headers and navigation bars    |
-
-### Border Colors
-
-| CSS Variable                 | Color Value | Usage           | Description                              |
-| ---------------------------- | ----------- | --------------- | ---------------------------------------- |
-| `--color-dark-border`        | `#303032`   | Default borders | Standard border color                    |
-| `--color-dark-border-active` | `#2d2d30`   | Active borders  | Border color for active elements         |
-| `--color-dark-border-hover`  | `#434345`   | Hover borders   | Border color on hover states             |
-| `--color-dark-border-light`  | `#5a5a5d`   | Light borders   | Lighter border color for subtle elements |
-| `--color-dark-border-medium` | `#373739`   | Medium borders  | Medium weight border color               |
-| `--color-dark-border-panel`  | `#222224`   | Panel borders   | Border color for panels and cards        |
-
-### Interactive States
-
-| CSS Variable             | Color Value | Usage             | Description                                   |
-| ------------------------ | ----------- | ----------------- | --------------------------------------------- |
-| `--color-dark-hover`     | `#2d2d30`   | Hover states      | Background color for hover effects            |
-| `--color-dark-active`    | `#2a2a2c`   | Active states     | Background color for active elements          |
-| `--color-dark-pressed`   | `#1a1a1c`   | Pressed states    | Background color for pressed/clicked elements |
-| `--color-dark-hover-alt` | `#2a2a2d`   | Alternative hover | Alternative hover state color                 |
+Start from the [plugin template](https://github.com/Termix-SSH/Termix-Plugin-Template). It talks to Termix only through `@termix-ssh/plugin-sdk` and has its own build, test and release setup.
 
 ## Support
 
-If you need help or want to request a feature with Termix, visit the [Issues](https://github.com/Termix-SSH/Support/issues) page, log in, and press `New Issue`.
-Please be as detailed as possible in your issue, preferably written in English. You can also join the [Discord](https://discord.gg/jVQGdvHDrf) server and visit the support
-channel, however, response times may be longer.
+Bugs and ideas for Termix itself go in [this repo](https://github.com/Termix-SSH/Termix/issues/new/choose). Plugin problems go in that plugin's own `Plugin-<Name>` repo. Please be as detailed as possible, preferably in English. You can also ask in the [Discord](https://discord.gg/jVQGdvHDrf) server.
diff --git a/Casks/termix.rb b/Casks/termix.rb
index 17b04a230..e32216bb3 100644
--- a/Casks/termix.rb
+++ b/Casks/termix.rb
@@ -2,9 +2,9 @@ cask "termix" do
   version "2.9.2"
   sha256 "808d876b37ab802c511e964c232619b1ba2949ec39ccd2b1f97e264544739172"
 
-  url "https://github.com/Termix-SSH/Termix/releases/download/release-#{version}-tag/termix_macos_universal_dmg.dmg"
+  url "https://github.com/Termix-SSH/Termix/releases/download/v#{version}/termix_macos_universal_dmg.dmg"
   name "Termix"
-  desc "Web-based server management platform with SSH terminal, tunneling, and file editing"
+  desc "Self-hosted, plugin-based server management"
   homepage "https://github.com/Termix-SSH/Termix"
 
   livecheck do
diff --git a/FUNDING.json b/FUNDING.json
deleted file mode 100644
index 6ec36892b..000000000
--- a/FUNDING.json
+++ /dev/null
@@ -1,7 +0,0 @@
-{
-  "drips": {
-    "ethereum": {
-      "ownedBy": "0x67e0C779119D9BcC2187564A66B80a58767d05d1"
-    }
-  }
-}
diff --git a/LICENSE b/LICENSE
index 1f0bd1d66..2cc094d20 100644
--- a/LICENSE
+++ b/LICENSE
@@ -1,13 +1,203 @@
 Copyright 2026 Luke Gustafson
 
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
 
-    http://www.apache.org/licenses/LICENSE-2.0
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
 
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/README.md b/README.md
index e8e01fa88..43975fd02 100644
--- a/README.md
+++ b/README.md
@@ -4,24 +4,7 @@
 
 <h1>Termix</h1>
 
-<p>Self-hosted server management, from SSH and remote desktop to automations</p>
-
-<p>
-  English ·
-  <a href="docs/readme/README-CN.md">中文</a> ·
-  <a href="docs/readme/README-JA.md">日本語</a> ·
-  <a href="docs/readme/README-KO.md">한국어</a> ·
-  <a href="docs/readme/README-FR.md">Français</a> ·
-  <a href="docs/readme/README-DE.md">Deutsch</a> ·
-  <a href="docs/readme/README-ES.md">Español</a> ·
-  <a href="docs/readme/README-PT.md">Português</a> ·
-  <a href="docs/readme/README-RU.md">Русский</a> ·
-  <a href="docs/readme/README-AR.md">العربية</a> ·
-  <a href="docs/readme/README-HI.md">हिन्दी</a> ·
-  <a href="docs/readme/README-TR.md">Türkçe</a> ·
-  <a href="docs/readme/README-VI.md">Tiếng Việt</a> ·
-  <a href="docs/readme/README-IT.md">Italiano</a>
-</p>
+<p>Self-hosted, plugin-based server management</p>
 
 <p>
   <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
@@ -35,233 +18,81 @@
   <a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
 </p>
 
-<br />
-
-Termix is free and open source. If you find it useful, consider [donating](https://donate.termix.site/) to help cover server costs and development time.
-
-<br />
-
-<img src="./docs/repo-images/Termix Header.png" alt="Termix Banner" width="900" />
-
-<br />
-<br />
-
-<p>
-  <img src="docs/repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
-  <br />
-  <sub>Achieved on September 1st, 2025</sub>
-</p>
-
 </div>
 
 <br />
 
 ## Overview
 
-Termix is a free, open source, self-hosted platform for managing your servers. It puts SSH terminals, remote desktops (RDP, VNC, Telnet), file transfers, tunnels, Docker, metrics, and automations in one place, on web, desktop, and mobile. It is a self-hosted alternative to Termius that stays free forever.
+Termix is a free, open source, self-hosted platform for managing your servers, built on plugins. The core is small. It keeps your hosts, credentials, users, sharing and sessions. Everything else, like the SSH terminal, remote desktop, file manager, Docker and metrics, is a plugin you can turn on, turn off or remove.
+
+It runs on web, desktop and mobile, and it is a self-hosted alternative to Termius that stays free forever.
 
 <br />
 
-## Features
+## Try the Demo
 
-<table>
-<tr>
-<td width="50%" valign="top">
-
-**SSH Terminal:**
-A full terminal with browser-like tabs and split screen, up to 6 panels at once. Pick your theme, font, and colors. A toolbar sits above each session with live CPU, memory, and disk, plus quick links to that host's files, Docker, tunnels, and metrics.
-
-</td>
-<td width="50%" valign="top">
-
-**Remote Desktop:**
-RDP, VNC, and Telnet in the browser, in tabs and split screen like any other session. Includes a file browser for RDP drives and drag-and-drop upload. On Windows desktop you can also open a host in the native RDP client.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**SSH Tunnels:**
-Local, remote, and dynamic SOCKS forwarding with auto reconnect and health checks. Client-to-server tunnels on the desktop app are stored on that machine, and you can save presets to the server to move a setup to another client.
-
-</td>
-<td width="50%" valign="top">
-
-**File Manager:**
-Browse, edit, upload, download, rename, move, and delete files over SFTP, with sudo support. View and edit code, images, audio, and video. Copy files straight from one server to another in a dedicated transfer tab, with the fastest route picked for you and transfers checked for integrity. The desktop app also has a side-by-side local and remote view.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Docker and Podman:**
-Start, stop, pause, and remove containers, watch their stats, and open a shell inside one. Works with both Docker and Podman. It is not meant to replace Portainer or Dockge, just to manage containers you already have.
-
-</td>
-<td width="50%" valign="top">
-
-**Host Manager:**
-Save and organize hosts with tags and nested folders you can name and color. Reuse saved credentials across hosts, deploy SSH keys automatically, group hosts under a parent host, bulk edit and export, and use Quick Connect for one-off connections you do not want to save.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Host Metrics:**
-CPU, memory, disk, network, temperature, NVIDIA GPU, uptime, processes, ports, logins, and system info on most Linux servers, with history graphs. Manager cards let you handle services, cron jobs, packages, users, firewall rules, WireGuard, Tailscale, SSL certs, logs, and health checks without leaving Termix.
-
-</td>
-<td width="50%" valign="top">
-
-**Automations:**
-Pick a trigger, then say what should happen. Triggers include a metric crossing a threshold, a host going up or down, a health check changing, a schedule, a container event, or an incoming webhook. Steps can run commands and snippets, control containers and tunnels, wake a host, call a URL, wait, branch on a condition, run another automation, and notify you over ntfy, Discord, or a webhook. Test runs let you try it safely first.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Fleets:**
-Group hosts into a fleet by picking them or with tag rules, so new hosts join on their own. Run one command on every host at once, push and pull files across all of them, install packages, and collect an inventory of OS, kernel, arch, and uptime.
-
-</td>
-<td width="50%" valign="top">
-
-**AI Assistant:**
-Optional, and off until you turn it on. Connect OpenAI, Anthropic, Gemini, Ollama, or any OpenAI compatible endpoint and ask about your setup. It reads hosts, fleets, snippets, and alerts, and proposes changes for you to approve instead of making them. It can never touch credentials, users, or settings. Admins can leave it off for the whole instance, and you can hide it during setup.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Login and Users:**
-Local accounts plus OIDC, LDAP, GitHub, and Google sign-in, with 2FA (TOTP), passkeys (WebAuthn), and trusted devices. Admins can manage users, map OIDC groups to roles, see every active session across platforms, and revoke them. Link your local and OIDC accounts together, and read the audit log of what everyone did.
-
-</td>
-<td width="50%" valign="top">
-
-**Roles and Sharing:**
-Create roles and share hosts with users or roles at four levels: connect, view, edit, and manage. Works with every auth type and every protocol, and you can override the credentials used for a shared host.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Alerts:**
-Set rules on host metrics like CPU, memory, and disk, and get notified over ntfy, Discord, or a webhook when they fire. See firing and resolved alerts in a history log, and dismiss the ones you do not care about.
-
-</td>
-<td width="50%" valign="top">
-
-**Homepage:**
-A drag-and-drop widget grid you build yourself. Widgets for host status, pings, service links, bookmarks, search, clocks, calendars, countdowns, notes, RSS, weather, images, iframes, Docker, tunnels, metrics charts, custom APIs, and even a live terminal.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Snippets and Tools:**
-Save commands you run often and fire them off in one click, with variables for the host and your own inputs. Run a single command across every open terminal, and search your command history with autocomplete.
-
-</td>
-<td width="50%" valign="top">
-
-**Session Sharing:**
-Share a live terminal, RDP, VNC, or Telnet session in real time. Send a link anyone can join without an account, or share with a specific Termix user, in read-only or read-write mode. Shares can expire on their own or be revoked, and can be turned off globally or per host.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Session Recording and Logs:**
-Record terminal, RDP, and VNC sessions and play them back later. Download plain text logs of a session, and check the connection log to see exactly what happened during a connection.
-
-</td>
-<td width="50%" valign="top">
-
-**Serial Connections:**
-Talk to serial devices like routers, switches, and microcontrollers from the browser or desktop app. Set baud rate, data bits, stop bits, and parity. Uses the Web Serial API in supported browsers, or a native backend in the desktop app.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Tailscale:**
-Pull devices from your tailnet to add them as hosts in a couple of clicks, and connect with Tailscale SSH so your tailnet ACLs handle access and no credentials are stored. Headscale and custom endpoints work too.
-
-</td>
-<td width="50%" valign="top">
-
-**Proxmox:**
-Import hosts straight from a Proxmox instance, and watch node and guest stats, including CPU, memory, and storage, in their own tab.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Workspaces and Tabs:**
-Save a set of tabs with their split layout and reopen the whole thing in one click. Termix also remembers your last session, so your tabs come back across refreshes and devices.
-
-</td>
-<td width="50%" valign="top">
-
-**Command Line Interface:**
-A `termix` CLI for your shell and your scripts. Open terminals, run a command on one host or a whole fleet, move files over SFTP, and manage hosts, snippets, and credentials. Install with `npm install -g @termix-ssh/cli` or grab a standalone binary. See the [CLI docs](https://docs.termix.site/cli).
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Security:**
-Passwords, keys, and other secrets are encrypted per user, and the database files themselves can be encrypted on disk. See the [docs](https://docs.termix.site/features/authentication/security/) for how it works.
-
-</td>
-<td width="50%" valign="top">
-
-**Languages:**
-Around 30 languages built in, managed through [Crowdin](https://docs.termix.site/translations).
-
-</td>
-</tr>
-</table>
+Want to see it before you install it? Try the demo at [demo.termix.site](https://demo.termix.site/). Any username and password works.
 
 <br />
 
-<details>
-<summary><b>More features</b></summary>
+## Core
+
+What every Termix install has, with or without plugins:
+
+- **Hosts:** Save hosts in nested folders with tags and parent hosts, bulk edit, import and export, and use Quick Connect for one-off connections
+- **Credentials:** Reuse saved passwords and keys across hosts, with host defaults you can set for the server, a user or a folder
+- **Sharing and Roles:** Share hosts, credentials and folders with users or roles at four levels: connect, view, edit and manage
+- **Accounts:** Local accounts, sessions you can see and revoke, trusted devices, API keys and an audit log
+- **Security:** Passwords, keys and other secrets are encrypted per user, and the database can be encrypted on disk
+- **Desktop Sync:** The desktop app runs on its own and can link to a Termix server to keep an offline copy of your account
+- **Interface:** Tabs and split screen, a command palette (double tap left shift), rebindable shortcuts, themes, branding and around 30 languages
+- **Databases:** SQLite by default, with PostgreSQL and MySQL supported too
+
 <br />
 
-- **Dashboard** - Your servers at a glance, with cards you arrange yourself
-- **Network Graph** - See your homelab drawn out from your hosts, with live status
-- **Tmux Monitor** - Browse tmux sessions, windows, and panes, with previews and search
-- **API Keys** - User-scoped keys with expiry dates for scripts and CI
-- **Export and Import** - Move hosts, credentials, and file manager data in and out
-- **Automatic SSL** - Certificates generated and renewed for you, with HTTPS redirects, or bring your own
-- **Databases** - SQLite by default, with PostgreSQL and MySQL supported too
-- **Modern UI** - Clean React interface that works on desktop and mobile, with themes like light, dark, and Dracula. Any connection can open full screen from a URL
-- **Command Palette** - Double tap left shift to jump to a host from the keyboard
-- **Keyboard Shortcuts** - Move between tabs, close tabs, and more, all rebindable
-- **Wake-on-LAN** - Wake a machine from Termix or from an automation step
-- **Trusted Proxy Auth** - Let a reverse proxy handle sign-in and pass the user through
-- **White Label** - Admins can rebrand the instance with their own name, logo, and colors
-- **Web Endpoints** - Open a host's own web UI, like a router admin page, embedded inside Termix instead of a separate tab
-- **Collaboration Rooms** - Persistent rooms where a group can jump between sessions together, with a presenter stage and invites
-- **SSH Feature Rich** - Jump hosts, Warpgate, TOTP prompts, SOCKS5, host key verification, password autofill, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, terminal logging, agent forwarding, Bitwarden SSH agent, HashiCorp Vault SSH signing, Step CA, 1Password Connect, and more
-- **Termix ID** - A built-in take on sshid.io. Claim a handle, publish your public keys at a resolver URL, and issue SSH certificates from the built-in CA
-- **Command History Autosuggestions** - Inline suggestions in the terminal as you type, based on your command history
-- **Desktop Standalone and Sync** - The desktop app runs on its own with a local backend and database, and can optionally sync with a Termix server
+## Plugins
 
-</details>
+Plugins add everything else. The official ones ship with Termix, and admins can install, update or remove plugins from the Plugins tab. Each plugin has its own repo.
+
+| Plugin                                                                      | What it does                                                                                                |
+| --------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------- |
+| [ACME Certificates](https://github.com/Termix-SSH/Plugin-ACME-SSL)          | Gets the Termix HTTPS certificate from Let's Encrypt or any ACME provider and renews it for you.            |
+| [AI Assistant](https://github.com/Termix-SSH/Plugin-AI)                     | An AI assistant that reads your setup and proposes changes for you to approve.                              |
+| [Alerts](https://github.com/Termix-SSH/Plugin-Alerts)                       | One inbox for every alert in Termix, with delivery to webhooks, ntfy, Discord and email.                    |
+| [Automations](https://github.com/Termix-SSH/Plugin-Automations)             | Run steps on your hosts on a schedule or when something happens.                                            |
+| [Docker](https://github.com/Termix-SSH/Plugin-Docker)                       | Manage Docker and Podman containers on your hosts over SSH, with logs, stats and a console.                 |
+| [File Manager](https://github.com/Termix-SSH/Plugin-File-Manager)           | Browse, edit and move files over SFTP, including straight from one server to another.                       |
+| [Fleets](https://github.com/Termix-SSH/Plugin-Fleets)                       | Group hosts into fleets and run commands, package actions and file transfers on all of them at once.        |
+| [HashiCorp Vault](https://github.com/Termix-SSH/Plugin-Vault)               | Connect to hosts with short-lived SSH certificates signed by HashiCorp Vault.                               |
+| [Homepage](https://github.com/Termix-SSH/Plugin-Homepage)                   | A drag and drop widget page for your servers and services, plus service links for the dashboard.            |
+| [Host Metrics](https://github.com/Termix-SSH/Plugin-Host-Metrics)           | Live CPU, memory, disk, network and GPU stats, plus tools to manage your hosts.                             |
+| [LDAP](https://github.com/Termix-SSH/Plugin-LDAP)                           | Sign in with your LDAP or Active Directory username and password.                                           |
+| [Network Topology](https://github.com/Termix-SSH/Plugin-Network-Topology)   | Draws your hosts and the links between them as a live, interactive graph.                                   |
+| [OPKSSH](https://github.com/Termix-SSH/Plugin-OPKSSH)                       | Connect to hosts with short-lived OpenPubkey SSH certificates after signing in with your identity provider. |
+| [Passkeys](https://github.com/Termix-SSH/Plugin-WebAuthn)                   | Sign in with a passkey or security key instead of a password.                                               |
+| [Proxmox](https://github.com/Termix-SSH/Plugin-Proxmox)                     | Import Proxmox VE guests as hosts, keep them in sync and watch node stats.                                  |
+| [Remote Desktop](https://github.com/Termix-SSH/Plugin-Remote-Desktop)       | RDP, VNC and Telnet sessions in your browser, with clipboard, file transfer, sharing and recording.         |
+| [Secret Sources](https://github.com/Termix-SSH/Plugin-Secret-Sources)       | Pull host passwords and keys from 1Password when you connect instead of storing them in Termix.             |
+| [Serial](https://github.com/Termix-SSH/Plugin-Serial)                       | Open a serial console to a router, switch or other device plugged into your computer.                       |
+| [Session Recording](https://github.com/Termix-SSH/Plugin-Session-Recording) | Record terminal and remote desktop sessions and play them back or download them later.                      |
+| [Session Sharing](https://github.com/Termix-SSH/Plugin-Session-Sharing)     | Share live sessions by link or with another user, and present sessions to a group in meeting rooms.         |
+| [Single sign-on](https://github.com/Termix-SSH/Plugin-SSO)                  | Sign in with any OpenID Connect provider, GitHub or Google.                                                 |
+| [Snippets](https://github.com/Termix-SSH/Plugin-Snippets)                   | Save the commands you run often and run them in a terminal or on many hosts in one click.                   |
+| [SSH Terminal](https://github.com/Termix-SSH/Plugin-SSH-Terminal)           | SSH terminal sessions with tabs, split screen, history, macros and a local terminal in the desktop app.     |
+| [Step CA](https://github.com/Termix-SSH/Plugin-Step-CA)                     | Connect to hosts with short-lived SSH certificates from a smallstep step-ca server.                         |
+| [Tailscale](https://github.com/Termix-SSH/Plugin-Tailscale)                 | Add tailnet devices as hosts and connect with Tailscale SSH.                                                |
+| [Termix Identity](https://github.com/Termix-SSH/Plugin-Termix-Identity)     | Publish your SSH public keys under a public handle and run your own SSH certificate authority.              |
+| [Tmux Monitor](https://github.com/Termix-SSH/Plugin-Tmux-Monitor)           | Browse and control tmux sessions, windows and panes across your hosts.                                      |
+| [TOTP](https://github.com/Termix-SSH/Plugin-TOTP)                           | Two-factor sign in with a code from an authenticator app, with backup codes.                                |
+| [Tunnels](https://github.com/Termix-SSH/Plugin-Tunnels)                     | SSH port forwarding that reconnects on its own, plus client tunnels from the desktop app.                   |
+| [Usage Statistics](https://github.com/Termix-SSH/Plugin-Telemetry)          | Sends a small anonymous daily report so we can see how Termix is used.                                      |
+| [Wake-on-LAN](https://github.com/Termix-SSH/Plugin-Wake-On-LAN)             | Wake sleeping machines by sending a Wake-on-LAN packet to their MAC address.                                |
+| [Warpgate](https://github.com/Termix-SSH/Plugin-Warpgate)                   | Connect to hosts through a Warpgate SSH bastion.                                                            |
+| [Web Endpoint](https://github.com/Termix-SSH/Plugin-Web-Endpoint)           | Open a host's web UI inside Termix, directly or over an SSH tunnel.                                         |
+| [Workspaces](https://github.com/Termix-SSH/Plugin-Workspaces)               | Save your open tabs and split layouts and reopen them in one click.                                         |
+
+Want to build your own? Start from the [plugin template](https://github.com/Termix-SSH/Termix-Plugin-Template). Plugins you can install are listed in the [registry](https://github.com/Termix-SSH/Termix-Registry). Its community registry is open for submissions now, and Termix will be able to install community plugins in a later update. See [submitting a plugin](https://docs.termix.site/develop/community-registry).
 
 <br />
 
@@ -278,14 +109,14 @@ Around 30 languages built in, managed through [Crowdin](https://docs.termix.site
 </tr>
 <tr>
 <td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
-<td>Portable · MSI Installer · Chocolatey</td>
+<td>Portable · EXE and MSI Installer · Chocolatey</td>
 </tr>
 <tr>
-<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
+<td align="center"><b>Linux</b> <sub>x64/arm64/armv7l</sub></td>
 <td>Portable · AUR · AppImage · Deb · Flatpak</td>
 </tr>
 <tr>
-<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
+<td align="center"><b>macOS</b> <sub>Universal/x64/arm64, v12.0+</sub></td>
 <td>Apple App Store · DMG · Homebrew</td>
 </tr>
 <tr>
@@ -302,18 +133,14 @@ Around 30 languages built in, managed through [Crowdin](https://docs.termix.site
 
 ## Installation
 
-Visit the [Termix Docs](https://docs.termix.site/install) for full installation instructions across all platforms.
+Visit the [Termix Docs](https://docs.termix.site/install) for full install steps on every platform.
 
-Deploying to Kubernetes? The Helm chart is in `charts/termix`, and setup instructions
-covering Ingress, Traefik, Argo CD, GitHub Actions, and GitLab CI are at
-[docs.termix.site/install/server/kubernetes](https://docs.termix.site/install/server/kubernetes).
-
-Sample Docker Compose file (you can omit `guacd` and the network if you don't plan on using remote desktop features):
+Sample Docker Compose file (you can leave out `guacd` and the network if you don't plan to use the Remote Desktop plugin):
 
 ```yaml
 services:
   termix:
-    image: ghcr.io/lukegus/termix:latest
+    image: ghcr.io/termix-ssh/termix:latest
     container_name: termix
     restart: unless-stopped
     ports:
@@ -322,6 +149,10 @@ services:
       - termix-data:/app/data
     environment:
       PORT: "8080"
+      GUACD_HOST: "guacd"
+      GUACD_TUNNEL_HOST: "termix"
+      GUACD_RECORDING_PATH: "/termix-data/session_recordings/guacamole"
+      GUACD_DRIVE_PATH: "/termix-data/rdp-drive"
     depends_on:
       - guacd
     networks:
@@ -331,8 +162,8 @@ services:
     image: guacamole/guacd:1.6.0
     container_name: guacd
     restart: unless-stopped
-    ports:
-      - "4822:4822"
+    volumes:
+      - termix-data:/termix-data
     networks:
       - termix-net
 
@@ -345,37 +176,17 @@ networks:
     driver: bridge
 ```
 
-### Command Line Interface
-
-Termix also has a CLI, so you can manage your servers from a terminal and use Termix in your own scripts.
-
-```bash
-npm install -g @termix-ssh/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-It can open terminals, run a command on one host or a whole fleet, move files over SFTP, and manage hosts, snippets and credentials. Full documentation is at [docs.termix.site/cli](https://docs.termix.site/cli).
-
 ### Cloud Hosting
 
-You can run the Termix server on a VPS instead of inside your own network. If Termix runs on the network it manages, an outage takes Termix down with it, right when you need it to fix things. Running it elsewhere keeps it reachable, gives you a static IP, and lets you get in from anywhere without a VPN or port forward.
+You can run Termix on a VPS instead of inside your own network. If Termix runs on the network it manages, an outage takes Termix down with it, right when you need it to fix things. Running it somewhere else keeps it reachable, gives you a static IP and lets you get in from anywhere without a VPN or port forward.
 
-[GINERNET](https://docs.termix.site/install/ginernet) sponsors Termix, and the docs have a step by step guide for deploying to their VPS platform.
-
-<br />
-
-## Telemetry
-
-Termix sends a small anonymous report once a day so I can see how many instances are running and which features get used. It contains a random instance ID, the app version, and how many users and hosts you have. It can also include your platform (OS, architecture, Node.js version, database type, and whether you run Docker, the desktop app or a plain server), how often each kind of tab was opened and how many SSH logins happened, and which built-in features are running. It never contains usernames, hostnames, IP addresses, credentials, or anything else that identifies you or your servers.
-
-It is on by default. Turn it off, or choose what it includes, in Admin Settings under Usage Statistics, where you can also preview the exact report. Each user can leave out their own feature usage in their profile. Setting `ENABLE_TELEMETRY=false` turns it off and locks the switch.
+[GINERNET](https://docs.termix.site/install/ginernet) sponsors Termix, and the docs have a step by step guide for their VPS platform.
 
 <br />
 
 ## Donate
 
-Termix is free and open source with no subscriptions or paid plans. If you find it useful, consider donating to help cover server costs, domains, and development time. Donations also help fund the time to research and learn what's needed to build features like SAML, Kubernetes, and Agent support. Track progress and donate below.
+Termix is free and open source with no subscriptions or paid plans. If you find it useful, consider donating to help cover server costs, domains and development time.
 
 [Donate](https://donate.termix.site/)
 
@@ -435,70 +246,16 @@ Interested in a paid placement to support development? Email [mail@termix.site](
 
 ## Support
 
-Need help or want to request a feature? Open a [new issue](https://github.com/Termix-SSH/Support/issues) and add as much detail as you can, in English if possible. You can also ask in the support channel on [Discord](https://discord.gg/jVQGdvHDrf), though replies there can take longer.
+Bugs and ideas for Termix itself (login, hosts, credentials, sharing, sync, the app and desktop app) go in this repo: [report a bug](https://github.com/Termix-SSH/Termix/issues/new?template=bug_report.yml) or [request a feature](https://github.com/Termix-SSH/Termix/issues/new?template=feature_request.yml).
 
-<br />
+Every plugin has its own repo, so a problem with the terminal, file manager, Docker, remote desktop or any other plugin goes in that plugin's repo (see the table above, or use Report an issue on the plugin's page in the app, which fills in your versions for you). Not sure where it goes? Open it here and it will be moved.
 
-## Screenshots
+You need to be logged in to GitHub. Please be as detailed as possible, preferably in English.
 
-<div align="center">
-
-<br />
-
-[![YouTube](./docs/repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
-
-<sub>Watch update overviews on YouTube</sub>
-
-<br />
-<br />
-
-<table>
-<tr>
-<td><img src="./docs/repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
-<td><img src="./docs/repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
-</tr>
-<tr>
-<td><img src="./docs/repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
-<td><img src="./docs/repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
-</tr>
-<tr>
-<td><img src="./docs/repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
-<td><img src="./docs/repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
-</tr>
-<tr>
-<td><img src="./docs/repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
-<td><img src="./docs/repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
-</tr>
-<tr>
-<td><img src="./docs/repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
-<td><img src="./docs/repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
-</tr>
-<tr>
-<td><img src="./docs/repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
-<td><img src="./docs/repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
-</tr>
-<tr>
-<td><img src="./docs/repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
-<td><img src="./docs/repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
-</tr>
-<tr>
-<td><img src="./docs/repo-images/Image 15.png" alt="Termix Screenshot 15" width="400" /></td>
-<td><img src="./docs/repo-images/Image 16.png" alt="Termix Screenshot 16" width="400" /></td>
-</tr>
-</table>
-
-<sub>Some videos and images may be out of date or may not perfectly showcase features.</sub>
-
-</div>
-
-<br />
-
-## Planned Features
-
-See [Projects](https://github.com/orgs/Termix-SSH/projects/5) for all planned features. If you are looking to contribute, see [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
+For discussions and questions, join the [Discord](https://discord.gg/jVQGdvHDrf) server. Update videos are on [YouTube](https://www.youtube.com/@TermixSSH/videos).
 
 <br />
 
 ## License
 
-Distributed under the Apache License Version 2.0. See `LICENSE` for more information.
+Distributed under the Apache License Version 2.0. See [LICENSE](LICENSE) for more information.
diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md
deleted file mode 100644
index 24476a7a3..000000000
--- a/RELEASE_NOTES.md
+++ /dev/null
@@ -1,26 +0,0 @@
-<!-- SUMMARY -->
-
-An urgent patch for 2.9.1 that fixes the server writing huge amounts of data to disk, which could add up to 100 GB every few hours. Update as soon as you can.
-
-<!-- /SUMMARY -->
-
-<!-- YOUTUBE -->
-
-https://youtu.be/lngaePO96tM
-
-<!-- /YOUTUBE -->
-
-<!-- UPDATE_LOG -->
-
-- Background database saves now happen at most once every 30 seconds, so disk writes no longer grow with the number of hosts
-- Plugin database and storage reads are now logged to the audit log once per start instead of on every read
-- On first start, 2.9.2 clears the plugin read entries that 2.9.1 piled up in the audit log
-
-<!-- /UPDATE_LOG -->
-
-<!-- BUG_FIXES -->
-
-- The server rewriting its whole database to disk many times a second, causing very high disk writes (up to 100 GB every few hours) on 2.9.1
-- The audit log filling up with plugin entries and pushing out real ones
-
-<!-- /BUG_FIXES -->
diff --git a/SECURITY.md b/SECURITY.md
deleted file mode 100644
index dcb11d2a1..000000000
--- a/SECURITY.md
+++ /dev/null
@@ -1,23 +0,0 @@
-# Security Policy
-
-## Reporting a Vulnerability
-
-Please report any vulnerabilities to [GitHub Security](https://github.com/Termix-SSH/Termix/security/advisories).
-
-## External secret storage
-
-By default, a single-container installation generates its keys in the Termix
-data directory for ease of recovery. Production deployments that keep backups
-or database files outside a trusted encrypted volume should set
-`TERMIX_REQUIRE_EXTERNAL_SECRETS=true` and provide all four keys through a
-secret manager:
-
-- `JWT_SECRET` (at least 64 characters)
-- `DATABASE_KEY` (64 hexadecimal characters)
-- `ENCRYPTION_KEY` (64 hexadecimal characters)
-- `INTERNAL_AUTH_TOKEN` (at least 32 characters)
-
-Each value can instead be mounted as a Docker or Kubernetes secret and supplied
-with its corresponding `_FILE` variable, such as `ENCRYPTION_KEY_FILE`.
-Hardened mode fails closed instead of writing a replacement key beside the
-encrypted database.
diff --git a/charts/termix/.helmignore b/charts/termix/.helmignore
deleted file mode 100644
index e4a6797e2..000000000
--- a/charts/termix/.helmignore
+++ /dev/null
@@ -1,6 +0,0 @@
-.git/
-.github/
-node_modules/
-dist/
-coverage/
-*.tgz
diff --git a/charts/termix/Chart.yaml b/charts/termix/Chart.yaml
deleted file mode 100644
index 5fd44049a..000000000
--- a/charts/termix/Chart.yaml
+++ /dev/null
@@ -1,16 +0,0 @@
-apiVersion: v2
-name: termix
-description: Self-hosted SSH and remote desktop management for Kubernetes.
-type: application
-version: 0.1.0
-appVersion: 2.7.0
-home: https://github.com/Termix-SSH/Termix
-sources:
-  - https://github.com/Termix-SSH/Termix
-maintainers:
-  - name: Termix maintainers
-keywords:
-  - ssh
-  - remote-desktop
-  - guacamole
-  - terminal
diff --git a/charts/termix/templates/NOTES.txt b/charts/termix/templates/NOTES.txt
deleted file mode 100644
index c2eea984e..000000000
--- a/charts/termix/templates/NOTES.txt
+++ /dev/null
@@ -1,17 +0,0 @@
-Termix has been installed.
-
-Service:
-  {{ include "termix.fullname" . }}:{{ .Values.service.port }}
-
-{{- if .Values.ingress.enabled }}
-Ingress hosts:
-{{- range .Values.ingress.hosts }}
-  - {{ .host }}
-{{- end }}
-{{- else if .Values.traefik.ingressRoute.enabled }}
-Traefik IngressRoute:
-  https://{{ .Values.traefik.ingressRoute.host }}{{ .Values.traefik.ingressRoute.pathPrefix }}
-{{- else }}
-Port-forward for local testing:
-  kubectl -n {{ .Release.Namespace }} port-forward svc/{{ include "termix.fullname" . }} 8080:{{ .Values.service.port }}
-{{- end }}
diff --git a/charts/termix/templates/_helpers.tpl b/charts/termix/templates/_helpers.tpl
deleted file mode 100644
index 65b38907b..000000000
--- a/charts/termix/templates/_helpers.tpl
+++ /dev/null
@@ -1,45 +0,0 @@
-{{- define "termix.name" -}}
-{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
-{{- end -}}
-
-{{- define "termix.fullname" -}}
-{{- if .Values.fullnameOverride -}}
-{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
-{{- else -}}
-{{- $name := default .Chart.Name .Values.nameOverride -}}
-{{- if contains $name .Release.Name -}}
-{{- .Release.Name | trunc 63 | trimSuffix "-" -}}
-{{- else -}}
-{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
-{{- end -}}
-{{- end -}}
-{{- end -}}
-
-{{- define "termix.chart" -}}
-{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
-{{- end -}}
-
-{{- define "termix.labels" -}}
-helm.sh/chart: {{ include "termix.chart" . }}
-app.kubernetes.io/name: {{ include "termix.name" . }}
-app.kubernetes.io/instance: {{ .Release.Name }}
-app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
-app.kubernetes.io/managed-by: {{ .Release.Service }}
-{{- end -}}
-
-{{- define "termix.selectorLabels" -}}
-app.kubernetes.io/name: {{ include "termix.name" . }}
-app.kubernetes.io/instance: {{ .Release.Name }}
-{{- end -}}
-
-{{- define "termix.serviceAccountName" -}}
-{{- if .Values.serviceAccount.create -}}
-{{- default (include "termix.fullname" .) .Values.serviceAccount.name -}}
-{{- else -}}
-{{- default "default" .Values.serviceAccount.name -}}
-{{- end -}}
-{{- end -}}
-
-{{- define "termix.secretName" -}}
-{{- default (printf "%s-secret" (include "termix.fullname" .)) .Values.secrets.name -}}
-{{- end -}}
diff --git a/charts/termix/templates/deployment.yaml b/charts/termix/templates/deployment.yaml
deleted file mode 100644
index 52487425d..000000000
--- a/charts/termix/templates/deployment.yaml
+++ /dev/null
@@ -1,148 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: {{ include "termix.fullname" . }}
-  labels:
-    {{- include "termix.labels" . | nindent 4 }}
-spec:
-  {{- if not .Values.autoscaling.enabled }}
-  replicas: {{ .Values.replicaCount }}
-  {{- end }}
-  strategy:
-    {{- toYaml .Values.strategy | nindent 4 }}
-  selector:
-    matchLabels:
-      {{- include "termix.selectorLabels" . | nindent 6 }}
-  template:
-    metadata:
-      labels:
-        {{- include "termix.selectorLabels" . | nindent 8 }}
-        {{- with .Values.podLabels }}
-        {{- toYaml . | nindent 8 }}
-        {{- end }}
-      {{- with .Values.podAnnotations }}
-      annotations:
-        {{- toYaml . | nindent 8 }}
-      {{- end }}
-    spec:
-      serviceAccountName: {{ include "termix.serviceAccountName" . }}
-      {{- with .Values.imagePullSecrets }}
-      imagePullSecrets:
-        {{- toYaml . | nindent 8 }}
-      {{- end }}
-      securityContext:
-        {{- toYaml .Values.podSecurityContext | nindent 8 }}
-      containers:
-        - name: termix
-          securityContext:
-            {{- toYaml .Values.securityContext | nindent 12 }}
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
-          imagePullPolicy: {{ .Values.image.pullPolicy }}
-          ports:
-            - name: http
-              containerPort: {{ .Values.service.port }}
-              protocol: TCP
-          env:
-            {{- range $key, $value := .Values.env }}
-            - name: {{ $key }}
-              value: {{ $value | quote }}
-            {{- end }}
-            {{- if .Values.guacd.enabled }}
-            - name: GUACD_HOST
-              value: "127.0.0.1"
-            {{- else if .Values.guacd.host }}
-            - name: GUACD_HOST
-              value: {{ .Values.guacd.host | quote }}
-            {{- end }}
-            - name: GUACD_TUNNEL_HOST
-              value: {{ include "termix.fullname" . | quote }}
-            {{- if ne .Values.database.dialect "sqlite" }}
-            - name: DATABASE_DIALECT
-              value: {{ .Values.database.dialect | quote }}
-            {{- end }}
-            {{- if .Values.database.existingSecret.name }}
-            - name: DATABASE_URL
-              valueFrom:
-                secretKeyRef:
-                  name: {{ .Values.database.existingSecret.name }}
-                  key: {{ .Values.database.existingSecret.urlKey }}
-            {{- end }}
-            {{- if .Values.secrets.create }}
-            {{- range $key, $value := .Values.secrets.data }}
-            {{- if $value }}
-            - name: {{ $key }}
-              valueFrom:
-                secretKeyRef:
-                  name: {{ include "termix.secretName" $ }}
-                  key: {{ $key }}
-            {{- end }}
-            {{- end }}
-            {{- end }}
-            {{- with .Values.extraEnv }}
-            {{- toYaml . | nindent 12 }}
-            {{- end }}
-          {{- with .Values.extraEnvFrom }}
-          envFrom:
-            {{- toYaml . | nindent 12 }}
-          {{- end }}
-          {{- if .Values.probes.liveness.enabled }}
-          livenessProbe:
-            httpGet:
-              path: /health
-              port: http
-            initialDelaySeconds: {{ .Values.probes.liveness.initialDelaySeconds }}
-            periodSeconds: {{ .Values.probes.liveness.periodSeconds }}
-            timeoutSeconds: {{ .Values.probes.liveness.timeoutSeconds }}
-            failureThreshold: {{ .Values.probes.liveness.failureThreshold }}
-          {{- end }}
-          {{- if .Values.probes.readiness.enabled }}
-          readinessProbe:
-            httpGet:
-              path: /health
-              port: http
-            initialDelaySeconds: {{ .Values.probes.readiness.initialDelaySeconds }}
-            periodSeconds: {{ .Values.probes.readiness.periodSeconds }}
-            timeoutSeconds: {{ .Values.probes.readiness.timeoutSeconds }}
-            failureThreshold: {{ .Values.probes.readiness.failureThreshold }}
-          {{- end }}
-          resources:
-            {{- toYaml .Values.resources | nindent 12 }}
-          volumeMounts:
-            - name: data
-              mountPath: /app/data
-        {{- if .Values.guacd.enabled }}
-        - name: guacd
-          image: "{{ .Values.guacd.image.repository }}:{{ .Values.guacd.image.tag }}"
-          imagePullPolicy: {{ .Values.guacd.image.pullPolicy }}
-          securityContext:
-            {{- toYaml .Values.guacd.securityContext | nindent 12 }}
-          ports:
-            - name: guacd
-              containerPort: {{ .Values.guacd.service.port }}
-              protocol: TCP
-          resources:
-            {{- toYaml .Values.guacd.resources | nindent 12 }}
-          volumeMounts:
-            - name: data
-              mountPath: /termix-data
-        {{- end }}
-      volumes:
-        - name: data
-          {{- if .Values.persistence.enabled }}
-          persistentVolumeClaim:
-            claimName: {{ default (printf "%s-data" (include "termix.fullname" .)) .Values.persistence.existingClaim }}
-          {{- else }}
-          emptyDir: {}
-          {{- end }}
-      {{- with .Values.nodeSelector }}
-      nodeSelector:
-        {{- toYaml . | nindent 8 }}
-      {{- end }}
-      {{- with .Values.affinity }}
-      affinity:
-        {{- toYaml . | nindent 8 }}
-      {{- end }}
-      {{- with .Values.tolerations }}
-      tolerations:
-        {{- toYaml . | nindent 8 }}
-      {{- end }}
diff --git a/charts/termix/templates/hpa.yaml b/charts/termix/templates/hpa.yaml
deleted file mode 100644
index 016a9e87c..000000000
--- a/charts/termix/templates/hpa.yaml
+++ /dev/null
@@ -1,22 +0,0 @@
-{{- if .Values.autoscaling.enabled -}}
-apiVersion: autoscaling/v2
-kind: HorizontalPodAutoscaler
-metadata:
-  name: {{ include "termix.fullname" . }}
-  labels:
-    {{- include "termix.labels" . | nindent 4 }}
-spec:
-  scaleTargetRef:
-    apiVersion: apps/v1
-    kind: Deployment
-    name: {{ include "termix.fullname" . }}
-  minReplicas: {{ .Values.autoscaling.minReplicas }}
-  maxReplicas: {{ .Values.autoscaling.maxReplicas }}
-  metrics:
-    - type: Resource
-      resource:
-        name: cpu
-        target:
-          type: Utilization
-          averageUtilization: {{ .Values.autoscaling.targetCPUUtilizationPercentage }}
-{{- end }}
diff --git a/charts/termix/templates/ingress.yaml b/charts/termix/templates/ingress.yaml
deleted file mode 100644
index 6c6b1fbe8..000000000
--- a/charts/termix/templates/ingress.yaml
+++ /dev/null
@@ -1,35 +0,0 @@
-{{- if .Values.ingress.enabled -}}
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: {{ include "termix.fullname" . }}
-  labels:
-    {{- include "termix.labels" . | nindent 4 }}
-  {{- with .Values.ingress.annotations }}
-  annotations:
-    {{- toYaml . | nindent 4 }}
-  {{- end }}
-spec:
-  {{- if .Values.ingress.className }}
-  ingressClassName: {{ .Values.ingress.className }}
-  {{- end }}
-  {{- if .Values.ingress.tls }}
-  tls:
-    {{- toYaml .Values.ingress.tls | nindent 4 }}
-  {{- end }}
-  rules:
-    {{- range .Values.ingress.hosts }}
-    - host: {{ .host | quote }}
-      http:
-        paths:
-          {{- range .paths }}
-          - path: {{ .path }}
-            pathType: {{ .pathType }}
-            backend:
-              service:
-                name: {{ include "termix.fullname" $ }}
-                port:
-                  name: http
-          {{- end }}
-    {{- end }}
-{{- end }}
diff --git a/charts/termix/templates/networkpolicy.yaml b/charts/termix/templates/networkpolicy.yaml
deleted file mode 100644
index c0e508be5..000000000
--- a/charts/termix/templates/networkpolicy.yaml
+++ /dev/null
@@ -1,19 +0,0 @@
-{{- if .Values.networkPolicy.enabled -}}
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: {{ include "termix.fullname" . }}
-  labels:
-    {{- include "termix.labels" . | nindent 4 }}
-spec:
-  podSelector:
-    matchLabels:
-      {{- include "termix.selectorLabels" . | nindent 6 }}
-  policyTypes:
-    - Ingress
-    - Egress
-  ingress:
-    {{- toYaml .Values.networkPolicy.ingress | nindent 4 }}
-  egress:
-    {{- toYaml .Values.networkPolicy.egress | nindent 4 }}
-{{- end }}
diff --git a/charts/termix/templates/pdb.yaml b/charts/termix/templates/pdb.yaml
deleted file mode 100644
index fc22ede1c..000000000
--- a/charts/termix/templates/pdb.yaml
+++ /dev/null
@@ -1,13 +0,0 @@
-{{- if .Values.podDisruptionBudget.enabled -}}
-apiVersion: policy/v1
-kind: PodDisruptionBudget
-metadata:
-  name: {{ include "termix.fullname" . }}
-  labels:
-    {{- include "termix.labels" . | nindent 4 }}
-spec:
-  minAvailable: {{ .Values.podDisruptionBudget.minAvailable }}
-  selector:
-    matchLabels:
-      {{- include "termix.selectorLabels" . | nindent 6 }}
-{{- end }}
diff --git a/charts/termix/templates/pvc.yaml b/charts/termix/templates/pvc.yaml
deleted file mode 100644
index ac7a11a48..000000000
--- a/charts/termix/templates/pvc.yaml
+++ /dev/null
@@ -1,21 +0,0 @@
-{{- if and .Values.persistence.enabled (not .Values.persistence.existingClaim) -}}
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: {{ include "termix.fullname" . }}-data
-  labels:
-    {{- include "termix.labels" . | nindent 4 }}
-  {{- with .Values.persistence.annotations }}
-  annotations:
-    {{- toYaml . | nindent 4 }}
-  {{- end }}
-spec:
-  accessModes:
-    {{- toYaml .Values.persistence.accessModes | nindent 4 }}
-  resources:
-    requests:
-      storage: {{ .Values.persistence.size | quote }}
-  {{- if .Values.persistence.storageClass }}
-  storageClassName: {{ .Values.persistence.storageClass | quote }}
-  {{- end }}
-{{- end }}
diff --git a/charts/termix/templates/secret.yaml b/charts/termix/templates/secret.yaml
deleted file mode 100644
index 278119ee9..000000000
--- a/charts/termix/templates/secret.yaml
+++ /dev/null
@@ -1,15 +0,0 @@
-{{- if .Values.secrets.create -}}
-apiVersion: v1
-kind: Secret
-metadata:
-  name: {{ include "termix.secretName" . }}
-  labels:
-    {{- include "termix.labels" . | nindent 4 }}
-type: Opaque
-stringData:
-  {{- range $key, $value := .Values.secrets.data }}
-  {{- if $value }}
-  {{ $key }}: {{ $value | quote }}
-  {{- end }}
-  {{- end }}
-{{- end }}
diff --git a/charts/termix/templates/service.yaml b/charts/termix/templates/service.yaml
deleted file mode 100644
index c2d2f4dba..000000000
--- a/charts/termix/templates/service.yaml
+++ /dev/null
@@ -1,19 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: {{ include "termix.fullname" . }}
-  labels:
-    {{- include "termix.labels" . | nindent 4 }}
-  {{- with .Values.service.annotations }}
-  annotations:
-    {{- toYaml . | nindent 4 }}
-  {{- end }}
-spec:
-  type: {{ .Values.service.type }}
-  ports:
-    - port: {{ .Values.service.port }}
-      targetPort: http
-      protocol: TCP
-      name: http
-  selector:
-    {{- include "termix.selectorLabels" . | nindent 4 }}
diff --git a/charts/termix/templates/serviceaccount.yaml b/charts/termix/templates/serviceaccount.yaml
deleted file mode 100644
index 365c382b3..000000000
--- a/charts/termix/templates/serviceaccount.yaml
+++ /dev/null
@@ -1,13 +0,0 @@
-{{- if .Values.serviceAccount.create -}}
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: {{ include "termix.serviceAccountName" . }}
-  labels:
-    {{- include "termix.labels" . | nindent 4 }}
-  {{- with .Values.serviceAccount.annotations }}
-  annotations:
-    {{- toYaml . | nindent 4 }}
-  {{- end }}
-automountServiceAccountToken: {{ .Values.serviceAccount.automount }}
-{{- end }}
diff --git a/charts/termix/templates/traefik-ingressroute.yaml b/charts/termix/templates/traefik-ingressroute.yaml
deleted file mode 100644
index 4d5f29a7f..000000000
--- a/charts/termix/templates/traefik-ingressroute.yaml
+++ /dev/null
@@ -1,34 +0,0 @@
-{{- if .Values.traefik.ingressRoute.enabled -}}
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: {{ include "termix.fullname" . }}
-  labels:
-    {{- include "termix.labels" . | nindent 4 }}
-  {{- with .Values.traefik.ingressRoute.annotations }}
-  annotations:
-    {{- toYaml . | nindent 4 }}
-  {{- end }}
-spec:
-  entryPoints:
-    {{- toYaml .Values.traefik.ingressRoute.entryPoints | nindent 4 }}
-  routes:
-    - match: Host(`{{ .Values.traefik.ingressRoute.host }}`) && PathPrefix(`{{ .Values.traefik.ingressRoute.pathPrefix }}`)
-      kind: Rule
-      services:
-        - name: {{ include "termix.fullname" . }}
-          port: {{ .Values.service.port }}
-      {{- with .Values.traefik.ingressRoute.middlewares }}
-      middlewares:
-        {{- toYaml . | nindent 8 }}
-      {{- end }}
-  {{- if .Values.traefik.ingressRoute.tls.enabled }}
-  tls:
-    {{- if .Values.traefik.ingressRoute.tls.secretName }}
-    secretName: {{ .Values.traefik.ingressRoute.tls.secretName }}
-    {{- end }}
-    {{- if .Values.traefik.ingressRoute.tls.certResolver }}
-    certResolver: {{ .Values.traefik.ingressRoute.tls.certResolver }}
-    {{- end }}
-  {{- end }}
-{{- end }}
diff --git a/charts/termix/templates/validate.yaml b/charts/termix/templates/validate.yaml
deleted file mode 100644
index 2faf999a4..000000000
--- a/charts/termix/templates/validate.yaml
+++ /dev/null
@@ -1,12 +0,0 @@
-{{- if and .Values.ingress.enabled .Values.traefik.ingressRoute.enabled -}}
-{{- fail "ingress and traefik.ingressRoute cannot both be enabled" -}}
-{{- end -}}
-{{- if and (eq .Values.database.dialect "sqlite") (or (gt (int .Values.replicaCount) 1) .Values.autoscaling.enabled) -}}
-{{- fail "SQLite supports only one replica; use Postgres or MySQL before enabling replicas or autoscaling" -}}
-{{- end -}}
-{{- if and (not .Values.guacd.enabled) (not .Values.guacd.host) -}}
-{{- fail "guacd.host is required when the bundled guacd sidecar is disabled" -}}
-{{- end -}}
-{{- if and .Values.database.existingSecret.name .Values.secrets.create .Values.secrets.data.DATABASE_URL -}}
-{{- fail "DATABASE_URL must come from either database.existingSecret or secrets.data, not both" -}}
-{{- end -}}
diff --git a/charts/termix/values-gitops-example.yaml b/charts/termix/values-gitops-example.yaml
deleted file mode 100644
index 9f3d769ba..000000000
--- a/charts/termix/values-gitops-example.yaml
+++ /dev/null
@@ -1,28 +0,0 @@
-image:
-  repository: ghcr.io/termix-ssh/termix
-  tag: "2.7.0"
-
-ingress:
-  enabled: true
-  className: nginx
-  hosts:
-    - host: termix.example.com
-      paths:
-        - path: /
-          pathType: Prefix
-  tls:
-    - secretName: termix-tls
-      hosts:
-        - termix.example.com
-
-persistence:
-  enabled: true
-  size: 20Gi
-
-secrets:
-  create: false
-
-database:
-  dialect: sqlite
-
-extraEnvFrom: []
diff --git a/charts/termix/values-traefik.yaml b/charts/termix/values-traefik.yaml
deleted file mode 100644
index d4b799428..000000000
--- a/charts/termix/values-traefik.yaml
+++ /dev/null
@@ -1,32 +0,0 @@
-ingress:
-  enabled: false
-
-traefik:
-  ingressRoute:
-    enabled: true
-    entryPoints:
-      - websecure
-    host: termix.example.com
-    pathPrefix: /
-    tls:
-      enabled: true
-      certResolver: letsencrypt
-
-persistence:
-  enabled: true
-  size: 20Gi
-
-resources:
-  requests:
-    cpu: 250m
-    memory: 512Mi
-  limits:
-    memory: 2Gi
-
-guacd:
-  resources:
-    requests:
-      cpu: 100m
-      memory: 128Mi
-    limits:
-      memory: 512Mi
diff --git a/charts/termix/values.yaml b/charts/termix/values.yaml
deleted file mode 100644
index 55cf77613..000000000
--- a/charts/termix/values.yaml
+++ /dev/null
@@ -1,151 +0,0 @@
-replicaCount: 1
-
-image:
-  repository: ghcr.io/termix-ssh/termix
-  pullPolicy: IfNotPresent
-  tag: ""
-
-imagePullSecrets: []
-nameOverride: ""
-fullnameOverride: ""
-
-serviceAccount:
-  create: true
-  automount: false
-  annotations: {}
-  name: ""
-
-podAnnotations: {}
-podLabels: {}
-
-podSecurityContext:
-  fsGroup: 1000
-  fsGroupChangePolicy: OnRootMismatch
-
-securityContext: {}
-
-service:
-  type: ClusterIP
-  port: 8080
-  annotations: {}
-
-ingress:
-  enabled: false
-  className: ""
-  annotations: {}
-  hosts:
-    - host: termix.example.com
-      paths:
-        - path: /
-          pathType: Prefix
-  tls: []
-
-traefik:
-  ingressRoute:
-    enabled: false
-    entryPoints:
-      - websecure
-    host: termix.example.com
-    pathPrefix: /
-    tls:
-      enabled: true
-      secretName: ""
-      certResolver: ""
-    middlewares: []
-    annotations: {}
-
-resources: {}
-
-autoscaling:
-  enabled: false
-  minReplicas: 1
-  maxReplicas: 3
-  targetCPUUtilizationPercentage: 80
-
-persistence:
-  enabled: true
-  accessModes:
-    - ReadWriteOnce
-  size: 10Gi
-  storageClass: ""
-  annotations: {}
-  existingClaim: ""
-
-env:
-  PORT: "8080"
-  DATA_DIR: /app/data
-  NODE_ENV: production
-  TERMIX_REQUIRE_EXTERNAL_SECRETS: "false"
-  GUACD_RECORDING_PATH: /termix-data/session_recordings/guacamole
-  GUACD_RECORDING_BACKEND_PATH: /app/data/session_recordings/guacamole
-
-extraEnv: []
-extraEnvFrom: []
-
-secrets:
-  create: false
-  name: ""
-  data:
-    JWT_SECRET: ""
-    DATABASE_KEY: ""
-    ENCRYPTION_KEY: ""
-    INTERNAL_AUTH_TOKEN: ""
-    DATABASE_URL: ""
-    GUACAMOLE_ENCRYPTION_KEY: ""
-
-database:
-  dialect: sqlite
-  existingSecret:
-    name: ""
-    urlKey: DATABASE_URL
-
-guacd:
-  enabled: true
-  host: ""
-  image:
-    repository: guacamole/guacd
-    tag: 1.6.0
-    pullPolicy: IfNotPresent
-  resources: {}
-  podAnnotations: {}
-  podLabels: {}
-  securityContext:
-    runAsNonRoot: true
-    runAsUser: 1000
-    allowPrivilegeEscalation: false
-    capabilities:
-      drop:
-        - ALL
-  service:
-    port: 4822
-    annotations: {}
-
-nodeSelector: {}
-tolerations: []
-affinity: {}
-
-strategy:
-  type: Recreate
-
-probes:
-  liveness:
-    enabled: true
-    initialDelaySeconds: 60
-    periodSeconds: 30
-    timeoutSeconds: 10
-    failureThreshold: 3
-  readiness:
-    enabled: true
-    initialDelaySeconds: 15
-    periodSeconds: 10
-    timeoutSeconds: 5
-    failureThreshold: 6
-
-podDisruptionBudget:
-  enabled: false
-  minAvailable: 1
-
-networkPolicy:
-  enabled: false
-  ingress: []
-  egress: []
diff --git a/components.json b/components.json
index 26b31d574..10e27bb21 100644
--- a/components.json
+++ b/components.json
@@ -5,7 +5,7 @@
   "tsx": true,
   "tailwind": {
     "config": "",
-    "css": "src/index.css",
+    "css": "src/ui/index.css",
     "baseColor": "neutral",
     "cssVariables": true,
     "prefix": ""
@@ -15,7 +15,7 @@
   "aliases": {
     "components": "@/components",
     "utils": "@/lib/utils",
-    "ui": "@/components/ui",
+    "ui": "@/components",
     "lib": "@/lib",
     "hooks": "@/hooks"
   },
diff --git a/crowdin.yml b/crowdin.yml
deleted file mode 100644
index 8a88aa9aa..000000000
--- a/crowdin.yml
+++ /dev/null
@@ -1,11 +0,0 @@
-project_id: "858252"
-api_token: "env:CROWDIN_API_TOKEN"
-preserve_hierarchy: true
-
-files:
-  # Core has always lived at /en.json in Crowdin; moving it would orphan its translations.
-  - source: /src/ui/locales/en.json
-    dest: /en.json
-    translation: /src/ui/locales/translated/%locale_with_underscore%.json
-  - source: /plugins/*/locales/en.json
-    translation: /%original_path%/translated/%locale_with_underscore%.json
diff --git a/docker/Dockerfile b/docker/Dockerfile
index 473ffbd47..9159f321a 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -1,23 +1,13 @@
-# Stage 0: every plugin's package.json and manifest.json and nothing else.
-# npm ci needs each workspace package.json in place or it silently skips it,
-# and a glob COPY flattens paths, so the tree is trimmed here instead. The
-# deps layer below stays cached until one of these files changes.
-FROM node:26-slim AS workspace-manifests
-WORKDIR /src
-COPY plugins ./plugins
-RUN find plugins -mindepth 2 -maxdepth 2 ! -name package.json ! -name manifest.json -exec rm -rf {} +
-
 # Stage 1: Install dependencies
 # The builders only produce JS, so they run on the build machine's own arch
 # once instead of under QEMU per target. Rolldown hangs under arm64 emulation.
-FROM --platform=$BUILDPLATFORM node:26-slim AS deps
+FROM --platform=$BUILDPLATFORM node:24-slim AS deps
 WORKDIR /app
 
 RUN apt-get update && apt-get install -y python3 make g++ && rm -rf /var/lib/apt/lists/*
 
 COPY package*.json ./
 COPY packages/plugin-sdk/package.json ./packages/plugin-sdk/package.json
-COPY --from=workspace-manifests /src/plugins ./plugins
 COPY .npmrc ./
 COPY vendor ./vendor
 
@@ -47,7 +37,7 @@ COPY . .
 RUN npm run build:backend
 
 # Stage 4: Download OPKSSH binary for the target platform so the image works offline
-FROM node:26-slim AS opkssh-downloader
+FROM node:24-slim AS opkssh-downloader
 ARG TARGETARCH
 ARG OPKSSH_VERSION=v0.16.0
 ARG OPKSSH_SHA256_AMD64=c018c3e7baf98612b923e742dd87be38650bf61e3b755fb2bc90de177568b1bf
@@ -68,7 +58,7 @@ RUN case "$TARGETARCH" in \
     echo -n "$OPKSSH_VERSION" > version.txt
 
 # Stage 5: Production dependencies only
-FROM node:26-slim AS production-deps
+FROM node:24-slim AS production-deps
 WORKDIR /app
 
 RUN apt-get update && apt-get install -y python3 make g++ && rm -rf /var/lib/apt/lists/*
@@ -80,15 +70,9 @@ COPY packages/plugin-sdk/package.json ./packages/plugin-sdk/package.json
 COPY .npmrc ./
 COPY vendor ./vendor
 
-COPY scripts/patch-ssh2-agent.cjs scripts/install-native-plugin-deps.cjs ./scripts/
-# Plugin manifests only, for their nativeDependencies. Outside plugins/ so npm
-# ci does not treat them as workspaces: everything else a plugin uses is
-# already inside its bundle.
-COPY --from=workspace-manifests /src/plugins ./plugin-manifests
+COPY scripts/patch-ssh2-agent.cjs ./scripts/
 
 RUN npm ci --omit=dev --ignore-scripts && \
-    node scripts/install-native-plugin-deps.cjs plugin-manifests && \
-    rm -rf plugin-manifests && \
     node scripts/patch-ssh2-agent.cjs && \
     rm -rf node_modules/better-sqlite3/prebuilds && \
     npm run build-release --prefix node_modules/better-sqlite3 && \
@@ -97,7 +81,7 @@ RUN npm ci --omit=dev --ignore-scripts && \
     npm cache clean --force
 
 # Stage 6: Final optimized image
-FROM node:26-slim
+FROM node:24-slim
 WORKDIR /app
 
 # The release the opkssh-downloader stage baked in, so the plugin trusts that
@@ -128,10 +112,10 @@ COPY --chown=node:node --from=frontend-builder /app/dist /app/html
 
 COPY --chown=node:node --from=production-deps /app/node_modules /app/node_modules
 COPY --chown=node:node --from=backend-builder /app/dist/backend ./dist/backend
-# Bundled first-party plugins, resolved as dist/plugins by
+# Plugins pinned in docker/bundled-plugins.json, resolved as dist/plugins by
 # getBundledPluginsDir().
 COPY --chown=node:node --from=backend-builder /app/dist/plugins ./dist/plugins
-# Target of node_modules/@termix/plugin-sdk, which core and the plugins import.
+# Target of node_modules/@termix-ssh/plugin-sdk, which core and the plugins import.
 COPY --chown=node:node --from=backend-builder /app/packages/plugin-sdk/package.json ./packages/plugin-sdk/package.json
 COPY --chown=node:node --from=backend-builder /app/packages/plugin-sdk/dist ./packages/plugin-sdk/dist
 # Pre-baked OPKSSH binary. The opkssh plugin uses it when its checksum
diff --git a/docker/bundled-plugins.json b/docker/bundled-plugins.json
index 2728154af..2e507c4f0 100644
--- a/docker/bundled-plugins.json
+++ b/docker/bundled-plugins.json
@@ -2,139 +2,264 @@
   "plugins": [
     {
       "id": "acme-ssl",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-ACME-SSL/releases/download/v1.0.0/acme-ssl-1.0.0.tmxplug",
+      "sha256": "34aa172b2f6bc6a773ebdff2ec0f590d411ce258fd43176bdddb4c30d1fe30da"
     },
     {
       "id": "ai",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-AI/releases/download/v1.0.0/ai-1.0.0.tmxplug",
+      "sha256": "ad291a2c6f6f01b72ebd275e8d202b78f55bc13a1e1a40f419d04e71b2fbd06b"
     },
     {
       "id": "alerts",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Alerts/releases/download/v1.0.0/alerts-1.0.0.tmxplug",
+      "sha256": "3fe008f9d2a32e2b7111399054a2264ea5cf5d71264cc31e85cdab3e909cc62f",
+      "onboarding": {
+        "recommended": true,
+        "consent": false
+      }
     },
     {
       "id": "automations",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Automations/releases/download/v1.0.0/automations-1.0.0.tmxplug",
+      "sha256": "76d4cff6e78d40ec67e899f0c7b2aca43d35a47b9a15071d0a8f5a8d939af9a9"
     },
     {
       "id": "docker",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Docker/releases/download/v1.0.0/docker-1.0.0.tmxplug",
+      "sha256": "641e564ba915a72efed4236272d63f6fff43904309833870f3554d3e9bd28dfa",
+      "onboarding": {
+        "recommended": true,
+        "consent": false
+      }
     },
     {
       "id": "file-manager",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-File-Manager/releases/download/v1.0.0/file-manager-1.0.0.tmxplug",
+      "sha256": "1cafccfe86a29e2f318026ca7bc20629df94331c81209607976dafd7feac0ca4",
+      "onboarding": {
+        "recommended": true,
+        "consent": false
+      }
     },
     {
       "id": "fleets",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Fleets/releases/download/v1.0.0/fleets-1.0.0.tmxplug",
+      "sha256": "1ebeccd6b2a8e9510ab56658374d0b87f652149101d14956752a696ca920f611"
     },
     {
       "id": "homepage",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Homepage/releases/download/v1.0.0/homepage-1.0.0.tmxplug",
+      "sha256": "65cd21802f6a71f3b3c582bc0007bfc91160abc161b2390bce715fd2ed987f99"
     },
     {
       "id": "host-metrics",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Host-Metrics/releases/download/v1.0.0/host-metrics-1.0.0.tmxplug",
+      "sha256": "1afce5489038e5e30b55210e8e43ba93e0446fe087e2952af75a402dbf809ea9",
+      "onboarding": {
+        "recommended": true,
+        "consent": false
+      }
     },
     {
       "id": "ldap",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-LDAP/releases/download/v1.0.0/ldap-1.0.0.tmxplug",
+      "sha256": "1df08a931457043ba500689a73b4b5ab2bfb43630f377557e0fb13280b996334"
     },
     {
       "id": "network-topology",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Network-Topology/releases/download/v1.0.0/network-topology-1.0.0.tmxplug",
+      "sha256": "dc3ad943c1753b352b4d80c09836a293a8767293061ddf2e641575bae97124e9"
     },
     {
       "id": "opkssh",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-OPKSSH/releases/download/v1.0.0/opkssh-1.0.0.tmxplug",
+      "sha256": "91cc1575aa1ff84632e0b6a4da68df3a7df4b8e18431b9c0378d314b886ed55d"
     },
     {
       "id": "proxmox",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Proxmox/releases/download/v1.0.0/proxmox-1.0.0.tmxplug",
+      "sha256": "09891a3ab67a5b6589d8ab9e0fc88d8c63ff9d4e52ed8e7cbd0801a5e64e593f"
     },
     {
       "id": "remote-desktop",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Remote-Desktop/releases/download/v1.0.0/remote-desktop-1.0.0.tmxplug",
+      "sha256": "7b24691953550458ee1609372443eeb5580d20091b02c95011c0427268350efc",
+      "onboarding": {
+        "recommended": true,
+        "consent": false
+      }
     },
     {
       "id": "secret-sources",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Secret-Sources/releases/download/v1.0.0/secret-sources-1.0.0.tmxplug",
+      "sha256": "04e9cfca70ffafc41546ddf0f1f6411743a2e0e9835b26ad5c0b91ac11028485"
     },
     {
       "id": "serial",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Serial/releases/download/v1.0.0/serial-1.0.0.tmxplug",
+      "sha256": "2470acbd6c4c343c3d89dada972051f1ee7aace88af1e6719b92f19a4a6e46ea",
+      "onboarding": {
+        "recommended": "desktop",
+        "consent": false
+      }
     },
     {
       "id": "session-recording",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Session-Recording/releases/download/v1.0.0/session-recording-1.0.0.tmxplug",
+      "sha256": "6b630ca0e08d79be7cb49366c898586ee3416a518f8e200157a6191c2c7c9ab7"
     },
     {
       "id": "session-sharing",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Session-Sharing/releases/download/v1.0.0/session-sharing-1.0.0.tmxplug",
+      "sha256": "0c0d3f2d63184d4a4b2a90b11a1ee247ddc937abba76af74eb39e27048b412f9"
     },
     {
       "id": "snippets",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Snippets/releases/download/v1.0.0/snippets-1.0.0.tmxplug",
+      "sha256": "47872d08cdf4a15b50c8f90ca125276a92579147a27cb6b5639a84a01160abe5",
+      "onboarding": {
+        "recommended": true,
+        "consent": false
+      }
     },
     {
       "id": "ssh-terminal",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-SSH-Terminal/releases/download/v1.0.0/ssh-terminal-1.0.0.tmxplug",
+      "sha256": "5b5a357bbf9a503c6b68725245712a99fa8ea0eec0baff64319be28950acac79",
+      "onboarding": {
+        "recommended": true,
+        "consent": false
+      }
     },
     {
       "id": "sso",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-SSO/releases/download/v1.0.0/sso-1.0.0.tmxplug",
+      "sha256": "d9f69f7f52b778d1b144c58e5a65006780498d6fa171b5aeb18e15b7b033ca6b",
+      "onboarding": {
+        "recommended": false,
+        "consent": false,
+        "enabledByEnv": ["OIDC_CLIENT_ID"]
+      }
     },
     {
       "id": "step-ca",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Step-CA/releases/download/v1.0.0/step-ca-1.0.0.tmxplug",
+      "sha256": "05209afbaeb104ff77fecb5cf26a7823b9ed66031eac7557d3216fc3b861f7a6"
     },
     {
       "id": "tailscale",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Tailscale/releases/download/v1.0.0/tailscale-1.0.0.tmxplug",
+      "sha256": "e9840bddef696b24354b9f04f2c97e164c3879f3fd1b337347de728db522874e"
     },
     {
       "id": "telemetry",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Telemetry/releases/download/v1.0.0/telemetry-1.0.0.tmxplug",
+      "sha256": "b41210d638b93470891ab238e3d1180a0e0d0f0c697b1c2079156416dec05966",
+      "onboarding": {
+        "recommended": true,
+        "consent": true
+      }
     },
     {
       "id": "termix-identity",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Termix-Identity/releases/download/v1.0.0/termix-identity-1.0.0.tmxplug",
+      "sha256": "facd9f1c6036202e7c6b1020408ce49c7ba4bc687a8f8b93ccf60e97f473f897"
     },
     {
       "id": "tmux-monitor",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Tmux-Monitor/releases/download/v1.0.0/tmux-monitor-1.0.0.tmxplug",
+      "sha256": "d453e0c5f1bf54160615d5df4e12eac0d97fea3c78c0aad5ebe8552e1f2de42c"
     },
     {
       "id": "totp",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-TOTP/releases/download/v1.0.0/totp-1.0.0.tmxplug",
+      "sha256": "a2d389048d16e31c089cf211fe2fb37fcfb33369497b58ee445e8626e9ec494d",
+      "onboarding": {
+        "recommended": true,
+        "consent": false
+      }
     },
     {
       "id": "tunnels",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Tunnels/releases/download/v1.0.0/tunnels-1.0.0.tmxplug",
+      "sha256": "dc6c2942490c07ec1f9a4065850288cbb00c42dae64397937d2551d689314939",
+      "onboarding": {
+        "recommended": true,
+        "consent": false
+      }
     },
     {
       "id": "vault",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Vault/releases/download/v1.0.0/vault-1.0.0.tmxplug",
+      "sha256": "bdad88ed576ed30b464c9cbddab4d9bb60696581dc1b815b76e1b4a08500f870"
     },
     {
       "id": "wake-on-lan",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Wake-On-LAN/releases/download/v1.0.0/wake-on-lan-1.0.0.tmxplug",
+      "sha256": "3e7d4c8a9a20cde95d8594d4ae8e1fa0469d0751be9f00249f6431b10ada9ea9"
     },
     {
       "id": "warpgate",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Warpgate/releases/download/v1.0.0/warpgate-1.0.0.tmxplug",
+      "sha256": "18ed1c8238ecf57b5776ad93c6533d7040b988ae765012c5da591b85faa02d2e"
     },
     {
       "id": "web-endpoint",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Web-Endpoint/releases/download/v1.0.0/web-endpoint-1.0.0.tmxplug",
+      "sha256": "7f69e608eccd8cc6fa2436bffb3e2c3c8aae6cebebf7341913f15e7f9be58e42"
     },
     {
       "id": "webauthn",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-WebAuthn/releases/download/v1.0.0/webauthn-1.0.0.tmxplug",
+      "sha256": "dafcd7bfffc39b60a14333164dfd8ca70986da1390285359669d0293cd050121",
+      "onboarding": {
+        "recommended": true,
+        "consent": false
+      }
     },
     {
       "id": "workspaces",
-      "source": "workspace"
+      "source": "tmxplug",
+      "url": "https://github.com/Termix-SSH/Plugin-Workspaces/releases/download/v1.0.0/workspaces-1.0.0.tmxplug",
+      "sha256": "1ee3a07bd8d61b46b6fbe118d2a424f8027575282287622b467e83a4356e6412",
+      "onboarding": {
+        "recommended": true,
+        "consent": false
+      }
     }
   ]
 }
diff --git a/docker/docker-compose.yml b/docker/docker-compose.yml
index dd671bcd2..601ae1808 100644
--- a/docker/docker-compose.yml
+++ b/docker/docker-compose.yml
@@ -1,6 +1,6 @@
 services:
   termix:
-    image: ghcr.io/lukegus/termix:latest
+    image: ghcr.io/termix-ssh/termix:latest
     container_name: termix
     restart: unless-stopped
     ports:
diff --git a/docker/entrypoint.sh b/docker/entrypoint.sh
index 7a7742d2b..39e810eb4 100644
--- a/docker/entrypoint.sh
+++ b/docker/entrypoint.sh
@@ -68,6 +68,25 @@ fi
 mkdir -p /tmp/nginx
 envsubst '${PORT} ${SSL_PORT} ${SSL_CERT_PATH} ${SSL_KEY_PATH}' < $NGINX_CONF_SOURCE > /tmp/nginx/nginx.conf
 
+# Which proxies may set the client IP through X-Forwarded-For. Unset keeps
+# the private ranges in the template.
+if [ -n "$TRUSTED_PROXIES" ]; then
+    REAL_IP_LINES=""
+    for proxy in $(echo "$TRUSTED_PROXIES" | tr ',' ' '); do
+        case "$proxy" in
+            *[!0-9a-fA-F:./]*) echo "Ignoring invalid TRUSTED_PROXIES entry: $proxy" ;;
+            *) REAL_IP_LINES="${REAL_IP_LINES}    set_real_ip_from ${proxy};\n" ;;
+        esac
+    done
+    echo "Trusting X-Forwarded-For from: $TRUSTED_PROXIES"
+    awk -v lines="$REAL_IP_LINES" '
+        /# BEGIN TRUSTED_PROXIES/ { printf "%s", lines; skip = 1; next }
+        /# END TRUSTED_PROXIES/ { skip = 0; next }
+        !skip
+    ' /tmp/nginx/nginx.conf > /tmp/nginx/nginx.conf.tmp
+    mv /tmp/nginx/nginx.conf.tmp /tmp/nginx/nginx.conf
+fi
+
 if [ "$ENABLE_SSL" = "true" ] && [ "$PORT" = "$SSL_PORT" ]; then
     echo "HTTP and HTTPS use port $SSL_PORT; disabling the HTTP redirect listener"
     sed -i '/# BEGIN HTTP_REDIRECT_SERVER/,/# END HTTP_REDIRECT_SERVER/d' /tmp/nginx/nginx.conf
diff --git a/docker/nginx-https.conf b/docker/nginx-https.conf
index 5c48ac194..0684f3ed0 100644
--- a/docker/nginx-https.conf
+++ b/docker/nginx-https.conf
@@ -41,10 +41,12 @@ http {
         image/svg+xml;
     client_header_timeout 300s;
 
+    # BEGIN TRUSTED_PROXIES
     set_real_ip_from 127.0.0.1;
     set_real_ip_from 10.0.0.0/8;
     set_real_ip_from 172.16.0.0/12;
     set_real_ip_from 192.168.0.0/16;
+    # END TRUSTED_PROXIES
     real_ip_header X-Forwarded-For;
     real_ip_recursive on;
 
@@ -174,7 +176,7 @@ http {
             root /app/html;
             index index.html index.htm;
             expires off;
-            add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'wasm-unsafe-eval' 'sha256-gQLhWUEDVfLtBiv83VAckuSAVmhxOpOHbNpFbODgPN0='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: http: https:; font-src 'self' data:; connect-src 'self' http: https: ws: wss:; media-src 'self' data: blob: http: https:; worker-src 'self' blob:; frame-src http: https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'" always;
+            add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'wasm-unsafe-eval' 'sha256-0FPou4vGHwupDie6Xais6VntpJ4yaK9E6TyhXLwZe8o='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: http: https:; font-src 'self' data:; connect-src 'self' http: https: ws: wss:; media-src 'self' data: blob: http: https:; worker-src 'self' blob:; frame-src http: https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'" always;
             add_header X-Frame-Options "DENY" always;
             add_header Referrer-Policy "strict-origin-when-cross-origin" always;
             add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
@@ -291,33 +293,6 @@ http {
             proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
         }
 
-        # 2.8 URLs that something outside Termix still calls: the Vault OIDC
-        # callback, the Termix ID resolver and automation webhooks. The
-        # backend redirects each to the plugin that serves it now (see
-        # contributes.http in each plugin's manifest). New plugins never add
-        # a block here.
-        location = /vault/oidc/callback {
-            proxy_pass http://127.0.0.1:30001;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-        }
-
-        location ^~ /termix-id/u/ {
-            proxy_pass http://127.0.0.1:30001;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
-        }
-
-        location ^~ /automations/webhook/ {
-            rewrite ^/automations/webhook/(.*)$ /plugin-api/automations/webhook/$1 last;
-        }
-
         # Every plugin's HTTP routes. One block, no per-plugin entries: a
         # plugin serves at /plugin-api/<id>/ on the main backend and never
         # gets a port or a block of its own. Buffering is off so SSE streams
diff --git a/docker/nginx.conf b/docker/nginx.conf
index f628a5442..1ecea3455 100644
--- a/docker/nginx.conf
+++ b/docker/nginx.conf
@@ -41,10 +41,12 @@ http {
         image/svg+xml;
     client_header_timeout 300s;
 
+    # BEGIN TRUSTED_PROXIES
     set_real_ip_from 127.0.0.1;
     set_real_ip_from 10.0.0.0/8;
     set_real_ip_from 172.16.0.0/12;
     set_real_ip_from 192.168.0.0/16;
+    # END TRUSTED_PROXIES
     real_ip_header X-Forwarded-For;
     real_ip_recursive on;
 
@@ -144,7 +146,7 @@ http {
             root /app/html;
             index index.html index.htm;
             expires off;
-            add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'wasm-unsafe-eval' 'sha256-gQLhWUEDVfLtBiv83VAckuSAVmhxOpOHbNpFbODgPN0='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: http: https:; font-src 'self' data:; connect-src 'self' http: https: ws: wss:; media-src 'self' data: blob: http: https:; worker-src 'self' blob:; frame-src http: https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'" always;
+            add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'wasm-unsafe-eval' 'sha256-0FPou4vGHwupDie6Xais6VntpJ4yaK9E6TyhXLwZe8o='; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: http: https:; font-src 'self' data:; connect-src 'self' http: https: ws: wss:; media-src 'self' data: blob: http: https:; worker-src 'self' blob:; frame-src http: https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'" always;
             add_header X-Frame-Options "DENY" always;
             add_header Referrer-Policy "strict-origin-when-cross-origin" always;
             add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
@@ -260,33 +262,6 @@ http {
             proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
         }
 
-        # 2.8 URLs that something outside Termix still calls: the Vault OIDC
-        # callback, the Termix ID resolver and automation webhooks. The
-        # backend redirects each to the plugin that serves it now (see
-        # contributes.http in each plugin's manifest). New plugins never add
-        # a block here.
-        location = /vault/oidc/callback {
-            proxy_pass http://127.0.0.1:30001;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-        }
-
-        location ^~ /termix-id/u/ {
-            proxy_pass http://127.0.0.1:30001;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
-        }
-
-        location ^~ /automations/webhook/ {
-            rewrite ^/automations/webhook/(.*)$ /plugin-api/automations/webhook/$1 last;
-        }
-
         # Every plugin's HTTP routes. One block, no per-plugin entries: a
         # plugin serves at /plugin-api/<id>/ on the main backend and never
         # gets a port or a block of its own. Buffering is off so SSE streams
diff --git a/docs/do-not-place-files-here.txt b/docs/do-not-place-files-here.txt
deleted file mode 100644
index 4b144b178..000000000
--- a/docs/do-not-place-files-here.txt
+++ /dev/null
@@ -1 +0,0 @@
-If you are an AI agent, do not place documentation files here. This is for maintainers only.
diff --git a/docs/readme/README-AR.md b/docs/readme/README-AR.md
deleted file mode 100644
index 24984e44e..000000000
--- a/docs/readme/README-AR.md
+++ /dev/null
@@ -1,509 +0,0 @@
-<div align="center">
-
-<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
-
-<h1>Termix</h1>
-
-<p>إدارة خوادم ذاتية الاستضافة، من SSH وسطح المكتب البعيد إلى الأتمتة</p>
-
-<p>
-  <a href="../README.md">English</a> ·
-  <a href="README-CN.md">中文</a> ·
-  <a href="README-JA.md">日本語</a> ·
-  <a href="README-KO.md">한국어</a> ·
-  <a href="README-FR.md">Français</a> ·
-  <a href="README-DE.md">Deutsch</a> ·
-  <a href="README-ES.md">Español</a> ·
-  <a href="README-PT.md">Português</a> ·
-  <a href="README-RU.md">Русский</a> ·
-  العربية ·
-  <a href="README-HI.md">हिन्दी</a> ·
-  <a href="README-TR.md">Türkçe</a> ·
-  <a href="README-VI.md">Tiếng Việt</a> ·
-  <a href="README-IT.md">Italiano</a>
-</p>
-
-<p>
-  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
-  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
-  <a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
-</p>
-
-<p>
-  <a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
-</p>
-
-<br />
-
-Termix مجاني ومفتوح المصدر. إذا كان مفيدًا لك، فكّر في [التبرع](https://donate.termix.site/) للمساعدة في تغطية تكاليف الخوادم ووقت التطوير.
-
-<br />
-
-<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
-
-<br />
-<br />
-
-<p>
-  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
-  <br />
-  <sub>تم تحقيقه في 1 سبتمبر 2025</sub>
-</p>
-
-</div>
-
-<br />
-
-## نظرة عامة
-
-Termix منصة مجانية ومفتوحة المصدر وذاتية الاستضافة لإدارة خوادمك. تجمع في مكان واحد طرفيات SSH وأسطح المكتب البعيدة (RDP وVNC وTelnet) ونقل الملفات والأنفاق وDocker والمقاييس والأتمتة، على الويب وسطح المكتب والهاتف. إنه بديل ذاتي الاستضافة لـ Termius ويبقى مجانيًا إلى الأبد.
-
-<br />
-
-## الميزات
-
-<table>
-<tr>
-<td width="50%" valign="top">
-
-**طرفية SSH:**
-طرفية كاملة بعلامات تبويب مثل المتصفح وتقسيم للشاشة، حتى 6 لوحات في وقت واحد. اختر السمة والخط والألوان. يوجد فوق كل جلسة شريط يعرض المعالج والذاكرة والقرص لحظيًا، مع روابط سريعة إلى ملفات ذلك المضيف وDocker والأنفاق والمقاييس.
-
-</td>
-<td width="50%" valign="top">
-
-**سطح المكتب البعيد:**
-RDP وVNC وTelnet داخل المتصفح، في علامات تبويب وشاشة مقسّمة مثل أي جلسة أخرى. يتضمن متصفح ملفات لأقراص RDP ورفعًا بالسحب والإفلات. على سطح مكتب Windows يمكنك أيضًا فتح المضيف في عميل RDP الأصلي.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**أنفاق SSH:**
-إعادة توجيه محلية وبعيدة وSOCKS ديناميكية، مع إعادة اتصال تلقائية وفحوص للحالة. تُحفظ أنفاق العميل إلى الخادم في تطبيق سطح المكتب على ذلك الجهاز، ويمكنك حفظ إعدادات جاهزة على الخادم لنقل التهيئة إلى جهاز آخر.
-
-</td>
-<td width="50%" valign="top">
-
-**مدير الملفات:**
-تصفح الملفات وحرّرها وارفعها ونزّلها وأعد تسميتها وانقلها واحذفها عبر SFTP، مع دعم sudo. اعرض وحرّر الشيفرة والصور والصوت والفيديو. انسخ الملفات مباشرة من خادم إلى آخر، مع اختيار أسرع مسار تلقائيًا والتحقق من سلامة النقل.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Docker وPodman:**
-شغّل الحاويات وأوقفها وعلّقها واحذفها، وتابع إحصاءاتها، وافتح طرفية داخل إحداها. يعمل مع Docker وPodman معًا. ليس بديلاً عن Portainer أو Dockge، بل وسيلة لإدارة الحاويات الموجودة لديك.
-
-</td>
-<td width="50%" valign="top">
-
-**مدير المضيفات:**
-احفظ مضيفاتك ونظّمها بالوسوم ومجلدات متداخلة يمكنك تسميتها وتلوينها. أعد استخدام بيانات الدخول المحفوظة عبر عدة مضيفات، وانشر مفاتيح SSH تلقائيًا، واجمع المضيفات تحت مضيف رئيسي، وحرّر وصدّر دفعة واحدة، واستخدم الاتصال السريع للاتصالات العابرة التي لا تريد حفظها.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**مقاييس المضيف:**
-المعالج والذاكرة والقرص والشبكة والحرارة ومدة التشغيل والعمليات والمنافذ وتسجيلات الدخول ومعلومات النظام على معظم خوادم Linux، مع رسوم بيانية للسجل. تتيح لك بطاقات الإدارة التعامل مع الخدمات ومهام cron والحزم والمستخدمين وقواعد الجدار الناري وWireGuard وTailscale وشهادات SSL والسجلات وفحوص السلامة دون مغادرة Termix.
-
-</td>
-<td width="50%" valign="top">
-
-**الأتمتة:**
-اختر مُشغِّلًا ثم حدّد ما ينبغي أن يحدث. تشمل المشغّلات تجاوز مقياس لحد معين، أو مضيفًا يسقط أو يعود، أو تغيّر فحص السلامة، أو جدولًا زمنيًا، أو حدث حاوية، أو webhook واردًا. يمكن للخطوات تشغيل أوامر ومقتطفات، والتحكم في الحاويات والأنفاق، وإيقاظ مضيف، واستدعاء رابط، والانتظار، والتفرع حسب شرط، وتشغيل أتمتة أخرى، وإشعارك عبر ntfy أو Discord أو webhook. تتيح لك عمليات التشغيل التجريبي التجربة بأمان أولًا.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**الأساطيل:**
-اجمع المضيفات في أسطول باختيارها يدويًا أو بقواعد الوسوم، لتنضم المضيفات الجديدة تلقائيًا. شغّل أمرًا واحدًا على كل المضيفات دفعة واحدة، وادفع الملفات واسحبها من جميعها، وثبّت الحزم، واجمع جردًا بنظام التشغيل والنواة والمعمارية ومدة التشغيل.
-
-</td>
-<td width="50%" valign="top">
-
-**مساعد الذكاء الاصطناعي:**
-ميزة اختيارية ومعطلة حتى تفعّلها بنفسك. اربط OpenAI أو Anthropic أو Gemini أو Ollama أو أي نقطة وصول متوافقة مع OpenAI واسأل عن إعداداتك. يمكنه قراءة المضيفات والأساطيل والمقتطفات والتنبيهات، ويقترح التغييرات لتوافق عليها بدلًا من تنفيذها بنفسه. لا يمكنه أبدًا الوصول إلى بيانات الدخول أو المستخدمين أو الإعدادات. يستطيع المسؤولون تعطيله للنظام بالكامل، ويمكنك إخفاؤه أثناء الإعداد.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**تسجيل الدخول والمستخدمون:**
-حسابات محلية إضافة إلى تسجيل الدخول عبر OIDC وLDAP وGitHub وGoogle، مع التحقق بخطوتين (TOTP) ومفاتيح المرور (WebAuthn) والأجهزة الموثوقة. يستطيع المسؤولون إدارة المستخدمين وربط مجموعات OIDC بالأدوار ورؤية كل الجلسات النشطة على جميع المنصات وإلغاؤها. اربط حسابك المحلي بحساب OIDC، واطّلع على سجل التدقيق لما فعله الجميع.
-
-</td>
-<td width="50%" valign="top">
-
-**الأدوار والمشاركة:**
-أنشئ أدوارًا وشارك المضيفات مع المستخدمين أو الأدوار على أربعة مستويات: الاتصال والعرض والتحرير والإدارة. يعمل مع جميع أنواع المصادقة وجميع البروتوكولات، ويمكنك تجاوز بيانات الدخول المستخدمة لمضيف مشترك.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**التنبيهات:**
-ضع قواعد على مقاييس المضيف مثل المعالج والذاكرة والقرص، وتلقَّ إشعارًا عبر ntfy أو Discord أو webhook عند تفعيلها. اطّلع على التنبيهات النشطة والمنتهية في سجل، وتجاهل ما لا يهمك منها.
-
-</td>
-<td width="50%" valign="top">
-
-**الصفحة الرئيسية:**
-شبكة عناصر تبنيها بنفسك بالسحب والإفلات. هناك عناصر لحالة المضيفات وnping وروابط الخدمات والإشارات المرجعية والبحث والساعات والتقويمات والعد التنازلي والملاحظات وRSS والطقس والصور والإطارات المضمّنة وDocker والأنفاق ورسوم المقاييس وواجهات API الخاصة بك، وحتى طرفية حية.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**المقتطفات والأدوات:**
-احفظ الأوامر التي تستخدمها كثيرًا وشغّلها بنقرة واحدة، مع متغيرات للمضيف ولمدخلاتك الخاصة. شغّل أمرًا واحدًا على كل الطرفيات المفتوحة، وابحث في سجل أوامرك مع الإكمال التلقائي.
-
-</td>
-<td width="50%" valign="top">
-
-**مشاركة الجلسة:**
-شارك جلسة طرفية أو RDP أو VNC أو Telnet مباشرة. أرسل رابطًا يمكن لأي شخص الانضمام إليه دون حساب، أو شارك مع مستخدم Termix محدد، للقراءة فقط أو مع صلاحية الكتابة. يمكن أن تنتهي المشاركات تلقائيًا أو تُلغى في أي وقت، ويمكن إيقافها كليًا أو لكل مضيف على حدة.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**تسجيل الجلسات والسجلات:**
-سجّل جلسات الطرفية وRDP وVNC وشاهدها لاحقًا. نزّل سجلات نصية للجلسة، واطّلع على سجل الاتصال لترى بالضبط ما جرى أثناء الاتصال.
-
-</td>
-<td width="50%" valign="top">
-
-**الاتصالات التسلسلية:**
-تواصل مع الأجهزة التسلسلية مثل الموجّهات والمبدّلات والمتحكمات الدقيقة من المتصفح أو تطبيق سطح المكتب. اضبط معدل الباود وبتات البيانات وبتات التوقف والتماثل. يستخدم واجهة Web Serial في المتصفحات المدعومة، أو خلفية أصلية في تطبيق سطح المكتب.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Tailscale:**
-اسحب الأجهزة من شبكة tailnet لإضافتها كمضيفات ببضع نقرات، واتصل عبر Tailscale SSH لتتولى قوائم صلاحيات tailnet أمر الوصول دون تخزين بيانات دخول. يعمل أيضًا مع Headscale ونقاط الوصول المخصصة.
-
-</td>
-<td width="50%" valign="top">
-
-**Proxmox:**
-استورد المضيفات مباشرة من نسخة Proxmox، وتابع إحصاءات العقد والأنظمة الضيفة، بما فيها المعالج والذاكرة والتخزين، في تبويب خاص بها.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**مساحات العمل وعلامات التبويب:**
-احفظ مجموعة من علامات التبويب بتقسيمها، وأعد فتحها كلها بنقرة واحدة. يتذكر Termix أيضًا جلستك الأخيرة، فتعود علامات التبويب بعد التحديث وعلى الأجهزة الأخرى.
-
-</td>
-<td width="50%" valign="top">
-
-**إعداد موجَّه:**
-إعداد قصير يرشدك إلى اختيار نمط الواجهة والسمة والميزات التي تريدها وأول مضيف لك. يخفي الوضع البسيط ما لا تستخدمه، ويمكنك إعادة الإعداد أو تغيير النمط في أي وقت.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**تطبيق سطح المكتب المستقل والمزامنة:**
-يعمل تطبيق سطح المكتب بمفرده بخلفية وقاعدة بيانات محلية، دون حاجة إلى خادم. يمكنك أيضًا ربطه بخادم Termix لمزامنة المضيفات وبيانات الدخول والمقتطفات وغيرها في الاتجاهين، واختيار ما إذا كانت الاتصالات تبدأ من جهازك أم عبر الخادم.
-
-</td>
-<td width="50%" valign="top">
-
-**سطر الأوامر:**
-أداة `termix` لسطر الأوامر تعمل في الطرفية وفي سكربتاتك. افتح الطرفيات، ونفّذ أمرًا على مضيف واحد أو على أسطول كامل، وانقل الملفات عبر SFTP، وأدر المضيفات والمقتطفات وبيانات الدخول. ثبّتها عبر `npm install -g @termix-ssh/cli` أو استخدم ملفًا تنفيذيًا مستقلًا. راجع [وثائق سطر الأوامر](https://docs.termix.site/cli).
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**الأمان:**
-تُشفَّر كلمات المرور والمفاتيح والأسرار الأخرى لكل مستخدم على حدة، ويمكن تشفير ملفات قاعدة البيانات نفسها على القرص. راجع [الوثائق](https://docs.termix.site/features/authentication/security/) لمعرفة آلية العمل.
-
-</td>
-<td width="50%" valign="top">
-
-**اللغات:**
-نحو 30 لغة مدمجة، تُدار عبر [Crowdin](https://docs.termix.site/translations).
-
-</td>
-</tr>
-</table>
-
-<br />
-
-<details dir="rtl">
-<summary><b>ميزات أخرى</b></summary>
-<br />
-
-- **لوحة المعلومات** - خوادمك في لمحة واحدة، ببطاقات ترتّبها بنفسك
-- **رسم الشبكة** - مختبرك المنزلي مرسومًا انطلاقًا من مضيفاتك، مع الحالة لحظيًا
-- **مراقب tmux** - تصفح جلسات tmux ونوافذه ولوحاته، مع معاينة وبحث
-- **مفاتيح API** - مفاتيح خاصة بكل مستخدم لها تاريخ انتهاء، للسكربتات وأنظمة CI
-- **التصدير والاستيراد** - انقل المضيفات وبيانات الدخول وبيانات مدير الملفات إلى الداخل والخارج
-- **SSL تلقائي** - تُنشأ الشهادات وتُجدَّد نيابة عنك، مع إعادة التوجيه إلى HTTPS، أو استخدم شهاداتك الخاصة
-- **قواعد البيانات** - SQLite افتراضيًا، مع دعم PostgreSQL وMySQL أيضًا
-- **واجهة حديثة** - واجهة React أنيقة تعمل على سطح المكتب والهاتف، بسمات مثل الفاتح والداكن وDracula. يمكن فتح أي اتصال بملء الشاشة من رابط
-- **لوحة الأوامر** - اضغط مفتاح Shift الأيسر مرتين للانتقال إلى مضيف من لوحة المفاتيح
-- **اختصارات لوحة المفاتيح** - التنقل بين علامات التبويب وإغلاقها وغير ذلك، وكلها قابلة لإعادة التعيين
-- **Wake-on-LAN** - أيقظ جهازًا من Termix أو من خطوة في الأتمتة
-- **مصادقة الوكيل الموثوق** - دع وكيلًا عكسيًا يتولى تسجيل الدخول ويمرّر المستخدم
-- **SSH بإمكانات واسعة** - مضيفات وسيطة وWarpgate وطلبات TOTP وSOCKS5 والتحقق من مفاتيح المضيف والتعبئة التلقائية لكلمات المرور و[OPKSSH](https://github.com/openpubkey/opkssh) وtmux وport knocking وسجلات الطرفية وتمرير الوكيل ووكيل SSH من Bitwarden وتوقيع SSH عبر HashiCorp Vault وغيرها
-- **Termix ID** - نسخة مدمجة على غرار sshid.io. احجز معرّفًا، وانشر مفاتيحك العامة على رابط محلِّل، وأصدر شهادات SSH من سلطة التصديق المدمجة
-
-</details>
-
-<br />
-
-## المنصات المدعومة
-
-<table align="center">
-<tr>
-<th align="center">المنصة</th>
-<th align="center">طريقة التوزيع</th>
-</tr>
-<tr>
-<td align="center"><b>Web</b></td>
-<td>أي متصفح حديث (Chrome وSafari وFirefox) · يدعم PWA</td>
-</tr>
-<tr>
-<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
-<td>نسخة محمولة · مثبّت MSI · Chocolatey</td>
-</tr>
-<tr>
-<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
-<td>نسخة محمولة · AUR · AppImage · Deb · Flatpak</td>
-</tr>
-<tr>
-<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
-<td>Apple App Store · DMG · Homebrew</td>
-</tr>
-<tr>
-<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
-<td>Apple App Store · IPA</td>
-</tr>
-<tr>
-<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
-<td>Google Play Store · APK</td>
-</tr>
-</table>
-
-<br />
-
-## التثبيت
-
-راجع [وثائق Termix](https://docs.termix.site/install) للاطلاع على تعليمات التثبيت الكاملة لجميع المنصات.
-
-مثال على ملف Docker Compose (يمكنك حذف `guacd` والشبكة إذا كنت لا تنوي استخدام سطح المكتب البعيد):
-
-```yaml
-services:
-  termix:
-    image: ghcr.io/lukegus/termix:latest
-    container_name: termix
-    restart: unless-stopped
-    ports:
-      - "8080:8080"
-    volumes:
-      - termix-data:/app/data
-    environment:
-      PORT: "8080"
-    depends_on:
-      - guacd
-    networks:
-      - termix-net
-
-  guacd:
-    image: guacamole/guacd:1.6.0
-    container_name: guacd
-    restart: unless-stopped
-    ports:
-      - "4822:4822"
-    networks:
-      - termix-net
-
-volumes:
-  termix-data:
-    driver: local
-
-networks:
-  termix-net:
-    driver: bridge
-```
-
-### سطر الأوامر
-
-يوفر Termix أيضًا أداة سطر أوامر، لتدير خوادمك من الطرفية وتستخدم Termix داخل سكربتاتك.
-
-```bash
-npm install -g @termix-ssh/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-تستطيع فتح الطرفيات، وتنفيذ أمر على مضيف واحد أو على أسطول كامل، ونقل الملفات عبر SFTP، وإدارة المضيفات والمقتطفات وبيانات الدخول. الوثائق الكاملة على [docs.termix.site/cli](https://docs.termix.site/cli).
-
-### الاستضافة السحابية
-
-يمكنك تشغيل خادم Termix على VPS بدلًا من داخل شبكتك. إذا كان Termix يعمل داخل الشبكة التي يديرها، فأي عطل سيأخذه معه، تحديدًا حين تحتاج إليه لإصلاح الأمور. تشغيله في الخارج يبقيه متاحًا، ويمنحك عنوان IP ثابتًا، ويتيح لك الدخول من أي مكان دون VPN أو فتح منافذ.
-
-ترعى [GINERNET](https://docs.termix.site/install/ginernet) مشروع Termix، وتتضمن الوثائق دليلًا خطوة بخطوة للنشر على منصة الخوادم الافتراضية الخاصة بهم.
-
-<br />
-
-## بيانات الاستخدام
-
-يرسل Termix تقريرًا صغيرًا مجهول الهوية مرة واحدة يوميًا حتى أعرف عدد النسخ العاملة والميزات المستخدمة. يحتوي على معرّف عشوائي للنسخة، وإصدار التطبيق، وعدد المستخدمين والأجهزة لديك. ويمكن أن يتضمن أيضًا منصتك (نظام التشغيل، والمعمارية، وإصدار Node.js، ونوع قاعدة البيانات، وهل تستخدم Docker أو تطبيق سطح المكتب أو خادمًا عاديًا)، وعدد مرات فتح كل نوع من التبويبات وعدد عمليات تسجيل الدخول عبر SSH، والميزات المدمجة التي تعمل. لا يحتوي أبدًا على أسماء المستخدمين أو أسماء الأجهزة أو عناوين IP أو بيانات الدخول أو أي شيء آخر يعرّف بك أو بخوادمك.
-
-وهي مفعّلة افتراضيًا. يمكنك إيقافها أو اختيار ما تتضمنه من إعدادات المسؤول ضمن قسم Usage Statistics، وهناك يمكنك أيضًا معاينة التقرير كما سيُرسل تمامًا. ويمكن لكل مستخدم استبعاد استخدامه الشخصي للميزات من ملفه الشخصي. ضبط `ENABLE_TELEMETRY=false` يوقفها ويقفل المفتاح.
-
-<br />
-
-## التبرع
-
-Termix مجاني ومفتوح المصدر، بلا اشتراكات ولا خطط مدفوعة. إذا كان مفيدًا لك، فكّر في التبرع للمساعدة في تغطية الخوادم والنطاقات ووقت التطوير. تموّل التبرعات أيضًا وقت البحث والتعلّم اللازم لبناء ميزات مثل SAML وKubernetes ودعم الوكلاء. تابع التقدم وتبرع من الرابط أدناه.
-
-[تبرّع](https://donate.termix.site/)
-
-<br />
-
-## الرعاة
-
-هل تهتم بمساحة إعلانية مدفوعة لدعم التطوير؟ راسلنا على [mail@termix.site](mailto:mail@termix.site).
-
-<!-- SPONSORS:START -->
-
-<div align="center">
-
-<br />
-
-<a href="https://www.digitalocean.com/">
-  <img src="https://termix.site/img/sponsors/digitalocean.svg" height="40" alt="DigitalOcean" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://crowdin.com/">
-  <img src="https://termix.site/img/sponsors/crowdin.svg" height="40" alt="Crowdin" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.blacksmith.sh/">
-  <img src="https://termix.site/img/sponsors/blacksmith.svg" height="40" alt="Blacksmith" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.cloudflare.com/">
-  <img src="https://termix.site/img/sponsors/cloudflare.png" height="40" alt="Cloudflare" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://akamai.com/">
-  <img src="https://termix.site/img/sponsors/akamai.svg" height="40" alt="Akamai" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://aws.amazon.com/">
-  <img src="https://termix.site/img/sponsors/aws.png" height="40" alt="AWS" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://rackgenius.com/">
-  <img src="https://termix.site/img/sponsors/rackgenius.png" height="40" alt="Rack Genius" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://termix.site/img/sponsors/ginernet.png" height="40" alt="Ginernet" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.hetzner.com/?mtm_campaign=termix&mtm_medium=referral&mtm_content=sponsoring_link">
-  <img src="https://termix.site/img/sponsors/hetzner.png" height="40" alt="Hetzner" />
-</a>
-
-</div>
-
-<!-- SPONSORS:END -->
-
-<br />
-
-## الدعم
-
-تحتاج مساعدة أو تريد طلب ميزة؟ افتح [مشكلة جديدة](https://github.com/Termix-SSH/Support/issues) واذكر أكبر قدر ممكن من التفاصيل، بالإنجليزية إن أمكن. يمكنك أيضًا السؤال في قناة الدعم على [Discord](https://discord.gg/jVQGdvHDrf)، وإن كانت الردود هناك قد تتأخر.
-
-<br />
-
-## لقطات الشاشة
-
-<div align="center">
-
-<br />
-
-[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
-
-<sub>شاهد عروض التحديثات على YouTube</sub>
-
-<br />
-<br />
-
-<table>
-<tr>
-<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
-<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
-<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
-<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
-<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
-<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
-<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
-<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 15.png" alt="Termix Screenshot 15" width="400" /></td>
-<td><img src="../repo-images/Image 16.png" alt="Termix Screenshot 16" width="400" /></td>
-</tr>
-</table>
-
-<sub>قد تكون بعض المقاطع والصور قديمة أو لا تعرض الميزات على أفضل وجه.</sub>
-
-</div>
-
-<br />
-
-## الميزات المخططة
-
-جميع الميزات المخططة موجودة في [Projects](https://github.com/orgs/Termix-SSH/projects/5). إذا أردت المساهمة، راجع [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
-
-<br />
-
-## الترخيص
-
-يوزَّع بموجب ترخيص Apache الإصدار 2.0. راجع ملف `LICENSE` لمزيد من المعلومات.
diff --git a/docs/readme/README-CN.md b/docs/readme/README-CN.md
deleted file mode 100644
index b3f646890..000000000
--- a/docs/readme/README-CN.md
+++ /dev/null
@@ -1,504 +0,0 @@
-<div align="center">
-
-<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
-
-<h1>Termix</h1>
-
-<p>自托管服务器管理，从 SSH 和远程桌面到自动化</p>
-
-<p>
-  <a href="../README.md">English</a> ·
-  中文 ·
-  <a href="README-JA.md">日本語</a> ·
-  <a href="README-KO.md">한국어</a> ·
-  <a href="README-FR.md">Français</a> ·
-  <a href="README-DE.md">Deutsch</a> ·
-  <a href="README-ES.md">Español</a> ·
-  <a href="README-PT.md">Português</a> ·
-  <a href="README-RU.md">Русский</a> ·
-  <a href="README-AR.md">العربية</a> ·
-  <a href="README-HI.md">हिन्दी</a> ·
-  <a href="README-TR.md">Türkçe</a> ·
-  <a href="README-VI.md">Tiếng Việt</a> ·
-  <a href="README-IT.md">Italiano</a>
-</p>
-
-<p>
-  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
-  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
-  <a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
-</p>
-
-<p>
-  <a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
-</p>
-
-<br />
-
-Termix 免费且开源。如果您觉得它有用，请考虑[捐赠](https://donate.termix.site/)以帮助支付服务器费用和开发时间。
-
-<br />
-
-<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
-
-<br />
-<br />
-
-<p>
-  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
-  <br />
-  <sub>获得于 2025年9月1日</sub>
-</p>
-
-</div>
-
-<br />
-
-## 概览
-
-Termix 是一个免费、开源、自托管的服务器管理平台。它把 SSH 终端、远程桌面（RDP、VNC、Telnet）、文件传输、隧道、Docker、指标和自动化集中在一个地方，支持网页端、桌面端和移动端。它是 Termius 的自托管替代品，并且永久免费。
-
-<br />
-
-## 功能
-
-<table>
-<tr>
-<td width="50%" valign="top">
-
-**SSH 终端:**
-功能齐全的终端，配有类似浏览器的标签页和分屏，最多同时显示 6 个面板。可以选择主题、字体和配色。每个会话上方都有一个工具栏，显示实时的 CPU、内存和磁盘，并提供指向该主机文件、Docker、隧道和指标的快捷入口。
-
-</td>
-<td width="50%" valign="top">
-
-**远程桌面:**
-在浏览器中使用 RDP、VNC 和 Telnet，和其他会话一样支持标签页和分屏。包含 RDP 驱动器的文件浏览器和拖放上传。在 Windows 桌面端，你还可以用原生 RDP 客户端打开主机。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**SSH 隧道:**
-支持本地、远程和动态 SOCKS 转发，可自动重连并进行健康检查。桌面端的客户端到服务器隧道保存在本机，你也可以把预设保存到服务器，以便迁移到另一台客户端。
-
-</td>
-<td width="50%" valign="top">
-
-**文件管理器:**
-通过 SFTP 浏览、编辑、上传、下载、重命名、移动和删除文件，支持 sudo。可以查看和编辑代码、图片、音频和视频。在专属的传输标签页里把文件直接从一台服务器复制到另一台，系统会自动选择最快的路径并校验传输完整性。桌面端还提供本地和远程并排显示的视图。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Docker 和 Podman:**
-启动、停止、暂停和删除容器，查看它们的状态，并在容器内打开一个终端。同时支持 Docker 和 Podman。它不是要取代 Portainer 或 Dockge，只是用来管理你已有的容器。
-
-</td>
-<td width="50%" valign="top">
-
-**主机管理:**
-用标签和可命名、可配色的嵌套文件夹来整理主机。在多台主机之间复用已保存的凭据，自动部署 SSH 密钥，把主机归到父主机下，批量编辑和导出，还可以用快速连接处理那些不想保存的一次性连接。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**主机指标:**
-在大多数 Linux 服务器上查看 CPU、内存、磁盘、网络、温度、NVIDIA GPU、运行时间、进程、端口、登录记录和系统信息，并附带历史曲线图。管理卡片让你无需离开 Termix 就能处理服务、定时任务、软件包、用户、防火墙规则、WireGuard、Tailscale、SSL 证书、日志和健康检查。
-
-</td>
-<td width="50%" valign="top">
-
-**自动化:**
-先选一个触发条件，再决定要做什么。触发条件包括指标超过阈值、主机上线或下线、健康检查状态变化、定时计划、容器事件，或者一个传入的 Webhook。步骤可以执行命令和代码片段、控制容器和隧道、唤醒主机、调用某个网址、等待、按条件分支、运行另一个自动化，并通过 ntfy、Discord 或 Webhook 通知你。测试运行让你先安全地试一遍。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**机群:**
-通过手动挑选或标签规则把主机编成一个机群，新主机可以自动加入。一次在所有主机上执行同一条命令，向全部主机推送和拉取文件，安装软件包，并收集系统、内核、架构和运行时间的清单。
-
-</td>
-<td width="50%" valign="top">
-
-**AI 助手:**
-可选功能，默认关闭，需要你手动开启。接入 OpenAI、Anthropic、Gemini、Ollama 或任何兼容 OpenAI 的接口，向它询问你的配置。它可以读取主机、机群、代码片段和告警，并把改动作为建议提交给你确认，而不会自行修改。它永远无法接触凭据、用户和设置。管理员可以对整个实例关闭它，你也可以在初始设置时把它隐藏。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**登录与用户:**
-支持本地账户，以及 OIDC、LDAP、GitHub 和 Google 登录，还有两步验证（TOTP）、通行密钥（WebAuthn）和受信任设备。管理员可以管理用户、把 OIDC 群组映射到角色、查看所有平台上的活动会话并将其吊销。你可以把本地账户和 OIDC 账户关联起来，并查看记录所有人操作的审计日志。
-
-</td>
-<td width="50%" valign="top">
-
-**角色与共享:**
-创建角色，并按四个级别把主机共享给用户或角色：连接、查看、编辑和管理。适用于所有认证方式和所有协议，并且可以覆盖共享主机所使用的凭据。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**告警:**
-为 CPU、内存、磁盘等主机指标设置规则，触发时通过 ntfy、Discord 或 Webhook 通知你。在历史记录中查看正在触发和已恢复的告警，并忽略你不关心的那些。
-
-</td>
-<td width="50%" valign="top">
-
-**主页:**
-一个由你自己搭建的拖放小组件网格。小组件包括主机状态、Ping、服务链接、书签、搜索、时钟、日历、倒计时、便签、RSS、天气、图片、内嵌网页、Docker、隧道、指标图表、自定义 API，甚至还有一个实时终端。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**代码片段与工具:**
-保存常用命令，一键执行，并支持主机变量和自定义输入。可以在所有已打开的终端中同时运行一条命令，也可以带自动补全地搜索命令历史。
-
-</td>
-<td width="50%" valign="top">
-
-**会话共享:**
-实时共享终端、RDP、VNC 或 Telnet 会话。可以发送一个无需账户即可加入的链接，也可以共享给指定的 Termix 用户，并选择只读或可读写。共享可以自动过期或随时撤销，也可以全局或按主机关闭。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**会话录制与日志:**
-录制终端、RDP 和 VNC 会话，之后可以回放。可以下载会话的纯文本日志，也可以查看连接日志，了解连接过程中究竟发生了什么。
-
-</td>
-<td width="50%" valign="top">
-
-**串口连接:**
-从浏览器或桌面应用连接路由器、交换机和单片机等串口设备。可设置波特率、数据位、停止位和校验位。在支持的浏览器中使用 Web Serial API，在桌面应用中使用原生后端。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Tailscale:**
-从你的 tailnet 中拉取设备，点几下就能把它们添加为主机，并使用 Tailscale SSH 连接，由 tailnet ACL 负责访问控制，无需保存任何凭据。也支持 Headscale 和自定义接口地址。
-
-</td>
-<td width="50%" valign="top">
-
-**Proxmox:**
-直接从 Proxmox 实例导入主机，并在专属标签页中查看节点和虚拟机的状态，包括 CPU、内存和存储。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**工作区与标签页:**
-保存一组标签页及其分屏布局，一键就能把整套重新打开。Termix 还会记住你上次的会话，所以刷新页面或换设备后标签页都会回来。
-
-</td>
-<td width="50%" valign="top">
-
-**命令行工具:**
-`termix` 命令行工具，可用于你的终端和脚本。打开终端、在单台主机或整个机群上执行命令、通过 SFTP 传输文件，以及管理主机、代码片段和凭据。用 `npm install -g @termix-ssh/cli` 安装，或者直接下载独立的可执行文件。详见 [CLI 文档](https://docs.termix.site/cli)。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**安全:**
-密码、密钥和其他机密按用户加密，数据库文件本身也可以在磁盘上加密。具体原理请查看[文档](https://docs.termix.site/features/authentication/security/)。
-
-</td>
-<td width="50%" valign="top">
-
-**多语言:**
-内置约 30 种语言，通过 [Crowdin](https://docs.termix.site/translations) 管理。
-
-</td>
-</tr>
-</table>
-
-<br />
-
-<details>
-<summary><b>更多功能</b></summary>
-<br />
-
-- **仪表盘** - 一眼看清你的服务器，卡片由你自己排布
-- **网络拓扑图** - 根据你的主机绘制出你的家庭实验室，并显示实时状态
-- **Tmux 监视器** - 浏览 tmux 的会话、窗口和面板，支持预览和搜索
-- **API 密钥** - 面向用户的密钥，带有效期，可用于脚本和 CI
-- **导出与导入** - 把主机、凭据和文件管理器数据导入导出
-- **自动 SSL** - 自动签发和续期证书，并配置 HTTPS 跳转，也可以使用你自己的证书
-- **数据库** - 默认使用 SQLite，同时支持 PostgreSQL 和 MySQL
-- **现代界面** - 简洁的 React 界面，桌面和移动端都适用，提供浅色、深色和 Dracula 等主题。任何连接都能通过网址全屏打开
-- **命令面板** - 双击左 Shift，用键盘直接跳到某台主机
-- **键盘快捷键** - 在标签页之间切换、关闭标签页等，全部可以重新绑定
-- **网络唤醒** - 从 Termix 或自动化步骤中唤醒一台机器
-- **受信任代理认证** - 由反向代理完成登录，并把用户信息传递进来
-- **白标定制** - 管理员可以用自己的名称、图标和配色为实例重新品牌化
-- **Web 端点** - 在 Termix 内嵌打开主机自己的网页界面，比如路由器的管理页面，而不是另开一个标签页
-- **协作房间** - 持久化的房间，一群人可以一起在会话之间跳转，有主持人舞台和邀请功能
-- **丰富的 SSH 功能** - 跳板机、Warpgate、TOTP 验证、SOCKS5、主机密钥验证、密码自动填充、[OPKSSH](https://github.com/openpubkey/opkssh)、tmux、端口敲门、终端日志、代理转发、Bitwarden SSH 代理、HashiCorp Vault SSH 签名、Step CA、1Password Connect 等等
-- **Termix ID** - 内置的 sshid.io 式功能。认领一个用户名，在解析地址上发布你的公钥，并用内置 CA 签发 SSH 证书
-- **命令历史自动建议** - 在终端中输入时，根据你的命令历史给出行内建议
-- **桌面独立运行与同步** - 桌面应用自带本地后端和数据库可以独立运行，也可以选择和 Termix 服务器同步
-
-</details>
-
-<br />
-
-## 平台支持
-
-<table align="center">
-<tr>
-<th align="center">平台</th>
-<th align="center">发行方式</th>
-</tr>
-<tr>
-<td align="center"><b>Web</b></td>
-<td>任何现代浏览器（Chrome、Safari、Firefox）· 支持 PWA</td>
-</tr>
-<tr>
-<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
-<td>便携版 · MSI 安装程序 · Chocolatey</td>
-</tr>
-<tr>
-<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
-<td>便携版 · AUR · AppImage · Deb · Flatpak</td>
-</tr>
-<tr>
-<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
-<td>Apple App Store · DMG · Homebrew</td>
-</tr>
-<tr>
-<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
-<td>Apple App Store · IPA</td>
-</tr>
-<tr>
-<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
-<td>Google Play Store · APK</td>
-</tr>
-</table>
-
-<br />
-
-## 安装
-
-访问 [Termix 文档](https://docs.termix.site/install) 查看所有平台的完整安装说明。
-
-要部署到 Kubernetes？Helm chart 在 `charts/termix` 目录下，涵盖 Ingress、Traefik、Argo CD、GitHub Actions 和 GitLab CI 的完整搭建说明见
-[docs.termix.site/install/server/kubernetes](https://docs.termix.site/install/server/kubernetes)。
-
-Docker Compose 示例（如果你不打算使用远程桌面功能，可以省略 `guacd` 和相关网络配置）：
-
-```yaml
-services:
-  termix:
-    image: ghcr.io/lukegus/termix:latest
-    container_name: termix
-    restart: unless-stopped
-    ports:
-      - "8080:8080"
-    volumes:
-      - termix-data:/app/data
-    environment:
-      PORT: "8080"
-    depends_on:
-      - guacd
-    networks:
-      - termix-net
-
-  guacd:
-    image: guacamole/guacd:1.6.0
-    container_name: guacd
-    restart: unless-stopped
-    ports:
-      - "4822:4822"
-    networks:
-      - termix-net
-
-volumes:
-  termix-data:
-    driver: local
-
-networks:
-  termix-net:
-    driver: bridge
-```
-
-### 命令行工具
-
-Termix 还提供命令行工具，让你可以在终端里管理服务器，也可以把 Termix 用在自己的脚本中。
-
-```bash
-npm install -g @termix-ssh/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-它可以打开终端、在单台主机或整个机群上执行命令、通过 SFTP 传输文件，以及管理主机、代码片段和凭据。完整文档见 [docs.termix.site/cli](https://docs.termix.site/cli)。
-
-### 云端部署
-
-你也可以把 Termix 服务端跑在 VPS 上，而不是自己的内网里。如果 Termix 就运行在它所管理的网络中，一旦网络出问题，Termix 也会跟着一起挂掉，而这恰恰是你最需要它的时候。放在外面运行可以保证它始终可达，还能获得固定 IP，不用 VPN 或端口转发就能从任何地方接入。
-
-[GINERNET](https://docs.termix.site/install/ginernet) 是 Termix 的赞助商，文档里有部署到他们 VPS 平台的分步指南。
-
-<br />
-
-## 遥测
-
-Termix 每天会发送一次匿名的小型报告，让我知道有多少实例在运行、哪些功能被使用。报告包含一个随机的实例 ID、应用版本，以及你的用户数和主机数。它还可以包含你的平台信息（操作系统、架构、Node.js 版本、数据库类型，以及你是用 Docker、桌面应用还是普通服务器运行）、每种标签页被打开的次数和 SSH 登录次数，以及正在运行的内置功能。它绝不会包含用户名、主机名、IP 地址、凭据或任何能识别你或你的服务器的信息。
-
-该功能默认开启。你可以在管理设置的"Usage Statistics"中关闭它或选择要包含的内容，还可以在那里预览将要发送的完整报告。每个用户都可以在个人资料中排除自己的功能使用数据。设置 `ENABLE_TELEMETRY=false` 会关闭它并锁定开关。
-
-<br />
-
-## 捐赠
-
-Termix 免费且开源，没有订阅也没有付费方案。如果你觉得它有用，可以考虑捐赠，帮忙分担服务器、域名和开发时间的成本。捐赠还能支持研究和学习 SAML、Kubernetes、Agent 等功能所需的时间。可以在下方查看进展并捐赠。
-
-[捐赠](https://donate.termix.site/)
-
-<br />
-
-## 赞助商
-
-有意通过付费展示位支持开发吗？请发邮件到 [mail@termix.site](mailto:mail@termix.site)。
-
-<!-- SPONSORS:START -->
-
-<div align="center">
-
-<br />
-
-<a href="https://www.digitalocean.com/">
-  <img src="https://termix.site/img/sponsors/digitalocean.svg" height="40" alt="DigitalOcean" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://crowdin.com/">
-  <img src="https://termix.site/img/sponsors/crowdin.svg" height="40" alt="Crowdin" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.blacksmith.sh/">
-  <img src="https://termix.site/img/sponsors/blacksmith.svg" height="40" alt="Blacksmith" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.cloudflare.com/">
-  <img src="https://termix.site/img/sponsors/cloudflare.png" height="40" alt="Cloudflare" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://akamai.com/">
-  <img src="https://termix.site/img/sponsors/akamai.svg" height="40" alt="Akamai" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://aws.amazon.com/">
-  <img src="https://termix.site/img/sponsors/aws.png" height="40" alt="AWS" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://rackgenius.com/">
-  <img src="https://termix.site/img/sponsors/rackgenius.png" height="40" alt="Rack Genius" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://termix.site/img/sponsors/ginernet.png" height="40" alt="Ginernet" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.hetzner.com/?mtm_campaign=termix&mtm_medium=referral&mtm_content=sponsoring_link">
-  <img src="https://termix.site/img/sponsors/hetzner.png" height="40" alt="Hetzner" />
-</a>
-
-</div>
-
-<!-- SPONSORS:END -->
-
-<br />
-
-## 支持
-
-需要帮助或想提功能建议？可以[新建一个 issue](https://github.com/Termix-SSH/Support/issues)，尽量写清楚细节，如果方便请用英文。你也可以在 [Discord](https://discord.gg/jVQGdvHDrf) 的支持频道提问，不过那边回复可能会慢一些。
-
-<br />
-
-## 展示
-
-<div align="center">
-
-<br />
-
-[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
-
-<sub>在 YouTube 上观看版本更新介绍</sub>
-
-<br />
-<br />
-
-<table>
-<tr>
-<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
-<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
-<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
-<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
-<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
-<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
-<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
-<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 15.png" alt="Termix Screenshot 15" width="400" /></td>
-<td><img src="../repo-images/Image 16.png" alt="Termix Screenshot 16" width="400" /></td>
-</tr>
-</table>
-
-<sub>部分视频和图片可能已经过时，或者不能完整展示功能。</sub>
-
-</div>
-
-<br />
-
-## 计划功能
-
-所有计划中的功能都在 [Projects](https://github.com/orgs/Termix-SSH/projects/5) 里。如果你想参与贡献，请查看[贡献指南](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md)。
-
-<br />
-
-## 许可证
-
-基于 Apache License 2.0 发布。详见 `LICENSE`。
-</content>
diff --git a/docs/readme/README-DE.md b/docs/readme/README-DE.md
deleted file mode 100644
index 15a25558d..000000000
--- a/docs/readme/README-DE.md
+++ /dev/null
@@ -1,504 +0,0 @@
-<div align="center">
-
-<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
-
-<h1>Termix</h1>
-
-<p>Selbst gehostete Serververwaltung, von SSH und Remotedesktop bis zu Automatisierungen</p>
-
-<p>
-  <a href="../README.md">English</a> ·
-  <a href="README-CN.md">中文</a> ·
-  <a href="README-JA.md">日本語</a> ·
-  <a href="README-KO.md">한국어</a> ·
-  <a href="README-FR.md">Français</a> ·
-  Deutsch ·
-  <a href="README-ES.md">Español</a> ·
-  <a href="README-PT.md">Português</a> ·
-  <a href="README-RU.md">Русский</a> ·
-  <a href="README-AR.md">العربية</a> ·
-  <a href="README-HI.md">हिन्दी</a> ·
-  <a href="README-TR.md">Türkçe</a> ·
-  <a href="README-VI.md">Tiếng Việt</a> ·
-  <a href="README-IT.md">Italiano</a>
-</p>
-
-<p>
-  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
-  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
-  <a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
-</p>
-
-<p>
-  <a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
-</p>
-
-<br />
-
-Termix ist kostenlos und quelloffen. Wenn es dir hilft, denk über eine [Spende](https://donate.termix.site/) nach, um Serverkosten und Entwicklungszeit zu decken.
-
-<br />
-
-<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
-
-<br />
-<br />
-
-<p>
-  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
-  <br />
-  <sub>Erreicht am 1. September 2025</sub>
-</p>
-
-</div>
-
-<br />
-
-## Überblick
-
-Termix ist eine kostenlose, quelloffene und selbst gehostete Plattform zur Verwaltung deiner Server. Sie bringt SSH-Terminals, Remotedesktops (RDP, VNC, Telnet), Dateiübertragungen, Tunnel, Docker, Metriken und Automatisierungen an einem Ort zusammen, im Browser, auf dem Desktop und auf dem Handy. Eine selbst gehostete Alternative zu Termius, die dauerhaft kostenlos bleibt.
-
-<br />
-
-## Funktionen
-
-<table>
-<tr>
-<td width="50%" valign="top">
-
-**SSH-Terminal:**
-Ein vollwertiges Terminal mit Tabs wie im Browser und geteiltem Bildschirm, bis zu 6 Bereiche gleichzeitig. Thema, Schrift und Farben wählst du selbst. Über jeder Sitzung sitzt eine Leiste mit CPU, Speicher und Festplatte in Echtzeit sowie Verknüpfungen zu Dateien, Docker, Tunneln und Metriken dieses Hosts.
-
-</td>
-<td width="50%" valign="top">
-
-**Remotedesktop:**
-RDP, VNC und Telnet im Browser, in Tabs und geteiltem Bildschirm wie jede andere Sitzung. Mit Dateibrowser für RDP-Laufwerke und Hochladen per Drag-and-drop. Auf dem Windows-Desktop kannst du einen Host auch im nativen RDP-Client öffnen.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**SSH-Tunnel:**
-Lokale, entfernte und dynamische SOCKS-Weiterleitung mit automatischem Neuverbinden und Statusprüfungen. Client-zu-Server-Tunnel der Desktop-App bleiben auf diesem Rechner, und du kannst Voreinstellungen auf dem Server speichern, um eine Konfiguration auf einen anderen Rechner zu übernehmen.
-
-</td>
-<td width="50%" valign="top">
-
-**Dateimanager:**
-Dateien über SFTP durchsuchen, bearbeiten, hochladen, herunterladen, umbenennen, verschieben und löschen, auch mit sudo. Code, Bilder, Audio und Video ansehen und bearbeiten. Dateien direkt von einem Server zum anderen kopieren, wobei der schnellste Weg für dich gewählt und die Übertragung auf Fehler geprüft wird.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Docker und Podman:**
-Container starten, stoppen, pausieren und entfernen, ihre Auslastung ansehen und eine Shell darin öffnen. Funktioniert mit Docker und mit Podman. Es soll Portainer oder Dockge nicht ersetzen, sondern nur die Container verwalten, die du schon hast.
-
-</td>
-<td width="50%" valign="top">
-
-**Hostverwaltung:**
-Hosts mit Tags und verschachtelten Ordnern ordnen, die du benennen und einfärben kannst. Gespeicherte Zugangsdaten für mehrere Hosts wiederverwenden, SSH-Schlüssel automatisch verteilen, Hosts unter einem übergeordneten Host gruppieren, in großen Mengen bearbeiten und exportieren. Für einmalige Verbindungen, die du nicht speichern willst, gibt es Schnellverbindung.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Host-Metriken:**
-CPU, Speicher, Festplatte, Netzwerk, Temperatur, NVIDIA-GPU, Laufzeit, Prozesse, Ports, Anmeldungen und Systeminfos auf den meisten Linux-Servern, mit Verlaufsgrafiken. Über Verwaltungskarten kümmerst du dich um Dienste, Cronjobs, Pakete, Benutzer, Firewallregeln, WireGuard, Tailscale, SSL-Zertifikate, Logs und Statusprüfungen, ohne Termix zu verlassen.
-
-</td>
-<td width="50%" valign="top">
-
-**Automatisierungen:**
-Wähle einen Auslöser und lege fest, was passieren soll. Auslöser sind unter anderem eine Metrik über einem Schwellwert, ein Host der hoch- oder runtergeht, eine geänderte Statusprüfung, ein Zeitplan, ein Container-Ereignis oder ein eingehender Webhook. Schritte können Befehle und Snippets ausführen, Container und Tunnel steuern, einen Host aufwecken, eine URL aufrufen, warten, sich nach einer Bedingung verzweigen, eine andere Automatisierung starten und dich über ntfy, Discord oder einen Webhook benachrichtigen. Mit Testläufen probierst du alles gefahrlos aus.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Flotten:**
-Fasse Hosts zu einer Flotte zusammen, entweder von Hand oder über Tag-Regeln, damit neue Hosts von selbst dazukommen. Führe einen Befehl auf allen Hosts gleichzeitig aus, schiebe und hole Dateien auf allen, installiere Pakete und sammle eine Übersicht über Betriebssystem, Kernel, Architektur und Laufzeit.
-
-</td>
-<td width="50%" valign="top">
-
-**KI-Assistent:**
-Optional und aus, bis du ihn einschaltest. Verbinde OpenAI, Anthropic, Gemini, Ollama oder einen beliebigen OpenAI-kompatiblen Endpunkt und frag ihn zu deiner Umgebung. Er liest Hosts, Flotten, Snippets und Warnungen und schlägt Änderungen vor, die du bestätigst, statt sie selbst vorzunehmen. An Zugangsdaten, Benutzer und Einstellungen kommt er nie heran. Administratoren können ihn für die ganze Instanz auslassen, und du kannst ihn schon bei der Einrichtung ausblenden.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Anmeldung und Benutzer:**
-Lokale Konten sowie Anmeldung über OIDC, LDAP, GitHub und Google, dazu Zwei-Faktor-Authentifizierung (TOTP), Passkeys (WebAuthn) und vertrauenswürdige Geräte. Administratoren können Benutzer verwalten, OIDC-Gruppen auf Rollen abbilden, alle aktiven Sitzungen über alle Plattformen hinweg sehen und beenden. Verknüpfe dein lokales Konto mit deinem OIDC-Konto und lies im Prüfprotokoll nach, wer was gemacht hat.
-
-</td>
-<td width="50%" valign="top">
-
-**Rollen und Freigaben:**
-Lege Rollen an und teile Hosts mit Benutzern oder Rollen auf vier Stufen: Verbinden, Ansehen, Bearbeiten und Verwalten. Das funktioniert mit jeder Authentifizierungsart und jedem Protokoll, und du kannst die Zugangsdaten für einen geteilten Host überschreiben.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Warnungen:**
-Lege Regeln für Host-Metriken wie CPU, Speicher und Festplatte fest und lass dich über ntfy, Discord oder einen Webhook benachrichtigen, wenn sie greifen. Sieh dir aktive und wieder behobene Warnungen im Verlauf an und blende aus, was dich nicht interessiert.
-
-</td>
-<td width="50%" valign="top">
-
-**Startseite:**
-Ein Raster aus Widgets, das du selbst per Drag-and-drop zusammenstellst. Widgets für Hoststatus, Pings, Dienstlinks, Lesezeichen, Suche, Uhren, Kalender, Countdowns, Notizen, RSS, Wetter, Bilder, Iframes, Docker, Tunnel, Metrikdiagramme, eigene APIs und sogar ein laufendes Terminal.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Snippets und Werkzeuge:**
-Speichere Befehle, die du oft brauchst, und starte sie mit einem Klick, mit Variablen für den Host und eigene Eingaben. Führe einen Befehl in allen offenen Terminals zugleich aus und durchsuche deinen Befehlsverlauf mit Autovervollständigung.
-
-</td>
-<td width="50%" valign="top">
-
-**Sitzungsfreigabe:**
-Teile eine laufende Terminal-, RDP-, VNC- oder Telnet-Sitzung in Echtzeit. Verschicke einen Link, dem jeder ohne Konto beitreten kann, oder teile mit einem bestimmten Termix-Benutzer, nur lesend oder mit Schreibrechten. Freigaben können von selbst ablaufen oder zurückgezogen werden und lassen sich global oder pro Host abschalten.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Sitzungsaufzeichnung und Protokolle:**
-Zeichne Terminal-, RDP- und VNC-Sitzungen auf und spiel sie später ab. Lade einfache Textprotokolle einer Sitzung herunter und sieh im Verbindungsprotokoll nach, was während einer Verbindung genau passiert ist.
-
-</td>
-<td width="50%" valign="top">
-
-**Serielle Verbindungen:**
-Sprich mit seriellen Geräten wie Routern, Switches und Mikrocontrollern, aus dem Browser oder der Desktop-App. Stelle Baudrate, Datenbits, Stoppbits und Parität ein. Nutzt die Web-Serial-API in passenden Browsern oder ein natives Backend in der Desktop-App.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Tailscale:**
-Hol Geräte aus deinem Tailnet, um sie mit ein paar Klicks als Hosts anzulegen, und verbinde dich per Tailscale SSH, damit deine Tailnet-ACLs den Zugriff regeln und keine Zugangsdaten gespeichert werden. Headscale und eigene Endpunkte gehen auch.
-
-</td>
-<td width="50%" valign="top">
-
-**Proxmox:**
-Importiere Hosts direkt aus einer Proxmox-Instanz und beobachte Knoten- und Gastwerte wie CPU, Speicher und Storage in einem eigenen Tab.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Arbeitsbereiche und Tabs:**
-Speichere eine Reihe von Tabs samt Aufteilung und öffne alles mit einem Klick wieder. Termix merkt sich auch deine letzte Sitzung, sodass deine Tabs nach einem Neuladen und auf anderen Geräten wieder da sind.
-
-</td>
-<td width="50%" valign="top">
-
-**Kommandozeile:**
-Ein `termix`-CLI für deine Shell und deine Skripte. Terminals öffnen, einen Befehl auf einem Host oder einer ganzen Flotte ausführen, Dateien per SFTP verschieben und Hosts, Snippets und Zugangsdaten verwalten. Installiere es mit `npm install -g @termix-ssh/cli` oder nimm eine eigenständige Binärdatei. Siehe die [CLI-Dokumentation](https://docs.termix.site/cli).
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Sicherheit:**
-Passwörter, Schlüssel und andere Geheimnisse werden pro Benutzer verschlüsselt, und die Datenbankdateien selbst lassen sich auf der Festplatte verschlüsseln. Wie das funktioniert, steht in der [Dokumentation](https://docs.termix.site/features/authentication/security/).
-
-</td>
-<td width="50%" valign="top">
-
-**Sprachen:**
-Rund 30 Sprachen sind eingebaut, verwaltet über [Crowdin](https://docs.termix.site/translations).
-
-</td>
-</tr>
-</table>
-
-<br />
-
-<details>
-<summary><b>Weitere Funktionen</b></summary>
-<br />
-
-- **Dashboard** - Deine Server auf einen Blick, mit Karten, die du selbst anordnest
-- **Netzwerkgrafik** - Dein Homelab aus deinen Hosts gezeichnet, mit Live-Status
-- **Tmux-Monitor** - tmux-Sitzungen, Fenster und Bereiche durchsehen, mit Vorschau und Suche
-- **API-Schlüssel** - Benutzerbezogene Schlüssel mit Ablaufdatum für Skripte und CI
-- **Export und Import** - Hosts, Zugangsdaten und Dateimanager-Daten rein- und rausholen
-- **Automatisches SSL** - Zertifikate werden für dich erstellt und erneuert, samt HTTPS-Weiterleitung, oder du bringst eigene mit
-- **Datenbanken** - Standardmäßig SQLite, dazu PostgreSQL und MySQL
-- **Moderne Oberfläche** - Aufgeräumte React-Oberfläche für Desktop und Handy, mit Themen wie Hell, Dunkel und Dracula. Jede Verbindung lässt sich über eine URL im Vollbild öffnen
-- **Befehlspalette** - Zweimal linke Umschalttaste, um per Tastatur zu einem Host zu springen
-- **Tastenkürzel** - Zwischen Tabs wechseln, Tabs schließen und mehr, alles neu belegbar
-- **Wake-on-LAN** - Einen Rechner aus Termix heraus oder aus einem Automatisierungsschritt aufwecken
-- **Vertrauenswürdiger Proxy** - Einen Reverse Proxy die Anmeldung erledigen und den Benutzer durchreichen lassen
-- **White Label** - Administratoren können die Instanz mit eigenem Namen, Logo und Farben versehen
-- **Web-Endpunkte** - Öffne die eigene Weboberfläche eines Hosts, etwa die Verwaltungsseite eines Routers, eingebettet in Termix statt in einem eigenen Tab
-- **Kollaborationsräume** - Feste Räume, in denen eine Gruppe gemeinsam zwischen Sitzungen wechselt, mit Präsentationsbühne und Einladungen
-- **Viele SSH-Funktionen** - Sprunghosts, Warpgate, TOTP-Abfragen, SOCKS5, Prüfung von Hostschlüsseln, automatisches Ausfüllen von Passwörtern, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, Port Knocking, Terminalprotokolle, Agent-Weiterleitung, Bitwarden SSH-Agent, SSH-Signierung über HashiCorp Vault, Step CA, 1Password Connect und mehr
-- **Termix ID** - Eine eingebaute Variante von sshid.io. Sichere dir einen Namen, veröffentliche deine öffentlichen Schlüssel unter einer Resolver-URL und stelle SSH-Zertifikate über die eingebaute CA aus
-- **Autovervollständigung im Befehlsverlauf** - Vorschläge direkt im Terminal beim Tippen, basierend auf deinem Befehlsverlauf
-- **Desktop eigenständig und Synchronisierung** - Die Desktop-App läuft eigenständig mit lokalem Backend und eigener Datenbank und kann sich optional mit einem Termix-Server synchronisieren
-
-</details>
-
-<br />
-
-## Unterstützte Plattformen
-
-<table align="center">
-<tr>
-<th align="center">Plattform</th>
-<th align="center">Bezugsquelle</th>
-</tr>
-<tr>
-<td align="center"><b>Web</b></td>
-<td>Jeder moderne Browser (Chrome, Safari, Firefox) · PWA-fähig</td>
-</tr>
-<tr>
-<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
-<td>Portabel · MSI-Installer · Chocolatey</td>
-</tr>
-<tr>
-<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
-<td>Portabel · AUR · AppImage · Deb · Flatpak</td>
-</tr>
-<tr>
-<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
-<td>Apple App Store · DMG · Homebrew</td>
-</tr>
-<tr>
-<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
-<td>Apple App Store · IPA</td>
-</tr>
-<tr>
-<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
-<td>Google Play Store · APK</td>
-</tr>
-</table>
-
-<br />
-
-## Installation
-
-In der [Termix-Dokumentation](https://docs.termix.site/install) findest du die vollständigen Installationsanleitungen für alle Plattformen.
-
-Willst du auf Kubernetes bereitstellen? Das Helm-Chart liegt in `charts/termix`, und die Einrichtung
-für Ingress, Traefik, Argo CD, GitHub Actions und GitLab CI steht unter
-[docs.termix.site/install/server/kubernetes](https://docs.termix.site/install/server/kubernetes).
-
-Beispiel für eine Docker-Compose-Datei (`guacd` und das Netzwerk kannst du weglassen, wenn du keinen Remotedesktop brauchst):
-
-```yaml
-services:
-  termix:
-    image: ghcr.io/lukegus/termix:latest
-    container_name: termix
-    restart: unless-stopped
-    ports:
-      - "8080:8080"
-    volumes:
-      - termix-data:/app/data
-    environment:
-      PORT: "8080"
-    depends_on:
-      - guacd
-    networks:
-      - termix-net
-
-  guacd:
-    image: guacamole/guacd:1.6.0
-    container_name: guacd
-    restart: unless-stopped
-    ports:
-      - "4822:4822"
-    networks:
-      - termix-net
-
-volumes:
-  termix-data:
-    driver: local
-
-networks:
-  termix-net:
-    driver: bridge
-```
-
-### Kommandozeile
-
-Termix hat auch ein CLI, damit du deine Server vom Terminal aus verwalten und Termix in eigenen Skripten nutzen kannst.
-
-```bash
-npm install -g @termix-ssh/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-Es kann Terminals öffnen, einen Befehl auf einem Host oder einer ganzen Flotte ausführen, Dateien per SFTP verschieben und Hosts, Snippets und Zugangsdaten verwalten. Die vollständige Dokumentation steht auf [docs.termix.site/cli](https://docs.termix.site/cli).
-
-### Cloud-Hosting
-
-Du kannst den Termix-Server auf einem VPS laufen lassen statt im eigenen Netz. Läuft Termix in dem Netz, das es verwaltet, reißt eine Störung es mit sich, und zwar genau dann, wenn du es zum Reparieren bräuchtest. Woanders bleibt es erreichbar, du bekommst eine feste IP und kommst von überall heran, ohne VPN und ohne Portfreigabe.
-
-[GINERNET](https://docs.termix.site/install/ginernet) sponsert Termix, und in der Dokumentation steht eine Schritt-für-Schritt-Anleitung für die Bereitstellung auf deren VPS-Plattform.
-
-<br />
-
-## Telemetrie
-
-Termix schickt einmal am Tag einen kleinen anonymen Bericht, damit ich sehe, wie viele Instanzen laufen und welche Funktionen genutzt werden. Er enthält eine zufällige Instanz-ID, die App-Version und wie viele Benutzer und Hosts du hast. Er kann außerdem deine Plattform enthalten (Betriebssystem, Architektur, Node.js-Version, Datenbanktyp und ob du Docker, die Desktop-App oder einen normalen Server nutzt), wie oft jede Art von Tab geöffnet wurde und wie viele SSH-Logins es gab, sowie welche eingebauten Funktionen laufen. Er enthält nie Benutzernamen, Hostnamen, IP-Adressen, Zugangsdaten oder sonst etwas, das dich oder deine Server erkennbar macht.
-
-Es ist standardmäßig an. Schalte es in den Administrationseinstellungen unter Usage Statistics aus oder wähle dort, was gesendet wird. Dort kannst du dir auch den genauen Bericht vorab ansehen. Jeder Benutzer kann seine eigene Funktionsnutzung in seinem Profil ausschließen. `ENABLE_TELEMETRY=false` schaltet es aus und sperrt den Schalter.
-
-<br />
-
-## Spenden
-
-Termix ist kostenlos und quelloffen, ohne Abo und ohne Bezahlmodell. Wenn es dir hilft, denk über eine Spende nach, um Server, Domains und Entwicklungszeit zu decken. Spenden finanzieren auch die Zeit, um Funktionen wie SAML, Kubernetes und Agent-Unterstützung zu erarbeiten. Unten kannst du den Fortschritt verfolgen und spenden.
-
-[Spenden](https://donate.termix.site/)
-
-<br />
-
-## Sponsoren
-
-Interesse an einer bezahlten Platzierung zur Unterstützung der Entwicklung? Schreib an [mail@termix.site](mailto:mail@termix.site).
-
-<!-- SPONSORS:START -->
-
-<div align="center">
-
-<br />
-
-<a href="https://www.digitalocean.com/">
-  <img src="https://termix.site/img/sponsors/digitalocean.svg" height="40" alt="DigitalOcean" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://crowdin.com/">
-  <img src="https://termix.site/img/sponsors/crowdin.svg" height="40" alt="Crowdin" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.blacksmith.sh/">
-  <img src="https://termix.site/img/sponsors/blacksmith.svg" height="40" alt="Blacksmith" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.cloudflare.com/">
-  <img src="https://termix.site/img/sponsors/cloudflare.png" height="40" alt="Cloudflare" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://akamai.com/">
-  <img src="https://termix.site/img/sponsors/akamai.svg" height="40" alt="Akamai" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://aws.amazon.com/">
-  <img src="https://termix.site/img/sponsors/aws.png" height="40" alt="AWS" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://rackgenius.com/">
-  <img src="https://termix.site/img/sponsors/rackgenius.png" height="40" alt="Rack Genius" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://termix.site/img/sponsors/ginernet.png" height="40" alt="Ginernet" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.hetzner.com/?mtm_campaign=termix&mtm_medium=referral&mtm_content=sponsoring_link">
-  <img src="https://termix.site/img/sponsors/hetzner.png" height="40" alt="Hetzner" />
-</a>
-
-</div>
-
-<!-- SPONSORS:END -->
-
-<br />
-
-## Support
-
-Brauchst du Hilfe oder möchtest du eine Funktion vorschlagen? Erstelle ein [neues Issue](https://github.com/Termix-SSH/Support/issues) und beschreibe es so genau wie möglich, nach Möglichkeit auf Englisch. Du kannst auch im Support-Kanal auf [Discord](https://discord.gg/jVQGdvHDrf) fragen, dort dauern Antworten aber manchmal länger.
-
-<br />
-
-## Screenshots
-
-<div align="center">
-
-<br />
-
-[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
-
-<sub>Übersichten zu Updates auf YouTube ansehen</sub>
-
-<br />
-<br />
-
-<table>
-<tr>
-<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
-<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
-<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
-<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
-<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
-<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
-<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
-<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 15.png" alt="Termix Screenshot 15" width="400" /></td>
-<td><img src="../repo-images/Image 16.png" alt="Termix Screenshot 16" width="400" /></td>
-</tr>
-</table>
-
-<sub>Manche Videos und Bilder sind vielleicht veraltet oder zeigen die Funktionen nicht perfekt.</sub>
-
-</div>
-
-<br />
-
-## Geplante Funktionen
-
-Alle geplanten Funktionen stehen unter [Projects](https://github.com/orgs/Termix-SSH/projects/5). Wenn du mitarbeiten möchtest, sieh dir [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md) an.
-
-<br />
-
-## Lizenz
-
-Veröffentlicht unter der Apache-Lizenz Version 2.0. Mehr dazu in `LICENSE`.
diff --git a/docs/readme/README-ES.md b/docs/readme/README-ES.md
deleted file mode 100644
index fe3c072ed..000000000
--- a/docs/readme/README-ES.md
+++ /dev/null
@@ -1,504 +0,0 @@
-<div align="center">
-
-<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
-
-<h1>Termix</h1>
-
-<p>Gestión de servidores autoalojada, desde SSH y escritorio remoto hasta automatizaciones</p>
-
-<p>
-  <a href="../README.md">English</a> ·
-  <a href="README-CN.md">中文</a> ·
-  <a href="README-JA.md">日本語</a> ·
-  <a href="README-KO.md">한국어</a> ·
-  <a href="README-FR.md">Français</a> ·
-  <a href="README-DE.md">Deutsch</a> ·
-  Español ·
-  <a href="README-PT.md">Português</a> ·
-  <a href="README-RU.md">Русский</a> ·
-  <a href="README-AR.md">العربية</a> ·
-  <a href="README-HI.md">हिन्दी</a> ·
-  <a href="README-TR.md">Türkçe</a> ·
-  <a href="README-VI.md">Tiếng Việt</a> ·
-  <a href="README-IT.md">Italiano</a>
-</p>
-
-<p>
-  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
-  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
-  <a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
-</p>
-
-<p>
-  <a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
-</p>
-
-<br />
-
-Termix es gratuito y de código abierto. Si te resulta útil, considera [donar](https://donate.termix.site/) para ayudar a cubrir los costes de servidor y el tiempo de desarrollo.
-
-<br />
-
-<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
-
-<br />
-<br />
-
-<p>
-  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
-  <br />
-  <sub>Conseguido el 1 de septiembre de 2025</sub>
-</p>
-
-</div>
-
-<br />
-
-## Descripción general
-
-Termix es una plataforma gratuita, de código abierto y autoalojada para gestionar tus servidores. Reúne en un solo sitio terminales SSH, escritorios remotos (RDP, VNC, Telnet), transferencias de archivos, túneles, Docker, métricas y automatizaciones, en web, escritorio y móvil. Es una alternativa autoalojada a Termius que seguirá siendo gratuita.
-
-<br />
-
-## Características
-
-<table>
-<tr>
-<td width="50%" valign="top">
-
-**Terminal SSH:**
-Un terminal completo con pestañas como las del navegador y pantalla dividida, hasta 6 paneles a la vez. Elige tu tema, tu fuente y tus colores. Sobre cada sesión hay una barra con CPU, memoria y disco en vivo, además de accesos rápidos a los archivos, Docker, túneles y métricas de ese host.
-
-</td>
-<td width="50%" valign="top">
-
-**Escritorio remoto:**
-RDP, VNC y Telnet en el navegador, en pestañas y pantalla dividida como cualquier otra sesión. Incluye un explorador de archivos para las unidades RDP y subida arrastrando y soltando. En el escritorio de Windows también puedes abrir un host en el cliente RDP nativo.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Túneles SSH:**
-Reenvío local, remoto y SOCKS dinámico, con reconexión automática y comprobaciones de estado. Los túneles de cliente a servidor de la aplicación de escritorio se guardan en ese equipo, y puedes guardar ajustes en el servidor para llevarte una configuración a otro equipo.
-
-</td>
-<td width="50%" valign="top">
-
-**Gestor de archivos:**
-Navega, edita, sube, descarga, renombra, mueve y borra archivos por SFTP, con soporte para sudo. Mira y edita código, imágenes, audio y vídeo. Copia archivos directamente de un servidor a otro, con la ruta más rápida elegida por ti y las transferencias verificadas.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Docker y Podman:**
-Arranca, para, pausa y elimina contenedores, mira sus estadísticas y abre una consola dentro de uno. Funciona con Docker y con Podman. No pretende sustituir a Portainer ni a Dockge, solo gestionar los contenedores que ya tienes.
-
-</td>
-<td width="50%" valign="top">
-
-**Gestor de hosts:**
-Guarda y organiza hosts con etiquetas y carpetas anidadas que puedes nombrar y colorear. Reutiliza credenciales guardadas entre hosts, despliega claves SSH automáticamente, agrupa hosts bajo un host padre, edita y exporta en lote, y usa la conexión rápida para conexiones puntuales que no quieres guardar.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Métricas de host:**
-CPU, memoria, disco, red, temperatura, GPU NVIDIA, tiempo encendido, procesos, puertos, inicios de sesión e información del sistema en la mayoría de servidores Linux, con gráficas de histórico. Las tarjetas de gestión te dejan manejar servicios, tareas cron, paquetes, usuarios, reglas del cortafuegos, WireGuard, Tailscale, certificados SSL, registros y comprobaciones de estado sin salir de Termix.
-
-</td>
-<td width="50%" valign="top">
-
-**Automatizaciones:**
-Elige un disparador y luego di qué debe pasar. Los disparadores incluyen una métrica que supera un umbral, un host que se cae o vuelve, una comprobación de estado que cambia, una programación, un evento de contenedor o un webhook entrante. Los pasos pueden ejecutar comandos y fragmentos, controlar contenedores y túneles, despertar un host, llamar a una URL, esperar, ramificarse según una condición, ejecutar otra automatización y avisarte por ntfy, Discord o un webhook. Las ejecuciones de prueba te dejan probarlo sin riesgo.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Flotas:**
-Agrupa hosts en una flota eligiéndolos o con reglas de etiquetas, para que los nuevos entren solos. Ejecuta un comando en todos los hosts a la vez, envía y recoge archivos de todos ellos, instala paquetes y reúne un inventario del sistema, el kernel, la arquitectura y el tiempo encendido.
-
-</td>
-<td width="50%" valign="top">
-
-**Asistente de IA:**
-Es opcional y está apagado hasta que tú lo enciendas. Conecta OpenAI, Anthropic, Gemini, Ollama o cualquier punto de acceso compatible con OpenAI y pregúntale sobre tu instalación. Puede leer hosts, flotas, fragmentos y alertas, y propone cambios para que los apruebes en lugar de hacerlos él. Nunca puede tocar credenciales, usuarios ni ajustes. Los administradores pueden dejarlo apagado para toda la instancia, y tú puedes ocultarlo durante la configuración.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Acceso y usuarios:**
-Cuentas locales más inicio de sesión con OIDC, LDAP, GitHub y Google, con doble factor (TOTP), llaves de acceso (WebAuthn) y dispositivos de confianza. Los administradores pueden gestionar usuarios, asignar grupos de OIDC a roles, ver todas las sesiones activas en cualquier plataforma y revocarlas. Enlaza tu cuenta local con la de OIDC y consulta el registro de auditoría de lo que ha hecho cada uno.
-
-</td>
-<td width="50%" valign="top">
-
-**Roles y compartición:**
-Crea roles y comparte hosts con usuarios o roles en cuatro niveles: conectar, ver, editar y gestionar. Funciona con todos los tipos de autenticación y todos los protocolos, y puedes cambiar las credenciales que se usan en un host compartido.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Alertas:**
-Pon reglas sobre métricas de host como CPU, memoria y disco, y recibe avisos por ntfy, Discord o un webhook cuando salten. Consulta las alertas activas y resueltas en un histórico y descarta las que no te importan.
-
-</td>
-<td width="50%" valign="top">
-
-**Página de inicio:**
-Una rejilla de widgets que montas tú mismo arrastrando y soltando. Hay widgets para el estado de los hosts, pings, enlaces a servicios, marcadores, búsqueda, relojes, calendarios, cuentas atrás, notas, RSS, tiempo, imágenes, iframes, Docker, túneles, gráficas de métricas, APIs propias e incluso un terminal en vivo.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Fragmentos y herramientas:**
-Guarda los comandos que usas a menudo y lánzalos con un clic, con variables para el host y para lo que tú escribas. Ejecuta un mismo comando en todos los terminales abiertos y busca en tu historial con autocompletado.
-
-</td>
-<td width="50%" valign="top">
-
-**Compartir sesión:**
-Comparte en directo una sesión de terminal, RDP, VNC o Telnet. Manda un enlace al que cualquiera puede entrar sin cuenta, o compártela con un usuario concreto de Termix, en solo lectura o con escritura. Las comparticiones pueden caducar solas o revocarse, y se pueden desactivar globalmente o por host.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Grabación y registros de sesión:**
-Graba sesiones de terminal, RDP y VNC y reprodúcelas después. Descarga registros de texto de una sesión y mira el registro de conexión para ver exactamente qué pasó durante ella.
-
-</td>
-<td width="50%" valign="top">
-
-**Conexiones serie:**
-Habla con dispositivos serie como routers, switches y microcontroladores desde el navegador o la aplicación de escritorio. Ajusta velocidad, bits de datos, bits de parada y paridad. Usa la API Web Serial en los navegadores compatibles, o un backend nativo en la aplicación de escritorio.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Tailscale:**
-Trae dispositivos de tu tailnet para añadirlos como hosts en un par de clics, y conéctate con Tailscale SSH para que las ACL de tu tailnet controlen el acceso sin guardar credenciales. También funcionan Headscale y los puntos de acceso personalizados.
-
-</td>
-<td width="50%" valign="top">
-
-**Proxmox:**
-Importa hosts directamente desde una instancia de Proxmox y observa las estadísticas de nodos e invitados, incluidas CPU, memoria y almacenamiento, en su propia pestaña.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Espacios de trabajo y pestañas:**
-Guarda un conjunto de pestañas con su distribución dividida y reábrelo entero con un clic. Termix también recuerda tu última sesión, así que tus pestañas vuelven tras recargar y en otros dispositivos.
-
-</td>
-<td width="50%" valign="top">
-
-**Línea de comandos:**
-Un CLI `termix` para tu shell y tus scripts. Abre terminales, ejecuta un comando en un host o en una flota entera, mueve archivos por SFTP y gestiona hosts, fragmentos y credenciales. Instálalo con `npm install -g @termix-ssh/cli` o coge un binario independiente. Consulta la [documentación del CLI](https://docs.termix.site/cli).
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Seguridad:**
-Las contraseñas, las claves y otros secretos se cifran por usuario, y los propios archivos de la base de datos se pueden cifrar en disco. Mira la [documentación](https://docs.termix.site/features/authentication/security/) para saber cómo funciona.
-
-</td>
-<td width="50%" valign="top">
-
-**Idiomas:**
-Unos 30 idiomas incluidos, gestionados a través de [Crowdin](https://docs.termix.site/translations).
-
-</td>
-</tr>
-</table>
-
-<br />
-
-<details>
-<summary><b>Más características</b></summary>
-<br />
-
-- **Panel** - Tus servidores de un vistazo, con tarjetas que colocas tú
-- **Gráfico de red** - Tu homelab dibujado a partir de tus hosts, con estado en vivo
-- **Monitor de tmux** - Revisa sesiones, ventanas y paneles de tmux, con vista previa y búsqueda
-- **Claves de API** - Claves por usuario con fecha de caducidad para scripts y CI
-- **Exportar e importar** - Mueve hosts, credenciales y datos del gestor de archivos
-- **SSL automático** - Certificados generados y renovados por ti, con redirección a HTTPS, o usa los tuyos
-- **Bases de datos** - SQLite por defecto, y también PostgreSQL y MySQL
-- **Interfaz moderna** - Una interfaz React limpia que funciona en escritorio y móvil, con temas como claro, oscuro y Dracula. Cualquier conexión se puede abrir a pantalla completa desde una URL
-- **Paleta de comandos** - Pulsa dos veces Mayús izquierda para ir a un host desde el teclado
-- **Atajos de teclado** - Moverte entre pestañas, cerrarlas y más, todo reasignable
-- **Wake-on-LAN** - Enciende una máquina desde Termix o desde un paso de automatización
-- **Proxy de confianza** - Deja que un proxy inverso gestione el acceso y pase al usuario
-- **Marca blanca** - Los administradores pueden personalizar la instancia con su propio nombre, logo y colores
-- **Puntos de acceso web** - Abre la propia interfaz web de un host, como la página de administración de un router, integrada dentro de Termix en lugar de en una pestaña aparte
-- **Salas de colaboración** - Salas persistentes donde un grupo salta entre sesiones junto, con un escenario para presentador e invitaciones
-- **SSH muy completo** - Hosts de salto, Warpgate, peticiones TOTP, SOCKS5, verificación de claves de host, autorrelleno de contraseñas, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, registro del terminal, reenvío de agente, agente SSH de Bitwarden, firma SSH con HashiCorp Vault, Step CA, 1Password Connect y más
-- **Termix ID** - Una versión integrada de sshid.io. Reserva un identificador, publica tus claves públicas en una URL de resolución y emite certificados SSH desde la CA integrada
-- **Autosugerencias del historial de comandos** - Sugerencias en línea en el terminal mientras escribes, basadas en tu historial de comandos
-- **Escritorio independiente y sincronización** - La aplicación de escritorio funciona sola, con su propio backend y base de datos locales, y puede sincronizarse opcionalmente con un servidor Termix
-
-</details>
-
-<br />
-
-## Plataformas compatibles
-
-<table align="center">
-<tr>
-<th align="center">Plataforma</th>
-<th align="center">Distribución</th>
-</tr>
-<tr>
-<td align="center"><b>Web</b></td>
-<td>Cualquier navegador moderno (Chrome, Safari, Firefox) · Compatible con PWA</td>
-</tr>
-<tr>
-<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
-<td>Portable · Instalador MSI · Chocolatey</td>
-</tr>
-<tr>
-<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
-<td>Portable · AUR · AppImage · Deb · Flatpak</td>
-</tr>
-<tr>
-<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
-<td>Apple App Store · DMG · Homebrew</td>
-</tr>
-<tr>
-<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
-<td>Apple App Store · IPA</td>
-</tr>
-<tr>
-<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
-<td>Google Play Store · APK</td>
-</tr>
-</table>
-
-<br />
-
-## Instalación
-
-Visita la [documentación de Termix](https://docs.termix.site/install) para ver las instrucciones completas de instalación en todas las plataformas.
-
-¿Vas a desplegar en Kubernetes? El chart de Helm está en `charts/termix`, y las instrucciones
-de configuración para Ingress, Traefik, Argo CD, GitHub Actions y GitLab CI están en
-[docs.termix.site/install/server/kubernetes](https://docs.termix.site/install/server/kubernetes).
-
-Ejemplo de archivo Docker Compose (puedes quitar `guacd` y la red si no piensas usar el escritorio remoto):
-
-```yaml
-services:
-  termix:
-    image: ghcr.io/lukegus/termix:latest
-    container_name: termix
-    restart: unless-stopped
-    ports:
-      - "8080:8080"
-    volumes:
-      - termix-data:/app/data
-    environment:
-      PORT: "8080"
-    depends_on:
-      - guacd
-    networks:
-      - termix-net
-
-  guacd:
-    image: guacamole/guacd:1.6.0
-    container_name: guacd
-    restart: unless-stopped
-    ports:
-      - "4822:4822"
-    networks:
-      - termix-net
-
-volumes:
-  termix-data:
-    driver: local
-
-networks:
-  termix-net:
-    driver: bridge
-```
-
-### Línea de comandos
-
-Termix también tiene un CLI, para que gestiones tus servidores desde un terminal y uses Termix en tus propios scripts.
-
-```bash
-npm install -g @termix-ssh/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-Puede abrir terminales, ejecutar un comando en un host o en una flota entera, mover archivos por SFTP y gestionar hosts, fragmentos y credenciales. La documentación completa está en [docs.termix.site/cli](https://docs.termix.site/cli).
-
-### Alojamiento en la nube
-
-Puedes ejecutar el servidor de Termix en un VPS en lugar de dentro de tu propia red. Si Termix corre en la red que gestiona, una caída se lo lleva por delante justo cuando lo necesitas para arreglar las cosas. Fuera se mantiene accesible, te da una IP fija y puedes entrar desde cualquier sitio sin VPN ni abrir puertos.
-
-[GINERNET](https://docs.termix.site/install/ginernet) patrocina Termix, y la documentación tiene una guía paso a paso para desplegar en su plataforma de VPS.
-
-<br />
-
-## Telemetría
-
-Termix envía una vez al día un pequeño informe anónimo para que pueda ver cuántas instancias hay funcionando y qué funciones se usan. Incluye un ID de instancia aleatorio, la versión de la app y cuántos usuarios y hosts tienes. También puede incluir tu plataforma (sistema operativo, arquitectura, versión de Node.js, tipo de base de datos y si usas Docker, la app de escritorio o un servidor normal), cuántas veces se abrió cada tipo de pestaña y cuántos inicios de sesión SSH hubo, y qué funciones integradas están activas. Nunca incluye nombres de usuario, nombres de host, direcciones IP, credenciales ni nada que te identifique a ti o a tus servidores.
-
-Viene activado. Puedes desactivarlo o elegir qué incluye en los ajustes de administración, en Usage Statistics, donde también puedes ver el informe exacto antes de enviarlo. Cada usuario puede excluir su propio uso de funciones desde su perfil. Poner `ENABLE_TELEMETRY=false` lo desactiva y bloquea el interruptor.
-
-<br />
-
-## Donar
-
-Termix es gratuito y de código abierto, sin suscripciones ni planes de pago. Si te resulta útil, considera donar para ayudar con los servidores, los dominios y el tiempo de desarrollo. Las donaciones también financian el tiempo de investigar y aprender lo necesario para funciones como SAML, Kubernetes y el soporte de agentes. Sigue el progreso y dona abajo.
-
-[Donar](https://donate.termix.site/)
-
-<br />
-
-## Patrocinadores
-
-¿Te interesa un espacio de pago para apoyar el desarrollo? Escribe a [mail@termix.site](mailto:mail@termix.site).
-
-<!-- SPONSORS:START -->
-
-<div align="center">
-
-<br />
-
-<a href="https://www.digitalocean.com/">
-  <img src="https://termix.site/img/sponsors/digitalocean.svg" height="40" alt="DigitalOcean" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://crowdin.com/">
-  <img src="https://termix.site/img/sponsors/crowdin.svg" height="40" alt="Crowdin" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.blacksmith.sh/">
-  <img src="https://termix.site/img/sponsors/blacksmith.svg" height="40" alt="Blacksmith" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.cloudflare.com/">
-  <img src="https://termix.site/img/sponsors/cloudflare.png" height="40" alt="Cloudflare" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://akamai.com/">
-  <img src="https://termix.site/img/sponsors/akamai.svg" height="40" alt="Akamai" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://aws.amazon.com/">
-  <img src="https://termix.site/img/sponsors/aws.png" height="40" alt="AWS" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://rackgenius.com/">
-  <img src="https://termix.site/img/sponsors/rackgenius.png" height="40" alt="Rack Genius" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://termix.site/img/sponsors/ginernet.png" height="40" alt="Ginernet" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.hetzner.com/?mtm_campaign=termix&mtm_medium=referral&mtm_content=sponsoring_link">
-  <img src="https://termix.site/img/sponsors/hetzner.png" height="40" alt="Hetzner" />
-</a>
-
-</div>
-
-<!-- SPONSORS:END -->
-
-<br />
-
-## Soporte
-
-¿Necesitas ayuda o quieres pedir una función? Abre una [nueva incidencia](https://github.com/Termix-SSH/Support/issues) y añade todo el detalle que puedas, en inglés si te es posible. También puedes preguntar en el canal de soporte de [Discord](https://discord.gg/jVQGdvHDrf), aunque allí las respuestas pueden tardar más.
-
-<br />
-
-## Capturas de pantalla
-
-<div align="center">
-
-<br />
-
-[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
-
-<sub>Mira los resúmenes de las actualizaciones en YouTube</sub>
-
-<br />
-<br />
-
-<table>
-<tr>
-<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
-<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
-<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
-<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
-<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
-<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
-<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
-<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 15.png" alt="Termix Screenshot 15" width="400" /></td>
-<td><img src="../repo-images/Image 16.png" alt="Termix Screenshot 16" width="400" /></td>
-</tr>
-</table>
-
-<sub>Algunos vídeos e imágenes pueden estar desactualizados o no mostrar del todo bien las funciones.</sub>
-
-</div>
-
-<br />
-
-## Características planeadas
-
-Todas las funciones planeadas están en [Projects](https://github.com/orgs/Termix-SSH/projects/5). Si quieres colaborar, consulta [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
-
-<br />
-
-## Licencia
-
-Distribuido bajo la Licencia Apache versión 2.0. Consulta `LICENSE` para más información.
diff --git a/docs/readme/README-FR.md b/docs/readme/README-FR.md
deleted file mode 100644
index 017d9f51a..000000000
--- a/docs/readme/README-FR.md
+++ /dev/null
@@ -1,502 +0,0 @@
-<div align="center">
-
-<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
-
-<h1>Termix</h1>
-
-<p>Gestion de serveurs auto-hébergée, du SSH au bureau à distance jusqu'aux automatisations</p>
-
-<p>
-  <a href="../README.md">English</a> ·
-  <a href="README-CN.md">中文</a> ·
-  <a href="README-JA.md">日本語</a> ·
-  <a href="README-KO.md">한국어</a> ·
-  Français ·
-  <a href="README-DE.md">Deutsch</a> ·
-  <a href="README-ES.md">Español</a> ·
-  <a href="README-PT.md">Português</a> ·
-  <a href="README-RU.md">Русский</a> ·
-  <a href="README-AR.md">العربية</a> ·
-  <a href="README-HI.md">हिन्दी</a> ·
-  <a href="README-TR.md">Türkçe</a> ·
-  <a href="README-VI.md">Tiếng Việt</a> ·
-  <a href="README-IT.md">Italiano</a>
-</p>
-
-<p>
-  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
-  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
-  <a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
-</p>
-
-<p>
-  <a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
-</p>
-
-<br />
-
-Termix est gratuit et open source. S'il vous est utile, pensez à [faire un don](https://donate.termix.site/) pour aider à payer les serveurs et le temps de développement.
-
-<br />
-
-<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
-
-<br />
-<br />
-
-<p>
-  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
-  <br />
-  <sub>Obtenu le 1er septembre 2025</sub>
-</p>
-
-</div>
-
-<br />
-
-## Présentation
-
-Termix est une plateforme gratuite, open source et auto-hébergée pour gérer vos serveurs. Elle réunit au même endroit les terminaux SSH, les bureaux à distance (RDP, VNC, Telnet), les transferts de fichiers, les tunnels, Docker, les métriques et les automatisations, sur le web, le bureau et le mobile. C'est une alternative auto-hébergée à Termius, gratuite pour toujours.
-
-<br />
-
-## Fonctionnalités
-
-<table>
-<tr>
-<td width="50%" valign="top">
-
-**Terminal SSH:**
-Un vrai terminal avec des onglets façon navigateur et un écran divisé, jusqu'à 6 panneaux à la fois. Choisissez votre thème, votre police et vos couleurs. Une barre d'outils au-dessus de chaque session affiche le CPU, la mémoire et le disque en direct, avec des raccourcis vers les fichiers, Docker, les tunnels et les métriques de cet hôte.
-
-</td>
-<td width="50%" valign="top">
-
-**Bureau à distance:**
-RDP, VNC et Telnet dans le navigateur, en onglets et en écran divisé comme n'importe quelle autre session. Comprend un explorateur de fichiers pour les lecteurs RDP et l'envoi par glisser-déposer. Sur le bureau Windows, vous pouvez aussi ouvrir un hôte dans le client RDP natif.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Tunnels SSH:**
-Redirection locale, distante et SOCKS dynamique, avec reconnexion automatique et vérification de l'état. Les tunnels client vers serveur de l'application de bureau restent sur cette machine, et vous pouvez enregistrer des préréglages sur le serveur pour reprendre une configuration sur un autre poste.
-
-</td>
-<td width="50%" valign="top">
-
-**Gestionnaire de fichiers:**
-Parcourez, modifiez, envoyez, téléchargez, renommez, déplacez et supprimez des fichiers en SFTP, avec sudo. Affichez et modifiez du code, des images, de l'audio et de la vidéo. Copiez des fichiers directement d'un serveur à l'autre : le chemin le plus rapide est choisi pour vous et l'intégrité des transferts est vérifiée.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Docker et Podman:**
-Démarrez, arrêtez, mettez en pause et supprimez des conteneurs, suivez leurs statistiques et ouvrez un shell à l'intérieur. Fonctionne avec Docker comme avec Podman. Le but n'est pas de remplacer Portainer ou Dockge, juste de gérer les conteneurs que vous avez déjà.
-
-</td>
-<td width="50%" valign="top">
-
-**Gestionnaire d'hôtes:**
-Rangez vos hôtes avec des étiquettes et des dossiers imbriqués que vous pouvez nommer et colorer. Réutilisez des identifiants enregistrés sur plusieurs hôtes, déployez des clés SSH automatiquement, regroupez des hôtes sous un hôte parent, modifiez et exportez en lot, et utilisez la connexion rapide pour les connexions ponctuelles que vous ne voulez pas garder.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Métriques des hôtes:**
-CPU, mémoire, disque, réseau, température, GPU NVIDIA, temps de fonctionnement, processus, ports, connexions et informations système sur la plupart des serveurs Linux, avec des graphiques d'historique. Les cartes de gestion vous permettent de gérer les services, les tâches cron, les paquets, les utilisateurs, les règles de pare-feu, WireGuard, Tailscale, les certificats SSL, les journaux et les vérifications d'état sans quitter Termix.
-
-</td>
-<td width="50%" valign="top">
-
-**Automatisations:**
-Choisissez un déclencheur, puis dites ce qui doit se passer. Les déclencheurs peuvent être une métrique qui dépasse un seuil, un hôte qui tombe ou revient, une vérification d'état qui change, un horaire, un événement de conteneur ou un webhook entrant. Les étapes peuvent lancer des commandes et des extraits, piloter des conteneurs et des tunnels, réveiller un hôte, appeler une URL, attendre, se diviser selon une condition, lancer une autre automatisation et vous prévenir via ntfy, Discord ou un webhook. Les essais à blanc vous permettent de tester sans risque.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Flottes:**
-Regroupez des hôtes dans une flotte en les choisissant ou avec des règles d'étiquettes, pour que les nouveaux hôtes s'ajoutent tout seuls. Lancez une commande sur tous les hôtes d'un coup, envoyez et récupérez des fichiers sur l'ensemble, installez des paquets et collectez un inventaire de l'OS, du noyau, de l'architecture et du temps de fonctionnement.
-
-</td>
-<td width="50%" valign="top">
-
-**Assistant IA:**
-Optionnel, et désactivé tant que vous ne l'activez pas. Connectez OpenAI, Anthropic, Gemini, Ollama ou n'importe quel point d'accès compatible OpenAI et posez des questions sur votre installation. Il lit les hôtes, les flottes, les extraits et les alertes, et propose des changements que vous validez au lieu de les appliquer lui-même. Il ne peut jamais toucher aux identifiants, aux utilisateurs ni aux réglages. Les administrateurs peuvent le laisser désactivé pour toute l'instance, et vous pouvez le masquer pendant la configuration.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Connexion et utilisateurs:**
-Comptes locaux ainsi que connexion OIDC, LDAP, GitHub et Google, avec double authentification (TOTP), clés d'accès (WebAuthn) et appareils de confiance. Les administrateurs peuvent gérer les utilisateurs, associer les groupes OIDC aux rôles, voir toutes les sessions actives sur toutes les plateformes et les révoquer. Reliez vos comptes local et OIDC, et consultez le journal d'audit de ce que chacun a fait.
-
-</td>
-<td width="50%" valign="top">
-
-**Rôles et partage:**
-Créez des rôles et partagez des hôtes avec des utilisateurs ou des rôles selon quatre niveaux : connexion, lecture, modification et gestion. Cela fonctionne avec tous les types d'authentification et tous les protocoles, et vous pouvez remplacer les identifiants utilisés pour un hôte partagé.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Alertes:**
-Définissez des règles sur les métriques des hôtes comme le CPU, la mémoire et le disque, et recevez une notification via ntfy, Discord ou un webhook quand elles se déclenchent. Consultez les alertes en cours et résolues dans un historique, et écartez celles qui ne vous intéressent pas.
-
-</td>
-<td width="50%" valign="top">
-
-**Page d'accueil:**
-Une grille de widgets en glisser-déposer que vous construisez vous-même. Des widgets pour l'état des hôtes, les pings, les liens de services, les favoris, la recherche, les horloges, les calendriers, les comptes à rebours, les notes, les flux RSS, la météo, les images, les iframes, Docker, les tunnels, les graphiques de métriques, les API personnalisées et même un terminal en direct.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Extraits et outils:**
-Enregistrez les commandes que vous lancez souvent et exécutez-les en un clic, avec des variables pour l'hôte et vos propres saisies. Lancez une même commande dans tous les terminaux ouverts, et cherchez dans votre historique avec la complétion automatique.
-
-</td>
-<td width="50%" valign="top">
-
-**Partage de session:**
-Partagez en direct une session terminal, RDP, VNC ou Telnet. Envoyez un lien que n'importe qui peut rejoindre sans compte, ou partagez avec un utilisateur Termix précis, en lecture seule ou en lecture-écriture. Les partages peuvent expirer d'eux-mêmes ou être révoqués, et se désactivent globalement ou hôte par hôte.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Enregistrement et journaux de session:**
-Enregistrez les sessions terminal, RDP et VNC pour les revoir plus tard. Téléchargez les journaux d'une session en texte simple, et consultez le journal de connexion pour voir exactement ce qui s'est passé pendant une connexion.
-
-</td>
-<td width="50%" valign="top">
-
-**Connexions série:**
-Dialoguez avec des appareils série comme des routeurs, des commutateurs et des microcontrôleurs depuis le navigateur ou l'application de bureau. Réglez la vitesse, les bits de données, les bits d'arrêt et la parité. Utilise l'API Web Serial dans les navigateurs compatibles, ou un backend natif dans l'application de bureau.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Tailscale:**
-Récupérez les appareils de votre tailnet pour les ajouter comme hôtes en quelques clics, et connectez-vous avec Tailscale SSH pour que les ACL de votre tailnet gèrent les accès, sans stocker d'identifiants. Headscale et les points d'accès personnalisés fonctionnent aussi.
-
-</td>
-<td width="50%" valign="top">
-
-**Proxmox:**
-Importez des hôtes directement depuis une instance Proxmox, et suivez les statistiques des nœuds et des invités, dont le CPU, la mémoire et le stockage, dans un onglet dédié.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Espaces de travail et onglets:**
-Enregistrez un ensemble d'onglets avec leur disposition en écran divisé et rouvrez le tout en un clic. Termix retient aussi votre dernière session, donc vos onglets reviennent après un rafraîchissement ou sur un autre appareil.
-
-</td>
-<td width="50%" valign="top">
-
-**Ligne de commande:**
-Un CLI `termix` pour votre shell et vos scripts. Ouvrez des terminaux, lancez une commande sur un hôte ou une flotte entière, déplacez des fichiers en SFTP et gérez hôtes, extraits et identifiants. Installez-le avec `npm install -g @termix-ssh/cli` ou récupérez un binaire autonome. Voir la [documentation du CLI](https://docs.termix.site/cli).
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Sécurité:**
-Les mots de passe, les clés et les autres secrets sont chiffrés par utilisateur, et les fichiers de base de données eux-mêmes peuvent être chiffrés sur le disque. Voir la [documentation](https://docs.termix.site/features/authentication/security/) pour le détail.
-
-</td>
-<td width="50%" valign="top">
-
-**Langues:**
-Une trentaine de langues intégrées, gérées via [Crowdin](https://docs.termix.site/translations).
-
-</td>
-</tr>
-</table>
-
-<br />
-
-<details>
-<summary><b>Plus de fonctionnalités</b></summary>
-<br />
-
-- **Tableau de bord** - Vos serveurs en un coup d'œil, avec des cartes que vous rangez vous-même
-- **Graphe réseau** - Votre homelab dessiné à partir de vos hôtes, avec l'état en direct
-- **Moniteur tmux** - Parcourez les sessions, fenêtres et panneaux tmux, avec aperçus et recherche
-- **Clés API** - Des clés par utilisateur avec date d'expiration, pour vos scripts et votre CI
-- **Export et import** - Faites entrer et sortir hôtes, identifiants et données du gestionnaire de fichiers
-- **SSL automatique** - Certificats générés et renouvelés pour vous, avec redirection HTTPS, ou apportez les vôtres
-- **Bases de données** - SQLite par défaut, PostgreSQL et MySQL également pris en charge
-- **Interface moderne** - Une interface React soignée qui marche sur ordinateur et mobile, avec des thèmes clair, sombre et Dracula. Chaque connexion peut s'ouvrir en plein écran depuis une URL
-- **Palette de commandes** - Double appui sur Maj gauche pour rejoindre un hôte au clavier
-- **Raccourcis clavier** - Naviguer entre les onglets, les fermer et plus encore, tout est reconfigurable
-- **Wake-on-LAN** - Réveillez une machine depuis Termix ou depuis une étape d'automatisation
-- **Authentification par proxy de confiance** - Laissez un reverse proxy gérer la connexion et transmettre l'utilisateur
-- **Marque blanche** - Les administrateurs peuvent personnaliser l'instance avec leur propre nom, logo et couleurs
-- **Points d'accès web** - Ouvrez l'interface web d'un hôte, comme la page d'administration d'un routeur, directement dans Termix plutôt que dans un onglet séparé
-- **Salles de collaboration** - Des salles persistantes où un groupe peut passer d'une session à l'autre ensemble, avec une scène pour le présentateur et des invitations
-- **SSH complet** - Hôtes de rebond, Warpgate, demandes TOTP, SOCKS5, vérification des clés d'hôte, remplissage automatique des mots de passe, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, journalisation du terminal, transfert d'agent, agent SSH Bitwarden, signature SSH HashiCorp Vault, Step CA, 1Password Connect et plus encore
-- **Termix ID** - Une version intégrée de sshid.io. Réservez un identifiant, publiez vos clés publiques sur une URL de résolution et émettez des certificats SSH depuis l'autorité intégrée
-- **Suggestions automatiques d'historique de commandes** - Des suggestions en ligne dans le terminal pendant que vous tapez, basées sur votre historique de commandes
-- **Application de bureau autonome et synchronisation** - L'application de bureau fonctionne toute seule, avec son propre backend et sa base de données, et peut en option se synchroniser avec un serveur Termix
-
-</details>
-
-<br />
-
-## Plateformes prises en charge
-
-<table align="center">
-<tr>
-<th align="center">Plateforme</th>
-<th align="center">Distribution</th>
-</tr>
-<tr>
-<td align="center"><b>Web</b></td>
-<td>Tout navigateur récent (Chrome, Safari, Firefox) · Compatible PWA</td>
-</tr>
-<tr>
-<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
-<td>Portable · Installeur MSI · Chocolatey</td>
-</tr>
-<tr>
-<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
-<td>Portable · AUR · AppImage · Deb · Flatpak</td>
-</tr>
-<tr>
-<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
-<td>Apple App Store · DMG · Homebrew</td>
-</tr>
-<tr>
-<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
-<td>Apple App Store · IPA</td>
-</tr>
-<tr>
-<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
-<td>Google Play Store · APK</td>
-</tr>
-</table>
-
-<br />
-
-## Installation
-
-Consultez la [documentation Termix](https://docs.termix.site/install) pour les instructions d'installation complètes sur toutes les plateformes.
-
-Vous déployez sur Kubernetes ? Le chart Helm se trouve dans `charts/termix`, et les instructions de configuration couvrant Ingress, Traefik, Argo CD, GitHub Actions et GitLab CI sont sur [docs.termix.site/install/server/kubernetes](https://docs.termix.site/install/server/kubernetes).
-
-Exemple de fichier Docker Compose (vous pouvez retirer `guacd` et le réseau si vous ne comptez pas utiliser le bureau à distance) :
-
-```yaml
-services:
-  termix:
-    image: ghcr.io/lukegus/termix:latest
-    container_name: termix
-    restart: unless-stopped
-    ports:
-      - "8080:8080"
-    volumes:
-      - termix-data:/app/data
-    environment:
-      PORT: "8080"
-    depends_on:
-      - guacd
-    networks:
-      - termix-net
-
-  guacd:
-    image: guacamole/guacd:1.6.0
-    container_name: guacd
-    restart: unless-stopped
-    ports:
-      - "4822:4822"
-    networks:
-      - termix-net
-
-volumes:
-  termix-data:
-    driver: local
-
-networks:
-  termix-net:
-    driver: bridge
-```
-
-### Ligne de commande
-
-Termix propose aussi un CLI, pour gérer vos serveurs depuis un terminal et utiliser Termix dans vos propres scripts.
-
-```bash
-npm install -g @termix-ssh/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-Il peut ouvrir des terminaux, lancer une commande sur un hôte ou une flotte entière, déplacer des fichiers en SFTP et gérer hôtes, extraits et identifiants. La documentation complète est sur [docs.termix.site/cli](https://docs.termix.site/cli).
-
-### Hébergement cloud
-
-Vous pouvez faire tourner le serveur Termix sur un VPS plutôt que dans votre propre réseau. Si Termix tourne sur le réseau qu'il gère, une panne l'emporte avec elle, juste au moment où vous en avez besoin pour réparer. Ailleurs, il reste joignable, vous avez une IP fixe et vous pouvez y accéder de partout sans VPN ni redirection de port.
-
-[GINERNET](https://docs.termix.site/install/ginernet) sponsorise Termix, et la documentation contient un guide pas à pas pour déployer sur leur plateforme VPS.
-
-<br />
-
-## Télémétrie
-
-Termix envoie une fois par jour un petit rapport anonyme, pour que je puisse voir combien d'instances tournent et quelles fonctionnalités sont utilisées. Il contient un identifiant d'instance aléatoire, la version de l'application et le nombre d'utilisateurs et d'hôtes. Il peut aussi inclure votre plateforme (système, architecture, version de Node.js, type de base de données, et si vous utilisez Docker, l'application de bureau ou un simple serveur), combien de fois chaque type d'onglet a été ouvert et combien de connexions SSH ont eu lieu, ainsi que les fonctionnalités intégrées actives. Il ne contient jamais de noms d'utilisateur, de noms d'hôte, d'adresses IP, d'identifiants ni quoi que ce soit qui permette de vous identifier, vous ou vos serveurs.
-
-C'est activé par défaut. Désactivez-le ou choisissez ce qu'il contient dans les paramètres d'administration, section Usage Statistics, où vous pouvez aussi voir le rapport exact avant l'envoi. Chaque utilisateur peut exclure sa propre utilisation dans son profil. Définir `ENABLE_TELEMETRY=false` le désactive et verrouille l'interrupteur.
-
-<br />
-
-## Faire un don
-
-Termix est gratuit et open source, sans abonnement ni offre payante. S'il vous est utile, pensez à faire un don pour aider à couvrir les serveurs, les noms de domaine et le temps de développement. Les dons financent aussi le temps de recherche nécessaire pour construire des fonctionnalités comme SAML, Kubernetes et le support des agents. Suivez l'avancement et faites un don ci-dessous.
-
-[Faire un don](https://donate.termix.site/)
-
-<br />
-
-## Sponsors
-
-Intéressé par un emplacement payant pour soutenir le développement ? Écrivez à [mail@termix.site](mailto:mail@termix.site).
-
-<!-- SPONSORS:START -->
-
-<div align="center">
-
-<br />
-
-<a href="https://www.digitalocean.com/">
-  <img src="https://termix.site/img/sponsors/digitalocean.svg" height="40" alt="DigitalOcean" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://crowdin.com/">
-  <img src="https://termix.site/img/sponsors/crowdin.svg" height="40" alt="Crowdin" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.blacksmith.sh/">
-  <img src="https://termix.site/img/sponsors/blacksmith.svg" height="40" alt="Blacksmith" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.cloudflare.com/">
-  <img src="https://termix.site/img/sponsors/cloudflare.png" height="40" alt="Cloudflare" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://akamai.com/">
-  <img src="https://termix.site/img/sponsors/akamai.svg" height="40" alt="Akamai" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://aws.amazon.com/">
-  <img src="https://termix.site/img/sponsors/aws.png" height="40" alt="AWS" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://rackgenius.com/">
-  <img src="https://termix.site/img/sponsors/rackgenius.png" height="40" alt="Rack Genius" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://termix.site/img/sponsors/ginernet.png" height="40" alt="Ginernet" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.hetzner.com/?mtm_campaign=termix&mtm_medium=referral&mtm_content=sponsoring_link">
-  <img src="https://termix.site/img/sponsors/hetzner.png" height="40" alt="Hetzner" />
-</a>
-
-</div>
-
-<!-- SPONSORS:END -->
-
-<br />
-
-## Support
-
-Besoin d'aide ou envie de proposer une fonctionnalité ? Ouvrez un [nouveau ticket](https://github.com/Termix-SSH/Support/issues) avec le plus de détails possible, en anglais si vous le pouvez. Vous pouvez aussi demander dans le canal support sur [Discord](https://discord.gg/jVQGdvHDrf), même si les réponses y prennent parfois plus de temps.
-
-<br />
-
-## Captures d'écran
-
-<div align="center">
-
-<br />
-
-[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
-
-<sub>Regarder les présentations des mises à jour sur YouTube</sub>
-
-<br />
-<br />
-
-<table>
-<tr>
-<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
-<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
-<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
-<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
-<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
-<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
-<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
-<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 15.png" alt="Termix Screenshot 15" width="400" /></td>
-<td><img src="../repo-images/Image 16.png" alt="Termix Screenshot 16" width="400" /></td>
-</tr>
-</table>
-
-<sub>Certaines vidéos et images peuvent être dépassées ou ne pas montrer parfaitement les fonctionnalités.</sub>
-
-</div>
-
-<br />
-
-## Fonctionnalités prévues
-
-Toutes les fonctionnalités prévues sont dans [Projects](https://github.com/orgs/Termix-SSH/projects/5). Si vous souhaitez contribuer, voir [Contribuer](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
-
-<br />
-
-## Licence
-
-Distribué sous licence Apache version 2.0. Voir `LICENSE` pour plus d'informations.
diff --git a/docs/readme/README-HI.md b/docs/readme/README-HI.md
deleted file mode 100644
index 9652c12f4..000000000
--- a/docs/readme/README-HI.md
+++ /dev/null
@@ -1,509 +0,0 @@
-<div align="center">
-
-<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
-
-<h1>Termix</h1>
-
-<p>सेल्फ-होस्टेड सर्वर प्रबंधन, SSH और रिमोट डेस्कटॉप से लेकर ऑटोमेशन तक</p>
-
-<p>
-  <a href="../README.md">English</a> ·
-  <a href="README-CN.md">中文</a> ·
-  <a href="README-JA.md">日本語</a> ·
-  <a href="README-KO.md">한국어</a> ·
-  <a href="README-FR.md">Français</a> ·
-  <a href="README-DE.md">Deutsch</a> ·
-  <a href="README-ES.md">Español</a> ·
-  <a href="README-PT.md">Português</a> ·
-  <a href="README-RU.md">Русский</a> ·
-  <a href="README-AR.md">العربية</a> ·
-  हिन्दी ·
-  <a href="README-TR.md">Türkçe</a> ·
-  <a href="README-VI.md">Tiếng Việt</a> ·
-  <a href="README-IT.md">Italiano</a>
-</p>
-
-<p>
-  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
-  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
-  <a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
-</p>
-
-<p>
-  <a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
-</p>
-
-<br />
-
-Termix मुफ़्त और ओपन सोर्स है। अगर यह आपके काम आता है, तो सर्वर की लागत और विकास के समय में मदद के लिए [दान](https://donate.termix.site/) करने पर विचार करें।
-
-<br />
-
-<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
-
-<br />
-<br />
-
-<p>
-  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
-  <br />
-  <sub>1 सितंबर 2025 को हासिल किया गया</sub>
-</p>
-
-</div>
-
-<br />
-
-## अवलोकन
-
-Termix आपके सर्वर संभालने के लिए एक मुफ़्त, ओपन सोर्स, सेल्फ-होस्टेड प्लेटफ़ॉर्म है। यह SSH टर्मिनल, रिमोट डेस्कटॉप (RDP, VNC, Telnet), फ़ाइल ट्रांसफ़र, टनल, Docker, मेट्रिक्स और ऑटोमेशन को एक ही जगह लाता है, वेब, डेस्कटॉप और मोबाइल पर। यह Termius का सेल्फ-होस्टेड विकल्प है जो हमेशा मुफ़्त रहेगा।
-
-<br />
-
-## विशेषताएँ
-
-<table>
-<tr>
-<td width="50%" valign="top">
-
-**SSH टर्मिनल:**
-ब्राउज़र जैसे टैब और स्प्लिट स्क्रीन वाला पूरा टर्मिनल, एक साथ 6 पैनल तक। थीम, फ़ॉन्ट और रंग आप खुद चुनें। हर सत्र के ऊपर एक टूलबार रहता है जिसमें CPU, मेमोरी और डिस्क लाइव दिखते हैं, साथ ही उस होस्ट की फ़ाइलों, Docker, टनल और मेट्रिक्स तक जाने के शॉर्टकट भी।
-
-</td>
-<td width="50%" valign="top">
-
-**रिमोट डेस्कटॉप:**
-ब्राउज़र में RDP, VNC और Telnet, बाकी सत्रों की तरह टैब और स्प्लिट स्क्रीन में। इसमें RDP ड्राइव के लिए फ़ाइल ब्राउज़र और खींचकर छोड़ने वाला अपलोड भी है। Windows डेस्कटॉप पर आप होस्ट को सिस्टम के अपने RDP क्लाइंट में भी खोल सकते हैं।
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**SSH टनल:**
-लोकल, रिमोट और डायनामिक SOCKS फ़ॉरवर्डिंग, अपने आप दोबारा जुड़ने और स्थिति जाँच के साथ। डेस्कटॉप ऐप के क्लाइंट से सर्वर वाले टनल उसी मशीन पर रहते हैं, और आप सेटिंग सर्वर पर सहेजकर उसे दूसरी मशीन पर ले जा सकते हैं।
-
-</td>
-<td width="50%" valign="top">
-
-**फ़ाइल मैनेजर:**
-SFTP से फ़ाइलें देखें, संपादित करें, अपलोड और डाउनलोड करें, नाम बदलें, हटाएँ और खिसकाएँ, sudo के साथ भी। कोड, तस्वीरें, ऑडियो और वीडियो देखें और बदलें। फ़ाइलें सीधे एक सर्वर से दूसरे पर कॉपी करें, सबसे तेज़ रास्ता अपने आप चुना जाता है और ट्रांसफ़र की जाँच भी होती है।
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Docker और Podman:**
-कंटेनर चालू करें, रोकें, थामें और हटाएँ, उनके आँकड़े देखें, और किसी एक के अंदर शेल खोलें। Docker और Podman दोनों के साथ चलता है। यह Portainer या Dockge की जगह लेने के लिए नहीं है, सिर्फ़ आपके पहले से मौजूद कंटेनर संभालने के लिए है।
-
-</td>
-<td width="50%" valign="top">
-
-**होस्ट मैनेजर:**
-टैग और नाम व रंग वाले नेस्टेड फ़ोल्डर से होस्ट सहेजें और व्यवस्थित करें। सहेजे गए क्रेडेंशियल कई होस्ट पर दोबारा इस्तेमाल करें, SSH कुंजियाँ अपने आप भेजें, होस्ट को किसी मुख्य होस्ट के नीचे रखें, एक साथ कई में बदलाव करें और निर्यात करें, और जिन कनेक्शनों को सहेजना नहीं चाहते उनके लिए क्विक कनेक्ट इस्तेमाल करें।
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**होस्ट मेट्रिक्स:**
-ज़्यादातर Linux सर्वर पर CPU, मेमोरी, डिस्क, नेटवर्क, तापमान, अपटाइम, प्रोसेस, पोर्ट, लॉगिन और सिस्टम जानकारी, पुराने आँकड़ों के ग्राफ़ के साथ। मैनेजर कार्ड से आप सर्विस, cron कार्य, पैकेज, उपयोगकर्ता, फ़ायरवॉल नियम, WireGuard, Tailscale, SSL प्रमाणपत्र, लॉग और हेल्थ चेक Termix छोड़े बिना संभाल सकते हैं।
-
-</td>
-<td width="50%" valign="top">
-
-**ऑटोमेशन:**
-पहले एक ट्रिगर चुनें, फिर बताएँ कि क्या होना चाहिए। ट्रिगर में किसी मेट्रिक का तय सीमा पार करना, होस्ट का बंद होना या वापस आना, हेल्थ चेक का बदलना, कोई तय समय, कंटेनर की कोई घटना, या आने वाला webhook शामिल है। कदमों में कमांड और स्निपेट चलाना, कंटेनर और टनल संभालना, मशीन जगाना, कोई URL बुलाना, इंतज़ार करना, शर्त के हिसाब से रास्ता बदलना, दूसरा ऑटोमेशन चलाना, और ntfy, Discord या webhook से आपको बताना शामिल है। टेस्ट रन से आप पहले सुरक्षित तरीके से आज़मा सकते हैं।
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**फ़्लीट:**
-होस्ट चुनकर या टैग नियमों से एक फ़्लीट बनाएँ, ताकि नए होस्ट अपने आप जुड़ जाएँ। एक ही कमांड सभी होस्ट पर एक साथ चलाएँ, सब पर फ़ाइलें भेजें और उनसे लाएँ, पैकेज इंस्टॉल करें, और OS, कर्नेल, आर्किटेक्चर और अपटाइम की सूची इकट्ठा करें।
-
-</td>
-<td width="50%" valign="top">
-
-**AI सहायक:**
-यह वैकल्पिक है और जब तक आप खुद चालू न करें, बंद रहता है। OpenAI, Anthropic, Gemini, Ollama या OpenAI के अनुरूप कोई भी एंडपॉइंट जोड़ें और अपने सेटअप के बारे में पूछें। यह होस्ट, फ़्लीट, स्निपेट और अलर्ट पढ़ सकता है, और बदलाव खुद करने के बजाय आपकी मंज़ूरी के लिए सुझाता है। यह क्रेडेंशियल, उपयोगकर्ताओं या सेटिंग्स तक कभी नहीं पहुँच सकता। एडमिन इसे पूरे इंस्टेंस के लिए बंद रख सकते हैं, और आप इसे शुरुआती सेटअप में ही छिपा सकते हैं।
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**लॉगिन और उपयोगकर्ता:**
-लोकल खातों के साथ OIDC, LDAP, GitHub और Google से लॉगिन, और दो चरणों वाला सत्यापन (TOTP), पासकी (WebAuthn) तथा भरोसेमंद डिवाइस। एडमिन उपयोगकर्ताओं को संभाल सकते हैं, OIDC समूहों को भूमिकाओं से जोड़ सकते हैं, हर प्लेटफ़ॉर्म पर चालू सत्र देख और रद्द कर सकते हैं। अपने लोकल और OIDC खाते आपस में जोड़ें, और ऑडिट लॉग में देखें कि किसने क्या किया।
-
-</td>
-<td width="50%" valign="top">
-
-**भूमिकाएँ और साझाकरण:**
-भूमिकाएँ बनाएँ और होस्ट को उपयोगकर्ताओं या भूमिकाओं के साथ चार स्तरों पर साझा करें: कनेक्ट, देखना, बदलना और प्रबंधन। यह हर तरह के प्रमाणीकरण और हर प्रोटोकॉल के साथ चलता है, और साझा होस्ट के लिए इस्तेमाल होने वाले क्रेडेंशियल आप बदल भी सकते हैं।
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**अलर्ट:**
-CPU, मेमोरी और डिस्क जैसी होस्ट मेट्रिक्स पर नियम लगाएँ, और उनके चलने पर ntfy, Discord या webhook से सूचना पाएँ। चल रहे और ठीक हो चुके अलर्ट इतिहास में देखें, और जो आपके काम के नहीं उन्हें हटा दें।
-
-</td>
-<td width="50%" valign="top">
-
-**होमपेज:**
-खींचकर छोड़ने वाला विजेट ग्रिड जिसे आप खुद बनाते हैं। होस्ट की स्थिति, पिंग, सर्विस लिंक, बुकमार्क, खोज, घड़ियाँ, कैलेंडर, उलटी गिनती, नोट्स, RSS, मौसम, तस्वीरें, iframe, Docker, टनल, मेट्रिक्स के ग्राफ़, अपने API और यहाँ तक कि चालू टर्मिनल तक के विजेट मौजूद हैं।
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**स्निपेट और उपकरण:**
-जो कमांड आप बार-बार चलाते हैं उन्हें सहेजें और एक क्लिक में चलाएँ, होस्ट और अपने इनपुट के लिए वेरिएबल के साथ। एक ही कमांड सभी खुले टर्मिनलों पर चलाएँ, और अपने कमांड इतिहास में ऑटो-कंप्लीट के साथ खोजें।
-
-</td>
-<td width="50%" valign="top">
-
-**सत्र साझा करना:**
-चालू टर्मिनल, RDP, VNC या Telnet सत्र लाइव साझा करें। ऐसा लिंक भेजें जिससे कोई भी बिना खाते के जुड़ सके, या किसी खास Termix उपयोगकर्ता के साथ साझा करें, सिर्फ़ देखने या लिखने की अनुमति के साथ। साझाकरण अपने आप खत्म हो सकता है या कभी भी रद्द किया जा सकता है, और इसे पूरी तरह या हर होस्ट के लिए अलग से बंद किया जा सकता है।
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**सत्र रिकॉर्डिंग और लॉग:**
-टर्मिनल, RDP और VNC सत्र रिकॉर्ड करें और बाद में देखें। सत्र के सादे टेक्स्ट लॉग डाउनलोड करें, और कनेक्शन लॉग देखकर जानें कि जुड़ते समय असल में क्या हुआ।
-
-</td>
-<td width="50%" valign="top">
-
-**सीरियल कनेक्शन:**
-राउटर, स्विच और माइक्रोकंट्रोलर जैसे सीरियल उपकरणों से ब्राउज़र या डेस्कटॉप ऐप से बात करें। बॉड रेट, डेटा बिट, स्टॉप बिट और पैरिटी सेट करें। सहयोगी ब्राउज़रों में Web Serial API और डेस्कटॉप ऐप में मूल बैकएंड इस्तेमाल होता है।
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Tailscale:**
-अपने tailnet से डिवाइस लाकर कुछ ही क्लिक में होस्ट के रूप में जोड़ें, और Tailscale SSH से जुड़ें ताकि पहुँच का काम आपके tailnet के ACL संभालें और कोई क्रेडेंशियल सहेजना न पड़े। Headscale और अपने एंडपॉइंट भी चलते हैं।
-
-</td>
-<td width="50%" valign="top">
-
-**Proxmox:**
-होस्ट सीधे किसी Proxmox इंस्टेंस से लाएँ, और नोड तथा गेस्ट के आँकड़े, जिनमें CPU, मेमोरी और स्टोरेज शामिल हैं, अलग टैब में देखें।
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**वर्कस्पेस और टैब:**
-टैब का एक सेट उनके स्प्लिट लेआउट के साथ सहेजें और पूरा का पूरा एक क्लिक में फिर खोलें। Termix आपका पिछला सत्र भी याद रखता है, इसलिए पेज रीफ़्रेश करने पर और दूसरे डिवाइस पर भी आपके टैब लौट आते हैं।
-
-</td>
-<td width="50%" valign="top">
-
-**निर्देशित सेटअप:**
-एक छोटा सा सेटअप आपको इंटरफ़ेस प्रीसेट, थीम, मनचाही सुविधाएँ और पहला होस्ट चुनने में मदद करता है। सरल मोड वह सब छिपा देता है जो आप इस्तेमाल नहीं करते, और आप सेटअप दोबारा चला सकते हैं या प्रीसेट कभी भी बदल सकते हैं।
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**स्वतंत्र डेस्कटॉप ऐप और सिंक:**
-डेस्कटॉप ऐप अपने लोकल बैकएंड और डेटाबेस के साथ बिना किसी सर्वर के अकेले चलता है। आप इसे किसी Termix सर्वर से जोड़कर होस्ट, क्रेडेंशियल, स्निपेट वगैरह दोनों तरफ़ सिंक कर सकते हैं, और चुन सकते हैं कि कनेक्शन आपकी मशीन से शुरू हों या सर्वर के रास्ते।
-
-</td>
-<td width="50%" valign="top">
-
-**कमांड लाइन:**
-आपके शेल और स्क्रिप्ट के लिए `termix` CLI। टर्मिनल खोलें, किसी एक होस्ट या पूरे फ़्लीट पर कमांड चलाएँ, SFTP से फ़ाइलें भेजें, और होस्ट, स्निपेट व क्रेडेंशियल संभालें। `npm install -g @termix-ssh/cli` से इंस्टॉल करें या अलग बाइनरी लें। [CLI दस्तावेज़](https://docs.termix.site/cli) देखें।
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**सुरक्षा:**
-पासवर्ड, कुंजियाँ और बाकी गोपनीय जानकारी हर उपयोगकर्ता के लिए अलग से एन्क्रिप्ट होती है, और डेटाबेस फ़ाइलें भी डिस्क पर एन्क्रिप्ट की जा सकती हैं। यह कैसे काम करता है, यह [दस्तावेज़](https://docs.termix.site/features/authentication/security/) में देखें।
-
-</td>
-<td width="50%" valign="top">
-
-**भाषाएँ:**
-लगभग 30 भाषाएँ पहले से मौजूद हैं, जिन्हें [Crowdin](https://docs.termix.site/translations) से संभाला जाता है।
-
-</td>
-</tr>
-</table>
-
-<br />
-
-<details>
-<summary><b>और भी विशेषताएँ</b></summary>
-<br />
-
-- **डैशबोर्ड** - आपके सर्वर एक नज़र में, ऐसे कार्ड के साथ जिन्हें आप खुद जमाते हैं
-- **नेटवर्क ग्राफ़** - आपके होस्ट से बना आपका होमलैब का नक्शा, लाइव स्थिति के साथ
-- **tmux मॉनिटर** - tmux के सत्र, विंडो और पैन देखें, झलक और खोज के साथ
-- **API कुंजियाँ** - स्क्रिप्ट और CI के लिए, समाप्ति तिथि वाली उपयोगकर्ता-विशिष्ट कुंजियाँ
-- **निर्यात और आयात** - होस्ट, क्रेडेंशियल और फ़ाइल मैनेजर का डेटा अंदर-बाहर ले जाएँ
-- **अपने आप SSL** - प्रमाणपत्र आपके लिए बनते और नवीनीकृत होते हैं, HTTPS रीडायरेक्ट के साथ, या अपने खुद के लगाएँ
-- **डेटाबेस** - डिफ़ॉल्ट रूप से SQLite, साथ में PostgreSQL और MySQL भी
-- **आधुनिक इंटरफ़ेस** - साफ़ सुथरा React इंटरफ़ेस जो डेस्कटॉप और मोबाइल दोनों पर चलता है, लाइट, डार्क और Dracula जैसी थीम के साथ। कोई भी कनेक्शन URL से पूरी स्क्रीन में खुल सकता है
-- **कमांड पैलेट** - बाईं Shift दो बार दबाकर कीबोर्ड से सीधे किसी होस्ट पर जाएँ
-- **कीबोर्ड शॉर्टकट** - टैब बदलना, बंद करना और बहुत कुछ, सब दोबारा तय किए जा सकते हैं
-- **Wake-on-LAN** - किसी मशीन को Termix से या ऑटोमेशन के किसी कदम से जगाएँ
-- **भरोसेमंद प्रॉक्सी से लॉगिन** - रिवर्स प्रॉक्सी को लॉगिन संभालने दें और उपयोगकर्ता की जानकारी आगे भेजने दें
-- **भरपूर SSH सुविधाएँ** - जंप होस्ट, Warpgate, TOTP पूछना, SOCKS5, होस्ट कुंजी की जाँच, पासवर्ड अपने आप भरना, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, पोर्ट नॉकिंग, टर्मिनल लॉग, एजेंट फ़ॉरवर्डिंग, Bitwarden SSH एजेंट, HashiCorp Vault से SSH हस्ताक्षर और भी बहुत कुछ
-- **Termix ID** - sshid.io जैसा अपना बना हुआ इंतज़ाम। एक नाम लें, अपनी सार्वजनिक कुंजियाँ एक रिज़ॉल्वर URL पर रखें, और अंदर मौजूद CA से SSH प्रमाणपत्र जारी करें
-
-</details>
-
-<br />
-
-## प्लेटफ़ॉर्म सपोर्ट
-
-<table align="center">
-<tr>
-<th align="center">प्लेटफ़ॉर्म</th>
-<th align="center">वितरण</th>
-</tr>
-<tr>
-<td align="center"><b>Web</b></td>
-<td>कोई भी आधुनिक ब्राउज़र (Chrome, Safari, Firefox) · PWA सपोर्ट</td>
-</tr>
-<tr>
-<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
-<td>पोर्टेबल · MSI इंस्टॉलर · Chocolatey</td>
-</tr>
-<tr>
-<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
-<td>पोर्टेबल · AUR · AppImage · Deb · Flatpak</td>
-</tr>
-<tr>
-<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
-<td>Apple App Store · DMG · Homebrew</td>
-</tr>
-<tr>
-<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
-<td>Apple App Store · IPA</td>
-</tr>
-<tr>
-<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
-<td>Google Play Store · APK</td>
-</tr>
-</table>
-
-<br />
-
-## इंस्टॉलेशन
-
-सभी प्लेटफ़ॉर्म पर पूरी इंस्टॉलेशन जानकारी के लिए [Termix दस्तावेज़](https://docs.termix.site/install) देखें।
-
-Docker Compose फ़ाइल का नमूना (अगर आप रिमोट डेस्कटॉप इस्तेमाल नहीं करने वाले तो `guacd` और नेटवर्क वाला हिस्सा हटा सकते हैं):
-
-```yaml
-services:
-  termix:
-    image: ghcr.io/lukegus/termix:latest
-    container_name: termix
-    restart: unless-stopped
-    ports:
-      - "8080:8080"
-    volumes:
-      - termix-data:/app/data
-    environment:
-      PORT: "8080"
-    depends_on:
-      - guacd
-    networks:
-      - termix-net
-
-  guacd:
-    image: guacamole/guacd:1.6.0
-    container_name: guacd
-    restart: unless-stopped
-    ports:
-      - "4822:4822"
-    networks:
-      - termix-net
-
-volumes:
-  termix-data:
-    driver: local
-
-networks:
-  termix-net:
-    driver: bridge
-```
-
-### कमांड लाइन
-
-Termix में CLI भी है, ताकि आप टर्मिनल से अपने सर्वर संभाल सकें और Termix को अपनी स्क्रिप्ट में इस्तेमाल कर सकें।
-
-```bash
-npm install -g @termix-ssh/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-यह टर्मिनल खोल सकता है, एक होस्ट या पूरे फ़्लीट पर कमांड चला सकता है, SFTP से फ़ाइलें ले जा सकता है, और होस्ट, स्निपेट व क्रेडेंशियल संभाल सकता है। पूरा दस्तावेज़ [docs.termix.site/cli](https://docs.termix.site/cli) पर है।
-
-### क्लाउड होस्टिंग
-
-आप Termix सर्वर को अपने नेटवर्क के बजाय किसी VPS पर भी चला सकते हैं। अगर Termix उसी नेटवर्क पर चल रहा है जिसे वह संभालता है, तो गड़बड़ी होने पर वह भी साथ ही बंद हो जाएगा, ठीक उसी वक्त जब आपको उसे ठीक करने के लिए चाहिए। बाहर चलाने पर वह हमेशा पहुँच में रहता है, एक स्थिर IP देता है, और बिना VPN या पोर्ट फ़ॉरवर्ड के कहीं से भी पहुँच मिलती है।
-
-[GINERNET](https://docs.termix.site/install/ginernet) Termix को प्रायोजित करता है, और दस्तावेज़ में उनके VPS प्लेटफ़ॉर्म पर तैनाती की कदम-दर-कदम गाइड मौजूद है।
-
-<br />
-
-## टेलीमेट्री
-
-Termix दिन में एक बार एक छोटी गुमनाम रिपोर्ट भेजता है ताकि मैं देख सकूं कि कितने इंस्टेंस चल रहे हैं और कौन से फ़ीचर इस्तेमाल हो रहे हैं। इसमें एक रैंडम इंस्टेंस ID, ऐप का वर्शन, और आपके यूज़र्स और होस्ट्स की संख्या होती है। इसमें आपका प्लेटफ़ॉर्म (OS, आर्किटेक्चर, Node.js वर्शन, डेटाबेस का प्रकार, और आप Docker, डेस्कटॉप ऐप या सामान्य सर्वर इस्तेमाल करते हैं), हर तरह का टैब कितनी बार खोला गया और कितने SSH लॉगिन हुए, और कौन से बिल्ट-इन फ़ीचर चल रहे हैं, यह भी हो सकता है। इसमें कभी भी यूज़रनेम, होस्टनेम, IP पते, क्रेडेंशियल या ऐसी कोई चीज़ नहीं होती जिससे आपकी या आपके सर्वर की पहचान हो।
-
-यह डिफ़ॉल्ट रूप से चालू रहता है। इसे एडमिन सेटिंग्स में Usage Statistics के अंतर्गत बंद करें या चुनें कि इसमें क्या शामिल हो, और वहीं भेजी जाने वाली रिपोर्ट पहले से देख भी सकते हैं। हर यूज़र अपनी प्रोफ़ाइल में अपना फ़ीचर इस्तेमाल हटा सकता है। `ENABLE_TELEMETRY=false` सेट करने से यह बंद हो जाता है और स्विच लॉक हो जाता है।
-
-<br />
-
-## दान करें
-
-Termix मुफ़्त और ओपन सोर्स है, न कोई सदस्यता है न कोई पेड प्लान। अगर यह आपके काम आता है, तो सर्वर, डोमेन और विकास के समय में मदद के लिए दान करने पर विचार करें। दान से SAML, Kubernetes और एजेंट सपोर्ट जैसी सुविधाएँ बनाने के लिए ज़रूरी शोध और सीखने का समय भी मिलता है। नीचे प्रगति देखें और दान करें।
-
-[दान करें](https://donate.termix.site/)
-
-<br />
-
-## प्रायोजक
-
-विकास में सहयोग के लिए पेड प्लेसमेंट में रुचि है? [mail@termix.site](mailto:mail@termix.site) पर ईमेल करें।
-
-<!-- SPONSORS:START -->
-
-<div align="center">
-
-<br />
-
-<a href="https://www.digitalocean.com/">
-  <img src="https://termix.site/img/sponsors/digitalocean.svg" height="40" alt="DigitalOcean" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://crowdin.com/">
-  <img src="https://termix.site/img/sponsors/crowdin.svg" height="40" alt="Crowdin" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.blacksmith.sh/">
-  <img src="https://termix.site/img/sponsors/blacksmith.svg" height="40" alt="Blacksmith" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.cloudflare.com/">
-  <img src="https://termix.site/img/sponsors/cloudflare.png" height="40" alt="Cloudflare" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://akamai.com/">
-  <img src="https://termix.site/img/sponsors/akamai.svg" height="40" alt="Akamai" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://aws.amazon.com/">
-  <img src="https://termix.site/img/sponsors/aws.png" height="40" alt="AWS" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://rackgenius.com/">
-  <img src="https://termix.site/img/sponsors/rackgenius.png" height="40" alt="Rack Genius" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://termix.site/img/sponsors/ginernet.png" height="40" alt="Ginernet" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.hetzner.com/?mtm_campaign=termix&mtm_medium=referral&mtm_content=sponsoring_link">
-  <img src="https://termix.site/img/sponsors/hetzner.png" height="40" alt="Hetzner" />
-</a>
-
-</div>
-
-<!-- SPONSORS:END -->
-
-<br />
-
-## सहायता
-
-मदद चाहिए या कोई सुविधा माँगनी है? एक [नया issue](https://github.com/Termix-SSH/Support/issues) खोलें और जितना हो सके विस्तार से लिखें, हो सके तो अंग्रेज़ी में। आप [Discord](https://discord.gg/jVQGdvHDrf) के सपोर्ट चैनल में भी पूछ सकते हैं, हालाँकि वहाँ जवाब आने में ज़्यादा समय लग सकता है।
-
-<br />
-
-## स्क्रीनशॉट
-
-<div align="center">
-
-<br />
-
-[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
-
-<sub>YouTube पर अपडेट की जानकारी देखें</sub>
-
-<br />
-<br />
-
-<table>
-<tr>
-<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
-<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
-<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
-<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
-<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
-<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
-<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
-<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 15.png" alt="Termix Screenshot 15" width="400" /></td>
-<td><img src="../repo-images/Image 16.png" alt="Termix Screenshot 16" width="400" /></td>
-</tr>
-</table>
-
-<sub>कुछ वीडियो और तस्वीरें पुरानी हो सकती हैं या सुविधाओं को पूरी तरह नहीं दिखा पातीं।</sub>
-
-</div>
-
-<br />
-
-## नियोजित विशेषताएँ
-
-सभी नियोजित सुविधाएँ [Projects](https://github.com/orgs/Termix-SSH/projects/5) में हैं। अगर आप योगदान देना चाहते हैं, तो [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md) देखें।
-
-<br />
-
-## लाइसेंस
-
-Apache License संस्करण 2.0 के तहत वितरित। अधिक जानकारी के लिए `LICENSE` देखें।
diff --git a/docs/readme/README-IT.md b/docs/readme/README-IT.md
deleted file mode 100644
index 5044739a7..000000000
--- a/docs/readme/README-IT.md
+++ /dev/null
@@ -1,506 +0,0 @@
-<div align="center">
-
-<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
-
-<h1>Termix</h1>
-
-<p>Gestione dei server self-hosted, da SSH e desktop remoto fino alle automazioni</p>
-
-<p>
-  <a href="../README.md">English</a> ·
-  <a href="README-CN.md">中文</a> ·
-  <a href="README-JA.md">日本語</a> ·
-  <a href="README-KO.md">한국어</a> ·
-  <a href="README-FR.md">Français</a> ·
-  <a href="README-DE.md">Deutsch</a> ·
-  <a href="README-ES.md">Español</a> ·
-  <a href="README-PT.md">Português</a> ·
-  <a href="README-RU.md">Русский</a> ·
-  <a href="README-AR.md">العربية</a> ·
-  <a href="README-HI.md">हिन्दी</a> ·
-  <a href="README-TR.md">Türkçe</a> ·
-  <a href="README-VI.md">Tiếng Việt</a> ·
-  Italiano
-</p>
-
-<p>
-  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
-  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
-  <a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
-</p>
-
-<p>
-  <a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
-</p>
-
-<br />
-
-Termix è gratuito e open source. Se ti è utile, valuta una [donazione](https://donate.termix.site/) per aiutare a coprire i costi dei server e il tempo di sviluppo.
-
-<br />
-
-<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
-
-<br />
-<br />
-
-<p>
-  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
-  <br />
-  <sub>Ottenuto il 1 settembre 2025</sub>
-</p>
-
-</div>
-
-<br />
-
-## Panoramica
-
-Termix è una piattaforma gratuita, open source e self-hosted per gestire i tuoi server. Mette in un unico posto terminali SSH, desktop remoti (RDP, VNC, Telnet), trasferimenti di file, tunnel, Docker, metriche e automazioni, su web, desktop e mobile. È un'alternativa self-hosted a Termius che resta gratuita per sempre.
-
-<br />
-
-## Funzionalità
-
-<table>
-<tr>
-<td width="50%" valign="top">
-
-**Terminale SSH:**
-Un terminale completo con schede come quelle del browser e schermo diviso, fino a 6 pannelli insieme. Scegli tema, carattere e colori. Sopra ogni sessione c'è una barra con CPU, memoria e disco in tempo reale, più scorciatoie ai file, a Docker, ai tunnel e alle metriche di quell'host.
-
-</td>
-<td width="50%" valign="top">
-
-**Desktop remoto:**
-RDP, VNC e Telnet nel browser, in schede e schermo diviso come qualsiasi altra sessione. Include un browser dei file per le unità RDP e il caricamento trascinando i file. Sul desktop Windows puoi anche aprire un host nel client RDP nativo.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Tunnel SSH:**
-Inoltro locale, remoto e SOCKS dinamico, con riconnessione automatica e controlli di stato. I tunnel da client a server dell'app desktop restano su quella macchina, e puoi salvare delle preimpostazioni sul server per portare una configurazione su un altro client.
-
-</td>
-<td width="50%" valign="top">
-
-**Gestore file:**
-Sfoglia, modifica, carica, scarica, rinomina, sposta ed elimina file via SFTP, anche con sudo. Guarda e modifica codice, immagini, audio e video. Copia i file direttamente da un server all'altro in una scheda dedicata di trasferimento, con il percorso più veloce scelto per te e i trasferimenti controllati per integrità. L'app desktop ha anche una vista affiancata di locale e remoto.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Docker e Podman:**
-Avvia, ferma, metti in pausa ed elimina i container, guarda le loro statistiche e apri una shell dentro uno di essi. Funziona sia con Docker sia con Podman. Non vuole sostituire Portainer o Dockge, serve solo a gestire i container che hai già.
-
-</td>
-<td width="50%" valign="top">
-
-**Gestore host:**
-Salva e organizza gli host con etichette e cartelle annidate a cui puoi dare nome e colore. Riutilizza le credenziali salvate su più host, distribuisci le chiavi SSH in automatico, raggruppa gli host sotto un host padre, modifica ed esporta in blocco, e usa la connessione rapida per i collegamenti una tantum che non vuoi salvare.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Metriche host:**
-CPU, memoria, disco, rete, temperatura, GPU NVIDIA, tempo di accensione, processi, porte, accessi e informazioni di sistema sulla maggior parte dei server Linux, con grafici storici. Le schede di gestione ti fanno seguire servizi, cron, pacchetti, utenti, regole del firewall, WireGuard, Tailscale, certificati SSL, log e controlli di stato senza uscire da Termix.
-
-</td>
-<td width="50%" valign="top">
-
-**Automazioni:**
-Scegli un evento che fa partire tutto, poi decidi cosa deve succedere. Gli eventi possono essere una metrica che supera una soglia, un host che cade o torna su, un controllo di stato che cambia, una pianificazione, un evento di un container o un webhook in arrivo. I passaggi possono eseguire comandi e frammenti, gestire container e tunnel, accendere un host, chiamare un URL, aspettare, seguire una condizione, avviare un'altra automazione e avvisarti via ntfy, Discord o webhook. Le prove a vuoto ti permettono di provare senza rischi.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Flotte:**
-Raggruppa gli host in una flotta scegliendoli o con regole sulle etichette, così i nuovi host entrano da soli. Esegui un comando su tutti gli host in una volta, invia e recupera file su tutti quanti, installa pacchetti e raccogli un inventario di sistema operativo, kernel, architettura e tempo di accensione.
-
-</td>
-<td width="50%" valign="top">
-
-**Assistente IA:**
-È opzionale e resta spento finché non lo accendi tu. Collega OpenAI, Anthropic, Gemini, Ollama o qualsiasi endpoint compatibile con OpenAI e fai domande sulla tua installazione. Legge host, flotte, frammenti e avvisi, e propone modifiche da approvare invece di farle da solo. Non può mai toccare credenziali, utenti o impostazioni. Gli amministratori possono lasciarlo spento per tutta l'istanza, e tu puoi nasconderlo già durante la configurazione.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Accesso e utenti:**
-Account locali più accesso con OIDC, LDAP, GitHub e Google, con doppia autenticazione (TOTP), passkey (WebAuthn) e dispositivi fidati. Gli amministratori possono gestire gli utenti, collegare i gruppi OIDC ai ruoli, vedere tutte le sessioni attive su ogni piattaforma e revocarle. Collega il tuo account locale a quello OIDC e consulta il registro di controllo di quello che ha fatto ognuno.
-
-</td>
-<td width="50%" valign="top">
-
-**Ruoli e condivisione:**
-Crea ruoli e condividi gli host con utenti o ruoli su quattro livelli: connessione, visualizzazione, modifica e gestione. Funziona con ogni tipo di autenticazione e ogni protocollo, e puoi cambiare le credenziali usate per un host condiviso.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Avvisi:**
-Imposta regole sulle metriche degli host come CPU, memoria e disco, e ricevi una notifica via ntfy, Discord o webhook quando scattano. Guarda gli avvisi attivi e quelli rientrati in uno storico, e scarta quelli che non ti interessano.
-
-</td>
-<td width="50%" valign="top">
-
-**Pagina iniziale:**
-Una griglia di widget che costruisci tu trascinandoli. Ci sono widget per stato degli host, ping, collegamenti ai servizi, segnalibri, ricerca, orologi, calendari, conti alla rovescia, note, RSS, meteo, immagini, iframe, Docker, tunnel, grafici delle metriche, API personalizzate e perfino un terminale dal vivo.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Frammenti e strumenti:**
-Salva i comandi che usi spesso e lanciali con un clic, con variabili per l'host e per quello che scrivi tu. Esegui uno stesso comando su tutti i terminali aperti e cerca nella cronologia con il completamento automatico.
-
-</td>
-<td width="50%" valign="top">
-
-**Condivisione sessione:**
-Condividi dal vivo una sessione di terminale, RDP, VNC o Telnet. Manda un link a cui chiunque può accedere senza account, oppure condividi con un utente Termix preciso, in sola lettura o anche in scrittura. Le condivisioni possono scadere da sole o essere revocate, e si possono spegnere per tutti o per singolo host.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Registrazione e log delle sessioni:**
-Registra le sessioni di terminale, RDP e VNC e riguardale dopo. Scarica i log di testo di una sessione e consulta il registro delle connessioni per vedere esattamente cosa è successo durante una connessione.
-
-</td>
-<td width="50%" valign="top">
-
-**Connessioni seriali:**
-Parla con dispositivi seriali come router, switch e microcontrollori dal browser o dall'app desktop. Imposta velocità, bit di dati, bit di stop e parità. Usa l'API Web Serial nei browser compatibili, oppure un backend nativo nell'app desktop.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Tailscale:**
-Prendi i dispositivi dalla tua tailnet per aggiungerli come host in pochi clic, e collegati con Tailscale SSH così gli ACL della tailnet gestiscono l'accesso senza salvare credenziali. Funzionano anche Headscale e gli endpoint personalizzati.
-
-</td>
-<td width="50%" valign="top">
-
-**Proxmox:**
-Importa gli host direttamente da un'istanza Proxmox e segui le statistiche di nodi e macchine ospiti, comprese CPU, memoria e spazio, in una scheda dedicata.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Spazi di lavoro e schede:**
-Salva un insieme di schede con la loro disposizione divisa e riapri tutto con un clic. Termix ricorda anche l'ultima sessione, così le schede tornano dopo un ricaricamento e su altri dispositivi.
-
-</td>
-<td width="50%" valign="top">
-
-**Riga di comando:**
-Una CLI `termix` per la tua shell e i tuoi script. Apri terminali, esegui un comando su un host o su un'intera flotta, sposta file via SFTP e gestisci host, frammenti e credenziali. Installala con `npm install -g @termix-ssh/cli` oppure prendi un binario autonomo. Vedi la [documentazione della CLI](https://docs.termix.site/cli).
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Sicurezza:**
-Password, chiavi e altri segreti sono cifrati per ogni utente, e gli stessi file del database possono essere cifrati su disco. Guarda la [documentazione](https://docs.termix.site/features/authentication/security/) per capire come funziona.
-
-</td>
-<td width="50%" valign="top">
-
-**Lingue:**
-Circa 30 lingue incluse, gestite tramite [Crowdin](https://docs.termix.site/translations).
-
-</td>
-</tr>
-</table>
-
-<br />
-
-<details>
-<summary><b>Altre funzionalità</b></summary>
-<br />
-
-- **Dashboard** - I tuoi server a colpo d'occhio, con schede che disponi tu
-- **Grafico di rete** - Il tuo homelab disegnato a partire dagli host, con stato in tempo reale
-- **Monitor tmux** - Sfoglia sessioni, finestre e pannelli di tmux, con anteprime e ricerca
-- **Chiavi API** - Chiavi per singolo utente con scadenza, per script e CI
-- **Esporta e importa** - Sposta host, credenziali e dati del gestore file dentro e fuori
-- **SSL automatico** - Certificati generati e rinnovati per te, con reindirizzamento a HTTPS, oppure usa i tuoi
-- **Database** - SQLite di base, con supporto anche per PostgreSQL e MySQL
-- **Interfaccia moderna** - Interfaccia React pulita che funziona su desktop e mobile, con temi come chiaro, scuro e Dracula. Ogni connessione si può aprire a schermo intero da un URL
-- **Palette comandi** - Premi due volte Maiusc sinistro per saltare a un host da tastiera
-- **Scorciatoie da tastiera** - Spostarsi tra le schede, chiuderle e altro, tutto riassegnabile
-- **Wake-on-LAN** - Accendi una macchina da Termix o da un passaggio di un'automazione
-- **Autenticazione tramite proxy fidato** - Lascia che un reverse proxy gestisca l'accesso e passi l'utente
-- **White label** - Gli amministratori possono rimarchiare l'istanza con nome, logo e colori propri
-- **Endpoint web** - Apri l'interfaccia web di un host, come la pagina di amministrazione di un router, incorporata dentro Termix invece che in una scheda separata
-- **Stanze di collaborazione** - Stanze persistenti dove un gruppo può passare insieme da una sessione all'altra, con un palco per il presentatore e inviti
-- **SSH molto completo** - Host di salto, Warpgate, richieste TOTP, SOCKS5, verifica delle chiavi host, riempimento automatico della password, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, log del terminale, inoltro dell'agente, agente SSH di Bitwarden, firma SSH con HashiCorp Vault, Step CA, 1Password Connect e altro
-- **Termix ID** - Una versione integrata di sshid.io. Prendi un identificativo, pubblica le tue chiavi pubbliche su un URL di risoluzione ed emetti certificati SSH dalla CA integrata
-- **Suggerimenti automatici nella cronologia comandi** - Suggerimenti in linea nel terminale mentre scrivi, basati sulla tua cronologia comandi
-- **Desktop autonomo e sincronizzazione** - L'app desktop funziona da sola, con backend e database locali, e può facoltativamente sincronizzarsi con un server Termix
-
-</details>
-
-<br />
-
-## Piattaforme supportate
-
-<table align="center">
-<tr>
-<th align="center">Piattaforma</th>
-<th align="center">Distribuzione</th>
-</tr>
-<tr>
-<td align="center"><b>Web</b></td>
-<td>Qualsiasi browser recente (Chrome, Safari, Firefox) · Supporto PWA</td>
-</tr>
-<tr>
-<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
-<td>Portatile · Installer MSI · Chocolatey</td>
-</tr>
-<tr>
-<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
-<td>Portatile · AUR · AppImage · Deb · Flatpak</td>
-</tr>
-<tr>
-<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
-<td>Apple App Store · DMG · Homebrew</td>
-</tr>
-<tr>
-<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
-<td>Apple App Store · IPA</td>
-</tr>
-<tr>
-<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
-<td>Google Play Store · APK</td>
-</tr>
-</table>
-
-<br />
-
-## Installazione
-
-Vai alla [documentazione di Termix](https://docs.termix.site/install) per le istruzioni complete di installazione su tutte le piattaforme.
-
-Vuoi installare su Kubernetes? Il chart Helm è in `charts/termix`, e le istruzioni di configurazione
-per Ingress, Traefik, Argo CD, GitHub Actions e GitLab CI sono su
-[docs.termix.site/install/server/kubernetes](https://docs.termix.site/install/server/kubernetes).
-
-Esempio di file Docker Compose (puoi togliere `guacd` e la rete se non pensi di usare il desktop remoto):
-
-```yaml
-services:
-  termix:
-    image: ghcr.io/lukegus/termix:latest
-    container_name: termix
-    restart: unless-stopped
-    ports:
-      - "8080:8080"
-    volumes:
-      - termix-data:/app/data
-    environment:
-      PORT: "8080"
-    depends_on:
-      - guacd
-    networks:
-      - termix-net
-
-  guacd:
-    image: guacamole/guacd:1.6.0
-    container_name: guacd
-    restart: unless-stopped
-    ports:
-      - "4822:4822"
-    networks:
-      - termix-net
-
-volumes:
-  termix-data:
-    driver: local
-
-networks:
-  termix-net:
-    driver: bridge
-```
-
-### Riga di comando
-
-Termix ha anche una CLI, così puoi gestire i tuoi server dal terminale e usare Termix nei tuoi script.
-
-```bash
-npm install -g @termix-ssh/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-Può aprire terminali, eseguire un comando su un host o su un'intera flotta, spostare file via SFTP e gestire host, frammenti e credenziali. La documentazione completa è su [docs.termix.site/cli](https://docs.termix.site/cli).
-
-### Hosting in cloud
-
-Puoi far girare il server Termix su un VPS invece che dentro la tua rete. Se Termix gira sulla rete che gestisce, un guasto se lo porta via proprio quando ti servirebbe per sistemare le cose. Farlo girare altrove lo mantiene raggiungibile, ti dà un IP fisso e ti permette di entrare da ovunque senza VPN né porte aperte.
-
-[GINERNET](https://docs.termix.site/install/ginernet) sponsorizza Termix, e nella documentazione c'è una guida passo passo per il rilascio sulla loro piattaforma VPS.
-
-<br />
-
-## Telemetria
-
-Termix invia una volta al giorno un piccolo report anonimo, così posso vedere quante istanze sono attive e quali funzioni vengono usate. Contiene un ID di istanza casuale, la versione dell'app e quanti utenti e host hai. Può includere anche la tua piattaforma (sistema operativo, architettura, versione di Node.js, tipo di database e se usi Docker, l'app desktop o un server normale), quante volte è stato aperto ogni tipo di scheda e quanti login SSH ci sono stati, e quali funzioni integrate sono attive. Non contiene mai nomi utente, nomi host, indirizzi IP, credenziali o altro che identifichi te o i tuoi server.
-
-È attivo di base. Puoi spegnerlo o scegliere cosa include nelle impostazioni di amministrazione, sezione Usage Statistics, dove puoi anche vedere il report esatto prima dell'invio. Ogni utente può escludere il proprio uso delle funzioni dal suo profilo. Impostare `ENABLE_TELEMETRY=false` lo spegne e blocca l'interruttore.
-
-<br />
-
-## Dona
-
-Termix è gratuito e open source, senza abbonamenti né piani a pagamento. Se ti è utile, valuta una donazione per aiutare con server, domini e tempo di sviluppo. Le donazioni finanziano anche il tempo per studiare quello che serve a costruire funzionalità come SAML, Kubernetes e il supporto agli agenti. Segui i progressi e dona qui sotto.
-
-[Dona](https://donate.termix.site/)
-
-<br />
-
-## Sponsor
-
-Ti interessa uno spazio a pagamento per sostenere lo sviluppo? Scrivi a [mail@termix.site](mailto:mail@termix.site).
-
-<!-- SPONSORS:START -->
-
-<div align="center">
-
-<br />
-
-<a href="https://www.digitalocean.com/">
-  <img src="https://termix.site/img/sponsors/digitalocean.svg" height="40" alt="DigitalOcean" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://crowdin.com/">
-  <img src="https://termix.site/img/sponsors/crowdin.svg" height="40" alt="Crowdin" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.blacksmith.sh/">
-  <img src="https://termix.site/img/sponsors/blacksmith.svg" height="40" alt="Blacksmith" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.cloudflare.com/">
-  <img src="https://termix.site/img/sponsors/cloudflare.png" height="40" alt="Cloudflare" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://akamai.com/">
-  <img src="https://termix.site/img/sponsors/akamai.svg" height="40" alt="Akamai" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://aws.amazon.com/">
-  <img src="https://termix.site/img/sponsors/aws.png" height="40" alt="AWS" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://rackgenius.com/">
-  <img src="https://termix.site/img/sponsors/rackgenius.png" height="40" alt="Rack Genius" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://termix.site/img/sponsors/ginernet.png" height="40" alt="Ginernet" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.hetzner.com/?mtm_campaign=termix&mtm_medium=referral&mtm_content=sponsoring_link">
-  <img src="https://termix.site/img/sponsors/hetzner.png" height="40" alt="Hetzner" />
-</a>
-
-</div>
-
-<!-- SPONSORS:END -->
-
-<br />
-
-## Supporto
-
-Ti serve aiuto o vuoi proporre una funzionalità? Apri una [nuova issue](https://github.com/Termix-SSH/Support/issues) con più dettagli possibile, in inglese se ci riesci. Puoi anche chiedere nel canale di supporto su [Discord](https://discord.gg/jVQGdvHDrf), anche se lì le risposte possono richiedere più tempo.
-
-<br />
-
-## Screenshot
-
-<div align="center">
-
-<br />
-
-[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
-
-<sub>Guarda le panoramiche degli aggiornamenti su YouTube</sub>
-
-<br />
-<br />
-
-<table>
-<tr>
-<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
-<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
-<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
-<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
-<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
-<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
-<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
-<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 15.png" alt="Termix Screenshot 15" width="400" /></td>
-<td><img src="../repo-images/Image 16.png" alt="Termix Screenshot 16" width="400" /></td>
-</tr>
-</table>
-
-<sub>Alcuni video e immagini possono essere datati o non mostrare al meglio le funzionalità.</sub>
-
-</div>
-
-<br />
-
-## Funzionalità pianificate
-
-Tutte le funzionalità pianificate sono su [Projects](https://github.com/orgs/Termix-SSH/projects/5). Se vuoi contribuire, guarda [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
-
-<br />
-
-## Licenza
-
-Distribuito con licenza Apache versione 2.0. Vedi `LICENSE` per maggiori informazioni.
-</content>
-</invoke>
diff --git a/docs/readme/README-JA.md b/docs/readme/README-JA.md
deleted file mode 100644
index 0a9ec9ede..000000000
--- a/docs/readme/README-JA.md
+++ /dev/null
@@ -1,505 +0,0 @@
-<div align="center">
-
-<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
-
-<h1>Termix</h1>
-
-<p>SSH やリモートデスクトップから自動化まで、セルフホストのサーバー管理</p>
-
-<p>
-  <a href="../README.md">English</a> ·
-  <a href="README-CN.md">中文</a> ·
-  日本語 ·
-  <a href="README-KO.md">한국어</a> ·
-  <a href="README-FR.md">Français</a> ·
-  <a href="README-DE.md">Deutsch</a> ·
-  <a href="README-ES.md">Español</a> ·
-  <a href="README-PT.md">Português</a> ·
-  <a href="README-RU.md">Русский</a> ·
-  <a href="README-AR.md">العربية</a> ·
-  <a href="README-HI.md">हिन्दी</a> ·
-  <a href="README-TR.md">Türkçe</a> ·
-  <a href="README-VI.md">Tiếng Việt</a> ·
-  <a href="README-IT.md">Italiano</a>
-</p>
-
-<p>
-  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
-  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
-  <a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
-</p>
-
-<p>
-  <a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
-</p>
-
-<br />
-
-Termix は無料でオープンソースです。役に立ったと感じたら、サーバー費用と開発時間を支えるために[寄付](https://donate.termix.site/)をご検討ください。
-
-<br />
-
-<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
-
-<br />
-<br />
-
-<p>
-  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
-  <br />
-  <sub>2025年9月1日 達成</sub>
-</p>
-
-</div>
-
-<br />
-
-## 概要
-
-Termix は無料でオープンソースの、セルフホスト型サーバー管理プラットフォームです。SSH ターミナル、リモートデスクトップ（RDP、VNC、Telnet）、ファイル転送、トンネル、Docker、メトリクス、自動化をひとつにまとめ、ウェブ、デスクトップ、モバイルで使えます。ずっと無料で使える、セルフホスト版の Termius 代替です。
-
-<br />
-
-## 機能
-
-<table>
-<tr>
-<td width="50%" valign="top">
-
-**SSH ターミナル:**
-ブラウザのようなタブと分割画面を備えた本格的なターミナルで、最大 6 分割まで同時に表示できます。テーマ、フォント、配色は自由に選べます。各セッションの上のツールバーには CPU、メモリ、ディスクの状況がリアルタイムで表示され、そのホストのファイル、Docker、トンネル、メトリクスへすぐ移動できます。
-
-</td>
-<td width="50%" valign="top">
-
-**リモートデスクトップ:**
-RDP、VNC、Telnet をブラウザから利用でき、他のセッションと同じようにタブや分割画面で扱えます。RDP ドライブ用のファイルブラウザとドラッグ＆ドロップのアップロードも使えます。Windows のデスクトップ版では、ホストをネイティブの RDP クライアントで開くこともできます。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**SSH トンネル:**
-ローカル、リモート、ダイナミック SOCKS の転送に対応し、自動再接続とヘルスチェックが付いています。デスクトップ版のクライアント間トンネルはその端末に保存され、プリセットをサーバーに保存しておけば別の端末に設定を移せます。
-
-</td>
-<td width="50%" valign="top">
-
-**ファイルマネージャー:**
-SFTP でファイルの閲覧、編集、アップロード、ダウンロード、名前変更、移動、削除ができ、sudo にも対応しています。コード、画像、音声、動画を表示・編集できます。専用の転送タブでサーバー間から直接ファイルをコピーでき、最速の経路が自動で選ばれ、転送の整合性も検証されます。デスクトップ版にはローカルとリモートを並べて表示する画面もあります。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Docker と Podman:**
-コンテナの起動、停止、一時停止、削除ができ、状態を確認したり、中でシェルを開いたりできます。Docker と Podman のどちらでも動きます。Portainer や Dockge を置き換えるためのものではなく、すでにあるコンテナを扱うためのものです。
-
-</td>
-<td width="50%" valign="top">
-
-**ホスト管理:**
-タグと、名前や色を付けられる入れ子のフォルダでホストを整理できます。保存した認証情報を複数のホストで使い回し、SSH 鍵を自動で配布し、ホストを親ホストの下にまとめ、一括編集やエクスポートができます。保存したくない一度きりの接続にはクイック接続が使えます。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**ホストメトリクス:**
-たいていの Linux サーバーで CPU、メモリ、ディスク、ネットワーク、温度、NVIDIA GPU、稼働時間、プロセス、ポート、ログイン、システム情報を履歴グラフ付きで確認できます。マネージャーカードを使えば、サービス、cron、パッケージ、ユーザー、ファイアウォール、WireGuard、Tailscale、SSL 証明書、ログ、ヘルスチェックを Termix から離れずに扱えます。
-
-</td>
-<td width="50%" valign="top">
-
-**自動化:**
-きっかけを選んで、何をするかを決めるだけです。きっかけには、メトリクスがしきい値を超えたとき、ホストが上がったり落ちたりしたとき、ヘルスチェックの状態が変わったとき、スケジュール、コンテナのイベント、外部からの Webhook があります。ステップではコマンドやスニペットの実行、コンテナやトンネルの操作、ホストの起動、URL の呼び出し、待機、条件分岐、別の自動化の実行ができ、ntfy、Discord、Webhook で通知できます。テスト実行で安全に試せます。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**フリート:**
-ホストを選ぶか、タグのルールを決めてフリートにまとめると、新しいホストは自動で入ります。すべてのホストで同じコマンドを一度に実行し、全台にファイルを配ったり集めたり、パッケージを入れたり、OS、カーネル、アーキテクチャ、稼働時間の一覧を集められます。
-
-</td>
-<td width="50%" valign="top">
-
-**AI アシスタント:**
-任意の機能で、自分で有効にするまでは動きません。OpenAI、Anthropic、Gemini、Ollama、または OpenAI 互換のエンドポイントにつないで、自分の環境について質問できます。ホスト、フリート、スニペット、アラートを読み取れますが、変更は自分で行わず、承認してもらうための提案として出します。認証情報、ユーザー、設定には決して触れられません。管理者はインスタンス全体で無効にでき、初期設定で非表示にすることもできます。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**ログインとユーザー:**
-ローカルアカウントに加えて OIDC、LDAP、GitHub、Google でのサインインに対応し、2 要素認証（TOTP）、パスキー（WebAuthn）、信頼済みデバイスも使えます。管理者はユーザーの管理、OIDC グループとロールの対応付け、全プラットフォームのアクティブなセッションの確認と失効ができます。ローカルと OIDC のアカウントを連携でき、誰が何をしたかは監査ログで確認できます。
-
-</td>
-<td width="50%" valign="top">
-
-**ロールと共有:**
-ロールを作り、接続、閲覧、編集、管理という 4 段階でホストをユーザーやロールに共有できます。すべての認証方式とすべてのプロトコルで使え、共有したホストで使う認証情報を上書きすることもできます。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**アラート:**
-CPU、メモリ、ディスクなどのホストメトリクスにルールを設定し、発報したら ntfy、Discord、Webhook で通知を受け取れます。発報中と解消済みのアラートは履歴で確認でき、気にしないものは消しておけます。
-
-</td>
-<td width="50%" valign="top">
-
-**ホームページ:**
-自分で組み立てるドラッグ＆ドロップのウィジェット画面です。ホストの状態、Ping、サービスリンク、ブックマーク、検索、時計、カレンダー、カウントダウン、メモ、RSS、天気、画像、iframe、Docker、トンネル、メトリクスのグラフ、独自 API、さらにはライブのターミナルまでウィジェットとして置けます。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**スニペットとツール:**
-よく使うコマンドを保存して、ワンクリックで実行できます。ホストの値や自分で入力する値を変数として使えます。開いているすべてのターミナルで同じコマンドをまとめて実行でき、コマンド履歴も補完付きで検索できます。
-
-</td>
-<td width="50%" valign="top">
-
-**セッション共有:**
-ターミナル、RDP、VNC、Telnet のセッションをリアルタイムで共有できます。アカウントなしで参加できるリンクを送るか、特定の Termix ユーザーと共有し、閲覧のみか操作可能かを選べます。共有は自動で期限切れにも、いつでも取り消しにもでき、全体またはホストごとにオフにできます。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**セッション録画とログ:**
-ターミナル、RDP、VNC のセッションを録画して、あとから再生できます。セッションのテキストログをダウンロードでき、接続ログを見れば接続中に何が起きたかがそのまま分かります。
-
-</td>
-<td width="50%" valign="top">
-
-**シリアル接続:**
-ルーター、スイッチ、マイコンなどのシリアル機器に、ブラウザやデスクトップアプリから接続できます。ボーレート、データビット、ストップビット、パリティを設定できます。対応ブラウザでは Web Serial API を、デスクトップアプリではネイティブのバックエンドを使います。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Tailscale:**
-tailnet から端末を取り込んで数クリックでホストとして追加でき、Tailscale SSH で接続すればアクセス制御は tailnet の ACL に任せられ、認証情報を保存する必要がありません。Headscale や独自のエンドポイントにも対応しています。
-
-</td>
-<td width="50%" valign="top">
-
-**Proxmox:**
-Proxmox のインスタンスからそのままホストを取り込めます。ノードやゲストの CPU、メモリ、ストレージなどの状態を専用のタブで確認できます。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**ワークスペースとタブ:**
-タブと分割レイアウトのセットを保存して、ワンクリックでまるごと開き直せます。Termix は前回のセッションも覚えているので、再読み込みしても端末を変えてもタブは戻ってきます。
-
-</td>
-<td width="50%" valign="top">
-
-**コマンドラインツール:**
-シェルやスクリプトから使える `termix` CLI です。ターミナルを開き、ホスト 1 台またはフリート全体でコマンドを実行し、SFTP でファイルを移動し、ホストやスニペット、認証情報を管理できます。`npm install -g @termix-ssh/cli` で入れるか、単体のバイナリを使ってください。詳しくは [CLI ドキュメント](https://docs.termix.site/cli)をご覧ください。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**セキュリティ:**
-パスワードや鍵などの秘密情報はユーザーごとに暗号化され、データベースのファイル自体もディスク上で暗号化できます。仕組みは[ドキュメント](https://docs.termix.site/features/authentication/security/)をご覧ください。
-
-</td>
-<td width="50%" valign="top">
-
-**多言語対応:**
-約 30 言語に対応しており、[Crowdin](https://docs.termix.site/translations) で管理しています。
-
-</td>
-</tr>
-</table>
-
-<br />
-
-<details>
-<summary><b>その他の機能</b></summary>
-<br />
-
-- **ダッシュボード** - 自分で並べたカードでサーバーの状況をひと目で把握
-- **ネットワーク図** - ホストからホームラボを図にして、状態をリアルタイム表示
-- **tmux モニター** - tmux のセッション、ウィンドウ、ペインをプレビューと検索付きで一覧
-- **API キー** - スクリプトや CI 用の、有効期限付きユーザー単位のキー
-- **エクスポートとインポート** - ホスト、認証情報、ファイルマネージャーのデータを出し入れ
-- **自動 SSL** - 証明書の発行と更新、HTTPS へのリダイレクトを自動で。自前の証明書も使えます
-- **データベース** - 標準は SQLite、PostgreSQL と MySQL にも対応
-- **モダンな UI** - デスクトップでもモバイルでも使える React の画面。ライト、ダーク、Dracula などのテーマ付き。どの接続も URL からフルスクリーンで開けます
-- **コマンドパレット** - 左 Shift の 2 回押しで、キーボードからホストへ移動
-- **キーボードショートカット** - タブの移動や閉じる操作など、すべて割り当て変更可能
-- **Wake-on-LAN** - Termix からでも自動化のステップからでもマシンを起動
-- **信頼済みプロキシ認証** - リバースプロキシにサインインを任せ、ユーザー情報を引き継ぎ
-- **ホワイトラベル** - 管理者が自分の名前、ロゴ、配色でインスタンスをブランド変更できます
-- **Web エンドポイント** - ルーターの管理画面のようなホスト自身の Web UI を、別タブではなく Termix の中に埋め込んで開けます
-- **コラボレーションルーム** - グループでセッションを行き来できる常設ルーム。プレゼンターの表示や招待機能もあります
-- **充実した SSH 機能** - 踏み台ホスト、Warpgate、TOTP の入力、SOCKS5、ホスト鍵の検証、パスワードの自動入力、[OPKSSH](https://github.com/openpubkey/opkssh)、tmux、ポートノッキング、ターミナルのログ、エージェント転送、Bitwarden SSH エージェント、HashiCorp Vault の SSH 署名、Step CA、1Password Connect など
-- **Termix ID** - sshid.io のような仕組みを内蔵。ハンドルを取得し、公開鍵をリゾルバー URL で公開し、内蔵 CA から SSH 証明書を発行できます
-- **コマンド履歴の自動候補** - ターミナルに入力すると、コマンド履歴をもとにしたインライン候補が表示されます
-- **デスクトップ単体利用と同期** - デスクトップアプリはローカルのバックエンドとデータベースを持ち単体でも動き、Termix サーバーと同期することもできます
-
-</details>
-
-<br />
-
-## プラットフォーム対応
-
-<table align="center">
-<tr>
-<th align="center">プラットフォーム</th>
-<th align="center">配布形式</th>
-</tr>
-<tr>
-<td align="center"><b>Web</b></td>
-<td>最近のブラウザ全般（Chrome、Safari、Firefox）· PWA 対応</td>
-</tr>
-<tr>
-<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
-<td>ポータブル · MSI インストーラー · Chocolatey</td>
-</tr>
-<tr>
-<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
-<td>ポータブル · AUR · AppImage · Deb · Flatpak</td>
-</tr>
-<tr>
-<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
-<td>Apple App Store · DMG · Homebrew</td>
-</tr>
-<tr>
-<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
-<td>Apple App Store · IPA</td>
-</tr>
-<tr>
-<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
-<td>Google Play Store · APK</td>
-</tr>
-</table>
-
-<br />
-
-## インストール
-
-すべてのプラットフォーム向けの詳しいインストール手順は [Termix ドキュメント](https://docs.termix.site/install)をご覧ください。
-
-Kubernetes にデプロイしますか？Helm chart は `charts/termix` にあり、
-Ingress、Traefik、Argo CD、GitHub Actions、GitLab CI を扱うセットアップ手順は
-[docs.termix.site/install/server/kubernetes](https://docs.termix.site/install/server/kubernetes) にあります。
-
-Docker Compose の例です（リモートデスクトップ機能を使わないなら `guacd` とネットワークの部分は省略できます）:
-
-```yaml
-services:
-  termix:
-    image: ghcr.io/lukegus/termix:latest
-    container_name: termix
-    restart: unless-stopped
-    ports:
-      - "8080:8080"
-    volumes:
-      - termix-data:/app/data
-    environment:
-      PORT: "8080"
-    depends_on:
-      - guacd
-    networks:
-      - termix-net
-
-  guacd:
-    image: guacamole/guacd:1.6.0
-    container_name: guacd
-    restart: unless-stopped
-    ports:
-      - "4822:4822"
-    networks:
-      - termix-net
-
-volumes:
-  termix-data:
-    driver: local
-
-networks:
-  termix-net:
-    driver: bridge
-```
-
-### コマンドラインツール
-
-Termix には CLI もあるので、ターミナルからサーバーを管理したり、自分のスクリプトに組み込んだりできます。
-
-```bash
-npm install -g @termix-ssh/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-ターミナルを開き、ホスト 1 台またはフリート全体でコマンドを実行し、SFTP でファイルを移動し、ホストやスニペット、認証情報を管理できます。詳しい説明は [docs.termix.site/cli](https://docs.termix.site/cli) にあります。
-
-### クラウドでの運用
-
-Termix のサーバーは自分のネットワーク内ではなく、VPS で動かすこともできます。管理対象のネットワーク上で動かしていると、障害が起きたときに Termix も一緒に落ちてしまい、直したいときに限って使えなくなります。外で動かしておけばいつでも届きますし、固定 IP も手に入り、VPN やポート開放なしでどこからでも入れます。
-
-[GINERNET](https://docs.termix.site/install/ginernet) は Termix のスポンサーで、同社の VPS へデプロイする手順はドキュメントに詳しく載っています。
-
-<br />
-
-## テレメトリー
-
-Termix は 1 日に 1 回、小さな匿名レポートを送信します。これで、どれだけのインスタンスが動いていて、どの機能が使われているかを把握しています。内容はランダムなインスタンス ID、アプリのバージョン、ユーザー数とホスト数です。さらに、プラットフォーム（OS、アーキテクチャ、Node.js のバージョン、データベースの種類、Docker・デスクトップアプリ・通常のサーバーのどれで動いているか）、各種タブが開かれた回数と SSH ログイン数、動作中の組み込み機能を含めることもできます。ユーザー名、ホスト名、IP アドレス、認証情報など、あなたやサーバーを特定できる情報は一切含みません。
-
-初期状態では有効です。管理設定の「Usage Statistics」から止めたり、含める内容を選んだりでき、送信されるレポートをそのまま事前に確認することもできます。各ユーザーはプロフィールで自分の機能利用データを除外できます。`ENABLE_TELEMETRY=false` を設定すると無効になり、スイッチもロックされます。
-
-<br />
-
-## 寄付
-
-Termix は無料でオープンソースで、サブスクリプションも有料プランもありません。役に立っていると感じたら、サーバー代、ドメイン、開発時間を支えるための寄付をご検討ください。寄付は SAML、Kubernetes、エージェント対応といった機能を作るための調査や学習の時間にもあてられます。進み具合の確認と寄付は下記からどうぞ。
-
-[寄付する](https://donate.termix.site/)
-
-<br />
-
-## スポンサー
-
-有料掲載で開発を支援することにご興味がありますか。[mail@termix.site](mailto:mail@termix.site) までご連絡ください。
-
-<!-- SPONSORS:START -->
-
-<div align="center">
-
-<br />
-
-<a href="https://www.digitalocean.com/">
-  <img src="https://termix.site/img/sponsors/digitalocean.svg" height="40" alt="DigitalOcean" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://crowdin.com/">
-  <img src="https://termix.site/img/sponsors/crowdin.svg" height="40" alt="Crowdin" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.blacksmith.sh/">
-  <img src="https://termix.site/img/sponsors/blacksmith.svg" height="40" alt="Blacksmith" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.cloudflare.com/">
-  <img src="https://termix.site/img/sponsors/cloudflare.png" height="40" alt="Cloudflare" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://akamai.com/">
-  <img src="https://termix.site/img/sponsors/akamai.svg" height="40" alt="Akamai" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://aws.amazon.com/">
-  <img src="https://termix.site/img/sponsors/aws.png" height="40" alt="AWS" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://rackgenius.com/">
-  <img src="https://termix.site/img/sponsors/rackgenius.png" height="40" alt="Rack Genius" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://termix.site/img/sponsors/ginernet.png" height="40" alt="Ginernet" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.hetzner.com/?mtm_campaign=termix&mtm_medium=referral&mtm_content=sponsoring_link">
-  <img src="https://termix.site/img/sponsors/hetzner.png" height="40" alt="Hetzner" />
-</a>
-
-</div>
-
-<!-- SPONSORS:END -->
-
-<br />
-
-## サポート
-
-困ったときや機能の要望があるときは、[新しい issue](https://github.com/Termix-SSH/Support/issues) を作って、できるだけ詳しく、できれば英語で書いてください。[Discord](https://discord.gg/jVQGdvHDrf) のサポートチャンネルでも質問できますが、返信には時間がかかることがあります。
-
-<br />
-
-## スクリーンショット
-
-<div align="center">
-
-<br />
-
-[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
-
-<sub>YouTube でアップデートの紹介を見る</sub>
-
-<br />
-<br />
-
-<table>
-<tr>
-<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
-<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
-<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
-<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
-<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
-<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
-<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
-<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 15.png" alt="Termix Screenshot 15" width="400" /></td>
-<td><img src="../repo-images/Image 16.png" alt="Termix Screenshot 16" width="400" /></td>
-</tr>
-</table>
-
-<sub>動画や画像は古くなっていたり、機能を十分に伝えられていない場合があります。</sub>
-
-</div>
-
-<br />
-
-## 予定されている機能
-
-予定されている機能はすべて [Projects](https://github.com/orgs/Termix-SSH/projects/5) にあります。貢献をお考えの方は[コントリビューションガイド](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md)をご覧ください。
-
-<br />
-
-## ライセンス
-
-Apache License 2.0 のもとで配布しています。詳しくは `LICENSE` をご覧ください。
-</content>
diff --git a/docs/readme/README-KO.md b/docs/readme/README-KO.md
deleted file mode 100644
index 53ac1d4d4..000000000
--- a/docs/readme/README-KO.md
+++ /dev/null
@@ -1,502 +0,0 @@
-<div align="center">
-
-<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
-
-<h1>Termix</h1>
-
-<p>SSH와 원격 데스크톱부터 자동화까지, 셀프 호스팅 서버 관리</p>
-
-<p>
-  <a href="../README.md">English</a> ·
-  <a href="README-CN.md">中文</a> ·
-  <a href="README-JA.md">日本語</a> ·
-  한국어 ·
-  <a href="README-FR.md">Français</a> ·
-  <a href="README-DE.md">Deutsch</a> ·
-  <a href="README-ES.md">Español</a> ·
-  <a href="README-PT.md">Português</a> ·
-  <a href="README-RU.md">Русский</a> ·
-  <a href="README-AR.md">العربية</a> ·
-  <a href="README-HI.md">हिन्दी</a> ·
-  <a href="README-TR.md">Türkçe</a> ·
-  <a href="README-VI.md">Tiếng Việt</a> ·
-  <a href="README-IT.md">Italiano</a>
-</p>
-
-<p>
-  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
-  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
-  <a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
-</p>
-
-<p>
-  <a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
-</p>
-
-<br />
-
-Termix는 무료이며 오픈 소스입니다. 유용하게 쓰고 계시다면 서버 비용과 개발 시간에 보탬이 되도록 [후원](https://donate.termix.site/)을 고려해 주세요.
-
-<br />
-
-<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
-
-<br />
-<br />
-
-<p>
-  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
-  <br />
-  <sub>2025년 9월 1일 달성</sub>
-</p>
-
-</div>
-
-<br />
-
-## 개요
-
-Termix는 무료 오픈 소스 셀프 호스팅 서버 관리 플랫폼입니다. SSH 터미널, 원격 데스크톱(RDP, VNC, Telnet), 파일 전송, 터널, Docker, 지표, 자동화를 한곳에 모아 웹과 데스크톱, 모바일에서 쓸 수 있습니다. 계속 무료로 쓸 수 있는 셀프 호스팅 Termius 대안입니다.
-
-<br />
-
-## 기능
-
-<table>
-<tr>
-<td width="50%" valign="top">
-
-**SSH 터미널:**
-브라우저 같은 탭과 분할 화면을 갖춘 제대로 된 터미널로, 한 번에 최대 6개 패널까지 띄울 수 있습니다. 테마와 글꼴, 색을 골라 쓸 수 있습니다. 각 세션 위의 툴바에는 CPU, 메모리, 디스크가 실시간으로 표시되고, 해당 호스트의 파일과 Docker, 터널, 지표로 바로 갈 수 있습니다.
-
-</td>
-<td width="50%" valign="top">
-
-**원격 데스크톱:**
-브라우저에서 RDP와 VNC, Telnet을 쓸 수 있고 다른 세션과 똑같이 탭과 분할 화면으로 다룰 수 있습니다. RDP 드라이브용 파일 브라우저와 끌어다 놓기 업로드도 있습니다. Windows 데스크톱에서는 호스트를 기본 RDP 클라이언트로 열 수도 있습니다.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**SSH 터널:**
-로컬과 원격, 동적 SOCKS 포워딩을 지원하며 자동 재연결과 상태 확인이 붙어 있습니다. 데스크톱 앱의 클라이언트 대 서버 터널은 그 컴퓨터에 저장되고, 프리셋을 서버에 저장해 두면 다른 컴퓨터로 설정을 옮길 수 있습니다.
-
-</td>
-<td width="50%" valign="top">
-
-**파일 관리자:**
-SFTP로 파일을 살펴보고 편집하고 올리고 내려받고 이름을 바꾸고 옮기고 지울 수 있으며 sudo도 됩니다. 코드와 이미지, 오디오, 비디오를 보고 편집할 수 있습니다. 서버에서 서버로 파일을 바로 복사할 수 있는데, 가장 빠른 경로가 자동으로 선택되고 전송 무결성도 확인합니다.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Docker와 Podman:**
-컨테이너를 시작하고 멈추고 일시 정지하고 지울 수 있으며, 상태를 보거나 안에서 셸을 열 수 있습니다. Docker와 Podman 모두에서 동작합니다. Portainer나 Dockge를 대신하려는 것이 아니라, 이미 있는 컨테이너를 다루기 위한 것입니다.
-
-</td>
-<td width="50%" valign="top">
-
-**호스트 관리:**
-태그와, 이름과 색을 붙일 수 있는 중첩 폴더로 호스트를 정리합니다. 저장한 자격 증명을 여러 호스트에서 다시 쓰고, SSH 키를 자동으로 배포하고, 호스트를 상위 호스트 아래로 묶고, 한꺼번에 편집하거나 내보낼 수 있습니다. 저장하고 싶지 않은 일회성 연결에는 빠른 연결을 쓰면 됩니다.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**호스트 지표:**
-대부분의 리눅스 서버에서 CPU, 메모리, 디스크, 네트워크, 온도, NVIDIA GPU, 가동 시간, 프로세스, 포트, 로그인, 시스템 정보를 기록 그래프와 함께 볼 수 있습니다. 관리 카드로 서비스와 cron 작업, 패키지, 사용자, 방화벽 규칙, WireGuard, Tailscale, SSL 인증서, 로그, 상태 확인을 Termix 안에서 처리할 수 있습니다.
-
-</td>
-<td width="50%" valign="top">
-
-**자동화:**
-먼저 조건을 고르고, 무슨 일이 일어날지 정하면 됩니다. 조건에는 지표가 기준을 넘을 때, 호스트가 올라오거나 내려갈 때, 상태 확인 결과가 바뀔 때, 정해진 일정, 컨테이너 이벤트, 들어오는 웹훅이 있습니다. 각 단계에서 명령과 스니펫을 실행하고, 컨테이너와 터널을 조작하고, 호스트를 깨우고, URL을 호출하고, 기다리고, 조건에 따라 갈라지고, 다른 자동화를 실행하고, ntfy나 Discord, 웹훅으로 알릴 수 있습니다. 테스트 실행으로 먼저 안전하게 시험해 볼 수 있습니다.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**플릿:**
-호스트를 직접 고르거나 태그 규칙으로 플릿에 묶으면 새 호스트는 알아서 들어옵니다. 모든 호스트에서 같은 명령을 한 번에 실행하고, 전부에 파일을 보내고 가져오고, 패키지를 설치하고, OS와 커널, 아키텍처, 가동 시간 목록을 모을 수 있습니다.
-
-</td>
-<td width="50%" valign="top">
-
-**AI 어시스턴트:**
-선택 기능이며 직접 켜기 전까지는 꺼져 있습니다. OpenAI, Anthropic, Gemini, Ollama 또는 OpenAI 호환 엔드포인트를 연결해 내 환경에 대해 물어볼 수 있습니다. 호스트와 플릿, 스니펫, 알림을 읽을 수 있지만 직접 바꾸지 않고 승인받을 제안으로 내놓습니다. 자격 증명과 사용자, 설정에는 절대 접근할 수 없습니다. 관리자는 인스턴스 전체에서 꺼 둘 수 있고, 초기 설정에서 아예 숨길 수도 있습니다.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**로그인과 사용자:**
-로컬 계정과 함께 OIDC, LDAP, GitHub, Google 로그인을 지원하고 2단계 인증(TOTP), 패스키(WebAuthn), 신뢰할 수 있는 기기도 쓸 수 있습니다. 관리자는 사용자를 관리하고, OIDC 그룹을 역할에 연결하고, 모든 플랫폼의 활성 세션을 보고 해지할 수 있습니다. 로컬 계정과 OIDC 계정을 연결할 수 있고, 누가 무엇을 했는지는 감사 로그에서 확인합니다.
-
-</td>
-<td width="50%" valign="top">
-
-**역할과 공유:**
-역할을 만들고 연결, 보기, 편집, 관리라는 네 단계로 호스트를 사용자나 역할에 공유할 수 있습니다. 모든 인증 방식과 모든 프로토콜에서 동작하며, 공유한 호스트에 쓸 자격 증명을 따로 지정할 수도 있습니다.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**알림:**
-CPU와 메모리, 디스크 같은 호스트 지표에 규칙을 걸어 두고 조건이 걸리면 ntfy나 Discord, 웹훅으로 알림을 받습니다. 발생 중인 알림과 해제된 알림을 기록에서 보고, 신경 쓰지 않을 것은 지워 둘 수 있습니다.
-
-</td>
-<td width="50%" valign="top">
-
-**홈페이지:**
-직접 꾸미는 끌어다 놓기 위젯 화면입니다. 호스트 상태, 핑, 서비스 링크, 북마크, 검색, 시계, 달력, 카운트다운, 메모, RSS, 날씨, 이미지, iframe, Docker, 터널, 지표 차트, 사용자 API, 심지어 살아 있는 터미널까지 위젯으로 놓을 수 있습니다.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**스니펫과 도구:**
-자주 쓰는 명령을 저장해 두고 한 번에 실행할 수 있으며, 호스트 값이나 직접 넣는 값을 변수로 쓸 수 있습니다. 열려 있는 모든 터미널에서 같은 명령을 한꺼번에 실행할 수 있고, 명령 기록도 자동 완성으로 찾을 수 있습니다.
-
-</td>
-<td width="50%" valign="top">
-
-**세션 공유:**
-터미널과 RDP, VNC, Telnet 세션을 실시간으로 공유합니다. 계정 없이 들어올 수 있는 링크를 보내거나 특정 Termix 사용자와 공유할 수 있고, 보기만 할지 조작까지 할지 고를 수 있습니다. 공유는 알아서 만료되게 하거나 언제든 취소할 수 있고, 전체 또는 호스트별로 꺼 둘 수 있습니다.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**세션 녹화와 로그:**
-터미널과 RDP, VNC 세션을 녹화해 두었다가 나중에 다시 볼 수 있습니다. 세션의 텍스트 로그를 내려받을 수 있고, 연결 로그를 보면 연결하는 동안 무슨 일이 있었는지 그대로 알 수 있습니다.
-
-</td>
-<td width="50%" valign="top">
-
-**시리얼 연결:**
-라우터와 스위치, 마이크로컨트롤러 같은 시리얼 장치에 브라우저나 데스크톱 앱에서 접속할 수 있습니다. 보드레이트와 데이터 비트, 스톱 비트, 패리티를 설정할 수 있습니다. 지원되는 브라우저에서는 Web Serial API를, 데스크톱 앱에서는 네이티브 백엔드를 씁니다.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Tailscale:**
-tailnet에서 기기를 가져와 몇 번의 클릭으로 호스트로 추가하고, Tailscale SSH로 접속하면 접근 권한은 tailnet ACL이 처리하므로 자격 증명을 저장할 필요가 없습니다. Headscale과 사용자 지정 엔드포인트도 됩니다.
-
-</td>
-<td width="50%" valign="top">
-
-**Proxmox:**
-Proxmox 인스턴스에서 호스트를 바로 가져오고, 노드와 게스트의 CPU와 메모리, 스토리지 상태를 전용 탭에서 볼 수 있습니다.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**워크스페이스와 탭:**
-탭과 분할 배치를 통째로 저장해 두고 한 번에 다시 열 수 있습니다. Termix는 마지막 세션도 기억하기 때문에 새로 고침을 하거나 기기를 바꿔도 탭이 그대로 돌아옵니다.
-
-</td>
-<td width="50%" valign="top">
-
-**명령줄 도구:**
-셸과 스크립트에서 쓰는 `termix` CLI입니다. 터미널을 열고, 호스트 하나나 플릿 전체에서 명령을 실행하고, SFTP로 파일을 옮기고, 호스트와 스니펫, 자격 증명을 관리할 수 있습니다. `npm install -g @termix-ssh/cli`로 설치하거나 단독 실행 파일을 받으면 됩니다. [CLI 문서](https://docs.termix.site/cli)를 참고하세요.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**보안:**
-비밀번호와 키를 비롯한 비밀 정보는 사용자별로 암호화되고, 데이터베이스 파일 자체도 디스크에서 암호화할 수 있습니다. 어떻게 동작하는지는 [문서](https://docs.termix.site/features/authentication/security/)에서 볼 수 있습니다.
-
-</td>
-<td width="50%" valign="top">
-
-**언어:**
-약 30개 언어가 기본으로 들어 있으며 [Crowdin](https://docs.termix.site/translations)으로 관리합니다.
-
-</td>
-</tr>
-</table>
-
-<br />
-
-<details>
-<summary><b>더 많은 기능</b></summary>
-<br />
-
-- **대시보드** - 직접 배치한 카드로 서버 상태를 한눈에
-- **네트워크 그래프** - 호스트를 바탕으로 홈랩을 그려 주고 상태를 실시간 표시
-- **tmux 모니터** - tmux 세션과 창, 페인을 미리보기와 검색으로 살펴보기
-- **API 키** - 스크립트와 CI용, 만료일이 있는 사용자별 키
-- **내보내기와 가져오기** - 호스트와 자격 증명, 파일 관리자 데이터를 옮기기
-- **자동 SSL** - 인증서 발급과 갱신, HTTPS 리다이렉트를 알아서. 직접 만든 인증서도 쓸 수 있습니다
-- **데이터베이스** - 기본은 SQLite, PostgreSQL과 MySQL도 지원
-- **현대적인 UI** - 데스크톱과 모바일에서 모두 쓸 수 있는 깔끔한 React 화면. 라이트와 다크, Dracula 같은 테마 제공. 어떤 연결이든 URL로 전체 화면에서 열 수 있습니다
-- **명령 팔레트** - 왼쪽 Shift를 두 번 눌러 키보드로 호스트로 이동
-- **키보드 단축키** - 탭 이동과 닫기 등, 모두 다시 지정할 수 있습니다
-- **Wake-on-LAN** - Termix에서도, 자동화 단계에서도 컴퓨터를 켜기
-- **신뢰할 수 있는 프록시 인증** - 리버스 프록시가 로그인을 처리하고 사용자 정보를 넘겨주기
-- **화이트 라벨** - 관리자가 인스턴스를 자기 이름과 로고, 색으로 다시 꾸밀 수 있습니다
-- **웹 엔드포인트** - 라우터 관리 페이지 같은 호스트의 웹 UI를 별도 탭이 아니라 Termix 안에 그대로 띄우기
-- **협업 룸** - 발표자 화면과 초대 기능을 갖춘, 여러 명이 함께 세션을 오가는 상시 룸
-- **풍부한 SSH 기능** - 점프 호스트, Warpgate, TOTP 입력, SOCKS5, 호스트 키 확인, 비밀번호 자동 입력, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, 포트 노킹, 터미널 로그, 에이전트 포워딩, Bitwarden SSH 에이전트, HashiCorp Vault SSH 서명, Step CA, 1Password Connect 등
-- **Termix ID** - sshid.io 같은 기능을 내장했습니다. 핸들을 등록하고 리졸버 URL에 공개 키를 올리고 내장 CA에서 SSH 인증서를 발급할 수 있습니다
-- **명령 기록 자동 완성** - 입력하는 동안 명령 기록을 바탕으로 터미널에 인라인 제안을 보여줍니다
-- **데스크톱 단독 실행과 동기화** - 데스크톱 앱은 자체 백엔드와 데이터베이스로 서버 없이 혼자 돌아가며, Termix 서버와 선택적으로 동기화할 수 있습니다
-
-</details>
-
-<br />
-
-## 플랫폼 지원
-
-<table align="center">
-<tr>
-<th align="center">플랫폼</th>
-<th align="center">배포 형태</th>
-</tr>
-<tr>
-<td align="center"><b>Web</b></td>
-<td>최신 브라우저 전반(Chrome, Safari, Firefox) · PWA 지원</td>
-</tr>
-<tr>
-<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
-<td>포터블 · MSI 설치 파일 · Chocolatey</td>
-</tr>
-<tr>
-<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
-<td>포터블 · AUR · AppImage · Deb · Flatpak</td>
-</tr>
-<tr>
-<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
-<td>Apple App Store · DMG · Homebrew</td>
-</tr>
-<tr>
-<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
-<td>Apple App Store · IPA</td>
-</tr>
-<tr>
-<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
-<td>Google Play Store · APK</td>
-</tr>
-</table>
-
-<br />
-
-## 설치
-
-모든 플랫폼의 자세한 설치 방법은 [Termix 문서](https://docs.termix.site/install)를 참고하세요.
-
-쿠버네티스에 배포하시나요? Helm 차트는 `charts/termix`에 있고, Ingress와 Traefik, Argo CD, GitHub Actions, GitLab CI를 다루는 설정 안내는 [docs.termix.site/install/server/kubernetes](https://docs.termix.site/install/server/kubernetes)에 있습니다.
-
-Docker Compose 예시입니다(원격 데스크톱 기능을 쓰지 않는다면 `guacd`와 네트워크 부분은 빼도 됩니다):
-
-```yaml
-services:
-  termix:
-    image: ghcr.io/lukegus/termix:latest
-    container_name: termix
-    restart: unless-stopped
-    ports:
-      - "8080:8080"
-    volumes:
-      - termix-data:/app/data
-    environment:
-      PORT: "8080"
-    depends_on:
-      - guacd
-    networks:
-      - termix-net
-
-  guacd:
-    image: guacamole/guacd:1.6.0
-    container_name: guacd
-    restart: unless-stopped
-    ports:
-      - "4822:4822"
-    networks:
-      - termix-net
-
-volumes:
-  termix-data:
-    driver: local
-
-networks:
-  termix-net:
-    driver: bridge
-```
-
-### 명령줄 도구
-
-Termix에는 CLI도 있어서 터미널에서 서버를 관리하거나 Termix를 자기 스크립트에 넣어 쓸 수 있습니다.
-
-```bash
-npm install -g @termix-ssh/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-터미널을 열고, 호스트 하나나 플릿 전체에서 명령을 실행하고, SFTP로 파일을 옮기고, 호스트와 스니펫, 자격 증명을 관리할 수 있습니다. 전체 문서는 [docs.termix.site/cli](https://docs.termix.site/cli)에 있습니다.
-
-### 클라우드 호스팅
-
-Termix 서버는 집 안 네트워크가 아니라 VPS에서 돌릴 수도 있습니다. 관리 대상 네트워크 위에서 돌아가면 장애가 났을 때 Termix도 같이 멈춰서, 정작 고쳐야 할 때 쓸 수 없게 됩니다. 밖에서 돌리면 언제든 접속할 수 있고 고정 IP도 생기며, VPN이나 포트 포워딩 없이 어디서나 들어갈 수 있습니다.
-
-[GINERNET](https://docs.termix.site/install/ginernet)은 Termix를 후원하고 있으며, 문서에 이 회사 VPS에 배포하는 단계별 안내가 있습니다.
-
-<br />
-
-## 텔레메트리
-
-Termix는 하루에 한 번 작은 익명 보고서를 보내서 몇 개의 인스턴스가 실행 중이고 어떤 기능이 쓰이는지 알 수 있게 합니다. 보고서에는 무작위 인스턴스 ID, 앱 버전, 사용자 수와 호스트 수가 들어 있습니다. 또한 플랫폼 정보(OS, 아키텍처, Node.js 버전, 데이터베이스 종류, Docker·데스크톱 앱·일반 서버 중 무엇으로 실행하는지), 탭 종류별로 열린 횟수와 SSH 로그인 수, 실행 중인 내장 기능도 포함될 수 있습니다. 사용자 이름, 호스트 이름, IP 주소, 자격 증명 등 당신이나 서버를 식별할 수 있는 정보는 절대 포함되지 않습니다.
-
-기본으로 켜져 있습니다. 관리 설정의 Usage Statistics에서 끄거나 포함할 내용을 고를 수 있고, 보낼 보고서를 미리 그대로 볼 수도 있습니다. 각 사용자는 자신의 프로필에서 본인의 기능 사용 기록을 뺄 수 있습니다. `ENABLE_TELEMETRY=false`를 지정하면 꺼지고 스위치가 잠깁니다.
-
-<br />
-
-## 후원
-
-Termix는 무료 오픈 소스이고 구독이나 유료 요금제가 없습니다. 유용하게 쓰고 계시다면 서버 비용과 도메인, 개발 시간에 보탬이 되도록 후원을 고려해 주세요. 후원은 SAML과 Kubernetes, 에이전트 지원 같은 기능을 만들기 위해 알아보고 배우는 시간에도 쓰입니다. 진행 상황을 보고 후원하시려면 아래를 눌러 주세요.
-
-[후원하기](https://donate.termix.site/)
-
-<br />
-
-## 스폰서
-
-유료 게재로 개발을 지원하고 싶으신가요? [mail@termix.site](mailto:mail@termix.site)로 메일을 보내 주세요.
-
-<!-- SPONSORS:START -->
-
-<div align="center">
-
-<br />
-
-<a href="https://www.digitalocean.com/">
-  <img src="https://termix.site/img/sponsors/digitalocean.svg" height="40" alt="DigitalOcean" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://crowdin.com/">
-  <img src="https://termix.site/img/sponsors/crowdin.svg" height="40" alt="Crowdin" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.blacksmith.sh/">
-  <img src="https://termix.site/img/sponsors/blacksmith.svg" height="40" alt="Blacksmith" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.cloudflare.com/">
-  <img src="https://termix.site/img/sponsors/cloudflare.png" height="40" alt="Cloudflare" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://akamai.com/">
-  <img src="https://termix.site/img/sponsors/akamai.svg" height="40" alt="Akamai" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://aws.amazon.com/">
-  <img src="https://termix.site/img/sponsors/aws.png" height="40" alt="AWS" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://rackgenius.com/">
-  <img src="https://termix.site/img/sponsors/rackgenius.png" height="40" alt="Rack Genius" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://termix.site/img/sponsors/ginernet.png" height="40" alt="Ginernet" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.hetzner.com/?mtm_campaign=termix&mtm_medium=referral&mtm_content=sponsoring_link">
-  <img src="https://termix.site/img/sponsors/hetzner.png" height="40" alt="Hetzner" />
-</a>
-
-</div>
-
-<!-- SPONSORS:END -->
-
-<br />
-
-## 지원
-
-도움이 필요하거나 기능을 제안하고 싶으신가요? [새 이슈](https://github.com/Termix-SSH/Support/issues)를 올리면서 되도록 자세히, 가능하면 영어로 적어 주세요. [Discord](https://discord.gg/jVQGdvHDrf) 지원 채널에서 물어봐도 되지만 답변이 늦을 수 있습니다.
-
-<br />
-
-## 스크린샷
-
-<div align="center">
-
-<br />
-
-[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
-
-<sub>YouTube에서 업데이트 소개 보기</sub>
-
-<br />
-<br />
-
-<table>
-<tr>
-<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
-<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
-<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
-<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
-<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
-<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
-<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
-<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 15.png" alt="Termix Screenshot 15" width="400" /></td>
-<td><img src="../repo-images/Image 16.png" alt="Termix Screenshot 16" width="400" /></td>
-</tr>
-</table>
-
-<sub>일부 영상과 이미지는 오래되었거나 기능을 제대로 보여 주지 못할 수 있습니다.</sub>
-
-</div>
-
-<br />
-
-## 계획된 기능
-
-계획된 기능은 모두 [Projects](https://github.com/orgs/Termix-SSH/projects/5)에 있습니다. 기여하고 싶다면 [기여 안내](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md)를 봐 주세요.
-
-<br />
-
-## 라이선스
-
-Apache License 2.0에 따라 배포합니다. 자세한 내용은 `LICENSE`를 참고하세요.
diff --git a/docs/readme/README-PT.md b/docs/readme/README-PT.md
deleted file mode 100644
index 8ad8aa429..000000000
--- a/docs/readme/README-PT.md
+++ /dev/null
@@ -1,500 +0,0 @@
-<div align="center">
-
-<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
-
-<h1>Termix</h1>
-
-<p>Gestão de servidores auto-hospedada, do SSH e do desktop remoto às automações</p>
-
-<p>
-  <a href="../README.md">English</a> ·
-  <a href="README-CN.md">中文</a> ·
-  <a href="README-JA.md">日本語</a> ·
-  <a href="README-KO.md">한국어</a> ·
-  <a href="README-FR.md">Français</a> ·
-  <a href="README-DE.md">Deutsch</a> ·
-  <a href="README-ES.md">Español</a> ·
-  Português ·
-  <a href="README-RU.md">Русский</a> ·
-  <a href="README-AR.md">العربية</a> ·
-  <a href="README-HI.md">हिन्दी</a> ·
-  <a href="README-TR.md">Türkçe</a> ·
-  <a href="README-VI.md">Tiếng Việt</a> ·
-  <a href="README-IT.md">Italiano</a>
-</p>
-
-<p>
-  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
-  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
-  <a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
-</p>
-
-<p>
-  <a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
-</p>
-
-<br />
-
-O Termix é gratuito e de código aberto. Se ele te ajuda, considera [doar](https://donate.termix.site/) para ajudar a cobrir os custos de servidor e o tempo de desenvolvimento.
-
-<br />
-
-<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
-
-<br />
-<br />
-
-<p>
-  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
-  <br />
-  <sub>Conquistado em 1 de setembro de 2025</sub>
-</p>
-
-</div>
-
-<br />
-
-## Visão geral
-
-O Termix é uma plataforma gratuita, de código aberto e auto-hospedada para gerenciar os teus servidores. Ele junta num só lugar terminais SSH, desktops remotos (RDP, VNC, Telnet), transferência de arquivos, túneis, Docker, métricas e automações, na web, no desktop e no celular. É uma alternativa auto-hospedada ao Termius que continua gratuita para sempre.
-
-<br />
-
-## Funcionalidades
-
-<table>
-<tr>
-<td width="50%" valign="top">
-
-**Terminal SSH:**
-Um terminal completo com abas como as do navegador e tela dividida, até 6 painéis ao mesmo tempo. Escolhe o teu tema, a fonte e as cores. Acima de cada sessão há uma barra com CPU, memória e disco ao vivo, além de atalhos para os arquivos, o Docker, os túneis e as métricas daquele host.
-
-</td>
-<td width="50%" valign="top">
-
-**Desktop remoto:**
-RDP, VNC e Telnet no navegador, em abas e tela dividida como qualquer outra sessão. Inclui um navegador de arquivos para as unidades RDP e envio arrastando e soltando. No desktop Windows também dá para abrir um host no cliente RDP nativo.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Túneis SSH:**
-Encaminhamento local, remoto e SOCKS dinâmico, com reconexão automática e verificação de estado. Os túneis de cliente para servidor do aplicativo de desktop ficam naquela máquina, e dá para salvar predefinições no servidor para levar uma configuração para outro computador.
-
-</td>
-<td width="50%" valign="top">
-
-**Gerenciador de arquivos:**
-Navega, edita, envia, baixa, renomeia, move e apaga arquivos por SFTP, com suporte a sudo. Vê e edita código, imagens, áudio e vídeo. Copia arquivos direto de um servidor para outro, com o caminho mais rápido escolhido para ti e a integridade das transferências verificada.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Docker e Podman:**
-Inicia, para, pausa e remove containers, acompanha as estatísticas e abre um shell dentro de um deles. Funciona tanto com Docker quanto com Podman. Não é para substituir o Portainer ou o Dockge, só para gerenciar os containers que já tens.
-
-</td>
-<td width="50%" valign="top">
-
-**Gerenciador de hosts:**
-Salva e organiza hosts com etiquetas e pastas aninhadas que podes nomear e colorir. Reaproveita credenciais salvas entre hosts, distribui chaves SSH automaticamente, agrupa hosts sob um host pai, edita e exporta em lote, e usa a conexão rápida para conexões pontuais que não queres guardar.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Métricas de host:**
-CPU, memória, disco, rede, temperatura, tempo ligado, processos, portas, logins e informações do sistema na maioria dos servidores Linux, com gráficos de histórico. Os cartões de gerenciamento deixam cuidar de serviços, tarefas cron, pacotes, usuários, regras de firewall, WireGuard, Tailscale, certificados SSL, logs e verificações de saúde sem sair do Termix.
-
-</td>
-<td width="50%" valign="top">
-
-**Automações:**
-Escolhe um gatilho e depois diz o que deve acontecer. Os gatilhos incluem uma métrica passando de um limite, um host caindo ou voltando, uma verificação de saúde mudando, um agendamento, um evento de container ou um webhook recebido. Os passos podem rodar comandos e trechos, controlar containers e túneis, acordar um host, chamar uma URL, esperar, seguir por uma condição, rodar outra automação e te avisar por ntfy, Discord ou webhook. As execuções de teste deixam experimentar com segurança primeiro.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Frotas:**
-Junta hosts numa frota escolhendo um a um ou com regras de etiquetas, para que os novos entrem sozinhos. Roda um comando em todos os hosts de uma vez, envia e busca arquivos em todos eles, instala pacotes e reúne um inventário do sistema, do kernel, da arquitetura e do tempo ligado.
-
-</td>
-<td width="50%" valign="top">
-
-**Assistente de IA:**
-É opcional e fica desligado até tu ligares. Conecta OpenAI, Anthropic, Gemini, Ollama ou qualquer endpoint compatível com OpenAI e pergunta sobre a tua instalação. Ele lê hosts, frotas, trechos e alertas, e propõe mudanças para tu aprovares em vez de fazer sozinho. Nunca consegue mexer em credenciais, usuários ou configurações. Os administradores podem deixar desligado para toda a instância, e dá para escondê-lo já na configuração inicial.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Login e usuários:**
-Contas locais além de login por OIDC, LDAP, GitHub e Google, com dois fatores (TOTP), chaves de acesso (WebAuthn) e dispositivos confiáveis. Os administradores podem gerenciar usuários, ligar grupos do OIDC a papéis, ver todas as sessões ativas em qualquer plataforma e encerrá-las. Liga a tua conta local com a do OIDC e consulta o registro de auditoria do que cada um fez.
-
-</td>
-<td width="50%" valign="top">
-
-**Papéis e compartilhamento:**
-Cria papéis e compartilha hosts com usuários ou papéis em quatro níveis: conectar, ver, editar e gerenciar. Funciona com todos os tipos de autenticação e todos os protocolos, e dá para trocar as credenciais usadas num host compartilhado.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Alertas:**
-Define regras em métricas de host como CPU, memória e disco, e recebe aviso por ntfy, Discord ou webhook quando elas disparam. Vê os alertas ativos e resolvidos num histórico e dispensa os que não te interessam.
-
-</td>
-<td width="50%" valign="top">
-
-**Página inicial:**
-Uma grade de widgets que tu mesmo montas arrastando e soltando. Tem widget para status de host, ping, links de serviços, favoritos, busca, relógios, calendários, contagens regressivas, notas, RSS, previsão do tempo, imagens, iframes, Docker, túneis, gráficos de métricas, APIs próprias e até um terminal ao vivo.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Trechos e ferramentas:**
-Salva os comandos que usas sempre e dispara com um clique, com variáveis para o host e para o que tu digitares. Roda um mesmo comando em todos os terminais abertos e pesquisa o teu histórico com preenchimento automático.
-
-</td>
-<td width="50%" valign="top">
-
-**Compartilhar sessão:**
-Compartilha ao vivo uma sessão de terminal, RDP, VNC ou Telnet. Manda um link que qualquer um entra sem conta, ou compartilha com um usuário específico do Termix, em somente leitura ou com escrita. Os compartilhamentos podem expirar sozinhos ou ser revogados, e dá para desligar tudo de uma vez ou por host.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Gravação e registros de sessão:**
-Grava sessões de terminal, RDP e VNC e reproduz depois. Baixa registros de texto de uma sessão e olha o registro de conexão para ver exatamente o que aconteceu durante ela.
-
-</td>
-<td width="50%" valign="top">
-
-**Conexões seriais:**
-Fala com dispositivos seriais como roteadores, switches e microcontroladores pelo navegador ou pelo aplicativo de desktop. Define taxa de transmissão, bits de dados, bits de parada e paridade. Usa a API Web Serial nos navegadores compatíveis, ou um backend nativo no aplicativo de desktop.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Tailscale:**
-Traz dispositivos da tua tailnet para adicionar como hosts em poucos cliques, e conecta com Tailscale SSH para que as ACLs da tailnet cuidem do acesso sem guardar credenciais. Headscale e endpoints personalizados também funcionam.
-
-</td>
-<td width="50%" valign="top">
-
-**Proxmox:**
-Importa hosts direto de uma instância Proxmox e acompanha as estatísticas de nós e convidados, incluindo CPU, memória e armazenamento, numa aba própria.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Áreas de trabalho e abas:**
-Salva um conjunto de abas com a divisão da tela e reabre tudo com um clique. O Termix também lembra da tua última sessão, então as abas voltam depois de recarregar e em outros dispositivos.
-
-</td>
-<td width="50%" valign="top">
-
-**Linha de comando:**
-Um CLI `termix` para o teu shell e os teus scripts. Abre terminais, roda um comando num host ou numa frota inteira, move arquivos por SFTP e gerencia hosts, trechos e credenciais. Instala com `npm install -g @termix-ssh/cli` ou pega um binário independente. Vê a [documentação do CLI](https://docs.termix.site/cli).
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Segurança:**
-Senhas, chaves e outros segredos são criptografados por usuário, e os próprios arquivos do banco de dados podem ser criptografados em disco. Vê a [documentação](https://docs.termix.site/features/authentication/security/) para entender como funciona.
-
-</td>
-<td width="50%" valign="top">
-
-**Idiomas:**
-Cerca de 30 idiomas incluídos, gerenciados pelo [Crowdin](https://docs.termix.site/translations).
-
-</td>
-</tr>
-</table>
-
-<br />
-
-<details>
-<summary><b>Mais funcionalidades</b></summary>
-<br />
-
-- **Painel** - Os teus servidores num relance, com cartões que tu mesmo organizas
-- **Gráfico de rede** - O teu homelab desenhado a partir dos teus hosts, com status ao vivo
-- **Monitor tmux** - Percorre sessões, janelas e painéis do tmux, com prévia e busca
-- **Chaves de API** - Chaves por usuário com data de validade para scripts e CI
-- **Exportar e importar** - Leva e traz hosts, credenciais e dados do gerenciador de arquivos
-- **SSL automático** - Certificados gerados e renovados para ti, com redirecionamento para HTTPS, ou usa os teus
-- **Bancos de dados** - SQLite por padrão, com PostgreSQL e MySQL também suportados
-- **Interface moderna** - Interface React limpa que funciona no desktop e no celular, com temas como claro, escuro e Dracula. Qualquer conexão abre em tela cheia por uma URL
-- **Paleta de comandos** - Toca duas vezes no Shift esquerdo para ir a um host pelo teclado
-- **Atalhos de teclado** - Trocar de aba, fechar abas e mais, tudo remapeável
-- **Wake-on-LAN** - Liga uma máquina pelo Termix ou por um passo de automação
-- **Autenticação por proxy confiável** - Deixa um proxy reverso cuidar do login e repassar o usuário
-- **Marca própria** - Os administradores podem rebatizar a instância com nome, logo e cores próprios
-- **Endpoints web** - Abre a interface web do próprio host, como a página de administração de um roteador, embutida no Termix em vez de numa aba separada
-- **Salas de colaboração** - Salas persistentes onde um grupo pode passar de uma sessão para outra junto, com um palco de apresentação e convites
-- **SSH bem completo** - Hosts de salto, Warpgate, pedidos de TOTP, SOCKS5, verificação de chave de host, preenchimento automático de senha, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, registro do terminal, encaminhamento de agente, agente SSH do Bitwarden, assinatura SSH com HashiCorp Vault, Step CA, 1Password Connect e mais
-- **Termix ID** - Uma versão embutida do sshid.io. Registra um identificador, publica as tuas chaves públicas numa URL de resolução e emite certificados SSH pela CA embutida
-- **Sugestões automáticas de histórico de comandos** - Sugestões dentro do terminal enquanto tu digitas, baseadas no teu histórico de comandos
-- **Desktop independente e sincronização** - O aplicativo de desktop roda sozinho, com backend e banco de dados locais, e pode opcionalmente sincronizar com um servidor Termix
-
-</details>
-
-<br />
-
-## Plataformas suportadas
-
-<table align="center">
-<tr>
-<th align="center">Plataforma</th>
-<th align="center">Distribuição</th>
-</tr>
-<tr>
-<td align="center"><b>Web</b></td>
-<td>Qualquer navegador moderno (Chrome, Safari, Firefox) · Suporte a PWA</td>
-</tr>
-<tr>
-<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
-<td>Portátil · Instalador MSI · Chocolatey</td>
-</tr>
-<tr>
-<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
-<td>Portátil · AUR · AppImage · Deb · Flatpak</td>
-</tr>
-<tr>
-<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
-<td>Apple App Store · DMG · Homebrew</td>
-</tr>
-<tr>
-<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
-<td>Apple App Store · IPA</td>
-</tr>
-<tr>
-<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
-<td>Google Play Store · APK</td>
-</tr>
-</table>
-
-<br />
-
-## Instalação
-
-Vê a [documentação do Termix](https://docs.termix.site/install) para as instruções completas de instalação em todas as plataformas.
-
-Exemplo de arquivo Docker Compose (dá para tirar o `guacd` e a rede se não pretendes usar o desktop remoto):
-
-```yaml
-services:
-  termix:
-    image: ghcr.io/lukegus/termix:latest
-    container_name: termix
-    restart: unless-stopped
-    ports:
-      - "8080:8080"
-    volumes:
-      - termix-data:/app/data
-    environment:
-      PORT: "8080"
-    depends_on:
-      - guacd
-    networks:
-      - termix-net
-
-  guacd:
-    image: guacamole/guacd:1.6.0
-    container_name: guacd
-    restart: unless-stopped
-    ports:
-      - "4822:4822"
-    networks:
-      - termix-net
-
-volumes:
-  termix-data:
-    driver: local
-
-networks:
-  termix-net:
-    driver: bridge
-```
-
-### Linha de comando
-
-O Termix também tem um CLI, para gerenciares os teus servidores pelo terminal e usares o Termix nos teus próprios scripts.
-
-```bash
-npm install -g @termix-ssh/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-Ele abre terminais, roda um comando num host ou numa frota inteira, move arquivos por SFTP e gerencia hosts, trechos e credenciais. A documentação completa está em [docs.termix.site/cli](https://docs.termix.site/cli).
-
-### Hospedagem na nuvem
-
-Dá para rodar o servidor do Termix num VPS em vez de dentro da tua própria rede. Se o Termix roda na rede que ele gerencia, uma queda leva ele junto, bem na hora em que precisas dele para resolver. Rodando fora ele continua acessível, te dá um IP fixo e dá para entrar de qualquer lugar sem VPN nem abrir portas.
-
-A [GINERNET](https://docs.termix.site/install/ginernet) patrocina o Termix, e a documentação tem um guia passo a passo para publicar na plataforma de VPS deles.
-
-<br />
-
-## Telemetria
-
-O Termix envia uma vez por dia um pequeno relatório anónimo, para eu ver quantas instâncias estão a correr e que funcionalidades são usadas. Contém um ID de instância aleatório, a versão da app e quantos utilizadores e hosts tens. Também pode incluir a tua plataforma (sistema operativo, arquitetura, versão do Node.js, tipo de base de dados e se usas Docker, a app de desktop ou um servidor normal), quantas vezes cada tipo de separador foi aberto e quantos logins SSH houve, e que funcionalidades integradas estão ativas. Nunca contém nomes de utilizador, nomes de host, endereços IP, credenciais ou qualquer outra coisa que te identifique a ti ou aos teus servidores.
-
-Vem ligado por padrão. Podes desligar ou escolher o que inclui nas configurações de administração, em Usage Statistics, onde também podes ver o relatório exato antes de ser enviado. Cada utilizador pode excluir o seu próprio uso de funcionalidades no perfil. Definir `ENABLE_TELEMETRY=false` desliga-o e bloqueia o interruptor.
-
-<br />
-
-## Doar
-
-O Termix é gratuito e de código aberto, sem assinaturas nem planos pagos. Se ele te ajuda, considera doar para ajudar com servidores, domínios e tempo de desenvolvimento. As doações também custeiam o tempo de pesquisar e aprender o necessário para funcionalidades como SAML, Kubernetes e suporte a agentes. Acompanha o progresso e doa abaixo.
-
-[Doar](https://donate.termix.site/)
-
-<br />
-
-## Patrocinadores
-
-Tens interesse num espaço pago para apoiar o desenvolvimento? Escreve para [mail@termix.site](mailto:mail@termix.site).
-
-<!-- SPONSORS:START -->
-
-<div align="center">
-
-<br />
-
-<a href="https://www.digitalocean.com/">
-  <img src="https://termix.site/img/sponsors/digitalocean.svg" height="40" alt="DigitalOcean" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://crowdin.com/">
-  <img src="https://termix.site/img/sponsors/crowdin.svg" height="40" alt="Crowdin" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.blacksmith.sh/">
-  <img src="https://termix.site/img/sponsors/blacksmith.svg" height="40" alt="Blacksmith" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.cloudflare.com/">
-  <img src="https://termix.site/img/sponsors/cloudflare.png" height="40" alt="Cloudflare" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://akamai.com/">
-  <img src="https://termix.site/img/sponsors/akamai.svg" height="40" alt="Akamai" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://aws.amazon.com/">
-  <img src="https://termix.site/img/sponsors/aws.png" height="40" alt="AWS" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://rackgenius.com/">
-  <img src="https://termix.site/img/sponsors/rackgenius.png" height="40" alt="Rack Genius" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://termix.site/img/sponsors/ginernet.png" height="40" alt="Ginernet" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.hetzner.com/?mtm_campaign=termix&mtm_medium=referral&mtm_content=sponsoring_link">
-  <img src="https://termix.site/img/sponsors/hetzner.png" height="40" alt="Hetzner" />
-</a>
-
-</div>
-
-<!-- SPONSORS:END -->
-
-<br />
-
-## Suporte
-
-Precisas de ajuda ou queres pedir uma funcionalidade? Abre uma [nova issue](https://github.com/Termix-SSH/Support/issues) com o máximo de detalhes possível, em inglês se der. Também podes perguntar no canal de suporte do [Discord](https://discord.gg/jVQGdvHDrf), embora as respostas por lá possam demorar mais.
-
-<br />
-
-## Capturas de tela
-
-<div align="center">
-
-<br />
-
-[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
-
-<sub>Vê as apresentações das atualizações no YouTube</sub>
-
-<br />
-<br />
-
-<table>
-<tr>
-<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
-<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
-<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
-<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
-<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
-<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
-<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
-<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 15.png" alt="Termix Screenshot 15" width="400" /></td>
-<td><img src="../repo-images/Image 16.png" alt="Termix Screenshot 16" width="400" /></td>
-</tr>
-</table>
-
-<sub>Alguns vídeos e imagens podem estar desatualizados ou não mostrar as funcionalidades perfeitamente.</sub>
-
-</div>
-
-<br />
-
-## Funcionalidades planejadas
-
-Todas as funcionalidades planejadas estão em [Projects](https://github.com/orgs/Termix-SSH/projects/5). Se queres contribuir, vê [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
-
-<br />
-
-## Licença
-
-Distribuído sob a Licença Apache versão 2.0. Vê `LICENSE` para mais informações.
diff --git a/docs/readme/README-RU.md b/docs/readme/README-RU.md
deleted file mode 100644
index 01462bc30..000000000
--- a/docs/readme/README-RU.md
+++ /dev/null
@@ -1,500 +0,0 @@
-<div align="center">
-
-<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
-
-<h1>Termix</h1>
-
-<p>Управление серверами на своём хостинге, от SSH и удалённого рабочего стола до автоматизаций</p>
-
-<p>
-  <a href="../README.md">English</a> ·
-  <a href="README-CN.md">中文</a> ·
-  <a href="README-JA.md">日本語</a> ·
-  <a href="README-KO.md">한국어</a> ·
-  <a href="README-FR.md">Français</a> ·
-  <a href="README-DE.md">Deutsch</a> ·
-  <a href="README-ES.md">Español</a> ·
-  <a href="README-PT.md">Português</a> ·
-  Русский ·
-  <a href="README-AR.md">العربية</a> ·
-  <a href="README-HI.md">हिन्दी</a> ·
-  <a href="README-TR.md">Türkçe</a> ·
-  <a href="README-VI.md">Tiếng Việt</a> ·
-  <a href="README-IT.md">Italiano</a>
-</p>
-
-<p>
-  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
-  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
-  <a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
-</p>
-
-<p>
-  <a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
-</p>
-
-<br />
-
-Termix бесплатен и с открытым исходным кодом. Если он вам пригодился, подумайте о [пожертвовании](https://donate.termix.site/), чтобы помочь покрыть расходы на серверы и время на разработку.
-
-<br />
-
-<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
-
-<br />
-<br />
-
-<p>
-  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
-  <br />
-  <sub>Получено 1 сентября 2025 года</sub>
-</p>
-
-</div>
-
-<br />
-
-## Обзор
-
-Termix это бесплатная платформа с открытым исходным кодом для управления серверами на своём хостинге. Она собирает в одном месте SSH-терминалы, удалённые рабочие столы (RDP, VNC, Telnet), передачу файлов, туннели, Docker, метрики и автоматизации, в браузере, на компьютере и на телефоне. Это self-hosted замена Termius, которая остаётся бесплатной навсегда.
-
-<br />
-
-## Возможности
-
-<table>
-<tr>
-<td width="50%" valign="top">
-
-**SSH-терминал:**
-Полноценный терминал с вкладками как в браузере и разделением экрана, до 6 панелей одновременно. Тему, шрифт и цвета выбираете вы. Над каждой сессией есть панель с текущей загрузкой процессора, памяти и диска, а также быстрые ссылки на файлы, Docker, туннели и метрики этого хоста.
-
-</td>
-<td width="50%" valign="top">
-
-**Удалённый рабочий стол:**
-RDP, VNC и Telnet прямо в браузере, во вкладках и с разделением экрана, как и любая другая сессия. Есть просмотр файлов на дисках RDP и загрузка перетаскиванием. В версии для Windows хост можно открыть и в обычном клиенте RDP.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**SSH-туннели:**
-Локальная, удалённая и динамическая переадресация SOCKS с автоматическим переподключением и проверкой состояния. Туннели от клиента к серверу в настольном приложении хранятся на этом компьютере, а наборы настроек можно сохранить на сервере, чтобы перенести конфигурацию на другую машину.
-
-</td>
-<td width="50%" valign="top">
-
-**Файловый менеджер:**
-Просматривайте, редактируйте, загружайте, скачивайте, переименовывайте, перемещайте и удаляйте файлы по SFTP, в том числе через sudo. Смотрите и правьте код, изображения, аудио и видео. Копируйте файлы напрямую с одного сервера на другой: самый быстрый маршрут подбирается сам, а целостность передачи проверяется.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Docker и Podman:**
-Запускайте, останавливайте, ставьте на паузу и удаляйте контейнеры, смотрите их нагрузку и открывайте оболочку внутри. Работает и с Docker, и с Podman. Это не замена Portainer или Dockge, а способ управлять теми контейнерами, что у вас уже есть.
-
-</td>
-<td width="50%" valign="top">
-
-**Менеджер хостов:**
-Храните и упорядочивайте хосты с помощью меток и вложенных папок, которым можно задать имя и цвет. Используйте сохранённые учётные данные на нескольких хостах, разворачивайте SSH-ключи автоматически, группируйте хосты под родительским, редактируйте и выгружайте пакетно, а для разовых подключений, которые не хочется сохранять, есть быстрое подключение.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Метрики хостов:**
-Процессор, память, диск, сеть, температура, время работы, процессы, порты, входы в систему и сведения о системе на большинстве серверов Linux, с графиками за прошлые периоды. Карточки управления позволяют работать со службами, задачами cron, пакетами, пользователями, правилами брандмауэра, WireGuard, Tailscale, сертификатами SSL, журналами и проверками состояния, не выходя из Termix.
-
-</td>
-<td width="50%" valign="top">
-
-**Автоматизации:**
-Выберите событие, а затем опишите, что должно произойти. Событием может быть превышение порога метрикой, хост, который упал или вернулся, изменение проверки состояния, расписание, событие контейнера или входящий webhook. Шаги умеют выполнять команды и сниппеты, управлять контейнерами и туннелями, будить хост, обращаться по адресу, ждать, ветвиться по условию, запускать другую автоматизацию и присылать уведомления через ntfy, Discord или webhook. Тестовый запуск позволяет всё безопасно проверить.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Флоты:**
-Объединяйте хосты во флот вручную или по правилам меток, чтобы новые хосты попадали туда сами. Выполняйте одну команду сразу на всех хостах, отправляйте и забирайте файлы со всех, устанавливайте пакеты и собирайте сводку по системе, ядру, архитектуре и времени работы.
-
-</td>
-<td width="50%" valign="top">
-
-**ИИ-помощник:**
-Необязательная возможность, выключенная до тех пор, пока вы сами её не включите. Подключите OpenAI, Anthropic, Gemini, Ollama или любой совместимый с OpenAI адрес и спрашивайте о своей системе. Он читает хосты, флоты, сниппеты и оповещения и предлагает изменения на ваше утверждение, а не вносит их сам. До учётных данных, пользователей и настроек он не доберётся никогда. Администраторы могут оставить его выключенным для всей установки, а вы можете скрыть его ещё при первичной настройке.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Вход и пользователи:**
-Локальные учётные записи, а также вход через OIDC, LDAP, GitHub и Google, с двухфакторной проверкой (TOTP), ключами доступа (WebAuthn) и доверенными устройствами. Администраторы могут управлять пользователями, сопоставлять группы OIDC с ролями, видеть все активные сессии на всех платформах и завершать их. Свяжите локальную учётную запись с OIDC и смотрите журнал аудита действий каждого.
-
-</td>
-<td width="50%" valign="top">
-
-**Роли и общий доступ:**
-Создавайте роли и делитесь хостами с пользователями или ролями на четырёх уровнях: подключение, просмотр, изменение и управление. Работает со всеми способами аутентификации и всеми протоколами, а учётные данные для общего хоста можно переопределить.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Оповещения:**
-Задайте правила по метрикам хостов, например процессору, памяти и диску, и получайте уведомления через ntfy, Discord или webhook, когда они срабатывают. Смотрите активные и уже снятые оповещения в журнале и убирайте те, что вам не нужны.
-
-</td>
-<td width="50%" valign="top">
-
-**Домашняя страница:**
-Сетка виджетов, которую вы собираете сами перетаскиванием. Есть виджеты для состояния хостов, пингов, ссылок на сервисы, закладок, поиска, часов, календарей, обратного отсчёта, заметок, RSS, погоды, изображений, встроенных страниц, Docker, туннелей, графиков метрик, своих API и даже живого терминала.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Сниппеты и инструменты:**
-Сохраняйте команды, которые часто набираете, и запускайте их одним нажатием, с переменными для хоста и для собственного ввода. Выполняйте одну команду сразу во всех открытых терминалах и ищите по истории команд с автодополнением.
-
-</td>
-<td width="50%" valign="top">
-
-**Общий доступ к сессии:**
-Делитесь живой сессией терминала, RDP, VNC или Telnet. Отправьте ссылку, по которой можно подключиться без учётной записи, или поделитесь с конкретным пользователем Termix, только для просмотра или с правом ввода. Доступ может истекать сам или отзываться в любой момент, и его можно отключить полностью или для отдельного хоста.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Запись сессий и журналы:**
-Записывайте сессии терминала, RDP и VNC и просматривайте их позже. Скачивайте текстовые журналы сессии и заглядывайте в журнал подключения, чтобы увидеть, что именно происходило во время соединения.
-
-</td>
-<td width="50%" valign="top">
-
-**Последовательные подключения:**
-Общайтесь с последовательными устройствами вроде маршрутизаторов, коммутаторов и микроконтроллеров из браузера или настольного приложения. Настраивайте скорость, биты данных, стоповые биты и чётность. В подходящих браузерах используется Web Serial API, а в настольном приложении собственный бэкенд.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Tailscale:**
-Подтягивайте устройства из своей tailnet, чтобы добавить их как хосты в пару нажатий, и подключайтесь через Tailscale SSH: доступом займутся правила tailnet, а учётные данные хранить не придётся. Headscale и свои адреса тоже работают.
-
-</td>
-<td width="50%" valign="top">
-
-**Proxmox:**
-Импортируйте хосты прямо из установки Proxmox и следите за показателями узлов и гостевых машин, включая процессор, память и хранилище, на отдельной вкладке.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Рабочие пространства и вкладки:**
-Сохраните набор вкладок вместе с разделением экрана и откройте всё это одним нажатием. Termix помнит и последнюю сессию, поэтому вкладки возвращаются после обновления страницы и на других устройствах.
-
-</td>
-<td width="50%" valign="top">
-
-**Командная строка:**
-CLI `termix` для вашей оболочки и ваших скриптов. Открывайте терминалы, выполняйте команду на одном хосте или на целом флоте, перемещайте файлы по SFTP и управляйте хостами, сниппетами и учётными данными. Установите через `npm install -g @termix-ssh/cli` или возьмите отдельный исполняемый файл. Смотрите [документацию CLI](https://docs.termix.site/cli).
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Безопасность:**
-Пароли, ключи и другие секреты шифруются для каждого пользователя, а сами файлы базы данных можно зашифровать на диске. Как это устроено, описано в [документации](https://docs.termix.site/features/authentication/security/).
-
-</td>
-<td width="50%" valign="top">
-
-**Языки:**
-Около 30 встроенных языков, которые ведутся через [Crowdin](https://docs.termix.site/translations).
-
-</td>
-</tr>
-</table>
-
-<br />
-
-<details>
-<summary><b>Другие возможности</b></summary>
-<br />
-
-- **Панель** - Ваши серверы одним взглядом, карточки расставляете вы сами
-- **Схема сети** - Ваша домашняя лаборатория, нарисованная по хостам, с состоянием в реальном времени
-- **Монитор tmux** - Просмотр сессий, окон и панелей tmux с предпросмотром и поиском
-- **Ключи API** - Ключи для конкретного пользователя со сроком действия, для скриптов и CI
-- **Экспорт и импорт** - Перенос хостов, учётных данных и данных файлового менеджера
-- **Автоматический SSL** - Сертификаты выпускаются и обновляются за вас, с переходом на HTTPS, либо используйте свои
-- **Базы данных** - По умолчанию SQLite, поддерживаются также PostgreSQL и MySQL
-- **Современный интерфейс** - Аккуратный интерфейс на React для компьютера и телефона, с темами вроде светлой, тёмной и Dracula. Любое подключение открывается на весь экран по ссылке
-- **Палитра команд** - Двойное нажатие левого Shift, чтобы перейти к хосту с клавиатуры
-- **Сочетания клавиш** - Переход между вкладками, их закрытие и другое, всё можно переназначить
-- **Wake-on-LAN** - Разбудите машину из Termix или из шага автоматизации
-- **Доверенный прокси** - Пусть обратный прокси возьмёт вход на себя и передаст пользователя
-- **Собственный бренд** - Администраторы могут переоформить установку под своё имя, логотип и цвета
-- **Веб-эндпоинты** - Открывайте собственный веб-интерфейс хоста, например админку роутера, прямо внутри Termix вместо отдельной вкладки
-- **Комнаты для совместной работы** - Постоянные комнаты, где группа может вместе переключаться между сессиями, с режимом докладчика и приглашениями
-- **Богатые возможности SSH** - Промежуточные хосты, Warpgate, запросы TOTP, SOCKS5, проверка ключей хоста, автозаполнение паролей, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, журналы терминала, проброс агента, SSH-агент Bitwarden, подпись SSH через HashiCorp Vault, Step CA, 1Password Connect и другое
-- **Termix ID** - Встроенный аналог sshid.io. Займите имя, опубликуйте открытые ключи по адресу распознавателя и выпускайте SSH-сертификаты через встроенный центр сертификации
-- **Автоподсказки истории команд** - Подсказки прямо в терминале по мере ввода, на основе истории ваших команд
-- **Автономный клиент и синхронизация** - Настольное приложение работает само по себе, со своим бэкендом и локальной базой данных, и может по желанию синхронизироваться с сервером Termix
-
-</details>
-
-<br />
-
-## Поддержка платформ
-
-<table align="center">
-<tr>
-<th align="center">Платформа</th>
-<th align="center">Способ установки</th>
-</tr>
-<tr>
-<td align="center"><b>Web</b></td>
-<td>Любой современный браузер (Chrome, Safari, Firefox) · Поддержка PWA</td>
-</tr>
-<tr>
-<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
-<td>Портативная версия · Установщик MSI · Chocolatey</td>
-</tr>
-<tr>
-<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
-<td>Портативная версия · AUR · AppImage · Deb · Flatpak</td>
-</tr>
-<tr>
-<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
-<td>Apple App Store · DMG · Homebrew</td>
-</tr>
-<tr>
-<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
-<td>Apple App Store · IPA</td>
-</tr>
-<tr>
-<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
-<td>Google Play Store · APK</td>
-</tr>
-</table>
-
-<br />
-
-## Установка
-
-Полные инструкции по установке для всех платформ смотрите в [документации Termix](https://docs.termix.site/install).
-
-Пример файла Docker Compose (`guacd` и сеть можно убрать, если удалённый рабочий стол вам не нужен):
-
-```yaml
-services:
-  termix:
-    image: ghcr.io/lukegus/termix:latest
-    container_name: termix
-    restart: unless-stopped
-    ports:
-      - "8080:8080"
-    volumes:
-      - termix-data:/app/data
-    environment:
-      PORT: "8080"
-    depends_on:
-      - guacd
-    networks:
-      - termix-net
-
-  guacd:
-    image: guacamole/guacd:1.6.0
-    container_name: guacd
-    restart: unless-stopped
-    ports:
-      - "4822:4822"
-    networks:
-      - termix-net
-
-volumes:
-  termix-data:
-    driver: local
-
-networks:
-  termix-net:
-    driver: bridge
-```
-
-### Командная строка
-
-У Termix есть и CLI, так что серверами можно управлять из терминала и использовать Termix в своих скриптах.
-
-```bash
-npm install -g @termix-ssh/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-Он умеет открывать терминалы, выполнять команду на одном хосте или на целом флоте, перемещать файлы по SFTP и управлять хостами, сниппетами и учётными данными. Полная документация есть на [docs.termix.site/cli](https://docs.termix.site/cli).
-
-### Размещение в облаке
-
-Сервер Termix можно держать на VPS, а не внутри своей сети. Если Termix работает в той же сети, которой управляет, при сбое он упадёт вместе с ней, как раз тогда, когда нужен для починки. Снаружи он остаётся доступным, даёт постоянный IP и позволяет зайти откуда угодно без VPN и проброса портов.
-
-[GINERNET](https://docs.termix.site/install/ginernet) спонсирует Termix, и в документации есть пошаговое руководство по развёртыванию на их площадке VPS.
-
-<br />
-
-## Телеметрия
-
-Раз в день Termix отправляет небольшой анонимный отчёт, чтобы я видел, сколько установок работает и какими функциями пользуются. В нём есть случайный ID установки, версия приложения и количество пользователей и хостов. Он также может включать вашу платформу (ОС, архитектуру, версию Node.js, тип базы данных и то, как запущен Termix: в Docker, как настольное приложение или как обычный сервер), сколько раз открывались вкладки каждого типа и сколько было входов по SSH, а также какие встроенные функции работают. В нём никогда нет имён пользователей, имён хостов, IP-адресов, учётных данных или чего-либо ещё, что может указать на вас или ваши серверы.
-
-По умолчанию он включён. Выключить его или выбрать, что в него входит, можно в настройках администратора в разделе Usage Statistics, там же можно заранее посмотреть точный отчёт. Каждый пользователь может исключить своё использование функций в своём профиле. `ENABLE_TELEMETRY=false` выключает его и блокирует переключатель.
-
-<br />
-
-## Пожертвования
-
-Termix бесплатен и открыт, без подписок и платных тарифов. Если он вам полезен, подумайте о пожертвовании: оно помогает с серверами, доменами и временем на разработку. Пожертвования также оплачивают время на изучение того, что нужно для таких возможностей, как SAML, Kubernetes и поддержка агентов. Следить за ходом работ и поддержать можно по ссылке ниже.
-
-[Поддержать](https://donate.termix.site/)
-
-<br />
-
-## Спонсоры
-
-Интересует платное размещение в поддержку разработки? Напишите на [mail@termix.site](mailto:mail@termix.site).
-
-<!-- SPONSORS:START -->
-
-<div align="center">
-
-<br />
-
-<a href="https://www.digitalocean.com/">
-  <img src="https://termix.site/img/sponsors/digitalocean.svg" height="40" alt="DigitalOcean" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://crowdin.com/">
-  <img src="https://termix.site/img/sponsors/crowdin.svg" height="40" alt="Crowdin" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.blacksmith.sh/">
-  <img src="https://termix.site/img/sponsors/blacksmith.svg" height="40" alt="Blacksmith" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.cloudflare.com/">
-  <img src="https://termix.site/img/sponsors/cloudflare.png" height="40" alt="Cloudflare" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://akamai.com/">
-  <img src="https://termix.site/img/sponsors/akamai.svg" height="40" alt="Akamai" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://aws.amazon.com/">
-  <img src="https://termix.site/img/sponsors/aws.png" height="40" alt="AWS" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://rackgenius.com/">
-  <img src="https://termix.site/img/sponsors/rackgenius.png" height="40" alt="Rack Genius" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://termix.site/img/sponsors/ginernet.png" height="40" alt="Ginernet" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.hetzner.com/?mtm_campaign=termix&mtm_medium=referral&mtm_content=sponsoring_link">
-  <img src="https://termix.site/img/sponsors/hetzner.png" height="40" alt="Hetzner" />
-</a>
-
-</div>
-
-<!-- SPONSORS:END -->
-
-<br />
-
-## Поддержка
-
-Нужна помощь или хотите предложить функцию? Создайте [новое обращение](https://github.com/Termix-SSH/Support/issues) и опишите всё как можно подробнее, по возможности на английском. Ещё можно спросить в канале поддержки в [Discord](https://discord.gg/jVQGdvHDrf), хотя там ответа иногда приходится ждать дольше.
-
-<br />
-
-## Скриншоты
-
-<div align="center">
-
-<br />
-
-[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
-
-<sub>Смотрите обзоры обновлений на YouTube</sub>
-
-<br />
-<br />
-
-<table>
-<tr>
-<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
-<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
-<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
-<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
-<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
-<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
-<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
-<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 15.png" alt="Termix Screenshot 15" width="400" /></td>
-<td><img src="../repo-images/Image 16.png" alt="Termix Screenshot 16" width="400" /></td>
-</tr>
-</table>
-
-<sub>Некоторые видео и изображения могут устареть или не полностью показывать возможности.</sub>
-
-</div>
-
-<br />
-
-## Запланированные функции
-
-Все запланированные функции собраны в [Projects](https://github.com/orgs/Termix-SSH/projects/5). Если хотите поучаствовать, посмотрите [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
-
-<br />
-
-## Лицензия
-
-Распространяется по лицензии Apache версии 2.0. Подробности в файле `LICENSE`.
diff --git a/docs/readme/README-TR.md b/docs/readme/README-TR.md
deleted file mode 100644
index 931d47a31..000000000
--- a/docs/readme/README-TR.md
+++ /dev/null
@@ -1,500 +0,0 @@
-<div align="center">
-
-<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
-
-<h1>Termix</h1>
-
-<p>Kendi sunucunuzda çalışan sunucu yönetimi, SSH ve uzak masaüstünden otomasyonlara kadar</p>
-
-<p>
-  <a href="../README.md">English</a> ·
-  <a href="README-CN.md">中文</a> ·
-  <a href="README-JA.md">日本語</a> ·
-  <a href="README-KO.md">한국어</a> ·
-  <a href="README-FR.md">Français</a> ·
-  <a href="README-DE.md">Deutsch</a> ·
-  <a href="README-ES.md">Español</a> ·
-  <a href="README-PT.md">Português</a> ·
-  <a href="README-RU.md">Русский</a> ·
-  <a href="README-AR.md">العربية</a> ·
-  <a href="README-HI.md">हिन्दी</a> ·
-  Türkçe ·
-  <a href="README-VI.md">Tiếng Việt</a> ·
-  <a href="README-IT.md">Italiano</a>
-</p>
-
-<p>
-  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
-  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
-  <a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
-</p>
-
-<p>
-  <a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
-</p>
-
-<br />
-
-Termix ücretsiz ve açık kaynaklıdır. İşinize yarıyorsa, sunucu masraflarına ve geliştirme süresine katkı için [bağış yapmayı](https://donate.termix.site/) düşünün.
-
-<br />
-
-<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
-
-<br />
-<br />
-
-<p>
-  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
-  <br />
-  <sub>1 Eylül 2025 tarihinde kazanıldı</sub>
-</p>
-
-</div>
-
-<br />
-
-## Genel bakış
-
-Termix, sunucularınızı yönetmek için ücretsiz, açık kaynaklı ve kendi sunucunuzda çalışan bir platformdur. SSH terminallerini, uzak masaüstlerini (RDP, VNC, Telnet), dosya aktarımlarını, tünelleri, Docker'ı, ölçümleri ve otomasyonları tek yerde toplar; web, masaüstü ve mobilde çalışır. Sonsuza dek ücretsiz kalan, kendi sunucunuzda çalışan bir Termius alternatifidir.
-
-<br />
-
-## Özellikler
-
-<table>
-<tr>
-<td width="50%" valign="top">
-
-**SSH terminali:**
-Tarayıcı gibi sekmeleri ve bölünmüş ekranı olan tam donanımlı bir terminal, aynı anda 6 panele kadar. Temanızı, yazı tipinizi ve renklerinizi seçin. Her oturumun üstünde anlık CPU, bellek ve disk bilgisi gösteren bir araç çubuğu ile o sunucunun dosyalarına, Docker'ına, tünellerine ve ölçümlerine giden kısayollar bulunur.
-
-</td>
-<td width="50%" valign="top">
-
-**Uzak masaüstü:**
-Tarayıcıda RDP, VNC ve Telnet; diğer oturumlar gibi sekmelerde ve bölünmüş ekranda. RDP sürücüleri için dosya tarayıcısı ve sürükle bırak yükleme içerir. Windows masaüstünde bir sunucuyu yerel RDP istemcisinde de açabilirsiniz.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**SSH tünelleri:**
-Yerel, uzak ve dinamik SOCKS yönlendirmesi; otomatik yeniden bağlanma ve durum kontrolleriyle. Masaüstü uygulamasındaki istemciden sunucuya tüneller o makinede saklanır, ayarları sunucuya kaydederek bir kurulumu başka bir makineye taşıyabilirsiniz.
-
-</td>
-<td width="50%" valign="top">
-
-**Dosya yöneticisi:**
-SFTP üzerinden dosyalara göz atın, düzenleyin, yükleyin, indirin, yeniden adlandırın, taşıyın ve silin; sudo da kullanılabilir. Kod, görsel, ses ve videoyu görüntüleyip düzenleyin. Dosyaları doğrudan bir sunucudan diğerine kopyalayın; en hızlı yol sizin için seçilir ve aktarımların bütünlüğü doğrulanır.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Docker ve Podman:**
-Kapsayıcıları başlatın, durdurun, duraklatın ve silin, durumlarını izleyin ve içlerinde bir kabuk açın. Hem Docker hem Podman ile çalışır. Portainer ya da Dockge'nin yerini almak için değil, hâlihazırdaki kapsayıcılarınızı yönetmek için tasarlandı.
-
-</td>
-<td width="50%" valign="top">
-
-**Sunucu yöneticisi:**
-Sunucularınızı etiketlerle ve isim ve renk verebileceğiniz iç içe klasörlerle düzenleyin. Kayıtlı kimlik bilgilerini birden çok sunucuda kullanın, SSH anahtarlarını otomatik dağıtın, sunucuları bir üst sunucunun altında toplayın, toplu düzenleyip dışa aktarın ve kaydetmek istemediğiniz tek seferlik bağlantılar için hızlı bağlantıyı kullanın.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Sunucu ölçümleri:**
-Çoğu Linux sunucusunda CPU, bellek, disk, ağ, sıcaklık, çalışma süresi, süreçler, portlar, oturum açmalar ve sistem bilgisi; geçmiş grafikleriyle birlikte. Yönetim kartları sayesinde servisleri, cron görevlerini, paketleri, kullanıcıları, güvenlik duvarı kurallarını, WireGuard'ı, Tailscale'i, SSL sertifikalarını, günlükleri ve sağlık kontrollerini Termix'ten çıkmadan yönetirsiniz.
-
-</td>
-<td width="50%" valign="top">
-
-**Otomasyonlar:**
-Bir tetikleyici seçin, sonra ne olacağını söyleyin. Tetikleyiciler arasında bir ölçümün eşiği aşması, bir sunucunun düşmesi veya geri gelmesi, sağlık kontrolünün değişmesi, bir zamanlama, bir kapsayıcı olayı ya da gelen bir webhook var. Adımlar komut ve parçacık çalıştırabilir, kapsayıcı ve tünelleri yönetebilir, bir makineyi uyandırabilir, bir adrese istek atabilir, bekleyebilir, koşula göre dallanabilir, başka bir otomasyonu çalıştırabilir ve ntfy, Discord ya da webhook ile size haber verebilir. Deneme çalıştırmaları ile önce güvenle test edersiniz.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Filolar:**
-Sunucuları tek tek seçerek ya da etiket kurallarıyla bir filoda toplayın; yeni sunucular kendiliğinden katılsın. Tek bir komutu tüm sunucularda aynı anda çalıştırın, hepsine dosya gönderip hepsinden dosya alın, paket kurun ve işletim sistemi, çekirdek, mimari ve çalışma süresi dökümünü toplayın.
-
-</td>
-<td width="50%" valign="top">
-
-**Yapay zekâ asistanı:**
-İsteğe bağlıdır ve siz açana kadar kapalıdır. OpenAI, Anthropic, Gemini, Ollama ya da OpenAI uyumlu herhangi bir uç noktayı bağlayın ve kurulumunuz hakkında sorular sorun. Sunucuları, filoları, parçacıkları ve uyarıları okuyabilir; değişiklikleri kendisi yapmak yerine onayınıza sunar. Kimlik bilgilerine, kullanıcılara ve ayarlara asla erişemez. Yöneticiler tüm kurulum için kapalı bırakabilir, siz de kurulum sırasında gizleyebilirsiniz.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Giriş ve kullanıcılar:**
-Yerel hesapların yanında OIDC, LDAP, GitHub ve Google ile giriş; iki adımlı doğrulama (TOTP), geçiş anahtarları (WebAuthn) ve güvenilir cihazlar. Yöneticiler kullanıcıları yönetebilir, OIDC gruplarını rollerle eşleştirebilir, tüm platformlardaki etkin oturumları görüp sonlandırabilir. Yerel ve OIDC hesaplarınızı birbirine bağlayın ve herkesin ne yaptığını denetim günlüğünden okuyun.
-
-</td>
-<td width="50%" valign="top">
-
-**Roller ve paylaşım:**
-Roller oluşturun ve sunucuları kullanıcılar veya rollerle dört düzeyde paylaşın: bağlanma, görüntüleme, düzenleme ve yönetme. Tüm kimlik doğrulama türleri ve tüm protokollerle çalışır, paylaşılan bir sunucuda kullanılan kimlik bilgilerini değiştirebilirsiniz.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Uyarılar:**
-CPU, bellek ve disk gibi sunucu ölçümlerine kurallar koyun ve tetiklendiklerinde ntfy, Discord veya webhook ile haberdar olun. Devam eden ve çözülen uyarıları geçmişte görün, ilgilenmediklerinizi kapatın.
-
-</td>
-<td width="50%" valign="top">
-
-**Ana sayfa:**
-Kendi kurduğunuz, sürükle bırak çalışan bir bileşen ızgarası. Sunucu durumu, ping, servis bağlantıları, yer imleri, arama, saatler, takvimler, geri sayımlar, notlar, RSS, hava durumu, görseller, gömülü sayfalar, Docker, tüneller, ölçüm grafikleri, kendi API'leriniz ve hatta canlı bir terminal için bileşenler var.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Parçacıklar ve araçlar:**
-Sık kullandığınız komutları kaydedin ve tek tıkla çalıştırın; sunucu için ve kendi girdileriniz için değişkenler kullanabilirsiniz. Aynı komutu açık olan tüm terminallerde çalıştırın, komut geçmişinizde tamamlamayla arama yapın.
-
-</td>
-<td width="50%" valign="top">
-
-**Oturum paylaşımı:**
-Canlı bir terminal, RDP, VNC veya Telnet oturumunu paylaşın. Hesap gerekmeden katılınabilen bir bağlantı gönderin ya da belirli bir Termix kullanıcısıyla, salt okunur veya yazma yetkili olarak paylaşın. Paylaşımlar kendiliğinden sona erebilir veya istediğiniz an iptal edilebilir; tümüyle ya da sunucu bazında kapatılabilir.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Oturum kaydı ve günlükler:**
-Terminal, RDP ve VNC oturumlarını kaydedin ve sonra izleyin. Bir oturumun düz metin günlüğünü indirin, bağlantı günlüğüne bakarak bağlantı sırasında tam olarak ne olduğunu görün.
-
-</td>
-<td width="50%" valign="top">
-
-**Seri bağlantılar:**
-Yönlendirici, anahtar ve mikrodenetleyici gibi seri cihazlarla tarayıcıdan veya masaüstü uygulamasından konuşun. Baud hızını, veri bitlerini, dur bitlerini ve pariteyi ayarlayın. Destekleyen tarayıcılarda Web Serial API'yi, masaüstü uygulamasında yerel bir arka ucu kullanır.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Tailscale:**
-Tailnet'inizdeki cihazları çekip birkaç tıkla sunucu olarak ekleyin ve Tailscale SSH ile bağlanın; erişimi tailnet kurallarınız yönetsin, kimlik bilgisi saklamanız gerekmesin. Headscale ve özel uç noktalar da çalışır.
-
-</td>
-<td width="50%" valign="top">
-
-**Proxmox:**
-Sunucuları doğrudan bir Proxmox kurulumundan içe aktarın; düğüm ve misafir makinelerin CPU, bellek ve depolama dahil durumlarını kendi sekmesinde izleyin.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Çalışma alanları ve sekmeler:**
-Bir sekme grubunu bölünmüş düzeniyle birlikte kaydedin ve hepsini tek tıkla yeniden açın. Termix son oturumunuzu da hatırlar, böylece sayfayı yenileseniz de başka cihaza geçseniz de sekmeleriniz geri gelir.
-
-</td>
-<td width="50%" valign="top">
-
-**Komut satırı arayüzü:**
-Kabuğunuz ve betikleriniz için bir `termix` CLI'ı. Terminal açın, tek bir sunucuda veya tüm filoda komut çalıştırın, SFTP ile dosya taşıyın ve sunucuları, parçacıkları ve kimlik bilgilerini yönetin. `npm install -g @termix-ssh/cli` ile kurun ya da bağımsız bir çalıştırılabilir dosya edinin. [CLI belgelerine](https://docs.termix.site/cli) bakın.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Güvenlik:**
-Parolalar, anahtarlar ve diğer gizli bilgiler kullanıcı bazında şifrelenir, veritabanı dosyalarının kendisi de diskte şifrelenebilir. Nasıl çalıştığı için [belgelere](https://docs.termix.site/features/authentication/security/) bakın.
-
-</td>
-<td width="50%" valign="top">
-
-**Diller:**
-Yaklaşık 30 dil yerleşik olarak gelir, [Crowdin](https://docs.termix.site/translations) üzerinden yönetilir.
-
-</td>
-</tr>
-</table>
-
-<br />
-
-<details>
-<summary><b>Daha fazla özellik</b></summary>
-<br />
-
-- **Kontrol paneli** - Kendi dizdiğiniz kartlarla sunucularınıza tek bakışta göz atın
-- **Ağ grafiği** - Ev laboratuvarınız sunucularınızdan çizilir, durum anlık gösterilir
-- **Tmux izleyici** - tmux oturumlarına, pencerelerine ve panellerine önizleme ve aramayla göz atın
-- **API anahtarları** - Betikler ve CI için, son kullanma tarihli kullanıcıya özel anahtarlar
-- **Dışa ve içe aktarma** - Sunucuları, kimlik bilgilerini ve dosya yöneticisi verilerini taşıyın
-- **Otomatik SSL** - Sertifikalar sizin için oluşturulur ve yenilenir, HTTPS yönlendirmesiyle birlikte; ya da kendi sertifikanızı kullanın
-- **Veritabanları** - Varsayılan SQLite, ayrıca PostgreSQL ve MySQL desteklenir
-- **Modern arayüz** - Masaüstü ve mobilde çalışan sade bir React arayüzü; açık, koyu ve Dracula gibi temalarla. Her bağlantı bir adresten tam ekran açılabilir
-- **Komut paleti** - Sol Shift'e iki kez basarak klavyeden bir sunucuya atlayın
-- **Klavye kısayolları** - Sekmeler arasında geçiş, sekme kapatma ve dahası, hepsi yeniden atanabilir
-- **Wake-on-LAN** - Bir makineyi Termix'ten ya da bir otomasyon adımından uyandırın
-- **Güvenilir vekil doğrulaması** - Girişi ters vekil sunucu halletsin ve kullanıcıyı aktarsın
-- **Beyaz etiket** - Yöneticiler kurulumu kendi adı, logosu ve renkleriyle yeniden markalayabilir
-- **Web uç noktaları** - Bir sunucunun kendi web arayüzünü, örneğin bir yönlendirici yönetim sayfasını, ayrı bir sekme yerine Termix içine gömülü açın
-- **İşbirliği odaları** - Bir grubun oturumlar arasında birlikte geçiş yapabildiği kalıcı odalar; sunum kürsüsü ve davetlerle
-- **Zengin SSH desteği** - Atlama sunucuları, Warpgate, TOTP istekleri, SOCKS5, sunucu anahtarı doğrulama, parola otomatik doldurma, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, terminal günlüğü, aracı yönlendirme, Bitwarden SSH aracısı, HashiCorp Vault ile SSH imzalama, Step CA, 1Password Connect ve dahası
-- **Termix ID** - sshid.io'nun yerleşik hali. Bir kullanıcı adı alın, açık anahtarlarınızı bir çözümleyici adresinde yayımlayın ve yerleşik CA ile SSH sertifikaları çıkarın
-- **Komut geçmişi önerileri** - Yazarken komut geçmişinize dayalı satır içi öneriler
-- **Bağımsız masaüstü ve eşitleme** - Masaüstü uygulaması kendi arka ucu ve veritabanıyla tek başına çalışır, isteğe bağlı olarak bir Termix sunucusuyla eşitlenebilir
-
-</details>
-
-<br />
-
-## Platform desteği
-
-<table align="center">
-<tr>
-<th align="center">Platform</th>
-<th align="center">Dağıtım</th>
-</tr>
-<tr>
-<td align="center"><b>Web</b></td>
-<td>Güncel her tarayıcı (Chrome, Safari, Firefox) · PWA desteği</td>
-</tr>
-<tr>
-<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
-<td>Taşınabilir · MSI kurulumu · Chocolatey</td>
-</tr>
-<tr>
-<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
-<td>Taşınabilir · AUR · AppImage · Deb · Flatpak</td>
-</tr>
-<tr>
-<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
-<td>Apple App Store · DMG · Homebrew</td>
-</tr>
-<tr>
-<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
-<td>Apple App Store · IPA</td>
-</tr>
-<tr>
-<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
-<td>Google Play Store · APK</td>
-</tr>
-</table>
-
-<br />
-
-## Kurulum
-
-Tüm platformlar için ayrıntılı kurulum yönergelerini [Termix belgelerinde](https://docs.termix.site/install) bulabilirsiniz.
-
-Örnek Docker Compose dosyası (uzak masaüstünü kullanmayacaksanız `guacd` ve ağ kısmını çıkarabilirsiniz):
-
-```yaml
-services:
-  termix:
-    image: ghcr.io/lukegus/termix:latest
-    container_name: termix
-    restart: unless-stopped
-    ports:
-      - "8080:8080"
-    volumes:
-      - termix-data:/app/data
-    environment:
-      PORT: "8080"
-    depends_on:
-      - guacd
-    networks:
-      - termix-net
-
-  guacd:
-    image: guacamole/guacd:1.6.0
-    container_name: guacd
-    restart: unless-stopped
-    ports:
-      - "4822:4822"
-    networks:
-      - termix-net
-
-volumes:
-  termix-data:
-    driver: local
-
-networks:
-  termix-net:
-    driver: bridge
-```
-
-### Komut satırı
-
-Termix'in bir CLI'ı da var; sunucularınızı terminalden yönetebilir ve Termix'i kendi betiklerinizde kullanabilirsiniz.
-
-```bash
-npm install -g @termix-ssh/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-Terminal açabilir, tek bir sunucuda veya tüm filoda komut çalıştırabilir, SFTP ile dosya taşıyabilir ve sunucuları, parçacıkları ve kimlik bilgilerini yönetebilir. Belgelerin tamamı [docs.termix.site/cli](https://docs.termix.site/cli) adresinde.
-
-### Bulutta barındırma
-
-Termix sunucusunu kendi ağınız yerine bir VPS üzerinde de çalıştırabilirsiniz. Termix yönettiği ağın içinde çalışıyorsa, bir kesinti onu da beraberinde götürür; hem de tam onu tamir için kullanmanız gereken anda. Dışarıda çalıştırmak erişilebilir kalmasını sağlar, sabit bir IP verir ve VPN ya da port yönlendirme olmadan her yerden girmenize izin verir.
-
-[GINERNET](https://docs.termix.site/install/ginernet) Termix'e sponsor oluyor ve belgelerde onların VPS platformuna kurulum için adım adım bir rehber var.
-
-<br />
-
-## Telemetri
-
-Termix, kaç kurulumun çalıştığını ve hangi özelliklerin kullanıldığını görebilmem için günde bir kez küçük ve anonim bir rapor gönderir. Raporda rastgele bir kurulum kimliği, uygulama sürümü ve kaç kullanıcı ile sunucunuz olduğu bulunur. Ayrıca platformunuzu (işletim sistemi, mimari, Node.js sürümü, veritabanı türü ve Docker, masaüstü uygulaması ya da normal bir sunucu kullanıp kullanmadığınız), her sekme türünün kaç kez açıldığını ve kaç SSH girişi yapıldığını, hangi yerleşik özelliklerin çalıştığını da içerebilir. Kullanıcı adları, sunucu adları, IP adresleri, kimlik bilgileri ya da sizi veya sunucularınızı tanıtacak hiçbir şey asla gönderilmez.
-
-Varsayılan olarak açıktır. Yönetici ayarlarında Usage Statistics bölümünden kapatabilir veya neleri içereceğini seçebilir, gönderilecek raporu olduğu gibi önizleyebilirsiniz. Her kullanıcı kendi özellik kullanımını profilinden hariç tutabilir. `ENABLE_TELEMETRY=false` tanımlamak onu kapatır ve anahtarı kilitler.
-
-<br />
-
-## Bağış
-
-Termix ücretsiz ve açık kaynaklıdır; abonelik ya da ücretli plan yoktur. İşinize yarıyorsa, sunucu, alan adı ve geliştirme süresi masraflarına katkı için bağış yapmayı düşünün. Bağışlar ayrıca SAML, Kubernetes ve aracı desteği gibi özellikler için gereken araştırma ve öğrenme süresini karşılar. İlerlemeyi aşağıdan izleyip bağış yapabilirsiniz.
-
-[Bağış yap](https://donate.termix.site/)
-
-<br />
-
-## Sponsorlar
-
-Geliştirmeyi desteklemek için ücretli bir yerleşim ilginizi çeker mi? [mail@termix.site](mailto:mail@termix.site) adresine yazın.
-
-<!-- SPONSORS:START -->
-
-<div align="center">
-
-<br />
-
-<a href="https://www.digitalocean.com/">
-  <img src="https://termix.site/img/sponsors/digitalocean.svg" height="40" alt="DigitalOcean" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://crowdin.com/">
-  <img src="https://termix.site/img/sponsors/crowdin.svg" height="40" alt="Crowdin" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.blacksmith.sh/">
-  <img src="https://termix.site/img/sponsors/blacksmith.svg" height="40" alt="Blacksmith" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.cloudflare.com/">
-  <img src="https://termix.site/img/sponsors/cloudflare.png" height="40" alt="Cloudflare" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://akamai.com/">
-  <img src="https://termix.site/img/sponsors/akamai.svg" height="40" alt="Akamai" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://aws.amazon.com/">
-  <img src="https://termix.site/img/sponsors/aws.png" height="40" alt="AWS" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://rackgenius.com/">
-  <img src="https://termix.site/img/sponsors/rackgenius.png" height="40" alt="Rack Genius" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://termix.site/img/sponsors/ginernet.png" height="40" alt="Ginernet" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.hetzner.com/?mtm_campaign=termix&mtm_medium=referral&mtm_content=sponsoring_link">
-  <img src="https://termix.site/img/sponsors/hetzner.png" height="40" alt="Hetzner" />
-</a>
-
-</div>
-
-<!-- SPONSORS:END -->
-
-<br />
-
-## Destek
-
-Yardıma mı ihtiyacınız var ya da bir özellik mi istiyorsunuz? [Yeni bir konu](https://github.com/Termix-SSH/Support/issues) açın ve olabildiğince ayrıntı ekleyin, mümkünse İngilizce yazın. [Discord](https://discord.gg/jVQGdvHDrf) üzerindeki destek kanalında da sorabilirsiniz, ancak oradaki yanıtlar daha uzun sürebilir.
-
-<br />
-
-## Ekran görüntüleri
-
-<div align="center">
-
-<br />
-
-[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
-
-<sub>Güncelleme tanıtımlarını YouTube'da izleyin</sub>
-
-<br />
-<br />
-
-<table>
-<tr>
-<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
-<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
-<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
-<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
-<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
-<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
-<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
-<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 15.png" alt="Termix Screenshot 15" width="400" /></td>
-<td><img src="../repo-images/Image 16.png" alt="Termix Screenshot 16" width="400" /></td>
-</tr>
-</table>
-
-<sub>Bazı videolar ve görseller güncelliğini yitirmiş ya da özellikleri tam olarak göstermiyor olabilir.</sub>
-
-</div>
-
-<br />
-
-## Planlanan özellikler
-
-Planlanan tüm özellikler [Projects](https://github.com/orgs/Termix-SSH/projects/5) sayfasında. Katkıda bulunmak isterseniz [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md) dosyasına bakın.
-
-<br />
-
-## Lisans
-
-Apache Lisansı Sürüm 2.0 ile dağıtılır. Ayrıntılar için `LICENSE` dosyasına bakın.
diff --git a/docs/readme/README-VI.md b/docs/readme/README-VI.md
deleted file mode 100644
index 97913e49c..000000000
--- a/docs/readme/README-VI.md
+++ /dev/null
@@ -1,500 +0,0 @@
-<div align="center">
-
-<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
-
-<h1>Termix</h1>
-
-<p>Quản lý máy chủ tự lưu trữ, từ SSH và máy tính từ xa cho đến tự động hoá</p>
-
-<p>
-  <a href="../README.md">English</a> ·
-  <a href="README-CN.md">中文</a> ·
-  <a href="README-JA.md">日本語</a> ·
-  <a href="README-KO.md">한국어</a> ·
-  <a href="README-FR.md">Français</a> ·
-  <a href="README-DE.md">Deutsch</a> ·
-  <a href="README-ES.md">Español</a> ·
-  <a href="README-PT.md">Português</a> ·
-  <a href="README-RU.md">Русский</a> ·
-  <a href="README-AR.md">العربية</a> ·
-  <a href="README-HI.md">हिन्दी</a> ·
-  <a href="README-TR.md">Türkçe</a> ·
-  Tiếng Việt ·
-  <a href="README-IT.md">Italiano</a>
-</p>
-
-<p>
-  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
-  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
-  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
-  <a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
-</p>
-
-<p>
-  <a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
-</p>
-
-<br />
-
-Termix miễn phí và mã nguồn mở. Nếu bạn thấy hữu ích, hãy cân nhắc [quyên góp](https://donate.termix.site/) để giúp trang trải chi phí máy chủ và thời gian phát triển.
-
-<br />
-
-<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
-
-<br />
-<br />
-
-<p>
-  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
-  <br />
-  <sub>Đạt được vào ngày 1 tháng 9 năm 2025</sub>
-</p>
-
-</div>
-
-<br />
-
-## Tổng quan
-
-Termix là nền tảng miễn phí, mã nguồn mở, tự lưu trữ để quản lý máy chủ của bạn. Nó gom vào một chỗ terminal SSH, máy tính từ xa (RDP, VNC, Telnet), truyền tệp, tunnel, Docker, số liệu và tự động hoá, trên web, máy tính và điện thoại. Đây là bản thay thế tự lưu trữ cho Termius và sẽ miễn phí mãi mãi.
-
-<br />
-
-## Tính năng
-
-<table>
-<tr>
-<td width="50%" valign="top">
-
-**Terminal SSH:**
-Một terminal đầy đủ với các thẻ giống trình duyệt và chia đôi màn hình, tối đa 6 khung cùng lúc. Bạn tự chọn giao diện, phông chữ và màu sắc. Phía trên mỗi phiên có một thanh công cụ hiện CPU, bộ nhớ và ổ đĩa theo thời gian thực, kèm lối tắt tới tệp, Docker, tunnel và số liệu của máy chủ đó.
-
-</td>
-<td width="50%" valign="top">
-
-**Máy tính từ xa:**
-RDP, VNC và Telnet ngay trong trình duyệt, dùng thẻ và chia đôi màn hình như mọi phiên khác. Có trình duyệt tệp cho ổ đĩa RDP và tải lên bằng cách kéo thả. Trên máy tính Windows, bạn còn có thể mở máy chủ bằng ứng dụng RDP của hệ điều hành.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Tunnel SSH:**
-Chuyển tiếp cục bộ, từ xa và SOCKS động, có tự kết nối lại và kiểm tra tình trạng. Tunnel từ máy khách tới máy chủ trong ứng dụng máy tính được lưu ngay trên máy đó, và bạn có thể lưu cấu hình sẵn lên máy chủ để mang sang máy khác.
-
-</td>
-<td width="50%" valign="top">
-
-**Trình quản lý tệp:**
-Duyệt, sửa, tải lên, tải xuống, đổi tên, di chuyển và xoá tệp qua SFTP, có hỗ trợ sudo. Xem và sửa mã nguồn, hình ảnh, âm thanh và video. Sao chép tệp thẳng từ máy chủ này sang máy chủ khác, hệ thống tự chọn đường nhanh nhất và kiểm tra tính toàn vẹn khi truyền.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Docker và Podman:**
-Khởi động, dừng, tạm dừng và xoá container, xem thông số của chúng và mở một shell bên trong. Chạy được với cả Docker lẫn Podman. Nó không nhằm thay thế Portainer hay Dockge, chỉ để quản lý những container bạn đã có.
-
-</td>
-<td width="50%" valign="top">
-
-**Quản lý máy chủ:**
-Lưu và sắp xếp máy chủ bằng thẻ và thư mục lồng nhau mà bạn có thể đặt tên và tô màu. Dùng lại thông tin đăng nhập đã lưu cho nhiều máy chủ, tự động triển khai khoá SSH, gom máy chủ dưới một máy chủ cha, sửa và xuất hàng loạt, và dùng kết nối nhanh cho những lần kết nối một lần mà bạn không muốn lưu.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Số liệu máy chủ:**
-CPU, bộ nhớ, ổ đĩa, mạng, nhiệt độ, thời gian hoạt động, tiến trình, cổng, lượt đăng nhập và thông tin hệ thống trên hầu hết máy chủ Linux, kèm biểu đồ lịch sử. Các thẻ quản lý cho phép bạn xử lý dịch vụ, tác vụ cron, gói phần mềm, người dùng, luật tường lửa, WireGuard, Tailscale, chứng chỉ SSL, nhật ký và kiểm tra tình trạng mà không cần rời Termix.
-
-</td>
-<td width="50%" valign="top">
-
-**Tự động hoá:**
-Chọn một điều kiện kích hoạt, rồi nói bạn muốn điều gì xảy ra. Điều kiện gồm một số liệu vượt ngưỡng, một máy chủ sập hoặc sống lại, kiểm tra tình trạng thay đổi, một lịch định sẵn, một sự kiện container, hoặc một webhook gửi đến. Các bước có thể chạy lệnh và đoạn lệnh, điều khiển container và tunnel, đánh thức máy chủ, gọi một địa chỉ, chờ, rẽ nhánh theo điều kiện, chạy một tự động hoá khác, và báo cho bạn qua ntfy, Discord hoặc webhook. Chạy thử giúp bạn kiểm tra an toàn trước.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Nhóm máy chủ:**
-Gom máy chủ vào một nhóm bằng cách tự chọn hoặc theo luật thẻ, để máy chủ mới tự vào nhóm. Chạy một lệnh trên mọi máy chủ cùng lúc, đẩy và lấy tệp trên tất cả, cài gói phần mềm, và thu thập danh sách hệ điều hành, nhân, kiến trúc và thời gian hoạt động.
-
-</td>
-<td width="50%" valign="top">
-
-**Trợ lý AI:**
-Là tuỳ chọn, và tắt cho đến khi bạn tự bật. Kết nối OpenAI, Anthropic, Gemini, Ollama hoặc bất kỳ endpoint tương thích OpenAI nào rồi hỏi về hệ thống của bạn. Nó đọc được máy chủ, nhóm máy chủ, đoạn lệnh và cảnh báo, và đề xuất thay đổi để bạn duyệt chứ không tự làm. Nó không bao giờ chạm được vào thông tin đăng nhập, người dùng hay thiết lập. Quản trị viên có thể tắt hẳn cho cả hệ thống, còn bạn có thể ẩn nó ngay khi cài đặt ban đầu.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Đăng nhập và người dùng:**
-Tài khoản cục bộ cùng với đăng nhập qua OIDC, LDAP, GitHub và Google, kèm xác thực hai bước (TOTP), passkey (WebAuthn) và thiết bị tin cậy. Quản trị viên có thể quản lý người dùng, ánh xạ nhóm OIDC sang vai trò, xem mọi phiên đang hoạt động trên mọi nền tảng và thu hồi chúng. Bạn có thể liên kết tài khoản cục bộ với tài khoản OIDC, và xem nhật ký kiểm toán về những gì mọi người đã làm.
-
-</td>
-<td width="50%" valign="top">
-
-**Vai trò và chia sẻ:**
-Tạo vai trò và chia sẻ máy chủ với người dùng hoặc vai trò theo bốn mức: kết nối, xem, sửa và quản lý. Hoạt động với mọi kiểu xác thực và mọi giao thức, và bạn có thể thay thông tin đăng nhập dùng cho một máy chủ được chia sẻ.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Cảnh báo:**
-Đặt luật cho các số liệu máy chủ như CPU, bộ nhớ và ổ đĩa, rồi nhận thông báo qua ntfy, Discord hoặc webhook khi chúng kích hoạt. Xem cảnh báo đang bật và đã hết trong nhật ký, và bỏ qua những cái bạn không quan tâm.
-
-</td>
-<td width="50%" valign="top">
-
-**Trang chủ:**
-Một lưới tiện ích kéo thả do bạn tự dựng. Có tiện ích cho tình trạng máy chủ, ping, liên kết dịch vụ, dấu trang, tìm kiếm, đồng hồ, lịch, đếm ngược, ghi chú, RSS, thời tiết, hình ảnh, iframe, Docker, tunnel, biểu đồ số liệu, API riêng, và cả một terminal đang chạy.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Đoạn lệnh và công cụ:**
-Lưu những lệnh bạn hay dùng và chạy chỉ với một cú nhấp, có biến cho máy chủ và cho phần bạn tự nhập. Chạy một lệnh trên tất cả terminal đang mở, và tìm trong lịch sử lệnh với gợi ý tự động.
-
-</td>
-<td width="50%" valign="top">
-
-**Chia sẻ phiên:**
-Chia sẻ trực tiếp một phiên terminal, RDP, VNC hoặc Telnet. Gửi một liên kết mà ai cũng vào được không cần tài khoản, hoặc chia sẻ với một người dùng Termix cụ thể, ở chế độ chỉ xem hoặc cho phép thao tác. Chia sẻ có thể tự hết hạn hoặc bị thu hồi bất cứ lúc nào, và có thể tắt toàn bộ hoặc theo từng máy chủ.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Ghi phiên và nhật ký:**
-Ghi lại phiên terminal, RDP và VNC rồi xem lại sau. Tải nhật ký dạng văn bản của một phiên, và xem nhật ký kết nối để biết chính xác chuyện gì đã xảy ra trong lúc kết nối.
-
-</td>
-<td width="50%" valign="top">
-
-**Kết nối serial:**
-Làm việc với thiết bị serial như router, switch và vi điều khiển từ trình duyệt hoặc ứng dụng máy tính. Đặt tốc độ baud, bit dữ liệu, bit dừng và bit chẵn lẻ. Dùng Web Serial API trên các trình duyệt hỗ trợ, hoặc backend gốc trong ứng dụng máy tính.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Tailscale:**
-Lấy thiết bị từ tailnet của bạn để thêm làm máy chủ chỉ với vài cú nhấp, và kết nối bằng Tailscale SSH để ACL của tailnet lo phần quyền truy cập, không cần lưu thông tin đăng nhập. Headscale và endpoint tuỳ chỉnh cũng dùng được.
-
-</td>
-<td width="50%" valign="top">
-
-**Proxmox:**
-Nhập máy chủ thẳng từ một hệ thống Proxmox, và theo dõi số liệu của node và máy ảo, gồm CPU, bộ nhớ và dung lượng, trong một thẻ riêng.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Không gian làm việc và thẻ:**
-Lưu một bộ thẻ cùng cách chia màn hình rồi mở lại toàn bộ chỉ với một cú nhấp. Termix cũng nhớ phiên gần nhất, nên các thẻ của bạn quay lại sau khi tải lại trang và trên thiết bị khác.
-
-</td>
-<td width="50%" valign="top">
-
-**Dòng lệnh:**
-Công cụ `termix` cho shell và các script của bạn. Mở terminal, chạy một lệnh trên một máy chủ hoặc cả một nhóm, chuyển tệp qua SFTP, và quản lý máy chủ, đoạn lệnh và thông tin đăng nhập. Cài bằng `npm install -g @termix-ssh/cli` hoặc tải bản chạy độc lập. Xem [tài liệu CLI](https://docs.termix.site/cli).
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Bảo mật:**
-Mật khẩu, khoá và các thông tin bí mật khác được mã hoá theo từng người dùng, và bản thân các tệp cơ sở dữ liệu cũng có thể mã hoá trên ổ đĩa. Xem [tài liệu](https://docs.termix.site/features/authentication/security/) để biết cách hoạt động.
-
-</td>
-<td width="50%" valign="top">
-
-**Ngôn ngữ:**
-Có sẵn khoảng 30 ngôn ngữ, quản lý qua [Crowdin](https://docs.termix.site/translations).
-
-</td>
-</tr>
-</table>
-
-<br />
-
-<details>
-<summary><b>Thêm tính năng khác</b></summary>
-<br />
-
-- **Bảng điều khiển** - Nhìn nhanh toàn bộ máy chủ, với các thẻ do bạn tự sắp xếp
-- **Sơ đồ mạng** - Vẽ homelab của bạn từ danh sách máy chủ, kèm trạng thái theo thời gian thực
-- **Theo dõi tmux** - Xem các phiên, cửa sổ và khung tmux, có xem trước và tìm kiếm
-- **Khoá API** - Khoá theo từng người dùng có ngày hết hạn, dùng cho script và CI
-- **Xuất và nhập** - Chuyển máy chủ, thông tin đăng nhập và dữ liệu trình quản lý tệp ra vào
-- **SSL tự động** - Chứng chỉ được tạo và gia hạn giúp bạn, kèm chuyển hướng HTTPS, hoặc dùng chứng chỉ của riêng bạn
-- **Cơ sở dữ liệu** - Mặc định là SQLite, đồng thời hỗ trợ PostgreSQL và MySQL
-- **Giao diện hiện đại** - Giao diện React gọn gàng chạy tốt trên máy tính và điện thoại, với các chủ đề như sáng, tối và Dracula. Mọi kết nối đều mở toàn màn hình được từ một địa chỉ
-- **Bảng lệnh** - Nhấn hai lần phím Shift trái để nhảy tới một máy chủ bằng bàn phím
-- **Phím tắt** - Chuyển giữa các thẻ, đóng thẻ và nhiều thao tác khác, đều gán lại được
-- **Wake-on-LAN** - Đánh thức một máy từ Termix hoặc từ một bước tự động hoá
-- **Xác thực qua proxy tin cậy** - Để reverse proxy lo phần đăng nhập rồi chuyển thông tin người dùng vào
-- **Nhãn trắng** - Quản trị viên có thể đổi thương hiệu hệ thống với tên, logo và màu sắc riêng
-- **Điểm cuối web** - Mở giao diện web riêng của một máy chủ, chẳng hạn trang quản trị router, ngay trong Termix thay vì mở một thẻ riêng
-- **Phòng cộng tác** - Phòng lâu dài để cả nhóm cùng chuyển qua lại giữa các phiên, có sân khấu người trình bày và lời mời
-- **SSH nhiều tính năng** - Máy chủ trung gian, Warpgate, hỏi mã TOTP, SOCKS5, kiểm tra khoá máy chủ, tự điền mật khẩu, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, ghi nhật ký terminal, chuyển tiếp agent, SSH agent của Bitwarden, ký SSH bằng HashiCorp Vault, Step CA, 1Password Connect và nhiều thứ khác
-- **Termix ID** - Bản dựng sẵn theo kiểu sshid.io. Đăng ký một tên, công bố khoá công khai của bạn tại một địa chỉ phân giải, và cấp chứng chỉ SSH từ CA tích hợp
-- **Gợi ý lịch sử lệnh** - Gợi ý ngay trong terminal khi bạn gõ, dựa trên lịch sử lệnh của bạn
-- **Ứng dụng máy tính độc lập và đồng bộ** - Ứng dụng máy tính chạy độc lập với backend và cơ sở dữ liệu riêng, có thể đồng bộ tuỳ chọn với một máy chủ Termix
-
-</details>
-
-<br />
-
-## Nền tảng hỗ trợ
-
-<table align="center">
-<tr>
-<th align="center">Nền tảng</th>
-<th align="center">Bản phân phối</th>
-</tr>
-<tr>
-<td align="center"><b>Web</b></td>
-<td>Mọi trình duyệt hiện đại (Chrome, Safari, Firefox) · Hỗ trợ PWA</td>
-</tr>
-<tr>
-<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
-<td>Bản chạy ngay · Bộ cài MSI · Chocolatey</td>
-</tr>
-<tr>
-<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
-<td>Bản chạy ngay · AUR · AppImage · Deb · Flatpak</td>
-</tr>
-<tr>
-<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
-<td>Apple App Store · DMG · Homebrew</td>
-</tr>
-<tr>
-<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
-<td>Apple App Store · IPA</td>
-</tr>
-<tr>
-<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
-<td>Google Play Store · APK</td>
-</tr>
-</table>
-
-<br />
-
-## Cài đặt
-
-Xem [tài liệu Termix](https://docs.termix.site/install) để có hướng dẫn cài đặt đầy đủ trên mọi nền tảng.
-
-Tệp Docker Compose mẫu (bạn có thể bỏ `guacd` và phần mạng nếu không định dùng máy tính từ xa):
-
-```yaml
-services:
-  termix:
-    image: ghcr.io/lukegus/termix:latest
-    container_name: termix
-    restart: unless-stopped
-    ports:
-      - "8080:8080"
-    volumes:
-      - termix-data:/app/data
-    environment:
-      PORT: "8080"
-    depends_on:
-      - guacd
-    networks:
-      - termix-net
-
-  guacd:
-    image: guacamole/guacd:1.6.0
-    container_name: guacd
-    restart: unless-stopped
-    ports:
-      - "4822:4822"
-    networks:
-      - termix-net
-
-volumes:
-  termix-data:
-    driver: local
-
-networks:
-  termix-net:
-    driver: bridge
-```
-
-### Dòng lệnh
-
-Termix cũng có CLI, để bạn quản lý máy chủ từ terminal và dùng Termix trong script của mình.
-
-```bash
-npm install -g @termix-ssh/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-Nó mở được terminal, chạy lệnh trên một máy chủ hoặc cả một nhóm, chuyển tệp qua SFTP, và quản lý máy chủ, đoạn lệnh và thông tin đăng nhập. Tài liệu đầy đủ ở [docs.termix.site/cli](https://docs.termix.site/cli).
-
-### Chạy trên cloud
-
-Bạn có thể chạy máy chủ Termix trên VPS thay vì trong mạng của mình. Nếu Termix chạy ngay trong mạng mà nó quản lý, một sự cố sẽ kéo nó sập theo, đúng lúc bạn cần nó để sửa. Chạy ở ngoài thì nó luôn truy cập được, cho bạn một IP cố định và vào được từ bất cứ đâu mà không cần VPN hay mở cổng.
-
-[GINERNET](https://docs.termix.site/install/ginernet) là nhà tài trợ của Termix, và tài liệu có hướng dẫn từng bước để triển khai trên nền tảng VPS của họ.
-
-<br />
-
-## Dữ liệu sử dụng
-
-Mỗi ngày một lần, Termix gửi một báo cáo ẩn danh nhỏ để tôi biết có bao nhiêu bản cài đặt đang chạy và tính năng nào được dùng. Báo cáo gồm một ID ngẫu nhiên của bản cài đặt, phiên bản ứng dụng, và số người dùng cùng số máy chủ của bạn. Nó cũng có thể gồm nền tảng của bạn (hệ điều hành, kiến trúc, phiên bản Node.js, loại cơ sở dữ liệu, và bạn chạy bằng Docker, ứng dụng máy tính hay máy chủ thường), số lần mỗi loại tab được mở và số lần đăng nhập SSH, cùng các tính năng tích hợp đang chạy. Nó không bao giờ chứa tên người dùng, tên máy chủ, địa chỉ IP, thông tin đăng nhập hay bất cứ thứ gì có thể nhận ra bạn hoặc máy chủ của bạn.
-
-Mặc định là bật. Bạn có thể tắt hoặc chọn nội dung gửi đi trong phần Cài đặt quản trị, mục Usage Statistics, và xem trước chính xác báo cáo sẽ được gửi. Mỗi người dùng có thể loại phần sử dụng tính năng của riêng mình trong hồ sơ. Đặt `ENABLE_TELEMETRY=false` sẽ tắt nó và khóa công tắc.
-
-<br />
-
-## Quyên góp
-
-Termix miễn phí và mã nguồn mở, không có gói thuê bao hay bản trả phí. Nếu bạn thấy hữu ích, hãy cân nhắc quyên góp để giúp trang trải máy chủ, tên miền và thời gian phát triển. Quyên góp cũng giúp có thời gian tìm hiểu những thứ cần thiết cho các tính năng như SAML, Kubernetes và hỗ trợ agent. Theo dõi tiến độ và quyên góp ở bên dưới.
-
-[Quyên góp](https://donate.termix.site/)
-
-<br />
-
-## Nhà tài trợ
-
-Bạn muốn đặt quảng cáo trả phí để ủng hộ việc phát triển? Gửi thư tới [mail@termix.site](mailto:mail@termix.site).
-
-<!-- SPONSORS:START -->
-
-<div align="center">
-
-<br />
-
-<a href="https://www.digitalocean.com/">
-  <img src="https://termix.site/img/sponsors/digitalocean.svg" height="40" alt="DigitalOcean" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://crowdin.com/">
-  <img src="https://termix.site/img/sponsors/crowdin.svg" height="40" alt="Crowdin" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.blacksmith.sh/">
-  <img src="https://termix.site/img/sponsors/blacksmith.svg" height="40" alt="Blacksmith" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.cloudflare.com/">
-  <img src="https://termix.site/img/sponsors/cloudflare.png" height="40" alt="Cloudflare" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://akamai.com/">
-  <img src="https://termix.site/img/sponsors/akamai.svg" height="40" alt="Akamai" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://aws.amazon.com/">
-  <img src="https://termix.site/img/sponsors/aws.png" height="40" alt="AWS" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://rackgenius.com/">
-  <img src="https://termix.site/img/sponsors/rackgenius.png" height="40" alt="Rack Genius" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://termix.site/img/sponsors/ginernet.png" height="40" alt="Ginernet" />
-</a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://www.hetzner.com/?mtm_campaign=termix&mtm_medium=referral&mtm_content=sponsoring_link">
-  <img src="https://termix.site/img/sponsors/hetzner.png" height="40" alt="Hetzner" />
-</a>
-
-</div>
-
-<!-- SPONSORS:END -->
-
-<br />
-
-## Hỗ trợ
-
-Cần giúp đỡ hoặc muốn đề xuất tính năng? Hãy mở một [issue mới](https://github.com/Termix-SSH/Support/issues) và mô tả càng chi tiết càng tốt, bằng tiếng Anh nếu được. Bạn cũng có thể hỏi trong kênh hỗ trợ trên [Discord](https://discord.gg/jVQGdvHDrf), tuy nhiên ở đó có thể lâu được trả lời hơn.
-
-<br />
-
-## Ảnh chụp màn hình
-
-<div align="center">
-
-<br />
-
-[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
-
-<sub>Xem giới thiệu các bản cập nhật trên YouTube</sub>
-
-<br />
-<br />
-
-<table>
-<tr>
-<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
-<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
-<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
-<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
-<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
-<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
-<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
-<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
-</tr>
-<tr>
-<td><img src="../repo-images/Image 15.png" alt="Termix Screenshot 15" width="400" /></td>
-<td><img src="../repo-images/Image 16.png" alt="Termix Screenshot 16" width="400" /></td>
-</tr>
-</table>
-
-<sub>Một số video và hình ảnh có thể đã cũ hoặc chưa thể hiện đầy đủ tính năng.</sub>
-
-</div>
-
-<br />
-
-## Tính năng dự kiến
-
-Toàn bộ tính năng dự kiến nằm ở [Projects](https://github.com/orgs/Termix-SSH/projects/5). Nếu bạn muốn đóng góp, xem [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
-
-<br />
-
-## Giấy phép
-
-Phát hành theo Giấy phép Apache phiên bản 2.0. Xem `LICENSE` để biết thêm chi tiết.
diff --git a/docs/repo-images/Image 1.png b/docs/repo-images/Image 1.png
deleted file mode 100644
index 0a31a3177..000000000
Binary files a/docs/repo-images/Image 1.png and /dev/null differ
diff --git a/docs/repo-images/Image 10.png b/docs/repo-images/Image 10.png
deleted file mode 100644
index 218bbd05c..000000000
Binary files a/docs/repo-images/Image 10.png and /dev/null differ
diff --git a/docs/repo-images/Image 11.png b/docs/repo-images/Image 11.png
deleted file mode 100644
index 0952dcb73..000000000
Binary files a/docs/repo-images/Image 11.png and /dev/null differ
diff --git a/docs/repo-images/Image 12.png b/docs/repo-images/Image 12.png
deleted file mode 100644
index 11047553a..000000000
Binary files a/docs/repo-images/Image 12.png and /dev/null differ
diff --git a/docs/repo-images/Image 13.png b/docs/repo-images/Image 13.png
deleted file mode 100644
index 37c7d418a..000000000
Binary files a/docs/repo-images/Image 13.png and /dev/null differ
diff --git a/docs/repo-images/Image 14.png b/docs/repo-images/Image 14.png
deleted file mode 100644
index a4779bc50..000000000
Binary files a/docs/repo-images/Image 14.png and /dev/null differ
diff --git a/docs/repo-images/Image 15.png b/docs/repo-images/Image 15.png
deleted file mode 100644
index 4180e3ba2..000000000
Binary files a/docs/repo-images/Image 15.png and /dev/null differ
diff --git a/docs/repo-images/Image 16.png b/docs/repo-images/Image 16.png
deleted file mode 100644
index 8837bb97d..000000000
Binary files a/docs/repo-images/Image 16.png and /dev/null differ
diff --git a/docs/repo-images/Image 2.png b/docs/repo-images/Image 2.png
deleted file mode 100644
index 56dd4bc27..000000000
Binary files a/docs/repo-images/Image 2.png and /dev/null differ
diff --git a/docs/repo-images/Image 3.png b/docs/repo-images/Image 3.png
deleted file mode 100644
index d8bab6220..000000000
Binary files a/docs/repo-images/Image 3.png and /dev/null differ
diff --git a/docs/repo-images/Image 4.png b/docs/repo-images/Image 4.png
deleted file mode 100644
index bb0819079..000000000
Binary files a/docs/repo-images/Image 4.png and /dev/null differ
diff --git a/docs/repo-images/Image 5.png b/docs/repo-images/Image 5.png
deleted file mode 100644
index 164700669..000000000
Binary files a/docs/repo-images/Image 5.png and /dev/null differ
diff --git a/docs/repo-images/Image 6.png b/docs/repo-images/Image 6.png
deleted file mode 100644
index c4bdc37ac..000000000
Binary files a/docs/repo-images/Image 6.png and /dev/null differ
diff --git a/docs/repo-images/Image 7.png b/docs/repo-images/Image 7.png
deleted file mode 100644
index bd6c08e9e..000000000
Binary files a/docs/repo-images/Image 7.png and /dev/null differ
diff --git a/docs/repo-images/Image 8.png b/docs/repo-images/Image 8.png
deleted file mode 100644
index 46d72226a..000000000
Binary files a/docs/repo-images/Image 8.png and /dev/null differ
diff --git a/docs/repo-images/Image 9.png b/docs/repo-images/Image 9.png
deleted file mode 100644
index 6427e02e5..000000000
Binary files a/docs/repo-images/Image 9.png and /dev/null differ
diff --git a/docs/repo-images/Repo of the Day.png b/docs/repo-images/Repo of the Day.png
deleted file mode 100644
index e50a1b6bc..000000000
Binary files a/docs/repo-images/Repo of the Day.png and /dev/null differ
diff --git a/docs/repo-images/Termix Header.png b/docs/repo-images/Termix Header.png
deleted file mode 100644
index 249637ead..000000000
Binary files a/docs/repo-images/Termix Header.png and /dev/null differ
diff --git a/docs/repo-images/YouTube.png b/docs/repo-images/YouTube.png
deleted file mode 100644
index 372eaeab2..000000000
Binary files a/docs/repo-images/YouTube.png and /dev/null differ
diff --git a/drizzle/mysql/0066_retire_2_8_columns.sql b/drizzle/mysql/0066_retire_2_8_columns.sql
new file mode 100644
index 000000000..29454b4f3
--- /dev/null
+++ b/drizzle/mysql/0066_retire_2_8_columns.sql
@@ -0,0 +1,28 @@
+ALTER TABLE `ssh_folders` DROP FOREIGN KEY `ssh_folders_credential_id_ssh_credentials_id_fk`;
+--> statement-breakpoint
+ALTER TABLE `ssh_data` DROP COLUMN `terminal_config`;--> statement-breakpoint
+ALTER TABLE `ssh_data` DROP COLUMN `quick_actions`;--> statement-breakpoint
+ALTER TABLE `sessions` DROP COLUMN `oidc_sub`;--> statement-breakpoint
+ALTER TABLE `sessions` DROP COLUMN `oidc_sid`;--> statement-breakpoint
+ALTER TABLE `sessions` DROP COLUMN `sso_provider_id`;--> statement-breakpoint
+ALTER TABLE `ssh_folders` DROP COLUMN `credential_id`;--> statement-breakpoint
+ALTER TABLE `user_preferences` DROP COLUMN `command_autocomplete`;--> statement-breakpoint
+ALTER TABLE `user_preferences` DROP COLUMN `confirm_snippet_execution`;--> statement-breakpoint
+ALTER TABLE `user_preferences` DROP COLUMN `custom_themes`;--> statement-breakpoint
+ALTER TABLE `user_preferences` DROP COLUMN `terminal_defaults`;--> statement-breakpoint
+ALTER TABLE `user_preferences` DROP COLUMN `terminal_macros`;--> statement-breakpoint
+ALTER TABLE `users` DROP COLUMN `is_oidc`;--> statement-breakpoint
+ALTER TABLE `users` DROP COLUMN `oidc_identifier`;--> statement-breakpoint
+ALTER TABLE `users` DROP COLUMN `sso_provider_id`;--> statement-breakpoint
+ALTER TABLE `users` DROP COLUMN `client_id`;--> statement-breakpoint
+ALTER TABLE `users` DROP COLUMN `client_secret`;--> statement-breakpoint
+ALTER TABLE `users` DROP COLUMN `issuer_url`;--> statement-breakpoint
+ALTER TABLE `users` DROP COLUMN `authorization_url`;--> statement-breakpoint
+ALTER TABLE `users` DROP COLUMN `token_url`;--> statement-breakpoint
+ALTER TABLE `users` DROP COLUMN `identifier_path`;--> statement-breakpoint
+ALTER TABLE `users` DROP COLUMN `name_path`;--> statement-breakpoint
+ALTER TABLE `users` DROP COLUMN `scopes`;--> statement-breakpoint
+DELETE FROM `settings` WHERE `key` IN ('host_defaults', 'analytics_enabled', 'analytics_instance_id');--> statement-breakpoint
+UPDATE `ssh_data` SET `username` = REPLACE(`username`, '$oidc.preferred_username', '$external.username') WHERE `username` LIKE '%$oidc.preferred_username%';--> statement-breakpoint
+UPDATE `ssh_credentials` SET `username` = REPLACE(`username`, '$oidc.preferred_username', '$external.username') WHERE `username` LIKE '%$oidc.preferred_username%';--> statement-breakpoint
+UPDATE `host_defaults` SET `value` = REPLACE(`value`, '$oidc.preferred_username', '$external.username') WHERE `value` LIKE '%$oidc.preferred_username%';
\ No newline at end of file
diff --git a/drizzle/mysql/0067_external_session_ref.sql b/drizzle/mysql/0067_external_session_ref.sql
new file mode 100644
index 000000000..f8b8402a8
--- /dev/null
+++ b/drizzle/mysql/0067_external_session_ref.sql
@@ -0,0 +1 @@
+ALTER TABLE `sessions` ADD `external_session_ref` text;
\ No newline at end of file
diff --git a/drizzle/mysql/0068_plugin_pinned_version.sql b/drizzle/mysql/0068_plugin_pinned_version.sql
new file mode 100644
index 000000000..91a5c68cf
--- /dev/null
+++ b/drizzle/mysql/0068_plugin_pinned_version.sql
@@ -0,0 +1 @@
+ALTER TABLE `plugins` ADD `pinned_version` text;
\ No newline at end of file
diff --git a/drizzle/mysql/0069_plugin_channel.sql b/drizzle/mysql/0069_plugin_channel.sql
new file mode 100644
index 000000000..62a5bbcc4
--- /dev/null
+++ b/drizzle/mysql/0069_plugin_channel.sql
@@ -0,0 +1 @@
+ALTER TABLE `plugins` ADD `channel` text DEFAULT ('stable') NOT NULL;
\ No newline at end of file
diff --git a/drizzle/mysql/0070_drop_donation_modal.sql b/drizzle/mysql/0070_drop_donation_modal.sql
new file mode 100644
index 000000000..710110f62
--- /dev/null
+++ b/drizzle/mysql/0070_drop_donation_modal.sql
@@ -0,0 +1 @@
+ALTER TABLE `users` DROP COLUMN `donation_modal_dismissed`;
\ No newline at end of file
diff --git a/drizzle/mysql/meta/0066_snapshot.json b/drizzle/mysql/meta/0066_snapshot.json
new file mode 100644
index 000000000..146cbe3da
--- /dev/null
+++ b/drizzle/mysql/meta/0066_snapshot.json
@@ -0,0 +1,4731 @@
+{
+  "version": "5",
+  "dialect": "mysql",
+  "id": "2fdeddc6-f532-43a0-8dfd-51791cc3cf46",
+  "prevId": "d8cbd86b-0ab0-46ac-bab2-b47ddfa2a4fb",
+  "tables": {
+    "api_keys": {
+      "name": "api_keys",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "token_hash": {
+          "name": "token_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "token_prefix": {
+          "name": "token_prefix",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "is_active": {
+          "name": "is_active",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        }
+      },
+      "indexes": {
+        "idx_api_keys_user_id": {
+          "name": "idx_api_keys_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "api_keys_user_id_users_id_fk": {
+          "name": "api_keys_user_id_users_id_fk",
+          "tableFrom": "api_keys",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "api_keys_id": {
+          "name": "api_keys_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "audit_logs": {
+      "name": "audit_logs",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "action": {
+          "name": "action",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "resource_type": {
+          "name": "resource_type",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "resource_id": {
+          "name": "resource_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "resource_name": {
+          "name": "resource_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "details": {
+          "name": "details",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ip_address": {
+          "name": "ip_address",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "user_agent": {
+          "name": "user_agent",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "success": {
+          "name": "success",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_audit_logs_timestamp": {
+          "name": "idx_audit_logs_timestamp",
+          "columns": [
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_user_ts": {
+          "name": "idx_audit_logs_user_ts",
+          "columns": [
+            "user_id",
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_action_ts": {
+          "name": "idx_audit_logs_action_ts",
+          "columns": [
+            "action",
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_resource_ts": {
+          "name": "idx_audit_logs_resource_ts",
+          "columns": [
+            "resource_type",
+            "timestamp"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "audit_logs_user_id_users_id_fk": {
+          "name": "audit_logs_user_id_users_id_fk",
+          "tableFrom": "audit_logs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "audit_logs_id": {
+          "name": "audit_logs_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "credential_access": {
+      "name": "credential_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('use')"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_credential_access_user_id": {
+          "name": "idx_credential_access_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_credential_access_role_id": {
+          "name": "idx_credential_access_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        },
+        "idx_credential_access_credential_id": {
+          "name": "idx_credential_access_credential_id",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "credential_access_credential_id_ssh_credentials_id_fk": {
+          "name": "credential_access_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_user_id_users_id_fk": {
+          "name": "credential_access_user_id_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_role_id_roles_id_fk": {
+          "name": "credential_access_role_id_roles_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_granted_by_users_id_fk": {
+          "name": "credential_access_granted_by_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "credential_access_id": {
+          "name": "credential_access_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "credential_sidebar_preferences": {
+      "name": "credential_sidebar_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "credential_sidebar_preferences_user_id_users_id_fk": {
+          "name": "credential_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "credential_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "credential_sidebar_preferences_user_id": {
+          "name": "credential_sidebar_preferences_user_id",
+          "columns": [
+            "user_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "folder_access": {
+      "name": "folder_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "owner_user_id": {
+          "name": "owner_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('connect')"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_folder_access_owner_folder": {
+          "name": "idx_folder_access_owner_folder",
+          "columns": [
+            "owner_user_id",
+            "folder"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "folder_access_owner_user_id_users_id_fk": {
+          "name": "folder_access_owner_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "owner_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_user_id_users_id_fk": {
+          "name": "folder_access_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_role_id_roles_id_fk": {
+          "name": "folder_access_role_id_roles_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_granted_by_users_id_fk": {
+          "name": "folder_access_granted_by_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "folder_access_id": {
+          "name": "folder_access_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "host_access": {
+      "name": "host_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('connect')"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "last_accessed_at": {
+          "name": "last_accessed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "access_count": {
+          "name": "access_count",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        }
+      },
+      "indexes": {
+        "idx_host_access_user_id": {
+          "name": "idx_host_access_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_role_id": {
+          "name": "idx_host_access_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_host_id": {
+          "name": "idx_host_access_host_id",
+          "columns": [
+            "host_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_expires_at": {
+          "name": "idx_host_access_expires_at",
+          "columns": [
+            "expires_at"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_access_host_id_ssh_data_id_fk": {
+          "name": "host_access_host_id_ssh_data_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_user_id_users_id_fk": {
+          "name": "host_access_user_id_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_role_id_roles_id_fk": {
+          "name": "host_access_role_id_roles_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_granted_by_users_id_fk": {
+          "name": "host_access_granted_by_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "host_access_id": {
+          "name": "host_access_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "host_defaults": {
+      "name": "host_defaults",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "level": {
+          "name": "level",
+          "type": "enum('admin','user','folder')",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope_key": {
+          "name": "scope_key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folder_id": {
+          "name": "folder_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "namespace": {
+          "name": "namespace",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_by": {
+          "name": "updated_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_host_defaults_scope_key": {
+          "name": "idx_host_defaults_scope_key",
+          "columns": [
+            "scope_key",
+            "namespace",
+            "key"
+          ],
+          "isUnique": true
+        },
+        "idx_host_defaults_user": {
+          "name": "idx_host_defaults_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_defaults_folder": {
+          "name": "idx_host_defaults_folder",
+          "columns": [
+            "folder_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_defaults_user_id_users_id_fk": {
+          "name": "host_defaults_user_id_users_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_defaults_folder_id_ssh_folders_id_fk": {
+          "name": "host_defaults_folder_id_ssh_folders_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "ssh_folders",
+          "columnsFrom": [
+            "folder_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "host_defaults_id": {
+          "name": "host_defaults_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "host_protocol_auth": {
+      "name": "host_protocol_auth",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('direct')"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "fields": {
+          "name": "fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "secret_fields": {
+          "name": "secret_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_host_protocol_auth_host_protocol": {
+          "name": "idx_host_protocol_auth_host_protocol",
+          "columns": [
+            "host_id",
+            "protocol"
+          ],
+          "isUnique": true
+        },
+        "idx_host_protocol_auth_user": {
+          "name": "idx_host_protocol_auth_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_protocol_auth_credential": {
+          "name": "idx_host_protocol_auth_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_protocol_auth_host_id_ssh_data_id_fk": {
+          "name": "host_protocol_auth_host_id_ssh_data_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_user_id_users_id_fk": {
+          "name": "host_protocol_auth_user_id_users_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_credential_id_ssh_credentials_id_fk": {
+          "name": "host_protocol_auth_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "host_protocol_auth_id": {
+          "name": "host_protocol_auth_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "host_sidebar_preferences": {
+      "name": "host_sidebar_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "host_sidebar_preferences_user_id_users_id_fk": {
+          "name": "host_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "host_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "host_sidebar_preferences_user_id": {
+          "name": "host_sidebar_preferences_user_id",
+          "columns": [
+            "user_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "ssh_data": {
+      "name": "ssh_data",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "connection_type": {
+          "name": "connection_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('ssh')"
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ip": {
+          "name": "ip",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "port": {
+          "name": "port",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "parent_host_id": {
+          "name": "parent_host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "share_ssh_auth": {
+          "name": "share_ssh_auth",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "force_keyboard_interactive": {
+          "name": "force_keyboard_interactive",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sudo_password": {
+          "name": "sudo_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "override_credential_username": {
+          "name": "override_credential_username",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "jump_hosts": {
+          "name": "jump_hosts",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_check_enabled": {
+          "name": "status_check_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "status_check_interval": {
+          "name": "status_check_interval",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ssh_options": {
+          "name": "ssh_options",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "notes": {
+          "name": "notes",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "enable_ssh": {
+          "name": "enable_ssh",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "ssh_port": {
+          "name": "ssh_port",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": 22
+        },
+        "use_socks5": {
+          "name": "use_socks5",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_host": {
+          "name": "socks5_host",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_port": {
+          "name": "socks5_port",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_username": {
+          "name": "socks5_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_password": {
+          "name": "socks5_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_proxy_chain": {
+          "name": "socks5_proxy_chain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "connection_origin": {
+          "name": "connection_origin",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "port_knock_sequence": {
+          "name": "port_knock_sequence",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_fingerprint": {
+          "name": "host_key_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_type": {
+          "name": "host_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_algorithm": {
+          "name": "host_key_algorithm",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": "('sha256')"
+        },
+        "host_key_first_seen": {
+          "name": "host_key_first_seen",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_last_verified": {
+          "name": "host_key_last_verified",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_changed_count": {
+          "name": "host_key_changed_count",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": 0
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "default_overrides": {
+          "name": "default_overrides",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_ssh_data_user_id": {
+          "name": "idx_ssh_data_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_data_parent_host": {
+          "name": "idx_ssh_data_parent_host",
+          "columns": [
+            "parent_host_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_data_credential": {
+          "name": "idx_ssh_data_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_data_user_id_users_id_fk": {
+          "name": "ssh_data_user_id_users_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_data_parent_host_id_ssh_data_id_fk": {
+          "name": "ssh_data_parent_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "parent_host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "ssh_data_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_data_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ssh_data_id": {
+          "name": "ssh_data_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "ssh_data_sync_id_unique": {
+          "name": "ssh_data_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "checkConstraint": {}
+    },
+    "plugin_install_counts": {
+      "name": "plugin_install_counts",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "count": {
+          "name": "count",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('aggregate-telemetry')"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_plugin_install_counts_plugin_registry": {
+          "name": "idx_plugin_install_counts_plugin_registry",
+          "columns": [
+            "plugin_id",
+            "registry_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "plugin_install_counts_id": {
+          "name": "plugin_install_counts_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_migrations": {
+      "name": "plugin_migrations",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "migration_id": {
+          "name": "migration_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "checksum": {
+          "name": "checksum",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_plugin_migrations_plugin_migration": {
+          "name": "idx_plugin_migrations_plugin_migration",
+          "columns": [
+            "plugin_id",
+            "migration_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_migrations_plugin_id_plugins_id_fk": {
+          "name": "plugin_migrations_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_migrations",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "plugin_migrations_id": {
+          "name": "plugin_migrations_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_permission_grants": {
+      "name": "plugin_permission_grants",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "capability": {
+          "name": "capability",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('admin')"
+        }
+      },
+      "indexes": {
+        "idx_plugin_permission_grants_plugin_capability": {
+          "name": "idx_plugin_permission_grants_plugin_capability",
+          "columns": [
+            "plugin_id",
+            "capability"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_permission_grants_plugin_id_plugins_id_fk": {
+          "name": "plugin_permission_grants_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "plugin_permission_grants_granted_by_users_id_fk": {
+          "name": "plugin_permission_grants_granted_by_users_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "plugin_permission_grants_id": {
+          "name": "plugin_permission_grants_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_registries": {
+      "name": "plugin_registries",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "url": {
+          "name": "url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "kind": {
+          "name": "kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('community')"
+        },
+        "enabled": {
+          "name": "enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "signing_key": {
+          "name": "signing_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_checked_at": {
+          "name": "last_checked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_index_hash": {
+          "name": "last_index_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "plugin_registries_id": {
+          "name": "plugin_registries_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_settings": {
+      "name": "plugin_settings",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "enum('admin','user','host','secret')",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope_id": {
+          "name": "scope_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted": {
+          "name": "encrypted",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_plugin_settings_scope_key": {
+          "name": "idx_plugin_settings_scope_key",
+          "columns": [
+            "plugin_id",
+            "scope",
+            "scope_id",
+            "key"
+          ],
+          "isUnique": true
+        },
+        "idx_plugin_settings_plugin_scope": {
+          "name": "idx_plugin_settings_plugin_scope",
+          "columns": [
+            "plugin_id",
+            "scope"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "plugin_settings_plugin_id_plugins_id_fk": {
+          "name": "plugin_settings_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_settings",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "plugin_settings_id": {
+          "name": "plugin_settings_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_storage": {
+      "name": "plugin_storage",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_plugin_storage_plugin_key": {
+          "name": "idx_plugin_storage_plugin_key",
+          "columns": [
+            "plugin_id",
+            "key"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_storage_plugin_id_plugins_id_fk": {
+          "name": "plugin_storage_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_storage",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "plugin_storage_id": {
+          "name": "plugin_storage_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugins": {
+      "name": "plugins",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "version": {
+          "name": "version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tier": {
+          "name": "tier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('available')"
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('community')"
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "state": {
+          "name": "state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('disabled')"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "installed_at": {
+          "name": "installed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "auto_update": {
+          "name": "auto_update",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "manifest_json": {
+          "name": "manifest_json",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {
+        "idx_plugins_registry_id": {
+          "name": "idx_plugins_registry_id",
+          "columns": [
+            "registry_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "plugins_id": {
+          "name": "plugins_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "rbac_applied_defaults": {
+      "name": "rbac_applied_defaults",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "role_name": {
+          "name": "role_name",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission": {
+          "name": "permission",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_rbac_applied_defaults_role_permission": {
+          "name": "idx_rbac_applied_defaults_role_permission",
+          "columns": [
+            "role_name",
+            "permission"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "rbac_applied_defaults_id": {
+          "name": "rbac_applied_defaults_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "rbac_known_permissions": {
+      "name": "rbac_known_permissions",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "permission": {
+          "name": "permission",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "first_seen_at": {
+          "name": "first_seen_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_rbac_known_permissions_permission": {
+          "name": "idx_rbac_known_permissions_permission",
+          "columns": [
+            "permission"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "rbac_known_permissions_id": {
+          "name": "rbac_known_permissions_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "recent_activity": {
+      "name": "recent_activity",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "type": {
+          "name": "type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_name": {
+          "name": "host_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_recent_activity_user_ts": {
+          "name": "idx_recent_activity_user_ts",
+          "columns": [
+            "user_id",
+            "timestamp"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "recent_activity_user_id_users_id_fk": {
+          "name": "recent_activity_user_id_users_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "recent_activity_host_id_ssh_data_id_fk": {
+          "name": "recent_activity_host_id_ssh_data_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "recent_activity_id": {
+          "name": "recent_activity_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "roles": {
+      "name": "roles",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "name": {
+          "name": "name",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "display_name": {
+          "name": "display_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "is_system": {
+          "name": "is_system",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "permissions": {
+          "name": "permissions",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "roles_id": {
+          "name": "roles_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "roles_name_unique": {
+          "name": "roles_name_unique",
+          "columns": [
+            "name"
+          ]
+        }
+      },
+      "checkConstraint": {}
+    },
+    "sessions": {
+      "name": "sessions",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "jwt_token": {
+          "name": "jwt_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "last_active_at": {
+          "name": "last_active_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_sessions_user_id": {
+          "name": "idx_sessions_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_sessions_expires_at": {
+          "name": "idx_sessions_expires_at",
+          "columns": [
+            "expires_at"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sessions_user_id_users_id_fk": {
+          "name": "sessions_user_id_users_id_fk",
+          "tableFrom": "sessions",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "sessions_id": {
+          "name": "sessions_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "settings": {
+      "name": "settings",
+      "columns": {
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "settings_key": {
+          "name": "settings_key",
+          "columns": [
+            "key"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "shared_credential_secrets": {
+      "name": "shared_credential_secrets",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_access_id": {
+          "name": "credential_access_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('password')"
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_shared_credential_secrets_scope": {
+          "name": "idx_shared_credential_secrets_scope",
+          "columns": [
+            "credential_access_id",
+            "target_user_id"
+          ],
+          "isUnique": true
+        },
+        "idx_shared_credential_secrets_target": {
+          "name": "idx_shared_credential_secrets_target",
+          "columns": [
+            "target_user_id",
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "shared_credential_secrets_target_user_id_users_id_fk": {
+          "name": "shared_credential_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_credential_secrets_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_credential_secrets_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_cred_secrets_access_id_fk": {
+          "name": "shared_cred_secrets_access_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "credential_access",
+          "columnsFrom": [
+            "credential_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "shared_credential_secrets_id": {
+          "name": "shared_credential_secrets_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "shared_host_auth_overrides": {
+      "name": "shared_host_auth_overrides",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "shared_host_auth_overrides_host_user_protocol_unique": {
+          "name": "shared_host_auth_overrides_host_user_protocol_unique",
+          "columns": [
+            "host_id",
+            "user_id",
+            "protocol"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "shared_host_auth_overrides_host_id_ssh_data_id_fk": {
+          "name": "shared_host_auth_overrides_host_id_ssh_data_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_user_id_users_id_fk": {
+          "name": "shared_host_auth_overrides_user_id_users_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "shared_host_auth_overrides_id": {
+          "name": "shared_host_auth_overrides_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "shared_host_secrets": {
+      "name": "shared_host_secrets",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_access_id": {
+          "name": "host_access_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "source_type": {
+          "name": "source_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('credential')"
+        },
+        "original_credential_id": {
+          "name": "original_credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_auth_type": {
+          "name": "encrypted_auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_type": {
+          "name": "encrypted_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_domain": {
+          "name": "encrypted_domain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_fields": {
+          "name": "encrypted_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_shared_host_secrets_scope": {
+          "name": "idx_shared_host_secrets_scope",
+          "columns": [
+            "host_access_id",
+            "target_user_id",
+            "protocol"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "shared_host_secrets_host_access_id_host_access_id_fk": {
+          "name": "shared_host_secrets_host_access_id_host_access_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "host_access",
+          "columnsFrom": [
+            "host_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_target_user_id_users_id_fk": {
+          "name": "shared_host_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_original_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_secrets_original_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "original_credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "shared_host_secrets_id": {
+          "name": "shared_host_secrets_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "ssh_credential_usage": {
+      "name": "ssh_credential_usage",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "used_at": {
+          "name": "used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credential_usage_credential": {
+          "name": "idx_ssh_credential_usage_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_credential_usage_user": {
+          "name": "idx_ssh_credential_usage_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_credential_usage_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_credential_usage_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_host_id_ssh_data_id_fk": {
+          "name": "ssh_credential_usage_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_user_id_users_id_fk": {
+          "name": "ssh_credential_usage_user_id_users_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ssh_credential_usage_id": {
+          "name": "ssh_credential_usage_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "ssh_credentials": {
+      "name": "ssh_credentials",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "private_key": {
+          "name": "private_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "detected_key_type": {
+          "name": "detected_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "usage_count": {
+          "name": "usage_count",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "last_used": {
+          "name": "last_used",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credentials_user_id": {
+          "name": "idx_ssh_credentials_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_credentials_user_id_users_id_fk": {
+          "name": "ssh_credentials_user_id_users_id_fk",
+          "tableFrom": "ssh_credentials",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ssh_credentials_id": {
+          "name": "ssh_credentials_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "ssh_credentials_sync_id_unique": {
+          "name": "ssh_credentials_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "checkConstraint": {}
+    },
+    "ssh_folders": {
+      "name": "ssh_folders",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "color": {
+          "name": "color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "icon": {
+          "name": "icon",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_ssh_folders_user_id": {
+          "name": "idx_ssh_folders_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_folders_user_id_users_id_fk": {
+          "name": "ssh_folders_user_id_users_id_fk",
+          "tableFrom": "ssh_folders",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ssh_folders_id": {
+          "name": "ssh_folders_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "ssh_folders_sync_id_unique": {
+          "name": "ssh_folders_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "checkConstraint": {}
+    },
+    "sync_conflicts": {
+      "name": "sync_conflicts",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "local_row": {
+          "name": "local_row",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_revision": {
+          "name": "server_revision",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_sync_conflicts_user": {
+          "name": "idx_sync_conflicts_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sync_conflicts_user_id_users_id_fk": {
+          "name": "sync_conflicts_user_id_users_id_fk",
+          "tableFrom": "sync_conflicts",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "sync_conflicts_id": {
+          "name": "sync_conflicts_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "sync_link": {
+      "name": "sync_link",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_url": {
+          "name": "server_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_name": {
+          "name": "server_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "server_version": {
+          "name": "server_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "session_token": {
+          "name": "session_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "custom_headers": {
+          "name": "custom_headers",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "basic_auth": {
+          "name": "basic_auth",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "allow_invalid_certificate": {
+          "name": "allow_invalid_certificate",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "remote_user_id": {
+          "name": "remote_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "remote_username": {
+          "name": "remote_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "account": {
+          "name": "account",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "known_types": {
+          "name": "known_types",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cursor": {
+          "name": "cursor",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('idle')"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "linked_at": {
+          "name": "linked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "last_sync_at": {
+          "name": "last_sync_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "sync_link_user_id_users_id_fk": {
+          "name": "sync_link_user_id_users_id_fk",
+          "tableFrom": "sync_link",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "sync_link_id": {
+          "name": "sync_link_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "sync_records": {
+      "name": "sync_records",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "revision": {
+          "name": "revision",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "seq": {
+          "name": "seq",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "hash": {
+          "name": "hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "deleted": {
+          "name": "deleted",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "error": {
+          "name": "error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "error_hash": {
+          "name": "error_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_sync_records_user_entity_sync": {
+          "name": "idx_sync_records_user_entity_sync",
+          "columns": [
+            "user_id",
+            "entity_type",
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_sync_records_user_seq": {
+          "name": "idx_sync_records_user_seq",
+          "columns": [
+            "user_id",
+            "seq"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sync_records_user_id_users_id_fk": {
+          "name": "sync_records_user_id_users_id_fk",
+          "tableFrom": "sync_records",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "sync_records_id": {
+          "name": "sync_records_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "trusted_devices": {
+      "name": "trusted_devices",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_fingerprint": {
+          "name": "device_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_trusted_devices_user_id": {
+          "name": "idx_trusted_devices_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "trusted_devices_user_id_users_id_fk": {
+          "name": "trusted_devices_user_id_users_id_fk",
+          "tableFrom": "trusted_devices",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "trusted_devices_id": {
+          "name": "trusted_devices_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "ui_preferences": {
+      "name": "ui_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "ui_preferences_user_id_users_id_fk": {
+          "name": "ui_preferences_user_id_users_id_fk",
+          "tableFrom": "ui_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ui_preferences_user_id": {
+          "name": "ui_preferences_user_id",
+          "columns": [
+            "user_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_external_identities": {
+      "name": "user_external_identities",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "provider_id": {
+          "name": "provider_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "subject": {
+          "name": "subject",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_user_external_identities_provider_subject": {
+          "name": "idx_user_external_identities_provider_subject",
+          "columns": [
+            "provider_id",
+            "subject"
+          ],
+          "isUnique": true
+        },
+        "idx_user_external_identities_user": {
+          "name": "idx_user_external_identities_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_external_identities_user_id_users_id_fk": {
+          "name": "user_external_identities_user_id_users_id_fk",
+          "tableFrom": "user_external_identities",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_external_identities_id": {
+          "name": "user_external_identities_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_open_tabs": {
+      "name": "user_open_tabs",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tab_type": {
+          "name": "tab_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "label": {
+          "name": "label",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tab_order": {
+          "name": "tab_order",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "backend_session_id": {
+          "name": "backend_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_user_open_tabs_user_id": {
+          "name": "idx_user_open_tabs_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_open_tabs_user_id_users_id_fk": {
+          "name": "user_open_tabs_user_id_users_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_open_tabs_host_id_ssh_data_id_fk": {
+          "name": "user_open_tabs_host_id_ssh_data_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_open_tabs_id": {
+          "name": "user_open_tabs_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_preferences": {
+      "name": "user_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "reopen_tabs_on_login": {
+          "name": "reopen_tabs_on_login",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "theme": {
+          "name": "theme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "font_size": {
+          "name": "font_size",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "accent_color": {
+          "name": "accent_color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "language": {
+          "name": "language",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "storage_mode": {
+          "name": "storage_mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "command_palette_enabled": {
+          "name": "command_palette_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "show_host_tags": {
+          "name": "show_host_tags",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_tray_on_click": {
+          "name": "host_tray_on_click",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin_app_rail": {
+          "name": "pin_app_rail",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "expand_app_rail_on_hover": {
+          "name": "expand_app_rail_on_hover",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "show_pin_app_rail_button": {
+          "name": "show_pin_app_rail_button",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folders_collapsed": {
+          "name": "folders_collapsed",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "disable_update_check": {
+          "name": "disable_update_check",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "confirm_tab_close": {
+          "name": "confirm_tab_close",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "hidden_rail_tabs": {
+          "name": "hidden_rail_tabs",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "compact_host_view": {
+          "name": "compact_host_view",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_color_scheme": {
+          "name": "status_color_scheme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "custom_keybindings": {
+          "name": "custom_keybindings",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "user_preferences_user_id_users_id_fk": {
+          "name": "user_preferences_user_id_users_id_fk",
+          "tableFrom": "user_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_preferences_user_id": {
+          "name": "user_preferences_user_id",
+          "columns": [
+            "user_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_roles": {
+      "name": "user_roles",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_user_roles_user_role": {
+          "name": "idx_user_roles_user_role",
+          "columns": [
+            "user_id",
+            "role_id"
+          ],
+          "isUnique": true
+        },
+        "idx_user_roles_role_id": {
+          "name": "idx_user_roles_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_roles_user_id_users_id_fk": {
+          "name": "user_roles_user_id_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_role_id_roles_id_fk": {
+          "name": "user_roles_role_id_roles_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_granted_by_users_id_fk": {
+          "name": "user_roles_granted_by_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_roles_id": {
+          "name": "user_roles_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_second_factors": {
+      "name": "user_second_factors",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "factor_id": {
+          "name": "factor_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "enrolled_at": {
+          "name": "enrolled_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_user_second_factors_user_factor": {
+          "name": "idx_user_second_factors_user_factor",
+          "columns": [
+            "user_id",
+            "plugin_id",
+            "factor_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "user_second_factors_user_id_users_id_fk": {
+          "name": "user_second_factors_user_id_users_id_fk",
+          "tableFrom": "user_second_factors",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_second_factors_id": {
+          "name": "user_second_factors_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "users": {
+      "name": "users",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "password_hash": {
+          "name": "password_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "is_admin": {
+          "name": "is_admin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "registered_at": {
+          "name": "registered_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "donation_modal_dismissed": {
+          "name": "donation_modal_dismissed",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "users_id": {
+          "name": "users_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    }
+  },
+  "views": {},
+  "_meta": {
+    "schemas": {},
+    "tables": {},
+    "columns": {}
+  },
+  "internal": {
+    "tables": {},
+    "indexes": {}
+  }
+}
\ No newline at end of file
diff --git a/drizzle/mysql/meta/0067_snapshot.json b/drizzle/mysql/meta/0067_snapshot.json
new file mode 100644
index 000000000..5d628221c
--- /dev/null
+++ b/drizzle/mysql/meta/0067_snapshot.json
@@ -0,0 +1,4738 @@
+{
+  "version": "5",
+  "dialect": "mysql",
+  "id": "b91f5f72-d0db-46df-915c-f8bce033cd9a",
+  "prevId": "2fdeddc6-f532-43a0-8dfd-51791cc3cf46",
+  "tables": {
+    "api_keys": {
+      "name": "api_keys",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "token_hash": {
+          "name": "token_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "token_prefix": {
+          "name": "token_prefix",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "is_active": {
+          "name": "is_active",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        }
+      },
+      "indexes": {
+        "idx_api_keys_user_id": {
+          "name": "idx_api_keys_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "api_keys_user_id_users_id_fk": {
+          "name": "api_keys_user_id_users_id_fk",
+          "tableFrom": "api_keys",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "api_keys_id": {
+          "name": "api_keys_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "audit_logs": {
+      "name": "audit_logs",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "action": {
+          "name": "action",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "resource_type": {
+          "name": "resource_type",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "resource_id": {
+          "name": "resource_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "resource_name": {
+          "name": "resource_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "details": {
+          "name": "details",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ip_address": {
+          "name": "ip_address",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "user_agent": {
+          "name": "user_agent",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "success": {
+          "name": "success",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_audit_logs_timestamp": {
+          "name": "idx_audit_logs_timestamp",
+          "columns": [
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_user_ts": {
+          "name": "idx_audit_logs_user_ts",
+          "columns": [
+            "user_id",
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_action_ts": {
+          "name": "idx_audit_logs_action_ts",
+          "columns": [
+            "action",
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_resource_ts": {
+          "name": "idx_audit_logs_resource_ts",
+          "columns": [
+            "resource_type",
+            "timestamp"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "audit_logs_user_id_users_id_fk": {
+          "name": "audit_logs_user_id_users_id_fk",
+          "tableFrom": "audit_logs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "audit_logs_id": {
+          "name": "audit_logs_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "credential_access": {
+      "name": "credential_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('use')"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_credential_access_user_id": {
+          "name": "idx_credential_access_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_credential_access_role_id": {
+          "name": "idx_credential_access_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        },
+        "idx_credential_access_credential_id": {
+          "name": "idx_credential_access_credential_id",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "credential_access_credential_id_ssh_credentials_id_fk": {
+          "name": "credential_access_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_user_id_users_id_fk": {
+          "name": "credential_access_user_id_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_role_id_roles_id_fk": {
+          "name": "credential_access_role_id_roles_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_granted_by_users_id_fk": {
+          "name": "credential_access_granted_by_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "credential_access_id": {
+          "name": "credential_access_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "credential_sidebar_preferences": {
+      "name": "credential_sidebar_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "credential_sidebar_preferences_user_id_users_id_fk": {
+          "name": "credential_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "credential_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "credential_sidebar_preferences_user_id": {
+          "name": "credential_sidebar_preferences_user_id",
+          "columns": [
+            "user_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "folder_access": {
+      "name": "folder_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "owner_user_id": {
+          "name": "owner_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('connect')"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_folder_access_owner_folder": {
+          "name": "idx_folder_access_owner_folder",
+          "columns": [
+            "owner_user_id",
+            "folder"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "folder_access_owner_user_id_users_id_fk": {
+          "name": "folder_access_owner_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "owner_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_user_id_users_id_fk": {
+          "name": "folder_access_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_role_id_roles_id_fk": {
+          "name": "folder_access_role_id_roles_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_granted_by_users_id_fk": {
+          "name": "folder_access_granted_by_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "folder_access_id": {
+          "name": "folder_access_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "host_access": {
+      "name": "host_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('connect')"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "last_accessed_at": {
+          "name": "last_accessed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "access_count": {
+          "name": "access_count",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        }
+      },
+      "indexes": {
+        "idx_host_access_user_id": {
+          "name": "idx_host_access_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_role_id": {
+          "name": "idx_host_access_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_host_id": {
+          "name": "idx_host_access_host_id",
+          "columns": [
+            "host_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_expires_at": {
+          "name": "idx_host_access_expires_at",
+          "columns": [
+            "expires_at"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_access_host_id_ssh_data_id_fk": {
+          "name": "host_access_host_id_ssh_data_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_user_id_users_id_fk": {
+          "name": "host_access_user_id_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_role_id_roles_id_fk": {
+          "name": "host_access_role_id_roles_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_granted_by_users_id_fk": {
+          "name": "host_access_granted_by_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "host_access_id": {
+          "name": "host_access_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "host_defaults": {
+      "name": "host_defaults",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "level": {
+          "name": "level",
+          "type": "enum('admin','user','folder')",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope_key": {
+          "name": "scope_key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folder_id": {
+          "name": "folder_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "namespace": {
+          "name": "namespace",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_by": {
+          "name": "updated_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_host_defaults_scope_key": {
+          "name": "idx_host_defaults_scope_key",
+          "columns": [
+            "scope_key",
+            "namespace",
+            "key"
+          ],
+          "isUnique": true
+        },
+        "idx_host_defaults_user": {
+          "name": "idx_host_defaults_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_defaults_folder": {
+          "name": "idx_host_defaults_folder",
+          "columns": [
+            "folder_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_defaults_user_id_users_id_fk": {
+          "name": "host_defaults_user_id_users_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_defaults_folder_id_ssh_folders_id_fk": {
+          "name": "host_defaults_folder_id_ssh_folders_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "ssh_folders",
+          "columnsFrom": [
+            "folder_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "host_defaults_id": {
+          "name": "host_defaults_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "host_protocol_auth": {
+      "name": "host_protocol_auth",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('direct')"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "fields": {
+          "name": "fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "secret_fields": {
+          "name": "secret_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_host_protocol_auth_host_protocol": {
+          "name": "idx_host_protocol_auth_host_protocol",
+          "columns": [
+            "host_id",
+            "protocol"
+          ],
+          "isUnique": true
+        },
+        "idx_host_protocol_auth_user": {
+          "name": "idx_host_protocol_auth_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_protocol_auth_credential": {
+          "name": "idx_host_protocol_auth_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_protocol_auth_host_id_ssh_data_id_fk": {
+          "name": "host_protocol_auth_host_id_ssh_data_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_user_id_users_id_fk": {
+          "name": "host_protocol_auth_user_id_users_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_credential_id_ssh_credentials_id_fk": {
+          "name": "host_protocol_auth_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "host_protocol_auth_id": {
+          "name": "host_protocol_auth_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "host_sidebar_preferences": {
+      "name": "host_sidebar_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "host_sidebar_preferences_user_id_users_id_fk": {
+          "name": "host_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "host_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "host_sidebar_preferences_user_id": {
+          "name": "host_sidebar_preferences_user_id",
+          "columns": [
+            "user_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "ssh_data": {
+      "name": "ssh_data",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "connection_type": {
+          "name": "connection_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('ssh')"
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ip": {
+          "name": "ip",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "port": {
+          "name": "port",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "parent_host_id": {
+          "name": "parent_host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "share_ssh_auth": {
+          "name": "share_ssh_auth",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "force_keyboard_interactive": {
+          "name": "force_keyboard_interactive",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sudo_password": {
+          "name": "sudo_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "override_credential_username": {
+          "name": "override_credential_username",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "jump_hosts": {
+          "name": "jump_hosts",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_check_enabled": {
+          "name": "status_check_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "status_check_interval": {
+          "name": "status_check_interval",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ssh_options": {
+          "name": "ssh_options",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "notes": {
+          "name": "notes",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "enable_ssh": {
+          "name": "enable_ssh",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "ssh_port": {
+          "name": "ssh_port",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": 22
+        },
+        "use_socks5": {
+          "name": "use_socks5",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_host": {
+          "name": "socks5_host",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_port": {
+          "name": "socks5_port",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_username": {
+          "name": "socks5_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_password": {
+          "name": "socks5_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_proxy_chain": {
+          "name": "socks5_proxy_chain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "connection_origin": {
+          "name": "connection_origin",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "port_knock_sequence": {
+          "name": "port_knock_sequence",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_fingerprint": {
+          "name": "host_key_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_type": {
+          "name": "host_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_algorithm": {
+          "name": "host_key_algorithm",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": "('sha256')"
+        },
+        "host_key_first_seen": {
+          "name": "host_key_first_seen",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_last_verified": {
+          "name": "host_key_last_verified",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_changed_count": {
+          "name": "host_key_changed_count",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": 0
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "default_overrides": {
+          "name": "default_overrides",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_ssh_data_user_id": {
+          "name": "idx_ssh_data_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_data_parent_host": {
+          "name": "idx_ssh_data_parent_host",
+          "columns": [
+            "parent_host_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_data_credential": {
+          "name": "idx_ssh_data_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_data_user_id_users_id_fk": {
+          "name": "ssh_data_user_id_users_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_data_parent_host_id_ssh_data_id_fk": {
+          "name": "ssh_data_parent_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "parent_host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "ssh_data_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_data_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ssh_data_id": {
+          "name": "ssh_data_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "ssh_data_sync_id_unique": {
+          "name": "ssh_data_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "checkConstraint": {}
+    },
+    "plugin_install_counts": {
+      "name": "plugin_install_counts",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "count": {
+          "name": "count",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('aggregate-telemetry')"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_plugin_install_counts_plugin_registry": {
+          "name": "idx_plugin_install_counts_plugin_registry",
+          "columns": [
+            "plugin_id",
+            "registry_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "plugin_install_counts_id": {
+          "name": "plugin_install_counts_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_migrations": {
+      "name": "plugin_migrations",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "migration_id": {
+          "name": "migration_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "checksum": {
+          "name": "checksum",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_plugin_migrations_plugin_migration": {
+          "name": "idx_plugin_migrations_plugin_migration",
+          "columns": [
+            "plugin_id",
+            "migration_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_migrations_plugin_id_plugins_id_fk": {
+          "name": "plugin_migrations_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_migrations",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "plugin_migrations_id": {
+          "name": "plugin_migrations_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_permission_grants": {
+      "name": "plugin_permission_grants",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "capability": {
+          "name": "capability",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('admin')"
+        }
+      },
+      "indexes": {
+        "idx_plugin_permission_grants_plugin_capability": {
+          "name": "idx_plugin_permission_grants_plugin_capability",
+          "columns": [
+            "plugin_id",
+            "capability"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_permission_grants_plugin_id_plugins_id_fk": {
+          "name": "plugin_permission_grants_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "plugin_permission_grants_granted_by_users_id_fk": {
+          "name": "plugin_permission_grants_granted_by_users_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "plugin_permission_grants_id": {
+          "name": "plugin_permission_grants_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_registries": {
+      "name": "plugin_registries",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "url": {
+          "name": "url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "kind": {
+          "name": "kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('community')"
+        },
+        "enabled": {
+          "name": "enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "signing_key": {
+          "name": "signing_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_checked_at": {
+          "name": "last_checked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_index_hash": {
+          "name": "last_index_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "plugin_registries_id": {
+          "name": "plugin_registries_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_settings": {
+      "name": "plugin_settings",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "enum('admin','user','host','secret')",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope_id": {
+          "name": "scope_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted": {
+          "name": "encrypted",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_plugin_settings_scope_key": {
+          "name": "idx_plugin_settings_scope_key",
+          "columns": [
+            "plugin_id",
+            "scope",
+            "scope_id",
+            "key"
+          ],
+          "isUnique": true
+        },
+        "idx_plugin_settings_plugin_scope": {
+          "name": "idx_plugin_settings_plugin_scope",
+          "columns": [
+            "plugin_id",
+            "scope"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "plugin_settings_plugin_id_plugins_id_fk": {
+          "name": "plugin_settings_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_settings",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "plugin_settings_id": {
+          "name": "plugin_settings_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_storage": {
+      "name": "plugin_storage",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_plugin_storage_plugin_key": {
+          "name": "idx_plugin_storage_plugin_key",
+          "columns": [
+            "plugin_id",
+            "key"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_storage_plugin_id_plugins_id_fk": {
+          "name": "plugin_storage_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_storage",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "plugin_storage_id": {
+          "name": "plugin_storage_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugins": {
+      "name": "plugins",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "version": {
+          "name": "version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tier": {
+          "name": "tier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('available')"
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('community')"
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "state": {
+          "name": "state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('disabled')"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "installed_at": {
+          "name": "installed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "auto_update": {
+          "name": "auto_update",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "manifest_json": {
+          "name": "manifest_json",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {
+        "idx_plugins_registry_id": {
+          "name": "idx_plugins_registry_id",
+          "columns": [
+            "registry_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "plugins_id": {
+          "name": "plugins_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "rbac_applied_defaults": {
+      "name": "rbac_applied_defaults",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "role_name": {
+          "name": "role_name",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission": {
+          "name": "permission",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_rbac_applied_defaults_role_permission": {
+          "name": "idx_rbac_applied_defaults_role_permission",
+          "columns": [
+            "role_name",
+            "permission"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "rbac_applied_defaults_id": {
+          "name": "rbac_applied_defaults_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "rbac_known_permissions": {
+      "name": "rbac_known_permissions",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "permission": {
+          "name": "permission",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "first_seen_at": {
+          "name": "first_seen_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_rbac_known_permissions_permission": {
+          "name": "idx_rbac_known_permissions_permission",
+          "columns": [
+            "permission"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "rbac_known_permissions_id": {
+          "name": "rbac_known_permissions_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "recent_activity": {
+      "name": "recent_activity",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "type": {
+          "name": "type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_name": {
+          "name": "host_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_recent_activity_user_ts": {
+          "name": "idx_recent_activity_user_ts",
+          "columns": [
+            "user_id",
+            "timestamp"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "recent_activity_user_id_users_id_fk": {
+          "name": "recent_activity_user_id_users_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "recent_activity_host_id_ssh_data_id_fk": {
+          "name": "recent_activity_host_id_ssh_data_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "recent_activity_id": {
+          "name": "recent_activity_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "roles": {
+      "name": "roles",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "name": {
+          "name": "name",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "display_name": {
+          "name": "display_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "is_system": {
+          "name": "is_system",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "permissions": {
+          "name": "permissions",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "roles_id": {
+          "name": "roles_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "roles_name_unique": {
+          "name": "roles_name_unique",
+          "columns": [
+            "name"
+          ]
+        }
+      },
+      "checkConstraint": {}
+    },
+    "sessions": {
+      "name": "sessions",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "jwt_token": {
+          "name": "jwt_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "external_session_ref": {
+          "name": "external_session_ref",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "last_active_at": {
+          "name": "last_active_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_sessions_user_id": {
+          "name": "idx_sessions_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_sessions_expires_at": {
+          "name": "idx_sessions_expires_at",
+          "columns": [
+            "expires_at"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sessions_user_id_users_id_fk": {
+          "name": "sessions_user_id_users_id_fk",
+          "tableFrom": "sessions",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "sessions_id": {
+          "name": "sessions_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "settings": {
+      "name": "settings",
+      "columns": {
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "settings_key": {
+          "name": "settings_key",
+          "columns": [
+            "key"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "shared_credential_secrets": {
+      "name": "shared_credential_secrets",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_access_id": {
+          "name": "credential_access_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('password')"
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_shared_credential_secrets_scope": {
+          "name": "idx_shared_credential_secrets_scope",
+          "columns": [
+            "credential_access_id",
+            "target_user_id"
+          ],
+          "isUnique": true
+        },
+        "idx_shared_credential_secrets_target": {
+          "name": "idx_shared_credential_secrets_target",
+          "columns": [
+            "target_user_id",
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "shared_credential_secrets_target_user_id_users_id_fk": {
+          "name": "shared_credential_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_credential_secrets_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_credential_secrets_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_cred_secrets_access_id_fk": {
+          "name": "shared_cred_secrets_access_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "credential_access",
+          "columnsFrom": [
+            "credential_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "shared_credential_secrets_id": {
+          "name": "shared_credential_secrets_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "shared_host_auth_overrides": {
+      "name": "shared_host_auth_overrides",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "shared_host_auth_overrides_host_user_protocol_unique": {
+          "name": "shared_host_auth_overrides_host_user_protocol_unique",
+          "columns": [
+            "host_id",
+            "user_id",
+            "protocol"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "shared_host_auth_overrides_host_id_ssh_data_id_fk": {
+          "name": "shared_host_auth_overrides_host_id_ssh_data_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_user_id_users_id_fk": {
+          "name": "shared_host_auth_overrides_user_id_users_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "shared_host_auth_overrides_id": {
+          "name": "shared_host_auth_overrides_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "shared_host_secrets": {
+      "name": "shared_host_secrets",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_access_id": {
+          "name": "host_access_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "source_type": {
+          "name": "source_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('credential')"
+        },
+        "original_credential_id": {
+          "name": "original_credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_auth_type": {
+          "name": "encrypted_auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_type": {
+          "name": "encrypted_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_domain": {
+          "name": "encrypted_domain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_fields": {
+          "name": "encrypted_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_shared_host_secrets_scope": {
+          "name": "idx_shared_host_secrets_scope",
+          "columns": [
+            "host_access_id",
+            "target_user_id",
+            "protocol"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "shared_host_secrets_host_access_id_host_access_id_fk": {
+          "name": "shared_host_secrets_host_access_id_host_access_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "host_access",
+          "columnsFrom": [
+            "host_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_target_user_id_users_id_fk": {
+          "name": "shared_host_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_original_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_secrets_original_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "original_credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "shared_host_secrets_id": {
+          "name": "shared_host_secrets_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "ssh_credential_usage": {
+      "name": "ssh_credential_usage",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "used_at": {
+          "name": "used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credential_usage_credential": {
+          "name": "idx_ssh_credential_usage_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_credential_usage_user": {
+          "name": "idx_ssh_credential_usage_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_credential_usage_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_credential_usage_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_host_id_ssh_data_id_fk": {
+          "name": "ssh_credential_usage_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_user_id_users_id_fk": {
+          "name": "ssh_credential_usage_user_id_users_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ssh_credential_usage_id": {
+          "name": "ssh_credential_usage_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "ssh_credentials": {
+      "name": "ssh_credentials",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "private_key": {
+          "name": "private_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "detected_key_type": {
+          "name": "detected_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "usage_count": {
+          "name": "usage_count",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "last_used": {
+          "name": "last_used",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credentials_user_id": {
+          "name": "idx_ssh_credentials_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_credentials_user_id_users_id_fk": {
+          "name": "ssh_credentials_user_id_users_id_fk",
+          "tableFrom": "ssh_credentials",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ssh_credentials_id": {
+          "name": "ssh_credentials_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "ssh_credentials_sync_id_unique": {
+          "name": "ssh_credentials_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "checkConstraint": {}
+    },
+    "ssh_folders": {
+      "name": "ssh_folders",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "color": {
+          "name": "color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "icon": {
+          "name": "icon",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_ssh_folders_user_id": {
+          "name": "idx_ssh_folders_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_folders_user_id_users_id_fk": {
+          "name": "ssh_folders_user_id_users_id_fk",
+          "tableFrom": "ssh_folders",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ssh_folders_id": {
+          "name": "ssh_folders_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "ssh_folders_sync_id_unique": {
+          "name": "ssh_folders_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "checkConstraint": {}
+    },
+    "sync_conflicts": {
+      "name": "sync_conflicts",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "local_row": {
+          "name": "local_row",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_revision": {
+          "name": "server_revision",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_sync_conflicts_user": {
+          "name": "idx_sync_conflicts_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sync_conflicts_user_id_users_id_fk": {
+          "name": "sync_conflicts_user_id_users_id_fk",
+          "tableFrom": "sync_conflicts",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "sync_conflicts_id": {
+          "name": "sync_conflicts_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "sync_link": {
+      "name": "sync_link",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_url": {
+          "name": "server_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_name": {
+          "name": "server_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "server_version": {
+          "name": "server_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "session_token": {
+          "name": "session_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "custom_headers": {
+          "name": "custom_headers",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "basic_auth": {
+          "name": "basic_auth",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "allow_invalid_certificate": {
+          "name": "allow_invalid_certificate",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "remote_user_id": {
+          "name": "remote_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "remote_username": {
+          "name": "remote_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "account": {
+          "name": "account",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "known_types": {
+          "name": "known_types",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cursor": {
+          "name": "cursor",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('idle')"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "linked_at": {
+          "name": "linked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "last_sync_at": {
+          "name": "last_sync_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "sync_link_user_id_users_id_fk": {
+          "name": "sync_link_user_id_users_id_fk",
+          "tableFrom": "sync_link",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "sync_link_id": {
+          "name": "sync_link_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "sync_records": {
+      "name": "sync_records",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "revision": {
+          "name": "revision",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "seq": {
+          "name": "seq",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "hash": {
+          "name": "hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "deleted": {
+          "name": "deleted",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "error": {
+          "name": "error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "error_hash": {
+          "name": "error_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_sync_records_user_entity_sync": {
+          "name": "idx_sync_records_user_entity_sync",
+          "columns": [
+            "user_id",
+            "entity_type",
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_sync_records_user_seq": {
+          "name": "idx_sync_records_user_seq",
+          "columns": [
+            "user_id",
+            "seq"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sync_records_user_id_users_id_fk": {
+          "name": "sync_records_user_id_users_id_fk",
+          "tableFrom": "sync_records",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "sync_records_id": {
+          "name": "sync_records_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "trusted_devices": {
+      "name": "trusted_devices",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_fingerprint": {
+          "name": "device_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_trusted_devices_user_id": {
+          "name": "idx_trusted_devices_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "trusted_devices_user_id_users_id_fk": {
+          "name": "trusted_devices_user_id_users_id_fk",
+          "tableFrom": "trusted_devices",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "trusted_devices_id": {
+          "name": "trusted_devices_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "ui_preferences": {
+      "name": "ui_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "ui_preferences_user_id_users_id_fk": {
+          "name": "ui_preferences_user_id_users_id_fk",
+          "tableFrom": "ui_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ui_preferences_user_id": {
+          "name": "ui_preferences_user_id",
+          "columns": [
+            "user_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_external_identities": {
+      "name": "user_external_identities",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "provider_id": {
+          "name": "provider_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "subject": {
+          "name": "subject",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_user_external_identities_provider_subject": {
+          "name": "idx_user_external_identities_provider_subject",
+          "columns": [
+            "provider_id",
+            "subject"
+          ],
+          "isUnique": true
+        },
+        "idx_user_external_identities_user": {
+          "name": "idx_user_external_identities_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_external_identities_user_id_users_id_fk": {
+          "name": "user_external_identities_user_id_users_id_fk",
+          "tableFrom": "user_external_identities",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_external_identities_id": {
+          "name": "user_external_identities_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_open_tabs": {
+      "name": "user_open_tabs",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tab_type": {
+          "name": "tab_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "label": {
+          "name": "label",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tab_order": {
+          "name": "tab_order",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "backend_session_id": {
+          "name": "backend_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_user_open_tabs_user_id": {
+          "name": "idx_user_open_tabs_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_open_tabs_user_id_users_id_fk": {
+          "name": "user_open_tabs_user_id_users_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_open_tabs_host_id_ssh_data_id_fk": {
+          "name": "user_open_tabs_host_id_ssh_data_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_open_tabs_id": {
+          "name": "user_open_tabs_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_preferences": {
+      "name": "user_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "reopen_tabs_on_login": {
+          "name": "reopen_tabs_on_login",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "theme": {
+          "name": "theme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "font_size": {
+          "name": "font_size",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "accent_color": {
+          "name": "accent_color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "language": {
+          "name": "language",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "storage_mode": {
+          "name": "storage_mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "command_palette_enabled": {
+          "name": "command_palette_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "show_host_tags": {
+          "name": "show_host_tags",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_tray_on_click": {
+          "name": "host_tray_on_click",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin_app_rail": {
+          "name": "pin_app_rail",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "expand_app_rail_on_hover": {
+          "name": "expand_app_rail_on_hover",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "show_pin_app_rail_button": {
+          "name": "show_pin_app_rail_button",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folders_collapsed": {
+          "name": "folders_collapsed",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "disable_update_check": {
+          "name": "disable_update_check",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "confirm_tab_close": {
+          "name": "confirm_tab_close",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "hidden_rail_tabs": {
+          "name": "hidden_rail_tabs",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "compact_host_view": {
+          "name": "compact_host_view",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_color_scheme": {
+          "name": "status_color_scheme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "custom_keybindings": {
+          "name": "custom_keybindings",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "user_preferences_user_id_users_id_fk": {
+          "name": "user_preferences_user_id_users_id_fk",
+          "tableFrom": "user_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_preferences_user_id": {
+          "name": "user_preferences_user_id",
+          "columns": [
+            "user_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_roles": {
+      "name": "user_roles",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_user_roles_user_role": {
+          "name": "idx_user_roles_user_role",
+          "columns": [
+            "user_id",
+            "role_id"
+          ],
+          "isUnique": true
+        },
+        "idx_user_roles_role_id": {
+          "name": "idx_user_roles_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_roles_user_id_users_id_fk": {
+          "name": "user_roles_user_id_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_role_id_roles_id_fk": {
+          "name": "user_roles_role_id_roles_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_granted_by_users_id_fk": {
+          "name": "user_roles_granted_by_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_roles_id": {
+          "name": "user_roles_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_second_factors": {
+      "name": "user_second_factors",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "factor_id": {
+          "name": "factor_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "enrolled_at": {
+          "name": "enrolled_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_user_second_factors_user_factor": {
+          "name": "idx_user_second_factors_user_factor",
+          "columns": [
+            "user_id",
+            "plugin_id",
+            "factor_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "user_second_factors_user_id_users_id_fk": {
+          "name": "user_second_factors_user_id_users_id_fk",
+          "tableFrom": "user_second_factors",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_second_factors_id": {
+          "name": "user_second_factors_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "users": {
+      "name": "users",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "password_hash": {
+          "name": "password_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "is_admin": {
+          "name": "is_admin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "registered_at": {
+          "name": "registered_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "donation_modal_dismissed": {
+          "name": "donation_modal_dismissed",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "users_id": {
+          "name": "users_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    }
+  },
+  "views": {},
+  "_meta": {
+    "schemas": {},
+    "tables": {},
+    "columns": {}
+  },
+  "internal": {
+    "tables": {},
+    "indexes": {}
+  }
+}
\ No newline at end of file
diff --git a/drizzle/mysql/meta/0068_snapshot.json b/drizzle/mysql/meta/0068_snapshot.json
new file mode 100644
index 000000000..ba7bb0608
--- /dev/null
+++ b/drizzle/mysql/meta/0068_snapshot.json
@@ -0,0 +1,4745 @@
+{
+  "version": "5",
+  "dialect": "mysql",
+  "id": "5b26c0bd-97f5-4351-859b-b28056467f20",
+  "prevId": "b91f5f72-d0db-46df-915c-f8bce033cd9a",
+  "tables": {
+    "api_keys": {
+      "name": "api_keys",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "token_hash": {
+          "name": "token_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "token_prefix": {
+          "name": "token_prefix",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "is_active": {
+          "name": "is_active",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        }
+      },
+      "indexes": {
+        "idx_api_keys_user_id": {
+          "name": "idx_api_keys_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "api_keys_user_id_users_id_fk": {
+          "name": "api_keys_user_id_users_id_fk",
+          "tableFrom": "api_keys",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "api_keys_id": {
+          "name": "api_keys_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "audit_logs": {
+      "name": "audit_logs",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "action": {
+          "name": "action",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "resource_type": {
+          "name": "resource_type",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "resource_id": {
+          "name": "resource_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "resource_name": {
+          "name": "resource_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "details": {
+          "name": "details",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ip_address": {
+          "name": "ip_address",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "user_agent": {
+          "name": "user_agent",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "success": {
+          "name": "success",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_audit_logs_timestamp": {
+          "name": "idx_audit_logs_timestamp",
+          "columns": [
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_user_ts": {
+          "name": "idx_audit_logs_user_ts",
+          "columns": [
+            "user_id",
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_action_ts": {
+          "name": "idx_audit_logs_action_ts",
+          "columns": [
+            "action",
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_resource_ts": {
+          "name": "idx_audit_logs_resource_ts",
+          "columns": [
+            "resource_type",
+            "timestamp"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "audit_logs_user_id_users_id_fk": {
+          "name": "audit_logs_user_id_users_id_fk",
+          "tableFrom": "audit_logs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "audit_logs_id": {
+          "name": "audit_logs_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "credential_access": {
+      "name": "credential_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('use')"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_credential_access_user_id": {
+          "name": "idx_credential_access_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_credential_access_role_id": {
+          "name": "idx_credential_access_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        },
+        "idx_credential_access_credential_id": {
+          "name": "idx_credential_access_credential_id",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "credential_access_credential_id_ssh_credentials_id_fk": {
+          "name": "credential_access_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_user_id_users_id_fk": {
+          "name": "credential_access_user_id_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_role_id_roles_id_fk": {
+          "name": "credential_access_role_id_roles_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_granted_by_users_id_fk": {
+          "name": "credential_access_granted_by_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "credential_access_id": {
+          "name": "credential_access_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "credential_sidebar_preferences": {
+      "name": "credential_sidebar_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "credential_sidebar_preferences_user_id_users_id_fk": {
+          "name": "credential_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "credential_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "credential_sidebar_preferences_user_id": {
+          "name": "credential_sidebar_preferences_user_id",
+          "columns": [
+            "user_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "folder_access": {
+      "name": "folder_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "owner_user_id": {
+          "name": "owner_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('connect')"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_folder_access_owner_folder": {
+          "name": "idx_folder_access_owner_folder",
+          "columns": [
+            "owner_user_id",
+            "folder"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "folder_access_owner_user_id_users_id_fk": {
+          "name": "folder_access_owner_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "owner_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_user_id_users_id_fk": {
+          "name": "folder_access_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_role_id_roles_id_fk": {
+          "name": "folder_access_role_id_roles_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_granted_by_users_id_fk": {
+          "name": "folder_access_granted_by_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "folder_access_id": {
+          "name": "folder_access_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "host_access": {
+      "name": "host_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('connect')"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "last_accessed_at": {
+          "name": "last_accessed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "access_count": {
+          "name": "access_count",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        }
+      },
+      "indexes": {
+        "idx_host_access_user_id": {
+          "name": "idx_host_access_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_role_id": {
+          "name": "idx_host_access_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_host_id": {
+          "name": "idx_host_access_host_id",
+          "columns": [
+            "host_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_expires_at": {
+          "name": "idx_host_access_expires_at",
+          "columns": [
+            "expires_at"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_access_host_id_ssh_data_id_fk": {
+          "name": "host_access_host_id_ssh_data_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_user_id_users_id_fk": {
+          "name": "host_access_user_id_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_role_id_roles_id_fk": {
+          "name": "host_access_role_id_roles_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_granted_by_users_id_fk": {
+          "name": "host_access_granted_by_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "host_access_id": {
+          "name": "host_access_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "host_defaults": {
+      "name": "host_defaults",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "level": {
+          "name": "level",
+          "type": "enum('admin','user','folder')",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope_key": {
+          "name": "scope_key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folder_id": {
+          "name": "folder_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "namespace": {
+          "name": "namespace",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_by": {
+          "name": "updated_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_host_defaults_scope_key": {
+          "name": "idx_host_defaults_scope_key",
+          "columns": [
+            "scope_key",
+            "namespace",
+            "key"
+          ],
+          "isUnique": true
+        },
+        "idx_host_defaults_user": {
+          "name": "idx_host_defaults_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_defaults_folder": {
+          "name": "idx_host_defaults_folder",
+          "columns": [
+            "folder_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_defaults_user_id_users_id_fk": {
+          "name": "host_defaults_user_id_users_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_defaults_folder_id_ssh_folders_id_fk": {
+          "name": "host_defaults_folder_id_ssh_folders_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "ssh_folders",
+          "columnsFrom": [
+            "folder_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "host_defaults_id": {
+          "name": "host_defaults_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "host_protocol_auth": {
+      "name": "host_protocol_auth",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('direct')"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "fields": {
+          "name": "fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "secret_fields": {
+          "name": "secret_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_host_protocol_auth_host_protocol": {
+          "name": "idx_host_protocol_auth_host_protocol",
+          "columns": [
+            "host_id",
+            "protocol"
+          ],
+          "isUnique": true
+        },
+        "idx_host_protocol_auth_user": {
+          "name": "idx_host_protocol_auth_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_protocol_auth_credential": {
+          "name": "idx_host_protocol_auth_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_protocol_auth_host_id_ssh_data_id_fk": {
+          "name": "host_protocol_auth_host_id_ssh_data_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_user_id_users_id_fk": {
+          "name": "host_protocol_auth_user_id_users_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_credential_id_ssh_credentials_id_fk": {
+          "name": "host_protocol_auth_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "host_protocol_auth_id": {
+          "name": "host_protocol_auth_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "host_sidebar_preferences": {
+      "name": "host_sidebar_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "host_sidebar_preferences_user_id_users_id_fk": {
+          "name": "host_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "host_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "host_sidebar_preferences_user_id": {
+          "name": "host_sidebar_preferences_user_id",
+          "columns": [
+            "user_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "ssh_data": {
+      "name": "ssh_data",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "connection_type": {
+          "name": "connection_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('ssh')"
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ip": {
+          "name": "ip",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "port": {
+          "name": "port",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "parent_host_id": {
+          "name": "parent_host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "share_ssh_auth": {
+          "name": "share_ssh_auth",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "force_keyboard_interactive": {
+          "name": "force_keyboard_interactive",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sudo_password": {
+          "name": "sudo_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "override_credential_username": {
+          "name": "override_credential_username",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "jump_hosts": {
+          "name": "jump_hosts",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_check_enabled": {
+          "name": "status_check_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "status_check_interval": {
+          "name": "status_check_interval",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ssh_options": {
+          "name": "ssh_options",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "notes": {
+          "name": "notes",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "enable_ssh": {
+          "name": "enable_ssh",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "ssh_port": {
+          "name": "ssh_port",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": 22
+        },
+        "use_socks5": {
+          "name": "use_socks5",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_host": {
+          "name": "socks5_host",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_port": {
+          "name": "socks5_port",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_username": {
+          "name": "socks5_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_password": {
+          "name": "socks5_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_proxy_chain": {
+          "name": "socks5_proxy_chain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "connection_origin": {
+          "name": "connection_origin",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "port_knock_sequence": {
+          "name": "port_knock_sequence",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_fingerprint": {
+          "name": "host_key_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_type": {
+          "name": "host_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_algorithm": {
+          "name": "host_key_algorithm",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": "('sha256')"
+        },
+        "host_key_first_seen": {
+          "name": "host_key_first_seen",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_last_verified": {
+          "name": "host_key_last_verified",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_changed_count": {
+          "name": "host_key_changed_count",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": 0
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "default_overrides": {
+          "name": "default_overrides",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_ssh_data_user_id": {
+          "name": "idx_ssh_data_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_data_parent_host": {
+          "name": "idx_ssh_data_parent_host",
+          "columns": [
+            "parent_host_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_data_credential": {
+          "name": "idx_ssh_data_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_data_user_id_users_id_fk": {
+          "name": "ssh_data_user_id_users_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_data_parent_host_id_ssh_data_id_fk": {
+          "name": "ssh_data_parent_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "parent_host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "ssh_data_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_data_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ssh_data_id": {
+          "name": "ssh_data_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "ssh_data_sync_id_unique": {
+          "name": "ssh_data_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "checkConstraint": {}
+    },
+    "plugin_install_counts": {
+      "name": "plugin_install_counts",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "count": {
+          "name": "count",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('aggregate-telemetry')"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_plugin_install_counts_plugin_registry": {
+          "name": "idx_plugin_install_counts_plugin_registry",
+          "columns": [
+            "plugin_id",
+            "registry_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "plugin_install_counts_id": {
+          "name": "plugin_install_counts_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_migrations": {
+      "name": "plugin_migrations",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "migration_id": {
+          "name": "migration_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "checksum": {
+          "name": "checksum",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_plugin_migrations_plugin_migration": {
+          "name": "idx_plugin_migrations_plugin_migration",
+          "columns": [
+            "plugin_id",
+            "migration_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_migrations_plugin_id_plugins_id_fk": {
+          "name": "plugin_migrations_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_migrations",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "plugin_migrations_id": {
+          "name": "plugin_migrations_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_permission_grants": {
+      "name": "plugin_permission_grants",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "capability": {
+          "name": "capability",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('admin')"
+        }
+      },
+      "indexes": {
+        "idx_plugin_permission_grants_plugin_capability": {
+          "name": "idx_plugin_permission_grants_plugin_capability",
+          "columns": [
+            "plugin_id",
+            "capability"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_permission_grants_plugin_id_plugins_id_fk": {
+          "name": "plugin_permission_grants_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "plugin_permission_grants_granted_by_users_id_fk": {
+          "name": "plugin_permission_grants_granted_by_users_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "plugin_permission_grants_id": {
+          "name": "plugin_permission_grants_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_registries": {
+      "name": "plugin_registries",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "url": {
+          "name": "url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "kind": {
+          "name": "kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('community')"
+        },
+        "enabled": {
+          "name": "enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "signing_key": {
+          "name": "signing_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_checked_at": {
+          "name": "last_checked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_index_hash": {
+          "name": "last_index_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "plugin_registries_id": {
+          "name": "plugin_registries_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_settings": {
+      "name": "plugin_settings",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "enum('admin','user','host','secret')",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope_id": {
+          "name": "scope_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted": {
+          "name": "encrypted",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_plugin_settings_scope_key": {
+          "name": "idx_plugin_settings_scope_key",
+          "columns": [
+            "plugin_id",
+            "scope",
+            "scope_id",
+            "key"
+          ],
+          "isUnique": true
+        },
+        "idx_plugin_settings_plugin_scope": {
+          "name": "idx_plugin_settings_plugin_scope",
+          "columns": [
+            "plugin_id",
+            "scope"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "plugin_settings_plugin_id_plugins_id_fk": {
+          "name": "plugin_settings_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_settings",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "plugin_settings_id": {
+          "name": "plugin_settings_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_storage": {
+      "name": "plugin_storage",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_plugin_storage_plugin_key": {
+          "name": "idx_plugin_storage_plugin_key",
+          "columns": [
+            "plugin_id",
+            "key"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_storage_plugin_id_plugins_id_fk": {
+          "name": "plugin_storage_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_storage",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "plugin_storage_id": {
+          "name": "plugin_storage_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugins": {
+      "name": "plugins",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "version": {
+          "name": "version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tier": {
+          "name": "tier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('available')"
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('community')"
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "state": {
+          "name": "state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('disabled')"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "installed_at": {
+          "name": "installed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "auto_update": {
+          "name": "auto_update",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "pinned_version": {
+          "name": "pinned_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "manifest_json": {
+          "name": "manifest_json",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {
+        "idx_plugins_registry_id": {
+          "name": "idx_plugins_registry_id",
+          "columns": [
+            "registry_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "plugins_id": {
+          "name": "plugins_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "rbac_applied_defaults": {
+      "name": "rbac_applied_defaults",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "role_name": {
+          "name": "role_name",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission": {
+          "name": "permission",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_rbac_applied_defaults_role_permission": {
+          "name": "idx_rbac_applied_defaults_role_permission",
+          "columns": [
+            "role_name",
+            "permission"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "rbac_applied_defaults_id": {
+          "name": "rbac_applied_defaults_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "rbac_known_permissions": {
+      "name": "rbac_known_permissions",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "permission": {
+          "name": "permission",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "first_seen_at": {
+          "name": "first_seen_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_rbac_known_permissions_permission": {
+          "name": "idx_rbac_known_permissions_permission",
+          "columns": [
+            "permission"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "rbac_known_permissions_id": {
+          "name": "rbac_known_permissions_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "recent_activity": {
+      "name": "recent_activity",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "type": {
+          "name": "type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_name": {
+          "name": "host_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_recent_activity_user_ts": {
+          "name": "idx_recent_activity_user_ts",
+          "columns": [
+            "user_id",
+            "timestamp"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "recent_activity_user_id_users_id_fk": {
+          "name": "recent_activity_user_id_users_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "recent_activity_host_id_ssh_data_id_fk": {
+          "name": "recent_activity_host_id_ssh_data_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "recent_activity_id": {
+          "name": "recent_activity_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "roles": {
+      "name": "roles",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "name": {
+          "name": "name",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "display_name": {
+          "name": "display_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "is_system": {
+          "name": "is_system",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "permissions": {
+          "name": "permissions",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "roles_id": {
+          "name": "roles_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "roles_name_unique": {
+          "name": "roles_name_unique",
+          "columns": [
+            "name"
+          ]
+        }
+      },
+      "checkConstraint": {}
+    },
+    "sessions": {
+      "name": "sessions",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "jwt_token": {
+          "name": "jwt_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "external_session_ref": {
+          "name": "external_session_ref",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "last_active_at": {
+          "name": "last_active_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_sessions_user_id": {
+          "name": "idx_sessions_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_sessions_expires_at": {
+          "name": "idx_sessions_expires_at",
+          "columns": [
+            "expires_at"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sessions_user_id_users_id_fk": {
+          "name": "sessions_user_id_users_id_fk",
+          "tableFrom": "sessions",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "sessions_id": {
+          "name": "sessions_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "settings": {
+      "name": "settings",
+      "columns": {
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "settings_key": {
+          "name": "settings_key",
+          "columns": [
+            "key"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "shared_credential_secrets": {
+      "name": "shared_credential_secrets",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_access_id": {
+          "name": "credential_access_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('password')"
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_shared_credential_secrets_scope": {
+          "name": "idx_shared_credential_secrets_scope",
+          "columns": [
+            "credential_access_id",
+            "target_user_id"
+          ],
+          "isUnique": true
+        },
+        "idx_shared_credential_secrets_target": {
+          "name": "idx_shared_credential_secrets_target",
+          "columns": [
+            "target_user_id",
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "shared_credential_secrets_target_user_id_users_id_fk": {
+          "name": "shared_credential_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_credential_secrets_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_credential_secrets_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_cred_secrets_access_id_fk": {
+          "name": "shared_cred_secrets_access_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "credential_access",
+          "columnsFrom": [
+            "credential_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "shared_credential_secrets_id": {
+          "name": "shared_credential_secrets_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "shared_host_auth_overrides": {
+      "name": "shared_host_auth_overrides",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "shared_host_auth_overrides_host_user_protocol_unique": {
+          "name": "shared_host_auth_overrides_host_user_protocol_unique",
+          "columns": [
+            "host_id",
+            "user_id",
+            "protocol"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "shared_host_auth_overrides_host_id_ssh_data_id_fk": {
+          "name": "shared_host_auth_overrides_host_id_ssh_data_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_user_id_users_id_fk": {
+          "name": "shared_host_auth_overrides_user_id_users_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "shared_host_auth_overrides_id": {
+          "name": "shared_host_auth_overrides_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "shared_host_secrets": {
+      "name": "shared_host_secrets",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_access_id": {
+          "name": "host_access_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "source_type": {
+          "name": "source_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('credential')"
+        },
+        "original_credential_id": {
+          "name": "original_credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_auth_type": {
+          "name": "encrypted_auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_type": {
+          "name": "encrypted_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_domain": {
+          "name": "encrypted_domain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_fields": {
+          "name": "encrypted_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_shared_host_secrets_scope": {
+          "name": "idx_shared_host_secrets_scope",
+          "columns": [
+            "host_access_id",
+            "target_user_id",
+            "protocol"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "shared_host_secrets_host_access_id_host_access_id_fk": {
+          "name": "shared_host_secrets_host_access_id_host_access_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "host_access",
+          "columnsFrom": [
+            "host_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_target_user_id_users_id_fk": {
+          "name": "shared_host_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_original_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_secrets_original_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "original_credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "shared_host_secrets_id": {
+          "name": "shared_host_secrets_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "ssh_credential_usage": {
+      "name": "ssh_credential_usage",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "used_at": {
+          "name": "used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credential_usage_credential": {
+          "name": "idx_ssh_credential_usage_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_credential_usage_user": {
+          "name": "idx_ssh_credential_usage_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_credential_usage_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_credential_usage_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_host_id_ssh_data_id_fk": {
+          "name": "ssh_credential_usage_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_user_id_users_id_fk": {
+          "name": "ssh_credential_usage_user_id_users_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ssh_credential_usage_id": {
+          "name": "ssh_credential_usage_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "ssh_credentials": {
+      "name": "ssh_credentials",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "private_key": {
+          "name": "private_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "detected_key_type": {
+          "name": "detected_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "usage_count": {
+          "name": "usage_count",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "last_used": {
+          "name": "last_used",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credentials_user_id": {
+          "name": "idx_ssh_credentials_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_credentials_user_id_users_id_fk": {
+          "name": "ssh_credentials_user_id_users_id_fk",
+          "tableFrom": "ssh_credentials",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ssh_credentials_id": {
+          "name": "ssh_credentials_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "ssh_credentials_sync_id_unique": {
+          "name": "ssh_credentials_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "checkConstraint": {}
+    },
+    "ssh_folders": {
+      "name": "ssh_folders",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "color": {
+          "name": "color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "icon": {
+          "name": "icon",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_ssh_folders_user_id": {
+          "name": "idx_ssh_folders_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_folders_user_id_users_id_fk": {
+          "name": "ssh_folders_user_id_users_id_fk",
+          "tableFrom": "ssh_folders",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ssh_folders_id": {
+          "name": "ssh_folders_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "ssh_folders_sync_id_unique": {
+          "name": "ssh_folders_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "checkConstraint": {}
+    },
+    "sync_conflicts": {
+      "name": "sync_conflicts",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "local_row": {
+          "name": "local_row",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_revision": {
+          "name": "server_revision",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_sync_conflicts_user": {
+          "name": "idx_sync_conflicts_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sync_conflicts_user_id_users_id_fk": {
+          "name": "sync_conflicts_user_id_users_id_fk",
+          "tableFrom": "sync_conflicts",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "sync_conflicts_id": {
+          "name": "sync_conflicts_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "sync_link": {
+      "name": "sync_link",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_url": {
+          "name": "server_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_name": {
+          "name": "server_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "server_version": {
+          "name": "server_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "session_token": {
+          "name": "session_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "custom_headers": {
+          "name": "custom_headers",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "basic_auth": {
+          "name": "basic_auth",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "allow_invalid_certificate": {
+          "name": "allow_invalid_certificate",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "remote_user_id": {
+          "name": "remote_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "remote_username": {
+          "name": "remote_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "account": {
+          "name": "account",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "known_types": {
+          "name": "known_types",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cursor": {
+          "name": "cursor",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('idle')"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "linked_at": {
+          "name": "linked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "last_sync_at": {
+          "name": "last_sync_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "sync_link_user_id_users_id_fk": {
+          "name": "sync_link_user_id_users_id_fk",
+          "tableFrom": "sync_link",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "sync_link_id": {
+          "name": "sync_link_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "sync_records": {
+      "name": "sync_records",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "revision": {
+          "name": "revision",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "seq": {
+          "name": "seq",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "hash": {
+          "name": "hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "deleted": {
+          "name": "deleted",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "error": {
+          "name": "error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "error_hash": {
+          "name": "error_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_sync_records_user_entity_sync": {
+          "name": "idx_sync_records_user_entity_sync",
+          "columns": [
+            "user_id",
+            "entity_type",
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_sync_records_user_seq": {
+          "name": "idx_sync_records_user_seq",
+          "columns": [
+            "user_id",
+            "seq"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sync_records_user_id_users_id_fk": {
+          "name": "sync_records_user_id_users_id_fk",
+          "tableFrom": "sync_records",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "sync_records_id": {
+          "name": "sync_records_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "trusted_devices": {
+      "name": "trusted_devices",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_fingerprint": {
+          "name": "device_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_trusted_devices_user_id": {
+          "name": "idx_trusted_devices_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "trusted_devices_user_id_users_id_fk": {
+          "name": "trusted_devices_user_id_users_id_fk",
+          "tableFrom": "trusted_devices",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "trusted_devices_id": {
+          "name": "trusted_devices_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "ui_preferences": {
+      "name": "ui_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "ui_preferences_user_id_users_id_fk": {
+          "name": "ui_preferences_user_id_users_id_fk",
+          "tableFrom": "ui_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ui_preferences_user_id": {
+          "name": "ui_preferences_user_id",
+          "columns": [
+            "user_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_external_identities": {
+      "name": "user_external_identities",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "provider_id": {
+          "name": "provider_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "subject": {
+          "name": "subject",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_user_external_identities_provider_subject": {
+          "name": "idx_user_external_identities_provider_subject",
+          "columns": [
+            "provider_id",
+            "subject"
+          ],
+          "isUnique": true
+        },
+        "idx_user_external_identities_user": {
+          "name": "idx_user_external_identities_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_external_identities_user_id_users_id_fk": {
+          "name": "user_external_identities_user_id_users_id_fk",
+          "tableFrom": "user_external_identities",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_external_identities_id": {
+          "name": "user_external_identities_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_open_tabs": {
+      "name": "user_open_tabs",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tab_type": {
+          "name": "tab_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "label": {
+          "name": "label",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tab_order": {
+          "name": "tab_order",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "backend_session_id": {
+          "name": "backend_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_user_open_tabs_user_id": {
+          "name": "idx_user_open_tabs_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_open_tabs_user_id_users_id_fk": {
+          "name": "user_open_tabs_user_id_users_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_open_tabs_host_id_ssh_data_id_fk": {
+          "name": "user_open_tabs_host_id_ssh_data_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_open_tabs_id": {
+          "name": "user_open_tabs_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_preferences": {
+      "name": "user_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "reopen_tabs_on_login": {
+          "name": "reopen_tabs_on_login",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "theme": {
+          "name": "theme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "font_size": {
+          "name": "font_size",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "accent_color": {
+          "name": "accent_color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "language": {
+          "name": "language",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "storage_mode": {
+          "name": "storage_mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "command_palette_enabled": {
+          "name": "command_palette_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "show_host_tags": {
+          "name": "show_host_tags",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_tray_on_click": {
+          "name": "host_tray_on_click",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin_app_rail": {
+          "name": "pin_app_rail",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "expand_app_rail_on_hover": {
+          "name": "expand_app_rail_on_hover",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "show_pin_app_rail_button": {
+          "name": "show_pin_app_rail_button",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folders_collapsed": {
+          "name": "folders_collapsed",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "disable_update_check": {
+          "name": "disable_update_check",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "confirm_tab_close": {
+          "name": "confirm_tab_close",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "hidden_rail_tabs": {
+          "name": "hidden_rail_tabs",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "compact_host_view": {
+          "name": "compact_host_view",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_color_scheme": {
+          "name": "status_color_scheme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "custom_keybindings": {
+          "name": "custom_keybindings",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "user_preferences_user_id_users_id_fk": {
+          "name": "user_preferences_user_id_users_id_fk",
+          "tableFrom": "user_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_preferences_user_id": {
+          "name": "user_preferences_user_id",
+          "columns": [
+            "user_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_roles": {
+      "name": "user_roles",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_user_roles_user_role": {
+          "name": "idx_user_roles_user_role",
+          "columns": [
+            "user_id",
+            "role_id"
+          ],
+          "isUnique": true
+        },
+        "idx_user_roles_role_id": {
+          "name": "idx_user_roles_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_roles_user_id_users_id_fk": {
+          "name": "user_roles_user_id_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_role_id_roles_id_fk": {
+          "name": "user_roles_role_id_roles_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_granted_by_users_id_fk": {
+          "name": "user_roles_granted_by_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_roles_id": {
+          "name": "user_roles_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_second_factors": {
+      "name": "user_second_factors",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "factor_id": {
+          "name": "factor_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "enrolled_at": {
+          "name": "enrolled_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_user_second_factors_user_factor": {
+          "name": "idx_user_second_factors_user_factor",
+          "columns": [
+            "user_id",
+            "plugin_id",
+            "factor_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "user_second_factors_user_id_users_id_fk": {
+          "name": "user_second_factors_user_id_users_id_fk",
+          "tableFrom": "user_second_factors",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_second_factors_id": {
+          "name": "user_second_factors_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "users": {
+      "name": "users",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "password_hash": {
+          "name": "password_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "is_admin": {
+          "name": "is_admin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "registered_at": {
+          "name": "registered_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "donation_modal_dismissed": {
+          "name": "donation_modal_dismissed",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "users_id": {
+          "name": "users_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    }
+  },
+  "views": {},
+  "_meta": {
+    "schemas": {},
+    "tables": {},
+    "columns": {}
+  },
+  "internal": {
+    "tables": {},
+    "indexes": {}
+  }
+}
\ No newline at end of file
diff --git a/drizzle/mysql/meta/0069_snapshot.json b/drizzle/mysql/meta/0069_snapshot.json
new file mode 100644
index 000000000..69ab3503e
--- /dev/null
+++ b/drizzle/mysql/meta/0069_snapshot.json
@@ -0,0 +1,4753 @@
+{
+  "version": "5",
+  "dialect": "mysql",
+  "id": "defefebd-f15d-4754-bf1b-0be8dd7be872",
+  "prevId": "5b26c0bd-97f5-4351-859b-b28056467f20",
+  "tables": {
+    "api_keys": {
+      "name": "api_keys",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "token_hash": {
+          "name": "token_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "token_prefix": {
+          "name": "token_prefix",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "is_active": {
+          "name": "is_active",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        }
+      },
+      "indexes": {
+        "idx_api_keys_user_id": {
+          "name": "idx_api_keys_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "api_keys_user_id_users_id_fk": {
+          "name": "api_keys_user_id_users_id_fk",
+          "tableFrom": "api_keys",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "api_keys_id": {
+          "name": "api_keys_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "audit_logs": {
+      "name": "audit_logs",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "action": {
+          "name": "action",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "resource_type": {
+          "name": "resource_type",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "resource_id": {
+          "name": "resource_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "resource_name": {
+          "name": "resource_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "details": {
+          "name": "details",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ip_address": {
+          "name": "ip_address",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "user_agent": {
+          "name": "user_agent",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "success": {
+          "name": "success",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_audit_logs_timestamp": {
+          "name": "idx_audit_logs_timestamp",
+          "columns": [
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_user_ts": {
+          "name": "idx_audit_logs_user_ts",
+          "columns": [
+            "user_id",
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_action_ts": {
+          "name": "idx_audit_logs_action_ts",
+          "columns": [
+            "action",
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_resource_ts": {
+          "name": "idx_audit_logs_resource_ts",
+          "columns": [
+            "resource_type",
+            "timestamp"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "audit_logs_user_id_users_id_fk": {
+          "name": "audit_logs_user_id_users_id_fk",
+          "tableFrom": "audit_logs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "audit_logs_id": {
+          "name": "audit_logs_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "credential_access": {
+      "name": "credential_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('use')"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_credential_access_user_id": {
+          "name": "idx_credential_access_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_credential_access_role_id": {
+          "name": "idx_credential_access_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        },
+        "idx_credential_access_credential_id": {
+          "name": "idx_credential_access_credential_id",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "credential_access_credential_id_ssh_credentials_id_fk": {
+          "name": "credential_access_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_user_id_users_id_fk": {
+          "name": "credential_access_user_id_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_role_id_roles_id_fk": {
+          "name": "credential_access_role_id_roles_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_granted_by_users_id_fk": {
+          "name": "credential_access_granted_by_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "credential_access_id": {
+          "name": "credential_access_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "credential_sidebar_preferences": {
+      "name": "credential_sidebar_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "credential_sidebar_preferences_user_id_users_id_fk": {
+          "name": "credential_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "credential_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "credential_sidebar_preferences_user_id": {
+          "name": "credential_sidebar_preferences_user_id",
+          "columns": [
+            "user_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "folder_access": {
+      "name": "folder_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "owner_user_id": {
+          "name": "owner_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('connect')"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_folder_access_owner_folder": {
+          "name": "idx_folder_access_owner_folder",
+          "columns": [
+            "owner_user_id",
+            "folder"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "folder_access_owner_user_id_users_id_fk": {
+          "name": "folder_access_owner_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "owner_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_user_id_users_id_fk": {
+          "name": "folder_access_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_role_id_roles_id_fk": {
+          "name": "folder_access_role_id_roles_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_granted_by_users_id_fk": {
+          "name": "folder_access_granted_by_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "folder_access_id": {
+          "name": "folder_access_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "host_access": {
+      "name": "host_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('connect')"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "last_accessed_at": {
+          "name": "last_accessed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "access_count": {
+          "name": "access_count",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        }
+      },
+      "indexes": {
+        "idx_host_access_user_id": {
+          "name": "idx_host_access_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_role_id": {
+          "name": "idx_host_access_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_host_id": {
+          "name": "idx_host_access_host_id",
+          "columns": [
+            "host_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_expires_at": {
+          "name": "idx_host_access_expires_at",
+          "columns": [
+            "expires_at"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_access_host_id_ssh_data_id_fk": {
+          "name": "host_access_host_id_ssh_data_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_user_id_users_id_fk": {
+          "name": "host_access_user_id_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_role_id_roles_id_fk": {
+          "name": "host_access_role_id_roles_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_granted_by_users_id_fk": {
+          "name": "host_access_granted_by_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "host_access_id": {
+          "name": "host_access_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "host_defaults": {
+      "name": "host_defaults",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "level": {
+          "name": "level",
+          "type": "enum('admin','user','folder')",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope_key": {
+          "name": "scope_key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folder_id": {
+          "name": "folder_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "namespace": {
+          "name": "namespace",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_by": {
+          "name": "updated_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_host_defaults_scope_key": {
+          "name": "idx_host_defaults_scope_key",
+          "columns": [
+            "scope_key",
+            "namespace",
+            "key"
+          ],
+          "isUnique": true
+        },
+        "idx_host_defaults_user": {
+          "name": "idx_host_defaults_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_defaults_folder": {
+          "name": "idx_host_defaults_folder",
+          "columns": [
+            "folder_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_defaults_user_id_users_id_fk": {
+          "name": "host_defaults_user_id_users_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_defaults_folder_id_ssh_folders_id_fk": {
+          "name": "host_defaults_folder_id_ssh_folders_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "ssh_folders",
+          "columnsFrom": [
+            "folder_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "host_defaults_id": {
+          "name": "host_defaults_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "host_protocol_auth": {
+      "name": "host_protocol_auth",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('direct')"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "fields": {
+          "name": "fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "secret_fields": {
+          "name": "secret_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_host_protocol_auth_host_protocol": {
+          "name": "idx_host_protocol_auth_host_protocol",
+          "columns": [
+            "host_id",
+            "protocol"
+          ],
+          "isUnique": true
+        },
+        "idx_host_protocol_auth_user": {
+          "name": "idx_host_protocol_auth_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_protocol_auth_credential": {
+          "name": "idx_host_protocol_auth_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_protocol_auth_host_id_ssh_data_id_fk": {
+          "name": "host_protocol_auth_host_id_ssh_data_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_user_id_users_id_fk": {
+          "name": "host_protocol_auth_user_id_users_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_credential_id_ssh_credentials_id_fk": {
+          "name": "host_protocol_auth_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "host_protocol_auth_id": {
+          "name": "host_protocol_auth_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "host_sidebar_preferences": {
+      "name": "host_sidebar_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "host_sidebar_preferences_user_id_users_id_fk": {
+          "name": "host_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "host_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "host_sidebar_preferences_user_id": {
+          "name": "host_sidebar_preferences_user_id",
+          "columns": [
+            "user_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "ssh_data": {
+      "name": "ssh_data",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "connection_type": {
+          "name": "connection_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('ssh')"
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ip": {
+          "name": "ip",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "port": {
+          "name": "port",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "parent_host_id": {
+          "name": "parent_host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "share_ssh_auth": {
+          "name": "share_ssh_auth",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "force_keyboard_interactive": {
+          "name": "force_keyboard_interactive",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sudo_password": {
+          "name": "sudo_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "override_credential_username": {
+          "name": "override_credential_username",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "jump_hosts": {
+          "name": "jump_hosts",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_check_enabled": {
+          "name": "status_check_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "status_check_interval": {
+          "name": "status_check_interval",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ssh_options": {
+          "name": "ssh_options",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "notes": {
+          "name": "notes",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "enable_ssh": {
+          "name": "enable_ssh",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "ssh_port": {
+          "name": "ssh_port",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": 22
+        },
+        "use_socks5": {
+          "name": "use_socks5",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_host": {
+          "name": "socks5_host",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_port": {
+          "name": "socks5_port",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_username": {
+          "name": "socks5_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_password": {
+          "name": "socks5_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_proxy_chain": {
+          "name": "socks5_proxy_chain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "connection_origin": {
+          "name": "connection_origin",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "port_knock_sequence": {
+          "name": "port_knock_sequence",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_fingerprint": {
+          "name": "host_key_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_type": {
+          "name": "host_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_algorithm": {
+          "name": "host_key_algorithm",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": "('sha256')"
+        },
+        "host_key_first_seen": {
+          "name": "host_key_first_seen",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_last_verified": {
+          "name": "host_key_last_verified",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_changed_count": {
+          "name": "host_key_changed_count",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": 0
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "default_overrides": {
+          "name": "default_overrides",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_ssh_data_user_id": {
+          "name": "idx_ssh_data_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_data_parent_host": {
+          "name": "idx_ssh_data_parent_host",
+          "columns": [
+            "parent_host_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_data_credential": {
+          "name": "idx_ssh_data_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_data_user_id_users_id_fk": {
+          "name": "ssh_data_user_id_users_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_data_parent_host_id_ssh_data_id_fk": {
+          "name": "ssh_data_parent_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "parent_host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "ssh_data_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_data_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ssh_data_id": {
+          "name": "ssh_data_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "ssh_data_sync_id_unique": {
+          "name": "ssh_data_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "checkConstraint": {}
+    },
+    "plugin_install_counts": {
+      "name": "plugin_install_counts",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "count": {
+          "name": "count",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('aggregate-telemetry')"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_plugin_install_counts_plugin_registry": {
+          "name": "idx_plugin_install_counts_plugin_registry",
+          "columns": [
+            "plugin_id",
+            "registry_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "plugin_install_counts_id": {
+          "name": "plugin_install_counts_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_migrations": {
+      "name": "plugin_migrations",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "migration_id": {
+          "name": "migration_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "checksum": {
+          "name": "checksum",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_plugin_migrations_plugin_migration": {
+          "name": "idx_plugin_migrations_plugin_migration",
+          "columns": [
+            "plugin_id",
+            "migration_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_migrations_plugin_id_plugins_id_fk": {
+          "name": "plugin_migrations_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_migrations",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "plugin_migrations_id": {
+          "name": "plugin_migrations_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_permission_grants": {
+      "name": "plugin_permission_grants",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "capability": {
+          "name": "capability",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('admin')"
+        }
+      },
+      "indexes": {
+        "idx_plugin_permission_grants_plugin_capability": {
+          "name": "idx_plugin_permission_grants_plugin_capability",
+          "columns": [
+            "plugin_id",
+            "capability"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_permission_grants_plugin_id_plugins_id_fk": {
+          "name": "plugin_permission_grants_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "plugin_permission_grants_granted_by_users_id_fk": {
+          "name": "plugin_permission_grants_granted_by_users_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "plugin_permission_grants_id": {
+          "name": "plugin_permission_grants_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_registries": {
+      "name": "plugin_registries",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "url": {
+          "name": "url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "kind": {
+          "name": "kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('community')"
+        },
+        "enabled": {
+          "name": "enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "signing_key": {
+          "name": "signing_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_checked_at": {
+          "name": "last_checked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_index_hash": {
+          "name": "last_index_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "plugin_registries_id": {
+          "name": "plugin_registries_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_settings": {
+      "name": "plugin_settings",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "enum('admin','user','host','secret')",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope_id": {
+          "name": "scope_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted": {
+          "name": "encrypted",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_plugin_settings_scope_key": {
+          "name": "idx_plugin_settings_scope_key",
+          "columns": [
+            "plugin_id",
+            "scope",
+            "scope_id",
+            "key"
+          ],
+          "isUnique": true
+        },
+        "idx_plugin_settings_plugin_scope": {
+          "name": "idx_plugin_settings_plugin_scope",
+          "columns": [
+            "plugin_id",
+            "scope"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "plugin_settings_plugin_id_plugins_id_fk": {
+          "name": "plugin_settings_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_settings",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "plugin_settings_id": {
+          "name": "plugin_settings_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_storage": {
+      "name": "plugin_storage",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_plugin_storage_plugin_key": {
+          "name": "idx_plugin_storage_plugin_key",
+          "columns": [
+            "plugin_id",
+            "key"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_storage_plugin_id_plugins_id_fk": {
+          "name": "plugin_storage_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_storage",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "plugin_storage_id": {
+          "name": "plugin_storage_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugins": {
+      "name": "plugins",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "version": {
+          "name": "version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tier": {
+          "name": "tier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('available')"
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('community')"
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "state": {
+          "name": "state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('disabled')"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "installed_at": {
+          "name": "installed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "auto_update": {
+          "name": "auto_update",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "pinned_version": {
+          "name": "pinned_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "channel": {
+          "name": "channel",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('stable')"
+        },
+        "manifest_json": {
+          "name": "manifest_json",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {
+        "idx_plugins_registry_id": {
+          "name": "idx_plugins_registry_id",
+          "columns": [
+            "registry_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "plugins_id": {
+          "name": "plugins_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "rbac_applied_defaults": {
+      "name": "rbac_applied_defaults",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "role_name": {
+          "name": "role_name",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission": {
+          "name": "permission",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_rbac_applied_defaults_role_permission": {
+          "name": "idx_rbac_applied_defaults_role_permission",
+          "columns": [
+            "role_name",
+            "permission"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "rbac_applied_defaults_id": {
+          "name": "rbac_applied_defaults_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "rbac_known_permissions": {
+      "name": "rbac_known_permissions",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "permission": {
+          "name": "permission",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "first_seen_at": {
+          "name": "first_seen_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_rbac_known_permissions_permission": {
+          "name": "idx_rbac_known_permissions_permission",
+          "columns": [
+            "permission"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "rbac_known_permissions_id": {
+          "name": "rbac_known_permissions_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "recent_activity": {
+      "name": "recent_activity",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "type": {
+          "name": "type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_name": {
+          "name": "host_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_recent_activity_user_ts": {
+          "name": "idx_recent_activity_user_ts",
+          "columns": [
+            "user_id",
+            "timestamp"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "recent_activity_user_id_users_id_fk": {
+          "name": "recent_activity_user_id_users_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "recent_activity_host_id_ssh_data_id_fk": {
+          "name": "recent_activity_host_id_ssh_data_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "recent_activity_id": {
+          "name": "recent_activity_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "roles": {
+      "name": "roles",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "name": {
+          "name": "name",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "display_name": {
+          "name": "display_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "is_system": {
+          "name": "is_system",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "permissions": {
+          "name": "permissions",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "roles_id": {
+          "name": "roles_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "roles_name_unique": {
+          "name": "roles_name_unique",
+          "columns": [
+            "name"
+          ]
+        }
+      },
+      "checkConstraint": {}
+    },
+    "sessions": {
+      "name": "sessions",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "jwt_token": {
+          "name": "jwt_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "external_session_ref": {
+          "name": "external_session_ref",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "last_active_at": {
+          "name": "last_active_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_sessions_user_id": {
+          "name": "idx_sessions_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_sessions_expires_at": {
+          "name": "idx_sessions_expires_at",
+          "columns": [
+            "expires_at"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sessions_user_id_users_id_fk": {
+          "name": "sessions_user_id_users_id_fk",
+          "tableFrom": "sessions",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "sessions_id": {
+          "name": "sessions_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "settings": {
+      "name": "settings",
+      "columns": {
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "settings_key": {
+          "name": "settings_key",
+          "columns": [
+            "key"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "shared_credential_secrets": {
+      "name": "shared_credential_secrets",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_access_id": {
+          "name": "credential_access_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('password')"
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_shared_credential_secrets_scope": {
+          "name": "idx_shared_credential_secrets_scope",
+          "columns": [
+            "credential_access_id",
+            "target_user_id"
+          ],
+          "isUnique": true
+        },
+        "idx_shared_credential_secrets_target": {
+          "name": "idx_shared_credential_secrets_target",
+          "columns": [
+            "target_user_id",
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "shared_credential_secrets_target_user_id_users_id_fk": {
+          "name": "shared_credential_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_credential_secrets_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_credential_secrets_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_cred_secrets_access_id_fk": {
+          "name": "shared_cred_secrets_access_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "credential_access",
+          "columnsFrom": [
+            "credential_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "shared_credential_secrets_id": {
+          "name": "shared_credential_secrets_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "shared_host_auth_overrides": {
+      "name": "shared_host_auth_overrides",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "shared_host_auth_overrides_host_user_protocol_unique": {
+          "name": "shared_host_auth_overrides_host_user_protocol_unique",
+          "columns": [
+            "host_id",
+            "user_id",
+            "protocol"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "shared_host_auth_overrides_host_id_ssh_data_id_fk": {
+          "name": "shared_host_auth_overrides_host_id_ssh_data_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_user_id_users_id_fk": {
+          "name": "shared_host_auth_overrides_user_id_users_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "shared_host_auth_overrides_id": {
+          "name": "shared_host_auth_overrides_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "shared_host_secrets": {
+      "name": "shared_host_secrets",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_access_id": {
+          "name": "host_access_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "source_type": {
+          "name": "source_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('credential')"
+        },
+        "original_credential_id": {
+          "name": "original_credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_auth_type": {
+          "name": "encrypted_auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_type": {
+          "name": "encrypted_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_domain": {
+          "name": "encrypted_domain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_fields": {
+          "name": "encrypted_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_shared_host_secrets_scope": {
+          "name": "idx_shared_host_secrets_scope",
+          "columns": [
+            "host_access_id",
+            "target_user_id",
+            "protocol"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "shared_host_secrets_host_access_id_host_access_id_fk": {
+          "name": "shared_host_secrets_host_access_id_host_access_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "host_access",
+          "columnsFrom": [
+            "host_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_target_user_id_users_id_fk": {
+          "name": "shared_host_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_original_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_secrets_original_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "original_credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "shared_host_secrets_id": {
+          "name": "shared_host_secrets_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "ssh_credential_usage": {
+      "name": "ssh_credential_usage",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "used_at": {
+          "name": "used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credential_usage_credential": {
+          "name": "idx_ssh_credential_usage_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_credential_usage_user": {
+          "name": "idx_ssh_credential_usage_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_credential_usage_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_credential_usage_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_host_id_ssh_data_id_fk": {
+          "name": "ssh_credential_usage_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_user_id_users_id_fk": {
+          "name": "ssh_credential_usage_user_id_users_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ssh_credential_usage_id": {
+          "name": "ssh_credential_usage_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "ssh_credentials": {
+      "name": "ssh_credentials",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "private_key": {
+          "name": "private_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "detected_key_type": {
+          "name": "detected_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "usage_count": {
+          "name": "usage_count",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "last_used": {
+          "name": "last_used",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credentials_user_id": {
+          "name": "idx_ssh_credentials_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_credentials_user_id_users_id_fk": {
+          "name": "ssh_credentials_user_id_users_id_fk",
+          "tableFrom": "ssh_credentials",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ssh_credentials_id": {
+          "name": "ssh_credentials_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "ssh_credentials_sync_id_unique": {
+          "name": "ssh_credentials_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "checkConstraint": {}
+    },
+    "ssh_folders": {
+      "name": "ssh_folders",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "color": {
+          "name": "color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "icon": {
+          "name": "icon",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_ssh_folders_user_id": {
+          "name": "idx_ssh_folders_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_folders_user_id_users_id_fk": {
+          "name": "ssh_folders_user_id_users_id_fk",
+          "tableFrom": "ssh_folders",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ssh_folders_id": {
+          "name": "ssh_folders_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "ssh_folders_sync_id_unique": {
+          "name": "ssh_folders_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "checkConstraint": {}
+    },
+    "sync_conflicts": {
+      "name": "sync_conflicts",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "local_row": {
+          "name": "local_row",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_revision": {
+          "name": "server_revision",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_sync_conflicts_user": {
+          "name": "idx_sync_conflicts_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sync_conflicts_user_id_users_id_fk": {
+          "name": "sync_conflicts_user_id_users_id_fk",
+          "tableFrom": "sync_conflicts",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "sync_conflicts_id": {
+          "name": "sync_conflicts_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "sync_link": {
+      "name": "sync_link",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_url": {
+          "name": "server_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_name": {
+          "name": "server_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "server_version": {
+          "name": "server_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "session_token": {
+          "name": "session_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "custom_headers": {
+          "name": "custom_headers",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "basic_auth": {
+          "name": "basic_auth",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "allow_invalid_certificate": {
+          "name": "allow_invalid_certificate",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "remote_user_id": {
+          "name": "remote_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "remote_username": {
+          "name": "remote_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "account": {
+          "name": "account",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "known_types": {
+          "name": "known_types",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cursor": {
+          "name": "cursor",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('idle')"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "linked_at": {
+          "name": "linked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "last_sync_at": {
+          "name": "last_sync_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "sync_link_user_id_users_id_fk": {
+          "name": "sync_link_user_id_users_id_fk",
+          "tableFrom": "sync_link",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "sync_link_id": {
+          "name": "sync_link_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "sync_records": {
+      "name": "sync_records",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "revision": {
+          "name": "revision",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "seq": {
+          "name": "seq",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "hash": {
+          "name": "hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "deleted": {
+          "name": "deleted",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "error": {
+          "name": "error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "error_hash": {
+          "name": "error_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_sync_records_user_entity_sync": {
+          "name": "idx_sync_records_user_entity_sync",
+          "columns": [
+            "user_id",
+            "entity_type",
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_sync_records_user_seq": {
+          "name": "idx_sync_records_user_seq",
+          "columns": [
+            "user_id",
+            "seq"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sync_records_user_id_users_id_fk": {
+          "name": "sync_records_user_id_users_id_fk",
+          "tableFrom": "sync_records",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "sync_records_id": {
+          "name": "sync_records_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "trusted_devices": {
+      "name": "trusted_devices",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_fingerprint": {
+          "name": "device_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_trusted_devices_user_id": {
+          "name": "idx_trusted_devices_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "trusted_devices_user_id_users_id_fk": {
+          "name": "trusted_devices_user_id_users_id_fk",
+          "tableFrom": "trusted_devices",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "trusted_devices_id": {
+          "name": "trusted_devices_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "ui_preferences": {
+      "name": "ui_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "ui_preferences_user_id_users_id_fk": {
+          "name": "ui_preferences_user_id_users_id_fk",
+          "tableFrom": "ui_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ui_preferences_user_id": {
+          "name": "ui_preferences_user_id",
+          "columns": [
+            "user_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_external_identities": {
+      "name": "user_external_identities",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "provider_id": {
+          "name": "provider_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "subject": {
+          "name": "subject",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_user_external_identities_provider_subject": {
+          "name": "idx_user_external_identities_provider_subject",
+          "columns": [
+            "provider_id",
+            "subject"
+          ],
+          "isUnique": true
+        },
+        "idx_user_external_identities_user": {
+          "name": "idx_user_external_identities_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_external_identities_user_id_users_id_fk": {
+          "name": "user_external_identities_user_id_users_id_fk",
+          "tableFrom": "user_external_identities",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_external_identities_id": {
+          "name": "user_external_identities_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_open_tabs": {
+      "name": "user_open_tabs",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tab_type": {
+          "name": "tab_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "label": {
+          "name": "label",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tab_order": {
+          "name": "tab_order",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "backend_session_id": {
+          "name": "backend_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_user_open_tabs_user_id": {
+          "name": "idx_user_open_tabs_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_open_tabs_user_id_users_id_fk": {
+          "name": "user_open_tabs_user_id_users_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_open_tabs_host_id_ssh_data_id_fk": {
+          "name": "user_open_tabs_host_id_ssh_data_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_open_tabs_id": {
+          "name": "user_open_tabs_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_preferences": {
+      "name": "user_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "reopen_tabs_on_login": {
+          "name": "reopen_tabs_on_login",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "theme": {
+          "name": "theme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "font_size": {
+          "name": "font_size",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "accent_color": {
+          "name": "accent_color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "language": {
+          "name": "language",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "storage_mode": {
+          "name": "storage_mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "command_palette_enabled": {
+          "name": "command_palette_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "show_host_tags": {
+          "name": "show_host_tags",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_tray_on_click": {
+          "name": "host_tray_on_click",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin_app_rail": {
+          "name": "pin_app_rail",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "expand_app_rail_on_hover": {
+          "name": "expand_app_rail_on_hover",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "show_pin_app_rail_button": {
+          "name": "show_pin_app_rail_button",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folders_collapsed": {
+          "name": "folders_collapsed",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "disable_update_check": {
+          "name": "disable_update_check",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "confirm_tab_close": {
+          "name": "confirm_tab_close",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "hidden_rail_tabs": {
+          "name": "hidden_rail_tabs",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "compact_host_view": {
+          "name": "compact_host_view",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_color_scheme": {
+          "name": "status_color_scheme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "custom_keybindings": {
+          "name": "custom_keybindings",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "user_preferences_user_id_users_id_fk": {
+          "name": "user_preferences_user_id_users_id_fk",
+          "tableFrom": "user_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_preferences_user_id": {
+          "name": "user_preferences_user_id",
+          "columns": [
+            "user_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_roles": {
+      "name": "user_roles",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_user_roles_user_role": {
+          "name": "idx_user_roles_user_role",
+          "columns": [
+            "user_id",
+            "role_id"
+          ],
+          "isUnique": true
+        },
+        "idx_user_roles_role_id": {
+          "name": "idx_user_roles_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_roles_user_id_users_id_fk": {
+          "name": "user_roles_user_id_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_role_id_roles_id_fk": {
+          "name": "user_roles_role_id_roles_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_granted_by_users_id_fk": {
+          "name": "user_roles_granted_by_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_roles_id": {
+          "name": "user_roles_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_second_factors": {
+      "name": "user_second_factors",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "factor_id": {
+          "name": "factor_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "enrolled_at": {
+          "name": "enrolled_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_user_second_factors_user_factor": {
+          "name": "idx_user_second_factors_user_factor",
+          "columns": [
+            "user_id",
+            "plugin_id",
+            "factor_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "user_second_factors_user_id_users_id_fk": {
+          "name": "user_second_factors_user_id_users_id_fk",
+          "tableFrom": "user_second_factors",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_second_factors_id": {
+          "name": "user_second_factors_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "users": {
+      "name": "users",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "password_hash": {
+          "name": "password_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "is_admin": {
+          "name": "is_admin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "registered_at": {
+          "name": "registered_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "donation_modal_dismissed": {
+          "name": "donation_modal_dismissed",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "users_id": {
+          "name": "users_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    }
+  },
+  "views": {},
+  "_meta": {
+    "schemas": {},
+    "tables": {},
+    "columns": {}
+  },
+  "internal": {
+    "tables": {},
+    "indexes": {}
+  }
+}
\ No newline at end of file
diff --git a/drizzle/mysql/meta/0070_snapshot.json b/drizzle/mysql/meta/0070_snapshot.json
new file mode 100644
index 000000000..bf80530d0
--- /dev/null
+++ b/drizzle/mysql/meta/0070_snapshot.json
@@ -0,0 +1,4745 @@
+{
+  "version": "5",
+  "dialect": "mysql",
+  "id": "dd028966-4309-4238-8385-f189bf1e5778",
+  "prevId": "defefebd-f15d-4754-bf1b-0be8dd7be872",
+  "tables": {
+    "api_keys": {
+      "name": "api_keys",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "token_hash": {
+          "name": "token_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "token_prefix": {
+          "name": "token_prefix",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "is_active": {
+          "name": "is_active",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        }
+      },
+      "indexes": {
+        "idx_api_keys_user_id": {
+          "name": "idx_api_keys_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "api_keys_user_id_users_id_fk": {
+          "name": "api_keys_user_id_users_id_fk",
+          "tableFrom": "api_keys",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "api_keys_id": {
+          "name": "api_keys_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "audit_logs": {
+      "name": "audit_logs",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "action": {
+          "name": "action",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "resource_type": {
+          "name": "resource_type",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "resource_id": {
+          "name": "resource_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "resource_name": {
+          "name": "resource_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "details": {
+          "name": "details",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ip_address": {
+          "name": "ip_address",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "user_agent": {
+          "name": "user_agent",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "success": {
+          "name": "success",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_audit_logs_timestamp": {
+          "name": "idx_audit_logs_timestamp",
+          "columns": [
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_user_ts": {
+          "name": "idx_audit_logs_user_ts",
+          "columns": [
+            "user_id",
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_action_ts": {
+          "name": "idx_audit_logs_action_ts",
+          "columns": [
+            "action",
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_resource_ts": {
+          "name": "idx_audit_logs_resource_ts",
+          "columns": [
+            "resource_type",
+            "timestamp"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "audit_logs_user_id_users_id_fk": {
+          "name": "audit_logs_user_id_users_id_fk",
+          "tableFrom": "audit_logs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "audit_logs_id": {
+          "name": "audit_logs_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "credential_access": {
+      "name": "credential_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('use')"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_credential_access_user_id": {
+          "name": "idx_credential_access_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_credential_access_role_id": {
+          "name": "idx_credential_access_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        },
+        "idx_credential_access_credential_id": {
+          "name": "idx_credential_access_credential_id",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "credential_access_credential_id_ssh_credentials_id_fk": {
+          "name": "credential_access_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_user_id_users_id_fk": {
+          "name": "credential_access_user_id_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_role_id_roles_id_fk": {
+          "name": "credential_access_role_id_roles_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_granted_by_users_id_fk": {
+          "name": "credential_access_granted_by_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "credential_access_id": {
+          "name": "credential_access_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "credential_sidebar_preferences": {
+      "name": "credential_sidebar_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "credential_sidebar_preferences_user_id_users_id_fk": {
+          "name": "credential_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "credential_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "credential_sidebar_preferences_user_id": {
+          "name": "credential_sidebar_preferences_user_id",
+          "columns": [
+            "user_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "folder_access": {
+      "name": "folder_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "owner_user_id": {
+          "name": "owner_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('connect')"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_folder_access_owner_folder": {
+          "name": "idx_folder_access_owner_folder",
+          "columns": [
+            "owner_user_id",
+            "folder"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "folder_access_owner_user_id_users_id_fk": {
+          "name": "folder_access_owner_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "owner_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_user_id_users_id_fk": {
+          "name": "folder_access_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_role_id_roles_id_fk": {
+          "name": "folder_access_role_id_roles_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_granted_by_users_id_fk": {
+          "name": "folder_access_granted_by_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "folder_access_id": {
+          "name": "folder_access_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "host_access": {
+      "name": "host_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('connect')"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "last_accessed_at": {
+          "name": "last_accessed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "access_count": {
+          "name": "access_count",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        }
+      },
+      "indexes": {
+        "idx_host_access_user_id": {
+          "name": "idx_host_access_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_role_id": {
+          "name": "idx_host_access_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_host_id": {
+          "name": "idx_host_access_host_id",
+          "columns": [
+            "host_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_expires_at": {
+          "name": "idx_host_access_expires_at",
+          "columns": [
+            "expires_at"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_access_host_id_ssh_data_id_fk": {
+          "name": "host_access_host_id_ssh_data_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_user_id_users_id_fk": {
+          "name": "host_access_user_id_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_role_id_roles_id_fk": {
+          "name": "host_access_role_id_roles_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_granted_by_users_id_fk": {
+          "name": "host_access_granted_by_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "host_access_id": {
+          "name": "host_access_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "host_defaults": {
+      "name": "host_defaults",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "level": {
+          "name": "level",
+          "type": "enum('admin','user','folder')",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope_key": {
+          "name": "scope_key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folder_id": {
+          "name": "folder_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "namespace": {
+          "name": "namespace",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_by": {
+          "name": "updated_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_host_defaults_scope_key": {
+          "name": "idx_host_defaults_scope_key",
+          "columns": [
+            "scope_key",
+            "namespace",
+            "key"
+          ],
+          "isUnique": true
+        },
+        "idx_host_defaults_user": {
+          "name": "idx_host_defaults_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_defaults_folder": {
+          "name": "idx_host_defaults_folder",
+          "columns": [
+            "folder_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_defaults_user_id_users_id_fk": {
+          "name": "host_defaults_user_id_users_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_defaults_folder_id_ssh_folders_id_fk": {
+          "name": "host_defaults_folder_id_ssh_folders_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "ssh_folders",
+          "columnsFrom": [
+            "folder_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "host_defaults_id": {
+          "name": "host_defaults_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "host_protocol_auth": {
+      "name": "host_protocol_auth",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('direct')"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "fields": {
+          "name": "fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "secret_fields": {
+          "name": "secret_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_host_protocol_auth_host_protocol": {
+          "name": "idx_host_protocol_auth_host_protocol",
+          "columns": [
+            "host_id",
+            "protocol"
+          ],
+          "isUnique": true
+        },
+        "idx_host_protocol_auth_user": {
+          "name": "idx_host_protocol_auth_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_protocol_auth_credential": {
+          "name": "idx_host_protocol_auth_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_protocol_auth_host_id_ssh_data_id_fk": {
+          "name": "host_protocol_auth_host_id_ssh_data_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_user_id_users_id_fk": {
+          "name": "host_protocol_auth_user_id_users_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_credential_id_ssh_credentials_id_fk": {
+          "name": "host_protocol_auth_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "host_protocol_auth_id": {
+          "name": "host_protocol_auth_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "host_sidebar_preferences": {
+      "name": "host_sidebar_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "host_sidebar_preferences_user_id_users_id_fk": {
+          "name": "host_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "host_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "host_sidebar_preferences_user_id": {
+          "name": "host_sidebar_preferences_user_id",
+          "columns": [
+            "user_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "ssh_data": {
+      "name": "ssh_data",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "connection_type": {
+          "name": "connection_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('ssh')"
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ip": {
+          "name": "ip",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "port": {
+          "name": "port",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "parent_host_id": {
+          "name": "parent_host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "share_ssh_auth": {
+          "name": "share_ssh_auth",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "force_keyboard_interactive": {
+          "name": "force_keyboard_interactive",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sudo_password": {
+          "name": "sudo_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "override_credential_username": {
+          "name": "override_credential_username",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "jump_hosts": {
+          "name": "jump_hosts",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_check_enabled": {
+          "name": "status_check_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "status_check_interval": {
+          "name": "status_check_interval",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ssh_options": {
+          "name": "ssh_options",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "notes": {
+          "name": "notes",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "enable_ssh": {
+          "name": "enable_ssh",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "ssh_port": {
+          "name": "ssh_port",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": 22
+        },
+        "use_socks5": {
+          "name": "use_socks5",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_host": {
+          "name": "socks5_host",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_port": {
+          "name": "socks5_port",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_username": {
+          "name": "socks5_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_password": {
+          "name": "socks5_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_proxy_chain": {
+          "name": "socks5_proxy_chain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "connection_origin": {
+          "name": "connection_origin",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "port_knock_sequence": {
+          "name": "port_knock_sequence",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_fingerprint": {
+          "name": "host_key_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_type": {
+          "name": "host_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_algorithm": {
+          "name": "host_key_algorithm",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": "('sha256')"
+        },
+        "host_key_first_seen": {
+          "name": "host_key_first_seen",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_last_verified": {
+          "name": "host_key_last_verified",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_changed_count": {
+          "name": "host_key_changed_count",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": 0
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "default_overrides": {
+          "name": "default_overrides",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_ssh_data_user_id": {
+          "name": "idx_ssh_data_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_data_parent_host": {
+          "name": "idx_ssh_data_parent_host",
+          "columns": [
+            "parent_host_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_data_credential": {
+          "name": "idx_ssh_data_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_data_user_id_users_id_fk": {
+          "name": "ssh_data_user_id_users_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_data_parent_host_id_ssh_data_id_fk": {
+          "name": "ssh_data_parent_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "parent_host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "ssh_data_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_data_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ssh_data_id": {
+          "name": "ssh_data_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "ssh_data_sync_id_unique": {
+          "name": "ssh_data_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "checkConstraint": {}
+    },
+    "plugin_install_counts": {
+      "name": "plugin_install_counts",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "count": {
+          "name": "count",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('aggregate-telemetry')"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_plugin_install_counts_plugin_registry": {
+          "name": "idx_plugin_install_counts_plugin_registry",
+          "columns": [
+            "plugin_id",
+            "registry_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "plugin_install_counts_id": {
+          "name": "plugin_install_counts_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_migrations": {
+      "name": "plugin_migrations",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "migration_id": {
+          "name": "migration_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "checksum": {
+          "name": "checksum",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_plugin_migrations_plugin_migration": {
+          "name": "idx_plugin_migrations_plugin_migration",
+          "columns": [
+            "plugin_id",
+            "migration_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_migrations_plugin_id_plugins_id_fk": {
+          "name": "plugin_migrations_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_migrations",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "plugin_migrations_id": {
+          "name": "plugin_migrations_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_permission_grants": {
+      "name": "plugin_permission_grants",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "capability": {
+          "name": "capability",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('admin')"
+        }
+      },
+      "indexes": {
+        "idx_plugin_permission_grants_plugin_capability": {
+          "name": "idx_plugin_permission_grants_plugin_capability",
+          "columns": [
+            "plugin_id",
+            "capability"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_permission_grants_plugin_id_plugins_id_fk": {
+          "name": "plugin_permission_grants_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "plugin_permission_grants_granted_by_users_id_fk": {
+          "name": "plugin_permission_grants_granted_by_users_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "plugin_permission_grants_id": {
+          "name": "plugin_permission_grants_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_registries": {
+      "name": "plugin_registries",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "url": {
+          "name": "url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "kind": {
+          "name": "kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('community')"
+        },
+        "enabled": {
+          "name": "enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "signing_key": {
+          "name": "signing_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_checked_at": {
+          "name": "last_checked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_index_hash": {
+          "name": "last_index_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "plugin_registries_id": {
+          "name": "plugin_registries_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_settings": {
+      "name": "plugin_settings",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "enum('admin','user','host','secret')",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope_id": {
+          "name": "scope_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted": {
+          "name": "encrypted",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_plugin_settings_scope_key": {
+          "name": "idx_plugin_settings_scope_key",
+          "columns": [
+            "plugin_id",
+            "scope",
+            "scope_id",
+            "key"
+          ],
+          "isUnique": true
+        },
+        "idx_plugin_settings_plugin_scope": {
+          "name": "idx_plugin_settings_plugin_scope",
+          "columns": [
+            "plugin_id",
+            "scope"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "plugin_settings_plugin_id_plugins_id_fk": {
+          "name": "plugin_settings_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_settings",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "plugin_settings_id": {
+          "name": "plugin_settings_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugin_storage": {
+      "name": "plugin_storage",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_plugin_storage_plugin_key": {
+          "name": "idx_plugin_storage_plugin_key",
+          "columns": [
+            "plugin_id",
+            "key"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_storage_plugin_id_plugins_id_fk": {
+          "name": "plugin_storage_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_storage",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "plugin_storage_id": {
+          "name": "plugin_storage_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "plugins": {
+      "name": "plugins",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "version": {
+          "name": "version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tier": {
+          "name": "tier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('available')"
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('community')"
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "state": {
+          "name": "state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('disabled')"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "installed_at": {
+          "name": "installed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "auto_update": {
+          "name": "auto_update",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "pinned_version": {
+          "name": "pinned_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "channel": {
+          "name": "channel",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('stable')"
+        },
+        "manifest_json": {
+          "name": "manifest_json",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {
+        "idx_plugins_registry_id": {
+          "name": "idx_plugins_registry_id",
+          "columns": [
+            "registry_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "plugins_id": {
+          "name": "plugins_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "rbac_applied_defaults": {
+      "name": "rbac_applied_defaults",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "role_name": {
+          "name": "role_name",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission": {
+          "name": "permission",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_rbac_applied_defaults_role_permission": {
+          "name": "idx_rbac_applied_defaults_role_permission",
+          "columns": [
+            "role_name",
+            "permission"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "rbac_applied_defaults_id": {
+          "name": "rbac_applied_defaults_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "rbac_known_permissions": {
+      "name": "rbac_known_permissions",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "permission": {
+          "name": "permission",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "first_seen_at": {
+          "name": "first_seen_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_rbac_known_permissions_permission": {
+          "name": "idx_rbac_known_permissions_permission",
+          "columns": [
+            "permission"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "rbac_known_permissions_id": {
+          "name": "rbac_known_permissions_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "recent_activity": {
+      "name": "recent_activity",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "type": {
+          "name": "type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_name": {
+          "name": "host_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_recent_activity_user_ts": {
+          "name": "idx_recent_activity_user_ts",
+          "columns": [
+            "user_id",
+            "timestamp"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "recent_activity_user_id_users_id_fk": {
+          "name": "recent_activity_user_id_users_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "recent_activity_host_id_ssh_data_id_fk": {
+          "name": "recent_activity_host_id_ssh_data_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "recent_activity_id": {
+          "name": "recent_activity_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "roles": {
+      "name": "roles",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "name": {
+          "name": "name",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "display_name": {
+          "name": "display_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "is_system": {
+          "name": "is_system",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "permissions": {
+          "name": "permissions",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "roles_id": {
+          "name": "roles_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "roles_name_unique": {
+          "name": "roles_name_unique",
+          "columns": [
+            "name"
+          ]
+        }
+      },
+      "checkConstraint": {}
+    },
+    "sessions": {
+      "name": "sessions",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "jwt_token": {
+          "name": "jwt_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "external_session_ref": {
+          "name": "external_session_ref",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "last_active_at": {
+          "name": "last_active_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_sessions_user_id": {
+          "name": "idx_sessions_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_sessions_expires_at": {
+          "name": "idx_sessions_expires_at",
+          "columns": [
+            "expires_at"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sessions_user_id_users_id_fk": {
+          "name": "sessions_user_id_users_id_fk",
+          "tableFrom": "sessions",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "sessions_id": {
+          "name": "sessions_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "settings": {
+      "name": "settings",
+      "columns": {
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "settings_key": {
+          "name": "settings_key",
+          "columns": [
+            "key"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "shared_credential_secrets": {
+      "name": "shared_credential_secrets",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_access_id": {
+          "name": "credential_access_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('password')"
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_shared_credential_secrets_scope": {
+          "name": "idx_shared_credential_secrets_scope",
+          "columns": [
+            "credential_access_id",
+            "target_user_id"
+          ],
+          "isUnique": true
+        },
+        "idx_shared_credential_secrets_target": {
+          "name": "idx_shared_credential_secrets_target",
+          "columns": [
+            "target_user_id",
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "shared_credential_secrets_target_user_id_users_id_fk": {
+          "name": "shared_credential_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_credential_secrets_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_credential_secrets_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_cred_secrets_access_id_fk": {
+          "name": "shared_cred_secrets_access_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "credential_access",
+          "columnsFrom": [
+            "credential_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "shared_credential_secrets_id": {
+          "name": "shared_credential_secrets_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "shared_host_auth_overrides": {
+      "name": "shared_host_auth_overrides",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "shared_host_auth_overrides_host_user_protocol_unique": {
+          "name": "shared_host_auth_overrides_host_user_protocol_unique",
+          "columns": [
+            "host_id",
+            "user_id",
+            "protocol"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "shared_host_auth_overrides_host_id_ssh_data_id_fk": {
+          "name": "shared_host_auth_overrides_host_id_ssh_data_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_user_id_users_id_fk": {
+          "name": "shared_host_auth_overrides_user_id_users_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "shared_host_auth_overrides_id": {
+          "name": "shared_host_auth_overrides_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "shared_host_secrets": {
+      "name": "shared_host_secrets",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_access_id": {
+          "name": "host_access_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "source_type": {
+          "name": "source_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('credential')"
+        },
+        "original_credential_id": {
+          "name": "original_credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_auth_type": {
+          "name": "encrypted_auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_type": {
+          "name": "encrypted_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_domain": {
+          "name": "encrypted_domain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_fields": {
+          "name": "encrypted_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_shared_host_secrets_scope": {
+          "name": "idx_shared_host_secrets_scope",
+          "columns": [
+            "host_access_id",
+            "target_user_id",
+            "protocol"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "shared_host_secrets_host_access_id_host_access_id_fk": {
+          "name": "shared_host_secrets_host_access_id_host_access_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "host_access",
+          "columnsFrom": [
+            "host_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_target_user_id_users_id_fk": {
+          "name": "shared_host_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_original_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_secrets_original_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "original_credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "shared_host_secrets_id": {
+          "name": "shared_host_secrets_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "ssh_credential_usage": {
+      "name": "ssh_credential_usage",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "used_at": {
+          "name": "used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credential_usage_credential": {
+          "name": "idx_ssh_credential_usage_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_credential_usage_user": {
+          "name": "idx_ssh_credential_usage_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_credential_usage_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_credential_usage_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_host_id_ssh_data_id_fk": {
+          "name": "ssh_credential_usage_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_user_id_users_id_fk": {
+          "name": "ssh_credential_usage_user_id_users_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ssh_credential_usage_id": {
+          "name": "ssh_credential_usage_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "ssh_credentials": {
+      "name": "ssh_credentials",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "private_key": {
+          "name": "private_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "detected_key_type": {
+          "name": "detected_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "usage_count": {
+          "name": "usage_count",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "last_used": {
+          "name": "last_used",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credentials_user_id": {
+          "name": "idx_ssh_credentials_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_credentials_user_id_users_id_fk": {
+          "name": "ssh_credentials_user_id_users_id_fk",
+          "tableFrom": "ssh_credentials",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ssh_credentials_id": {
+          "name": "ssh_credentials_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "ssh_credentials_sync_id_unique": {
+          "name": "ssh_credentials_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "checkConstraint": {}
+    },
+    "ssh_folders": {
+      "name": "ssh_folders",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "color": {
+          "name": "color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "icon": {
+          "name": "icon",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_ssh_folders_user_id": {
+          "name": "idx_ssh_folders_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_folders_user_id_users_id_fk": {
+          "name": "ssh_folders_user_id_users_id_fk",
+          "tableFrom": "ssh_folders",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ssh_folders_id": {
+          "name": "ssh_folders_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "ssh_folders_sync_id_unique": {
+          "name": "ssh_folders_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "checkConstraint": {}
+    },
+    "sync_conflicts": {
+      "name": "sync_conflicts",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "local_row": {
+          "name": "local_row",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_revision": {
+          "name": "server_revision",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_sync_conflicts_user": {
+          "name": "idx_sync_conflicts_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sync_conflicts_user_id_users_id_fk": {
+          "name": "sync_conflicts_user_id_users_id_fk",
+          "tableFrom": "sync_conflicts",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "sync_conflicts_id": {
+          "name": "sync_conflicts_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "sync_link": {
+      "name": "sync_link",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_url": {
+          "name": "server_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_name": {
+          "name": "server_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "server_version": {
+          "name": "server_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "session_token": {
+          "name": "session_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "custom_headers": {
+          "name": "custom_headers",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "basic_auth": {
+          "name": "basic_auth",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "allow_invalid_certificate": {
+          "name": "allow_invalid_certificate",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "remote_user_id": {
+          "name": "remote_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "remote_username": {
+          "name": "remote_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "account": {
+          "name": "account",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "known_types": {
+          "name": "known_types",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cursor": {
+          "name": "cursor",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "('idle')"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "linked_at": {
+          "name": "linked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "last_sync_at": {
+          "name": "last_sync_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "sync_link_user_id_users_id_fk": {
+          "name": "sync_link_user_id_users_id_fk",
+          "tableFrom": "sync_link",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "sync_link_id": {
+          "name": "sync_link_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "sync_records": {
+      "name": "sync_records",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "revision": {
+          "name": "revision",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "seq": {
+          "name": "seq",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "hash": {
+          "name": "hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "deleted": {
+          "name": "deleted",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "error": {
+          "name": "error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "error_hash": {
+          "name": "error_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_sync_records_user_entity_sync": {
+          "name": "idx_sync_records_user_entity_sync",
+          "columns": [
+            "user_id",
+            "entity_type",
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_sync_records_user_seq": {
+          "name": "idx_sync_records_user_seq",
+          "columns": [
+            "user_id",
+            "seq"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sync_records_user_id_users_id_fk": {
+          "name": "sync_records_user_id_users_id_fk",
+          "tableFrom": "sync_records",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "sync_records_id": {
+          "name": "sync_records_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "trusted_devices": {
+      "name": "trusted_devices",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_fingerprint": {
+          "name": "device_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_trusted_devices_user_id": {
+          "name": "idx_trusted_devices_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "trusted_devices_user_id_users_id_fk": {
+          "name": "trusted_devices_user_id_users_id_fk",
+          "tableFrom": "trusted_devices",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "trusted_devices_id": {
+          "name": "trusted_devices_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "ui_preferences": {
+      "name": "ui_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "ui_preferences_user_id_users_id_fk": {
+          "name": "ui_preferences_user_id_users_id_fk",
+          "tableFrom": "ui_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ui_preferences_user_id": {
+          "name": "ui_preferences_user_id",
+          "columns": [
+            "user_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_external_identities": {
+      "name": "user_external_identities",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "provider_id": {
+          "name": "provider_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "subject": {
+          "name": "subject",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_user_external_identities_provider_subject": {
+          "name": "idx_user_external_identities_provider_subject",
+          "columns": [
+            "provider_id",
+            "subject"
+          ],
+          "isUnique": true
+        },
+        "idx_user_external_identities_user": {
+          "name": "idx_user_external_identities_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_external_identities_user_id_users_id_fk": {
+          "name": "user_external_identities_user_id_users_id_fk",
+          "tableFrom": "user_external_identities",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_external_identities_id": {
+          "name": "user_external_identities_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_open_tabs": {
+      "name": "user_open_tabs",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tab_type": {
+          "name": "tab_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "label": {
+          "name": "label",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tab_order": {
+          "name": "tab_order",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "backend_session_id": {
+          "name": "backend_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_user_open_tabs_user_id": {
+          "name": "idx_user_open_tabs_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_open_tabs_user_id_users_id_fk": {
+          "name": "user_open_tabs_user_id_users_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_open_tabs_host_id_ssh_data_id_fk": {
+          "name": "user_open_tabs_host_id_ssh_data_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_open_tabs_id": {
+          "name": "user_open_tabs_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_preferences": {
+      "name": "user_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "reopen_tabs_on_login": {
+          "name": "reopen_tabs_on_login",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "theme": {
+          "name": "theme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "font_size": {
+          "name": "font_size",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "accent_color": {
+          "name": "accent_color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "language": {
+          "name": "language",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "storage_mode": {
+          "name": "storage_mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "command_palette_enabled": {
+          "name": "command_palette_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "show_host_tags": {
+          "name": "show_host_tags",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_tray_on_click": {
+          "name": "host_tray_on_click",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin_app_rail": {
+          "name": "pin_app_rail",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "expand_app_rail_on_hover": {
+          "name": "expand_app_rail_on_hover",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "show_pin_app_rail_button": {
+          "name": "show_pin_app_rail_button",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folders_collapsed": {
+          "name": "folders_collapsed",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "disable_update_check": {
+          "name": "disable_update_check",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "confirm_tab_close": {
+          "name": "confirm_tab_close",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "hidden_rail_tabs": {
+          "name": "hidden_rail_tabs",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "compact_host_view": {
+          "name": "compact_host_view",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_color_scheme": {
+          "name": "status_color_scheme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "custom_keybindings": {
+          "name": "custom_keybindings",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "user_preferences_user_id_users_id_fk": {
+          "name": "user_preferences_user_id_users_id_fk",
+          "tableFrom": "user_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_preferences_user_id": {
+          "name": "user_preferences_user_id",
+          "columns": [
+            "user_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_roles": {
+      "name": "user_roles",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_user_roles_user_role": {
+          "name": "idx_user_roles_user_role",
+          "columns": [
+            "user_id",
+            "role_id"
+          ],
+          "isUnique": true
+        },
+        "idx_user_roles_role_id": {
+          "name": "idx_user_roles_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_roles_user_id_users_id_fk": {
+          "name": "user_roles_user_id_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_role_id_roles_id_fk": {
+          "name": "user_roles_role_id_roles_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_granted_by_users_id_fk": {
+          "name": "user_roles_granted_by_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_roles_id": {
+          "name": "user_roles_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "user_second_factors": {
+      "name": "user_second_factors",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "int",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "factor_id": {
+          "name": "factor_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "enrolled_at": {
+          "name": "enrolled_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {
+        "idx_user_second_factors_user_factor": {
+          "name": "idx_user_second_factors_user_factor",
+          "columns": [
+            "user_id",
+            "plugin_id",
+            "factor_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "user_second_factors_user_id_users_id_fk": {
+          "name": "user_second_factors_user_id_users_id_fk",
+          "tableFrom": "user_second_factors",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_second_factors_id": {
+          "name": "user_second_factors_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    },
+    "users": {
+      "name": "users",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "password_hash": {
+          "name": "password_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "is_admin": {
+          "name": "is_admin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "registered_at": {
+          "name": "registered_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "(CURRENT_TIMESTAMP)"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "users_id": {
+          "name": "users_id",
+          "columns": [
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "checkConstraint": {}
+    }
+  },
+  "views": {},
+  "_meta": {
+    "schemas": {},
+    "tables": {},
+    "columns": {}
+  },
+  "internal": {
+    "tables": {},
+    "indexes": {}
+  }
+}
\ No newline at end of file
diff --git a/drizzle/mysql/meta/_journal.json b/drizzle/mysql/meta/_journal.json
index ebf03aab8..59685b8cd 100644
--- a/drizzle/mysql/meta/_journal.json
+++ b/drizzle/mysql/meta/_journal.json
@@ -463,6 +463,41 @@
       "when": 1790742086934,
       "tag": "0065_ambiguous_agent_zero",
       "breakpoints": true
+    },
+    {
+      "idx": 66,
+      "version": "5",
+      "when": 1791209297104,
+      "tag": "0066_retire_2_8_columns",
+      "breakpoints": true
+    },
+    {
+      "idx": 67,
+      "version": "5",
+      "when": 1791209311841,
+      "tag": "0067_external_session_ref",
+      "breakpoints": true
+    },
+    {
+      "idx": 68,
+      "version": "5",
+      "when": 1791256341049,
+      "tag": "0068_plugin_pinned_version",
+      "breakpoints": true
+    },
+    {
+      "idx": 69,
+      "version": "5",
+      "when": 1791388888997,
+      "tag": "0069_plugin_channel",
+      "breakpoints": true
+    },
+    {
+      "idx": 70,
+      "version": "5",
+      "when": 1791550497926,
+      "tag": "0070_drop_donation_modal",
+      "breakpoints": true
     }
   ]
 }
\ No newline at end of file
diff --git a/drizzle/postgres/0066_retire_2_8_columns.sql b/drizzle/postgres/0066_retire_2_8_columns.sql
new file mode 100644
index 000000000..068f9b61c
--- /dev/null
+++ b/drizzle/postgres/0066_retire_2_8_columns.sql
@@ -0,0 +1,28 @@
+ALTER TABLE "ssh_folders" DROP CONSTRAINT "ssh_folders_credential_id_ssh_credentials_id_fk";
+--> statement-breakpoint
+ALTER TABLE "ssh_data" DROP COLUMN "terminal_config";--> statement-breakpoint
+ALTER TABLE "ssh_data" DROP COLUMN "quick_actions";--> statement-breakpoint
+ALTER TABLE "sessions" DROP COLUMN "oidc_sub";--> statement-breakpoint
+ALTER TABLE "sessions" DROP COLUMN "oidc_sid";--> statement-breakpoint
+ALTER TABLE "sessions" DROP COLUMN "sso_provider_id";--> statement-breakpoint
+ALTER TABLE "ssh_folders" DROP COLUMN "credential_id";--> statement-breakpoint
+ALTER TABLE "user_preferences" DROP COLUMN "command_autocomplete";--> statement-breakpoint
+ALTER TABLE "user_preferences" DROP COLUMN "confirm_snippet_execution";--> statement-breakpoint
+ALTER TABLE "user_preferences" DROP COLUMN "custom_themes";--> statement-breakpoint
+ALTER TABLE "user_preferences" DROP COLUMN "terminal_defaults";--> statement-breakpoint
+ALTER TABLE "user_preferences" DROP COLUMN "terminal_macros";--> statement-breakpoint
+ALTER TABLE "users" DROP COLUMN "is_oidc";--> statement-breakpoint
+ALTER TABLE "users" DROP COLUMN "oidc_identifier";--> statement-breakpoint
+ALTER TABLE "users" DROP COLUMN "sso_provider_id";--> statement-breakpoint
+ALTER TABLE "users" DROP COLUMN "client_id";--> statement-breakpoint
+ALTER TABLE "users" DROP COLUMN "client_secret";--> statement-breakpoint
+ALTER TABLE "users" DROP COLUMN "issuer_url";--> statement-breakpoint
+ALTER TABLE "users" DROP COLUMN "authorization_url";--> statement-breakpoint
+ALTER TABLE "users" DROP COLUMN "token_url";--> statement-breakpoint
+ALTER TABLE "users" DROP COLUMN "identifier_path";--> statement-breakpoint
+ALTER TABLE "users" DROP COLUMN "name_path";--> statement-breakpoint
+ALTER TABLE "users" DROP COLUMN "scopes";--> statement-breakpoint
+DELETE FROM "settings" WHERE "key" IN ('host_defaults', 'analytics_enabled', 'analytics_instance_id');--> statement-breakpoint
+UPDATE "ssh_data" SET "username" = REPLACE("username", '$oidc.preferred_username', '$external.username') WHERE "username" LIKE '%$oidc.preferred_username%';--> statement-breakpoint
+UPDATE "ssh_credentials" SET "username" = REPLACE("username", '$oidc.preferred_username', '$external.username') WHERE "username" LIKE '%$oidc.preferred_username%';--> statement-breakpoint
+UPDATE "host_defaults" SET "value" = REPLACE("value", '$oidc.preferred_username', '$external.username') WHERE "value" LIKE '%$oidc.preferred_username%';
\ No newline at end of file
diff --git a/drizzle/postgres/0067_external_session_ref.sql b/drizzle/postgres/0067_external_session_ref.sql
new file mode 100644
index 000000000..896b7b1c3
--- /dev/null
+++ b/drizzle/postgres/0067_external_session_ref.sql
@@ -0,0 +1 @@
+ALTER TABLE "sessions" ADD COLUMN "external_session_ref" text;
\ No newline at end of file
diff --git a/drizzle/postgres/0068_plugin_pinned_version.sql b/drizzle/postgres/0068_plugin_pinned_version.sql
new file mode 100644
index 000000000..4acdc2f16
--- /dev/null
+++ b/drizzle/postgres/0068_plugin_pinned_version.sql
@@ -0,0 +1 @@
+ALTER TABLE "plugins" ADD COLUMN "pinned_version" text;
\ No newline at end of file
diff --git a/drizzle/postgres/0069_plugin_channel.sql b/drizzle/postgres/0069_plugin_channel.sql
new file mode 100644
index 000000000..11bbc13e5
--- /dev/null
+++ b/drizzle/postgres/0069_plugin_channel.sql
@@ -0,0 +1 @@
+ALTER TABLE "plugins" ADD COLUMN "channel" text DEFAULT 'stable' NOT NULL;
\ No newline at end of file
diff --git a/drizzle/postgres/0070_drop_donation_modal.sql b/drizzle/postgres/0070_drop_donation_modal.sql
new file mode 100644
index 000000000..fae895342
--- /dev/null
+++ b/drizzle/postgres/0070_drop_donation_modal.sql
@@ -0,0 +1 @@
+ALTER TABLE "users" DROP COLUMN "donation_modal_dismissed";
\ No newline at end of file
diff --git a/drizzle/postgres/meta/0066_snapshot.json b/drizzle/postgres/meta/0066_snapshot.json
new file mode 100644
index 000000000..bd12fc436
--- /dev/null
+++ b/drizzle/postgres/meta/0066_snapshot.json
@@ -0,0 +1,4758 @@
+{
+  "id": "63dca749-99fe-403c-8a34-84c4ac5cdab3",
+  "prevId": "772f1576-e033-4d2b-8e40-c7b3d499058e",
+  "version": "7",
+  "dialect": "postgresql",
+  "tables": {
+    "public.api_keys": {
+      "name": "api_keys",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "token_hash": {
+          "name": "token_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "token_prefix": {
+          "name": "token_prefix",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "is_active": {
+          "name": "is_active",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        }
+      },
+      "indexes": {
+        "idx_api_keys_user_id": {
+          "name": "idx_api_keys_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "api_keys_user_id_users_id_fk": {
+          "name": "api_keys_user_id_users_id_fk",
+          "tableFrom": "api_keys",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.audit_logs": {
+      "name": "audit_logs",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "action": {
+          "name": "action",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "resource_type": {
+          "name": "resource_type",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "resource_id": {
+          "name": "resource_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "resource_name": {
+          "name": "resource_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "details": {
+          "name": "details",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ip_address": {
+          "name": "ip_address",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "user_agent": {
+          "name": "user_agent",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "success": {
+          "name": "success",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_audit_logs_timestamp": {
+          "name": "idx_audit_logs_timestamp",
+          "columns": [
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_audit_logs_user_ts": {
+          "name": "idx_audit_logs_user_ts",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_audit_logs_action_ts": {
+          "name": "idx_audit_logs_action_ts",
+          "columns": [
+            {
+              "expression": "action",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_audit_logs_resource_ts": {
+          "name": "idx_audit_logs_resource_ts",
+          "columns": [
+            {
+              "expression": "resource_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "audit_logs_user_id_users_id_fk": {
+          "name": "audit_logs_user_id_users_id_fk",
+          "tableFrom": "audit_logs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.credential_access": {
+      "name": "credential_access",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'use'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_credential_access_user_id": {
+          "name": "idx_credential_access_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_credential_access_role_id": {
+          "name": "idx_credential_access_role_id",
+          "columns": [
+            {
+              "expression": "role_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_credential_access_credential_id": {
+          "name": "idx_credential_access_credential_id",
+          "columns": [
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "credential_access_credential_id_ssh_credentials_id_fk": {
+          "name": "credential_access_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_user_id_users_id_fk": {
+          "name": "credential_access_user_id_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_role_id_roles_id_fk": {
+          "name": "credential_access_role_id_roles_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_granted_by_users_id_fk": {
+          "name": "credential_access_granted_by_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.credential_sidebar_preferences": {
+      "name": "credential_sidebar_preferences",
+      "schema": "",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "credential_sidebar_preferences_user_id_users_id_fk": {
+          "name": "credential_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "credential_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.folder_access": {
+      "name": "folder_access",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "owner_user_id": {
+          "name": "owner_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "folder": {
+          "name": "folder",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'connect'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_folder_access_owner_folder": {
+          "name": "idx_folder_access_owner_folder",
+          "columns": [
+            {
+              "expression": "owner_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "folder",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "folder_access_owner_user_id_users_id_fk": {
+          "name": "folder_access_owner_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "owner_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_user_id_users_id_fk": {
+          "name": "folder_access_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_role_id_roles_id_fk": {
+          "name": "folder_access_role_id_roles_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_granted_by_users_id_fk": {
+          "name": "folder_access_granted_by_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.host_access": {
+      "name": "host_access",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'connect'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "last_accessed_at": {
+          "name": "last_accessed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "access_count": {
+          "name": "access_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        }
+      },
+      "indexes": {
+        "idx_host_access_user_id": {
+          "name": "idx_host_access_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_access_role_id": {
+          "name": "idx_host_access_role_id",
+          "columns": [
+            {
+              "expression": "role_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_access_host_id": {
+          "name": "idx_host_access_host_id",
+          "columns": [
+            {
+              "expression": "host_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_access_expires_at": {
+          "name": "idx_host_access_expires_at",
+          "columns": [
+            {
+              "expression": "expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "host_access_host_id_ssh_data_id_fk": {
+          "name": "host_access_host_id_ssh_data_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_user_id_users_id_fk": {
+          "name": "host_access_user_id_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_role_id_roles_id_fk": {
+          "name": "host_access_role_id_roles_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_granted_by_users_id_fk": {
+          "name": "host_access_granted_by_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.host_defaults": {
+      "name": "host_defaults",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "level": {
+          "name": "level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "scope_key": {
+          "name": "scope_key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "folder_id": {
+          "name": "folder_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "namespace": {
+          "name": "namespace",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_by": {
+          "name": "updated_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_host_defaults_scope_key": {
+          "name": "idx_host_defaults_scope_key",
+          "columns": [
+            {
+              "expression": "scope_key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "namespace",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_defaults_user": {
+          "name": "idx_host_defaults_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_defaults_folder": {
+          "name": "idx_host_defaults_folder",
+          "columns": [
+            {
+              "expression": "folder_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "host_defaults_user_id_users_id_fk": {
+          "name": "host_defaults_user_id_users_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_defaults_folder_id_ssh_folders_id_fk": {
+          "name": "host_defaults_folder_id_ssh_folders_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "ssh_folders",
+          "columnsFrom": [
+            "folder_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.host_protocol_auth": {
+      "name": "host_protocol_auth",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'direct'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "fields": {
+          "name": "fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "secret_fields": {
+          "name": "secret_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_host_protocol_auth_host_protocol": {
+          "name": "idx_host_protocol_auth_host_protocol",
+          "columns": [
+            {
+              "expression": "host_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "protocol",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_protocol_auth_user": {
+          "name": "idx_host_protocol_auth_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_protocol_auth_credential": {
+          "name": "idx_host_protocol_auth_credential",
+          "columns": [
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "host_protocol_auth_host_id_ssh_data_id_fk": {
+          "name": "host_protocol_auth_host_id_ssh_data_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_user_id_users_id_fk": {
+          "name": "host_protocol_auth_user_id_users_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_credential_id_ssh_credentials_id_fk": {
+          "name": "host_protocol_auth_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.host_sidebar_preferences": {
+      "name": "host_sidebar_preferences",
+      "schema": "",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "host_sidebar_preferences_user_id_users_id_fk": {
+          "name": "host_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "host_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ssh_data": {
+      "name": "ssh_data",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "connection_type": {
+          "name": "connection_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'ssh'"
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ip": {
+          "name": "ip",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "port": {
+          "name": "port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "parent_host_id": {
+          "name": "parent_host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "share_ssh_auth": {
+          "name": "share_ssh_auth",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "force_keyboard_interactive": {
+          "name": "force_keyboard_interactive",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sudo_password": {
+          "name": "sudo_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "override_credential_username": {
+          "name": "override_credential_username",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "jump_hosts": {
+          "name": "jump_hosts",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status_check_enabled": {
+          "name": "status_check_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "status_check_interval": {
+          "name": "status_check_interval",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ssh_options": {
+          "name": "ssh_options",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "notes": {
+          "name": "notes",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "enable_ssh": {
+          "name": "enable_ssh",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "ssh_port": {
+          "name": "ssh_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "default": 22
+        },
+        "use_socks5": {
+          "name": "use_socks5",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_host": {
+          "name": "socks5_host",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_port": {
+          "name": "socks5_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_username": {
+          "name": "socks5_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_password": {
+          "name": "socks5_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_proxy_chain": {
+          "name": "socks5_proxy_chain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "connection_origin": {
+          "name": "connection_origin",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "port_knock_sequence": {
+          "name": "port_knock_sequence",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_fingerprint": {
+          "name": "host_key_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_type": {
+          "name": "host_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_algorithm": {
+          "name": "host_key_algorithm",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "default": "'sha256'"
+        },
+        "host_key_first_seen": {
+          "name": "host_key_first_seen",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_last_verified": {
+          "name": "host_key_last_verified",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_changed_count": {
+          "name": "host_key_changed_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "default": 0
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "default_overrides": {
+          "name": "default_overrides",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_data_user_id": {
+          "name": "idx_ssh_data_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_ssh_data_parent_host": {
+          "name": "idx_ssh_data_parent_host",
+          "columns": [
+            {
+              "expression": "parent_host_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_ssh_data_credential": {
+          "name": "idx_ssh_data_credential",
+          "columns": [
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "ssh_data_user_id_users_id_fk": {
+          "name": "ssh_data_user_id_users_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_data_parent_host_id_ssh_data_id_fk": {
+          "name": "ssh_data_parent_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "parent_host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "ssh_data_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_data_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "ssh_data_sync_id_unique": {
+          "name": "ssh_data_sync_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_install_counts": {
+      "name": "plugin_install_counts",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "count": {
+          "name": "count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'aggregate-telemetry'"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_install_counts_plugin_registry": {
+          "name": "idx_plugin_install_counts_plugin_registry",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "registry_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_migrations": {
+      "name": "plugin_migrations",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "migration_id": {
+          "name": "migration_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "checksum": {
+          "name": "checksum",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_migrations_plugin_migration": {
+          "name": "idx_plugin_migrations_plugin_migration",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "migration_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "plugin_migrations_plugin_id_plugins_id_fk": {
+          "name": "plugin_migrations_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_migrations",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_permission_grants": {
+      "name": "plugin_permission_grants",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "capability": {
+          "name": "capability",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'admin'"
+        }
+      },
+      "indexes": {
+        "idx_plugin_permission_grants_plugin_capability": {
+          "name": "idx_plugin_permission_grants_plugin_capability",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "capability",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "plugin_permission_grants_plugin_id_plugins_id_fk": {
+          "name": "plugin_permission_grants_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "plugin_permission_grants_granted_by_users_id_fk": {
+          "name": "plugin_permission_grants_granted_by_users_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_registries": {
+      "name": "plugin_registries",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "url": {
+          "name": "url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kind": {
+          "name": "kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'community'"
+        },
+        "enabled": {
+          "name": "enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "signing_key": {
+          "name": "signing_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_checked_at": {
+          "name": "last_checked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_index_hash": {
+          "name": "last_index_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_settings": {
+      "name": "plugin_settings",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "scope": {
+          "name": "scope",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "scope_id": {
+          "name": "scope_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted": {
+          "name": "encrypted",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_settings_scope_key": {
+          "name": "idx_plugin_settings_scope_key",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "scope",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "scope_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_plugin_settings_plugin_scope": {
+          "name": "idx_plugin_settings_plugin_scope",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "scope",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "plugin_settings_plugin_id_plugins_id_fk": {
+          "name": "plugin_settings_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_settings",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_storage": {
+      "name": "plugin_storage",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_storage_plugin_key": {
+          "name": "idx_plugin_storage_plugin_key",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "plugin_storage_plugin_id_plugins_id_fk": {
+          "name": "plugin_storage_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_storage",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugins": {
+      "name": "plugins",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "version": {
+          "name": "version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "tier": {
+          "name": "tier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'available'"
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'community'"
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "state": {
+          "name": "state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'disabled'"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "installed_at": {
+          "name": "installed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "auto_update": {
+          "name": "auto_update",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "manifest_json": {
+          "name": "manifest_json",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "idx_plugins_registry_id": {
+          "name": "idx_plugins_registry_id",
+          "columns": [
+            {
+              "expression": "registry_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.rbac_applied_defaults": {
+      "name": "rbac_applied_defaults",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "role_name": {
+          "name": "role_name",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "permission": {
+          "name": "permission",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_rbac_applied_defaults_role_permission": {
+          "name": "idx_rbac_applied_defaults_role_permission",
+          "columns": [
+            {
+              "expression": "role_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "permission",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.rbac_known_permissions": {
+      "name": "rbac_known_permissions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "permission": {
+          "name": "permission",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "first_seen_at": {
+          "name": "first_seen_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_rbac_known_permissions_permission": {
+          "name": "idx_rbac_known_permissions_permission",
+          "columns": [
+            {
+              "expression": "permission",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.recent_activity": {
+      "name": "recent_activity",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "type": {
+          "name": "type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "host_name": {
+          "name": "host_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_recent_activity_user_ts": {
+          "name": "idx_recent_activity_user_ts",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "recent_activity_user_id_users_id_fk": {
+          "name": "recent_activity_user_id_users_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "recent_activity_host_id_ssh_data_id_fk": {
+          "name": "recent_activity_host_id_ssh_data_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.roles": {
+      "name": "roles",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "display_name": {
+          "name": "display_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "is_system": {
+          "name": "is_system",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "permissions": {
+          "name": "permissions",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "roles_name_unique": {
+          "name": "roles_name_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "name"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.sessions": {
+      "name": "sessions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "jwt_token": {
+          "name": "jwt_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "last_active_at": {
+          "name": "last_active_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sessions_user_id": {
+          "name": "idx_sessions_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_sessions_expires_at": {
+          "name": "idx_sessions_expires_at",
+          "columns": [
+            {
+              "expression": "expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "sessions_user_id_users_id_fk": {
+          "name": "sessions_user_id_users_id_fk",
+          "tableFrom": "sessions",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.settings": {
+      "name": "settings",
+      "schema": "",
+      "columns": {
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.shared_credential_secrets": {
+      "name": "shared_credential_secrets",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "credential_access_id": {
+          "name": "credential_access_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'password'"
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_shared_credential_secrets_scope": {
+          "name": "idx_shared_credential_secrets_scope",
+          "columns": [
+            {
+              "expression": "credential_access_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "target_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_shared_credential_secrets_target": {
+          "name": "idx_shared_credential_secrets_target",
+          "columns": [
+            {
+              "expression": "target_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "shared_credential_secrets_target_user_id_users_id_fk": {
+          "name": "shared_credential_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_credential_secrets_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_credential_secrets_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_cred_secrets_access_id_fk": {
+          "name": "shared_cred_secrets_access_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "credential_access",
+          "columnsFrom": [
+            "credential_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.shared_host_auth_overrides": {
+      "name": "shared_host_auth_overrides",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'ssh'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "shared_host_auth_overrides_host_user_protocol_unique": {
+          "name": "shared_host_auth_overrides_host_user_protocol_unique",
+          "columns": [
+            {
+              "expression": "host_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "protocol",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "shared_host_auth_overrides_host_id_ssh_data_id_fk": {
+          "name": "shared_host_auth_overrides_host_id_ssh_data_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_user_id_users_id_fk": {
+          "name": "shared_host_auth_overrides_user_id_users_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.shared_host_secrets": {
+      "name": "shared_host_secrets",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "host_access_id": {
+          "name": "host_access_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'ssh'"
+        },
+        "source_type": {
+          "name": "source_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'credential'"
+        },
+        "original_credential_id": {
+          "name": "original_credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_auth_type": {
+          "name": "encrypted_auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key_type": {
+          "name": "encrypted_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_domain": {
+          "name": "encrypted_domain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_fields": {
+          "name": "encrypted_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_shared_host_secrets_scope": {
+          "name": "idx_shared_host_secrets_scope",
+          "columns": [
+            {
+              "expression": "host_access_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "target_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "protocol",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "shared_host_secrets_host_access_id_host_access_id_fk": {
+          "name": "shared_host_secrets_host_access_id_host_access_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "host_access",
+          "columnsFrom": [
+            "host_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_target_user_id_users_id_fk": {
+          "name": "shared_host_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_original_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_secrets_original_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "original_credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ssh_credential_usage": {
+      "name": "ssh_credential_usage",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "used_at": {
+          "name": "used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credential_usage_credential": {
+          "name": "idx_ssh_credential_usage_credential",
+          "columns": [
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_ssh_credential_usage_user": {
+          "name": "idx_ssh_credential_usage_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "ssh_credential_usage_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_credential_usage_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_host_id_ssh_data_id_fk": {
+          "name": "ssh_credential_usage_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_user_id_users_id_fk": {
+          "name": "ssh_credential_usage_user_id_users_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ssh_credentials": {
+      "name": "ssh_credentials",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "private_key": {
+          "name": "private_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "detected_key_type": {
+          "name": "detected_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "usage_count": {
+          "name": "usage_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "last_used": {
+          "name": "last_used",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credentials_user_id": {
+          "name": "idx_ssh_credentials_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "ssh_credentials_user_id_users_id_fk": {
+          "name": "ssh_credentials_user_id_users_id_fk",
+          "tableFrom": "ssh_credentials",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "ssh_credentials_sync_id_unique": {
+          "name": "ssh_credentials_sync_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ssh_folders": {
+      "name": "ssh_folders",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "color": {
+          "name": "color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "icon": {
+          "name": "icon",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_folders_user_id": {
+          "name": "idx_ssh_folders_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "ssh_folders_user_id_users_id_fk": {
+          "name": "ssh_folders_user_id_users_id_fk",
+          "tableFrom": "ssh_folders",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "ssh_folders_sync_id_unique": {
+          "name": "ssh_folders_sync_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.sync_conflicts": {
+      "name": "sync_conflicts",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "local_row": {
+          "name": "local_row",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "server_revision": {
+          "name": "server_revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sync_conflicts_user": {
+          "name": "idx_sync_conflicts_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "sync_conflicts_user_id_users_id_fk": {
+          "name": "sync_conflicts_user_id_users_id_fk",
+          "tableFrom": "sync_conflicts",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.sync_link": {
+      "name": "sync_link",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "server_url": {
+          "name": "server_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "server_name": {
+          "name": "server_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "server_version": {
+          "name": "server_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "session_token": {
+          "name": "session_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "custom_headers": {
+          "name": "custom_headers",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "basic_auth": {
+          "name": "basic_auth",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "allow_invalid_certificate": {
+          "name": "allow_invalid_certificate",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "remote_user_id": {
+          "name": "remote_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "remote_username": {
+          "name": "remote_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "account": {
+          "name": "account",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "known_types": {
+          "name": "known_types",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cursor": {
+          "name": "cursor",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'idle'"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "linked_at": {
+          "name": "linked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "last_sync_at": {
+          "name": "last_sync_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "sync_link_user_id_users_id_fk": {
+          "name": "sync_link_user_id_users_id_fk",
+          "tableFrom": "sync_link",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.sync_records": {
+      "name": "sync_records",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "revision": {
+          "name": "revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "seq": {
+          "name": "seq",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "hash": {
+          "name": "hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "deleted": {
+          "name": "deleted",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "error": {
+          "name": "error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "error_hash": {
+          "name": "error_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sync_records_user_entity_sync": {
+          "name": "idx_sync_records_user_entity_sync",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "entity_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "sync_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_sync_records_user_seq": {
+          "name": "idx_sync_records_user_seq",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "seq",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "sync_records_user_id_users_id_fk": {
+          "name": "sync_records_user_id_users_id_fk",
+          "tableFrom": "sync_records",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.trusted_devices": {
+      "name": "trusted_devices",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_fingerprint": {
+          "name": "device_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_trusted_devices_user_id": {
+          "name": "idx_trusted_devices_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "trusted_devices_user_id_users_id_fk": {
+          "name": "trusted_devices_user_id_users_id_fk",
+          "tableFrom": "trusted_devices",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ui_preferences": {
+      "name": "ui_preferences",
+      "schema": "",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "ui_preferences_user_id_users_id_fk": {
+          "name": "ui_preferences_user_id_users_id_fk",
+          "tableFrom": "ui_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_external_identities": {
+      "name": "user_external_identities",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_id": {
+          "name": "provider_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "subject": {
+          "name": "subject",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_external_identities_provider_subject": {
+          "name": "idx_user_external_identities_provider_subject",
+          "columns": [
+            {
+              "expression": "provider_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "subject",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_user_external_identities_user": {
+          "name": "idx_user_external_identities_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_external_identities_user_id_users_id_fk": {
+          "name": "user_external_identities_user_id_users_id_fk",
+          "tableFrom": "user_external_identities",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_open_tabs": {
+      "name": "user_open_tabs",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "tab_type": {
+          "name": "tab_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "label": {
+          "name": "label",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "tab_order": {
+          "name": "tab_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "backend_session_id": {
+          "name": "backend_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_open_tabs_user_id": {
+          "name": "idx_user_open_tabs_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_open_tabs_user_id_users_id_fk": {
+          "name": "user_open_tabs_user_id_users_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_open_tabs_host_id_ssh_data_id_fk": {
+          "name": "user_open_tabs_host_id_ssh_data_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_preferences": {
+      "name": "user_preferences",
+      "schema": "",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "reopen_tabs_on_login": {
+          "name": "reopen_tabs_on_login",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "theme": {
+          "name": "theme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "font_size": {
+          "name": "font_size",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "accent_color": {
+          "name": "accent_color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "language": {
+          "name": "language",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "storage_mode": {
+          "name": "storage_mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "command_palette_enabled": {
+          "name": "command_palette_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "show_host_tags": {
+          "name": "show_host_tags",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_tray_on_click": {
+          "name": "host_tray_on_click",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pin_app_rail": {
+          "name": "pin_app_rail",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "expand_app_rail_on_hover": {
+          "name": "expand_app_rail_on_hover",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "show_pin_app_rail_button": {
+          "name": "show_pin_app_rail_button",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "folders_collapsed": {
+          "name": "folders_collapsed",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "disable_update_check": {
+          "name": "disable_update_check",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "confirm_tab_close": {
+          "name": "confirm_tab_close",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "hidden_rail_tabs": {
+          "name": "hidden_rail_tabs",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "compact_host_view": {
+          "name": "compact_host_view",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status_color_scheme": {
+          "name": "status_color_scheme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "custom_keybindings": {
+          "name": "custom_keybindings",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "user_preferences_user_id_users_id_fk": {
+          "name": "user_preferences_user_id_users_id_fk",
+          "tableFrom": "user_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_roles": {
+      "name": "user_roles",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_roles_user_role": {
+          "name": "idx_user_roles_user_role",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "role_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_user_roles_role_id": {
+          "name": "idx_user_roles_role_id",
+          "columns": [
+            {
+              "expression": "role_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_roles_user_id_users_id_fk": {
+          "name": "user_roles_user_id_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_role_id_roles_id_fk": {
+          "name": "user_roles_role_id_roles_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_granted_by_users_id_fk": {
+          "name": "user_roles_granted_by_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_second_factors": {
+      "name": "user_second_factors",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "factor_id": {
+          "name": "factor_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "enrolled_at": {
+          "name": "enrolled_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_second_factors_user_factor": {
+          "name": "idx_user_second_factors_user_factor",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "factor_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_second_factors_user_id_users_id_fk": {
+          "name": "user_second_factors_user_id_users_id_fk",
+          "tableFrom": "user_second_factors",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.users": {
+      "name": "users",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "password_hash": {
+          "name": "password_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "is_admin": {
+          "name": "is_admin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "registered_at": {
+          "name": "registered_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "donation_modal_dismissed": {
+          "name": "donation_modal_dismissed",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    }
+  },
+  "enums": {},
+  "schemas": {},
+  "sequences": {},
+  "roles": {},
+  "policies": {},
+  "views": {},
+  "_meta": {
+    "columns": {},
+    "schemas": {},
+    "tables": {}
+  }
+}
\ No newline at end of file
diff --git a/drizzle/postgres/meta/0067_snapshot.json b/drizzle/postgres/meta/0067_snapshot.json
new file mode 100644
index 000000000..c0aa8dcd6
--- /dev/null
+++ b/drizzle/postgres/meta/0067_snapshot.json
@@ -0,0 +1,4764 @@
+{
+  "id": "0e009e23-d22a-4b65-a142-0887e2f243a3",
+  "prevId": "63dca749-99fe-403c-8a34-84c4ac5cdab3",
+  "version": "7",
+  "dialect": "postgresql",
+  "tables": {
+    "public.api_keys": {
+      "name": "api_keys",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "token_hash": {
+          "name": "token_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "token_prefix": {
+          "name": "token_prefix",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "is_active": {
+          "name": "is_active",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        }
+      },
+      "indexes": {
+        "idx_api_keys_user_id": {
+          "name": "idx_api_keys_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "api_keys_user_id_users_id_fk": {
+          "name": "api_keys_user_id_users_id_fk",
+          "tableFrom": "api_keys",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.audit_logs": {
+      "name": "audit_logs",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "action": {
+          "name": "action",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "resource_type": {
+          "name": "resource_type",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "resource_id": {
+          "name": "resource_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "resource_name": {
+          "name": "resource_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "details": {
+          "name": "details",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ip_address": {
+          "name": "ip_address",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "user_agent": {
+          "name": "user_agent",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "success": {
+          "name": "success",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_audit_logs_timestamp": {
+          "name": "idx_audit_logs_timestamp",
+          "columns": [
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_audit_logs_user_ts": {
+          "name": "idx_audit_logs_user_ts",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_audit_logs_action_ts": {
+          "name": "idx_audit_logs_action_ts",
+          "columns": [
+            {
+              "expression": "action",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_audit_logs_resource_ts": {
+          "name": "idx_audit_logs_resource_ts",
+          "columns": [
+            {
+              "expression": "resource_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "audit_logs_user_id_users_id_fk": {
+          "name": "audit_logs_user_id_users_id_fk",
+          "tableFrom": "audit_logs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.credential_access": {
+      "name": "credential_access",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'use'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_credential_access_user_id": {
+          "name": "idx_credential_access_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_credential_access_role_id": {
+          "name": "idx_credential_access_role_id",
+          "columns": [
+            {
+              "expression": "role_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_credential_access_credential_id": {
+          "name": "idx_credential_access_credential_id",
+          "columns": [
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "credential_access_credential_id_ssh_credentials_id_fk": {
+          "name": "credential_access_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_user_id_users_id_fk": {
+          "name": "credential_access_user_id_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_role_id_roles_id_fk": {
+          "name": "credential_access_role_id_roles_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_granted_by_users_id_fk": {
+          "name": "credential_access_granted_by_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.credential_sidebar_preferences": {
+      "name": "credential_sidebar_preferences",
+      "schema": "",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "credential_sidebar_preferences_user_id_users_id_fk": {
+          "name": "credential_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "credential_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.folder_access": {
+      "name": "folder_access",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "owner_user_id": {
+          "name": "owner_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "folder": {
+          "name": "folder",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'connect'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_folder_access_owner_folder": {
+          "name": "idx_folder_access_owner_folder",
+          "columns": [
+            {
+              "expression": "owner_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "folder",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "folder_access_owner_user_id_users_id_fk": {
+          "name": "folder_access_owner_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "owner_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_user_id_users_id_fk": {
+          "name": "folder_access_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_role_id_roles_id_fk": {
+          "name": "folder_access_role_id_roles_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_granted_by_users_id_fk": {
+          "name": "folder_access_granted_by_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.host_access": {
+      "name": "host_access",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'connect'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "last_accessed_at": {
+          "name": "last_accessed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "access_count": {
+          "name": "access_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        }
+      },
+      "indexes": {
+        "idx_host_access_user_id": {
+          "name": "idx_host_access_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_access_role_id": {
+          "name": "idx_host_access_role_id",
+          "columns": [
+            {
+              "expression": "role_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_access_host_id": {
+          "name": "idx_host_access_host_id",
+          "columns": [
+            {
+              "expression": "host_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_access_expires_at": {
+          "name": "idx_host_access_expires_at",
+          "columns": [
+            {
+              "expression": "expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "host_access_host_id_ssh_data_id_fk": {
+          "name": "host_access_host_id_ssh_data_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_user_id_users_id_fk": {
+          "name": "host_access_user_id_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_role_id_roles_id_fk": {
+          "name": "host_access_role_id_roles_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_granted_by_users_id_fk": {
+          "name": "host_access_granted_by_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.host_defaults": {
+      "name": "host_defaults",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "level": {
+          "name": "level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "scope_key": {
+          "name": "scope_key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "folder_id": {
+          "name": "folder_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "namespace": {
+          "name": "namespace",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_by": {
+          "name": "updated_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_host_defaults_scope_key": {
+          "name": "idx_host_defaults_scope_key",
+          "columns": [
+            {
+              "expression": "scope_key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "namespace",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_defaults_user": {
+          "name": "idx_host_defaults_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_defaults_folder": {
+          "name": "idx_host_defaults_folder",
+          "columns": [
+            {
+              "expression": "folder_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "host_defaults_user_id_users_id_fk": {
+          "name": "host_defaults_user_id_users_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_defaults_folder_id_ssh_folders_id_fk": {
+          "name": "host_defaults_folder_id_ssh_folders_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "ssh_folders",
+          "columnsFrom": [
+            "folder_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.host_protocol_auth": {
+      "name": "host_protocol_auth",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'direct'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "fields": {
+          "name": "fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "secret_fields": {
+          "name": "secret_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_host_protocol_auth_host_protocol": {
+          "name": "idx_host_protocol_auth_host_protocol",
+          "columns": [
+            {
+              "expression": "host_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "protocol",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_protocol_auth_user": {
+          "name": "idx_host_protocol_auth_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_protocol_auth_credential": {
+          "name": "idx_host_protocol_auth_credential",
+          "columns": [
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "host_protocol_auth_host_id_ssh_data_id_fk": {
+          "name": "host_protocol_auth_host_id_ssh_data_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_user_id_users_id_fk": {
+          "name": "host_protocol_auth_user_id_users_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_credential_id_ssh_credentials_id_fk": {
+          "name": "host_protocol_auth_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.host_sidebar_preferences": {
+      "name": "host_sidebar_preferences",
+      "schema": "",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "host_sidebar_preferences_user_id_users_id_fk": {
+          "name": "host_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "host_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ssh_data": {
+      "name": "ssh_data",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "connection_type": {
+          "name": "connection_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'ssh'"
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ip": {
+          "name": "ip",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "port": {
+          "name": "port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "parent_host_id": {
+          "name": "parent_host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "share_ssh_auth": {
+          "name": "share_ssh_auth",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "force_keyboard_interactive": {
+          "name": "force_keyboard_interactive",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sudo_password": {
+          "name": "sudo_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "override_credential_username": {
+          "name": "override_credential_username",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "jump_hosts": {
+          "name": "jump_hosts",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status_check_enabled": {
+          "name": "status_check_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "status_check_interval": {
+          "name": "status_check_interval",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ssh_options": {
+          "name": "ssh_options",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "notes": {
+          "name": "notes",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "enable_ssh": {
+          "name": "enable_ssh",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "ssh_port": {
+          "name": "ssh_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "default": 22
+        },
+        "use_socks5": {
+          "name": "use_socks5",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_host": {
+          "name": "socks5_host",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_port": {
+          "name": "socks5_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_username": {
+          "name": "socks5_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_password": {
+          "name": "socks5_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_proxy_chain": {
+          "name": "socks5_proxy_chain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "connection_origin": {
+          "name": "connection_origin",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "port_knock_sequence": {
+          "name": "port_knock_sequence",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_fingerprint": {
+          "name": "host_key_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_type": {
+          "name": "host_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_algorithm": {
+          "name": "host_key_algorithm",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "default": "'sha256'"
+        },
+        "host_key_first_seen": {
+          "name": "host_key_first_seen",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_last_verified": {
+          "name": "host_key_last_verified",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_changed_count": {
+          "name": "host_key_changed_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "default": 0
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "default_overrides": {
+          "name": "default_overrides",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_data_user_id": {
+          "name": "idx_ssh_data_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_ssh_data_parent_host": {
+          "name": "idx_ssh_data_parent_host",
+          "columns": [
+            {
+              "expression": "parent_host_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_ssh_data_credential": {
+          "name": "idx_ssh_data_credential",
+          "columns": [
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "ssh_data_user_id_users_id_fk": {
+          "name": "ssh_data_user_id_users_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_data_parent_host_id_ssh_data_id_fk": {
+          "name": "ssh_data_parent_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "parent_host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "ssh_data_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_data_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "ssh_data_sync_id_unique": {
+          "name": "ssh_data_sync_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_install_counts": {
+      "name": "plugin_install_counts",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "count": {
+          "name": "count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'aggregate-telemetry'"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_install_counts_plugin_registry": {
+          "name": "idx_plugin_install_counts_plugin_registry",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "registry_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_migrations": {
+      "name": "plugin_migrations",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "migration_id": {
+          "name": "migration_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "checksum": {
+          "name": "checksum",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_migrations_plugin_migration": {
+          "name": "idx_plugin_migrations_plugin_migration",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "migration_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "plugin_migrations_plugin_id_plugins_id_fk": {
+          "name": "plugin_migrations_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_migrations",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_permission_grants": {
+      "name": "plugin_permission_grants",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "capability": {
+          "name": "capability",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'admin'"
+        }
+      },
+      "indexes": {
+        "idx_plugin_permission_grants_plugin_capability": {
+          "name": "idx_plugin_permission_grants_plugin_capability",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "capability",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "plugin_permission_grants_plugin_id_plugins_id_fk": {
+          "name": "plugin_permission_grants_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "plugin_permission_grants_granted_by_users_id_fk": {
+          "name": "plugin_permission_grants_granted_by_users_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_registries": {
+      "name": "plugin_registries",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "url": {
+          "name": "url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kind": {
+          "name": "kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'community'"
+        },
+        "enabled": {
+          "name": "enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "signing_key": {
+          "name": "signing_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_checked_at": {
+          "name": "last_checked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_index_hash": {
+          "name": "last_index_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_settings": {
+      "name": "plugin_settings",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "scope": {
+          "name": "scope",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "scope_id": {
+          "name": "scope_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted": {
+          "name": "encrypted",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_settings_scope_key": {
+          "name": "idx_plugin_settings_scope_key",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "scope",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "scope_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_plugin_settings_plugin_scope": {
+          "name": "idx_plugin_settings_plugin_scope",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "scope",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "plugin_settings_plugin_id_plugins_id_fk": {
+          "name": "plugin_settings_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_settings",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_storage": {
+      "name": "plugin_storage",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_storage_plugin_key": {
+          "name": "idx_plugin_storage_plugin_key",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "plugin_storage_plugin_id_plugins_id_fk": {
+          "name": "plugin_storage_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_storage",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugins": {
+      "name": "plugins",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "version": {
+          "name": "version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "tier": {
+          "name": "tier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'available'"
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'community'"
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "state": {
+          "name": "state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'disabled'"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "installed_at": {
+          "name": "installed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "auto_update": {
+          "name": "auto_update",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "manifest_json": {
+          "name": "manifest_json",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "idx_plugins_registry_id": {
+          "name": "idx_plugins_registry_id",
+          "columns": [
+            {
+              "expression": "registry_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.rbac_applied_defaults": {
+      "name": "rbac_applied_defaults",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "role_name": {
+          "name": "role_name",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "permission": {
+          "name": "permission",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_rbac_applied_defaults_role_permission": {
+          "name": "idx_rbac_applied_defaults_role_permission",
+          "columns": [
+            {
+              "expression": "role_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "permission",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.rbac_known_permissions": {
+      "name": "rbac_known_permissions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "permission": {
+          "name": "permission",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "first_seen_at": {
+          "name": "first_seen_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_rbac_known_permissions_permission": {
+          "name": "idx_rbac_known_permissions_permission",
+          "columns": [
+            {
+              "expression": "permission",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.recent_activity": {
+      "name": "recent_activity",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "type": {
+          "name": "type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "host_name": {
+          "name": "host_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_recent_activity_user_ts": {
+          "name": "idx_recent_activity_user_ts",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "recent_activity_user_id_users_id_fk": {
+          "name": "recent_activity_user_id_users_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "recent_activity_host_id_ssh_data_id_fk": {
+          "name": "recent_activity_host_id_ssh_data_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.roles": {
+      "name": "roles",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "display_name": {
+          "name": "display_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "is_system": {
+          "name": "is_system",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "permissions": {
+          "name": "permissions",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "roles_name_unique": {
+          "name": "roles_name_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "name"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.sessions": {
+      "name": "sessions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "jwt_token": {
+          "name": "jwt_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "external_session_ref": {
+          "name": "external_session_ref",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "last_active_at": {
+          "name": "last_active_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sessions_user_id": {
+          "name": "idx_sessions_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_sessions_expires_at": {
+          "name": "idx_sessions_expires_at",
+          "columns": [
+            {
+              "expression": "expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "sessions_user_id_users_id_fk": {
+          "name": "sessions_user_id_users_id_fk",
+          "tableFrom": "sessions",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.settings": {
+      "name": "settings",
+      "schema": "",
+      "columns": {
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.shared_credential_secrets": {
+      "name": "shared_credential_secrets",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "credential_access_id": {
+          "name": "credential_access_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'password'"
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_shared_credential_secrets_scope": {
+          "name": "idx_shared_credential_secrets_scope",
+          "columns": [
+            {
+              "expression": "credential_access_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "target_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_shared_credential_secrets_target": {
+          "name": "idx_shared_credential_secrets_target",
+          "columns": [
+            {
+              "expression": "target_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "shared_credential_secrets_target_user_id_users_id_fk": {
+          "name": "shared_credential_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_credential_secrets_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_credential_secrets_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_cred_secrets_access_id_fk": {
+          "name": "shared_cred_secrets_access_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "credential_access",
+          "columnsFrom": [
+            "credential_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.shared_host_auth_overrides": {
+      "name": "shared_host_auth_overrides",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'ssh'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "shared_host_auth_overrides_host_user_protocol_unique": {
+          "name": "shared_host_auth_overrides_host_user_protocol_unique",
+          "columns": [
+            {
+              "expression": "host_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "protocol",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "shared_host_auth_overrides_host_id_ssh_data_id_fk": {
+          "name": "shared_host_auth_overrides_host_id_ssh_data_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_user_id_users_id_fk": {
+          "name": "shared_host_auth_overrides_user_id_users_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.shared_host_secrets": {
+      "name": "shared_host_secrets",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "host_access_id": {
+          "name": "host_access_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'ssh'"
+        },
+        "source_type": {
+          "name": "source_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'credential'"
+        },
+        "original_credential_id": {
+          "name": "original_credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_auth_type": {
+          "name": "encrypted_auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key_type": {
+          "name": "encrypted_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_domain": {
+          "name": "encrypted_domain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_fields": {
+          "name": "encrypted_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_shared_host_secrets_scope": {
+          "name": "idx_shared_host_secrets_scope",
+          "columns": [
+            {
+              "expression": "host_access_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "target_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "protocol",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "shared_host_secrets_host_access_id_host_access_id_fk": {
+          "name": "shared_host_secrets_host_access_id_host_access_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "host_access",
+          "columnsFrom": [
+            "host_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_target_user_id_users_id_fk": {
+          "name": "shared_host_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_original_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_secrets_original_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "original_credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ssh_credential_usage": {
+      "name": "ssh_credential_usage",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "used_at": {
+          "name": "used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credential_usage_credential": {
+          "name": "idx_ssh_credential_usage_credential",
+          "columns": [
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_ssh_credential_usage_user": {
+          "name": "idx_ssh_credential_usage_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "ssh_credential_usage_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_credential_usage_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_host_id_ssh_data_id_fk": {
+          "name": "ssh_credential_usage_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_user_id_users_id_fk": {
+          "name": "ssh_credential_usage_user_id_users_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ssh_credentials": {
+      "name": "ssh_credentials",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "private_key": {
+          "name": "private_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "detected_key_type": {
+          "name": "detected_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "usage_count": {
+          "name": "usage_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "last_used": {
+          "name": "last_used",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credentials_user_id": {
+          "name": "idx_ssh_credentials_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "ssh_credentials_user_id_users_id_fk": {
+          "name": "ssh_credentials_user_id_users_id_fk",
+          "tableFrom": "ssh_credentials",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "ssh_credentials_sync_id_unique": {
+          "name": "ssh_credentials_sync_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ssh_folders": {
+      "name": "ssh_folders",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "color": {
+          "name": "color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "icon": {
+          "name": "icon",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_folders_user_id": {
+          "name": "idx_ssh_folders_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "ssh_folders_user_id_users_id_fk": {
+          "name": "ssh_folders_user_id_users_id_fk",
+          "tableFrom": "ssh_folders",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "ssh_folders_sync_id_unique": {
+          "name": "ssh_folders_sync_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.sync_conflicts": {
+      "name": "sync_conflicts",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "local_row": {
+          "name": "local_row",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "server_revision": {
+          "name": "server_revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sync_conflicts_user": {
+          "name": "idx_sync_conflicts_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "sync_conflicts_user_id_users_id_fk": {
+          "name": "sync_conflicts_user_id_users_id_fk",
+          "tableFrom": "sync_conflicts",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.sync_link": {
+      "name": "sync_link",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "server_url": {
+          "name": "server_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "server_name": {
+          "name": "server_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "server_version": {
+          "name": "server_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "session_token": {
+          "name": "session_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "custom_headers": {
+          "name": "custom_headers",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "basic_auth": {
+          "name": "basic_auth",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "allow_invalid_certificate": {
+          "name": "allow_invalid_certificate",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "remote_user_id": {
+          "name": "remote_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "remote_username": {
+          "name": "remote_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "account": {
+          "name": "account",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "known_types": {
+          "name": "known_types",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cursor": {
+          "name": "cursor",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'idle'"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "linked_at": {
+          "name": "linked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "last_sync_at": {
+          "name": "last_sync_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "sync_link_user_id_users_id_fk": {
+          "name": "sync_link_user_id_users_id_fk",
+          "tableFrom": "sync_link",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.sync_records": {
+      "name": "sync_records",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "revision": {
+          "name": "revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "seq": {
+          "name": "seq",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "hash": {
+          "name": "hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "deleted": {
+          "name": "deleted",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "error": {
+          "name": "error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "error_hash": {
+          "name": "error_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sync_records_user_entity_sync": {
+          "name": "idx_sync_records_user_entity_sync",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "entity_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "sync_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_sync_records_user_seq": {
+          "name": "idx_sync_records_user_seq",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "seq",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "sync_records_user_id_users_id_fk": {
+          "name": "sync_records_user_id_users_id_fk",
+          "tableFrom": "sync_records",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.trusted_devices": {
+      "name": "trusted_devices",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_fingerprint": {
+          "name": "device_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_trusted_devices_user_id": {
+          "name": "idx_trusted_devices_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "trusted_devices_user_id_users_id_fk": {
+          "name": "trusted_devices_user_id_users_id_fk",
+          "tableFrom": "trusted_devices",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ui_preferences": {
+      "name": "ui_preferences",
+      "schema": "",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "ui_preferences_user_id_users_id_fk": {
+          "name": "ui_preferences_user_id_users_id_fk",
+          "tableFrom": "ui_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_external_identities": {
+      "name": "user_external_identities",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_id": {
+          "name": "provider_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "subject": {
+          "name": "subject",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_external_identities_provider_subject": {
+          "name": "idx_user_external_identities_provider_subject",
+          "columns": [
+            {
+              "expression": "provider_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "subject",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_user_external_identities_user": {
+          "name": "idx_user_external_identities_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_external_identities_user_id_users_id_fk": {
+          "name": "user_external_identities_user_id_users_id_fk",
+          "tableFrom": "user_external_identities",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_open_tabs": {
+      "name": "user_open_tabs",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "tab_type": {
+          "name": "tab_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "label": {
+          "name": "label",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "tab_order": {
+          "name": "tab_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "backend_session_id": {
+          "name": "backend_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_open_tabs_user_id": {
+          "name": "idx_user_open_tabs_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_open_tabs_user_id_users_id_fk": {
+          "name": "user_open_tabs_user_id_users_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_open_tabs_host_id_ssh_data_id_fk": {
+          "name": "user_open_tabs_host_id_ssh_data_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_preferences": {
+      "name": "user_preferences",
+      "schema": "",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "reopen_tabs_on_login": {
+          "name": "reopen_tabs_on_login",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "theme": {
+          "name": "theme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "font_size": {
+          "name": "font_size",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "accent_color": {
+          "name": "accent_color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "language": {
+          "name": "language",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "storage_mode": {
+          "name": "storage_mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "command_palette_enabled": {
+          "name": "command_palette_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "show_host_tags": {
+          "name": "show_host_tags",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_tray_on_click": {
+          "name": "host_tray_on_click",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pin_app_rail": {
+          "name": "pin_app_rail",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "expand_app_rail_on_hover": {
+          "name": "expand_app_rail_on_hover",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "show_pin_app_rail_button": {
+          "name": "show_pin_app_rail_button",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "folders_collapsed": {
+          "name": "folders_collapsed",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "disable_update_check": {
+          "name": "disable_update_check",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "confirm_tab_close": {
+          "name": "confirm_tab_close",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "hidden_rail_tabs": {
+          "name": "hidden_rail_tabs",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "compact_host_view": {
+          "name": "compact_host_view",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status_color_scheme": {
+          "name": "status_color_scheme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "custom_keybindings": {
+          "name": "custom_keybindings",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "user_preferences_user_id_users_id_fk": {
+          "name": "user_preferences_user_id_users_id_fk",
+          "tableFrom": "user_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_roles": {
+      "name": "user_roles",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_roles_user_role": {
+          "name": "idx_user_roles_user_role",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "role_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_user_roles_role_id": {
+          "name": "idx_user_roles_role_id",
+          "columns": [
+            {
+              "expression": "role_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_roles_user_id_users_id_fk": {
+          "name": "user_roles_user_id_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_role_id_roles_id_fk": {
+          "name": "user_roles_role_id_roles_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_granted_by_users_id_fk": {
+          "name": "user_roles_granted_by_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_second_factors": {
+      "name": "user_second_factors",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "factor_id": {
+          "name": "factor_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "enrolled_at": {
+          "name": "enrolled_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_second_factors_user_factor": {
+          "name": "idx_user_second_factors_user_factor",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "factor_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_second_factors_user_id_users_id_fk": {
+          "name": "user_second_factors_user_id_users_id_fk",
+          "tableFrom": "user_second_factors",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.users": {
+      "name": "users",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "password_hash": {
+          "name": "password_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "is_admin": {
+          "name": "is_admin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "registered_at": {
+          "name": "registered_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "donation_modal_dismissed": {
+          "name": "donation_modal_dismissed",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    }
+  },
+  "enums": {},
+  "schemas": {},
+  "sequences": {},
+  "roles": {},
+  "policies": {},
+  "views": {},
+  "_meta": {
+    "columns": {},
+    "schemas": {},
+    "tables": {}
+  }
+}
\ No newline at end of file
diff --git a/drizzle/postgres/meta/0068_snapshot.json b/drizzle/postgres/meta/0068_snapshot.json
new file mode 100644
index 000000000..89d6bf20f
--- /dev/null
+++ b/drizzle/postgres/meta/0068_snapshot.json
@@ -0,0 +1,4770 @@
+{
+  "id": "6d2db0b8-e68a-4537-9b6e-1e232c591629",
+  "prevId": "0e009e23-d22a-4b65-a142-0887e2f243a3",
+  "version": "7",
+  "dialect": "postgresql",
+  "tables": {
+    "public.api_keys": {
+      "name": "api_keys",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "token_hash": {
+          "name": "token_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "token_prefix": {
+          "name": "token_prefix",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "is_active": {
+          "name": "is_active",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        }
+      },
+      "indexes": {
+        "idx_api_keys_user_id": {
+          "name": "idx_api_keys_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "api_keys_user_id_users_id_fk": {
+          "name": "api_keys_user_id_users_id_fk",
+          "tableFrom": "api_keys",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.audit_logs": {
+      "name": "audit_logs",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "action": {
+          "name": "action",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "resource_type": {
+          "name": "resource_type",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "resource_id": {
+          "name": "resource_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "resource_name": {
+          "name": "resource_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "details": {
+          "name": "details",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ip_address": {
+          "name": "ip_address",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "user_agent": {
+          "name": "user_agent",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "success": {
+          "name": "success",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_audit_logs_timestamp": {
+          "name": "idx_audit_logs_timestamp",
+          "columns": [
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_audit_logs_user_ts": {
+          "name": "idx_audit_logs_user_ts",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_audit_logs_action_ts": {
+          "name": "idx_audit_logs_action_ts",
+          "columns": [
+            {
+              "expression": "action",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_audit_logs_resource_ts": {
+          "name": "idx_audit_logs_resource_ts",
+          "columns": [
+            {
+              "expression": "resource_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "audit_logs_user_id_users_id_fk": {
+          "name": "audit_logs_user_id_users_id_fk",
+          "tableFrom": "audit_logs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.credential_access": {
+      "name": "credential_access",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'use'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_credential_access_user_id": {
+          "name": "idx_credential_access_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_credential_access_role_id": {
+          "name": "idx_credential_access_role_id",
+          "columns": [
+            {
+              "expression": "role_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_credential_access_credential_id": {
+          "name": "idx_credential_access_credential_id",
+          "columns": [
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "credential_access_credential_id_ssh_credentials_id_fk": {
+          "name": "credential_access_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_user_id_users_id_fk": {
+          "name": "credential_access_user_id_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_role_id_roles_id_fk": {
+          "name": "credential_access_role_id_roles_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_granted_by_users_id_fk": {
+          "name": "credential_access_granted_by_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.credential_sidebar_preferences": {
+      "name": "credential_sidebar_preferences",
+      "schema": "",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "credential_sidebar_preferences_user_id_users_id_fk": {
+          "name": "credential_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "credential_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.folder_access": {
+      "name": "folder_access",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "owner_user_id": {
+          "name": "owner_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "folder": {
+          "name": "folder",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'connect'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_folder_access_owner_folder": {
+          "name": "idx_folder_access_owner_folder",
+          "columns": [
+            {
+              "expression": "owner_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "folder",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "folder_access_owner_user_id_users_id_fk": {
+          "name": "folder_access_owner_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "owner_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_user_id_users_id_fk": {
+          "name": "folder_access_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_role_id_roles_id_fk": {
+          "name": "folder_access_role_id_roles_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_granted_by_users_id_fk": {
+          "name": "folder_access_granted_by_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.host_access": {
+      "name": "host_access",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'connect'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "last_accessed_at": {
+          "name": "last_accessed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "access_count": {
+          "name": "access_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        }
+      },
+      "indexes": {
+        "idx_host_access_user_id": {
+          "name": "idx_host_access_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_access_role_id": {
+          "name": "idx_host_access_role_id",
+          "columns": [
+            {
+              "expression": "role_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_access_host_id": {
+          "name": "idx_host_access_host_id",
+          "columns": [
+            {
+              "expression": "host_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_access_expires_at": {
+          "name": "idx_host_access_expires_at",
+          "columns": [
+            {
+              "expression": "expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "host_access_host_id_ssh_data_id_fk": {
+          "name": "host_access_host_id_ssh_data_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_user_id_users_id_fk": {
+          "name": "host_access_user_id_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_role_id_roles_id_fk": {
+          "name": "host_access_role_id_roles_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_granted_by_users_id_fk": {
+          "name": "host_access_granted_by_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.host_defaults": {
+      "name": "host_defaults",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "level": {
+          "name": "level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "scope_key": {
+          "name": "scope_key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "folder_id": {
+          "name": "folder_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "namespace": {
+          "name": "namespace",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_by": {
+          "name": "updated_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_host_defaults_scope_key": {
+          "name": "idx_host_defaults_scope_key",
+          "columns": [
+            {
+              "expression": "scope_key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "namespace",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_defaults_user": {
+          "name": "idx_host_defaults_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_defaults_folder": {
+          "name": "idx_host_defaults_folder",
+          "columns": [
+            {
+              "expression": "folder_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "host_defaults_user_id_users_id_fk": {
+          "name": "host_defaults_user_id_users_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_defaults_folder_id_ssh_folders_id_fk": {
+          "name": "host_defaults_folder_id_ssh_folders_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "ssh_folders",
+          "columnsFrom": [
+            "folder_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.host_protocol_auth": {
+      "name": "host_protocol_auth",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'direct'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "fields": {
+          "name": "fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "secret_fields": {
+          "name": "secret_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_host_protocol_auth_host_protocol": {
+          "name": "idx_host_protocol_auth_host_protocol",
+          "columns": [
+            {
+              "expression": "host_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "protocol",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_protocol_auth_user": {
+          "name": "idx_host_protocol_auth_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_protocol_auth_credential": {
+          "name": "idx_host_protocol_auth_credential",
+          "columns": [
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "host_protocol_auth_host_id_ssh_data_id_fk": {
+          "name": "host_protocol_auth_host_id_ssh_data_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_user_id_users_id_fk": {
+          "name": "host_protocol_auth_user_id_users_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_credential_id_ssh_credentials_id_fk": {
+          "name": "host_protocol_auth_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.host_sidebar_preferences": {
+      "name": "host_sidebar_preferences",
+      "schema": "",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "host_sidebar_preferences_user_id_users_id_fk": {
+          "name": "host_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "host_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ssh_data": {
+      "name": "ssh_data",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "connection_type": {
+          "name": "connection_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'ssh'"
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ip": {
+          "name": "ip",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "port": {
+          "name": "port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "parent_host_id": {
+          "name": "parent_host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "share_ssh_auth": {
+          "name": "share_ssh_auth",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "force_keyboard_interactive": {
+          "name": "force_keyboard_interactive",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sudo_password": {
+          "name": "sudo_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "override_credential_username": {
+          "name": "override_credential_username",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "jump_hosts": {
+          "name": "jump_hosts",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status_check_enabled": {
+          "name": "status_check_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "status_check_interval": {
+          "name": "status_check_interval",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ssh_options": {
+          "name": "ssh_options",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "notes": {
+          "name": "notes",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "enable_ssh": {
+          "name": "enable_ssh",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "ssh_port": {
+          "name": "ssh_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "default": 22
+        },
+        "use_socks5": {
+          "name": "use_socks5",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_host": {
+          "name": "socks5_host",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_port": {
+          "name": "socks5_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_username": {
+          "name": "socks5_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_password": {
+          "name": "socks5_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_proxy_chain": {
+          "name": "socks5_proxy_chain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "connection_origin": {
+          "name": "connection_origin",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "port_knock_sequence": {
+          "name": "port_knock_sequence",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_fingerprint": {
+          "name": "host_key_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_type": {
+          "name": "host_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_algorithm": {
+          "name": "host_key_algorithm",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "default": "'sha256'"
+        },
+        "host_key_first_seen": {
+          "name": "host_key_first_seen",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_last_verified": {
+          "name": "host_key_last_verified",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_changed_count": {
+          "name": "host_key_changed_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "default": 0
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "default_overrides": {
+          "name": "default_overrides",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_data_user_id": {
+          "name": "idx_ssh_data_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_ssh_data_parent_host": {
+          "name": "idx_ssh_data_parent_host",
+          "columns": [
+            {
+              "expression": "parent_host_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_ssh_data_credential": {
+          "name": "idx_ssh_data_credential",
+          "columns": [
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "ssh_data_user_id_users_id_fk": {
+          "name": "ssh_data_user_id_users_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_data_parent_host_id_ssh_data_id_fk": {
+          "name": "ssh_data_parent_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "parent_host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "ssh_data_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_data_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "ssh_data_sync_id_unique": {
+          "name": "ssh_data_sync_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_install_counts": {
+      "name": "plugin_install_counts",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "count": {
+          "name": "count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'aggregate-telemetry'"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_install_counts_plugin_registry": {
+          "name": "idx_plugin_install_counts_plugin_registry",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "registry_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_migrations": {
+      "name": "plugin_migrations",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "migration_id": {
+          "name": "migration_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "checksum": {
+          "name": "checksum",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_migrations_plugin_migration": {
+          "name": "idx_plugin_migrations_plugin_migration",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "migration_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "plugin_migrations_plugin_id_plugins_id_fk": {
+          "name": "plugin_migrations_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_migrations",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_permission_grants": {
+      "name": "plugin_permission_grants",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "capability": {
+          "name": "capability",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'admin'"
+        }
+      },
+      "indexes": {
+        "idx_plugin_permission_grants_plugin_capability": {
+          "name": "idx_plugin_permission_grants_plugin_capability",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "capability",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "plugin_permission_grants_plugin_id_plugins_id_fk": {
+          "name": "plugin_permission_grants_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "plugin_permission_grants_granted_by_users_id_fk": {
+          "name": "plugin_permission_grants_granted_by_users_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_registries": {
+      "name": "plugin_registries",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "url": {
+          "name": "url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kind": {
+          "name": "kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'community'"
+        },
+        "enabled": {
+          "name": "enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "signing_key": {
+          "name": "signing_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_checked_at": {
+          "name": "last_checked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_index_hash": {
+          "name": "last_index_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_settings": {
+      "name": "plugin_settings",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "scope": {
+          "name": "scope",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "scope_id": {
+          "name": "scope_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted": {
+          "name": "encrypted",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_settings_scope_key": {
+          "name": "idx_plugin_settings_scope_key",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "scope",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "scope_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_plugin_settings_plugin_scope": {
+          "name": "idx_plugin_settings_plugin_scope",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "scope",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "plugin_settings_plugin_id_plugins_id_fk": {
+          "name": "plugin_settings_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_settings",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_storage": {
+      "name": "plugin_storage",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_storage_plugin_key": {
+          "name": "idx_plugin_storage_plugin_key",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "plugin_storage_plugin_id_plugins_id_fk": {
+          "name": "plugin_storage_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_storage",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugins": {
+      "name": "plugins",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "version": {
+          "name": "version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "tier": {
+          "name": "tier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'available'"
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'community'"
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "state": {
+          "name": "state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'disabled'"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "installed_at": {
+          "name": "installed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "auto_update": {
+          "name": "auto_update",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "pinned_version": {
+          "name": "pinned_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "manifest_json": {
+          "name": "manifest_json",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "idx_plugins_registry_id": {
+          "name": "idx_plugins_registry_id",
+          "columns": [
+            {
+              "expression": "registry_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.rbac_applied_defaults": {
+      "name": "rbac_applied_defaults",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "role_name": {
+          "name": "role_name",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "permission": {
+          "name": "permission",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_rbac_applied_defaults_role_permission": {
+          "name": "idx_rbac_applied_defaults_role_permission",
+          "columns": [
+            {
+              "expression": "role_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "permission",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.rbac_known_permissions": {
+      "name": "rbac_known_permissions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "permission": {
+          "name": "permission",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "first_seen_at": {
+          "name": "first_seen_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_rbac_known_permissions_permission": {
+          "name": "idx_rbac_known_permissions_permission",
+          "columns": [
+            {
+              "expression": "permission",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.recent_activity": {
+      "name": "recent_activity",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "type": {
+          "name": "type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "host_name": {
+          "name": "host_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_recent_activity_user_ts": {
+          "name": "idx_recent_activity_user_ts",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "recent_activity_user_id_users_id_fk": {
+          "name": "recent_activity_user_id_users_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "recent_activity_host_id_ssh_data_id_fk": {
+          "name": "recent_activity_host_id_ssh_data_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.roles": {
+      "name": "roles",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "display_name": {
+          "name": "display_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "is_system": {
+          "name": "is_system",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "permissions": {
+          "name": "permissions",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "roles_name_unique": {
+          "name": "roles_name_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "name"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.sessions": {
+      "name": "sessions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "jwt_token": {
+          "name": "jwt_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "external_session_ref": {
+          "name": "external_session_ref",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "last_active_at": {
+          "name": "last_active_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sessions_user_id": {
+          "name": "idx_sessions_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_sessions_expires_at": {
+          "name": "idx_sessions_expires_at",
+          "columns": [
+            {
+              "expression": "expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "sessions_user_id_users_id_fk": {
+          "name": "sessions_user_id_users_id_fk",
+          "tableFrom": "sessions",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.settings": {
+      "name": "settings",
+      "schema": "",
+      "columns": {
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.shared_credential_secrets": {
+      "name": "shared_credential_secrets",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "credential_access_id": {
+          "name": "credential_access_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'password'"
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_shared_credential_secrets_scope": {
+          "name": "idx_shared_credential_secrets_scope",
+          "columns": [
+            {
+              "expression": "credential_access_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "target_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_shared_credential_secrets_target": {
+          "name": "idx_shared_credential_secrets_target",
+          "columns": [
+            {
+              "expression": "target_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "shared_credential_secrets_target_user_id_users_id_fk": {
+          "name": "shared_credential_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_credential_secrets_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_credential_secrets_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_cred_secrets_access_id_fk": {
+          "name": "shared_cred_secrets_access_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "credential_access",
+          "columnsFrom": [
+            "credential_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.shared_host_auth_overrides": {
+      "name": "shared_host_auth_overrides",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'ssh'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "shared_host_auth_overrides_host_user_protocol_unique": {
+          "name": "shared_host_auth_overrides_host_user_protocol_unique",
+          "columns": [
+            {
+              "expression": "host_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "protocol",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "shared_host_auth_overrides_host_id_ssh_data_id_fk": {
+          "name": "shared_host_auth_overrides_host_id_ssh_data_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_user_id_users_id_fk": {
+          "name": "shared_host_auth_overrides_user_id_users_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.shared_host_secrets": {
+      "name": "shared_host_secrets",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "host_access_id": {
+          "name": "host_access_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'ssh'"
+        },
+        "source_type": {
+          "name": "source_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'credential'"
+        },
+        "original_credential_id": {
+          "name": "original_credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_auth_type": {
+          "name": "encrypted_auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key_type": {
+          "name": "encrypted_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_domain": {
+          "name": "encrypted_domain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_fields": {
+          "name": "encrypted_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_shared_host_secrets_scope": {
+          "name": "idx_shared_host_secrets_scope",
+          "columns": [
+            {
+              "expression": "host_access_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "target_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "protocol",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "shared_host_secrets_host_access_id_host_access_id_fk": {
+          "name": "shared_host_secrets_host_access_id_host_access_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "host_access",
+          "columnsFrom": [
+            "host_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_target_user_id_users_id_fk": {
+          "name": "shared_host_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_original_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_secrets_original_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "original_credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ssh_credential_usage": {
+      "name": "ssh_credential_usage",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "used_at": {
+          "name": "used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credential_usage_credential": {
+          "name": "idx_ssh_credential_usage_credential",
+          "columns": [
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_ssh_credential_usage_user": {
+          "name": "idx_ssh_credential_usage_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "ssh_credential_usage_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_credential_usage_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_host_id_ssh_data_id_fk": {
+          "name": "ssh_credential_usage_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_user_id_users_id_fk": {
+          "name": "ssh_credential_usage_user_id_users_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ssh_credentials": {
+      "name": "ssh_credentials",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "private_key": {
+          "name": "private_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "detected_key_type": {
+          "name": "detected_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "usage_count": {
+          "name": "usage_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "last_used": {
+          "name": "last_used",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credentials_user_id": {
+          "name": "idx_ssh_credentials_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "ssh_credentials_user_id_users_id_fk": {
+          "name": "ssh_credentials_user_id_users_id_fk",
+          "tableFrom": "ssh_credentials",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "ssh_credentials_sync_id_unique": {
+          "name": "ssh_credentials_sync_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ssh_folders": {
+      "name": "ssh_folders",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "color": {
+          "name": "color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "icon": {
+          "name": "icon",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_folders_user_id": {
+          "name": "idx_ssh_folders_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "ssh_folders_user_id_users_id_fk": {
+          "name": "ssh_folders_user_id_users_id_fk",
+          "tableFrom": "ssh_folders",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "ssh_folders_sync_id_unique": {
+          "name": "ssh_folders_sync_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.sync_conflicts": {
+      "name": "sync_conflicts",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "local_row": {
+          "name": "local_row",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "server_revision": {
+          "name": "server_revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sync_conflicts_user": {
+          "name": "idx_sync_conflicts_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "sync_conflicts_user_id_users_id_fk": {
+          "name": "sync_conflicts_user_id_users_id_fk",
+          "tableFrom": "sync_conflicts",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.sync_link": {
+      "name": "sync_link",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "server_url": {
+          "name": "server_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "server_name": {
+          "name": "server_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "server_version": {
+          "name": "server_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "session_token": {
+          "name": "session_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "custom_headers": {
+          "name": "custom_headers",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "basic_auth": {
+          "name": "basic_auth",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "allow_invalid_certificate": {
+          "name": "allow_invalid_certificate",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "remote_user_id": {
+          "name": "remote_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "remote_username": {
+          "name": "remote_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "account": {
+          "name": "account",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "known_types": {
+          "name": "known_types",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cursor": {
+          "name": "cursor",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'idle'"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "linked_at": {
+          "name": "linked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "last_sync_at": {
+          "name": "last_sync_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "sync_link_user_id_users_id_fk": {
+          "name": "sync_link_user_id_users_id_fk",
+          "tableFrom": "sync_link",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.sync_records": {
+      "name": "sync_records",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "revision": {
+          "name": "revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "seq": {
+          "name": "seq",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "hash": {
+          "name": "hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "deleted": {
+          "name": "deleted",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "error": {
+          "name": "error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "error_hash": {
+          "name": "error_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sync_records_user_entity_sync": {
+          "name": "idx_sync_records_user_entity_sync",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "entity_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "sync_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_sync_records_user_seq": {
+          "name": "idx_sync_records_user_seq",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "seq",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "sync_records_user_id_users_id_fk": {
+          "name": "sync_records_user_id_users_id_fk",
+          "tableFrom": "sync_records",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.trusted_devices": {
+      "name": "trusted_devices",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_fingerprint": {
+          "name": "device_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_trusted_devices_user_id": {
+          "name": "idx_trusted_devices_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "trusted_devices_user_id_users_id_fk": {
+          "name": "trusted_devices_user_id_users_id_fk",
+          "tableFrom": "trusted_devices",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ui_preferences": {
+      "name": "ui_preferences",
+      "schema": "",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "ui_preferences_user_id_users_id_fk": {
+          "name": "ui_preferences_user_id_users_id_fk",
+          "tableFrom": "ui_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_external_identities": {
+      "name": "user_external_identities",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_id": {
+          "name": "provider_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "subject": {
+          "name": "subject",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_external_identities_provider_subject": {
+          "name": "idx_user_external_identities_provider_subject",
+          "columns": [
+            {
+              "expression": "provider_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "subject",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_user_external_identities_user": {
+          "name": "idx_user_external_identities_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_external_identities_user_id_users_id_fk": {
+          "name": "user_external_identities_user_id_users_id_fk",
+          "tableFrom": "user_external_identities",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_open_tabs": {
+      "name": "user_open_tabs",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "tab_type": {
+          "name": "tab_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "label": {
+          "name": "label",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "tab_order": {
+          "name": "tab_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "backend_session_id": {
+          "name": "backend_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_open_tabs_user_id": {
+          "name": "idx_user_open_tabs_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_open_tabs_user_id_users_id_fk": {
+          "name": "user_open_tabs_user_id_users_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_open_tabs_host_id_ssh_data_id_fk": {
+          "name": "user_open_tabs_host_id_ssh_data_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_preferences": {
+      "name": "user_preferences",
+      "schema": "",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "reopen_tabs_on_login": {
+          "name": "reopen_tabs_on_login",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "theme": {
+          "name": "theme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "font_size": {
+          "name": "font_size",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "accent_color": {
+          "name": "accent_color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "language": {
+          "name": "language",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "storage_mode": {
+          "name": "storage_mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "command_palette_enabled": {
+          "name": "command_palette_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "show_host_tags": {
+          "name": "show_host_tags",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_tray_on_click": {
+          "name": "host_tray_on_click",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pin_app_rail": {
+          "name": "pin_app_rail",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "expand_app_rail_on_hover": {
+          "name": "expand_app_rail_on_hover",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "show_pin_app_rail_button": {
+          "name": "show_pin_app_rail_button",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "folders_collapsed": {
+          "name": "folders_collapsed",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "disable_update_check": {
+          "name": "disable_update_check",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "confirm_tab_close": {
+          "name": "confirm_tab_close",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "hidden_rail_tabs": {
+          "name": "hidden_rail_tabs",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "compact_host_view": {
+          "name": "compact_host_view",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status_color_scheme": {
+          "name": "status_color_scheme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "custom_keybindings": {
+          "name": "custom_keybindings",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "user_preferences_user_id_users_id_fk": {
+          "name": "user_preferences_user_id_users_id_fk",
+          "tableFrom": "user_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_roles": {
+      "name": "user_roles",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_roles_user_role": {
+          "name": "idx_user_roles_user_role",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "role_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_user_roles_role_id": {
+          "name": "idx_user_roles_role_id",
+          "columns": [
+            {
+              "expression": "role_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_roles_user_id_users_id_fk": {
+          "name": "user_roles_user_id_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_role_id_roles_id_fk": {
+          "name": "user_roles_role_id_roles_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_granted_by_users_id_fk": {
+          "name": "user_roles_granted_by_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_second_factors": {
+      "name": "user_second_factors",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "factor_id": {
+          "name": "factor_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "enrolled_at": {
+          "name": "enrolled_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_second_factors_user_factor": {
+          "name": "idx_user_second_factors_user_factor",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "factor_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_second_factors_user_id_users_id_fk": {
+          "name": "user_second_factors_user_id_users_id_fk",
+          "tableFrom": "user_second_factors",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.users": {
+      "name": "users",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "password_hash": {
+          "name": "password_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "is_admin": {
+          "name": "is_admin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "registered_at": {
+          "name": "registered_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "donation_modal_dismissed": {
+          "name": "donation_modal_dismissed",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    }
+  },
+  "enums": {},
+  "schemas": {},
+  "sequences": {},
+  "roles": {},
+  "policies": {},
+  "views": {},
+  "_meta": {
+    "columns": {},
+    "schemas": {},
+    "tables": {}
+  }
+}
\ No newline at end of file
diff --git a/drizzle/postgres/meta/0069_snapshot.json b/drizzle/postgres/meta/0069_snapshot.json
new file mode 100644
index 000000000..e54f8c821
--- /dev/null
+++ b/drizzle/postgres/meta/0069_snapshot.json
@@ -0,0 +1,4777 @@
+{
+  "id": "6f40b539-787c-4649-be7d-5e59d30e5e43",
+  "prevId": "6d2db0b8-e68a-4537-9b6e-1e232c591629",
+  "version": "7",
+  "dialect": "postgresql",
+  "tables": {
+    "public.api_keys": {
+      "name": "api_keys",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "token_hash": {
+          "name": "token_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "token_prefix": {
+          "name": "token_prefix",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "is_active": {
+          "name": "is_active",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        }
+      },
+      "indexes": {
+        "idx_api_keys_user_id": {
+          "name": "idx_api_keys_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "api_keys_user_id_users_id_fk": {
+          "name": "api_keys_user_id_users_id_fk",
+          "tableFrom": "api_keys",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.audit_logs": {
+      "name": "audit_logs",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "action": {
+          "name": "action",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "resource_type": {
+          "name": "resource_type",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "resource_id": {
+          "name": "resource_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "resource_name": {
+          "name": "resource_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "details": {
+          "name": "details",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ip_address": {
+          "name": "ip_address",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "user_agent": {
+          "name": "user_agent",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "success": {
+          "name": "success",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_audit_logs_timestamp": {
+          "name": "idx_audit_logs_timestamp",
+          "columns": [
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_audit_logs_user_ts": {
+          "name": "idx_audit_logs_user_ts",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_audit_logs_action_ts": {
+          "name": "idx_audit_logs_action_ts",
+          "columns": [
+            {
+              "expression": "action",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_audit_logs_resource_ts": {
+          "name": "idx_audit_logs_resource_ts",
+          "columns": [
+            {
+              "expression": "resource_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "audit_logs_user_id_users_id_fk": {
+          "name": "audit_logs_user_id_users_id_fk",
+          "tableFrom": "audit_logs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.credential_access": {
+      "name": "credential_access",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'use'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_credential_access_user_id": {
+          "name": "idx_credential_access_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_credential_access_role_id": {
+          "name": "idx_credential_access_role_id",
+          "columns": [
+            {
+              "expression": "role_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_credential_access_credential_id": {
+          "name": "idx_credential_access_credential_id",
+          "columns": [
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "credential_access_credential_id_ssh_credentials_id_fk": {
+          "name": "credential_access_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_user_id_users_id_fk": {
+          "name": "credential_access_user_id_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_role_id_roles_id_fk": {
+          "name": "credential_access_role_id_roles_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_granted_by_users_id_fk": {
+          "name": "credential_access_granted_by_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.credential_sidebar_preferences": {
+      "name": "credential_sidebar_preferences",
+      "schema": "",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "credential_sidebar_preferences_user_id_users_id_fk": {
+          "name": "credential_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "credential_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.folder_access": {
+      "name": "folder_access",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "owner_user_id": {
+          "name": "owner_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "folder": {
+          "name": "folder",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'connect'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_folder_access_owner_folder": {
+          "name": "idx_folder_access_owner_folder",
+          "columns": [
+            {
+              "expression": "owner_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "folder",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "folder_access_owner_user_id_users_id_fk": {
+          "name": "folder_access_owner_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "owner_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_user_id_users_id_fk": {
+          "name": "folder_access_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_role_id_roles_id_fk": {
+          "name": "folder_access_role_id_roles_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_granted_by_users_id_fk": {
+          "name": "folder_access_granted_by_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.host_access": {
+      "name": "host_access",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'connect'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "last_accessed_at": {
+          "name": "last_accessed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "access_count": {
+          "name": "access_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        }
+      },
+      "indexes": {
+        "idx_host_access_user_id": {
+          "name": "idx_host_access_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_access_role_id": {
+          "name": "idx_host_access_role_id",
+          "columns": [
+            {
+              "expression": "role_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_access_host_id": {
+          "name": "idx_host_access_host_id",
+          "columns": [
+            {
+              "expression": "host_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_access_expires_at": {
+          "name": "idx_host_access_expires_at",
+          "columns": [
+            {
+              "expression": "expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "host_access_host_id_ssh_data_id_fk": {
+          "name": "host_access_host_id_ssh_data_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_user_id_users_id_fk": {
+          "name": "host_access_user_id_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_role_id_roles_id_fk": {
+          "name": "host_access_role_id_roles_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_granted_by_users_id_fk": {
+          "name": "host_access_granted_by_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.host_defaults": {
+      "name": "host_defaults",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "level": {
+          "name": "level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "scope_key": {
+          "name": "scope_key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "folder_id": {
+          "name": "folder_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "namespace": {
+          "name": "namespace",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_by": {
+          "name": "updated_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_host_defaults_scope_key": {
+          "name": "idx_host_defaults_scope_key",
+          "columns": [
+            {
+              "expression": "scope_key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "namespace",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_defaults_user": {
+          "name": "idx_host_defaults_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_defaults_folder": {
+          "name": "idx_host_defaults_folder",
+          "columns": [
+            {
+              "expression": "folder_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "host_defaults_user_id_users_id_fk": {
+          "name": "host_defaults_user_id_users_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_defaults_folder_id_ssh_folders_id_fk": {
+          "name": "host_defaults_folder_id_ssh_folders_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "ssh_folders",
+          "columnsFrom": [
+            "folder_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.host_protocol_auth": {
+      "name": "host_protocol_auth",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'direct'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "fields": {
+          "name": "fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "secret_fields": {
+          "name": "secret_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_host_protocol_auth_host_protocol": {
+          "name": "idx_host_protocol_auth_host_protocol",
+          "columns": [
+            {
+              "expression": "host_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "protocol",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_protocol_auth_user": {
+          "name": "idx_host_protocol_auth_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_protocol_auth_credential": {
+          "name": "idx_host_protocol_auth_credential",
+          "columns": [
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "host_protocol_auth_host_id_ssh_data_id_fk": {
+          "name": "host_protocol_auth_host_id_ssh_data_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_user_id_users_id_fk": {
+          "name": "host_protocol_auth_user_id_users_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_credential_id_ssh_credentials_id_fk": {
+          "name": "host_protocol_auth_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.host_sidebar_preferences": {
+      "name": "host_sidebar_preferences",
+      "schema": "",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "host_sidebar_preferences_user_id_users_id_fk": {
+          "name": "host_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "host_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ssh_data": {
+      "name": "ssh_data",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "connection_type": {
+          "name": "connection_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'ssh'"
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ip": {
+          "name": "ip",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "port": {
+          "name": "port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "parent_host_id": {
+          "name": "parent_host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "share_ssh_auth": {
+          "name": "share_ssh_auth",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "force_keyboard_interactive": {
+          "name": "force_keyboard_interactive",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sudo_password": {
+          "name": "sudo_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "override_credential_username": {
+          "name": "override_credential_username",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "jump_hosts": {
+          "name": "jump_hosts",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status_check_enabled": {
+          "name": "status_check_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "status_check_interval": {
+          "name": "status_check_interval",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ssh_options": {
+          "name": "ssh_options",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "notes": {
+          "name": "notes",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "enable_ssh": {
+          "name": "enable_ssh",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "ssh_port": {
+          "name": "ssh_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "default": 22
+        },
+        "use_socks5": {
+          "name": "use_socks5",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_host": {
+          "name": "socks5_host",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_port": {
+          "name": "socks5_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_username": {
+          "name": "socks5_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_password": {
+          "name": "socks5_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_proxy_chain": {
+          "name": "socks5_proxy_chain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "connection_origin": {
+          "name": "connection_origin",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "port_knock_sequence": {
+          "name": "port_knock_sequence",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_fingerprint": {
+          "name": "host_key_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_type": {
+          "name": "host_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_algorithm": {
+          "name": "host_key_algorithm",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "default": "'sha256'"
+        },
+        "host_key_first_seen": {
+          "name": "host_key_first_seen",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_last_verified": {
+          "name": "host_key_last_verified",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_changed_count": {
+          "name": "host_key_changed_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "default": 0
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "default_overrides": {
+          "name": "default_overrides",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_data_user_id": {
+          "name": "idx_ssh_data_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_ssh_data_parent_host": {
+          "name": "idx_ssh_data_parent_host",
+          "columns": [
+            {
+              "expression": "parent_host_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_ssh_data_credential": {
+          "name": "idx_ssh_data_credential",
+          "columns": [
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "ssh_data_user_id_users_id_fk": {
+          "name": "ssh_data_user_id_users_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_data_parent_host_id_ssh_data_id_fk": {
+          "name": "ssh_data_parent_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "parent_host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "ssh_data_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_data_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "ssh_data_sync_id_unique": {
+          "name": "ssh_data_sync_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_install_counts": {
+      "name": "plugin_install_counts",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "count": {
+          "name": "count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'aggregate-telemetry'"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_install_counts_plugin_registry": {
+          "name": "idx_plugin_install_counts_plugin_registry",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "registry_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_migrations": {
+      "name": "plugin_migrations",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "migration_id": {
+          "name": "migration_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "checksum": {
+          "name": "checksum",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_migrations_plugin_migration": {
+          "name": "idx_plugin_migrations_plugin_migration",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "migration_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "plugin_migrations_plugin_id_plugins_id_fk": {
+          "name": "plugin_migrations_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_migrations",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_permission_grants": {
+      "name": "plugin_permission_grants",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "capability": {
+          "name": "capability",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'admin'"
+        }
+      },
+      "indexes": {
+        "idx_plugin_permission_grants_plugin_capability": {
+          "name": "idx_plugin_permission_grants_plugin_capability",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "capability",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "plugin_permission_grants_plugin_id_plugins_id_fk": {
+          "name": "plugin_permission_grants_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "plugin_permission_grants_granted_by_users_id_fk": {
+          "name": "plugin_permission_grants_granted_by_users_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_registries": {
+      "name": "plugin_registries",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "url": {
+          "name": "url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kind": {
+          "name": "kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'community'"
+        },
+        "enabled": {
+          "name": "enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "signing_key": {
+          "name": "signing_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_checked_at": {
+          "name": "last_checked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_index_hash": {
+          "name": "last_index_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_settings": {
+      "name": "plugin_settings",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "scope": {
+          "name": "scope",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "scope_id": {
+          "name": "scope_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted": {
+          "name": "encrypted",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_settings_scope_key": {
+          "name": "idx_plugin_settings_scope_key",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "scope",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "scope_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_plugin_settings_plugin_scope": {
+          "name": "idx_plugin_settings_plugin_scope",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "scope",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "plugin_settings_plugin_id_plugins_id_fk": {
+          "name": "plugin_settings_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_settings",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_storage": {
+      "name": "plugin_storage",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_storage_plugin_key": {
+          "name": "idx_plugin_storage_plugin_key",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "plugin_storage_plugin_id_plugins_id_fk": {
+          "name": "plugin_storage_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_storage",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugins": {
+      "name": "plugins",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "version": {
+          "name": "version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "tier": {
+          "name": "tier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'available'"
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'community'"
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "state": {
+          "name": "state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'disabled'"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "installed_at": {
+          "name": "installed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "auto_update": {
+          "name": "auto_update",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "pinned_version": {
+          "name": "pinned_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "channel": {
+          "name": "channel",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'stable'"
+        },
+        "manifest_json": {
+          "name": "manifest_json",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "idx_plugins_registry_id": {
+          "name": "idx_plugins_registry_id",
+          "columns": [
+            {
+              "expression": "registry_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.rbac_applied_defaults": {
+      "name": "rbac_applied_defaults",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "role_name": {
+          "name": "role_name",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "permission": {
+          "name": "permission",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_rbac_applied_defaults_role_permission": {
+          "name": "idx_rbac_applied_defaults_role_permission",
+          "columns": [
+            {
+              "expression": "role_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "permission",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.rbac_known_permissions": {
+      "name": "rbac_known_permissions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "permission": {
+          "name": "permission",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "first_seen_at": {
+          "name": "first_seen_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_rbac_known_permissions_permission": {
+          "name": "idx_rbac_known_permissions_permission",
+          "columns": [
+            {
+              "expression": "permission",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.recent_activity": {
+      "name": "recent_activity",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "type": {
+          "name": "type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "host_name": {
+          "name": "host_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_recent_activity_user_ts": {
+          "name": "idx_recent_activity_user_ts",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "recent_activity_user_id_users_id_fk": {
+          "name": "recent_activity_user_id_users_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "recent_activity_host_id_ssh_data_id_fk": {
+          "name": "recent_activity_host_id_ssh_data_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.roles": {
+      "name": "roles",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "display_name": {
+          "name": "display_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "is_system": {
+          "name": "is_system",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "permissions": {
+          "name": "permissions",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "roles_name_unique": {
+          "name": "roles_name_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "name"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.sessions": {
+      "name": "sessions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "jwt_token": {
+          "name": "jwt_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "external_session_ref": {
+          "name": "external_session_ref",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "last_active_at": {
+          "name": "last_active_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sessions_user_id": {
+          "name": "idx_sessions_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_sessions_expires_at": {
+          "name": "idx_sessions_expires_at",
+          "columns": [
+            {
+              "expression": "expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "sessions_user_id_users_id_fk": {
+          "name": "sessions_user_id_users_id_fk",
+          "tableFrom": "sessions",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.settings": {
+      "name": "settings",
+      "schema": "",
+      "columns": {
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.shared_credential_secrets": {
+      "name": "shared_credential_secrets",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "credential_access_id": {
+          "name": "credential_access_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'password'"
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_shared_credential_secrets_scope": {
+          "name": "idx_shared_credential_secrets_scope",
+          "columns": [
+            {
+              "expression": "credential_access_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "target_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_shared_credential_secrets_target": {
+          "name": "idx_shared_credential_secrets_target",
+          "columns": [
+            {
+              "expression": "target_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "shared_credential_secrets_target_user_id_users_id_fk": {
+          "name": "shared_credential_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_credential_secrets_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_credential_secrets_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_cred_secrets_access_id_fk": {
+          "name": "shared_cred_secrets_access_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "credential_access",
+          "columnsFrom": [
+            "credential_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.shared_host_auth_overrides": {
+      "name": "shared_host_auth_overrides",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'ssh'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "shared_host_auth_overrides_host_user_protocol_unique": {
+          "name": "shared_host_auth_overrides_host_user_protocol_unique",
+          "columns": [
+            {
+              "expression": "host_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "protocol",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "shared_host_auth_overrides_host_id_ssh_data_id_fk": {
+          "name": "shared_host_auth_overrides_host_id_ssh_data_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_user_id_users_id_fk": {
+          "name": "shared_host_auth_overrides_user_id_users_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.shared_host_secrets": {
+      "name": "shared_host_secrets",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "host_access_id": {
+          "name": "host_access_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'ssh'"
+        },
+        "source_type": {
+          "name": "source_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'credential'"
+        },
+        "original_credential_id": {
+          "name": "original_credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_auth_type": {
+          "name": "encrypted_auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key_type": {
+          "name": "encrypted_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_domain": {
+          "name": "encrypted_domain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_fields": {
+          "name": "encrypted_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_shared_host_secrets_scope": {
+          "name": "idx_shared_host_secrets_scope",
+          "columns": [
+            {
+              "expression": "host_access_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "target_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "protocol",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "shared_host_secrets_host_access_id_host_access_id_fk": {
+          "name": "shared_host_secrets_host_access_id_host_access_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "host_access",
+          "columnsFrom": [
+            "host_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_target_user_id_users_id_fk": {
+          "name": "shared_host_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_original_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_secrets_original_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "original_credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ssh_credential_usage": {
+      "name": "ssh_credential_usage",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "used_at": {
+          "name": "used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credential_usage_credential": {
+          "name": "idx_ssh_credential_usage_credential",
+          "columns": [
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_ssh_credential_usage_user": {
+          "name": "idx_ssh_credential_usage_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "ssh_credential_usage_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_credential_usage_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_host_id_ssh_data_id_fk": {
+          "name": "ssh_credential_usage_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_user_id_users_id_fk": {
+          "name": "ssh_credential_usage_user_id_users_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ssh_credentials": {
+      "name": "ssh_credentials",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "private_key": {
+          "name": "private_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "detected_key_type": {
+          "name": "detected_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "usage_count": {
+          "name": "usage_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "last_used": {
+          "name": "last_used",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credentials_user_id": {
+          "name": "idx_ssh_credentials_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "ssh_credentials_user_id_users_id_fk": {
+          "name": "ssh_credentials_user_id_users_id_fk",
+          "tableFrom": "ssh_credentials",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "ssh_credentials_sync_id_unique": {
+          "name": "ssh_credentials_sync_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ssh_folders": {
+      "name": "ssh_folders",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "color": {
+          "name": "color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "icon": {
+          "name": "icon",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_folders_user_id": {
+          "name": "idx_ssh_folders_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "ssh_folders_user_id_users_id_fk": {
+          "name": "ssh_folders_user_id_users_id_fk",
+          "tableFrom": "ssh_folders",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "ssh_folders_sync_id_unique": {
+          "name": "ssh_folders_sync_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.sync_conflicts": {
+      "name": "sync_conflicts",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "local_row": {
+          "name": "local_row",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "server_revision": {
+          "name": "server_revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sync_conflicts_user": {
+          "name": "idx_sync_conflicts_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "sync_conflicts_user_id_users_id_fk": {
+          "name": "sync_conflicts_user_id_users_id_fk",
+          "tableFrom": "sync_conflicts",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.sync_link": {
+      "name": "sync_link",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "server_url": {
+          "name": "server_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "server_name": {
+          "name": "server_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "server_version": {
+          "name": "server_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "session_token": {
+          "name": "session_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "custom_headers": {
+          "name": "custom_headers",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "basic_auth": {
+          "name": "basic_auth",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "allow_invalid_certificate": {
+          "name": "allow_invalid_certificate",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "remote_user_id": {
+          "name": "remote_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "remote_username": {
+          "name": "remote_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "account": {
+          "name": "account",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "known_types": {
+          "name": "known_types",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cursor": {
+          "name": "cursor",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'idle'"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "linked_at": {
+          "name": "linked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "last_sync_at": {
+          "name": "last_sync_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "sync_link_user_id_users_id_fk": {
+          "name": "sync_link_user_id_users_id_fk",
+          "tableFrom": "sync_link",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.sync_records": {
+      "name": "sync_records",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "revision": {
+          "name": "revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "seq": {
+          "name": "seq",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "hash": {
+          "name": "hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "deleted": {
+          "name": "deleted",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "error": {
+          "name": "error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "error_hash": {
+          "name": "error_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sync_records_user_entity_sync": {
+          "name": "idx_sync_records_user_entity_sync",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "entity_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "sync_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_sync_records_user_seq": {
+          "name": "idx_sync_records_user_seq",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "seq",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "sync_records_user_id_users_id_fk": {
+          "name": "sync_records_user_id_users_id_fk",
+          "tableFrom": "sync_records",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.trusted_devices": {
+      "name": "trusted_devices",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_fingerprint": {
+          "name": "device_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_trusted_devices_user_id": {
+          "name": "idx_trusted_devices_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "trusted_devices_user_id_users_id_fk": {
+          "name": "trusted_devices_user_id_users_id_fk",
+          "tableFrom": "trusted_devices",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ui_preferences": {
+      "name": "ui_preferences",
+      "schema": "",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "ui_preferences_user_id_users_id_fk": {
+          "name": "ui_preferences_user_id_users_id_fk",
+          "tableFrom": "ui_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_external_identities": {
+      "name": "user_external_identities",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_id": {
+          "name": "provider_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "subject": {
+          "name": "subject",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_external_identities_provider_subject": {
+          "name": "idx_user_external_identities_provider_subject",
+          "columns": [
+            {
+              "expression": "provider_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "subject",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_user_external_identities_user": {
+          "name": "idx_user_external_identities_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_external_identities_user_id_users_id_fk": {
+          "name": "user_external_identities_user_id_users_id_fk",
+          "tableFrom": "user_external_identities",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_open_tabs": {
+      "name": "user_open_tabs",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "tab_type": {
+          "name": "tab_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "label": {
+          "name": "label",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "tab_order": {
+          "name": "tab_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "backend_session_id": {
+          "name": "backend_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_open_tabs_user_id": {
+          "name": "idx_user_open_tabs_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_open_tabs_user_id_users_id_fk": {
+          "name": "user_open_tabs_user_id_users_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_open_tabs_host_id_ssh_data_id_fk": {
+          "name": "user_open_tabs_host_id_ssh_data_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_preferences": {
+      "name": "user_preferences",
+      "schema": "",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "reopen_tabs_on_login": {
+          "name": "reopen_tabs_on_login",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "theme": {
+          "name": "theme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "font_size": {
+          "name": "font_size",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "accent_color": {
+          "name": "accent_color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "language": {
+          "name": "language",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "storage_mode": {
+          "name": "storage_mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "command_palette_enabled": {
+          "name": "command_palette_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "show_host_tags": {
+          "name": "show_host_tags",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_tray_on_click": {
+          "name": "host_tray_on_click",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pin_app_rail": {
+          "name": "pin_app_rail",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "expand_app_rail_on_hover": {
+          "name": "expand_app_rail_on_hover",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "show_pin_app_rail_button": {
+          "name": "show_pin_app_rail_button",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "folders_collapsed": {
+          "name": "folders_collapsed",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "disable_update_check": {
+          "name": "disable_update_check",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "confirm_tab_close": {
+          "name": "confirm_tab_close",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "hidden_rail_tabs": {
+          "name": "hidden_rail_tabs",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "compact_host_view": {
+          "name": "compact_host_view",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status_color_scheme": {
+          "name": "status_color_scheme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "custom_keybindings": {
+          "name": "custom_keybindings",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "user_preferences_user_id_users_id_fk": {
+          "name": "user_preferences_user_id_users_id_fk",
+          "tableFrom": "user_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_roles": {
+      "name": "user_roles",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_roles_user_role": {
+          "name": "idx_user_roles_user_role",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "role_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_user_roles_role_id": {
+          "name": "idx_user_roles_role_id",
+          "columns": [
+            {
+              "expression": "role_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_roles_user_id_users_id_fk": {
+          "name": "user_roles_user_id_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_role_id_roles_id_fk": {
+          "name": "user_roles_role_id_roles_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_granted_by_users_id_fk": {
+          "name": "user_roles_granted_by_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_second_factors": {
+      "name": "user_second_factors",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "factor_id": {
+          "name": "factor_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "enrolled_at": {
+          "name": "enrolled_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_second_factors_user_factor": {
+          "name": "idx_user_second_factors_user_factor",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "factor_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_second_factors_user_id_users_id_fk": {
+          "name": "user_second_factors_user_id_users_id_fk",
+          "tableFrom": "user_second_factors",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.users": {
+      "name": "users",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "password_hash": {
+          "name": "password_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "is_admin": {
+          "name": "is_admin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "registered_at": {
+          "name": "registered_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "donation_modal_dismissed": {
+          "name": "donation_modal_dismissed",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    }
+  },
+  "enums": {},
+  "schemas": {},
+  "sequences": {},
+  "roles": {},
+  "policies": {},
+  "views": {},
+  "_meta": {
+    "columns": {},
+    "schemas": {},
+    "tables": {}
+  }
+}
\ No newline at end of file
diff --git a/drizzle/postgres/meta/0070_snapshot.json b/drizzle/postgres/meta/0070_snapshot.json
new file mode 100644
index 000000000..a1c42a307
--- /dev/null
+++ b/drizzle/postgres/meta/0070_snapshot.json
@@ -0,0 +1,4770 @@
+{
+  "id": "1ac7b3b1-fa09-4500-807f-70086a63950d",
+  "prevId": "6f40b539-787c-4649-be7d-5e59d30e5e43",
+  "version": "7",
+  "dialect": "postgresql",
+  "tables": {
+    "public.api_keys": {
+      "name": "api_keys",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "token_hash": {
+          "name": "token_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "token_prefix": {
+          "name": "token_prefix",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "is_active": {
+          "name": "is_active",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        }
+      },
+      "indexes": {
+        "idx_api_keys_user_id": {
+          "name": "idx_api_keys_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "api_keys_user_id_users_id_fk": {
+          "name": "api_keys_user_id_users_id_fk",
+          "tableFrom": "api_keys",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.audit_logs": {
+      "name": "audit_logs",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "action": {
+          "name": "action",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "resource_type": {
+          "name": "resource_type",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "resource_id": {
+          "name": "resource_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "resource_name": {
+          "name": "resource_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "details": {
+          "name": "details",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ip_address": {
+          "name": "ip_address",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "user_agent": {
+          "name": "user_agent",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "success": {
+          "name": "success",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_audit_logs_timestamp": {
+          "name": "idx_audit_logs_timestamp",
+          "columns": [
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_audit_logs_user_ts": {
+          "name": "idx_audit_logs_user_ts",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_audit_logs_action_ts": {
+          "name": "idx_audit_logs_action_ts",
+          "columns": [
+            {
+              "expression": "action",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_audit_logs_resource_ts": {
+          "name": "idx_audit_logs_resource_ts",
+          "columns": [
+            {
+              "expression": "resource_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "audit_logs_user_id_users_id_fk": {
+          "name": "audit_logs_user_id_users_id_fk",
+          "tableFrom": "audit_logs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.credential_access": {
+      "name": "credential_access",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'use'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_credential_access_user_id": {
+          "name": "idx_credential_access_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_credential_access_role_id": {
+          "name": "idx_credential_access_role_id",
+          "columns": [
+            {
+              "expression": "role_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_credential_access_credential_id": {
+          "name": "idx_credential_access_credential_id",
+          "columns": [
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "credential_access_credential_id_ssh_credentials_id_fk": {
+          "name": "credential_access_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_user_id_users_id_fk": {
+          "name": "credential_access_user_id_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_role_id_roles_id_fk": {
+          "name": "credential_access_role_id_roles_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_granted_by_users_id_fk": {
+          "name": "credential_access_granted_by_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.credential_sidebar_preferences": {
+      "name": "credential_sidebar_preferences",
+      "schema": "",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "credential_sidebar_preferences_user_id_users_id_fk": {
+          "name": "credential_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "credential_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.folder_access": {
+      "name": "folder_access",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "owner_user_id": {
+          "name": "owner_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "folder": {
+          "name": "folder",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'connect'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_folder_access_owner_folder": {
+          "name": "idx_folder_access_owner_folder",
+          "columns": [
+            {
+              "expression": "owner_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "folder",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "folder_access_owner_user_id_users_id_fk": {
+          "name": "folder_access_owner_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "owner_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_user_id_users_id_fk": {
+          "name": "folder_access_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_role_id_roles_id_fk": {
+          "name": "folder_access_role_id_roles_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_granted_by_users_id_fk": {
+          "name": "folder_access_granted_by_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.host_access": {
+      "name": "host_access",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'connect'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "last_accessed_at": {
+          "name": "last_accessed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "access_count": {
+          "name": "access_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        }
+      },
+      "indexes": {
+        "idx_host_access_user_id": {
+          "name": "idx_host_access_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_access_role_id": {
+          "name": "idx_host_access_role_id",
+          "columns": [
+            {
+              "expression": "role_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_access_host_id": {
+          "name": "idx_host_access_host_id",
+          "columns": [
+            {
+              "expression": "host_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_access_expires_at": {
+          "name": "idx_host_access_expires_at",
+          "columns": [
+            {
+              "expression": "expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "host_access_host_id_ssh_data_id_fk": {
+          "name": "host_access_host_id_ssh_data_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_user_id_users_id_fk": {
+          "name": "host_access_user_id_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_role_id_roles_id_fk": {
+          "name": "host_access_role_id_roles_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_granted_by_users_id_fk": {
+          "name": "host_access_granted_by_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.host_defaults": {
+      "name": "host_defaults",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "level": {
+          "name": "level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "scope_key": {
+          "name": "scope_key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "folder_id": {
+          "name": "folder_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "namespace": {
+          "name": "namespace",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_by": {
+          "name": "updated_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_host_defaults_scope_key": {
+          "name": "idx_host_defaults_scope_key",
+          "columns": [
+            {
+              "expression": "scope_key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "namespace",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_defaults_user": {
+          "name": "idx_host_defaults_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_defaults_folder": {
+          "name": "idx_host_defaults_folder",
+          "columns": [
+            {
+              "expression": "folder_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "host_defaults_user_id_users_id_fk": {
+          "name": "host_defaults_user_id_users_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_defaults_folder_id_ssh_folders_id_fk": {
+          "name": "host_defaults_folder_id_ssh_folders_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "ssh_folders",
+          "columnsFrom": [
+            "folder_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.host_protocol_auth": {
+      "name": "host_protocol_auth",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'direct'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "fields": {
+          "name": "fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "secret_fields": {
+          "name": "secret_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_host_protocol_auth_host_protocol": {
+          "name": "idx_host_protocol_auth_host_protocol",
+          "columns": [
+            {
+              "expression": "host_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "protocol",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_protocol_auth_user": {
+          "name": "idx_host_protocol_auth_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_host_protocol_auth_credential": {
+          "name": "idx_host_protocol_auth_credential",
+          "columns": [
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "host_protocol_auth_host_id_ssh_data_id_fk": {
+          "name": "host_protocol_auth_host_id_ssh_data_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_user_id_users_id_fk": {
+          "name": "host_protocol_auth_user_id_users_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_credential_id_ssh_credentials_id_fk": {
+          "name": "host_protocol_auth_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.host_sidebar_preferences": {
+      "name": "host_sidebar_preferences",
+      "schema": "",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "host_sidebar_preferences_user_id_users_id_fk": {
+          "name": "host_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "host_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ssh_data": {
+      "name": "ssh_data",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "connection_type": {
+          "name": "connection_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'ssh'"
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ip": {
+          "name": "ip",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "port": {
+          "name": "port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "parent_host_id": {
+          "name": "parent_host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "share_ssh_auth": {
+          "name": "share_ssh_auth",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "force_keyboard_interactive": {
+          "name": "force_keyboard_interactive",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sudo_password": {
+          "name": "sudo_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "override_credential_username": {
+          "name": "override_credential_username",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "jump_hosts": {
+          "name": "jump_hosts",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status_check_enabled": {
+          "name": "status_check_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "status_check_interval": {
+          "name": "status_check_interval",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ssh_options": {
+          "name": "ssh_options",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "notes": {
+          "name": "notes",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "enable_ssh": {
+          "name": "enable_ssh",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "ssh_port": {
+          "name": "ssh_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "default": 22
+        },
+        "use_socks5": {
+          "name": "use_socks5",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_host": {
+          "name": "socks5_host",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_port": {
+          "name": "socks5_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_username": {
+          "name": "socks5_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_password": {
+          "name": "socks5_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "socks5_proxy_chain": {
+          "name": "socks5_proxy_chain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "connection_origin": {
+          "name": "connection_origin",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "port_knock_sequence": {
+          "name": "port_knock_sequence",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_fingerprint": {
+          "name": "host_key_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_type": {
+          "name": "host_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_algorithm": {
+          "name": "host_key_algorithm",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "default": "'sha256'"
+        },
+        "host_key_first_seen": {
+          "name": "host_key_first_seen",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_last_verified": {
+          "name": "host_key_last_verified",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_key_changed_count": {
+          "name": "host_key_changed_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "default": 0
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "default_overrides": {
+          "name": "default_overrides",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_data_user_id": {
+          "name": "idx_ssh_data_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_ssh_data_parent_host": {
+          "name": "idx_ssh_data_parent_host",
+          "columns": [
+            {
+              "expression": "parent_host_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_ssh_data_credential": {
+          "name": "idx_ssh_data_credential",
+          "columns": [
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "ssh_data_user_id_users_id_fk": {
+          "name": "ssh_data_user_id_users_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_data_parent_host_id_ssh_data_id_fk": {
+          "name": "ssh_data_parent_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "parent_host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "ssh_data_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_data_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "ssh_data_sync_id_unique": {
+          "name": "ssh_data_sync_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_install_counts": {
+      "name": "plugin_install_counts",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "count": {
+          "name": "count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'aggregate-telemetry'"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_install_counts_plugin_registry": {
+          "name": "idx_plugin_install_counts_plugin_registry",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "registry_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_migrations": {
+      "name": "plugin_migrations",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "migration_id": {
+          "name": "migration_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "checksum": {
+          "name": "checksum",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_migrations_plugin_migration": {
+          "name": "idx_plugin_migrations_plugin_migration",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "migration_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "plugin_migrations_plugin_id_plugins_id_fk": {
+          "name": "plugin_migrations_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_migrations",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_permission_grants": {
+      "name": "plugin_permission_grants",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "capability": {
+          "name": "capability",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'admin'"
+        }
+      },
+      "indexes": {
+        "idx_plugin_permission_grants_plugin_capability": {
+          "name": "idx_plugin_permission_grants_plugin_capability",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "capability",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "plugin_permission_grants_plugin_id_plugins_id_fk": {
+          "name": "plugin_permission_grants_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "plugin_permission_grants_granted_by_users_id_fk": {
+          "name": "plugin_permission_grants_granted_by_users_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_registries": {
+      "name": "plugin_registries",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "url": {
+          "name": "url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kind": {
+          "name": "kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'community'"
+        },
+        "enabled": {
+          "name": "enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "signing_key": {
+          "name": "signing_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_checked_at": {
+          "name": "last_checked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_index_hash": {
+          "name": "last_index_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_settings": {
+      "name": "plugin_settings",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "scope": {
+          "name": "scope",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "scope_id": {
+          "name": "scope_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted": {
+          "name": "encrypted",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_settings_scope_key": {
+          "name": "idx_plugin_settings_scope_key",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "scope",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "scope_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_plugin_settings_plugin_scope": {
+          "name": "idx_plugin_settings_plugin_scope",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "scope",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "plugin_settings_plugin_id_plugins_id_fk": {
+          "name": "plugin_settings_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_settings",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugin_storage": {
+      "name": "plugin_storage",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_storage_plugin_key": {
+          "name": "idx_plugin_storage_plugin_key",
+          "columns": [
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "plugin_storage_plugin_id_plugins_id_fk": {
+          "name": "plugin_storage_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_storage",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.plugins": {
+      "name": "plugins",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "version": {
+          "name": "version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "tier": {
+          "name": "tier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'available'"
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'community'"
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "state": {
+          "name": "state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'disabled'"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "installed_at": {
+          "name": "installed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "auto_update": {
+          "name": "auto_update",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "pinned_version": {
+          "name": "pinned_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "channel": {
+          "name": "channel",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'stable'"
+        },
+        "manifest_json": {
+          "name": "manifest_json",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "idx_plugins_registry_id": {
+          "name": "idx_plugins_registry_id",
+          "columns": [
+            {
+              "expression": "registry_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.rbac_applied_defaults": {
+      "name": "rbac_applied_defaults",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "role_name": {
+          "name": "role_name",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "permission": {
+          "name": "permission",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_rbac_applied_defaults_role_permission": {
+          "name": "idx_rbac_applied_defaults_role_permission",
+          "columns": [
+            {
+              "expression": "role_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "permission",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.rbac_known_permissions": {
+      "name": "rbac_known_permissions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "permission": {
+          "name": "permission",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "first_seen_at": {
+          "name": "first_seen_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_rbac_known_permissions_permission": {
+          "name": "idx_rbac_known_permissions_permission",
+          "columns": [
+            {
+              "expression": "permission",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.recent_activity": {
+      "name": "recent_activity",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "type": {
+          "name": "type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "host_name": {
+          "name": "host_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_recent_activity_user_ts": {
+          "name": "idx_recent_activity_user_ts",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "recent_activity_user_id_users_id_fk": {
+          "name": "recent_activity_user_id_users_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "recent_activity_host_id_ssh_data_id_fk": {
+          "name": "recent_activity_host_id_ssh_data_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.roles": {
+      "name": "roles",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "display_name": {
+          "name": "display_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "is_system": {
+          "name": "is_system",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "permissions": {
+          "name": "permissions",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "roles_name_unique": {
+          "name": "roles_name_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "name"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.sessions": {
+      "name": "sessions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "jwt_token": {
+          "name": "jwt_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "external_session_ref": {
+          "name": "external_session_ref",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "last_active_at": {
+          "name": "last_active_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sessions_user_id": {
+          "name": "idx_sessions_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_sessions_expires_at": {
+          "name": "idx_sessions_expires_at",
+          "columns": [
+            {
+              "expression": "expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "sessions_user_id_users_id_fk": {
+          "name": "sessions_user_id_users_id_fk",
+          "tableFrom": "sessions",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.settings": {
+      "name": "settings",
+      "schema": "",
+      "columns": {
+        "key": {
+          "name": "key",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.shared_credential_secrets": {
+      "name": "shared_credential_secrets",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "credential_access_id": {
+          "name": "credential_access_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'password'"
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_shared_credential_secrets_scope": {
+          "name": "idx_shared_credential_secrets_scope",
+          "columns": [
+            {
+              "expression": "credential_access_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "target_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_shared_credential_secrets_target": {
+          "name": "idx_shared_credential_secrets_target",
+          "columns": [
+            {
+              "expression": "target_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "shared_credential_secrets_target_user_id_users_id_fk": {
+          "name": "shared_credential_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_credential_secrets_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_credential_secrets_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_cred_secrets_access_id_fk": {
+          "name": "shared_cred_secrets_access_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "credential_access",
+          "columnsFrom": [
+            "credential_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.shared_host_auth_overrides": {
+      "name": "shared_host_auth_overrides",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'ssh'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "shared_host_auth_overrides_host_user_protocol_unique": {
+          "name": "shared_host_auth_overrides_host_user_protocol_unique",
+          "columns": [
+            {
+              "expression": "host_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "protocol",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "shared_host_auth_overrides_host_id_ssh_data_id_fk": {
+          "name": "shared_host_auth_overrides_host_id_ssh_data_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_user_id_users_id_fk": {
+          "name": "shared_host_auth_overrides_user_id_users_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.shared_host_secrets": {
+      "name": "shared_host_secrets",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "host_access_id": {
+          "name": "host_access_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'ssh'"
+        },
+        "source_type": {
+          "name": "source_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'credential'"
+        },
+        "original_credential_id": {
+          "name": "original_credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_auth_type": {
+          "name": "encrypted_auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_key_type": {
+          "name": "encrypted_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_domain": {
+          "name": "encrypted_domain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_fields": {
+          "name": "encrypted_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_shared_host_secrets_scope": {
+          "name": "idx_shared_host_secrets_scope",
+          "columns": [
+            {
+              "expression": "host_access_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "target_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "protocol",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "shared_host_secrets_host_access_id_host_access_id_fk": {
+          "name": "shared_host_secrets_host_access_id_host_access_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "host_access",
+          "columnsFrom": [
+            "host_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_target_user_id_users_id_fk": {
+          "name": "shared_host_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_original_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_secrets_original_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "original_credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ssh_credential_usage": {
+      "name": "ssh_credential_usage",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "used_at": {
+          "name": "used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credential_usage_credential": {
+          "name": "idx_ssh_credential_usage_credential",
+          "columns": [
+            {
+              "expression": "credential_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_ssh_credential_usage_user": {
+          "name": "idx_ssh_credential_usage_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "ssh_credential_usage_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_credential_usage_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_host_id_ssh_data_id_fk": {
+          "name": "ssh_credential_usage_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_user_id_users_id_fk": {
+          "name": "ssh_credential_usage_user_id_users_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ssh_credentials": {
+      "name": "ssh_credentials",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "private_key": {
+          "name": "private_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "detected_key_type": {
+          "name": "detected_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "usage_count": {
+          "name": "usage_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "last_used": {
+          "name": "last_used",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credentials_user_id": {
+          "name": "idx_ssh_credentials_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "ssh_credentials_user_id_users_id_fk": {
+          "name": "ssh_credentials_user_id_users_id_fk",
+          "tableFrom": "ssh_credentials",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "ssh_credentials_sync_id_unique": {
+          "name": "ssh_credentials_sync_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ssh_folders": {
+      "name": "ssh_folders",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "color": {
+          "name": "color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "icon": {
+          "name": "icon",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_folders_user_id": {
+          "name": "idx_ssh_folders_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "ssh_folders_user_id_users_id_fk": {
+          "name": "ssh_folders_user_id_users_id_fk",
+          "tableFrom": "ssh_folders",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "ssh_folders_sync_id_unique": {
+          "name": "ssh_folders_sync_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "sync_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.sync_conflicts": {
+      "name": "sync_conflicts",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "local_row": {
+          "name": "local_row",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "server_revision": {
+          "name": "server_revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sync_conflicts_user": {
+          "name": "idx_sync_conflicts_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "sync_conflicts_user_id_users_id_fk": {
+          "name": "sync_conflicts_user_id_users_id_fk",
+          "tableFrom": "sync_conflicts",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.sync_link": {
+      "name": "sync_link",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "server_url": {
+          "name": "server_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "server_name": {
+          "name": "server_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "server_version": {
+          "name": "server_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "session_token": {
+          "name": "session_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "custom_headers": {
+          "name": "custom_headers",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "basic_auth": {
+          "name": "basic_auth",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "allow_invalid_certificate": {
+          "name": "allow_invalid_certificate",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "remote_user_id": {
+          "name": "remote_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "remote_username": {
+          "name": "remote_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "account": {
+          "name": "account",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "known_types": {
+          "name": "known_types",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cursor": {
+          "name": "cursor",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'idle'"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "linked_at": {
+          "name": "linked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "last_sync_at": {
+          "name": "last_sync_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "sync_link_user_id_users_id_fk": {
+          "name": "sync_link_user_id_users_id_fk",
+          "tableFrom": "sync_link",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.sync_records": {
+      "name": "sync_records",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "revision": {
+          "name": "revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "seq": {
+          "name": "seq",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "hash": {
+          "name": "hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "deleted": {
+          "name": "deleted",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "error": {
+          "name": "error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "error_hash": {
+          "name": "error_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sync_records_user_entity_sync": {
+          "name": "idx_sync_records_user_entity_sync",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "entity_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "sync_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_sync_records_user_seq": {
+          "name": "idx_sync_records_user_seq",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "seq",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "sync_records_user_id_users_id_fk": {
+          "name": "sync_records_user_id_users_id_fk",
+          "tableFrom": "sync_records",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.trusted_devices": {
+      "name": "trusted_devices",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_fingerprint": {
+          "name": "device_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_trusted_devices_user_id": {
+          "name": "idx_trusted_devices_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "trusted_devices_user_id_users_id_fk": {
+          "name": "trusted_devices_user_id_users_id_fk",
+          "tableFrom": "trusted_devices",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ui_preferences": {
+      "name": "ui_preferences",
+      "schema": "",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "ui_preferences_user_id_users_id_fk": {
+          "name": "ui_preferences_user_id_users_id_fk",
+          "tableFrom": "ui_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_external_identities": {
+      "name": "user_external_identities",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_id": {
+          "name": "provider_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "subject": {
+          "name": "subject",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_external_identities_provider_subject": {
+          "name": "idx_user_external_identities_provider_subject",
+          "columns": [
+            {
+              "expression": "provider_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "subject",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_user_external_identities_user": {
+          "name": "idx_user_external_identities_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_external_identities_user_id_users_id_fk": {
+          "name": "user_external_identities_user_id_users_id_fk",
+          "tableFrom": "user_external_identities",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_open_tabs": {
+      "name": "user_open_tabs",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "tab_type": {
+          "name": "tab_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "label": {
+          "name": "label",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "tab_order": {
+          "name": "tab_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "backend_session_id": {
+          "name": "backend_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_open_tabs_user_id": {
+          "name": "idx_user_open_tabs_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_open_tabs_user_id_users_id_fk": {
+          "name": "user_open_tabs_user_id_users_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_open_tabs_host_id_ssh_data_id_fk": {
+          "name": "user_open_tabs_host_id_ssh_data_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_preferences": {
+      "name": "user_preferences",
+      "schema": "",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "reopen_tabs_on_login": {
+          "name": "reopen_tabs_on_login",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "theme": {
+          "name": "theme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "font_size": {
+          "name": "font_size",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "accent_color": {
+          "name": "accent_color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "language": {
+          "name": "language",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "storage_mode": {
+          "name": "storage_mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "command_palette_enabled": {
+          "name": "command_palette_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "show_host_tags": {
+          "name": "show_host_tags",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "host_tray_on_click": {
+          "name": "host_tray_on_click",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pin_app_rail": {
+          "name": "pin_app_rail",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "expand_app_rail_on_hover": {
+          "name": "expand_app_rail_on_hover",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "show_pin_app_rail_button": {
+          "name": "show_pin_app_rail_button",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "folders_collapsed": {
+          "name": "folders_collapsed",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "disable_update_check": {
+          "name": "disable_update_check",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "confirm_tab_close": {
+          "name": "confirm_tab_close",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "hidden_rail_tabs": {
+          "name": "hidden_rail_tabs",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "compact_host_view": {
+          "name": "compact_host_view",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status_color_scheme": {
+          "name": "status_color_scheme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "custom_keybindings": {
+          "name": "custom_keybindings",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "user_preferences_user_id_users_id_fk": {
+          "name": "user_preferences_user_id_users_id_fk",
+          "tableFrom": "user_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_roles": {
+      "name": "user_roles",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_roles_user_role": {
+          "name": "idx_user_roles_user_role",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "role_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_user_roles_role_id": {
+          "name": "idx_user_roles_role_id",
+          "columns": [
+            {
+              "expression": "role_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_roles_user_id_users_id_fk": {
+          "name": "user_roles_user_id_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_role_id_roles_id_fk": {
+          "name": "user_roles_role_id_roles_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_granted_by_users_id_fk": {
+          "name": "user_roles_granted_by_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_second_factors": {
+      "name": "user_second_factors",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "factor_id": {
+          "name": "factor_id",
+          "type": "varchar(255)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "enrolled_at": {
+          "name": "enrolled_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_second_factors_user_factor": {
+          "name": "idx_user_second_factors_user_factor",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "plugin_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "factor_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_second_factors_user_id_users_id_fk": {
+          "name": "user_second_factors_user_id_users_id_fk",
+          "tableFrom": "user_second_factors",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.users": {
+      "name": "users",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "varchar(255)",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "password_hash": {
+          "name": "password_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "is_admin": {
+          "name": "is_admin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "registered_at": {
+          "name": "registered_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    }
+  },
+  "enums": {},
+  "schemas": {},
+  "sequences": {},
+  "roles": {},
+  "policies": {},
+  "views": {},
+  "_meta": {
+    "columns": {},
+    "schemas": {},
+    "tables": {}
+  }
+}
\ No newline at end of file
diff --git a/drizzle/postgres/meta/_journal.json b/drizzle/postgres/meta/_journal.json
index d60309508..60f7988d8 100644
--- a/drizzle/postgres/meta/_journal.json
+++ b/drizzle/postgres/meta/_journal.json
@@ -463,6 +463,41 @@
       "when": 1790742086298,
       "tag": "0065_regular_joystick",
       "breakpoints": true
+    },
+    {
+      "idx": 66,
+      "version": "7",
+      "when": 1791209295939,
+      "tag": "0066_retire_2_8_columns",
+      "breakpoints": true
+    },
+    {
+      "idx": 67,
+      "version": "7",
+      "when": 1791209310758,
+      "tag": "0067_external_session_ref",
+      "breakpoints": true
+    },
+    {
+      "idx": 68,
+      "version": "7",
+      "when": 1791256340388,
+      "tag": "0068_plugin_pinned_version",
+      "breakpoints": true
+    },
+    {
+      "idx": 69,
+      "version": "7",
+      "when": 1791388888397,
+      "tag": "0069_plugin_channel",
+      "breakpoints": true
+    },
+    {
+      "idx": 70,
+      "version": "7",
+      "when": 1791550496661,
+      "tag": "0070_drop_donation_modal",
+      "breakpoints": true
     }
   ]
 }
\ No newline at end of file
diff --git a/drizzle/sqlite/0061_retire_2_8_columns.sql b/drizzle/sqlite/0061_retire_2_8_columns.sql
new file mode 100644
index 000000000..6fcef5ed3
--- /dev/null
+++ b/drizzle/sqlite/0061_retire_2_8_columns.sql
@@ -0,0 +1,46 @@
+PRAGMA foreign_keys=OFF;--> statement-breakpoint
+CREATE TABLE `__new_ssh_folders` (
+	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+	`user_id` text NOT NULL,
+	`name` text NOT NULL,
+	`color` text,
+	`icon` text,
+	`sort_order` integer,
+	`sync_id` text,
+	`local_only` integer DEFAULT false NOT NULL,
+	`created_at` text DEFAULT CURRENT_TIMESTAMP NOT NULL,
+	`updated_at` text DEFAULT CURRENT_TIMESTAMP NOT NULL,
+	FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE cascade
+);
+--> statement-breakpoint
+INSERT INTO `__new_ssh_folders`("id", "user_id", "name", "color", "icon", "sort_order", "sync_id", "local_only", "created_at", "updated_at") SELECT "id", "user_id", "name", "color", "icon", "sort_order", "sync_id", "local_only", "created_at", "updated_at" FROM `ssh_folders`;--> statement-breakpoint
+DROP TABLE `ssh_folders`;--> statement-breakpoint
+ALTER TABLE `__new_ssh_folders` RENAME TO `ssh_folders`;--> statement-breakpoint
+PRAGMA foreign_keys=ON;--> statement-breakpoint
+CREATE UNIQUE INDEX `ssh_folders_sync_id_unique` ON `ssh_folders` (`sync_id`);--> statement-breakpoint
+CREATE INDEX `idx_ssh_folders_user_id` ON `ssh_folders` (`user_id`);--> statement-breakpoint
+ALTER TABLE `ssh_data` DROP COLUMN `terminal_config`;--> statement-breakpoint
+ALTER TABLE `ssh_data` DROP COLUMN `quick_actions`;--> statement-breakpoint
+ALTER TABLE `sessions` DROP COLUMN `oidc_sub`;--> statement-breakpoint
+ALTER TABLE `sessions` DROP COLUMN `oidc_sid`;--> statement-breakpoint
+ALTER TABLE `sessions` DROP COLUMN `sso_provider_id`;--> statement-breakpoint
+ALTER TABLE `user_preferences` DROP COLUMN `command_autocomplete`;--> statement-breakpoint
+ALTER TABLE `user_preferences` DROP COLUMN `confirm_snippet_execution`;--> statement-breakpoint
+ALTER TABLE `user_preferences` DROP COLUMN `custom_themes`;--> statement-breakpoint
+ALTER TABLE `user_preferences` DROP COLUMN `terminal_defaults`;--> statement-breakpoint
+ALTER TABLE `user_preferences` DROP COLUMN `terminal_macros`;--> statement-breakpoint
+ALTER TABLE `users` DROP COLUMN `is_oidc`;--> statement-breakpoint
+ALTER TABLE `users` DROP COLUMN `oidc_identifier`;--> statement-breakpoint
+ALTER TABLE `users` DROP COLUMN `sso_provider_id`;--> statement-breakpoint
+ALTER TABLE `users` DROP COLUMN `client_id`;--> statement-breakpoint
+ALTER TABLE `users` DROP COLUMN `client_secret`;--> statement-breakpoint
+ALTER TABLE `users` DROP COLUMN `issuer_url`;--> statement-breakpoint
+ALTER TABLE `users` DROP COLUMN `authorization_url`;--> statement-breakpoint
+ALTER TABLE `users` DROP COLUMN `token_url`;--> statement-breakpoint
+ALTER TABLE `users` DROP COLUMN `identifier_path`;--> statement-breakpoint
+ALTER TABLE `users` DROP COLUMN `name_path`;--> statement-breakpoint
+ALTER TABLE `users` DROP COLUMN `scopes`;--> statement-breakpoint
+DELETE FROM `settings` WHERE `key` IN ('host_defaults', 'analytics_enabled', 'analytics_instance_id');--> statement-breakpoint
+UPDATE `ssh_data` SET `username` = REPLACE(`username`, '$oidc.preferred_username', '$external.username') WHERE `username` LIKE '%$oidc.preferred_username%';--> statement-breakpoint
+UPDATE `ssh_credentials` SET `username` = REPLACE(`username`, '$oidc.preferred_username', '$external.username') WHERE `username` LIKE '%$oidc.preferred_username%';--> statement-breakpoint
+UPDATE `host_defaults` SET `value` = REPLACE(`value`, '$oidc.preferred_username', '$external.username') WHERE `value` LIKE '%$oidc.preferred_username%';
\ No newline at end of file
diff --git a/drizzle/sqlite/0062_external_session_ref.sql b/drizzle/sqlite/0062_external_session_ref.sql
new file mode 100644
index 000000000..f8b8402a8
--- /dev/null
+++ b/drizzle/sqlite/0062_external_session_ref.sql
@@ -0,0 +1 @@
+ALTER TABLE `sessions` ADD `external_session_ref` text;
\ No newline at end of file
diff --git a/drizzle/sqlite/0063_plugin_pinned_version.sql b/drizzle/sqlite/0063_plugin_pinned_version.sql
new file mode 100644
index 000000000..91a5c68cf
--- /dev/null
+++ b/drizzle/sqlite/0063_plugin_pinned_version.sql
@@ -0,0 +1 @@
+ALTER TABLE `plugins` ADD `pinned_version` text;
\ No newline at end of file
diff --git a/drizzle/sqlite/0064_plugin_channel.sql b/drizzle/sqlite/0064_plugin_channel.sql
new file mode 100644
index 000000000..db92bca12
--- /dev/null
+++ b/drizzle/sqlite/0064_plugin_channel.sql
@@ -0,0 +1 @@
+ALTER TABLE `plugins` ADD `channel` text DEFAULT 'stable' NOT NULL;
\ No newline at end of file
diff --git a/drizzle/sqlite/0065_drop_donation_modal.sql b/drizzle/sqlite/0065_drop_donation_modal.sql
new file mode 100644
index 000000000..710110f62
--- /dev/null
+++ b/drizzle/sqlite/0065_drop_donation_modal.sql
@@ -0,0 +1 @@
+ALTER TABLE `users` DROP COLUMN `donation_modal_dismissed`;
\ No newline at end of file
diff --git a/drizzle/sqlite/meta/0061_snapshot.json b/drizzle/sqlite/meta/0061_snapshot.json
new file mode 100644
index 000000000..22d34e0bd
--- /dev/null
+++ b/drizzle/sqlite/meta/0061_snapshot.json
@@ -0,0 +1,4452 @@
+{
+  "version": "6",
+  "dialect": "sqlite",
+  "id": "6c43dde1-c5eb-4ff0-8c71-b4c5e6010c66",
+  "prevId": "d81ae027-ff86-4354-9705-ead08a426d8f",
+  "tables": {
+    "api_keys": {
+      "name": "api_keys",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "token_hash": {
+          "name": "token_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "token_prefix": {
+          "name": "token_prefix",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "is_active": {
+          "name": "is_active",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        }
+      },
+      "indexes": {
+        "idx_api_keys_user_id": {
+          "name": "idx_api_keys_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "api_keys_user_id_users_id_fk": {
+          "name": "api_keys_user_id_users_id_fk",
+          "tableFrom": "api_keys",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "audit_logs": {
+      "name": "audit_logs",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "action": {
+          "name": "action",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "resource_type": {
+          "name": "resource_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "resource_id": {
+          "name": "resource_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "resource_name": {
+          "name": "resource_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "details": {
+          "name": "details",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ip_address": {
+          "name": "ip_address",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "user_agent": {
+          "name": "user_agent",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "success": {
+          "name": "success",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_audit_logs_timestamp": {
+          "name": "idx_audit_logs_timestamp",
+          "columns": [
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_user_ts": {
+          "name": "idx_audit_logs_user_ts",
+          "columns": [
+            "user_id",
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_action_ts": {
+          "name": "idx_audit_logs_action_ts",
+          "columns": [
+            "action",
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_resource_ts": {
+          "name": "idx_audit_logs_resource_ts",
+          "columns": [
+            "resource_type",
+            "timestamp"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "audit_logs_user_id_users_id_fk": {
+          "name": "audit_logs_user_id_users_id_fk",
+          "tableFrom": "audit_logs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "credential_access": {
+      "name": "credential_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'use'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_credential_access_user_id": {
+          "name": "idx_credential_access_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_credential_access_role_id": {
+          "name": "idx_credential_access_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        },
+        "idx_credential_access_credential_id": {
+          "name": "idx_credential_access_credential_id",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "credential_access_credential_id_ssh_credentials_id_fk": {
+          "name": "credential_access_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_user_id_users_id_fk": {
+          "name": "credential_access_user_id_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_role_id_roles_id_fk": {
+          "name": "credential_access_role_id_roles_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_granted_by_users_id_fk": {
+          "name": "credential_access_granted_by_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "credential_sidebar_preferences": {
+      "name": "credential_sidebar_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "credential_sidebar_preferences_user_id_users_id_fk": {
+          "name": "credential_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "credential_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "folder_access": {
+      "name": "folder_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "owner_user_id": {
+          "name": "owner_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'connect'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_folder_access_owner_folder": {
+          "name": "idx_folder_access_owner_folder",
+          "columns": [
+            "owner_user_id",
+            "folder"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "folder_access_owner_user_id_users_id_fk": {
+          "name": "folder_access_owner_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "owner_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_user_id_users_id_fk": {
+          "name": "folder_access_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_role_id_roles_id_fk": {
+          "name": "folder_access_role_id_roles_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_granted_by_users_id_fk": {
+          "name": "folder_access_granted_by_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "host_access": {
+      "name": "host_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'connect'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "last_accessed_at": {
+          "name": "last_accessed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "access_count": {
+          "name": "access_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        }
+      },
+      "indexes": {
+        "idx_host_access_user_id": {
+          "name": "idx_host_access_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_role_id": {
+          "name": "idx_host_access_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_host_id": {
+          "name": "idx_host_access_host_id",
+          "columns": [
+            "host_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_expires_at": {
+          "name": "idx_host_access_expires_at",
+          "columns": [
+            "expires_at"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_access_host_id_ssh_data_id_fk": {
+          "name": "host_access_host_id_ssh_data_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_user_id_users_id_fk": {
+          "name": "host_access_user_id_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_role_id_roles_id_fk": {
+          "name": "host_access_role_id_roles_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_granted_by_users_id_fk": {
+          "name": "host_access_granted_by_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "host_defaults": {
+      "name": "host_defaults",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "level": {
+          "name": "level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope_key": {
+          "name": "scope_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folder_id": {
+          "name": "folder_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "namespace": {
+          "name": "namespace",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_by": {
+          "name": "updated_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_host_defaults_scope_key": {
+          "name": "idx_host_defaults_scope_key",
+          "columns": [
+            "scope_key",
+            "namespace",
+            "key"
+          ],
+          "isUnique": true
+        },
+        "idx_host_defaults_user": {
+          "name": "idx_host_defaults_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_defaults_folder": {
+          "name": "idx_host_defaults_folder",
+          "columns": [
+            "folder_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_defaults_user_id_users_id_fk": {
+          "name": "host_defaults_user_id_users_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_defaults_folder_id_ssh_folders_id_fk": {
+          "name": "host_defaults_folder_id_ssh_folders_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "ssh_folders",
+          "columnsFrom": [
+            "folder_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "host_protocol_auth": {
+      "name": "host_protocol_auth",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'direct'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "fields": {
+          "name": "fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "secret_fields": {
+          "name": "secret_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_host_protocol_auth_host_protocol": {
+          "name": "idx_host_protocol_auth_host_protocol",
+          "columns": [
+            "host_id",
+            "protocol"
+          ],
+          "isUnique": true
+        },
+        "idx_host_protocol_auth_user": {
+          "name": "idx_host_protocol_auth_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_protocol_auth_credential": {
+          "name": "idx_host_protocol_auth_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_protocol_auth_host_id_ssh_data_id_fk": {
+          "name": "host_protocol_auth_host_id_ssh_data_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_user_id_users_id_fk": {
+          "name": "host_protocol_auth_user_id_users_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_credential_id_ssh_credentials_id_fk": {
+          "name": "host_protocol_auth_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "host_sidebar_preferences": {
+      "name": "host_sidebar_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "host_sidebar_preferences_user_id_users_id_fk": {
+          "name": "host_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "host_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ssh_data": {
+      "name": "ssh_data",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "connection_type": {
+          "name": "connection_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ip": {
+          "name": "ip",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "port": {
+          "name": "port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "parent_host_id": {
+          "name": "parent_host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "share_ssh_auth": {
+          "name": "share_ssh_auth",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "force_keyboard_interactive": {
+          "name": "force_keyboard_interactive",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text(8192)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sudo_password": {
+          "name": "sudo_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "override_credential_username": {
+          "name": "override_credential_username",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "jump_hosts": {
+          "name": "jump_hosts",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_check_enabled": {
+          "name": "status_check_enabled",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "status_check_interval": {
+          "name": "status_check_interval",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ssh_options": {
+          "name": "ssh_options",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "notes": {
+          "name": "notes",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "enable_ssh": {
+          "name": "enable_ssh",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "ssh_port": {
+          "name": "ssh_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": 22
+        },
+        "use_socks5": {
+          "name": "use_socks5",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_host": {
+          "name": "socks5_host",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_port": {
+          "name": "socks5_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_username": {
+          "name": "socks5_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_password": {
+          "name": "socks5_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_proxy_chain": {
+          "name": "socks5_proxy_chain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "connection_origin": {
+          "name": "connection_origin",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "port_knock_sequence": {
+          "name": "port_knock_sequence",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_fingerprint": {
+          "name": "host_key_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_type": {
+          "name": "host_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_algorithm": {
+          "name": "host_key_algorithm",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": "'sha256'"
+        },
+        "host_key_first_seen": {
+          "name": "host_key_first_seen",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_last_verified": {
+          "name": "host_key_last_verified",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_changed_count": {
+          "name": "host_key_changed_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": 0
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "default_overrides": {
+          "name": "default_overrides",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "ssh_data_sync_id_unique": {
+          "name": "ssh_data_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_ssh_data_user_id": {
+          "name": "idx_ssh_data_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_data_parent_host": {
+          "name": "idx_ssh_data_parent_host",
+          "columns": [
+            "parent_host_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_data_credential": {
+          "name": "idx_ssh_data_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_data_user_id_users_id_fk": {
+          "name": "ssh_data_user_id_users_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_data_parent_host_id_ssh_data_id_fk": {
+          "name": "ssh_data_parent_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "parent_host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "ssh_data_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_data_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_install_counts": {
+      "name": "plugin_install_counts",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "count": {
+          "name": "count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'aggregate-telemetry'"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_install_counts_plugin_registry": {
+          "name": "idx_plugin_install_counts_plugin_registry",
+          "columns": [
+            "plugin_id",
+            "registry_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_migrations": {
+      "name": "plugin_migrations",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "migration_id": {
+          "name": "migration_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "checksum": {
+          "name": "checksum",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_migrations_plugin_migration": {
+          "name": "idx_plugin_migrations_plugin_migration",
+          "columns": [
+            "plugin_id",
+            "migration_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_migrations_plugin_id_plugins_id_fk": {
+          "name": "plugin_migrations_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_migrations",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_permission_grants": {
+      "name": "plugin_permission_grants",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "capability": {
+          "name": "capability",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'admin'"
+        }
+      },
+      "indexes": {
+        "idx_plugin_permission_grants_plugin_capability": {
+          "name": "idx_plugin_permission_grants_plugin_capability",
+          "columns": [
+            "plugin_id",
+            "capability"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_permission_grants_plugin_id_plugins_id_fk": {
+          "name": "plugin_permission_grants_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "plugin_permission_grants_granted_by_users_id_fk": {
+          "name": "plugin_permission_grants_granted_by_users_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_registries": {
+      "name": "plugin_registries",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "url": {
+          "name": "url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "kind": {
+          "name": "kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'community'"
+        },
+        "enabled": {
+          "name": "enabled",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "signing_key": {
+          "name": "signing_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_checked_at": {
+          "name": "last_checked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_index_hash": {
+          "name": "last_index_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_settings": {
+      "name": "plugin_settings",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope_id": {
+          "name": "scope_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted": {
+          "name": "encrypted",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_settings_scope_key": {
+          "name": "idx_plugin_settings_scope_key",
+          "columns": [
+            "plugin_id",
+            "scope",
+            "scope_id",
+            "key"
+          ],
+          "isUnique": true
+        },
+        "idx_plugin_settings_plugin_scope": {
+          "name": "idx_plugin_settings_plugin_scope",
+          "columns": [
+            "plugin_id",
+            "scope"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "plugin_settings_plugin_id_plugins_id_fk": {
+          "name": "plugin_settings_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_settings",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_storage": {
+      "name": "plugin_storage",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_storage_plugin_key": {
+          "name": "idx_plugin_storage_plugin_key",
+          "columns": [
+            "plugin_id",
+            "key"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_storage_plugin_id_plugins_id_fk": {
+          "name": "plugin_storage_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_storage",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugins": {
+      "name": "plugins",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "version": {
+          "name": "version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tier": {
+          "name": "tier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'available'"
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'community'"
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "state": {
+          "name": "state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'disabled'"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "installed_at": {
+          "name": "installed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "auto_update": {
+          "name": "auto_update",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "manifest_json": {
+          "name": "manifest_json",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {
+        "idx_plugins_registry_id": {
+          "name": "idx_plugins_registry_id",
+          "columns": [
+            "registry_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "rbac_applied_defaults": {
+      "name": "rbac_applied_defaults",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "role_name": {
+          "name": "role_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission": {
+          "name": "permission",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_rbac_applied_defaults_role_permission": {
+          "name": "idx_rbac_applied_defaults_role_permission",
+          "columns": [
+            "role_name",
+            "permission"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "rbac_known_permissions": {
+      "name": "rbac_known_permissions",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "permission": {
+          "name": "permission",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "first_seen_at": {
+          "name": "first_seen_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_rbac_known_permissions_permission": {
+          "name": "idx_rbac_known_permissions_permission",
+          "columns": [
+            "permission"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "recent_activity": {
+      "name": "recent_activity",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "type": {
+          "name": "type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_name": {
+          "name": "host_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_recent_activity_user_ts": {
+          "name": "idx_recent_activity_user_ts",
+          "columns": [
+            "user_id",
+            "timestamp"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "recent_activity_user_id_users_id_fk": {
+          "name": "recent_activity_user_id_users_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "recent_activity_host_id_ssh_data_id_fk": {
+          "name": "recent_activity_host_id_ssh_data_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "roles": {
+      "name": "roles",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "display_name": {
+          "name": "display_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "is_system": {
+          "name": "is_system",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "permissions": {
+          "name": "permissions",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "roles_name_unique": {
+          "name": "roles_name_unique",
+          "columns": [
+            "name"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "sessions": {
+      "name": "sessions",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "jwt_token": {
+          "name": "jwt_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "last_active_at": {
+          "name": "last_active_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sessions_user_id": {
+          "name": "idx_sessions_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_sessions_expires_at": {
+          "name": "idx_sessions_expires_at",
+          "columns": [
+            "expires_at"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sessions_user_id_users_id_fk": {
+          "name": "sessions_user_id_users_id_fk",
+          "tableFrom": "sessions",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "settings": {
+      "name": "settings",
+      "columns": {
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "shared_credential_secrets": {
+      "name": "shared_credential_secrets",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_access_id": {
+          "name": "credential_access_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'password'"
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text(16384)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text(4096)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text(8192)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_shared_credential_secrets_scope": {
+          "name": "idx_shared_credential_secrets_scope",
+          "columns": [
+            "credential_access_id",
+            "target_user_id"
+          ],
+          "isUnique": true
+        },
+        "idx_shared_credential_secrets_target": {
+          "name": "idx_shared_credential_secrets_target",
+          "columns": [
+            "target_user_id",
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "shared_credential_secrets_target_user_id_users_id_fk": {
+          "name": "shared_credential_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_credential_secrets_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_credential_secrets_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_cred_secrets_access_id_fk": {
+          "name": "shared_cred_secrets_access_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "credential_access",
+          "columnsFrom": [
+            "credential_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "shared_host_auth_overrides": {
+      "name": "shared_host_auth_overrides",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "shared_host_auth_overrides_host_user_protocol_unique": {
+          "name": "shared_host_auth_overrides_host_user_protocol_unique",
+          "columns": [
+            "host_id",
+            "user_id",
+            "protocol"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "shared_host_auth_overrides_host_id_ssh_data_id_fk": {
+          "name": "shared_host_auth_overrides_host_id_ssh_data_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_user_id_users_id_fk": {
+          "name": "shared_host_auth_overrides_user_id_users_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "shared_host_secrets": {
+      "name": "shared_host_secrets",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_access_id": {
+          "name": "host_access_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "source_type": {
+          "name": "source_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'credential'"
+        },
+        "original_credential_id": {
+          "name": "original_credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_auth_type": {
+          "name": "encrypted_auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text(16384)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_type": {
+          "name": "encrypted_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_domain": {
+          "name": "encrypted_domain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_fields": {
+          "name": "encrypted_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_shared_host_secrets_scope": {
+          "name": "idx_shared_host_secrets_scope",
+          "columns": [
+            "host_access_id",
+            "target_user_id",
+            "protocol"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "shared_host_secrets_host_access_id_host_access_id_fk": {
+          "name": "shared_host_secrets_host_access_id_host_access_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "host_access",
+          "columnsFrom": [
+            "host_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_target_user_id_users_id_fk": {
+          "name": "shared_host_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_original_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_secrets_original_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "original_credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ssh_credential_usage": {
+      "name": "ssh_credential_usage",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "used_at": {
+          "name": "used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credential_usage_credential": {
+          "name": "idx_ssh_credential_usage_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_credential_usage_user": {
+          "name": "idx_ssh_credential_usage_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_credential_usage_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_credential_usage_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_host_id_ssh_data_id_fk": {
+          "name": "ssh_credential_usage_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_user_id_users_id_fk": {
+          "name": "ssh_credential_usage_user_id_users_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ssh_credentials": {
+      "name": "ssh_credentials",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text(16384)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "private_key": {
+          "name": "private_key",
+          "type": "text(16384)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text(4096)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "detected_key_type": {
+          "name": "detected_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text(8192)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "usage_count": {
+          "name": "usage_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "last_used": {
+          "name": "last_used",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "ssh_credentials_sync_id_unique": {
+          "name": "ssh_credentials_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_ssh_credentials_user_id": {
+          "name": "idx_ssh_credentials_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_credentials_user_id_users_id_fk": {
+          "name": "ssh_credentials_user_id_users_id_fk",
+          "tableFrom": "ssh_credentials",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ssh_folders": {
+      "name": "ssh_folders",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "color": {
+          "name": "color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "icon": {
+          "name": "icon",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "ssh_folders_sync_id_unique": {
+          "name": "ssh_folders_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_ssh_folders_user_id": {
+          "name": "idx_ssh_folders_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_folders_user_id_users_id_fk": {
+          "name": "ssh_folders_user_id_users_id_fk",
+          "tableFrom": "ssh_folders",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "sync_conflicts": {
+      "name": "sync_conflicts",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "local_row": {
+          "name": "local_row",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_revision": {
+          "name": "server_revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sync_conflicts_user": {
+          "name": "idx_sync_conflicts_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sync_conflicts_user_id_users_id_fk": {
+          "name": "sync_conflicts_user_id_users_id_fk",
+          "tableFrom": "sync_conflicts",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "sync_link": {
+      "name": "sync_link",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_url": {
+          "name": "server_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_name": {
+          "name": "server_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "server_version": {
+          "name": "server_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "session_token": {
+          "name": "session_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "custom_headers": {
+          "name": "custom_headers",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "basic_auth": {
+          "name": "basic_auth",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "allow_invalid_certificate": {
+          "name": "allow_invalid_certificate",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "remote_user_id": {
+          "name": "remote_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "remote_username": {
+          "name": "remote_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "account": {
+          "name": "account",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "known_types": {
+          "name": "known_types",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cursor": {
+          "name": "cursor",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'idle'"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "linked_at": {
+          "name": "linked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "last_sync_at": {
+          "name": "last_sync_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "sync_link_user_id_users_id_fk": {
+          "name": "sync_link_user_id_users_id_fk",
+          "tableFrom": "sync_link",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "sync_records": {
+      "name": "sync_records",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "revision": {
+          "name": "revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "seq": {
+          "name": "seq",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "hash": {
+          "name": "hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "deleted": {
+          "name": "deleted",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "error": {
+          "name": "error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "error_hash": {
+          "name": "error_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sync_records_user_entity_sync": {
+          "name": "idx_sync_records_user_entity_sync",
+          "columns": [
+            "user_id",
+            "entity_type",
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_sync_records_user_seq": {
+          "name": "idx_sync_records_user_seq",
+          "columns": [
+            "user_id",
+            "seq"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sync_records_user_id_users_id_fk": {
+          "name": "sync_records_user_id_users_id_fk",
+          "tableFrom": "sync_records",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "trusted_devices": {
+      "name": "trusted_devices",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_fingerprint": {
+          "name": "device_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_trusted_devices_user_id": {
+          "name": "idx_trusted_devices_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "trusted_devices_user_id_users_id_fk": {
+          "name": "trusted_devices_user_id_users_id_fk",
+          "tableFrom": "trusted_devices",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ui_preferences": {
+      "name": "ui_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "ui_preferences_user_id_users_id_fk": {
+          "name": "ui_preferences_user_id_users_id_fk",
+          "tableFrom": "ui_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_external_identities": {
+      "name": "user_external_identities",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "provider_id": {
+          "name": "provider_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "subject": {
+          "name": "subject",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_external_identities_provider_subject": {
+          "name": "idx_user_external_identities_provider_subject",
+          "columns": [
+            "provider_id",
+            "subject"
+          ],
+          "isUnique": true
+        },
+        "idx_user_external_identities_user": {
+          "name": "idx_user_external_identities_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_external_identities_user_id_users_id_fk": {
+          "name": "user_external_identities_user_id_users_id_fk",
+          "tableFrom": "user_external_identities",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_open_tabs": {
+      "name": "user_open_tabs",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tab_type": {
+          "name": "tab_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "label": {
+          "name": "label",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tab_order": {
+          "name": "tab_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "backend_session_id": {
+          "name": "backend_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_open_tabs_user_id": {
+          "name": "idx_user_open_tabs_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_open_tabs_user_id_users_id_fk": {
+          "name": "user_open_tabs_user_id_users_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_open_tabs_host_id_ssh_data_id_fk": {
+          "name": "user_open_tabs_host_id_ssh_data_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_preferences": {
+      "name": "user_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "reopen_tabs_on_login": {
+          "name": "reopen_tabs_on_login",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "theme": {
+          "name": "theme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "font_size": {
+          "name": "font_size",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "accent_color": {
+          "name": "accent_color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "language": {
+          "name": "language",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "storage_mode": {
+          "name": "storage_mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "command_palette_enabled": {
+          "name": "command_palette_enabled",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "show_host_tags": {
+          "name": "show_host_tags",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_tray_on_click": {
+          "name": "host_tray_on_click",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin_app_rail": {
+          "name": "pin_app_rail",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "expand_app_rail_on_hover": {
+          "name": "expand_app_rail_on_hover",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "show_pin_app_rail_button": {
+          "name": "show_pin_app_rail_button",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folders_collapsed": {
+          "name": "folders_collapsed",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "disable_update_check": {
+          "name": "disable_update_check",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "confirm_tab_close": {
+          "name": "confirm_tab_close",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "hidden_rail_tabs": {
+          "name": "hidden_rail_tabs",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "compact_host_view": {
+          "name": "compact_host_view",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_color_scheme": {
+          "name": "status_color_scheme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "custom_keybindings": {
+          "name": "custom_keybindings",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "user_preferences_user_id_users_id_fk": {
+          "name": "user_preferences_user_id_users_id_fk",
+          "tableFrom": "user_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_roles": {
+      "name": "user_roles",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_roles_user_role": {
+          "name": "idx_user_roles_user_role",
+          "columns": [
+            "user_id",
+            "role_id"
+          ],
+          "isUnique": true
+        },
+        "idx_user_roles_role_id": {
+          "name": "idx_user_roles_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_roles_user_id_users_id_fk": {
+          "name": "user_roles_user_id_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_role_id_roles_id_fk": {
+          "name": "user_roles_role_id_roles_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_granted_by_users_id_fk": {
+          "name": "user_roles_granted_by_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_second_factors": {
+      "name": "user_second_factors",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "factor_id": {
+          "name": "factor_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "enrolled_at": {
+          "name": "enrolled_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_second_factors_user_factor": {
+          "name": "idx_user_second_factors_user_factor",
+          "columns": [
+            "user_id",
+            "plugin_id",
+            "factor_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "user_second_factors_user_id_users_id_fk": {
+          "name": "user_second_factors_user_id_users_id_fk",
+          "tableFrom": "user_second_factors",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "users": {
+      "name": "users",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "password_hash": {
+          "name": "password_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "is_admin": {
+          "name": "is_admin",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "registered_at": {
+          "name": "registered_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "donation_modal_dismissed": {
+          "name": "donation_modal_dismissed",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    }
+  },
+  "views": {},
+  "enums": {},
+  "_meta": {
+    "schemas": {},
+    "tables": {},
+    "columns": {}
+  },
+  "internal": {
+    "indexes": {}
+  }
+}
\ No newline at end of file
diff --git a/drizzle/sqlite/meta/0062_snapshot.json b/drizzle/sqlite/meta/0062_snapshot.json
new file mode 100644
index 000000000..df8ccf836
--- /dev/null
+++ b/drizzle/sqlite/meta/0062_snapshot.json
@@ -0,0 +1,4459 @@
+{
+  "version": "6",
+  "dialect": "sqlite",
+  "id": "dd7d607e-a0a7-4fa9-833b-d333ceed8cee",
+  "prevId": "6c43dde1-c5eb-4ff0-8c71-b4c5e6010c66",
+  "tables": {
+    "api_keys": {
+      "name": "api_keys",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "token_hash": {
+          "name": "token_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "token_prefix": {
+          "name": "token_prefix",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "is_active": {
+          "name": "is_active",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        }
+      },
+      "indexes": {
+        "idx_api_keys_user_id": {
+          "name": "idx_api_keys_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "api_keys_user_id_users_id_fk": {
+          "name": "api_keys_user_id_users_id_fk",
+          "tableFrom": "api_keys",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "audit_logs": {
+      "name": "audit_logs",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "action": {
+          "name": "action",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "resource_type": {
+          "name": "resource_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "resource_id": {
+          "name": "resource_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "resource_name": {
+          "name": "resource_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "details": {
+          "name": "details",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ip_address": {
+          "name": "ip_address",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "user_agent": {
+          "name": "user_agent",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "success": {
+          "name": "success",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_audit_logs_timestamp": {
+          "name": "idx_audit_logs_timestamp",
+          "columns": [
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_user_ts": {
+          "name": "idx_audit_logs_user_ts",
+          "columns": [
+            "user_id",
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_action_ts": {
+          "name": "idx_audit_logs_action_ts",
+          "columns": [
+            "action",
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_resource_ts": {
+          "name": "idx_audit_logs_resource_ts",
+          "columns": [
+            "resource_type",
+            "timestamp"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "audit_logs_user_id_users_id_fk": {
+          "name": "audit_logs_user_id_users_id_fk",
+          "tableFrom": "audit_logs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "credential_access": {
+      "name": "credential_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'use'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_credential_access_user_id": {
+          "name": "idx_credential_access_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_credential_access_role_id": {
+          "name": "idx_credential_access_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        },
+        "idx_credential_access_credential_id": {
+          "name": "idx_credential_access_credential_id",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "credential_access_credential_id_ssh_credentials_id_fk": {
+          "name": "credential_access_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_user_id_users_id_fk": {
+          "name": "credential_access_user_id_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_role_id_roles_id_fk": {
+          "name": "credential_access_role_id_roles_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_granted_by_users_id_fk": {
+          "name": "credential_access_granted_by_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "credential_sidebar_preferences": {
+      "name": "credential_sidebar_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "credential_sidebar_preferences_user_id_users_id_fk": {
+          "name": "credential_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "credential_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "folder_access": {
+      "name": "folder_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "owner_user_id": {
+          "name": "owner_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'connect'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_folder_access_owner_folder": {
+          "name": "idx_folder_access_owner_folder",
+          "columns": [
+            "owner_user_id",
+            "folder"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "folder_access_owner_user_id_users_id_fk": {
+          "name": "folder_access_owner_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "owner_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_user_id_users_id_fk": {
+          "name": "folder_access_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_role_id_roles_id_fk": {
+          "name": "folder_access_role_id_roles_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_granted_by_users_id_fk": {
+          "name": "folder_access_granted_by_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "host_access": {
+      "name": "host_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'connect'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "last_accessed_at": {
+          "name": "last_accessed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "access_count": {
+          "name": "access_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        }
+      },
+      "indexes": {
+        "idx_host_access_user_id": {
+          "name": "idx_host_access_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_role_id": {
+          "name": "idx_host_access_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_host_id": {
+          "name": "idx_host_access_host_id",
+          "columns": [
+            "host_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_expires_at": {
+          "name": "idx_host_access_expires_at",
+          "columns": [
+            "expires_at"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_access_host_id_ssh_data_id_fk": {
+          "name": "host_access_host_id_ssh_data_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_user_id_users_id_fk": {
+          "name": "host_access_user_id_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_role_id_roles_id_fk": {
+          "name": "host_access_role_id_roles_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_granted_by_users_id_fk": {
+          "name": "host_access_granted_by_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "host_defaults": {
+      "name": "host_defaults",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "level": {
+          "name": "level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope_key": {
+          "name": "scope_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folder_id": {
+          "name": "folder_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "namespace": {
+          "name": "namespace",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_by": {
+          "name": "updated_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_host_defaults_scope_key": {
+          "name": "idx_host_defaults_scope_key",
+          "columns": [
+            "scope_key",
+            "namespace",
+            "key"
+          ],
+          "isUnique": true
+        },
+        "idx_host_defaults_user": {
+          "name": "idx_host_defaults_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_defaults_folder": {
+          "name": "idx_host_defaults_folder",
+          "columns": [
+            "folder_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_defaults_user_id_users_id_fk": {
+          "name": "host_defaults_user_id_users_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_defaults_folder_id_ssh_folders_id_fk": {
+          "name": "host_defaults_folder_id_ssh_folders_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "ssh_folders",
+          "columnsFrom": [
+            "folder_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "host_protocol_auth": {
+      "name": "host_protocol_auth",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'direct'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "fields": {
+          "name": "fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "secret_fields": {
+          "name": "secret_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_host_protocol_auth_host_protocol": {
+          "name": "idx_host_protocol_auth_host_protocol",
+          "columns": [
+            "host_id",
+            "protocol"
+          ],
+          "isUnique": true
+        },
+        "idx_host_protocol_auth_user": {
+          "name": "idx_host_protocol_auth_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_protocol_auth_credential": {
+          "name": "idx_host_protocol_auth_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_protocol_auth_host_id_ssh_data_id_fk": {
+          "name": "host_protocol_auth_host_id_ssh_data_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_user_id_users_id_fk": {
+          "name": "host_protocol_auth_user_id_users_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_credential_id_ssh_credentials_id_fk": {
+          "name": "host_protocol_auth_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "host_sidebar_preferences": {
+      "name": "host_sidebar_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "host_sidebar_preferences_user_id_users_id_fk": {
+          "name": "host_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "host_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ssh_data": {
+      "name": "ssh_data",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "connection_type": {
+          "name": "connection_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ip": {
+          "name": "ip",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "port": {
+          "name": "port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "parent_host_id": {
+          "name": "parent_host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "share_ssh_auth": {
+          "name": "share_ssh_auth",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "force_keyboard_interactive": {
+          "name": "force_keyboard_interactive",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text(8192)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sudo_password": {
+          "name": "sudo_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "override_credential_username": {
+          "name": "override_credential_username",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "jump_hosts": {
+          "name": "jump_hosts",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_check_enabled": {
+          "name": "status_check_enabled",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "status_check_interval": {
+          "name": "status_check_interval",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ssh_options": {
+          "name": "ssh_options",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "notes": {
+          "name": "notes",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "enable_ssh": {
+          "name": "enable_ssh",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "ssh_port": {
+          "name": "ssh_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": 22
+        },
+        "use_socks5": {
+          "name": "use_socks5",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_host": {
+          "name": "socks5_host",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_port": {
+          "name": "socks5_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_username": {
+          "name": "socks5_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_password": {
+          "name": "socks5_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_proxy_chain": {
+          "name": "socks5_proxy_chain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "connection_origin": {
+          "name": "connection_origin",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "port_knock_sequence": {
+          "name": "port_knock_sequence",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_fingerprint": {
+          "name": "host_key_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_type": {
+          "name": "host_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_algorithm": {
+          "name": "host_key_algorithm",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": "'sha256'"
+        },
+        "host_key_first_seen": {
+          "name": "host_key_first_seen",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_last_verified": {
+          "name": "host_key_last_verified",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_changed_count": {
+          "name": "host_key_changed_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": 0
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "default_overrides": {
+          "name": "default_overrides",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "ssh_data_sync_id_unique": {
+          "name": "ssh_data_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_ssh_data_user_id": {
+          "name": "idx_ssh_data_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_data_parent_host": {
+          "name": "idx_ssh_data_parent_host",
+          "columns": [
+            "parent_host_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_data_credential": {
+          "name": "idx_ssh_data_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_data_user_id_users_id_fk": {
+          "name": "ssh_data_user_id_users_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_data_parent_host_id_ssh_data_id_fk": {
+          "name": "ssh_data_parent_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "parent_host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "ssh_data_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_data_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_install_counts": {
+      "name": "plugin_install_counts",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "count": {
+          "name": "count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'aggregate-telemetry'"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_install_counts_plugin_registry": {
+          "name": "idx_plugin_install_counts_plugin_registry",
+          "columns": [
+            "plugin_id",
+            "registry_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_migrations": {
+      "name": "plugin_migrations",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "migration_id": {
+          "name": "migration_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "checksum": {
+          "name": "checksum",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_migrations_plugin_migration": {
+          "name": "idx_plugin_migrations_plugin_migration",
+          "columns": [
+            "plugin_id",
+            "migration_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_migrations_plugin_id_plugins_id_fk": {
+          "name": "plugin_migrations_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_migrations",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_permission_grants": {
+      "name": "plugin_permission_grants",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "capability": {
+          "name": "capability",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'admin'"
+        }
+      },
+      "indexes": {
+        "idx_plugin_permission_grants_plugin_capability": {
+          "name": "idx_plugin_permission_grants_plugin_capability",
+          "columns": [
+            "plugin_id",
+            "capability"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_permission_grants_plugin_id_plugins_id_fk": {
+          "name": "plugin_permission_grants_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "plugin_permission_grants_granted_by_users_id_fk": {
+          "name": "plugin_permission_grants_granted_by_users_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_registries": {
+      "name": "plugin_registries",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "url": {
+          "name": "url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "kind": {
+          "name": "kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'community'"
+        },
+        "enabled": {
+          "name": "enabled",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "signing_key": {
+          "name": "signing_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_checked_at": {
+          "name": "last_checked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_index_hash": {
+          "name": "last_index_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_settings": {
+      "name": "plugin_settings",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope_id": {
+          "name": "scope_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted": {
+          "name": "encrypted",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_settings_scope_key": {
+          "name": "idx_plugin_settings_scope_key",
+          "columns": [
+            "plugin_id",
+            "scope",
+            "scope_id",
+            "key"
+          ],
+          "isUnique": true
+        },
+        "idx_plugin_settings_plugin_scope": {
+          "name": "idx_plugin_settings_plugin_scope",
+          "columns": [
+            "plugin_id",
+            "scope"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "plugin_settings_plugin_id_plugins_id_fk": {
+          "name": "plugin_settings_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_settings",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_storage": {
+      "name": "plugin_storage",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_storage_plugin_key": {
+          "name": "idx_plugin_storage_plugin_key",
+          "columns": [
+            "plugin_id",
+            "key"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_storage_plugin_id_plugins_id_fk": {
+          "name": "plugin_storage_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_storage",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugins": {
+      "name": "plugins",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "version": {
+          "name": "version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tier": {
+          "name": "tier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'available'"
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'community'"
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "state": {
+          "name": "state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'disabled'"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "installed_at": {
+          "name": "installed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "auto_update": {
+          "name": "auto_update",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "manifest_json": {
+          "name": "manifest_json",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {
+        "idx_plugins_registry_id": {
+          "name": "idx_plugins_registry_id",
+          "columns": [
+            "registry_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "rbac_applied_defaults": {
+      "name": "rbac_applied_defaults",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "role_name": {
+          "name": "role_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission": {
+          "name": "permission",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_rbac_applied_defaults_role_permission": {
+          "name": "idx_rbac_applied_defaults_role_permission",
+          "columns": [
+            "role_name",
+            "permission"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "rbac_known_permissions": {
+      "name": "rbac_known_permissions",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "permission": {
+          "name": "permission",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "first_seen_at": {
+          "name": "first_seen_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_rbac_known_permissions_permission": {
+          "name": "idx_rbac_known_permissions_permission",
+          "columns": [
+            "permission"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "recent_activity": {
+      "name": "recent_activity",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "type": {
+          "name": "type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_name": {
+          "name": "host_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_recent_activity_user_ts": {
+          "name": "idx_recent_activity_user_ts",
+          "columns": [
+            "user_id",
+            "timestamp"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "recent_activity_user_id_users_id_fk": {
+          "name": "recent_activity_user_id_users_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "recent_activity_host_id_ssh_data_id_fk": {
+          "name": "recent_activity_host_id_ssh_data_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "roles": {
+      "name": "roles",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "display_name": {
+          "name": "display_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "is_system": {
+          "name": "is_system",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "permissions": {
+          "name": "permissions",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "roles_name_unique": {
+          "name": "roles_name_unique",
+          "columns": [
+            "name"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "sessions": {
+      "name": "sessions",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "jwt_token": {
+          "name": "jwt_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "external_session_ref": {
+          "name": "external_session_ref",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "last_active_at": {
+          "name": "last_active_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sessions_user_id": {
+          "name": "idx_sessions_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_sessions_expires_at": {
+          "name": "idx_sessions_expires_at",
+          "columns": [
+            "expires_at"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sessions_user_id_users_id_fk": {
+          "name": "sessions_user_id_users_id_fk",
+          "tableFrom": "sessions",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "settings": {
+      "name": "settings",
+      "columns": {
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "shared_credential_secrets": {
+      "name": "shared_credential_secrets",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_access_id": {
+          "name": "credential_access_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'password'"
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text(16384)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text(4096)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text(8192)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_shared_credential_secrets_scope": {
+          "name": "idx_shared_credential_secrets_scope",
+          "columns": [
+            "credential_access_id",
+            "target_user_id"
+          ],
+          "isUnique": true
+        },
+        "idx_shared_credential_secrets_target": {
+          "name": "idx_shared_credential_secrets_target",
+          "columns": [
+            "target_user_id",
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "shared_credential_secrets_target_user_id_users_id_fk": {
+          "name": "shared_credential_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_credential_secrets_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_credential_secrets_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_cred_secrets_access_id_fk": {
+          "name": "shared_cred_secrets_access_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "credential_access",
+          "columnsFrom": [
+            "credential_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "shared_host_auth_overrides": {
+      "name": "shared_host_auth_overrides",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "shared_host_auth_overrides_host_user_protocol_unique": {
+          "name": "shared_host_auth_overrides_host_user_protocol_unique",
+          "columns": [
+            "host_id",
+            "user_id",
+            "protocol"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "shared_host_auth_overrides_host_id_ssh_data_id_fk": {
+          "name": "shared_host_auth_overrides_host_id_ssh_data_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_user_id_users_id_fk": {
+          "name": "shared_host_auth_overrides_user_id_users_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "shared_host_secrets": {
+      "name": "shared_host_secrets",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_access_id": {
+          "name": "host_access_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "source_type": {
+          "name": "source_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'credential'"
+        },
+        "original_credential_id": {
+          "name": "original_credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_auth_type": {
+          "name": "encrypted_auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text(16384)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_type": {
+          "name": "encrypted_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_domain": {
+          "name": "encrypted_domain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_fields": {
+          "name": "encrypted_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_shared_host_secrets_scope": {
+          "name": "idx_shared_host_secrets_scope",
+          "columns": [
+            "host_access_id",
+            "target_user_id",
+            "protocol"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "shared_host_secrets_host_access_id_host_access_id_fk": {
+          "name": "shared_host_secrets_host_access_id_host_access_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "host_access",
+          "columnsFrom": [
+            "host_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_target_user_id_users_id_fk": {
+          "name": "shared_host_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_original_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_secrets_original_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "original_credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ssh_credential_usage": {
+      "name": "ssh_credential_usage",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "used_at": {
+          "name": "used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credential_usage_credential": {
+          "name": "idx_ssh_credential_usage_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_credential_usage_user": {
+          "name": "idx_ssh_credential_usage_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_credential_usage_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_credential_usage_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_host_id_ssh_data_id_fk": {
+          "name": "ssh_credential_usage_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_user_id_users_id_fk": {
+          "name": "ssh_credential_usage_user_id_users_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ssh_credentials": {
+      "name": "ssh_credentials",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text(16384)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "private_key": {
+          "name": "private_key",
+          "type": "text(16384)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text(4096)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "detected_key_type": {
+          "name": "detected_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text(8192)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "usage_count": {
+          "name": "usage_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "last_used": {
+          "name": "last_used",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "ssh_credentials_sync_id_unique": {
+          "name": "ssh_credentials_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_ssh_credentials_user_id": {
+          "name": "idx_ssh_credentials_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_credentials_user_id_users_id_fk": {
+          "name": "ssh_credentials_user_id_users_id_fk",
+          "tableFrom": "ssh_credentials",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ssh_folders": {
+      "name": "ssh_folders",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "color": {
+          "name": "color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "icon": {
+          "name": "icon",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "ssh_folders_sync_id_unique": {
+          "name": "ssh_folders_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_ssh_folders_user_id": {
+          "name": "idx_ssh_folders_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_folders_user_id_users_id_fk": {
+          "name": "ssh_folders_user_id_users_id_fk",
+          "tableFrom": "ssh_folders",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "sync_conflicts": {
+      "name": "sync_conflicts",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "local_row": {
+          "name": "local_row",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_revision": {
+          "name": "server_revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sync_conflicts_user": {
+          "name": "idx_sync_conflicts_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sync_conflicts_user_id_users_id_fk": {
+          "name": "sync_conflicts_user_id_users_id_fk",
+          "tableFrom": "sync_conflicts",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "sync_link": {
+      "name": "sync_link",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_url": {
+          "name": "server_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_name": {
+          "name": "server_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "server_version": {
+          "name": "server_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "session_token": {
+          "name": "session_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "custom_headers": {
+          "name": "custom_headers",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "basic_auth": {
+          "name": "basic_auth",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "allow_invalid_certificate": {
+          "name": "allow_invalid_certificate",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "remote_user_id": {
+          "name": "remote_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "remote_username": {
+          "name": "remote_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "account": {
+          "name": "account",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "known_types": {
+          "name": "known_types",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cursor": {
+          "name": "cursor",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'idle'"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "linked_at": {
+          "name": "linked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "last_sync_at": {
+          "name": "last_sync_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "sync_link_user_id_users_id_fk": {
+          "name": "sync_link_user_id_users_id_fk",
+          "tableFrom": "sync_link",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "sync_records": {
+      "name": "sync_records",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "revision": {
+          "name": "revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "seq": {
+          "name": "seq",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "hash": {
+          "name": "hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "deleted": {
+          "name": "deleted",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "error": {
+          "name": "error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "error_hash": {
+          "name": "error_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sync_records_user_entity_sync": {
+          "name": "idx_sync_records_user_entity_sync",
+          "columns": [
+            "user_id",
+            "entity_type",
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_sync_records_user_seq": {
+          "name": "idx_sync_records_user_seq",
+          "columns": [
+            "user_id",
+            "seq"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sync_records_user_id_users_id_fk": {
+          "name": "sync_records_user_id_users_id_fk",
+          "tableFrom": "sync_records",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "trusted_devices": {
+      "name": "trusted_devices",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_fingerprint": {
+          "name": "device_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_trusted_devices_user_id": {
+          "name": "idx_trusted_devices_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "trusted_devices_user_id_users_id_fk": {
+          "name": "trusted_devices_user_id_users_id_fk",
+          "tableFrom": "trusted_devices",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ui_preferences": {
+      "name": "ui_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "ui_preferences_user_id_users_id_fk": {
+          "name": "ui_preferences_user_id_users_id_fk",
+          "tableFrom": "ui_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_external_identities": {
+      "name": "user_external_identities",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "provider_id": {
+          "name": "provider_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "subject": {
+          "name": "subject",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_external_identities_provider_subject": {
+          "name": "idx_user_external_identities_provider_subject",
+          "columns": [
+            "provider_id",
+            "subject"
+          ],
+          "isUnique": true
+        },
+        "idx_user_external_identities_user": {
+          "name": "idx_user_external_identities_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_external_identities_user_id_users_id_fk": {
+          "name": "user_external_identities_user_id_users_id_fk",
+          "tableFrom": "user_external_identities",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_open_tabs": {
+      "name": "user_open_tabs",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tab_type": {
+          "name": "tab_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "label": {
+          "name": "label",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tab_order": {
+          "name": "tab_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "backend_session_id": {
+          "name": "backend_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_open_tabs_user_id": {
+          "name": "idx_user_open_tabs_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_open_tabs_user_id_users_id_fk": {
+          "name": "user_open_tabs_user_id_users_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_open_tabs_host_id_ssh_data_id_fk": {
+          "name": "user_open_tabs_host_id_ssh_data_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_preferences": {
+      "name": "user_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "reopen_tabs_on_login": {
+          "name": "reopen_tabs_on_login",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "theme": {
+          "name": "theme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "font_size": {
+          "name": "font_size",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "accent_color": {
+          "name": "accent_color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "language": {
+          "name": "language",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "storage_mode": {
+          "name": "storage_mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "command_palette_enabled": {
+          "name": "command_palette_enabled",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "show_host_tags": {
+          "name": "show_host_tags",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_tray_on_click": {
+          "name": "host_tray_on_click",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin_app_rail": {
+          "name": "pin_app_rail",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "expand_app_rail_on_hover": {
+          "name": "expand_app_rail_on_hover",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "show_pin_app_rail_button": {
+          "name": "show_pin_app_rail_button",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folders_collapsed": {
+          "name": "folders_collapsed",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "disable_update_check": {
+          "name": "disable_update_check",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "confirm_tab_close": {
+          "name": "confirm_tab_close",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "hidden_rail_tabs": {
+          "name": "hidden_rail_tabs",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "compact_host_view": {
+          "name": "compact_host_view",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_color_scheme": {
+          "name": "status_color_scheme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "custom_keybindings": {
+          "name": "custom_keybindings",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "user_preferences_user_id_users_id_fk": {
+          "name": "user_preferences_user_id_users_id_fk",
+          "tableFrom": "user_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_roles": {
+      "name": "user_roles",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_roles_user_role": {
+          "name": "idx_user_roles_user_role",
+          "columns": [
+            "user_id",
+            "role_id"
+          ],
+          "isUnique": true
+        },
+        "idx_user_roles_role_id": {
+          "name": "idx_user_roles_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_roles_user_id_users_id_fk": {
+          "name": "user_roles_user_id_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_role_id_roles_id_fk": {
+          "name": "user_roles_role_id_roles_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_granted_by_users_id_fk": {
+          "name": "user_roles_granted_by_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_second_factors": {
+      "name": "user_second_factors",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "factor_id": {
+          "name": "factor_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "enrolled_at": {
+          "name": "enrolled_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_second_factors_user_factor": {
+          "name": "idx_user_second_factors_user_factor",
+          "columns": [
+            "user_id",
+            "plugin_id",
+            "factor_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "user_second_factors_user_id_users_id_fk": {
+          "name": "user_second_factors_user_id_users_id_fk",
+          "tableFrom": "user_second_factors",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "users": {
+      "name": "users",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "password_hash": {
+          "name": "password_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "is_admin": {
+          "name": "is_admin",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "registered_at": {
+          "name": "registered_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "donation_modal_dismissed": {
+          "name": "donation_modal_dismissed",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    }
+  },
+  "views": {},
+  "enums": {},
+  "_meta": {
+    "schemas": {},
+    "tables": {},
+    "columns": {}
+  },
+  "internal": {
+    "indexes": {}
+  }
+}
\ No newline at end of file
diff --git a/drizzle/sqlite/meta/0063_snapshot.json b/drizzle/sqlite/meta/0063_snapshot.json
new file mode 100644
index 000000000..9a83fbebc
--- /dev/null
+++ b/drizzle/sqlite/meta/0063_snapshot.json
@@ -0,0 +1,4466 @@
+{
+  "version": "6",
+  "dialect": "sqlite",
+  "id": "f30d235a-ff96-490c-a84a-4787012caa8a",
+  "prevId": "dd7d607e-a0a7-4fa9-833b-d333ceed8cee",
+  "tables": {
+    "api_keys": {
+      "name": "api_keys",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "token_hash": {
+          "name": "token_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "token_prefix": {
+          "name": "token_prefix",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "is_active": {
+          "name": "is_active",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        }
+      },
+      "indexes": {
+        "idx_api_keys_user_id": {
+          "name": "idx_api_keys_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "api_keys_user_id_users_id_fk": {
+          "name": "api_keys_user_id_users_id_fk",
+          "tableFrom": "api_keys",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "audit_logs": {
+      "name": "audit_logs",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "action": {
+          "name": "action",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "resource_type": {
+          "name": "resource_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "resource_id": {
+          "name": "resource_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "resource_name": {
+          "name": "resource_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "details": {
+          "name": "details",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ip_address": {
+          "name": "ip_address",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "user_agent": {
+          "name": "user_agent",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "success": {
+          "name": "success",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_audit_logs_timestamp": {
+          "name": "idx_audit_logs_timestamp",
+          "columns": [
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_user_ts": {
+          "name": "idx_audit_logs_user_ts",
+          "columns": [
+            "user_id",
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_action_ts": {
+          "name": "idx_audit_logs_action_ts",
+          "columns": [
+            "action",
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_resource_ts": {
+          "name": "idx_audit_logs_resource_ts",
+          "columns": [
+            "resource_type",
+            "timestamp"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "audit_logs_user_id_users_id_fk": {
+          "name": "audit_logs_user_id_users_id_fk",
+          "tableFrom": "audit_logs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "credential_access": {
+      "name": "credential_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'use'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_credential_access_user_id": {
+          "name": "idx_credential_access_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_credential_access_role_id": {
+          "name": "idx_credential_access_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        },
+        "idx_credential_access_credential_id": {
+          "name": "idx_credential_access_credential_id",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "credential_access_credential_id_ssh_credentials_id_fk": {
+          "name": "credential_access_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_user_id_users_id_fk": {
+          "name": "credential_access_user_id_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_role_id_roles_id_fk": {
+          "name": "credential_access_role_id_roles_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_granted_by_users_id_fk": {
+          "name": "credential_access_granted_by_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "credential_sidebar_preferences": {
+      "name": "credential_sidebar_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "credential_sidebar_preferences_user_id_users_id_fk": {
+          "name": "credential_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "credential_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "folder_access": {
+      "name": "folder_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "owner_user_id": {
+          "name": "owner_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'connect'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_folder_access_owner_folder": {
+          "name": "idx_folder_access_owner_folder",
+          "columns": [
+            "owner_user_id",
+            "folder"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "folder_access_owner_user_id_users_id_fk": {
+          "name": "folder_access_owner_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "owner_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_user_id_users_id_fk": {
+          "name": "folder_access_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_role_id_roles_id_fk": {
+          "name": "folder_access_role_id_roles_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_granted_by_users_id_fk": {
+          "name": "folder_access_granted_by_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "host_access": {
+      "name": "host_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'connect'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "last_accessed_at": {
+          "name": "last_accessed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "access_count": {
+          "name": "access_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        }
+      },
+      "indexes": {
+        "idx_host_access_user_id": {
+          "name": "idx_host_access_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_role_id": {
+          "name": "idx_host_access_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_host_id": {
+          "name": "idx_host_access_host_id",
+          "columns": [
+            "host_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_expires_at": {
+          "name": "idx_host_access_expires_at",
+          "columns": [
+            "expires_at"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_access_host_id_ssh_data_id_fk": {
+          "name": "host_access_host_id_ssh_data_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_user_id_users_id_fk": {
+          "name": "host_access_user_id_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_role_id_roles_id_fk": {
+          "name": "host_access_role_id_roles_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_granted_by_users_id_fk": {
+          "name": "host_access_granted_by_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "host_defaults": {
+      "name": "host_defaults",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "level": {
+          "name": "level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope_key": {
+          "name": "scope_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folder_id": {
+          "name": "folder_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "namespace": {
+          "name": "namespace",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_by": {
+          "name": "updated_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_host_defaults_scope_key": {
+          "name": "idx_host_defaults_scope_key",
+          "columns": [
+            "scope_key",
+            "namespace",
+            "key"
+          ],
+          "isUnique": true
+        },
+        "idx_host_defaults_user": {
+          "name": "idx_host_defaults_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_defaults_folder": {
+          "name": "idx_host_defaults_folder",
+          "columns": [
+            "folder_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_defaults_user_id_users_id_fk": {
+          "name": "host_defaults_user_id_users_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_defaults_folder_id_ssh_folders_id_fk": {
+          "name": "host_defaults_folder_id_ssh_folders_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "ssh_folders",
+          "columnsFrom": [
+            "folder_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "host_protocol_auth": {
+      "name": "host_protocol_auth",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'direct'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "fields": {
+          "name": "fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "secret_fields": {
+          "name": "secret_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_host_protocol_auth_host_protocol": {
+          "name": "idx_host_protocol_auth_host_protocol",
+          "columns": [
+            "host_id",
+            "protocol"
+          ],
+          "isUnique": true
+        },
+        "idx_host_protocol_auth_user": {
+          "name": "idx_host_protocol_auth_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_protocol_auth_credential": {
+          "name": "idx_host_protocol_auth_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_protocol_auth_host_id_ssh_data_id_fk": {
+          "name": "host_protocol_auth_host_id_ssh_data_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_user_id_users_id_fk": {
+          "name": "host_protocol_auth_user_id_users_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_credential_id_ssh_credentials_id_fk": {
+          "name": "host_protocol_auth_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "host_sidebar_preferences": {
+      "name": "host_sidebar_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "host_sidebar_preferences_user_id_users_id_fk": {
+          "name": "host_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "host_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ssh_data": {
+      "name": "ssh_data",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "connection_type": {
+          "name": "connection_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ip": {
+          "name": "ip",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "port": {
+          "name": "port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "parent_host_id": {
+          "name": "parent_host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "share_ssh_auth": {
+          "name": "share_ssh_auth",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "force_keyboard_interactive": {
+          "name": "force_keyboard_interactive",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text(8192)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sudo_password": {
+          "name": "sudo_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "override_credential_username": {
+          "name": "override_credential_username",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "jump_hosts": {
+          "name": "jump_hosts",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_check_enabled": {
+          "name": "status_check_enabled",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "status_check_interval": {
+          "name": "status_check_interval",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ssh_options": {
+          "name": "ssh_options",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "notes": {
+          "name": "notes",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "enable_ssh": {
+          "name": "enable_ssh",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "ssh_port": {
+          "name": "ssh_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": 22
+        },
+        "use_socks5": {
+          "name": "use_socks5",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_host": {
+          "name": "socks5_host",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_port": {
+          "name": "socks5_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_username": {
+          "name": "socks5_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_password": {
+          "name": "socks5_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_proxy_chain": {
+          "name": "socks5_proxy_chain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "connection_origin": {
+          "name": "connection_origin",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "port_knock_sequence": {
+          "name": "port_knock_sequence",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_fingerprint": {
+          "name": "host_key_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_type": {
+          "name": "host_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_algorithm": {
+          "name": "host_key_algorithm",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": "'sha256'"
+        },
+        "host_key_first_seen": {
+          "name": "host_key_first_seen",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_last_verified": {
+          "name": "host_key_last_verified",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_changed_count": {
+          "name": "host_key_changed_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": 0
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "default_overrides": {
+          "name": "default_overrides",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "ssh_data_sync_id_unique": {
+          "name": "ssh_data_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_ssh_data_user_id": {
+          "name": "idx_ssh_data_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_data_parent_host": {
+          "name": "idx_ssh_data_parent_host",
+          "columns": [
+            "parent_host_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_data_credential": {
+          "name": "idx_ssh_data_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_data_user_id_users_id_fk": {
+          "name": "ssh_data_user_id_users_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_data_parent_host_id_ssh_data_id_fk": {
+          "name": "ssh_data_parent_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "parent_host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "ssh_data_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_data_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_install_counts": {
+      "name": "plugin_install_counts",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "count": {
+          "name": "count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'aggregate-telemetry'"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_install_counts_plugin_registry": {
+          "name": "idx_plugin_install_counts_plugin_registry",
+          "columns": [
+            "plugin_id",
+            "registry_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_migrations": {
+      "name": "plugin_migrations",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "migration_id": {
+          "name": "migration_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "checksum": {
+          "name": "checksum",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_migrations_plugin_migration": {
+          "name": "idx_plugin_migrations_plugin_migration",
+          "columns": [
+            "plugin_id",
+            "migration_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_migrations_plugin_id_plugins_id_fk": {
+          "name": "plugin_migrations_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_migrations",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_permission_grants": {
+      "name": "plugin_permission_grants",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "capability": {
+          "name": "capability",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'admin'"
+        }
+      },
+      "indexes": {
+        "idx_plugin_permission_grants_plugin_capability": {
+          "name": "idx_plugin_permission_grants_plugin_capability",
+          "columns": [
+            "plugin_id",
+            "capability"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_permission_grants_plugin_id_plugins_id_fk": {
+          "name": "plugin_permission_grants_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "plugin_permission_grants_granted_by_users_id_fk": {
+          "name": "plugin_permission_grants_granted_by_users_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_registries": {
+      "name": "plugin_registries",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "url": {
+          "name": "url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "kind": {
+          "name": "kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'community'"
+        },
+        "enabled": {
+          "name": "enabled",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "signing_key": {
+          "name": "signing_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_checked_at": {
+          "name": "last_checked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_index_hash": {
+          "name": "last_index_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_settings": {
+      "name": "plugin_settings",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope_id": {
+          "name": "scope_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted": {
+          "name": "encrypted",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_settings_scope_key": {
+          "name": "idx_plugin_settings_scope_key",
+          "columns": [
+            "plugin_id",
+            "scope",
+            "scope_id",
+            "key"
+          ],
+          "isUnique": true
+        },
+        "idx_plugin_settings_plugin_scope": {
+          "name": "idx_plugin_settings_plugin_scope",
+          "columns": [
+            "plugin_id",
+            "scope"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "plugin_settings_plugin_id_plugins_id_fk": {
+          "name": "plugin_settings_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_settings",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_storage": {
+      "name": "plugin_storage",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_storage_plugin_key": {
+          "name": "idx_plugin_storage_plugin_key",
+          "columns": [
+            "plugin_id",
+            "key"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_storage_plugin_id_plugins_id_fk": {
+          "name": "plugin_storage_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_storage",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugins": {
+      "name": "plugins",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "version": {
+          "name": "version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tier": {
+          "name": "tier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'available'"
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'community'"
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "state": {
+          "name": "state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'disabled'"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "installed_at": {
+          "name": "installed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "auto_update": {
+          "name": "auto_update",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "pinned_version": {
+          "name": "pinned_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "manifest_json": {
+          "name": "manifest_json",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {
+        "idx_plugins_registry_id": {
+          "name": "idx_plugins_registry_id",
+          "columns": [
+            "registry_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "rbac_applied_defaults": {
+      "name": "rbac_applied_defaults",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "role_name": {
+          "name": "role_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission": {
+          "name": "permission",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_rbac_applied_defaults_role_permission": {
+          "name": "idx_rbac_applied_defaults_role_permission",
+          "columns": [
+            "role_name",
+            "permission"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "rbac_known_permissions": {
+      "name": "rbac_known_permissions",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "permission": {
+          "name": "permission",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "first_seen_at": {
+          "name": "first_seen_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_rbac_known_permissions_permission": {
+          "name": "idx_rbac_known_permissions_permission",
+          "columns": [
+            "permission"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "recent_activity": {
+      "name": "recent_activity",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "type": {
+          "name": "type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_name": {
+          "name": "host_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_recent_activity_user_ts": {
+          "name": "idx_recent_activity_user_ts",
+          "columns": [
+            "user_id",
+            "timestamp"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "recent_activity_user_id_users_id_fk": {
+          "name": "recent_activity_user_id_users_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "recent_activity_host_id_ssh_data_id_fk": {
+          "name": "recent_activity_host_id_ssh_data_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "roles": {
+      "name": "roles",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "display_name": {
+          "name": "display_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "is_system": {
+          "name": "is_system",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "permissions": {
+          "name": "permissions",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "roles_name_unique": {
+          "name": "roles_name_unique",
+          "columns": [
+            "name"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "sessions": {
+      "name": "sessions",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "jwt_token": {
+          "name": "jwt_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "external_session_ref": {
+          "name": "external_session_ref",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "last_active_at": {
+          "name": "last_active_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sessions_user_id": {
+          "name": "idx_sessions_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_sessions_expires_at": {
+          "name": "idx_sessions_expires_at",
+          "columns": [
+            "expires_at"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sessions_user_id_users_id_fk": {
+          "name": "sessions_user_id_users_id_fk",
+          "tableFrom": "sessions",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "settings": {
+      "name": "settings",
+      "columns": {
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "shared_credential_secrets": {
+      "name": "shared_credential_secrets",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_access_id": {
+          "name": "credential_access_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'password'"
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text(16384)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text(4096)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text(8192)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_shared_credential_secrets_scope": {
+          "name": "idx_shared_credential_secrets_scope",
+          "columns": [
+            "credential_access_id",
+            "target_user_id"
+          ],
+          "isUnique": true
+        },
+        "idx_shared_credential_secrets_target": {
+          "name": "idx_shared_credential_secrets_target",
+          "columns": [
+            "target_user_id",
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "shared_credential_secrets_target_user_id_users_id_fk": {
+          "name": "shared_credential_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_credential_secrets_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_credential_secrets_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_cred_secrets_access_id_fk": {
+          "name": "shared_cred_secrets_access_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "credential_access",
+          "columnsFrom": [
+            "credential_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "shared_host_auth_overrides": {
+      "name": "shared_host_auth_overrides",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "shared_host_auth_overrides_host_user_protocol_unique": {
+          "name": "shared_host_auth_overrides_host_user_protocol_unique",
+          "columns": [
+            "host_id",
+            "user_id",
+            "protocol"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "shared_host_auth_overrides_host_id_ssh_data_id_fk": {
+          "name": "shared_host_auth_overrides_host_id_ssh_data_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_user_id_users_id_fk": {
+          "name": "shared_host_auth_overrides_user_id_users_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "shared_host_secrets": {
+      "name": "shared_host_secrets",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_access_id": {
+          "name": "host_access_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "source_type": {
+          "name": "source_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'credential'"
+        },
+        "original_credential_id": {
+          "name": "original_credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_auth_type": {
+          "name": "encrypted_auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text(16384)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_type": {
+          "name": "encrypted_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_domain": {
+          "name": "encrypted_domain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_fields": {
+          "name": "encrypted_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_shared_host_secrets_scope": {
+          "name": "idx_shared_host_secrets_scope",
+          "columns": [
+            "host_access_id",
+            "target_user_id",
+            "protocol"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "shared_host_secrets_host_access_id_host_access_id_fk": {
+          "name": "shared_host_secrets_host_access_id_host_access_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "host_access",
+          "columnsFrom": [
+            "host_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_target_user_id_users_id_fk": {
+          "name": "shared_host_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_original_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_secrets_original_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "original_credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ssh_credential_usage": {
+      "name": "ssh_credential_usage",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "used_at": {
+          "name": "used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credential_usage_credential": {
+          "name": "idx_ssh_credential_usage_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_credential_usage_user": {
+          "name": "idx_ssh_credential_usage_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_credential_usage_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_credential_usage_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_host_id_ssh_data_id_fk": {
+          "name": "ssh_credential_usage_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_user_id_users_id_fk": {
+          "name": "ssh_credential_usage_user_id_users_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ssh_credentials": {
+      "name": "ssh_credentials",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text(16384)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "private_key": {
+          "name": "private_key",
+          "type": "text(16384)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text(4096)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "detected_key_type": {
+          "name": "detected_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text(8192)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "usage_count": {
+          "name": "usage_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "last_used": {
+          "name": "last_used",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "ssh_credentials_sync_id_unique": {
+          "name": "ssh_credentials_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_ssh_credentials_user_id": {
+          "name": "idx_ssh_credentials_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_credentials_user_id_users_id_fk": {
+          "name": "ssh_credentials_user_id_users_id_fk",
+          "tableFrom": "ssh_credentials",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ssh_folders": {
+      "name": "ssh_folders",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "color": {
+          "name": "color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "icon": {
+          "name": "icon",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "ssh_folders_sync_id_unique": {
+          "name": "ssh_folders_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_ssh_folders_user_id": {
+          "name": "idx_ssh_folders_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_folders_user_id_users_id_fk": {
+          "name": "ssh_folders_user_id_users_id_fk",
+          "tableFrom": "ssh_folders",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "sync_conflicts": {
+      "name": "sync_conflicts",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "local_row": {
+          "name": "local_row",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_revision": {
+          "name": "server_revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sync_conflicts_user": {
+          "name": "idx_sync_conflicts_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sync_conflicts_user_id_users_id_fk": {
+          "name": "sync_conflicts_user_id_users_id_fk",
+          "tableFrom": "sync_conflicts",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "sync_link": {
+      "name": "sync_link",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_url": {
+          "name": "server_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_name": {
+          "name": "server_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "server_version": {
+          "name": "server_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "session_token": {
+          "name": "session_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "custom_headers": {
+          "name": "custom_headers",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "basic_auth": {
+          "name": "basic_auth",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "allow_invalid_certificate": {
+          "name": "allow_invalid_certificate",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "remote_user_id": {
+          "name": "remote_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "remote_username": {
+          "name": "remote_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "account": {
+          "name": "account",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "known_types": {
+          "name": "known_types",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cursor": {
+          "name": "cursor",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'idle'"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "linked_at": {
+          "name": "linked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "last_sync_at": {
+          "name": "last_sync_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "sync_link_user_id_users_id_fk": {
+          "name": "sync_link_user_id_users_id_fk",
+          "tableFrom": "sync_link",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "sync_records": {
+      "name": "sync_records",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "revision": {
+          "name": "revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "seq": {
+          "name": "seq",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "hash": {
+          "name": "hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "deleted": {
+          "name": "deleted",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "error": {
+          "name": "error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "error_hash": {
+          "name": "error_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sync_records_user_entity_sync": {
+          "name": "idx_sync_records_user_entity_sync",
+          "columns": [
+            "user_id",
+            "entity_type",
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_sync_records_user_seq": {
+          "name": "idx_sync_records_user_seq",
+          "columns": [
+            "user_id",
+            "seq"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sync_records_user_id_users_id_fk": {
+          "name": "sync_records_user_id_users_id_fk",
+          "tableFrom": "sync_records",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "trusted_devices": {
+      "name": "trusted_devices",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_fingerprint": {
+          "name": "device_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_trusted_devices_user_id": {
+          "name": "idx_trusted_devices_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "trusted_devices_user_id_users_id_fk": {
+          "name": "trusted_devices_user_id_users_id_fk",
+          "tableFrom": "trusted_devices",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ui_preferences": {
+      "name": "ui_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "ui_preferences_user_id_users_id_fk": {
+          "name": "ui_preferences_user_id_users_id_fk",
+          "tableFrom": "ui_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_external_identities": {
+      "name": "user_external_identities",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "provider_id": {
+          "name": "provider_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "subject": {
+          "name": "subject",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_external_identities_provider_subject": {
+          "name": "idx_user_external_identities_provider_subject",
+          "columns": [
+            "provider_id",
+            "subject"
+          ],
+          "isUnique": true
+        },
+        "idx_user_external_identities_user": {
+          "name": "idx_user_external_identities_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_external_identities_user_id_users_id_fk": {
+          "name": "user_external_identities_user_id_users_id_fk",
+          "tableFrom": "user_external_identities",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_open_tabs": {
+      "name": "user_open_tabs",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tab_type": {
+          "name": "tab_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "label": {
+          "name": "label",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tab_order": {
+          "name": "tab_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "backend_session_id": {
+          "name": "backend_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_open_tabs_user_id": {
+          "name": "idx_user_open_tabs_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_open_tabs_user_id_users_id_fk": {
+          "name": "user_open_tabs_user_id_users_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_open_tabs_host_id_ssh_data_id_fk": {
+          "name": "user_open_tabs_host_id_ssh_data_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_preferences": {
+      "name": "user_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "reopen_tabs_on_login": {
+          "name": "reopen_tabs_on_login",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "theme": {
+          "name": "theme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "font_size": {
+          "name": "font_size",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "accent_color": {
+          "name": "accent_color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "language": {
+          "name": "language",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "storage_mode": {
+          "name": "storage_mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "command_palette_enabled": {
+          "name": "command_palette_enabled",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "show_host_tags": {
+          "name": "show_host_tags",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_tray_on_click": {
+          "name": "host_tray_on_click",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin_app_rail": {
+          "name": "pin_app_rail",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "expand_app_rail_on_hover": {
+          "name": "expand_app_rail_on_hover",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "show_pin_app_rail_button": {
+          "name": "show_pin_app_rail_button",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folders_collapsed": {
+          "name": "folders_collapsed",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "disable_update_check": {
+          "name": "disable_update_check",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "confirm_tab_close": {
+          "name": "confirm_tab_close",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "hidden_rail_tabs": {
+          "name": "hidden_rail_tabs",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "compact_host_view": {
+          "name": "compact_host_view",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_color_scheme": {
+          "name": "status_color_scheme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "custom_keybindings": {
+          "name": "custom_keybindings",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "user_preferences_user_id_users_id_fk": {
+          "name": "user_preferences_user_id_users_id_fk",
+          "tableFrom": "user_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_roles": {
+      "name": "user_roles",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_roles_user_role": {
+          "name": "idx_user_roles_user_role",
+          "columns": [
+            "user_id",
+            "role_id"
+          ],
+          "isUnique": true
+        },
+        "idx_user_roles_role_id": {
+          "name": "idx_user_roles_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_roles_user_id_users_id_fk": {
+          "name": "user_roles_user_id_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_role_id_roles_id_fk": {
+          "name": "user_roles_role_id_roles_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_granted_by_users_id_fk": {
+          "name": "user_roles_granted_by_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_second_factors": {
+      "name": "user_second_factors",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "factor_id": {
+          "name": "factor_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "enrolled_at": {
+          "name": "enrolled_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_second_factors_user_factor": {
+          "name": "idx_user_second_factors_user_factor",
+          "columns": [
+            "user_id",
+            "plugin_id",
+            "factor_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "user_second_factors_user_id_users_id_fk": {
+          "name": "user_second_factors_user_id_users_id_fk",
+          "tableFrom": "user_second_factors",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "users": {
+      "name": "users",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "password_hash": {
+          "name": "password_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "is_admin": {
+          "name": "is_admin",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "registered_at": {
+          "name": "registered_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "donation_modal_dismissed": {
+          "name": "donation_modal_dismissed",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    }
+  },
+  "views": {},
+  "enums": {},
+  "_meta": {
+    "schemas": {},
+    "tables": {},
+    "columns": {}
+  },
+  "internal": {
+    "indexes": {}
+  }
+}
\ No newline at end of file
diff --git a/drizzle/sqlite/meta/0064_snapshot.json b/drizzle/sqlite/meta/0064_snapshot.json
new file mode 100644
index 000000000..8f24c5f4d
--- /dev/null
+++ b/drizzle/sqlite/meta/0064_snapshot.json
@@ -0,0 +1,4474 @@
+{
+  "version": "6",
+  "dialect": "sqlite",
+  "id": "64d849e8-d93d-4bf3-a385-4703f6e80a11",
+  "prevId": "f30d235a-ff96-490c-a84a-4787012caa8a",
+  "tables": {
+    "api_keys": {
+      "name": "api_keys",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "token_hash": {
+          "name": "token_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "token_prefix": {
+          "name": "token_prefix",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "is_active": {
+          "name": "is_active",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        }
+      },
+      "indexes": {
+        "idx_api_keys_user_id": {
+          "name": "idx_api_keys_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "api_keys_user_id_users_id_fk": {
+          "name": "api_keys_user_id_users_id_fk",
+          "tableFrom": "api_keys",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "audit_logs": {
+      "name": "audit_logs",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "action": {
+          "name": "action",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "resource_type": {
+          "name": "resource_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "resource_id": {
+          "name": "resource_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "resource_name": {
+          "name": "resource_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "details": {
+          "name": "details",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ip_address": {
+          "name": "ip_address",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "user_agent": {
+          "name": "user_agent",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "success": {
+          "name": "success",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_audit_logs_timestamp": {
+          "name": "idx_audit_logs_timestamp",
+          "columns": [
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_user_ts": {
+          "name": "idx_audit_logs_user_ts",
+          "columns": [
+            "user_id",
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_action_ts": {
+          "name": "idx_audit_logs_action_ts",
+          "columns": [
+            "action",
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_resource_ts": {
+          "name": "idx_audit_logs_resource_ts",
+          "columns": [
+            "resource_type",
+            "timestamp"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "audit_logs_user_id_users_id_fk": {
+          "name": "audit_logs_user_id_users_id_fk",
+          "tableFrom": "audit_logs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "credential_access": {
+      "name": "credential_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'use'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_credential_access_user_id": {
+          "name": "idx_credential_access_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_credential_access_role_id": {
+          "name": "idx_credential_access_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        },
+        "idx_credential_access_credential_id": {
+          "name": "idx_credential_access_credential_id",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "credential_access_credential_id_ssh_credentials_id_fk": {
+          "name": "credential_access_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_user_id_users_id_fk": {
+          "name": "credential_access_user_id_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_role_id_roles_id_fk": {
+          "name": "credential_access_role_id_roles_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_granted_by_users_id_fk": {
+          "name": "credential_access_granted_by_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "credential_sidebar_preferences": {
+      "name": "credential_sidebar_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "credential_sidebar_preferences_user_id_users_id_fk": {
+          "name": "credential_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "credential_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "folder_access": {
+      "name": "folder_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "owner_user_id": {
+          "name": "owner_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'connect'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_folder_access_owner_folder": {
+          "name": "idx_folder_access_owner_folder",
+          "columns": [
+            "owner_user_id",
+            "folder"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "folder_access_owner_user_id_users_id_fk": {
+          "name": "folder_access_owner_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "owner_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_user_id_users_id_fk": {
+          "name": "folder_access_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_role_id_roles_id_fk": {
+          "name": "folder_access_role_id_roles_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_granted_by_users_id_fk": {
+          "name": "folder_access_granted_by_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "host_access": {
+      "name": "host_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'connect'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "last_accessed_at": {
+          "name": "last_accessed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "access_count": {
+          "name": "access_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        }
+      },
+      "indexes": {
+        "idx_host_access_user_id": {
+          "name": "idx_host_access_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_role_id": {
+          "name": "idx_host_access_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_host_id": {
+          "name": "idx_host_access_host_id",
+          "columns": [
+            "host_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_expires_at": {
+          "name": "idx_host_access_expires_at",
+          "columns": [
+            "expires_at"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_access_host_id_ssh_data_id_fk": {
+          "name": "host_access_host_id_ssh_data_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_user_id_users_id_fk": {
+          "name": "host_access_user_id_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_role_id_roles_id_fk": {
+          "name": "host_access_role_id_roles_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_granted_by_users_id_fk": {
+          "name": "host_access_granted_by_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "host_defaults": {
+      "name": "host_defaults",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "level": {
+          "name": "level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope_key": {
+          "name": "scope_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folder_id": {
+          "name": "folder_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "namespace": {
+          "name": "namespace",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_by": {
+          "name": "updated_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_host_defaults_scope_key": {
+          "name": "idx_host_defaults_scope_key",
+          "columns": [
+            "scope_key",
+            "namespace",
+            "key"
+          ],
+          "isUnique": true
+        },
+        "idx_host_defaults_user": {
+          "name": "idx_host_defaults_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_defaults_folder": {
+          "name": "idx_host_defaults_folder",
+          "columns": [
+            "folder_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_defaults_user_id_users_id_fk": {
+          "name": "host_defaults_user_id_users_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_defaults_folder_id_ssh_folders_id_fk": {
+          "name": "host_defaults_folder_id_ssh_folders_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "ssh_folders",
+          "columnsFrom": [
+            "folder_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "host_protocol_auth": {
+      "name": "host_protocol_auth",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'direct'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "fields": {
+          "name": "fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "secret_fields": {
+          "name": "secret_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_host_protocol_auth_host_protocol": {
+          "name": "idx_host_protocol_auth_host_protocol",
+          "columns": [
+            "host_id",
+            "protocol"
+          ],
+          "isUnique": true
+        },
+        "idx_host_protocol_auth_user": {
+          "name": "idx_host_protocol_auth_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_protocol_auth_credential": {
+          "name": "idx_host_protocol_auth_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_protocol_auth_host_id_ssh_data_id_fk": {
+          "name": "host_protocol_auth_host_id_ssh_data_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_user_id_users_id_fk": {
+          "name": "host_protocol_auth_user_id_users_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_credential_id_ssh_credentials_id_fk": {
+          "name": "host_protocol_auth_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "host_sidebar_preferences": {
+      "name": "host_sidebar_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "host_sidebar_preferences_user_id_users_id_fk": {
+          "name": "host_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "host_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ssh_data": {
+      "name": "ssh_data",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "connection_type": {
+          "name": "connection_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ip": {
+          "name": "ip",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "port": {
+          "name": "port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "parent_host_id": {
+          "name": "parent_host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "share_ssh_auth": {
+          "name": "share_ssh_auth",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "force_keyboard_interactive": {
+          "name": "force_keyboard_interactive",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text(8192)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sudo_password": {
+          "name": "sudo_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "override_credential_username": {
+          "name": "override_credential_username",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "jump_hosts": {
+          "name": "jump_hosts",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_check_enabled": {
+          "name": "status_check_enabled",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "status_check_interval": {
+          "name": "status_check_interval",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ssh_options": {
+          "name": "ssh_options",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "notes": {
+          "name": "notes",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "enable_ssh": {
+          "name": "enable_ssh",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "ssh_port": {
+          "name": "ssh_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": 22
+        },
+        "use_socks5": {
+          "name": "use_socks5",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_host": {
+          "name": "socks5_host",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_port": {
+          "name": "socks5_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_username": {
+          "name": "socks5_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_password": {
+          "name": "socks5_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_proxy_chain": {
+          "name": "socks5_proxy_chain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "connection_origin": {
+          "name": "connection_origin",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "port_knock_sequence": {
+          "name": "port_knock_sequence",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_fingerprint": {
+          "name": "host_key_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_type": {
+          "name": "host_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_algorithm": {
+          "name": "host_key_algorithm",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": "'sha256'"
+        },
+        "host_key_first_seen": {
+          "name": "host_key_first_seen",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_last_verified": {
+          "name": "host_key_last_verified",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_changed_count": {
+          "name": "host_key_changed_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": 0
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "default_overrides": {
+          "name": "default_overrides",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "ssh_data_sync_id_unique": {
+          "name": "ssh_data_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_ssh_data_user_id": {
+          "name": "idx_ssh_data_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_data_parent_host": {
+          "name": "idx_ssh_data_parent_host",
+          "columns": [
+            "parent_host_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_data_credential": {
+          "name": "idx_ssh_data_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_data_user_id_users_id_fk": {
+          "name": "ssh_data_user_id_users_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_data_parent_host_id_ssh_data_id_fk": {
+          "name": "ssh_data_parent_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "parent_host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "ssh_data_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_data_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_install_counts": {
+      "name": "plugin_install_counts",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "count": {
+          "name": "count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'aggregate-telemetry'"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_install_counts_plugin_registry": {
+          "name": "idx_plugin_install_counts_plugin_registry",
+          "columns": [
+            "plugin_id",
+            "registry_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_migrations": {
+      "name": "plugin_migrations",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "migration_id": {
+          "name": "migration_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "checksum": {
+          "name": "checksum",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_migrations_plugin_migration": {
+          "name": "idx_plugin_migrations_plugin_migration",
+          "columns": [
+            "plugin_id",
+            "migration_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_migrations_plugin_id_plugins_id_fk": {
+          "name": "plugin_migrations_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_migrations",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_permission_grants": {
+      "name": "plugin_permission_grants",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "capability": {
+          "name": "capability",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'admin'"
+        }
+      },
+      "indexes": {
+        "idx_plugin_permission_grants_plugin_capability": {
+          "name": "idx_plugin_permission_grants_plugin_capability",
+          "columns": [
+            "plugin_id",
+            "capability"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_permission_grants_plugin_id_plugins_id_fk": {
+          "name": "plugin_permission_grants_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "plugin_permission_grants_granted_by_users_id_fk": {
+          "name": "plugin_permission_grants_granted_by_users_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_registries": {
+      "name": "plugin_registries",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "url": {
+          "name": "url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "kind": {
+          "name": "kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'community'"
+        },
+        "enabled": {
+          "name": "enabled",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "signing_key": {
+          "name": "signing_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_checked_at": {
+          "name": "last_checked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_index_hash": {
+          "name": "last_index_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_settings": {
+      "name": "plugin_settings",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope_id": {
+          "name": "scope_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted": {
+          "name": "encrypted",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_settings_scope_key": {
+          "name": "idx_plugin_settings_scope_key",
+          "columns": [
+            "plugin_id",
+            "scope",
+            "scope_id",
+            "key"
+          ],
+          "isUnique": true
+        },
+        "idx_plugin_settings_plugin_scope": {
+          "name": "idx_plugin_settings_plugin_scope",
+          "columns": [
+            "plugin_id",
+            "scope"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "plugin_settings_plugin_id_plugins_id_fk": {
+          "name": "plugin_settings_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_settings",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_storage": {
+      "name": "plugin_storage",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_storage_plugin_key": {
+          "name": "idx_plugin_storage_plugin_key",
+          "columns": [
+            "plugin_id",
+            "key"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_storage_plugin_id_plugins_id_fk": {
+          "name": "plugin_storage_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_storage",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugins": {
+      "name": "plugins",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "version": {
+          "name": "version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tier": {
+          "name": "tier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'available'"
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'community'"
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "state": {
+          "name": "state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'disabled'"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "installed_at": {
+          "name": "installed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "auto_update": {
+          "name": "auto_update",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "pinned_version": {
+          "name": "pinned_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "channel": {
+          "name": "channel",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'stable'"
+        },
+        "manifest_json": {
+          "name": "manifest_json",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {
+        "idx_plugins_registry_id": {
+          "name": "idx_plugins_registry_id",
+          "columns": [
+            "registry_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "rbac_applied_defaults": {
+      "name": "rbac_applied_defaults",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "role_name": {
+          "name": "role_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission": {
+          "name": "permission",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_rbac_applied_defaults_role_permission": {
+          "name": "idx_rbac_applied_defaults_role_permission",
+          "columns": [
+            "role_name",
+            "permission"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "rbac_known_permissions": {
+      "name": "rbac_known_permissions",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "permission": {
+          "name": "permission",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "first_seen_at": {
+          "name": "first_seen_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_rbac_known_permissions_permission": {
+          "name": "idx_rbac_known_permissions_permission",
+          "columns": [
+            "permission"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "recent_activity": {
+      "name": "recent_activity",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "type": {
+          "name": "type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_name": {
+          "name": "host_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_recent_activity_user_ts": {
+          "name": "idx_recent_activity_user_ts",
+          "columns": [
+            "user_id",
+            "timestamp"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "recent_activity_user_id_users_id_fk": {
+          "name": "recent_activity_user_id_users_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "recent_activity_host_id_ssh_data_id_fk": {
+          "name": "recent_activity_host_id_ssh_data_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "roles": {
+      "name": "roles",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "display_name": {
+          "name": "display_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "is_system": {
+          "name": "is_system",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "permissions": {
+          "name": "permissions",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "roles_name_unique": {
+          "name": "roles_name_unique",
+          "columns": [
+            "name"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "sessions": {
+      "name": "sessions",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "jwt_token": {
+          "name": "jwt_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "external_session_ref": {
+          "name": "external_session_ref",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "last_active_at": {
+          "name": "last_active_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sessions_user_id": {
+          "name": "idx_sessions_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_sessions_expires_at": {
+          "name": "idx_sessions_expires_at",
+          "columns": [
+            "expires_at"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sessions_user_id_users_id_fk": {
+          "name": "sessions_user_id_users_id_fk",
+          "tableFrom": "sessions",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "settings": {
+      "name": "settings",
+      "columns": {
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "shared_credential_secrets": {
+      "name": "shared_credential_secrets",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_access_id": {
+          "name": "credential_access_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'password'"
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text(16384)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text(4096)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text(8192)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_shared_credential_secrets_scope": {
+          "name": "idx_shared_credential_secrets_scope",
+          "columns": [
+            "credential_access_id",
+            "target_user_id"
+          ],
+          "isUnique": true
+        },
+        "idx_shared_credential_secrets_target": {
+          "name": "idx_shared_credential_secrets_target",
+          "columns": [
+            "target_user_id",
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "shared_credential_secrets_target_user_id_users_id_fk": {
+          "name": "shared_credential_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_credential_secrets_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_credential_secrets_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_cred_secrets_access_id_fk": {
+          "name": "shared_cred_secrets_access_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "credential_access",
+          "columnsFrom": [
+            "credential_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "shared_host_auth_overrides": {
+      "name": "shared_host_auth_overrides",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "shared_host_auth_overrides_host_user_protocol_unique": {
+          "name": "shared_host_auth_overrides_host_user_protocol_unique",
+          "columns": [
+            "host_id",
+            "user_id",
+            "protocol"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "shared_host_auth_overrides_host_id_ssh_data_id_fk": {
+          "name": "shared_host_auth_overrides_host_id_ssh_data_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_user_id_users_id_fk": {
+          "name": "shared_host_auth_overrides_user_id_users_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "shared_host_secrets": {
+      "name": "shared_host_secrets",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_access_id": {
+          "name": "host_access_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "source_type": {
+          "name": "source_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'credential'"
+        },
+        "original_credential_id": {
+          "name": "original_credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_auth_type": {
+          "name": "encrypted_auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text(16384)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_type": {
+          "name": "encrypted_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_domain": {
+          "name": "encrypted_domain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_fields": {
+          "name": "encrypted_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_shared_host_secrets_scope": {
+          "name": "idx_shared_host_secrets_scope",
+          "columns": [
+            "host_access_id",
+            "target_user_id",
+            "protocol"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "shared_host_secrets_host_access_id_host_access_id_fk": {
+          "name": "shared_host_secrets_host_access_id_host_access_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "host_access",
+          "columnsFrom": [
+            "host_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_target_user_id_users_id_fk": {
+          "name": "shared_host_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_original_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_secrets_original_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "original_credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ssh_credential_usage": {
+      "name": "ssh_credential_usage",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "used_at": {
+          "name": "used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credential_usage_credential": {
+          "name": "idx_ssh_credential_usage_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_credential_usage_user": {
+          "name": "idx_ssh_credential_usage_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_credential_usage_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_credential_usage_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_host_id_ssh_data_id_fk": {
+          "name": "ssh_credential_usage_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_user_id_users_id_fk": {
+          "name": "ssh_credential_usage_user_id_users_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ssh_credentials": {
+      "name": "ssh_credentials",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text(16384)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "private_key": {
+          "name": "private_key",
+          "type": "text(16384)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text(4096)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "detected_key_type": {
+          "name": "detected_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text(8192)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "usage_count": {
+          "name": "usage_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "last_used": {
+          "name": "last_used",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "ssh_credentials_sync_id_unique": {
+          "name": "ssh_credentials_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_ssh_credentials_user_id": {
+          "name": "idx_ssh_credentials_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_credentials_user_id_users_id_fk": {
+          "name": "ssh_credentials_user_id_users_id_fk",
+          "tableFrom": "ssh_credentials",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ssh_folders": {
+      "name": "ssh_folders",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "color": {
+          "name": "color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "icon": {
+          "name": "icon",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "ssh_folders_sync_id_unique": {
+          "name": "ssh_folders_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_ssh_folders_user_id": {
+          "name": "idx_ssh_folders_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_folders_user_id_users_id_fk": {
+          "name": "ssh_folders_user_id_users_id_fk",
+          "tableFrom": "ssh_folders",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "sync_conflicts": {
+      "name": "sync_conflicts",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "local_row": {
+          "name": "local_row",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_revision": {
+          "name": "server_revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sync_conflicts_user": {
+          "name": "idx_sync_conflicts_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sync_conflicts_user_id_users_id_fk": {
+          "name": "sync_conflicts_user_id_users_id_fk",
+          "tableFrom": "sync_conflicts",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "sync_link": {
+      "name": "sync_link",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_url": {
+          "name": "server_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_name": {
+          "name": "server_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "server_version": {
+          "name": "server_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "session_token": {
+          "name": "session_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "custom_headers": {
+          "name": "custom_headers",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "basic_auth": {
+          "name": "basic_auth",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "allow_invalid_certificate": {
+          "name": "allow_invalid_certificate",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "remote_user_id": {
+          "name": "remote_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "remote_username": {
+          "name": "remote_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "account": {
+          "name": "account",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "known_types": {
+          "name": "known_types",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cursor": {
+          "name": "cursor",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'idle'"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "linked_at": {
+          "name": "linked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "last_sync_at": {
+          "name": "last_sync_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "sync_link_user_id_users_id_fk": {
+          "name": "sync_link_user_id_users_id_fk",
+          "tableFrom": "sync_link",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "sync_records": {
+      "name": "sync_records",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "revision": {
+          "name": "revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "seq": {
+          "name": "seq",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "hash": {
+          "name": "hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "deleted": {
+          "name": "deleted",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "error": {
+          "name": "error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "error_hash": {
+          "name": "error_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sync_records_user_entity_sync": {
+          "name": "idx_sync_records_user_entity_sync",
+          "columns": [
+            "user_id",
+            "entity_type",
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_sync_records_user_seq": {
+          "name": "idx_sync_records_user_seq",
+          "columns": [
+            "user_id",
+            "seq"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sync_records_user_id_users_id_fk": {
+          "name": "sync_records_user_id_users_id_fk",
+          "tableFrom": "sync_records",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "trusted_devices": {
+      "name": "trusted_devices",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_fingerprint": {
+          "name": "device_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_trusted_devices_user_id": {
+          "name": "idx_trusted_devices_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "trusted_devices_user_id_users_id_fk": {
+          "name": "trusted_devices_user_id_users_id_fk",
+          "tableFrom": "trusted_devices",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ui_preferences": {
+      "name": "ui_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "ui_preferences_user_id_users_id_fk": {
+          "name": "ui_preferences_user_id_users_id_fk",
+          "tableFrom": "ui_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_external_identities": {
+      "name": "user_external_identities",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "provider_id": {
+          "name": "provider_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "subject": {
+          "name": "subject",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_external_identities_provider_subject": {
+          "name": "idx_user_external_identities_provider_subject",
+          "columns": [
+            "provider_id",
+            "subject"
+          ],
+          "isUnique": true
+        },
+        "idx_user_external_identities_user": {
+          "name": "idx_user_external_identities_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_external_identities_user_id_users_id_fk": {
+          "name": "user_external_identities_user_id_users_id_fk",
+          "tableFrom": "user_external_identities",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_open_tabs": {
+      "name": "user_open_tabs",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tab_type": {
+          "name": "tab_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "label": {
+          "name": "label",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tab_order": {
+          "name": "tab_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "backend_session_id": {
+          "name": "backend_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_open_tabs_user_id": {
+          "name": "idx_user_open_tabs_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_open_tabs_user_id_users_id_fk": {
+          "name": "user_open_tabs_user_id_users_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_open_tabs_host_id_ssh_data_id_fk": {
+          "name": "user_open_tabs_host_id_ssh_data_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_preferences": {
+      "name": "user_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "reopen_tabs_on_login": {
+          "name": "reopen_tabs_on_login",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "theme": {
+          "name": "theme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "font_size": {
+          "name": "font_size",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "accent_color": {
+          "name": "accent_color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "language": {
+          "name": "language",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "storage_mode": {
+          "name": "storage_mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "command_palette_enabled": {
+          "name": "command_palette_enabled",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "show_host_tags": {
+          "name": "show_host_tags",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_tray_on_click": {
+          "name": "host_tray_on_click",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin_app_rail": {
+          "name": "pin_app_rail",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "expand_app_rail_on_hover": {
+          "name": "expand_app_rail_on_hover",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "show_pin_app_rail_button": {
+          "name": "show_pin_app_rail_button",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folders_collapsed": {
+          "name": "folders_collapsed",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "disable_update_check": {
+          "name": "disable_update_check",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "confirm_tab_close": {
+          "name": "confirm_tab_close",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "hidden_rail_tabs": {
+          "name": "hidden_rail_tabs",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "compact_host_view": {
+          "name": "compact_host_view",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_color_scheme": {
+          "name": "status_color_scheme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "custom_keybindings": {
+          "name": "custom_keybindings",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "user_preferences_user_id_users_id_fk": {
+          "name": "user_preferences_user_id_users_id_fk",
+          "tableFrom": "user_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_roles": {
+      "name": "user_roles",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_roles_user_role": {
+          "name": "idx_user_roles_user_role",
+          "columns": [
+            "user_id",
+            "role_id"
+          ],
+          "isUnique": true
+        },
+        "idx_user_roles_role_id": {
+          "name": "idx_user_roles_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_roles_user_id_users_id_fk": {
+          "name": "user_roles_user_id_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_role_id_roles_id_fk": {
+          "name": "user_roles_role_id_roles_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_granted_by_users_id_fk": {
+          "name": "user_roles_granted_by_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_second_factors": {
+      "name": "user_second_factors",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "factor_id": {
+          "name": "factor_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "enrolled_at": {
+          "name": "enrolled_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_second_factors_user_factor": {
+          "name": "idx_user_second_factors_user_factor",
+          "columns": [
+            "user_id",
+            "plugin_id",
+            "factor_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "user_second_factors_user_id_users_id_fk": {
+          "name": "user_second_factors_user_id_users_id_fk",
+          "tableFrom": "user_second_factors",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "users": {
+      "name": "users",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "password_hash": {
+          "name": "password_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "is_admin": {
+          "name": "is_admin",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "registered_at": {
+          "name": "registered_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "donation_modal_dismissed": {
+          "name": "donation_modal_dismissed",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    }
+  },
+  "views": {},
+  "enums": {},
+  "_meta": {
+    "schemas": {},
+    "tables": {},
+    "columns": {}
+  },
+  "internal": {
+    "indexes": {}
+  }
+}
\ No newline at end of file
diff --git a/drizzle/sqlite/meta/0065_snapshot.json b/drizzle/sqlite/meta/0065_snapshot.json
new file mode 100644
index 000000000..70e86bba5
--- /dev/null
+++ b/drizzle/sqlite/meta/0065_snapshot.json
@@ -0,0 +1,4466 @@
+{
+  "version": "6",
+  "dialect": "sqlite",
+  "id": "3bc2344b-9f1a-4b8f-bdb3-8d62b5654ee9",
+  "prevId": "64d849e8-d93d-4bf3-a385-4703f6e80a11",
+  "tables": {
+    "api_keys": {
+      "name": "api_keys",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "token_hash": {
+          "name": "token_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "token_prefix": {
+          "name": "token_prefix",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "is_active": {
+          "name": "is_active",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        }
+      },
+      "indexes": {
+        "idx_api_keys_user_id": {
+          "name": "idx_api_keys_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "api_keys_user_id_users_id_fk": {
+          "name": "api_keys_user_id_users_id_fk",
+          "tableFrom": "api_keys",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "audit_logs": {
+      "name": "audit_logs",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "action": {
+          "name": "action",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "resource_type": {
+          "name": "resource_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "resource_id": {
+          "name": "resource_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "resource_name": {
+          "name": "resource_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "details": {
+          "name": "details",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ip_address": {
+          "name": "ip_address",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "user_agent": {
+          "name": "user_agent",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "success": {
+          "name": "success",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_audit_logs_timestamp": {
+          "name": "idx_audit_logs_timestamp",
+          "columns": [
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_user_ts": {
+          "name": "idx_audit_logs_user_ts",
+          "columns": [
+            "user_id",
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_action_ts": {
+          "name": "idx_audit_logs_action_ts",
+          "columns": [
+            "action",
+            "timestamp"
+          ],
+          "isUnique": false
+        },
+        "idx_audit_logs_resource_ts": {
+          "name": "idx_audit_logs_resource_ts",
+          "columns": [
+            "resource_type",
+            "timestamp"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "audit_logs_user_id_users_id_fk": {
+          "name": "audit_logs_user_id_users_id_fk",
+          "tableFrom": "audit_logs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "credential_access": {
+      "name": "credential_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'use'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_credential_access_user_id": {
+          "name": "idx_credential_access_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_credential_access_role_id": {
+          "name": "idx_credential_access_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        },
+        "idx_credential_access_credential_id": {
+          "name": "idx_credential_access_credential_id",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "credential_access_credential_id_ssh_credentials_id_fk": {
+          "name": "credential_access_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_user_id_users_id_fk": {
+          "name": "credential_access_user_id_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_role_id_roles_id_fk": {
+          "name": "credential_access_role_id_roles_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "credential_access_granted_by_users_id_fk": {
+          "name": "credential_access_granted_by_users_id_fk",
+          "tableFrom": "credential_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "credential_sidebar_preferences": {
+      "name": "credential_sidebar_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "credential_sidebar_preferences_user_id_users_id_fk": {
+          "name": "credential_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "credential_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "folder_access": {
+      "name": "folder_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "owner_user_id": {
+          "name": "owner_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'connect'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_folder_access_owner_folder": {
+          "name": "idx_folder_access_owner_folder",
+          "columns": [
+            "owner_user_id",
+            "folder"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "folder_access_owner_user_id_users_id_fk": {
+          "name": "folder_access_owner_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "owner_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_user_id_users_id_fk": {
+          "name": "folder_access_user_id_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_role_id_roles_id_fk": {
+          "name": "folder_access_role_id_roles_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "folder_access_granted_by_users_id_fk": {
+          "name": "folder_access_granted_by_users_id_fk",
+          "tableFrom": "folder_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "host_access": {
+      "name": "host_access",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission_level": {
+          "name": "permission_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'connect'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "last_accessed_at": {
+          "name": "last_accessed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "access_count": {
+          "name": "access_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        }
+      },
+      "indexes": {
+        "idx_host_access_user_id": {
+          "name": "idx_host_access_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_role_id": {
+          "name": "idx_host_access_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_host_id": {
+          "name": "idx_host_access_host_id",
+          "columns": [
+            "host_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_access_expires_at": {
+          "name": "idx_host_access_expires_at",
+          "columns": [
+            "expires_at"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_access_host_id_ssh_data_id_fk": {
+          "name": "host_access_host_id_ssh_data_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_user_id_users_id_fk": {
+          "name": "host_access_user_id_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_role_id_roles_id_fk": {
+          "name": "host_access_role_id_roles_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_access_granted_by_users_id_fk": {
+          "name": "host_access_granted_by_users_id_fk",
+          "tableFrom": "host_access",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "host_defaults": {
+      "name": "host_defaults",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "level": {
+          "name": "level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope_key": {
+          "name": "scope_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folder_id": {
+          "name": "folder_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "namespace": {
+          "name": "namespace",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_by": {
+          "name": "updated_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_host_defaults_scope_key": {
+          "name": "idx_host_defaults_scope_key",
+          "columns": [
+            "scope_key",
+            "namespace",
+            "key"
+          ],
+          "isUnique": true
+        },
+        "idx_host_defaults_user": {
+          "name": "idx_host_defaults_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_defaults_folder": {
+          "name": "idx_host_defaults_folder",
+          "columns": [
+            "folder_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_defaults_user_id_users_id_fk": {
+          "name": "host_defaults_user_id_users_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_defaults_folder_id_ssh_folders_id_fk": {
+          "name": "host_defaults_folder_id_ssh_folders_id_fk",
+          "tableFrom": "host_defaults",
+          "tableTo": "ssh_folders",
+          "columnsFrom": [
+            "folder_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "host_protocol_auth": {
+      "name": "host_protocol_auth",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'direct'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "fields": {
+          "name": "fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "secret_fields": {
+          "name": "secret_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_host_protocol_auth_host_protocol": {
+          "name": "idx_host_protocol_auth_host_protocol",
+          "columns": [
+            "host_id",
+            "protocol"
+          ],
+          "isUnique": true
+        },
+        "idx_host_protocol_auth_user": {
+          "name": "idx_host_protocol_auth_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_host_protocol_auth_credential": {
+          "name": "idx_host_protocol_auth_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "host_protocol_auth_host_id_ssh_data_id_fk": {
+          "name": "host_protocol_auth_host_id_ssh_data_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_user_id_users_id_fk": {
+          "name": "host_protocol_auth_user_id_users_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "host_protocol_auth_credential_id_ssh_credentials_id_fk": {
+          "name": "host_protocol_auth_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "host_protocol_auth",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "host_sidebar_preferences": {
+      "name": "host_sidebar_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "host_sidebar_preferences_user_id_users_id_fk": {
+          "name": "host_sidebar_preferences_user_id_users_id_fk",
+          "tableFrom": "host_sidebar_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ssh_data": {
+      "name": "ssh_data",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "connection_type": {
+          "name": "connection_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ip": {
+          "name": "ip",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "port": {
+          "name": "port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "parent_host_id": {
+          "name": "parent_host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "share_ssh_auth": {
+          "name": "share_ssh_auth",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "force_keyboard_interactive": {
+          "name": "force_keyboard_interactive",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text(8192)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sudo_password": {
+          "name": "sudo_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "override_credential_username": {
+          "name": "override_credential_username",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "jump_hosts": {
+          "name": "jump_hosts",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_check_enabled": {
+          "name": "status_check_enabled",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "status_check_interval": {
+          "name": "status_check_interval",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "ssh_options": {
+          "name": "ssh_options",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "notes": {
+          "name": "notes",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "enable_ssh": {
+          "name": "enable_ssh",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "ssh_port": {
+          "name": "ssh_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": 22
+        },
+        "use_socks5": {
+          "name": "use_socks5",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_host": {
+          "name": "socks5_host",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_port": {
+          "name": "socks5_port",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_username": {
+          "name": "socks5_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_password": {
+          "name": "socks5_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "socks5_proxy_chain": {
+          "name": "socks5_proxy_chain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "connection_origin": {
+          "name": "connection_origin",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "port_knock_sequence": {
+          "name": "port_knock_sequence",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_fingerprint": {
+          "name": "host_key_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_type": {
+          "name": "host_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_algorithm": {
+          "name": "host_key_algorithm",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": "'sha256'"
+        },
+        "host_key_first_seen": {
+          "name": "host_key_first_seen",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_last_verified": {
+          "name": "host_key_last_verified",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_key_changed_count": {
+          "name": "host_key_changed_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false,
+          "default": 0
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "default_overrides": {
+          "name": "default_overrides",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "ssh_data_sync_id_unique": {
+          "name": "ssh_data_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_ssh_data_user_id": {
+          "name": "idx_ssh_data_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_data_parent_host": {
+          "name": "idx_ssh_data_parent_host",
+          "columns": [
+            "parent_host_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_data_credential": {
+          "name": "idx_ssh_data_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_data_user_id_users_id_fk": {
+          "name": "ssh_data_user_id_users_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_data_parent_host_id_ssh_data_id_fk": {
+          "name": "ssh_data_parent_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "parent_host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "ssh_data_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_data_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_data",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_install_counts": {
+      "name": "plugin_install_counts",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "count": {
+          "name": "count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'aggregate-telemetry'"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_install_counts_plugin_registry": {
+          "name": "idx_plugin_install_counts_plugin_registry",
+          "columns": [
+            "plugin_id",
+            "registry_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_migrations": {
+      "name": "plugin_migrations",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "migration_id": {
+          "name": "migration_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "checksum": {
+          "name": "checksum",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_migrations_plugin_migration": {
+          "name": "idx_plugin_migrations_plugin_migration",
+          "columns": [
+            "plugin_id",
+            "migration_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_migrations_plugin_id_plugins_id_fk": {
+          "name": "plugin_migrations_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_migrations",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_permission_grants": {
+      "name": "plugin_permission_grants",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "capability": {
+          "name": "capability",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'admin'"
+        }
+      },
+      "indexes": {
+        "idx_plugin_permission_grants_plugin_capability": {
+          "name": "idx_plugin_permission_grants_plugin_capability",
+          "columns": [
+            "plugin_id",
+            "capability"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_permission_grants_plugin_id_plugins_id_fk": {
+          "name": "plugin_permission_grants_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "plugin_permission_grants_granted_by_users_id_fk": {
+          "name": "plugin_permission_grants_granted_by_users_id_fk",
+          "tableFrom": "plugin_permission_grants",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_registries": {
+      "name": "plugin_registries",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "url": {
+          "name": "url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "kind": {
+          "name": "kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'community'"
+        },
+        "enabled": {
+          "name": "enabled",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": true
+        },
+        "signing_key": {
+          "name": "signing_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_checked_at": {
+          "name": "last_checked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "last_index_hash": {
+          "name": "last_index_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_settings": {
+      "name": "plugin_settings",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "scope_id": {
+          "name": "scope_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted": {
+          "name": "encrypted",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_settings_scope_key": {
+          "name": "idx_plugin_settings_scope_key",
+          "columns": [
+            "plugin_id",
+            "scope",
+            "scope_id",
+            "key"
+          ],
+          "isUnique": true
+        },
+        "idx_plugin_settings_plugin_scope": {
+          "name": "idx_plugin_settings_plugin_scope",
+          "columns": [
+            "plugin_id",
+            "scope"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "plugin_settings_plugin_id_plugins_id_fk": {
+          "name": "plugin_settings_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_settings",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugin_storage": {
+      "name": "plugin_storage",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_plugin_storage_plugin_key": {
+          "name": "idx_plugin_storage_plugin_key",
+          "columns": [
+            "plugin_id",
+            "key"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "plugin_storage_plugin_id_plugins_id_fk": {
+          "name": "plugin_storage_plugin_id_plugins_id_fk",
+          "tableFrom": "plugin_storage",
+          "tableTo": "plugins",
+          "columnsFrom": [
+            "plugin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "plugins": {
+      "name": "plugins",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "version": {
+          "name": "version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tier": {
+          "name": "tier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'available'"
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'community'"
+        },
+        "registry_id": {
+          "name": "registry_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "state": {
+          "name": "state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'disabled'"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "installed_at": {
+          "name": "installed_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "auto_update": {
+          "name": "auto_update",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "pinned_version": {
+          "name": "pinned_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "channel": {
+          "name": "channel",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'stable'"
+        },
+        "manifest_json": {
+          "name": "manifest_json",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {
+        "idx_plugins_registry_id": {
+          "name": "idx_plugins_registry_id",
+          "columns": [
+            "registry_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "rbac_applied_defaults": {
+      "name": "rbac_applied_defaults",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "role_name": {
+          "name": "role_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "permission": {
+          "name": "permission",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_rbac_applied_defaults_role_permission": {
+          "name": "idx_rbac_applied_defaults_role_permission",
+          "columns": [
+            "role_name",
+            "permission"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "rbac_known_permissions": {
+      "name": "rbac_known_permissions",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "permission": {
+          "name": "permission",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "first_seen_at": {
+          "name": "first_seen_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_rbac_known_permissions_permission": {
+          "name": "idx_rbac_known_permissions_permission",
+          "columns": [
+            "permission"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "recent_activity": {
+      "name": "recent_activity",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "type": {
+          "name": "type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_name": {
+          "name": "host_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_recent_activity_user_ts": {
+          "name": "idx_recent_activity_user_ts",
+          "columns": [
+            "user_id",
+            "timestamp"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "recent_activity_user_id_users_id_fk": {
+          "name": "recent_activity_user_id_users_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "recent_activity_host_id_ssh_data_id_fk": {
+          "name": "recent_activity_host_id_ssh_data_id_fk",
+          "tableFrom": "recent_activity",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "roles": {
+      "name": "roles",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "display_name": {
+          "name": "display_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "is_system": {
+          "name": "is_system",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "permissions": {
+          "name": "permissions",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "roles_name_unique": {
+          "name": "roles_name_unique",
+          "columns": [
+            "name"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "sessions": {
+      "name": "sessions",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "jwt_token": {
+          "name": "jwt_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "external_session_ref": {
+          "name": "external_session_ref",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "last_active_at": {
+          "name": "last_active_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sessions_user_id": {
+          "name": "idx_sessions_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        },
+        "idx_sessions_expires_at": {
+          "name": "idx_sessions_expires_at",
+          "columns": [
+            "expires_at"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sessions_user_id_users_id_fk": {
+          "name": "sessions_user_id_users_id_fk",
+          "tableFrom": "sessions",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "settings": {
+      "name": "settings",
+      "columns": {
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "shared_credential_secrets": {
+      "name": "shared_credential_secrets",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_access_id": {
+          "name": "credential_access_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'password'"
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text(16384)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text(4096)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text(8192)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_shared_credential_secrets_scope": {
+          "name": "idx_shared_credential_secrets_scope",
+          "columns": [
+            "credential_access_id",
+            "target_user_id"
+          ],
+          "isUnique": true
+        },
+        "idx_shared_credential_secrets_target": {
+          "name": "idx_shared_credential_secrets_target",
+          "columns": [
+            "target_user_id",
+            "credential_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "shared_credential_secrets_target_user_id_users_id_fk": {
+          "name": "shared_credential_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_credential_secrets_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_credential_secrets_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_cred_secrets_access_id_fk": {
+          "name": "shared_cred_secrets_access_id_fk",
+          "tableFrom": "shared_credential_secrets",
+          "tableTo": "credential_access",
+          "columnsFrom": [
+            "credential_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "shared_host_auth_overrides": {
+      "name": "shared_host_auth_overrides",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "shared_host_auth_overrides_host_user_protocol_unique": {
+          "name": "shared_host_auth_overrides_host_user_protocol_unique",
+          "columns": [
+            "host_id",
+            "user_id",
+            "protocol"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "shared_host_auth_overrides_host_id_ssh_data_id_fk": {
+          "name": "shared_host_auth_overrides_host_id_ssh_data_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_user_id_users_id_fk": {
+          "name": "shared_host_auth_overrides_user_id_users_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_auth_overrides",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "shared_host_secrets": {
+      "name": "shared_host_secrets",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "host_access_id": {
+          "name": "host_access_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "protocol": {
+          "name": "protocol",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'ssh'"
+        },
+        "source_type": {
+          "name": "source_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'credential'"
+        },
+        "original_credential_id": {
+          "name": "original_credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_username": {
+          "name": "encrypted_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_auth_type": {
+          "name": "encrypted_auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_password": {
+          "name": "encrypted_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key": {
+          "name": "encrypted_key",
+          "type": "text(16384)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_password": {
+          "name": "encrypted_key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_key_type": {
+          "name": "encrypted_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_domain": {
+          "name": "encrypted_domain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "encrypted_fields": {
+          "name": "encrypted_fields",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_shared_host_secrets_scope": {
+          "name": "idx_shared_host_secrets_scope",
+          "columns": [
+            "host_access_id",
+            "target_user_id",
+            "protocol"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "shared_host_secrets_host_access_id_host_access_id_fk": {
+          "name": "shared_host_secrets_host_access_id_host_access_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "host_access",
+          "columnsFrom": [
+            "host_access_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_target_user_id_users_id_fk": {
+          "name": "shared_host_secrets_target_user_id_users_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "users",
+          "columnsFrom": [
+            "target_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "shared_host_secrets_original_credential_id_ssh_credentials_id_fk": {
+          "name": "shared_host_secrets_original_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "shared_host_secrets",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "original_credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ssh_credential_usage": {
+      "name": "ssh_credential_usage",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "credential_id": {
+          "name": "credential_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "used_at": {
+          "name": "used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_ssh_credential_usage_credential": {
+          "name": "idx_ssh_credential_usage_credential",
+          "columns": [
+            "credential_id"
+          ],
+          "isUnique": false
+        },
+        "idx_ssh_credential_usage_user": {
+          "name": "idx_ssh_credential_usage_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_credential_usage_credential_id_ssh_credentials_id_fk": {
+          "name": "ssh_credential_usage_credential_id_ssh_credentials_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_credentials",
+          "columnsFrom": [
+            "credential_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_host_id_ssh_data_id_fk": {
+          "name": "ssh_credential_usage_host_id_ssh_data_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "ssh_credential_usage_user_id_users_id_fk": {
+          "name": "ssh_credential_usage_user_id_users_id_fk",
+          "tableFrom": "ssh_credential_usage",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ssh_credentials": {
+      "name": "ssh_credentials",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folder": {
+          "name": "folder",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "tags": {
+          "name": "tags",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin": {
+          "name": "pin",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "auth_type": {
+          "name": "auth_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "password": {
+          "name": "password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key": {
+          "name": "key",
+          "type": "text(16384)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "private_key": {
+          "name": "private_key",
+          "type": "text(16384)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text(4096)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_password": {
+          "name": "key_password",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "key_type": {
+          "name": "key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "detected_key_type": {
+          "name": "detected_key_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cert_public_key": {
+          "name": "cert_public_key",
+          "type": "text(8192)",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "usage_count": {
+          "name": "usage_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "last_used": {
+          "name": "last_used",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "shared_source": {
+          "name": "shared_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "ssh_credentials_sync_id_unique": {
+          "name": "ssh_credentials_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_ssh_credentials_user_id": {
+          "name": "idx_ssh_credentials_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_credentials_user_id_users_id_fk": {
+          "name": "ssh_credentials_user_id_users_id_fk",
+          "tableFrom": "ssh_credentials",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ssh_folders": {
+      "name": "ssh_folders",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "color": {
+          "name": "color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "icon": {
+          "name": "icon",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "local_only": {
+          "name": "local_only",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "ssh_folders_sync_id_unique": {
+          "name": "ssh_folders_sync_id_unique",
+          "columns": [
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_ssh_folders_user_id": {
+          "name": "idx_ssh_folders_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "ssh_folders_user_id_users_id_fk": {
+          "name": "ssh_folders_user_id_users_id_fk",
+          "tableFrom": "ssh_folders",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "sync_conflicts": {
+      "name": "sync_conflicts",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "local_row": {
+          "name": "local_row",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_revision": {
+          "name": "server_revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sync_conflicts_user": {
+          "name": "idx_sync_conflicts_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sync_conflicts_user_id_users_id_fk": {
+          "name": "sync_conflicts_user_id_users_id_fk",
+          "tableFrom": "sync_conflicts",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "sync_link": {
+      "name": "sync_link",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_url": {
+          "name": "server_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "server_name": {
+          "name": "server_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "server_version": {
+          "name": "server_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "session_token": {
+          "name": "session_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "custom_headers": {
+          "name": "custom_headers",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "basic_auth": {
+          "name": "basic_auth",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "allow_invalid_certificate": {
+          "name": "allow_invalid_certificate",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "remote_user_id": {
+          "name": "remote_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "remote_username": {
+          "name": "remote_username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "account": {
+          "name": "account",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "scope": {
+          "name": "scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "known_types": {
+          "name": "known_types",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "cursor": {
+          "name": "cursor",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "'idle'"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "linked_at": {
+          "name": "linked_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "last_sync_at": {
+          "name": "last_sync_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "sync_link_user_id_users_id_fk": {
+          "name": "sync_link_user_id_users_id_fk",
+          "tableFrom": "sync_link",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "sync_records": {
+      "name": "sync_records",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "entity_type": {
+          "name": "entity_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "sync_id": {
+          "name": "sync_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "revision": {
+          "name": "revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "seq": {
+          "name": "seq",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "hash": {
+          "name": "hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "deleted": {
+          "name": "deleted",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "error": {
+          "name": "error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "error_hash": {
+          "name": "error_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_sync_records_user_entity_sync": {
+          "name": "idx_sync_records_user_entity_sync",
+          "columns": [
+            "user_id",
+            "entity_type",
+            "sync_id"
+          ],
+          "isUnique": true
+        },
+        "idx_sync_records_user_seq": {
+          "name": "idx_sync_records_user_seq",
+          "columns": [
+            "user_id",
+            "seq"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "sync_records_user_id_users_id_fk": {
+          "name": "sync_records_user_id_users_id_fk",
+          "tableFrom": "sync_records",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "trusted_devices": {
+      "name": "trusted_devices",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_fingerprint": {
+          "name": "device_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_type": {
+          "name": "device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "device_info": {
+          "name": "device_info",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_trusted_devices_user_id": {
+          "name": "idx_trusted_devices_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "trusted_devices_user_id_users_id_fk": {
+          "name": "trusted_devices_user_id_users_id_fk",
+          "tableFrom": "trusted_devices",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "ui_preferences": {
+      "name": "ui_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "data": {
+          "name": "data",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "ui_preferences_user_id_users_id_fk": {
+          "name": "ui_preferences_user_id_users_id_fk",
+          "tableFrom": "ui_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_external_identities": {
+      "name": "user_external_identities",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "provider_id": {
+          "name": "provider_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "subject": {
+          "name": "subject",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_external_identities_provider_subject": {
+          "name": "idx_user_external_identities_provider_subject",
+          "columns": [
+            "provider_id",
+            "subject"
+          ],
+          "isUnique": true
+        },
+        "idx_user_external_identities_user": {
+          "name": "idx_user_external_identities_user",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_external_identities_user_id_users_id_fk": {
+          "name": "user_external_identities_user_id_users_id_fk",
+          "tableFrom": "user_external_identities",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_open_tabs": {
+      "name": "user_open_tabs",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tab_type": {
+          "name": "tab_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "host_id": {
+          "name": "host_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "label": {
+          "name": "label",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "tab_order": {
+          "name": "tab_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": 0
+        },
+        "backend_session_id": {
+          "name": "backend_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_open_tabs_user_id": {
+          "name": "idx_user_open_tabs_user_id",
+          "columns": [
+            "user_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_open_tabs_user_id_users_id_fk": {
+          "name": "user_open_tabs_user_id_users_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_open_tabs_host_id_ssh_data_id_fk": {
+          "name": "user_open_tabs_host_id_ssh_data_id_fk",
+          "tableFrom": "user_open_tabs",
+          "tableTo": "ssh_data",
+          "columnsFrom": [
+            "host_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_preferences": {
+      "name": "user_preferences",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "reopen_tabs_on_login": {
+          "name": "reopen_tabs_on_login",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "theme": {
+          "name": "theme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "font_size": {
+          "name": "font_size",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "accent_color": {
+          "name": "accent_color",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "language": {
+          "name": "language",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "storage_mode": {
+          "name": "storage_mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "command_palette_enabled": {
+          "name": "command_palette_enabled",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "show_host_tags": {
+          "name": "show_host_tags",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "host_tray_on_click": {
+          "name": "host_tray_on_click",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "pin_app_rail": {
+          "name": "pin_app_rail",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "expand_app_rail_on_hover": {
+          "name": "expand_app_rail_on_hover",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "show_pin_app_rail_button": {
+          "name": "show_pin_app_rail_button",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "folders_collapsed": {
+          "name": "folders_collapsed",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "disable_update_check": {
+          "name": "disable_update_check",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "confirm_tab_close": {
+          "name": "confirm_tab_close",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "hidden_rail_tabs": {
+          "name": "hidden_rail_tabs",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "compact_host_view": {
+          "name": "compact_host_view",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "status_color_scheme": {
+          "name": "status_color_scheme",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "custom_keybindings": {
+          "name": "custom_keybindings",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "user_preferences_user_id_users_id_fk": {
+          "name": "user_preferences_user_id_users_id_fk",
+          "tableFrom": "user_preferences",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_roles": {
+      "name": "user_roles",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "role_id": {
+          "name": "role_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "granted_by": {
+          "name": "granted_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "autoincrement": false
+        },
+        "granted_at": {
+          "name": "granted_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_roles_user_role": {
+          "name": "idx_user_roles_user_role",
+          "columns": [
+            "user_id",
+            "role_id"
+          ],
+          "isUnique": true
+        },
+        "idx_user_roles_role_id": {
+          "name": "idx_user_roles_role_id",
+          "columns": [
+            "role_id"
+          ],
+          "isUnique": false
+        }
+      },
+      "foreignKeys": {
+        "user_roles_user_id_users_id_fk": {
+          "name": "user_roles_user_id_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_role_id_roles_id_fk": {
+          "name": "user_roles_role_id_roles_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "role_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "user_roles_granted_by_users_id_fk": {
+          "name": "user_roles_granted_by_users_id_fk",
+          "tableFrom": "user_roles",
+          "tableTo": "users",
+          "columnsFrom": [
+            "granted_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "user_second_factors": {
+      "name": "user_second_factors",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "plugin_id": {
+          "name": "plugin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "factor_id": {
+          "name": "factor_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "enrolled_at": {
+          "name": "enrolled_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {
+        "idx_user_second_factors_user_factor": {
+          "name": "idx_user_second_factors_user_factor",
+          "columns": [
+            "user_id",
+            "plugin_id",
+            "factor_id"
+          ],
+          "isUnique": true
+        }
+      },
+      "foreignKeys": {
+        "user_second_factors_user_id_users_id_fk": {
+          "name": "user_second_factors_user_id_users_id_fk",
+          "tableFrom": "user_second_factors",
+          "tableTo": "users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    },
+    "users": {
+      "name": "users",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "username": {
+          "name": "username",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "password_hash": {
+          "name": "password_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false
+        },
+        "is_admin": {
+          "name": "is_admin",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": false
+        },
+        "registered_at": {
+          "name": "registered_at",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "autoincrement": false,
+          "default": "CURRENT_TIMESTAMP"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "checkConstraints": {}
+    }
+  },
+  "views": {},
+  "enums": {},
+  "_meta": {
+    "schemas": {},
+    "tables": {},
+    "columns": {}
+  },
+  "internal": {
+    "indexes": {}
+  }
+}
\ No newline at end of file
diff --git a/drizzle/sqlite/meta/_journal.json b/drizzle/sqlite/meta/_journal.json
index 5291f32be..b865c8bc7 100644
--- a/drizzle/sqlite/meta/_journal.json
+++ b/drizzle/sqlite/meta/_journal.json
@@ -428,6 +428,41 @@
       "when": 1790742085632,
       "tag": "0060_fine_cerise",
       "breakpoints": true
+    },
+    {
+      "idx": 61,
+      "version": "6",
+      "when": 1791209294736,
+      "tag": "0061_retire_2_8_columns",
+      "breakpoints": true
+    },
+    {
+      "idx": 62,
+      "version": "6",
+      "when": 1791209309626,
+      "tag": "0062_external_session_ref",
+      "breakpoints": true
+    },
+    {
+      "idx": 63,
+      "version": "6",
+      "when": 1791256339684,
+      "tag": "0063_plugin_pinned_version",
+      "breakpoints": true
+    },
+    {
+      "idx": 64,
+      "version": "6",
+      "when": 1791388887785,
+      "tag": "0064_plugin_channel",
+      "breakpoints": true
+    },
+    {
+      "idx": 65,
+      "version": "6",
+      "when": 1791550495357,
+      "tag": "0065_drop_donation_modal",
+      "breakpoints": true
     }
   ]
 }
\ No newline at end of file
diff --git a/electron-builder.json b/electron-builder.json
index b580d9ce0..8d2cd7207 100644
--- a/electron-builder.json
+++ b/electron-builder.json
@@ -93,7 +93,7 @@
     "desktop": {
       "entry": {
         "Name": "Termix",
-        "Comment": "Self-hosted SSH and remote desktop management. ",
+        "Comment": "Self-hosted, plugin-based server management.",
         "Keywords": "docker;ssh;terminal;telnet;self-hosted;rdp;file-management;vnc;ssh-tunnel;server-stats;termix",
         "StartupWMClass": "termix"
       }
@@ -123,7 +123,7 @@
     "entitlements": "packaging/build/entitlements.mac.plist",
     "entitlementsInherit": "packaging/build/entitlements.mac.inherit.plist",
     "type": "distribution",
-    "minimumSystemVersion": "10.15",
+    "minimumSystemVersion": "12.0",
     "mergeASARs": false,
     "singleArchFiles": "**/*.{node,bare,dylib}",
     "x64ArchFiles": "**/{*.{node,bare,dylib},node-pty/prebuilds/*/spawn-helper}"
diff --git a/electron/local-shell.cjs b/electron/local-shell.cjs
index ac633fec7..bbf965fb2 100644
--- a/electron/local-shell.cjs
+++ b/electron/local-shell.cjs
@@ -1,4 +1,16 @@
-function resolveLocalShell(platform, requestedShell, env = process.env) {
+const fs = require("node:fs");
+const path = require("node:path");
+
+function isUsableShell(file, exists) {
+  return !!file && (!path.isAbsolute(file) || exists(file));
+}
+
+function resolveLocalShell(
+  platform,
+  requestedShell,
+  env = process.env,
+  exists = fs.existsSync,
+) {
   if (platform === "win32") {
     if (requestedShell === "wsl") {
       return { file: "wsl.exe", args: [] };
@@ -9,13 +21,47 @@ function resolveLocalShell(platform, requestedShell, env = process.env) {
     };
   }
 
-  return {
-    file:
-      env.TERMIX_LOCAL_SHELL ||
-      env.SHELL ||
-      (platform === "darwin" ? "/bin/zsh" : "/bin/bash"),
-    args: ["-l"],
-  };
+  // A SHELL left pointing at an uninstalled shell makes the spawn fail.
+  const fallbacks =
+    platform === "darwin"
+      ? ["/bin/zsh", "/bin/bash", "/bin/sh"]
+      : ["/bin/bash", "/bin/sh"];
+  const file =
+    [env.TERMIX_LOCAL_SHELL, env.SHELL, ...fallbacks].find((candidate) =>
+      isUsableShell(candidate, exists),
+    ) || fallbacks[0];
+  return { file, args: ["-l"] };
 }
 
-module.exports = { resolveLocalShell };
+/**
+ * node-pty starts every shell through its spawn-helper binary, and a packaged
+ * copy that lost its execute bit fails with "posix_spawnp failed". Returns
+ * how many helpers were fixed.
+ */
+function repairSpawnHelpers(ptyDir, fsImpl = fs) {
+  const dir = ptyDir.replace(/app\.asar(?!\.unpacked)/, "app.asar.unpacked");
+  const candidates = [
+    path.join(dir, "build", "Release", "spawn-helper"),
+    path.join(
+      dir,
+      "prebuilds",
+      `${process.platform}-${process.arch}`,
+      "spawn-helper",
+    ),
+  ];
+  let fixed = 0;
+  for (const helper of candidates) {
+    try {
+      const mode = fsImpl.statSync(helper).mode;
+      if ((mode & 0o111) === 0) {
+        fsImpl.chmodSync(helper, mode | 0o755);
+        fixed += 1;
+      }
+    } catch {
+      // Missing or read-only; nothing to fix here.
+    }
+  }
+  return fixed;
+}
+
+module.exports = { resolveLocalShell, repairSpawnHelpers };
diff --git a/electron/main.cjs b/electron/main.cjs
index 01e53fb0d..05ebbdd1f 100644
--- a/electron/main.cjs
+++ b/electron/main.cjs
@@ -33,7 +33,7 @@ const { launchNativeRdp } = require("./native-rdp.cjs");
 const { isCloseActiveTabInput } = require("./keyboard-shortcuts.cjs");
 const { quitApp } = require("./app-quit.cjs");
 const { selectLinuxPasswordStore } = require("./linux-password-store.cjs");
-const { resolveLocalShell } = require("./local-shell.cjs");
+const { resolveLocalShell, repairSpawnHelpers } = require("./local-shell.cjs");
 const { registerLocalFileHandlers } = require("./local-files.cjs");
 
 const localTerminalSessions = new Map();
@@ -644,17 +644,30 @@ const BACKEND_REQUEST_HANDLERS = {
   },
 };
 
+function isDevRunner() {
+  return (
+    process.env.TERMIX_DEV_RUNNER === "true" &&
+    typeof process.send === "function"
+  );
+}
+
 async function handleBackendRequest(msg) {
   if (!msg || msg.type !== "backend-request") return;
   const { id, channel, payload } = msg;
   const handler = BACKEND_REQUEST_HANDLERS[channel];
+  // Under npm run dev:electron the runner owns the backend and relays these messages.
+  const target =
+    backendProcess && !backendProcess.killed
+      ? backendProcess
+      : isDevRunner()
+        ? process
+        : null;
   const reply = (response) => {
-    if (backendProcess && !backendProcess.killed) {
-      try {
-        backendProcess.send({ type: "backend-response", id, ...response });
-      } catch (error) {
-        logToFile("Failed to reply to backend request:", error.message);
-      }
+    if (!target) return;
+    try {
+      target.send({ type: "backend-response", id, ...response });
+    } catch (error) {
+      logToFile("Failed to reply to backend request:", error.message);
     }
   };
   if (!handler) {
@@ -1028,7 +1041,7 @@ function getBackendPaths() {
       backendCwd: backendDir,
     };
   }
-  // fork() does not go through Electron's asar redirector — use the unpacked path.
+  // fork() does not go through Electron's asar redirector, use the unpacked path.
   // On macOS multi-arch builds (mergeASARs: false), electron-builder names the ASAR
   // app-arm64.asar / app-x64.asar instead of app.asar, so match all variants.
   const unpackedRoot = getUnpackedAppRoot(appRoot);
@@ -1290,7 +1303,7 @@ function createTray() {
   try {
     const { nativeImage } = require("electron");
 
-    // Native APIs (Tray, nativeImage) can't load files from inside app.asar —
+    // Native APIs (Tray, nativeImage) can't load files from inside app.asar,
     // use the unpacked path so the OS sees a real file.
     const publicRoot = isDev
       ? path.join(appRoot, "public")
@@ -1449,6 +1462,14 @@ function createWindow() {
 
       details.requestHeaders["User-Agent"] = customUserAgent;
 
+      // YouTube refuses embeds without a Referer, which file:// never sends.
+      if (
+        details.url.startsWith("https://www.youtube-nocookie.com/embed/") &&
+        !details.requestHeaders.Referer
+      ) {
+        details.requestHeaders.Referer = "https://termix.site/";
+      }
+
       const rememberedJwt = getRememberedElectronAuthCookie("jwt", details.url);
       if (rememberedJwt) {
         setCookieHeaderValue(
@@ -2166,11 +2187,6 @@ async function openC2SRelay(
     targetHost,
     targetPort,
   });
-  setC2STunnelStatus(tunnelName, {
-    connected: false,
-    status: "CONNECTING",
-    reason: `Opening relay to ${targetHost}:${targetPort}`,
-  });
   const ws = new WebSocket(
     relayUrl,
     getWebSocketOptions(relayUrl, { headers }),
@@ -2205,13 +2221,16 @@ async function openC2SRelay(
 
   socket.on("data", sendChunk);
   socket.on("close", cleanup);
+  // One connection failing must not stop the tunnel: the listener refuses
+  // new connections while the tunnel is not connected, and a browser opens
+  // many at once.
   socket.on("error", (error) => {
-    setC2STunnelError(tunnelName, error.message || "Local socket error");
+    logToFile(`[c2s] ${tunnelName} local socket error:`, error.message);
     cleanup();
   });
   ws.on("close", cleanup);
   ws.on("error", (error) => {
-    setC2STunnelError(tunnelName, error.message || "Relay connection failed");
+    logToFile(`[c2s] ${tunnelName} relay error:`, error.message);
     cleanup();
   });
 
@@ -2238,10 +2257,6 @@ async function openC2SRelay(
       if (message.type === "ready") {
         ready = true;
         logToFile(`[c2s] relay ready for ${tunnelName}`);
-        setC2STunnelStatus(tunnelName, {
-          connected: true,
-          status: "CONNECTED",
-        });
         if (initialData?.length) {
           ws.send(initialData);
         }
@@ -2254,12 +2269,13 @@ async function openC2SRelay(
           "Relay rejected the client tunnel",
         );
         logToFile("[c2s] relay error:", relayError);
-        setC2STunnelError(tunnelName, relayError);
+        if (relayError === C2S_REMOTE_SESSION_EXPIRED_ERROR) {
+          setC2STunnelError(tunnelName, relayError);
+        }
         cleanup();
       }
     } catch (error) {
       logToFile("[c2s] invalid relay message:", error.message);
-      setC2STunnelError(tunnelName, error.message || "Invalid relay response");
       cleanup();
     }
   });
@@ -2485,7 +2501,9 @@ function handleC2SLocalConnection(tunnel, socket, authToken) {
       "Local relay failed",
     );
     logToFile("[c2s] local relay failed:", message);
-    setC2STunnelError(tunnelName, message);
+    if (message === C2S_REMOTE_SESSION_EXPIRED_ERROR) {
+      setC2STunnelError(tunnelName, message);
+    }
     socket.destroy();
   });
 }
@@ -3222,17 +3240,32 @@ ipcMain.handle("local-terminal-start", (event, dimensions = {}) => {
   const rows = Math.min(300, Math.max(1, Number(dimensions.rows) || 24));
   const sessionId = crypto.randomUUID();
   const shellConfig = resolveLocalShell(process.platform, dimensions.shell);
-  const child = pty.spawn(shellConfig.file, shellConfig.args, {
-    name: "xterm-256color",
-    cols,
-    rows,
-    cwd: os.homedir(),
-    env: {
-      ...process.env,
-      TERM: "xterm-256color",
-      COLORTERM: "truecolor",
-    },
-  });
+  const spawnShell = () =>
+    pty.spawn(shellConfig.file, shellConfig.args, {
+      name: "xterm-256color",
+      cols,
+      rows,
+      cwd: os.homedir(),
+      env: {
+        ...process.env,
+        TERM: "xterm-256color",
+        COLORTERM: "truecolor",
+      },
+    });
+  let child;
+  try {
+    child = spawnShell();
+  } catch (error) {
+    const ptyDir = path.dirname(require.resolve("node-pty/package.json"));
+    if (
+      !String(error?.message).includes("posix_spawnp") ||
+      repairSpawnHelpers(ptyDir) === 0
+    ) {
+      throw error;
+    }
+    logToFile("[local-terminal] restored the spawn-helper execute bit");
+    child = spawnShell();
+  }
   const ownerId = event.sender.id;
   const session = { ownerId, process: child, ready: false, buffered: "" };
   localTerminalSessions.set(sessionId, session);
@@ -3762,8 +3795,11 @@ app.whenReady().then(async () => {
     logToFile("startBackendServer result:", result);
   } else {
     logToFile(
-      "Skipping embedded backend (isDev=true) - expecting separate dev:backend process",
+      "Skipping embedded backend (isDev=true) - expecting the dev runner's backend",
     );
+    if (isDevRunner()) {
+      process.on("message", (msg) => void handleBackendRequest(msg));
+    }
   }
 
   createTray();
diff --git a/electron/preload.js b/electron/preload.js
index 133119513..d7b88ad3f 100644
--- a/electron/preload.js
+++ b/electron/preload.js
@@ -83,9 +83,6 @@ contextBridge.exposeInMainWorld("electronAPI", {
 
   externalBrowserLogin: (authUrl, callbackPort) =>
     ipcRenderer.invoke("external-browser-login", authUrl, callbackPort),
-  // 2.8 name, read by older server login pages. Remove in 3.0.0.
-  oidcSystemBrowserAuth: (authUrl, callbackPort) =>
-    ipcRenderer.invoke("external-browser-login", authUrl, callbackPort),
 
   openExternalEditor: (fileData) =>
     ipcRenderer.invoke("open-external-editor", fileData),
diff --git a/env.catalog.json b/env.catalog.json
new file mode 100644
index 000000000..4b7d0ed28
--- /dev/null
+++ b/env.catalog.json
@@ -0,0 +1,460 @@
+{
+  "groups": {
+    "server": "Server",
+    "https": "HTTPS",
+    "database": "Database",
+    "secrets": "Secrets",
+    "auth": "Sign in",
+    "proxy": "Proxies and origins",
+    "logging": "Logs and audit",
+    "plugins": "Plugins",
+    "desktop": "Desktop app",
+    "internal": "Internal"
+  },
+  "vars": [
+    {
+      "name": "PORT",
+      "group": "server",
+      "default": "8080",
+      "description": "Port the web UI listens on in the Docker image."
+    },
+    {
+      "name": "DATA_DIR",
+      "group": "server",
+      "default": "/app/data",
+      "description": "Where Termix keeps its database, keys, plugins and uploads. Mount a volume here. Outside Docker the default is ./db/data."
+    },
+    {
+      "name": "ALLOW_EMPTY_DATA_DIR",
+      "group": "server",
+      "default": "false",
+      "description": "Start even when DATA_DIR is empty but an older data folder exists elsewhere. Only set this if you really want a fresh install."
+    },
+    {
+      "name": "PUID",
+      "group": "server",
+      "default": "1000",
+      "docker": true,
+      "description": "User id the container runs as. Match it to the owner of your data volume."
+    },
+    {
+      "name": "PGID",
+      "group": "server",
+      "default": "1000",
+      "docker": true,
+      "description": "Group id the container runs as."
+    },
+    {
+      "name": "BASE_PATH",
+      "group": "server",
+      "description": "Serve Termix under a sub path, like /termix. Set the same path in your reverse proxy."
+    },
+    {
+      "name": "NODE_ENV",
+      "group": "server",
+      "default": "production",
+      "description": "Set by the image. Leave it alone."
+    },
+    {
+      "name": "VERSION",
+      "group": "server",
+      "description": "Set by the image to the Termix version. Leave it alone."
+    },
+    {
+      "name": "SETTINGS_CACHE_REFRESH_SECONDS",
+      "group": "server",
+      "default": "30",
+      "description": "How often each server instance reloads admin settings from the database. 0 turns the refresh off."
+    },
+    {
+      "name": "SSH_AUTH_SOCK",
+      "group": "server",
+      "description": "SSH agent socket used for hosts set to agent auth when they do not name their own socket."
+    },
+
+    {
+      "name": "ENABLE_SSL",
+      "group": "https",
+      "default": "false",
+      "description": "Serve HTTPS. Termix makes a self-signed certificate on first boot unless you give it one."
+    },
+    {
+      "name": "SSL_PORT",
+      "group": "https",
+      "default": "8443",
+      "description": "Port for HTTPS."
+    },
+    {
+      "name": "SSL_CERT_PATH",
+      "group": "https",
+      "default": "/app/data/ssl/termix.crt",
+      "description": "Certificate file for HTTPS."
+    },
+    {
+      "name": "SSL_KEY_PATH",
+      "group": "https",
+      "default": "/app/data/ssl/termix.key",
+      "description": "Private key file for HTTPS."
+    },
+    {
+      "name": "SSL_DOMAIN",
+      "group": "https",
+      "default": "localhost",
+      "description": "Domain put in the self-signed certificate."
+    },
+    {
+      "name": "TERMIX_SSL_TERMINATED_BY_NGINX",
+      "group": "https",
+      "internal": true,
+      "description": "Set by the image when nginx serves HTTPS in front of the backend."
+    },
+
+    {
+      "name": "DATABASE_DIALECT",
+      "group": "database",
+      "default": "sqlite",
+      "description": "sqlite, postgres or mysql."
+    },
+    {
+      "name": "DATABASE_URL",
+      "group": "database",
+      "description": "Connection URL for postgres or mysql, like postgres://user:pass@db:5432/termix."
+    },
+    {
+      "name": "DATABASE_POOL_MAX",
+      "group": "database",
+      "default": "10",
+      "description": "Most connections Termix opens to postgres or mysql."
+    },
+    {
+      "name": "DATABASE_SSL",
+      "group": "database",
+      "description": "TLS for postgres or mysql: require, no-verify or disable."
+    },
+    {
+      "name": "DB_FILE_ENCRYPTION",
+      "group": "database",
+      "default": "true",
+      "description": "Encrypt the SQLite file at rest. Set false only if something else already encrypts the disk."
+    },
+    {
+      "name": "DB_FILE_KEY",
+      "group": "database",
+      "secret": true,
+      "description": "Only used to open SQLite files encrypted by very old versions. You almost never need it."
+    },
+    {
+      "name": "DATABASE_LAYER_SKIP_PREUPGRADE_BACKUP",
+      "group": "database",
+      "default": "false",
+      "description": "Skip the backup Termix takes of the data folder before an upgrade changes the database."
+    },
+    {
+      "name": "DATABASE_LAYER_PREUPGRADE_BACKUP_KEEP",
+      "group": "database",
+      "default": "3",
+      "description": "How many of those upgrade backups to keep."
+    },
+    {
+      "name": "DRIZZLE_MIGRATIONS_DIR",
+      "group": "database",
+      "internal": true,
+      "description": "Where database migrations are read from. Set by the image."
+    },
+
+    {
+      "name": "JWT_SECRET",
+      "group": "secrets",
+      "secret": true,
+      "description": "Signs sign-in sessions. At least 64 characters. Made for you and saved in DATA_DIR/.env if not set. Also read from JWT_SECRET_FILE."
+    },
+    {
+      "name": "DATABASE_KEY",
+      "group": "secrets",
+      "secret": true,
+      "description": "Key for the encrypted SQLite file, 64 hex characters. Made for you if not set. Also read from DATABASE_KEY_FILE."
+    },
+    {
+      "name": "ENCRYPTION_KEY",
+      "group": "secrets",
+      "secret": true,
+      "description": "Wraps the data keys that encrypt passwords and SSH keys, 64 hex characters. Made for you if not set. Also read from ENCRYPTION_KEY_FILE."
+    },
+    {
+      "name": "INTERNAL_AUTH_TOKEN",
+      "group": "secrets",
+      "secret": true,
+      "description": "Token the server uses to call itself. Made for you if not set. Also read from INTERNAL_AUTH_TOKEN_FILE."
+    },
+    {
+      "name": "TERMIX_REQUIRE_EXTERNAL_SECRETS",
+      "group": "secrets",
+      "default": "false",
+      "description": "Refuse to start unless the four secrets above come from env vars or _FILE files, so none are written to disk."
+    },
+    {
+      "name": "OIDC_SYSTEM_SECRET",
+      "group": "secrets",
+      "secret": true,
+      "description": "Only read to move data from installs older than 2.5. Never change it on an install that has it."
+    },
+    {
+      "name": "WEBAUTHN_SYSTEM_SECRET",
+      "group": "secrets",
+      "secret": true,
+      "description": "Only read to move data from installs older than 2.5. Never change it on an install that has it."
+    },
+
+    {
+      "name": "ALLOW_PASSWORD_LOGIN",
+      "group": "auth",
+      "description": "true or false. Overrides the admin setting for signing in with a username and password."
+    },
+    {
+      "name": "ALLOW_REGISTRATION",
+      "group": "auth",
+      "description": "true or false. Overrides the admin setting for creating new accounts."
+    },
+    {
+      "name": "ALLOW_PASSWORD_RESET",
+      "group": "auth",
+      "description": "true or false. Overrides the admin setting for resetting a password from the sign in page."
+    },
+    {
+      "name": "EXTERNAL_ALLOW_REGISTRATION",
+      "group": "auth",
+      "description": "true or false. Overrides the admin setting for creating accounts the first time someone signs in with SSO or LDAP."
+    },
+    {
+      "name": "EXTERNAL_FORCE_HTTPS",
+      "group": "auth",
+      "default": "false",
+      "description": "Build sign in callback URLs with https even when the request came in over http. Use it behind a proxy that does not send X-Forwarded-Proto."
+    },
+    {
+      "name": "OIDC_ALLOW_REGISTRATION",
+      "group": "auth",
+      "deprecated": "EXTERNAL_ALLOW_REGISTRATION",
+      "description": "Old name for EXTERNAL_ALLOW_REGISTRATION. Still read in 26.10."
+    },
+    {
+      "name": "OIDC_FORCE_HTTPS",
+      "group": "auth",
+      "deprecated": "EXTERNAL_FORCE_HTTPS",
+      "description": "Old name for EXTERNAL_FORCE_HTTPS. Still read in 26.10."
+    },
+    {
+      "name": "OIDC_CLIENT_ID",
+      "group": "auth",
+      "internal": true,
+      "description": "Read by core only to move a 2.8 OIDC setup into the sso plugin. See the sso plugin for the real variables."
+    },
+    {
+      "name": "OIDC_ENV_OVERRIDE",
+      "group": "auth",
+      "internal": true,
+      "description": "Read by core only to move a 2.8 OIDC setup into the sso plugin. See the sso plugin for the real variables."
+    },
+    {
+      "name": "TRUSTED_PROXY_AUTH_ENABLED",
+      "group": "auth",
+      "default": "false",
+      "description": "Let a proxy like Authelia or Authentik sign people in by sending their username in a header."
+    },
+    {
+      "name": "TRUSTED_PROXY_AUTH_TRUSTED_PROXIES",
+      "group": "auth",
+      "description": "Comma separated IPs or CIDRs of the proxies allowed to send the headers. Required when trusted proxy login is on."
+    },
+    {
+      "name": "TRUSTED_PROXY_AUTH_USERNAME_HEADER",
+      "group": "auth",
+      "default": "x-forwarded-username",
+      "description": "Header that holds the username."
+    },
+    {
+      "name": "TRUSTED_PROXY_AUTH_ROLE_HEADER",
+      "group": "auth",
+      "default": "x-forwarded-role",
+      "description": "Header that holds the user's groups or roles."
+    },
+    {
+      "name": "TRUSTED_PROXY_AUTH_ROLE_MAP",
+      "group": "auth",
+      "description": "JSON map from proxy roles to Termix roles, like {\"admins\":[\"admin\"],\"staff\":[\"user\"]}. Required when trusted proxy login is on."
+    },
+
+    {
+      "name": "TRUSTED_PROXIES",
+      "group": "proxy",
+      "docker": true,
+      "description": "Comma separated IPs or CIDRs nginx takes the client IP from (X-Forwarded-For). Set it to your reverse proxy."
+    },
+    {
+      "name": "CORS_ALLOWED_ORIGINS",
+      "group": "proxy",
+      "description": "Comma separated extra origins allowed to call the API from a browser."
+    },
+    {
+      "name": "TERMIX_ALLOWED_ORIGINS",
+      "group": "proxy",
+      "description": "Comma separated extra origins allowed to open WebSockets."
+    },
+    {
+      "name": "HTTP_PROXY",
+      "group": "proxy",
+      "description": "Proxy for outbound HTTP requests, like registry downloads and webhooks."
+    },
+    {
+      "name": "HTTPS_PROXY",
+      "group": "proxy",
+      "description": "Proxy for outbound HTTPS requests."
+    },
+    {
+      "name": "NO_PROXY",
+      "group": "proxy",
+      "description": "Comma separated hosts that skip the proxy."
+    },
+
+    {
+      "name": "LOG_LEVEL",
+      "group": "logging",
+      "default": "info",
+      "description": "debug, info, warn or error."
+    },
+    {
+      "name": "LOG_TIMESTAMP_FORMAT",
+      "group": "logging",
+      "description": "iso or 24h. Unset uses the local time format."
+    },
+    {
+      "name": "AUDIT_LOG_RETENTION_DAYS",
+      "group": "logging",
+      "description": "Delete audit entries older than this many days. Unset keeps them until the entry cap."
+    },
+    {
+      "name": "AUDIT_LOG_MAX_ENTRIES",
+      "group": "logging",
+      "default": "10000",
+      "description": "Most audit entries kept. The oldest go first."
+    },
+    {
+      "name": "AUDIT_LOG_FORWARD_URL",
+      "group": "logging",
+      "description": "Also POST every audit entry as JSON to this URL. Overrides the admin setting."
+    },
+    {
+      "name": "AUDIT_LOG_FORWARD_TOKEN",
+      "group": "logging",
+      "secret": true,
+      "description": "Bearer token sent with forwarded audit entries."
+    },
+    {
+      "name": "SESSION_RECORDING_RETENTION_DAYS",
+      "group": "logging",
+      "deprecated": "the session-recording plugin setting",
+      "description": "Only read once to carry a 2.8 value into the session-recording plugin."
+    },
+
+    {
+      "name": "TERMIX_PLUGIN_REGISTRY_URL",
+      "group": "plugins",
+      "description": "Use another plugin index instead of the official registry."
+    },
+    {
+      "name": "TERMIX_PLUGIN_STATS_URL",
+      "group": "plugins",
+      "description": "Where install counts are read from. Defaults to stats.json next to the registry index."
+    },
+    {
+      "name": "TERMIX_REQUIRE_SIGNED_PLUGINS",
+      "group": "plugins",
+      "default": "false",
+      "description": "Only load plugins signed by a trusted key. Blocks uploads of unsigned files even in developer mode."
+    },
+    {
+      "name": "TERMIX_BUNDLED_PLUGINS_DIR",
+      "group": "plugins",
+      "description": "Where the plugins shipped with Termix are read from. Set by the image."
+    },
+    {
+      "name": "TERMIX_PLUGIN_PUBLIC_RATE_LIMIT",
+      "group": "plugins",
+      "default": "120",
+      "description": "Requests per minute one IP may make to a plugin's public routes."
+    },
+    {
+      "name": "PLUGIN_MAX_KV_KEYS",
+      "group": "plugins",
+      "default": "10000",
+      "description": "Most key value entries one plugin may store."
+    },
+    {
+      "name": "TERMIX_DEV_RELOAD",
+      "group": "plugins",
+      "internal": true,
+      "description": "Set by npm run dev so plugin rebuilds reload without a restart."
+    },
+    {
+      "name": "TERMIX_DEV_RUNNER",
+      "group": "plugins",
+      "internal": true,
+      "description": "Set by npm run dev."
+    },
+
+    {
+      "name": "ENABLE_INSECURE_MODE",
+      "group": "desktop",
+      "default": "false",
+      "description": "Desktop app only. Skip TLS certificate checks for the linked server. Only for testing."
+    },
+    {
+      "name": "ELECTRON_DISABLE_GPU",
+      "group": "desktop",
+      "description": "Desktop app only. Set to 1 to turn off GPU acceleration if the window is blank or flickers."
+    },
+    {
+      "name": "TERMIX_LOCAL_SHELL",
+      "group": "desktop",
+      "description": "Desktop app only. Shell the local terminal opens, like /bin/zsh or pwsh.exe."
+    },
+    {
+      "name": "SHELL",
+      "group": "desktop",
+      "internal": true,
+      "description": "Your login shell, used by the local terminal when TERMIX_LOCAL_SHELL is not set."
+    },
+    {
+      "name": "ELECTRON_EMBEDDED",
+      "group": "desktop",
+      "internal": true,
+      "description": "Set by the desktop app when it runs its own backend."
+    },
+    {
+      "name": "TERMIX_DATA_DIR",
+      "group": "desktop",
+      "internal": true,
+      "description": "Set by the desktop app to its data folder."
+    },
+    {
+      "name": "XDG_CURRENT_DESKTOP",
+      "group": "desktop",
+      "internal": true,
+      "description": "Read on Linux to pick the password store and window behavior."
+    },
+
+    {
+      "name": "DESKTOP_SESSION",
+      "group": "desktop",
+      "internal": true,
+      "description": "Read on Linux to pick the password store."
+    },
+
+    {
+      "name": "VITE_BASE_PATH",
+      "group": "internal",
+      "internal": true,
+      "description": "Base path baked in at build time."
+    }
+  ]
+}
diff --git a/eslint.config.mjs b/eslint.config.mjs
index a8717f6d3..1e4fad2b4 100644
--- a/eslint.config.mjs
+++ b/eslint.config.mjs
@@ -5,64 +5,6 @@ import reactRefresh from "eslint-plugin-react-refresh";
 import unusedImports from "eslint-plugin-unused-imports";
 import tseslint from "typescript-eslint";
 import { globalIgnores } from "eslint/config";
-import path from "node:path";
-
-// A plugin may import @termix/plugin-sdk, npm packages and its own files.
-// A relative path that climbs out of plugins/<id>/ reaches core or another
-// plugin, and "@/..." is core's alias.
-const pluginBoundary = {
-  rules: {
-    "stay-inside": {
-      meta: {
-        type: "problem",
-        messages: {
-          core: "A plugin reaches core only through @termix/plugin-sdk. Use an SDK API, or add one.",
-          outside:
-            "A plugin cannot import files outside its own folder. Use the SDK, ctx.services, events, actions or slots.",
-        },
-      },
-      create(context) {
-        const file = context.filename.replace(/\\/g, "/");
-        const root = /^(.*\/plugins\/[^/]+)\//.exec(file)?.[1];
-        const check = (node, source) => {
-          if (typeof source !== "string") return;
-          if (source === "@" || source.startsWith("@/")) {
-            context.report({ node, messageId: "core" });
-            return;
-          }
-          if (!root || !source.startsWith(".")) return;
-          const target = path.posix.normalize(
-            path.posix.join(path.posix.dirname(file), source),
-          );
-          if (target !== root && !target.startsWith(`${root}/`)) {
-            context.report({ node, messageId: "outside" });
-          }
-        };
-        return {
-          ImportDeclaration: (node) => check(node, node.source.value),
-          ExportNamedDeclaration: (node) => check(node, node.source?.value),
-          ExportAllDeclaration: (node) => check(node, node.source.value),
-          ImportExpression: (node) => check(node, node.source.value),
-          // vi.mock("@/x") and require("../../x") name a module too.
-          CallExpression: (node) => {
-            const callee = node.callee;
-            const named =
-              (callee.type === "Identifier" && callee.name === "require") ||
-              (callee.type === "MemberExpression" &&
-                callee.object.type === "Identifier" &&
-                callee.object.name === "vi" &&
-                callee.property.type === "Identifier" &&
-                ["mock", "doMock", "importActual", "unmock"].includes(
-                  callee.property.name,
-                ));
-            const first = node.arguments[0];
-            if (named && first?.type === "Literal") check(node, first.value);
-          },
-        };
-      },
-    },
-  },
-};
 
 export default tseslint.config([
   globalIgnores([
@@ -111,7 +53,7 @@ export default tseslint.config([
   },
   {
     // MySQL has no RETURNING clause, and drizzle's mysql-core does not expose
-    // the method at all — a bare .returning() is a TypeError there, not a bad
+    // the method at all. A bare .returning() is a TypeError there, not a bad
     // query, and it only fails on the engine no test in this repo runs against.
     //
     // 175 call sites were migrated off it. This is what stops number 176.
@@ -143,14 +85,14 @@ export default tseslint.config([
         {
           // Postgres and SQLite spell it ON CONFLICT; MySQL spells it ON
           // DUPLICATE KEY and names no columns, so drizzle's mysql-core has no
-          // onConflictDoUpdate at all — another TypeError, not a bad query.
+          // onConflictDoUpdate at all, another TypeError, not a bad query.
           selector: "CallExpression[callee.property.name='onConflictDoUpdate']",
           message:
             "MySQL has no ON CONFLICT. Use upsert() from ./returning.js.",
         },
         {
           // better-sqlite3 puts these on a write result; node-postgres and
-          // mysql2 do not, so reading them directly yields undefined — and
+          // mysql2 do not, so reading them directly yields undefined, and
           // Number(undefined) is NaN, which reaches the database as the string
           // "NaN" and fails an integer column. Three call sites did exactly
           // this and only broke on Postgres.
@@ -162,75 +104,4 @@ export default tseslint.config([
       ],
     },
   },
-  {
-    // Core must not reach into a plugin. A plugin can be disabled, upgraded
-    // or removed, so an import from core turns "disabled" into a broken
-    // build rather than a missing feature. Core talks to plugins through the
-    // runtime in src/backend/plugins/, which handles absence. Core tests only
-    // use fixture plugins.
-    files: ["src/**/*.{ts,tsx}"],
-    rules: {
-      "no-restricted-imports": [
-        "error",
-        {
-          patterns: [
-            {
-              group: ["**/plugins/*/src/backend/**"],
-              message:
-                "Core must not import a plugin backend. Go through the plugin runtime, so disabling the plugin degrades cleanly.",
-            },
-          ],
-        },
-      ],
-    },
-  },
-  {
-    // The shell never imports a plugin. It reaches plugins only through the
-    // registries their frontends fill via the app object (A7). This block
-    // also carries the backend rule for src/ui files, because flat config
-    // replaces a rule's options rather than merging them.
-    files: ["src/ui/**/*.{ts,tsx}", "src/main.tsx"],
-    rules: {
-      "no-restricted-imports": [
-        "error",
-        {
-          patterns: [
-            {
-              group: ["**/plugins/*/src/**", "**/plugins/*/dist/**"],
-              message:
-                "The shell does not import plugins. Register the surface through the app object and read it from a registry.",
-            },
-          ],
-        },
-      ],
-    },
-  },
-  {
-    // The other direction. A plugin reaches core only through
-    // @termix/plugin-sdk, and never reaches into another plugin's source.
-    files: ["plugins/*/src/**/*.{ts,tsx,mjs}", "plugins/*/tests/**/*.{ts,tsx}"],
-    plugins: { "termix-plugins": pluginBoundary },
-    rules: {
-      "termix-plugins/stay-inside": "error",
-    },
-  },
-  {
-    // react-i18next's hook reads core's namespace, so plugin strings show as raw keys.
-    files: ["plugins/*/src/**/*.{ts,tsx}"],
-    rules: {
-      "no-restricted-imports": [
-        "error",
-        {
-          paths: [
-            {
-              name: "react-i18next",
-              importNames: ["useTranslation", "Trans", "withTranslation"],
-              message:
-                "Use useTranslation from @termix/plugin-sdk/frontend so keys resolve in this plugin's namespace.",
-            },
-          ],
-        },
-      ],
-    },
-  },
 ]);
diff --git a/index.html b/index.html
index 9de5da6e8..09e886cdd 100644
--- a/index.html
+++ b/index.html
@@ -20,35 +20,6 @@
     <link rel="manifest" href="manifest.json" />
     <title>Termix</title>
     <style>
-      .hide-scrollbar {
-        scrollbar-width: none;
-        -ms-overflow-style: none;
-      }
-
-      .hide-scrollbar::-webkit-scrollbar {
-        display: none;
-      }
-
-      .skinny-scrollbar {
-        scrollbar-width: thin;
-        scrollbar-color: #4a4a4a #1e1e21;
-      }
-
-      .skinny-scrollbar::-webkit-scrollbar {
-        width: 6px;
-        height: 6px;
-      }
-
-      .skinny-scrollbar::-webkit-scrollbar-track {
-        background: #1e1e21;
-      }
-
-      .skinny-scrollbar::-webkit-scrollbar-thumb {
-        background-color: #4a4a4a;
-        border-radius: 3px;
-        border: 1px solid #1e1e21;
-      }
-
       .toolbar-scrollbar {
         scrollbar-width: thin;
         scrollbar-color: #4a4a4a transparent;
diff --git a/knip.json b/knip.json
deleted file mode 100644
index 4e7318445..000000000
--- a/knip.json
+++ /dev/null
@@ -1,90 +0,0 @@
-{
-  "$schema": "https://unpkg.com/knip@latest/schema.json",
-  "workspaces": {
-    ".": {
-      "entry": [
-        "src/main.tsx",
-        "src/backend/starter.ts",
-        "src/backend/utils/swagger.ts",
-        "src/ui/plugin-host/sdk-ui.ts",
-        "src/ui/plugin-host/testing-host.tsx",
-        "src/**/tests/**/*.{ts,tsx}",
-        "scripts/**/*.{cjs,mjs}",
-        "electron/main.cjs",
-        "electron/preload.js",
-        "vitest.config.ts",
-        "vitest.setup.ts",
-        "vite.config.ts"
-      ],
-      "project": [
-        "src/**/*.{ts,tsx}",
-        "electron/**/*.cjs",
-        "scripts/**/*.{cjs,mjs}"
-      ],
-      "ignoreBinaries": ["powershell"],
-      "ignoreDependencies": [
-        "@codemirror/theme-one-dark",
-        "@codemirror/view",
-        "@electron/notarize",
-        "@radix-ui/react-alert-dialog",
-        "@radix-ui/react-checkbox",
-        "@radix-ui/react-label",
-        "@radix-ui/react-popover",
-        "@radix-ui/react-scroll-area",
-        "@radix-ui/react-select",
-        "@radix-ui/react-slider",
-        "@radix-ui/react-slot",
-        "@radix-ui/react-switch",
-        "@radix-ui/react-tabs",
-        "@types/better-sqlite3",
-        "@types/cookie-parser",
-        "@types/cors",
-        "@types/express",
-        "@types/jsonwebtoken",
-        "@types/multer",
-        "@types/ssh2",
-        "@uiw/react-codemirror",
-        "@xterm/addon-clipboard",
-        "axios",
-        "bcryptjs",
-        "better-sqlite3",
-        "body-parser",
-        "chalk",
-        "class-variance-authority",
-        "clsx",
-        "cmdk",
-        "cookie-parser",
-        "cors",
-        "drizzle-orm",
-        "express",
-        "jsonwebtoken",
-        "multer",
-        "nanoid",
-        "i18next-browser-languagedetector",
-        "lucide-react",
-        "motion",
-        "radix-ui",
-        "socks",
-        "ssh2",
-        "undici",
-        "husky",
-        "sharp",
-        "sonner",
-        "tailwind-merge"
-      ]
-    },
-    "packages/plugin-sdk": {
-      "entry": ["src/*.ts", "src/testing/*.ts", "cli/**/*.mjs"],
-      "project": ["src/**/*.ts", "cli/**/*.mjs"]
-    },
-    "plugins/*": {
-      "entry": [
-        "src/backend/index.ts",
-        "src/frontend/index.{ts,tsx}",
-        "tests/**/*.{ts,tsx}",
-        "vitest.config.ts"
-      ],
-      "project": ["src/**/*.{ts,tsx}", "tests/**/*.{ts,tsx}"]
-    }
-  }
-}
diff --git a/package-lock.json b/package-lock.json
index 3e82d62c3..469a1fced 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,18 +1,18 @@
 {
   "name": "termix",
-  "version": "2.9.2",
+  "version": "26.10.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "termix",
-      "version": "2.9.2",
+      "version": "26.10.0",
       "hasInstallScript": true,
       "workspaces": [
-        "packages/*",
-        "plugins/*"
+        "packages/*"
       ],
       "dependencies": {
+        "@noble/hashes": "^2.4.0",
         "@tanstack/react-virtual": "^3.14.13",
         "@types/compression": "^1.8.1",
         "@types/semver": "^7.8.0",
@@ -39,6 +39,7 @@
         "sharp": "^0.35.4",
         "socks": "^2.8.10",
         "ssh2": "^1.17.0",
+        "sshpk": "^1.18.0",
         "tar": "^7.5.22",
         "undici": "^8.10.2",
         "ws": "^8.21.3"
@@ -83,6 +84,7 @@
         "@types/react": "^19.2.18",
         "@types/react-dom": "^19.2.4",
         "@types/ssh2": "^1.15.6",
+        "@types/sshpk": "^1.17.5",
         "@types/supertest": "^7.2.1",
         "@types/ws": "^8.18.1",
         "@uiw/react-codemirror": "^4.25.11",
@@ -93,7 +95,6 @@
         "class-variance-authority": "^0.7.1",
         "clsx": "^2.1.1",
         "cmdk": "^1.1.1",
-        "concurrently": "^10.0.5",
         "drizzle-kit": "^0.31.10",
         "electron": "^43.4.1",
         "electron-builder": "^26.15.3",
@@ -101,7 +102,7 @@
         "eslint-plugin-react-hooks": "^7.1.1",
         "eslint-plugin-react-refresh": "^0.5.7",
         "eslint-plugin-unused-imports": "^4.4.1",
-        "globals": "^17.11.0",
+        "globals": "^17.13.0",
         "husky": "^9.1.7",
         "i18next": "^26.4.2",
         "i18next-browser-languagedetector": "^8.2.1",
@@ -138,32 +139,10 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/@anthropic-ai/sdk": {
-      "version": "0.120.0",
-      "resolved": "https://registry.npmjs.org/@anthropic-ai/sdk/-/sdk-0.120.0.tgz",
-      "integrity": "sha512-ZlvmNFT/iIF6JD13rxbbMWD8nvGR0RaUp6yMQnoc+4Af0YjVVe/bIdW1XSQQsoxXAtg1NaT6Vak0LKFlJ4d37Q==",
-      "license": "MIT",
-      "dependencies": {
-        "json-schema-to-ts": "^3.1.1",
-        "standardwebhooks": "^1.0.0"
-      },
-      "bin": {
-        "anthropic-ai-sdk": "bin/cli"
-      },
-      "peerDependencies": {
-        "zod": "^3.25.0 || ^4.0.0"
-      },
-      "peerDependenciesMeta": {
-        "zod": {
-          "optional": true
-        }
-      }
-    },
     "node_modules/@apidevtools/json-schema-ref-parser": {
       "version": "14.0.1",
       "resolved": "https://registry.npmjs.org/@apidevtools/json-schema-ref-parser/-/json-schema-ref-parser-14.0.1.tgz",
       "integrity": "sha512-Oc96zvmxx1fqoSEdUmfmvvb59/KDOnUoJ7s2t7bISyAn0XEz57LCCw8k2Y4Pf3mwKaZLMciESALORLgfe2frCw==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@types/json-schema": "^7.0.15",
@@ -180,7 +159,6 @@
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/@apidevtools/openapi-schemas/-/openapi-schemas-2.1.0.tgz",
       "integrity": "sha512-Zc1AlqrJlX3SlpupFGpiLi2EbteyP7fXmUOGup6/DnkRgjP9bgMM/ag+n91rsv0U1Gpz0H3VILA/o3bW7Ua6BQ==",
-      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=10"
@@ -190,14 +168,12 @@
       "version": "3.0.2",
       "resolved": "https://registry.npmjs.org/@apidevtools/swagger-methods/-/swagger-methods-3.0.2.tgz",
       "integrity": "sha512-QAkD5kK2b1WfjDS/UQn/qQkbwF31uqRjPTrsCs5ZG9BQGAkjwvqGFjjPqAuzac/IYzpPtRzjCP1WrTuAIjMrXg==",
-      "dev": true,
       "license": "MIT"
     },
     "node_modules/@apidevtools/swagger-parser": {
       "version": "12.1.0",
       "resolved": "https://registry.npmjs.org/@apidevtools/swagger-parser/-/swagger-parser-12.1.0.tgz",
       "integrity": "sha512-e5mJoswsnAX0jG+J09xHFYQXb/bUc5S3pLpMxUuRUA2H8T2kni3yEoyz2R3Dltw5f4A6j6rPNMpWTK+iVDFlng==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@apidevtools/json-schema-ref-parser": "14.0.1",
@@ -480,6 +456,7 @@
       "version": "7.29.7",
       "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.29.7.tgz",
       "integrity": "sha512-Nq8OhGWiZIZGV6hLHoyAKLLcJihP/xFeBMGJoUrxTX2psI8dCifzLhZISFb+VWS3wFMRDmCGw5R+dOySCqPLhw==",
+      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=6.9.0"
@@ -584,6 +561,7 @@
       "version": "6.20.3",
       "resolved": "https://registry.npmjs.org/@codemirror/autocomplete/-/autocomplete-6.20.3.tgz",
       "integrity": "sha512-tlosUqb+3BbxCxZdu4tKeRghPFC+QM7q4X5YhKV2eCmPG+1r2F3f4AaSz5sCrFqUtX4Jh20VFTKecl16MgiV9g==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@codemirror/language": "^6.0.0",
@@ -596,6 +574,7 @@
       "version": "6.11.1",
       "resolved": "https://registry.npmjs.org/@codemirror/commands/-/commands-6.11.1.tgz",
       "integrity": "sha512-O/4hG3SC1YwcmQ0d2UVNDs+AsaNWd1iHVxbTeEBuqH+6bExAiPK3iS/BvpY6rZGURALv4ZD3sIgcCmRvw3ehBg==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@codemirror/language": "^6.0.0",
@@ -604,276 +583,11 @@
         "@lezer/common": "^1.1.0"
       }
     },
-    "node_modules/@codemirror/lang-cpp": {
-      "version": "6.0.3",
-      "resolved": "https://registry.npmjs.org/@codemirror/lang-cpp/-/lang-cpp-6.0.3.tgz",
-      "integrity": "sha512-URM26M3vunFFn9/sm6rzqrBzDgfWuDixp85uTY49wKudToc2jTHUrKIGGKs+QWND+YLofNNZpxcNGRynFJfvgA==",
-      "license": "MIT",
-      "dependencies": {
-        "@codemirror/language": "^6.0.0",
-        "@lezer/cpp": "^1.0.0"
-      }
-    },
-    "node_modules/@codemirror/lang-css": {
-      "version": "6.3.1",
-      "resolved": "https://registry.npmjs.org/@codemirror/lang-css/-/lang-css-6.3.1.tgz",
-      "integrity": "sha512-kr5fwBGiGtmz6l0LSJIbno9QrifNMUusivHbnA1H6Dmqy4HZFte3UAICix1VuKo0lMPKQr2rqB+0BkKi/S3Ejg==",
-      "license": "MIT",
-      "dependencies": {
-        "@codemirror/autocomplete": "^6.0.0",
-        "@codemirror/language": "^6.0.0",
-        "@codemirror/state": "^6.0.0",
-        "@lezer/common": "^1.0.2",
-        "@lezer/css": "^1.1.7"
-      }
-    },
-    "node_modules/@codemirror/lang-go": {
-      "version": "6.0.1",
-      "resolved": "https://registry.npmjs.org/@codemirror/lang-go/-/lang-go-6.0.1.tgz",
-      "integrity": "sha512-7fNvbyNylvqCphW9HD6WFnRpcDjr+KXX/FgqXy5H5ZS0eC5edDljukm/yNgYkwTsgp2busdod50AOTIy6Jikfg==",
-      "license": "MIT",
-      "dependencies": {
-        "@codemirror/autocomplete": "^6.0.0",
-        "@codemirror/language": "^6.6.0",
-        "@codemirror/state": "^6.0.0",
-        "@lezer/common": "^1.0.0",
-        "@lezer/go": "^1.0.0"
-      }
-    },
-    "node_modules/@codemirror/lang-html": {
-      "version": "6.4.12",
-      "resolved": "https://registry.npmjs.org/@codemirror/lang-html/-/lang-html-6.4.12.tgz",
-      "integrity": "sha512-pw2ReWKUqSkbvh76RAT4NYxiogRu+PWkR2ukAwO9uOgrm8uipkzjtKKtNpyeAQwHOqxEeSvAXZ6vr3AfyB9y/w==",
-      "license": "MIT",
-      "dependencies": {
-        "@codemirror/autocomplete": "^6.0.0",
-        "@codemirror/lang-css": "^6.0.0",
-        "@codemirror/lang-javascript": "^6.0.0",
-        "@codemirror/language": "^6.4.0",
-        "@codemirror/state": "^6.0.0",
-        "@codemirror/view": "^6.17.0",
-        "@lezer/common": "^1.0.0",
-        "@lezer/css": "^1.1.0",
-        "@lezer/html": "^1.3.12"
-      }
-    },
-    "node_modules/@codemirror/lang-java": {
-      "version": "6.0.2",
-      "resolved": "https://registry.npmjs.org/@codemirror/lang-java/-/lang-java-6.0.2.tgz",
-      "integrity": "sha512-m5Nt1mQ/cznJY7tMfQTJchmrjdjQ71IDs+55d1GAa8DGaB8JXWsVCkVT284C3RTASaY43YknrK2X3hPO/J3MOQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@codemirror/language": "^6.0.0",
-        "@lezer/java": "^1.0.0"
-      }
-    },
-    "node_modules/@codemirror/lang-javascript": {
-      "version": "6.2.5",
-      "resolved": "https://registry.npmjs.org/@codemirror/lang-javascript/-/lang-javascript-6.2.5.tgz",
-      "integrity": "sha512-zD4e5mS+50htS7F+TYjBPsiIFGanfVqg4HyUz6WNFikgOPf2BgKlx+TQedI1w6n/IqRBVBbBWmGFdLB/7uxO4A==",
-      "license": "MIT",
-      "dependencies": {
-        "@codemirror/autocomplete": "^6.0.0",
-        "@codemirror/language": "^6.6.0",
-        "@codemirror/lint": "^6.0.0",
-        "@codemirror/state": "^6.0.0",
-        "@codemirror/view": "^6.17.0",
-        "@lezer/common": "^1.0.0",
-        "@lezer/javascript": "^1.0.0"
-      }
-    },
-    "node_modules/@codemirror/lang-jinja": {
-      "version": "6.0.1",
-      "resolved": "https://registry.npmjs.org/@codemirror/lang-jinja/-/lang-jinja-6.0.1.tgz",
-      "integrity": "sha512-P5kyHLObzjtbGj16h+hyvZTxJhSjBEeSx4wMjbnAf3b0uwTy2+F0zGjMZL4PQOm/mh2eGZ5xUDVZXgwP783Nsw==",
-      "license": "MIT",
-      "dependencies": {
-        "@codemirror/autocomplete": "^6.0.0",
-        "@codemirror/lang-html": "^6.0.0",
-        "@codemirror/language": "^6.0.0",
-        "@codemirror/state": "^6.0.0",
-        "@codemirror/view": "^6.0.0",
-        "@lezer/common": "^1.2.0",
-        "@lezer/highlight": "^1.2.0",
-        "@lezer/lr": "^1.4.0"
-      }
-    },
-    "node_modules/@codemirror/lang-json": {
-      "version": "6.0.2",
-      "resolved": "https://registry.npmjs.org/@codemirror/lang-json/-/lang-json-6.0.2.tgz",
-      "integrity": "sha512-x2OtO+AvwEHrEwR0FyyPtfDUiloG3rnVTSZV1W8UteaLL8/MajQd8DpvUb2YVzC+/T18aSDv0H9mu+xw0EStoQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@codemirror/language": "^6.0.0",
-        "@lezer/json": "^1.0.0"
-      }
-    },
-    "node_modules/@codemirror/lang-less": {
-      "version": "6.0.2",
-      "resolved": "https://registry.npmjs.org/@codemirror/lang-less/-/lang-less-6.0.2.tgz",
-      "integrity": "sha512-EYdQTG22V+KUUk8Qq582g7FMnCZeEHsyuOJisHRft/mQ+ZSZ2w51NupvDUHiqtsOy7It5cHLPGfHQLpMh9bqpQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@codemirror/lang-css": "^6.2.0",
-        "@codemirror/language": "^6.0.0",
-        "@lezer/common": "^1.2.0",
-        "@lezer/highlight": "^1.0.0",
-        "@lezer/lr": "^1.0.0"
-      }
-    },
-    "node_modules/@codemirror/lang-liquid": {
-      "version": "6.3.3",
-      "resolved": "https://registry.npmjs.org/@codemirror/lang-liquid/-/lang-liquid-6.3.3.tgz",
-      "integrity": "sha512-U9EnyzWuAx1TX3MZSKDXydKH734n1Aogk/ijKdW+jdIwmbf9zSPQYOIKggC/b2PTRjQb7ddvMktmxnfTLuv/SQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@codemirror/autocomplete": "^6.0.0",
-        "@codemirror/lang-html": "^6.0.0",
-        "@codemirror/language": "^6.0.0",
-        "@codemirror/state": "^6.0.0",
-        "@codemirror/view": "^6.0.0",
-        "@lezer/common": "^1.0.0",
-        "@lezer/highlight": "^1.0.0",
-        "@lezer/lr": "^1.3.1"
-      }
-    },
-    "node_modules/@codemirror/lang-markdown": {
-      "version": "6.5.2",
-      "resolved": "https://registry.npmjs.org/@codemirror/lang-markdown/-/lang-markdown-6.5.2.tgz",
-      "integrity": "sha512-AwBOdkWYuA//WcM0xO5PfHPUcmz/O2i5o0Nsg1U69SII/loCJlFI1Romd9xp2HYb1kYJRGZotyqRghuHH5n8Kw==",
-      "license": "MIT",
-      "dependencies": {
-        "@codemirror/autocomplete": "^6.7.1",
-        "@codemirror/lang-html": "^6.0.0",
-        "@codemirror/language": "^6.3.0",
-        "@codemirror/state": "^6.0.0",
-        "@codemirror/view": "^6.0.0",
-        "@lezer/common": "^1.2.1",
-        "@lezer/markdown": "^1.0.0"
-      }
-    },
-    "node_modules/@codemirror/lang-php": {
-      "version": "6.0.2",
-      "resolved": "https://registry.npmjs.org/@codemirror/lang-php/-/lang-php-6.0.2.tgz",
-      "integrity": "sha512-ZKy2v1n8Fc8oEXj0Th0PUMXzQJ0AIR6TaZU+PbDHExFwdu+guzOA4jmCHS1Nz4vbFezwD7LyBdDnddSJeScMCA==",
-      "license": "MIT",
-      "dependencies": {
-        "@codemirror/lang-html": "^6.0.0",
-        "@codemirror/language": "^6.0.0",
-        "@codemirror/state": "^6.0.0",
-        "@lezer/common": "^1.0.0",
-        "@lezer/php": "^1.0.0"
-      }
-    },
-    "node_modules/@codemirror/lang-python": {
-      "version": "6.2.1",
-      "resolved": "https://registry.npmjs.org/@codemirror/lang-python/-/lang-python-6.2.1.tgz",
-      "integrity": "sha512-IRjC8RUBhn9mGR9ywecNhB51yePWCGgvHfY1lWN/Mrp3cKuHr0isDKia+9HnvhiWNnMpbGhWrkhuWOc09exRyw==",
-      "license": "MIT",
-      "dependencies": {
-        "@codemirror/autocomplete": "^6.3.2",
-        "@codemirror/language": "^6.8.0",
-        "@codemirror/state": "^6.0.0",
-        "@lezer/common": "^1.2.1",
-        "@lezer/python": "^1.1.4"
-      }
-    },
-    "node_modules/@codemirror/lang-rust": {
-      "version": "6.0.2",
-      "resolved": "https://registry.npmjs.org/@codemirror/lang-rust/-/lang-rust-6.0.2.tgz",
-      "integrity": "sha512-EZaGjCUegtiU7kSMvOfEZpaCReowEf3yNidYu7+vfuGTm9ow4mthAparY5hisJqOHmJowVH3Upu+eJlUji6qqA==",
-      "license": "MIT",
-      "dependencies": {
-        "@codemirror/language": "^6.0.0",
-        "@lezer/rust": "^1.0.0"
-      }
-    },
-    "node_modules/@codemirror/lang-sass": {
-      "version": "6.0.2",
-      "resolved": "https://registry.npmjs.org/@codemirror/lang-sass/-/lang-sass-6.0.2.tgz",
-      "integrity": "sha512-l/bdzIABvnTo1nzdY6U+kPAC51czYQcOErfzQ9zSm9D8GmNPD0WTW8st/CJwBTPLO8jlrbyvlSEcN20dc4iL0Q==",
-      "license": "MIT",
-      "dependencies": {
-        "@codemirror/lang-css": "^6.2.0",
-        "@codemirror/language": "^6.0.0",
-        "@codemirror/state": "^6.0.0",
-        "@lezer/common": "^1.0.2",
-        "@lezer/sass": "^1.0.0"
-      }
-    },
-    "node_modules/@codemirror/lang-sql": {
-      "version": "6.10.0",
-      "resolved": "https://registry.npmjs.org/@codemirror/lang-sql/-/lang-sql-6.10.0.tgz",
-      "integrity": "sha512-6ayPkEd/yRw0XKBx5uAiToSgGECo/GY2NoJIHXIIQh1EVwLuKoU8BP/qK0qH5NLXAbtJRLuT73hx7P9X34iO4w==",
-      "license": "MIT",
-      "dependencies": {
-        "@codemirror/autocomplete": "^6.0.0",
-        "@codemirror/language": "^6.0.0",
-        "@codemirror/state": "^6.0.0",
-        "@lezer/common": "^1.2.0",
-        "@lezer/highlight": "^1.0.0",
-        "@lezer/lr": "^1.0.0"
-      }
-    },
-    "node_modules/@codemirror/lang-vue": {
-      "version": "0.1.3",
-      "resolved": "https://registry.npmjs.org/@codemirror/lang-vue/-/lang-vue-0.1.3.tgz",
-      "integrity": "sha512-QSKdtYTDRhEHCfo5zOShzxCmqKJvgGrZwDQSdbvCRJ5pRLWBS7pD/8e/tH44aVQT6FKm0t6RVNoSUWHOI5vNug==",
-      "license": "MIT",
-      "dependencies": {
-        "@codemirror/lang-html": "^6.0.0",
-        "@codemirror/lang-javascript": "^6.1.2",
-        "@codemirror/language": "^6.0.0",
-        "@lezer/common": "^1.2.0",
-        "@lezer/highlight": "^1.0.0",
-        "@lezer/lr": "^1.3.1"
-      }
-    },
-    "node_modules/@codemirror/lang-wast": {
-      "version": "6.0.2",
-      "resolved": "https://registry.npmjs.org/@codemirror/lang-wast/-/lang-wast-6.0.2.tgz",
-      "integrity": "sha512-Imi2KTpVGm7TKuUkqyJ5NRmeFWF7aMpNiwHnLQe0x9kmrxElndyH0K6H/gXtWwY6UshMRAhpENsgfpSwsgmC6Q==",
-      "license": "MIT",
-      "dependencies": {
-        "@codemirror/language": "^6.0.0",
-        "@lezer/common": "^1.2.0",
-        "@lezer/highlight": "^1.0.0",
-        "@lezer/lr": "^1.0.0"
-      }
-    },
-    "node_modules/@codemirror/lang-xml": {
-      "version": "6.1.0",
-      "resolved": "https://registry.npmjs.org/@codemirror/lang-xml/-/lang-xml-6.1.0.tgz",
-      "integrity": "sha512-3z0blhicHLfwi2UgkZYRPioSgVTo9PV5GP5ducFH6FaHy0IAJRg+ixj5gTR1gnT/glAIC8xv4w2VL1LoZfs+Jg==",
-      "license": "MIT",
-      "dependencies": {
-        "@codemirror/autocomplete": "^6.0.0",
-        "@codemirror/language": "^6.4.0",
-        "@codemirror/state": "^6.0.0",
-        "@codemirror/view": "^6.0.0",
-        "@lezer/common": "^1.0.0",
-        "@lezer/xml": "^1.0.0"
-      }
-    },
-    "node_modules/@codemirror/lang-yaml": {
-      "version": "6.1.3",
-      "resolved": "https://registry.npmjs.org/@codemirror/lang-yaml/-/lang-yaml-6.1.3.tgz",
-      "integrity": "sha512-AZ8DJBuXGVHybpBQhmZtgew5//4hv3tdkXnr3vDmOUMJRuB6vn/uuwtmTOTlqEaQFg3hQSVeA90NmvIQyUV6FQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@codemirror/autocomplete": "^6.0.0",
-        "@codemirror/language": "^6.0.0",
-        "@codemirror/state": "^6.0.0",
-        "@lezer/common": "^1.2.0",
-        "@lezer/highlight": "^1.2.0",
-        "@lezer/lr": "^1.0.0",
-        "@lezer/yaml": "^1.0.0"
-      }
-    },
     "node_modules/@codemirror/language": {
       "version": "6.12.4",
       "resolved": "https://registry.npmjs.org/@codemirror/language/-/language-6.12.4.tgz",
       "integrity": "sha512-1q4PaT+o6PbgpkJt4Q8Fv5XJxTy4FUZ4MWETtyiDw3J0Pyr9E2vqcKL+k9wcvjNTIsauxvE7OfmWj3FRPHQ76A==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@codemirror/state": "^6.0.0",
@@ -884,19 +598,11 @@
         "style-mod": "^4.0.0"
       }
     },
-    "node_modules/@codemirror/legacy-modes": {
-      "version": "6.5.4",
-      "resolved": "https://registry.npmjs.org/@codemirror/legacy-modes/-/legacy-modes-6.5.4.tgz",
-      "integrity": "sha512-/cZr6qZyl08iYNLGsJ862CXXNI51LryRFRE40ejgoIjXZz0C1rGkD3/Ek5jM/8w1ceRjqtt4qx/KLMh4zBTgew==",
-      "license": "MIT",
-      "dependencies": {
-        "@codemirror/language": "^6.0.0"
-      }
-    },
     "node_modules/@codemirror/lint": {
       "version": "6.9.7",
       "resolved": "https://registry.npmjs.org/@codemirror/lint/-/lint-6.9.7.tgz",
       "integrity": "sha512-28/+iWLYxKxsvGYhSYL7zaCZqLz5+FFFDq9tVsvGv9kv8RY4fFAchJ5WX9M3YrrRlTIsECjsXPqeNgnSmNP2dg==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@codemirror/state": "^6.0.0",
@@ -908,6 +614,7 @@
       "version": "6.7.2",
       "resolved": "https://registry.npmjs.org/@codemirror/search/-/search-6.7.2.tgz",
       "integrity": "sha512-gUYkYhT2+n/+VGZ+8EzE5WFkYZUZYm1VOKDudIsNqh42uRVQJ0a6Yss9sdKT3MeOYfuL1N6AZA57oza0Oyr0LA==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@codemirror/state": "^6.0.0",
@@ -919,6 +626,7 @@
       "version": "6.7.6",
       "resolved": "https://registry.npmjs.org/@codemirror/state/-/state-6.7.6.tgz",
       "integrity": "sha512-kAz+AncRtKuIknedxT1bq4XwXv4UowhbkHU1myPrtVb/jZtImWuV5BXzv5vK6i3kYACsdiZiQKFQQ5Mq7elW8w==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@marijn/find-cluster-break": "^1.0.0"
@@ -928,6 +636,7 @@
       "version": "6.1.3",
       "resolved": "https://registry.npmjs.org/@codemirror/theme-one-dark/-/theme-one-dark-6.1.3.tgz",
       "integrity": "sha512-NzBdIvEJmx6fjeremiGp3t/okrLPYT0d9orIc7AFun8oZcRk58aejkqhv6spnz4MLAevrKNPMQYXEWMg4s+sKA==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@codemirror/language": "^6.0.0",
@@ -940,6 +649,7 @@
       "version": "6.43.13",
       "resolved": "https://registry.npmjs.org/@codemirror/view/-/view-6.43.13.tgz",
       "integrity": "sha512-sihaFrUzAsYBQsL9J2t69y8nfMQGwcYmggAZsk+kjPbjYZMyuf2hU8tUNTZ+P+isb6XRr8JE22TZlJxBoVdH1A==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@codemirror/state": "^6.7.0",
@@ -1380,7 +1090,6 @@
       "version": "8.2.0",
       "resolved": "https://registry.npmjs.org/@deadendjs/swagger-jsdoc/-/swagger-jsdoc-8.2.0.tgz",
       "integrity": "sha512-KwySDId/J0C/dlMGd77H3IN3nL7/HYVTerFp6DBhRnIY7RsbGGz30DBIyAhzhLDdqStW4wQHMP+/3qX8BQ1wTg==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@apidevtools/swagger-parser": "^12.1.0",
@@ -2371,12 +2080,6 @@
         "url": "https://github.com/sponsors/ayuhito"
       }
     },
-    "node_modules/@hexagon/base64": {
-      "version": "1.1.28",
-      "resolved": "https://registry.npmjs.org/@hexagon/base64/-/base64-1.1.28.tgz",
-      "integrity": "sha512-lhqDEAvWixy3bZ+UOYbPwUbBkwBq5C1LAJ/xPC8Oi+lL54oyakv/npbA0aU2hgCsx/1NUd4IBvV03+aUBWxerw==",
-      "license": "MIT"
-    },
     "node_modules/@humanfs/core": {
       "version": "0.19.2",
       "resolved": "https://registry.npmjs.org/@humanfs/core/-/core-0.19.2.tgz",
@@ -2443,27 +2146,6 @@
         "url": "https://github.com/sponsors/nzakas"
       }
     },
-    "node_modules/@iconify/react": {
-      "version": "5.2.1",
-      "resolved": "https://registry.npmjs.org/@iconify/react/-/react-5.2.1.tgz",
-      "integrity": "sha512-37GDR3fYDZmnmUn9RagyaX+zca24jfVOMY8E1IXTqJuE8pxNtN51KWPQe3VODOWvuUurq7q9uUu3CFrpqj5Iqg==",
-      "license": "MIT",
-      "dependencies": {
-        "@iconify/types": "^2.0.0"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/cyberalien"
-      },
-      "peerDependencies": {
-        "react": ">=16"
-      }
-    },
-    "node_modules/@iconify/types": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/@iconify/types/-/types-2.0.0.tgz",
-      "integrity": "sha512-+wluvCrRhXrhyOmRDJ3q8mux9JkKy5SJ/v8ol2tu4FVjyYvtEzkc/3pK15ET6RKg4b4w4BmTk1+gsCUhf21Ykg==",
-      "license": "MIT"
-    },
     "node_modules/@img/colour": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/@img/colour/-/colour-1.1.0.tgz",
@@ -3016,7 +2698,6 @@
       "version": "9.0.0",
       "resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-9.0.0.tgz",
       "integrity": "sha512-AokJm4tuBHillT+FpMtxQ60n8ObyXBatq7jD2/JA9dxbDDokKQm8KMht5ibGzLVU9IJDIKK4TPKgMHEYMn3lMg==",
-      "dev": true,
       "license": "BlueOak-1.0.0",
       "engines": {
         "node": ">=18"
@@ -3103,284 +2784,33 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/@ldapjs/asn1": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/@ldapjs/asn1/-/asn1-2.0.0.tgz",
-      "integrity": "sha512-G9+DkEOirNgdPmD0I8nu57ygQJKOOgFEMKknEuQvIHbGLwP3ny1mY+OTUYLCbCaGJP4sox5eYgBJRuSUpnAddA==",
-      "deprecated": "This package has been decomissioned. See https://github.com/ldapjs/node-ldapjs/blob/8ffd0bc9c149088a10ec4c1ec6a18450f76ad05d/README.md",
-      "license": "MIT"
-    },
-    "node_modules/@ldapjs/attribute": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/@ldapjs/attribute/-/attribute-1.0.0.tgz",
-      "integrity": "sha512-ptMl2d/5xJ0q+RgmnqOi3Zgwk/TMJYG7dYMC0Keko+yZU6n+oFM59MjQOUht5pxJeS4FWrImhu/LebX24vJNRQ==",
-      "deprecated": "This package has been decomissioned. See https://github.com/ldapjs/node-ldapjs/blob/8ffd0bc9c149088a10ec4c1ec6a18450f76ad05d/README.md",
-      "license": "MIT",
-      "dependencies": {
-        "@ldapjs/asn1": "2.0.0",
-        "@ldapjs/protocol": "^1.2.1",
-        "process-warning": "^2.1.0"
-      }
-    },
-    "node_modules/@ldapjs/change": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/@ldapjs/change/-/change-1.0.0.tgz",
-      "integrity": "sha512-EOQNFH1RIku3M1s0OAJOzGfAohuFYXFY4s73wOhRm4KFGhmQQ7MChOh2YtYu9Kwgvuq1B0xKciXVzHCGkB5V+Q==",
-      "deprecated": "This package has been decomissioned. See https://github.com/ldapjs/node-ldapjs/blob/8ffd0bc9c149088a10ec4c1ec6a18450f76ad05d/README.md",
-      "license": "MIT",
-      "dependencies": {
-        "@ldapjs/asn1": "2.0.0",
-        "@ldapjs/attribute": "1.0.0"
-      }
-    },
-    "node_modules/@ldapjs/controls": {
-      "version": "2.1.0",
-      "resolved": "https://registry.npmjs.org/@ldapjs/controls/-/controls-2.1.0.tgz",
-      "integrity": "sha512-2pFdD1yRC9V9hXfAWvCCO2RRWK9OdIEcJIos/9cCVP9O4k72BY1bLDQQ4KpUoJnl4y/JoD4iFgM+YWT3IfITWw==",
-      "deprecated": "This package has been decomissioned. See https://github.com/ldapjs/node-ldapjs/blob/8ffd0bc9c149088a10ec4c1ec6a18450f76ad05d/README.md",
-      "license": "MIT",
-      "dependencies": {
-        "@ldapjs/asn1": "^1.2.0",
-        "@ldapjs/protocol": "^1.2.1"
-      }
-    },
-    "node_modules/@ldapjs/controls/node_modules/@ldapjs/asn1": {
-      "version": "1.2.0",
-      "resolved": "https://registry.npmjs.org/@ldapjs/asn1/-/asn1-1.2.0.tgz",
-      "integrity": "sha512-KX/qQJ2xxzvO2/WOvr1UdQ+8P5dVvuOLk/C9b1bIkXxZss8BaR28njXdPgFCpj5aHaf1t8PmuVnea+N9YG9YMw==",
-      "deprecated": "This package has been decomissioned. See https://github.com/ldapjs/node-ldapjs/blob/8ffd0bc9c149088a10ec4c1ec6a18450f76ad05d/README.md",
-      "license": "MIT"
-    },
-    "node_modules/@ldapjs/dn": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/@ldapjs/dn/-/dn-1.1.0.tgz",
-      "integrity": "sha512-R72zH5ZeBj/Fujf/yBu78YzpJjJXG46YHFo5E4W1EqfNpo1UsVPqdLrRMXeKIsJT3x9dJVIfR6OpzgINlKpi0A==",
-      "deprecated": "This package has been decomissioned. See https://github.com/ldapjs/node-ldapjs/blob/8ffd0bc9c149088a10ec4c1ec6a18450f76ad05d/README.md",
-      "license": "MIT",
-      "dependencies": {
-        "@ldapjs/asn1": "2.0.0",
-        "process-warning": "^2.1.0"
-      }
-    },
-    "node_modules/@ldapjs/filter": {
-      "version": "2.1.1",
-      "resolved": "https://registry.npmjs.org/@ldapjs/filter/-/filter-2.1.1.tgz",
-      "integrity": "sha512-TwPK5eEgNdUO1ABPBUQabcZ+h9heDORE4V9WNZqCtYLKc06+6+UAJ3IAbr0L0bYTnkkWC/JEQD2F+zAFsuikNw==",
-      "deprecated": "This package has been decomissioned. See https://github.com/ldapjs/node-ldapjs/blob/8ffd0bc9c149088a10ec4c1ec6a18450f76ad05d/README.md",
-      "license": "MIT",
-      "dependencies": {
-        "@ldapjs/asn1": "2.0.0",
-        "@ldapjs/protocol": "^1.2.1",
-        "process-warning": "^2.1.0"
-      }
-    },
-    "node_modules/@ldapjs/messages": {
-      "version": "1.3.0",
-      "resolved": "https://registry.npmjs.org/@ldapjs/messages/-/messages-1.3.0.tgz",
-      "integrity": "sha512-K7xZpXJ21bj92jS35wtRbdcNrwmxAtPwy4myeh9duy/eR3xQKvikVycbdWVzkYEAVE5Ce520VXNOwCHjomjCZw==",
-      "deprecated": "This package has been decomissioned. See https://github.com/ldapjs/node-ldapjs/blob/8ffd0bc9c149088a10ec4c1ec6a18450f76ad05d/README.md",
-      "license": "MIT",
-      "dependencies": {
-        "@ldapjs/asn1": "^2.0.0",
-        "@ldapjs/attribute": "^1.0.0",
-        "@ldapjs/change": "^1.0.0",
-        "@ldapjs/controls": "^2.1.0",
-        "@ldapjs/dn": "^1.1.0",
-        "@ldapjs/filter": "^2.1.1",
-        "@ldapjs/protocol": "^1.2.1",
-        "process-warning": "^2.2.0"
-      }
-    },
-    "node_modules/@ldapjs/protocol": {
-      "version": "1.2.1",
-      "resolved": "https://registry.npmjs.org/@ldapjs/protocol/-/protocol-1.2.1.tgz",
-      "integrity": "sha512-O89xFDLW2gBoZWNXuXpBSM32/KealKCTb3JGtJdtUQc7RjAk8XzrRgyz02cPAwGKwKPxy0ivuC7UP9bmN87egQ==",
-      "deprecated": "This package has been decomissioned. See https://github.com/ldapjs/node-ldapjs/blob/8ffd0bc9c149088a10ec4c1ec6a18450f76ad05d/README.md",
-      "license": "MIT"
-    },
-    "node_modules/@levischuck/tiny-cbor": {
-      "version": "0.2.11",
-      "resolved": "https://registry.npmjs.org/@levischuck/tiny-cbor/-/tiny-cbor-0.2.11.tgz",
-      "integrity": "sha512-llBRm4dT4Z89aRsm6u2oEZ8tfwL/2l6BwpZ7JcyieouniDECM5AqNgr/y08zalEIvW3RSK4upYyybDcmjXqAow==",
-      "license": "MIT"
-    },
     "node_modules/@lezer/common": {
       "version": "1.5.3",
       "resolved": "https://registry.npmjs.org/@lezer/common/-/common-1.5.3.tgz",
       "integrity": "sha512-H0iErY4e43LpXbYDyBci5W4v/RwTgGV3YzYOlJPiGZ8RY8w51kVE+xLn1tg3Z6UmSfyETvtsUK3r7YsgDQEI7Q==",
+      "dev": true,
       "license": "MIT"
     },
-    "node_modules/@lezer/cpp": {
-      "version": "1.1.6",
-      "resolved": "https://registry.npmjs.org/@lezer/cpp/-/cpp-1.1.6.tgz",
-      "integrity": "sha512-vh9gWWJOXFVY8HBHK3Twzq8MgwG2iN4GSyzBP9sCGTe37P15x2R14VaBQk0VA0ezTRN1KHYBBsHhvpGZ2Xy/pA==",
-      "license": "MIT",
-      "dependencies": {
-        "@lezer/common": "^1.2.0",
-        "@lezer/highlight": "^1.0.0",
-        "@lezer/lr": "^1.0.0"
-      }
-    },
-    "node_modules/@lezer/css": {
-      "version": "1.3.8",
-      "resolved": "https://registry.npmjs.org/@lezer/css/-/css-1.3.8.tgz",
-      "integrity": "sha512-EJn1zcL9qoDptief6ipWKZKLiOpXkxSe0+t8CH9oiMVcZlq7NBWrjCqnc/41EIjeo/ITj1gFFiATdTkaJDL+Og==",
-      "license": "MIT",
-      "dependencies": {
-        "@lezer/common": "^1.2.0",
-        "@lezer/highlight": "^1.0.0",
-        "@lezer/lr": "^1.3.0"
-      }
-    },
-    "node_modules/@lezer/go": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/@lezer/go/-/go-1.0.1.tgz",
-      "integrity": "sha512-xToRsYxwsgJNHTgNdStpcvmbVuKxTapV0dM0wey1geMMRc9aggoVyKgzYp41D2/vVOx+Ii4hmE206kvxIXBVXQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@lezer/common": "^1.2.0",
-        "@lezer/highlight": "^1.0.0",
-        "@lezer/lr": "^1.3.0"
-      }
-    },
     "node_modules/@lezer/highlight": {
       "version": "1.2.5",
       "resolved": "https://registry.npmjs.org/@lezer/highlight/-/highlight-1.2.5.tgz",
       "integrity": "sha512-O1GMVKgtf5YspFaRzpmqkVgMtIk2HG9uMAbH6wdAIdNh3TVzCsch/+cRi+6l2//UGDKe6NB9BW3cvuR5ezMQ0w==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@lezer/common": "^1.3.0"
       }
     },
-    "node_modules/@lezer/html": {
-      "version": "1.3.13",
-      "resolved": "https://registry.npmjs.org/@lezer/html/-/html-1.3.13.tgz",
-      "integrity": "sha512-oI7n6NJml729m7pjm9lvLvmXbdoMoi2f+1pwSDJkl9d68zGr7a9Btz8NdHTGQZtW2DA25ybeuv/SyDb9D5tseg==",
-      "license": "MIT",
-      "dependencies": {
-        "@lezer/common": "^1.2.0",
-        "@lezer/highlight": "^1.0.0",
-        "@lezer/lr": "^1.0.0"
-      }
-    },
-    "node_modules/@lezer/java": {
-      "version": "1.1.4",
-      "resolved": "https://registry.npmjs.org/@lezer/java/-/java-1.1.4.tgz",
-      "integrity": "sha512-gQylJ2xHV2xXsVqtnAcJrcROvLZJaQiC0tR//+q0k961BxqvyYttusPkJ8d9T1fPDJKHJW2etUH8XbIn9jhVUg==",
-      "license": "MIT",
-      "dependencies": {
-        "@lezer/common": "^1.2.0",
-        "@lezer/highlight": "^1.0.0",
-        "@lezer/lr": "^1.0.0"
-      }
-    },
-    "node_modules/@lezer/javascript": {
-      "version": "1.5.5",
-      "resolved": "https://registry.npmjs.org/@lezer/javascript/-/javascript-1.5.5.tgz",
-      "integrity": "sha512-sWg4yX1J6XW67AaAynVt0iwF0M5c+np36TEu+P2ifAJ8haRYvHnWDV28r1jdwnJehWCwXECutAUy56K4RBZIyg==",
-      "license": "MIT",
-      "dependencies": {
-        "@lezer/common": "^1.2.0",
-        "@lezer/highlight": "^1.1.3",
-        "@lezer/lr": "^1.3.0"
-      }
-    },
-    "node_modules/@lezer/json": {
-      "version": "1.0.3",
-      "resolved": "https://registry.npmjs.org/@lezer/json/-/json-1.0.3.tgz",
-      "integrity": "sha512-BP9KzdF9Y35PDpv04r0VeSTKDeox5vVr3efE7eBbx3r4s3oNLfunchejZhjArmeieBH+nVOpgIiBJpEAv8ilqQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@lezer/common": "^1.2.0",
-        "@lezer/highlight": "^1.0.0",
-        "@lezer/lr": "^1.0.0"
-      }
-    },
     "node_modules/@lezer/lr": {
       "version": "1.4.10",
       "resolved": "https://registry.npmjs.org/@lezer/lr/-/lr-1.4.10.tgz",
       "integrity": "sha512-rnCpTIBafOx4mRp43xOxDJbFipJm/c0cia/V5TiGlhmMa+wsSdoGmUN3w5Bqrks/09Q/D4tNAmWaT8p6NRi77A==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@lezer/common": "^1.0.0"
       }
     },
-    "node_modules/@lezer/markdown": {
-      "version": "1.7.2",
-      "resolved": "https://registry.npmjs.org/@lezer/markdown/-/markdown-1.7.2.tgz",
-      "integrity": "sha512-iTkYvoVcKt3WkeL7qUDyXHONZEwLio4wj8KTNi2dnjQEXBZKMV63BpQrPqfsM+OkvuRbiSTAcycYAsQzLhRNoQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@lezer/common": "^1.5.0",
-        "@lezer/highlight": "^1.0.0"
-      }
-    },
-    "node_modules/@lezer/php": {
-      "version": "1.0.6",
-      "resolved": "https://registry.npmjs.org/@lezer/php/-/php-1.0.6.tgz",
-      "integrity": "sha512-QJ2xNXPmsm/Z3IpThq8fnJrEIVpxhsIoj6GZBW0JYEd/l9zxpJZW216X4fzqQY4vgpdGIumypvI4uQjd4tnYtw==",
-      "license": "MIT",
-      "dependencies": {
-        "@lezer/common": "^1.2.0",
-        "@lezer/highlight": "^1.0.0",
-        "@lezer/lr": "^1.1.0"
-      }
-    },
-    "node_modules/@lezer/python": {
-      "version": "1.1.19",
-      "resolved": "https://registry.npmjs.org/@lezer/python/-/python-1.1.19.tgz",
-      "integrity": "sha512-MhQIURHRytsNzP/YXnqpYKW6la6voAH3kyplTOOiCdjyFY6cWWGFVmYVdHIPrElqSDf4iCDktQCockB9FxuhzQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@lezer/common": "^1.2.0",
-        "@lezer/highlight": "^1.0.0",
-        "@lezer/lr": "^1.0.0"
-      }
-    },
-    "node_modules/@lezer/rust": {
-      "version": "1.0.3",
-      "resolved": "https://registry.npmjs.org/@lezer/rust/-/rust-1.0.3.tgz",
-      "integrity": "sha512-XxErOjZzQ7yJt1agUT4fu9qQvESZ3acgoxpPaPTPOiUx+duCjaVAtZGFIgphkHxlN05djdVAIOy/wItShMEjqQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@lezer/common": "^1.2.0",
-        "@lezer/highlight": "^1.0.0",
-        "@lezer/lr": "^1.0.0"
-      }
-    },
-    "node_modules/@lezer/sass": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/@lezer/sass/-/sass-1.1.0.tgz",
-      "integrity": "sha512-3mMGdCTUZ/84ArHOuXWQr37pnf7f+Nw9ycPUeKX+wu19b7pSMcZGLbaXwvD2APMBDOGxPmpK/O6S1v1EvLoqgQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@lezer/common": "^1.2.0",
-        "@lezer/highlight": "^1.0.0",
-        "@lezer/lr": "^1.0.0"
-      }
-    },
-    "node_modules/@lezer/xml": {
-      "version": "1.0.6",
-      "resolved": "https://registry.npmjs.org/@lezer/xml/-/xml-1.0.6.tgz",
-      "integrity": "sha512-CdDwirL0OEaStFue/66ZmFSeppuL6Dwjlk8qk153mSQwiSH/Dlri4GNymrNWnUmPl2Um7QfV1FO9KFUyX3Twww==",
-      "license": "MIT",
-      "dependencies": {
-        "@lezer/common": "^1.2.0",
-        "@lezer/highlight": "^1.0.0",
-        "@lezer/lr": "^1.0.0"
-      }
-    },
-    "node_modules/@lezer/yaml": {
-      "version": "1.0.4",
-      "resolved": "https://registry.npmjs.org/@lezer/yaml/-/yaml-1.0.4.tgz",
-      "integrity": "sha512-2lrrHqxalACEbxIbsjhqGpSW8kWpUKuY6RHgnSAFZa6qK62wvnPxA8hGOwOoDbwHcOFs5M4o27mjGu+P7TvBmw==",
-      "license": "MIT",
-      "dependencies": {
-        "@lezer/common": "^1.2.0",
-        "@lezer/highlight": "^1.0.0",
-        "@lezer/lr": "^1.4.0"
-      }
-    },
     "node_modules/@malept/cross-spawn-promise": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/@malept/cross-spawn-promise/-/cross-spawn-promise-2.0.0.tgz",
@@ -3440,301 +2870,13 @@
       "version": "1.0.4",
       "resolved": "https://registry.npmjs.org/@marijn/find-cluster-break/-/find-cluster-break-1.0.4.tgz",
       "integrity": "sha512-Wy0V7+SGUjnF9/TkiM1hKVDPj7jKXduPNboMVtHTA8dySMURWqfg/JZ9E2Sq8JgSJmkl7k7Qe9FLeMSrSraWmQ==",
+      "dev": true,
       "license": "MIT"
     },
-    "node_modules/@monaco-editor/loader": {
-      "version": "1.7.0",
-      "resolved": "https://registry.npmjs.org/@monaco-editor/loader/-/loader-1.7.0.tgz",
-      "integrity": "sha512-gIwR1HrJrrx+vfyOhYmCZ0/JcWqG5kbfG7+d3f/C1LXk2EvzAbHSg3MQ5lO2sMlo9izoAZ04shohfKLVT6crVA==",
-      "license": "MIT",
-      "dependencies": {
-        "state-local": "^1.0.6"
-      }
-    },
-    "node_modules/@monaco-editor/react": {
-      "version": "4.7.0",
-      "resolved": "https://registry.npmjs.org/@monaco-editor/react/-/react-4.7.0.tgz",
-      "integrity": "sha512-cyzXQCtO47ydzxpQtCGSQGOC8Gk3ZUeBXFAxD+CWXYFo5OqZyZUonFl0DwUlTyAfRHntBfw2p3w4s9R6oe1eCA==",
-      "license": "MIT",
-      "dependencies": {
-        "@monaco-editor/loader": "^1.5.0"
-      },
-      "peerDependencies": {
-        "monaco-editor": ">= 0.25.0 < 1",
-        "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0",
-        "react-dom": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0"
-      }
-    },
-    "node_modules/@napi-rs/canvas": {
-      "version": "0.1.100",
-      "resolved": "https://registry.npmjs.org/@napi-rs/canvas/-/canvas-0.1.100.tgz",
-      "integrity": "sha512-xglYA6q3XO5P3BNJYxVZ1IV7DLVjp1Py6nwag88YntrS+3vKHyYcMqXVS4ZztJmwz2uGvz1FWhI/4LgbR5uQDA==",
-      "license": "MIT",
-      "optional": true,
-      "workspaces": [
-        "e2e/*"
-      ],
-      "engines": {
-        "node": ">= 10"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/Brooooooklyn"
-      },
-      "optionalDependencies": {
-        "@napi-rs/canvas-android-arm64": "0.1.100",
-        "@napi-rs/canvas-darwin-arm64": "0.1.100",
-        "@napi-rs/canvas-darwin-x64": "0.1.100",
-        "@napi-rs/canvas-linux-arm-gnueabihf": "0.1.100",
-        "@napi-rs/canvas-linux-arm64-gnu": "0.1.100",
-        "@napi-rs/canvas-linux-arm64-musl": "0.1.100",
-        "@napi-rs/canvas-linux-riscv64-gnu": "0.1.100",
-        "@napi-rs/canvas-linux-x64-gnu": "0.1.100",
-        "@napi-rs/canvas-linux-x64-musl": "0.1.100",
-        "@napi-rs/canvas-win32-arm64-msvc": "0.1.100",
-        "@napi-rs/canvas-win32-x64-msvc": "0.1.100"
-      }
-    },
-    "node_modules/@napi-rs/canvas-android-arm64": {
-      "version": "0.1.100",
-      "resolved": "https://registry.npmjs.org/@napi-rs/canvas-android-arm64/-/canvas-android-arm64-0.1.100.tgz",
-      "integrity": "sha512-hjhCKhntPv9+t4ckHymdx0phYNcVW+GKQR6Lzw2zE+pOVjOplSmtx9nNNknTjbEDLcuLZqA1y8ufKg1XfgftzQ==",
-      "cpu": [
-        "arm64"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "android"
-      ],
-      "engines": {
-        "node": ">= 10"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/Brooooooklyn"
-      }
-    },
-    "node_modules/@napi-rs/canvas-darwin-arm64": {
-      "version": "0.1.100",
-      "resolved": "https://registry.npmjs.org/@napi-rs/canvas-darwin-arm64/-/canvas-darwin-arm64-0.1.100.tgz",
-      "integrity": "sha512-2PcswRaC7Ly645DGt88///zuFDhJxJYdKAs1uU3mfk1atYkXufgcgLfBpk6Tm12nCQBaNt1wpybuPZ4qOhTo8A==",
-      "cpu": [
-        "arm64"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "darwin"
-      ],
-      "engines": {
-        "node": ">= 10"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/Brooooooklyn"
-      }
-    },
-    "node_modules/@napi-rs/canvas-darwin-x64": {
-      "version": "0.1.100",
-      "resolved": "https://registry.npmjs.org/@napi-rs/canvas-darwin-x64/-/canvas-darwin-x64-0.1.100.tgz",
-      "integrity": "sha512-ePNZtj7pNIva/siZMg+HmbeozkIjqUIYdoymH8HaA3qK7LfzFN4WMBM8G6HQ9ZC+H3+Dnn5pqtiXpgLykaPOhw==",
-      "cpu": [
-        "x64"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "darwin"
-      ],
-      "engines": {
-        "node": ">= 10"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/Brooooooklyn"
-      }
-    },
-    "node_modules/@napi-rs/canvas-linux-arm-gnueabihf": {
-      "version": "0.1.100",
-      "resolved": "https://registry.npmjs.org/@napi-rs/canvas-linux-arm-gnueabihf/-/canvas-linux-arm-gnueabihf-0.1.100.tgz",
-      "integrity": "sha512-d5cDB48oWFGU8/XPhUOFAlySgb/VAu7D+s8fi55K1Pcfg8aPplHWqMgibhVLU8ky7Pyg/fuiVLz4Nf3JrSTuUA==",
-      "cpu": [
-        "arm"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">= 10"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/Brooooooklyn"
-      }
-    },
-    "node_modules/@napi-rs/canvas-linux-arm64-gnu": {
-      "version": "0.1.100",
-      "resolved": "https://registry.npmjs.org/@napi-rs/canvas-linux-arm64-gnu/-/canvas-linux-arm64-gnu-0.1.100.tgz",
-      "integrity": "sha512-rDxgxRu69RvDlX/bh9o22DxLsGr8EqsNgotL9+RwQE1S0b0cqeatqsw6aW45mukm0B42DIAaAacKaYQ8cqS1nw==",
-      "cpu": [
-        "arm64"
-      ],
-      "libc": [
-        "glibc"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">= 10"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/Brooooooklyn"
-      }
-    },
-    "node_modules/@napi-rs/canvas-linux-arm64-musl": {
-      "version": "0.1.100",
-      "resolved": "https://registry.npmjs.org/@napi-rs/canvas-linux-arm64-musl/-/canvas-linux-arm64-musl-0.1.100.tgz",
-      "integrity": "sha512-K3mDW66N+xT2/V439u1alFANiBUjdEx2gLiNYnCmUsva5jZMxWTjafBYwTzYK+EMFMHrUoabuU+T1BIP5CgbYQ==",
-      "cpu": [
-        "arm64"
-      ],
-      "libc": [
-        "musl"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">= 10"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/Brooooooklyn"
-      }
-    },
-    "node_modules/@napi-rs/canvas-linux-riscv64-gnu": {
-      "version": "0.1.100",
-      "resolved": "https://registry.npmjs.org/@napi-rs/canvas-linux-riscv64-gnu/-/canvas-linux-riscv64-gnu-0.1.100.tgz",
-      "integrity": "sha512-mooqUBTIsccZpnoQC4NgrC1v6C1vof39etLNMnBwCY+p0gajWJvAHLGQ6g/gGyS5YrpDW+GefSN4+Cvcr08UWw==",
-      "cpu": [
-        "riscv64"
-      ],
-      "libc": [
-        "glibc"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">= 10"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/Brooooooklyn"
-      }
-    },
-    "node_modules/@napi-rs/canvas-linux-x64-gnu": {
-      "version": "0.1.100",
-      "resolved": "https://registry.npmjs.org/@napi-rs/canvas-linux-x64-gnu/-/canvas-linux-x64-gnu-0.1.100.tgz",
-      "integrity": "sha512-1eCvkDCazm7FFhsT7DfGOdSaHgZVK3bt/dSBl5EWHOWmnz+I7j8tPseJqqD81NF+MH21jKUK4wQSDjN0mdhnTg==",
-      "cpu": [
-        "x64"
-      ],
-      "libc": [
-        "glibc"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">= 10"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/Brooooooklyn"
-      }
-    },
-    "node_modules/@napi-rs/canvas-linux-x64-musl": {
-      "version": "0.1.100",
-      "resolved": "https://registry.npmjs.org/@napi-rs/canvas-linux-x64-musl/-/canvas-linux-x64-musl-0.1.100.tgz",
-      "integrity": "sha512-20arT6lnI19S68qNlii73TSEDbECNgzMz2EpldC1V3mZFuRkeujXkcebRk0LRJe9SEUAooYiLokfMViY8IX7yA==",
-      "cpu": [
-        "x64"
-      ],
-      "libc": [
-        "musl"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">= 10"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/Brooooooklyn"
-      }
-    },
-    "node_modules/@napi-rs/canvas-win32-arm64-msvc": {
-      "version": "0.1.100",
-      "resolved": "https://registry.npmjs.org/@napi-rs/canvas-win32-arm64-msvc/-/canvas-win32-arm64-msvc-0.1.100.tgz",
-      "integrity": "sha512-DZFFT1wIAg37LJw37yhMRFfjATd3vTQzjZ1Yki8u2vhO6Hi5VE6BVaGQ1aaDu7xb4iMErz+9EOwjpS7xcxFeBw==",
-      "cpu": [
-        "arm64"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "win32"
-      ],
-      "engines": {
-        "node": ">= 10"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/Brooooooklyn"
-      }
-    },
-    "node_modules/@napi-rs/canvas-win32-x64-msvc": {
-      "version": "0.1.100",
-      "resolved": "https://registry.npmjs.org/@napi-rs/canvas-win32-x64-msvc/-/canvas-win32-x64-msvc-0.1.100.tgz",
-      "integrity": "sha512-MyT1j3mHC2+Lu4pBi9mKyMJhtP6U7k7EldY7sj/uS5gJA65gTXt8MefJQXLJo5d/vZbuWmfxzkEUNc/urV3pHA==",
-      "cpu": [
-        "x64"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "win32"
-      ],
-      "engines": {
-        "node": ">= 10"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/Brooooooklyn"
-      }
-    },
     "node_modules/@noble/hashes": {
       "version": "2.4.0",
       "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-2.4.0.tgz",
       "integrity": "sha512-X5XaVWZIBCT7HHZGm5I7ZQXDwLG+bGXuSrMQAW+7Zvl87h1kmc1ZB1VSRJcpUfoUrGQp4Fkoxm5kZ+Ms+aW+eA==",
-      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">= 20.19.0"
@@ -3776,20 +2918,6 @@
         "url": "https://paulmillr.com/funding/"
       }
     },
-    "node_modules/@peculiar/asn1-android": {
-      "version": "2.10.0",
-      "resolved": "https://registry.npmjs.org/@peculiar/asn1-android/-/asn1-android-2.10.0.tgz",
-      "integrity": "sha512-IHKdYL5MRW76DOQCv2HSE/vUMOf2jqH4E7yhtQYe/xx+RxpPiXfkUdhex0N4/s5crsnXCGftRNzy4RJn1s6CZA==",
-      "license": "MIT",
-      "dependencies": {
-        "@peculiar/asn1-schema": "^2.10.0",
-        "asn1js": "^3.0.10",
-        "tslib": "^2.8.1"
-      },
-      "engines": {
-        "node": ">=14"
-      }
-    },
     "node_modules/@peculiar/asn1-asym-key": {
       "version": "2.10.0",
       "resolved": "https://registry.npmjs.org/@peculiar/asn1-asym-key/-/asn1-asym-key-2.10.0.tgz",
@@ -3811,6 +2939,7 @@
       "version": "2.10.0",
       "resolved": "https://registry.npmjs.org/@peculiar/asn1-cms/-/asn1-cms-2.10.0.tgz",
       "integrity": "sha512-CkX0H4NCIOMHOU3rh2xXZywinYZ/EnJlaOlJiGI0e5L4XjFqHf4iH30LMbXWChVppdA9ljbanjtzQFOhDNfTWg==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@peculiar/asn1-schema": "^2.10.0",
@@ -3827,6 +2956,7 @@
       "version": "2.10.0",
       "resolved": "https://registry.npmjs.org/@peculiar/asn1-csr/-/asn1-csr-2.10.0.tgz",
       "integrity": "sha512-jTPTr/9rxKM+niQLMF3jiAMb0lWHUhUHIuSOhdGCIfpB4FAQYf9SoiXOgxP8bS/68IB+bj+1OHvVnDVCQfVUZw==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@peculiar/asn1-schema": "^2.10.0",
@@ -3842,6 +2972,7 @@
       "version": "2.10.0",
       "resolved": "https://registry.npmjs.org/@peculiar/asn1-ecc/-/asn1-ecc-2.10.0.tgz",
       "integrity": "sha512-GFd3iOjFrWX+QWH2R2dO5QSJyyRGv9CIBKtRlGlPNCvb2RvmCbBDexe91MJgV76c69d998Xsa+CvuQ98seoiPg==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@peculiar/asn1-schema": "^2.10.0",
@@ -3857,6 +2988,7 @@
       "version": "2.10.0",
       "resolved": "https://registry.npmjs.org/@peculiar/asn1-pfx/-/asn1-pfx-2.10.0.tgz",
       "integrity": "sha512-1y3QK9ZH1IPleAMmRoJlPS10eGkAWnULETW8zDFNUK1ffqpG7zmDY+kYBMYQgwlcQZ2iitLm2z2EBP0xzRXpaA==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@peculiar/asn1-cms": "^2.10.0",
@@ -3874,6 +3006,7 @@
       "version": "2.10.0",
       "resolved": "https://registry.npmjs.org/@peculiar/asn1-pkcs8/-/asn1-pkcs8-2.10.0.tgz",
       "integrity": "sha512-Ri+BZT9bnwqlHWmhs7lvWjvJRxKev2hA2+4EbZajgeYWCbR8hyv0znF4DhsFouOhMj2nSDV/iGJ6DMQtwITnCw==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@peculiar/asn1-schema": "^2.10.0",
@@ -3889,6 +3022,7 @@
       "version": "2.10.0",
       "resolved": "https://registry.npmjs.org/@peculiar/asn1-pkcs9/-/asn1-pkcs9-2.10.0.tgz",
       "integrity": "sha512-XIXsbDQFezYk6fudczkuvawkRD4GNpISGCqfYhdkJlvcGF/RFknU+0DDJagOaJqBf+PdPzk4J9oMqDGcvfR9HQ==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@peculiar/asn1-cms": "^2.10.0",
@@ -3908,6 +3042,7 @@
       "version": "2.10.0",
       "resolved": "https://registry.npmjs.org/@peculiar/asn1-rsa/-/asn1-rsa-2.10.0.tgz",
       "integrity": "sha512-4Jvmwlh3gZAhNZ4/u7JSyLuce9hofOFZ4o3PYKAccCImGnyaT5CMym/ATgvAvqpOYFNW531oPZvJlEBhJy9VfA==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@peculiar/asn1-schema": "^2.10.0",
@@ -3923,6 +3058,7 @@
       "version": "2.10.0",
       "resolved": "https://registry.npmjs.org/@peculiar/asn1-schema/-/asn1-schema-2.10.0.tgz",
       "integrity": "sha512-GhokD41lV4gQrrLYm3wCkHfBOnJrnhDMgt4XeMW8gzfE1UdJqIuSwsE+ggf82XBjUXRJylcm+KIGQFa4utIVLw==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@peculiar/utils": "^2.0.2",
@@ -3937,6 +3073,7 @@
       "version": "2.10.0",
       "resolved": "https://registry.npmjs.org/@peculiar/asn1-x509/-/asn1-x509-2.10.0.tgz",
       "integrity": "sha512-ucNVg8+ANveTpMN3fy9lA2alryONdXc2A4cEG2hMniWbvQt+YOZoe8BI80YYNO8FBcuDY1qbDQ4uQGQVraHxGA==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@peculiar/asn1-schema": "^2.10.0",
@@ -3952,6 +3089,7 @@
       "version": "2.10.0",
       "resolved": "https://registry.npmjs.org/@peculiar/asn1-x509-attr/-/asn1-x509-attr-2.10.0.tgz",
       "integrity": "sha512-/85GtKOKmgvuSJNlaFfwGWNdRSZZ+hpF02NyM01XiCdzpaZONiBltDyfluFPvFx966CR+ZHNSG1jniwpy07oGg==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@peculiar/asn1-schema": "^2.10.0",
@@ -3997,6 +3135,7 @@
       "version": "2.0.3",
       "resolved": "https://registry.npmjs.org/@peculiar/utils/-/utils-2.0.3.tgz",
       "integrity": "sha512-+oL3HPFRIZ1St2K50lWCXiioIgSoxzz7R1J3uF6neO2yl1sgmpgY6XXJH4BdpoDkMWznQTeYF6oWNDZLCdQ4eQ==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "tslib": "^2.8.1"
@@ -5605,121 +4744,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/@redis/bloom": {
-      "version": "6.3.0",
-      "resolved": "https://registry.npmjs.org/@redis/bloom/-/bloom-6.3.0.tgz",
-      "integrity": "sha512-NQ5poYpZr0jv6zazN1cy6JY5kIipKFZ3R9GTL4kOUTX3a9YAfY29U8bsE4lWhVQEM+G4V0BXVC57mubIdDijeA==",
-      "license": "MIT",
-      "engines": {
-        "node": ">= 20.0.0"
-      },
-      "peerDependencies": {
-        "@redis/client": "^6.3.0"
-      }
-    },
-    "node_modules/@redis/client": {
-      "version": "6.3.0",
-      "resolved": "https://registry.npmjs.org/@redis/client/-/client-6.3.0.tgz",
-      "integrity": "sha512-fHrjwGCBvAANGi+TuRuwKi83sIOzgHr8eh+Uf48w3fSX7Hhrz174NrWqfJhAC2vnN0d/tfaZpdr6+o6JC3QHwg==",
-      "license": "MIT",
-      "engines": {
-        "node": ">= 20.0.0"
-      },
-      "peerDependencies": {
-        "@node-rs/xxhash": "^1.1.0",
-        "@opentelemetry/api": ">=1 <2"
-      },
-      "peerDependenciesMeta": {
-        "@node-rs/xxhash": {
-          "optional": true
-        },
-        "@opentelemetry/api": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/@redis/json": {
-      "version": "6.3.0",
-      "resolved": "https://registry.npmjs.org/@redis/json/-/json-6.3.0.tgz",
-      "integrity": "sha512-yt6vRfPBXtW/3qm53cF81TSQpLMjWdW4/2E9WQ2GgbvsKkuCKCFQIcMiKlil1ZMnezK+IQuS795xKU5psbaegw==",
-      "license": "MIT",
-      "engines": {
-        "node": ">= 20.0.0"
-      },
-      "peerDependencies": {
-        "@redis/client": "^6.3.0"
-      }
-    },
-    "node_modules/@redis/search": {
-      "version": "6.3.0",
-      "resolved": "https://registry.npmjs.org/@redis/search/-/search-6.3.0.tgz",
-      "integrity": "sha512-RPXAZmKjZZG7Tm7m1w9keFdXzbL91PiSHQBfQRe9xwW40jNsTRbG0FwhIz4QlHPU4gKDAsCy8IQHj4yZl4H9rw==",
-      "license": "MIT",
-      "engines": {
-        "node": ">= 20.0.0"
-      },
-      "peerDependencies": {
-        "@redis/client": "^6.3.0"
-      }
-    },
-    "node_modules/@redis/time-series": {
-      "version": "6.3.0",
-      "resolved": "https://registry.npmjs.org/@redis/time-series/-/time-series-6.3.0.tgz",
-      "integrity": "sha512-+fJOB8mN1z5WRakCJNh5lVdz1KqvHGSOistsKeitD24QsCtPwyRQXWC0iq6T/i/ubLE/YcguZqPm8F598MKk4A==",
-      "license": "MIT",
-      "engines": {
-        "node": ">= 20.0.0"
-      },
-      "peerDependencies": {
-        "@redis/client": "^6.3.0"
-      }
-    },
-    "node_modules/@replit/codemirror-lang-nix": {
-      "version": "6.0.1",
-      "resolved": "https://registry.npmjs.org/@replit/codemirror-lang-nix/-/codemirror-lang-nix-6.0.1.tgz",
-      "integrity": "sha512-lvzjoYn9nfJzBD5qdm3Ut6G3+Or2wEacYIDJ49h9+19WSChVnxv4ojf+rNmQ78ncuxIt/bfbMvDLMeMP0xze6g==",
-      "license": "MIT",
-      "peerDependencies": {
-        "@codemirror/autocomplete": "^6.0.0",
-        "@codemirror/language": "^6.0.0",
-        "@codemirror/state": "^6.0.0",
-        "@codemirror/view": "^6.0.0",
-        "@lezer/common": "^1.0.0",
-        "@lezer/highlight": "^1.0.0",
-        "@lezer/lr": "^1.0.0"
-      }
-    },
-    "node_modules/@replit/codemirror-lang-solidity": {
-      "version": "6.0.2",
-      "resolved": "https://registry.npmjs.org/@replit/codemirror-lang-solidity/-/codemirror-lang-solidity-6.0.2.tgz",
-      "integrity": "sha512-/dpTVH338KFV6SaDYYSadkB4bI/0B0QRF/bkt1XS3t3QtyR49mn6+2k0OUQhvt2ZSO7kt10J+OPilRAtgbmX0w==",
-      "license": "MIT",
-      "dependencies": {
-        "@lezer/highlight": "^1.2.0"
-      },
-      "peerDependencies": {
-        "@codemirror/language": "^6.0.0"
-      }
-    },
-    "node_modules/@replit/codemirror-lang-svelte": {
-      "version": "6.0.0",
-      "resolved": "https://registry.npmjs.org/@replit/codemirror-lang-svelte/-/codemirror-lang-svelte-6.0.0.tgz",
-      "integrity": "sha512-U2OqqgMM6jKelL0GNWbAmqlu1S078zZNoBqlJBW+retTc5M4Mha6/Y2cf4SVg6ddgloJvmcSpt4hHrVoM4ePRA==",
-      "license": "MIT",
-      "peerDependencies": {
-        "@codemirror/autocomplete": "^6.0.0",
-        "@codemirror/lang-css": "^6.0.1",
-        "@codemirror/lang-html": "^6.2.0",
-        "@codemirror/lang-javascript": "^6.1.1",
-        "@codemirror/language": "^6.0.0",
-        "@codemirror/state": "^6.0.0",
-        "@codemirror/view": "^6.0.0",
-        "@lezer/common": "^1.0.0",
-        "@lezer/highlight": "^1.0.0",
-        "@lezer/javascript": "^1.2.0",
-        "@lezer/lr": "^1.0.0"
-      }
-    },
     "node_modules/@rolldown/binding-android-arm-eabi": {
       "version": "1.2.12",
       "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm-eabi/-/binding-android-arm-eabi-1.2.12.tgz",
@@ -6307,59 +5331,6 @@
         "url": "https://ko-fi.com/dangreen"
       }
     },
-    "node_modules/@simplewebauthn/browser": {
-      "version": "13.3.0",
-      "resolved": "https://registry.npmjs.org/@simplewebauthn/browser/-/browser-13.3.0.tgz",
-      "integrity": "sha512-BE/UWv6FOToAdVk0EokzkqQQDOWtNydYlY6+OrmiZ5SCNmb41VehttboTetUM3T/fr6EAFYVXjz4My2wg230rQ==",
-      "license": "MIT"
-    },
-    "node_modules/@simplewebauthn/server": {
-      "version": "13.3.3",
-      "resolved": "https://registry.npmjs.org/@simplewebauthn/server/-/server-13.3.3.tgz",
-      "integrity": "sha512-LelX/lcy5cjc15A86i/aNxHhB5eU7dd20QsbP0VLAf9e38+SLlsnqCCyecx3xqfGofhmX05h1J9fKRYWxw+luA==",
-      "license": "MIT",
-      "dependencies": {
-        "@hexagon/base64": "^1.1.27",
-        "@levischuck/tiny-cbor": "^0.2.2",
-        "@peculiar/asn1-android": "^2.6.0",
-        "@peculiar/asn1-ecc": "^2.6.1",
-        "@peculiar/asn1-rsa": "^2.6.1",
-        "@peculiar/asn1-schema": "^2.6.0",
-        "@peculiar/asn1-x509": "^2.6.1",
-        "@peculiar/x509": "^1.14.3"
-      },
-      "engines": {
-        "node": ">=20.0.0"
-      }
-    },
-    "node_modules/@simplewebauthn/server/node_modules/@peculiar/x509": {
-      "version": "1.14.3",
-      "resolved": "https://registry.npmjs.org/@peculiar/x509/-/x509-1.14.3.tgz",
-      "integrity": "sha512-C2Xj8FZ0uHWeCXXqX5B4/gVFQmtSkiuOolzAgutjTfseNOHT3pUjljDZsTSxXFGgio54bCzVFqmEOUrIVk8RDA==",
-      "license": "MIT",
-      "dependencies": {
-        "@peculiar/asn1-cms": "^2.6.0",
-        "@peculiar/asn1-csr": "^2.6.0",
-        "@peculiar/asn1-ecc": "^2.6.0",
-        "@peculiar/asn1-pkcs9": "^2.6.0",
-        "@peculiar/asn1-rsa": "^2.6.0",
-        "@peculiar/asn1-schema": "^2.6.0",
-        "@peculiar/asn1-x509": "^2.6.0",
-        "pvtsutils": "^1.3.6",
-        "reflect-metadata": "^0.2.2",
-        "tslib": "^2.8.1",
-        "tsyringe": "^4.10.0"
-      },
-      "engines": {
-        "node": ">=20.0.0"
-      }
-    },
-    "node_modules/@stablelib/base64": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/@stablelib/base64/-/base64-1.0.1.tgz",
-      "integrity": "sha512-1bnPQqSxSuc3Ii6MhBysoWCg58j97aUjuCSZrGSmDxNqtytIi0k8utUenAwTZN4V5mXXYGsVUI9zeBqy+jBOSQ==",
-      "license": "MIT"
-    },
     "node_modules/@standard-schema/spec": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/@standard-schema/spec/-/spec-1.1.0.tgz",
@@ -6855,6 +5826,66 @@
         "node": ">=14.0.0"
       }
     },
+    "node_modules/@tailwindcss/oxide-wasm32-wasi/node_modules/@emnapi/core": {
+      "version": "1.11.1",
+      "inBundle": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "@emnapi/wasi-threads": "1.2.2",
+        "tslib": "^2.4.0"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-wasm32-wasi/node_modules/@emnapi/runtime": {
+      "version": "1.11.1",
+      "inBundle": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "tslib": "^2.4.0"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-wasm32-wasi/node_modules/@emnapi/wasi-threads": {
+      "version": "1.2.2",
+      "inBundle": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "tslib": "^2.4.0"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-wasm32-wasi/node_modules/@napi-rs/wasm-runtime": {
+      "version": "1.1.4",
+      "inBundle": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "@tybys/wasm-util": "^0.10.1"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/Brooooooklyn"
+      },
+      "peerDependencies": {
+        "@emnapi/core": "^1.7.1",
+        "@emnapi/runtime": "^1.7.1"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-wasm32-wasi/node_modules/@tybys/wasm-util": {
+      "version": "0.10.2",
+      "inBundle": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "tslib": "^2.4.0"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-wasm32-wasi/node_modules/tslib": {
+      "version": "2.8.1",
+      "inBundle": true,
+      "license": "0BSD",
+      "optional": true
+    },
     "node_modules/@tailwindcss/oxide-win32-arm64-msvc": {
       "version": "4.3.3",
       "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-win32-arm64-msvc/-/oxide-win32-arm64-msvc-4.3.3.tgz",
@@ -6929,143 +5960,7 @@
         "url": "https://github.com/sponsors/tannerlinsley"
       }
     },
-    "node_modules/@termix-plugin/acme-ssl": {
-      "resolved": "plugins/acme-ssl",
-      "link": true
-    },
-    "node_modules/@termix-plugin/ai": {
-      "resolved": "plugins/ai",
-      "link": true
-    },
-    "node_modules/@termix-plugin/alerts": {
-      "resolved": "plugins/alerts",
-      "link": true
-    },
-    "node_modules/@termix-plugin/automations": {
-      "resolved": "plugins/automations",
-      "link": true
-    },
-    "node_modules/@termix-plugin/docker": {
-      "resolved": "plugins/docker",
-      "link": true
-    },
-    "node_modules/@termix-plugin/file-manager": {
-      "resolved": "plugins/file-manager",
-      "link": true
-    },
-    "node_modules/@termix-plugin/fleets": {
-      "resolved": "plugins/fleets",
-      "link": true
-    },
-    "node_modules/@termix-plugin/homepage": {
-      "resolved": "plugins/homepage",
-      "link": true
-    },
-    "node_modules/@termix-plugin/host-metrics": {
-      "resolved": "plugins/host-metrics",
-      "link": true
-    },
-    "node_modules/@termix-plugin/ldap": {
-      "resolved": "plugins/ldap",
-      "link": true
-    },
-    "node_modules/@termix-plugin/network-topology": {
-      "resolved": "plugins/network-topology",
-      "link": true
-    },
-    "node_modules/@termix-plugin/opkssh": {
-      "resolved": "plugins/opkssh",
-      "link": true
-    },
-    "node_modules/@termix-plugin/proxmox": {
-      "resolved": "plugins/proxmox",
-      "link": true
-    },
-    "node_modules/@termix-plugin/remote-desktop": {
-      "resolved": "plugins/remote-desktop",
-      "link": true
-    },
-    "node_modules/@termix-plugin/secret-sources": {
-      "resolved": "plugins/secret-sources",
-      "link": true
-    },
-    "node_modules/@termix-plugin/serial": {
-      "resolved": "plugins/serial",
-      "link": true
-    },
-    "node_modules/@termix-plugin/session-recording": {
-      "resolved": "plugins/session-recording",
-      "link": true
-    },
-    "node_modules/@termix-plugin/session-sharing": {
-      "resolved": "plugins/session-sharing",
-      "link": true
-    },
-    "node_modules/@termix-plugin/snippets": {
-      "resolved": "plugins/snippets",
-      "link": true
-    },
-    "node_modules/@termix-plugin/ssh-terminal": {
-      "resolved": "plugins/ssh-terminal",
-      "link": true
-    },
-    "node_modules/@termix-plugin/sso": {
-      "resolved": "plugins/sso",
-      "link": true
-    },
-    "node_modules/@termix-plugin/step-ca": {
-      "resolved": "plugins/step-ca",
-      "link": true
-    },
-    "node_modules/@termix-plugin/tailscale": {
-      "resolved": "plugins/tailscale",
-      "link": true
-    },
-    "node_modules/@termix-plugin/telemetry": {
-      "resolved": "plugins/telemetry",
-      "link": true
-    },
-    "node_modules/@termix-plugin/termix-identity": {
-      "resolved": "plugins/termix-identity",
-      "link": true
-    },
-    "node_modules/@termix-plugin/tmux-monitor": {
-      "resolved": "plugins/tmux-monitor",
-      "link": true
-    },
-    "node_modules/@termix-plugin/totp": {
-      "resolved": "plugins/totp",
-      "link": true
-    },
-    "node_modules/@termix-plugin/tunnels": {
-      "resolved": "plugins/tunnels",
-      "link": true
-    },
-    "node_modules/@termix-plugin/vault": {
-      "resolved": "plugins/vault",
-      "link": true
-    },
-    "node_modules/@termix-plugin/wake-on-lan": {
-      "resolved": "plugins/wake-on-lan",
-      "link": true
-    },
-    "node_modules/@termix-plugin/warpgate": {
-      "resolved": "plugins/warpgate",
-      "link": true
-    },
-    "node_modules/@termix-plugin/web-endpoint": {
-      "resolved": "plugins/web-endpoint",
-      "link": true
-    },
-    "node_modules/@termix-plugin/webauthn": {
-      "resolved": "plugins/webauthn",
-      "link": true
-    },
-    "node_modules/@termix-plugin/workspaces": {
-      "resolved": "plugins/workspaces",
-      "link": true
-    },
-    "node_modules/@termix/plugin-sdk": {
+    "node_modules/@termix-ssh/plugin-sdk": {
       "resolved": "packages/plugin-sdk",
       "link": true
     },
@@ -7174,6 +6069,16 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@types/asn1": {
+      "version": "0.2.4",
+      "resolved": "https://registry.npmjs.org/@types/asn1/-/asn1-0.2.4.tgz",
+      "integrity": "sha512-V91DSJ2l0h0gRhVP4oBfBzRBN9lAbPUkGDMCnwedqPKX2d84aAMc9CulOvxdw1f7DfEYx99afab+Rsm3e52jhA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
     "node_modules/@types/better-sqlite3": {
       "version": "9.6.0",
       "resolved": "https://registry.npmjs.org/@types/better-sqlite3/-/better-sqlite3-9.6.0.tgz",
@@ -7255,6 +6160,7 @@
       "version": "4.1.13",
       "resolved": "https://registry.npmjs.org/@types/debug/-/debug-4.1.13.tgz",
       "integrity": "sha512-KSVgmQmzMwPlmtljOomayoR89W4FynCAi3E8PPs7vmDVPe84hT+vGPKkJfThkmXs0x0jAaa9U8uW8bbfyS2fWw==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@types/ms": "*"
@@ -7278,17 +6184,9 @@
       "version": "1.0.9",
       "resolved": "https://registry.npmjs.org/@types/estree/-/estree-1.0.9.tgz",
       "integrity": "sha512-GhdPgy1el4/ImP05X05Uw4cw2/M93BCUmnEvWZNStlCzEKME4Fkk+YpoA5OiHNQmoS7Cafb8Xa3Pya8m1Qrzeg==",
+      "dev": true,
       "license": "MIT"
     },
-    "node_modules/@types/estree-jsx": {
-      "version": "1.0.5",
-      "resolved": "https://registry.npmjs.org/@types/estree-jsx/-/estree-jsx-1.0.5.tgz",
-      "integrity": "sha512-52CcUVNFyfb1A2ALocQw/Dd1BQFNmSdkuC3BkZ6iqhdMfQz7JWOFRuJFloOzjk+6WijU56m9oKXFAXc7o3Towg==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/estree": "*"
-      }
-    },
     "node_modules/@types/express": {
       "version": "5.0.6",
       "resolved": "https://registry.npmjs.org/@types/express/-/express-5.0.6.tgz",
@@ -7322,15 +6220,6 @@
         "@types/node": "*"
       }
     },
-    "node_modules/@types/hast": {
-      "version": "3.0.5",
-      "resolved": "https://registry.npmjs.org/@types/hast/-/hast-3.0.5.tgz",
-      "integrity": "sha512-rp/ezSWaD1m44dPKICGhiskI13nVr7qTloFwDa/IYkhhf5nzwP+zIQcIJh3WIFSBOy/H1PzB40jPjMDksN4F+g==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/unist": "*"
-      }
-    },
     "node_modules/@types/http-errors": {
       "version": "2.0.5",
       "resolved": "https://registry.npmjs.org/@types/http-errors/-/http-errors-2.0.5.tgz",
@@ -7341,7 +6230,6 @@
       "version": "7.0.15",
       "resolved": "https://registry.npmjs.org/@types/json-schema/-/json-schema-7.0.15.tgz",
       "integrity": "sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA==",
-      "dev": true,
       "license": "MIT"
     },
     "node_modules/@types/jsonwebtoken": {
@@ -7355,15 +6243,6 @@
         "@types/node": "*"
       }
     },
-    "node_modules/@types/mdast": {
-      "version": "4.0.4",
-      "resolved": "https://registry.npmjs.org/@types/mdast/-/mdast-4.0.4.tgz",
-      "integrity": "sha512-kGaNbPh1k7AFzgpud/gMdvIm5xuECykRR+JnWKQno9TAXVa6WIVCGTPvYGekIDL4uwCZQSYbUxNBSb1aUo79oA==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/unist": "*"
-      }
-    },
     "node_modules/@types/methods": {
       "version": "1.1.4",
       "resolved": "https://registry.npmjs.org/@types/methods/-/methods-1.1.4.tgz",
@@ -7375,6 +6254,7 @@
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/@types/ms/-/ms-2.1.0.tgz",
       "integrity": "sha512-GsCCIZDE/p3i96vtEqx+7dBUGXrc7zeSK3wwPHIaRThS+9OhWIXRqzs4d6k1SVU8g91DrNRWxWUGhp5KXQb2VA==",
+      "dev": true,
       "license": "MIT"
     },
     "node_modules/@types/multer": {
@@ -7408,12 +6288,6 @@
         "pg-types": "^2.2.0"
       }
     },
-    "node_modules/@types/prismjs": {
-      "version": "1.26.6",
-      "resolved": "https://registry.npmjs.org/@types/prismjs/-/prismjs-1.26.6.tgz",
-      "integrity": "sha512-vqlvI7qlMvcCBbVe0AKAb4f97//Hy0EBTaiW8AalRnG/xAN5zOiWWyrNqNXeq8+KAuvRewjCVY1+IPxk4RdNYw==",
-      "license": "MIT"
-    },
     "node_modules/@types/qs": {
       "version": "6.15.1",
       "resolved": "https://registry.npmjs.org/@types/qs/-/qs-6.15.1.tgz",
@@ -7498,6 +6372,17 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@types/sshpk": {
+      "version": "1.17.5",
+      "resolved": "https://registry.npmjs.org/@types/sshpk/-/sshpk-1.17.5.tgz",
+      "integrity": "sha512-khJbOFAOnyLaqOoGIlDCF2ZghIb0jM1K1N0rRoKL0ObqUMwfkicu5zlJ5Wsp+Xn2EUduVwONXwsgbGk+COaCug==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/asn1": "*",
+        "@types/node": "*"
+      }
+    },
     "node_modules/@types/superagent": {
       "version": "8.1.11",
       "resolved": "https://registry.npmjs.org/@types/superagent/-/superagent-8.1.11.tgz",
@@ -7522,12 +6407,6 @@
         "@types/superagent": "^8.1.0"
       }
     },
-    "node_modules/@types/unist": {
-      "version": "3.0.3",
-      "resolved": "https://registry.npmjs.org/@types/unist/-/unist-3.0.3.tgz",
-      "integrity": "sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==",
-      "license": "MIT"
-    },
     "node_modules/@types/ws": {
       "version": "8.18.2",
       "resolved": "https://registry.npmjs.org/@types/ws/-/ws-8.18.2.tgz",
@@ -7772,6 +6651,7 @@
       "version": "4.25.12",
       "resolved": "https://registry.npmjs.org/@uiw/codemirror-extensions-basic-setup/-/codemirror-extensions-basic-setup-4.25.12.tgz",
       "integrity": "sha512-wR5lz7jbVcBGyiiLEObAmDikcc39KNqrrd4bdUhav85WZu48ttgnSf1YV+grHuMsj5l/WCw6u+r9ZuSfURJgiA==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@codemirror/autocomplete": "^6.0.0",
@@ -7795,50 +6675,11 @@
         "@codemirror/view": ">=6.0.0"
       }
     },
-    "node_modules/@uiw/codemirror-extensions-langs": {
-      "version": "4.25.12",
-      "resolved": "https://registry.npmjs.org/@uiw/codemirror-extensions-langs/-/codemirror-extensions-langs-4.25.12.tgz",
-      "integrity": "sha512-B6X8FNQv8+nE1oVQ2Vf/8pdzDhceEU0QFcN1GSh1MbKdSZTmbueLjGQxUu1owEPWv8SU7qCVtW4do4dY1UsF7Q==",
-      "license": "MIT",
-      "dependencies": {
-        "@codemirror/lang-cpp": "^6.0.0",
-        "@codemirror/lang-css": "^6.0.0",
-        "@codemirror/lang-go": "^6.0.0",
-        "@codemirror/lang-html": "^6.0.0",
-        "@codemirror/lang-java": "^6.0.0",
-        "@codemirror/lang-javascript": "^6.0.0",
-        "@codemirror/lang-jinja": "^6.0.0",
-        "@codemirror/lang-json": "^6.0.0",
-        "@codemirror/lang-less": "^6.0.0",
-        "@codemirror/lang-liquid": "^6.0.0",
-        "@codemirror/lang-markdown": "^6.0.0",
-        "@codemirror/lang-php": "^6.0.0",
-        "@codemirror/lang-python": "^6.0.0",
-        "@codemirror/lang-rust": "^6.0.0",
-        "@codemirror/lang-sass": "^6.0.0",
-        "@codemirror/lang-sql": "^6.0.0",
-        "@codemirror/lang-vue": "^0.1.0",
-        "@codemirror/lang-wast": "^6.0.0",
-        "@codemirror/lang-xml": "^6.0.0",
-        "@codemirror/lang-yaml": "^6.0.0",
-        "@codemirror/language": "^6.0.0",
-        "@codemirror/legacy-modes": "^6.0.0",
-        "@replit/codemirror-lang-nix": "^6.0.1",
-        "@replit/codemirror-lang-solidity": "^6.0.1",
-        "@replit/codemirror-lang-svelte": "^6.0.0",
-        "codemirror-lang-mermaid": "^0.5.0"
-      },
-      "funding": {
-        "url": "https://jaywcjlove.github.io/#/sponsor"
-      },
-      "peerDependencies": {
-        "@codemirror/language": ">=6.0.0"
-      }
-    },
     "node_modules/@uiw/react-codemirror": {
       "version": "4.25.12",
       "resolved": "https://registry.npmjs.org/@uiw/react-codemirror/-/react-codemirror-4.25.12.tgz",
       "integrity": "sha512-RE0Gj/QesD7/JWPnJREG8Kq8brGv2NAH17iUECcBrLkqXzzEAgsj/4Qqvz/OlK8XWKmzlsenLRkObT9H+gYQ0w==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@babel/runtime": "^7.18.6",
@@ -7861,12 +6702,6 @@
         "react-dom": ">=17.0.0"
       }
     },
-    "node_modules/@ungap/structured-clone": {
-      "version": "1.4.0",
-      "resolved": "https://registry.npmjs.org/@ungap/structured-clone/-/structured-clone-1.4.0.tgz",
-      "integrity": "sha512-1mEZtMKPM09vDmQt5y7YvmN2+DFTP7Tg0EWXdic8/C6VRnpb33e4ghisCIE3WZjsE2N8mf+QV1Zqh7ZFYLWInQ==",
-      "license": "ISC"
-    },
     "node_modules/@vitejs/plugin-react": {
       "version": "6.1.1",
       "resolved": "https://registry.npmjs.org/@vitejs/plugin-react/-/plugin-react-6.1.1.tgz",
@@ -8077,44 +6912,12 @@
       "version": "0.2.0",
       "resolved": "https://registry.npmjs.org/@xterm/addon-clipboard/-/addon-clipboard-0.2.0.tgz",
       "integrity": "sha512-Dl31BCtBhLaUEECUbEiVcCLvLBbaeGYdT7NofB8OJkGTD3MWgBsaLjXvfGAD4tQNHhm6mbKyYkR7XD8kiZsdNg==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "js-base64": "^3.7.5"
       }
     },
-    "node_modules/@xterm/addon-fit": {
-      "version": "0.11.0",
-      "resolved": "https://registry.npmjs.org/@xterm/addon-fit/-/addon-fit-0.11.0.tgz",
-      "integrity": "sha512-jYcgT6xtVYhnhgxh3QgYDnnNMYTcf8ElbxxFzX0IZo+vabQqSPAjC3c1wJrKB5E19VwQei89QCiZZP86DCPF7g==",
-      "license": "MIT"
-    },
-    "node_modules/@xterm/addon-search": {
-      "version": "0.16.0",
-      "resolved": "https://registry.npmjs.org/@xterm/addon-search/-/addon-search-0.16.0.tgz",
-      "integrity": "sha512-9OeuBFu0/uZJPu+9AHKY6g/w0Czyb/Ut0A5t79I4ULoU4IfU5BEpPFVGQxP4zTTMdfZEYkVIRYbHBX1xWwjeSA==",
-      "license": "MIT"
-    },
-    "node_modules/@xterm/addon-unicode11": {
-      "version": "0.9.0",
-      "resolved": "https://registry.npmjs.org/@xterm/addon-unicode11/-/addon-unicode11-0.9.0.tgz",
-      "integrity": "sha512-FxDnYcyuXhNl+XSqGZL/t0U9eiNb/q3EWT5rYkQT/zuig8Gz/VagnQANKHdDWFM2lTMk9ly0EFQxxxtZUoRetw==",
-      "license": "MIT"
-    },
-    "node_modules/@xterm/addon-web-links": {
-      "version": "0.12.0",
-      "resolved": "https://registry.npmjs.org/@xterm/addon-web-links/-/addon-web-links-0.12.0.tgz",
-      "integrity": "sha512-4Smom3RPyVp7ZMYOYDoC/9eGJJJqYhnPLGGqJ6wOBfB8VxPViJNSKdgRYb8NpaM6YSelEKbA2SStD7lGyqaobw==",
-      "license": "MIT"
-    },
-    "node_modules/@xterm/xterm": {
-      "version": "6.0.0",
-      "resolved": "https://registry.npmjs.org/@xterm/xterm/-/xterm-6.0.0.tgz",
-      "integrity": "sha512-TQwDdQGtwwDt+2cgKDLn0IRaSxYu1tSUjgKarSDkUM0ZNiSRXFpjxEsvc/Zgc5kq5omJ+V0a8/kIM2WD3sMOYg==",
-      "license": "MIT",
-      "workspaces": [
-        "addons/*"
-      ]
-    },
     "node_modules/abbrev": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/abbrev/-/abbrev-4.0.0.tgz",
@@ -8125,12 +6928,6 @@
         "node": "^20.17.0 || >=22.9.0"
       }
     },
-    "node_modules/abstract-logging": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/abstract-logging/-/abstract-logging-2.0.1.tgz",
-      "integrity": "sha512-2BjRTZxTPvheOvGbBslFSYOUkr+SjPtOnrLP33f+VIWLzezQpZcqVg7ja3L4dBXmzzgwT+a029jRx5PCi3JuiA==",
-      "license": "MIT"
-    },
     "node_modules/accepts": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/accepts/-/accepts-2.0.0.tgz",
@@ -8160,44 +6957,6 @@
         "url": "https://opencollective.com/express"
       }
     },
-    "node_modules/acme-client": {
-      "version": "5.4.0",
-      "resolved": "https://registry.npmjs.org/acme-client/-/acme-client-5.4.0.tgz",
-      "integrity": "sha512-mORqg60S8iML6XSmVjqjGHJkINrCGLMj2QvDmFzI9vIlv1RGlyjmw3nrzaINJjkNsYXC41XhhD5pfy7CtuGcbA==",
-      "license": "MIT",
-      "dependencies": {
-        "@peculiar/x509": "^1.11.0",
-        "asn1js": "^3.0.5",
-        "axios": "^1.7.2",
-        "debug": "^4.3.5",
-        "node-forge": "^1.3.1"
-      },
-      "engines": {
-        "node": ">= 16"
-      }
-    },
-    "node_modules/acme-client/node_modules/@peculiar/x509": {
-      "version": "1.14.3",
-      "resolved": "https://registry.npmjs.org/@peculiar/x509/-/x509-1.14.3.tgz",
-      "integrity": "sha512-C2Xj8FZ0uHWeCXXqX5B4/gVFQmtSkiuOolzAgutjTfseNOHT3pUjljDZsTSxXFGgio54bCzVFqmEOUrIVk8RDA==",
-      "license": "MIT",
-      "dependencies": {
-        "@peculiar/asn1-cms": "^2.6.0",
-        "@peculiar/asn1-csr": "^2.6.0",
-        "@peculiar/asn1-ecc": "^2.6.0",
-        "@peculiar/asn1-pkcs9": "^2.6.0",
-        "@peculiar/asn1-rsa": "^2.6.0",
-        "@peculiar/asn1-schema": "^2.6.0",
-        "@peculiar/asn1-x509": "^2.6.0",
-        "pvtsutils": "^1.3.6",
-        "reflect-metadata": "^0.2.2",
-        "tslib": "^2.8.1",
-        "tsyringe": "^4.10.0"
-      },
-      "engines": {
-        "node": ">=20.0.0"
-      }
-    },
     "node_modules/acorn": {
       "version": "8.18.0",
       "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.18.0.tgz",
@@ -8235,7 +6994,6 @@
       "version": "8.20.0",
       "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.20.0.tgz",
       "integrity": "sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
         "fast-deep-equal": "^3.1.3",
@@ -8252,7 +7010,6 @@
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/ajv-draft-04/-/ajv-draft-04-1.0.0.tgz",
       "integrity": "sha512-mv00Te6nmYbRp5DCwclxtt7yV/joXJPGS7nM+97GdxvuttCOfgI3K4U25zboyeX0O+myI8ERluxQe5wljMmVIw==",
-      "dev": true,
       "license": "MIT",
       "peerDependencies": {
         "ajv": "^8.5.0"
@@ -8267,6 +7024,7 @@
       "version": "5.0.1",
       "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz",
       "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==",
+      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=8"
@@ -8509,6 +7267,7 @@
       "version": "3.0.10",
       "resolved": "https://registry.npmjs.org/asn1js/-/asn1js-3.0.10.tgz",
       "integrity": "sha512-S2s3aOytiKdFRdulw2qPE51MzjzVOisppcVv7jVFR+Kw0kxwvFrDcYA0h7Ndqbmj0HkMIXYWaoj7fli8kgx1eg==",
+      "dev": true,
       "license": "BSD-3-Clause",
       "dependencies": {
         "pvtsutils": "^1.3.6",
@@ -8618,44 +7377,15 @@
         "proxy-from-env": "^2.1.0"
       }
     },
-    "node_modules/backoff": {
-      "version": "2.5.0",
-      "resolved": "https://registry.npmjs.org/backoff/-/backoff-2.5.0.tgz",
-      "integrity": "sha512-wC5ihrnUXmR2douXmXLCe5O3zg3GKIyvRi/hi58a/XyRxVI+3/yM0PYueQOZXPXQ9pxBislYkw+sF9b7C/RuMA==",
-      "license": "MIT",
-      "dependencies": {
-        "precond": "0.2"
-      },
-      "engines": {
-        "node": ">= 0.6"
-      }
-    },
-    "node_modules/bail": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/bail/-/bail-2.0.2.tgz",
-      "integrity": "sha512-0xO6mYd7JB2YesxDKplafRpsiOzPt9V02ddPCLbY1xYGPOX24NTyN50qnUxgCPcSoYMhKpAuBTjQoRZCAkUDRw==",
-      "license": "MIT",
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
     "node_modules/balanced-match": {
       "version": "4.0.4",
       "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz",
       "integrity": "sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==",
-      "dev": true,
       "license": "MIT",
       "engines": {
         "node": "18 || 20 || >=22"
       }
     },
-    "node_modules/base32.js": {
-      "version": "0.0.1",
-      "resolved": "https://registry.npmjs.org/base32.js/-/base32.js-0.0.1.tgz",
-      "integrity": "sha512-EGHIRiegFa62/SsA1J+Xs2tIzludPdzM064N9wjbiEgHnGnJ1V0WEpA4pEwCYT5nDvZk3ubf0shqaCS7k6xeUQ==",
-      "license": "MIT"
-    },
     "node_modules/base64-js": {
       "version": "1.5.1",
       "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz",
@@ -8765,7 +7495,6 @@
       "version": "5.0.12",
       "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.12.tgz",
       "integrity": "sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
         "balanced-match": "^4.0.2"
@@ -9007,7 +7736,6 @@
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/call-me-maybe/-/call-me-maybe-1.0.2.tgz",
       "integrity": "sha512-HpX65o1Hnr9HH25ojC1YGs7HCQLq0GCOibSaWER0eNpgJ/Z1MZv2mTc7+xh6WOPxbRVcmgbv4hGU+uSQ/2xFZQ==",
-      "dev": true,
       "license": "MIT"
     },
     "node_modules/callsites": {
@@ -9054,16 +7782,6 @@
       ],
       "license": "CC-BY-4.0"
     },
-    "node_modules/ccount": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/ccount/-/ccount-2.0.1.tgz",
-      "integrity": "sha512-eyrF0jiFpY+3drT6383f1qhkbGsLSifNAjA61IUjZjmLCWjItY6LB9ft9YhoDgwfmclB2zhu51Lc7+95b8NRAg==",
-      "license": "MIT",
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
     "node_modules/chai": {
       "version": "6.3.0",
       "resolved": "https://registry.npmjs.org/chai/-/chai-6.3.0.tgz",
@@ -9086,46 +7804,6 @@
         "url": "https://github.com/chalk/chalk?sponsor=1"
       }
     },
-    "node_modules/character-entities": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/character-entities/-/character-entities-2.0.2.tgz",
-      "integrity": "sha512-shx7oQ0Awen/BRIdkjkvz54PnEEI/EjwXDSIZp86/KKdbafHh1Df/RYGBhn4hbe2+uKC9FnT5UCEdyPz3ai9hQ==",
-      "license": "MIT",
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
-    "node_modules/character-entities-html4": {
-      "version": "2.1.0",
-      "resolved": "https://registry.npmjs.org/character-entities-html4/-/character-entities-html4-2.1.0.tgz",
-      "integrity": "sha512-1v7fgQRj6hnSwFpq1Eu0ynr/CDEw0rXo2B61qXrLNdHZmPKgb7fqS1a2JwF0rISo9q77jDI8VMEHoApn8qDoZA==",
-      "license": "MIT",
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
-    "node_modules/character-entities-legacy": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/character-entities-legacy/-/character-entities-legacy-3.0.0.tgz",
-      "integrity": "sha512-RpPp0asT/6ufRm//AJVwpViZbGM/MkjQFxJccQRHmISF/22NBtsHqAWmL+/pmkPWoIUJdWyeVleTl1wydHATVQ==",
-      "license": "MIT",
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
-    "node_modules/character-reference-invalid": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/character-reference-invalid/-/character-reference-invalid-2.0.1.tgz",
-      "integrity": "sha512-iBZ4F4wRbyORVsu0jPV7gXkOsGYjGHPmAyv+HiHG8gi5PtC9KI2j1+v8/tlibRvjoWX027ypmG/n0HtO5t7unw==",
-      "license": "MIT",
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
     "node_modules/chownr": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/chownr/-/chownr-3.0.0.tgz",
@@ -9208,6 +7886,7 @@
       "version": "2.1.1",
       "resolved": "https://registry.npmjs.org/clsx/-/clsx-2.1.1.tgz",
       "integrity": "sha512-eYm0QWBtUrBWZWG0d386OGAw16Z995PiOVo2B7bjWSbHedGl5e0ZWaq65kOGgUSNesEIDkB9ISbTg/JK9dhCZA==",
+      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=6"
@@ -9234,6 +7913,7 @@
       "version": "6.0.2",
       "resolved": "https://registry.npmjs.org/codemirror/-/codemirror-6.0.2.tgz",
       "integrity": "sha512-VhydHotNW5w1UGK0Qj96BwSk/Zqbp9WbnyK2W/eVMv4QyF41INRGpjUhFJY7/uDNuudSc33a/PKr4iDqRduvHw==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@codemirror/autocomplete": "^6.0.0",
@@ -9245,21 +7925,11 @@
         "@codemirror/view": "^6.0.0"
       }
     },
-    "node_modules/codemirror-lang-mermaid": {
-      "version": "0.5.0",
-      "resolved": "https://registry.npmjs.org/codemirror-lang-mermaid/-/codemirror-lang-mermaid-0.5.0.tgz",
-      "integrity": "sha512-Taw/2gPCyNArQJCxIP/HSUif+3zrvD+6Ugt7KJZ2dUKou/8r3ZhcfG8krNTZfV2iu8AuGnymKuo7bLPFyqsh/A==",
-      "license": "MIT",
-      "dependencies": {
-        "@codemirror/language": "^6.9.0",
-        "@lezer/highlight": "^1.1.6",
-        "@lezer/lr": "^1.3.10"
-      }
-    },
     "node_modules/color-convert": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
       "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "color-name": "~1.1.4"
@@ -9272,6 +7942,7 @@
       "version": "1.1.4",
       "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz",
       "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==",
+      "dev": true,
       "license": "MIT"
     },
     "node_modules/combined-stream": {
@@ -9286,21 +7957,10 @@
         "node": ">= 0.8"
       }
     },
-    "node_modules/comma-separated-tokens": {
-      "version": "2.0.3",
-      "resolved": "https://registry.npmjs.org/comma-separated-tokens/-/comma-separated-tokens-2.0.3.tgz",
-      "integrity": "sha512-Fu4hJdvzeylCfQPp9SGWidpzrMs7tTrlu6Vb8XGaRGck8QSNZJJp538Wrb60Lax4fPwR64ViY468OIUTbRlGZg==",
-      "license": "MIT",
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
     "node_modules/commander": {
       "version": "14.0.3",
       "resolved": "https://registry.npmjs.org/commander/-/commander-14.0.3.tgz",
       "integrity": "sha512-H+y0Jo/T1RZ9qPP4Eh1pkcQcLRglraJaSLoyOtHxu6AapkjWVCy2Sit1QQ4x3Dng8qDlSsZEet7g5Pq06MvTgw==",
-      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=20"
@@ -9383,80 +8043,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/concurrently": {
-      "version": "10.0.5",
-      "resolved": "https://registry.npmjs.org/concurrently/-/concurrently-10.0.5.tgz",
-      "integrity": "sha512-JaP/CoftUrCcAFW/g//RbgEGwlelnEae6cfBLgH6ZdO6s8jPkn6p9SB9u6pdVxYXoiSnFqseOlHfrEfF82TVOg==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "chalk": "5.6.2",
-        "rxjs": "7.8.2",
-        "shell-quote": "1.9.0",
-        "supports-color": "10.2.2",
-        "tree-kill": "1.2.2",
-        "yargs": "18.0.0"
-      },
-      "bin": {
-        "conc": "dist/bin/index.js",
-        "concurrently": "dist/bin/index.js"
-      },
-      "engines": {
-        "node": ">=22"
-      },
-      "funding": {
-        "url": "https://github.com/open-cli-tools/concurrently?sponsor=1"
-      }
-    },
-    "node_modules/concurrently/node_modules/chalk": {
-      "version": "5.6.2",
-      "resolved": "https://registry.npmjs.org/chalk/-/chalk-5.6.2.tgz",
-      "integrity": "sha512-7NzBL0rN6fMUW+f7A6Io4h40qQlG+xGmtMxfbnH/K7TAtt8JQWVQK+6g0UXKMeVJoyV5EkkNsErQ8pVD3bLHbA==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": "^12.17.0 || ^14.13 || >=16.0.0"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/chalk?sponsor=1"
-      }
-    },
-    "node_modules/concurrently/node_modules/string-width": {
-      "version": "7.2.0",
-      "resolved": "https://registry.npmjs.org/string-width/-/string-width-7.2.0.tgz",
-      "integrity": "sha512-tsaTIkKW9b4N+AEj+SVA+WhJzV7/zMhcSu78mLKWSk7cXMOSHsBKFWUs0fWwq8QyK3MgJBQRX6Gbi4kYbdvGkQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "emoji-regex": "^10.3.0",
-        "get-east-asian-width": "^1.0.0",
-        "strip-ansi": "^7.1.0"
-      },
-      "engines": {
-        "node": ">=18"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
-    "node_modules/concurrently/node_modules/yargs": {
-      "version": "18.0.0",
-      "resolved": "https://registry.npmjs.org/yargs/-/yargs-18.0.0.tgz",
-      "integrity": "sha512-4UEqdc2RYGHZc7Doyqkrqiln3p9X2DZVxaGbwhn2pi7MrRagKaOcIKe8L3OxYcbhXLgLFUS3zAYuQjKBQgmuNg==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "cliui": "^9.0.1",
-        "escalade": "^3.1.1",
-        "get-caller-file": "^2.0.5",
-        "string-width": "^7.2.0",
-        "y18n": "^5.0.5",
-        "yargs-parser": "^22.0.0"
-      },
-      "engines": {
-        "node": "^20.19.0 || ^22.12.0 || >=23"
-      }
-    },
     "node_modules/content-disposition": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-1.1.0.tgz",
@@ -9572,6 +8158,7 @@
       "version": "1.0.3",
       "resolved": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz",
       "integrity": "sha512-ZQBvi1DcpJ4GDqanjucZ2Hj3wEO5pZDS89BWbkcrvdxksJorwUDDZamX9ldFkp9aw2lmBDLgkObEA4DWNJ9FYQ==",
+      "dev": true,
       "license": "MIT"
     },
     "node_modules/cors": {
@@ -9664,13 +8251,13 @@
       "version": "1.0.7",
       "resolved": "https://registry.npmjs.org/crelt/-/crelt-1.0.7.tgz",
       "integrity": "sha512-aK6BbWfhf4U/wCcLHKPJl/xa6VkVstRaPywWtMKGwuOLc/wZTyQYuoxgvZnNsBvv7Kg3YTBQYYBCggcviQczuA==",
+      "dev": true,
       "license": "MIT"
     },
     "node_modules/cross-spawn": {
       "version": "7.0.6",
       "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
       "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
         "path-key": "^3.1.0",
@@ -9709,11 +8296,14 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/cytoscape": {
-      "version": "3.34.3",
-      "resolved": "https://registry.npmjs.org/cytoscape/-/cytoscape-3.34.3.tgz",
-      "integrity": "sha512-yfYGhRcGAntq6YBD583j4n0Eg3jIxvWmZtz/5uz9UYkeIStSlMxuUja+ec5j3iBD8nv1rwaOAYMW09tBdkSeaQ==",
+    "node_modules/dashdash": {
+      "version": "1.14.1",
+      "resolved": "https://registry.npmjs.org/dashdash/-/dashdash-1.14.1.tgz",
+      "integrity": "sha512-jRFi8UDGo6j+odZiEpjazZaWqEal3w/basFjQHQEwVtZJGDpxbH1MeYluwCS8Xq5wmLJooDlMgvVarmWfGM44g==",
       "license": "MIT",
+      "dependencies": {
+        "assert-plus": "^1.0.0"
+      },
       "engines": {
         "node": ">=0.10"
       }
@@ -9764,15 +8354,6 @@
         }
       }
     },
-    "node_modules/decamelize": {
-      "version": "1.2.0",
-      "resolved": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz",
-      "integrity": "sha512-z2S+W9X73hAUUki+N+9Za2lBlun89zigOyGrsax+KUQ6wKW4ZoWpEYBkGhQjwAjjDCkWxhY0VKEhk8wzY7F5cA==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=0.10.0"
-      }
-    },
     "node_modules/decimal.js": {
       "version": "10.6.0",
       "resolved": "https://registry.npmjs.org/decimal.js/-/decimal.js-10.6.0.tgz",
@@ -9780,28 +8361,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/decode-named-character-reference": {
-      "version": "1.3.0",
-      "resolved": "https://registry.npmjs.org/decode-named-character-reference/-/decode-named-character-reference-1.3.0.tgz",
-      "integrity": "sha512-GtpQYB283KrPp6nRw50q3U9/VfOutZOe103qlN7BPP6Ad27xYnOIWv4lPzo8HCAL+mMZofJ9KEy30fq6MfaK6Q==",
-      "license": "MIT",
-      "dependencies": {
-        "character-entities": "^2.0.0"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
-    "node_modules/deep-extend": {
-      "version": "0.6.0",
-      "resolved": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.6.0.tgz",
-      "integrity": "sha512-LOHxIOaPYdHlJRtCQfDIVZtfw/ufM8+rVj649RIHzcm/vGwQRXFt6OPqIFWsm2XEMrNIEtWR64sY1LEKD2vAOA==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=4.0.0"
-      }
-    },
     "node_modules/deep-is": {
       "version": "0.1.4",
       "resolved": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.4.tgz",
@@ -9831,6 +8390,7 @@
       "version": "2.0.3",
       "resolved": "https://registry.npmjs.org/dequal/-/dequal-2.0.3.tgz",
       "integrity": "sha512-0je+qPKHEMohvfRTCEo3CrPG6cAzAYgmzKyxRiYSSDkS6eGJdyVJm7WaYA5ECaAD9wLB2T4EEeymA5aFVcYXCA==",
+      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=6"
@@ -9862,19 +8422,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/devlop": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/devlop/-/devlop-1.1.0.tgz",
-      "integrity": "sha512-RWmIqhcFf1lRYBvNmr7qTNuyCt/7/ns2jbpp1+PalgE/rDQcBT0fioSMUpJ93irlUhC5hrg4cYqe6U+0ImW0rA==",
-      "license": "MIT",
-      "dependencies": {
-        "dequal": "^2.0.0"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
     "node_modules/dezalgo": {
       "version": "1.0.4",
       "resolved": "https://registry.npmjs.org/dezalgo/-/dezalgo-1.0.4.tgz",
@@ -9886,12 +8433,6 @@
         "wrappy": "1"
       }
     },
-    "node_modules/dijkstrajs": {
-      "version": "1.0.3",
-      "resolved": "https://registry.npmjs.org/dijkstrajs/-/dijkstrajs-1.0.3.tgz",
-      "integrity": "sha512-qiSlmBq9+BCdCA/L46dw8Uy93mloxsPSbwnm5yrKn2vMPiy8KyAskTF6zuV/j5BMsmOGZDPs7KjU+mjb670kfA==",
-      "license": "MIT"
-    },
     "node_modules/dir-compare": {
       "version": "4.2.0",
       "resolved": "https://registry.npmjs.org/dir-compare/-/dir-compare-4.2.0.tgz",
@@ -10175,6 +8716,16 @@
         "readable-stream": "^2.0.2"
       }
     },
+    "node_modules/ecc-jsbn": {
+      "version": "0.1.2",
+      "resolved": "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz",
+      "integrity": "sha512-eh9O+hwRHNbG4BLTjEl3nw044CkGm5X6LoaCf7LPp7UU8Qrt47JYNi6nPX8xjW97TKGKm1ouctg0QSpZe9qrnw==",
+      "license": "MIT",
+      "dependencies": {
+        "jsbn": "~0.1.0",
+        "safer-buffer": "^2.1.0"
+      }
+    },
     "node_modules/ecdsa-sig-formatter": {
       "version": "1.0.11",
       "resolved": "https://registry.npmjs.org/ecdsa-sig-formatter/-/ecdsa-sig-formatter-1.0.11.tgz",
@@ -10901,16 +9452,6 @@
         "node": ">=4.0"
       }
     },
-    "node_modules/estree-util-is-identifier-name": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/estree-util-is-identifier-name/-/estree-util-is-identifier-name-3.0.0.tgz",
-      "integrity": "sha512-hFtqIDZTIUZ9BXLb8y4pYGyk6+wekIivNVTcmvk8NoOh+VeRn5y6cEHzbURrWbfp1fIqdVipilzj+lfaadNZmg==",
-      "license": "MIT",
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
     "node_modules/estree-walker": {
       "version": "3.0.3",
       "resolved": "https://registry.npmjs.org/estree-walker/-/estree-walker-3.0.3.tgz",
@@ -11018,26 +9559,10 @@
         "node": ">=6.6.0"
       }
     },
-    "node_modules/extend": {
-      "version": "3.0.2",
-      "resolved": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz",
-      "integrity": "sha512-fjquC59cD7CyW6urNXK0FBufkZcoiGG80wTuPujX590cB5Ttln20E2UB4S/WARVqhXffZl2LNgS+gQdPIIim/g==",
-      "license": "MIT"
-    },
-    "node_modules/extsprintf": {
-      "version": "1.4.1",
-      "resolved": "https://registry.npmjs.org/extsprintf/-/extsprintf-1.4.1.tgz",
-      "integrity": "sha512-Wrk35e8ydCKDj/ArClo1VrPVmN8zph5V4AtHwIuHhvMXsKf73UT3BOD+azBIW+3wOJ4FhEH7zyaJCFvChjYvMA==",
-      "engines": [
-        "node >=0.6.0"
-      ],
-      "license": "MIT"
-    },
     "node_modules/fast-deep-equal": {
       "version": "3.1.3",
       "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
       "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==",
-      "dev": true,
       "license": "MIT"
     },
     "node_modules/fast-json-stable-stringify": {
@@ -11061,17 +9586,10 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/fast-sha256": {
-      "version": "1.3.0",
-      "resolved": "https://registry.npmjs.org/fast-sha256/-/fast-sha256-1.3.0.tgz",
-      "integrity": "sha512-n11RGP/lrWEFI/bWdygLxhI+pVeo1ZYIVwvvPkW7azl/rOy+F3HYRZ2K5zeE9mmkhQppyv9sQFx0JM9UabnpPQ==",
-      "license": "Unlicense"
-    },
     "node_modules/fast-uri": {
       "version": "3.1.8",
       "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.8.tgz",
       "integrity": "sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==",
-      "dev": true,
       "funding": [
         {
           "type": "github",
@@ -11084,19 +9602,6 @@
       ],
       "license": "BSD-3-Clause"
     },
-    "node_modules/fault": {
-      "version": "1.0.4",
-      "resolved": "https://registry.npmjs.org/fault/-/fault-1.0.4.tgz",
-      "integrity": "sha512-CJ0HCB5tL5fYTEA7ToAq5+kTwd++Borf1/bifxd9iT70QcXr4MRrO3Llf8Ifs70q+SJcGHFtnIE/Nw6giCtECA==",
-      "license": "MIT",
-      "dependencies": {
-        "format": "^0.2.0"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
     "node_modules/fdir": {
       "version": "6.5.0",
       "resolved": "https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz",
@@ -11253,7 +9758,6 @@
       "version": "3.3.1",
       "resolved": "https://registry.npmjs.org/foreground-child/-/foreground-child-3.3.1.tgz",
       "integrity": "sha512-gIXjKqtFuWEgzFRJA9WCQeSJLZDjgJUOMCMzxtvFq/37KojM1BFGufqsCy0r4qSQmYLsZYMeyRqzIWOMup03sw==",
-      "dev": true,
       "license": "ISC",
       "dependencies": {
         "cross-spawn": "^7.0.6",
@@ -11303,14 +9807,6 @@
         "node": ">= 0.6"
       }
     },
-    "node_modules/format": {
-      "version": "0.2.2",
-      "resolved": "https://registry.npmjs.org/format/-/format-0.2.2.tgz",
-      "integrity": "sha512-wzsgA6WOq+09wrU1tsJ09udeR/YZRaeArL9e1wPbFg3GG2yDnC2ldKpxs4xunpFF9DgqCqOIra3bc1HWrJ37Ww==",
-      "engines": {
-        "node": ">=0.4.x"
-      }
-    },
     "node_modules/formidable": {
       "version": "3.5.4",
       "resolved": "https://registry.npmjs.org/formidable/-/formidable-3.5.4.tgz",
@@ -11432,6 +9928,7 @@
       "version": "2.0.5",
       "resolved": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz",
       "integrity": "sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==",
+      "dev": true,
       "license": "ISC",
       "engines": {
         "node": "6.* || 8.* || >= 10.*"
@@ -11510,11 +10007,19 @@
         "url": "https://github.com/privatenumber/get-tsconfig?sponsor=1"
       }
     },
+    "node_modules/getpass": {
+      "version": "0.1.7",
+      "resolved": "https://registry.npmjs.org/getpass/-/getpass-0.1.7.tgz",
+      "integrity": "sha512-0fzj9JxOLfJ+XGLhR8ze3unN0KZCgZwiSSDz168VERjK8Wl8kVSdcu2kspd4s4wtAa1y/qrVRiAA0WclVsu0ng==",
+      "license": "MIT",
+      "dependencies": {
+        "assert-plus": "^1.0.0"
+      }
+    },
     "node_modules/glob": {
       "version": "12.0.0",
       "resolved": "https://registry.npmjs.org/glob/-/glob-12.0.0.tgz",
       "integrity": "sha512-5Qcll1z7IKgHr5g485ePDdHcNQY0k2dtv/bjYy0iuyGxQw2qSOiiXUXJ+AYQpg3HNoUMHqAruX478Jeev7UULw==",
-      "dev": true,
       "license": "BlueOak-1.0.0",
       "dependencies": {
         "foreground-child": "^3.3.1",
@@ -11564,9 +10069,9 @@
       }
     },
     "node_modules/globals": {
-      "version": "17.12.0",
-      "resolved": "https://registry.npmjs.org/globals/-/globals-17.12.0.tgz",
-      "integrity": "sha512-cezEd/DTyyht9cvSSURyygXPfy04GtWO/5e6ZPvH7fCtjKz9PYOmuawphw1Ctd1f6C+5JypXfGD7ahNMXvevBA==",
+      "version": "17.13.0",
+      "resolved": "https://registry.npmjs.org/globals/-/globals-17.13.0.tgz",
+      "integrity": "sha512-RwMTC61u7hrG3ZJMkZQOK4JLJrKS8QtoTii63EmWvFXHqycY9FObBJQCbsLxSO8kjKhWE5kV1GC+Vb1g3RI0Zg==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -11594,25 +10099,6 @@
       "integrity": "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==",
       "license": "ISC"
     },
-    "node_modules/guacamole-common-js": {
-      "version": "1.5.0",
-      "resolved": "https://registry.npmjs.org/guacamole-common-js/-/guacamole-common-js-1.5.0.tgz",
-      "integrity": "sha512-zxztif3GGhKbg1RgOqwmqot8kXgv2HmHFg1EvWwd4q7UfEKvBcYZ0f+7G8HzvU+FUxF0Psqm9Kl5vCbgfrRgJg==",
-      "license": "Apache 2.0"
-    },
-    "node_modules/guacamole-lite": {
-      "version": "1.2.0",
-      "resolved": "https://registry.npmjs.org/guacamole-lite/-/guacamole-lite-1.2.0.tgz",
-      "integrity": "sha512-NeSYgbT5s5rxF0SE/kzJsV5Gg0IvnqoTOCbNIUMl23z1+SshaVfLExpxrEXSGTG0cdvY5lfZC1fOAepYriaXGg==",
-      "license": "Apache-2.0",
-      "dependencies": {
-        "deep-extend": "^0.6.0",
-        "ws": "^8.15.1"
-      },
-      "engines": {
-        "node": ">=10.0.0"
-      }
-    },
     "node_modules/has-flag": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz",
@@ -11675,76 +10161,6 @@
         "node": ">= 0.4"
       }
     },
-    "node_modules/hast-util-parse-selector": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/hast-util-parse-selector/-/hast-util-parse-selector-4.0.0.tgz",
-      "integrity": "sha512-wkQCkSYoOGCRKERFWcxMVMOcYE2K1AaNLU8DXS9arxnLOUEWbOXKXiJUNzEpqZ3JOKpnha3jkFrumEjVliDe7A==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/hast": "^3.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/hast-util-to-jsx-runtime": {
-      "version": "2.3.6",
-      "resolved": "https://registry.npmjs.org/hast-util-to-jsx-runtime/-/hast-util-to-jsx-runtime-2.3.6.tgz",
-      "integrity": "sha512-zl6s8LwNyo1P9uw+XJGvZtdFF1GdAkOg8ujOw+4Pyb76874fLps4ueHXDhXWdk6YHQ6OgUtinliG7RsYvCbbBg==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/estree": "^1.0.0",
-        "@types/hast": "^3.0.0",
-        "@types/unist": "^3.0.0",
-        "comma-separated-tokens": "^2.0.0",
-        "devlop": "^1.0.0",
-        "estree-util-is-identifier-name": "^3.0.0",
-        "hast-util-whitespace": "^3.0.0",
-        "mdast-util-mdx-expression": "^2.0.0",
-        "mdast-util-mdx-jsx": "^3.0.0",
-        "mdast-util-mdxjs-esm": "^2.0.0",
-        "property-information": "^7.0.0",
-        "space-separated-tokens": "^2.0.0",
-        "style-to-js": "^1.0.0",
-        "unist-util-position": "^5.0.0",
-        "vfile-message": "^4.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/hast-util-whitespace": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/hast-util-whitespace/-/hast-util-whitespace-3.0.0.tgz",
-      "integrity": "sha512-88JUN06ipLwsnv+dVn+OIYOvAuvBMy/Qoi6O7mQHxdPXpjy+Cd6xRkWwux7DKO+4sYILtLBRIKgsdpS2gQc7qw==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/hast": "^3.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/hastscript": {
-      "version": "9.0.1",
-      "resolved": "https://registry.npmjs.org/hastscript/-/hastscript-9.0.1.tgz",
-      "integrity": "sha512-g7df9rMFX/SPi34tyGCyUBREQoKkapwdY/T04Qn9TDWfHhAYt4/I0gMVirzK5wEzeUqIjEB+LXC/ypb7Aqno5w==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/hast": "^3.0.0",
-        "comma-separated-tokens": "^2.0.0",
-        "hast-util-parse-selector": "^4.0.0",
-        "property-information": "^7.0.0",
-        "space-separated-tokens": "^2.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
     "node_modules/hermes-estree": {
       "version": "0.25.1",
       "resolved": "https://registry.npmjs.org/hermes-estree/-/hermes-estree-0.25.1.tgz",
@@ -11762,21 +10178,6 @@
         "hermes-estree": "0.25.1"
       }
     },
-    "node_modules/highlight.js": {
-      "version": "10.7.3",
-      "resolved": "https://registry.npmjs.org/highlight.js/-/highlight.js-10.7.3.tgz",
-      "integrity": "sha512-tzcUFauisWKNHaRkN4Wjl/ZA07gENAjFl3J/c480dprkGTg5EQstgaNFqBfUqCq54kZRIEcreTsAgF/m2quD7A==",
-      "license": "BSD-3-Clause",
-      "engines": {
-        "node": "*"
-      }
-    },
-    "node_modules/highlightjs-vue": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/highlightjs-vue/-/highlightjs-vue-1.0.0.tgz",
-      "integrity": "sha512-PDEfEF102G23vHmPhLyPboFCD+BkMGu+GuJe2d9/eH4FsCwvgBpnc9n0pGE+ffKdph38s6foEZiEjdgHdzp+IA==",
-      "license": "CC0-1.0"
-    },
     "node_modules/hookified": {
       "version": "1.15.1",
       "resolved": "https://registry.npmjs.org/hookified/-/hookified-1.15.1.tgz",
@@ -11847,16 +10248,6 @@
         "url": "https://locize.com"
       }
     },
-    "node_modules/html-url-attributes": {
-      "version": "3.0.1",
-      "resolved": "https://registry.npmjs.org/html-url-attributes/-/html-url-attributes-3.0.1.tgz",
-      "integrity": "sha512-ol6UPyBWqsrO6EJySPz2O7ZSr856WDrEzM5zMqp+FJJLGMW35cLYmmZnl0vztAZxRUoNZJFTCohfjuIJ8I4QBQ==",
-      "license": "MIT",
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
     "node_modules/http-errors": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz",
@@ -11997,12 +10388,6 @@
         "node": ">= 4"
       }
     },
-    "node_modules/immediate": {
-      "version": "3.0.6",
-      "resolved": "https://registry.npmjs.org/immediate/-/immediate-3.0.6.tgz",
-      "integrity": "sha512-XXOFtyqDjNDAQxVfYxuF7g9Il/IbWmmlQg2MYKOH8ExIT1qg6xc4zyS3HaEEATgs1btfzxq15ciUiY7gjSXRGQ==",
-      "license": "MIT"
-    },
     "node_modules/import-fresh": {
       "version": "3.3.1",
       "resolved": "https://registry.npmjs.org/import-fresh/-/import-fresh-3.3.1.tgz",
@@ -12066,12 +10451,6 @@
         "node": "^20.17.0 || >=22.9.0"
       }
     },
-    "node_modules/inline-style-parser": {
-      "version": "0.2.7",
-      "resolved": "https://registry.npmjs.org/inline-style-parser/-/inline-style-parser-0.2.7.tgz",
-      "integrity": "sha512-Nb2ctOyNR8DqQoR0OwRG95uNWIC0C1lCgf5Naz5H6Ji72KZ8OcFZLz2P5sNgwlyoJ8Yif11oMuYs5pBQa86csA==",
-      "license": "MIT"
-    },
     "node_modules/ip-address": {
       "version": "10.7.2",
       "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.2.tgz",
@@ -12090,30 +10469,6 @@
         "node": ">= 0.10"
       }
     },
-    "node_modules/is-alphabetical": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/is-alphabetical/-/is-alphabetical-2.0.1.tgz",
-      "integrity": "sha512-FWyyY60MeTNyeSRpkM2Iry0G9hpr7/9kD40mD/cGQEuilcZYS4okz8SN2Q6rLCJ8gbCt6fN+rC+6tMGS99LaxQ==",
-      "license": "MIT",
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
-    "node_modules/is-alphanumerical": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/is-alphanumerical/-/is-alphanumerical-2.0.1.tgz",
-      "integrity": "sha512-hmbYhX/9MUMF5uh7tOXyK/n0ZvWpad5caBA17GsC6vyuCqaWliRG5K1qS9inmUhEMaOBIW7/whAnSwveW/LtZw==",
-      "license": "MIT",
-      "dependencies": {
-        "is-alphabetical": "^2.0.0",
-        "is-decimal": "^2.0.0"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
     "node_modules/is-arrayish": {
       "version": "0.2.1",
       "resolved": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz",
@@ -12121,16 +10476,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/is-decimal": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/is-decimal/-/is-decimal-2.0.1.tgz",
-      "integrity": "sha512-AAB9hiomQs5DXWcRB1rqsxGUstbRroFOPPVAomNk/3XHR5JyEZChOyTWe2oayKnsSsr/kcGqF+z6yuH6HHpN0A==",
-      "license": "MIT",
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
     "node_modules/is-extglob": {
       "version": "2.1.1",
       "resolved": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz",
@@ -12145,6 +10490,7 @@
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz",
       "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==",
+      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=8"
@@ -12163,20 +10509,11 @@
         "node": ">=0.10.0"
       }
     },
-    "node_modules/is-hexadecimal": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/is-hexadecimal/-/is-hexadecimal-2.0.1.tgz",
-      "integrity": "sha512-DgZQp241c8oO6cA1SbTEWiXeoxV42vlcJxgH+B3hi1AiqqKruZR3ZGF8In3fj4+/y/7rHvlOZLZtgJ/4ttYGZg==",
-      "license": "MIT",
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
     "node_modules/is-plain-obj": {
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-4.1.0.tgz",
       "integrity": "sha512-+Pgi+vMuUNkJyExiMBt5IlFoMyKnr5zhJ4Uspz58WOhBF5QoIZkFyNHIbBAtHwzVAgk5RtndVNsDRN61/mmDqg==",
+      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=12"
@@ -12208,6 +10545,7 @@
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz",
       "integrity": "sha512-VLghIWNM6ELQzo7zwmcg0NmTVyWKYjvIeM83yjp0wRDTmUnrM678fQbcKBo6n2CJEF0szoG//ytg+TKla89ALQ==",
+      "dev": true,
       "license": "MIT"
     },
     "node_modules/isbinaryfile": {
@@ -12227,7 +10565,6 @@
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz",
       "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==",
-      "dev": true,
       "license": "ISC"
     },
     "node_modules/istanbul-lib-coverage": {
@@ -12286,7 +10623,6 @@
       "version": "4.2.3",
       "resolved": "https://registry.npmjs.org/jackspeak/-/jackspeak-4.2.3.tgz",
       "integrity": "sha512-ykkVRwrYvFm1nb2AJfKKYPr0emF6IiXDYUaFx4Zn9ZuIH7MrzEZ3sD5RlqGXNRpHtvUHJyOnCEFxOlNDtGo7wg==",
-      "dev": true,
       "license": "BlueOak-1.0.0",
       "dependencies": {
         "@isaacs/cliui": "^9.0.0"
@@ -12325,32 +10661,24 @@
         "jiti": "lib/jiti-cli.mjs"
       }
     },
-    "node_modules/jose": {
-      "version": "6.2.12",
-      "resolved": "https://registry.npmjs.org/jose/-/jose-6.2.12.tgz",
-      "integrity": "sha512-9NiFmJEex0sy2Dk58j2UGBSHgUs2ypF9eZSu4L6vjOX3Dp96Sw1F3uL+H+D1sx02jZZdzUT0HgvCy59CuvXcWw==",
-      "license": "MIT",
-      "funding": {
-        "url": "https://github.com/sponsors/panva"
-      }
-    },
     "node_modules/js-base64": {
       "version": "3.9.4",
       "resolved": "https://registry.npmjs.org/js-base64/-/js-base64-3.9.4.tgz",
       "integrity": "sha512-PtOMXpEGuP0RRiRXsjzHzl44dMHxSu2CPvAhinupR1tBa88me+1DPqsobl7eupn5UukjLkln1ZnAOAOXOrYG0Q==",
+      "dev": true,
       "license": "BSD-3-Clause"
     },
     "node_modules/js-tokens": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz",
       "integrity": "sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==",
+      "dev": true,
       "license": "MIT"
     },
     "node_modules/js-yaml": {
       "version": "4.3.2",
       "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.2.tgz",
       "integrity": "sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==",
-      "dev": true,
       "funding": [
         {
           "type": "github",
@@ -12369,6 +10697,12 @@
         "js-yaml": "bin/js-yaml.js"
       }
     },
+    "node_modules/jsbn": {
+      "version": "0.1.1",
+      "resolved": "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz",
+      "integrity": "sha512-UVU9dibq2JcFWxQPA6KCqj5O42VOmAY3zQUfEKxU0KpTGXwNoCjkX1e13eHNvw/xPynt6pU0rZ1htjWTNTSXsg==",
+      "license": "MIT"
+    },
     "node_modules/jsdom": {
       "version": "30.1.1",
       "resolved": "https://registry.npmjs.org/jsdom/-/jsdom-30.1.1.tgz",
@@ -12439,24 +10773,10 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/json-schema-to-ts": {
-      "version": "3.1.1",
-      "resolved": "https://registry.npmjs.org/json-schema-to-ts/-/json-schema-to-ts-3.1.1.tgz",
-      "integrity": "sha512-+DWg8jCJG2TEnpy7kOm/7/AxaYoaRbjVB4LFZLySZlWn8exGs3A4OLJR966cVvU26N7X9TWxl+Jsw7dzAqKT6g==",
-      "license": "MIT",
-      "dependencies": {
-        "@babel/runtime": "^7.18.3",
-        "ts-algebra": "^2.0.0"
-      },
-      "engines": {
-        "node": ">=16"
-      }
-    },
     "node_modules/json-schema-traverse": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz",
       "integrity": "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==",
-      "dev": true,
       "license": "MIT"
     },
     "node_modules/json-stable-stringify-without-jsonify": {
@@ -12514,18 +10834,6 @@
         "npm": ">=6"
       }
     },
-    "node_modules/jszip": {
-      "version": "3.10.2",
-      "resolved": "https://registry.npmjs.org/jszip/-/jszip-3.10.2.tgz",
-      "integrity": "sha512-3l+rb15IOWtUhU0H5MFqES/T6Kh7abYwjosBey/vD6hDt8zoEffkSC5Ws5SGtgVw3gBx2NEbhTeSW1+kWkpyTQ==",
-      "license": "(MIT OR GPL-3.0-or-later)",
-      "dependencies": {
-        "lie": "~3.3.0",
-        "pako": "~1.0.2",
-        "readable-stream": "~2.3.6",
-        "setimmediate": "^1.0.5"
-      }
-    },
     "node_modules/jwa": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/jwa/-/jwa-2.0.1.tgz",
@@ -12564,29 +10872,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/ldapjs": {
-      "version": "3.0.7",
-      "resolved": "https://registry.npmjs.org/ldapjs/-/ldapjs-3.0.7.tgz",
-      "integrity": "sha512-1ky+WrN+4CFMuoekUOv7Y1037XWdjKpu0xAPwSP+9KdvmV9PG+qOKlssDV6a+U32apwxdD3is/BZcWOYzN30cg==",
-      "deprecated": "This package has been decomissioned. See https://github.com/ldapjs/node-ldapjs/blob/8ffd0bc9c149088a10ec4c1ec6a18450f76ad05d/README.md",
-      "license": "MIT",
-      "dependencies": {
-        "@ldapjs/asn1": "^2.0.0",
-        "@ldapjs/attribute": "^1.0.0",
-        "@ldapjs/change": "^1.0.0",
-        "@ldapjs/controls": "^2.1.0",
-        "@ldapjs/dn": "^1.1.0",
-        "@ldapjs/filter": "^2.1.1",
-        "@ldapjs/messages": "^1.3.0",
-        "@ldapjs/protocol": "^1.2.1",
-        "abstract-logging": "^2.0.1",
-        "assert-plus": "^1.0.0",
-        "backoff": "^2.5.0",
-        "once": "^1.4.0",
-        "vasync": "^2.2.1",
-        "verror": "^1.10.1"
-      }
-    },
     "node_modules/levn": {
       "version": "0.4.1",
       "resolved": "https://registry.npmjs.org/levn/-/levn-0.4.1.tgz",
@@ -12601,15 +10886,6 @@
         "node": ">= 0.8.0"
       }
     },
-    "node_modules/lie": {
-      "version": "3.3.0",
-      "resolved": "https://registry.npmjs.org/lie/-/lie-3.3.0.tgz",
-      "integrity": "sha512-UaiMJzeWRlEujzAuw5LokY1L5ecNQYZKfmyZ9L7wDHb/p5etKaxXhohBcrw0EYby+G/NA52vRSN4N39dxHAIwQ==",
-      "license": "MIT",
-      "dependencies": {
-        "immediate": "~3.0.5"
-      }
-    },
     "node_modules/lightningcss": {
       "version": "1.32.0",
       "resolved": "https://registry.npmjs.org/lightningcss/-/lightningcss-1.32.0.tgz",
@@ -12990,28 +11266,6 @@
       "integrity": "sha512-mNAgZ1GmyNhD7AuqnTG3/VQ26o760+ZYBPKjPvugO8+nLbYfX6TVpJPseBvopbdY+qpZ/lKUnmEc1LeZYS3QAA==",
       "license": "Apache-2.0"
     },
-    "node_modules/longest-streak": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmjs.org/longest-streak/-/longest-streak-3.1.0.tgz",
-      "integrity": "sha512-9Ri+o0JYgehTaVBBDoMqIl8GXtbWg711O3srftcHhZ0dqnETqLaoIK0x17fUw9rFSlK/0NlsKe0Ahhyl5pXE2g==",
-      "license": "MIT",
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
-    "node_modules/loose-envify": {
-      "version": "1.4.0",
-      "resolved": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",
-      "integrity": "sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",
-      "license": "MIT",
-      "dependencies": {
-        "js-tokens": "^3.0.0 || ^4.0.0"
-      },
-      "bin": {
-        "loose-envify": "cli.js"
-      }
-    },
     "node_modules/lower-case": {
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/lower-case/-/lower-case-2.0.2.tgz",
@@ -13022,20 +11276,6 @@
         "tslib": "^2.0.3"
       }
     },
-    "node_modules/lowlight": {
-      "version": "1.20.0",
-      "resolved": "https://registry.npmjs.org/lowlight/-/lowlight-1.20.0.tgz",
-      "integrity": "sha512-8Ktj+prEb1RoCPkEOrPMYUN/nCggB7qAWe3a7OpMjWQkh3l2RD5wKRQ+o8Q8YuI9RG/xs95waaI/E6ym/7NsTw==",
-      "license": "MIT",
-      "dependencies": {
-        "fault": "^1.0.0",
-        "highlight.js": "~10.7.0"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
     "node_modules/lru-cache": {
       "version": "5.1.1",
       "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-5.1.1.tgz",
@@ -13065,6 +11305,7 @@
       "version": "1.49.0",
       "resolved": "https://registry.npmjs.org/lucide-react/-/lucide-react-1.49.0.tgz",
       "integrity": "sha512-ApfaNM4/7jBrVopqLJ84Jz8TMQ1Q1JeZ1PmKh25aeS3E1FTVcMkSh1bEQB7dfzdIrwXRP8p3z4AJjTIHHb5IIA==",
+      "dev": true,
       "license": "ISC",
       "peerDependencies": {
         "@types/react": "*",
@@ -13107,15 +11348,6 @@
         "source-map-js": "^1.2.1"
       }
     },
-    "node_modules/make-cancellable-promise": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/make-cancellable-promise/-/make-cancellable-promise-2.0.0.tgz",
-      "integrity": "sha512-3SEQqTpV9oqVsIWqAcmDuaNeo7yBO3tqPtqGRcKkEo0lrzD3wqbKG9mkxO65KoOgXqj+zH2phJ2LiAsdzlogSw==",
-      "license": "MIT",
-      "funding": {
-        "url": "https://github.com/wojtekmaj/make-cancellable-promise?sponsor=1"
-      }
-    },
     "node_modules/make-dir": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/make-dir/-/make-dir-4.0.0.tgz",
@@ -13132,25 +11364,6 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/make-event-props": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/make-event-props/-/make-event-props-2.0.0.tgz",
-      "integrity": "sha512-G/hncXrl4Qt7mauJEXSg3AcdYzmpkIITTNl5I+rH9sog5Yw0kK6vseJjCaPfOXqOqQuPUP89Rkhfz5kPS8ijtw==",
-      "license": "MIT",
-      "funding": {
-        "url": "https://github.com/wojtekmaj/make-event-props?sponsor=1"
-      }
-    },
-    "node_modules/markdown-table": {
-      "version": "3.0.4",
-      "resolved": "https://registry.npmjs.org/markdown-table/-/markdown-table-3.0.4.tgz",
-      "integrity": "sha512-wiYz4+JrLyb/DqW2hkFJxP7Vd7JuTDm77fvbM8VfEQdmSMqcImWeeRbHwZjBjIFki/VaMK2BhFi7oUUZeM5bqw==",
-      "license": "MIT",
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
     "node_modules/math-intrinsics": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
@@ -13160,290 +11373,6 @@
         "node": ">= 0.4"
       }
     },
-    "node_modules/mdast-util-find-and-replace": {
-      "version": "3.0.2",
-      "resolved": "https://registry.npmjs.org/mdast-util-find-and-replace/-/mdast-util-find-and-replace-3.0.2.tgz",
-      "integrity": "sha512-Tmd1Vg/m3Xz43afeNxDIhWRtFZgM2VLyaf4vSTYwudTyeuTneoL3qtWMA5jeLyz/O1vDJmmV4QuScFCA2tBPwg==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/mdast": "^4.0.0",
-        "escape-string-regexp": "^5.0.0",
-        "unist-util-is": "^6.0.0",
-        "unist-util-visit-parents": "^6.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/mdast-util-find-and-replace/node_modules/escape-string-regexp": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-5.0.0.tgz",
-      "integrity": "sha512-/veY75JbMK4j1yjvuUxuVsiS/hr/4iHs9FTT6cgTexxdE0Ly/glccBAkloH/DofkjRbZU3bnoj38mOmhkZ0lHw==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
-    "node_modules/mdast-util-from-markdown": {
-      "version": "2.0.3",
-      "resolved": "https://registry.npmjs.org/mdast-util-from-markdown/-/mdast-util-from-markdown-2.0.3.tgz",
-      "integrity": "sha512-W4mAWTvSlKvf8L6J+VN9yLSqQ9AOAAvHuoDAmPkz4dHf553m5gVj2ejadHJhoJmcmxEnOv6Pa8XJhpxE93kb8Q==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/mdast": "^4.0.0",
-        "@types/unist": "^3.0.0",
-        "decode-named-character-reference": "^1.0.0",
-        "devlop": "^1.0.0",
-        "mdast-util-to-string": "^4.0.0",
-        "micromark": "^4.0.0",
-        "micromark-util-decode-numeric-character-reference": "^2.0.0",
-        "micromark-util-decode-string": "^2.0.0",
-        "micromark-util-normalize-identifier": "^2.0.0",
-        "micromark-util-symbol": "^2.0.0",
-        "micromark-util-types": "^2.0.0",
-        "unist-util-stringify-position": "^4.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/mdast-util-gfm": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmjs.org/mdast-util-gfm/-/mdast-util-gfm-3.1.0.tgz",
-      "integrity": "sha512-0ulfdQOM3ysHhCJ1p06l0b0VKlhU0wuQs3thxZQagjcjPrlFRqY215uZGHHJan9GEAXd9MbfPjFJz+qMkVR6zQ==",
-      "license": "MIT",
-      "dependencies": {
-        "mdast-util-from-markdown": "^2.0.0",
-        "mdast-util-gfm-autolink-literal": "^2.0.0",
-        "mdast-util-gfm-footnote": "^2.0.0",
-        "mdast-util-gfm-strikethrough": "^2.0.0",
-        "mdast-util-gfm-table": "^2.0.0",
-        "mdast-util-gfm-task-list-item": "^2.0.0",
-        "mdast-util-to-markdown": "^2.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/mdast-util-gfm-autolink-literal": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/mdast-util-gfm-autolink-literal/-/mdast-util-gfm-autolink-literal-2.0.1.tgz",
-      "integrity": "sha512-5HVP2MKaP6L+G6YaxPNjuL0BPrq9orG3TsrZ9YXbA3vDw/ACI4MEsnoDpn6ZNm7GnZgtAcONJyPhOP8tNJQavQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/mdast": "^4.0.0",
-        "ccount": "^2.0.0",
-        "devlop": "^1.0.0",
-        "mdast-util-find-and-replace": "^3.0.0",
-        "micromark-util-character": "^2.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/mdast-util-gfm-footnote": {
-      "version": "2.1.0",
-      "resolved": "https://registry.npmjs.org/mdast-util-gfm-footnote/-/mdast-util-gfm-footnote-2.1.0.tgz",
-      "integrity": "sha512-sqpDWlsHn7Ac9GNZQMeUzPQSMzR6Wv0WKRNvQRg0KqHh02fpTz69Qc1QSseNX29bhz1ROIyNyxExfawVKTm1GQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/mdast": "^4.0.0",
-        "devlop": "^1.1.0",
-        "mdast-util-from-markdown": "^2.0.0",
-        "mdast-util-to-markdown": "^2.0.0",
-        "micromark-util-normalize-identifier": "^2.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/mdast-util-gfm-strikethrough": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/mdast-util-gfm-strikethrough/-/mdast-util-gfm-strikethrough-2.0.1.tgz",
-      "integrity": "sha512-OuJHqvr455pwu2OaOrir7dbzqs4jlWKOtlu9L6GjcIjjQwNyw02VntQsr/Ek6/A13vgnXfUhBekWRUP1OkNivw==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/mdast": "^4.0.0",
-        "mdast-util-from-markdown": "^2.0.0",
-        "mdast-util-to-markdown": "^2.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/mdast-util-gfm-table": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/mdast-util-gfm-table/-/mdast-util-gfm-table-2.0.0.tgz",
-      "integrity": "sha512-78UEvebzz/rJIxLvE7ZtDd/vIQ0RHv+3Mh5DR96p7cS7HsBhYIICDBCu8csTNWNO6tBWfqXPWekRuj2FNOGOZg==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/mdast": "^4.0.0",
-        "devlop": "^1.0.0",
-        "markdown-table": "^3.0.0",
-        "mdast-util-from-markdown": "^2.0.0",
-        "mdast-util-to-markdown": "^2.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/mdast-util-gfm-task-list-item": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/mdast-util-gfm-task-list-item/-/mdast-util-gfm-task-list-item-2.0.0.tgz",
-      "integrity": "sha512-IrtvNvjxC1o06taBAVJznEnkiHxLFTzgonUdy8hzFVeDun0uTjxxrRGVaNFqkU1wJR3RBPEfsxmU6jDWPofrTQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/mdast": "^4.0.0",
-        "devlop": "^1.0.0",
-        "mdast-util-from-markdown": "^2.0.0",
-        "mdast-util-to-markdown": "^2.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/mdast-util-mdx-expression": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/mdast-util-mdx-expression/-/mdast-util-mdx-expression-2.0.1.tgz",
-      "integrity": "sha512-J6f+9hUp+ldTZqKRSg7Vw5V6MqjATc+3E4gf3CFNcuZNWD8XdyI6zQ8GqH7f8169MM6P7hMBRDVGnn7oHB9kXQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/estree-jsx": "^1.0.0",
-        "@types/hast": "^3.0.0",
-        "@types/mdast": "^4.0.0",
-        "devlop": "^1.0.0",
-        "mdast-util-from-markdown": "^2.0.0",
-        "mdast-util-to-markdown": "^2.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/mdast-util-mdx-jsx": {
-      "version": "3.2.0",
-      "resolved": "https://registry.npmjs.org/mdast-util-mdx-jsx/-/mdast-util-mdx-jsx-3.2.0.tgz",
-      "integrity": "sha512-lj/z8v0r6ZtsN/cGNNtemmmfoLAFZnjMbNyLzBafjzikOM+glrjNHPlf6lQDOTccj9n5b0PPihEBbhneMyGs1Q==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/estree-jsx": "^1.0.0",
-        "@types/hast": "^3.0.0",
-        "@types/mdast": "^4.0.0",
-        "@types/unist": "^3.0.0",
-        "ccount": "^2.0.0",
-        "devlop": "^1.1.0",
-        "mdast-util-from-markdown": "^2.0.0",
-        "mdast-util-to-markdown": "^2.0.0",
-        "parse-entities": "^4.0.0",
-        "stringify-entities": "^4.0.0",
-        "unist-util-stringify-position": "^4.0.0",
-        "vfile-message": "^4.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/mdast-util-mdxjs-esm": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/mdast-util-mdxjs-esm/-/mdast-util-mdxjs-esm-2.0.1.tgz",
-      "integrity": "sha512-EcmOpxsZ96CvlP03NghtH1EsLtr0n9Tm4lPUJUBccV9RwUOneqSycg19n5HGzCf+10LozMRSObtVr3ee1WoHtg==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/estree-jsx": "^1.0.0",
-        "@types/hast": "^3.0.0",
-        "@types/mdast": "^4.0.0",
-        "devlop": "^1.0.0",
-        "mdast-util-from-markdown": "^2.0.0",
-        "mdast-util-to-markdown": "^2.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/mdast-util-phrasing": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/mdast-util-phrasing/-/mdast-util-phrasing-4.1.0.tgz",
-      "integrity": "sha512-TqICwyvJJpBwvGAMZjj4J2n0X8QWp21b9l0o7eXyVJ25YNWYbJDVIyD1bZXE6WtV6RmKJVYmQAKWa0zWOABz2w==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/mdast": "^4.0.0",
-        "unist-util-is": "^6.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/mdast-util-to-hast": {
-      "version": "13.2.1",
-      "resolved": "https://registry.npmjs.org/mdast-util-to-hast/-/mdast-util-to-hast-13.2.1.tgz",
-      "integrity": "sha512-cctsq2wp5vTsLIcaymblUriiTcZd0CwWtCbLvrOzYCDZoWyMNV8sZ7krj09FSnsiJi3WVsHLM4k6Dq/yaPyCXA==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/hast": "^3.0.0",
-        "@types/mdast": "^4.0.0",
-        "@ungap/structured-clone": "^1.0.0",
-        "devlop": "^1.0.0",
-        "micromark-util-sanitize-uri": "^2.0.0",
-        "trim-lines": "^3.0.0",
-        "unist-util-position": "^5.0.0",
-        "unist-util-visit": "^5.0.0",
-        "vfile": "^6.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/mdast-util-to-markdown": {
-      "version": "2.1.3",
-      "resolved": "https://registry.npmjs.org/mdast-util-to-markdown/-/mdast-util-to-markdown-2.1.3.tgz",
-      "integrity": "sha512-wgyJtgUkUcdU7zci7uuwc/tzoAhm0TswWhaXuvnWolqug+8jY7bgNkBBL0dYBnHgc/tHL7lCzRdPsdUxUKKBqw==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/mdast": "^4.0.0",
-        "@types/unist": "^3.0.0",
-        "longest-streak": "^3.0.0",
-        "mdast-util-phrasing": "^4.0.0",
-        "mdast-util-to-string": "^4.0.0",
-        "micromark-util-character": "^2.0.0",
-        "micromark-util-classify-character": "^2.0.0",
-        "micromark-util-decode-string": "^2.0.0",
-        "micromark-util-html-tag-name": "^2.0.0",
-        "unist-util-visit": "^5.0.0",
-        "zwitch": "^2.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/mdast-util-to-string": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/mdast-util-to-string/-/mdast-util-to-string-4.0.0.tgz",
-      "integrity": "sha512-0H44vDimn51F0YwvxSJSm0eCDOJTRlmN0R1yBh4HLj9wiV1Dn0QoXGbvFAWj2hSItVTlCmBF1hqKlIyUBVFLPg==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/mdast": "^4.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
     "node_modules/mdn-data": {
       "version": "2.27.1",
       "resolved": "https://registry.npmjs.org/mdn-data/-/mdn-data-2.27.1.tgz",
@@ -13476,23 +11405,6 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/merge-refs": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/merge-refs/-/merge-refs-2.0.0.tgz",
-      "integrity": "sha512-3+B21mYK2IqUWnd2EivABLT7ueDhb0b8/dGK8LoFQPrU61YITeCMn14F7y7qZafWNZhUEKb24cJdiT5Wxs3prg==",
-      "license": "MIT",
-      "funding": {
-        "url": "https://github.com/wojtekmaj/merge-refs?sponsor=1"
-      },
-      "peerDependencies": {
-        "@types/react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        }
-      }
-    },
     "node_modules/methods": {
       "version": "1.1.2",
       "resolved": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz",
@@ -13503,590 +11415,6 @@
         "node": ">= 0.6"
       }
     },
-    "node_modules/micromark": {
-      "version": "4.0.3",
-      "resolved": "https://registry.npmjs.org/micromark/-/micromark-4.0.3.tgz",
-      "integrity": "sha512-oGYfQzHSG5dOMovQcJ3fyTmZlWAWpi0XA0sJwJs+i6OT88o1+Jtw/8z0CmdowSLxGhhFK89rQ/oXph/wN02PNw==",
-      "funding": [
-        {
-          "type": "GitHub Sponsors",
-          "url": "https://github.com/sponsors/unifiedjs"
-        },
-        {
-          "type": "OpenCollective",
-          "url": "https://opencollective.com/unified"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "@types/debug": "^4.0.0",
-        "debug": "^4.0.0",
-        "decode-named-character-reference": "^1.0.0",
-        "devlop": "^1.0.0",
-        "micromark-core-commonmark": "^2.0.0",
-        "micromark-factory-space": "^2.0.0",
-        "micromark-util-character": "^2.0.0",
-        "micromark-util-chunked": "^2.0.0",
-        "micromark-util-combine-extensions": "^2.0.0",
-        "micromark-util-decode-numeric-character-reference": "^2.0.0",
-        "micromark-util-edit-map": "^1.0.0",
-        "micromark-util-encode": "^2.0.0",
-        "micromark-util-normalize-identifier": "^2.0.0",
-        "micromark-util-resolve-all": "^2.0.0",
-        "micromark-util-sanitize-uri": "^2.0.0",
-        "micromark-util-subtokenize": "^2.0.0",
-        "micromark-util-symbol": "^2.0.0",
-        "micromark-util-types": "^2.0.0"
-      }
-    },
-    "node_modules/micromark-core-commonmark": {
-      "version": "2.0.4",
-      "resolved": "https://registry.npmjs.org/micromark-core-commonmark/-/micromark-core-commonmark-2.0.4.tgz",
-      "integrity": "sha512-wxEeE8v8XVvOrxn1TZj74qYhAtTQsSqufHVS3uNVyT1MupXxhyaHk8/9xDNPh9BmL77QNDgWTkZ3RsYHB2ry7w==",
-      "funding": [
-        {
-          "type": "GitHub Sponsors",
-          "url": "https://github.com/sponsors/unifiedjs"
-        },
-        {
-          "type": "OpenCollective",
-          "url": "https://opencollective.com/unified"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "decode-named-character-reference": "^1.0.0",
-        "devlop": "^1.0.0",
-        "micromark-factory-destination": "^2.0.0",
-        "micromark-factory-label": "^2.0.0",
-        "micromark-factory-space": "^2.1.0",
-        "micromark-factory-title": "^2.0.0",
-        "micromark-factory-whitespace": "^2.0.0",
-        "micromark-util-character": "^2.0.0",
-        "micromark-util-chunked": "^2.0.0",
-        "micromark-util-classify-character": "^2.0.0",
-        "micromark-util-edit-map": "^1.0.0",
-        "micromark-util-html-tag-name": "^2.0.0",
-        "micromark-util-normalize-identifier": "^2.0.0",
-        "micromark-util-resolve-all": "^2.0.0",
-        "micromark-util-subtokenize": "^2.0.0",
-        "micromark-util-symbol": "^2.0.0",
-        "micromark-util-types": "^2.0.3"
-      }
-    },
-    "node_modules/micromark-extension-gfm": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/micromark-extension-gfm/-/micromark-extension-gfm-3.0.0.tgz",
-      "integrity": "sha512-vsKArQsicm7t0z2GugkCKtZehqUm31oeGBV/KVSorWSy8ZlNAv7ytjFhvaryUiCUJYqs+NoE6AFhpQvBTM6Q4w==",
-      "license": "MIT",
-      "dependencies": {
-        "micromark-extension-gfm-autolink-literal": "^2.0.0",
-        "micromark-extension-gfm-footnote": "^2.0.0",
-        "micromark-extension-gfm-strikethrough": "^2.0.0",
-        "micromark-extension-gfm-table": "^2.0.0",
-        "micromark-extension-gfm-tagfilter": "^2.0.0",
-        "micromark-extension-gfm-task-list-item": "^2.0.0",
-        "micromark-util-combine-extensions": "^2.0.0",
-        "micromark-util-types": "^2.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/micromark-extension-gfm-autolink-literal": {
-      "version": "2.1.0",
-      "resolved": "https://registry.npmjs.org/micromark-extension-gfm-autolink-literal/-/micromark-extension-gfm-autolink-literal-2.1.0.tgz",
-      "integrity": "sha512-oOg7knzhicgQ3t4QCjCWgTmfNhvQbDDnJeVu9v81r7NltNCVmhPy1fJRX27pISafdjL+SVc4d3l48Gb6pbRypw==",
-      "license": "MIT",
-      "dependencies": {
-        "micromark-util-character": "^2.0.0",
-        "micromark-util-sanitize-uri": "^2.0.0",
-        "micromark-util-symbol": "^2.0.0",
-        "micromark-util-types": "^2.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/micromark-extension-gfm-footnote": {
-      "version": "2.1.0",
-      "resolved": "https://registry.npmjs.org/micromark-extension-gfm-footnote/-/micromark-extension-gfm-footnote-2.1.0.tgz",
-      "integrity": "sha512-/yPhxI1ntnDNsiHtzLKYnE3vf9JZ6cAisqVDauhp4CEHxlb4uoOTxOCJ+9s51bIB8U1N1FJ1RXOKTIlD5B/gqw==",
-      "license": "MIT",
-      "dependencies": {
-        "devlop": "^1.0.0",
-        "micromark-core-commonmark": "^2.0.0",
-        "micromark-factory-space": "^2.0.0",
-        "micromark-util-character": "^2.0.0",
-        "micromark-util-normalize-identifier": "^2.0.0",
-        "micromark-util-sanitize-uri": "^2.0.0",
-        "micromark-util-symbol": "^2.0.0",
-        "micromark-util-types": "^2.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/micromark-extension-gfm-strikethrough": {
-      "version": "2.1.0",
-      "resolved": "https://registry.npmjs.org/micromark-extension-gfm-strikethrough/-/micromark-extension-gfm-strikethrough-2.1.0.tgz",
-      "integrity": "sha512-ADVjpOOkjz1hhkZLlBiYA9cR2Anf8F4HqZUO6e5eDcPQd0Txw5fxLzzxnEkSkfnD0wziSGiv7sYhk/ktvbf1uw==",
-      "license": "MIT",
-      "dependencies": {
-        "devlop": "^1.0.0",
-        "micromark-util-chunked": "^2.0.0",
-        "micromark-util-classify-character": "^2.0.0",
-        "micromark-util-resolve-all": "^2.0.0",
-        "micromark-util-symbol": "^2.0.0",
-        "micromark-util-types": "^2.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/micromark-extension-gfm-table": {
-      "version": "2.1.2",
-      "resolved": "https://registry.npmjs.org/micromark-extension-gfm-table/-/micromark-extension-gfm-table-2.1.2.tgz",
-      "integrity": "sha512-pRzm4kDTu0MjlmBkxmS9yYhw60nncfcEwu9NNdPFSQEFXS95ZKyIIyTSHu/o3ReBUrLKYEq+7YaXCRn/bPB4MA==",
-      "license": "MIT",
-      "dependencies": {
-        "devlop": "^1.0.0",
-        "micromark-factory-space": "^2.0.0",
-        "micromark-util-character": "^2.0.0",
-        "micromark-util-symbol": "^2.0.0",
-        "micromark-util-types": "^2.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/micromark-extension-gfm-tagfilter": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/micromark-extension-gfm-tagfilter/-/micromark-extension-gfm-tagfilter-2.0.0.tgz",
-      "integrity": "sha512-xHlTOmuCSotIA8TW1mDIM6X2O1SiX5P9IuDtqGonFhEK0qgRI4yeC6vMxEV2dgyr2TiD+2PQ10o+cOhdVAcwfg==",
-      "license": "MIT",
-      "dependencies": {
-        "micromark-util-types": "^2.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/micromark-extension-gfm-task-list-item": {
-      "version": "2.1.0",
-      "resolved": "https://registry.npmjs.org/micromark-extension-gfm-task-list-item/-/micromark-extension-gfm-task-list-item-2.1.0.tgz",
-      "integrity": "sha512-qIBZhqxqI6fjLDYFTBIa4eivDMnP+OZqsNwmQ3xNLE4Cxwc+zfQEfbs6tzAo2Hjq+bh6q5F+Z8/cksrLFYWQQw==",
-      "license": "MIT",
-      "dependencies": {
-        "devlop": "^1.0.0",
-        "micromark-factory-space": "^2.0.0",
-        "micromark-util-character": "^2.0.0",
-        "micromark-util-symbol": "^2.0.0",
-        "micromark-util-types": "^2.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/micromark-factory-destination": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/micromark-factory-destination/-/micromark-factory-destination-2.0.1.tgz",
-      "integrity": "sha512-Xe6rDdJlkmbFRExpTOmRj9N3MaWmbAgdpSrBQvCFqhezUn4AHqJHbaEnfbVYYiexVSs//tqOdY/DxhjdCiJnIA==",
-      "funding": [
-        {
-          "type": "GitHub Sponsors",
-          "url": "https://github.com/sponsors/unifiedjs"
-        },
-        {
-          "type": "OpenCollective",
-          "url": "https://opencollective.com/unified"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "micromark-util-character": "^2.0.0",
-        "micromark-util-symbol": "^2.0.0",
-        "micromark-util-types": "^2.0.0"
-      }
-    },
-    "node_modules/micromark-factory-label": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/micromark-factory-label/-/micromark-factory-label-2.0.1.tgz",
-      "integrity": "sha512-VFMekyQExqIW7xIChcXn4ok29YE3rnuyveW3wZQWWqF4Nv9Wk5rgJ99KzPvHjkmPXF93FXIbBp6YdW3t71/7Vg==",
-      "funding": [
-        {
-          "type": "GitHub Sponsors",
-          "url": "https://github.com/sponsors/unifiedjs"
-        },
-        {
-          "type": "OpenCollective",
-          "url": "https://opencollective.com/unified"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "devlop": "^1.0.0",
-        "micromark-util-character": "^2.0.0",
-        "micromark-util-symbol": "^2.0.0",
-        "micromark-util-types": "^2.0.0"
-      }
-    },
-    "node_modules/micromark-factory-space": {
-      "version": "2.1.0",
-      "resolved": "https://registry.npmjs.org/micromark-factory-space/-/micromark-factory-space-2.1.0.tgz",
-      "integrity": "sha512-fS8hnLIjnjvdQIj39Geug8wWsR0HrYZ43KShKxNfwT7t2LOHo/LbWZEzEaSOjwtjdCsjoE6syHhonEzW0zv0+Q==",
-      "funding": [
-        {
-          "type": "GitHub Sponsors",
-          "url": "https://github.com/sponsors/unifiedjs"
-        },
-        {
-          "type": "OpenCollective",
-          "url": "https://opencollective.com/unified"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "micromark-util-character": "^2.0.0",
-        "micromark-util-types": "^2.0.0"
-      }
-    },
-    "node_modules/micromark-factory-title": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/micromark-factory-title/-/micromark-factory-title-2.0.1.tgz",
-      "integrity": "sha512-5bZ+3CjhAd9eChYTHsjy6TGxpOFSKgKKJPJxr293jTbfry2KDoWkhBb6TcPVB4NmzaPhMs1Frm9AZH7OD4Cjzw==",
-      "funding": [
-        {
-          "type": "GitHub Sponsors",
-          "url": "https://github.com/sponsors/unifiedjs"
-        },
-        {
-          "type": "OpenCollective",
-          "url": "https://opencollective.com/unified"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "micromark-factory-space": "^2.0.0",
-        "micromark-util-character": "^2.0.0",
-        "micromark-util-symbol": "^2.0.0",
-        "micromark-util-types": "^2.0.0"
-      }
-    },
-    "node_modules/micromark-factory-whitespace": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/micromark-factory-whitespace/-/micromark-factory-whitespace-2.0.1.tgz",
-      "integrity": "sha512-Ob0nuZ3PKt/n0hORHyvoD9uZhr+Za8sFoP+OnMcnWK5lngSzALgQYKMr9RJVOWLqQYuyn6ulqGWSXdwf6F80lQ==",
-      "funding": [
-        {
-          "type": "GitHub Sponsors",
-          "url": "https://github.com/sponsors/unifiedjs"
-        },
-        {
-          "type": "OpenCollective",
-          "url": "https://opencollective.com/unified"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "micromark-factory-space": "^2.0.0",
-        "micromark-util-character": "^2.0.0",
-        "micromark-util-symbol": "^2.0.0",
-        "micromark-util-types": "^2.0.0"
-      }
-    },
-    "node_modules/micromark-util-character": {
-      "version": "2.1.1",
-      "resolved": "https://registry.npmjs.org/micromark-util-character/-/micromark-util-character-2.1.1.tgz",
-      "integrity": "sha512-wv8tdUTJ3thSFFFJKtpYKOYiGP2+v96Hvk4Tu8KpCAsTMs6yi+nVmGh1syvSCsaxz45J6Jbw+9DD6g97+NV67Q==",
-      "funding": [
-        {
-          "type": "GitHub Sponsors",
-          "url": "https://github.com/sponsors/unifiedjs"
-        },
-        {
-          "type": "OpenCollective",
-          "url": "https://opencollective.com/unified"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "micromark-util-symbol": "^2.0.0",
-        "micromark-util-types": "^2.0.0"
-      }
-    },
-    "node_modules/micromark-util-chunked": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/micromark-util-chunked/-/micromark-util-chunked-2.0.1.tgz",
-      "integrity": "sha512-QUNFEOPELfmvv+4xiNg2sRYeS/P84pTW0TCgP5zc9FpXetHY0ab7SxKyAQCNCc1eK0459uoLI1y5oO5Vc1dbhA==",
-      "funding": [
-        {
-          "type": "GitHub Sponsors",
-          "url": "https://github.com/sponsors/unifiedjs"
-        },
-        {
-          "type": "OpenCollective",
-          "url": "https://opencollective.com/unified"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "micromark-util-symbol": "^2.0.0"
-      }
-    },
-    "node_modules/micromark-util-classify-character": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/micromark-util-classify-character/-/micromark-util-classify-character-2.0.1.tgz",
-      "integrity": "sha512-K0kHzM6afW/MbeWYWLjoHQv1sgg2Q9EccHEDzSkxiP/EaagNzCm7T/WMKZ3rjMbvIpvBiZgwR3dKMygtA4mG1Q==",
-      "funding": [
-        {
-          "type": "GitHub Sponsors",
-          "url": "https://github.com/sponsors/unifiedjs"
-        },
-        {
-          "type": "OpenCollective",
-          "url": "https://opencollective.com/unified"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "micromark-util-character": "^2.0.0",
-        "micromark-util-symbol": "^2.0.0",
-        "micromark-util-types": "^2.0.0"
-      }
-    },
-    "node_modules/micromark-util-combine-extensions": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/micromark-util-combine-extensions/-/micromark-util-combine-extensions-2.0.1.tgz",
-      "integrity": "sha512-OnAnH8Ujmy59JcyZw8JSbK9cGpdVY44NKgSM7E9Eh7DiLS2E9RNQf0dONaGDzEG9yjEl5hcqeIsj4hfRkLH/Bg==",
-      "funding": [
-        {
-          "type": "GitHub Sponsors",
-          "url": "https://github.com/sponsors/unifiedjs"
-        },
-        {
-          "type": "OpenCollective",
-          "url": "https://opencollective.com/unified"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "micromark-util-chunked": "^2.0.0",
-        "micromark-util-types": "^2.0.0"
-      }
-    },
-    "node_modules/micromark-util-decode-numeric-character-reference": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/micromark-util-decode-numeric-character-reference/-/micromark-util-decode-numeric-character-reference-2.0.2.tgz",
-      "integrity": "sha512-ccUbYk6CwVdkmCQMyr64dXz42EfHGkPQlBj5p7YVGzq8I7CtjXZJrubAYezf7Rp+bjPseiROqe7G6foFd+lEuw==",
-      "funding": [
-        {
-          "type": "GitHub Sponsors",
-          "url": "https://github.com/sponsors/unifiedjs"
-        },
-        {
-          "type": "OpenCollective",
-          "url": "https://opencollective.com/unified"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "micromark-util-symbol": "^2.0.0"
-      }
-    },
-    "node_modules/micromark-util-decode-string": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/micromark-util-decode-string/-/micromark-util-decode-string-2.0.1.tgz",
-      "integrity": "sha512-nDV/77Fj6eH1ynwscYTOsbK7rR//Uj0bZXBwJZRfaLEJ1iGBR6kIfNmlNqaqJf649EP0F3NWNdeJi03elllNUQ==",
-      "funding": [
-        {
-          "type": "GitHub Sponsors",
-          "url": "https://github.com/sponsors/unifiedjs"
-        },
-        {
-          "type": "OpenCollective",
-          "url": "https://opencollective.com/unified"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "decode-named-character-reference": "^1.0.0",
-        "micromark-util-character": "^2.0.0",
-        "micromark-util-decode-numeric-character-reference": "^2.0.0",
-        "micromark-util-symbol": "^2.0.0"
-      }
-    },
-    "node_modules/micromark-util-edit-map": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/micromark-util-edit-map/-/micromark-util-edit-map-1.0.0.tgz",
-      "integrity": "sha512-Pa2ljlsEL6sVwFaYeyrOLSYbQt73JvGbPOYFq+9AElXiSnfI5Q4465RRZ1sHv7lDjDOnGRDDaqPXqClqWK/q1Q==",
-      "funding": [
-        {
-          "type": "GitHub Sponsors",
-          "url": "https://github.com/sponsors/unifiedjs"
-        },
-        {
-          "type": "OpenCollective",
-          "url": "https://opencollective.com/unified"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "micromark-util-types": "^2.0.0"
-      }
-    },
-    "node_modules/micromark-util-encode": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/micromark-util-encode/-/micromark-util-encode-2.0.1.tgz",
-      "integrity": "sha512-c3cVx2y4KqUnwopcO9b/SCdo2O67LwJJ/UyqGfbigahfegL9myoEFoDYZgkT7f36T0bLrM9hZTAaAyH+PCAXjw==",
-      "funding": [
-        {
-          "type": "GitHub Sponsors",
-          "url": "https://github.com/sponsors/unifiedjs"
-        },
-        {
-          "type": "OpenCollective",
-          "url": "https://opencollective.com/unified"
-        }
-      ],
-      "license": "MIT"
-    },
-    "node_modules/micromark-util-html-tag-name": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/micromark-util-html-tag-name/-/micromark-util-html-tag-name-2.0.1.tgz",
-      "integrity": "sha512-2cNEiYDhCWKI+Gs9T0Tiysk136SnR13hhO8yW6BGNyhOC4qYFnwF1nKfD3HFAIXA5c45RrIG1ub11GiXeYd1xA==",
-      "funding": [
-        {
-          "type": "GitHub Sponsors",
-          "url": "https://github.com/sponsors/unifiedjs"
-        },
-        {
-          "type": "OpenCollective",
-          "url": "https://opencollective.com/unified"
-        }
-      ],
-      "license": "MIT"
-    },
-    "node_modules/micromark-util-normalize-identifier": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/micromark-util-normalize-identifier/-/micromark-util-normalize-identifier-2.0.1.tgz",
-      "integrity": "sha512-sxPqmo70LyARJs0w2UclACPUUEqltCkJ6PhKdMIDuJ3gSf/Q+/GIe3WKl0Ijb/GyH9lOpUkRAO2wp0GVkLvS9Q==",
-      "funding": [
-        {
-          "type": "GitHub Sponsors",
-          "url": "https://github.com/sponsors/unifiedjs"
-        },
-        {
-          "type": "OpenCollective",
-          "url": "https://opencollective.com/unified"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "micromark-util-symbol": "^2.0.0"
-      }
-    },
-    "node_modules/micromark-util-resolve-all": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/micromark-util-resolve-all/-/micromark-util-resolve-all-2.0.1.tgz",
-      "integrity": "sha512-VdQyxFWFT2/FGJgwQnJYbe1jjQoNTS4RjglmSjTUlpUMa95Htx9NHeYW4rGDJzbjvCsl9eLjMQwGeElsqmzcHg==",
-      "funding": [
-        {
-          "type": "GitHub Sponsors",
-          "url": "https://github.com/sponsors/unifiedjs"
-        },
-        {
-          "type": "OpenCollective",
-          "url": "https://opencollective.com/unified"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "micromark-util-types": "^2.0.0"
-      }
-    },
-    "node_modules/micromark-util-sanitize-uri": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/micromark-util-sanitize-uri/-/micromark-util-sanitize-uri-2.0.1.tgz",
-      "integrity": "sha512-9N9IomZ/YuGGZZmQec1MbgxtlgougxTodVwDzzEouPKo3qFWvymFHWcnDi2vzV1ff6kas9ucW+o3yzJK9YB1AQ==",
-      "funding": [
-        {
-          "type": "GitHub Sponsors",
-          "url": "https://github.com/sponsors/unifiedjs"
-        },
-        {
-          "type": "OpenCollective",
-          "url": "https://opencollective.com/unified"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "micromark-util-character": "^2.0.0",
-        "micromark-util-encode": "^2.0.0",
-        "micromark-util-symbol": "^2.0.0"
-      }
-    },
-    "node_modules/micromark-util-subtokenize": {
-      "version": "2.1.0",
-      "resolved": "https://registry.npmjs.org/micromark-util-subtokenize/-/micromark-util-subtokenize-2.1.0.tgz",
-      "integrity": "sha512-XQLu552iSctvnEcgXw6+Sx75GflAPNED1qx7eBJ+wydBb2KCbRZe+NwvIEEMM83uml1+2WSXpBAcp9IUCgCYWA==",
-      "funding": [
-        {
-          "type": "GitHub Sponsors",
-          "url": "https://github.com/sponsors/unifiedjs"
-        },
-        {
-          "type": "OpenCollective",
-          "url": "https://opencollective.com/unified"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "devlop": "^1.0.0",
-        "micromark-util-chunked": "^2.0.0",
-        "micromark-util-symbol": "^2.0.0",
-        "micromark-util-types": "^2.0.0"
-      }
-    },
-    "node_modules/micromark-util-symbol": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/micromark-util-symbol/-/micromark-util-symbol-2.0.1.tgz",
-      "integrity": "sha512-vs5t8Apaud9N28kgCrRUdEed4UJ+wWNvicHLPxCa9ENlYuAY31M0ETy5y1vA33YoNPDFTghEbnh6efaE8h4x0Q==",
-      "funding": [
-        {
-          "type": "GitHub Sponsors",
-          "url": "https://github.com/sponsors/unifiedjs"
-        },
-        {
-          "type": "OpenCollective",
-          "url": "https://opencollective.com/unified"
-        }
-      ],
-      "license": "MIT"
-    },
-    "node_modules/micromark-util-types": {
-      "version": "2.0.3",
-      "resolved": "https://registry.npmjs.org/micromark-util-types/-/micromark-util-types-2.0.3.tgz",
-      "integrity": "sha512-oxB2Ik03hI0gv+VNn9tnh1t1YEe9MDPptViAEgfdf3YQHsn0pzGTgCdlSCJXcwhqm8phaEuM7zeEu3QQzVBrPg==",
-      "funding": [
-        {
-          "type": "GitHub Sponsors",
-          "url": "https://github.com/sponsors/unifiedjs"
-        },
-        {
-          "type": "OpenCollective",
-          "url": "https://opencollective.com/unified"
-        }
-      ],
-      "license": "MIT"
-    },
     "node_modules/mime": {
       "version": "2.6.0",
       "resolved": "https://registry.npmjs.org/mime/-/mime-2.6.0.tgz",
@@ -14139,7 +11467,6 @@
       "version": "10.2.6",
       "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.6.tgz",
       "integrity": "sha512-vpLQEs+VLCr1nU0BXS07maYoFwlDAH0gngQuuttxIwutDFEMHq2blX+8vpgxDdK3J1PwjCJiep77OitTZ4Ll1A==",
-      "dev": true,
       "license": "BlueOak-1.0.0",
       "dependencies": {
         "brace-expansion": "^5.0.8"
@@ -14413,15 +11740,6 @@
         "semver": "^7.3.5"
       }
     },
-    "node_modules/node-forge": {
-      "version": "1.4.0",
-      "resolved": "https://registry.npmjs.org/node-forge/-/node-forge-1.4.0.tgz",
-      "integrity": "sha512-LarFH0+6VfriEhqMMcLX2F7SwSXeWwnEAJEsYm5QKWchiVYVvJyV9v7UDvUv+w5HO23ZpQTXDv/GxdDdMyOuoQ==",
-      "license": "(BSD-3-Clause OR GPL-2.0)",
-      "engines": {
-        "node": ">= 6.13.0"
-      }
-    },
     "node_modules/node-gyp": {
       "version": "12.4.0",
       "resolved": "https://registry.npmjs.org/node-gyp/-/node-gyp-12.4.0.tgz",
@@ -14527,15 +11845,6 @@
         "node": ">=18"
       }
     },
-    "node_modules/nodemailer": {
-      "version": "10.0.13",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-10.0.13.tgz",
-      "integrity": "sha512-SzG86OlvcW/NNhUFC6uROMwRTL4n7MswfQqC/T8mhkmnY1YVa23zUEMYi4ijSeXSl9GLz9ZeTJDUatEDuY5FeQ==",
-      "license": "MIT-0",
-      "engines": {
-        "node": ">=20.0.0"
-      }
-    },
     "node_modules/nopt": {
       "version": "9.0.0",
       "resolved": "https://registry.npmjs.org/nopt/-/nopt-9.0.0.tgz",
@@ -14667,28 +11976,12 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/p-try": {
-      "version": "2.2.0",
-      "resolved": "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz",
-      "integrity": "sha512-R4nPAVTAU0B9D35/Gk3uJf/7XYbQcyohSKdvAxIRSNghFl4e71hVoGnBNQz9cWaXxO2I10KTC+3jMdvvoKw6dQ==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=6"
-      }
-    },
     "node_modules/package-json-from-dist": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/package-json-from-dist/-/package-json-from-dist-1.0.1.tgz",
       "integrity": "sha512-UEZIS3/by4OC8vL3P2dTXRETpebLI2NiI5vIrjaD/5UtrkFX/tNbwjTSRAGC/+7CAo2pIcBaRgWmcBBHcsaCIw==",
-      "dev": true,
       "license": "BlueOak-1.0.0"
     },
-    "node_modules/pako": {
-      "version": "1.0.11",
-      "resolved": "https://registry.npmjs.org/pako/-/pako-1.0.11.tgz",
-      "integrity": "sha512-4hLB8Py4zZce5s4yd9XzopqwVv/yGNhV1Bl8NTmCq1763HeK2+EwVTv+leGeL13Dnh2wfbqowVPXCIO0z4taYw==",
-      "license": "(MIT AND Zlib)"
-    },
     "node_modules/parent-module": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/parent-module/-/parent-module-1.0.1.tgz",
@@ -14702,31 +11995,6 @@
         "node": ">=6"
       }
     },
-    "node_modules/parse-entities": {
-      "version": "4.0.2",
-      "resolved": "https://registry.npmjs.org/parse-entities/-/parse-entities-4.0.2.tgz",
-      "integrity": "sha512-GG2AQYWoLgL877gQIKeRPGO1xF9+eG1ujIb5soS5gPvLQ1y2o8FL90w2QWNdf9I361Mpp7726c+lj3U0qK1uGw==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/unist": "^2.0.0",
-        "character-entities-legacy": "^3.0.0",
-        "character-reference-invalid": "^2.0.0",
-        "decode-named-character-reference": "^1.0.0",
-        "is-alphanumerical": "^2.0.0",
-        "is-decimal": "^2.0.0",
-        "is-hexadecimal": "^2.0.0"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
-    "node_modules/parse-entities/node_modules/@types/unist": {
-      "version": "2.0.11",
-      "resolved": "https://registry.npmjs.org/@types/unist/-/unist-2.0.11.tgz",
-      "integrity": "sha512-CmBKiL6NNo/OqgmMn95Fk9Whlp2mtvIv+KNpQKN2F4SjvrEesubTRWGYSg+BnWZOnlCaSTU1sMpsBOzgbYhnsA==",
-      "license": "MIT"
-    },
     "node_modules/parse-json": {
       "version": "5.2.0",
       "resolved": "https://registry.npmjs.org/parse-json/-/parse-json-5.2.0.tgz",
@@ -14772,6 +12040,7 @@
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz",
       "integrity": "sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w==",
+      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=8"
@@ -14781,7 +12050,6 @@
       "version": "3.1.1",
       "resolved": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz",
       "integrity": "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==",
-      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=8"
@@ -14791,7 +12059,6 @@
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/path-scurry/-/path-scurry-2.0.2.tgz",
       "integrity": "sha512-3O/iVVsJAPsOnpwWIeD+d6z/7PmqApyQePUtCndjatj/9I5LylHvt5qluFaBT3I5h3r1ejfR056c+FCv+NnNXg==",
-      "dev": true,
       "license": "BlueOak-1.0.0",
       "dependencies": {
         "lru-cache": "^11.0.0",
@@ -14808,7 +12075,6 @@
       "version": "11.5.3",
       "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-11.5.3.tgz",
       "integrity": "sha512-U4N8FgzmWxc8k1VH8Kr6lQg18U7Fjvby6wXHVRX/ZZ7IwWbRMgrRbP0Wrb5q5NVinryp4SQampHKdvtecItxUg==",
-      "dev": true,
       "license": "BlueOak-1.0.0",
       "engines": {
         "node": "20 || >=22"
@@ -14841,18 +12107,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/pdfjs-dist": {
-      "version": "5.4.296",
-      "resolved": "https://registry.npmjs.org/pdfjs-dist/-/pdfjs-dist-5.4.296.tgz",
-      "integrity": "sha512-DlOzet0HO7OEnmUmB6wWGJrrdvbyJKftI1bhMitK7O2N8W2gc757yyYBbINy9IDafXAV9wmKr9t7xsTaNKRG5Q==",
-      "license": "Apache-2.0",
-      "engines": {
-        "node": ">=20.16.0 || >=22.3.0"
-      },
-      "optionalDependencies": {
-        "@napi-rs/canvas": "^0.1.80"
-      }
-    },
     "node_modules/pe-library": {
       "version": "0.4.1",
       "resolved": "https://registry.npmjs.org/pe-library/-/pe-library-0.4.1.tgz",
@@ -15026,15 +12280,6 @@
         "node": ">=10.4.0"
       }
     },
-    "node_modules/pngjs": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/pngjs/-/pngjs-5.0.0.tgz",
-      "integrity": "sha512-40QW5YalBNfQo5yRYmiw7Yz6TKKVr3h6970B2YE+3fQpsWcrbj1PzJgxeJ19DRQjhMbKPIuMY8rFaXc8moolVw==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=10.13.0"
-      }
-    },
     "node_modules/postcss": {
       "version": "8.5.28",
       "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.28.tgz",
@@ -15132,14 +12377,6 @@
         "node": ">=0.10.0"
       }
     },
-    "node_modules/precond": {
-      "version": "0.2.3",
-      "resolved": "https://registry.npmjs.org/precond/-/precond-0.2.3.tgz",
-      "integrity": "sha512-QCYG84SgGyGzqJ/vlMsxeXd/pgL/I94ixdNFyh1PusWmTCyVfPJjZ1K1jvHtsbfnXQs2TSkEP2fR7QiMZAnKFQ==",
-      "engines": {
-        "node": ">= 0.6"
-      }
-    },
     "node_modules/prelude-ls": {
       "version": "1.2.1",
       "resolved": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.2.1.tgz",
@@ -15181,15 +12418,6 @@
         "node": "^10.13.0 || ^12.13.0 || ^14.15.0 || >=15.0.0"
       }
     },
-    "node_modules/prismjs": {
-      "version": "1.30.0",
-      "resolved": "https://registry.npmjs.org/prismjs/-/prismjs-1.30.0.tgz",
-      "integrity": "sha512-DEvV2ZF2r2/63V+tK8hQvrR2ZGn10srHbXviTlcv7Kpzw8jWiNTqbVgjO3IY8RxrrOUF8VPMQQFysYYYv0YZxw==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=6"
-      }
-    },
     "node_modules/proc-log": {
       "version": "6.1.0",
       "resolved": "https://registry.npmjs.org/proc-log/-/proc-log-6.1.0.tgz",
@@ -15204,12 +12432,7 @@
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.1.tgz",
       "integrity": "sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag==",
-      "license": "MIT"
-    },
-    "node_modules/process-warning": {
-      "version": "2.3.2",
-      "resolved": "https://registry.npmjs.org/process-warning/-/process-warning-2.3.2.tgz",
-      "integrity": "sha512-n9wh8tvBe5sFmsqlg+XQhaQLumwpqoAUruLwjCopgTmUBjJ/fjtBsJzKleCaIGBOMXYEhp1YfKl4d7rJ5ZKJGA==",
+      "dev": true,
       "license": "MIT"
     },
     "node_modules/progress": {
@@ -15236,23 +12459,6 @@
         "node": ">=10"
       }
     },
-    "node_modules/prop-types": {
-      "version": "15.8.1",
-      "resolved": "https://registry.npmjs.org/prop-types/-/prop-types-15.8.1.tgz",
-      "integrity": "sha512-oj87CgZICdulUohogVAR7AjlC0327U4el4L6eAvOqCeudMDVU0NThNaV+b9Df4dXgSP1gXMTnPdhfe/2qDH5cg==",
-      "license": "MIT",
-      "dependencies": {
-        "loose-envify": "^1.4.0",
-        "object-assign": "^4.1.1",
-        "react-is": "^16.13.1"
-      }
-    },
-    "node_modules/prop-types/node_modules/react-is": {
-      "version": "16.13.1",
-      "resolved": "https://registry.npmjs.org/react-is/-/react-is-16.13.1.tgz",
-      "integrity": "sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ==",
-      "license": "MIT"
-    },
     "node_modules/proper-lockfile": {
       "version": "4.1.2",
       "resolved": "https://registry.npmjs.org/proper-lockfile/-/proper-lockfile-4.1.2.tgz",
@@ -15272,16 +12478,6 @@
       "dev": true,
       "license": "ISC"
     },
-    "node_modules/property-information": {
-      "version": "7.2.0",
-      "resolved": "https://registry.npmjs.org/property-information/-/property-information-7.2.0.tgz",
-      "integrity": "sha512-IAtzIB6sUiWaJYrX9smp3V46pBGbBeLFRGdh25kg1334VcBlD8HzhPeNIWQH9zhGmo2itIe25EHt9dQP7G5hmg==",
-      "license": "MIT",
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
     "node_modules/proxy-addr": {
       "version": "2.0.8",
       "resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.8.tgz",
@@ -15322,6 +12518,7 @@
       "version": "1.3.6",
       "resolved": "https://registry.npmjs.org/pvtsutils/-/pvtsutils-1.3.6.tgz",
       "integrity": "sha512-PLgQXQ6H2FWCaeRak8vvk1GW462lMxB5s3Jm673N82zI4vqtVUPuZdffdZbPDFRoU8kAhItWFtPCWiPpp4/EDg==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "tslib": "^2.8.1"
@@ -15331,6 +12528,7 @@
       "version": "1.2.0",
       "resolved": "https://registry.npmjs.org/pvutils/-/pvutils-1.2.0.tgz",
       "integrity": "sha512-BbubeCEyTuQjVMakvJQ/Sxbc93F2pwmbsxONT/ZRrwU7Ua38d8unYTwXpTVLAKJ4BDuH9IGztCjQcd/N/39Dvg==",
+      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=16.0.0"
@@ -15356,197 +12554,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/qrcode": {
-      "version": "1.5.4",
-      "resolved": "https://registry.npmjs.org/qrcode/-/qrcode-1.5.4.tgz",
-      "integrity": "sha512-1ca71Zgiu6ORjHqFBDpnSMTR2ReToX4l1Au1VFLyVeBTFavzQnv5JxMFr3ukHVKpSrSA2MCk0lNJSykjUfz7Zg==",
-      "license": "MIT",
-      "dependencies": {
-        "dijkstrajs": "^1.0.1",
-        "pngjs": "^5.0.0",
-        "yargs": "^15.3.1"
-      },
-      "bin": {
-        "qrcode": "bin/qrcode"
-      },
-      "engines": {
-        "node": ">=10.13.0"
-      }
-    },
-    "node_modules/qrcode/node_modules/ansi-styles": {
-      "version": "4.3.0",
-      "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz",
-      "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==",
-      "license": "MIT",
-      "dependencies": {
-        "color-convert": "^2.0.1"
-      },
-      "engines": {
-        "node": ">=8"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/ansi-styles?sponsor=1"
-      }
-    },
-    "node_modules/qrcode/node_modules/camelcase": {
-      "version": "5.3.1",
-      "resolved": "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz",
-      "integrity": "sha512-L28STB170nwWS63UjtlEOE3dldQApaJXZkOI1uMFfzf3rRuPegHaHesyee+YxQ+W6SvRDQV6UrdOdRiR153wJg==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=6"
-      }
-    },
-    "node_modules/qrcode/node_modules/cliui": {
-      "version": "6.0.0",
-      "resolved": "https://registry.npmjs.org/cliui/-/cliui-6.0.0.tgz",
-      "integrity": "sha512-t6wbgtoCXvAzst7QgXxJYqPt0usEfbgQdftEPbLL/cvv6HPE5VgvqCuAIDR0NgU52ds6rFwqrgakNLrHEjCbrQ==",
-      "license": "ISC",
-      "dependencies": {
-        "string-width": "^4.2.0",
-        "strip-ansi": "^6.0.0",
-        "wrap-ansi": "^6.2.0"
-      }
-    },
-    "node_modules/qrcode/node_modules/emoji-regex": {
-      "version": "8.0.0",
-      "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
-      "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==",
-      "license": "MIT"
-    },
-    "node_modules/qrcode/node_modules/find-up": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz",
-      "integrity": "sha512-PpOwAdQ/YlXQ2vj8a3h8IipDuYRi3wceVQQGYWxNINccq40Anw7BlsEXCMbt1Zt+OLA6Fq9suIpIWD0OsnISlw==",
-      "license": "MIT",
-      "dependencies": {
-        "locate-path": "^5.0.0",
-        "path-exists": "^4.0.0"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/qrcode/node_modules/locate-path": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz",
-      "integrity": "sha512-t7hw9pI+WvuwNJXwk5zVHpyhIqzg2qTlklJOf0mVxGSbe3Fp2VieZcduNYjaLDoy6p9uGpQEGWG87WpMKlNq8g==",
-      "license": "MIT",
-      "dependencies": {
-        "p-locate": "^4.1.0"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/qrcode/node_modules/p-limit": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz",
-      "integrity": "sha512-//88mFWSJx8lxCzwdAABTJL2MyWB12+eIY7MDL2SqLmAkeKU9qxRvWuSyTjm3FUmpBEMuFfckAIqEaVGUDxb6w==",
-      "license": "MIT",
-      "dependencies": {
-        "p-try": "^2.0.0"
-      },
-      "engines": {
-        "node": ">=6"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
-    "node_modules/qrcode/node_modules/p-locate": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/p-locate/-/p-locate-4.1.0.tgz",
-      "integrity": "sha512-R79ZZ/0wAxKGu3oYMlz8jy/kbhsNrS7SKZ7PxEHBgJ5+F2mtFW2fK2cOtBh1cHYkQsbzFV7I+EoRKe6Yt0oK7A==",
-      "license": "MIT",
-      "dependencies": {
-        "p-limit": "^2.2.0"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/qrcode/node_modules/string-width": {
-      "version": "4.2.3",
-      "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
-      "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==",
-      "license": "MIT",
-      "dependencies": {
-        "emoji-regex": "^8.0.0",
-        "is-fullwidth-code-point": "^3.0.0",
-        "strip-ansi": "^6.0.1"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/qrcode/node_modules/strip-ansi": {
-      "version": "6.0.1",
-      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
-      "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==",
-      "license": "MIT",
-      "dependencies": {
-        "ansi-regex": "^5.0.1"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/qrcode/node_modules/wrap-ansi": {
-      "version": "6.2.0",
-      "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-6.2.0.tgz",
-      "integrity": "sha512-r6lPcBGxZXlIcymEu7InxDMhdW0KDxpLgoFLcguasxCaJ/SOIZwINatK9KY/tf+ZrlywOKU0UDj3ATXUBfxJXA==",
-      "license": "MIT",
-      "dependencies": {
-        "ansi-styles": "^4.0.0",
-        "string-width": "^4.1.0",
-        "strip-ansi": "^6.0.0"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/qrcode/node_modules/y18n": {
-      "version": "4.0.3",
-      "resolved": "https://registry.npmjs.org/y18n/-/y18n-4.0.3.tgz",
-      "integrity": "sha512-JKhqTOwSrqNA1NY5lSztJ1GrBiUodLMmIZuLiDaMRJ+itFd+ABVE8XBjOvIWL+rSqNDC74LCSFmlb/U4UZ4hJQ==",
-      "license": "ISC"
-    },
-    "node_modules/qrcode/node_modules/yargs": {
-      "version": "15.4.1",
-      "resolved": "https://registry.npmjs.org/yargs/-/yargs-15.4.1.tgz",
-      "integrity": "sha512-aePbxDmcYW++PaqBsJ+HYUFwCdv4LVvdnhBy78E57PIor8/OVvhMrADFFEDh8DHDFRv/O9i3lPhsENjO7QX0+A==",
-      "license": "MIT",
-      "dependencies": {
-        "cliui": "^6.0.0",
-        "decamelize": "^1.2.0",
-        "find-up": "^4.1.0",
-        "get-caller-file": "^2.0.1",
-        "require-directory": "^2.1.1",
-        "require-main-filename": "^2.0.0",
-        "set-blocking": "^2.0.0",
-        "string-width": "^4.2.0",
-        "which-module": "^2.0.0",
-        "y18n": "^4.0.0",
-        "yargs-parser": "^18.1.2"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/qrcode/node_modules/yargs-parser": {
-      "version": "18.1.3",
-      "resolved": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-18.1.3.tgz",
-      "integrity": "sha512-o50j0JeToy/4K6OZcaQmW6lyXXKhq7csREXcDwk2omFPJEwUNOVtJKvmDr9EI1fAJZUyZcRF7kxGBWmRXudrCQ==",
-      "license": "ISC",
-      "dependencies": {
-        "camelcase": "^5.0.0",
-        "decamelize": "^1.2.0"
-      },
-      "engines": {
-        "node": ">=6"
-      }
-    },
     "node_modules/qs": {
       "version": "6.16.0",
       "resolved": "https://registry.npmjs.org/qs/-/qs-6.16.0.tgz",
@@ -15679,19 +12686,6 @@
         "node": ">=0.10.0"
       }
     },
-    "node_modules/react-cytoscapejs": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/react-cytoscapejs/-/react-cytoscapejs-2.0.0.tgz",
-      "integrity": "sha512-t3SSl1DQy7+JQjN+8QHi1anEJlM3i3aAeydHTsJwmjo/isyKK7Rs7oCvU6kZsB9NwZidzZQR21Vm2PcBLG/Tjg==",
-      "license": "MIT",
-      "dependencies": {
-        "prop-types": "^15.8.1"
-      },
-      "peerDependencies": {
-        "cytoscape": "^3.2.19",
-        "react": ">=15.0.0"
-      }
-    },
     "node_modules/react-dom": {
       "version": "19.3.0",
       "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-19.3.0.tgz",
@@ -15705,23 +12699,6 @@
         "react": "^19.3.0"
       }
     },
-    "node_modules/react-h5-audio-player": {
-      "version": "3.10.2",
-      "resolved": "https://registry.npmjs.org/react-h5-audio-player/-/react-h5-audio-player-3.10.2.tgz",
-      "integrity": "sha512-2RlP1eF9V0KPZgBzaYM/hwIE1KxKV+E84gOkpaf0+3X1r56USO+V7AuCVa2FSTeWkQnrB03Osay99hR9FbSefQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@babel/runtime": "^7.10.2",
-        "@iconify/react": "^5"
-      },
-      "engines": {
-        "node": ">=18.0.0"
-      },
-      "peerDependencies": {
-        "react": "^16.3.0 || ^17.0.0 || ^18.0.0 || ^19.0.0",
-        "react-dom": "^16.3.0 || ^17.0.0 || ^18.0.0 || ^19.0.0"
-      }
-    },
     "node_modules/react-i18next": {
       "version": "17.0.15",
       "resolved": "https://registry.npmjs.org/react-i18next/-/react-i18next-17.0.15.tgz",
@@ -15750,15 +12727,6 @@
         }
       }
     },
-    "node_modules/react-icons": {
-      "version": "5.7.0",
-      "resolved": "https://registry.npmjs.org/react-icons/-/react-icons-5.7.0.tgz",
-      "integrity": "sha512-LBLy340Rzqy6+/yVhZKT3B/QpP1BZaesGqasf09HPOBzRarcDIFH0WwXlXQfE7q7ipxK4MSiC5DIBWURCny6fw==",
-      "license": "MIT",
-      "peerDependencies": {
-        "react": "*"
-      }
-    },
     "node_modules/react-is": {
       "version": "17.0.2",
       "resolved": "https://registry.npmjs.org/react-is/-/react-is-17.0.2.tgz",
@@ -15766,72 +12734,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/react-markdown": {
-      "version": "10.1.0",
-      "resolved": "https://registry.npmjs.org/react-markdown/-/react-markdown-10.1.0.tgz",
-      "integrity": "sha512-qKxVopLT/TyA6BX3Ue5NwabOsAzm0Q7kAPwq6L+wWDwisYs7R8vZ0nRXqq6rkueboxpkjvLGU9fWifiX/ZZFxQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/hast": "^3.0.0",
-        "@types/mdast": "^4.0.0",
-        "devlop": "^1.0.0",
-        "hast-util-to-jsx-runtime": "^2.0.0",
-        "html-url-attributes": "^3.0.0",
-        "mdast-util-to-hast": "^13.0.0",
-        "remark-parse": "^11.0.0",
-        "remark-rehype": "^11.0.0",
-        "unified": "^11.0.0",
-        "unist-util-visit": "^5.0.0",
-        "vfile": "^6.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      },
-      "peerDependencies": {
-        "@types/react": ">=18",
-        "react": ">=18"
-      }
-    },
-    "node_modules/react-pdf": {
-      "version": "10.5.0",
-      "resolved": "https://registry.npmjs.org/react-pdf/-/react-pdf-10.5.0.tgz",
-      "integrity": "sha512-zGKb6Ph5AYn2OfO4TS8Gg0Go3eW5K/TKy0+0FTm8EwFNbpgbuaWBZoJdYkJt+cRBCkizE9dYvqtMtHRj522Q4w==",
-      "license": "MIT",
-      "dependencies": {
-        "clsx": "^2.0.0",
-        "dequal": "^2.0.3",
-        "make-cancellable-promise": "^2.0.0",
-        "make-event-props": "^2.0.0",
-        "merge-refs": "^2.0.0",
-        "pdfjs-dist": "5.4.296",
-        "tiny-invariant": "^1.0.0",
-        "warning": "^4.0.0"
-      },
-      "funding": {
-        "url": "https://github.com/wojtekmaj/react-pdf?sponsor=1"
-      },
-      "peerDependencies": {
-        "@types/react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0",
-        "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0",
-        "react-dom": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/react-photo-view": {
-      "version": "1.2.7",
-      "resolved": "https://registry.npmjs.org/react-photo-view/-/react-photo-view-1.2.7.tgz",
-      "integrity": "sha512-MfOWVPxuibncRLaycZUNxqYU8D9IA+rbGDDaq6GM8RIoGJal592hEJoRAyRSI7ZxyyJNJTLMUWWL3UIXHJJOpw==",
-      "license": "Apache-2.0",
-      "peerDependencies": {
-        "react": ">=16.8.0",
-        "react-dom": ">=16.8.0"
-      }
-    },
     "node_modules/react-remove-scroll": {
       "version": "2.7.2",
       "resolved": "https://registry.npmjs.org/react-remove-scroll/-/react-remove-scroll-2.7.2.tgz",
@@ -15904,35 +12806,6 @@
         }
       }
     },
-    "node_modules/react-syntax-highlighter": {
-      "version": "16.1.1",
-      "resolved": "https://registry.npmjs.org/react-syntax-highlighter/-/react-syntax-highlighter-16.1.1.tgz",
-      "integrity": "sha512-PjVawBGy80C6YbC5DDZJeUjBmC7skaoEUdvfFQediQHgCL7aKyVHe57SaJGfQsloGDac+gCpTfRdtxzWWKmCXA==",
-      "license": "MIT",
-      "dependencies": {
-        "@babel/runtime": "^7.28.4",
-        "highlight.js": "^10.4.1",
-        "highlightjs-vue": "^1.0.0",
-        "lowlight": "^1.17.0",
-        "prismjs": "^1.30.0",
-        "refractor": "^5.0.0"
-      },
-      "engines": {
-        "node": ">= 16.20.2"
-      },
-      "peerDependencies": {
-        "react": ">= 0.14.0"
-      }
-    },
-    "node_modules/react-xtermjs": {
-      "version": "1.0.12",
-      "resolved": "https://registry.npmjs.org/react-xtermjs/-/react-xtermjs-1.0.12.tgz",
-      "integrity": "sha512-8uXBzVF4vP6r2NABxt/9heH1Y5Vx2v2hFrAk1kre+HyY3CjM6Prbc8ViqBRia6EBzI57IFBWOicYV1/k05JBtw==",
-      "license": "ISC",
-      "peerDependencies": {
-        "@xterm/xterm": "^5.5.0"
-      }
-    },
     "node_modules/read-binary-file-arch": {
       "version": "1.0.6",
       "resolved": "https://registry.npmjs.org/read-binary-file-arch/-/read-binary-file-arch-1.0.6.tgz",
@@ -15950,6 +12823,7 @@
       "version": "2.3.8",
       "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.8.tgz",
       "integrity": "sha512-8p0AUk4XODgIewSi0l8Epjs+EVnWiK7NoDIEGU0HhE7+ZyY8D1IMY7odu5lRrFXGg71L15KG8QrPmum45RTtdA==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "core-util-is": "~1.0.0",
@@ -15965,6 +12839,7 @@
       "version": "5.1.2",
       "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
       "integrity": "sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g==",
+      "dev": true,
       "license": "MIT"
     },
     "node_modules/redent": {
@@ -15981,114 +12856,18 @@
         "node": ">=8"
       }
     },
-    "node_modules/redis": {
-      "version": "6.3.0",
-      "resolved": "https://registry.npmjs.org/redis/-/redis-6.3.0.tgz",
-      "integrity": "sha512-XFQbPie1lGpKeUZ8ySYY43yLnQy/iIQtHNvIr/1XdaABpb96rUSdm3Mfl+98FEVbv9ZJIzINMno5s0Nh8E5LEw==",
-      "license": "MIT",
-      "dependencies": {
-        "@redis/bloom": "6.3.0",
-        "@redis/client": "6.3.0",
-        "@redis/json": "6.3.0",
-        "@redis/search": "6.3.0",
-        "@redis/time-series": "6.3.0"
-      },
-      "engines": {
-        "node": ">= 20.0.0"
-      }
-    },
     "node_modules/reflect-metadata": {
       "version": "0.2.2",
       "resolved": "https://registry.npmjs.org/reflect-metadata/-/reflect-metadata-0.2.2.tgz",
       "integrity": "sha512-urBwgfrvVP/eAyXx4hluJivBKzuEbSQs9rKWCrCkbSxNv8mxPcUZKeuoF3Uy4mJl3Lwprp6yy5/39VWigZ4K6Q==",
+      "dev": true,
       "license": "Apache-2.0"
     },
-    "node_modules/refractor": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/refractor/-/refractor-5.0.0.tgz",
-      "integrity": "sha512-QXOrHQF5jOpjjLfiNk5GFnWhRXvxjUVnlFxkeDmewR5sXkr3iM46Zo+CnRR8B+MDVqkULW4EcLVcRBNOPXHosw==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/hast": "^3.0.0",
-        "@types/prismjs": "^1.0.0",
-        "hastscript": "^9.0.0",
-        "parse-entities": "^4.0.0"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
-    "node_modules/remark-gfm": {
-      "version": "4.0.1",
-      "resolved": "https://registry.npmjs.org/remark-gfm/-/remark-gfm-4.0.1.tgz",
-      "integrity": "sha512-1quofZ2RQ9EWdeN34S79+KExV1764+wCUGop5CPL1WGdD0ocPpu91lzPGbwWMECpEpd42kJGQwzRfyov9j4yNg==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/mdast": "^4.0.0",
-        "mdast-util-gfm": "^3.0.0",
-        "micromark-extension-gfm": "^3.0.0",
-        "remark-parse": "^11.0.0",
-        "remark-stringify": "^11.0.0",
-        "unified": "^11.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/remark-parse": {
-      "version": "11.0.0",
-      "resolved": "https://registry.npmjs.org/remark-parse/-/remark-parse-11.0.0.tgz",
-      "integrity": "sha512-FCxlKLNGknS5ba/1lmpYijMUzX2esxW5xQqjWxw2eHFfS2MSdaHVINFmhjo+qN1WhZhNimq0dZATN9pH0IDrpA==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/mdast": "^4.0.0",
-        "mdast-util-from-markdown": "^2.0.0",
-        "micromark-util-types": "^2.0.0",
-        "unified": "^11.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/remark-rehype": {
-      "version": "11.1.2",
-      "resolved": "https://registry.npmjs.org/remark-rehype/-/remark-rehype-11.1.2.tgz",
-      "integrity": "sha512-Dh7l57ianaEoIpzbp0PC9UKAdCSVklD8E5Rpw7ETfbTl3FqcOOgq5q2LVDhgGCkaBv7p24JXikPdvhhmHvKMsw==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/hast": "^3.0.0",
-        "@types/mdast": "^4.0.0",
-        "mdast-util-to-hast": "^13.0.0",
-        "unified": "^11.0.0",
-        "vfile": "^6.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/remark-stringify": {
-      "version": "11.0.0",
-      "resolved": "https://registry.npmjs.org/remark-stringify/-/remark-stringify-11.0.0.tgz",
-      "integrity": "sha512-1OSmLd3awB/t8qdoEOMazZkNsfVTeY4fTsgzcQFdXNq8ToTN4ZGwrMnlda4K6smTFKD+GRV6O48i6Z4iKgPPpw==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/mdast": "^4.0.0",
-        "mdast-util-to-markdown": "^2.0.0",
-        "unified": "^11.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
     "node_modules/require-directory": {
       "version": "2.1.1",
       "resolved": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz",
       "integrity": "sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==",
+      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=0.10.0"
@@ -16098,18 +12877,11 @@
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz",
       "integrity": "sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==",
-      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=0.10.0"
       }
     },
-    "node_modules/require-main-filename": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-2.0.0.tgz",
-      "integrity": "sha512-NKN5kMDylKuldxYLSUfrbo5Tuzh4hd+2E8NPPX02mZtn1VuREQToYe/ZdlJy+J3uCpfaiGF05e7B8W0iXbQHmg==",
-      "license": "ISC"
-    },
     "node_modules/resedit": {
       "version": "1.7.2",
       "resolved": "https://registry.npmjs.org/resedit/-/resedit-1.7.2.tgz",
@@ -16208,16 +12980,6 @@
         "node": ">= 18"
       }
     },
-    "node_modules/rxjs": {
-      "version": "7.8.2",
-      "resolved": "https://registry.npmjs.org/rxjs/-/rxjs-7.8.2.tgz",
-      "integrity": "sha512-dhKf903U/PQZY6boNNtAGdWbG85WAbjT/1xYoZIC7FAY0yWapOBQVsVrDl58W86//e1VpMNBtRV4MaXfdMySFA==",
-      "dev": true,
-      "license": "Apache-2.0",
-      "dependencies": {
-        "tslib": "^2.1.0"
-      }
-    },
     "node_modules/safe-buffer": {
       "version": "5.2.1",
       "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
@@ -16386,18 +13148,6 @@
         "url": "https://opencollective.com/express"
       }
     },
-    "node_modules/set-blocking": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz",
-      "integrity": "sha512-KiKBS8AnWGEyLzofFfmvKwpdPzqiy16LvQfK3yv/fVH7Bj13/wl3JSR1J+rfgRE9q7xUJK4qvgS8raSOeLUehw==",
-      "license": "ISC"
-    },
-    "node_modules/setimmediate": {
-      "version": "1.0.5",
-      "resolved": "https://registry.npmjs.org/setimmediate/-/setimmediate-1.0.5.tgz",
-      "integrity": "sha512-MATJdZp8sLqDl/68LfQmbP8zKPLQNV6BIZoIgrscFDQ+RsvK/BxeDQOgyxKKoh0y/8h3BqVFnCqQ/gd+reiIXA==",
-      "license": "MIT"
-    },
     "node_modules/setprototypeof": {
       "version": "1.2.0",
       "resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz",
@@ -16457,7 +13207,6 @@
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz",
       "integrity": "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
         "shebang-regex": "^3.0.0"
@@ -16470,25 +13219,11 @@
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz",
       "integrity": "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==",
-      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=8"
       }
     },
-    "node_modules/shell-quote": {
-      "version": "1.9.0",
-      "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.9.0.tgz",
-      "integrity": "sha512-Iov+JwFv/2HcTpcwNMKd8+IWNb8tboQJNQTkAY/LLVK7gGH9jy+LGkVqPxfekHl+yMmiqXszdGWXgkfml7hjqA==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">= 0.4"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/ljharb"
-      }
-    },
     "node_modules/side-channel": {
       "version": "1.1.1",
       "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.1.tgz",
@@ -16572,7 +13307,6 @@
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-4.1.0.tgz",
       "integrity": "sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw==",
-      "dev": true,
       "license": "ISC",
       "engines": {
         "node": ">=14"
@@ -16691,28 +13425,6 @@
         "source-map": "^0.6.0"
       }
     },
-    "node_modules/space-separated-tokens": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/space-separated-tokens/-/space-separated-tokens-2.0.2.tgz",
-      "integrity": "sha512-PEGlAwrG8yXGXRjW32fGbg66JAlOAwbObuqVoJpv/mRgoWDQfgH1wDPvtzWyUSNAXBGSk8h755YDbbcEy3SH2Q==",
-      "license": "MIT",
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
-    "node_modules/speakeasy": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/speakeasy/-/speakeasy-2.0.0.tgz",
-      "integrity": "sha512-lW2A2s5LKi8rwu77ewisuUOtlCydF/hmQSOJjpTqTj1gZLkNgTaYnyvfxy2WBr4T/h+9c4g8HIITfj83OkFQFw==",
-      "license": "MIT",
-      "dependencies": {
-        "base32.js": "0.0.1"
-      },
-      "engines": {
-        "node": ">= 0.10.0"
-      }
-    },
     "node_modules/split2": {
       "version": "4.2.0",
       "resolved": "https://registry.npmjs.org/split2/-/split2-4.2.0.tgz",
@@ -16754,6 +13466,31 @@
         "nan": "^2.23.0"
       }
     },
+    "node_modules/sshpk": {
+      "version": "1.18.0",
+      "resolved": "https://registry.npmjs.org/sshpk/-/sshpk-1.18.0.tgz",
+      "integrity": "sha512-2p2KJZTSqQ/I3+HX42EpYOa2l3f8Erv8MWKsy2I9uf4wA7yFIkXRffYdsx86y6z4vHtV8u7g+pPlr8/4ouAxsQ==",
+      "license": "MIT",
+      "dependencies": {
+        "asn1": "~0.2.3",
+        "assert-plus": "^1.0.0",
+        "bcrypt-pbkdf": "^1.0.0",
+        "dashdash": "^1.12.0",
+        "ecc-jsbn": "~0.1.1",
+        "getpass": "^0.1.1",
+        "jsbn": "~0.1.0",
+        "safer-buffer": "^2.0.2",
+        "tweetnacl": "~0.14.0"
+      },
+      "bin": {
+        "sshpk-conv": "bin/sshpk-conv",
+        "sshpk-sign": "bin/sshpk-sign",
+        "sshpk-verify": "bin/sshpk-verify"
+      },
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
     "node_modules/stackback": {
       "version": "0.0.2",
       "resolved": "https://registry.npmjs.org/stackback/-/stackback-0.0.2.tgz",
@@ -16761,16 +13498,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/standardwebhooks": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/standardwebhooks/-/standardwebhooks-1.1.1.tgz",
-      "integrity": "sha512-bCbX9ZEyFkWPsRz7Bl3NuQUJohmwGSev/yhr7vhaGPlc4AfIrspIRa6cPTBuI1ItmrTDJ4d/S2hCsfe4+vQGnQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@stablelib/base64": "^1.0.0",
-        "fast-sha256": "^1.3.0"
-      }
-    },
     "node_modules/stat-mode": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/stat-mode/-/stat-mode-1.0.0.tgz",
@@ -16781,12 +13508,6 @@
         "node": ">= 6"
       }
     },
-    "node_modules/state-local": {
-      "version": "1.0.7",
-      "resolved": "https://registry.npmjs.org/state-local/-/state-local-1.0.7.tgz",
-      "integrity": "sha512-HTEHMNieakEnoe33shBYcZ7NX83ACUjCu8c40iOGEZsngj9zRnkqS9j1pqQPXwobB0ZcVTk27REb7COQ0UR59w==",
-      "license": "MIT"
-    },
     "node_modules/statuses": {
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz",
@@ -16815,6 +13536,7 @@
       "version": "1.1.1",
       "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz",
       "integrity": "sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "safe-buffer": "~5.1.0"
@@ -16824,6 +13546,7 @@
       "version": "5.1.2",
       "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
       "integrity": "sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g==",
+      "dev": true,
       "license": "MIT"
     },
     "node_modules/string-argv": {
@@ -16853,20 +13576,6 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/stringify-entities": {
-      "version": "4.0.4",
-      "resolved": "https://registry.npmjs.org/stringify-entities/-/stringify-entities-4.0.4.tgz",
-      "integrity": "sha512-IwfBptatlO+QCJUo19AqvrPNqlVMpW9YEL2LIVY+Rpv2qsjCGxaDLNRgeGsQWJhfItebuJhsGSLjaBbNSQ+ieg==",
-      "license": "MIT",
-      "dependencies": {
-        "character-entities-html4": "^2.0.0",
-        "character-entities-legacy": "^3.0.0"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
     "node_modules/strip-ansi": {
       "version": "7.2.0",
       "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.2.0.tgz",
@@ -16913,26 +13622,9 @@
       "version": "4.1.4",
       "resolved": "https://registry.npmjs.org/style-mod/-/style-mod-4.1.4.tgz",
       "integrity": "sha512-XXWIQt633/EpAFx8aZDOTjBzrCaGmhvEQlQo6MVPfa2OzO2cWo+4hV9h+6UkHYlXGfy+ODXKUdP7Pthmcu5ATw==",
+      "dev": true,
       "license": "MIT"
     },
-    "node_modules/style-to-js": {
-      "version": "1.1.21",
-      "resolved": "https://registry.npmjs.org/style-to-js/-/style-to-js-1.1.21.tgz",
-      "integrity": "sha512-RjQetxJrrUJLQPHbLku6U/ocGtzyjbJMP9lCNK7Ag0CNh690nSH8woqWH9u16nMjYBAok+i7JO1NP2pOy8IsPQ==",
-      "license": "MIT",
-      "dependencies": {
-        "style-to-object": "1.0.14"
-      }
-    },
-    "node_modules/style-to-object": {
-      "version": "1.0.14",
-      "resolved": "https://registry.npmjs.org/style-to-object/-/style-to-object-1.0.14.tgz",
-      "integrity": "sha512-LIN7rULI0jBscWQYaSswptyderlarFkjQ+t79nzty8tcIAceVomEVlLzH5VP4Cmsv6MtKhs7qaAiwlcp+Mgaxw==",
-      "license": "MIT",
-      "dependencies": {
-        "inline-style-parser": "0.2.7"
-      }
-    },
     "node_modules/sumchecker": {
       "version": "3.0.1",
       "resolved": "https://registry.npmjs.org/sumchecker/-/sumchecker-3.0.1.tgz",
@@ -16992,19 +13684,6 @@
         "node": ">=6.6.0"
       }
     },
-    "node_modules/supports-color": {
-      "version": "10.2.2",
-      "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-10.2.2.tgz",
-      "integrity": "sha512-SS+jx45GF1QjgEXQx4NJZV9ImqmO2NPz5FNsIHrsDjh2YsHnawpan7SNQ1o8NuhrbHZy9AZhIoCUiCeaW/C80g==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=18"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/supports-color?sponsor=1"
-      }
-    },
     "node_modules/svg-parser": {
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/svg-parser/-/svg-parser-2.1.0.tgz",
@@ -17019,6 +13698,7 @@
       "version": "3.7.0",
       "resolved": "https://registry.npmjs.org/tailwind-merge/-/tailwind-merge-3.7.0.tgz",
       "integrity": "sha512-XPPUyAc+cvspz3lHTcR/QgPfW2A0lv/xQNIjX3HGhLR+Nq2lHaLq5MtTesHn8GUr3W3DguT2KT5x3NVgRtYwmA==",
+      "dev": true,
       "license": "MIT",
       "funding": {
         "type": "github",
@@ -17100,12 +13780,6 @@
         "semver": "bin/semver"
       }
     },
-    "node_modules/tiny-invariant": {
-      "version": "1.3.3",
-      "resolved": "https://registry.npmjs.org/tiny-invariant/-/tiny-invariant-1.3.3.tgz",
-      "integrity": "sha512-+FbBPE1o9QAYvviau/qC5SE3caw21q3xkvWKBtja5vgqOWIHHJ3ioaq1VPfn/Szqctz2bU/oYeKd9/z5BL+PVg==",
-      "license": "MIT"
-    },
     "node_modules/tinybench": {
       "version": "2.9.0",
       "resolved": "https://registry.npmjs.org/tinybench/-/tinybench-2.9.0.tgz",
@@ -17235,36 +13909,6 @@
         "node": ">=20"
       }
     },
-    "node_modules/tree-kill": {
-      "version": "1.2.2",
-      "resolved": "https://registry.npmjs.org/tree-kill/-/tree-kill-1.2.2.tgz",
-      "integrity": "sha512-L0Orpi8qGpRG//Nd+H90vFB+3iHnue1zSSGmNOOCh1GLJ7rUKVwV2HvijphGQS2UmhUZewS9VgvxYIdgr+fG1A==",
-      "dev": true,
-      "license": "MIT",
-      "bin": {
-        "tree-kill": "cli.js"
-      }
-    },
-    "node_modules/trim-lines": {
-      "version": "3.0.1",
-      "resolved": "https://registry.npmjs.org/trim-lines/-/trim-lines-3.0.1.tgz",
-      "integrity": "sha512-kRj8B+YHZCc9kQYdWfJB2/oUl9rA99qbowYYBtr4ui4mZyAQ2JpvVBd/6U2YloATfqBhBTSMhTpgBHtU0Mf3Rg==",
-      "license": "MIT",
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
-    "node_modules/trough": {
-      "version": "2.2.0",
-      "resolved": "https://registry.npmjs.org/trough/-/trough-2.2.0.tgz",
-      "integrity": "sha512-tmMpK00BjZiUyVyvrBK7knerNgmgvcV/KLVyuma/SC+TQN167GrMRciANTz09+k3zW8L8t60jWO1GpfkZdjTaw==",
-      "license": "MIT",
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
     "node_modules/truncate-utf8-bytes": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/truncate-utf8-bytes/-/truncate-utf8-bytes-1.0.2.tgz",
@@ -17275,12 +13919,6 @@
         "utf8-byte-length": "^1.0.1"
       }
     },
-    "node_modules/ts-algebra": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/ts-algebra/-/ts-algebra-2.0.0.tgz",
-      "integrity": "sha512-FPAhNPFMrkwz76P7cdjdmiShwMynZYN6SgOujD1urY4oNm80Ou9oMdmbR45LotcKOXoy7wSmHkRFE6Mxbrhefw==",
-      "license": "MIT"
-    },
     "node_modules/ts-api-utils": {
       "version": "2.5.0",
       "resolved": "https://registry.npmjs.org/ts-api-utils/-/ts-api-utils-2.5.0.tgz",
@@ -17323,6 +13961,7 @@
       "version": "4.10.0",
       "resolved": "https://registry.npmjs.org/tsyringe/-/tsyringe-4.10.0.tgz",
       "integrity": "sha512-axr3IdNuVIxnaK5XGEUFTu3YmAQ6lllgrvqfEoR16g/HGnYY/6We4oWENtAnzK6/LpJ2ur9PAb80RBt7/U4ugw==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "tslib": "^1.9.3"
@@ -17335,6 +13974,7 @@
       "version": "1.14.1",
       "resolved": "https://registry.npmjs.org/tslib/-/tslib-1.14.1.tgz",
       "integrity": "sha512-Xni35NKzjgMrwevysHTCArtLDpPvye8zV/0E4EyYn43P7/7qvQwPh9BGkHewbMulVntbigmcT7rdX3BNo9wRJg==",
+      "dev": true,
       "license": "0BSD"
     },
     "node_modules/tw-animate-css": {
@@ -17437,93 +14077,6 @@
       "integrity": "sha512-KTDyRTYX8sWmKXAikPHHSyc63CRPETMctyjKFupcC6OBLXT3xsN0e9aF7m+mIXutFWpUXuedtowG7iLOzp0kQg==",
       "license": "MIT"
     },
-    "node_modules/unified": {
-      "version": "11.0.5",
-      "resolved": "https://registry.npmjs.org/unified/-/unified-11.0.5.tgz",
-      "integrity": "sha512-xKvGhPWw3k84Qjh8bI3ZeJjqnyadK+GEFtazSfZv/rKeTkTjOJho6mFqh2SM96iIcZokxiOpg78GazTSg8+KHA==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/unist": "^3.0.0",
-        "bail": "^2.0.0",
-        "devlop": "^1.0.0",
-        "extend": "^3.0.0",
-        "is-plain-obj": "^4.0.0",
-        "trough": "^2.0.0",
-        "vfile": "^6.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/unist-util-is": {
-      "version": "6.0.1",
-      "resolved": "https://registry.npmjs.org/unist-util-is/-/unist-util-is-6.0.1.tgz",
-      "integrity": "sha512-LsiILbtBETkDz8I9p1dQ0uyRUWuaQzd/cuEeS1hoRSyW5E5XGmTzlwY1OrNzzakGowI9Dr/I8HVaw4hTtnxy8g==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/unist": "^3.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/unist-util-position": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/unist-util-position/-/unist-util-position-5.0.0.tgz",
-      "integrity": "sha512-fucsC7HjXvkB5R3kTCO7kUjRdrS0BJt3M/FPxmHMBOm8JQi2BsHAHFsy27E0EolP8rp0NzXsJ+jNPyDWvOJZPA==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/unist": "^3.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/unist-util-stringify-position": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/unist-util-stringify-position/-/unist-util-stringify-position-4.0.0.tgz",
-      "integrity": "sha512-0ASV06AAoKCDkS2+xw5RXJywruurpbC4JZSm7nr7MOt1ojAzvyyaO+UxZf18j8FCF6kmzCZKcAgN/yu2gm2XgQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/unist": "^3.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/unist-util-visit": {
-      "version": "5.1.0",
-      "resolved": "https://registry.npmjs.org/unist-util-visit/-/unist-util-visit-5.1.0.tgz",
-      "integrity": "sha512-m+vIdyeCOpdr/QeQCu2EzxX/ohgS8KbnPDgFni4dQsfSCtpz8UqDyY5GjRru8PDKuYn7Fq19j1CQ+nJSsGKOzg==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/unist": "^3.0.0",
-        "unist-util-is": "^6.0.0",
-        "unist-util-visit-parents": "^6.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/unist-util-visit-parents": {
-      "version": "6.0.2",
-      "resolved": "https://registry.npmjs.org/unist-util-visit-parents/-/unist-util-visit-parents-6.0.2.tgz",
-      "integrity": "sha512-goh1s1TBrqSqukSc8wrjwWhL0hiJxgA8m4kFxGlQ+8FYQ3C/m11FcTs4YYem7V664AhHVvgoQLk890Ssdsr2IQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/unist": "^3.0.0",
-        "unist-util-is": "^6.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
     "node_modules/universalify": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/universalify/-/universalify-2.0.1.tgz",
@@ -17679,6 +14232,7 @@
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz",
       "integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==",
+      "dev": true,
       "license": "MIT"
     },
     "node_modules/vary": {
@@ -17690,86 +14244,6 @@
         "node": ">= 0.8"
       }
     },
-    "node_modules/vasync": {
-      "version": "2.2.1",
-      "resolved": "https://registry.npmjs.org/vasync/-/vasync-2.2.1.tgz",
-      "integrity": "sha512-Hq72JaTpcTFdWiNA4Y22Amej2GH3BFmBaKPPlDZ4/oC8HNn2ISHLkFrJU4Ds8R3jcUi7oo5Y9jcMHKjES+N9wQ==",
-      "engines": [
-        "node >=0.6.0"
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "verror": "1.10.0"
-      }
-    },
-    "node_modules/vasync/node_modules/core-util-is": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz",
-      "integrity": "sha512-3lqz5YjWTYnW6dlDa5TLaTCcShfar1e40rmcJVwCBJC6mWlFuj0eCHIElmG1g5kyuJ/GD+8Wn4FFCcz4gJPfaQ==",
-      "license": "MIT"
-    },
-    "node_modules/vasync/node_modules/verror": {
-      "version": "1.10.0",
-      "resolved": "https://registry.npmjs.org/verror/-/verror-1.10.0.tgz",
-      "integrity": "sha512-ZZKSmDAEFOijERBLkmYfJ+vmk3w+7hOLYDNkRCuRuMJGEmqYNCNLyBBFwWKVMhfwaEF3WOd0Zlw86U/WC/+nYw==",
-      "engines": [
-        "node >=0.6.0"
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "assert-plus": "^1.0.0",
-        "core-util-is": "1.0.2",
-        "extsprintf": "^1.2.0"
-      }
-    },
-    "node_modules/verror": {
-      "version": "1.10.1",
-      "resolved": "https://registry.npmjs.org/verror/-/verror-1.10.1.tgz",
-      "integrity": "sha512-veufcmxri4e3XSrT0xwfUR7kguIkaxBeosDg00yDWhk49wdwkSUrvvsm7nc75e1PUyvIeZj6nS8VQRYz2/S4Xg==",
-      "license": "MIT",
-      "dependencies": {
-        "assert-plus": "^1.0.0",
-        "core-util-is": "1.0.2",
-        "extsprintf": "^1.2.0"
-      },
-      "engines": {
-        "node": ">=0.6.0"
-      }
-    },
-    "node_modules/verror/node_modules/core-util-is": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz",
-      "integrity": "sha512-3lqz5YjWTYnW6dlDa5TLaTCcShfar1e40rmcJVwCBJC6mWlFuj0eCHIElmG1g5kyuJ/GD+8Wn4FFCcz4gJPfaQ==",
-      "license": "MIT"
-    },
-    "node_modules/vfile": {
-      "version": "6.0.3",
-      "resolved": "https://registry.npmjs.org/vfile/-/vfile-6.0.3.tgz",
-      "integrity": "sha512-KzIbH/9tXat2u30jf+smMwFCsno4wHVdNmzFyL+T/L3UGqqk6JKfVqOFOZEpZSHADH1k40ab6NUIXZq422ov3Q==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/unist": "^3.0.0",
-        "vfile-message": "^4.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
-    "node_modules/vfile-message": {
-      "version": "4.0.3",
-      "resolved": "https://registry.npmjs.org/vfile-message/-/vfile-message-4.0.3.tgz",
-      "integrity": "sha512-QTHzsGd1EhbZs4AsQ20JX1rC3cOlt/IWJruk893DfLRr57lcnOeMaWG4K0JrRta4mIJZKth2Au3mM3u03/JWKw==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/unist": "^3.0.0",
-        "unist-util-stringify-position": "^4.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      }
-    },
     "node_modules/vite": {
       "version": "8.3.1",
       "resolved": "https://registry.npmjs.org/vite/-/vite-8.3.1.tgz",
@@ -18230,6 +14704,7 @@
       "version": "2.2.8",
       "resolved": "https://registry.npmjs.org/w3c-keyname/-/w3c-keyname-2.2.8.tgz",
       "integrity": "sha512-dpojBhNsCNN7T82Tm7k26A6G9ML3NkhDsnw9n/eoxSRlVBB4CEtIQ/KTCLI2Fwf3ataSXRhYFkQi3SlnFwPvPQ==",
+      "dev": true,
       "license": "MIT"
     },
     "node_modules/w3c-xmlserializer": {
@@ -18245,15 +14720,6 @@
         "node": "^22.22.2 || ^24.15.0 || >=26.0.0"
       }
     },
-    "node_modules/warning": {
-      "version": "4.0.3",
-      "resolved": "https://registry.npmjs.org/warning/-/warning-4.0.3.tgz",
-      "integrity": "sha512-rpJyN222KWIvHJ/F53XSZv0Zl/accqHR8et1kpaMTD/fLCRxtV8iX8czMzY7sVZupTI3zcUTg8eycS2kNF9l6w==",
-      "license": "MIT",
-      "dependencies": {
-        "loose-envify": "^1.0.0"
-      }
-    },
     "node_modules/webcrypto-core": {
       "version": "1.9.2",
       "resolved": "https://registry.npmjs.org/webcrypto-core/-/webcrypto-core-1.9.2.tgz",
@@ -18307,7 +14773,6 @@
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz",
       "integrity": "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==",
-      "dev": true,
       "license": "ISC",
       "dependencies": {
         "isexe": "^2.0.0"
@@ -18319,12 +14784,6 @@
         "node": ">= 8"
       }
     },
-    "node_modules/which-module": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/which-module/-/which-module-2.0.1.tgz",
-      "integrity": "sha512-iBdZ57RDvnOR9AGBhML2vFZf7h8vmBjhoaZqODJBFWHVtKkDmKuHai3cx5PgVMrX5YDNp27AofYbAwctSS+vhQ==",
-      "license": "ISC"
-    },
     "node_modules/why-is-node-running": {
       "version": "2.3.0",
       "resolved": "https://registry.npmjs.org/why-is-node-running/-/why-is-node-running-2.3.0.tgz",
@@ -18485,7 +14944,6 @@
       "version": "2.0.0-4",
       "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.0.0-4.tgz",
       "integrity": "sha512-MoQoNhTFI400tkaeod+X0Vety1KD2L9dUa6pa1CVcyfcATjC/iDxoMLvqZ6U3D8c5KzxBrU2HnJH+PfaXOqI7w==",
-      "dev": true,
       "license": "ISC",
       "engines": {
         "node": ">= 10"
@@ -18555,21 +15013,12 @@
         "zod": "^3.25.0 || ^4.0.0"
       }
     },
-    "node_modules/zwitch": {
-      "version": "2.0.4",
-      "resolved": "https://registry.npmjs.org/zwitch/-/zwitch-2.0.4.tgz",
-      "integrity": "sha512-bXE4cR/kVZhKZX/RjPEflHaKVhUVl85noU3v6b8apfQEc1x4A+zBxjZ4lN8LqGd6WZ3dl98pY4o717VFmoPp+A==",
-      "license": "MIT",
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
     "packages/plugin-sdk": {
-      "name": "@termix/plugin-sdk",
-      "version": "1.0.0",
-      "license": "MIT",
+      "name": "@termix-ssh/plugin-sdk",
+      "version": "1.0.5",
+      "license": "Apache-2.0",
       "dependencies": {
+        "@deadendjs/swagger-jsdoc": "^8.1.2",
         "@tailwindcss/node": "^4.2.4",
         "@tailwindcss/oxide": "^4.2.4",
         "esbuild": "^0.28.1",
@@ -18605,9 +15054,21 @@
         "drizzle-orm": {
           "optional": true
         },
+        "i18next": {
+          "optional": true
+        },
         "react": {
           "optional": true
         },
+        "react-dom": {
+          "optional": true
+        },
+        "react-i18next": {
+          "optional": true
+        },
+        "sonner": {
+          "optional": true
+        },
         "ssh2": {
           "optional": true
         },
@@ -18615,937 +15076,6 @@
           "optional": true
         }
       }
-    },
-    "plugins/acme-ssl": {
-      "name": "@termix-plugin/acme-ssl",
-      "version": "1.0.0",
-      "dependencies": {
-        "acme-client": "^5.4.0"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "express": "^5.2.1",
-        "react": "^19.2.8",
-        "sonner": "^2.0.8"
-      }
-    },
-    "plugins/ai": {
-      "name": "@termix-plugin/ai",
-      "version": "1.0.0",
-      "dependencies": {
-        "@anthropic-ai/sdk": "^0.120.0",
-        "lucide-react": "^1.33.0",
-        "react-markdown": "^10.1.0",
-        "remark-gfm": "^4.0.1"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "react": "^19.2.8",
-        "sonner": "^2.0.8",
-        "ssh2": "^1.17.0"
-      }
-    },
-    "plugins/alerts": {
-      "name": "@termix-plugin/alerts",
-      "version": "1.0.0",
-      "dependencies": {
-        "lucide-react": "^1.33.0",
-        "nodemailer": "^10.0.10"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "react": "^19.2.8",
-        "sonner": "^2.0.8"
-      }
-    },
-    "plugins/automations": {
-      "name": "@termix-plugin/automations",
-      "version": "1.0.0",
-      "dependencies": {
-        "lucide-react": "^1.33.0"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "react": "^19.2.8",
-        "sonner": "^2.0.8",
-        "ssh2": "^1.17.0"
-      }
-    },
-    "plugins/docker": {
-      "name": "@termix-plugin/docker",
-      "version": "1.0.0",
-      "dependencies": {
-        "@xterm/addon-clipboard": "^0.2.0",
-        "@xterm/addon-fit": "^0.11.0",
-        "@xterm/addon-web-links": "^0.12.0",
-        "@xterm/xterm": "^6.0.0",
-        "lucide-react": "^1.33.0",
-        "react-xtermjs": "^1.0.10"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "express": "^5.2.1",
-        "react": "^19.2.8",
-        "sonner": "^2.0.8",
-        "ssh2": "^1.17.0",
-        "ws": "^8.21.3"
-      }
-    },
-    "plugins/file-manager": {
-      "name": "@termix-plugin/file-manager",
-      "version": "1.0.0",
-      "dependencies": {
-        "@codemirror/autocomplete": "^6.20.3",
-        "@codemirror/commands": "^6.11.1",
-        "@codemirror/search": "^6.7.2",
-        "@codemirror/theme-one-dark": "^6.1.3",
-        "@codemirror/view": "^6.43.12",
-        "@monaco-editor/react": "^4.7.0",
-        "@tanstack/react-virtual": "^3.14.13",
-        "@uiw/codemirror-extensions-langs": "^4.25.11",
-        "@uiw/react-codemirror": "^4.25.11",
-        "busboy": "^1.6.0",
-        "jszip": "^3.10.2",
-        "lucide-react": "^1.33.0",
-        "motion": "^13.1.1",
-        "pdfjs-dist": "5.4.296",
-        "react-h5-audio-player": "^3.10.2",
-        "react-icons": "^5.7.0",
-        "react-markdown": "^10.1.0",
-        "react-pdf": "^10.5.0",
-        "react-photo-view": "^1.2.7",
-        "react-syntax-highlighter": "^16.1.1",
-        "remark-gfm": "^4.0.1"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/jest-dom": "^7.0.1",
-        "@testing-library/react": "^16.3.3",
-        "@testing-library/user-event": "^14.6.7",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "axios": "^1.19.0",
-        "cookie-parser": "^1.4.7",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "i18next": "^26.4.2",
-        "react": "^19.2.8",
-        "react-dom": "^19.2.8",
-        "react-i18next": "^17.0.14",
-        "sonner": "^2.0.8",
-        "ssh2": "^1.17.0"
-      }
-    },
-    "plugins/fleets": {
-      "name": "@termix-plugin/fleets",
-      "version": "1.0.0",
-      "dependencies": {
-        "clsx": "^2.1.1",
-        "jszip": "^3.10.2",
-        "lucide-react": "^1.33.0",
-        "tailwind-merge": "^3.5.0"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "multer": "^2.3.0",
-        "react": "^19.2.8",
-        "sonner": "^2.0.8",
-        "ssh2": "^1.17.0"
-      }
-    },
-    "plugins/homepage": {
-      "name": "@termix-plugin/homepage",
-      "version": "1.0.0",
-      "dependencies": {
-        "lucide-react": "^1.33.0"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "react": "^19.2.8"
-      }
-    },
-    "plugins/host-metrics": {
-      "name": "@termix-plugin/host-metrics",
-      "version": "1.0.0",
-      "dependencies": {
-        "lucide-react": "^1.33.0"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/jest-dom": "^7.0.1",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "react": "^19.2.8",
-        "sonner": "^2.0.8",
-        "ssh2": "^1.17.0"
-      }
-    },
-    "plugins/ldap": {
-      "name": "@termix-plugin/ldap",
-      "version": "1.0.0",
-      "dependencies": {
-        "ldapjs": "^3.0.7",
-        "lucide-react": "^1.33.0"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "react": "^19.2.8",
-        "sonner": "^2.0.8"
-      }
-    },
-    "plugins/network-topology": {
-      "name": "@termix-plugin/network-topology",
-      "version": "1.0.0",
-      "dependencies": {
-        "cytoscape": "^3.34.3",
-        "lucide-react": "^1.33.0",
-        "react-cytoscapejs": "^2.0.0"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "react": "^19.2.8"
-      }
-    },
-    "plugins/opkssh": {
-      "name": "@termix-plugin/opkssh",
-      "version": "1.0.0",
-      "dependencies": {
-        "js-yaml": "^5.2.3",
-        "lucide-react": "^1.33.0"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "axios": "^1.19.0",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "react": "^19.2.8",
-        "sonner": "^2.0.8"
-      }
-    },
-    "plugins/opkssh/node_modules/js-yaml": {
-      "version": "5.4.2",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.4.2.tgz",
-      "integrity": "sha512-m+aqu+LwO1O6sIopafj8HUVl5aawITwZQe/yHpMCKjaWBaA/d07B/QdMb3529REftiU+RMMHL3Vlsw3hON7vWg==",
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/puzrin"
-        },
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/nodeca"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "argparse": "^2.0.1"
-      },
-      "bin": {
-        "js-yaml": "bin/js-yaml.mjs"
-      }
-    },
-    "plugins/proxmox": {
-      "name": "@termix-plugin/proxmox",
-      "version": "1.0.0",
-      "dependencies": {
-        "lucide-react": "^1.33.0"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "react": "^19.2.8",
-        "sonner": "^2.0.8",
-        "ssh2": "^1.17.0"
-      }
-    },
-    "plugins/remote-desktop": {
-      "name": "@termix-plugin/remote-desktop",
-      "version": "1.0.0",
-      "dependencies": {
-        "guacamole-common-js": "^1.5.0",
-        "guacamole-lite": "^1.2.0",
-        "lucide-react": "^1.33.0"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "express": "^5.2.1",
-        "react": "^19.2.8",
-        "react-i18next": "^17.0.14",
-        "sonner": "^2.0.8",
-        "ssh2": "^1.17.0"
-      }
-    },
-    "plugins/secret-sources": {
-      "name": "@termix-plugin/secret-sources",
-      "version": "1.0.0",
-      "dependencies": {
-        "lucide-react": "^1.33.0"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "react": "^19.2.8",
-        "sonner": "^2.0.8"
-      }
-    },
-    "plugins/serial": {
-      "name": "@termix-plugin/serial",
-      "version": "1.0.0",
-      "dependencies": {
-        "@xterm/addon-fit": "^0.11.0",
-        "@xterm/xterm": "^6.0.0",
-        "lucide-react": "^1.33.0",
-        "react-xtermjs": "^1.0.10",
-        "serialport": "^13.0.0"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "react": "^19.2.8",
-        "ws": "^8.21.3"
-      }
-    },
-    "plugins/session-recording": {
-      "name": "@termix-plugin/session-recording",
-      "version": "1.0.0",
-      "dependencies": {
-        "@xterm/addon-fit": "^0.11.0",
-        "@xterm/xterm": "^6.0.0",
-        "guacamole-common-js": "^1.5.0",
-        "lucide-react": "^1.33.0"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "react": "^19.2.8"
-      }
-    },
-    "plugins/session-sharing": {
-      "name": "@termix-plugin/session-sharing",
-      "version": "1.0.0",
-      "dependencies": {
-        "@xterm/addon-fit": "^0.11.0",
-        "@xterm/xterm": "^6.0.0",
-        "lucide-react": "^1.33.0",
-        "react-xtermjs": "^1.0.10",
-        "redis": "^6.2.1"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "react": "^19.2.8",
-        "sonner": "^2.0.8",
-        "ws": "^8.21.3"
-      }
-    },
-    "plugins/snippets": {
-      "name": "@termix-plugin/snippets",
-      "version": "1.0.0",
-      "dependencies": {
-        "lucide-react": "^1.33.0"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "react": "^19.2.8",
-        "sonner": "^2.0.8",
-        "ssh2": "^1.17.0"
-      }
-    },
-    "plugins/ssh-terminal": {
-      "name": "@termix-plugin/ssh-terminal",
-      "version": "1.0.0",
-      "dependencies": {
-        "@xterm/addon-clipboard": "^0.2.0",
-        "@xterm/addon-fit": "^0.11.0",
-        "@xterm/addon-search": "^0.16.0",
-        "@xterm/addon-unicode11": "^0.9.0",
-        "@xterm/addon-web-links": "^0.12.0",
-        "@xterm/xterm": "^6.0.0",
-        "lucide-react": "^1.33.0",
-        "react-xtermjs": "^1.0.10"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/jest-dom": "^7.0.1",
-        "@testing-library/react": "^16.3.3",
-        "@testing-library/user-event": "^14.6.7",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "multer": "^2.3.0",
-        "react": "^19.2.8",
-        "react-dom": "^19.2.8",
-        "sharp": "^0.35.4",
-        "sonner": "^2.0.8",
-        "ssh2": "^1.17.0",
-        "ws": "^8.21.3"
-      }
-    },
-    "plugins/sso": {
-      "name": "@termix-plugin/sso",
-      "version": "1.0.0",
-      "dependencies": {
-        "jose": "^6.2.12",
-        "lucide-react": "^1.33.0",
-        "undici": "^8.10.2"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "react": "^19.2.8",
-        "sonner": "^2.0.8"
-      }
-    },
-    "plugins/step-ca": {
-      "name": "@termix-plugin/step-ca",
-      "version": "1.0.0",
-      "dependencies": {
-        "lucide-react": "^1.33.0",
-        "redis": "^6.2.1"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "react": "^19.2.8",
-        "sonner": "^2.0.8"
-      }
-    },
-    "plugins/tailscale": {
-      "name": "@termix-plugin/tailscale",
-      "version": "1.0.0",
-      "dependencies": {
-        "lucide-react": "^1.33.0"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/react": "^16.3.3",
-        "@testing-library/user-event": "^14.6.7",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "express": "^5.2.1",
-        "react": "^19.2.8",
-        "sonner": "^2.0.8",
-        "ssh2": "^1.17.0"
-      }
-    },
-    "plugins/telemetry": {
-      "name": "@termix-plugin/telemetry",
-      "version": "1.0.0",
-      "dependencies": {
-        "drizzle-orm": "^0.45.2"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "express": "^5.2.1",
-        "react": "^19.2.8",
-        "sonner": "^2.0.8"
-      }
-    },
-    "plugins/termix-identity": {
-      "name": "@termix-plugin/termix-identity",
-      "version": "1.0.0",
-      "dependencies": {
-        "lucide-react": "^1.33.0"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "react": "^19.2.8",
-        "sonner": "^2.0.8",
-        "ssh2": "^1.17.0"
-      }
-    },
-    "plugins/tmux-monitor": {
-      "name": "@termix-plugin/tmux-monitor",
-      "version": "1.0.0",
-      "dependencies": {
-        "lucide-react": "^1.33.0"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "react": "^19.2.8",
-        "ssh2": "^1.17.0"
-      }
-    },
-    "plugins/totp": {
-      "name": "@termix-plugin/totp",
-      "version": "1.0.0",
-      "dependencies": {
-        "lucide-react": "^1.33.0",
-        "qrcode": "^1.5.4",
-        "speakeasy": "^2.0.0"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "react": "^19.2.8",
-        "sonner": "^2.0.8"
-      }
-    },
-    "plugins/tunnels": {
-      "name": "@termix-plugin/tunnels",
-      "version": "1.0.0",
-      "dependencies": {
-        "lucide-react": "^1.33.0"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "react": "^19.2.8",
-        "sonner": "^2.0.8",
-        "ssh2": "^1.17.0",
-        "ws": "^8.21.3"
-      }
-    },
-    "plugins/vault": {
-      "name": "@termix-plugin/vault",
-      "version": "1.0.0",
-      "dependencies": {
-        "lucide-react": "^1.33.0"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "react": "^19.2.8",
-        "sonner": "^2.0.8",
-        "ssh2": "^1.17.0"
-      }
-    },
-    "plugins/wake-on-lan": {
-      "name": "@termix-plugin/wake-on-lan",
-      "version": "1.0.0",
-      "dependencies": {
-        "lucide-react": "^1.33.0"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "express": "^5.2.1",
-        "sonner": "^2.0.8"
-      }
-    },
-    "plugins/warpgate": {
-      "name": "@termix-plugin/warpgate",
-      "version": "1.0.0",
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0"
-      }
-    },
-    "plugins/web-endpoint": {
-      "name": "@termix-plugin/web-endpoint",
-      "version": "1.0.0",
-      "dependencies": {
-        "lucide-react": "^1.33.0"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/jest-dom": "^7.0.1",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "axios": "^1.19.0",
-        "express": "^5.2.1",
-        "i18next": "^26.4.2",
-        "react": "^19.2.8",
-        "sonner": "^2.0.8"
-      }
-    },
-    "plugins/webauthn": {
-      "name": "@termix-plugin/webauthn",
-      "version": "1.0.0",
-      "dependencies": {
-        "@simplewebauthn/browser": "^13.3.0",
-        "@simplewebauthn/server": "^13.3.2",
-        "lucide-react": "^1.33.0"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "react": "^19.2.8",
-        "sonner": "^2.0.8"
-      }
-    },
-    "plugins/workspaces": {
-      "name": "@termix-plugin/workspaces",
-      "version": "1.0.0",
-      "dependencies": {
-        "lucide-react": "^1.33.0"
-      },
-      "devDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "@testing-library/dom": "^10.4.2",
-        "@testing-library/react": "^16.3.3",
-        "@types/node": "^26.2.0",
-        "@types/react": "^19.2.18",
-        "@types/react-dom": "^19.2.4",
-        "better-sqlite3": "^13.0.3",
-        "jsdom": "^30.0.1",
-        "vitest": "^4.1.11"
-      },
-      "peerDependencies": {
-        "@termix/plugin-sdk": "^1.0.0",
-        "drizzle-orm": "^0.45.2",
-        "express": "^5.2.1",
-        "react": "^19.2.8",
-        "sonner": "^2.0.8"
-      }
     }
   }
 }
diff --git a/package.json b/package.json
index 6e37fdbb0..61913e70b 100644
--- a/package.json
+++ b/package.json
@@ -2,11 +2,10 @@
   "name": "termix",
   "private": true,
   "workspaces": [
-    "packages/*",
-    "plugins/*"
+    "packages/*"
   ],
-  "version": "2.9.2",
-  "description": "Self-hosted SSH and remote desktop management.",
+  "version": "26.10.0",
+  "description": "Self-hosted, plugin-based server management.",
   "author": "Karmaa",
   "main": "electron/main.cjs",
   "engines": {
@@ -16,10 +15,10 @@
   "scripts": {
     "format": "prettier --write .",
     "format:check": "prettier --check .",
-    "postinstall": "node scripts/patch-app-builder-lib.cjs && node scripts/patch-better-sqlite3.cjs && node scripts/patch-nan.cjs && node scripts/patch-node-pty.cjs && node scripts/patch-ssh2-agent.cjs && node scripts/apply-plugin-patches.cjs",
+    "postinstall": "node scripts/patch-app-builder-lib.cjs && node scripts/patch-better-sqlite3.cjs && node scripts/patch-nan.cjs && node scripts/patch-node-pty.cjs && node scripts/patch-ssh2-agent.cjs",
     "prepare": "husky || true",
     "prebuild": "node scripts/write-electron-build-info.cjs",
-    "lint": "node scripts/generate-dialect-schema.cjs --check && npm run plugin:validate-manifest && eslint . && node scripts/check-importmap-csp.cjs && node scripts/check-core-plugin-ids.cjs && node scripts/check-sdk-ui-exports.cjs && node scripts/check-plugin-locales.cjs && node scripts/check-plugin-uses.cjs && node scripts/check-test-locations.cjs",
+    "lint": "node scripts/generate-dialect-schema.cjs --check && eslint . && node scripts/check-importmap-csp.cjs && node scripts/check-core-plugin-ids.cjs && node scripts/check-sdk-ui-exports.cjs && node scripts/generate-settings-search-index.cjs --check && node scripts/check-test-locations.cjs && node scripts/check-changelog.cjs && node scripts/check-env-catalog.cjs",
     "lint:fix": "eslint --fix .",
     "type-check": "npm run build:sdk && tsc -b --force",
     "test": "vitest run",
@@ -27,34 +26,28 @@
     "test:watch": "vitest",
     "test:ui": "vitest --ui",
     "test:coverage": "vitest run --coverage",
-    "dev": "vite",
+    "dev": "node scripts/dev.mjs",
+    "dev:electron": "node scripts/dev.mjs electron",
+    "dev:docker": "node scripts/dev.mjs docker",
+    "dev:frontend": "vite",
     "build": "npm run build:sdk && vite build && tsc -p tsconfig.node.json && node -e \"require('fs').copyFileSync('src/backend/package.json','dist/backend/package.json')\" && npm run build:plugins",
     "build:backend": "npm run build:sdk && tsc -p tsconfig.node.json && node -e \"require('fs').copyFileSync('src/backend/package.json','dist/backend/package.json')\" && npm run build:plugins",
-    "dev:backend": "npm run build:sdk && tsc -p tsconfig.node.json && node -e \"require('fs').copyFileSync('src/backend/package.json','dist/backend/package.json')\" && npm run build:plugins && node ./dist/backend/backend/starter.js",
-    "dev:docker": "docker stop termix-dev 2>nul & docker rm termix-dev 2>nul & docker build -f docker/Dockerfile -t termix:dev --no-cache . && docker run -d --name termix-dev -p 3000:3000 -p 8080:8080 -p 30001:30001 -v \"%cd%\\db\\data:/app/data\" termix:dev",
-    "dev:docker:restart": "docker stop termix-dev 2>nul & docker rm termix-dev 2>nul & docker run -d --name termix-dev -p 8080:8080 -p 30001:30001 -v \"%cd%\\db\\data:/app/data\" termix:dev",
-    "generate:openapi": "npm run build:sdk && tsc -p tsconfig.node.json && node -e \"require('fs').copyFileSync('src/backend/package.json','dist/backend/package.json')\" && node ./dist/backend/backend/utils/swagger.js",
-    "preview": "vite preview",
-    "electron:dev": "concurrently \"npm run dev\" \"powershell -c \\\"Start-Sleep -Seconds 5\\\" && electron .\"",
-    "electron:patch-builder": "node scripts/patch-app-builder-lib.cjs",
+    "generate:openapi": "npm run build:sdk && node scripts/generate-openapi.mjs",
     "electron:rebuild": "electron-rebuild -f -o better-sqlite3,@serialport/bindings-cpp,node-pty",
-    "build:win-portable": "npm run build && npm run electron:rebuild && npm run electron:patch-builder && electron-builder --win --dir",
-    "build:win-installer": "npm run build && npm run electron:rebuild && npm run electron:patch-builder && electron-builder --win --publish=never",
-    "build:linux-portable": "npm run build && npm run electron:rebuild && npm run electron:patch-builder && electron-builder --linux --dir",
-    "build:linux-appimage": "npm run build && npm run electron:rebuild && npm run electron:patch-builder && electron-builder --linux AppImage",
-    "build:linux-targz": "npm run build && npm run electron:rebuild && npm run electron:patch-builder && electron-builder --linux tar.gz",
-    "build:mac": "npm run build && npm run electron:rebuild && npm run electron:patch-builder && electron-builder --mac --universal",
-    "build:mac-dev": "npm run build && npm run electron:rebuild && npm run electron:patch-builder && electron-builder --mac dir --publish=never",
+    "build:win-portable": "npm run build && npm run electron:rebuild && electron-builder --win --dir",
+    "build:win-installer": "npm run build && npm run electron:rebuild && electron-builder --win --publish=never",
+    "build:linux-appimage": "npm run build && npm run electron:rebuild && electron-builder --linux AppImage",
+    "build:linux-targz": "npm run build && npm run electron:rebuild && electron-builder --linux tar.gz",
+    "build:mac": "npm run build && npm run electron:rebuild && electron-builder --mac --universal",
     "schema:generate": "node scripts/generate-dialect-schema.cjs",
     "schema:check": "node scripts/generate-dialect-schema.cjs --check",
     "schema:migrations": "drizzle-kit generate --config=drizzle.config.sqlite.ts && drizzle-kit generate --config=drizzle.config.pg.ts && drizzle-kit generate --config=drizzle.config.mysql.ts",
-    "plugin:validate-manifest": "node scripts/validate-plugin-manifest.cjs",
-    "build:sdk": "npm run build --workspace @termix/plugin-sdk && node scripts/build-sdk-host.mjs",
+    "build:sdk": "npm run build --workspace @termix-ssh/plugin-sdk && node scripts/build-sdk-host.mjs",
     "build:plugins": "node scripts/build-plugins.cjs",
-    "test:plugins": "node scripts/run-plugin-tests.cjs",
-    "test:all": "npm run test && npm run test:plugins"
+    "plugins:pin": "node scripts/pin-bundled-plugins.cjs"
   },
   "dependencies": {
+    "@noble/hashes": "^2.4.0",
     "@tanstack/react-virtual": "^3.14.13",
     "@types/compression": "^1.8.1",
     "@types/semver": "^7.8.0",
@@ -81,6 +74,7 @@
     "sharp": "^0.35.4",
     "socks": "^2.8.10",
     "ssh2": "^1.17.0",
+    "sshpk": "^1.18.0",
     "tar": "^7.5.22",
     "undici": "^8.10.2",
     "ws": "^8.21.3"
@@ -125,6 +119,7 @@
     "@types/react": "^19.2.18",
     "@types/react-dom": "^19.2.4",
     "@types/ssh2": "^1.15.6",
+    "@types/sshpk": "^1.17.5",
     "@types/supertest": "^7.2.1",
     "@types/ws": "^8.18.1",
     "@uiw/react-codemirror": "^4.25.11",
@@ -135,7 +130,6 @@
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",
-    "concurrently": "^10.0.5",
     "drizzle-kit": "^0.31.10",
     "electron": "^43.4.1",
     "electron-builder": "^26.15.3",
@@ -143,7 +137,7 @@
     "eslint-plugin-react-hooks": "^7.1.1",
     "eslint-plugin-react-refresh": "^0.5.7",
     "eslint-plugin-unused-imports": "^4.4.1",
-    "globals": "^17.11.0",
+    "globals": "^17.13.0",
     "husky": "^9.1.7",
     "i18next": "^26.4.2",
     "i18next-browser-languagedetector": "^8.2.1",
@@ -173,10 +167,7 @@
       "eslint --fix",
       "prettier --write"
     ],
-    "*.{js,jsx}": [
-      "prettier --write"
-    ],
-    "*.{json,css,md}": [
+    "*.{js,jsx,mjs,cjs,json,css,md}": [
       "prettier --write"
     ]
   },
diff --git a/packages/plugin-sdk/CHANGELOG.md b/packages/plugin-sdk/CHANGELOG.md
new file mode 100644
index 000000000..39e7550e0
--- /dev/null
+++ b/packages/plugin-sdk/CHANGELOG.md
@@ -0,0 +1,85 @@
+# Changelog
+
+## 1.0.5
+
+### Fixed
+
+- `execCommand` timeout errors no longer include the command, which could hold a sudo password
+- `termix-plugin validate` fails when a plugin ships migrations for some database engines but not all three
+- `termix-plugin migrations` loads the table definitions from a path with a `#` or other URL characters in it
+- Text, json and encrypted columns are `longtext` on MySQL in new migrations, so they are no longer capped at 64KB. Existing migrations keep `text`
+- `i18next`, `react-dom`, `react-i18next` and `sonner` are optional peer dependencies, so npm stops installing them into backend-only plugins
+- `termix-plugin validate` accepts a beta version like `1.1.0-beta.1` when the changelog's newest release is `1.1.0` or older, so beta releases pass
+
+## 1.0.4
+
+### Fixed
+
+- `termix-plugin build` puts a plugin's own Tailwind classes in core's utilities layer, so responsive, hover and group variants and `className` overrides on SDK components work. Plain classes core already ships stay below core's utilities as before, while variants core ships go with the plugin's own so `max-h-56 md:max-h-none` keeps its order. Rebuild a plugin to pick it up
+
+## 1.0.3
+
+Plugin API 1.2.0.
+
+### Added
+
+- `docs` manifest field: an https link to the plugin's docs. Termix shows it as a Documentation link on the plugin's page and in its settings
+- `env` manifest field: the environment variables the plugin reads, listed in its docs and on its page
+- `app.docs` and `useDocsUrl()` for links into the plugin's own docs, and `DocsLink` in `@termix-ssh/plugin-sdk/ui`
+- `PanelShell` takes a `docs` link and shows it as a book icon in the header
+- `@termix-ssh/plugin-sdk/openapi` with `buildOpenApi()`, and `termix-plugin openapi`, which writes `dist/openapi.json` from the `@openapi` blocks in `src/backend`. `build` runs it too
+- `@termix-ssh/plugin-sdk/docs` with `pluginDocsUrl()`, `pluginDocsPage()` and `pluginEnvVars()`
+- `termix-plugin validate` warns when `docs/index.md` is missing or the source reads an env var the manifest does not list
+
+## 1.0.2
+
+### Added
+
+- `features` manifest field: up to 20 short lines about what the plugin does, shown on its page. `pluginFeatures()` reads them
+
+### Changed
+
+- `parseChangelog()` and `validateChangelog()` flag a `## Unreleased` section. Notes go under the version they ship in
+
+### Removed
+
+- `Changelog.unreleased`
+
+## 1.0.1
+
+### Added
+
+- Plugin API 1.1
+- `app.registerOnboardingStep()` adds a step to onboarding, with `OnboardingStepProps` and `OnboardingStepContribution`. Needs `engine.api` 1.1
+- `video` manifest field: a YouTube link shown at the top of the plugin's page, read with `youtubeVideoId()`
+- `@termix-ssh/plugin-sdk/changelog` parses and checks a plugin's `CHANGELOG.md`
+- `termix-plugin changelog` prints one version's notes from `CHANGELOG.md`
+- `termix-plugin dev` installs a plugin on a running server and reinstalls it on every change. Needs developer mode and an admin API key
+- `renderOnboardingStep()` and `registered.onboardingSteps()` in `renderWithApp()`
+- `AddButton`, `FormFooter`, `ListRow`, `ListRowAction`, `ListRowFolder`, `ListBadge` and `PanelList` in `@termix-ssh/plugin-sdk/ui`
+- `PanelSearch` takes `disabled`, `title`, `onEnter` and `inputRef`, and `SurfaceScope` takes `onClose`
+
+### Changed
+
+- Release notes moved from `CHANGELOG.json` to `CHANGELOG.md`, which `pack` now ships. `validate` flags a leftover `CHANGELOG.json`
+- `ConnectionScreen` dropped `errorMessage` and `retryLabel` and gained `onClose`. `ConnectionLogPanel` dropped `position`
+- Plugin tests run in worker threads, since forked workers crash now and then on Windows
+- The test setup stubs `ResizeObserver` for Radix controls under jsdom
+- `onboarding` is a reserved plugin id
+
+### Deprecated
+
+- The `onboarding.*` action slots. Use `registerOnboardingStep()`
+
+### Removed
+
+- `schema/changelog.schema.json`
+
+## 1.0.0
+
+### Added
+
+- Backend, frontend, database, manifest, capability and settings types for plugin API 1.0
+- Testing helpers and a Vitest preset for plugin tests
+- The `@termix-ssh/plugin-sdk/ui` component set
+- The `termix-plugin` CLI to build, validate, test, pack, sign and write migrations
diff --git a/packages/plugin-sdk/FINISH-LIST.md b/packages/plugin-sdk/FINISH-LIST.md
deleted file mode 100644
index 4f60a8754..000000000
--- a/packages/plugin-sdk/FINISH-LIST.md
+++ /dev/null
@@ -1,228 +0,0 @@
-# Finish list
-
-Everything a Phase B/C step left for D0 is done. What is left needs a person
-with a real install, a real device or a repo outside this one.
-
-## Manual checks after 2.9.0
-
-- SSH terminal: password auth, key auth (and an encrypted key's passphrase
-  prompt), TOTP keyboard-interactive, a jump host, Warpgate, split view,
-  snippets sent to a terminal, reconnect after a network drop and after a
-  page reload (session reattach), and the local terminal in the desktop app.
-- Serial: the Electron backend path against a real device path/COM port, and
-  the Web Serial browser picker in Chrome or Edge.
-- Session sharing: a link share (read-only and read-write) opened in a private
-  window, a user share joined from Active Connections, revoke and "end for
-  everyone", and a collab room with two members, control hand-off, a guest
-  link, rotate and end.
-- Session recording: an SSH session recorded end to end (playback matches what
-  happened, including a resize mid-session), a host with recording switched
-  off records nothing, retention prunes an old recording on schedule, a guacd
-  RDP/VNC/Telnet recording still gets a row and plays back, and deleting a
-  user anonymizes their recordings instead of removing them.
-- Host status and metrics: on a 2.8 database, hosts whose status checks were
-  off stay off and a custom interval survives; the host list dot goes
-  reachable, then online once the Host Metrics tab or a terminal logs in;
-  an RDP-only host on a custom port shows online; the metrics tab, the
-  dashboard host bars, the homepage host status widget, the metrics chart
-  widget, the terminal toolbar bars and the file manager's disk bar; a
-  manager card (services, packages) and a health check; TOTP on the metrics
-  connect; the admin metrics interval, history retention and new-host default;
-  the temperature unit; disabling host metrics leaves every other plugin's
-  SSH working, then enabling it again.
-- Remote desktop: an RDP, a VNC and a Telnet host; a host behind one jump
-  host (tunnels plugin on and off) and behind a chain of two; macOS Screen
-  Sharing over VNC with no username; RDP recording (and none with
-  session-recording off or the host's switch off); file transfer through the
-  RDP drive, drag and drop included; clipboard both ways; sharing an RDP
-  session by link (read-only and read-write) and presenting it in a collab
-  room; opening Windows Remote Desktop from the desktop app on Windows;
-  changing the guacd URL in admin settings without a restart; turning Remote
-  Desktop off in admin (actions disappear, connects answer 403); a 2.8 host
-  that only had `connection_type = rdp` comes up as RDP with SSH off; RDP user
-  defaults apply to a saved host; Quick Connect over RDP and VNC; the desktop
-  app with a host on the remote server and one on This device.
-- Docker: a 2.8 host with Docker on (and one on Podman) keeps its switch and
-  runtime; list, start, stop, logs, stats and the console on a Linux host;
-  TOTP (including a wrong code first) and Warpgate on the connect; a host
-  with no stored password asks for credentials; the homepage Docker widget;
-  an automation Docker step and a `docker_event` trigger; disable Docker with
-  a console open, then enable it and open another.
-- Automations: on a 2.8 database the automations, their run history and
-  their channel links are there; a schedule fires; a webhook fires on both
-  `/plugin-api/automations/webhook/<token>` and the old
-  `/automations/webhook/<token>`; a metric threshold on a host nobody has
-  open still fires (headless viewers); a `docker_event` trigger and a Docker
-  step; a notify step to webhook, ntfy and Discord channels, and to a LAN
-  ntfy with the private opt-in plus the admin allowlist; disable Docker and
-  the automation shows "Needs docker", its scheduled runs are recorded as
-  skipped and the others keep running, then enable it again; the AI
-  assistant lists and creates automations, and says they are unavailable
-  with automations off.
-- Homepage: on a 2.8 database every widget, its layout and every service
-  link are there; add, move, resize, edit and delete a widget of each type;
-  the favicon, RSS, ping and custom API widgets against a real remote URL,
-  and each refuses a private/loopback target; the dashboard's Service
-  Links and Homepage Preview cards; the Dashboard/Homepage toggle and its
-  copy-link and open-full-view buttons; `?view=homepage`; docker's, tunnels'
-  and file-manager's own homepage widgets still work with the homepage
-  plugin disabled; the AI assistant lists homepage items and says
-  unavailable with homepage off; disable homepage in admin (the tab, its
-  dashboard cards and the toggle disappear) then enable it again.
-- TOTP and passkeys: on a 2.8 database a TOTP user is still asked for a
-  code (and a backup code works once); set up TOTP from Settings > Security,
-  add a second device, regenerate backup codes, disable it; enabling signs
-  out other sessions; "remember me" skips it next time; disable the totp
-  plugin and a TOTP user's login is refused until an admin resets their
-  factors; register a passkey, sign in with it with and without a PIN (no
-  PIN still asks for TOTP), delete it; existing 2.8 passkeys still sign in.
-- SSO and LDAP: on a 2.8 database every SSO provider and LDAP directory is
-  there, in Settings > Plugins > Single sign-on and > LDAP; an existing
-  provider still signs in through its identity provider without changing
-  anything there (its redirect URI shows `/users/oidc/callback`); add the
-  new redirect URI at the provider, switch it over and sign in again; a new
-  provider, GitHub and Google; an existing SSO user and an existing LDAP
-  user land in their old accounts; the env-configured provider; admin group
-  and role map; back-channel logout from Keycloak ends the session; the
-  desktop app's system browser login and Termix-Mobile's login; silent
-  sign-in; a second factor after an external login with the admin setting
-  on and off; disable each plugin and its buttons go away and its URLs stop
-  signing anyone in, then enable it again.
-- OPKSSH and Warpgate: on a 2.8 Docker install with OPKSSH set up, the config
-  shows up under the plugin, the admin page shows the old redirect URI and a
-  terminal sign-in to an OPKSSH host works through the provider chooser
-  without touching the identity provider; switch to the new URI, register
-  it and sign in again; a second connect within 24 hours skips the browser;
-  an offline Docker install uses the baked binary; disable the opkssh plugin
-  and the host says it needs it. A Warpgate host's toggle is on in the host
-  editor's Plugins group after the upgrade, and the terminal, file manager
-  and docker each show the sign-in dialog and connect after it.
-- Vault: on a 2.8 database every Vault profile is there and each Vault host
-  still has its profile selected in the host editor; the admin page shows the
-  old redirect URI; a terminal connect opens Vault's sign-in, signs a
-  certificate and connects, and a second connect skips the browser until the
-  certificate expires; create, edit, share and delete a profile from the host
-  editor (sharing only offered with "Share Vault profiles"); switch to the new
-  redirect URI after allowing it in the Vault role; disable the vault plugin
-  and a Vault host says it needs it, then enable it again.
-- Termix-Mobile: the 2.8 termix-id management routes (`/termix-id/me`,
-  `/termix-id/keys`, `/termix-id/ca` and the rest) now 404, only the
-  `/termix-id/u/` resolver redirects. Confirm the mobile app does not call
-  them, and that it still reads a host's metrics settings (`statsConfig` is
-  put back on the host payload by host-metrics) and the renamed Warpgate
-  fields. Once it reads `pluginSettings` and `GET /host/status`, drop
-  host-metrics's `hostPayloadLegacy` hook.
-- Docs site: point these at the plugins: the OPKSSH config path and redirect
-  URI, the step-ca settings, the Vault redirect URI, the Termix ID resolver
-  URL (`/plugin-api/termix-identity/u/<handle>`, the old one still 308s) and
-  the HTTPS certificate page (`docs.termix.site/features/networking/ssl`,
-  which still describes certbot and the webroot challenge).
-- Run `bash scripts/upgrade-check.sh` once with Docker running. It upgrades
-  the D4 fixture on real Postgres 16 and MySQL 8. The Postgres half passed
-  against an in-process PGlite server during D4; MySQL has not run yet.
-- Host settings round trip: filter the Hosts panel by a plugin feature, bulk
-  enable and disable a plugin on a few hosts, export hosts to JSON and import
-  them on another install (plugin settings come across, secrets do not), the
-  raw SQLite export and import, and remote sync of a host with a Vault
-  profile selected (the profile follows it).
-- Desktop app with a remote server: tunnels on a remote host show their
-  status next to local ones, and the terminal toolbar's metrics bars work
-  for a host on the remote server.
-- Shared hosts: a remote desktop host shared at "connect" does not show its
-  gateway settings; a shared editor cannot change a Vault host's profile; the
-  host list status dot works for a host someone shared with you.
-- The PDF preview in the file manager, in the browser and in the desktop app.
-- The tab right-click menu's share entry on a terminal whose toolbar is
-  hidden, and the terminal toolbar's quick links (tmux monitor, docker,
-  tunnels, host metrics) for a host with those plugins on.
-- Appearance: switching the interface preset changes the Docker layout and
-  the host metrics column count, a change made in either shows under
-  Appearance with the plugin's name and reverts from there, and a 2.8 user's
-  Docker and host metrics overrides are still applied.
-- A new host takes the admin "command history for new hosts" setting (a 2.8
-  install that had it off in host defaults keeps it off), and the file
-  manager and terminal are on for a new host.
-- Settings saves with a bad value are refused with a message: a relative
-  terminal background image path, a step-ca URL that is not https.
-- Custom `SSL_CERT_PATH` and `SSL_KEY_PATH` in the environment survive a
-  restart and no self-signed certificate is generated over them.
-- A LAN ntfy or webhook target in the admin allowlist is reached through the
-  configured outbound proxy.
-- An admin enables a plugin that was off since the upgrade: its 2.8 data is
-  copied in without a restart.
-- A password user who signs in for the first time after the upgrade keeps
-  their TOTP (the copy runs once their keys unlock).
-- D1 changes to check by hand: Quick Connect lists Tailscale next to the
-  core auth types and connects with it, and its "Connect to Files" button
-  comes from the file manager; the admin "manage user" panel's Snippets tab
-  (add, edit, delete a snippet for another user); the dashboard's active
-  tunnel counter and its click; the tab bar's file manager button; the
-  secret reference hint and manager in the host and credential editors;
-  Proxmox guest discovery and import (now its own `/plugin-api/proxmox/import`
-  route); the Tailscale device list behind an outbound proxy and against a
-  LAN Headscale; dragging a local file into a host in the desktop app (its
-  transfer URL moved off the dead port 30004); a per-user database export and
-  import that carries file manager bookmarks; the Simple preset hiding plugin
-  rail items except Snippets.
-
-- Termix-Mobile: after a redirect login (SSO) with the admin setting
-  "second factor after external login" on, the server answers with the
-  second-factor step (pending cookie and `temp_token`) instead of a session.
-  The mobile app has to handle that step; that change is in the mobile repo.
-- D2 changes to check by hand: a remote desktop session still opens, and a
-  touch mode switch within five minutes reuses its token (after that the app
-  mints a new one); the terminal, file manager and host metrics still connect
-  and sudo still works (they now declare `credentials:read`); Docker and
-  automations connect with a redacted host handed back to core; Admin >
-  Plugins > Permissions lists a plugin's public routes; a disabled plugin's
-  `/plugin-api` URL answers 503; a share-link guest who leaves cannot type.
-
-## After D3 (needs the repos and keys)
-
-- Run `termix-plugin keygen`, then pin the public key in
-  `TRUSTED_PLUGIN_KEYS` (`src/backend/plugins/trust.ts`) and save it as
-  `keys/official.pub` in Termix-Registry. Until then the list is empty and
-  `TERMIX_REQUIRE_SIGNED_PLUGINS=true` blocks every user plugin. Steps are in
-  the Termix-Registry README.
-- Create the Termix-Registry and Termix-Plugin-Template repos from the local
-  folders next to this repo, and set `TERMIX_PLUGIN_SIGNING_KEY` and
-  `REGISTRY_TOKEN` secrets.
-- Publish the SDK (`npm run build:sdk && npm publish --workspace
-@termix/plugin-sdk`), then run `npm install` in Termix-Plugin-Template and
-  commit its `package-lock.json`; its release workflow uses `npm ci`.
-- Plugins outside this repo cannot use `renderWithApp` or
-  `@termix/plugin-sdk/ui` (types and the test host come from core's source).
-  Ship them in the SDK package before community plugins need UI components.
-- `npm run test:plugins` on Windows sometimes fails with "Worker exited
-  unexpectedly" in a random plugin (file-manager once, workspaces once); the
-  same suite passes alone and a rerun of the full run passed. Find out why
-  the vitest fork dies (D0).
-- Check by hand: drop a signed `.tmxplug` into `<DATA_DIR>/plugins/` on a
-  real install, with and without `TERMIX_REQUIRE_SIGNED_PLUGINS=true`.
-
-## Left for later
-
-- 3.0.0: drop the migrated 2.8 settings rows (`guac_url`, `step_ca_url`,
-  `global_metrics_interval` and the rest). The upgrade moves leave them in
-  place so a downgrade to 2.8 still works; nothing reads them in 2.9.
-- Plugin repo split: knip still reports about 150 unused exports inside
-  plugins (constants exported for readability, `tables.ts` exports the CLI
-  reads, test-only helpers). Prune them per plugin when it moves to its own
-  repo; core and the SDK are clean.
-- Plugin OpenAPI docs: plugins carry `@openapi` comments but
-  `src/backend/utils/swagger.ts` only scans core routes, so
-  `npm run generate:openapi` leaves every `/plugin-api/` route out.
-- Three backend tests sit next to their source, against the test layout
-  rule: `src/backend/hosts/host-session-status.test.ts`,
-  `jump-host-proxy.test.ts` and `ssh-keepalive.test.ts`. Move them under
-  `src/backend/tests/hosts/`.
-- D2 low findings, not fixed: plugin sockets have no Origin check (a
-  SameSite=lax cookie is not sent on a cross-site WebSocket, so only a
-  sibling subdomain could try); a public `:param` path matches every HTTP
-  method and would also match a sibling literal route; `/plugins/public-manifest`
-  shows plugin versions before login; `ctx.process.ensureBinary` hashes any
-  `prebuilt` path on disk; `credentials.resolveHostProtocol` falls back to the
-  SSH password for an RDP login (2.8 behaviour, behind `credentials:read`);
-  a remote desktop display token can be replayed within its five minute TTL
-  (strict single use would break the touch mode switch and reconnect, which
-  reuse it). Revisit with signing and the install UI in 3.0.0.
diff --git a/packages/plugin-sdk/LICENSE b/packages/plugin-sdk/LICENSE
new file mode 100644
index 000000000..d64569567
--- /dev/null
+++ b/packages/plugin-sdk/LICENSE
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/packages/plugin-sdk/README.md b/packages/plugin-sdk/README.md
index 6fcb25e1d..1de961a53 100644
--- a/packages/plugin-sdk/README.md
+++ b/packages/plugin-sdk/README.md
@@ -1,18 +1,61 @@
-# @termix/plugin-sdk
+<div align="center">
 
-Everything a [Termix](https://github.com/Termix-SSH/Termix) plugin builds
-against: the types for `activate(ctx)` and `activate(app)`, table
-definitions, the manifest schema, test helpers, a vitest preset and the
-`termix-plugin` CLI.
+<img src="https://raw.githubusercontent.com/Termix-SSH/Termix/main/public/icon.svg" width="120" height="120" alt="Termix Logo" />
+
+<h1>Termix Plugin SDK</h1>
+
+<p>Everything you need to build a Termix plugin</p>
+
+</div>
+
+<br />
+
+## Overview
+
+`@termix-ssh/plugin-sdk` is what every [Termix](https://github.com/Termix-SSH/Termix) plugin builds against, including the ones that ship with Termix. It has the types for a plugin's backend and frontend, table definitions, the manifest schema, test helpers, and the `termix-plugin` CLI. The easiest way to start is the [Termix Plugin Template](https://github.com/Termix-SSH/Termix-Plugin-Template). The full guide is at [docs.termix.site/develop](https://docs.termix.site/develop).
+
+<br />
+
+## Installation
 
 ```bash
-npm install --save-dev @termix/plugin-sdk
-npx termix-plugin build      # bundle dist/backend.js and dist/frontend.js
-npx termix-plugin test       # run the plugin's vitest suite
-npx termix-plugin validate   # check manifest.json and the files it names
-npx termix-plugin pack       # write <id>-<version>.tmxplug
-npx termix-plugin sign <file.tmxplug>   # needs TERMIX_PLUGIN_SIGNING_KEY
+npm install --save-dev @termix-ssh/plugin-sdk
 ```
 
-Start from
-[Termix-Plugin-Template](https://github.com/Termix-SSH/Termix-Plugin-Template).
+<br />
+
+## CLI
+
+```bash
+npx termix-plugin build                  # bundle dist/backend.js and dist/frontend.js
+npx termix-plugin patch                  # apply the plugin's dependency patches (build does this too)
+npx termix-plugin test                   # run the plugin's Vitest suite
+npx termix-plugin validate               # check manifest.json and the files it names
+npx termix-plugin openapi                # write dist/openapi.json from @openapi comments
+npx termix-plugin migrations             # write migrations from the table definitions
+npx termix-plugin pack                   # write <id>-<version>.tmxplug
+npx termix-plugin changelog              # print this version's notes from CHANGELOG.md
+npx termix-plugin sign <file.tmxplug>    # sign it, needs TERMIX_PLUGIN_SIGNING_KEY
+npx termix-plugin verify <file.tmxplug> --key <base64>   # check a signature
+npx termix-plugin keygen --out <dir>     # make a new signing key pair
+npx termix-plugin dev --server <url> --key <tmx_...>   # install on a server and reinstall on every change
+```
+
+`dev` needs developer mode on (Settings, General) and an API key from an
+admin account. It installs the plugin from a file, marked unverified, and
+reinstalls it each time you save. `TERMIX_SERVER_URL` and `TERMIX_API_KEY` work
+in place of the flags. Reload the page to pick up frontend changes.
+
+<br />
+
+## Support
+
+Bugs and ideas for the SDK or the `termix-plugin` CLI go in the [Termix repo](https://github.com/Termix-SSH/Termix/issues/new/choose). You need to be logged in to GitHub. Please be as detailed as possible, preferably in English.
+
+For discussions and questions, join the [Discord](https://discord.gg/jVQGdvHDrf) server.
+
+<br />
+
+## License
+
+Distributed under the Apache License Version 2.0. See [LICENSE](https://github.com/Termix-SSH/Termix/blob/main/LICENSE) for more information.
diff --git a/packages/plugin-sdk/cli/commands/build.mjs b/packages/plugin-sdk/cli/commands/build.mjs
index 7a124268f..690762389 100644
--- a/packages/plugin-sdk/cli/commands/build.mjs
+++ b/packages/plugin-sdk/cli/commands/build.mjs
@@ -6,6 +6,8 @@ import * as esbuild from "esbuild";
 import { BACKEND_EXTERNALS, FRONTEND_EXTERNALS } from "../lib/externals.mjs";
 import { staticUrlImports } from "../lib/static-url-imports.mjs";
 import { readManifest, resolveEntry, copyDir } from "../lib/plugin-dir.mjs";
+import { openapi } from "./openapi.mjs";
+import { splitByCoreClasses } from "../lib/css-classes.mjs";
 
 const BACKEND_ENTRIES = [
   "src/backend/index.ts",
@@ -96,14 +98,36 @@ export function applyPatches(cwd, pluginId) {
   }
 }
 
-const THEME_CSS = path.join(
+const HOST_DIR = path.join(
   path.dirname(fileURLToPath(import.meta.url)),
   "..",
   "..",
   "dist",
   "host",
-  "theme.css",
 );
+const THEME_CSS = path.join(HOST_DIR, "theme.css");
+const CORE_CLASSES = path.join(HOST_DIR, "core-classes.json");
+
+/**
+ * Moves a plugin's Tailwind layers under their own names. Core orders
+ * termix-plugin-utilities above its base styles and below its own utilities,
+ * so a plugin's copy of `.hidden` can never beat core's `md:flex` just
+ * because the plugin's file loaded later. Only classes core also ships go
+ * there; `utilities: false` keeps the rest in core's own utilities layer.
+ */
+export function lowerPluginLayers(css, { utilities = true } = {}) {
+  const layers = utilities ? "properties|utilities" : "properties";
+  return css.replace(
+    new RegExp(`@layer (${layers})(?=[\\s{;,])`, "g"),
+    "@layer termix-plugin-$1",
+  );
+}
+
+/** Classes core's CSS has rules for, or null with an SDK built before 1.0.4. */
+function readCoreClasses() {
+  if (!fs.existsSync(CORE_CLASSES)) return null;
+  return new Set(JSON.parse(fs.readFileSync(CORE_CLASSES, "utf8")));
+}
 
 /**
  * Compiles the Tailwind classes the plugin's frontend uses into
@@ -112,19 +136,6 @@ const THEME_CSS = path.join(
  * otherwise have no CSS at all. Appended to whatever CSS the bundle already
  * produced (a library's stylesheet the plugin imports).
  */
-/**
- * Moves a plugin's Tailwind layers under their own names. Core orders
- * termix-plugin-utilities above its base styles and below its own utilities,
- * so a plugin's copy of `.hidden` can never beat core's `md:flex` just
- * because the plugin's file loaded later.
- */
-export function lowerPluginLayers(css) {
-  return css.replace(
-    /@layer (properties|utilities)(?=[\s{;,])/g,
-    "@layer termix-plugin-$1",
-  );
-}
-
 export async function buildTailwind(cwd, outDir) {
   const { compile, optimize } = await import("@tailwindcss/node");
   const { Scanner } = await import("@tailwindcss/oxide");
@@ -136,10 +147,9 @@ export async function buildTailwind(cwd, outDir) {
     `@import ${JSON.stringify(THEME_CSS.replaceAll("\\", "/"))};`,
     '@import "tailwindcss/utilities.css" layer(utilities);',
   ].join("\n");
-  const compiler = await compile(input, {
-    base: path.dirname(THEME_CSS),
-    onDependency: () => {},
-  });
+  // build() adds to what a compiler already emitted, so each half gets its own.
+  const compiler = () =>
+    compile(input, { base: path.dirname(THEME_CSS), onDependency: () => {} });
   const scanner = new Scanner({
     sources: [
       {
@@ -151,9 +161,23 @@ export async function buildTailwind(cwd, outDir) {
   });
   // Flattened and minified the way core's own CSS is, so it does not rely
   // on native CSS nesting.
-  const css = lowerPluginLayers(
-    optimize(compiler.build(scanner.scan()), { minify: true }).code.trim(),
-  );
+  const emit = async (candidates, options) =>
+    candidates.length === 0
+      ? ""
+      : lowerPluginLayers(
+          optimize((await compiler()).build(candidates), {
+            minify: true,
+          }).code.trim(),
+          options,
+        );
+  const candidates = scanner.scan();
+  const coreClasses = readCoreClasses();
+  const { shared, own } = coreClasses
+    ? splitByCoreClasses(candidates, coreClasses)
+    : { shared: candidates, own: [] };
+  const css = [await emit(shared), await emit(own, { utilities: false })]
+    .filter(Boolean)
+    .join("\n");
   if (!css) return;
   const target = path.join(outDir, "frontend.css");
   const existing = fs.existsSync(target) ? fs.readFileSync(target, "utf8") : "";
@@ -241,6 +265,7 @@ export async function build({ cwd }) {
 
   copyDir(path.join(cwd, "locales"), path.join(outDir, "locales"));
   copyDir(path.join(cwd, "migrations"), path.join(outDir, "migrations"));
+  await openapi({ cwd, quiet: true });
 
   console.log(`built ${pluginId}`);
 }
diff --git a/packages/plugin-sdk/cli/commands/changelog.mjs b/packages/plugin-sdk/cli/commands/changelog.mjs
new file mode 100644
index 000000000..f5042a78a
--- /dev/null
+++ b/packages/plugin-sdk/cli/commands/changelog.mjs
@@ -0,0 +1,25 @@
+import fs from "node:fs";
+import path from "node:path";
+import { readManifest } from "../lib/plugin-dir.mjs";
+import { loadSdkModule } from "./validate.mjs";
+
+/**
+ * Prints one version's notes from CHANGELOG.md, the manifest version unless
+ * --version says otherwise. The release workflow uses it as the release body.
+ */
+export async function changelog({ cwd, args = [] }) {
+  const index = args.indexOf("--version");
+  const version =
+    index === -1 ? readManifest(cwd).version : args[index + 1] || null;
+  if (!version) throw new Error("--version needs a value");
+
+  const file = path.join(cwd, "CHANGELOG.md");
+  if (!fs.existsSync(file)) throw new Error("There is no CHANGELOG.md");
+
+  const { changelogSection } = await loadSdkModule("changelog");
+  const section = changelogSection(fs.readFileSync(file, "utf8"), version);
+  if (!section) {
+    throw new Error(`CHANGELOG.md has no notes for ${version}`);
+  }
+  process.stdout.write(`${section}\n`);
+}
diff --git a/packages/plugin-sdk/cli/commands/dev.mjs b/packages/plugin-sdk/cli/commands/dev.mjs
new file mode 100644
index 000000000..97bbd9580
--- /dev/null
+++ b/packages/plugin-sdk/cli/commands/dev.mjs
@@ -0,0 +1,158 @@
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import process from "node:process";
+import { build } from "./build.mjs";
+import { pack } from "./pack.mjs";
+import { readManifest } from "../lib/plugin-dir.mjs";
+
+const SOURCE_DIRS = new Set(["src", "locales", "migrations"]);
+const SOURCE_FILES = new Set(["manifest.json", "package.json", "README.md"]);
+
+function readOption(args, name) {
+  const index = args.indexOf(name);
+  if (index === -1) return null;
+  const value = args[index + 1];
+  if (!value) throw new Error(`${name} needs a value`);
+  return value;
+}
+
+/** True when a changed path (relative to the plugin) feeds its build. */
+export function isSourceChange(filename) {
+  if (!filename) return false;
+  const parts = String(filename).replaceAll("\\", "/").split("/");
+  if (parts.length === 1) return SOURCE_FILES.has(parts[0]);
+  return SOURCE_DIRS.has(parts[0]);
+}
+
+export function resolveDevOptions(args, env = process.env) {
+  const server = (
+    readOption(args, "--server") ??
+    env.TERMIX_SERVER_URL ??
+    "http://localhost:30001"
+  ).replace(/\/+$/, "");
+  const key = readOption(args, "--key") ?? env.TERMIX_API_KEY ?? null;
+  if (!key) {
+    throw new Error(
+      "An admin API key is needed. Pass --key tmx_... or set TERMIX_API_KEY.",
+    );
+  }
+  return { server, key, once: args.includes("--once") };
+}
+
+const HINTS = {
+  DEVELOPER_MODE_OFF:
+    "Turn on Plugin developer mode in Settings, General, then save again.",
+  SIGNED_ONLY:
+    "The server sets TERMIX_REQUIRE_SIGNED_PLUGINS, so it never installs unsigned files.",
+  BUNDLED_ID: "That id ships with Termix. Use a different id while developing.",
+  ALREADY_INSTALLED:
+    "Uninstall the copy installed from the registry first, then save again.",
+};
+
+async function request(fetchImpl, url, init) {
+  const response = await fetchImpl(url, init);
+  const text = await response.text();
+  let body = null;
+  try {
+    body = text ? JSON.parse(text) : null;
+  } catch {
+    body = { error: text };
+  }
+  if (!response.ok) {
+    const code = body?.code;
+    const hint = code && HINTS[code] ? `\n  ${HINTS[code]}` : "";
+    throw new Error(
+      `${response.status} ${body?.error ?? response.statusText}${hint}`,
+    );
+  }
+  return body;
+}
+
+/** Uploads a packed .tmxplug and installs it, agreeing to what it asks for. */
+export async function pushPlugin(
+  file,
+  { server, key },
+  fetchImpl = globalThis.fetch,
+) {
+  const auth = { Authorization: `Bearer ${key}` };
+  const preview = await request(fetchImpl, `${server}/plugins/upload`, {
+    method: "POST",
+    headers: { ...auth, "Content-Type": "application/octet-stream" },
+    body: fs.readFileSync(file),
+  });
+  const result = await request(
+    fetchImpl,
+    `${server}/plugins/upload/${preview.token}/install`,
+    {
+      method: "POST",
+      headers: { ...auth, "Content-Type": "application/json" },
+      body: JSON.stringify({ capabilities: preview.capabilities }),
+    },
+  );
+  return { preview, result };
+}
+
+/**
+ * Builds, packs and installs the plugin on a running Termix server, then
+ * does it again on every source change. The server needs developer mode on.
+ */
+export async function dev({ cwd, args = [] }) {
+  const options = resolveDevOptions(args);
+  const outDir = fs.mkdtempSync(path.join(os.tmpdir(), "termix-plugin-dev-"));
+  let lastCapabilities = null;
+
+  const cycle = async () => {
+    const started = Date.now();
+    await build({ cwd });
+    const file = await pack({ cwd, args: ["--out", outDir] });
+    const { preview, result } = await pushPlugin(file, options);
+    fs.rmSync(file, { force: true });
+    const capabilities = preview.capabilities.join(", ") || "none";
+    if (capabilities !== lastCapabilities) {
+      console.log(`  capabilities ${capabilities}`);
+      lastCapabilities = capabilities;
+    }
+    console.log(
+      `installed ${result.id}@${result.version} on ${options.server} (${result.state}, ${Date.now() - started} ms)`,
+    );
+  };
+
+  try {
+    await cycle();
+  } catch (error) {
+    if (options.once) throw error;
+    console.error(error?.message ?? error);
+  }
+  if (options.once) return;
+
+  const { id } = readManifest(cwd);
+  console.log(`watching ${id} for changes, Ctrl+C to stop`);
+  let timer = null;
+  let running = false;
+  let again = false;
+  const fire = async () => {
+    if (running) {
+      again = true;
+      return;
+    }
+    running = true;
+    try {
+      await cycle();
+    } catch (error) {
+      console.error(error?.message ?? error);
+    } finally {
+      running = false;
+      if (again) {
+        again = false;
+        void fire();
+      }
+    }
+  };
+  fs.watch(cwd, { recursive: true }, (_event, filename) => {
+    if (!isSourceChange(filename)) return;
+    clearTimeout(timer);
+    timer = setTimeout(() => void fire(), 300);
+  });
+  await new Promise(() => {});
+}
diff --git a/packages/plugin-sdk/cli/commands/migrations.mjs b/packages/plugin-sdk/cli/commands/migrations.mjs
index 05f7c9b6f..22cdff5e5 100644
--- a/packages/plugin-sdk/cli/commands/migrations.mjs
+++ b/packages/plugin-sdk/cli/commands/migrations.mjs
@@ -17,7 +17,7 @@
 
 import fs from "node:fs";
 import path from "node:path";
-import { fileURLToPath } from "node:url";
+import { fileURLToPath, pathToFileURL } from "node:url";
 import * as esbuild from "esbuild";
 import { BACKEND_EXTERNALS } from "../lib/externals.mjs";
 import { readManifest, resolveEntry } from "../lib/plugin-dir.mjs";
@@ -37,7 +37,7 @@ async function loadDefinitions(cwd) {
 
   // Emitted inside the plugin rather than in the system temp dir: the SDK
   // stays external to the bundle, so the output has to sit somewhere node can
-  // resolve @termix/plugin-sdk from.
+  // resolve @termix-ssh/plugin-sdk from.
   const outdir = fs.mkdtempSync(path.join(cwd, ".termix-tables-"));
   const outfile = path.join(outdir, "tables.mjs");
 
@@ -53,7 +53,7 @@ async function loadDefinitions(cwd) {
       external: BACKEND_EXTERNALS,
     });
 
-    const module = await import(`file://${outfile.split(path.sep).join("/")}`);
+    const module = await import(pathToFileURL(outfile).href);
     const tables = module.tables ?? module.default;
     if (!Array.isArray(tables)) {
       throw new Error(
diff --git a/packages/plugin-sdk/cli/commands/openapi.mjs b/packages/plugin-sdk/cli/commands/openapi.mjs
new file mode 100644
index 000000000..5ac9c0cfb
--- /dev/null
+++ b/packages/plugin-sdk/cli/commands/openapi.mjs
@@ -0,0 +1,39 @@
+import fs from "node:fs";
+import path from "node:path";
+import { readManifest } from "../lib/plugin-dir.mjs";
+import { loadSdkModule } from "./validate.mjs";
+
+/**
+ * Writes dist/openapi.json from the @openapi blocks in src/backend. A plugin
+ * with no documented routes gets no file.
+ */
+export async function openapi({ cwd, quiet = false }) {
+  const manifest = readManifest(cwd);
+  const pluginId = manifest.id ?? path.basename(cwd);
+  const backendDir = path.join(cwd, "src", "backend");
+  if (!fs.existsSync(backendDir)) return null;
+
+  const { buildOpenApi, hasOpenApiPaths } = await loadSdkModule("openapi");
+  const spec = await buildOpenApi({
+    title: `${manifest.name ?? pluginId} API`,
+    version: manifest.version ?? "0.0.0",
+    description: manifest.description,
+    files: [path.join(backendDir, "**", "*.{ts,tsx,js,mjs}")],
+  });
+
+  const target = path.join(cwd, "dist", "openapi.json");
+  if (!hasOpenApiPaths(spec)) {
+    fs.rmSync(target, { force: true });
+    if (!quiet) console.log(`${pluginId}: no documented routes`);
+    return null;
+  }
+
+  fs.mkdirSync(path.dirname(target), { recursive: true });
+  fs.writeFileSync(target, `${JSON.stringify(spec, null, 2)}\n`);
+  if (!quiet) {
+    console.log(
+      `wrote dist/openapi.json (${Object.keys(spec.paths).length} paths)`,
+    );
+  }
+  return target;
+}
diff --git a/packages/plugin-sdk/cli/commands/validate.mjs b/packages/plugin-sdk/cli/commands/validate.mjs
index df9fd1ecc..10b423f2a 100644
--- a/packages/plugin-sdk/cli/commands/validate.mjs
+++ b/packages/plugin-sdk/cli/commands/validate.mjs
@@ -7,18 +7,17 @@ import { readManifest } from "../lib/plugin-dir.mjs";
  * The manifest rules live in src/manifest.ts, which the server uses too, so
  * there is one implementation rather than a copy here that drifts.
  */
-async function loadParseManifest() {
-  const entry = new URL("../../dist/manifest.js", import.meta.url);
+export async function loadSdkModule(name) {
+  const entry = new URL(`../../dist/${name}.js`, import.meta.url);
   if (!fs.existsSync(fileURLToPath(entry))) {
     throw new Error("The plugin SDK is not built yet. Run: npm run build:sdk");
   }
-  const mod = await import(entry.href);
-  return mod.parseManifest;
+  return import(entry.href);
 }
 
 export async function validate({ cwd }) {
   const raw = readManifest(cwd);
-  const parseManifest = await loadParseManifest();
+  const { parseManifest } = await loadSdkModule("manifest");
   const { errors } = parseManifest(raw);
 
   const problems = [...errors];
@@ -40,6 +39,11 @@ export async function validate({ cwd }) {
   );
   problems.push(...validateNativeDependencies(cwd, raw));
   problems.push(...validatePackage(cwd, raw));
+  problems.push(...(await validateChangelogFile(cwd, raw)));
+
+  for (const warning of docsWarnings(cwd, raw)) {
+    console.warn(`  warn  ${warning}`);
+  }
 
   if (problems.length > 0) {
     for (const problem of problems) console.error(`  ${problem}`);
@@ -49,6 +53,69 @@ export async function validate({ cwd }) {
   console.log(`ok  ${raw.id ?? path.basename(cwd)}`);
 }
 
+/** Env vars core sets for everyone, so a plugin need not list them. */
+const CORE_ENV = new Set([
+  "DATA_DIR",
+  "NODE_ENV",
+  "PORT",
+  "BASE_PATH",
+  "VERSION",
+  "HOME",
+  "TMPDIR",
+  "TEMP",
+  "TMP",
+  "PATH",
+  "APPDATA",
+  "LOCALAPPDATA",
+  "USERPROFILE",
+  "ELECTRON_EMBEDDED",
+]);
+
+const ENV_READS = [
+  /process\.env\.([A-Z][A-Z0-9_]*)/g,
+  /process\.env\[\s*["'`]([A-Z][A-Z0-9_]*)["'`]\s*\]/g,
+  /\benv\.([A-Z][A-Z0-9_]*)\b/g,
+  /\benv\[\s*["'`]([A-Z][A-Z0-9_]*)["'`]\s*\]/g,
+];
+
+function walkSources(dir, out = []) {
+  if (!fs.existsSync(dir)) return out;
+  for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+    const full = path.join(dir, entry.name);
+    if (entry.isDirectory()) walkSources(full, out);
+    else if (/\.(ts|tsx|js|mjs|cjs)$/.test(entry.name)) out.push(full);
+  }
+  return out;
+}
+
+/**
+ * Docs gaps that do not block a release: no docs/index.md, or a process.env
+ * read the manifest does not list in env.
+ */
+export function docsWarnings(cwd, raw) {
+  const warnings = [];
+  if (!fs.existsSync(path.join(cwd, "docs", "index.md"))) {
+    warnings.push("docs/index.md is missing, so the plugin has no docs page");
+  }
+  const declared = new Set(
+    Array.isArray(raw.env) ? raw.env.map((e) => e?.name) : [],
+  );
+  const missing = new Set();
+  for (const file of walkSources(path.join(cwd, "src"))) {
+    const text = fs.readFileSync(file, "utf8");
+    for (const pattern of ENV_READS) {
+      for (const match of text.matchAll(pattern)) {
+        const name = match[1];
+        if (!declared.has(name) && !CORE_ENV.has(name)) missing.add(name);
+      }
+    }
+  }
+  for (const name of [...missing].sort()) {
+    warnings.push(`reads ${name} but manifest env does not list it`);
+  }
+  return warnings;
+}
+
 /**
  * package.json has to agree with the manifest: the same version, and a real
  * SDK range rather than "*", so a plugin built against a newer SDK says so.
@@ -66,19 +133,37 @@ function validatePackage(cwd, raw) {
   }
 
   const sdkRange =
-    pkg.peerDependencies?.["@termix/plugin-sdk"] ??
-    pkg.dependencies?.["@termix/plugin-sdk"] ??
-    pkg.devDependencies?.["@termix/plugin-sdk"];
+    pkg.peerDependencies?.["@termix-ssh/plugin-sdk"] ??
+    pkg.dependencies?.["@termix-ssh/plugin-sdk"] ??
+    pkg.devDependencies?.["@termix-ssh/plugin-sdk"];
   if (!sdkRange) {
-    problems.push("package.json does not depend on @termix/plugin-sdk");
+    problems.push("package.json does not depend on @termix-ssh/plugin-sdk");
   } else if (sdkRange === "*" || sdkRange === "latest") {
     problems.push(
-      `@termix/plugin-sdk is "${sdkRange}"; pin a range such as "^1.0.0"`,
+      `@termix-ssh/plugin-sdk is "${sdkRange}"; pin a range such as "^1.0.0"`,
     );
   }
   return problems;
 }
 
+/**
+ * CHANGELOG.md is optional, but when it is there it has to parse and its
+ * newest release has to match the manifest version.
+ */
+async function validateChangelogFile(cwd, raw) {
+  if (fs.existsSync(path.join(cwd, "CHANGELOG.json"))) {
+    return [
+      "CHANGELOG.json is no longer read; move the release notes to CHANGELOG.md",
+    ];
+  }
+  const mdPath = path.join(cwd, "CHANGELOG.md");
+  if (!fs.existsSync(mdPath)) return [];
+  const { validateChangelog } = await loadSdkModule("changelog");
+  return validateChangelog(fs.readFileSync(mdPath, "utf8"), raw.version).map(
+    (problem) => `CHANGELOG.md: ${problem}`,
+  );
+}
+
 /**
  * A native dependency has to actually be a real dependency of the plugin, or
  * the build's external declaration points at nothing node_modules can
@@ -133,6 +218,11 @@ async function validateMigrations(cwd, pluginId) {
   const present = DIALECTS.filter((dialect) =>
     fs.existsSync(path.join(root, dialect)),
   );
+  for (const dialect of DIALECTS) {
+    if (present.length > 0 && !present.includes(dialect)) {
+      problems.push(`migrations/${dialect} is missing`);
+    }
+  }
 
   const byDialect = new Map();
   for (const dialect of present) {
diff --git a/packages/plugin-sdk/cli/index.mjs b/packages/plugin-sdk/cli/index.mjs
index 122f192be..9a1286130 100755
--- a/packages/plugin-sdk/cli/index.mjs
+++ b/packages/plugin-sdk/cli/index.mjs
@@ -2,7 +2,7 @@
 /**
  * termix-plugin: build, validate, test, pack and sign a Termix plugin.
  *
- * Run from a plugin directory (npm run build inside plugins/<id>/ does).
+ * Run from a plugin directory (a plugin repo's npm run build does).
  */
 
 import process from "node:process";
@@ -13,17 +13,27 @@ import { test } from "./commands/test.mjs";
 import { pack } from "./commands/pack.mjs";
 import { sign, verify, keygen } from "./commands/sign.mjs";
 import { migrations } from "./commands/migrations.mjs";
+import { dev } from "./commands/dev.mjs";
+import { changelog } from "./commands/changelog.mjs";
+import { openapi } from "./commands/openapi.mjs";
 
 const COMMANDS = {
   build,
   patch: async ({ cwd }) => applyPatches(cwd, readManifest(cwd).id),
   validate,
-  test,
+  // The tests exercise patched dependencies, so patch first like build does.
+  test: async (options) => {
+    applyPatches(options.cwd, readManifest(options.cwd).id);
+    return test(options);
+  },
   pack,
   sign,
   verify,
   keygen,
   migrations,
+  dev,
+  changelog,
+  openapi,
 };
 
 const [command, ...args] = process.argv.slice(2);
@@ -36,12 +46,17 @@ if (!command || command === "--help" || command === "-h") {
       "  build      Bundle the plugin into dist/",
       "  patch      Apply the plugin's dependency patches (build does this too)",
       "  validate   Check manifest.json and the files it names",
-      "  test       Run the plugin's vitest suite",
+      "  test       Apply the patches, then run the plugin's vitest suite",
       "  pack       Write <id>-<version>.tmxplug of the built plugin [--out dir]",
       "  sign       Sign a .tmxplug with TERMIX_PLUGIN_SIGNING_KEY <file>",
       "  verify     Check a .tmxplug's .sig <file> --key <base64>[,...]",
       "  keygen     Write a new signing key pair [--out dir]",
       "  migrations Generate migrations from the plugin's table definitions",
+      "  openapi    Write dist/openapi.json from the @openapi blocks in src/backend",
+      "  changelog  Print a version's notes from CHANGELOG.md [--version x.y.z]",
+      "  dev        Build, pack and install on a running server, again on every change",
+      "             [--server url] [--key tmx_...] [--once]",
+      "             (or TERMIX_SERVER_URL and TERMIX_API_KEY; needs developer mode)",
     ].join("\n"),
   );
   process.exit(command ? 0 : 1);
diff --git a/packages/plugin-sdk/cli/lib/css-classes.mjs b/packages/plugin-sdk/cli/lib/css-classes.mjs
new file mode 100644
index 000000000..04b40ab9d
--- /dev/null
+++ b/packages/plugin-sdk/cli/lib/css-classes.mjs
@@ -0,0 +1,37 @@
+/**
+ * The class names a stylesheet has rules for, unescaped, so `.md\:w-44`
+ * reads as the candidate `md:w-44` a plugin writes.
+ */
+export function classNamesInCss(css) {
+  const names = new Set();
+  // Declarations hold numbers like 0.25rem, so only selectors are read.
+  const selectors = css.replace(/\{[^{}]*\}/g, "{}");
+  for (const match of selectors.matchAll(
+    /\.((?:\\[0-9a-fA-F]{1,6} ?|\\.|[\w-])+)/g,
+  )) {
+    names.add(
+      match[1].replace(/\\([0-9a-fA-F]{1,6}) ?|\\(.)/g, (_all, hex, char) =>
+        hex ? String.fromCodePoint(parseInt(hex, 16)) : char,
+      ),
+    );
+  }
+  return names;
+}
+
+/**
+ * Splits a plugin's candidates by whether core's own CSS already has them.
+ * A plain class core ships keeps the plugin's copy below core's utilities, so
+ * it can never reorder core's rules. Everything else goes in core's utilities
+ * layer: plugin-only classes, and every variant (md:, hover:, ...) even when
+ * core ships it, so `max-h-56 md:max-h-none` is ordered in one build and a
+ * variant still beats core's own base class.
+ */
+export function splitByCoreClasses(candidates, coreClasses) {
+  const shared = [];
+  const own = [];
+  for (const candidate of candidates) {
+    const plain = !candidate.includes(":");
+    (plain && coreClasses.has(candidate) ? shared : own).push(candidate);
+  }
+  return { shared, own };
+}
diff --git a/packages/plugin-sdk/cli/lib/externals.mjs b/packages/plugin-sdk/cli/lib/externals.mjs
index a9a0e8231..894acfdd7 100644
--- a/packages/plugin-sdk/cli/lib/externals.mjs
+++ b/packages/plugin-sdk/cli/lib/externals.mjs
@@ -14,8 +14,8 @@
  */
 
 export const BACKEND_EXTERNALS = [
-  "@termix/plugin-sdk",
-  "@termix/plugin-sdk/*",
+  "@termix-ssh/plugin-sdk",
+  "@termix-ssh/plugin-sdk/*",
   "express",
   "ssh2",
   "ws",
@@ -41,6 +41,6 @@ export const FRONTEND_EXTERNALS = [
   "i18next",
   "react-i18next",
   "sonner",
-  "@termix/plugin-sdk/frontend",
-  "@termix/plugin-sdk/ui",
+  "@termix-ssh/plugin-sdk/frontend",
+  "@termix-ssh/plugin-sdk/ui",
 ];
diff --git a/packages/plugin-sdk/package.json b/packages/plugin-sdk/package.json
index dd2695db1..7a2a91553 100644
--- a/packages/plugin-sdk/package.json
+++ b/packages/plugin-sdk/package.json
@@ -1,8 +1,8 @@
 {
-  "name": "@termix/plugin-sdk",
-  "version": "1.0.0",
+  "name": "@termix-ssh/plugin-sdk",
+  "version": "1.0.5",
   "description": "The contract between Termix core and a plugin: types, the capability catalog and the manifest schema.",
-  "license": "MIT",
+  "license": "Apache-2.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/Termix-SSH/Termix.git",
@@ -14,7 +14,7 @@
     "node": ">=22"
   },
   "bin": {
-    "termix-plugin": "./cli/index.mjs"
+    "termix-plugin": "cli/index.mjs"
   },
   "exports": {
     "./backend": {
@@ -49,6 +49,18 @@
       "types": "./dist/capabilities.d.ts",
       "default": "./dist/capabilities.js"
     },
+    "./changelog": {
+      "types": "./dist/changelog.d.ts",
+      "default": "./dist/changelog.js"
+    },
+    "./docs": {
+      "types": "./dist/docs.d.ts",
+      "default": "./dist/docs.js"
+    },
+    "./openapi": {
+      "types": "./dist/openapi.d.ts",
+      "default": "./dist/openapi.js"
+    },
     "./settings": {
       "types": "./dist/settings.d.ts",
       "default": "./dist/settings.js"
@@ -90,6 +102,7 @@
     "schema",
     "tsconfig.plugin.json",
     "README.md",
+    "CHANGELOG.md",
     "client.d.ts"
   ],
   "scripts": {
@@ -97,6 +110,7 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
+    "@deadendjs/swagger-jsdoc": "^8.1.2",
     "@tailwindcss/node": "^4.2.4",
     "@tailwindcss/oxide": "^4.2.4",
     "esbuild": "^0.28.1",
@@ -134,6 +148,18 @@
     },
     "@testing-library/react": {
       "optional": true
+    },
+    "i18next": {
+      "optional": true
+    },
+    "react-dom": {
+      "optional": true
+    },
+    "react-i18next": {
+      "optional": true
+    },
+    "sonner": {
+      "optional": true
     }
   },
   "publishConfig": {
diff --git a/packages/plugin-sdk/schema/manifest.schema.json b/packages/plugin-sdk/schema/manifest.schema.json
index ddc4ba6d6..4ef59dd72 100644
--- a/packages/plugin-sdk/schema/manifest.schema.json
+++ b/packages/plugin-sdk/schema/manifest.schema.json
@@ -72,7 +72,39 @@
     "icon": {
       "type": "string",
       "minLength": 1,
-      "description": "A Lucide icon name, or a relative path to an icon.svg in the plugin root."
+      "description": "A Lucide icon name, like \"Play\"."
+    },
+    "video": {
+      "type": "string",
+      "pattern": "^https://(www\\.|m\\.)?(youtube\\.com|youtu\\.be|youtube-nocookie\\.com)/",
+      "description": "A YouTube link shown at the top of the plugin's page."
+    },
+    "features": {
+      "type": "array",
+      "maxItems": 20,
+      "items": { "type": "string", "minLength": 1, "maxLength": 160 },
+      "description": "Short lines listing what the plugin does, shown on its page."
+    },
+    "docs": {
+      "type": "string",
+      "pattern": "^https://",
+      "description": "Where the plugin's docs live. Shown as a Documentation link in Termix."
+    },
+    "env": {
+      "type": "array",
+      "description": "Environment variables the plugin reads, listed in its docs.",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["name", "description"],
+        "properties": {
+          "name": { "type": "string", "pattern": "^[A-Z][A-Z0-9_]{0,63}$" },
+          "description": { "type": "string", "minLength": 1, "maxLength": 300 },
+          "default": { "type": "string" },
+          "required": { "type": "boolean" },
+          "secret": { "type": "boolean" }
+        }
+      }
     },
     "engine": {
       "type": "object",
diff --git a/packages/plugin-sdk/src/backend.ts b/packages/plugin-sdk/src/backend.ts
index 660bad272..6ea70c0f8 100644
--- a/packages/plugin-sdk/src/backend.ts
+++ b/packages/plugin-sdk/src/backend.ts
@@ -339,6 +339,9 @@ export interface PluginRouterOptions {
    * and matched exactly ("/callback", not "/plugin-api/<id>/callback"). A
    * ":name" segment matches one segment, and a trailing "/*" matches any
    * number of further segments, for a proxied page ("/chooser/:id/*").
+   * An entry only opens the route registered with that same path, for the
+   * methods it was registered with, so a literal route beside a ":param"
+   * ("/webhook/config" next to "/webhook/:token") still needs a login.
    *
    * For the handful of routes an unauthenticated third party has to reach: an
    * OIDC callback, an inbound webhook. Every entry is audited when the router
@@ -373,7 +376,7 @@ export interface PluginHttp {
   /**
    * The public base URL a request came in on: origin plus the install's base
    * path, no trailing slash. Honours forwarded headers from a trusted proxy,
-   * BASE_PATH and OIDC_FORCE_HTTPS. For building absolute callback URLs.
+   * BASE_PATH and EXTERNAL_FORCE_HTTPS. For building absolute callback URLs.
    */
   baseUrl: (req: unknown) => string;
 }
@@ -1368,10 +1371,9 @@ export type PluginVerifiedIdentity =
         sid?: string | null;
       };
       /**
-       * The values a 2.8 install kept on the user row (`oidc_identifier`,
-       * `sso_provider_id`). Only for a plugin that took over a 2.8 login
-       * method: core finds pre-2.9 accounts by `identifier` and keeps writing
-       * both for new users so a downgrade still works.
+       * The identifier a 2.8 install kept for the user. Only for a plugin
+       * that took over a 2.8 login method: core also checks `identifier`
+       * against `allowedUsers`. `providerRowId` is no longer read.
        */
       legacy?: { identifier: string; providerRowId?: number | null };
       /**
@@ -1860,8 +1862,9 @@ export interface PluginBinarySpec {
   /** Hex SHA-256 the file must have. */
   sha256: string;
   /**
-   * Paths checked before downloading, such as a copy baked into the Docker
-   * image. One whose checksum matches is used in place.
+   * Absolute paths checked before downloading, such as a copy baked into the
+   * Docker image. Only a regular file named `name` is considered, and one
+   * whose checksum matches is used in place.
    */
   prebuilt?: readonly string[];
 }
diff --git a/packages/plugin-sdk/src/changelog.ts b/packages/plugin-sdk/src/changelog.ts
new file mode 100644
index 000000000..c59f62c34
--- /dev/null
+++ b/packages/plugin-sdk/src/changelog.ts
@@ -0,0 +1,254 @@
+/**
+ * CHANGELOG.md: every release of a plugin (or of core) in one Markdown file.
+ *
+ *   # Changelog
+ *
+ *   ## 1.1.0
+ *
+ *   An optional summary paragraph.
+ *
+ *   ### Added
+ *   - Something new
+ *
+ *   ### Fixed
+ *   - Something broken
+ *
+ * Releases are listed newest first, and the newest one has to be the
+ * manifest version. Notes go straight under the version they ship in, there
+ * is no Unreleased section.
+ */
+
+import semver from "semver";
+
+export const CHANGE_TYPES = [
+  "added",
+  "changed",
+  "fixed",
+  "removed",
+  "deprecated",
+  "security",
+] as const;
+
+export type ChangeType = (typeof CHANGE_TYPES)[number];
+
+export interface ChangelogChange {
+  type: ChangeType;
+  text: string;
+}
+
+export interface ChangelogRelease {
+  version: string;
+  date?: string;
+  summary?: string;
+  changes: ChangelogChange[];
+}
+
+export interface Changelog {
+  /** Newest first, as written. */
+  releases: ChangelogRelease[];
+}
+
+export interface ReleaseNotes {
+  summary?: string;
+  changes: ChangelogChange[];
+}
+
+const RELEASE_HEADING =
+  /^##\s+\[?(\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?)\]?(?:\s+-\s+(.+?))?\s*$/;
+const UNRELEASED_HEADING = /^##\s+\[?unreleased\]?\s*$/i;
+const DATE = /^\d{4}-\d{2}-\d{2}$/;
+const BULLET = /^[-*]\s+(.*)$/;
+const COMMENT = /^<!--.*-->$/;
+
+/**
+ * Parses the body under one release heading: an optional summary, then
+ * `### Added` style sections of bullets. Indented lines continue the bullet
+ * above them.
+ */
+export function parseReleaseNotes(
+  body: string,
+  where = "release",
+): ReleaseNotes & { problems: string[] } {
+  const problems: string[] = [];
+  const summary: string[] = [];
+  const changes: ChangelogChange[] = [];
+  let section: ChangeType | null = null;
+  let current: ChangelogChange | null = null;
+  let fence = false;
+
+  for (const raw of body.replace(/\r/g, "").split("\n")) {
+    const line = raw.trimEnd();
+    const trimmed = line.trim();
+    if (trimmed.startsWith("```")) fence = !fence;
+
+    if (!fence && trimmed.startsWith("### ")) {
+      const name = trimmed.slice(4).trim().toLowerCase();
+      if ((CHANGE_TYPES as readonly string[]).includes(name)) {
+        section = name as ChangeType;
+      } else {
+        problems.push(
+          `${where} has an unknown section "${trimmed.slice(4).trim()}", use one of ${CHANGE_TYPES.map(title).join(", ")}`,
+        );
+        section = null;
+      }
+      current = null;
+      continue;
+    }
+
+    if (!section) {
+      if (trimmed || summary.length > 0) summary.push(line);
+      continue;
+    }
+
+    if (!trimmed || COMMENT.test(trimmed)) continue;
+    const bullet = fence ? null : BULLET.exec(line);
+    if (bullet) {
+      current = { type: section, text: bullet[1].trim() };
+      changes.push(current);
+    } else if (current && /^\s/.test(line)) {
+      current.text += `\n${trimmed}`;
+    } else {
+      problems.push(
+        `${where} has text under "### ${title(section)}" that is not a list item: ${trimmed}`,
+      );
+    }
+  }
+
+  for (const change of changes) {
+    if (!change.text) {
+      problems.push(`${where} has an empty list item`);
+    }
+  }
+
+  const text = summary.join("\n").trim();
+  return { ...(text ? { summary: text } : {}), changes, problems };
+}
+
+/** Parses a whole CHANGELOG.md. Problems are reported, never thrown. */
+export function parseChangelog(markdown: string): {
+  changelog: Changelog;
+  problems: string[];
+} {
+  const problems: string[] = [];
+  const changelog: Changelog = { releases: [] };
+  const lines = markdown.replace(/\r/g, "").split("\n");
+
+  type Block = { heading: string; line: number; body: string[] };
+  const blocks: Block[] = [];
+  let fence = false;
+  lines.forEach((line, i) => {
+    if (line.trim().startsWith("```")) fence = !fence;
+    if (!fence && /^##\s/.test(line)) {
+      blocks.push({ heading: line.trim(), line: i + 1, body: [] });
+    } else if (blocks.length > 0) {
+      blocks[blocks.length - 1].body.push(line);
+    }
+  });
+
+  const seen = new Set<string>();
+  blocks.forEach((block) => {
+    if (UNRELEASED_HEADING.test(block.heading)) {
+      problems.push(
+        `line ${block.line}: drop "## Unreleased", notes go under the version they ship in`,
+      );
+      return;
+    }
+
+    const match = RELEASE_HEADING.exec(block.heading);
+    if (!match) {
+      problems.push(
+        `line ${block.line}: "${block.heading}" should look like "## 1.2.0 - 2026-10-06"`,
+      );
+      return;
+    }
+    const [, version, date] = match;
+    if (date !== undefined && !DATE.test(date)) {
+      problems.push(`${version} has a date "${date}", use YYYY-MM-DD`);
+    }
+    if (seen.has(version)) problems.push(`${version} is listed twice`);
+    seen.add(version);
+
+    const notes = parseReleaseNotes(block.body.join("\n"), version);
+    problems.push(...notes.problems);
+    if (notes.changes.length === 0) {
+      problems.push(`${version} has no changes listed`);
+    }
+    changelog.releases.push({
+      version,
+      ...(date && DATE.test(date) ? { date } : {}),
+      ...(notes.summary ? { summary: notes.summary } : {}),
+      changes: notes.changes,
+    });
+  });
+
+  const versions = changelog.releases.map((r) => r.version);
+  for (let i = 1; i < versions.length; i++) {
+    if (semver.lt(versions[i - 1], versions[i])) {
+      problems.push("releases must be listed newest first");
+      break;
+    }
+  }
+
+  return { changelog, problems };
+}
+
+/**
+ * Checks a CHANGELOG.md. With a manifest version, the newest release has to
+ * be that version, so a release never ships without its notes. A beta like
+ * 1.1.0-beta.2 gets its notes from git, so it only needs the newest release
+ * to be 1.1.0 or older.
+ */
+export function validateChangelog(
+  markdown: string,
+  manifestVersion?: string,
+): string[] {
+  const { changelog, problems } = parseChangelog(markdown);
+  if (changelog.releases.length === 0) {
+    problems.push('no releases found, add a "## 1.0.0" heading');
+    return problems;
+  }
+  const newest = changelog.releases[0].version;
+  const base = manifestVersion
+    ? semver.valid(semver.coerce(manifestVersion))
+    : null;
+  const betaOk =
+    !!manifestVersion &&
+    !!semver.prerelease(manifestVersion) &&
+    !!base &&
+    !!semver.valid(newest) &&
+    semver.lte(newest, base);
+  if (manifestVersion && newest !== manifestVersion && !betaOk) {
+    problems.push(
+      `the newest release is ${newest}, but the manifest version is ${manifestVersion}`,
+    );
+  }
+  return problems;
+}
+
+/**
+ * The Markdown under one version's heading, as written, for a release body.
+ * Null when the version is not in the file.
+ */
+export function changelogSection(
+  markdown: string,
+  version: string,
+): string | null {
+  const lines = markdown.replace(/\r/g, "").split("\n");
+  let start = -1;
+  let fence = false;
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i];
+    if (line.trim().startsWith("```")) fence = !fence;
+    if (fence || !/^##\s/.test(line)) continue;
+    if (start >= 0) {
+      return lines.slice(start, i).join("\n").trim();
+    }
+    const match = RELEASE_HEADING.exec(line.trim());
+    if (match && match[1] === version) start = i + 1;
+  }
+  return start >= 0 ? lines.slice(start).join("\n").trim() : null;
+}
+
+function title(type: string): string {
+  return type.charAt(0).toUpperCase() + type.slice(1);
+}
diff --git a/packages/plugin-sdk/src/db.ts b/packages/plugin-sdk/src/db.ts
index 2e31b0ec3..918ef7285 100644
--- a/packages/plugin-sdk/src/db.ts
+++ b/packages/plugin-sdk/src/db.ts
@@ -69,7 +69,7 @@ function builder(column: PluginColumn): Builder {
 export const id = () =>
   builder({ type: "id", primaryKey: true, notNull: true });
 
-/** Unbounded string. Never indexable: MySQL cannot index TEXT. */
+/** Unbounded string, LONGTEXT on MySQL. Never indexable: MySQL cannot index TEXT. */
 export const text = () => builder({ type: "text" });
 
 /** Bounded string. Indexable on every engine. */
diff --git a/packages/plugin-sdk/src/ddl.ts b/packages/plugin-sdk/src/ddl.ts
index a188d051c..fac788076 100644
--- a/packages/plugin-sdk/src/ddl.ts
+++ b/packages/plugin-sdk/src/ddl.ts
@@ -80,11 +80,13 @@ function columnType(
       // though it was declared unbounded. defineTable refuses to index a
       // text/json column, so in practice this only catches a primary key.
       if (keyed && dialect !== "sqlite") return `varchar(${KEY_LENGTH})`;
+      // MySQL TEXT stops at 64KB, so free text, json and secrets go long.
+      if (dialect === "mysql" && column.type !== "timestamp") return "longtext";
       return "text";
   }
 }
 
-/** Column types that are TEXT on MySQL when nothing keys them. */
+/** Column types that are TEXT or LONGTEXT on MySQL when nothing keys them. */
 const TEXT_ON_MYSQL: ReadonlySet<PluginColumn["type"]> = new Set([
   "text",
   "json",
diff --git a/packages/plugin-sdk/src/docs.ts b/packages/plugin-sdk/src/docs.ts
new file mode 100644
index 000000000..8f6ef7d6d
--- /dev/null
+++ b/packages/plugin-sdk/src/docs.ts
@@ -0,0 +1,60 @@
+/**
+ * Docs links and env var entries from a manifest. Kept apart from manifest.ts
+ * so the browser can use them without pulling in semver.
+ */
+
+/**
+ * A docs link, or null for anything that is not an https URL. Core only ever
+ * opens it in a new tab, but a javascript: or file: link should never get there.
+ */
+export function pluginDocsUrl(value: unknown): string | null {
+  if (typeof value !== "string") return null;
+  try {
+    const url = new URL(value.trim());
+    if (url.protocol !== "https:") return null;
+    return url.toString().replace(/\/$/, "");
+  } catch {
+    return null;
+  }
+}
+
+/** Joins a page and anchor onto a plugin's docs URL. */
+export function pluginDocsPage(
+  base: string,
+  page?: string,
+  anchor?: string,
+): string {
+  const clean = (page ?? "").replace(/^\/+|\/+$/g, "");
+  const url = clean ? `${base}/${clean}` : base;
+  return anchor ? `${url}#${anchor.replace(/^#/, "")}` : url;
+}
+
+export const ENV_NAME_PATTERN = /^[A-Z][A-Z0-9_]{0,63}$/;
+export const MAX_ENV_DESCRIPTION_LENGTH = 300;
+
+/**
+ * An environment variable a plugin reads. Only shown in docs and on the
+ * plugin's page, so people know what they can set.
+ */
+export interface PluginEnvVar {
+  name: string;
+  description: string;
+  /** The value used when it is not set, as written in a compose file. */
+  default?: string;
+  required?: boolean;
+  /** Holds a password or key. */
+  secret?: boolean;
+}
+
+/** The usable env entries of a manifest. Bad ones are dropped. */
+export function pluginEnvVars(value: unknown): PluginEnvVar[] {
+  if (!Array.isArray(value)) return [];
+  return value.filter(
+    (v): v is PluginEnvVar =>
+      typeof v === "object" &&
+      v !== null &&
+      typeof v.name === "string" &&
+      ENV_NAME_PATTERN.test(v.name) &&
+      typeof v.description === "string",
+  );
+}
diff --git a/packages/plugin-sdk/src/frontend.ts b/packages/plugin-sdk/src/frontend.ts
index 109373cac..d7995dccd 100644
--- a/packages/plugin-sdk/src/frontend.ts
+++ b/packages/plugin-sdk/src/frontend.ts
@@ -210,6 +210,21 @@ export interface ShellApi {
   openRailView: (id: string) => void;
   /** Closes a rail view wherever it is shown. */
   closeRailView: (id: string) => void;
+  /**
+   * Asks a yes or no question over the main area, for code that runs outside
+   * a panel or tab (a keybinding, a toolbar action). Inside one, prefer
+   * useConfirm from @termix-ssh/plugin-sdk/ui, which asks over that surface.
+   */
+  confirm?: (options: ConfirmRequest) => Promise<boolean>;
+}
+
+export interface ConfirmRequest {
+  title: string;
+  description?: string;
+  confirmLabel?: string;
+  cancelLabel?: string;
+  /** Red confirm button. Defaults to true. */
+  destructive?: boolean;
 }
 
 export interface TabsApi extends Pick<
@@ -260,6 +275,11 @@ export interface RailItemContribution {
   /** Desktop app only. */
   electronOnly?: boolean;
   separatorAfter?: boolean;
+  /**
+   * Which band of the rail it sits in: things you keep (objects), things you
+   * do (tools) or the instance itself (system). Default "tools".
+   */
+  group?: "objects" | "tools" | "system";
   /** Hidden without being unregistered, e.g. while a feature is switched off. */
   hidden?: boolean;
   /**
@@ -293,8 +313,11 @@ export interface PanelProps {
   /** Whether the panel is the one currently shown. */
   active: boolean;
   shell: ShellApi;
-  /** Tells the shell the panel is editing, which widens the sidebar. */
-  setEditing: (editing: boolean) => void;
+  /**
+   * Tells the shell the panel is editing, which widens the sidebar. "wide"
+   * widens it further for tables. InlineView does this on its own.
+   */
+  setEditing: (editing: boolean | "wide") => void;
   /** Type of the focused tab, if any. */
   activeTabType?: string;
   /** Where the panel is rendered. */
@@ -323,6 +346,8 @@ export interface TabHandle {
   /** Repaint only. The shell calls it every time the tab becomes active. */
   refresh?: () => void;
   notifyResize?: () => void;
+  /** Asked before the tab closes; resolve false to keep it open. */
+  confirmClose?: () => boolean | Promise<boolean>;
   [key: string]: unknown;
 }
 
@@ -629,6 +654,11 @@ export interface DashboardCardContribution {
   defaultHeight?: number;
   /** Which column a preset places this card in by default. Defaults to "main". */
   defaultPanel?: "main" | "side";
+  /**
+   * "framed" draws a titled header over the card, "bare" lets it run edge to
+   * edge, for a strip of numbers. Defaults to "framed".
+   */
+  frame?: "framed" | "bare";
   component: ComponentType<DashboardCardProps>;
 }
 
@@ -664,7 +694,11 @@ export interface ActionSlotDefinition {
 export interface SlotContribution {
   actionId: string;
   titleKey: string;
-  /** Secondary text, for slots that show one (onboarding cards). */
+  /**
+   * Secondary text, for slots that show one. The onboarding.* slots that
+   * used it are deprecated: use registerOnboardingStep. The feature and
+   * workflow card slots are no longer shown.
+   */
   descriptionKey?: string;
   icon?: IconComponent;
   kind?: "button" | "component" | string;
@@ -675,6 +709,65 @@ export interface SlotContribution {
   order?: number;
 }
 
+export type OnboardingMode = "full" | "partial" | "rerun";
+
+/**
+ * Where a plugin step sits in onboarding. "setup" comes right after the
+ * appearance steps, for things that need doing before the feature works
+ * (like pointing at a guacd server). "explore" (the default) comes after
+ * that, "security" after the account security step. Onboarding is for
+ * choices, not for explaining features.
+ */
+export type OnboardingSection = "setup" | "explore" | "security";
+
+export interface OnboardingStepProps {
+  /**
+   * "full" is a new user's first run, "partial" shows only steps they have
+   * not seen yet (a plugin installed later, a step whose version went up),
+   * "rerun" is the user running setup again from settings.
+   */
+  mode: OnboardingMode;
+  isAdmin: boolean;
+  isDesktop: boolean;
+  /** Blocks or allows Next. Steps can continue by default. */
+  setCanContinue: (ok: boolean) => void;
+  /**
+   * Runs when Next is pressed, before moving on. Return false to stay on the
+   * step (to show an error, say). Pass null to clear it.
+   */
+  setBeforeNext: (fn: (() => boolean | Promise<boolean>) | null) => void;
+  /**
+   * False on a first run, which shows before the app shell exists: app.tabs
+   * and the shell callbacks do nothing until it is true.
+   */
+  shellReady: boolean;
+}
+
+export interface OnboardingStepContribution {
+  /** Unique within the plugin. Lowercase letters, digits and dashes. */
+  id: string;
+  /**
+   * Starts at 1. Raise it when the step changes enough that people who saw
+   * it should see it again; they get just this step, not all of onboarding.
+   */
+  version?: number;
+  titleKey: string;
+  descriptionKey?: string;
+  icon?: IconComponent;
+  component: ComponentType<OnboardingStepProps>;
+  /** "admin" shows it only to users who can manage plugins. */
+  audience?: "all" | "admin";
+  /** A permission the user must hold, like registerAction's. */
+  permission?: string;
+  section?: OnboardingSection;
+  order?: number;
+  when?: (context: {
+    isAdmin: boolean;
+    isDesktop: boolean;
+    mode: OnboardingMode;
+  }) => boolean;
+}
+
 export interface SshAuthEditorProps {
   form: Record<string, unknown>;
   setField: (key: string, value: unknown) => void;
@@ -795,6 +888,16 @@ export interface DesktopApi {
   onRemoteServerChange: (listener: () => void) => Disposer;
 }
 
+/** Links into this plugin's docs, from the manifest's docs field. */
+export interface DocsApi {
+  /** The docs link, or null when the manifest has none. */
+  readonly url: string | null;
+  /** A page of the docs ("setup"), with an optional anchor. */
+  page: (page?: string, anchor?: string) => string | null;
+  /** Opens a page in a new tab. Does nothing without a docs link. */
+  open: (page?: string, anchor?: string) => void;
+}
+
 export interface TermixAppInfo {
   readonly pluginId: string;
   readonly manifest: PluginManifest;
@@ -864,10 +967,17 @@ export interface TermixApp extends TermixAppInfo {
     slotId: string,
     contribution: SlotContribution,
   ) => Disposer;
+  /**
+   * Adds a step to onboarding. New users see it in their first run; people
+   * who already finished onboarding see just this step the next time they
+   * open Termix (or right away, if they install the plugin mid-session).
+   * Needs plugin API 1.1.
+   */
+  registerOnboardingStep: (step: OnboardingStepContribution) => Disposer;
   invokeAction: (id: string, ...args: unknown[]) => Promise<unknown>;
   /**
    * Offers a component to other plugins and to core by id, rendered where
-   * they choose with `PluginComponent` from @termix/plugin-sdk/ui or
+   * they choose with `PluginComponent` from @termix-ssh/plugin-sdk/ui or
    * `usePluginComponent`. The id should start with a name the plugin owns
    * ("terminal.view"). The props are the owner's contract; document them.
    */
@@ -909,8 +1019,16 @@ export interface TermixApp extends TermixAppInfo {
     options?: { origin?: unknown },
   ) => Promise<PluginWsTarget | null>;
   tabs: TabsApi;
+  /**
+   * Asks a yes or no question over the main area. For code that runs outside
+   * a panel or tab; inside one, useConfirm from @termix-ssh/plugin-sdk/ui asks
+   * over that surface instead.
+   */
+  confirm: (options: ConfirmRequest) => Promise<boolean>;
   /** The desktop app, when the frontend runs in it. */
   desktop: DesktopApi;
+  /** This plugin's docs. Needs plugin API 1.2. */
+  docs: DocsApi;
   /**
    * Fires after this plugin's settings are saved from the settings screen or
    * the host editor. Disposed automatically.
@@ -985,6 +1103,11 @@ export interface SshAuthTypeInfo {
  */
 export interface PluginHostBridge {
   usePluginId: () => string;
+  useDocsUrl: (
+    pluginId: string,
+    page?: string,
+    anchor?: string,
+  ) => string | null;
   useTranslation: (pluginId: string) => {
     t: TranslateFn;
     language: string;
@@ -1154,7 +1277,7 @@ let host: PluginHostBridge | null = null;
 export function __setPluginHost(bridge: PluginHostBridge | null): void {
   if (host && bridge !== host) {
     throw new Error(
-      "@termix/plugin-sdk/frontend: the plugin host is already set",
+      "@termix-ssh/plugin-sdk/frontend: the plugin host is already set",
     );
   }
   host = bridge;
@@ -1173,7 +1296,7 @@ function requireHost(): PluginHostBridge {
   if (!host && fallback) return fallback;
   if (!host) {
     throw new Error(
-      "@termix/plugin-sdk/frontend: no plugin host. Hooks only work inside Termix or renderWithApp().",
+      "@termix-ssh/plugin-sdk/frontend: no plugin host. Hooks only work inside Termix or renderWithApp().",
     );
   }
   return host;
@@ -1184,6 +1307,15 @@ export function usePluginId(): string {
   return requireHost().usePluginId();
 }
 
+/**
+ * A page of this plugin's docs, or null when the manifest has no docs link.
+ * Pass it to PanelShell's docs prop or use DocsLink. Needs plugin API 1.2.
+ */
+export function useDocsUrl(page?: string, anchor?: string): string | null {
+  const bridge = requireHost();
+  return bridge.useDocsUrl(bridge.usePluginId(), page, anchor);
+}
+
 /**
  * Translation bound to this plugin's namespace. Keys the plugin does not
  * define fall back to core's shared strings (common.*, hosts.*).
@@ -1333,6 +1465,31 @@ export function usePluginUiPreferences<
   return bridge.usePluginUiPreferences(bridge.usePluginId()) as never;
 }
 
+/**
+ * Grid or list and row density for one of this plugin's views, kept in its
+ * Appearance area as `<prefix>viewMode` and `<prefix>density`. Declare those
+ * keys in contributes.uiPresets so each preset level can pick a default.
+ */
+export function usePluginPanelView(prefix = ""): {
+  view: "grid" | "list";
+  density: "comfortable" | "compact";
+  compact: boolean;
+  setView: (view: "grid" | "list") => void;
+  setDensity: (density: "comfortable" | "compact") => void;
+} {
+  const { values, set } = usePluginUiPreferences();
+  const view = values[`${prefix}viewMode`] === "list" ? "list" : "grid";
+  const density =
+    values[`${prefix}density`] === "compact" ? "compact" : "comfortable";
+  return {
+    view,
+    density,
+    compact: density === "compact",
+    setView: (next) => set(`${prefix}viewMode`, next),
+    setDensity: (next) => set(`${prefix}density`, next),
+  };
+}
+
 export function useTabs(): TabsApi {
   return requireHost().useTabs();
 }
diff --git a/packages/plugin-sdk/src/host-commands.ts b/packages/plugin-sdk/src/host-commands.ts
index 23df504dd..b526cf945 100644
--- a/packages/plugin-sdk/src/host-commands.ts
+++ b/packages/plugin-sdk/src/host-commands.ts
@@ -32,7 +32,7 @@ export function execCommand(
       if (!settled) {
         settled = true;
         cleanup();
-        reject(new Error(`Command timeout after ${timeoutMs}ms: ${command}`));
+        reject(new Error(`Command timeout after ${timeoutMs}ms`));
       }
     }, timeoutMs);
 
diff --git a/packages/plugin-sdk/src/manifest.ts b/packages/plugin-sdk/src/manifest.ts
index 73c6e114a..8732e8173 100644
--- a/packages/plugin-sdk/src/manifest.ts
+++ b/packages/plugin-sdk/src/manifest.ts
@@ -12,6 +12,21 @@
 
 import semver from "semver";
 import { isKnownCapability } from "./capabilities.js";
+import {
+  ENV_NAME_PATTERN,
+  MAX_ENV_DESCRIPTION_LENGTH,
+  pluginDocsUrl,
+  type PluginEnvVar,
+} from "./docs.js";
+
+export {
+  ENV_NAME_PATTERN,
+  MAX_ENV_DESCRIPTION_LENGTH,
+  pluginDocsPage,
+  pluginDocsUrl,
+  pluginEnvVars,
+  type PluginEnvVar,
+} from "./docs.js";
 
 /**
  * The plugin API this build implements. A minor bump adds to the API and
@@ -21,7 +36,7 @@ import { isKnownCapability } from "./capabilities.js";
  * "^1.2" needs 1.2 or later). engine.termix is checked against the core
  * version by the server.
  */
-export const PLUGIN_API_VERSION = "1.0.0";
+export const PLUGIN_API_VERSION = "1.2.0";
 
 /** The API major, the default engine.api for a new plugin. */
 export const SUPPORTED_PLUGIN_API_VERSION = String(
@@ -49,6 +64,63 @@ export function isTermixCompatible(
   return semver.satisfies(semver.coerce(coreVersion)!.version, range);
 }
 
+const YOUTUBE_ID = /^[A-Za-z0-9_-]{11}$/;
+const YOUTUBE_HOSTS = new Set([
+  "youtube.com",
+  "www.youtube.com",
+  "m.youtube.com",
+  "youtu.be",
+  "youtube-nocookie.com",
+  "www.youtube-nocookie.com",
+]);
+
+export const MAX_FEATURES = 20;
+export const MAX_FEATURE_LENGTH = 160;
+
+/**
+ * The usable feature lines of a manifest or registry entry. Anything that is
+ * not a short non-empty string is dropped, so an index cannot flood the page.
+ */
+export function pluginFeatures(value: unknown): string[] {
+  if (!Array.isArray(value)) return [];
+  return value
+    .filter(
+      (f): f is string =>
+        typeof f === "string" &&
+        f.trim().length > 0 &&
+        f.length <= MAX_FEATURE_LENGTH,
+    )
+    .map((f) => f.trim())
+    .slice(0, MAX_FEATURES);
+}
+
+/**
+ * The video id of a YouTube link, or null for anything else. Only the id is
+ * ever used, so a manifest can never point the embed at another site.
+ */
+export function youtubeVideoId(value: unknown): string | null {
+  if (typeof value !== "string") return null;
+  let url: URL;
+  try {
+    url = new URL(value.trim());
+  } catch {
+    return null;
+  }
+  if (url.protocol !== "https:" || url.username || url.password) return null;
+  const host = url.hostname.toLowerCase();
+  if (!YOUTUBE_HOSTS.has(host)) return null;
+
+  let id: string | null | undefined;
+  if (host === "youtu.be") {
+    id = url.pathname.slice(1);
+  } else if (url.pathname === "/watch") {
+    id = url.searchParams.get("v");
+  } else {
+    id = /^\/(?:embed|shorts|live)\/([^/]+)\/?$/.exec(url.pathname)?.[1];
+  }
+  return id && YOUTUBE_ID.test(id) ? id : null;
+}
+
 export const PLUGIN_CATEGORIES = [
   "Terminal",
   "Files & Transfer",
@@ -81,6 +153,7 @@ export const RESERVED_PLUGIN_IDS: readonly string[] = [
   "termix",
   "plugin",
   "plugins",
+  "onboarding",
   "users",
   "system",
   "sdk",
@@ -275,11 +348,6 @@ export interface PluginSettingsField {
   group?: string;
   /** Registered component id. Required when type is "custom". */
   component?: string;
-  /**
-   * Deprecated and ignored: host defaults cover every host field now. Still
-   * accepted so an older manifest loads. Removed in 3.0.0.
-   */
-  defaultFrom?: string;
   /**
    * Host scope only: whether the field can have a host default (server,
    * user or folder) that hosts follow until they set their own. On by
@@ -439,7 +507,8 @@ export interface PluginProtocolContribution {
   defaultPort?: number;
   /**
    * What the owner's login falls back to from the host's own SSH login
-   * when the protocol login leaves it empty.
+   * when the protocol login leaves it empty. The password only falls back
+   * while the host signs in to SSH with a password.
    */
   hostLoginFallback?: Array<"username" | "password">;
 }
@@ -543,6 +612,14 @@ export interface PluginManifest {
   repository?: string;
   category: string;
   icon?: string;
+  /** A YouTube link shown at the top of the plugin's page. */
+  video?: string;
+  /** Short lines listing what the plugin does, shown on its page. */
+  features?: string[];
+  /** Where the plugin's docs live. https only. */
+  docs?: string;
+  /** Environment variables the plugin reads. */
+  env?: PluginEnvVar[];
   engine: PluginEngine;
   /** Catalog capability ids. */
   capabilities: string[];
@@ -594,6 +671,10 @@ const ALLOWED_TOP_LEVEL = new Set([
   ...REQUIRED_TOP_LEVEL,
   "repository",
   "icon",
+  "video",
+  "features",
+  "docs",
+  "env",
   "dependencies",
   "optionalDependencies",
   "provides",
@@ -644,7 +725,6 @@ const ALLOWED_SETTINGS_FIELD = [
   "group",
   "component",
   "hidden",
-  "defaultFrom",
   "defaultable",
   "defaultLevels",
   "personal",
@@ -751,6 +831,18 @@ export function validateManifest(manifest: unknown): string[] {
 
   if ("repository" in m) requireString(m.repository, "repository", errors);
   if ("icon" in m) requireString(m.icon, "icon", errors);
+  if ("video" in m && youtubeVideoId(m.video) === null) {
+    errors.push(
+      `Field "video" must be a YouTube link such as https://www.youtube.com/watch?v=..., got: ${JSON.stringify(m.video)}`,
+    );
+  }
+  validateFeatures(m.features, errors);
+  if ("docs" in m && pluginDocsUrl(m.docs) === null) {
+    errors.push(
+      `Field "docs" must be an https URL, got: ${JSON.stringify(m.docs)}`,
+    );
+  }
+  validateEnv(m.env, errors);
   for (const field of ["backend", "frontend", "locales"] as const) {
     if (field in m && requireString(m[field], field, errors)) {
       requireRelativePath(m[field] as string, field, errors);
@@ -786,6 +878,76 @@ export function validateManifest(manifest: unknown): string[] {
   return errors;
 }
 
+function validateFeatures(features: unknown, errors: string[]): void {
+  if (features === undefined) return;
+  if (!Array.isArray(features)) {
+    errors.push('Field "features" must be an array of strings');
+    return;
+  }
+  if (features.length > MAX_FEATURES) {
+    errors.push(`Field "features" may list at most ${MAX_FEATURES} items`);
+  }
+  features.forEach((feature, i) => {
+    if (
+      typeof feature !== "string" ||
+      feature.trim().length === 0 ||
+      feature.length > MAX_FEATURE_LENGTH
+    ) {
+      errors.push(
+        `Field "features[${i}]" must be a non-empty string of at most ${MAX_FEATURE_LENGTH} characters`,
+      );
+    }
+  });
+}
+
+function validateEnv(env: unknown, errors: string[]): void {
+  if (env === undefined) return;
+  if (!Array.isArray(env)) {
+    errors.push('Field "env" must be an array');
+    return;
+  }
+  const seen = new Set<string>();
+  env.forEach((entry, i) => {
+    const where = `env[${i}]`;
+    if (!isPlainObject(entry)) {
+      errors.push(`Field "${where}" must be an object`);
+      return;
+    }
+    rejectUnknown(
+      entry,
+      ["name", "description", "default", "required", "secret"],
+      where,
+      errors,
+    );
+    if (typeof entry.name !== "string" || !ENV_NAME_PATTERN.test(entry.name)) {
+      errors.push(
+        `Field "${where}.name" must be an uppercase name like MY_PLUGIN_URL, got: ${JSON.stringify(entry.name)}`,
+      );
+    } else if (seen.has(entry.name)) {
+      errors.push(`Field "${where}.name" repeats ${entry.name}`);
+    } else {
+      seen.add(entry.name);
+    }
+    if (
+      typeof entry.description !== "string" ||
+      entry.description.trim().length === 0 ||
+      entry.description.length > MAX_ENV_DESCRIPTION_LENGTH
+    ) {
+      errors.push(
+        `Field "${where}.description" must be a non-empty string of at most ${MAX_ENV_DESCRIPTION_LENGTH} characters`,
+      );
+    }
+    if ("default" in entry && typeof entry.default !== "string") {
+      errors.push(`Field "${where}.default" must be a string`);
+    }
+    for (const flag of ["required", "secret"] as const) {
+      if (flag in entry && typeof entry[flag] !== "boolean") {
+        errors.push(`Field "${where}.${flag}" must be true or false`);
+      }
+    }
+  });
+}
+
 function validateAuthor(author: unknown, errors: string[]): void {
   if (author === undefined) return;
   if (!isPlainObject(author)) {
@@ -1614,9 +1776,6 @@ function validateSettings(settings: unknown, errors: string[]): void {
     host.fields.forEach((raw, index) => {
       if (!isPlainObject(raw)) return;
       const fieldAt = `${at}.fields[${index}]`;
-      if ("defaultFrom" in raw && typeof raw.defaultFrom !== "string") {
-        errors.push(`${fieldAt}.defaultFrom must be a string`);
-      }
       for (const flag of ["defaultable", "personal"]) {
         if (flag in raw && typeof raw[flag] !== "boolean") {
           errors.push(`${fieldAt}.${flag} must be a boolean`);
@@ -1670,7 +1829,6 @@ function validateSettings(settings: unknown, errors: string[]): void {
     fields.forEach((raw, index) => {
       if (!isPlainObject(raw)) return;
       for (const key of [
-        "defaultFrom",
         "defaultable",
         "defaultLevels",
         "personal",
diff --git a/packages/plugin-sdk/src/openapi.ts b/packages/plugin-sdk/src/openapi.ts
new file mode 100644
index 000000000..b86b5663d
--- /dev/null
+++ b/packages/plugin-sdk/src/openapi.ts
@@ -0,0 +1,87 @@
+/**
+ * Builds an OpenAPI spec from the @openapi JSDoc blocks above routes. Core and
+ * every plugin use this, so the docs site renders them all the same way.
+ */
+
+import swaggerJSDoc from "@deadendjs/swagger-jsdoc";
+
+export interface OpenApiTag {
+  name: string;
+  description?: string;
+}
+
+export interface BuildOpenApiOptions {
+  title: string;
+  version: string;
+  description?: string;
+  /** Source files or globs holding @openapi blocks. */
+  files: string[];
+  tags?: OpenApiTag[];
+}
+
+export type OpenApiSpec = Record<string, unknown> & {
+  paths?: Record<string, unknown>;
+};
+
+/** How every Termix route is signed in to. */
+export const TERMIX_SECURITY_SCHEMES = {
+  bearerAuth: {
+    type: "http",
+    scheme: "bearer",
+    bearerFormat: "JWT",
+    description:
+      "Session token sent in the Authorization header as Bearer and the token.",
+  },
+  cookieAuth: {
+    type: "apiKey",
+    in: "cookie",
+    name: "jwt",
+    description:
+      "Session JWT cookie set at sign-in. When present, it takes precedence over the Authorization header.",
+  },
+  apiKeyAuth: {
+    type: "http",
+    scheme: "bearer",
+    bearerFormat: "API key starting with tmx_",
+    description:
+      "API key sent in the Authorization header as Bearer and the key, which starts with tmx_. It acts as the key owner and cannot act as anyone else.",
+  },
+} as const;
+
+export async function buildOpenApi(
+  options: BuildOpenApiOptions,
+): Promise<OpenApiSpec> {
+  const spec = (await swaggerJSDoc({
+    definition: {
+      openapi: "3.0.3",
+      info: {
+        title: options.title,
+        version: options.version,
+        ...(options.description ? { description: options.description } : {}),
+      },
+      servers: [{ url: "/", description: "Your Termix server" }],
+      components: {
+        securitySchemes: TERMIX_SECURITY_SCHEMES,
+        schemas: {
+          Error: {
+            type: "object",
+            properties: {
+              error: { type: "string" },
+              details: { type: "string" },
+            },
+          },
+        },
+      },
+      security: [{ bearerAuth: [] }, { cookieAuth: [] }, { apiKeyAuth: [] }],
+      ...(options.tags?.length ? { tags: options.tags } : {}),
+    },
+    apis: options.files.map((f) => f.replace(/\\/g, "/")),
+    failOnErrors: true,
+  } as Parameters<typeof swaggerJSDoc>[0])) as OpenApiSpec;
+  return spec;
+}
+
+/** Whether a spec documents any route. */
+export function hasOpenApiPaths(spec: OpenApiSpec): boolean {
+  return Object.keys(spec.paths ?? {}).length > 0;
+}
diff --git a/packages/plugin-sdk/src/testing.ts b/packages/plugin-sdk/src/testing.ts
index 3f5daf2d4..4b8868002 100644
--- a/packages/plugin-sdk/src/testing.ts
+++ b/packages/plugin-sdk/src/testing.ts
@@ -5,7 +5,7 @@
  * real runtime does. createFakeContext stays for tests that only need a
  * context-shaped object and do not care about the gates.
  *
- * The vitest config these run under comes from @termix/plugin-sdk/vitest-preset.
+ * The vitest config these run under comes from @termix-ssh/plugin-sdk/vitest-preset.
  */
 
 import {
@@ -2080,7 +2080,7 @@ export async function createTestDb(
  * so a test sees exactly what the shell would: which rail items, tabs, host
  * actions and cards it registered, and each of those rendered with the SDK
  * hooks working. It is implemented by the Termix host, which is where the
- * registries live; the vitest preset points "@termix/plugin-host/testing" at
+ * registries live; the vitest preset points "@termix-ssh/plugin-host/testing" at
  * core's implementation.
  */
 export interface RenderWithAppOptions {
@@ -2139,6 +2139,8 @@ export interface RenderedPluginApp {
     paletteGroups: () => string[];
     keybindingActions: () => string[];
     keybindingDefaults: () => string[];
+    /** Onboarding step ids, without the plugin prefix. */
+    onboardingSteps: () => string[];
   };
   /** A registered palette group's items, as the palette loads them on open. */
   loadPaletteGroup: (
@@ -2160,6 +2162,19 @@ export interface RenderedPluginApp {
   renderTab: (type: string, props?: Record<string, unknown>) => HTMLElement;
   renderPanel: (id: string, props?: Record<string, unknown>) => HTMLElement;
   renderDashboardCard: (id: string) => HTMLElement;
+  /**
+   * Renders an onboarding step with OnboardingStepProps for a first run,
+   * overridable. Read what the step set with the returned `canContinue()`
+   * and `next()` (runs its beforeNext, true when it has none).
+   */
+  renderOnboardingStep: (
+    id: string,
+    props?: Record<string, unknown>,
+  ) => {
+    element: HTMLElement;
+    canContinue: () => boolean;
+    next: () => Promise<boolean>;
+  };
   /** Renders one component of a contributed extension, "view" by default. */
   renderExtension: (
     pointId: string,
@@ -2205,7 +2220,7 @@ interface PluginTestHost {
   ) => Promise<RenderedPluginApp>;
 }
 
-const TEST_HOST = "@termix/plugin-host/testing";
+const TEST_HOST = "@termix-ssh/plugin-host/testing";
 
 export async function renderWithApp(
   plugin: FrontendPluginModule,
diff --git a/packages/plugin-sdk/src/testing/setup.ts b/packages/plugin-sdk/src/testing/setup.ts
index 19c0d25ca..80fbf1892 100644
--- a/packages/plugin-sdk/src/testing/setup.ts
+++ b/packages/plugin-sdk/src/testing/setup.ts
@@ -10,6 +10,15 @@ import { installSafePorts } from "./safe-ports.js";
 
 installSafePorts();
 
+// Radix measures some controls (Checkbox, Switch) and jsdom has no observer.
+if (typeof globalThis.ResizeObserver === "undefined") {
+  globalThis.ResizeObserver = class {
+    observe() {}
+    unobserve() {}
+    disconnect() {}
+  } as unknown as typeof ResizeObserver;
+}
+
 if (typeof window !== "undefined" && !window.matchMedia) {
   window.matchMedia = vi.fn().mockImplementation((query: string) => ({
     matches: false,
@@ -76,6 +85,7 @@ const offline = () =>
   Promise.reject(new Error("No plugin API in a unit test; mock it"));
 (globalThis as Record<string, unknown>).__termixTestPluginHost = {
   usePluginId: () => "test-plugin",
+  useDocsUrl: () => null,
   useTranslation: () => ({
     t: (key: string) => key,
     language: "en",
diff --git a/packages/plugin-sdk/src/vitest-preset.ts b/packages/plugin-sdk/src/vitest-preset.ts
index c3361958d..2f3fe8ba6 100644
--- a/packages/plugin-sdk/src/vitest-preset.ts
+++ b/packages/plugin-sdk/src/vitest-preset.ts
@@ -3,7 +3,7 @@
  *
  * A plugin's vitest.config.ts is one line:
  *
- *   import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
+ *   import { pluginVitestConfig } from "@termix-ssh/plugin-sdk/vitest-preset";
  *   export default pluginVitestConfig(import.meta.url);
  *
  * Two projects: tests/backend runs in node, tests/frontend in jsdom.
@@ -56,21 +56,21 @@ export function pluginVitestConfig(
   const alias: Record<string, string> = {
     ...(repoRoot
       ? {
-          "@termix/plugin-sdk/frontend": path.join(
+          "@termix-ssh/plugin-sdk/frontend": path.join(
             repoRoot,
             "packages",
             "plugin-sdk",
             "src",
             "frontend.ts",
           ),
-          "@termix/plugin-sdk/ui": path.join(
+          "@termix-ssh/plugin-sdk/ui": path.join(
             repoRoot,
             "src",
             "ui",
             "plugin-host",
             "sdk-ui.ts",
           ),
-          "@termix/plugin-host/testing": path.join(
+          "@termix-ssh/plugin-host/testing": path.join(
             repoRoot,
             "src",
             "ui",
@@ -85,18 +85,23 @@ export function pluginVitestConfig(
       : {
           // Outside a Termix checkout: the UI kit resolves through the
           // package, and the test host is the copy the SDK ships.
-          "@termix/plugin-host/testing": fileURLToPath(
+          "@termix-ssh/plugin-host/testing": fileURLToPath(
             new URL("./host/testing-host.js", import.meta.url),
           ),
         }),
     ...options.alias,
   };
 
+  // Forks workers on Windows abort now and then with "Worker exited
+  // unexpectedly". Threads don't.
+  const pool = "threads" as const;
+
   return {
     resolve: { alias },
     test: {
       globals: true,
       setupFiles: [setupFile],
+      pool,
       projects: [
         {
           resolve: { alias },
@@ -104,6 +109,7 @@ export function pluginVitestConfig(
             name: `${pluginId}:backend`,
             root: pluginDir,
             environment: "node",
+            pool,
             globals: true,
             setupFiles: [setupFile],
             include: ["tests/backend/**/*.test.ts"],
@@ -115,12 +121,13 @@ export function pluginVitestConfig(
             name: `${pluginId}:frontend`,
             root: pluginDir,
             environment: "jsdom",
+            pool,
             globals: true,
             setupFiles: [setupFile],
             // Run the SDK through Vite rather than plain Node, so its import
             // of the test host sees the alias above and the plugin and the
-            // host share one copy of @termix/plugin-sdk/frontend.
-            server: { deps: { inline: [/@termix\/plugin-sdk/] } },
+            // host share one copy of @termix-ssh/plugin-sdk/frontend.
+            server: { deps: { inline: [/@termix-ssh\/plugin-sdk/] } },
             include: ["tests/frontend/**/*.test.{ts,tsx}"],
           },
         },
diff --git a/packages/plugin-sdk/ui.api.txt b/packages/plugin-sdk/ui.api.txt
index b61b169ee..3a9b122c3 100644
--- a/packages/plugin-sdk/ui.api.txt
+++ b/packages/plugin-sdk/ui.api.txt
@@ -1,4 +1,5 @@
 ActionSlot (value): ({ slotId, context, className, enabled, renderItem, hideLabels, when, }: ActionSlotProps) => Element
+AddButton (value): ({ label, compact, className, ...rest }: { label?: string; compact?: boolean; className?: string; } & Omit<ButtonHTMLAttributes<HTMLButtonElement>, "children"> & { ref?: Ref<HTMLButtonElement>; }) => Element
 Alert (value): ({ className, variant, ...props }: ClassAttributes<HTMLDivElement> & HTMLAttributes<HTMLDivElement> & VariantProps<(props?: ConfigVariants<{ variant: { default: string; destructive: string; }; }> & ClassProp) => string>) => Element
 AlertDescription (value): ({ className, ...props }: DetailedHTMLProps<HTMLAttributes<HTMLDivElement>, HTMLDivElement>) => Element
 AlertDialog (value): ({ ...props }: AlertDialogProps) => Element
@@ -13,6 +14,7 @@ AlertDialogPortal (value): ({ ...props }: AlertDialogPortalProps) => Element
 AlertDialogTitle (value): ({ className, ...props }: AlertDialogTitleProps & RefAttributes<HTMLHeadingElement>) => Element
 AlertDialogTrigger (value): ({ ...props }: AlertDialogTriggerProps & RefAttributes<HTMLButtonElement>) => Element
 AlertTitle (value): ({ className, ...props }: DetailedHTMLProps<HTMLAttributes<HTMLDivElement>, HTMLDivElement>) => Element
+BackButton (value): ({ onClick, label, className, }: { onClick: () => void; label?: string; className?: string; }) => Element
 Badge (value): ({ className, variant, asChild, ...props }: ClassAttributes<HTMLSpanElement> & HTMLAttributes<HTMLSpanElement> & VariantProps<(props?: ConfigVariants<{ variant: { default: string; secondary: string; destructive: string; outline: string; }; }> & ClassProp) => string> & { asChild?: boolean; }) => Element
 BarSeries (value): ({ items, max, className, colorClassName, }: BarSeriesProps) => Element
 BarSeriesItem (type): BarSeriesItem
@@ -27,17 +29,25 @@ CardDescription (value): ({ className, ...props }: DetailedHTMLProps<HTMLAttribu
 CardFooter (value): ({ className, ...props }: DetailedHTMLProps<HTMLAttributes<HTMLDivElement>, HTMLDivElement>) => Element
 CardGridCanvas (value): ({ slots, columns, editMode, renderCard, cardCatalog, onChange, cardLabel, className, }: CardGridCanvasProps) => Element
 CardHeader (value): ({ className, ...props }: DetailedHTMLProps<HTMLAttributes<HTMLDivElement>, HTMLDivElement>) => Element
+CardMasonry (value): ({ columns, stack, className, children, }: { columns: number; stack?: boolean; className?: string; children: ReactNode; }) => Element
 CardTitle (value): ({ className, ...props }: DetailedHTMLProps<HTMLAttributes<HTMLDivElement>, HTMLDivElement>) => Element
 Checkbox (value): ({ className, ...props }: CheckboxProps & RefAttributes<HTMLButtonElement>) => Element
 ColumnCountStepper (value): ({ columns, onChange, }: { columns: number; onChange: (columns: number) => void; }) => Element
 ComponentSlot (value): ({ slotId, props, when, }: { slotId: string; props?: Record<string, unknown>; when?: Record<string, unknown>; }) => Element
-ConnectionLogPanel (value): ({ isConnecting, isConnected, hasConnectionError, position, className, }: ConnectionLogPanelProps) => Element
+ConfirmOptions (type): ConfirmOptions
+ConnectionGate (value): (props: ConnectionGateProps) => Element
+ConnectionGateController (type): ConnectionGateController
+ConnectionGateProps (type): ConnectionGateProps
+ConnectionLogPanel (value): ({ isConnecting, isConnected, hasConnectionError, className, }: ConnectionLogPanelProps) => Element
 ConnectionLogProvider (value): ({ children, }: { children: ReactNode; }) => Element
 ConnectionOrigin (type): ConnectionOrigin
-ConnectionScreen (value): ({ status, message, backgroundColor, attempt, maxAttempts, nextRetryInMs, onManualRetry, retryLabel, disconnectedMessage, extraActions, logPosition, emptyState, className, }: ConnectionScreenProps) => Element
+ConnectionScreen (value): ({ status, message, detail, errorDetail, unavailable, backgroundColor, attempt, maxAttempts, nextRetryInMs, onManualRetry, disconnectedMessage, onClose, extraActions, logPosition, emptyState, className, }: ConnectionScreenProps) => Element
 ConnectionStage (type): ConnectionStage
 ConnectionStatus (type): ConnectionStatus
+ConnectionUnavailable (type): ConnectionUnavailable
 CustomKeybinding (type): CustomKeybinding
+DataColumn (type): DataColumn<T>
+DataView (value): <T>({ items, view, density, getKey, renderCard, columns, listColumns, onRowClick, isRowActive, empty, className, }: { items: T[]; view: PanelViewMode; density?: PanelDensity; getKey: (item: T) => string; renderCard: (item: T) => ReactNode; columns: GridColumns; listColumns: DataColumn<T>[]; onRowClick?: (item: T) => void; isRowActive?: (item: T) => boolean; empty: ReactNode; className?: string; }) => Element
 Dialog (value): ({ ...props }: DialogProps) => Element
 DialogClose (value): ({ ...props }: DialogCloseProps & RefAttributes<HTMLButtonElement>) => Element
 DialogContent (value): ({ className, children, showCloseButton, ...props }: DialogContentProps & RefAttributes<HTMLDivElement> & { showCloseButton?: boolean; }) => Element
@@ -48,6 +58,8 @@ DialogOverlay (value): ({ className, ...props }: DialogOverlayProps & RefAttribu
 DialogPortal (value): ({ ...props }: DialogPortalProps) => Element
 DialogTitle (value): ({ className, ...props }: DialogTitleProps & RefAttributes<HTMLHeadingElement>) => Element
 DialogTrigger (value): ({ ...props }: DialogTriggerProps & RefAttributes<HTMLButtonElement>) => Element
+DocsLink (value): ({ core, page, anchor, href, variant, children, className, }: DocsLinkProps) => Element
+DocsLinkProps (type): DocsLinkProps
 DropdownMenu (value): ({ ...props }: DropdownMenuProps) => Element
 DropdownMenuCheckboxItem (value): ({ className, children, checked, inset, ...props }: DropdownMenuCheckboxItemProps & RefAttributes<HTMLDivElement> & { inset?: boolean; }) => Element
 DropdownMenuContent (value): ({ className, align, sideOffset, ...props }: DropdownMenuContentProps & RefAttributes<HTMLDivElement>) => Element
@@ -63,20 +75,28 @@ DropdownMenuSub (value): ({ ...props }: DropdownMenuSubProps) => Element
 DropdownMenuSubContent (value): ({ className, sideOffset, alignOffset, ...props }: DropdownMenuSubContentProps & RefAttributes<HTMLDivElement>) => Element
 DropdownMenuSubTrigger (value): ({ className, inset, children, ...props }: DropdownMenuSubTriggerProps & RefAttributes<HTMLDivElement> & { inset?: boolean; }) => Element
 DropdownMenuTrigger (value): ({ ...props }: DropdownMenuTriggerProps & RefAttributes<HTMLButtonElement>) => Element
+EditingWidth (type): EditingWidth
 EmptyState (value): ({ icon: Icon, title, hint, action, className, }: { icon?: LucideIcon; title: string; hint?: string; action?: ReactNode; className?: string; }) => Element
 FOLDER_COLORS (value): string[]
+Facts (value): ({ className, children, }: { className?: string; children: ReactNode; }) => Element
 FakeSwitch (value): ({ defaultChecked, disabled, checked, onChange, }: { defaultChecked?: boolean; disabled?: boolean; checked?: boolean; onChange?: (v: boolean) => void; }) => Element
+Field (value): ({ label, hint, error, aside, htmlFor, className, children, }: { label: string; hint?: ReactNode; error?: string; aside?: ReactNode; htmlFor?: string; className?: string; children: ReactNode; }) => Element
+FieldPair (value): ({ children }: { children: ReactNode; }) => Element
+FormFooter (value): ({ onCancel, onSave, saveLabel, cancelLabel, saving, dirty, status, disabled, onDelete, deleteLabel, extra, saveType, form, }: { onCancel?: () => void; onSave?: () => void; saveLabel?: string; cancelLabel?: string; saving?: boolean; dirty?: boolean; status?: ReactNode; disabled?: boolean; onDelete?: () => void; deleteLabel?: string; extra?: ReactNode; saveType?: "button" | "submit"; form?: string; }) => Element
 FullScreenAppPhase (type): FullScreenAppPhase
 FullScreenAppWrapper (value): FC<FullScreenAppWrapperProps>
 GridCardCatalogEntry (type): GridCardCatalogEntry
 GridColSpan (type): GridColSpan
+GridColumns (type): GridColumns
 GridLayout (type): GridLayout
 GridSlot (type): GridSlot
+GroupHeading (value): ({ title, count, action, className, }: { title: string; count?: number; action?: ReactNode; className?: string; }) => Element
 HostDefaultBadge (value): ({ settingKey }: { settingKey: string; }) => Element
 HostDefaultField (value): ({ settingKey, children, }: { settingKey: string; children: ReactNode; }) => Element
 HostFeatureFields (value): ({ form, updateForm, }: HostFeatureFieldsProps) => Element
 HostFeatureFieldsProps (type): HostFeatureFieldsProps
-HostKeyVerificationDialog (value): ({ isOpen, scenario, ip, port, hostname, fingerprint, oldFingerprint, algorithm, onAccept, onReject, backgroundColor, }: HostKeyVerificationDialogProps) => Element
+HostKeyVerificationDialog (value): ({ isOpen, scenario, ip, port, hostname, fingerprint, oldFingerprint, onAccept, onReject, backgroundColor, }: HostKeyVerificationDialogProps) => Element
+InlineView (value): ({ open, onOpenChange, title, icon, status, actions, toolbar, footer, width, onBeforeClose, scroll, bare, className, children, }: { open: boolean; onOpenChange: (open: boolean) => void; title: ReactNode; icon?: ReactNode; status?: ReactNode; actions?: ReactNode; toolbar?: ReactNode; footer?: ReactNode; width?: EditingWidth; onBeforeClose?: () => boolean | Promise<boolean>; scroll?: boolean; bare?: boolean; className?: string; children: ReactNode; }) => ReactPortal
 Input (value): ({ className, type, ...props }: DetailedHTMLProps<InputHTMLAttributes<HTMLInputElement>, HTMLInputElement>) => Element
 Kbd (value): ForwardRefExoticComponent<KbdProps & RefAttributes<HTMLElement>>
 KbdKey (value): { ({ className, ...props }: HTMLAttributes<HTMLSpanElement>): Element; displayName: string; }
@@ -87,14 +107,31 @@ KeybindingActionType (type): string
 Label (value): ({ className, ...props }: LabelProps & RefAttributes<HTMLLabelElement>) => Element
 LineChart (value): ({ series, timestamps, domain, yFormatter, height, className, }: LineChartProps) => Element
 LineChartSeries (type): LineChartSeries
+ListBadge (value): ({ tone, className, children, }: { tone?: "destructive" | "muted" | "brand" | "warning" | "success"; className?: string; children: ReactNode; }) => Element
+ListRow (value): ({ title, icon, badges, meta, stripe, tone, color, selected, active, dimmed, leading, trailing, actions, onClick, className, children, ...rest }: { title: ReactNode; icon?: ReactNode; badges?: ReactNode; meta?: ReactNode; stripe?: number; tone?: ListRowTone; color?: string; selected?: boolean; active?: boolean; dimmed?: boolean; leading?: ReactNode; trailing?: ReactNode; actions?: ReactNode; onClick?: () => void; className?: string; children?: ReactNode; } & Omit<HTMLAttributes<HTMLDivElement>, "title" | "children" | "onClick">) => Element
+ListRowAction (value): ({ label, tone, className, children, ...rest }: { label: string; tone?: "default" | "destructive" | "brand"; className?: string; children: ReactNode; } & Omit<ButtonHTMLAttributes<HTMLButtonElement>, "children"> & { ref?: Ref<HTMLButtonElement>; }) => Element
+ListRowFolder (value): ({ name, icon, count, open, onToggle, stripe, actions, dropActive, onDropItem, emptyText, className, children, }: { name: ReactNode; icon?: ReactNode; count?: number; open: boolean; onToggle: () => void; stripe?: number; actions?: ReactNode; dropActive?: boolean; onDropItem?: () => void; emptyText?: ReactNode; className?: string; children?: ReactNode; }) => Element
+ListRowTone (type): ListRowTone
 LogContext (type): LogContext
 LogEntry (type): LogEntry
 MFAPromptMode (type): MFAPromptMode
 ManagerCardError (type): ManagerCardError
 ManagerCardShell (value): ({ title, icon, loading, error, onRefresh, empty, emptyMessage, children, headerExtra, }: { title: string; icon: ReactNode; loading: boolean; error: ManagerCardError; onRefresh: () => void; empty?: boolean; emptyMessage?: string; children: ReactNode; headerExtra?: ReactNode; }) => Element
 ManagerSearch (value): ({ value, onChange, placeholder, count, extra, }: { value: string; onChange: (value: string) => void; placeholder?: string; count?: number; extra?: ReactNode; }) => Element
+Meter (value): ({ percent, className, }: { percent: number; className?: string; }) => Element
 MetricCard (value): ({ title, icon, action, children, bodyClassName, scroll, scrollMax, }: { title: string; icon: ReactNode; action?: ReactNode; children: ReactNode; bodyClassName?: string; scroll?: boolean; scrollMax?: number; }) => Element
 MiniStat (value): ({ caption, value, valueClassName, className, }: { caption: ReactNode; value: ReactNode; valueClassName?: string; className?: string; }) => Element
+NumberField (value): ({ label, value, onChange, placeholder, hint, error, min, max, disabled, className, }: { label: string; value: number; onChange: (value: number) => void; placeholder?: string; hint?: ReactNode; error?: string; min?: number; max?: number; disabled?: boolean; className?: string; }) => Element
+PANEL (value): { readonly body: "p-2.5"; readonly gap: "gap-2"; readonly band: "px-3 py-2"; readonly cardHead: "px-3 py-2.5"; readonly header: "h-12.5"; }
+PROMPT_BUTTON (value): "inline-flex h-7 items-center justify-center gap-1.5 border border-border px-3 text-xs text-muted-foreground transition-colors hover:bg-muted hover:text-foreground focus-visible:ring-1 focus-visible:ring-ring disabled:pointer-events-none disabled:opacity-50"
+PROMPT_DESTRUCTIVE_BUTTON (value): "inline-flex h-7 items-center justify-center gap-1.5 bg-destructive px-3 text-xs font-medium text-white transition-colors hover:bg-destructive/90 focus-visible:ring-1 focus-visible:ring-ring disabled:pointer-events-none disabled:opacity-50"
+PROMPT_PRIMARY_BUTTON (value): "inline-flex h-7 items-center justify-center gap-1.5 border border-accent-brand/40 px-3 text-xs font-medium text-accent-brand transition-colors hover:bg-accent-brand/10 focus-visible:ring-1 focus-visible:ring-ring disabled:pointer-events-none disabled:opacity-50"
+PanePrompt (value): ({ open, title, titleId, description, icon, tone, actions, onCancel, role, labelledBy, layer, backgroundColor, className, children, }: { open: boolean; title: ReactNode; titleId?: string; description?: ReactNode; icon?: ReactNode; tone?: "default" | "destructive"; actions?: ReactNode; onCancel?: () => void; role?: "dialog" | "alertdialog"; labelledBy?: string; layer?: "connection" | "pane"; backgroundColor?: string; className?: string; children?: ReactNode; }) => Element
+PanelDensity (type): PanelDensity
+PanelList (value): ({ empty, className, children, }: { empty?: ReactNode; className?: string; children?: ReactNode; }) => Element
+PanelSearch (value): ({ value, onChange, placeholder, fill, autoFocus, disabled, title, onEnter, inputRef, className, }: { value: string; onChange: (next: string) => void; placeholder?: string; fill?: boolean; autoFocus?: boolean; disabled?: boolean; title?: string; onEnter?: () => void; inputRef?: Ref<HTMLInputElement>; className?: string; }) => Element
+PanelShell (value): ({ chrome, icon, title, status, leading, actions, toolbar, tabs, footer, scroll, docs, className, children, }: { chrome?: boolean; icon?: ReactNode; title?: ReactNode; status?: ReactNode; leading?: ReactNode; actions?: ReactNode; toolbar?: ReactNode; tabs?: ReactNode; footer?: ReactNode; scroll?: boolean; docs?: string; className?: string; children: ReactNode; }) => Element
+PanelViewMode (type): PanelViewMode
 PassphraseDialog (value): ({ isOpen, onSubmit, onCancel, hostInfo, backgroundColor, }: PassphraseDialogProps) => Element
 PasswordInput (value): ForwardRefExoticComponent<PasswordInputProps & RefAttributes<HTMLInputElement>>
 PluginComponent (value): ({ id, fallback, ...props }: { [prop: string]: unknown; id: string; fallback?: ReactNode; }) => ReactNode
@@ -106,14 +143,18 @@ PopoverTrigger (value): ({ ...props }: PopoverTriggerProps & RefAttributes<HTMLB
 RadialGauge (value): ({ value, label, caption, size, strokeWidth, className, colorClassName, }: RadialGaugeProps) => Element
 RadialGaugeProps (type): RadialGaugeProps
 RecentActivityItem (type): RecentActivityItem
+Repeater (value): <T>({ label, items, onChange, makeItem, empty, addLabel, hint, renderItem, }: { label: string; items: T[]; onChange: (items: T[]) => void; makeItem: () => T; empty: string; addLabel: string; hint?: ReactNode; renderItem: (item: T, update: (next: T) => void, index: number) => ReactNode; }) => Element
 RobustClipboardProvider (value): typeof RobustClipboardProvider
 SSHAuthDialog (value): ({ isOpen, reason, onSubmit, onCancel, hostInfo, backgroundColor, }: SSHAuthDialogProps) => Element
 ScrollArea (value): ({ className, children, ...props }: ScrollAreaProps & RefAttributes<HTMLDivElement>) => Element
 ScrollBar (value): ({ className, orientation, ...props }: ScrollAreaScrollbarProps & RefAttributes<HTMLDivElement>) => Element
-SectionCard (value): ({ title, icon, action, children, className, }: { title: string; icon: ReactNode; action?: ReactNode; children: ReactNode; className?: string; }) => Element
+SecretField (value): ({ label, value, onChange, placeholder, hint, error, disabled, className, }: { label: string; value: string; onChange: (value: string) => void; placeholder?: string; hint?: ReactNode; error?: string; disabled?: boolean; className?: string; }) => Element
+SectionCard (value): ({ title, icon, action, children, className, rowId, }: { title: string; icon: ReactNode; action?: ReactNode; children: ReactNode; className?: string; rowId?: string; }) => Element
+Segmented (value): <T extends string>({ value, onChange, options, className, }: { value: T; onChange: (next: T) => void; options: readonly { value: NoInfer<T>; label: string; icon?: ReactNode; count?: number; title?: string; }[]; className?: string; }) => Element
 Select (value): ({ ...props }: SelectSharedProps & { value?: string; defaultValue?: string; onValueChange?(value: string): void; }) => Element
 Select2 (value): ({ className, children, value, defaultValue, onChange, disabled, placeholder, align, contentClassName, name, id, required, "aria-label": ariaLabel, ...props }: Select2Props) => Element
 SelectContent (value): ({ className, children, position, ...props }: SelectContentProps & RefAttributes<HTMLDivElement>) => Element
+SelectField (value): <T extends string>({ label, value, onChange, options, hint, error, disabled, className, placeholder, }: { label: string; value: T; onChange: (value: T) => void; options: readonly { value: T; label: string; }[]; hint?: ReactNode; error?: string; disabled?: boolean; className?: string; placeholder?: string; }) => Element
 SelectGroup (value): ({ ...props }: SelectGroupProps & RefAttributes<HTMLDivElement>) => Element
 SelectItem (value): ({ className, children, ...props }: SelectItemProps & RefAttributes<HTMLDivElement>) => Element
 SelectLabel (value): ({ className, ...props }: SelectLabelProps & RefAttributes<HTMLDivElement>) => Element
@@ -123,7 +164,7 @@ SelectSeparator (value): ({ className, ...props }: SelectSeparatorProps & RefAtt
 SelectTrigger (value): ({ className, size, children, ...props }: SelectTriggerProps & RefAttributes<HTMLButtonElement> & { size?: "default" | "sm"; }) => Element
 SelectValue (value): ({ ...props }: SelectValueProps & RefAttributes<HTMLSpanElement>) => Element
 Separator (value): ({ className, orientation, decorative, ...props }: SeparatorProps & RefAttributes<HTMLDivElement>) => Element
-SettingRow (value): ({ label, badge, description, defaultKey, children, }: { label: string; badge?: string; description?: ReactNode; defaultKey?: string; children: ReactNode; }) => Element
+SettingRow (value): ({ label, badge, description, defaultKey, rowId, children, }: { label: string; badge?: string; description?: ReactNode; defaultKey?: string; rowId?: string; children: ReactNode; }) => Element
 Sheet (value): ({ ...props }: DialogProps) => Element
 SheetClose (value): ({ ...props }: DialogCloseProps & RefAttributes<HTMLButtonElement>) => Element
 SheetContent (value): ({ className, children, side, showCloseButton, ...props }: DialogContentProps & RefAttributes<HTMLDivElement> & { side?: "top" | "right" | "bottom" | "left"; showCloseButton?: boolean; }) => Element
@@ -137,8 +178,16 @@ Slider (value): ({ className, defaultValue, value, min, max, ...props }: SliderP
 Sparkline (value): ({ data, domain, className, colorClassName, showLastDot, height, }: SparklineProps) => Element
 SparklineProps (type): SparklineProps
 StatRow (value): ({ label, value, mono, className, }: { label: ReactNode; value: ReactNode; mono?: boolean; className?: string; }) => Element
+SurfaceKind (type): SurfaceKind
+SurfaceScope (value): ({ kind, onEditingChange, onClose, className, children, }: { kind?: SurfaceKind; onClose?: () => void; onEditingChange?: (editing: EditingWidth) => void; className?: string; children: ReactNode; }) => Element
 Switch (value): ({ className, ...props }: SwitchProps & RefAttributes<HTMLButtonElement>) => Element
+SwitchRow (value): ({ label, description, badge, checked, onChange, disabled, defaultKey, rowId, }: { label: string; description?: ReactNode; badge?: string; checked: boolean; onChange: (value: boolean) => void; disabled?: boolean; defaultKey?: string; rowId?: string; }) => Element
 TOTPDialog (value): ({ isOpen, prompt, mode, waiting, onSubmit, onCancel, backgroundColor, }: TOTPDialogProps) => Element
+TabStrip (value): ({ tabs, activeTab, onTabChange, isActive, variant, trailing, className, }: { tabs: TabStripItem[]; activeTab: string; onTabChange: (id: string) => void; isActive?: (id: string) => boolean; variant?: "secondary" | "primary"; trailing?: ReactNode; className?: string; }) => Element
+TabStripItem (type): TabStripItem
+TagInput (value): ({ tags, input, placeholder, onTagsChange, onInputChange, }: { tags: string[]; input: string; placeholder: string; onTagsChange: (tags: string[]) => void; onInputChange: (value: string) => void; }) => Element
+TextAreaField (value): ({ label, value, onChange, placeholder, rows, hint, error, aside, mono, disabled, className, }: { label: string; value: string; onChange: (value: string) => void; placeholder?: string; rows?: number; hint?: ReactNode; error?: string; aside?: ReactNode; mono?: boolean; disabled?: boolean; className?: string; }) => Element
+TextField (value): ({ label, value, onChange, placeholder, hint, error, aside, disabled, mono, className, }: { label: string; value: string; onChange: (value: string) => void; placeholder?: string; hint?: ReactNode; error?: string; aside?: ReactNode; disabled?: boolean; mono?: boolean; className?: string; }) => Element
 Textarea (value): ForwardRefExoticComponent<TextareaProps & RefAttributes<HTMLTextAreaElement>>
 TextareaProps (type): TextareaProps
 Tooltip (value): ({ ...props }: TooltipProps) => Element
@@ -146,7 +195,9 @@ TooltipContent (value): ({ className, sideOffset, children, ...props }: TooltipC
 TooltipProvider (value): ({ delayDuration, ...props }: TooltipProviderProps) => Element
 TooltipTrigger (value): ({ ...props }: TooltipTriggerProps & RefAttributes<HTMLButtonElement>) => Element
 UptimeInfo (type): UptimeInfo
+UsagePair (value): ({ label, percent, detail, }: { label?: string; percent: number; detail?: string; }) => Element
 VersionInfo (type): VersionInfo
+ViewToggle (value): ({ view, onView, density, onDensity, }: { view: PanelViewMode; onView: (next: PanelViewMode) => void; density?: PanelDensity; onDensity?: (next: PanelDensity) => void; }) => Element
 WebSocketConnectionTarget (type): WebSocketConnectionTarget
 WidgetTitle (value): ({ title, icon, fallback }: WidgetTitleProps) => Element
 buildOriginWsUrl (value): ({ origin, localPort, localPath, remotePath, includeJwt, }: { origin: ConnectionOrigin; localPort: number; localPath: string; remotePath: string; includeJwt?: boolean; }) => Promise<WebSocketConnectionTarget>
@@ -177,12 +228,16 @@ resolveRemoteHostId (value): (syncId: string) => Promise<number>
 runAdaptiveBackgroundTask (value): (kind: AdaptiveTaskKind, action: string, task: () => Promise<unknown>, options?: AdaptiveTaskOptions) => boolean
 runAdaptivePolling (value): (poll: () => AdaptivePollResult | Promise<AdaptivePollResult>, policy: AdaptivePollingPolicy, options?: { enabled?: () => boolean; visible?: () => boolean; runImmediately?: boolean; random?: () => number; intervalMultiplier?: () => number; onError?: (error: unknown) => void; }) => () => void
 runVisibleInterval (value): (tick: () => void, intervalMs: number) => () => void
+usageBarColor (value): (percent: number) => string
+usageColor (value): (percent: number) => string
 useAdaptivePolling (value): (poll: () => AdaptivePollResult | Promise<AdaptivePollResult>, policy: AdaptivePollingPolicy, enabled?: boolean, options?: { runImmediately?: boolean; onError?: (error: unknown) => void; }) => void
 useAppTheme (value): () => ThemeProviderState
-useConfirmation (value): () => { isOpen: boolean; options: ConfirmationOptions; confirm: (opts: ConfirmationOptions, callback: () => void) => void; handleConfirm: () => void; handleCancel: () => void; confirmWithToast: (opts: string | ConfirmationOptions, callback?: () => void, variantOrConfirmLabel?: string, cancelLabel?: string, toastOptions?: ToastConfirmOptions) => Promise<boolean>; }
+useConfirm (value): () => (options: ConfirmOptions) => Promise<boolean>
+useConnectionGate (value): () => ConnectionGateController
 useConnectionLog (value): () => ConnectionLogContextType
 useIsDefaultsEditor (value): () => boolean
 useIsMobile (value): () => boolean
 useOptionalConnectionLog (value): () => ConnectionLogContextType
+useSurfaceKind (value): () => SurfaceKind
 useTabs (value): () => TabContextType
 useTabsSafe (value): () => TabContextType
diff --git a/packaging/build/Termix_Mac_App_Store.provisionprofile b/packaging/build/Termix_Mac_App_Store.provisionprofile
index 8e87f4056..46eddebb9 100644
Binary files a/packaging/build/Termix_Mac_App_Store.provisionprofile and b/packaging/build/Termix_Mac_App_Store.provisionprofile differ
diff --git a/packaging/build/after-pack.cjs b/packaging/build/after-pack.cjs
index 869b04c35..c60505444 100644
--- a/packaging/build/after-pack.cjs
+++ b/packaging/build/after-pack.cjs
@@ -14,7 +14,7 @@ function copyPluginSdk(resourcesDir, sdkDir = path.join(repoRoot, "packages", "p
     resourcesDir,
     "app.asar.unpacked",
     "node_modules",
-    "@termix",
+    "@termix-ssh",
     "plugin-sdk",
   );
   const dist = path.join(sdkDir, "dist");
diff --git a/packaging/chocolatey/termix-ssh.nuspec b/packaging/chocolatey/termix-ssh.nuspec
index cce00e4de..5a616fa9b 100644
--- a/packaging/chocolatey/termix-ssh.nuspec
+++ b/packaging/chocolatey/termix-ssh.nuspec
@@ -13,11 +13,11 @@
     <requireLicenseAcceptance>false</requireLicenseAcceptance>
     <projectSourceUrl>https://github.com/Termix-SSH/Termix</projectSourceUrl>
     <docsUrl>https://docs.termix.site/install</docsUrl>
-    <bugTrackerUrl>https://github.com/Termix-SSH/Support/issues</bugTrackerUrl>
+    <bugTrackerUrl>https://github.com/Termix-SSH/Termix/issues</bugTrackerUrl>
     <tags>docker ssh terminal telnet self-hosted rdp file-management vnc ssh-tunnel server-stats termix</tags>
-    <summary>Self-hosted SSH and remote desktop management.</summary>
+    <summary>Self-hosted, plugin-based server management.</summary>
     <description>
-Termix is an open-source, forever-free, self-hosted all-in-one server management platform. It provides a multi-platform solution for managing your servers and infrastructure through a single, intuitive interface. Termix offers SSH terminal access, remote desktop control (RDP, VNC, Telnet), SSH tunneling capabilities, remote file management, and many other tools. Termix is the perfect free and self-hosted alternative to Termius available for all platforms.
+Termix is a free, open source, self-hosted platform for managing your servers, built on plugins. The core keeps your hosts, credentials, users and sharing, and plugins add the SSH terminal, remote desktop (RDP, VNC, Telnet), file manager, tunnels, Docker, metrics and more. It runs on web, desktop and mobile, and it is a free, self-hosted alternative to Termius.
 
 This package installs the desktop application version of Termix.
     </description>
diff --git a/packaging/flatpak/com.karmaa.termix.desktop b/packaging/flatpak/com.karmaa.termix.desktop
index 211974f78..c59eac9f4 100644
--- a/packaging/flatpak/com.karmaa.termix.desktop
+++ b/packaging/flatpak/com.karmaa.termix.desktop
@@ -1,6 +1,6 @@
 [Desktop Entry]
 Name=Termix
-Comment=Self-hosted SSH and remote desktop management.
+Comment=Self-hosted, plugin-based server management.
 Exec=run.sh %U
 Icon=com.karmaa.termix
 Terminal=false
diff --git a/packaging/flatpak/com.karmaa.termix.flatpakref b/packaging/flatpak/com.karmaa.termix.flatpakref
index 8bddf9162..969362cbe 100644
--- a/packaging/flatpak/com.karmaa.termix.flatpakref
+++ b/packaging/flatpak/com.karmaa.termix.flatpakref
@@ -1,11 +1,11 @@
 [Flatpak Ref]
 Name=Termix
 Branch=stable
-Title=Termix - SSH Server Management Platform
+Title=Termix
 IsRuntime=false
 Url=https://github.com/Termix-SSH/Termix/releases/download/VERSION_PLACEHOLDER/termix_linux_flatpak.flatpak
 RuntimeRepo=https://flathub.org/repo/flathub.flatpakrepo
-Comment=Self-hosted SSH and remote desktop management.
-Description=Termix is an open-source, forever-free, self-hosted all-in-one server management platform. It provides a multi-platform solution for managing your servers and infrastructure through a single, intuitive interface. Termix offers SSH terminal access, remote desktop control (RDP, VNC, Telnet), SSH tunneling capabilities, remote file management, and many other tools. Termix is the perfect free and self-hosted alternative to Termius available for all platforms.
+Comment=Self-hosted, plugin-based server management.
+Description=Termix is a free, open source, self-hosted platform for managing your servers, built on plugins. The core keeps your hosts, credentials, users and sharing, and plugins add the SSH terminal, remote desktop (RDP, VNC, Telnet), file manager, tunnels, Docker, metrics and more. It runs on web, desktop and mobile, and it is a free, self-hosted alternative to Termius.
 Icon=https://raw.githubusercontent.com/Termix-SSH/Termix/main/public/icon.png
 Homepage=https://github.com/Termix-SSH/Termix
diff --git a/packaging/flatpak/com.karmaa.termix.metainfo.xml b/packaging/flatpak/com.karmaa.termix.metainfo.xml
index 1e513e49e..6b7a18c56 100644
--- a/packaging/flatpak/com.karmaa.termix.metainfo.xml
+++ b/packaging/flatpak/com.karmaa.termix.metainfo.xml
@@ -2,7 +2,7 @@
 <component type="desktop-application">
     <id>com.karmaa.termix</id>
     <name>Termix</name>
-    <summary>Self-hosted SSH and remote desktop management.</summary>
+    <summary>Self-hosted, plugin-based server management.</summary>
 
     <metadata_license>CC0-1.0</metadata_license>
     <project_license>Apache-2.0</project_license>
@@ -11,25 +11,17 @@
 
     <description>
         <p>
-            Termix is an open-source, forever-free, self-hosted all-in-one server management platform. It provides a
-            multi-platform solution for managing your servers and infrastructure through a single, intuitive interface.
-            Termix offers SSH terminal access, remote desktop control (RDP, VNC, Telnet), SSH tunneling capabilities,
-            remote file management, and many other tools. Termix is the perfect free and self-hosted alternative to
-            Termius available for all platforms.
+            Termix is a free, open source, self-hosted platform for managing your servers, built on plugins. The core
+            keeps your hosts, credentials, users and sharing, and plugins add the SSH terminal, remote desktop (RDP, VNC,
+            Telnet), file manager, tunnels, Docker, metrics and more. It runs on web, desktop and mobile, and it is a
+            free, self-hosted alternative to Termius.
         </p>
     </description>
 
     <launchable type="desktop-id">com.karmaa.termix.desktop</launchable>
 
-    <screenshots>
-        <screenshot type="default">
-            <image>https://raw.githubusercontent.com/Termix-SSH/Termix/main/public/screenshots/terminal.png</image>
-            <caption>SSH Terminal Interface</caption>
-        </screenshot>
-    </screenshots>
-
     <url type="homepage">https://github.com/Termix-SSH/Termix</url>
-    <url type="bugtracker">https://github.com/Termix-SSH/Support/issues</url>
+    <url type="bugtracker">https://github.com/Termix-SSH/Termix/issues</url>
     <url type="help">https://docs.termix.site</url>
     <url type="vcs-browser">https://github.com/Termix-SSH/Termix</url>
 
diff --git a/packaging/flatpak/com.karmaa.termix.yml b/packaging/flatpak/com.karmaa.termix.yml
index b0cde5341..ba57e6eb0 100644
--- a/packaging/flatpak/com.karmaa.termix.yml
+++ b/packaging/flatpak/com.karmaa.termix.yml
@@ -59,14 +59,14 @@ modules:
 
     sources:
       - type: file
-        url: https://github.com/Termix-SSH/Termix/releases/download/release-VERSION_PLACEHOLDER-tag/termix_linux_x64_appimage.AppImage
+        url: https://github.com/Termix-SSH/Termix/releases/download/vVERSION_PLACEHOLDER/termix_linux_x64_appimage.AppImage
         sha256: CHECKSUM_X64_PLACEHOLDER
         dest-filename: termix.AppImage
         only-arches:
           - x86_64
 
       - type: file
-        url: https://github.com/Termix-SSH/Termix/releases/download/release-VERSION_PLACEHOLDER-tag/termix_linux_arm64_appimage.AppImage
+        url: https://github.com/Termix-SSH/Termix/releases/download/vVERSION_PLACEHOLDER/termix_linux_arm64_appimage.AppImage
         sha256: CHECKSUM_ARM64_PLACEHOLDER
         dest-filename: termix.AppImage
         only-arches:
diff --git a/plugins/acme-ssl/CHANGELOG.md b/plugins/acme-ssl/CHANGELOG.md
deleted file mode 100644
index 733c94e9f..000000000
--- a/plugins/acme-ssl/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Gets the HTTPS certificate Termix serves from Let's Encrypt or another ACME provider and renews it before it expires. Supports the HTTP challenge and the Cloudflare DNS challenge.
diff --git a/plugins/acme-ssl/README.md b/plugins/acme-ssl/README.md
deleted file mode 100644
index 4f510fe65..000000000
--- a/plugins/acme-ssl/README.md
+++ /dev/null
@@ -1,41 +0,0 @@
-# ACME Certificates
-
-Gets and renews the Termix HTTPS certificate from Let's Encrypt or another ACME provider.
-
-## Features
-
-- Gets a certificate from Let's Encrypt, Let's Encrypt staging or any ACME directory URL.
-- Checks twice a day and renews when there is no certificate, the current one is self-signed, it does not cover the domain or it expires within 30 days.
-- Swaps in the new certificate without a restart.
-- Shows the current certificate and the last attempt, with a button to request one now.
-
-## Setup
-
-Pick a challenge type:
-
-- HTTP: the provider fetches `http://<domain>/.well-known/acme-challenge/...`, so port 80 must reach Termix.
-- DNS (Cloudflare): needs a Cloudflare API token with Zone:DNS:Edit. Works when port 80 is closed.
-
-If you turn this plugin off, Termix keeps serving the current certificate but nothing renews it. Admin Settings > HTTPS certificate warns you before it expires. Uploading your own certificate is still done there.
-
-## Settings
-
-### Admin
-
-- Renew automatically: turn automatic renewal on or off.
-- Domain and Email: the domain to cover and the contact email for the provider.
-- Certificate authority: Let's Encrypt, Let's Encrypt staging or a custom ACME directory URL.
-- Challenge type: HTTP or DNS (Cloudflare).
-- Cloudflare API token: used by the DNS challenge. Stored encrypted.
-
-## Permissions
-
-- `acme-ssl.manage`: Manage ACME certificates. Only admins have it by default.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/acme-ssl/locales/en.json b/plugins/acme-ssl/locales/en.json
deleted file mode 100644
index cc7e8300a..000000000
--- a/plugins/acme-ssl/locales/en.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Manage ACME certificates",
-      "description": "See the certificate status and request a new certificate now."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Renew automatically",
-      "description": "Check twice a day and get a new certificate when there is none, it does not cover the domain, or it expires within 30 days."
-    },
-    "domain": {
-      "label": "Domain",
-      "description": "The public domain name for the certificate.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "Email",
-      "description": "Contact email for the ACME account and expiry notices.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "Certificate authority",
-      "description": "Where to get the certificate. Use staging to test without hitting Let's Encrypt rate limits.",
-      "letsencrypt": "Let's Encrypt",
-      "letsencryptStaging": "Let's Encrypt (staging)",
-      "custom": "Custom ACME directory"
-    },
-    "directoryUrl": {
-      "label": "ACME directory URL",
-      "description": "Only for a custom certificate authority. Must be an https URL."
-    },
-    "challengeType": {
-      "label": "Challenge type",
-      "description": "How to prove you own the domain.",
-      "http": "HTTP - needs port 80 reachable from the internet",
-      "cloudflare": "DNS (Cloudflare) - needs a Cloudflare API token"
-    },
-    "cloudflareToken": {
-      "label": "Cloudflare API token",
-      "description": "Scoped token with Zone:DNS:Edit permission for your domain."
-    }
-  },
-  "status": {
-    "title": "Certificate status",
-    "none": "No certificate",
-    "names": "Covers {{names}}",
-    "issuer": "Issued by {{issuer}}",
-    "expires": "Expires {{date}}",
-    "lastIssued": "Last issued {{date}}",
-    "lastError": "Last attempt failed: {{error}}",
-    "missing": "Set the domain, email and the fields your challenge type needs, then save, before requesting a certificate.",
-    "request": "Request certificate now",
-    "requesting": "Requesting certificate...",
-    "issued": "Certificate issued and installed"
-  },
-  "plugin": {
-    "name": "ACME Certificates"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/af_ZA.json b/plugins/acme-ssl/locales/translated/af_ZA.json
deleted file mode 100644
index cf7b77544..000000000
--- a/plugins/acme-ssl/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Bestuur ACME-sertifikate",
-      "description": "Sien die sertifikaatstatus en versoek nou 'n nuwe sertifikaat."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Hernu outomaties",
-      "description": "Kontroleer twee keer per dag en kry 'n nuwe sertifikaat wanneer daar geen is nie, dit nie die domein dek nie, of dit binne 30 dae verval."
-    },
-    "domain": {
-      "label": "Domein",
-      "description": "Die publieke domeinnaam vir die sertifikaat.",
-      "placeholder": "termix.voorbeeld.com"
-    },
-    "email": {
-      "label": "E-pos",
-      "description": "Kontak-e-posadres vir die ACME-rekening en vervalkennisgewings.",
-      "placeholder": "admin@voorbeeld.com"
-    },
-    "provider": {
-      "label": "Sertifikaatowerheid",
-      "description": "Waar om die sertifikaat te kry. Gebruik staging om te toets sonder om Let's Encrypt-tarieflimiete te bereik.",
-      "letsencrypt": "Kom ons enkripteer",
-      "letsencryptStaging": "Kom ons enkripteer (opvoering)",
-      "custom": "Pasgemaakte ACME-gids"
-    },
-    "directoryUrl": {
-      "label": "ACME-gids-URL",
-      "description": "Slegs vir 'n persoonlike sertifikaatowerheid. Moet 'n https-URL wees."
-    },
-    "challengeType": {
-      "label": "Uitdagingsoort",
-      "description": "Hoe om te bewys dat jy die domein besit.",
-      "http": "HTTP - benodig poort 80 wat vanaf die internet bereikbaar is",
-      "cloudflare": "DNS (Cloudflare) - benodig 'n Cloudflare API-token"
-    },
-    "cloudflareToken": {
-      "label": "Cloudflare API-token",
-      "description": "Omvangryke token met Zone:DNS:Wysig toestemming vir jou domein."
-    }
-  },
-  "status": {
-    "title": "Sertifikaatstatus",
-    "none": "Geen sertifikaat nie",
-    "names": "Omslae {{names}}",
-    "issuer": "Uitgereik deur {{issuer}}",
-    "expires": "Vervaldatum {{date}}",
-    "lastIssued": "Laas uitgereik {{date}}",
-    "lastError": "Laaste poging het misluk: {{error}}",
-    "missing": "Stel die domein, e-posadres en die velde wat jou uitdagingsoort benodig, en stoor dit dan voordat jy 'n sertifikaat aanvra.",
-    "request": "Versoek nou 'n sertifikaat",
-    "requesting": "Versoek sertifikaat...",
-    "issued": "Sertifikaat uitgereik en geïnstalleer"
-  },
-  "plugin": {
-    "name": "ACME-sertifikate"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/ar_SA.json b/plugins/acme-ssl/locales/translated/ar_SA.json
deleted file mode 100644
index 9f70fdfce..000000000
--- a/plugins/acme-ssl/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "إدارة شهادات ACME",
-      "description": "اطلع على حالة الشهادة واطلب شهادة جديدة الآن."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "يتم التجديد تلقائياً",
-      "description": "تحقق مرتين في اليوم واحصل على شهادة جديدة عندما لا تكون هناك شهادة، أو عندما لا تغطي النطاق، أو عندما تنتهي صلاحيتها في غضون 30 يومًا."
-    },
-    "domain": {
-      "label": "النطاق",
-      "description": "اسم النطاق العام للشهادة.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "البريد الإلكتروني",
-      "description": "البريد الإلكتروني للتواصل بخصوص حساب ACME وإشعارات انتهاء الصلاحية.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "المرجع المصدق (CA)",
-      "description": "من أين أحصل على الشهادة؟ استخدم بيئة الاختبار لإجراء الاختبارات دون تجاوز حدود معدل Let's Encrypt.",
-      "letsencrypt": "Let's Encrypt",
-      "letsencryptStaging": "Let's Encrypt (مرحلة تجريبية)",
-      "custom": "دليل ACME مخصص"
-    },
-    "directoryUrl": {
-      "label": "رابط دليل ACME",
-      "description": "مخصص فقط لهيئة إصدار شهادات مخصصة. يجب أن يكون عنوان URL من نوع https."
-    },
-    "challengeType": {
-      "label": "نوع التحدي",
-      "description": "كيفية إثبات ملكيتك للنطاق.",
-      "http": "بروتوكول HTTP - يتطلب منفذ 80 يمكن الوصول إليه من الإنترنت",
-      "cloudflare": "نظام أسماء النطاقات (Cloudflare) - يتطلب رمز API من Cloudflare"
-    },
-    "cloudflareToken": {
-      "label": "رمز واجهة برمجة تطبيقات Cloudflare",
-      "description": "رمز مقيد بصلاحية Zone:DNS:Edit للنطاق الخاص بك."
-    }
-  },
-  "status": {
-    "title": "حالة الشهادة",
-    "none": "لا توجد شهادة",
-    "names": "يغطي {{names}}",
-    "issuer": "صادر عن {{issuer}}",
-    "expires": "تنتهي في {{date}}",
-    "lastIssued": "آخر إصدار {{date}}",
-    "lastError": "فشلت المحاولة الأخيرة: {{error}}",
-    "missing": "قم بتعيين النطاق والبريد الإلكتروني والحقول التي يحتاجها نوع التحدي الخاص بك، ثم احفظ التغييرات قبل طلب الشهادة.",
-    "request": "اطلب الشهادة الآن",
-    "requesting": "جارٍ طلب الشهادة...",
-    "issued": "تم إصدار الشهادة وتركيبها"
-  },
-  "plugin": {
-    "name": "شهادات ACME"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/bg_BG.json b/plugins/acme-ssl/locales/translated/bg_BG.json
deleted file mode 100644
index 173b1dd09..000000000
--- a/plugins/acme-ssl/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Управление на ACME сертификати",
-      "description": "Вижте състоянието на сертификата и заявете нов сертификат сега."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Подновяване автоматично",
-      "description": "Проверявайте два пъти на ден и получавайте нов сертификат, когато няма такъв, не покрива домейна или изтича в рамките на 30 дни."
-    },
-    "domain": {
-      "label": "Домейн",
-      "description": "Публичното домейн име за сертификата.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "Имейл",
-      "description": "Контактен имейл за ACME акаунта и известия за изтичане.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "Сертифициращ орган",
-      "description": "Къде да взема сертификата. Използвайте етапно тестване, за да не се достигат ограниченията на скоростта на Let's Encrypt.",
-      "letsencrypt": "Нека криптираме",
-      "letsencryptStaging": "Нека криптираме (подготовка)",
-      "custom": "Персонализирана ACME директория"
-    },
-    "directoryUrl": {
-      "label": "URL адрес на директорията на ACME",
-      "description": "Само за персонализиран сертифициращ орган. Трябва да е https URL адрес."
-    },
-    "challengeType": {
-      "label": "Тип предизвикателство",
-      "description": "Как да докажете, че притежавате домейна.",
-      "http": "HTTP - изисква порт 80, достъпен от интернет",
-      "cloudflare": "DNS (Cloudflare) - изисква Cloudflare API токен"
-    },
-    "cloudflareToken": {
-      "label": "Cloudflare API токен",
-      "description": "Ограничен токен с разрешение Zone:DNS:Edit за вашия домейн."
-    }
-  },
-  "status": {
-    "title": "Състояние на сертификата",
-    "none": "Няма сертификат",
-    "names": "Обхваща {{names}}",
-    "issuer": "Издадено от {{issuer}}",
-    "expires": "Изтича {{date}}",
-    "lastIssued": "Последно издадено {{date}}",
-    "lastError": "Последният опит не беше успешен: {{error}}",
-    "missing": "Задайте домейна, имейла и полетата, необходими за вашия тип предизвикателство, след което ги запазете, преди да заявите сертификат.",
-    "request": "Заявете сертификат сега",
-    "requesting": "Заявка за сертификат...",
-    "issued": "Сертификат издаден и инсталиран"
-  },
-  "plugin": {
-    "name": "Сертификати на ACME"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/bn_BD.json b/plugins/acme-ssl/locales/translated/bn_BD.json
deleted file mode 100644
index 6638575e4..000000000
--- a/plugins/acme-ssl/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "ACME সার্টিফিকেটগুলি পরিচালনা করুন",
-      "description": "সার্টিফিকেটের অবস্থা দেখুন এবং এখনই একটি নতুন সার্টিফিকেটের জন্য অনুরোধ করুন।"
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "স্বয়ংক্রিয়ভাবে নবায়ন করুন",
-      "description": "দিনে দুইবার পরীক্ষা করুন এবং যখন কোনো সার্টিফিকেট থাকবে না, সেটি ডোমেইনকে কভার করবে না, অথবা ৩০ দিনের মধ্যে এর মেয়াদ শেষ হয়ে যাবে, তখন একটি নতুন সার্টিফিকেট সংগ্রহ করুন।"
-    },
-    "domain": {
-      "label": "ডোমেইন",
-      "description": "সার্টিফিকেটটির পাবলিক ডোমেইন নাম।",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "ইমেল",
-      "description": "ACME অ্যাকাউন্ট এবং মেয়াদ শেষ হওয়ার বিজ্ঞপ্তির জন্য যোগাযোগের ইমেল।",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "শংসাপত্র কর্তৃপক্ষ",
-      "description": "সার্টিফিকেটটি কোথা থেকে পাবেন। Let's Encrypt-এর রেট লিমিট অতিক্রম না করে পরীক্ষা করার জন্য স্টেজিং ব্যবহার করুন।",
-      "letsencrypt": "আসুন এনক্রিপ্ট করি",
-      "letsencryptStaging": "লেটস এনক্রিপ্ট (স্টেজিং)",
-      "custom": "কাস্টম ACME ডিরেক্টরি"
-    },
-    "directoryUrl": {
-      "label": "ACME ডিরেক্টরি URL",
-      "description": "শুধুমাত্র কাস্টম সার্টিফিকেট অথরিটির জন্য। অবশ্যই একটি https URL হতে হবে।"
-    },
-    "challengeType": {
-      "label": "চ্যালেঞ্জের ধরণ",
-      "description": "ডোমেইনটির মালিকানা কীভাবে প্রমাণ করবেন।",
-      "http": "HTTP - এর জন্য ইন্টারনেট থেকে পোর্ট ৮০ অ্যাক্সেসযোগ্য হতে হবে।",
-      "cloudflare": "ডিএনএস (ক্লাউডফ্লেয়ার) - একটি ক্লাউডফ্লেয়ার এপিআই টোকেন প্রয়োজন"
-    },
-    "cloudflareToken": {
-      "label": "ক্লাউডফ্লেয়ার এপিআই টোকেন",
-      "description": "আপনার ডোমেনের জন্য Zone:DNS:Edit অনুমতিসহ স্কোপড টোকেন।"
-    }
-  },
-  "status": {
-    "title": "সার্টিফিকেটের অবস্থা",
-    "none": "কোন সার্টিফিকেট নেই",
-    "names": "{{names}} কভার করে",
-    "issuer": "{{issuer}} দ্বারা জারি করা হয়েছে",
-    "expires": "মেয়াদ শেষ হবে {{date}}",
-    "lastIssued": "সর্বশেষ প্রকাশিত {{date}}",
-    "lastError": "শেষ চেষ্টা ব্যর্থ: {{error}}",
-    "missing": "সার্টিফিকেটের জন্য অনুরোধ করার আগে, ডোমেইন, ইমেল এবং আপনার চ্যালেঞ্জ টাইপের জন্য প্রয়োজনীয় ফিল্ডগুলো সেট করুন, তারপর সেভ করুন।",
-    "request": "এখনই সার্টিফিকেটের জন্য অনুরোধ করুন",
-    "requesting": "সার্টিফিকেটের জন্য অনুরোধ...",
-    "issued": "সার্টিফিকেট ইস্যু এবং ইনস্টল করা হয়েছে"
-  },
-  "plugin": {
-    "name": "ACME সার্টিফিকেট"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/ca_ES.json b/plugins/acme-ssl/locales/translated/ca_ES.json
deleted file mode 100644
index 8a0b22e14..000000000
--- a/plugins/acme-ssl/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Gestionar certificats ACME",
-      "description": "Consulta l'estat del certificat i sol·licita'n un de nou ara."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Renovar automàticament",
-      "description": "Revisa dues vegades al dia i aconsegueix un certificat nou quan no n'hi ha cap, no cobreix el domini o caduca en 30 dies."
-    },
-    "domain": {
-      "label": "Domini",
-      "description": "El nom de domini públic del certificat.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "Correu electrònic",
-      "description": "Correu electrònic de contacte per al compte ACME i avisos de caducitat.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "Autoritat de certificació",
-      "description": "On s'obté el certificat. Utilitzeu la configuració estadística per fer proves sense arribar als límits de velocitat de Let's Encrypt.",
-      "letsencrypt": "Xifrem",
-      "letsencryptStaging": "Xifrem (posada en escena)",
-      "custom": "Directori ACME personalitzat"
-    },
-    "directoryUrl": {
-      "label": "URL del directori ACME",
-      "description": "Només per a una autoritat de certificació personalitzada. Ha de ser una URL https."
-    },
-    "challengeType": {
-      "label": "Tipus de repte",
-      "description": "Com demostrar que ets el propietari del domini.",
-      "http": "HTTP: necessita que el port 80 sigui accessible des d'Internet",
-      "cloudflare": "DNS (Cloudflare): necessita un token d'API de Cloudflare"
-    },
-    "cloudflareToken": {
-      "label": "Token de l'API de Cloudflare",
-      "description": "Token amb àmbit i permís Zone:DNS:Edit per al vostre domini."
-    }
-  },
-  "status": {
-    "title": "Estat del certificat",
-    "none": "Sense certificat",
-    "names": "Cobertes {{names}}",
-    "issuer": "Publicat per {{issuer}}",
-    "expires": "Caduca {{date}}",
-    "lastIssued": "Última emissió {{date}}",
-    "lastError": "Últim intent fallit: {{error}}",
-    "missing": "Definiu el domini, el correu electrònic i els camps que necessita el vostre tipus de repte i, a continuació, deseu-ho abans de sol·licitar un certificat.",
-    "request": "Sol·licita el certificat ara",
-    "requesting": "Sol·licitant certificat...",
-    "issued": "Certificat emès i instal·lat"
-  },
-  "plugin": {
-    "name": "Certificats ACME"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/cs_CZ.json b/plugins/acme-ssl/locales/translated/cs_CZ.json
deleted file mode 100644
index 724fe3897..000000000
--- a/plugins/acme-ssl/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Správa certifikátů ACME",
-      "description": "Zkontrolujte stav certifikátu a požádejte o nový certifikát."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Automaticky obnovit",
-      "description": "Kontrolujte dvakrát denně a požádejte o nový certifikát, pokud žádný neexistuje, pokud se nevztahuje na danou doménu nebo pokud jeho platnost vyprší do 30 dnů."
-    },
-    "domain": {
-      "label": "Doména",
-      "description": "Název veřejné domény pro certifikát.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "E-mail",
-      "description": "Kontaktní e-mail pro účet ACME a oznámení o vypršení platnosti.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "Certifikační autorita",
-      "description": "Kde získat certifikát. Použijte staging k testování bez překročení limitů rychlosti Let's Encrypt.",
-      "letsencrypt": "Pojďme šifrovat",
-      "letsencryptStaging": "Pojďme šifrovat (příprava)",
-      "custom": "Vlastní adresář ACME"
-    },
-    "directoryUrl": {
-      "label": "URL adresáře ACME",
-      "description": "Pouze pro vlastní certifikační autoritu. Musí se jednat o URL adresu typu https."
-    },
-    "challengeType": {
-      "label": "Typ výzvy",
-      "description": "Jak prokázat, že jste vlastníkem domény.",
-      "http": "HTTP - vyžaduje dostupnost portu 80 z internetu",
-      "cloudflare": "DNS (Cloudflare) – vyžaduje token Cloudflare API"
-    },
-    "cloudflareToken": {
-      "label": "Token API Cloudflare",
-      "description": "Token s vymezeným rozsahem a oprávněním Zóna:DNS:Úpravy pro vaši doménu."
-    }
-  },
-  "status": {
-    "title": "Stav certifikátu",
-    "none": "Žádný certifikát",
-    "names": "Kryty {{names}}",
-    "issuer": "Vydáno uživatelem {{issuer}}",
-    "expires": "Platnost vyprší {{date}}",
-    "lastIssued": "Naposledy vydáno {{date}}",
-    "lastError": "Poslední pokus se nezdařil: {{error}}",
-    "missing": "Před vyžádáním certifikátu nastavte doménu, e-mail a pole, která váš typ výzvy vyžaduje, a poté je uložte.",
-    "request": "Vyžádejte si certifikát nyní",
-    "requesting": "Žádost o certifikát...",
-    "issued": "Certifikát vydán a nainstalován"
-  },
-  "plugin": {
-    "name": "Certifikáty ACME"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/da_DK.json b/plugins/acme-ssl/locales/translated/da_DK.json
deleted file mode 100644
index 35f92341a..000000000
--- a/plugins/acme-ssl/locales/translated/da_DK.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Administrer ACME-certifikater",
-      "description": "Se certifikatstatussen, og anmod om et nyt certifikat nu."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Forny automatisk",
-      "description": "Tjek to gange om dagen, og få et nyt certifikat, hvis der ikke er noget, det ikke dækker domænet, eller det udløber inden for 30 dage."
-    },
-    "domain": {
-      "label": "Domæne",
-      "description": "Det offentlige domænenavn for certifikatet.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "E-mail",
-      "description": "Kontakt-e-mailadresse for ACME-kontoen og udløbsmeddelelser.",
-      "placeholder": "admin@eksempel.com"
-    },
-    "provider": {
-      "label": "Certifikatmyndighed",
-      "description": "Hvor kan man få certifikatet? Brug staging til at teste uden at nå Let's Encrypt-hastighedsgrænserne.",
-      "letsencrypt": "Lad os kryptere",
-      "letsencryptStaging": "Lad os kryptere (staging)",
-      "custom": "Brugerdefineret ACME-mappe"
-    },
-    "directoryUrl": {
-      "label": "ACME-katalogets URL",
-      "description": "Kun for en brugerdefineret certifikatmyndighed. Skal være en https-URL."
-    },
-    "challengeType": {
-      "label": "Udfordringstype",
-      "description": "Sådan beviser du, at du ejer domænet.",
-      "http": "HTTP - kræver port 80, der kan nås fra internettet",
-      "cloudflare": "DNS (Cloudflare) - kræver et Cloudflare API-token"
-    },
-    "cloudflareToken": {
-      "label": "Cloudflare API-token",
-      "description": "Scoped-token med Zone:DNS:Rediger-tilladelse for dit domæne."
-    }
-  },
-  "status": {
-    "title": "Certifikatstatus",
-    "none": "Intet certifikat",
-    "names": "Dækker {{names}}",
-    "issuer": "Udstedt af {{issuer}}",
-    "expires": "Udløber {{date}}",
-    "lastIssued": "Sidst udstedt {{date}}",
-    "lastError": "Sidste forsøg mislykkedes: {{error}}",
-    "missing": "Angiv domæne, e-mail og de felter, som din udfordringstype kræver, og gem derefter, før du anmoder om et certifikat.",
-    "request": "Anmod om certifikat nu",
-    "requesting": "Anmoder om certifikat...",
-    "issued": "Certifikat udstedt og installeret"
-  },
-  "plugin": {
-    "name": "ACME-certifikater"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/de_DE.json b/plugins/acme-ssl/locales/translated/de_DE.json
deleted file mode 100644
index 429d781ae..000000000
--- a/plugins/acme-ssl/locales/translated/de_DE.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "ACME-Zertifikate verwalten",
-      "description": "Prüfen Sie den Zertifikatsstatus und fordern Sie jetzt ein neues Zertifikat an."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Automatische Verlängerung",
-      "description": "Prüfen Sie zweimal täglich, ob ein Zertifikat vorhanden ist, ob das aktuelle Zertifikat die Domain nicht abdeckt oder ob es innerhalb von 30 Tagen abläuft."
-    },
-    "domain": {
-      "label": "Domain",
-      "description": "Der öffentliche Domainname für das Zertifikat.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "E-Mail",
-      "description": "Kontakt-E-Mail-Adresse für das ACME-Konto und Benachrichtigungen zum Ablaufdatum.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "Zertifizierungsstelle",
-      "description": "Wo Sie das Zertifikat erhalten. Nutzen Sie die Staging-Umgebung, um zu testen, ohne die Ratenbegrenzungen von Let's Encrypt zu erreichen.",
-      "letsencrypt": "Let's Encrypt",
-      "letsencryptStaging": "Let's Encrypt (Staging)",
-      "custom": "Benutzerdefiniertes ACME-Verzeichnis"
-    },
-    "directoryUrl": {
-      "label": "ACME-Verzeichnis-URL",
-      "description": "Nur für eine benutzerdefinierte Zertifizierungsstelle. Muss eine HTTPS-URL sein."
-    },
-    "challengeType": {
-      "label": "Herausforderungstyp",
-      "description": "Wie Sie nachweisen, dass Sie die Domain besitzen.",
-      "http": "HTTP – benötigt Port 80, der aus dem Internet erreichbar sein muss.",
-      "cloudflare": "DNS (Cloudflare) – benötigt ein Cloudflare-API-Token"
-    },
-    "cloudflareToken": {
-      "label": "Cloudflare API-Token",
-      "description": "Bereichsbezogener Token mit Zone:DNS:Edit-Berechtigung für Ihre Domain."
-    }
-  },
-  "status": {
-    "title": "Zertifikatsstatus",
-    "none": "Kein Zertifikat",
-    "names": "Cover {{names}}",
-    "issuer": "Herausgegeben von {{issuer}}",
-    "expires": "Läuft ab {{date}}",
-    "lastIssued": "Zuletzt ausgestellt {{date}}",
-    "lastError": "Letzter Versuch fehlgeschlagen: {{error}}",
-    "missing": "Legen Sie die Domain, die E-Mail-Adresse und die Felder fest, die Ihr Herausforderungstyp benötigt, und speichern Sie die Einstellungen, bevor Sie ein Zertifikat anfordern.",
-    "request": "Zertifikat jetzt anfordern",
-    "requesting": "Zertifikat wird angefordert...",
-    "issued": "Zertifikat ausgestellt und installiert"
-  },
-  "plugin": {
-    "name": "ACME-Zertifikate"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/el_GR.json b/plugins/acme-ssl/locales/translated/el_GR.json
deleted file mode 100644
index 6fb5c5280..000000000
--- a/plugins/acme-ssl/locales/translated/el_GR.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Διαχείριση πιστοποιητικών ACME",
-      "description": "Δείτε την κατάσταση του πιστοποιητικού και ζητήστε ένα νέο πιστοποιητικό τώρα."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Αυτόματη ανανέωση",
-      "description": "Ελέγχετε δύο φορές την ημέρα και λαμβάνετε ένα νέο πιστοποιητικό όταν δεν υπάρχει, δεν καλύπτει τον τομέα ή λήγει εντός 30 ημερών."
-    },
-    "domain": {
-      "label": "Πεδίο ορισμού",
-      "description": "Το όνομα δημόσιου τομέα για το πιστοποιητικό.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "E-mail",
-      "description": "Ηλεκτρονική διεύθυνση ηλεκτρονικού ταχυδρομείου επικοινωνίας για τον λογαριασμό ACME και τις ειδοποιήσεις λήξης.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "Αρχή έκδοσης πιστοποιητικών",
-      "description": "Πού να λάβετε το πιστοποιητικό. Χρησιμοποιήστε τη σταδιακή επεξεργασία για να δοκιμάσετε χωρίς να υπερβείτε τα όρια ρυθμού του Let's Encrypt.",
-      "letsencrypt": "Ας κρυπτογραφήσουμε",
-      "letsencryptStaging": "Ας κρυπτογραφήσουμε (σταδιοποίηση)",
-      "custom": "Προσαρμοσμένος κατάλογος ACME"
-    },
-    "directoryUrl": {
-      "label": "URL καταλόγου ACME",
-      "description": "Μόνο για μια προσαρμοσμένη αρχή έκδοσης πιστοποιητικών. Πρέπει να είναι μια διεύθυνση URL https."
-    },
-    "challengeType": {
-      "label": "Τύπος πρόκλησης",
-      "description": "Πώς να αποδείξετε ότι είστε ο κάτοχος του domain.",
-      "http": "HTTP - χρειάζεται θύρα 80 προσβάσιμη από το διαδίκτυο",
-      "cloudflare": "DNS (Cloudflare) - χρειάζεται ένα διακριτικό API Cloudflare"
-    },
-    "cloudflareToken": {
-      "label": "Διακριτικό API Cloudflare",
-      "description": "Διακριτικό πεδίου εφαρμογής με δικαίωμα Zone:DNS:Edit για τον τομέα σας."
-    }
-  },
-  "status": {
-    "title": "Κατάσταση πιστοποιητικού",
-    "none": "Δεν υπάρχει πιστοποιητικό",
-    "names": "Καλύμματα {{names}}",
-    "issuer": "Εκδόθηκε από {{issuer}}",
-    "expires": "Λήγει {{date}}",
-    "lastIssued": "Τελευταία έκδοση {{date}}",
-    "lastError": "Η τελευταία προσπάθεια απέτυχε: {{error}}",
-    "missing": "Ορίστε τον τομέα, το email και τα πεδία που χρειάζεται ο τύπος της πρόκλησής σας και, στη συνέχεια, αποθηκεύστε το, πριν ζητήσετε πιστοποιητικό.",
-    "request": "Ζητήστε πιστοποιητικό τώρα",
-    "requesting": "Αίτημα πιστοποιητικού...",
-    "issued": "Έκδοση και εγκατάσταση πιστοποιητικού"
-  },
-  "plugin": {
-    "name": "Πιστοποιητικά ACME"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/es_ES.json b/plugins/acme-ssl/locales/translated/es_ES.json
deleted file mode 100644
index f6030d5ba..000000000
--- a/plugins/acme-ssl/locales/translated/es_ES.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Gestionar certificados ACME",
-      "description": "Consulte el estado del certificado y solicite uno nuevo ahora."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Renovación automática",
-      "description": "Compruebe dos veces al día y obtenga un nuevo certificado si no tiene ninguno, si no cubre el dominio o si caduca en los próximos 30 días."
-    },
-    "domain": {
-      "label": "Dominio",
-      "description": "El nombre de dominio público para el certificado.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "Correo electrónico",
-      "description": "Correo electrónico de contacto para la cuenta ACME y avisos de vencimiento.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "Autoridad de certificación",
-      "description": "Dónde obtener el certificado. Utilice el entorno de pruebas para realizar pruebas sin alcanzar los límites de uso de Let's Encrypt.",
-      "letsencrypt": "Let's Encrypt",
-      "letsencryptStaging": "Let's Encrypt (en fase de pruebas)",
-      "custom": "Directorio ACME personalizado"
-    },
-    "directoryUrl": {
-      "label": "URL del directorio ACME",
-      "description": "Solo para una autoridad de certificación personalizada. Debe ser una URL HTTPS."
-    },
-    "challengeType": {
-      "label": "Tipo de desafío",
-      "description": "Cómo demostrar que usted es el propietario del dominio.",
-      "http": "HTTP: necesita que el puerto 80 sea accesible desde Internet.",
-      "cloudflare": "DNS (Cloudflare): requiere un token de API de Cloudflare."
-    },
-    "cloudflareToken": {
-      "label": "Token de API de Cloudflare",
-      "description": "Token con permiso Zone:DNS:Edit limitado para tu dominio."
-    }
-  },
-  "status": {
-    "title": "Estado del certificado",
-    "none": "Sin certificado",
-    "names": "Portadas {{names}}",
-    "issuer": "Emitido por {{issuer}}",
-    "expires": "Caduca {{date}}",
-    "lastIssued": "Última emisión {{date}}",
-    "lastError": "Último intento fallido: {{error}}",
-    "missing": "Configure el dominio, el correo electrónico y los campos que requiere su tipo de desafío, luego guarde los cambios y, a continuación, solicite un certificado.",
-    "request": "Solicita tu certificado ahora",
-    "requesting": "Solicitando certificado...",
-    "issued": "Certificado emitido e instalado"
-  },
-  "plugin": {
-    "name": "Certificados ACME"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/fi_FI.json b/plugins/acme-ssl/locales/translated/fi_FI.json
deleted file mode 100644
index 81288811f..000000000
--- a/plugins/acme-ssl/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Hallinnoi ACME-sertifikaatteja",
-      "description": "Tarkista varmenteen tila ja pyydä uusi varmenne nyt."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Uudista automaattisesti",
-      "description": "Tarkista kahdesti päivässä ja hanki uusi varmenne, jos sitä ei ole, se ei kata verkkotunnusta tai se vanhenee 30 päivän kuluessa."
-    },
-    "domain": {
-      "label": "Verkkotunnus",
-      "description": "Varmenteen julkinen verkkotunnus.",
-      "placeholder": "termix.esimerkki.com"
-    },
-    "email": {
-      "label": "Sähköposti",
-      "description": "ACME-tilin yhteystiedot ja vanhenemisilmoitukset.",
-      "placeholder": "admin@esimerkki.com"
-    },
-    "provider": {
-      "label": "Varmentaja",
-      "description": "Mistä varmenteen saa? Käytä testausympäristöä Let's Encrypt -nopeusrajoitusten ylittämättä.",
-      "letsencrypt": "Salataanpa",
-      "letsencryptStaging": "Let's Encrypt (vaiheistus)",
-      "custom": "Mukautettu ACME-hakemisto"
-    },
-    "directoryUrl": {
-      "label": "ACME-hakemiston URL-osoite",
-      "description": "Vain mukautetulle varmentajalle. URL-osoitteen on oltava https."
-    },
-    "challengeType": {
-      "label": "Haasteen tyyppi",
-      "description": "Kuinka todistaa omistavasi verkkotunnuksen.",
-      "http": "HTTP - vaatii portin 80, johon internetistä voi päästä käsiksi",
-      "cloudflare": "DNS (Cloudflare) – vaatii Cloudflare API -tunnuksen"
-    },
-    "cloudflareToken": {
-      "label": "Cloudflare API -tunnus",
-      "description": "Laajuusaluetunnus, jolla on Zone:DNS:Edit-käyttöoikeus verkkotunnuksellesi."
-    }
-  },
-  "status": {
-    "title": "Sertifikaatin tila",
-    "none": "Ei todistusta",
-    "names": "Kannet {{names}}",
-    "issuer": "Myöntäjä {{issuer}}",
-    "expires": "Vanhenee {{date}}",
-    "lastIssued": "Viimeksi myönnetty {{date}}",
-    "lastError": "Viimeisin yritys epäonnistui: {{error}}",
-    "missing": "Aseta verkkotunnus, sähköpostiosoite ja haastetyyppisi tarvitsemat kentät ja tallenna ne ennen varmenteen pyytämistä.",
-    "request": "Pyydä todistus nyt",
-    "requesting": "Pyydetään varmennetta...",
-    "issued": "Sertifikaatti myönnetty ja asennettu"
-  },
-  "plugin": {
-    "name": "ACME-sertifikaatit"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/fr_FR.json b/plugins/acme-ssl/locales/translated/fr_FR.json
deleted file mode 100644
index 3996ddd7f..000000000
--- a/plugins/acme-ssl/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Gérer les certificats ACME",
-      "description": "Consultez l'état du certificat et demandez un nouveau certificat dès maintenant."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Renouvellement automatique",
-      "description": "Vérifiez deux fois par jour et obtenez un nouveau certificat s'il n'y en a pas, s'il ne couvre pas le domaine ou s'il expire dans les 30 jours."
-    },
-    "domain": {
-      "label": "Domaine",
-      "description": "Le nom de domaine public pour le certificat.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "E-mail",
-      "description": "Adresse électronique de contact pour le compte ACME et les avis d'expiration.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "Autorité de certification",
-      "description": "Où obtenir le certificat ? Utilisez un environnement de test pour effectuer des tests sans atteindre les limites de requêtes de Let's Encrypt.",
-      "letsencrypt": "Let's Encrypt",
-      "letsencryptStaging": "Let's Encrypt (phase de test)",
-      "custom": "Répertoire ACME personnalisé"
-    },
-    "directoryUrl": {
-      "label": "URL du répertoire ACME",
-      "description": "Uniquement pour une autorité de certification personnalisée. Doit être une URL HTTPS."
-    },
-    "challengeType": {
-      "label": "Type de défi",
-      "description": "Comment prouver que vous êtes propriétaire du domaine.",
-      "http": "HTTP – nécessite que le port 80 soit accessible depuis Internet",
-      "cloudflare": "DNS (Cloudflare) - nécessite un jeton d'API Cloudflare"
-    },
-    "cloudflareToken": {
-      "label": "Jeton d'API Cloudflare",
-      "description": "Jeton limité avec l'autorisation Zone:DNS:Edit pour votre domaine."
-    }
-  },
-  "status": {
-    "title": "Statut du certificat",
-    "none": "Aucun certificat",
-    "names": "Couvertures {{names}}",
-    "issuer": "Émis par {{issuer}}",
-    "expires": "Expire le {{date}}",
-    "lastIssued": "Dernière émission le {{date}}",
-    "lastError": "Dernière tentative échouée : {{error}}",
-    "missing": "Configurez le domaine, l'adresse e-mail et les champs requis par votre type de défi, puis enregistrez, avant de demander un certificat.",
-    "request": "Demandez votre certificat dès maintenant",
-    "requesting": "Demande de certificat en cours...",
-    "issued": "Certificat délivré et installé"
-  },
-  "plugin": {
-    "name": "Certificats ACME"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/he_IL.json b/plugins/acme-ssl/locales/translated/he_IL.json
deleted file mode 100644
index 3c4f66cf1..000000000
--- a/plugins/acme-ssl/locales/translated/he_IL.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "ניהול אישורי ACME",
-      "description": "ראה את סטטוס האישור ובקש אישור חדש כעת."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "חידוש אוטומטי",
-      "description": "בדקו פעמיים ביום וקבלו תעודה חדשה אם אין, אם היא לא מכסה את הדומיין, או אם היא פגה תוך 30 יום."
-    },
-    "domain": {
-      "label": "תְחוּם",
-      "description": "שם התחום הציבורי עבור התעודה.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "אֶלֶקטרוֹנִי",
-      "description": "כתובת דוא\"ל ליצירת קשר עבור חשבון ACME והודעות תפוגה.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "רשות אישורים",
-      "description": "היכן ניתן להשיג את האישור. השתמשו ב-staging כדי לבדוק מבלי להגיע למגבלות התעריף של Let's Encrypt.",
-      "letsencrypt": "בואו נצפין",
-      "letsencryptStaging": "בואו נצפין (שלבי)",
-      "custom": "ספריית ACME מותאמת אישית"
-    },
-    "directoryUrl": {
-      "label": "כתובת אתר של ספריית ACME",
-      "description": "רק עבור רשות אישורים מותאמת אישית. חייבת להיות כתובת URL מסוג https."
-    },
-    "challengeType": {
-      "label": "סוג האתגר",
-      "description": "איך להוכיח שאתה הבעלים של הדומיין.",
-      "http": "HTTP - דורש גישה לפורט 80 מהאינטרנט",
-      "cloudflare": "DNS (Cloudflare) - דורש אסימון API של Cloudflare"
-    },
-    "cloudflareToken": {
-      "label": "אסימון API של Cloudflare",
-      "description": "אסימון בטווח עם הרשאת עריכה של אזור:DNS: עבור הדומיין שלך."
-    }
-  },
-  "status": {
-    "title": "סטטוס התעודה",
-    "none": "אין תעודה",
-    "names": "כריכות {{names}}",
-    "issuer": "הונפק על ידי {{issuer}}",
-    "expires": "פג תוקף {{date}}",
-    "lastIssued": "הוצאה אחרונה {{date}}",
-    "lastError": "ניסיון אחרון נכשל: {{error}}",
-    "missing": "הגדר את הדומיין, האימייל והשדות הנדרשים עבור סוג האתגר שלך, ולאחר מכן שמור, לפני בקשת האישור.",
-    "request": "בקשת תעודה עכשיו",
-    "requesting": "מבקש תעודה...",
-    "issued": "תעודה הונפקה והותקנה"
-  },
-  "plugin": {
-    "name": "תעודות ACME"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/hi_IN.json b/plugins/acme-ssl/locales/translated/hi_IN.json
deleted file mode 100644
index 7659bdcdd..000000000
--- a/plugins/acme-ssl/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "ACME प्रमाणपत्रों का प्रबंधन करें",
-      "description": "प्रमाणपत्र की स्थिति देखें और अभी नए प्रमाणपत्र के लिए अनुरोध करें।"
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "स्वचालित रूप से नवीनीकरण करें",
-      "description": "दिन में दो बार जांच करें और यदि कोई प्रमाणपत्र मौजूद नहीं है, या वह डोमेन को कवर नहीं करता है, या 30 दिनों के भीतर समाप्त हो रहा है, तो नया प्रमाणपत्र प्राप्त करें।"
-    },
-    "domain": {
-      "label": "डोमेन",
-      "description": "प्रमाणपत्र के लिए सार्वजनिक डोमेन नाम।",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "ईमेल",
-      "description": "ACME खाते और समाप्ति सूचनाओं के लिए संपर्क ईमेल पता।",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "प्रमाणपत्र प्राधिकरण",
-      "description": "सर्टिफिकेट कहां से प्राप्त करें। Let's Encrypt की दर सीमा का उल्लंघन किए बिना परीक्षण के लिए स्टेजिंग का उपयोग करें।",
-      "letsencrypt": "आइए एन्क्रिप्ट करें",
-      "letsencryptStaging": "लेट्स एनक्रिप्ट (चरणबद्ध)",
-      "custom": "कस्टम एसीएमई निर्देशिका"
-    },
-    "directoryUrl": {
-      "label": "ACME निर्देशिका URL",
-      "description": "केवल कस्टम सर्टिफिकेट अथॉरिटी के लिए। यूआरएल HTTPS होना चाहिए।"
-    },
-    "challengeType": {
-      "label": "चुनौती का प्रकार",
-      "description": "आप डोमेन के मालिक होने का प्रमाण कैसे दे सकते हैं?",
-      "http": "HTTP - इसके लिए इंटरनेट से पोर्ट 80 तक पहुंच आवश्यक है।",
-      "cloudflare": "DNS (Cloudflare) - इसके लिए Cloudflare API टोकन की आवश्यकता होती है।"
-    },
-    "cloudflareToken": {
-      "label": "क्लाउडफ्लेयर एपीआई टोकन",
-      "description": "आपके डोमेन के लिए Zone:DNS:Edit अनुमति वाला स्कोप्ड टोकन।"
-    }
-  },
-  "status": {
-    "title": "प्रमाणपत्र की स्थिति",
-    "none": "कोई प्रमाणपत्र नहीं",
-    "names": "कवर {{names}}",
-    "issuer": "{{issuer}} द्वारा जारी किया गया",
-    "expires": "{{date}} को समाप्त होगा",
-    "lastIssued": "अंतिम जारी: {{date}}",
-    "lastError": "अंतिम प्रयास विफल रहा: {{error}}",
-    "missing": "डोमेन, ईमेल और आपके चैलेंज टाइप के लिए आवश्यक फ़ील्ड सेट करें, फिर प्रमाणपत्र का अनुरोध करने से पहले सेव करें।",
-    "request": "अभी प्रमाणपत्र का अनुरोध करें",
-    "requesting": "प्रमाणपत्र अनुरोध किया जा रहा है...",
-    "issued": "प्रमाणपत्र जारी और स्थापित किया गया"
-  },
-  "plugin": {
-    "name": "एसीएमई प्रमाणपत्र"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/hu_HU.json b/plugins/acme-ssl/locales/translated/hu_HU.json
deleted file mode 100644
index 394bf5b4f..000000000
--- a/plugins/acme-ssl/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "ACME tanúsítványok kezelése",
-      "description": "Tekintse meg a tanúsítvány állapotát, és igényeljen új tanúsítványt most."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Automatikus megújítás",
-      "description": "Naponta kétszer ellenőrizd, és szerezz be új tanúsítványt, ha nincs még tanúsítvány, ha nem fedi le a domaint, vagy ha 30 napon belül lejár."
-    },
-    "domain": {
-      "label": "Domain",
-      "description": "A tanúsítvány nyilvános domainneve.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "Email",
-      "description": "Az ACME fiókkal és a lejárati értesítésekkel kapcsolatos elérhetőségi e-mail cím.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "Tanúsítványkibocsátó",
-      "description": "Hol lehet beszerezni a tanúsítványt? Használjon előzetes tesztelést a Let's Encrypt sebességkorlátainak elérése nélkül.",
-      "letsencrypt": "Titkosítsunk",
-      "letsencryptStaging": "Titkosítsuk (előkészítés)",
-      "custom": "Egyéni ACME címtár"
-    },
-    "directoryUrl": {
-      "label": "ACME könyvtár URL-címe",
-      "description": "Csak egyéni hitelesítésszolgáltató esetén. Https URL-címnek kell lennie."
-    },
-    "challengeType": {
-      "label": "Kihívás típusa",
-      "description": "Hogyan bizonyíthatod, hogy te vagy a domain tulajdonosa?",
-      "http": "HTTP – internetről elérhető 80-as port szükséges",
-      "cloudflare": "DNS (Cloudflare) – Cloudflare API token szükséges"
-    },
-    "cloudflareToken": {
-      "label": "Cloudflare API token",
-      "description": "Hatókörbe tartozó token Zóna:DNS:Szerkesztés engedéllyel a domainhez."
-    }
-  },
-  "status": {
-    "title": "Tanúsítvány állapota",
-    "none": "Nincs tanúsítvány",
-    "names": "Borítók {{names}}",
-    "issuer": "Kibocsátó: {{issuer}}",
-    "expires": "Lejár {{date}}",
-    "lastIssued": "Utolsó kiadás {{date}}",
-    "lastError": "Utolsó kísérlet sikertelen: {{error}}",
-    "missing": "Állítsa be a domaint, az e-mail címet és a kihívástípushoz szükséges mezőket, majd mentse el a beállításokat a tanúsítvány igénylése előtt.",
-    "request": "Igényeljen tanúsítványt most",
-    "requesting": "Tanúsítvány kérése...",
-    "issued": "Tanúsítvány kiállítva és telepítve"
-  },
-  "plugin": {
-    "name": "ACME tanúsítványok"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/id_ID.json b/plugins/acme-ssl/locales/translated/id_ID.json
deleted file mode 100644
index cab6c2d08..000000000
--- a/plugins/acme-ssl/locales/translated/id_ID.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Kelola sertifikat ACME",
-      "description": "Lihat status sertifikat dan ajukan permohonan sertifikat baru sekarang."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Perpanjang secara otomatis",
-      "description": "Periksa dua kali sehari dan dapatkan sertifikat baru jika tidak ada, tidak mencakup domain, atau akan kedaluwarsa dalam 30 hari."
-    },
-    "domain": {
-      "label": "Domain",
-      "description": "Nama domain publik untuk sertifikat tersebut.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "E-mail",
-      "description": "Alamat email kontak untuk akun ACME dan pemberitahuan masa berlaku.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "Lembaga sertifikasi",
-      "description": "Di mana mendapatkan sertifikat? Gunakan staging untuk pengujian tanpa melampaui batas kuota Let's Encrypt.",
-      "letsencrypt": "Mari Enkripsi",
-      "letsencryptStaging": "Let's Encrypt (pementasan)",
-      "custom": "Direktori ACME khusus"
-    },
-    "directoryUrl": {
-      "label": "URL direktori ACME",
-      "description": "Hanya untuk otoritas sertifikat khusus. Harus berupa URL https."
-    },
-    "challengeType": {
-      "label": "Jenis tantangan",
-      "description": "Bagaimana cara membuktikan bahwa Anda pemilik domain tersebut.",
-      "http": "HTTP - memerlukan port 80 yang dapat diakses dari internet.",
-      "cloudflare": "DNS (Cloudflare) - memerlukan token API Cloudflare"
-    },
-    "cloudflareToken": {
-      "label": "Token API Cloudflare",
-      "description": "Token terlingkup dengan izin Zone:DNS:Edit untuk domain Anda."
-    }
-  },
-  "status": {
-    "title": "Status sertifikat",
-    "none": "Tidak ada sertifikat",
-    "names": "Sampul {{names}}",
-    "issuer": "Dikeluarkan oleh {{issuer}}",
-    "expires": "Berakhir {{date}}",
-    "lastIssued": "Terakhir diterbitkan {{date}}",
-    "lastError": "Upaya terakhir gagal: {{error}}",
-    "missing": "Atur domain, email, dan kolom yang dibutuhkan oleh tipe tantangan Anda, lalu simpan, sebelum meminta sertifikat.",
-    "request": "Ajukan sertifikat sekarang",
-    "requesting": "Meminta sertifikat...",
-    "issued": "Sertifikat telah diterbitkan dan dipasang."
-  },
-  "plugin": {
-    "name": "Sertifikat ACME"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/it_IT.json b/plugins/acme-ssl/locales/translated/it_IT.json
deleted file mode 100644
index 8afbcb90c..000000000
--- a/plugins/acme-ssl/locales/translated/it_IT.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Gestire i certificati ACME",
-      "description": "Verifica lo stato del certificato e richiedine uno nuovo ora."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Rinnovo automatico",
-      "description": "Controlla due volte al giorno e richiedi un nuovo certificato se non ne trovi uno, se non copre il dominio o se scade entro 30 giorni."
-    },
-    "domain": {
-      "label": "Dominio",
-      "description": "Il nome di dominio pubblico per il certificato.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "Email",
-      "description": "Indirizzo email per contattare l'account ACME e per ricevere avvisi di scadenza.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "Autorità di certificazione",
-      "description": "Dove ottenere il certificato. Utilizza un ambiente di staging per effettuare dei test senza superare i limiti di frequenza di Let's Encrypt.",
-      "letsencrypt": "Let's Encrypt",
-      "letsencryptStaging": "Let's Encrypt (staging)",
-      "custom": "Elenco personalizzato ACME"
-    },
-    "directoryUrl": {
-      "label": "URL della directory ACME",
-      "description": "Solo per un'autorità di certificazione personalizzata. Deve essere un URL HTTPS."
-    },
-    "challengeType": {
-      "label": "Tipo di sfida",
-      "description": "Come dimostrare di essere il proprietario del dominio.",
-      "http": "HTTP - richiede che la porta 80 sia raggiungibile da Internet",
-      "cloudflare": "DNS (Cloudflare) - richiede un token API di Cloudflare"
-    },
-    "cloudflareToken": {
-      "label": "Token API di Cloudflare",
-      "description": "Token con autorizzazione Zone:DNS:Edit per il tuo dominio."
-    }
-  },
-  "status": {
-    "title": "Stato del certificato",
-    "none": "Nessun certificato",
-    "names": "Copertine {{names}}",
-    "issuer": "Emesso da {{issuer}}",
-    "expires": "Scade il {{date}}",
-    "lastIssued": "Ultimo rilascio il {{date}}",
-    "lastError": "Ultimo tentativo fallito: {{error}}",
-    "missing": "Imposta il dominio, l'indirizzo email e i campi richiesti dal tuo tipo di sfida, quindi salva prima di richiedere un certificato.",
-    "request": "Richiedi subito il certificato",
-    "requesting": "Richiesta certificato in corso...",
-    "issued": "Certificato rilasciato e installato"
-  },
-  "plugin": {
-    "name": "Certificati ACME"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/ja_JP.json b/plugins/acme-ssl/locales/translated/ja_JP.json
deleted file mode 100644
index 41d02eeb1..000000000
--- a/plugins/acme-ssl/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "ACME証明書を管理する",
-      "description": "証明書のステータスを確認し、新しい証明書を今すぐリクエストしてください。"
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "自動更新",
-      "description": "1日に2回確認し、証明書がない場合、ドメインをカバーしていない場合、または有効期限が30日以内に切れる場合は、新しい証明書を取得してください。"
-    },
-    "domain": {
-      "label": "ドメイン",
-      "description": "証明書の公開ドメイン名。",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "メールアドレス",
-      "description": "ACMEアカウントおよび有効期限通知に関する連絡先メールアドレス。",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "認証局",
-      "description": "証明書の入手方法。Let's Encryptのレート制限に抵触しないよう、ステージング環境を使用してテストしてください。",
-      "letsencrypt": "レッツ・エンクリプト",
-      "letsencryptStaging": "Let's Encrypt（ステージング環境）",
-      "custom": "カスタムACMEディレクトリ"
-    },
-    "directoryUrl": {
-      "label": "ACMEディレクトリURL",
-      "description": "カスタム認証局のみ対象です。URLはhttpsでなければなりません。"
-    },
-    "challengeType": {
-      "label": "チャレンジの種類",
-      "description": "ドメインの所有権を証明する方法。",
-      "http": "HTTP - インターネットからアクセス可能なポート80が必要です",
-      "cloudflare": "DNS（Cloudflare） - Cloudflare APIトークンが必要です"
-    },
-    "cloudflareToken": {
-      "label": "Cloudflare APIトークン",
-      "description": "ドメインに対するZone:DNS:Edit権限を持つスコープ付きトークン。"
-    }
-  },
-  "status": {
-    "title": "証明書のステータス",
-    "none": "証明書なし",
-    "names": "カバー {{names}}",
-    "issuer": "{{issuer}} によって発行されました",
-    "expires": "有効期限 {{date}}",
-    "lastIssued": "最終発行日 {{date}}",
-    "lastError": "最後の試行が失敗しました: {{error}}",
-    "missing": "証明書をリクエストする前に、ドメイン、メールアドレス、およびチャレンジタイプに必要なフィールドを設定して保存してください。",
-    "request": "今すぐ証明書を申請する",
-    "requesting": "証明書をリクエスト中...",
-    "issued": "証明書が発行され、インストールされました。"
-  },
-  "plugin": {
-    "name": "ACME認定証"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/ko_KR.json b/plugins/acme-ssl/locales/translated/ko_KR.json
deleted file mode 100644
index 6af9dbf11..000000000
--- a/plugins/acme-ssl/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "ACME 인증서를 관리하세요",
-      "description": "인증서 상태를 확인하고 지금 바로 새 인증서를 신청하세요."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "자동으로 갱신됩니다",
-      "description": "하루에 두 번 확인하고, 인증서가 없거나, 도메인을 포함하지 않거나, 30일 이내에 만료되는 경우 새 인증서를 발급받으세요."
-    },
-    "domain": {
-      "label": "도메인",
-      "description": "인증서에 사용할 공개 도메인 이름입니다.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "이메일",
-      "description": "ACME 계정 및 만료 알림을 받을 수 있는 이메일 주소입니다.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "인증 기관",
-      "description": "인증서는 어디서 발급받나요? Let's Encrypt의 사용량 제한에 걸리지 않고 테스트하려면 스테이징 환경을 사용하세요.",
-      "letsencrypt": "렛츠인크립트",
-      "letsencryptStaging": "렛츠인크립트(스테이징)",
-      "custom": "사용자 지정 ACME 디렉토리"
-    },
-    "directoryUrl": {
-      "label": "ACME 디렉토리 URL",
-      "description": "사용자 지정 인증 기관에만 해당됩니다. URL은 HTTPS여야 합니다."
-    },
-    "challengeType": {
-      "label": "도전 유형",
-      "description": "도메인 소유권을 증명하는 방법.",
-      "http": "HTTP - 인터넷에서 접근 가능한 80번 포트가 필요합니다.",
-      "cloudflare": "DNS(클라우드플레어) - 클라우드플레어 API 토큰이 필요합니다."
-    },
-    "cloudflareToken": {
-      "label": "클라우드플레어 API 토큰",
-      "description": "도메인에 대한 Zone:DNS:Edit 권한이 있는 범위 지정 토큰입니다."
-    }
-  },
-  "status": {
-    "title": "인증서 상태",
-    "none": "인증서 없음",
-    "names": "{{names}}을 덮습니다.",
-    "issuer": "{{issuer}}에서 발행함",
-    "expires": "만료일: {{date}}",
-    "lastIssued": "마지막 발급일: {{date}}",
-    "lastError": "마지막 시도가 실패했습니다: {{error}}",
-    "missing": "인증서를 요청하기 전에 도메인, 이메일 및 인증 유형에 필요한 필드를 설정하고 저장하세요.",
-    "request": "지금 인증서를 요청하세요",
-    "requesting": "인증서 요청 중...",
-    "issued": "인증서가 발급 및 설치되었습니다."
-  },
-  "plugin": {
-    "name": "ACME 인증서"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/nl_NL.json b/plugins/acme-ssl/locales/translated/nl_NL.json
deleted file mode 100644
index ae59e546a..000000000
--- a/plugins/acme-ssl/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Beheer ACME-certificaten",
-      "description": "Bekijk de certificaatstatus en vraag nu een nieuw certificaat aan."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Automatisch verlengen",
-      "description": "Controleer tweemaal per dag en vraag een nieuw certificaat aan als er geen certificaat is, het huidige certificaat het domein niet dekt of het huidige certificaat binnen 30 dagen verloopt."
-    },
-    "domain": {
-      "label": "Domein",
-      "description": "De publieke domeinnaam voor het certificaat.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "E-mail",
-      "description": "Contact-e-mailadres voor het ACME-account en meldingen over vervaldatums.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "Certificeringsinstantie",
-      "description": "Waar kan ik het certificaat verkrijgen? Gebruik een testomgeving om te testen zonder de limieten van Let's Encrypt te overschrijden.",
-      "letsencrypt": "Let's Encrypt",
-      "letsencryptStaging": "Let's Encrypt (testomgeving)",
-      "custom": "Aangepaste ACME-directory"
-    },
-    "directoryUrl": {
-      "label": "ACME-directory-URL",
-      "description": "Alleen voor een aangepaste certificeringsinstantie. Moet een https-URL zijn."
-    },
-    "challengeType": {
-      "label": "Uitdagingstype",
-      "description": "Hoe bewijs je dat je de domeinnaam bezit?",
-      "http": "HTTP - vereist poort 80 die bereikbaar is vanaf internet.",
-      "cloudflare": "DNS (Cloudflare) - vereist een Cloudflare API-token"
-    },
-    "cloudflareToken": {
-      "label": "Cloudflare API-token",
-      "description": "Een scoped token met Zone:DNS:Edit-machtiging voor uw domein."
-    }
-  },
-  "status": {
-    "title": "Certificaatstatus",
-    "none": "Geen certificaat",
-    "names": "Omslagen {{names}}",
-    "issuer": "Uitgegeven door {{issuer}}",
-    "expires": "Verloopt {{date}}",
-    "lastIssued": "Laatst uitgegeven {{date}}",
-    "lastError": "Laatste poging mislukt: {{error}}",
-    "missing": "Stel het domein, het e-mailadres en de velden in die uw uitdagingstype vereist, sla de wijzigingen op en vraag vervolgens een certificaat aan.",
-    "request": "Vraag nu uw certificaat aan",
-    "requesting": "Certificaat aanvragen...",
-    "issued": "Certificaat afgegeven en geïnstalleerd"
-  },
-  "plugin": {
-    "name": "ACME-certificaten"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/no_NO.json b/plugins/acme-ssl/locales/translated/no_NO.json
deleted file mode 100644
index 0e262920f..000000000
--- a/plugins/acme-ssl/locales/translated/no_NO.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Administrer ACME-sertifikater",
-      "description": "Se sertifikatstatusen og be om et nytt sertifikat nå."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Forny automatisk",
-      "description": "Sjekk to ganger om dagen og få et nytt sertifikat når det ikke finnes noe, det ikke dekker domenet, eller det utløper innen 30 dager."
-    },
-    "domain": {
-      "label": "Domene",
-      "description": "Det offentlige domenenavnet for sertifikatet.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "E-post",
-      "description": "Kontakt-e-postadresse for ACME-kontoen og utløpsvarsler.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "Sertifikatmyndighet",
-      "description": "Hvor får man tak i sertifikatet? Bruk staging for å teste uten å nå hastighetsgrensene til Let's Encrypt.",
-      "letsencrypt": "La oss kryptere",
-      "letsencryptStaging": "La oss kryptere (staging)",
-      "custom": "Tilpasset ACME-katalog"
-    },
-    "directoryUrl": {
-      "label": "URL-adressen til ACME-katalogen",
-      "description": "Kun for en tilpasset sertifiseringsinstans. Må være en https-URL."
-    },
-    "challengeType": {
-      "label": "Utfordringstype",
-      "description": "Hvordan bevise at du eier domenet.",
-      "http": "HTTP - trenger port 80 som kan nås fra internett",
-      "cloudflare": "DNS (Cloudflare) – trenger et Cloudflare API-token"
-    },
-    "cloudflareToken": {
-      "label": "Cloudflare API-token",
-      "description": "Scope-token med Zone:DNS:Rediger-tillatelse for domenet ditt."
-    }
-  },
-  "status": {
-    "title": "Sertifikatstatus",
-    "none": "Ingen sertifikat",
-    "names": "Omslag {{names}}",
-    "issuer": "Utstedt av {{issuer}}",
-    "expires": "Utløper {{date}}",
-    "lastIssued": "Sist utstedt {{date}}",
-    "lastError": "Siste forsøk mislyktes: {{error}}",
-    "missing": "Angi domenet, e-postadressen og feltene utfordringstypen din trenger, og lagre deretter før du ber om et sertifikat.",
-    "request": "Be om sertifikat nå",
-    "requesting": "Ber om sertifikat...",
-    "issued": "Sertifikat utstedt og installert"
-  },
-  "plugin": {
-    "name": "ACME-sertifikater"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/pl_PL.json b/plugins/acme-ssl/locales/translated/pl_PL.json
deleted file mode 100644
index 50a9c9373..000000000
--- a/plugins/acme-ssl/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Zarządzaj certyfikatami ACME",
-      "description": "Sprawdź status certyfikatu i poproś o nowy certyfikat już teraz."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Odnów automatycznie",
-      "description": "Sprawdzaj dwa razy dziennie i wykup nowy certyfikat, jeśli go nie masz, nie obejmuje on tej domeny lub wygasa w ciągu 30 dni."
-    },
-    "domain": {
-      "label": "Domena",
-      "description": "Publiczna nazwa domeny certyfikatu.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "E-mail",
-      "description": "Adres e-mail kontaktowy do konta ACME i powiadomień o wygaśnięciu.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "Urząd certyfikacji (CA)",
-      "description": "Gdzie uzyskać certyfikat? Użyj środowiska testowego do testowania bez przekraczania limitów przepustowości Let's Encrypt.",
-      "letsencrypt": "Szyfrujmy",
-      "letsencryptStaging": "Let's Encrypt (etap przygotowawczy)",
-      "custom": "Niestandardowy katalog ACME"
-    },
-    "directoryUrl": {
-      "label": "Adres URL katalogu ACME",
-      "description": "Tylko dla niestandardowego urzędu certyfikacji. Adres URL musi być w formacie https."
-    },
-    "challengeType": {
-      "label": "Typ wyzwania",
-      "description": "Jak udowodnić, że jesteś właścicielem domeny.",
-      "http": "HTTP - wymaga dostępu do portu 80 z Internetu",
-      "cloudflare": "DNS (Cloudflare) – wymaga tokenu API Cloudflare"
-    },
-    "cloudflareToken": {
-      "label": "Token API Cloudflare",
-      "description": "Token zakresowy z uprawnieniem Zone:DNS:Edit dla Twojej domeny."
-    }
-  },
-  "status": {
-    "title": "Status certyfikatu",
-    "none": "Brak certyfikatu",
-    "names": "Obejmuje {{names}}",
-    "issuer": "Wydane przez {{issuer}}",
-    "expires": "Wygasa {{date}}",
-    "lastIssued": "Ostatnio wystawiono {{date}}",
-    "lastError": "Ostatnia próba nieudana: {{error}}",
-    "missing": "Ustaw domenę, adres e-mail i pola, których wymaga Twój typ wyzwania, a następnie zapisz, zanim poprosisz o certyfikat.",
-    "request": "Złóż wniosek o certyfikat już teraz",
-    "requesting": "Żądanie certyfikatu...",
-    "issued": "Certyfikat wydany i zainstalowany"
-  },
-  "plugin": {
-    "name": "Certyfikaty ACME"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/pt_BR.json b/plugins/acme-ssl/locales/translated/pt_BR.json
deleted file mode 100644
index 3ed28e6ee..000000000
--- a/plugins/acme-ssl/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Gerenciar certificados ACME",
-      "description": "Veja o status do certificado e solicite um novo agora mesmo."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Renovar automaticamente",
-      "description": "Verifique duas vezes ao dia e obtenha um novo certificado quando não houver nenhum, se ele não cobrir o domínio ou se expirar em 30 dias."
-    },
-    "domain": {
-      "label": "Domínio",
-      "description": "O nome de domínio público do certificado.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "E-mail",
-      "description": "E-mail de contato para a conta ACME e avisos de vencimento.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "Autoridade certificadora",
-      "description": "Onde obter o certificado. Use o ambiente de teste para realizar os testes sem atingir os limites de requisição do Let's Encrypt.",
-      "letsencrypt": "Vamos criptografar",
-      "letsencryptStaging": "Let's Encrypt (em fase de testes)",
-      "custom": "Diretório ACME personalizado"
-    },
-    "directoryUrl": {
-      "label": "URL do diretório ACME",
-      "description": "Somente para uma autoridade de certificação personalizada. Deve ser um URL https."
-    },
-    "challengeType": {
-      "label": "Tipo de desafio",
-      "description": "Como comprovar que você é o proprietário do domínio.",
-      "http": "HTTP - requer que a porta 80 esteja acessível pela internet.",
-      "cloudflare": "DNS (Cloudflare) - requer um token de API do Cloudflare"
-    },
-    "cloudflareToken": {
-      "label": "Token da API Cloudflare",
-      "description": "Token com escopo definido e permissão Zone:DNS:Edit para o seu domínio."
-    }
-  },
-  "status": {
-    "title": "Status do certificado",
-    "none": "Sem certificado",
-    "names": "Capas {{names}}",
-    "issuer": "Emitido por {{issuer}}",
-    "expires": "Expira em {{date}}",
-    "lastIssued": "Última edição {{date}}",
-    "lastError": "Última tentativa falhou: {{error}}",
-    "missing": "Defina o domínio, o e-mail e os campos necessários para o seu tipo de desafio e salve as alterações antes de solicitar um certificado.",
-    "request": "Solicite o certificado agora",
-    "requesting": "Solicitar certificado...",
-    "issued": "Certificado emitido e instalado."
-  },
-  "plugin": {
-    "name": "Certificados ACME"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/pt_PT.json b/plugins/acme-ssl/locales/translated/pt_PT.json
deleted file mode 100644
index 3fb8770e7..000000000
--- a/plugins/acme-ssl/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Gerir certificados ACME",
-      "description": "Veja o estado do certificado e solicite um novo agora mesmo."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Renovar automaticamente",
-      "description": "Verifique duas vezes por dia e obtenha um novo certificado quando não houver nenhum, se não cobrir o domínio ou se expirar dentro de 30 dias."
-    },
-    "domain": {
-      "label": "Domínio",
-      "description": "O nome de domínio público para o certificado.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "E-mail",
-      "description": "E-mail de contacto para a conta ACME e avisos de vencimento.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "Autoridade de certificação",
-      "description": "Onde obter o certificado. Utilize o ambiente de teste para realizar os testes sem atingir os limites de requisição do Let's Encrypt.",
-      "letsencrypt": "Vamos encriptar",
-      "letsencryptStaging": "Let's Encrypt (em fase de testes)",
-      "custom": "Diretório ACME personalizado"
-    },
-    "directoryUrl": {
-      "label": "URL do diretório ACME",
-      "description": "Apenas para uma autoridade de certificação personalizada. Deve ser um URL https."
-    },
-    "challengeType": {
-      "label": "Tipo de desafio",
-      "description": "Como comprovar que é o proprietário do domínio.",
-      "http": "HTTP - requer que a porta 80 esteja acessível através da internet.",
-      "cloudflare": "DNS (Cloudflare) - requer um token API do Cloudflare"
-    },
-    "cloudflareToken": {
-      "label": "Token da API Cloudflare",
-      "description": "Token com âmbito e permissão Zone:DNS:Edit para o seu domínio."
-    }
-  },
-  "status": {
-    "title": "Estado do certificado",
-    "none": "Sem certificado",
-    "names": "Capas {{names}}",
-    "issuer": "Emitido por {{issuer}}",
-    "expires": "Expira a {{date}}",
-    "lastIssued": "Última emissão a {{date}}",
-    "lastError": "Última tentativa falhada: {{error}}",
-    "missing": "Defina o domínio, o e-mail e os campos necessários para o seu tipo de desafio e guarde as alterações antes de solicitar um certificado.",
-    "request": "Solicite já o certificado",
-    "requesting": "A solicitar certificado...",
-    "issued": "Certificado emitido e instalado."
-  },
-  "plugin": {
-    "name": "Certificados ACME"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/ro_RO.json b/plugins/acme-ssl/locales/translated/ro_RO.json
deleted file mode 100644
index 95e64321e..000000000
--- a/plugins/acme-ssl/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Gestionați certificatele ACME",
-      "description": "Vedeți starea certificatului și solicitați un certificat nou acum."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Reînnoire automată",
-      "description": "Verificați de două ori pe zi și obțineți un certificat nou atunci când nu există, nu acoperă domeniul sau expiră în termen de 30 de zile."
-    },
-    "domain": {
-      "label": "Domeniu",
-      "description": "Numele de domeniu public pentru certificat.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "E-mail",
-      "description": "Adresă de e-mail de contact pentru contul ACME și notificări de expirare.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "Autoritatea de certificare",
-      "description": "Unde se obține certificatul. Folosește staging-ul pentru a testa fără a atinge limitele de rată Let's Encrypt.",
-      "letsencrypt": "Să criptăm",
-      "letsencryptStaging": "Să criptăm (punct în scenă)",
-      "custom": "Director ACME personalizat"
-    },
-    "directoryUrl": {
-      "label": "URL-ul directorului ACME",
-      "description": "Numai pentru o autoritate de certificare personalizată. Trebuie să fie o adresă URL https."
-    },
-    "challengeType": {
-      "label": "Tipul de provocare",
-      "description": "Cum să dovedești că deții domeniul.",
-      "http": "HTTP - necesită ca portul 80 să fie accesibil de pe internet",
-      "cloudflare": "DNS (Cloudflare) - necesită un token API Cloudflare"
-    },
-    "cloudflareToken": {
-      "label": "Tokenul API Cloudflare",
-      "description": "Token cu scop specific și permisiune Zone:DNS:Edit pentru domeniul dvs."
-    }
-  },
-  "status": {
-    "title": "Starea certificatului",
-    "none": "Fără certificat",
-    "names": "Acoperă {{names}}",
-    "issuer": "Emis de {{issuer}}",
-    "expires": "Expiră la {{date}}",
-    "lastIssued": "Ultima emisiune {{date}}",
-    "lastError": "Ultima încercare a eșuat: {{error}}",
-    "missing": "Setați domeniul, adresa de e-mail și câmpurile necesare tipului dvs. de provocare, apoi salvați, înainte de a solicita un certificat.",
-    "request": "Solicitați certificatul acum",
-    "requesting": "Se solicită certificatul...",
-    "issued": "Certificat emis și instalat"
-  },
-  "plugin": {
-    "name": "Certificate ACME"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/ru_RU.json b/plugins/acme-ssl/locales/translated/ru_RU.json
deleted file mode 100644
index d51fe42a3..000000000
--- a/plugins/acme-ssl/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Управление сертификатами ACME",
-      "description": "Проверьте статус сертификата и запросите новый сертификат прямо сейчас."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Автоматическое продление",
-      "description": "Проверяйте дважды в день и получайте новый сертификат, если его нет, если он не покрывает домен или если срок действия старого истекает в течение 30 дней."
-    },
-    "domain": {
-      "label": "Домен",
-      "description": "Общедоступное доменное имя для сертификата.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "Email",
-      "description": "Адрес электронной почты, указанный в учетной записи ACME, для получения уведомлений об истечении срока действия.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "Центр сертификации",
-      "description": "Где получить сертификат. Используйте тестовую среду (staging) для проверки без превышения лимитов запросов Let's Encrypt.",
-      "letsencrypt": "Let's Encrypt",
-      "letsencryptStaging": "Let's Encrypt (тестовая версия)",
-      "custom": "Пользовательский каталог ACME"
-    },
-    "directoryUrl": {
-      "label": "URL-адрес каталога ACME",
-      "description": "Только для пользовательского центра сертификации. URL-адрес должен быть HTTPS."
-    },
-    "challengeType": {
-      "label": "Тип задачи",
-      "description": "Как доказать, что вы являетесь владельцем домена.",
-      "http": "HTTP — требуется доступ к порту 80 из интернета.",
-      "cloudflare": "DNS (Cloudflare) — требуется токен API Cloudflare."
-    },
-    "cloudflareToken": {
-      "label": "API-токен Cloudflare",
-      "description": "Токен с ограниченной областью действия и разрешением Zone:DNS:Edit для вашего домена."
-    }
-  },
-  "status": {
-    "title": "Статус сертификата",
-    "none": "Сертификат отсутствует",
-    "names": "Обложки {{names}}",
-    "issuer": "Выпущено {{issuer}}",
-    "expires": "Истекает {{date}}",
-    "lastIssued": "Последний выпуск {{date}}",
-    "lastError": "Последняя попытка не удалась: {{error}}",
-    "missing": "Укажите домен, адрес электронной почты и поля, необходимые для типа проверки подлинности, затем сохраните изменения, прежде чем запрашивать сертификат.",
-    "request": "Запросить сертификат сейчас",
-    "requesting": "Запрос сертификата...",
-    "issued": "Сертификат выдан и установлен."
-  },
-  "plugin": {
-    "name": "Сертификаты ACME"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/sr_SP.json b/plugins/acme-ssl/locales/translated/sr_SP.json
deleted file mode 100644
index d0a825f45..000000000
--- a/plugins/acme-ssl/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Управљање ACME сертификатима",
-      "description": "Погледајте статус сертификата и одмах затражите нови сертификат."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Аутоматски обнови",
-      "description": "Проверавајте два пута дневно и набавите нови сертификат када га нема, када не покрива домен или када истиче у року од 30 дана."
-    },
-    "domain": {
-      "label": "Домен",
-      "description": "Јавно име домена за сертификат.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "Е-пошта",
-      "description": "Контакт имејл за ACME налог и обавештења о истеку.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "Сертификатски ауторитет",
-      "description": "Где добити сертификат. Користите припрему за тестирање без достизања ограничења брзине Let's Encrypt-а.",
-      "letsencrypt": "Хајде да шифрујемо",
-      "letsencryptStaging": "Хајде да шифрујемо (припрема)",
-      "custom": "Прилагођени ACME директоријум"
-    },
-    "directoryUrl": {
-      "label": "URL ACME директоријума",
-      "description": "Само за прилагођени ауторитет за сертификате. Мора бити https URL."
-    },
-    "challengeType": {
-      "label": "Тип изазова",
-      "description": "Како доказати да сте власник домена.",
-      "http": "HTTP - потребан је порт 80 доступан са интернета",
-      "cloudflare": "DNS (Cloudflare) - потребан је Cloudflare API токен"
-    },
-    "cloudflareToken": {
-      "label": "Клаудфлејр АПИ токен",
-      "description": "Ограничени токен са дозволом Zone:DNS:Edit за ваш домен."
-    }
-  },
-  "status": {
-    "title": "Статус сертификата",
-    "none": "Без сертификата",
-    "names": "Навлаке {{names}}",
-    "issuer": "Издао/ла {{issuer}}",
-    "expires": "Истиче {{date}}",
-    "lastIssued": "Последње издање {{date}}",
-    "lastError": "Последњи покушај није успео: {{error}}",
-    "missing": "Подесите домен, имејл адресу и поља која су потребна вашем типу изазова, а затим сачувајте подешавања пре него што затражите сертификат.",
-    "request": "Затражите сертификат сада",
-    "requesting": "Захтева се сертификат...",
-    "issued": "Сертификат издат и инсталиран"
-  },
-  "plugin": {
-    "name": "ACME сертификати"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/sv_SE.json b/plugins/acme-ssl/locales/translated/sv_SE.json
deleted file mode 100644
index 7787b0e38..000000000
--- a/plugins/acme-ssl/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Hantera ACME-certifikat",
-      "description": "Se certifikatets status och begär ett nytt certifikat nu."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Förnya automatiskt",
-      "description": "Kontrollera två gånger om dagen och skaffa ett nytt certifikat om det inte finns något, om det inte täcker domänen eller om det löper ut inom 30 dagar."
-    },
-    "domain": {
-      "label": "Domän",
-      "description": "Det offentliga domännamnet för certifikatet.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "E-post",
-      "description": "Kontakta e-postadressen för ACME-kontot och meddelanden om utgångsdatum.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "Certifikatutfärdare",
-      "description": "Var man kan hämta certifikatet. Använd staging för att testa utan att nå hastighetsgränserna för Let's Encrypt.",
-      "letsencrypt": "Låt oss kryptera",
-      "letsencryptStaging": "Låt oss kryptera (staging)",
-      "custom": "Anpassad ACME-katalog"
-    },
-    "directoryUrl": {
-      "label": "ACME-katalogens URL",
-      "description": "Endast för en anpassad certifikatutfärdare. Måste vara en https-URL."
-    },
-    "challengeType": {
-      "label": "Utmaningstyp",
-      "description": "Hur man bevisar att man äger domänen.",
-      "http": "HTTP - behöver port 80 som kan nås från internet",
-      "cloudflare": "DNS (Cloudflare) - behöver en Cloudflare API-token"
-    },
-    "cloudflareToken": {
-      "label": "Cloudflare API-token",
-      "description": "Scoped-token med Zone:DNS:Edit-behörighet för din domän."
-    }
-  },
-  "status": {
-    "title": "Certifikatstatus",
-    "none": "Inget certifikat",
-    "names": "Omslag {{names}}",
-    "issuer": "Utfärdad av {{issuer}}",
-    "expires": "Utgångsdatum {{date}}",
-    "lastIssued": "Senast utfärdad {{date}}",
-    "lastError": "Senaste försöket misslyckades: {{error}}",
-    "missing": "Ange domän, e-postadress och de fält som din utmaningstyp behöver, spara sedan innan du begär ett certifikat.",
-    "request": "Begär certifikat nu",
-    "requesting": "Begär certifikat...",
-    "issued": "Certifikat utfärdat och installerat"
-  },
-  "plugin": {
-    "name": "ACME-certifikat"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/th_TH.json b/plugins/acme-ssl/locales/translated/th_TH.json
deleted file mode 100644
index 6d2df787a..000000000
--- a/plugins/acme-ssl/locales/translated/th_TH.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "จัดการใบรับรอง ACME",
-      "description": "ตรวจสอบสถานะใบรับรองและขอใบรับรองใหม่ได้เลยตอนนี้"
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "ต่ออายุอัตโนมัติ",
-      "description": "ตรวจสอบวันละสองครั้ง และขอใบรับรองใหม่เมื่อไม่มีใบรับรอง หากใบรับรองไม่ครอบคลุมโดเมน หรือหากใบรับรองหมดอายุภายใน 30 วัน"
-    },
-    "domain": {
-      "label": "โดเมน",
-      "description": "ชื่อโดเมนสาธารณะสำหรับใบรับรอง",
-      "placeholder": "เทอร์มิกซ์.ตัวอย่าง.com"
-    },
-    "email": {
-      "label": "อีเมล",
-      "description": "อีเมลสำหรับติดต่อเพื่อรับข้อมูลเกี่ยวกับบัญชี ACME และประกาศแจ้งเตือนวันหมดอายุ",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "หน่วยงานออกใบรับรอง",
-      "description": "จะขอรับใบรับรองได้จากที่ไหน ใช้ระบบทดสอบ (staging) เพื่อทดสอบโดยไม่ให้เกินขีดจำกัดการใช้งานของ Let's Encrypt",
-      "letsencrypt": "เลทส์ เอนคริปท์",
-      "letsencryptStaging": "Let's Encrypt (รุ่นทดสอบ)",
-      "custom": "ไดเร็กทอรี ACME แบบกำหนดเอง"
-    },
-    "directoryUrl": {
-      "label": "URL ของไดเร็กทอรี ACME",
-      "description": "ใช้ได้เฉพาะกับหน่วยงานออกใบรับรองที่กำหนดเองเท่านั้น ต้องเป็น URL ที่ใช้ HTTPS"
-    },
-    "challengeType": {
-      "label": "ประเภทความท้าทาย",
-      "description": "วิธีพิสูจน์ว่าคุณเป็นเจ้าของโดเมน",
-      "http": "HTTP - ต้องมีพอร์ต 80 ที่สามารถเข้าถึงได้จากอินเทอร์เน็ต",
-      "cloudflare": "DNS (Cloudflare) - ต้องใช้โทเค็น API ของ Cloudflare"
-    },
-    "cloudflareToken": {
-      "label": "โทเค็น API ของ Cloudflare",
-      "description": "โทเค็นแบบจำกัดขอบเขตพร้อมสิทธิ์ Zone:DNS:Edit สำหรับโดเมนของคุณ"
-    }
-  },
-  "status": {
-    "title": "สถานะใบรับรอง",
-    "none": "ไม่มีใบรับรอง",
-    "names": "ปก {{names}}",
-    "issuer": "ออกโดย {{issuer}}",
-    "expires": "หมดอายุ {{date}}",
-    "lastIssued": "ออกครั้งล่าสุด {{date}}",
-    "lastError": "ความพยายามครั้งล่าสุดล้มเหลว: {{error}}",
-    "missing": "ตั้งค่าโดเมน อีเมล และข้อมูลที่จำเป็นสำหรับประเภทการตรวจสอบสิทธิ์ของคุณ จากนั้นบันทึกก่อนที่จะขอใบรับรอง",
-    "request": "ขอใบรับรองตอนนี้",
-    "requesting": "ขอใบรับรอง...",
-    "issued": "ออกและติดตั้งใบรับรองแล้ว"
-  },
-  "plugin": {
-    "name": "ใบรับรอง ACME"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/tr_TR.json b/plugins/acme-ssl/locales/translated/tr_TR.json
deleted file mode 100644
index 839e7c03d..000000000
--- a/plugins/acme-ssl/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "ACME sertifikalarını yönetin",
-      "description": "Sertifika durumunu kontrol edin ve şimdi yeni bir sertifika talep edin."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Otomatik olarak yenile",
-      "description": "Sertifikayı günde iki kez kontrol edin ve yoksa, alan adını kapsamıyorsa veya 30 gün içinde süresi dolacaksa yenisini alın."
-    },
-    "domain": {
-      "label": "Alan Adı",
-      "description": "Sertifika için genel alan adı.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "E-posta",
-      "description": "ACME hesabı ve sona erme bildirimleri için iletişim e-posta adresi.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "Sertifika yetkilisi",
-      "description": "Sertifikayı nereden alabilirsiniz? Let's Encrypt'in hız sınırlamalarına takılmadan test etmek için hazırlık ortamını kullanın.",
-      "letsencrypt": "Let's Encrypt",
-      "letsencryptStaging": "Let's Encrypt (test aşaması)",
-      "custom": "Özel ACME dizini"
-    },
-    "directoryUrl": {
-      "label": "ACME dizin URL'si",
-      "description": "Yalnızca özel sertifika yetkilisi için geçerlidir. HTTPS URL'si olmalıdır."
-    },
-    "challengeType": {
-      "label": "Meydan okuma türü",
-      "description": "Alan adının size ait olduğunu nasıl kanıtlayabilirsiniz?",
-      "http": "HTTP - internetten erişilebilir 80 numaralı porta ihtiyaç duyar.",
-      "cloudflare": "DNS (Cloudflare) - Cloudflare API belirteci gerektirir."
-    },
-    "cloudflareToken": {
-      "label": "Cloudflare API belirteci",
-      "description": "Alan adınız için Zone:DNS:Edit iznine sahip kapsamlı belirteç."
-    }
-  },
-  "status": {
-    "title": "Sertifika durumu",
-    "none": "Sertifika yok",
-    "names": "Kapaklar {{names}}",
-    "issuer": "{{issuer}} tarafından yayınlandı",
-    "expires": "Son kullanma: {{date}}",
-    "lastIssued": "Son veriliş: {{date}}",
-    "lastError": "Son deneme başarısız oldu: {{error}}",
-    "missing": "Sertifika talebinde bulunmadan önce etki alanını, e-postayı ve doğrulama türünüzün gerektirdiği alanları ayarlayın, ardından kaydedin.",
-    "request": "Şimdi sertifika talep edin",
-    "requesting": "Sertifika isteniyor...",
-    "issued": "Sertifika düzenlendi ve kuruldu."
-  },
-  "plugin": {
-    "name": "ACME Sertifikaları"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/uk_UA.json b/plugins/acme-ssl/locales/translated/uk_UA.json
deleted file mode 100644
index 5d2e05803..000000000
--- a/plugins/acme-ssl/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Керування сертифікатами ACME",
-      "description": "Перегляньте статус сертифіката та запросіть новий сертифікат зараз."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Автоматичне поновлення",
-      "description": "Перевіряйте двічі на день та отримуйте новий сертифікат, коли його немає, він не поширюється на домен або термін його дії закінчується протягом 30 днів."
-    },
-    "domain": {
-      "label": "Домен",
-      "description": "Ім'я публічного домену для сертифіката.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "Електронна пошта",
-      "description": "Контактна електронна адреса для облікового запису ACME та повідомлень про закінчення терміну дії.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "Центр сертифікації",
-      "description": "Де отримати сертифікат. Використовуйте проміжну версію для тестування без перевищення обмежень швидкості Let's Encrypt.",
-      "letsencrypt": "Давайте зашифруємо",
-      "letsencryptStaging": "Давайте зашифруємо (підготовка)",
-      "custom": "Користувацький каталог ACME"
-    },
-    "directoryUrl": {
-      "label": "URL-адреса каталогу ACME",
-      "description": "Тільки для власного центру сертифікації. Має бути URL-адреса https."
-    },
-    "challengeType": {
-      "label": "Тип виклику",
-      "description": "Як довести, що ви є власником домену.",
-      "http": "HTTP – потрібен порт 80, доступний з Інтернету",
-      "cloudflare": "DNS (Cloudflare) – потрібен токен API Cloudflare"
-    },
-    "cloudflareToken": {
-      "label": "Токен API Cloudflare",
-      "description": "Токен з обмеженою областю дії та дозволом Zone:DNS:Edit для вашого домену."
-    }
-  },
-  "status": {
-    "title": "Статус сертифіката",
-    "none": "Без сертифіката",
-    "names": "Обкладинки {{names}}",
-    "issuer": "Видано {{issuer}}",
-    "expires": "Термін дії закінчується {{date}}",
-    "lastIssued": "Останній виданий {{date}}",
-    "lastError": "Остання спроба не вдалася: {{error}}",
-    "missing": "Вкажіть домен, електронну пошту та поля, необхідні для вашого типу завдання, а потім збережіть зміни, перш ніж запитувати сертифікат.",
-    "request": "Замовити сертифікат зараз",
-    "requesting": "Запит сертифіката...",
-    "issued": "Сертифікат видано та встановлено"
-  },
-  "plugin": {
-    "name": "Сертифікати ACME"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/vi_VN.json b/plugins/acme-ssl/locales/translated/vi_VN.json
deleted file mode 100644
index 51d0b2777..000000000
--- a/plugins/acme-ssl/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Quản lý chứng chỉ ACME",
-      "description": "Xem trạng thái chứng chỉ và yêu cầu chứng chỉ mới ngay bây giờ."
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "Tự động gia hạn",
-      "description": "Hãy kiểm tra hai lần một ngày và lấy chứng chỉ mới nếu chứng chỉ hiện không có, không bao phủ tên miền hoặc hết hạn trong vòng 30 ngày."
-    },
-    "domain": {
-      "label": "Tên miền",
-      "description": "Tên miền công khai để cấp chứng chỉ.",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "Email",
-      "description": "Địa chỉ email liên hệ cho tài khoản ACME và thông báo hết hạn.",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "Cơ quan chứng thực",
-      "description": "Lấy chứng chỉ ở đâu? Sử dụng môi trường thử nghiệm để kiểm tra mà không vượt quá giới hạn số lượng yêu cầu của Let's Encrypt.",
-      "letsencrypt": "Hãy mã hóa",
-      "letsencryptStaging": "Let's Encrypt (phiên bản thử nghiệm)",
-      "custom": "Danh mục ACME tùy chỉnh"
-    },
-    "directoryUrl": {
-      "label": "URL thư mục ACME",
-      "description": "Chỉ dành cho cơ quan cấp chứng chỉ tùy chỉnh. Phải là URL HTTPS."
-    },
-    "challengeType": {
-      "label": "Loại thử thách",
-      "description": "Cách chứng minh bạn sở hữu tên miền.",
-      "http": "HTTP - cần cổng 80 có thể truy cập được từ internet",
-      "cloudflare": "DNS (Cloudflare) - cần mã thông báo API của Cloudflare."
-    },
-    "cloudflareToken": {
-      "label": "Mã thông báo API Cloudflare",
-      "description": "Token có phạm vi với quyền Zone:DNS:Edit cho tên miền của bạn."
-    }
-  },
-  "status": {
-    "title": "Trạng thái chứng chỉ",
-    "none": "Không có chứng chỉ",
-    "names": "Ảnh bìa {{names}}",
-    "issuer": "Được phát hành bởi {{issuer}}",
-    "expires": "Hết hạn {{date}}",
-    "lastIssued": "Cấp lần cuối {{date}}",
-    "lastError": "Lần thử cuối cùng thất bại: {{error}}",
-    "missing": "Hãy thiết lập tên miền, email và các trường thông tin mà loại thử thách của bạn yêu cầu, sau đó lưu lại trước khi yêu cầu chứng chỉ.",
-    "request": "Yêu cầu chứng chỉ ngay bây giờ",
-    "requesting": "Đang yêu cầu chứng chỉ...",
-    "issued": "Giấy chứng nhận đã được cấp và cài đặt"
-  },
-  "plugin": {
-    "name": "Chứng chỉ ACME"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/zh_CN.json b/plugins/acme-ssl/locales/translated/zh_CN.json
deleted file mode 100644
index 4bd341c92..000000000
--- a/plugins/acme-ssl/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "管理 ACME 证书",
-      "description": "查看证书状态并立即申请新证书。"
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "自动续订",
-      "description": "每天检查两次，如果没有证书、证书不涵盖该域名或证书将在 30 天内过期，则获取新证书。"
-    },
-    "domain": {
-      "label": "域名",
-      "description": "证书的公共域名。",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "邮箱",
-      "description": "ACME账户及到期通知的联系邮箱。",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "证书颁发机构",
-      "description": "证书获取途径。使用测试环境进行测试，避免超出 Let's Encrypt 的速率限制。",
-      "letsencrypt": "Let's Encrypt",
-      "letsencryptStaging": "Let's Encrypt（测试版）",
-      "custom": "自定义 ACME 目录"
-    },
-    "directoryUrl": {
-      "label": "ACME目录URL",
-      "description": "仅适用于自定义证书颁发机构。必须是 https URL。"
-    },
-    "challengeType": {
-      "label": "挑战类型",
-      "description": "如何证明您拥有该域名。",
-      "http": "HTTP协议需要可通过互联网访问的80端口。",
-      "cloudflare": "DNS（Cloudflare）——需要 Cloudflare API 令牌"
-    },
-    "cloudflareToken": {
-      "label": "Cloudflare API 令牌",
-      "description": "具有您域名的 Zone:DNS:Edit 权限的限定作用域令牌。"
-    }
-  },
-  "status": {
-    "title": "证书状态",
-    "none": "无证书",
-    "names": "封面 {{names}}",
-    "issuer": "由 {{issuer}} 发行",
-    "expires": "过期于 {{date}}",
-    "lastIssued": "上次签发于 {{date}}",
-    "lastError": "最后一次尝试失败： {{error}}",
-    "missing": "设置域名、电子邮件和您的质询类型所需的字段，然后保存，再申请证书。",
-    "request": "立即申请证书",
-    "requesting": "正在请求证书...",
-    "issued": "证书已颁发并安装"
-  },
-  "plugin": {
-    "name": "ACME证书"
-  }
-}
diff --git a/plugins/acme-ssl/locales/translated/zh_TW.json b/plugins/acme-ssl/locales/translated/zh_TW.json
deleted file mode 100644
index accbe780e..000000000
--- a/plugins/acme-ssl/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "管理 ACME 證書",
-      "description": "查看證書狀態並立即申請新證書。"
-    }
-  },
-  "settings": {
-    "autoRenew": {
-      "label": "自動續訂",
-      "description": "每天檢查兩次，如果沒有證書、證書不涵蓋該網域或證書將在 30 天內過期，則取得新證書。"
-    },
-    "domain": {
-      "label": "網域",
-      "description": "憑證使用的公開網域名稱。",
-      "placeholder": "termix.example.com"
-    },
-    "email": {
-      "label": "電子郵件",
-      "description": "ACME帳戶及到期通知的聯絡信箱。",
-      "placeholder": "admin@example.com"
-    },
-    "provider": {
-      "label": "憑證授權中心",
-      "description": "證書取得途徑。使用測試環境進行測試，避免超出 Let's Encrypt 的速率限制。",
-      "letsencrypt": "Let's Encrypt",
-      "letsencryptStaging": "Let's Encrypt（測試版）",
-      "custom": "自訂 ACME 目錄"
-    },
-    "directoryUrl": {
-      "label": "ACME目錄URL",
-      "description": "僅適用於自訂憑證授權單位。必須是 https URL。"
-    },
-    "challengeType": {
-      "label": "挑戰類型",
-      "description": "如何證明您擁有該網域。",
-      "http": "HTTP協定需要80個可透過網際網路存取的連接埠。",
-      "cloudflare": "DNS（Cloudflare）－需要 Cloudflare API 令牌"
-    },
-    "cloudflareToken": {
-      "label": "Cloudflare API 令牌",
-      "description": "具有您網域 Zone:DNS:Edit 權限的限定範圍權杖。"
-    }
-  },
-  "status": {
-    "title": "證書狀態",
-    "none": "無憑證",
-    "names": "封面 {{names}}",
-    "issuer": "由 {{issuer}} 發行",
-    "expires": "到期日 {{date}}",
-    "lastIssued": "上次簽發日期 {{date}}",
-    "lastError": "最後嘗試失敗： {{error}}",
-    "missing": "設定網域名稱、電子郵件和您的質詢類型所需的字段，然後儲存，再申請憑證。",
-    "request": "立即申請證書",
-    "requesting": "請求憑證中...",
-    "issued": "證書已頒發並安裝"
-  },
-  "plugin": {
-    "name": "ACME證書"
-  }
-}
diff --git a/plugins/acme-ssl/manifest.json b/plugins/acme-ssl/manifest.json
deleted file mode 100644
index b568e13cf..000000000
--- a/plugins/acme-ssl/manifest.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "id": "acme-ssl",
-  "name": "ACME Certificates",
-  "version": "1.0.0",
-  "description": "Gets and renews the Termix HTTPS certificate from Let's Encrypt or another ACME provider.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Access & Security",
-  "icon": "Lock",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "system:tls",
-    "kv:own",
-    "secrets:own",
-    "network:outbound",
-    "network:serve",
-    "notify:send",
-    "ui:surface"
-  ],
-  "contributes": {
-    "permissions": [
-      {
-        "name": "manage",
-        "titleKey": "permissions.manage.title",
-        "descriptionKey": "permissions.manage.description",
-        "defaultRoles": ["admin"]
-      }
-    ],
-    "settings": {
-      "admin": [
-        {
-          "key": "status",
-          "type": "custom",
-          "component": "status"
-        },
-        {
-          "key": "autoRenew",
-          "type": "boolean",
-          "labelKey": "settings.autoRenew.label",
-          "descriptionKey": "settings.autoRenew.description",
-          "default": false
-        },
-        {
-          "key": "domain",
-          "type": "string",
-          "labelKey": "settings.domain.label",
-          "descriptionKey": "settings.domain.description",
-          "placeholderKey": "settings.domain.placeholder",
-          "default": ""
-        },
-        {
-          "key": "email",
-          "type": "string",
-          "labelKey": "settings.email.label",
-          "descriptionKey": "settings.email.description",
-          "placeholderKey": "settings.email.placeholder",
-          "default": ""
-        },
-        {
-          "key": "provider",
-          "type": "select",
-          "labelKey": "settings.provider.label",
-          "descriptionKey": "settings.provider.description",
-          "default": "letsencrypt",
-          "options": [
-            {
-              "value": "letsencrypt",
-              "labelKey": "settings.provider.letsencrypt"
-            },
-            {
-              "value": "letsencrypt-staging",
-              "labelKey": "settings.provider.letsencryptStaging"
-            },
-            {
-              "value": "custom",
-              "labelKey": "settings.provider.custom"
-            }
-          ]
-        },
-        {
-          "key": "directoryUrl",
-          "type": "string",
-          "labelKey": "settings.directoryUrl.label",
-          "descriptionKey": "settings.directoryUrl.description",
-          "default": ""
-        },
-        {
-          "key": "challengeType",
-          "type": "select",
-          "labelKey": "settings.challengeType.label",
-          "descriptionKey": "settings.challengeType.description",
-          "default": "http-01",
-          "options": [
-            {
-              "value": "http-01",
-              "labelKey": "settings.challengeType.http"
-            },
-            {
-              "value": "dns-cloudflare",
-              "labelKey": "settings.challengeType.cloudflare"
-            }
-          ]
-        },
-        {
-          "key": "cloudflareToken",
-          "type": "secret",
-          "labelKey": "settings.cloudflareToken.label",
-          "descriptionKey": "settings.cloudflareToken.description"
-        }
-      ]
-    }
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"],
-  "desktop": "server"
-}
diff --git a/plugins/acme-ssl/package.json b/plugins/acme-ssl/package.json
deleted file mode 100644
index 636f11e92..000000000
--- a/plugins/acme-ssl/package.json
+++ /dev/null
@@ -1,31 +0,0 @@
-{
-  "name": "@termix-plugin/acme-ssl",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "acme-client": "^5.4.0"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "express": "^5.2.1",
-    "react": "^19.2.8",
-    "sonner": "^2.0.8"
-  }
-}
diff --git a/plugins/acme-ssl/src/backend/acme.ts b/plugins/acme-ssl/src/backend/acme.ts
deleted file mode 100644
index 665b5315a..000000000
--- a/plugins/acme-ssl/src/backend/acme.ts
+++ /dev/null
@@ -1,217 +0,0 @@
-/**
- * Issuing a certificate with acme-client. Every request it makes goes through
- * ctx.fetch, so ACME traffic gets core's outbound guard and audit like any
- * other plugin request.
- */
-
-import * as acme from "acme-client";
-import type { PluginContext, PluginFetch } from "@termix/plugin-sdk/backend";
-import { createTxtRecord } from "./cloudflare.js";
-import { directoryUrlFor, type AcmeSettings } from "./settings.js";
-
-const ACCOUNT_KEY = "account";
-const DNS_PROPAGATION_MS = 30_000;
-
-interface StoredAccount {
-  directoryUrl: string;
-  sealedKey: string;
-  url: string | null;
-}
-
-export interface IssuedCertificate {
-  certificate: string;
-  privateKey: string;
-}
-
-type AxiosLikeConfig = {
-  url?: string;
-  method?: string;
-  headers?: unknown;
-  data?: unknown;
-  timeout?: number;
-  validateStatus?: ((status: number) => boolean) | null;
-};
-
-function plainHeaders(headers: unknown): Record<string, string> {
-  const source =
-    headers && typeof (headers as { toJSON?: unknown }).toJSON === "function"
-      ? (headers as { toJSON: () => Record<string, unknown> }).toJSON()
-      : ((headers ?? {}) as Record<string, unknown>);
-  const out: Record<string, string> = {};
-  for (const [key, value] of Object.entries(source)) {
-    if (typeof value === "string" || typeof value === "number") {
-      out[key] = String(value);
-    }
-  }
-  return out;
-}
-
-/**
- * An axios adapter over ctx.fetch. It settles the way axios' own adapters do,
- * because acme-client's retry interceptor relies on a rejected error that
- * carries the response.
- */
-export function createFetchAdapter(
-  fetch: PluginFetch,
-  allowPrivateHosts: readonly string[] = [],
-) {
-  return async (config: AxiosLikeConfig) => {
-    const method = (config.method ?? "get").toUpperCase();
-    const response = await fetch(String(config.url), {
-      method,
-      headers: plainHeaders(config.headers),
-      body:
-        config.data == null
-          ? undefined
-          : typeof config.data === "string"
-            ? config.data
-            : JSON.stringify(config.data),
-      timeoutMs: config.timeout || 30_000,
-      allowPrivateHosts,
-    });
-    const headers: Record<string, string> = {};
-    response.headers.forEach((value, key) => {
-      headers[key] = value;
-    });
-    const result = {
-      data: method === "HEAD" ? "" : await response.text(),
-      status: response.status,
-      statusText: response.statusText,
-      headers,
-      config,
-      request: {},
-    };
-    const validate = config.validateStatus;
-    if (!result.status || !validate || validate(result.status)) return result;
-    throw Object.assign(
-      new Error(`Request failed with status code ${result.status}`),
-      {
-        isAxiosError: true,
-        code: result.status >= 500 ? "ERR_BAD_RESPONSE" : "ERR_BAD_REQUEST",
-        config,
-        response: result,
-      },
-    );
-  };
-}
-
-/** Private hosts a custom directory on the local network may use. */
-function privateHostsFor(settings: AcmeSettings): string[] {
-  if (settings.provider !== "custom") return [];
-  try {
-    return [new URL(settings.directoryUrl).hostname];
-  } catch {
-    return [];
-  }
-}
-
-async function loadAccount(
-  ctx: PluginContext,
-  directoryUrl: string,
-): Promise<{ key: string; url: string | null }> {
-  const stored = (await ctx.kv.get(ACCOUNT_KEY)) as StoredAccount | null;
-  if (stored && stored.directoryUrl === directoryUrl) {
-    const key = await ctx.secrets.unseal(stored.sealedKey);
-    if (key) return { key, url: stored.url };
-  }
-  const key = (await acme.crypto.createPrivateKey()).toString();
-  await ctx.kv.set(ACCOUNT_KEY, {
-    directoryUrl,
-    sealedKey: await ctx.secrets.seal(key),
-    url: null,
-  } satisfies StoredAccount);
-  return { key, url: null };
-}
-
-async function saveAccountUrl(
-  ctx: PluginContext,
-  directoryUrl: string,
-  url: string,
-): Promise<void> {
-  const stored = (await ctx.kv.get(ACCOUNT_KEY)) as StoredAccount | null;
-  if (!stored || stored.directoryUrl !== directoryUrl || stored.url === url) {
-    return;
-  }
-  await ctx.kv.set(ACCOUNT_KEY, { ...stored, url });
-}
-
-const sleep = (ms: number) => new Promise((resolve) => setTimeout(resolve, ms));
-
-/** Runs one ACME order for `settings.domain` and returns the new pair. */
-export async function issueCertificate(
-  ctx: PluginContext,
-  settings: AcmeSettings,
-  options: { propagationMs?: number } = {},
-): Promise<IssuedCertificate> {
-  const directoryUrl = directoryUrlFor(settings);
-  acme.axios.defaults.adapter = createFetchAdapter(
-    ctx.fetch,
-    privateHostsFor(settings),
-  ) as never;
-
-  const account = await loadAccount(ctx, directoryUrl);
-  const client = new acme.Client({
-    directoryUrl,
-    accountKey: account.key,
-    ...(account.url ? { accountUrl: account.url } : {}),
-  });
-
-  const [key, csr] = await acme.crypto.createCsr({
-    commonName: settings.domain,
-    altNames: [settings.domain],
-  });
-
-  const cleanups = new Map<string, () => void | Promise<void>>();
-  const certificate = await client.auto({
-    csr,
-    email: settings.email,
-    termsOfServiceAgreed: true,
-    // Checking our own answer first needs port 80 or DNS from inside the
-    // container, which often is not how the CA sees it.
-    skipChallengeVerification: true,
-    challengePriority:
-      settings.challengeType === "dns-cloudflare" ? ["dns-01"] : ["http-01"],
-    challengeCreateFn: async (authz, challenge, keyAuthorization) => {
-      if (challenge.type === "http-01") {
-        cleanups.set(
-          challenge.token,
-          await ctx.system.publishHttpChallenge(
-            challenge.token,
-            keyAuthorization,
-          ),
-        );
-        return;
-      }
-      if (challenge.type === "dns-01") {
-        cleanups.set(
-          challenge.token,
-          await createTxtRecord(
-            ctx.fetch,
-            settings.cloudflareToken,
-            `_acme-challenge.${authz.identifier.value}`,
-            keyAuthorization,
-          ),
-        );
-        await sleep(options.propagationMs ?? DNS_PROPAGATION_MS);
-        return;
-      }
-      throw new Error(
-        `Unsupported challenge type ${(challenge as { type: string }).type}`,
-      );
-    },
-    challengeRemoveFn: async (_authz, challenge) => {
-      const cleanup = cleanups.get(challenge.token);
-      cleanups.delete(challenge.token);
-      try {
-        await cleanup?.();
-      } catch (error) {
-        ctx.log.warn(
-          `Could not clean up the ${challenge.type} challenge: ${error instanceof Error ? error.message : String(error)}`,
-        );
-      }
-    },
-  });
-
-  await saveAccountUrl(ctx, directoryUrl, client.getAccountUrl());
-  return { certificate, privateKey: key.toString() };
-}
diff --git a/plugins/acme-ssl/src/backend/cloudflare.ts b/plugins/acme-ssl/src/backend/cloudflare.ts
deleted file mode 100644
index fdc73b679..000000000
--- a/plugins/acme-ssl/src/backend/cloudflare.ts
+++ /dev/null
@@ -1,78 +0,0 @@
-import type { PluginFetch } from "@termix/plugin-sdk/backend";
-
-const API = "https://api.cloudflare.com/client/v4";
-
-interface CloudflareEnvelope<T> {
-  success: boolean;
-  errors?: Array<{ message?: string }>;
-  result: T;
-}
-
-async function call<T>(
-  fetch: PluginFetch,
-  token: string,
-  path: string,
-  init: { method?: string; body?: unknown } = {},
-): Promise<T> {
-  const response = await fetch(`${API}${path}`, {
-    method: init.method ?? "GET",
-    headers: {
-      Authorization: `Bearer ${token}`,
-      "Content-Type": "application/json",
-    },
-    body: init.body === undefined ? undefined : JSON.stringify(init.body),
-  });
-  const payload = (await response
-    .json()
-    .catch(() => null)) as CloudflareEnvelope<T> | null;
-  if (!response.ok || !payload?.success) {
-    const reason =
-      payload?.errors
-        ?.map((error) => error.message)
-        .filter(Boolean)
-        .join("; ") || `HTTP ${response.status}`;
-    throw new Error(`Cloudflare API error: ${reason}`);
-  }
-  return payload.result;
-}
-
-/** The zone holding `name`, found by trying each parent domain. */
-export async function findZoneId(
-  fetch: PluginFetch,
-  token: string,
-  name: string,
-): Promise<string> {
-  const labels = name.replace(/\.$/, "").split(".");
-  for (let i = 0; i < labels.length - 1; i++) {
-    const candidate = labels.slice(i).join(".");
-    const zones = await call<Array<{ id: string; name: string }>>(
-      fetch,
-      token,
-      `/zones?name=${encodeURIComponent(candidate)}`,
-    );
-    const zone = zones.find((entry) => entry.name === candidate);
-    if (zone) return zone.id;
-  }
-  throw new Error(`No Cloudflare zone found for ${name}`);
-}
-
-/** Creates the TXT record and returns a function that deletes it. */
-export async function createTxtRecord(
-  fetch: PluginFetch,
-  token: string,
-  name: string,
-  content: string,
-): Promise<() => Promise<void>> {
-  const zoneId = await findZoneId(fetch, token, name);
-  const record = await call<{ id: string }>(
-    fetch,
-    token,
-    `/zones/${zoneId}/dns_records`,
-    { method: "POST", body: { type: "TXT", name, content, ttl: 120 } },
-  );
-  return async () => {
-    await call(fetch, token, `/zones/${zoneId}/dns_records/${record.id}`, {
-      method: "DELETE",
-    });
-  };
-}
diff --git a/plugins/acme-ssl/src/backend/index.ts b/plugins/acme-ssl/src/backend/index.ts
deleted file mode 100644
index 7f8507374..000000000
--- a/plugins/acme-ssl/src/backend/index.ts
+++ /dev/null
@@ -1,50 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { issueCertificate } from "./acme.js";
-import {
-  CHECK_INTERVAL_MS,
-  createAcmeRunner,
-  watchSettings,
-  type IssueFn,
-} from "./runner.js";
-import { registerRoutes } from "./routes.js";
-
-/** `issue` is swapped out by tests; the plugin always uses acme-client. */
-export async function activateWith(ctx: PluginContext, issue: IssueFn) {
-  const runner = createAcmeRunner(ctx, issue);
-
-  await runner.syncRenewer();
-  watchSettings(ctx, () => {
-    runner
-      .syncRenewer()
-      .catch((error) =>
-        ctx.log.warn(
-          `Could not update the renewal registration: ${error instanceof Error ? error.message : String(error)}`,
-        ),
-      );
-  });
-
-  // The first check lands within a minute of boot, after core's boot-time
-  // settings migrations, so it also picks up settings moved from 2.8.
-  ctx.schedule.every(
-    CHECK_INTERVAL_MS,
-    async () => {
-      await runner.syncRenewer();
-      await runner.check();
-    },
-    { jitterMs: 60_000 },
-  );
-
-  registerRoutes(ctx, ctx.http.router<Router>(), runner);
-  return runner;
-}
-
-export async function activate(ctx: PluginContext) {
-  await activateWith(ctx, (pluginCtx, settings) =>
-    issueCertificate(pluginCtx, settings),
-  );
-}
-
-export async function deactivate() {
-  // Everything above was registered through ctx and is disposed by core.
-}
diff --git a/plugins/acme-ssl/src/backend/renewal.ts b/plugins/acme-ssl/src/backend/renewal.ts
deleted file mode 100644
index 08cb3a187..000000000
--- a/plugins/acme-ssl/src/backend/renewal.ts
+++ /dev/null
@@ -1,28 +0,0 @@
-import type { PluginTlsStatus } from "@termix/plugin-sdk/backend";
-
-export const RENEW_BEFORE_MS = 30 * 86_400_000;
-
-export type RenewalReason = "missing" | "self-signed" | "domain" | "expiring";
-
-/**
- * Whether the served certificate should be replaced for `domain`: there is
- * none, it is core's self-signed one, it does not cover the domain, or it
- * expires within 30 days.
- */
-export function renewalReason(
-  status: PluginTlsStatus,
-  domain: string,
-  now: Date = new Date(),
-): RenewalReason | null {
-  const cert = status.certificate;
-  if (!cert) return "missing";
-  if (cert.selfSigned) return "self-signed";
-  const wanted = domain.toLowerCase();
-  if (!cert.names.some((name) => name.toLowerCase() === wanted)) {
-    return "domain";
-  }
-  if (new Date(cert.notAfter).getTime() - now.getTime() < RENEW_BEFORE_MS) {
-    return "expiring";
-  }
-  return null;
-}
diff --git a/plugins/acme-ssl/src/backend/routes.ts b/plugins/acme-ssl/src/backend/routes.ts
deleted file mode 100644
index 1b624a822..000000000
--- a/plugins/acme-ssl/src/backend/routes.ts
+++ /dev/null
@@ -1,73 +0,0 @@
-import type { Request, RequestHandler, Response, Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { AcmeNotConfiguredError, type AcmeRunner } from "./runner.js";
-import { missingSetting, readSettings } from "./settings.js";
-
-export function registerRoutes(
-  ctx: PluginContext,
-  router: Router,
-  runner: AcmeRunner,
-): void {
-  router.use(ctx.rbac.require("manage") as unknown as RequestHandler);
-
-  /**
-   * @openapi
-   * /plugin-api/acme-ssl/status:
-   *   get:
-   *     summary: ACME certificate status
-   *     description: The certificate core serves, whether ACME is configured, and the last issue attempt.
-   *     tags: [ACME Certificates]
-   *     responses:
-   *       200:
-   *         description: Status.
-   *       403:
-   *         description: Missing the acme-ssl.manage permission.
-   */
-  router.get("/status", async (_req: Request, res: Response) => {
-    const settings = await readSettings(ctx);
-    res.json({
-      tls: await ctx.system.tlsStatus(),
-      state: await runner.state(),
-      autoRenew: settings.autoRenew,
-      missing: missingSetting(settings),
-    });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/acme-ssl/request:
-   *   post:
-   *     summary: Request a certificate now
-   *     description: Runs an ACME order for the configured domain, installs the certificate and reloads HTTPS.
-   *     tags: [ACME Certificates]
-   *     responses:
-   *       200:
-   *         description: Certificate issued and installed.
-   *       400:
-   *         description: A required setting is missing.
-   *       403:
-   *         description: Missing the acme-ssl.manage permission.
-   *       500:
-   *         description: The ACME order failed.
-   */
-  router.post("/request", async (_req: Request, res: Response) => {
-    try {
-      const result = await runner.issue();
-      res.json({
-        success: true,
-        reloadMessage: result.reload.message,
-        tls: result.tls,
-        state: await runner.state(),
-      });
-    } catch (error) {
-      if (error instanceof AcmeNotConfiguredError) {
-        return res
-          .status(400)
-          .json({ error: error.message, missing: error.field });
-      }
-      const message = error instanceof Error ? error.message : String(error);
-      ctx.log.warn(`Certificate request failed: ${message}`);
-      res.status(500).json({ error: `Certificate request failed: ${message}` });
-    }
-  });
-}
diff --git a/plugins/acme-ssl/src/backend/runner.ts b/plugins/acme-ssl/src/backend/runner.ts
deleted file mode 100644
index 9c05180d2..000000000
--- a/plugins/acme-ssl/src/backend/runner.ts
+++ /dev/null
@@ -1,173 +0,0 @@
-import type {
-  PluginContext,
-  PluginTlsReloadResult,
-  PluginTlsStatus,
-} from "@termix/plugin-sdk/backend";
-import type { IssuedCertificate } from "./acme.js";
-import { renewalReason } from "./renewal.js";
-import {
-  SETTING_KEYS,
-  missingSetting,
-  readSettings,
-  type AcmeSettings,
-} from "./settings.js";
-
-export const CHECK_INTERVAL_MS = 12 * 60 * 60 * 1000;
-/** After a failed attempt, the scheduled check waits this long to retry. */
-export const RETRY_AFTER_MS = 6 * 60 * 60 * 1000;
-
-const STATE_KEY = "state";
-
-export interface AcmeState {
-  lastAttemptAt: string | null;
-  lastIssuedAt: string | null;
-  lastError: string | null;
-}
-
-export type IssueFn = (
-  ctx: PluginContext,
-  settings: AcmeSettings,
-) => Promise<IssuedCertificate>;
-
-export class AcmeNotConfiguredError extends Error {
-  constructor(readonly field: string) {
-    super(`ACME is not configured: ${field} is missing`);
-  }
-}
-
-export interface IssueResult {
-  tls: PluginTlsStatus;
-  reload: PluginTlsReloadResult;
-}
-
-export interface AcmeRunner {
-  state: () => Promise<AcmeState>;
-  /** Issues now, whatever the served certificate looks like. */
-  issue: () => Promise<IssueResult>;
-  /** The scheduled check: issues only when renewal is on and due. */
-  check: (now?: Date) => Promise<boolean>;
-  /** Registers or drops the renewer to match the current settings. */
-  syncRenewer: () => Promise<void>;
-}
-
-export function createAcmeRunner(
-  ctx: PluginContext,
-  issue: IssueFn,
-): AcmeRunner {
-  let running: Promise<IssueResult> | null = null;
-  let dropRenewer: (() => void) | null = null;
-
-  const state = async (): Promise<AcmeState> => {
-    const stored = (await ctx.kv.get(STATE_KEY)) as Partial<AcmeState> | null;
-    return {
-      lastAttemptAt: stored?.lastAttemptAt ?? null,
-      lastIssuedAt: stored?.lastIssuedAt ?? null,
-      lastError: stored?.lastError ?? null,
-    };
-  };
-
-  const record = async (patch: Partial<AcmeState>) => {
-    await ctx.kv.set(STATE_KEY, { ...(await state()), ...patch });
-  };
-
-  const runIssue = async (): Promise<IssueResult> => {
-    const settings = await readSettings(ctx);
-    const missing = missingSetting(settings);
-    if (missing) throw new AcmeNotConfiguredError(missing);
-
-    const attemptAt = new Date().toISOString();
-    try {
-      const issued = await issue(ctx, settings);
-      await ctx.system.writeTlsCertificate(
-        issued.certificate,
-        issued.privateKey,
-      );
-      const reload = await ctx.system.reloadTls();
-      await record({
-        lastAttemptAt: attemptAt,
-        lastIssuedAt: new Date().toISOString(),
-        lastError: null,
-      });
-      ctx.log.info(`Certificate issued for ${settings.domain}`);
-      return { tls: await ctx.system.tlsStatus(), reload };
-    } catch (error) {
-      const message = error instanceof Error ? error.message : String(error);
-      await record({ lastAttemptAt: attemptAt, lastError: message });
-      throw error;
-    }
-  };
-
-  const runner: AcmeRunner = {
-    state,
-
-    issue: () => {
-      running ??= runIssue().finally(() => {
-        running = null;
-      });
-      return running;
-    },
-
-    check: async (now = new Date()) => {
-      const settings = await readSettings(ctx);
-      if (!settings.autoRenew || missingSetting(settings)) return false;
-
-      const last = await state();
-      if (
-        last.lastError &&
-        last.lastAttemptAt &&
-        now.getTime() - new Date(last.lastAttemptAt).getTime() < RETRY_AFTER_MS
-      ) {
-        return false;
-      }
-
-      const reason = renewalReason(
-        await ctx.system.tlsStatus(),
-        settings.domain,
-        now,
-      );
-      if (!reason) return false;
-
-      ctx.log.info(
-        `Renewing the certificate for ${settings.domain} (${reason})`,
-      );
-      try {
-        await runner.issue();
-        return true;
-      } catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        ctx.log.error(
-          "Certificate renewal failed",
-          error instanceof Error ? error : new Error(message),
-        );
-        await ctx.notify
-          .send({
-            title: `Certificate renewal failed for ${settings.domain}`,
-            body: message,
-            severity: "critical",
-            category: "acme-ssl.renewal_failed",
-            audience: "admins",
-            dedupeKey: `acme-ssl.renewal_failed:${settings.domain}`,
-          })
-          .catch(() => {});
-        return false;
-      }
-    },
-
-    syncRenewer: async () => {
-      const settings = await readSettings(ctx);
-      const wanted = settings.autoRenew && !missingSetting(settings);
-      if (wanted && !dropRenewer) {
-        dropRenewer = await ctx.system.registerTlsRenewer();
-      } else if (!wanted && dropRenewer) {
-        dropRenewer();
-        dropRenewer = null;
-      }
-    },
-  };
-
-  return runner;
-}
-
-export function watchSettings(ctx: PluginContext, onChange: () => void): void {
-  for (const key of SETTING_KEYS) ctx.settings.onChange(key, onChange);
-}
diff --git a/plugins/acme-ssl/src/backend/settings.ts b/plugins/acme-ssl/src/backend/settings.ts
deleted file mode 100644
index e71a01b4d..000000000
--- a/plugins/acme-ssl/src/backend/settings.ts
+++ /dev/null
@@ -1,77 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-
-export type AcmeProvider = "letsencrypt" | "letsencrypt-staging" | "custom";
-export type AcmeChallengeType = "http-01" | "dns-cloudflare";
-
-export interface AcmeSettings {
-  autoRenew: boolean;
-  domain: string;
-  email: string;
-  provider: AcmeProvider;
-  directoryUrl: string;
-  challengeType: AcmeChallengeType;
-  cloudflareToken: string;
-}
-
-export const SETTING_KEYS = [
-  "autoRenew",
-  "domain",
-  "email",
-  "provider",
-  "directoryUrl",
-  "challengeType",
-  "cloudflareToken",
-] as const;
-
-export const DIRECTORIES: Record<Exclude<AcmeProvider, "custom">, string> = {
-  letsencrypt: "https://acme-v02.api.letsencrypt.org/directory",
-  "letsencrypt-staging":
-    "https://acme-staging-v02.api.letsencrypt.org/directory",
-};
-
-const text = (value: unknown) =>
-  typeof value === "string" ? value.trim() : "";
-
-export async function readSettings(ctx: PluginContext): Promise<AcmeSettings> {
-  const all = await ctx.settings.getAll("admin");
-  const provider = text(all.provider);
-  const challengeType = text(all.challengeType);
-  return {
-    autoRenew: all.autoRenew === true,
-    domain: text(all.domain).toLowerCase(),
-    email: text(all.email),
-    provider:
-      provider === "letsencrypt-staging" || provider === "custom"
-        ? provider
-        : "letsencrypt",
-    directoryUrl: text(all.directoryUrl),
-    challengeType:
-      challengeType === "dns-cloudflare" ? challengeType : "http-01",
-    cloudflareToken: text(all.cloudflareToken),
-  };
-}
-
-export function directoryUrlFor(settings: AcmeSettings): string {
-  return settings.provider === "custom"
-    ? settings.directoryUrl
-    : DIRECTORIES[settings.provider];
-}
-
-/** The reason issuing cannot start, or null when everything is set. */
-export function missingSetting(settings: AcmeSettings): string | null {
-  if (!settings.domain) return "domain";
-  if (!settings.email) return "email";
-  if (
-    settings.provider === "custom" &&
-    !/^https:\/\//i.test(settings.directoryUrl)
-  ) {
-    return "directoryUrl";
-  }
-  if (
-    settings.challengeType === "dns-cloudflare" &&
-    !settings.cloudflareToken
-  ) {
-    return "cloudflareToken";
-  }
-  return null;
-}
diff --git a/plugins/acme-ssl/src/frontend/AcmeStatusSetting.tsx b/plugins/acme-ssl/src/frontend/AcmeStatusSetting.tsx
deleted file mode 100644
index 1999b7798..000000000
--- a/plugins/acme-ssl/src/frontend/AcmeStatusSetting.tsx
+++ /dev/null
@@ -1,121 +0,0 @@
-import { useCallback, useEffect, useState } from "react";
-import { toast } from "sonner";
-import {
-  usePluginApi,
-  useTranslation,
-  type SettingsComponentProps,
-} from "@termix/plugin-sdk/frontend";
-import { Button } from "@termix/plugin-sdk/ui";
-
-export interface AcmeStatus {
-  tls: {
-    enabled: boolean;
-    certificate: {
-      issuer: string;
-      names: string[];
-      notAfter: string;
-      selfSigned: boolean;
-    } | null;
-  };
-  state: {
-    lastAttemptAt: string | null;
-    lastIssuedAt: string | null;
-    lastError: string | null;
-  };
-  autoRenew: boolean;
-  missing: string | null;
-}
-
-function errorMessage(error: unknown): string {
-  const data = (error as { response?: { data?: { error?: string } } })?.response
-    ?.data;
-  if (data?.error) return data.error;
-  return error instanceof Error ? error.message : String(error);
-}
-
-export function AcmeStatusSetting({ running }: SettingsComponentProps) {
-  const { t } = useTranslation();
-  const api = usePluginApi();
-  const [status, setStatus] = useState<AcmeStatus | null>(null);
-  const [requesting, setRequesting] = useState(false);
-
-  const load = useCallback(async () => {
-    try {
-      const { data } = await api.get<AcmeStatus>("/status");
-      setStatus(data);
-    } catch {
-      setStatus(null);
-    }
-  }, [api]);
-
-  useEffect(() => {
-    if (running) void load();
-  }, [running, load]);
-
-  async function request() {
-    setRequesting(true);
-    try {
-      const { data } = await api.post<{ reloadMessage?: string }>("/request");
-      toast.success(t("status.issued"));
-      if (data.reloadMessage) toast.info(data.reloadMessage);
-    } catch (error) {
-      toast.error(errorMessage(error));
-    } finally {
-      setRequesting(false);
-      await load();
-    }
-  }
-
-  const cert = status?.tls.certificate;
-
-  return (
-    <div className="flex flex-col gap-2 border border-border bg-background/50 p-2">
-      <span className="text-xs font-medium">{t("status.title")}</span>
-      {cert ? (
-        <>
-          <span className="text-[10px] text-muted-foreground">
-            {t("status.names", { names: cert.names.join(", ") || "-" })}
-          </span>
-          <span className="text-[10px] text-muted-foreground">
-            {t("status.issuer", { issuer: cert.issuer })}
-          </span>
-          <span className="text-[10px] text-muted-foreground">
-            {t("status.expires", {
-              date: new Date(cert.notAfter).toLocaleDateString(),
-            })}
-          </span>
-        </>
-      ) : (
-        <span className="text-[10px] text-muted-foreground">
-          {t("status.none")}
-        </span>
-      )}
-      {status?.state.lastIssuedAt && (
-        <span className="text-[10px] text-muted-foreground">
-          {t("status.lastIssued", {
-            date: new Date(status.state.lastIssuedAt).toLocaleString(),
-          })}
-        </span>
-      )}
-      {status?.state.lastError && (
-        <span className="text-[10px] text-destructive">
-          {t("status.lastError", { error: status.state.lastError })}
-        </span>
-      )}
-      {status?.missing && (
-        <span className="text-[10px] text-muted-foreground">
-          {t("status.missing")}
-        </span>
-      )}
-      <Button
-        type="button"
-        variant="outline"
-        className="rounded-none self-start"
-        disabled={!running || requesting || !!status?.missing}
-        onClick={request}
-      >
-        {requesting ? t("status.requesting") : t("status.request")}
-      </Button>
-    </div>
-  );
-}
diff --git a/plugins/acme-ssl/src/frontend/index.tsx b/plugins/acme-ssl/src/frontend/index.tsx
deleted file mode 100644
index 7c4d05f82..000000000
--- a/plugins/acme-ssl/src/frontend/index.tsx
+++ /dev/null
@@ -1,10 +0,0 @@
-import type { TermixApp } from "@termix/plugin-sdk/frontend";
-import { AcmeStatusSetting } from "./AcmeStatusSetting";
-
-export function activate(app: TermixApp): void {
-  app.registerSettingsComponent("status", AcmeStatusSetting);
-}
-
-export function deactivate(): void {
-  // Registrations through app are disposed by core.
-}
diff --git a/plugins/acme-ssl/tests/backend/acme-ssl.test.ts b/plugins/acme-ssl/tests/backend/acme-ssl.test.ts
deleted file mode 100644
index f2bf76f9e..000000000
--- a/plugins/acme-ssl/tests/backend/acme-ssl.test.ts
+++ /dev/null
@@ -1,269 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import express, { type Router } from "express";
-import { afterEach, describe, expect, it, vi } from "vitest";
-import {
-  createMockCtx,
-  type MockPluginContext,
-} from "@termix/plugin-sdk/testing";
-import type {
-  PluginCapabilityError as CapabilityError,
-  PluginTlsCertificateInfo,
-  PluginTlsStatus,
-} from "@termix/plugin-sdk/backend";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-import { activateWith } from "../../src/backend/index.js";
-import { CHECK_INTERVAL_MS, RETRY_AFTER_MS } from "../../src/backend/runner.js";
-import { renewalReason } from "../../src/backend/renewal.js";
-
-const manifest = manifestJson as unknown as PluginManifest;
-const DAY = 86_400_000;
-
-const CONFIGURED = {
-  autoRenew: true,
-  domain: "termix.example.com",
-  email: "admin@example.com",
-};
-
-function cert(
-  overrides: Partial<PluginTlsCertificateInfo> = {},
-): PluginTlsCertificateInfo {
-  return {
-    subject: "CN=termix.example.com",
-    issuer: "CN=R11, O=Let's Encrypt",
-    names: ["termix.example.com"],
-    notBefore: new Date(Date.now() - 10 * DAY).toISOString(),
-    notAfter: new Date(Date.now() + 60 * DAY).toISOString(),
-    selfSigned: false,
-    fingerprint: "AA",
-    ...overrides,
-  };
-}
-
-const issue = vi.fn(async () => ({
-  certificate: "-----BEGIN CERTIFICATE-----new",
-  privateKey: "-----BEGIN PRIVATE KEY-----new",
-}));
-
-let servers: http.Server[] = [];
-
-afterEach(async () => {
-  issue.mockClear();
-  await Promise.all(
-    servers.map(
-      (s) => new Promise<void>((resolve) => s.close(() => resolve())),
-    ),
-  );
-  servers = [];
-});
-
-async function setup(
-  options: {
-    settings?: Record<string, unknown>;
-    certificate?: PluginTlsCertificateInfo | null;
-    permissions?: string[];
-    capabilities?: string[];
-    validateTls?: () => PluginTlsCertificateInfo;
-  } = {},
-) {
-  let router: Router | null = null;
-  const tlsStatus: Omit<PluginTlsStatus, "renewal"> = {
-    enabled: true,
-    certificate: options.certificate === undefined ? null : options.certificate,
-  };
-  const mock: MockPluginContext = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: options.capabilities ?? manifest.capabilities,
-    router: () => (router = express.Router()),
-    settings: options.settings,
-    permissions: options.permissions ?? ["manage"],
-    tlsStatus,
-    validateTls: options.validateTls,
-  });
-  const runner = await activateWith(mock.ctx, issue);
-
-  const app = express();
-  app.use((req, res, next) => router!(req, res, next));
-  const server = http.createServer(app);
-  servers.push(server);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-  const call = async (method: string, path: string) => {
-    const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-      method,
-    });
-    return { status: response.status, body: await response.json() };
-  };
-  return { mock, runner, call };
-}
-
-describe("renewalReason", () => {
-  const status = (certificate: PluginTlsCertificateInfo | null) => ({
-    enabled: true,
-    certificate,
-    renewal: null,
-  });
-
-  it("renews when missing, self-signed, for another domain or expiring", () => {
-    expect(renewalReason(status(null), "termix.example.com")).toBe("missing");
-    expect(
-      renewalReason(status(cert({ selfSigned: true })), "termix.example.com"),
-    ).toBe("self-signed");
-    expect(renewalReason(status(cert()), "other.example.com")).toBe("domain");
-    expect(
-      renewalReason(
-        status(
-          cert({ notAfter: new Date(Date.now() + 10 * DAY).toISOString() }),
-        ),
-        "termix.example.com",
-      ),
-    ).toBe("expiring");
-    expect(renewalReason(status(cert()), "TERMIX.example.com")).toBeNull();
-  });
-});
-
-describe("scheduled renewal", () => {
-  it("checks on a 12 hour timer and renews an expiring certificate", async () => {
-    const { mock } = await setup({
-      settings: CONFIGURED,
-      certificate: cert({
-        notAfter: new Date(Date.now() + 5 * DAY).toISOString(),
-      }),
-    });
-    const job = mock.scheduled.find((entry) => entry.kind === "every");
-    expect(job?.ms).toBe(CHECK_INTERVAL_MS);
-
-    await mock.runScheduled();
-
-    expect(issue).toHaveBeenCalledOnce();
-    expect(mock.tls.writes).toEqual([
-      {
-        certificatePem: "-----BEGIN CERTIFICATE-----new",
-        privateKeyPem: "-----BEGIN PRIVATE KEY-----new",
-      },
-    ]);
-    const write = mock.tls.calls.indexOf("writeTlsCertificate");
-    expect(mock.tls.calls.indexOf("reloadTls")).toBeGreaterThan(write);
-    expect(mock.tls.reloads).toBe(1);
-  });
-
-  it("leaves a valid certificate alone", async () => {
-    const { mock } = await setup({ settings: CONFIGURED, certificate: cert() });
-    await mock.runScheduled();
-    expect(issue).not.toHaveBeenCalled();
-    expect(mock.tls.writes).toEqual([]);
-  });
-
-  it("does nothing and registers no renewer while renewal is off", async () => {
-    const { mock } = await setup({
-      settings: { ...CONFIGURED, autoRenew: false },
-    });
-    await mock.runScheduled();
-    expect(issue).not.toHaveBeenCalled();
-    expect(mock.tls.renewers).toBe(0);
-  });
-
-  it("registers as the renewer when configured and drops it when turned off", async () => {
-    const { mock } = await setup({ settings: CONFIGURED, certificate: cert() });
-    expect(mock.tls.renewers).toBe(1);
-    expect((await mock.ctx.system.tlsStatus()).renewal?.pluginId).toBe(
-      "acme-ssl",
-    );
-
-    await mock.ctx.settings.set("autoRenew", false);
-    await vi.waitFor(() => expect(mock.tls.renewers).toBe(0));
-  });
-
-  it("alerts every admin when a renewal fails", async () => {
-    const { mock, runner } = await setup({ settings: CONFIGURED });
-    issue.mockRejectedValueOnce(new Error("rate limited"));
-    expect(await runner.check()).toBe(false);
-    expect(mock.notifications).toEqual([
-      {
-        actor: undefined,
-        notification: expect.objectContaining({
-          body: "rate limited",
-          severity: "critical",
-          category: "acme-ssl.renewal_failed",
-          audience: "admins",
-        }),
-      },
-    ]);
-  });
-
-  it("waits before retrying after a failed attempt", async () => {
-    const { mock, runner } = await setup({ settings: CONFIGURED });
-    issue.mockRejectedValueOnce(new Error("rate limited"));
-    expect(await runner.check()).toBe(false);
-    expect((await runner.state()).lastError).toBe("rate limited");
-
-    expect(await runner.check()).toBe(false);
-    expect(issue).toHaveBeenCalledOnce();
-
-    expect(
-      await runner.check(new Date(Date.now() + RETRY_AFTER_MS + 1000)),
-    ).toBe(true);
-    expect(issue).toHaveBeenCalledTimes(2);
-    expect(mock.tls.reloads).toBe(1);
-  });
-
-  it("does not reload when core rejects the certificate", async () => {
-    const { mock, runner } = await setup({
-      settings: CONFIGURED,
-      validateTls: () => {
-        throw new Error("The certificate and private key do not match");
-      },
-    });
-    await expect(runner.issue()).rejects.toThrow(/do not match/);
-    expect(mock.tls.reloads).toBe(0);
-    expect((await runner.state()).lastError).toMatch(/do not match/);
-  });
-});
-
-describe("routes", () => {
-  it("reports status and issues on request", async () => {
-    const { call, mock } = await setup({ settings: CONFIGURED });
-    const status = await call("GET", "/status");
-    expect(status.status).toBe(200);
-    expect(status.body.missing).toBeNull();
-    expect(status.body.tls.certificate).toBeNull();
-
-    const issued = await call("POST", "/request");
-    expect(issued.status).toBe(200);
-    expect(issued.body.success).toBe(true);
-    expect(issued.body.tls.certificate).not.toBeNull();
-    expect(mock.tls.reloads).toBe(1);
-  });
-
-  it("answers 400 when a setting is missing", async () => {
-    const { call } = await setup({ settings: { domain: "a.example" } });
-    const result = await call("POST", "/request");
-    expect(result.status).toBe(400);
-    expect(result.body.missing).toBe("email");
-    expect(issue).not.toHaveBeenCalled();
-  });
-
-  it("refuses a user without acme-ssl.manage on every route", async () => {
-    const { call } = await setup({ settings: CONFIGURED, permissions: [] });
-    expect((await call("GET", "/status")).status).toBe(403);
-    expect((await call("POST", "/request")).status).toBe(403);
-    expect(issue).not.toHaveBeenCalled();
-  });
-});
-
-describe("capabilities", () => {
-  it("fails closed without system:tls", async () => {
-    await expect(
-      setup({
-        settings: CONFIGURED,
-        capabilities: manifest.capabilities.filter(
-          (capability) => capability !== "system:tls",
-        ),
-      }),
-    ).rejects.toMatchObject({
-      capability: "system:tls",
-    } satisfies Partial<CapabilityError>);
-  });
-});
diff --git a/plugins/acme-ssl/tests/backend/transport.test.ts b/plugins/acme-ssl/tests/backend/transport.test.ts
deleted file mode 100644
index edcbe9623..000000000
--- a/plugins/acme-ssl/tests/backend/transport.test.ts
+++ /dev/null
@@ -1,102 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import type { PluginFetchInit } from "@termix/plugin-sdk/backend";
-import { createFetchAdapter } from "../../src/backend/acme.js";
-import { createTxtRecord } from "../../src/backend/cloudflare.js";
-
-describe("createFetchAdapter", () => {
-  it("sends acme-client requests through ctx.fetch", async () => {
-    const fetch = vi.fn(
-      async (_url: string, _init?: PluginFetchInit) =>
-        new Response('{"ok":true}', {
-          status: 201,
-          headers: { "replay-nonce": "n1", location: "https://ca/acct/1" },
-        }),
-    );
-    const adapter = createFetchAdapter(fetch, ["ca.internal"]);
-    const result = await adapter({
-      url: "https://ca.internal/new-acct",
-      method: "post",
-      headers: { "Content-Type": "application/jose+json" },
-      data: '{"payload":"x"}',
-      validateStatus: null,
-    });
-
-    expect(fetch).toHaveBeenCalledWith(
-      "https://ca.internal/new-acct",
-      expect.objectContaining({
-        method: "POST",
-        body: '{"payload":"x"}',
-        allowPrivateHosts: ["ca.internal"],
-        headers: { "Content-Type": "application/jose+json" },
-      }),
-    );
-    expect(result.status).toBe(201);
-    expect(result.data).toBe('{"ok":true}');
-    expect(result.headers["replay-nonce"]).toBe("n1");
-  });
-
-  it("rejects with the response attached when validateStatus says no", async () => {
-    const adapter = createFetchAdapter(
-      async () => new Response("slow down", { status: 429 }),
-    );
-    await expect(
-      adapter({ url: "https://ca/x", validateStatus: () => false }),
-    ).rejects.toMatchObject({
-      code: "ERR_BAD_REQUEST",
-      response: { status: 429, data: "slow down" },
-    });
-  });
-});
-
-describe("createTxtRecord", () => {
-  it("finds the zone by parent domain, creates the record and deletes it", async () => {
-    const calls: Array<{ url: string; method: string; body?: string }> = [];
-    const fetch = vi.fn(async (url: string, init?: PluginFetchInit) => {
-      calls.push({ url, method: init?.method ?? "GET", body: init?.body });
-      if (url.includes("/zones?name=example.com")) {
-        return Response.json({
-          success: true,
-          result: [{ id: "zone-1", name: "example.com" }],
-        });
-      }
-      if (url.includes("/zones?name=")) {
-        return Response.json({ success: true, result: [] });
-      }
-      if (init?.method === "POST") {
-        return Response.json({ success: true, result: { id: "rec-1" } });
-      }
-      return Response.json({ success: true, result: {} });
-    });
-
-    const remove = await createTxtRecord(
-      fetch,
-      "token",
-      "_acme-challenge.termix.example.com",
-      "digest",
-    );
-    const post = calls.find((call) => call.method === "POST")!;
-    expect(post.url).toContain("/zones/zone-1/dns_records");
-    expect(JSON.parse(post.body!)).toMatchObject({
-      type: "TXT",
-      name: "_acme-challenge.termix.example.com",
-      content: "digest",
-    });
-
-    await remove();
-    expect(calls.at(-1)).toMatchObject({
-      method: "DELETE",
-      url: expect.stringContaining("/zones/zone-1/dns_records/rec-1"),
-    });
-  });
-
-  it("surfaces the Cloudflare error message", async () => {
-    const fetch = async () =>
-      Response.json(
-        { success: false, errors: [{ message: "Invalid token" }] },
-        { status: 403 },
-      );
-    await expect(
-      createTxtRecord(fetch, "bad", "_acme-challenge.a.example", "d"),
-    ).rejects.toThrow(/Invalid token/);
-  });
-});
diff --git a/plugins/acme-ssl/tests/frontend/activate.test.tsx b/plugins/acme-ssl/tests/frontend/activate.test.tsx
deleted file mode 100644
index 1c71c3c34..000000000
--- a/plugins/acme-ssl/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,85 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { render, screen, waitFor } from "@testing-library/react";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const api = vi.hoisted(() => ({
-  get: vi.fn(),
-  post: vi.fn(),
-}));
-
-vi.mock("@termix/plugin-sdk/frontend", async (importOriginal) => ({
-  ...(await importOriginal<typeof import("@termix/plugin-sdk/frontend")>()),
-  useTranslation: () => ({
-    t: (key: string, values?: Record<string, string>) =>
-      values ? `${key} ${Object.values(values).join(" ")}` : key,
-  }),
-  usePluginApi: () => api,
-}));
-
-const { AcmeStatusSetting } =
-  await import("../../src/frontend/AcmeStatusSetting");
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-  api.get.mockReset();
-});
-
-describe("acme-ssl activate", () => {
-  it("registers the status settings component and removes it on deactivate", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.settingsComponents()).toEqual(["status"]);
-    await rendered.deactivate();
-    expect(rendered.registered.settingsComponents()).toEqual([]);
-    rendered = null;
-  });
-});
-
-describe("AcmeStatusSetting", () => {
-  it("shows the served certificate and the last error", async () => {
-    api.get.mockResolvedValue({
-      data: {
-        tls: {
-          enabled: true,
-          certificate: {
-            issuer: "CN=R11",
-            names: ["termix.example.com"],
-            notAfter: "2030-01-01T00:00:00.000Z",
-            selfSigned: false,
-          },
-        },
-        state: {
-          lastAttemptAt: null,
-          lastIssuedAt: null,
-          lastError: "rate limited",
-        },
-        autoRenew: true,
-        missing: null,
-      },
-    });
-    render(
-      <AcmeStatusSetting
-        pluginId="acme-ssl"
-        values={{}}
-        setValue={() => {}}
-        running
-      />,
-    );
-    await waitFor(() =>
-      expect(screen.getByText("status.names termix.example.com")).toBeTruthy(),
-    );
-    expect(screen.getByText("status.lastError rate limited")).toBeTruthy();
-    expect(api.get).toHaveBeenCalledWith("/status");
-  });
-});
diff --git a/plugins/acme-ssl/tsconfig.json b/plugins/acme-ssl/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/acme-ssl/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/acme-ssl/vitest.config.ts b/plugins/acme-ssl/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/acme-ssl/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/ai/CHANGELOG.md b/plugins/ai/CHANGELOG.md
deleted file mode 100644
index 2c06df521..000000000
--- a/plugins/ai/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Adds an AI assistant that can read your hosts, snippets, fleets, alerts and automations and suggest changes for you to approve. Works with Ollama, Anthropic, OpenAI, Google Gemini and any OpenAI compatible provider.
diff --git a/plugins/ai/README.md b/plugins/ai/README.md
deleted file mode 100644
index 2d072244e..000000000
--- a/plugins/ai/README.md
+++ /dev/null
@@ -1,50 +0,0 @@
-# AI Assistant
-
-An AI assistant that can read your hosts, snippets, fleets, alerts and automations, and suggest changes for you to approve.
-
-## Features
-
-- Chat with an assistant that can read your hosts, snippets, fleets, alerts, automations, workspaces, network graph and homepage.
-- The assistant suggests changes, and nothing is applied until you approve it.
-- Can run read-only diagnostic commands on a host if you allow it.
-- Open the assistant from the terminal toolbar with the current session as context.
-- Works with Ollama, Anthropic, OpenAI, Google Gemini and any OpenAI compatible provider.
-
-## Settings
-
-### Admin
-
-- AI assistant: let users turn the assistant on. While this is off it is hidden for everyone.
-- Allowed private AI hosts: hosts on your private network a provider may point at, such as a self-hosted Ollama.
-
-### User
-
-- Enable the AI assistant: turn the assistant on for yourself.
-- Allow read-only diagnostic commands: let the assistant run safe commands on your hosts.
-- Providers: the AI providers, models and API keys you use.
-
-### Host
-
-- Enable AI Assistant: allow the assistant to work with this host.
-
-## Permissions
-
-- `ai.use`: Open the assistant and ask it things. Admins and users have it by default.
-- `ai.manage_providers`: Add, edit and remove AI providers and their API keys. Admins and users have it by default.
-- `ai.apply_proposals`: Let the assistant carry out the changes it suggests. Admins and users have it by default.
-- `ai.services.use`: Let other features call the assistant for you. Admins and users have it by default.
-- `ai.secrets.share`: Let other features use the stored AI API key without seeing it. Admins and users have it by default.
-
-## Services
-
-Uses from other plugins:
-
-- `workspaces.saved`, `network-topology.graph`, `snippets.access`, `fleets.access`, `terminal.history`, `automations.access` and `homepage.items` to read your data. Each one is optional.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/ai/locales/en.json b/plugins/ai/locales/en.json
deleted file mode 100644
index 25ac9b8bb..000000000
--- a/plugins/ai/locales/en.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Use the assistant",
-      "description": "Open the assistant and ask it things."
-    },
-    "manage_providers": {
-      "title": "Manage providers",
-      "description": "Add, edit and remove the AI providers and their API keys."
-    },
-    "apply_proposals": {
-      "title": "Apply proposals",
-      "description": "Let the assistant carry out the changes it suggests."
-    },
-    "services.use": {
-      "title": "Use AI from other features",
-      "description": "Other features may call the assistant on your behalf."
-    },
-    "secrets.share": {
-      "title": "Share the API key",
-      "description": "Other features may use the stored AI API key without seeing it."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "The AI assistant is turned off on this server.",
-    "providersNeedOptIn": "Turn on the AI assistant above to add providers.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "AI assistant",
-        "description": "Let users turn on the AI assistant. While this is off, the assistant is hidden and blocked for everyone."
-      },
-      "privateEndpoints": {
-        "label": "Allowed private AI hosts",
-        "description": "Hosts on your private network that users may point a provider at, such as a self-hosted Ollama. Put one host on each line."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "Enable AI Assistant",
-        "description": "Allow the AI assistant to help in this host's terminal. Off by default, and still needs AI enabled for your account."
-      }
-    }
-  },
-  "ai": {
-    "title": "Assistant",
-    "send": "Send",
-    "stop": "Stop",
-    "save": "Save",
-    "cancel": "Cancel",
-    "running": "running",
-    "approve": "Approve",
-    "reject": "Reject",
-    "inputPlaceholder": "Ask about your servers, or describe a change to propose",
-    "selectProvider": "Select a provider",
-    "providerSettings": "Provider settings",
-    "addProvider": "Add provider",
-    "editProvider": "Edit provider",
-    "removeProvider": "Remove provider",
-    "providerType": "Provider",
-    "providerLabel": "Name",
-    "providerLabelPlaceholder": "For example: Local Ollama",
-    "baseUrl": "Server address",
-    "apiKey": "API key",
-    "defaultModel": "Default model",
-    "defaultModelPlaceholder": "For example: llama3.1 or claude-opus-5",
-    "labelRequired": "Give this provider a name",
-    "providerSaveFailed": "Could not save the provider",
-    "providerUpdated": "Provider updated",
-    "providerDeleteFailed": "Could not remove the provider",
-    "privateEndpointHint": "Addresses on your private network need an administrator to allow the host first.",
-    "providerOllama": "Ollama",
-    "providerAnthropic": "Anthropic",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Google Gemini",
-    "providerOpenaiCompatible": "OpenAI compatible",
-    "toolArguments": "Input",
-    "toolResult": "Result",
-    "statusApplied": "Applied",
-    "statusRejected": "Rejected",
-    "proposalApplied": "Change applied",
-    "proposalApplyFailed": "Could not apply the change",
-    "proposalRejectFailed": "Could not reject the change",
-    "enableTitle": "Enable the AI assistant",
-    "enableDescription": "Let the assistant read your setup and suggest changes for you to approve.",
-    "readOnlyCommands": "Allow read-only diagnostic commands",
-    "readOnlyCommandsDescription": "The assistant may run a short list of safe commands like df and uptime without asking each time. Anything that changes a server is always proposed first.",
-    "modelDetectFailed": "Could not reach the provider, so this is a general list. You can type any model name.",
-    "modelCustom": "Enter a model name",
-    "modelRefresh": "Refresh list",
-    "modelPlaceholder": "Choose or type a model",
-    "attachHint": "Type @ to reference a host, snippet or automation. Changes are proposed for you to approve.",
-    "runCommandTitle": "Run command",
-    "assistant": "AI Assistant",
-    "terminalPanelEmpty": "Ask the assistant about this host. Anything that changes state needs your approval first.",
-    "terminalPanelPlaceholder": "Ask about this host...",
-    "noProvidersConfigured": "No AI provider is configured yet. Add one in the AI assistant tab.",
-    "runsInOpenTerminal": "Runs in your open terminal session.",
-    "runInTerminal": "Run",
-    "terminalContextPrefill": "Here is my terminal output:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Let other features use your AI provider API key for their own requests. The key is never copied, and you can revoke this at any time."
-    }
-  },
-  "nav": {
-    "ai": "AI"
-  },
-  "onboarding": {
-    "aiTitle": "AI assistant",
-    "aiIntro": "Termix can include an optional AI assistant. You can change this later in your settings.",
-    "aiSkipTitle": "Leave it off",
-    "aiSkipDesc": "Termix works as it does now. The assistant stays hidden.",
-    "aiEnableTitle": "Turn it on",
-    "aiEnableDesc": "Adds an assistant that reads your setup and suggests changes you approve. Needs a provider you supply, such as a local Ollama.",
-    "aiNote": "Nothing is sent anywhere until you add a provider and send a message."
-  },
-  "hosts": {
-    "docsLink": "View docs"
-  },
-  "plugin": {
-    "name": "AI Assistant"
-  }
-}
diff --git a/plugins/ai/locales/translated/af_ZA.json b/plugins/ai/locales/translated/af_ZA.json
deleted file mode 100644
index dda76ff08..000000000
--- a/plugins/ai/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Gebruik die assistent",
-      "description": "Maak die assistent oop en vra dit dinge."
-    },
-    "manage_providers": {
-      "title": "Bestuur verskaffers",
-      "description": "Voeg die KI-verskaffers en hul API-sleutels by, wysig en verwyder hulle."
-    },
-    "apply_proposals": {
-      "title": "Pas voorstelle toe",
-      "description": "Laat die assistent die veranderinge wat dit voorstel, uitvoer."
-    },
-    "services.use": {
-      "title": "Gebruik KI van ander funksies",
-      "description": "Ander funksies kan die assistent namens jou skakel."
-    },
-    "secrets.share": {
-      "title": "Deel die API-sleutel",
-      "description": "Ander funksies mag die gestoorde KI API-sleutel gebruik sonder om dit te sien."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "Die KI-assistent is afgeskakel op hierdie bediener.",
-    "providersNeedOptIn": "Skakel die KI-assistent hierbo aan om verskaffers by te voeg.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "KI-assistent",
-        "description": "Laat gebruikers die KI-assistent aanskakel. Terwyl dit af is, is die assistent vir almal versteek en geblokkeer."
-      },
-      "privateEndpoints": {
-        "label": "Toegelate private KI-gashere",
-        "description": "Gashere op jou privaat netwerk waarna gebruikers 'n verskaffer kan verwys, soos 'n self-gehoste Ollama. Plaas een gasheer op elke lyn."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "Aktiveer KI-assistent",
-        "description": "Laat die KI-assistent toe om in hierdie gasheer se terminaal te help. Standaard afgeskakel, en KI moet steeds vir jou rekening geaktiveer word."
-      }
-    }
-  },
-  "ai": {
-    "title": "Assistent",
-    "send": "Stuur",
-    "stop": "Stop",
-    "save": "Stoor",
-    "cancel": "Kanselleer",
-    "running": "hardloop",
-    "approve": "Goedkeur",
-    "reject": "Verwerp",
-    "inputPlaceholder": "Vra oor jou bedieners, of beskryf 'n verandering om voor te stel",
-    "selectProvider": "Kies 'n verskaffer",
-    "providerSettings": "Verskafferinstellings",
-    "addProvider": "Voeg verskaffer by",
-    "editProvider": "Wysig verskaffer",
-    "removeProvider": "Verwyder verskaffer",
-    "providerType": "Verskaffer",
-    "providerLabel": "Naam",
-    "providerLabelPlaceholder": "Byvoorbeeld: Plaaslike Ollama",
-    "baseUrl": "Bedieneradres",
-    "apiKey": "API-sleutel",
-    "defaultModel": "Standaardmodel",
-    "defaultModelPlaceholder": "Byvoorbeeld: llama3.1 of claude-opus-5",
-    "labelRequired": "Gee hierdie verskaffer 'n naam",
-    "providerSaveFailed": "Kon nie die verskaffer stoor nie",
-    "providerUpdated": "Verskaffer opgedateer",
-    "providerDeleteFailed": "Kon nie die verskaffer verwyder nie",
-    "privateEndpointHint": "Adresse op jou private netwerk benodig eers 'n administrateur om die gasheer toe te laat.",
-    "providerOllama": "Ollama",
-    "providerAnthropic": "Antropiese",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Google Tweeling",
-    "providerOpenaiCompatible": "OpenAI-versoenbaar",
-    "toolArguments": "Invoer",
-    "toolResult": "Resultaat",
-    "statusApplied": "Toegepas",
-    "statusRejected": "Verwerp",
-    "proposalApplied": "Verandering toegepas",
-    "proposalApplyFailed": "Kon nie die verandering toepas nie",
-    "proposalRejectFailed": "Kon nie die verandering verwerp nie",
-    "enableTitle": "Aktiveer die KI-assistent",
-    "enableDescription": "Laat die assistent jou opstelling lees en veranderinge voorstel wat jy kan goedkeur.",
-    "readOnlyCommands": "Laat leesalleen-diagnostiese bevele toe",
-    "readOnlyCommandsDescription": "Die assistent kan 'n kort lys veilige opdragte soos df en uptime uitvoer sonder om elke keer te vra. Enigiets wat 'n bediener verander, word altyd eerste voorgestel.",
-    "modelDetectFailed": "Kon nie die verskaffer bereik nie, so dit is 'n algemene lys. Jy kan enige modelnaam tik.",
-    "modelCustom": "Voer 'n modelnaam in",
-    "modelRefresh": "Verfris lys",
-    "modelPlaceholder": "Kies of tik 'n model",
-    "attachHint": "Tik @ om na 'n gasheer, brokkie of outomatisering te verwys. Veranderinge word voorgestel vir jou om goed te keur.",
-    "runCommandTitle": "Voer opdrag uit",
-    "assistant": "KI-assistent",
-    "terminalPanelEmpty": "Vra die assistent oor hierdie gasheer. Enigiets wat van status verander, benodig eers jou goedkeuring.",
-    "terminalPanelPlaceholder": "Vra oor hierdie gasheer...",
-    "noProvidersConfigured": "Geen KI-verskaffer is nog gekonfigureer nie. Voeg een by in die KI-assistent-oortjie.",
-    "runsInOpenTerminal": "Loop in jou oop terminaalsessie.",
-    "runInTerminal": "Hardloop",
-    "terminalContextPrefill": "Hier is my terminaaluitvoer:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Laat ander funksies jou KI-verskaffer API-sleutel vir hul eie versoeke gebruik. Die sleutel word nooit gekopieer nie, en jy kan dit te eniger tyd herroep."
-    }
-  },
-  "nav": {
-    "ai": "KI"
-  },
-  "onboarding": {
-    "aiTitle": "KI-assistent",
-    "aiIntro": "Termix kan 'n opsionele KI-assistent insluit. Jy kan dit later in jou instellings verander.",
-    "aiSkipTitle": "Los dit af",
-    "aiSkipDesc": "Termix werk soos dit nou doen. Die assistent bly versteek.",
-    "aiEnableTitle": "Skakel dit aan",
-    "aiEnableDesc": "Voeg 'n assistent by wat jou opstelling lees en veranderinge voorstel wat jy goedkeur. Benodig 'n verskaffer wat jy verskaf, soos 'n plaaslike Ollama.",
-    "aiNote": "Niks word êrens heen gestuur totdat jy 'n verskaffer byvoeg en 'n boodskap stuur nie."
-  },
-  "hosts": {
-    "docsLink": "Bekyk dokumente"
-  },
-  "plugin": {
-    "name": "KI-assistent"
-  }
-}
diff --git a/plugins/ai/locales/translated/ar_SA.json b/plugins/ai/locales/translated/ar_SA.json
deleted file mode 100644
index e835e9e3f..000000000
--- a/plugins/ai/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "استخدم المساعد",
-      "description": "افتح المساعد واسأله ما تريد."
-    },
-    "manage_providers": {
-      "title": "إدارة الموفر",
-      "description": "أضف، عدّل، واحذف مزودي خدمات الذكاء الاصطناعي ومفاتيح واجهة برمجة التطبيقات الخاصة بهم."
-    },
-    "apply_proposals": {
-      "title": "تقديم المقترحات",
-      "description": "دع المساعد يقوم بتنفيذ التغييرات التي يقترحها."
-    },
-    "services.use": {
-      "title": "استخدم الذكاء الاصطناعي من ميزات أخرى",
-      "description": "قد تقوم ميزات أخرى بالاتصال بالمساعد نيابةً عنك."
-    },
-    "secrets.share": {
-      "title": "شارك مفتاح API",
-      "description": "قد تستخدم ميزات أخرى مفتاح واجهة برمجة تطبيقات الذكاء الاصطناعي المخزن دون رؤيته."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "تم إيقاف تشغيل مساعد الذكاء الاصطناعي على هذا الخادم.",
-    "providersNeedOptIn": "قم بتشغيل مساعد الذكاء الاصطناعي أعلاه لإضافة مزودي الخدمة.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "مساعد الذكاء الاصطناعي",
-        "description": "اسمح للمستخدمين بتفعيل مساعد الذكاء الاصطناعي. عند إيقاف تشغيله، يكون المساعد مخفيًا ومحظورًا عن الجميع."
-      },
-      "privateEndpoints": {
-        "label": "المضيفون الخاصون المسموح بهم للذكاء الاصطناعي",
-        "description": "المضيفون على شبكتك الخاصة الذين يمكن للمستخدمين توجيه مزود الخدمة إليهم، مثل Ollama المُستضاف ذاتيًا. ضع مضيفًا واحدًا على كل سطر."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "تفعيل مساعد الذكاء الاصطناعي",
-        "description": "اسمح للمساعد الذكي بالمساعدة في طرفية هذا المضيف. هذه الميزة معطلة افتراضيًا، ولا يزال يتعين تفعيلها لحسابك."
-      }
-    }
-  },
-  "ai": {
-    "title": "مساعد",
-    "send": "يرسل",
-    "stop": "التوقف",
-    "save": "حفظ",
-    "cancel": "إلغاء",
-    "running": "قيد التشغيل",
-    "approve": "يعتمد",
-    "reject": "يرفض",
-    "inputPlaceholder": "استفسر عن خوادمك، أو صف تغييرًا ترغب في اقتراحه.",
-    "selectProvider": "اختر مزود الخدمة",
-    "providerSettings": "إعدادات المزوّد",
-    "addProvider": "إضافة موفر",
-    "editProvider": "موفر التحرير",
-    "removeProvider": "إزالة الموفر",
-    "providerType": "مزود",
-    "providerLabel": "الاسم",
-    "providerLabelPlaceholder": "على سبيل المثال: أولاما المحلي",
-    "baseUrl": "عنوان الخادم",
-    "apiKey": "مفتاح API",
-    "defaultModel": "النموذج الافتراضي",
-    "defaultModelPlaceholder": "على سبيل المثال: llama3.1 أو claude-opus-5",
-    "labelRequired": "أعطِ هذا المزوّد اسمًا",
-    "providerSaveFailed": "تعذر حفظ بيانات المزوّد",
-    "providerUpdated": "تم تحديث المزوّد",
-    "providerDeleteFailed": "تعذر إزالة الموفر",
-    "privateEndpointHint": "تحتاج العناوين الموجودة على شبكتك الخاصة إلى موافقة المسؤول أولاً للسماح للمضيف بالوصول إليها.",
-    "providerOllama": "أولاما",
-    "providerAnthropic": "الأنثروبيك",
-    "providerOpenai": "أوبن إيه آي",
-    "providerGemini": "جوجل جيميني",
-    "providerOpenaiCompatible": "متوافق مع OpenAI",
-    "toolArguments": "إدخال",
-    "toolResult": "نتيجة",
-    "statusApplied": "مُطبَّق",
-    "statusRejected": "مرفوض",
-    "proposalApplied": "تم تطبيق التغيير",
-    "proposalApplyFailed": "تعذر تطبيق التغيير",
-    "proposalRejectFailed": "لم يكن بالإمكان رفض التغيير",
-    "enableTitle": "قم بتفعيل مساعد الذكاء الاصطناعي",
-    "enableDescription": "دع المساعد يقرأ إعداداتك ويقترح تغييرات لتوافق عليها.",
-    "readOnlyCommands": "السماح بأوامر التشخيص للقراءة فقط",
-    "readOnlyCommandsDescription": "قد يقوم المساعد بتشغيل قائمة مختصرة من الأوامر الآمنة مثل df و uptime دون الحاجة إلى طلب ذلك في كل مرة. ويتم اقتراح أي أمر يُغيّر حالة الخادم أولاً.",
-    "modelDetectFailed": "تعذر الوصول إلى المورّد، لذا فهذه قائمة عامة. يمكنك كتابة أي اسم طراز.",
-    "modelCustom": "أدخل اسم النموذج",
-    "modelRefresh": "تحديث القائمة",
-    "modelPlaceholder": "اختر أو اكتب طرازًا",
-    "attachHint": "اكتب @ للإشارة إلى مضيف أو مقتطف أو عملية آلية. سيتم اقتراح تغييرات عليك الموافقة عليها.",
-    "runCommandTitle": "تشغيل الأمر",
-    "assistant": "مساعد الذكاء الاصطناعي",
-    "terminalPanelEmpty": "استفسر من المساعد عن هذا المضيف. أي تغيير في حالته يتطلب موافقتك أولاً.",
-    "terminalPanelPlaceholder": "اسأل عن هذا المضيف...",
-    "noProvidersConfigured": "لم يتم إعداد أي موفر للذكاء الاصطناعي حتى الآن. أضف واحداً في علامة تبويب مساعد الذكاء الاصطناعي.",
-    "runsInOpenTerminal": "يتم تشغيله في جلسة الطرفية المفتوحة لديك.",
-    "runInTerminal": "تشغيل",
-    "terminalContextPrefill": "هذا هو ناتج الطرفية الخاص بي:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "اسمح للميزات الأخرى باستخدام مفتاح واجهة برمجة التطبيقات (API) الخاص بمزود الذكاء الاصطناعي لطلباتها الخاصة. لا يتم نسخ المفتاح مطلقًا، ويمكنك إلغاء هذا في أي وقت."
-    }
-  },
-  "nav": {
-    "ai": "الذكاء الاصطناعي"
-  },
-  "onboarding": {
-    "aiTitle": "مساعد الذكاء الاصطناعي",
-    "aiIntro": "يمكن أن يتضمن تطبيق Termix مساعدًا ذكيًا اختياريًا. يمكنك تغيير هذا الخيار لاحقًا من الإعدادات.",
-    "aiSkipTitle": "اتركه مغلقًا",
-    "aiSkipDesc": "يعمل برنامج Termix كما هو الآن. ويبقى المساعد مخفياً.",
-    "aiEnableTitle": "قم بتشغيله",
-    "aiEnableDesc": "يُضيف هذا البرنامج مساعدًا يقرأ إعداداتك ويقترح تغييرات توافق عليها. يتطلب ذلك مزود خدمة تُحدده بنفسك، مثل مزود خدمة Ollama محلي.",
-    "aiNote": "لن يتم إرسال أي شيء إلى أي مكان حتى تقوم بإضافة مزود خدمة وإرسال رسالة."
-  },
-  "hosts": {
-    "docsLink": "عرض المستندات"
-  },
-  "plugin": {
-    "name": "مساعد الذكاء الاصطناعي"
-  }
-}
diff --git a/plugins/ai/locales/translated/bg_BG.json b/plugins/ai/locales/translated/bg_BG.json
deleted file mode 100644
index 611459362..000000000
--- a/plugins/ai/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Използвайте асистента",
-      "description": "Отворете асистента и го попитайте нещо."
-    },
-    "manage_providers": {
-      "title": "Управление на доставчици",
-      "description": "Добавяне, редактиране и премахване на доставчици на изкуствен интелект и техните API ключове."
-    },
-    "apply_proposals": {
-      "title": "Прилагане на предложения",
-      "description": "Нека асистентът извърши предложените от него промени."
-    },
-    "services.use": {
-      "title": "Използвайте изкуствен интелект от други функции",
-      "description": "Други функции може да извикат асистента от ваше име."
-    },
-    "secrets.share": {
-      "title": "Споделете API ключа",
-      "description": "Други функции могат да използват съхранения AI API ключ, без да го виждат."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "Асистентът с изкуствен интелект е изключен на този сървър.",
-    "providersNeedOptIn": "Включете AI асистента по-горе, за да добавите доставчици.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "Асистент с изкуствен интелект",
-        "description": "Позволете на потребителите да включат асистента с изкуствен интелект. Докато това е изключено, асистентът е скрит и блокиран за всички."
-      },
-      "privateEndpoints": {
-        "label": "Разрешени частни хостове с изкуствен интелект",
-        "description": "Хостове във вашата частна мрежа, към които потребителите могат да насочат доставчик, като например самостоятелно хостван Ollama. Поставете по един хост на всеки ред."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "Активиране на AI асистент",
-        "description": "Разрешете на AI асистента да помага в терминала на този хост. Изключено по подразбиране и все още изисква AI да е активиран за вашия акаунт."
-      }
-    }
-  },
-  "ai": {
-    "title": "Асистент",
-    "send": "Изпрати",
-    "stop": "Спри",
-    "save": "Запазване",
-    "cancel": "Отказ",
-    "running": "бягане",
-    "approve": "Одобряване",
-    "reject": "Отхвърляне",
-    "inputPlaceholder": "Попитайте за вашите сървъри или опишете промяна, която да предложите",
-    "selectProvider": "Изберете доставчик",
-    "providerSettings": "Настройки на доставчика",
-    "addProvider": "Добавяне на доставчик",
-    "editProvider": "Редактиране на доставчика",
-    "removeProvider": "Премахване на доставчика",
-    "providerType": "Доставчик",
-    "providerLabel": "Име",
-    "providerLabelPlaceholder": "Например: Местна Олама",
-    "baseUrl": "Адрес на сървъра",
-    "apiKey": "API ключ",
-    "defaultModel": "Модел по подразбиране",
-    "defaultModelPlaceholder": "Например: llama3.1 или claude-opus-5",
-    "labelRequired": "Дайте име на този доставчик",
-    "providerSaveFailed": "Доставчикът не можа да бъде запазен",
-    "providerUpdated": "Доставчикът е актуализиран",
-    "providerDeleteFailed": "Доставчикът не можа да бъде премахнат",
-    "privateEndpointHint": "Адресите във вашата частна мрежа се нуждаят първо от администратор, който да разреши хоста.",
-    "providerOllama": "Олама",
-    "providerAnthropic": "Антропен",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Google Джемини",
-    "providerOpenaiCompatible": "Съвместим с OpenAI",
-    "toolArguments": "Вход",
-    "toolResult": "Резултат",
-    "statusApplied": "Приложено",
-    "statusRejected": "Отхвърлено",
-    "proposalApplied": "Промяната е приложена",
-    "proposalApplyFailed": "Промяната не можа да се приложи",
-    "proposalRejectFailed": "Промяната не можа да бъде отхвърлена",
-    "enableTitle": "Активирайте AI асистента",
-    "enableDescription": "Нека асистентът прочете настройката ви и предложи промени, които да одобрите.",
-    "readOnlyCommands": "Разрешаване на диагностични команди само за четене",
-    "readOnlyCommandsDescription": "Асистентът може да изпълни кратък списък с безопасни команди като df и uptime, без да пита всеки път. Всичко, което променя сървър, винаги се предлага първо.",
-    "modelDetectFailed": "Не можахме да се свържем с доставчика, така че това е общ списък. Можете да въведете име на произволен модел.",
-    "modelCustom": "Въведете име на модел",
-    "modelRefresh": "Обновяване на списъка",
-    "modelPlaceholder": "Изберете или въведете модел",
-    "attachHint": "Въведете @, за да се обърнете към хост, фрагмент или автоматизация. Предлагат се промени за одобрение.",
-    "runCommandTitle": "Изпълнете командата",
-    "assistant": "Асистент с изкуствен интелект",
-    "terminalPanelEmpty": "Попитайте асистента за този хост. Всичко, което променя състоянието, първо изисква вашето одобрение.",
-    "terminalPanelPlaceholder": "Попитайте за този домакин...",
-    "noProvidersConfigured": "Все още не е конфигуриран доставчик на ИИ. Добавете такъв в раздела „Асистент за ИИ“.",
-    "runsInOpenTerminal": "Изпълнява се във вашата отворена терминална сесия.",
-    "runInTerminal": "Бягане",
-    "terminalContextPrefill": "Ето изхода на моя терминал:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Позволете на други функции да използват вашия API ключ на доставчика на изкуствен интелект за свои собствени заявки. Ключът никога не се копира и можете да го отмените по всяко време."
-    }
-  },
-  "nav": {
-    "ai": "Изкуствен интелект"
-  },
-  "onboarding": {
-    "aiTitle": "Асистент с изкуствен интелект",
-    "aiIntro": "Termix може да включва опционален AI асистент. Можете да промените това по-късно в настройките си.",
-    "aiSkipTitle": "Остави го изключено",
-    "aiSkipDesc": "Termix работи както сега. Асистентът остава скрит.",
-    "aiEnableTitle": "Включете го",
-    "aiEnableDesc": "Добавя асистент, който чете настройките ви и предлага промени, които одобрявате. Необходим е доставчик, когото вие предоставяте, например местен Ollama.",
-    "aiNote": "Нищо не се изпраща никъде, докато не добавите доставчик и не изпратите съобщение."
-  },
-  "hosts": {
-    "docsLink": "Преглед на документи"
-  },
-  "plugin": {
-    "name": "Асистент с изкуствен интелект"
-  }
-}
diff --git a/plugins/ai/locales/translated/bn_BD.json b/plugins/ai/locales/translated/bn_BD.json
deleted file mode 100644
index b2545416c..000000000
--- a/plugins/ai/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "সহকারী ব্যবহার করুন",
-      "description": "অ্যাসিস্ট্যান্টটি খুলুন এবং এটিকে বিভিন্ন জিনিস জিজ্ঞাসা করুন।"
-    },
-    "manage_providers": {
-      "title": "সরবরাহকারীদের পরিচালনা করুন",
-      "description": "এআই প্রোভাইডার এবং তাদের এপিআই কীগুলো যোগ, সম্পাদনা ও অপসারণ করুন।"
-    },
-    "apply_proposals": {
-      "title": "প্রস্তাবগুলি প্রয়োগ করুন",
-      "description": "সহকারীকে তার প্রস্তাবিত পরিবর্তনগুলো কার্যকর করতে দিন।"
-    },
-    "services.use": {
-      "title": "অন্যান্য বৈশিষ্ট্য থেকে এআই ব্যবহার করুন",
-      "description": "অন্যান্য বৈশিষ্ট্য আপনার পক্ষ থেকে সহকারীকে ডাকতে পারে।"
-    },
-    "secrets.share": {
-      "title": "এপিআই কী শেয়ার করুন",
-      "description": "অন্যান্য ফিচারগুলো সংরক্ষিত এআই এপিআই কী-টি না দেখেই ব্যবহার করতে পারে।"
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "এই সার্ভারে এআই অ্যাসিস্ট্যান্ট বন্ধ করা আছে।",
-    "providersNeedOptIn": "প্রোভাইডার যোগ করতে উপরের এআই অ্যাসিস্ট্যান্টটি চালু করুন।",
-    "admin": {
-      "globallyEnabled": {
-        "label": "এআই সহকারী",
-        "description": "ব্যবহারকারীদের এআই অ্যাসিস্ট্যান্ট চালু করার সুযোগ দিন। এটি বন্ধ থাকা অবস্থায়, অ্যাসিস্ট্যান্টটি সকলের জন্য লুকানো এবং ব্লক করা থাকবে।"
-      },
-      "privateEndpoints": {
-        "label": "ব্যক্তিগত এআই হোস্ট অনুমোদিত",
-        "description": "আপনার প্রাইভেট নেটওয়ার্কে এমন হোস্ট রাখুন, যেগুলোকে ব্যবহারকারীরা কোনো প্রোভাইডারের দিকে নির্দেশ করতে পারে, যেমন একটি সেলফ-হোস্টেড ওলামা। প্রতিটি লাইনে একটি করে হোস্ট রাখুন।"
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "এআই অ্যাসিস্ট্যান্ট সক্রিয় করুন",
-        "description": "এই হোস্টের টার্মিনালে সাহায্য করার জন্য এআই অ্যাসিস্ট্যান্টকে অনুমতি দিন। এটি ডিফল্টরূপে বন্ধ থাকে এবং আপনার অ্যাকাউন্টের জন্য এআই চালু করা প্রয়োজন।"
-      }
-    }
-  },
-  "ai": {
-    "title": "সহকারী",
-    "send": "পাঠান",
-    "stop": "থামুন",
-    "save": "সংরক্ষণ করুন",
-    "cancel": "বাতিল করুন",
-    "running": "দৌড়ানো",
-    "approve": "অনুমোদন করুন",
-    "reject": "প্রত্যাখ্যান করুন",
-    "inputPlaceholder": "আপনার সার্ভারগুলো সম্পর্কে জিজ্ঞাসা করুন, অথবা কোনো পরিবর্তনের প্রস্তাব বর্ণনা করুন।",
-    "selectProvider": "একজন সরবরাহকারী নির্বাচন করুন",
-    "providerSettings": "প্রদানকারীর সেটিংস",
-    "addProvider": "প্রদানকারী যোগ করুন",
-    "editProvider": "সম্পাদনা প্রদানকারী",
-    "removeProvider": "প্রদানকারীকে অপসারণ করুন",
-    "providerType": "সরবরাহকারী",
-    "providerLabel": "নাম",
-    "providerLabelPlaceholder": "উদাহরণস্বরূপ: স্থানীয় ওলামা",
-    "baseUrl": "সার্ভারের ঠিকানা",
-    "apiKey": "এপিআই কী",
-    "defaultModel": "ডিফল্ট মডেল",
-    "defaultModelPlaceholder": "উদাহরণস্বরূপ: llama3.1 অথবা claude-opus-5",
-    "labelRequired": "এই সরবরাহকারীকে একটি নাম দিন",
-    "providerSaveFailed": "প্রদানকারীকে সংরক্ষণ করা যায়নি",
-    "providerUpdated": "প্রদানকারী আপডেট করেছেন",
-    "providerDeleteFailed": "প্রদানকারীকে সরানো যায়নি",
-    "privateEndpointHint": "আপনার ব্যক্তিগত নেটওয়ার্কের অ্যাড্রেসগুলো ব্যবহার করার জন্য প্রথমে একজন অ্যাডমিনিস্ট্রেটরের কাছ থেকে হোস্টটিকে অনুমতি নিতে হয়।",
-    "providerOllama": "ওল্লামা",
-    "providerAnthropic": "অ্যানথ্রোপিক",
-    "providerOpenai": "ওপেনএআই",
-    "providerGemini": "গুগল জেমিনি",
-    "providerOpenaiCompatible": "ওপেনএআই সামঞ্জস্যপূর্ণ",
-    "toolArguments": "ইনপুট",
-    "toolResult": "ফলাফল",
-    "statusApplied": "প্রয়োগ করা হয়েছে",
-    "statusRejected": "প্রত্যাখ্যাত",
-    "proposalApplied": "পরিবর্তন প্রয়োগ করা হয়েছে",
-    "proposalApplyFailed": "পরিবর্তনটি প্রয়োগ করা যায়নি।",
-    "proposalRejectFailed": "পরিবর্তনটি প্রত্যাখ্যান করা যায়নি",
-    "enableTitle": "এআই অ্যাসিস্ট্যান্ট সক্রিয় করুন",
-    "enableDescription": "সহকারীকে আপনার সেটআপটি পড়তে দিন এবং আপনার অনুমোদনের জন্য পরিবর্তনের পরামর্শ দিতে দিন।",
-    "readOnlyCommands": "শুধুমাত্র পঠনযোগ্য ডায়াগনস্টিক কমান্ডের অনুমতি দিন",
-    "readOnlyCommandsDescription": "সহকারী প্রতিবার অনুমতি না নিয়েই df এবং uptime-এর মতো কয়েকটি নিরাপদ কমান্ড চালাতে পারে। সার্ভার পরিবর্তন করে এমন যেকোনো কিছু সর্বদা প্রথমে প্রস্তাব করা হয়।",
-    "modelDetectFailed": "সরবরাহকারীর সাথে যোগাযোগ করা সম্ভব হয়নি, তাই এটি একটি সাধারণ তালিকা। আপনি যেকোনো মডেলের নাম টাইপ করতে পারেন।",
-    "modelCustom": "একটি মডেলের নাম লিখুন",
-    "modelRefresh": "তালিকা রিফ্রেশ করুন",
-    "modelPlaceholder": "একটি মডেল বেছে নিন বা টাইপ করুন",
-    "attachHint": "কোনো হোস্ট, স্নিপেট বা অটোমেশন উল্লেখ করতে @ টাইপ করুন। আপনার অনুমোদনের জন্য পরিবর্তনগুলো প্রস্তাব করা হবে।",
-    "runCommandTitle": "রান কমান্ড",
-    "assistant": "এআই সহকারী",
-    "terminalPanelEmpty": "এই হোস্ট সম্পর্কে অ্যাসিস্ট্যান্টকে জিজ্ঞাসা করুন। অবস্থা পরিবর্তনের জন্য প্রথমে আপনার অনুমোদন প্রয়োজন।",
-    "terminalPanelPlaceholder": "এই হোস্ট সম্পর্কে জিজ্ঞাসা করুন...",
-    "noProvidersConfigured": "এখনো কোনো এআই প্রোভাইডার কনফিগার করা হয়নি। এআই অ্যাসিস্ট্যান্ট ট্যাবে একটি যোগ করুন।",
-    "runsInOpenTerminal": "আপনার খোলা টার্মিনাল সেশনে চলে।",
-    "runInTerminal": "দৌড়",
-    "terminalContextPrefill": "আমার টার্মিনাল আউটপুট নিচে দেওয়া হলো:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "অন্যান্য ফিচারগুলোকে তাদের নিজস্ব অনুরোধের জন্য আপনার এআই প্রোভাইডার এপিআই কী ব্যবহার করতে দিন। কী-টি কখনোই কপি করা হয় না এবং আপনি যেকোনো সময় এটি প্রত্যাহার করতে পারেন।"
-    }
-  },
-  "nav": {
-    "ai": "এআই"
-  },
-  "onboarding": {
-    "aiTitle": "এআই সহকারী",
-    "aiIntro": "টারমিক্সে একটি ঐচ্ছিক এআই অ্যাসিস্ট্যান্ট অন্তর্ভুক্ত থাকতে পারে। আপনি পরবর্তীতে আপনার সেটিংসে এটি পরিবর্তন করতে পারবেন।",
-    "aiSkipTitle": "এটা ছেড়ে দাও",
-    "aiSkipDesc": "টারমিক্স এখন যেমন কাজ করে, তেমনই কাজ করে। অ্যাসিস্ট্যান্টটি লুকানো থাকে।",
-    "aiEnableTitle": "এটা চালু করুন",
-    "aiEnableDesc": "একজন সহকারী যোগ করে যে আপনার সেটআপ পড়ে এবং আপনার অনুমোদিত পরিবর্তনের পরামর্শ দেয়। এর জন্য আপনার সরবরাহ করা একজন প্রদানকারীর প্রয়োজন, যেমন একজন স্থানীয় ওলামা।",
-    "aiNote": "আপনি একজন প্রোভাইডার যোগ করে মেসেজ না পাঠানো পর্যন্ত কোথাও কিছু পাঠানো হয় না।"
-  },
-  "hosts": {
-    "docsLink": "নথি দেখুন"
-  },
-  "plugin": {
-    "name": "এআই সহকারী"
-  }
-}
diff --git a/plugins/ai/locales/translated/ca_ES.json b/plugins/ai/locales/translated/ca_ES.json
deleted file mode 100644
index 53fda60ef..000000000
--- a/plugins/ai/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Utilitza l'assistent",
-      "description": "Obre l'assistent i fes-li preguntes."
-    },
-    "manage_providers": {
-      "title": "Gestiona els proveïdors",
-      "description": "Afegiu, editeu i elimineu els proveïdors d'IA i les seves claus API."
-    },
-    "apply_proposals": {
-      "title": "Aplicar propostes",
-      "description": "Deixa que l'assistent dugui a terme els canvis que suggereixi."
-    },
-    "services.use": {
-      "title": "Utilitza la IA d'altres funcions",
-      "description": "Altres funcions poden trucar a l'assistent en nom teu."
-    },
-    "secrets.share": {
-      "title": "Comparteix la clau de l'API",
-      "description": "Altres funcions poden utilitzar la clau de l'API d'IA emmagatzemada sense veure-la."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "L'assistent d'IA està desactivat en aquest servidor.",
-    "providersNeedOptIn": "Activa l'assistent d'IA que hi ha a sobre per afegir proveïdors.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "Assistent d'IA",
-        "description": "Permet que els usuaris activin l'assistent d'IA. Mentre estigui desactivat, l'assistent està ocult i bloquejat per a tothom."
-      },
-      "privateEndpoints": {
-        "label": "Amfitrions d'IA privats permesos",
-        "description": "Amfitrions de la vostra xarxa privada als quals els usuaris poden dirigir un proveïdor, com ara un Ollama autoallotjat. Poseu un amfitrió a cada línia."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "Activa l'Assistent d'IA",
-        "description": "Permet que l'assistent d'IA ajudi al terminal d'aquest amfitrió. Desactivat per defecte, però encara cal que la IA estigui activada per al teu compte."
-      }
-    }
-  },
-  "ai": {
-    "title": "Assistent",
-    "send": "Enviar",
-    "stop": "Atura",
-    "save": "Desa",
-    "cancel": "Cancel·la",
-    "running": "corrent",
-    "approve": "Aprova",
-    "reject": "Rebutja",
-    "inputPlaceholder": "Pregunteu pels vostres cambrers o descriviu un canvi que vulgueu proposar",
-    "selectProvider": "Seleccioneu un proveïdor",
-    "providerSettings": "Configuració del proveïdor",
-    "addProvider": "Afegeix un proveïdor",
-    "editProvider": "Edita el proveïdor",
-    "removeProvider": "Elimina el proveïdor",
-    "providerType": "Proveïdor",
-    "providerLabel": "Nom",
-    "providerLabelPlaceholder": "Per exemple: Ollama local",
-    "baseUrl": "Adreça del servidor",
-    "apiKey": "Clau API",
-    "defaultModel": "Model per defecte",
-    "defaultModelPlaceholder": "Per exemple: llama3.1 o claude-opus-5",
-    "labelRequired": "Doneu un nom a aquest proveïdor",
-    "providerSaveFailed": "No s'ha pogut desar el proveïdor",
-    "providerUpdated": "Proveïdor actualitzat",
-    "providerDeleteFailed": "No s'ha pogut eliminar el proveïdor",
-    "privateEndpointHint": "Les adreces de la vostra xarxa privada necessiten primer que un administrador permeti l'accés a l'amfitrió.",
-    "providerOllama": "Ollama",
-    "providerAnthropic": "Antròpic",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Google Bessons",
-    "providerOpenaiCompatible": "Compatible amb OpenAI",
-    "toolArguments": "Entrada",
-    "toolResult": "Resultat",
-    "statusApplied": "Aplicat",
-    "statusRejected": "Rebutjat",
-    "proposalApplied": "Canvi aplicat",
-    "proposalApplyFailed": "No s'ha pogut aplicar el canvi",
-    "proposalRejectFailed": "No s'ha pogut rebutjar el canvi",
-    "enableTitle": "Activa l'assistent d'IA",
-    "enableDescription": "Deixa que l'assistent llegeixi la teva configuració i et suggereixi canvis perquè els aprovis.",
-    "readOnlyCommands": "Permetre ordres de diagnòstic de només lectura",
-    "readOnlyCommandsDescription": "L'assistent pot executar una llista curta d'ordres segures com ara df i uptime sense preguntar cada vegada. Qualsevol cosa que canviï un servidor sempre es proposa primer.",
-    "modelDetectFailed": "No s'ha pogut contactar amb el proveïdor, per tant, aquesta és una llista general. Podeu escriure qualsevol nom de model.",
-    "modelCustom": "Introduïu un nom de model",
-    "modelRefresh": "Actualitza la llista",
-    "modelPlaceholder": "Trieu o escriviu un model",
-    "attachHint": "Escriviu @ per fer referència a un host, fragment o automatització. Es proposen canvis perquè els aprovi.",
-    "runCommandTitle": "Executa l'ordre",
-    "assistant": "Assistent d'IA",
-    "terminalPanelEmpty": "Pregunta a l'assistent sobre aquest amfitrió. Qualsevol cosa que canviï d'estat necessita primer la teva aprovació.",
-    "terminalPanelPlaceholder": "Pregunta per aquest amfitrió...",
-    "noProvidersConfigured": "Encara no hi ha cap proveïdor d'IA configurat. Afegeix-ne un a la pestanya Assistent d'IA.",
-    "runsInOpenTerminal": "S'executa a la sessió de terminal oberta.",
-    "runInTerminal": "Corre",
-    "terminalContextPrefill": "Aquí teniu la sortida del meu terminal:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Permet que altres funcions utilitzin la clau de l'API del proveïdor d'IA per a les seves pròpies sol·licituds. La clau no es copia mai i pots revocar-la en qualsevol moment."
-    }
-  },
-  "nav": {
-    "ai": "IA"
-  },
-  "onboarding": {
-    "aiTitle": "Assistent d'IA",
-    "aiIntro": "Termix pot incloure un assistent d'IA opcional. Pots canviar-ho més tard a la configuració.",
-    "aiSkipTitle": "Deixa-ho fora",
-    "aiSkipDesc": "Termix funciona com ho fa ara. L'assistent roman ocult.",
-    "aiEnableTitle": "Engega-ho",
-    "aiEnableDesc": "Afegeix un assistent que llegeix la configuració i suggereix els canvis que aproveu. Necessita un proveïdor que subministreu, com ara un Ollama local.",
-    "aiNote": "No s'envia res enlloc fins que no afegiu un proveïdor i envieu un missatge."
-  },
-  "hosts": {
-    "docsLink": "Veure documents"
-  },
-  "plugin": {
-    "name": "Assistent d'IA"
-  }
-}
diff --git a/plugins/ai/locales/translated/cs_CZ.json b/plugins/ai/locales/translated/cs_CZ.json
deleted file mode 100644
index ea569cd56..000000000
--- a/plugins/ai/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Použijte asistenta",
-      "description": "Otevřete asistenta a zeptejte se ho na něco."
-    },
-    "manage_providers": {
-      "title": "Spravovat poskytovatele",
-      "description": "Přidávejte, upravujte a odebírejte poskytovatele umělé inteligence a jejich klíče API."
-    },
-    "apply_proposals": {
-      "title": "Použít návrhy",
-      "description": "Nechte asistenta provést změny, které navrhuje."
-    },
-    "services.use": {
-      "title": "Používejte umělou inteligenci z jiných funkcí",
-      "description": "Jiné funkce mohou zavolat asistenta za vás."
-    },
-    "secrets.share": {
-      "title": "Sdílení klíče API",
-      "description": "Jiné funkce mohou používat uložený klíč API AI, aniž by ho viděly."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "Asistent s umělou inteligencí je na tomto serveru vypnutý.",
-    "providersNeedOptIn": "Zapněte výše uvedeného asistenta s umělou inteligencí a přidejte poskytovatele.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "Asistent s umělou inteligencí",
-        "description": "Umožněte uživatelům zapnout asistenta s umělou inteligencí. Pokud je tato funkce vypnutá, asistent je skrytý a blokovaný pro všechny."
-      },
-      "privateEndpoints": {
-        "label": "Povolení soukromí hostitelé s umělou inteligencí",
-        "description": "Hostitelé ve vaší privátní síti, na které mohou uživatelé odkazovat poskytovatele, například Ollama hostovaná na vlastním serveru. Na každý řádek uveďte jednoho hostitele."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "Povolit asistenta s umělou inteligencí",
-        "description": "Povolit asistentovi s umělou inteligencí pomáhat v terminálu tohoto hostitele. Ve výchozím nastavení vypnuto, ale stále vyžaduje, aby byla pro váš účet povolena umělá inteligence."
-      }
-    }
-  },
-  "ai": {
-    "title": "Asistent",
-    "send": "Poslat",
-    "stop": "Zastávka",
-    "save": "Uložit",
-    "cancel": "Zrušit",
-    "running": "běh",
-    "approve": "Schvalovat",
-    "reject": "Odmítnout",
-    "inputPlaceholder": "Zeptejte se na své servery nebo popište změnu, kterou chcete navrhnout",
-    "selectProvider": "Vyberte poskytovatele",
-    "providerSettings": "Nastavení poskytovatele",
-    "addProvider": "Přidat poskytovatele",
-    "editProvider": "Upravit poskytovatele",
-    "removeProvider": "Odebrat poskytovatele",
-    "providerType": "Poskytovatel",
-    "providerLabel": "Jméno",
-    "providerLabelPlaceholder": "Například: Místní Ollama",
-    "baseUrl": "Adresa serveru",
-    "apiKey": "Klíč API",
-    "defaultModel": "Výchozí model",
-    "defaultModelPlaceholder": "Například: llama3.1 nebo claude-opus-5",
-    "labelRequired": "Zadejte tomuto poskytovateli název",
-    "providerSaveFailed": "Nepodařilo se uložit poskytovatele",
-    "providerUpdated": "Poskytovatel aktualizován",
-    "providerDeleteFailed": "Nepodařilo se odebrat poskytovatele",
-    "privateEndpointHint": "Adresy ve vaší privátní síti vyžadují, aby je správce nejprve povolil hostiteli.",
-    "providerOllama": "Ollama",
-    "providerAnthropic": "Antropický",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Google Gemini",
-    "providerOpenaiCompatible": "Kompatibilní s OpenAI",
-    "toolArguments": "Vstup",
-    "toolResult": "Výsledek",
-    "statusApplied": "Aplikovaný",
-    "statusRejected": "Odmítnuto",
-    "proposalApplied": "Změna použita",
-    "proposalApplyFailed": "Změnu se nepodařilo použít",
-    "proposalRejectFailed": "Změnu se nepodařilo odmítnout",
-    "enableTitle": "Povolte asistenta s umělou inteligencí",
-    "enableDescription": "Nechte asistenta přečíst si vaše nastavení a navrhnout změny ke schválení.",
-    "readOnlyCommands": "Povolit diagnostické příkazy pouze pro čtení",
-    "readOnlyCommandsDescription": "Asistent může spustit krátký seznam bezpečných příkazů, jako například df a uptime, aniž by se pokaždé ptal. Vše, co mění server, je vždy navrženo jako první.",
-    "modelDetectFailed": "Nepodařilo se mi spojit s poskytovatelem, toto je obecný seznam. Můžete zadat libovolný název modelu.",
-    "modelCustom": "Zadejte název modelu",
-    "modelRefresh": "Obnovit seznam",
-    "modelPlaceholder": "Vyberte nebo zadejte model",
-    "attachHint": "Zadejte @ pro odkaz na hostitele, úryvek kódu nebo automatizaci. Změny jsou navrženy ke schválení.",
-    "runCommandTitle": "Spustit příkaz",
-    "assistant": "Asistent umělé inteligence",
-    "terminalPanelEmpty": "Zeptejte se asistenta na tohoto hostitele. Jakákoli změna stavu vyžaduje váš první souhlas.",
-    "terminalPanelPlaceholder": "Zeptejte se na tohoto hostitele...",
-    "noProvidersConfigured": "Zatím není nakonfigurován žádný poskytovatel AI. Přidejte ho na kartě Asistent AI.",
-    "runsInOpenTerminal": "Spustí se ve vaší otevřené terminálové relaci.",
-    "runInTerminal": "Běh",
-    "terminalContextPrefill": "Zde je můj terminálový výstup:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Umožněte ostatním funkcím používat váš klíč API poskytovatele AI pro jejich vlastní požadavky. Klíč se nikdy nekopíruje a jeho použití můžete kdykoli zrušit."
-    }
-  },
-  "nav": {
-    "ai": "Umělá inteligence"
-  },
-  "onboarding": {
-    "aiTitle": "Asistent s umělou inteligencí",
-    "aiIntro": "Termix může obsahovat volitelného asistenta s umělou inteligencí. Toto můžete později změnit v nastavení.",
-    "aiSkipTitle": "Nech to být",
-    "aiSkipDesc": "Termix funguje stejně jako teď. Asistent zůstává skrytý.",
-    "aiEnableTitle": "Zapněte to",
-    "aiEnableDesc": "Přidá asistenta, který si přečte vaše nastavení a navrhne změny, které schválíte. Vyžaduje poskytovatele, kterého dodáte, například místní Ollamu.",
-    "aiNote": "Nic se nikam neodesílá, dokud nepřidáte poskytovatele a neodešlete zprávu."
-  },
-  "hosts": {
-    "docsLink": "Zobrazit dokumenty"
-  },
-  "plugin": {
-    "name": "Asistent umělé inteligence"
-  }
-}
diff --git a/plugins/ai/locales/translated/da_DK.json b/plugins/ai/locales/translated/da_DK.json
deleted file mode 100644
index 17962b912..000000000
--- a/plugins/ai/locales/translated/da_DK.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Brug assistenten",
-      "description": "Åbn assistenten og stil den spørgsmål."
-    },
-    "manage_providers": {
-      "title": "Administrer udbydere",
-      "description": "Tilføj, rediger og fjern AI-udbyderne og deres API-nøgler."
-    },
-    "apply_proposals": {
-      "title": "Anvend forslag",
-      "description": "Lad assistenten udføre de foreslåede ændringer."
-    },
-    "services.use": {
-      "title": "Brug AI fra andre funktioner",
-      "description": "Andre funktioner kan ringe til assistenten på dine vegne."
-    },
-    "secrets.share": {
-      "title": "Del API-nøglen",
-      "description": "Andre funktioner kan bruge den gemte AI API-nøgle uden at se den."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "AI-assistenten er slået fra på denne server.",
-    "providersNeedOptIn": "Slå AI-assistenten ovenfor til for at tilføje udbydere.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "AI-assistent",
-        "description": "Lad brugerne aktivere AI-assistenten. Når dette er slået fra, er assistenten skjult og blokeret for alle."
-      },
-      "privateEndpoints": {
-        "label": "Tilladte private AI-værter",
-        "description": "Værter på dit private netværk, som brugerne kan henvise en udbyder til, f.eks. en selvhostet Ollama. Sæt én vært på hver linje."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "Aktivér AI-assistent",
-        "description": "Tillad AI-assistenten at hjælpe i denne værts terminal. Deaktiveret som standard, og kræver stadig, at AI er aktiveret for din konto."
-      }
-    }
-  },
-  "ai": {
-    "title": "Assistent",
-    "send": "Sende",
-    "stop": "Stop",
-    "save": "Spare",
-    "cancel": "Ophæve",
-    "running": "løb",
-    "approve": "Godkende",
-    "reject": "Afvise",
-    "inputPlaceholder": "Spørg om dine servere, eller beskriv en ændring, du vil foreslå",
-    "selectProvider": "Vælg en udbyder",
-    "providerSettings": "Udbyderindstillinger",
-    "addProvider": "Tilføj udbyder",
-    "editProvider": "Rediger udbyder",
-    "removeProvider": "Fjern udbyder",
-    "providerType": "Udbyder",
-    "providerLabel": "Navn",
-    "providerLabelPlaceholder": "For eksempel: Lokal Ollama",
-    "baseUrl": "Serveradresse",
-    "apiKey": "API-nøgle",
-    "defaultModel": "Standardmodel",
-    "defaultModelPlaceholder": "For eksempel: llama3.1 eller claude-opus-5",
-    "labelRequired": "Giv denne udbyder et navn",
-    "providerSaveFailed": "Udbyderen kunne ikke gemmes",
-    "providerUpdated": "Udbyder opdateret",
-    "providerDeleteFailed": "Udbyderen kunne ikke fjernes",
-    "privateEndpointHint": "Adresser på dit private netværk kræver først tilladelse fra en administrator til værten.",
-    "providerOllama": "Ollama",
-    "providerAnthropic": "Antropisk",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Google Gemini",
-    "providerOpenaiCompatible": "OpenAI-kompatibel",
-    "toolArguments": "Input",
-    "toolResult": "Resultat",
-    "statusApplied": "Anvendt",
-    "statusRejected": "Afvist",
-    "proposalApplied": "Ændring anvendt",
-    "proposalApplyFailed": "Ændringen kunne ikke anvendes",
-    "proposalRejectFailed": "Kunne ikke afvise ændringen",
-    "enableTitle": "Aktivér AI-assistenten",
-    "enableDescription": "Lad assistenten læse din opsætning og foreslå ændringer, som du kan godkende.",
-    "readOnlyCommands": "Tillad skrivebeskyttede diagnosticeringskommandoer",
-    "readOnlyCommandsDescription": "Assistenten kan køre en kort liste med sikre kommandoer som f.eks. df og uptime uden at spørge hver gang. Alt, der ændrer en server, foreslås altid først.",
-    "modelDetectFailed": "Kunne ikke få kontakt med udbyderen, så dette er en generel liste. Du kan skrive et hvilket som helst modelnavn.",
-    "modelCustom": "Indtast et modelnavn",
-    "modelRefresh": "Opdater listen",
-    "modelPlaceholder": "Vælg eller skriv en model",
-    "attachHint": "Skriv @ for at referere til en vært, et kodestykke eller en automatisering. Ændringer foreslås, som du skal godkende.",
-    "runCommandTitle": "Kør kommando",
-    "assistant": "AI-assistent",
-    "terminalPanelEmpty": "Spørg assistenten om denne vært. Alt, der ændrer status, kræver din godkendelse først.",
-    "terminalPanelPlaceholder": "Spørg om denne vært...",
-    "noProvidersConfigured": "Der er endnu ikke konfigureret nogen AI-udbyder. Tilføj en i fanen AI-assistent.",
-    "runsInOpenTerminal": "Kører i din åbne terminalsession.",
-    "runInTerminal": "Løbe",
-    "terminalContextPrefill": "Her er mit terminaloutput:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Lad andre funktioner bruge din AI-udbyders API-nøgle til deres egne anmodninger. Nøglen kopieres aldrig, og du kan til enhver tid tilbagekalde den."
-    }
-  },
-  "nav": {
-    "ai": "AI"
-  },
-  "onboarding": {
-    "aiTitle": "AI-assistent",
-    "aiIntro": "Termix kan inkludere en valgfri AI-assistent. Du kan ændre dette senere i dine indstillinger.",
-    "aiSkipTitle": "Lad det være slukket",
-    "aiSkipDesc": "Termix fungerer som den gør nu. Assistenten forbliver skjult.",
-    "aiEnableTitle": "Tænd den",
-    "aiEnableDesc": "Tilføjer en assistent, der læser din opsætning og foreslår ændringer, du godkender. Kræver en udbyder, du angiver, f.eks. en lokal Ollama.",
-    "aiNote": "Intet sendes nogen steder, før du tilføjer en udbyder og sender en besked."
-  },
-  "hosts": {
-    "docsLink": "Se dokumenter"
-  },
-  "plugin": {
-    "name": "AI-assistent"
-  }
-}
diff --git a/plugins/ai/locales/translated/de_DE.json b/plugins/ai/locales/translated/de_DE.json
deleted file mode 100644
index 64d7da9d3..000000000
--- a/plugins/ai/locales/translated/de_DE.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Nutzen Sie den Assistenten",
-      "description": "Öffne den Assistenten und stelle ihm Fragen."
-    },
-    "manage_providers": {
-      "title": "Anbieter verwalten",
-      "description": "KI-Anbieter und ihre API-Schlüssel hinzufügen, bearbeiten und entfernen."
-    },
-    "apply_proposals": {
-      "title": "Vorschläge einreichen",
-      "description": "Lassen Sie den Assistenten die von ihm vorgeschlagenen Änderungen durchführen."
-    },
-    "services.use": {
-      "title": "Nutzen Sie KI aus anderen Funktionen",
-      "description": "Andere Funktionen rufen möglicherweise in Ihrem Namen den Assistenten auf."
-    },
-    "secrets.share": {
-      "title": "Teilen Sie den API-Schlüssel",
-      "description": "Andere Funktionen verwenden möglicherweise den gespeicherten KI-API-Schlüssel, ohne ihn anzuzeigen."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "Der KI-Assistent ist auf diesem Server deaktiviert.",
-    "providersNeedOptIn": "Aktivieren Sie den obenstehenden KI-Assistenten, um Anbieter hinzuzufügen.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "KI-Assistent",
-        "description": "Ermöglichen Sie den Nutzern, den KI-Assistenten zu aktivieren. Solange diese Option deaktiviert ist, ist der Assistent für alle ausgeblendet und gesperrt."
-      },
-      "privateEndpoints": {
-        "label": "Zulässige private KI-Hosts",
-        "description": "Hosts in Ihrem privaten Netzwerk, auf die Benutzer einen Provider verweisen können, wie z. B. ein selbst gehostetes Ollama. Fügen Sie in jede Zeile einen Host ein."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "KI-Assistent aktivieren",
-        "description": "Erlauben Sie dem KI-Assistenten, im Terminal dieses Hosts Hilfe zu leisten. Standardmäßig deaktiviert; die KI muss weiterhin für Ihr Konto aktiviert sein."
-      }
-    }
-  },
-  "ai": {
-    "title": "Assistent",
-    "send": "Schicken",
-    "stop": "Stoppen",
-    "save": "Speichern",
-    "cancel": "Abbrechen",
-    "running": "laufend",
-    "approve": "Genehmigen",
-    "reject": "Ablehnen",
-    "inputPlaceholder": "Erkundigen Sie sich nach Ihren Servern oder beschreiben Sie einen Änderungsvorschlag.",
-    "selectProvider": "Wählen Sie einen Anbieter aus",
-    "providerSettings": "Anbietereinstellungen",
-    "addProvider": "Anbieter hinzufügen",
-    "editProvider": "Anbieter bearbeiten",
-    "removeProvider": "Anbieter entfernen",
-    "providerType": "Anbieter",
-    "providerLabel": "Name",
-    "providerLabelPlaceholder": "Zum Beispiel: Lokaler Ollama",
-    "baseUrl": "Serveradresse",
-    "apiKey": "API-Schlüssel",
-    "defaultModel": "Standardmodell",
-    "defaultModelPlaceholder": "Zum Beispiel: llama3.1 oder claude-opus-5",
-    "labelRequired": "Geben Sie diesem Anbieter einen Namen",
-    "providerSaveFailed": "Der Anbieter konnte nicht gespeichert werden.",
-    "providerUpdated": "Anbieter aktualisiert",
-    "providerDeleteFailed": "Der Anbieter konnte nicht entfernt werden.",
-    "privateEndpointHint": "Adressen in Ihrem privaten Netzwerk benötigen eine vorherige Genehmigung durch einen Administrator.",
-    "providerOllama": "Ollama",
-    "providerAnthropic": "Anthropisch",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Google Gemini",
-    "providerOpenaiCompatible": "OpenAI-kompatibel",
-    "toolArguments": "Eingabe",
-    "toolResult": "Ergebnis",
-    "statusApplied": "Angewandt",
-    "statusRejected": "Abgelehnt",
-    "proposalApplied": "Änderung angewendet",
-    "proposalApplyFailed": "Die Änderung konnte nicht angewendet werden.",
-    "proposalRejectFailed": "Die Änderung konnte nicht abgelehnt werden.",
-    "enableTitle": "Aktivieren Sie den KI-Assistenten",
-    "enableDescription": "Lassen Sie den Assistenten Ihre Einstellungen lesen und Ihnen Änderungen zur Genehmigung vorschlagen.",
-    "readOnlyCommands": "Zulassen von schreibgeschützten Diagnosebefehlen",
-    "readOnlyCommandsDescription": "Der Assistent kann eine kurze Liste sicherer Befehle wie df und uptime ausführen, ohne jedes Mal nachzufragen. Alle Änderungen, die einen Server betreffen, werden immer zuerst vorgeschlagen.",
-    "modelDetectFailed": "Der Anbieter konnte nicht erreicht werden, daher handelt es sich um eine allgemeine Liste. Sie können einen beliebigen Modellnamen eingeben.",
-    "modelCustom": "Geben Sie einen Modellnamen ein",
-    "modelRefresh": "Liste aktualisieren",
-    "modelPlaceholder": "Wählen Sie ein Modell aus oder geben Sie es ein.",
-    "attachHint": "Geben Sie @ ein, um auf einen Host, ein Code-Snippet oder eine Automatisierung zu verweisen. Die Änderungen werden Ihnen zur Genehmigung vorgeschlagen.",
-    "runCommandTitle": "Befehl ausführen",
-    "assistant": "KI-Assistent",
-    "terminalPanelEmpty": "Fragen Sie den Assistenten nach diesem Gastgeber. Jede Statusänderung bedarf Ihrer vorherigen Zustimmung.",
-    "terminalPanelPlaceholder": "Erkundigen Sie sich nach diesem Gastgeber...",
-    "noProvidersConfigured": "Es ist noch kein KI-Anbieter konfiguriert. Fügen Sie einen im Tab „KI-Assistent“ hinzu.",
-    "runsInOpenTerminal": "Wird in Ihrer geöffneten Terminal-Sitzung ausgeführt.",
-    "runInTerminal": "Ausführen",
-    "terminalContextPrefill": "Hier ist meine Terminalausgabe:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Erlauben Sie anderen Funktionen, Ihren API-Schlüssel Ihres KI-Anbieters für ihre eigenen Anfragen zu verwenden. Der Schlüssel wird niemals kopiert, und Sie können diese Berechtigung jederzeit widerrufen."
-    }
-  },
-  "nav": {
-    "ai": "KI"
-  },
-  "onboarding": {
-    "aiTitle": "KI-Assistent",
-    "aiIntro": "Termix kann optional einen KI-Assistenten beinhalten. Sie können dies später in Ihren Einstellungen ändern.",
-    "aiSkipTitle": "Lass es weg",
-    "aiSkipDesc": "Termix funktioniert wie bisher. Der Assistent bleibt verborgen.",
-    "aiEnableTitle": "Schalte es ein",
-    "aiEnableDesc": "Fügt einen Assistenten hinzu, der Ihre Einstellungen analysiert und Ihnen von Ihnen genehmigte Änderungen vorschlägt. Benötigt einen von Ihnen angegebenen Anbieter, z. B. einen lokalen Ollama-Händler.",
-    "aiNote": "Es wird nichts gesendet, bis Sie einen Anbieter hinzufügen und eine Nachricht senden."
-  },
-  "hosts": {
-    "docsLink": "Dokumentation anzeigen"
-  },
-  "plugin": {
-    "name": "KI-Assistent"
-  }
-}
diff --git a/plugins/ai/locales/translated/el_GR.json b/plugins/ai/locales/translated/el_GR.json
deleted file mode 100644
index 59af26da6..000000000
--- a/plugins/ai/locales/translated/el_GR.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Χρησιμοποιήστε τον βοηθό",
-      "description": "Άνοιξε τον βοηθό και ρώτα τον πράγματα."
-    },
-    "manage_providers": {
-      "title": "Διαχείριση παρόχων",
-      "description": "Προσθήκη, επεξεργασία και κατάργηση των παρόχων τεχνητής νοημοσύνης και των κλειδιών API τους."
-    },
-    "apply_proposals": {
-      "title": "Εφαρμογή προτάσεων",
-      "description": "Αφήστε τον βοηθό να εκτελέσει τις αλλαγές που προτείνει."
-    },
-    "services.use": {
-      "title": "Χρησιμοποιήστε την Τεχνητή Νοημοσύνη από άλλες λειτουργίες",
-      "description": "Άλλες λειτουργίες ενδέχεται να καλούν τον βοηθό εκ μέρους σας."
-    },
-    "secrets.share": {
-      "title": "Κοινή χρήση του κλειδιού API",
-      "description": "Άλλες λειτουργίες ενδέχεται να χρησιμοποιούν το αποθηκευμένο κλειδί API AI χωρίς να το βλέπουν."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "Ο βοηθός τεχνητής νοημοσύνης είναι απενεργοποιημένος σε αυτόν τον διακομιστή.",
-    "providersNeedOptIn": "Ενεργοποιήστε τον βοηθό τεχνητής νοημοσύνης παραπάνω για να προσθέσετε παρόχους.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "Βοηθός Τεχνητής Νοημοσύνης",
-        "description": "Επιτρέψτε στους χρήστες να ενεργοποιήσουν τον βοηθό τεχνητής νοημοσύνης. Όσο είναι απενεργοποιημένος, ο βοηθός είναι κρυφός και αποκλεισμένος για όλους."
-      },
-      "privateEndpoints": {
-        "label": "Επιτρεπόμενοι ιδιωτικοί κεντρικοί υπολογιστές τεχνητής νοημοσύνης",
-        "description": "Κεντρικοί υπολογιστές στο ιδιωτικό σας δίκτυο στους οποίους οι χρήστες μπορούν να υποδείξουν έναν πάροχο, όπως ένα αυτο-φιλοξενούμενο Ollama. Τοποθετήστε έναν κεντρικό υπολογιστή σε κάθε γραμμή."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "Ενεργοποίηση Βοηθού Τεχνητής Νοημοσύνης",
-        "description": "Επιτρέψτε στον βοηθό τεχνητής νοημοσύνης να βοηθά στο τερματικό αυτού του κεντρικού υπολογιστή. Απενεργοποιημένο από προεπιλογή και εξακολουθεί να χρειάζεται ενεργοποιημένη την τεχνητή νοημοσύνη για τον λογαριασμό σας."
-      }
-    }
-  },
-  "ai": {
-    "title": "Βοηθός",
-    "send": "Στέλνω",
-    "stop": "Στάση",
-    "save": "Εκτός",
-    "cancel": "Ματαίωση",
-    "running": "τρέξιμο",
-    "approve": "Εγκρίνω",
-    "reject": "Απορρίπτω",
-    "inputPlaceholder": "Ρωτήστε για τους διακομιστές σας ή περιγράψτε μια αλλαγή που προτείνετε",
-    "selectProvider": "Επιλέξτε έναν πάροχο",
-    "providerSettings": "Ρυθμίσεις παρόχου",
-    "addProvider": "Προσθήκη παρόχου",
-    "editProvider": "Επεξεργασία παρόχου",
-    "removeProvider": "Κατάργηση παρόχου",
-    "providerType": "Προμηθευτής",
-    "providerLabel": "Ονομα",
-    "providerLabelPlaceholder": "Για παράδειγμα: Τοπικό Ollama",
-    "baseUrl": "Διεύθυνση διακομιστή",
-    "apiKey": "Κλειδί API",
-    "defaultModel": "Προεπιλεγμένο μοντέλο",
-    "defaultModelPlaceholder": "Για παράδειγμα: llama3.1 ή claude-opus-5",
-    "labelRequired": "Δώστε σε αυτόν τον πάροχο ένα όνομα",
-    "providerSaveFailed": "Δεν ήταν δυνατή η αποθήκευση του παρόχου",
-    "providerUpdated": "Ο πάροχος ενημερώθηκε",
-    "providerDeleteFailed": "Δεν ήταν δυνατή η κατάργηση του παρόχου",
-    "privateEndpointHint": "Οι διευθύνσεις στο ιδιωτικό σας δίκτυο χρειάζονται πρώτα έναν διαχειριστή για να επιτρέψει στον κεντρικό υπολογιστή.",
-    "providerOllama": "Ολάμα",
-    "providerAnthropic": "Ανθρώπινο",
-    "providerOpenai": "Ανοιχτή Τεχνητή Νοημοσύνη",
-    "providerGemini": "Google Gemini",
-    "providerOpenaiCompatible": "Συμβατό με OpenAI",
-    "toolArguments": "Εισαγωγή",
-    "toolResult": "Αποτέλεσμα",
-    "statusApplied": "Εφαρμοσμένος",
-    "statusRejected": "Απορρίφθηκε",
-    "proposalApplied": "Η αλλαγή εφαρμόστηκε",
-    "proposalApplyFailed": "Δεν ήταν δυνατή η εφαρμογή της αλλαγής",
-    "proposalRejectFailed": "Δεν ήταν δυνατή η απόρριψη της αλλαγής",
-    "enableTitle": "Ενεργοποίηση του βοηθού τεχνητής νοημοσύνης",
-    "enableDescription": "Αφήστε τον βοηθό να διαβάσει τη ρύθμισή σας και να σας προτείνει αλλαγές για έγκριση.",
-    "readOnlyCommands": "Να επιτρέπονται διαγνωστικές εντολές μόνο για ανάγνωση",
-    "readOnlyCommandsDescription": "Ο βοηθός μπορεί να εκτελέσει μια σύντομη λίστα ασφαλών εντολών όπως df και uptime χωρίς να ρωτάει κάθε φορά. Οτιδήποτε αλλάζει έναν διακομιστή προτείνεται πάντα πρώτο.",
-    "modelDetectFailed": "Δεν ήταν δυνατή η επικοινωνία με τον πάροχο, επομένως αυτή είναι μια γενική λίστα. Μπορείτε να πληκτρολογήσετε οποιοδήποτε όνομα μοντέλου.",
-    "modelCustom": "Εισαγάγετε ένα όνομα μοντέλου",
-    "modelRefresh": "Ανανέωση λίστας",
-    "modelPlaceholder": "Επιλέξτε ή πληκτρολογήστε ένα μοντέλο",
-    "attachHint": "Πληκτρολογήστε @ για να αναφέρετε έναν κεντρικό υπολογιστή, ένα απόσπασμα κώδικα ή έναν αυτοματισμό. Προτείνονται αλλαγές για έγκριση.",
-    "runCommandTitle": "Εκτέλεση εντολής",
-    "assistant": "Βοηθός Τεχνητής Νοημοσύνης",
-    "terminalPanelEmpty": "Ρωτήστε τον βοηθό σχετικά με αυτόν τον οικοδεσπότη. Οτιδήποτε αλλάζει κατάσταση χρειάζεται πρώτα την έγκρισή σας.",
-    "terminalPanelPlaceholder": "Ρωτήστε για αυτόν τον οικοδεσπότη...",
-    "noProvidersConfigured": "Δεν έχει διαμορφωθεί ακόμη πάροχος τεχνητής νοημοσύνης. Προσθέστε έναν στην καρτέλα βοηθού τεχνητής νοημοσύνης.",
-    "runsInOpenTerminal": "Εκτελείται στην ανοιχτή συνεδρία τερματικού σας.",
-    "runInTerminal": "Τρέξιμο",
-    "terminalContextPrefill": "Εδώ είναι η έξοδος του τερματικού μου:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Επιτρέψτε σε άλλες λειτουργίες να χρησιμοποιούν το κλειδί API του παρόχου τεχνητής νοημοσύνης για τα δικά τους αιτήματα. Το κλειδί δεν αντιγράφεται ποτέ και μπορείτε να το ανακαλέσετε ανά πάσα στιγμή."
-    }
-  },
-  "nav": {
-    "ai": "Όλα συμπεριλαμβάνονται"
-  },
-  "onboarding": {
-    "aiTitle": "Βοηθός Τεχνητής Νοημοσύνης",
-    "aiIntro": "Το Termix μπορεί να περιλαμβάνει έναν προαιρετικό βοηθό τεχνητής νοημοσύνης. Μπορείτε να το αλλάξετε αυτό αργότερα στις ρυθμίσεις σας.",
-    "aiSkipTitle": "Αφήστε το μακριά",
-    "aiSkipDesc": "Το Termix λειτουργεί όπως τώρα. Ο βοηθός παραμένει κρυφός.",
-    "aiEnableTitle": "Ενεργοποίησέ το",
-    "aiEnableDesc": "Προσθέτει έναν βοηθό που διαβάζει τη ρύθμισή σας και προτείνει αλλαγές που εγκρίνετε. Χρειάζεται έναν πάροχο που παρέχετε, όπως ένα τοπικό Ollama.",
-    "aiNote": "Τίποτα δεν αποστέλλεται πουθενά μέχρι να προσθέσετε έναν πάροχο και να στείλετε ένα μήνυμα."
-  },
-  "hosts": {
-    "docsLink": "Προβολή εγγράφων"
-  },
-  "plugin": {
-    "name": "Βοηθός Τεχνητής Νοημοσύνης"
-  }
-}
diff --git a/plugins/ai/locales/translated/es_ES.json b/plugins/ai/locales/translated/es_ES.json
deleted file mode 100644
index 453a1dbfd..000000000
--- a/plugins/ai/locales/translated/es_ES.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Utilice el asistente",
-      "description": "Abre el asistente y hazle preguntas."
-    },
-    "manage_providers": {
-      "title": "Gestionar proveedores",
-      "description": "Agregue, edite y elimine los proveedores de IA y sus claves API."
-    },
-    "apply_proposals": {
-      "title": "Presentar propuestas",
-      "description": "Deja que el asistente realice los cambios que sugiere."
-    },
-    "services.use": {
-      "title": "Utilizar la IA de otras funciones",
-      "description": "Otras funciones pueden llamar al asistente en tu nombre."
-    },
-    "secrets.share": {
-      "title": "Comparta la clave API",
-      "description": "Es posible que otras funciones utilicen la clave API de IA almacenada sin tenerla en cuenta."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "El asistente de IA está desactivado en este servidor.",
-    "providersNeedOptIn": "Activa el asistente de IA que aparece arriba para añadir proveedores.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "Asistente de IA",
-        "description": "Permita que los usuarios activen el asistente de IA. Mientras esté desactivado, el asistente permanecerá oculto y bloqueado para todos."
-      },
-      "privateEndpoints": {
-        "label": "Hosts de IA privados permitidos",
-        "description": "Hosts en tu red privada a los que los usuarios pueden dirigir un proveedor, como por ejemplo un servidor Ollama autogestionado. Coloca un host en cada línea."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "Habilitar el asistente de IA",
-        "description": "Permite que el asistente de IA te ayude en la terminal de este host. Está desactivado por defecto y aún así necesitas tener la IA habilitada para tu cuenta."
-      }
-    }
-  },
-  "ai": {
-    "title": "Asistente",
-    "send": "Enviar",
-    "stop": "Parada",
-    "save": "Guardar",
-    "cancel": "Cancelar",
-    "running": "en ejecución",
-    "approve": "Aprobar",
-    "reject": "Rechazar",
-    "inputPlaceholder": "Pregunte sobre sus servidores o describa un cambio para proponer.",
-    "selectProvider": "Seleccione un proveedor",
-    "providerSettings": "Configuración del proveedor",
-    "addProvider": "Agregar proveedor",
-    "editProvider": "Editar proveedor",
-    "removeProvider": "Eliminar proveedor",
-    "providerType": "Proveedor",
-    "providerLabel": "Nombre",
-    "providerLabelPlaceholder": "Por ejemplo: Ollama local",
-    "baseUrl": "Dirección del servidor",
-    "apiKey": "clave API",
-    "defaultModel": "Modelo predeterminado",
-    "defaultModelPlaceholder": "Por ejemplo: llama3.1 o claude-opus-5",
-    "labelRequired": "Dale un nombre a este proveedor.",
-    "providerSaveFailed": "No se pudo guardar el proveedor",
-    "providerUpdated": "Proveedor actualizado",
-    "providerDeleteFailed": "No se pudo eliminar al proveedor.",
-    "privateEndpointHint": "Las direcciones de su red privada necesitan que un administrador autorice el acceso al host previamente.",
-    "providerOllama": "Ollama",
-    "providerAnthropic": "Antrópico",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Google Gemini",
-    "providerOpenaiCompatible": "Compatible con OpenAI",
-    "toolArguments": "Entrada",
-    "toolResult": "Resultado",
-    "statusApplied": "Aplicado",
-    "statusRejected": "Rechazado",
-    "proposalApplied": "Cambio aplicado",
-    "proposalApplyFailed": "No se pudo aplicar el cambio.",
-    "proposalRejectFailed": "No se pudo rechazar el cambio",
-    "enableTitle": "Habilitar el asistente de IA",
-    "enableDescription": "Deja que el asistente lea tu configuración y te sugiera cambios para que los apruebes.",
-    "readOnlyCommands": "Permitir comandos de diagnóstico de solo lectura",
-    "readOnlyCommandsDescription": "El asistente puede ejecutar una breve lista de comandos seguros, como df y uptime, sin preguntar cada vez. Cualquier cambio que afecte al servidor siempre se propone primero.",
-    "modelDetectFailed": "No se pudo contactar con el proveedor, por lo que esta es una lista general. Puede escribir cualquier nombre de modelo.",
-    "modelCustom": "Introduzca un nombre de modelo",
-    "modelRefresh": "Actualizar lista",
-    "modelPlaceholder": "Seleccione o escriba un modelo.",
-    "attachHint": "Escribe @ para hacer referencia a un host, fragmento de código o automatización. Se proponen cambios para su aprobación.",
-    "runCommandTitle": "Ejecutar comando",
-    "assistant": "Asistente de IA",
-    "terminalPanelEmpty": "Consulta con el asistente sobre este anfitrión. Cualquier cambio de estado requiere tu aprobación previa.",
-    "terminalPanelPlaceholder": "Pregunta por este anfitrión...",
-    "noProvidersConfigured": "Aún no hay ningún proveedor de IA configurado. Añada uno en la pestaña del asistente de IA.",
-    "runsInOpenTerminal": "Se ejecuta en tu sesión de terminal abierta.",
-    "runInTerminal": "Ejecutar",
-    "terminalContextPrefill": "Aquí está la salida de mi terminal:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Permite que otras funciones utilicen la clave API de tu proveedor de IA para sus propias solicitudes. La clave nunca se copia y puedes revocarla en cualquier momento."
-    }
-  },
-  "nav": {
-    "ai": "AI"
-  },
-  "onboarding": {
-    "aiTitle": "Asistente de IA",
-    "aiIntro": "Termix puede incluir un asistente de IA opcional. Puedes cambiar esto más adelante en la configuración.",
-    "aiSkipTitle": "Déjalo apagado",
-    "aiSkipDesc": "Termix funciona como hasta ahora. El asistente permanece oculto.",
-    "aiEnableTitle": "Enciéndelo",
-    "aiEnableDesc": "Agrega un asistente que lee tu configuración y sugiere cambios que apruebas. Requiere un proveedor que tú proporciones, como un Ollama local.",
-    "aiNote": "No se envía nada a ningún sitio hasta que añadas un proveedor y envíes un mensaje."
-  },
-  "hosts": {
-    "docsLink": "Ver documentación"
-  },
-  "plugin": {
-    "name": "Asistente de IA"
-  }
-}
diff --git a/plugins/ai/locales/translated/fi_FI.json b/plugins/ai/locales/translated/fi_FI.json
deleted file mode 100644
index 0628993ad..000000000
--- a/plugins/ai/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Käytä avustajaa",
-      "description": "Avaa avustaja ja kysy siltä asioita."
-    },
-    "manage_providers": {
-      "title": "Hallinnoi palveluntarjoajia",
-      "description": "Lisää, muokkaa ja poista tekoälypalveluntarjoajia ja niiden API-avaimia."
-    },
-    "apply_proposals": {
-      "title": "Käytä ehdotuksia",
-      "description": "Anna avustajan suorittaa ehdottamansa muutokset."
-    },
-    "services.use": {
-      "title": "Käytä tekoälyä muista ominaisuuksista",
-      "description": "Muut ominaisuudet saattavat soittaa avustajalle puolestasi."
-    },
-    "secrets.share": {
-      "title": "Jaa API-avain",
-      "description": "Muut ominaisuudet saattavat käyttää tallennettua tekoälyn API-avainta näkemättä sitä."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "Tekoälyavustaja on pois päältä tällä palvelimella.",
-    "providersNeedOptIn": "Ota yllä oleva tekoälyavustaja käyttöön lisätäksesi palveluntarjoajia.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "Tekoälyavustaja",
-        "description": "Salli käyttäjien ottaa tekoälyavustaja käyttöön. Kun tämä on pois päältä, avustaja on piilotettu ja estetty kaikilta."
-      },
-      "privateEndpoints": {
-        "label": "Sallitut yksityiset tekoälyisännät",
-        "description": "Yksityisen verkon isännät, joihin käyttäjät voivat ohjata palveluntarjoajan, kuten itse isännöity Ollama. Aseta yksi isäntä kullekin riville."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "Ota tekoälyavustaja käyttöön",
-        "description": "Salli tekoälyavustaja auttaa tämän isännän terminaalissa. Oletusarvoisesti pois päältä, mutta tekoälyn on silti oltava käytössä tililläsi."
-      }
-    }
-  },
-  "ai": {
-    "title": "Assistentti",
-    "send": "Lähetä",
-    "stop": "Stop",
-    "save": "Tallentaa",
-    "cancel": "Peruuttaa",
-    "running": "juokseminen",
-    "approve": "Hyväksyä",
-    "reject": "Hylätä",
-    "inputPlaceholder": "Kysy tarjoilijoistasi tai kuvaile ehdottamaasi muutosta",
-    "selectProvider": "Valitse palveluntarjoaja",
-    "providerSettings": "Palveluntarjoajan asetukset",
-    "addProvider": "Lisää palveluntarjoaja",
-    "editProvider": "Muokkaa palveluntarjoajaa",
-    "removeProvider": "Poista palveluntarjoaja",
-    "providerType": "Palveluntarjoaja",
-    "providerLabel": "Nimi",
-    "providerLabelPlaceholder": "Esimerkiksi: Paikallinen Ollama",
-    "baseUrl": "Palvelimen osoite",
-    "apiKey": "API-avain",
-    "defaultModel": "Oletusmalli",
-    "defaultModelPlaceholder": "Esimerkiksi: llama3.1 tai claude-opus-5",
-    "labelRequired": "Anna tälle palveluntarjoajalle nimi",
-    "providerSaveFailed": "Palveluntarjoajaa ei voitu tallentaa",
-    "providerUpdated": "Palveluntarjoaja päivitetty",
-    "providerDeleteFailed": "Palveluntarjoajaa ei voitu poistaa",
-    "privateEndpointHint": "Yksityisen verkon osoitteiden ylläpitäjän on ensin sallittava isäntä.",
-    "providerOllama": "Ollama",
-    "providerAnthropic": "Antrooppinen",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Google Gemini",
-    "providerOpenaiCompatible": "OpenAI-yhteensopiva",
-    "toolArguments": "Syöttö",
-    "toolResult": "Tulos",
-    "statusApplied": "Käytetty",
-    "statusRejected": "Hylätty",
-    "proposalApplied": "Muutos otettu käyttöön",
-    "proposalApplyFailed": "Muutosta ei voitu ottaa käyttöön",
-    "proposalRejectFailed": "Muutosta ei voitu hylätä",
-    "enableTitle": "Ota tekoälyavustaja käyttöön",
-    "enableDescription": "Anna avustajan lukea asetuksesi ja ehdottaa muutoksia hyväksyttäväksi.",
-    "readOnlyCommands": "Salli vain luettavat diagnostiikkakomennot",
-    "readOnlyCommandsDescription": "Assistantti voi suorittaa lyhyen listan turvallisia komentoja, kuten df ja uptime, kysymättä joka kerta. Kaikki palvelinta muuttavat ehdotukset esitetään aina ensin.",
-    "modelDetectFailed": "Palveluntarjoajaan ei saatu yhteyttä, joten tämä on yleisluettelo. Voit kirjoittaa minkä tahansa mallin nimen.",
-    "modelCustom": "Anna mallin nimi",
-    "modelRefresh": "Päivitä lista",
-    "modelPlaceholder": "Valitse tai kirjoita malli",
-    "attachHint": "Kirjoita @ viitataksesi isäntään, koodinpätkään tai automaatioon. Muutoksia ehdotetaan hyväksyttäväksi.",
-    "runCommandTitle": "Suorita komento",
-    "assistant": "Tekoälyavustaja",
-    "terminalPanelEmpty": "Kysy avustajalta tästä majoittajasta. Kaikki osavaltion muutokset vaativat ensin hyväksyntäsi.",
-    "terminalPanelPlaceholder": "Kysy tästä isännöitsijästä...",
-    "noProvidersConfigured": "Tekoälypalveluntarjoajaa ei ole vielä määritetty. Lisää sellainen tekoälyavustaja-välilehdellä.",
-    "runsInOpenTerminal": "Suoritetaan avoimessa pääteistunnossa.",
-    "runInTerminal": "Juokse",
-    "terminalContextPrefill": "Tässä on päätteen tuloste:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Anna muiden ominaisuuksien käyttää tekoälypalveluntarjoajasi API-avainta omiin pyyntöihinsä. Avainta ei koskaan kopioida, ja voit peruuttaa tämän milloin tahansa."
-    }
-  },
-  "nav": {
-    "ai": "Tekoäly"
-  },
-  "onboarding": {
-    "aiTitle": "Tekoälyavustaja",
-    "aiIntro": "Termix voi sisältää valinnaisen tekoälyavustaja. Voit muuttaa tätä myöhemmin asetuksissasi.",
-    "aiSkipTitle": "Jätä se pois",
-    "aiSkipDesc": "Termix toimii kuten nytkin. Avustaja pysyy piilossa.",
-    "aiEnableTitle": "Käynnistä se",
-    "aiEnableDesc": "Lisää avustajan, joka lukee asetuksesi ja ehdottaa hyväksymiäsi muutoksia. Edellyttää toimittamaasi palveluntarjoajaa, kuten paikallisen Ollaman.",
-    "aiNote": "Mitään ei lähetetä mihinkään ennen kuin lisäät palveluntarjoajan ja lähetät viestin."
-  },
-  "hosts": {
-    "docsLink": "Näytä dokumentit"
-  },
-  "plugin": {
-    "name": "Tekoälyavustaja"
-  }
-}
diff --git a/plugins/ai/locales/translated/fr_FR.json b/plugins/ai/locales/translated/fr_FR.json
deleted file mode 100644
index 918243569..000000000
--- a/plugins/ai/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Utilisez l'assistant",
-      "description": "Ouvrez l'assistant et posez-lui des questions."
-    },
-    "manage_providers": {
-      "title": "Gérer les fournisseurs",
-      "description": "Ajoutez, modifiez et supprimez les fournisseurs d'IA et leurs clés API."
-    },
-    "apply_proposals": {
-      "title": "Soumettre les propositions",
-      "description": "Laissez l'assistant effectuer les modifications qu'il suggère."
-    },
-    "services.use": {
-      "title": "Utiliser l'IA d'autres fonctionnalités",
-      "description": "D'autres fonctionnalités peuvent appeler l'assistant en votre nom."
-    },
-    "secrets.share": {
-      "title": "Partagez la clé API",
-      "description": "D'autres fonctionnalités peuvent utiliser la clé API IA stockée sans la voir."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "L'assistant IA est désactivé sur ce serveur.",
-    "providersNeedOptIn": "Activez l'assistant IA ci-dessus pour ajouter des fournisseurs.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "Assistant IA",
-        "description": "Autoriser les utilisateurs à activer l'assistant IA. Lorsqu'il est désactivé, l'assistant est masqué et inaccessible à tous."
-      },
-      "privateEndpoints": {
-        "label": "Hôtes d'IA privés autorisés",
-        "description": "Sur votre réseau privé, configurez des hôtes vers lesquels les utilisateurs peuvent orienter un fournisseur, comme un serveur Ollama auto-hébergé. Placez un hôte sur chaque ligne."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "Activer l'assistant IA",
-        "description": "Autoriser l'assistant IA à vous aider dans le terminal de cet hôte. Désactivé par défaut ; l'IA doit être activée pour votre compte."
-      }
-    }
-  },
-  "ai": {
-    "title": "Assistant",
-    "send": "Envoyer",
-    "stop": "Stop",
-    "save": "Enregistrer",
-    "cancel": "Annuler",
-    "running": "en cours",
-    "approve": "Approuver",
-    "reject": "Rejeter",
-    "inputPlaceholder": "Renseignez-vous sur vos serveurs ou décrivez un changement à proposer.",
-    "selectProvider": "Sélectionnez un fournisseur",
-    "providerSettings": "Paramètres du fournisseur",
-    "addProvider": "Ajouter un fournisseur",
-    "editProvider": "Modifier le fournisseur",
-    "removeProvider": "Supprimer le fournisseur",
-    "providerType": "Fournisseur",
-    "providerLabel": "Nom",
-    "providerLabelPlaceholder": "Par exemple : Ollama local",
-    "baseUrl": "Adresse du serveur",
-    "apiKey": "Clé API",
-    "defaultModel": "Modèle par défaut",
-    "defaultModelPlaceholder": "Par exemple : llama3.1 ou claude-opus-5",
-    "labelRequired": "Donnez un nom à ce fournisseur",
-    "providerSaveFailed": "Impossible de sauver le fournisseur",
-    "providerUpdated": "Mise à jour du fournisseur",
-    "providerDeleteFailed": "Impossible de supprimer le fournisseur",
-    "privateEndpointHint": "Les adresses de votre réseau privé nécessitent l'autorisation préalable d'un administrateur pour accéder à l'hôte.",
-    "providerOllama": "Ollama",
-    "providerAnthropic": "Anthropique",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Google Gemini",
-    "providerOpenaiCompatible": "Compatible avec OpenAI",
-    "toolArguments": "Entrée",
-    "toolResult": "Résultat",
-    "statusApplied": "Appliqué",
-    "statusRejected": "Rejeté",
-    "proposalApplied": "Changement appliqué",
-    "proposalApplyFailed": "Impossible d'appliquer la modification",
-    "proposalRejectFailed": "Impossible de refuser la modification",
-    "enableTitle": "Activer l'assistant IA",
-    "enableDescription": "Laissez l'assistant analyser votre configuration et vous suggérer des modifications à approuver.",
-    "readOnlyCommands": "Autoriser les commandes de diagnostic en lecture seule",
-    "readOnlyCommandsDescription": "L'assistant peut exécuter une courte liste de commandes sûres, comme `df` et `uptime`, sans demander l'autorisation à chaque fois. Toute modification apportée au serveur est toujours proposée au préalable.",
-    "modelDetectFailed": "Impossible de joindre le fournisseur ; voici donc une liste générale. Vous pouvez saisir n’importe quel nom de modèle.",
-    "modelCustom": "Saisissez le nom du modèle",
-    "modelRefresh": "Actualiser la liste",
-    "modelPlaceholder": "Choisissez ou saisissez un modèle",
-    "attachHint": "Saisissez @ pour faire référence à un hôte, un extrait de code ou une automatisation. Les modifications proposées doivent être approuvées.",
-    "runCommandTitle": "Exécuter la commande",
-    "assistant": "Assistant IA",
-    "terminalPanelEmpty": "Renseignez-vous auprès de l'assistant concernant cet hôte. Tout changement d'état nécessite votre approbation préalable.",
-    "terminalPanelPlaceholder": "Renseignez-vous sur cet hôte...",
-    "noProvidersConfigured": "Aucun fournisseur d'IA n'est encore configuré. Ajoutez-en un dans l'onglet Assistant IA.",
-    "runsInOpenTerminal": "S'exécute dans votre session de terminal ouverte.",
-    "runInTerminal": "Exécuter",
-    "terminalContextPrefill": "Voici la sortie de mon terminal :\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Autorisez d'autres fonctionnalités à utiliser votre clé API de fournisseur d'IA pour leurs propres requêtes. Cette clé n'est jamais copiée et vous pouvez la révoquer à tout moment."
-    }
-  },
-  "nav": {
-    "ai": "IA"
-  },
-  "onboarding": {
-    "aiTitle": "Assistant IA",
-    "aiIntro": "Termix peut inclure un assistant IA optionnel. Vous pouvez modifier ce paramètre ultérieurement.",
-    "aiSkipTitle": "Laissez-le de côté",
-    "aiSkipDesc": "Termix fonctionne comme actuellement. L'assistant reste caché.",
-    "aiEnableTitle": "Allumez-le",
-    "aiEnableDesc": "Ajoute un assistant qui analyse votre configuration et suggère des modifications que vous approuvez. Nécessite un fournisseur que vous désignez, comme un Ollama local.",
-    "aiNote": "Aucun message n'est envoyé tant que vous n'avez pas ajouté de fournisseur et envoyé un message."
-  },
-  "hosts": {
-    "docsLink": "Voir la documentation"
-  },
-  "plugin": {
-    "name": "Assistant IA"
-  }
-}
diff --git a/plugins/ai/locales/translated/he_IL.json b/plugins/ai/locales/translated/he_IL.json
deleted file mode 100644
index c9115be79..000000000
--- a/plugins/ai/locales/translated/he_IL.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "השתמש בעוזר",
-      "description": "פתח את העוזר ושאל אותו דברים."
-    },
-    "manage_providers": {
-      "title": "ניהול ספקים",
-      "description": "הוספה, עריכה והסרה של ספקי הבינה המלאכותית ואת מפתחות ה-API שלהם."
-    },
-    "apply_proposals": {
-      "title": "החלת הצעות",
-      "description": "תן לעוזר לבצע את השינויים שהוא מציע."
-    },
-    "services.use": {
-      "title": "השתמש בבינה מלאכותית מתכונות אחרות",
-      "description": "ייתכן שתכונות אחרות יתקשרו לעוזר בשמך."
-    },
-    "secrets.share": {
-      "title": "שתף את מפתח ה-API",
-      "description": "תכונות אחרות עשויות להשתמש במפתח ה-API של בינה מלאכותית המאוחסן מבלי לראות אותו."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "עוזר הבינה המלאכותית כבוי בשרת הזה.",
-    "providersNeedOptIn": "הפעל את עוזר הבינה המלאכותית למעלה כדי להוסיף ספקים.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "עוזר בינה מלאכותית",
-        "description": "אפשר למשתמשים להפעיל את עוזר הבינה המלאכותית. כאשר זה כבוי, העוזר מוסתר וחסום עבור כולם."
-      },
-      "privateEndpoints": {
-        "label": "מארחים פרטיים של בינה מלאכותית מורשים",
-        "description": "מארחים ברשת הפרטית שלך שמשתמשים יכולים להפנות אליהם ספק, כגון Ollama המאוחסן בעצמו. שים מארח אחד בכל שורה."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "הפעל את עוזר הבינה המלאכותית",
-        "description": "אפשר לעוזר הבינה המלאכותית לסייע במסוף של מארח זה. כבוי כברירת מחדל, ועדיין נדרשת הפעלת בינה מלאכותית עבור חשבונך."
-      }
-    }
-  },
-  "ai": {
-    "title": "עוֹזֵר",
-    "send": "לִשְׁלוֹחַ",
-    "stop": "לְהַפְסִיק",
-    "save": "לְהַצִיל",
-    "cancel": "לְבַטֵל",
-    "running": "רִיצָה",
-    "approve": "לְאַשֵׁר",
-    "reject": "לִדחוֹת",
-    "inputPlaceholder": "שאל לגבי המלצרים שלך, או תאר שינוי להציע",
-    "selectProvider": "בחר ספק",
-    "providerSettings": "הגדרות ספק",
-    "addProvider": "הוסף ספק",
-    "editProvider": "עריכת ספק",
-    "removeProvider": "הסר ספק",
-    "providerType": "ספק",
-    "providerLabel": "שֵׁם",
-    "providerLabelPlaceholder": "לדוגמה: אולמה מקומית",
-    "baseUrl": "כתובת השרת",
-    "apiKey": "מפתח API",
-    "defaultModel": "מודל ברירת מחדל",
-    "defaultModelPlaceholder": "לדוגמה: llama3.1 או claude-opus-5",
-    "labelRequired": "תן שם לספק הזה",
-    "providerSaveFailed": "לא ניתן היה לשמור את הספק",
-    "providerUpdated": "הספק עודכן",
-    "providerDeleteFailed": "לא ניתן היה להסיר את הספק",
-    "privateEndpointHint": "כתובות ברשת הפרטית שלך דורשות תחילה אישור ממנהל מערכת למארח.",
-    "providerOllama": "אולמה",
-    "providerAnthropic": "אנתרופי",
-    "providerOpenai": "בינה מלאכותית פתוחה",
-    "providerGemini": "גוגל ג'מיני",
-    "providerOpenaiCompatible": "תואם ל-OpenAI",
-    "toolArguments": "קֶלֶט",
-    "toolResult": "תוֹצָאָה",
-    "statusApplied": "יישומי",
-    "statusRejected": "נִדחֶה",
-    "proposalApplied": "השינוי הוחל",
-    "proposalApplyFailed": "לא ניתן היה להחיל את השינוי",
-    "proposalRejectFailed": "לא ניתן היה לדחות את השינוי",
-    "enableTitle": "הפעל את עוזר הבינה המלאכותית",
-    "enableDescription": "תן לעוזר לקרוא את ההגדרות שלך ולהציע שינויים לאישור.",
-    "readOnlyCommands": "אפשר פקודות אבחון לקריאה בלבד",
-    "readOnlyCommandsDescription": "העוזר יכול להריץ רשימה קצרה של פקודות בטוחות כמו df ו-uptime מבלי לשאול בכל פעם. כל דבר שמשנה שרת תמיד מוצע ראשון.",
-    "modelDetectFailed": "לא ניתן היה להגיע לספק, לכן זוהי רשימה כללית. ניתן להקליד כל שם דגם.",
-    "modelCustom": "הזן שם דגם",
-    "modelRefresh": "רענון הרשימה",
-    "modelPlaceholder": "בחר או הקלד מודל",
-    "attachHint": "הקלד @ כדי להפנות למארח, קטע טקסט או אוטומציה. שינויים מוצעים לאישורך.",
-    "runCommandTitle": "הפעלה של הפקודה",
-    "assistant": "עוזר בינה מלאכותית",
-    "terminalPanelEmpty": "שאל את העוזר לגבי המארח הזה. כל שינוי במצב דורש תחילה את אישורך.",
-    "terminalPanelPlaceholder": "שאל על המארח הזה...",
-    "noProvidersConfigured": "עדיין לא הוגדר ספק בינה מלאכותית. הוסף אחד בכרטיסייה עוזר בינה מלאכותית.",
-    "runsInOpenTerminal": "פועל בסשן הטרמינל הפתוח שלך.",
-    "runInTerminal": "לָרוּץ",
-    "terminalContextPrefill": "הנה פלט הטרמינל שלי:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "אפשרו לתכונות אחרות להשתמש במפתח ה-API של ספק הבינה המלאכותית שלכם עבור בקשות משלהן. המפתח לעולם לא יועתק, ותוכלו לבטל אותו בכל עת."
-    }
-  },
-  "nav": {
-    "ai": "בינה מלאכותית"
-  },
-  "onboarding": {
-    "aiTitle": "עוזר בינה מלאכותית",
-    "aiIntro": "טרמיקס יכול לכלול עוזר בינה מלאכותית אופציונלי. ניתן לשנות זאת מאוחר יותר בהגדרות.",
-    "aiSkipTitle": "תעזוב את זה",
-    "aiSkipDesc": "טרמיקס עובד כמו שהוא עובד עכשיו. העוזר נשאר מוסתר.",
-    "aiEnableTitle": "הפעל אותו",
-    "aiEnableDesc": "מוסיף עוזר שקורא את ההגדרות שלך ומציע שינויים שאתה מאשר. נדרש ספק שאתה מספק, כגון אולמה מקומי.",
-    "aiNote": "שום דבר לא נשלח לשום מקום עד שתוסיף ספק ותשלח הודעה."
-  },
-  "hosts": {
-    "docsLink": "הצג מסמכים"
-  },
-  "plugin": {
-    "name": "עוזר בינה מלאכותית"
-  }
-}
diff --git a/plugins/ai/locales/translated/hi_IN.json b/plugins/ai/locales/translated/hi_IN.json
deleted file mode 100644
index d0dba6ef6..000000000
--- a/plugins/ai/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "सहायक का उपयोग करें",
-      "description": "असिस्टेंट खोलें और उससे सवाल पूछें।"
-    },
-    "manage_providers": {
-      "title": "प्रदाताओं का प्रबंधन करें",
-      "description": "एआई प्रदाताओं और उनकी एपीआई कुंजियों को जोड़ें, संपादित करें और हटाएं।"
-    },
-    "apply_proposals": {
-      "title": "प्रस्ताव लागू करें",
-      "description": "सहायक को उसके द्वारा सुझाए गए बदलावों को लागू करने दें।"
-    },
-    "services.use": {
-      "title": "अन्य सुविधाओं से एआई का उपयोग करें",
-      "description": "अन्य सुविधाएं आपकी ओर से असिस्टेंट को कॉल कर सकती हैं।"
-    },
-    "secrets.share": {
-      "title": "एपीआई कुंजी साझा करें",
-      "description": "अन्य सुविधाएं संग्रहीत एआई एपीआई कुंजी का उपयोग उसे देखे बिना भी कर सकती हैं।"
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "इस सर्वर पर एआई असिस्टेंट बंद है।",
-    "providersNeedOptIn": "प्रदाताओं को जोड़ने के लिए ऊपर दिए गए एआई सहायक को चालू करें।",
-    "admin": {
-      "globallyEnabled": {
-        "label": "एआई सहायक",
-        "description": "उपयोगकर्ताओं को एआई सहायक चालू करने की अनुमति दें। जब यह बंद होगा, तो सहायक सभी के लिए छिपा हुआ और अवरुद्ध रहेगा।"
-      },
-      "privateEndpoints": {
-        "label": "निजी एआई होस्ट की अनुमति दी गई",
-        "description": "आपके निजी नेटवर्क पर मौजूद होस्ट, जिन्हें उपयोगकर्ता किसी प्रदाता से जोड़ सकते हैं, जैसे कि स्व-होस्टेड ओलामा। प्रत्येक पंक्ति में एक होस्ट रखें।"
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "एआई असिस्टेंट को सक्षम करें",
-        "description": "इस होस्ट के टर्मिनल में एआई सहायक को मदद करने की अनुमति दें। यह डिफ़ॉल्ट रूप से बंद है, लेकिन आपके खाते के लिए एआई को सक्षम करना आवश्यक है।"
-      }
-    }
-  },
-  "ai": {
-    "title": "सहायक",
-    "send": "भेजना",
-    "stop": "स्टॉप",
-    "save": "सहेजें",
-    "cancel": "रद्द करें",
-    "running": "चल रहे",
-    "approve": "मंज़ूरी देना",
-    "reject": "अस्वीकार करना",
-    "inputPlaceholder": "अपने सर्वरों के बारे में पूछें, या प्रस्तावित परिवर्तन का वर्णन करें।",
-    "selectProvider": "एक प्रदाता का चयन करें",
-    "providerSettings": "प्रदाता सेटिंग्स",
-    "addProvider": "प्रदाता जोड़ें",
-    "editProvider": "प्रदाता संपादित करें",
-    "removeProvider": "प्रदाता को हटाएँ",
-    "providerType": "प्रदाता",
-    "providerLabel": "नाम",
-    "providerLabelPlaceholder": "उदाहरण के लिए: स्थानीय ओलामा",
-    "baseUrl": "सर्वर पता",
-    "apiKey": "एपीआई कुंजी",
-    "defaultModel": "डिफ़ॉल्ट मॉडल",
-    "defaultModelPlaceholder": "उदाहरण के लिए: llama3.1 या claude-opus-5",
-    "labelRequired": "इस प्रदाता को एक नाम दें",
-    "providerSaveFailed": "प्रदाता को बचाया नहीं जा सका",
-    "providerUpdated": "प्रदाता ने अपडेट किया",
-    "providerDeleteFailed": "प्रदाता को हटाया नहीं जा सका",
-    "privateEndpointHint": "आपके निजी नेटवर्क पर मौजूद पतों के लिए पहले एक प्रशासक द्वारा होस्ट को अनुमति देना आवश्यक है।",
-    "providerOllama": "ओलामा",
-    "providerAnthropic": "anthropic",
-    "providerOpenai": "ओपनएआई",
-    "providerGemini": "गूगल जेमिनी",
-    "providerOpenaiCompatible": "OpenAI संगत",
-    "toolArguments": "इनपुट",
-    "toolResult": "परिणाम",
-    "statusApplied": "लागू किया गया",
-    "statusRejected": "अस्वीकार कर दिया",
-    "proposalApplied": "परिवर्तन लागू हो गया",
-    "proposalApplyFailed": "परिवर्तन लागू नहीं हो सका",
-    "proposalRejectFailed": "परिवर्तन को अस्वीकार नहीं किया जा सका",
-    "enableTitle": "एआई सहायक को सक्रिय करें",
-    "enableDescription": "सहायक को आपकी सेटअप प्रक्रिया पढ़ने दें और वह आपके अनुमोदन के लिए परिवर्तन सुझाएगा।",
-    "readOnlyCommands": "केवल पढ़ने योग्य डायग्नोस्टिक कमांड की अनुमति दें",
-    "readOnlyCommandsDescription": "सहायक बिना पूछे ही df और uptime जैसे कुछ सुरक्षित कमांड चला सकता है। सर्वर में कोई भी बदलाव करने का प्रस्ताव हमेशा पहले दिया जाता है।",
-    "modelDetectFailed": "प्रदाता से संपर्क नहीं हो सका, इसलिए यह एक सामान्य सूची है। आप किसी भी मॉडल का नाम टाइप कर सकते हैं।",
-    "modelCustom": "मॉडल का नाम दर्ज करें",
-    "modelRefresh": "सूची रीफ़्रेश करें",
-    "modelPlaceholder": "कोई मॉडल चुनें या टाइप करें",
-    "attachHint": "किसी होस्ट, स्निपेट या ऑटोमेशन को संदर्भित करने के लिए @ टाइप करें। आपके अनुमोदन के लिए परिवर्तन प्रस्तावित किए जा रहे हैं।",
-    "runCommandTitle": "कमांड चलाएँ",
-    "assistant": "एआई सहायक",
-    "terminalPanelEmpty": "इस होस्ट के बारे में असिस्टेंट से पूछें। किसी भी स्थिति में बदलाव के लिए पहले आपकी स्वीकृति आवश्यक है।",
-    "terminalPanelPlaceholder": "इस होस्ट के बारे में पूछें...",
-    "noProvidersConfigured": "अभी तक कोई एआई प्रदाता कॉन्फ़िगर नहीं किया गया है। एआई सहायक टैब में एक जोड़ें।",
-    "runsInOpenTerminal": "यह आपके खुले टर्मिनल सत्र में चलता है।",
-    "runInTerminal": "चलाएं",
-    "terminalContextPrefill": "यह मेरे टर्मिनल का आउटपुट है:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "अन्य सुविधाओं को अपने अनुरोधों के लिए आपके एआई प्रदाता एपीआई कुंजी का उपयोग करने दें। कुंजी की कभी प्रतिलिपि नहीं बनाई जाती है, और आप इसे किसी भी समय रद्द कर सकते हैं।"
-    }
-  },
-  "nav": {
-    "ai": "ऐ"
-  },
-  "onboarding": {
-    "aiTitle": "एआई सहायक",
-    "aiIntro": "टर्मिक्स में एक वैकल्पिक एआई सहायक शामिल हो सकता है। आप इसे बाद में अपनी सेटिंग्स में बदल सकते हैं।",
-    "aiSkipTitle": "इसे बंद कर दो",
-    "aiSkipDesc": "टर्मिक्स अभी की तरह ही काम करता है। असिस्टेंट छिपा रहता है।",
-    "aiEnableTitle": "इसे चालू करें",
-    "aiEnableDesc": "यह एक सहायक सुविधा जोड़ता है जो आपके सेटअप को पढ़ता है और आपके द्वारा स्वीकृत किए जाने वाले परिवर्तनों का सुझाव देता है। इसके लिए आपको एक प्रदाता उपलब्ध कराना होगा, जैसे कि स्थानीय ओलामा।",
-    "aiNote": "जब तक आप कोई प्रदाता नहीं जोड़ते और संदेश नहीं भेजते, तब तक कुछ भी कहीं नहीं भेजा जाता।"
-  },
-  "hosts": {
-    "docsLink": "दस्तावेज़ देखें"
-  },
-  "plugin": {
-    "name": "एआई सहायक"
-  }
-}
diff --git a/plugins/ai/locales/translated/hu_HU.json b/plugins/ai/locales/translated/hu_HU.json
deleted file mode 100644
index d2e180217..000000000
--- a/plugins/ai/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Használja az asszisztenst",
-      "description": "Nyisd meg az asszisztenst, és kérdezz tőle dolgokat."
-    },
-    "manage_providers": {
-      "title": "Szolgáltatók kezelése",
-      "description": "MI-szolgáltatók és API-kulcsaik hozzáadása, szerkesztése és eltávolítása."
-    },
-    "apply_proposals": {
-      "title": "Javaslatok alkalmazása",
-      "description": "Hagyd, hogy az asszisztens végrehajtsa a javasolt módosításokat."
-    },
-    "services.use": {
-      "title": "Használja a mesterséges intelligenciát más funkciókból",
-      "description": "Más funkciók felhívhatják az asszisztenst az Ön nevében."
-    },
-    "secrets.share": {
-      "title": "API-kulcs megosztása",
-      "description": "Más funkciók használhatják a tárolt AI API-kulcsot anélkül, hogy látnák azt."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "A mesterséges intelligencia asszisztens ki van kapcsolva ezen a szerveren.",
-    "providersNeedOptIn": "Kapcsolja be a fenti AI asszisztenst a szolgáltatók hozzáadásához.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "MI asszisztens",
-        "description": "Engedélyezheti a felhasználóknak a mesterséges intelligencia asszisztens bekapcsolását. Amíg ez ki van kapcsolva, az asszisztens rejtett és blokkolt mindenki számára."
-      },
-      "privateEndpoints": {
-        "label": "Engedélyezett privát AI-gazdagépek",
-        "description": "Privát hálózatán található hosztok, amelyekre a felhasználók szolgáltatót irányíthatnak, például egy saját hosztot futtató Ollama. Minden sorba egy hosztot írjon be."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "AI asszisztens engedélyezése",
-        "description": "Engedélyezi a mesterséges intelligencia asszisztensének a gazdagép terminálján való segítséget. Alapértelmezés szerint ki van kapcsolva, de továbbra is engedélyeznie kell a mesterséges intelligenciát a fiókjában."
-      }
-    }
-  },
-  "ai": {
-    "title": "Helyettes",
-    "send": "Elküld",
-    "stop": "Stop",
-    "save": "Megtakarítás",
-    "cancel": "Mégsem",
-    "running": "futás",
-    "approve": "Jóváhagyás",
-    "reject": "Elutasít",
-    "inputPlaceholder": "Kérdezzen a felszolgálókról, vagy írjon le egy javasolt változtatást",
-    "selectProvider": "Válasszon szolgáltatót",
-    "providerSettings": "Szolgáltatói beállítások",
-    "addProvider": "Szolgáltató hozzáadása",
-    "editProvider": "Szolgáltató szerkesztése",
-    "removeProvider": "Szolgáltató eltávolítása",
-    "providerType": "Szolgáltató",
-    "providerLabel": "Név",
-    "providerLabelPlaceholder": "Például: Helyi Ollama",
-    "baseUrl": "Szerver címe",
-    "apiKey": "API-kulcs",
-    "defaultModel": "Alapértelmezett modell",
-    "defaultModelPlaceholder": "Például: llama3.1 vagy claude-opus-5",
-    "labelRequired": "Adjon nevet ennek a szolgáltatónak",
-    "providerSaveFailed": "Nem sikerült menteni a szolgáltatót",
-    "providerUpdated": "Szolgáltató frissítve",
-    "providerDeleteFailed": "Nem sikerült eltávolítani a szolgáltatót",
-    "privateEndpointHint": "A privát hálózaton lévő címekhez először egy rendszergazdának kell engedélyeznie a gazdagépet.",
-    "providerOllama": "Ollama",
-    "providerAnthropic": "Antropikus",
-    "providerOpenai": "Nyílt mesterséges intelligencia",
-    "providerGemini": "Google Gemini",
-    "providerOpenaiCompatible": "OpenAI-kompatibilis",
-    "toolArguments": "Bemenet",
-    "toolResult": "Eredmény",
-    "statusApplied": "Alkalmazott",
-    "statusRejected": "Elutasítva",
-    "proposalApplied": "Módosítás alkalmazva",
-    "proposalApplyFailed": "Nem sikerült alkalmazni a módosítást",
-    "proposalRejectFailed": "Nem sikerült elutasítani a módosítást",
-    "enableTitle": "Engedélyezze a mesterséges intelligencia asszisztenst",
-    "enableDescription": "Hagyd, hogy az asszisztens felolvassa a beállításokat, és javasoljon módosításokat jóváhagyásra.",
-    "readOnlyCommands": "Csak olvasható diagnosztikai parancsok engedélyezése",
-    "readOnlyCommandsDescription": "Az asszisztens lefuttathat egy rövid listát a biztonságos parancsokról, mint például a df és az uptime, anélkül, hogy minden alkalommal rákérdezne. Bármi, ami megváltoztat egy szervert, mindig elsőként kerül felkérésre.",
-    "modelDetectFailed": "Nem sikerült elérni a szolgáltatót, ezért ez egy általános lista. Bármelyik modellnevet beírhatja.",
-    "modelCustom": "Adjon meg egy modellnevet",
-    "modelRefresh": "Lista frissítése",
-    "modelPlaceholder": "Válasszon vagy írjon be egy modellt",
-    "attachHint": "Írjon be @ jelet egy gazdagépre, kódrészletre vagy automatizálásra való hivatkozáshoz. A rendszer módosításokat javasol jóváhagyásra.",
-    "runCommandTitle": "Parancs futtatása",
-    "assistant": "MI asszisztens",
-    "terminalPanelEmpty": "Kérdezd meg az asszisztenst erről a házigazdáról. Bármi, ami megváltoztatja az állapotát, először a jóváhagyásodra van szükség.",
-    "terminalPanelPlaceholder": "Kérdezz rá erre a házigazdára...",
-    "noProvidersConfigured": "Még nincs konfigurálva AI-szolgáltató. Adjon hozzá egyet az AI-asszisztens fülön.",
-    "runsInOpenTerminal": "A megnyitott terminál munkamenetben fut.",
-    "runInTerminal": "Fut",
-    "terminalContextPrefill": "Itt a terminál kimenete:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Engedélyezd más funkcióknak a mesterséges intelligencia szolgáltató API-kulcsának használatát a saját kéréseikhez. A kulcs soha nem kerül másolásra, és ezt bármikor visszavonhatod."
-    }
-  },
-  "nav": {
-    "ai": "MI"
-  },
-  "onboarding": {
-    "aiTitle": "MI asszisztens",
-    "aiIntro": "A Termix tartalmazhat opcionális mesterséges intelligencia asszisztenst. Ezt később módosíthatja a beállításokban.",
-    "aiSkipTitle": "Hagyd ki",
-    "aiSkipDesc": "A Termix ugyanúgy működik, mint most. Az asszisztens rejtve marad.",
-    "aiEnableTitle": "Kapcsold be",
-    "aiEnableDesc": "Hozzáad egy asszisztenst, amely beolvassa a beállításait, és javaslatokat tesz az Ön által jóváhagyott módosításokra. Szükség van egy Ön által biztosított szolgáltatóra, például egy helyi Ollama szakemberre.",
-    "aiNote": "Semmi sem kerül sehova, amíg nem adsz hozzá egy szolgáltatót és nem küldesz üzenetet."
-  },
-  "hosts": {
-    "docsLink": "Dokumentumok megtekintése"
-  },
-  "plugin": {
-    "name": "MI asszisztens"
-  }
-}
diff --git a/plugins/ai/locales/translated/id_ID.json b/plugins/ai/locales/translated/id_ID.json
deleted file mode 100644
index 2fb815c62..000000000
--- a/plugins/ai/locales/translated/id_ID.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Gunakan asisten",
-      "description": "Buka asisten dan ajukan pertanyaan kepadanya."
-    },
-    "manage_providers": {
-      "title": "Mengelola penyedia",
-      "description": "Tambahkan, edit, dan hapus penyedia AI dan kunci API mereka."
-    },
-    "apply_proposals": {
-      "title": "Ajukan proposal",
-      "description": "Biarkan asisten tersebut menjalankan perubahan yang disarankannya."
-    },
-    "services.use": {
-      "title": "Gunakan AI dari fitur lain.",
-      "description": "Fitur lainnya mungkin akan memanggil asisten atas nama Anda."
-    },
-    "secrets.share": {
-      "title": "Bagikan kunci API",
-      "description": "Fitur lain mungkin menggunakan kunci API AI yang tersimpan tanpa mengetahuinya."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "Asisten AI dinonaktifkan di server ini.",
-    "providersNeedOptIn": "Aktifkan asisten AI di atas untuk menambahkan penyedia.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "Asisten AI",
-        "description": "Izinkan pengguna untuk mengaktifkan asisten AI. Saat dinonaktifkan, asisten akan disembunyikan dan diblokir untuk semua orang."
-      },
-      "privateEndpoints": {
-        "label": "Host AI pribadi yang diizinkan",
-        "description": "Host di jaringan pribadi Anda yang dapat diarahkan pengguna ke penyedia layanan, seperti Ollama yang dihosting sendiri. Letakkan satu host di setiap baris."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "Aktifkan Asisten AI",
-        "description": "Izinkan asisten AI untuk membantu di terminal host ini. Secara default dinonaktifkan, dan AI tetap perlu diaktifkan untuk akun Anda."
-      }
-    }
-  },
-  "ai": {
-    "title": "Asisten",
-    "send": "Mengirim",
-    "stop": "Berhenti",
-    "save": "Menyimpan",
-    "cancel": "Membatalkan",
-    "running": "berlari",
-    "approve": "Menyetujui",
-    "reject": "Menolak",
-    "inputPlaceholder": "Tanyakan tentang server Anda, atau jelaskan perubahan yang ingin Anda usulkan.",
-    "selectProvider": "Pilih penyedia",
-    "providerSettings": "Pengaturan penyedia",
-    "addProvider": "Tambahkan penyedia",
-    "editProvider": "Penyedia pengeditan",
-    "removeProvider": "Hapus penyedia",
-    "providerType": "Penyedia",
-    "providerLabel": "Nama",
-    "providerLabelPlaceholder": "Contohnya: Ollama setempat",
-    "baseUrl": "Alamat server",
-    "apiKey": "Kunci API",
-    "defaultModel": "Model default",
-    "defaultModelPlaceholder": "Misalnya: llama3.1 atau claude-opus-5",
-    "labelRequired": "Beri nama penyedia ini",
-    "providerSaveFailed": "Penyedia layanan tidak dapat disimpan.",
-    "providerUpdated": "Penyedia diperbarui",
-    "providerDeleteFailed": "Penyedia layanan tidak dapat dihapus.",
-    "privateEndpointHint": "Alamat-alamat di jaringan pribadi Anda memerlukan izin administrator terlebih dahulu untuk host tersebut.",
-    "providerOllama": "Ollama",
-    "providerAnthropic": "Antropis",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Google Gemini",
-    "providerOpenaiCompatible": "Kompatibel dengan OpenAI",
-    "toolArguments": "Masukan",
-    "toolResult": "Hasil",
-    "statusApplied": "Terapan",
-    "statusRejected": "Ditolak",
-    "proposalApplied": "Perubahan diterapkan",
-    "proposalApplyFailed": "Perubahan tidak dapat diterapkan.",
-    "proposalRejectFailed": "Tidak bisa menolak perubahan tersebut",
-    "enableTitle": "Aktifkan asisten AI",
-    "enableDescription": "Biarkan asisten membaca pengaturan Anda dan menyarankan perubahan yang perlu Anda setujui.",
-    "readOnlyCommands": "Izinkan perintah diagnostik hanya baca.",
-    "readOnlyCommandsDescription": "Asisten dapat menjalankan daftar singkat perintah aman seperti df dan uptime tanpa bertanya setiap kali. Apa pun yang mengubah server selalu diusulkan terlebih dahulu.",
-    "modelDetectFailed": "Tidak dapat menghubungi penyedia, jadi ini adalah daftar umum. Anda dapat mengetikkan nama model apa pun.",
-    "modelCustom": "Masukkan nama model",
-    "modelRefresh": "Perbarui daftar",
-    "modelPlaceholder": "Pilih atau ketik model",
-    "attachHint": "Ketik @ untuk merujuk ke host, cuplikan kode, atau otomatisasi. Perubahan diajukan untuk Anda setujui.",
-    "runCommandTitle": "Jalankan perintah",
-    "assistant": "Asisten AI",
-    "terminalPanelEmpty": "Tanyakan kepada asisten tentang tuan rumah ini. Segala sesuatu yang berubah status memerlukan persetujuan Anda terlebih dahulu.",
-    "terminalPanelPlaceholder": "Tanyakan tentang tuan rumah ini...",
-    "noProvidersConfigured": "Belum ada penyedia AI yang dikonfigurasi. Tambahkan satu di tab asisten AI.",
-    "runsInOpenTerminal": "Berjalan di sesi terminal Anda yang sedang terbuka.",
-    "runInTerminal": "Berlari",
-    "terminalContextPrefill": "Berikut adalah output terminal saya:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Izinkan fitur lain menggunakan kunci API penyedia AI Anda untuk permintaan mereka sendiri. Kunci tersebut tidak pernah disalin, dan Anda dapat mencabutnya kapan saja."
-    }
-  },
-  "nav": {
-    "ai": "AI"
-  },
-  "onboarding": {
-    "aiTitle": "Asisten AI",
-    "aiIntro": "Termix dapat menyertakan asisten AI opsional. Anda dapat mengubahnya nanti di pengaturan Anda.",
-    "aiSkipTitle": "Biarkan saja",
-    "aiSkipDesc": "Termix berfungsi seperti sekarang. Asisten tetap tersembunyi.",
-    "aiEnableTitle": "Nyalakan",
-    "aiEnableDesc": "Menambahkan asisten yang membaca pengaturan Anda dan menyarankan perubahan yang Anda setujui. Membutuhkan penyedia yang Anda berikan, seperti Ollama lokal.",
-    "aiNote": "Tidak ada data yang dikirim ke mana pun sampai Anda menambahkan penyedia dan mengirim pesan."
-  },
-  "hosts": {
-    "docsLink": "Lihat dokumen"
-  },
-  "plugin": {
-    "name": "Asisten AI"
-  }
-}
diff --git a/plugins/ai/locales/translated/it_IT.json b/plugins/ai/locales/translated/it_IT.json
deleted file mode 100644
index dce7d5e53..000000000
--- a/plugins/ai/locales/translated/it_IT.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Utilizzare l'assistente",
-      "description": "Apri l'assistente e ponigli delle domande."
-    },
-    "manage_providers": {
-      "title": "Gestire i fornitori",
-      "description": "Aggiungi, modifica e rimuovi i provider di intelligenza artificiale e le relative chiavi API."
-    },
-    "apply_proposals": {
-      "title": "Presentare proposte",
-      "description": "Lascia che l'assistente esegua le modifiche suggerite."
-    },
-    "services.use": {
-      "title": "Utilizzare l'intelligenza artificiale da altre funzionalità",
-      "description": "Altre funzioni potrebbero attivare l'assistente per tuo conto."
-    },
-    "secrets.share": {
-      "title": "Condividi la chiave API",
-      "description": "Altre funzionalità potrebbero utilizzare la chiave API AI memorizzata senza visualizzarla."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "L'assistente IA è disattivato su questo server.",
-    "providersNeedOptIn": "Attiva l'assistente AI qui sopra per aggiungere i fornitori.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "Assistente basato sull'intelligenza artificiale",
-        "description": "Consenti agli utenti di attivare l'assistente AI. Quando è disattivato, l'assistente è nascosto e bloccato per tutti."
-      },
-      "privateEndpoints": {
-        "label": "Host di IA privati consentiti",
-        "description": "Host sulla tua rete privata a cui gli utenti possono indirizzare un provider, come ad esempio un'installazione self-hosted di Ollama. Assegna un host a ciascuna linea."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "Assistente AI per l'innovazione",
-        "description": "Consenti all'assistente IA di fornire assistenza nel terminale di questo host. Disattivato per impostazione predefinita, ma è necessario abilitare l'IA per il tuo account."
-      }
-    }
-  },
-  "ai": {
-    "title": "Assistente",
-    "send": "Inviare",
-    "stop": "Stop",
-    "save": "Salva",
-    "cancel": "Annulla",
-    "running": "in esecuzione",
-    "approve": "Approvare",
-    "reject": "Rifiutare",
-    "inputPlaceholder": "Chiedi informazioni sui tuoi server o descrivi una modifica da proporre",
-    "selectProvider": "Seleziona un fornitore",
-    "providerSettings": "Impostazioni del provider",
-    "addProvider": "Aggiungi fornitore",
-    "editProvider": "Fornitore di modifica",
-    "removeProvider": "Rimuovi il fornitore",
-    "providerType": "Fornitore",
-    "providerLabel": "Nome",
-    "providerLabelPlaceholder": "Ad esempio: Ollama locale",
-    "baseUrl": "Indirizzo del server",
-    "apiKey": "Chiave API",
-    "defaultModel": "Modello predefinito",
-    "defaultModelPlaceholder": "Ad esempio: llama3.1 o claude-opus-5",
-    "labelRequired": "Assegna un nome a questo fornitore",
-    "providerSaveFailed": "Impossibile salvare il provider",
-    "providerUpdated": "Fornitore aggiornato",
-    "providerDeleteFailed": "Impossibile rimuovere il provider",
-    "privateEndpointHint": "Gli indirizzi sulla tua rete privata richiedono prima l'autorizzazione di un amministratore per l'host.",
-    "providerOllama": "Ollama",
-    "providerAnthropic": "Antropico",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Google Gemini",
-    "providerOpenaiCompatible": "Compatibile con OpenAI",
-    "toolArguments": "Input",
-    "toolResult": "Risultato",
-    "statusApplied": "Applicato",
-    "statusRejected": "Respinto",
-    "proposalApplied": "Modifica applicata",
-    "proposalApplyFailed": "Impossibile applicare la modifica",
-    "proposalRejectFailed": "Impossibile rifiutare la modifica",
-    "enableTitle": "Abilita l'assistente IA",
-    "enableDescription": "Lascia che l'assistente legga la tua configurazione e ti suggerisca delle modifiche da approvare.",
-    "readOnlyCommands": "Consenti comandi diagnostici di sola lettura",
-    "readOnlyCommandsDescription": "L'assistente può eseguire un breve elenco di comandi sicuri come df e uptime senza chiedere conferma ogni volta. Qualsiasi operazione che modifichi un server viene sempre proposta in anticipo.",
-    "modelDetectFailed": "Non è stato possibile contattare il fornitore, quindi questo è un elenco generico. È possibile digitare qualsiasi nome di modello.",
-    "modelCustom": "Inserisci il nome del modello",
-    "modelRefresh": "Aggiorna elenco",
-    "modelPlaceholder": "Scegli o digita un modello",
-    "attachHint": "Digita @ per fare riferimento a un host, uno snippet o un'automazione. Le modifiche proposte sono da approvare.",
-    "runCommandTitle": "Esegui il comando",
-    "assistant": "Assistente AI",
-    "terminalPanelEmpty": "Chiedi all'assistente informazioni su questo host. Qualsiasi modifica allo stato richiede la tua approvazione preventiva.",
-    "terminalPanelPlaceholder": "Chiedi informazioni su questo host...",
-    "noProvidersConfigured": "Non è ancora configurato alcun provider di IA. Aggiungine uno nella scheda Assistente IA.",
-    "runsInOpenTerminal": "Viene eseguito nella sessione del terminale aperta.",
-    "runInTerminal": "Esegui",
-    "terminalContextPrefill": "Ecco l'output del mio terminale:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Consenti ad altre funzionalità di utilizzare la tua chiave API del provider AI per le proprie richieste. La chiave non viene mai copiata e puoi revocarla in qualsiasi momento."
-    }
-  },
-  "nav": {
-    "ai": "IA"
-  },
-  "onboarding": {
-    "aiTitle": "Assistente basato sull'intelligenza artificiale",
-    "aiIntro": "Termix può includere un assistente AI opzionale. Puoi modificare questa impostazione in seguito.",
-    "aiSkipTitle": "Lascialo spento",
-    "aiSkipDesc": "Termix funziona come ora. L'assistente rimane nascosto.",
-    "aiEnableTitle": "Accendilo",
-    "aiEnableDesc": "Aggiunge un assistente che legge la tua configurazione e suggerisce modifiche che approvi. Richiede un provider che tu fornisca, come ad esempio un Ollama locale.",
-    "aiNote": "Non viene inviato nulla finché non si aggiunge un provider e si invia un messaggio."
-  },
-  "hosts": {
-    "docsLink": "Visualizza documentazione"
-  },
-  "plugin": {
-    "name": "Assistente AI"
-  }
-}
diff --git a/plugins/ai/locales/translated/ja_JP.json b/plugins/ai/locales/translated/ja_JP.json
deleted file mode 100644
index e30ec4833..000000000
--- a/plugins/ai/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "アシスタントを使用する",
-      "description": "アシスタントを開いて、いろいろ質問してみてください。"
-    },
-    "manage_providers": {
-      "title": "プロバイダーを管理する",
-      "description": "AIプロバイダーとそのAPIキーを追加、編集、削除できます。"
-    },
-    "apply_proposals": {
-      "title": "提案を適用する",
-      "description": "アシスタントに提案された変更を実行させましょう。"
-    },
-    "services.use": {
-      "title": "他の機能からAIを活用する",
-      "description": "その他の機能によっては、あなたに代わってアシスタントを呼び出す場合があります。"
-    },
-    "secrets.share": {
-      "title": "APIキーを共有する",
-      "description": "他の機能は、保存されたAI APIキーを認識せずに使用する場合があります。"
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "このサーバーではAIアシスタントは無効になっています。",
-    "providersNeedOptIn": "上記のAIアシスタントをオンにして、プロバイダーを追加してください。",
-    "admin": {
-      "globallyEnabled": {
-        "label": "AIアシスタント",
-        "description": "ユーザーがAIアシスタントをオンにできるようにします。オフになっている間は、アシスタントは非表示になり、誰からも利用できなくなります。"
-      },
-      "privateEndpoints": {
-        "label": "プライベートAIホストを許可",
-        "description": "ユーザーがプロバイダに指定できる、プライベートネットワーク上のホスト（自己ホスト型のOllamaなど）。各行にホストを1つずつ記述してください。"
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "AIアシスタントを有効にする",
-        "description": "このホストのターミナルでAIアシスタントによる支援を許可します。デフォルトでは無効になっており、アカウントでAIを有効にする必要があります。"
-      }
-    }
-  },
-  "ai": {
-    "title": "アシスタント",
-    "send": "送信",
-    "stop": "ストップ",
-    "save": "保存",
-    "cancel": "キャンセル",
-    "running": "実行中",
-    "approve": "承認する",
-    "reject": "拒否する",
-    "inputPlaceholder": "サーバーについて質問するか、変更案を説明する",
-    "selectProvider": "プロバイダーを選択してください",
-    "providerSettings": "プロバイダー設定",
-    "addProvider": "プロバイダーを追加",
-    "editProvider": "プロバイダーを編集",
-    "removeProvider": "プロバイダーを削除",
-    "providerType": "プロバイダー",
-    "providerLabel": "名前",
-    "providerLabelPlaceholder": "例えば：地元のオラマ",
-    "baseUrl": "サーバーアドレス",
-    "apiKey": "APIキー",
-    "defaultModel": "デフォルトモデル",
-    "defaultModelPlaceholder": "例えば、llama3.1 や claude-opus-5 など。",
-    "labelRequired": "このプロバイダーに名前を付けてください",
-    "providerSaveFailed": "プロバイダーを保存できませんでした",
-    "providerUpdated": "プロバイダーが更新されました",
-    "providerDeleteFailed": "プロバイダーを削除できませんでした",
-    "privateEndpointHint": "プライベートネットワーク上のアドレスを使用するには、まず管理者がホストを許可する必要があります。",
-    "providerOllama": "オラマ",
-    "providerAnthropic": "人間",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Google Gemini",
-    "providerOpenaiCompatible": "OpenAI対応",
-    "toolArguments": "受信",
-    "toolResult": "結果",
-    "statusApplied": "適用済み",
-    "statusRejected": "拒否されました",
-    "proposalApplied": "変更が適用されました",
-    "proposalApplyFailed": "変更を適用できませんでした",
-    "proposalRejectFailed": "変更を拒否できませんでした",
-    "enableTitle": "AIアシスタントを有効にする",
-    "enableDescription": "アシスタントにあなたの設定を読み取らせ、承認が必要な変更案を提案させましょう。",
-    "readOnlyCommands": "読み取り専用の診断コマンドを許可する",
-    "readOnlyCommandsDescription": "アシスタントは、dfやuptimeといった安全なコマンドを毎回確認することなく実行する場合があります。サーバーに変更を加える操作は、常に最初に提案されます。",
-    "modelDetectFailed": "プロバイダーに連絡が取れなかったため、これは一般的なリストです。任意のモデル名を入力してください。",
-    "modelCustom": "モデル名を入力してください",
-    "modelRefresh": "リストを更新",
-    "modelPlaceholder": "モデルを選択または入力してください",
-    "attachHint": "ホスト、スニペット、またはオートメーションを参照するには、「@」を入力してください。変更案が表示され、承認が必要となります。",
-    "runCommandTitle": "コマンドを実行する",
-    "assistant": "AIアシスタント",
-    "terminalPanelEmpty": "このホストについてアシスタントにお問い合わせください。状態変更を伴う変更はすべて、事前にあなたの承認が必要です。",
-    "terminalPanelPlaceholder": "このホストについて質問する...",
-    "noProvidersConfigured": "AIプロバイダーがまだ設定されていません。AIアシスタントタブで追加してください。",
-    "runsInOpenTerminal": "開いているターミナルセッションで実行されます。",
-    "runInTerminal": "実行",
-    "terminalContextPrefill": "これが私のターミナル出力です：\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "他の機能が、独自の要求にあなたのAIプロバイダーAPIキーを使用できるようにします。キーは決して複製されず、いつでも取り消すことができます。"
-    }
-  },
-  "nav": {
-    "ai": "AI"
-  },
-  "onboarding": {
-    "aiTitle": "AIアシスタント",
-    "aiIntro": "TermixにはオプションでAIアシスタントを搭載できます。これは後で設定画面で変更できます。",
-    "aiSkipTitle": "オフにしておく",
-    "aiSkipDesc": "Termixは現状のまま動作します。アシスタントは非表示のままです。",
-    "aiEnableTitle": "電源を入れる",
-    "aiEnableDesc": "設定を読み取り、承認した変更を提案するアシスタント機能を追加します。ローカルのOllamaなど、お客様ご自身で手配するプロバイダーが必要です。",
-    "aiNote": "プロバイダーを追加してメッセージを送信するまで、データはどこにも送信されません。"
-  },
-  "hosts": {
-    "docsLink": "ドキュメントを表示"
-  },
-  "plugin": {
-    "name": "AIアシスタント"
-  }
-}
diff --git a/plugins/ai/locales/translated/ko_KR.json b/plugins/ai/locales/translated/ko_KR.json
deleted file mode 100644
index 561c50b74..000000000
--- a/plugins/ai/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "도우미를 사용하세요",
-      "description": "어시스턴트를 열고 질문을 해보세요."
-    },
-    "manage_providers": {
-      "title": "공급자 관리",
-      "description": "AI 제공업체와 해당 API 키를 추가, 편집 및 삭제할 수 있습니다."
-    },
-    "apply_proposals": {
-      "title": "제안서를 제출하세요",
-      "description": "도우미가 제안하는 변경 사항을 실행하도록 하세요."
-    },
-    "services.use": {
-      "title": "다른 기능의 AI를 활용하세요",
-      "description": "다른 기능들이 사용자를 대신하여 어시스턴트에게 전화를 걸 수도 있습니다."
-    },
-    "secrets.share": {
-      "title": "API 키를 공유하세요",
-      "description": "다른 기능들이 저장된 AI API 키를 직접 보지 않고도 사용할 수 있습니다."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "이 서버에서는 AI 비서 기능이 꺼져 있습니다.",
-    "providersNeedOptIn": "위의 AI 도우미를 켜서 제공업체를 추가하세요.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "AI 비서",
-        "description": "사용자가 AI 비서를 켜고 끌 수 있도록 하세요. AI 비서가 꺼져 있으면 모든 사용자에게 비서 기능이 숨겨지고 차단됩니다."
-      },
-      "privateEndpoints": {
-        "label": "개인 AI 호스트 허용",
-        "description": "사용자가 공급자를 지정할 수 있는 개인 네트워크의 호스트(예: 자체 호스팅 Ollama)를 입력합니다. 각 줄에 호스트를 하나씩 입력하십시오."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "AI 어시스턴트 활성화",
-        "description": "이 호스트의 터미널에서 AI 도우미의 도움을 받을 수 있도록 허용합니다. 기본적으로 비활성화되어 있으며, 계정에 AI 기능이 활성화되어 있어야 합니다."
-      }
-    }
-  },
-  "ai": {
-    "title": "어시스턴트",
-    "send": "보내다",
-    "stop": "스톱",
-    "save": "저장",
-    "cancel": "취소",
-    "running": "실행 중",
-    "approve": "승인하다",
-    "reject": "거부하다",
-    "inputPlaceholder": "서버에 대해 문의하거나, 변경 사항을 제안해 보세요.",
-    "selectProvider": "제공업체를 선택하세요",
-    "providerSettings": "공급자 설정",
-    "addProvider": "공급자 추가",
-    "editProvider": "제공자 수정",
-    "removeProvider": "제공업체를 제거하세요",
-    "providerType": "공급자",
-    "providerLabel": "이름",
-    "providerLabelPlaceholder": "예: 지역 올라마",
-    "baseUrl": "서버 주소",
-    "apiKey": "API 키",
-    "defaultModel": "기본 모델",
-    "defaultModelPlaceholder": "예를 들어: llama3.1 또는 claude-opus-5",
-    "labelRequired": "이 제공업체에 이름을 지정하세요",
-    "providerSaveFailed": "공급자를 저장할 수 없습니다.",
-    "providerUpdated": "제공업체 업데이트됨",
-    "providerDeleteFailed": "공급자를 제거할 수 없습니다.",
-    "privateEndpointHint": "개인 네트워크의 주소에 접근하려면 관리자가 먼저 호스트를 허용해야 합니다.",
-    "providerOllama": "올라마",
-    "providerAnthropic": "인류",
-    "providerOpenai": "오픈아이",
-    "providerGemini": "구글 제미니",
-    "providerOpenaiCompatible": "OpenAI와 호환 가능",
-    "toolArguments": "입력",
-    "toolResult": "결과",
-    "statusApplied": "적용된",
-    "statusRejected": "거절됨",
-    "proposalApplied": "변경 사항이 적용되었습니다",
-    "proposalApplyFailed": "변경 사항을 적용할 수 없습니다.",
-    "proposalRejectFailed": "변경을 거부할 수 없었습니다",
-    "enableTitle": "AI 비서를 활성화하세요",
-    "enableDescription": "도우미가 사용자의 설정을 읽고 승인할 변경 사항을 제안하도록 하세요.",
-    "readOnlyCommands": "읽기 전용 진단 명령을 허용합니다.",
-    "readOnlyCommandsDescription": "도우미는 매번 묻지 않고 df 및 uptime과 같은 안전한 명령어 목록을 실행할 수 있습니다. 서버를 변경하는 작업은 항상 먼저 제안됩니다.",
-    "modelDetectFailed": "공급업체에 연결할 수 없어서 일반적인 목록을 제공합니다. 모델명을 입력하셔도 됩니다.",
-    "modelCustom": "모델명을 입력하세요",
-    "modelRefresh": "목록 새로 고침",
-    "modelPlaceholder": "모델을 선택하거나 입력하세요.",
-    "attachHint": "호스트, 코드 조각 또는 자동화를 참조하려면 @를 입력하세요. 승인을 위해 변경 사항이 제안됩니다.",
-    "runCommandTitle": "명령어를 실행하세요",
-    "assistant": "AI 어시스턴트",
-    "terminalPanelEmpty": "이 호스트에 대해 담당자에게 문의하십시오. 상태가 변경되는 모든 사항은 먼저 사용자의 승인이 필요합니다.",
-    "terminalPanelPlaceholder": "이 호스트에 대해 문의해 보세요...",
-    "noProvidersConfigured": "아직 AI 제공업체가 구성되지 않았습니다. AI 도우미 탭에서 추가하세요.",
-    "runsInOpenTerminal": "열려 있는 터미널 세션에서 실행됩니다.",
-    "runInTerminal": "실행",
-    "terminalContextPrefill": "다음은 제 터미널 출력 결과입니다:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "다른 기능에서 AI 제공업체 API 키를 사용하여 자체 요청을 처리할 수 있도록 허용합니다. 키는 절대 복사되지 않으며 언제든지 취소할 수 있습니다."
-    }
-  },
-  "nav": {
-    "ai": "일체 포함"
-  },
-  "onboarding": {
-    "aiTitle": "AI 비서",
-    "aiIntro": "Termix에는 선택적으로 AI 비서 기능이 포함될 수 있습니다. 이 기능은 나중에 설정에서 변경할 수 있습니다.",
-    "aiSkipTitle": "꺼두세요",
-    "aiSkipDesc": "Termix는 현재와 같이 작동합니다. 어시스턴트는 숨겨진 상태로 유지됩니다.",
-    "aiEnableTitle": "켜세요",
-    "aiEnableDesc": "설정을 읽고 사용자가 승인하는 변경 사항을 제안하는 도우미를 추가합니다. 사용자가 제공하는 공급업체(예: 지역 Ollama)가 필요합니다.",
-    "aiNote": "공급자를 추가하고 메시지를 보내기 전까지는 아무것도 전송되지 않습니다."
-  },
-  "hosts": {
-    "docsLink": "문서 보기"
-  },
-  "plugin": {
-    "name": "AI 어시스턴트"
-  }
-}
diff --git a/plugins/ai/locales/translated/nl_NL.json b/plugins/ai/locales/translated/nl_NL.json
deleted file mode 100644
index 57613cdfe..000000000
--- a/plugins/ai/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Gebruik de assistent",
-      "description": "Open de assistent en stel er vragen aan."
-    },
-    "manage_providers": {
-      "title": "Beheer aanbieders",
-      "description": "AI-providers en hun API-sleutels toevoegen, bewerken en verwijderen."
-    },
-    "apply_proposals": {
-      "title": "Dien voorstellen in",
-      "description": "Laat de assistent de voorgestelde wijzigingen doorvoeren."
-    },
-    "services.use": {
-      "title": "Gebruik AI van andere functies",
-      "description": "Andere functies kunnen de assistent namens u inschakelen."
-    },
-    "secrets.share": {
-      "title": "Deel de API-sleutel",
-      "description": "Andere functies kunnen de opgeslagen AI API-sleutel gebruiken zonder deze te zien."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "De AI-assistent is op deze server uitgeschakeld.",
-    "providersNeedOptIn": "Schakel de AI-assistent hierboven in om aanbieders toe te voegen.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "AI-assistent",
-        "description": "Gebruikers kunnen de AI-assistent inschakelen. Wanneer deze is uitgeschakeld, is de assistent verborgen en voor iedereen geblokkeerd."
-      },
-      "privateEndpoints": {
-        "label": "Toegestane privé-AI-hosts",
-        "description": "Hosts op uw privénetwerk waarnaar gebruikers een provider kunnen verwijzen, zoals een zelfgehoste Ollama. Plaats één host per lijn."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "AI-assistent inschakelen",
-        "description": "Sta de AI-assistent toe om te helpen in de terminal van deze host. Standaard uitgeschakeld, maar AI moet nog steeds voor uw account zijn ingeschakeld."
-      }
-    }
-  },
-  "ai": {
-    "title": "Assistent",
-    "send": "Versturen",
-    "stop": "Stop",
-    "save": "Redden",
-    "cancel": "Annuleren",
-    "running": "rennen",
-    "approve": "Goedkeuren",
-    "reject": "Afwijzen",
-    "inputPlaceholder": "Vraag naar uw servers of beschrijf een voorgestelde wijziging.",
-    "selectProvider": "Selecteer een aanbieder",
-    "providerSettings": "Aanbiederinstellingen",
-    "addProvider": "Aanbieder toevoegen",
-    "editProvider": "Bewerk provider",
-    "removeProvider": "Verwijder provider",
-    "providerType": "Aanbieder",
-    "providerLabel": "Naam",
-    "providerLabelPlaceholder": "Bijvoorbeeld: Lokale Ollama",
-    "baseUrl": "Serveradres",
-    "apiKey": "API-sleutel",
-    "defaultModel": "Standaardmodel",
-    "defaultModelPlaceholder": "Bijvoorbeeld: llama3.1 of claude-opus-5",
-    "labelRequired": "Geef deze aanbieder een naam",
-    "providerSaveFailed": "De provider kon niet worden opgeslagen.",
-    "providerUpdated": "Aanbieder bijgewerkt",
-    "providerDeleteFailed": "De provider kon niet worden verwijderd.",
-    "privateEndpointHint": "IP-adressen op uw privénetwerk moeten eerst door een beheerder worden toegestaan.",
-    "providerOllama": "Ollama",
-    "providerAnthropic": "Antropisch",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Google Gemini",
-    "providerOpenaiCompatible": "OpenAI-compatibel",
-    "toolArguments": "Invoer",
-    "toolResult": "Resultaat",
-    "statusApplied": "Toegepast",
-    "statusRejected": "Afgewezen",
-    "proposalApplied": "Toegepaste wijziging",
-    "proposalApplyFailed": "De wijziging kon niet worden toegepast.",
-    "proposalRejectFailed": "Kon de wijziging niet afwijzen",
-    "enableTitle": "Schakel de AI-assistent in",
-    "enableDescription": "Laat de assistent je instellingen lezen en wijzigingen voorstellen die je vervolgens kunt goedkeuren.",
-    "readOnlyCommands": "Sta alleen-lezen diagnostische opdrachten toe.",
-    "readOnlyCommandsDescription": "De assistent kan een korte lijst met veilige commando's zoals df en uptime uitvoeren zonder telkens opnieuw toestemming te vragen. Alles wat een server wijzigt, wordt altijd eerst voorgesteld.",
-    "modelDetectFailed": "De aanbieder kon niet worden bereikt, daarom is dit een algemene lijst. U kunt elke modelnaam invoeren.",
-    "modelCustom": "Voer een modelnaam in",
-    "modelRefresh": "Vernieuw de lijst",
-    "modelPlaceholder": "Kies of typ een model",
-    "attachHint": "Typ @ om te verwijzen naar een host, codefragment of automatisering. Wijzigingen worden voorgesteld ter goedkeuring.",
-    "runCommandTitle": "Voer het commando uit",
-    "assistant": "AI-assistent",
-    "terminalPanelEmpty": "Vraag de assistent naar deze host. Alles wat de status wijzigt, vereist eerst uw goedkeuring.",
-    "terminalPanelPlaceholder": "Vraag naar deze host...",
-    "noProvidersConfigured": "Er is nog geen AI-provider geconfigureerd. Voeg er een toe via het tabblad AI-assistent.",
-    "runsInOpenTerminal": "Wordt uitgevoerd in uw geopende terminalsessie.",
-    "runInTerminal": "Loop",
-    "terminalContextPrefill": "Hier is mijn terminaluitvoer:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Laat andere functies uw API-sleutel van de AI-provider gebruiken voor hun eigen verzoeken. De sleutel wordt nooit gekopieerd en u kunt deze op elk moment intrekken."
-    }
-  },
-  "nav": {
-    "ai": "AI"
-  },
-  "onboarding": {
-    "aiTitle": "AI-assistent",
-    "aiIntro": "Termix kan optioneel een AI-assistent bevatten. Je kunt dit later in je instellingen wijzigen.",
-    "aiSkipTitle": "Laat het weg",
-    "aiSkipDesc": "Termix werkt zoals het nu werkt. De assistent blijft verborgen.",
-    "aiEnableTitle": "Schakel het in.",
-    "aiEnableDesc": "Voegt een assistent toe die je instellingen leest en wijzigingen voorstelt die je kunt goedkeuren. Vereist een leverancier die je zelf aanlevert, zoals een lokale Ollama.",
-    "aiNote": "Er wordt niets verzonden totdat je een provider toevoegt en een bericht verstuurt."
-  },
-  "hosts": {
-    "docsLink": "Documenten bekijken"
-  },
-  "plugin": {
-    "name": "AI-assistent"
-  }
-}
diff --git a/plugins/ai/locales/translated/no_NO.json b/plugins/ai/locales/translated/no_NO.json
deleted file mode 100644
index 497cf2bb4..000000000
--- a/plugins/ai/locales/translated/no_NO.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Bruk assistenten",
-      "description": "Åpne assistenten og spør den om ting."
-    },
-    "manage_providers": {
-      "title": "Administrer leverandører",
-      "description": "Legg til, rediger og fjern AI-leverandørene og API-nøklene deres."
-    },
-    "apply_proposals": {
-      "title": "Bruk forslag",
-      "description": "La assistenten utføre endringene den foreslår."
-    },
-    "services.use": {
-      "title": "Bruk AI fra andre funksjoner",
-      "description": "Andre funksjoner kan ringe assistenten på dine vegne."
-    },
-    "secrets.share": {
-      "title": "Del API-nøkkelen",
-      "description": "Andre funksjoner kan bruke den lagrede AI API-nøkkelen uten å se den."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "AI-assistenten er slått av på denne serveren.",
-    "providersNeedOptIn": "Slå på AI-assistenten ovenfor for å legge til leverandører.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "AI-assistent",
-        "description": "La brukere slå på AI-assistenten. Mens dette er av, er assistenten skjult og blokkert for alle."
-      },
-      "privateEndpoints": {
-        "label": "Tillatte private AI-verter",
-        "description": "Verter på ditt private nettverk som brukere kan peke en leverandør til, for eksempel en selvhostet Ollama. Plasser én vert på hver linje."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "Aktiver AI-assistent",
-        "description": "Tillat at AI-assistenten hjelper til i denne vertens terminal. Av som standard, og krever fortsatt at AI er aktivert for kontoen din."
-      }
-    }
-  },
-  "ai": {
-    "title": "Assistent",
-    "send": "Sende",
-    "stop": "Stopp",
-    "save": "Lagre",
-    "cancel": "Avbryt",
-    "running": "kjører",
-    "approve": "Vedta",
-    "reject": "Avvis",
-    "inputPlaceholder": "Spør om servitørene dine, eller beskriv en endring du vil foreslå",
-    "selectProvider": "Velg en leverandør",
-    "providerSettings": "Leverandørinnstillinger",
-    "addProvider": "Legg til leverandør",
-    "editProvider": "Rediger leverandør",
-    "removeProvider": "Fjern leverandør",
-    "providerType": "Leverandør",
-    "providerLabel": "Navn",
-    "providerLabelPlaceholder": "For eksempel: Lokal Ollama",
-    "baseUrl": "Serveradresse",
-    "apiKey": "API-nøkkel",
-    "defaultModel": "Standardmodell",
-    "defaultModelPlaceholder": "For eksempel: llama3.1 eller claude-opus-5",
-    "labelRequired": "Gi denne leverandøren et navn",
-    "providerSaveFailed": "Kunne ikke lagre leverandøren",
-    "providerUpdated": "Leverandøren er oppdatert",
-    "providerDeleteFailed": "Kunne ikke fjerne leverandøren",
-    "privateEndpointHint": "Adresser på ditt private nettverk krever at en administrator tillater verten først.",
-    "providerOllama": "Ollama",
-    "providerAnthropic": "Antropisk",
-    "providerOpenai": "Åpen kunstig intelligens",
-    "providerGemini": "Google Gemini",
-    "providerOpenaiCompatible": "OpenAI-kompatibel",
-    "toolArguments": "Inndata",
-    "toolResult": "Resultat",
-    "statusApplied": "Anvendt",
-    "statusRejected": "Avvist",
-    "proposalApplied": "Endringen er brukt",
-    "proposalApplyFailed": "Kunne ikke bruke endringen",
-    "proposalRejectFailed": "Kunne ikke avvise endringen",
-    "enableTitle": "Aktiver AI-assistenten",
-    "enableDescription": "La assistenten lese oppsettet ditt og foreslå endringer du kan godkjenne.",
-    "readOnlyCommands": "Tillat skrivebeskyttede diagnostiske kommandoer",
-    "readOnlyCommandsDescription": "Assistenten kan kjøre en kort liste med sikre kommandoer som df og uptime uten å spørre hver gang. Alt som endrer en server blir alltid foreslått først.",
-    "modelDetectFailed": "Kunne ikke nå leverandøren, så dette er en generell liste. Du kan skrive inn et hvilket som helst modellnavn.",
-    "modelCustom": "Skriv inn et modellnavn",
-    "modelRefresh": "Oppdater listen",
-    "modelPlaceholder": "Velg eller skriv inn en modell",
-    "attachHint": "Skriv inn @ for å referere til en vert, et kodeutdrag eller en automatisering. Endringer foreslås som du kan godkjenne.",
-    "runCommandTitle": "Kjør kommandoen",
-    "assistant": "AI-assistent",
-    "terminalPanelEmpty": "Spør assistenten om denne verten. Alt som endrer status trenger din godkjenning først.",
-    "terminalPanelPlaceholder": "Spør om denne verten...",
-    "noProvidersConfigured": "Ingen AI-leverandør er konfigurert ennå. Legg til en i AI-assistent-fanen.",
-    "runsInOpenTerminal": "Kjører i din åpne terminaløkt.",
-    "runInTerminal": "Kjør",
-    "terminalContextPrefill": "Her er terminalutgangen min:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "La andre funksjoner bruke API-nøkkelen til AI-leverandøren din for sine egne forespørsler. Nøkkelen kopieres aldri, og du kan tilbakekalle den når som helst."
-    }
-  },
-  "nav": {
-    "ai": "AI"
-  },
-  "onboarding": {
-    "aiTitle": "AI-assistent",
-    "aiIntro": "Termix kan inkludere en valgfri AI-assistent. Du kan endre dette senere i innstillingene dine.",
-    "aiSkipTitle": "La det være av",
-    "aiSkipDesc": "Termix fungerer som den gjør nå. Assistenten forblir skjult.",
-    "aiEnableTitle": "Slå den på",
-    "aiEnableDesc": "Legger til en assistent som leser oppsettet ditt og foreslår endringer du godkjenner. Krever en leverandør du oppgir, for eksempel en lokal Ollama.",
-    "aiNote": "Ingenting sendes noe sted før du legger til en leverandør og sender en melding."
-  },
-  "hosts": {
-    "docsLink": "Vis dokumenter"
-  },
-  "plugin": {
-    "name": "AI-assistent"
-  }
-}
diff --git a/plugins/ai/locales/translated/pl_PL.json b/plugins/ai/locales/translated/pl_PL.json
deleted file mode 100644
index 4cfbc7c52..000000000
--- a/plugins/ai/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Użyj asystenta",
-      "description": "Otwórz asystenta i zadaj mu pytania."
-    },
-    "manage_providers": {
-      "title": "Zarządzaj dostawcami",
-      "description": "Dodawaj, edytuj i usuwaj dostawców sztucznej inteligencji oraz ich klucze API."
-    },
-    "apply_proposals": {
-      "title": "Zastosuj propozycje",
-      "description": "Pozwól asystentowi wprowadzić sugerowane zmiany."
-    },
-    "services.use": {
-      "title": "Użyj sztucznej inteligencji z innych funkcji",
-      "description": "Inne funkcje mogą umożliwiać wywoływanie asystenta w Twoim imieniu."
-    },
-    "secrets.share": {
-      "title": "Udostępnij klucz API",
-      "description": "Inne funkcje mogą wykorzystywać zapisany klucz API AI, nawet go nie widząc."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "Asystent AI jest wyłączony na tym serwerze.",
-    "providersNeedOptIn": "Włącz asystenta AI powyżej, aby dodać dostawców.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "Asystent AI",
-        "description": "Pozwól użytkownikom włączyć asystenta AI. Gdy ta opcja jest wyłączona, asystent jest ukryty i zablokowany dla wszystkich."
-      },
-      "privateEndpoints": {
-        "label": "Dozwolone prywatne hosty AI",
-        "description": "Hosty w Twojej sieci prywatnej, na które użytkownicy mogą wskazać dostawcę, na przykład samodzielnie hostowany Ollama. Umieść jednego hosta na każdej linii."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "Włącz asystenta AI",
-        "description": "Zezwól asystentowi AI na pomoc w terminalu tego hosta. Domyślnie wyłączone, ale nadal wymaga włączenia AI na Twoim koncie."
-      }
-    }
-  },
-  "ai": {
-    "title": "Asystent",
-    "send": "Wyślij",
-    "stop": "Zatrzymaj",
-    "save": "Zapisz",
-    "cancel": "Anuluj",
-    "running": "działa",
-    "approve": "Zatwierdź",
-    "reject": "Odrzuć",
-    "inputPlaceholder": "Zapytaj o swoje serwery lub opisz proponowaną zmianę",
-    "selectProvider": "Wybierz dostawcę",
-    "providerSettings": "Ustawienia dostawcy",
-    "addProvider": "Dodaj dostawcę",
-    "editProvider": "Edytuj dostawcę",
-    "removeProvider": "Usuń dostawcę",
-    "providerType": "Dostawca",
-    "providerLabel": "Nazwa",
-    "providerLabelPlaceholder": "Na przykład: Ollama lokalnie",
-    "baseUrl": "Adres serwera",
-    "apiKey": "Klucz API",
-    "defaultModel": "Model domyślny",
-    "defaultModelPlaceholder": "Na przykład: llama3.1 lub claude-opus-5",
-    "labelRequired": "Podaj nazwę tego dostawcy",
-    "providerSaveFailed": "Nie udało się zapisać dostawcy",
-    "providerUpdated": "Zaktualizowano dostawcę",
-    "providerDeleteFailed": "Nie można usunąć dostawcy",
-    "privateEndpointHint": "Adresy w sieci prywatnej wymagają, aby administrator najpierw dopuścił dany host.",
-    "providerOllama": "Ollama",
-    "providerAnthropic": "Anthropic",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Google Gemini",
-    "providerOpenaiCompatible": "Kompatybilny z OpenAI",
-    "toolArguments": "Dane wejściowe",
-    "toolResult": "Wynik",
-    "statusApplied": "Zastosowano",
-    "statusRejected": "Odrzucono",
-    "proposalApplied": "Zastosowano zmianę",
-    "proposalApplyFailed": "Nie można zastosować zmiany",
-    "proposalRejectFailed": "Nie można odrzucić zmiany",
-    "enableTitle": "Włącz asystenta AI",
-    "enableDescription": "Pozwól asystentowi odczytać konfigurację i proponować zmiany do Twojego zatwierdzenia.",
-    "readOnlyCommands": "Zezwalaj na polecenia diagnostyczne tylko do odczytu",
-    "readOnlyCommandsDescription": "Asystent może uruchamiać krótką listę bezpiecznych poleceń, takich jak df czy uptime, bez pytania za każdym razem. Wszystko, co zmienia serwer, jest zawsze najpierw proponowane do zatwierdzenia.",
-    "modelDetectFailed": "Nie udało się skontaktować z dostawcą, więc jest to lista ogólna. Możesz wpisać dowolną nazwę modelu.",
-    "modelCustom": "Wprowadź nazwę modelu",
-    "modelRefresh": "Odśwież listę",
-    "modelPlaceholder": "Wybierz lub wpisz model",
-    "attachHint": "Wpisz @, aby odwołać się do hosta, snippetu lub automatyzacji. Zmiany są proponowane do Twojego zatwierdzenia.",
-    "runCommandTitle": "Uruchom polecenie",
-    "assistant": "Asystent AI",
-    "terminalPanelEmpty": "Zapytaj asystenta o tego hosta. Każda zmiana stanu wymaga Twojej zgody.",
-    "terminalPanelPlaceholder": "Zapytaj o tego gospodarza...",
-    "noProvidersConfigured": "Nie skonfigurowano jeszcze żadnego dostawcy AI. Dodaj go w zakładce Asystent AI.",
-    "runsInOpenTerminal": "Działa w otwartej sesji terminalowej.",
-    "runInTerminal": "Uruchom",
-    "terminalContextPrefill": "Oto wynik mojego terminala:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Pozwól innym funkcjom używać klucza API dostawcy sztucznej inteligencji do własnych żądań. Klucz nigdy nie jest kopiowany i możesz go w dowolnym momencie cofnąć."
-    }
-  },
-  "nav": {
-    "ai": "AI"
-  },
-  "onboarding": {
-    "aiTitle": "Asystent AI",
-    "aiIntro": "Termix może zawierać opcjonalnego asystenta AI. Możesz to później zmienić w ustawieniach.",
-    "aiSkipTitle": "Zostaw wyłączone",
-    "aiSkipDesc": "Termix działa tak jak teraz. Asystent pozostaje ukryty.",
-    "aiEnableTitle": "Włącz",
-    "aiEnableDesc": "Dodaje asystenta, który odczytuje Twoją konfigurację i sugeruje zmiany, które zatwierdzasz. Wymaga wskazanego przez Ciebie dostawcy, np. lokalnej Ollamy.",
-    "aiNote": "Dopóki nie dodasz dostawcy i nie wyślesz wiadomości, nic nie zostanie wysłane."
-  },
-  "hosts": {
-    "docsLink": "Zobacz dokumentację"
-  },
-  "plugin": {
-    "name": "Asystent AI"
-  }
-}
diff --git a/plugins/ai/locales/translated/pt_BR.json b/plugins/ai/locales/translated/pt_BR.json
deleted file mode 100644
index e5bc658a7..000000000
--- a/plugins/ai/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Use o assistente",
-      "description": "Abra o assistente e faça perguntas."
-    },
-    "manage_providers": {
-      "title": "Gerenciar fornecedores",
-      "description": "Adicione, edite e remova os fornecedores de IA e suas chaves de API."
-    },
-    "apply_proposals": {
-      "title": "Apresentar propostas",
-      "description": "Deixe que o assistente execute as alterações que sugerir."
-    },
-    "services.use": {
-      "title": "Utilizar IA de outras funcionalidades",
-      "description": "Outras funcionalidades podem chamar o assistente em seu nome."
-    },
-    "secrets.share": {
-      "title": "Compartilhe a chave da API",
-      "description": "Outras funcionalidades podem usar a chave da API de IA armazenada sem visualizá-la."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "O assistente de IA está desativado neste servidor.",
-    "providersNeedOptIn": "Ative o assistente de IA acima para adicionar fornecedores.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "assistente de IA",
-        "description": "Permita que os usuários ativem o assistente de IA. Quando estiver desativado, o assistente ficará oculto e bloqueado para todos."
-      },
-      "privateEndpoints": {
-        "label": "Hosts de IA privados permitidos",
-        "description": "Servidores na sua rede privada que os usuários podem usar como provedores, como um Ollama auto-hospedado. Coloque um servidor em cada linha."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "Ativar o assistente de IA",
-        "description": "Permita que o assistente de IA ajude no terminal deste host. Desativado por padrão, mas ainda precisa que a IA esteja ativada para sua conta."
-      }
-    }
-  },
-  "ai": {
-    "title": "Assistente",
-    "send": "Enviar",
-    "stop": "Parar",
-    "save": "Salvar",
-    "cancel": "Cancelar",
-    "running": "correndo",
-    "approve": "Aprovar",
-    "reject": "Rejeitar",
-    "inputPlaceholder": "Pergunte sobre seus servidores ou descreva uma alteração que você gostaria de propor.",
-    "selectProvider": "Selecione um fornecedor",
-    "providerSettings": "Configurações do provedor",
-    "addProvider": "Adicionar provedor",
-    "editProvider": "Editar provedor",
-    "removeProvider": "Remover provedor",
-    "providerType": "Fornecedor",
-    "providerLabel": "Nome",
-    "providerLabelPlaceholder": "Por exemplo: Ollama local",
-    "baseUrl": "Endereço do servidor",
-    "apiKey": "Chave de API",
-    "defaultModel": "Modelo padrão",
-    "defaultModelPlaceholder": "Por exemplo: llama3.1 ou claude-opus-5",
-    "labelRequired": "Dê um nome a este fornecedor.",
-    "providerSaveFailed": "Não foi possível salvar o provedor.",
-    "providerUpdated": "Fornecedor atualizado",
-    "providerDeleteFailed": "Não foi possível remover o provedor.",
-    "privateEndpointHint": "Os endereços na sua rede privada precisam que um administrador autorize o host primeiro.",
-    "providerOllama": "Ollama",
-    "providerAnthropic": "Antrópico",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Google Gemini",
-    "providerOpenaiCompatible": "Compatível com OpenAI",
-    "toolArguments": "Entrada",
-    "toolResult": "Resultado",
-    "statusApplied": "Aplicado",
-    "statusRejected": "Rejeitado",
-    "proposalApplied": "Alteração aplicada",
-    "proposalApplyFailed": "Não foi possível aplicar a alteração.",
-    "proposalRejectFailed": "Não foi possível rejeitar a alteração.",
-    "enableTitle": "Ative o assistente de IA",
-    "enableDescription": "Deixe o assistente ler sua configuração e sugerir alterações para você aprovar.",
-    "readOnlyCommands": "Permitir comandos de diagnóstico somente leitura",
-    "readOnlyCommandsDescription": "O assistente pode executar uma pequena lista de comandos seguros, como `df` e `uptime`, sem perguntar a cada vez. Qualquer alteração que faça no servidor será sempre sugerida primeiro.",
-    "modelDetectFailed": "Não foi possível contatar o fornecedor, portanto esta é uma lista genérica. Você pode digitar o nome de qualquer modelo.",
-    "modelCustom": "Insira o nome do modelo",
-    "modelRefresh": "Atualizar lista",
-    "modelPlaceholder": "Selecione ou digite um modelo",
-    "attachHint": "Digite @ para fazer referência a um host, snippet ou automação. As alterações são propostas para sua aprovação.",
-    "runCommandTitle": "Executar comando",
-    "assistant": "Assistente de IA",
-    "terminalPanelEmpty": "Pergunte ao assistente sobre este anfitrião. Qualquer alteração de estado precisa da sua aprovação prévia.",
-    "terminalPanelPlaceholder": "Pergunte sobre este anfitrião...",
-    "noProvidersConfigured": "Nenhum provedor de IA está configurado ainda. Adicione um na aba do assistente de IA.",
-    "runsInOpenTerminal": "Executa na sua sessão de terminal aberta.",
-    "runInTerminal": "Correr",
-    "terminalContextPrefill": "Aqui está a saída do meu terminal:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Permita que outros recursos usem sua chave de API do provedor de IA para suas próprias solicitações. A chave nunca é copiada e você pode revogá-la a qualquer momento."
-    }
-  },
-  "nav": {
-    "ai": "IA"
-  },
-  "onboarding": {
-    "aiTitle": "assistente de IA",
-    "aiIntro": "O Termix pode incluir um assistente de IA opcional. Você pode alterar isso posteriormente nas suas configurações.",
-    "aiSkipTitle": "Deixe desligado",
-    "aiSkipDesc": "O Termix funciona como está agora. O assistente permanece oculto.",
-    "aiEnableTitle": "Ligue-o",
-    "aiEnableDesc": "Adiciona um assistente que lê sua configuração e sugere alterações que você aprova. Requer um provedor fornecido por você, como um Ollama local.",
-    "aiNote": "Nada será enviado até que você adicione um provedor e envie uma mensagem."
-  },
-  "hosts": {
-    "docsLink": "Documentação"
-  },
-  "plugin": {
-    "name": "Assistente de IA"
-  }
-}
diff --git a/plugins/ai/locales/translated/pt_PT.json b/plugins/ai/locales/translated/pt_PT.json
deleted file mode 100644
index 91b06fdd8..000000000
--- a/plugins/ai/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Utilize o assistente",
-      "description": "Abra o assistente e coloque questões."
-    },
-    "manage_providers": {
-      "title": "Gerir fornecedores",
-      "description": "Adicione, edite e remova os fornecedores de IA e as suas chaves API."
-    },
-    "apply_proposals": {
-      "title": "Apresentar propostas",
-      "description": "Deixe que o assistente execute as alterações que sugerir."
-    },
-    "services.use": {
-      "title": "Utilizar IA de outras funcionalidades",
-      "description": "Outras funcionalidades podem chamar o assistente em seu nome."
-    },
-    "secrets.share": {
-      "title": "Partilhar a chave da API",
-      "description": "Outras funcionalidades podem utilizar a chave da API de IA armazenada sem a visualizar."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "O assistente de IA está desativado neste servidor.",
-    "providersNeedOptIn": "Ative o assistente de IA acima para adicionar fornecedores.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "assistente de IA",
-        "description": "Permita que os utilizadores ativem o assistente de IA. Quando estiver desativado, o assistente ficará oculto e bloqueado para todos."
-      },
-      "privateEndpoints": {
-        "label": "Hosts de IA privados permitidos",
-        "description": "Servidores na sua rede privada que os utilizadores podem utilizar como fornecedores, como um Ollama auto-hospedado. Coloque um servidor em cada linha."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "Ativar o assistente de IA",
-        "description": "Permita que o assistente de IA ajude no terminal deste host. Desativado por defeito, mas ainda precisa que a IA esteja ativada para a sua conta."
-      }
-    }
-  },
-  "ai": {
-    "title": "Assistente",
-    "send": "Enviar",
-    "stop": "Stop",
-    "save": "Guardar",
-    "cancel": "Cancelar",
-    "running": "em execução",
-    "approve": "Aprovar",
-    "reject": "Rejeitar",
-    "inputPlaceholder": "Pergunte pelos seus servidores ou descreva uma alteração que gostaria de propor.",
-    "selectProvider": "Selecione um fornecedor",
-    "providerSettings": "Configurações do fornecedor",
-    "addProvider": "Adicionar provedor",
-    "editProvider": "Editar provedor",
-    "removeProvider": "Remover fornecedor",
-    "providerType": "Fornecedor",
-    "providerLabel": "Nome",
-    "providerLabelPlaceholder": "Por exemplo: Ollama local",
-    "baseUrl": "Endereço do servidor",
-    "apiKey": "Chave API",
-    "defaultModel": "Modelo padrão",
-    "defaultModelPlaceholder": "Por exemplo: llama3.1 ou claude-opus-5",
-    "labelRequired": "Dê um nome a este fornecedor.",
-    "providerSaveFailed": "Não foi possível guardar o fornecedor.",
-    "providerUpdated": "Fornecedor atualizado",
-    "providerDeleteFailed": "Não foi possível remover o fornecedor.",
-    "privateEndpointHint": "Os endereços na sua rede privada necessitam que um administrador autorize primeiro o host.",
-    "providerOllama": "Ollama",
-    "providerAnthropic": "Antrópico",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Google Gemini",
-    "providerOpenaiCompatible": "Compatível com OpenAI",
-    "toolArguments": "Entrada",
-    "toolResult": "Resultado",
-    "statusApplied": "Aplicado",
-    "statusRejected": "Rejeitado",
-    "proposalApplied": "Alteração aplicada",
-    "proposalApplyFailed": "Não foi possível aplicar a alteração.",
-    "proposalRejectFailed": "Não foi possível rejeitar a alteração.",
-    "enableTitle": "Ative o assistente de IA",
-    "enableDescription": "Deixe o assistente ler a sua configuração e sugerir alterações para que a aprove.",
-    "readOnlyCommands": "Permitir comandos de diagnóstico de leitura apenas",
-    "readOnlyCommandsDescription": "O assistente pode executar uma pequena lista de comandos seguros, como `df` e `uptime`, sem perguntar de cada vez. Qualquer alteração que faça no servidor será sempre sugerida em primeiro lugar.",
-    "modelDetectFailed": "Não foi possível contactar o fornecedor, pelo que esta é uma lista genérica. Pode digitar o nome de qualquer modelo.",
-    "modelCustom": "Introduza o nome do modelo",
-    "modelRefresh": "Atualizar lista",
-    "modelPlaceholder": "Selecione ou introduza um modelo",
-    "attachHint": "Digite @ para fazer referência a um host, snippet ou automação. As alterações são propostas para a sua aprovação.",
-    "runCommandTitle": "Executar comando",
-    "assistant": "Assistente de IA",
-    "terminalPanelEmpty": "Pergunte ao assistente sobre este anfitrião. Qualquer alteração de estado necessita da sua aprovação prévia.",
-    "terminalPanelPlaceholder": "Pergunte sobre este anfitrião...",
-    "noProvidersConfigured": "Nenhum fornecedor de IA está configurado ainda. Adicione um no separador do assistente de IA.",
-    "runsInOpenTerminal": "Executa na sua sessão de terminal aberta.",
-    "runInTerminal": "Executar",
-    "terminalContextPrefill": "Eis a saída do meu terminal:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Permita que outros recursos utilizem a sua chave API do fornecedor de IA para os seus próprios pedidos. A chave nunca é copiada e pode revogá-la a qualquer momento."
-    }
-  },
-  "nav": {
-    "ai": "IA"
-  },
-  "onboarding": {
-    "aiTitle": "assistente de IA",
-    "aiIntro": "O Termix pode incluir um assistente de IA opcional. Pode alterar isso posteriormente nas suas definições.",
-    "aiSkipTitle": "Deixe desligado",
-    "aiSkipDesc": "O Termix funciona como está agora. O assistente permanece oculto.",
-    "aiEnableTitle": "Ligue-o",
-    "aiEnableDesc": "Adiciona um assistente que lê a sua configuração e sugere alterações que aprova. Requer um fornecedor fornecido por si, como um Ollama local.",
-    "aiNote": "Nada será enviado até que adicione um fornecedor e envie uma mensagem."
-  },
-  "hosts": {
-    "docsLink": "Ver documentação"
-  },
-  "plugin": {
-    "name": "Assistente de IA"
-  }
-}
diff --git a/plugins/ai/locales/translated/ro_RO.json b/plugins/ai/locales/translated/ro_RO.json
deleted file mode 100644
index 1167410b4..000000000
--- a/plugins/ai/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Folosește asistentul",
-      "description": "Deschide asistentul și pune-i întrebări."
-    },
-    "manage_providers": {
-      "title": "Gestionați furnizorii",
-      "description": "Adăugați, editați și eliminați furnizorii de inteligență artificială și cheile API ale acestora."
-    },
-    "apply_proposals": {
-      "title": "Aplicați propunerile",
-      "description": "Lăsați asistentul să efectueze modificările sugerate de acesta."
-    },
-    "services.use": {
-      "title": "Folosește inteligența artificială din alte funcții",
-      "description": "Alte funcții pot apela asistentul în numele tău."
-    },
-    "secrets.share": {
-      "title": "Partajați cheia API",
-      "description": "Alte funcții pot utiliza cheia API AI stocată fără a o vedea."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "Asistentul AI este dezactivat pe acest server.",
-    "providersNeedOptIn": "Activează asistentul AI de mai sus pentru a adăuga furnizori.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "Asistent AI",
-        "description": "Permiteți utilizatorilor să activeze asistentul AI. Cât timp această opțiune este dezactivată, asistentul este ascuns și blocat pentru toată lumea."
-      },
-      "privateEndpoints": {
-        "label": "Gazde private AI permise",
-        "description": "Gazde din rețeaua ta privată către care utilizatorii pot direcționa un furnizor, cum ar fi un Ollama auto-găzduit. Pune câte o gazdă pe fiecare linie."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "Activează Asistentul AI",
-        "description": "Permiteți asistentului AI să vă ajute în terminalul acestei gazde. Dezactivat în mod implicit, dar este nevoie ca AI să fie activat pentru contul dvs."
-      }
-    }
-  },
-  "ai": {
-    "title": "Asistent",
-    "send": "Trimite",
-    "stop": "Stop",
-    "save": "Salva",
-    "cancel": "Anula",
-    "running": "funcţionare",
-    "approve": "Aproba",
-    "reject": "Respinge",
-    "inputPlaceholder": "Întreabă despre chelnerii tăi sau descrie o schimbare pe care o propui.",
-    "selectProvider": "Selectați un furnizor",
-    "providerSettings": "Setări furnizor",
-    "addProvider": "Adăugați furnizor",
-    "editProvider": "Editați furnizorul",
-    "removeProvider": "Eliminați furnizorul",
-    "providerType": "Furnizor",
-    "providerLabel": "Nume",
-    "providerLabelPlaceholder": "De exemplu: Ollama locală",
-    "baseUrl": "Adresa serverului",
-    "apiKey": "Cheie API",
-    "defaultModel": "Model implicit",
-    "defaultModelPlaceholder": "De exemplu: llama3.1 sau claude-opus-5",
-    "labelRequired": "Dați un nume acestui furnizor",
-    "providerSaveFailed": "Nu s-a putut salva furnizorul",
-    "providerUpdated": "Furnizor actualizat",
-    "providerDeleteFailed": "Nu s-a putut elimina furnizorul",
-    "privateEndpointHint": "Adresele din rețeaua privată necesită mai întâi permisiunea unui administrator pentru gazdă.",
-    "providerOllama": "Ollama",
-    "providerAnthropic": "Antropic",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Google Gemeni",
-    "providerOpenaiCompatible": "Compatibil cu OpenAI",
-    "toolArguments": "Intrare",
-    "toolResult": "Rezultat",
-    "statusApplied": "Aplicat",
-    "statusRejected": "Respins",
-    "proposalApplied": "Modificare aplicată",
-    "proposalApplyFailed": "Nu s-a putut aplica modificarea",
-    "proposalRejectFailed": "Nu s-a putut respinge modificarea",
-    "enableTitle": "Activează asistentul AI",
-    "enableDescription": "Permiteți asistentului să citească configurația și să sugereze modificări pentru aprobare.",
-    "readOnlyCommands": "Permite comenzi de diagnosticare doar în citire",
-    "readOnlyCommandsDescription": "Asistentul poate rula o listă scurtă de comenzi sigure, cum ar fi df și uptime, fără a întreba de fiecare dată. Orice modificare a unui server este întotdeauna propusă prima.",
-    "modelDetectFailed": "Nu s-a putut contacta furnizorul, așadar aceasta este o listă generală. Puteți introduce orice nume de model.",
-    "modelCustom": "Introduceți un nume de model",
-    "modelRefresh": "Reîmprospătați lista",
-    "modelPlaceholder": "Alegeți sau introduceți un model",
-    "attachHint": "Tastați @ pentru a face referire la o gazdă, un fragment de cod sau o automatizare. Sunt propuse modificări pentru aprobare.",
-    "runCommandTitle": "Comandă de rulare",
-    "assistant": "Asistent AI",
-    "terminalPanelEmpty": "Întreabă asistentul despre această gazdă. Orice modificare a stării necesită mai întâi aprobarea ta.",
-    "terminalPanelPlaceholder": "Întreabă despre această gazdă...",
-    "noProvidersConfigured": "Încă nu este configurat niciun furnizor de inteligență artificială. Adăugați unul în fila Asistent de inteligență artificială.",
-    "runsInOpenTerminal": "Rulează în sesiunea de terminal deschisă.",
-    "runInTerminal": "Aleargă",
-    "terminalContextPrefill": "Iată ieșirea terminalului meu:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Permiteți altor funcții să utilizeze cheia API a furnizorului dvs. de inteligență artificială pentru propriile solicitări. Cheia nu este niciodată copiată și puteți revoca această opțiune oricând."
-    }
-  },
-  "nav": {
-    "ai": "IA"
-  },
-  "onboarding": {
-    "aiTitle": "Asistent AI",
-    "aiIntro": "Termix poate include un asistent AI opțional. Puteți modifica acest lucru ulterior în setări.",
-    "aiSkipTitle": "Lasă-l deoparte",
-    "aiSkipDesc": "Termix funcționează ca acum. Asistentul rămâne ascuns.",
-    "aiEnableTitle": "Pornește-l",
-    "aiEnableDesc": "Adaugă un asistent care citește configurația și sugerează modificări pe care le aprobi. Necesită un furnizor furnizat de tine, cum ar fi un Ollama local.",
-    "aiNote": "Nimic nu este trimis nicăieri până nu adăugați un furnizor și nu trimiteți un mesaj."
-  },
-  "hosts": {
-    "docsLink": "Vizualizați documentele"
-  },
-  "plugin": {
-    "name": "Asistent AI"
-  }
-}
diff --git a/plugins/ai/locales/translated/ru_RU.json b/plugins/ai/locales/translated/ru_RU.json
deleted file mode 100644
index bf6306d96..000000000
--- a/plugins/ai/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Воспользуйтесь помощником",
-      "description": "Откройте ассистента и задайте ему вопросы."
-    },
-    "manage_providers": {
-      "title": "Управление поставщиками",
-      "description": "Добавляйте, редактируйте и удаляйте поставщиков ИИ и их API-ключи."
-    },
-    "apply_proposals": {
-      "title": "Подайте заявки на участие в тендере.",
-      "description": "Пусть ассистент внесет предложенные им изменения."
-    },
-    "services.use": {
-      "title": "Используйте ИИ из других функций.",
-      "description": "Другие функции могут вызывать голосового помощника от вашего имени."
-    },
-    "secrets.share": {
-      "title": "Поделитесь ключом API",
-      "description": "Другие функции могут использовать сохраненный ключ API ИИ, даже не видя его."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "На этом сервере ИИ-помощник отключен.",
-    "providersNeedOptIn": "Включите ИИ-помощника выше, чтобы добавить поставщиков услуг.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "ИИ-помощник",
-        "description": "Разрешите пользователям включить голосового помощника. Если он выключен, помощник скрыт и заблокирован для всех."
-      },
-      "privateEndpoints": {
-        "label": "Разрешены частные хосты ИИ",
-        "description": "Разместите на каждой линии по одному хосту в вашей частной сети, на которые пользователи могут направлять запросы провайдера, например, самостоятельно размещенный Ollama."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "Включить ИИ-помощника",
-        "description": "Разрешите помощнику с искусственным интеллектом помогать на терминале этого хоста. По умолчанию отключено, но для вашей учетной записи ИИ все равно должен быть включен."
-      }
-    }
-  },
-  "ai": {
-    "title": "Помощник",
-    "send": "Отправлять",
-    "stop": "Остановить",
-    "save": "Сохранить",
-    "cancel": "Отмена",
-    "running": "выполняется",
-    "approve": "Утвердить",
-    "reject": "Отклонять",
-    "inputPlaceholder": "Поинтересуйтесь состоянием ваших серверов или предложите внести изменения.",
-    "selectProvider": "Выберите поставщика",
-    "providerSettings": "Настройки поставщика",
-    "addProvider": "Добавить поставщика",
-    "editProvider": "Поставщик редактирования",
-    "removeProvider": "Удалить поставщика",
-    "providerType": "Поставщик",
-    "providerLabel": "Название",
-    "providerLabelPlaceholder": "Например: Местная лама",
-    "baseUrl": "Адрес сервера",
-    "apiKey": "ключ API",
-    "defaultModel": "Модель по умолчанию",
-    "defaultModelPlaceholder": "Например: llama3.1 или claude-opus-5",
-    "labelRequired": "Укажите имя этого поставщика услуг.",
-    "providerSaveFailed": "Не удалось сохранить поставщика услуг.",
-    "providerUpdated": "Поставщик обновлен",
-    "providerDeleteFailed": "Не удалось удалить поставщика услуг.",
-    "privateEndpointHint": "Для доступа к адресам в вашей частной сети необходимо предварительное разрешение администратора.",
-    "providerOllama": "оллама",
-    "providerAnthropic": "Антропический",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Google Gemini",
-    "providerOpenaiCompatible": "Совместимость с OpenAI",
-    "toolArguments": "Ввод",
-    "toolResult": "Результат",
-    "statusApplied": "Применяемый",
-    "statusRejected": "Отклоненный",
-    "proposalApplied": "Внесены изменения.",
-    "proposalApplyFailed": "Не удалось применить изменения.",
-    "proposalRejectFailed": "Не мог отклонить изменение.",
-    "enableTitle": "Включите ИИ-помощника",
-    "enableDescription": "Позвольте ассистенту ознакомиться с вашими настройками и предложить изменения для утверждения.",
-    "readOnlyCommands": "Разрешить диагностические команды только для чтения",
-    "readOnlyCommandsDescription": "Ассистент может выполнить короткий список безопасных команд, таких как df и uptime, не запрашивая подтверждения каждый раз. Любая команда, изменяющая состояние сервера, всегда предлагается в первую очередь.",
-    "modelDetectFailed": "Не удалось связаться с поставщиком, поэтому это общий список. Вы можете ввести любое название модели.",
-    "modelCustom": "Введите название модели",
-    "modelRefresh": "Обновить список",
-    "modelPlaceholder": "Выберите или введите модель",
-    "attachHint": "Введите @ для ссылки на хост, фрагмент кода или автоматизацию. Предлагаются изменения для вашего утверждения.",
-    "runCommandTitle": "Выполните команду",
-    "assistant": "ИИ-помощник",
-    "terminalPanelEmpty": "Спросите помощника об этом хосте. Любое изменение состояния требует вашего предварительного одобрения.",
-    "terminalPanelPlaceholder": "Спросите об этом хостинге...",
-    "noProvidersConfigured": "Поставщик ИИ пока не настроен. Добавьте его на вкладке «Помощник ИИ».",
-    "runsInOpenTerminal": "Запускается в открытой терминальной сессии.",
-    "runInTerminal": "Запустить",
-    "terminalContextPrefill": "Вот вывод моего терминала:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Разрешите другим функциям использовать ваш API-ключ поставщика ИИ для своих запросов. Ключ никогда не копируется, и вы можете отозвать его в любое время."
-    }
-  },
-  "nav": {
-    "ai": "ИИ"
-  },
-  "onboarding": {
-    "aiTitle": "ИИ-помощник",
-    "aiIntro": "В Termix можно добавить опционального ИИ-помощника. Это можно изменить позже в настройках.",
-    "aiSkipTitle": "Оставьте это выключенным.",
-    "aiSkipDesc": "Termix работает так, как сейчас. Ассистент остается скрытым.",
-    "aiEnableTitle": "Включите его",
-    "aiEnableDesc": "Добавляет помощника, который анализирует ваши настройки и предлагает изменения, которые вы одобряете. Требуется поставщик, которого вы предоставляете, например, местный Ollama.",
-    "aiNote": "Ничего никуда не отправляется, пока вы не добавите поставщика услуг и не отправите сообщение."
-  },
-  "hosts": {
-    "docsLink": "Документация"
-  },
-  "plugin": {
-    "name": "ИИ-помощник"
-  }
-}
diff --git a/plugins/ai/locales/translated/sr_SP.json b/plugins/ai/locales/translated/sr_SP.json
deleted file mode 100644
index a31133478..000000000
--- a/plugins/ai/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Користите помоћника",
-      "description": "Отворите асистента и питајте га."
-    },
-    "manage_providers": {
-      "title": "Управљајте добављачима",
-      "description": "Додајте, уредите и уклоните добављаче вештачке интелигенције и њихове АПИ кључеве."
-    },
-    "apply_proposals": {
-      "title": "Примени предлоге",
-      "description": "Нека асистент изврши измене које предложи."
-    },
-    "services.use": {
-      "title": "Користите вештачку интелигенцију из других функција",
-      "description": "Друге функције могу позвати асистента у ваше име."
-    },
-    "secrets.share": {
-      "title": "Поделите API кључ",
-      "description": "Друге функције могу користити сачувани AI API кључ, а да га не виде."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "АИ асистент је искључен на овом серверу.",
-    "providersNeedOptIn": "Укључите AI асистента изнад да бисте додали добављаче.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "Асистент за вештачку интелигенцију",
-        "description": "Дозволите корисницима да укључе вештачку интелигенцију асистента. Док је ово искључено, асистент је скривен и блокиран за све."
-      },
-      "privateEndpoints": {
-        "label": "Дозвољени приватни AI хостови",
-        "description": "Домаћини на вашој приватној мрежи на које корисници могу усмерити провајдера, као што је самостално хостовани Ollama. Ставите по један хост у сваки ред."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "Омогући AI асистент",
-        "description": "Дозволите вештачкој интелигенцији да помогне у терминалу овог хоста. Искључено је подразумевано, а и даље је потребно да вештачка интелигенција буде омогућена за ваш налог."
-      }
-    }
-  },
-  "ai": {
-    "title": "Асистент",
-    "send": "Пошаљи",
-    "stop": "Заустави",
-    "save": "Сачувај",
-    "cancel": "Откажи",
-    "running": "трчање",
-    "approve": "Одобри",
-    "reject": "Одбиј",
-    "inputPlaceholder": "Питајте о својим серверима или опишите промену коју желите да предложите",
-    "selectProvider": "Изаберите добављача",
-    "providerSettings": "Подешавања добављача",
-    "addProvider": "Додај добављача",
-    "editProvider": "Измени добављача",
-    "removeProvider": "Уклони добављача",
-    "providerType": "Провајдер",
-    "providerLabel": "Име",
-    "providerLabelPlaceholder": "На пример: Локална Олама",
-    "baseUrl": "Адреса сервера",
-    "apiKey": "API кључ",
-    "defaultModel": "Подразумевани модел",
-    "defaultModelPlaceholder": "На пример: llama3.1 или claude-opus-5",
-    "labelRequired": "Дајте име овом добављачу",
-    "providerSaveFailed": "Није могуће сачувати добављача",
-    "providerUpdated": "Провајдер је ажуриран",
-    "providerDeleteFailed": "Није могуће уклонити добављача",
-    "privateEndpointHint": "Адресе на вашој приватној мрежи прво треба да дозволе администратору хоста.",
-    "providerOllama": "Олама",
-    "providerAnthropic": "Антропски",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Гугл Џемини",
-    "providerOpenaiCompatible": "Компатибилно са OpenAI-ом",
-    "toolArguments": "Унос",
-    "toolResult": "Резултат",
-    "statusApplied": "Примењено",
-    "statusRejected": "Одбијено",
-    "proposalApplied": "Промена је примењена",
-    "proposalApplyFailed": "Није могуће применити промену",
-    "proposalRejectFailed": "Није могуће одбити промену",
-    "enableTitle": "Омогућите вештачку интелигенцију (AI) асистента",
-    "enableDescription": "Нека асистент прочита ваша подешавања и предложи измене које ћете одобрити.",
-    "readOnlyCommands": "Дозволи дијагностичке команде само за читање",
-    "readOnlyCommandsDescription": "Асистент може да покрене кратку листу безбедних команди као што су df и uptime без сваког питања. Све што мења сервер се увек прво предлаже.",
-    "modelDetectFailed": "Нисмо могли да контактирамо добављача, тако да је ово општа листа. Можете да унесете било који назив модела.",
-    "modelCustom": "Унесите назив модела",
-    "modelRefresh": "Освежи листу",
-    "modelPlaceholder": "Изаберите или унесите модел",
-    "attachHint": "Унесите @ да бисте референцирали хост, исечак кода или аутоматизацију. Промене се предлажу да бисте их одобрили.",
-    "runCommandTitle": "Покрени команду",
-    "assistant": "АИ асистент",
-    "terminalPanelEmpty": "Питајте асистента о овом домаћину. Све што мења стање прво захтева ваше одобрење.",
-    "terminalPanelPlaceholder": "Питајте о овом домаћину...",
-    "noProvidersConfigured": "Још увек није конфигурисан ниједан добављач вештачке интелигенције. Додајте га на картици помоћника за вештачку интелигенцију.",
-    "runsInOpenTerminal": "Покреће се у вашој отвореној терминалној сесији.",
-    "runInTerminal": "Трчи",
-    "terminalContextPrefill": "Ево мог терминалног излаза:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Дозволите другим функцијама да користе ваш API кључ добављача вештачке интелигенције за сопствене захтеве. Кључ се никада не копира и можете га опозвати у било ком тренутку."
-    }
-  },
-  "nav": {
-    "ai": "Вештачка интелигенција"
-  },
-  "onboarding": {
-    "aiTitle": "Асистент за вештачку интелигенцију",
-    "aiIntro": "Termix може да укључи опционог AI асистента. Ово можете касније променити у подешавањима.",
-    "aiSkipTitle": "Остави то искључено",
-    "aiSkipDesc": "Термикс ради као и сада. Асистент остаје скривен.",
-    "aiEnableTitle": "Укључи га",
-    "aiEnableDesc": "Додаје асистента који чита ваша подешавања и предлаже измене које одобравате. Потребан је добављач кога ви обезбедите, као што је локални Олама.",
-    "aiNote": "Ништа се не шаље нигде док не додате провајдера и не пошаљете поруку."
-  },
-  "hosts": {
-    "docsLink": "Прикажи документе"
-  },
-  "plugin": {
-    "name": "АИ асистент"
-  }
-}
diff --git a/plugins/ai/locales/translated/sv_SE.json b/plugins/ai/locales/translated/sv_SE.json
deleted file mode 100644
index 46d4fd3ed..000000000
--- a/plugins/ai/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Använd assistenten",
-      "description": "Öppna assistenten och fråga den saker."
-    },
-    "manage_providers": {
-      "title": "Hantera leverantörer",
-      "description": "Lägg till, redigera och ta bort AI-leverantörerna och deras API-nycklar."
-    },
-    "apply_proposals": {
-      "title": "Tillämpa förslag",
-      "description": "Låt assistenten utföra de ändringar den föreslår."
-    },
-    "services.use": {
-      "title": "Använd AI från andra funktioner",
-      "description": "Andra funktioner kan ringa assistenten åt dig."
-    },
-    "secrets.share": {
-      "title": "Dela API-nyckeln",
-      "description": "Andra funktioner kan använda den lagrade AI API-nyckeln utan att se den."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "AI-assistenten är avstängd på den här servern.",
-    "providersNeedOptIn": "Aktivera AI-assistenten ovan för att lägga till leverantörer.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "AI-assistent",
-        "description": "Låt användare aktivera AI-assistenten. Medan detta är avstängt är assistenten dold och blockerad för alla."
-      },
-      "privateEndpoints": {
-        "label": "Tillåtna privata AI-värdar",
-        "description": "Värdar på ditt privata nätverk som användare kan hänvisa en leverantör till, till exempel en självhostad Ollama. Lägg en värd på varje rad."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "Aktivera AI-assistenten",
-        "description": "Tillåt AI-assistenten att hjälpa till i den här värdens terminal. Av som standard och kräver fortfarande att AI är aktiverat för ditt konto."
-      }
-    }
-  },
-  "ai": {
-    "title": "Assistent",
-    "send": "Skicka",
-    "stop": "Stopp",
-    "save": "Spara",
-    "cancel": "Avboka",
-    "running": "spring",
-    "approve": "Godkänna",
-    "reject": "Avvisa",
-    "inputPlaceholder": "Fråga om era servrar, eller beskriv en förändring att föreslå",
-    "selectProvider": "Välj en leverantör",
-    "providerSettings": "Leverantörsinställningar",
-    "addProvider": "Lägg till leverantör",
-    "editProvider": "Redigera leverantör",
-    "removeProvider": "Ta bort leverantör",
-    "providerType": "Leverantör",
-    "providerLabel": "Namn",
-    "providerLabelPlaceholder": "Till exempel: Lokal Ollama",
-    "baseUrl": "Serveradress",
-    "apiKey": "API-nyckel",
-    "defaultModel": "Standardmodell",
-    "defaultModelPlaceholder": "Till exempel: llama3.1 eller claude-opus-5",
-    "labelRequired": "Ge den här leverantören ett namn",
-    "providerSaveFailed": "Kunde inte spara leverantören",
-    "providerUpdated": "Leverantören uppdaterad",
-    "providerDeleteFailed": "Kunde inte ta bort leverantören",
-    "privateEndpointHint": "Adresser i ditt privata nätverk behöver en administratör som först tillåter värden.",
-    "providerOllama": "Ollama",
-    "providerAnthropic": "Antropisk",
-    "providerOpenai": "Öppen AI",
-    "providerGemini": "Google Gemini",
-    "providerOpenaiCompatible": "OpenAI-kompatibel",
-    "toolArguments": "Input",
-    "toolResult": "Resultat",
-    "statusApplied": "Tillämpad",
-    "statusRejected": "Avvisad",
-    "proposalApplied": "Ändring tillämpad",
-    "proposalApplyFailed": "Kunde inte tillämpa ändringen",
-    "proposalRejectFailed": "Kunde inte avvisa ändringen",
-    "enableTitle": "Aktivera AI-assistenten",
-    "enableDescription": "Låt assistenten läsa dina inställningar och föreslå ändringar som du kan godkänna.",
-    "readOnlyCommands": "Tillåt skrivskyddade diagnostikkommandon",
-    "readOnlyCommandsDescription": "Assistenten kan köra en kort lista med säkra kommandon som df och uptime utan att fråga varje gång. Allt som ändrar en server föreslås alltid först.",
-    "modelDetectFailed": "Kunde inte nå leverantören, så detta är en allmän lista. Du kan skriva in vilket modellnamn som helst.",
-    "modelCustom": "Ange ett modellnamn",
-    "modelRefresh": "Uppdatera listan",
-    "modelPlaceholder": "Välj eller skriv en modell",
-    "attachHint": "Skriv @ för att referera till en värd, ett kodavsnitt eller en automatisering. Ändringar föreslås för dig att godkänna.",
-    "runCommandTitle": "Kör kommando",
-    "assistant": "AI-assistent",
-    "terminalPanelEmpty": "Fråga assistenten om den här värden. Allt som ändras kräver ditt godkännande först.",
-    "terminalPanelPlaceholder": "Fråga om den här värden...",
-    "noProvidersConfigured": "Ingen AI-leverantör är konfigurerad ännu. Lägg till en på fliken AI-assistent.",
-    "runsInOpenTerminal": "Körs i din öppna terminalsession.",
-    "runInTerminal": "Sikt",
-    "terminalContextPrefill": "Här är min terminalutgång:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Låt andra funktioner använda din AI-leverantörs API-nyckel för sina egna förfrågningar. Nyckeln kopieras aldrig och du kan återkalla den när som helst."
-    }
-  },
-  "nav": {
-    "ai": "AI"
-  },
-  "onboarding": {
-    "aiTitle": "AI-assistent",
-    "aiIntro": "Termix kan inkludera en valfri AI-assistent. Du kan ändra detta senare i dina inställningar.",
-    "aiSkipTitle": "Lämna den av",
-    "aiSkipDesc": "Termix fungerar som den gör nu. Assistenten förblir dold.",
-    "aiEnableTitle": "Slå på den",
-    "aiEnableDesc": "Lägger till en assistent som läser din installation och föreslår ändringar som du godkänner. Kräver en leverantör som du tillhandahåller, till exempel en lokal Ollama.",
-    "aiNote": "Ingenting skickas någonstans förrän du lägger till en leverantör och skickar ett meddelande."
-  },
-  "hosts": {
-    "docsLink": "Visa dokument"
-  },
-  "plugin": {
-    "name": "AI-assistent"
-  }
-}
diff --git a/plugins/ai/locales/translated/th_TH.json b/plugins/ai/locales/translated/th_TH.json
deleted file mode 100644
index 08a99940d..000000000
--- a/plugins/ai/locales/translated/th_TH.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "ใช้ตัวช่วย",
-      "description": "เปิดผู้ช่วยเสมือนจริงแล้วถามคำถามได้เลย"
-    },
-    "manage_providers": {
-      "title": "จัดการผู้ให้บริการ",
-      "description": "เพิ่ม แก้ไข และลบผู้ให้บริการ AI และคีย์ API ของพวกเขา"
-    },
-    "apply_proposals": {
-      "title": "ยื่นข้อเสนอ",
-      "description": "ให้ผู้ช่วยดำเนินการเปลี่ยนแปลงตามที่ระบบแนะนำ"
-    },
-    "services.use": {
-      "title": "ใช้ AI จากฟีเจอร์อื่นๆ",
-      "description": "ฟังก์ชันอื่นๆ อาจโทรติดต่อผู้ช่วยในนามของคุณ"
-    },
-    "secrets.share": {
-      "title": "แชร์คีย์ API",
-      "description": "ฟังก์ชันอื่นๆ อาจใช้คีย์ API ของ AI ที่บันทึกไว้โดยไม่เห็นคีย์นั้น"
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "ระบบผู้ช่วย AI ถูกปิดใช้งานบนเซิร์ฟเวอร์นี้",
-    "providersNeedOptIn": "เปิดใช้งานผู้ช่วย AI ด้านบนเพื่อเพิ่มผู้ให้บริการ",
-    "admin": {
-      "globallyEnabled": {
-        "label": "ผู้ช่วย AI",
-        "description": "อนุญาตให้ผู้ใช้เปิดใช้งานผู้ช่วย AI ได้ เมื่อปิดใช้งานอยู่ ผู้ช่วยจะถูกซ่อนและบล็อกไม่ให้ใครเห็น"
-      },
-      "privateEndpoints": {
-        "label": "อนุญาตให้โฮสต์ AI ส่วนตัว",
-        "description": "โฮสต์บนเครือข่ายส่วนตัวของคุณที่ผู้ใช้สามารถชี้ไปยังผู้ให้บริการได้ เช่น Ollama ที่ติดตั้งเอง ให้ใส่โฮสต์หนึ่งตัวต่อหนึ่งบรรทัด"
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "เปิดใช้งานผู้ช่วย AI",
-        "description": "อนุญาตให้ผู้ช่วย AI ช่วยเหลือในเทอร์มินัลของโฮสต์นี้ โดยค่าเริ่มต้นจะปิดอยู่ และยังคงต้องเปิดใช้งาน AI สำหรับบัญชีของคุณก่อน"
-      }
-    }
-  },
-  "ai": {
-    "title": "ผู้ช่วย",
-    "send": "ส่ง",
-    "stop": "หยุด",
-    "save": "บันทึก",
-    "cancel": "ยกเลิก",
-    "running": "วิ่ง",
-    "approve": "อนุมัติ",
-    "reject": "ปฏิเสธ",
-    "inputPlaceholder": "สอบถามเกี่ยวกับเซิร์ฟเวอร์ของคุณ หรืออธิบายการเปลี่ยนแปลงที่คุณต้องการเสนอแนะ",
-    "selectProvider": "เลือกผู้ให้บริการ",
-    "providerSettings": "การตั้งค่าผู้ให้บริการ",
-    "addProvider": "เพิ่มผู้ให้บริการ",
-    "editProvider": "แก้ไขผู้ให้บริการ",
-    "removeProvider": "ลบผู้ให้บริการ",
-    "providerType": "ผู้ให้บริการ",
-    "providerLabel": "ชื่อ",
-    "providerLabelPlaceholder": "ตัวอย่างเช่น: Ollama ท้องถิ่น",
-    "baseUrl": "ที่อยู่เซิร์ฟเวอร์",
-    "apiKey": "คีย์ API",
-    "defaultModel": "โมเดลเริ่มต้น",
-    "defaultModelPlaceholder": "ตัวอย่างเช่น: llama3.1 หรือ claude-opus-5",
-    "labelRequired": "ตั้งชื่อให้ผู้ให้บริการรายนี้",
-    "providerSaveFailed": "ไม่สามารถบันทึกผู้ให้บริการได้",
-    "providerUpdated": "ผู้ให้บริการได้รับการอัปเดตแล้ว",
-    "providerDeleteFailed": "ไม่สามารถลบผู้ให้บริการได้",
-    "privateEndpointHint": "การเข้าถึงที่อยู่บนเครือข่ายส่วนตัวของคุณนั้น จำเป็นต้องให้ผู้ดูแลระบบอนุญาตก่อน",
-    "providerOllama": "โอลาม่า",
-    "providerAnthropic": "แอนโทรปิก",
-    "providerOpenai": "โอเพ่นไอ",
-    "providerGemini": "กูเกิล เจมินี",
-    "providerOpenaiCompatible": "เข้ากันได้กับ OpenAI",
-    "toolArguments": "ป้อนข้อมูล",
-    "toolResult": "ผลลัพธ์",
-    "statusApplied": "สมัครแล้ว",
-    "statusRejected": "ถูกปฏิเสธ",
-    "proposalApplied": "มีการเปลี่ยนแปลงเกิดขึ้น",
-    "proposalApplyFailed": "ไม่สามารถทำการเปลี่ยนแปลงได้",
-    "proposalRejectFailed": "ไม่สามารถปฏิเสธการเปลี่ยนแปลงได้",
-    "enableTitle": "เปิดใช้งานผู้ช่วย AI",
-    "enableDescription": "ให้ผู้ช่วยอ่านการตั้งค่าของคุณและแนะนำการเปลี่ยนแปลงเพื่อให้คุณอนุมัติ",
-    "readOnlyCommands": "อนุญาตคำสั่งวินิจฉัยแบบอ่านอย่างเดียว",
-    "readOnlyCommandsDescription": "ผู้ช่วยอาจเรียกใช้คำสั่งที่ปลอดภัยเพียงไม่กี่คำสั่ง เช่น df และ uptime โดยไม่ต้องถามทุกครั้ง คำสั่งใดๆ ที่เปลี่ยนแปลงสถานะของเซิร์ฟเวอร์จะถูกเสนอให้ดำเนินการก่อนเสมอ",
-    "modelDetectFailed": "ไม่สามารถติดต่อผู้ให้บริการได้ ดังนั้นนี่จึงเป็นรายการทั่วไป คุณสามารถพิมพ์ชื่อรุ่นใดก็ได้",
-    "modelCustom": "ป้อนชื่อรุ่น",
-    "modelRefresh": "รีเฟรชรายการ",
-    "modelPlaceholder": "เลือกหรือพิมพ์แบบจำลอง",
-    "attachHint": "พิมพ์ @ เพื่ออ้างอิงถึงโฮสต์ สนิปเป็ต หรือระบบอัตโนมัติ การเปลี่ยนแปลงที่เสนอจะถูกนำมาให้คุณอนุมัติ",
-    "runCommandTitle": "เรียกใช้คำสั่ง",
-    "assistant": "ผู้ช่วย AI",
-    "terminalPanelEmpty": "สอบถามผู้ช่วยเกี่ยวกับโฮสต์นี้ การเปลี่ยนแปลงสถานะใดๆ ต้องได้รับการอนุมัติจากคุณก่อน",
-    "terminalPanelPlaceholder": "สอบถามเกี่ยวกับโฮสต์รายนี้...",
-    "noProvidersConfigured": "ยังไม่ได้ตั้งค่าผู้ให้บริการ AI เพิ่มผู้ให้บริการในแท็บผู้ช่วย AI",
-    "runsInOpenTerminal": "ทำงานในเซสชันเทอร์มินัลที่เปิดอยู่ของคุณ",
-    "runInTerminal": "วิ่ง",
-    "terminalContextPrefill": "นี่คือผลลัพธ์จากเทอร์มินัลของฉัน:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "อนุญาตให้ฟีเจอร์อื่นๆ ใช้คีย์ API ของผู้ให้บริการ AI ของคุณสำหรับการร้องขอของตนเอง คีย์นี้จะไม่ถูกคัดลอก และคุณสามารถยกเลิกได้ทุกเมื่อ"
-    }
-  },
-  "nav": {
-    "ai": "AI"
-  },
-  "onboarding": {
-    "aiTitle": "ผู้ช่วย AI",
-    "aiIntro": "Termix อาจมีผู้ช่วย AI เสริม คุณสามารถเปลี่ยนการตั้งค่าได้ในภายหลัง",
-    "aiSkipTitle": "ปิดมันไว้",
-    "aiSkipDesc": "Termix ทำงานเหมือนเดิมทุกประการ ตัวช่วยยังคงซ่อนอยู่",
-    "aiEnableTitle": "เปิดใช้งาน",
-    "aiEnableDesc": "เพิ่มผู้ช่วยที่จะอ่านการตั้งค่าของคุณและแนะนำการเปลี่ยนแปลงที่คุณต้องอนุมัติ จำเป็นต้องมีผู้ให้บริการที่คุณจัดหาให้ เช่น Ollama ในพื้นที่ของคุณ",
-    "aiNote": "จะไม่มีการส่งข้อมูลใดๆ จนกว่าคุณจะเพิ่มผู้ให้บริการและส่งข้อความ"
-  },
-  "hosts": {
-    "docsLink": "ดูเอกสาร"
-  },
-  "plugin": {
-    "name": "ผู้ช่วย AI"
-  }
-}
diff --git a/plugins/ai/locales/translated/tr_TR.json b/plugins/ai/locales/translated/tr_TR.json
deleted file mode 100644
index e8ffa1f5a..000000000
--- a/plugins/ai/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Yardımcıyı kullanın",
-      "description": "Asistanı açın ve ona sorular sorun."
-    },
-    "manage_providers": {
-      "title": "Sağlayıcıları yönetin",
-      "description": "Yapay zeka sağlayıcılarını ve API anahtarlarını ekleyin, düzenleyin ve kaldırın."
-    },
-    "apply_proposals": {
-      "title": "Tekliflerinizi sunun.",
-      "description": "Yardımcının önerdiği değişiklikleri uygulamasına izin verin."
-    },
-    "services.use": {
-      "title": "Diğer özelliklerden yapay zeka kullanın.",
-      "description": "Diğer özellikler sizin adınıza asistanı arayabilir."
-    },
-    "secrets.share": {
-      "title": "API anahtarını paylaşın",
-      "description": "Diğer özellikler, kaydedilmiş yapay zeka API anahtarını görmeden kullanabilir."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "Bu sunucuda yapay zeka asistanı devre dışı bırakılmıştır.",
-    "providersNeedOptIn": "Sağlayıcı eklemek için yukarıdaki yapay zeka asistanını açın.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "Yapay zeka asistanı",
-        "description": "Kullanıcıların yapay zeka asistanını açmasına izin verin. Bu özellik kapalıyken, asistan gizlenir ve herkes için engellenir."
-      },
-      "privateEndpoints": {
-        "label": "Özel yapay zeka sunucularına izin verildi.",
-        "description": "Kullanıcıların bir sağlayıcıya yönlendirebileceği özel ağınızdaki sunucular (örneğin, kendi sunucunuzda barındırdığınız Ollama). Her satıra bir sunucu yazın."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "Yapay Zeka Asistanını Etkinleştir",
-        "description": "Bu sunucunun terminalinde yapay zeka asistanının yardımcı olmasına izin verin. Varsayılan olarak kapalıdır ve hesabınız için yapay zekanın etkinleştirilmiş olması gerekir."
-      }
-    }
-  },
-  "ai": {
-    "title": "Asistan",
-    "send": "Göndermek",
-    "stop": "Durdurma",
-    "save": "Kaydet",
-    "cancel": "İptal",
-    "running": "çalışan",
-    "approve": "Onaylamak",
-    "reject": "Reddetmek",
-    "inputPlaceholder": "Sunucularınız hakkında bilgi isteyin veya önereceğiniz bir değişikliği açıklayın.",
-    "selectProvider": "Bir sağlayıcı seçin",
-    "providerSettings": "Sağlayıcı ayarları",
-    "addProvider": "Sağlayıcı ekle",
-    "editProvider": "Sağlayıcıyı düzenle",
-    "removeProvider": "Sağlayıcıyı kaldır",
-    "providerType": "Sağlayıcı",
-    "providerLabel": "Ad",
-    "providerLabelPlaceholder": "Örneğin: Yerel Ollama",
-    "baseUrl": "Sunucu adresi",
-    "apiKey": "API anahtarı",
-    "defaultModel": "Varsayılan model",
-    "defaultModelPlaceholder": "Örneğin: llama3.1 veya claude-opus-5",
-    "labelRequired": "Bu sağlayıcıya bir isim verin.",
-    "providerSaveFailed": "Sağlayıcı kaydedilemedi.",
-    "providerUpdated": "Sağlayıcı güncellendi.",
-    "providerDeleteFailed": "Sağlayıcı kaldırılamadı.",
-    "privateEndpointHint": "Özel ağınızdaki adreslerin kullanılabilmesi için öncelikle yöneticinin sunucuya izin vermesi gerekmektedir.",
-    "providerOllama": "Ollama",
-    "providerAnthropic": "Antropik",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Google Gemini",
-    "providerOpenaiCompatible": "OpenAI uyumlu",
-    "toolArguments": "Giriş",
-    "toolResult": "Sonuç",
-    "statusApplied": "Uygulandı",
-    "statusRejected": "Reddedilmiş",
-    "proposalApplied": "Değişiklik uygulandı.",
-    "proposalApplyFailed": "Değişiklik uygulanamadı.",
-    "proposalRejectFailed": "Değişikliği reddedemedim.",
-    "enableTitle": "Yapay zekâ asistanını etkinleştirin",
-    "enableDescription": "Asistanın ayarlarınızı okumasını ve onaylamanız için değişiklik önerileri sunmasını sağlayın.",
-    "readOnlyCommands": "Yalnızca okuma amaçlı tanı komutlarına izin ver",
-    "readOnlyCommandsDescription": "Yardımcı program, her seferinde sormadan df ve uptime gibi kısa bir güvenli komut listesini çalıştırabilir. Sunucuda değişiklik yapan her şey her zaman önce önerilir.",
-    "modelDetectFailed": "Sağlayıcıya ulaşılamadı, bu nedenle bu genel bir listedir. İstediğiniz model adını yazabilirsiniz.",
-    "modelCustom": "Bir model adı girin",
-    "modelRefresh": "Listeyi yenile",
-    "modelPlaceholder": "Bir model seçin veya yazın.",
-    "attachHint": "Bir sunucuya, kod parçasına veya otomasyona referans vermek için @ işaretini kullanın. Onaylamanız için değişiklikler öneriliyor.",
-    "runCommandTitle": "Çalıştır komutu",
-    "assistant": "Yapay Zeka Asistanı",
-    "terminalPanelEmpty": "Bu ev sahibi hakkında asistana danışın. Durum değişikliği gerektiren her şey önce sizin onayınızı gerektirir.",
-    "terminalPanelPlaceholder": "Bu ev sahibi hakkında bilgi isteyin...",
-    "noProvidersConfigured": "Henüz hiçbir yapay zeka sağlayıcısı yapılandırılmadı. Yapay zeka asistanı sekmesinden bir tane ekleyin.",
-    "runsInOpenTerminal": "Açık terminal oturumunuzda çalışır.",
-    "runInTerminal": "Çalıştır",
-    "terminalContextPrefill": "İşte terminal çıktım:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Diğer özelliklerin kendi istekleri için yapay zeka sağlayıcınızın API anahtarını kullanmasına izin verin. Anahtar asla kopyalanmaz ve bunu istediğiniz zaman iptal edebilirsiniz."
-    }
-  },
-  "nav": {
-    "ai": "Yapay zeka"
-  },
-  "onboarding": {
-    "aiTitle": "Yapay zeka asistanı",
-    "aiIntro": "Termix isteğe bağlı bir yapay zeka asistanı içerebilir. Bunu daha sonra ayarlarınızdan değiştirebilirsiniz.",
-    "aiSkipTitle": "Kapalı bırakın",
-    "aiSkipDesc": "Termix şu anki haliyle çalışıyor. Asistan gizli kalıyor.",
-    "aiEnableTitle": "Açın",
-    "aiEnableDesc": "Ayarlarınızı okuyan ve onaylamanız halinde değişiklikler öneren bir asistan ekler. Yerel bir Ollama gibi, sizin sağladığınız bir sağlayıcıya ihtiyaç duyar.",
-    "aiNote": "Bir sağlayıcı ekleyip mesaj gönderene kadar hiçbir şey hiçbir yere gönderilmez."
-  },
-  "hosts": {
-    "docsLink": "Dokümanları görüntüle"
-  },
-  "plugin": {
-    "name": "Yapay Zeka Asistanı"
-  }
-}
diff --git a/plugins/ai/locales/translated/uk_UA.json b/plugins/ai/locales/translated/uk_UA.json
deleted file mode 100644
index c3b46fcdb..000000000
--- a/plugins/ai/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Використовуйте помічника",
-      "description": "Відкрийте помічника та запитайте його."
-    },
-    "manage_providers": {
-      "title": "Керування постачальниками",
-      "description": "Додавайте, редагуйте та видаляйте постачальників штучного інтелекту та їхні ключі API."
-    },
-    "apply_proposals": {
-      "title": "Застосувати пропозиції",
-      "description": "Нехай помічник внесе запропоновані ним зміни."
-    },
-    "services.use": {
-      "title": "Використання ШІ з інших функцій",
-      "description": "Інші функції можуть викликати помічника від вашого імені."
-    },
-    "secrets.share": {
-      "title": "Поділитися ключем API",
-      "description": "Інші функції можуть використовувати збережений ключ API штучного інтелекту, не бачачи його."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "Помічник зі штучним інтелектом вимкнено на цьому сервері.",
-    "providersNeedOptIn": "Увімкніть помічника зі штучним інтелектом вище, щоб додати постачальників.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "Асистент зі штучним інтелектом",
-        "description": "Дозвольте користувачам увімкнути помічника зі штучним інтелектом. Коли це вимкнено, помічник прихований і заблокований для всіх."
-      },
-      "privateEndpoints": {
-        "label": "Дозволені приватні хости ШІ",
-        "description": "Хости у вашій приватній мережі, на які користувачі можуть вказувати провайдера, наприклад, Ollama з власним хостингом. Розмістіть по одному хосту в кожному рядку."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "Увімкнути помічника зі штучним інтелектом",
-        "description": "Дозволити помічнику зі штучним інтелектом допомагати в терміналі цього хоста. Вимкнено за замовчуванням, але все одно потребує ввімкнення штучного інтелекту для вашого облікового запису."
-      }
-    }
-  },
-  "ai": {
-    "title": "Помічник",
-    "send": "Надіслати",
-    "stop": "СТІЙ",
-    "save": "Зберегти",
-    "cancel": "Скасувати",
-    "running": "біг",
-    "approve": "Схвалити",
-    "reject": "Відхилити",
-    "inputPlaceholder": "Запитайте про ваші сервери або опишіть зміну, яку ви хочете запропонувати",
-    "selectProvider": "Виберіть постачальника",
-    "providerSettings": "Налаштування постачальника",
-    "addProvider": "Додати постачальника",
-    "editProvider": "Редагувати постачальника",
-    "removeProvider": "Видалити постачальника",
-    "providerType": "Постачальник",
-    "providerLabel": "Ім'я",
-    "providerLabelPlaceholder": "Наприклад: Місцевий Оллама",
-    "baseUrl": "Адреса сервера",
-    "apiKey": "Ключ API",
-    "defaultModel": "Модель за замовчуванням",
-    "defaultModelPlaceholder": "Наприклад: llama3.1 або claude-opus-5",
-    "labelRequired": "Дайте назву цьому постачальнику",
-    "providerSaveFailed": "Не вдалося зберегти постачальника",
-    "providerUpdated": "Постачальника оновлено",
-    "providerDeleteFailed": "Не вдалося видалити постачальника",
-    "privateEndpointHint": "Адреси у вашій приватній мережі спочатку потребують дозволу адміністратора хоста.",
-    "providerOllama": "Оллама",
-    "providerAnthropic": "Антропний",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Google Близнюки",
-    "providerOpenaiCompatible": "Сумісний з OpenAI",
-    "toolArguments": "Вхід",
-    "toolResult": "Результат",
-    "statusApplied": "Застосовано",
-    "statusRejected": "Відхилено",
-    "proposalApplied": "Зміну застосовано",
-    "proposalApplyFailed": "Не вдалося застосувати зміну",
-    "proposalRejectFailed": "Не вдалося відхилити зміну",
-    "enableTitle": "Увімкнути помічника зі штучним інтелектом",
-    "enableDescription": "Дозвольте асистенту прочитати ваші налаштування та запропонувати зміни для вашого схвалення.",
-    "readOnlyCommands": "Дозволити діагностичні команди лише для читання",
-    "readOnlyCommandsDescription": "Помічник може виконувати короткий список безпечних команд, таких як df та uptime, не запитуючи щоразу. Будь-які зміни на сервері завжди пропонуються першими.",
-    "modelDetectFailed": "Не вдалося зв’язатися з постачальником, тому це загальний список. Ви можете ввести будь-яку назву моделі.",
-    "modelCustom": "Введіть назву моделі",
-    "modelRefresh": "Оновити список",
-    "modelPlaceholder": "Виберіть або введіть модель",
-    "attachHint": "Введіть @, щоб посилатися на хост, фрагмент або автоматизацію. Зміни пропонуються для вашого схвалення.",
-    "runCommandTitle": "Виконати команду",
-    "assistant": "Помічник зі штучним інтелектом",
-    "terminalPanelEmpty": "Запитайте асистента про цього хоста. Будь-яка зміна стану потребує вашого попереднього схвалення.",
-    "terminalPanelPlaceholder": "Запитайте про цього хоста...",
-    "noProvidersConfigured": "Постачальника штучного інтелекту ще не налаштовано. Додайте його на вкладці помічника штучного інтелекту.",
-    "runsInOpenTerminal": "Працює у вашому відкритому термінальному сеансі.",
-    "runInTerminal": "Бігти",
-    "terminalContextPrefill": "Ось мій вивід з терміналу:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Дозвольте іншим функціям використовувати ваш ключ API постачальника штучного інтелекту для власних запитів. Ключ ніколи не копіюється, і ви можете скасувати його будь-коли."
-    }
-  },
-  "nav": {
-    "ai": "Штучний інтелект"
-  },
-  "onboarding": {
-    "aiTitle": "Асистент зі штучним інтелектом",
-    "aiIntro": "Termix може включати додатковий помічник зі штучним інтелектом. Ви можете змінити це пізніше в налаштуваннях.",
-    "aiSkipTitle": "Залиште це вимкненим",
-    "aiSkipDesc": "Termix працює як і зараз. Помічник залишається прихованим.",
-    "aiEnableTitle": "Увімкніть це",
-    "aiEnableDesc": "Додає помічника, який читає ваші налаштування та пропонує зміни, які ви схвалюєте. Потрібен постачальник, якого ви надаєте, наприклад, місцевий Ollama.",
-    "aiNote": "Нічого нікуди не надсилається, доки ви не додасте постачальника та не надішлете повідомлення."
-  },
-  "hosts": {
-    "docsLink": "Переглянути документи"
-  },
-  "plugin": {
-    "name": "Помічник зі штучним інтелектом"
-  }
-}
diff --git a/plugins/ai/locales/translated/vi_VN.json b/plugins/ai/locales/translated/vi_VN.json
deleted file mode 100644
index cbb5c3a78..000000000
--- a/plugins/ai/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "Sử dụng trợ lý",
-      "description": "Mở trợ lý ảo và hỏi nó những câu hỏi."
-    },
-    "manage_providers": {
-      "title": "Quản lý nhà cung cấp",
-      "description": "Thêm, chỉnh sửa và xóa các nhà cung cấp AI và khóa API của họ."
-    },
-    "apply_proposals": {
-      "title": "Áp dụng các đề xuất",
-      "description": "Hãy để trợ lý thực hiện những thay đổi mà nó đề xuất."
-    },
-    "services.use": {
-      "title": "Sử dụng trí tuệ nhân tạo từ các tính năng khác",
-      "description": "Các tính năng khác có thể gọi trợ lý ảo thay mặt bạn."
-    },
-    "secrets.share": {
-      "title": "Chia sẻ khóa API",
-      "description": "Các tính năng khác có thể sử dụng khóa API AI đã lưu trữ mà không cần nhìn thấy khóa đó."
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "Trợ lý AI đã bị tắt trên máy chủ này.",
-    "providersNeedOptIn": "Hãy bật trợ lý AI ở trên để thêm nhà cung cấp.",
-    "admin": {
-      "globallyEnabled": {
-        "label": "Trợ lý AI",
-        "description": "Cho phép người dùng bật trợ lý AI. Khi chức năng này tắt, trợ lý sẽ bị ẩn và chặn đối với tất cả mọi người."
-      },
-      "privateEndpoints": {
-        "label": "Cho phép máy chủ AI riêng",
-        "description": "Các máy chủ trên mạng riêng của bạn mà người dùng có thể trỏ đến nhà cung cấp, chẳng hạn như Ollama tự lưu trữ. Đặt một máy chủ trên mỗi dòng."
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "Kích hoạt Trợ lý AI",
-        "description": "Cho phép trợ lý AI hỗ trợ trong thiết bị đầu cuối của máy chủ này. Mặc định là tắt, nhưng bạn vẫn cần bật AI cho tài khoản của mình."
-      }
-    }
-  },
-  "ai": {
-    "title": "Trợ lý",
-    "send": "Gửi",
-    "stop": "Bit dừng",
-    "save": "Lưu",
-    "cancel": "Hủy",
-    "running": "đang chạy",
-    "approve": "Chấp thuận",
-    "reject": "Từ chối",
-    "inputPlaceholder": "Hãy hỏi về máy chủ của bạn, hoặc mô tả một thay đổi mà bạn muốn đề xuất.",
-    "selectProvider": "Chọn nhà cung cấp",
-    "providerSettings": "Cài đặt nhà cung cấp",
-    "addProvider": "Thêm nhà cung cấp",
-    "editProvider": "Chỉnh sửa nhà cung cấp",
-    "removeProvider": "Xóa nhà cung cấp",
-    "providerType": "Nhà cung cấp",
-    "providerLabel": "Tên",
-    "providerLabelPlaceholder": "Ví dụ: Ollama địa phương",
-    "baseUrl": "Địa chỉ máy chủ",
-    "apiKey": "Khóa API",
-    "defaultModel": "Mô hình mặc định",
-    "defaultModelPlaceholder": "Ví dụ: llama3.1 hoặc claude-opus-5",
-    "labelRequired": "Đặt tên cho nhà cung cấp này",
-    "providerSaveFailed": "Không thể lưu nhà cung cấp",
-    "providerUpdated": "Nhà cung cấp đã cập nhật",
-    "providerDeleteFailed": "Không thể xóa nhà cung cấp",
-    "privateEndpointHint": "Các địa chỉ trên mạng riêng của bạn cần được quản trị viên cho phép truy cập trước.",
-    "providerOllama": "Ollama",
-    "providerAnthropic": "Nhân loại",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Google Gemini",
-    "providerOpenaiCompatible": "Tương thích với OpenAI",
-    "toolArguments": "Nhập",
-    "toolResult": "Kết quả",
-    "statusApplied": "Đã áp dụng",
-    "statusRejected": "Vật bị loại bỏ",
-    "proposalApplied": "Thay đổi đã được áp dụng",
-    "proposalApplyFailed": "Không thể áp dụng thay đổi",
-    "proposalRejectFailed": "Không thể từ chối thay đổi",
-    "enableTitle": "Kích hoạt trợ lý AI",
-    "enableDescription": "Hãy để trợ lý đọc cấu hình của bạn và đề xuất các thay đổi để bạn phê duyệt.",
-    "readOnlyCommands": "Cho phép các lệnh chẩn đoán chỉ đọc",
-    "readOnlyCommandsDescription": "Trợ lý có thể chạy một danh sách ngắn các lệnh an toàn như df và uptime mà không cần hỏi mỗi lần. Bất kỳ lệnh nào thay đổi máy chủ đều được đề xuất trước tiên.",
-    "modelDetectFailed": "Không thể liên lạc được với nhà cung cấp, vì vậy đây là danh sách chung. Bạn có thể nhập bất kỳ tên mẫu nào.",
-    "modelCustom": "Nhập tên mẫu",
-    "modelRefresh": "Làm mới danh sách",
-    "modelPlaceholder": "Chọn hoặc nhập mô hình",
-    "attachHint": "Nhập @ để tham chiếu đến máy chủ, đoạn mã hoặc quy trình tự động hóa. Các thay đổi được đề xuất để bạn phê duyệt.",
-    "runCommandTitle": "Chạy lệnh",
-    "assistant": "Trợ lý AI",
-    "terminalPanelEmpty": "Hãy hỏi trợ lý về máy chủ này. Bất cứ thay đổi nào về trạng thái đều cần sự chấp thuận của bạn trước.",
-    "terminalPanelPlaceholder": "Hãy hỏi về chủ nhà này...",
-    "noProvidersConfigured": "Chưa có nhà cung cấp AI nào được cấu hình. Hãy thêm một nhà cung cấp trong tab trợ lý AI.",
-    "runsInOpenTerminal": "Chương trình này chạy trong cửa sổ dòng lệnh đang mở của bạn.",
-    "runInTerminal": "Chạy",
-    "terminalContextPrefill": "Đây là kết quả hiển thị trên terminal của tôi:\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "Cho phép các tính năng khác sử dụng khóa API của nhà cung cấp AI của bạn cho các yêu cầu riêng của chúng. Khóa này không bao giờ được sao chép và bạn có thể thu hồi nó bất cứ lúc nào."
-    }
-  },
-  "nav": {
-    "ai": "Trí tuệ nhân tạo"
-  },
-  "onboarding": {
-    "aiTitle": "Trợ lý AI",
-    "aiIntro": "Termix có thể bao gồm trợ lý AI tùy chọn. Bạn có thể thay đổi điều này sau trong phần cài đặt.",
-    "aiSkipTitle": "Đừng làm vậy",
-    "aiSkipDesc": "Termix vẫn hoạt động như hiện tại. Trợ lý ảo vẫn ẩn mình.",
-    "aiEnableTitle": "Bật nó lên",
-    "aiEnableDesc": "Thêm một trợ lý đọc cấu hình của bạn và đề xuất các thay đổi mà bạn chấp thuận. Cần có nhà cung cấp do bạn chỉ định, chẳng hạn như Ollama địa phương.",
-    "aiNote": "Không có dữ liệu nào được gửi đi cho đến khi bạn thêm nhà cung cấp và gửi tin nhắn."
-  },
-  "hosts": {
-    "docsLink": "Xem tài liệu"
-  },
-  "plugin": {
-    "name": "Trợ lý AI"
-  }
-}
diff --git a/plugins/ai/locales/translated/zh_CN.json b/plugins/ai/locales/translated/zh_CN.json
deleted file mode 100644
index 87f55d44a..000000000
--- a/plugins/ai/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "使用助手",
-      "description": "打开助手并向它提问。"
-    },
-    "manage_providers": {
-      "title": "管理供应商",
-      "description": "添加、编辑和删除人工智能提供商及其 API 密钥。"
-    },
-    "apply_proposals": {
-      "title": "提交提案",
-      "description": "让助手执行它建议的更改。"
-    },
-    "services.use": {
-      "title": "利用其他功能中的人工智能",
-      "description": "其他功能可能会代表您呼叫语音助手。"
-    },
-    "secrets.share": {
-      "title": "分享 API 密钥",
-      "description": "其他功能可能在看不到密钥的情况下使用已存储的 AI API 密钥。"
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "此服务器上的AI助手已关闭。",
-    "providersNeedOptIn": "开启上方的AI助手，即可添加服务提供商。",
-    "admin": {
-      "globallyEnabled": {
-        "label": "AI 助手",
-        "description": "允许用户开启 AI 助手。关闭此功能后，助手将被隐藏，所有用户均无法使用。"
-      },
-      "privateEndpoints": {
-        "label": "允许的私有 AI 主机",
-        "description": "用户可向服务提供商指向的私有网络上的主机，例如自托管的 Ollama。每行填写一个主机。"
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "启用人工智能助手",
-        "description": "允许 AI 助手在此主机的终端上提供帮助。默认情况下处于关闭状态，但仍需在您的帐户中启用 AI 功能。"
-      }
-    }
-  },
-  "ai": {
-    "title": "助手",
-    "send": "发送",
-    "stop": "停止",
-    "save": "保存",
-    "cancel": "取消",
-    "running": "运行中",
-    "approve": "批准",
-    "reject": "拒绝",
-    "inputPlaceholder": "询问服务器相关情况，或描述要提出的变更建议",
-    "selectProvider": "选择服务提供商",
-    "providerSettings": "提供商设置",
-    "addProvider": "添加提供商",
-    "editProvider": "编辑提供商",
-    "removeProvider": "移除提供者",
-    "providerType": "提供商",
-    "providerLabel": "名称",
-    "providerLabelPlaceholder": "例如：本地 Ollama",
-    "baseUrl": "服务器地址",
-    "apiKey": "API 密钥",
-    "defaultModel": "默认模型",
-    "defaultModelPlaceholder": "例如：llama3.1 或 claude-opus-5",
-    "labelRequired": "给此提供商起个名字",
-    "providerSaveFailed": "无法保存提供商",
-    "providerUpdated": "提供商已更新",
-    "providerDeleteFailed": "无法移除提供商",
-    "privateEndpointHint": "您私有网络上的地址需要管理员先允许主机访问。",
-    "providerOllama": "Ollama",
-    "providerAnthropic": "Anthropic",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Google Gemini",
-    "providerOpenaiCompatible": "兼容 OpenAI",
-    "toolArguments": "输入",
-    "toolResult": "结果",
-    "statusApplied": "已应用",
-    "statusRejected": "已拒绝",
-    "proposalApplied": "变更已生效",
-    "proposalApplyFailed": "无法应用更改",
-    "proposalRejectFailed": "无法拒绝更改",
-    "enableTitle": "启用 AI 助手",
-    "enableDescription": "让助手读取您的设置并提出更改建议，供您批准。",
-    "readOnlyCommands": "允许只读诊断命令",
-    "readOnlyCommandsDescription": "助手可能会在不每次都询问的情况下运行一些安全命令，例如 `df` 和 `uptime`。任何会更改服务器的操作都会优先被提出。",
-    "modelDetectFailed": "无法联系到提供商，所以这里提供的是通用列表。您可以输入任何模型名称。",
-    "modelCustom": "请输入模型名称",
-    "modelRefresh": "刷新列表",
-    "modelPlaceholder": "选择或输入模型",
-    "attachHint": "输入 @ 符号可引用主机、代码片段或自动化流程。系统会提出更改建议，供您批准。",
-    "runCommandTitle": "运行命令",
-    "assistant": "人工智能助手",
-    "terminalPanelEmpty": "向助理询问有关此房东的信息。任何状态变更都需要您先批准。",
-    "terminalPanelPlaceholder": "询问一下这位房东的情况……",
-    "noProvidersConfigured": "尚未配置任何 AI 提供商。请在 AI 助手选项卡中添加。",
-    "runsInOpenTerminal": "在打开的终端会话中运行。",
-    "runInTerminal": "运行",
-    "terminalContextPrefill": "以下是我的终端输出：\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "允许其他功能使用您的 AI 提供商 API 密钥发出各自的请求。该密钥绝不会被复制，您可以随时撤销此授权。"
-    }
-  },
-  "nav": {
-    "ai": "AI"
-  },
-  "onboarding": {
-    "aiTitle": "AI 助手",
-    "aiIntro": "Termix 可以包含一个可选的 AI 助手。您可以稍后在设置中更改此选项。",
-    "aiSkipTitle": "禁用",
-    "aiSkipDesc": "Termix 正常工作，AI 助手将保持隐藏状态。",
-    "aiEnableTitle": "启用",
-    "aiEnableDesc": "启用 AI 助手，它将分析您的配置并提供优化建议。需自行配置服务商，例如本地运行的 Ollama。",
-    "aiNote": "在您配置服务商并主动发送消息之前，绝不会向外发送任何数据。"
-  },
-  "hosts": {
-    "docsLink": "查看文档"
-  },
-  "plugin": {
-    "name": "人工智能助手"
-  }
-}
diff --git a/plugins/ai/locales/translated/zh_TW.json b/plugins/ai/locales/translated/zh_TW.json
deleted file mode 100644
index 06f33b4b4..000000000
--- a/plugins/ai/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,122 +0,0 @@
-{
-  "permissions": {
-    "use": {
-      "title": "使用助手",
-      "description": "打開助手並向它提問。"
-    },
-    "manage_providers": {
-      "title": "管理供應商",
-      "description": "新增、編輯和刪除人工智慧提供者及其 API 金鑰。"
-    },
-    "apply_proposals": {
-      "title": "提交提案",
-      "description": "讓助手執行它建議的更改。"
-    },
-    "services.use": {
-      "title": "利用其他功能中的人工智慧",
-      "description": "其他功能可能會代表您呼叫語音助理。"
-    },
-    "secrets.share": {
-      "title": "分享 API 金鑰",
-      "description": "其他功能可能會在不查看金鑰的情況下使用已儲存的 AI API 金鑰。"
-    }
-  },
-  "settings": {
-    "assistantUnavailable": "此伺服器上的AI助理已關閉。",
-    "providersNeedOptIn": "開啟上方的AI助手，即可新增服務提供者。",
-    "admin": {
-      "globallyEnabled": {
-        "label": "人工智慧助手",
-        "description": "允許用戶開啟AI助理。關閉此功能後，助手將被隱藏，所有用戶均無法存取。"
-      },
-      "privateEndpoints": {
-        "label": "允許的私有人工智慧主機",
-        "description": "使用者可將服務提供者指向的私有網路上的主機，例如自架的 Ollama。每行填寫一個主機。"
-      }
-    },
-    "host": {
-      "enableAiAssistant": {
-        "label": "啟用人工智慧助手",
-        "description": "允許 AI 助理在此主機的終端機上提供協助。預設為關閉狀態，但仍需在您的帳戶中啟用 AI 功能。"
-      }
-    }
-  },
-  "ai": {
-    "title": "助理",
-    "send": "傳送",
-    "stop": "停止位元",
-    "save": "儲存",
-    "cancel": "取消",
-    "running": "執行中",
-    "approve": "核准",
-    "reject": "拒絕",
-    "inputPlaceholder": "詢問伺服器相關情況，或描述要提出的變更建議",
-    "selectProvider": "選擇服務提供者",
-    "providerSettings": "提供者設定",
-    "addProvider": "新增提供者",
-    "editProvider": "編輯提供者",
-    "removeProvider": "移除提供者",
-    "providerType": "提供者",
-    "providerLabel": "名稱",
-    "providerLabelPlaceholder": "例如：本地奧拉馬",
-    "baseUrl": "伺服器位址",
-    "apiKey": "API金鑰",
-    "defaultModel": "預設模型",
-    "defaultModelPlaceholder": "例如：llama3.1 或 claude-opus-5",
-    "labelRequired": "給這家服務提供者取個名字",
-    "providerSaveFailed": "無法儲存提供者",
-    "providerUpdated": "提供者已更新",
-    "providerDeleteFailed": "無法移除提供者",
-    "privateEndpointHint": "您私有網路上的位址需要管理員先允許主機存取。",
-    "providerOllama": "奧拉瑪",
-    "providerAnthropic": "人類學",
-    "providerOpenai": "OpenAI",
-    "providerGemini": "Google Gemini",
-    "providerOpenaiCompatible": "相容 OpenAI",
-    "toolArguments": "輸入",
-    "toolResult": "結果",
-    "statusApplied": "應用",
-    "statusRejected": "已拒絕",
-    "proposalApplied": "變更已生效",
-    "proposalApplyFailed": "無法套用變更",
-    "proposalRejectFailed": "無法拒絕更改",
-    "enableTitle": "啟用人工智慧助手",
-    "enableDescription": "請助手讀取您的設定並提出更改建議，供您批准。",
-    "readOnlyCommands": "允許只讀診斷命令",
-    "readOnlyCommandsDescription": "助手可能會在不每次都詢問的情況下執行一些安全的命令，例如 `df` 和 `uptime`。任何會更改伺服器的操作都會優先被提出。",
-    "modelDetectFailed": "無法聯繫到供應商，所以這裡提供的是通用清單。您可以輸入任何型號名稱。",
-    "modelCustom": "請輸入型號名稱",
-    "modelRefresh": "重新整理清單",
-    "modelPlaceholder": "選擇或輸入型號",
-    "attachHint": "輸入 @ 符號可引用主機、程式碼片段或自動化流程。系統會提出更改建議，供您批准。",
-    "runCommandTitle": "運行命令",
-    "assistant": "人工智慧助手",
-    "terminalPanelEmpty": "向助理詢問有關此房東的資訊。任何狀態變更都需要您先批准。",
-    "terminalPanelPlaceholder": "詢問一下這位房東的狀況…",
-    "noProvidersConfigured": "尚未配置任何 AI 提供者。請在 AI 助理標籤中新增。",
-    "runsInOpenTerminal": "在開啟的終端機會話中運行。",
-    "runInTerminal": "執行",
-    "terminalContextPrefill": "以下是我的終端輸出：\n\n{{output}}\n\n",
-    "secrets": {
-      "shareApiKey": "允許其他功能使用您的 AI 提供者 API 金鑰發出各自的請求。該密鑰絕不會被複製，您可以隨時撤銷此授權。"
-    }
-  },
-  "nav": {
-    "ai": "人工智慧"
-  },
-  "onboarding": {
-    "aiTitle": "人工智慧助手",
-    "aiIntro": "Termix 可以包含一個可選的 AI 助手。您可以稍後在設定中變更此選項。",
-    "aiSkipTitle": "丟開",
-    "aiSkipDesc": "Termix 的運作方式與現在相同。助手保持隱藏狀態。",
-    "aiEnableTitle": "打開它",
-    "aiEnableDesc": "添加一個助手，它可以讀取您的設定並提出您批准的更改建議。需要您提供服務提供者，例如當地的 Ollama 服務提供者。",
-    "aiNote": "在您新增服務提供者並發送訊息之前，任何內容都不會發送到任何地方。"
-  },
-  "hosts": {
-    "docsLink": "檢視文件"
-  },
-  "plugin": {
-    "name": "人工智慧助手"
-  }
-}
diff --git a/plugins/ai/manifest.json b/plugins/ai/manifest.json
deleted file mode 100644
index 0375022b8..000000000
--- a/plugins/ai/manifest.json
+++ /dev/null
@@ -1,194 +0,0 @@
-{
-  "id": "ai",
-  "name": "AI Assistant",
-  "version": "1.0.0",
-  "description": "An AI assistant that can read your hosts, snippets, fleets, alerts and automations, and suggest changes for you to approve.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Productivity",
-  "icon": "Sparkles",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "hosts:read",
-    "hosts:write",
-    "credentials:use",
-    "ssh:connect",
-    "db:own",
-    "secrets:own",
-    "network:outbound",
-    "notify:send",
-    "network:serve",
-    "ui:surface",
-    "users:impersonate"
-  ],
-  "optionalDependencies": {
-    "workspaces": "^1.0.0",
-    "network-topology": "^1.0.0",
-    "snippets": "^1.0.0",
-    "fleets": "^1.0.0",
-    "ssh-terminal": "^1.0.0",
-    "automations": "^1.0.0",
-    "homepage": "^1.0.0"
-  },
-  "requires": [
-    {
-      "service": "workspaces.saved",
-      "versionRange": "^1.0.0",
-      "optional": true
-    },
-    {
-      "service": "network-topology.graph",
-      "versionRange": "^1.0.0",
-      "optional": true
-    },
-    {
-      "service": "snippets.access",
-      "versionRange": "^1.0.0",
-      "optional": true
-    },
-    {
-      "service": "fleets.access",
-      "versionRange": "^1.0.0",
-      "optional": true
-    },
-    {
-      "service": "terminal.history",
-      "versionRange": "^1.0.0",
-      "optional": true
-    },
-    {
-      "service": "automations.access",
-      "versionRange": "^1.0.0",
-      "optional": true
-    },
-    {
-      "service": "homepage.items",
-      "versionRange": "^1.0.0",
-      "optional": true
-    }
-  ],
-  "providesSecret": [
-    {
-      "key": "api-key",
-      "permission": "ai.secrets.share",
-      "descriptionKey": "ai.secrets.shareApiKey"
-    }
-  ],
-  "contributes": {
-    "tabs": [
-      {
-        "id": "ai",
-        "titleKey": "nav.ai",
-        "icon": "Sparkles",
-        "openFrom": ["rail", "palette"]
-      }
-    ],
-    "actions": [
-      {
-        "id": "ai.openWithContext",
-        "titleKey": "ai.assistant",
-        "handler": "openWithContext",
-        "icon": "Bot",
-        "permission": "ai.services.use",
-        "slot": "terminal.toolbar",
-        "kind": "button"
-      }
-    ],
-    "permissions": [
-      {
-        "name": "use",
-        "titleKey": "permissions.use.title",
-        "descriptionKey": "permissions.use.description",
-        "defaultRoles": ["user"]
-      },
-      {
-        "name": "manage_providers",
-        "titleKey": "permissions.manage_providers.title",
-        "descriptionKey": "permissions.manage_providers.description",
-        "defaultRoles": ["user"]
-      },
-      {
-        "name": "apply_proposals",
-        "titleKey": "permissions.apply_proposals.title",
-        "descriptionKey": "permissions.apply_proposals.description",
-        "defaultRoles": ["user"]
-      },
-      {
-        "name": "services.use",
-        "titleKey": "permissions.services.use.title",
-        "descriptionKey": "permissions.services.use.description",
-        "defaultRoles": ["user"]
-      },
-      {
-        "name": "secrets.share",
-        "titleKey": "permissions.secrets.share.title",
-        "descriptionKey": "permissions.secrets.share.description",
-        "defaultRoles": ["user"]
-      }
-    ],
-    "settings": {
-      "admin": [
-        {
-          "key": "globallyEnabled",
-          "type": "boolean",
-          "labelKey": "settings.admin.globallyEnabled.label",
-          "descriptionKey": "settings.admin.globallyEnabled.description",
-          "default": false
-        },
-        {
-          "key": "privateEndpoints",
-          "type": "textarea",
-          "labelKey": "settings.admin.privateEndpoints.label",
-          "descriptionKey": "settings.admin.privateEndpoints.description",
-          "requires": "globallyEnabled",
-          "default": "localhost\n127.0.0.1\n::1\nhost.docker.internal"
-        }
-      ],
-      "user": [
-        {
-          "key": "enabled",
-          "type": "boolean",
-          "labelKey": "ai.enableTitle",
-          "descriptionKey": "ai.enableDescription",
-          "default": false
-        },
-        {
-          "key": "allowReadOnlyCommands",
-          "type": "boolean",
-          "labelKey": "ai.readOnlyCommands",
-          "descriptionKey": "ai.readOnlyCommandsDescription",
-          "requires": "enabled",
-          "default": false
-        },
-        {
-          "key": "providers",
-          "type": "custom",
-          "component": "providers",
-          "permission": "manage_providers"
-        }
-      ],
-      "host": {
-        "editorGroup": "ssh",
-        "editorOrder": 90,
-        "fields": [
-          {
-            "key": "enableAiAssistant",
-            "type": "boolean",
-            "labelKey": "settings.host.enableAiAssistant.label",
-            "descriptionKey": "settings.host.enableAiAssistant.description",
-            "default": false
-          }
-        ]
-      }
-    },
-    "uses": ["terminal.sidePanel", "terminal.toolbar"]
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"]
-}
diff --git a/plugins/ai/migrations/mysql/0001_adopt_ai_tables.sql b/plugins/ai/migrations/mysql/0001_adopt_ai_tables.sql
deleted file mode 100644
index 6abe55137..000000000
--- a/plugins/ai/migrations/mysql/0001_adopt_ai_tables.sql
+++ /dev/null
@@ -1,55 +0,0 @@
--- ai 0001: adopt_ai_tables
--- Generated by termix-plugin migrations. Review before committing.
--- Hand-edited: keeps the legacy foreign key from messages and proposals to
--- their conversation, which the SDK cannot declare.
-
-CREATE TABLE IF NOT EXISTS `ai_providers` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `provider_type` text NOT NULL,
-  `label` varchar(255) NOT NULL,
-  `base_url` text,
-  `api_key_prefix` text,
-  `default_model` text,
-  `enabled` boolean NOT NULL DEFAULT true,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `ai_providers` TO `p_ai_providers`;
-CREATE TABLE IF NOT EXISTS `ai_conversations` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `title` text,
-  `provider_id` int,
-  `model` text,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `ai_conversations` TO `p_ai_conversations`;
-CREATE TABLE IF NOT EXISTS `ai_messages` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `conversation_id` int NOT NULL,
-  `role` text NOT NULL,
-  `content` text NOT NULL DEFAULT (''),
-  `tool_calls` text,
-  `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`conversation_id`) REFERENCES `p_ai_conversations` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `ai_messages` TO `p_ai_messages`;
-CREATE TABLE IF NOT EXISTS `ai_proposals` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `conversation_id` int NOT NULL,
-  `user_id` varchar(255) NOT NULL,
-  `kind` varchar(255) NOT NULL,
-  `summary` text,
-  `payload` text NOT NULL DEFAULT ('{}'),
-  `status` varchar(32) NOT NULL DEFAULT 'pending',
-  `applied_at` text,
-  `result_summary` text,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`conversation_id`) REFERENCES `p_ai_conversations` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `ai_proposals` TO `p_ai_proposals`;
diff --git a/plugins/ai/migrations/mysql/0002_provider_sync.sql b/plugins/ai/migrations/mysql/0002_provider_sync.sql
deleted file mode 100644
index 3652ae1c6..000000000
--- a/plugins/ai/migrations/mysql/0002_provider_sync.sql
+++ /dev/null
@@ -1 +0,0 @@
-ALTER TABLE `p_ai_providers` ADD COLUMN `sync_id` varchar(255) UNIQUE;
diff --git a/plugins/ai/migrations/postgres/0001_adopt_ai_tables.sql b/plugins/ai/migrations/postgres/0001_adopt_ai_tables.sql
deleted file mode 100644
index b872c9a41..000000000
--- a/plugins/ai/migrations/postgres/0001_adopt_ai_tables.sql
+++ /dev/null
@@ -1,60 +0,0 @@
--- ai 0001: adopt_ai_tables
--- Generated by termix-plugin migrations. Review before committing.
--- Hand-edited: keeps the legacy foreign key from messages and proposals to
--- their conversation, which the SDK cannot declare.
-
-CREATE TABLE IF NOT EXISTS "ai_providers" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "provider_type" text NOT NULL,
-  "label" varchar(255) NOT NULL,
-  "base_url" text,
-  "api_key_prefix" text,
-  "default_model" text,
-  "enabled" boolean NOT NULL DEFAULT true,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_ai_providers_user_label" ON "ai_providers" ("user_id", "label");
-ALTER TABLE "ai_providers" RENAME TO "p_ai_providers";
-CREATE TABLE IF NOT EXISTS "ai_conversations" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "title" text,
-  "provider_id" integer,
-  "model" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" varchar(255) NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_ai_conversations_user" ON "ai_conversations" ("user_id", "updated_at");
-ALTER TABLE "ai_conversations" RENAME TO "p_ai_conversations";
-CREATE TABLE IF NOT EXISTS "ai_messages" (
-  "id" serial PRIMARY KEY,
-  "conversation_id" integer NOT NULL,
-  "role" text NOT NULL,
-  "content" text NOT NULL DEFAULT '',
-  "tool_calls" text,
-  "created_at" varchar(255) NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("conversation_id") REFERENCES "p_ai_conversations" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_ai_messages_conversation" ON "ai_messages" ("conversation_id", "created_at");
-ALTER TABLE "ai_messages" RENAME TO "p_ai_messages";
-CREATE TABLE IF NOT EXISTS "ai_proposals" (
-  "id" serial PRIMARY KEY,
-  "conversation_id" integer NOT NULL,
-  "user_id" varchar(255) NOT NULL,
-  "kind" varchar(255) NOT NULL,
-  "summary" text,
-  "payload" text NOT NULL DEFAULT '{}',
-  "status" varchar(32) NOT NULL DEFAULT 'pending',
-  "applied_at" text,
-  "result_summary" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("conversation_id") REFERENCES "p_ai_conversations" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_ai_proposals_user" ON "ai_proposals" ("user_id", "status");
-CREATE INDEX IF NOT EXISTS "idx_ai_proposals_conversation" ON "ai_proposals" ("conversation_id");
-ALTER TABLE "ai_proposals" RENAME TO "p_ai_proposals";
diff --git a/plugins/ai/migrations/postgres/0002_provider_sync.sql b/plugins/ai/migrations/postgres/0002_provider_sync.sql
deleted file mode 100644
index f5c46713b..000000000
--- a/plugins/ai/migrations/postgres/0002_provider_sync.sql
+++ /dev/null
@@ -1 +0,0 @@
-ALTER TABLE "p_ai_providers" ADD COLUMN "sync_id" varchar(255) UNIQUE;
diff --git a/plugins/ai/migrations/snapshot.json b/plugins/ai/migrations/snapshot.json
deleted file mode 100644
index 5d98ed661..000000000
--- a/plugins/ai/migrations/snapshot.json
+++ /dev/null
@@ -1,196 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "providers": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "providerType": {
-          "type": "text",
-          "notNull": true
-        },
-        "label": {
-          "type": "varchar",
-          "length": 255,
-          "notNull": true
-        },
-        "baseUrl": {
-          "type": "text"
-        },
-        "apiKeyPrefix": {
-          "type": "text"
-        },
-        "defaultModel": {
-          "type": "text"
-        },
-        "enabled": {
-          "type": "boolean",
-          "notNull": true,
-          "defaultValue": true
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "updatedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_ai_providers_user_label",
-          "columns": ["userId", "label"],
-          "unique": true
-        }
-      ],
-      "adopts": "ai_providers"
-    },
-    "conversations": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "title": {
-          "type": "text"
-        },
-        "providerId": {
-          "type": "integer"
-        },
-        "model": {
-          "type": "text"
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "updatedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_ai_conversations_user",
-          "columns": ["userId", "updatedAt"]
-        }
-      ],
-      "adopts": "ai_conversations"
-    },
-    "messages": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "conversationId": {
-          "type": "integer",
-          "notNull": true
-        },
-        "role": {
-          "type": "text",
-          "notNull": true
-        },
-        "content": {
-          "type": "text",
-          "notNull": true,
-          "defaultValue": ""
-        },
-        "toolCalls": {
-          "type": "text"
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_ai_messages_conversation",
-          "columns": ["conversationId", "createdAt"]
-        }
-      ],
-      "adopts": "ai_messages"
-    },
-    "proposals": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "conversationId": {
-          "type": "integer",
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "kind": {
-          "type": "varchar",
-          "length": 255,
-          "notNull": true
-        },
-        "summary": {
-          "type": "text"
-        },
-        "payload": {
-          "type": "text",
-          "notNull": true,
-          "defaultValue": "{}"
-        },
-        "status": {
-          "type": "varchar",
-          "length": 32,
-          "notNull": true,
-          "defaultValue": "pending"
-        },
-        "appliedAt": {
-          "type": "text"
-        },
-        "resultSummary": {
-          "type": "text"
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_ai_proposals_user",
-          "columns": ["userId", "status"]
-        },
-        {
-          "name": "idx_ai_proposals_conversation",
-          "columns": ["conversationId"]
-        }
-      ],
-      "adopts": "ai_proposals"
-    }
-  }
-}
diff --git a/plugins/ai/migrations/sqlite/0001_adopt_ai_tables.sql b/plugins/ai/migrations/sqlite/0001_adopt_ai_tables.sql
deleted file mode 100644
index cbcffe2b7..000000000
--- a/plugins/ai/migrations/sqlite/0001_adopt_ai_tables.sql
+++ /dev/null
@@ -1,60 +0,0 @@
--- ai 0001: adopt_ai_tables
--- Generated by termix-plugin migrations. Review before committing.
--- Hand-edited: keeps the legacy foreign key from messages and proposals to
--- their conversation, which the SDK cannot declare.
-
-CREATE TABLE IF NOT EXISTS "ai_providers" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "provider_type" text NOT NULL,
-  "label" text NOT NULL,
-  "base_url" text,
-  "api_key_prefix" text,
-  "default_model" text,
-  "enabled" integer NOT NULL DEFAULT 1,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_ai_providers_user_label" ON "ai_providers" ("user_id", "label");
-ALTER TABLE "ai_providers" RENAME TO "p_ai_providers";
-CREATE TABLE IF NOT EXISTS "ai_conversations" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "title" text,
-  "provider_id" integer,
-  "model" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_ai_conversations_user" ON "ai_conversations" ("user_id", "updated_at");
-ALTER TABLE "ai_conversations" RENAME TO "p_ai_conversations";
-CREATE TABLE IF NOT EXISTS "ai_messages" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "conversation_id" integer NOT NULL,
-  "role" text NOT NULL,
-  "content" text NOT NULL DEFAULT '',
-  "tool_calls" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("conversation_id") REFERENCES "p_ai_conversations" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_ai_messages_conversation" ON "ai_messages" ("conversation_id", "created_at");
-ALTER TABLE "ai_messages" RENAME TO "p_ai_messages";
-CREATE TABLE IF NOT EXISTS "ai_proposals" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "conversation_id" integer NOT NULL,
-  "user_id" text NOT NULL,
-  "kind" text NOT NULL,
-  "summary" text,
-  "payload" text NOT NULL DEFAULT '{}',
-  "status" text NOT NULL DEFAULT 'pending',
-  "applied_at" text,
-  "result_summary" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("conversation_id") REFERENCES "p_ai_conversations" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_ai_proposals_user" ON "ai_proposals" ("user_id", "status");
-CREATE INDEX IF NOT EXISTS "idx_ai_proposals_conversation" ON "ai_proposals" ("conversation_id");
-ALTER TABLE "ai_proposals" RENAME TO "p_ai_proposals";
diff --git a/plugins/ai/migrations/sqlite/0002_provider_sync.sql b/plugins/ai/migrations/sqlite/0002_provider_sync.sql
deleted file mode 100644
index 2bd7bfcc2..000000000
--- a/plugins/ai/migrations/sqlite/0002_provider_sync.sql
+++ /dev/null
@@ -1,2 +0,0 @@
-ALTER TABLE "p_ai_providers" ADD COLUMN "sync_id" text;
-CREATE UNIQUE INDEX "p_ai_providers_sync_id_unique" ON "p_ai_providers" ("sync_id");
diff --git a/plugins/ai/package.json b/plugins/ai/package.json
deleted file mode 100644
index 0ea2606b0..000000000
--- a/plugins/ai/package.json
+++ /dev/null
@@ -1,37 +0,0 @@
-{
-  "name": "@termix-plugin/ai",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "@anthropic-ai/sdk": "^0.120.0",
-    "lucide-react": "^1.33.0",
-    "react-markdown": "^10.1.0",
-    "remark-gfm": "^4.0.1"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "react": "^19.2.8",
-    "sonner": "^2.0.8",
-    "ssh2": "^1.17.0"
-  }
-}
diff --git a/plugins/ai/src/backend/context.ts b/plugins/ai/src/backend/context.ts
deleted file mode 100644
index a66a79513..000000000
--- a/plugins/ai/src/backend/context.ts
+++ /dev/null
@@ -1,55 +0,0 @@
-/**
- * The system prompt.
- *
- * Deliberately small: the assistant starts with almost no context and must call
- * a read tool to learn anything. That keeps token cost predictable, makes every
- * data access visible in the transcript, and means nothing is sent to a
- * third-party provider that the user did not implicitly ask for.
- */
-export function buildSystemPrompt(options: {
-  hostCount: number;
-  activeTab?: string | null;
-  allowReadOnlyCommands: boolean;
-}): string {
-  const lines: string[] = [
-    "You are the assistant built into Termix, a self-hosted server management app.",
-    "You help the user manage their servers, snippets, automations and fleets.",
-    "",
-    "How you work:",
-    "- You start with no knowledge of this user's setup. Call a read tool to find out anything you need.",
-    "- You cannot change anything directly. To make a change, call a propose_* tool; the user sees a card and approves or rejects it.",
-    "- You have no access to passwords, SSH keys, API keys or any other credential, and you never ask the user to paste one into the chat.",
-    "",
-    "Scope:",
-    "- Do exactly what was asked, and nothing beyond it. A question is a request for an answer, not for changes.",
-    "- Questions like 'what is running on this server', 'check this host' or 'why is this slow' are answered with information. Read, then report. Do not propose anything.",
-    "- Only propose a change when the user asked for one, in words like 'add', 'create', 'set up', 'fix' or 'change'.",
-    "- Do not propose follow-up work you thought of yourself: no monitoring automations, no scripts, no snippets, no cleanup, unless that is what was requested.",
-    "- If you think something is worth doing, say so in one sentence and stop. Let the user ask.",
-    "- One request means one proposal at most. Do not bundle extras alongside it.",
-    "",
-    "How to answer:",
-    "- Lead with the answer. Keep responses short and concrete.",
-    "- When you propose something, say in one line what it does and why.",
-    "- If a request is ambiguous in a way that changes what you would propose, ask before proposing.",
-    "- Never claim you have done something. You propose; the user applies.",
-  ];
-
-  if (options.allowReadOnlyCommands) {
-    lines.push(
-      "- The user has allowed you to run read-only diagnostic commands directly. Anything that changes state still has to be proposed.",
-    );
-  }
-
-  lines.push(
-    "",
-    "Current context:",
-    `- The user has ${options.hostCount} host${options.hostCount === 1 ? "" : "s"} configured.`,
-  );
-
-  if (options.activeTab) {
-    lines.push(`- They are currently looking at: ${options.activeTab}.`);
-  }
-
-  return lines.join("\n");
-}
diff --git a/plugins/ai/src/backend/egress.ts b/plugins/ai/src/backend/egress.ts
deleted file mode 100644
index c8f7026ad..000000000
--- a/plugins/ai/src/backend/egress.ts
+++ /dev/null
@@ -1,134 +0,0 @@
-import { BlockList, isIP } from "net";
-
-/**
- * Where the assistant is allowed to send requests.
- *
- * Every provider request goes through ctx.fetch, which refuses private and
- * loopback addresses (after DNS, too) unless the exact host is listed. That
- * guard is exactly what a self-hosted Ollama on localhost trips over, so the
- * admin setting "privateEndpoints" names the hosts that may be private.
- * Without that split, any logged-in user could point a "provider" at an
- * internal service and use the backend as an authenticated probe of the
- * server's own network.
- *
- * The checks here only exist to give a useful message before the request is
- * made. ctx.fetch is the control.
- */
-
-/** Hosts a self-hoster almost certainly wants, and which reach only this machine. */
-export const DEFAULT_PRIVATE_ALLOWLIST = [
-  "localhost",
-  "127.0.0.1",
-  "::1",
-  "host.docker.internal",
-];
-
-export const PRIVATE_DESTINATION_MESSAGE =
-  "This address is on a private network. An administrator must add its host to the AI endpoint allowlist first.";
-
-/** A bare host, not a URL: no scheme, path, port or whitespace. */
-const HOST_PATTERN = /^[a-z0-9._:-]+$/;
-
-/**
- * The admin setting is one host per line. Anything that is not a bare host
- * is ignored rather than failing the whole list.
- */
-export function parseAllowlist(raw: unknown): string[] {
-  if (typeof raw !== "string") return [...DEFAULT_PRIVATE_ALLOWLIST];
-  const hosts: string[] = [];
-  for (const line of raw.split(/[\r\n,]+/)) {
-    const host = line.trim().toLowerCase();
-    if (host && HOST_PATTERN.test(host) && !hosts.includes(host)) {
-      hosts.push(host);
-    }
-  }
-  return hosts;
-}
-
-const PRIVATE_RANGES = (() => {
-  const list = new BlockList();
-  list.addSubnet("0.0.0.0", 8, "ipv4");
-  list.addSubnet("10.0.0.0", 8, "ipv4");
-  list.addSubnet("100.64.0.0", 10, "ipv4");
-  list.addSubnet("127.0.0.0", 8, "ipv4");
-  list.addSubnet("169.254.0.0", 16, "ipv4");
-  list.addSubnet("172.16.0.0", 12, "ipv4");
-  list.addSubnet("192.168.0.0", 16, "ipv4");
-  list.addAddress("::", "ipv6");
-  list.addAddress("::1", "ipv6");
-  list.addSubnet("fc00::", 7, "ipv6");
-  list.addSubnet("fe80::", 10, "ipv6");
-  return list;
-})();
-
-function normalizeHost(hostname: string): string {
-  return hostname.replace(/^\[|\]$/g, "").toLowerCase();
-}
-
-/**
- * True when the URL names a destination the outbound guard would refuse. A
- * bare hostname that is not an IP literal (e.g. "ollama.internal") counts as
- * private only if it is "localhost"; anything else needs DNS resolution,
- * which ctx.fetch does.
- */
-export function isPrivateDestination(rawUrl: string): boolean {
-  let url: URL;
-  try {
-    url = new URL(rawUrl);
-  } catch {
-    return false;
-  }
-  const host = normalizeHost(url.hostname);
-  if (host === "localhost" || host.endsWith(".localhost")) return true;
-  const family = isIP(host);
-  if (family === 4) return PRIVATE_RANGES.check(host, "ipv4");
-  if (family === 6) return PRIVATE_RANGES.check(host, "ipv6");
-  return false;
-}
-
-export interface EgressDecision {
-  allowed: boolean;
-  /** True when the destination is an allowlisted private host. */
-  isPrivate: boolean;
-  reason?: string;
-}
-
-export function evaluateEgress(
-  rawUrl: string,
-  allowlist: string[],
-): EgressDecision {
-  let url: URL;
-  try {
-    url = new URL(rawUrl);
-  } catch {
-    return { allowed: false, isPrivate: false, reason: "Invalid URL" };
-  }
-
-  if (!["http:", "https:"].includes(url.protocol)) {
-    return { allowed: false, isPrivate: false, reason: "Unsupported protocol" };
-  }
-  if (url.username || url.password) {
-    return {
-      allowed: false,
-      isPrivate: false,
-      reason: "Credentials in URL are not allowed",
-    };
-  }
-
-  const host = normalizeHost(url.hostname);
-  const normalized = allowlist.map((entry) => entry.trim().toLowerCase());
-
-  // An allowlisted hostname may resolve to a private address; ctx.fetch
-  // lets it through because the same list is passed as allowPrivateHosts.
-  if (normalized.includes(host)) {
-    return { allowed: true, isPrivate: true };
-  }
-
-  if (!isPrivateDestination(rawUrl)) return { allowed: true, isPrivate: false };
-
-  return {
-    allowed: false,
-    isPrivate: true,
-    reason: PRIVATE_DESTINATION_MESSAGE,
-  };
-}
diff --git a/plugins/ai/src/backend/engine.ts b/plugins/ai/src/backend/engine.ts
deleted file mode 100644
index 1cf4e9096..000000000
--- a/plugins/ai/src/backend/engine.ts
+++ /dev/null
@@ -1,175 +0,0 @@
-import { getErrorMessage } from "./errors.js";
-import { describeProviderError } from "./providers/http.js";
-import { getAdapter } from "./providers/registry.js";
-import type {
-  ChatMessage,
-  ProviderConfig,
-  ToolCall,
-} from "./providers/types.js";
-import { redact, redactToJson } from "./redaction.js";
-import { toolDefinitions } from "./tools/catalog.js";
-import {
-  isProposalDraft,
-  type AiTool,
-  type ProposalDraft,
-  type ToolContext,
-} from "./tools/types.js";
-
-/**
- * The agent loop: stream a turn, run any tools the model asked for, feed the
- * results back, repeat. Bounded so a model that keeps calling tools cannot spin
- * forever.
- */
-
-const MAX_TURNS = 8;
-
-export type EngineEvent =
-  | { type: "token"; text: string }
-  | { type: "tool_call"; name: string; arguments: Record<string, unknown> }
-  | { type: "tool_result"; name: string; result: unknown }
-  | { type: "proposal"; draft: ProposalDraft }
-  /** A message added to the conversation, for the caller to store. */
-  | { type: "message"; message: ChatMessage }
-  | { type: "done" }
-  | { type: "error"; message: string };
-
-export interface EngineOptions {
-  config: ProviderConfig;
-  model: string;
-  system: string;
-  history: ChatMessage[];
-  context: ToolContext;
-  /** What the model may call this turn; availableTools() decides. */
-  tools: AiTool[];
-  signal?: AbortSignal;
-}
-
-export async function* runAgent(
-  options: EngineOptions,
-): AsyncGenerator<EngineEvent> {
-  const adapter = getAdapter(options.config.providerType);
-  const tools = toolDefinitions(options.tools);
-  const byName = new Map(options.tools.map((tool) => [tool.name, tool]));
-  const messages: ChatMessage[] = [...options.history];
-
-  for (let turn = 0; turn < MAX_TURNS; turn += 1) {
-    let text = "";
-    const calls: ToolCall[] = [];
-    let failed = false;
-
-    try {
-      for await (const chunk of adapter.streamChat(options.config, {
-        model: options.model,
-        system: options.system,
-        messages,
-        tools,
-        signal: options.signal,
-      })) {
-        if (chunk.type === "text") {
-          text += chunk.text;
-          yield { type: "token", text: chunk.text };
-        } else if (chunk.type === "tool_call") {
-          calls.push(chunk.call);
-        } else if (chunk.type === "error") {
-          failed = true;
-          yield { type: "error", message: chunk.message };
-        }
-      }
-    } catch (error) {
-      // The user stopped it; there is no one left to show an error to.
-      if (options.signal?.aborted) return;
-      const message = describeProviderError(
-        error,
-        "The provider request failed",
-      );
-      yield { type: "error", message };
-      return;
-    }
-
-    if (failed) return;
-
-    if (!calls.length) {
-      yield { type: "message", message: { role: "assistant", content: text } };
-      yield { type: "done" };
-      return;
-    }
-
-    const assistant: ChatMessage = {
-      role: "assistant",
-      content: text,
-      toolCalls: calls,
-    };
-    messages.push(assistant);
-    yield { type: "message", message: assistant };
-
-    for (const call of calls) {
-      if (options.signal?.aborted) return;
-      yield { type: "tool_call", name: call.name, arguments: call.arguments };
-
-      const result = await runTool(byName, call, options.context);
-
-      if (isProposalDraft(result)) {
-        // Closes the tool call before the proposal card is emitted. Without
-        // this the call has no matching result and renders as permanently
-        // running, even though the work is done and awaiting the user.
-        yield {
-          type: "tool_result",
-          name: call.name,
-          result: { status: "awaiting_user_approval" },
-        };
-        yield { type: "proposal", draft: result };
-        // The model is told the proposal is awaiting the user rather than done,
-        // so it does not go on to describe the change as applied.
-        const pending: ChatMessage = {
-          role: "tool",
-          content: JSON.stringify({
-            status: "awaiting_user_approval",
-            summary: result.summary,
-          }),
-          toolCallId: call.id,
-          toolName: call.name,
-        };
-        messages.push(pending);
-        yield { type: "message", message: pending };
-        continue;
-      }
-
-      yield { type: "tool_result", name: call.name, result: redact(result) };
-      const answer: ChatMessage = {
-        role: "tool",
-        content: redactToJson(result),
-        toolCallId: call.id,
-        toolName: call.name,
-      };
-      messages.push(answer);
-      yield { type: "message", message: answer };
-    }
-  }
-
-  // Ran out of turns with the model still calling tools.
-  yield {
-    type: "error",
-    message: "The assistant used too many steps without finishing.",
-  };
-}
-
-async function runTool(
-  tools: Map<string, AiTool>,
-  call: ToolCall,
-  context: ToolContext,
-): Promise<unknown> {
-  const tool = tools.get(call.name);
-
-  // A model can emit any name it likes; only what was offered runs.
-  if (!tool) {
-    return { error: `Unknown tool: ${call.name}` };
-  }
-
-  try {
-    return await tool.handler(call.arguments ?? {}, context);
-  } catch (error) {
-    return {
-      error: getErrorMessage(error, "The tool failed"),
-    };
-  }
-}
diff --git a/plugins/ai/src/backend/errors.ts b/plugins/ai/src/backend/errors.ts
deleted file mode 100644
index a0766fbd5..000000000
--- a/plugins/ai/src/backend/errors.ts
+++ /dev/null
@@ -1,6 +0,0 @@
-/** The message of an error, or the fallback when there is none worth showing. */
-export function getErrorMessage(error: unknown, fallback: string): string {
-  if (error instanceof Error && error.message) return error.message;
-  if (typeof error === "string" && error) return error;
-  return fallback;
-}
diff --git a/plugins/ai/src/backend/gating.ts b/plugins/ai/src/backend/gating.ts
deleted file mode 100644
index dac62d2f1..000000000
--- a/plugins/ai/src/backend/gating.ts
+++ /dev/null
@@ -1,90 +0,0 @@
-import type { PluginSettings } from "@termix/plugin-sdk/backend";
-import { DEFAULT_PRIVATE_ALLOWLIST, parseAllowlist } from "./egress.js";
-
-/**
- * Three gates, all checked on the server.
- *
- * The admin switch is a hard kill switch: when it is off the feature does not
- * exist for anyone, regardless of what any user has enabled. It defaults to
- * false so upgrading an existing install turns nothing on by surprise. Then
- * each user opts in for themselves, and RBAC decides what they may do.
- */
-
-export type SettingsReader = Pick<PluginSettings, "get" | "getUser">;
-
-export async function isAiGloballyEnabled(
-  settings: SettingsReader,
-): Promise<boolean> {
-  return (await settings.get<boolean>("globallyEnabled")) === true;
-}
-
-/** The admin's private endpoint hosts, one per line. */
-export async function readPrivateAllowlist(
-  settings: SettingsReader,
-): Promise<string[]> {
-  const raw = await settings.get<string>("privateEndpoints");
-  if (raw === undefined || raw === null) return [...DEFAULT_PRIVATE_ALLOWLIST];
-  return parseAllowlist(raw);
-}
-
-export interface AiAccess {
-  enabled: boolean;
-  allowReadOnlyCommands: boolean;
-}
-
-export async function resolveAiAccess(
-  settings: SettingsReader,
-  userId: string,
-): Promise<AiAccess> {
-  if (!(await isAiGloballyEnabled(settings))) {
-    return { enabled: false, allowReadOnlyCommands: false };
-  }
-
-  // Unset means the user was never asked, which is not consent.
-  const enabled = (await settings.getUser<boolean>(userId, "enabled")) === true;
-  return {
-    enabled,
-    allowReadOnlyCommands:
-      enabled &&
-      (await settings.getUser<boolean>(userId, "allowReadOnlyCommands")) ===
-        true,
-  };
-}
-
-interface GateRequest {
-  aiAccess?: AiAccess;
-}
-
-interface GateResponse {
-  status: (code: number) => { json: (body: unknown) => unknown };
-}
-
-/** Rejects any AI request unless both gates are open. */
-export function createAiGate(
-  settings: SettingsReader,
-  currentActor: () => string | undefined,
-) {
-  return async (
-    req: GateRequest,
-    res: GateResponse,
-    next: (error?: unknown) => void,
-  ): Promise<void> => {
-    const userId = currentActor();
-    if (!userId) {
-      res.status(401).json({ error: "Authentication required" });
-      return;
-    }
-
-    try {
-      const access = await resolveAiAccess(settings, userId);
-      if (!access.enabled) {
-        res.status(403).json({ error: "The AI assistant is not enabled" });
-        return;
-      }
-      req.aiAccess = access;
-      next();
-    } catch (error) {
-      next(error);
-    }
-  };
-}
diff --git a/plugins/ai/src/backend/history.ts b/plugins/ai/src/backend/history.ts
deleted file mode 100644
index c5be09cff..000000000
--- a/plugins/ai/src/backend/history.ts
+++ /dev/null
@@ -1,98 +0,0 @@
-import type { ChatMessage, ToolCall } from "./providers/types.js";
-
-export interface StoredMessage {
-  role: string;
-  content: string;
-  toolCalls: string | null;
-}
-
-const INTERRUPTED_RESULT = JSON.stringify({
-  error: "No result: the reply was interrupted before this tool finished.",
-});
-
-function parseCalls(raw: string | null): ToolCall[] {
-  if (!raw) return [];
-  try {
-    const parsed = JSON.parse(raw);
-    return Array.isArray(parsed) ? parsed : [];
-  } catch {
-    return [];
-  }
-}
-
-/** A tool row keeps the call it answers in toolCalls, as a one-item list. */
-export function toStoredMessage(message: ChatMessage): StoredMessage {
-  if (message.role === "tool") {
-    return {
-      role: "tool",
-      content: message.content,
-      toolCalls: JSON.stringify([
-        { id: message.toolCallId, name: message.toolName },
-      ]),
-    };
-  }
-  return {
-    role: message.role,
-    content: message.content,
-    toolCalls: message.toolCalls?.length
-      ? JSON.stringify(message.toolCalls)
-      : null,
-  };
-}
-
-/**
- * Rebuilds what the provider sees from the stored rows.
- *
- * Every provider rejects an assistant turn whose tool calls have no results,
- * which is what a run cut off mid-way leaves behind, so any missing result is
- * filled in as interrupted. Tool rows that answer nothing are dropped.
- */
-export function toChatHistory(rows: StoredMessage[]): ChatMessage[] {
-  const history: ChatMessage[] = [];
-  let open: ToolCall[] = [];
-
-  const closeOpen = () => {
-    for (const call of open) {
-      history.push({
-        role: "tool",
-        content: INTERRUPTED_RESULT,
-        toolCallId: call.id,
-        toolName: call.name,
-      });
-    }
-    open = [];
-  };
-
-  for (const row of rows) {
-    if (row.role === "tool") {
-      const answered = parseCalls(row.toolCalls)[0];
-      const index = open.findIndex((call) => call.id === answered?.id);
-      if (index === -1) continue;
-      const [call] = open.splice(index, 1);
-      history.push({
-        role: "tool",
-        content: row.content,
-        toolCallId: call.id,
-        toolName: call.name,
-      });
-      continue;
-    }
-
-    closeOpen();
-
-    if (row.role === "assistant") {
-      const calls = parseCalls(row.toolCalls);
-      history.push({
-        role: "assistant",
-        content: row.content,
-        ...(calls.length ? { toolCalls: calls } : {}),
-      });
-      open = [...calls];
-    } else if (row.role === "user") {
-      history.push({ role: "user", content: row.content });
-    }
-  }
-
-  closeOpen();
-  return history;
-}
diff --git a/plugins/ai/src/backend/host-import.ts b/plugins/ai/src/backend/host-import.ts
deleted file mode 100644
index a1b95d26b..000000000
--- a/plugins/ai/src/backend/host-import.ts
+++ /dev/null
@@ -1,16 +0,0 @@
-/**
- * Registered as "ai.hostImportNormalizer" so core's host import can carry the
- * assistant switch without knowing it exists. Reads a Termix export's
- * pluginSettings.ai first, then the flat field hosts had before 2.9.0.
- */
-export function hostImportNormalizer(
-  raw: Record<string, unknown>,
-): Record<string, unknown> | null {
-  const pluginSettings = raw.pluginSettings as
-    Record<string, Record<string, unknown> | undefined> | undefined;
-  const value = pluginSettings?.ai?.enableAiAssistant ?? raw.enableAiAssistant;
-  if (value === undefined || value === null) return null;
-  return {
-    enableAiAssistant: value === true || value === 1 || value === "true",
-  };
-}
diff --git a/plugins/ai/src/backend/index.ts b/plugins/ai/src/backend/index.ts
deleted file mode 100644
index dd8b43661..000000000
--- a/plugins/ai/src/backend/index.ts
+++ /dev/null
@@ -1,40 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { hostImportNormalizer } from "./host-import.js";
-import { createAiRepository } from "./repository.js";
-import { registerProviderSync } from "./sync.js";
-import { registerAiRoutes } from "./routes.js";
-
-export async function activate(ctx: PluginContext) {
-  const repository = await createAiRepository(ctx);
-  await registerProviderSync(ctx, repository);
-
-  registerAiRoutes(ctx.http.router<Router>(), repository, ctx);
-
-  ctx.registry.provide("ai.hostImportNormalizer", hostImportNormalizer);
-  ctx.disposables.add(
-    () =>
-      void ctx.registry.revoke("ai.hostImportNormalizer", hostImportNormalizer),
-  );
-
-  // Offered by reference, not copied: this hands over a resolver, so the key
-  // stays ours. Rotating or deleting the provider takes effect on the next
-  // read by any borrower, and deactivate withdraws the offer. Keys are per
-  // user, so a borrowed read returns the acting user's own key.
-  ctx.secrets.offer("api-key", (userId: string) =>
-    ctx.asUser(userId, async () => {
-      const providers = await repository.listProviders(userId);
-      const preferred = providers.find((provider) => provider.apiKeyPrefix);
-      if (!preferred) return null;
-      const withSecret = await repository.findProviderWithSecret(
-        preferred.id,
-        userId,
-      );
-      return withSecret?.apiKey ?? null;
-    }),
-  );
-
-  ctx.log.info("AI assistant routes mounted at /plugin-api/ai");
-}
-
-export async function deactivate() {}
diff --git a/plugins/ai/src/backend/providers/anthropic.ts b/plugins/ai/src/backend/providers/anthropic.ts
deleted file mode 100644
index 34d7d0d85..000000000
--- a/plugins/ai/src/backend/providers/anthropic.ts
+++ /dev/null
@@ -1,161 +0,0 @@
-import Anthropic from "@anthropic-ai/sdk";
-import type {
-  ChatChunk,
-  ChatRequest,
-  ProviderAdapter,
-  ProviderConfig,
-} from "./types.js";
-import { AiProviderError } from "./types.js";
-
-/**
- * Model ids offered in the picker. Users can type any other id; this is a
- * convenience list, not a restriction.
- */
-export const ANTHROPIC_MODELS = [
-  "claude-opus-5",
-  "claude-sonnet-5",
-  "claude-haiku-4-5",
-];
-
-function createClient(config: ProviderConfig): Anthropic {
-  if (!config.apiKey) {
-    throw new AiProviderError("This provider needs an API key");
-  }
-  return new Anthropic({
-    apiKey: config.apiKey,
-    ...(config.baseUrl?.trim() ? { baseURL: config.baseUrl.trim() } : {}),
-    // Routes the SDK's HTTP through the shared egress guard.
-    fetch: config.fetch as unknown as typeof fetch,
-  });
-}
-
-function toAnthropicMessages(request: ChatRequest): Anthropic.MessageParam[] {
-  const messages: Anthropic.MessageParam[] = [];
-
-  for (const message of request.messages) {
-    if (message.role === "tool") {
-      messages.push({
-        role: "user",
-        content: [
-          {
-            type: "tool_result",
-            tool_use_id: message.toolCallId ?? "",
-            content: message.content,
-          },
-        ],
-      });
-      continue;
-    }
-
-    if (message.role === "assistant" && message.toolCalls?.length) {
-      const content: Anthropic.ContentBlockParam[] = [];
-      if (message.content)
-        content.push({ type: "text", text: message.content });
-      for (const call of message.toolCalls) {
-        content.push({
-          type: "tool_use",
-          id: call.id,
-          name: call.name,
-          input: call.arguments,
-        });
-      }
-      messages.push({ role: "assistant", content });
-      continue;
-    }
-
-    if (message.role === "system") continue;
-    messages.push({ role: message.role, content: message.content });
-  }
-
-  return messages;
-}
-
-/**
- * The SDK throws its own typed errors rather than going through assertOk, so
- * they are translated here to match what every other provider reports.
- */
-function translateSdkError(error: unknown): never {
-  const status =
-    typeof (error as { status?: unknown })?.status === "number"
-      ? (error as { status: number }).status
-      : undefined;
-  const detail = error instanceof Error ? error.message : String(error);
-
-  if (status === 429) {
-    throw new AiProviderError(
-      `Anthropic rate limit reached. Wait a moment and try again, or check your plan's quota. (${detail})`,
-      429,
-    );
-  }
-  if (status === 401 || status === 403) {
-    throw new AiProviderError(
-      `Anthropic rejected the API key. Check that it is correct and still active. (${detail})`,
-      status,
-    );
-  }
-  throw new AiProviderError(
-    status ? `Anthropic request failed (${status}): ${detail}` : detail,
-    status,
-  );
-}
-
-export const anthropicAdapter: ProviderAdapter = {
-  async *streamChat(
-    config: ProviderConfig,
-    request: ChatRequest,
-  ): AsyncIterable<ChatChunk> {
-    const client = createClient(config);
-
-    const stream = client.messages.stream({
-      model: request.model,
-      max_tokens: 16000,
-      system: request.system,
-      messages: toAnthropicMessages(request),
-      thinking: { type: "adaptive" },
-      ...(request.tools.length
-        ? {
-            tools: request.tools.map((tool) => ({
-              name: tool.name,
-              description: tool.description,
-              input_schema: tool.parameters as Anthropic.Tool.InputSchema,
-            })),
-          }
-        : {}),
-      ...(request.signal ? { signal: request.signal } : {}),
-    });
-
-    let final: Anthropic.Message;
-    try {
-      for await (const event of stream) {
-        if (
-          event.type === "content_block_delta" &&
-          event.delta.type === "text_delta"
-        ) {
-          yield { type: "text", text: event.delta.text };
-        }
-      }
-      final = await stream.finalMessage();
-    } catch (error) {
-      translateSdkError(error);
-    }
-
-    for (const block of final.content) {
-      if (block.type === "tool_use") {
-        yield {
-          type: "tool_call",
-          call: {
-            id: block.id,
-            name: block.name,
-            arguments: (block.input ?? {}) as Record<string, unknown>,
-          },
-        };
-      }
-    }
-
-    yield { type: "done", stopReason: final.stop_reason ?? undefined };
-  },
-
-  async listModels(): Promise<string[]> {
-    return [...ANTHROPIC_MODELS];
-  },
-};
diff --git a/plugins/ai/src/backend/providers/gemini.ts b/plugins/ai/src/backend/providers/gemini.ts
deleted file mode 100644
index 6cd6faaed..000000000
--- a/plugins/ai/src/backend/providers/gemini.ts
+++ /dev/null
@@ -1,191 +0,0 @@
-import { assertOk, readSseLines } from "./http.js";
-import type {
-  ChatChunk,
-  ChatRequest,
-  ProviderAdapter,
-  ProviderConfig,
-} from "./types.js";
-import { AiProviderError } from "./types.js";
-
-const GEMINI_DEFAULT_BASE = "https://generativelanguage.googleapis.com/v1beta";
-
-function baseFor(config: ProviderConfig): string {
-  return config.baseUrl?.trim() || GEMINI_DEFAULT_BASE;
-}
-
-/**
- * Gemini has no tool role: a tool result is a user-side functionResponse part,
- * and an assistant tool request is a model-side functionCall part.
- */
-function toGeminiContents(request: ChatRequest): unknown[] {
-  const contents: unknown[] = [];
-
-  for (const message of request.messages) {
-    if (message.role === "tool") {
-      contents.push({
-        role: "user",
-        parts: [
-          {
-            functionResponse: {
-              name: message.toolName ?? "tool",
-              response: { result: message.content },
-            },
-          },
-        ],
-      });
-      continue;
-    }
-
-    if (message.role === "assistant" && message.toolCalls?.length) {
-      const parts: unknown[] = [];
-      if (message.content) parts.push({ text: message.content });
-      for (const call of message.toolCalls) {
-        // thoughtSignature must be returned exactly as received or Gemini
-        // 2.5+ rejects the turn with a 400.
-        parts.push({
-          functionCall: { name: call.name, args: call.arguments },
-          ...(call.providerSignature
-            ? { thoughtSignature: call.providerSignature }
-            : {}),
-        });
-      }
-      contents.push({ role: "model", parts });
-      continue;
-    }
-
-    if (message.role === "system") continue;
-
-    contents.push({
-      role: message.role === "assistant" ? "model" : "user",
-      parts: [{ text: message.content }],
-    });
-  }
-
-  return contents;
-}
-
-/**
- * Gemini rejects the JSON Schema keywords it does not implement, so the tool
- * schemas are trimmed to the subset it accepts.
- */
-function toGeminiSchema(schema: unknown): unknown {
-  if (!schema || typeof schema !== "object") return schema;
-  if (Array.isArray(schema)) return schema.map(toGeminiSchema);
-
-  const source = schema as Record<string, unknown>;
-  const output: Record<string, unknown> = {};
-
-  for (const [key, value] of Object.entries(source)) {
-    if (key === "additionalProperties" || key === "$schema") continue;
-    if (key === "properties" && value && typeof value === "object") {
-      const properties: Record<string, unknown> = {};
-      for (const [name, child] of Object.entries(
-        value as Record<string, unknown>,
-      )) {
-        properties[name] = toGeminiSchema(child);
-      }
-      output[key] = properties;
-      continue;
-    }
-    output[key] = toGeminiSchema(value);
-  }
-
-  return output;
-}
-
-export const geminiAdapter: ProviderAdapter = {
-  async *streamChat(
-    config: ProviderConfig,
-    request: ChatRequest,
-  ): AsyncIterable<ChatChunk> {
-    if (!config.apiKey) {
-      throw new AiProviderError("This provider needs an API key");
-    }
-
-    const url = `${baseFor(config).replace(/\/+$/, "")}/models/${encodeURIComponent(request.model)}:streamGenerateContent?alt=sse`;
-
-    const response = await config.fetch(url, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        "x-goog-api-key": config.apiKey,
-      },
-      signal: request.signal,
-      body: JSON.stringify({
-        systemInstruction: { parts: [{ text: request.system }] },
-        contents: toGeminiContents(request),
-        ...(request.tools.length
-          ? {
-              tools: [
-                {
-                  functionDeclarations: request.tools.map((tool) => ({
-                    name: tool.name,
-                    description: tool.description,
-                    parameters: toGeminiSchema(tool.parameters),
-                  })),
-                },
-              ],
-            }
-          : {}),
-      }),
-    });
-
-    await assertOk(response, "Gemini");
-
-    let index = 0;
-    let stopReason: string | undefined;
-
-    for await (const data of readSseLines(response)) {
-      let frame: any;
-      try {
-        frame = JSON.parse(data);
-      } catch {
-        continue;
-      }
-
-      const candidate = frame.candidates?.[0];
-      if (!candidate) continue;
-      if (candidate.finishReason) stopReason = candidate.finishReason;
-
-      for (const part of candidate.content?.parts ?? []) {
-        if (typeof part.text === "string" && part.text) {
-          yield { type: "text", text: part.text };
-        }
-        if (part.functionCall?.name) {
-          yield {
-            type: "tool_call",
-            call: {
-              id: `call_${part.functionCall.name}_${index++}`,
-              name: part.functionCall.name,
-              arguments: (part.functionCall.args ?? {}) as Record<
-                string,
-                unknown
-              >,
-              // Carried so the next turn can echo it back; without it Gemini
-              // 400s as soon as a tool has been used once.
-              providerSignature: part.thoughtSignature,
-            },
-          };
-        }
-      }
-    }
-
-    yield { type: "done", stopReason };
-  },
-
-  async listModels(config: ProviderConfig): Promise<string[]> {
-    if (!config.apiKey) return [];
-
-    const response = await config.fetch(
-      `${baseFor(config).replace(/\/+$/, "")}/models`,
-      { method: "GET", headers: { "x-goog-api-key": config.apiKey } },
-    );
-    await assertOk(response, "Gemini");
-
-    const body: any = await response.json();
-    return (body.models ?? [])
-      .map((entry: any) => String(entry.name ?? "").replace(/^models\//, ""))
-      .filter((name: string) => name.length > 0)
-      .sort();
-  },
-};
diff --git a/plugins/ai/src/backend/providers/http.ts b/plugins/ai/src/backend/providers/http.ts
deleted file mode 100644
index 067e64dce..000000000
--- a/plugins/ai/src/backend/providers/http.ts
+++ /dev/null
@@ -1,257 +0,0 @@
-import type { PluginFetch } from "@termix/plugin-sdk/backend";
-import { evaluateEgress, PRIVATE_DESTINATION_MESSAGE } from "../egress.js";
-import { AiProviderError, type ProviderFetch } from "./types.js";
-
-/** A model can take a while to load before the first token. */
-const PROVIDER_TIMEOUT_MS = 10 * 60 * 1000;
-
-function toHeaderRecord(
-  headers: RequestInit["headers"] | undefined,
-): Record<string, string> {
-  const record: Record<string, string> = {};
-  new Headers(headers ?? {}).forEach((value, key) => {
-    record[key] = value;
-  });
-  return record;
-}
-
-/**
- * Every outbound provider request goes through here so the egress rules cannot
- * be bypassed by an adapter calling fetch directly. The actual request is
- * ctx.fetch, which pins DNS and refuses private addresses unless the host is
- * on the admin allowlist.
- */
-export function createProviderFetch(
-  fetch: PluginFetch,
-  allowlist: string[],
-): ProviderFetch {
-  return async (url, init) => {
-    const decision = evaluateEgress(url, allowlist);
-    if (!decision.allowed) {
-      throw new AiProviderError(decision.reason ?? "Destination not allowed");
-    }
-
-    if (
-      init.body !== undefined &&
-      init.body !== null &&
-      typeof init.body !== "string"
-    ) {
-      throw new AiProviderError("Provider requests must send a text body");
-    }
-
-    try {
-      return await fetch(url, {
-        method: init.method ?? "GET",
-        headers: toHeaderRecord(init.headers),
-        body: (init.body as string | null | undefined) ?? undefined,
-        signal: init.signal ?? undefined,
-        timeoutMs: PROVIDER_TIMEOUT_MS,
-        allowPrivateHosts: allowlist,
-      });
-    } catch (error) {
-      // A hostname that resolved to a private address is refused after DNS,
-      // which the check above cannot see coming.
-      const message = error instanceof Error ? error.message : "";
-      if (/private destinations/i.test(message)) {
-        throw new AiProviderError(PRIVATE_DESTINATION_MESSAGE);
-      }
-      throw error;
-    }
-  };
-}
-
-const NETWORK_MESSAGES: Record<string, string> = {
-  UND_ERR_BODY_TIMEOUT:
-    "The provider stopped sending data for too long and the reply was cut off. A slow or overloaded model can cause this.",
-  UND_ERR_SOCKET:
-    "The provider closed the connection before the reply finished.",
-  ECONNRESET: "The provider closed the connection before the reply finished.",
-  UND_ERR_HEADERS_TIMEOUT: "The provider did not answer in time.",
-  UND_ERR_CONNECT_TIMEOUT:
-    "Timed out connecting to the provider. Check the base URL.",
-  ETIMEDOUT: "Timed out connecting to the provider. Check the base URL.",
-  ECONNREFUSED:
-    "The provider refused the connection. Check the base URL and that the provider is running.",
-  ENOTFOUND: "The provider's host name could not be found. Check the base URL.",
-  EAI_AGAIN: "The provider's host name could not be found. Check the base URL.",
-  EHOSTUNREACH: "The provider's host is unreachable from this server.",
-  ENETUNREACH: "The provider's host is unreachable from this server.",
-};
-
-/**
- * undici reports network failures as a bare "fetch failed" or "terminated"
- * with the real reason on `cause`, which is useless to show as is.
- */
-export function describeProviderError(
-  error: unknown,
-  fallback: string,
-): string {
-  if (error instanceof AiProviderError) return error.message;
-  if (!(error instanceof Error)) {
-    return typeof error === "string" && error ? error : fallback;
-  }
-
-  const cause = (error as { cause?: unknown }).cause as
-    (Error & { code?: string }) | undefined;
-  const code = cause?.code ?? (error as { code?: string }).code;
-  if (code && NETWORK_MESSAGES[code]) return NETWORK_MESSAGES[code];
-
-  const causeMessage = cause instanceof Error ? cause.message : "";
-  if (/private destinations/i.test(causeMessage)) {
-    return PRIVATE_DESTINATION_MESSAGE;
-  }
-  if (code && /CERT|SELF_SIGNED|UNABLE_TO_VERIFY/i.test(code)) {
-    return `The provider's TLS certificate is not trusted (${code}).`;
-  }
-
-  if (/^(fetch failed|terminated)$/i.test(error.message)) {
-    if (causeMessage) return `The provider request failed: ${causeMessage}`;
-    return error.message === "terminated"
-      ? NETWORK_MESSAGES.UND_ERR_SOCKET
-      : fallback;
-  }
-  return error.message || fallback;
-}
-
-export function joinUrl(base: string, path: string): string {
-  return `${base.replace(/\/+$/, "")}/${path.replace(/^\/+/, "")}`;
-}
-
-/**
- * Yields the data payload of each SSE frame. Providers differ in what they put
- * inside, so parsing the JSON is left to the caller.
- */
-export async function* readSseLines(
-  response: Response,
-): AsyncGenerator<string> {
-  const body = response.body;
-  if (!body) return;
-
-  const reader = body.getReader();
-  const decoder = new TextDecoder();
-  let buffer = "";
-
-  try {
-    while (true) {
-      const { done, value } = await reader.read();
-      if (done) break;
-      buffer += decoder.decode(value, { stream: true });
-
-      let newlineIndex = buffer.indexOf("\n");
-      while (newlineIndex !== -1) {
-        const line = buffer.slice(0, newlineIndex).trim();
-        buffer = buffer.slice(newlineIndex + 1);
-        if (line.startsWith("data:")) {
-          yield line.slice(5).trim();
-        }
-        newlineIndex = buffer.indexOf("\n");
-      }
-    }
-  } finally {
-    reader.releaseLock();
-  }
-}
-
-/** Yields one parsed JSON object per line, for newline-delimited streams. */
-export async function* readJsonLines(
-  response: Response,
-): AsyncGenerator<unknown> {
-  const body = response.body;
-  if (!body) return;
-
-  const reader = body.getReader();
-  const decoder = new TextDecoder();
-  let buffer = "";
-
-  try {
-    while (true) {
-      const { done, value } = await reader.read();
-      if (done) break;
-      buffer += decoder.decode(value, { stream: true });
-
-      let newlineIndex = buffer.indexOf("\n");
-      while (newlineIndex !== -1) {
-        const line = buffer.slice(0, newlineIndex).trim();
-        buffer = buffer.slice(newlineIndex + 1);
-        if (line) {
-          try {
-            yield JSON.parse(line);
-          } catch {
-            // A partial or malformed frame is skipped rather than failing the
-            // whole stream.
-          }
-        }
-        newlineIndex = buffer.indexOf("\n");
-      }
-    }
-  } finally {
-    reader.releaseLock();
-  }
-}
-
-/**
- * Digs the human-readable message out of an error body.
- *
- * Every provider nests it differently, and dumping the raw JSON produced
- * something that got cut off mid-sentence. Falls back to a trimmed snippet
- * when the shape is unfamiliar.
- */
-function extractProviderMessage(body: string): string {
-  try {
-    const parsed = JSON.parse(body);
-    const message =
-      parsed?.error?.message ??
-      parsed?.error?.["message"] ??
-      parsed?.message ??
-      (typeof parsed?.error === "string" ? parsed.error : null);
-    if (typeof message === "string" && message.trim()) {
-      return message.trim();
-    }
-  } catch {
-    // Not JSON; fall through to the snippet.
-  }
-
-  const trimmed = body.trim();
-  if (!trimmed) return "";
-  return trimmed.length > 300 ? `${trimmed.slice(0, 300)}...` : trimmed;
-}
-
-export async function assertOk(
-  response: Response,
-  provider: string,
-): Promise<void> {
-  if (response.ok) return;
-
-  let body = "";
-  try {
-    body = await response.text();
-  } catch {
-    body = "";
-  }
-
-  const detail = extractProviderMessage(body);
-
-  // Rate limits and auth failures are the two the user can actually act on,
-  // so they say what to do instead of reading like an internal failure.
-  if (response.status === 429) {
-    throw new AiProviderError(
-      `${provider} rate limit reached. Wait a moment and try again, or check your plan's quota.${
-        detail ? ` (${detail})` : ""
-      }`,
-      429,
-    );
-  }
-  if (response.status === 401 || response.status === 403) {
-    throw new AiProviderError(
-      `${provider} rejected the API key. Check that it is correct and still active.${
-        detail ? ` (${detail})` : ""
-      }`,
-      response.status,
-    );
-  }
-
-  throw new AiProviderError(
-    `${provider} request failed (${response.status})${detail ? `: ${detail}` : ""}`,
-    response.status,
-  );
-}
diff --git a/plugins/ai/src/backend/providers/ollama.ts b/plugins/ai/src/backend/providers/ollama.ts
deleted file mode 100644
index 6deb4a5f0..000000000
--- a/plugins/ai/src/backend/providers/ollama.ts
+++ /dev/null
@@ -1,131 +0,0 @@
-import { assertOk, joinUrl, readJsonLines } from "./http.js";
-import type {
-  ChatChunk,
-  ChatRequest,
-  ProviderAdapter,
-  ProviderConfig,
-} from "./types.js";
-
-export const OLLAMA_DEFAULT_BASE = "http://localhost:11434";
-
-function baseFor(config: ProviderConfig): string {
-  return config.baseUrl?.trim() || OLLAMA_DEFAULT_BASE;
-}
-
-function toOllamaMessages(request: ChatRequest): unknown[] {
-  const messages: unknown[] = [{ role: "system", content: request.system }];
-
-  for (const message of request.messages) {
-    if (message.role === "tool") {
-      messages.push({
-        role: "tool",
-        content: message.content,
-        ...(message.toolName ? { tool_name: message.toolName } : {}),
-      });
-      continue;
-    }
-
-    if (message.role === "assistant" && message.toolCalls?.length) {
-      messages.push({
-        role: "assistant",
-        content: message.content,
-        tool_calls: message.toolCalls.map((call) => ({
-          function: { name: call.name, arguments: call.arguments },
-        })),
-      });
-      continue;
-    }
-
-    messages.push({ role: message.role, content: message.content });
-  }
-
-  return messages;
-}
-
-export const ollamaAdapter: ProviderAdapter = {
-  async *streamChat(
-    config: ProviderConfig,
-    request: ChatRequest,
-  ): AsyncIterable<ChatChunk> {
-    const response = await config.fetch(joinUrl(baseFor(config), "api/chat"), {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      signal: request.signal,
-      body: JSON.stringify({
-        model: request.model,
-        messages: toOllamaMessages(request),
-        stream: true,
-        ...(request.tools.length
-          ? {
-              tools: request.tools.map((tool) => ({
-                type: "function",
-                function: {
-                  name: tool.name,
-                  description: tool.description,
-                  parameters: tool.parameters,
-                },
-              })),
-            }
-          : {}),
-      }),
-    });
-
-    await assertOk(response, "Ollama");
-
-    let index = 0;
-    let stopReason: string | undefined;
-
-    // Ollama streams newline-delimited JSON rather than SSE.
-    for await (const frame of readJsonLines(response)) {
-      const payload = frame as any;
-
-      if (
-        typeof payload.message?.content === "string" &&
-        payload.message.content
-      ) {
-        yield { type: "text", text: payload.message.content };
-      }
-
-      for (const call of payload.message?.tool_calls ?? []) {
-        const name = call.function?.name;
-        if (!name) continue;
-        const rawArgs = call.function?.arguments;
-        // Ollama sends an object, but some builds send a JSON string.
-        let args: Record<string, unknown> = {};
-        if (rawArgs && typeof rawArgs === "object") {
-          args = rawArgs as Record<string, unknown>;
-        } else if (typeof rawArgs === "string" && rawArgs.trim()) {
-          try {
-            args = JSON.parse(rawArgs);
-          } catch {
-            args = {};
-          }
-        }
-        yield {
-          type: "tool_call",
-          call: { id: `call_${name}_${index++}`, name, arguments: args },
-        };
-      }
-
-      if (payload.done) {
-        stopReason = payload.done_reason ?? "stop";
-        break;
-      }
-    }
-
-    yield { type: "done", stopReason };
-  },
-
-  async listModels(config: ProviderConfig): Promise<string[]> {
-    const response = await config.fetch(joinUrl(baseFor(config), "api/tags"), {
-      method: "GET",
-    });
-    await assertOk(response, "Ollama");
-
-    const body: any = await response.json();
-    return (body.models ?? [])
-      .map((entry: any) => entry.name)
-      .filter((name: unknown): name is string => typeof name === "string")
-      .sort();
-  },
-};
diff --git a/plugins/ai/src/backend/providers/openai.ts b/plugins/ai/src/backend/providers/openai.ts
deleted file mode 100644
index 3c5f7fb56..000000000
--- a/plugins/ai/src/backend/providers/openai.ts
+++ /dev/null
@@ -1,182 +0,0 @@
-import { assertOk, joinUrl, readSseLines } from "./http.js";
-import type {
-  ChatChunk,
-  ChatRequest,
-  ProviderAdapter,
-  ProviderConfig,
-  ToolCall,
-} from "./types.js";
-import { AiProviderError } from "./types.js";
-
-const OPENAI_DEFAULT_BASE = "https://api.openai.com/v1";
-
-function baseFor(config: ProviderConfig): string {
-  if (config.baseUrl?.trim()) return config.baseUrl.trim();
-  if (config.providerType === "openai") return OPENAI_DEFAULT_BASE;
-  throw new AiProviderError("This provider needs a base URL");
-}
-
-function toOpenAiMessages(request: ChatRequest): unknown[] {
-  const messages: unknown[] = [{ role: "system", content: request.system }];
-
-  for (const message of request.messages) {
-    if (message.role === "tool") {
-      messages.push({
-        role: "tool",
-        tool_call_id: message.toolCallId,
-        content: message.content,
-      });
-      continue;
-    }
-
-    if (message.role === "assistant" && message.toolCalls?.length) {
-      messages.push({
-        role: "assistant",
-        content: message.content || null,
-        tool_calls: message.toolCalls.map((call) => ({
-          id: call.id,
-          type: "function",
-          function: {
-            name: call.name,
-            arguments: JSON.stringify(call.arguments),
-          },
-        })),
-      });
-      continue;
-    }
-
-    messages.push({ role: message.role, content: message.content });
-  }
-
-  return messages;
-}
-
-/**
- * Tool call arguments arrive as JSON fragments spread across many deltas, so
- * they are accumulated per index and only parsed once the stream ends.
- */
-interface PartialCall {
-  id: string;
-  name: string;
-  args: string;
-}
-
-export const openAiAdapter: ProviderAdapter = {
-  async *streamChat(
-    config: ProviderConfig,
-    request: ChatRequest,
-  ): AsyncIterable<ChatChunk> {
-    const url = joinUrl(baseFor(config), "chat/completions");
-
-    const headers: Record<string, string> = {
-      "Content-Type": "application/json",
-    };
-    if (config.apiKey) headers.Authorization = `Bearer ${config.apiKey}`;
-
-    const response = await config.fetch(url, {
-      method: "POST",
-      headers,
-      signal: request.signal,
-      body: JSON.stringify({
-        model: request.model,
-        messages: toOpenAiMessages(request),
-        stream: true,
-        ...(request.tools.length
-          ? {
-              tools: request.tools.map((tool) => ({
-                type: "function",
-                function: {
-                  name: tool.name,
-                  description: tool.description,
-                  parameters: tool.parameters,
-                },
-              })),
-            }
-          : {}),
-      }),
-    });
-
-    await assertOk(response, "OpenAI");
-
-    const partial = new Map<number, PartialCall>();
-    let stopReason: string | undefined;
-
-    for await (const data of readSseLines(response)) {
-      if (data === "[DONE]") break;
-
-      let frame: any;
-      try {
-        frame = JSON.parse(data);
-      } catch {
-        continue;
-      }
-
-      const choice = frame.choices?.[0];
-      if (!choice) continue;
-
-      if (choice.finish_reason) stopReason = choice.finish_reason;
-
-      const delta = choice.delta;
-      if (!delta) continue;
-
-      if (typeof delta.content === "string" && delta.content) {
-        yield { type: "text", text: delta.content };
-      }
-
-      for (const call of delta.tool_calls ?? []) {
-        const index = call.index ?? 0;
-        const existing = partial.get(index) ?? { id: "", name: "", args: "" };
-        if (call.id) existing.id = call.id;
-        if (call.function?.name) existing.name = call.function.name;
-        if (call.function?.arguments) existing.args += call.function.arguments;
-        partial.set(index, existing);
-      }
-    }
-
-    for (const call of partial.values()) {
-      if (!call.name) continue;
-      yield { type: "tool_call", call: finalizeCall(call) };
-    }
-
-    yield { type: "done", stopReason };
-  },
-
-  async listModels(config: ProviderConfig): Promise<string[]> {
-    const headers: Record<string, string> = {};
-    if (config.apiKey) headers.Authorization = `Bearer ${config.apiKey}`;
-
-    const response = await config.fetch(joinUrl(baseFor(config), "models"), {
-      method: "GET",
-      headers,
-    });
-    await assertOk(response, "OpenAI");
-
-    const body: any = await response.json();
-    return (body.data ?? [])
-      .map((entry: any) => entry.id)
-      .filter((id: unknown): id is string => typeof id === "string")
-      .sort();
-  },
-};
-
-export function finalizeCall(call: PartialCall): ToolCall {
-  let args: Record<string, unknown> = {};
-  if (call.args.trim()) {
-    try {
-      const parsed = JSON.parse(call.args);
-      if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
-        args = parsed as Record<string, unknown>;
-      }
-    } catch {
-      // A model that emitted malformed arguments gets an empty object; the
-      // tool's own schema validation reports the problem back to it.
-      args = {};
-    }
-  }
-  return {
-    id:
-      call.id || `call_${call.name}_${Math.random().toString(36).slice(2, 10)}`,
-    name: call.name,
-    arguments: args,
-  };
-}
diff --git a/plugins/ai/src/backend/providers/registry.ts b/plugins/ai/src/backend/providers/registry.ts
deleted file mode 100644
index 0bbc98752..000000000
--- a/plugins/ai/src/backend/providers/registry.ts
+++ /dev/null
@@ -1,64 +0,0 @@
-import { anthropicAdapter } from "./anthropic.js";
-import { geminiAdapter } from "./gemini.js";
-import { ollamaAdapter } from "./ollama.js";
-import { openAiAdapter } from "./openai.js";
-import {
-  AiProviderError,
-  type AiProviderType,
-  type ProviderAdapter,
-} from "./types.js";
-
-/**
- * openai_compatible reuses the OpenAI adapter: OpenRouter, Groq, Mistral,
- * DeepSeek, together.ai, LM Studio and vLLM all speak the same wire format,
- * they differ only in base URL.
- */
-const ADAPTERS: Record<AiProviderType, ProviderAdapter> = {
-  ollama: ollamaAdapter,
-  anthropic: anthropicAdapter,
-  openai: openAiAdapter,
-  gemini: geminiAdapter,
-  openai_compatible: openAiAdapter,
-};
-
-export function getAdapter(providerType: string): ProviderAdapter {
-  const adapter = ADAPTERS[providerType as AiProviderType];
-  if (!adapter) {
-    throw new AiProviderError(`Unknown provider type: ${providerType}`);
-  }
-  return adapter;
-}
-
-/** Provider types that cannot work without a base URL. */
-export const REQUIRES_BASE_URL: AiProviderType[] = [
-  "ollama",
-  "openai_compatible",
-];
-
-/** Provider types that cannot work without an API key. */
-export const REQUIRES_API_KEY: AiProviderType[] = [
-  "anthropic",
-  "openai",
-  "gemini",
-];
-
-/**
- * Shown when a provider's model list cannot be fetched: no key entered yet,
- * the endpoint is unreachable, or the vendor has no list endpoint. Users can
- * always type a model id the list does not contain, so this is a starting
- * point rather than a restriction.
- */
-export const FALLBACK_MODELS: Record<AiProviderType, string[]> = {
-  ollama: [
-    "llama3.2",
-    "llama3.1",
-    "qwen2.5-coder",
-    "mistral",
-    "phi4",
-    "gemma2",
-  ],
-  anthropic: ["claude-opus-5", "claude-sonnet-5", "claude-haiku-4-5"],
-  openai: ["gpt-5", "gpt-5-mini", "o4-mini", "gpt-4.1"],
-  gemini: ["gemini-2.5-pro", "gemini-2.5-flash", "gemini-2.0-flash"],
-  openai_compatible: [],
-};
diff --git a/plugins/ai/src/backend/providers/types.ts b/plugins/ai/src/backend/providers/types.ts
deleted file mode 100644
index 2b75bfb28..000000000
--- a/plugins/ai/src/backend/providers/types.ts
+++ /dev/null
@@ -1,100 +0,0 @@
-/**
- * The shape every provider adapter normalizes to. Adding a provider means
- * translating its wire format into these events; nothing downstream (the
- * engine, the tool dispatcher, the SSE route) knows which vendor is in use.
- */
-
-export type AiProviderType =
-  "ollama" | "anthropic" | "openai" | "gemini" | "openai_compatible";
-
-export const AI_PROVIDER_TYPES: AiProviderType[] = [
-  "ollama",
-  "anthropic",
-  "openai",
-  "gemini",
-  "openai_compatible",
-];
-
-export function isAiProviderType(value: unknown): value is AiProviderType {
-  return (
-    typeof value === "string" && (AI_PROVIDER_TYPES as string[]).includes(value)
-  );
-}
-
-export interface ChatMessage {
-  role: "system" | "user" | "assistant" | "tool";
-  content: string;
-  /** Set on assistant turns that requested tools. */
-  toolCalls?: ToolCall[];
-  /** Set on tool turns, matching the id of the call being answered. */
-  toolCallId?: string;
-  toolName?: string;
-}
-
-export interface ToolCall {
-  id: string;
-  name: string;
-  arguments: Record<string, unknown>;
-  /**
-   * Opaque provider state that has to be echoed back verbatim on the next
-   * turn. Gemini 2.5+ rejects a follow-up whose functionCall parts have lost
-   * their thoughtSignature, so this rides along rather than being dropped.
-   */
-  providerSignature?: string;
-}
-
-export interface ToolDefinition {
-  name: string;
-  description: string;
-  parameters: Record<string, unknown>;
-}
-
-export interface ChatRequest {
-  model: string;
-  system: string;
-  messages: ChatMessage[];
-  tools: ToolDefinition[];
-  signal?: AbortSignal;
-}
-
-export type ChatChunk =
-  | { type: "text"; text: string }
-  | { type: "tool_call"; call: ToolCall }
-  | { type: "done"; stopReason?: string }
-  | { type: "error"; message: string };
-
-/**
- * How an adapter reaches its provider. Always the egress-checked fetch from
- * http.ts, never the global one.
- */
-export type ProviderFetch = (
-  url: string,
-  init: RequestInit,
-) => Promise<Response>;
-
-export interface ProviderConfig {
-  providerType: AiProviderType;
-  baseUrl?: string | null;
-  apiKey?: string | null;
-  fetch: ProviderFetch;
-}
-
-export interface ProviderAdapter {
-  /** Streams a single assistant turn. Tool execution happens in the engine. */
-  streamChat(
-    config: ProviderConfig,
-    request: ChatRequest,
-  ): AsyncIterable<ChatChunk>;
-  /** Model ids to offer in the picker, best effort. */
-  listModels(config: ProviderConfig): Promise<string[]>;
-}
-
-export class AiProviderError extends Error {
-  constructor(
-    message: string,
-    readonly status?: number,
-  ) {
-    super(message);
-    this.name = "AiProviderError";
-  }
-}
diff --git a/plugins/ai/src/backend/redaction.ts b/plugins/ai/src/backend/redaction.ts
deleted file mode 100644
index 487618228..000000000
--- a/plugins/ai/src/backend/redaction.ts
+++ /dev/null
@@ -1,90 +0,0 @@
-/**
- * Defense in depth for anything about to leave the server.
- *
- * Read tools already select explicit field allowlists rather than spreading
- * rows, so nothing secret should reach here. This exists because "should" is
- * not a guarantee: a future tool that forgets to project its fields would
- * otherwise ship credentials to a third-party model provider.
- */
-
-const SECRET_KEY_PATTERN =
-  /^(password|passwd|pass|secret|token|api_?key|apikey|private_?key|privatekey|key_?password|keypassword|passphrase|client_?secret|authorization|auth_?token|access_?token|refresh_?token|totp_?secret|backup_?codes|session_?token|cookie|credential|ssh_?cert|data_?key|dek)$/i;
-
-/** Substring markers for keys that are not exact matches but still sensitive. */
-const SECRET_KEY_SUBSTRINGS = [
-  "password",
-  "secret",
-  "privatekey",
-  "private_key",
-  "apikey",
-  "api_key",
-  "passphrase",
-];
-
-const VALUE_PATTERNS: Array<{ pattern: RegExp; label: string }> = [
-  {
-    pattern:
-      /-----BEGIN[^-]*PRIVATE KEY-----[\s\S]*?-----END[^-]*PRIVATE KEY-----/g,
-    label: "[redacted private key]",
-  },
-  { pattern: /\bsk-[A-Za-z0-9_-]{16,}\b/g, label: "[redacted api key]" },
-  { pattern: /\bsk-ant-[A-Za-z0-9_-]{16,}\b/g, label: "[redacted api key]" },
-  { pattern: /\bghp_[A-Za-z0-9]{20,}\b/g, label: "[redacted token]" },
-  { pattern: /\btmx_[A-Za-z0-9_-]{16,}\b/g, label: "[redacted token]" },
-  {
-    pattern: /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]+\b/g,
-    label: "[redacted token]",
-  },
-  {
-    pattern: /\bBearer\s+[A-Za-z0-9._-]{16,}/gi,
-    label: "Bearer [redacted]",
-  },
-];
-
-export const REDACTED = "[redacted]";
-
-function isSecretKey(key: string): boolean {
-  if (SECRET_KEY_PATTERN.test(key)) return true;
-  const lower = key.toLowerCase();
-  return SECRET_KEY_SUBSTRINGS.some((marker) => lower.includes(marker));
-}
-
-export function redactString(value: string): string {
-  let output = value;
-  for (const { pattern, label } of VALUE_PATTERNS) {
-    output = output.replace(pattern, label);
-  }
-  return output;
-}
-
-/**
- * Recursively drops secret-named fields and masks secret-shaped values.
- * Depth is bounded so a cyclic or pathological structure cannot hang the loop.
- */
-export function redact(value: unknown, depth = 0): unknown {
-  if (depth > 12) return REDACTED;
-
-  if (typeof value === "string") return redactString(value);
-  if (value === null || typeof value !== "object") return value;
-
-  if (Array.isArray(value)) {
-    return value.map((entry) => redact(entry, depth + 1));
-  }
-
-  const output: Record<string, unknown> = {};
-  for (const [key, entry] of Object.entries(value as Record<string, unknown>)) {
-    if (isSecretKey(key)) {
-      // Preserve the shape so the model can still reason about presence,
-      // without ever seeing the value.
-      output[key] = entry === null || entry === undefined ? null : REDACTED;
-      continue;
-    }
-    output[key] = redact(entry, depth + 1);
-  }
-  return output;
-}
-
-/** Convenience wrapper for serializing a tool result. */
-export function redactToJson(value: unknown): string {
-  return JSON.stringify(redact(value));
-}
diff --git a/plugins/ai/src/backend/repository.ts b/plugins/ai/src/backend/repository.ts
deleted file mode 100644
index da82d1de7..000000000
--- a/plugins/ai/src/backend/repository.ts
+++ /dev/null
@@ -1,421 +0,0 @@
-import { and, desc, eq } from "drizzle-orm";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import {
-  conversations as conversationsDef,
-  messages as messagesDef,
-  proposals as proposalsDef,
-  providers as providersDef,
-} from "./tables.js";
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// Tables come from ctx.db.define, which the SDK hands back untyped.
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export interface AiProviderRecord {
-  id: number;
-  userId: string;
-  providerType: string;
-  label: string;
-  baseUrl: string | null;
-  apiKeyPrefix: string | null;
-  defaultModel: string | null;
-  enabled: boolean;
-  createdAt: string;
-  updatedAt: string;
-}
-
-/** A provider with its key, for the one path that makes outbound calls. */
-export interface AiProviderWithSecret extends AiProviderRecord {
-  apiKey: string | null;
-}
-
-export interface AiConversationRecord {
-  id: number;
-  userId: string;
-  title: string | null;
-  providerId: number | null;
-  model: string | null;
-  createdAt: string;
-  updatedAt: string;
-}
-
-export interface AiMessageRecord {
-  id: number;
-  conversationId: number;
-  role: string;
-  content: string;
-  toolCalls: string | null;
-  createdAt: string;
-}
-
-export interface AiProposalRecord {
-  id: number;
-  conversationId: number;
-  userId: string;
-  kind: string;
-  summary: string | null;
-  payload: string;
-  status: string;
-  appliedAt: string | null;
-  resultSummary: string | null;
-  createdAt: string;
-}
-
-export interface AiProviderInput {
-  providerType: string;
-  label: string;
-  baseUrl?: string | null;
-  apiKey?: string | null;
-  defaultModel?: string | null;
-  enabled?: boolean;
-}
-
-/** Where a provider's key lives in ctx.secrets. */
-export function providerSecretKey(providerId: number): string {
-  return `provider:${providerId}`;
-}
-
-/**
- * Keeps the first few characters so the UI can tell two keys apart without
- * ever receiving the key itself.
- */
-export function apiKeyPrefix(apiKey: string | null | undefined): string | null {
-  if (!apiKey) return null;
-  return apiKey.slice(0, 6);
-}
-
-const now = () => new Date().toISOString();
-
-export type AiRepository = Awaited<ReturnType<typeof createAiRepository>>;
-
-/**
- * The assistant's rows. Every method takes the owning user and scopes to
- * them. Keys go through ctx.secrets, which is per acting user, so key reads
- * and writes run inside the request (or ctx.asUser) of that same user.
- */
-export async function createAiRepository(
-  ctx: Pick<PluginContext, "db" | "secrets">,
-) {
-  const { db, secrets } = ctx;
-  const providers: Table = await db.define(providersDef);
-  const conversations: Table = await db.define(conversationsDef);
-  const messages: Table = await db.define(messagesDef);
-  const proposals: Table = await db.define(proposalsDef);
-
-  const client = () => db.client<Drizzle>();
-
-  /** Inserts one row and returns its id. MySQL has no RETURNING. */
-  async function insertId(
-    table: Table,
-    values: Record<string, unknown>,
-  ): Promise<number> {
-    const drizzle = await client();
-    if (db.dialect === "mysql") {
-      const result = await drizzle.insert(table).values(values);
-      const header = Array.isArray(result) ? result[0] : result;
-      return Number(header?.insertId);
-    }
-    const rows = await drizzle
-      .insert(table)
-      .values(values)
-      .returning({ id: table.id });
-    return rows[0].id as number;
-  }
-
-  async function first<T>(table: Table, where: unknown): Promise<T | null> {
-    const rows = await (
-      await client()
-    )
-      .select()
-      .from(table)
-      .where(where)
-      .limit(1);
-    return (rows[0] as T) ?? null;
-  }
-
-  const repo = {
-    // --- providers ---
-
-    /** Never includes key material; callers get the masked prefix only. */
-    async listProviders(userId: string): Promise<AiProviderRecord[]> {
-      return (await client())
-        .select()
-        .from(providers)
-        .where(eq(providers.userId, userId))
-        .orderBy(providers.id);
-    },
-
-    async findProvider(
-      id: number,
-      userId: string,
-    ): Promise<AiProviderRecord | null> {
-      return first<AiProviderRecord>(
-        providers,
-        and(eq(providers.id, id), eq(providers.userId, userId)),
-      );
-    },
-
-    /**
-     * The one path that returns usable key material, right before an
-     * outbound request. Must run as `userId`.
-     */
-    async findProviderWithSecret(
-      id: number,
-      userId: string,
-    ): Promise<AiProviderWithSecret | null> {
-      const row = await repo.findProvider(id, userId);
-      if (!row) return null;
-      return { ...row, apiKey: await secrets.get(providerSecretKey(id)) };
-    },
-
-    async createProvider(
-      userId: string,
-      input: AiProviderInput,
-    ): Promise<AiProviderRecord> {
-      const stamp = now();
-      const id = await insertId(providers, {
-        userId,
-        providerType: input.providerType,
-        label: input.label,
-        baseUrl: input.baseUrl ?? null,
-        apiKeyPrefix: apiKeyPrefix(input.apiKey),
-        defaultModel: input.defaultModel ?? null,
-        enabled: input.enabled ?? true,
-        createdAt: stamp,
-        updatedAt: stamp,
-      });
-      if (input.apiKey) {
-        await secrets.set(providerSecretKey(id), input.apiKey);
-      }
-      await db.persist();
-      const created = await repo.findProvider(id, userId);
-      if (!created) throw new Error("Provider could not be read back");
-      return created;
-    },
-
-    async updateProvider(
-      id: number,
-      userId: string,
-      input: Partial<AiProviderInput>,
-    ): Promise<AiProviderRecord | null> {
-      const existing = await repo.findProvider(id, userId);
-      if (!existing) return null;
-
-      const updates: Record<string, unknown> = { updatedAt: now() };
-      if (input.providerType !== undefined)
-        updates.providerType = input.providerType;
-      if (input.label !== undefined) updates.label = input.label;
-      if (input.baseUrl !== undefined) updates.baseUrl = input.baseUrl;
-      if (input.defaultModel !== undefined)
-        updates.defaultModel = input.defaultModel;
-      if (input.enabled !== undefined) updates.enabled = input.enabled;
-
-      // An empty string clears the key; undefined leaves it untouched.
-      if (input.apiKey !== undefined) {
-        updates.apiKeyPrefix = apiKeyPrefix(input.apiKey);
-        await secrets.set(providerSecretKey(id), input.apiKey || null);
-      }
-
-      await (
-        await client()
-      )
-        .update(providers)
-        .set(updates)
-        .where(and(eq(providers.id, id), eq(providers.userId, userId)));
-      await db.persist();
-      return repo.findProvider(id, userId);
-    },
-
-    async deleteProvider(id: number, userId: string): Promise<boolean> {
-      const existing = await repo.findProvider(id, userId);
-      if (!existing) return false;
-      await (
-        await client()
-      )
-        .delete(providers)
-        .where(and(eq(providers.id, id), eq(providers.userId, userId)));
-      await secrets.delete(providerSecretKey(id));
-      await db.persist();
-      return true;
-    },
-
-    // --- conversations ---
-
-    async listConversations(
-      userId: string,
-      limit = 50,
-    ): Promise<AiConversationRecord[]> {
-      return (await client())
-        .select()
-        .from(conversations)
-        .where(eq(conversations.userId, userId))
-        .orderBy(desc(conversations.updatedAt))
-        .limit(limit);
-    },
-
-    async findConversation(
-      id: number,
-      userId: string,
-    ): Promise<AiConversationRecord | null> {
-      return first<AiConversationRecord>(
-        conversations,
-        and(eq(conversations.id, id), eq(conversations.userId, userId)),
-      );
-    },
-
-    async createConversation(input: {
-      userId: string;
-      title?: string | null;
-      providerId?: number | null;
-      model?: string | null;
-    }): Promise<AiConversationRecord> {
-      const stamp = now();
-      const id = await insertId(conversations, {
-        userId: input.userId,
-        title: input.title ?? null,
-        providerId: input.providerId ?? null,
-        model: input.model ?? null,
-        createdAt: stamp,
-        updatedAt: stamp,
-      });
-      await db.persist();
-      const created = await repo.findConversation(id, input.userId);
-      if (!created) throw new Error("Conversation could not be read back");
-      return created;
-    },
-
-    async touchConversation(id: number): Promise<void> {
-      await (
-        await client()
-      )
-        .update(conversations)
-        .set({ updatedAt: now() })
-        .where(eq(conversations.id, id));
-      await db.persist();
-    },
-
-    async deleteConversation(id: number, userId: string): Promise<boolean> {
-      const existing = await repo.findConversation(id, userId);
-      if (!existing) return false;
-      // Deleted explicitly rather than trusting the cascade, which a
-      // connection without foreign keys on would skip.
-      const drizzle = await client();
-      await drizzle.delete(messages).where(eq(messages.conversationId, id));
-      await drizzle.delete(proposals).where(eq(proposals.conversationId, id));
-      await drizzle
-        .delete(conversations)
-        .where(and(eq(conversations.id, id), eq(conversations.userId, userId)));
-      await db.persist();
-      return true;
-    },
-
-    // --- messages ---
-
-    async listMessages(conversationId: number): Promise<AiMessageRecord[]> {
-      return (await client())
-        .select()
-        .from(messages)
-        .where(eq(messages.conversationId, conversationId))
-        .orderBy(messages.id);
-    },
-
-    async appendMessage(input: {
-      conversationId: number;
-      role: string;
-      content: string;
-      toolCalls?: string | null;
-    }): Promise<void> {
-      await insertId(messages, {
-        conversationId: input.conversationId,
-        role: input.role,
-        content: input.content,
-        toolCalls: input.toolCalls ?? null,
-        createdAt: now(),
-      });
-      await db.persist();
-    },
-
-    // --- proposals ---
-
-    async listProposals(
-      userId: string,
-      conversationId: number,
-    ): Promise<AiProposalRecord[]> {
-      return (await client())
-        .select()
-        .from(proposals)
-        .where(
-          and(
-            eq(proposals.userId, userId),
-            eq(proposals.conversationId, conversationId),
-          ),
-        )
-        .orderBy(desc(proposals.id));
-    },
-
-    async findProposal(
-      id: number,
-      userId: string,
-    ): Promise<AiProposalRecord | null> {
-      return first<AiProposalRecord>(
-        proposals,
-        and(eq(proposals.id, id), eq(proposals.userId, userId)),
-      );
-    },
-
-    async createProposal(input: {
-      conversationId: number;
-      userId: string;
-      kind: string;
-      summary?: string | null;
-      payload: string;
-    }): Promise<AiProposalRecord> {
-      const id = await insertId(proposals, {
-        conversationId: input.conversationId,
-        userId: input.userId,
-        kind: input.kind,
-        summary: input.summary ?? null,
-        payload: input.payload,
-        status: "pending",
-        createdAt: now(),
-      });
-      await db.persist();
-      const created = await repo.findProposal(id, input.userId);
-      if (!created) throw new Error("Proposal could not be read back");
-      return created;
-    },
-
-    /** Only moves a pending proposal. False when it was not pending. */
-    async setProposalStatus(
-      id: number,
-      userId: string,
-      status: "applied" | "rejected" | "expired",
-      resultSummary?: string | null,
-    ): Promise<boolean> {
-      const existing = await repo.findProposal(id, userId);
-      if (!existing || existing.status !== "pending") return false;
-      await (
-        await client()
-      )
-        .update(proposals)
-        .set({
-          status,
-          appliedAt: status === "applied" ? now() : null,
-          resultSummary: resultSummary ?? null,
-        })
-        .where(
-          and(
-            eq(proposals.id, id),
-            eq(proposals.userId, userId),
-            eq(proposals.status, "pending"),
-          ),
-        );
-      await db.persist();
-      return true;
-    },
-  };
-
-  return repo;
-}
diff --git a/plugins/ai/src/backend/routes.ts b/plugins/ai/src/backend/routes.ts
deleted file mode 100644
index a38067f9e..000000000
--- a/plugins/ai/src/backend/routes.ts
+++ /dev/null
@@ -1,1106 +0,0 @@
-import type { Request, Response, Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { buildSystemPrompt } from "./context.js";
-import { runAgent } from "./engine.js";
-import { getErrorMessage } from "./errors.js";
-import {
-  createAiGate,
-  isAiGloballyEnabled,
-  readPrivateAllowlist,
-  resolveAiAccess,
-} from "./gating.js";
-import { toChatHistory, toStoredMessage } from "./history.js";
-import {
-  createProviderFetch,
-  describeProviderError,
-} from "./providers/http.js";
-import {
-  FALLBACK_MODELS,
-  getAdapter,
-  REQUIRES_API_KEY,
-  REQUIRES_BASE_URL,
-} from "./providers/registry.js";
-import type { AiProviderType, ProviderConfig } from "./providers/types.js";
-import { isAiProviderType } from "./providers/types.js";
-import type { AiRepository } from "./repository.js";
-import { serviceAvailable } from "./services.js";
-import { availableTools } from "./tools/catalog.js";
-import { applyProposal } from "./tools/executor.js";
-import type { ToolDeps } from "./tools/types.js";
-
-function parseId(raw: unknown): number | null {
-  const id = typeof raw === "string" ? parseInt(raw, 10) : Number(raw);
-  return Number.isInteger(id) && id > 0 ? id : null;
-}
-
-function actor(ctx: PluginContext): string {
-  // Core's plugin router authenticates every request and runs it as that user.
-  return ctx.currentActor() as string;
-}
-
-/**
- * Mounts every assistant route on the plugin's router, served at
- * /plugin-api/ai. Everything but /status sits behind the AI gate: the admin
- * switch and the user's own opt-in.
- */
-export function registerAiRoutes(
-  router: Router,
-  repository: AiRepository,
-  ctx: PluginContext,
-): void {
-  const aiGate = createAiGate(ctx.settings, () => ctx.currentActor());
-  const gate = aiGate as never;
-  const toolDeps: ToolDeps = {
-    hosts: ctx.hosts,
-    services: ctx.services,
-    notify: ctx.notify,
-    rbac: ctx.rbac,
-    ssh: ctx.ssh,
-    audit: ctx.audit,
-  };
-
-  const logError = (message: string, error: unknown) =>
-    ctx.log.error(
-      message,
-      error instanceof Error ? error : new Error(String(error)),
-    );
-
-  const audit = (entry: Parameters<PluginContext["audit"]["record"]>[0]) =>
-    ctx.audit.record(entry).catch(() => undefined);
-
-  /** The provider config for an outbound call, with the egress-checked fetch. */
-  async function providerConfig(input: {
-    providerType: string;
-    baseUrl: string | null;
-    apiKey: string | null;
-  }): Promise<ProviderConfig> {
-    const allowlist = await readPrivateAllowlist(ctx.settings);
-    return {
-      providerType: input.providerType as ProviderConfig["providerType"],
-      baseUrl: input.baseUrl,
-      apiKey: input.apiKey,
-      fetch: createProviderFetch(ctx.fetch, allowlist),
-    };
-  }
-
-  /**
-   * @openapi
-   * /plugin-api/ai/status:
-   *   get:
-   *     summary: Whether the AI assistant is available to this user
-   *     description: >
-   *       Deliberately not behind the AI gate: the frontend calls this to decide
-   *       whether to render any AI surface at all, and needs a plain answer rather
-   *       than a 403 when the feature is off.
-   *     tags:
-   *       - AI
-   *     responses:
-   *       200:
-   *         description: The effective enablement state.
-   */
-  router.get("/status", async (_req: Request, res: Response) => {
-    const userId = actor(ctx);
-    try {
-      const [globallyEnabled, access] = await Promise.all([
-        isAiGloballyEnabled(ctx.settings),
-        resolveAiAccess(ctx.settings, userId),
-      ]);
-      res.json({
-        globallyEnabled,
-        enabled: access.enabled,
-        allowReadOnlyCommands: access.allowReadOnlyCommands,
-      });
-    } catch (err) {
-      logError("Failed to read AI status", err);
-      res.status(500).json({ error: "Failed to read AI status" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/ai/opt-in:
-   *   put:
-   *     summary: Turn the assistant on or off for the current user
-   *     description: >
-   *       The same value as the user setting "enabled", for the onboarding
-   *       step and the panel, which set it outside the settings form. Refused
-   *       while the assistant is off for the whole server.
-   *     tags:
-   *       - AI
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               enabled:
-   *                 type: boolean
-   *     responses:
-   *       200:
-   *         description: The user's new choice.
-   *       400:
-   *         description: enabled is not a boolean.
-   *       403:
-   *         description: The assistant is off for the whole server.
-   */
-  router.put(
-    "/opt-in",
-    ctx.rbac.require("use") as never,
-    async (req: Request, res: Response) => {
-      const { enabled } = req.body ?? {};
-      if (typeof enabled !== "boolean") {
-        return res.status(400).json({ error: "enabled must be a boolean" });
-      }
-      try {
-        // Turning it off is always allowed; turning it on needs the switch.
-        if (enabled && !(await isAiGloballyEnabled(ctx.settings))) {
-          return res
-            .status(403)
-            .json({ error: "The AI assistant is not enabled" });
-        }
-        await ctx.settings.setUser(actor(ctx), "enabled", enabled);
-        res.json({ enabled });
-      } catch (err) {
-        logError("Failed to save the AI opt-in", err);
-        res.status(500).json({ error: "Failed to save the setting" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/ai/providers:
-   *   get:
-   *     summary: List the user's configured AI providers
-   *     tags:
-   *       - AI
-   *     responses:
-   *       200:
-   *         description: Providers, with API keys masked.
-   *       403:
-   *         description: The AI assistant is not enabled.
-   */
-  router.get(
-    "/providers",
-    ctx.rbac.require("use") as never,
-    gate,
-    async (_req: Request, res: Response) => {
-      try {
-        const providers = await repository.listProviders(actor(ctx));
-        res.json({ providers });
-      } catch (err) {
-        logError("Failed to list AI providers", err);
-        res.status(500).json({ error: "Failed to list providers" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/ai/providers:
-   *   post:
-   *     summary: Add an AI provider
-   *     tags:
-   *       - AI
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               providerType:
-   *                 type: string
-   *               label:
-   *                 type: string
-   *               baseUrl:
-   *                 type: string
-   *               apiKey:
-   *                 type: string
-   *               defaultModel:
-   *                 type: string
-   *     responses:
-   *       201:
-   *         description: Provider created.
-   *       400:
-   *         description: Invalid request body.
-   */
-  router.post(
-    "/providers",
-    ctx.rbac.require("manage_providers") as never,
-    gate,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const { providerType, label, baseUrl, apiKey, defaultModel } =
-        req.body ?? {};
-
-      if (!isAiProviderType(providerType)) {
-        return res.status(400).json({ error: "Unknown provider type" });
-      }
-      if (typeof label !== "string" || !label.trim()) {
-        return res.status(400).json({ error: "label is required" });
-      }
-      if (REQUIRES_BASE_URL.includes(providerType) && !baseUrl?.trim()) {
-        return res
-          .status(400)
-          .json({ error: "This provider needs a base URL" });
-      }
-      if (REQUIRES_API_KEY.includes(providerType) && !apiKey?.trim()) {
-        return res
-          .status(400)
-          .json({ error: "This provider needs an API key" });
-      }
-
-      try {
-        const created = await repository.createProvider(userId, {
-          providerType,
-          label: label.trim(),
-          baseUrl: typeof baseUrl === "string" ? baseUrl.trim() : null,
-          apiKey: typeof apiKey === "string" ? apiKey.trim() : null,
-          defaultModel:
-            typeof defaultModel === "string" ? defaultModel.trim() : null,
-        });
-
-        await audit({
-          action: "create_ai_provider",
-          resourceType: "ai_provider",
-          resourceId: String(created.id),
-          resourceName: created.label,
-          success: true,
-        });
-
-        res.status(201).json({ provider: created });
-      } catch (err) {
-        logError("Failed to create AI provider", err);
-        res.status(500).json({ error: "Failed to create provider" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/ai/providers/{id}:
-   *   patch:
-   *     summary: Update an AI provider
-   *     tags:
-   *       - AI
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Provider updated.
-   *       404:
-   *         description: Provider not found.
-   */
-  router.patch(
-    "/providers/:id",
-    ctx.rbac.require("manage_providers") as never,
-    gate,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const id = parseId(req.params.id);
-      if (!id) return res.status(400).json({ error: "Invalid provider id" });
-
-      const body = (req.body ?? {}) as Record<string, unknown>;
-      if (
-        body.providerType !== undefined &&
-        !isAiProviderType(body.providerType)
-      ) {
-        return res.status(400).json({ error: "Unknown provider type" });
-      }
-
-      const text = (value: unknown) =>
-        typeof value === "string" ? value.trim() : undefined;
-
-      try {
-        const updated = await repository.updateProvider(id, userId, {
-          providerType: body.providerType as string | undefined,
-          label: text(body.label) || undefined,
-          baseUrl:
-            body.baseUrl === null ? null : (text(body.baseUrl) ?? undefined),
-          apiKey: body.apiKey === null ? "" : text(body.apiKey),
-          defaultModel:
-            body.defaultModel === null
-              ? null
-              : (text(body.defaultModel) ?? undefined),
-          enabled: typeof body.enabled === "boolean" ? body.enabled : undefined,
-        });
-        if (!updated)
-          return res.status(404).json({ error: "Provider not found" });
-
-        await audit({
-          action: "update_ai_provider",
-          resourceType: "ai_provider",
-          resourceId: String(id),
-          resourceName: updated.label,
-          success: true,
-        });
-
-        res.json({ provider: updated });
-      } catch (err) {
-        logError("Failed to update AI provider", err);
-        res.status(500).json({ error: "Failed to update provider" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/ai/providers/{id}:
-   *   delete:
-   *     summary: Delete an AI provider
-   *     tags:
-   *       - AI
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Provider deleted.
-   *       404:
-   *         description: Provider not found.
-   */
-  router.delete(
-    "/providers/:id",
-    ctx.rbac.require("manage_providers") as never,
-    gate,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const id = parseId(req.params.id);
-      if (!id) return res.status(400).json({ error: "Invalid provider id" });
-
-      try {
-        const deleted = await repository.deleteProvider(id, userId);
-        if (!deleted)
-          return res.status(404).json({ error: "Provider not found" });
-
-        await audit({
-          action: "delete_ai_provider",
-          resourceType: "ai_provider",
-          resourceId: String(id),
-          success: true,
-        });
-
-        res.json({ success: true });
-      } catch (err) {
-        logError("Failed to delete AI provider", err);
-        res.status(500).json({ error: "Failed to delete provider" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/ai/probe-models:
-   *   post:
-   *     summary: List models for a provider that has not been saved yet
-   *     description: >
-   *       Lets the add-provider form fill its model picker before the provider
-   *       exists, so nobody has to go and look up model names by hand.
-   *     tags:
-   *       - AI
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               providerType:
-   *                 type: string
-   *               baseUrl:
-   *                 type: string
-   *               apiKey:
-   *                 type: string
-   *               providerId:
-   *                 type: integer
-   *     responses:
-   *       200:
-   *         description: Model ids, possibly a curated fallback list.
-   *       400:
-   *         description: Unknown provider type.
-   */
-  router.post(
-    "/probe-models",
-    ctx.rbac.require("manage_providers") as never,
-    gate,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const { providerType, baseUrl, apiKey, providerId } = req.body ?? {};
-
-      if (!isAiProviderType(providerType)) {
-        return res.status(400).json({ error: "Unknown provider type" });
-      }
-
-      try {
-        // Editing an existing provider sends no key, so fall back to the
-        // stored one rather than making the user retype it.
-        let resolvedKey =
-          typeof apiKey === "string" && apiKey.trim() ? apiKey.trim() : null;
-        const storedId = parseId(providerId);
-        if (!resolvedKey && storedId) {
-          const stored = await repository.findProviderWithSecret(
-            storedId,
-            userId,
-          );
-          resolvedKey = stored?.apiKey ?? null;
-        }
-
-        const models = await getAdapter(providerType).listModels(
-          await providerConfig({
-            providerType,
-            baseUrl: typeof baseUrl === "string" ? baseUrl.trim() : null,
-            apiKey: resolvedKey,
-          }),
-        );
-
-        res.json({ models, source: "live" });
-      } catch (err) {
-        const warning = describeProviderError(
-          err,
-          "Could not reach the provider",
-        );
-        ctx.log.warn(`Model detection failed: ${warning}`);
-        // A provider that cannot be reached yet still gets a usable list, so
-        // the form is never a blank text box the user has to guess into.
-        const fallback = FALLBACK_MODELS[providerType as AiProviderType] ?? [];
-        res.json({
-          models: fallback,
-          source: fallback.length ? "fallback" : "none",
-          warning,
-        });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/ai/providers/{id}/models:
-   *   get:
-   *     summary: List models available from a provider
-   *     tags:
-   *       - AI
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Model ids.
-   *       502:
-   *         description: The provider could not be reached.
-   */
-  router.get(
-    "/providers/:id/models",
-    ctx.rbac.require("use") as never,
-    gate,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const id = parseId(req.params.id);
-      if (!id) return res.status(400).json({ error: "Invalid provider id" });
-
-      try {
-        const provider = await repository.findProviderWithSecret(id, userId);
-        if (!provider)
-          return res.status(404).json({ error: "Provider not found" });
-
-        const models = await getAdapter(provider.providerType).listModels(
-          await providerConfig(provider),
-        );
-        res.json({ models });
-      } catch (err) {
-        // The message can carry the allowlist hint, which the user needs.
-        const message = describeProviderError(
-          err,
-          "Could not reach the provider",
-        );
-        ctx.log.warn(`Failed to list provider models: ${message}`);
-        res.status(502).json({ error: message });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/ai/conversations:
-   *   get:
-   *     summary: List the user's AI conversations
-   *     tags:
-   *       - AI
-   *     responses:
-   *       200:
-   *         description: Conversations, newest first.
-   */
-  router.get(
-    "/conversations",
-    ctx.rbac.require("use") as never,
-    gate,
-    async (_req: Request, res: Response) => {
-      try {
-        const conversations = await repository.listConversations(actor(ctx));
-        res.json({ conversations });
-      } catch (err) {
-        logError("Failed to list AI conversations", err);
-        res.status(500).json({ error: "Failed to list conversations" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/ai/conversations/{id}:
-   *   get:
-   *     summary: Get one conversation with its messages and proposals
-   *     tags:
-   *       - AI
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: The conversation.
-   *       404:
-   *         description: Conversation not found.
-   */
-  router.get(
-    "/conversations/:id",
-    ctx.rbac.require("use") as never,
-    gate,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const id = parseId(req.params.id);
-      if (!id)
-        return res.status(400).json({ error: "Invalid conversation id" });
-
-      try {
-        const conversation = await repository.findConversation(id, userId);
-        if (!conversation) {
-          return res.status(404).json({ error: "Conversation not found" });
-        }
-
-        const [messages, proposals] = await Promise.all([
-          repository.listMessages(id),
-          repository.listProposals(userId, id),
-        ]);
-
-        res.json({ conversation, messages, proposals });
-      } catch (err) {
-        logError("Failed to load AI conversation", err);
-        res.status(500).json({ error: "Failed to load conversation" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/ai/conversations/{id}:
-   *   delete:
-   *     summary: Delete a conversation
-   *     tags:
-   *       - AI
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Conversation deleted.
-   */
-  router.delete(
-    "/conversations/:id",
-    ctx.rbac.require("use") as never,
-    gate,
-    async (req: Request, res: Response) => {
-      const id = parseId(req.params.id);
-      if (!id)
-        return res.status(400).json({ error: "Invalid conversation id" });
-
-      try {
-        const deleted = await repository.deleteConversation(id, actor(ctx));
-        if (!deleted) {
-          return res.status(404).json({ error: "Conversation not found" });
-        }
-        res.json({ success: true });
-      } catch (err) {
-        logError("Failed to delete AI conversation", err);
-        res.status(500).json({ error: "Failed to delete conversation" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/ai/chat/stream:
-   *   post:
-   *     summary: Send a message and stream the assistant's reply
-   *     description: >
-   *       Server-sent events. Emits conversation, token, tool_call,
-   *       tool_result, proposal, done and error frames.
-   *     tags:
-   *       - AI
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               conversationId:
-   *                 type: integer
-   *               providerId:
-   *                 type: integer
-   *               model:
-   *                 type: string
-   *               message:
-   *                 type: string
-   *               activeTab:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: An event stream.
-   *       400:
-   *         description: Invalid request body.
-   */
-  router.post(
-    "/chat/stream",
-    ctx.rbac.require("use") as never,
-    gate,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const { conversationId, providerId, model, message, activeTab } =
-        req.body ?? {};
-
-      if (typeof message !== "string" || !message.trim()) {
-        return res.status(400).json({ error: "message is required" });
-      }
-
-      const resolvedProviderId = parseId(providerId);
-      if (!resolvedProviderId) {
-        return res.status(400).json({ error: "providerId is required" });
-      }
-
-      try {
-        const provider = await repository.findProviderWithSecret(
-          resolvedProviderId,
-          userId,
-        );
-        if (!provider) {
-          return res.status(404).json({ error: "Provider not found" });
-        }
-
-        const chosenModel =
-          (typeof model === "string" && model.trim()) ||
-          provider.defaultModel ||
-          "";
-        if (!chosenModel) {
-          return res.status(400).json({ error: "No model selected" });
-        }
-
-        // Resolve or create the conversation before the stream opens, so a
-        // failure here is still a normal JSON error the client can render.
-        let conversation = conversationId
-          ? await repository.findConversation(Number(conversationId), userId)
-          : null;
-        if (!conversation) {
-          conversation = await repository.createConversation({
-            userId,
-            title: message.trim().slice(0, 60),
-            providerId: resolvedProviderId,
-            model: chosenModel,
-          });
-        }
-
-        const history = await repository.listMessages(conversation.id);
-        await repository.appendMessage({
-          conversationId: conversation.id,
-          role: "user",
-          content: message.trim(),
-        });
-
-        const access = (
-          req as Request & { aiAccess?: { allowReadOnlyCommands: boolean } }
-        ).aiAccess ?? { allowReadOnlyCommands: false };
-        const hosts = await ctx.hosts.list();
-        const config = await providerConfig(provider);
-        const tools = availableTools(
-          (service) => serviceAvailable(ctx.services, service),
-          { allowReadOnlyCommands: access.allowReadOnlyCommands },
-        );
-
-        // no-transform keeps core's compression from buffering the stream,
-        // and X-Accel-Buffering does the same for nginx.
-        res.writeHead(200, {
-          "Content-Type": "text/event-stream",
-          "Cache-Control": "no-store, no-transform",
-          Connection: "keep-alive",
-          "X-Accel-Buffering": "no",
-        });
-        res.flushHeaders?.();
-
-        const heartbeat = setInterval(() => {
-          try {
-            res.write(": keepalive\n\n");
-          } catch {
-            clearInterval(heartbeat);
-          }
-        }, 30000);
-
-        // req's own "close" already fired once express read the body, so the
-        // response is what tells us the client went away.
-        const abort = new AbortController();
-        res.on("close", () => {
-          clearInterval(heartbeat);
-          if (!res.writableFinished) abort.abort();
-        });
-
-        const send = (event: unknown) => {
-          if (res.writableEnded || res.destroyed) return;
-          res.write(`data: ${JSON.stringify(event)}\n\n`);
-        };
-
-        send({ type: "conversation", conversationId: conversation.id });
-
-        const chatHistory = toChatHistory(history);
-        chatHistory.push({ role: "user", content: message.trim() });
-
-        try {
-          for await (const event of runAgent({
-            config,
-            model: chosenModel,
-            system: buildSystemPrompt({
-              hostCount: hosts.length,
-              activeTab: typeof activeTab === "string" ? activeTab : null,
-              allowReadOnlyCommands: access.allowReadOnlyCommands,
-            }),
-            history: chatHistory,
-            context: {
-              userId,
-              conversationId: conversation.id,
-              allowReadOnlyCommands: access.allowReadOnlyCommands,
-              deps: toolDeps,
-            },
-            tools,
-            signal: abort.signal,
-          })) {
-            if (event.type === "message") {
-              // Every step is kept, tool results included, so the next message
-              // replays the run verbatim. Gemini rejects a turn whose
-              // functionCall parts lost their thoughtSignature.
-              await repository.appendMessage({
-                conversationId: conversation.id,
-                ...toStoredMessage(event.message),
-              });
-              continue;
-            }
-
-            if (event.type === "proposal") {
-              const stored = await repository.createProposal({
-                conversationId: conversation.id,
-                userId,
-                kind: event.draft.kind,
-                summary: event.draft.summary,
-                payload: JSON.stringify(event.draft.payload),
-              });
-
-              await audit({
-                action: "ai_proposal_created",
-                resourceType: "ai_proposal",
-                resourceId: String(stored.id),
-                resourceName: event.draft.kind,
-                success: true,
-              });
-
-              send({ type: "proposal", proposal: stored });
-              continue;
-            }
-
-            send(event);
-          }
-        } finally {
-          clearInterval(heartbeat);
-        }
-        await repository.touchConversation(conversation.id);
-
-        send({ type: "done" });
-        res.end();
-      } catch (err) {
-        logError("AI chat stream failed", err);
-        if (res.writableEnded || res.destroyed) return;
-        if (res.headersSent) {
-          res.write(
-            `data: ${JSON.stringify({ type: "error", message: "The assistant stopped unexpectedly" })}\n\n`,
-          );
-          res.end();
-        } else {
-          res.status(500).json({ error: "Failed to start the assistant" });
-        }
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/ai/proposals/{id}/apply:
-   *   post:
-   *     summary: Apply a pending proposal
-   *     description: >
-   *       Re-validates the stored payload and applies it as the approving user,
-   *       through the same core APIs and plugin services a manual action uses.
-   *     tags:
-   *       - AI
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Proposal applied.
-   *       400:
-   *         description: The proposal could not be applied.
-   *       404:
-   *         description: Proposal not found.
-   */
-  router.post(
-    "/proposals/:id/apply",
-    ctx.rbac.require("apply_proposals") as never,
-    gate,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const id = parseId(req.params.id);
-      if (!id) return res.status(400).json({ error: "Invalid proposal id" });
-
-      try {
-        const stored = await repository.findProposal(id, userId);
-        if (!stored)
-          return res.status(404).json({ error: "Proposal not found" });
-        if (stored.status !== "pending") {
-          return res
-            .status(400)
-            .json({ error: `This proposal was already ${stored.status}` });
-        }
-
-        let payload: Record<string, unknown>;
-        try {
-          payload = JSON.parse(stored.payload) as Record<string, unknown>;
-        } catch {
-          return res
-            .status(400)
-            .json({ error: "The proposal payload is invalid" });
-        }
-
-        const result = await applyProposal(stored.kind, payload, toolDeps);
-        await repository.setProposalStatus(
-          id,
-          userId,
-          "applied",
-          result.summary,
-        );
-
-        await audit({
-          action: "ai_proposal_applied",
-          resourceType: "ai_proposal",
-          resourceId: String(id),
-          resourceName: stored.kind,
-          success: true,
-        });
-
-        res.json({ success: result.ok, summary: result.summary });
-      } catch (err) {
-        const message = getErrorMessage(err, "Failed to apply the proposal");
-        logError("Failed to apply AI proposal", err);
-
-        await audit({
-          action: "ai_proposal_applied",
-          resourceType: "ai_proposal",
-          resourceId: String(id),
-          success: false,
-          errorMessage: message,
-        });
-
-        res.status(400).json({ error: message });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/ai/proposals/{id}/mark-run-in-terminal:
-   *   post:
-   *     summary: Record that a run_command proposal was executed in an open terminal
-   *     description: >
-   *       For the terminal-docked assistant only. The command is typed into the
-   *       user's already-open SSH session client-side, not re-run over a pooled
-   *       connection here; this just marks the proposal applied with the output
-   *       the client captured, so the card and the /apply path stay in sync
-   *       without running the command twice.
-   *     tags:
-   *       - AI
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               hostId:
-   *                 type: integer
-   *               summary:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Proposal marked applied.
-   *       400:
-   *         description: The proposal is not a run_command proposal, or the hostId does not match.
-   *       404:
-   *         description: Proposal not found.
-   */
-  router.post(
-    "/proposals/:id/mark-run-in-terminal",
-    ctx.rbac.require("apply_proposals") as never,
-    gate,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const id = parseId(req.params.id);
-      if (!id) return res.status(400).json({ error: "Invalid proposal id" });
-
-      const { hostId, summary } = req.body ?? {};
-      const resolvedHostId = parseId(hostId);
-      if (!resolvedHostId) {
-        return res.status(400).json({ error: "hostId is required" });
-      }
-
-      try {
-        const stored = await repository.findProposal(id, userId);
-        if (!stored)
-          return res.status(404).json({ error: "Proposal not found" });
-        if (stored.kind !== "propose_run_command") {
-          return res.status(400).json({
-            error: "Only run_command proposals can be marked this way",
-          });
-        }
-        if (stored.status !== "pending") {
-          return res
-            .status(400)
-            .json({ error: `This proposal was already ${stored.status}` });
-        }
-
-        let payload: Record<string, unknown>;
-        try {
-          payload = JSON.parse(stored.payload) as Record<string, unknown>;
-        } catch {
-          return res
-            .status(400)
-            .json({ error: "The proposal payload is invalid" });
-        }
-        if (parseId(payload.hostId) !== resolvedHostId) {
-          return res
-            .status(400)
-            .json({ error: "This proposal is for a different host" });
-        }
-
-        const resultSummary =
-          typeof summary === "string" && summary.trim()
-            ? summary.trim().slice(0, 2000)
-            : "Run in the open terminal session";
-        await repository.setProposalStatus(
-          id,
-          userId,
-          "applied",
-          resultSummary,
-        );
-
-        await audit({
-          action: "ai_proposal_applied",
-          resourceType: "ai_proposal",
-          resourceId: String(id),
-          resourceName: stored.kind,
-          success: true,
-        });
-
-        res.json({ success: true, summary: resultSummary });
-      } catch (err) {
-        logError("Failed to mark AI proposal applied in terminal", err);
-        res.status(400).json({
-          error: getErrorMessage(err, "Failed to mark the proposal applied"),
-        });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/ai/proposals/{id}/reject:
-   *   post:
-   *     summary: Reject a pending proposal
-   *     tags:
-   *       - AI
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Proposal rejected.
-   *       404:
-   *         description: Proposal not found.
-   */
-  router.post(
-    "/proposals/:id/reject",
-    ctx.rbac.require("use") as never,
-    gate,
-    async (req: Request, res: Response) => {
-      const id = parseId(req.params.id);
-      if (!id) return res.status(400).json({ error: "Invalid proposal id" });
-
-      try {
-        const updated = await repository.setProposalStatus(
-          id,
-          actor(ctx),
-          "rejected",
-        );
-        if (!updated) {
-          return res
-            .status(404)
-            .json({ error: "Proposal not found or already resolved" });
-        }
-
-        await audit({
-          action: "ai_proposal_rejected",
-          resourceType: "ai_proposal",
-          resourceId: String(id),
-          success: true,
-        });
-
-        res.json({ success: true });
-      } catch (err) {
-        logError("Failed to reject AI proposal", err);
-        res.status(500).json({ error: "Failed to reject the proposal" });
-      }
-    },
-  );
-}
diff --git a/plugins/ai/src/backend/services.ts b/plugins/ai/src/backend/services.ts
deleted file mode 100644
index bbf4abb11..000000000
--- a/plugins/ai/src/backend/services.ts
+++ /dev/null
@@ -1,163 +0,0 @@
-import type { PluginServices } from "@termix/plugin-sdk/backend";
-
-/**
- * Other plugins the assistant reads and changes through, each optional. A
- * service call runs as the acting user and the provider checks that user's
- * permissions, so nothing here takes a user id.
- */
-
-export const SERVICE = {
-  snippets: "snippets.access",
-  fleets: "fleets.access",
-  automations: "automations.access",
-  workspaces: "workspaces.saved",
-  topology: "network-topology.graph",
-  history: "terminal.history",
-  homepage: "homepage.items",
-} as const;
-
-export type ServiceName = (typeof SERVICE)[keyof typeof SERVICE];
-
-/** Whether a compatible provider is running right now. */
-export function serviceAvailable(
-  services: Pick<PluginServices, "providers">,
-  service: string,
-): boolean {
-  try {
-    return services.providers(service).length > 0;
-  } catch {
-    return false;
-  }
-}
-
-export interface SnippetSummary {
-  id: number;
-  name: string;
-  content: string;
-  description: string | null;
-  isNote: boolean;
-  folder: string | null;
-}
-
-export interface SnippetsAccess {
-  list: () => Promise<SnippetSummary[]>;
-  get: (id: number) => Promise<{
-    id: number;
-    name: string;
-    content: string;
-    isNote: boolean;
-  } | null>;
-  create: (input: {
-    name: string;
-    content: string;
-    description?: string | null;
-    folder?: string | null;
-  }) => Promise<{ id: number; name: string }>;
-  update: (
-    id: number,
-    changes: {
-      name?: string;
-      content?: string;
-      description?: string | null;
-      folder?: string | null;
-    },
-  ) => Promise<void>;
-  remove: (id: number) => Promise<boolean>;
-}
-
-export interface FleetsAccess {
-  list: () => Promise<
-    Array<{ id: number; name: string; color: string | null }>
-  >;
-  create: (input: {
-    name: string;
-    description?: string | null;
-  }) => Promise<{ id: number; name: string }>;
-  addMember: (fleetId: number, hostId: number) => Promise<void>;
-}
-
-export interface AutomationsAccess {
-  list: () => Promise<
-    Array<{
-      id: number;
-      name: string;
-      description: string | null;
-      enabled: boolean;
-      triggerKind: string | null;
-      lastRunAt: string | null;
-      lastRunStatus: string | null;
-      missingPlugins: string[];
-    }>
-  >;
-  get: (id: number) => Promise<{
-    id: number;
-    name: string;
-    enabled: boolean;
-    definition: unknown;
-  } | null>;
-  create: (input: {
-    name: string;
-    description?: string | null;
-    definition: unknown;
-    enabled?: boolean;
-  }) => Promise<{ id: number; name: string }>;
-}
-
-export interface SavedWorkspaces {
-  list: () => Promise<Array<{ id: number; name: string; isDefault: boolean }>>;
-}
-
-export interface NetworkTopologyGraph {
-  get: () => Promise<unknown | null>;
-}
-
-export interface TerminalHistory {
-  list: (
-    hostId: number,
-    limit?: number,
-  ) => Promise<Array<{ command: string; executedAt: string }>>;
-}
-
-/** homepage.items v1, which the homepage plugin provides from B19. */
-export interface HomepageItems {
-  list: () => Promise<
-    Array<{ id: number; typeId: string; title: string | null }>
-  >;
-}
-
-interface ServiceTypes {
-  "snippets.access": SnippetsAccess;
-  "fleets.access": FleetsAccess;
-  "automations.access": AutomationsAccess;
-  "workspaces.saved": SavedWorkspaces;
-  "network-topology.graph": NetworkTopologyGraph;
-  "terminal.history": TerminalHistory;
-  "homepage.items": HomepageItems;
-}
-
-/**
- * The service handle. Throws when the provider is missing or the user may
- * not use it; a proposal apply wants that error, a read tool catches it.
- */
-export function requireService<S extends ServiceName>(
-  services: Pick<PluginServices, "get" | "providers">,
-  service: S,
-): ServiceTypes[S] {
-  if (!serviceAvailable(services, service)) {
-    throw new Error(`The ${service.split(".")[0]} plugin is not available`);
-  }
-  return services.get<ServiceTypes[S]>(service);
-}
-
-/** A read through a service, or null when it is missing or refused. */
-export async function readService<S extends ServiceName, T>(
-  services: Pick<PluginServices, "get" | "providers">,
-  service: S,
-  read: (handle: ServiceTypes[S]) => Promise<T>,
-): Promise<T | null> {
-  try {
-    return await read(requireService(services, service));
-  } catch {
-    return null;
-  }
-}
diff --git a/plugins/ai/src/backend/sync.ts b/plugins/ai/src/backend/sync.ts
deleted file mode 100644
index 17af496fc..000000000
--- a/plugins/ai/src/backend/sync.ts
+++ /dev/null
@@ -1,50 +0,0 @@
-import type { PluginContext, SyncRow } from "@termix/plugin-sdk/backend";
-import {
-  apiKeyPrefix,
-  providerSecretKey,
-  type AiRepository,
-} from "./repository.js";
-import { providers } from "./tables.js";
-
-function keyFromWire(row: SyncRow): string | null {
-  if (typeof row.apiKey === "string") return row.apiKey || null;
-  if (row.apiKey === null) return null;
-  throw new Error("Invalid synced provider key");
-}
-
-export async function registerProviderSync(
-  ctx: PluginContext,
-  repo: AiRepository,
-) {
-  ctx.sync.registerEntity({
-    type: "aiProviders",
-    table: await ctx.db.define(providers),
-    permissions: {
-      create: "ai.manage_providers",
-      update: "ai.manage_providers",
-      delete: "ai.manage_providers",
-    },
-    serialize: async (row) => {
-      const apiKey = await ctx.asUser(String(row.userId), () =>
-        ctx.secrets.get(providerSecretKey(Number(row.id))),
-      );
-      return { ...row, apiKey, apiKeyPrefix: apiKeyPrefix(apiKey) };
-    },
-    deserialize: async (row) => {
-      const apiKey = keyFromWire(row);
-      const { apiKey: _key, ...fields } = row;
-      return { ...fields, apiKeyPrefix: apiKeyPrefix(apiKey) };
-    },
-    afterWrite: async ({ id, userId, wire }) => {
-      if (id === null) throw new Error("Synced provider has no local id");
-      await ctx.asUser(userId, () =>
-        ctx.secrets.set(providerSecretKey(id), keyFromWire(wire)),
-      );
-    },
-    remove: async (row, userId) => {
-      await ctx.asUser(userId, () =>
-        repo.deleteProvider(Number(row.id), userId),
-      );
-    },
-  });
-}
diff --git a/plugins/ai/src/backend/tables.ts b/plugins/ai/src/backend/tables.ts
deleted file mode 100644
index bef838e5e..000000000
--- a/plugins/ai/src/backend/tables.ts
+++ /dev/null
@@ -1,138 +0,0 @@
-import {
-  adoptLegacyTable,
-  boolean,
-  defineTable,
-  id,
-  integer,
-  refUser,
-  text,
-  timestamp,
-  varchar,
-} from "@termix/plugin-sdk/db";
-
-/*
- * Adopted from core's ai_* tables, so column and index names are the legacy
- * ones and the rename carries every row across.
- *
- * Messages and proposals point at their conversation with a plain integer
- * here, since the SDK only references users and ssh_data. The adoption
- * migrations keep that foreign key by hand, so deleting a conversation still
- * cascades.
- *
- * Provider API keys are not in these tables: they live in ctx.secrets under
- * "provider:<id>". A 2.8 database still has an api_key column, which the
- * boot migration empties after moving the key.
- */
-
-export const providers = adoptLegacyTable(
-  "ai_providers",
-  defineTable(
-    "providers",
-    {
-      id: id(),
-      syncId: varchar().unique(),
-      userId: refUser(),
-      // ollama | anthropic | openai | gemini | openai_compatible
-      providerType: text().notNull(),
-      label: varchar().notNull(),
-      // Required for ollama and openai_compatible, optional elsewhere.
-      baseUrl: text(),
-      // First few characters, kept in the clear so the UI can tell keys apart.
-      apiKeyPrefix: text(),
-      defaultModel: text(),
-      enabled: boolean().notNull().default(true),
-      createdAt: timestamp().notNull().defaultNow(),
-      updatedAt: timestamp().notNull().defaultNow(),
-    },
-    {
-      uniques: [
-        { name: "idx_ai_providers_user_label", columns: ["userId", "label"] },
-      ],
-    },
-  ),
-);
-
-export const conversations = adoptLegacyTable(
-  "ai_conversations",
-  defineTable(
-    "conversations",
-    {
-      id: id(),
-      userId: refUser(),
-      title: text(),
-      providerId: integer(),
-      model: text(),
-      createdAt: timestamp().notNull().defaultNow(),
-      updatedAt: timestamp().notNull().defaultNow(),
-    },
-    {
-      indexes: [
-        {
-          name: "idx_ai_conversations_user",
-          columns: ["userId", "updatedAt"],
-        },
-      ],
-    },
-  ),
-);
-
-export const messages = adoptLegacyTable(
-  "ai_messages",
-  defineTable(
-    "messages",
-    {
-      id: id(),
-      conversationId: integer().notNull(),
-      // user | assistant | tool
-      role: text().notNull(),
-      content: text().notNull().default(""),
-      // Serialized tool calls for this turn.
-      toolCalls: text(),
-      createdAt: timestamp().notNull().defaultNow(),
-    },
-    {
-      indexes: [
-        {
-          name: "idx_ai_messages_conversation",
-          columns: ["conversationId", "createdAt"],
-        },
-      ],
-    },
-  ),
-);
-
-/**
- * A change the assistant wants to make. Nothing here has been applied: the
- * payload is re-validated at apply time and only then dispatched.
- */
-export const proposals = adoptLegacyTable(
-  "ai_proposals",
-  defineTable(
-    "proposals",
-    {
-      id: id(),
-      conversationId: integer().notNull(),
-      userId: refUser(),
-      // The propose_* tool name that produced this.
-      kind: varchar().notNull(),
-      summary: text(),
-      payload: text().notNull().default("{}"),
-      // pending | applied | rejected | expired
-      status: varchar(32).notNull().default("pending"),
-      appliedAt: text(),
-      resultSummary: text(),
-      createdAt: timestamp().notNull().defaultNow(),
-    },
-    {
-      indexes: [
-        { name: "idx_ai_proposals_user", columns: ["userId", "status"] },
-        {
-          name: "idx_ai_proposals_conversation",
-          columns: ["conversationId"],
-        },
-      ],
-    },
-  ),
-);
-
-export const tables = [providers, conversations, messages, proposals];
diff --git a/plugins/ai/src/backend/tools/catalog.ts b/plugins/ai/src/backend/tools/catalog.ts
deleted file mode 100644
index 2f58d48fc..000000000
--- a/plugins/ai/src/backend/tools/catalog.ts
+++ /dev/null
@@ -1,86 +0,0 @@
-import { proposeTools } from "./propose-tools.js";
-import { readTools } from "./read-tools.js";
-import type { AiTool, ToolDefinitionShape } from "./types.js";
-
-/**
- * The allowlist, and the security boundary for the whole feature.
- *
- * A model can only ever invoke what appears here. Route-level RBAC gates the
- * HTTP API, but tools run in-process with the calling user's identity and never
- * pass through a router, so "the assistant cannot reach credentials or user
- * administration" is a property of this list, not of the permission system.
- *
- * Anything touching credentials, vaults, RBAC, users, identity, certificates,
- * SSO or instance settings is deliberately absent and must stay absent.
- */
-export const AI_TOOLS: AiTool[] = [...readTools, ...proposeTools];
-
-const BY_NAME = new Map(AI_TOOLS.map((tool) => [tool.name, tool]));
-
-export function getTool(name: string): AiTool | undefined {
-  return BY_NAME.get(name);
-}
-
-export function listToolNames(): string[] {
-  return AI_TOOLS.map((tool) => tool.name);
-}
-
-/**
- * Domains the assistant must never be able to reach, in any tool, ever.
- * The catalog test asserts no tool name references these.
- */
-export const FORBIDDEN_DOMAINS = [
-  "credential",
-  "vault",
-  "rbac",
-  "role",
-  "permission",
-  "user_admin",
-  "password",
-  "totp",
-  "webauthn",
-  "passkey",
-  "api_key",
-  "session",
-  "oidc",
-  "sso",
-  "ldap",
-  "termix_id",
-  "identity",
-  "certificate",
-  "opkssh",
-  "stepca",
-  "step_ca",
-  "acme",
-  "ssl",
-  "audit",
-  "sync",
-  "settings",
-];
-
-/**
- * The tools offered right now. A tool whose service has no running provider
- * is left out, so the model never sees something it cannot use.
- */
-export function availableTools(
-  isAvailable: (service: string) => boolean,
-  options: { allowReadOnlyCommands?: boolean } = {},
-): AiTool[] {
-  return AI_TOOLS.filter(
-    (tool) =>
-      (!tool.service || isAvailable(tool.service)) &&
-      (!tool.requiresReadOnlyCommands ||
-        options.allowReadOnlyCommands === true),
-  );
-}
-
-/** Tool definitions in the shape the provider adapters expect. */
-export function toolDefinitions(
-  tools: AiTool[] = AI_TOOLS,
-): ToolDefinitionShape[] {
-  return tools.map((tool) => ({
-    name: tool.name,
-    description: tool.description,
-    parameters: tool.parameters,
-  }));
-}
diff --git a/plugins/ai/src/backend/tools/command-allowlist.ts b/plugins/ai/src/backend/tools/command-allowlist.ts
deleted file mode 100644
index 16b15c68b..000000000
--- a/plugins/ai/src/backend/tools/command-allowlist.ts
+++ /dev/null
@@ -1,136 +0,0 @@
-/**
- * Which commands the assistant may run without a per-command approval click,
- * for users who opted into read-only execution.
- *
- * The check parses the command into arguments and matches the resolved binary
- * against the allowlist. Substring matching would be trivially defeated
- * ("df; rm -rf /" contains "df"), so any shell metacharacter that could chain,
- * redirect or substitute a second command rejects the whole string outright.
- */
-
-export const READ_ONLY_COMMANDS = new Set([
-  "df",
-  "du",
-  "free",
-  "uptime",
-  "uname",
-  "whoami",
-  "hostname",
-  "id",
-  "ps",
-  "top",
-  "systemctl",
-  "journalctl",
-  "docker",
-  "ip",
-  "ss",
-  "netstat",
-  "lsblk",
-  "cat",
-  "ls",
-  "stat",
-  "which",
-  "date",
-  "lscpu",
-  "vmstat",
-  "iostat",
-]);
-
-/** Characters that let one command become several. */
-const SHELL_METACHARACTERS = /[;&|`$><\n\r\\]/;
-
-/** Subcommands that are safe for otherwise-powerful binaries. */
-const SUBCOMMAND_ALLOWLIST: Record<string, Set<string>> = {
-  systemctl: new Set([
-    "status",
-    "list-units",
-    "list-unit-files",
-    "is-active",
-    "is-enabled",
-    "show",
-  ]),
-  docker: new Set([
-    "ps",
-    "stats",
-    "images",
-    "logs",
-    "inspect",
-    "version",
-    "info",
-  ]),
-  ip: new Set(["a", "addr", "link", "route", "neigh"]),
-};
-
-/** Paths `cat` may read. Anything else could disclose credentials. */
-const CAT_ALLOWED_PREFIXES = ["/proc/", "/sys/", "/etc/os-release"];
-
-export interface CommandCheck {
-  allowed: boolean;
-  reason?: string;
-}
-
-export function isReadOnlyCommand(raw: string): CommandCheck {
-  const command = raw.trim();
-  if (!command) return { allowed: false, reason: "Empty command" };
-
-  if (SHELL_METACHARACTERS.test(command)) {
-    return {
-      allowed: false,
-      reason: "Command chaining, redirection and substitution are not allowed",
-    };
-  }
-
-  const parts = command.split(/\s+/).filter(Boolean);
-  if (!parts.length) return { allowed: false, reason: "Empty command" };
-
-  // Reject env-prefixed and privilege-escalating forms outright.
-  const head = parts[0];
-  if (head === "sudo" || head === "su" || head === "doas" || head === "env") {
-    return { allowed: false, reason: `${head} is not allowed` };
-  }
-
-  // A path like /usr/bin/df resolves to its basename.
-  const binary = head.includes("/")
-    ? head.slice(head.lastIndexOf("/") + 1)
-    : head;
-
-  if (!READ_ONLY_COMMANDS.has(binary)) {
-    return {
-      allowed: false,
-      reason: `${binary} is not on the read-only allowlist`,
-    };
-  }
-
-  const allowedSubcommands = SUBCOMMAND_ALLOWLIST[binary];
-  if (allowedSubcommands) {
-    const subcommand = parts.slice(1).find((part) => !part.startsWith("-"));
-    if (!subcommand || !allowedSubcommands.has(subcommand)) {
-      return {
-        allowed: false,
-        reason:
-          `${binary} ${subcommand ?? ""}`.trim() +
-          " is not on the read-only allowlist",
-      };
-    }
-  }
-
-  if (binary === "cat") {
-    const targets = parts.slice(1).filter((part) => !part.startsWith("-"));
-    if (!targets.length) {
-      return { allowed: false, reason: "cat needs a file path" };
-    }
-    for (const target of targets) {
-      const permitted = CAT_ALLOWED_PREFIXES.some((prefix) =>
-        prefix.endsWith("/") ? target.startsWith(prefix) : target === prefix,
-      );
-      if (!permitted) {
-        return {
-          allowed: false,
-          reason: `cat is limited to ${CAT_ALLOWED_PREFIXES.join(", ")}`,
-        };
-      }
-    }
-  }
-
-  return { allowed: true };
-}
diff --git a/plugins/ai/src/backend/tools/executor.ts b/plugins/ai/src/backend/tools/executor.ts
deleted file mode 100644
index 17cce89a0..000000000
--- a/plugins/ai/src/backend/tools/executor.ts
+++ /dev/null
@@ -1,280 +0,0 @@
-import type { Client } from "ssh2";
-import type { PluginHostUpdateInput } from "@termix/plugin-sdk/backend";
-import { execCommand } from "@termix/plugin-sdk/host-commands";
-import { getTool } from "./catalog.js";
-import type { ToolDeps } from "./types.js";
-import { requireService, SERVICE } from "../services.js";
-
-/** Approved commands get a bounded window rather than hanging the request. */
-const COMMAND_TIMEOUT_MS = 60_000;
-
-/**
- * Applies an approved proposal.
- *
- * The stored payload is treated as untrusted input even though the server wrote
- * it: the proposal could have sat in the table across a release, and defending
- * the apply path rather than the create path means one place to get right.
- * Everything goes through the same core APIs and plugin services a human
- * action uses, and runs as the approving user: the apply request's actor.
- */
-
-export interface ApplyResult {
-  ok: boolean;
-  summary: string;
-}
-
-function requireNumber(value: unknown, field: string): number {
-  const parsed = Number(value);
-  if (!Number.isInteger(parsed) || parsed <= 0) {
-    throw new Error(`${field} must be a positive integer`);
-  }
-  return parsed;
-}
-
-function requireString(value: unknown, field: string): string {
-  if (typeof value !== "string" || !value.trim()) {
-    throw new Error(`${field} is required`);
-  }
-  return value.trim();
-}
-
-function optionalString(value: unknown): string | null {
-  if (typeof value !== "string") return null;
-  const trimmed = value.trim();
-  return trimmed ? trimmed : null;
-}
-
-/** Tags as ssh_data stores them, comma-separated. */
-function joinTags(value: unknown): string {
-  if (!Array.isArray(value)) return "";
-  return value
-    .filter((tag): tag is string => typeof tag === "string")
-    .map((tag) => tag.trim().replace(/,/g, ""))
-    .filter(Boolean)
-    .join(",");
-}
-
-async function requirePermission(
-  deps: ToolDeps,
-  permission: string,
-): Promise<void> {
-  if (!(await deps.rbac.has(permission))) {
-    throw new Error("You do not have permission to do this");
-  }
-}
-
-export async function applyProposal(
-  kind: string,
-  payload: Record<string, unknown>,
-  deps: ToolDeps,
-): Promise<ApplyResult> {
-  // A payload whose tool no longer exists is refused rather than guessed at.
-  if (!getTool(kind)) {
-    throw new Error(`Unknown proposal kind: ${kind}`);
-  }
-
-  switch (kind) {
-    case "propose_create_host": {
-      await requirePermission(deps, "hosts.create");
-      const created = await deps.hosts.create({
-        name: requireString(payload.name, "name"),
-        ip: requireString(payload.ip, "ip"),
-        port: Number(payload.port) || 22,
-        username: optionalString(payload.username) ?? "",
-        // Credentials are attached by the user after approving.
-        authType: "password",
-        folder: optionalString(payload.folder),
-        tags: joinTags(payload.tags),
-      });
-      return { ok: true, summary: `Created host ${created.name ?? ""}`.trim() };
-    }
-
-    case "propose_update_host": {
-      await requirePermission(deps, "hosts.edit");
-      const hostId = requireNumber(payload.hostId, "hostId");
-      const changes = (payload.changes ?? {}) as Record<string, unknown>;
-
-      const updates: PluginHostUpdateInput = {};
-      if (changes.name !== undefined)
-        updates.name = requireString(changes.name, "name");
-      if (changes.ip !== undefined)
-        updates.ip = requireString(changes.ip, "ip");
-      if (changes.port !== undefined) updates.port = Number(changes.port);
-      if (changes.username !== undefined)
-        updates.username = optionalString(changes.username) ?? "";
-      if (changes.folder !== undefined)
-        updates.folder = optionalString(changes.folder);
-      if (changes.tags !== undefined) updates.tags = joinTags(changes.tags);
-
-      if (!Object.keys(updates).length) {
-        return { ok: false, summary: "Nothing to change" };
-      }
-
-      // update() refuses a host the approving user does not own.
-      const updated = await deps.hosts.update(hostId, updates);
-      if (!updated) throw new Error("Host not found");
-      return { ok: true, summary: `Updated host ${hostId}` };
-    }
-
-    case "propose_delete_host": {
-      const hostId = requireNumber(payload.hostId, "hostId");
-      // delete() checks hosts.delete and ownership itself.
-      const deleted = await deps.hosts.delete(hostId);
-      if (!deleted) throw new Error("Host not found");
-      return { ok: true, summary: `Deleted host ${hostId}` };
-    }
-
-    case "propose_create_snippet": {
-      const created = await requireService(
-        deps.services,
-        SERVICE.snippets,
-      ).create({
-        name: requireString(payload.name, "name"),
-        content: requireString(payload.content, "content"),
-        description: optionalString(payload.description),
-        folder: optionalString(payload.folder),
-      });
-      return {
-        ok: true,
-        summary: `Created snippet ${created.name}`.trim(),
-      };
-    }
-
-    case "propose_update_snippet": {
-      const snippetId = requireNumber(payload.snippetId, "snippetId");
-      const changes = (payload.changes ?? {}) as Record<string, unknown>;
-
-      const snippets = requireService(deps.services, SERVICE.snippets);
-      const existing = await snippets.get(snippetId);
-      if (!existing) throw new Error("Snippet not found");
-
-      const updates: Record<string, unknown> = {};
-      if (changes.name !== undefined)
-        updates.name = requireString(changes.name, "name");
-      if (changes.content !== undefined)
-        updates.content = requireString(changes.content, "content");
-      if (changes.description !== undefined)
-        updates.description = optionalString(changes.description);
-      if (changes.folder !== undefined)
-        updates.folder = optionalString(changes.folder);
-
-      if (!Object.keys(updates).length) {
-        return { ok: false, summary: "Nothing to change" };
-      }
-
-      await snippets.update(snippetId, updates);
-      return { ok: true, summary: `Updated snippet ${snippetId}` };
-    }
-
-    case "propose_delete_snippet": {
-      const snippetId = requireNumber(payload.snippetId, "snippetId");
-      const deleted = await requireService(
-        deps.services,
-        SERVICE.snippets,
-      ).remove(snippetId);
-      if (!deleted) throw new Error("Snippet not found");
-      return { ok: true, summary: `Deleted snippet ${snippetId}` };
-    }
-
-    case "propose_create_fleet": {
-      const fleets = requireService(deps.services, SERVICE.fleets);
-      const fleet = await fleets.create({
-        name: requireString(payload.name, "name"),
-        description: optionalString(payload.description),
-      });
-
-      const hostIds = Array.isArray(payload.hostIds) ? payload.hostIds : [];
-      let added = 0;
-      for (const raw of hostIds) {
-        const hostId = Number(raw);
-        if (!Number.isInteger(hostId) || hostId <= 0) continue;
-        // Only hosts the approving user owns can join their fleet.
-        const access = await deps.hosts.checkAccess(hostId, "view");
-        if (!access.isOwner) continue;
-        await fleets.addMember(fleet.id, hostId);
-        added += 1;
-      }
-
-      return {
-        ok: true,
-        summary: `Created fleet ${fleet.name} with ${added} host${added === 1 ? "" : "s"}`,
-      };
-    }
-
-    case "propose_create_automation": {
-      // The automations plugin runs the same validator its own route does,
-      // so an LLM-authored definition is held to exactly the human standard.
-      const created = await requireService(
-        deps.services,
-        SERVICE.automations,
-      ).create({
-        name: requireString(payload.name, "name"),
-        description: optionalString(payload.description),
-        definition: payload.definition,
-        // Starts disabled: an automation the user has not watched run once
-        // should not begin firing against their servers on approval.
-        enabled: false,
-      });
-
-      return {
-        ok: true,
-        summary: `Created automation ${created.name} (disabled until you enable it)`,
-      };
-    }
-
-    case "propose_run_command": {
-      const hostId = requireNumber(payload.hostId, "hostId");
-      const command = requireString(payload.command, "command");
-
-      // ctx.ssh resolves the host for the approving user, with the same
-      // connect-level access check, owner-key decryption and jump chain a
-      // terminal gets.
-      const result = await runCommandOnHost(deps, hostId, command);
-      if (result.error) {
-        throw new Error(result.error);
-      }
-      return {
-        ok: true,
-        summary: result.output?.slice(0, 2000) ?? "(no output)",
-      };
-    }
-
-    default:
-      throw new Error(`Proposal kind ${kind} cannot be applied automatically`);
-  }
-}
-
-/**
- * Runs one approved command over this plugin's SSH pool, mirroring how an
- * automation run_command step executes.
- */
-export async function runCommandOnHost(
-  deps: ToolDeps,
-  hostId: number,
-  command: string,
-): Promise<{ output?: string; error?: string }> {
-  try {
-    const result = await deps.ssh.withConnection<
-      Awaited<ReturnType<typeof execCommand>>,
-      Client
-    >(hostId, { pool: "ai", purpose: "fleet" }, (client) =>
-      execCommand(client, command, COMMAND_TIMEOUT_MS),
-    );
-
-    const output = [result.stdout, result.stderr].filter(Boolean).join("\n");
-    if (result.code === 0 || result.code === null) {
-      return { output: output || "(no output)" };
-    }
-    return { error: `Exited with code ${result.code}: ${output}`.trim() };
-  } catch (error) {
-    return {
-      error: error instanceof Error ? error.message : String(error),
-    };
-  }
-}
-
-/**
- * Kinds the route handles itself rather than through applyProposal.
- * Empty: everything the assistant can propose can now be applied.
- */
-export const ROUTE_APPLIED_KINDS = new Set<string>();
diff --git a/plugins/ai/src/backend/tools/propose-tools.ts b/plugins/ai/src/backend/tools/propose-tools.ts
deleted file mode 100644
index 94952261f..000000000
--- a/plugins/ai/src/backend/tools/propose-tools.ts
+++ /dev/null
@@ -1,251 +0,0 @@
-import { num, objectSchema, proposal, str, type AiTool } from "./types.js";
-import { SERVICE } from "../services.js";
-
-/**
- * Propose tools never mutate anything. They return a draft that is stored as a
- * pending proposal and rendered as a card; the change happens only when the
- * user approves it, and the payload is re-validated at that point.
- */
-
-export const proposeTools: AiTool[] = [
-  {
-    name: "propose_create_host",
-    description:
-      "Propose adding a new SSH host. Never include credentials: the user attaches those themselves after approving.",
-    category: "propose",
-    parameters: objectSchema(
-      {
-        name: str("Display name for the host"),
-        ip: str("Hostname or IP address"),
-        port: num("SSH port (defaults to 22)"),
-        username: str("SSH username"),
-        folder: str("Folder to file the host under"),
-        tags: {
-          type: "array",
-          items: { type: "string" },
-          description: "Tags to apply",
-        },
-      },
-      ["name", "ip"],
-    ),
-    handler: async (args) =>
-      proposal("propose_create_host", `Add host ${String(args.name)}`, {
-        name: args.name,
-        ip: args.ip,
-        port: args.port ?? 22,
-        username: args.username ?? null,
-        folder: args.folder ?? null,
-        tags: args.tags ?? [],
-      }),
-  },
-  {
-    name: "propose_update_host",
-    description:
-      "Propose changing an existing host's non-secret settings. Only include the fields that should change.",
-    category: "propose",
-    parameters: objectSchema(
-      {
-        hostId: num("The host id to update"),
-        name: str("New display name"),
-        ip: str("New hostname or IP address"),
-        port: num("New SSH port"),
-        username: str("New SSH username"),
-        folder: str("New folder"),
-        tags: {
-          type: "array",
-          items: { type: "string" },
-          description: "Replacement tag list",
-        },
-      },
-      ["hostId"],
-    ),
-    handler: async (args) => {
-      const changes: Record<string, unknown> = {};
-      for (const field of [
-        "name",
-        "ip",
-        "port",
-        "username",
-        "folder",
-        "tags",
-      ]) {
-        if (args[field] !== undefined) changes[field] = args[field];
-      }
-      return proposal(
-        "propose_update_host",
-        `Update host ${String(args.hostId)}`,
-        { hostId: args.hostId, changes },
-      );
-    },
-  },
-  {
-    name: "propose_delete_host",
-    description:
-      "Propose removing a host. Use sparingly and explain why in the reason.",
-    category: "propose",
-    parameters: objectSchema(
-      {
-        hostId: num("The host id to delete"),
-        reason: str("Why this host should be removed"),
-      },
-      ["hostId", "reason"],
-    ),
-    handler: async (args) =>
-      proposal("propose_delete_host", `Delete host ${String(args.hostId)}`, {
-        hostId: args.hostId,
-        reason: args.reason,
-      }),
-  },
-  {
-    name: "propose_create_snippet",
-    description:
-      "Propose saving a new command snippet the user can run against their hosts.",
-    category: "propose",
-    service: SERVICE.snippets,
-    parameters: objectSchema(
-      {
-        name: str("Snippet name"),
-        content: str("The command text"),
-        description: str("What the snippet does"),
-        folder: str("Folder to file it under"),
-      },
-      ["name", "content"],
-    ),
-    handler: async (args) =>
-      proposal(
-        "propose_create_snippet",
-        `Create snippet ${String(args.name)}`,
-        {
-          name: args.name,
-          content: args.content,
-          description: args.description ?? null,
-          folder: args.folder ?? null,
-        },
-      ),
-  },
-  {
-    name: "propose_update_snippet",
-    description: "Propose editing an existing snippet.",
-    category: "propose",
-    service: SERVICE.snippets,
-    parameters: objectSchema(
-      {
-        snippetId: num("The snippet id to update"),
-        name: str("New name"),
-        content: str("New command text"),
-        description: str("New description"),
-        folder: str("New folder"),
-      },
-      ["snippetId"],
-    ),
-    handler: async (args) => {
-      const changes: Record<string, unknown> = {};
-      for (const field of ["name", "content", "description", "folder"]) {
-        if (args[field] !== undefined) changes[field] = args[field];
-      }
-      return proposal(
-        "propose_update_snippet",
-        `Update snippet ${String(args.snippetId)}`,
-        { snippetId: args.snippetId, changes },
-      );
-    },
-  },
-  {
-    name: "propose_delete_snippet",
-    description: "Propose deleting a snippet.",
-    category: "propose",
-    service: SERVICE.snippets,
-    parameters: objectSchema(
-      {
-        snippetId: num("The snippet id to delete"),
-        reason: str("Why this snippet should be removed"),
-      },
-      ["snippetId", "reason"],
-    ),
-    handler: async (args) =>
-      proposal(
-        "propose_delete_snippet",
-        `Delete snippet ${String(args.snippetId)}`,
-        { snippetId: args.snippetId, reason: args.reason },
-      ),
-  },
-  {
-    name: "propose_create_automation",
-    description:
-      "Propose a new automation. The definition must be a valid AutomationDefinition object with a trigger and an ordered list of steps. It is validated server-side and previewed with a dry run before anything happens.",
-    category: "propose",
-    service: SERVICE.automations,
-    parameters: objectSchema(
-      {
-        name: str("Automation name"),
-        description: str("What the automation does"),
-        definition: {
-          type: "object",
-          description:
-            "The AutomationDefinition: { trigger: {...}, steps: [...] }",
-        },
-      },
-      ["name", "definition"],
-    ),
-    handler: async (args) =>
-      proposal(
-        "propose_create_automation",
-        `Create automation ${String(args.name)}`,
-        {
-          name: args.name,
-          description: args.description ?? null,
-          definition: args.definition,
-        },
-      ),
-  },
-  {
-    name: "propose_create_fleet",
-    description: "Propose grouping hosts into a new fleet.",
-    category: "propose",
-    service: SERVICE.fleets,
-    parameters: objectSchema(
-      {
-        name: str("Fleet name"),
-        description: str("What this fleet is for"),
-        hostIds: {
-          type: "array",
-          items: { type: "number" },
-          description: "Host ids to add as members",
-        },
-      },
-      ["name"],
-    ),
-    handler: async (args) =>
-      proposal("propose_create_fleet", `Create fleet ${String(args.name)}`, {
-        name: args.name,
-        description: args.description ?? null,
-        hostIds: args.hostIds ?? [],
-      }),
-  },
-  {
-    name: "propose_run_command",
-    description:
-      "Propose running a command on a host. The user reviews and approves it before it runs. Use this for anything that changes state; read-only diagnostics may run directly if the user has enabled that.",
-    category: "propose",
-    parameters: objectSchema(
-      {
-        hostId: num("The host id to run on"),
-        command: str("The exact command to run"),
-        explanation: str("What the command does and why it is needed"),
-      },
-      ["hostId", "command", "explanation"],
-    ),
-    handler: async (args) =>
-      proposal(
-        "propose_run_command",
-        // Deliberately short: the card renders the command in its own block,
-        // so repeating it here made every card twice as tall as it needed.
-        `Run a command on host ${String(args.hostId)}`,
-        {
-          hostId: args.hostId,
-          command: args.command,
-          explanation: args.explanation,
-        },
-      ),
-  },
-];
diff --git a/plugins/ai/src/backend/tools/read-tools.ts b/plugins/ai/src/backend/tools/read-tools.ts
deleted file mode 100644
index 9ce577795..000000000
--- a/plugins/ai/src/backend/tools/read-tools.ts
+++ /dev/null
@@ -1,313 +0,0 @@
-import type { PluginHostSummary } from "@termix/plugin-sdk/backend";
-import { num, objectSchema, str, type AiTool } from "./types.js";
-import { readService, SERVICE } from "../services.js";
-import { isReadOnlyCommand } from "./command-allowlist.js";
-import { runCommandOnHost } from "./executor.js";
-
-/** Output handed back to the model is capped; a log can be huge. */
-const MAX_COMMAND_OUTPUT = 8000;
-
-/**
- * Read tools project explicit fields rather than spreading rows. Redaction runs
- * afterwards as a second line of defense, but the projection here is the
- * primary control: a field that is never selected cannot leak.
- */
-
-function splitTags(tags: string | null): string[] {
-  if (!tags) return [];
-  return tags
-    .split(",")
-    .map((tag) => tag.trim())
-    .filter(Boolean);
-}
-
-function toHostSummary(host: PluginHostSummary) {
-  return {
-    id: host.id,
-    name: host.name ?? null,
-    ip: host.ip,
-    port: host.port,
-    username: host.username,
-    folder: host.folder ?? null,
-    tags: splitTags(host.tags),
-    authType: host.authType,
-  };
-}
-
-export const readTools: AiTool[] = [
-  {
-    name: "run_readonly_command",
-    description:
-      "Run a read-only diagnostic command on a host and get its output, for example df -h, uptime, free -m or systemctl status nginx. Only commands on a fixed read-only allowlist run; anything else must be proposed with propose_run_command.",
-    category: "read",
-    requiresReadOnlyCommands: true,
-    parameters: objectSchema(
-      {
-        hostId: num("The host id, as returned by list_hosts"),
-        command: str("The command to run"),
-      },
-      ["hostId", "command"],
-    ),
-    handler: async (args, context) => {
-      if (!context.allowReadOnlyCommands) {
-        return { error: "The user has not allowed read-only commands" };
-      }
-      const hostId = Number(args.hostId);
-      const command = typeof args.command === "string" ? args.command : "";
-      const check = isReadOnlyCommand(command);
-      if (!check.allowed) {
-        return { error: check.reason ?? "Command is not read-only" };
-      }
-      const access = await context.deps.hosts.checkAccess(hostId, "connect");
-      if (!access.hasAccess) return { error: "Host not found" };
-
-      const result = await runCommandOnHost(context.deps, hostId, command);
-      await context.deps.audit
-        .record({
-          action: "ai_readonly_command",
-          resourceType: "host",
-          resourceId: String(hostId),
-          details: JSON.stringify({ command }),
-          success: !result.error,
-          errorMessage: result.error,
-        })
-        .catch(() => undefined);
-      if (result.error) return { error: result.error };
-      return { output: (result.output ?? "").slice(0, MAX_COMMAND_OUTPUT) };
-    },
-  },
-  {
-    name: "list_hosts",
-    description:
-      "List the user's SSH hosts with their names, addresses, folders and tags. Never returns passwords or keys. Call this before proposing anything that references a host.",
-    category: "read",
-    parameters: objectSchema({}),
-    handler: async (_args, context) => {
-      const hosts = await context.deps.hosts.list();
-      return { hosts: hosts.map(toHostSummary) };
-    },
-  },
-  {
-    name: "get_host",
-    description:
-      "Get one host's non-secret configuration by id. Use it to inspect settings before proposing an update.",
-    category: "read",
-    parameters: objectSchema(
-      { hostId: num("The host id, as returned by list_hosts") },
-      ["hostId"],
-    ),
-    handler: async (args, context) => {
-      const host = await context.deps.hosts.get(Number(args.hostId));
-      if (!host) return { error: "Host not found" };
-      return { host: toHostSummary(host) };
-    },
-  },
-  {
-    name: "list_fleets",
-    description:
-      "List the user's fleets. Fleets group hosts for bulk operations and inventory.",
-    category: "read",
-    service: SERVICE.fleets,
-    parameters: objectSchema({}),
-    handler: async (_args, context) => {
-      const fleets = await readService(
-        context.deps.services,
-        SERVICE.fleets,
-        (fleetsAccess) => fleetsAccess.list(),
-      );
-      if (fleets === null) return { unavailable: true, fleets: [] };
-      return {
-        fleets: fleets.map((fleet) => ({ id: fleet.id, name: fleet.name })),
-      };
-    },
-  },
-  {
-    name: "list_snippets",
-    description:
-      "List the user's saved command snippets, including their folder and the command text.",
-    category: "read",
-    service: SERVICE.snippets,
-    parameters: objectSchema({}),
-    handler: async (_args, context) => {
-      const snippets = await readService(
-        context.deps.services,
-        SERVICE.snippets,
-        (snippetsAccess) => snippetsAccess.list(),
-      );
-      if (!snippets) return { unavailable: true, snippets: [] };
-      return {
-        snippets: snippets.map((snippet) => ({
-          id: snippet.id,
-          name: snippet.name,
-          content: snippet.content,
-          folder: snippet.folder ?? null,
-          description: snippet.description ?? null,
-        })),
-      };
-    },
-  },
-  {
-    name: "list_automations",
-    description:
-      "List the user's automations with their trigger kind and enabled state. Read this before proposing a change to an existing automation.",
-    category: "read",
-    service: SERVICE.automations,
-    parameters: objectSchema({}),
-    handler: async (_args, context) => {
-      const automations = await readService(
-        context.deps.services,
-        SERVICE.automations,
-        (automationsAccess) => automationsAccess.list(),
-      );
-      if (!automations) return { automations: [], unavailable: true };
-      return {
-        automations: automations.map((automation) => ({
-          id: automation.id,
-          name: automation.name,
-          description: automation.description,
-          enabled: automation.enabled,
-          triggerKind: automation.triggerKind,
-          lastRunAt: automation.lastRunAt,
-          lastRunStatus: automation.lastRunStatus,
-          needsPlugins: automation.missingPlugins,
-        })),
-      };
-    },
-  },
-  {
-    name: "get_automation",
-    description:
-      "Get one automation's full definition (trigger and steps) by id.",
-    category: "read",
-    service: SERVICE.automations,
-    parameters: objectSchema(
-      {
-        automationId: num("The automation id, as returned by list_automations"),
-      },
-      ["automationId"],
-    ),
-    handler: async (args, context) => {
-      const result = await readService(
-        context.deps.services,
-        SERVICE.automations,
-        async (automationsAccess) => ({
-          automation: await automationsAccess.get(Number(args.automationId)),
-        }),
-      );
-      if (result === null) return { unavailable: true };
-      const { automation } = result;
-      if (!automation) return { error: "Automation not found" };
-      return {
-        automation: {
-          id: automation.id,
-          name: automation.name,
-          enabled: automation.enabled,
-          definition: automation.definition,
-        },
-      };
-    },
-  },
-  {
-    name: "list_workspaces",
-    description:
-      "List the user's saved workspace layouts (named sets of open tabs and splits).",
-    category: "read",
-    service: SERVICE.workspaces,
-    parameters: objectSchema({}),
-    handler: async (_args, context) => {
-      const workspaces = await readService(
-        context.deps.services,
-        SERVICE.workspaces,
-        (saved) => saved.list(),
-      );
-      if (workspaces === null) return { workspaces: [], unavailable: true };
-      return { workspaces };
-    },
-  },
-  {
-    name: "list_notification_channels",
-    description:
-      "List the user's notification channels by id, name and type. Channel configuration is never returned because it holds tokens.",
-    category: "read",
-    parameters: objectSchema({}),
-    handler: async (_args, context) => {
-      const channels = await context.deps.notify.channels();
-      return {
-        channels: channels.map((channel) => ({
-          id: channel.id,
-          name: channel.name,
-          type: channel.type,
-          enabled: channel.enabled,
-        })),
-      };
-    },
-  },
-  {
-    name: "list_homepage_items",
-    description: "List the user's homepage service-link tiles.",
-    category: "read",
-    service: SERVICE.homepage,
-    parameters: objectSchema({}),
-    handler: async (_args, context) => {
-      const items = await readService(
-        context.deps.services,
-        SERVICE.homepage,
-        (homepage) => homepage.list(),
-      );
-      if (items === null) return { items: [], unavailable: true };
-      return {
-        items: items.map((item) => ({
-          id: item.id,
-          typeId: item.typeId,
-          title: item.title ?? null,
-        })),
-      };
-    },
-  },
-  {
-    name: "get_command_history",
-    description:
-      "Recent commands the user has run on one host, newest first. Useful for understanding what they have been working on.",
-    category: "read",
-    service: SERVICE.history,
-    parameters: objectSchema(
-      {
-        hostId: num("The host id, as returned by list_hosts"),
-        limit: num("How many entries to return (default 25, max 100)"),
-      },
-      ["hostId"],
-    ),
-    handler: async (args, context) => {
-      const limit = Math.min(Math.max(Number(args.limit) || 25, 1), 100);
-      const hostId = Number(args.hostId);
-
-      // Access is checked here rather than trusted from the model.
-      const host = await context.deps.hosts.get(hostId);
-      if (!host) return { error: "Host not found" };
-
-      const history = await readService(
-        context.deps.services,
-        SERVICE.history,
-        (terminalHistory) => terminalHistory.list(hostId, limit),
-      );
-      if (history === null) return { commands: [], unavailable: true };
-      return { commands: history.map((entry) => entry.command) };
-    },
-  },
-  {
-    name: "get_network_topology",
-    description: "The user's saved network topology graph, if they have one.",
-    category: "read",
-    service: SERVICE.topology,
-    parameters: objectSchema({}),
-    handler: async (_args, context) => {
-      const result = await readService(
-        context.deps.services,
-        SERVICE.topology,
-        async (graph) => ({ topology: await graph.get() }),
-      );
-      if (result === null) return { topology: null, unavailable: true };
-      return { topology: result.topology };
-    },
-  },
-];
diff --git a/plugins/ai/src/backend/tools/types.ts b/plugins/ai/src/backend/tools/types.ts
deleted file mode 100644
index 303af7506..000000000
--- a/plugins/ai/src/backend/tools/types.ts
+++ /dev/null
@@ -1,88 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-
-export type ToolCategory = "read" | "propose";
-
-/** What tools and the proposal executor reach core and other plugins through. */
-export type ToolDeps = Pick<
-  PluginContext,
-  "hosts" | "services" | "notify" | "rbac" | "ssh" | "audit"
->;
-
-export interface ToolContext {
-  /** Always the request's authenticated user, never from model input. */
-  userId: string;
-  conversationId: number;
-  /** Per-user opt-in for running allowlisted read-only commands. */
-  allowReadOnlyCommands: boolean;
-  deps: ToolDeps;
-}
-
-export interface AiTool {
-  name: string;
-  description: string;
-  category: ToolCategory;
-  /**
-   * The service this tool needs. While no plugin provides it, the tool is
-   * not offered to the model at all.
-   */
-  service?: string;
-  /** Offered only to a user who turned on read-only commands. */
-  requiresReadOnlyCommands?: boolean;
-  /** JSON Schema for the arguments, sent to the provider verbatim. */
-  parameters: Record<string, unknown>;
-  /**
-   * Read tools return data to feed back to the model. Propose tools return a
-   * ProposalDraft and must not mutate anything.
-   */
-  handler: (
-    args: Record<string, unknown>,
-    context: ToolContext,
-  ) => Promise<unknown>;
-}
-
-/** What a provider adapter needs to describe a tool to its model. */
-export interface ToolDefinitionShape {
-  name: string;
-  description: string;
-  parameters: Record<string, unknown>;
-}
-
-export interface ProposalDraft {
-  __proposal: true;
-  kind: string;
-  summary: string;
-  payload: Record<string, unknown>;
-}
-
-export function isProposalDraft(value: unknown): value is ProposalDraft {
-  return (
-    typeof value === "object" &&
-    value !== null &&
-    (value as ProposalDraft).__proposal === true
-  );
-}
-
-export function proposal(
-  kind: string,
-  summary: string,
-  payload: Record<string, unknown>,
-): ProposalDraft {
-  return { __proposal: true, kind, summary, payload };
-}
-
-/** Small helper so tool schemas stay readable. */
-export function objectSchema(
-  properties: Record<string, unknown>,
-  required: string[] = [],
-): Record<string, unknown> {
-  return {
-    type: "object",
-    properties,
-    required,
-    additionalProperties: false,
-  };
-}
-
-export const str = (description: string) => ({ type: "string", description });
-export const num = (description: string) => ({ type: "number", description });
-export const bool = (description: string) => ({ type: "boolean", description });
diff --git a/plugins/ai/src/frontend/AiAssistantStep.tsx b/plugins/ai/src/frontend/AiAssistantStep.tsx
deleted file mode 100644
index 7004e2638..000000000
--- a/plugins/ai/src/frontend/AiAssistantStep.tsx
+++ /dev/null
@@ -1,83 +0,0 @@
-import { useEffect, useState } from "react";
-import { Check } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { setAiOptIn } from "./ai-api";
-
-/**
- * Asks once, plainly.
- *
- * "Leave it off" is preselected and applied on mount, so someone who clicks
- * straight through ends up without the assistant rather than with it. Both
- * options are described in the same flat register and neither is marked
- * recommended: this is a choice, not a pitch.
- */
-export function AiAssistantStep() {
-  const { t } = useTranslation();
-  const [enabled, setEnabled] = useState(false);
-
-  function apply(next: boolean) {
-    setEnabled(next);
-    // The local choice still shows if the write fails.
-    setAiOptIn(next).catch(() => undefined);
-  }
-
-  // Skipping the step entirely still has to mean off, not unset.
-  useEffect(() => {
-    apply(false);
-  }, []);
-
-  const options = [
-    {
-      value: false,
-      title: t("onboarding.aiSkipTitle"),
-      description: t("onboarding.aiSkipDesc"),
-    },
-    {
-      value: true,
-      title: t("onboarding.aiEnableTitle"),
-      description: t("onboarding.aiEnableDesc"),
-    },
-  ];
-
-  return (
-    <div className="flex flex-col gap-3">
-      <p className="text-xs text-muted-foreground">{t("onboarding.aiIntro")}</p>
-
-      <div className="flex flex-col gap-2">
-        {options.map((option) => (
-          <button
-            key={String(option.value)}
-            type="button"
-            onClick={() => apply(option.value)}
-            className={`flex items-start gap-2.5 border p-2.5 text-left ${
-              enabled === option.value
-                ? "border-accent-brand bg-accent-brand/10"
-                : "border-border bg-card"
-            }`}
-          >
-            <div className="flex min-w-0 flex-col gap-0.5">
-              <span className="text-xs font-medium">{option.title}</span>
-              <span className="text-[10px] leading-snug text-muted-foreground">
-                {option.description}
-              </span>
-            </div>
-            {/*
-              Always rendered and only made visible when selected, so picking an
-              option never reflows the text beside it.
-            */}
-            <Check
-              size={14}
-              className={`ml-auto mt-0.5 shrink-0 ${
-                enabled === option.value ? "opacity-100" : "opacity-0"
-              }`}
-            />
-          </button>
-        ))}
-      </div>
-
-      <p className="text-[10px] text-muted-foreground/70">
-        {t("onboarding.aiNote")}
-      </p>
-    </div>
-  );
-}
diff --git a/plugins/ai/src/frontend/AiMessage.tsx b/plugins/ai/src/frontend/AiMessage.tsx
deleted file mode 100644
index 71b2ad1c5..000000000
--- a/plugins/ai/src/frontend/AiMessage.tsx
+++ /dev/null
@@ -1,23 +0,0 @@
-import ReactMarkdown from "react-markdown";
-import remarkGfm from "remark-gfm";
-
-interface AiMessageProps {
-  role: "user" | "assistant";
-  content: string;
-}
-
-export function AiMessage({ role, content }: AiMessageProps) {
-  if (role === "user") {
-    return (
-      <div className="rounded-none border border-border bg-muted px-3 py-2 text-sm whitespace-pre-wrap break-words">
-        {content}
-      </div>
-    );
-  }
-
-  return (
-    <div className="text-sm leading-relaxed [&_a]:underline [&_code]:font-mono [&_code]:text-xs [&_li]:my-0.5 [&_ol]:my-2 [&_ol]:list-decimal [&_ol]:pl-5 [&_p]:my-2 [&_pre]:overflow-x-auto [&_pre]:rounded-none [&_pre]:border [&_pre]:border-border [&_pre]:bg-muted [&_pre]:p-2 [&_ul]:my-2 [&_ul]:list-disc [&_ul]:pl-5">
-      <ReactMarkdown remarkPlugins={[remarkGfm]}>{content}</ReactMarkdown>
-    </div>
-  );
-}
diff --git a/plugins/ai/src/frontend/AiPanel.tsx b/plugins/ai/src/frontend/AiPanel.tsx
deleted file mode 100644
index fd0b9ff94..000000000
--- a/plugins/ai/src/frontend/AiPanel.tsx
+++ /dev/null
@@ -1,442 +0,0 @@
-import { useCallback, useEffect, useRef, useState } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Loader2, Send, Settings2, Sparkles, Square } from "lucide-react";
-import {
-  Button,
-  Select,
-  SelectContent,
-  SelectItem,
-  SelectTrigger,
-  SelectValue,
-  Textarea,
-} from "@termix/plugin-sdk/ui";
-import {
-  getAiProviders,
-  getAiStatus,
-  setAiOptIn,
-  type AiProposal,
-  type AiProvider,
-} from "./ai-api";
-import { AiMessage } from "./AiMessage";
-import { AiProviderSettings } from "./AiProviderSettings";
-import { AiToolCall } from "./AiToolCall";
-import { ProposalCard } from "./ProposalCard";
-import {
-  buildTimeline,
-  finishedRunEntries,
-  userEntry,
-  type HistoryEntry,
-} from "./transcript";
-import { useAiStream, type ToolActivity } from "./use-ai-stream";
-import {
-  activeMentionQuery,
-  useMentions,
-  type MentionItem,
-} from "./useMentions";
-import { mentionLabel } from "./labels";
-
-export function AiPanel({ activeTab }: { activeTab?: string | null }) {
-  const { t } = useTranslation();
-  const { state, send, stop } = useAiStream();
-
-  const [providers, setProviders] = useState<AiProvider[]>([]);
-  const [providerId, setProviderId] = useState<number | null>(null);
-  const [loading, setLoading] = useState(true);
-  const [showSettings, setShowSettings] = useState(false);
-  const [input, setInput] = useState("");
-  const [history, setHistory] = useState<HistoryEntry[]>([]);
-  const [resolvedProposals, setResolvedProposals] = useState<
-    Record<number, { status: "applied" | "rejected"; resultSummary?: string }>
-  >({});
-  const runCountRef = useRef(0);
-  const scrollRef = useRef<HTMLDivElement>(null);
-  const textareaRef = useRef<HTMLTextAreaElement>(null);
-
-  const [mention, setMention] = useState<{
-    query: string;
-    start: number;
-  } | null>(null);
-  const [mentionIndex, setMentionIndex] = useState(0);
-  const { search: searchMentions } = useMentions(Boolean(providerId));
-
-  const mentionMatches = mention ? searchMentions(mention.query) : [];
-
-  const updateMentionQuery = (value: string, caret: number) => {
-    const next = activeMentionQuery(value, caret);
-    setMention(next);
-    setMentionIndex(0);
-  };
-
-  /**
-   * Replaces the "@partial" under the caret with the chosen name. The mention
-   * is plain text: the assistant still has to call a read tool to look the
-   * item up, so nothing is attached to the prompt behind the user's back.
-   */
-  const insertMention = (item: MentionItem) => {
-    if (!mention) return;
-    const caret = textareaRef.current?.selectionStart ?? input.length;
-    const before = input.slice(0, mention.start);
-    const after = input.slice(caret);
-    const inserted = `@${item.label} `;
-
-    setInput(`${before}${inserted}${after}`);
-    setMention(null);
-
-    requestAnimationFrame(() => {
-      const position = before.length + inserted.length;
-      textareaRef.current?.focus();
-      textareaRef.current?.setSelectionRange(position, position);
-    });
-  };
-
-  const loadProviders = useCallback(async (selectId?: number) => {
-    try {
-      const list = await getAiProviders();
-      setProviders(list);
-      setProviderId((current) => {
-        // A provider that was just added becomes the active one, so there is
-        // no second step between creating it and being able to use it.
-        if (selectId && list.some((entry) => entry.id === selectId)) {
-          return selectId;
-        }
-        // Fall back to the first if the current selection has gone away.
-        if (current && list.some((entry) => entry.id === current)) {
-          return current;
-        }
-        return list[0]?.id ?? null;
-      });
-      return list;
-    } catch {
-      setProviders([]);
-      return [];
-    }
-  }, []);
-
-  useEffect(() => {
-    let cancelled = false;
-    (async () => {
-      try {
-        const status = await getAiStatus();
-        if (cancelled) return;
-
-        // Opening the panel is consent to use it. Without this every write
-        // 403s through the gate, which surfaces as a bare permission error
-        // rather than anything the user can act on.
-        if (status.globallyEnabled && !status.enabled) {
-          await setAiOptIn(true);
-        }
-        if (!status.globallyEnabled) return;
-
-        const list = await loadProviders();
-        // With nothing configured there is nothing to chat with, so go
-        // straight to the form instead of showing a card that just vanishes.
-        if (!cancelled && list.length === 0) setShowSettings(true);
-      } finally {
-        if (!cancelled) setLoading(false);
-      }
-    })();
-    return () => {
-      cancelled = true;
-    };
-  }, [loadProviders]);
-
-  useEffect(() => {
-    scrollRef.current?.scrollTo({
-      top: scrollRef.current.scrollHeight,
-      behavior: "smooth",
-    });
-  }, [state.assistantText, state.tools.length, history.length]);
-
-  // The run's steps stay in the transcript, so the next message does not wipe
-  // what the assistant already looked at.
-  const keepRun = useCallback(
-    (_conversationId: number | null, reply: string, tools: ToolActivity[]) => {
-      const runId = runCountRef.current++;
-      setHistory((prev) => [
-        ...prev,
-        ...finishedRunEntries(runId, tools, reply),
-      ]);
-    },
-    [],
-  );
-
-  async function handleSend() {
-    const message = input.trim();
-    if (!message || !providerId || state.streaming) return;
-
-    setInput("");
-    setHistory((prev) => [...prev, userEntry(message)]);
-
-    await send({
-      message,
-      providerId,
-      conversationId: state.conversationId,
-      activeTab,
-      onComplete: keepRun,
-    });
-  }
-
-  /**
-   * Records the outcome on the card and tells the assistant what happened.
-   *
-   * Without the follow-up the run just stops: the assistant proposed a
-   * command, the user approved it, and the model never learns it produced
-   * output, so it sits there as if the tool were still running.
-   */
-  function handleProposalResolved(
-    id: number,
-    status: "applied" | "rejected",
-    resultSummary?: string,
-  ) {
-    setResolvedProposals((prev) => ({
-      ...prev,
-      [id]: { status, resultSummary },
-    }));
-
-    if (!providerId || state.streaming) return;
-
-    const proposal = state.proposals.find((entry) => entry.id === id);
-    const label = proposal?.summary ?? proposal?.kind ?? `proposal ${id}`;
-
-    const followUp =
-      status === "applied"
-        ? resultSummary
-          ? `I approved "${label}". Result:\n\n${resultSummary}`
-          : `I approved "${label}". It completed.`
-        : `I rejected "${label}". Do not retry it unless I ask.`;
-
-    setHistory((prev) => [...prev, userEntry(followUp)]);
-
-    void send({
-      message: followUp,
-      providerId,
-      conversationId: state.conversationId,
-      activeTab,
-      onComplete: keepRun,
-    });
-  }
-
-  const proposals: AiProposal[] = state.proposals.map((proposal) => {
-    const resolved = resolvedProposals[proposal.id];
-    if (!resolved) return proposal;
-    return {
-      ...proposal,
-      status: resolved.status,
-      resultSummary: resolved.resultSummary ?? proposal.resultSummary,
-    };
-  });
-
-  const timeline = buildTimeline(history, state, proposals);
-
-  if (loading) {
-    return (
-      <div className="flex h-full items-center justify-center">
-        <Loader2 className="animate-spin text-muted-foreground" size={20} />
-      </div>
-    );
-  }
-
-  return (
-    <div className="flex h-full flex-col">
-      {/*
-        The panel also lives in the narrow sidebar, so the title and the
-        provider picker get their own rows rather than competing for one line.
-      */}
-      <div className="border-b border-border">
-        <div className="flex items-center gap-2 px-3 py-2">
-          <Sparkles size={16} className="shrink-0" />
-          <span className="truncate text-sm font-medium">{t("ai.title")}</span>
-          <a
-            href="https://docs.termix.site/features/ai/overview"
-            target="_blank"
-            rel="noreferrer"
-            className="ml-auto shrink-0 text-[10px] text-accent-brand hover:underline"
-          >
-            {t("hosts.docsLink")}
-          </a>
-          <Button
-            size="sm"
-            variant="ghost"
-            className="shrink-0"
-            onClick={() => setShowSettings((value) => !value)}
-            aria-label={t("ai.providerSettings")}
-          >
-            <Settings2 size={14} />
-          </Button>
-        </div>
-
-        {providers.length > 0 && (
-          <div className="flex items-center gap-2 px-3 pb-2">
-            <Select
-              value={providerId ? String(providerId) : undefined}
-              onValueChange={(value) => setProviderId(Number(value))}
-            >
-              <SelectTrigger className="h-7 min-w-0 flex-1 rounded-none text-xs">
-                <SelectValue placeholder={t("ai.selectProvider")} />
-              </SelectTrigger>
-              <SelectContent>
-                {providers.map((provider) => (
-                  <SelectItem key={provider.id} value={String(provider.id)}>
-                    {provider.label}
-                  </SelectItem>
-                ))}
-              </SelectContent>
-            </Select>
-          </div>
-        )}
-      </div>
-
-      {showSettings && (
-        <div className="border-b border-border p-3">
-          <AiProviderSettings
-            providers={providers}
-            onChanged={loadProviders}
-            // Adding the first provider is the reason the form opened, so it
-            // closes once that is done and the chat becomes usable.
-            onAdded={() => setShowSettings(false)}
-          />
-        </div>
-      )}
-
-      <div ref={scrollRef} className="flex-1 space-y-3 overflow-y-auto p-3">
-        {timeline.map((item) => {
-          if (item.kind === "message") {
-            return (
-              <AiMessage
-                key={item.key}
-                role={item.role}
-                content={item.content}
-              />
-            );
-          }
-          if (item.kind === "tool") {
-            return (
-              <AiToolCall
-                key={item.key}
-                tool={item.tool}
-                streaming={item.live && state.streaming}
-              />
-            );
-          }
-          return (
-            <ProposalCard
-              key={item.key}
-              proposal={item.proposal}
-              onResolved={handleProposalResolved}
-            />
-          );
-        })}
-
-        {state.error && (
-          <div className="rounded-none border border-destructive/40 bg-destructive/10 px-3 py-2 text-sm text-destructive">
-            {state.error}
-          </div>
-        )}
-      </div>
-
-      <div className="relative border-t border-border p-3">
-        {mentionMatches.length > 0 && (
-          <div className="absolute bottom-full left-3 right-3 z-10 max-h-56 overflow-y-auto border border-border bg-popover shadow-md">
-            {mentionMatches.map((item, index) => (
-              <button
-                key={`${item.kind}-${item.id}`}
-                type="button"
-                className={`flex w-full items-center gap-2 px-2 py-1.5 text-left text-xs ${
-                  index === mentionIndex ? "bg-muted" : ""
-                }`}
-                onMouseDown={(event) => {
-                  // mousedown, so the textarea does not lose the caret first.
-                  event.preventDefault();
-                  insertMention(item);
-                }}
-              >
-                <span className="shrink-0 text-[10px] uppercase text-muted-foreground">
-                  {mentionLabel(item.kind)}
-                </span>
-                <span className="truncate font-medium">{item.label}</span>
-                {item.detail && (
-                  <span className="ml-auto shrink-0 truncate text-[10px] text-muted-foreground">
-                    {item.detail}
-                  </span>
-                )}
-              </button>
-            ))}
-          </div>
-        )}
-
-        <Textarea
-          ref={textareaRef}
-          className="min-h-[64px] resize-none rounded-none text-sm"
-          value={input}
-          onChange={(event) => {
-            setInput(event.target.value);
-            updateMentionQuery(
-              event.target.value,
-              event.target.selectionStart ?? 0,
-            );
-          }}
-          onKeyDown={(event) => {
-            if (mentionMatches.length > 0) {
-              if (event.key === "ArrowDown") {
-                event.preventDefault();
-                setMentionIndex((i) => (i + 1) % mentionMatches.length);
-                return;
-              }
-              if (event.key === "ArrowUp") {
-                event.preventDefault();
-                setMentionIndex(
-                  (i) =>
-                    (i - 1 + mentionMatches.length) % mentionMatches.length,
-                );
-                return;
-              }
-              if (event.key === "Enter" || event.key === "Tab") {
-                event.preventDefault();
-                insertMention(mentionMatches[mentionIndex]);
-                return;
-              }
-              if (event.key === "Escape") {
-                event.preventDefault();
-                setMention(null);
-                return;
-              }
-            }
-            if (event.key === "Enter" && !event.shiftKey) {
-              event.preventDefault();
-              void handleSend();
-            }
-          }}
-          placeholder={t("ai.inputPlaceholder")}
-          disabled={!providerId}
-        />
-        {/*
-          The hint gets its own line and wraps: sharing a row with the send
-          button left it truncated to an ellipsis in the sidebar, where the
-          panel is at its narrowest.
-        */}
-        <p className="mt-2 text-[11px] leading-snug text-muted-foreground">
-          {t("ai.attachHint")}
-        </p>
-        <div className="mt-1.5 flex items-center justify-end gap-2">
-          {state.streaming ? (
-            <Button size="sm" variant="outline" onClick={stop}>
-              <Square size={14} />
-              {t("ai.stop")}
-            </Button>
-          ) : (
-            <Button
-              size="sm"
-              variant="outline"
-              className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-              disabled={!input.trim() || !providerId}
-              onClick={() => void handleSend()}
-            >
-              <Send size={14} />
-              {t("ai.send")}
-            </Button>
-          )}
-        </div>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/ai/src/frontend/AiProviderSettings.tsx b/plugins/ai/src/frontend/AiProviderSettings.tsx
deleted file mode 100644
index e89f9fab1..000000000
--- a/plugins/ai/src/frontend/AiProviderSettings.tsx
+++ /dev/null
@@ -1,558 +0,0 @@
-import { getErrorMessage } from "./errors";
-import { useCallback, useEffect, useState } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { toast } from "sonner";
-import { Loader2, Pencil, Plus, RefreshCw, Trash2 } from "lucide-react";
-import {
-  Button,
-  Input,
-  Label,
-  Select,
-  SelectContent,
-  SelectItem,
-  SelectTrigger,
-  SelectValue,
-} from "@termix/plugin-sdk/ui";
-import {
-  createAiProvider,
-  deleteAiProvider,
-  getAiProviderModels,
-  probeAiModels,
-  updateAiProvider,
-  type AiProvider,
-  type AiProviderType,
-} from "./ai-api";
-
-const PROVIDER_TYPES: Array<{
-  value: AiProviderType;
-  labelKey: string;
-  needsBaseUrl: boolean;
-  needsApiKey: boolean;
-  defaultBaseUrl?: string;
-}> = [
-  {
-    value: "ollama",
-    labelKey: "ai.providerOllama",
-    needsBaseUrl: true,
-    needsApiKey: false,
-    defaultBaseUrl: "http://localhost:11434",
-  },
-  {
-    value: "anthropic",
-    labelKey: "ai.providerAnthropic",
-    needsBaseUrl: false,
-    needsApiKey: true,
-  },
-  {
-    value: "openai",
-    labelKey: "ai.providerOpenai",
-    needsBaseUrl: false,
-    needsApiKey: true,
-  },
-  {
-    value: "gemini",
-    labelKey: "ai.providerGemini",
-    needsBaseUrl: false,
-    needsApiKey: true,
-  },
-  {
-    value: "openai_compatible",
-    labelKey: "ai.providerOpenaiCompatible",
-    needsBaseUrl: true,
-    needsApiKey: false,
-  },
-];
-
-interface AiProviderSettingsProps {
-  providers: AiProvider[];
-  /** selectId names a provider that should become the active one. */
-  onChanged: (selectId?: number) => void;
-  onAdded?: () => void;
-}
-
-function AiProviderEditForm({
-  provider,
-  onSaved,
-  onCancel,
-}: {
-  provider: AiProvider;
-  onSaved: () => void;
-  onCancel: () => void;
-}) {
-  const { t } = useTranslation();
-  const [label, setLabel] = useState(provider.label);
-  const [defaultModel, setDefaultModel] = useState(provider.defaultModel ?? "");
-  const [models, setModels] = useState<string[]>([]);
-  const [customModel, setCustomModel] = useState(false);
-  const [detecting, setDetecting] = useState(false);
-  const [detectWarning, setDetectWarning] = useState<string | null>(null);
-  const [saving, setSaving] = useState(false);
-
-  const detectModels = useCallback(async () => {
-    setDetecting(true);
-    setDetectWarning(null);
-    try {
-      const detected = await getAiProviderModels(provider.id);
-      setModels(detected);
-      setCustomModel(!!defaultModel && !detected.includes(defaultModel));
-    } catch (error) {
-      setModels([]);
-      setCustomModel(true);
-      setDetectWarning(getErrorMessage(error, t("ai.modelDetectFailed")));
-    } finally {
-      setDetecting(false);
-    }
-  }, [provider.id, defaultModel, t]);
-
-  useEffect(() => {
-    void detectModels();
-    // The initial model value belongs to this provider. Subsequent edits must
-    // not trigger a provider model-list request on every keystroke.
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [provider.id]);
-
-  async function handleSave() {
-    if (!label.trim()) {
-      toast.error(t("ai.labelRequired"));
-      return;
-    }
-
-    setSaving(true);
-    try {
-      await updateAiProvider(provider.id, {
-        label: label.trim(),
-        defaultModel: defaultModel.trim() || null,
-      });
-      toast.success(t("ai.providerUpdated"));
-      onSaved();
-    } catch (error) {
-      toast.error(getErrorMessage(error, t("ai.providerSaveFailed")));
-    } finally {
-      setSaving(false);
-    }
-  }
-
-  return (
-    <div className="space-y-3 rounded-none border border-border p-3">
-      <div className="space-y-1.5">
-        <Label htmlFor={`ai-provider-label-${provider.id}`}>
-          {t("ai.providerLabel")}
-        </Label>
-        <Input
-          id={`ai-provider-label-${provider.id}`}
-          className="rounded-none"
-          value={label}
-          onChange={(event) => setLabel(event.target.value)}
-          autoFocus
-        />
-      </div>
-
-      <div className="space-y-1.5">
-        <div className="flex items-center gap-2">
-          <Label
-            htmlFor={`ai-provider-model-${provider.id}`}
-            className="min-w-0 flex-1"
-          >
-            {t("ai.defaultModel")}
-          </Label>
-          <button
-            type="button"
-            className="flex shrink-0 items-center gap-1 text-[11px] text-muted-foreground hover:text-foreground disabled:opacity-50"
-            onClick={() => void detectModels()}
-            disabled={detecting}
-          >
-            {detecting ? (
-              <Loader2 size={11} className="animate-spin" />
-            ) : (
-              <RefreshCw size={11} />
-            )}
-            {t("ai.modelRefresh")}
-          </button>
-        </div>
-
-        {models.length > 0 && !customModel ? (
-          <Select
-            value={defaultModel || undefined}
-            onValueChange={(value) => {
-              if (value === "__custom__") {
-                setCustomModel(true);
-                setDefaultModel("");
-                return;
-              }
-              setDefaultModel(value);
-            }}
-          >
-            <SelectTrigger
-              id={`ai-provider-model-${provider.id}`}
-              className="rounded-none"
-            >
-              <SelectValue placeholder={t("ai.modelPlaceholder")} />
-            </SelectTrigger>
-            <SelectContent>
-              {models.map((model) => (
-                <SelectItem key={model} value={model}>
-                  {model}
-                </SelectItem>
-              ))}
-              <SelectItem value="__custom__">{t("ai.modelCustom")}</SelectItem>
-            </SelectContent>
-          </Select>
-        ) : (
-          <Input
-            id={`ai-provider-model-${provider.id}`}
-            className="rounded-none"
-            value={defaultModel}
-            onChange={(event) => setDefaultModel(event.target.value)}
-            placeholder={t("ai.defaultModelPlaceholder")}
-          />
-        )}
-        {detectWarning && (
-          <p className="text-[11px] leading-snug text-destructive">
-            {detectWarning}
-          </p>
-        )}
-      </div>
-
-      <div className="flex gap-2">
-        <Button size="sm" disabled={saving} onClick={() => void handleSave()}>
-          {saving && <Loader2 size={14} className="animate-spin" />}
-          {t("ai.save")}
-        </Button>
-        <Button
-          size="sm"
-          variant="outline"
-          disabled={saving}
-          onClick={onCancel}
-        >
-          {t("ai.cancel")}
-        </Button>
-      </div>
-    </div>
-  );
-}
-
-export function AiProviderSettings({
-  providers,
-  onChanged,
-  onAdded,
-}: AiProviderSettingsProps) {
-  const { t } = useTranslation();
-  const [adding, setAdding] = useState(false);
-  const [editingId, setEditingId] = useState<number | null>(null);
-  const [saving, setSaving] = useState(false);
-  const [providerType, setProviderType] = useState<AiProviderType>("ollama");
-  const [label, setLabel] = useState("");
-  const [baseUrl, setBaseUrl] = useState("http://localhost:11434");
-  const [apiKey, setApiKey] = useState("");
-  const [defaultModel, setDefaultModel] = useState("");
-
-  const [models, setModels] = useState<string[]>([]);
-  const [detecting, setDetecting] = useState(false);
-  const [detectWarning, setDetectWarning] = useState<string | null>(null);
-  const [customModel, setCustomModel] = useState(false);
-
-  const spec = PROVIDER_TYPES.find((entry) => entry.value === providerType)!;
-
-  useEffect(() => {
-    setBaseUrl(spec.defaultBaseUrl ?? "");
-    setApiKey("");
-    setModels([]);
-    setDefaultModel("");
-    setCustomModel(false);
-    setDetectWarning(null);
-  }, [providerType, spec.defaultBaseUrl]);
-
-  /**
-   * Fetches the provider's own model list so nobody has to go and look model
-   * names up. Falls back to a curated list when the endpoint is unreachable,
-   * and a free-text field is always available for anything not listed.
-   */
-  const detectModels = useCallback(async () => {
-    setDetecting(true);
-    setDetectWarning(null);
-    try {
-      const result = await probeAiModels({
-        providerType,
-        baseUrl: baseUrl.trim() || null,
-        apiKey: apiKey.trim() || null,
-      });
-      setModels(result.models);
-      if (result.source !== "live") {
-        setDetectWarning(result.warning || t("ai.modelDetectFailed"));
-      }
-      // Pick the first suggestion so the field is never left empty.
-      setDefaultModel((current) => current || result.models[0] || "");
-    } catch {
-      setDetectWarning(t("ai.modelDetectFailed"));
-    } finally {
-      setDetecting(false);
-    }
-  }, [providerType, baseUrl, apiKey, t]);
-
-  // Detect as soon as the provider has enough detail to be reachable.
-  useEffect(() => {
-    if (!adding) return;
-    const ready = spec.needsApiKey ? apiKey.trim().length > 0 : true;
-    if (!ready) return;
-    const timer = setTimeout(() => void detectModels(), 400);
-    return () => clearTimeout(timer);
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [adding, providerType, baseUrl, apiKey]);
-
-  async function handleAdd() {
-    if (!label.trim()) {
-      toast.error(t("ai.labelRequired"));
-      return;
-    }
-    setSaving(true);
-    try {
-      const created = await createAiProvider({
-        providerType,
-        label: label.trim(),
-        baseUrl: baseUrl.trim() || null,
-        apiKey: apiKey.trim() || null,
-        defaultModel: defaultModel.trim() || null,
-      });
-      setAdding(false);
-      setLabel("");
-      setApiKey("");
-      setDefaultModel("");
-      onChanged(created.id);
-      onAdded?.();
-    } catch (error) {
-      toast.error(getErrorMessage(error, t("ai.providerSaveFailed")));
-    } finally {
-      setSaving(false);
-    }
-  }
-
-  async function handleDelete(id: number) {
-    try {
-      await deleteAiProvider(id);
-      onChanged();
-    } catch (error) {
-      toast.error(getErrorMessage(error, t("ai.providerDeleteFailed")));
-    }
-  }
-
-  return (
-    <div className="space-y-3">
-      {providers.map((provider) =>
-        editingId === provider.id ? (
-          <AiProviderEditForm
-            key={provider.id}
-            provider={provider}
-            onSaved={() => {
-              setEditingId(null);
-              onChanged(provider.id);
-            }}
-            onCancel={() => setEditingId(null)}
-          />
-        ) : (
-          <div
-            key={provider.id}
-            className="flex items-center justify-between gap-2 rounded-none border border-border bg-muted px-3 py-2"
-          >
-            <div className="min-w-0">
-              <div className="truncate text-sm font-medium">
-                {provider.label}
-              </div>
-              <div className="flex gap-3 overflow-hidden whitespace-nowrap text-xs text-muted-foreground">
-                <span className="shrink-0">{provider.providerType}</span>
-                {provider.defaultModel && (
-                  <span className="truncate">{provider.defaultModel}</span>
-                )}
-                {provider.baseUrl && (
-                  <span className="truncate">{provider.baseUrl}</span>
-                )}
-                {provider.apiKeyPrefix && (
-                  <span className="shrink-0">{provider.apiKeyPrefix}…</span>
-                )}
-              </div>
-            </div>
-            <div className="flex shrink-0 items-center">
-              <Button
-                size="sm"
-                variant="ghost"
-                onClick={() => {
-                  setAdding(false);
-                  setEditingId(provider.id);
-                }}
-                aria-label={t("ai.editProvider")}
-              >
-                <Pencil size={14} />
-              </Button>
-              <Button
-                size="sm"
-                variant="ghost"
-                onClick={() => handleDelete(provider.id)}
-                aria-label={t("ai.removeProvider")}
-              >
-                <Trash2 size={14} />
-              </Button>
-            </div>
-          </div>
-        ),
-      )}
-
-      {!adding && (
-        <Button
-          size="sm"
-          variant="outline"
-          onClick={() => {
-            setEditingId(null);
-            setAdding(true);
-          }}
-        >
-          <Plus size={14} />
-          {t("ai.addProvider")}
-        </Button>
-      )}
-
-      {adding && (
-        <div className="space-y-3 rounded-none border border-border p-3">
-          <div className="space-y-1.5">
-            <Label>{t("ai.providerType")}</Label>
-            <Select
-              value={providerType}
-              onValueChange={(value) =>
-                setProviderType(value as AiProviderType)
-              }
-            >
-              <SelectTrigger className="rounded-none">
-                <SelectValue />
-              </SelectTrigger>
-              <SelectContent>
-                {PROVIDER_TYPES.map((entry) => (
-                  <SelectItem key={entry.value} value={entry.value}>
-                    {t(entry.labelKey)}
-                  </SelectItem>
-                ))}
-              </SelectContent>
-            </Select>
-          </div>
-
-          <div className="space-y-1.5">
-            <Label>{t("ai.providerLabel")}</Label>
-            <Input
-              className="rounded-none"
-              value={label}
-              onChange={(event) => setLabel(event.target.value)}
-              placeholder={t("ai.providerLabelPlaceholder")}
-            />
-          </div>
-
-          {spec.needsBaseUrl && (
-            <div className="space-y-1.5">
-              <Label>{t("ai.baseUrl")}</Label>
-              <Input
-                className="rounded-none"
-                value={baseUrl}
-                onChange={(event) => setBaseUrl(event.target.value)}
-                placeholder="http://localhost:11434"
-              />
-              <p className="text-xs text-muted-foreground">
-                {t("ai.privateEndpointHint")}
-              </p>
-            </div>
-          )}
-
-          {(spec.needsApiKey || providerType === "openai_compatible") && (
-            <div className="space-y-1.5">
-              <Label>{t("ai.apiKey")}</Label>
-              <Input
-                className="rounded-none"
-                type="password"
-                value={apiKey}
-                onChange={(event) => setApiKey(event.target.value)}
-                autoComplete="off"
-              />
-            </div>
-          )}
-
-          <div className="space-y-1.5">
-            <div className="flex items-center gap-2">
-              <Label className="min-w-0 flex-1">{t("ai.defaultModel")}</Label>
-              <button
-                type="button"
-                className="flex shrink-0 items-center gap-1 text-[11px] text-muted-foreground hover:text-foreground"
-                onClick={() => void detectModels()}
-                disabled={detecting}
-              >
-                {detecting ? (
-                  <Loader2 size={11} className="animate-spin" />
-                ) : (
-                  <RefreshCw size={11} />
-                )}
-                {t("ai.modelRefresh")}
-              </button>
-            </div>
-
-            {models.length > 0 && !customModel ? (
-              <Select
-                value={defaultModel || undefined}
-                onValueChange={(value) => {
-                  if (value === "__custom__") {
-                    setCustomModel(true);
-                    setDefaultModel("");
-                    return;
-                  }
-                  setDefaultModel(value);
-                }}
-              >
-                <SelectTrigger className="rounded-none">
-                  <SelectValue placeholder={t("ai.modelPlaceholder")} />
-                </SelectTrigger>
-                <SelectContent>
-                  {models.map((model) => (
-                    <SelectItem key={model} value={model}>
-                      {model}
-                    </SelectItem>
-                  ))}
-                  {/* Anything the provider did not list is still reachable. */}
-                  <SelectItem value="__custom__">
-                    {t("ai.modelCustom")}
-                  </SelectItem>
-                </SelectContent>
-              </Select>
-            ) : (
-              <Input
-                className="rounded-none"
-                value={defaultModel}
-                onChange={(event) => setDefaultModel(event.target.value)}
-                placeholder={t("ai.defaultModelPlaceholder")}
-              />
-            )}
-
-            {detectWarning && (
-              <p className="text-[11px] leading-snug text-muted-foreground">
-                {detectWarning}
-              </p>
-            )}
-          </div>
-
-          <div className="flex gap-2">
-            <Button
-              size="sm"
-              variant="outline"
-              className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-              disabled={saving}
-              onClick={handleAdd}
-            >
-              {saving && <Loader2 size={14} className="animate-spin" />}
-              {t("ai.save")}
-            </Button>
-            <Button
-              size="sm"
-              variant="outline"
-              disabled={saving}
-              onClick={() => setAdding(false)}
-            >
-              {t("ai.cancel")}
-            </Button>
-          </div>
-        </div>
-      )}
-    </div>
-  );
-}
diff --git a/plugins/ai/src/frontend/AiToolCall.tsx b/plugins/ai/src/frontend/AiToolCall.tsx
deleted file mode 100644
index 8927a423b..000000000
--- a/plugins/ai/src/frontend/AiToolCall.tsx
+++ /dev/null
@@ -1,80 +0,0 @@
-import { useState } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { ChevronDown, ChevronRight, Loader2, Wrench } from "lucide-react";
-import type { ToolActivity } from "./use-ai-stream";
-import { toolLabel } from "./labels";
-
-/**
- * Every tool call is shown, so the user can always see what the assistant
- * looked at rather than having to trust the summary.
- */
-export function AiToolCall({
-  tool,
-  streaming = false,
-}: {
-  tool: ToolActivity;
-  /** False once the turn has ended, whatever ended it. */
-  streaming?: boolean;
-}) {
-  const { t } = useTranslation();
-  const [open, setOpen] = useState(false);
-  // A tool can only still be running while the turn is. An aborted or failed
-  // stream leaves calls without results, and treating those as pending left a
-  // spinner running forever after the conversation had finished.
-  const pending = !("result" in tool) && streaming;
-
-  return (
-    <div className="rounded-none border border-border bg-muted/50 text-xs">
-      <button
-        type="button"
-        className="flex w-full items-center gap-2 px-2 py-1.5 text-left"
-        onClick={() => setOpen((value) => !value)}
-      >
-        {open ? <ChevronDown size={12} /> : <ChevronRight size={12} />}
-        {pending ? (
-          <Loader2 size={12} className="animate-spin" />
-        ) : (
-          <Wrench size={12} />
-        )}
-        <span className="truncate">{toolLabel(tool.name)}</span>
-        {pending && (
-          <span className="text-muted-foreground">{t("ai.running")}</span>
-        )}
-      </button>
-
-      {open && (
-        <div className="space-y-2 border-t border-border px-2 py-2">
-          {/* The header reads as an action, so the actual tool id lives here. */}
-          <div className="font-mono text-[10px] text-muted-foreground">
-            {tool.name}
-          </div>
-          {Object.keys(tool.arguments).length > 0 && (
-            <div>
-              <div className="mb-1 text-muted-foreground">
-                {t("ai.toolArguments")}
-              </div>
-              <pre className="overflow-x-auto whitespace-pre-wrap break-words font-mono">
-                {JSON.stringify(tool.arguments, null, 2)}
-              </pre>
-            </div>
-          )}
-          {/*
-            Gated on the result existing, not on !pending: an interrupted turn
-            leaves a call with no result at all, which would otherwise print
-            "undefined" under a Result heading.
-          */}
-          {"result" in tool && (
-            <div>
-              <div className="mb-1 text-muted-foreground">
-                {t("ai.toolResult")}
-              </div>
-              <pre className="max-h-64 overflow-auto whitespace-pre-wrap break-words font-mono">
-                {JSON.stringify(tool.result, null, 2)}
-              </pre>
-            </div>
-          )}
-        </div>
-      )}
-    </div>
-  );
-}
diff --git a/plugins/ai/src/frontend/ProposalCard.tsx b/plugins/ai/src/frontend/ProposalCard.tsx
deleted file mode 100644
index 6f59e8949..000000000
--- a/plugins/ai/src/frontend/ProposalCard.tsx
+++ /dev/null
@@ -1,208 +0,0 @@
-import { getErrorMessage } from "./errors";
-import { useState } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { toast } from "sonner";
-import { Check, Loader2, TriangleAlert, X } from "lucide-react";
-import { Button } from "@termix/plugin-sdk/ui";
-import { applyAiProposal, rejectAiProposal, type AiProposal } from "./ai-api";
-import { fieldLabel, toolLabel } from "./labels";
-
-interface ProposalCardProps {
-  proposal: AiProposal;
-  onResolved: (
-    id: number,
-    status: "applied" | "rejected",
-    resultSummary?: string,
-  ) => void;
-}
-
-function isDestructive(kind: string): boolean {
-  return kind.includes("delete");
-}
-
-/**
- * Fields shown in their own block rather than the generic row list, so the
- * card does not print the same command twice.
- */
-const PROMOTED_FIELDS = new Set(["command", "explanation", "reason"]);
-
-/** Renders the payload as readable field rows rather than raw JSON. */
-function fieldRows(payload: Record<string, unknown>): Array<[string, string]> {
-  const rows: Array<[string, string]> = [];
-
-  const push = (key: string, value: unknown) => {
-    if (value === null || value === undefined || value === "") return;
-    if (PROMOTED_FIELDS.has(key)) return;
-    const text =
-      typeof value === "object" ? JSON.stringify(value) : String(value);
-    rows.push([key, text]);
-  };
-
-  for (const [key, value] of Object.entries(payload)) {
-    if (key === "changes" && value && typeof value === "object") {
-      for (const [childKey, childValue] of Object.entries(
-        value as Record<string, unknown>,
-      )) {
-        push(childKey, childValue);
-      }
-      continue;
-    }
-    push(key, value);
-  }
-
-  return rows;
-}
-
-function asText(value: unknown): string | null {
-  return typeof value === "string" && value.trim() ? value.trim() : null;
-}
-
-export function ProposalCard({ proposal, onResolved }: ProposalCardProps) {
-  const { t } = useTranslation();
-  const [busy, setBusy] = useState<"apply" | "reject" | null>(null);
-
-  let payload: Record<string, unknown> = {};
-  try {
-    payload = JSON.parse(proposal.payload);
-  } catch {
-    payload = {};
-  }
-
-  const rows = fieldRows(payload);
-  const destructive = isDestructive(proposal.kind);
-  const resolved = proposal.status !== "pending";
-
-  const command = asText(payload.command);
-  const explanation = asText(payload.explanation) ?? asText(payload.reason);
-
-  // The stored summary repeats the command for run_command proposals, so a
-  // short action label is used instead of printing it twice.
-  const title =
-    command !== null
-      ? t("ai.runCommandTitle")
-      : (proposal.summary ?? toolLabel(proposal.kind));
-
-  async function handleApply() {
-    setBusy("apply");
-    try {
-      const result = await applyAiProposal(proposal.id);
-      // The result goes into the card, not a toast: command output can be
-      // hundreds of lines, which covered the screen.
-      onResolved(proposal.id, "applied", result.summary);
-    } catch (error) {
-      toast.error(getErrorMessage(error, t("ai.proposalApplyFailed")));
-    } finally {
-      setBusy(null);
-    }
-  }
-
-  async function handleReject() {
-    setBusy("reject");
-    try {
-      await rejectAiProposal(proposal.id);
-      onResolved(proposal.id, "rejected");
-    } catch (error) {
-      toast.error(getErrorMessage(error, t("ai.proposalRejectFailed")));
-    } finally {
-      setBusy(null);
-    }
-  }
-
-  return (
-    <div className="rounded-none border border-border bg-muted p-2.5">
-      <div className="flex items-center gap-1.5">
-        {destructive && (
-          <TriangleAlert size={13} className="shrink-0 text-destructive" />
-        )}
-        <span className="min-w-0 flex-1 truncate text-xs font-medium">
-          {title}
-        </span>
-        {resolved && (
-          <span className="shrink-0 border border-border px-1.5 py-0.5 text-[10px] text-muted-foreground">
-            {proposal.status === "applied"
-              ? t("ai.statusApplied")
-              : t("ai.statusRejected")}
-          </span>
-        )}
-      </div>
-
-      {/*
-        A command is the payload, not a field of it, so it gets its own block
-        rather than a label column. In the sidebar a fixed label gutter left
-        barely any room for the command itself.
-      */}
-      {command && (
-        <pre className="mt-2 max-h-40 overflow-auto whitespace-pre-wrap break-all border border-border bg-background px-2 py-1.5 font-mono text-[11px] leading-snug">
-          {command}
-        </pre>
-      )}
-
-      {explanation && (
-        <p className="mt-1.5 text-[11px] leading-snug text-muted-foreground">
-          {explanation}
-        </p>
-      )}
-
-      {rows.length > 0 && (
-        <div className="mt-2 space-y-1.5 border-t border-border pt-2">
-          {rows.map(([key, value]) => (
-            // Stacked, not a two-column row: the value is what matters and it
-            // needs the full width to stay readable.
-            <div key={key} className="min-w-0">
-              <span className="text-[10px] text-muted-foreground">
-                {fieldLabel(key)}
-              </span>
-              <div className="break-all font-mono text-[11px] leading-snug">
-                {value}
-              </div>
-            </div>
-          ))}
-        </div>
-      )}
-
-      {proposal.resultSummary && (
-        // Command output comes back here, so it keeps the monospace treatment.
-        <pre className="mt-2 max-h-40 overflow-auto whitespace-pre-wrap break-all border border-border bg-background px-2 py-1.5 font-mono text-[11px] leading-snug text-muted-foreground">
-          {proposal.resultSummary}
-        </pre>
-      )}
-
-      {!resolved && (
-        <div className="mt-2 flex gap-1.5">
-          <Button
-            size="sm"
-            className={`h-7 flex-1 text-xs ${
-              destructive
-                ? ""
-                : "border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-            }`}
-            variant={destructive ? "destructive" : "outline"}
-            disabled={busy !== null}
-            onClick={handleApply}
-          >
-            {busy === "apply" ? (
-              <Loader2 size={13} className="animate-spin" />
-            ) : (
-              <Check size={13} />
-            )}
-            {t("ai.approve")}
-          </Button>
-          <Button
-            size="sm"
-            className="h-7 flex-1 text-xs"
-            variant="outline"
-            disabled={busy !== null}
-            onClick={handleReject}
-          >
-            {busy === "reject" ? (
-              <Loader2 size={13} className="animate-spin" />
-            ) : (
-              <X size={13} />
-            )}
-            {t("ai.reject")}
-          </Button>
-        </div>
-      )}
-    </div>
-  );
-}
diff --git a/plugins/ai/src/frontend/ai-api.ts b/plugins/ai/src/frontend/ai-api.ts
deleted file mode 100644
index 127bb14a3..000000000
--- a/plugins/ai/src/frontend/ai-api.ts
+++ /dev/null
@@ -1,244 +0,0 @@
-import { aiApp } from "./app-ref";
-
-/** Fired when the AI status may have changed, so every surface re-reads it. */
-export const AI_STATUS_CHANGED_EVENT = "termix-ai:status-changed";
-
-export function notifyAiStatusChanged(): void {
-  window.dispatchEvent(new Event(AI_STATUS_CHANGED_EVENT));
-}
-
-/** The server's own message when it sent one, so the user sees why. */
-function apiError(error: unknown, action: string): Error {
-  const data = (error as { response?: { data?: { error?: unknown } } })
-    ?.response?.data;
-  if (typeof data?.error === "string" && data.error) {
-    return new Error(data.error);
-  }
-  if (error instanceof Error && error.message) return error;
-  return new Error(`Failed to ${action}`);
-}
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// Response bodies are typed per function below, at the edge.
-interface LooseClient {
-  get(url: string): Promise<{ data: any }>;
-  delete(url: string): Promise<{ data: any }>;
-  post(url: string, body?: unknown): Promise<{ data: any }>;
-  put(url: string, body?: unknown): Promise<{ data: any }>;
-  patch(url: string, body?: unknown): Promise<{ data: any }>;
-}
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-const api = () => aiApp().api as unknown as LooseClient;
-
-export type AiProviderType =
-  "ollama" | "anthropic" | "openai" | "gemini" | "openai_compatible";
-
-export interface AiProvider {
-  id: number;
-  providerType: AiProviderType;
-  label: string;
-  baseUrl: string | null;
-  /** The first few characters only; the key itself never leaves the server. */
-  apiKeyPrefix: string | null;
-  defaultModel: string | null;
-  enabled: boolean;
-  createdAt: string;
-}
-
-export interface AiConversation {
-  id: number;
-  title: string | null;
-  providerId: number | null;
-  model: string | null;
-  createdAt: string;
-  updatedAt: string;
-}
-
-export interface AiMessage {
-  id: number;
-  conversationId: number;
-  role: "user" | "assistant" | "tool";
-  content: string;
-  toolCalls: string | null;
-  createdAt: string;
-}
-
-export interface AiProposal {
-  id: number;
-  conversationId: number;
-  kind: string;
-  summary: string | null;
-  payload: string;
-  status: "pending" | "applied" | "rejected" | "expired";
-  resultSummary: string | null;
-  createdAt: string;
-}
-
-export interface AiStatus {
-  globallyEnabled: boolean;
-  enabled: boolean;
-  allowReadOnlyCommands: boolean;
-}
-
-export async function getAiStatus(): Promise<AiStatus> {
-  try {
-    return (await api().get("/status")).data;
-  } catch (error) {
-    throw apiError(error, "get AI status");
-  }
-}
-
-export async function getAiProviders(): Promise<AiProvider[]> {
-  try {
-    return (await api().get("/providers")).data.providers;
-  } catch (error) {
-    throw apiError(error, "list AI providers");
-  }
-}
-
-export async function createAiProvider(input: {
-  providerType: AiProviderType;
-  label: string;
-  baseUrl?: string | null;
-  apiKey?: string | null;
-  defaultModel?: string | null;
-}): Promise<AiProvider> {
-  try {
-    return (await api().post("/providers", input)).data.provider;
-  } catch (error) {
-    throw apiError(error, "create AI provider");
-  }
-}
-
-export async function updateAiProvider(
-  id: number,
-  input: Partial<{
-    label: string;
-    baseUrl: string | null;
-    apiKey: string | null;
-    defaultModel: string | null;
-    enabled: boolean;
-  }>,
-): Promise<AiProvider> {
-  try {
-    return (await api().patch(`/providers/${id}`, input)).data.provider;
-  } catch (error) {
-    throw apiError(error, "update AI provider");
-  }
-}
-
-export async function deleteAiProvider(id: number): Promise<void> {
-  try {
-    await api().delete(`/providers/${id}`);
-  } catch (error) {
-    throw apiError(error, "delete AI provider");
-  }
-}
-
-/**
- * Model list for a provider that may not be saved yet, so the add form can
- * fill its picker before anything is persisted.
- */
-export async function probeAiModels(input: {
-  providerType: AiProviderType;
-  baseUrl?: string | null;
-  apiKey?: string | null;
-  providerId?: number | null;
-}): Promise<{
-  models: string[];
-  source: "live" | "fallback" | "none";
-  warning?: string;
-}> {
-  try {
-    return (await api().post("/probe-models", input)).data;
-  } catch (error) {
-    throw apiError(error, "detect models");
-  }
-}
-
-export async function getAiProviderModels(id: number): Promise<string[]> {
-  try {
-    return (await api().get(`/providers/${id}/models`)).data.models;
-  } catch (error) {
-    throw apiError(error, "list provider models");
-  }
-}
-
-export async function getAiConversations(): Promise<AiConversation[]> {
-  try {
-    return (await api().get("/conversations")).data.conversations;
-  } catch (error) {
-    throw apiError(error, "list AI conversations");
-  }
-}
-
-export async function getAiConversation(id: number): Promise<{
-  conversation: AiConversation;
-  messages: AiMessage[];
-  proposals: AiProposal[];
-}> {
-  try {
-    return (await api().get(`/conversations/${id}`)).data;
-  } catch (error) {
-    throw apiError(error, "load AI conversation");
-  }
-}
-
-export async function deleteAiConversation(id: number): Promise<void> {
-  try {
-    await api().delete(`/conversations/${id}`);
-  } catch (error) {
-    throw apiError(error, "delete AI conversation");
-  }
-}
-
-export async function applyAiProposal(
-  id: number,
-): Promise<{ success: boolean; summary: string }> {
-  try {
-    return (await api().post(`/proposals/${id}/apply`)).data;
-  } catch (error) {
-    throw apiError(error, "apply AI proposal");
-  }
-}
-
-export async function rejectAiProposal(id: number): Promise<void> {
-  try {
-    await api().post(`/proposals/${id}/reject`);
-  } catch (error) {
-    throw apiError(error, "reject AI proposal");
-  }
-}
-
-/**
- * For the terminal-docked assistant: records that a run_command proposal was
- * typed into the user's open terminal instead of run over a pooled connection.
- */
-export async function markAiProposalRunInTerminal(
-  id: number,
-  hostId: number,
-  summary?: string,
-): Promise<{ success: boolean; summary: string }> {
-  try {
-    return (
-      await api().post(`/proposals/${id}/mark-run-in-terminal`, {
-        hostId,
-        summary,
-      })
-    ).data;
-  } catch (error) {
-    throw apiError(error, "mark AI proposal run in terminal");
-  }
-}
-
-/** Turns the assistant on or off for the current user. */
-export async function setAiOptIn(enabled: boolean): Promise<void> {
-  try {
-    await api().put("/opt-in", { enabled });
-  } catch (error) {
-    throw apiError(error, "update the AI setting");
-  } finally {
-    notifyAiStatusChanged();
-  }
-}
diff --git a/plugins/ai/src/frontend/app-ref.ts b/plugins/ai/src/frontend/app-ref.ts
deleted file mode 100644
index d7466492c..000000000
--- a/plugins/ai/src/frontend/app-ref.ts
+++ /dev/null
@@ -1,13 +0,0 @@
-import type { TermixApp } from "@termix/plugin-sdk/frontend";
-
-let current: TermixApp | null = null;
-
-/** Set in activate, cleared on deactivate. */
-export function setAiApp(app: TermixApp | null): void {
-  current = app;
-}
-
-export function aiApp(): TermixApp {
-  if (!current) throw new Error("The AI plugin is not active");
-  return current;
-}
diff --git a/plugins/ai/src/frontend/errors.ts b/plugins/ai/src/frontend/errors.ts
deleted file mode 100644
index 3926398dd..000000000
--- a/plugins/ai/src/frontend/errors.ts
+++ /dev/null
@@ -1,4 +0,0 @@
-/** A readable message from anything thrown, or the fallback. */
-export function getErrorMessage(error: unknown, fallback: string): string {
-  return error instanceof Error && error.message ? error.message : fallback;
-}
diff --git a/plugins/ai/src/frontend/index.tsx b/plugins/ai/src/frontend/index.tsx
deleted file mode 100644
index c4757946d..000000000
--- a/plugins/ai/src/frontend/index.tsx
+++ /dev/null
@@ -1,194 +0,0 @@
-import type { ComponentType } from "react";
-import { Bot, Sparkles } from "lucide-react";
-import type {
-  PanelProps,
-  TabProps,
-  TermixApp,
-} from "@termix/plugin-sdk/frontend";
-import type {
-  TerminalSidePanelProps,
-  TerminalSlotApi,
-} from "./terminal/terminal-slot-types";
-import { AiPanel } from "./AiPanel";
-import { TerminalAiPanel } from "./terminal/TerminalAiPanel";
-import { AiAssistantStep } from "./AiAssistantStep";
-import { ProvidersSetting } from "./settings/ProvidersSetting";
-import { AI_STATUS_CHANGED_EVENT, getAiStatus } from "./ai-api";
-import { setAiApp } from "./app-ref";
-
-/** The rail id the assistant registers under. */
-const AI_RAIL_ID = "ai";
-const ASSISTANT_ACTION = "ai.openWithContext";
-const SIDE_PANEL_ID = "ai.assistant";
-
-function AssistantPanel({ activeTabType }: PanelProps) {
-  return (
-    <div className="flex flex-col flex-1 min-h-0">
-      <AiPanel activeTab={activeTabType ?? null} />
-    </div>
-  );
-}
-
-function AssistantTab() {
-  return <AiPanel />;
-}
-
-/** The assistant beside a terminal, in its "terminal.sidePanel" slot. */
-function TerminalSidePanel({
-  host,
-  hostId,
-  hostLabel,
-  panelProps,
-  onClose,
-  onRunInTerminal,
-}: TerminalSidePanelProps) {
-  if (!hostId) return null;
-  return (
-    <TerminalAiPanel
-      hostLabel={hostLabel}
-      hostId={hostId}
-      activeTab={`terminal:${host?.name || host?.ip || ""}`}
-      initialContext={
-        typeof panelProps.context === "string" ? panelProps.context : ""
-      }
-      onClose={onClose}
-      onRunInTerminal={onRunInTerminal}
-    />
-  );
-}
-
-export function activate(app: TermixApp): void {
-  setAiApp(app);
-  app.onDispose(() => setAiApp(null));
-
-  let globallyEnabled = false;
-  let userEnabled = false;
-  const surface: (() => void)[] = [];
-
-  const clearSurface = () => {
-    while (surface.length > 0) surface.pop()!();
-  };
-
-  // What the assistant shows depends on the admin switch and the user's own
-  // choice, so it is re-registered whenever either changes.
-  const applyStatus = () => {
-    clearSurface();
-
-    surface.push(
-      app.registerRailItem({
-        id: AI_RAIL_ID,
-        icon: Sparkles,
-        titleKey: "nav.ai",
-        promotable: true,
-        rightDockable: true,
-        after: "macros",
-        order: 40,
-        // Off for everyone: not even a Navigation toggle.
-        hidden: !globallyEnabled,
-      }),
-    );
-
-    if (!globallyEnabled) {
-      app.tabs.closeTab(AI_RAIL_ID);
-      return;
-    }
-
-    surface.push(
-      app.registerTab(AI_RAIL_ID, AssistantTab as ComponentType<TabProps>, {
-        icon: Sparkles,
-        titleKey: "nav.ai",
-        singleton: true,
-        hostless: true,
-        panelFrame: true,
-      }),
-    );
-
-    // The per-host switch is this plugin's host setting.
-    const offeredOnHost = (context: Record<string, unknown>) =>
-      userEnabled &&
-      (
-        context.host as
-          | { pluginSettings?: { ai?: { enableAiAssistant?: boolean } } }
-          | undefined
-      )?.pluginSettings?.ai?.enableAiAssistant === true;
-
-    surface.push(
-      app.registerSlotContribution("terminal.toolbar", {
-        actionId: ASSISTANT_ACTION,
-        titleKey: "ai.assistant",
-        icon: Bot,
-        kind: "button",
-        when: offeredOnHost,
-      }),
-    );
-    surface.push(
-      app.registerSlotContribution("terminal.sidePanel", {
-        actionId: SIDE_PANEL_ID,
-        titleKey: "ai.assistant",
-        icon: Bot,
-        kind: "component",
-        component: TerminalSidePanel as unknown as ComponentType<
-          Record<string, unknown>
-        >,
-        when: offeredOnHost,
-      }),
-    );
-    surface.push(
-      app.registerSlotContribution("onboarding.steps", {
-        actionId: "ai.onboarding",
-        titleKey: "onboarding.aiTitle",
-        kind: "component",
-        component: AiAssistantStep as unknown as ComponentType<
-          Record<string, unknown>
-        >,
-      }),
-    );
-  };
-
-  const refresh = () => {
-    getAiStatus()
-      .then((status) => {
-        globallyEnabled = status.globallyEnabled;
-        userEnabled = status.globallyEnabled && status.enabled;
-      })
-      .catch(() => {
-        globallyEnabled = false;
-        userEnabled = false;
-      })
-      .finally(() => {
-        if (!disposed) applyStatus();
-      });
-  };
-
-  let disposed = false;
-  app.onDispose(() => {
-    disposed = true;
-    clearSurface();
-  });
-
-  app.registerPanel(AI_RAIL_ID, AssistantPanel);
-
-  // Opens the docked assistant on the terminal it was clicked from, seeded
-  // with what is on screen.
-  app.registerAction(
-    ASSISTANT_ACTION,
-    (terminal: TerminalSlotApi) =>
-      terminal?.openSidePanel(SIDE_PANEL_ID, {
-        context: terminal.getBufferText(),
-      }),
-    { permission: "services.use" },
-  );
-
-  app.registerSettingsComponent("providers", ProvidersSetting);
-
-  applyStatus();
-  refresh();
-  // The admin switch and the user's own choice are settings, saved from
-  // the settings screen.
-  app.onSettingsChanged(() => refresh());
-  const events = [AI_STATUS_CHANGED_EVENT, "termix:plugins-changed"];
-  for (const event of events) window.addEventListener(event, refresh);
-  app.onDispose(() => {
-    for (const event of events) window.removeEventListener(event, refresh);
-  });
-}
diff --git a/plugins/ai/src/frontend/labels.ts b/plugins/ai/src/frontend/labels.ts
deleted file mode 100644
index 9dd0838de..000000000
--- a/plugins/ai/src/frontend/labels.ts
+++ /dev/null
@@ -1,84 +0,0 @@
-/**
- * Turns the internal identifiers the assistant works in into text a user can
- * read. Tool names, proposal kinds and payload keys all surface in the panel,
- * and raw ids like "propose_create_automation" or "thresholddurationseconds"
- * are not something to show anyone.
- */
-
-/** What each tool is doing, phrased as an action rather than a function name. */
-const TOOL_LABELS: Record<string, string> = {
-  list_hosts: "Reading hosts",
-  get_host: "Reading host",
-  list_fleets: "Reading fleets",
-  list_snippets: "Reading snippets",
-  list_automations: "Reading automations",
-  get_automation: "Reading automation",
-  list_workspaces: "Reading workspaces",
-  list_notification_channels: "Reading notification channels",
-  list_homepage_items: "Reading homepage items",
-  get_command_history: "Reading command history",
-  get_network_topology: "Reading network topology",
-  propose_create_host: "Add host",
-  propose_update_host: "Update host",
-  propose_delete_host: "Delete host",
-  propose_create_snippet: "Create snippet",
-  propose_update_snippet: "Update snippet",
-  propose_delete_snippet: "Delete snippet",
-  propose_create_automation: "Create automation",
-  propose_create_fleet: "Create fleet",
-  propose_run_command: "Run command",
-};
-
-/** Readable names for the payload keys the propose tools emit. */
-const FIELD_LABELS: Record<string, string> = {
-  hostId: "Host",
-  hostIds: "Hosts",
-  snippetId: "Snippet",
-  automationId: "Automation",
-  name: "Name",
-  ip: "Address",
-  port: "Port",
-  username: "Username",
-  folder: "Folder",
-  tags: "Tags",
-  content: "Command",
-  description: "Description",
-  definition: "Definition",
-  enabled: "Enabled",
-  triggerType: "Trigger",
-  thresholdValue: "Threshold",
-  thresholdDurationSeconds: "Duration (seconds)",
-  cooldownMinutes: "Cooldown (minutes)",
-};
-
-const MENTION_LABELS: Record<string, string> = {
-  host: "Host",
-  snippet: "Snippet",
-  automation: "Automation",
-};
-
-/**
- * Splits snake_case and camelCase into words and capitalises the first.
- * Used whenever an identifier has no explicit label, so something added later
- * still reads as words rather than one run-on token.
- */
-export function humanize(value: string): string {
-  const spaced = value
-    .replace(/([a-z0-9])([A-Z])/g, "$1 $2")
-    .replace(/[_-]+/g, " ")
-    .trim();
-  if (!spaced) return value;
-  return spaced.charAt(0).toUpperCase() + spaced.slice(1).toLowerCase();
-}
-
-export function toolLabel(name: string): string {
-  return TOOL_LABELS[name] ?? humanize(name);
-}
-
-export function fieldLabel(key: string): string {
-  return FIELD_LABELS[key] ?? humanize(key);
-}
-
-export function mentionLabel(kind: string): string {
-  return MENTION_LABELS[kind] ?? humanize(kind);
-}
diff --git a/plugins/ai/src/frontend/settings/ProvidersSetting.tsx b/plugins/ai/src/frontend/settings/ProvidersSetting.tsx
deleted file mode 100644
index 28daa5e22..000000000
--- a/plugins/ai/src/frontend/settings/ProvidersSetting.tsx
+++ /dev/null
@@ -1,59 +0,0 @@
-import { useCallback, useEffect, useState } from "react";
-import { useSettings, useTranslation } from "@termix/plugin-sdk/frontend";
-import { AiProviderSettings } from "../AiProviderSettings";
-import {
-  AI_STATUS_CHANGED_EVENT,
-  getAiProviders,
-  getAiStatus,
-  type AiProvider,
-} from "../ai-api";
-
-/**
- * The "providers" custom field in the plugin's user settings: a list with
- * per-provider forms, which a schema field cannot express.
- */
-export function ProvidersSetting() {
-  const { t } = useTranslation();
-  const [status, setStatus] = useState<{
-    globallyEnabled: boolean;
-    enabled: boolean;
-  } | null>(null);
-  const [providers, setProviders] = useState<AiProvider[]>([]);
-  // Re-read when the "enabled" switch above this field is saved.
-  const optedIn = useSettings("user").values.enabled;
-
-  const load = useCallback(async () => {
-    try {
-      const next = await getAiStatus();
-      setStatus(next);
-      if (next.enabled) setProviders(await getAiProviders());
-    } catch {
-      setStatus({ globallyEnabled: false, enabled: false });
-    }
-  }, []);
-
-  useEffect(() => {
-    void load();
-  }, [load, optedIn]);
-
-  useEffect(() => {
-    window.addEventListener(AI_STATUS_CHANGED_EVENT, load);
-    return () => window.removeEventListener(AI_STATUS_CHANGED_EVENT, load);
-  }, [load]);
-
-  if (status === null) return null;
-
-  if (!status.enabled) {
-    return (
-      <p className="text-xs text-muted-foreground">
-        {status.globallyEnabled
-          ? t("settings.providersNeedOptIn")
-          : t("settings.assistantUnavailable")}
-      </p>
-    );
-  }
-
-  return (
-    <AiProviderSettings providers={providers} onChanged={() => void load()} />
-  );
-}
diff --git a/plugins/ai/src/frontend/terminal/TerminalAiPanel.tsx b/plugins/ai/src/frontend/terminal/TerminalAiPanel.tsx
deleted file mode 100644
index 7fd3e65a8..000000000
--- a/plugins/ai/src/frontend/terminal/TerminalAiPanel.tsx
+++ /dev/null
@@ -1,355 +0,0 @@
-import {
-  useCallback,
-  useEffect,
-  useLayoutEffect,
-  useRef,
-  useState,
-} from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Bot, GripVertical, Send, Square, X } from "lucide-react";
-import { Button } from "@termix/plugin-sdk/ui";
-import { getAiProviders, type AiProposal, type AiProvider } from "../ai-api";
-import { AiMessage } from "../AiMessage";
-import { AiToolCall } from "../AiToolCall";
-import {
-  buildTimeline,
-  finishedRunEntries,
-  userEntry,
-  type HistoryEntry,
-} from "../transcript";
-import { useAiStream } from "../use-ai-stream";
-import { TerminalProposalCard } from "./TerminalProposalCard";
-import {
-  clampToolbarPosition,
-  persistAiPanelPosition,
-  readStoredAiPanelPosition,
-  type ToolbarPosition,
-} from "./panel-geometry";
-
-interface TerminalAiPanelProps {
-  hostLabel: string;
-  hostId: number;
-  activeTab?: string | null;
-  /** Terminal output to open with, from a contributed action. */
-  initialContext?: string;
-  onClose: () => void;
-  onRunInTerminal: (command: string) => void;
-}
-
-/**
- * A slimmed-down version of AiPanel docked to a terminal tab. Same backend
- * (/ai/chat/stream, propose_run_command, ProposalCard) as the main assistant,
- * so it respects the same admin/user gates and never runs a command without
- * an explicit approve.
- */
-export function TerminalAiPanel({
-  hostLabel,
-  hostId,
-  activeTab,
-  initialContext,
-  onClose,
-  onRunInTerminal,
-}: TerminalAiPanelProps) {
-  const { t } = useTranslation();
-  const { state, send, stop } = useAiStream();
-
-  const [providers, setProviders] = useState<AiProvider[]>([]);
-  const [providerId, setProviderId] = useState<number | null>(null);
-  const [loading, setLoading] = useState(true);
-  const [input, setInput] = useState("");
-  const [history, setHistory] = useState<HistoryEntry[]>([]);
-  const [resolvedProposals, setResolvedProposals] = useState<
-    Record<number, { status: "applied" | "rejected"; resultSummary?: string }>
-  >({});
-  const conversationIdRef = useRef<number | null>(null);
-  const runCountRef = useRef(0);
-  const scrollRef = useRef<HTMLDivElement>(null);
-
-  // Prefilled rather than sent: the user sees exactly what the terminal is
-  // about to hand the model, and can trim it or add a question first.
-  useEffect(() => {
-    if (!initialContext) return;
-    setInput((current) =>
-      current
-        ? current
-        : t("ai.terminalContextPrefill", { output: initialContext }),
-    );
-  }, [initialContext, t]);
-  const textareaRef = useRef<HTMLTextAreaElement>(null);
-
-  const [position, setPosition] = useState<ToolbarPosition>(
-    readStoredAiPanelPosition,
-  );
-  const positionRef = useRef(position);
-  positionRef.current = position;
-  const panelRef = useRef<HTMLDivElement>(null);
-  const dragRef = useRef<{
-    pointerId: number;
-    startX: number;
-    startY: number;
-    basePosition: ToolbarPosition;
-  } | null>(null);
-
-  useLayoutEffect(() => {
-    const panel = panelRef.current;
-    const host = panel?.offsetParent as HTMLElement | null;
-    if (!panel || !host) return;
-    const next = clampToolbarPosition(
-      positionRef.current,
-      panel.getBoundingClientRect(),
-      host.getBoundingClientRect(),
-      positionRef.current,
-    );
-    if (next.x !== positionRef.current.x || next.y !== positionRef.current.y) {
-      positionRef.current = next;
-      setPosition(next);
-    }
-    // Only re-clamp when the panel first mounts; drag handles the rest.
-  }, []);
-
-  const handleDragPointerDown = (event: React.PointerEvent<HTMLDivElement>) => {
-    if (event.button !== 0 || event.pointerType === "touch") return;
-    if ((event.target as HTMLElement).closest("button")) return;
-    event.currentTarget.setPointerCapture?.(event.pointerId);
-    dragRef.current = {
-      pointerId: event.pointerId,
-      startX: event.clientX,
-      startY: event.clientY,
-      basePosition: positionRef.current,
-    };
-  };
-  const handleDragPointerMove = (event: React.PointerEvent<HTMLDivElement>) => {
-    const drag = dragRef.current;
-    if (!drag || drag.pointerId !== event.pointerId) return;
-    const panel = panelRef.current;
-    const host = panel?.offsetParent as HTMLElement | null;
-    if (!panel || !host) return;
-    const deltaX = event.clientX - drag.startX;
-    const deltaY = event.clientY - drag.startY;
-    const next = clampToolbarPosition(
-      { x: drag.basePosition.x + deltaX, y: drag.basePosition.y + deltaY },
-      panel.getBoundingClientRect(),
-      host.getBoundingClientRect(),
-      positionRef.current,
-    );
-    positionRef.current = next;
-    setPosition(next);
-  };
-  const handleDragPointerEnd = (event: React.PointerEvent<HTMLDivElement>) => {
-    const drag = dragRef.current;
-    if (!drag || drag.pointerId !== event.pointerId) return;
-    persistAiPanelPosition(positionRef.current);
-    dragRef.current = null;
-    if (event.type !== "lostpointercapture") {
-      try {
-        event.currentTarget.releasePointerCapture?.(event.pointerId);
-      } catch {
-        // The browser may have already released capture for this pointer.
-      }
-    }
-  };
-
-  useEffect(() => {
-    let cancelled = false;
-    getAiProviders()
-      .then((list) => {
-        if (cancelled) return;
-        setProviders(list);
-        setProviderId((current) => current ?? list[0]?.id ?? null);
-      })
-      .catch(() => {
-        if (!cancelled) setProviders([]);
-      })
-      .finally(() => {
-        if (!cancelled) setLoading(false);
-      });
-    return () => {
-      cancelled = true;
-    };
-  }, []);
-
-  useEffect(() => {
-    window.requestAnimationFrame(() => textareaRef.current?.focus());
-  }, []);
-
-  useEffect(() => {
-    scrollRef.current?.scrollTo({ top: scrollRef.current.scrollHeight });
-  }, [state.assistantText, state.tools.length, history.length]);
-
-  const handleResolved = useCallback(
-    (id: number, status: "applied" | "rejected", resultSummary?: string) => {
-      setResolvedProposals((current) => ({
-        ...current,
-        [id]: { status, resultSummary },
-      }));
-    },
-    [],
-  );
-
-  const handleSend = useCallback(() => {
-    const message = input.trim();
-    if (!message || !providerId || state.streaming) return;
-
-    setHistory((current) => [...current, userEntry(message)]);
-    setInput("");
-
-    void send({
-      message,
-      providerId,
-      conversationId: conversationIdRef.current,
-      activeTab: activeTab ?? `terminal:${hostLabel}`,
-      onComplete: (conversationId, reply, tools) => {
-        conversationIdRef.current = conversationId;
-        const runId = runCountRef.current++;
-        setHistory((current) => [
-          ...current,
-          ...finishedRunEntries(runId, tools, reply),
-        ]);
-      },
-    });
-  }, [activeTab, hostLabel, input, providerId, send, state.streaming]);
-
-  const proposals: AiProposal[] = state.proposals.map((proposal) => {
-    const resolved = resolvedProposals[proposal.id];
-    if (!resolved) return proposal;
-    return {
-      ...proposal,
-      status: resolved.status,
-      resultSummary: resolved.resultSummary ?? proposal.resultSummary,
-    };
-  });
-
-  const timeline = buildTimeline(history, state, proposals);
-
-  return (
-    <div
-      ref={panelRef}
-      className="absolute right-2 top-12 z-[120] flex max-h-[calc(100%-4rem)] w-[min(420px,calc(100vw-1rem))] flex-col border border-border bg-background shadow-xl"
-      style={{ transform: `translate(${position.x}px, ${position.y}px)` }}
-      onClick={(event) => event.stopPropagation()}
-    >
-      <div
-        className="flex cursor-grab items-center justify-between gap-2 border-b border-border px-3 py-2 active:cursor-grabbing"
-        onPointerDown={handleDragPointerDown}
-        onPointerMove={handleDragPointerMove}
-        onPointerUp={handleDragPointerEnd}
-        onPointerCancel={handleDragPointerEnd}
-        onLostPointerCapture={handleDragPointerEnd}
-      >
-        <div className="flex min-w-0 items-center gap-2">
-          <GripVertical className="size-3.5 shrink-0 text-muted-foreground" />
-          <Bot className="size-4 shrink-0 text-accent-brand" />
-          <div className="min-w-0">
-            <div className="truncate text-xs font-bold text-foreground">
-              {t("ai.assistant")}
-            </div>
-            <div className="truncate text-[10px] text-muted-foreground">
-              {hostLabel}
-            </div>
-          </div>
-        </div>
-        <div className="flex items-center gap-1">
-          <Button
-            type="button"
-            size="icon"
-            variant="ghost"
-            className="size-7"
-            onClick={stop}
-            disabled={!state.streaming}
-            title={t("ai.stop")}
-          >
-            <Square className="size-3.5" />
-          </Button>
-          <Button
-            type="button"
-            size="icon"
-            variant="ghost"
-            className="size-7"
-            onClick={onClose}
-            title={t("common.close")}
-          >
-            <X className="size-3.5" />
-          </Button>
-        </div>
-      </div>
-
-      <div
-        ref={scrollRef}
-        className="flex min-h-0 flex-1 flex-col gap-2 overflow-y-auto p-3"
-      >
-        {timeline.length === 0 && !loading && (
-          <div className="text-xs text-muted-foreground">
-            {t("ai.terminalPanelEmpty")}
-          </div>
-        )}
-        {!loading && providers.length === 0 && (
-          <div className="border border-border bg-muted/30 px-2 py-1.5 text-xs text-muted-foreground">
-            {t("ai.noProvidersConfigured")}
-          </div>
-        )}
-        {state.error && (
-          <div className="border border-destructive/30 bg-destructive/10 px-2 py-1.5 text-xs text-destructive">
-            {state.error}
-          </div>
-        )}
-        {timeline.map((item) => {
-          if (item.kind === "message") {
-            return (
-              <AiMessage
-                key={item.key}
-                role={item.role}
-                content={item.content}
-              />
-            );
-          }
-          if (item.kind === "tool") {
-            return (
-              <AiToolCall
-                key={item.key}
-                tool={item.tool}
-                streaming={item.live && state.streaming}
-              />
-            );
-          }
-          return (
-            <TerminalProposalCard
-              key={item.key}
-              proposal={item.proposal}
-              hostId={hostId}
-              onRunInTerminal={onRunInTerminal}
-              onResolved={handleResolved}
-            />
-          );
-        })}
-      </div>
-
-      <div className="flex flex-col gap-2 border-t border-border p-3">
-        <textarea
-          ref={textareaRef}
-          value={input}
-          onChange={(event) => setInput(event.target.value)}
-          onKeyDown={(event) => {
-            if (event.key === "Enter" && !event.shiftKey) {
-              event.preventDefault();
-              handleSend();
-            }
-          }}
-          placeholder={t("ai.terminalPanelPlaceholder")}
-          rows={3}
-          className="min-h-20 resize-none border border-input bg-background px-2 py-1.5 text-xs text-foreground outline-none focus-visible:ring-1 focus-visible:ring-ring"
-          disabled={state.streaming || providers.length === 0}
-        />
-        <Button
-          type="button"
-          size="sm"
-          className="h-8 gap-1.5"
-          disabled={state.streaming || !input.trim() || !providerId}
-          onClick={handleSend}
-        >
-          <Send className="size-3.5" />
-          {t("ai.send")}
-        </Button>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/ai/src/frontend/terminal/TerminalProposalCard.tsx b/plugins/ai/src/frontend/terminal/TerminalProposalCard.tsx
deleted file mode 100644
index b4471863f..000000000
--- a/plugins/ai/src/frontend/terminal/TerminalProposalCard.tsx
+++ /dev/null
@@ -1,142 +0,0 @@
-import { getErrorMessage } from "../errors";
-import { useState } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { toast } from "sonner";
-import { Check, Loader2, TriangleAlert, X } from "lucide-react";
-import { Button } from "@termix/plugin-sdk/ui";
-import {
-  markAiProposalRunInTerminal,
-  rejectAiProposal,
-  type AiProposal,
-} from "../ai-api";
-import { ProposalCard } from "../ProposalCard";
-
-interface TerminalProposalCardProps {
-  proposal: AiProposal;
-  hostId: number;
-  onRunInTerminal: (command: string) => void;
-  onResolved: (
-    id: number,
-    status: "applied" | "rejected",
-    resultSummary?: string,
-  ) => void;
-}
-
-/**
- * A run_command proposal in the terminal-docked assistant runs in the user's
- * already-open session instead of a hidden pooled connection, so approving it
- * here is a different action from the main AiPanel's apply button. Every
- * other proposal kind still goes through the normal apply flow.
- */
-export function TerminalProposalCard({
-  proposal,
-  hostId,
-  onRunInTerminal,
-  onResolved,
-}: TerminalProposalCardProps) {
-  const { t } = useTranslation();
-  const [busy, setBusy] = useState<"run" | "reject" | null>(null);
-
-  if (
-    proposal.kind !== "propose_run_command" ||
-    proposal.status !== "pending"
-  ) {
-    return <ProposalCard proposal={proposal} onResolved={onResolved} />;
-  }
-
-  let payload: Record<string, unknown> = {};
-  try {
-    payload = JSON.parse(proposal.payload);
-  } catch {
-    payload = {};
-  }
-  const command = typeof payload.command === "string" ? payload.command : "";
-  const explanation =
-    typeof payload.explanation === "string" ? payload.explanation : "";
-
-  async function handleRun() {
-    if (!command) return;
-    setBusy("run");
-    try {
-      onRunInTerminal(command);
-      const result = await markAiProposalRunInTerminal(
-        proposal.id,
-        hostId,
-        `$ ${command}`,
-      );
-      onResolved(proposal.id, "applied", result.summary);
-    } catch (error) {
-      toast.error(getErrorMessage(error, t("ai.proposalApplyFailed")));
-    } finally {
-      setBusy(null);
-    }
-  }
-
-  async function handleReject() {
-    setBusy("reject");
-    try {
-      await rejectAiProposal(proposal.id);
-      onResolved(proposal.id, "rejected");
-    } catch (error) {
-      toast.error(getErrorMessage(error, t("ai.proposalRejectFailed")));
-    } finally {
-      setBusy(null);
-    }
-  }
-
-  return (
-    <div className="rounded-none border border-border bg-muted p-2.5">
-      <div className="flex items-center gap-1.5">
-        <span className="min-w-0 flex-1 truncate text-xs font-medium">
-          {t("ai.runCommandTitle")}
-        </span>
-      </div>
-
-      <pre className="mt-2 max-h-40 overflow-auto whitespace-pre-wrap break-all border border-border bg-background px-2 py-1.5 font-mono text-[11px] leading-snug">
-        {command}
-      </pre>
-
-      {explanation && (
-        <p className="mt-1.5 text-[11px] leading-snug text-muted-foreground">
-          {explanation}
-        </p>
-      )}
-
-      <p className="mt-2 flex items-center gap-1 text-[10px] text-muted-foreground">
-        <TriangleAlert size={11} className="shrink-0" />
-        {t("ai.runsInOpenTerminal")}
-      </p>
-
-      <div className="mt-2 flex gap-1.5">
-        <Button
-          size="sm"
-          className="h-7 flex-1 text-xs border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-          variant="outline"
-          disabled={busy !== null || !command}
-          onClick={handleRun}
-        >
-          {busy === "run" ? (
-            <Loader2 size={13} className="animate-spin" />
-          ) : (
-            <Check size={13} />
-          )}
-          {t("ai.runInTerminal")}
-        </Button>
-        <Button
-          size="sm"
-          className="h-7 flex-1 text-xs"
-          variant="outline"
-          disabled={busy !== null}
-          onClick={handleReject}
-        >
-          {busy === "reject" ? (
-            <Loader2 size={13} className="animate-spin" />
-          ) : (
-            <X size={13} />
-          )}
-          {t("ai.reject")}
-        </Button>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/ai/src/frontend/terminal/panel-geometry.ts b/plugins/ai/src/frontend/terminal/panel-geometry.ts
deleted file mode 100644
index a53988d01..000000000
--- a/plugins/ai/src/frontend/terminal/panel-geometry.ts
+++ /dev/null
@@ -1,90 +0,0 @@
-/**
- * Where the docked assistant panel sits over a terminal. Same clamping rules
- * as the terminal's own toolbar, kept here so the panel owns its geometry.
- */
-
-export interface ToolbarPosition {
-  x: number;
-  y: number;
-}
-
-export interface RectLike {
-  left: number;
-  right: number;
-  top: number;
-  bottom: number;
-  width: number;
-  height: number;
-}
-
-const AI_PANEL_POSITION_STORAGE_KEY = "termix-terminal-ai-panel-position";
-const TOOLBAR_MARGIN = 8;
-const RECOVERY_SIZE = 44;
-
-function sanitizeToolbarPosition(value: unknown): ToolbarPosition {
-  if (!value || typeof value !== "object") return { x: 0, y: 0 };
-  const candidate = value as Partial<ToolbarPosition>;
-  return Number.isFinite(candidate.x) && Number.isFinite(candidate.y)
-    ? { x: Number(candidate.x), y: Number(candidate.y) }
-    : { x: 0, y: 0 };
-}
-
-export function readStoredAiPanelPosition(): ToolbarPosition {
-  if (typeof window === "undefined") return { x: 0, y: 0 };
-  try {
-    return sanitizeToolbarPosition(
-      JSON.parse(
-        window.localStorage.getItem(AI_PANEL_POSITION_STORAGE_KEY) ?? "null",
-      ),
-    );
-  } catch {
-    return { x: 0, y: 0 };
-  }
-}
-
-export function persistAiPanelPosition(position: ToolbarPosition): void {
-  try {
-    window.localStorage.setItem(
-      AI_PANEL_POSITION_STORAGE_KEY,
-      JSON.stringify(sanitizeToolbarPosition(position)),
-    );
-  } catch {
-    // Storage may be unavailable in hardened browser contexts.
-  }
-}
-
-export function clampToolbarPosition(
-  position: ToolbarPosition,
-  toolbarRect: RectLike,
-  hostRect: RectLike,
-  renderedPosition: ToolbarPosition = position,
-): ToolbarPosition {
-  if (
-    !toolbarRect.width ||
-    !toolbarRect.height ||
-    !hostRect.width ||
-    !hostRect.height
-  )
-    return sanitizeToolbarPosition(position);
-  const left = hostRect.left + TOOLBAR_MARGIN;
-  const right = hostRect.right - TOOLBAR_MARGIN;
-  const top = hostRect.top + TOOLBAR_MARGIN;
-  const bottom = hostRect.bottom - TOOLBAR_MARGIN;
-  const baseLeft = toolbarRect.left - renderedPosition.x;
-  const baseRight = toolbarRect.right - renderedPosition.x;
-  const baseTop = toolbarRect.top - renderedPosition.y;
-  const baseBottom = toolbarRect.bottom - renderedPosition.y;
-  const clamp = (min: number, max: number, value: number) =>
-    Math.min(max, Math.max(min, value));
-  const xMin =
-    toolbarRect.width <= right - left
-      ? left - baseLeft
-      : left + RECOVERY_SIZE - baseRight;
-  const xMax = right - baseRight;
-  const yMin =
-    toolbarRect.height <= bottom - top
-      ? top - baseTop
-      : top + RECOVERY_SIZE - baseBottom;
-  const yMax = bottom - baseBottom;
-  return { x: clamp(xMin, xMax, position.x), y: clamp(yMin, yMax, position.y) };
-}
diff --git a/plugins/ai/src/frontend/terminal/terminal-slot-types.ts b/plugins/ai/src/frontend/terminal/terminal-slot-types.ts
deleted file mode 100644
index 75f98ff1e..000000000
--- a/plugins/ai/src/frontend/terminal/terminal-slot-types.ts
+++ /dev/null
@@ -1,31 +0,0 @@
-/**
- * What the ssh-terminal plugin hands its slots, as that plugin documents it.
- * Kept as a local copy: a plugin never imports another plugin's source.
- */
-
-interface TerminalHost {
-  id: number | string;
-  name?: string;
-  ip?: string;
-  pluginSettings?: Record<string, Record<string, unknown> | undefined>;
-  [key: string]: unknown;
-}
-
-/** What a "terminal.toolbar" action is invoked with. */
-export interface TerminalSlotApi {
-  host: TerminalHost | undefined;
-  getBufferText: () => string;
-  sessionId: () => string | null;
-  openSidePanel: (panelId: string, props?: Record<string, unknown>) => void;
-  runCommand: (command: string) => void;
-}
-
-/** What a "terminal.sidePanel" component is rendered with. */
-export interface TerminalSidePanelProps {
-  host: TerminalHost | undefined;
-  hostId: number | undefined;
-  hostLabel: string;
-  panelProps: Record<string, unknown>;
-  onClose: () => void;
-  onRunInTerminal: (command: string) => void;
-}
diff --git a/plugins/ai/src/frontend/transcript.ts b/plugins/ai/src/frontend/transcript.ts
deleted file mode 100644
index 8bc4c21ed..000000000
--- a/plugins/ai/src/frontend/transcript.ts
+++ /dev/null
@@ -1,82 +0,0 @@
-import type { AiProposal } from "./ai-api";
-import type { StreamState, ToolActivity } from "./use-ai-stream";
-
-/** A finished part of the conversation, kept after the stream resets. */
-export type HistoryEntry =
-  | { kind: "message"; role: "user" | "assistant"; content: string }
-  | { kind: "tool"; tool: ToolActivity };
-
-/** One entry in the rendered conversation, in the order it happened. */
-export type TimelineItem =
-  | {
-      kind: "message";
-      key: string;
-      role: "user" | "assistant";
-      content: string;
-    }
-  /** live is false for a past run's step, which can never still be running. */
-  | { kind: "tool"; key: string; tool: ToolActivity; live: boolean }
-  | { kind: "proposal"; key: string; proposal: AiProposal };
-
-export function userEntry(content: string): HistoryEntry {
-  return { kind: "message", role: "user", content };
-}
-
-/**
- * What a finished run leaves in the transcript: its tool steps, then its
- * reply. Tool ids are only unique within one run, so they get a run prefix.
- */
-export function finishedRunEntries(
-  runId: number,
-  tools: ToolActivity[],
-  reply: string,
-): HistoryEntry[] {
-  const entries: HistoryEntry[] = tools.map((tool) => ({
-    kind: "tool",
-    tool: { ...tool, id: `run-${runId}-${tool.id}` },
-  }));
-  if (reply)
-    entries.push({ kind: "message", role: "assistant", content: reply });
-  return entries;
-}
-
-/** Past runs, then the run in progress, then its proposals. */
-export function buildTimeline(
-  history: HistoryEntry[],
-  state: Pick<StreamState, "tools" | "assistantText">,
-  proposals: AiProposal[],
-): TimelineItem[] {
-  const timeline: TimelineItem[] = history.map((entry, index) =>
-    entry.kind === "tool"
-      ? { kind: "tool", key: entry.tool.id, tool: entry.tool, live: false }
-      : {
-          kind: "message",
-          key: `history-${index}`,
-          role: entry.role,
-          content: entry.content,
-        },
-  );
-
-  for (const tool of state.tools) {
-    timeline.push({ kind: "tool", key: tool.id, tool, live: true });
-  }
-
-  if (state.assistantText) {
-    timeline.push({
-      kind: "message",
-      key: "streaming",
-      role: "assistant",
-      content: state.assistantText,
-    });
-  }
-
-  for (const proposal of proposals) {
-    timeline.push({
-      kind: "proposal",
-      key: `proposal-${proposal.id}`,
-      proposal,
-    });
-  }
-
-  return timeline;
-}
diff --git a/plugins/ai/src/frontend/use-ai-stream.ts b/plugins/ai/src/frontend/use-ai-stream.ts
deleted file mode 100644
index 1edf59a5f..000000000
--- a/plugins/ai/src/frontend/use-ai-stream.ts
+++ /dev/null
@@ -1,240 +0,0 @@
-import { getErrorMessage } from "./errors";
-import { useCallback, useRef, useState } from "react";
-import { aiApp } from "./app-ref";
-import type { AiProposal } from "./ai-api";
-
-/**
- * Drives the chat stream.
- *
- * EventSource cannot POST, and the request carries a message body, so this
- * reads the SSE frames off a fetch response by hand.
- */
-
-export interface ToolActivity {
-  id: string;
-  name: string;
-  arguments: Record<string, unknown>;
-  result?: unknown;
-}
-
-export interface StreamState {
-  streaming: boolean;
-  assistantText: string;
-  tools: ToolActivity[];
-  proposals: AiProposal[];
-  error: string | null;
-  conversationId: number | null;
-}
-
-const INITIAL: StreamState = {
-  streaming: false,
-  assistantText: "",
-  tools: [],
-  proposals: [],
-  error: null,
-  conversationId: null,
-};
-
-export function useAiStream() {
-  const [state, setState] = useState<StreamState>(INITIAL);
-  const abortRef = useRef<AbortController | null>(null);
-
-  const reset = useCallback(() => {
-    setState(INITIAL);
-  }, []);
-
-  // The run's own cleanup clears abortRef, after it has handed its steps over.
-  const stop = useCallback(() => {
-    abortRef.current?.abort();
-    setState((prev) => ({ ...prev, streaming: false }));
-  }, []);
-
-  const send = useCallback(
-    async (input: {
-      message: string;
-      providerId: number;
-      model?: string;
-      conversationId?: number | null;
-      activeTab?: string | null;
-      /**
-       * Called however the run ends, with its steps, which are then cleared
-       * from the live state. Keeping them is up to the caller.
-       */
-      onComplete?: (
-        conversationId: number | null,
-        reply: string,
-        tools: ToolActivity[],
-      ) => void;
-    }) => {
-      abortRef.current?.abort();
-      const controller = new AbortController();
-      abortRef.current = controller;
-
-      setState({
-        streaming: true,
-        assistantText: "",
-        tools: [],
-        proposals: [],
-        error: null,
-        conversationId: input.conversationId ?? null,
-      });
-
-      let conversationId = input.conversationId ?? null;
-      let replyText = "";
-      let toolSequence = 0;
-      const runTools: ToolActivity[] = [];
-
-      const finish = (error?: string | null) => {
-        // A newer send took over; this run's state is already gone.
-        if (abortRef.current !== controller) return;
-        input.onComplete?.(conversationId, replyText, runTools);
-        setState((prev) => ({
-          ...prev,
-          streaming: false,
-          assistantText: "",
-          tools: [],
-          ...(error ? { error } : {}),
-        }));
-      };
-
-      try {
-        const response = await aiApp().fetch("chat/stream", {
-          method: "POST",
-          headers: { "Content-Type": "application/json" },
-          signal: controller.signal,
-          body: JSON.stringify({
-            message: input.message,
-            providerId: input.providerId,
-            model: input.model,
-            conversationId: input.conversationId ?? undefined,
-            activeTab: input.activeTab ?? undefined,
-          }),
-        });
-
-        if (!response.ok) {
-          let message = "The assistant could not be reached";
-          try {
-            message = (await response.json()).error ?? message;
-          } catch {
-            // Keep the generic message.
-          }
-          setState((prev) => ({ ...prev, streaming: false, error: message }));
-          return;
-        }
-
-        const reader = response.body?.getReader();
-        if (!reader) {
-          setState((prev) => ({
-            ...prev,
-            streaming: false,
-            error: "The assistant returned an empty response",
-          }));
-          return;
-        }
-
-        const decoder = new TextDecoder();
-        let buffer = "";
-
-        while (true) {
-          const { done, value } = await reader.read();
-          if (done) break;
-
-          buffer += decoder.decode(value, { stream: true });
-
-          let newlineIndex = buffer.indexOf("\n");
-          while (newlineIndex !== -1) {
-            const line = buffer.slice(0, newlineIndex).trim();
-            buffer = buffer.slice(newlineIndex + 1);
-            newlineIndex = buffer.indexOf("\n");
-
-            if (!line.startsWith("data:")) continue;
-
-            let event: any;
-            try {
-              event = JSON.parse(line.slice(5).trim());
-            } catch {
-              continue;
-            }
-
-            if (event.type === "conversation") {
-              conversationId = event.conversationId;
-              setState((prev) => ({
-                ...prev,
-                conversationId: event.conversationId,
-              }));
-            } else if (event.type === "token") {
-              replyText += event.text;
-              setState((prev) => ({
-                ...prev,
-                assistantText: prev.assistantText + event.text,
-              }));
-            } else if (event.type === "tool_call") {
-              // The id is assigned here rather than inside the updater: React
-              // may run an updater more than once, and deriving the id from
-              // prev.tools.length appended a duplicate entry that no result
-              // could ever match, leaving it stuck on "running".
-              const activityId = `tool-${toolSequence++}`;
-              runTools.push({
-                id: activityId,
-                name: event.name,
-                arguments: event.arguments ?? {},
-              });
-              setState((prev) => ({
-                ...prev,
-                tools: [
-                  ...prev.tools,
-                  {
-                    id: activityId,
-                    name: event.name,
-                    arguments: event.arguments ?? {},
-                  },
-                ],
-              }));
-            } else if (event.type === "tool_result") {
-              for (let i = runTools.length - 1; i >= 0; i -= 1) {
-                if (
-                  runTools[i].name === event.name &&
-                  !("result" in runTools[i])
-                ) {
-                  runTools[i] = { ...runTools[i], result: event.result };
-                  break;
-                }
-              }
-              setState((prev) => {
-                const tools = [...prev.tools];
-                // Attach to the most recent call of this tool awaiting a result.
-                for (let i = tools.length - 1; i >= 0; i -= 1) {
-                  if (tools[i].name === event.name && !("result" in tools[i])) {
-                    tools[i] = { ...tools[i], result: event.result };
-                    break;
-                  }
-                }
-                return { ...prev, tools };
-              });
-            } else if (event.type === "proposal") {
-              setState((prev) => ({
-                ...prev,
-                proposals: [...prev.proposals, event.proposal],
-              }));
-            } else if (event.type === "error") {
-              setState((prev) => ({ ...prev, error: event.message }));
-            }
-          }
-        }
-
-        finish();
-      } catch (error) {
-        finish(
-          controller.signal.aborted
-            ? null
-            : getErrorMessage(error, "The assistant stopped unexpectedly"),
-        );
-      } finally {
-        if (abortRef.current === controller) abortRef.current = null;
-      }
-    },
-    [],
-  );
-
-  return { state, send, stop, reset, setState };
-}
diff --git a/plugins/ai/src/frontend/useMentions.ts b/plugins/ai/src/frontend/useMentions.ts
deleted file mode 100644
index 5d3e9475e..000000000
--- a/plugins/ai/src/frontend/useMentions.ts
+++ /dev/null
@@ -1,114 +0,0 @@
-import { useCallback, useEffect, useMemo, useState } from "react";
-import { invokeAction, useHosts } from "@termix/plugin-sdk/frontend";
-
-/**
- * Backs the @-mention picker in the composer.
- *
- * A mention is only ever a name the assistant reads in the message text; it
- * does not grant access to anything. The assistant still has to call a read
- * tool to see the referenced item, so every access stays visible in the
- * transcript rather than being silently attached to the prompt.
- */
-
-export type MentionKind = "host" | "snippet" | "automation";
-
-export interface MentionItem {
-  kind: MentionKind;
-  id: number;
-  label: string;
-  detail?: string;
-}
-
-/** Extracts the "@partial" the caret currently sits in, if any. */
-export function activeMentionQuery(
-  value: string,
-  caret: number,
-): { query: string; start: number } | null {
-  const before = value.slice(0, caret);
-  const at = before.lastIndexOf("@");
-  if (at === -1) return null;
-
-  // Only trigger at a word boundary, so an email address does not open it.
-  if (at > 0 && !/\s/.test(before[at - 1])) return null;
-
-  const query = before.slice(at + 1);
-  if (/\s/.test(query)) return null;
-
-  return { query, start: at };
-}
-
-/**
- * Another plugin's list through its action, or nothing when it is not
- * running, so the assistant works without it and never imports its code.
- */
-async function listFromAction(
-  actionId: string,
-): Promise<{ id: number; name: string }[]> {
-  const result = await invokeAction(actionId);
-  return Array.isArray(result)
-    ? (result as { id: number; name: string }[])
-    : [];
-}
-
-export function useMentions(enabled: boolean) {
-  const [items, setItems] = useState<MentionItem[]>([]);
-  const { hosts } = useHosts();
-
-  useEffect(() => {
-    if (!enabled) return;
-    let cancelled = false;
-
-    (async () => {
-      const [snippets, automations] = await Promise.allSettled([
-        listFromAction("snippets.list"),
-        listFromAction("automations.list"),
-      ]);
-      if (cancelled) return;
-
-      const collected: MentionItem[] = hosts.map((host) => ({
-        kind: "host" as const,
-        id: Number(host.id),
-        label: host.name || host.ip,
-        detail: host.ip,
-      }));
-
-      if (snippets.status === "fulfilled") {
-        for (const snippet of snippets.value) {
-          collected.push({
-            kind: "snippet",
-            id: snippet.id,
-            label: snippet.name,
-          });
-        }
-      }
-      if (automations.status === "fulfilled") {
-        for (const automation of automations.value) {
-          collected.push({
-            kind: "automation",
-            id: automation.id,
-            label: automation.name,
-          });
-        }
-      }
-
-      setItems(collected);
-    })();
-
-    return () => {
-      cancelled = true;
-    };
-  }, [enabled, hosts]);
-
-  const search = useCallback(
-    (query: string): MentionItem[] => {
-      const needle = query.trim().toLowerCase();
-      const matches = needle
-        ? items.filter((item) => item.label.toLowerCase().includes(needle))
-        : items;
-      return matches.slice(0, 8);
-    },
-    [items],
-  );
-
-  return useMemo(() => ({ items, search }), [items, search]);
-}
diff --git a/plugins/ai/tests/backend/activate.test.ts b/plugins/ai/tests/backend/activate.test.ts
deleted file mode 100644
index fbe040cec..000000000
--- a/plugins/ai/tests/backend/activate.test.ts
+++ /dev/null
@@ -1,73 +0,0 @@
-import express from "express";
-import { afterEach, describe, expect, it } from "vitest";
-import { PluginCapabilityError } from "@termix/plugin-sdk/backend";
-import {
-  createMockCtx,
-  createTestDb,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import { activate } from "../../src/backend/index.js";
-import { manifest, pluginDir, startServer, type TestServer } from "./helpers";
-
-let db: TestDb | null = null;
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  db?.close();
-  db = null;
-  await server?.close();
-  server = null;
-});
-
-describe("ai activate", () => {
-  it.each(["db:own", "network:serve"])(
-    "fails closed without %s",
-    async (capability) => {
-      db = await createTestDb(pluginDir);
-      const mock = createMockCtx({
-        pluginId: manifest.id,
-        manifest,
-        capabilities: manifest.capabilities.filter((c) => c !== capability),
-        db: db.database,
-        router: () => express.Router(),
-      });
-      await expect(activate(mock.ctx)).rejects.toBeInstanceOf(
-        PluginCapabilityError,
-      );
-    },
-  );
-
-  it("cannot store a provider key without secrets:own", async () => {
-    db = await createTestDb(pluginDir);
-    const mock = createMockCtx({
-      pluginId: manifest.id,
-      manifest,
-      capabilities: manifest.capabilities.filter((c) => c !== "secrets:own"),
-      db: db.database,
-      router: () => express.Router(),
-    });
-    await activate(mock.ctx);
-    await expect(
-      mock.ctx.secrets.set("provider:1", "k"),
-    ).rejects.toBeInstanceOf(PluginCapabilityError);
-  });
-
-  it("offers the api key and the host import normalizer", async () => {
-    server = await startServer();
-    await server.enableFor("user-1");
-    await server.request("POST", "/providers", {
-      body: { providerType: "openai", label: "Work", apiKey: "sk-shared" },
-    });
-
-    const normalizer = server.mock.ctx.registry.consume<
-      (raw: Record<string, unknown>) => Record<string, unknown> | null
-    >("ai.hostImportNormalizer");
-    expect(normalizer?.({ enableAiAssistant: true })).toEqual({
-      enableAiAssistant: true,
-    });
-    expect(
-      normalizer?.({ pluginSettings: { ai: { enableAiAssistant: false } } }),
-    ).toEqual({ enableAiAssistant: false });
-    expect(normalizer?.({ name: "x" })).toBeNull();
-  });
-});
diff --git a/plugins/ai/tests/backend/command-history-service.test.ts b/plugins/ai/tests/backend/command-history-service.test.ts
deleted file mode 100644
index 0c3e57a26..000000000
--- a/plugins/ai/tests/backend/command-history-service.test.ts
+++ /dev/null
@@ -1,60 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import {
-  readService,
-  requireService,
-  serviceAvailable,
-  SERVICE,
-} from "../../src/backend/services.js";
-
-function services(provided: Record<string, object>) {
-  return {
-    providers: (service: string) => (service in provided ? [""] : []),
-    get: vi.fn((service: string) => provided[service]),
-  } as never;
-}
-
-describe("optional services", () => {
-  it("reads the user's history through terminal.history", async () => {
-    const list = vi.fn(async () => [
-      { command: "ls", executedAt: "2026-01-01T00:00:00.000Z" },
-    ]);
-    const history = await readService(
-      services({ [SERVICE.history]: { list } }),
-      SERVICE.history,
-      (terminal) => terminal.list(4, 25),
-    );
-
-    expect(list).toHaveBeenCalledWith(4, 25);
-    expect(history).toEqual([
-      { command: "ls", executedAt: "2026-01-01T00:00:00.000Z" },
-    ]);
-  });
-
-  it("answers null while the provider is off or refuses the user", async () => {
-    expect(
-      await readService(services({}), SERVICE.history, (terminal) =>
-        terminal.list(4, 25),
-      ),
-    ).toBeNull();
-
-    const refusing = {
-      list: async () => {
-        throw new Error("Missing permission");
-      },
-    };
-    expect(
-      await readService(
-        services({ [SERVICE.history]: refusing }),
-        SERVICE.history,
-        (terminal) => terminal.list(4, 25),
-      ),
-    ).toBeNull();
-  });
-
-  it("says which plugin is missing when a write needs it", () => {
-    expect(serviceAvailable(services({}), SERVICE.fleets)).toBe(false);
-    expect(() => requireService(services({}), SERVICE.fleets)).toThrow(
-      "The fleets plugin is not available",
-    );
-  });
-});
diff --git a/plugins/ai/tests/backend/context.test.ts b/plugins/ai/tests/backend/context.test.ts
deleted file mode 100644
index 6a6d587be..000000000
--- a/plugins/ai/tests/backend/context.test.ts
+++ /dev/null
@@ -1,47 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { buildSystemPrompt } from "../../src/backend/context.js";
-
-const BASE = { hostCount: 3, allowReadOnlyCommands: false };
-
-describe("buildSystemPrompt", () => {
-  it("tells the assistant to stay inside what was asked", () => {
-    // Without these the assistant answered "what is running on this server"
-    // by also proposing a monitoring script and an automation nobody wanted.
-    const prompt = buildSystemPrompt(BASE);
-
-    expect(prompt).toContain("nothing beyond it");
-    expect(prompt).toMatch(/Read, then report\. Do not propose anything\./);
-    expect(prompt).toMatch(/no monitoring automations, no scripts/);
-    expect(prompt).toMatch(/One request means one proposal at most/);
-  });
-
-  it("states that it proposes rather than applies", () => {
-    const prompt = buildSystemPrompt(BASE);
-    expect(prompt).toContain("cannot change anything directly");
-    expect(prompt).toContain("Never claim you have done something");
-  });
-
-  it("never claims credential access", () => {
-    const prompt = buildSystemPrompt(BASE);
-    expect(prompt).toMatch(/no access to passwords, SSH keys, API keys/);
-  });
-
-  it("mentions read-only commands only when the user opted in", () => {
-    expect(buildSystemPrompt(BASE)).not.toMatch(/read-only diagnostic/);
-    expect(buildSystemPrompt({ ...BASE, allowReadOnlyCommands: true })).toMatch(
-      /read-only diagnostic/,
-    );
-  });
-
-  it("pluralises the host count", () => {
-    expect(buildSystemPrompt({ ...BASE, hostCount: 1 })).toContain("1 host ");
-    expect(buildSystemPrompt({ ...BASE, hostCount: 2 })).toContain("2 hosts");
-  });
-
-  it("includes the active tab only when there is one", () => {
-    expect(buildSystemPrompt(BASE)).not.toContain("currently looking at");
-    expect(buildSystemPrompt({ ...BASE, activeTab: "terminal" })).toContain(
-      "currently looking at: terminal",
-    );
-  });
-});
diff --git a/plugins/ai/tests/backend/egress.test.ts b/plugins/ai/tests/backend/egress.test.ts
deleted file mode 100644
index 551aaa611..000000000
--- a/plugins/ai/tests/backend/egress.test.ts
+++ /dev/null
@@ -1,122 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  DEFAULT_PRIVATE_ALLOWLIST,
-  evaluateEgress,
-  isPrivateDestination,
-  parseAllowlist,
-} from "../../src/backend/egress.js";
-
-/**
- * The rule that lets a self-hosted Ollama work without turning the backend
- * into an authenticated probe of its own network: private destinations are
- * refused unless an admin named the host.
- */
-describe("isPrivateDestination", () => {
-  it("recognises loopback and private ranges", () => {
-    for (const url of [
-      "http://localhost:11434",
-      "http://127.0.0.1:11434",
-      "http://10.0.0.5:11434",
-      "http://192.168.1.10:11434",
-      "http://172.16.4.4:11434",
-      "http://169.254.169.254/latest/meta-data",
-      "http://[::1]:11434",
-    ]) {
-      expect(isPrivateDestination(url), url).toBe(true);
-    }
-  });
-
-  it("treats public hosts as public", () => {
-    for (const url of [
-      "https://api.openai.com/v1",
-      "https://api.anthropic.com",
-      "https://generativelanguage.googleapis.com",
-      "http://8.8.8.8",
-    ]) {
-      expect(isPrivateDestination(url), url).toBe(false);
-    }
-  });
-});
-
-describe("evaluateEgress", () => {
-  it("allows public destinations without an allowlist entry", () => {
-    const decision = evaluateEgress("https://api.openai.com/v1", []);
-    expect(decision.allowed).toBe(true);
-    expect(decision.isPrivate).toBe(false);
-  });
-
-  it("refuses a private destination that is not allowlisted", () => {
-    const decision = evaluateEgress("http://192.168.1.50:11434", ["localhost"]);
-    expect(decision.allowed).toBe(false);
-    expect(decision.isPrivate).toBe(true);
-    expect(decision.reason).toContain("allowlist");
-  });
-
-  it("allows a private destination once its host is allowlisted", () => {
-    const decision = evaluateEgress("http://localhost:11434", [
-      "localhost",
-      "127.0.0.1",
-    ]);
-    expect(decision.allowed).toBe(true);
-    expect(decision.isPrivate).toBe(true);
-  });
-
-  it.each(["llm.internal", "host.docker.internal"])(
-    "routes allowlisted private DNS name %s through the private path",
-    (host) => {
-      expect(evaluateEgress(`http://${host}:8000/v1`, [host])).toEqual({
-        allowed: true,
-        isPrivate: true,
-      });
-    },
-  );
-
-  it("matches the allowlist case-insensitively", () => {
-    expect(
-      evaluateEgress("http://LOCALHOST:11434", ["localhost"]).allowed,
-    ).toBe(true);
-  });
-
-  it("does not let one allowlisted host authorise another", () => {
-    // A cloud metadata endpoint is the classic target, so an allowlist for
-    // localhost must not open 169.254.169.254.
-    const decision = evaluateEgress("http://169.254.169.254/latest/meta-data", [
-      "localhost",
-      "127.0.0.1",
-    ]);
-    expect(decision.allowed).toBe(false);
-  });
-
-  it("refuses non-http protocols and embedded credentials", () => {
-    expect(evaluateEgress("file:///etc/passwd", []).allowed).toBe(false);
-    expect(evaluateEgress("ftp://example.com", []).allowed).toBe(false);
-    expect(evaluateEgress("https://user:pass@api.openai.com", []).allowed).toBe(
-      false,
-    );
-  });
-
-  it("refuses a malformed url", () => {
-    expect(evaluateEgress("not a url", []).allowed).toBe(false);
-  });
-});
-
-describe("parseAllowlist", () => {
-  it("falls back to the defaults when the setting is not text", () => {
-    expect(parseAllowlist(null)).toEqual(DEFAULT_PRIVATE_ALLOWLIST);
-    expect(parseAllowlist(undefined)).toEqual(DEFAULT_PRIVATE_ALLOWLIST);
-  });
-
-  it("reads one host per line, normalised, skipping anything that is not a host", () => {
-    expect(
-      parseAllowlist(
-        [" LocalHost ", "", "10.0.0.5", "http://x/y", "10.0.0.5"].join("\n"),
-      ),
-    ).toEqual(["localhost", "10.0.0.5"]);
-  });
-
-  it("honours a deliberately empty allowlist", () => {
-    // An admin clearing the list must actually block everything private,
-    // not silently get the defaults back.
-    expect(parseAllowlist("")).toEqual([]);
-  });
-});
diff --git a/plugins/ai/tests/backend/engine.test.ts b/plugins/ai/tests/backend/engine.test.ts
deleted file mode 100644
index a86d42049..000000000
--- a/plugins/ai/tests/backend/engine.test.ts
+++ /dev/null
@@ -1,278 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
-import type { ChatChunk } from "../../src/backend/providers/types.js";
-
-const streamChat = vi.fn();
-const handler = vi.fn();
-
-vi.mock("../../src/backend/providers/registry.js", () => ({
-  getAdapter: () => ({ streamChat, listModels: async () => [] }),
-}));
-
-const { runAgent } = await import("../../src/backend/engine.js");
-
-function chunks(...values: ChatChunk[]) {
-  return (async function* () {
-    for (const value of values) yield value;
-  })();
-}
-
-const BASE = {
-  config: { providerType: "ollama" as const, fetch: vi.fn() },
-  model: "test",
-  system: "system",
-  context: {
-    userId: "user-1",
-    conversationId: 1,
-    allowReadOnlyCommands: false,
-    deps: {} as never,
-  },
-  // Only what was offered can run, so this is the whole catalog here.
-  tools: [
-    {
-      name: "list_hosts",
-      description: "List hosts",
-      category: "read" as const,
-      parameters: { type: "object", properties: {} },
-      handler,
-    },
-  ],
-};
-
-async function collect(history: any[] = []) {
-  const events: any[] = [];
-  for await (const event of runAgent({ ...BASE, history })) {
-    events.push(event);
-  }
-  return events;
-}
-
-describe("runAgent", () => {
-  beforeEach(() => {
-    vi.clearAllMocks();
-  });
-
-  it("streams text and finishes when no tools are called", async () => {
-    streamChat.mockReturnValueOnce(
-      chunks({ type: "text", text: "hello" }, { type: "done" }),
-    );
-
-    const events = await collect();
-
-    expect(events.filter((e) => e.type === "token")).toHaveLength(1);
-    expect(events.at(-1).type).toBe("done");
-  });
-
-  it("runs a known tool and feeds the result back", async () => {
-    handler.mockResolvedValue({ hosts: [{ id: 1, name: "web-1" }] });
-    streamChat
-      .mockReturnValueOnce(
-        chunks(
-          {
-            type: "tool_call",
-            call: { id: "c1", name: "list_hosts", arguments: {} },
-          },
-          { type: "done" },
-        ),
-      )
-      .mockReturnValueOnce(
-        chunks({ type: "text", text: "ok" }, { type: "done" }),
-      );
-
-    const events = await collect();
-
-    expect(handler).toHaveBeenCalledOnce();
-    expect(events.some((e) => e.type === "tool_result")).toBe(true);
-    expect(streamChat).toHaveBeenCalledTimes(2);
-  });
-
-  it("refuses a tool that is not in the catalog", async () => {
-    streamChat
-      .mockReturnValueOnce(
-        chunks(
-          {
-            type: "tool_call",
-            call: { id: "c1", name: "read_credentials", arguments: {} },
-          },
-          { type: "done" },
-        ),
-      )
-      .mockReturnValueOnce(
-        chunks({ type: "text", text: "ok" }, { type: "done" }),
-      );
-
-    const events = await collect();
-
-    // A model can emit any name it likes; only the catalog decides what runs.
-    expect(handler).not.toHaveBeenCalled();
-    const result = events.find((e) => e.type === "tool_result");
-    expect(JSON.stringify(result.result)).toContain("Unknown tool");
-  });
-
-  it("surfaces a handler failure without ending the run", async () => {
-    handler.mockRejectedValue(new Error("database is down"));
-    streamChat
-      .mockReturnValueOnce(
-        chunks(
-          {
-            type: "tool_call",
-            call: { id: "c1", name: "list_hosts", arguments: {} },
-          },
-          { type: "done" },
-        ),
-      )
-      .mockReturnValueOnce(
-        chunks({ type: "text", text: "ok" }, { type: "done" }),
-      );
-
-    const events = await collect();
-
-    const result = events.find((e) => e.type === "tool_result");
-    expect(JSON.stringify(result.result)).toContain("database is down");
-    expect(events.at(-1).type).toBe("done");
-  });
-
-  it("closes the tool call when a tool returns a proposal", async () => {
-    // Without a matching tool_result the call rendered as permanently
-    // running, even though the work was done and awaiting the user.
-    handler.mockResolvedValue({
-      __proposal: true,
-      kind: "propose_create_host",
-      summary: "Add host web-1",
-      payload: {},
-    });
-    streamChat
-      .mockReturnValueOnce(
-        chunks(
-          {
-            type: "tool_call",
-            call: { id: "c1", name: "list_hosts", arguments: {} },
-          },
-          { type: "done" },
-        ),
-      )
-      .mockReturnValueOnce(
-        chunks({ type: "text", text: "ok" }, { type: "done" }),
-      );
-
-    const events = await collect();
-
-    const callIndex = events.findIndex((e) => e.type === "tool_call");
-    const resultIndex = events.findIndex((e) => e.type === "tool_result");
-    const proposalIndex = events.findIndex((e) => e.type === "proposal");
-
-    expect(resultIndex).toBeGreaterThan(callIndex);
-    expect(proposalIndex).toBeGreaterThan(resultIndex);
-    expect(events[resultIndex]).toMatchObject({
-      name: "list_hosts",
-      result: { status: "awaiting_user_approval" },
-    });
-  });
-
-  it("reports a provider failure as an error and stops", async () => {
-    streamChat.mockImplementationOnce(() => {
-      throw new Error("provider unreachable");
-    });
-
-    const events = await collect();
-
-    expect(events).toHaveLength(1);
-    expect(events[0]).toMatchObject({
-      type: "error",
-      message: "provider unreachable",
-    });
-  });
-
-  it("stops after too many tool turns", async () => {
-    handler.mockResolvedValue({ ok: true });
-    streamChat.mockImplementation(() =>
-      chunks(
-        {
-          type: "tool_call",
-          call: { id: "c", name: "list_hosts", arguments: {} },
-        },
-        { type: "done" },
-      ),
-    );
-
-    const events = await collect();
-
-    // A model that never stops calling tools must not spin forever.
-    expect(events.at(-1)).toMatchObject({ type: "error" });
-    expect(streamChat.mock.calls.length).toBeLessThanOrEqual(8);
-  });
-
-  it("emits every message it adds so the caller can store the run", async () => {
-    handler.mockResolvedValue({ hosts: [] });
-    streamChat
-      .mockReturnValueOnce(
-        chunks(
-          { type: "text", text: "Looking" },
-          {
-            type: "tool_call",
-            call: { id: "c1", name: "list_hosts", arguments: {} },
-          },
-          { type: "done" },
-        ),
-      )
-      .mockReturnValueOnce(
-        chunks({ type: "text", text: "none" }, { type: "done" }),
-      );
-
-    const stored = (await collect())
-      .filter((e) => e.type === "message")
-      .map((e) => e.message);
-
-    expect(stored).toEqual([
-      {
-        role: "assistant",
-        content: "Looking",
-        toolCalls: [{ id: "c1", name: "list_hosts", arguments: {} }],
-      },
-      {
-        role: "tool",
-        content: JSON.stringify({ hosts: [] }),
-        toolCallId: "c1",
-        toolName: "list_hosts",
-      },
-      { role: "assistant", content: "none" },
-    ]);
-  });
-
-  it("explains a stream the provider cut off", async () => {
-    streamChat.mockReturnValueOnce(
-      (async function* () {
-        yield { type: "text", text: "par" } as ChatChunk;
-        throw Object.assign(new TypeError("terminated"), {
-          cause: Object.assign(new Error("Body Timeout Error"), {
-            code: "UND_ERR_BODY_TIMEOUT",
-          }),
-        });
-      })(),
-    );
-
-    const events = await collect();
-    expect(events.at(-1).type).toBe("error");
-    expect(events.at(-1).message).toMatch(/stopped sending data/);
-  });
-
-  it("stays quiet when the user stopped it", async () => {
-    const controller = new AbortController();
-    streamChat.mockReturnValueOnce(
-      (async function* () {
-        yield { type: "text", text: "" } as ChatChunk;
-        controller.abort();
-        throw new Error("This operation was aborted");
-      })(),
-    );
-
-    const events: any[] = [];
-    for await (const event of runAgent({
-      ...BASE,
-      history: [],
-      signal: controller.signal,
-    })) {
-      events.push(event);
-    }
-    expect(events.some((e) => e.type === "error")).toBe(false);
-  });
-});
diff --git a/plugins/ai/tests/backend/gating.test.ts b/plugins/ai/tests/backend/gating.test.ts
deleted file mode 100644
index 26c971090..000000000
--- a/plugins/ai/tests/backend/gating.test.ts
+++ /dev/null
@@ -1,127 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import {
-  createAiGate,
-  isAiGloballyEnabled,
-  readPrivateAllowlist,
-  resolveAiAccess,
-} from "../../src/backend/gating.js";
-import { DEFAULT_PRIVATE_ALLOWLIST } from "../../src/backend/egress.js";
-
-/** The plugin's settings as ctx.settings reads them: admin, then per user. */
-function settings(
-  admin: Record<string, unknown>,
-  user: Record<string, unknown> = {},
-) {
-  return {
-    get: vi.fn(async (key: string) => admin[key]) as never,
-    getUser: vi.fn(async (_userId: string, key: string) => user[key]) as never,
-  };
-}
-
-describe("AI gating", () => {
-  it("is off until an admin turns it on, so an upgrade enables nothing", async () => {
-    expect(await isAiGloballyEnabled(settings({}))).toBe(false);
-    expect(await isAiGloballyEnabled(settings({ globallyEnabled: true }))).toBe(
-      true,
-    );
-  });
-
-  it("blocks everyone when the admin switch is off", async () => {
-    const reader = settings(
-      { globallyEnabled: false },
-      { enabled: true, allowReadOnlyCommands: true },
-    );
-
-    const access = await resolveAiAccess(reader, "user-1");
-
-    expect(access).toEqual({ enabled: false, allowReadOnlyCommands: false });
-    // The kill switch short-circuits, so the user's choice is never read.
-    expect(reader.getUser).not.toHaveBeenCalled();
-  });
-
-  it("treats a user who never chose as not enabled", async () => {
-    const access = await resolveAiAccess(
-      settings({ globallyEnabled: true }),
-      "user-1",
-    );
-    expect(access.enabled).toBe(false);
-  });
-
-  it("allows only when both gates are open", async () => {
-    const access = await resolveAiAccess(
-      settings(
-        { globallyEnabled: true },
-        { enabled: true, allowReadOnlyCommands: true },
-      ),
-      "user-1",
-    );
-    expect(access).toEqual({ enabled: true, allowReadOnlyCommands: true });
-  });
-
-  it("keeps read-only commands off unless separately opted in", async () => {
-    const access = await resolveAiAccess(
-      settings({ globallyEnabled: true }, { enabled: true }),
-      "user-1",
-    );
-    expect(access.allowReadOnlyCommands).toBe(false);
-  });
-
-  it("reads the private endpoint list, with defaults when unset", async () => {
-    expect(await readPrivateAllowlist(settings({}))).toEqual(
-      DEFAULT_PRIVATE_ALLOWLIST,
-    );
-    expect(
-      await readPrivateAllowlist(
-        settings({ privateEndpoints: "ollama.lan\n10.0.0.5" }),
-      ),
-    ).toEqual(["ollama.lan", "10.0.0.5"]);
-  });
-});
-
-describe("createAiGate", () => {
-  function response() {
-    const res = {
-      statusCode: 200,
-      body: undefined as unknown,
-      status(code: number) {
-        res.statusCode = code;
-        return { json: (body: unknown) => (res.body = body) };
-      },
-    };
-    return res;
-  }
-
-  it("answers 401 without a user and 403 while the assistant is off", async () => {
-    const next = vi.fn();
-    const noUser = response();
-    await createAiGate(settings({ globallyEnabled: true }), () => undefined)(
-      {},
-      noUser,
-      next,
-    );
-    expect(noUser.statusCode).toBe(401);
-
-    const off = response();
-    await createAiGate(settings({ globallyEnabled: false }), () => "user-1")(
-      {},
-      off,
-      next,
-    );
-    expect(off.statusCode).toBe(403);
-    expect(next).not.toHaveBeenCalled();
-  });
-
-  it("passes an opted-in user through with their access attached", async () => {
-    const next = vi.fn();
-    const req: Parameters<ReturnType<typeof createAiGate>>[0] = {};
-    await createAiGate(
-      settings({ globallyEnabled: true }, { enabled: true }),
-      () => "user-1",
-    )(req, response(), next);
-    expect(next).toHaveBeenCalledWith();
-    expect(req.aiAccess).toEqual({
-      enabled: true,
-      allowReadOnlyCommands: false,
-    });
-  });
-});
diff --git a/plugins/ai/tests/backend/helpers.ts b/plugins/ai/tests/backend/helpers.ts
deleted file mode 100644
index 80dd6ec23..000000000
--- a/plugins/ai/tests/backend/helpers.ts
+++ /dev/null
@@ -1,181 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-export const manifest = manifestJson as unknown as PluginManifest;
-
-export const ALL_PERMISSIONS = [
-  "ai.use",
-  "ai.manage_providers",
-  "ai.apply_proposals",
-];
-
-export interface TestServer {
-  db: TestDb;
-  mock: MockPluginContext;
-  request: (
-    method: string,
-    path: string,
-    options?: { user?: string; body?: unknown },
-    // Route bodies vary per test; asserting on them is the point.
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any }>;
-  /** Turns the assistant on for the server and opts `userId` in. */
-  enableFor: (userId: string) => Promise<void>;
-  close: () => Promise<void>;
-}
-
-/**
- * The plugin activated against a real in-memory database, its router mounted
- * on an express app the way core mounts it: JSON parsed, the acting user set
- * from the request, everything else left to the plugin.
- */
-export async function startServer(
-  options: {
-    permissions?: string[];
-    services?: Record<string, object>;
-    fetch?: (url: string, init?: unknown) => Promise<Response>;
-  } = {},
-): Promise<TestServer> {
-  const db = await createTestDb(pluginDir);
-  for (const user of ["user-1", "user-2"]) {
-    db.sqlite
-      .prepare("INSERT INTO users (id, username) VALUES (?, ?)")
-      .run(user, user);
-  }
-
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    permissions: options.permissions ?? ALL_PERMISSIONS,
-    services: options.services,
-    fetch: options.fetch as never,
-    hosts: [
-      {
-        id: 1,
-        userId: "user-1",
-        name: "web-1",
-        ip: "10.0.0.1",
-        port: 22,
-        username: "root",
-        tags: "prod",
-        folder: null,
-        authType: "password",
-      },
-    ],
-  });
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") ?? undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    db,
-    mock,
-    async request(method, path, { user = "user-1", body: given } = {}) {
-      const body = method === "GET" ? undefined : given;
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        headers: {
-          "x-test-user": user,
-          ...(body !== undefined ? { "content-type": "application/json" } : {}),
-        },
-        body: body !== undefined ? JSON.stringify(body) : undefined,
-      });
-      const text = await response.text();
-      let parsed: unknown = null;
-      try {
-        parsed = text ? JSON.parse(text) : null;
-      } catch {
-        parsed = text;
-      }
-      return { status: response.status, body: parsed };
-    },
-    async enableFor(userId) {
-      await mock.ctx.settings.set("globallyEnabled", true);
-      await mock.ctx.settings.setUser(userId, "enabled", true);
-    },
-    async close() {
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-      db.close();
-    },
-  };
-}
-
-// The four tables as core's SQLite bootstrap created them before 2.9.0, with
-// the indexes performance-indexes.ts added.
-export const LEGACY_DDL = `
-  CREATE TABLE ai_providers (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-    provider_type TEXT NOT NULL,
-    label TEXT NOT NULL,
-    base_url TEXT,
-    api_key TEXT,
-    api_key_prefix TEXT,
-    default_model TEXT,
-    enabled INTEGER NOT NULL DEFAULT 1,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    UNIQUE(user_id, label)
-  );
-  CREATE TABLE ai_conversations (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-    title TEXT,
-    provider_id INTEGER,
-    model TEXT,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
-  );
-  CREATE TABLE ai_messages (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    conversation_id INTEGER NOT NULL REFERENCES ai_conversations(id) ON DELETE CASCADE,
-    role TEXT NOT NULL,
-    content TEXT NOT NULL DEFAULT '',
-    tool_calls TEXT,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
-  );
-  CREATE TABLE ai_proposals (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    conversation_id INTEGER NOT NULL REFERENCES ai_conversations(id) ON DELETE CASCADE,
-    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-    kind TEXT NOT NULL,
-    summary TEXT,
-    payload TEXT NOT NULL DEFAULT '{}',
-    status TEXT NOT NULL DEFAULT 'pending',
-    applied_at TEXT,
-    result_summary TEXT,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
-  );
-  CREATE UNIQUE INDEX idx_ai_providers_user_label ON ai_providers (user_id, label);
-  CREATE INDEX idx_ai_conversations_user ON ai_conversations (user_id, updated_at);
-  CREATE INDEX idx_ai_messages_conversation ON ai_messages (conversation_id, created_at);
-  CREATE INDEX idx_ai_proposals_user ON ai_proposals (user_id, status);
-  CREATE INDEX idx_ai_proposals_conversation ON ai_proposals (conversation_id);
-`;
diff --git a/plugins/ai/tests/backend/history.test.ts b/plugins/ai/tests/backend/history.test.ts
deleted file mode 100644
index 7daacfb6a..000000000
--- a/plugins/ai/tests/backend/history.test.ts
+++ /dev/null
@@ -1,116 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { toChatHistory, toStoredMessage } from "../../src/backend/history.js";
-
-const calls = [
-  { id: "c1", name: "list_hosts", arguments: {} },
-  { id: "c2", name: "get_host", arguments: { hostId: 1 } },
-];
-
-describe("toStoredMessage", () => {
-  it("keeps the answered call on a tool row", () => {
-    expect(
-      toStoredMessage({
-        role: "tool",
-        content: "{}",
-        toolCallId: "c1",
-        toolName: "list_hosts",
-      }),
-    ).toEqual({
-      role: "tool",
-      content: "{}",
-      toolCalls: JSON.stringify([{ id: "c1", name: "list_hosts" }]),
-    });
-  });
-
-  it("stores no tool calls for a plain reply", () => {
-    expect(toStoredMessage({ role: "assistant", content: "hi" })).toEqual({
-      role: "assistant",
-      content: "hi",
-      toolCalls: null,
-    });
-  });
-});
-
-describe("toChatHistory", () => {
-  it("round-trips a full run", () => {
-    const rows = [
-      { role: "user", content: "check", toolCalls: null },
-      toStoredMessage({ role: "assistant", content: "", toolCalls: calls }),
-      toStoredMessage({
-        role: "tool",
-        content: '{"hosts":[]}',
-        toolCallId: "c1",
-        toolName: "list_hosts",
-      }),
-      toStoredMessage({
-        role: "tool",
-        content: '{"host":{}}',
-        toolCallId: "c2",
-        toolName: "get_host",
-      }),
-      { role: "assistant", content: "done", toolCalls: null },
-    ];
-
-    expect(toChatHistory(rows)).toEqual([
-      { role: "user", content: "check" },
-      { role: "assistant", content: "", toolCalls: calls },
-      {
-        role: "tool",
-        content: '{"hosts":[]}',
-        toolCallId: "c1",
-        toolName: "list_hosts",
-      },
-      {
-        role: "tool",
-        content: '{"host":{}}',
-        toolCallId: "c2",
-        toolName: "get_host",
-      },
-      { role: "assistant", content: "done" },
-    ]);
-  });
-
-  it("fills in results for calls a cut off run never answered", () => {
-    const rows = [
-      { role: "user", content: "check", toolCalls: null },
-      toStoredMessage({ role: "assistant", content: "", toolCalls: calls }),
-      toStoredMessage({
-        role: "tool",
-        content: "{}",
-        toolCallId: "c1",
-        toolName: "list_hosts",
-      }),
-      { role: "user", content: "continue", toolCalls: null },
-    ];
-
-    const history = toChatHistory(rows);
-    expect(history.map((m) => m.role)).toEqual([
-      "user",
-      "assistant",
-      "tool",
-      "tool",
-      "user",
-    ]);
-    expect(history[3]).toMatchObject({
-      toolCallId: "c2",
-      toolName: "get_host",
-    });
-    expect(JSON.parse(history[3].content).error).toMatch(/interrupted/);
-  });
-
-  it("repairs a legacy row saved with tool calls and no results", () => {
-    const history = toChatHistory([
-      { role: "assistant", content: "", toolCalls: JSON.stringify(calls) },
-    ]);
-    expect(history.filter((m) => m.role === "tool")).toHaveLength(2);
-  });
-
-  it("drops tool rows that answer nothing", () => {
-    expect(
-      toChatHistory([
-        { role: "tool", content: "{}", toolCalls: null },
-        { role: "user", content: "hi", toolCalls: null },
-      ]),
-    ).toEqual([{ role: "user", content: "hi" }]);
-  });
-});
diff --git a/plugins/ai/tests/backend/migrations.test.ts b/plugins/ai/tests/backend/migrations.test.ts
deleted file mode 100644
index 9b7c3bf90..000000000
--- a/plugins/ai/tests/backend/migrations.test.ts
+++ /dev/null
@@ -1,118 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { createTestDb, type TestDb } from "@termix/plugin-sdk/testing";
-import { LEGACY_DDL, pluginDir } from "./helpers";
-
-let db: TestDb | null = null;
-
-afterEach(() => {
-  db?.close();
-  db = null;
-});
-
-const tables = (sqlite: TestDb["sqlite"]) =>
-  (
-    sqlite
-      .prepare(
-        "SELECT name FROM sqlite_master WHERE type = 'table' AND name LIKE '%ai_%' ORDER BY name",
-      )
-      .all() as Array<{ name: string }>
-  ).map((row) => row.name);
-
-const indexes = (sqlite: TestDb["sqlite"], table: string) =>
-  (
-    sqlite
-      .prepare(
-        "SELECT name FROM sqlite_master WHERE type = 'index' AND tbl_name = ? AND name LIKE 'idx_%' ORDER BY name",
-      )
-      .all(table) as Array<{ name: string }>
-  ).map((row) => row.name);
-
-describe("ai adoption migration", () => {
-  it("renames the legacy tables and keeps every row, index and cascade", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec(LEGACY_DDL);
-        sqlite
-          .prepare("INSERT INTO users (id, username) VALUES ('u1', 'u1')")
-          .run();
-        sqlite.exec(`
-          INSERT INTO ai_providers (id, user_id, provider_type, label, api_key, api_key_prefix)
-            VALUES (3, 'u1', 'ollama', 'Local', 'enc-key', 'abc123');
-          INSERT INTO ai_conversations (id, user_id, title) VALUES (5, 'u1', 'Disk');
-          INSERT INTO ai_messages (conversation_id, role, content) VALUES (5, 'user', 'why full');
-          INSERT INTO ai_proposals (conversation_id, user_id, kind) VALUES (5, 'u1', 'propose_run_command');
-        `);
-      },
-    });
-
-    expect(tables(db.sqlite)).toEqual([
-      "p_ai_conversations",
-      "p_ai_messages",
-      "p_ai_proposals",
-      "p_ai_providers",
-    ]);
-
-    const provider = db.sqlite
-      .prepare("SELECT * FROM p_ai_providers WHERE id = 3")
-      .get() as Record<string, unknown>;
-    // The key stays until core's boot migration moves it into ctx.secrets.
-    expect(provider).toMatchObject({ label: "Local", api_key: "enc-key" });
-
-    expect(indexes(db.sqlite, "p_ai_providers")).toEqual([
-      "idx_ai_providers_user_label",
-    ]);
-    expect(indexes(db.sqlite, "p_ai_proposals")).toEqual([
-      "idx_ai_proposals_conversation",
-      "idx_ai_proposals_user",
-    ]);
-
-    // The rename carried the foreign keys: a conversation still takes its
-    // messages and proposals with it.
-    db.sqlite.prepare("DELETE FROM p_ai_conversations WHERE id = 5").run();
-    const count = (table: string) =>
-      (
-        db!.sqlite.prepare(`SELECT COUNT(*) AS n FROM ${table}`).get() as {
-          n: number;
-        }
-      ).n;
-    expect(count("p_ai_messages")).toBe(0);
-    expect(count("p_ai_proposals")).toBe(0);
-  });
-
-  it("creates fresh tables when there is nothing to adopt", async () => {
-    db = await createTestDb(pluginDir);
-
-    expect(tables(db.sqlite)).toEqual([
-      "p_ai_conversations",
-      "p_ai_messages",
-      "p_ai_proposals",
-      "p_ai_providers",
-    ]);
-    const columns = (
-      db.sqlite.prepare("PRAGMA table_info(p_ai_providers)").all() as Array<{
-        name: string;
-      }>
-    ).map((column) => column.name);
-    expect(columns).not.toContain("api_key");
-
-    db.sqlite
-      .prepare("INSERT INTO users (id, username) VALUES ('u1', 'u1')")
-      .run();
-    db.sqlite
-      .prepare("INSERT INTO p_ai_conversations (id, user_id) VALUES (1, 'u1')")
-      .run();
-    db.sqlite
-      .prepare(
-        "INSERT INTO p_ai_messages (conversation_id, role) VALUES (1, 'user')",
-      )
-      .run();
-    db.sqlite.prepare("DELETE FROM p_ai_conversations WHERE id = 1").run();
-    expect(
-      (
-        db.sqlite.prepare("SELECT COUNT(*) AS n FROM p_ai_messages").get() as {
-          n: number;
-        }
-      ).n,
-    ).toBe(0);
-  });
-});
diff --git a/plugins/ai/tests/backend/permissions.test.ts b/plugins/ai/tests/backend/permissions.test.ts
deleted file mode 100644
index 70b685f54..000000000
--- a/plugins/ai/tests/backend/permissions.test.ts
+++ /dev/null
@@ -1,60 +0,0 @@
-import { describe, it, expect } from "vitest";
-import fs from "node:fs";
-import path from "node:path";
-import { parseManifest, qualifyPermission } from "@termix/plugin-sdk/manifest";
-
-/**
- * The permission ids an admin grants.
- *
- * Core registers each declared name as `<pluginId>.<name>`, so these strings
- * are what end up stored in a role. They have to keep matching what ai
- * shipped before the permissions moved out of the core catalog, or every role
- * holding one would silently stop working.
- */
-const EXPECTED = [
-  "ai.use",
-  "ai.manage_providers",
-  "ai.apply_proposals",
-  "ai.services.use",
-  "ai.secrets.share",
-];
-
-describe("ai permissions", () => {
-  const manifest = parseManifest(
-    JSON.parse(
-      fs.readFileSync(
-        path.resolve(import.meta.dirname, "../../manifest.json"),
-        "utf8",
-      ),
-    ),
-  );
-
-  it("parses cleanly", () => {
-    expect(manifest.errors).toEqual([]);
-  });
-
-  it("registers exactly the ids roles already hold", () => {
-    const ids = (manifest.manifest?.contributes?.permissions ?? []).map(
-      (permission) => qualifyPermission("ai", permission.name),
-    );
-
-    expect(ids).toEqual(EXPECTED);
-  });
-
-  it("declares a title and description for every permission", () => {
-    for (const permission of manifest.manifest?.contributes?.permissions ??
-      []) {
-      expect(permission.titleKey).toBeTruthy();
-      expect(permission.descriptionKey).toBeTruthy();
-    }
-  });
-
-  // Core used to grant these through SYSTEM_ROLE_DEFAULTS, so a fresh install
-  // has to keep giving them to the user role.
-  it("keeps the fresh-install defaults core used to seed", () => {
-    for (const permission of manifest.manifest?.contributes?.permissions ??
-      []) {
-      expect(permission.defaultRoles).toEqual(["user"]);
-    }
-  });
-});
diff --git a/plugins/ai/tests/backend/providers/provider-http.test.ts b/plugins/ai/tests/backend/providers/provider-http.test.ts
deleted file mode 100644
index e40706f4a..000000000
--- a/plugins/ai/tests/backend/providers/provider-http.test.ts
+++ /dev/null
@@ -1,118 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import {
-  createProviderFetch,
-  describeProviderError,
-} from "../../../src/backend/providers/http.js";
-import { AiProviderError } from "../../../src/backend/providers/types.js";
-import { PRIVATE_DESTINATION_MESSAGE } from "../../../src/backend/egress.js";
-
-describe("createProviderFetch", () => {
-  it("sends provider requests through ctx.fetch with the admin allowlist", async () => {
-    const response = new Response("{}");
-    const fetch = vi.fn(async () => response);
-    const controller = new AbortController();
-    const providerFetch = createProviderFetch(fetch, ["192.168.1.50"]);
-
-    await expect(
-      providerFetch("http://192.168.1.50:11434/api/chat", {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: "{}",
-        signal: controller.signal,
-      }),
-    ).resolves.toBe(response);
-
-    expect(fetch).toHaveBeenCalledWith(
-      "http://192.168.1.50:11434/api/chat",
-      expect.objectContaining({
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: "{}",
-        signal: controller.signal,
-        allowPrivateHosts: ["192.168.1.50"],
-      }),
-    );
-  });
-
-  it("refuses a private address the admin has not allowed, before any request", async () => {
-    const fetch = vi.fn();
-    const providerFetch = createProviderFetch(fetch, ["localhost"]);
-
-    await expect(
-      providerFetch("http://10.0.0.9:11434/api/tags", { method: "GET" }),
-    ).rejects.toThrow(PRIVATE_DESTINATION_MESSAGE);
-    expect(fetch).not.toHaveBeenCalled();
-  });
-
-  it("explains a hostname that resolved to a private address", async () => {
-    const fetch = vi.fn(async () => {
-      throw new Error("Private destinations are not allowed");
-    });
-    const providerFetch = createProviderFetch(fetch, []);
-
-    await expect(
-      providerFetch("https://ollama.example.com/api/tags", { method: "GET" }),
-    ).rejects.toThrow(PRIVATE_DESTINATION_MESSAGE);
-  });
-
-  it("passes other failures through unchanged", async () => {
-    const fetch = vi.fn(async () => {
-      throw new Error("socket hang up");
-    });
-    const providerFetch = createProviderFetch(fetch, []);
-
-    await expect(
-      providerFetch("https://api.openai.com/v1/models", { method: "GET" }),
-    ).rejects.toThrow("socket hang up");
-  });
-});
-
-describe("describeProviderError", () => {
-  const undiciError = (message: string, cause?: unknown) =>
-    Object.assign(new TypeError(message), { cause });
-
-  it("explains a body that went quiet instead of a bare terminated", () => {
-    const error = undiciError(
-      "terminated",
-      Object.assign(new Error("Body Timeout Error"), {
-        code: "UND_ERR_BODY_TIMEOUT",
-      }),
-    );
-    expect(describeProviderError(error, "fallback")).toMatch(
-      /stopped sending data/,
-    );
-  });
-
-  it("explains a refused connection", () => {
-    const error = undiciError(
-      "fetch failed",
-      Object.assign(new Error("connect ECONNREFUSED"), {
-        code: "ECONNREFUSED",
-      }),
-    );
-    expect(describeProviderError(error, "fallback")).toMatch(/refused/);
-  });
-
-  it("maps a private address refused after DNS to the allowlist hint", () => {
-    const error = undiciError(
-      "fetch failed",
-      new Error("Private destinations are not allowed"),
-    );
-    expect(describeProviderError(error, "fallback")).toBe(
-      PRIVATE_DESTINATION_MESSAGE,
-    );
-  });
-
-  it("names the cause of an unfamiliar fetch failure", () => {
-    const error = undiciError("fetch failed", new Error("something odd"));
-    expect(describeProviderError(error, "fallback")).toBe(
-      "The provider request failed: something odd",
-    );
-  });
-
-  it("keeps a provider error's own message", () => {
-    expect(
-      describeProviderError(new AiProviderError("bad key", 401), "fallback"),
-    ).toBe("bad key");
-  });
-});
diff --git a/plugins/ai/tests/backend/providers/providers.test.ts b/plugins/ai/tests/backend/providers/providers.test.ts
deleted file mode 100644
index e2d6113e6..000000000
--- a/plugins/ai/tests/backend/providers/providers.test.ts
+++ /dev/null
@@ -1,337 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
-import type { ChatChunk } from "../../../src/backend/providers/types.js";
-
-// Adapters get the egress-checked fetch through their config.
-const providerFetch = vi.fn();
-
-const { openAiAdapter } =
-  await import("../../../src/backend/providers/openai.js");
-const { ollamaAdapter } =
-  await import("../../../src/backend/providers/ollama.js");
-const { geminiAdapter } =
-  await import("../../../src/backend/providers/gemini.js");
-
-/** Builds a Response whose body streams the given text chunks. */
-function streamingResponse(lines: string[]): Response {
-  const encoder = new TextEncoder();
-  return {
-    ok: true,
-    status: 200,
-    body: {
-      getReader() {
-        let index = 0;
-        return {
-          async read() {
-            if (index >= lines.length) return { done: true, value: undefined };
-            return { done: false, value: encoder.encode(lines[index++]) };
-          },
-          releaseLock() {},
-        };
-      },
-    },
-  } as unknown as Response;
-}
-
-/** One SSE frame, built from an object so the JSON stays readable. */
-function sseFrame(payload: unknown): string {
-  return `data: ${JSON.stringify(payload)}\n`;
-}
-
-async function collect(iterable: AsyncIterable<ChatChunk>) {
-  const chunks: ChatChunk[] = [];
-  for await (const chunk of iterable) chunks.push(chunk);
-  return chunks;
-}
-
-const REQUEST = {
-  model: "test-model",
-  system: "system",
-  messages: [{ role: "user" as const, content: "hi" }],
-  tools: [],
-};
-
-describe("openAiAdapter", () => {
-  beforeEach(() => vi.clearAllMocks());
-
-  it("normalises streamed text", async () => {
-    providerFetch.mockResolvedValue(
-      streamingResponse([
-        'data: {"choices":[{"delta":{"content":"Hel"}}]}\n',
-        'data: {"choices":[{"delta":{"content":"lo"}}]}\n',
-        "data: [DONE]\n",
-      ]),
-    );
-
-    const chunks = await collect(
-      openAiAdapter.streamChat(
-        { fetch: providerFetch, providerType: "openai" },
-        REQUEST,
-      ),
-    );
-
-    expect(chunks.filter((c) => c.type === "text")).toEqual([
-      { type: "text", text: "Hel" },
-      { type: "text", text: "lo" },
-    ]);
-    expect(chunks.at(-1)?.type).toBe("done");
-  });
-
-  it("reassembles tool arguments split across deltas", async () => {
-    providerFetch.mockResolvedValue(
-      streamingResponse([
-        'data: {"choices":[{"delta":{"tool_calls":[{"index":0,"id":"c1","function":{"name":"list_hosts","arguments":"{\\"a"}}]}}]}\n',
-        'data: {"choices":[{"delta":{"tool_calls":[{"index":0,"function":{"arguments":"\\":1}"}}]}}]}\n',
-        "data: [DONE]\n",
-      ]),
-    );
-
-    const chunks = await collect(
-      openAiAdapter.streamChat(
-        { fetch: providerFetch, providerType: "openai" },
-        REQUEST,
-      ),
-    );
-
-    const call = chunks.find((c) => c.type === "tool_call");
-    expect(call).toMatchObject({
-      type: "tool_call",
-      call: { id: "c1", name: "list_hosts", arguments: { a: 1 } },
-    });
-  });
-
-  it("survives malformed tool arguments", async () => {
-    // A model that emits broken JSON gets an empty object; the tool's own
-    // validation then reports the problem back to it.
-    providerFetch.mockResolvedValue(
-      streamingResponse([
-        'data: {"choices":[{"delta":{"tool_calls":[{"index":0,"id":"c1","function":{"name":"list_hosts","arguments":"{not json"}}]}}]}\n',
-        "data: [DONE]\n",
-      ]),
-    );
-
-    const chunks = await collect(
-      openAiAdapter.streamChat(
-        { fetch: providerFetch, providerType: "openai" },
-        REQUEST,
-      ),
-    );
-
-    expect(chunks.find((c) => c.type === "tool_call")).toMatchObject({
-      call: { arguments: {} },
-    });
-  });
-
-  it("needs a base url for an openai-compatible provider", async () => {
-    await expect(
-      collect(
-        openAiAdapter.streamChat(
-          { fetch: providerFetch, providerType: "openai_compatible" },
-          REQUEST,
-        ),
-      ),
-    ).rejects.toThrow("base URL");
-  });
-});
-
-describe("ollamaAdapter", () => {
-  beforeEach(() => vi.clearAllMocks());
-
-  it("reads newline-delimited json rather than sse", async () => {
-    providerFetch.mockResolvedValue(
-      streamingResponse([
-        '{"message":{"content":"Hel"}}\n',
-        '{"message":{"content":"lo"}}\n',
-        '{"done":true,"done_reason":"stop"}\n',
-      ]),
-    );
-
-    const chunks = await collect(
-      ollamaAdapter.streamChat(
-        { fetch: providerFetch, providerType: "ollama" },
-        REQUEST,
-      ),
-    );
-
-    expect(chunks.filter((c) => c.type === "text")).toHaveLength(2);
-    expect(chunks.at(-1)).toMatchObject({ type: "done", stopReason: "stop" });
-  });
-
-  it("accepts tool arguments as an object or a json string", async () => {
-    providerFetch.mockResolvedValue(
-      streamingResponse([
-        '{"message":{"tool_calls":[{"function":{"name":"list_hosts","arguments":{"a":1}}}]}}\n',
-        '{"message":{"tool_calls":[{"function":{"name":"get_host","arguments":"{\\"hostId\\":2}"}}]}}\n',
-        '{"done":true}\n',
-      ]),
-    );
-
-    const chunks = await collect(
-      ollamaAdapter.streamChat(
-        { fetch: providerFetch, providerType: "ollama" },
-        REQUEST,
-      ),
-    );
-
-    const calls = chunks.filter((c) => c.type === "tool_call") as any[];
-    expect(calls[0].call.arguments).toEqual({ a: 1 });
-    expect(calls[1].call.arguments).toEqual({ hostId: 2 });
-  });
-});
-
-describe("geminiAdapter", () => {
-  beforeEach(() => vi.clearAllMocks());
-
-  it("carries thoughtSignature off a function call", async () => {
-    // Gemini 2.5+ 400s a follow-up whose functionCall parts lost their
-    // signature, which broke every conversation on the second turn.
-    providerFetch.mockResolvedValue(
-      streamingResponse([
-        sseFrame({
-          candidates: [
-            {
-              content: {
-                parts: [
-                  {
-                    functionCall: { name: "list_hosts", args: {} },
-                    thoughtSignature: "sig-abc",
-                  },
-                ],
-              },
-            },
-          ],
-        }),
-      ]),
-    );
-
-    const chunks = await collect(
-      geminiAdapter.streamChat(
-        { fetch: providerFetch, providerType: "gemini", apiKey: "k" },
-        REQUEST,
-      ),
-    );
-
-    expect(chunks.find((c) => c.type === "tool_call")).toMatchObject({
-      call: { name: "list_hosts", providerSignature: "sig-abc" },
-    });
-  });
-
-  it("echoes the signature back on the next turn", async () => {
-    providerFetch.mockResolvedValue(streamingResponse([]));
-
-    await collect(
-      geminiAdapter.streamChat(
-        { fetch: providerFetch, providerType: "gemini", apiKey: "k" },
-        {
-          ...REQUEST,
-          messages: [
-            { role: "user", content: "hi" },
-            {
-              role: "assistant",
-              content: "",
-              toolCalls: [
-                {
-                  id: "c1",
-                  name: "list_hosts",
-                  arguments: {},
-                  providerSignature: "sig-abc",
-                },
-              ],
-            },
-            {
-              role: "tool",
-              content: "{}",
-              toolCallId: "c1",
-              toolName: "list_hosts",
-            },
-          ],
-        },
-      ),
-    );
-
-    const body = JSON.parse(providerFetch.mock.calls[0][1].body as string);
-    const modelTurn = body.contents.find((c: any) => c.role === "model");
-    expect(modelTurn.parts[0].thoughtSignature).toBe("sig-abc");
-  });
-});
-
-describe("assertOk error messages", () => {
-  beforeEach(() => vi.clearAllMocks());
-
-  function errorResponse(status: number, body: string): Response {
-    return {
-      ok: false,
-      status,
-      text: async () => body,
-    } as unknown as Response;
-  }
-
-  it("pulls the message out of a nested error body", async () => {
-    // Slicing the raw JSON used to cut the text off mid-sentence.
-    providerFetch.mockResolvedValue(
-      errorResponse(
-        400,
-        JSON.stringify({
-          error: {
-            code: 400,
-            message: "Function call is missing a signature.",
-          },
-        }),
-      ),
-    );
-
-    await expect(
-      collect(
-        openAiAdapter.streamChat(
-          { fetch: providerFetch, providerType: "openai" },
-          REQUEST,
-        ),
-      ),
-    ).rejects.toThrow("Function call is missing a signature.");
-  });
-
-  it("explains a rate limit instead of dumping the body", async () => {
-    providerFetch.mockResolvedValue(
-      errorResponse(
-        429,
-        JSON.stringify({ error: { message: "You exceeded your quota." } }),
-      ),
-    );
-
-    await expect(
-      collect(
-        openAiAdapter.streamChat(
-          { fetch: providerFetch, providerType: "openai" },
-          REQUEST,
-        ),
-      ),
-    ).rejects.toThrow(/rate limit reached/i);
-  });
-
-  it("explains a rejected key", async () => {
-    providerFetch.mockResolvedValue(
-      errorResponse(401, JSON.stringify({ error: { message: "Bad key" } })),
-    );
-
-    await expect(
-      collect(
-        openAiAdapter.streamChat(
-          { fetch: providerFetch, providerType: "openai" },
-          REQUEST,
-        ),
-      ),
-    ).rejects.toThrow(/rejected the API key/i);
-  });
-
-  it("falls back to a trimmed snippet for a non-JSON body", async () => {
-    providerFetch.mockResolvedValue(errorResponse(500, "upstream exploded"));
-
-    await expect(
-      collect(
-        openAiAdapter.streamChat(
-          { fetch: providerFetch, providerType: "openai" },
-          REQUEST,
-        ),
-      ),
-    ).rejects.toThrow("upstream exploded");
-  });
-});
diff --git a/plugins/ai/tests/backend/redaction.test.ts b/plugins/ai/tests/backend/redaction.test.ts
deleted file mode 100644
index c8d4ef8da..000000000
--- a/plugins/ai/tests/backend/redaction.test.ts
+++ /dev/null
@@ -1,76 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { REDACTED, redact, redactString } from "../../src/backend/redaction.js";
-
-describe("redact", () => {
-  it("drops secret-named fields at any depth", () => {
-    const input = {
-      name: "web-1",
-      password: "hunter2",
-      nested: { privateKey: "abc", apiKey: "def", port: 22 },
-      list: [{ keyPassword: "xyz", label: "ok" }],
-    };
-
-    const output = redact(input) as any;
-
-    expect(output.name).toBe("web-1");
-    expect(output.password).toBe(REDACTED);
-    expect(output.nested.privateKey).toBe(REDACTED);
-    expect(output.nested.apiKey).toBe(REDACTED);
-    expect(output.nested.port).toBe(22);
-    expect(output.list[0].keyPassword).toBe(REDACTED);
-    expect(output.list[0].label).toBe("ok");
-  });
-
-  it("keeps a null secret null so absence stays distinguishable", () => {
-    const output = redact({ password: null }) as any;
-    expect(output.password).toBeNull();
-  });
-
-  it("leaves ordinary values untouched", () => {
-    const input = { id: 4, enabled: true, tags: ["a", "b"], note: null };
-    expect(redact(input)).toEqual(input);
-  });
-
-  it("does not recurse forever on a cyclic object", () => {
-    const cyclic: Record<string, unknown> = { name: "loop" };
-    cyclic.self = cyclic;
-    expect(() => redact(cyclic)).not.toThrow();
-  });
-});
-
-describe("redactString", () => {
-  it("masks private key blocks", () => {
-    const text =
-      "-----BEGIN OPENSSH PRIVATE KEY-----\nabc123\n-----END OPENSSH PRIVATE KEY-----";
-    expect(redactString(text)).toBe("[redacted private key]");
-  });
-
-  it("masks provider api keys", () => {
-    expect(redactString("key is sk-abcdefghijklmnopqrst here")).toContain(
-      "[redacted api key]",
-    );
-    expect(redactString("key is sk-ant-abcdefghijklmnopqrst here")).toContain(
-      "[redacted api key]",
-    );
-  });
-
-  it("masks bearer tokens and jwts", () => {
-    expect(
-      redactString("Authorization: Bearer abcdefghijklmnopqrst"),
-    ).toContain("Bearer [redacted]");
-    expect(
-      redactString("token eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxIn0.abcdefgh"),
-    ).toContain("[redacted token]");
-  });
-
-  it("masks Termix api keys", () => {
-    expect(redactString("tmx_abcdefghijklmnopqrstuvwx")).toContain(
-      "[redacted token]",
-    );
-  });
-
-  it("leaves ordinary prose alone", () => {
-    const text = "The disk on web-1 is 82 percent full.";
-    expect(redactString(text)).toBe(text);
-  });
-});
diff --git a/plugins/ai/tests/backend/routes.test.ts b/plugins/ai/tests/backend/routes.test.ts
deleted file mode 100644
index 82710ea0c..000000000
--- a/plugins/ai/tests/backend/routes.test.ts
+++ /dev/null
@@ -1,216 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { startServer, type TestServer } from "./helpers";
-
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-});
-
-describe("ai routes", () => {
-  it("reports status without the gate, and blocks everything else while off", async () => {
-    server = await startServer();
-
-    const status = await server.request("GET", "/status");
-    expect(status.status).toBe(200);
-    expect(status.body).toEqual({
-      globallyEnabled: false,
-      enabled: false,
-      allowReadOnlyCommands: false,
-    });
-
-    expect((await server.request("GET", "/providers")).status).toBe(403);
-  });
-
-  it("lets a user opt in only while the server allows it", async () => {
-    server = await startServer();
-
-    const refused = await server.request("PUT", "/opt-in", {
-      body: { enabled: true },
-    });
-    expect(refused.status).toBe(403);
-
-    await server.mock.ctx.settings.set("globallyEnabled", true);
-    const accepted = await server.request("PUT", "/opt-in", {
-      body: { enabled: true },
-    });
-    expect(accepted.status).toBe(200);
-    expect(await server.mock.ctx.settings.getUser("user-1", "enabled")).toBe(
-      true,
-    );
-  });
-
-  it("keeps a provider's key in ctx.secrets, never in the row or the response", async () => {
-    server = await startServer();
-    await server.enableFor("user-1");
-
-    const created = await server.request("POST", "/providers", {
-      body: {
-        providerType: "openai",
-        label: "Work",
-        apiKey: "sk-secret-value",
-        defaultModel: "gpt-5",
-      },
-    });
-    expect(created.status).toBe(201);
-    expect(created.body.provider.apiKeyPrefix).toBe("sk-sec");
-    expect(JSON.stringify(created.body)).not.toContain("sk-secret-value");
-
-    const id = created.body.provider.id;
-    expect(server.mock.secretStore.get(`user-1:provider:${id}`)).toBe(
-      "sk-secret-value",
-    );
-    const row = server.db.sqlite
-      .prepare("SELECT * FROM p_ai_providers WHERE id = ?")
-      .get(id) as Record<string, unknown>;
-    expect(JSON.stringify(row)).not.toContain("sk-secret-value");
-
-    const list = await server.request("GET", "/providers");
-    expect(list.body.providers).toHaveLength(1);
-
-    // Another user sees none of it.
-    await server.enableFor("user-2");
-    const other = await server.request("GET", "/providers", { user: "user-2" });
-    expect(other.body.providers).toEqual([]);
-
-    const removed = await server.request("DELETE", `/providers/${id}`);
-    expect(removed.status).toBe(200);
-    expect(server.mock.secretStore.has(`user-1:provider:${id}`)).toBe(false);
-  });
-
-  it("validates a new provider", async () => {
-    server = await startServer();
-    await server.enableFor("user-1");
-
-    const unknown = await server.request("POST", "/providers", {
-      body: { providerType: "nope", label: "x" },
-    });
-    expect(unknown.status).toBe(400);
-
-    const noKey = await server.request("POST", "/providers", {
-      body: { providerType: "anthropic", label: "x" },
-    });
-    expect(noKey.status).toBe(400);
-  });
-
-  it("rejects and applies proposals only once, for their owner", async () => {
-    server = await startServer();
-    await server.enableFor("user-1");
-
-    server.db.sqlite
-      .prepare(
-        "INSERT INTO p_ai_conversations (id, user_id, title) VALUES (1, 'user-1', 't')",
-      )
-      .run();
-    server.db.sqlite
-      .prepare(
-        `INSERT INTO p_ai_proposals (id, conversation_id, user_id, kind, payload)
-         VALUES (1, 1, 'user-1', 'propose_create_host', '{"name":"db","ip":"10.0.0.2"}'),
-                (2, 1, 'user-1', 'propose_delete_host', '{"hostId":1}')`,
-      )
-      .run();
-
-    // Not theirs.
-    await server.enableFor("user-2");
-    expect(
-      (await server.request("POST", "/proposals/1/reject", { user: "user-2" }))
-        .status,
-    ).toBe(404);
-
-    const rejected = await server.request("POST", "/proposals/2/reject");
-    expect(rejected.status).toBe(200);
-    expect((await server.request("POST", "/proposals/2/reject")).status).toBe(
-      404,
-    );
-
-    const conversation = await server.request("GET", "/conversations/1");
-    expect(conversation.status).toBe(200);
-    expect(
-      conversation.body.proposals.map((p: { id: number }) => p.id),
-    ).toEqual([2, 1]);
-
-    const deleted = await server.request("DELETE", "/conversations/1");
-    expect(deleted.status).toBe(200);
-    const left = server.db.sqlite
-      .prepare("SELECT COUNT(*) AS n FROM p_ai_proposals")
-      .get() as { n: number };
-    expect(left.n).toBe(0);
-  });
-
-  it.each([
-    ["GET", "/providers", "ai.use"],
-    ["POST", "/providers", "ai.manage_providers"],
-    ["PATCH", "/providers/1", "ai.manage_providers"],
-    ["DELETE", "/providers/1", "ai.manage_providers"],
-    ["POST", "/probe-models", "ai.manage_providers"],
-    ["GET", "/providers/1/models", "ai.use"],
-    ["GET", "/conversations", "ai.use"],
-    ["GET", "/conversations/1", "ai.use"],
-    ["DELETE", "/conversations/1", "ai.use"],
-    ["POST", "/chat/stream", "ai.use"],
-    ["POST", "/proposals/1/apply", "ai.apply_proposals"],
-    ["POST", "/proposals/1/mark-run-in-terminal", "ai.apply_proposals"],
-    ["POST", "/proposals/1/reject", "ai.use"],
-    ["PUT", "/opt-in", "ai.use"],
-  ])("%s %s answers 403 without %s", async (method, path, permission) => {
-    server = await startServer({
-      permissions: [
-        "ai.use",
-        "ai.manage_providers",
-        "ai.apply_proposals",
-      ].filter((entry) => entry !== permission),
-    });
-    await server.enableFor("user-1");
-    const response = await server.request(method, path, { body: {} });
-    expect(response.status).toBe(403);
-  });
-});
-
-describe("chat stream", () => {
-  it("offers the model only the tools whose plugins are running", async () => {
-    const bodies: Array<{ tools?: Array<{ function?: { name: string } }> }> =
-      [];
-    const encoder = new TextEncoder();
-    server = await startServer({
-      services: { "snippets.access": { list: async () => [] } },
-      fetch: async (_url, init) => {
-        bodies.push(JSON.parse((init as { body: string }).body));
-        const stream = new ReadableStream({
-          start(controller) {
-            controller.enqueue(
-              encoder.encode(
-                'data: {"choices":[{"delta":{"content":"hi"}}]}\n\ndata: [DONE]\n\n',
-              ),
-            );
-            controller.close();
-          },
-        });
-        return new Response(stream, { status: 200 });
-      },
-    });
-    await server.enableFor("user-1");
-
-    const created = await server.request("POST", "/providers", {
-      body: {
-        providerType: "openai",
-        label: "Work",
-        apiKey: "sk-test",
-        defaultModel: "gpt-5",
-      },
-    });
-
-    const reply = await server.request("POST", "/chat/stream", {
-      body: { providerId: created.body.provider.id, message: "hello" },
-    });
-    expect(reply.status).toBe(200);
-    expect(String(reply.body)).toContain('"type":"done"');
-
-    const offered = (bodies[0].tools ?? []).map((tool) => tool.function?.name);
-    expect(offered).toContain("list_hosts");
-    expect(offered).toContain("list_snippets");
-    expect(offered).not.toContain("list_fleets");
-    expect(offered).not.toContain("list_homepage_items");
-    expect(offered).not.toContain("propose_create_automation");
-  });
-});
diff --git a/plugins/ai/tests/backend/sync.test.ts b/plugins/ai/tests/backend/sync.test.ts
deleted file mode 100644
index 7a8b26165..000000000
--- a/plugins/ai/tests/backend/sync.test.ts
+++ /dev/null
@@ -1,112 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { createAiRepository } from "../../src/backend/repository.js";
-import { startServer, type TestServer } from "./helpers";
-
-const servers: TestServer[] = [];
-afterEach(async () => {
-  for (const server of servers.splice(0)) await server.close();
-});
-async function setup() {
-  const server = await startServer();
-  servers.push(server);
-  const repo = await createAiRepository(server.mock.ctx);
-  const entity = server.mock.syncEntities.find(
-    (entry) => entry.type === "aiProviders",
-  )!;
-  expect(entity).toBeDefined();
-  return { ...server, repo, entity };
-}
-const noReference = async () => null;
-
-describe("AI provider sync", () => {
-  it("maps the key to the destination id, rotates and clears it without storing plaintext in the row", async () => {
-    const source = await setup();
-    const target = await setup();
-    const sourceRow = await source.mock.ctx.asUser("user-1", () =>
-      source.repo.createProvider("user-1", {
-        providerType: "openai",
-        label: "Work",
-        apiKey: "test-key-first",
-        enabled: false,
-      }),
-    );
-    // The other device already has a different provider at the source's id.
-    await target.mock.ctx.asUser("user-1", () =>
-      target.repo.createProvider("user-1", {
-        providerType: "openai",
-        label: "Local",
-        apiKey: "test-local-key",
-      }),
-    );
-    const targetRow = await target.mock.ctx.asUser("user-1", () =>
-      target.repo.createProvider("user-1", {
-        providerType: "openai",
-        label: "Work",
-      }),
-    );
-    expect(sourceRow.id).not.toBe(targetRow.id);
-    for (const apiKey of ["test-key-first", "test-key-rotated", null]) {
-      await source.mock.ctx.asUser("user-1", () =>
-        source.repo.updateProvider(sourceRow.id, "user-1", { apiKey }),
-      );
-      source.mock.setActor("user-2");
-      const row = await source.repo.findProvider(sourceRow.id, "user-1");
-      const wire = await source.entity.serialize!({ ...row! }, noReference);
-      expect(wire.apiKey).toBe(apiKey);
-      const fields = await target.entity.deserialize!(wire, noReference);
-      expect(fields).not.toHaveProperty("apiKey");
-      expect(fields.enabled).toBe(false);
-      await target.entity.afterWrite!({
-        id: targetRow.id,
-        userId: "user-1",
-        wire,
-        created: false,
-      });
-      expect(
-        target.mock.secretStore.get(`user-1:provider:${targetRow.id}`) ?? null,
-      ).toBe(apiKey);
-      expect(
-        target.mock.secretStore.get(`user-1:provider:${sourceRow.id}`),
-      ).toBe("test-local-key");
-      expect(
-        target.mock.secretStore.get(`user-2:provider:${targetRow.id}`),
-      ).toBeUndefined();
-    }
-    expect(
-      target.db.sqlite.prepare("PRAGMA table_info(p_ai_providers)").all(),
-    ).not.toContainEqual(expect.objectContaining({ name: "api_key" }));
-    expect(
-      target.db.sqlite.prepare("PRAGMA table_info(p_ai_providers)").all(),
-    ).toContainEqual(expect.objectContaining({ name: "sync_id" }));
-  });
-
-  it("cleans up the destination secret on deletion and declares provider management permissions", async () => {
-    const server = await setup();
-    const row = await server.mock.ctx.asUser("user-1", () =>
-      server.repo.createProvider("user-1", {
-        providerType: "openai",
-        label: "Work",
-        apiKey: "test-delete-key",
-      }),
-    );
-    expect(server.entity.permissions).toEqual({
-      create: "ai.manage_providers",
-      update: "ai.manage_providers",
-      delete: "ai.manage_providers",
-    });
-    await server.entity.remove!({ ...row }, "user-2");
-    expect(await server.repo.findProvider(row.id, "user-1")).not.toBeNull();
-    await server.entity.remove!({ ...row }, "user-1");
-    expect(await server.repo.findProvider(row.id, "user-1")).toBeNull();
-    expect(
-      server.mock.secretStore.get(`user-1:provider:${row.id}`),
-    ).toBeUndefined();
-  });
-
-  it("rejects invalid secret payloads before the row is written", async () => {
-    const server = await setup();
-    await expect(
-      server.entity.deserialize!({ apiKey: {} }, noReference),
-    ).rejects.toThrow("Invalid synced provider key");
-  });
-});
diff --git a/plugins/ai/tests/backend/tools/command-allowlist.test.ts b/plugins/ai/tests/backend/tools/command-allowlist.test.ts
deleted file mode 100644
index 4b0adff03..000000000
--- a/plugins/ai/tests/backend/tools/command-allowlist.test.ts
+++ /dev/null
@@ -1,79 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { isReadOnlyCommand } from "../../../src/backend/tools/command-allowlist.js";
-
-/**
- * These commands can run without a per-command approval click, so the parser
- * has to refuse anything that could become a second command. Substring
- * matching would pass "df; rm -rf /", which is the whole reason this is
- * argv-based.
- */
-describe("isReadOnlyCommand", () => {
-  it("allows plain diagnostics", () => {
-    for (const command of [
-      "df -h",
-      "uptime",
-      "free -m",
-      "whoami",
-      "ps aux",
-      "lsblk",
-      "uname -a",
-      "/usr/bin/df -h",
-    ]) {
-      expect(isReadOnlyCommand(command).allowed, command).toBe(true);
-    }
-  });
-
-  it("rejects command chaining and redirection", () => {
-    for (const command of [
-      "df; rm -rf /",
-      "df && curl evil.example",
-      "df || reboot",
-      "df | sh",
-      "df > /etc/passwd",
-      "df >> /etc/passwd",
-      "cat < /etc/shadow",
-      "echo `whoami`",
-      "echo $(id)",
-      "df\nrm -rf /",
-      "df \\\n rm",
-    ]) {
-      expect(isReadOnlyCommand(command).allowed, command).toBe(false);
-    }
-  });
-
-  it("rejects privilege escalation", () => {
-    for (const command of ["sudo df -h", "su root", "doas df", "env df"]) {
-      expect(isReadOnlyCommand(command).allowed, command).toBe(false);
-    }
-  });
-
-  it("rejects commands that are not on the list", () => {
-    for (const command of ["rm -rf /", "curl evil.example", "vi /etc/passwd"]) {
-      expect(isReadOnlyCommand(command).allowed, command).toBe(false);
-    }
-  });
-
-  it("limits systemctl and docker to read-only subcommands", () => {
-    expect(isReadOnlyCommand("systemctl status nginx").allowed).toBe(true);
-    expect(isReadOnlyCommand("systemctl restart nginx").allowed).toBe(false);
-    expect(isReadOnlyCommand("systemctl stop nginx").allowed).toBe(false);
-
-    expect(isReadOnlyCommand("docker ps").allowed).toBe(true);
-    expect(isReadOnlyCommand("docker stats --no-stream").allowed).toBe(true);
-    expect(isReadOnlyCommand("docker rm -f web").allowed).toBe(false);
-    expect(isReadOnlyCommand("docker exec -it web sh").allowed).toBe(false);
-  });
-
-  it("limits cat to safe paths", () => {
-    expect(isReadOnlyCommand("cat /proc/meminfo").allowed).toBe(true);
-    expect(isReadOnlyCommand("cat /etc/os-release").allowed).toBe(true);
-    expect(isReadOnlyCommand("cat /etc/shadow").allowed).toBe(false);
-    expect(isReadOnlyCommand("cat ~/.ssh/id_rsa").allowed).toBe(false);
-    expect(isReadOnlyCommand("cat").allowed).toBe(false);
-  });
-
-  it("rejects an empty command", () => {
-    expect(isReadOnlyCommand("").allowed).toBe(false);
-    expect(isReadOnlyCommand("   ").allowed).toBe(false);
-  });
-});
diff --git a/plugins/ai/tests/backend/tools/proposal-executor.test.ts b/plugins/ai/tests/backend/tools/proposal-executor.test.ts
deleted file mode 100644
index f36c70198..000000000
--- a/plugins/ai/tests/backend/tools/proposal-executor.test.ts
+++ /dev/null
@@ -1,281 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-const execCommand = vi.fn();
-vi.mock("@termix/plugin-sdk/host-commands", async (importOriginal) => ({
-  ...(await importOriginal<object>()),
-  execCommand: (...args: unknown[]) => execCommand(...args),
-}));
-
-const { applyProposal } =
-  await import("../../../src/backend/tools/executor.js");
-
-const hosts = {
-  create: vi.fn(),
-  update: vi.fn(),
-  delete: vi.fn(),
-  checkAccess: vi.fn(),
-};
-const automationsAccess = { create: vi.fn() };
-const fleetsAccess = { create: vi.fn(), addMember: vi.fn() };
-const snippetsAccess = {
-  create: vi.fn(),
-  get: vi.fn(),
-  update: vi.fn(),
-  remove: vi.fn(),
-};
-const withConnection = vi.fn(
-  async (
-    _host: unknown,
-    _options: unknown,
-    run: (client: unknown) => unknown,
-  ) => run({}),
-);
-
-let provided: Record<string, object> = {};
-let granted = new Set<string>();
-
-/** What the executor gets from ctx: the approving user's view of core. */
-function deps() {
-  return {
-    hosts,
-    services: {
-      providers: (service: string) => (service in provided ? [""] : []),
-      get: (service: string) => provided[service],
-    },
-    rbac: { has: async (permission: string) => granted.has(permission) },
-    ssh: { withConnection },
-    notify: {},
-  } as never;
-}
-
-beforeEach(() => {
-  vi.clearAllMocks();
-  provided = {};
-  granted = new Set(["hosts.create", "hosts.edit"]);
-});
-
-describe("applyProposal", () => {
-  it("refuses a kind that is not a real tool", async () => {
-    // The stored payload is treated as untrusted even though the server wrote
-    // it, because a proposal can outlive the release that created it.
-    await expect(
-      applyProposal("propose_delete_everything", {}, deps()),
-    ).rejects.toThrow("Unknown proposal kind");
-  });
-
-  it("hands an automation to the automations plugin, which validates it", async () => {
-    provided["automations.access"] = automationsAccess;
-    automationsAccess.create.mockRejectedValue(
-      new Error("Unknown or missing trigger kind"),
-    );
-    await expect(
-      applyProposal(
-        "propose_create_automation",
-        {
-          name: "bad",
-          definition: { trigger: { kind: "nonsense" }, steps: [] },
-        },
-        deps(),
-      ),
-    ).rejects.toThrow("Unknown or missing trigger kind");
-  });
-
-  it("refuses an automation while the automations plugin is off", async () => {
-    await expect(
-      applyProposal(
-        "propose_create_automation",
-        { name: "x", definition: {} },
-        deps(),
-      ),
-    ).rejects.toThrow("The automations plugin is not available");
-  });
-
-  it("creates a valid automation disabled so it cannot fire unwatched", async () => {
-    provided["automations.access"] = automationsAccess;
-    automationsAccess.create.mockResolvedValue({ id: 5, name: "nightly" });
-
-    const result = await applyProposal(
-      "propose_create_automation",
-      {
-        name: "nightly",
-        definition: {
-          trigger: { kind: "schedule", intervalSeconds: 3600 },
-          steps: [{ id: "s1", type: "wait", seconds: 1 }],
-        },
-      },
-      deps(),
-    );
-
-    expect(result.ok).toBe(true);
-    expect(automationsAccess.create).toHaveBeenCalledWith(
-      expect.objectContaining({ name: "nightly", enabled: false }),
-    );
-  });
-
-  it("runs an approved command through ctx.ssh on the host id", async () => {
-    // ctx.ssh resolves the host for the approving user, with the connect
-    // access check, so the executor never holds a host row itself.
-    execCommand.mockResolvedValue({ stdout: "up 3 days", stderr: "", code: 0 });
-
-    const result = await applyProposal(
-      "propose_run_command",
-      { hostId: 9, command: "uptime" },
-      deps(),
-    );
-
-    expect(withConnection).toHaveBeenCalledWith(
-      9,
-      { pool: "ai", purpose: "fleet" },
-      expect.any(Function),
-    );
-    expect(result.ok).toBe(true);
-    expect(result.summary).toContain("up 3 days");
-  });
-
-  it("fails when the user cannot reach the host", async () => {
-    withConnection.mockRejectedValueOnce(new Error("Host not found"));
-
-    await expect(
-      applyProposal(
-        "propose_run_command",
-        { hostId: 9, command: "uptime" },
-        deps(),
-      ),
-    ).rejects.toThrow("Host not found");
-    expect(execCommand).not.toHaveBeenCalled();
-  });
-
-  it("surfaces a non-zero exit rather than reporting success", async () => {
-    execCommand.mockResolvedValue({ stdout: "", stderr: "denied", code: 1 });
-
-    await expect(
-      applyProposal(
-        "propose_run_command",
-        { hostId: 9, command: "cat /etc/shadow" },
-        deps(),
-      ),
-    ).rejects.toThrow("code 1");
-  });
-
-  it("creates a host through ctx.hosts, with tags as core stores them", async () => {
-    hosts.create.mockResolvedValue({ id: 7, name: "web-1" });
-
-    const result = await applyProposal(
-      "propose_create_host",
-      { name: "web-1", ip: "10.0.0.5", port: 22, tags: ["prod", "eu"] },
-      deps(),
-    );
-
-    expect(result.ok).toBe(true);
-    expect(hosts.create).toHaveBeenCalledWith(
-      expect.objectContaining({
-        name: "web-1",
-        ip: "10.0.0.5",
-        tags: "prod,eu",
-      }),
-    );
-  });
-
-  it("refuses to create a host without hosts.create", async () => {
-    granted = new Set();
-    await expect(
-      applyProposal(
-        "propose_create_host",
-        { name: "web-1", ip: "10.0.0.5" },
-        deps(),
-      ),
-    ).rejects.toThrow("permission");
-    expect(hosts.create).not.toHaveBeenCalled();
-  });
-
-  it("rejects a host payload missing required fields", async () => {
-    await expect(
-      applyProposal("propose_create_host", { name: "web-1" }, deps()),
-    ).rejects.toThrow("ip is required");
-    expect(hosts.create).not.toHaveBeenCalled();
-  });
-
-  it("updates through ctx.hosts, which refuses a host the user does not own", async () => {
-    hosts.update.mockResolvedValue(null);
-
-    await expect(
-      applyProposal(
-        "propose_update_host",
-        { hostId: 999, changes: { name: "x" } },
-        deps(),
-      ),
-    ).rejects.toThrow("Host not found");
-    expect(hosts.update).toHaveBeenCalledWith(999, { name: "x" });
-  });
-
-  it("rejects a non-numeric id rather than coercing it", async () => {
-    await expect(
-      applyProposal(
-        "propose_update_host",
-        { hostId: "7; DROP TABLE hosts", changes: { name: "x" } },
-        deps(),
-      ),
-    ).rejects.toThrow("hostId must be a positive integer");
-  });
-
-  it("reports nothing to change on an empty update", async () => {
-    const result = await applyProposal(
-      "propose_update_host",
-      { hostId: 7, changes: {} },
-      deps(),
-    );
-
-    expect(result.ok).toBe(false);
-    expect(hosts.update).not.toHaveBeenCalled();
-  });
-
-  it("deletes through ctx.hosts", async () => {
-    hosts.delete.mockResolvedValue(true);
-    const result = await applyProposal(
-      "propose_delete_host",
-      { hostId: 7, reason: "old" },
-      deps(),
-    );
-    expect(result.ok).toBe(true);
-    expect(hosts.delete).toHaveBeenCalledWith(7);
-  });
-
-  it("only adds fleet members the approving user owns", async () => {
-    provided["fleets.access"] = fleetsAccess;
-    fleetsAccess.create.mockResolvedValue({ id: 3, name: "prod" });
-    hosts.checkAccess.mockImplementation(async (hostId: number) => ({
-      hasAccess: true,
-      isOwner: hostId === 1,
-      isShared: hostId !== 1,
-    }));
-
-    const result = await applyProposal(
-      "propose_create_fleet",
-      { name: "prod", hostIds: [1, 2] },
-      deps(),
-    );
-
-    expect(fleetsAccess.addMember).toHaveBeenCalledTimes(1);
-    expect(fleetsAccess.addMember).toHaveBeenCalledWith(3, 1);
-    expect(result.summary).toContain("1 host");
-  });
-
-  it("fails clearly when the fleets plugin is off", async () => {
-    await expect(
-      applyProposal("propose_create_fleet", { name: "prod" }, deps()),
-    ).rejects.toThrow("The fleets plugin is not available");
-  });
-
-  it("edits a snippet through the snippets plugin", async () => {
-    provided["snippets.access"] = snippetsAccess;
-    snippetsAccess.get.mockResolvedValue({ id: 4, name: "a" });
-
-    await applyProposal(
-      "propose_update_snippet",
-      { snippetId: 4, changes: { name: "b" } },
-      deps(),
-    );
-
-    expect(snippetsAccess.update).toHaveBeenCalledWith(4, { name: "b" });
-  });
-});
diff --git a/plugins/ai/tests/backend/tools/readonly-command-tool.test.ts b/plugins/ai/tests/backend/tools/readonly-command-tool.test.ts
deleted file mode 100644
index 51202fa70..000000000
--- a/plugins/ai/tests/backend/tools/readonly-command-tool.test.ts
+++ /dev/null
@@ -1,75 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import { availableTools, getTool } from "../../../src/backend/tools/catalog.js";
-import type { ToolContext } from "../../../src/backend/tools/types.js";
-
-const tool = getTool("run_readonly_command")!;
-
-function contextWith(overrides: Partial<ToolContext> = {}) {
-  const withConnection = vi.fn(async () => ({
-    stdout: "Filesystem  Size",
-    stderr: "",
-    code: 0,
-  }));
-  const record = vi.fn(async () => {});
-  const context = {
-    userId: "user-1",
-    conversationId: 1,
-    allowReadOnlyCommands: true,
-    deps: {
-      hosts: {
-        checkAccess: vi.fn(async () => ({ hasAccess: true })),
-      },
-      ssh: { withConnection },
-      audit: { record },
-    },
-    ...overrides,
-  } as unknown as ToolContext;
-  return { context, withConnection, record };
-}
-
-describe("run_readonly_command", () => {
-  it("is only offered to a user who opted in", () => {
-    const names = (allow: boolean) =>
-      availableTools(() => true, { allowReadOnlyCommands: allow }).map(
-        (entry) => entry.name,
-      );
-    expect(names(false)).not.toContain("run_readonly_command");
-    expect(names(true)).toContain("run_readonly_command");
-  });
-
-  it("runs an allowlisted command and audits it", async () => {
-    const { context, withConnection, record } = contextWith();
-    const result = await tool.handler({ hostId: 4, command: "df -h" }, context);
-    expect(result).toEqual({ output: "Filesystem  Size" });
-    expect(withConnection).toHaveBeenCalledTimes(1);
-    expect(record).toHaveBeenCalledWith(
-      expect.objectContaining({ action: "ai_readonly_command", success: true }),
-    );
-  });
-
-  it("refuses a command that is not read-only", async () => {
-    const { context, withConnection } = contextWith();
-    const result = (await tool.handler(
-      { hostId: 4, command: "rm -rf /tmp/x" },
-      context,
-    )) as { error?: string };
-    expect(result.error).toBeTruthy();
-    expect(withConnection).not.toHaveBeenCalled();
-  });
-
-  it("refuses when the user has not opted in, or cannot reach the host", async () => {
-    const off = contextWith({ allowReadOnlyCommands: false });
-    expect(
-      await tool.handler({ hostId: 4, command: "uptime" }, off.context),
-    ).toEqual({ error: "The user has not allowed read-only commands" });
-
-    const denied = contextWith();
-    (
-      denied.context.deps.hosts.checkAccess as ReturnType<typeof vi.fn>
-    ).mockResolvedValue({ hasAccess: false });
-    expect(
-      await tool.handler({ hostId: 4, command: "uptime" }, denied.context),
-    ).toEqual({ error: "Host not found" });
-    expect(denied.withConnection).not.toHaveBeenCalled();
-  });
-});
diff --git a/plugins/ai/tests/backend/tools/tool-catalog.test.ts b/plugins/ai/tests/backend/tools/tool-catalog.test.ts
deleted file mode 100644
index db6dbac3b..000000000
--- a/plugins/ai/tests/backend/tools/tool-catalog.test.ts
+++ /dev/null
@@ -1,112 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  AI_TOOLS,
-  FORBIDDEN_DOMAINS,
-  getTool,
-  listToolNames,
-  toolDefinitions,
-} from "../../../src/backend/tools/catalog.js";
-
-/**
- * The security regression test for the whole feature.
- *
- * Tools run in-process and never pass through the RBAC-gated routers, so "the
- * assistant cannot reach credentials or user administration" is a property of
- * this catalog, and nothing else. If a future change adds a tool that touches a
- * forbidden domain, this test is what catches it.
- */
-describe("AI tool catalog", () => {
-  it("exposes no tool naming a forbidden domain", () => {
-    for (const tool of AI_TOOLS) {
-      for (const domain of FORBIDDEN_DOMAINS) {
-        expect(
-          tool.name.includes(domain),
-          `${tool.name} references the forbidden domain "${domain}"`,
-        ).toBe(false);
-      }
-    }
-  });
-
-  it("has no tool that could read a credential", () => {
-    const banned = [
-      "get_credential",
-      "list_credentials",
-      "get_password",
-      "get_private_key",
-      "get_api_key",
-      "create_user",
-      "delete_user",
-      "grant_permission",
-      "update_settings",
-    ];
-    for (const name of banned) {
-      expect(getTool(name), `${name} must not exist`).toBeUndefined();
-    }
-  });
-
-  it("only allows read or propose categories", () => {
-    for (const tool of AI_TOOLS) {
-      expect(["read", "propose"]).toContain(tool.category);
-    }
-  });
-
-  it("names every tool by its category", () => {
-    // A propose tool that does not say "propose" would read as a direct action
-    // in the transcript, which is exactly the confusion this feature avoids.
-    for (const tool of AI_TOOLS) {
-      if (tool.category === "propose") {
-        expect(
-          tool.name.startsWith("propose_"),
-          `${tool.name} is a propose tool but is not named propose_*`,
-        ).toBe(true);
-      } else {
-        expect(
-          tool.name.startsWith("propose_"),
-          `${tool.name} is a read tool but is named propose_*`,
-        ).toBe(false);
-      }
-    }
-  });
-
-  it("has unique tool names", () => {
-    const names = listToolNames();
-    expect(new Set(names).size).toBe(names.length);
-  });
-
-  it("gives every tool a described object schema", () => {
-    for (const definition of toolDefinitions()) {
-      expect(definition.description.length, definition.name).toBeGreaterThan(
-        20,
-      );
-      expect(definition.parameters.type, definition.name).toBe("object");
-      // additionalProperties:false keeps a model from smuggling extra fields
-      // past the handler's explicit reads.
-      expect(definition.parameters.additionalProperties, definition.name).toBe(
-        false,
-      );
-    }
-  });
-
-  it("never takes a userId from the model", () => {
-    // Ownership is always derived from the verified JWT. A userId parameter
-    // would let the model ask for another account's data.
-    for (const tool of AI_TOOLS) {
-      const properties = (tool.parameters.properties ?? {}) as Record<
-        string,
-        unknown
-      >;
-      for (const key of Object.keys(properties)) {
-        expect(
-          /^user_?id$/i.test(key),
-          `${tool.name} accepts a model-supplied ${key}`,
-        ).toBe(false);
-      }
-    }
-  });
-
-  it("still offers the read tools the assistant needs to be useful", () => {
-    for (const name of ["list_hosts", "list_snippets", "list_automations"]) {
-      expect(getTool(name), name).toBeDefined();
-    }
-  });
-});
diff --git a/plugins/ai/tests/frontend/AiProviderSettings.test.tsx b/plugins/ai/tests/frontend/AiProviderSettings.test.tsx
deleted file mode 100644
index e6514b72d..000000000
--- a/plugins/ai/tests/frontend/AiProviderSettings.test.tsx
+++ /dev/null
@@ -1,99 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import {
-  cleanup,
-  fireEvent,
-  render,
-  screen,
-  waitFor,
-} from "@testing-library/react";
-import type { AiProvider } from "../../src/frontend/ai-api";
-
-const api = vi.hoisted(() => ({
-  createAiProvider: vi.fn(),
-  deleteAiProvider: vi.fn(),
-  getAiProviderModels: vi.fn(),
-  probeAiModels: vi.fn(),
-  updateAiProvider: vi.fn(),
-}));
-
-vi.mock("../../src/frontend/ai-api", () => api);
-vi.mock("react-i18next", async (importOriginal) => ({
-  ...(await importOriginal<object>()),
-  useTranslation: () => ({ t: (key: string) => key }),
-}));
-vi.mock("sonner", () => ({
-  toast: { success: vi.fn(), error: vi.fn() },
-}));
-
-import { AiProviderSettings } from "../../src/frontend/AiProviderSettings";
-
-const provider: AiProvider = {
-  id: 7,
-  providerType: "ollama",
-  label: "Local Ollama",
-  baseUrl: "http://localhost:11434",
-  apiKeyPrefix: null,
-  defaultModel: "llama3.1",
-  enabled: true,
-  createdAt: "2026-08-21T00:00:00Z",
-};
-
-beforeEach(() => {
-  api.getAiProviderModels.mockReset();
-  api.getAiProviderModels.mockResolvedValue([]);
-  api.updateAiProvider.mockReset();
-  api.updateAiProvider.mockResolvedValue(provider);
-});
-
-afterEach(cleanup);
-
-describe("AiProviderSettings", () => {
-  it("edits an existing provider name and configured model", async () => {
-    const onChanged = vi.fn();
-    render(<AiProviderSettings providers={[provider]} onChanged={onChanged} />);
-
-    expect(screen.getByText(/llama3\.1/)).toBeTruthy();
-    fireEvent.click(screen.getByRole("button", { name: "ai.editProvider" }));
-
-    const label = screen.getByLabelText("ai.providerLabel");
-    const model = screen.getByLabelText("ai.defaultModel");
-    fireEvent.change(label, { target: { value: "Production Ollama" } });
-    fireEvent.change(model, { target: { value: "qwen3:32b" } });
-    fireEvent.click(screen.getByRole("button", { name: "ai.save" }));
-
-    await waitFor(() => {
-      expect(api.updateAiProvider).toHaveBeenCalledWith(7, {
-        label: "Production Ollama",
-        defaultModel: "qwen3:32b",
-      });
-    });
-    expect(onChanged).toHaveBeenCalledWith(7);
-  });
-
-  it("loads the saved provider model list when editing starts", async () => {
-    api.getAiProviderModels.mockResolvedValue(["llama3.1", "qwen3:32b"]);
-    render(<AiProviderSettings providers={[provider]} onChanged={() => {}} />);
-
-    fireEvent.click(screen.getByRole("button", { name: "ai.editProvider" }));
-
-    await waitFor(() => {
-      expect(api.getAiProviderModels).toHaveBeenCalledWith(7);
-    });
-    expect(
-      screen.getByRole("combobox", { name: "ai.defaultModel" }),
-    ).toBeTruthy();
-  });
-
-  it("shows the provider error when refreshing models fails", async () => {
-    api.getAiProviderModels.mockRejectedValue(
-      new Error("Add llm.internal to the AI endpoint allowlist"),
-    );
-    render(<AiProviderSettings providers={[provider]} onChanged={() => {}} />);
-
-    fireEvent.click(screen.getByRole("button", { name: "ai.editProvider" }));
-
-    expect(
-      await screen.findByText("Add llm.internal to the AI endpoint allowlist"),
-    ).toBeTruthy();
-  });
-});
diff --git a/plugins/ai/tests/frontend/activate.test.tsx b/plugins/ai/tests/frontend/activate.test.tsx
deleted file mode 100644
index 95f86c429..000000000
--- a/plugins/ai/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,69 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { waitFor } from "@testing-library/react";
-
-vi.mock("../../src/frontend/ai-api", async (importOriginal) => ({
-  ...(await importOriginal<Record<string, unknown>>()),
-  getAiStatus: vi.fn(async () => ({ globallyEnabled: true, enabled: true })),
-}));
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-const declared = (views?: Array<{ id: string }>) =>
-  (views ?? []).map((view) => view.id).sort();
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe(`${manifest.id} activate`, () => {
-  it("activates and registers only views its manifest declares", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    const contributes = manifest.contributes as unknown as Record<
-      string,
-      Array<{ id: string }> | undefined
-    >;
-    const tabs = declared(contributes.tabs);
-    // A rail panel may reuse one of the plugin's tab ids.
-    const panels = [...declared(contributes.panels), ...tabs];
-    const cards = declared(contributes.dashboardCards);
-    for (const id of rendered.registered.tabs()) expect(tabs).toContain(id);
-    for (const id of rendered.registered.panels()) expect(panels).toContain(id);
-    for (const id of rendered.registered.dashboardCards()) {
-      expect(cards).toContain(id);
-    }
-  });
-
-  it("removes everything it registered on deactivate", async () => {
-    const app = await renderWithApp(plugin, { manifest, locales });
-    await app.deactivate();
-    expect(app.registered.tabs()).toEqual([]);
-    expect(app.registered.panels()).toEqual([]);
-    expect(app.registered.railItems()).toEqual([]);
-    expect(app.registered.hostActions()).toEqual([]);
-    expect(app.registered.hostEditorSections()).toEqual([]);
-    expect(app.registered.dashboardCards()).toEqual([]);
-    expect(app.registered.settingsComponents()).toEqual([]);
-    expect(app.registered.actions()).toEqual([]);
-  });
-
-  it("registers the providers list as its custom settings field", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.settingsComponents()).toEqual(["providers"]);
-  });
-
-  it("adds the assistant tab once AI is on for the user", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    await waitFor(() => expect(rendered!.registered.tabs()).toEqual(["ai"]));
-  });
-});
diff --git a/plugins/ai/tests/frontend/labels.test.ts b/plugins/ai/tests/frontend/labels.test.ts
deleted file mode 100644
index 8f165f713..000000000
--- a/plugins/ai/tests/frontend/labels.test.ts
+++ /dev/null
@@ -1,73 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  fieldLabel,
-  humanize,
-  mentionLabel,
-  toolLabel,
-} from "../../src/frontend/labels";
-import { AI_TOOLS } from "../../src/backend/tools/catalog.js";
-
-describe("humanize", () => {
-  it("splits camelCase into words", () => {
-    // The case that shipped as "thresholddurationseconds".
-    expect(humanize("thresholdDurationSeconds")).toBe(
-      "Threshold duration seconds",
-    );
-  });
-
-  it("splits snake_case into words", () => {
-    expect(humanize("propose_create_automation")).toBe(
-      "Propose create automation",
-    );
-  });
-
-  it("leaves a single word alone apart from casing", () => {
-    expect(humanize("port")).toBe("Port");
-  });
-
-  it("returns the input when there is nothing to split", () => {
-    expect(humanize("")).toBe("");
-  });
-});
-
-describe("fieldLabel", () => {
-  it("uses the mapped name where there is one", () => {
-    expect(fieldLabel("thresholdDurationSeconds")).toBe("Duration (seconds)");
-    expect(fieldLabel("cooldownMinutes")).toBe("Cooldown (minutes)");
-    expect(fieldLabel("ip")).toBe("Address");
-  });
-
-  it("falls back to humanizing an unmapped key", () => {
-    expect(fieldLabel("someFutureField")).toBe("Some future field");
-  });
-
-  it("never returns a run-on identifier", () => {
-    for (const key of ["thresholdDurationSeconds", "hostIds", "triggerType"]) {
-      expect(fieldLabel(key)).not.toBe(key.toLowerCase());
-    }
-  });
-});
-
-describe("toolLabel", () => {
-  it("phrases tools as actions rather than function names", () => {
-    expect(toolLabel("list_hosts")).toBe("Reading hosts");
-    expect(toolLabel("propose_create_fleet")).toBe("Create fleet");
-  });
-
-  it("covers every tool in the catalog", () => {
-    // A new tool without a label would surface its raw snake_case name.
-    for (const tool of AI_TOOLS) {
-      const label = toolLabel(tool.name);
-      expect(label, tool.name).not.toContain("_");
-      expect(label, tool.name).not.toBe(tool.name);
-    }
-  });
-});
-
-describe("mentionLabel", () => {
-  it("capitalises the mention kinds", () => {
-    expect(mentionLabel("host")).toBe("Host");
-    expect(mentionLabel("snippet")).toBe("Snippet");
-    expect(mentionLabel("automation")).toBe("Automation");
-  });
-});
diff --git a/plugins/ai/tests/frontend/transcript.test.ts b/plugins/ai/tests/frontend/transcript.test.ts
deleted file mode 100644
index 2c396628f..000000000
--- a/plugins/ai/tests/frontend/transcript.test.ts
+++ /dev/null
@@ -1,67 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  buildTimeline,
-  finishedRunEntries,
-  userEntry,
-} from "../../src/frontend/transcript";
-
-describe("finishedRunEntries", () => {
-  it("keeps the run's tool steps ahead of its reply", () => {
-    const entries = finishedRunEntries(
-      2,
-      [{ id: "tool-0", name: "list_hosts", arguments: {}, result: [] }],
-      "done",
-    );
-    expect(entries).toEqual([
-      {
-        kind: "tool",
-        tool: {
-          id: "run-2-tool-0",
-          name: "list_hosts",
-          arguments: {},
-          result: [],
-        },
-      },
-      { kind: "message", role: "assistant", content: "done" },
-    ]);
-  });
-
-  it("adds no empty reply", () => {
-    expect(finishedRunEntries(0, [], "")).toEqual([]);
-  });
-});
-
-describe("buildTimeline", () => {
-  it("keeps past steps when a new run starts", () => {
-    const history = [
-      userEntry("check"),
-      ...finishedRunEntries(
-        0,
-        [{ id: "tool-0", name: "list_hosts", arguments: {} }],
-        "",
-      ),
-      userEntry("continue"),
-    ];
-    const timeline = buildTimeline(
-      history,
-      {
-        tools: [{ id: "tool-0", name: "get_host", arguments: {} }],
-        assistantText: "hi",
-      },
-      [],
-    );
-
-    expect(timeline.map((item) => item.kind)).toEqual([
-      "message",
-      "tool",
-      "message",
-      "tool",
-      "message",
-    ]);
-    const tools = timeline.filter((item) => item.kind === "tool");
-    expect(tools.map((item) => item.live)).toEqual([false, true]);
-    expect(new Set(timeline.map((item) => item.key)).size).toBe(
-      timeline.length,
-    );
-  });
-});
diff --git a/plugins/ai/tsconfig.json b/plugins/ai/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/ai/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/ai/vitest.config.ts b/plugins/ai/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/ai/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/alerts/CHANGELOG.md b/plugins/alerts/CHANGELOG.md
deleted file mode 100644
index c67627315..000000000
--- a/plugins/alerts/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Adds one inbox for every alert in Termix. Alerts can also be sent to webhooks, ntfy, Discord and email, with delivery rules to pick what goes where.
diff --git a/plugins/alerts/README.md b/plugins/alerts/README.md
deleted file mode 100644
index 75d25acac..000000000
--- a/plugins/alerts/README.md
+++ /dev/null
@@ -1,39 +0,0 @@
-# Alerts
-
-One inbox for every alert, with delivery to webhooks, ntfy, Discord and email.
-
-## Features
-
-- One inbox for alerts from every part of Termix.
-- Popups for new alerts, filtered by severity.
-- Channels that send alerts to webhooks, ntfy, Discord and email.
-- Delivery rules that pick which alerts go to which channel.
-- Optional news from the Termix team, like security notices and new releases.
-
-## Settings
-
-### Admin
-
-- Termix announcements: show news from the Termix team in everyone's inbox.
-- Keep alerts for (days): older alerts are removed from every inbox.
-- SMTP server, port, TLS, username, password and from address: needed for email channels. Leave the server empty to turn email off.
-
-### User
-
-- Alert popups: all alerts, warnings and critical, critical only, or none.
-
-## Permissions
-
-- `alerts.use`: Get alerts in the inbox and send them to your own channels. Admins and users have it by default.
-
-## For plugin authors
-
-Send an alert from any plugin with `ctx.notify.send()`. This plugin stores it and delivers it. Do not build a separate notification system into a plugin.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/alerts/locales/en.json b/plugins/alerts/locales/en.json
deleted file mode 100644
index b3203e591..000000000
--- a/plugins/alerts/locales/en.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Alerts"
-  },
-  "permissions": {
-    "use": {
-      "title": "Use alerts",
-      "description": "Get alerts in the inbox and send them to your own channels."
-    }
-  },
-  "onboarding": {
-    "feature": "Alerts",
-    "featureDesc": "Every alert in one inbox, sent on to Discord, ntfy, email or a webhook if you want."
-  },
-  "settings": {
-    "group": {
-      "general": "General",
-      "email": "Email"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Termix announcements",
-        "description": "Show news from the Termix team, like security notices and releases, in everyone's inbox."
-      },
-      "retentionDays": {
-        "label": "Keep alerts for (days)",
-        "description": "Older alerts are removed from every inbox."
-      },
-      "smtpHost": {
-        "label": "SMTP server",
-        "description": "Needed for email channels. Leave empty to turn email off.",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "SMTP port",
-        "description": "Usually 587 with STARTTLS or 465 with TLS."
-      },
-      "smtpSecure": {
-        "label": "Use TLS from the start",
-        "description": "Turn on for port 465. Leave off for 587, which upgrades to TLS on its own."
-      },
-      "smtpUser": {
-        "label": "SMTP username",
-        "description": "Leave empty if the server does not need a login."
-      },
-      "smtpPassword": {
-        "label": "SMTP password",
-        "description": "Stored encrypted."
-      },
-      "smtpFrom": {
-        "label": "From address",
-        "description": "The sender alerts come from.",
-        "placeholder": "Termix <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "Alert popups",
-        "description": "Which new alerts pop up while you use Termix. They always land in the inbox.",
-        "all": "All alerts",
-        "warning": "Warnings and critical",
-        "critical": "Critical only",
-        "off": "None"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Inbox",
-    "channels": "Channels",
-    "rules": "Delivery rules"
-  },
-  "severity": {
-    "info": "Info",
-    "success": "Success",
-    "warning": "Warning",
-    "critical": "Critical"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "Open",
-    "view": "View",
-    "unread": "Unread",
-    "deliveryFailed_one": "{{count}} channel failed",
-    "deliveryFailed_other": "{{count}} channels failed",
-    "markRead": "Mark as read",
-    "markUnread": "Mark as unread",
-    "markAllRead": "Mark all as read",
-    "delete": "Delete",
-    "clearRead": "Delete read alerts",
-    "cleared_one": "Deleted {{count}} alert",
-    "cleared_other": "Deleted {{count}} alerts",
-    "filterAll": "All",
-    "filterUnread": "Unread",
-    "anySeverity": "Any severity",
-    "anySource": "Any source",
-    "openAll": "Open in a tab",
-    "empty": "No alerts yet.",
-    "emptyUnread": "You are all caught up.",
-    "loadMore": "Load more"
-  },
-  "channels": {
-    "intro": "Channels are where alerts can go outside Termix. Delivery rules pick which alerts use them.",
-    "add": "Add channel",
-    "edit": "Edit channel",
-    "test": "Send a test",
-    "testSent": "Test alert sent",
-    "testFailed": "Test failed: {{error}}",
-    "deleteConfirm": "Delete the channel \"{{name}}\"?",
-    "deleted": "Channel deleted",
-    "empty": "No channels yet.",
-    "enabled": "Enabled",
-    "needsSave": "This channel needs to be opened and saved again before it can send.",
-    "name": "Name",
-    "nameRequired": "Name is required",
-    "type": "Type",
-    "types": {
-      "webhook": "Webhook",
-      "ntfy": "ntfy",
-      "discord": "Discord",
-      "email": "Email"
-    },
-    "emailUnavailable": "Email needs an SMTP server, which an admin sets up in the Alerts settings.",
-    "webhookUrl": "URL",
-    "webhookHint": "Gets a JSON body for every alert.",
-    "method": "Method",
-    "headers": "Headers",
-    "headersHint": "One per line, like Name: value.",
-    "ntfyServer": "Server URL",
-    "ntfyTopic": "Topic",
-    "ntfyToken": "Access token (optional)",
-    "discordUrl": "Discord webhook URL",
-    "discordHint": "From the channel's settings in Discord, under Integrations.",
-    "discordUsername": "Display name (optional)",
-    "discordAvatar": "Avatar URL (optional)",
-    "emailTo": "Send to",
-    "emailHint": "Separate more than one address with commas.",
-    "privateNetwork": "Allow a private network address",
-    "privateNetworkHint": "Only works for hosts an admin allows in the private endpoint list."
-  },
-  "rules": {
-    "intro": "A delivery rule sends matching alerts to your channels. Alerts always stay in the inbox too.",
-    "add": "Add rule",
-    "edit": "Edit rule",
-    "empty": "No rules yet, so alerts only show up in the inbox.",
-    "needChannel": "Add a channel first.",
-    "enabled": "Enabled",
-    "name": "Name",
-    "nameRequired": "Name is required",
-    "match": "Alerts to send",
-    "matchHint": "* for everything, automations.* for everything from automations, or one exact kind.",
-    "minSeverity": "At least",
-    "channels": "Send to",
-    "channelRequired": "Pick at least one channel",
-    "deleteConfirm": "Delete the rule \"{{name}}\"?",
-    "everything": "Everything",
-    "summary": "{{match}}, {{severity}} or higher, to {{channels}}"
-  },
-  "actions": {
-    "cancel": "Cancel",
-    "save": "Save",
-    "saving": "Saving...",
-    "delete": "Delete"
-  },
-  "widget": {
-    "name": "Alert Feed",
-    "description": "Your latest alerts, with a quick way to mark them read",
-    "maxItems": "Max items",
-    "showRead": "Show read alerts",
-    "allClear": "All clear",
-    "loading": "Loading..."
-  },
-  "plugin": {
-    "name": "Alerts"
-  }
-}
diff --git a/plugins/alerts/locales/translated/af_ZA.json b/plugins/alerts/locales/translated/af_ZA.json
deleted file mode 100644
index 6c7ef8139..000000000
--- a/plugins/alerts/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Waarskuwings"
-  },
-  "permissions": {
-    "use": {
-      "title": "Gebruik waarskuwings",
-      "description": "Kry waarskuwings in die inboks en stuur dit na jou eie kanale."
-    }
-  },
-  "onboarding": {
-    "feature": "Waarskuwings",
-    "featureDesc": "Elke waarskuwing in een inboks, gestuur na Discord, ntfy, e-pos of 'n webhook as jy wil."
-  },
-  "settings": {
-    "group": {
-      "general": "Algemeen",
-      "email": "E-pos"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Termix-aankondigings",
-        "description": "Wys nuus van die Termix-span, soos sekuriteitskennisgewings en vrystellings, in almal se inboks."
-      },
-      "retentionDays": {
-        "label": "Hou waarskuwings vir (dae)",
-        "description": "Ouer waarskuwings word uit elke inboks verwyder."
-      },
-      "smtpHost": {
-        "label": "SMTP-bediener",
-        "description": "Nodig vir e-poskanale. Los leeg om e-pos af te skakel.",
-        "placeholder": "smtp.voorbeeld.com"
-      },
-      "smtpPort": {
-        "label": "SMTP-poort",
-        "description": "Gewoonlik 587 met STARTTLS of 465 met TLS."
-      },
-      "smtpSecure": {
-        "label": "Gebruik TLS van die begin af",
-        "description": "Skakel aan vir poort 465. Los af vir poort 587, wat op sy eie na TLS opgradeer."
-      },
-      "smtpUser": {
-        "label": "SMTP-gebruikersnaam",
-        "description": "Los leeg as die bediener nie 'n aanmelding benodig nie."
-      },
-      "smtpPassword": {
-        "label": "SMTP-wagwoord",
-        "description": "Geënkripteer gestoor."
-      },
-      "smtpFrom": {
-        "label": "Van adres",
-        "description": "Die senderwaarskuwings kom vandaan.",
-        "placeholder": "Termix <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "Waarskuwings-opspringvensters",
-        "description": "Watter nuwe waarskuwings verskyn terwyl jy Termix gebruik? Hulle beland altyd in die inboks.",
-        "all": "Alle waarskuwings",
-        "warning": "Waarskuwings en kritieke",
-        "critical": "Slegs krities",
-        "off": "Geen"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Inboks",
-    "channels": "Kanale",
-    "rules": "Afleweringsreëls"
-  },
-  "severity": {
-    "info": "Inligting",
-    "success": "Sukses",
-    "warning": "Waarskuwing",
-    "critical": "Krities"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "Oop",
-    "view": "Bekyk",
-    "unread": "Ongelees",
-    "deliveryFailed_one": "{{count}} kanaal het misluk",
-    "deliveryFailed_other": "{{count}} kanale het misluk",
-    "markRead": "Merk as gelees",
-    "markUnread": "Merk as ongelees",
-    "markAllRead": "Merk alles as gelees",
-    "delete": "Vee uit",
-    "clearRead": "Vee leeswaarskuwings uit",
-    "cleared_one": "Verwyderde {{count}} waarskuwing",
-    "cleared_other": "Verwyderde {{count}} waarskuwings",
-    "filterAll": "Alles",
-    "filterUnread": "Ongelees",
-    "anySeverity": "Enige erns",
-    "anySource": "Enige bron",
-    "openAll": "Maak oop in 'n oortjie",
-    "empty": "Geen waarskuwings nog nie.",
-    "emptyUnread": "Julle is almal ingehaal.",
-    "loadMore": "Laai meer"
-  },
-  "channels": {
-    "intro": "Kanale is waar waarskuwings buite Termix kan gaan. Afleweringsreëls kies watter waarskuwings dit gebruik.",
-    "add": "Voeg kanaal by",
-    "edit": "Wysig kanaal",
-    "test": "Stuur 'n toets",
-    "testSent": "Toetswaarskuwing gestuur",
-    "testFailed": "Toets het misluk: {{error}}",
-    "deleteConfirm": "Vee die kanaal \"{{name}} \" uit?",
-    "deleted": "Kanaal uitgevee",
-    "empty": "Geen kanale nog nie.",
-    "enabled": "Geaktiveer",
-    "needsSave": "Hierdie kanaal moet weer oopgemaak en gestoor word voordat dit kan stuur.",
-    "name": "Naam",
-    "nameRequired": "Naam word vereis",
-    "type": "Tipe",
-    "types": {
-      "webhook": "Webhaak",
-      "ntfy": "ntfy",
-      "discord": "Disharmonie",
-      "email": "E-pos"
-    },
-    "emailUnavailable": "E-pos benodig 'n SMTP-bediener, wat 'n administrateur in die Waarskuwingsinstellings opstel.",
-    "webhookUrl": "URL",
-    "webhookHint": "Kry 'n JSON-liggaam vir elke waarskuwing.",
-    "method": "Metode",
-    "headers": "Koptekste",
-    "headersHint": "Een per lyn, soos Naam: waarde.",
-    "ntfyServer": "Bediener-URL",
-    "ntfyTopic": "Onderwerp",
-    "ntfyToken": "Toegangstoken (opsioneel)",
-    "discordUrl": "Discord webhook URL",
-    "discordHint": "Van die kanaal se instellings in Discord, onder Integrasies.",
-    "discordUsername": "Vertoonnaam (opsioneel)",
-    "discordAvatar": "Avatar-URL (opsioneel)",
-    "emailTo": "Stuur na",
-    "emailHint": "Skei meer as een adres met kommas.",
-    "privateNetwork": "Laat 'n privaat netwerkadres toe",
-    "privateNetworkHint": "Werk slegs vir gashere wat 'n administrateur toelaat in die privaat eindpuntlys."
-  },
-  "rules": {
-    "intro": "'n Afleweringsreël stuur ooreenstemmende waarskuwings na jou kanale. Waarskuwings bly ook altyd in die inboks.",
-    "add": "Voeg reël by",
-    "edit": "Wysig reël",
-    "empty": "Geen reëls nog nie, so waarskuwings verskyn slegs in die inboks.",
-    "needChannel": "Voeg eers 'n kanaal by.",
-    "enabled": "Geaktiveer",
-    "name": "Naam",
-    "nameRequired": "Naam word vereis",
-    "match": "Waarskuwings om te stuur",
-    "matchHint": "* vir alles, outomatisasies.* vir alles van outomatisasies, of een presiese soort.",
-    "minSeverity": "Ten minste",
-    "channels": "Stuur na",
-    "channelRequired": "Kies ten minste een kanaal",
-    "deleteConfirm": "Vee die reël \"{{name}} \" uit?",
-    "everything": "Alles",
-    "summary": "{{match}}, {{severity}} of hoër, na {{channels}}"
-  },
-  "actions": {
-    "cancel": "Kanselleer",
-    "save": "Stoor",
-    "saving": "Stoor...",
-    "delete": "Vee uit"
-  },
-  "widget": {
-    "name": "Waarskuwingsvoer",
-    "description": "Jou nuutste waarskuwings, met 'n vinnige manier om hulle gelees te merk",
-    "maxItems": "Maksimum items",
-    "showRead": "Wys leeswaarskuwings",
-    "allClear": "Alles duidelik",
-    "loading": "Laai tans..."
-  },
-  "plugin": {
-    "name": "Waarskuwings"
-  }
-}
diff --git a/plugins/alerts/locales/translated/ar_SA.json b/plugins/alerts/locales/translated/ar_SA.json
deleted file mode 100644
index 46049fdb9..000000000
--- a/plugins/alerts/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "التنبيهات"
-  },
-  "permissions": {
-    "use": {
-      "title": "استخدم التنبيهات",
-      "description": "احصل على التنبيهات في صندوق الوارد وأرسلها إلى قنواتك الخاصة."
-    }
-  },
-  "onboarding": {
-    "feature": "التنبيهات",
-    "featureDesc": "يتم إرسال جميع التنبيهات في صندوق وارد واحد، إلى Discord أو ntfy أو البريد الإلكتروني أو webhook إذا كنت ترغب في ذلك."
-  },
-  "settings": {
-    "group": {
-      "general": "عام",
-      "email": "البريد الإلكتروني"
-    },
-    "admin": {
-      "announcements": {
-        "label": "إعلانات تيرميكس",
-        "description": "اعرض الأخبار من فريق Termix، مثل الإشعارات الأمنية والإصدارات، في صندوق بريد الجميع."
-      },
-      "retentionDays": {
-        "label": "احتفظ بالتنبيهات لمدة (أيام)",
-        "description": "تتم إزالة التنبيهات القديمة من جميع صناديق البريد الوارد."
-      },
-      "smtpHost": {
-        "label": "خادم SMTP",
-        "description": "هذا الحقل ضروري لقنوات البريد الإلكتروني. اتركه فارغاً لإيقاف تشغيل البريد الإلكتروني.",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "منفذ SMTP",
-        "description": "عادةً ما يكون 587 مع STARTTLS أو 465 مع TLS."
-      },
-      "smtpSecure": {
-        "label": "استخدم بروتوكول TLS منذ البداية",
-        "description": "قم بتشغيل المنفذ 465. اتركه معطلاً للمنفذ 587، الذي يتم ترقيته إلى TLS تلقائيًا."
-      },
-      "smtpUser": {
-        "label": "اسم مستخدم SMTP",
-        "description": "اترك هذا الحقل فارغًا إذا لم يكن الخادم بحاجة إلى تسجيل دخول."
-      },
-      "smtpPassword": {
-        "label": "كلمة مرور SMTP",
-        "description": "مخزنة بشكل مشفر."
-      },
-      "smtpFrom": {
-        "label": "عنوان المرسل",
-        "description": "تأتي تنبيهات المرسل من...",
-        "placeholder": "Termix <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "نوافذ تنبيه منبثقة",
-        "description": "ما هي التنبيهات الجديدة التي تظهر أثناء استخدامك لبرنامج Termix؟ تصل هذه التنبيهات دائمًا إلى صندوق الوارد.",
-        "all": "جميع التنبيهات",
-        "warning": "تحذيرات ومعلومات هامة",
-        "critical": "للنقد فقط",
-        "off": "بلا"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "صندوق الوارد",
-    "channels": "القنوات",
-    "rules": "قواعد التوصيل"
-  },
-  "severity": {
-    "info": "معلومات",
-    "success": "نجاح",
-    "warning": "تحذير",
-    "critical": "شديد الأهمية"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "فتح",
-    "view": "عرض",
-    "unread": "غير مقروء",
-    "deliveryFailed_one": "فشل القناة {{count}}",
-    "deliveryFailed_other": "فشلت القنوات {{count}}",
-    "markRead": "ضع علامة كمقروء",
-    "markUnread": "ضع علامة كغير مقروء",
-    "markAllRead": "ضع علامة \"مقروء\" على الكل",
-    "delete": "حذف",
-    "clearRead": "حذف تنبيهات القراءة",
-    "cleared_one": "تنبيه الحذف {{count}}",
-    "cleared_other": "تم حذف التنبيهات {{count}}",
-    "filterAll": "الكل",
-    "filterUnread": "غير مقروء",
-    "anySeverity": "أي درجة من الشدة",
-    "anySource": "أي مصدر",
-    "openAll": "افتح في علامة تبويب",
-    "empty": "لم يتم تلقي أي تنبيهات حتى الآن.",
-    "emptyUnread": "لقد اطلعت على كل شيء.",
-    "loadMore": "تحميل المزيد"
-  },
-  "channels": {
-    "intro": "القنوات هي المكان الذي يمكن أن تصل إليه التنبيهات خارج Termix. وتحدد قواعد التسليم التنبيهات التي تستخدمها.",
-    "add": "إضافة قناة",
-    "edit": "قناة التحرير",
-    "test": "أرسل اختبارًا",
-    "testSent": "تم إرسال تنبيه اختبار",
-    "testFailed": "فشل الاختبار: {{error}}",
-    "deleteConfirm": "حذف القناة \"{{name}}\"؟",
-    "deleted": "تم حذف القناة",
-    "empty": "لا توجد قنوات حتى الآن.",
-    "enabled": "مُمكّن",
-    "needsSave": "يجب فتح هذه القناة وحفظها مرة أخرى قبل أن تتمكن من الإرسال.",
-    "name": "الاسم",
-    "nameRequired": "الاسم مطلوب",
-    "type": "النوع",
-    "types": {
-      "webhook": "رابط الويب",
-      "ntfy": "ntfy",
-      "discord": "Discord",
-      "email": "البريد الإلكتروني"
-    },
-    "emailUnavailable": "يحتاج البريد الإلكتروني إلى خادم SMTP، والذي يقوم المسؤول بإعداده في إعدادات التنبيهات.",
-    "webhookUrl": "URL",
-    "webhookHint": "يحصل على نص JSON لكل تنبيه.",
-    "method": "طريقة",
-    "headers": "العناوين",
-    "headersHint": "واحد في كل سطر، مثل الاسم: القيمة.",
-    "ntfyServer": "عنوان URL للخادم",
-    "ntfyTopic": "الموضوع",
-    "ntfyToken": "رمز الوصول (اختياري)",
-    "discordUrl": "رابط ويب هوك ديسكورد",
-    "discordHint": "من إعدادات القناة في ديسكورد، ضمن قسم التكاملات.",
-    "discordUsername": "اسم العرض (اختياري)",
-    "discordAvatar": "رابط الصورة الرمزية (اختياري)",
-    "emailTo": "أرسل إلى",
-    "emailHint": "افصل بين أكثر من عنوان واحد باستخدام الفواصل.",
-    "privateNetwork": "السماح بعنوان شبكة خاصة",
-    "privateNetworkHint": "لا يعمل إلا مع المضيفين الذين يسمح لهم المسؤول بإضافتهم إلى قائمة نقاط النهاية الخاصة."
-  },
-  "rules": {
-    "intro": "تقوم قاعدة التسليم بإرسال التنبيهات المطابقة إلى قنواتك. وتبقى التنبيهات دائمًا في صندوق الوارد أيضًا.",
-    "add": "إضافة قاعدة",
-    "edit": "تعديل القاعدة",
-    "empty": "لا توجد قواعد حتى الآن، لذا تظهر التنبيهات في صندوق الوارد فقط.",
-    "needChannel": "أضف قناة أولاً.",
-    "enabled": "مُمكّن",
-    "name": "الاسم",
-    "nameRequired": "الاسم مطلوب",
-    "match": "تنبيهات لإرسالها",
-    "matchHint": "* لكل شيء، الأتمتة.* لكل شيء من الأتمتة، أو نوع واحد محدد.",
-    "minSeverity": "على الأقل",
-    "channels": "أرسل إلى",
-    "channelRequired": "اختر قناة واحدة على الأقل",
-    "deleteConfirm": "هل تريد حذف القاعدة \"{{name}}\"؟",
-    "everything": "كل شئ",
-    "summary": "{{match}}، {{severity}} أو أعلى، إلى {{channels}}"
-  },
-  "actions": {
-    "cancel": "إلغاء",
-    "save": "حفظ",
-    "saving": "جارٍ الحفظ...",
-    "delete": "حذف"
-  },
-  "widget": {
-    "name": "موجز التنبيهات",
-    "description": "آخر تنبيهاتك، مع طريقة سريعة لوضع علامة \"مقروء\" عليها",
-    "maxItems": "ماكس فيش",
-    "showRead": "عرض تنبيهات القراءة",
-    "allClear": "كل شيء طبيعي",
-    "loading": "جارٍ التحميل..."
-  },
-  "plugin": {
-    "name": "التنبيهات"
-  }
-}
diff --git a/plugins/alerts/locales/translated/bg_BG.json b/plugins/alerts/locales/translated/bg_BG.json
deleted file mode 100644
index 19f77e161..000000000
--- a/plugins/alerts/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Сигнали"
-  },
-  "permissions": {
-    "use": {
-      "title": "Използвайте известия",
-      "description": "Получавайте известия във входящата си поща и ги изпращайте към вашите собствени канали."
-    }
-  },
-  "onboarding": {
-    "feature": "Сигнали",
-    "featureDesc": "Всяко известие в една пощенска кутия, изпратено до Discord, ntfy, имейл или webhook, ако желаете."
-  },
-  "settings": {
-    "group": {
-      "general": "Общи",
-      "email": "Имейл"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Съобщения на Termix",
-        "description": "Показвайте новини от екипа на Termix, като например съобщения и издания за сигурност, във входящата поща на всички."
-      },
-      "retentionDays": {
-        "label": "Запазване на сигналите за (дни)",
-        "description": "По-старите известия се премахват от всяка пощенска кутия."
-      },
-      "smtpHost": {
-        "label": "SMTP сървър",
-        "description": "Необходимо за имейл канали. Оставете празно, за да изключите имейла.",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "SMTP порт",
-        "description": "Обикновено 587 със STARTTLS или 465 с TLS."
-      },
-      "smtpSecure": {
-        "label": "Използвайте TLS от самото начало",
-        "description": "Включете за порт 465. Не го правете за 587, който самостоятелно надгражда до TLS."
-      },
-      "smtpUser": {
-        "label": "SMTP потребителско име",
-        "description": "Оставете празно, ако сървърът не изисква вход."
-      },
-      "smtpPassword": {
-        "label": "SMTP парола",
-        "description": "Съхранява се криптирано."
-      },
-      "smtpFrom": {
-        "label": "От адрес",
-        "description": "Сигналите за подател идват от.",
-        "placeholder": "Термикс <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "Изскачащи прозорци с предупреждения",
-        "description": "Кои нови известия се появяват, докато използвате Termix. Те винаги попадат във входящата поща.",
-        "all": "Всички сигнали",
-        "warning": "Предупреждения и критични",
-        "critical": "Само критично",
-        "off": "Няма"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Входяща поща",
-    "channels": "Канали",
-    "rules": "Правила за доставка"
-  },
-  "severity": {
-    "info": "Информация",
-    "success": "Успех",
-    "warning": "Предупреждение",
-    "critical": "Критично"
-  },
-  "inbox": {
-    "sourceTermix": "Термикс",
-    "openLink": "Отворено",
-    "view": "Преглед",
-    "unread": "Непрочетено",
-    "deliveryFailed_one": "{{count}} каналът е неуспешен",
-    "deliveryFailed_other": "{{count}} канали неуспешни",
-    "markRead": "Маркирай като прочетено",
-    "markUnread": "Маркирай като непрочетено",
-    "markAllRead": "Маркирай всички като прочетени",
-    "delete": "Изтриване",
-    "clearRead": "Изтриване на известия за четене",
-    "cleared_one": "Изтрито предупреждение {{count}}",
-    "cleared_other": "Изтрити {{count}} сигнали",
-    "filterAll": "Всички",
-    "filterUnread": "Непрочетено",
-    "anySeverity": "Всякаква тежест",
-    "anySource": "Всеки източник",
-    "openAll": "Отваряне в раздел",
-    "empty": "Все още няма сигнали.",
-    "emptyUnread": "Всичко е наясно с вас.",
-    "loadMore": "Зареди още"
-  },
-  "channels": {
-    "intro": "Каналите са местата, където известията могат да излизат извън Termix. Правилата за доставка избират кои известия ги използват.",
-    "add": "Добавяне на канал",
-    "edit": "Редактиране на канал",
-    "test": "Изпрати тест",
-    "testSent": "Изпратено е тестово предупреждение",
-    "testFailed": "Тестът не беше успешен: {{error}}",
-    "deleteConfirm": "Да се изтрие ли каналът „{{name}}“?",
-    "deleted": "Каналът е изтрит",
-    "empty": "Все още няма канали.",
-    "enabled": "Активирано",
-    "needsSave": "Този канал трябва да бъде отворен и запазен отново, преди да може да се изпраща.",
-    "name": "Име",
-    "nameRequired": "Името е задължително",
-    "type": "Тип",
-    "types": {
-      "webhook": "Уеб кукичка",
-      "ntfy": "ntfy",
-      "discord": "Дискорд",
-      "email": "Имейл"
-    },
-    "emailUnavailable": "Имейлът се нуждае от SMTP сървър, който администраторът настройва в настройките за предупреждения.",
-    "webhookUrl": "URL адрес",
-    "webhookHint": "Получава JSON тяло за всяко предупреждение.",
-    "method": "Метод",
-    "headers": "Заглавки",
-    "headersHint": "По един на ред, като Име: стойност.",
-    "ntfyServer": "URL адрес на сървъра",
-    "ntfyTopic": "Тема",
-    "ntfyToken": "Токен за достъп (по избор)",
-    "discordUrl": "URL адрес на уеб кукичката на Discord",
-    "discordHint": "От настройките на канала в Discord, под „Интеграции“.",
-    "discordUsername": "Показвано име (по избор)",
-    "discordAvatar": "URL адрес на аватара (по избор)",
-    "emailTo": "Изпрати до",
-    "emailHint": "Разделете повече от един адрес със запетаи.",
-    "privateNetwork": "Разрешаване на адрес на частна мрежа",
-    "privateNetworkHint": "Работи само за хостове, които администраторът е разрешил в списъка с частни крайни точки."
-  },
-  "rules": {
-    "intro": "Правило за доставка изпраща съответстващи известия до вашите канали. Известията винаги остават и във входящата поща.",
-    "add": "Добавяне на правило",
-    "edit": "Редактиране на правилото",
-    "empty": "Все още няма правила, така че известията се показват само във входящата поща.",
-    "needChannel": "Първо добавете канал.",
-    "enabled": "Активирано",
-    "name": "Име",
-    "nameRequired": "Името е задължително",
-    "match": "Сигнали за изпращане",
-    "matchHint": "* за всичко, автоматизации.* за всичко от автоматизации или един точно определен вид.",
-    "minSeverity": "Поне",
-    "channels": "Изпрати до",
-    "channelRequired": "Изберете поне един канал",
-    "deleteConfirm": "Да се изтрие ли правилото „{{name}}“?",
-    "everything": "Всичко",
-    "summary": "{{match}}, {{severity}} или по-висока, до {{channels}}"
-  },
-  "actions": {
-    "cancel": "Отказ",
-    "save": "Запазване",
-    "saving": "Запазване...",
-    "delete": "Изтриване"
-  },
-  "widget": {
-    "name": "Канал за предупреждения",
-    "description": "Най-новите ви сигнали с бърз начин да ги маркирате като прочетени",
-    "maxItems": "Максимален брой елементи",
-    "showRead": "Показване на известия за четене",
-    "allClear": "Всичко е чисто",
-    "loading": "Зареждане..."
-  },
-  "plugin": {
-    "name": "Сигнали"
-  }
-}
diff --git a/plugins/alerts/locales/translated/bn_BD.json b/plugins/alerts/locales/translated/bn_BD.json
deleted file mode 100644
index 1f669c5f3..000000000
--- a/plugins/alerts/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "সতর্কতা"
-  },
-  "permissions": {
-    "use": {
-      "title": "সতর্কতা ব্যবহার করুন",
-      "description": "ইনবক্সে অ্যালার্ট পান এবং সেগুলো আপনার নিজের চ্যানেলগুলোতে পাঠান।"
-    }
-  },
-  "onboarding": {
-    "feature": "সতর্কতা",
-    "featureDesc": "সব অ্যালার্ট একটি ইনবক্সেই থাকবে, যা আপনি চাইলে ডিসকর্ড, এনটিএফওয়াই, ইমেল বা ওয়েবহুকে পাঠাতে পারবেন।"
-  },
-  "settings": {
-    "group": {
-      "general": "সাধারণ",
-      "email": "ইমেল"
-    },
-    "admin": {
-      "announcements": {
-        "label": "টারমিক্স ঘোষণা",
-        "description": "টারমিক্স টিমের পক্ষ থেকে নিরাপত্তা বিজ্ঞপ্তি এবং নতুন রিলিজের মতো খবরগুলো সবার ইনবক্সে দেখান।"
-      },
-      "retentionDays": {
-        "label": "(দিন) পর্যন্ত সতর্কতা চালু রাখুন",
-        "description": "প্রতিটি ইনবক্স থেকে পুরোনো অ্যালার্টগুলো মুছে ফেলা হয়।"
-      },
-      "smtpHost": {
-        "label": "SMTP সার্ভার",
-        "description": "ইমেল চ্যানেলের জন্য প্রয়োজন। ইমেল বন্ধ করতে খালি রাখুন।",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "SMTP পোর্ট",
-        "description": "সাধারণত STARTTLS সহ 587 অথবা TLS সহ 465।"
-      },
-      "smtpSecure": {
-        "label": "শুরু থেকেই TLS ব্যবহার করুন",
-        "description": "পোর্ট ৪৬৫-এর জন্য চালু করুন। ৫৮৭-এর জন্য বন্ধ রাখুন, যেটি নিজে থেকেই TLS-এ আপগ্রেড হয়ে যায়।"
-      },
-      "smtpUser": {
-        "label": "SMTP ব্যবহারকারীর নাম",
-        "description": "সার্ভারে লগইন করার প্রয়োজন না হলে এই স্থানটি খালি রাখুন।"
-      },
-      "smtpPassword": {
-        "label": "SMTP পাসওয়ার্ড",
-        "description": "এনক্রিপ্ট করে সংরক্ষণ করা হয়েছে।"
-      },
-      "smtpFrom": {
-        "label": "ঠিকানা থেকে",
-        "description": "প্রেরকের কাছ থেকে সতর্কতাগুলো আসে।",
-        "placeholder": "টারমিক্স <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "সতর্কতা পপআপ",
-        "description": "আপনি Termix ব্যবহার করার সময় কোন নতুন অ্যালার্টগুলো আসে? সেগুলো সবসময় ইনবক্সে আসে।",
-        "all": "সমস্ত সতর্কতা",
-        "warning": "সতর্কতা এবং সমালোচনামূলক",
-        "critical": "শুধুমাত্র সমালোচনামূলক",
-        "off": "কোনোটিই না"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "ইনবক্স",
-    "channels": "চ্যানেল",
-    "rules": "ডেলিভারি নিয়মাবলী"
-  },
-  "severity": {
-    "info": "তথ্য",
-    "success": "সাফল্য",
-    "warning": "সতর্কতা",
-    "critical": "সমালোচনামূলক"
-  },
-  "inbox": {
-    "sourceTermix": "টার্মিক্স",
-    "openLink": "খোলা",
-    "view": "দেখুন",
-    "unread": "অপঠিত",
-    "deliveryFailed_one": "{{count}} চ্যানেল ব্যর্থ হয়েছে",
-    "deliveryFailed_other": "{{count}} চ্যানেল ব্যর্থ হয়েছে",
-    "markRead": "পঠিত হিসেবে চিহ্নিত করুন",
-    "markUnread": "অপঠিত হিসাবে চিহ্নিত করুন",
-    "markAllRead": "সবগুলো পঠিত হিসেবে চিহ্নিত করুন।",
-    "delete": "মুছে ফেলুন",
-    "clearRead": "পঠিত সতর্কতাগুলি মুছুন",
-    "cleared_one": "{{count}} সতর্কতা মুছে ফেলা হয়েছে",
-    "cleared_other": "মুছে ফেলা {{count}} সতর্কতা",
-    "filterAll": "সব",
-    "filterUnread": "অপঠিত",
-    "anySeverity": "যেকোনো তীব্রতা",
-    "anySource": "যেকোনো উৎস",
-    "openAll": "একটি ট্যাবে খুলুন",
-    "empty": "এখনো কোনো সতর্কতা আসেনি।",
-    "emptyUnread": "আপনি সবকিছু জেনে গেছেন।",
-    "loadMore": "আরও লোড করুন"
-  },
-  "channels": {
-    "intro": "চ্যানেল হলো এমন জায়গা যেখানে অ্যালার্টগুলো টারমিক্সের বাইরে যেতে পারে। ডেলিভারি রুলগুলো নির্ধারণ করে কোন অ্যালার্টগুলো সেখানে ব্যবহৃত হবে।",
-    "add": "চ্যানেল যোগ করুন",
-    "edit": "চ্যানেল সম্পাদনা করুন",
-    "test": "একটি পরীক্ষা পাঠান",
-    "testSent": "পরীক্ষার সতর্কতা পাঠানো হয়েছে",
-    "testFailed": "পরীক্ষা ব্যর্থ হয়েছে: {{error}}",
-    "deleteConfirm": "\"{{name}} \" চ্যানেলটি মুছে ফেলবেন?",
-    "deleted": "চ্যানেল মুছে ফেলা হয়েছে",
-    "empty": "এখনো কোনো চ্যানেল নেই।",
-    "enabled": "সক্ষম করা হয়েছে",
-    "needsSave": "পাঠানোর আগে এই চ্যানেলটি আবার খুলতে ও সংরক্ষণ করতে হবে।",
-    "name": "নাম",
-    "nameRequired": "নাম আবশ্যক",
-    "type": "প্রকার",
-    "types": {
-      "webhook": "ওয়েবহুক",
-      "ntfy": "এনটিএফওয়াই",
-      "discord": "ডিসকর্ড",
-      "email": "ইমেল"
-    },
-    "emailUnavailable": "ইমেইলের জন্য একটি SMTP সার্ভার প্রয়োজন, যা অ্যাডমিন অ্যালার্ট সেটিংসে সেট আপ করেন।",
-    "webhookUrl": "ইউআরএল",
-    "webhookHint": "প্রতিটি অ্যালার্টের জন্য একটি JSON বডি পাওয়া যায়।",
-    "method": "পদ্ধতি",
-    "headers": "হেডার",
-    "headersHint": "প্রতি লাইনে একটি করে, যেমন নাম: মান।",
-    "ntfyServer": "সার্ভার ইউআরএল",
-    "ntfyTopic": "বিষয়",
-    "ntfyToken": "প্রবেশ টোকেন (ঐচ্ছিক)",
-    "discordUrl": "ডিসকর্ড ওয়েবহুক ইউআরএল",
-    "discordHint": "ডিসকর্ডে চ্যানেলের সেটিংস থেকে, ইন্টিগ্রেশনস-এর অধীনে।",
-    "discordUsername": "প্রদর্শনের নাম (ঐচ্ছিক)",
-    "discordAvatar": "অবতার ইউআরএল (ঐচ্ছিক)",
-    "emailTo": "পাঠান",
-    "emailHint": "একাধিক ঠিকানা কমা দিয়ে আলাদা করুন।",
-    "privateNetwork": "একটি ব্যক্তিগত নেটওয়ার্ক ঠিকানা অনুমোদন করুন",
-    "privateNetworkHint": "এটি শুধুমাত্র সেইসব হোস্টের ক্ষেত্রেই কাজ করে, যেগুলোকে অ্যাডমিন তার প্রাইভেট এন্ডপয়েন্ট তালিকায় অনুমোদন দেয়।"
-  },
-  "rules": {
-    "intro": "একটি ডেলিভারি রুল আপনার চ্যানেলগুলিতে প্রাসঙ্গিক অ্যালার্ট পাঠায়। অ্যালার্টগুলো সবসময় ইনবক্সেও থেকে যায়।",
-    "add": "নিয়ম যোগ করুন",
-    "edit": "নিয়ম সম্পাদনা করুন",
-    "empty": "এখনো কোনো নিয়ম তৈরি হয়নি, তাই অ্যালার্টগুলো শুধু ইনবক্সেই দেখা যায়।",
-    "needChannel": "প্রথমে একটি চ্যানেল যোগ করুন।",
-    "enabled": "সক্ষম করা হয়েছে",
-    "name": "নাম",
-    "nameRequired": "নাম আবশ্যক",
-    "match": "পাঠানোর জন্য সতর্কতা",
-    "matchHint": "সবকিছুর জন্য, অটোমেশন। অটোমেশন থেকে প্রাপ্ত সবকিছুর জন্য, অথবা ঠিক এক ধরনের।",
-    "minSeverity": "অন্তত",
-    "channels": "পাঠান",
-    "channelRequired": "অন্তত একটি চ্যানেল বেছে নিন",
-    "deleteConfirm": "\"{{name}} \" নিয়মটি মুছে ফেলুন?",
-    "everything": "সবকিছু",
-    "summary": "{{match}}, {{severity}} বা তার বেশি, থেকে {{channels}} পর্যন্ত"
-  },
-  "actions": {
-    "cancel": "বাতিল করুন",
-    "save": "সংরক্ষণ করুন",
-    "saving": "সঞ্চয়...",
-    "delete": "মুছে ফেলুন"
-  },
-  "widget": {
-    "name": "সতর্কতা ফিড",
-    "description": "আপনার সর্বশেষ অ্যালার্টগুলো, এবং সেগুলোকে পঠিত হিসেবে চিহ্নিত করার একটি দ্রুত উপায়।",
-    "maxItems": "সর্বোচ্চ আইটেম",
-    "showRead": "পঠিত সতর্কতা দেখান",
-    "allClear": "সব পরিষ্কার",
-    "loading": "লোড হচ্ছে..."
-  },
-  "plugin": {
-    "name": "সতর্কতা"
-  }
-}
diff --git a/plugins/alerts/locales/translated/ca_ES.json b/plugins/alerts/locales/translated/ca_ES.json
deleted file mode 100644
index dd0ac9103..000000000
--- a/plugins/alerts/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Alertes"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilitza alertes",
-      "description": "Rep alertes a la safata d'entrada i envia-les als teus propis canals."
-    }
-  },
-  "onboarding": {
-    "feature": "Alertes",
-    "featureDesc": "Totes les alertes en una safata d'entrada, enviades a Discord, ntfy, correu electrònic o un webhook si ho desitges."
-  },
-  "settings": {
-    "group": {
-      "general": "General",
-      "email": "Correu electrònic"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Anuncis de Termix",
-        "description": "Mostra notícies de l'equip de Termix, com ara avisos de seguretat i llançaments, a la safata d'entrada de tothom."
-      },
-      "retentionDays": {
-        "label": "Mantén les alertes durant (dies)",
-        "description": "Les alertes més antigues s'eliminen de totes les safates d'entrada."
-      },
-      "smtpHost": {
-        "label": "Servidor SMTP",
-        "description": "Necessari per als canals de correu electrònic. Deixeu-ho en blanc per desactivar el correu electrònic.",
-        "placeholder": "smtp.exemple.com"
-      },
-      "smtpPort": {
-        "label": "Port SMTP",
-        "description": "Normalment 587 amb STARTTLS o 465 amb TLS."
-      },
-      "smtpSecure": {
-        "label": "Utilitza TLS des del principi",
-        "description": "Activeu el port 465. Deixeu-lo desactivat per al 587, que s'actualitza a TLS pel seu compte."
-      },
-      "smtpUser": {
-        "label": "Nom d'usuari SMTP",
-        "description": "Deixeu-ho en blanc si el servidor no necessita cap inici de sessió."
-      },
-      "smtpPassword": {
-        "label": "Contrasenya SMTP",
-        "description": "Emmagatzemat xifrat."
-      },
-      "smtpFrom": {
-        "label": "Adreça de remitent",
-        "description": "Les alertes del remitent provenen de.",
-        "placeholder": "Termix <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "Finestres emergents d'alerta",
-        "description": "Quines noves alertes apareixen mentre fas servir Termix. Sempre arriben a la safata d'entrada.",
-        "all": "Totes les alertes",
-        "warning": "Avisos i crítics",
-        "critical": "Només crític",
-        "off": "Cap"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Safata d'entrada",
-    "channels": "Canals",
-    "rules": "Normes de lliurament"
-  },
-  "severity": {
-    "info": "Informació",
-    "success": "Èxit",
-    "warning": "Avís",
-    "critical": "Crític"
-  },
-  "inbox": {
-    "sourceTermix": "Tèrmix",
-    "openLink": "Obre",
-    "view": "Vista",
-    "unread": "No llegit",
-    "deliveryFailed_one": "El canal {{count}} ha fallat",
-    "deliveryFailed_other": "Els canals {{count}} han fallat",
-    "markRead": "Marca com a llegit",
-    "markUnread": "Marca com a no llegit",
-    "markAllRead": "Marca-ho tot com a llegit",
-    "delete": "Suprimeix",
-    "clearRead": "Suprimeix les alertes de lectura",
-    "cleared_one": "Alerta suprimida {{count}}",
-    "cleared_other": "Alertes suprimides {{count}}",
-    "filterAll": "Tot",
-    "filterUnread": "No llegit",
-    "anySeverity": "Qualsevol gravetat",
-    "anySource": "Qualsevol font",
-    "openAll": "Obre en una pestanya",
-    "empty": "Encara no hi ha alertes.",
-    "emptyUnread": "Esteu tots atrapats.",
-    "loadMore": "Carrega'n més"
-  },
-  "channels": {
-    "intro": "Els canals són on les alertes poden sortir de Termix. Les regles de lliurament trien quines alertes els utilitzen.",
-    "add": "Afegeix un canal",
-    "edit": "Edita el canal",
-    "test": "Envia una prova",
-    "testSent": "Alerta de prova enviada",
-    "testFailed": "Prova fallida: {{error}}",
-    "deleteConfirm": "Voleu eliminar el canal \"{{name}}\"?",
-    "deleted": "Canal suprimit",
-    "empty": "Encara no hi ha canals.",
-    "enabled": "Activat",
-    "needsSave": "Cal obrir i desar de nou aquest canal abans de poder enviar.",
-    "name": "Nom",
-    "nameRequired": "El nom és obligatori",
-    "type": "Tipus",
-    "types": {
-      "webhook": "Webhook",
-      "ntfy": "ntfy",
-      "discord": "Discòrdia",
-      "email": "Correu electrònic"
-    },
-    "emailUnavailable": "El correu electrònic necessita un servidor SMTP, que un administrador configura a la configuració d'Alertes.",
-    "webhookUrl": "URL",
-    "webhookHint": "Obté un cos JSON per a cada alerta.",
-    "method": "Mètode",
-    "headers": "Capçaleres",
-    "headersHint": "Un per línia, com ara Nom: valor.",
-    "ntfyServer": "URL del servidor",
-    "ntfyTopic": "Tema",
-    "ntfyToken": "Token d'accés (opcional)",
-    "discordUrl": "URL del webhook de Discord",
-    "discordHint": "Des de la configuració del canal a Discord, a Integracions.",
-    "discordUsername": "Nom per mostrar (opcional)",
-    "discordAvatar": "URL de l'avatar (opcional)",
-    "emailTo": "Enviar a",
-    "emailHint": "Separeu més d'una adreça amb comes.",
-    "privateNetwork": "Permetre una adreça de xarxa privada",
-    "privateNetworkHint": "Només funciona per a hosts que un administrador permet a la llista de punts finals privats."
-  },
-  "rules": {
-    "intro": "Una regla de lliurament envia alertes coincidents als vostres canals. Les alertes també sempre romanen a la safata d'entrada.",
-    "add": "Afegeix una regla",
-    "edit": "Edita la regla",
-    "empty": "Encara no hi ha regles, així que les alertes només apareixen a la safata d'entrada.",
-    "needChannel": "Afegeix primer un canal.",
-    "enabled": "Activat",
-    "name": "Nom",
-    "nameRequired": "El nom és obligatori",
-    "match": "Alertes per enviar",
-    "matchHint": "* per a tot, automatitzacions. * per a tot, des d'automatitzacions o un tipus exacte.",
-    "minSeverity": "Almenys",
-    "channels": "Enviar a",
-    "channelRequired": "Trieu com a mínim un canal",
-    "deleteConfirm": "Voleu suprimir la regla \"{{name}}\"?",
-    "everything": "Tot",
-    "summary": "{{match}}, {{severity}} o superior, a {{channels}}"
-  },
-  "actions": {
-    "cancel": "Cancel·la",
-    "save": "Desa",
-    "saving": "Desant...",
-    "delete": "Suprimeix"
-  },
-  "widget": {
-    "name": "Canal d'alertes",
-    "description": "Les teves darreres alertes, amb una manera ràpida de marcar-les com a llegides",
-    "maxItems": "Màxim d'elements",
-    "showRead": "Mostra les alertes de lectura",
-    "allClear": "Tot clar",
-    "loading": "S'està carregant..."
-  },
-  "plugin": {
-    "name": "Alertes"
-  }
-}
diff --git a/plugins/alerts/locales/translated/cs_CZ.json b/plugins/alerts/locales/translated/cs_CZ.json
deleted file mode 100644
index 1ce0c600a..000000000
--- a/plugins/alerts/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Upozornění"
-  },
-  "permissions": {
-    "use": {
-      "title": "Používejte upozornění",
-      "description": "Získejte upozornění do složky Doručená pošta a odesílejte je na své vlastní kanály."
-    }
-  },
-  "onboarding": {
-    "feature": "Upozornění",
-    "featureDesc": "Všechna upozornění v jedné schránce, odeslaná na Discord, ntfy, e-mail nebo webhook, pokud chcete."
-  },
-  "settings": {
-    "group": {
-      "general": "Obecné",
-      "email": "E-mail"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Oznámení Termixu",
-        "description": "Zobrazujte novinky od týmu Termix, jako jsou bezpečnostní oznámení a vydání, ve schránce všech uživatelů."
-      },
-      "retentionDays": {
-        "label": "Uchovávat upozornění po dobu (dnů)",
-        "description": "Starší upozornění jsou odstraněna ze všech složek doručené pošty."
-      },
-      "smtpHost": {
-        "label": "SMTP server",
-        "description": "Požadováno pro e-mailové kanály. Pro vypnutí e-mailu ponechte prázdné.",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "SMTP port",
-        "description": "Obvykle 587 se STARTTLS nebo 465 s TLS."
-      },
-      "smtpSecure": {
-        "label": "Používejte TLS od začátku",
-        "description": "Zapněte pro port 465. Nechte vypnuto pro port 587, který se sám upgraduje na TLS."
-      },
-      "smtpUser": {
-        "label": "Uživatelské jméno SMTP",
-        "description": "Pokud server nevyžaduje přihlášení, nechte pole prázdné."
-      },
-      "smtpPassword": {
-        "label": "Heslo k SMTP",
-        "description": "Uloženo zašifrovaně."
-      },
-      "smtpFrom": {
-        "label": "Odesílatel",
-        "description": "Upozornění odesílatele pocházejí od.",
-        "placeholder": "Termix <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "Vyskakovací okna s upozorněními",
-        "description": "Která nová upozornění se zobrazují při používání Termixu. Vždy se dostanou do doručené pošty.",
-        "all": "Všechna upozornění",
-        "warning": "Varování a kritické",
-        "critical": "Pouze kritické",
-        "off": "Žádný"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Doručená pošta",
-    "channels": "Kanály",
-    "rules": "Pravidla doručení"
-  },
-  "severity": {
-    "info": "Informace",
-    "success": "Úspěch",
-    "warning": "Varování",
-    "critical": "Kritický"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "OTEVŘENO",
-    "view": "Pohled",
-    "unread": "Nepřečtený",
-    "deliveryFailed_one": "Kanál {{count}} selhal",
-    "deliveryFailed_other": "{{count}} kanálů selhalo",
-    "markRead": "Označit jako přečtené",
-    "markUnread": "Označit jako nepřečtené",
-    "markAllRead": "Označit vše jako přečtené",
-    "delete": "Vymazat",
-    "clearRead": "Smazat upozornění na přečtení",
-    "cleared_one": "Smazáno upozornění {{count}}",
-    "cleared_other": "Smazaná {{count}} upozornění",
-    "filterAll": "Vše",
-    "filterUnread": "Nepřečtený",
-    "anySeverity": "Jakákoli závažnost",
-    "anySource": "Jakýkoli zdroj",
-    "openAll": "Otevřít v kartě",
-    "empty": "Zatím žádná upozornění.",
-    "emptyUnread": "Všechno máte v obraze.",
-    "loadMore": "Načíst další"
-  },
-  "channels": {
-    "intro": "Kanály jsou místem, kudy mohou upozornění odesílat mimo Termix. Pravidla doručování vybírají, která upozornění je používají.",
-    "add": "Přidat kanál",
-    "edit": "Upravit kanál",
-    "test": "Odeslat test",
-    "testSent": "Testovací upozornění odesláno",
-    "testFailed": "Test selhal: {{error}}",
-    "deleteConfirm": "Smazat kanál „{{name}}“?",
-    "deleted": "Kanál smazán",
-    "empty": "Zatím žádné kanály.",
-    "enabled": "Povoleno",
-    "needsSave": "Tento kanál je nutné před odesláním znovu otevřít a uložit.",
-    "name": "Jméno",
-    "nameRequired": "Jméno je povinné",
-    "type": "Typ",
-    "types": {
-      "webhook": "Webhook",
-      "ntfy": "ntfy",
-      "discord": "Svár",
-      "email": "E-mail"
-    },
-    "emailUnavailable": "E-mail potřebuje SMTP server, který administrátor nastaví v nastavení Upozornění.",
-    "webhookUrl": "URL",
-    "webhookHint": "Získá tělo JSON pro každé upozornění.",
-    "method": "Metoda",
-    "headers": "Záhlaví",
-    "headersHint": "Jeden na řádek, například Název: hodnota.",
-    "ntfyServer": "URL serveru",
-    "ntfyTopic": "Téma",
-    "ntfyToken": "Přístupový token (volitelné)",
-    "discordUrl": "URL webhooku na Discordu",
-    "discordHint": "V nastavení kanálu na Discordu, v sekci Integrace.",
-    "discordUsername": "Zobrazovaný název (volitelné)",
-    "discordAvatar": "URL adresa avatara (volitelné)",
-    "emailTo": "Odeslat",
-    "emailHint": "Více adres oddělte čárkami.",
-    "privateNetwork": "Povolit adresu privátní sítě",
-    "privateNetworkHint": "Funguje pouze pro hostitele, které správce povolí v seznamu privátních koncových bodů."
-  },
-  "rules": {
-    "intro": "Pravidlo doručování odesílá odpovídající upozornění do vašich kanálů. Upozornění vždy zůstávají také ve složce Doručená pošta.",
-    "add": "Přidat pravidlo",
-    "edit": "Upravit pravidlo",
-    "empty": "Zatím žádná pravidla, takže upozornění se zobrazují pouze ve schránce.",
-    "needChannel": "Nejprve přidejte kanál.",
-    "enabled": "Povoleno",
-    "name": "Jméno",
-    "nameRequired": "Jméno je povinné",
-    "match": "Upozornění k odeslání",
-    "matchHint": "* pro všechno, automatizace.* pro všechno od automatizací nebo jeden přesný druh.",
-    "minSeverity": "Alespoň",
-    "channels": "Odeslat",
-    "channelRequired": "Vyberte alespoň jeden kanál",
-    "deleteConfirm": "Smazat pravidlo „{{name}}“?",
-    "everything": "Všechno",
-    "summary": "{{match}}, {{severity}} nebo vyšší, na {{channels}}"
-  },
-  "actions": {
-    "cancel": "Zrušit",
-    "save": "Uložit",
-    "saving": "Ukládání…",
-    "delete": "Vymazat"
-  },
-  "widget": {
-    "name": "Zdroj upozornění",
-    "description": "Vaše nejnovější upozornění s rychlým způsobem, jak je označit jako přečtené",
-    "maxItems": "Maximální počet položek",
-    "showRead": "Zobrazit upozornění na přečtení",
-    "allClear": "Všechno čisté",
-    "loading": "Načítání..."
-  },
-  "plugin": {
-    "name": "Upozornění"
-  }
-}
diff --git a/plugins/alerts/locales/translated/da_DK.json b/plugins/alerts/locales/translated/da_DK.json
deleted file mode 100644
index ac31f5dd5..000000000
--- a/plugins/alerts/locales/translated/da_DK.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Advarsler"
-  },
-  "permissions": {
-    "use": {
-      "title": "Brug alarmer",
-      "description": "Få besked i indbakken, og send dem til dine egne kanaler."
-    }
-  },
-  "onboarding": {
-    "feature": "Advarsler",
-    "featureDesc": "Alle alarmer i én indbakke, sendt videre til Discord, ntfy, e-mail eller en webhook, hvis du vil."
-  },
-  "settings": {
-    "group": {
-      "general": "Generel",
-      "email": "E-mail"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Termix-meddelelser",
-        "description": "Vis nyheder fra Termix-teamet, f.eks. sikkerhedsmeddelelser og udgivelser, i alles indbakke."
-      },
-      "retentionDays": {
-        "label": "Gem advarsler i (dage)",
-        "description": "Ældre advarsler fjernes fra alle indbakker."
-      },
-      "smtpHost": {
-        "label": "SMTP-server",
-        "description": "Nødvendigt for e-mailkanaler. Lad feltet stå tomt for at slå e-mail fra.",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "SMTP-port",
-        "description": "Normalt 587 med STARTTLS eller 465 med TLS."
-      },
-      "smtpSecure": {
-        "label": "Brug TLS fra starten",
-        "description": "Slå port 465 til. Slå port 587 fra, som opgraderer til TLS af sig selv."
-      },
-      "smtpUser": {
-        "label": "SMTP-brugernavn",
-        "description": "Lad feltet stå tomt, hvis serveren ikke kræver login."
-      },
-      "smtpPassword": {
-        "label": "SMTP-adgangskode",
-        "description": "Gemt krypteret."
-      },
-      "smtpFrom": {
-        "label": "Fra adresse",
-        "description": "Afsenderbeskederne kommer fra.",
-        "placeholder": "Termix <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "Popup-vinduer for alarmer",
-        "description": "Hvilke nye advarsler dukker op, mens du bruger Termix? De lander altid i indbakken.",
-        "all": "Alle advarsler",
-        "warning": "Advarsler og kritiske",
-        "critical": "Kun kritisk",
-        "off": "Ingen"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Indbakke",
-    "channels": "Kanaler",
-    "rules": "Leveringsregler"
-  },
-  "severity": {
-    "info": "Info",
-    "success": "Succes",
-    "warning": "Advarsel",
-    "critical": "Kritisk"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "Åben",
-    "view": "Udsigt",
-    "unread": "Ulæst",
-    "deliveryFailed_one": "{{count}} kanal mislykkedes",
-    "deliveryFailed_other": "{{count}} kanaler mislykkedes",
-    "markRead": "Markér som læst",
-    "markUnread": "Markér som ulæst",
-    "markAllRead": "Markér alle som læst",
-    "delete": "Slet",
-    "clearRead": "Slet læseadvarsler",
-    "cleared_one": "Slettet {{count}} -alarm",
-    "cleared_other": "Slettede {{count}} advarsler",
-    "filterAll": "Alle",
-    "filterUnread": "Ulæst",
-    "anySeverity": "Enhver alvorlighedsgrad",
-    "anySource": "Enhver kilde",
-    "openAll": "Åbn i en fane",
-    "empty": "Ingen advarsler endnu.",
-    "emptyUnread": "I er alle med på banen.",
-    "loadMore": "Indlæs mere"
-  },
-  "channels": {
-    "intro": "Kanaler er hvor advarsler kan sendes uden for Termix. Leveringsregler vælger hvilke advarsler der bruger dem.",
-    "add": "Tilføj kanal",
-    "edit": "Rediger kanal",
-    "test": "Send en test",
-    "testSent": "Testalarm sendt",
-    "testFailed": "Test mislykkedes: {{error}}",
-    "deleteConfirm": "Slet kanalen \"{{name}}\"?",
-    "deleted": "Kanal slettet",
-    "empty": "Ingen kanaler endnu.",
-    "enabled": "Aktiveret",
-    "needsSave": "Denne kanal skal åbnes og gemmes igen, før den kan sende.",
-    "name": "Navn",
-    "nameRequired": "Navn er påkrævet",
-    "type": "Type",
-    "types": {
-      "webhook": "Webhook",
-      "ntfy": "ntfy",
-      "discord": "Disharmoni",
-      "email": "E-mail"
-    },
-    "emailUnavailable": "E-mail kræver en SMTP-server, som en administrator konfigurerer i indstillingerne for alarmer.",
-    "webhookUrl": "URL",
-    "webhookHint": "Henter en JSON-brødtekst for hver alarm.",
-    "method": "Metode",
-    "headers": "Overskrifter",
-    "headersHint": "En pr. linje, ligesom Navn: værdi.",
-    "ntfyServer": "Server-URL",
-    "ntfyTopic": "Emne",
-    "ntfyToken": "Adgangstoken (valgfrit)",
-    "discordUrl": "Discord webhook-URL",
-    "discordHint": "Fra kanalens indstillinger i Discord, under Integrationer.",
-    "discordUsername": "Visningsnavn (valgfrit)",
-    "discordAvatar": "Avatar-URL (valgfrit)",
-    "emailTo": "Send til",
-    "emailHint": "Adskil mere end én adresse med kommaer.",
-    "privateNetwork": "Tillad en privat netværksadresse",
-    "privateNetworkHint": "Fungerer kun for værter, som en administrator tillader på listen over private slutpunkter."
-  },
-  "rules": {
-    "intro": "En leveringsregel sender matchende advarsler til dine kanaler. Advarsler forbliver også altid i indbakken.",
-    "add": "Tilføj regel",
-    "edit": "Rediger regel",
-    "empty": "Ingen regler endnu, så advarsler vises kun i indbakken.",
-    "needChannel": "Tilføj først en kanal.",
-    "enabled": "Aktiveret",
-    "name": "Navn",
-    "nameRequired": "Navn er påkrævet",
-    "match": "Advarsler, der skal sendes",
-    "matchHint": "* for alt, automatiseringer.* for alt fra automatiseringer, eller én præcis slags.",
-    "minSeverity": "Mindst",
-    "channels": "Send til",
-    "channelRequired": "Vælg mindst én kanal",
-    "deleteConfirm": "Slet reglen \"{{name}}\"?",
-    "everything": "Alt",
-    "summary": "{{match}}, {{severity}} eller højere, til {{channels}}"
-  },
-  "actions": {
-    "cancel": "Ophæve",
-    "save": "Spare",
-    "saving": "Gemmer...",
-    "delete": "Slet"
-  },
-  "widget": {
-    "name": "Alarmfeed",
-    "description": "Dine seneste advarsler, med en hurtig måde at markere dem som læst",
-    "maxItems": "Maks. antal varer",
-    "showRead": "Vis læseadvarsler",
-    "allClear": "Alt klart",
-    "loading": "Indlæser..."
-  },
-  "plugin": {
-    "name": "Advarsler"
-  }
-}
diff --git a/plugins/alerts/locales/translated/de_DE.json b/plugins/alerts/locales/translated/de_DE.json
deleted file mode 100644
index 26db84faa..000000000
--- a/plugins/alerts/locales/translated/de_DE.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Benachrichtigungen"
-  },
-  "permissions": {
-    "use": {
-      "title": "Warnmeldungen verwenden",
-      "description": "Erhalten Sie Benachrichtigungen in Ihrem Posteingang und leiten Sie diese an Ihre eigenen Kanäle weiter."
-    }
-  },
-  "onboarding": {
-    "feature": "Alarme",
-    "featureDesc": "Alle Benachrichtigungen in einem Posteingang, auf Wunsch auch per Discord, ntfy, E-Mail oder Webhook."
-  },
-  "settings": {
-    "group": {
-      "general": "Allgemein",
-      "email": "E-Mail"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Termix-Ankündigungen",
-        "description": "Neuigkeiten vom Termix-Team, wie Sicherheitshinweise und Releases, werden direkt in den Posteingang aller Nutzer angezeigt."
-      },
-      "retentionDays": {
-        "label": "Benachrichtigungen beibehalten für (Tage)",
-        "description": "Ältere Benachrichtigungen werden aus jedem Posteingang entfernt."
-      },
-      "smtpHost": {
-        "label": "SMTP-Server",
-        "description": "Für E-Mail-Kanäle erforderlich. Leer lassen, um E-Mails zu deaktivieren.",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "SMTP-Port",
-        "description": "Üblicherweise Port 587 mit STARTTLS oder Port 465 mit TLS."
-      },
-      "smtpSecure": {
-        "label": "Verwenden Sie TLS von Anfang an",
-        "description": "Aktivieren Sie die Option für Port 465. Lassen Sie sie für Port 587 deaktiviert, da dieser automatisch auf TLS umstellt."
-      },
-      "smtpUser": {
-        "label": "SMTP-Benutzername",
-        "description": "Lassen Sie dieses Feld leer, wenn der Server keine Anmeldung benötigt."
-      },
-      "smtpPassword": {
-        "label": "SMTP-Passwort",
-        "description": "Verschlüsselt gespeichert."
-      },
-      "smtpFrom": {
-        "label": "Von Adresse",
-        "description": "Die Absenderbenachrichtigungen stammen von",
-        "placeholder": "Termix <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "Warnmeldungen",
-        "description": "Welche neuen Benachrichtigungen erscheinen während der Nutzung von Termix? Sie landen immer im Posteingang.",
-        "all": "Alle Benachrichtigungen",
-        "warning": "Warnungen und kritische",
-        "critical": "Nur für kritische Zwecke",
-        "off": "Keine"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Posteingang",
-    "channels": "Kanäle",
-    "rules": "Lieferregeln"
-  },
-  "severity": {
-    "info": "Info",
-    "success": "Erfolgreich",
-    "warning": "Warnung",
-    "critical": "Kritisch"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "Offen",
-    "view": "Anzeigen",
-    "unread": "Ungelesen",
-    "deliveryFailed_one": "{{count}} Kanal fehlgeschlagen",
-    "deliveryFailed_other": "{{count}} Kanäle fehlgeschlagen",
-    "markRead": "Als gelesen markieren",
-    "markUnread": "Als ungelesen markieren",
-    "markAllRead": "Alle als gelesen markieren",
-    "delete": "Löschen",
-    "clearRead": "Lesebenachrichtigungen löschen",
-    "cleared_one": "Gelöschte {{count}} Warnung",
-    "cleared_other": "Gelöschte {{count}} Benachrichtigungen",
-    "filterAll": "Alle",
-    "filterUnread": "Ungelesen",
-    "anySeverity": "Jegliche Schwere",
-    "anySource": "Jede Quelle",
-    "openAll": "In einem Tab öffnen",
-    "empty": "Bisher keine Benachrichtigungen.",
-    "emptyUnread": "Sie sind nun auf dem neuesten Stand.",
-    "loadMore": "Mehr laden"
-  },
-  "channels": {
-    "intro": "Kanäle sind die Wege, über die Benachrichtigungen außerhalb von Termix weitergeleitet werden können. Zustellungsregeln legen fest, welche Benachrichtigungen diese Kanäle nutzen.",
-    "add": "Kanal hinzufügen",
-    "edit": "Kanal bearbeiten",
-    "test": "Senden Sie einen Test",
-    "testSent": "Testalarm gesendet",
-    "testFailed": "Test fehlgeschlagen: {{error}}",
-    "deleteConfirm": "Kanal \"{{name}} \" löschen?",
-    "deleted": "Kanal gelöscht",
-    "empty": "Noch keine Kanäle.",
-    "enabled": "Aktiviert",
-    "needsSave": "Dieser Kanal muss erneut geöffnet und gespeichert werden, bevor er senden kann.",
-    "name": "Name",
-    "nameRequired": "Name ist erforderlich",
-    "type": "Typ",
-    "types": {
-      "webhook": "Webhook",
-      "ntfy": "ntfy",
-      "discord": "Discord",
-      "email": "E-Mail"
-    },
-    "emailUnavailable": "Für E-Mails wird ein SMTP-Server benötigt, der vom Administrator in den Benachrichtigungseinstellungen eingerichtet wird.",
-    "webhookUrl": "URL",
-    "webhookHint": "Erhält für jede Benachrichtigung einen JSON-Body.",
-    "method": "Verfahren",
-    "headers": "Überschriften",
-    "headersHint": "Ein Eintrag pro Zeile, z. B. Name: Wert.",
-    "ntfyServer": "Server-URL",
-    "ntfyTopic": "Topic",
-    "ntfyToken": "Zugriffstoken (optional)",
-    "discordUrl": "Discord-Webhook-URL",
-    "discordHint": "In den Kanaleinstellungen von Discord, unter Integrationen.",
-    "discordUsername": "Anzeigename (optional)",
-    "discordAvatar": "Avatar-URL (optional)",
-    "emailTo": "Senden an",
-    "emailHint": "Mehrere Adressen werden durch Kommas getrennt.",
-    "privateNetwork": "Erlauben Sie eine private Netzwerkadresse",
-    "privateNetworkHint": "Funktioniert nur für Hosts, die ein Administrator in der Liste der privaten Endpunkte zulässt."
-  },
-  "rules": {
-    "intro": "Eine Zustellungsregel sendet passende Benachrichtigungen an Ihre Kanäle. Benachrichtigungen bleiben außerdem immer im Posteingang erhalten.",
-    "add": "Regel hinzufügen",
-    "edit": "Bearbeitungsregel",
-    "empty": "Da es noch keine Regeln gibt, werden Benachrichtigungen nur im Posteingang angezeigt.",
-    "needChannel": "Füge zuerst einen Kanal hinzu.",
-    "enabled": "Aktiviert",
-    "name": "Name",
-    "nameRequired": "Name ist erforderlich",
-    "match": "Zu sendende Benachrichtigungen",
-    "matchHint": "* für alles, Automatisierungen.* für alles von Automatisierungen oder eine ganz bestimmte Art.",
-    "minSeverity": "Mindestens",
-    "channels": "Senden an",
-    "channelRequired": "Wählen Sie mindestens einen Kanal aus",
-    "deleteConfirm": "Regel \"{{name}} \" löschen?",
-    "everything": "Alles",
-    "summary": "{{match}}, {{severity}} oder höher, bis {{channels}}"
-  },
-  "actions": {
-    "cancel": "Abbrechen",
-    "save": "Speichern",
-    "saving": "Wird gespeichert …",
-    "delete": "Löschen"
-  },
-  "widget": {
-    "name": "Alarm-Feed",
-    "description": "Ihre neuesten Benachrichtigungen mit einer schnellen Möglichkeit, sie als gelesen zu markieren.",
-    "maxItems": "Maximale Anzahl an Artikeln",
-    "showRead": "Lesebenachrichtigungen anzeigen",
-    "allClear": "Alles in Ordnung",
-    "loading": "Laden..."
-  },
-  "plugin": {
-    "name": "Alarme"
-  }
-}
diff --git a/plugins/alerts/locales/translated/el_GR.json b/plugins/alerts/locales/translated/el_GR.json
deleted file mode 100644
index d70185884..000000000
--- a/plugins/alerts/locales/translated/el_GR.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Ειδοποιήσεις"
-  },
-  "permissions": {
-    "use": {
-      "title": "Χρήση ειδοποιήσεων",
-      "description": "Λάβετε ειδοποιήσεις στα εισερχόμενα και στείλτε τις στα δικά σας κανάλια."
-    }
-  },
-  "onboarding": {
-    "feature": "Ειδοποιήσεις",
-    "featureDesc": "Κάθε ειδοποίηση σε ένα μόνο inbox, αποστέλλεται στο Discord, ntfy, email ή σε webhook, αν θέλετε."
-  },
-  "settings": {
-    "group": {
-      "general": "Γενικός",
-      "email": "E-mail"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Ανακοινώσεις Termix",
-        "description": "Εμφάνιση ειδήσεων από την ομάδα Termix, όπως ειδοποιήσεις ασφαλείας και εκδόσεις, στα εισερχόμενα όλων."
-      },
-      "retentionDays": {
-        "label": "Διατήρηση ειδοποιήσεων για (ημέρες)",
-        "description": "Οι παλαιότερες ειδοποιήσεις αφαιρούνται από κάθε φάκελο εισερχομένων."
-      },
-      "smtpHost": {
-        "label": "Διακομιστής SMTP",
-        "description": "Απαιτείται για κανάλια email. Αφήστε το κενό για να απενεργοποιήσετε το email.",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "Θύρα SMTP",
-        "description": "Συνήθως 587 με STARTTLS ή 465 με TLS."
-      },
-      "smtpSecure": {
-        "label": "Χρησιμοποιήστε TLS από την αρχή",
-        "description": "Ενεργοποιήστε τη θύρα 465. Αφήστε την απενεργοποιημένη για τη θύρα 587, η οποία αναβαθμίζεται σε TLS από μόνη της."
-      },
-      "smtpUser": {
-        "label": "Όνομα χρήστη SMTP",
-        "description": "Αφήστε το κενό εάν ο διακομιστής δεν χρειάζεται σύνδεση."
-      },
-      "smtpPassword": {
-        "label": "Κωδικός πρόσβασης SMTP",
-        "description": "Αποθηκεύεται κρυπτογραφημένο."
-      },
-      "smtpFrom": {
-        "label": "Διεύθυνση από",
-        "description": "Οι ειδοποιήσεις αποστολέα προέρχονται από.",
-        "placeholder": "Termmix <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "Αναδυόμενα παράθυρα ειδοποιήσεων",
-        "description": "Ποιες νέες ειδοποιήσεις εμφανίζονται ενώ χρησιμοποιείτε το Termix. Πάντα καταλήγουν στα εισερχόμενα.",
-        "all": "Όλες οι ειδοποιήσεις",
-        "warning": "Προειδοποιήσεις και κρίσιμα",
-        "critical": "Μόνο κρίσιμα",
-        "off": "Κανένας"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Εισερχόμενα",
-    "channels": "Κανάλια",
-    "rules": "Κανόνες παράδοσης"
-  },
-  "severity": {
-    "info": "Πληροφορίες",
-    "success": "Επιτυχία",
-    "warning": "Προειδοποίηση",
-    "critical": "Κρίσιμος"
-  },
-  "inbox": {
-    "sourceTermix": "Τέρμιξ",
-    "openLink": "Ανοιχτό",
-    "view": "Θέα",
-    "unread": "Αδιάβαστος",
-    "deliveryFailed_one": "Το κανάλι {{count}} απέτυχε",
-    "deliveryFailed_other": "{{count}} κανάλια απέτυχαν",
-    "markRead": "Σήμανση ως αναγνωσμένου",
-    "markUnread": "Επισήμανση ως μη αναγνωσμένου",
-    "markAllRead": "Σήμανση όλων ως αναγνωσμένων",
-    "delete": "Διαγράφω",
-    "clearRead": "Διαγραφή ειδοποιήσεων ανάγνωσης",
-    "cleared_one": "Διαγραμμένη ειδοποίηση {{count}}",
-    "cleared_other": "Διαγραμμένες {{count}} ειδοποιήσεις",
-    "filterAll": "Ολοι",
-    "filterUnread": "Αδιάβαστος",
-    "anySeverity": "Οποιαδήποτε σοβαρότητα",
-    "anySource": "Οποιαδήποτε πηγή",
-    "openAll": "Άνοιγμα σε καρτέλα",
-    "empty": "Δεν υπάρχουν ακόμη ειδοποιήσεις.",
-    "emptyUnread": "Είστε όλοι ενημερωμένοι.",
-    "loadMore": "Φόρτωση περισσότερων"
-  },
-  "channels": {
-    "intro": "Τα κανάλια είναι τα σημεία όπου οι ειδοποιήσεις μπορούν να μεταβούν εκτός Termix. Οι κανόνες παράδοσης επιλέγουν ποιες ειδοποιήσεις τις χρησιμοποιούν.",
-    "add": "Προσθήκη καναλιού",
-    "edit": "Επεξεργασία καναλιού",
-    "test": "Αποστολή δοκιμής",
-    "testSent": "Εστάλη δοκιμαστική ειδοποίηση",
-    "testFailed": "Η δοκιμή απέτυχε: {{error}}",
-    "deleteConfirm": "Διαγραφή του καναλιού \"{{name}}\";",
-    "deleted": "Το κανάλι διαγράφηκε",
-    "empty": "Δεν υπάρχουν ακόμη κανάλια.",
-    "enabled": "Ενεργοποιημένο",
-    "needsSave": "Αυτό το κανάλι πρέπει να ανοιχτεί και να αποθηκευτεί ξανά πριν από την αποστολή.",
-    "name": "Ονομα",
-    "nameRequired": "Απαιτείται όνομα",
-    "type": "Τύπος",
-    "types": {
-      "webhook": "Ιστότοπος",
-      "ntfy": "ntfy",
-      "discord": "Διχόνοια",
-      "email": "E-mail"
-    },
-    "emailUnavailable": "Το ηλεκτρονικό ταχυδρομείο χρειάζεται έναν διακομιστή SMTP, τον οποίο ρυθμίζει ένας διαχειριστής στις ρυθμίσεις Ειδοποιήσεων.",
-    "webhookUrl": "URL",
-    "webhookHint": "Λαμβάνει ένα σώμα JSON για κάθε ειδοποίηση.",
-    "method": "Μέθοδος",
-    "headers": "Κεφαλίδες",
-    "headersHint": "Ένα ανά γραμμή, όπως Όνομα: τιμή.",
-    "ntfyServer": "URL διακομιστή",
-    "ntfyTopic": "Θέμα",
-    "ntfyToken": "Διακριτικό πρόσβασης (προαιρετικό)",
-    "discordUrl": "URL webhook του Discord",
-    "discordHint": "Από τις ρυθμίσεις του καναλιού στο Discord, στην ενότητα Ενσωματώσεις.",
-    "discordUsername": "Εμφανιζόμενο όνομα (προαιρετικό)",
-    "discordAvatar": "URL avatar (προαιρετικό)",
-    "emailTo": "Αποστολή σε",
-    "emailHint": "Διαχωρίστε περισσότερες από μία διευθύνσεις με κόμματα.",
-    "privateNetwork": "Να επιτρέπεται μια ιδιωτική διεύθυνση δικτύου",
-    "privateNetworkHint": "Λειτουργεί μόνο για κεντρικούς υπολογιστές που επιτρέπει ένας διαχειριστής στη λίστα ιδιωτικών τελικών σημείων."
-  },
-  "rules": {
-    "intro": "Ένας κανόνας παράδοσης στέλνει αντίστοιχες ειδοποιήσεις στα κανάλια σας. Οι ειδοποιήσεις παραμένουν πάντα και στα εισερχόμενα.",
-    "add": "Προσθήκη κανόνα",
-    "edit": "Επεξεργασία κανόνα",
-    "empty": "Δεν υπάρχουν ακόμη κανόνες, επομένως οι ειδοποιήσεις εμφανίζονται μόνο στα εισερχόμενα.",
-    "needChannel": "Προσθέστε πρώτα ένα κανάλι.",
-    "enabled": "Ενεργοποιημένο",
-    "name": "Ονομα",
-    "nameRequired": "Απαιτείται όνομα",
-    "match": "Ειδοποιήσεις προς αποστολή",
-    "matchHint": "* για τα πάντα, αυτοματισμούς.* για τα πάντα, από αυτοματισμούς ή ένα συγκεκριμένο είδος.",
-    "minSeverity": "Τουλάχιστον",
-    "channels": "Αποστολή σε",
-    "channelRequired": "Επιλέξτε τουλάχιστον ένα κανάλι",
-    "deleteConfirm": "Να διαγραφεί ο κανόνας \"{{name}}\";",
-    "everything": "Πάντα",
-    "summary": "{{match}}, {{severity}} ή υψηλότερο, έως {{channels}}"
-  },
-  "actions": {
-    "cancel": "Ματαίωση",
-    "save": "Εκτός",
-    "saving": "Οικονομία...",
-    "delete": "Διαγράφω"
-  },
-  "widget": {
-    "name": "Ροή ειδοποιήσεων",
-    "description": "Οι τελευταίες ειδοποιήσεις σας, με έναν γρήγορο τρόπο για να τις επισημάνετε ως αναγνωσμένες",
-    "maxItems": "Μέγιστος αριθμός στοιχείων",
-    "showRead": "Εμφάνιση ειδοποιήσεων ανάγνωσης",
-    "allClear": "Ορίζοντας είναι σαφής",
-    "loading": "Φόρτωση..."
-  },
-  "plugin": {
-    "name": "Ειδοποιήσεις"
-  }
-}
diff --git a/plugins/alerts/locales/translated/es_ES.json b/plugins/alerts/locales/translated/es_ES.json
deleted file mode 100644
index 5af0eec6b..000000000
--- a/plugins/alerts/locales/translated/es_ES.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Alertas"
-  },
-  "permissions": {
-    "use": {
-      "title": "Usar alertas",
-      "description": "Recibe alertas en tu bandeja de entrada y envíalas a tus propios canales."
-    }
-  },
-  "onboarding": {
-    "feature": "Alertas",
-    "featureDesc": "Todas las alertas en una sola bandeja de entrada, enviadas a Discord, ntfy, correo electrónico o un webhook si lo deseas."
-  },
-  "settings": {
-    "group": {
-      "general": "General",
-      "email": "Correo electrónico"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Anuncios de Termix",
-        "description": "Muestra las novedades del equipo de Termix, como avisos de seguridad y actualizaciones, directamente en la bandeja de entrada de todos."
-      },
-      "retentionDays": {
-        "label": "Mantener alertas durante (días)",
-        "description": "Las alertas más antiguas se eliminan de todas las bandejas de entrada."
-      },
-      "smtpHost": {
-        "label": "servidor SMTP",
-        "description": "Necesario para los canales de correo electrónico. Déjelo en blanco para desactivar el correo electrónico.",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "puerto SMTP",
-        "description": "Normalmente 587 con STARTTLS o 465 con TLS."
-      },
-      "smtpSecure": {
-        "label": "Utilice TLS desde el principio.",
-        "description": "Habilítelo para el puerto 465. Déjelo desactivado para el puerto 587, que se actualiza a TLS automáticamente."
-      },
-      "smtpUser": {
-        "label": "Nombre de usuario SMTP",
-        "description": "Déjelo en blanco si el servidor no requiere inicio de sesión."
-      },
-      "smtpPassword": {
-        "label": "Contraseña SMTP",
-        "description": "Almacenado cifrado."
-      },
-      "smtpFrom": {
-        "label": "Desde la dirección",
-        "description": "Las alertas del remitente provienen de.",
-        "placeholder": "Termix <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "ventanas emergentes de alerta",
-        "description": "¿Qué alertas nuevas aparecen mientras usas Termix? Siempre llegan a la bandeja de entrada.",
-        "all": "Todas las alertas",
-        "warning": "Advertencias y críticas",
-        "critical": "Solo crítico",
-        "off": "Ninguna"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Bandeja de entrada",
-    "channels": "Canales",
-    "rules": "Normas de entrega"
-  },
-  "severity": {
-    "info": "Información",
-    "success": "Éxito",
-    "warning": "Advertencia",
-    "critical": "Crítico"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "Abrir",
-    "view": "Ver",
-    "unread": "No leído",
-    "deliveryFailed_one": "El canal {{count}} falló",
-    "deliveryFailed_other": "{{count}} canales fallaron",
-    "markRead": "Marcar como leído",
-    "markUnread": "Marcar como no leído",
-    "markAllRead": "Marcar todo como leído",
-    "delete": "Eliminar",
-    "clearRead": "Eliminar alertas de lectura",
-    "cleared_one": "Alerta eliminada {{count}}",
-    "cleared_other": "Alertas {{count}} eliminadas",
-    "filterAll": "Revocar todo",
-    "filterUnread": "No leído",
-    "anySeverity": "Cualquier gravedad",
-    "anySource": "Cualquier fuente",
-    "openAll": "Abrir en una pestaña",
-    "empty": "Aún no hay alertas.",
-    "emptyUnread": "Ya estás al día.",
-    "loadMore": "Cargar más"
-  },
-  "channels": {
-    "intro": "Los canales son donde las alertas pueden enviarse fuera de Termix. Las reglas de entrega determinan qué alertas los utilizan.",
-    "add": "Agregar canal",
-    "edit": "Editar canal",
-    "test": "Enviar una prueba",
-    "testSent": "Alerta de prueba enviada",
-    "testFailed": "Prueba fallida: {{error}}",
-    "deleteConfirm": "¿Eliminar el canal \"{{name}}\"?",
-    "deleted": "Canal eliminado",
-    "empty": "Aún no hay canales.",
-    "enabled": "Activado",
-    "needsSave": "Este canal debe abrirse y guardarse de nuevo antes de poder enviar mensajes.",
-    "name": "Nombre",
-    "nameRequired": "El nombre es obligatorio",
-    "type": "Tipo",
-    "types": {
-      "webhook": "Webhook",
-      "ntfy": "ntfy",
-      "discord": "Discord",
-      "email": "Correo electrónico"
-    },
-    "emailUnavailable": "El correo electrónico necesita un servidor SMTP, que un administrador configura en los ajustes de alertas.",
-    "webhookUrl": "URL",
-    "webhookHint": "Obtiene un cuerpo JSON para cada alerta.",
-    "method": "Método",
-    "headers": "Encabezados",
-    "headersHint": "Uno por línea, como Nombre: valor.",
-    "ntfyServer": "URL del servidor",
-    "ntfyTopic": "Tema",
-    "ntfyToken": "Token de acceso (opcional)",
-    "discordUrl": "URL del webhook de Discord",
-    "discordHint": "Desde la configuración del canal en Discord, en Integraciones.",
-    "discordUsername": "Nombre para mostrar (opcional)",
-    "discordAvatar": "URL del avatar (opcional)",
-    "emailTo": "Enviar a",
-    "emailHint": "Separe las direcciones con comas.",
-    "privateNetwork": "Permitir una dirección de red privada",
-    "privateNetworkHint": "Solo funciona para los hosts que un administrador haya autorizado en la lista de puntos finales privados."
-  },
-  "rules": {
-    "intro": "Una regla de envío envía alertas coincidentes a tus canales. Las alertas también permanecen siempre en la bandeja de entrada.",
-    "add": "Agregar regla",
-    "edit": "Regla de edición",
-    "empty": "Aún no hay reglas, por lo que las alertas solo aparecen en la bandeja de entrada.",
-    "needChannel": "Primero añade un canal.",
-    "enabled": "Activado",
-    "name": "Nombre",
-    "nameRequired": "El nombre es obligatorio",
-    "match": "Alertas para enviar",
-    "matchHint": "* para todo, automatizaciones.* para todo a partir de automatizaciones, o un tipo exacto.",
-    "minSeverity": "Al menos",
-    "channels": "Enviar a",
-    "channelRequired": "Elige al menos un canal.",
-    "deleteConfirm": "¿Eliminar la regla \"{{name}}\"?",
-    "everything": "Todo",
-    "summary": "{{match}}, {{severity}} o superior, a {{channels}}"
-  },
-  "actions": {
-    "cancel": "Cancelar",
-    "save": "Guardar",
-    "saving": "Guardando...",
-    "delete": "Eliminar"
-  },
-  "widget": {
-    "name": "Feed de alertas",
-    "description": "Tus últimas alertas, con una forma rápida de marcarlas como leídas.",
-    "maxItems": "Artículos máximos",
-    "showRead": "Mostrar alertas de lectura",
-    "allClear": "Todo correcto",
-    "loading": "Cargando..."
-  },
-  "plugin": {
-    "name": "Alertas"
-  }
-}
diff --git a/plugins/alerts/locales/translated/fi_FI.json b/plugins/alerts/locales/translated/fi_FI.json
deleted file mode 100644
index 3f98b5c58..000000000
--- a/plugins/alerts/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Hälytykset"
-  },
-  "permissions": {
-    "use": {
-      "title": "Käytä hälytyksiä",
-      "description": "Saat hälytyksiä sähköpostiisi ja voit lähettää niitä omiin kanaviisi."
-    }
-  },
-  "onboarding": {
-    "feature": "Hälytykset",
-    "featureDesc": "Jokainen ilmoitus yhdessä postilaatikossa, lähetettynä Discordiin, ntfyyn, sähköpostiin tai webhookiin, jos haluat."
-  },
-  "settings": {
-    "group": {
-      "general": "Yleistä",
-      "email": "Sähköposti"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Termix-ilmoitukset",
-        "description": "Näytä Termix-tiimin uutiset, kuten tietoturvailmoitukset ja julkaisut, kaikkien postilaatikossa."
-      },
-      "retentionDays": {
-        "label": "Säilytä hälytykset (päivää)",
-        "description": "Vanhemmat ilmoitukset poistetaan kaikista postilaatikoista."
-      },
-      "smtpHost": {
-        "label": "SMTP-palvelin",
-        "description": "Tarvitaan sähköpostikanaville. Jätä tyhjäksi poistaaksesi sähköpostin käytöstä.",
-        "placeholder": "smtp.esimerkki.com"
-      },
-      "smtpPort": {
-        "label": "SMTP-portti",
-        "description": "Yleensä 587 STARTTLS:n kanssa tai 465 TLS:n kanssa."
-      },
-      "smtpSecure": {
-        "label": "Käytä TLS:ää alusta alkaen",
-        "description": "Ota käyttöön portissa 465. Jätä pois käytöstä portissa 587, joka päivittää TLS:ään automaattisesti."
-      },
-      "smtpUser": {
-        "label": "SMTP-käyttäjätunnus",
-        "description": "Jätä tyhjäksi, jos palvelin ei vaadi kirjautumista."
-      },
-      "smtpPassword": {
-        "label": "SMTP-salasana",
-        "description": "Tallennettu salattuna."
-      },
-      "smtpFrom": {
-        "label": "Lähettäjän osoite",
-        "description": "Lähettäjän hälytykset tulevat.",
-        "placeholder": "Termix <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "Hälytysikkunat",
-        "description": "Mitkä uudet hälytykset ilmestyvät Termixin käytön aikana? Ne päätyvät aina postilaatikkoon.",
-        "all": "Kaikki hälytykset",
-        "warning": "Varoitukset ja kriittiset",
-        "critical": "Vain kriittiset",
-        "off": "Ei mitään"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Saapuneet",
-    "channels": "Kanavat",
-    "rules": "Toimitussäännöt"
-  },
-  "severity": {
-    "info": "Tiedot",
-    "success": "Menestys",
-    "warning": "Varoitus",
-    "critical": "Kriittinen"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "Avata",
-    "view": "Näytä",
-    "unread": "Lukematon",
-    "deliveryFailed_one": "{{count}} kanava epäonnistui",
-    "deliveryFailed_other": "{{count}} kanavat epäonnistuivat",
-    "markRead": "Merkitse luetuksi",
-    "markUnread": "Merkitse lukemattomaksi",
-    "markAllRead": "Merkitse kaikki luetuiksi",
-    "delete": "Poistaa",
-    "clearRead": "Poista lukuilmoitukset",
-    "cleared_one": "Poistettu {{count}} -hälytys",
-    "cleared_other": "Poistetut {{count}} hälytykset",
-    "filterAll": "Kaikki",
-    "filterUnread": "Lukematon",
-    "anySeverity": "Mikä tahansa vakavuusaste",
-    "anySource": "Mikä tahansa lähde",
-    "openAll": "Avaa välilehdessä",
-    "empty": "Ei vielä hälytyksiä.",
-    "emptyUnread": "Olette kaikki kärryillä.",
-    "loadMore": "Lataa lisää"
-  },
-  "channels": {
-    "intro": "Kanavat ovat kanavia, joihin hälytykset voivat mennä Termixin ulkopuolelle. Toimitussäännöt valitsevat, mitkä hälytykset niitä käyttävät.",
-    "add": "Lisää kanava",
-    "edit": "Muokkaa kanavaa",
-    "test": "Lähetä testi",
-    "testSent": "Testihälytys lähetetty",
-    "testFailed": "Testi epäonnistui: {{error}}",
-    "deleteConfirm": "Poistetaanko kanava \"{{name}}\"?",
-    "deleted": "Kanava poistettu",
-    "empty": "Ei vielä kanavia.",
-    "enabled": "Käytössä",
-    "needsSave": "Tämä kanava on avattava ja tallennettava uudelleen ennen kuin se voi lähettää.",
-    "name": "Nimi",
-    "nameRequired": "Nimi on pakollinen",
-    "type": "Tyyppi",
-    "types": {
-      "webhook": "Webhook",
-      "ntfy": "ntfy",
-      "discord": "Eripura",
-      "email": "Sähköposti"
-    },
-    "emailUnavailable": "Sähköposti tarvitsee SMTP-palvelimen, jonka järjestelmänvalvoja määrittää hälytysasetuksissa.",
-    "webhookUrl": "URL-osoite",
-    "webhookHint": "Hakee JSON-rungon jokaiselle hälytykselle.",
-    "method": "Menetelmä",
-    "headers": "Ylätunnisteet",
-    "headersHint": "Yksi riviä kohden, kuten Nimi: arvo.",
-    "ntfyServer": "Palvelimen URL-osoite",
-    "ntfyTopic": "Aihe",
-    "ntfyToken": "Käyttöoikeustunnus (valinnainen)",
-    "discordUrl": "Discord-webhookin URL-osoite",
-    "discordHint": "Kanavan asetuksista Discordissa, Integraatiot-kohdasta.",
-    "discordUsername": "Näyttönimi (valinnainen)",
-    "discordAvatar": "Avatarin URL-osoite (valinnainen)",
-    "emailTo": "Lähetä osoitteeseen",
-    "emailHint": "Erota useampi kuin yksi osoite pilkulla.",
-    "privateNetwork": "Salli yksityinen verkko-osoite",
-    "privateNetworkHint": "Toimii vain isännille, jotka ylläpitäjä sallii yksityisten päätepisteiden luettelossa."
-  },
-  "rules": {
-    "intro": "Toimitussääntö lähettää vastaavat hälytykset kanavillesi. Hälytykset pysyvät aina myös postilaatikossasi.",
-    "add": "Lisää sääntö",
-    "edit": "Muokkaa sääntöä",
-    "empty": "Ei vielä sääntöjä, joten hälytykset näkyvät vain postilaatikossa.",
-    "needChannel": "Lisää ensin kanava.",
-    "enabled": "Käytössä",
-    "name": "Nimi",
-    "nameRequired": "Nimi on pakollinen",
-    "match": "Lähetettävät hälytykset",
-    "matchHint": "* kaikkeen, automaatiot.* kaikkeen automaatioista alkaen tai tietynlaiseen.",
-    "minSeverity": "Vähintään",
-    "channels": "Lähetä osoitteeseen",
-    "channelRequired": "Valitse ainakin yksi kanava",
-    "deleteConfirm": "Poistetaanko sääntö \"{{name}}\"?",
-    "everything": "Kaikki",
-    "summary": "{{match}}, {{severity}} tai korkeampi, arvoon {{channels}}"
-  },
-  "actions": {
-    "cancel": "Peruuttaa",
-    "save": "Tallentaa",
-    "saving": "Tallennetaan...",
-    "delete": "Poistaa"
-  },
-  "widget": {
-    "name": "Hälytyssyöte",
-    "description": "Uusimmat ilmoituksesi ja nopea tapa merkitä ne luetuiksi",
-    "maxItems": "Enimmäismäärä esineitä",
-    "showRead": "Näytä lukuilmoitukset",
-    "allClear": "Kaikki selvää",
-    "loading": "Ladataan..."
-  },
-  "plugin": {
-    "name": "Hälytykset"
-  }
-}
diff --git a/plugins/alerts/locales/translated/fr_FR.json b/plugins/alerts/locales/translated/fr_FR.json
deleted file mode 100644
index c47c6752b..000000000
--- a/plugins/alerts/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Alertes"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utiliser les alertes",
-      "description": "Recevez des alertes dans votre boîte de réception et transférez-les sur vos propres canaux."
-    }
-  },
-  "onboarding": {
-    "feature": "Alertes",
-    "featureDesc": "Toutes les alertes dans une seule boîte de réception, envoyées sur Discord, ntfy, par e-mail ou via un webhook si vous le souhaitez."
-  },
-  "settings": {
-    "group": {
-      "general": "Général",
-      "email": "E-mail"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Annonces de Termix",
-        "description": "Afficher les actualités de l'équipe Termix, telles que les avis de sécurité et les nouvelles versions, dans la boîte de réception de tous."
-      },
-      "retentionDays": {
-        "label": "Conserver les alertes pendant (jours)",
-        "description": "Les alertes les plus anciennes sont supprimées de chaque boîte de réception."
-      },
-      "smtpHost": {
-        "label": "Serveur SMTP",
-        "description": "Nécessaire pour les canaux de messagerie. Laisser vide pour désactiver les e-mails.",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "Port SMTP",
-        "description": "Généralement 587 avec STARTTLS ou 465 avec TLS."
-      },
-      "smtpSecure": {
-        "label": "Utilisez TLS dès le début",
-        "description": "Activez le port 465. Désactivez le port 587, qui passe automatiquement au protocole TLS."
-      },
-      "smtpUser": {
-        "label": "Nom d'utilisateur SMTP",
-        "description": "Laissez ce champ vide si le serveur ne nécessite pas d'authentification."
-      },
-      "smtpPassword": {
-        "label": "Mot de passe SMTP",
-        "description": "Stocké de manière cryptée."
-      },
-      "smtpFrom": {
-        "label": "Adresse de départ",
-        "description": "L'expéditeur des alertes provient de :",
-        "placeholder": "Termix <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "fenêtres contextuelles d'alerte",
-        "description": "Quelles nouvelles alertes s'affichent lorsque vous utilisez Termix ? Elles arrivent toujours dans votre boîte de réception.",
-        "all": "Toutes les alertes",
-        "warning": "Avertissements et critiques",
-        "critical": "Critique uniquement",
-        "off": "Aucune"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Boîte de réception",
-    "channels": "Canaux",
-    "rules": "Règles de livraison"
-  },
-  "severity": {
-    "info": "Info",
-    "success": "Succès",
-    "warning": "Avertissement",
-    "critical": "Critique"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "Ouvrir",
-    "view": "Consultation",
-    "unread": "Non lu",
-    "deliveryFailed_one": "Le canal {{count}} a échoué",
-    "deliveryFailed_other": "Les canaux {{count}} ont échoué",
-    "markRead": "Marquer comme lu",
-    "markUnread": "Marquer comme non lu",
-    "markAllRead": "Marquer tout comme lu",
-    "delete": "Supprimer",
-    "clearRead": "Supprimer les alertes de lecture",
-    "cleared_one": "Alerte {{count}} supprimée",
-    "cleared_other": "Alertes supprimées {{count}}",
-    "filterAll": "Tout",
-    "filterUnread": "Non lu",
-    "anySeverity": "Toute gravité",
-    "anySource": "Toute source",
-    "openAll": "Ouvrir dans un onglet",
-    "empty": "Aucune alerte pour le moment.",
-    "emptyUnread": "Vous êtes à jour.",
-    "loadMore": "Charger plus"
-  },
-  "channels": {
-    "intro": "Les canaux permettent aux alertes de sortir de Termix. Les règles de diffusion déterminent quelles alertes les utilisent.",
-    "add": "Ajouter une chaîne",
-    "edit": "Modifier la chaîne",
-    "test": "Envoyer un test",
-    "testSent": "Alerte de test envoyée",
-    "testFailed": "Test échoué : {{error}}",
-    "deleteConfirm": "Supprimer le canal \"{{name}}\"?",
-    "deleted": "Chaîne supprimée",
-    "empty": "Aucune chaîne pour le moment.",
-    "enabled": "Activé",
-    "needsSave": "Ce canal doit être ouvert et enregistré à nouveau avant de pouvoir envoyer des données.",
-    "name": "Nom",
-    "nameRequired": "Le nom est obligatoire",
-    "type": "Type",
-    "types": {
-      "webhook": "Webhook",
-      "ntfy": "ntfy",
-      "discord": "Discord",
-      "email": "E-mail"
-    },
-    "emailUnavailable": "La messagerie électronique nécessite un serveur SMTP, que l'administrateur configure dans les paramètres d'alertes.",
-    "webhookUrl": "URL",
-    "webhookHint": "Récupère un corps JSON pour chaque alerte.",
-    "method": "Méthode",
-    "headers": "En-têtes",
-    "headersHint": "Une par ligne, comme Nom : valeur.",
-    "ntfyServer": "URL du serveur",
-    "ntfyTopic": "Sujet",
-    "ntfyToken": "Jeton d'accès (facultatif)",
-    "discordUrl": "URL du webhook Discord",
-    "discordHint": "Dans les paramètres de la chaîne sur Discord, sous Intégrations.",
-    "discordUsername": "Nom d'affichage (facultatif)",
-    "discordAvatar": "URL de l'avatar (facultatif)",
-    "emailTo": "Envoyer à",
-    "emailHint": "Séparez les adresses multiples par des virgules.",
-    "privateNetwork": "Autoriser une adresse réseau privée",
-    "privateNetworkHint": "Fonctionne uniquement pour les hôtes autorisés par un administrateur dans la liste des points de terminaison privés."
-  },
-  "rules": {
-    "intro": "Une règle de diffusion envoie des alertes correspondantes à vos canaux. Les alertes restent également disponibles dans votre boîte de réception.",
-    "add": "Ajouter une règle",
-    "edit": "Règle de modification",
-    "empty": "Aucune règle n'a encore été définie, les alertes n'apparaissent donc que dans la boîte de réception.",
-    "needChannel": "Commencez par ajouter un canal.",
-    "enabled": "Activé",
-    "name": "Nom",
-    "nameRequired": "Le nom est obligatoire",
-    "match": "Alertes à envoyer",
-    "matchHint": "* Pour tout, les automatisations.* Pour tout ce qui concerne les automatisations, ou un type précis.",
-    "minSeverity": "Au moins",
-    "channels": "Envoyer à",
-    "channelRequired": "Choisissez au moins une chaîne",
-    "deleteConfirm": "Supprimer la règle \"{{name}}\"?",
-    "everything": "Tout",
-    "summary": "{{match}}, {{severity}} ou supérieur, à {{channels}}"
-  },
-  "actions": {
-    "cancel": "Annuler",
-    "save": "Enregistrer",
-    "saving": "Enregistrement…",
-    "delete": "Supprimer"
-  },
-  "widget": {
-    "name": "Flux d'alertes",
-    "description": "Vos dernières alertes, avec un moyen rapide de les marquer comme lues",
-    "maxItems": "Articles maximum",
-    "showRead": "Afficher les alertes de lecture",
-    "allClear": "Aucune alerte",
-    "loading": "Chargement..."
-  },
-  "plugin": {
-    "name": "Alertes"
-  }
-}
diff --git a/plugins/alerts/locales/translated/he_IL.json b/plugins/alerts/locales/translated/he_IL.json
deleted file mode 100644
index 02334a0c2..000000000
--- a/plugins/alerts/locales/translated/he_IL.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "התראות"
-  },
-  "permissions": {
-    "use": {
-      "title": "השתמש בהתראות",
-      "description": "קבל התראות לתיבת הדואר הנכנס ושלח אותן לערוצים שלך."
-    }
-  },
-  "onboarding": {
-    "feature": "התראות",
-    "featureDesc": "כל התראה בתיבת דואר נכנס אחת, נשלחת לדיסקורד, ntfy, אימייל או webhook אם תרצו."
-  },
-  "settings": {
-    "group": {
-      "general": "כְּלָלִי",
-      "email": "אֶלֶקטרוֹנִי"
-    },
-    "admin": {
-      "announcements": {
-        "label": "הכרזות של טרמיקס",
-        "description": "הצג חדשות מצוות Termix, כמו הודעות אבטחה ושחרורים, בתיבת הדואר הנכנס של כולם."
-      },
-      "retentionDays": {
-        "label": "שמור התראות למשך (ימים)",
-        "description": "התראות ישנות יותר מוסרות מכל תיבת דואר נכנס."
-      },
-      "smtpHost": {
-        "label": "שרת SMTP",
-        "description": "נדרש עבור ערוצי דוא\"ל. השאר ריק כדי לכבות את הדוא\"ל.",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "יציאת SMTP",
-        "description": "בדרך כלל 587 עם STARTTLS או 465 עם TLS."
-      },
-      "smtpSecure": {
-        "label": "השתמש ב-TLS מההתחלה",
-        "description": "הפעל עבור פורט 465. השאר את היציאה כבויה עבור פורט 587, אשר משדרג ל-TLS בעצמו."
-      },
-      "smtpUser": {
-        "label": "שם משתמש של SMTP",
-        "description": "השאר ריק אם השרת אינו דורש התחברות."
-      },
-      "smtpPassword": {
-        "label": "סיסמת SMTP",
-        "description": "מאוחסן מוצפן."
-      },
-      "smtpFrom": {
-        "label": "מכתובת",
-        "description": "התראות השולח מגיעות מ-.",
-        "placeholder": "טרמיקס <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "חלונות קופצים של התראות",
-        "description": "אילו התראות חדשות מופיעות בזמן השימוש ב-Termix? הן תמיד מגיעות לתיבת הדואר הנכנס.",
-        "all": "כל ההתראות",
-        "warning": "אזהרות ומידע קריטי",
-        "critical": "קריטי בלבד",
-        "off": "אַף לֹא אֶחָד"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "תיבת הדואר הנכנס",
-    "channels": "ערוצים",
-    "rules": "כללי משלוח"
-  },
-  "severity": {
-    "info": "מידע",
-    "success": "הַצלָחָה",
-    "warning": "אַזהָרָה",
-    "critical": "קרִיטִי"
-  },
-  "inbox": {
-    "sourceTermix": "טרמיקס",
-    "openLink": "לִפְתוֹחַ",
-    "view": "נוֹף",
-    "unread": "לא נקרא",
-    "deliveryFailed_one": "ערוץ {{count}} נכשל",
-    "deliveryFailed_other": "ערוצים {{count}} נכשלו",
-    "markRead": "סמן כנקרא",
-    "markUnread": "סמן כלא נקרא",
-    "markAllRead": "סמן הכל כנקרא",
-    "delete": "לִמְחוֹק",
-    "clearRead": "מחיקת התראות קריאה",
-    "cleared_one": "התראה {{count}} נמחקה",
-    "cleared_other": "התראות שנמחקו {{count}}",
-    "filterAll": "כֹּל",
-    "filterUnread": "לא נקרא",
-    "anySeverity": "כל חומרה",
-    "anySource": "כל מקור",
-    "openAll": "פתח בכרטיסייה",
-    "empty": "עדיין אין התראות.",
-    "emptyUnread": "כולכם שקועים.",
-    "loadMore": "טען עוד"
-  },
-  "channels": {
-    "intro": "ערוצים הם מקומות שבהם התראות יכולות להגיע מחוץ ל-Termix. כללי מסירה בוחרים אילו התראות משתמשות בהן.",
-    "add": "הוסף ערוץ",
-    "edit": "עריכת ערוץ",
-    "test": "שלח בדיקה",
-    "testSent": "התראת בדיקה נשלחה",
-    "testFailed": "הבדיקה נכשלה: {{error}}",
-    "deleteConfirm": "למחוק את הערוץ \"{{name}}\"?",
-    "deleted": "הערוץ נמחק",
-    "empty": "עדיין אין ערוצים.",
-    "enabled": "מופעל",
-    "needsSave": "יש לפתוח ולשמור שוב את הערוץ הזה לפני שניתן יהיה לשלוח אותו.",
-    "name": "שֵׁם",
-    "nameRequired": "שם נדרש",
-    "type": "סוּג",
-    "types": {
-      "webhook": "וובהוק",
-      "ntfy": "ntfy",
-      "discord": "מַחֲלוֹקֶת",
-      "email": "אֶלֶקטרוֹנִי"
-    },
-    "emailUnavailable": "דוא\"ל דורש שרת SMTP, אותו מנהל מערכת מגדיר בהגדרות ההתראות.",
-    "webhookUrl": "כתובת אתר",
-    "webhookHint": "מקבל גוף JSON עבור כל התראה.",
-    "method": "שִׁיטָה",
-    "headers": "כותרות",
-    "headersHint": "אחד בכל שורה, כמו שם: ערך.",
-    "ntfyServer": "כתובת URL של השרת",
-    "ntfyTopic": "נוֹשֵׂא",
-    "ntfyToken": "אסימון גישה (אופציונלי)",
-    "discordUrl": "כתובת אתר של דיסקורד ליצירת קשר עם רשת (webhook)",
-    "discordHint": "מהגדרות הערוץ בדיסקורד, תחת אינטגרציות.",
-    "discordUsername": "שם תצוגה (אופציונלי)",
-    "discordAvatar": "כתובת URL של אווטאר (אופציונלי)",
-    "emailTo": "שלח אל",
-    "emailHint": "הפרד יותר מכתובת אחת באמצעות פסיקים.",
-    "privateNetwork": "אפשר כתובת רשת פרטית",
-    "privateNetworkHint": "עובד רק עבור מארחים שמנהל מאפשר ברשימת נקודות הקצה הפרטיות."
-  },
-  "rules": {
-    "intro": "כלל מסירה שולח התראות תואמות לערוצים שלך. ההתראות תמיד נשארות גם בתיבת הדואר הנכנס.",
-    "add": "הוסף כלל",
-    "edit": "עריכת כלל",
-    "empty": "עדיין אין כללים, כך שההתראות מופיעות רק בתיבת הדואר הנכנס.",
-    "needChannel": "הוסף ערוץ קודם.",
-    "enabled": "מופעל",
-    "name": "שֵׁם",
-    "nameRequired": "שם נדרש",
-    "match": "התראות לשליחה",
-    "matchHint": "* להכל, אוטומציות.* להכל, החל מאוטומציות, או מסוג אחד מדויק.",
-    "minSeverity": "לְפָחוֹת",
-    "channels": "שלח אל",
-    "channelRequired": "בחר לפחות ערוץ אחד",
-    "deleteConfirm": "למחוק את הכלל \"{{name}}\"?",
-    "everything": "הַכֹּל",
-    "summary": "{{match}}, {{severity}} או גבוה יותר, עד {{channels}}"
-  },
-  "actions": {
-    "cancel": "לְבַטֵל",
-    "save": "לְהַצִיל",
-    "saving": "חִסָכוֹן...",
-    "delete": "לִמְחוֹק"
-  },
-  "widget": {
-    "name": "הזנת התראות",
-    "description": "ההתראות האחרונות שלך, עם דרך מהירה לסמן אותן כנקראו",
-    "maxItems": "מקסימום פריטים",
-    "showRead": "הצג התראות קריאה",
-    "allClear": "הכל ברור",
-    "loading": "טְעִינָה..."
-  },
-  "plugin": {
-    "name": "התראות"
-  }
-}
diff --git a/plugins/alerts/locales/translated/hi_IN.json b/plugins/alerts/locales/translated/hi_IN.json
deleted file mode 100644
index a6892dd43..000000000
--- a/plugins/alerts/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "अलर्ट्स"
-  },
-  "permissions": {
-    "use": {
-      "title": "अलर्ट का उपयोग करें",
-      "description": "इनबॉक्स में अलर्ट प्राप्त करें और उन्हें अपने चैनलों पर भेजें।"
-    }
-  },
-  "onboarding": {
-    "feature": "अलर्ट",
-    "featureDesc": "सभी अलर्ट एक ही इनबॉक्स में, और यदि आप चाहें तो उन्हें डिस्कोर्ड, एनटीएफआई, ईमेल या वेबहुक पर भेजा जा सकता है।"
-  },
-  "settings": {
-    "group": {
-      "general": "सामान्य",
-      "email": "ईमेल"
-    },
-    "admin": {
-      "announcements": {
-        "label": "टर्मिक्स की घोषणाएँ",
-        "description": "टर्मिक्स टीम से संबंधित समाचार, जैसे कि सुरक्षा संबंधी सूचनाएं और विज्ञप्तियां, सभी के इनबॉक्स में दिखाएं।"
-      },
-      "retentionDays": {
-        "label": "(दिनों) के लिए अलर्ट चालू रखें",
-        "description": "सभी इनबॉक्स से पुराने अलर्ट हटा दिए जाते हैं।"
-      },
-      "smtpHost": {
-        "label": "एसएमटीपी सर्वर",
-        "description": "ईमेल चैनलों के लिए आवश्यक। ईमेल बंद करने के लिए इसे खाली छोड़ दें।",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "एसएमटीपी पोर्ट",
-        "description": "आमतौर पर STARTTLS के साथ 587 या TLS के साथ 465 का उपयोग किया जाता है।"
-      },
-      "smtpSecure": {
-        "label": "शुरुआत से ही TLS का उपयोग करें",
-        "description": "पोर्ट 465 के लिए इसे चालू करें। पोर्ट 587 के लिए इसे बंद रखें, क्योंकि यह अपने आप TLS में अपग्रेड हो जाता है।"
-      },
-      "smtpUser": {
-        "label": "एसएमटीपी उपयोगकर्ता नाम",
-        "description": "यदि सर्वर को लॉगिन की आवश्यकता नहीं है तो इसे खाली छोड़ दें।"
-      },
-      "smtpPassword": {
-        "label": "एसएमटीपी पासवर्ड",
-        "description": "एन्क्रिप्टेड रूप में संग्रहीत।"
-      },
-      "smtpFrom": {
-        "label": "इस पते से",
-        "description": "प्रेषक अलर्ट कहाँ से आते हैं?",
-        "placeholder": "टर्मिक्स <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "अलर्ट पॉपअप",
-        "description": "टर्मिक्स का उपयोग करते समय कौन-कौन से नए अलर्ट आते हैं? वे हमेशा आपके इनबॉक्स में आते हैं।",
-        "all": "सभी अलर्ट",
-        "warning": "चेतावनी और महत्वपूर्ण",
-        "critical": "केवल महत्वपूर्ण",
-        "off": "कोई नहीं"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "इनबॉक्स",
-    "channels": "चैनल",
-    "rules": "डिलीवरी नियम"
-  },
-  "severity": {
-    "info": "जानकारी",
-    "success": "सफल",
-    "warning": "चेतावनी",
-    "critical": "गंभीर"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "खोलें",
-    "view": "देखें",
-    "unread": "अपठित ग",
-    "deliveryFailed_one": "{{count}} चैनल विफल हो गया",
-    "deliveryFailed_other": "{{count}} चैनल विफल हो गए",
-    "markRead": "पढ़े हुए का चिह्न",
-    "markUnread": "अपठित के रूप में चिह्नित करें",
-    "markAllRead": "सभी को पढ़ा हुआ मार्क करें",
-    "delete": "हटाएँ",
-    "clearRead": "पढ़े गए अलर्ट हटाएं",
-    "cleared_one": "अलर्ट हटा दिया गया {{count}}",
-    "cleared_other": "हटाए गए {{count}} अलर्ट",
-    "filterAll": "सभी",
-    "filterUnread": "अपठित ग",
-    "anySeverity": "किसी भी गंभीरता",
-    "anySource": "कोई भी स्रोत",
-    "openAll": "एक टैब में खोलें",
-    "empty": "अभी तक कोई अलर्ट नहीं है।",
-    "emptyUnread": "आप सभी अपडेट्स से अवगत हैं।",
-    "loadMore": "और लोड करें"
-  },
-  "channels": {
-    "intro": "चैनल वो जगह हैं जहां अलर्ट टर्मिक्स से बाहर जा सकते हैं। डिलीवरी नियम तय करते हैं कि कौन से अलर्ट इनका उपयोग करेंगे।",
-    "add": "चैनल जोड़ें",
-    "edit": "चैनल संपादित करें",
-    "test": "टेस्ट भेजें",
-    "testSent": "परीक्षण अलर्ट भेजा गया",
-    "testFailed": "परीक्षण विफल: {{error}}",
-    "deleteConfirm": "चैनल \"{{name}} \" को हटा दें?",
-    "deleted": "चैनल हटा दिया गया",
-    "empty": "अभी तक कोई चैनल उपलब्ध नहीं हैं।",
-    "enabled": "सक्षम",
-    "needsSave": "भेजने से पहले इस चैनल को दोबारा खोलकर सेव करना होगा।",
-    "name": "नाम",
-    "nameRequired": "नाम आवश्यक है",
-    "type": "प्रकार",
-    "types": {
-      "webhook": "WEbhook",
-      "ntfy": "ntfy",
-      "discord": "Discord",
-      "email": "ईमेल"
-    },
-    "emailUnavailable": "ईमेल के लिए एक SMTP सर्वर की आवश्यकता होती है, जिसे एडमिन अलर्ट सेटिंग्स में सेट करता है।",
-    "webhookUrl": "URL",
-    "webhookHint": "प्रत्येक अलर्ट के लिए एक JSON बॉडी प्राप्त करता है।",
-    "method": "तरीका",
-    "headers": "हेडर",
-    "headersHint": "एक पंक्ति में एक, जैसे नाम: मान।",
-    "ntfyServer": "सर्वर URL",
-    "ntfyTopic": "विषय",
-    "ntfyToken": "एक्सेस टोकन (वैकल्पिक)",
-    "discordUrl": "डिस्कॉर्ड वेबहुक यूआरएल",
-    "discordHint": "डिस्कोर्ड में चैनल की सेटिंग में, इंटीग्रेशन के अंतर्गत।",
-    "discordUsername": "प्रदर्शन नाम (वैकल्पिक)",
-    "discordAvatar": "अवतार यूआरएल (वैकल्पिक)",
-    "emailTo": "भेजना",
-    "emailHint": "एक से अधिक पतों को अल्पविराम से अलग करें।",
-    "privateNetwork": "एक निजी नेटवर्क पते की अनुमति दें",
-    "privateNetworkHint": "यह सुविधा केवल उन होस्ट्स के लिए काम करती है जिन्हें एडमिन निजी एंडपॉइंट सूची में शामिल करने की अनुमति देता है।"
-  },
-  "rules": {
-    "intro": "एक डिलीवरी नियम आपके चैनलों पर मिलान करने वाले अलर्ट भेजता है। अलर्ट हमेशा आपके इनबॉक्स में भी रहते हैं।",
-    "add": "नियम जोड़ें",
-    "edit": "नियम संपादित करें",
-    "empty": "अभी तक कोई नियम नहीं बने हैं, इसलिए अलर्ट केवल इनबॉक्स में ही दिखाई देंगे।",
-    "needChannel": "पहले एक चैनल जोड़ें।",
-    "enabled": "सक्षम",
-    "name": "नाम",
-    "nameRequired": "नाम आवश्यक है",
-    "match": "भेजे जाने वाले अलर्ट",
-    "matchHint": "* हर चीज के लिए, स्वचालन। * स्वचालन से लेकर हर चीज के लिए, या एक सटीक प्रकार के लिए।",
-    "minSeverity": "कम से कम",
-    "channels": "भेजना",
-    "channelRequired": "कम से कम एक चैनल चुनें",
-    "deleteConfirm": "क्या नियम \"{{name}} \" को हटा दें?",
-    "everything": "सब कुछ",
-    "summary": "{{match}}, {{severity}} या इससे अधिक, से {{channels}} तक"
-  },
-  "actions": {
-    "cancel": "रद्द करें",
-    "save": "सहेजें",
-    "saving": "सहेजा जा रहा है...",
-    "delete": "हटाएँ"
-  },
-  "widget": {
-    "name": "अलर्ट फीड",
-    "description": "आपके नवीनतम अलर्ट, जिन्हें आप आसानी से पढ़ सकते हैं।",
-    "maxItems": "अधिकतम आइटम",
-    "showRead": "पढ़े जाने के अलर्ट दिखाएँ",
-    "allClear": "सब ठीक है",
-    "loading": "लोड हो रहा है..."
-  },
-  "plugin": {
-    "name": "अलर्ट"
-  }
-}
diff --git a/plugins/alerts/locales/translated/hu_HU.json b/plugins/alerts/locales/translated/hu_HU.json
deleted file mode 100644
index 4f1b64f19..000000000
--- a/plugins/alerts/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Riasztások"
-  },
-  "permissions": {
-    "use": {
-      "title": "Értesítések használata",
-      "description": "Értesítéseket kaphatsz a beérkező levelek mappájába, és elküldheted azokat a saját csatornáidra."
-    }
-  },
-  "onboarding": {
-    "feature": "Riasztások",
-    "featureDesc": "Minden értesítés egy postaládában, továbbítva Discordra, ntfy-ra, e-mailben vagy webhookon, ha szeretnéd."
-  },
-  "settings": {
-    "group": {
-      "general": "Általános",
-      "email": "Email"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Termix bejelentések",
-        "description": "Jelenítse meg a Termix csapatától származó híreket, például a biztonsági értesítéseket és kiadásokat, mindenki postaládájában."
-      },
-      "retentionDays": {
-        "label": "Figyelmeztetések megőrzése (nap)",
-        "description": "A régebbi értesítések minden beérkező üzenetből törlődnek."
-      },
-      "smtpHost": {
-        "label": "SMTP-kiszolgáló",
-        "description": "E-mail csatornákhoz szükséges. Hagyja üresen az e-mail kikapcsolásához.",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "SMTP-port",
-        "description": "Általában 587 STARTTLS-sel vagy 465 TLS-sel."
-      },
-      "smtpSecure": {
-        "label": "Használj TLS-t a kezdetektől fogva",
-        "description": "Kapcsold be a 465-ös porton. Hagyd kikapcsolva az 587-es porton, amely önmagában frissít TLS-re."
-      },
-      "smtpUser": {
-        "label": "SMTP felhasználónév",
-        "description": "Hagyja üresen, ha a szerver nem igényel bejelentkezést."
-      },
-      "smtpPassword": {
-        "label": "SMTP jelszó",
-        "description": "Titkosítva tárolva."
-      },
-      "smtpFrom": {
-        "label": "Feladó címe",
-        "description": "A feladó értesítései innen érkeznek.",
-        "placeholder": "Termix <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "Figyelmeztető felugró ablakok",
-        "description": "Milyen új értesítések ugranak fel a Termix használata közben? Mindig a beérkezett üzenetek mappába érkeznek.",
-        "all": "Minden riasztás",
-        "warning": "Figyelmeztetések és kritikus fontosságú információk",
-        "critical": "Csak kritikus fontosságú",
-        "off": "Egyik sem"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Beérkezett üzenetek",
-    "channels": "Csatornák",
-    "rules": "Szállítási szabályok"
-  },
-  "severity": {
-    "info": "Információ",
-    "success": "Siker",
-    "warning": "Figyelmeztetés",
-    "critical": "Kritikai"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "Nyitott",
-    "view": "Kilátás",
-    "unread": "Nem olvasott",
-    "deliveryFailed_one": "{{count}} csatorna hibás",
-    "deliveryFailed_other": "{{count}} csatornák hibásak",
-    "markRead": "Megjelölés olvasottként",
-    "markUnread": "Megjelölés olvasatlanként",
-    "markAllRead": "Összes megjelölése olvasottként",
-    "delete": "Töröl",
-    "clearRead": "Olvasási értesítések törlése",
-    "cleared_one": "Törölt {{count}} riasztás",
-    "cleared_other": "Törölt {{count}} riasztások",
-    "filterAll": "Minden",
-    "filterUnread": "Nem olvasott",
-    "anySeverity": "Bármilyen súlyosságú",
-    "anySource": "Bármely forrás",
-    "openAll": "Megnyitás egy lapon",
-    "empty": "Még nincsenek riasztások.",
-    "emptyUnread": "Mindennel tisztában vagytok.",
-    "loadMore": "Továbbiak betöltése"
-  },
-  "channels": {
-    "intro": "A csatornák azok a csatornák, amelyeken keresztül a riasztások a Termixen kívülre kerülhetnek. A kézbesítési szabályok választják ki, hogy mely riasztások használják ezeket a csatornákat.",
-    "add": "Csatorna hozzáadása",
-    "edit": "Csatorna szerkesztése",
-    "test": "Küldj egy tesztet",
-    "testSent": "Tesztriasztás elküldve",
-    "testFailed": "Sikertelen teszt: {{error}}",
-    "deleteConfirm": "Törölni a(z) \"{{name}} \" csatornát?",
-    "deleted": "Csatorna törölve",
-    "empty": "Még nincsenek csatornák.",
-    "enabled": "Engedélyezve",
-    "needsSave": "Ezt a csatornát újra meg kell nyitni és menteni, mielőtt küldeni tudna.",
-    "name": "Név",
-    "nameRequired": "Név megadása kötelező",
-    "type": "Típus",
-    "types": {
-      "webhook": "Webhook",
-      "ntfy": "ntfy",
-      "discord": "Viszály",
-      "email": "Email"
-    },
-    "emailUnavailable": "Az e-mailhez SMTP-kiszolgálóra van szükség, amelyet egy rendszergazda állít be a riasztási beállításokban.",
-    "webhookUrl": "URL-cím",
-    "webhookHint": "Minden riasztáshoz JSON törzset kap.",
-    "method": "Módszer",
-    "headers": "Fejlécek",
-    "headersHint": "Soronként egy, például Név: érték.",
-    "ntfyServer": "Szerver URL-címe",
-    "ntfyTopic": "Téma",
-    "ntfyToken": "Hozzáférési token (opcionális)",
-    "discordUrl": "Discord webhook URL",
-    "discordHint": "A csatorna beállításaiban a Discordban, az Integrációk alatt.",
-    "discordUsername": "Megjelenített név (opcionális)",
-    "discordAvatar": "Avatar URL-címe (opcionális)",
-    "emailTo": "Küldés ide:",
-    "emailHint": "Több cím esetén vesszővel válassza el az egyes címeket.",
-    "privateNetwork": "Privát hálózati cím engedélyezése",
-    "privateNetworkHint": "Csak azoknál a hosztoknál működik, amelyeket az adminisztrátor engedélyez a privát végpontok listájában."
-  },
-  "rules": {
-    "intro": "A kézbesítési szabály egyező értesítéseket küld a csatornáidra. Az értesítések mindig a beérkezett üzenetek mappájában is maradnak.",
-    "add": "Szabály hozzáadása",
-    "edit": "Szabály szerkesztése",
-    "empty": "Még nincsenek szabályok, így az értesítések csak a beérkező levelek mappában jelennek meg.",
-    "needChannel": "Először adj hozzá egy csatornát.",
-    "enabled": "Engedélyezve",
-    "name": "Név",
-    "nameRequired": "Név megadása kötelező",
-    "match": "Küldendő riasztások",
-    "matchHint": "* mindenre, automatizálásokra.* mindenre az automatizálásoktól kezdve, vagy egy pontos fajtára.",
-    "minSeverity": "Legalább",
-    "channels": "Küldés ide:",
-    "channelRequired": "Válassz legalább egy csatornát",
-    "deleteConfirm": "Törölni kell a(z) \"{{name}} \" szabályt?",
-    "everything": "Minden",
-    "summary": "{{match}}, {{severity}} vagy magasabb, {{channels}}-ra"
-  },
-  "actions": {
-    "cancel": "Mégsem",
-    "save": "Megtakarítás",
-    "saving": "Megtakarítás...",
-    "delete": "Töröl"
-  },
-  "widget": {
-    "name": "Értesítési hírcsatorna",
-    "description": "Legfrissebb értesítéseid, gyors móddal az olvasottként való megjelölésre",
-    "maxItems": "Max. tételek",
-    "showRead": "Olvasási értesítések megjelenítése",
-    "allClear": "Minden tiszta",
-    "loading": "Terhelés..."
-  },
-  "plugin": {
-    "name": "Riasztások"
-  }
-}
diff --git a/plugins/alerts/locales/translated/id_ID.json b/plugins/alerts/locales/translated/id_ID.json
deleted file mode 100644
index 78b043442..000000000
--- a/plugins/alerts/locales/translated/id_ID.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Peringatan"
-  },
-  "permissions": {
-    "use": {
-      "title": "Gunakan peringatan",
-      "description": "Dapatkan notifikasi di kotak masuk dan kirimkan ke saluran Anda sendiri."
-    }
-  },
-  "onboarding": {
-    "feature": "Peringatan",
-    "featureDesc": "Semua notifikasi dalam satu kotak masuk, yang kemudian dikirim ke Discord, ntfy, email, atau webhook jika Anda mau."
-  },
-  "settings": {
-    "group": {
-      "general": "Umum",
-      "email": "E-mail"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Pengumuman Termix",
-        "description": "Tampilkan berita dari tim Termix, seperti pemberitahuan keamanan dan rilis, di kotak masuk setiap orang."
-      },
-      "retentionDays": {
-        "label": "Aktifkan peringatan selama (hari)",
-        "description": "Notifikasi lama dihapus dari setiap kotak masuk."
-      },
-      "smtpHost": {
-        "label": "Server SMTP",
-        "description": "Diperlukan untuk saluran email. Biarkan kosong untuk menonaktifkan email.",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "Port SMTP",
-        "description": "Biasanya 587 dengan STARTTLS atau 465 dengan TLS."
-      },
-      "smtpSecure": {
-        "label": "Gunakan TLS sejak awal.",
-        "description": "Aktifkan untuk port 465. Biarkan nonaktif untuk port 587, yang akan secara otomatis diupgrade ke TLS."
-      },
-      "smtpUser": {
-        "label": "Nama pengguna SMTP",
-        "description": "Biarkan kosong jika server tidak memerlukan login."
-      },
-      "smtpPassword": {
-        "label": "Kata sandi SMTP",
-        "description": "Disimpan dalam keadaan terenkripsi."
-      },
-      "smtpFrom": {
-        "label": "Dari alamat",
-        "description": "Peringatan pengirim berasal dari.",
-        "placeholder": "Termix <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "Popup peringatan",
-        "description": "Notifikasi baru apa saja yang muncul saat Anda menggunakan Termix? Notifikasi tersebut selalu masuk ke kotak masuk Anda.",
-        "all": "Semua peringatan",
-        "warning": "Peringatan dan hal-hal penting",
-        "critical": "Kritik saja",
-        "off": "Tidak ada"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Kotak Masuk",
-    "channels": "Saluran",
-    "rules": "Aturan pengiriman"
-  },
-  "severity": {
-    "info": "Informasi",
-    "success": "Kesuksesan",
-    "warning": "Peringatan",
-    "critical": "Kritis"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "Membuka",
-    "view": "Melihat",
-    "unread": "Belum dibaca",
-    "deliveryFailed_one": "{{count}} saluran gagal",
-    "deliveryFailed_other": "{{count}} saluran gagal",
-    "markRead": "Tandai sebagai sudah dibaca",
-    "markUnread": "Tandai sebagai belum dibaca",
-    "markAllRead": "Tandai semua sebagai sudah dibaca",
-    "delete": "Menghapus",
-    "clearRead": "Hapus notifikasi baca",
-    "cleared_one": "Peringatan {{count}} dihapus",
-    "cleared_other": "Peringatan {{count}} dihapus",
-    "filterAll": "Semua",
-    "filterUnread": "Belum dibaca",
-    "anySeverity": "Tingkat keparahan apa pun",
-    "anySource": "Sumber apa pun",
-    "openAll": "Buka di tab",
-    "empty": "Belum ada peringatan.",
-    "emptyUnread": "Anda sudah mengetahui semuanya.",
-    "loadMore": "Muat lebih banyak"
-  },
-  "channels": {
-    "intro": "Saluran adalah tempat peringatan dapat dikirim ke luar Termix. Aturan pengiriman memilih peringatan mana yang akan menggunakannya.",
-    "add": "Tambahkan saluran",
-    "edit": "Edit saluran",
-    "test": "Kirim tes",
-    "testSent": "Peringatan uji coba terkirim",
-    "testFailed": "Tes gagal: {{error}}",
-    "deleteConfirm": "Hapus saluran \"{{name}}\"?",
-    "deleted": "Saluran dihapus",
-    "empty": "Belum ada saluran.",
-    "enabled": "Diaktifkan",
-    "needsSave": "Saluran ini perlu dibuka dan disimpan kembali sebelum dapat mengirim data.",
-    "name": "Nama",
-    "nameRequired": "Nama wajib diisi.",
-    "type": "Jenis",
-    "types": {
-      "webhook": "Webhook",
-      "ntfy": "ntfy",
-      "discord": "Perselisihan",
-      "email": "E-mail"
-    },
-    "emailUnavailable": "Email memerlukan server SMTP, yang diatur oleh administrator di pengaturan Notifikasi.",
-    "webhookUrl": "URL",
-    "webhookHint": "Menerima isi JSON untuk setiap peringatan.",
-    "method": "Metode",
-    "headers": "Judul",
-    "headersHint": "Satu per baris, seperti Nama: nilai.",
-    "ntfyServer": "URL Server",
-    "ntfyTopic": "Topik",
-    "ntfyToken": "Token akses (opsional)",
-    "discordUrl": "URL webhook Discord",
-    "discordHint": "Dari pengaturan saluran di Discord, di bawah Integrasi.",
-    "discordUsername": "Nama tampilan (opsional)",
-    "discordAvatar": "URL Avatar (opsional)",
-    "emailTo": "Kirim ke",
-    "emailHint": "Pisahkan lebih dari satu alamat dengan koma.",
-    "privateNetwork": "Izinkan alamat jaringan pribadi",
-    "privateNetworkHint": "Hanya berfungsi untuk host yang diizinkan oleh admin dalam daftar endpoint privat."
-  },
-  "rules": {
-    "intro": "Aturan pengiriman mengirimkan peringatan yang sesuai ke saluran Anda. Peringatan juga selalu tetap berada di kotak masuk.",
-    "add": "Tambahkan aturan",
-    "edit": "Edit aturan",
-    "empty": "Belum ada aturan, jadi notifikasi hanya muncul di kotak masuk.",
-    "needChannel": "Tambahkan saluran terlebih dahulu.",
-    "enabled": "Diaktifkan",
-    "name": "Nama",
-    "nameRequired": "Nama wajib diisi.",
-    "match": "Peringatan untuk dikirim",
-    "matchHint": "* untuk segala hal, otomatisasi.* untuk segala hal mulai dari otomatisasi, atau satu jenis tertentu.",
-    "minSeverity": "Setidaknya",
-    "channels": "Kirim ke",
-    "channelRequired": "Pilih setidaknya satu saluran",
-    "deleteConfirm": "Hapus aturan \"{{name}}\"?",
-    "everything": "Semuanya",
-    "summary": "{{match}}, {{severity}} atau lebih tinggi, hingga {{channels}}"
-  },
-  "actions": {
-    "cancel": "Membatalkan",
-    "save": "Menyimpan",
-    "saving": "Penghematan...",
-    "delete": "Menghapus"
-  },
-  "widget": {
-    "name": "Umpan Peringatan",
-    "description": "Notifikasi terbaru Anda, dengan cara cepat untuk menandainya sebagai sudah dibaca.",
-    "maxItems": "Jumlah maksimum",
-    "showRead": "Tampilkan pemberitahuan telah dibaca",
-    "allClear": "Semuanya aman.",
-    "loading": "Memuat..."
-  },
-  "plugin": {
-    "name": "Peringatan"
-  }
-}
diff --git a/plugins/alerts/locales/translated/it_IT.json b/plugins/alerts/locales/translated/it_IT.json
deleted file mode 100644
index 5fadf35f0..000000000
--- a/plugins/alerts/locales/translated/it_IT.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Avvisi"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilizzare gli avvisi",
-      "description": "Ricevi notifiche nella casella di posta e inoltrale ai tuoi canali."
-    }
-  },
-  "onboarding": {
-    "feature": "Avvisi",
-    "featureDesc": "Tutte le notifiche in un'unica casella di posta, inviate anche a Discord, ntfy, via email o tramite webhook, a seconda delle tue preferenze."
-  },
-  "settings": {
-    "group": {
-      "general": "Generale",
-      "email": "Email"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Comunicazioni di Termix",
-        "description": "Mostra le notizie del team Termix, come avvisi di sicurezza e rilasci, direttamente nella casella di posta di tutti."
-      },
-      "retentionDays": {
-        "label": "Mantieni gli avvisi per (giorni)",
-        "description": "Gli avvisi più vecchi vengono rimossi da tutte le caselle di posta."
-      },
-      "smtpHost": {
-        "label": "server SMTP",
-        "description": "Necessario per i canali email. Lasciare vuoto per disattivare le email.",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "porta SMTP",
-        "description": "Solitamente 587 con STARTTLS o 465 con TLS."
-      },
-      "smtpSecure": {
-        "label": "Utilizzare TLS fin dall'inizio",
-        "description": "Attivare la porta 465. Disattivare la porta 587, che si aggiorna automaticamente a TLS."
-      },
-      "smtpUser": {
-        "label": "nome utente SMTP",
-        "description": "Lascia vuoto se il server non richiede l'accesso tramite login."
-      },
-      "smtpPassword": {
-        "label": "password SMTP",
-        "description": "Archiviato in forma crittografata."
-      },
-      "smtpFrom": {
-        "label": "Da indirizzo",
-        "description": "Gli avvisi del mittente provengono da.",
-        "placeholder": "Termix <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "popup di avviso",
-        "description": "Quali nuovi avvisi compaiono mentre usi Termix? Arrivano sempre nella tua casella di posta.",
-        "all": "Tutti gli avvisi",
-        "warning": "avvertimenti e critici",
-        "critical": "Solo critico",
-        "off": "Nessuno"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Posta in arrivo",
-    "channels": "Canali",
-    "rules": "Regole di consegna"
-  },
-  "severity": {
-    "info": "Info",
-    "success": "Successo",
-    "warning": "Attenzione",
-    "critical": "Critico"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "Apri",
-    "view": "Visualizza",
-    "unread": "Non letto",
-    "deliveryFailed_one": "{{count}} canale non riuscito",
-    "deliveryFailed_other": "{{count}} canali non funzionanti",
-    "markRead": "Segna come letto",
-    "markUnread": "Segna come non letto",
-    "markAllRead": "Segna tutto come letto",
-    "delete": "Elimina",
-    "clearRead": "Elimina gli avvisi di lettura",
-    "cleared_one": "Avviso eliminato {{count}}",
-    "cleared_other": "Avvisi eliminati {{count}}",
-    "filterAll": "Tutte",
-    "filterUnread": "Non letto",
-    "anySeverity": "Qualsiasi gravità",
-    "anySource": "Qualsiasi fonte",
-    "openAll": "Apri in una scheda",
-    "empty": "Nessun avviso per ora.",
-    "emptyUnread": "Sei al corrente di tutto.",
-    "loadMore": "Carica altro"
-  },
-  "channels": {
-    "intro": "I canali sono i punti in cui gli avvisi possono essere inviati al di fuori di Termix. Le regole di consegna selezionano quali avvisi li utilizzano.",
-    "add": "Aggiungi canale",
-    "edit": "Modifica canale",
-    "test": "Invia un test",
-    "testSent": "Avviso di prova inviato",
-    "testFailed": "Test fallito: {{error}}",
-    "deleteConfirm": "Eliminare il canale \"{{name}}\"?",
-    "deleted": "Canale eliminato",
-    "empty": "Ancora nessun canale disponibile.",
-    "enabled": "Abilitato",
-    "needsSave": "Questo canale deve essere aperto e salvato nuovamente prima di poter inviare messaggi.",
-    "name": "Nome",
-    "nameRequired": "Nome obbligatorio",
-    "type": "Tipo",
-    "types": {
-      "webhook": "Webhook",
-      "ntfy": "ntfy",
-      "discord": "Discord",
-      "email": "Email"
-    },
-    "emailUnavailable": "Per l'invio di email è necessario un server SMTP, che l'amministratore configura nelle impostazioni degli avvisi.",
-    "webhookUrl": "URL",
-    "webhookHint": "Recupera un corpo JSON per ogni avviso.",
-    "method": "Metodo",
-    "headers": "Intestazioni",
-    "headersHint": "Uno per riga, ad esempio Nome: valore.",
-    "ntfyServer": "URL server",
-    "ntfyTopic": "Argomento",
-    "ntfyToken": "Token di accesso (facoltativo)",
-    "discordUrl": "URL del webhook di Discord",
-    "discordHint": "Dalle impostazioni del canale su Discord, alla voce Integrazioni.",
-    "discordUsername": "Nome visualizzato (facoltativo)",
-    "discordAvatar": "URL dell'avatar (facoltativo)",
-    "emailTo": "Invia a",
-    "emailHint": "Separare gli indirizzi con delle virgole.",
-    "privateNetwork": "Consentire un indirizzo di rete privato",
-    "privateNetworkHint": "Funziona solo per gli host che un amministratore consente nell'elenco degli endpoint privati."
-  },
-  "rules": {
-    "intro": "Una regola di consegna invia avvisi corrispondenti ai tuoi canali. Gli avvisi rimangono sempre anche nella posta in arrivo.",
-    "add": "Aggiungi regola",
-    "edit": "Modifica regola",
-    "empty": "Non ci sono ancora regole, quindi gli avvisi vengono visualizzati solo nella casella di posta.",
-    "needChannel": "Aggiungi prima un canale.",
-    "enabled": "Abilitato",
-    "name": "Nome",
-    "nameRequired": "Nome obbligatorio",
-    "match": "Avvisi da inviare",
-    "matchHint": "* per tutto, automazioni.* per tutto ciò che riguarda le automazioni, o un tipo specifico.",
-    "minSeverity": "Almeno",
-    "channels": "Invia a",
-    "channelRequired": "Scegli almeno un canale",
-    "deleteConfirm": "Eliminare la regola \"{{name}}\"?",
-    "everything": "Qualunque cosa",
-    "summary": "{{match}}, {{severity}} o superiore, a {{channels}}"
-  },
-  "actions": {
-    "cancel": "Annulla",
-    "save": "Salva",
-    "saving": "Salvando...",
-    "delete": "Elimina"
-  },
-  "widget": {
-    "name": "Feed degli avvisi",
-    "description": "I tuoi ultimi avvisi, con un modo rapido per contrassegnarli come letti.",
-    "maxItems": "Numero massimo di elementi",
-    "showRead": "Mostra gli avvisi di lettura",
-    "allClear": "Tutto a posto",
-    "loading": "Caricamento in corso..."
-  },
-  "plugin": {
-    "name": "Avvisi"
-  }
-}
diff --git a/plugins/alerts/locales/translated/ja_JP.json b/plugins/alerts/locales/translated/ja_JP.json
deleted file mode 100644
index a529a8f52..000000000
--- a/plugins/alerts/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "アラート"
-  },
-  "permissions": {
-    "use": {
-      "title": "アラートを使用する",
-      "description": "受信トレイでアラートを受け取り、自分のチャンネルに送信できます。"
-    }
-  },
-  "onboarding": {
-    "feature": "アラート",
-    "featureDesc": "すべてのアラートを1つの受信トレイに集約し、必要に応じてDiscord、ntfy、メール、またはWebhookに送信します。"
-  },
-  "settings": {
-    "group": {
-      "general": "全般",
-      "email": "メールアドレス"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Termixのお知らせ",
-        "description": "セキュリティに関する通知やリリースなど、Termixチームからのニュースを全員の受信トレイに表示します。"
-      },
-      "retentionDays": {
-        "label": "（日間）アラートを保持する",
-        "description": "古いアラートはすべての受信トレイから削除されます。"
-      },
-      "smtpHost": {
-        "label": "SMTPサーバー",
-        "description": "メール配信には必須です。メール配信をオフにする場合は空欄のままにしてください。",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "SMTPポート",
-        "description": "通常、STARTTLSの場合は587番ポート、TLSの場合は465番ポートが使用されます。"
-      },
-      "smtpSecure": {
-        "label": "最初からTLSを使用する",
-        "description": "ポート465は有効にしてください。ポート587は無効のままにしておいてください。587は自動的にTLSにアップグレードされます。"
-      },
-      "smtpUser": {
-        "label": "SMTPユーザー名",
-        "description": "サーバーへのログインが不要な場合は、空欄のままにしてください。"
-      },
-      "smtpPassword": {
-        "label": "SMTPパスワード",
-        "description": "暗号化して保存されます。"
-      },
-      "smtpFrom": {
-        "label": "送信元住所",
-        "description": "送信者アラートは以下から送信されます。",
-        "placeholder": "ターミックス <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "アラートポップアップ",
-        "description": "Termixの使用中に新しいアラートが表示されますか？それらはすべて受信トレイに届きます。",
-        "all": "すべてのアラート",
-        "warning": "警告と重大な",
-        "critical": "クリティカルのみ",
-        "off": "すべて解除"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "受信箱",
-    "channels": "チャンネル",
-    "rules": "配送ルール"
-  },
-  "severity": {
-    "info": "情報",
-    "success": "成功",
-    "warning": "警告",
-    "critical": "致命的"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "開く",
-    "view": "表示",
-    "unread": "未読",
-    "deliveryFailed_one": "{{count}} チャネルが失敗しました",
-    "deliveryFailed_other": "{{count}} チャネルが失敗しました",
-    "markRead": "既読にする",
-    "markUnread": "未読としてマークする",
-    "markAllRead": "すべて既読にする",
-    "delete": "削除",
-    "clearRead": "既読アラートを削除する",
-    "cleared_one": "削除済み {{count}} アラート",
-    "cleared_other": "削除された {{count}} アラート",
-    "filterAll": "すべて選択",
-    "filterUnread": "未読",
-    "anySeverity": "重症度は問わない",
-    "anySource": "あらゆる情報源",
-    "openAll": "タブで開く",
-    "empty": "まだアラートはありません。",
-    "emptyUnread": "皆さんは最新情報に追いつきました。",
-    "loadMore": "もっと読み込む"
-  },
-  "channels": {
-    "intro": "チャネルとは、アラートをTermix外部に送信する場所です。配信ルールによって、どのアラートがチャネルを使用するかが決定されます。",
-    "add": "チャンネルを追加",
-    "edit": "チャンネルを編集",
-    "test": "テストを送信",
-    "testSent": "テストアラートが送信されました",
-    "testFailed": "テスト失敗: {{error}}",
-    "deleteConfirm": "チャンネル「{{name}}」を削除しますか？",
-    "deleted": "チャンネルが削除されました",
-    "empty": "まだチャンネルはありません。",
-    "enabled": "有効",
-    "needsSave": "このチャンネルは、送信する前に再度開いて保存する必要があります。",
-    "name": "名前",
-    "nameRequired": "名前は必須です",
-    "type": "タイプ",
-    "types": {
-      "webhook": "Webhook",
-      "ntfy": "ntfy",
-      "discord": "Discord",
-      "email": "メールアドレス"
-    },
-    "emailUnavailable": "メール送信にはSMTPサーバーが必要で、管理者がアラート設定で設定します。",
-    "webhookUrl": "URL",
-    "webhookHint": "アラートごとにJSON形式の本文を取得します。",
-    "method": "方法",
-    "headers": "ヘッダー",
-    "headersHint": "1行に1つずつ、例：名前：値。",
-    "ntfyServer": "サーバーURL",
-    "ntfyTopic": "トピック",
-    "ntfyToken": "アクセストークン（任意）",
-    "discordUrl": "DiscordウェブフックURL",
-    "discordHint": "Discordのチャンネル設定の「統合」セクションから設定できます。",
-    "discordUsername": "表示名（任意）",
-    "discordAvatar": "アバターのURL（任意）",
-    "emailTo": "送信先",
-    "emailHint": "複数の住所を入力する場合は、カンマで区切ってください。",
-    "privateNetwork": "プライベートネットワークアドレスを許可する",
-    "privateNetworkHint": "管理者がプライベートエンドポイントリストで許可したホストでのみ機能します。"
-  },
-  "rules": {
-    "intro": "配信ルールを設定すると、該当するアラートが指定したチャネルに送信されます。アラートは常に受信トレイにも残ります。",
-    "add": "ルールを追加する",
-    "edit": "ルールを編集する",
-    "empty": "まだルールが設定されていないため、アラートは受信トレイにのみ表示されます。",
-    "needChannel": "まずチャンネルを追加してください。",
-    "enabled": "有効",
-    "name": "名前",
-    "nameRequired": "名前は必須です",
-    "match": "送信するアラート",
-    "matchHint": "* すべてに対して、自動化。* 自動化からのすべて、または特定の種類のもの。",
-    "minSeverity": "少なくとも",
-    "channels": "送信先",
-    "channelRequired": "少なくとも1つのチャンネルを選択してください",
-    "deleteConfirm": "ルール「{{name}}」を削除しますか？",
-    "everything": "すべて",
-    "summary": "{{match}}、 {{severity}} 以上、 {{channels}}まで"
-  },
-  "actions": {
-    "cancel": "キャンセル",
-    "save": "保存",
-    "saving": "保存中...",
-    "delete": "削除"
-  },
-  "widget": {
-    "name": "アラートフィード",
-    "description": "最新のアラートを既読にする簡単な方法",
-    "maxItems": "最大アイテム数",
-    "showRead": "既読通知を表示する",
-    "allClear": "すべて正常",
-    "loading": "読み込み中..."
-  },
-  "plugin": {
-    "name": "アラート"
-  }
-}
diff --git a/plugins/alerts/locales/translated/ko_KR.json b/plugins/alerts/locales/translated/ko_KR.json
deleted file mode 100644
index b0d537194..000000000
--- a/plugins/alerts/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "알림"
-  },
-  "permissions": {
-    "use": {
-      "title": "알림 기능을 사용하세요",
-      "description": "받은 편지함으로 알림을 받고, 원하는 채널로도 알림을 보낼 수 있습니다."
-    }
-  },
-  "onboarding": {
-    "feature": "알림",
-    "featureDesc": "모든 알림은 하나의 받은 편지함에 모이며, 원하시면 Discord, ntfy, 이메일 또는 웹훅으로 전송됩니다."
-  },
-  "settings": {
-    "group": {
-      "general": "일반",
-      "email": "이메일"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Termix 공지사항",
-        "description": "보안 공지 및 릴리스와 같은 Termix 팀의 소식을 모든 사람의 받은 편지함에 표시합니다."
-      },
-      "retentionDays": {
-        "label": "(일) 동안 알림을 유지하세요",
-        "description": "오래된 알림은 모든 받은 편지함에서 삭제됩니다."
-      },
-      "smtpHost": {
-        "label": "SMTP 서버",
-        "description": "이메일 채널에 필요합니다. 이메일 기능을 끄려면 비워 두세요.",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "SMTP 포트",
-        "description": "일반적으로 STARTTLS를 사용하는 경우 587, TLS를 사용하는 경우 465입니다."
-      },
-      "smtpSecure": {
-        "label": "처음부터 TLS를 사용하세요",
-        "description": "포트 465에 대해서는 활성화하십시오. 포트 587은 자동으로 TLS로 업그레이드되므로 비활성화 상태로 두십시오."
-      },
-      "smtpUser": {
-        "label": "SMTP 사용자 이름",
-        "description": "서버에 로그인이 필요하지 않은 경우 비워 두십시오."
-      },
-      "smtpPassword": {
-        "label": "SMTP 비밀번호",
-        "description": "암호화되어 저장됩니다."
-      },
-      "smtpFrom": {
-        "label": "발신 주소",
-        "description": "발신자 알림은 다음에서 옵니다.",
-        "placeholder": "터믹스 <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "알림 팝업",
-        "description": "Termix를 사용하는 동안 어떤 새로운 알림이 뜨는지 확인하세요. 모든 알림은 받은 편지함에 표시됩니다.",
-        "all": "모든 알림",
-        "warning": "경고 및 중요 사항",
-        "critical": "중요 정보만",
-        "off": "전체 해제"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "받은편지함",
-    "channels": "채널",
-    "rules": "배송 규칙"
-  },
-  "severity": {
-    "info": "정보",
-    "success": "성공",
-    "warning": "경고",
-    "critical": "비판적인"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "열기",
-    "view": "보기",
-    "unread": "읽히지 않는",
-    "deliveryFailed_one": "{{count}} 채널 실패",
-    "deliveryFailed_other": "{{count}} 채널이 실패했습니다",
-    "markRead": "읽음으로 표시",
-    "markUnread": "읽지 않음으로 표시",
-    "markAllRead": "모두 읽음으로 표시",
-    "delete": "삭제",
-    "clearRead": "읽음 알림 삭제",
-    "cleared_one": "삭제됨 {{count}} 알림",
-    "cleared_other": "삭제된 {{count}} 알림",
-    "filterAll": "모두",
-    "filterUnread": "읽히지 않는",
-    "anySeverity": "심각도와 관계없이",
-    "anySource": "어떤 출처든",
-    "openAll": "탭에서 열기",
-    "empty": "아직 알림이 없습니다.",
-    "emptyUnread": "이제 모든 내용을 따라잡으셨군요.",
-    "loadMore": "더 보기"
-  },
-  "channels": {
-    "intro": "채널은 알림이 Termix 외부로 전달될 수 있는 경로입니다. 전달 규칙은 어떤 알림이 이러한 채널을 사용할지 결정합니다.",
-    "add": "채널 추가",
-    "edit": "채널 편집",
-    "test": "테스트를 보내세요",
-    "testSent": "테스트 알림이 전송되었습니다.",
-    "testFailed": "테스트 실패: {{error}}",
-    "deleteConfirm": "채널 \"{{name}} \"을 삭제하시겠습니까?",
-    "deleted": "채널이 삭제되었습니다",
-    "empty": "아직 채널이 없습니다.",
-    "enabled": "사용",
-    "needsSave": "이 채널은 전송하기 전에 다시 열고 저장해야 합니다.",
-    "name": "이름",
-    "nameRequired": "이름은 필수입니다",
-    "type": "유형",
-    "types": {
-      "webhook": "웹훅",
-      "ntfy": "ntfy",
-      "discord": "Discord",
-      "email": "이메일"
-    },
-    "emailUnavailable": "이메일을 보내려면 SMTP 서버가 필요하며, 관리자는 알림 설정에서 이를 설정합니다.",
-    "webhookUrl": "URL",
-    "webhookHint": "모든 알림에 대한 JSON 본문을 가져옵니다.",
-    "method": "방법",
-    "headers": "헤더",
-    "headersHint": "이름: 값 형식으로 한 줄에 하나씩 입력합니다.",
-    "ntfyServer": "서버 URL",
-    "ntfyTopic": "토픽",
-    "ntfyToken": "액세스 토큰(선택 사항)",
-    "discordUrl": "디스코드 웹훅 URL",
-    "discordHint": "디스코드 채널 설정의 '통합' 메뉴에서 확인할 수 있습니다.",
-    "discordUsername": "표시 이름 (선택 사항)",
-    "discordAvatar": "아바타 URL (선택 사항)",
-    "emailTo": "보내기",
-    "emailHint": "여러 주소를 입력할 경우 쉼표로 구분하세요.",
-    "privateNetwork": "사설 네트워크 주소를 허용합니다",
-    "privateNetworkHint": "관리자가 개인 엔드포인트 목록에 허용한 호스트에서만 작동합니다."
-  },
-  "rules": {
-    "intro": "전송 규칙은 일치하는 알림을 채널로 보냅니다. 알림은 항상 받은 편지함에 보관됩니다.",
-    "add": "규칙 추가",
-    "edit": "규칙 편집",
-    "empty": "아직 규칙이 설정되지 않아 알림은 받은 편지함에만 표시됩니다.",
-    "needChannel": "먼저 채널을 추가하세요.",
-    "enabled": "사용",
-    "name": "이름",
-    "nameRequired": "이름은 필수입니다",
-    "match": "보낼 알림",
-    "matchHint": "*모든 것을 위한 자동화.* 자동화를 통한 모든 것, 또는 정확히 한 가지 유형.",
-    "minSeverity": "적어도",
-    "channels": "보내기",
-    "channelRequired": "채널 하나 이상을 선택하세요",
-    "deleteConfirm": "규칙 \"{{name}} \"을 삭제하시겠습니까?",
-    "everything": "모든 것",
-    "summary": "{{match}}, {{severity}} 이상, {{channels}}까지"
-  },
-  "actions": {
-    "cancel": "취소",
-    "save": "저장",
-    "saving": "저장 중...",
-    "delete": "삭제"
-  },
-  "widget": {
-    "name": "알림 피드",
-    "description": "최신 알림과 읽음 표시 기능을 간편하게 이용하세요.",
-    "maxItems": "최대 항목",
-    "showRead": "읽음 알림 표시",
-    "allClear": "모두 정상",
-    "loading": "로딩 중..."
-  },
-  "plugin": {
-    "name": "알림"
-  }
-}
diff --git a/plugins/alerts/locales/translated/nl_NL.json b/plugins/alerts/locales/translated/nl_NL.json
deleted file mode 100644
index 6dbb75d25..000000000
--- a/plugins/alerts/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Waarschuwingen"
-  },
-  "permissions": {
-    "use": {
-      "title": "Gebruik waarschuwingen",
-      "description": "Ontvang meldingen in je inbox en deel ze via je eigen kanalen."
-    }
-  },
-  "onboarding": {
-    "feature": "Waarschuwingen",
-    "featureDesc": "Alle meldingen in één inbox, die je desgewenst kunt doorsturen naar Discord, ntfy, e-mail of een webhook."
-  },
-  "settings": {
-    "group": {
-      "general": "Algemeen",
-      "email": "E-mail"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Termix-aankondigingen",
-        "description": "Toon nieuws van het Termix-team, zoals beveiligingsmeldingen en releases, in ieders inbox."
-      },
-      "retentionDays": {
-        "label": "Houd meldingen aan voor (dagen)",
-        "description": "Oudere meldingen worden uit alle inboxen verwijderd."
-      },
-      "smtpHost": {
-        "label": "SMTP-server",
-        "description": "Nodig voor e-mailkanalen. Laat dit veld leeg om e-mail uit te schakelen.",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "SMTP-poort",
-        "description": "Meestal poort 587 met STARTTLS of 465 met TLS."
-      },
-      "smtpSecure": {
-        "label": "Gebruik TLS vanaf het begin.",
-        "description": "Schakel poort 465 in. Laat deze uitgeschakeld voor poort 587, die automatisch overschakelt naar TLS."
-      },
-      "smtpUser": {
-        "label": "SMTP-gebruikersnaam",
-        "description": "Laat dit veld leeg als er geen inloggegevens nodig zijn voor de server."
-      },
-      "smtpPassword": {
-        "label": "SMTP-wachtwoord",
-        "description": "Versleuteld opgeslagen."
-      },
-      "smtpFrom": {
-        "label": "Van adres",
-        "description": "De afzenderwaarschuwingen zijn afkomstig van.",
-        "placeholder": "Termix <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "Waarschuwingspop-ups",
-        "description": "Welke nieuwe meldingen verschijnen er tijdens het gebruik van Termix? Ze komen altijd in je inbox terecht.",
-        "all": "Alle meldingen",
-        "warning": "Waarschuwingen en kritieke",
-        "critical": "Alleen kritisch",
-        "off": "Geen"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Inbox",
-    "channels": "Kanalen",
-    "rules": "Leveringsregels"
-  },
-  "severity": {
-    "info": "Informatie",
-    "success": "Succes",
-    "warning": "Waarschuwing",
-    "critical": "Kritisch"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "Open",
-    "view": "Weergave",
-    "unread": "Ongelezen",
-    "deliveryFailed_one": "{{count}} kanaal mislukt",
-    "deliveryFailed_other": "{{count}} kanalen mislukt",
-    "markRead": "Markeer als gelezen",
-    "markUnread": "Markeer als ongelezen",
-    "markAllRead": "Markeer alles als gelezen",
-    "delete": "Verwijderen",
-    "clearRead": "Leeswaarschuwingen verwijderen",
-    "cleared_one": "Verwijderde {{count}} melding",
-    "cleared_other": "Verwijderde {{count}} -waarschuwingen",
-    "filterAll": "Alle",
-    "filterUnread": "Ongelezen",
-    "anySeverity": "Elke ernst",
-    "anySource": "Elke bron",
-    "openAll": "Openen in een tabblad",
-    "empty": "Nog geen meldingen.",
-    "emptyUnread": "Je bent helemaal bij.",
-    "loadMore": "Meer laden"
-  },
-  "channels": {
-    "intro": "Kanalen zijn de plekken waar meldingen buiten Termix naartoe kunnen worden gestuurd. Leveringsregels bepalen welke meldingen via deze kanalen worden verzonden.",
-    "add": "Voeg kanaal toe",
-    "edit": "Bewerk het kanaal",
-    "test": "Stuur een test",
-    "testSent": "Testwaarschuwing verzonden",
-    "testFailed": "Test mislukt: {{error}}",
-    "deleteConfirm": "Verwijder het kanaal \"{{name}}\"?",
-    "deleted": "Kanaal verwijderd",
-    "empty": "Nog geen kanalen.",
-    "enabled": "Ingeschakeld",
-    "needsSave": "Dit kanaal moet opnieuw worden geopend en opgeslagen voordat er berichten kunnen worden verzonden.",
-    "name": "Naam",
-    "nameRequired": "Naam is verplicht",
-    "type": "Type",
-    "types": {
-      "webhook": "Webhook",
-      "ntfy": "ntfy",
-      "discord": "Meningsverschil",
-      "email": "E-mail"
-    },
-    "emailUnavailable": "Voor e-mail is een SMTP-server nodig, die een beheerder instelt in de waarschuwingsinstellingen.",
-    "webhookUrl": "URL",
-    "webhookHint": "Ontvangt een JSON-body voor elke melding.",
-    "method": "Methode",
-    "headers": "Kopteksten",
-    "headersHint": "Eén per regel, bijvoorbeeld: Naam: waarde.",
-    "ntfyServer": "Server-URL",
-    "ntfyTopic": "Onderwerp",
-    "ntfyToken": "Toegangstoken (optioneel)",
-    "discordUrl": "Discord webhook-URL",
-    "discordHint": "Via de kanaalinstellingen in Discord, onder Integraties.",
-    "discordUsername": "Weergavenaam (optioneel)",
-    "discordAvatar": "Avatar-URL (optioneel)",
-    "emailTo": "Verzenden naar",
-    "emailHint": "Scheid meerdere adressen met komma's.",
-    "privateNetwork": "Sta een privé-netwerkadres toe",
-    "privateNetworkHint": "Werkt alleen voor hosts die een beheerder toestaat in de lijst met privé-eindpunten."
-  },
-  "rules": {
-    "intro": "Een verzendregel stuurt overeenkomende meldingen naar uw kanalen. De meldingen blijven ook altijd in uw inbox staan.",
-    "add": "Regel toevoegen",
-    "edit": "Regel bewerken",
-    "empty": "Er zijn nog geen regels, dus meldingen verschijnen alleen in de inbox.",
-    "needChannel": "Voeg eerst een kanaal toe.",
-    "enabled": "Ingeschakeld",
-    "name": "Naam",
-    "nameRequired": "Naam is verplicht",
-    "match": "Waarschuwingen om te verzenden",
-    "matchHint": "* voor alles, automatiseringen.* voor alles wat met automatiseringen te maken heeft, of één specifiek type.",
-    "minSeverity": "Ten minste",
-    "channels": "Verzenden naar",
-    "channelRequired": "Kies minstens één kanaal",
-    "deleteConfirm": "Verwijder de regel \"{{name}}\"?",
-    "everything": "Alles",
-    "summary": "{{match}}, {{severity}} of hoger, tot {{channels}}"
-  },
-  "actions": {
-    "cancel": "Annuleren",
-    "save": "Redden",
-    "saving": "Besparing...",
-    "delete": "Verwijderen"
-  },
-  "widget": {
-    "name": "Waarschuwingsfeed",
-    "description": "Je meest recente meldingen, met een snelle manier om ze als gelezen te markeren.",
-    "maxItems": "Max items",
-    "showRead": "Leeswaarschuwingen weergeven",
-    "allClear": "Alles in orde",
-    "loading": "Laden..."
-  },
-  "plugin": {
-    "name": "Waarschuwingen"
-  }
-}
diff --git a/plugins/alerts/locales/translated/no_NO.json b/plugins/alerts/locales/translated/no_NO.json
deleted file mode 100644
index ce69f6d0c..000000000
--- a/plugins/alerts/locales/translated/no_NO.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Varsler"
-  },
-  "permissions": {
-    "use": {
-      "title": "Bruk varsler",
-      "description": "Få varsler i innboksen og send dem til dine egne kanaler."
-    }
-  },
-  "onboarding": {
-    "feature": "Varsler",
-    "featureDesc": "Alle varsler i én innboks, sendt videre til Discord, ntfy, e-post eller en webhook om du vil."
-  },
-  "settings": {
-    "group": {
-      "general": "Generelt",
-      "email": "E-post"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Termix-kunngjøringer",
-        "description": "Vis nyheter fra Termix-teamet, som sikkerhetsvarsler og utgivelser, i alles innboks."
-      },
-      "retentionDays": {
-        "label": "Behold varsler i (dager)",
-        "description": "Eldre varsler fjernes fra alle innbokser."
-      },
-      "smtpHost": {
-        "label": "SMTP-server",
-        "description": "Nødvendig for e-postkanaler. La stå tomt for å slå av e-post.",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "SMTP-port",
-        "description": "Vanligvis 587 med STARTTLS eller 465 med TLS."
-      },
-      "smtpSecure": {
-        "label": "Bruk TLS fra starten av",
-        "description": "Slå på port 465. Slå av for port 587, som oppgraderer til TLS på egenhånd."
-      },
-      "smtpUser": {
-        "label": "SMTP-brukernavn",
-        "description": "La feltet stå tomt hvis serveren ikke trenger pålogging."
-      },
-      "smtpPassword": {
-        "label": "SMTP-passord",
-        "description": "Lagret kryptert."
-      },
-      "smtpFrom": {
-        "label": "Fra adresse",
-        "description": "Avsendervarslene kommer fra.",
-        "placeholder": "Termix <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "Varselspopup-vinduer",
-        "description": "Hvilke nye varsler dukker opp mens du bruker Termix? De havner alltid i innboksen.",
-        "all": "Alle varsler",
-        "warning": "Advarsler og kritiske",
-        "critical": "Kun kritisk",
-        "off": "Ingen"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Innboks",
-    "channels": "Kanaler",
-    "rules": "Leveringsregler"
-  },
-  "severity": {
-    "info": "Info",
-    "success": "Suksess",
-    "warning": "Advarsel",
-    "critical": "Kritisk"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "Åpne",
-    "view": "Utsikt",
-    "unread": "Ulest",
-    "deliveryFailed_one": "{{count}} kanal mislyktes",
-    "deliveryFailed_other": "{{count}} kanaler mislyktes",
-    "markRead": "Merk som lest",
-    "markUnread": "Merk som ulest",
-    "markAllRead": "Merk alle som lest",
-    "delete": "Slett",
-    "clearRead": "Slett lesevarsler",
-    "cleared_one": "Slettet {{count}} -varsel",
-    "cleared_other": "Slettede {{count}} varsler",
-    "filterAll": "Alle",
-    "filterUnread": "Ulest",
-    "anySeverity": "Enhver alvorlighetsgrad",
-    "anySource": "Enhver kilde",
-    "openAll": "Åpne i en fane",
-    "empty": "Ingen varsler ennå.",
-    "emptyUnread": "Dere er helt oppdatert.",
-    "loadMore": "Last inn mer"
-  },
-  "channels": {
-    "intro": "Kanaler er der varsler kan sendes utenfor Termix. Leveringsregler velger hvilke varsler som bruker dem.",
-    "add": "Legg til kanal",
-    "edit": "Rediger kanal",
-    "test": "Send en test",
-    "testSent": "Testvarsel sendt",
-    "testFailed": "Testen mislyktes: {{error}}",
-    "deleteConfirm": "Slette kanalen «{{name}}»?",
-    "deleted": "Kanalen slettet",
-    "empty": "Ingen kanaler ennå.",
-    "enabled": "Aktivert",
-    "needsSave": "Denne kanalen må åpnes og lagres på nytt før den kan sende.",
-    "name": "Navn",
-    "nameRequired": "Navn er påkrevd",
-    "type": "Type",
-    "types": {
-      "webhook": "Webhook",
-      "ntfy": "ntfy",
-      "discord": "Disharmoni",
-      "email": "E-post"
-    },
-    "emailUnavailable": "E-post trenger en SMTP-server, som en administrator konfigurerer i varslingsinnstillingene.",
-    "webhookUrl": "URL-adresse",
-    "webhookHint": "Henter en JSON-tekst for hvert varsel.",
-    "method": "Metode",
-    "headers": "Overskrifter",
-    "headersHint": "Én per linje, som Navn: verdi.",
-    "ntfyServer": "Server-URL",
-    "ntfyTopic": "Emne",
-    "ntfyToken": "Tilgangstoken (valgfritt)",
-    "discordUrl": "Discord webhook-URL",
-    "discordHint": "Fra kanalens innstillinger i Discord, under Integrasjoner.",
-    "discordUsername": "Visningsnavn (valgfritt)",
-    "discordAvatar": "Avatar-URL (valgfritt)",
-    "emailTo": "Send til",
-    "emailHint": "Skill mer enn én adresse med komma.",
-    "privateNetwork": "Tillat en privat nettverksadresse",
-    "privateNetworkHint": "Fungerer bare for verter som en administrator tillater i listen over private endepunkter."
-  },
-  "rules": {
-    "intro": "En leveringsregel sender samsvarende varsler til kanalene dine. Varsler forblir også alltid i innboksen.",
-    "add": "Legg til regel",
-    "edit": "Rediger regel",
-    "empty": "Ingen regler ennå, så varsler vises bare i innboksen.",
-    "needChannel": "Legg til en kanal først.",
-    "enabled": "Aktivert",
-    "name": "Navn",
-    "nameRequired": "Navn er påkrevd",
-    "match": "Varsler som skal sendes",
-    "matchHint": "* for alt, automatiseringer.* for alt fra automatiseringer, eller én eksakt type.",
-    "minSeverity": "Minst",
-    "channels": "Send til",
-    "channelRequired": "Velg minst én kanal",
-    "deleteConfirm": "Slette regelen «{{name}}»?",
-    "everything": "Alt",
-    "summary": "{{match}}, {{severity}} eller høyere, til {{channels}}"
-  },
-  "actions": {
-    "cancel": "Avbryt",
-    "save": "Lagre",
-    "saving": "Lagrer...",
-    "delete": "Slett"
-  },
-  "widget": {
-    "name": "Varselstrøm",
-    "description": "Dine siste varsler, med en rask måte å merke dem som lest",
-    "maxItems": "Maks antall varer",
-    "showRead": "Vis lesevarsler",
-    "allClear": "Alt klart",
-    "loading": "Laster..."
-  },
-  "plugin": {
-    "name": "Varsler"
-  }
-}
diff --git a/plugins/alerts/locales/translated/pl_PL.json b/plugins/alerts/locales/translated/pl_PL.json
deleted file mode 100644
index 939dcf0d7..000000000
--- a/plugins/alerts/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Alerty"
-  },
-  "permissions": {
-    "use": {
-      "title": "Użyj alertów",
-      "description": "Otrzymuj powiadomienia do skrzynki odbiorczej i wysyłaj je na swoje kanały."
-    }
-  },
-  "onboarding": {
-    "feature": "Alerty",
-    "featureDesc": "Każdy alert w jednej skrzynce odbiorczej, wysyłany na Discord, ntfy, e-mail lub webhook, jeśli sobie tego życzysz."
-  },
-  "settings": {
-    "group": {
-      "general": "Ogólne",
-      "email": "E-mail"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Ogłoszenia Termix",
-        "description": "Wyświetlaj aktualności zespołu Termix, takie jak powiadomienia i komunikaty dotyczące bezpieczeństwa, w skrzynkach odbiorczych wszystkich użytkowników."
-      },
-      "retentionDays": {
-        "label": "Zachowaj alerty przez (dni)",
-        "description": "Starsze alerty zostaną usunięte ze wszystkich skrzynek odbiorczych."
-      },
-      "smtpHost": {
-        "label": "Serwer SMTP",
-        "description": "Potrzebne dla kanałów e-mail. Pozostaw puste, aby wyłączyć pocztę e-mail.",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "Port SMTP",
-        "description": "Zwykle 587 z STARTTLS lub 465 z TLS."
-      },
-      "smtpSecure": {
-        "label": "Używaj protokołu TLS od samego początku",
-        "description": "Włącz dla portu 465. Pozostaw wyłączone dla portu 587, który automatycznie uaktualnia się do protokołu TLS."
-      },
-      "smtpUser": {
-        "label": "Nazwa użytkownika SMTP",
-        "description": "Pozostaw puste, jeśli serwer nie wymaga logowania."
-      },
-      "smtpPassword": {
-        "label": "Hasło SMTP",
-        "description": "Przechowywane w postaci zaszyfrowanej."
-      },
-      "smtpFrom": {
-        "label": "Z adresu",
-        "description": "Od nadawcy pochodzą alerty.",
-        "placeholder": "Termix <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "Okienka z alertami",
-        "description": "Jakie nowe alerty pojawiają się podczas korzystania z Termix. Zawsze trafiają do skrzynki odbiorczej.",
-        "all": "Wszystkie alerty",
-        "warning": "Ostrzeżenia i ostrzeżenia krytyczne",
-        "critical": "Tylko krytyczne",
-        "off": "Żaden"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Skrzynka odbiorcza",
-    "channels": "Kanały",
-    "rules": "Zasady dostawy"
-  },
-  "severity": {
-    "info": "Informacje",
-    "success": "Powodzenie",
-    "warning": "Ostrzeżenie",
-    "critical": "Krytyczny"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "Otwórz",
-    "view": "Podgląd",
-    "unread": "Niewykształcony",
-    "deliveryFailed_one": "{{count}} kanał uszkodzony",
-    "deliveryFailed_other": "{{count}} kanałów nie powiodło się",
-    "markRead": "Oznacz jako przeczytane",
-    "markUnread": "Oznacz jako nieprzeczytane",
-    "markAllRead": "Oznacz wszystkie jako przeczytane",
-    "delete": "Usuń",
-    "clearRead": "Usuń alerty odczytu",
-    "cleared_one": "Usunięto alert {{count}}",
-    "cleared_other": "Usunięto {{count}} alertów",
-    "filterAll": "Wszystkie",
-    "filterUnread": "Niewykształcony",
-    "anySeverity": "Jakakolwiek powaga",
-    "anySource": "Jakiekolwiek źródło",
-    "openAll": "Otwórz w karcie",
-    "empty": "Brak alertów.",
-    "emptyUnread": "Wszyscy jesteście na bieżąco.",
-    "loadMore": "Załaduj więcej"
-  },
-  "channels": {
-    "intro": "Kanały to miejsca, do których alerty mogą trafiać poza Termix. Reguły dostarczania określają, które alerty z nich korzystają.",
-    "add": "Dodaj kanał",
-    "edit": "Edytuj kanał",
-    "test": "Wyślij test",
-    "testSent": "Wysłano alert testowy",
-    "testFailed": "Test nie powiódł się: {{error}}",
-    "deleteConfirm": "Usunąć kanał „{{name}}”?",
-    "deleted": "Kanał usunięty",
-    "empty": "Brak kanałów.",
-    "enabled": "Włączona",
-    "needsSave": "Przed wysłaniem należy ponownie otworzyć i zapisać ten kanał.",
-    "name": "Nazwa",
-    "nameRequired": "Nazwa jest wymagana",
-    "type": "Typ",
-    "types": {
-      "webhook": "Webhook",
-      "ntfy": "ntfy",
-      "discord": "Discord",
-      "email": "E-mail"
-    },
-    "emailUnavailable": "Do obsługi poczty e-mail potrzebny jest serwer SMTP, który administrator konfiguruje w ustawieniach alertów.",
-    "webhookUrl": "Adres URL",
-    "webhookHint": "Pobiera treść JSON dla każdego alertu.",
-    "method": "Metoda",
-    "headers": "Nagłówki",
-    "headersHint": "Po jednym w każdym wierszu, np. Nazwa: wartość.",
-    "ntfyServer": "Adres URL serwera",
-    "ntfyTopic": "Temat",
-    "ntfyToken": "Token dostępu (opcjonalnie)",
-    "discordUrl": "Adres URL webhooka Discord",
-    "discordHint": "W ustawieniach kanału w Discordzie, w sekcji Integracje.",
-    "discordUsername": "Nazwa wyświetlana (opcjonalnie)",
-    "discordAvatar": "Adres URL awatara (opcjonalnie)",
-    "emailTo": "Wyślij do",
-    "emailHint": "Oddziel więcej niż jeden adres przecinkami.",
-    "privateNetwork": "Zezwól na prywatny adres sieciowy",
-    "privateNetworkHint": "Działa tylko w przypadku hostów dozwolonych przez administratora na liście prywatnych punktów końcowych."
-  },
-  "rules": {
-    "intro": "Reguła dostarczania wysyła pasujące alerty do Twoich kanałów. Alerty zawsze pozostają w skrzynce odbiorczej.",
-    "add": "Dodaj regułę",
-    "edit": "Edytuj regułę",
-    "empty": "Nie ma jeszcze żadnych reguł, więc powiadomienia pojawiają się tylko w skrzynce odbiorczej.",
-    "needChannel": "Najpierw dodaj kanał.",
-    "enabled": "Włączona",
-    "name": "Nazwa",
-    "nameRequired": "Nazwa jest wymagana",
-    "match": "Alerty do wysłania",
-    "matchHint": "* do wszystkiego, automatyzacje.* do wszystkiego, od automatyzacji, lub jednego konkretnego rodzaju.",
-    "minSeverity": "Co najmniej",
-    "channels": "Wyślij do",
-    "channelRequired": "Wybierz co najmniej jeden kanał",
-    "deleteConfirm": "Usunąć regułę „{{name}}”?",
-    "everything": "Wszystko",
-    "summary": "{{match}}, {{severity}} lub wyższy, do {{channels}}"
-  },
-  "actions": {
-    "cancel": "Anuluj",
-    "save": "Zapisz",
-    "saving": "Zapisywanie...",
-    "delete": "Usuń"
-  },
-  "widget": {
-    "name": "Kanał alertów",
-    "description": "Twoje najnowsze alerty z możliwością szybkiego oznaczenia ich jako przeczytanych",
-    "maxItems": "Maksymalna liczba elementów",
-    "showRead": "Pokaż alerty odczytu",
-    "allClear": "Bez alertów",
-    "loading": "Ładowanie..."
-  },
-  "plugin": {
-    "name": "Alerty"
-  }
-}
diff --git a/plugins/alerts/locales/translated/pt_BR.json b/plugins/alerts/locales/translated/pt_BR.json
deleted file mode 100644
index ae36b8562..000000000
--- a/plugins/alerts/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Alertas"
-  },
-  "permissions": {
-    "use": {
-      "title": "Usar alertas",
-      "description": "Receba alertas na caixa de entrada e envie-os para seus próprios canais."
-    }
-  },
-  "onboarding": {
-    "feature": "Alertas",
-    "featureDesc": "Todas as notificações em uma única caixa de entrada, enviadas para o Discord, NTfy, e-mail ou webhook, se desejar."
-  },
-  "settings": {
-    "group": {
-      "general": "Geral",
-      "email": "E-mail"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Anúncios da Termix",
-        "description": "Exibir notícias da equipe Termix, como avisos de segurança e comunicados, na caixa de entrada de todos."
-      },
-      "retentionDays": {
-        "label": "Manter alertas por (dias)",
-        "description": "Alertas antigos são removidos de todas as caixas de entrada."
-      },
-      "smtpHost": {
-        "label": "Servidor SMTP",
-        "description": "Necessário para canais de e-mail. Deixe em branco para desativar o e-mail.",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "porta SMTP",
-        "description": "Normalmente, usa-se a porta 587 com STARTTLS ou a porta 465 com TLS."
-      },
-      "smtpSecure": {
-        "label": "Use TLS desde o início.",
-        "description": "Ative para a porta 465. Deixe desativado para a porta 587, que atualiza para TLS automaticamente."
-      },
-      "smtpUser": {
-        "label": "nome de usuário SMTP",
-        "description": "Deixe em branco se o servidor não exigir login."
-      },
-      "smtpPassword": {
-        "label": "Senha SMTP",
-        "description": "Armazenado criptografado."
-      },
-      "smtpFrom": {
-        "label": "Do endereço",
-        "description": "Os alertas do remetente vêm de:",
-        "placeholder": "Termix <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "Janelas de alerta",
-        "description": "Quais novos alertas aparecem enquanto você usa o Termix? Eles sempre chegam na caixa de entrada.",
-        "all": "Todos os alertas",
-        "warning": "Avisos e alertas",
-        "critical": "Somente crítico",
-        "off": "Nenhum"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Caixa de entrada",
-    "channels": "Canais",
-    "rules": "Regras de entrega"
-  },
-  "severity": {
-    "info": "Informações",
-    "success": "Sucesso",
-    "warning": "Atenção",
-    "critical": "Crítico"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "Abrir",
-    "view": "Visualizar",
-    "unread": "Não lido",
-    "deliveryFailed_one": "{{count}} canal falhou",
-    "deliveryFailed_other": "{{count}} canais falharam",
-    "markRead": "Marcar como lido",
-    "markUnread": "Marcar como não lida",
-    "markAllRead": "Marcar tudo como lido",
-    "delete": "Apagar",
-    "clearRead": "Excluir alertas de leitura",
-    "cleared_one": "Alerta excluído {{count}}",
-    "cleared_other": "Alertas excluídos {{count}}",
-    "filterAll": "Todos",
-    "filterUnread": "Não lido",
-    "anySeverity": "Qualquer gravidade",
-    "anySource": "Qualquer fonte",
-    "openAll": "Abrir em uma aba",
-    "empty": "Ainda não há alertas.",
-    "emptyUnread": "Vocês estão todos a par da situação.",
-    "loadMore": "Carregar mais"
-  },
-  "channels": {
-    "intro": "Os canais são locais para onde os alertas podem ser enviados fora do Termix. As regras de entrega definem quais alertas os utilizarão.",
-    "add": "Adicionar canal",
-    "edit": "Editar canal",
-    "test": "Enviar um teste",
-    "testSent": "Alerta de teste enviado",
-    "testFailed": "Teste falhou: {{error}}",
-    "deleteConfirm": "Excluir o canal \"{{name}}\"?",
-    "deleted": "Canal excluído",
-    "empty": "Ainda não há canais.",
-    "enabled": "Habilitado",
-    "needsSave": "Este canal precisa ser aberto e salvo novamente antes de poder enviar mensagens.",
-    "name": "Nome",
-    "nameRequired": "O nome é obrigatório.",
-    "type": "Tipo",
-    "types": {
-      "webhook": "Webhook",
-      "ntfy": "ntfy",
-      "discord": "Discórdia",
-      "email": "E-mail"
-    },
-    "emailUnavailable": "O envio de e-mails requer um servidor SMTP, que um administrador configura nas configurações de Alertas.",
-    "webhookUrl": "URL",
-    "webhookHint": "Obtém um corpo JSON para cada alerta.",
-    "method": "Método",
-    "headers": "Cabeçalhos",
-    "headersHint": "Um por linha, como Nome: valor.",
-    "ntfyServer": "URL do Servidor",
-    "ntfyTopic": "Tópico",
-    "ntfyToken": "Token de acesso (opcional)",
-    "discordUrl": "URL do webhook do Discord",
-    "discordHint": "Nas configurações do canal no Discord, em Integrações.",
-    "discordUsername": "Nome de exibição (opcional)",
-    "discordAvatar": "URL do avatar (opcional)",
-    "emailTo": "Enviar para",
-    "emailHint": "Separe mais de um endereço com vírgulas.",
-    "privateNetwork": "Permitir um endereço de rede privada",
-    "privateNetworkHint": "Funciona apenas para hosts que um administrador permite na lista de endpoints privados."
-  },
-  "rules": {
-    "intro": "Uma regra de entrega envia alertas correspondentes aos seus canais. Os alertas também permanecem sempre na caixa de entrada.",
-    "add": "Adicionar regra",
-    "edit": "Editar regra",
-    "empty": "Ainda não existem regras, portanto os alertas só aparecem na caixa de entrada.",
-    "needChannel": "Primeiro, adicione um canal.",
-    "enabled": "Habilitado",
-    "name": "Nome",
-    "nameRequired": "O nome é obrigatório.",
-    "match": "Alertas a enviar",
-    "matchHint": "* para tudo, automações.* para tudo, desde automações, até um tipo específico.",
-    "minSeverity": "Pelo menos",
-    "channels": "Enviar para",
-    "channelRequired": "Escolha pelo menos um canal.",
-    "deleteConfirm": "Apagar a regra \"{{name}}\"?",
-    "everything": "Tudo",
-    "summary": "{{match}}, {{severity}} ou superior, para {{channels}}"
-  },
-  "actions": {
-    "cancel": "Cancelar",
-    "save": "Salvar",
-    "saving": "Salvando...",
-    "delete": "Apagar"
-  },
-  "widget": {
-    "name": "Feed de alertas",
-    "description": "Seus alertas mais recentes, com uma maneira rápida de marcá-los como lidos.",
-    "maxItems": "Itens máximos",
-    "showRead": "Mostrar alertas de leitura",
-    "allClear": "Tudo certo",
-    "loading": "Carregando..."
-  },
-  "plugin": {
-    "name": "Alertas"
-  }
-}
diff --git a/plugins/alerts/locales/translated/pt_PT.json b/plugins/alerts/locales/translated/pt_PT.json
deleted file mode 100644
index 7fe7c18af..000000000
--- a/plugins/alerts/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Alertas"
-  },
-  "permissions": {
-    "use": {
-      "title": "Usar alertas",
-      "description": "Receba alertas na caixa de entrada e envie-os para os seus próprios canais."
-    }
-  },
-  "onboarding": {
-    "feature": "Alertas",
-    "featureDesc": "Todas as notificações numa única caixa de entrada, enviadas para o Discord, NTfy, e-mail ou webhook, se desejar."
-  },
-  "settings": {
-    "group": {
-      "general": "Geral",
-      "email": "E-mail"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Anúncios da Termix",
-        "description": "Exibir notícias da equipa Termix, como avisos de segurança e comunicados, na caixa de entrada de todos."
-      },
-      "retentionDays": {
-        "label": "Manter alertas durante (dias)",
-        "description": "Os alertas antigos são removidos de todas as caixas de entrada."
-      },
-      "smtpHost": {
-        "label": "Servidor SMTP",
-        "description": "Necessário para canais de e-mail. Deixe em branco para desativar o e-mail.",
-        "placeholder": "smtp.exemplo.com"
-      },
-      "smtpPort": {
-        "label": "porta SMTP",
-        "description": "Normalmente, utiliza-se a porta 587 com STARTTLS ou a porta 465 com TLS."
-      },
-      "smtpSecure": {
-        "label": "Utilize TLS desde o início.",
-        "description": "Ative para a porta 465. Deixe desativado para a porta 587, que atualiza para TLS automaticamente."
-      },
-      "smtpUser": {
-        "label": "nome de utilizador SMTP",
-        "description": "Deixe em branco se o servidor não necessitar de login."
-      },
-      "smtpPassword": {
-        "label": "Palavra-passe SMTP",
-        "description": "Armazenado encriptado."
-      },
-      "smtpFrom": {
-        "label": "Do endereço",
-        "description": "Os alertas do remetente provêm de:",
-        "placeholder": "Termix <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "Janelas de alerta",
-        "description": "Que novos alertas aparecem enquanto utiliza o Termix? Chegam sempre na caixa de entrada.",
-        "all": "Todos os alertas",
-        "warning": "Avisos e alertas",
-        "critical": "Somente crítico",
-        "off": "Nenhuma"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Caixa de entrada",
-    "channels": "Canais",
-    "rules": "Regras de entrega"
-  },
-  "severity": {
-    "info": "Info",
-    "success": "Sucesso",
-    "warning": "Aviso",
-    "critical": "Crítico"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "Abrir",
-    "view": "Ver",
-    "unread": "Não lido",
-    "deliveryFailed_one": "{{count}} canal falhou",
-    "deliveryFailed_other": "{{count}} canais falharam",
-    "markRead": "Marcar como lido",
-    "markUnread": "Marcar como não lida",
-    "markAllRead": "Marcar tudo como lido",
-    "delete": "Eliminar",
-    "clearRead": "Apagar alertas de leitura",
-    "cleared_one": "Alerta eliminado {{count}}",
-    "cleared_other": "Alertas excluídos {{count}}",
-    "filterAll": "Todas",
-    "filterUnread": "Não lido",
-    "anySeverity": "Qualquer gravidade",
-    "anySource": "Qualquer fonte",
-    "openAll": "Abrir numa aba",
-    "empty": "Ainda não há alertas.",
-    "emptyUnread": "Estão todos a par da situação.",
-    "loadMore": "Carregar mais"
-  },
-  "channels": {
-    "intro": "Os canais são locais para onde os alertas podem ser enviados fora do Termix. As regras de entrega definem quais os alertas que os irão utilizar.",
-    "add": "Adicionar canal",
-    "edit": "Editar canal",
-    "test": "Enviar um teste",
-    "testSent": "Alerta de teste enviado",
-    "testFailed": "Teste falhou: {{error}}",
-    "deleteConfirm": "Apagar o canal \"{{name}}\"?",
-    "deleted": "Canal excluído",
-    "empty": "Ainda não há canais.",
-    "enabled": "Ativado",
-    "needsSave": "Este canal precisa de ser aberto e guardado novamente antes de poder enviar mensagens.",
-    "name": "Nome",
-    "nameRequired": "O nome é obrigatório",
-    "type": "Tipo",
-    "types": {
-      "webhook": "Webhook",
-      "ntfy": "ntfy",
-      "discord": "Discord",
-      "email": "E-mail"
-    },
-    "emailUnavailable": "O envio de e-mails requer um servidor SMTP, que um administrador configura nas definições de Alertas.",
-    "webhookUrl": "URL",
-    "webhookHint": "Obtém um corpo JSON para cada alerta.",
-    "method": "Método",
-    "headers": "Cabeçalhos",
-    "headersHint": "Um por linha, como por exemplo Nome: valor.",
-    "ntfyServer": "URL do servidor",
-    "ntfyTopic": "Tópico",
-    "ntfyToken": "Token de acesso (opcional)",
-    "discordUrl": "URL do webhook do Discord",
-    "discordHint": "Nas definições do canal no Discord, em Integrações.",
-    "discordUsername": "Nome de visualização (opcional)",
-    "discordAvatar": "URL do avatar (opcional)",
-    "emailTo": "Enviar para",
-    "emailHint": "Separe mais do que um endereço com vírgulas.",
-    "privateNetwork": "Permitir um endereço de rede privada",
-    "privateNetworkHint": "Funciona apenas para hosts que um administrador permite na lista de endpoints privados."
-  },
-  "rules": {
-    "intro": "Uma regra de entrega envia alertas correspondentes aos seus canais. Os alertas também permanecem sempre na caixa de entrada.",
-    "add": "Adicionar regra",
-    "edit": "Editar regra",
-    "empty": "Ainda não existem regras, pelo que os alertas apenas aparecem na caixa de entrada.",
-    "needChannel": "Primeiro, adicione um canal.",
-    "enabled": "Ativado",
-    "name": "Nome",
-    "nameRequired": "O nome é obrigatório",
-    "match": "Alertas a enviar",
-    "matchHint": "* para tudo, automações.* para tudo, desde automações, a um tipo específico.",
-    "minSeverity": "Pelo menos",
-    "channels": "Enviar para",
-    "channelRequired": "Escolha pelo menos um canal.",
-    "deleteConfirm": "Apagar a regra \"{{name}}\"?",
-    "everything": "Tudo",
-    "summary": "{{match}}, {{severity}} ou superior, para {{channels}}"
-  },
-  "actions": {
-    "cancel": "Cancelar",
-    "save": "Guardar",
-    "saving": "A guardar...",
-    "delete": "Eliminar"
-  },
-  "widget": {
-    "name": "Feed de alertas",
-    "description": "Os seus alertas mais recentes, com uma forma rápida de os marcar como lidos.",
-    "maxItems": "Itens máximos",
-    "showRead": "Mostrar alertas de leitura",
-    "allClear": "Tudo em ordem",
-    "loading": "A carregar..."
-  },
-  "plugin": {
-    "name": "Alertas"
-  }
-}
diff --git a/plugins/alerts/locales/translated/ro_RO.json b/plugins/alerts/locales/translated/ro_RO.json
deleted file mode 100644
index c0dbc1189..000000000
--- a/plugins/alerts/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Alerte"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilizați alertele",
-      "description": "Primește alerte în căsuța poștală și trimite-le către propriile canale."
-    }
-  },
-  "onboarding": {
-    "feature": "Alerte",
-    "featureDesc": "Fiecare alertă într-o singură căsuță poștală, trimisă pe Discord, ntfy, e-mail sau un webhook, dacă dorești."
-  },
-  "settings": {
-    "group": {
-      "general": "General",
-      "email": "E-mail"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Anunțuri Termix",
-        "description": "Afișează știri de la echipa Termix, cum ar fi notificări de securitate și lansări, în căsuța poștală a tuturor."
-      },
-      "retentionDays": {
-        "label": "Păstrați alertele timp de (zile)",
-        "description": "Alertele mai vechi sunt eliminate din fiecare inbox."
-      },
-      "smtpHost": {
-        "label": "Server SMTP",
-        "description": "Necesar pentru canalele de e-mail. Lăsați gol pentru a dezactiva e-mailul.",
-        "placeholder": "smtp.exemplu.com"
-      },
-      "smtpPort": {
-        "label": "Port SMTP",
-        "description": "De obicei 587 cu STARTTLS sau 465 cu TLS."
-      },
-      "smtpSecure": {
-        "label": "Folosește TLS de la început",
-        "description": "Activați portul 465. Lăsați dezactivat portul 587, care face upgrade la TLS de la sine."
-      },
-      "smtpUser": {
-        "label": "Nume de utilizator SMTP",
-        "description": "Lăsați câmpul gol dacă serverul nu necesită date de autentificare."
-      },
-      "smtpPassword": {
-        "label": "Parolă SMTP",
-        "description": "Stocat criptat."
-      },
-      "smtpFrom": {
-        "label": "Adresă de la",
-        "description": "Alertele expeditorului provin de la.",
-        "placeholder": "Termix <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "Ferestre pop-up de alertă",
-        "description": "Ce alerte noi apar în timp ce folosești Termix. Acestea ajung întotdeauna în inbox.",
-        "all": "Toate alertele",
-        "warning": "Avertismente și aspecte critice",
-        "critical": "Numai critice",
-        "off": "Nici unul"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Inbox",
-    "channels": "Canale",
-    "rules": "Reguli de livrare"
-  },
-  "severity": {
-    "info": "Informații",
-    "success": "Succes",
-    "warning": "Avertizare",
-    "critical": "Critic"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "Deschide",
-    "view": "Vedere",
-    "unread": "Necitit",
-    "deliveryFailed_one": "Canalul {{count}} a eșuat",
-    "deliveryFailed_other": "{{count}} canale au eșuat",
-    "markRead": "Marchează ca citit",
-    "markUnread": "Marchează ca necitit",
-    "markAllRead": "Marchează toate ca citite",
-    "delete": "Şterge",
-    "clearRead": "Ștergeți alertele de citire",
-    "cleared_one": "Alertă {{count}} ștearsă",
-    "cleared_other": "Alerte {{count}} șterse",
-    "filterAll": "Toate",
-    "filterUnread": "Necitit",
-    "anySeverity": "Orice severitate",
-    "anySource": "Orice sursă",
-    "openAll": "Deschide într-o filă",
-    "empty": "Încă nu există alerte.",
-    "emptyUnread": "Sunteți cu toții prinși la zi.",
-    "loadMore": "Încărcați mai multe"
-  },
-  "channels": {
-    "intro": "Canalele sunt locurile prin care alertele pot fi trimise în afara Termix. Regulile de livrare aleg alertele care le utilizează.",
-    "add": "Adăugați canal",
-    "edit": "Editați canalul",
-    "test": "Trimiteți un test",
-    "testSent": "Alertă de test trimisă",
-    "testFailed": "Testul a eșuat: {{error}}",
-    "deleteConfirm": "Ștergeți canalul „{{name}}”?",
-    "deleted": "Canalul a fost șters",
-    "empty": "Încă nu există canale.",
-    "enabled": "Activat",
-    "needsSave": "Acest canal trebuie deschis și salvat din nou înainte de a putea trimite.",
-    "name": "Nume",
-    "nameRequired": "Numele este obligatoriu",
-    "type": "Tip",
-    "types": {
-      "webhook": "Webhook",
-      "ntfy": "ntfy",
-      "discord": "Discordie",
-      "email": "E-mail"
-    },
-    "emailUnavailable": "E-mailul necesită un server SMTP, pe care un administrator îl configurează în setările Alerte.",
-    "webhookUrl": "URL-ul",
-    "webhookHint": "Obține un corp JSON pentru fiecare alertă.",
-    "method": "Metodă",
-    "headers": "Anteturi",
-    "headersHint": "Unul pe linie, cum ar fi Nume: valoare.",
-    "ntfyServer": "URL-ul serverului",
-    "ntfyTopic": "Subiect",
-    "ntfyToken": "Token de acces (opțional)",
-    "discordUrl": "Adresa URL a webhook-ului Discord",
-    "discordHint": "Din setările canalului din Discord, la Integrări.",
-    "discordUsername": "Nume afișat (opțional)",
-    "discordAvatar": "URL-ul avatarului (opțional)",
-    "emailTo": "Trimiteți către",
-    "emailHint": "Separați mai multe adrese prin virgule.",
-    "privateNetwork": "Permiteți o adresă de rețea privată",
-    "privateNetworkHint": "Funcționează doar pentru gazdele permise de un administrator în lista de puncte finale private."
-  },
-  "rules": {
-    "intro": "O regulă de livrare trimite alerte corespunzătoare către canalele dvs. Alertele rămân întotdeauna și în căsuța poștală.",
-    "add": "Adăugați o regulă",
-    "edit": "Editați regula",
-    "empty": "Încă nu există reguli, așa că alertele apar doar în inbox.",
-    "needChannel": "Adăugați mai întâi un canal.",
-    "enabled": "Activat",
-    "name": "Nume",
-    "nameRequired": "Numele este obligatoriu",
-    "match": "Alerte de trimis",
-    "matchHint": "* pentru orice, automatizări. * pentru orice, de la automatizări sau pentru un singur tip exact.",
-    "minSeverity": "Cel puţin",
-    "channels": "Trimiteți către",
-    "channelRequired": "Alege cel puțin un canal",
-    "deleteConfirm": "Ștergeți regula „{{name}}”?",
-    "everything": "Tot",
-    "summary": "{{match}}, {{severity}} sau mai mare, până la {{channels}}"
-  },
-  "actions": {
-    "cancel": "Anula",
-    "save": "Salva",
-    "saving": "Economisire...",
-    "delete": "Şterge"
-  },
-  "widget": {
-    "name": "Flux de alerte",
-    "description": "Cele mai recente alerte, cu o modalitate rapidă de a le marca ca fiind citite",
-    "maxItems": "Articole maxime",
-    "showRead": "Afișează alertele de citire",
-    "allClear": "Totul este clar",
-    "loading": "Încărcare..."
-  },
-  "plugin": {
-    "name": "Alerte"
-  }
-}
diff --git a/plugins/alerts/locales/translated/ru_RU.json b/plugins/alerts/locales/translated/ru_RU.json
deleted file mode 100644
index 5f2e6ea8f..000000000
--- a/plugins/alerts/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Оповещения"
-  },
-  "permissions": {
-    "use": {
-      "title": "Используйте оповещения",
-      "description": "Получайте уведомления на свою электронную почту и отправляйте их в свои каналы."
-    }
-  },
-  "onboarding": {
-    "feature": "Оповещения",
-    "featureDesc": "Все оповещения в одном почтовом ящике, которые можно отправить в Discord, ntfy, на электронную почту или через веб-хук, если хотите."
-  },
-  "settings": {
-    "group": {
-      "general": "Общие",
-      "email": "Email"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Объявления компании Termix",
-        "description": "Показывайте новости от команды Termix, такие как уведомления о безопасности и обновления, в почтовые ящики всех пользователей."
-      },
-      "retentionDays": {
-        "label": "Сохранять оповещения в течение (дней)",
-        "description": "Более старые уведомления удаляются из всех почтовых ящиков."
-      },
-      "smtpHost": {
-        "label": "SMTP-сервер",
-        "description": "Необходимо для каналов электронной почты. Оставьте поле пустым, чтобы отключить отправку писем.",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "SMTP-порт",
-        "description": "Обычно используется код 587 с STARTTLS или 465 с TLS."
-      },
-      "smtpSecure": {
-        "label": "Используйте TLS с самого начала.",
-        "description": "Включите порт 465. Оставьте выключенным порт 587, так как он автоматически переходит на TLS."
-      },
-      "smtpUser": {
-        "label": "Имя пользователя SMTP",
-        "description": "Оставьте поле пустым, если серверу не требуется авторизация."
-      },
-      "smtpPassword": {
-        "label": "SMTP-пароль",
-        "description": "Сохранено в зашифрованном виде."
-      },
-      "smtpFrom": {
-        "label": "От адреса",
-        "description": "Уведомления поступают от отправителя.",
-        "placeholder": "Termix <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "Всплывающие уведомления",
-        "description": "Какие новые уведомления появляются во время использования Termix? Они всегда попадают во входящие сообщения.",
-        "all": "Все оповещения",
-        "warning": "Предупреждения и критические",
-        "critical": "Только критически важные",
-        "off": "Ни одного"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Входящие",
-    "channels": "Каналы",
-    "rules": "Правила доставки"
-  },
-  "severity": {
-    "info": "Информация",
-    "success": "Успех",
-    "warning": "Предупреждение",
-    "critical": "Критический"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "Открыть",
-    "view": "Просмотр",
-    "unread": "Непрочитано",
-    "deliveryFailed_one": "{{count}} канал не работает",
-    "deliveryFailed_other": "{{count}} каналы не работают",
-    "markRead": "Отметить как прочитанное",
-    "markUnread": "Отметить как непрочитанное",
-    "markAllRead": "Отметьте все как прочитанное",
-    "delete": "Удалить",
-    "clearRead": "Удалить оповещения о прочтении",
-    "cleared_one": "Удалено {{count}} оповещение",
-    "cleared_other": "Удалены {{count}} оповещения",
-    "filterAll": "Все",
-    "filterUnread": "Непрочитано",
-    "anySeverity": "Любая степень тяжести",
-    "anySource": "Любой источник",
-    "openAll": "Открыть во вкладке",
-    "empty": "Пока нет оповещений.",
-    "emptyUnread": "Вы всё успели посмотреть.",
-    "loadMore": "Загрузить ещё"
-  },
-  "channels": {
-    "intro": "Каналы — это место, куда могут отправляться оповещения за пределы Termix. Правила доставки определяют, какие оповещения будут их использовать.",
-    "add": "Добавить канал",
-    "edit": "Редактировать канал",
-    "test": "Отправить тест",
-    "testSent": "Отправлено тестовое оповещение",
-    "testFailed": "Тест не пройден: {{error}}",
-    "deleteConfirm": "Удалить канал \"{{name}}\"?",
-    "deleted": "Канал удален",
-    "empty": "Каналов пока нет.",
-    "enabled": "Включено",
-    "needsSave": "Перед отправкой сообщения этот канал необходимо снова открыть и сохранить.",
-    "name": "Название",
-    "nameRequired": "Имя обязательно",
-    "type": "Тип",
-    "types": {
-      "webhook": "Вебхук",
-      "ntfy": "нтфи",
-      "discord": "Discord",
-      "email": "Email"
-    },
-    "emailUnavailable": "Для работы электронной почты необходим SMTP-сервер, который администратор настраивает в параметрах оповещений.",
-    "webhookUrl": "URL",
-    "webhookHint": "Получает JSON-тело для каждого оповещения.",
-    "method": "Метод",
-    "headers": "Заголовки",
-    "headersHint": "Один символ на строку, например, Имя: значение.",
-    "ntfyServer": "URL сервера",
-    "ntfyTopic": "Тема",
-    "ntfyToken": "Токен доступа (необязательно)",
-    "discordUrl": "URL веб-перехватчика Discord",
-    "discordHint": "В настройках канала в Discord, в разделе «Интеграции».",
-    "discordUsername": "Отображаемое имя (необязательно)",
-    "discordAvatar": "URL-адрес аватара (необязательно)",
-    "emailTo": "Отправить",
-    "emailHint": "Разделяя несколько адресов запятыми.",
-    "privateNetwork": "Разрешить использование частного сетевого адреса",
-    "privateNetworkHint": "Работает только для хостов, разрешенных администратором в списке частных конечных точек."
-  },
-  "rules": {
-    "intro": "Правило доставки отправляет соответствующие оповещения в ваши каналы. Оповещения также всегда остаются во входящих сообщениях.",
-    "add": "Добавить правило",
-    "edit": "Редактировать правило",
-    "empty": "Правил пока нет, поэтому уведомления отображаются только во входящих сообщениях.",
-    "needChannel": "Сначала добавьте канал.",
-    "enabled": "Включено",
-    "name": "Название",
-    "nameRequired": "Имя обязательно",
-    "match": "Уведомления для отправки",
-    "matchHint": "* для всего, что связано с автоматизацией.* для всего, что связано с автоматизацией, или для одного конкретного типа.",
-    "minSeverity": "По меньшей мере",
-    "channels": "Отправить",
-    "channelRequired": "Выберите хотя бы один канал",
-    "deleteConfirm": "Удалить правило \"{{name}}\"?",
-    "everything": "Все",
-    "summary": "{{match}}, {{severity}} или выше, до {{channels}}"
-  },
-  "actions": {
-    "cancel": "Отмена",
-    "save": "Сохранить",
-    "saving": "Сохранение…",
-    "delete": "Удалить"
-  },
-  "widget": {
-    "name": "Лента оповещений",
-    "description": "Ваши последние уведомления с возможностью быстрой пометки их как прочитанных.",
-    "maxItems": "Максимальное количество предметов",
-    "showRead": "Показать уведомления о прочтении",
-    "allClear": "Всё в порядке",
-    "loading": "Загрузка..."
-  },
-  "plugin": {
-    "name": "Оповещения"
-  }
-}
diff --git a/plugins/alerts/locales/translated/sr_SP.json b/plugins/alerts/locales/translated/sr_SP.json
deleted file mode 100644
index 7acc37dc2..000000000
--- a/plugins/alerts/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Упозорења"
-  },
-  "permissions": {
-    "use": {
-      "title": "Користите упозорења",
-      "description": "Добијајте обавештења у пријемно сандуче и шаљите их на своје канале."
-    }
-  },
-  "onboarding": {
-    "feature": "Упозорења",
-    "featureDesc": "Свако упозорење у једном пријемном сандучету, послато на Discord, ntfy, имејл или вебхук ако желите."
-  },
-  "settings": {
-    "group": {
-      "general": "Опште",
-      "email": "Е-пошта"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Termix саопштења",
-        "description": "Прикажи вести од Termix тима, као што су безбедносна обавештења и издања, у пријемном сандучету свих корисника."
-      },
-      "retentionDays": {
-        "label": "Задржавај упозорења (дана)",
-        "description": "Старија упозорења се уклањају из сваког пријемног сандучета."
-      },
-      "smtpHost": {
-        "label": "SMTP сервер",
-        "description": "Потребно за имејл канале. Оставите празно да бисте искључили имејл.",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "СМТП порт",
-        "description": "Обично 587 са STARTTLS-ом или 465 са TLS-ом."
-      },
-      "smtpSecure": {
-        "label": "Користите TLS од почетка",
-        "description": "Укључите за порт 465. Оставите искључено за порт 587, који се сам надограђује на TLS."
-      },
-      "smtpUser": {
-        "label": "SMTP корисничко име",
-        "description": "Оставите празно ако сервер не захтева пријаву."
-      },
-      "smtpPassword": {
-        "label": "СМТП лозинка",
-        "description": "Сачувано шифровано."
-      },
-      "smtpFrom": {
-        "label": "Адреса одакле",
-        "description": "Упозорења пошиљаоца долазе од.",
-        "placeholder": "Термикс <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "Искачући прозори са упозорењима",
-        "description": "Која нова упозорења се појављују док користите Termix. Она увек стижу у пријемно сандуче.",
-        "all": "Сва упозорења",
-        "warning": "Упозорења и критичне информације",
-        "critical": "Само критично",
-        "off": "Ниједан"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Пријемно сандуче",
-    "channels": "Канали",
-    "rules": "Правила испоруке"
-  },
-  "severity": {
-    "info": "Информације",
-    "success": "Успех",
-    "warning": "Упозорење",
-    "critical": "Критично"
-  },
-  "inbox": {
-    "sourceTermix": "Термикс",
-    "openLink": "Отворено",
-    "view": "Поглед",
-    "unread": "Непрочитано",
-    "deliveryFailed_one": "{{count}} канал није успео",
-    "deliveryFailed_other": "{{count}} канала није успело",
-    "markRead": "Означи као прочитано",
-    "markUnread": "Означи као непрочитано",
-    "markAllRead": "Означи све као прочитано",
-    "delete": "Обриши",
-    "clearRead": "Обриши упозорења о читању",
-    "cleared_one": "Обрисано упозорење {{count}}",
-    "cleared_other": "Обрисана упозорења {{count}}",
-    "filterAll": "Сви",
-    "filterUnread": "Непрочитано",
-    "anySeverity": "Било која тежина",
-    "anySource": "Било који извор",
-    "openAll": "Отвори у картици",
-    "empty": "Још нема упозорења.",
-    "emptyUnread": "Све сте у току.",
-    "loadMore": "Учитај још"
-  },
-  "channels": {
-    "intro": "Канали су места где упозорења могу да се шаљу изван Termix-а. Правила испоруке бирају која упозорења их користе.",
-    "add": "Додај канал",
-    "edit": "Измени канал",
-    "test": "Пошаљи тест",
-    "testSent": "Послато је тестно упозорење",
-    "testFailed": "Тест није успео: {{error}}",
-    "deleteConfirm": "Обрисати канал „{{name}}“?",
-    "deleted": "Канал је обрисан",
-    "empty": "Још нема канала.",
-    "enabled": "Омогућено",
-    "needsSave": "Овај канал треба поново отворити и сачувати пре него што се може послати.",
-    "name": "Име",
-    "nameRequired": "Име је обавезно",
-    "type": "Тип",
-    "types": {
-      "webhook": "Вебхук",
-      "ntfy": "нтфи",
-      "discord": "Неслагање",
-      "email": "Е-пошта"
-    },
-    "emailUnavailable": "Е-пошти је потребан SMTP сервер, који администратор подешава у подешавањима упозорења.",
-    "webhookUrl": "URL",
-    "webhookHint": "Добија JSON тело за свако упозорење.",
-    "method": "Метод",
-    "headers": "Заглавља",
-    "headersHint": "Један по реду, као што је Име: вредност.",
-    "ntfyServer": "URL сервера",
-    "ntfyTopic": "Тема",
-    "ntfyToken": "Приступни токен (опционо)",
-    "discordUrl": "URL вебхука на Дискорду",
-    "discordHint": "Из подешавања канала на Дискорду, под Интеграције.",
-    "discordUsername": "Приказано име (опционо)",
-    "discordAvatar": "URL адреса аватара (опционо)",
-    "emailTo": "Пошаљи",
-    "emailHint": "Одвојите више од једне адресе зарезима.",
-    "privateNetwork": "Дозволи адресу приватне мреже",
-    "privateNetworkHint": "Ради само за хостове које администратор дозвољава на листи приватних крајњих тачака."
-  },
-  "rules": {
-    "intro": "Правило испоруке шаље одговарајућа упозорења вашим каналима. Упозорења такође увек остају у пријемном сандучету.",
-    "add": "Додај правило",
-    "edit": "Измени правило",
-    "empty": "Још нема правила, тако да се упозорења приказују само у пријемном сандучету.",
-    "needChannel": "Прво додајте канал.",
-    "enabled": "Омогућено",
-    "name": "Име",
-    "nameRequired": "Име је обавезно",
-    "match": "Обавештења за слање",
-    "matchHint": "* за све, аутоматизације.* за све од аутоматизација, или само једну врсту.",
-    "minSeverity": "Барем",
-    "channels": "Пошаљи",
-    "channelRequired": "Изаберите барем један канал",
-    "deleteConfirm": "Обрисати правило „{{name}}“?",
-    "everything": "Све",
-    "summary": "{{match}}, {{severity}} или више, до {{channels}}"
-  },
-  "actions": {
-    "cancel": "Откажи",
-    "save": "Сачувај",
-    "saving": "Чување...",
-    "delete": "Обриши"
-  },
-  "widget": {
-    "name": "Фид обавештења",
-    "description": "Ваша најновија обавештења, са брзим начином да их означите као прочитане",
-    "maxItems": "Максималан број ставки",
-    "showRead": "Прикажи обавештења о читању",
-    "allClear": "Све је чисто",
-    "loading": "Учитавање..."
-  },
-  "plugin": {
-    "name": "Упозорења"
-  }
-}
diff --git a/plugins/alerts/locales/translated/sv_SE.json b/plugins/alerts/locales/translated/sv_SE.json
deleted file mode 100644
index ce3219c28..000000000
--- a/plugins/alerts/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Aviseringar"
-  },
-  "permissions": {
-    "use": {
-      "title": "Använd varningar",
-      "description": "Få aviseringar i inkorgen och skicka dem till dina egna kanaler."
-    }
-  },
-  "onboarding": {
-    "feature": "Aviseringar",
-    "featureDesc": "Varje avisering i en inkorg, skickad vidare till Discord, ntfy, e-post eller en webhook om du vill."
-  },
-  "settings": {
-    "group": {
-      "general": "Allmän",
-      "email": "E-post"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Termix-meddelanden",
-        "description": "Visa nyheter från Termix-teamet, som säkerhetsmeddelanden och pressmeddelanden, i allas inkorg."
-      },
-      "retentionDays": {
-        "label": "Behåll varningar i (dagar)",
-        "description": "Äldre aviseringar tas bort från alla inkorgar."
-      },
-      "smtpHost": {
-        "label": "SMTP-server",
-        "description": "Behövs för e-postkanaler. Lämna tomt för att stänga av e-post.",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "SMTP-port",
-        "description": "Vanligtvis 587 med STARTTLS eller 465 med TLS."
-      },
-      "smtpSecure": {
-        "label": "Använd TLS från början",
-        "description": "Aktivera port 465. Avaktivera port 587, som uppgraderar till TLS på egen hand."
-      },
-      "smtpUser": {
-        "label": "SMTP-användarnamn",
-        "description": "Lämna tomt om servern inte behöver inloggning."
-      },
-      "smtpPassword": {
-        "label": "SMTP-lösenord",
-        "description": "Lagras krypterat."
-      },
-      "smtpFrom": {
-        "label": "Från adress",
-        "description": "Avsändaraviseringarna kommer från.",
-        "placeholder": "Termix <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "Aviseringspopup-fönster",
-        "description": "Vilka nya aviseringar dyker upp när du använder Termix? De hamnar alltid i inkorgen.",
-        "all": "Alla varningar",
-        "warning": "Varningar och kritiska",
-        "critical": "Endast kritisk",
-        "off": "Ingen"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Inkorg",
-    "channels": "Kanaler",
-    "rules": "Leveransregler"
-  },
-  "severity": {
-    "info": "Info",
-    "success": "Framgång",
-    "warning": "Varning",
-    "critical": "Kritisk"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "Öppna",
-    "view": "Se",
-    "unread": "Oläst",
-    "deliveryFailed_one": "{{count}} kanal misslyckades",
-    "deliveryFailed_other": "{{count}} kanaler misslyckades",
-    "markRead": "Markera som läst",
-    "markUnread": "Markera som oläst",
-    "markAllRead": "Markera alla som lästa",
-    "delete": "Radera",
-    "clearRead": "Ta bort läsaviseringar",
-    "cleared_one": "Borttagen {{count}} -avisering",
-    "cleared_other": "Borttagna {{count}} varningar",
-    "filterAll": "Alla",
-    "filterUnread": "Oläst",
-    "anySeverity": "Vilken allvarlighetsgrad som helst",
-    "anySource": "Vilken källa som helst",
-    "openAll": "Öppna i en flik",
-    "empty": "Inga varningar ännu.",
-    "emptyUnread": "Ni är helt uppdaterade.",
-    "loadMore": "Ladda mer"
-  },
-  "channels": {
-    "intro": "Kanaler är där aviseringar kan skickas utanför Termix. Leveransregler väljer vilka aviseringar som använder dem.",
-    "add": "Lägg till kanal",
-    "edit": "Redigera kanal",
-    "test": "Skicka ett test",
-    "testSent": "Testavisering skickad",
-    "testFailed": "Testet misslyckades: {{error}}",
-    "deleteConfirm": "Ta bort kanalen \"{{name}}\"?",
-    "deleted": "Kanal borttagen",
-    "empty": "Inga kanaler än.",
-    "enabled": "Aktiverad",
-    "needsSave": "Den här kanalen måste öppnas och sparas igen innan den kan skicka.",
-    "name": "Namn",
-    "nameRequired": "Namn krävs",
-    "type": "Typ",
-    "types": {
-      "webhook": "Webbhook",
-      "ntfy": "ntfy",
-      "discord": "Disharmoni",
-      "email": "E-post"
-    },
-    "emailUnavailable": "E-post behöver en SMTP-server, vilket en administratör konfigurerar i aviseringsinställningarna.",
-    "webhookUrl": "URL",
-    "webhookHint": "Hämtar en JSON-text för varje avisering.",
-    "method": "Metod",
-    "headers": "Rubriker",
-    "headersHint": "En per rad, som Namn: värde.",
-    "ntfyServer": "Server-URL",
-    "ntfyTopic": "Ämne",
-    "ntfyToken": "Åtkomsttoken (valfritt)",
-    "discordUrl": "Discord webhook-URL",
-    "discordHint": "Från kanalens inställningar i Discord, under Integrationer.",
-    "discordUsername": "Visningsnamn (valfritt)",
-    "discordAvatar": "Avatar-URL (valfritt)",
-    "emailTo": "Skicka till",
-    "emailHint": "Separera mer än en adress med kommatecken.",
-    "privateNetwork": "Tillåt en privat nätverksadress",
-    "privateNetworkHint": "Fungerar bara för värdar som en administratör tillåter i listan över privata slutpunkter."
-  },
-  "rules": {
-    "intro": "En leveransregel skickar matchande aviseringar till dina kanaler. Aviseringar finns alltid kvar i inkorgen också.",
-    "add": "Lägg till regel",
-    "edit": "Redigera regel",
-    "empty": "Inga regler ännu, så aviseringar visas bara i inkorgen.",
-    "needChannel": "Lägg till en kanal först.",
-    "enabled": "Aktiverad",
-    "name": "Namn",
-    "nameRequired": "Namn krävs",
-    "match": "Aviseringar att skicka",
-    "matchHint": "* för allt, automatiseringar.* för allt från automatiseringar, eller en exakt sort.",
-    "minSeverity": "Åtminstone",
-    "channels": "Skicka till",
-    "channelRequired": "Välj minst en kanal",
-    "deleteConfirm": "Ta bort regeln \"{{name}}\"?",
-    "everything": "Allt",
-    "summary": "{{match}}, {{severity}} eller högre, till {{channels}}"
-  },
-  "actions": {
-    "cancel": "Avboka",
-    "save": "Spara",
-    "saving": "Sparande...",
-    "delete": "Radera"
-  },
-  "widget": {
-    "name": "Aviseringsflöde",
-    "description": "Dina senaste aviseringar, med ett snabbt sätt att markera dem som lästa",
-    "maxItems": "Max antal artiklar",
-    "showRead": "Visa läsaviseringar",
-    "allClear": "Faran över",
-    "loading": "Belastning..."
-  },
-  "plugin": {
-    "name": "Aviseringar"
-  }
-}
diff --git a/plugins/alerts/locales/translated/th_TH.json b/plugins/alerts/locales/translated/th_TH.json
deleted file mode 100644
index f8f4fb003..000000000
--- a/plugins/alerts/locales/translated/th_TH.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "การแจ้งเตือน"
-  },
-  "permissions": {
-    "use": {
-      "title": "ใช้การแจ้งเตือน",
-      "description": "รับการแจ้งเตือนในกล่องข้อความขาเข้า และส่งต่อไปยังช่องทางของคุณเองได้"
-    }
-  },
-  "onboarding": {
-    "feature": "การแจ้งเตือน",
-    "featureDesc": "การแจ้งเตือนทั้งหมดจะถูกส่งไปยังกล่องข้อความเดียว และส่งต่อไปยัง Discord, NTFI, อีเมล หรือ Webhook ตามที่คุณต้องการ"
-  },
-  "settings": {
-    "group": {
-      "general": "ทั่วไป",
-      "email": "อีเมล"
-    },
-    "admin": {
-      "announcements": {
-        "label": "ประกาศจาก Termix",
-        "description": "แสดงข่าวสารจากทีม Termix เช่น ประกาศด้านความปลอดภัยและการอัปเดตต่างๆ ในกล่องจดหมายของทุกคน"
-      },
-      "retentionDays": {
-        "label": "ตั้งค่าการแจ้งเตือนเป็นเวลา (วัน)",
-        "description": "การแจ้งเตือนเก่าๆ จะถูกลบออกจากกล่องจดหมายทุกกล่อง"
-      },
-      "smtpHost": {
-        "label": "เซิร์ฟเวอร์ SMTP",
-        "description": "จำเป็นสำหรับช่องทางการส่งอีเมล เว้นว่างไว้เพื่อปิดการใช้งานอีเมล",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "พอร์ต SMTP",
-        "description": "โดยทั่วไปจะใช้พอร์ต 587 สำหรับ STARTTLS หรือ 465 สำหรับ TLS"
-      },
-      "smtpSecure": {
-        "label": "ใช้ TLS ตั้งแต่เริ่มต้น",
-        "description": "เปิดใช้งานสำหรับพอร์ต 465 ปิดใช้งานสำหรับพอร์ต 587 ซึ่งจะอัปเกรดเป็น TLS โดยอัตโนมัติ"
-      },
-      "smtpUser": {
-        "label": "ชื่อผู้ใช้ SMTP",
-        "description": "เว้นว่างไว้หากเซิร์ฟเวอร์ไม่ต้องการการเข้าสู่ระบบ"
-      },
-      "smtpPassword": {
-        "label": "รหัสผ่าน SMTP",
-        "description": "จัดเก็บในรูปแบบเข้ารหัส"
-      },
-      "smtpFrom": {
-        "label": "จากที่อยู่",
-        "description": "การแจ้งเตือนจากผู้ส่งมาจาก...",
-        "placeholder": "เทอร์มิกซ์ <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "ป๊อปอัปแจ้งเตือน",
-        "description": "มีการแจ้งเตือนใหม่ๆ อะไรบ้างที่จะปรากฏขึ้นขณะที่คุณใช้งาน Termix การแจ้งเตือนเหล่านั้นจะถูกส่งไปยังกล่องจดหมายเข้าเสมอ",
-        "all": "การแจ้งเตือนทั้งหมด",
-        "warning": "คำเตือนและข้อสำคัญ",
-        "critical": "เฉพาะกรณีวิกฤติเท่านั้น",
-        "off": "ไม่มี"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "กล่องขาเข้า",
-    "channels": "ช่องต่างๆ",
-    "rules": "กฎการจัดส่ง"
-  },
-  "severity": {
-    "info": "ข้อมูล",
-    "success": "ความสำเร็จ",
-    "warning": "คำเตือน",
-    "critical": "วิกฤต"
-  },
-  "inbox": {
-    "sourceTermix": "เทอร์มิกซ์",
-    "openLink": "เปิด",
-    "view": "ดู",
-    "unread": "ยังไม่ได้อ่าน",
-    "deliveryFailed_one": "{{count}} ช่องทางล้มเหลว",
-    "deliveryFailed_other": "{{count}} ช่องทางล้มเหลว",
-    "markRead": "ทำเครื่องหมายว่าอ่านแล้ว",
-    "markUnread": "ทำเครื่องหมายว่ายังไม่ได้อ่าน",
-    "markAllRead": "ทำเครื่องหมายว่าอ่านแล้วทั้งหมด",
-    "delete": "ลบ",
-    "clearRead": "ลบการแจ้งเตือนการอ่าน",
-    "cleared_one": "ลบการแจ้งเตือน {{count}} แล้ว",
-    "cleared_other": "ลบการแจ้งเตือน {{count}} แล้ว",
-    "filterAll": "ทั้งหมด",
-    "filterUnread": "ยังไม่ได้อ่าน",
-    "anySeverity": "ความรุนแรงใดๆ",
-    "anySource": "แหล่งที่มาใดๆ",
-    "openAll": "เปิดในแท็บใหม่",
-    "empty": "ยังไม่มีการแจ้งเตือนใดๆ",
-    "emptyUnread": "คุณได้รับข้อมูลครบถ้วนแล้ว",
-    "loadMore": "โหลดเพิ่มเติม"
-  },
-  "channels": {
-    "intro": "ช่องทางต่างๆ คือที่ที่การแจ้งเตือนสามารถส่งออกไปภายนอก Termix ได้ กฎการส่งจะเลือกว่าการแจ้งเตือนใดควรใช้ช่องทางเหล่านั้น",
-    "add": "เพิ่มช่องทาง",
-    "edit": "แก้ไขช่อง",
-    "test": "ส่งทดสอบ",
-    "testSent": "ส่งการแจ้งเตือนการทดสอบแล้ว",
-    "testFailed": "การทดสอบล้มเหลว: {{error}}",
-    "deleteConfirm": "ลบช่อง \"{{name}}\"?",
-    "deleted": "ช่องถูกลบแล้ว",
-    "empty": "ยังไม่มีช่องทางใด ๆ",
-    "enabled": "เปิดใช้งาน",
-    "needsSave": "ต้องเปิดและบันทึกช่องทางนี้อีกครั้งก่อนจึงจะสามารถส่งได้",
-    "name": "ชื่อ",
-    "nameRequired": "ต้องระบุชื่อ",
-    "type": "พิมพ์",
-    "types": {
-      "webhook": "เว็บฮุค",
-      "ntfy": "ntfy",
-      "discord": "ดิสคอร์ด",
-      "email": "อีเมล"
-    },
-    "emailUnavailable": "อีเมลจำเป็นต้องมีเซิร์ฟเวอร์ SMTP ซึ่งผู้ดูแลระบบจะตั้งค่าไว้ในการตั้งค่าการแจ้งเตือน",
-    "webhookUrl": "URL",
-    "webhookHint": "จะได้รับข้อมูล JSON สำหรับการแจ้งเตือนทุกครั้ง",
-    "method": "วิธี",
-    "headers": "ส่วนหัว",
-    "headersHint": "หนึ่งรายการต่อบรรทัด เช่น ชื่อ: ค่า",
-    "ntfyServer": "URL ของเซิร์ฟเวอร์",
-    "ntfyTopic": "หัวข้อ",
-    "ntfyToken": "โทเค็นการเข้าถึง (ไม่บังคับ)",
-    "discordUrl": "URL เว็บฮุคของ Discord",
-    "discordHint": "จากเมนูการตั้งค่าของช่องใน Discord ในส่วน \"การผสานรวม\"",
-    "discordUsername": "ชื่อที่แสดง (ไม่บังคับ)",
-    "discordAvatar": "URL รูปประจำตัว (ไม่บังคับ)",
-    "emailTo": "ส่งไปยัง",
-    "emailHint": "คั่นที่อยู่มากกว่าหนึ่งรายการด้วยเครื่องหมายจุลภาค",
-    "privateNetwork": "อนุญาตให้ใช้ที่อยู่เครือข่ายส่วนตัว",
-    "privateNetworkHint": "ใช้ได้เฉพาะกับโฮสต์ที่ผู้ดูแลระบบอนุญาตในรายการปลายทางส่วนตัวเท่านั้น"
-  },
-  "rules": {
-    "intro": "กฎการส่งจะส่งการแจ้งเตือนที่ตรงกันไปยังช่องทางต่างๆ ของคุณ การแจ้งเตือนเหล่านี้จะยังคงอยู่ในกล่องจดหมายเข้าเสมอ",
-    "add": "เพิ่มกฎ",
-    "edit": "แก้ไขกฎ",
-    "empty": "ยังไม่มีการกำหนดกฎเกณฑ์ใดๆ ดังนั้นการแจ้งเตือนจะปรากฏเฉพาะในกล่องจดหมายเข้าเท่านั้น",
-    "needChannel": "เพิ่มช่องทางก่อน",
-    "enabled": "เปิดใช้งาน",
-    "name": "ชื่อ",
-    "nameRequired": "ต้องระบุชื่อ",
-    "match": "การแจ้งเตือนที่จะส่ง",
-    "matchHint": "*สำหรับทุกสิ่งทุกอย่าง ระบบอัตโนมัติ* สำหรับทุกสิ่งทุกอย่างจากระบบอัตโนมัติ หรือระบบอัตโนมัติแบบใดแบบหนึ่งโดยเฉพาะ",
-    "minSeverity": "อย่างน้อย",
-    "channels": "ส่งไปยัง",
-    "channelRequired": "เลือกอย่างน้อยหนึ่งช่อง",
-    "deleteConfirm": "ลบกฎ \"{{name}} \" ออกหรือไม่?",
-    "everything": "ทุกอย่าง",
-    "summary": "{{match}}, {{severity}} หรือสูงกว่า ไปจนถึง {{channels}}"
-  },
-  "actions": {
-    "cancel": "ยกเลิก",
-    "save": "บันทึก",
-    "saving": "ประหยัด...",
-    "delete": "ลบ"
-  },
-  "widget": {
-    "name": "ฟีดแจ้งเตือน",
-    "description": "การแจ้งเตือนล่าสุดของคุณ พร้อมวิธีทำเครื่องหมายว่าอ่านแล้วอย่างรวดเร็ว",
-    "maxItems": "ไอเทมสูงสุด",
-    "showRead": "แสดงการแจ้งเตือนการอ่าน",
-    "allClear": "ทุกอย่างเรียบร้อย",
-    "loading": "กำลังโหลด..."
-  },
-  "plugin": {
-    "name": "การแจ้งเตือน"
-  }
-}
diff --git a/plugins/alerts/locales/translated/tr_TR.json b/plugins/alerts/locales/translated/tr_TR.json
deleted file mode 100644
index 3b07af108..000000000
--- a/plugins/alerts/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Uyarılar"
-  },
-  "permissions": {
-    "use": {
-      "title": "Uyarıları kullanın",
-      "description": "Gelen kutunuza bildirimler alın ve bunları kendi kanallarınıza gönderin."
-    }
-  },
-  "onboarding": {
-    "feature": "Uyarılar",
-    "featureDesc": "Tüm uyarılar tek bir gelen kutusunda toplanır ve isterseniz Discord, NTfy, e-posta veya webhook üzerinden de gönderilebilir."
-  },
-  "settings": {
-    "group": {
-      "general": "Genel",
-      "email": "E-posta"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Termix duyuruları",
-        "description": "Termix ekibinden gelen güvenlik uyarıları ve sürümler gibi haberleri herkesin e-posta kutusunda göster."
-      },
-      "retentionDays": {
-        "label": "Uyarıları (gün) süreyle açık tut",
-        "description": "Eski bildirimler tüm gelen kutularından silinir."
-      },
-      "smtpHost": {
-        "label": "SMTP sunucusu",
-        "description": "E-posta kanalları için gereklidir. E-postayı kapatmak için boş bırakın.",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "SMTP bağlantı noktası",
-        "description": "Genellikle STARTTLS ile 587 veya TLS ile 465 kullanılır."
-      },
-      "smtpSecure": {
-        "label": "TLS'yi en başından itibaren kullanın.",
-        "description": "465 numaralı bağlantı noktası için etkinleştirin. 587 numaralı bağlantı noktasını ise devre dışı bırakın; bu bağlantı noktası otomatik olarak TLS'ye yükseltilir."
-      },
-      "smtpUser": {
-        "label": "SMTP kullanıcı adı",
-        "description": "Sunucuya giriş yapılması gerekmiyorsa boş bırakın."
-      },
-      "smtpPassword": {
-        "label": "SMTP şifresi",
-        "description": "Şifrelenmiş olarak saklanmaktadır."
-      },
-      "smtpFrom": {
-        "label": "Gönderen adresi",
-        "description": "Uyarı gönderen şuradan geliyor.",
-        "placeholder": "Termix <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "Uyarı açılır pencereleri",
-        "description": "Termix kullanırken hangi yeni uyarılar belirir? Bunlar her zaman gelen kutunuza düşer.",
-        "all": "Tüm uyarılar",
-        "warning": "Uyarılar ve kritik noktalar",
-        "critical": "Sadece kritik",
-        "off": "Yok"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Gelen Kutusu",
-    "channels": "Kanallar",
-    "rules": "Teslimat kuralları"
-  },
-  "severity": {
-    "info": "Bilgi",
-    "success": "Başarılı",
-    "warning": "Uyarı",
-    "critical": "Kritik"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "Aç",
-    "view": "Görüntüle",
-    "unread": "Okunmamış",
-    "deliveryFailed_one": "{{count}} kanal başarısız oldu",
-    "deliveryFailed_other": "{{count}} kanal başarısız oldu",
-    "markRead": "Okundu olarak işaretle",
-    "markUnread": "Okunmamış olarak işaretle",
-    "markAllRead": "Tümünü okundu olarak işaretle",
-    "delete": "Sil",
-    "clearRead": "Okuma uyarılarını sil",
-    "cleared_one": "Silindi {{count}} uyarısı",
-    "cleared_other": "Silinen {{count}} uyarıları",
-    "filterAll": "Tümü",
-    "filterUnread": "Okunmamış",
-    "anySeverity": "Herhangi bir şiddet",
-    "anySource": "Herhangi bir kaynak",
-    "openAll": "Yeni sekmede aç",
-    "empty": "Henüz herhangi bir uyarı yok.",
-    "emptyUnread": "Her şey tamamlandı.",
-    "loadMore": "Daha fazla yükle"
-  },
-  "channels": {
-    "intro": "Kanallar, uyarıların Termix dışına gönderilebileceği yerlerdir. Teslimat kuralları, hangi uyarıların bu kanalları kullanacağını belirler.",
-    "add": "Kanal ekle",
-    "edit": "Kanalı düzenle",
-    "test": "Bir test gönderin",
-    "testSent": "Test uyarısı gönderildi",
-    "testFailed": "Test başarısız oldu: {{error}}",
-    "deleteConfirm": "\"{{name}} \" kanalını silmek mi istiyorsunuz?",
-    "deleted": "Kanal silindi",
-    "empty": "Henüz kanal yok.",
-    "enabled": "Etkin",
-    "needsSave": "Bu kanalın gönderilebilmesi için önce açılıp tekrar kaydedilmesi gerekiyor.",
-    "name": "Ad",
-    "nameRequired": "Ad zorunludur",
-    "type": "Tür",
-    "types": {
-      "webhook": "Webhook",
-      "ntfy": "ntfy",
-      "discord": "Discord",
-      "email": "E-posta"
-    },
-    "emailUnavailable": "E-posta göndermek için bir SMTP sunucusuna ihtiyaç vardır ve bu sunucu yönetici tarafından Uyarılar ayarlarında kurulur.",
-    "webhookUrl": "URL",
-    "webhookHint": "Her uyarı için JSON formatında bir veri gövdesi alır.",
-    "method": "Yöntem",
-    "headers": "Başlıklar",
-    "headersHint": "Her satıra bir tane, örneğin İsim: değer şeklinde.",
-    "ntfyServer": "Sunucu URL'si",
-    "ntfyTopic": "Konu",
-    "ntfyToken": "Erişim belirteci (isteğe bağlı)",
-    "discordUrl": "Discord webhook URL",
-    "discordHint": "Discord'daki kanal ayarlarından, Entegrasyonlar bölümünden.",
-    "discordUsername": "Görüntülenen ad (isteğe bağlı)",
-    "discordAvatar": "Avatar URL'si (isteğe bağlı)",
-    "emailTo": "Gönder",
-    "emailHint": "Birden fazla adresi virgülle ayırın.",
-    "privateNetwork": "Özel ağ adresine izin verin",
-    "privateNetworkHint": "Yalnızca yöneticinin özel uç nokta listesinde izin verdiği sunucular için çalışır."
-  },
-  "rules": {
-    "intro": "Bir teslimat kuralı, eşleşen uyarıları kanallarınıza gönderir. Uyarılar her zaman gelen kutunuzda da kalır.",
-    "add": "Kural ekle",
-    "edit": "Kuralı düzenle",
-    "empty": "Henüz kurallar belirlenmedi, bu nedenle uyarılar yalnızca gelen kutusunda görünüyor.",
-    "needChannel": "Önce bir kanal ekleyin.",
-    "enabled": "Etkin",
-    "name": "Ad",
-    "nameRequired": "Ad zorunludur",
-    "match": "Gönderilecek uyarılar",
-    "matchHint": "*Her şey için otomasyonlar.* Otomasyonlardan her şeye veya belirli bir türe kadar.",
-    "minSeverity": "En azından",
-    "channels": "Gönder",
-    "channelRequired": "En az bir kanal seçin",
-    "deleteConfirm": "\"{{name}} \" kuralını silmek mi istiyorsunuz?",
-    "everything": "Her şey",
-    "summary": "{{match}}, {{severity}} veya daha yüksek, {{channels}}'ye kadar"
-  },
-  "actions": {
-    "cancel": "İptal",
-    "save": "Kaydet",
-    "saving": "Kaydediliyor...",
-    "delete": "Sil"
-  },
-  "widget": {
-    "name": "Uyarı Akışı",
-    "description": "En son bildirimleriniz ve bunları okundu olarak işaretlemenin hızlı bir yolu.",
-    "maxItems": "Maksimum öğe",
-    "showRead": "Okuma uyarılarını göster",
-    "allClear": "Her şey normal",
-    "loading": "Yükleniyor..."
-  },
-  "plugin": {
-    "name": "Uyarılar"
-  }
-}
diff --git a/plugins/alerts/locales/translated/uk_UA.json b/plugins/alerts/locales/translated/uk_UA.json
deleted file mode 100644
index 2161edb74..000000000
--- a/plugins/alerts/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Сповіщення"
-  },
-  "permissions": {
-    "use": {
-      "title": "Використовуйте сповіщення",
-      "description": "Отримуйте сповіщення у вхідні повідомлення та надсилайте їх на власні канали."
-    }
-  },
-  "onboarding": {
-    "feature": "Сповіщення",
-    "featureDesc": "Кожне сповіщення в одній поштовій скриньці, що надсилається на Discord, ntfy, електронну пошту або вебхук, якщо хочете."
-  },
-  "settings": {
-    "group": {
-      "general": "Загальне",
-      "email": "Електронна пошта"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Оголошення Termix",
-        "description": "Показувати новини від команди Termix, такі як повідомлення та релізи безпеки, у папці \"Вхідні\" для всіх."
-      },
-      "retentionDays": {
-        "label": "Зберігати сповіщення протягом (днів)",
-        "description": "Старіші сповіщення видаляються з усіх папок \"Вхідні\"."
-      },
-      "smtpHost": {
-        "label": "SMTP-сервер",
-        "description": "Потрібно для каналів електронної пошти. Залиште поле порожнім, щоб вимкнути електронну пошту.",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "SMTP-порт",
-        "description": "Зазвичай 587 з STARTTLS або 465 з TLS."
-      },
-      "smtpSecure": {
-        "label": "Використовуйте TLS з самого початку",
-        "description": "Увімкніть для порту 465. Вимкніть для порту 587, який самостійно оновлюється до TLS."
-      },
-      "smtpUser": {
-        "label": "Ім'я користувача SMTP",
-        "description": "Залиште поле порожнім, якщо сервер не потребує входу."
-      },
-      "smtpPassword": {
-        "label": "Пароль SMTP",
-        "description": "Зберігається зашифрованим."
-      },
-      "smtpFrom": {
-        "label": "З адреси",
-        "description": "Сповіщення відправника надходять з.",
-        "placeholder": "Термікс <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "Спливаючі вікна сповіщень",
-        "description": "Які нові сповіщення з’являються під час використання Termix. Вони завжди потрапляють у папку «Вхідні».",
-        "all": "Усі сповіщення",
-        "warning": "Попередження та критичні",
-        "critical": "Тільки критично",
-        "off": "Жоден"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Вхідні",
-    "channels": "Канали",
-    "rules": "Правила доставки"
-  },
-  "severity": {
-    "info": "Інформація",
-    "success": "Успіх",
-    "warning": "УВАГА",
-    "critical": "Критичний"
-  },
-  "inbox": {
-    "sourceTermix": "Термікс",
-    "openLink": "ВІДЧИНЕНО",
-    "view": "Переглянути",
-    "unread": "Непрочитане",
-    "deliveryFailed_one": "{{count}} канал не вдався",
-    "deliveryFailed_other": "{{count}} каналів не вдалося",
-    "markRead": "Позначити як прочитане",
-    "markUnread": "Позначити як непрочитане",
-    "markAllRead": "Позначити всі як прочитані",
-    "delete": "Видалити",
-    "clearRead": "Видалити сповіщення про прочитання",
-    "cleared_one": "Видалено сповіщення {{count}}",
-    "cleared_other": "Видалено сповіщень {{count}}",
-    "filterAll": "Усі",
-    "filterUnread": "Непрочитане",
-    "anySeverity": "Будь-якої тяжкості",
-    "anySource": "Будь-яке джерело",
-    "openAll": "Відкрити у вкладці",
-    "empty": "Поки що немає сповіщень.",
-    "emptyUnread": "Ви все в курсі.",
-    "loadMore": "Завантажити більше"
-  },
-  "channels": {
-    "intro": "Канали – це місця, де сповіщення можуть надходити за межі Termix. Правила доставки вибирають, які сповіщення їх використовувати.",
-    "add": "Додати канал",
-    "edit": "Редагувати канал",
-    "test": "Надіслати тест",
-    "testSent": "Тестове сповіщення надіслано",
-    "testFailed": "Тест не вдався: {{error}}",
-    "deleteConfirm": "Видалити канал «{{name}}»?",
-    "deleted": "Канал видалено",
-    "empty": "Поки що немає каналів.",
-    "enabled": "Увімкнено",
-    "needsSave": "Цей канал потрібно знову відкрити та зберегти, перш ніж його можна буде надіслати.",
-    "name": "Ім'я",
-    "nameRequired": "Ім'я обов'язкове",
-    "type": "Тип",
-    "types": {
-      "webhook": "Вебхук",
-      "ntfy": "ntfy",
-      "discord": "Дискорд",
-      "email": "Електронна пошта"
-    },
-    "emailUnavailable": "Для електронної пошти потрібен SMTP-сервер, який адміністратор налаштовує в налаштуваннях сповіщень.",
-    "webhookUrl": "URL-адреса",
-    "webhookHint": "Отримує тіло JSON для кожного сповіщення.",
-    "method": "Метод",
-    "headers": "Заголовки",
-    "headersHint": "По одному на рядок, наприклад, Ім'я: значення.",
-    "ntfyServer": "URL-адреса сервера",
-    "ntfyTopic": "Тема",
-    "ntfyToken": "Токен доступу (необов'язково)",
-    "discordUrl": "URL-адреса вебхука Discord",
-    "discordHint": "У налаштуваннях каналу в Discord, у розділі «Інтеграції».",
-    "discordUsername": "Відображуване ім'я (необов'язково)",
-    "discordAvatar": "URL-адреса аватара (необов'язково)",
-    "emailTo": "Надіслати",
-    "emailHint": "Розділяйте більше однієї адреси комами.",
-    "privateNetwork": "Дозволити адресу приватної мережі",
-    "privateNetworkHint": "Працює лише для хостів, які адміністратор дозволяє в списку приватних кінцевих точок."
-  },
-  "rules": {
-    "intro": "Правило доставки надсилає відповідні сповіщення до ваших каналів. Сповіщення також завжди залишаються у вхідних повідомленнях.",
-    "add": "Додати правило",
-    "edit": "Редагувати правило",
-    "empty": "Поки що немає правил, тому сповіщення відображаються лише у вхідних повідомленнях.",
-    "needChannel": "Спочатку додайте канал.",
-    "enabled": "Увімкнено",
-    "name": "Ім'я",
-    "nameRequired": "Ім'я обов'язкове",
-    "match": "Сповіщення для надсилання",
-    "matchHint": "* для всього, автоматизації.* для всього, починаючи від автоматизації, або одного точного виду.",
-    "minSeverity": "Принаймні",
-    "channels": "Надіслати",
-    "channelRequired": "Виберіть хоча б один канал",
-    "deleteConfirm": "Видалити правило \"{{name}}\"?",
-    "everything": "Все",
-    "summary": "{{match}}, {{severity}} або вище, до {{channels}}"
-  },
-  "actions": {
-    "cancel": "Скасувати",
-    "save": "Зберегти",
-    "saving": "Збереження...",
-    "delete": "Видалити"
-  },
-  "widget": {
-    "name": "Стрічка сповіщень",
-    "description": "Ваші останні сповіщення з можливістю швидко позначити їх як прочитані",
-    "maxItems": "Макс. кількість елементів",
-    "showRead": "Показувати сповіщення про прочитання",
-    "allClear": "Все чисто",
-    "loading": "Завантаження..."
-  },
-  "plugin": {
-    "name": "Сповіщення"
-  }
-}
diff --git a/plugins/alerts/locales/translated/vi_VN.json b/plugins/alerts/locales/translated/vi_VN.json
deleted file mode 100644
index b3515d3d5..000000000
--- a/plugins/alerts/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "Cảnh báo"
-  },
-  "permissions": {
-    "use": {
-      "title": "Sử dụng cảnh báo",
-      "description": "Nhận thông báo trong hộp thư đến và chia sẻ chúng lên các kênh của riêng bạn."
-    }
-  },
-  "onboarding": {
-    "feature": "Cảnh báo",
-    "featureDesc": "Tất cả thông báo đều được tập trung trong một hộp thư đến, sau đó được gửi đến Discord, NTFS, email hoặc webhook nếu bạn muốn."
-  },
-  "settings": {
-    "group": {
-      "general": "Chung",
-      "email": "Email"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Thông báo của Termix",
-        "description": "Hiển thị tin tức từ đội ngũ Termix, chẳng hạn như thông báo bảo mật và bản phát hành, trong hộp thư đến của mọi người."
-      },
-      "retentionDays": {
-        "label": "Giữ cảnh báo trong (ngày)",
-        "description": "Các thông báo cũ hơn sẽ bị xóa khỏi mọi hộp thư đến."
-      },
-      "smtpHost": {
-        "label": "Máy chủ SMTP",
-        "description": "Cần thiết cho các kênh email. Để trống nếu muốn tắt email.",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "Cổng SMTP",
-        "description": "Thông thường là cổng 587 với STARTTLS hoặc 465 với TLS."
-      },
-      "smtpSecure": {
-        "label": "Hãy sử dụng TLS ngay từ đầu.",
-        "description": "Bật tính năng này cho cổng 465. Tắt tính năng cho cổng 587, vì cổng này sẽ tự động nâng cấp lên TLS."
-      },
-      "smtpUser": {
-        "label": "Tên người dùng SMTP",
-        "description": "Để trống nếu máy chủ không cần đăng nhập."
-      },
-      "smtpPassword": {
-        "label": "Mật khẩu SMTP",
-        "description": "Được lưu trữ dưới dạng mã hóa."
-      },
-      "smtpFrom": {
-        "label": "Từ địa chỉ",
-        "description": "Thông báo đến từ nguồn nào?",
-        "placeholder": "Termix <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "Cửa sổ bật lên cảnh báo",
-        "description": "Những thông báo mới nào xuất hiện khi bạn sử dụng Termix? Chúng luôn được gửi đến hộp thư đến.",
-        "all": "Tất cả cảnh báo",
-        "warning": "Cảnh báo và thông tin quan trọng",
-        "critical": "Chỉ quan trọng",
-        "off": "Không"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "Hộp thư đến",
-    "channels": "Kênh",
-    "rules": "Quy tắc giao hàng"
-  },
-  "severity": {
-    "info": "Thông tin",
-    "success": "Thành công",
-    "warning": "Cảnh báo",
-    "critical": "Phê bình"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "Mở",
-    "view": "Xem",
-    "unread": "Chưa đọc",
-    "deliveryFailed_one": "{{count}} kênh bị lỗi",
-    "deliveryFailed_other": "{{count}} kênh bị lỗi",
-    "markRead": "Đánh dấu là đã đọc",
-    "markUnread": "Đánh dấu là chưa đọc",
-    "markAllRead": "Đánh dấu tất cả là đã đọc",
-    "delete": "Xóa",
-    "clearRead": "Xóa thông báo đã đọc",
-    "cleared_one": "Đã xóa cảnh báo {{count}}",
-    "cleared_other": "Đã xóa {{count}} cảnh báo",
-    "filterAll": "Tất cả",
-    "filterUnread": "Chưa đọc",
-    "anySeverity": "Bất kỳ mức độ nghiêm trọng nào",
-    "anySource": "Bất kỳ nguồn nào",
-    "openAll": "Mở trong một tab",
-    "empty": "Chưa có thông báo nào.",
-    "emptyUnread": "Bạn đã nắm bắt được hết mọi thứ rồi.",
-    "loadMore": "Tải thêm"
-  },
-  "channels": {
-    "intro": "Các kênh là nơi các cảnh báo có thể được gửi ra ngoài Termix. Các quy tắc phân phối sẽ chọn những cảnh báo nào sử dụng các kênh đó.",
-    "add": "Thêm kênh",
-    "edit": "Chỉnh sửa kênh",
-    "test": "Gửi một bài kiểm tra",
-    "testSent": "Đã gửi cảnh báo thử nghiệm",
-    "testFailed": "Kiểm tra thất bại: {{error}}",
-    "deleteConfirm": "Xóa kênh \"{{name}}\"?",
-    "deleted": "Kênh đã bị xóa",
-    "empty": "Chưa có kênh nào.",
-    "enabled": "Đã bật",
-    "needsSave": "Kênh này cần được mở và lưu lại một lần nữa trước khi có thể gửi.",
-    "name": "Tên",
-    "nameRequired": "Tên là bắt buộc",
-    "type": "Loại",
-    "types": {
-      "webhook": "Webhook",
-      "ntfy": "ntfy",
-      "discord": "Discord",
-      "email": "Email"
-    },
-    "emailUnavailable": "Email cần có máy chủ SMTP, mà quản trị viên sẽ thiết lập trong phần cài đặt Thông báo.",
-    "webhookUrl": "URL",
-    "webhookHint": "Lấy nội dung JSON cho mỗi thông báo.",
-    "method": "Phương pháp",
-    "headers": "Tiêu đề",
-    "headersHint": "Mỗi mục một dòng, ví dụ: Tên: giá trị.",
-    "ntfyServer": "URL máy chủ",
-    "ntfyTopic": "Chủ đề",
-    "ntfyToken": "Mã truy cập (tùy chọn)",
-    "discordUrl": "URL webhook Discord",
-    "discordHint": "Bạn có thể chọn \"Integrations\" trong phần cài đặt kênh trên Discord.",
-    "discordUsername": "Tên hiển thị (tùy chọn)",
-    "discordAvatar": "URL ảnh đại diện (tùy chọn)",
-    "emailTo": "Gửi đến",
-    "emailHint": "Hãy sử dụng dấu phẩy để phân tách nhiều địa chỉ.",
-    "privateNetwork": "Cho phép địa chỉ mạng riêng",
-    "privateNetworkHint": "Chỉ hoạt động với các máy chủ mà quản trị viên cho phép trong danh sách điểm cuối riêng tư."
-  },
-  "rules": {
-    "intro": "Quy tắc phân phối sẽ gửi các thông báo phù hợp đến các kênh của bạn. Các thông báo này cũng luôn được lưu trữ trong hộp thư đến.",
-    "add": "Thêm quy tắc",
-    "edit": "Chỉnh sửa quy tắc",
-    "empty": "Hiện chưa có quy tắc nào, vì vậy thông báo chỉ hiển thị trong hộp thư đến.",
-    "needChannel": "Trước tiên hãy thêm kênh.",
-    "enabled": "Đã bật",
-    "name": "Tên",
-    "nameRequired": "Tên là bắt buộc",
-    "match": "Thông báo cần gửi",
-    "matchHint": "* Cho mọi thứ, tự động hóa.* Cho mọi thứ từ tự động hóa, hoặc một loại cụ thể nào đó.",
-    "minSeverity": "Ít nhất",
-    "channels": "Gửi đến",
-    "channelRequired": "Chọn ít nhất một kênh",
-    "deleteConfirm": "Xóa quy tắc \"{{name}}\"?",
-    "everything": "Mọi thứ",
-    "summary": "{{match}}, {{severity}} hoặc cao hơn, đến {{channels}}"
-  },
-  "actions": {
-    "cancel": "Hủy",
-    "save": "Lưu",
-    "saving": "Đang lưu...",
-    "delete": "Xóa"
-  },
-  "widget": {
-    "name": "Luồng cảnh báo",
-    "description": "Thông báo mới nhất của bạn, kèm theo cách nhanh để đánh dấu đã đọc.",
-    "maxItems": "Số lượng vật phẩm tối đa",
-    "showRead": "Hiển thị thông báo đã đọc",
-    "allClear": "Tất cả ổn",
-    "loading": "Đang tải..."
-  },
-  "plugin": {
-    "name": "Cảnh báo"
-  }
-}
diff --git a/plugins/alerts/locales/translated/zh_CN.json b/plugins/alerts/locales/translated/zh_CN.json
deleted file mode 100644
index 0521ff37e..000000000
--- a/plugins/alerts/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "告警"
-  },
-  "permissions": {
-    "use": {
-      "title": "使用提醒",
-      "description": "在收件箱中接收提醒，并将其发送到您自己的频道。"
-    }
-  },
-  "onboarding": {
-    "feature": "告警",
-    "featureDesc": "所有提醒都集中在一个收件箱中，您可以选择将其发送到 Discord、ntfy、电子邮件或 webhook。"
-  },
-  "settings": {
-    "group": {
-      "general": "常规",
-      "email": "邮箱"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Termix公告",
-        "description": "将 Termix 团队的新闻，例如安全通知和版本发布，发送到每个人的收件箱。"
-      },
-      "retentionDays": {
-        "label": "保持警报（天）",
-        "description": "所有收件箱中都会删除较旧的提醒邮件。"
-      },
-      "smtpHost": {
-        "label": "SMTP服务器",
-        "description": "需要用于电子邮件渠道。留空则关闭电子邮件功能。",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "SMTP端口",
-        "description": "通常使用 STARTTLS 的 587 端口或使用 TLS 的 465 端口。"
-      },
-      "smtpSecure": {
-        "label": "从一开始就使用TLS",
-        "description": "启用 465 端口。保持 587 端口关闭，该端口会自动升级到 TLS。"
-      },
-      "smtpUser": {
-        "label": "SMTP 用户名",
-        "description": "如果服务器不需要登录，请留空。"
-      },
-      "smtpPassword": {
-        "label": "SMTP密码",
-        "description": "已加密存储。"
-      },
-      "smtpFrom": {
-        "label": "来自地址",
-        "description": "发件人警报来自。",
-        "placeholder": "终端 <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "弹出式警报",
-        "description": "使用Termix时会弹出哪些新提醒？它们都会发送到您的收件箱。",
-        "all": "所有警报",
-        "warning": "警告和关键信息",
-        "critical": "仅限关键",
-        "off": "全不选"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "收件箱",
-    "channels": "通道",
-    "rules": "配送规则"
-  },
-  "severity": {
-    "info": "信息",
-    "success": "成功",
-    "warning": "警告",
-    "critical": "批判的"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "打开",
-    "view": "查看",
-    "unread": "未读",
-    "deliveryFailed_one": "{{count}} 通道失败",
-    "deliveryFailed_other": "{{count}} 通道失败",
-    "markRead": "标记为已读",
-    "markUnread": "标记为未读",
-    "markAllRead": "全部标记为已读",
-    "delete": "删除",
-    "clearRead": "删除已读提醒",
-    "cleared_one": "已删除 {{count}} 警报",
-    "cleared_other": "已删除 {{count}} 警报",
-    "filterAll": "全部",
-    "filterUnread": "未读",
-    "anySeverity": "任何严重程度",
-    "anySource": "任何来源",
-    "openAll": "在标签页中打开",
-    "empty": "目前尚未收到任何警报。",
-    "emptyUnread": "你们都跟上了。",
-    "loadMore": "加载更多"
-  },
-  "channels": {
-    "intro": "通道是警报可以发送到 Termix 外部的途径。发送规则决定哪些警报使用哪个通道。",
-    "add": "添加频道",
-    "edit": "编辑频道",
-    "test": "发送测试",
-    "testSent": "已发送测试警报",
-    "testFailed": "测试失败： {{error}}",
-    "deleteConfirm": "删除频道“{{name}}”？",
-    "deleted": "频道已删除",
-    "empty": "暂无频道。",
-    "enabled": "已启用",
-    "needsSave": "该通道需要重新打开并保存才能发送消息。",
-    "name": "名称",
-    "nameRequired": "名称为必填项",
-    "type": "类型",
-    "types": {
-      "webhook": "Webhook",
-      "ntfy": "ntfy",
-      "discord": "Discord",
-      "email": "邮箱"
-    },
-    "emailUnavailable": "电子邮件需要 SMTP 服务器，管理员可以在“警报”设置中进行设置。",
-    "webhookUrl": "URL",
-    "webhookHint": "获取每个警报的 JSON 正文。",
-    "method": "方法",
-    "headers": "标题",
-    "headersHint": "每行一个，格式为：名称:值。",
-    "ntfyServer": "服务器 URL",
-    "ntfyTopic": "主题",
-    "ntfyToken": "访问令牌（可选）",
-    "discordUrl": "Discord webhook URL",
-    "discordHint": "在 Discord 的频道设置中，位于“集成”下。",
-    "discordUsername": "显示名称（可选）",
-    "discordAvatar": "头像网址（可选）",
-    "emailTo": "发送至",
-    "emailHint": "多个地址之间用逗号分隔。",
-    "privateNetwork": "允许使用专用网络地址",
-    "privateNetworkHint": "仅适用于管理员允许添加到私有端点列表中的主机。"
-  },
-  "rules": {
-    "intro": "发送规则会将匹配的提醒发送到您的渠道。提醒也会始终保留在收件箱中。",
-    "add": "添加规则",
-    "edit": "编辑规则",
-    "empty": "目前还没有规则，所以提醒只会显示在收件箱中。",
-    "needChannel": "请先添加频道。",
-    "enabled": "已启用",
-    "name": "名称",
-    "nameRequired": "名称为必填项",
-    "match": "发送提醒",
-    "matchHint": "*适用于所有自动化操作。*适用于所有自动化操作，或某一特定类型。",
-    "minSeverity": "至少",
-    "channels": "发送至",
-    "channelRequired": "至少选择一个频道",
-    "deleteConfirm": "删除规则“{{name}}”？",
-    "everything": "一切",
-    "summary": "{{match}}、 {{severity}} 或更高，至 {{channels}}"
-  },
-  "actions": {
-    "cancel": "取消",
-    "save": "保存",
-    "saving": "保存中...",
-    "delete": "删除"
-  },
-  "widget": {
-    "name": "告警信息流",
-    "description": "您最新的提醒，以及快速标记为已读的功能。",
-    "maxItems": "最大物品数",
-    "showRead": "显示已读提醒",
-    "allClear": "一切正常",
-    "loading": "加载中..."
-  },
-  "plugin": {
-    "name": "告警"
-  }
-}
diff --git a/plugins/alerts/locales/translated/zh_TW.json b/plugins/alerts/locales/translated/zh_TW.json
deleted file mode 100644
index 8e8e24e21..000000000
--- a/plugins/alerts/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "nav": {
-    "alerts": "警示"
-  },
-  "permissions": {
-    "use": {
-      "title": "使用提醒",
-      "description": "在收件匣中接收提醒，並將其發送到您自己的頻道。"
-    }
-  },
-  "onboarding": {
-    "feature": "警示",
-    "featureDesc": "所有提醒都集中在一個收件匣中，您可以選擇將其發送到 Discord、ntfy、電子郵件或 webhook。"
-  },
-  "settings": {
-    "group": {
-      "general": "一般",
-      "email": "電子郵件"
-    },
-    "admin": {
-      "announcements": {
-        "label": "Termix公告",
-        "description": "將 Termix 團隊的新聞，例如安全通知和版本發布，發送到每個人的收件匣。"
-      },
-      "retentionDays": {
-        "label": "保持警報（天）",
-        "description": "所有收件匣中都會刪除較舊的提醒郵件。"
-      },
-      "smtpHost": {
-        "label": "SMTP伺服器",
-        "description": "需要用於電子郵件管道。留空則關閉電子郵件功能。",
-        "placeholder": "smtp.example.com"
-      },
-      "smtpPort": {
-        "label": "SMTP連接埠",
-        "description": "通常使用 STARTTLS 的 587 連接埠或使用 TLS 的 465 連接埠。"
-      },
-      "smtpSecure": {
-        "label": "從一開始就使用TLS",
-        "description": "啟用 465 連接埠。保持 587 連接埠關閉，該連接埠會自動升級至 TLS。"
-      },
-      "smtpUser": {
-        "label": "SMTP 使用者名稱",
-        "description": "如果伺服器不需要登錄，請留空。"
-      },
-      "smtpPassword": {
-        "label": "SMTP密碼",
-        "description": "已加密儲存。"
-      },
-      "smtpFrom": {
-        "label": "來自地址",
-        "description": "寄件者警報來自。",
-        "placeholder": "終端 <alerts@example.com>"
-      }
-    },
-    "user": {
-      "popups": {
-        "label": "彈出式警報",
-        "description": "使用Termix時會彈出哪些新提醒？它們都會發送到您的收件匣。",
-        "all": "所有警報",
-        "warning": "警告和關鍵訊息",
-        "critical": "僅限關鍵",
-        "off": "取消全選"
-      }
-    }
-  },
-  "sections": {
-    "inbox": "收件匣",
-    "channels": "通道",
-    "rules": "配送規則"
-  },
-  "severity": {
-    "info": "資訊",
-    "success": "成功",
-    "warning": "警告",
-    "critical": "批判的"
-  },
-  "inbox": {
-    "sourceTermix": "Termix",
-    "openLink": "開啟",
-    "view": "檢視",
-    "unread": "未讀",
-    "deliveryFailed_one": "{{count}} 頻道失敗",
-    "deliveryFailed_other": "{{count}} 頻道失敗",
-    "markRead": "標記為已讀",
-    "markUnread": "標記為未讀",
-    "markAllRead": "全部標記為已讀",
-    "delete": "刪除",
-    "clearRead": "刪除已讀提醒",
-    "cleared_one": "已刪除 {{count}} 警報",
-    "cleared_other": "已刪除 {{count}} 警報",
-    "filterAll": "全選",
-    "filterUnread": "未讀",
-    "anySeverity": "任何嚴重程度",
-    "anySource": "任何來源",
-    "openAll": "在標籤頁中開啟",
-    "empty": "目前尚未收到任何警報。",
-    "emptyUnread": "你們都跟上了。",
-    "loadMore": "加載更多"
-  },
-  "channels": {
-    "intro": "通道是警報可以發送到 Termix 外部的途徑。發送規則決定哪些警報使用哪個通道。",
-    "add": "新增頻道",
-    "edit": "編輯頻道",
-    "test": "發送測試",
-    "testSent": "已發送測試警報",
-    "testFailed": "測試失敗： {{error}}",
-    "deleteConfirm": "刪除頻道「{{name}}」？",
-    "deleted": "頻道已刪除",
-    "empty": "暫無頻道。",
-    "enabled": "已啟用",
-    "needsSave": "該通道需要重新打開並保存才能發送訊息。",
-    "name": "名稱",
-    "nameRequired": "名稱為必填",
-    "type": "類型",
-    "types": {
-      "webhook": "Webhook",
-      "ntfy": "ntfy",
-      "discord": "Discord",
-      "email": "電子郵件"
-    },
-    "emailUnavailable": "電子郵件需要 SMTP 伺服器，管理員可以在「警報」設定中進行設定。",
-    "webhookUrl": "URL",
-    "webhookHint": "取得每個警報的 JSON 正文。",
-    "method": "方法",
-    "headers": "標題",
-    "headersHint": "每行一個，格式為：名稱:值。",
-    "ntfyServer": "伺服器 URL",
-    "ntfyTopic": "主題",
-    "ntfyToken": "訪問令牌（可選）",
-    "discordUrl": "Discord webhook URL",
-    "discordHint": "在 Discord 的頻道設定中，位於「整合」下方。",
-    "discordUsername": "顯示名稱（可選）",
-    "discordAvatar": "頭像網址（可選）",
-    "emailTo": "發送至",
-    "emailHint": "多個地址之間以逗號分隔。",
-    "privateNetwork": "允許使用專用網路位址",
-    "privateNetworkHint": "僅適用於管理員允許新增至私有端點清單中的主機。"
-  },
-  "rules": {
-    "intro": "發送規則會將符合的提醒傳送到您的頻道。提醒也會始終保留在收件匣中。",
-    "add": "新增規則",
-    "edit": "編輯規則",
-    "empty": "目前還沒有規則，所以提醒只會顯示在收件匣中。",
-    "needChannel": "請先新增頻道。",
-    "enabled": "已啟用",
-    "name": "名稱",
-    "nameRequired": "名稱為必填",
-    "match": "發送提醒",
-    "matchHint": "*適用於所有自動化操作。 *適用於所有自動化操作，或某一特定類型。",
-    "minSeverity": "至少",
-    "channels": "發送至",
-    "channelRequired": "至少選擇一個頻道",
-    "deleteConfirm": "刪除規則“{{name}}”？",
-    "everything": "一切",
-    "summary": "{{match}}、 {{severity}} 或更高，至 {{channels}}"
-  },
-  "actions": {
-    "cancel": "取消",
-    "save": "儲存",
-    "saving": "儲存中…",
-    "delete": "刪除"
-  },
-  "widget": {
-    "name": "警報動態",
-    "description": "您最新的提醒，以及快速標記為已讀的功能。",
-    "maxItems": "最大物品數",
-    "showRead": "顯示已讀提醒",
-    "allClear": "一切正常",
-    "loading": "載入中..."
-  },
-  "plugin": {
-    "name": "警示"
-  }
-}
diff --git a/plugins/alerts/manifest.json b/plugins/alerts/manifest.json
deleted file mode 100644
index c96c97764..000000000
--- a/plugins/alerts/manifest.json
+++ /dev/null
@@ -1,149 +0,0 @@
-{
-  "id": "alerts",
-  "name": "Alerts",
-  "version": "1.0.0",
-  "description": "One inbox for every alert, with delivery to webhooks, ntfy, Discord and email.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Monitoring",
-  "icon": "Bell",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "db:own",
-    "events:core",
-    "network:outbound",
-    "network:serve",
-    "notify:hub",
-    "notify:send",
-    "secrets:own",
-    "settings:read-core",
-    "ui:surface"
-  ],
-  "contributes": {
-    "tabs": [
-      {
-        "id": "alerts",
-        "titleKey": "nav.alerts",
-        "icon": "Bell",
-        "openFrom": ["rail", "palette"]
-      }
-    ],
-    "permissions": [
-      {
-        "name": "use",
-        "titleKey": "permissions.use.title",
-        "descriptionKey": "permissions.use.description",
-        "defaultRoles": ["admin", "user"]
-      }
-    ],
-    "settings": {
-      "admin": [
-        {
-          "key": "announcements",
-          "type": "boolean",
-          "group": "settings.group.general",
-          "labelKey": "settings.admin.announcements.label",
-          "descriptionKey": "settings.admin.announcements.description",
-          "default": true
-        },
-        {
-          "key": "retentionDays",
-          "type": "number",
-          "group": "settings.group.general",
-          "labelKey": "settings.admin.retentionDays.label",
-          "descriptionKey": "settings.admin.retentionDays.description",
-          "default": 90,
-          "min": 1,
-          "max": 3650
-        },
-        {
-          "key": "smtpHost",
-          "type": "string",
-          "group": "settings.group.email",
-          "labelKey": "settings.admin.smtpHost.label",
-          "descriptionKey": "settings.admin.smtpHost.description",
-          "placeholderKey": "settings.admin.smtpHost.placeholder",
-          "default": ""
-        },
-        {
-          "key": "smtpPort",
-          "type": "number",
-          "group": "settings.group.email",
-          "labelKey": "settings.admin.smtpPort.label",
-          "descriptionKey": "settings.admin.smtpPort.description",
-          "default": 587,
-          "min": 1,
-          "max": 65535
-        },
-        {
-          "key": "smtpSecure",
-          "type": "boolean",
-          "group": "settings.group.email",
-          "labelKey": "settings.admin.smtpSecure.label",
-          "descriptionKey": "settings.admin.smtpSecure.description",
-          "default": false
-        },
-        {
-          "key": "smtpUser",
-          "type": "string",
-          "group": "settings.group.email",
-          "labelKey": "settings.admin.smtpUser.label",
-          "descriptionKey": "settings.admin.smtpUser.description",
-          "default": ""
-        },
-        {
-          "key": "smtpPassword",
-          "type": "secret",
-          "group": "settings.group.email",
-          "labelKey": "settings.admin.smtpPassword.label",
-          "descriptionKey": "settings.admin.smtpPassword.description"
-        },
-        {
-          "key": "smtpFrom",
-          "type": "string",
-          "group": "settings.group.email",
-          "labelKey": "settings.admin.smtpFrom.label",
-          "descriptionKey": "settings.admin.smtpFrom.description",
-          "placeholderKey": "settings.admin.smtpFrom.placeholder",
-          "default": ""
-        }
-      ],
-      "user": [
-        {
-          "key": "popups",
-          "type": "select",
-          "labelKey": "settings.user.popups.label",
-          "descriptionKey": "settings.user.popups.description",
-          "default": "warning",
-          "options": [
-            {
-              "value": "all",
-              "labelKey": "settings.user.popups.all"
-            },
-            {
-              "value": "warning",
-              "labelKey": "settings.user.popups.warning"
-            },
-            {
-              "value": "critical",
-              "labelKey": "settings.user.popups.critical"
-            },
-            {
-              "value": "off",
-              "labelKey": "settings.user.popups.off"
-            }
-          ]
-        }
-      ]
-    },
-    "uses": ["homepage.widgets"]
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"]
-}
diff --git a/plugins/alerts/migrations/mysql/0001_create_alerts.sql b/plugins/alerts/migrations/mysql/0001_create_alerts.sql
deleted file mode 100644
index 8a5b10795..000000000
--- a/plugins/alerts/migrations/mysql/0001_create_alerts.sql
+++ /dev/null
@@ -1,54 +0,0 @@
--- alerts 0001: create_alerts
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `p_alerts_channels` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `name` text NOT NULL,
-  `type` varchar(32) NOT NULL,
-  `config` text,
-  `enabled` boolean NOT NULL DEFAULT true,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-CREATE INDEX `idx_alerts_channels_user` ON `p_alerts_channels` (`user_id`);
-CREATE TABLE IF NOT EXISTS `p_alerts_items` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `source` varchar(64) NOT NULL,
-  `category` varchar(128) NOT NULL,
-  `severity` varchar(16) NOT NULL,
-  `title` text NOT NULL,
-  `body` text,
-  `link` text,
-  `context` text,
-  `dedupe_key` varchar(255),
-  `deliveries` text,
-  `read_at` varchar(255),
-  `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-CREATE INDEX `idx_alerts_items_user` ON `p_alerts_items` (`user_id`, `created_at`);
-CREATE INDEX `idx_alerts_items_unread` ON `p_alerts_items` (`user_id`, `read_at`);
-CREATE INDEX `idx_alerts_items_dedupe` ON `p_alerts_items` (`user_id`, `dedupe_key`);
-CREATE TABLE IF NOT EXISTS `p_alerts_rules` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `name` text NOT NULL,
-  `pattern` varchar(128) NOT NULL DEFAULT '*',
-  `min_severity` varchar(16) NOT NULL DEFAULT 'warning',
-  `channel_ids` text NOT NULL,
-  `enabled` boolean NOT NULL DEFAULT true,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-CREATE INDEX `idx_alerts_rules_user` ON `p_alerts_rules` (`user_id`);
-CREATE TABLE IF NOT EXISTS `dismissed_alerts` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `alert_id` text NOT NULL,
-  `dismissed_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `dismissed_alerts` TO `p_alerts_dismissed`;
diff --git a/plugins/alerts/migrations/postgres/0001_create_alerts.sql b/plugins/alerts/migrations/postgres/0001_create_alerts.sql
deleted file mode 100644
index 7e1d320fc..000000000
--- a/plugins/alerts/migrations/postgres/0001_create_alerts.sql
+++ /dev/null
@@ -1,55 +0,0 @@
--- alerts 0001: create_alerts
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "p_alerts_channels" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "name" text NOT NULL,
-  "type" varchar(32) NOT NULL,
-  "config" text,
-  "enabled" boolean NOT NULL DEFAULT true,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_alerts_channels_user" ON "p_alerts_channels" ("user_id");
-CREATE TABLE IF NOT EXISTS "p_alerts_items" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "source" varchar(64) NOT NULL,
-  "category" varchar(128) NOT NULL,
-  "severity" varchar(16) NOT NULL,
-  "title" text NOT NULL,
-  "body" text,
-  "link" text,
-  "context" text,
-  "dedupe_key" varchar(255),
-  "deliveries" text,
-  "read_at" varchar(255),
-  "created_at" varchar(255) NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_alerts_items_user" ON "p_alerts_items" ("user_id", "created_at");
-CREATE INDEX IF NOT EXISTS "idx_alerts_items_unread" ON "p_alerts_items" ("user_id", "read_at");
-CREATE INDEX IF NOT EXISTS "idx_alerts_items_dedupe" ON "p_alerts_items" ("user_id", "dedupe_key");
-CREATE TABLE IF NOT EXISTS "p_alerts_rules" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "name" text NOT NULL,
-  "pattern" varchar(128) NOT NULL DEFAULT '*',
-  "min_severity" varchar(16) NOT NULL DEFAULT 'warning',
-  "channel_ids" text NOT NULL,
-  "enabled" boolean NOT NULL DEFAULT true,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_alerts_rules_user" ON "p_alerts_rules" ("user_id");
-CREATE TABLE IF NOT EXISTS "dismissed_alerts" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "alert_id" text NOT NULL,
-  "dismissed_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_dismissed_alerts_user_id" ON "dismissed_alerts" ("user_id");
-ALTER TABLE "dismissed_alerts" RENAME TO "p_alerts_dismissed";
diff --git a/plugins/alerts/migrations/snapshot.json b/plugins/alerts/migrations/snapshot.json
deleted file mode 100644
index 74162297d..000000000
--- a/plugins/alerts/migrations/snapshot.json
+++ /dev/null
@@ -1,203 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "channels": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "name": {
-          "type": "text",
-          "notNull": true
-        },
-        "type": {
-          "type": "varchar",
-          "length": 32,
-          "notNull": true
-        },
-        "config": {
-          "type": "encryptedText"
-        },
-        "enabled": {
-          "type": "boolean",
-          "notNull": true,
-          "defaultValue": true
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "updatedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_alerts_channels_user",
-          "columns": ["userId"]
-        }
-      ]
-    },
-    "items": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "source": {
-          "type": "varchar",
-          "length": 64,
-          "notNull": true
-        },
-        "category": {
-          "type": "varchar",
-          "length": 128,
-          "notNull": true
-        },
-        "severity": {
-          "type": "varchar",
-          "length": 16,
-          "notNull": true
-        },
-        "title": {
-          "type": "text",
-          "notNull": true
-        },
-        "body": {
-          "type": "text"
-        },
-        "link": {
-          "type": "text"
-        },
-        "context": {
-          "type": "text"
-        },
-        "dedupeKey": {
-          "type": "varchar",
-          "length": 255
-        },
-        "deliveries": {
-          "type": "text"
-        },
-        "readAt": {
-          "type": "timestamp"
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_alerts_items_user",
-          "columns": ["userId", "createdAt"]
-        },
-        {
-          "name": "idx_alerts_items_unread",
-          "columns": ["userId", "readAt"]
-        },
-        {
-          "name": "idx_alerts_items_dedupe",
-          "columns": ["userId", "dedupeKey"]
-        }
-      ]
-    },
-    "rules": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "name": {
-          "type": "text",
-          "notNull": true
-        },
-        "pattern": {
-          "type": "varchar",
-          "length": 128,
-          "notNull": true,
-          "defaultValue": "*"
-        },
-        "minSeverity": {
-          "type": "varchar",
-          "length": 16,
-          "notNull": true,
-          "defaultValue": "warning"
-        },
-        "channelIds": {
-          "type": "text",
-          "notNull": true
-        },
-        "enabled": {
-          "type": "boolean",
-          "notNull": true,
-          "defaultValue": true
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_alerts_rules_user",
-          "columns": ["userId"]
-        }
-      ]
-    },
-    "dismissed": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "alertId": {
-          "type": "text",
-          "notNull": true
-        },
-        "dismissedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_dismissed_alerts_user_id",
-          "columns": ["userId"]
-        }
-      ],
-      "adopts": "dismissed_alerts"
-    }
-  }
-}
diff --git a/plugins/alerts/migrations/sqlite/0001_create_alerts.sql b/plugins/alerts/migrations/sqlite/0001_create_alerts.sql
deleted file mode 100644
index 63e278dc7..000000000
--- a/plugins/alerts/migrations/sqlite/0001_create_alerts.sql
+++ /dev/null
@@ -1,55 +0,0 @@
--- alerts 0001: create_alerts
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "p_alerts_channels" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "name" text NOT NULL,
-  "type" text NOT NULL,
-  "config" text,
-  "enabled" integer NOT NULL DEFAULT 1,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_alerts_channels_user" ON "p_alerts_channels" ("user_id");
-CREATE TABLE IF NOT EXISTS "p_alerts_items" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "source" text NOT NULL,
-  "category" text NOT NULL,
-  "severity" text NOT NULL,
-  "title" text NOT NULL,
-  "body" text,
-  "link" text,
-  "context" text,
-  "dedupe_key" text,
-  "deliveries" text,
-  "read_at" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_alerts_items_user" ON "p_alerts_items" ("user_id", "created_at");
-CREATE INDEX IF NOT EXISTS "idx_alerts_items_unread" ON "p_alerts_items" ("user_id", "read_at");
-CREATE INDEX IF NOT EXISTS "idx_alerts_items_dedupe" ON "p_alerts_items" ("user_id", "dedupe_key");
-CREATE TABLE IF NOT EXISTS "p_alerts_rules" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "name" text NOT NULL,
-  "pattern" text NOT NULL DEFAULT '*',
-  "min_severity" text NOT NULL DEFAULT 'warning',
-  "channel_ids" text NOT NULL,
-  "enabled" integer NOT NULL DEFAULT 1,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_alerts_rules_user" ON "p_alerts_rules" ("user_id");
-CREATE TABLE IF NOT EXISTS "dismissed_alerts" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "alert_id" text NOT NULL,
-  "dismissed_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_dismissed_alerts_user_id" ON "dismissed_alerts" ("user_id");
-ALTER TABLE "dismissed_alerts" RENAME TO "p_alerts_dismissed";
diff --git a/plugins/alerts/package.json b/plugins/alerts/package.json
deleted file mode 100644
index 8ee908026..000000000
--- a/plugins/alerts/package.json
+++ /dev/null
@@ -1,34 +0,0 @@
-{
-  "name": "@termix-plugin/alerts",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "lucide-react": "^1.33.0",
-    "nodemailer": "^10.0.10"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "react": "^19.2.8",
-    "sonner": "^2.0.8"
-  }
-}
diff --git a/plugins/alerts/src/backend/announcements.ts b/plugins/alerts/src/backend/announcements.ts
deleted file mode 100644
index a94f76e64..000000000
--- a/plugins/alerts/src/backend/announcements.ts
+++ /dev/null
@@ -1,164 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import {
-  ANNOUNCEMENT_SOURCE,
-  type AlertItem,
-  type Severity,
-} from "../types.js";
-import type { AlertsRepository } from "./repository.js";
-
-export const FEED_URL =
-  "https://raw.githubusercontent.com/Termix-SSH/Docs/main/termix-alerts.json";
-export const REFRESH_MS = 30 * 60 * 1000;
-export const ANNOUNCEMENT_CATEGORY = "termix.announcement";
-
-/** One entry of termix-alerts.json, as the Docs repo publishes it. */
-export interface Announcement {
-  id: string;
-  title: string;
-  message: string;
-  expiresAt?: string;
-  priority?: "low" | "medium" | "high" | "critical";
-  type?: "info" | "warning" | "error" | "success";
-  actionUrl?: string;
-  actionText?: string;
-}
-
-export function announcementSeverity(entry: Announcement): Severity {
-  if (entry.priority === "critical" || entry.type === "error") {
-    return "critical";
-  }
-  if (entry.type === "warning" || entry.priority === "high") return "warning";
-  if (entry.type === "success") return "success";
-  return "info";
-}
-
-export function parseFeed(raw: unknown, now = Date.now()): Announcement[] {
-  if (!Array.isArray(raw)) return [];
-  return raw.filter((entry): entry is Announcement => {
-    if (!entry || typeof entry !== "object") return false;
-    const candidate = entry as Record<string, unknown>;
-    if (typeof candidate.id !== "string" || !candidate.id) return false;
-    if (typeof candidate.title !== "string") return false;
-    if (typeof candidate.expiresAt === "string") {
-      const expires = Date.parse(candidate.expiresAt);
-      if (Number.isFinite(expires) && expires <= now) return false;
-    }
-    return true;
-  });
-}
-
-const dedupeKey = (id: string) => `announcement:${id}`;
-
-/**
- * Termix announcements from the Docs repo, brought into each user's inbox
- * the first time they look after one is published. A user who deletes one
- * never gets it back.
- */
-export function createAnnouncements(
-  ctx: PluginContext,
-  repository: AlertsRepository,
-) {
-  let feed: Announcement[] = [];
-  let fetchedAt = 0;
-  let refreshing: Promise<void> | null = null;
-  const syncing = new Map<string, Promise<AlertItem[]>>();
-
-  async function enabled(): Promise<boolean> {
-    return (await ctx.settings.get<boolean>("announcements")) !== false;
-  }
-
-  async function refresh(): Promise<void> {
-    if (refreshing) return refreshing;
-    refreshing = (async () => {
-      try {
-        const response = await ctx.fetch(FEED_URL, {
-          headers: {
-            Accept: "application/json",
-            "User-Agent": "TermixAlertChecker/1.0",
-          },
-          timeoutMs: 15_000,
-        });
-        if (!response.ok) throw new Error(`HTTP ${response.status}`);
-        feed = parseFeed(await response.json());
-      } catch (error) {
-        ctx.log.warn(
-          `Could not fetch Termix announcements: ${error instanceof Error ? error.message : String(error)}`,
-        );
-      } finally {
-        fetchedAt = Date.now();
-        refreshing = null;
-      }
-    })();
-    return refreshing;
-  }
-
-  async function current(): Promise<Announcement[]> {
-    if (!(await enabled())) return [];
-    if (Date.now() - fetchedAt > REFRESH_MS) await refresh();
-    return parseFeed(feed);
-  }
-
-  async function syncUser(userId: string): Promise<AlertItem[]> {
-    const added: AlertItem[] = [];
-    const active = await current();
-    if (active.length === 0) return added;
-    const dismissed = await repository.dismissedIds(userId);
-    for (const entry of active) {
-      if (dismissed.has(entry.id)) continue;
-      if (await repository.hasItemWithKey(userId, dedupeKey(entry.id))) {
-        continue;
-      }
-      added.push(
-        await repository.insertItem({
-          userId,
-          source: ANNOUNCEMENT_SOURCE,
-          category: ANNOUNCEMENT_CATEGORY,
-          severity: announcementSeverity(entry),
-          title: entry.title.slice(0, 200),
-          body: typeof entry.message === "string" ? entry.message : null,
-          link:
-            typeof entry.actionUrl === "string" &&
-            /^https?:\/\//i.test(entry.actionUrl)
-              ? { url: entry.actionUrl }
-              : null,
-          context: {
-            announcementId: entry.id,
-            ...(entry.actionText ? { actionText: entry.actionText } : {}),
-          },
-          dedupeKey: dedupeKey(entry.id),
-        }),
-      );
-    }
-    return added;
-  }
-
-  return {
-    refresh,
-
-    /** Adds any announcement the user has not seen yet. Returns what was added. */
-    sync(userId: string): Promise<AlertItem[]> {
-      const running = syncing.get(userId);
-      if (running) return running;
-      const run = syncUser(userId)
-        .catch((error) => {
-          ctx.log.warn(
-            `Could not add announcements to the inbox: ${error instanceof Error ? error.message : String(error)}`,
-          );
-          return [] as AlertItem[];
-        })
-        .finally(() => syncing.delete(userId));
-      syncing.set(userId, run);
-      return run;
-    },
-
-    /** Remembers that the user removed an announcement from their inbox. */
-    async forget(userId: string, item: AlertItem): Promise<void> {
-      const id = item.context?.announcementId;
-      if (item.source === ANNOUNCEMENT_SOURCE && typeof id === "string") {
-        await repository.dismiss(userId, id);
-      }
-    },
-  };
-}
-
-export type Announcements = ReturnType<typeof createAnnouncements>;
diff --git a/plugins/alerts/src/backend/hub.ts b/plugins/alerts/src/backend/hub.ts
deleted file mode 100644
index 44751f8de..000000000
--- a/plugins/alerts/src/backend/hub.ts
+++ /dev/null
@@ -1,193 +0,0 @@
-import type {
-  PluginNotification,
-  PluginNotifyHub,
-  PluginNotifyResult,
-} from "@termix/plugin-sdk/backend";
-import {
-  isSeverity,
-  matchesCategory,
-  severityRank,
-  type AlertLink,
-  type DeliveryResult,
-} from "../types.js";
-import type { AlertsRepository, DeliverableChannel } from "./repository.js";
-import {
-  sendToChannel,
-  type OutgoingAlert,
-  type SenderDeps,
-} from "./senders.js";
-import type { AlertStream } from "./stream.js";
-
-const MAX_TITLE = 200;
-const MAX_BODY = 4000;
-const MAX_CONTEXT = 8000;
-const TAB_ID = /^[a-z0-9][a-z0-9._-]{0,63}$/i;
-
-export interface HubDeps {
-  repository: AlertsRepository;
-  stream: AlertStream;
-  senders: SenderDeps;
-}
-
-function clip(value: unknown, max: number): string {
-  return typeof value === "string" ? value.trim().slice(0, max) : "";
-}
-
-export function cleanLink(link: unknown): AlertLink | null {
-  if (!link || typeof link !== "object") return null;
-  const { tab, url } = link as Record<string, unknown>;
-  const clean: AlertLink = {};
-  if (typeof tab === "string" && TAB_ID.test(tab)) clean.tab = tab;
-  if (typeof url === "string" && /^https?:\/\/\S+$/i.test(url.trim())) {
-    clean.url = url.trim().slice(0, 2000);
-  }
-  return clean.tab || clean.url ? clean : null;
-}
-
-function cleanContext(context: unknown): Record<string, unknown> | null {
-  if (!context || typeof context !== "object" || Array.isArray(context)) {
-    return null;
-  }
-  try {
-    const text = JSON.stringify(context);
-    return text.length <= MAX_CONTEXT
-      ? (JSON.parse(text) as Record<string, unknown>)
-      : null;
-  } catch {
-    return null;
-  }
-}
-
-/** Sends to each channel and reports how each one went. */
-export async function deliverToChannels(
-  targets: DeliverableChannel[],
-  alert: OutgoingAlert,
-  senders: SenderDeps,
-): Promise<DeliveryResult[]> {
-  const results: DeliveryResult[] = [];
-  for (const channel of targets) {
-    if (!channel.config) {
-      results.push({
-        channelId: channel.id,
-        name: channel.name,
-        ok: false,
-        error: "Channel needs to be saved again before it can send",
-      });
-      continue;
-    }
-    try {
-      await sendToChannel(
-        { type: channel.type, config: channel.config },
-        alert,
-        senders,
-      );
-      results.push({ channelId: channel.id, name: channel.name, ok: true });
-    } catch (error) {
-      results.push({
-        channelId: channel.id,
-        name: channel.name,
-        ok: false,
-        error: error instanceof Error ? error.message : String(error),
-      });
-    }
-  }
-  return results;
-}
-
-export function createHub(deps: HubDeps): PluginNotifyHub {
-  const { repository, stream, senders } = deps;
-
-  async function deliverOne(
-    userId: string,
-    source: string,
-    notification: PluginNotification,
-    result: PluginNotifyResult,
-  ): Promise<void> {
-    const severity = isSeverity(notification.severity)
-      ? notification.severity
-      : "warning";
-    const category = clip(notification.category, 128) || source;
-    const dedupeKey = clip(notification.dedupeKey, 255) || null;
-    if (dedupeKey && (await repository.hasUnreadWithKey(userId, dedupeKey))) {
-      return;
-    }
-
-    const title = clip(notification.title, MAX_TITLE) || category;
-    const body = clip(notification.body, MAX_BODY);
-    const link = cleanLink(notification.link);
-    const context = cleanContext(notification.context);
-    const item = await repository.insertItem({
-      userId,
-      source,
-      category,
-      severity,
-      title,
-      body: body || null,
-      link,
-      context,
-      dedupeKey,
-    });
-    result.recipients++;
-    stream.publish(userId, "item", item);
-    stream.publish(userId, "unread", {
-      count: await repository.unreadCount(userId),
-    });
-
-    const wanted = new Set<number>(
-      (notification.channelIds ?? []).filter(Number.isInteger),
-    );
-    for (const rule of await repository.listRules(userId)) {
-      if (!rule.enabled) continue;
-      if (severityRank(severity) < severityRank(rule.minSeverity)) continue;
-      if (!matchesCategory(rule.match, category)) continue;
-      for (const id of rule.channelIds) wanted.add(id);
-    }
-    if (wanted.size === 0) return;
-
-    const targets = (await repository.deliverableChannels(userId)).filter(
-      (channel) => channel.enabled && wanted.has(channel.id),
-    );
-    if (targets.length === 0) return;
-
-    const deliveries = await deliverToChannels(
-      targets,
-      { title, body, severity, category, source, link, context },
-      senders,
-    );
-    for (const delivery of deliveries) {
-      if (delivery.ok) result.delivered++;
-      else {
-        result.failures.push({
-          channelId: delivery.channelId,
-          name: delivery.name,
-          error: delivery.error ?? "",
-        });
-      }
-    }
-    await repository.setDeliveries(item.id, deliveries);
-    stream.publish(userId, "item", { ...item, deliveries });
-  }
-
-  return {
-    async deliver({ source, recipients, notification }) {
-      const result: PluginNotifyResult = {
-        recipients: 0,
-        delivered: 0,
-        failures: [],
-      };
-      for (const userId of new Set(recipients)) {
-        await deliverOne(userId, source, notification, result);
-      }
-      return result;
-    },
-
-    async channels(userId) {
-      return (await repository.listChannels(userId)).map((channel) => ({
-        id: channel.id,
-        name: channel.name,
-        type: channel.type,
-        enabled: channel.enabled,
-      }));
-    },
-  };
-}
diff --git a/plugins/alerts/src/backend/index.ts b/plugins/alerts/src/backend/index.ts
deleted file mode 100644
index 89ccab848..000000000
--- a/plugins/alerts/src/backend/index.ts
+++ /dev/null
@@ -1,84 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { createAnnouncements, REFRESH_MS } from "./announcements.js";
-import { createHub } from "./hub.js";
-import { readSmtp, sendMail } from "./mail.js";
-import { createAlertsRepository } from "./repository.js";
-import { registerRoutes } from "./routes.js";
-import type { SenderDeps } from "./senders.js";
-import { createAlertStream } from "./stream.js";
-
-/** The admin allowlist of private hosts a channel may reach. */
-const PRIVATE_ALLOWLIST_KEY = "notification_private_endpoint_allowlist";
-const PRUNE_MS = 6 * 60 * 60 * 1000;
-const DAY_MS = 24 * 60 * 60 * 1000;
-
-export function parseAllowlist(raw: unknown): string[] {
-  if (typeof raw !== "string" || !raw) return [];
-  try {
-    const value = JSON.parse(raw);
-    return Array.isArray(value)
-      ? value
-          .filter((entry): entry is string => typeof entry === "string")
-          .map((entry) => entry.trim().toLowerCase())
-          .filter(Boolean)
-      : [];
-  } catch {
-    return [];
-  }
-}
-
-export async function activate(ctx: PluginContext) {
-  const repository = await createAlertsRepository(ctx.db, ctx.secrets);
-  const stream = createAlertStream();
-  ctx.disposables.add(() => stream.closeAll());
-
-  const senders: SenderDeps = {
-    fetch: ctx.fetch,
-    privateAllowlist: async () =>
-      parseAllowlist(await ctx.settings.readCore(PRIVATE_ALLOWLIST_KEY)),
-    smtp: () => readSmtp(ctx),
-    sendMail,
-  };
-  const announcements = createAnnouncements(ctx, repository);
-
-  ctx.notify.serve(createHub({ repository, stream, senders }));
-
-  registerRoutes(ctx.http.router<Router>(), {
-    ctx,
-    repository,
-    stream,
-    senders,
-    announcements,
-  });
-
-  ctx.events.on("user.data_wiped", async (payload) => {
-    const userId = (payload as { userId?: string } | undefined)?.userId;
-    if (userId) await repository.wipeUser(userId);
-  });
-
-  const prune = async () => {
-    const days = Number(await ctx.settings.get("retentionDays"));
-    const keep = Number.isFinite(days) && days >= 1 ? days : 90;
-    await repository.pruneItems(
-      new Date(Date.now() - keep * DAY_MS).toISOString(),
-    );
-  };
-  ctx.schedule.after(60_000, prune);
-  ctx.schedule.every(PRUNE_MS, prune);
-
-  // Users with the app open get a new announcement without reloading.
-  ctx.schedule.every(REFRESH_MS, async () => {
-    await announcements.refresh();
-    for (const userId of stream.users()) {
-      const added = await announcements.sync(userId);
-      if (added.length === 0) continue;
-      for (const item of added) stream.publish(userId, "item", item);
-      stream.publish(userId, "unread", {
-        count: await repository.unreadCount(userId),
-      });
-    }
-  });
-}
-
-export async function deactivate() {}
diff --git a/plugins/alerts/src/backend/mail.ts b/plugins/alerts/src/backend/mail.ts
deleted file mode 100644
index 9f695a265..000000000
--- a/plugins/alerts/src/backend/mail.ts
+++ /dev/null
@@ -1,46 +0,0 @@
-import nodemailer from "nodemailer";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { SendMail, SmtpSettings } from "./senders.js";
-
-const str = (value: unknown) => (typeof value === "string" ? value.trim() : "");
-
-/** The admin's SMTP server, or null while it is not set up. */
-export async function readSmtp(
-  ctx: PluginContext,
-): Promise<SmtpSettings | null> {
-  const all = await ctx.settings.getAll("admin");
-  const host = str(all.smtpHost);
-  const from = str(all.smtpFrom);
-  if (!host || !from) return null;
-  const port = Number(all.smtpPort);
-  return {
-    host,
-    port: Number.isInteger(port) && port > 0 ? port : 587,
-    secure: all.smtpSecure === true,
-    user: str(all.smtpUser),
-    password: typeof all.smtpPassword === "string" ? all.smtpPassword : "",
-    from,
-  };
-}
-
-export const sendMail: SendMail = async (smtp, message) => {
-  const transport = nodemailer.createTransport({
-    host: smtp.host,
-    port: smtp.port,
-    secure: smtp.secure,
-    auth: smtp.user ? { user: smtp.user, pass: smtp.password } : undefined,
-    connectionTimeout: 15_000,
-    greetingTimeout: 15_000,
-    socketTimeout: 30_000,
-  });
-  try {
-    await transport.sendMail({
-      from: smtp.from,
-      to: message.to.join(", "),
-      subject: message.subject,
-      text: message.text,
-    });
-  } finally {
-    transport.close();
-  }
-};
diff --git a/plugins/alerts/src/backend/repository.ts b/plugins/alerts/src/backend/repository.ts
deleted file mode 100644
index 41358df4f..000000000
--- a/plugins/alerts/src/backend/repository.ts
+++ /dev/null
@@ -1,552 +0,0 @@
-import {
-  and,
-  desc,
-  eq,
-  inArray,
-  isNotNull,
-  isNull,
-  lt,
-  sql,
-} from "drizzle-orm";
-import type { PluginDatabase, PluginSecrets } from "@termix/plugin-sdk/backend";
-import {
-  CHANNEL_TYPES,
-  isSeverity,
-  type AlertItem,
-  type AlertLink,
-  type AlertRule,
-  type ChannelDetail,
-  type ChannelSummary,
-  type ChannelType,
-  type DeliveryResult,
-  type Severity,
-} from "../types.js";
-import {
-  channels as channelsDef,
-  dismissed as dismissedDef,
-  items as itemsDef,
-  rules as rulesDef,
-} from "./tables.js";
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// Tables come from ctx.db.define, which the SDK hands back untyped, and the
-// drizzle handle is the server's own. Typed at this module's edge instead.
-type Table = any;
-type Drizzle = any;
-type Row = Record<string, any>;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export interface NewItem {
-  userId: string;
-  source: string;
-  category: string;
-  severity: Severity;
-  title: string;
-  body?: string | null;
-  link?: AlertLink | null;
-  context?: Record<string, unknown> | null;
-  dedupeKey?: string | null;
-  createdAt?: string;
-}
-
-export interface ItemFilter {
-  unread?: boolean;
-  source?: string;
-  severity?: Severity;
-  limit?: number;
-  beforeId?: number;
-}
-
-/** A channel with its config opened, for delivery. */
-export interface DeliverableChannel {
-  id: number;
-  name: string;
-  type: ChannelType;
-  enabled: boolean;
-  config: Record<string, unknown> | null;
-}
-
-export type AlertsRepository = Awaited<
-  ReturnType<typeof createAlertsRepository>
->;
-
-type Sealer = Pick<PluginSecrets, "seal" | "unseal">;
-
-function parseJson<T>(value: unknown): T | null {
-  if (typeof value !== "string" || !value) return null;
-  try {
-    return JSON.parse(value) as T;
-  } catch {
-    return null;
-  }
-}
-
-function asChannelType(value: unknown): ChannelType {
-  return (CHANNEL_TYPES as readonly string[]).includes(String(value))
-    ? (value as ChannelType)
-    : "webhook";
-}
-
-function toItem(row: Row): AlertItem {
-  return {
-    id: Number(row.id),
-    source: row.source,
-    category: row.category,
-    severity: isSeverity(row.severity) ? row.severity : "info",
-    title: row.title,
-    body: row.body ?? null,
-    link: parseJson<AlertLink>(row.link),
-    context: parseJson<Record<string, unknown>>(row.context),
-    deliveries: parseJson<DeliveryResult[]>(row.deliveries),
-    readAt: row.readAt ?? null,
-    createdAt: String(row.createdAt),
-  };
-}
-
-function toRule(row: Row): AlertRule {
-  const channelIds = parseJson<unknown[]>(row.channelIds) ?? [];
-  return {
-    id: Number(row.id),
-    name: row.name,
-    match: row.pattern,
-    minSeverity: isSeverity(row.minSeverity) ? row.minSeverity : "warning",
-    channelIds: channelIds.map(Number).filter(Number.isInteger),
-    enabled: !!row.enabled,
-  };
-}
-
-export async function createAlertsRepository(
-  db: PluginDatabase,
-  secrets: Sealer,
-) {
-  const channels: Table = await db.define(channelsDef);
-  const items: Table = await db.define(itemsDef);
-  const rules: Table = await db.define(rulesDef);
-  const dismissed: Table = await db.define(dismissedDef);
-
-  const client = () => db.client<Drizzle>();
-
-  /** Inserts one row and returns its id. MySQL has no RETURNING. */
-  async function insertId(
-    table: Table,
-    values: Record<string, unknown>,
-  ): Promise<number> {
-    const drizzle = await client();
-    if (db.dialect === "mysql") {
-      const result = await drizzle.insert(table).values(values);
-      const header = Array.isArray(result) ? result[0] : result;
-      return Number(header?.insertId);
-    }
-    const rows = await drizzle
-      .insert(table)
-      .values(values)
-      .returning({ id: table.id });
-    return Number(rows[0].id);
-  }
-
-  /** Null when the config was never sealed here, i.e. still waiting on its upgrade. */
-  async function openConfig(
-    stored: string | null,
-  ): Promise<Record<string, unknown> | null> {
-    if (!stored) return null;
-    const plain = await secrets.unseal(stored);
-    return plain ? parseJson<Record<string, unknown>>(plain) : null;
-  }
-
-  async function summarize(row: Row): Promise<ChannelSummary> {
-    return {
-      id: Number(row.id),
-      name: row.name,
-      type: asChannelType(row.type),
-      enabled: !!row.enabled,
-      createdAt: String(row.createdAt),
-      usable: (await openConfig(row.config)) !== null,
-    };
-  }
-
-  async function channelRows(userId: string): Promise<Row[]> {
-    const drizzle = await client();
-    return drizzle
-      .select()
-      .from(channels)
-      .where(eq(channels.userId, userId))
-      .orderBy(channels.id);
-  }
-
-  async function findChannelRow(
-    userId: string,
-    id: number,
-  ): Promise<Row | null> {
-    const drizzle = await client();
-    const [row] = await drizzle
-      .select()
-      .from(channels)
-      .where(and(eq(channels.id, id), eq(channels.userId, userId)));
-    return row ?? null;
-  }
-
-  const repository = {
-    async listChannels(userId: string): Promise<ChannelSummary[]> {
-      return Promise.all((await channelRows(userId)).map(summarize));
-    },
-
-    async getChannel(
-      userId: string,
-      id: number,
-    ): Promise<ChannelDetail | null> {
-      const row = await findChannelRow(userId, id);
-      if (!row) return null;
-      const config = await openConfig(row.config);
-      return {
-        ...(await summarize(row)),
-        config: config ?? {},
-      };
-    },
-
-    async deliverableChannels(userId: string): Promise<DeliverableChannel[]> {
-      const rows = await channelRows(userId);
-      return Promise.all(
-        rows.map(async (row) => ({
-          id: Number(row.id),
-          name: row.name,
-          type: asChannelType(row.type),
-          enabled: !!row.enabled,
-          config: await openConfig(row.config),
-        })),
-      );
-    },
-
-    async createChannel(
-      userId: string,
-      input: {
-        name: string;
-        type: ChannelType;
-        config: Record<string, unknown>;
-        enabled?: boolean;
-      },
-    ): Promise<number> {
-      const now = new Date().toISOString();
-      const id = await insertId(channels, {
-        userId,
-        name: input.name,
-        type: input.type,
-        config: await secrets.seal(JSON.stringify(input.config)),
-        enabled: input.enabled !== false,
-        createdAt: now,
-        updatedAt: now,
-      });
-      await db.persist();
-      return id;
-    },
-
-    async updateChannel(
-      userId: string,
-      id: number,
-      patch: {
-        name?: string;
-        type?: ChannelType;
-        config?: Record<string, unknown>;
-        enabled?: boolean;
-      },
-    ): Promise<boolean> {
-      if (!(await findChannelRow(userId, id))) return false;
-      const values: Record<string, unknown> = {
-        updatedAt: new Date().toISOString(),
-      };
-      if (patch.name !== undefined) values.name = patch.name;
-      if (patch.type !== undefined) values.type = patch.type;
-      if (patch.enabled !== undefined) values.enabled = patch.enabled;
-      if (patch.config !== undefined) {
-        values.config = await secrets.seal(JSON.stringify(patch.config));
-      }
-      const drizzle = await client();
-      await drizzle
-        .update(channels)
-        .set(values)
-        .where(and(eq(channels.id, id), eq(channels.userId, userId)));
-      await db.persist();
-      return true;
-    },
-
-    async deleteChannel(userId: string, id: number): Promise<boolean> {
-      if (!(await findChannelRow(userId, id))) return false;
-      const drizzle = await client();
-      await drizzle
-        .delete(channels)
-        .where(and(eq(channels.id, id), eq(channels.userId, userId)));
-      // Rules keep working with the channels they still name.
-      for (const rule of await repository.listRules(userId)) {
-        if (!rule.channelIds.includes(id)) continue;
-        await drizzle
-          .update(rules)
-          .set({
-            channelIds: JSON.stringify(
-              rule.channelIds.filter((channelId) => channelId !== id),
-            ),
-          })
-          .where(eq(rules.id, rule.id));
-      }
-      await db.persist();
-      return true;
-    },
-
-    async insertItem(item: NewItem): Promise<AlertItem> {
-      const createdAt = item.createdAt ?? new Date().toISOString();
-      const id = await insertId(items, {
-        userId: item.userId,
-        source: item.source,
-        category: item.category,
-        severity: item.severity,
-        title: item.title,
-        body: item.body ?? null,
-        link: item.link ? JSON.stringify(item.link) : null,
-        context: item.context ? JSON.stringify(item.context) : null,
-        dedupeKey: item.dedupeKey ?? null,
-        createdAt,
-      });
-      await db.persist({ lazy: true });
-      return toItem({
-        id,
-        ...item,
-        link: item.link ? JSON.stringify(item.link) : null,
-        context: item.context ? JSON.stringify(item.context) : null,
-        deliveries: null,
-        readAt: null,
-        createdAt,
-      });
-    },
-
-    async setDeliveries(id: number, results: DeliveryResult[]): Promise<void> {
-      const drizzle = await client();
-      await drizzle
-        .update(items)
-        .set({ deliveries: JSON.stringify(results) })
-        .where(eq(items.id, id));
-      await db.persist({ lazy: true });
-    },
-
-    async hasUnreadWithKey(userId: string, key: string): Promise<boolean> {
-      const drizzle = await client();
-      const rows: Row[] = await drizzle
-        .select({ id: items.id })
-        .from(items)
-        .where(
-          and(
-            eq(items.userId, userId),
-            eq(items.dedupeKey, key),
-            isNull(items.readAt),
-          ),
-        )
-        .limit(1);
-      return rows.length > 0;
-    },
-
-    async hasItemWithKey(userId: string, key: string): Promise<boolean> {
-      const drizzle = await client();
-      const rows: Row[] = await drizzle
-        .select({ id: items.id })
-        .from(items)
-        .where(and(eq(items.userId, userId), eq(items.dedupeKey, key)))
-        .limit(1);
-      return rows.length > 0;
-    },
-
-    async listItems(
-      userId: string,
-      filter: ItemFilter = {},
-    ): Promise<AlertItem[]> {
-      const conditions = [eq(items.userId, userId)];
-      if (filter.unread) conditions.push(isNull(items.readAt));
-      if (filter.source) conditions.push(eq(items.source, filter.source));
-      if (filter.severity) conditions.push(eq(items.severity, filter.severity));
-      if (filter.beforeId) conditions.push(lt(items.id, filter.beforeId));
-      const drizzle = await client();
-      const rows: Row[] = await drizzle
-        .select()
-        .from(items)
-        .where(and(...conditions))
-        .orderBy(desc(items.id))
-        .limit(Math.min(Math.max(filter.limit ?? 50, 1), 200));
-      return rows.map(toItem);
-    },
-
-    async getItem(userId: string, id: number): Promise<AlertItem | null> {
-      const drizzle = await client();
-      const [row] = await drizzle
-        .select()
-        .from(items)
-        .where(and(eq(items.id, id), eq(items.userId, userId)));
-      return row ? toItem(row) : null;
-    },
-
-    async unreadCount(userId: string): Promise<number> {
-      const drizzle = await client();
-      const [row] = await drizzle
-        .select({ count: sql<number>`count(*)` })
-        .from(items)
-        .where(and(eq(items.userId, userId), isNull(items.readAt)));
-      return Number(row?.count ?? 0);
-    },
-
-    async setRead(
-      userId: string,
-      ids: number[] | "all",
-      read: boolean,
-    ): Promise<void> {
-      const conditions = [eq(items.userId, userId)];
-      if (ids !== "all") {
-        if (ids.length === 0) return;
-        conditions.push(inArray(items.id, ids));
-      }
-      conditions.push(read ? isNull(items.readAt) : isNotNull(items.readAt));
-      const drizzle = await client();
-      await drizzle
-        .update(items)
-        .set({ readAt: read ? new Date().toISOString() : null })
-        .where(and(...conditions));
-      await db.persist();
-    },
-
-    async deleteItem(userId: string, id: number): Promise<AlertItem | null> {
-      const item = await repository.getItem(userId, id);
-      if (!item) return null;
-      const drizzle = await client();
-      await drizzle
-        .delete(items)
-        .where(and(eq(items.id, id), eq(items.userId, userId)));
-      await db.persist();
-      return item;
-    },
-
-    /** Deletes the user's read alerts, or every alert. Returns what went. */
-    async clearItems(userId: string, onlyRead: boolean): Promise<AlertItem[]> {
-      const conditions = [eq(items.userId, userId)];
-      if (onlyRead) conditions.push(isNotNull(items.readAt));
-      const drizzle = await client();
-      const rows: Row[] = await drizzle
-        .select()
-        .from(items)
-        .where(and(...conditions));
-      if (rows.length === 0) return [];
-      await drizzle.delete(items).where(and(...conditions));
-      await db.persist();
-      return rows.map(toItem);
-    },
-
-    async pruneItems(olderThan: string): Promise<void> {
-      const drizzle = await client();
-      await drizzle.delete(items).where(lt(items.createdAt, olderThan));
-      await db.persist({ lazy: true });
-    },
-
-    /** Every source and category the user has alerts from, for the rule editor. */
-    async listCategories(
-      userId: string,
-    ): Promise<Array<{ source: string; category: string }>> {
-      const drizzle = await client();
-      const rows: Row[] = await drizzle
-        .selectDistinct({ source: items.source, category: items.category })
-        .from(items)
-        .where(eq(items.userId, userId));
-      return rows
-        .map((row) => ({ source: row.source, category: row.category }))
-        .sort((a, b) => a.category.localeCompare(b.category));
-    },
-
-    async listRules(userId: string): Promise<AlertRule[]> {
-      const drizzle = await client();
-      const rows: Row[] = await drizzle
-        .select()
-        .from(rules)
-        .where(eq(rules.userId, userId))
-        .orderBy(rules.id);
-      return rows.map(toRule);
-    },
-
-    async createRule(
-      userId: string,
-      input: Omit<AlertRule, "id">,
-    ): Promise<number> {
-      const id = await insertId(rules, {
-        userId,
-        name: input.name,
-        pattern: input.match,
-        minSeverity: input.minSeverity,
-        channelIds: JSON.stringify(input.channelIds),
-        enabled: input.enabled,
-        createdAt: new Date().toISOString(),
-      });
-      await db.persist();
-      return id;
-    },
-
-    async updateRule(
-      userId: string,
-      id: number,
-      input: Omit<AlertRule, "id">,
-    ): Promise<boolean> {
-      const drizzle = await client();
-      const [row] = await drizzle
-        .select({ id: rules.id })
-        .from(rules)
-        .where(and(eq(rules.id, id), eq(rules.userId, userId)));
-      if (!row) return false;
-      await drizzle
-        .update(rules)
-        .set({
-          name: input.name,
-          pattern: input.match,
-          minSeverity: input.minSeverity,
-          channelIds: JSON.stringify(input.channelIds),
-          enabled: input.enabled,
-        })
-        .where(and(eq(rules.id, id), eq(rules.userId, userId)));
-      await db.persist();
-      return true;
-    },
-
-    async deleteRule(userId: string, id: number): Promise<boolean> {
-      const drizzle = await client();
-      const [row] = await drizzle
-        .select({ id: rules.id })
-        .from(rules)
-        .where(and(eq(rules.id, id), eq(rules.userId, userId)));
-      if (!row) return false;
-      await drizzle
-        .delete(rules)
-        .where(and(eq(rules.id, id), eq(rules.userId, userId)));
-      await db.persist();
-      return true;
-    },
-
-    async dismissedIds(userId: string): Promise<Set<string>> {
-      const drizzle = await client();
-      const rows: Row[] = await drizzle
-        .select({ alertId: dismissed.alertId })
-        .from(dismissed)
-        .where(eq(dismissed.userId, userId));
-      return new Set(rows.map((row) => String(row.alertId)));
-    },
-
-    async dismiss(userId: string, alertId: string): Promise<void> {
-      if ((await repository.dismissedIds(userId)).has(alertId)) return;
-      const drizzle = await client();
-      await drizzle.insert(dismissed).values({
-        userId,
-        alertId,
-        dismissedAt: new Date().toISOString(),
-      });
-      await db.persist();
-    },
-
-    /** A user's data was wiped: nothing of theirs stays. */
-    async wipeUser(userId: string): Promise<void> {
-      const drizzle = await client();
-      for (const table of [items, rules, channels, dismissed]) {
-        await drizzle.delete(table).where(eq(table.userId, userId));
-      }
-      await db.persist();
-    },
-  };
-  return repository;
-}
diff --git a/plugins/alerts/src/backend/routes.ts b/plugins/alerts/src/backend/routes.ts
deleted file mode 100644
index e26323e32..000000000
--- a/plugins/alerts/src/backend/routes.ts
+++ /dev/null
@@ -1,694 +0,0 @@
-import type { Request, Response, Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import {
-  CHANNEL_TYPES,
-  isSeverity,
-  type AlertRule,
-  type ChannelType,
-} from "../types.js";
-import type { Announcements } from "./announcements.js";
-import { deliverToChannels } from "./hub.js";
-import type { AlertsRepository } from "./repository.js";
-import { validateChannelConfig, type SenderDeps } from "./senders.js";
-import type { AlertStream } from "./stream.js";
-
-interface RouteDeps {
-  ctx: PluginContext;
-  repository: AlertsRepository;
-  stream: AlertStream;
-  senders: SenderDeps;
-  announcements: Announcements;
-}
-
-function actor(ctx: PluginContext): string {
-  // Core's plugin router authenticates every request and runs it as that user.
-  return ctx.currentActor() as string;
-}
-
-function positiveInt(value: unknown): number | null {
-  const parsed = Number.parseInt(String(value), 10);
-  return Number.isInteger(parsed) && parsed > 0 ? parsed : null;
-}
-
-function isChannelType(value: unknown): value is ChannelType {
-  return (CHANNEL_TYPES as readonly string[]).includes(String(value));
-}
-
-function idList(value: unknown): number[] {
-  return Array.isArray(value)
-    ? value.map(positiveInt).filter((id): id is number => id !== null)
-    : [];
-}
-
-export function registerRoutes(router: Router, deps: RouteDeps): void {
-  const { ctx, repository, stream, senders, announcements } = deps;
-
-  router.use(ctx.rbac.require("use") as never);
-
-  const publishUnread = async (userId: string) => {
-    stream.publish(userId, "unread", {
-      count: await repository.unreadCount(userId),
-    });
-  };
-
-  /**
-   * @openapi
-   * /plugin-api/alerts/items:
-   *   get:
-   *     summary: List the caller's alerts
-   *     description: Newest first. Brings in any Termix announcement the caller has not seen yet.
-   *     tags:
-   *       - Alerts
-   *     parameters:
-   *       - in: query
-   *         name: unread
-   *         schema:
-   *           type: boolean
-   *       - in: query
-   *         name: source
-   *         schema:
-   *           type: string
-   *       - in: query
-   *         name: severity
-   *         schema:
-   *           type: string
-   *           enum: [info, success, warning, critical]
-   *       - in: query
-   *         name: limit
-   *         schema:
-   *           type: integer
-   *       - in: query
-   *         name: before
-   *         description: Only alerts with a lower id, for paging.
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: The alerts and the unread count.
-   *       403:
-   *         description: Missing the alerts.use permission.
-   */
-  router.get("/items", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    await announcements.sync(userId);
-    const severity = isSeverity(req.query.severity)
-      ? req.query.severity
-      : undefined;
-    const items = await repository.listItems(userId, {
-      unread: req.query.unread === "true",
-      source: typeof req.query.source === "string" ? req.query.source : "",
-      severity,
-      limit: positiveInt(req.query.limit) ?? 50,
-      beforeId: positiveInt(req.query.before) ?? undefined,
-    });
-    res.json({ items, unread: await repository.unreadCount(userId) });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/alerts/unread:
-   *   get:
-   *     summary: Count the caller's unread alerts
-   *     tags:
-   *       - Alerts
-   *     responses:
-   *       200:
-   *         description: The unread count.
-   */
-  router.get("/unread", async (_req: Request, res: Response) => {
-    const userId = actor(ctx);
-    await announcements.sync(userId);
-    res.json({ count: await repository.unreadCount(userId) });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/alerts/stream:
-   *   get:
-   *     summary: Stream new alerts
-   *     description: Server-sent events. Sends "unread" with the count on connect and after every change, and "item" with each new or updated alert.
-   *     tags:
-   *       - Alerts
-   *     responses:
-   *       200:
-   *         description: An event stream.
-   */
-  router.get("/stream", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    await announcements.sync(userId);
-    stream.open(req, res, userId, {
-      count: await repository.unreadCount(userId),
-    });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/alerts/items/read:
-   *   post:
-   *     summary: Mark alerts read or unread
-   *     tags:
-   *       - Alerts
-   *     requestBody:
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               ids:
-   *                 type: array
-   *                 items:
-   *                   type: integer
-   *               all:
-   *                 type: boolean
-   *               read:
-   *                 type: boolean
-   *                 description: False marks them unread. Defaults to true.
-   *     responses:
-   *       200:
-   *         description: The new unread count.
-   */
-  router.post("/items/read", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const body = (req.body ?? {}) as Record<string, unknown>;
-    const read = body.read !== false;
-    await repository.setRead(
-      userId,
-      body.all === true ? "all" : idList(body.ids),
-      read,
-    );
-    await publishUnread(userId);
-    res.json({ count: await repository.unreadCount(userId) });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/alerts/items/{id}:
-   *   delete:
-   *     summary: Delete an alert
-   *     description: A deleted Termix announcement does not come back.
-   *     tags:
-   *       - Alerts
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Deleted.
-   *       404:
-   *         description: No such alert for the caller.
-   */
-  router.delete("/items/:id", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const id = positiveInt(req.params.id);
-    const item = id ? await repository.deleteItem(userId, id) : null;
-    if (!item) return res.status(404).json({ error: "Alert not found" });
-    await announcements.forget(userId, item);
-    await publishUnread(userId);
-    res.json({ success: true });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/alerts/items:
-   *   delete:
-   *     summary: Clear the caller's alerts
-   *     tags:
-   *       - Alerts
-   *     parameters:
-   *       - in: query
-   *         name: read
-   *         description: Only clear alerts already read.
-   *         schema:
-   *           type: boolean
-   *     responses:
-   *       200:
-   *         description: How many alerts were removed.
-   */
-  router.delete("/items", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const removed = await repository.clearItems(
-      userId,
-      req.query.read === "true",
-    );
-    for (const item of removed) await announcements.forget(userId, item);
-    await publishUnread(userId);
-    res.json({ removed: removed.length });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/alerts/categories:
-   *   get:
-   *     summary: List the sources and categories of the caller's alerts
-   *     description: For building delivery rules.
-   *     tags:
-   *       - Alerts
-   *     responses:
-   *       200:
-   *         description: Source and category pairs.
-   */
-  router.get("/categories", async (_req: Request, res: Response) => {
-    res.json(await repository.listCategories(actor(ctx)));
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/alerts/meta:
-   *   get:
-   *     summary: What channel types this server can use
-   *     tags:
-   *       - Alerts
-   *     responses:
-   *       200:
-   *         description: The channel types and whether email is set up.
-   */
-  router.get("/meta", async (_req: Request, res: Response) => {
-    res.json({
-      emailAvailable: (await senders.smtp()) !== null,
-      channelTypes: CHANNEL_TYPES,
-    });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/alerts/channels:
-   *   get:
-   *     summary: List the caller's channels
-   *     description: Without their config.
-   *     tags:
-   *       - Alerts
-   *     responses:
-   *       200:
-   *         description: The channels.
-   */
-  router.get("/channels", async (_req: Request, res: Response) => {
-    res.json(await repository.listChannels(actor(ctx)));
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/alerts/channels/{id}:
-   *   get:
-   *     summary: Get one of the caller's channels with its config
-   *     tags:
-   *       - Alerts
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: The channel.
-   *       404:
-   *         description: No such channel for the caller.
-   */
-  router.get("/channels/:id", async (req: Request, res: Response) => {
-    const id = positiveInt(req.params.id);
-    const channel = id ? await repository.getChannel(actor(ctx), id) : null;
-    if (!channel) return res.status(404).json({ error: "Channel not found" });
-    res.json(channel);
-  });
-
-  const readChannel = (
-    body: Record<string, unknown>,
-    partial: boolean,
-  ):
-    | { error: string }
-    | {
-        name?: string;
-        type?: ChannelType;
-        config?: Record<string, unknown>;
-        enabled?: boolean;
-      } => {
-    const out: {
-      name?: string;
-      type?: ChannelType;
-      config?: Record<string, unknown>;
-      enabled?: boolean;
-    } = {};
-    if (body.name !== undefined || !partial) {
-      const name = typeof body.name === "string" ? body.name.trim() : "";
-      if (!name) return { error: "name is required" };
-      out.name = name.slice(0, 100);
-    }
-    if (body.type !== undefined || !partial) {
-      if (!isChannelType(body.type)) {
-        return { error: `type must be one of ${CHANNEL_TYPES.join(", ")}` };
-      }
-      out.type = body.type;
-    }
-    if (body.config !== undefined || !partial) {
-      if (
-        !body.config ||
-        typeof body.config !== "object" ||
-        Array.isArray(body.config)
-      ) {
-        return { error: "config is required" };
-      }
-      out.config = body.config as Record<string, unknown>;
-    }
-    if (body.enabled !== undefined) out.enabled = body.enabled !== false;
-    return out;
-  };
-
-  /**
-   * @openapi
-   * /plugin-api/alerts/channels:
-   *   post:
-   *     summary: Create a channel
-   *     tags:
-   *       - Alerts
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required: [name, type, config]
-   *             properties:
-   *               name:
-   *                 type: string
-   *               type:
-   *                 type: string
-   *                 enum: [webhook, ntfy, discord, email]
-   *               config:
-   *                 type: object
-   *               enabled:
-   *                 type: boolean
-   *     responses:
-   *       201:
-   *         description: The new channel.
-   *       400:
-   *         description: The channel is not valid.
-   */
-  router.post("/channels", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const input = readChannel(
-      (req.body ?? {}) as Record<string, unknown>,
-      false,
-    );
-    if ("error" in input) return res.status(400).json(input);
-    const problem = validateChannelConfig(input.type!, input.config!);
-    if (problem) return res.status(400).json({ error: problem });
-    const id = await repository.createChannel(userId, {
-      name: input.name!,
-      type: input.type!,
-      config: input.config!,
-      enabled: input.enabled,
-    });
-    res.status(201).json(await repository.getChannel(userId, id));
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/alerts/channels/{id}:
-   *   put:
-   *     summary: Update a channel
-   *     tags:
-   *       - Alerts
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               name:
-   *                 type: string
-   *               type:
-   *                 type: string
-   *                 enum: [webhook, ntfy, discord, email]
-   *               config:
-   *                 type: object
-   *               enabled:
-   *                 type: boolean
-   *     responses:
-   *       200:
-   *         description: The updated channel.
-   *       400:
-   *         description: The channel is not valid.
-   *       404:
-   *         description: No such channel for the caller.
-   */
-  router.put("/channels/:id", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const id = positiveInt(req.params.id);
-    const existing = id ? await repository.getChannel(userId, id) : null;
-    if (!id || !existing) {
-      return res.status(404).json({ error: "Channel not found" });
-    }
-    const input = readChannel(
-      (req.body ?? {}) as Record<string, unknown>,
-      true,
-    );
-    if ("error" in input) return res.status(400).json(input);
-    const type = input.type ?? existing.type;
-    if (input.config !== undefined || input.type !== undefined) {
-      const problem = validateChannelConfig(
-        type,
-        input.config ?? existing.config,
-      );
-      if (problem) return res.status(400).json({ error: problem });
-    }
-    await repository.updateChannel(userId, id, input);
-    res.json(await repository.getChannel(userId, id));
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/alerts/channels/{id}:
-   *   delete:
-   *     summary: Delete a channel
-   *     tags:
-   *       - Alerts
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Deleted.
-   *       404:
-   *         description: No such channel for the caller.
-   */
-  router.delete("/channels/:id", async (req: Request, res: Response) => {
-    const id = positiveInt(req.params.id);
-    const deleted = id ? await repository.deleteChannel(actor(ctx), id) : false;
-    if (!deleted) return res.status(404).json({ error: "Channel not found" });
-    res.json({ success: true });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/alerts/channels/{id}/test:
-   *   post:
-   *     summary: Send a test alert to a channel
-   *     description: Takes the same path a real alert does, private network opt-in included.
-   *     tags:
-   *       - Alerts
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Whether the channel accepted it, with the error when it did not.
-   *       404:
-   *         description: No such channel for the caller.
-   */
-  router.post("/channels/:id/test", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const id = positiveInt(req.params.id);
-    const channel = id
-      ? (await repository.deliverableChannels(userId)).find(
-          (candidate) => candidate.id === id,
-        )
-      : undefined;
-    if (!channel) return res.status(404).json({ error: "Channel not found" });
-    const [result] = await deliverToChannels(
-      [channel],
-      {
-        title: "Termix",
-        body: "This is a test alert from Termix.",
-        severity: "info",
-        category: "alerts.test",
-        source: ctx.pluginId,
-        context: { sourceName: "Test", triggerType: "test" },
-      },
-      senders,
-    );
-    res.json(
-      result.ok ? { success: true } : { success: false, error: result.error },
-    );
-  });
-
-  const readRule = async (
-    userId: string,
-    body: Record<string, unknown>,
-  ): Promise<{ error: string } | Omit<AlertRule, "id">> => {
-    const name = typeof body.name === "string" ? body.name.trim() : "";
-    if (!name) return { error: "name is required" };
-    const match =
-      typeof body.match === "string" && body.match.trim()
-        ? body.match.trim().slice(0, 128)
-        : "*";
-    const minSeverity = isSeverity(body.minSeverity)
-      ? body.minSeverity
-      : "warning";
-    const owned = new Set(
-      (await repository.listChannels(userId)).map((channel) => channel.id),
-    );
-    const channelIds = [...new Set(idList(body.channelIds))];
-    if (channelIds.length === 0) {
-      return { error: "Pick at least one channel" };
-    }
-    if (channelIds.some((id) => !owned.has(id))) {
-      return { error: "Unknown channel" };
-    }
-    return {
-      name: name.slice(0, 100),
-      match,
-      minSeverity,
-      channelIds,
-      enabled: body.enabled !== false,
-    };
-  };
-
-  /**
-   * @openapi
-   * /plugin-api/alerts/rules:
-   *   get:
-   *     summary: List the caller's delivery rules
-   *     tags:
-   *       - Alerts
-   *     responses:
-   *       200:
-   *         description: The rules.
-   */
-  router.get("/rules", async (_req: Request, res: Response) => {
-    res.json(await repository.listRules(actor(ctx)));
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/alerts/rules:
-   *   post:
-   *     summary: Create a delivery rule
-   *     description: Sends every alert whose category matches and whose severity is at least minSeverity to the listed channels.
-   *     tags:
-   *       - Alerts
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required: [name, channelIds]
-   *             properties:
-   *               name:
-   *                 type: string
-   *               match:
-   *                 type: string
-   *                 description: '"*", "automations.*" or an exact category.'
-   *               minSeverity:
-   *                 type: string
-   *                 enum: [info, success, warning, critical]
-   *               channelIds:
-   *                 type: array
-   *                 items:
-   *                   type: integer
-   *               enabled:
-   *                 type: boolean
-   *     responses:
-   *       201:
-   *         description: The new rule.
-   *       400:
-   *         description: The rule is not valid.
-   */
-  router.post("/rules", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const input = await readRule(
-      userId,
-      (req.body ?? {}) as Record<string, unknown>,
-    );
-    if ("error" in input) return res.status(400).json(input);
-    const id = await repository.createRule(userId, input);
-    res.status(201).json({ id, ...input });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/alerts/rules/{id}:
-   *   put:
-   *     summary: Update a delivery rule
-   *     tags:
-   *       - Alerts
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: The updated rule.
-   *       400:
-   *         description: The rule is not valid.
-   *       404:
-   *         description: No such rule for the caller.
-   */
-  router.put("/rules/:id", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const id = positiveInt(req.params.id);
-    if (!id) return res.status(404).json({ error: "Rule not found" });
-    const input = await readRule(
-      userId,
-      (req.body ?? {}) as Record<string, unknown>,
-    );
-    if ("error" in input) return res.status(400).json(input);
-    if (!(await repository.updateRule(userId, id, input))) {
-      return res.status(404).json({ error: "Rule not found" });
-    }
-    res.json({ id, ...input });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/alerts/rules/{id}:
-   *   delete:
-   *     summary: Delete a delivery rule
-   *     tags:
-   *       - Alerts
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Deleted.
-   *       404:
-   *         description: No such rule for the caller.
-   */
-  router.delete("/rules/:id", async (req: Request, res: Response) => {
-    const id = positiveInt(req.params.id);
-    const deleted = id ? await repository.deleteRule(actor(ctx), id) : false;
-    if (!deleted) return res.status(404).json({ error: "Rule not found" });
-    res.json({ success: true });
-  });
-}
diff --git a/plugins/alerts/src/backend/senders.ts b/plugins/alerts/src/backend/senders.ts
deleted file mode 100644
index ef4aa5321..000000000
--- a/plugins/alerts/src/backend/senders.ts
+++ /dev/null
@@ -1,224 +0,0 @@
-import type { PluginFetch } from "@termix/plugin-sdk/backend";
-import type { AlertLink, ChannelType, Severity } from "../types.js";
-
-export interface OutgoingAlert {
-  title: string;
-  body: string;
-  severity: Severity;
-  category: string;
-  source: string;
-  link?: AlertLink | null;
-  context?: Record<string, unknown> | null;
-}
-
-export interface SmtpSettings {
-  host: string;
-  port: number;
-  secure: boolean;
-  user: string;
-  password: string;
-  from: string;
-}
-
-export interface SendMail {
-  (
-    smtp: SmtpSettings,
-    message: {
-      to: string[];
-      subject: string;
-      text: string;
-    },
-  ): Promise<void>;
-}
-
-export interface SenderDeps {
-  fetch: PluginFetch;
-  /** Hosts the admin lets channels reach on a private network. */
-  privateAllowlist: () => Promise<string[]>;
-  smtp: () => Promise<SmtpSettings | null>;
-  sendMail: SendMail;
-}
-
-const NTFY_PRIORITY: Record<Severity, number> = {
-  info: 2,
-  success: 2,
-  warning: 3,
-  critical: 5,
-};
-
-const NTFY_TAGS: Record<Severity, string> = {
-  info: "information_source",
-  success: "white_check_mark",
-  warning: "warning",
-  critical: "rotating_light",
-};
-
-const DISCORD_COLORS: Record<Severity, number> = {
-  info: 3447003,
-  success: 3066993,
-  warning: 16753920,
-  critical: 15158332,
-};
-
-export const DISCORD_WEBHOOK =
-  /^https:\/\/(?:canary\.|ptb\.)?(?:discord\.com|discordapp\.com)\/api\/webhooks\/.+/i;
-
-const EMAIL = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
-
-const str = (value: unknown) => (typeof value === "string" ? value.trim() : "");
-
-export function parseRecipients(value: unknown): string[] {
-  return str(value)
-    .split(/[,;\s]+/)
-    .map((entry) => entry.trim())
-    .filter(Boolean);
-}
-
-/** What is wrong with a channel's config, or null when it can be saved. */
-export function validateChannelConfig(
-  type: ChannelType,
-  config: Record<string, unknown>,
-): string | null {
-  switch (type) {
-    case "webhook":
-      return /^https?:\/\//i.test(str(config.url))
-        ? null
-        : "webhook config requires an http(s) url";
-    case "ntfy":
-      if (!/^https?:\/\//i.test(str(config.url))) {
-        return "ntfy config requires an http(s) url";
-      }
-      return str(config.topic) ? null : "ntfy config requires a topic";
-    case "discord":
-      return DISCORD_WEBHOOK.test(str(config.url))
-        ? null
-        : "discord config requires a Discord webhook URL";
-    case "email": {
-      const to = parseRecipients(config.to);
-      if (to.length === 0) return "email config requires at least one address";
-      return to.every((address) => EMAIL.test(address))
-        ? null
-        : "email config has an invalid address";
-    }
-  }
-}
-
-function linkUrl(alert: OutgoingAlert): string | undefined {
-  const url = alert.link?.url;
-  return url && /^https?:\/\//i.test(url) ? url : undefined;
-}
-
-/**
- * Sends one alert to one channel and throws on failure, so the caller can say
- * which channel failed. Private and loopback targets need both the channel's
- * allowPrivateNetwork opt-in and an exact host in the admin allowlist.
- */
-export async function sendToChannel(
-  channel: { type: ChannelType; config: Record<string, unknown> },
-  alert: OutgoingAlert,
-  deps: SenderDeps,
-): Promise<void> {
-  const { config } = channel;
-
-  if (channel.type === "email") {
-    const smtp = await deps.smtp();
-    if (!smtp) throw new Error("Email is not set up on this server");
-    const to = parseRecipients(config.to);
-    if (to.length === 0) throw new Error("Channel has no email address");
-    const url = linkUrl(alert);
-    await deps.sendMail(smtp, {
-      to,
-      subject: `[Termix] ${alert.title}`,
-      text: [alert.body || alert.title, url].filter(Boolean).join("\n\n"),
-    });
-    return;
-  }
-
-  const allowPrivateHosts =
-    config.allowPrivateNetwork === true ? await deps.privateAllowlist() : [];
-  const post = async (
-    url: string,
-    init: { method: string; headers: Record<string, string>; body: string },
-  ) => {
-    const response = await deps.fetch(url, {
-      ...init,
-      timeoutMs: 30_000,
-      allowPrivateHosts,
-    });
-    if (!response.ok) {
-      const detail = await response.text().catch(() => "");
-      throw new Error(
-        `HTTP ${response.status} ${response.statusText}${detail ? `: ${detail.slice(0, 200)}` : ""}`,
-      );
-    }
-  };
-
-  const url = str(config.url);
-  if (!url) throw new Error("Channel is missing a URL");
-  const context = alert.context ?? {};
-
-  switch (channel.type) {
-    case "webhook": {
-      const headers =
-        config.headers && typeof config.headers === "object"
-          ? (config.headers as Record<string, string>)
-          : {};
-      return post(url, {
-        method: config.method === "PUT" ? "PUT" : "POST",
-        headers: { "Content-Type": "application/json", ...headers },
-        body: JSON.stringify({
-          title: alert.title,
-          message: alert.body,
-          severity: alert.severity,
-          category: alert.category,
-          source: alert.source,
-          link: linkUrl(alert),
-          hostName: context.hostName,
-          hostId: context.hostId,
-          ruleName: context.sourceName ?? alert.title,
-          ruleId: context.sourceId,
-          triggerType: context.triggerType,
-          value: context.value,
-          threshold: context.threshold,
-          timestamp: new Date().toISOString(),
-        }),
-      });
-    }
-    case "ntfy": {
-      const topic = str(config.topic);
-      if (!topic) throw new Error("ntfy channel is missing a topic");
-      const headers: Record<string, string> = {
-        Title: alert.title || "Termix",
-        Priority: String(NTFY_PRIORITY[alert.severity]),
-        Tags: NTFY_TAGS[alert.severity],
-      };
-      const click = linkUrl(alert);
-      if (click) headers.Click = click;
-      const token = str(config.token);
-      if (token) headers.Authorization = `Bearer ${token}`;
-      return post(`${url.replace(/\/$/, "")}/${encodeURIComponent(topic)}`, {
-        method: "POST",
-        headers,
-        body: alert.body || alert.title,
-      });
-    }
-    case "discord": {
-      const embed: Record<string, unknown> = {
-        title: alert.title || "Termix",
-        description: alert.body || undefined,
-        color: DISCORD_COLORS[alert.severity],
-        timestamp: new Date().toISOString(),
-      };
-      const click = linkUrl(alert);
-      if (click) embed.url = click;
-      const payload: Record<string, unknown> = { embeds: [embed] };
-      if (str(config.username)) payload.username = str(config.username);
-      if (str(config.avatar_url)) payload.avatar_url = str(config.avatar_url);
-      return post(url, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify(payload),
-      });
-    }
-  }
-}
diff --git a/plugins/alerts/src/backend/stream.ts b/plugins/alerts/src/backend/stream.ts
deleted file mode 100644
index 0df655be6..000000000
--- a/plugins/alerts/src/backend/stream.ts
+++ /dev/null
@@ -1,77 +0,0 @@
-import type { Request, Response } from "express";
-
-/**
- * Open event streams by user, so a new alert shows up in the browser the
- * moment it is stored instead of on the next poll.
- */
-export function createAlertStream() {
-  const clients = new Map<string, Set<Response>>();
-
-  const write = (res: Response, event: string, data: unknown) => {
-    try {
-      res.write(`event: ${event}\ndata: ${JSON.stringify(data)}\n\n`);
-    } catch {
-      // The close handler removes it.
-    }
-  };
-
-  return {
-    open(req: Request, res: Response, userId: string, hello: unknown): void {
-      res.writeHead(200, {
-        "Content-Type": "text/event-stream",
-        "Cache-Control": "no-store, no-transform",
-        Connection: "keep-alive",
-        "X-Accel-Buffering": "no",
-      });
-      res.flushHeaders?.();
-
-      let set = clients.get(userId);
-      if (!set) {
-        set = new Set();
-        clients.set(userId, set);
-      }
-      set.add(res);
-      write(res, "unread", hello);
-
-      const heartbeat = setInterval(() => {
-        try {
-          res.write(": keepalive\n\n");
-        } catch {
-          close();
-        }
-      }, 30_000);
-
-      const close = () => {
-        clearInterval(heartbeat);
-        const current = clients.get(userId);
-        current?.delete(res);
-        if (current?.size === 0) clients.delete(userId);
-      };
-      req.on("close", close);
-    },
-
-    /** Users with at least one stream open. */
-    users(): string[] {
-      return [...clients.keys()];
-    },
-
-    publish(userId: string, event: string, data: unknown): void {
-      for (const res of clients.get(userId) ?? []) write(res, event, data);
-    },
-
-    closeAll(): void {
-      for (const set of clients.values()) {
-        for (const res of set) {
-          try {
-            res.end();
-          } catch {
-            // Already gone.
-          }
-        }
-      }
-      clients.clear();
-    },
-  };
-}
-
-export type AlertStream = ReturnType<typeof createAlertStream>;
diff --git a/plugins/alerts/src/backend/tables.ts b/plugins/alerts/src/backend/tables.ts
deleted file mode 100644
index b74d80e7c..000000000
--- a/plugins/alerts/src/backend/tables.ts
+++ /dev/null
@@ -1,101 +0,0 @@
-import {
-  adoptLegacyTable,
-  boolean,
-  defineTable,
-  encryptedText,
-  id,
-  refUser,
-  text,
-  timestamp,
-  varchar,
-} from "@termix/plugin-sdk/db";
-
-/**
- * Where a user's alerts go. The config holds webhook URLs, ntfy tokens and
- * email addresses, sealed with ctx.secrets.seal so an alert sent with no
- * acting user (a certificate that failed to renew at night) can still read it.
- * 2.8 kept channels in core's notification_channels; the upgrade copies them
- * here with their ids, which automations' notify steps still name.
- */
-export const channels = defineTable(
-  "channels",
-  {
-    id: id(),
-    userId: refUser(),
-    name: text().notNull(),
-    type: varchar(32).notNull(),
-    config: encryptedText(),
-    enabled: boolean().notNull().default(true),
-    createdAt: timestamp().notNull().defaultNow(),
-    updatedAt: timestamp().notNull().defaultNow(),
-  },
-  { indexes: [{ name: "idx_alerts_channels_user", columns: ["userId"] }] },
-);
-
-/** The inbox. One row per recipient, so read state is per user. */
-export const items = defineTable(
-  "items",
-  {
-    id: id(),
-    userId: refUser(),
-    // The plugin that sent it, or "termix" for an announcement.
-    source: varchar(64).notNull(),
-    category: varchar(128).notNull(),
-    severity: varchar(16).notNull(),
-    title: text().notNull(),
-    body: text(),
-    link: text(),
-    context: text(),
-    dedupeKey: varchar(),
-    // What each channel said when the alert was delivered.
-    deliveries: text(),
-    readAt: timestamp(),
-    createdAt: timestamp().notNull().defaultNow(),
-  },
-  {
-    indexes: [
-      { name: "idx_alerts_items_user", columns: ["userId", "createdAt"] },
-      { name: "idx_alerts_items_unread", columns: ["userId", "readAt"] },
-      { name: "idx_alerts_items_dedupe", columns: ["userId", "dedupeKey"] },
-    ],
-  },
-);
-
-/** Which alerts a user sends to which of their channels. */
-export const rules = defineTable(
-  "rules",
-  {
-    id: id(),
-    userId: refUser(),
-    name: text().notNull(),
-    // A category pattern: "*", "automations.*" or an exact category.
-    pattern: varchar(128).notNull().default("*"),
-    minSeverity: varchar(16).notNull().default("warning"),
-    channelIds: text().notNull(),
-    enabled: boolean().notNull().default(true),
-    createdAt: timestamp().notNull().defaultNow(),
-  },
-  { indexes: [{ name: "idx_alerts_rules_user", columns: ["userId"] }] },
-);
-
-/**
- * Announcements a user removed from their inbox, so they are not brought
- * back. Adopted from core's dismissed_alerts, which held the same thing.
- */
-export const dismissed = adoptLegacyTable(
-  "dismissed_alerts",
-  defineTable(
-    "dismissed",
-    {
-      id: id(),
-      userId: refUser(),
-      alertId: text().notNull(),
-      dismissedAt: timestamp().notNull().defaultNow(),
-    },
-    {
-      indexes: [{ name: "idx_dismissed_alerts_user_id", columns: ["userId"] }],
-    },
-  ),
-);
-
-export const tables = [channels, items, rules, dismissed];
diff --git a/plugins/alerts/src/frontend/AlertFeedWidget.tsx b/plugins/alerts/src/frontend/AlertFeedWidget.tsx
deleted file mode 100644
index f56ba881a..000000000
--- a/plugins/alerts/src/frontend/AlertFeedWidget.tsx
+++ /dev/null
@@ -1,197 +0,0 @@
-import { useEffect, useState } from "react";
-import {
-  AlertCircle,
-  AlertTriangle,
-  Bell,
-  Check,
-  CheckCircle,
-  Info,
-} from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Input } from "@termix/plugin-sdk/ui";
-import type { AlertItem } from "../types";
-import type { AlertsApi } from "./api";
-import { timeAgo } from "./format";
-import { useAlertsVersion, type AlertsStore } from "./store";
-
-export interface AlertFeedConfig {
-  maxItems: number;
-  showRead: boolean;
-  /** 2.8 name for showRead, still found in saved homepages. */
-  showAcknowledged?: boolean;
-}
-
-export const DEFAULT_ALERT_FEED_CONFIG: AlertFeedConfig = {
-  maxItems: 10,
-  showRead: false,
-};
-
-function SeverityIcon({ severity }: { severity: AlertItem["severity"] }) {
-  if (severity === "critical")
-    return <AlertCircle size={11} className="shrink-0 text-red-500" />;
-  if (severity === "warning")
-    return <AlertTriangle size={11} className="shrink-0 text-amber-500" />;
-  if (severity === "success")
-    return <CheckCircle size={11} className="shrink-0 text-green-500" />;
-  return <Info size={11} className="shrink-0 text-blue-400" />;
-}
-
-export function showsRead(config: Partial<AlertFeedConfig>): boolean {
-  return config.showRead ?? config.showAcknowledged ?? false;
-}
-
-export function createAlertFeedWidget(api: AlertsApi, store: AlertsStore) {
-  function AlertFeedWidget({
-    widget,
-    config,
-  }: {
-    widget: { title?: string | null };
-    config: AlertFeedConfig;
-  }) {
-    const { t, language } = useTranslation();
-    const version = useAlertsVersion(store);
-    const maxItems = Math.max(1, config.maxItems || 10);
-    const showRead = showsRead(config);
-    const [items, setItems] = useState<AlertItem[] | null>(null);
-
-    useEffect(() => {
-      let cancelled = false;
-      api
-        .items({ unread: showRead ? undefined : true, limit: maxItems })
-        .then((result) => {
-          if (!cancelled) setItems(result.items.slice(0, maxItems));
-        })
-        .catch(() => {
-          if (!cancelled) setItems([]);
-        });
-      return () => {
-        cancelled = true;
-      };
-    }, [maxItems, showRead, version]);
-
-    const markRead = async (id: number) => {
-      try {
-        await api.setRead([id]);
-        setItems((prev) =>
-          (prev ?? []).flatMap((item) =>
-            item.id !== id
-              ? [item]
-              : showRead
-                ? [{ ...item, readAt: new Date().toISOString() }]
-                : [],
-          ),
-        );
-      } catch {
-        // the next reload shows the real state
-      }
-    };
-
-    if (items === null) {
-      return (
-        <div className="flex items-center justify-center w-full h-full text-xs text-muted-foreground">
-          {t("widget.loading")}
-        </div>
-      );
-    }
-
-    return (
-      <div className="flex flex-col w-full h-full overflow-hidden">
-        <div className="flex items-center gap-1.5 px-2 py-1.5 border-b border-border/50 text-[11px] font-semibold text-muted-foreground">
-          <Bell size={11} />
-          <span className="truncate">{widget.title || t("widget.name")}</span>
-        </div>
-        {items.length === 0 ? (
-          <div className="flex flex-1 flex-col items-center justify-center gap-2">
-            <CheckCircle size={20} className="text-green-500" />
-            <span className="text-xs text-muted-foreground">
-              {t("widget.allClear")}
-            </span>
-          </div>
-        ) : (
-          <div className="flex-1 overflow-auto">
-            {items.map((item) => (
-              <div
-                key={item.id}
-                className={`flex items-start gap-2 px-2 py-1.5 border-b border-border/30 ${item.readAt ? "opacity-50" : ""}`}
-              >
-                <SeverityIcon severity={item.severity} />
-                <div className="flex flex-col min-w-0 flex-1">
-                  <span className="text-[10px] font-semibold text-foreground truncate">
-                    {item.title}
-                  </span>
-                  <span className="text-[9px] text-muted-foreground truncate">
-                    {timeAgo(item.createdAt, language)}
-                  </span>
-                </div>
-                {!item.readAt && (
-                  <button
-                    type="button"
-                    title={t("inbox.markRead")}
-                    onClick={() => void markRead(item.id)}
-                    className="shrink-0 p-0.5 text-muted-foreground hover:text-foreground"
-                  >
-                    <Check size={11} />
-                  </button>
-                )}
-              </div>
-            ))}
-          </div>
-        )}
-      </div>
-    );
-  }
-  return AlertFeedWidget;
-}
-
-export function AlertFeedEditForm({
-  config,
-  onChange,
-}: {
-  config: AlertFeedConfig;
-  onChange: (config: AlertFeedConfig) => void;
-}) {
-  const { t } = useTranslation();
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("widget.maxItems")}
-        </label>
-        <Input
-          type="number"
-          min={1}
-          max={50}
-          value={config.maxItems}
-          onChange={(e) =>
-            onChange({
-              ...config,
-              maxItems: Math.min(50, Math.max(1, Number(e.target.value))),
-            })
-          }
-          className="h-8 text-xs"
-        />
-      </div>
-      <label className="flex items-center gap-2 text-xs text-muted-foreground cursor-pointer">
-        <input
-          type="checkbox"
-          checked={showsRead(config)}
-          onChange={(e) =>
-            onChange({
-              ...config,
-              showRead: e.target.checked,
-              showAcknowledged: undefined,
-            })
-          }
-          className="accent-accent-brand"
-        />
-        {t("widget.showRead")}
-      </label>
-    </div>
-  );
-}
-
-/** The widget's name in the homepage add menu, in this plugin's locale. */
-export function AlertFeedLabel({ part }: { part: "name" | "description" }) {
-  const { t } = useTranslation();
-  return <>{t(part === "name" ? "widget.name" : "widget.description")}</>;
-}
diff --git a/plugins/alerts/src/frontend/AlertList.tsx b/plugins/alerts/src/frontend/AlertList.tsx
deleted file mode 100644
index 3977970ce..000000000
--- a/plugins/alerts/src/frontend/AlertList.tsx
+++ /dev/null
@@ -1,166 +0,0 @@
-import {
-  AlertTriangle,
-  CheckCircle2,
-  ExternalLink,
-  Info,
-  Mail,
-  MailOpen,
-  OctagonAlert,
-  Trash2,
-} from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Button, cn } from "@termix/plugin-sdk/ui";
-import type { AlertItem, Severity } from "../types";
-import { sourceLabel, timeAgo } from "./format";
-
-const SEVERITY_ICON: Record<Severity, typeof Info> = {
-  info: Info,
-  success: CheckCircle2,
-  warning: AlertTriangle,
-  critical: OctagonAlert,
-};
-
-const SEVERITY_CLASS: Record<Severity, string> = {
-  info: "text-muted-foreground",
-  success: "text-green-500",
-  warning: "text-amber-500",
-  critical: "text-destructive",
-};
-
-export function SeverityIcon({
-  severity,
-  className,
-}: {
-  severity: Severity;
-  className?: string;
-}) {
-  const Icon = SEVERITY_ICON[severity];
-  return <Icon className={cn(SEVERITY_CLASS[severity], className)} />;
-}
-
-export function AlertList({
-  items,
-  compact = false,
-  onOpen,
-  onToggleRead,
-  onDelete,
-}: {
-  items: AlertItem[];
-  compact?: boolean;
-  onOpen: (item: AlertItem) => void;
-  onToggleRead: (item: AlertItem) => void;
-  onDelete: (item: AlertItem) => void;
-}) {
-  const { t, language } = useTranslation();
-
-  return (
-    <div className="flex flex-col">
-      {items.map((item) => {
-        const unread = !item.readAt;
-        const failed = (item.deliveries ?? []).filter((entry) => !entry.ok);
-        const actionText =
-          typeof item.context?.actionText === "string"
-            ? item.context.actionText
-            : t("inbox.openLink");
-        return (
-          <div
-            key={item.id}
-            className={cn(
-              "group relative flex gap-2.5 border-b border-border px-3 py-2.5 hover:bg-muted/40",
-              unread && "bg-accent-brand/5",
-            )}
-          >
-            {unread && (
-              <span
-                className="absolute left-0 top-0 bottom-0 w-0.5 bg-accent-brand"
-                aria-label={t("inbox.unread")}
-              />
-            )}
-            <SeverityIcon
-              severity={item.severity}
-              className="size-4 shrink-0 mt-0.5"
-            />
-            <button
-              type="button"
-              className="flex-1 min-w-0 text-left"
-              onClick={() => onOpen(item)}
-            >
-              <div
-                className={cn(
-                  "text-sm leading-snug break-words",
-                  unread ? "font-semibold" : "font-medium",
-                )}
-              >
-                {item.title}
-              </div>
-              {item.body && (
-                <div
-                  className={cn(
-                    "text-xs text-muted-foreground mt-0.5 whitespace-pre-wrap break-words",
-                    compact && "line-clamp-2",
-                  )}
-                >
-                  {item.body}
-                </div>
-              )}
-              <div className="flex flex-wrap items-center gap-x-2 gap-y-0.5 mt-1 text-[11px] text-muted-foreground">
-                <span title={item.category}>{sourceLabel(item.source, t)}</span>
-                <span>{timeAgo(item.createdAt, language)}</span>
-                {failed.length > 0 && (
-                  <span
-                    className="text-destructive"
-                    title={failed
-                      .map((entry) => `${entry.name}: ${entry.error ?? ""}`)
-                      .join("\n")}
-                  >
-                    {t("inbox.deliveryFailed", { count: failed.length })}
-                  </span>
-                )}
-                {item.link?.url && (
-                  <a
-                    href={item.link.url}
-                    target="_blank"
-                    rel="noopener noreferrer"
-                    className="inline-flex items-center gap-1 text-accent-brand hover:underline"
-                    onClick={(event) => event.stopPropagation()}
-                  >
-                    {actionText}
-                    <ExternalLink className="size-3" />
-                  </a>
-                )}
-              </div>
-            </button>
-            <div className="flex items-start gap-0.5 shrink-0 opacity-60 group-hover:opacity-100">
-              <Button
-                variant="ghost"
-                size="icon"
-                className="h-6 w-6 rounded-none"
-                title={unread ? t("inbox.markRead") : t("inbox.markUnread")}
-                aria-label={
-                  unread ? t("inbox.markRead") : t("inbox.markUnread")
-                }
-                onClick={() => onToggleRead(item)}
-              >
-                {unread ? (
-                  <MailOpen className="size-3.5" />
-                ) : (
-                  <Mail className="size-3.5" />
-                )}
-              </Button>
-              <Button
-                variant="ghost"
-                size="icon"
-                className="h-6 w-6 rounded-none"
-                title={t("inbox.delete")}
-                aria-label={t("inbox.delete")}
-                onClick={() => onDelete(item)}
-              >
-                <Trash2 className="size-3.5" />
-              </Button>
-            </div>
-          </div>
-        );
-      })}
-    </div>
-  );
-}
diff --git a/plugins/alerts/src/frontend/AlertToaster.tsx b/plugins/alerts/src/frontend/AlertToaster.tsx
deleted file mode 100644
index 11dd78bbc..000000000
--- a/plugins/alerts/src/frontend/AlertToaster.tsx
+++ /dev/null
@@ -1,49 +0,0 @@
-import { useEffect, useRef } from "react";
-import { toast } from "sonner";
-import {
-  useSettings,
-  useTabs,
-  useTranslation,
-} from "@termix/plugin-sdk/frontend";
-import { shouldPopUp, type PopupLevel } from "./popups";
-import type { AlertsStore } from "./store";
-
-/** Pops up alerts as they arrive, as far as the user's setting allows. */
-export function AlertToaster({
-  store,
-  viewId,
-}: {
-  store: AlertsStore;
-  viewId: string;
-}) {
-  const { t } = useTranslation();
-  const tabs = useTabs();
-  const { values } = useSettings("user");
-  const level = useRef<PopupLevel>("warning");
-  level.current = (values.popups as PopupLevel | undefined) ?? "warning";
-
-  useEffect(
-    () =>
-      store.onItem((item, isNew) => {
-        if (!isNew || !shouldPopUp(item, level.current)) return;
-        const show =
-          item.severity === "critical"
-            ? toast.error
-            : item.severity === "warning"
-              ? toast.warning
-              : item.severity === "success"
-                ? toast.success
-                : toast.info;
-        show(item.title, {
-          description: item.body ? item.body.slice(0, 200) : undefined,
-          action: {
-            label: t("inbox.view"),
-            onClick: () => tabs.openRailView(viewId),
-          },
-        });
-      }),
-    [store, t, tabs, viewId],
-  );
-
-  return null;
-}
diff --git a/plugins/alerts/src/frontend/AlertsView.tsx b/plugins/alerts/src/frontend/AlertsView.tsx
deleted file mode 100644
index f2dad9be5..000000000
--- a/plugins/alerts/src/frontend/AlertsView.tsx
+++ /dev/null
@@ -1,69 +0,0 @@
-import { useEffect, useMemo, useState } from "react";
-import { Bell, Radio, Route } from "lucide-react";
-import { usePluginApi, useTranslation } from "@termix/plugin-sdk/frontend";
-import { cn } from "@termix/plugin-sdk/ui";
-import { createAlertsApi } from "./api";
-import { ChannelsView } from "./ChannelsView";
-import { InboxView } from "./InboxView";
-import { RulesView } from "./RulesView";
-import type { AlertsStore } from "./store";
-
-import type { Section, SectionRequests } from "./sections";
-
-const SECTIONS: Array<{ id: Section; icon: typeof Bell; labelKey: string }> = [
-  { id: "inbox", icon: Bell, labelKey: "sections.inbox" },
-  { id: "channels", icon: Radio, labelKey: "sections.channels" },
-  { id: "rules", icon: Route, labelKey: "sections.rules" },
-];
-
-export function AlertsView({
-  store,
-  sections,
-}: {
-  store: AlertsStore;
-  sections: SectionRequests;
-}) {
-  const { t } = useTranslation();
-  const client = usePluginApi();
-  const api = useMemo(() => createAlertsApi(client), [client]);
-  const [section, setSection] = useState<Section>(
-    () => sections.take() ?? "inbox",
-  );
-
-  useEffect(
-    () =>
-      sections.subscribe((requested) => {
-        sections.take();
-        setSection(requested);
-      }),
-    [sections],
-  );
-
-  return (
-    <div className="flex flex-col flex-1 min-h-0 h-full bg-background">
-      <div className="flex items-center gap-1 border-b border-border px-2 shrink-0">
-        {SECTIONS.map(({ id, icon: Icon, labelKey }) => (
-          <button
-            key={id}
-            type="button"
-            onClick={() => setSection(id)}
-            className={cn(
-              "flex items-center gap-1.5 px-3 py-2 text-xs font-medium border-b-2 -mb-px transition-colors",
-              section === id
-                ? "border-accent-brand text-accent-brand"
-                : "border-transparent text-muted-foreground hover:text-foreground",
-            )}
-          >
-            <Icon className="size-3.5" />
-            {t(labelKey)}
-          </button>
-        ))}
-      </div>
-      <div className="flex flex-col flex-1 min-h-0 overflow-y-auto">
-        {section === "inbox" && <InboxView store={store} />}
-        {section === "channels" && <ChannelsView api={api} />}
-        {section === "rules" && <RulesView api={api} />}
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/alerts/src/frontend/ChannelDialog.tsx b/plugins/alerts/src/frontend/ChannelDialog.tsx
deleted file mode 100644
index 2a55d23e0..000000000
--- a/plugins/alerts/src/frontend/ChannelDialog.tsx
+++ /dev/null
@@ -1,325 +0,0 @@
-import { useEffect, useState } from "react";
-import { toast } from "sonner";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import {
-  Button,
-  Dialog,
-  DialogContent,
-  DialogFooter,
-  DialogHeader,
-  DialogTitle,
-  Input,
-  PasswordInput,
-  Switch,
-  Textarea,
-  cn,
-} from "@termix/plugin-sdk/ui";
-import { CHANNEL_TYPES, type ChannelType } from "../types";
-import { EMPTY, configFrom, draftFrom, type Draft } from "./channel-config";
-import type { AlertsApi } from "./api";
-
-function Field({
-  label,
-  hint,
-  children,
-}: {
-  label: string;
-  hint?: string;
-  children: React.ReactNode;
-}) {
-  return (
-    <div className="flex flex-col gap-1">
-      <label className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
-        {label}
-      </label>
-      {children}
-      {hint && (
-        <span className="text-[10px] text-muted-foreground">{hint}</span>
-      )}
-    </div>
-  );
-}
-
-export function ChannelDialog({
-  api,
-  open,
-  channelId,
-  emailAvailable,
-  onOpenChange,
-  onSaved,
-}: {
-  api: AlertsApi;
-  open: boolean;
-  /** Null to create a new channel. */
-  channelId: number | null;
-  emailAvailable: boolean;
-  onOpenChange: (open: boolean) => void;
-  onSaved: () => void;
-}) {
-  const { t } = useTranslation();
-  const [draft, setDraft] = useState<Draft>(EMPTY);
-  const [saving, setSaving] = useState(false);
-
-  useEffect(() => {
-    if (!open) return;
-    if (channelId === null) {
-      setDraft(EMPTY);
-      return;
-    }
-    api
-      .channel(channelId)
-      .then((channel) => setDraft(draftFrom(channel)))
-      .catch((error) =>
-        toast.error(error instanceof Error ? error.message : String(error)),
-      );
-  }, [api, channelId, open]);
-
-  const set = <K extends keyof Draft>(key: K, value: Draft[K]) =>
-    setDraft((current) => ({ ...current, [key]: value }));
-
-  const pickType = (type: ChannelType) =>
-    setDraft((current) => ({
-      ...current,
-      type,
-      url:
-        type === "ntfy" && !current.url
-          ? "https://ntfy.sh"
-          : type !== "ntfy" && current.url === "https://ntfy.sh"
-            ? ""
-            : current.url,
-    }));
-
-  const save = async () => {
-    if (!draft.name.trim()) {
-      toast.error(t("channels.nameRequired"));
-      return;
-    }
-    setSaving(true);
-    try {
-      const input = {
-        name: draft.name.trim(),
-        type: draft.type,
-        config: configFrom(draft),
-      };
-      if (channelId === null) await api.createChannel(input);
-      else await api.updateChannel(channelId, input);
-      onSaved();
-    } catch (error) {
-      toast.error(error instanceof Error ? error.message : String(error));
-    } finally {
-      setSaving(false);
-    }
-  };
-
-  const canReachPrivate = draft.type === "webhook" || draft.type === "ntfy";
-
-  return (
-    <Dialog open={open} onOpenChange={onOpenChange}>
-      <DialogContent className="max-w-md rounded-none">
-        <DialogHeader>
-          <DialogTitle>
-            {channelId === null ? t("channels.add") : t("channels.edit")}
-          </DialogTitle>
-        </DialogHeader>
-
-        <div className="flex flex-col gap-3 py-2">
-          <Field label={t("channels.name")}>
-            <Input
-              value={draft.name}
-              onChange={(event) => set("name", event.target.value)}
-              className="text-sm rounded-none"
-            />
-          </Field>
-
-          <Field label={t("channels.type")}>
-            <div className="flex flex-wrap gap-2">
-              {CHANNEL_TYPES.map((type) => {
-                const disabled = type === "email" && !emailAvailable;
-                return (
-                  <button
-                    key={type}
-                    type="button"
-                    disabled={disabled}
-                    title={
-                      disabled ? t("channels.emailUnavailable") : undefined
-                    }
-                    onClick={() => pickType(type)}
-                    className={cn(
-                      "px-3 py-1 text-xs font-semibold border transition-colors disabled:opacity-40 disabled:cursor-not-allowed",
-                      draft.type === type
-                        ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand"
-                        : "border-border text-muted-foreground hover:border-accent-brand/30",
-                    )}
-                  >
-                    {t(`channels.types.${type}`)}
-                  </button>
-                );
-              })}
-            </div>
-            {draft.type === "email" && !emailAvailable && (
-              <span className="text-[10px] text-destructive">
-                {t("channels.emailUnavailable")}
-              </span>
-            )}
-          </Field>
-
-          {draft.type === "webhook" && (
-            <>
-              <Field
-                label={t("channels.webhookUrl")}
-                hint={t("channels.webhookHint")}
-              >
-                <Input
-                  value={draft.url}
-                  onChange={(event) => set("url", event.target.value)}
-                  placeholder="https://example.com/webhook"
-                  className="text-sm font-mono rounded-none"
-                />
-              </Field>
-              <Field label={t("channels.method")}>
-                <div className="flex gap-2">
-                  {(["POST", "PUT"] as const).map((method) => (
-                    <button
-                      key={method}
-                      type="button"
-                      onClick={() => set("method", method)}
-                      className={cn(
-                        "px-3 py-1 text-xs font-mono border transition-colors",
-                        draft.method === method
-                          ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand"
-                          : "border-border text-muted-foreground",
-                      )}
-                    >
-                      {method}
-                    </button>
-                  ))}
-                </div>
-              </Field>
-              <Field
-                label={t("channels.headers")}
-                hint={t("channels.headersHint")}
-              >
-                <Textarea
-                  value={draft.headers}
-                  onChange={(event) => set("headers", event.target.value)}
-                  placeholder="Authorization: Bearer ..."
-                  rows={3}
-                  className="text-xs font-mono rounded-none"
-                />
-              </Field>
-            </>
-          )}
-
-          {draft.type === "ntfy" && (
-            <>
-              <Field label={t("channels.ntfyServer")}>
-                <Input
-                  value={draft.url}
-                  onChange={(event) => set("url", event.target.value)}
-                  placeholder="https://ntfy.sh"
-                  className="text-sm font-mono rounded-none"
-                />
-              </Field>
-              <Field label={t("channels.ntfyTopic")}>
-                <Input
-                  value={draft.topic}
-                  onChange={(event) => set("topic", event.target.value)}
-                  placeholder="my-alerts"
-                  className="text-sm font-mono rounded-none"
-                />
-              </Field>
-              <Field label={t("channels.ntfyToken")}>
-                <PasswordInput
-                  value={draft.token}
-                  onChange={(event) => set("token", event.target.value)}
-                  placeholder="tk_..."
-                  className="text-sm font-mono rounded-none"
-                />
-              </Field>
-            </>
-          )}
-
-          {draft.type === "discord" && (
-            <>
-              <Field
-                label={t("channels.discordUrl")}
-                hint={t("channels.discordHint")}
-              >
-                <Input
-                  value={draft.url}
-                  onChange={(event) => set("url", event.target.value)}
-                  placeholder="https://discord.com/api/webhooks/..."
-                  className="text-sm font-mono rounded-none"
-                />
-              </Field>
-              <Field label={t("channels.discordUsername")}>
-                <Input
-                  value={draft.username}
-                  onChange={(event) => set("username", event.target.value)}
-                  placeholder="Termix"
-                  className="text-sm rounded-none"
-                />
-              </Field>
-              <Field label={t("channels.discordAvatar")}>
-                <Input
-                  value={draft.avatarUrl}
-                  onChange={(event) => set("avatarUrl", event.target.value)}
-                  placeholder="https://example.com/avatar.png"
-                  className="text-sm font-mono rounded-none"
-                />
-              </Field>
-            </>
-          )}
-
-          {draft.type === "email" && (
-            <Field label={t("channels.emailTo")} hint={t("channels.emailHint")}>
-              <Input
-                value={draft.to}
-                onChange={(event) => set("to", event.target.value)}
-                placeholder="ops@example.com"
-                className="text-sm rounded-none"
-              />
-            </Field>
-          )}
-
-          {canReachPrivate && (
-            <div className="flex items-start justify-between gap-3">
-              <div className="flex flex-col">
-                <span className="text-xs font-medium">
-                  {t("channels.privateNetwork")}
-                </span>
-                <span className="text-[10px] text-muted-foreground">
-                  {t("channels.privateNetworkHint")}
-                </span>
-              </div>
-              <Switch
-                checked={draft.allowPrivateNetwork}
-                onCheckedChange={(checked) =>
-                  set("allowPrivateNetwork", checked)
-                }
-              />
-            </div>
-          )}
-        </div>
-
-        <DialogFooter>
-          <Button
-            variant="ghost"
-            className="rounded-none"
-            onClick={() => onOpenChange(false)}
-          >
-            {t("actions.cancel")}
-          </Button>
-          <Button
-            variant="outline"
-            onClick={() => void save()}
-            disabled={saving}
-            className="rounded-none border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-          >
-            {saving ? t("actions.saving") : t("actions.save")}
-          </Button>
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
-  );
-}
diff --git a/plugins/alerts/src/frontend/ChannelsView.tsx b/plugins/alerts/src/frontend/ChannelsView.tsx
deleted file mode 100644
index 0051af3d9..000000000
--- a/plugins/alerts/src/frontend/ChannelsView.tsx
+++ /dev/null
@@ -1,204 +0,0 @@
-import { useCallback, useEffect, useState } from "react";
-import { toast } from "sonner";
-import {
-  AlertTriangle,
-  Loader2,
-  Pencil,
-  Plus,
-  Send,
-  Trash2,
-} from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Badge, Button, Switch, useConfirmation } from "@termix/plugin-sdk/ui";
-import type { ChannelSummary } from "../types";
-import type { AlertsApi } from "./api";
-import { ChannelDialog } from "./ChannelDialog";
-
-export function ChannelsView({
-  api,
-  onChanged,
-}: {
-  api: AlertsApi;
-  onChanged?: () => void;
-}) {
-  const { t } = useTranslation();
-  const { confirmWithToast } = useConfirmation();
-  const [channels, setChannels] = useState<ChannelSummary[]>([]);
-  const [loading, setLoading] = useState(true);
-  const [emailAvailable, setEmailAvailable] = useState(false);
-  const [dialogOpen, setDialogOpen] = useState(false);
-  const [editingId, setEditingId] = useState<number | null>(null);
-  const [testing, setTesting] = useState<number | null>(null);
-
-  const load = useCallback(async () => {
-    try {
-      const [list, meta] = await Promise.all([api.channels(), api.meta()]);
-      setChannels(list);
-      setEmailAvailable(meta.emailAvailable);
-    } catch (error) {
-      toast.error(error instanceof Error ? error.message : String(error));
-    } finally {
-      setLoading(false);
-    }
-  }, [api]);
-
-  useEffect(() => {
-    void load();
-  }, [load]);
-
-  const test = async (channel: ChannelSummary) => {
-    setTesting(channel.id);
-    try {
-      await api.testChannel(channel.id);
-      toast.success(t("channels.testSent"));
-    } catch (error) {
-      toast.error(
-        t("channels.testFailed", {
-          error: error instanceof Error ? error.message : String(error),
-        }),
-      );
-    } finally {
-      setTesting(null);
-    }
-  };
-
-  const toggle = async (channel: ChannelSummary, enabled: boolean) => {
-    try {
-      await api.updateChannel(channel.id, { enabled });
-      setChannels((current) =>
-        current.map((entry) =>
-          entry.id === channel.id ? { ...entry, enabled } : entry,
-        ),
-      );
-    } catch (error) {
-      toast.error(error instanceof Error ? error.message : String(error));
-    }
-  };
-
-  const remove = (channel: ChannelSummary) => {
-    void confirmWithToast(
-      t("channels.deleteConfirm", { name: channel.name }),
-      async () => {
-        try {
-          await api.deleteChannel(channel.id);
-          toast.success(t("channels.deleted"));
-          await load();
-          onChanged?.();
-        } catch (error) {
-          toast.error(error instanceof Error ? error.message : String(error));
-        }
-      },
-      t("actions.delete"),
-      t("actions.cancel"),
-    );
-  };
-
-  return (
-    <div className="flex flex-col gap-2 p-3">
-      <p className="text-xs text-muted-foreground">{t("channels.intro")}</p>
-      <Button
-        size="sm"
-        variant="outline"
-        className="rounded-none self-start border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-        onClick={() => {
-          setEditingId(null);
-          setDialogOpen(true);
-        }}
-      >
-        <Plus className="size-3.5 mr-1" />
-        {t("channels.add")}
-      </Button>
-
-      {loading ? (
-        <Loader2 className="size-4 animate-spin text-muted-foreground m-4" />
-      ) : channels.length === 0 ? (
-        <p className="text-xs text-muted-foreground py-4">
-          {t("channels.empty")}
-        </p>
-      ) : (
-        <div className="flex flex-col border border-border">
-          {channels.map((channel) => (
-            <div
-              key={channel.id}
-              className="flex items-center gap-2 px-3 py-2 border-b border-border last:border-b-0"
-            >
-              <Switch
-                checked={channel.enabled}
-                onCheckedChange={(checked) => void toggle(channel, checked)}
-                aria-label={t("channels.enabled")}
-              />
-              <span className="flex-1 min-w-0 text-sm truncate">
-                {channel.name}
-              </span>
-              {!channel.usable && (
-                <span
-                  className="text-destructive"
-                  title={t("channels.needsSave")}
-                >
-                  <AlertTriangle className="size-3.5" />
-                </span>
-              )}
-              <Badge
-                variant="outline"
-                className="rounded-none text-[10px] uppercase"
-              >
-                {t(`channels.types.${channel.type}`)}
-              </Badge>
-              <Button
-                variant="ghost"
-                size="icon"
-                className="h-7 w-7 rounded-none"
-                title={t("channels.test")}
-                aria-label={t("channels.test")}
-                disabled={testing === channel.id}
-                onClick={() => void test(channel)}
-              >
-                {testing === channel.id ? (
-                  <Loader2 className="size-3.5 animate-spin" />
-                ) : (
-                  <Send className="size-3.5" />
-                )}
-              </Button>
-              <Button
-                variant="ghost"
-                size="icon"
-                className="h-7 w-7 rounded-none"
-                title={t("channels.edit")}
-                aria-label={t("channels.edit")}
-                onClick={() => {
-                  setEditingId(channel.id);
-                  setDialogOpen(true);
-                }}
-              >
-                <Pencil className="size-3.5" />
-              </Button>
-              <Button
-                variant="ghost"
-                size="icon"
-                className="h-7 w-7 rounded-none"
-                title={t("actions.delete")}
-                aria-label={t("actions.delete")}
-                onClick={() => remove(channel)}
-              >
-                <Trash2 className="size-3.5" />
-              </Button>
-            </div>
-          ))}
-        </div>
-      )}
-
-      <ChannelDialog
-        api={api}
-        open={dialogOpen}
-        channelId={editingId}
-        emailAvailable={emailAvailable}
-        onOpenChange={setDialogOpen}
-        onSaved={() => {
-          setDialogOpen(false);
-          void load();
-          onChanged?.();
-        }}
-      />
-    </div>
-  );
-}
diff --git a/plugins/alerts/src/frontend/InboxView.tsx b/plugins/alerts/src/frontend/InboxView.tsx
deleted file mode 100644
index 5d42fbe58..000000000
--- a/plugins/alerts/src/frontend/InboxView.tsx
+++ /dev/null
@@ -1,283 +0,0 @@
-import { useCallback, useEffect, useMemo, useState } from "react";
-import { toast } from "sonner";
-import { BellOff, CheckCheck, Loader2, Maximize2, Trash2 } from "lucide-react";
-import {
-  usePluginApi,
-  useTabs,
-  useTranslation,
-} from "@termix/plugin-sdk/frontend";
-import {
-  Button,
-  Select,
-  SelectContent,
-  SelectItem,
-  SelectTrigger,
-  SelectValue,
-  cn,
-} from "@termix/plugin-sdk/ui";
-import { SEVERITIES, type AlertItem, type Severity } from "../types";
-import { createAlertsApi } from "./api";
-import { AlertList } from "./AlertList";
-import { sourceLabel } from "./format";
-import { useAlertsVersion, type AlertsStore } from "./store";
-
-const ALL = "__all";
-
-export function InboxView({
-  store,
-  compact = false,
-  onOpenAll,
-}: {
-  store: AlertsStore;
-  compact?: boolean;
-  onOpenAll?: () => void;
-}) {
-  const { t } = useTranslation();
-  const client = usePluginApi();
-  const api = useMemo(() => createAlertsApi(client), [client]);
-  const tabs = useTabs();
-  const version = useAlertsVersion(store);
-
-  const [items, setItems] = useState<AlertItem[]>([]);
-  const [loading, setLoading] = useState(true);
-  const [hasMore, setHasMore] = useState(false);
-  const [unreadOnly, setUnreadOnly] = useState(false);
-  const [severity, setSeverity] = useState<Severity | "">("");
-  const [source, setSource] = useState("");
-  const [sources, setSources] = useState<string[]>([]);
-  const pageSize = compact ? 25 : 50;
-
-  const load = useCallback(async () => {
-    try {
-      const result = await api.items({
-        unread: unreadOnly,
-        severity: severity || undefined,
-        source: source || undefined,
-        limit: pageSize,
-      });
-      setItems(result.items);
-      setHasMore(result.items.length === pageSize);
-      store.setUnread(result.unread);
-    } catch (error) {
-      toast.error(error instanceof Error ? error.message : String(error));
-    } finally {
-      setLoading(false);
-    }
-  }, [api, pageSize, severity, source, store, unreadOnly]);
-
-  useEffect(() => {
-    void load();
-  }, [load, version]);
-
-  useEffect(() => {
-    if (compact) return;
-    api
-      .categories()
-      .then((rows) =>
-        setSources([...new Set(rows.map((row) => row.source))].sort()),
-      )
-      .catch(() => {});
-  }, [api, compact, version]);
-
-  const loadMore = async () => {
-    const last = items[items.length - 1];
-    if (!last) return;
-    try {
-      const result = await api.items({
-        unread: unreadOnly,
-        severity: severity || undefined,
-        source: source || undefined,
-        limit: pageSize,
-        before: last.id,
-      });
-      setItems((current) => [...current, ...result.items]);
-      setHasMore(result.items.length === pageSize);
-    } catch (error) {
-      toast.error(error instanceof Error ? error.message : String(error));
-    }
-  };
-
-  const setRead = async (ids: number[] | "all", read: boolean) => {
-    const { count } = await api.setRead(ids, read);
-    store.setUnread(count);
-    const now = new Date().toISOString();
-    setItems((current) =>
-      current
-        .map((item) =>
-          ids === "all" || ids.includes(item.id)
-            ? { ...item, readAt: read ? (item.readAt ?? now) : null }
-            : item,
-        )
-        .filter((item) => !unreadOnly || !item.readAt),
-    );
-  };
-
-  const open = (item: AlertItem) => {
-    if (!item.readAt) void setRead([item.id], true).catch(() => {});
-    if (item.link?.tab) tabs.openSingletonTab(item.link.tab);
-  };
-
-  const remove = async (item: AlertItem) => {
-    try {
-      await api.remove(item.id);
-      setItems((current) => current.filter((entry) => entry.id !== item.id));
-      store.setUnread((await api.unread()).count);
-    } catch (error) {
-      toast.error(error instanceof Error ? error.message : String(error));
-    }
-  };
-
-  const clearRead = async () => {
-    try {
-      const { removed } = await api.clear(true);
-      toast.success(t("inbox.cleared", { count: removed }));
-      await load();
-    } catch (error) {
-      toast.error(error instanceof Error ? error.message : String(error));
-    }
-  };
-
-  const unread = items.some((item) => !item.readAt);
-
-  return (
-    <div className="flex flex-col flex-1 min-h-0">
-      <div
-        className={cn(
-          "flex flex-wrap items-center gap-1.5 border-b border-border shrink-0",
-          compact ? "px-2 py-1.5" : "px-3 py-2",
-        )}
-      >
-        <div className="flex border border-border">
-          {[false, true].map((value) => (
-            <button
-              key={String(value)}
-              type="button"
-              onClick={() => setUnreadOnly(value)}
-              className={cn(
-                "px-2 py-1 text-xs font-medium transition-colors",
-                unreadOnly === value
-                  ? "bg-accent-brand/10 text-accent-brand"
-                  : "text-muted-foreground hover:text-foreground",
-              )}
-            >
-              {value ? t("inbox.filterUnread") : t("inbox.filterAll")}
-            </button>
-          ))}
-        </div>
-        {!compact && (
-          <>
-            <Select
-              value={severity || ALL}
-              onValueChange={(value) =>
-                setSeverity(value === ALL ? "" : (value as Severity))
-              }
-            >
-              <SelectTrigger className="h-7 w-[140px] rounded-none text-xs">
-                <SelectValue />
-              </SelectTrigger>
-              <SelectContent>
-                <SelectItem value={ALL}>{t("inbox.anySeverity")}</SelectItem>
-                {SEVERITIES.map((value) => (
-                  <SelectItem key={value} value={value}>
-                    {t(`severity.${value}`)}
-                  </SelectItem>
-                ))}
-              </SelectContent>
-            </Select>
-            <Select
-              value={source || ALL}
-              onValueChange={(value) => setSource(value === ALL ? "" : value)}
-            >
-              <SelectTrigger className="h-7 w-[160px] rounded-none text-xs">
-                <SelectValue />
-              </SelectTrigger>
-              <SelectContent>
-                <SelectItem value={ALL}>{t("inbox.anySource")}</SelectItem>
-                {sources.map((value) => (
-                  <SelectItem key={value} value={value}>
-                    {sourceLabel(value, t)}
-                  </SelectItem>
-                ))}
-              </SelectContent>
-            </Select>
-          </>
-        )}
-        <span className="flex-1" />
-        <Button
-          variant="ghost"
-          size="icon"
-          className="h-7 w-7 rounded-none"
-          disabled={!unread}
-          title={t("inbox.markAllRead")}
-          aria-label={t("inbox.markAllRead")}
-          onClick={() => void setRead("all", true).catch(() => {})}
-        >
-          <CheckCheck className="size-4" />
-        </Button>
-        {!compact && (
-          <Button
-            variant="ghost"
-            size="icon"
-            className="h-7 w-7 rounded-none"
-            title={t("inbox.clearRead")}
-            aria-label={t("inbox.clearRead")}
-            onClick={() => void clearRead()}
-          >
-            <Trash2 className="size-4" />
-          </Button>
-        )}
-        {onOpenAll && (
-          <Button
-            variant="ghost"
-            size="icon"
-            className="h-7 w-7 rounded-none"
-            title={t("inbox.openAll")}
-            aria-label={t("inbox.openAll")}
-            onClick={onOpenAll}
-          >
-            <Maximize2 className="size-4" />
-          </Button>
-        )}
-      </div>
-
-      <div className="flex-1 min-h-0 overflow-y-auto">
-        {loading ? (
-          <div className="flex justify-center p-6">
-            <Loader2 className="size-4 animate-spin text-muted-foreground" />
-          </div>
-        ) : items.length === 0 ? (
-          <div className="flex flex-col items-center gap-2 p-8 text-center text-muted-foreground">
-            <BellOff className="size-6" />
-            <p className="text-sm">
-              {unreadOnly ? t("inbox.emptyUnread") : t("inbox.empty")}
-            </p>
-          </div>
-        ) : (
-          <>
-            <AlertList
-              items={items}
-              compact={compact}
-              onOpen={open}
-              onToggleRead={(item) =>
-                void setRead([item.id], !item.readAt).catch(() => {})
-              }
-              onDelete={(item) => void remove(item)}
-            />
-            {hasMore && (
-              <div className="p-2">
-                <Button
-                  variant="ghost"
-                  size="sm"
-                  className="w-full rounded-none text-xs"
-                  onClick={() => void loadMore()}
-                >
-                  {t("inbox.loadMore")}
-                </Button>
-              </div>
-            )}
-          </>
-        )}
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/alerts/src/frontend/RulesView.tsx b/plugins/alerts/src/frontend/RulesView.tsx
deleted file mode 100644
index 489bf6a6e..000000000
--- a/plugins/alerts/src/frontend/RulesView.tsx
+++ /dev/null
@@ -1,337 +0,0 @@
-import { useCallback, useEffect, useState } from "react";
-import { toast } from "sonner";
-import { Loader2, Pencil, Plus, Trash2 } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import {
-  Button,
-  Checkbox,
-  Dialog,
-  DialogContent,
-  DialogFooter,
-  DialogHeader,
-  DialogTitle,
-  Input,
-  Select,
-  SelectContent,
-  SelectItem,
-  SelectTrigger,
-  SelectValue,
-  Switch,
-  useConfirmation,
-} from "@termix/plugin-sdk/ui";
-import {
-  SEVERITIES,
-  type AlertRule,
-  type ChannelSummary,
-  type Severity,
-} from "../types";
-import type { AlertsApi, RuleInput } from "./api";
-
-const EMPTY: RuleInput = {
-  name: "",
-  match: "*",
-  minSeverity: "warning",
-  channelIds: [],
-  enabled: true,
-};
-
-export function RulesView({ api }: { api: AlertsApi }) {
-  const { t } = useTranslation();
-  const { confirmWithToast } = useConfirmation();
-  const [rules, setRules] = useState<AlertRule[]>([]);
-  const [channels, setChannels] = useState<ChannelSummary[]>([]);
-  const [categories, setCategories] = useState<string[]>([]);
-  const [loading, setLoading] = useState(true);
-  const [editing, setEditing] = useState<AlertRule | null>(null);
-  const [draft, setDraft] = useState<RuleInput>(EMPTY);
-  const [dialogOpen, setDialogOpen] = useState(false);
-  const [saving, setSaving] = useState(false);
-
-  const load = useCallback(async () => {
-    try {
-      const [ruleList, channelList, categoryList] = await Promise.all([
-        api.rules(),
-        api.channels(),
-        api.categories(),
-      ]);
-      setRules(ruleList);
-      setChannels(channelList);
-      setCategories([...new Set(categoryList.map((entry) => entry.category))]);
-    } catch (error) {
-      toast.error(error instanceof Error ? error.message : String(error));
-    } finally {
-      setLoading(false);
-    }
-  }, [api]);
-
-  useEffect(() => {
-    void load();
-  }, [load]);
-
-  const channelName = (id: number) =>
-    channels.find((channel) => channel.id === id)?.name ?? `#${id}`;
-
-  const openEditor = (rule: AlertRule | null) => {
-    setEditing(rule);
-    setDraft(
-      rule
-        ? {
-            name: rule.name,
-            match: rule.match,
-            minSeverity: rule.minSeverity,
-            channelIds: rule.channelIds,
-            enabled: rule.enabled,
-          }
-        : EMPTY,
-    );
-    setDialogOpen(true);
-  };
-
-  const save = async () => {
-    if (!draft.name.trim()) {
-      toast.error(t("rules.nameRequired"));
-      return;
-    }
-    if (draft.channelIds.length === 0) {
-      toast.error(t("rules.channelRequired"));
-      return;
-    }
-    setSaving(true);
-    try {
-      if (editing) await api.updateRule(editing.id, draft);
-      else await api.createRule(draft);
-      setDialogOpen(false);
-      await load();
-    } catch (error) {
-      toast.error(error instanceof Error ? error.message : String(error));
-    } finally {
-      setSaving(false);
-    }
-  };
-
-  const toggle = async (rule: AlertRule, enabled: boolean) => {
-    try {
-      await api.updateRule(rule.id, {
-        name: rule.name,
-        match: rule.match,
-        minSeverity: rule.minSeverity,
-        channelIds: rule.channelIds,
-        enabled,
-      });
-      setRules((current) =>
-        current.map((entry) =>
-          entry.id === rule.id ? { ...entry, enabled } : entry,
-        ),
-      );
-    } catch (error) {
-      toast.error(error instanceof Error ? error.message : String(error));
-    }
-  };
-
-  const remove = (rule: AlertRule) => {
-    void confirmWithToast(
-      t("rules.deleteConfirm", { name: rule.name }),
-      async () => {
-        try {
-          await api.deleteRule(rule.id);
-          await load();
-        } catch (error) {
-          toast.error(error instanceof Error ? error.message : String(error));
-        }
-      },
-      t("actions.delete"),
-      t("actions.cancel"),
-    );
-  };
-
-  const toggleChannel = (id: number, checked: boolean) =>
-    setDraft((current) => ({
-      ...current,
-      channelIds: checked
-        ? [...new Set([...current.channelIds, id])]
-        : current.channelIds.filter((entry) => entry !== id),
-    }));
-
-  return (
-    <div className="flex flex-col gap-2 p-3">
-      <p className="text-xs text-muted-foreground">{t("rules.intro")}</p>
-      <Button
-        size="sm"
-        variant="outline"
-        className="rounded-none self-start border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-        disabled={channels.length === 0}
-        title={channels.length === 0 ? t("rules.needChannel") : undefined}
-        onClick={() => openEditor(null)}
-      >
-        <Plus className="size-3.5 mr-1" />
-        {t("rules.add")}
-      </Button>
-
-      {loading ? (
-        <Loader2 className="size-4 animate-spin text-muted-foreground m-4" />
-      ) : rules.length === 0 ? (
-        <p className="text-xs text-muted-foreground py-4">
-          {channels.length === 0 ? t("rules.needChannel") : t("rules.empty")}
-        </p>
-      ) : (
-        <div className="flex flex-col border border-border">
-          {rules.map((rule) => (
-            <div
-              key={rule.id}
-              className="flex items-center gap-2 px-3 py-2 border-b border-border last:border-b-0"
-            >
-              <Switch
-                checked={rule.enabled}
-                onCheckedChange={(checked) => void toggle(rule, checked)}
-                aria-label={t("rules.enabled")}
-              />
-              <div className="flex-1 min-w-0">
-                <div className="text-sm truncate">{rule.name}</div>
-                <div className="text-[11px] text-muted-foreground truncate">
-                  {t("rules.summary", {
-                    match:
-                      rule.match === "*" ? t("rules.everything") : rule.match,
-                    severity: t(`severity.${rule.minSeverity}`),
-                    channels: rule.channelIds.map(channelName).join(", "),
-                  })}
-                </div>
-              </div>
-              <Button
-                variant="ghost"
-                size="icon"
-                className="h-7 w-7 rounded-none"
-                title={t("rules.edit")}
-                aria-label={t("rules.edit")}
-                onClick={() => openEditor(rule)}
-              >
-                <Pencil className="size-3.5" />
-              </Button>
-              <Button
-                variant="ghost"
-                size="icon"
-                className="h-7 w-7 rounded-none"
-                title={t("actions.delete")}
-                aria-label={t("actions.delete")}
-                onClick={() => remove(rule)}
-              >
-                <Trash2 className="size-3.5" />
-              </Button>
-            </div>
-          ))}
-        </div>
-      )}
-
-      <Dialog open={dialogOpen} onOpenChange={setDialogOpen}>
-        <DialogContent className="max-w-md rounded-none">
-          <DialogHeader>
-            <DialogTitle>
-              {editing ? t("rules.edit") : t("rules.add")}
-            </DialogTitle>
-          </DialogHeader>
-          <div className="flex flex-col gap-3 py-2">
-            <div className="flex flex-col gap-1">
-              <label className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
-                {t("rules.name")}
-              </label>
-              <Input
-                value={draft.name}
-                onChange={(event) =>
-                  setDraft({ ...draft, name: event.target.value })
-                }
-                className="text-sm rounded-none"
-              />
-            </div>
-            <div className="flex flex-col gap-1">
-              <label className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
-                {t("rules.match")}
-              </label>
-              <Input
-                value={draft.match}
-                list="alerts-rule-categories"
-                onChange={(event) =>
-                  setDraft({ ...draft, match: event.target.value })
-                }
-                placeholder="*"
-                className="text-sm font-mono rounded-none"
-              />
-              <datalist id="alerts-rule-categories">
-                <option value="*" />
-                {categories.map((category) => (
-                  <option key={category} value={category} />
-                ))}
-              </datalist>
-              <span className="text-[10px] text-muted-foreground">
-                {t("rules.matchHint")}
-              </span>
-            </div>
-            <div className="flex flex-col gap-1">
-              <label className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
-                {t("rules.minSeverity")}
-              </label>
-              <Select
-                value={draft.minSeverity}
-                onValueChange={(value) =>
-                  setDraft({ ...draft, minSeverity: value as Severity })
-                }
-              >
-                <SelectTrigger className="h-8 rounded-none text-sm">
-                  <SelectValue />
-                </SelectTrigger>
-                <SelectContent>
-                  {SEVERITIES.filter((value) => value !== "success").map(
-                    (value) => (
-                      <SelectItem key={value} value={value}>
-                        {t(`severity.${value}`)}
-                      </SelectItem>
-                    ),
-                  )}
-                </SelectContent>
-              </Select>
-            </div>
-            <div className="flex flex-col gap-1">
-              <label className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
-                {t("rules.channels")}
-              </label>
-              <div className="flex flex-col gap-1.5 border border-border p-2 max-h-40 overflow-y-auto">
-                {channels.map((channel) => (
-                  <label
-                    key={channel.id}
-                    className="flex items-center gap-2 text-sm cursor-pointer"
-                  >
-                    <Checkbox
-                      checked={draft.channelIds.includes(channel.id)}
-                      onCheckedChange={(checked) =>
-                        toggleChannel(channel.id, checked === true)
-                      }
-                    />
-                    <span className="truncate">{channel.name}</span>
-                    <span className="text-[10px] uppercase text-muted-foreground">
-                      {t(`channels.types.${channel.type}`)}
-                    </span>
-                  </label>
-                ))}
-              </div>
-            </div>
-          </div>
-          <DialogFooter>
-            <Button
-              variant="ghost"
-              className="rounded-none"
-              onClick={() => setDialogOpen(false)}
-            >
-              {t("actions.cancel")}
-            </Button>
-            <Button
-              variant="outline"
-              disabled={saving}
-              onClick={() => void save()}
-              className="rounded-none border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-            >
-              {saving ? t("actions.saving") : t("actions.save")}
-            </Button>
-          </DialogFooter>
-        </DialogContent>
-      </Dialog>
-    </div>
-  );
-}
diff --git a/plugins/alerts/src/frontend/api.ts b/plugins/alerts/src/frontend/api.ts
deleted file mode 100644
index ffae14803..000000000
--- a/plugins/alerts/src/frontend/api.ts
+++ /dev/null
@@ -1,123 +0,0 @@
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import type {
-  AlertItem,
-  AlertRule,
-  AlertsMeta,
-  ChannelDetail,
-  ChannelSummary,
-  ChannelType,
-  Severity,
-} from "../types";
-
-export interface ItemQuery {
-  unread?: boolean;
-  source?: string;
-  severity?: Severity;
-  limit?: number;
-  before?: number;
-}
-
-export interface ChannelInput {
-  name: string;
-  type: ChannelType;
-  config: Record<string, unknown>;
-  enabled?: boolean;
-}
-
-export type RuleInput = Omit<AlertRule, "id">;
-
-function apiError(error: unknown, action: string): Error {
-  const data = (
-    error as { response?: { data?: { error?: string; message?: string } } }
-  )?.response?.data;
-  return new Error(
-    data?.error ||
-      data?.message ||
-      (error instanceof Error ? error.message : `Failed to ${action}`),
-  );
-}
-
-async function call<T>(
-  action: string,
-  request: () => Promise<{ data: T }>,
-): Promise<T> {
-  try {
-    return (await request()).data;
-  } catch (error) {
-    throw apiError(error, action);
-  }
-}
-
-function query(params: ItemQuery): string {
-  const search = new URLSearchParams();
-  if (params.unread) search.set("unread", "true");
-  if (params.source) search.set("source", params.source);
-  if (params.severity) search.set("severity", params.severity);
-  if (params.limit) search.set("limit", String(params.limit));
-  if (params.before) search.set("before", String(params.before));
-  const text = search.toString();
-  return text ? `?${text}` : "";
-}
-
-export function createAlertsApi(api: PluginApiClient) {
-  return {
-    items: (params: ItemQuery = {}) =>
-      call<{ items: AlertItem[]; unread: number }>("load alerts", () =>
-        api.get(`/items${query(params)}`),
-      ),
-    unread: () =>
-      call<{ count: number }>("count alerts", () => api.get("/unread")),
-    setRead: (ids: number[] | "all", read = true) =>
-      call<{ count: number }>("update alerts", () =>
-        api.post(
-          "/items/read",
-          ids === "all" ? { all: true, read } : { ids, read },
-        ),
-      ),
-    remove: (id: number) =>
-      call<{ success: boolean }>("delete alert", () =>
-        api.delete(`/items/${id}`),
-      ),
-    clear: (onlyRead: boolean) =>
-      call<{ removed: number }>("clear alerts", () =>
-        api.delete(`/items${onlyRead ? "?read=true" : ""}`),
-      ),
-    categories: () =>
-      call<Array<{ source: string; category: string }>>("load categories", () =>
-        api.get("/categories"),
-      ),
-    meta: () => call<AlertsMeta>("load channel types", () => api.get("/meta")),
-    channels: () =>
-      call<ChannelSummary[]>("load channels", () => api.get("/channels")),
-    channel: (id: number) =>
-      call<ChannelDetail>("load channel", () => api.get(`/channels/${id}`)),
-    createChannel: (input: ChannelInput) =>
-      call<ChannelDetail>("create channel", () => api.post("/channels", input)),
-    updateChannel: (id: number, input: Partial<ChannelInput>) =>
-      call<ChannelDetail>("update channel", () =>
-        api.put(`/channels/${id}`, input),
-      ),
-    deleteChannel: (id: number) =>
-      call<{ success: boolean }>("delete channel", () =>
-        api.delete(`/channels/${id}`),
-      ),
-    testChannel: async (id: number) => {
-      const result = await call<{ success: boolean; error?: string }>(
-        "test channel",
-        () => api.post(`/channels/${id}/test`),
-      );
-      if (!result.success) throw new Error(result.error || "Test failed");
-    },
-    rules: () => call<AlertRule[]>("load rules", () => api.get("/rules")),
-    createRule: (input: RuleInput) =>
-      call<AlertRule>("create rule", () => api.post("/rules", input)),
-    updateRule: (id: number, input: RuleInput) =>
-      call<AlertRule>("update rule", () => api.put(`/rules/${id}`, input)),
-    deleteRule: (id: number) =>
-      call<{ success: boolean }>("delete rule", () =>
-        api.delete(`/rules/${id}`),
-      ),
-  };
-}
-
-export type AlertsApi = ReturnType<typeof createAlertsApi>;
diff --git a/plugins/alerts/src/frontend/channel-config.ts b/plugins/alerts/src/frontend/channel-config.ts
deleted file mode 100644
index e88221fd3..000000000
--- a/plugins/alerts/src/frontend/channel-config.ts
+++ /dev/null
@@ -1,101 +0,0 @@
-import type { ChannelDetail, ChannelType } from "../types";
-
-export interface Draft {
-  name: string;
-  type: ChannelType;
-  url: string;
-  method: "POST" | "PUT";
-  headers: string;
-  topic: string;
-  token: string;
-  username: string;
-  avatarUrl: string;
-  to: string;
-  allowPrivateNetwork: boolean;
-}
-
-export const EMPTY: Draft = {
-  name: "",
-  type: "webhook",
-  url: "",
-  method: "POST",
-  headers: "",
-  topic: "",
-  token: "",
-  username: "",
-  avatarUrl: "",
-  to: "",
-  allowPrivateNetwork: false,
-};
-
-const str = (value: unknown) => (typeof value === "string" ? value : "");
-
-export function draftFrom(channel: ChannelDetail): Draft {
-  const config = channel.config;
-  const headers =
-    config.headers && typeof config.headers === "object"
-      ? Object.entries(config.headers as Record<string, unknown>)
-          .map(([key, value]) => `${key}: ${String(value)}`)
-          .join("\n")
-      : "";
-  return {
-    ...EMPTY,
-    name: channel.name,
-    type: channel.type,
-    url: str(config.url) || (channel.type === "ntfy" ? "https://ntfy.sh" : ""),
-    method: config.method === "PUT" ? "PUT" : "POST",
-    headers,
-    topic: str(config.topic),
-    token: str(config.token),
-    username: str(config.username),
-    avatarUrl: str(config.avatar_url),
-    to: str(config.to),
-    allowPrivateNetwork: config.allowPrivateNetwork === true,
-  };
-}
-
-export function parseHeaders(text: string): Record<string, string> {
-  const headers: Record<string, string> = {};
-  for (const line of text.split(/\r?\n/)) {
-    const at = line.indexOf(":");
-    if (at <= 0) continue;
-    const key = line.slice(0, at).trim();
-    const value = line.slice(at + 1).trim();
-    if (key) headers[key] = value;
-  }
-  return headers;
-}
-
-export function configFrom(draft: Draft): Record<string, unknown> {
-  const privateNetwork = draft.allowPrivateNetwork
-    ? { allowPrivateNetwork: true }
-    : {};
-  switch (draft.type) {
-    case "webhook": {
-      const headers = parseHeaders(draft.headers);
-      return {
-        url: draft.url.trim(),
-        method: draft.method,
-        ...(Object.keys(headers).length ? { headers } : {}),
-        ...privateNetwork,
-      };
-    }
-    case "ntfy":
-      return {
-        url: draft.url.trim(),
-        topic: draft.topic.trim(),
-        ...(draft.token.trim() ? { token: draft.token.trim() } : {}),
-        ...privateNetwork,
-      };
-    case "discord":
-      return {
-        url: draft.url.trim(),
-        ...(draft.username.trim() ? { username: draft.username.trim() } : {}),
-        ...(draft.avatarUrl.trim()
-          ? { avatar_url: draft.avatarUrl.trim() }
-          : {}),
-      };
-    case "email":
-      return { to: draft.to.trim() };
-  }
-}
diff --git a/plugins/alerts/src/frontend/format.ts b/plugins/alerts/src/frontend/format.ts
deleted file mode 100644
index b1d5c13af..000000000
--- a/plugins/alerts/src/frontend/format.ts
+++ /dev/null
@@ -1,30 +0,0 @@
-import { ANNOUNCEMENT_SOURCE } from "../types";
-
-export function timeAgo(iso: string, language: string): string {
-  // SQLite's CURRENT_TIMESTAMP has no zone; it is UTC.
-  const normalized = /[zZ]|[+-]\d\d:?\d\d$/.test(iso)
-    ? iso
-    : `${iso.replace(" ", "T")}Z`;
-  const ms = Date.parse(normalized);
-  if (!Number.isFinite(ms)) return "";
-  const seconds = Math.round((ms - Date.now()) / 1000);
-  const format = new Intl.RelativeTimeFormat(language || "en", {
-    numeric: "auto",
-  });
-  const abs = Math.abs(seconds);
-  if (abs < 60) return format.format(seconds, "second");
-  if (abs < 3600) return format.format(Math.round(seconds / 60), "minute");
-  if (abs < 86400) return format.format(Math.round(seconds / 3600), "hour");
-  return format.format(Math.round(seconds / 86400), "day");
-}
-
-export function sourceLabel(
-  source: string,
-  t: (key: string, options?: Record<string, unknown>) => string,
-): string {
-  if (source === ANNOUNCEMENT_SOURCE) return t("inbox.sourceTermix");
-  return source
-    .split("-")
-    .map((part) => part.charAt(0).toUpperCase() + part.slice(1))
-    .join(" ");
-}
diff --git a/plugins/alerts/src/frontend/index.tsx b/plugins/alerts/src/frontend/index.tsx
deleted file mode 100644
index 9b447d9e4..000000000
--- a/plugins/alerts/src/frontend/index.tsx
+++ /dev/null
@@ -1,112 +0,0 @@
-import type { ComponentType } from "react";
-import { Bell } from "lucide-react";
-import type {
-  PanelProps,
-  TabProps,
-  TermixApp,
-} from "@termix/plugin-sdk/frontend";
-import { AlertToaster } from "./AlertToaster";
-import { AlertsView } from "./AlertsView";
-import { createSectionRequests } from "./sections";
-import { InboxView } from "./InboxView";
-import { createAlertsStore, useUnreadCount } from "./store";
-import { createAlertsApi } from "./api";
-import {
-  AlertFeedEditForm,
-  AlertFeedLabel,
-  DEFAULT_ALERT_FEED_CONFIG,
-  createAlertFeedWidget,
-} from "./AlertFeedWidget";
-
-// The homepage grid step, in pixels.
-const GRID_SIZE = 30;
-
-const VIEW_ID = "alerts";
-
-export function activate(app: TermixApp): void {
-  const store = createAlertsStore({
-    connect: (init) => app.fetch("/stream", init),
-    loadUnread: async () =>
-      (await app.api.get<{ count: number }>("/unread")).data.count,
-  });
-  const sections = createSectionRequests();
-
-  if (!app.guest) {
-    void app.hasPermission("use").then((allowed) => {
-      if (allowed) store.start();
-    });
-  }
-  app.onDispose(() => store.stop());
-
-  const openTab = () => app.tabs.openSingletonTab(VIEW_ID);
-
-  function Panel({ active }: PanelProps) {
-    if (!active) return null;
-    return <InboxView store={store} compact onOpenAll={openTab} />;
-  }
-
-  function AlertsTab() {
-    return <AlertsView store={store} sections={sections} />;
-  }
-
-  function Toaster() {
-    return <AlertToaster store={store} viewId={VIEW_ID} />;
-  }
-
-  app.registerRailItem({
-    id: VIEW_ID,
-    icon: Bell,
-    titleKey: "nav.alerts",
-    placement: "footer",
-    simplePreset: true,
-    promotable: true,
-    rightDockable: true,
-    separatorAfter: false,
-    permission: "use",
-    useBadge: () => useUnreadCount(store),
-  });
-  app.registerPanel(VIEW_ID, Panel);
-  app.registerTab(VIEW_ID, AlertsTab as ComponentType<TabProps>, {
-    icon: Bell,
-    titleKey: "nav.alerts",
-    singleton: true,
-    hostless: true,
-    panelFrame: true,
-  });
-
-  app.registerSlotContribution("shell.overlay", {
-    actionId: "alerts.toaster",
-    titleKey: "nav.alerts",
-    kind: "component",
-    component: Toaster as ComponentType<Record<string, unknown>>,
-  });
-
-  app.registerExtension("homepage.widgets", {
-    id: "alert_feed",
-    name: "Alert Feed",
-    description: "Your latest alerts",
-    category: "monitoring",
-    icon: <Bell size={14} />,
-    defaultConfig: DEFAULT_ALERT_FEED_CONFIG,
-    defaultSize: { w: GRID_SIZE * 10, h: GRID_SIZE * 10 },
-    minSize: { w: GRID_SIZE * 6, h: GRID_SIZE * 5 },
-    components: {
-      view: createAlertFeedWidget(createAlertsApi(app.api), store) as never,
-      editForm: AlertFeedEditForm as never,
-      label: AlertFeedLabel as never,
-    },
-  });
-
-  app.registerAction("alerts.open", () => openTab());
-  app.registerAction("alerts.openChannels", () => {
-    sections.request("channels");
-    openTab();
-  });
-
-  app.registerSlotContribution("onboarding.features", {
-    actionId: "alerts.feature",
-    titleKey: "onboarding.feature",
-    descriptionKey: "onboarding.featureDesc",
-    icon: Bell as ComponentType<{ className?: string }>,
-  });
-}
diff --git a/plugins/alerts/src/frontend/popups.ts b/plugins/alerts/src/frontend/popups.ts
deleted file mode 100644
index c9a84a6dd..000000000
--- a/plugins/alerts/src/frontend/popups.ts
+++ /dev/null
@@ -1,9 +0,0 @@
-import { severityRank, type AlertItem } from "../types";
-
-export type PopupLevel = "all" | "warning" | "critical" | "off";
-
-export function shouldPopUp(item: AlertItem, level: PopupLevel): boolean {
-  if (level === "off") return false;
-  if (level === "all") return true;
-  return severityRank(item.severity) >= severityRank(level);
-}
diff --git a/plugins/alerts/src/frontend/sections.ts b/plugins/alerts/src/frontend/sections.ts
deleted file mode 100644
index a03dae1e9..000000000
--- a/plugins/alerts/src/frontend/sections.ts
+++ /dev/null
@@ -1,26 +0,0 @@
-export type Section = "inbox" | "channels" | "rules";
-
-/** Lets an action open the tab on a given section. */
-export function createSectionRequests() {
-  let pending: Section | null = null;
-  const listeners = new Set<(section: Section) => void>();
-  return {
-    request(section: Section) {
-      pending = section;
-      for (const listener of listeners) listener(section);
-    },
-    take(): Section | null {
-      const section = pending;
-      pending = null;
-      return section;
-    },
-    subscribe(listener: (section: Section) => void): () => void {
-      listeners.add(listener);
-      return () => {
-        listeners.delete(listener);
-      };
-    },
-  };
-}
-
-export type SectionRequests = ReturnType<typeof createSectionRequests>;
diff --git a/plugins/alerts/src/frontend/store.ts b/plugins/alerts/src/frontend/store.ts
deleted file mode 100644
index f049b50b9..000000000
--- a/plugins/alerts/src/frontend/store.ts
+++ /dev/null
@@ -1,177 +0,0 @@
-import { useSyncExternalStore } from "react";
-import type { AlertItem } from "../types";
-
-interface ServerSentEvent {
-  event: string;
-  data: string;
-}
-
-export function parseServerSentEvents(
-  buffer: string,
-  onEvent: (event: ServerSentEvent) => void,
-): string {
-  const blocks = buffer.split(/\r?\n\r?\n/);
-  const rest = blocks.pop() ?? "";
-  for (const block of blocks) {
-    let event = "message";
-    const data: string[] = [];
-    for (const line of block.split(/\r?\n/)) {
-      if (line.startsWith(":")) continue;
-      if (line.startsWith("event:")) event = line.slice(6).trim();
-      else if (line.startsWith("data:")) data.push(line.slice(5).trimStart());
-    }
-    if (data.length > 0) onEvent({ event, data: data.join("\n") });
-  }
-  return rest;
-}
-
-export interface AlertsStoreDeps {
-  /** Opens the event stream; app.fetch carries core's auth. */
-  connect: (init: RequestInit) => Promise<Response>;
-  /** The unread count, for when the stream is down. */
-  loadUnread: () => Promise<number>;
-  retryMs?: number;
-  pollMs?: number;
-}
-
-/**
- * The live side of the inbox: the unread count every badge shows, and every
- * new alert as it arrives, from one stream shared by the whole app.
- */
-export function createAlertsStore(deps: AlertsStoreDeps) {
-  const retryMs = deps.retryMs ?? 5_000;
-  const pollMs = deps.pollMs ?? 60_000;
-  let unread = 0;
-  let version = 0;
-  const seen = new Set<number>();
-  const listeners = new Set<() => void>();
-  const itemListeners = new Set<(item: AlertItem, isNew: boolean) => void>();
-  let controller: AbortController | null = null;
-
-  const emit = () => {
-    for (const listener of listeners) listener();
-  };
-
-  const setUnread = (count: number) => {
-    if (count === unread) return;
-    unread = Math.max(0, count);
-    emit();
-  };
-
-  const onItem = (item: AlertItem) => {
-    const isNew = !seen.has(item.id);
-    seen.add(item.id);
-    version++;
-    emit();
-    for (const listener of itemListeners) listener(item, isNew);
-  };
-
-  const wait = (ms: number, signal: AbortSignal) =>
-    new Promise<void>((resolve) => {
-      const timer = setTimeout(resolve, ms);
-      signal.addEventListener(
-        "abort",
-        () => {
-          clearTimeout(timer);
-          resolve();
-        },
-        { once: true },
-      );
-    });
-
-  async function run(signal: AbortSignal) {
-    while (!signal.aborted) {
-      try {
-        const response = await deps.connect({
-          headers: { Accept: "text/event-stream" },
-          signal,
-        });
-        if (!response.ok || !response.body) throw new Error("stream failed");
-        const reader = response.body.getReader();
-        const decoder = new TextDecoder();
-        let buffer = "";
-        while (!signal.aborted) {
-          const { value, done } = await reader.read();
-          if (done) break;
-          buffer = parseServerSentEvents(
-            buffer + decoder.decode(value, { stream: true }),
-            (event) => {
-              try {
-                const data = JSON.parse(event.data);
-                if (event.event === "unread") setUnread(Number(data.count));
-                else if (event.event === "item") onItem(data as AlertItem);
-              } catch {
-                // A malformed event is skipped; the next one carries the count.
-              }
-            },
-          );
-        }
-      } catch {
-        // Falls through to a poll and a retry.
-      }
-      if (signal.aborted) return;
-      try {
-        setUnread(await deps.loadUnread());
-      } catch {
-        // Still offline.
-      }
-      await wait(retryMs, signal);
-    }
-  }
-
-  return {
-    start(): void {
-      if (controller) return;
-      controller = new AbortController();
-      const { signal } = controller;
-      void run(signal);
-      // A proxy that buffers the stream would hold the count back forever.
-      void (async () => {
-        while (!signal.aborted) {
-          await wait(pollMs, signal);
-          if (signal.aborted) return;
-          try {
-            setUnread(await deps.loadUnread());
-          } catch {
-            // Offline; the stream loop retries.
-          }
-        }
-      })();
-    },
-
-    stop(): void {
-      controller?.abort();
-      controller = null;
-    },
-
-    subscribe(listener: () => void): () => void {
-      listeners.add(listener);
-      return () => {
-        listeners.delete(listener);
-      };
-    },
-
-    /** Every alert that arrives while the app is open, and whether it is new. */
-    onItem(listener: (item: AlertItem, isNew: boolean) => void): () => void {
-      itemListeners.add(listener);
-      return () => {
-        itemListeners.delete(listener);
-      };
-    },
-
-    unread: () => unread,
-    /** Bumps whenever an alert arrives, so open lists know to reload. */
-    version: () => version,
-    setUnread,
-  };
-}
-
-export type AlertsStore = ReturnType<typeof createAlertsStore>;
-
-export function useUnreadCount(store: AlertsStore): number {
-  return useSyncExternalStore(store.subscribe, store.unread, store.unread);
-}
-
-export function useAlertsVersion(store: AlertsStore): number {
-  return useSyncExternalStore(store.subscribe, store.version, store.version);
-}
diff --git a/plugins/alerts/src/types.ts b/plugins/alerts/src/types.ts
deleted file mode 100644
index b36df3ec5..000000000
--- a/plugins/alerts/src/types.ts
+++ /dev/null
@@ -1,91 +0,0 @@
-export const CHANNEL_TYPES = ["webhook", "ntfy", "discord", "email"] as const;
-export type ChannelType = (typeof CHANNEL_TYPES)[number];
-
-export const SEVERITIES = ["info", "success", "warning", "critical"] as const;
-export type Severity = (typeof SEVERITIES)[number];
-
-/** Where an announcement from the Termix docs comes from in the inbox. */
-export const ANNOUNCEMENT_SOURCE = "termix";
-
-export interface AlertLink {
-  tab?: string;
-  url?: string;
-}
-
-export interface DeliveryResult {
-  channelId: number;
-  name: string;
-  ok: boolean;
-  error?: string;
-}
-
-export interface AlertItem {
-  id: number;
-  source: string;
-  category: string;
-  severity: Severity;
-  title: string;
-  body: string | null;
-  link: AlertLink | null;
-  context: Record<string, unknown> | null;
-  deliveries: DeliveryResult[] | null;
-  readAt: string | null;
-  createdAt: string;
-}
-
-export interface ChannelSummary {
-  id: number;
-  name: string;
-  type: ChannelType;
-  enabled: boolean;
-  createdAt: string;
-  /** False when the config could not be read, e.g. still waiting on its upgrade. */
-  usable: boolean;
-}
-
-export interface ChannelDetail extends ChannelSummary {
-  config: Record<string, unknown>;
-}
-
-export interface AlertRule {
-  id: number;
-  name: string;
-  match: string;
-  minSeverity: Severity;
-  channelIds: number[];
-  enabled: boolean;
-}
-
-export interface AlertsMeta {
-  emailAvailable: boolean;
-  channelTypes: ChannelType[];
-}
-
-const RANK: Record<Severity, number> = {
-  info: 0,
-  success: 0,
-  warning: 1,
-  critical: 2,
-};
-
-export function isSeverity(value: unknown): value is Severity {
-  return (
-    typeof value === "string" &&
-    (SEVERITIES as readonly string[]).includes(value)
-  );
-}
-
-export function severityRank(severity: Severity): number {
-  return RANK[severity];
-}
-
-/** Whether a category pattern ("*", "automations.*", "acme-ssl.renewal_failed") covers a category. */
-export function matchesCategory(pattern: string, category: string): boolean {
-  const trimmed = pattern.trim();
-  if (!trimmed || trimmed === "*") return true;
-  const escaped = trimmed
-    .split("*")
-    .map((part) => part.replace(/[.+?^${}()|[\]\\]/g, "\\$&"))
-    .join(".*");
-  return new RegExp(`^${escaped}$`, "i").test(category);
-}
diff --git a/plugins/alerts/tests/backend/helpers.ts b/plugins/alerts/tests/backend/helpers.ts
deleted file mode 100644
index afa6e7bf4..000000000
--- a/plugins/alerts/tests/backend/helpers.ts
+++ /dev/null
@@ -1,142 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import type {
-  PluginFetchInit,
-  PluginNotifyHub,
-} from "@termix/plugin-sdk/backend";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-export const manifest = manifestJson as unknown as PluginManifest;
-
-export interface FetchCall {
-  url: string;
-  init?: PluginFetchInit;
-}
-
-export interface TestServer {
-  db: TestDb;
-  mock: MockPluginContext;
-  hub: PluginNotifyHub;
-  fetches: FetchCall[];
-  /** Where the router is served, for a raw fetch such as the stream. */
-  url: string;
-  request: (
-    method: string,
-    path: string,
-    options?: { user?: string; body?: unknown },
-    // Route bodies vary per test; asserting on them is the point.
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any }>;
-  close: () => Promise<void>;
-}
-
-/**
- * The plugin activated against a real in-memory database, its router mounted
- * the way core mounts it, with every outbound request answered by `respond`.
- */
-export async function startServer(
-  options: {
-    permissions?: string[];
-    settings?: Record<string, unknown>;
-    coreSettings?: Record<string, string>;
-    respond?: (url: string, init?: PluginFetchInit) => Response;
-  } = {},
-): Promise<TestServer> {
-  const db = await createTestDb(pluginDir);
-  for (const user of ["alice", "bob"]) {
-    db.sqlite
-      .prepare("INSERT INTO users (id, username) VALUES (?, ?)")
-      .run(user, user);
-  }
-
-  const fetches: FetchCall[] = [];
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    permissions: options.permissions ?? ["alerts.use"],
-    settings: options.settings,
-    coreSettings: options.coreSettings,
-    fetch: async (url, init) => {
-      fetches.push({ url, init });
-      return options.respond?.(url, init) ?? new Response("ok");
-    },
-  });
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-  const hub = mock.notifyHub.current;
-  if (!hub) throw new Error("The plugin did not serve a hub");
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") || undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    db,
-    mock,
-    hub,
-    fetches,
-    url: `http://127.0.0.1:${port}`,
-    async request(method, path, { user = "alice", body: given } = {}) {
-      const body = method === "GET" ? undefined : given;
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        headers: {
-          "x-test-user": user,
-          ...(body !== undefined ? { "content-type": "application/json" } : {}),
-        },
-        body: body !== undefined ? JSON.stringify(body) : undefined,
-      });
-      const text = await response.text();
-      return { status: response.status, body: text ? JSON.parse(text) : null };
-    },
-    async close() {
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-      for (const dispose of [...mock.disposals].reverse()) {
-        await Promise.resolve(dispose()).catch(() => {});
-      }
-      db.close();
-    },
-  };
-}
-
-/** A channel for alice through the route, returning its id. */
-export async function addChannel(
-  server: TestServer,
-  body: Record<string, unknown>,
-  user = "alice",
-): Promise<number> {
-  const response = await server.request("POST", "/channels", { user, body });
-  if (response.status !== 201) {
-    throw new Error(`channel not created: ${JSON.stringify(response.body)}`);
-  }
-  return response.body.id;
-}
-
-export const WEBHOOK = {
-  name: "ops",
-  type: "webhook",
-  config: { url: "https://hooks.example/alert" },
-};
diff --git a/plugins/alerts/tests/backend/hub.test.ts b/plugins/alerts/tests/backend/hub.test.ts
deleted file mode 100644
index f67309535..000000000
--- a/plugins/alerts/tests/backend/hub.test.ts
+++ /dev/null
@@ -1,328 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { addChannel, startServer, WEBHOOK, type TestServer } from "./helpers";
-
-const mail = vi.hoisted(() => ({ sent: [] as unknown[] }));
-
-vi.mock("../../src/backend/mail.js", async () => {
-  const actual = await vi.importActual<
-    typeof import("../../src/backend/mail.js")
-  >("../../src/backend/mail.js");
-  return {
-    ...actual,
-    sendMail: async (smtp: unknown, message: unknown) => {
-      mail.sent.push({ smtp, message });
-    },
-  };
-});
-
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-  mail.sent.length = 0;
-});
-
-const inbox = async (s: TestServer, user = "alice") =>
-  (await s.request("GET", "/items", { user })).body;
-
-describe("the alert hub", () => {
-  it("puts an alert in each recipient's inbox with safe defaults", async () => {
-    server = await startServer();
-    const result = await server.hub.deliver({
-      source: "docker",
-      recipients: ["alice", "bob", "alice"],
-      notification: {
-        title: "Container stopped",
-        body: "web exited",
-        link: { tab: "docker", url: "javascript:alert(1)" },
-      },
-    });
-
-    expect(result).toEqual({ recipients: 2, delivered: 0, failures: [] });
-    for (const user of ["alice", "bob"]) {
-      const { items, unread } = await inbox(server, user);
-      expect(unread).toBe(1);
-      expect(items).toEqual([
-        expect.objectContaining({
-          source: "docker",
-          category: "docker",
-          severity: "warning",
-          title: "Container stopped",
-          body: "web exited",
-          link: { tab: "docker" },
-          readAt: null,
-        }),
-      ]);
-    }
-  });
-
-  it("drops a repeat while the first is still unread", async () => {
-    server = await startServer();
-    const send = () =>
-      server!.hub.deliver({
-        source: "acme-ssl",
-        recipients: ["alice"],
-        notification: { title: "Renewal failed", dedupeKey: "renew:a" },
-      });
-
-    expect((await send()).recipients).toBe(1);
-    expect((await send()).recipients).toBe(0);
-    expect((await inbox(server)).items).toHaveLength(1);
-
-    await server.request("POST", "/items/read", { body: { all: true } });
-    expect((await send()).recipients).toBe(1);
-    expect((await inbox(server)).items).toHaveLength(2);
-  });
-
-  it("sends to the channels a matching rule names, and records how it went", async () => {
-    server = await startServer({
-      respond: (url) =>
-        url.includes("broken")
-          ? new Response("nope", { status: 500, statusText: "Server Error" })
-          : new Response("ok"),
-    });
-    const ops = await addChannel(server, WEBHOOK);
-    const broken = await addChannel(server, {
-      ...WEBHOOK,
-      name: "broken",
-      config: { url: "https://broken.example/hook" },
-    });
-    const quiet = await addChannel(server, {
-      ...WEBHOOK,
-      name: "quiet",
-      config: { url: "https://quiet.example/hook" },
-    });
-    await server.request("POST", "/rules", {
-      body: {
-        name: "Docker",
-        match: "docker.*",
-        minSeverity: "warning",
-        channelIds: [ops, broken],
-      },
-    });
-    await server.request("POST", "/rules", {
-      body: {
-        name: "Only critical",
-        match: "*",
-        minSeverity: "critical",
-        channelIds: [quiet],
-      },
-    });
-
-    const result = await server.hub.deliver({
-      source: "docker",
-      recipients: ["alice"],
-      notification: {
-        title: "Container stopped",
-        category: "docker.container_stopped",
-        severity: "warning",
-      },
-    });
-
-    expect(result.delivered).toBe(1);
-    expect(result.failures).toEqual([
-      {
-        channelId: broken,
-        name: "broken",
-        error: "HTTP 500 Server Error: nope",
-      },
-    ]);
-    expect(server.fetches.map((call) => call.url)).toEqual([
-      "https://hooks.example/alert",
-      "https://broken.example/hook",
-    ]);
-    const body = JSON.parse(server.fetches[0].init!.body as string);
-    expect(body).toMatchObject({
-      title: "Container stopped",
-      severity: "warning",
-      category: "docker.container_stopped",
-      source: "docker",
-    });
-    const [item] = (await inbox(server)).items;
-    expect(item.deliveries).toEqual([
-      { channelId: ops, name: "ops", ok: true },
-      {
-        channelId: broken,
-        name: "broken",
-        ok: false,
-        error: "HTTP 500 Server Error: nope",
-      },
-    ]);
-  });
-
-  it("adds the channels a sender names, but only the recipient's own", async () => {
-    server = await startServer();
-    const mine = await addChannel(server, WEBHOOK);
-    const theirs = await addChannel(
-      server,
-      { ...WEBHOOK, config: { url: "https://bob.example/hook" } },
-      "bob",
-    );
-
-    const result = await server.hub.deliver({
-      source: "automations",
-      recipients: ["alice"],
-      notification: { title: "Ping", channelIds: [mine, theirs] },
-    });
-
-    expect(result.delivered).toBe(1);
-    expect(server.fetches.map((call) => call.url)).toEqual([
-      "https://hooks.example/alert",
-    ]);
-  });
-
-  it("skips a disabled channel", async () => {
-    server = await startServer();
-    const id = await addChannel(server, WEBHOOK);
-    await server.request("PUT", `/channels/${id}`, {
-      body: { enabled: false },
-    });
-
-    const result = await server.hub.deliver({
-      source: "automations",
-      recipients: ["alice"],
-      notification: { title: "Ping", channelIds: [id] },
-    });
-
-    expect(result.delivered).toBe(0);
-    expect(server.fetches).toEqual([]);
-  });
-
-  it("reaches a private address only with the opt-in and the admin allowlist", async () => {
-    server = await startServer({
-      coreSettings: {
-        notification_private_endpoint_allowlist: JSON.stringify(["NTFY.LAN"]),
-      },
-    });
-    const open = await addChannel(server, {
-      name: "lan",
-      type: "ntfy",
-      config: {
-        url: "http://ntfy.lan",
-        topic: "alerts",
-        allowPrivateNetwork: true,
-      },
-    });
-    const closed = await addChannel(server, {
-      name: "lan2",
-      type: "ntfy",
-      config: { url: "http://ntfy.lan", topic: "other" },
-    });
-
-    await server.hub.deliver({
-      source: "automations",
-      recipients: ["alice"],
-      notification: { title: "Ping", channelIds: [open, closed] },
-    });
-
-    expect(server.fetches.map((call) => call.init?.allowPrivateHosts)).toEqual([
-      ["ntfy.lan"],
-      [],
-    ]);
-  });
-
-  it("emails through the admin's SMTP server", async () => {
-    server = await startServer({
-      settings: {
-        smtpHost: "smtp.example",
-        smtpPort: 465,
-        smtpSecure: true,
-        smtpUser: "termix",
-        smtpPassword: "pw",
-        smtpFrom: "Termix <alerts@example.com>",
-      },
-    });
-    const id = await addChannel(server, {
-      name: "mail",
-      type: "email",
-      config: { to: "ops@example.com, oncall@example.com" },
-    });
-
-    const result = await server.hub.deliver({
-      source: "automations",
-      recipients: ["alice"],
-      notification: {
-        title: "Disk full",
-        body: "/data at 99%",
-        channelIds: [id],
-        link: { url: "https://termix.example/hosts/1" },
-      },
-    });
-
-    expect(result.delivered).toBe(1);
-    expect(mail.sent).toEqual([
-      {
-        smtp: {
-          host: "smtp.example",
-          port: 465,
-          secure: true,
-          user: "termix",
-          password: "pw",
-          from: "Termix <alerts@example.com>",
-        },
-        message: {
-          to: ["ops@example.com", "oncall@example.com"],
-          subject: "[Termix] Disk full",
-          text: "/data at 99%\n\nhttps://termix.example/hosts/1",
-        },
-      },
-    ]);
-  });
-
-  it("reports an email channel as failed while SMTP is not set up", async () => {
-    server = await startServer({
-      settings: {
-        smtpHost: "smtp.example",
-        smtpFrom: "alerts@example.com",
-      },
-    });
-    const id = await addChannel(server, {
-      name: "mail",
-      type: "email",
-      config: { to: "ops@example.com" },
-    });
-    await server.mock.ctx.settings.set("smtpHost", "");
-
-    const result = await server.hub.deliver({
-      source: "automations",
-      recipients: ["alice"],
-      notification: { title: "Disk full", channelIds: [id] },
-    });
-
-    expect(result.failures).toEqual([
-      {
-        channelId: id,
-        name: "mail",
-        error: "Email is not set up on this server",
-      },
-    ]);
-  });
-
-  it("lists a user's channels without their config", async () => {
-    server = await startServer();
-    const id = await addChannel(server, WEBHOOK);
-    expect(await server.hub.channels("alice")).toEqual([
-      { id, name: "ops", type: "webhook", enabled: true },
-    ]);
-    expect(await server.hub.channels("bob")).toEqual([]);
-  });
-
-  it("wipes everything a user had when their data is wiped", async () => {
-    server = await startServer();
-    await addChannel(server, WEBHOOK);
-    await server.hub.deliver({
-      source: "docker",
-      recipients: ["alice", "bob"],
-      notification: { title: "x" },
-    });
-
-    server.mock.ctx.events.emit("user.data_wiped", { userId: "alice" });
-
-    await vi.waitFor(async () =>
-      expect((await inbox(server!)).items).toEqual([]),
-    );
-    expect(await server.hub.channels("alice")).toEqual([]);
-    expect((await inbox(server, "bob")).items).toHaveLength(1);
-  });
-});
diff --git a/plugins/alerts/tests/backend/migrations.test.ts b/plugins/alerts/tests/backend/migrations.test.ts
deleted file mode 100644
index d1ffc6e59..000000000
--- a/plugins/alerts/tests/backend/migrations.test.ts
+++ /dev/null
@@ -1,87 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { createTestDb, type TestDb } from "@termix/plugin-sdk/testing";
-import { pluginDir } from "./helpers";
-
-// dismissed_alerts as core's SQLite bootstrap created it before 2.9.0, with
-// the index performance-indexes.ts added.
-const LEGACY_DDL = `
-  CREATE TABLE dismissed_alerts (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL,
-    alert_id TEXT NOT NULL,
-    dismissed_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
-  );
-  CREATE INDEX idx_dismissed_alerts_user_id ON dismissed_alerts(user_id);
-  INSERT INTO users (id, username) VALUES ('alice', 'alice');
-  INSERT INTO dismissed_alerts (id, user_id, alert_id) VALUES (3, 'alice', 'old-news');
-`;
-
-const OWN = ["p_alerts_channels", "p_alerts_items", "p_alerts_rules"];
-
-let db: TestDb | null = null;
-
-afterEach(() => {
-  db?.close();
-  db = null;
-});
-
-function tables(target: TestDb): string[] {
-  return (
-    target.sqlite
-      .prepare("SELECT name FROM sqlite_master WHERE type = 'table'")
-      .all() as Array<{ name: string }>
-  ).map((row) => row.name);
-}
-
-function indexes(target: TestDb, table: string): string[] {
-  return (
-    target.sqlite
-      .prepare(
-        "SELECT name FROM sqlite_master WHERE type = 'index' AND tbl_name = ? AND name NOT LIKE 'sqlite_%'",
-      )
-      .all(table) as Array<{ name: string }>
-  )
-    .map((row) => row.name)
-    .sort();
-}
-
-describe("the alerts tables", () => {
-  it("adopts dismissed_alerts with its rows and its one index", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => sqlite.exec(LEGACY_DDL),
-    });
-
-    const names = tables(db);
-    expect(names).toContain("p_alerts_dismissed");
-    expect(names).not.toContain("dismissed_alerts");
-    for (const table of OWN) expect(names).toContain(table);
-    expect(
-      db.sqlite
-        .prepare("SELECT id, user_id, alert_id FROM p_alerts_dismissed")
-        .all(),
-    ).toEqual([{ id: 3, user_id: "alice", alert_id: "old-news" }]);
-    expect(indexes(db, "p_alerts_dismissed")).toEqual([
-      "idx_dismissed_alerts_user_id",
-    ]);
-
-    // Deleting the user still takes their rows with them.
-    db.sqlite.prepare("DELETE FROM users WHERE id = 'alice'").run();
-    expect(
-      db.sqlite.prepare("SELECT COUNT(*) AS n FROM p_alerts_dismissed").get(),
-    ).toEqual({ n: 0 });
-  });
-
-  it("creates the same tables on a fresh install", async () => {
-    db = await createTestDb(pluginDir);
-    const names = tables(db);
-    for (const table of [...OWN, "p_alerts_dismissed"]) {
-      expect(names).toContain(table);
-    }
-    expect(indexes(db, "p_alerts_items")).toEqual([
-      "idx_alerts_items_dedupe",
-      "idx_alerts_items_unread",
-      "idx_alerts_items_user",
-    ]);
-  });
-});
diff --git a/plugins/alerts/tests/backend/routes.test.ts b/plugins/alerts/tests/backend/routes.test.ts
deleted file mode 100644
index 11033f452..000000000
--- a/plugins/alerts/tests/backend/routes.test.ts
+++ /dev/null
@@ -1,434 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { FEED_URL } from "../../src/backend/announcements.js";
-import { addChannel, startServer, WEBHOOK, type TestServer } from "./helpers";
-
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-});
-
-describe("permissions", () => {
-  it("refuses a user without alerts.use", async () => {
-    server = await startServer({ permissions: [] });
-    for (const [method, path] of [
-      ["GET", "/items"],
-      ["GET", "/channels"],
-      ["POST", "/channels"],
-      ["GET", "/rules"],
-    ]) {
-      expect((await server.request(method, path, { body: {} })).status).toBe(
-        403,
-      );
-    }
-  });
-});
-
-describe("channels", () => {
-  it("creates, reads back, updates and deletes a channel", async () => {
-    server = await startServer();
-    const id = await addChannel(server, {
-      name: "pager",
-      type: "ntfy",
-      config: { url: "https://ntfy.sh", topic: "ops", token: "tk_1" },
-    });
-
-    const list = await server.request("GET", "/channels");
-    expect(list.body).toEqual([
-      expect.objectContaining({
-        id,
-        name: "pager",
-        type: "ntfy",
-        enabled: true,
-        usable: true,
-      }),
-    ]);
-    expect(list.body[0].config).toBeUndefined();
-
-    const detail = await server.request("GET", `/channels/${id}`);
-    expect(detail.body.config).toEqual({
-      url: "https://ntfy.sh",
-      topic: "ops",
-      token: "tk_1",
-    });
-
-    // Stored sealed, never as plain JSON.
-    const stored = server.db.sqlite
-      .prepare("SELECT config FROM p_alerts_channels WHERE id = ?")
-      .get(id) as { config: string };
-    expect(stored.config).not.toContain("tk_1");
-
-    const renamed = await server.request("PUT", `/channels/${id}`, {
-      body: { name: "night pager" },
-    });
-    expect(renamed.body).toMatchObject({ name: "night pager", type: "ntfy" });
-    expect(renamed.body.config.token).toBe("tk_1");
-
-    expect((await server.request("DELETE", `/channels/${id}`)).status).toBe(
-      200,
-    );
-    expect((await server.request("GET", "/channels")).body).toEqual([]);
-  });
-
-  it("refuses a config that cannot send", async () => {
-    server = await startServer();
-    for (const body of [
-      { name: "", type: "webhook", config: { url: "https://a.example" } },
-      { name: "x", type: "sms", config: {} },
-      { name: "x", type: "webhook", config: { url: "ftp://a.example" } },
-      { name: "x", type: "ntfy", config: { url: "https://ntfy.sh" } },
-      {
-        name: "x",
-        type: "discord",
-        config: { url: "https://example.com/api/webhooks/1" },
-      },
-      { name: "x", type: "email", config: { to: "not an address" } },
-    ]) {
-      const response = await server.request("POST", "/channels", { body });
-      expect(response.status, JSON.stringify(body)).toBe(400);
-    }
-  });
-
-  it("keeps each user's channels to themselves", async () => {
-    server = await startServer();
-    const id = await addChannel(server, WEBHOOK);
-    for (const [method, path] of [
-      ["GET", `/channels/${id}`],
-      ["PUT", `/channels/${id}`],
-      ["DELETE", `/channels/${id}`],
-      ["POST", `/channels/${id}/test`],
-    ]) {
-      const response = await server.request(method, path, {
-        user: "bob",
-        body: { name: "mine" },
-      });
-      expect(response.status, `${method} ${path}`).toBe(404);
-    }
-    expect(
-      (await server.request("GET", "/channels", { user: "bob" })).body,
-    ).toEqual([]);
-  });
-
-  it("sends a test and reports why one failed", async () => {
-    server = await startServer({
-      respond: (url) =>
-        url.includes("down")
-          ? new Response("", { status: 502, statusText: "Bad Gateway" })
-          : new Response("ok"),
-    });
-    const good = await addChannel(server, WEBHOOK);
-    const bad = await addChannel(server, {
-      ...WEBHOOK,
-      config: { url: "https://down.example" },
-    });
-
-    expect(
-      (await server.request("POST", `/channels/${good}/test`)).body,
-    ).toEqual({ success: true });
-    expect(
-      (await server.request("POST", `/channels/${bad}/test`)).body,
-    ).toEqual({ success: false, error: "HTTP 502 Bad Gateway" });
-  });
-
-  it("says email is unavailable until SMTP is set up", async () => {
-    server = await startServer();
-    expect((await server.request("GET", "/meta")).body).toEqual({
-      emailAvailable: false,
-      channelTypes: ["webhook", "ntfy", "discord", "email"],
-    });
-    await server.mock.ctx.settings.set("smtpHost", "smtp.example");
-    await server.mock.ctx.settings.set("smtpFrom", "alerts@example.com");
-    expect((await server.request("GET", "/meta")).body.emailAvailable).toBe(
-      true,
-    );
-  });
-});
-
-describe("inbox", () => {
-  async function seed(s: TestServer) {
-    for (const title of ["one", "two", "three"]) {
-      await s.hub.deliver({
-        source: "docker",
-        recipients: ["alice"],
-        notification: {
-          title,
-          severity: title === "two" ? "critical" : "info",
-        },
-      });
-    }
-    await s.hub.deliver({
-      source: "docker",
-      recipients: ["bob"],
-      notification: { title: "bob only" },
-    });
-  }
-
-  it("lists newest first, filters and pages", async () => {
-    server = await startServer();
-    await seed(server);
-
-    const all = await server.request("GET", "/items");
-    expect(all.body.unread).toBe(3);
-    expect(all.body.items.map((item: { title: string }) => item.title)).toEqual(
-      ["three", "two", "one"],
-    );
-
-    const critical = await server.request("GET", "/items?severity=critical");
-    expect(
-      critical.body.items.map((item: { title: string }) => item.title),
-    ).toEqual(["two"]);
-
-    const page = await server.request(
-      "GET",
-      `/items?limit=1&before=${all.body.items[0].id}`,
-    );
-    expect(
-      page.body.items.map((item: { title: string }) => item.title),
-    ).toEqual(["two"]);
-  });
-
-  it("marks read and unread, and counts what is left", async () => {
-    server = await startServer();
-    await seed(server);
-    const { items } = (await server.request("GET", "/items")).body;
-
-    const read = await server.request("POST", "/items/read", {
-      body: { ids: [items[0].id] },
-    });
-    expect(read.body).toEqual({ count: 2 });
-
-    const unread = await server.request("GET", "/items?unread=true");
-    expect(unread.body.items).toHaveLength(2);
-
-    await server.request("POST", "/items/read", {
-      body: { ids: [items[0].id], read: false },
-    });
-    expect((await server.request("GET", "/unread")).body).toEqual({
-      count: 3,
-    });
-
-    await server.request("POST", "/items/read", { body: { all: true } });
-    expect((await server.request("GET", "/unread")).body).toEqual({
-      count: 0,
-    });
-    // Bob's alert is his own.
-    expect(
-      (await server.request("GET", "/unread", { user: "bob" })).body,
-    ).toEqual({ count: 1 });
-  });
-
-  it("deletes one alert, then every read one", async () => {
-    server = await startServer();
-    await seed(server);
-    const { items } = (await server.request("GET", "/items")).body;
-
-    expect(
-      (await server.request("DELETE", `/items/${items[0].id}`, { user: "bob" }))
-        .status,
-    ).toBe(404);
-    await server.request("DELETE", `/items/${items[0].id}`);
-    await server.request("POST", "/items/read", {
-      body: { ids: [items[1].id] },
-    });
-
-    expect((await server.request("DELETE", "/items?read=true")).body).toEqual({
-      removed: 1,
-    });
-    expect(
-      (await server.request("GET", "/items")).body.items.map(
-        (item: { title: string }) => item.title,
-      ),
-    ).toEqual(["one"]);
-  });
-
-  it("lists the categories a user has alerts from", async () => {
-    server = await startServer();
-    await server.hub.deliver({
-      source: "acme-ssl",
-      recipients: ["alice"],
-      notification: { title: "x", category: "acme-ssl.renewal_failed" },
-    });
-    expect((await server.request("GET", "/categories")).body).toEqual([
-      { source: "acme-ssl", category: "acme-ssl.renewal_failed" },
-    ]);
-  });
-});
-
-describe("rules", () => {
-  it("creates, updates and deletes a rule over the user's own channels", async () => {
-    server = await startServer();
-    const mine = await addChannel(server, WEBHOOK);
-    const theirs = await addChannel(server, WEBHOOK, "bob");
-
-    expect(
-      (
-        await server.request("POST", "/rules", {
-          body: { name: "All", channelIds: [theirs] },
-        })
-      ).status,
-    ).toBe(400);
-    expect(
-      (
-        await server.request("POST", "/rules", {
-          body: { name: "All", channelIds: [] },
-        })
-      ).status,
-    ).toBe(400);
-
-    const created = await server.request("POST", "/rules", {
-      body: { name: "All", channelIds: [mine] },
-    });
-    expect(created.status).toBe(201);
-    expect(created.body).toMatchObject({
-      name: "All",
-      match: "*",
-      minSeverity: "warning",
-      channelIds: [mine],
-      enabled: true,
-    });
-
-    await server.request("PUT", `/rules/${created.body.id}`, {
-      body: {
-        name: "Docker",
-        match: "docker.*",
-        minSeverity: "critical",
-        channelIds: [mine],
-        enabled: false,
-      },
-    });
-    expect((await server.request("GET", "/rules")).body).toEqual([
-      {
-        id: created.body.id,
-        name: "Docker",
-        match: "docker.*",
-        minSeverity: "critical",
-        channelIds: [mine],
-        enabled: false,
-      },
-    ]);
-    expect(
-      (
-        await server.request("DELETE", `/rules/${created.body.id}`, {
-          user: "bob",
-        })
-      ).status,
-    ).toBe(404);
-    await server.request("DELETE", `/rules/${created.body.id}`);
-    expect((await server.request("GET", "/rules")).body).toEqual([]);
-  });
-
-  it("drops a deleted channel from the rules that named it", async () => {
-    server = await startServer();
-    const a = await addChannel(server, WEBHOOK);
-    const b = await addChannel(server, { ...WEBHOOK, name: "b" });
-    await server.request("POST", "/rules", {
-      body: { name: "Both", channelIds: [a, b] },
-    });
-
-    await server.request("DELETE", `/channels/${a}`);
-
-    expect((await server.request("GET", "/rules")).body[0].channelIds).toEqual([
-      b,
-    ]);
-  });
-});
-
-describe("announcements", () => {
-  const future = new Date(Date.now() + 86_400_000).toISOString();
-  const past = new Date(Date.now() - 86_400_000).toISOString();
-  const feed = [
-    {
-      id: "release-2-9",
-      title: "Termix 2.9 is out",
-      message: "Plugins are here.",
-      expiresAt: future,
-      type: "success",
-      actionUrl: "https://termix.site/blog",
-      actionText: "Read more",
-    },
-    {
-      id: "old",
-      title: "Gone",
-      message: "Expired",
-      expiresAt: past,
-    },
-  ];
-  const respond = (url: string) =>
-    url === FEED_URL ? Response.json(feed) : new Response("ok");
-
-  it("brings each live announcement into the inbox once", async () => {
-    server = await startServer({ respond });
-
-    const first = await server.request("GET", "/items");
-    expect(first.body.items).toEqual([
-      expect.objectContaining({
-        source: "termix",
-        category: "termix.announcement",
-        severity: "success",
-        title: "Termix 2.9 is out",
-        body: "Plugins are here.",
-        link: { url: "https://termix.site/blog" },
-        context: { announcementId: "release-2-9", actionText: "Read more" },
-      }),
-    ]);
-
-    await server.request("POST", "/items/read", { body: { all: true } });
-    const again = await server.request("GET", "/items");
-    expect(again.body.items).toHaveLength(1);
-    expect(again.body.unread).toBe(0);
-  });
-
-  it("never brings back one the user deleted", async () => {
-    server = await startServer({ respond });
-    const { items } = (await server.request("GET", "/items")).body;
-
-    await server.request("DELETE", `/items/${items[0].id}`);
-
-    expect((await server.request("GET", "/items")).body.items).toEqual([]);
-    expect(
-      server.db.sqlite.prepare("SELECT alert_id FROM p_alerts_dismissed").all(),
-    ).toEqual([{ alert_id: "release-2-9" }]);
-  });
-
-  it("shows none while an admin has them turned off", async () => {
-    server = await startServer({ respond, settings: { announcements: false } });
-    expect((await server.request("GET", "/items")).body.items).toEqual([]);
-    expect(server.fetches).toEqual([]);
-  });
-});
-
-describe("the event stream", () => {
-  it("sends the unread count, then each new alert", async () => {
-    server = await startServer();
-    const controller = new AbortController();
-    const response = await fetch(`${server.url}/stream`, {
-      headers: { "x-test-user": "alice" },
-      signal: controller.signal,
-    });
-    expect(response.headers.get("content-type")).toContain("text/event-stream");
-    const reader = response.body!.getReader();
-    const decoder = new TextDecoder();
-    let text = "";
-    const readUntil = async (needle: string) => {
-      while (!text.includes(needle)) {
-        const { value, done } = await reader.read();
-        if (done) break;
-        text += decoder.decode(value, { stream: true });
-      }
-    };
-
-    await readUntil('"count":0');
-    expect(text).toContain("event: unread");
-
-    await server.hub.deliver({
-      source: "docker",
-      recipients: ["alice"],
-      notification: { title: "Live one" },
-    });
-    await readUntil("Live one");
-    await readUntil('"count":1');
-    expect(text).toContain("event: item");
-    controller.abort();
-  });
-});
diff --git a/plugins/alerts/tests/backend/senders.test.ts b/plugins/alerts/tests/backend/senders.test.ts
deleted file mode 100644
index 35e30346a..000000000
--- a/plugins/alerts/tests/backend/senders.test.ts
+++ /dev/null
@@ -1,213 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import type { PluginFetchInit } from "@termix/plugin-sdk/backend";
-import {
-  parseRecipients,
-  sendToChannel,
-  validateChannelConfig,
-  type OutgoingAlert,
-  type SenderDeps,
-} from "../../src/backend/senders.js";
-import { matchesCategory, severityRank } from "../../src/types.js";
-import { parseAllowlist } from "../../src/backend/index.js";
-import { cleanLink } from "../../src/backend/hub.js";
-
-const ALERT: OutgoingAlert = {
-  title: "Disk full",
-  body: "/data at 99%",
-  severity: "critical",
-  category: "automations.notify",
-  source: "automations",
-  link: { url: "https://termix.example/hosts/1" },
-};
-
-function deps(response = new Response("ok")) {
-  const calls: Array<{ url: string; init?: PluginFetchInit }> = [];
-  const value: SenderDeps = {
-    fetch: async (url, init) => {
-      calls.push({ url, init });
-      return response;
-    },
-    privateAllowlist: async () => ["ntfy.lan"],
-    smtp: async () => null,
-    sendMail: vi.fn(),
-  };
-  return { deps: value, calls };
-}
-
-describe("sendToChannel", () => {
-  it("posts ntfy with its priority, tag, click link and token", async () => {
-    const { deps: d, calls } = deps();
-    await sendToChannel(
-      {
-        type: "ntfy",
-        config: { url: "https://ntfy.sh/", topic: "ops", token: "tk_1" },
-      },
-      ALERT,
-      d,
-    );
-    expect(calls).toEqual([
-      {
-        url: "https://ntfy.sh/ops",
-        init: expect.objectContaining({
-          method: "POST",
-          body: "/data at 99%",
-          allowPrivateHosts: [],
-          headers: {
-            Title: "Disk full",
-            Priority: "5",
-            Tags: "rotating_light",
-            Click: "https://termix.example/hosts/1",
-            Authorization: "Bearer tk_1",
-          },
-        }),
-      },
-    ]);
-  });
-
-  it("posts a Discord embed", async () => {
-    const { deps: d, calls } = deps();
-    await sendToChannel(
-      {
-        type: "discord",
-        config: {
-          url: "https://discord.com/api/webhooks/1/abc",
-          username: "Termix",
-        },
-      },
-      ALERT,
-      d,
-    );
-    const payload = JSON.parse(calls[0].init!.body!);
-    expect(payload).toMatchObject({
-      username: "Termix",
-      embeds: [
-        {
-          title: "Disk full",
-          description: "/data at 99%",
-          color: 15158332,
-          url: "https://termix.example/hosts/1",
-        },
-      ],
-    });
-  });
-
-  it("puts on the webhook's own method and headers", async () => {
-    const { deps: d, calls } = deps();
-    await sendToChannel(
-      {
-        type: "webhook",
-        config: {
-          url: "https://hooks.example",
-          method: "PUT",
-          headers: { Authorization: "Bearer x" },
-        },
-      },
-      ALERT,
-      d,
-    );
-    expect(calls[0].init).toMatchObject({
-      method: "PUT",
-      headers: {
-        "Content-Type": "application/json",
-        Authorization: "Bearer x",
-      },
-    });
-  });
-
-  it("throws with the status when the receiver refuses", async () => {
-    const { deps: d } = deps(
-      new Response("slow down", { status: 429, statusText: "Too Many" }),
-    );
-    await expect(
-      sendToChannel(
-        { type: "webhook", config: { url: "https://hooks.example" } },
-        ALERT,
-        d,
-      ),
-    ).rejects.toThrow("HTTP 429 Too Many: slow down");
-  });
-
-  it("never links to anything but http(s)", async () => {
-    const { deps: d, calls } = deps();
-    await sendToChannel(
-      { type: "ntfy", config: { url: "https://ntfy.sh", topic: "t" } },
-      { ...ALERT, link: { url: "javascript:alert(1)" } },
-      d,
-    );
-    expect(calls[0].init!.headers).not.toHaveProperty("Click");
-  });
-});
-
-describe("validateChannelConfig", () => {
-  it("accepts a working config of each type", () => {
-    expect(
-      validateChannelConfig("webhook", { url: "https://a.example" }),
-    ).toBeNull();
-    expect(
-      validateChannelConfig("ntfy", { url: "https://ntfy.sh", topic: "t" }),
-    ).toBeNull();
-    expect(
-      validateChannelConfig("discord", {
-        url: "https://discordapp.com/api/webhooks/1/x",
-      }),
-    ).toBeNull();
-    expect(
-      validateChannelConfig("email", { to: "a@example.com; b@example.org" }),
-    ).toBeNull();
-  });
-
-  it("names what is missing", () => {
-    expect(validateChannelConfig("ntfy", { url: "https://ntfy.sh" })).toMatch(
-      /topic/,
-    );
-    expect(validateChannelConfig("email", { to: "" })).toMatch(/address/);
-  });
-});
-
-describe("helpers", () => {
-  it("splits email recipients on commas, semicolons and spaces", () => {
-    expect(parseRecipients("a@x.io, b@x.io;c@x.io  d@x.io")).toEqual([
-      "a@x.io",
-      "b@x.io",
-      "c@x.io",
-      "d@x.io",
-    ]);
-  });
-
-  it("matches categories by pattern", () => {
-    expect(matchesCategory("*", "docker.stopped")).toBe(true);
-    expect(matchesCategory("", "docker.stopped")).toBe(true);
-    expect(matchesCategory("docker.*", "docker.stopped")).toBe(true);
-    expect(matchesCategory("docker.*", "dockerx.stopped")).toBe(false);
-    expect(
-      matchesCategory("acme-ssl.renewal_failed", "acme-ssl.renewal_failed"),
-    ).toBe(true);
-    expect(matchesCategory("acme-ssl.renewal_failed", "acme-ssl.other")).toBe(
-      false,
-    );
-  });
-
-  it("orders severities with success alongside info", () => {
-    expect(severityRank("info")).toBe(severityRank("success"));
-    expect(severityRank("warning")).toBeGreaterThan(severityRank("info"));
-    expect(severityRank("critical")).toBeGreaterThan(severityRank("warning"));
-  });
-
-  it("reads the admin allowlist leniently", () => {
-    expect(parseAllowlist('["NTFY.lan", " mail.lan ", 3]')).toEqual([
-      "ntfy.lan",
-      "mail.lan",
-    ]);
-    expect(parseAllowlist("not json")).toEqual([]);
-    expect(parseAllowlist(null)).toEqual([]);
-  });
-
-  it("keeps only a safe tab id and an http(s) url in a link", () => {
-    expect(cleanLink({ tab: "docker", url: "https://a.example" })).toEqual({
-      tab: "docker",
-      url: "https://a.example",
-    });
-    expect(cleanLink({ tab: "../../x", url: "file:///etc/passwd" })).toBeNull();
-    expect(cleanLink("docker")).toBeNull();
-  });
-});
diff --git a/plugins/alerts/tests/frontend/activate.test.tsx b/plugins/alerts/tests/frontend/activate.test.tsx
deleted file mode 100644
index d6fd726b9..000000000
--- a/plugins/alerts/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,197 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { fireEvent, waitFor } from "@testing-library/react";
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-const ITEMS = [
-  {
-    id: 2,
-    source: "acme-ssl",
-    category: "acme-ssl.renewal_failed",
-    severity: "critical",
-    title: "Certificate renewal failed",
-    body: "rate limited",
-    link: null,
-    context: null,
-    deliveries: [{ channelId: 1, name: "pager", ok: false, error: "HTTP 500" }],
-    readAt: null,
-    createdAt: new Date().toISOString(),
-  },
-  {
-    id: 1,
-    source: "termix",
-    category: "termix.announcement",
-    severity: "info",
-    title: "Termix 2.9 is out",
-    body: null,
-    link: { url: "https://termix.site" },
-    context: { actionText: "Read more" },
-    deliveries: null,
-    readAt: "2026-01-01T00:00:00.000Z",
-    createdAt: "2026-01-01T00:00:00.000Z",
-  },
-];
-
-function stubApi() {
-  const calls: Array<[string, string, unknown?]> = [];
-  const api = {
-    get: vi.fn(async (url: string) => {
-      calls.push(["GET", url]);
-      if (url.startsWith("/items"))
-        return { data: { items: ITEMS, unread: 1 } };
-      if (url === "/unread") return { data: { count: 1 } };
-      return { data: [] };
-    }),
-    post: vi.fn(async (url: string, body?: unknown) => {
-      calls.push(["POST", url, body]);
-      return { data: { count: 0 } };
-    }),
-    delete: vi.fn(async (url: string) => {
-      calls.push(["DELETE", url]);
-      return { data: { success: true } };
-    }),
-    put: vi.fn(),
-    patch: vi.fn(),
-  } as unknown as PluginApiClient;
-  return { api, calls };
-}
-
-describe(`${manifest.id} activate`, () => {
-  it("registers a footer rail item, its panel and tab, the popups and its actions", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-
-    expect(rendered.registered.railItems()).toEqual([
-      expect.objectContaining({ id: "alerts", permission: "alerts.use" }),
-    ]);
-    expect(rendered.registered.panels()).toEqual(["alerts"]);
-    expect(rendered.registered.tabs()).toEqual(["alerts"]);
-    expect(rendered.registered.slot("shell.overlay")).toEqual([
-      "alerts.toaster",
-    ]);
-    expect(rendered.registered.actions().sort()).toEqual([
-      "alerts.open",
-      "alerts.openChannels",
-    ]);
-  });
-
-  it("opens the tab from its actions", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    await rendered.app.invokeAction("alerts.openChannels");
-    expect(rendered.shellCalls).toContainEqual({
-      method: "openSingletonTab",
-      args: ["alerts"],
-    });
-  });
-
-  it("removes everything it registered on deactivate", async () => {
-    const app = await renderWithApp(plugin, { manifest, locales });
-    await app.deactivate();
-    expect(app.registered.tabs()).toEqual([]);
-    expect(app.registered.panels()).toEqual([]);
-    expect(app.registered.railItems()).toEqual([]);
-    expect(app.registered.actions()).toEqual([]);
-    expect(app.registered.slot("shell.overlay")).toEqual([]);
-  });
-});
-
-describe("the alerts panel", () => {
-  it("lists alerts, flags a failed delivery and marks one read", async () => {
-    const { api, calls } = stubApi();
-    rendered = await renderWithApp(plugin, { manifest, locales, api });
-
-    const panel = rendered.renderPanel("alerts", { active: true });
-    await waitFor(() =>
-      expect(panel.textContent).toContain("Certificate renewal failed"),
-    );
-    expect(panel.textContent).toContain("Termix 2.9 is out");
-    expect(panel.textContent).toContain("1 channel failed");
-    expect(panel.textContent).toContain("Read more");
-
-    fireEvent.click(panel.querySelector('[aria-label="Mark as read"]')!);
-    await waitFor(() =>
-      expect(calls).toContainEqual([
-        "POST",
-        "/items/read",
-        { ids: [2], read: true },
-      ]),
-    );
-  });
-
-  it("deletes an alert", async () => {
-    const { api, calls } = stubApi();
-    rendered = await renderWithApp(plugin, { manifest, locales, api });
-
-    const panel = rendered.renderPanel("alerts", { active: true });
-    await waitFor(() =>
-      expect(panel.textContent).toContain("Certificate renewal failed"),
-    );
-    fireEvent.click(panel.querySelectorAll('[aria-label="Delete"]')[0]);
-    await waitFor(() => expect(calls).toContainEqual(["DELETE", "/items/2"]));
-    await waitFor(() =>
-      expect(panel.textContent).not.toContain("Certificate renewal failed"),
-    );
-  });
-});
-
-describe("the alert feed homepage widget", () => {
-  it("registers under the 2.8 widget id", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.extensions("homepage.widgets")).toEqual([
-      "alert_feed",
-    ]);
-  });
-
-  it("shows unread alerts and marks one read", async () => {
-    const { api, calls } = stubApi();
-    rendered = await renderWithApp(plugin, { manifest, locales, api });
-    const view = rendered.renderExtension(
-      "homepage.widgets",
-      "alert_feed",
-      "view",
-      {
-        widget: { title: null },
-        config: { maxItems: 5, showRead: false },
-      },
-    );
-    await waitFor(() =>
-      expect(view.textContent).toContain("Certificate renewal failed"),
-    );
-    expect(calls).toContainEqual(["GET", "/items?unread=true&limit=5"]);
-    fireEvent.click(view.querySelector('[title="Mark as read"]')!);
-    await waitFor(() =>
-      expect(calls).toContainEqual([
-        "POST",
-        "/items/read",
-        { ids: [2], read: true },
-      ]),
-    );
-  });
-
-  it("reads the 2.8 showAcknowledged option", async () => {
-    const { api, calls } = stubApi();
-    rendered = await renderWithApp(plugin, { manifest, locales, api });
-    rendered.renderExtension("homepage.widgets", "alert_feed", "view", {
-      widget: {},
-      config: { maxItems: 3, showAcknowledged: true },
-    });
-    await waitFor(() =>
-      expect(calls).toContainEqual(["GET", "/items?limit=3"]),
-    );
-  });
-});
diff --git a/plugins/alerts/tests/frontend/store.test.ts b/plugins/alerts/tests/frontend/store.test.ts
deleted file mode 100644
index 1920cbb0c..000000000
--- a/plugins/alerts/tests/frontend/store.test.ts
+++ /dev/null
@@ -1,140 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import {
-  createAlertsStore,
-  parseServerSentEvents,
-} from "../../src/frontend/store";
-import { shouldPopUp } from "../../src/frontend/popups";
-import {
-  configFrom,
-  parseHeaders,
-  EMPTY,
-} from "../../src/frontend/channel-config";
-import type { AlertItem } from "../../src/types";
-
-function item(id: number, severity: AlertItem["severity"]): AlertItem {
-  return {
-    id,
-    source: "docker",
-    category: "docker",
-    severity,
-    title: `alert ${id}`,
-    body: null,
-    link: null,
-    context: null,
-    deliveries: null,
-    readAt: null,
-    createdAt: new Date().toISOString(),
-  };
-}
-
-/** A response whose body streams the given chunks, then stays open. */
-function streaming(chunks: string[]): Response {
-  const encoder = new TextEncoder();
-  const body = new ReadableStream<Uint8Array>({
-    start(controller) {
-      for (const chunk of chunks) controller.enqueue(encoder.encode(chunk));
-    },
-  });
-  return new Response(body, {
-    headers: { "Content-Type": "text/event-stream" },
-  });
-}
-
-describe("parseServerSentEvents", () => {
-  it("parses whole events and keeps the rest for later", () => {
-    const events: Array<{ event: string; data: string }> = [];
-    const rest = parseServerSentEvents(
-      'event: unread\ndata: {"count":2}\n\n: keepalive\n\nevent: item\ndata: {"id"',
-      (event) => events.push(event),
-    );
-    expect(events).toEqual([{ event: "unread", data: '{"count":2}' }]);
-    expect(rest).toBe('event: item\ndata: {"id"');
-  });
-});
-
-describe("createAlertsStore", () => {
-  it("follows the unread count and hands on each alert once as new", async () => {
-    const first = item(7, "critical");
-    const store = createAlertsStore({
-      connect: async () =>
-        streaming([
-          'event: unread\ndata: {"count":3}\n\n',
-          `event: item\ndata: ${JSON.stringify(first)}\n\n`,
-          `event: item\ndata: ${JSON.stringify({ ...first, deliveries: [] })}\n\n`,
-        ]),
-      loadUnread: async () => 0,
-    });
-    const seen: Array<[number, boolean]> = [];
-    store.onItem((alert, isNew) => seen.push([alert.id, isNew]));
-
-    store.start();
-    await vi.waitFor(() => expect(seen).toHaveLength(2));
-    store.stop();
-
-    expect(store.unread()).toBe(3);
-    expect(seen).toEqual([
-      [7, true],
-      [7, false],
-    ]);
-    expect(store.version()).toBe(2);
-  });
-
-  it("falls back to the count route while the stream is down", async () => {
-    const loadUnread = vi.fn(async () => 5);
-    const store = createAlertsStore({
-      connect: async () => new Response("", { status: 503 }),
-      loadUnread,
-      retryMs: 10_000,
-    });
-    store.start();
-    await vi.waitFor(() => expect(store.unread()).toBe(5));
-    store.stop();
-  });
-});
-
-describe("popups", () => {
-  it("follows the user's level", () => {
-    expect(shouldPopUp(item(1, "info"), "all")).toBe(true);
-    expect(shouldPopUp(item(1, "info"), "warning")).toBe(false);
-    expect(shouldPopUp(item(1, "warning"), "warning")).toBe(true);
-    expect(shouldPopUp(item(1, "warning"), "critical")).toBe(false);
-    expect(shouldPopUp(item(1, "critical"), "critical")).toBe(true);
-    expect(shouldPopUp(item(1, "critical"), "off")).toBe(false);
-  });
-});
-
-describe("channel config", () => {
-  it("reads headers one per line", () => {
-    expect(
-      parseHeaders("Authorization: Bearer x\nbad line\nX-Id:  7 "),
-    ).toEqual({ Authorization: "Bearer x", "X-Id": "7" });
-  });
-
-  it("builds only the fields each type uses", () => {
-    expect(
-      configFrom({
-        ...EMPTY,
-        type: "webhook",
-        url: " https://a.example ",
-        headers: "A: b",
-        allowPrivateNetwork: true,
-      }),
-    ).toEqual({
-      url: "https://a.example",
-      method: "POST",
-      headers: { A: "b" },
-      allowPrivateNetwork: true,
-    });
-    expect(
-      configFrom({ ...EMPTY, type: "email", to: "ops@example.com" }),
-    ).toEqual({ to: "ops@example.com" });
-    expect(
-      configFrom({
-        ...EMPTY,
-        type: "discord",
-        url: "https://discord.com/api/webhooks/1",
-        allowPrivateNetwork: true,
-      }),
-    ).toEqual({ url: "https://discord.com/api/webhooks/1" });
-  });
-});
diff --git a/plugins/alerts/tsconfig.json b/plugins/alerts/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/alerts/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/alerts/vitest.config.ts b/plugins/alerts/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/alerts/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/automations/CHANGELOG.md b/plugins/automations/CHANGELOG.md
deleted file mode 100644
index a53371a29..000000000
--- a/plugins/automations/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Runs actions on your hosts on a schedule or when something happens, like a host going down, a metric crossing a limit, a container event or an incoming webhook. Each automation is a list of steps, such as running a command, sending an alert or calling a URL.
diff --git a/plugins/automations/README.md b/plugins/automations/README.md
deleted file mode 100644
index 1fdeb8cf6..000000000
--- a/plugins/automations/README.md
+++ /dev/null
@@ -1,51 +0,0 @@
-# Automations
-
-Run actions on your hosts on a schedule or when something happens, like a host going down or a metric crossing a limit.
-
-## Features
-
-- Triggers: a schedule, a host going up or down, a metric crossing a limit, a health check change, a container event, a Termix event or an incoming webhook.
-- Steps: send an alert, call a URL, run a snippet or command, control a container or tunnel, wake a host, wait, set a variable, branch with if / otherwise, run another automation or stop.
-- Run an automation on the host that triggered it or on any host or fleet you pick.
-- See the output and errors of each step for every run.
-
-## Permissions
-
-- `automations.view`: See automations and their runs. Admins and users have it by default.
-- `automations.create`: Create automations. Admins and users have it by default.
-- `automations.edit`: Change automations. Admins and users have it by default.
-- `automations.delete`: Delete automations. Admins and users have it by default.
-- `automations.run`: Run automations by hand. Admins and users have it by default.
-
-## Services
-
-Provides to other plugins:
-
-- `automations.access`: list and run automations.
-
-Uses from other plugins:
-
-- `snippets.access` for the run snippet step. Required.
-- `fleets.access`, `tunnels.access`, `docker.containers`, `docker.events`, `host-metrics.viewers` and `wake-on-lan.send` for their steps and triggers. Each one is optional.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
-
-## Host maintenance
-
-Open **Maintenance** from a saved host's actions. Its owner can start maintenance now, record a reason and estimated duration, or add a one-time, weekly or monthly schedule. Viewing requires `automations.view`; changes require `automations.edit`. Active maintenance appears as a host badge. The Automations plugin must remain enabled for maintenance scheduling and suppression to operate.
-
-Schedules use UTC, including through daylight-saving changes. A monthly schedule for a day missing from a month skips that month. Up to 20 plans per host are stored; remove completed one-time plans when no longer needed. Planned windows cannot overlap (touching endpoints are allowed), and recurring conflicts are checked over the Gregorian calendar cycle. Removing a plan cancels future occurrences, not maintenance already in progress.
-
-The estimated completion time is informational. Maintenance **only ends when its owner explicitly ends it**. If work overruns into another scheduled window, the host stays in maintenance and the estimate extends to the later planned end. After server downtime, due plans are caught up without briefly exposing an outage between maintenance windows. Each plan's next occurrence and the active state survive restarts.
-
-While active, maintenance suppresses new host-status, health-check, metric-threshold, container-event and tunnel-disconnection automation runs for that host. This pauses the entire triggered automation, including any remediation steps. Monitoring continues to report the real status; observed status/health baselines still advance and metric dwell windows are reset. Manual runs, schedules, webhooks, security login events and runs already in progress continue normally. Maintenance does not globally silence alerts from unrelated plugins.
-
-An optional overdue reminder uses the estimate plus a configurable grace period (20 minutes by default). It only sends after core has observed the host offline at or after that deadline; an unknown, online or older cached status does not qualify. Enable host status checks to supply those observations. Reminders use the Alerts hub and category `automations.maintenance_overdue`, which can be routed through the user's notification rules. A successful reminder is remembered across restarts; an extended estimate permits another reminder for the new deadline. No reminder automatically ends maintenance.
-
-Maintenance rows reference their owner and host with cascading deletion. SQLite, PostgreSQL and MySQL migrations add only the new maintenance table.
diff --git a/plugins/automations/locales/en.json b/plugins/automations/locales/en.json
deleted file mode 100644
index 77a517290..000000000
--- a/plugins/automations/locales/en.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "View automations",
-      "description": "See the automations and their history."
-    },
-    "create": {
-      "title": "Create automations",
-      "description": "Add new automations."
-    },
-    "edit": {
-      "title": "Edit automations",
-      "description": "Change existing automations."
-    },
-    "delete": {
-      "title": "Delete automations",
-      "description": "Remove automations."
-    },
-    "run": {
-      "title": "Run automations",
-      "description": "Trigger an automation by hand."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Automations",
-        "tabAutomations": "Automations",
-        "tabRuns": "Runs",
-        "tabChannels": "Channels",
-        "createAutomation": "New Automation",
-        "backToAutomations": "Back to Automations",
-        "createTitle": "New Automation",
-        "editTitle": "Edit Automation",
-        "empty": "No automations yet. Create one to react to a metric, a schedule, or an event.",
-        "emptyRuns": "No runs yet.",
-        "channelsHint": "Channels are set up in Alerts",
-        "noChannelsHint": "The alert always goes to your inbox. Add channels in Alerts to also send it somewhere else.",
-        "nameLabel": "Name",
-        "namePlaceholder": "e.g., Clean up /data when it fills",
-        "nameRequired": "Name is required",
-        "descriptionLabel": "Description",
-        "descriptionPlaceholder": "Optional description",
-        "enabledLabel": "Enabled",
-        "concurrencyLabel": "If it is already running",
-        "concurrencyHint": "What to do when this is triggered again before the last run has finished.",
-        "concurrency": {
-          "skip": "Skip the new run",
-          "queue": "Wait and run after",
-          "allow": "Run both at once"
-        },
-        "save": "Save",
-        "created": "Automation created",
-        "updated": "Automation saved",
-        "deleted": "Automation deleted",
-        "deleteConfirm": "Delete this automation? Its run history is deleted too.",
-        "runNow": "Run now",
-        "testRun": "Test run",
-        "testRunHint": "Runs every step but does not touch anything outside Termix.",
-        "runStarted": "Run started",
-        "runFinished": "Run finished: {{status}}",
-        "trigger": "Trigger",
-        "steps": "Steps",
-        "addStep": "Add step",
-        "removeStep": "Remove step",
-        "moveUp": "Move up",
-        "moveDown": "Move down",
-        "noSteps": "No steps yet. Add one to say what should happen.",
-        "webhookTokenTitle": "Webhook URL",
-        "webhookTokenDescription": "This is shown once. Save it now, it cannot be retrieved later.",
-        "copy": "Copy",
-        "copied": "Copied",
-        "viewJson": "JSON",
-        "viewBuilder": "Builder",
-        "viewGraph": "Graph",
-        "lastRun": "Last run",
-        "never": "Never",
-        "duration": "{{seconds}}s",
-        "stepOutput": "Output",
-        "stepError": "Error",
-        "dryRunBadge": "Test run",
-        "hostSelector": {
-          "trigger": "Triggering host",
-          "host": "Specific host",
-          "fleet": "Fleet",
-          "all": "All hosts"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Metric threshold",
-          "host_status": "Host goes up or down",
-          "health_check": "Health check changes",
-          "schedule": "On a schedule",
-          "docker_event": "Container event",
-          "internal_event": "Termix event",
-          "webhook": "Incoming webhook"
-        },
-        "stepTypes": {
-          "notify": "Send an alert",
-          "http": "Call a URL",
-          "run_snippet": "Run a snippet",
-          "run_command": "Run a command",
-          "docker": "Control a container",
-          "tunnel": "Control a tunnel",
-          "wol": "Wake a host",
-          "wait": "Wait",
-          "set_var": "Set a variable",
-          "if": "If / otherwise",
-          "run_automation": "Run another automation",
-          "stop": "Stop"
-        },
-        "statuses": {
-          "running": "Running",
-          "success": "Success",
-          "failed": "Failed",
-          "timeout": "Timed out",
-          "skipped": "Skipped",
-          "cancelled": "Cancelled"
-        },
-        "fields": {
-          "host": "Host",
-          "metric": "Metric",
-          "mount": "Mount point",
-          "operator": "Is",
-          "value": "Value",
-          "forSeconds": "Sustained for (seconds)",
-          "cooldown": "Cooldown (minutes)",
-          "cron": "Cron expression",
-          "intervalSeconds": "Every (seconds)",
-          "timezone": "Time zone",
-          "timezoneServer": "Server time",
-          "timezoneHint": "Cron times are read in this zone. Does not apply to interval schedules.",
-          "container": "Container",
-          "command": "Command",
-          "url": "URL",
-          "method": "Method",
-          "body": "Body",
-          "channels": "Also send to",
-          "title": "Title",
-          "message": "Message",
-          "snippet": "Snippet",
-          "seconds": "Seconds",
-          "conditionLeftPlaceholder": "Value to check",
-          "conditionRightPlaceholder": "Compare against",
-          "variableName": "Variable name",
-          "variableValue": "Value",
-          "elevated": "Run with sudo",
-          "onError": "If this fails",
-          "allowPrivateNetwork": "Allow local network addresses",
-          "allowPrivateNetworkHint": "Needed for a self-hosted service on your LAN. Off by default to prevent requests to internal addresses."
-        },
-        "onError": {
-          "stop": "Stop the run",
-          "continue": "Carry on"
-        },
-        "needsPlugin": "Needs {{plugin}}",
-        "needsPluginHint": "This automation is skipped until the feature it needs is available again.",
-        "offBadge": "Off",
-        "docsLink": "View docs",
-        "ago": {
-          "seconds": "{{count}}s ago",
-          "minutes": "{{count}}m ago",
-          "hours": "{{count}}h ago",
-          "days": "{{count}}d ago"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Automations"
-  },
-  "onboarding": {
-    "feature_automations": "Automations",
-    "feature_automations_desc": "Run steps automatically when something happens, and get notified."
-  },
-  "maintenance": {
-    "title": "Maintenance",
-    "description": "Pause host status, health, metric, container and tunnel-disconnection automations while work is in progress. Monitoring, manual runs and scheduled automations continue.",
-    "denied": "You do not have permission to view maintenance.",
-    "sharedReadOnly": "This host was shared with you. Only its owner can change maintenance.",
-    "failed": "Maintenance could not be updated.",
-    "active": "Maintenance active",
-    "estimated": "Estimated completion",
-    "noAutoEnd": "The estimate does not end maintenance. End it explicitly when the work is complete.",
-    "endConfirm": "End maintenance and resume event-triggered automations for this host?",
-    "confirmEnd": "Confirm end",
-    "cancel": "Cancel",
-    "end": "End maintenance",
-    "action": "Action",
-    "startNow": "Start now",
-    "schedule": "Schedule for later",
-    "reason": "Reason",
-    "startUtc": "First start (UTC)",
-    "repeat": "Repeat",
-    "once": "Once",
-    "weekly": "Weekly",
-    "monthly": "Monthly",
-    "utcHelp": "Schedules use UTC throughout the year. Monthly schedules skip months without the selected day. Planned windows cannot overlap; overrunning maintenance continues across later windows.",
-    "duration": "Estimated duration (minutes)",
-    "grace": "Grace period (minutes)",
-    "notify": "Notify once if still offline after the estimate plus grace period",
-    "addSchedule": "Add schedule",
-    "schedules": "Schedules",
-    "noSchedules": "No maintenance schedules.",
-    "completed": "Already started",
-    "minutes_one": "{{count}} minute",
-    "minutes_other": "{{count}} minutes",
-    "remove": "Remove schedule",
-    "loadFailed": "Could not refresh maintenance status. Changes are disabled until it can be loaded.",
-    "loading": "Loading maintenance status…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "connect",
-          "disconnect": "disconnect",
-          "offline": "offline",
-          "online": "online",
-          "failing": "failing",
-          "recovered": "recovered"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/af_ZA.json b/plugins/automations/locales/translated/af_ZA.json
deleted file mode 100644
index 77dd0add5..000000000
--- a/plugins/automations/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Bekyk outomatisasies",
-      "description": "Sien die outomatisasies en hul geskiedenis."
-    },
-    "create": {
-      "title": "Skep outomatisasies",
-      "description": "Voeg nuwe outomatisasies by."
-    },
-    "edit": {
-      "title": "Wysig outomatisasies",
-      "description": "Verander bestaande outomatisasies."
-    },
-    "delete": {
-      "title": "Vee outomatisasies uit",
-      "description": "Verwyder outomatisasies."
-    },
-    "run": {
-      "title": "Voer outomatisasies uit",
-      "description": "Aktiveer 'n outomatisering met die hand."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Outomatisasies",
-        "tabAutomations": "Outomatisasies",
-        "tabRuns": "Loopbane",
-        "tabChannels": "Kanale",
-        "createAutomation": "Nuwe Outomatisering",
-        "backToAutomations": "Terug na Outomatisasies",
-        "createTitle": "Nuwe Outomatisering",
-        "editTitle": "Wysig Outomatisering",
-        "empty": "Geen outomatisasies nog nie. Skep een om op 'n maatstaf, 'n skedule of 'n gebeurtenis te reageer.",
-        "emptyRuns": "Geen lopies nog nie.",
-        "channelsHint": "Kanale word in Waarskuwings opgestel",
-        "noChannelsHint": "Die waarskuwing gaan altyd na jou inboks. Voeg kanale by Waarskuwings om dit ook elders te stuur.",
-        "nameLabel": "Naam",
-        "namePlaceholder": "bv. Maak /data skoon wanneer dit vol is",
-        "nameRequired": "Naam word vereis",
-        "descriptionLabel": "Beskrywing",
-        "descriptionPlaceholder": "Opsionele beskrywing",
-        "enabledLabel": "Geaktiveer",
-        "concurrencyLabel": "As dit reeds aan die gang is",
-        "concurrencyHint": "Wat om te doen wanneer dit weer geaktiveer word voordat die laaste lopie klaar is.",
-        "concurrency": {
-          "skip": "Slaan die nuwe lopie oor",
-          "queue": "Wag en hardloop agterna",
-          "allow": "Begin albei gelyktydig"
-        },
-        "save": "Stoor",
-        "created": "Outomatisering geskep",
-        "updated": "Outomatisering gestoor",
-        "deleted": "Outomatisering uitgevee",
-        "deleteConfirm": "Vee hierdie outomatisering uit? Die loopgeskiedenis daarvan word ook uitgevee.",
-        "runNow": "Hardloop nou",
-        "testRun": "Toetslopie",
-        "testRunHint": "Loop elke stap, maar raak niks buite Termix aan nie.",
-        "runStarted": "Loop het begin",
-        "runFinished": "Loop voltooi: {{status}}",
-        "trigger": "Sneller",
-        "steps": "Stappe",
-        "addStep": "Voeg stap by",
-        "removeStep": "Verwyder stap",
-        "moveUp": "Beweeg op",
-        "moveDown": "Beweeg af",
-        "noSteps": "Geen stappe nog nie. Voeg een by om te sê wat moet gebeur.",
-        "webhookTokenTitle": "Webhook-URL",
-        "webhookTokenDescription": "Dit word een keer gewys. Stoor dit nou, dit kan nie later herwin word nie.",
-        "copy": "Kopieer",
-        "copied": "Gekopieer",
-        "viewJson": "JSON",
-        "viewBuilder": "Bouer",
-        "viewGraph": "Grafiek",
-        "lastRun": "Laaste lopie",
-        "never": "Nooit",
-        "duration": "{{seconds}}s",
-        "stepOutput": "Uitset",
-        "stepError": "Fout",
-        "dryRunBadge": "Toetslopie",
-        "hostSelector": {
-          "trigger": "Aanvallende gasheer",
-          "host": "Spesifieke gasheer",
-          "fleet": "Vloot",
-          "all": "Alle gashere"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Metrieke drempel",
-          "host_status": "Gasheer gaan op of af",
-          "health_check": "Veranderinge in gesondheidstoetse",
-          "schedule": "Op 'n skedule",
-          "docker_event": "Houergebeurtenis",
-          "internal_event": "Termix-geleentheid",
-          "webhook": "Inkomende webhook"
-        },
-        "stepTypes": {
-          "notify": "Stuur 'n waarskuwing",
-          "http": "Roep 'n URL op",
-          "run_snippet": "Voer 'n brokkie uit",
-          "run_command": "Voer 'n opdrag uit",
-          "docker": "Beheer 'n houer",
-          "tunnel": "Beheer 'n tonnel",
-          "wol": "Maak 'n gasheer wakker",
-          "wait": "Wag",
-          "set_var": "Stel 'n veranderlike",
-          "if": "Indien / andersins",
-          "run_automation": "Begin nog 'n outomatisering",
-          "stop": "Stop"
-        },
-        "statuses": {
-          "running": "Hardloop",
-          "success": "Sukses",
-          "failed": "Misluk",
-          "timeout": "Tyd verstryk",
-          "skipped": "Oorgeslaan",
-          "cancelled": "Gekanselleer"
-        },
-        "fields": {
-          "host": "Gasheer",
-          "metric": "Metrieke",
-          "mount": "Monteerpunt",
-          "operator": "Is",
-          "value": "Waarde",
-          "forSeconds": "Aangehou vir (sekondes)",
-          "cooldown": "Afkoeltyd (minute)",
-          "cron": "Cron-uitdrukking",
-          "intervalSeconds": "Elke (sekondes)",
-          "timezone": "Tydsone",
-          "timezoneServer": "Bedienertyd",
-          "timezoneHint": "Cron-tye word in hierdie sone gelees. Geld nie vir intervalskedules nie.",
-          "container": "Houer",
-          "command": "Bevel",
-          "url": "URL",
-          "method": "Metode",
-          "body": "Liggaam",
-          "channels": "Stuur ook na",
-          "title": "Titel",
-          "message": "Boodskap",
-          "snippet": "Brokkie",
-          "seconds": "Sekondes",
-          "conditionLeftPlaceholder": "Waarde om na te gaan",
-          "conditionRightPlaceholder": "Vergelyk teen",
-          "variableName": "Veranderlike naam",
-          "variableValue": "Waarde",
-          "elevated": "Begin met sudo",
-          "onError": "As dit misluk",
-          "allowPrivateNetwork": "Laat plaaslike netwerkadresse toe",
-          "allowPrivateNetworkHint": "Nodig vir 'n selfgehoste diens op jou LAN. Standaard afgeskakel om versoeke na interne adresse te voorkom."
-        },
-        "onError": {
-          "stop": "Stop die hardloop",
-          "continue": "Gaan voort"
-        },
-        "needsPlugin": "Benodig {{plugin}}",
-        "needsPluginHint": "Hierdie outomatisering word oorgeslaan totdat die funksie wat dit benodig weer beskikbaar is.",
-        "offBadge": "Af",
-        "docsLink": "Bekyk dokumente",
-        "ago": {
-          "seconds": "{{count}}s gelede",
-          "minutes": "{{count}}m gelede",
-          "hours": "{{count}}uur gelede",
-          "days": "{{count}}dae gelede"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Outomatisasies"
-  },
-  "onboarding": {
-    "feature_automations": "Outomatisasies",
-    "feature_automations_desc": "Voer stappe outomaties uit wanneer iets gebeur, en word in kennis gestel."
-  },
-  "maintenance": {
-    "title": "Onderhoud",
-    "description": "Onderbreek gasheerstatus, gesondheid, metrieke, houer- en tonnel-ontkoppelingsoutomatisasies terwyl werk aan die gang is. Monitering, handmatige lopies en geskeduleerde outomatisasies gaan voort.",
-    "denied": "Jy het nie toestemming om onderhoud te sien nie.",
-    "sharedReadOnly": "Hierdie gasheer is met jou gedeel. Slegs die eienaar kan die onderhoud verander.",
-    "failed": "Onderhoud kon nie opgedateer word nie.",
-    "active": "Onderhoud aktief",
-    "estimated": "Geraamde voltooiing",
-    "noAutoEnd": "Die skatting beëindig nie onderhoud nie. Beëindig dit eksplisiet wanneer die werk voltooi is.",
-    "endConfirm": "Beëindig onderhoud en hervat gebeurtenis-geaktiveerde outomatisasies vir hierdie gasheer?",
-    "confirmEnd": "Bevestig einde",
-    "cancel": "Kanselleer",
-    "end": "Einde van onderhoud",
-    "action": "Aksie",
-    "startNow": "Begin nou",
-    "schedule": "Skeduleer vir later",
-    "reason": "Rede",
-    "startUtc": "Eerste begin (UTC)",
-    "repeat": "Herhaal",
-    "once": "Eens",
-    "weekly": "Weekliks",
-    "monthly": "Maandeliks",
-    "utcHelp": "Skedules gebruik UTC dwarsdeur die jaar. Maandelikse skedules slaan maande oor sonder die gekose dag. Beplande vensters kan nie oorvleuel nie; oorskrydende onderhoud gaan voort oor latere vensters.",
-    "duration": "Geraamde duur (minute)",
-    "grace": "Genadetydperk (minute)",
-    "notify": "Stel een keer in kennis indien steeds vanlyn na die skatting plus grasietydperk",
-    "addSchedule": "Voeg skedule by",
-    "schedules": "Skedules",
-    "noSchedules": "Geen onderhoudskedules nie.",
-    "completed": "Reeds begin",
-    "minutes_one": "{{count}} minuut",
-    "minutes_other": "{{count}} minute",
-    "remove": "Verwyder skedule",
-    "loadFailed": "Kon nie onderhoudstatus verfris nie. Veranderinge is gedeaktiveer totdat dit gelaai kan word.",
-    "loading": "Laai onderhoudstatus…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "verbind",
-          "disconnect": "ontkoppel",
-          "offline": "vanlyn",
-          "online": "aanlyn",
-          "failing": "mislukking",
-          "recovered": "herstel"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/ar_SA.json b/plugins/automations/locales/translated/ar_SA.json
deleted file mode 100644
index 4f0ffead8..000000000
--- a/plugins/automations/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "عرض عمليات التشغيل الآلي",
-      "description": "اطلع على أنظمة التشغيل الآلي وتاريخها."
-    },
-    "create": {
-      "title": "إنشاء عمليات أتمتة",
-      "description": "أضف عمليات أتمتة جديدة."
-    },
-    "edit": {
-      "title": "تحرير عمليات التشغيل الآلي",
-      "description": "قم بتغيير أنظمة التشغيل الآلي الحالية."
-    },
-    "delete": {
-      "title": "حذف عمليات التشغيل الآلي",
-      "description": "إزالة العمليات الآلية."
-    },
-    "run": {
-      "title": "تشغيل عمليات التشغيل الآلي",
-      "description": "قم بتشغيل عملية أتمتة يدوياً."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "الأتمتة",
-        "tabAutomations": "الأتمتة",
-        "tabRuns": "يركض",
-        "tabChannels": "القنوات",
-        "createAutomation": "الأتمتة الجديدة",
-        "backToAutomations": "العودة إلى الأتمتة",
-        "createTitle": "الأتمتة الجديدة",
-        "editTitle": "أتمتة التحرير",
-        "empty": "لا توجد عمليات أتمتة حتى الآن. أنشئ واحدة للتفاعل مع مقياس أو جدول زمني أو حدث.",
-        "emptyRuns": "لم يتم تسجيل أي نقاط حتى الآن.",
-        "channelsHint": "يتم إعداد القنوات في قسم التنبيهات",
-        "noChannelsHint": "تصل التنبيهات دائمًا إلى بريدك الوارد. أضف قنوات في قسم التنبيهات لإرسالها إلى مكان آخر أيضًا.",
-        "nameLabel": "الاسم",
-        "namePlaceholder": "مثال: تنظيف /data عند امتلائها",
-        "nameRequired": "الاسم مطلوب",
-        "descriptionLabel": "الوصف",
-        "descriptionPlaceholder": "وصف اختياري",
-        "enabledLabel": "مُمكّن",
-        "concurrencyLabel": "إذا كان قيد التشغيل بالفعل",
-        "concurrencyHint": "ماذا نفعل عندما يتم تشغيل هذا مرة أخرى قبل انتهاء التشغيل الأخير؟",
-        "concurrency": {
-          "skip": "تخطَّ الجولة الجديدة",
-          "queue": "انتظر واركض خلفه",
-          "allow": "قم بتشغيل كليهما في وقت واحد"
-        },
-        "save": "حفظ",
-        "created": "تم إنشاء الأتمتة",
-        "updated": "تم حفظ الأتمتة",
-        "deleted": "تم حذف الأتمتة",
-        "deleteConfirm": "هل تريد حذف هذه العملية الآلية؟ سيتم حذف سجل تشغيلها أيضاً.",
-        "runNow": "انطلق الآن",
-        "testRun": "تشغيل تجريبي",
-        "testRunHint": "يقوم بتنفيذ كل خطوة ولكنه لا يلمس أي شيء خارج Termix.",
-        "runStarted": "بدأ الجري",
-        "runFinished": "انتهى التشغيل: {{status}}",
-        "trigger": "المشغّل",
-        "steps": "خطوات",
-        "addStep": "خطوات إضافية",
-        "removeStep": "خطوة الإزالة",
-        "moveUp": "انتقل إلى مستوى أعلى",
-        "moveDown": "انزل لأسفل",
-        "noSteps": "لم تُتخذ أي خطوات بعد. أضف خطوة واحدة لتوضيح ما ينبغي أن يحدث.",
-        "webhookTokenTitle": "رابط الويب هوك",
-        "webhookTokenDescription": "هذا يظهر مرة واحدة فقط. احفظه الآن، فلن تتمكن من استعادته لاحقاً.",
-        "copy": "نسخ",
-        "copied": "تم النسخ",
-        "viewJson": "JSON",
-        "viewBuilder": "باني",
-        "viewGraph": "الرسم البياني",
-        "lastRun": "الجولة الأخيرة",
-        "never": "أبدًا",
-        "duration": "{{seconds}}s",
-        "stepOutput": "المخرجات",
-        "stepError": "خطأ",
-        "dryRunBadge": "تشغيل تجريبي",
-        "hostSelector": {
-          "trigger": "تشغيل المضيف",
-          "host": "مضيف محدد",
-          "fleet": "أسطول",
-          "all": "جميع المضيفين"
-        },
-        "triggerKinds": {
-          "metric_threshold": "العتبة المترية",
-          "host_status": "يرتفع أو ينخفض مستوى المضيف",
-          "health_check": "تغييرات في الفحص الصحي",
-          "schedule": "وفقًا لجدول زمني",
-          "docker_event": "حدث الحاوية",
-          "internal_event": "حدث تيرميكس",
-          "webhook": "رابط الويب الوارد"
-        },
-        "stepTypes": {
-          "notify": "إرسال تنبيه",
-          "http": "استدعاء عنوان URL",
-          "run_snippet": "قم بتشغيل جزء من التعليمات البرمجية",
-          "run_command": "نفّذ أمرًا",
-          "docker": "التحكم في حاوية",
-          "tunnel": "التحكم في نفق",
-          "wol": "أيقظ مضيفًا",
-          "wait": "انتظر",
-          "set_var": "قم بتعيين متغير",
-          "if": "إذا / خلاف ذلك",
-          "run_automation": "قم بتشغيل عملية أتمتة أخرى",
-          "stop": "التوقف"
-        },
-        "statuses": {
-          "running": "قيد التشغيل",
-          "success": "نجاح",
-          "failed": "فشل",
-          "timeout": "انتهت مهلة الاتصال",
-          "skipped": "تم التخطي",
-          "cancelled": "تم الإلغاء"
-        },
-        "fields": {
-          "host": "المضيف",
-          "metric": "المقياس",
-          "mount": "نقطة التثبيت",
-          "operator": "يكون",
-          "value": "قيمة",
-          "forSeconds": "استمر لمدة (ثوانٍ)",
-          "cooldown": "فترة التهدئة (بالدقائق)",
-          "cron": "تعبير كرون",
-          "intervalSeconds": "كل (ثانية)",
-          "timezone": "المنطقة الزمنية",
-          "timezoneServer": "وقت الخادم",
-          "timezoneHint": "تُقرأ أوقات Cron في هذه المنطقة. لا ينطبق ذلك على الجداول الزمنية الفاصلة.",
-          "container": "حاوية",
-          "command": "الأمر",
-          "url": "URL",
-          "method": "طريقة",
-          "body": "جسم",
-          "channels": "أرسل أيضًا إلى",
-          "title": "العنوان",
-          "message": "رسالة",
-          "snippet": "مقتطف",
-          "seconds": "ثوانٍ",
-          "conditionLeftPlaceholder": "قيمة يجب التحقق منها",
-          "conditionRightPlaceholder": "قارن بـ",
-          "variableName": "اسم المتغير",
-          "variableValue": "قيمة",
-          "elevated": "قم بتشغيل الأمر sudo",
-          "onError": "إذا فشل هذا",
-          "allowPrivateNetwork": "السماح بعناوين الشبكة المحلية",
-          "allowPrivateNetworkHint": "هذا الخيار ضروري لخدمة مُستضافة ذاتيًا على شبكتك المحلية. وهو مُعطّل افتراضيًا لمنع الطلبات إلى العناوين الداخلية."
-        },
-        "onError": {
-          "stop": "أوقف الجري",
-          "continue": "حمل"
-        },
-        "needsPlugin": "الاحتياجات {{plugin}}",
-        "needsPluginHint": "يتم تخطي هذه العملية الآلية حتى تصبح الميزة التي تحتاجها متاحة مرة أخرى.",
-        "offBadge": "غير مفعلة",
-        "docsLink": "عرض المستندات",
-        "ago": {
-          "seconds": "{{count}}منذ ثانية",
-          "minutes": "قبل {{count}}m",
-          "hours": "قبل {{count}}h",
-          "days": "قبل {{count}}d"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "الأتمتة"
-  },
-  "onboarding": {
-    "feature_automations": "الأتمتة",
-    "feature_automations_desc": "قم بتشغيل الخطوات تلقائيًا عند حدوث شيء ما، واحصل على إشعار بذلك."
-  },
-  "maintenance": {
-    "title": "صيانة",
-    "description": "أوقف عمليات أتمتة حالة المضيف، وصحته، ومقاييسه، والحاويات، وفصل الأنفاق مؤقتًا أثناء سير العمل. وتستمر عمليات المراقبة، والتشغيل اليدوي، والأتمتة المجدولة.",
-    "denied": "ليس لديك إذن للاطلاع على أعمال الصيانة.",
-    "sharedReadOnly": "تمت مشاركة هذا المضيف معك. مالكه فقط هو من يستطيع تغيير إعداداته.",
-    "failed": "تعذر تحديث الصيانة.",
-    "active": "الصيانة نشطة",
-    "estimated": "تاريخ الإنجاز المتوقع",
-    "noAutoEnd": "لا يُنهي التقدير أعمال الصيانة. يجب إنهاؤه صراحةً عند اكتمال العمل.",
-    "endConfirm": "هل تريد إنهاء الصيانة واستئناف عمليات التشغيل الآلي التي يتم تشغيلها بواسطة الأحداث لهذا المضيف؟",
-    "confirmEnd": "تأكيد الإنهاء",
-    "cancel": "إلغاء",
-    "end": "إنهاء الصيانة",
-    "action": "الإجراء",
-    "startNow": "ابدأ الآن",
-    "schedule": "جدولة لاحقاً",
-    "reason": "سبب",
-    "startUtc": "بداية التشغيل الأولى (UTC)",
-    "repeat": "يكرر",
-    "once": "مرة واحدة",
-    "weekly": "أسبوعي",
-    "monthly": "شهريا",
-    "utcHelp": "تستخدم الجداول الزمنية التوقيت العالمي المنسق (UTC) على مدار العام. وتتخطى الجداول الشهرية الأشهر التي لا تتضمن اليوم المحدد. ولا يمكن أن تتداخل فترات التخطيط؛ إذ تستمر أعمال الصيانة المتأخرة خلال الفترات اللاحقة.",
-    "duration": "المدة المقدرة (بالدقائق)",
-    "grace": "فترة السماح (بالدقائق)",
-    "notify": "قم بالإخطار مرة واحدة إذا كنت لا تزال غير متصل بالإنترنت بعد الفترة التقديرية بالإضافة إلى فترة السماح",
-    "addSchedule": "إضافة جدول",
-    "schedules": "الجداول الزمنية",
-    "noSchedules": "لا توجد جداول صيانة.",
-    "completed": "ابدأ بالفعل",
-    "minutes_one": "{{count}} minute",
-    "minutes_other": "{{count}} دقائق",
-    "remove": "إزالة الجدول الزمني",
-    "loadFailed": "تعذر تحديث حالة الصيانة. التغييرات معطلة حتى يتم تحميلها.",
-    "loading": "جارٍ تحميل حالة الصيانة…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "اتصال",
-          "disconnect": "افصل",
-          "offline": "غير متصل",
-          "online": "متصل",
-          "failing": "الفشل",
-          "recovered": "تم التعافي"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/bg_BG.json b/plugins/automations/locales/translated/bg_BG.json
deleted file mode 100644
index 479175bee..000000000
--- a/plugins/automations/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Преглед на автоматизациите",
-      "description": "Вижте автоматизациите и тяхната история."
-    },
-    "create": {
-      "title": "Създаване на автоматизации",
-      "description": "Добавете нови автоматизации."
-    },
-    "edit": {
-      "title": "Редактиране на автоматизации",
-      "description": "Променете съществуващите автоматизации."
-    },
-    "delete": {
-      "title": "Изтриване на автоматизации",
-      "description": "Премахнете автоматизациите."
-    },
-    "run": {
-      "title": "Изпълнявайте автоматизации",
-      "description": "Задействайте автоматизация ръчно."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Автоматизации",
-        "tabAutomations": "Автоматизации",
-        "tabRuns": "Бягания",
-        "tabChannels": "Канали",
-        "createAutomation": "Нова автоматизация",
-        "backToAutomations": "Обратно към Автоматизации",
-        "createTitle": "Нова автоматизация",
-        "editTitle": "Редактиране на автоматизация",
-        "empty": "Все още няма автоматизации. Създайте такава, която да реагира на показател, график или събитие.",
-        "emptyRuns": "Все още няма бягания.",
-        "channelsHint": "Каналите се настройват в „Известия“",
-        "noChannelsHint": "Сигналът винаги отива във входящата ви поща. Добавете канали в „Сигнали“, за да го изпращате и някъде другаде.",
-        "nameLabel": "Име",
-        "namePlaceholder": "напр. Почистване на /данни, когато се запълни",
-        "nameRequired": "Името е задължително",
-        "descriptionLabel": "Описание",
-        "descriptionPlaceholder": "Незадължително описание",
-        "enabledLabel": "Активирано",
-        "concurrencyLabel": "Ако вече работи",
-        "concurrencyHint": "Какво да направите, когато това се задейства отново, преди да е завършило последното изпълнение.",
-        "concurrency": {
-          "skip": "Пропуснете новото бягане",
-          "queue": "Изчакай и бягай след това",
-          "allow": "Изпълнете и двете едновременно"
-        },
-        "save": "Запазване",
-        "created": "Автоматизация, създадена",
-        "updated": "Автоматизацията е запазена",
-        "deleted": "Автоматизацията е изтрита",
-        "deleteConfirm": "Да се изтрие ли тази автоматизация? Историята на нейните изпълнения също ще бъде изтрита.",
-        "runNow": "Бягай сега",
-        "testRun": "Тестов пробег",
-        "testRunHint": "Изпълнява всяка стъпка, но не докосва нищо извън Termix.",
-        "runStarted": "Бягането започна",
-        "runFinished": "Изпълнението е завършено: {{status}}",
-        "trigger": "Спусък",
-        "steps": "Стъпки",
-        "addStep": "Добавяне на стъпка",
-        "removeStep": "Премахване на стъпка",
-        "moveUp": "Премести нагоре",
-        "moveDown": "Премести надолу",
-        "noSteps": "Все още няма стъпки. Добавете една, за да кажете какво трябва да се случи.",
-        "webhookTokenTitle": "URL адрес на уебкукичката",
-        "webhookTokenDescription": "Това се показва веднъж. Запазете го сега, не може да бъде извлечено по-късно.",
-        "copy": "Копиране",
-        "copied": "Копирано",
-        "viewJson": "JSON",
-        "viewBuilder": "Строител",
-        "viewGraph": "Графика",
-        "lastRun": "Последно бягане",
-        "never": "Никога",
-        "duration": "{{seconds}}с",
-        "stepOutput": "Изход",
-        "stepError": "Грешка",
-        "dryRunBadge": "Тестов пробег",
-        "hostSelector": {
-          "trigger": "Задействащ хост",
-          "host": "Специфичен хост",
-          "fleet": "Флот",
-          "all": "Всички хостове"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Праг на показателя",
-          "host_status": "Домакинът се изкачва или слиза",
-          "health_check": "Промени в проверката на състоянието",
-          "schedule": "По график",
-          "docker_event": "Събитие в контейнера",
-          "internal_event": "Събитие Termix",
-          "webhook": "Входящ уеб кукичка"
-        },
-        "stepTypes": {
-          "notify": "Изпрати сигнал",
-          "http": "Извикване на URL адрес",
-          "run_snippet": "Изпълнете фрагмент",
-          "run_command": "Изпълнете команда",
-          "docker": "Контрол на контейнер",
-          "tunnel": "Контрол на тунел",
-          "wol": "Събудете домакин",
-          "wait": "Чакай",
-          "set_var": "Задаване на променлива",
-          "if": "Ако / в противен случай",
-          "run_automation": "Изпълнете друга автоматизация",
-          "stop": "Спри"
-        },
-        "statuses": {
-          "running": "Бягане",
-          "success": "Успех",
-          "failed": "Неуспешно",
-          "timeout": "Времето за изчакване изтече",
-          "skipped": "Пропуснато",
-          "cancelled": "Отменено"
-        },
-        "fields": {
-          "host": "Домакин",
-          "metric": "Метричен",
-          "mount": "Точка на монтиране",
-          "operator": "Е",
-          "value": "Стойност",
-          "forSeconds": "Задържа се за (секунди)",
-          "cooldown": "Охлаждане (минути)",
-          "cron": "Cron израз",
-          "intervalSeconds": "Всеки (секунди)",
-          "timezone": "Часова зона",
-          "timezoneServer": "Време на сървъра",
-          "timezoneHint": "Cron времената се отчитат в тази зона. Не се отнася за интервални графици.",
-          "container": "Контейнер",
-          "command": "Команда",
-          "url": "URL адрес",
-          "method": "Метод",
-          "body": "Тяло",
-          "channels": "Изпрати също до",
-          "title": "Заглавие",
-          "message": "Съобщение",
-          "snippet": "Фрагмент",
-          "seconds": "Секунди",
-          "conditionLeftPlaceholder": "Стойност за проверка",
-          "conditionRightPlaceholder": "Сравнете с",
-          "variableName": "Име на променлива",
-          "variableValue": "Стойност",
-          "elevated": "Стартирай със sudo",
-          "onError": "Ако това не успее",
-          "allowPrivateNetwork": "Разрешаване на локални мрежови адреси",
-          "allowPrivateNetworkHint": "Необходимо за самостоятелно хоствана услуга във вашата локална мрежа. Изключено по подразбиране, за да се предотвратят заявки към вътрешни адреси."
-        },
-        "onError": {
-          "stop": "Спрете бягането",
-          "continue": "Продължавай"
-        },
-        "needsPlugin": "Изисква {{plugin}}",
-        "needsPluginHint": "Тази автоматизация се пропуска, докато функцията, от която се нуждае, не стане отново налична.",
-        "offBadge": "Изключено",
-        "docsLink": "Преглед на документи",
-        "ago": {
-          "seconds": "преди {{count}}сек",
-          "minutes": "преди {{count}}мин.",
-          "hours": "преди {{count}}ч",
-          "days": "преди {{count}}дни"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Автоматизации"
-  },
-  "onboarding": {
-    "feature_automations": "Автоматизации",
-    "feature_automations_desc": "Изпълнявайте стъпките автоматично, когато нещо се случи, и получавайте известия."
-  },
-  "maintenance": {
-    "title": "Поддръжка",
-    "description": "Паузирайте автоматизациите за състоянието на хоста, здравето, метриките, контейнерите и прекъсванията на тунелите, докато работата е в ход. Мониторингът, ръчните изпълнения и планираните автоматизации продължават.",
-    "denied": "Нямате разрешение да преглеждате поддръжката.",
-    "sharedReadOnly": "Този хост беше споделен с вас. Само собственикът му може да променя поддръжката.",
-    "failed": "Поддръжката не можа да бъде актуализирана.",
-    "active": "Поддръжката е активна",
-    "estimated": "Очаквано завършване",
-    "noAutoEnd": "Оценката не прекратява поддръжката. Прекратете я изрично, когато работата е завършена.",
-    "endConfirm": "Да се прекрати ли поддръжката и да се възобновят автоматизациите, задействани от събития, за този хост?",
-    "confirmEnd": "Потвърждаване на края",
-    "cancel": "Отказ",
-    "end": "Край на поддръжката",
-    "action": "Действие",
-    "startNow": "Започнете сега",
-    "schedule": "Планирайте за по-късно",
-    "reason": "Причина",
-    "startUtc": "Първо стартиране (UTC)",
-    "repeat": "Повторете",
-    "once": "Веднъж",
-    "weekly": "Седмично",
-    "monthly": "Месечно",
-    "utcHelp": "Графиците използват UTC през цялата година. Месечните графици пропускат месеците без избрания ден. Планираните прозорци не могат да се припокриват; превишаването на поддръжката продължава и през по-късни прозорци.",
-    "duration": "Очаквана продължителност (минути)",
-    "grace": "Гратисен период (минути)",
-    "notify": "Уведомявай веднъж, ако все още си офлайн след прогнозната цена плюс гратисен период",
-    "addSchedule": "Добавяне на график",
-    "schedules": "Разписания",
-    "noSchedules": "Няма графици за поддръжка.",
-    "completed": "Вече започна",
-    "minutes_one": "{{count}} минута",
-    "minutes_other": "{{count}} минути",
-    "remove": "Премахване на графика",
-    "loadFailed": "Не можа да се обнови състоянието на поддръжката. Промените са деактивирани, докато не може да бъде заредено.",
-    "loading": "Зареждане на състоянието на поддръжката…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "свързвам",
-          "disconnect": "прекъсване на връзката",
-          "offline": "офлайн",
-          "online": "онлайн",
-          "failing": "неуспешен",
-          "recovered": "възстановен"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/bn_BD.json b/plugins/automations/locales/translated/bn_BD.json
deleted file mode 100644
index 79ce5f46d..000000000
--- a/plugins/automations/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "অটোমেশনগুলি দেখুন",
-      "description": "স্বয়ংক্রিয় ব্যবস্থাগুলো এবং সেগুলোর ইতিহাস দেখুন।"
-    },
-    "create": {
-      "title": "অটোমেশন তৈরি করুন",
-      "description": "নতুন অটোমেশন যোগ করুন।"
-    },
-    "edit": {
-      "title": "অটোমেশন সম্পাদনা করুন",
-      "description": "বিদ্যমান অটোমেশনগুলো পরিবর্তন করুন।"
-    },
-    "delete": {
-      "title": "অটোমেশনগুলি মুছুন",
-      "description": "অটোমেশনগুলো সরিয়ে ফেলুন।"
-    },
-    "run": {
-      "title": "অটোমেশন চালান",
-      "description": "ম্যানুয়ালি অটোমেশনটি চালু করুন।"
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "অটোমেশন",
-        "tabAutomations": "অটোমেশন",
-        "tabRuns": "রান",
-        "tabChannels": "চ্যানেল",
-        "createAutomation": "নতুন অটোমেশন",
-        "backToAutomations": "অটোমেশনে ফিরে যান",
-        "createTitle": "নতুন অটোমেশন",
-        "editTitle": "সম্পাদনা অটোমেশন",
-        "empty": "এখনো কোনো অটোমেশন নেই। কোনো মেট্রিক, শিডিউল বা ইভেন্টের প্রতিক্রিয়ায় একটি তৈরি করুন।",
-        "emptyRuns": "এখনো কোনো রান হয়নি।",
-        "channelsHint": "অ্যালার্টে চ্যানেলগুলি সেট আপ করা আছে।",
-        "noChannelsHint": "অ্যালার্টটি সবসময় আপনার ইনবক্সে আসে। এটি অন্য কোথাও পাঠানোর জন্য অ্যালার্টে চ্যানেল যোগ করুন।",
-        "nameLabel": "নাম",
-        "namePlaceholder": "যেমন, /data পূর্ণ হয়ে গেলে তা পরিষ্কার করুন।",
-        "nameRequired": "নাম আবশ্যক",
-        "descriptionLabel": "বর্ণনা",
-        "descriptionPlaceholder": "ঐচ্ছিক বিবরণ",
-        "enabledLabel": "সক্ষম করা হয়েছে",
-        "concurrencyLabel": "যদি এটি ইতিমধ্যে চালু থাকে",
-        "concurrencyHint": "শেষ রান শেষ হওয়ার আগেই এটি আবার চালু হলে কী করতে হবে।",
-        "concurrency": {
-          "skip": "নতুন রানটি এড়িয়ে যান।",
-          "queue": "অপেক্ষা করো এবং পিছনে দৌড়াও",
-          "allow": "একসাথে দুটোই চালান"
-        },
-        "save": "সংরক্ষণ করুন",
-        "created": "অটোমেশন তৈরি করা হয়েছে",
-        "updated": "অটোমেশন সংরক্ষিত",
-        "deleted": "অটোমেশন মুছে ফেলা হয়েছে",
-        "deleteConfirm": "এই অটোমেশনটি ডিলিট করলে, এর রান হিস্ট্রিও ডিলিট হয়ে যাবে।",
-        "runNow": "এখনই দৌড়ান",
-        "testRun": "পরীক্ষামূলক চালনা",
-        "testRunHint": "প্রতিটি ধাপ চলে কিন্তু টার্মিক্সের বাইরের কোনো কিছু স্পর্শ করে না।",
-        "runStarted": "দৌড় শুরু হলো",
-        "runFinished": "দৌড় শেষ: {{status}}",
-        "trigger": "ট্রিগার",
-        "steps": "পদক্ষেপ",
-        "addStep": "ধাপ যোগ করুন",
-        "removeStep": "ধাপটি সরান",
-        "moveUp": "উপরে উঠুন",
-        "moveDown": "নিচে নামুন",
-        "noSteps": "এখনো কোনো ধাপ যোগ করা হয়নি। কী হওয়া উচিত তা জানাতে একটি ধাপ যোগ করুন।",
-        "webhookTokenTitle": "ওয়েবহুক ইউআরএল",
-        "webhookTokenDescription": "এটি একবারই দেখানো হবে। এখনই সংরক্ষণ করুন, পরে আর পুনরুদ্ধার করা যাবে না।",
-        "copy": "অনুলিপি",
-        "copied": "অনুলিপি করা হয়েছে",
-        "viewJson": "JSON",
-        "viewBuilder": "নির্মাতা",
-        "viewGraph": "গ্রাফ",
-        "lastRun": "শেষ দৌড়",
-        "never": "কখনো না",
-        "duration": "{{seconds}}s",
-        "stepOutput": "আউটপুট",
-        "stepError": "ত্রুটি",
-        "dryRunBadge": "পরীক্ষামূলক চালনা",
-        "hostSelector": {
-          "trigger": "ট্রিগারিং হোস্ট",
-          "host": "নির্দিষ্ট হোস্ট",
-          "fleet": "ফ্লিট",
-          "all": "সকল হোস্ট"
-        },
-        "triggerKinds": {
-          "metric_threshold": "মেট্রিক থ্রেশহোল্ড",
-          "host_status": "হোস্ট উপরে বা নিচে যায়",
-          "health_check": "স্বাস্থ্য পরীক্ষার পরিবর্তন",
-          "schedule": "একটি সময়সূচী অনুযায়ী",
-          "docker_event": "কন্টেইনার ইভেন্ট",
-          "internal_event": "টারমিক্স ইভেন্ট",
-          "webhook": "ইনকামিং ওয়েবহুক"
-        },
-        "stepTypes": {
-          "notify": "একটি সতর্কতা পাঠান",
-          "http": "একটি URL কল করুন",
-          "run_snippet": "একটি স্নিপেট চালান",
-          "run_command": "একটি কমান্ড চালান",
-          "docker": "একটি কন্টেইনার নিয়ন্ত্রণ করুন",
-          "tunnel": "একটি টানেল নিয়ন্ত্রণ করুন",
-          "wol": "একজন হোস্টকে জাগান",
-          "wait": "অপেক্ষা করুন",
-          "set_var": "একটি ভেরিয়েবল সেট করুন",
-          "if": "যদি / অন্যথায়",
-          "run_automation": "আরেকটি অটোমেশন চালান",
-          "stop": "থামুন"
-        },
-        "statuses": {
-          "running": "দৌড়ানো",
-          "success": "সাফল্য",
-          "failed": "ব্যর্থ",
-          "timeout": "সময়সীমা শেষ",
-          "skipped": "বাদ দেওয়া হয়েছে",
-          "cancelled": "বাতিল করা হয়েছে"
-        },
-        "fields": {
-          "host": "হোস্ট",
-          "metric": "মেট্রিক",
-          "mount": "মাউন্ট পয়েন্ট",
-          "operator": "হয়",
-          "value": "মূল্য",
-          "forSeconds": "(সেকেন্ড) ধরে স্থায়ী",
-          "cooldown": "কুলডাউন (মিনিট)",
-          "cron": "ক্রোন এক্সপ্রেশন",
-          "intervalSeconds": "প্রতি (সেকেন্ডে)",
-          "timezone": "সময় অঞ্চল",
-          "timezoneServer": "সার্ভারের সময়",
-          "timezoneHint": "এই জোনে ক্রন টাইম পড়া হয়। এটি ইন্টারভাল শিডিউলের ক্ষেত্রে প্রযোজ্য নয়।",
-          "container": "কন্টেইনার",
-          "command": "আদেশ",
-          "url": "ইউআরএল",
-          "method": "পদ্ধতি",
-          "body": "শরীর",
-          "channels": "এছাড়াও পাঠান",
-          "title": "শিরোনাম",
-          "message": "বার্তা",
-          "snippet": "স্নিপেট",
-          "seconds": "সেকেন্ড",
-          "conditionLeftPlaceholder": "যাচাই করার মান",
-          "conditionRightPlaceholder": "তুলনা করুন",
-          "variableName": "ভেরিয়েবলের নাম",
-          "variableValue": "মূল্য",
-          "elevated": "sudo দিয়ে চালান",
-          "onError": "যদি এটি ব্যর্থ হয়",
-          "allowPrivateNetwork": "স্থানীয় নেটওয়ার্ক ঠিকানাগুলির অনুমতি দিন",
-          "allowPrivateNetworkHint": "আপনার ল্যানে সেলফ-হোস্টেড সার্ভিসের জন্য প্রয়োজন। অভ্যন্তরীণ অ্যাড্রেসে অনুরোধ পাঠানো প্রতিরোধ করতে এটি ডিফল্টরূপে বন্ধ থাকে।"
-        },
-        "onError": {
-          "stop": "দৌড় থামাও",
-          "continue": "চালিয়ে যান"
-        },
-        "needsPlugin": "প্রয়োজন {{plugin}}",
-        "needsPluginHint": "প্রয়োজনীয় ফিচারটি পুনরায় উপলব্ধ না হওয়া পর্যন্ত এই অটোমেশনটি বাদ দেওয়া হয়।",
-        "offBadge": "বন্ধ",
-        "docsLink": "নথি দেখুন",
-        "ago": {
-          "seconds": "{{count}}সেকেন্ড আগে",
-          "minutes": "{{count}}মিনিট আগে",
-          "hours": "{{count}}ঘণ্টা আগে",
-          "days": "{{count}}দিন আগে"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "অটোমেশন"
-  },
-  "onboarding": {
-    "feature_automations": "অটোমেশন",
-    "feature_automations_desc": "কোনো ঘটনা ঘটলে স্বয়ংক্রিয়ভাবে ধাপগুলো সম্পন্ন করুন এবং বিজ্ঞপ্তি পান।"
-  },
-  "maintenance": {
-    "title": "রক্ষণাবেক্ষণ",
-    "description": "কাজ চলাকালীন হোস্ট স্ট্যাটাস, হেলথ, মেট্রিক, কন্টেইনার এবং টানেল-ডিসকানেকশন অটোমেশনগুলো থামিয়ে রাখুন। মনিটরিং, ম্যানুয়াল রান এবং নির্ধারিত অটোমেশনগুলো চলতে থাকবে।",
-    "denied": "রক্ষণাবেক্ষণ দেখার অনুমতি আপনার নেই।",
-    "sharedReadOnly": "এই হোস্টটি আপনার সাথে শেয়ার করা হয়েছে। শুধুমাত্র এর মালিকই রক্ষণাবেক্ষণ পরিবর্তন করতে পারেন।",
-    "failed": "রক্ষণাবেক্ষণ হালনাগাদ করা যায়নি।",
-    "active": "রক্ষণাবেক্ষণ সক্রিয়",
-    "estimated": "আনুমানিক সমাপ্তি",
-    "noAutoEnd": "প্রাক্কলনটি রক্ষণাবেক্ষণের কাজ শেষ করে না। কাজ সম্পন্ন হলে স্পষ্টভাবে এটি শেষ করুন।",
-    "endConfirm": "এই হোস্টের জন্য রক্ষণাবেক্ষণ শেষ করে ইভেন্ট-ট্রিগারড অটোমেশন পুনরায় চালু করবেন?",
-    "confirmEnd": "শেষ নিশ্চিত করুন",
-    "cancel": "বাতিল করুন",
-    "end": "শেষ রক্ষণাবেক্ষণ",
-    "action": "পদক্ষেপ",
-    "startNow": "এখনই শুরু করুন",
-    "schedule": "পরবর্তী সময়ের জন্য সময়সূচী",
-    "reason": "কারণ",
-    "startUtc": "প্রথম শুরু (ইউটিসি)",
-    "repeat": "পুনরাবৃত্তি",
-    "once": "একবার",
-    "weekly": "সাপ্তাহিক",
-    "monthly": "মাসিক",
-    "utcHelp": "সারা বছর ধরে সময়সূচী UTC ব্যবহার করে। মাসিক সময়সূচীতে নির্বাচিত দিনটি ছাড়া মাসগুলো বাদ দেওয়া হয়। পরিকল্পিত কাজের সময়সীমা একে অপরের উপর পড়তে পারে না; নির্ধারিত সময়ের অতিরিক্ত রক্ষণাবেক্ষণ পরবর্তী সময়সীমাগুলোতেও চলতে থাকে।",
-    "duration": "আনুমানিক সময়কাল (মিনিট)",
-    "grace": "অতিরিক্ত সময় (মিনিট)",
-    "notify": "আনুমানিক হিসাব এবং অতিরিক্ত সময়সীমার পরেও যদি অফলাইন থাকেন, তবে একবার জানান।",
-    "addSchedule": "সময়সূচী যোগ করুন",
-    "schedules": "সময়সূচী",
-    "noSchedules": "কোনো রক্ষণাবেক্ষণের সময়সূচী নেই।",
-    "completed": "ইতিমধ্যে শুরু হয়ে গেছে",
-    "minutes_one": "{{count}} মিনিট",
-    "minutes_other": "{{count}} মিনিট",
-    "remove": "সময়সূচী অপসারণ করুন",
-    "loadFailed": "রক্ষণাবেক্ষণের অবস্থা রিফ্রেশ করা যায়নি। লোড না হওয়া পর্যন্ত পরিবর্তনগুলি নিষ্ক্রিয় থাকবে।",
-    "loading": "রক্ষণাবেক্ষণের অবস্থা লোড হচ্ছে…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "সংযোগ করুন",
-          "disconnect": "সংযোগ বিচ্ছিন্ন করুন",
-          "offline": "অফলাইন",
-          "online": "অনলাইন",
-          "failing": "ব্যর্থ হওয়া",
-          "recovered": "পুনরুদ্ধার করা হয়েছে"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/ca_ES.json b/plugins/automations/locales/translated/ca_ES.json
deleted file mode 100644
index 0cfae2e6d..000000000
--- a/plugins/automations/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Veure automatitzacions",
-      "description": "Vegeu les automatitzacions i el seu historial."
-    },
-    "create": {
-      "title": "Crea automatitzacions",
-      "description": "Afegiu noves automatitzacions."
-    },
-    "edit": {
-      "title": "Edita automatitzacions",
-      "description": "Canviar les automatitzacions existents."
-    },
-    "delete": {
-      "title": "Suprimeix automatitzacions",
-      "description": "Eliminar automatitzacions."
-    },
-    "run": {
-      "title": "Executar automatitzacions",
-      "description": "Activa una automatització manualment."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Automatitzacions",
-        "tabAutomations": "Automatitzacions",
-        "tabRuns": "Carreres",
-        "tabChannels": "Canals",
-        "createAutomation": "Nova automatització",
-        "backToAutomations": "Torna a Automatitzacions",
-        "createTitle": "Nova automatització",
-        "editTitle": "Edita l'automatització",
-        "empty": "Encara no hi ha automatitzacions. Crea'n una per reaccionar a una mètrica, una programació o un esdeveniment.",
-        "emptyRuns": "Encara no hi ha curses.",
-        "channelsHint": "Els canals es configuren a Alertes",
-        "noChannelsHint": "L'alerta sempre va a la teva safata d'entrada. Afegeix canals a Alertes per enviar-la també a un altre lloc.",
-        "nameLabel": "Nom",
-        "namePlaceholder": "p. ex., Neteja /dades quan s'ompli",
-        "nameRequired": "El nom és obligatori",
-        "descriptionLabel": "Descripció",
-        "descriptionPlaceholder": "Descripció opcional",
-        "enabledLabel": "Activat",
-        "concurrencyLabel": "Si ja està en funcionament",
-        "concurrencyHint": "Què cal fer quan això es torna a activar abans que s'hagi acabat l'última execució.",
-        "concurrency": {
-          "skip": "Omet la nova cursa",
-          "queue": "Espera i corre darrere",
-          "allow": "Executa tots dos alhora"
-        },
-        "save": "Desa",
-        "created": "Automatització creada",
-        "updated": "Automatització desada",
-        "deleted": "Automatització suprimida",
-        "deleteConfirm": "Voleu suprimir aquesta automatització? També se n'esborra l'historial d'execucions.",
-        "runNow": "Executa ara",
-        "testRun": "Prova de funcionament",
-        "testRunHint": "Corre cada pas però no toca res fora de Termix.",
-        "runStarted": "Execució iniciada",
-        "runFinished": "Execució acabada: {{status}}",
-        "trigger": "Disparador",
-        "steps": "Passos",
-        "addStep": "Afegeix un pas",
-        "removeStep": "Elimina el pas",
-        "moveUp": "Puja",
-        "moveDown": "Moure cap avall",
-        "noSteps": "Encara no hi ha cap pas. Afegeix-ne un per indicar què hauria de passar.",
-        "webhookTokenTitle": "URL del webhook",
-        "webhookTokenDescription": "Això es mostra una vegada. Desa-ho ara, no es podrà recuperar més tard.",
-        "copy": "Còpia",
-        "copied": "Copiat",
-        "viewJson": "JSON",
-        "viewBuilder": "Constructor",
-        "viewGraph": "Gràfic",
-        "lastRun": "Última cursa",
-        "never": "Mai",
-        "duration": "{{seconds}}s",
-        "stepOutput": "Sortida",
-        "stepError": "Error",
-        "dryRunBadge": "Prova de funcionament",
-        "hostSelector": {
-          "trigger": "Host activador",
-          "host": "Amfitrió específic",
-          "fleet": "Flota",
-          "all": "Tots els amfitrions"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Llindar mètric",
-          "host_status": "L'amfitrió puja o baixa",
-          "health_check": "Canvis en la revisió de salut",
-          "schedule": "En un horari",
-          "docker_event": "Esdeveniment de contenidor",
-          "internal_event": "Esdeveniment de Termix",
-          "webhook": "Webhook entrant"
-        },
-        "stepTypes": {
-          "notify": "Enviar una alerta",
-          "http": "Crida a una URL",
-          "run_snippet": "Executa un fragment",
-          "run_command": "Executa una ordre",
-          "docker": "Controlar un contenidor",
-          "tunnel": "Controlar un túnel",
-          "wol": "Despertar un amfitrió",
-          "wait": "Espera",
-          "set_var": "Defineix una variable",
-          "if": "Si / altrament",
-          "run_automation": "Executa una altra automatització",
-          "stop": "Atura"
-        },
-        "statuses": {
-          "running": "Córrer",
-          "success": "Èxit",
-          "failed": "Fallat",
-          "timeout": "Temps d'espera esgotat",
-          "skipped": "Omès",
-          "cancelled": "Cancel·lat"
-        },
-        "fields": {
-          "host": "Amfitrió",
-          "metric": "Mètrica",
-          "mount": "Punt de muntatge",
-          "operator": "És",
-          "value": "Valor",
-          "forSeconds": "Sostingut durant (segons)",
-          "cooldown": "Refredament (minuts)",
-          "cron": "Expressió cron",
-          "intervalSeconds": "Cada (segons)",
-          "timezone": "Zona horària",
-          "timezoneServer": "Hora del servidor",
-          "timezoneHint": "Els temps cron es llegeixen en aquesta zona. No s'aplica a les programacions per intervals.",
-          "container": "Contenidor",
-          "command": "Comandament",
-          "url": "URL",
-          "method": "Mètode",
-          "body": "Cos",
-          "channels": "També envia a",
-          "title": "Títol",
-          "message": "Missatge",
-          "snippet": "Fragment",
-          "seconds": "Segons",
-          "conditionLeftPlaceholder": "Valor a comprovar",
-          "conditionRightPlaceholder": "Comparar amb",
-          "variableName": "Nom de la variable",
-          "variableValue": "Valor",
-          "elevated": "Executar amb sudo",
-          "onError": "Si això falla",
-          "allowPrivateNetwork": "Permetre adreces de xarxa locals",
-          "allowPrivateNetworkHint": "Necessari per a un servei autoallotjat a la vostra LAN. Desactivat per defecte per evitar sol·licituds a adreces internes."
-        },
-        "onError": {
-          "stop": "Atura la cursa",
-          "continue": "Continua"
-        },
-        "needsPlugin": "Necessita {{plugin}}",
-        "needsPluginHint": "Aquesta automatització s'omet fins que la funció que necessita torni a estar disponible.",
-        "offBadge": "Desactivat",
-        "docsLink": "Veure documents",
-        "ago": {
-          "seconds": "Fa {{count}}segons",
-          "minutes": "fa {{count}}minuts",
-          "hours": "fa {{count}}h",
-          "days": "fa {{count}}dies"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Automatitzacions"
-  },
-  "onboarding": {
-    "feature_automations": "Automatitzacions",
-    "feature_automations_desc": "Executa els passos automàticament quan passi alguna cosa i rep notificacions."
-  },
-  "maintenance": {
-    "title": "Manteniment",
-    "description": "Pausa les automatitzacions d'estat, salut, mètriques, contenidors i desconnexió de túnels de l'amfitrió mentre la feina està en curs. La supervisió, les execucions manuals i les automatitzacions programades continuen.",
-    "denied": "No teniu permís per veure el manteniment.",
-    "sharedReadOnly": "Aquest amfitrió s'ha compartit amb tu. Només el seu propietari pot canviar el manteniment.",
-    "failed": "No s'ha pogut actualitzar el manteniment.",
-    "active": "Manteniment actiu",
-    "estimated": "Finalització prevista",
-    "noAutoEnd": "El pressupost no finalitza el manteniment. Finalitzeu-lo explícitament quan la feina s'hagi completat.",
-    "endConfirm": "Voleu finalitzar el manteniment i reprendre les automatitzacions activades per esdeveniments per a aquest amfitrió?",
-    "confirmEnd": "Confirma la fi",
-    "cancel": "Cancel·la",
-    "end": "Finalitzar el manteniment",
-    "action": "Acció",
-    "startNow": "Comença ara",
-    "schedule": "Programa per a més tard",
-    "reason": "Raó",
-    "startUtc": "Primer inici (UTC)",
-    "repeat": "Repetir",
-    "once": "Un cop",
-    "weekly": "Setmanal",
-    "monthly": "Mensual",
-    "utcHelp": "Les programacions utilitzen UTC durant tot l'any. Les programacions mensuals salten mesos sense el dia seleccionat. Les finestres planificades no es poden superposar; el manteniment que s'executa de manera excessiva continua a les finestres posteriors.",
-    "duration": "Durada estimada (minuts)",
-    "grace": "Període de gràcia (minuts)",
-    "notify": "Notifica una vegada si encara estàs fora de línia després de l'estimació més el període de gràcia",
-    "addSchedule": "Afegeix una programació",
-    "schedules": "Horaris",
-    "noSchedules": "Sense programes de manteniment.",
-    "completed": "Ja ha començat",
-    "minutes_one": "{{count}} minut",
-    "minutes_other": "{{count}} minuts",
-    "remove": "Elimina la programació",
-    "loadFailed": "No s'ha pogut actualitzar l'estat del manteniment. Els canvis estan desactivats fins que es pugui carregar.",
-    "loading": "S'està carregant l'estat del manteniment…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "connectar",
-          "disconnect": "desconnectar",
-          "offline": "fora de línia",
-          "online": "en línia",
-          "failing": "fallant",
-          "recovered": "recuperat"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/cs_CZ.json b/plugins/automations/locales/translated/cs_CZ.json
deleted file mode 100644
index e4f4b66bc..000000000
--- a/plugins/automations/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Zobrazit automatizace",
-      "description": "Podívejte se na automatizace a jejich historii."
-    },
-    "create": {
-      "title": "Vytvářejte automatizace",
-      "description": "Přidejte nové automatizace."
-    },
-    "edit": {
-      "title": "Upravit automatizace",
-      "description": "Změňte stávající automatizace."
-    },
-    "delete": {
-      "title": "Smazat automatizace",
-      "description": "Odstraňte automatizace."
-    },
-    "run": {
-      "title": "Spouštění automatizací",
-      "description": "Ručně spusťte automatizaci."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Automatizace",
-        "tabAutomations": "Automatizace",
-        "tabRuns": "Běhy",
-        "tabChannels": "Kanály",
-        "createAutomation": "Nová automatizace",
-        "backToAutomations": "Zpět k automatizaci",
-        "createTitle": "Nová automatizace",
-        "editTitle": "Upravit automatizaci",
-        "empty": "Zatím žádné automatizace. Vytvořte si automatizaci, která bude reagovat na metriku, plán nebo událost.",
-        "emptyRuns": "Zatím žádné běhy.",
-        "channelsHint": "Kanály se nastavují v části Upozornění",
-        "noChannelsHint": "Upozornění se vždy dostane do vaší schránky. Přidejte si do Upozornění kanály, aby se odesílalo i někam jinam.",
-        "nameLabel": "Jméno",
-        "namePlaceholder": "např. Vyčistit /data, když se zaplní",
-        "nameRequired": "Jméno je povinné",
-        "descriptionLabel": "Popis",
-        "descriptionPlaceholder": "Volitelný popis",
-        "enabledLabel": "Povoleno",
-        "concurrencyLabel": "Pokud již běží",
-        "concurrencyHint": "Co dělat, když se to spustí znovu před dokončením posledního běhu.",
-        "concurrency": {
-          "skip": "Přeskočit nový běh",
-          "queue": "Čekej a běž za ním",
-          "allow": "Spustit obojí najednou"
-        },
-        "save": "Uložit",
-        "created": "Automatizace vytvořena",
-        "updated": "Automatizace uložena",
-        "deleted": "Automatizace smazána",
-        "deleteConfirm": "Smazat tuto automatizaci? Její historie spuštění bude také smazána.",
-        "runNow": "Běhej hned",
-        "testRun": "Zkušební provoz",
-        "testRunHint": "Provádí každý krok, ale nedotýká se ničeho mimo Termix.",
-        "runStarted": "Běh byl zahájen",
-        "runFinished": "Běh dokončen: {{status}}",
-        "trigger": "Spoušť",
-        "steps": "Kroky",
-        "addStep": "Přidat krok",
-        "removeStep": "Odebrat krok",
-        "moveUp": "Posunout nahoru",
-        "moveDown": "Přesunout dolů",
-        "noSteps": "Zatím žádné kroky. Přidejte jeden, který popisuje, co by se mělo stát.",
-        "webhookTokenTitle": "URL webhooku",
-        "webhookTokenDescription": "Toto se zobrazí jednou. Uložte si to nyní, později to nelze načíst.",
-        "copy": "Kopie",
-        "copied": "Zkopírováno",
-        "viewJson": "JSON",
-        "viewBuilder": "Stavitel",
-        "viewGraph": "Graf",
-        "lastRun": "Poslední běh",
-        "never": "Nikdy",
-        "duration": "{{seconds}}s",
-        "stepOutput": "Výstup",
-        "stepError": "Chyba",
-        "dryRunBadge": "Zkušební provoz",
-        "hostSelector": {
-          "trigger": "Spouštěcí hostitel",
-          "host": "Specifický hostitel",
-          "fleet": "Loďstvo",
-          "all": "Všichni hostitelé"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Prahová hodnota metriky",
-          "host_status": "Hostitel jde nahoru nebo dolů",
-          "health_check": "Změny v kontrolách stavu",
-          "schedule": "Podle plánu",
-          "docker_event": "Událost kontejneru",
-          "internal_event": "Událost Termix",
-          "webhook": "Příchozí webhook"
-        },
-        "stepTypes": {
-          "notify": "Odeslat upozornění",
-          "http": "Zavolat URL",
-          "run_snippet": "Spustit úryvek",
-          "run_command": "Spusťte příkaz",
-          "docker": "Ovládání kontejneru",
-          "tunnel": "Ovládejte tunel",
-          "wol": "Probuďte hostitele",
-          "wait": "Počkejte",
-          "set_var": "Nastavení proměnné",
-          "if": "Pokud / jinak",
-          "run_automation": "Spusťte další automatizaci",
-          "stop": "Zastávka"
-        },
-        "statuses": {
-          "running": "Běh",
-          "success": "Úspěch",
-          "failed": "Selhalo",
-          "timeout": "Časový limit vypršel",
-          "skipped": "Přeskočeno",
-          "cancelled": "Zrušeno"
-        },
-        "fields": {
-          "host": "Hostitel",
-          "metric": "Metrický",
-          "mount": "Bod připojení",
-          "operator": "Je",
-          "value": "Hodnota",
-          "forSeconds": "Trvalé po dobu (sekund)",
-          "cooldown": "Doba ochlazování (minuty)",
-          "cron": "Cron výraz",
-          "intervalSeconds": "Každých (sekund)",
-          "timezone": "Časové pásmo",
-          "timezoneServer": "Čas serveru",
-          "timezoneHint": "V této zóně se odečítají časy Cron. Nevztahuje se na intervalové plány.",
-          "container": "Kontejner",
-          "command": "Příkaz",
-          "url": "URL",
-          "method": "Metoda",
-          "body": "Tělo",
-          "channels": "Také poslat na",
-          "title": "Titul",
-          "message": "Zpráva",
-          "snippet": "Úryvek",
-          "seconds": "Sekundy",
-          "conditionLeftPlaceholder": "Hodnota ke kontrole",
-          "conditionRightPlaceholder": "Porovnat s",
-          "variableName": "Název proměnné",
-          "variableValue": "Hodnota",
-          "elevated": "Spustit se sudo",
-          "onError": "Pokud se to nepodaří",
-          "allowPrivateNetwork": "Povolit lokální síťové adresy",
-          "allowPrivateNetworkHint": "Vyžadováno pro službu hostovanou na vašem lokálním serveru (LAN). Ve výchozím nastavení vypnuto, aby se zabránilo požadavkům na interní adresy."
-        },
-        "onError": {
-          "stop": "Zastav běh",
-          "continue": "Pokračovat"
-        },
-        "needsPlugin": "Potřeby {{plugin}}",
-        "needsPluginHint": "Tato automatizace se přeskočí, dokud nebude znovu k dispozici funkce, kterou potřebuje.",
-        "offBadge": "Vypnuto",
-        "docsLink": "Zobrazit dokumenty",
-        "ago": {
-          "seconds": "Před {{count}}s",
-          "minutes": "{{count}}před m",
-          "hours": "{{count}}před hodinami",
-          "days": "Před {{count}}dny"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Automatizace"
-  },
-  "onboarding": {
-    "feature_automations": "Automatizace",
-    "feature_automations_desc": "Automaticky spouštět kroky, když se něco stane, a dostávat upozornění."
-  },
-  "maintenance": {
-    "title": "Údržba",
-    "description": "Během probíhající práce pozastavte automatizaci stavu hostitele, jeho kondice, metrik, kontejnerů a odpojení tunelů. Monitorování, ruční spuštění a plánované automatizace pokračují.",
-    "denied": "Nemáte oprávnění k zobrazení údržby.",
-    "sharedReadOnly": "Tento hostitel byl s vámi sdílen. Pouze jeho majitel může změnit údržbu.",
-    "failed": "Údržbu se nepodařilo aktualizovat.",
-    "active": "Údržba aktivní",
-    "estimated": "Předpokládané dokončení",
-    "noAutoEnd": "Odhad údržby neukončuje. Ukončete ji explicitně po dokončení prací.",
-    "endConfirm": "Ukončit údržbu a obnovit automatizace spouštěné událostmi pro tohoto hostitele?",
-    "confirmEnd": "Potvrdit konec",
-    "cancel": "Zrušit",
-    "end": "Ukončení údržby",
-    "action": "Akce",
-    "startNow": "Začněte hned",
-    "schedule": "Naplánovat na později",
-    "reason": "Důvod",
-    "startUtc": "První spuštění (UTC)",
-    "repeat": "Opakovat",
-    "once": "Jednou",
-    "weekly": "Týdně",
-    "monthly": "Měsíční",
-    "utcHelp": "Harmonogramy používají po celý rok UTC. Měsíční harmonogramy přeskakují měsíce bez vybraného dne. Plánovaná okna se nemohou překrývat; údržba překročením se provádí i v pozdějších oknech.",
-    "duration": "Odhadovaná doba trvání (minuty)",
-    "grace": "Dodatečná lhůta (minuty)",
-    "notify": "Upozornit jednou, pokud je stále offline po uplynutí odhadované doby plus lhůty.",
-    "addSchedule": "Přidat rozvrh",
-    "schedules": "Rozvrhy",
-    "noSchedules": "Žádné plány údržby.",
-    "completed": "Již začalo",
-    "minutes_one": "{{count}} minuta",
-    "minutes_other": "{{count}} minut",
-    "remove": "Odebrat plán",
-    "loadFailed": "Nepodařilo se obnovit stav údržby. Změny jsou zakázány, dokud nebude možné jej načíst.",
-    "loading": "Načítání stavu údržby…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "připojit",
-          "disconnect": "odpojit",
-          "offline": "offline",
-          "online": "online",
-          "failing": "selhání",
-          "recovered": "zotavený"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/da_DK.json b/plugins/automations/locales/translated/da_DK.json
deleted file mode 100644
index eff402b3b..000000000
--- a/plugins/automations/locales/translated/da_DK.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Se automatiseringer",
-      "description": "Se automatiseringerne og deres historik."
-    },
-    "create": {
-      "title": "Opret automatiseringer",
-      "description": "Tilføj nye automatiseringer."
-    },
-    "edit": {
-      "title": "Rediger automatiseringer",
-      "description": "Ændr eksisterende automatiseringer."
-    },
-    "delete": {
-      "title": "Slet automatiseringer",
-      "description": "Fjern automatiseringer."
-    },
-    "run": {
-      "title": "Kør automatiseringer",
-      "description": "Udløs en automatisering manuelt."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Automatiseringer",
-        "tabAutomations": "Automatiseringer",
-        "tabRuns": "Løber",
-        "tabChannels": "Kanaler",
-        "createAutomation": "Ny automatisering",
-        "backToAutomations": "Tilbage til Automatiseringer",
-        "createTitle": "Ny automatisering",
-        "editTitle": "Rediger automatisering",
-        "empty": "Ingen automatiseringer endnu. Opret en for at reagere på en metric, en tidsplan eller en begivenhed.",
-        "emptyRuns": "Ingen løb endnu.",
-        "channelsHint": "Kanaler er konfigureret i advarsler",
-        "noChannelsHint": "Beskeden sendes altid til din indbakke. Tilføj kanaler i Beskeder for også at sende den et andet sted hen.",
-        "nameLabel": "Navn",
-        "namePlaceholder": "f.eks. Ryd op i /data når den fyldes op",
-        "nameRequired": "Navn er påkrævet",
-        "descriptionLabel": "Beskrivelse",
-        "descriptionPlaceholder": "Valgfri beskrivelse",
-        "enabledLabel": "Aktiveret",
-        "concurrencyLabel": "Hvis den allerede kører",
-        "concurrencyHint": "Hvad skal man gøre, når dette udløses igen, før den sidste kørsel er færdig.",
-        "concurrency": {
-          "skip": "Spring den nye kørsel over",
-          "queue": "Vent og løb efter",
-          "allow": "Kør begge på én gang"
-        },
-        "save": "Spare",
-        "created": "Automatisering skabt",
-        "updated": "Automatisering gemt",
-        "deleted": "Automatisering slettet",
-        "deleteConfirm": "Vil du slette denne automatisering? Dens kørselshistorik slettes også.",
-        "runNow": "Løb nu",
-        "testRun": "Testkørsel",
-        "testRunHint": "Kører hvert trin, men rører ikke noget uden for Termix.",
-        "runStarted": "Løbet startede",
-        "runFinished": "Kørsel færdig: {{status}}",
-        "trigger": "Udløser",
-        "steps": "Trin",
-        "addStep": "Tilføj trin",
-        "removeStep": "Fjern trin",
-        "moveUp": "Flyt op",
-        "moveDown": "Flyt ned",
-        "noSteps": "Ingen trin endnu. Tilføj et trin for at angive, hvad der skal ske.",
-        "webhookTokenTitle": "Webhook-URL",
-        "webhookTokenDescription": "Dette vises én gang. Gem det nu, det kan ikke hentes senere.",
-        "copy": "Kopi",
-        "copied": "Kopieret",
-        "viewJson": "JSON",
-        "viewBuilder": "Byggefirma",
-        "viewGraph": "Kurve",
-        "lastRun": "Sidste løb",
-        "never": "Aldrig",
-        "duration": "{{seconds}}s",
-        "stepOutput": "Produktion",
-        "stepError": "Fejl",
-        "dryRunBadge": "Testkørsel",
-        "hostSelector": {
-          "trigger": "Udløsende vært",
-          "host": "Specifik vært",
-          "fleet": "Flåde",
-          "all": "Alle værter"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Metrisk tærskel",
-          "host_status": "Værten går op eller ned",
-          "health_check": "Ændringer i sundhedstjek",
-          "schedule": "På en tidsplan",
-          "docker_event": "Containerhændelse",
-          "internal_event": "Termix-begivenhed",
-          "webhook": "Indgående webhook"
-        },
-        "stepTypes": {
-          "notify": "Send en alarm",
-          "http": "Kald en URL",
-          "run_snippet": "Kør et uddrag",
-          "run_command": "Kør en kommando",
-          "docker": "Styr en container",
-          "tunnel": "Kontroller en tunnel",
-          "wol": "Væk en vært",
-          "wait": "Vente",
-          "set_var": "Angiv en variabel",
-          "if": "Hvis / ellers",
-          "run_automation": "Kør en anden automatisering",
-          "stop": "Stop"
-        },
-        "statuses": {
-          "running": "Løb",
-          "success": "Succes",
-          "failed": "Mislykkedes",
-          "timeout": "Timeout",
-          "skipped": "Springet over",
-          "cancelled": "Annulleret"
-        },
-        "fields": {
-          "host": "Vært",
-          "metric": "Metrisk",
-          "mount": "Monteringspunkt",
-          "operator": "Er",
-          "value": "Værdi",
-          "forSeconds": "Vedvarende i (sekunder)",
-          "cooldown": "Nedkølingstid (minutter)",
-          "cron": "Cron-udtryk",
-          "intervalSeconds": "Hvert (sekund)",
-          "timezone": "Tidszone",
-          "timezoneServer": "Servertid",
-          "timezoneHint": "Cron-tider aflæses i denne zone. Gælder ikke for intervalplaner.",
-          "container": "Beholder",
-          "command": "Kommando",
-          "url": "URL",
-          "method": "Metode",
-          "body": "Legeme",
-          "channels": "Send også til",
-          "title": "Titel",
-          "message": "Besked",
-          "snippet": "Uddrag",
-          "seconds": "Sekunder",
-          "conditionLeftPlaceholder": "Værdi at kontrollere",
-          "conditionRightPlaceholder": "Sammenlign med",
-          "variableName": "Variabelnavn",
-          "variableValue": "Værdi",
-          "elevated": "Kør med sudo",
-          "onError": "Hvis dette mislykkes",
-          "allowPrivateNetwork": "Tillad lokale netværksadresser",
-          "allowPrivateNetworkHint": "Nødvendig for en selvhostet tjeneste på dit LAN. Deaktiveret som standard for at forhindre anmodninger til interne adresser."
-        },
-        "onError": {
-          "stop": "Stop løbet",
-          "continue": "Fortsæt"
-        },
-        "needsPlugin": "Behøver {{plugin}}",
-        "needsPluginHint": "Denne automatisering springes over, indtil den nødvendige funktion er tilgængelig igen.",
-        "offBadge": "Slukket",
-        "docsLink": "Se dokumenter",
-        "ago": {
-          "seconds": "For {{count}}sekunder siden",
-          "minutes": "For {{count}}minutter siden",
-          "hours": "For {{count}}timer siden",
-          "days": "for {{count}}dage siden"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Automatiseringer"
-  },
-  "onboarding": {
-    "feature_automations": "Automatiseringer",
-    "feature_automations_desc": "Kør trin automatisk, når der sker noget, og få besked."
-  },
-  "maintenance": {
-    "title": "Opretholdelse",
-    "description": "Sæt automatiseringer for værtsstatus, tilstand, metrikker, containere og tunnelfrakobling på pause, mens arbejdet er i gang. Overvågning, manuelle kørsel og planlagte automatiseringer fortsætter.",
-    "denied": "Du har ikke tilladelse til at se vedligeholdelsen.",
-    "sharedReadOnly": "Denne vært blev delt med dig. Kun dens ejer kan ændre vedligeholdelsen.",
-    "failed": "Vedligeholdelsen kunne ikke opdateres.",
-    "active": "Vedligeholdelse aktiv",
-    "estimated": "Forventet færdiggørelse",
-    "noAutoEnd": "Estimatet afslutter ikke vedligeholdelsen. Afslut den eksplicit, når arbejdet er færdigt.",
-    "endConfirm": "Vil du afslutte vedligeholdelsen og genoptage hændelsesudløste automatiseringer for denne vært?",
-    "confirmEnd": "Bekræft slut",
-    "cancel": "Ophæve",
-    "end": "Afslut vedligeholdelse",
-    "action": "Handling",
-    "startNow": "Start nu",
-    "schedule": "Planlæg til senere",
-    "reason": "Årsag",
-    "startUtc": "Første start (UTC)",
-    "repeat": "Gentage",
-    "once": "Engang",
-    "weekly": "Ugentlig",
-    "monthly": "Månedlig",
-    "utcHelp": "Tidsplaner bruger UTC hele året. Månedlige tidsplaner springer måneder over uden den valgte dag. Planlagte vinduer kan ikke overlappe hinanden; overstyring af vedligeholdelse fortsætter på tværs af senere vinduer.",
-    "duration": "Estimeret varighed (minutter)",
-    "grace": "Frist (minutter)",
-    "notify": "Giv én besked, hvis du stadig er offline efter estimatet plus den henstandsperiode",
-    "addSchedule": "Tilføj tidsplan",
-    "schedules": "Tidsplaner",
-    "noSchedules": "Ingen vedligeholdelsesplaner.",
-    "completed": "Allerede startet",
-    "minutes_one": "{{count}} minut",
-    "minutes_other": "{{count}} minutter",
-    "remove": "Fjern tidsplan",
-    "loadFailed": "Vedligeholdelsesstatus kunne ikke opdateres. Ændringer er deaktiveret, indtil den kan indlæses.",
-    "loading": "Indlæser vedligeholdelsesstatus…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "forbinde",
-          "disconnect": "afbryde",
-          "offline": "offline",
-          "online": "online",
-          "failing": "fejler",
-          "recovered": "genvundet"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/de_DE.json b/plugins/automations/locales/translated/de_DE.json
deleted file mode 100644
index 71756edac..000000000
--- a/plugins/automations/locales/translated/de_DE.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Automatisierungen anzeigen",
-      "description": "Sehen Sie sich die Automatisierungen und deren Verlauf an."
-    },
-    "create": {
-      "title": "Automatisierungen erstellen",
-      "description": "Neue Automatisierungen hinzufügen."
-    },
-    "edit": {
-      "title": "Automatisierungen bearbeiten",
-      "description": "Bestehende Automatisierungen ändern."
-    },
-    "delete": {
-      "title": "Automatisierungen löschen",
-      "description": "Automatisierungen entfernen."
-    },
-    "run": {
-      "title": "Automatisierungen ausführen",
-      "description": "Eine Automatisierung manuell auslösen."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Automatisierungen",
-        "tabAutomations": "Automatisierungen",
-        "tabRuns": "Läufe",
-        "tabChannels": "Kanäle",
-        "createAutomation": "Neue Automatisierung",
-        "backToAutomations": "Zurück zu Automatisierungen",
-        "createTitle": "Neue Automatisierung",
-        "editTitle": "Automatisierung bearbeiten",
-        "empty": "Noch keine Automatisierungen. Erstellen Sie eine, um auf eine Kennzahl, einen Zeitplan oder ein Ereignis zu reagieren.",
-        "emptyRuns": "Bisher keine Läufe.",
-        "channelsHint": "Kanäle werden in den Benachrichtigungen eingerichtet.",
-        "noChannelsHint": "Die Benachrichtigung wird immer in Ihrem Posteingang angezeigt. Fügen Sie in den Benachrichtigungen Kanäle hinzu, um sie auch an andere Orte zu senden.",
-        "nameLabel": "Name",
-        "namePlaceholder": "z.B. das Verzeichnis /data leeren, wenn es voll ist",
-        "nameRequired": "Name ist erforderlich",
-        "descriptionLabel": "Beschreibung",
-        "descriptionPlaceholder": "Optionale Beschreibung",
-        "enabledLabel": "Aktiviert",
-        "concurrencyLabel": "Wenn es bereits läuft",
-        "concurrencyHint": "Was ist zu tun, wenn dies erneut ausgelöst wird, bevor der letzte Durchlauf abgeschlossen ist?",
-        "concurrency": {
-          "skip": "Den neuen Lauf überspringen.",
-          "queue": "Warten und dann hinterherlaufen",
-          "allow": "Führe beide gleichzeitig aus"
-        },
-        "save": "Speichern",
-        "created": "Automatisierung erstellt",
-        "updated": "Automatisierung gerettet",
-        "deleted": "Automatisierung gelöscht",
-        "deleteConfirm": "Wenn Sie diese Automatisierung löschen, wird auch ihr Ausführungsverlauf gelöscht.",
-        "runNow": "Jetzt laufen",
-        "testRun": "Probelauf",
-        "testRunHint": "Führt jeden Schritt aus, greift aber auf nichts außerhalb von Termix ein.",
-        "runStarted": "Lauf gestartet",
-        "runFinished": "Lauf beendet: {{status}}",
-        "trigger": "Auslöser",
-        "steps": "Schritte",
-        "addStep": "Schritt hinzufügen",
-        "removeStep": "Schritt entfernen",
-        "moveUp": "Aufsteigen",
-        "moveDown": "Nach unten schieben",
-        "noSteps": "Noch keine Schritte. Füge einen hinzu, um zu beschreiben, was passieren soll.",
-        "webhookTokenTitle": "Webhook-URL",
-        "webhookTokenDescription": "Dies wird nur einmal angezeigt. Speichern Sie es jetzt, es kann später nicht mehr abgerufen werden.",
-        "copy": "Kopieren",
-        "copied": "Kopiert",
-        "viewJson": "JSON",
-        "viewBuilder": "Bauherr",
-        "viewGraph": "Graph",
-        "lastRun": "Letzter Lauf",
-        "never": "Nie",
-        "duration": "{{seconds}}s",
-        "stepOutput": "Ausgabe",
-        "stepError": "Fehler",
-        "dryRunBadge": "Probelauf",
-        "hostSelector": {
-          "trigger": "Auslösender Host",
-          "host": "Spezifischer Wirt",
-          "fleet": "Flotte",
-          "all": "Alle Hosts"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Metrischer Schwellenwert",
-          "host_status": "Der Host steigt oder fällt ab",
-          "health_check": "Änderungen bei Gesundheitschecks",
-          "schedule": "Nach einem Zeitplan",
-          "docker_event": "Container-Ereignis",
-          "internal_event": "Termix-Ereignis",
-          "webhook": "Eingehender Webhook"
-        },
-        "stepTypes": {
-          "notify": "Benachrichtigung senden",
-          "http": "URL aufrufen",
-          "run_snippet": "Führe einen Codeausschnitt aus",
-          "run_command": "Führe einen Befehl aus",
-          "docker": "Einen Container steuern",
-          "tunnel": "Einen Tunnel steuern",
-          "wol": "Wecken Sie einen Gastgeber",
-          "wait": "Warten",
-          "set_var": "Eine Variable setzen",
-          "if": "Falls / andernfalls",
-          "run_automation": "Führe eine weitere Automatisierung aus",
-          "stop": "Stoppen"
-        },
-        "statuses": {
-          "running": "Läuft",
-          "success": "Erfolgreich",
-          "failed": "Fehlgeschlagen",
-          "timeout": "Zeitüberschreitung",
-          "skipped": "Übersprungen",
-          "cancelled": "Abgesagt"
-        },
-        "fields": {
-          "host": "Host",
-          "metric": "Metrik",
-          "mount": "Montagepunkt",
-          "operator": "Ist",
-          "value": "Wert",
-          "forSeconds": "Anhaltend für (Sekunden)",
-          "cooldown": "Abklingzeit (Minuten)",
-          "cron": "Cron-Ausdruck",
-          "intervalSeconds": "Alle (Sekunden)",
-          "timezone": "Zeitzone",
-          "timezoneServer": "Serverzeit",
-          "timezoneHint": "In dieser Zone werden Cron-Zeiten gelesen. Gilt nicht für Intervallpläne.",
-          "container": "Container",
-          "command": "Befehl",
-          "url": "URL",
-          "method": "Verfahren",
-          "body": "Körper",
-          "channels": "Bitte auch senden an",
-          "title": "Titel",
-          "message": "Nachricht",
-          "snippet": "Ausschnitt",
-          "seconds": "Sekunden",
-          "conditionLeftPlaceholder": "Zu prüfender Wert",
-          "conditionRightPlaceholder": "Vergleiche mit",
-          "variableName": "Variablenname",
-          "variableValue": "Wert",
-          "elevated": "Mit sudo ausführen",
-          "onError": "Wenn das fehlschlägt",
-          "allowPrivateNetwork": "Lokale Netzwerkadressen zulassen",
-          "allowPrivateNetworkHint": "Wird für einen selbstgehosteten Dienst in Ihrem LAN benötigt. Standardmäßig deaktiviert, um Anfragen an interne Adressen zu verhindern."
-        },
-        "onError": {
-          "stop": "Stoppt die Flucht!",
-          "continue": "Weiter geht's"
-        },
-        "needsPlugin": "Benötigt {{plugin}}",
-        "needsPluginHint": "Diese Automatisierung wird übersprungen, bis die benötigte Funktion wieder verfügbar ist.",
-        "offBadge": "Aus",
-        "docsLink": "Dokumentation ansehen",
-        "ago": {
-          "seconds": "{{count}}s ago",
-          "minutes": "vor {{count}} Min.",
-          "hours": "vor {{count}} Std.",
-          "days": "vor {{count}} Tagen"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Automatisierungen"
-  },
-  "onboarding": {
-    "feature_automations": "Automatisierungen",
-    "feature_automations_desc": "Schritte automatisch ausführen, wenn etwas passiert, und Benachrichtigungen erhalten."
-  },
-  "maintenance": {
-    "title": "Wartung",
-    "description": "Die Automatisierungen für Hoststatus, Integrität, Metriken, Container- und Tunnel-Trennung werden während der laufenden Arbeiten pausiert. Überwachung, manuelle Ausführungen und geplante Automatisierungen werden fortgesetzt.",
-    "denied": "Sie haben keine Berechtigung, Wartungsarbeiten anzuzeigen.",
-    "sharedReadOnly": "Dieser Host wurde Ihnen zur Verfügung gestellt. Nur der Eigentümer kann Wartungsänderungen vornehmen.",
-    "failed": "Die Wartungsarbeiten konnten nicht aktualisiert werden.",
-    "active": "Wartung aktiv",
-    "estimated": "Voraussichtlicher Abschluss",
-    "noAutoEnd": "Die Kostenschätzung beendet die Wartungsarbeiten nicht. Beenden Sie sie explizit, sobald die Arbeiten abgeschlossen sind.",
-    "endConfirm": "Wartungsarbeiten beenden und ereignisgesteuerte Automatisierungen für diesen Host wiederaufnehmen?",
-    "confirmEnd": "Ende bestätigen",
-    "cancel": "Abbrechen",
-    "end": "Wartungsarbeiten beenden",
-    "action": "Aktion",
-    "startNow": "Jetzt starten",
-    "schedule": "Termin für später",
-    "reason": "Grund",
-    "startUtc": "Erster Start (UTC)",
-    "repeat": "Wiederholen",
-    "once": "Einmal",
-    "weekly": "Wöchentlich",
-    "monthly": "Monatlich",
-    "utcHelp": "Die Zeitpläne verwenden ganzjährig UTC. Monatliche Zeitpläne überspringen Monate ohne den ausgewählten Tag. Geplante Zeiträume dürfen sich nicht überschneiden; Wartungsarbeiten, die über die vereinbarten Zeiträume hinausgehen, werden fortgesetzt.",
-    "duration": "Geschätzte Dauer (Minuten)",
-    "grace": "Kulanzfrist (Minuten)",
-    "notify": "Benachrichtigen Sie uns einmalig, falls Sie nach Ablauf der Schätzung und der Kulanzfrist immer noch offline sind.",
-    "addSchedule": "Zeitplan hinzufügen",
-    "schedules": "Zeitpläne",
-    "noSchedules": "Keine Wartungspläne.",
-    "completed": "Bereits begonnen",
-    "minutes_one": "{{count}} Minute",
-    "minutes_other": "{{count}} Minuten",
-    "remove": "Zeitplan entfernen",
-    "loadFailed": "Der Wartungsstatus konnte nicht aktualisiert werden. Änderungen sind deaktiviert, bis die Daten geladen werden können.",
-    "loading": "Lade Wartungsstatus…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "verbinden",
-          "disconnect": "trennen",
-          "offline": "offline",
-          "online": "online",
-          "failing": "scheitern",
-          "recovered": "wiederhergestellt"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/el_GR.json b/plugins/automations/locales/translated/el_GR.json
deleted file mode 100644
index a101e89da..000000000
--- a/plugins/automations/locales/translated/el_GR.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Προβολή αυτοματισμών",
-      "description": "Δείτε τους αυτοματισμούς και το ιστορικό τους."
-    },
-    "create": {
-      "title": "Δημιουργήστε αυτοματισμούς",
-      "description": "Προσθήκη νέων αυτοματισμών."
-    },
-    "edit": {
-      "title": "Επεξεργασία αυτοματισμών",
-      "description": "Αλλαγή υπαρχόντων αυτοματισμών."
-    },
-    "delete": {
-      "title": "Διαγραφή αυτοματισμών",
-      "description": "Αφαίρεση αυτοματισμών."
-    },
-    "run": {
-      "title": "Εκτέλεση αυτοματισμών",
-      "description": "Ενεργοποιήστε έναν αυτοματισμό χειροκίνητα."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Αυτοματισμοί",
-        "tabAutomations": "Αυτοματισμοί",
-        "tabRuns": "Τρεξίματα",
-        "tabChannels": "Κανάλια",
-        "createAutomation": "Νέος Αυτοματισμός",
-        "backToAutomations": "Επιστροφή στους Αυτοματισμούς",
-        "createTitle": "Νέος Αυτοματισμός",
-        "editTitle": "Επεξεργασία αυτοματισμού",
-        "empty": "Δεν υπάρχουν ακόμη αυτοματοποιήσεις. Δημιουργήστε μία για να αντιδράτε σε μια μέτρηση, ένα πρόγραμμα ή ένα συμβάν.",
-        "emptyRuns": "Δεν υπάρχουν τρεξίματα ακόμα.",
-        "channelsHint": "Τα κανάλια έχουν ρυθμιστεί στις Ειδοποιήσεις",
-        "noChannelsHint": "Η ειδοποίηση αποστέλλεται πάντα στα εισερχόμενά σας. Προσθέστε κανάλια στις Ειδοποιήσεις για να την στείλετε και κάπου αλλού.",
-        "nameLabel": "Ονομα",
-        "namePlaceholder": "π.χ., Καθαρισμός /data όταν γεμίσει",
-        "nameRequired": "Απαιτείται όνομα",
-        "descriptionLabel": "Περιγραφή",
-        "descriptionPlaceholder": "Προαιρετική περιγραφή",
-        "enabledLabel": "Ενεργοποιημένο",
-        "concurrencyLabel": "Εάν ήδη εκτελείται",
-        "concurrencyHint": "Τι πρέπει να κάνετε όταν αυτό ενεργοποιηθεί ξανά πριν ολοκληρωθεί η τελευταία εκτέλεση.",
-        "concurrency": {
-          "skip": "Παράλειψη της νέας διαδρομής",
-          "queue": "Περίμενε και τρέχα πίσω",
-          "allow": "Εκτελέστε και τα δύο ταυτόχρονα"
-        },
-        "save": "Εκτός",
-        "created": "Αυτοματοποίηση που δημιουργήθηκε",
-        "updated": "Ο αυτοματισμός αποθηκεύτηκε",
-        "deleted": "Ο αυτοματισμός διαγράφηκε.",
-        "deleteConfirm": "Διαγραφή αυτού του αυτοματισμού; Το ιστορικό εκτέλεσής του διαγράφεται επίσης.",
-        "runNow": "Εκτέλεση τώρα",
-        "testRun": "Δοκιμαστική εκτέλεση",
-        "testRunHint": "Εκτελεί κάθε βήμα αλλά δεν αγγίζει τίποτα εκτός του Termix.",
-        "runStarted": "Η εκτέλεση ξεκίνησε",
-        "runFinished": "Η εκτέλεση ολοκληρώθηκε: {{status}}",
-        "trigger": "Σκανδάλη",
-        "steps": "Βήματα",
-        "addStep": "Προσθήκη βήματος",
-        "removeStep": "Αφαίρεση βήματος",
-        "moveUp": "Μετακίνηση προς τα πάνω",
-        "moveDown": "Μετακίνηση προς τα κάτω",
-        "noSteps": "Δεν υπάρχουν ακόμη βήματα. Προσθέστε ένα για να πείτε τι πρέπει να συμβεί.",
-        "webhookTokenTitle": "URL ιστού",
-        "webhookTokenDescription": "Αυτό εμφανίζεται μία φορά. Αποθηκεύστε το τώρα, δεν μπορεί να ανακτηθεί αργότερα.",
-        "copy": "Αντίγραφο",
-        "copied": "Αντιγράφηκε",
-        "viewJson": "JSON",
-        "viewBuilder": "Οικοδόμος",
-        "viewGraph": "Γραφική παράσταση",
-        "lastRun": "Τελευταία εκτέλεση",
-        "never": "Ποτέ",
-        "duration": "{{seconds}}s",
-        "stepOutput": "Παραγωγή",
-        "stepError": "Σφάλμα",
-        "dryRunBadge": "Δοκιμαστική εκτέλεση",
-        "hostSelector": {
-          "trigger": "Ενεργοποίηση κεντρικού υπολογιστή",
-          "host": "Συγκεκριμένος κεντρικός υπολογιστής",
-          "fleet": "Στόλος",
-          "all": "Όλοι οι οικοδεσπότες"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Μετρικό όριο",
-          "host_status": "Ο κεντρικός υπολογιστής ανεβαίνει ή κατεβαίνει",
-          "health_check": "Αλλαγές στον έλεγχο υγείας",
-          "schedule": "Σε πρόγραμμα",
-          "docker_event": "Συμβάν κοντέινερ",
-          "internal_event": "Συμβάν Termix",
-          "webhook": "Εισερχόμενο webhook"
-        },
-        "stepTypes": {
-          "notify": "Αποστολή ειδοποίησης",
-          "http": "Κλήση μιας διεύθυνσης URL",
-          "run_snippet": "Εκτέλεση ενός αποσπάσματος",
-          "run_command": "Εκτέλεση εντολής",
-          "docker": "Έλεγχος ενός κοντέινερ",
-          "tunnel": "Έλεγχος μιας σήραγγας",
-          "wol": "Ξυπνήστε έναν οικοδεσπότη",
-          "wait": "Περιμένετε",
-          "set_var": "Ορισμός μεταβλητής",
-          "if": "Εάν / διαφορετικά",
-          "run_automation": "Εκτελέστε έναν άλλο αυτοματισμό",
-          "stop": "Στάση"
-        },
-        "statuses": {
-          "running": "Τρέξιμο",
-          "success": "Επιτυχία",
-          "failed": "Αποτυχημένος",
-          "timeout": "Λήξη χρονικού ορίου",
-          "skipped": "Παραλήφθηκε",
-          "cancelled": "Ακυρώθηκε"
-        },
-        "fields": {
-          "host": "Πλήθος",
-          "metric": "Μετρικός",
-          "mount": "Σημείο προσάρτησης",
-          "operator": "Είναι",
-          "value": "Αξία",
-          "forSeconds": "Διαρκεί για (δευτερόλεπτα)",
-          "cooldown": "Χρόνος αναμονής (λεπτά)",
-          "cron": "Έκφραση Cron",
-          "intervalSeconds": "Κάθε (δευτερόλεπτα)",
-          "timezone": "Ζώνη ώρας",
-          "timezoneServer": "Ώρα διακομιστή",
-          "timezoneHint": "Οι χρόνοι Cron διαβάζονται σε αυτήν τη ζώνη. Δεν ισχύει για τα χρονοδιαγράμματα διαστημάτων.",
-          "container": "Δοχείο",
-          "command": "Εντολή",
-          "url": "URL",
-          "method": "Μέθοδος",
-          "body": "Σώμα",
-          "channels": "Αποστολή επίσης σε",
-          "title": "Τίτλος",
-          "message": "Μήνυμα",
-          "snippet": "Απόσπασμα",
-          "seconds": "Δευτερόλεπτα",
-          "conditionLeftPlaceholder": "Τιμή προς έλεγχο",
-          "conditionRightPlaceholder": "Σύγκριση με",
-          "variableName": "Όνομα μεταβλητής",
-          "variableValue": "Αξία",
-          "elevated": "Εκτέλεση με sudo",
-          "onError": "Εάν αυτό αποτύχει",
-          "allowPrivateNetwork": "Επιτρέψτε τις τοπικές διευθύνσεις δικτύου",
-          "allowPrivateNetworkHint": "Απαιτείται για μια αυτο-φιλοξενούμενη υπηρεσία στο LAN σας. Απενεργοποιημένο από προεπιλογή για την αποτροπή αιτημάτων σε εσωτερικές διευθύνσεις."
-        },
-        "onError": {
-          "stop": "Σταμάτα το τρέξιμο",
-          "continue": "Συνεχίζω"
-        },
-        "needsPlugin": "Ανάγκες {{plugin}}",
-        "needsPluginHint": "Αυτή η αυτοματοποίηση παραλείπεται μέχρι να γίνει ξανά διαθέσιμη η λειτουργία που χρειάζεται.",
-        "offBadge": "Μακριά από",
-        "docsLink": "Προβολή εγγράφων",
-        "ago": {
-          "seconds": "{{count}}πριν από s",
-          "minutes": "{{count}}πριν από λεπτά",
-          "hours": "{{count}}πριν από ώρες",
-          "days": "{{count}}πριν από ημέρες"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Αυτοματισμοί"
-  },
-  "onboarding": {
-    "feature_automations": "Αυτοματισμοί",
-    "feature_automations_desc": "Εκτελέστε αυτόματα βήματα όταν συμβεί κάτι και λάβετε ειδοποίηση."
-  },
-  "maintenance": {
-    "title": "Συντήρηση",
-    "description": "Παύση των αυτοματισμών κατάστασης κεντρικού υπολογιστή, εύρυθμης λειτουργίας, μετρήσεων, κοντέινερ και αποσύνδεσης σήραγγας ενώ οι εργασίες βρίσκονται σε εξέλιξη. Η παρακολούθηση, οι χειροκίνητες εκτελέσεις και οι προγραμματισμένοι αυτοματισμοί συνεχίζονται.",
-    "denied": "Δεν έχετε άδεια προβολής συντήρησης.",
-    "sharedReadOnly": "Αυτός ο κεντρικός υπολογιστής κοινοποιήθηκε σε εσάς. Μόνο ο κάτοχός του μπορεί να αλλάξει τη συντήρηση.",
-    "failed": "Δεν ήταν δυνατή η ενημέρωση της συντήρησης.",
-    "active": "Ενεργή συντήρηση",
-    "estimated": "Εκτιμώμενη ολοκλήρωση",
-    "noAutoEnd": "Η εκτίμηση κόστους δεν τερματίζει τη συντήρηση. Τερματίζει ρητά όταν ολοκληρωθεί η εργασία.",
-    "endConfirm": "Να τερματιστεί η συντήρηση και να συνεχιστούν οι αυτοματοποιήσεις που ενεργοποιούνται από συμβάντα για αυτόν τον κεντρικό υπολογιστή;",
-    "confirmEnd": "Επιβεβαίωση τέλους",
-    "cancel": "Ματαίωση",
-    "end": "Τέλος συντήρησης",
-    "action": "Δράση",
-    "startNow": "Ξεκινήστε τώρα",
-    "schedule": "Προγραμματισμός για αργότερα",
-    "reason": "Λόγος",
-    "startUtc": "Πρώτη εκκίνηση (UTC)",
-    "repeat": "Επαναλαμβάνω",
-    "once": "Μια φορά",
-    "weekly": "Εβδομαδιαίος",
-    "monthly": "Μηνιαίος",
-    "utcHelp": "Τα χρονοδιαγράμματα χρησιμοποιούν UTC καθ' όλη τη διάρκεια του έτους. Τα μηνιαία χρονοδιαγράμματα παραλείπουν μήνες χωρίς την επιλεγμένη ημέρα. Τα προγραμματισμένα παράθυρα δεν μπορούν να επικαλύπτονται. Η συντήρηση που εκτελείται εκτός προγράμματος συνεχίζεται και σε μεταγενέστερα παράθυρα.",
-    "duration": "Εκτιμώμενη διάρκεια (λεπτά)",
-    "grace": "Περίοδος χάριτος (λεπτά)",
-    "notify": "Ειδοποιήστε μία φορά εάν εξακολουθείτε να είστε εκτός σύνδεσης μετά την εκτίμηση συν την περίοδο χάριτος",
-    "addSchedule": "Προσθήκη χρονοδιαγράμματος",
-    "schedules": "Δρομολόγια",
-    "noSchedules": "Δεν υπάρχουν χρονοδιαγράμματα συντήρησης.",
-    "completed": "Ήδη ξεκίνησε",
-    "minutes_one": "{{count}} λεπτό",
-    "minutes_other": "{{count}} λεπτά",
-    "remove": "Κατάργηση χρονοδιαγράμματος",
-    "loadFailed": "Δεν ήταν δυνατή η ανανέωση της κατάστασης συντήρησης. Οι αλλαγές είναι απενεργοποιημένες μέχρι να είναι δυνατή η φόρτωσή τους.",
-    "loading": "Φόρτωση κατάστασης συντήρησης…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "συνδέω",
-          "disconnect": "αποσυνδέω",
-          "offline": "εκτός σύνδεσης",
-          "online": "διαδικτυακά",
-          "failing": "έλλειψη",
-          "recovered": "ανακτήθηκε"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/es_ES.json b/plugins/automations/locales/translated/es_ES.json
deleted file mode 100644
index ec99c3d12..000000000
--- a/plugins/automations/locales/translated/es_ES.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Ver automatizaciones",
-      "description": "Consulta las automatizaciones y su historial."
-    },
-    "create": {
-      "title": "Crear automatizaciones",
-      "description": "Agregar nuevas automatizaciones."
-    },
-    "edit": {
-      "title": "Editar automatizaciones",
-      "description": "Modificar las automatizaciones existentes."
-    },
-    "delete": {
-      "title": "Eliminar automatizaciones",
-      "description": "Eliminar automatizaciones."
-    },
-    "run": {
-      "title": "Ejecutar automatizaciones",
-      "description": "Activar una automatización manualmente."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Automatizaciones",
-        "tabAutomations": "Automatizaciones",
-        "tabRuns": "Corre",
-        "tabChannels": "Canales",
-        "createAutomation": "Nueva automatización",
-        "backToAutomations": "Volver a Automatizaciones",
-        "createTitle": "Nueva automatización",
-        "editTitle": "Automatización de edición",
-        "empty": "Aún no hay automatizaciones. Crea una para que reaccione a una métrica, una programación o un evento.",
-        "emptyRuns": "Aún no hay carreras.",
-        "channelsHint": "Los canales se configuran en Alertas.",
-        "noChannelsHint": "La alerta siempre llega a tu bandeja de entrada. Agrega canales en Alertas para enviarla también a otros lugares.",
-        "nameLabel": "Nombre",
-        "namePlaceholder": "Por ejemplo, limpiar /data cuando se llena",
-        "nameRequired": "El nombre es obligatorio",
-        "descriptionLabel": "Descripción",
-        "descriptionPlaceholder": "Descripción opcional",
-        "enabledLabel": "Activado",
-        "concurrencyLabel": "Si ya está en funcionamiento",
-        "concurrencyHint": "Qué hacer si esto se activa de nuevo antes de que finalice la última ejecución.",
-        "concurrency": {
-          "skip": "Saltarse la nueva carrera",
-          "queue": "Espera y corre tras",
-          "allow": "Ejecutar ambos a la vez"
-        },
-        "save": "Guardar",
-        "created": "Automatización creada",
-        "updated": "Automatización guardada",
-        "deleted": "Automatización eliminada",
-        "deleteConfirm": "¿Eliminar esta automatización? Su historial de ejecución también se eliminará.",
-        "runNow": "Corre ahora",
-        "testRun": "Ejecución de prueba",
-        "testRunHint": "Ejecuta todos los pasos, pero no toca nada fuera de Termix.",
-        "runStarted": "La carrera ha comenzado.",
-        "runFinished": "Ejecución finalizada: {{status}}",
-        "trigger": "Disparador",
-        "steps": "Pasos",
-        "addStep": "Agregar paso",
-        "removeStep": "Eliminar paso",
-        "moveUp": "Subir",
-        "moveDown": "Baja",
-        "noSteps": "Aún no hay pasos a seguir. Añade uno para indicar qué debería suceder.",
-        "webhookTokenTitle": "URL del webhook",
-        "webhookTokenDescription": "Esto se muestra una sola vez. Guárdalo ahora, no se podrá recuperar más tarde.",
-        "copy": "Copiar",
-        "copied": "Copiado",
-        "viewJson": "JSON",
-        "viewBuilder": "Constructor",
-        "viewGraph": "Gráfico",
-        "lastRun": "Última carrera",
-        "never": "Nunca",
-        "duration": "{{seconds}}s",
-        "stepOutput": "Salida",
-        "stepError": "Error",
-        "dryRunBadge": "Ejecución de prueba",
-        "hostSelector": {
-          "trigger": "Host desencadenante",
-          "host": "Anfitrión específico",
-          "fleet": "Flota",
-          "all": "Todos los hosts"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Umbral métrico",
-          "host_status": "El host sube o baja",
-          "health_check": "Cambios en los chequeos médicos",
-          "schedule": "Según un horario",
-          "docker_event": "Evento de contenedor",
-          "internal_event": "Evento Termix",
-          "webhook": "Webhook entrante"
-        },
-        "stepTypes": {
-          "notify": "Enviar alerta",
-          "http": "Llamar a una URL",
-          "run_snippet": "Ejecutar un fragmento",
-          "run_command": "Ejecutar un comando",
-          "docker": "Controlar un contenedor",
-          "tunnel": "Controlar un túnel",
-          "wol": "Despierta a un anfitrión",
-          "wait": "Esperar",
-          "set_var": "Establecer una variable",
-          "if": "Si / de lo contrario",
-          "run_automation": "Ejecuta otra automatización",
-          "stop": "Parada"
-        },
-        "statuses": {
-          "running": "En ejecución",
-          "success": "Éxito",
-          "failed": "Fallido",
-          "timeout": "Tiempo de espera agotado",
-          "skipped": "Saltado",
-          "cancelled": "Cancelado"
-        },
-        "fields": {
-          "host": "Host",
-          "metric": "Métrica",
-          "mount": "Punto de montaje",
-          "operator": "Es",
-          "value": "Valor",
-          "forSeconds": "Mantenido durante (segundos)",
-          "cooldown": "Tiempo de espera (minutos)",
-          "cron": "Expresión cron",
-          "intervalSeconds": "Cada (segundos)",
-          "timezone": "Huso horario",
-          "timezoneServer": "Hora del servidor",
-          "timezoneHint": "En esta zona se leen las horas cron. No se aplica a los horarios de intervalo.",
-          "container": "Recipiente",
-          "command": "Comando",
-          "url": "URL",
-          "method": "Método",
-          "body": "Cuerpo",
-          "channels": "También enviar a",
-          "title": "Título",
-          "message": "Mensaje",
-          "snippet": "Retazo",
-          "seconds": "Artículos de segunda clase",
-          "conditionLeftPlaceholder": "Valor a comprobar",
-          "conditionRightPlaceholder": "Comparar con",
-          "variableName": "nombre de la variable",
-          "variableValue": "Valor",
-          "elevated": "Ejecutar con sudo",
-          "onError": "Si esto falla",
-          "allowPrivateNetwork": "Permitir direcciones de red local",
-          "allowPrivateNetworkHint": "Necesario para un servicio autohospedado en su LAN. Desactivado por defecto para evitar solicitudes a direcciones internas."
-        },
-        "onError": {
-          "stop": "Detengan la carrera",
-          "continue": "Continuar"
-        },
-        "needsPlugin": "Necesidades {{plugin}}",
-        "needsPluginHint": "Esta automatización se omite hasta que la función que necesita vuelva a estar disponible.",
-        "offBadge": "Desactivado",
-        "docsLink": "Ver documentación",
-        "ago": {
-          "seconds": "{{count}}hace s",
-          "minutes": "hace {{count}}m",
-          "hours": "hace {{count}}h",
-          "days": "hace {{count}}d"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Automatizaciones"
-  },
-  "onboarding": {
-    "feature_automations": "Automatizaciones",
-    "feature_automations_desc": "Ejecuta pasos automáticamente cuando ocurra algo y recibe notificaciones."
-  },
-  "maintenance": {
-    "title": "Mantenimiento",
-    "description": "Se pausan las automatizaciones de estado del host, salud, métricas, contenedores y desconexión de túneles mientras se realiza el trabajo. La monitorización, las ejecuciones manuales y las automatizaciones programadas continúan.",
-    "denied": "No tienes permiso para ver el mantenimiento.",
-    "sharedReadOnly": "Este servidor se ha compartido contigo. Solo su propietario puede modificar el mantenimiento.",
-    "failed": "No se pudo actualizar el mantenimiento.",
-    "active": "Mantenimiento activo",
-    "estimated": "Finalización estimada",
-    "noAutoEnd": "El presupuesto no pone fin al mantenimiento. Finalícelo explícitamente cuando el trabajo esté terminado.",
-    "endConfirm": "¿Finalizar el mantenimiento y reanudar las automatizaciones activadas por eventos para este host?",
-    "confirmEnd": "Confirmar fin",
-    "cancel": "Cancelar",
-    "end": "Fin del mantenimiento",
-    "action": "Acción",
-    "startNow": "Empieza ahora",
-    "schedule": "Programar para más tarde",
-    "reason": "Razón",
-    "startUtc": "Primer inicio (UTC)",
-    "repeat": "Repetir",
-    "once": "Una vez",
-    "weekly": "Semanalmente",
-    "monthly": "Mensual",
-    "utcHelp": "Los horarios utilizan UTC durante todo el año. Los horarios mensuales omiten los meses que no incluyen el día seleccionado. Los periodos de mantenimiento planificados no pueden superponerse; el mantenimiento prolongado continúa en los periodos posteriores.",
-    "duration": "Duración estimada (minutos)",
-    "grace": "Período de gracia (minutos)",
-    "notify": "Notificar una vez si sigue sin conexión después del período estimado más el período de gracia.",
-    "addSchedule": "Agregar horario",
-    "schedules": "Horarios",
-    "noSchedules": "Sin programas de mantenimiento.",
-    "completed": "Ya ha comenzado",
-    "minutes_one": "{{count}} minuto",
-    "minutes_other": "{{count}} minutos",
-    "remove": "Eliminar horario",
-    "loadFailed": "No se pudo actualizar el estado de mantenimiento. Los cambios están deshabilitados hasta que se puedan cargar.",
-    "loading": "Cargando estado de mantenimiento…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "conectar",
-          "disconnect": "desconectar",
-          "offline": "desconectado",
-          "online": "en línea",
-          "failing": "defecto",
-          "recovered": "recuperado"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/fi_FI.json b/plugins/automations/locales/translated/fi_FI.json
deleted file mode 100644
index ff123bc2c..000000000
--- a/plugins/automations/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Näytä automaatiot",
-      "description": "Katso automaatiot ja niiden historia."
-    },
-    "create": {
-      "title": "Luo automaatioita",
-      "description": "Lisää uusia automaatioita."
-    },
-    "edit": {
-      "title": "Muokkaa automaatioita",
-      "description": "Muuta olemassa olevia automaatioita."
-    },
-    "delete": {
-      "title": "Poista automaatiot",
-      "description": "Poista automaatiot."
-    },
-    "run": {
-      "title": "Suorita automaatioita",
-      "description": "Käynnistä automaatio manuaalisesti."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Automaatiot",
-        "tabAutomations": "Automaatiot",
-        "tabRuns": "Juoksut",
-        "tabChannels": "Kanavat",
-        "createAutomation": "Uusi automaatio",
-        "backToAutomations": "Takaisin automaatioihin",
-        "createTitle": "Uusi automaatio",
-        "editTitle": "Muokkaa automatisointia",
-        "empty": "Ei vielä automaatioita. Luo sellainen reagoimaan mittariin, aikatauluun tai tapahtumaan.",
-        "emptyRuns": "Ei vielä juoksuja.",
-        "channelsHint": "Kanavat määritetään Hälytykset-kohdassa",
-        "noChannelsHint": "Ilmoitus menee aina postilaatikkoosi. Lisää kanavia Ilmoitukset-kohtaan lähettääksesi sen myös muualle.",
-        "nameLabel": "Nimi",
-        "namePlaceholder": "esim. Siivoa /data, kun se täyttyy",
-        "nameRequired": "Nimi on pakollinen",
-        "descriptionLabel": "Kuvaus",
-        "descriptionPlaceholder": "Valinnainen kuvaus",
-        "enabledLabel": "Käytössä",
-        "concurrencyLabel": "Jos se on jo käynnissä",
-        "concurrencyHint": "Mitä tehdä, kun tämä laukeaa uudelleen ennen viimeisen ajon päättymistä.",
-        "concurrency": {
-          "skip": "Ohita uusi juoksu",
-          "queue": "Odota ja juokse perässä",
-          "allow": "Suorita molemmat yhtä aikaa"
-        },
-        "save": "Tallentaa",
-        "created": "Automaatio luotu",
-        "updated": "Automaatio tallennettu",
-        "deleted": "Automaatio poistettu",
-        "deleteConfirm": "Poistetaanko tämä automaatio? Myös sen suoritushistoria poistetaan.",
-        "runNow": "Juokse nyt",
-        "testRun": "Koeajo",
-        "testRunHint": "Juoksee jokaisen askeleen, mutta ei koske mihinkään Termixin ulkopuolella.",
-        "runStarted": "Juoksu aloitettu",
-        "runFinished": "Suoritus päättynyt: {{status}}",
-        "trigger": "Laukaista",
-        "steps": "Askeleet",
-        "addStep": "Lisää vaihe",
-        "removeStep": "Poista vaihe",
-        "moveUp": "Siirry ylös",
-        "moveDown": "Siirrä alas",
-        "noSteps": "Ei vielä vaiheita. Lisää yksi, joka kertoo, mitä pitäisi tapahtua.",
-        "webhookTokenTitle": "Webhookin URL-osoite",
-        "webhookTokenDescription": "Tämä näytetään kerran. Tallenna se nyt, sitä ei voi palauttaa myöhemmin.",
-        "copy": "Kopioida",
-        "copied": "Kopioitu",
-        "viewJson": "JSON",
-        "viewBuilder": "Rakentaja",
-        "viewGraph": "Kaavio",
-        "lastRun": "Viimeisin juoksu",
-        "never": "Ei koskaan",
-        "duration": "{{seconds}}s",
-        "stepOutput": "Lähtö",
-        "stepError": "Virhe",
-        "dryRunBadge": "Koeajo",
-        "hostSelector": {
-          "trigger": "Käynnistävä isäntä",
-          "host": "Tietty isäntä",
-          "fleet": "Laivasto",
-          "all": "Kaikki isännät"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Metrinen kynnysarvo",
-          "host_status": "Isäntä nousee tai laskee",
-          "health_check": "Terveystarkastusten muutokset",
-          "schedule": "Aikataulussa",
-          "docker_event": "Säiliötapahtuma",
-          "internal_event": "Termix-tapahtuma",
-          "webhook": "Saapuva webhook"
-        },
-        "stepTypes": {
-          "notify": "Lähetä hälytys",
-          "http": "Soita URL-osoitteeseen",
-          "run_snippet": "Suorita koodinpätkä",
-          "run_command": "Suorita komento",
-          "docker": "Säiliön hallinta",
-          "tunnel": "Hallitse tunnelia",
-          "wol": "Herätä isäntä",
-          "wait": "Odota",
-          "set_var": "Aseta muuttuja",
-          "if": "Jos / muuten",
-          "run_automation": "Suorita toinen automaatio",
-          "stop": "Stop"
-        },
-        "statuses": {
-          "running": "Juoksu",
-          "success": "Menestys",
-          "failed": "Epäonnistui",
-          "timeout": "Aikakatkaisu",
-          "skipped": "Ohitettu",
-          "cancelled": "Peruutettu"
-        },
-        "fields": {
-          "host": "Isäntä",
-          "metric": "Metrinen",
-          "mount": "Kiinnityskohta",
-          "operator": "On",
-          "value": "Arvo",
-          "forSeconds": "Jatkuu (sekuntia)",
-          "cooldown": "Jäähdyttelyaika (minuuttia)",
-          "cron": "Cron-lauseke",
-          "intervalSeconds": "Joka (sekunti)",
-          "timezone": "Aikavyöhyke",
-          "timezoneServer": "Palvelimen aika",
-          "timezoneHint": "Cron-ajat luetaan tällä alueella. Ei koske intervalliaikatauluja.",
-          "container": "Kontti",
-          "command": "Komento",
-          "url": "URL-osoite",
-          "method": "Menetelmä",
-          "body": "Keho",
-          "channels": "Lähetä myös osoitteeseen",
-          "title": "Otsikko",
-          "message": "Viesti",
-          "snippet": "Katkelma",
-          "seconds": "Sekuntia",
-          "conditionLeftPlaceholder": "Tarkistettava arvo",
-          "conditionRightPlaceholder": "Vertaa",
-          "variableName": "Muuttujan nimi",
-          "variableValue": "Arvo",
-          "elevated": "Suorita sudon avulla",
-          "onError": "Jos tämä epäonnistuu",
-          "allowPrivateNetwork": "Salli paikallisverkko-osoitteet",
-          "allowPrivateNetworkHint": "Tarvitaan lähiverkossasi itse isännöidylle palvelulle. Oletusarvoisesti pois päältä estääkseen pyynnöt sisäisiin osoitteisiin."
-        },
-        "onError": {
-          "stop": "Pysäytä juoksu",
-          "continue": "Jatkaa"
-        },
-        "needsPlugin": "Tarpeet {{plugin}}",
-        "needsPluginHint": "Tämä automaatio ohitetaan, kunnes sen tarvitsema ominaisuus on taas käytettävissä.",
-        "offBadge": "Pois",
-        "docsLink": "Näytä dokumentit",
-        "ago": {
-          "seconds": "{{count}}s sitten",
-          "minutes": "{{count}}minuuttia sitten",
-          "hours": "{{count}}tuntia sitten",
-          "days": "{{count}}d sitten"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Automaatiot"
-  },
-  "onboarding": {
-    "feature_automations": "Automaatiot",
-    "feature_automations_desc": "Suorita vaiheet automaattisesti, kun jotain tapahtuu, ja saat ilmoituksen."
-  },
-  "maintenance": {
-    "title": "Huolto",
-    "description": "Keskeytä isännän tilan, kunnon, mittareiden, säilön ja tunnelin katkaisun automatisoinnit työn ollessa käynnissä. Valvonta, manuaaliset suoritukset ja ajoitetut automatisoinnit jatkuvat.",
-    "denied": "Sinulla ei ole oikeutta tarkastella ylläpitoa.",
-    "sharedReadOnly": "Tämä isäntä jaettiin kanssasi. Vain sen omistaja voi muuttaa ylläpitoa.",
-    "failed": "Ylläpitoa ei voitu päivittää.",
-    "active": "Huolto aktiivinen",
-    "estimated": "Arvioitu valmistuminen",
-    "noAutoEnd": "Arvio ei lopeta huoltoa. Lopeta se nimenomaisesti, kun työ on valmis.",
-    "endConfirm": "Lopetetaanko ylläpito ja jatketaanko tapahtumien laukaisemia automaatioita tälle isännälle?",
-    "confirmEnd": "Vahvista loppu",
-    "cancel": "Peruuttaa",
-    "end": "Huoltopäätös",
-    "action": "Toiminta",
-    "startNow": "Aloita nyt",
-    "schedule": "Aikatauluta myöhemmin",
-    "reason": "Syy",
-    "startUtc": "Ensimmäinen lähtö (UTC)",
-    "repeat": "Toistaa",
-    "once": "Kerran",
-    "weekly": "Viikoittain",
-    "monthly": "Kuukausittain",
-    "utcHelp": "Aikataulut käyttävät UTC-aikaa ympäri vuoden. Kuukausiaikataulut ohittavat kuukaudet, joilla ei ole valittua päivää. Suunnitellut ikkunat eivät voi olla päällekkäisiä; ylikuormittava huolto jatkuu myöhemmissä ikkuna-ajoissa.",
-    "duration": "Arvioitu kesto (minuutteina)",
-    "grace": "Lisäaika (minuutteina)",
-    "notify": "Ilmoita kerran, jos olet edelleen offline-tilassa arvion ja lisäajan jälkeen",
-    "addSchedule": "Lisää aikataulu",
-    "schedules": "Aikataulut",
-    "noSchedules": "Ei huoltoaikatauluja.",
-    "completed": "Jo aloitettu",
-    "minutes_one": "{{count}} minuutti",
-    "minutes_other": "{{count}} minuuttia",
-    "remove": "Poista aikataulu",
-    "loadFailed": "Ylläpidon tilaa ei voitu päivittää. Muutokset on poistettu käytöstä, kunnes ne voidaan ladata.",
-    "loading": "Ladataan ylläpitotilaa…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "yhdistää",
-          "disconnect": "irrota",
-          "offline": "offline-tilassa",
-          "online": "verkossa",
-          "failing": "epäonnistuminen",
-          "recovered": "toipunut"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/fr_FR.json b/plugins/automations/locales/translated/fr_FR.json
deleted file mode 100644
index 8dfa73955..000000000
--- a/plugins/automations/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Afficher les automatisations",
-      "description": "Consultez les automatisations et leur historique."
-    },
-    "create": {
-      "title": "Créer des automatisations",
-      "description": "Ajouter de nouvelles automatisations."
-    },
-    "edit": {
-      "title": "Modifier les automatisations",
-      "description": "Modifier les automatisations existantes."
-    },
-    "delete": {
-      "title": "Supprimer les automatisations",
-      "description": "Supprimer les automatisations."
-    },
-    "run": {
-      "title": "Exécuter des automatisations",
-      "description": "Déclencher une automatisation manuellement."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Automatisations",
-        "tabAutomations": "Automatisations",
-        "tabRuns": "Courses",
-        "tabChannels": "Canaux",
-        "createAutomation": "Nouvelle automatisation",
-        "backToAutomations": "Retour aux automatisations",
-        "createTitle": "Nouvelle automatisation",
-        "editTitle": "Automatisation de la modification",
-        "empty": "Aucune automatisation pour le moment. Créez-en une pour qu'elle réagisse à une mesure, une planification ou un événement.",
-        "emptyRuns": "Pas encore de runs.",
-        "channelsHint": "Les canaux sont configurés dans les alertes",
-        "noChannelsHint": "L'alerte est toujours envoyée dans votre boîte de réception. Ajoutez des canaux dans les alertes pour la diffuser également ailleurs.",
-        "nameLabel": "Nom",
-        "namePlaceholder": "Par exemple, nettoyer le répertoire /data lorsqu'il est plein.",
-        "nameRequired": "Le nom est obligatoire",
-        "descriptionLabel": "Description",
-        "descriptionPlaceholder": "Description facultative",
-        "enabledLabel": "Activé",
-        "concurrencyLabel": "S'il est déjà en cours d'exécution",
-        "concurrencyHint": "Que faire si ce problème se reproduit avant la fin de la dernière exécution ?",
-        "concurrency": {
-          "skip": "Évitez la nouvelle course",
-          "queue": "Attendez et courez après",
-          "allow": "Exécutez les deux simultanément."
-        },
-        "save": "Enregistrer",
-        "created": "L'automatisation a créé",
-        "updated": "L'automatisation a permis de sauver",
-        "deleted": "Automatisation supprimée",
-        "deleteConfirm": "Supprimer cette automatisation ? Son historique d'exécution est également supprimé.",
-        "runNow": "Courez maintenant",
-        "testRun": "Essai",
-        "testRunHint": "Exécute chaque étape mais ne touche à rien en dehors de Termix.",
-        "runStarted": "La course a commencé",
-        "runFinished": "Course terminée : {{status}}",
-        "trigger": "Déclencheur",
-        "steps": "Mesures",
-        "addStep": "Ajouter une étape",
-        "removeStep": "Supprimer l'étape",
-        "moveUp": "Monter en gamme",
-        "moveDown": "Descendre",
-        "noSteps": "Aucune étape pour l'instant. Ajoutez-en une pour décrire ce qui doit se passer.",
-        "webhookTokenTitle": "URL du webhook",
-        "webhookTokenDescription": "Ceci ne s'affiche qu'une seule fois. Enregistrez-le maintenant, il ne pourra pas être récupéré ultérieurement.",
-        "copy": "Copier",
-        "copied": "Copié",
-        "viewJson": "JSON",
-        "viewBuilder": "Constructeur",
-        "viewGraph": "Graphique",
-        "lastRun": "Dernière course",
-        "never": "Jamais",
-        "duration": "{{seconds}}s",
-        "stepOutput": "Sortie",
-        "stepError": "Erreur",
-        "dryRunBadge": "Essai",
-        "hostSelector": {
-          "trigger": "Hôte déclencheur",
-          "host": "hôte spécifique",
-          "fleet": "Flotte",
-          "all": "Tous les hôtes"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Seuil métrique",
-          "host_status": "L'hôte monte ou descend",
-          "health_check": "changements au bilan de santé",
-          "schedule": "Selon un horaire",
-          "docker_event": "événement conteneur",
-          "internal_event": "Événement Termix",
-          "webhook": "Webhook entrant"
-        },
-        "stepTypes": {
-          "notify": "Envoyer une alerte",
-          "http": "Appeler une URL",
-          "run_snippet": "Exécuter un extrait de code",
-          "run_command": "Exécuter une commande",
-          "docker": "Contrôler un conteneur",
-          "tunnel": "Contrôler un tunnel",
-          "wol": "Réveillez un hôte",
-          "wait": "Attendez",
-          "set_var": "Définir une variable",
-          "if": "Si / sinon",
-          "run_automation": "Exécutez une autre automatisation",
-          "stop": "Stop"
-        },
-        "statuses": {
-          "running": "En cours d’exécution",
-          "success": "Succès",
-          "failed": "Échec",
-          "timeout": "Délai d'attente dépassé",
-          "skipped": "Omission",
-          "cancelled": "Annulé"
-        },
-        "fields": {
-          "host": "Hôte",
-          "metric": "Métrique",
-          "mount": "Point de montage",
-          "operator": "Est",
-          "value": "Valeur",
-          "forSeconds": "Maintenu pendant (secondes)",
-          "cooldown": "Temporisation (minutes)",
-          "cron": "Expression de Cron",
-          "intervalSeconds": "Toutes les (secondes)",
-          "timezone": "Fuseau horaire",
-          "timezoneServer": "Heure du serveur",
-          "timezoneHint": "Les heures des tâches cron sont lues dans cette zone. Ceci ne s'applique pas aux planifications par intervalles.",
-          "container": "Récipient",
-          "command": "Commande",
-          "url": "URL",
-          "method": "Méthode",
-          "body": "Corps",
-          "channels": "Envoyer également à",
-          "title": "Titre",
-          "message": "Message",
-          "snippet": "Fragment",
-          "seconds": "Secondes",
-          "conditionLeftPlaceholder": "Valeur à vérifier",
-          "conditionRightPlaceholder": "Comparer à",
-          "variableName": "Nom de la variable",
-          "variableValue": "Valeur",
-          "elevated": "Exécuter avec sudo",
-          "onError": "Si cela échoue",
-          "allowPrivateNetwork": "Autoriser les adresses réseau locales",
-          "allowPrivateNetworkHint": "Nécessaire pour un service auto-hébergé sur votre réseau local. Désactivé par défaut pour empêcher les requêtes vers des adresses internes."
-        },
-        "onError": {
-          "stop": "Arrêtez la course",
-          "continue": "Continuer"
-        },
-        "needsPlugin": "Besoins {{plugin}}",
-        "needsPluginHint": "Cette automatisation est suspendue jusqu'à ce que la fonctionnalité nécessaire soit de nouveau disponible.",
-        "offBadge": "Désactivée",
-        "docsLink": "Voir la documentation",
-        "ago": {
-          "seconds": "{{count}}il y a s",
-          "minutes": "il y a {{count}} min",
-          "hours": "il y a {{count}} h",
-          "days": "il y a {{count}} j"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Automatisations"
-  },
-  "onboarding": {
-    "feature_automations": "Automatisations",
-    "feature_automations_desc": "Exécutez des actions automatiquement lorsqu'un événement se produit et recevez une notification."
-  },
-  "maintenance": {
-    "title": "Maintenance",
-    "description": "Suspendez les automatisations relatives à l'état des hôtes, à leur santé, aux métriques, aux conteneurs et à la déconnexion des tunnels pendant la durée de l'opération. La surveillance, les exécutions manuelles et les automatisations planifiées se poursuivent.",
-    "denied": "Vous n'êtes pas autorisé à consulter les informations de maintenance.",
-    "sharedReadOnly": "Cet hébergement vous a été proposé à la location. Seul son propriétaire peut en modifier la maintenance.",
-    "failed": "La maintenance n'a pas pu être mise à jour.",
-    "active": "Maintenance active",
-    "estimated": "Achèvement estimé",
-    "noAutoEnd": "Le devis ne met pas fin à la maintenance. Il faut y mettre fin explicitement une fois les travaux terminés.",
-    "endConfirm": "Mettre fin à la maintenance et reprendre les automatisations déclenchées par des événements pour cet hôte ?",
-    "confirmEnd": "Confirmer la fin",
-    "cancel": "Annuler",
-    "end": "Maintenance finale",
-    "action": "Action",
-    "startNow": "Commencez maintenant",
-    "schedule": "Planifiez plus tard",
-    "reason": "Raison",
-    "startUtc": "Premier démarrage (UTC)",
-    "repeat": "Répéter",
-    "once": "Une fois",
-    "weekly": "Hebdomadaire",
-    "monthly": "Mensuel",
-    "utcHelp": "Les planifications utilisent le temps universel coordonné (UTC) tout au long de l'année. Les planifications mensuelles ignorent les mois sans le jour sélectionné. Les fenêtres de planification ne peuvent pas se chevaucher ; la maintenance en cours se poursuit sur les fenêtres suivantes.",
-    "duration": "Durée estimée (minutes)",
-    "grace": "Délai de grâce (minutes)",
-    "notify": "Veuillez nous informer une seule fois si nous sommes toujours hors ligne après la période estimée et le délai de grâce. Veuillez nous avertir une fois si nous sommes toujours hors ligne après la période estimée et le délai de grâce.",
-    "addSchedule": "Ajouter un horaire",
-    "schedules": "Horaires",
-    "noSchedules": "Aucun programme de maintenance.",
-    "completed": "Déjà commencé",
-    "minutes_one": "{{count}} minute",
-    "minutes_other": "{{count}} minutes",
-    "remove": "Supprimer le planning",
-    "loadFailed": "Impossible d'actualiser l'état de maintenance. Les modifications sont désactivées jusqu'à ce que le chargement soit possible.",
-    "loading": "État de la maintenance en cours de chargement…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "se connecter",
-          "disconnect": "déconnecter",
-          "offline": "hors ligne",
-          "online": "en ligne",
-          "failing": "défaut",
-          "recovered": "rétabli"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/he_IL.json b/plugins/automations/locales/translated/he_IL.json
deleted file mode 100644
index 9a9652b63..000000000
--- a/plugins/automations/locales/translated/he_IL.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "הצג אוטומציות",
-      "description": "ראה את האוטומציות ואת ההיסטוריה שלהן."
-    },
-    "create": {
-      "title": "צור אוטומציות",
-      "description": "הוסף אוטומציות חדשות."
-    },
-    "edit": {
-      "title": "עריכת אוטומציות",
-      "description": "שינוי אוטומציות קיימות."
-    },
-    "delete": {
-      "title": "מחיקת אוטומציות",
-      "description": "הסר אוטומציות."
-    },
-    "run": {
-      "title": "הפעלת אוטומציות",
-      "description": "הפעל אוטומציה באופן ידני."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "אוטומציות",
-        "tabAutomations": "אוטומציות",
-        "tabRuns": "ריצות",
-        "tabChannels": "ערוצים",
-        "createAutomation": "אוטומציה חדשה",
-        "backToAutomations": "חזרה לאוטומציות",
-        "createTitle": "אוטומציה חדשה",
-        "editTitle": "עריכה אוטומציה",
-        "empty": "אין עדיין אוטומציות. צור אחת שתגיב למדד, לוח זמנים או אירוע.",
-        "emptyRuns": "עדיין אין ריצות.",
-        "channelsHint": "ערוצים מוגדרים בהתראות",
-        "noChannelsHint": "ההתראה תמיד מגיעה לתיבת הדואר הנכנס שלך. הוסף ערוצים בהתראות כדי לשלוח אותה גם למקום אחר.",
-        "nameLabel": "שֵׁם",
-        "namePlaceholder": "לדוגמה, ניקוי /נתונים כאשר הוא מתמלא",
-        "nameRequired": "שם נדרש",
-        "descriptionLabel": "תֵאוּר",
-        "descriptionPlaceholder": "תיאור אופציונלי",
-        "enabledLabel": "מופעל",
-        "concurrencyLabel": "אם זה כבר פועל",
-        "concurrencyHint": "מה לעשות כאשר זה מופעל שוב לפני שהריצה האחרונה הסתיימה.",
-        "concurrency": {
-          "skip": "דלג על הריצה החדשה",
-          "queue": "חכו ורוץ אחרי",
-          "allow": "הפעל את שניהם בו זמנית"
-        },
-        "save": "לְהַצִיל",
-        "created": "אוטומציה נוצרה",
-        "updated": "אוטומציה נשמרה",
-        "deleted": "אוטומציה נמחקה",
-        "deleteConfirm": "למחוק את האוטומציה הזו? גם היסטוריית הריצות שלה נמחקת.",
-        "runNow": "רוץ עכשיו",
-        "testRun": "ריצת מבחן",
-        "testRunHint": "רץ כל שלב אבל לא נוגע בשום דבר מחוץ לטרמיקס.",
-        "runStarted": "הריצה התחילה",
-        "runFinished": "ריצה הסתיימה: {{status}}",
-        "trigger": "לְהַפְעִיל",
-        "steps": "צעדים",
-        "addStep": "הוסף שלב",
-        "removeStep": "הסר שלב",
-        "moveUp": "הזז למעלה",
-        "moveDown": "הזז למטה",
-        "noSteps": "אין עדיין שלבים. הוסף שלבים כדי לומר מה אמור לקרות.",
-        "webhookTokenTitle": "כתובת אתר של Webhook",
-        "webhookTokenDescription": "זה מוצג פעם אחת. שמור את זה עכשיו, לא ניתן לאחזר את זה מאוחר יותר.",
-        "copy": "לְהַעְתִיק",
-        "copied": "מוּעֲתָק",
-        "viewJson": "JSON",
-        "viewBuilder": "בּוֹנֶה",
-        "viewGraph": "גרָף",
-        "lastRun": "ריצה אחרונה",
-        "never": "לְעוֹלָם לֹא",
-        "duration": "{{seconds}}ים",
-        "stepOutput": "תְפוּקָה",
-        "stepError": "שְׁגִיאָה",
-        "dryRunBadge": "ריצת מבחן",
-        "hostSelector": {
-          "trigger": "מארח מפעיל",
-          "host": "מארח ספציפי",
-          "fleet": "צִי",
-          "all": "כל המארחים"
-        },
-        "triggerKinds": {
-          "metric_threshold": "סף מטרי",
-          "host_status": "המארח עולה או יורד",
-          "health_check": "שינויים בבדיקת הבריאות",
-          "schedule": "על פי לוח זמנים",
-          "docker_event": "אירוע מיכל",
-          "internal_event": "אירוע טרמיקס",
-          "webhook": "וובהוק נכנס"
-        },
-        "stepTypes": {
-          "notify": "שלח התראה",
-          "http": "קריאה לכתובת URL",
-          "run_snippet": "הפעלת קטע קוד",
-          "run_command": "הפעל פקודה",
-          "docker": "שליטה על מכולה",
-          "tunnel": "שליטה במנהרה",
-          "wol": "להעיר מארח",
-          "wait": "לַחֲכוֹת",
-          "set_var": "הגדר משתנה",
-          "if": "אם / אחרת",
-          "run_automation": "הפעל אוטומציה נוספת",
-          "stop": "לְהַפְסִיק"
-        },
-        "statuses": {
-          "running": "רִיצָה",
-          "success": "הַצלָחָה",
-          "failed": "נִכשָׁל",
-          "timeout": "תם הזמן",
-          "skipped": "דילג",
-          "cancelled": "בּוּטלָה"
-        },
-        "fields": {
-          "host": "מְאָרֵחַ",
-          "metric": "מֶטרִי",
-          "mount": "נקודת הרכבה",
-          "operator": "האם",
-          "value": "עֵרֶך",
-          "forSeconds": "נמשך (שניות)",
-          "cooldown": "זמן קירור (דקות)",
-          "cron": "ביטוי קרון",
-          "intervalSeconds": "כל (שניות)",
-          "timezone": "אזור זמן",
-          "timezoneServer": "זמן שרת",
-          "timezoneHint": "זמני Cron נקראים באזור זה. לא חל על לוחות זמנים של מרווחים.",
-          "container": "מְכוֹלָה",
-          "command": "פְּקוּדָה",
-          "url": "כתובת אתר",
-          "method": "שִׁיטָה",
-          "body": "גוּף",
-          "channels": "שלחו גם אל",
-          "title": "כּוֹתֶרֶת",
-          "message": "הוֹדָעָה",
-          "snippet": "קטע",
-          "seconds": "שניות",
-          "conditionLeftPlaceholder": "ערך לבדיקה",
-          "conditionRightPlaceholder": "השווה מול",
-          "variableName": "שם משתנה",
-          "variableValue": "עֵרֶך",
-          "elevated": "רוץ עם סודו",
-          "onError": "אם זה ייכשל",
-          "allowPrivateNetwork": "אפשר כתובות רשת מקומיות",
-          "allowPrivateNetworkHint": "נדרש עבור שירות אירוח עצמי ברשת הרשת המקומית שלך. כבוי כברירת מחדל כדי למנוע בקשות לכתובות פנימיות."
-        },
-        "onError": {
-          "stop": "עצור את הריצה",
-          "continue": "לְהַמשִׁיך"
-        },
-        "needsPlugin": "צרכים {{plugin}}",
-        "needsPluginHint": "אוטומציה זו מדלגת עד שהתכונה הדרושה לה תהיה זמינה שוב.",
-        "offBadge": "כבוי",
-        "docsLink": "הצג מסמכים",
-        "ago": {
-          "seconds": "לפני {{count}}שניות",
-          "minutes": "לפני {{count}}דקות",
-          "hours": "{{count}}h ago",
-          "days": "{{count}}d ago"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "אוטומציות"
-  },
-  "onboarding": {
-    "feature_automations": "אוטומציות",
-    "feature_automations_desc": "הפעל שלבים באופן אוטומטי כאשר משהו קורה, וקבל הודעה."
-  },
-  "maintenance": {
-    "title": "תַחזוּקָה",
-    "description": "השהה אוטומציות של סטטוס המארח, תקינות, מדדים, ניתוק מנהרות ומכולות בזמן שהעבודה מתבצעת. ניטור, הרצות ידניות ואוטומציות מתוזמנות ממשיכות.",
-    "denied": "אין לך הרשאה לצפות בתחזוקה.",
-    "sharedReadOnly": "מארח זה שותף איתך. רק בעליו יכול לשנות את התחזוקה.",
-    "failed": "לא ניתן היה לעדכן את תוכנית התחזוקה.",
-    "active": "תחזוקה פעילה",
-    "estimated": "השלמה משוערת",
-    "noAutoEnd": "ההערכה אינה מסיימת את התחזוקה. יש לסיים אותה במפורש כאשר העבודה הושלמה.",
-    "endConfirm": "לסיים את התחזוקה ולחדש אוטומציות המופעלות על ידי אירועים עבור מארח זה?",
-    "confirmEnd": "אישור סיום",
-    "cancel": "לְבַטֵל",
-    "end": "סיום תחזוקה",
-    "action": "פְּעוּלָה",
-    "startNow": "התחל עכשיו",
-    "schedule": "קבע למועד מאוחר יותר",
-    "reason": "לְנַמֵק",
-    "startUtc": "התחלה ראשונה (UTC)",
-    "repeat": "לַחֲזוֹר עַל",
-    "once": "פַּעַם",
-    "weekly": "שְׁבוּעִי",
-    "monthly": "יַרחוֹן",
-    "utcHelp": "לוחות זמנים משתמשים ב-UTC לאורך כל השנה. לוחות זמנים חודשיים מדלגים על חודשים ללא היום שנבחר. חלונות מתוכננים אינם יכולים לחפוף; תחזוקה מדורגת ממשיכה בחלונות מאוחרים יותר.",
-    "duration": "משך זמן משוער (בדקות)",
-    "grace": "תקופת חסד (בדקות)",
-    "notify": "הודעה אחת אם עדיין לא מחובר לאחר תקופת ההערכה בתוספת חסד",
-    "addSchedule": "הוסף לוח זמנים",
-    "schedules": "לוחות זמנים",
-    "noSchedules": "אין לוחות זמנים לתחזוקה.",
-    "completed": "כבר התחיל",
-    "minutes_one": "דקה {{count}}",
-    "minutes_other": "{{count}} דקות",
-    "remove": "הסר את לוח הזמנים",
-    "loadFailed": "לא ניתן היה לרענן את סטטוס התחזוקה. השינויים מושבתים עד שניתן יהיה לטעון אותו.",
-    "loading": "טוען סטטוס תחזוקה…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "לְחַבֵּר",
-          "disconnect": "לְנַתֵק",
-          "offline": "לא מקוון",
-          "online": "באינטרנט",
-          "failing": "כָּשֵׁל",
-          "recovered": "התאושש"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/hi_IN.json b/plugins/automations/locales/translated/hi_IN.json
deleted file mode 100644
index 4a4e9ff8d..000000000
--- a/plugins/automations/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "स्वचालित सेवाओं को देखें",
-      "description": "स्वचालित प्रक्रियाओं और उनके इतिहास को देखें।"
-    },
-    "create": {
-      "title": "स्वचालित प्रणालियाँ बनाएँ",
-      "description": "नई स्वचालित प्रणालियाँ जोड़ें।"
-    },
-    "edit": {
-      "title": "स्वचालित संपादन",
-      "description": "मौजूदा स्वचालित प्रक्रियाओं में बदलाव करें।"
-    },
-    "delete": {
-      "title": "स्वचालित सेवाओं को हटाएं",
-      "description": "स्वचालित प्रक्रियाओं को हटा दें।"
-    },
-    "run": {
-      "title": "स्वचालित संचालन चलाएँ",
-      "description": "किसी स्वचालित प्रक्रिया को मैन्युअल रूप से शुरू करें।"
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "स्वचालन",
-        "tabAutomations": "स्वचालन",
-        "tabRuns": "दौड़ें",
-        "tabChannels": "चैनल",
-        "createAutomation": "नया स्वचालन",
-        "backToAutomations": "स्वचालन पर वापस जाएँ",
-        "createTitle": "नया स्वचालन",
-        "editTitle": "संपादन स्वचालन",
-        "empty": "अभी तक कोई ऑटोमेशन नहीं है। किसी मेट्रिक, शेड्यूल या इवेंट के आधार पर प्रतिक्रिया देने के लिए एक ऑटोमेशन बनाएं।",
-        "emptyRuns": "अभी तक कोई रन नहीं बना है।",
-        "channelsHint": "अलर्ट में चैनल सेट किए जाते हैं।",
-        "noChannelsHint": "यह अलर्ट हमेशा आपके इनबॉक्स में आता है। इसे कहीं और भेजने के लिए अलर्ट में चैनल जोड़ें।",
-        "nameLabel": "नाम",
-        "namePlaceholder": "उदाहरण के लिए, जब /data भर जाए तो उसे साफ़ कर दें।",
-        "nameRequired": "नाम आवश्यक है",
-        "descriptionLabel": "विवरण",
-        "descriptionPlaceholder": "वैकल्पिक विवरण",
-        "enabledLabel": "सक्षम",
-        "concurrencyLabel": "यदि यह पहले से चल रहा है",
-        "concurrencyHint": "पिछली बार रन पूरा होने से पहले ही अगर यह समस्या दोबारा उत्पन्न हो जाए तो क्या करें।",
-        "concurrency": {
-          "skip": "नए रन को छोड़ दें",
-          "queue": "प्रतीक्षा करो और उसके पीछे दौड़ो",
-          "allow": "दोनों को एक साथ चलाएं"
-        },
-        "save": "सहेजें",
-        "created": "स्वचालन द्वारा निर्मित",
-        "updated": "स्वचालन ने बचत की",
-        "deleted": "स्वचालित रूप से हटा दिया गया",
-        "deleteConfirm": "इस ऑटोमेशन को डिलीट करने पर, इसका रन हिस्ट्री भी डिलीट हो जाएगा।",
-        "runNow": "अब दौड़े",
-        "testRun": "परीक्षण के लिए चलाना",
-        "testRunHint": "यह हर चरण में दौड़ता है लेकिन टर्मिक्स के बाहर किसी भी चीज को नहीं छूता है।",
-        "runStarted": "दौड़ शुरू हो गई",
-        "runFinished": "रन समाप्त: {{status}}",
-        "trigger": "ट्रिगर",
-        "steps": "चरण",
-        "addStep": "चरण जोड़ें",
-        "removeStep": "चरण हटाएँ",
-        "moveUp": "बढ़ाना",
-        "moveDown": "नीचे की ओर",
-        "noSteps": "अभी तक कोई चरण निर्धारित नहीं हैं। कृपया एक चरण जोड़कर बताएं कि आगे क्या होना चाहिए।",
-        "webhookTokenTitle": "वेबहुक यूआरएल",
-        "webhookTokenDescription": "यह केवल एक बार दिखाया जाएगा। इसे अभी सहेज लें, बाद में इसे पुनः प्राप्त नहीं किया जा सकेगा।",
-        "copy": "कॉपी",
-        "copied": "कॉपी किया गया",
-        "viewJson": "जेएन",
-        "viewBuilder": "निर्माता",
-        "viewGraph": "ग्राफ़",
-        "lastRun": "आखरी बार",
-        "never": "कभी नहीं",
-        "duration": "{{seconds}}s",
-        "stepOutput": "आउटपुट",
-        "stepError": "त्रुटि",
-        "dryRunBadge": "परीक्षण के लिए चलाना",
-        "hostSelector": {
-          "trigger": "ट्रिगरिंग होस्ट",
-          "host": "विशिष्ट मेज़बान",
-          "fleet": "बेड़ा",
-          "all": "सभी होस्ट"
-        },
-        "triggerKinds": {
-          "metric_threshold": "मीट्रिक सीमा",
-          "host_status": "होस्ट ऊपर या नीचे जाता है",
-          "health_check": "स्वास्थ्य जांच में बदलाव",
-          "schedule": "एक निर्धारित कार्यक्रम के अनुसार",
-          "docker_event": "कंटेनर घटना",
-          "internal_event": "टर्मिक्स घटना",
-          "webhook": "इनकमिंग वेबहुक"
-        },
-        "stepTypes": {
-          "notify": "अलर्ट भेजें",
-          "http": "किसी URL को कॉल करें",
-          "run_snippet": "एक स्निपेट चलाएँ",
-          "run_command": "एक कमांड चलाएँ",
-          "docker": "एक कंटेनर को नियंत्रित करें",
-          "tunnel": "एक सुरंग को नियंत्रित करें",
-          "wol": "किसी मेजबान को जगाओ",
-          "wait": "इंतज़ार",
-          "set_var": "एक चर सेट करें",
-          "if": "यदि / अन्यथा",
-          "run_automation": "एक और ऑटोमेशन चलाएँ",
-          "stop": "स्टॉप"
-        },
-        "statuses": {
-          "running": "चालू",
-          "success": "सफल",
-          "failed": "असफल",
-          "timeout": "समय समााप्त",
-          "skipped": "छोड़ा गया",
-          "cancelled": "रद्द कर दिया गया"
-        },
-        "fields": {
-          "host": "होस्ट",
-          "metric": "मीट्रिक",
-          "mount": "माउंट पॉइंट",
-          "operator": "है",
-          "value": "कीमत",
-          "forSeconds": "(सेकंड) तक कायम रहा",
-          "cooldown": "कूलडाउन (मिनट)",
-          "cron": "क्रोन अभिव्यक्ति",
-          "intervalSeconds": "हर (सेकंड)",
-          "timezone": "समय क्षेत्र",
-          "timezoneServer": "सर्वर समय",
-          "timezoneHint": "इस ज़ोन में क्रॉन टाइम पढ़े जाते हैं। यह इंटरवल शेड्यूल पर लागू नहीं होता है।",
-          "container": "पात्र",
-          "command": "कमांड",
-          "url": "URL",
-          "method": "तरीका",
-          "body": "शरीर",
-          "channels": "इसे भी भेजें",
-          "title": "शीर्षक",
-          "message": "संदेश",
-          "snippet": "टुकड़ा",
-          "seconds": "सेकंड",
-          "conditionLeftPlaceholder": "जाँच करने के लिए मान",
-          "conditionRightPlaceholder": "तुलना करें",
-          "variableName": "चर का नाम",
-          "variableValue": "कीमत",
-          "elevated": "sudo के साथ चलाएँ",
-          "onError": "यदि यह विफल हो जाता है",
-          "allowPrivateNetwork": "स्थानीय नेटवर्क पतों की अनुमति दें",
-          "allowPrivateNetworkHint": "आपके लोकल एरिया नेटवर्क (LAN) पर सेल्फ-होस्टेड सेवा के लिए आवश्यक। आंतरिक पतों पर अनुरोधों को रोकने के लिए डिफ़ॉल्ट रूप से बंद।"
-        },
-        "onError": {
-          "stop": "दौड़ रोको",
-          "continue": "जारी रखो"
-        },
-        "needsPlugin": "आवश्यकताएँ {{plugin}}",
-        "needsPluginHint": "यह स्वचालन तब तक स्थगित रहेगा जब तक कि आवश्यक सुविधा पुनः उपलब्ध न हो जाए।",
-        "offBadge": "बंद",
-        "docsLink": "दस्तावेज़ देखें",
-        "ago": {
-          "seconds": "{{count}}सेकंड पहले",
-          "minutes": "{{count}}m पहले",
-          "hours": "{{count}}h पहले",
-          "days": "{{count}}d पहले"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "स्वचालन"
-  },
-  "onboarding": {
-    "feature_automations": "स्वचालन",
-    "feature_automations_desc": "कुछ घटित होने पर चरणों को स्वचालित रूप से चलाएं और सूचना प्राप्त करें।"
-  },
-  "maintenance": {
-    "title": "रखरखाव",
-    "description": "कार्य प्रगति पर रहते हुए होस्ट की स्थिति, स्वास्थ्य, मीट्रिक, कंटेनर और टनल-डिस्कनेक्शन से संबंधित स्वचालित प्रक्रियाओं को रोकें। मॉनिटरिंग, मैन्युअल रन और निर्धारित स्वचालित प्रक्रियाएं जारी रहेंगी।",
-    "denied": "आपको रखरखाव कार्य देखने की अनुमति नहीं है।",
-    "sharedReadOnly": "यह होस्ट आपके साथ साझा किया गया है। केवल इसका स्वामी ही रखरखाव में बदलाव कर सकता है।",
-    "failed": "रखरखाव अपडेट नहीं हो सका।",
-    "active": "रखरखाव सक्रिय है",
-    "estimated": "अनुमानित समापन",
-    "noAutoEnd": "यह अनुमान रखरखाव कार्य की समाप्ति का संकेत नहीं है। कार्य पूर्ण होने पर इसे स्पष्ट रूप से समाप्त करें।",
-    "endConfirm": "इस होस्ट के लिए रखरखाव समाप्त करें और इवेंट-ट्रिगर ऑटोमेशन को पुनः आरंभ करें?",
-    "confirmEnd": "समाप्ति की पुष्टि करें",
-    "cancel": "रद्द करें",
-    "end": "रखरखाव समाप्त करें",
-    "action": "क्रिया",
-    "startNow": "शुरू करें",
-    "schedule": "बाद के लिए शेड्यूल करें",
-    "reason": "कारण",
-    "startUtc": "पहली शुरुआत (UTC)",
-    "repeat": "दोहराना",
-    "once": "एक बार",
-    "weekly": "साप्ताहिक",
-    "monthly": "महीने के",
-    "utcHelp": "शेड्यूल पूरे वर्ष UTC समय का उपयोग करते हैं। मासिक शेड्यूल चयनित दिन वाले महीनों को छोड़ देते हैं। नियोजित समय सीमाएँ एक-दूसरे से ओवरलैप नहीं हो सकतीं; निर्धारित रखरखाव कार्य निर्धारित समय सीमाओं में भी जारी रहता है।",
-    "duration": "अनुमानित अवधि (मिनटों में)",
-    "grace": "अनुग्रह अवधि (मिनटों में)",
-    "notify": "अनुमान और अनुग्रह अवधि के बाद भी ऑफ़लाइन रहने पर एक बार सूचित करें",
-    "addSchedule": "अनुसूची जोड़ें",
-    "schedules": "अनुसूचियों",
-    "noSchedules": "कोई रखरखाव कार्यक्रम नहीं।",
-    "completed": "पहले ही शुरू हो चुका है",
-    "minutes_one": "{{count}} मिनट",
-    "minutes_other": "{{count}} मिनट",
-    "remove": "अनुसूची हटाएँ",
-    "loadFailed": "रखरखाव की स्थिति को रीफ़्रेश नहीं किया जा सका। जब तक यह लोड नहीं हो जाता, तब तक परिवर्तन अक्षम रहेंगे।",
-    "loading": "रखरखाव की स्थिति लोड हो रही है…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "कनेक्ट",
-          "disconnect": "डिस्कनेक्ट करें",
-          "offline": "ऑफलाइन",
-          "online": "ऑनलाइन",
-          "failing": "असफलता",
-          "recovered": "बरामद"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/hu_HU.json b/plugins/automations/locales/translated/hu_HU.json
deleted file mode 100644
index 3e84aafda..000000000
--- a/plugins/automations/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Automatizálások megtekintése",
-      "description": "Tekintse meg az automatizálásokat és azok előzményeit."
-    },
-    "create": {
-      "title": "Automatizálások létrehozása",
-      "description": "Új automatizálások hozzáadása."
-    },
-    "edit": {
-      "title": "Automatizálások szerkesztése",
-      "description": "Módosítsa a meglévő automatizálásokat."
-    },
-    "delete": {
-      "title": "Automatizálások törlése",
-      "description": "Automatizálások eltávolítása."
-    },
-    "run": {
-      "title": "Automatizálások futtatása",
-      "description": "Automatizálás manuális indítása."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Automatizálások",
-        "tabAutomations": "Automatizálások",
-        "tabRuns": "Futások",
-        "tabChannels": "Csatornák",
-        "createAutomation": "Új automatizálás",
-        "backToAutomations": "Vissza az automatizálásokhoz",
-        "createTitle": "Új automatizálás",
-        "editTitle": "Szerkesztési automatizálás",
-        "empty": "Még nincsenek automatizálások. Hozz létre egyet, amely egy mérőszámra, ütemezésre vagy eseményre reagál.",
-        "emptyRuns": "Még nincsenek futások.",
-        "channelsHint": "A csatornák a Riasztások menüpontban vannak beállítva.",
-        "noChannelsHint": "Az értesítés mindig a beérkező levelek mappájába érkezik. Adj hozzá csatornákat az Értesítések részben, hogy máshová is elküldhesd.",
-        "nameLabel": "Név",
-        "namePlaceholder": "pl. /data törlése, amikor megtelik",
-        "nameRequired": "Név megadása kötelező",
-        "descriptionLabel": "Leírás",
-        "descriptionPlaceholder": "Opcionális leírás",
-        "enabledLabel": "Engedélyezve",
-        "concurrencyLabel": "Ha már fut",
-        "concurrencyHint": "Mi a teendő, ha ez ismét aktiválódik, mielőtt az utolsó futtatás befejeződött?",
-        "concurrency": {
-          "skip": "Kihagyja az új futást",
-          "queue": "Várj és fuss utána",
-          "allow": "Futtassa mindkettőt egyszerre"
-        },
-        "save": "Megtakarítás",
-        "created": "Automatizálás létrehozva",
-        "updated": "Automatizálás mentve",
-        "deleted": "Automatizálás törölve",
-        "deleteConfirm": "Törli ezt az automatizálást? A futási előzményei is törlődnek.",
-        "runNow": "Futtatás most",
-        "testRun": "Próbaüzem",
-        "testRunHint": "Minden lépést lefuttat, de a Termixen kívül semmihez sem ér hozzá.",
-        "runStarted": "Futtatás elkezdve",
-        "runFinished": "Futtatás befejezve: {{status}}",
-        "trigger": "Trigger",
-        "steps": "Lépések",
-        "addStep": "Lépés hozzáadása",
-        "removeStep": "Lépés eltávolítása",
-        "moveUp": "Feljebb mozgatás",
-        "moveDown": "Lejjebb mozgatás",
-        "noSteps": "Még nincsenek lépések. Írj be egyet, ami leírja, hogy minek kellene történnie.",
-        "webhookTokenTitle": "Webhook URL-címe",
-        "webhookTokenDescription": "Ez egyszer jelenik meg. Mentsd el most, később nem lesz elérhető.",
-        "copy": "Másolat",
-        "copied": "Másolva",
-        "viewJson": "JSON",
-        "viewBuilder": "Építész",
-        "viewGraph": "Grafikon",
-        "lastRun": "Utolsó futás",
-        "never": "Soha",
-        "duration": "{{seconds}}s",
-        "stepOutput": "Kimenet",
-        "stepError": "Hiba",
-        "dryRunBadge": "Próbaüzem",
-        "hostSelector": {
-          "trigger": "Kiváltó gazdagép",
-          "host": "Adott gazdagép",
-          "fleet": "Flotta",
-          "all": "Minden házigazda"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Metrikus küszöbérték",
-          "host_status": "A host fel- vagy lekapcsolódik",
-          "health_check": "Egészségügyi ellenőrzés változásai",
-          "schedule": "Ütemterv szerint",
-          "docker_event": "Konténeresemény",
-          "internal_event": "Termix esemény",
-          "webhook": "Bejövő webhook"
-        },
-        "stepTypes": {
-          "notify": "Értesítés küldése",
-          "http": "URL hívása",
-          "run_snippet": "Kódrészlet futtatása",
-          "run_command": "Parancs futtatása",
-          "docker": "Egy konténer vezérlése",
-          "tunnel": "Irányíts egy alagutat",
-          "wol": "Ébresszen fel egy házigazdát",
-          "wait": "Várjon",
-          "set_var": "Változó beállítása",
-          "if": "Ha / egyébként",
-          "run_automation": "Futtasson egy másik automatizálást",
-          "stop": "Stop"
-        },
-        "statuses": {
-          "running": "Futás",
-          "success": "Siker",
-          "failed": "Sikertelen",
-          "timeout": "Időtúllépés történt",
-          "skipped": "Kihagyva",
-          "cancelled": "Lemondva"
-        },
-        "fields": {
-          "host": "Házigazda",
-          "metric": "Metrika",
-          "mount": "Csatlakozási pont",
-          "operator": "Van",
-          "value": "Érték",
-          "forSeconds": "Fenntartott (másodperc)",
-          "cooldown": "Lehűlési idő (perc)",
-          "cron": "Cron kifejezés",
-          "intervalSeconds": "Minden (másodperc)",
-          "timezone": "Időzóna",
-          "timezoneServer": "Szerveridő",
-          "timezoneHint": "A Cron idők leolvasása ebben a zónában történik. Nem vonatkozik az intervallumos ütemtervekre.",
-          "container": "Tartály",
-          "command": "Parancs",
-          "url": "URL-cím",
-          "method": "Módszer",
-          "body": "Test",
-          "channels": "Küldés ide is",
-          "title": "Cím",
-          "message": "Üzenet",
-          "snippet": "Töredék",
-          "seconds": "Másodperc",
-          "conditionLeftPlaceholder": "Ellenőrizendő érték",
-          "conditionRightPlaceholder": "Összevet",
-          "variableName": "Változó neve",
-          "variableValue": "Érték",
-          "elevated": "Futtassa a sudo paranccsal",
-          "onError": "Ha ez nem sikerül",
-          "allowPrivateNetwork": "Helyi hálózati címek engedélyezése",
-          "allowPrivateNetworkHint": "Szükséges egy saját tárhelyen futó szolgáltatáshoz a helyi hálózaton. Alapértelmezés szerint ki van kapcsolva, hogy megakadályozza a belső címekre irányuló kéréseket."
-        },
-        "onError": {
-          "stop": "Állítsd meg a futást",
-          "continue": "Folytat"
-        },
-        "needsPlugin": "Szükségletek {{plugin}}",
-        "needsPluginHint": "Ez az automatizálás kimarad, amíg a szükséges funkció újra elérhetővé nem válik.",
-        "offBadge": "Le",
-        "docsLink": "Dokumentumok megtekintése",
-        "ago": {
-          "seconds": "{{count}}másodperccel ezelőtt",
-          "minutes": "{{count}}perccel ezelőtt",
-          "hours": "{{count}}órával ezelőtt",
-          "days": "{{count}}nappal ezelőtt"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Automatizálások"
-  },
-  "onboarding": {
-    "feature_automations": "Automatizálások",
-    "feature_automations_desc": "Automatikusan futtassa a lépéseket, amikor valami történik, és kapjon értesítést."
-  },
-  "maintenance": {
-    "title": "Karbantartás",
-    "description": "A folyamatban lévő munka alatt szüneteltesse a hoszt állapot-, egészség-, metrika-, konténer- és alagút-leválasztási automatizálásokat. A monitorozás, a manuális futtatások és az ütemezett automatizálások továbbra is működnek.",
-    "denied": "Nincs jogosultsága a karbantartás megtekintésére.",
-    "sharedReadOnly": "Ezt a gazdagépet megosztották veled. Csak a tulajdonosa módosíthatja a karbantartási beállításokat.",
-    "failed": "A karbantartás frissítése nem sikerült.",
-    "active": "Karbantartás aktív",
-    "estimated": "Várható befejezés",
-    "noAutoEnd": "A becslés nem fejezi be a karbantartást. A munka befejezésekor explicit módon fejezze be.",
-    "endConfirm": "Befejezi a karbantartást, és folytatja az eseményvezérelt automatizálásokat ennél a gazdagépnél?",
-    "confirmEnd": "Vég megerősítése",
-    "cancel": "Mégsem",
-    "end": "Karbantartás vége",
-    "action": "Akció",
-    "startNow": "Kezdés most",
-    "schedule": "Későbbi időpontra ütemezhető",
-    "reason": "Ok",
-    "startUtc": "Első indítás (UTC)",
-    "repeat": "Ismétlés",
-    "once": "Egyszer",
-    "weekly": "Heti",
-    "monthly": "Havi",
-    "utcHelp": "Az ütemtervek az év során UTC-t használják. A havi ütemtervek kihagyják a kiválasztott nap nélküli hónapokat. A tervezett ablakok nem fedhetik át egymást; a túlterheléses karbantartás a későbbi ablakokban is folytatódik.",
-    "duration": "Becsült időtartam (perc)",
-    "grace": "Türelmi időszak (perc)",
-    "notify": "Értesítsen egyszer, ha a becslés és a türelmi időszak után is offline állapotban van",
-    "addSchedule": "Ütemezés hozzáadása",
-    "schedules": "Ütemtervek",
-    "noSchedules": "Nincsenek karbantartási ütemtervek.",
-    "completed": "Már elkezdődött",
-    "minutes_one": "{{count}} perc",
-    "minutes_other": "{{count}} perc",
-    "remove": "Ütemezés eltávolítása",
-    "loadFailed": "Nem sikerült frissíteni a karbantartási állapotot. A változtatások le vannak tiltva, amíg be nem töltődik.",
-    "loading": "Karbantartási állapot betöltése…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "kapcsolódni",
-          "disconnect": "leválasztás",
-          "offline": "offline",
-          "online": "online",
-          "failing": "hiányában",
-          "recovered": "felépült"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/id_ID.json b/plugins/automations/locales/translated/id_ID.json
deleted file mode 100644
index 70b6c9dcf..000000000
--- a/plugins/automations/locales/translated/id_ID.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Lihat otomatisasi",
-      "description": "Lihat otomatisasi dan riwayatnya."
-    },
-    "create": {
-      "title": "Buat otomatisasi",
-      "description": "Tambahkan otomatisasi baru."
-    },
-    "edit": {
-      "title": "Edit otomatisasi",
-      "description": "Ubah otomatisasi yang ada."
-    },
-    "delete": {
-      "title": "Hapus otomatisasi",
-      "description": "Hapus otomatisasi."
-    },
-    "run": {
-      "title": "Jalankan otomatisasi",
-      "description": "Memicu otomatisasi secara manual."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Otomatisasi",
-        "tabAutomations": "Otomatisasi",
-        "tabRuns": "Lari",
-        "tabChannels": "Saluran",
-        "createAutomation": "Otomatisasi Baru",
-        "backToAutomations": "Kembali ke Otomatisasi",
-        "createTitle": "Otomatisasi Baru",
-        "editTitle": "Edit Otomatisasi",
-        "empty": "Belum ada otomatisasi. Buat satu untuk bereaksi terhadap metrik, jadwal, atau peristiwa.",
-        "emptyRuns": "Belum ada percobaan lari.",
-        "channelsHint": "Saluran diatur dalam Peringatan.",
-        "noChannelsHint": "Notifikasi selalu masuk ke kotak masuk Anda. Tambahkan saluran di Notifikasi untuk mengirimkannya ke tempat lain juga.",
-        "nameLabel": "Nama",
-        "namePlaceholder": "misalnya, Bersihkan /data saat sudah penuh",
-        "nameRequired": "Nama wajib diisi.",
-        "descriptionLabel": "Keterangan",
-        "descriptionPlaceholder": "Deskripsi opsional",
-        "enabledLabel": "Diaktifkan",
-        "concurrencyLabel": "Jika sudah berjalan",
-        "concurrencyHint": "Apa yang harus dilakukan jika ini terpicu lagi sebelum proses terakhir selesai.",
-        "concurrency": {
-          "skip": "Lewati lari baru",
-          "queue": "Tunggu dan lari setelahnya",
-          "allow": "Jalankan keduanya sekaligus"
-        },
-        "save": "Menyimpan",
-        "created": "Otomatisasi dibuat",
-        "updated": "Otomatisasi tersimpan",
-        "deleted": "Otomatisasi dihapus",
-        "deleteConfirm": "Hapus otomatisasi ini? Riwayat eksekusinya juga akan terhapus.",
-        "runNow": "Lari sekarang",
-        "testRun": "Uji coba",
-        "testRunHint": "Berjalan di setiap langkah tetapi tidak menyentuh apa pun di luar Termix.",
-        "runStarted": "Lari dimulai",
-        "runFinished": "Eksekusi selesai: {{status}}",
-        "trigger": "Pemicu",
-        "steps": "Tangga",
-        "addStep": "Tambahkan langkah",
-        "removeStep": "Hapus langkah",
-        "moveUp": "Naikkan",
-        "moveDown": "Turun ke bawah",
-        "noSteps": "Belum ada langkah. Tambahkan satu langkah untuk menjelaskan apa yang seharusnya terjadi.",
-        "webhookTokenTitle": "URL Webhook",
-        "webhookTokenDescription": "Ini hanya ditampilkan sekali. Simpan sekarang, karena tidak dapat diambil kembali nanti.",
-        "copy": "Menyalin",
-        "copied": "Disalin",
-        "viewJson": "JSON",
-        "viewBuilder": "Pembangun",
-        "viewGraph": "Grafik",
-        "lastRun": "Lari terakhir",
-        "never": "Tidak pernah",
-        "duration": "{{seconds}}s",
-        "stepOutput": "Keluaran",
-        "stepError": "Kesalahan",
-        "dryRunBadge": "Uji coba",
-        "hostSelector": {
-          "trigger": "Host pemicu",
-          "host": "Host spesifik",
-          "fleet": "Armada",
-          "all": "Semua tuan rumah"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Ambang batas metrik",
-          "host_status": "Pembawa acara naik atau turun",
-          "health_check": "Perubahan pemeriksaan kesehatan",
-          "schedule": "Sesuai jadwal",
-          "docker_event": "Acara kontainer",
-          "internal_event": "Acara Termix",
-          "webhook": "Webhook masuk"
-        },
-        "stepTypes": {
-          "notify": "Kirim peringatan",
-          "http": "Memanggil URL",
-          "run_snippet": "Jalankan cuplikan kode",
-          "run_command": "Jalankan perintah",
-          "docker": "Mengendalikan sebuah kontainer",
-          "tunnel": "Mengendalikan terowongan",
-          "wol": "Bangunkan tuan rumah",
-          "wait": "Tunggu",
-          "set_var": "Tetapkan sebuah variabel",
-          "if": "Jika/sebaliknya",
-          "run_automation": "Jalankan otomatisasi lainnya",
-          "stop": "Berhenti"
-        },
-        "statuses": {
-          "running": "Berlari",
-          "success": "Kesuksesan",
-          "failed": "Gagal",
-          "timeout": "Waktu habis",
-          "skipped": "Dilewati",
-          "cancelled": "Dibatalkan"
-        },
-        "fields": {
-          "host": "Tuan rumah",
-          "metric": "Metrik",
-          "mount": "Titik pemasangan",
-          "operator": "Adalah",
-          "value": "Nilai",
-          "forSeconds": "Berlangsung selama (detik)",
-          "cooldown": "Waktu pendinginan (menit)",
-          "cron": "Ekspresi Cron",
-          "intervalSeconds": "Setiap (detik)",
-          "timezone": "Zona waktu",
-          "timezoneServer": "Waktu server",
-          "timezoneHint": "Waktu Cron dibaca di zona ini. Tidak berlaku untuk jadwal interval.",
-          "container": "Wadah",
-          "command": "Memerintah",
-          "url": "URL",
-          "method": "Metode",
-          "body": "Tubuh",
-          "channels": "Kirim juga ke",
-          "title": "Judul",
-          "message": "Pesan",
-          "snippet": "Potongan",
-          "seconds": "Detik",
-          "conditionLeftPlaceholder": "Nilai yang perlu diperiksa",
-          "conditionRightPlaceholder": "Bandingkan dengan",
-          "variableName": "Nama variabel",
-          "variableValue": "Nilai",
-          "elevated": "Jalankan dengan sudo",
-          "onError": "Jika ini gagal",
-          "allowPrivateNetwork": "Izinkan alamat jaringan lokal",
-          "allowPrivateNetworkHint": "Diperlukan untuk layanan yang dihosting sendiri di LAN Anda. Secara default dinonaktifkan untuk mencegah permintaan ke alamat internal."
-        },
-        "onError": {
-          "stop": "Hentikan larinya",
-          "continue": "Melanjutkan"
-        },
-        "needsPlugin": "Membutuhkan {{plugin}}",
-        "needsPluginHint": "Otomatisasi ini dilewati hingga fitur yang dibutuhkan tersedia kembali.",
-        "offBadge": "Mati",
-        "docsLink": "Lihat dokumen",
-        "ago": {
-          "seconds": "{{count}}detik yang lalu",
-          "minutes": "{{count}} menit lalu",
-          "hours": "{{count}} jam lalu",
-          "days": "{{count}} detik lalu"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Otomatisasi"
-  },
-  "onboarding": {
-    "feature_automations": "Otomatisasi",
-    "feature_automations_desc": "Jalankan langkah-langkah secara otomatis saat sesuatu terjadi, dan dapatkan notifikasi."
-  },
-  "maintenance": {
-    "title": "Pemeliharaan",
-    "description": "Jeda status host, kesehatan, metrik, kontainer, dan otomatisasi pemutusan koneksi terowongan saat pekerjaan sedang berlangsung. Pemantauan, eksekusi manual, dan otomatisasi terjadwal tetap berjalan.",
-    "denied": "Anda tidak memiliki izin untuk melihat pemeliharaan.",
-    "sharedReadOnly": "Host ini dibagikan kepada Anda. Hanya pemiliknya yang dapat mengubah pengaturan pemeliharaan.",
-    "failed": "Informasi pemeliharaan tidak dapat diperbarui.",
-    "active": "Pemeliharaan aktif",
-    "estimated": "Perkiraan penyelesaian",
-    "noAutoEnd": "Estimasi tersebut tidak mengakhiri pemeliharaan. Akhiri secara eksplisit ketika pekerjaan selesai.",
-    "endConfirm": "Akhiri pemeliharaan dan lanjutkan otomatisasi yang dipicu oleh peristiwa untuk host ini?",
-    "confirmEnd": "Konfirmasi akhir",
-    "cancel": "Membatalkan",
-    "end": "Akhir pemeliharaan",
-    "action": "Tindakan",
-    "startNow": "Mulai sekarang",
-    "schedule": "Jadwal untuk nanti",
-    "reason": "Alasan",
-    "startUtc": "Mulai pertama (UTC)",
-    "repeat": "Mengulang",
-    "once": "Sekali",
-    "weekly": "Mingguan",
-    "monthly": "Bulanan",
-    "utcHelp": "Jadwal menggunakan UTC sepanjang tahun. Jadwal bulanan melewatkan bulan-bulan yang tidak memiliki hari yang dipilih. Jendela waktu yang direncanakan tidak dapat tumpang tindih; pemeliharaan yang molor berlanjut ke jendela waktu berikutnya.",
-    "duration": "Perkiraan durasi (menit)",
-    "grace": "Masa tenggang (menit)",
-    "notify": "Beri tahu sekali jika masih offline setelah perkiraan ditambah masa tenggang.",
-    "addSchedule": "Tambahkan jadwal",
-    "schedules": "Jadwal",
-    "noSchedules": "Tidak ada jadwal perawatan.",
-    "completed": "Sudah dimulai",
-    "minutes_one": "{{count}} menit",
-    "minutes_other": "{{count}} menit",
-    "remove": "Hapus jadwal",
-    "loadFailed": "Status pemeliharaan tidak dapat diperbarui. Perubahan dinonaktifkan hingga status dapat dimuat.",
-    "loading": "Memuat status pemeliharaan…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "menghubungkan",
-          "disconnect": "memutuskan",
-          "offline": "offline",
-          "online": "on line",
-          "failing": "kegagalan",
-          "recovered": "pulih"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/it_IT.json b/plugins/automations/locales/translated/it_IT.json
deleted file mode 100644
index d863fecbe..000000000
--- a/plugins/automations/locales/translated/it_IT.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Visualizza le automazioni",
-      "description": "Visualizza le automazioni e la loro cronologia."
-    },
-    "create": {
-      "title": "Creare automazioni",
-      "description": "Aggiungi nuove automazioni."
-    },
-    "edit": {
-      "title": "Automazioni di modifica",
-      "description": "Modifica le automazioni esistenti."
-    },
-    "delete": {
-      "title": "Eliminazione delle automazioni",
-      "description": "Rimuovi le automazioni."
-    },
-    "run": {
-      "title": "Eseguire automazioni",
-      "description": "Attivare un'automazione manualmente."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Automazioni",
-        "tabAutomations": "Automazioni",
-        "tabRuns": "Corse",
-        "tabChannels": "Canali",
-        "createAutomation": "Nuova automazione",
-        "backToAutomations": "Torna alle automazioni",
-        "createTitle": "Nuova automazione",
-        "editTitle": "Automazione di modifica",
-        "empty": "Nessuna automazione ancora disponibile. Creane una per reagire a una metrica, a una pianificazione o a un evento.",
-        "emptyRuns": "Nessuna corsa ancora.",
-        "channelsHint": "I canali sono configurati negli avvisi",
-        "noChannelsHint": "L'avviso viene sempre inviato alla tua casella di posta. Aggiungi i canali agli avvisi per inviarlo anche ad altri destinatari.",
-        "nameLabel": "Nome",
-        "namePlaceholder": "Ad esempio, pulire /data quando è pieno",
-        "nameRequired": "Nome obbligatorio",
-        "descriptionLabel": "Descrizione",
-        "descriptionPlaceholder": "Descrizione opzionale",
-        "enabledLabel": "Abilitato",
-        "concurrencyLabel": "Se è già in esecuzione",
-        "concurrencyHint": "Cosa fare se questo problema si ripresenta prima che l'ultima esecuzione sia terminata.",
-        "concurrency": {
-          "skip": "Salta la nuova corsa",
-          "queue": "Aspetta e corri dopo",
-          "allow": "Eseguili entrambi contemporaneamente"
-        },
-        "save": "Salva",
-        "created": "Automazione creata",
-        "updated": "Automazione salvata",
-        "deleted": "Automazione eliminata",
-        "deleteConfirm": "Eliminare questa automazione? Anche la sua cronologia di esecuzione verrà eliminata.",
-        "runNow": "Corri adesso",
-        "testRun": "Esecuzione del test",
-        "testRunHint": "Esegue ogni passaggio ma non tocca nulla al di fuori di Termix.",
-        "runStarted": "Corsa iniziata",
-        "runFinished": "Corsa terminata: {{status}}",
-        "trigger": "Trigger",
-        "steps": "Passaggi",
-        "addStep": "Aggiungi passaggio",
-        "removeStep": "Rimuovere il passaggio",
-        "moveUp": "Spostarsi verso l'alto",
-        "moveDown": "Scendendo",
-        "noSteps": "Nessun passaggio ancora. Aggiungine uno per specificare cosa dovrebbe succedere.",
-        "webhookTokenTitle": "URL del webhook",
-        "webhookTokenDescription": "Questa immagine viene visualizzata una sola volta. Salvala ora, non sarà possibile recuperarla in seguito.",
-        "copy": "Copia",
-        "copied": "Copiato",
-        "viewJson": "JSON",
-        "viewBuilder": "Costruttore",
-        "viewGraph": "Grafico",
-        "lastRun": "Prima corsa",
-        "never": "Mai",
-        "duration": "{{seconds}}s",
-        "stepOutput": "Output",
-        "stepError": "Errore",
-        "dryRunBadge": "Esecuzione del test",
-        "hostSelector": {
-          "trigger": "Host che ha attivato l'evento",
-          "host": "Ospite specifico",
-          "fleet": "Flotta",
-          "all": "Tutti gli host"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Soglia metrica",
-          "host_status": "L'host sale o scende",
-          "health_check": "modifiche al controllo sanitario",
-          "schedule": "Secondo un programma",
-          "docker_event": "evento contenitore",
-          "internal_event": "Evento Termix",
-          "webhook": "Webhook in entrata"
-        },
-        "stepTypes": {
-          "notify": "Invia un avviso",
-          "http": "Chiamare un medico",
-          "run_snippet": "Esegui uno snippet",
-          "run_command": "Eseguire un comando",
-          "docker": "Controllare un contenitore",
-          "tunnel": "Controllare un tunnel",
-          "wol": "Svegliare un ospite",
-          "wait": "Aspettare",
-          "set_var": "Imposta una variabile",
-          "if": "Se / altrimenti",
-          "run_automation": "Esegui un'altra automazione",
-          "stop": "Stop"
-        },
-        "statuses": {
-          "running": "In esecuzione",
-          "success": "Successo",
-          "failed": "Fallito",
-          "timeout": "Tempo scaduto",
-          "skipped": "Saltato",
-          "cancelled": "Annullato"
-        },
-        "fields": {
-          "host": "Host",
-          "metric": "Metrica",
-          "mount": "Punto di appoggio",
-          "operator": "È",
-          "value": "Valore",
-          "forSeconds": "Sostenuto per (secondi)",
-          "cooldown": "Cooldown (minuti)",
-          "cron": "espressione Cron",
-          "intervalSeconds": "Ogni (secondi)",
-          "timezone": "Fuso orario",
-          "timezoneServer": "Ora del server",
-          "timezoneHint": "In questa zona vengono letti i tempi di Cron. Non si applica alle programmazioni a intervalli.",
-          "container": "Contenitore",
-          "command": "Comando",
-          "url": "URL",
-          "method": "Metodo",
-          "body": "Corpo",
-          "channels": "Invia anche a",
-          "title": "Titolo",
-          "message": "Messaggio",
-          "snippet": "Frammento",
-          "seconds": "secondi",
-          "conditionLeftPlaceholder": "Valore da controllare",
-          "conditionRightPlaceholder": "Confronta con",
-          "variableName": "Nome variabile",
-          "variableValue": "Valore",
-          "elevated": "Esegui con sudo",
-          "onError": "Se questo non funziona",
-          "allowPrivateNetwork": "Consenti indirizzi di rete locale",
-          "allowPrivateNetworkHint": "Necessario per un servizio self-hosted sulla tua LAN. Disattivato per impostazione predefinita per impedire richieste a indirizzi interni."
-        },
-        "onError": {
-          "stop": "Ferma la corsa",
-          "continue": "Proseguire"
-        },
-        "needsPlugin": "Bisogno {{plugin}}",
-        "needsPluginHint": "Questa automazione viene saltata finché la funzionalità necessaria non sarà nuovamente disponibile.",
-        "offBadge": "Disattivo",
-        "docsLink": "Vedi documenti",
-        "ago": {
-          "seconds": "{{count}}secondi fa",
-          "minutes": "{{count}}m fa",
-          "hours": "{{count}}h fa",
-          "days": "{{count}}d fa"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Automazioni"
-  },
-  "onboarding": {
-    "feature_automations": "Automazioni",
-    "feature_automations_desc": "Esegui automaticamente i passaggi quando si verifica un evento e ricevi una notifica."
-  },
-  "maintenance": {
-    "title": "Manutenzione",
-    "description": "Metti in pausa le automazioni relative allo stato dell'host, all'integrità, alle metriche, ai container e alla disconnessione del tunnel durante l'esecuzione dei lavori. Il monitoraggio, le esecuzioni manuali e le automazioni pianificate continuano.",
-    "denied": "Non hai l'autorizzazione per visualizzare gli interventi di manutenzione.",
-    "sharedReadOnly": "Questo host è stato condiviso con te. Solo il proprietario può modificarne la manutenzione.",
-    "failed": "Impossibile aggiornare la manutenzione.",
-    "active": "Manutenzione attiva",
-    "estimated": "Completamento previsto",
-    "noAutoEnd": "Il preventivo non conclude la manutenzione. La sua conclusione va esplicitamente al termine dei lavori.",
-    "endConfirm": "Terminare la manutenzione e riprendere le automazioni attivate da eventi per questo host?",
-    "confirmEnd": "Conferma fine",
-    "cancel": "Annulla",
-    "end": "Manutenzione finale",
-    "action": "Azione",
-    "startNow": "Inizia ora",
-    "schedule": "Programma per dopo",
-    "reason": "Motivo",
-    "startUtc": "Primo inizio (UTC)",
-    "repeat": "Ripetere",
-    "once": "Una volta",
-    "weekly": "Settimanale",
-    "monthly": "Mensile",
-    "utcHelp": "Le pianificazioni utilizzano il fuso orario UTC durante tutto l'anno. Le pianificazioni mensili saltano i mesi in cui non è selezionato il giorno. Le finestre temporali pianificate non possono sovrapporsi; la manutenzione straordinaria si estende anche alle finestre successive.",
-    "duration": "Durata stimata (minuti)",
-    "grace": "Periodo di grazia (minuti)",
-    "notify": "Avvisami una volta se rimani ancora offline dopo il periodo stimato più il periodo di tolleranza.",
-    "addSchedule": "Aggiungi programma",
-    "schedules": "Orari",
-    "noSchedules": "Nessun programma di manutenzione.",
-    "completed": "iniziato",
-    "minutes_one": "{{count}} minuto",
-    "minutes_other": "{{count}} minuti",
-    "remove": "Rimuovere la pianificazione",
-    "loadFailed": "Impossibile aggiornare lo stato della manutenzione. Le modifiche sono disabilitate fino al caricamento.",
-    "loading": "Caricamento dello stato di manutenzione…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "connetti",
-          "disconnect": "disconnetti",
-          "offline": "offline",
-          "online": "online",
-          "failing": "fallire",
-          "recovered": "recuperato"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/ja_JP.json b/plugins/automations/locales/translated/ja_JP.json
deleted file mode 100644
index 886b99d4f..000000000
--- a/plugins/automations/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "自動化を表示する",
-      "description": "自動化処理とその履歴をご覧ください。"
-    },
-    "create": {
-      "title": "自動化を作成する",
-      "description": "新しい自動化機能を追加します。"
-    },
-    "edit": {
-      "title": "自動化を編集する",
-      "description": "既存の自動化プロセスを変更します。"
-    },
-    "delete": {
-      "title": "自動化を削除する",
-      "description": "自動化機能を削除してください。"
-    },
-    "run": {
-      "title": "自動化を実行する",
-      "description": "自動化処理を手動で起動する。"
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "自動化",
-        "tabAutomations": "自動化",
-        "tabRuns": "走る",
-        "tabChannels": "チャンネル",
-        "createAutomation": "新しい自動化",
-        "backToAutomations": "自動化に戻る",
-        "createTitle": "新しい自動化",
-        "editTitle": "編集自動化",
-        "empty": "自動化はまだ設定されていません。指標、スケジュール、またはイベントに応じて自動化を設定してください。",
-        "emptyRuns": "まだ得点はありません。",
-        "channelsHint": "アラートでチャンネルを設定します",
-        "noChannelsHint": "アラートは常に受信トレイに届きます。アラート設定でチャネルを追加すれば、他の場所にも送信できます。",
-        "nameLabel": "名前",
-        "namePlaceholder": "例：/data がいっぱいになったらクリーンアップする",
-        "nameRequired": "名前は必須です",
-        "descriptionLabel": "説明",
-        "descriptionPlaceholder": "任意の説明",
-        "enabledLabel": "有効",
-        "concurrencyLabel": "既に実行中の場合",
-        "concurrencyHint": "前回の実行が終了する前に、これが再び発生した場合の対処法。",
-        "concurrency": {
-          "skip": "新しいランをスキップ",
-          "queue": "待ってから追いかける",
-          "allow": "両方を同時に実行する"
-        },
-        "save": "保存",
-        "created": "自動化によって作成されました",
-        "updated": "自動化が保存されました",
-        "deleted": "自動化が削除されました",
-        "deleteConfirm": "この自動化を削除すると、実行履歴も削除されます。",
-        "runNow": "今すぐ実行",
-        "testRun": "試運転",
-        "testRunHint": "すべてのステップを実行しますが、Termix以外のものには一切触れません。",
-        "runStarted": "ランニング開始",
-        "runFinished": "実行完了: {{status}}",
-        "trigger": "トリガー",
-        "steps": "手順",
-        "addStep": "ステップを追加する",
-        "removeStep": "削除手順",
-        "moveUp": "上へ進む",
-        "moveDown": "下へ移動",
-        "noSteps": "まだ手順がありません。何が起こるべきかを記述する手順を追加してください。",
-        "webhookTokenTitle": "Webhook URL",
-        "webhookTokenDescription": "これは一度しか表示されません。今すぐ保存してください。後で取り出すことはできません。",
-        "copy": "コピー",
-        "copied": "コピーしました",
-        "viewJson": "JSON",
-        "viewBuilder": "ビルダー",
-        "viewGraph": "グラフ",
-        "lastRun": "最後の走行",
-        "never": "なし",
-        "duration": "{{seconds}}s",
-        "stepOutput": "出力",
-        "stepError": "エラー",
-        "dryRunBadge": "試運転",
-        "hostSelector": {
-          "trigger": "トリガーホスト",
-          "host": "特定の宿主",
-          "fleet": "艦隊",
-          "all": "すべてのホスト"
-        },
-        "triggerKinds": {
-          "metric_threshold": "メトリックしきい値",
-          "host_status": "ホストが起動または停止する",
-          "health_check": "健康チェックの変更点",
-          "schedule": "スケジュール通りに",
-          "docker_event": "コンテナイベント",
-          "internal_event": "ターミックスイベント",
-          "webhook": "受信ウェブフック"
-        },
-        "stepTypes": {
-          "notify": "アラートを送信する",
-          "http": "URLを呼び出す",
-          "run_snippet": "スニペットを実行する",
-          "run_command": "コマンドを実行する",
-          "docker": "コンテナを制御する",
-          "tunnel": "トンネルを制御する",
-          "wol": "ホストを起こす",
-          "wait": "待って",
-          "set_var": "変数を設定する",
-          "if": "もし／そうでなければ",
-          "run_automation": "別の自動化を実行する",
-          "stop": "ストップ"
-        },
-        "statuses": {
-          "running": "実行中",
-          "success": "成功",
-          "failed": "失敗",
-          "timeout": "タイムアウト",
-          "skipped": "スキップしました",
-          "cancelled": "キャンセル"
-        },
-        "fields": {
-          "host": "ホスト",
-          "metric": "メトリック",
-          "mount": "取り付けポイント",
-          "operator": "は",
-          "value": "価値",
-          "forSeconds": "（秒）の間持続",
-          "cooldown": "クールダウン（分）",
-          "cron": "Cron発現",
-          "intervalSeconds": "（秒）ごとに",
-          "timezone": "タイムゾーン",
-          "timezoneServer": "サーバー時間",
-          "timezoneHint": "このゾーンでは、cronの実行時間が読み取られます。インターバルスケジュールには適用されません。",
-          "container": "容器",
-          "command": "コマンド",
-          "url": "URL",
-          "method": "方法",
-          "body": "体",
-          "channels": "また、以下へも送信してください。",
-          "title": "タイトル",
-          "message": "メッセージ",
-          "snippet": "抜粋",
-          "seconds": "秒",
-          "conditionLeftPlaceholder": "チェックすべき値",
-          "conditionRightPlaceholder": "比較対象",
-          "variableName": "変数名",
-          "variableValue": "価値",
-          "elevated": "sudo を付けて実行",
-          "onError": "これが失敗した場合",
-          "allowPrivateNetwork": "ローカルネットワークアドレスを許可する",
-          "allowPrivateNetworkHint": "LAN上でセルフホスト型サービスを実行する場合に必要です。内部アドレスへのリクエストを防ぐため、デフォルトでは無効になっています。"
-        },
-        "onError": {
-          "stop": "走るのをやめろ",
-          "continue": "続ける"
-        },
-        "needsPlugin": "必要数 {{plugin}}",
-        "needsPluginHint": "この自動化処理は、必要な機能が再び利用可能になるまでスキップされます。",
-        "offBadge": "オフ",
-        "docsLink": "ドキュメントを見る",
-        "ago": {
-          "seconds": "{{count}}秒前",
-          "minutes": "{{count}}分前",
-          "hours": "{{count}}時間前",
-          "days": "{{count}}日前"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "自動化"
-  },
-  "onboarding": {
-    "feature_automations": "自動化",
-    "feature_automations_desc": "何かが発生した際に自動的に手順を実行し、通知を受け取ります。"
-  },
-  "maintenance": {
-    "title": "メンテナンス",
-    "description": "作業中は、ホストの状態、健全性、メトリック、コンテナ、トンネル切断に関する自動化処理を一時停止します。監視、手動実行、およびスケジュールされた自動化処理は継続されます。",
-    "denied": "メンテナンス情報を閲覧する権限がありません。",
-    "sharedReadOnly": "このホストはあなたと共有されています。メンテナンス設定を変更できるのは所有者のみです。",
-    "failed": "メンテナンスの更新ができませんでした。",
-    "active": "メンテナンスが有効です",
-    "estimated": "完成予定",
-    "noAutoEnd": "見積もりはメンテナンスの終了を意味するものではありません。作業が完了した時点で、明示的に終了してください。",
-    "endConfirm": "このホストのメンテナンスを終了し、イベントトリガーによる自動化を再開しますか？",
-    "confirmEnd": "終了を確認する",
-    "cancel": "キャンセル",
-    "end": "最終メンテナンス",
-    "action": "アクション",
-    "startNow": "今すぐ始めましょう",
-    "schedule": "後でスケジュールする",
-    "reason": "理由",
-    "startUtc": "最初の開始時刻（UTC）",
-    "repeat": "繰り返す",
-    "once": "一度",
-    "weekly": "毎週",
-    "monthly": "月刊",
-    "utcHelp": "年間を通してスケジュールはUTCを使用します。月間スケジュールでは、選択した日がない月はスキップされます。計画された作業期間は重複できません。作業期間が超過した場合、その超過作業は後の作業期間にも引き継がれます。",
-    "duration": "所要時間の目安（分）",
-    "grace": "猶予期間（分）",
-    "notify": "推定期間と猶予期間を過ぎてもオフライン状態が続く場合は、一度通知してください。",
-    "addSchedule": "スケジュールを追加",
-    "schedules": "スケジュール",
-    "noSchedules": "メンテナンススケジュールはありません。",
-    "completed": "既に開始済み",
-    "minutes_one": "{{count}} 分",
-    "minutes_other": "{{count}} 分",
-    "remove": "スケジュールを削除",
-    "loadFailed": "メンテナンス状況を更新できませんでした。読み込みが完了するまで、変更は無効になっています。",
-    "loading": "メンテナンスステータスをロード中…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "接続",
-          "disconnect": "切断",
-          "offline": "オフライン",
-          "online": "オンライン",
-          "failing": "失敗する",
-          "recovered": "回復した"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/ko_KR.json b/plugins/automations/locales/translated/ko_KR.json
deleted file mode 100644
index 3ba06c36b..000000000
--- a/plugins/automations/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "자동화 보기",
-      "description": "자동화 기능과 그 이력을 확인하세요."
-    },
-    "create": {
-      "title": "자동화를 생성하세요",
-      "description": "새로운 자동화를 추가하세요."
-    },
-    "edit": {
-      "title": "자동화 편집",
-      "description": "기존 자동화 설정을 변경하세요."
-    },
-    "delete": {
-      "title": "자동화 삭제",
-      "description": "자동화 기능을 제거하세요."
-    },
-    "run": {
-      "title": "자동화 실행",
-      "description": "자동화 기능을 수동으로 실행합니다."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "자동화",
-        "tabAutomations": "자동화",
-        "tabRuns": "실행",
-        "tabChannels": "채널",
-        "createAutomation": "새로운 자동화",
-        "backToAutomations": "자동화 목록으로 돌아가기",
-        "createTitle": "새로운 자동화",
-        "editTitle": "편집 자동화",
-        "empty": "아직 자동화가 설정되어 있지 않습니다. 지표, 일정 또는 이벤트에 반응하는 자동화를 생성하세요.",
-        "emptyRuns": "아직 실행된 적이 없습니다.",
-        "channelsHint": "알림에 채널이 설정됩니다.",
-        "noChannelsHint": "알림은 항상 받은 편지함으로 전송됩니다. 알림 설정에서 채널을 추가하면 다른 곳으로도 알림을 보낼 수 있습니다.",
-        "nameLabel": "이름",
-        "namePlaceholder": "예: /data 디렉토리가 가득 차면 정리합니다.",
-        "nameRequired": "이름은 필수입니다",
-        "descriptionLabel": "설명",
-        "descriptionPlaceholder": "선택 사항 설명",
-        "enabledLabel": "사용",
-        "concurrencyLabel": "이미 실행 중인 경우",
-        "concurrencyHint": "마지막 실행이 완료되기 전에 이 문제가 다시 발생할 경우 어떻게 해야 할까요?",
-        "concurrency": {
-          "skip": "새로운 실행을 건너뛰세요",
-          "queue": "기다렸다가 실행하세요",
-          "allow": "두 가지를 동시에 실행하세요"
-        },
-        "save": "저장",
-        "created": "자동화 생성됨",
-        "updated": "자동화 저장됨",
-        "deleted": "자동화 삭제됨",
-        "deleteConfirm": "이 자동화를 삭제하시겠습니까? 실행 기록도 함께 삭제됩니다.",
-        "runNow": "지금 실행하세요",
-        "testRun": "테스트 실행",
-        "testRunHint": "모든 단계를 실행하지만 Termix 외부의 어떤 것도 건드리지 않습니다.",
-        "runStarted": "실행 시작됨",
-        "runFinished": "실행 완료: {{status}}",
-        "trigger": "트리거",
-        "steps": "단계",
-        "addStep": "단계 추가",
-        "removeStep": "제거 단계",
-        "moveUp": "위로 이동",
-        "moveDown": "아래로 이동",
-        "noSteps": "아직 단계가 없습니다. 어떤 일이 일어나야 하는지 설명하는 단계를 추가하세요.",
-        "webhookTokenTitle": "웹훅 URL",
-        "webhookTokenDescription": "이 내용은 한 번만 표시됩니다. 지금 저장하세요. 나중에 다시 불러올 수 없습니다.",
-        "copy": "복사",
-        "copied": "복사됨",
-        "viewJson": "JSON",
-        "viewBuilder": "건축업자",
-        "viewGraph": "그래프",
-        "lastRun": "마지막 실행",
-        "never": "없음",
-        "duration": "{{seconds}}s",
-        "stepOutput": "출력",
-        "stepError": "오류",
-        "dryRunBadge": "테스트 실행",
-        "hostSelector": {
-          "trigger": "트리거링 호스트",
-          "host": "특정 호스트",
-          "fleet": "함대",
-          "all": "모든 호스트"
-        },
-        "triggerKinds": {
-          "metric_threshold": "측정 임계값",
-          "host_status": "호스트가 올라가거나 내려갑니다.",
-          "health_check": "건강 검진 변경 사항",
-          "schedule": "정해진 일정에 따라",
-          "docker_event": "컨테이너 이벤트",
-          "internal_event": "터믹스 이벤트",
-          "webhook": "수신 웹훅"
-        },
-        "stepTypes": {
-          "notify": "알림을 보내세요",
-          "http": "URL을 호출합니다",
-          "run_snippet": "코드 조각을 실행하세요",
-          "run_command": "명령어를 실행하세요",
-          "docker": "컨테이너를 제어하세요",
-          "tunnel": "터널을 제어하세요",
-          "wol": "호스트를 깨우세요",
-          "wait": "기다리다",
-          "set_var": "변수를 설정하세요",
-          "if": "만약 / 그렇지 않다면",
-          "run_automation": "다른 자동화를 실행합니다",
-          "stop": "스톱"
-        },
-        "statuses": {
-          "running": "실행 중",
-          "success": "성공",
-          "failed": "실패",
-          "timeout": "시간 초과됨",
-          "skipped": "건너뛰었습니다",
-          "cancelled": "취소"
-        },
-        "fields": {
-          "host": "호스트",
-          "metric": "메트릭",
-          "mount": "마운트 포인트",
-          "operator": "~이다",
-          "value": "값",
-          "forSeconds": "(초) 동안 지속됨",
-          "cooldown": "쿨다운 (분)",
-          "cron": "크론 발현",
-          "intervalSeconds": "매 (초)",
-          "timezone": "시간대",
-          "timezoneServer": "서버 시간",
-          "timezoneHint": "크론 시간은 이 영역에서 읽습니다. 간격 스케줄에는 적용되지 않습니다.",
-          "container": "컨테이너",
-          "command": "명령",
-          "url": "URL",
-          "method": "방법",
-          "body": "몸",
-          "channels": "또한 다음에도 보내주세요",
-          "title": "제목",
-          "message": "메시지",
-          "snippet": "단편",
-          "seconds": "초",
-          "conditionLeftPlaceholder": "확인할 값",
-          "conditionRightPlaceholder": "~와 비교하세요",
-          "variableName": "변수 이름",
-          "variableValue": "값",
-          "elevated": "sudo를 사용하여 실행하세요",
-          "onError": "이것이 실패하면",
-          "allowPrivateNetwork": "로컬 네트워크 주소를 허용합니다",
-          "allowPrivateNetworkHint": "LAN에서 자체 호스팅 서비스를 운영하는 데 필요합니다. 내부 주소로의 요청을 방지하기 위해 기본적으로 비활성화되어 있습니다."
-        },
-        "onError": {
-          "stop": "달리기를 멈춰라",
-          "continue": "계속하세요"
-        },
-        "needsPlugin": "{{plugin}}가 필요합니다",
-        "needsPluginHint": "이 자동화 작업은 필요한 기능이 다시 사용 가능해질 때까지 건너뛰어집니다.",
-        "offBadge": "꺼짐",
-        "docsLink": "문서 보기",
-        "ago": {
-          "seconds": "{{count}}초 전",
-          "minutes": "{{count}}분 전",
-          "hours": "{{count}}시간 전",
-          "days": "{{count}}일 전"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "자동화"
-  },
-  "onboarding": {
-    "feature_automations": "자동화",
-    "feature_automations_desc": "어떤 상황이 발생하면 자동으로 단계를 실행하고 알림을 받으세요."
-  },
-  "maintenance": {
-    "title": "유지 관리",
-    "description": "작업이 진행되는 동안 호스트 상태, 상태 모니터링, 메트릭 모니터링, 컨테이너 모니터링 및 터널 연결 해제 자동화가 일시 중지됩니다. 모니터링, 수동 실행 및 예약된 자동화는 계속 실행됩니다.",
-    "denied": "유지보수 화면을 볼 권한이 없습니다.",
-    "sharedReadOnly": "이 호스트는 귀하와 공유되었습니다. 유지 관리 변경은 호스트 소유자만 할 수 있습니다.",
-    "failed": "유지보수 업데이트를 할 수 없습니다.",
-    "active": "유지보수 중",
-    "estimated": "예상 완료일",
-    "noAutoEnd": "견적은 유지보수를 종료하는 것이 아닙니다. 작업이 완료되면 명시적으로 유지보수를 종료하십시오.",
-    "endConfirm": "이 호스트에 대한 유지 관리를 종료하고 이벤트 기반 자동화를 다시 시작하시겠습니까?",
-    "confirmEnd": "종료 확인",
-    "cancel": "취소",
-    "end": "유지보수 종료",
-    "action": "작업",
-    "startNow": "지금 시작하세요",
-    "schedule": "나중에 일정 잡기",
-    "reason": "이유",
-    "startUtc": "첫 시작 (UTC)",
-    "repeat": "반복하다",
-    "once": "한 번",
-    "weekly": "주간",
-    "monthly": "월간 간행물",
-    "utcHelp": "일정은 연중 UTC를 기준으로 합니다. 월별 일정은 선택한 날짜가 없는 달은 건너뜁니다. 계획된 기간은 겹칠 수 없으며, 연장된 유지 보수 작업은 이후 기간에도 계속됩니다.",
-    "duration": "예상 소요 시간(분)",
-    "grace": "유예 기간(분)",
-    "notify": "예상 시간 및 유예 기간이 지난 후에도 오프라인 상태인 경우 한 번만 알림을 보내주세요.",
-    "addSchedule": "일정을 추가하세요",
-    "schedules": "일정",
-    "noSchedules": "정기 유지보수 일정이 없습니다.",
-    "completed": "이미 시작했습니다",
-    "minutes_one": "{{count}} 분",
-    "minutes_other": "{{count}} 분",
-    "remove": "일정을 삭제합니다",
-    "loadFailed": "점검 상태를 새로 고칠 수 없습니다. 점검 상태가 로드될 때까지 변경 사항이 적용되지 않습니다.",
-    "loading": "유지보수 상태 로딩 중…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "연결",
-          "disconnect": "연결 해제",
-          "offline": "오프라인",
-          "online": "온라인",
-          "failing": "실패",
-          "recovered": "회복됨"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/nl_NL.json b/plugins/automations/locales/translated/nl_NL.json
deleted file mode 100644
index 297b0d876..000000000
--- a/plugins/automations/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Automatiseringen bekijken",
-      "description": "Bekijk de automatiseringen en hun geschiedenis."
-    },
-    "create": {
-      "title": "Automatiseringen maken",
-      "description": "Voeg nieuwe automatiseringen toe."
-    },
-    "edit": {
-      "title": "Automatiseringen bewerken",
-      "description": "Wijzig bestaande automatiseringsprocessen."
-    },
-    "delete": {
-      "title": "Automatiseringen verwijderen",
-      "description": "Automatiseringen uitschakelen."
-    },
-    "run": {
-      "title": "Automatiseringen uitvoeren",
-      "description": "Activeer een automatisering handmatig."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Automatiseringen",
-        "tabAutomations": "Automatiseringen",
-        "tabRuns": "Loopt",
-        "tabChannels": "Kanalen",
-        "createAutomation": "Nieuwe automatisering",
-        "backToAutomations": "Terug naar automatiseringen",
-        "createTitle": "Nieuwe automatisering",
-        "editTitle": "Automatisering bewerken",
-        "empty": "Nog geen automatiseringen. Maak er een aan die reageert op een meetwaarde, een planning of een gebeurtenis.",
-        "emptyRuns": "Nog geen runs.",
-        "channelsHint": "Kanalen worden ingesteld in waarschuwingen.",
-        "noChannelsHint": "De melding komt altijd in je inbox terecht. Voeg kanalen toe in Meldingen om de melding ook naar een andere locatie te verzenden.",
-        "nameLabel": "Naam",
-        "namePlaceholder": "Bijvoorbeeld: maak /data leeg wanneer het vol is.",
-        "nameRequired": "Naam is verplicht",
-        "descriptionLabel": "Beschrijving",
-        "descriptionPlaceholder": "Optionele beschrijving",
-        "enabledLabel": "Ingeschakeld",
-        "concurrencyLabel": "Als het al draait",
-        "concurrencyHint": "Wat te doen als dit opnieuw wordt geactiveerd voordat de laatste run is voltooid?",
-        "concurrency": {
-          "skip": "Sla de nieuwe run over",
-          "queue": "Wacht en ren erachteraan.",
-          "allow": "Voer ze allebei tegelijk uit"
-        },
-        "save": "Redden",
-        "created": "Automatisering gecreëerd",
-        "updated": "Automatisering opgeslagen",
-        "deleted": "Automatisering verwijderd",
-        "deleteConfirm": "Als je deze automatisering verwijdert, wordt ook de uitvoeringsgeschiedenis ervan verwijderd.",
-        "runNow": "Ren nu",
-        "testRun": "Testrun",
-        "testRunHint": "Het voert elke stap uit, maar raakt niets buiten Termix aan.",
-        "runStarted": "De run is gestart.",
-        "runFinished": "Run voltooid: {{status}}",
-        "trigger": "Trekker",
-        "steps": "Stappen",
-        "addStep": "Voeg stap toe",
-        "removeStep": "Verwijder stap",
-        "moveUp": "Omhoog gaan",
-        "moveDown": "Ga naar beneden",
-        "noSteps": "Nog geen stappen. Voeg er een toe om aan te geven wat er moet gebeuren.",
-        "webhookTokenTitle": "Webhook-URL",
-        "webhookTokenDescription": "Dit wordt eenmalig weergegeven. Sla het nu op, het kan later niet meer worden opgevraagd.",
-        "copy": "Kopiëren",
-        "copied": "Gekopieerd",
-        "viewJson": "JSON",
-        "viewBuilder": "Bouwer",
-        "viewGraph": "Grafiek",
-        "lastRun": "Laatste run",
-        "never": "Nooit",
-        "duration": "{{seconds}}s",
-        "stepOutput": "Uitvoer",
-        "stepError": "Fout",
-        "dryRunBadge": "Testrun",
-        "hostSelector": {
-          "trigger": "Activerende host",
-          "host": "Specifieke gastheer",
-          "fleet": "Vloot",
-          "all": "Alle hosts"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Metrische drempelwaarde",
-          "host_status": "De host gaat omhoog of omlaag.",
-          "health_check": "Wijzigingen in de gezondheidscontrole",
-          "schedule": "Volgens een schema",
-          "docker_event": "Container-gebeurtenis",
-          "internal_event": "Termix-evenement",
-          "webhook": "Inkomende webhook"
-        },
-        "stepTypes": {
-          "notify": "Verzend een melding",
-          "http": "Roep een URL aan",
-          "run_snippet": "Voer een codefragment uit",
-          "run_command": "Voer een opdracht uit",
-          "docker": "Een container besturen",
-          "tunnel": "Beheer een tunnel",
-          "wol": "Maak een gastheer wakker",
-          "wait": "Wachten",
-          "set_var": "Een variabele instellen",
-          "if": "Indien / anders",
-          "run_automation": "Voer nog een automatisering uit",
-          "stop": "Stop"
-        },
-        "statuses": {
-          "running": "Rennen",
-          "success": "Succes",
-          "failed": "Mislukt",
-          "timeout": "De tijd is verlopen.",
-          "skipped": "Overgeslagen",
-          "cancelled": "Geannuleerd"
-        },
-        "fields": {
-          "host": "Gastheer",
-          "metric": "Metrisch",
-          "mount": "Bergpunt",
-          "operator": "Is",
-          "value": "Waarde",
-          "forSeconds": "Aangehouden gedurende (seconden)",
-          "cooldown": "Afkoeltijd (minuten)",
-          "cron": "Cron-expressie",
-          "intervalSeconds": "Elke (seconden)",
-          "timezone": "Tijdzone",
-          "timezoneServer": "Servertijd",
-          "timezoneHint": "In deze zone worden de cron-tijden gelezen. Dit geldt niet voor intervalschema's.",
-          "container": "Container",
-          "command": "Commando",
-          "url": "URL",
-          "method": "Methode",
-          "body": "Lichaam",
-          "channels": "Ook verzenden naar",
-          "title": "Titel",
-          "message": "Bericht",
-          "snippet": "Fragment",
-          "seconds": "Seconden",
-          "conditionLeftPlaceholder": "Waarde om te controleren",
-          "conditionRightPlaceholder": "Vergelijk met",
-          "variableName": "Variabelenaam",
-          "variableValue": "Waarde",
-          "elevated": "Uitvoeren met sudo",
-          "onError": "Als dit mislukt",
-          "allowPrivateNetwork": "Sta lokale netwerkadressen toe.",
-          "allowPrivateNetworkHint": "Nodig voor een zelfgehoste service op uw LAN. Standaard uitgeschakeld om verzoeken naar interne adressen te voorkomen."
-        },
-        "onError": {
-          "stop": "Stop de loop",
-          "continue": "Ga zo door"
-        },
-        "needsPlugin": "Vereist {{plugin}}",
-        "needsPluginHint": "Deze automatisering wordt overgeslagen totdat de benodigde functie weer beschikbaar is.",
-        "offBadge": "Uit",
-        "docsLink": "Documenten bekijken",
-        "ago": {
-          "seconds": "{{count}}s geleden",
-          "minutes": "{{count}}m geleden",
-          "hours": "{{count}}uur geleden",
-          "days": "{{count}}dagen geleden"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Automatiseringen"
-  },
-  "onboarding": {
-    "feature_automations": "Automatiseringen",
-    "feature_automations_desc": "Voer stappen automatisch uit wanneer er iets gebeurt en ontvang meldingen."
-  },
-  "maintenance": {
-    "title": "Onderhoud",
-    "description": "Pauzeer de automatiseringsprocessen voor hoststatus, gezondheid, metrics, containers en tunnelontkoppeling terwijl de werkzaamheden worden uitgevoerd. Monitoring, handmatige uitvoeringen en geplande automatiseringsprocessen worden wel voortgezet.",
-    "denied": "U hebt geen toestemming om onderhoudswerkzaamheden te bekijken.",
-    "sharedReadOnly": "Deze host is met u gedeeld. Alleen de eigenaar kan het onderhoud wijzigen.",
-    "failed": "Het onderhoud kon niet worden bijgewerkt.",
-    "active": "Onderhoud actief",
-    "estimated": "Geschatte voltooiing",
-    "noAutoEnd": "De begroting beëindigt het onderhoud niet. Beëindig het expliciet wanneer de werkzaamheden zijn voltooid.",
-    "endConfirm": "Onderhoud beëindigen en gebeurtenisgestuurde automatiseringen voor deze host hervatten?",
-    "confirmEnd": "Bevestig einde",
-    "cancel": "Annuleren",
-    "end": "Einde onderhoud",
-    "action": "Actie",
-    "startNow": "Begin nu",
-    "schedule": "Plan voor later",
-    "reason": "Reden",
-    "startUtc": "Eerste start (UTC)",
-    "repeat": "Herhalen",
-    "once": "Eenmaal",
-    "weekly": "Wekelijks",
-    "monthly": "Maandelijks",
-    "utcHelp": "De planning gebruikt het hele jaar door UTC. Maandelijkse planningen slaan maanden over waarin de geselecteerde dag niet voorkomt. Geplande onderhoudsvensters mogen elkaar niet overlappen; uitlopend onderhoud wordt voortgezet in latere vensters.",
-    "duration": "Geschatte duur (minuten)",
-    "grace": "Respijtperiode (minuten)",
-    "notify": "Eenmalige melding verzenden indien de verbinding na de geschatte tijd plus de respijtperiode nog steeds verbroken is.",
-    "addSchedule": "Voeg een schema toe",
-    "schedules": "Roosters",
-    "noSchedules": "Geen onderhoudsschema's.",
-    "completed": "Reeds begonnen",
-    "minutes_one": "{{count}} minuut",
-    "minutes_other": "{{count}} minuten",
-    "remove": "Schema verwijderen",
-    "loadFailed": "De onderhoudsstatus kon niet worden vernieuwd. Wijzigingen zijn uitgeschakeld totdat de status kan worden geladen.",
-    "loading": "Onderhoudsstatus laden…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "verbinden",
-          "disconnect": "ontkoppeling",
-          "offline": "offline",
-          "online": "online",
-          "failing": "falen",
-          "recovered": "hersteld"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/no_NO.json b/plugins/automations/locales/translated/no_NO.json
deleted file mode 100644
index 23851599c..000000000
--- a/plugins/automations/locales/translated/no_NO.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Se automatiseringer",
-      "description": "Se automatiseringene og historikken deres."
-    },
-    "create": {
-      "title": "Opprett automatiseringer",
-      "description": "Legg til nye automatiseringer."
-    },
-    "edit": {
-      "title": "Rediger automatiseringer",
-      "description": "Endre eksisterende automatiseringer."
-    },
-    "delete": {
-      "title": "Slett automatiseringer",
-      "description": "Fjern automatiseringer."
-    },
-    "run": {
-      "title": "Kjør automatiseringer",
-      "description": "Utløs en automatisering manuelt."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Automatiseringer",
-        "tabAutomations": "Automatiseringer",
-        "tabRuns": "Løper",
-        "tabChannels": "Kanaler",
-        "createAutomation": "Ny automatisering",
-        "backToAutomations": "Tilbake til automatiseringer",
-        "createTitle": "Ny automatisering",
-        "editTitle": "Rediger automatisering",
-        "empty": "Ingen automatiseringer ennå. Opprett en for å reagere på en beregning, en tidsplan eller en hendelse.",
-        "emptyRuns": "Ingen løp ennå.",
-        "channelsHint": "Kanaler er satt opp i varsler",
-        "noChannelsHint": "Varselet går alltid til innboksen din. Legg til kanaler i varsler for å også sende det et annet sted.",
-        "nameLabel": "Navn",
-        "namePlaceholder": "f.eks. Rydd opp i /data når den fylles",
-        "nameRequired": "Navn er påkrevd",
-        "descriptionLabel": "Beskrivelse",
-        "descriptionPlaceholder": "Valgfri beskrivelse",
-        "enabledLabel": "Aktivert",
-        "concurrencyLabel": "Hvis den allerede kjører",
-        "concurrencyHint": "Hva skal man gjøre når dette utløses igjen før siste kjøring er ferdig?",
-        "concurrency": {
-          "skip": "Hopp over den nye kjøringen",
-          "queue": "Vent og løp etter",
-          "allow": "Kjør begge samtidig"
-        },
-        "save": "Lagre",
-        "created": "Automatisering opprettet",
-        "updated": "Automatisering lagret",
-        "deleted": "Automatisering slettet",
-        "deleteConfirm": "Vil du slette denne automatiseringen? Kjørehistorikken slettes også.",
-        "runNow": "Løp nå",
-        "testRun": "Testkjøring",
-        "testRunHint": "Kjører hvert trinn, men berører ikke noe utenfor Termix.",
-        "runStarted": "Løpet startet",
-        "runFinished": "Kjøring fullført: {{status}}",
-        "trigger": "Avtrekker",
-        "steps": "Trinn",
-        "addStep": "Legg til trinn",
-        "removeStep": "Fjern trinn",
-        "moveUp": "Flytt opp",
-        "moveDown": "Flytt ned",
-        "noSteps": "Ingen trinn ennå. Legg til ett for å si hva som skal skje.",
-        "webhookTokenTitle": "Webhook-URL",
-        "webhookTokenDescription": "Dette vises én gang. Lagre det nå, det kan ikke hentes frem senere.",
-        "copy": "Kopier",
-        "copied": "Kopiert",
-        "viewJson": "JSON",
-        "viewBuilder": "Bygger",
-        "viewGraph": "Kurve",
-        "lastRun": "Siste løp",
-        "never": "Aldri",
-        "duration": "{{seconds}}s",
-        "stepOutput": "Produksjon",
-        "stepError": "Feil",
-        "dryRunBadge": "Testkjøring",
-        "hostSelector": {
-          "trigger": "Utløsende vert",
-          "host": "Spesifikk vert",
-          "fleet": "Flåte",
-          "all": "Alle verter"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Metrisk terskel",
-          "host_status": "Verten går opp eller ned",
-          "health_check": "Endringer i helsesjekken",
-          "schedule": "På en tidsplan",
-          "docker_event": "Containerhendelse",
-          "internal_event": "Termix-arrangementet",
-          "webhook": "Innkommende webhook"
-        },
-        "stepTypes": {
-          "notify": "Send et varsel",
-          "http": "Kall en URL",
-          "run_snippet": "Kjør et utdrag",
-          "run_command": "Kjør en kommando",
-          "docker": "Kontroller en container",
-          "tunnel": "Kontroller en tunnel",
-          "wol": "Vekk en vert",
-          "wait": "Vente",
-          "set_var": "Angi en variabel",
-          "if": "Hvis / ellers",
-          "run_automation": "Kjør en annen automatisering",
-          "stop": "Stopp"
-        },
-        "statuses": {
-          "running": "Kjører",
-          "success": "Suksess",
-          "failed": "Mislyktes",
-          "timeout": "Tidsavbrutt",
-          "skipped": "Hoppet over",
-          "cancelled": "Avlyst"
-        },
-        "fields": {
-          "host": "Vert",
-          "metric": "Metrisk",
-          "mount": "Monteringspunkt",
-          "operator": "Er",
-          "value": "Verdi",
-          "forSeconds": "Vedvarende i (sekunder)",
-          "cooldown": "Nedkjølingstid (minutter)",
-          "cron": "Cron-uttrykk",
-          "intervalSeconds": "Hvert (sekund)",
-          "timezone": "Tidssone",
-          "timezoneServer": "Servertid",
-          "timezoneHint": "Cron-tider leses i denne sonen. Gjelder ikke for intervallplaner.",
-          "container": "Container",
-          "command": "Kommando",
-          "url": "URL-adresse",
-          "method": "Metode",
-          "body": "Kropp",
-          "channels": "Send også til",
-          "title": "Tittel",
-          "message": "Beskjed",
-          "snippet": "Utdrag",
-          "seconds": "Sekunder",
-          "conditionLeftPlaceholder": "Verdi å sjekke",
-          "conditionRightPlaceholder": "Sammenlign mot",
-          "variableName": "Variabelnavn",
-          "variableValue": "Verdi",
-          "elevated": "Kjør med sudo",
-          "onError": "Hvis dette mislykkes",
-          "allowPrivateNetwork": "Tillat lokale nettverksadresser",
-          "allowPrivateNetworkHint": "Nødvendig for en selvhostet tjeneste på LAN-et ditt. Av som standard for å forhindre forespørsler til interne adresser."
-        },
-        "onError": {
-          "stop": "Stopp løpet",
-          "continue": "Fortsett"
-        },
-        "needsPlugin": "Trenger {{plugin}}",
-        "needsPluginHint": "Denne automatiseringen hoppes over inntil funksjonen den trenger er tilgjengelig igjen.",
-        "offBadge": "Av",
-        "docsLink": "Vis dokumenter",
-        "ago": {
-          "seconds": "For {{count}}sekunder siden",
-          "minutes": "For {{count}}minutter siden",
-          "hours": "for {{count}}t siden",
-          "days": "for {{count}}dager siden"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Automatiseringer"
-  },
-  "onboarding": {
-    "feature_automations": "Automatiseringer",
-    "feature_automations_desc": "Kjør trinnene automatisk når noe skjer, og bli varslet."
-  },
-  "maintenance": {
-    "title": "Vedlikehold",
-    "description": "Sett automatiseringer for vertsstatus, helse, målinger, containere og tunnelfrakobling på pause mens arbeidet pågår. Overvåking, manuelle kjøringer og planlagte automatiseringer fortsetter.",
-    "denied": "Du har ikke tillatelse til å se vedlikehold.",
-    "sharedReadOnly": "Denne verten ble delt med deg. Bare eieren kan endre vedlikeholdet.",
-    "failed": "Vedlikehold kunne ikke oppdateres.",
-    "active": "Vedlikehold aktivt",
-    "estimated": "Forventet ferdigstillelse",
-    "noAutoEnd": "Estimatet avslutter ikke vedlikeholdet. Avslutt det eksplisitt når arbeidet er fullført.",
-    "endConfirm": "Vil du avslutte vedlikehold og gjenoppta hendelsesutløste automatiseringer for denne verten?",
-    "confirmEnd": "Bekreft slutten",
-    "cancel": "Avbryt",
-    "end": "Avslutt vedlikehold",
-    "action": "Handling",
-    "startNow": "Start nå",
-    "schedule": "Planlegg for senere",
-    "reason": "Grunn",
-    "startUtc": "Første start (UTC)",
-    "repeat": "Gjenta",
-    "once": "En gang",
-    "weekly": "Ukentlig",
-    "monthly": "Månedlig",
-    "utcHelp": "Tidsplaner bruker UTC gjennom hele året. Månedlige tidsplaner hopper over måneder uten den valgte dagen. Planlagte vinduer kan ikke overlappe; overstyrt vedlikehold fortsetter på tvers av senere vinduer.",
-    "duration": "Estimert varighet (minutter)",
-    "grace": "Frist (minutter)",
-    "notify": "Varsle én gang hvis du fortsatt er frakoblet etter estimatet pluss respitperioden",
-    "addSchedule": "Legg til timeplan",
-    "schedules": "Tidsplaner",
-    "noSchedules": "Ingen vedlikeholdsplaner.",
-    "completed": "Allerede startet",
-    "minutes_one": "{{count}} minutt",
-    "minutes_other": "{{count}} minutter",
-    "remove": "Fjern tidsplan",
-    "loadFailed": "Kunne ikke oppdatere vedlikeholdsstatusen. Endringer er deaktivert inntil den kan lastes inn.",
-    "loading": "Laster inn vedlikeholdsstatus…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "koble til",
-          "disconnect": "koble fra",
-          "offline": "frakoblet",
-          "online": "tilkoblet",
-          "failing": "mislykkes",
-          "recovered": "gjenopprettet"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/pl_PL.json b/plugins/automations/locales/translated/pl_PL.json
deleted file mode 100644
index 28ccc68da..000000000
--- a/plugins/automations/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Wyświetl automatyzacje",
-      "description": "Zobacz automatyzacje i ich historię."
-    },
-    "create": {
-      "title": "Twórz automatyzacje",
-      "description": "Dodaj nowe automatyzacje."
-    },
-    "edit": {
-      "title": "Edytuj automatyzacje",
-      "description": "Zmień istniejące automatyzacje."
-    },
-    "delete": {
-      "title": "Usuń automatyzacje",
-      "description": "Usuń automatyzacje."
-    },
-    "run": {
-      "title": "Uruchom automatyzacje",
-      "description": "Uruchom automatyzację ręcznie."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Automatyzacje",
-        "tabAutomations": "Automatyzacje",
-        "tabRuns": "Uruchomienia",
-        "tabChannels": "Kanały",
-        "createAutomation": "Nowa automatyzacja",
-        "backToAutomations": "Powrót do automatyzacji",
-        "createTitle": "Nowa automatyzacja",
-        "editTitle": "Edytuj automatyzację",
-        "empty": "Brak jeszcze automatyzacji. Utwórz automatyzację, która będzie reagować na metrykę, harmonogram lub zdarzenie.",
-        "emptyRuns": "Brak uruchomień.",
-        "channelsHint": "Kanały są skonfigurowane w Alertach",
-        "noChannelsHint": "Alert zawsze trafia do Twojej skrzynki odbiorczej. Dodaj kanały w Alertach, aby wysłać go również gdzie indziej.",
-        "nameLabel": "Nazwa",
-        "namePlaceholder": "np. Wyczyść /data, gdy się zapełni",
-        "nameRequired": "Nazwa jest wymagana",
-        "descriptionLabel": "Opis",
-        "descriptionPlaceholder": "Opis opcjonalny",
-        "enabledLabel": "Włączona",
-        "concurrencyLabel": "Jeśli już działa",
-        "concurrencyHint": "Co zrobić, gdy zostanie wyzwolona ponownie przed zakończeniem poprzedniego uruchomienia.",
-        "concurrency": {
-          "skip": "Pomiń nowe uruchomienie",
-          "queue": "Poczekaj i uruchom po zakończeniu",
-          "allow": "Uruchom oba naraz"
-        },
-        "save": "Zapisz",
-        "created": "Utworzono automatyzację",
-        "updated": "Zapisano automatyzację",
-        "deleted": "Usunięto automatyzację",
-        "deleteConfirm": "Usunąć tę automatyzację? Jej historia uruchomień również zostanie usunięta.",
-        "runNow": "Uruchom teraz",
-        "testRun": "Uruchomienie próbne",
-        "testRunHint": "Wykonuje każdy krok, ale nie zmienia niczego poza Termixem.",
-        "runStarted": "Uruchomiono",
-        "runFinished": "Zakończono: {{status}}",
-        "trigger": "Wyzwalacz",
-        "steps": "Kroki",
-        "addStep": "Dodaj krok",
-        "removeStep": "Usuń krok",
-        "moveUp": "W górę",
-        "moveDown": "W dół",
-        "noSteps": "Brak kroków. Dodaj jeden, aby określić, co powinno się stać.",
-        "webhookTokenTitle": "Adres URL webhooka",
-        "webhookTokenDescription": "Pokazywany tylko raz. Zapisz go teraz, później nie da się go odzyskać.",
-        "copy": "Kopiuj",
-        "copied": "Skopiowano",
-        "viewJson": "JSON",
-        "viewBuilder": "Kreator",
-        "viewGraph": "Graf",
-        "lastRun": "Ostatnie uruchomienie",
-        "never": "Nigdy",
-        "duration": "{{seconds}}s",
-        "stepOutput": "Wyjście",
-        "stepError": "Błąd",
-        "dryRunBadge": "Uruchomienie próbne",
-        "hostSelector": {
-          "trigger": "Host wyzwalający",
-          "host": "Konkretny host",
-          "fleet": "Flota",
-          "all": "Wszystkie hosty"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Próg metryki",
-          "host_status": "Host wstaje lub pada",
-          "health_check": "Zmiana kontroli stanu",
-          "schedule": "Zgodnie z harmonogramem",
-          "docker_event": "Zdarzenie kontenera",
-          "internal_event": "Zdarzenie Termixa",
-          "webhook": "Przychodzący webhook"
-        },
-        "stepTypes": {
-          "notify": "Wyślij alert",
-          "http": "Wywołaj adres URL",
-          "run_snippet": "Uruchom snippet",
-          "run_command": "Uruchom polecenie",
-          "docker": "Kontroluj kontener",
-          "tunnel": "Kontroluj tunel",
-          "wol": "Obudź host",
-          "wait": "Czekaj",
-          "set_var": "Ustaw zmienną",
-          "if": "Jeśli / w przeciwnym razie",
-          "run_automation": "Uruchom inną automatyzację",
-          "stop": "Zatrzymaj"
-        },
-        "statuses": {
-          "running": "Działa",
-          "success": "Powodzenie",
-          "failed": "Niepowodzenie",
-          "timeout": "Przekroczono limit czasu",
-          "skipped": "Pominięto",
-          "cancelled": "Anulowano"
-        },
-        "fields": {
-          "host": "Host",
-          "metric": "Metryka",
-          "mount": "Punkt montowania",
-          "operator": "Jest",
-          "value": "Wartość",
-          "forSeconds": "Utrzymywany przez (sekundy)",
-          "cooldown": "Czas wyciszenia (minuty)",
-          "cron": "Wyrażenie cron",
-          "intervalSeconds": "Co (sekundy)",
-          "timezone": "Strefa czasowa",
-          "timezoneServer": "Czas serwera",
-          "timezoneHint": "Czasy cron są odczytywane w tej strefie. Nie dotyczy harmonogramów interwałowych.",
-          "container": "Kontener",
-          "command": "Polecenie",
-          "url": "Adres URL",
-          "method": "Metoda",
-          "body": "Treść",
-          "channels": "Wyślij również do",
-          "title": "Tytuł",
-          "message": "Wiadomość",
-          "snippet": "Snippet",
-          "seconds": "Sekundy",
-          "conditionLeftPlaceholder": "Wartość do sprawdzenia",
-          "conditionRightPlaceholder": "Porównaj z",
-          "variableName": "Nazwa zmiennej",
-          "variableValue": "Wartość",
-          "elevated": "Uruchom z sudo",
-          "onError": "Jeśli to się nie powiedzie",
-          "allowPrivateNetwork": "Zezwalaj na lokalne adresy sieciowe",
-          "allowPrivateNetworkHint": "Wymagane dla własnej usługi w sieci LAN. Domyślnie wyłączone, aby zapobiec żądaniom do adresów wewnętrznych."
-        },
-        "onError": {
-          "stop": "Zatrzymaj uruchomienie",
-          "continue": "Kontynuuj"
-        },
-        "needsPlugin": "Potrzeba {{plugin}}",
-        "needsPluginHint": "Ta automatyzacja jest pomijana do momentu, aż potrzebna funkcja stanie się ponownie dostępna.",
-        "offBadge": "Wył.",
-        "docsLink": "Zobacz dokumentację",
-        "ago": {
-          "seconds": "{{count}}s temu",
-          "minutes": "{{count}} min temu",
-          "hours": "{{count}} godz. temu",
-          "days": "{{count}} dni temu"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Automatyzacje"
-  },
-  "onboarding": {
-    "feature_automations": "Automatyzacje",
-    "feature_automations_desc": "Uruchamiaj kroki automatycznie, gdy coś się wydarzy, i otrzymuj powiadomienia."
-  },
-  "maintenance": {
-    "title": "Konserwacja",
-    "description": "Wstrzymaj automatyzację stanu hosta, kondycji, metryk, kontenerów i rozłączania tunelu na czas trwania pracy. Monitorowanie, ręczne uruchomienia i zaplanowane automatyzacje będą kontynuowane.",
-    "denied": "Nie masz uprawnień do przeglądania informacji o konserwacji.",
-    "sharedReadOnly": "Ten host został Ci udostępniony. Tylko jego właściciel może zmienić stan konserwacji.",
-    "failed": "Nie udało się zaktualizować konserwacji.",
-    "active": "Konserwacja aktywna",
-    "estimated": "Szacowany termin ukończenia",
-    "noAutoEnd": "Kosztorys nie kończy prac konserwacyjnych. Należy go jednoznacznie zakończyć po zakończeniu prac.",
-    "endConfirm": "Zakończyć konserwację i wznowić automatyzacje wyzwalane zdarzeniami dla tego hosta?",
-    "confirmEnd": "Potwierdź koniec",
-    "cancel": "Anuluj",
-    "end": "Zakończ konserwację",
-    "action": "Akcja",
-    "startNow": "Zacznij teraz",
-    "schedule": "Zaplanuj na później",
-    "reason": "Powód",
-    "startUtc": "Pierwsze uruchomienie (UTC)",
-    "repeat": "Powtórz",
-    "once": "Raz",
-    "weekly": "Tygodnik",
-    "monthly": "Miesięczny",
-    "utcHelp": "Harmonogramy korzystają z czasu UTC przez cały rok. Harmonogramy miesięczne pomijają miesiące bez wybranego dnia. Zaplanowane okna czasowe nie mogą się na siebie nakładać; nadwyżki konserwacyjne trwają również w kolejnych oknach czasowych.",
-    "duration": "Szacowany czas trwania (minuty)",
-    "grace": "Okres karencji (minuty)",
-    "notify": "Powiadom raz, jeśli po upływie okresu szacunkowego i okresu karencji nadal będziesz offline",
-    "addSchedule": "Dodaj harmonogram",
-    "schedules": "Harmonogramy",
-    "noSchedules": "Brak harmonogramów konserwacji.",
-    "completed": "Już zaczęto",
-    "minutes_one": "{{count}} minuta",
-    "minutes_other": "{{count}} minut",
-    "remove": "Usuń harmonogram",
-    "loadFailed": "Nie można odświeżyć statusu konserwacji. Zmiany są zablokowane do czasu ich załadowania.",
-    "loading": "Ładowanie statusu konserwacji…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "połączenie",
-          "disconnect": "odłącz",
-          "offline": "offline",
-          "online": "online",
-          "failing": "w braku",
-          "recovered": "ekstrakcyjny"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/pt_BR.json b/plugins/automations/locales/translated/pt_BR.json
deleted file mode 100644
index 2b4945cde..000000000
--- a/plugins/automations/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Visualizar automações",
-      "description": "Veja as automações e seu histórico."
-    },
-    "create": {
-      "title": "Criar automações",
-      "description": "Adicionar novas automações."
-    },
-    "edit": {
-      "title": "Editar automações",
-      "description": "Alterar as automações existentes."
-    },
-    "delete": {
-      "title": "Excluir automações",
-      "description": "Remover automações."
-    },
-    "run": {
-      "title": "Executar automações",
-      "description": "Acione uma automação manualmente."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Automações",
-        "tabAutomations": "Automações",
-        "tabRuns": "Corridas",
-        "tabChannels": "Canais",
-        "createAutomation": "Nova Automação",
-        "backToAutomations": "Voltar para Automações",
-        "createTitle": "Nova Automação",
-        "editTitle": "Editar Automação",
-        "empty": "Ainda não há automações. Crie uma para reagir a uma métrica, a um agendamento ou a um evento.",
-        "emptyRuns": "Ainda não houve nenhuma corrida.",
-        "channelsHint": "Os canais são configurados em Alertas.",
-        "noChannelsHint": "O alerta sempre será enviado para sua caixa de entrada. Adicione canais em Alertas para enviá-lo também para outros locais.",
-        "nameLabel": "Nome",
-        "namePlaceholder": "Por exemplo, limpe a pasta /data quando ela estiver cheia.",
-        "nameRequired": "O nome é obrigatório.",
-        "descriptionLabel": "Descrição",
-        "descriptionPlaceholder": "Descrição opcional",
-        "enabledLabel": "Habilitado",
-        "concurrencyLabel": "Se já estiver em execução",
-        "concurrencyHint": "O que fazer quando isso for acionado novamente antes da última execução terminar?",
-        "concurrency": {
-          "skip": "Pule a nova corrida",
-          "queue": "Espere e corra atrás.",
-          "allow": "Execute ambos simultaneamente"
-        },
-        "save": "Salvar",
-        "created": "Automação criada",
-        "updated": "Automação economizou",
-        "deleted": "Automação excluída",
-        "deleteConfirm": "Excluir esta automação? O histórico de execução dela também será excluído.",
-        "runNow": "Corra agora",
-        "testRun": "Teste de execução",
-        "testRunHint": "Executa cada etapa, mas não toca em nada fora do Termix.",
-        "runStarted": "A corrida começou.",
-        "runFinished": "Execução concluída: {{status}}",
-        "trigger": "Acionar",
-        "steps": "Passos",
-        "addStep": "Adicionar etapa",
-        "removeStep": "Remover etapa",
-        "moveUp": "Suba",
-        "moveDown": "Desça",
-        "noSteps": "Ainda não há etapas. Adicione uma para descrever o que deve acontecer.",
-        "webhookTokenTitle": "URL do Webhook",
-        "webhookTokenDescription": "Esta mensagem será exibida apenas uma vez. Salve-a agora, pois não poderá ser recuperada posteriormente.",
-        "copy": "Copiar",
-        "copied": "Copiado",
-        "viewJson": "JSON",
-        "viewBuilder": "Construtor",
-        "viewGraph": "Gráfico",
-        "lastRun": "Última corrida",
-        "never": "Nunca",
-        "duration": "{{seconds}}s",
-        "stepOutput": "Saída",
-        "stepError": "Erro",
-        "dryRunBadge": "Teste de execução",
-        "hostSelector": {
-          "trigger": "Host que desencadeia o ataque",
-          "host": "hospedeiro específico",
-          "fleet": "Frota",
-          "all": "Todos os anfitriões"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Limiar métrico",
-          "host_status": "O host sobe ou desce.",
-          "health_check": "Alterações na verificação de saúde",
-          "schedule": "De acordo com um cronograma",
-          "docker_event": "Evento de contêiner",
-          "internal_event": "Evento Termix",
-          "webhook": "Webhook de entrada"
-        },
-        "stepTypes": {
-          "notify": "Enviar um alerta",
-          "http": "Chamar um URL",
-          "run_snippet": "Executar um trecho de código",
-          "run_command": "Executar um comando",
-          "docker": "Controle um contêiner",
-          "tunnel": "Controle um túnel",
-          "wol": "Acorde um anfitrião",
-          "wait": "Espere",
-          "set_var": "Defina uma variável",
-          "if": "Se/caso contrário",
-          "run_automation": "Execute outra automação",
-          "stop": "Parar"
-        },
-        "statuses": {
-          "running": "Correndo",
-          "success": "Sucesso",
-          "failed": "Fracassado",
-          "timeout": "Tempo limite excedido",
-          "skipped": "Ignorado",
-          "cancelled": "Cancelado"
-        },
-        "fields": {
-          "host": "Hospedar",
-          "metric": "Métrica",
-          "mount": "Ponto de montagem",
-          "operator": "É",
-          "value": "Valor",
-          "forSeconds": "Sustentado por (segundos)",
-          "cooldown": "Tempo de resfriamento (minutos)",
-          "cron": "Expressão de Cron",
-          "intervalSeconds": "A cada (segundos)",
-          "timezone": "Fuso horário",
-          "timezoneServer": "Hora do servidor",
-          "timezoneHint": "Os horários cron são lidos nesta zona. Não se aplica a agendamentos por intervalo.",
-          "container": "Recipiente",
-          "command": "Comando",
-          "url": "URL",
-          "method": "Método",
-          "body": "Corpo",
-          "channels": "Enviar também para",
-          "title": "Título",
-          "message": "Mensagem",
-          "snippet": "Trecho",
-          "seconds": "Segundos",
-          "conditionLeftPlaceholder": "Valor a verificar",
-          "conditionRightPlaceholder": "Compare com",
-          "variableName": "Nome da variável",
-          "variableValue": "Valor",
-          "elevated": "Executar com sudo",
-          "onError": "Se isso falhar",
-          "allowPrivateNetwork": "Permitir endereços de rede local",
-          "allowPrivateNetworkHint": "Necessário para um serviço autohospedado em sua rede local (LAN). Desativado por padrão para evitar solicitações a endereços internos."
-        },
-        "onError": {
-          "stop": "Pare a corrida",
-          "continue": "Continuar"
-        },
-        "needsPlugin": "Necessita de {{plugin}}",
-        "needsPluginHint": "Essa automação será ignorada até que o recurso necessário esteja disponível novamente.",
-        "offBadge": "Desligado",
-        "docsLink": "Documentação",
-        "ago": {
-          "seconds": "{{count}}s atrás",
-          "minutes": "{{count}}m atrás",
-          "hours": "{{count}}h atrás",
-          "days": "{{count}}há alguns dias"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Automações"
-  },
-  "onboarding": {
-    "feature_automations": "Automações",
-    "feature_automations_desc": "Execute etapas automaticamente quando algo acontecer e receba notificações."
-  },
-  "maintenance": {
-    "title": "Manutenção",
-    "description": "Pause as automações de status do host, integridade, métricas, contêiner e desconexão de túnel enquanto o trabalho estiver em andamento. O monitoramento, as execuções manuais e as automações agendadas continuam.",
-    "denied": "Você não tem permissão para visualizar a manutenção.",
-    "sharedReadOnly": "Este host foi compartilhado com você. Somente o proprietário pode alterar as configurações de manutenção.",
-    "failed": "A atualização de manutenção não pôde ser concluída.",
-    "active": "Manutenção ativa",
-    "estimated": "Conclusão prevista",
-    "noAutoEnd": "O orçamento não encerra a manutenção. Encerre-o explicitamente quando o trabalho estiver concluído.",
-    "endConfirm": "Encerrar a manutenção e retomar as automações acionadas por eventos para este host?",
-    "confirmEnd": "Confirme o fim",
-    "cancel": "Cancelar",
-    "end": "Manutenção final",
-    "action": "Ação",
-    "startNow": "Comece agora",
-    "schedule": "Agendamento para mais tarde",
-    "reason": "Razão",
-    "startUtc": "Primeiro início (UTC)",
-    "repeat": "Repita",
-    "once": "Uma vez",
-    "weekly": "Semanalmente",
-    "monthly": "Mensal",
-    "utcHelp": "Os horários utilizam o UTC durante todo o ano. Os horários mensais ignoram os meses que não correspondem ao dia selecionado. Os períodos de planejamento não podem se sobrepor; a manutenção que se estende além do previsto continua nos períodos subsequentes.",
-    "duration": "Duração estimada (minutos)",
-    "grace": "Período de tolerância (minutos)",
-    "notify": "Notificar uma única vez se o usuário ainda estiver offline após o período estimado e de tolerância.",
-    "addSchedule": "Adicionar horário",
-    "schedules": "Horários",
-    "noSchedules": "Sem cronograma de manutenção.",
-    "completed": "Já começou",
-    "minutes_one": "{{count}} minuto",
-    "minutes_other": "{{count}} minutos",
-    "remove": "Remover agendamento",
-    "loadFailed": "Não foi possível atualizar o status de manutenção. As alterações estão desativadas até que o status seja carregado.",
-    "loading": "Carregando status de manutenção…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "conectar",
-          "disconnect": "desconectar",
-          "offline": "offline",
-          "online": "online",
-          "failing": "falhando",
-          "recovered": "recuperado"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/pt_PT.json b/plugins/automations/locales/translated/pt_PT.json
deleted file mode 100644
index 030b47e41..000000000
--- a/plugins/automations/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Visualizar automações",
-      "description": "Veja as automatizações e o seu histórico."
-    },
-    "create": {
-      "title": "Criar automações",
-      "description": "Adicionar novas automatizações."
-    },
-    "edit": {
-      "title": "Editar automações",
-      "description": "Alterar as automatizações existentes."
-    },
-    "delete": {
-      "title": "Apagar automações",
-      "description": "Remover automações."
-    },
-    "run": {
-      "title": "Executar automações",
-      "description": "Acione uma automatização manualmente."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Automações",
-        "tabAutomations": "Automações",
-        "tabRuns": "Corridas",
-        "tabChannels": "Canais",
-        "createAutomation": "Nova Automação",
-        "backToAutomations": "Voltar para Automações",
-        "createTitle": "Nova Automação",
-        "editTitle": "Editar Automação",
-        "empty": "Ainda não há automatizações. Crie uma para reagir a uma métrica, a um agendamento ou a um evento.",
-        "emptyRuns": "Ainda não houve qualquer corrida.",
-        "channelsHint": "Os canais são configurados em Alertas.",
-        "noChannelsHint": "O alerta será sempre enviado para a sua caixa de entrada. Adicione canais em Alertas para o enviar também para outros locais.",
-        "nameLabel": "Nome",
-        "namePlaceholder": "Por exemplo, limpe a pasta /data quando esta estiver cheia.",
-        "nameRequired": "O nome é obrigatório",
-        "descriptionLabel": "Descrição",
-        "descriptionPlaceholder": "Descrição opcional",
-        "enabledLabel": "Ativado",
-        "concurrencyLabel": "Se já estiver em execução",
-        "concurrencyHint": "O que fazer quando este for novamente acionado antes da última execução terminar?",
-        "concurrency": {
-          "skip": "Salte a nova corrida",
-          "queue": "Espere e corra atrás.",
-          "allow": "Execute ambos em simultâneo"
-        },
-        "save": "Guardar",
-        "created": "Automação criada",
-        "updated": "A automação economizou",
-        "deleted": "Automação excluída",
-        "deleteConfirm": "Apagar esta automação? O histórico de execução da mesma também será eliminado.",
-        "runNow": "Corra agora",
-        "testRun": "Teste de execução",
-        "testRunHint": "Executa cada passo, mas não toca em nada fora do Termix.",
-        "runStarted": "A corrida começou.",
-        "runFinished": "Execução concluída: {{status}}",
-        "trigger": "Gatilho",
-        "steps": "Passos",
-        "addStep": "Adicionar etapa",
-        "removeStep": "Remover etapa",
-        "moveUp": "Suba",
-        "moveDown": "Desça",
-        "noSteps": "Ainda não há etapas. Adicione uma para descrever o que deve acontecer.",
-        "webhookTokenTitle": "URL do Webhook",
-        "webhookTokenDescription": "Esta mensagem será apresentada apenas uma vez. Guarde-a agora, pois não poderá ser recuperada posteriormente.",
-        "copy": "Copiar",
-        "copied": "Copiado",
-        "viewJson": "JSON",
-        "viewBuilder": "Construtor",
-        "viewGraph": "Gráfico",
-        "lastRun": "Última corrida",
-        "never": "Nunca",
-        "duration": "{{seconds}}s",
-        "stepOutput": "Saída",
-        "stepError": "Erro",
-        "dryRunBadge": "Teste de execução",
-        "hostSelector": {
-          "trigger": "Host que desencadeia o ataque",
-          "host": "hospedeiro específico",
-          "fleet": "Frota",
-          "all": "Todos os hosts"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Limiar métrico",
-          "host_status": "O host sobe ou desce.",
-          "health_check": "Alterações na verificação de saúde",
-          "schedule": "De acordo com um cronograma",
-          "docker_event": "Evento de contentor",
-          "internal_event": "Evento Termix",
-          "webhook": "Webhook de entrada"
-        },
-        "stepTypes": {
-          "notify": "Enviar um alerta",
-          "http": "Chamar um URL",
-          "run_snippet": "Executar um excerto de código",
-          "run_command": "Executar um comando",
-          "docker": "Controle um contentor",
-          "tunnel": "Controle um túnel",
-          "wol": "Acorde um anfitrião",
-          "wait": "Espera",
-          "set_var": "Defina uma variável",
-          "if": "Se/caso contrário",
-          "run_automation": "Execute outra automatização",
-          "stop": "Stop"
-        },
-        "statuses": {
-          "running": "Em execução",
-          "success": "Sucesso",
-          "failed": "Falhou",
-          "timeout": "Tempo limite excedido",
-          "skipped": "Ignorado",
-          "cancelled": "Cancelado"
-        },
-        "fields": {
-          "host": "Servidor",
-          "metric": "Métrica",
-          "mount": "Ponto de montagem",
-          "operator": "É",
-          "value": "Valor",
-          "forSeconds": "Sustentado por (segundos)",
-          "cooldown": "Período de arrefecimento (minutos)",
-          "cron": "Expressão de Cron",
-          "intervalSeconds": "A cada (segundos)",
-          "timezone": "Fuso horário",
-          "timezoneServer": "Hora do servidor",
-          "timezoneHint": "Os tempos cron são lidos nesta zona. Não se aplica a agendamentos por intervalo.",
-          "container": "Recipiente",
-          "command": "Comando",
-          "url": "URL",
-          "method": "Método",
-          "body": "Corpo",
-          "channels": "Enviar também para",
-          "title": "Título",
-          "message": "Mensagem",
-          "snippet": "Trecho",
-          "seconds": "Segundos",
-          "conditionLeftPlaceholder": "Valor a verificar",
-          "conditionRightPlaceholder": "Compare com",
-          "variableName": "Nome da variável",
-          "variableValue": "Valor",
-          "elevated": "Executar com sudo",
-          "onError": "Se isso falhar",
-          "allowPrivateNetwork": "Permitir endereços de rede local",
-          "allowPrivateNetworkHint": "Necessário para um serviço auto-hospedado na sua rede local (LAN). Desativado por defeito para evitar pedidos a endereços internos."
-        },
-        "onError": {
-          "stop": "Pare a corrida",
-          "continue": "Continuar"
-        },
-        "needsPlugin": "Necessita de {{plugin}}",
-        "needsPluginHint": "Esta automatização será ignorada até que o recurso necessário esteja novamente disponível.",
-        "offBadge": "Desativado",
-        "docsLink": "Ver docs",
-        "ago": {
-          "seconds": "{{count}}s atrás",
-          "minutes": "há {{count}} min",
-          "hours": "há {{count}} h",
-          "days": "há {{count}} d"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Automações"
-  },
-  "onboarding": {
-    "feature_automations": "Automações",
-    "feature_automations_desc": "Execute automaticamente os passos quando algo acontece e receba notificações."
-  },
-  "maintenance": {
-    "title": "Manutenção",
-    "description": "Faça uma pausa nas automatizações de estado do host, integridade, métricas, contentor e desconexão de túnel enquanto o trabalho estiver em curso. A monitorização, as execuções manuais e as automações agendadas continuam.",
-    "denied": "Não tem permissão para visualizar a manutenção.",
-    "sharedReadOnly": "Este host foi partilhado consigo. Apenas o proprietário pode alterar as definições de manutenção.",
-    "failed": "A atualização de manutenção não pôde ser concluída.",
-    "active": "Manutenção ativa",
-    "estimated": "Conclusão prevista",
-    "noAutoEnd": "O orçamento não encerra a manutenção. Encerre-o explicitamente quando o trabalho estiver concluído.",
-    "endConfirm": "Terminar a manutenção e retomar as automatizações acionadas por eventos para este host?",
-    "confirmEnd": "Confirme o fim",
-    "cancel": "Cancelar",
-    "end": "Manutenção final",
-    "action": "Ação",
-    "startNow": "Comece agora",
-    "schedule": "Agendamento para mais tarde",
-    "reason": "Razão",
-    "startUtc": "Primeiro arranque (UTC)",
-    "repeat": "Repetir",
-    "once": "Uma vez",
-    "weekly": "Semanalmente",
-    "monthly": "Mensal",
-    "utcHelp": "Os horários utilizam o UTC durante todo o ano. Os horários mensais ignoram os meses que não correspondem ao dia selecionado. Os períodos de planeamento não se podem sobrepor; a manutenção que se estende para além do previsto continua nos períodos subsequentes.",
-    "duration": "Duração estimada (minutos)",
-    "grace": "Período de tolerância (minutos)",
-    "notify": "Notificar uma única vez se o utilizador ainda estiver offline após o período estimado e de tolerância.",
-    "addSchedule": "Adicionar horário",
-    "schedules": "Horários",
-    "noSchedules": "Sem plano de manutenção.",
-    "completed": "Já começou",
-    "minutes_one": "{{count}} minuto",
-    "minutes_other": "{{count}} minutos",
-    "remove": "Remover agendamento",
-    "loadFailed": "Não foi possível atualizar o estado de manutenção. As alterações estão desativadas até que o estado seja carregado.",
-    "loading": "A carregar o estado de manutenção…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "ligar",
-          "disconnect": "desligar",
-          "offline": "offline",
-          "online": "online",
-          "failing": "falhando",
-          "recovered": "recuperado"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/ro_RO.json b/plugins/automations/locales/translated/ro_RO.json
deleted file mode 100644
index 8a8b7adfa..000000000
--- a/plugins/automations/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Vizualizați automatizările",
-      "description": "Vedeți automatizările și istoricul lor."
-    },
-    "create": {
-      "title": "Creați automatizări",
-      "description": "Adăugați noi automatizări."
-    },
-    "edit": {
-      "title": "Editați automatizările",
-      "description": "Modificați automatizările existente."
-    },
-    "delete": {
-      "title": "Șterge automatizările",
-      "description": "Eliminați automatizările."
-    },
-    "run": {
-      "title": "Rulați automatizări",
-      "description": "Declanșează o automatizare manual."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Automatizări",
-        "tabAutomations": "Automatizări",
-        "tabRuns": "Aleargă",
-        "tabChannels": "Canale",
-        "createAutomation": "Automatizare nouă",
-        "backToAutomations": "Înapoi la Automatizări",
-        "createTitle": "Automatizare nouă",
-        "editTitle": "Editare automatizare",
-        "empty": "Încă nu există automatizări. Creați una pentru a reacționa la o metrică, un program sau un eveniment.",
-        "emptyRuns": "Nicio alergare încă.",
-        "channelsHint": "Canalele sunt configurate în Alerte",
-        "noChannelsHint": "Alerta ajunge întotdeauna în căsuța ta poștală. Adaugă canale în Alerte pentru a o trimite și în altă parte.",
-        "nameLabel": "Nume",
-        "namePlaceholder": "De exemplu, curățați /data când se umple",
-        "nameRequired": "Numele este obligatoriu",
-        "descriptionLabel": "Descriere",
-        "descriptionPlaceholder": "Descriere opțională",
-        "enabledLabel": "Activat",
-        "concurrencyLabel": "Dacă deja rulează",
-        "concurrencyHint": "Ce trebuie făcut când acest lucru este declanșat din nou înainte de finalizarea ultimei rulări.",
-        "concurrency": {
-          "skip": "Sari peste noua cursă",
-          "queue": "Așteaptă și aleargă după",
-          "allow": "Rulați ambele simultan"
-        },
-        "save": "Salva",
-        "created": "Automatizare creată",
-        "updated": "Automatizare salvată",
-        "deleted": "Automatizare ștearsă",
-        "deleteConfirm": "Ștergeți această automatizare? Și istoricul execuțiilor sale este șters.",
-        "runNow": "Aleargă acum",
-        "testRun": "Test de funcționare",
-        "testRunHint": "Aleargă la fiecare pas, dar nu atinge nimic din afara Termixului.",
-        "runStarted": "Rularea a început",
-        "runFinished": "Execuția s-a încheiat: {{status}}",
-        "trigger": "Declanșator",
-        "steps": "Pași",
-        "addStep": "Adăugați un pas",
-        "removeStep": "Eliminați pasul",
-        "moveUp": "Mută în sus",
-        "moveDown": "Mută în jos",
-        "noSteps": "Încă nu există pași. Adăugați unul pentru a specifica ce ar trebui să se întâmple.",
-        "webhookTokenTitle": "URL-ul webhook-ului",
-        "webhookTokenDescription": "Aceasta se afișează o singură dată. Salvați-o acum, nu poate fi recuperată ulterior.",
-        "copy": "Copie",
-        "copied": "Copiat",
-        "viewJson": "JSON",
-        "viewBuilder": "Constructor",
-        "viewGraph": "Grafic",
-        "lastRun": "Ultima alergare",
-        "never": "Nu",
-        "duration": "{{seconds}}s",
-        "stepOutput": "Ieșire",
-        "stepError": "Eroare",
-        "dryRunBadge": "Test de funcționare",
-        "hostSelector": {
-          "trigger": "Gazdă declanșatoare",
-          "host": "Gazdă specifică",
-          "fleet": "Flotă",
-          "all": "Toate gazdele"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Pragul metric",
-          "host_status": "Gazda se activează sau se deconectează",
-          "health_check": "Modificări la verificarea stării de sănătate",
-          "schedule": "Pe un program",
-          "docker_event": "Eveniment container",
-          "internal_event": "Evenimentul Termix",
-          "webhook": "Webhook de intrare"
-        },
-        "stepTypes": {
-          "notify": "Trimiteți o alertă",
-          "http": "Apelați o adresă URL",
-          "run_snippet": "Executați un fragment",
-          "run_command": "Executați o comandă",
-          "docker": "Controlează un container",
-          "tunnel": "Controlează un tunel",
-          "wol": "Trezește o gazdă",
-          "wait": "Așteaptă",
-          "set_var": "Setați o variabilă",
-          "if": "Dacă / altfel",
-          "run_automation": "Rulați o altă automatizare",
-          "stop": "Stop"
-        },
-        "statuses": {
-          "running": "Funcţionare",
-          "success": "Succes",
-          "failed": "Eșuat",
-          "timeout": "Expirat",
-          "skipped": "Omis",
-          "cancelled": "Anulat"
-        },
-        "fields": {
-          "host": "Gazdă",
-          "metric": "Metric",
-          "mount": "Punct de montare",
-          "operator": "Este",
-          "value": "Valoare",
-          "forSeconds": "Menținut timp de (secunde)",
-          "cooldown": "Timp de răcire (minute)",
-          "cron": "Expresie Cron",
-          "intervalSeconds": "La fiecare (secunde)",
-          "timezone": "Fus orar",
-          "timezoneServer": "Ora serverului",
-          "timezoneHint": "Timpii cron sunt citiți în această zonă. Nu se aplică programărilor cu intervale.",
-          "container": "Container",
-          "command": "Comanda",
-          "url": "URL-ul",
-          "method": "Metodă",
-          "body": "Corp",
-          "channels": "Trimiteți și către",
-          "title": "Titlu",
-          "message": "Mesaj",
-          "snippet": "Fragment",
-          "seconds": "Secunde",
-          "conditionLeftPlaceholder": "Valoare de verificat",
-          "conditionRightPlaceholder": "Comparați cu",
-          "variableName": "Nume variabilă",
-          "variableValue": "Valoare",
-          "elevated": "Execută cu sudo",
-          "onError": "Dacă acest lucru eșuează",
-          "allowPrivateNetwork": "Permiteți adrese de rețea locală",
-          "allowPrivateNetworkHint": "Necesar pentru un serviciu auto-găzduit în rețeaua locală. Dezactivat în mod implicit pentru a preveni solicitările către adrese interne."
-        },
-        "onError": {
-          "stop": "Oprește alergarea",
-          "continue": "Continuă"
-        },
-        "needsPlugin": "Necesită {{plugin}}",
-        "needsPluginHint": "Această automatizare este omisă până când funcția de care are nevoie este din nou disponibilă.",
-        "offBadge": "Dezactivat",
-        "docsLink": "Vizualizați documentele",
-        "ago": {
-          "seconds": "Acum {{count}}secunde",
-          "minutes": "{{count}}acum câteva minute",
-          "hours": "{{count}}acum o oră",
-          "days": "{{count}}zile în urmă"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Automatizări"
-  },
-  "onboarding": {
-    "feature_automations": "Automatizări",
-    "feature_automations_desc": "Execută pașii automat când se întâmplă ceva și primește notificări."
-  },
-  "maintenance": {
-    "title": "Întreţinere",
-    "description": "Întrerupeți automatizările privind starea gazdei, sănătatea, metrica, containerul și deconectarea tunelului în timp ce lucrul este în desfășurare. Monitorizarea, rulările manuale și automatizările programate continuă.",
-    "denied": "Nu aveți permisiunea de a vizualiza întreținerea.",
-    "sharedReadOnly": "Această gazdă a fost partajată cu dvs. Numai proprietarul acesteia poate modifica întreținerea.",
-    "failed": "Întreținerea nu a putut fi actualizată.",
-    "active": "Mentenanță activă",
-    "estimated": "Finalizare estimată",
-    "noAutoEnd": "Estimarea nu încheie întreținerea. Încheiați-o explicit când lucrarea este finalizată.",
-    "endConfirm": "Încheiați întreținerea și reluați automatizările declanșate de evenimente pentru această gazdă?",
-    "confirmEnd": "Confirmați sfârșitul",
-    "cancel": "Anula",
-    "end": "Sfârșitul întreținerii",
-    "action": "Acţiune",
-    "startNow": "Începeți acum",
-    "schedule": "Programați pentru mai târziu",
-    "reason": "Motiv",
-    "startUtc": "Prima pornire (UTC)",
-    "repeat": "Repeta",
-    "once": "Dată",
-    "weekly": "Săptămânal",
-    "monthly": "Lunar",
-    "utcHelp": "Programările utilizează UTC pe tot parcursul anului. Programările lunare sar peste luni fără ziua selectată. Ferestrele planificate nu se pot suprapune; întreținerea depășită continuă în ferestrele ulterioare.",
-    "duration": "Durată estimată (minute)",
-    "grace": "Perioadă de grație (minute)",
-    "notify": "Notificați o dată dacă sunteți încă offline după estimare plus perioada de grație",
-    "addSchedule": "Adăugați un program",
-    "schedules": "Programe",
-    "noSchedules": "Fără programe de întreținere.",
-    "completed": "Deja început",
-    "minutes_one": "{{count}} minut",
-    "minutes_other": "{{count}} minute",
-    "remove": "Eliminați programul",
-    "loadFailed": "Nu s-a putut actualiza starea de întreținere. Modificările sunt dezactivate până când pot fi încărcate.",
-    "loading": "Se încarcă starea de întreținere…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "conectați",
-          "disconnect": "deconecta",
-          "offline": "offline",
-          "online": "online",
-          "failing": "eșuând",
-          "recovered": "recuperat"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/ru_RU.json b/plugins/automations/locales/translated/ru_RU.json
deleted file mode 100644
index 0a212e4dd..000000000
--- a/plugins/automations/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Просмотреть автоматизации",
-      "description": "Ознакомьтесь с автоматизацией и её историей."
-    },
-    "create": {
-      "title": "Создавайте автоматизации",
-      "description": "Добавить новые автоматизации."
-    },
-    "edit": {
-      "title": "Редактировать автоматизацию",
-      "description": "Измените существующие автоматизации."
-    },
-    "delete": {
-      "title": "Удалить автоматизации",
-      "description": "Удалите автоматизацию."
-    },
-    "run": {
-      "title": "Запуск автоматизации",
-      "description": "Запустите автоматизацию вручную."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Автоматизация",
-        "tabAutomations": "Автоматизация",
-        "tabRuns": "Беги",
-        "tabChannels": "Каналы",
-        "createAutomation": "Новая автоматизация",
-        "backToAutomations": "Назад к автоматизации",
-        "createTitle": "Новая автоматизация",
-        "editTitle": "Редактировать автоматизацию",
-        "empty": "Автоматизации пока нет. Создайте автоматизацию, которая будет реагировать на показатель, расписание или событие.",
-        "emptyRuns": "Пока ни одного заезда.",
-        "channelsHint": "Каналы настраиваются в разделе «Оповещения».",
-        "noChannelsHint": "Уведомление всегда приходит в ваш почтовый ящик. Добавьте каналы в разделе «Уведомления», чтобы оно также отправлялось в другие места.",
-        "nameLabel": "Название",
-        "namePlaceholder": "Например, очищать каталог /data, когда он заполняется.",
-        "nameRequired": "Имя обязательно",
-        "descriptionLabel": "Описание",
-        "descriptionPlaceholder": "Необязательное описание",
-        "enabledLabel": "Включено",
-        "concurrencyLabel": "Если он уже запущен",
-        "concurrencyHint": "Что делать, если это снова произойдет до завершения последнего запуска?",
-        "concurrency": {
-          "skip": "Пропустите новый запуск",
-          "queue": "Подожди и беги после",
-          "allow": "Запустите оба одновременно."
-        },
-        "save": "Сохранить",
-        "created": "Создана автоматизация",
-        "updated": "Автоматизация спасла",
-        "deleted": "Автоматизация удалена",
-        "deleteConfirm": "Удалить эту автоматизацию? История её выполнения также будет удалена.",
-        "runNow": "Запустите сейчас",
-        "testRun": "Тестовый запуск",
-        "testRunHint": "Программа выполняет каждый этап, но не затрагивает ничего за пределами Termix.",
-        "runStarted": "Запуск начался",
-        "runFinished": "Выполнение завершено: {{status}}",
-        "trigger": "Триггер",
-        "steps": "Шаги",
-        "addStep": "Добавить шаг",
-        "removeStep": "Удалить шаг",
-        "moveUp": "Поднимитесь выше",
-        "moveDown": "Спуститесь вниз",
-        "noSteps": "Шагов пока нет. Добавьте один, чтобы указать, что должно произойти.",
-        "webhookTokenTitle": "URL веб-перехватчика",
-        "webhookTokenDescription": "Эта информация отображается только один раз. Сохраните её сейчас, позже восстановить её будет невозможно.",
-        "copy": "Копировать",
-        "copied": "Скопировано",
-        "viewJson": "JSON",
-        "viewBuilder": "Строитель",
-        "viewGraph": "График",
-        "lastRun": "Последний забег",
-        "never": "Никогда",
-        "duration": "{{seconds}}с",
-        "stepOutput": "Вывод",
-        "stepError": "Ошибка",
-        "dryRunBadge": "Тестовый запуск",
-        "hostSelector": {
-          "trigger": "Запуск хоста",
-          "host": "Конкретный хост",
-          "fleet": "Флот",
-          "all": "Все хосты"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Пороговое значение метрики",
-          "host_status": "Хост переходит в режим повышения или понижения.",
-          "health_check": "Изменения в результатах медицинского осмотра",
-          "schedule": "По расписанию",
-          "docker_event": "Событие контейнера",
-          "internal_event": "Мероприятие Termix",
-          "webhook": "Входящий веб-хук"
-        },
-        "stepTypes": {
-          "notify": "Отправить оповещение",
-          "http": "Вызов URL-адреса",
-          "run_snippet": "Запустить фрагмент кода",
-          "run_command": "Выполните команду",
-          "docker": "Управлять контейнером",
-          "tunnel": "Контролируемый туннель",
-          "wol": "Разбудить хозяина",
-          "wait": "Ждать",
-          "set_var": "Задайте переменную",
-          "if": "Если / в противном случае",
-          "run_automation": "Запустите еще одну автоматизацию",
-          "stop": "Остановить"
-        },
-        "statuses": {
-          "running": "Запущен",
-          "success": "Успех",
-          "failed": "Ошибка",
-          "timeout": "Время истекло",
-          "skipped": "Пропущено",
-          "cancelled": "Отменено"
-        },
-        "fields": {
-          "host": "Хост",
-          "metric": "Метрика",
-          "mount": "Маунт-Пойнт",
-          "operator": "Является",
-          "value": "Ценить",
-          "forSeconds": "Длительность (секунды)",
-          "cooldown": "Задержка повторения (минут)",
-          "cron": "Выражение Cron",
-          "intervalSeconds": "Каждые (секунды)",
-          "timezone": "Часовой пояс",
-          "timezoneServer": "Время сервера",
-          "timezoneHint": "В этой зоне считываются временные параметры Cron. Это не относится к интервальным расписаниям.",
-          "container": "Контейнер",
-          "command": "Команда",
-          "url": "URL",
-          "method": "Метод",
-          "body": "Тело",
-          "channels": "Также отправить на",
-          "title": "Название",
-          "message": "Сообщение",
-          "snippet": "Фрагмент",
-          "seconds": "Секунды",
-          "conditionLeftPlaceholder": "Значение для проверки",
-          "conditionRightPlaceholder": "Сравните с",
-          "variableName": "Имя переменной",
-          "variableValue": "Ценить",
-          "elevated": "Запустить с правами суперпользователя (sudo)",
-          "onError": "Если это не поможет",
-          "allowPrivateNetwork": "Разрешить использование локальных сетевых адресов",
-          "allowPrivateNetworkHint": "Необходим для самостоятельного размещения сервиса в вашей локальной сети. По умолчанию отключен, чтобы предотвратить запросы к внутренним адресам."
-        },
-        "onError": {
-          "stop": "Остановить бег",
-          "continue": "Продолжать"
-        },
-        "needsPlugin": "Потребности {{plugin}}",
-        "needsPluginHint": "Эта автоматизация пропускается до тех пор, пока необходимая функция снова не станет доступна.",
-        "offBadge": "Отключено",
-        "docsLink": "Документация",
-        "ago": {
-          "seconds": "{{count}}s назад",
-          "minutes": "{{count}}м назад",
-          "hours": "{{count}}ч назад",
-          "days": "{{count}}д назад"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Автоматизация"
-  },
-  "onboarding": {
-    "feature_automations": "Автоматизация",
-    "feature_automations_desc": "Запускайте шаги автоматически при возникновении событий и получайте уведомления."
-  },
-  "maintenance": {
-    "title": "Обслуживание",
-    "description": "Приостановите автоматизацию проверки состояния хоста, работоспособности, метрик, контейнеров и разрыва туннелей на время выполнения работ. Мониторинг, ручные запуски и запланированные автоматизации продолжатся.",
-    "denied": "У вас нет разрешения на просмотр информации о техническом обслуживании.",
-    "sharedReadOnly": "Этот хостинг был предоставлен вам. Только его владелец может вносить изменения в настройки технического обслуживания.",
-    "failed": "Обновление информации о техническом обслуживании не удалось.",
-    "active": "Техническое обслуживание активно",
-    "estimated": "Предполагаемая дата завершения",
-    "noAutoEnd": "Смета не завершает техническое обслуживание. Завершайте его, когда работы будут полностью выполнены.",
-    "endConfirm": "Завершить автоматизацию технического обслуживания и возобновить работу для этого хоста?",
-    "confirmEnd": "Подтвердить конец",
-    "cancel": "Отмена",
-    "end": "Завершение технического обслуживания",
-    "action": "Действие",
-    "startNow": "Начните прямо сейчас",
-    "schedule": "Запланируйте на более позднее время",
-    "reason": "Причина",
-    "startUtc": "Первый запуск (UTC)",
-    "repeat": "Повторить",
-    "once": "Один раз",
-    "weekly": "Еженедельно",
-    "monthly": "Ежемесячно",
-    "utcHelp": "В расписаниях используется UTC в течение всего года. В месячных расписаниях пропускаются месяцы, в которых отсутствует выбранный день. Запланированные временные окна не могут перекрываться; работы по техническому обслуживанию, выполняемые в течение более поздних временных окон, продолжаются и в последующие.",
-    "duration": "Ориентировочная продолжительность (в минутах)",
-    "grace": "Льготный период (в минутах)",
-    "notify": "Если после истечения расчетного периода и льготного периода связь по-прежнему отсутствует, сообщите об этом один раз.",
-    "addSchedule": "Добавить расписание",
-    "schedules": "Расписания",
-    "noSchedules": "График технического обслуживания отсутствует.",
-    "completed": "Уже началось",
-    "minutes_one": "{{count}} минут",
-    "minutes_other": "{{count}} минут",
-    "remove": "Удалить расписание",
-    "loadFailed": "Не удалось обновить статус технического обслуживания. Изменения отключены до тех пор, пока не будет загружена соответствующая информация.",
-    "loading": "Статус технического обслуживания загрузки…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "соединить",
-          "disconnect": "отключить",
-          "offline": "офлайн",
-          "online": "онлайн",
-          "failing": "провал",
-          "recovered": "выздоровел"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/sr_SP.json b/plugins/automations/locales/translated/sr_SP.json
deleted file mode 100644
index 9edda3022..000000000
--- a/plugins/automations/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Прикажи аутоматизације",
-      "description": "Погледајте аутоматизације и њихову историју."
-    },
-    "create": {
-      "title": "Креирајте аутоматизације",
-      "description": "Додајте нове аутоматизације."
-    },
-    "edit": {
-      "title": "Уреди аутоматизације",
-      "description": "Промените постојеће аутоматизације."
-    },
-    "delete": {
-      "title": "Обриши аутоматизације",
-      "description": "Уклоните аутоматизације."
-    },
-    "run": {
-      "title": "Покрени аутоматизације",
-      "description": "Ручно покрените аутоматизацију."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Аутоматизације",
-        "tabAutomations": "Аутоматизације",
-        "tabRuns": "Трчи",
-        "tabChannels": "Канали",
-        "createAutomation": "Нова аутоматизација",
-        "backToAutomations": "Назад на аутоматизацију",
-        "createTitle": "Нова аутоматизација",
-        "editTitle": "Уреди аутоматизацију",
-        "empty": "Још увек нема аутоматизација. Направите једну да бисте реаговали на метрику, распоред или догађај.",
-        "emptyRuns": "Још нема трчања.",
-        "channelsHint": "Канали се подешавају у Обавештењима",
-        "noChannelsHint": "Обавештење увек иде у ваше пријемно сандуче. Додајте канале у Обавештења да бисте га послали и негде другде.",
-        "nameLabel": "Име",
-        "namePlaceholder": "нпр. Очисти /подаци када се попуне",
-        "nameRequired": "Име је обавезно",
-        "descriptionLabel": "Опис",
-        "descriptionPlaceholder": "Опциони опис",
-        "enabledLabel": "Омогућено",
-        "concurrencyLabel": "Ако већ ради",
-        "concurrencyHint": "Шта урадити када се ово поново покрене пре него што се заврши последње покретање.",
-        "concurrency": {
-          "skip": "Прескочи нову вожњу",
-          "queue": "Чекај и трчи за њим",
-          "allow": "Покрени оба одједном"
-        },
-        "save": "Сачувај",
-        "created": "Аутоматизација је креирана",
-        "updated": "Аутоматизација је сачувана",
-        "deleted": "Аутоматизација је обрисана",
-        "deleteConfirm": "Да ли желите да обришете ову аутоматизацију? Њена историја покретања је такође обрисана.",
-        "runNow": "Трчи сада",
-        "testRun": "Тестирање",
-        "testRunHint": "Покреће сваки корак, али не додирује ништа изван Термикса.",
-        "runStarted": "Трчање је започето",
-        "runFinished": "Трка завршена: {{status}}",
-        "trigger": "Окидач",
-        "steps": "Кораци",
-        "addStep": "Додај корак",
-        "removeStep": "Уклони корак",
-        "moveUp": "Помери горе",
-        "moveDown": "Помери надоле",
-        "noSteps": "Још нема корака. Додајте један да бисте рекли шта треба да се деси.",
-        "webhookTokenTitle": "URL вебхука",
-        "webhookTokenDescription": "Ово се приказује једном. Сачувајте то сада, не можете то касније преузети.",
-        "copy": "Копија",
-        "copied": "Копирано",
-        "viewJson": "JSON",
-        "viewBuilder": "Градитељ",
-        "viewGraph": "График",
-        "lastRun": "Последње трчање",
-        "never": "Никад",
-        "duration": "{{seconds}}с",
-        "stepOutput": "Излаз",
-        "stepError": "Грешка",
-        "dryRunBadge": "Тестирање",
-        "hostSelector": {
-          "trigger": "Покретач хоста",
-          "host": "Одређени домаћин",
-          "fleet": "Флота",
-          "all": "Сви домаћини"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Праг метрике",
-          "host_status": "Домаћин иде горе или доле",
-          "health_check": "Промене у провери исправности",
-          "schedule": "По распореду",
-          "docker_event": "Догађај контејнера",
-          "internal_event": "Термикс догађај",
-          "webhook": "Долазни вебхук"
-        },
-        "stepTypes": {
-          "notify": "Пошаљи упозорење",
-          "http": "Позовите URL",
-          "run_snippet": "Покрени исечак",
-          "run_command": "Покрените команду",
-          "docker": "Контролишите контејнер",
-          "tunnel": "Контролишите тунел",
-          "wol": "Пробудите домаћина",
-          "wait": "Чекај",
-          "set_var": "Поставите променљиву",
-          "if": "Ако / иначе",
-          "run_automation": "Покрените још једну аутоматизацију",
-          "stop": "Заустави"
-        },
-        "statuses": {
-          "running": "Трчање",
-          "success": "Успех",
-          "failed": "Неуспешно",
-          "timeout": "Временско ограничење је истекло",
-          "skipped": "Прескочено",
-          "cancelled": "Отказано"
-        },
-        "fields": {
-          "host": "Домаћин",
-          "metric": "Метрика",
-          "mount": "Тачка монтирања",
-          "operator": "Је",
-          "value": "Вредност",
-          "forSeconds": "Задржано (секунде)",
-          "cooldown": "Хлађење (минути)",
-          "cron": "Cron израз",
-          "intervalSeconds": "Сваких (секунде)",
-          "timezone": "Временска зона",
-          "timezoneServer": "Време сервера",
-          "timezoneHint": "Cron времена се очитавају у овој зони. Не односи се на интервалне распореде.",
-          "container": "Контејнер",
-          "command": "Команда",
-          "url": "URL",
-          "method": "Метод",
-          "body": "Тело",
-          "channels": "Такође пошаљите на",
-          "title": "Наслов",
-          "message": "Порука",
-          "snippet": "Исечак",
-          "seconds": "Секунде",
-          "conditionLeftPlaceholder": "Вредност за проверу",
-          "conditionRightPlaceholder": "Упореди са",
-          "variableName": "Назив променљиве",
-          "variableValue": "Вредност",
-          "elevated": "Покрени са sudo-ом",
-          "onError": "Ако ово не успе",
-          "allowPrivateNetwork": "Дозволи локалне мрежне адресе",
-          "allowPrivateNetworkHint": "Потребно за самостално хостовану услугу на вашој локалној мрежи. Подразумевано искључено да би се спречили захтеви ка интерним адресама."
-        },
-        "onError": {
-          "stop": "Заустави трчање",
-          "continue": "Настави"
-        },
-        "needsPlugin": "Потребно је {{plugin}}",
-        "needsPluginHint": "Ова аутоматизација се прескаче док функција која јој је потребна поново не буде доступна.",
-        "offBadge": "Искључено",
-        "docsLink": "Прикажи документе",
-        "ago": {
-          "seconds": "Пре {{count}}сек",
-          "minutes": "{{count}}пре мин",
-          "hours": "{{count}}пре сати",
-          "days": "{{count}}пре д"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Аутоматизације"
-  },
-  "onboarding": {
-    "feature_automations": "Аутоматизације",
-    "feature_automations_desc": "Аутоматски покрените кораке када се нешто деси и добијте обавештења."
-  },
-  "maintenance": {
-    "title": "Одржавање",
-    "description": "Паузирајте аутоматизације статуса хоста, здравља, метрике, контејнера и тунелског искључивања док је рад у току. Праћење, ручна покретања и заказане аутоматизације се настављају.",
-    "denied": "Немате дозволу за преглед одржавања.",
-    "sharedReadOnly": "Овај хост је дељен са вама. Само његов власник може да промени одржавање.",
-    "failed": "Ажурирање одржавања није успело.",
-    "active": "Одржавање је активно",
-    "estimated": "Процењени завршетак",
-    "noAutoEnd": "Процена не завршава одржавање. Завршите га експлицитно када је посао завршен.",
-    "endConfirm": "Да ли желите да завршите одржавање и наставите аутоматизације покренуте догађајима за овог хоста?",
-    "confirmEnd": "Потврди крај",
-    "cancel": "Откажи",
-    "end": "Заврши одржавање",
-    "action": "Акција",
-    "startNow": "Почни сада",
-    "schedule": "Закажите за касније",
-    "reason": "Разлог",
-    "startUtc": "Први почетак (UTC)",
-    "repeat": "Понови",
-    "once": "Једном",
-    "weekly": "Недељно",
-    "monthly": "Месечно",
-    "utcHelp": "Распореди користе UTC време током целе године. Месечни распореди прескачу месеце без изабраног дана. Планирани прозори се не могу преклапати; преоптерећено одржавање се наставља и у каснијим прозорима.",
-    "duration": "Процењено трајање (минути)",
-    "grace": "Грејс период (минути)",
-    "notify": "Обавести ме једном ако је и даље ван мреже након процене плус грејс период",
-    "addSchedule": "Додај распоред",
-    "schedules": "Распореди",
-    "noSchedules": "Нема распореда одржавања.",
-    "completed": "Већ је почело",
-    "minutes_one": "{{count}} минут",
-    "minutes_other": "{{count}} минута",
-    "remove": "Уклони распоред",
-    "loadFailed": "Није могуће освежити статус одржавања. Промене су онемогућене док се не учита.",
-    "loading": "Учитавање статуса одржавања…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "повезати",
-          "disconnect": "искључити се",
-          "offline": "офлајн",
-          "online": "онлајн",
-          "failing": "неуспех",
-          "recovered": "опоравио"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/sv_SE.json b/plugins/automations/locales/translated/sv_SE.json
deleted file mode 100644
index eb0049441..000000000
--- a/plugins/automations/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Visa automatiseringar",
-      "description": "Se automatiseringarna och deras historik."
-    },
-    "create": {
-      "title": "Skapa automatiseringar",
-      "description": "Lägg till nya automatiseringar."
-    },
-    "edit": {
-      "title": "Redigera automatiseringar",
-      "description": "Ändra befintliga automatiseringar."
-    },
-    "delete": {
-      "title": "Ta bort automatiseringar",
-      "description": "Ta bort automatiseringar."
-    },
-    "run": {
-      "title": "Kör automatiseringar",
-      "description": "Utlös en automatisering manuellt."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Automatiseringar",
-        "tabAutomations": "Automatiseringar",
-        "tabRuns": "Löpningar",
-        "tabChannels": "Kanaler",
-        "createAutomation": "Ny automatisering",
-        "backToAutomations": "Tillbaka till Automatiseringar",
-        "createTitle": "Ny automatisering",
-        "editTitle": "Redigera automatisering",
-        "empty": "Inga automatiseringar ännu. Skapa en för att reagera på ett mätvärde, ett schema eller en händelse.",
-        "emptyRuns": "Inga löpningar än.",
-        "channelsHint": "Kanaler konfigureras i aviseringar",
-        "noChannelsHint": "Aviseringen skickas alltid till din inkorg. Lägg till kanaler i Aviseringar för att även skicka den någon annanstans.",
-        "nameLabel": "Namn",
-        "namePlaceholder": "t.ex. Rensa upp /data när den fylls",
-        "nameRequired": "Namn krävs",
-        "descriptionLabel": "Beskrivning",
-        "descriptionPlaceholder": "Valfri beskrivning",
-        "enabledLabel": "Aktiverad",
-        "concurrencyLabel": "Om den redan är igång",
-        "concurrencyHint": "Vad man ska göra när detta utlöses igen innan den sista körningen är klar.",
-        "concurrency": {
-          "skip": "Hoppa över den nya körningen",
-          "queue": "Vänta och spring efter",
-          "allow": "Kör båda samtidigt"
-        },
-        "save": "Spara",
-        "created": "Automatisering skapad",
-        "updated": "Automatisering sparad",
-        "deleted": "Automatisering borttagen",
-        "deleteConfirm": "Vill du ta bort den här automatiseringen? Dess körhistorik raderas också.",
-        "runNow": "Kör nu",
-        "testRun": "Testkörning",
-        "testRunHint": "Kör varje steg men rör ingenting utanför Termix.",
-        "runStarted": "Löpningen har startat",
-        "runFinished": "Körning avslutad: {{status}}",
-        "trigger": "Utlösare",
-        "steps": "Steg",
-        "addStep": "Lägg till steg",
-        "removeStep": "Ta bort steg",
-        "moveUp": "Flytta upp",
-        "moveDown": "Flytta nedåt",
-        "noSteps": "Inga steg ännu. Lägg till ett för att ange vad som ska hända.",
-        "webhookTokenTitle": "Webhook-URL",
-        "webhookTokenDescription": "Detta visas en gång. Spara det nu, det kan inte hämtas senare.",
-        "copy": "Kopiera",
-        "copied": "Kopierad",
-        "viewJson": "JSON",
-        "viewBuilder": "Byggmästare",
-        "viewGraph": "Graf",
-        "lastRun": "Sista körningen",
-        "never": "Aldrig",
-        "duration": "{{seconds}}s",
-        "stepOutput": "Produktion",
-        "stepError": "Fel",
-        "dryRunBadge": "Testkörning",
-        "hostSelector": {
-          "trigger": "Utlösande värd",
-          "host": "Specifik värd",
-          "fleet": "Flotta",
-          "all": "Alla värdar"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Metrisk tröskelvärde",
-          "host_status": "Värden går upp eller ner",
-          "health_check": "Ändringar i hälsokontrollen",
-          "schedule": "Enligt ett schema",
-          "docker_event": "Containerhändelse",
-          "internal_event": "Termix-evenemang",
-          "webhook": "Inkommande webhook"
-        },
-        "stepTypes": {
-          "notify": "Skicka en avisering",
-          "http": "Anropa en URL",
-          "run_snippet": "Kör ett utdrag",
-          "run_command": "Kör ett kommando",
-          "docker": "Styr en container",
-          "tunnel": "Kontrollera en tunnel",
-          "wol": "Väck en värd",
-          "wait": "Vänta",
-          "set_var": "Ställ in en variabel",
-          "if": "Om / annars",
-          "run_automation": "Kör en annan automatisering",
-          "stop": "Stopp"
-        },
-        "statuses": {
-          "running": "Spring",
-          "success": "Framgång",
-          "failed": "Misslyckades",
-          "timeout": "Timeout",
-          "skipped": "Hoppade över",
-          "cancelled": "Avbruten"
-        },
-        "fields": {
-          "host": "Värd",
-          "metric": "Metrisk",
-          "mount": "Monteringspunkt",
-          "operator": "Är",
-          "value": "Värde",
-          "forSeconds": "Uthållen i (sekunder)",
-          "cooldown": "Nedkylningstid (minuter)",
-          "cron": "Cron-uttryck",
-          "intervalSeconds": "Varje (sekund)",
-          "timezone": "Tidszon",
-          "timezoneServer": "Servertid",
-          "timezoneHint": "Cron-tider läses i denna zon. Gäller inte för intervallscheman.",
-          "container": "Behållare",
-          "command": "Kommando",
-          "url": "URL",
-          "method": "Metod",
-          "body": "Kropp",
-          "channels": "Skicka även till",
-          "title": "Titel",
-          "message": "Meddelande",
-          "snippet": "Utdrag",
-          "seconds": "Sekunder",
-          "conditionLeftPlaceholder": "Värde att kontrollera",
-          "conditionRightPlaceholder": "Jämför mot",
-          "variableName": "Variabelnamn",
-          "variableValue": "Värde",
-          "elevated": "Kör med sudo",
-          "onError": "Om detta misslyckas",
-          "allowPrivateNetwork": "Tillåt lokala nätverksadresser",
-          "allowPrivateNetworkHint": "Behövs för en självhostad tjänst på ditt lokala nätverk. Avstängt som standard för att förhindra förfrågningar till interna adresser."
-        },
-        "onError": {
-          "stop": "Stoppa löpningen",
-          "continue": "Fortsätta"
-        },
-        "needsPlugin": "Behöver {{plugin}}",
-        "needsPluginHint": "Denna automatisering hoppas över tills den funktion den behöver är tillgänglig igen.",
-        "offBadge": "Av",
-        "docsLink": "Visa dokument",
-        "ago": {
-          "seconds": "{{count}}sekunder sedan",
-          "minutes": "för {{count}}minuter sedan",
-          "hours": "för {{count}}timmar sedan",
-          "days": "för {{count}}dagar sedan"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Automatiseringar"
-  },
-  "onboarding": {
-    "feature_automations": "Automatiseringar",
-    "feature_automations_desc": "Kör steg automatiskt när något händer och få aviseringar."
-  },
-  "maintenance": {
-    "title": "Underhåll",
-    "description": "Pausa automatiseringar för värdstatus, hälsa, mätvärden, container- och tunnelfrånkoppling medan arbetet pågår. Övervakning, manuella körningar och schemalagda automatiseringar fortsätter.",
-    "denied": "Du har inte behörighet att visa underhåll.",
-    "sharedReadOnly": "Denna värden delades med dig. Endast dess ägare kan ändra underhållet.",
-    "failed": "Underhållet kunde inte uppdateras.",
-    "active": "Underhåll aktivt",
-    "estimated": "Beräknad färdigställande",
-    "noAutoEnd": "Uppskattningen avslutar inte underhållet. Avsluta det uttryckligen när arbetet är slutfört.",
-    "endConfirm": "Vill du avsluta underhållet och återuppta händelseutlösta automatiseringar för den här värden?",
-    "confirmEnd": "Bekräfta slutet",
-    "cancel": "Avboka",
-    "end": "Avsluta underhåll",
-    "action": "Handling",
-    "startNow": "Börja nu",
-    "schedule": "Schema för senare",
-    "reason": "Resonera",
-    "startUtc": "Första start (UTC)",
-    "repeat": "Upprepa",
-    "once": "En gång",
-    "weekly": "Varje vecka",
-    "monthly": "Månatlig",
-    "utcHelp": "Scheman använder UTC under hela året. Månadsscheman hoppar över månader utan vald dag. Planerade fönster kan inte överlappa varandra; underhåll som överskrider schemat fortsätter över senare fönster.",
-    "duration": "Beräknad varaktighet (minuter)",
-    "grace": "Respitperiod (minuter)",
-    "notify": "Meddela en gång om du fortfarande är offline efter uppskattningen plus respitperioden",
-    "addSchedule": "Lägg till schema",
-    "schedules": "Scheman",
-    "noSchedules": "Inga underhållsscheman.",
-    "completed": "Redan påbörjat",
-    "minutes_one": "{{count}} minut",
-    "minutes_other": "{{count}} minuter",
-    "remove": "Ta bort schema",
-    "loadFailed": "Kunde inte uppdatera underhållsstatusen. Ändringar är inaktiverade tills den kan läsas in.",
-    "loading": "Laddar underhållsstatus…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "ansluta",
-          "disconnect": "koppla bort",
-          "offline": "off-line",
-          "online": "online",
-          "failing": "brist",
-          "recovered": "återhämtade sig"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/th_TH.json b/plugins/automations/locales/translated/th_TH.json
deleted file mode 100644
index 11f5a6ce9..000000000
--- a/plugins/automations/locales/translated/th_TH.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "ดูระบบอัตโนมัติ",
-      "description": "ดูการทำงานอัตโนมัติและประวัติการทำงาน"
-    },
-    "create": {
-      "title": "สร้างระบบอัตโนมัติ",
-      "description": "เพิ่มระบบอัตโนมัติใหม่"
-    },
-    "edit": {
-      "title": "แก้ไขระบบอัตโนมัติ",
-      "description": "ปรับเปลี่ยนระบบอัตโนมัติที่มีอยู่เดิม"
-    },
-    "delete": {
-      "title": "ลบระบบอัตโนมัติ",
-      "description": "ลบระบบอัตโนมัติออก"
-    },
-    "run": {
-      "title": "เรียกใช้ระบบอัตโนมัติ",
-      "description": "สั่งการให้ระบบอัตโนมัติทำงานด้วยตนเอง"
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "ระบบอัตโนมัติ",
-        "tabAutomations": "ระบบอัตโนมัติ",
-        "tabRuns": "วิ่ง",
-        "tabChannels": "ช่องต่างๆ",
-        "createAutomation": "ระบบอัตโนมัติใหม่",
-        "backToAutomations": "กลับสู่ระบบอัตโนมัติ",
-        "createTitle": "ระบบอัตโนมัติใหม่",
-        "editTitle": "แก้ไขอัตโนมัติ",
-        "empty": "ยังไม่มีระบบอัตโนมัติใดๆ สร้างระบบอัตโนมัติเพื่อตอบสนองต่อตัวชี้วัด กำหนดการ หรือเหตุการณ์ต่างๆ",
-        "emptyRuns": "ยังไม่มีการทดลองใดๆ เกิดขึ้น",
-        "channelsHint": "ช่องทางต่างๆ ถูกตั้งค่าไว้ในระบบแจ้งเตือน",
-        "noChannelsHint": "การแจ้งเตือนจะส่งไปยังกล่องจดหมายเข้าของคุณเสมอ เพิ่มช่องทางการแจ้งเตือนเพื่อส่งไปยังที่อื่นเพิ่มเติมได้",
-        "nameLabel": "ชื่อ",
-        "namePlaceholder": "เช่น ล้างข้อมูลใน /data เมื่อเต็ม",
-        "nameRequired": "ต้องระบุชื่อ",
-        "descriptionLabel": "คำอธิบาย",
-        "descriptionPlaceholder": "คำอธิบายเพิ่มเติม (ไม่บังคับ)",
-        "enabledLabel": "เปิดใช้งาน",
-        "concurrencyLabel": "หากกำลังทำงานอยู่แล้ว",
-        "concurrencyHint": "ควรทำอย่างไรเมื่อเหตุการณ์นี้เกิดขึ้นอีกครั้งก่อนที่การทำงานครั้งสุดท้ายจะเสร็จสิ้น",
-        "concurrency": {
-          "skip": "ข้ามการวิ่งรอบใหม่ไป",
-          "queue": "รอและวิ่งตาม",
-          "allow": "เรียกใช้ทั้งสองอย่างพร้อมกัน"
-        },
-        "save": "บันทึก",
-        "created": "ระบบอัตโนมัติสร้างขึ้น",
-        "updated": "ระบบอัตโนมัติได้รับการบันทึกแล้ว",
-        "deleted": "ระบบอัตโนมัติลบแล้ว",
-        "deleteConfirm": "ลบระบบอัตโนมัตินี้แล้วใช่ไหม? ประวัติการทำงานของมันก็จะถูกลบไปด้วย",
-        "runNow": "วิ่งเลยตอนนี้",
-        "testRun": "การทดสอบการทำงาน",
-        "testRunHint": "ทำงานทุกขั้นตอน แต่ไม่แตะต้องสิ่งใดนอกเหนือจาก Termix",
-        "runStarted": "การวิ่งเริ่มต้นขึ้นแล้ว",
-        "runFinished": "การทำงานเสร็จสิ้น: {{status}}",
-        "trigger": "สิ่งกระตุ้น",
-        "steps": "ขั้นตอน",
-        "addStep": "เพิ่มขั้นตอน",
-        "removeStep": "ลบขั้นตอน",
-        "moveUp": "เลื่อนขึ้น",
-        "moveDown": "เลื่อนลง",
-        "noSteps": "ยังไม่มีขั้นตอนใดๆ เพิ่มขั้นตอนเพื่ออธิบายว่าควรเกิดอะไรขึ้น",
-        "webhookTokenTitle": "URL ของเว็บฮุค",
-        "webhookTokenDescription": "แสดงเพียงครั้งเดียว บันทึกตอนนี้ ไม่สามารถเรียกดูซ้ำได้ในภายหลัง",
-        "copy": "สำเนา",
-        "copied": "คัดลอกแล้ว",
-        "viewJson": "เจซอน",
-        "viewBuilder": "ผู้สร้าง",
-        "viewGraph": "กราฟ",
-        "lastRun": "การวิ่งครั้งสุดท้าย",
-        "never": "ไม่เคย",
-        "duration": "{{seconds}}s",
-        "stepOutput": "เอาต์พุต",
-        "stepError": "ข้อผิดพลาด",
-        "dryRunBadge": "การทดสอบการทำงาน",
-        "hostSelector": {
-          "trigger": "โฮสต์ทริกเกอร์",
-          "host": "โฮสต์เฉพาะ",
-          "fleet": "กองเรือ",
-          "all": "โฮสต์ทั้งหมด"
-        },
-        "triggerKinds": {
-          "metric_threshold": "เกณฑ์เมตริก",
-          "host_status": "โฮสต์ขึ้นหรือลง",
-          "health_check": "การเปลี่ยนแปลงการตรวจสุขภาพ",
-          "schedule": "ตามกำหนดเวลา",
-          "docker_event": "เหตุการณ์คอนเทนเนอร์",
-          "internal_event": "กิจกรรมเทอร์มิกซ์",
-          "webhook": "เว็บฮุคขาเข้า"
-        },
-        "stepTypes": {
-          "notify": "ส่งการแจ้งเตือน",
-          "http": "เรียกใช้ URL",
-          "run_snippet": "เรียกใช้โค้ดตัวอย่าง",
-          "run_command": "เรียกใช้คำสั่ง",
-          "docker": "ควบคุมคอนเทนเนอร์",
-          "tunnel": "ควบคุมอุโมงค์",
-          "wol": "ปลุกโฮสต์",
-          "wait": "รอ",
-          "set_var": "ตั้งค่าตัวแปร",
-          "if": "ถ้า / มิฉะนั้น",
-          "run_automation": "เรียกใช้ระบบอัตโนมัติอีกครั้ง",
-          "stop": "หยุด"
-        },
-        "statuses": {
-          "running": "วิ่ง",
-          "success": "ความสำเร็จ",
-          "failed": "ล้มเหลว",
-          "timeout": "หมดเวลา",
-          "skipped": "ข้ามไป",
-          "cancelled": "ยกเลิก"
-        },
-        "fields": {
-          "host": "เจ้าภาพ",
-          "metric": "เมตริก",
-          "mount": "จุดยึด",
-          "operator": "เป็น",
-          "value": "ค่า",
-          "forSeconds": "ต่อเนื่องเป็นเวลา (วินาที)",
-          "cooldown": "ระยะเวลาคูลดาวน์ (นาที)",
-          "cron": "การแสดงออกของ Cron",
-          "intervalSeconds": "ทุกๆ (วินาที)",
-          "timezone": "เขตเวลา",
-          "timezoneServer": "เวลาเซิร์ฟเวอร์",
-          "timezoneHint": "เวลาของ Cron จะอ่านได้ในโซนนี้ ไม่สามารถใช้ได้กับตารางเวลาแบบช่วงเวลา",
-          "container": "คอนเทนเนอร์",
-          "command": "สั่งการ",
-          "url": "URL",
-          "method": "วิธี",
-          "body": "ร่างกาย",
-          "channels": "ส่งไปที่ด้วยเช่นกัน",
-          "title": "ชื่อ",
-          "message": "ข้อความ",
-          "snippet": "ส่วนหนึ่ง",
-          "seconds": "วินาที",
-          "conditionLeftPlaceholder": "ค่าที่ต้องตรวจสอบ",
-          "conditionRightPlaceholder": "เปรียบเทียบกับ",
-          "variableName": "ชื่อตัวแปร",
-          "variableValue": "ค่า",
-          "elevated": "เรียกใช้ด้วยคำสั่ง sudo",
-          "onError": "หากวิธีนี้ล้มเหลว",
-          "allowPrivateNetwork": "อนุญาตให้ใช้ที่อยู่เครือข่ายท้องถิ่น",
-          "allowPrivateNetworkHint": "จำเป็นสำหรับบริการที่โฮสต์เองบนเครือข่าย LAN ของคุณ โดยค่าเริ่มต้นจะปิดใช้งานเพื่อป้องกันการร้องขอไปยังที่อยู่ภายใน"
-        },
-        "onError": {
-          "stop": "หยุดการวิ่ง",
-          "continue": "ดำเนินการต่อไป"
-        },
-        "needsPlugin": "ต้องการ {{plugin}}",
-        "needsPluginHint": "กระบวนการอัตโนมัตินี้จะถูกข้ามไปจนกว่าฟีเจอร์ที่ต้องการจะพร้อมใช้งานอีกครั้ง",
-        "offBadge": "ปิด",
-        "docsLink": "ดูเอกสาร",
-        "ago": {
-          "seconds": "{{count}}วินาทีที่แล้ว",
-          "minutes": "{{count}}นาทีที่แล้ว",
-          "hours": "{{count}}ชั่วโมงที่แล้ว",
-          "days": "{{count}}วันก่อน"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "ระบบอัตโนมัติ"
-  },
-  "onboarding": {
-    "feature_automations": "ระบบอัตโนมัติ",
-    "feature_automations_desc": "ดำเนินการตามขั้นตอนโดยอัตโนมัติเมื่อเกิดเหตุการณ์ใดๆ และรับการแจ้งเตือน"
-  },
-  "maintenance": {
-    "title": "การซ่อมบำรุง",
-    "description": "หยุดการตรวจสอบสถานะโฮสต์ สุขภาพ เมตริก คอนเทนเนอร์ และการตัดการเชื่อมต่ออุโมงค์โดยอัตโนมัติชั่วคราวในระหว่างการดำเนินการ การตรวจสอบ การเรียกใช้งานด้วยตนเอง และการทำงานอัตโนมัติตามกำหนดเวลายังคงดำเนินต่อไป",
-    "denied": "คุณไม่มีสิทธิ์ในการดูข้อมูลการบำรุงรักษา",
-    "sharedReadOnly": "โฮสต์นี้ถูกแชร์กับคุณ เจ้าของโฮสต์เท่านั้นที่สามารถเปลี่ยนแปลงการบำรุงรักษาได้",
-    "failed": "ไม่สามารถอัปเดตการบำรุงรักษาได้",
-    "active": "กำลังดำเนินการบำรุงรักษา",
-    "estimated": "คาดว่าจะแล้วเสร็จ",
-    "noAutoEnd": "การประเมินราคาไม่ได้หมายความว่าการบำรุงรักษาจะสิ้นสุดลง ให้ยุติการบำรุงรักษาอย่างชัดเจนเมื่อการทำงานเสร็จสมบูรณ์แล้ว",
-    "endConfirm": "สิ้นสุดโหมดบำรุงรักษาและเริ่มการทำงานอัตโนมัติที่ทำงานเมื่อเกิดเหตุการณ์สำหรับโฮสต์นี้อีกครั้งหรือไม่?",
-    "confirmEnd": "ยืนยันการสิ้นสุด",
-    "cancel": "ยกเลิก",
-    "end": "สิ้นสุดการบำรุงรักษา",
-    "action": "การกระทำ",
-    "startNow": "เริ่มเลยตอนนี้",
-    "schedule": "กำหนดเวลาสำหรับภายหลัง",
-    "reason": "เหตุผล",
-    "startUtc": "เริ่มครั้งแรก (UTC)",
-    "repeat": "ทำซ้ำ",
-    "once": "ครั้งหนึ่ง",
-    "weekly": "รายสัปดาห์",
-    "monthly": "รายเดือน",
-    "utcHelp": "ตารางงานใช้เวลา UTC ตลอดทั้งปี ตารางงานรายเดือนจะข้ามเดือนที่ไม่มีวันที่เลือกไว้ ช่วงเวลาที่วางแผนไว้ไม่สามารถทับซ้อนกันได้ การบำรุงรักษาที่ล่าช้าจะดำเนินการต่อในช่วงเวลาถัดไป",
-    "duration": "ระยะเวลาโดยประมาณ (นาที)",
-    "grace": "ระยะเวลาผ่อนผัน (นาที)",
-    "notify": "แจ้งเตือนครั้งเดียวหากยังคงออฟไลน์หลังจากเวลาที่คาดการณ์และช่วงเวลาผ่อนผันเสร็จสิ้นแล้ว",
-    "addSchedule": "เพิ่มตารางเวลา",
-    "schedules": "ตารางเวลา",
-    "noSchedules": "ไม่มีกำหนดการบำรุงรักษา",
-    "completed": "เริ่มแล้ว",
-    "minutes_one": "{{count}} นาที",
-    "minutes_other": "{{count}} นาที",
-    "remove": "ลบกำหนดการ",
-    "loadFailed": "ไม่สามารถรีเฟรชสถานะการบำรุงรักษาได้ การเปลี่ยนแปลงจะถูกปิดใช้งานจนกว่าจะสามารถโหลดได้",
-    "loading": "กำลังโหลดสถานะการบำรุงรักษา…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "เชื่อมต่อ",
-          "disconnect": "ตัดการเชื่อมต่อ",
-          "offline": "ออฟไลน์",
-          "online": "ออนไลน์",
-          "failing": "ล้มเหลว",
-          "recovered": "ฟื้นตัวแล้ว"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/tr_TR.json b/plugins/automations/locales/translated/tr_TR.json
deleted file mode 100644
index 255dd85c8..000000000
--- a/plugins/automations/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Otomasyonları görüntüle",
-      "description": "Otomasyonları ve tarihçelerini inceleyin."
-    },
-    "create": {
-      "title": "Otomasyonlar oluşturun",
-      "description": "Yeni otomasyonlar ekleyin."
-    },
-    "edit": {
-      "title": "Düzenleme otomasyonları",
-      "description": "Mevcut otomasyonları değiştirin."
-    },
-    "delete": {
-      "title": "Otomasyonları sil",
-      "description": "Otomasyonları kaldırın."
-    },
-    "run": {
-      "title": "Otomasyonları çalıştır",
-      "description": "Otomasyonu manuel olarak tetikleyin."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Otomasyonlar",
-        "tabAutomations": "Otomasyonlar",
-        "tabRuns": "Koşular",
-        "tabChannels": "Kanallar",
-        "createAutomation": "Yeni Otomasyon",
-        "backToAutomations": "Otomasyonlara geri dön",
-        "createTitle": "Yeni Otomasyon",
-        "editTitle": "Düzenleme Otomasyonu",
-        "empty": "Henüz otomasyon yok. Bir ölçüme, bir programa veya bir olaya tepki verecek bir otomasyon oluşturun.",
-        "emptyRuns": "Henüz hiçbir deneme yapılmadı.",
-        "channelsHint": "Uyarılar bölümünde kanallar oluşturulur.",
-        "noChannelsHint": "Bildirim her zaman gelen kutunuza gönderilir. Bildirimleri başka bir yere de göndermek için Bildirimler bölümüne kanallar ekleyin.",
-        "nameLabel": "Ad",
-        "namePlaceholder": "Örneğin, /data klasörü dolduğunda temizle.",
-        "nameRequired": "Ad zorunludur",
-        "descriptionLabel": "Açıklama",
-        "descriptionPlaceholder": "İsteğe bağlı açıklama",
-        "enabledLabel": "Etkin",
-        "concurrencyLabel": "Eğer zaten çalışıyorsa",
-        "concurrencyHint": "Son çalıştırma tamamlanmadan önce bu durum tekrar tetiklendiğinde ne yapılmalı?",
-        "concurrency": {
-          "skip": "Yeni sürümü atla",
-          "queue": "Bekle ve sonra koş",
-          "allow": "İkisini birden çalıştırın"
-        },
-        "save": "Kaydet",
-        "created": "Otomasyon oluşturuldu",
-        "updated": "Otomasyon kaydedildi",
-        "deleted": "Otomasyon silindi",
-        "deleteConfirm": "Bu otomasyonu silerseniz, çalıştırma geçmişi de silinir.",
-        "runNow": "Şimdi çalıştır",
-        "testRun": "Test çalıştırması",
-        "testRunHint": "Her adımı çalıştırır ancak Termix dışındaki hiçbir şeye dokunmaz.",
-        "runStarted": "Koşu başladı",
-        "runFinished": "Çalıştırma tamamlandı: {{status}}",
-        "trigger": "Tetikleyici",
-        "steps": "Adımlar",
-        "addStep": "Adım ekle",
-        "removeStep": "Adımı kaldır",
-        "moveUp": "Yukarı çık",
-        "moveDown": "Aşağıya doğru hareket edin",
-        "noSteps": "Henüz hiçbir adım yok. Ne olması gerektiğini belirtmek için bir adım ekleyin.",
-        "webhookTokenTitle": "Webhook URL",
-        "webhookTokenDescription": "Bu yalnızca bir kez gösterilecektir. Şimdi kaydedin, daha sonra geri alınamaz.",
-        "copy": "Kopyala",
-        "copied": "Kopyalandı",
-        "viewJson": "JSON",
-        "viewBuilder": "İnşaatçı",
-        "viewGraph": "Grafik",
-        "lastRun": "Son koşu",
-        "never": "Hiçbir zaman",
-        "duration": "{{seconds}}s",
-        "stepOutput": "Çıktı",
-        "stepError": "Hata",
-        "dryRunBadge": "Test çalıştırması",
-        "hostSelector": {
-          "trigger": "Tetikleyici sunucu",
-          "host": "Belirli ev sahibi",
-          "fleet": "Filo",
-          "all": "Tüm sunucular"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Metrik eşik",
-          "host_status": "Sunucu yukarı veya aşağı hareket eder.",
-          "health_check": "Sağlık kontrolü değişiklikleri",
-          "schedule": "Bir program dahilinde",
-          "docker_event": "Konteyner olayı",
-          "internal_event": "Termix etkinliği",
-          "webhook": "Gelen web kancası"
-        },
-        "stepTypes": {
-          "notify": "Uyarı gönder",
-          "http": "Bir URL'yi çağırın",
-          "run_snippet": "Bir kod parçası çalıştırın.",
-          "run_command": "Bir komut çalıştır",
-          "docker": "Bir konteyneri kontrol edin.",
-          "tunnel": "Bir tüneli kontrol edin.",
-          "wol": "Bir ev sahibini uyandırın",
-          "wait": "Beklemek",
-          "set_var": "Bir değişken tanımlayın",
-          "if": "Eğer / aksi takdirde",
-          "run_automation": "Başka bir otomasyon çalıştırın",
-          "stop": "Durdurma"
-        },
-        "statuses": {
-          "running": "Çalışıyor",
-          "success": "Başarılı",
-          "failed": "Başarısız",
-          "timeout": "Süre doldu",
-          "skipped": "Atlandı",
-          "cancelled": "İptal edildi"
-        },
-        "fields": {
-          "host": "Ana Bilgisayar",
-          "metric": "Metrik",
-          "mount": "Montaj noktası",
-          "operator": "O",
-          "value": "Değer",
-          "forSeconds": "(Saniye) süreyle sürdürüldü",
-          "cooldown": "Bekleme süresi (dakika)",
-          "cron": "Cron ifadesi",
-          "intervalSeconds": "Her (saniye)",
-          "timezone": "Saat dilimi",
-          "timezoneServer": "Sunucu zamanı",
-          "timezoneHint": "Cron zamanlama ayarları bu bölgede okunur. Aralıklı zamanlamalar için geçerli değildir.",
-          "container": "Konteyner",
-          "command": "Komut",
-          "url": "URL",
-          "method": "Yöntem",
-          "body": "Vücut",
-          "channels": "Ayrıca şuraya da gönderin:",
-          "title": "Başlık",
-          "message": "Mesaj",
-          "snippet": "Alıntı",
-          "seconds": "Saniyeler",
-          "conditionLeftPlaceholder": "Kontrol edilecek değer",
-          "conditionRightPlaceholder": "Karşılaştırın",
-          "variableName": "Değişken adı",
-          "variableValue": "Değer",
-          "elevated": "sudo ile çalıştır",
-          "onError": "Eğer bu başarısız olursa",
-          "allowPrivateNetwork": "Yerel ağ adreslerine izin verin.",
-          "allowPrivateNetworkHint": "Yerel ağınızda kendi sunucunuzda barındırdığınız bir hizmet için gereklidir. Dahili adreslere yapılan istekleri engellemek için varsayılan olarak kapalıdır."
-        },
-        "onError": {
-          "stop": "Koşuyu durdurun",
-          "continue": "Devam edin"
-        },
-        "needsPlugin": "İhtiyaçlar {{plugin}}",
-        "needsPluginHint": "Bu otomasyon, ihtiyaç duyulan özellik tekrar kullanılabilir hale gelene kadar atlanır.",
-        "offBadge": "Kapalı",
-        "docsLink": "Belgelere bak",
-        "ago": {
-          "seconds": "{{count}}saniye önce",
-          "minutes": "{{count}} dakika önce",
-          "hours": "{{count}} saat önce",
-          "days": "{{count}} gün önce"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Otomasyonlar"
-  },
-  "onboarding": {
-    "feature_automations": "Otomasyonlar",
-    "feature_automations_desc": "Bir şey olduğunda adımları otomatik olarak çalıştırın ve bildirim alın."
-  },
-  "maintenance": {
-    "title": "Bakım",
-    "description": "Çalışma devam ederken sunucu durumu, sağlık, ölçüm, konteyner ve tünel bağlantı kesme otomasyonlarını duraklatın. İzleme, manuel çalıştırmalar ve planlanmış otomasyonlar devam eder.",
-    "denied": "Bakım çalışmalarını görüntüleme izniniz yok.",
-    "sharedReadOnly": "Bu sunucu sizinle paylaşıldı. Bakım değişikliklerini yalnızca sahibi yapabilir.",
-    "failed": "Bakım bilgileri güncellenemedi.",
-    "active": "Bakım aktif",
-    "estimated": "Tahmini tamamlanma tarihi",
-    "noAutoEnd": "Tahmin edilen bakım işlemi, bakımın sonunu getirmez. İş tamamlandığında bakım işlemini açıkça sonlandırın.",
-    "endConfirm": "Bu sunucu için bakım işlemlerini sonlandırıp olay tetiklemeli otomasyonları yeniden başlatmak mı istiyorsunuz?",
-    "confirmEnd": "Sonu onaylayın",
-    "cancel": "İptal",
-    "end": "Son bakım",
-    "action": "İşlem",
-    "startNow": "Şimdi başla",
-    "schedule": "Daha sonra için planla",
-    "reason": "Sebep",
-    "startUtc": "İlk başlangıç (UTC)",
-    "repeat": "Tekrarlamak",
-    "once": "Bir kere",
-    "weekly": "Haftalık",
-    "monthly": "Aylık",
-    "utcHelp": "Planlamalar yıl boyunca UTC saat dilimini kullanır. Aylık planlamalar, seçilen günün olmadığı ayları atlar. Planlanan zaman dilimleri üst üste gelemez; uzadıkça bakım çalışmaları daha sonraki zaman dilimlerinde de devam eder.",
-    "duration": "Tahmini süre (dakika)",
-    "grace": "Bekleme süresi (dakika)",
-    "notify": "Tahmini süre ve ek bekleme süresinden sonra hala çevrimdışıysa bir kez bildirim gönderin.",
-    "addSchedule": "Program ekle",
-    "schedules": "Programlar",
-    "noSchedules": "Bakım programı yok.",
-    "completed": "Zaten başladı",
-    "minutes_one": "{{count}} dakika",
-    "minutes_other": "{{count}} dakika",
-    "remove": "Programı kaldır",
-    "loadFailed": "Bakım durumu yenilenemedi. Yüklenene kadar değişiklikler devre dışı bırakılmıştır.",
-    "loading": "Bakım durumu yükleniyor…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "bağlan",
-          "disconnect": "bağlantıyı kes",
-          "offline": "çevrimdışı",
-          "online": "çevrimiçi",
-          "failing": "başarısız",
-          "recovered": "iyileşti"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/uk_UA.json b/plugins/automations/locales/translated/uk_UA.json
deleted file mode 100644
index 2551d1d82..000000000
--- a/plugins/automations/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Переглянути автоматизації",
-      "description": "Перегляньте автоматизації та їхню історію."
-    },
-    "create": {
-      "title": "Створення автоматизацій",
-      "description": "Додайте нові автоматизації."
-    },
-    "edit": {
-      "title": "Редагувати автоматизації",
-      "description": "Змінити існуючі автоматизації."
-    },
-    "delete": {
-      "title": "Видалити автоматизації",
-      "description": "Видаліть автоматизації."
-    },
-    "run": {
-      "title": "Запуск автоматизації",
-      "description": "Запустіть автоматизацію вручну."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Автоматизація",
-        "tabAutomations": "Автоматизація",
-        "tabRuns": "Пробіжки",
-        "tabChannels": "Канали",
-        "createAutomation": "Нова автоматизація",
-        "backToAutomations": "Назад до автоматизації",
-        "createTitle": "Нова автоматизація",
-        "editTitle": "Редагувати автоматизацію",
-        "empty": "Автоматизації поки що немає. Створіть її, щоб реагувати на метрику, розклад або подію.",
-        "emptyRuns": "Поки що жодних пробіжок.",
-        "channelsHint": "Канали налаштовуються в розділі «Сповіщення»",
-        "noChannelsHint": "Сповіщення завжди надходить до вашої поштової скриньки. Додайте канали в розділі \"Сповіщення\", щоб також надсилати його кудись ще.",
-        "nameLabel": "Ім'я",
-        "namePlaceholder": "наприклад, Очищати /дані, коли вони заповнюються",
-        "nameRequired": "Ім'я обов'язкове",
-        "descriptionLabel": "Опис",
-        "descriptionPlaceholder": "Додатковий опис",
-        "enabledLabel": "Увімкнено",
-        "concurrencyLabel": "Якщо воно вже працює",
-        "concurrencyHint": "Що робити, якщо це спрацьовує знову до завершення останнього запуску.",
-        "concurrency": {
-          "skip": "Пропустити новий пробіг",
-          "queue": "Чекай і біжіть за ним",
-          "allow": "Запустіть обидва одночасно"
-        },
-        "save": "Зберегти",
-        "created": "Автоматизація створена",
-        "updated": "Автоматизація збережена",
-        "deleted": "Автоматизацію видалено",
-        "deleteConfirm": "Видалити цю автоматизацію? Історія її запуску також видаляється.",
-        "runNow": "Біжи зараз",
-        "testRun": "Тестовий запуск",
-        "testRunHint": "Виконує кожен крок, але не торкається нічого поза Termix.",
-        "runStarted": "Біг розпочато",
-        "runFinished": "Виконання завершено: {{status}}",
-        "trigger": "Тригер",
-        "steps": "Кроки",
-        "addStep": "Додати крок",
-        "removeStep": "Видалити крок",
-        "moveUp": "Перемістити вгору",
-        "moveDown": "Перемістити вниз",
-        "noSteps": "Кроків поки що немає. Додайте один, щоб пояснити, що має статися.",
-        "webhookTokenTitle": "URL-адреса вебхука",
-        "webhookTokenDescription": "Це відображається один раз. Збережіть це зараз, пізніше це неможливо буде отримати.",
-        "copy": "Копіювати",
-        "copied": "Скопійовано",
-        "viewJson": "JSON",
-        "viewBuilder": "Будівельник",
-        "viewGraph": "Графік",
-        "lastRun": "Останній запуск",
-        "never": "Ніколи",
-        "duration": "{{seconds}}с",
-        "stepOutput": "Вихід",
-        "stepError": "Помилка",
-        "dryRunBadge": "Тестовий запуск",
-        "hostSelector": {
-          "trigger": "Хост-тригер",
-          "host": "Конкретний хост",
-          "fleet": "Флот",
-          "all": "Усі хости"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Поріг показника",
-          "host_status": "Хост піднімається або опускається",
-          "health_check": "Зміни в перевірці стану здоров'я",
-          "schedule": "За розкладом",
-          "docker_event": "Подія контейнера",
-          "internal_event": "Подія Termix",
-          "webhook": "Вхідний вебхук"
-        },
-        "stepTypes": {
-          "notify": "Надіслати сповіщення",
-          "http": "Виклик URL-адреси",
-          "run_snippet": "Виконати фрагмент коду",
-          "run_command": "Виконайте команду",
-          "docker": "Керування контейнером",
-          "tunnel": "Контролюйте тунель",
-          "wol": "Розбудити господаря",
-          "wait": "Зачекайте",
-          "set_var": "Встановити змінну",
-          "if": "Якщо / інакше",
-          "run_automation": "Запустіть ще одну автоматизацію",
-          "stop": "СТІЙ"
-        },
-        "statuses": {
-          "running": "Біг",
-          "success": "Успіх",
-          "failed": "Не вдалося",
-          "timeout": "Час очікування минув",
-          "skipped": "Пропущено",
-          "cancelled": "Скасовано"
-        },
-        "fields": {
-          "host": "Хост",
-          "metric": "Метрика",
-          "mount": "Точка монтування",
-          "operator": "Є",
-          "value": "Значення",
-          "forSeconds": "Триває протягом (секунд)",
-          "cooldown": "Охолодження (хвилини)",
-          "cron": "Cron-вираз",
-          "intervalSeconds": "Кожні (секунди)",
-          "timezone": "Часовий пояс",
-          "timezoneServer": "Час сервера",
-          "timezoneHint": "Час Cron зчитується в цій зоні. Не стосується інтервальних розкладів.",
-          "container": "Контейнер",
-          "command": "Команда",
-          "url": "URL-адреса",
-          "method": "Метод",
-          "body": "Тіло",
-          "channels": "Також надіслати до",
-          "title": "Назва",
-          "message": "Повідомлення",
-          "snippet": "Фрагмент",
-          "seconds": "Секунди",
-          "conditionLeftPlaceholder": "Значення для перевірки",
-          "conditionRightPlaceholder": "Порівняйте з",
-          "variableName": "Ім'я змінної",
-          "variableValue": "Значення",
-          "elevated": "Запустити за допомогою sudo",
-          "onError": "Якщо це не вдасться",
-          "allowPrivateNetwork": "Дозволити адреси локальної мережі",
-          "allowPrivateNetworkHint": "Потрібно для самостійно розміщеної служби у вашій локальній мережі. Вимкнено за замовчуванням, щоб запобігти запитам до внутрішніх адрес."
-        },
-        "onError": {
-          "stop": "Зупинити біг",
-          "continue": "Продовжуйте"
-        },
-        "needsPlugin": "Потребує {{plugin}}",
-        "needsPluginHint": "Ця автоматизація пропускається, доки потрібна функція знову не стане доступною.",
-        "offBadge": "Вимкнено",
-        "docsLink": "Переглянути документи",
-        "ago": {
-          "seconds": "{{count}}с тому",
-          "minutes": "{{count}}хв тому",
-          "hours": "{{count}}год тому",
-          "days": "{{count}}днів тому"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Автоматизація"
-  },
-  "onboarding": {
-    "feature_automations": "Автоматизація",
-    "feature_automations_desc": "Автоматично виконувати кроки, коли щось відбувається, та отримувати сповіщення."
-  },
-  "maintenance": {
-    "title": "Технічне обслуговування",
-    "description": "Призупинити автоматизацію стану хоста, справності, метрик, контейнерів та відключення тунелів під час виконання роботи. Моніторинг, ручні запуски та запланована автоматизація продовжуються.",
-    "denied": "У вас немає дозволу на перегляд технічного обслуговування.",
-    "sharedReadOnly": "Цей хост надано вам. Тільки його власник може змінити налаштування обслуговування.",
-    "failed": "Не вдалося оновити технічне обслуговування.",
-    "active": "Технічне обслуговування активне",
-    "estimated": "Очікуване завершення",
-    "noAutoEnd": "Кошторис не завершує технічне обслуговування. Завершіть його чітко після завершення робіт.",
-    "endConfirm": "Завершити технічне обслуговування та відновити автоматизацію, що спрацьовує за подіями, для цього хоста?",
-    "confirmEnd": "Підтвердити кінець",
-    "cancel": "Скасувати",
-    "end": "Закінчення технічного обслуговування",
-    "action": "Дія",
-    "startNow": "Почати зараз",
-    "schedule": "Запланувати на пізніше",
-    "reason": "Причина",
-    "startUtc": "Перший запуск (UTC)",
-    "repeat": "Повторити",
-    "once": "Одного разу",
-    "weekly": "Щотижнево",
-    "monthly": "Щомісяця",
-    "utcHelp": "Розклади використовують UTC протягом року. Щомісячні розклади пропускають місяці без вибраного дня. Заплановані вікна не можуть перетинатися; перевищення термінів технічного обслуговування продовжується в наступних вікнах.",
-    "duration": "Орієнтовна тривалість (хвилини)",
-    "grace": "Пільговий період (хвилини)",
-    "notify": "Повідомити один раз, якщо після оцінки плюс пільговий період все ще не в мережі",
-    "addSchedule": "Додати розклад",
-    "schedules": "Розклади",
-    "noSchedules": "Немає графіків технічного обслуговування.",
-    "completed": "Вже розпочато",
-    "minutes_one": "{{count}} хвилина",
-    "minutes_other": "{{count}} хвилин",
-    "remove": "Видалити розклад",
-    "loadFailed": "Не вдалося оновити стан обслуговування. Зміни вимкнено, доки його не буде завантажено.",
-    "loading": "Завантаження статусу технічного обслуговування…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "з'єднати",
-          "disconnect": "відключитися",
-          "offline": "офлайн",
-          "online": "онлайн",
-          "failing": "невдача",
-          "recovered": "відновився"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/vi_VN.json b/plugins/automations/locales/translated/vi_VN.json
deleted file mode 100644
index 0bfa1582f..000000000
--- a/plugins/automations/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Xem các quy trình tự động hóa",
-      "description": "Xem các quy trình tự động hóa và lịch sử của chúng."
-    },
-    "create": {
-      "title": "Tạo các quy trình tự động hóa",
-      "description": "Thêm các quy trình tự động hóa mới."
-    },
-    "edit": {
-      "title": "Chỉnh sửa tự động hóa",
-      "description": "Thay đổi các quy trình tự động hóa hiện có."
-    },
-    "delete": {
-      "title": "Xóa các quy trình tự động hóa",
-      "description": "Loại bỏ các quy trình tự động hóa."
-    },
-    "run": {
-      "title": "Chạy các quy trình tự động hóa",
-      "description": "Kích hoạt quy trình tự động bằng tay."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "Tự động hóa",
-        "tabAutomations": "Tự động hóa",
-        "tabRuns": "Chạy",
-        "tabChannels": "Kênh",
-        "createAutomation": "Tự động hóa mới",
-        "backToAutomations": "Quay lại phần Tự động hóa",
-        "createTitle": "Tự động hóa mới",
-        "editTitle": "Tự động chỉnh sửa",
-        "empty": "Hiện chưa có tính năng tự động hóa nào. Hãy tạo một tính năng để phản ứng với một chỉ số, lịch trình hoặc sự kiện nào đó.",
-        "emptyRuns": "Chưa có lượt chạy nào.",
-        "channelsHint": "Các kênh được thiết lập trong mục Cảnh báo.",
-        "noChannelsHint": "Thông báo luôn được gửi đến hộp thư đến của bạn. Thêm kênh trong mục Thông báo để gửi thông báo đến các địa điểm khác nữa.",
-        "nameLabel": "Tên",
-        "namePlaceholder": "Ví dụ: Dọn dẹp thư mục /data khi nó đầy.",
-        "nameRequired": "Tên là bắt buộc",
-        "descriptionLabel": "Mô tả",
-        "descriptionPlaceholder": "Mô tả tùy chọn",
-        "enabledLabel": "Đã bật",
-        "concurrencyLabel": "Nếu nó đang chạy",
-        "concurrencyHint": "Phải làm gì khi sự cố này xảy ra lần nữa trước khi quá trình chạy cuối cùng hoàn tất?",
-        "concurrency": {
-          "skip": "Bỏ qua lần chạy mới",
-          "queue": "Chờ đợi và chạy theo",
-          "allow": "Chạy cả hai cùng một lúc"
-        },
-        "save": "Lưu",
-        "created": "Tự động hóa được tạo",
-        "updated": "Tự động hóa đã được lưu",
-        "deleted": "Tự động hóa đã bị xóa",
-        "deleteConfirm": "Xóa tự động hóa này? Lịch sử chạy của nó cũng bị xóa.",
-        "runNow": "Chạy ngay",
-        "testRun": "Chạy thử nghiệm",
-        "testRunHint": "Nó thực hiện mọi bước nhưng không chạm vào bất cứ thứ gì bên ngoài Termix.",
-        "runStarted": "Chạy bắt đầu",
-        "runFinished": "Quá trình chạy đã hoàn tất: {{status}}",
-        "trigger": "Kích hoạt",
-        "steps": "Các bước",
-        "addStep": "Thêm bước",
-        "removeStep": "Xóa bước",
-        "moveUp": "Tiến lên",
-        "moveDown": "Di chuyển xuống",
-        "noSteps": "Chưa có bước nào. Hãy thêm một bước để mô tả những gì cần xảy ra.",
-        "webhookTokenTitle": "URL Webhook",
-        "webhookTokenDescription": "Thông tin này chỉ hiển thị một lần. Hãy lưu lại ngay, bạn sẽ không thể khôi phục lại sau này.",
-        "copy": "Sao chép",
-        "copied": "Đã sao chép",
-        "viewJson": "JSON",
-        "viewBuilder": "Nhà xây dựng",
-        "viewGraph": "Đồ thị",
-        "lastRun": "Lần chạy cuối",
-        "never": "Chưa bao giờ",
-        "duration": "{{seconds}}s",
-        "stepOutput": "Đầu ra",
-        "stepError": "Lỗi",
-        "dryRunBadge": "Chạy thử nghiệm",
-        "hostSelector": {
-          "trigger": "Máy chủ kích hoạt",
-          "host": "Máy chủ cụ thể",
-          "fleet": "Hạm đội",
-          "all": "Tất cả máy chủ"
-        },
-        "triggerKinds": {
-          "metric_threshold": "Ngưỡng số liệu",
-          "host_status": "Máy chủ tăng hoặc giảm",
-          "health_check": "Thay đổi trong kiểm tra sức khỏe",
-          "schedule": "Theo lịch trình",
-          "docker_event": "Sự kiện container",
-          "internal_event": "Sự kiện Termix",
-          "webhook": "Webhook đến"
-        },
-        "stepTypes": {
-          "notify": "Gửi thông báo",
-          "http": "Gọi một URL",
-          "run_snippet": "Chạy một đoạn mã",
-          "run_command": "Chạy một lệnh",
-          "docker": "Kiểm soát một container",
-          "tunnel": "Kiểm soát đường hầm",
-          "wol": "Đánh thức một chủ nhà",
-          "wait": "Chờ đợi",
-          "set_var": "Đặt một biến",
-          "if": "Nếu/ngược lại",
-          "run_automation": "Chạy một quy trình tự động hóa khác",
-          "stop": "Bit dừng"
-        },
-        "statuses": {
-          "running": "Đang chạy",
-          "success": "Thành công",
-          "failed": "Thất bại",
-          "timeout": "Hết thời gian",
-          "skipped": "Bỏ qua",
-          "cancelled": "Đã hủy"
-        },
-        "fields": {
-          "host": "Máy chủ",
-          "metric": "Chỉ số",
-          "mount": "Điểm gắn kết",
-          "operator": "Là",
-          "value": "Giá trị",
-          "forSeconds": "Duy trì trong (giây)",
-          "cooldown": "Thời gian chờ (phút)",
-          "cron": "Biểu thức Cron",
-          "intervalSeconds": "Mỗi (giây)",
-          "timezone": "Múi giờ",
-          "timezoneServer": "Thời gian máy chủ",
-          "timezoneHint": "Thời gian Cron được đọc trong vùng này. Không áp dụng cho lịch trình theo khoảng thời gian.",
-          "container": "Thùng chứa",
-          "command": "Lệnh",
-          "url": "URL",
-          "method": "Phương pháp",
-          "body": "Thân hình",
-          "channels": "Cũng gửi đến",
-          "title": "Tiêu đề",
-          "message": "Tin nhắn",
-          "snippet": "Đoạn trích",
-          "seconds": "Giây",
-          "conditionLeftPlaceholder": "Giá trị cần kiểm tra",
-          "conditionRightPlaceholder": "So sánh với",
-          "variableName": "Tên biến",
-          "variableValue": "Giá trị",
-          "elevated": "Chạy với quyền sudo",
-          "onError": "Nếu điều này thất bại",
-          "allowPrivateNetwork": "Cho phép địa chỉ mạng cục bộ",
-          "allowPrivateNetworkHint": "Cần thiết cho dịch vụ tự lưu trữ trên mạng LAN của bạn. Mặc định là tắt để ngăn chặn các yêu cầu đến các địa chỉ nội bộ."
-        },
-        "onError": {
-          "stop": "Dừng cuộc chạy",
-          "continue": "Tiếp tục"
-        },
-        "needsPlugin": "Nhu cầu {{plugin}}",
-        "needsPluginHint": "Quá trình tự động hóa này sẽ bị bỏ qua cho đến khi tính năng cần thiết được khôi phục.",
-        "offBadge": "Tắt",
-        "docsLink": "Xem tài liệu",
-        "ago": {
-          "seconds": "{{count}}giây trước",
-          "minutes": "{{count}} phút trước",
-          "hours": "{{count}} giờ trước",
-          "days": "{{count}} ngày trước"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "Tự động hóa"
-  },
-  "onboarding": {
-    "feature_automations": "Tự động hóa",
-    "feature_automations_desc": "Thực hiện các bước tự động khi có sự kiện xảy ra và nhận thông báo."
-  },
-  "maintenance": {
-    "title": "Bảo trì",
-    "description": "Tạm dừng các hoạt động tự động hóa về trạng thái máy chủ, sức khỏe, số liệu, container và ngắt kết nối đường hầm trong khi công việc đang được tiến hành. Việc giám sát, chạy thủ công và các hoạt động tự động hóa theo lịch trình vẫn tiếp tục.",
-    "denied": "Bạn không có quyền xem thông tin bảo trì.",
-    "sharedReadOnly": "Máy chủ này được chia sẻ với bạn. Chỉ chủ sở hữu mới có thể thay đổi cài đặt bảo trì.",
-    "failed": "Không thể cập nhật bảo trì.",
-    "active": "Đang bảo trì",
-    "estimated": "Thời gian hoàn thành dự kiến",
-    "noAutoEnd": "Bản dự toán không kết thúc quá trình bảo trì. Hãy kết thúc quá trình bảo trì một cách rõ ràng khi công việc hoàn tất.",
-    "endConfirm": "Kết thúc bảo trì và tiếp tục các tự động hóa kích hoạt sự kiện cho máy chủ này?",
-    "confirmEnd": "Xác nhận kết thúc",
-    "cancel": "Hủy",
-    "end": "Kết thúc bảo trì",
-    "action": "Hành động",
-    "startNow": "Bắt đầu ngay bây giờ",
-    "schedule": "Lên lịch cho thời gian sau",
-    "reason": "Lý do",
-    "startUtc": "Lần khởi động đầu tiên (UTC)",
-    "repeat": "Lặp lại",
-    "once": "Một lần",
-    "weekly": "Hàng tuần",
-    "monthly": "Hàng tháng",
-    "utcHelp": "Lịch trình sử dụng múi giờ UTC suốt cả năm. Lịch trình hàng tháng sẽ bỏ qua các tháng không có ngày đã chọn. Các khung thời gian đã lên kế hoạch không được chồng chéo; việc bảo trì kéo dài sẽ tiếp tục sang các khung thời gian sau đó.",
-    "duration": "Thời gian ước tính (phút)",
-    "grace": "Thời gian ân hạn (phút)",
-    "notify": "Thông báo một lần nếu vẫn ngoại tuyến sau thời gian ước tính cộng thêm thời gian gia hạn.",
-    "addSchedule": "Thêm lịch trình",
-    "schedules": "Lịch trình",
-    "noSchedules": "Không có lịch bảo trì.",
-    "completed": "Đã bắt đầu",
-    "minutes_one": "{{count}} phút",
-    "minutes_other": "{{count}} phút",
-    "remove": "Xóa lịch trình",
-    "loadFailed": "Không thể cập nhật trạng thái bảo trì. Các thay đổi bị vô hiệu hóa cho đến khi có thể tải lại.",
-    "loading": "Đang tải trạng thái bảo trì…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "kết nối",
-          "disconnect": "ngắt kết nối",
-          "offline": "ngoại tuyến",
-          "online": "trực tuyến",
-          "failing": "thất bại",
-          "recovered": "đã hồi phục"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/zh_CN.json b/plugins/automations/locales/translated/zh_CN.json
deleted file mode 100644
index 26d6d743e..000000000
--- a/plugins/automations/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "查看自动化流程",
-      "description": "查看自动化流程及其发展历程。"
-    },
-    "create": {
-      "title": "创建自动化流程",
-      "description": "添加新的自动化流程。"
-    },
-    "edit": {
-      "title": "编辑自动化",
-      "description": "修改现有自动化流程。"
-    },
-    "delete": {
-      "title": "删除自动化",
-      "description": "移除自动化流程。"
-    },
-    "run": {
-      "title": "运行自动化",
-      "description": "手动触发自动化流程。"
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "自动化",
-        "tabAutomations": "自动化",
-        "tabRuns": "运行记录",
-        "tabChannels": "通道",
-        "createAutomation": "新自动化",
-        "backToAutomations": "返回自动化页面",
-        "createTitle": "新自动化",
-        "editTitle": "编辑自动化",
-        "empty": "目前还没有自动化流程。您可以创建一个自动化流程，使其能够根据指标、日程安排或事件做出反应。",
-        "emptyRuns": "暂无运行记录。",
-        "channelsHint": "频道在警报中设置",
-        "noChannelsHint": "提醒信息始终会发送到您的收件箱。您可以在“提醒”中添加其他渠道，以便将提醒信息也发送到其他位置。",
-        "nameLabel": "名称",
-        "namePlaceholder": "例如，当 /data 目录填满时进行清理。",
-        "nameRequired": "名称为必填项",
-        "descriptionLabel": "描述",
-        "descriptionPlaceholder": "可选描述",
-        "enabledLabel": "已启用",
-        "concurrencyLabel": "如果它已经在运行",
-        "concurrencyHint": "如果在上次运行结束前再次触发此问题，该怎么办？",
-        "concurrency": {
-          "skip": "跳过新一轮",
-          "queue": "稍等会再运行",
-          "allow": "同时运行这两个程序"
-        },
-        "save": "保存",
-        "created": "自动化已创建",
-        "updated": "自动化已保存",
-        "deleted": "自动化已删除",
-        "deleteConfirm": "删除此自动化流程？其运行历史记录也会被删除。",
-        "runNow": "立即运行",
-        "testRun": "测试运行",
-        "testRunHint": "执行所有步骤，但不触及 Termix 之外的任何内容。",
-        "runStarted": "运行已启动",
-        "runFinished": "运行结束： {{status}}",
-        "trigger": "触发器",
-        "steps": "步骤",
-        "addStep": "添加步骤",
-        "removeStep": "移除步骤",
-        "moveUp": "向上",
-        "moveDown": "向下",
-        "noSteps": "暂无步骤。请添加步骤说明应该发生什么。",
-        "webhookTokenTitle": "Webhook URL",
-        "webhookTokenDescription": "此信息仅显示一次。请立即保存，之后将无法调取。",
-        "copy": "复制",
-        "copied": "已复制",
-        "viewJson": "JSON",
-        "viewBuilder": "构建器",
-        "viewGraph": "图形",
-        "lastRun": "上次运行",
-        "never": "从未",
-        "duration": "{{seconds}}s",
-        "stepOutput": "输出",
-        "stepError": "错误",
-        "dryRunBadge": "测试运行",
-        "hostSelector": {
-          "trigger": "触发主机",
-          "host": "特定主机",
-          "fleet": "舰队",
-          "all": "所有主机"
-        },
-        "triggerKinds": {
-          "metric_threshold": "指标阈值",
-          "host_status": "主机上线或离线",
-          "health_check": "健康检查变化",
-          "schedule": "按计划",
-          "docker_event": "容器事件",
-          "internal_event": "Termix 事件",
-          "webhook": "传入的 webhook"
-        },
-        "stepTypes": {
-          "notify": "发送提醒",
-          "http": "调用 URL",
-          "run_snippet": "运行一段代码片段",
-          "run_command": "运行命令",
-          "docker": "控制容器",
-          "tunnel": "控制隧道",
-          "wol": "唤醒主机",
-          "wait": "等待",
-          "set_var": "设置变量",
-          "if": "如果/否则",
-          "run_automation": "运行另一个自动化程序",
-          "stop": "停止"
-        },
-        "statuses": {
-          "running": "运行中",
-          "success": "成功",
-          "failed": "失败",
-          "timeout": "超时",
-          "skipped": "跳过",
-          "cancelled": "已取消"
-        },
-        "fields": {
-          "host": "主机",
-          "metric": "指标",
-          "mount": "挂载点",
-          "operator": "是",
-          "value": "值",
-          "forSeconds": "持续（秒）",
-          "cooldown": "冷却时间（分钟）",
-          "cron": "Cron 表达式",
-          "intervalSeconds": "每隔（秒）",
-          "timezone": "时区",
-          "timezoneServer": "服务器时间",
-          "timezoneHint": "此区域读取 cron 任务的时间。不适用于间隔任务。",
-          "container": "容器",
-          "command": "命令",
-          "url": "URL",
-          "method": "方法",
-          "body": "请求体",
-          "channels": "也发送到",
-          "title": "标题",
-          "message": "消息",
-          "snippet": "片段",
-          "seconds": "秒",
-          "conditionLeftPlaceholder": "待检查的值",
-          "conditionRightPlaceholder": "与……比较",
-          "variableName": "变量名",
-          "variableValue": "值",
-          "elevated": "使用 sudo 运行",
-          "onError": "如果失败",
-          "allowPrivateNetwork": "允许本地网络地址",
-          "allowPrivateNetworkHint": "在局域网内运行自托管服务时需要此功能。默认情况下处于关闭状态，以防止向内部地址发送请求。"
-        },
-        "onError": {
-          "stop": "停止运行",
-          "continue": "继续"
-        },
-        "needsPlugin": "需要 {{plugin}}",
-        "needsPluginHint": "该自动化流程将被跳过，直到所需的功能再次可用为止。",
-        "offBadge": "关闭",
-        "docsLink": "查看文档",
-        "ago": {
-          "seconds": "{{count}}秒前",
-          "minutes": "{{count}} 分钟前",
-          "hours": "{{count}} 小时前",
-          "days": "{{count}} 天前"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "自动化"
-  },
-  "onboarding": {
-    "feature_automations": "自动化",
-    "feature_automations_desc": "触发特定事件时自动执行任务，并接收通知。"
-  },
-  "maintenance": {
-    "title": "维护中",
-    "description": "工作进行期间，暂停主机状态、健康状况、指标、容器和隧道断开连接的自动化操作。监控、手动运行和计划的自动化操作将继续进行。",
-    "denied": "您没有权限查看维护信息。",
-    "sharedReadOnly": "这台主机是与您共享的。只有主机所有者才能更改维护设置。",
-    "failed": "维护信息无法更新。",
-    "active": "维护活动",
-    "estimated": "预计完成时间",
-    "noAutoEnd": "估价并不意味着维护工作结束。工作完成后，应明确终止维护合同。",
-    "endConfirm": "结束此主机的维护并恢复事件触发的自动化操作？",
-    "confirmEnd": "确认结束",
-    "cancel": "取消",
-    "end": "维护结束",
-    "action": "操作",
-    "startNow": "立即开始",
-    "schedule": "稍后安排",
-    "reason": "原因",
-    "startUtc": "首次启动（UTC）",
-    "repeat": "重复",
-    "once": "一次",
-    "weekly": "每周",
-    "monthly": "月度",
-    "utcHelp": "全年所有计划均采用世界协调时 (UTC)。每月计划会跳过没有所选日期的月份。计划窗口不能重叠；超时维护会在后续窗口继续进行。",
-    "duration": "预计持续时间（分钟）",
-    "grace": "宽限期（分钟）",
-    "notify": "如果在预估时间和宽限期结束后仍离线，请通知一次。",
-    "addSchedule": "添加日程",
-    "schedules": "日程安排",
-    "noSchedules": "没有维护计划。",
-    "completed": "已经开始",
-    "minutes_one": "{{count}} 分钟",
-    "minutes_other": "{{count}} 分钟",
-    "remove": "移除日程",
-    "loadFailed": "无法刷新维护状态。更改功能已禁用，待状态加载完毕后方可启用。",
-    "loading": "正在加载维护状态…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "连接",
-          "disconnect": "断开连接",
-          "offline": "离线",
-          "online": "在线",
-          "failing": "失败",
-          "recovered": "恢复"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/locales/translated/zh_TW.json b/plugins/automations/locales/translated/zh_TW.json
deleted file mode 100644
index 3b2c704af..000000000
--- a/plugins/automations/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,225 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "查看自動化流程",
-      "description": "查看自動化流程及其發展歷程。"
-    },
-    "create": {
-      "title": "建立自動化流程",
-      "description": "新增新的自動化流程。"
-    },
-    "edit": {
-      "title": "編輯自動化",
-      "description": "修改現有自動化流程。"
-    },
-    "delete": {
-      "title": "刪除自動化",
-      "description": "移除自動化流程。"
-    },
-    "run": {
-      "title": "運作自動化",
-      "description": "手動觸發自動化流程。"
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "automations": {
-        "title": "自動化",
-        "tabAutomations": "自動化",
-        "tabRuns": "跑",
-        "tabChannels": "通道",
-        "createAutomation": "新自動化",
-        "backToAutomations": "返回自動化頁面",
-        "createTitle": "新自動化",
-        "editTitle": "編輯自動化",
-        "empty": "目前還沒有自動化流程。您可以建立一個自動化流程，使其能夠根據指標、日程安排或事件做出反應。",
-        "emptyRuns": "目前還沒有人運行。",
-        "channelsHint": "頻道在警報中設置",
-        "noChannelsHint": "提醒訊息始終會傳送到您的收件匣。您可以在「提醒」中新增其他管道，以便將提醒訊息也傳送到其他位置。",
-        "nameLabel": "名稱",
-        "namePlaceholder": "例如，當 /data 目錄填滿時進行清理。",
-        "nameRequired": "名稱為必填",
-        "descriptionLabel": "說明",
-        "descriptionPlaceholder": "選用說明",
-        "enabledLabel": "已啟用",
-        "concurrencyLabel": "如果它已經在運行",
-        "concurrencyHint": "如果在上次運行結束前再次觸發此問題，該怎麼辦？",
-        "concurrency": {
-          "skip": "跳過新一輪",
-          "queue": "等待並追趕",
-          "allow": "同時運行這兩個程序"
-        },
-        "save": "儲存",
-        "created": "自動化創建",
-        "updated": "自動化保存",
-        "deleted": "自動化刪除",
-        "deleteConfirm": "刪除此自動化流程？其運行歷史記錄也會被刪除。",
-        "runNow": "立即運行",
-        "testRun": "測試運行",
-        "testRunHint": "執行所有步驟，但不觸及 Termix 以外的任何內容。",
-        "runStarted": "運行已啟動",
-        "runFinished": "運轉結束： {{status}}",
-        "trigger": "觸發條件",
-        "steps": "步驟",
-        "addStep": "新增步驟",
-        "removeStep": "移除步驟",
-        "moveUp": "向上",
-        "moveDown": "向下",
-        "noSteps": "暫無步驟。請加入步驟說明應該發生什麼。",
-        "webhookTokenTitle": "Webhook URL",
-        "webhookTokenDescription": "此資訊僅顯示一次。請立即儲存，之後將無法調取。",
-        "copy": "複製",
-        "copied": "已複製",
-        "viewJson": "JSON",
-        "viewBuilder": "建造者",
-        "viewGraph": "圖形",
-        "lastRun": "最後一次運行",
-        "never": "從未",
-        "duration": "{{seconds}}s",
-        "stepOutput": "輸出",
-        "stepError": "錯誤",
-        "dryRunBadge": "測試運行",
-        "hostSelector": {
-          "trigger": "觸發主機",
-          "host": "特定主機",
-          "fleet": "艦隊",
-          "all": "所有主機"
-        },
-        "triggerKinds": {
-          "metric_threshold": "指標閾值",
-          "host_status": "主機升溫或降溫",
-          "health_check": "健康檢查變化",
-          "schedule": "按計劃",
-          "docker_event": "容器事件",
-          "internal_event": "Termix 活動",
-          "webhook": "傳入的 webhook"
-        },
-        "stepTypes": {
-          "notify": "發送提醒",
-          "http": "呼叫 URL",
-          "run_snippet": "運行一段程式碼片段",
-          "run_command": "運行命令",
-          "docker": "控制容器",
-          "tunnel": "控制隧道",
-          "wol": "喚醒主機",
-          "wait": "等待",
-          "set_var": "設定變數",
-          "if": "如果/否則",
-          "run_automation": "執行另一個自動化流程",
-          "stop": "停止位元"
-        },
-        "statuses": {
-          "running": "執行中",
-          "success": "成功",
-          "failed": "失敗",
-          "timeout": "超時",
-          "skipped": "跳過",
-          "cancelled": "取消"
-        },
-        "fields": {
-          "host": "主機",
-          "metric": "指標",
-          "mount": "登山點",
-          "operator": "是",
-          "value": "價值",
-          "forSeconds": "持續（秒）",
-          "cooldown": "冷卻時間（分鐘）",
-          "cron": "複製表達式",
-          "intervalSeconds": "每隔（秒）",
-          "timezone": "時區",
-          "timezoneServer": "伺服器時間",
-          "timezoneHint": "此區域讀取 cron 任務的時間。不適用於間隔任務。",
-          "container": "容器",
-          "command": "指令",
-          "url": "URL",
-          "method": "方法",
-          "body": "身體",
-          "channels": "也發送到",
-          "title": "標題",
-          "message": "訊息",
-          "snippet": "片段",
-          "seconds": "秒",
-          "conditionLeftPlaceholder": "待檢查的數值",
-          "conditionRightPlaceholder": "與…比較",
-          "variableName": "變數名",
-          "variableValue": "價值",
-          "elevated": "使用 sudo 運行",
-          "onError": "如果失敗",
-          "allowPrivateNetwork": "允許本地網路位址",
-          "allowPrivateNetworkHint": "在區域網路內執行自託管服務時需要此功能。預設為關閉狀態，以防止向內部位址發送請求。"
-        },
-        "onError": {
-          "stop": "停止奔跑",
-          "continue": "繼續"
-        },
-        "needsPlugin": "需要 {{plugin}}",
-        "needsPluginHint": "這個自動化流程將被跳過，直到所需的功能再次可用為止。",
-        "offBadge": "關閉",
-        "docsLink": "檢視文件",
-        "ago": {
-          "seconds": "{{count}}秒前",
-          "minutes": "{{count}} 分鐘前",
-          "hours": "{{count}} 小時前",
-          "days": "{{count}} 天前"
-        }
-      }
-    }
-  },
-  "nav": {
-    "automations": "自動化"
-  },
-  "onboarding": {
-    "feature_automations": "自動化",
-    "feature_automations_desc": "當發生某些事情時，自動運行步驟並接收通知。"
-  },
-  "maintenance": {
-    "title": "維護",
-    "description": "工作進行期間，暫停主機狀態、健康狀況、指標、容器和隧道斷開連線的自動化操作。監控、手動運行和計劃的自動化操作將繼續進行。",
-    "denied": "您沒有權限查看維護資訊。",
-    "sharedReadOnly": "這台主機是與您共享的。只有主機所有者才能變更維護設定。",
-    "failed": "維護資訊無法更新。",
-    "active": "維護活動",
-    "estimated": "預計完成時間",
-    "noAutoEnd": "估價並不意味著維護工作結束。工作完成後，應明確終止維護合約。",
-    "endConfirm": "結束此主機的維護並恢復事件觸發的自動化操作？",
-    "confirmEnd": "確認結束",
-    "cancel": "取消",
-    "end": "維護結束",
-    "action": "動作",
-    "startNow": "立即開始",
-    "schedule": "稍後安排",
-    "reason": "原因",
-    "startUtc": "首次啟動（UTC）",
-    "repeat": "重複",
-    "once": "一次",
-    "weekly": "每週",
-    "monthly": "每月",
-    "utcHelp": "全年所有計劃均採用世界協調時 (UTC)。每月計劃會跳過沒有所選日期的月份。計劃視窗不能重疊；逾時維護會在後續視窗繼續進行。",
-    "duration": "預計持續時間（分鐘）",
-    "grace": "寬限期（分鐘）",
-    "notify": "如果在預估時間和寬限期結束後仍離線，請通知一次。",
-    "addSchedule": "新增日程",
-    "schedules": "日程安排",
-    "noSchedules": "沒有維護計劃。",
-    "completed": "已經開始",
-    "minutes_one": "{{count}} 分鐘",
-    "minutes_other": "{{count}} 分鐘",
-    "remove": "移除行程",
-    "loadFailed": "無法刷新維護狀態。更改功能已停用，待狀態載入完畢後方可啟用。",
-    "loading": "正在載入維護狀態…"
-  },
-  "ui": {
-    "sidebar": {
-      "automations": {
-        "options": {
-          "connect": "連線",
-          "disconnect": "中斷連線",
-          "offline": "離線",
-          "online": "在線",
-          "failing": "失敗",
-          "recovered": "恢復"
-        }
-      }
-    }
-  }
-}
diff --git a/plugins/automations/manifest.json b/plugins/automations/manifest.json
deleted file mode 100644
index 0da548831..000000000
--- a/plugins/automations/manifest.json
+++ /dev/null
@@ -1,139 +0,0 @@
-{
-  "id": "automations",
-  "name": "Automations",
-  "version": "1.0.0",
-  "description": "Run actions on your hosts on a schedule or when something happens, like a host going down or a metric crossing a limit.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Infrastructure",
-  "icon": "Workflow",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "hosts:read",
-    "credentials:use",
-    "credentials:read",
-    "ssh:connect",
-    "db:own",
-    "events:core",
-    "notify:send",
-    "network:outbound",
-    "network:serve",
-    "settings:read-core",
-    "ui:surface",
-    "users:impersonate"
-  ],
-  "optionalDependencies": {
-    "fleets": "^1.0.0",
-    "tunnels": "^1.0.0",
-    "docker": "^1.0.0",
-    "host-metrics": "^1.0.0",
-    "wake-on-lan": "^1.0.0"
-  },
-  "requires": [
-    {
-      "service": "snippets.access",
-      "versionRange": "^1.0.0"
-    },
-    {
-      "service": "fleets.access",
-      "versionRange": "^1.0.0",
-      "optional": true
-    },
-    {
-      "service": "tunnels.access",
-      "versionRange": "^1.0.0",
-      "optional": true
-    },
-    {
-      "service": "docker.containers",
-      "versionRange": "^1.0.0",
-      "optional": true
-    },
-    {
-      "service": "docker.events",
-      "versionRange": "^1.0.0",
-      "optional": true
-    },
-    {
-      "service": "host-metrics.viewers",
-      "versionRange": "^1.0.0",
-      "optional": true
-    },
-    {
-      "service": "wake-on-lan.send",
-      "versionRange": "^1.0.0",
-      "optional": true
-    }
-  ],
-  "provides": [
-    {
-      "service": "automations.access",
-      "version": "1.0.0",
-      "permission": "automations.view"
-    }
-  ],
-  "contributes": {
-    "tabs": [
-      {
-        "id": "automations",
-        "titleKey": "nav.automations",
-        "icon": "Workflow",
-        "openFrom": ["rail"]
-      },
-      {
-        "id": "host_maintenance",
-        "titleKey": "maintenance.title",
-        "icon": "Wrench",
-        "openFrom": ["host-context-menu"]
-      }
-    ],
-    "permissions": [
-      {
-        "name": "view",
-        "titleKey": "permissions.view.title",
-        "descriptionKey": "permissions.view.description",
-        "defaultRoles": ["user"]
-      },
-      {
-        "name": "create",
-        "titleKey": "permissions.create.title",
-        "descriptionKey": "permissions.create.description",
-        "defaultRoles": ["user"]
-      },
-      {
-        "name": "edit",
-        "titleKey": "permissions.edit.title",
-        "descriptionKey": "permissions.edit.description",
-        "defaultRoles": ["user"]
-      },
-      {
-        "name": "delete",
-        "titleKey": "permissions.delete.title",
-        "descriptionKey": "permissions.delete.description",
-        "defaultRoles": ["user"]
-      },
-      {
-        "name": "run",
-        "titleKey": "permissions.run.title",
-        "descriptionKey": "permissions.run.description",
-        "defaultRoles": ["user"]
-      }
-    ],
-    "http": {
-      "legacyPaths": ["/automations/webhook"]
-    },
-    "uses": ["alerts.openChannels"]
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"],
-  "dependencies": {
-    "snippets": "^1.0.0"
-  },
-  "desktop": "server"
-}
diff --git a/plugins/automations/migrations/mysql/0001_adopt_automations.sql b/plugins/automations/migrations/mysql/0001_adopt_automations.sql
deleted file mode 100644
index 714c5f203..000000000
--- a/plugins/automations/migrations/mysql/0001_adopt_automations.sql
+++ /dev/null
@@ -1,86 +0,0 @@
--- automations 0001: adopt_automations
--- Generated by termix-plugin migrations. Review before committing.
--- Hand-edited: keeps the legacy foreign keys the SDK cannot declare
--- (links between these tables, and a channel link to notification_channels).
-
-CREATE TABLE IF NOT EXISTS `automations` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `name` text NOT NULL,
-  `description` text,
-  `enabled` boolean NOT NULL DEFAULT true,
-  `definition` text NOT NULL,
-  `definition_version` int NOT NULL DEFAULT 1,
-  `concurrency_policy` text NOT NULL DEFAULT ('skip'),
-  `max_run_seconds` int NOT NULL DEFAULT 300,
-  `dry_run` boolean NOT NULL DEFAULT false,
-  `last_run_at` text,
-  `last_run_status` text,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `automations` TO `p_automations_automations`;
-CREATE TABLE IF NOT EXISTS `automation_trigger_state` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `automation_id` int NOT NULL,
-  `state_key` varchar(255) NOT NULL,
-  `breach_started_at` text,
-  `last_fired_at` text,
-  `last_value` double,
-  `last_observed_state` text,
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`automation_id`) REFERENCES `p_automations_automations` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `automation_trigger_state` TO `p_automations_trigger_state`;
-CREATE TABLE IF NOT EXISTS `automation_schedules` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `automation_id` int NOT NULL,
-  `cron` text,
-  `interval_seconds` int,
-  `timezone` text,
-  `next_due_at` varchar(255),
-  `last_tick_at` text,
-  FOREIGN KEY (`automation_id`) REFERENCES `p_automations_automations` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `automation_schedules` TO `p_automations_schedules`;
-CREATE TABLE IF NOT EXISTS `automation_runs` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `automation_id` int NOT NULL,
-  `user_id` varchar(255) NOT NULL,
-  `trigger_type` text NOT NULL,
-  `trigger_context` text,
-  `status` text NOT NULL,
-  `started_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `finished_at` text,
-  `duration_ms` int,
-  `error` text,
-  `dry_run` boolean NOT NULL DEFAULT false,
-  `parent_run_id` int,
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`automation_id`) REFERENCES `p_automations_automations` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `automation_runs` TO `p_automations_runs`;
-CREATE TABLE IF NOT EXISTS `automation_run_steps` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `run_id` int NOT NULL,
-  `step_index` int NOT NULL,
-  `step_id` text NOT NULL,
-  `step_type` text NOT NULL,
-  `status` text NOT NULL,
-  `started_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `finished_at` text,
-  `output` text,
-  `error` text,
-  `truncated` boolean NOT NULL DEFAULT false,
-  FOREIGN KEY (`run_id`) REFERENCES `p_automations_runs` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `automation_run_steps` TO `p_automations_run_steps`;
-CREATE TABLE IF NOT EXISTS `automation_channels` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `automation_id` int NOT NULL,
-  `channel_id` int NOT NULL,
-  FOREIGN KEY (`automation_id`) REFERENCES `p_automations_automations` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`channel_id`) REFERENCES `notification_channels` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `automation_channels` TO `p_automations_channels`;
diff --git a/plugins/automations/migrations/mysql/0002_unlink_channels.sql b/plugins/automations/migrations/mysql/0002_unlink_channels.sql
deleted file mode 100644
index 8c99cdac6..000000000
--- a/plugins/automations/migrations/mysql/0002_unlink_channels.sql
+++ /dev/null
@@ -1,15 +0,0 @@
--- automations 0002: unlink_channels
--- Hand-written: channels moved from core's notification_channels to the
--- alerts plugin, so the link table drops its foreign key to the old table.
--- The constraint's name differs between installs, so the table is rebuilt.
-
-CREATE TABLE IF NOT EXISTS `p_automations_channels_v2` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `automation_id` int NOT NULL,
-  `channel_id` int NOT NULL,
-  FOREIGN KEY (`automation_id`) REFERENCES `p_automations_automations` (`id`) ON DELETE CASCADE
-);
-INSERT INTO `p_automations_channels_v2` (`id`, `automation_id`, `channel_id`) SELECT `id`, `automation_id`, `channel_id` FROM `p_automations_channels`;
-DROP TABLE `p_automations_channels`;
-RENAME TABLE `p_automations_channels_v2` TO `p_automations_channels`;
-CREATE UNIQUE INDEX `idx_automation_channels_pair` ON `p_automations_channels` (`automation_id`, `channel_id`);
diff --git a/plugins/automations/migrations/mysql/0003_host_maintenance.sql b/plugins/automations/migrations/mysql/0003_host_maintenance.sql
deleted file mode 100644
index ebb10825d..000000000
--- a/plugins/automations/migrations/mysql/0003_host_maintenance.sql
+++ /dev/null
@@ -1,12 +0,0 @@
--- automations 0003: host_maintenance
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `p_automations_host_maintenance` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `host_id` int NOT NULL,
-  `state` text NOT NULL,
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX `maintenance_host_owner` ON `p_automations_host_maintenance` (`user_id`, `host_id`);
diff --git a/plugins/automations/migrations/mysql/0004_rename_maintenance_index.sql b/plugins/automations/migrations/mysql/0004_rename_maintenance_index.sql
deleted file mode 100644
index 156dd2ec9..000000000
--- a/plugins/automations/migrations/mysql/0004_rename_maintenance_index.sql
+++ /dev/null
@@ -1,5 +0,0 @@
--- automations 0004: rename_maintenance_index
--- Renames the maintenance index to the idx_ pattern every other index uses.
-
-CREATE UNIQUE INDEX `idx_automation_maintenance_host_owner` ON `p_automations_host_maintenance` (`user_id`, `host_id`);
-DROP INDEX `maintenance_host_owner` ON `p_automations_host_maintenance`;
diff --git a/plugins/automations/migrations/postgres/0001_adopt_automations.sql b/plugins/automations/migrations/postgres/0001_adopt_automations.sql
deleted file mode 100644
index e47ad7701..000000000
--- a/plugins/automations/migrations/postgres/0001_adopt_automations.sql
+++ /dev/null
@@ -1,94 +0,0 @@
--- automations 0001: adopt_automations
--- Generated by termix-plugin migrations. Review before committing.
--- Hand-edited: keeps the legacy foreign keys the SDK cannot declare
--- (links between these tables, and a channel link to notification_channels).
-
-CREATE TABLE IF NOT EXISTS "automations" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "name" text NOT NULL,
-  "description" text,
-  "enabled" boolean NOT NULL DEFAULT true,
-  "definition" text NOT NULL,
-  "definition_version" integer NOT NULL DEFAULT 1,
-  "concurrency_policy" text NOT NULL DEFAULT 'skip',
-  "max_run_seconds" integer NOT NULL DEFAULT 300,
-  "dry_run" boolean NOT NULL DEFAULT false,
-  "last_run_at" text,
-  "last_run_status" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_automations_user" ON "automations" ("user_id", "enabled");
-ALTER TABLE "automations" RENAME TO "p_automations_automations";
-CREATE TABLE IF NOT EXISTS "automation_trigger_state" (
-  "id" serial PRIMARY KEY,
-  "automation_id" integer NOT NULL,
-  "state_key" varchar(255) NOT NULL,
-  "breach_started_at" text,
-  "last_fired_at" text,
-  "last_value" double precision,
-  "last_observed_state" text,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("automation_id") REFERENCES "p_automations_automations" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_automation_trigger_state_key" ON "automation_trigger_state" ("automation_id", "state_key");
-ALTER TABLE "automation_trigger_state" RENAME TO "p_automations_trigger_state";
-CREATE TABLE IF NOT EXISTS "automation_schedules" (
-  "id" serial PRIMARY KEY,
-  "automation_id" integer NOT NULL,
-  "cron" text,
-  "interval_seconds" integer,
-  "timezone" text,
-  "next_due_at" varchar(255),
-  "last_tick_at" text,
-  FOREIGN KEY ("automation_id") REFERENCES "p_automations_automations" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_automation_schedules_automation" ON "automation_schedules" ("automation_id");
-CREATE INDEX IF NOT EXISTS "idx_automation_schedules_due" ON "automation_schedules" ("next_due_at");
-ALTER TABLE "automation_schedules" RENAME TO "p_automations_schedules";
-CREATE TABLE IF NOT EXISTS "automation_runs" (
-  "id" serial PRIMARY KEY,
-  "automation_id" integer NOT NULL,
-  "user_id" varchar(255) NOT NULL,
-  "trigger_type" text NOT NULL,
-  "trigger_context" text,
-  "status" text NOT NULL,
-  "started_at" varchar(255) NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "finished_at" text,
-  "duration_ms" integer,
-  "error" text,
-  "dry_run" boolean NOT NULL DEFAULT false,
-  "parent_run_id" integer,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("automation_id") REFERENCES "p_automations_automations" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_automation_runs_automation" ON "automation_runs" ("automation_id", "started_at");
-CREATE INDEX IF NOT EXISTS "idx_automation_runs_user" ON "automation_runs" ("user_id", "started_at");
-ALTER TABLE "automation_runs" RENAME TO "p_automations_runs";
-CREATE TABLE IF NOT EXISTS "automation_run_steps" (
-  "id" serial PRIMARY KEY,
-  "run_id" integer NOT NULL,
-  "step_index" integer NOT NULL,
-  "step_id" text NOT NULL,
-  "step_type" text NOT NULL,
-  "status" text NOT NULL,
-  "started_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "finished_at" text,
-  "output" text,
-  "error" text,
-  "truncated" boolean NOT NULL DEFAULT false,
-  FOREIGN KEY ("run_id") REFERENCES "p_automations_runs" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_automation_run_steps_run" ON "automation_run_steps" ("run_id", "step_index");
-ALTER TABLE "automation_run_steps" RENAME TO "p_automations_run_steps";
-CREATE TABLE IF NOT EXISTS "automation_channels" (
-  "id" serial PRIMARY KEY,
-  "automation_id" integer NOT NULL,
-  "channel_id" integer NOT NULL,
-  FOREIGN KEY ("automation_id") REFERENCES "p_automations_automations" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("channel_id") REFERENCES "notification_channels" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_automation_channels_pair" ON "automation_channels" ("automation_id", "channel_id");
-ALTER TABLE "automation_channels" RENAME TO "p_automations_channels";
diff --git a/plugins/automations/migrations/postgres/0002_unlink_channels.sql b/plugins/automations/migrations/postgres/0002_unlink_channels.sql
deleted file mode 100644
index 575365dd7..000000000
--- a/plugins/automations/migrations/postgres/0002_unlink_channels.sql
+++ /dev/null
@@ -1,16 +0,0 @@
--- automations 0002: unlink_channels
--- Hand-written: channels moved from core's notification_channels to the
--- alerts plugin, so the link table drops its foreign key to the old table.
--- The constraint's name differs between installs, so the table is rebuilt.
-
-CREATE TABLE IF NOT EXISTS "p_automations_channels_v2" (
-  "id" serial PRIMARY KEY,
-  "automation_id" integer NOT NULL,
-  "channel_id" integer NOT NULL,
-  FOREIGN KEY ("automation_id") REFERENCES "p_automations_automations" ("id") ON DELETE CASCADE
-);
-INSERT INTO "p_automations_channels_v2" ("id", "automation_id", "channel_id") SELECT "id", "automation_id", "channel_id" FROM "p_automations_channels";
-DROP TABLE "p_automations_channels";
-ALTER TABLE "p_automations_channels_v2" RENAME TO "p_automations_channels";
-SELECT setval(pg_get_serial_sequence('p_automations_channels', 'id'), COALESCE((SELECT MAX("id") FROM "p_automations_channels"), 1));
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_automation_channels_pair" ON "p_automations_channels" ("automation_id", "channel_id");
diff --git a/plugins/automations/migrations/postgres/0003_host_maintenance.sql b/plugins/automations/migrations/postgres/0003_host_maintenance.sql
deleted file mode 100644
index 9fc7173a0..000000000
--- a/plugins/automations/migrations/postgres/0003_host_maintenance.sql
+++ /dev/null
@@ -1,12 +0,0 @@
--- automations 0003: host_maintenance
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "p_automations_host_maintenance" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "host_id" integer NOT NULL,
-  "state" text NOT NULL,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "maintenance_host_owner" ON "p_automations_host_maintenance" ("user_id", "host_id");
diff --git a/plugins/automations/migrations/postgres/0004_rename_maintenance_index.sql b/plugins/automations/migrations/postgres/0004_rename_maintenance_index.sql
deleted file mode 100644
index 208c8c351..000000000
--- a/plugins/automations/migrations/postgres/0004_rename_maintenance_index.sql
+++ /dev/null
@@ -1,5 +0,0 @@
--- automations 0004: rename_maintenance_index
--- Renames the maintenance index to the idx_ pattern every other index uses.
-
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_automation_maintenance_host_owner" ON "p_automations_host_maintenance" ("user_id", "host_id");
-DROP INDEX IF EXISTS "maintenance_host_owner";
diff --git a/plugins/automations/migrations/snapshot.json b/plugins/automations/migrations/snapshot.json
deleted file mode 100644
index 22e6377ae..000000000
--- a/plugins/automations/migrations/snapshot.json
+++ /dev/null
@@ -1,332 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "host_maintenance": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "hostId": {
-          "type": "refHost",
-          "notNull": true
-        },
-        "state": {
-          "type": "text",
-          "notNull": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_automation_maintenance_host_owner",
-          "columns": ["userId", "hostId"],
-          "unique": true
-        }
-      ]
-    },
-    "automations": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "name": {
-          "type": "text",
-          "notNull": true
-        },
-        "description": {
-          "type": "text"
-        },
-        "enabled": {
-          "type": "boolean",
-          "notNull": true,
-          "defaultValue": true
-        },
-        "definition": {
-          "type": "text",
-          "notNull": true
-        },
-        "definitionVersion": {
-          "type": "integer",
-          "notNull": true,
-          "defaultValue": 1
-        },
-        "concurrencyPolicy": {
-          "type": "text",
-          "notNull": true,
-          "defaultValue": "skip"
-        },
-        "maxRunSeconds": {
-          "type": "integer",
-          "notNull": true,
-          "defaultValue": 300
-        },
-        "dryRun": {
-          "type": "boolean",
-          "notNull": true,
-          "defaultValue": false
-        },
-        "lastRunAt": {
-          "type": "text"
-        },
-        "lastRunStatus": {
-          "type": "text"
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "updatedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_automations_user",
-          "columns": ["userId", "enabled"]
-        }
-      ],
-      "adopts": "automations"
-    },
-    "trigger_state": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "automationId": {
-          "type": "integer",
-          "notNull": true
-        },
-        "stateKey": {
-          "type": "varchar",
-          "length": 255,
-          "notNull": true
-        },
-        "breachStartedAt": {
-          "type": "text"
-        },
-        "lastFiredAt": {
-          "type": "text"
-        },
-        "lastValue": {
-          "type": "real"
-        },
-        "lastObservedState": {
-          "type": "text"
-        },
-        "updatedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_automation_trigger_state_key",
-          "columns": ["automationId", "stateKey"],
-          "unique": true
-        }
-      ],
-      "adopts": "automation_trigger_state"
-    },
-    "schedules": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "automationId": {
-          "type": "integer",
-          "notNull": true
-        },
-        "cron": {
-          "type": "text"
-        },
-        "intervalSeconds": {
-          "type": "integer"
-        },
-        "timezone": {
-          "type": "text"
-        },
-        "nextDueAt": {
-          "type": "timestamp"
-        },
-        "lastTickAt": {
-          "type": "text"
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_automation_schedules_automation",
-          "columns": ["automationId"],
-          "unique": true
-        },
-        {
-          "name": "idx_automation_schedules_due",
-          "columns": ["nextDueAt"]
-        }
-      ],
-      "adopts": "automation_schedules"
-    },
-    "runs": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "automationId": {
-          "type": "integer",
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "triggerType": {
-          "type": "text",
-          "notNull": true
-        },
-        "triggerContext": {
-          "type": "text"
-        },
-        "status": {
-          "type": "text",
-          "notNull": true
-        },
-        "startedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "finishedAt": {
-          "type": "text"
-        },
-        "durationMs": {
-          "type": "integer"
-        },
-        "error": {
-          "type": "text"
-        },
-        "dryRun": {
-          "type": "boolean",
-          "notNull": true,
-          "defaultValue": false
-        },
-        "parentRunId": {
-          "type": "integer"
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_automation_runs_automation",
-          "columns": ["automationId", "startedAt"]
-        },
-        {
-          "name": "idx_automation_runs_user",
-          "columns": ["userId", "startedAt"]
-        }
-      ],
-      "adopts": "automation_runs"
-    },
-    "run_steps": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "runId": {
-          "type": "integer",
-          "notNull": true
-        },
-        "stepIndex": {
-          "type": "integer",
-          "notNull": true
-        },
-        "stepId": {
-          "type": "text",
-          "notNull": true
-        },
-        "stepType": {
-          "type": "text",
-          "notNull": true
-        },
-        "status": {
-          "type": "text",
-          "notNull": true
-        },
-        "startedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "finishedAt": {
-          "type": "text"
-        },
-        "output": {
-          "type": "text"
-        },
-        "error": {
-          "type": "text"
-        },
-        "truncated": {
-          "type": "boolean",
-          "notNull": true,
-          "defaultValue": false
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_automation_run_steps_run",
-          "columns": ["runId", "stepIndex"]
-        }
-      ],
-      "adopts": "automation_run_steps"
-    },
-    "channels": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "automationId": {
-          "type": "integer",
-          "notNull": true
-        },
-        "channelId": {
-          "type": "integer",
-          "notNull": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_automation_channels_pair",
-          "columns": ["automationId", "channelId"],
-          "unique": true
-        }
-      ],
-      "adopts": "automation_channels"
-    }
-  }
-}
diff --git a/plugins/automations/migrations/sqlite/0001_adopt_automations.sql b/plugins/automations/migrations/sqlite/0001_adopt_automations.sql
deleted file mode 100644
index d355f85f3..000000000
--- a/plugins/automations/migrations/sqlite/0001_adopt_automations.sql
+++ /dev/null
@@ -1,94 +0,0 @@
--- automations 0001: adopt_automations
--- Generated by termix-plugin migrations. Review before committing.
--- Hand-edited: keeps the legacy foreign keys the SDK cannot declare
--- (links between these tables, and a channel link to notification_channels).
-
-CREATE TABLE IF NOT EXISTS "automations" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "name" text NOT NULL,
-  "description" text,
-  "enabled" integer NOT NULL DEFAULT 1,
-  "definition" text NOT NULL,
-  "definition_version" integer NOT NULL DEFAULT 1,
-  "concurrency_policy" text NOT NULL DEFAULT 'skip',
-  "max_run_seconds" integer NOT NULL DEFAULT 300,
-  "dry_run" integer NOT NULL DEFAULT 0,
-  "last_run_at" text,
-  "last_run_status" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_automations_user" ON "automations" ("user_id", "enabled");
-ALTER TABLE "automations" RENAME TO "p_automations_automations";
-CREATE TABLE IF NOT EXISTS "automation_trigger_state" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "automation_id" integer NOT NULL,
-  "state_key" text NOT NULL,
-  "breach_started_at" text,
-  "last_fired_at" text,
-  "last_value" real,
-  "last_observed_state" text,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("automation_id") REFERENCES "p_automations_automations" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_automation_trigger_state_key" ON "automation_trigger_state" ("automation_id", "state_key");
-ALTER TABLE "automation_trigger_state" RENAME TO "p_automations_trigger_state";
-CREATE TABLE IF NOT EXISTS "automation_schedules" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "automation_id" integer NOT NULL,
-  "cron" text,
-  "interval_seconds" integer,
-  "timezone" text,
-  "next_due_at" text,
-  "last_tick_at" text,
-  FOREIGN KEY ("automation_id") REFERENCES "p_automations_automations" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_automation_schedules_automation" ON "automation_schedules" ("automation_id");
-CREATE INDEX IF NOT EXISTS "idx_automation_schedules_due" ON "automation_schedules" ("next_due_at");
-ALTER TABLE "automation_schedules" RENAME TO "p_automations_schedules";
-CREATE TABLE IF NOT EXISTS "automation_runs" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "automation_id" integer NOT NULL,
-  "user_id" text NOT NULL,
-  "trigger_type" text NOT NULL,
-  "trigger_context" text,
-  "status" text NOT NULL,
-  "started_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "finished_at" text,
-  "duration_ms" integer,
-  "error" text,
-  "dry_run" integer NOT NULL DEFAULT 0,
-  "parent_run_id" integer,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("automation_id") REFERENCES "p_automations_automations" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_automation_runs_automation" ON "automation_runs" ("automation_id", "started_at");
-CREATE INDEX IF NOT EXISTS "idx_automation_runs_user" ON "automation_runs" ("user_id", "started_at");
-ALTER TABLE "automation_runs" RENAME TO "p_automations_runs";
-CREATE TABLE IF NOT EXISTS "automation_run_steps" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "run_id" integer NOT NULL,
-  "step_index" integer NOT NULL,
-  "step_id" text NOT NULL,
-  "step_type" text NOT NULL,
-  "status" text NOT NULL,
-  "started_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "finished_at" text,
-  "output" text,
-  "error" text,
-  "truncated" integer NOT NULL DEFAULT 0,
-  FOREIGN KEY ("run_id") REFERENCES "p_automations_runs" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_automation_run_steps_run" ON "automation_run_steps" ("run_id", "step_index");
-ALTER TABLE "automation_run_steps" RENAME TO "p_automations_run_steps";
-CREATE TABLE IF NOT EXISTS "automation_channels" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "automation_id" integer NOT NULL,
-  "channel_id" integer NOT NULL,
-  FOREIGN KEY ("automation_id") REFERENCES "p_automations_automations" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("channel_id") REFERENCES "notification_channels" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_automation_channels_pair" ON "automation_channels" ("automation_id", "channel_id");
-ALTER TABLE "automation_channels" RENAME TO "p_automations_channels";
diff --git a/plugins/automations/migrations/sqlite/0002_unlink_channels.sql b/plugins/automations/migrations/sqlite/0002_unlink_channels.sql
deleted file mode 100644
index ed184608b..000000000
--- a/plugins/automations/migrations/sqlite/0002_unlink_channels.sql
+++ /dev/null
@@ -1,15 +0,0 @@
--- automations 0002: unlink_channels
--- Hand-written: channels moved from core's notification_channels to the
--- alerts plugin, so the link table drops its foreign key to the old table.
--- SQLite cannot drop a constraint, so the table is rebuilt.
-
-CREATE TABLE IF NOT EXISTS "p_automations_channels_v2" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "automation_id" integer NOT NULL,
-  "channel_id" integer NOT NULL,
-  FOREIGN KEY ("automation_id") REFERENCES "p_automations_automations" ("id") ON DELETE CASCADE
-);
-INSERT INTO "p_automations_channels_v2" ("id", "automation_id", "channel_id") SELECT "id", "automation_id", "channel_id" FROM "p_automations_channels";
-DROP TABLE "p_automations_channels";
-ALTER TABLE "p_automations_channels_v2" RENAME TO "p_automations_channels";
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_automation_channels_pair" ON "p_automations_channels" ("automation_id", "channel_id");
diff --git a/plugins/automations/migrations/sqlite/0003_host_maintenance.sql b/plugins/automations/migrations/sqlite/0003_host_maintenance.sql
deleted file mode 100644
index 8d0ef49f3..000000000
--- a/plugins/automations/migrations/sqlite/0003_host_maintenance.sql
+++ /dev/null
@@ -1,12 +0,0 @@
--- automations 0003: host_maintenance
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "p_automations_host_maintenance" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "host_id" integer NOT NULL,
-  "state" text NOT NULL,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "maintenance_host_owner" ON "p_automations_host_maintenance" ("user_id", "host_id");
diff --git a/plugins/automations/migrations/sqlite/0004_rename_maintenance_index.sql b/plugins/automations/migrations/sqlite/0004_rename_maintenance_index.sql
deleted file mode 100644
index 208c8c351..000000000
--- a/plugins/automations/migrations/sqlite/0004_rename_maintenance_index.sql
+++ /dev/null
@@ -1,5 +0,0 @@
--- automations 0004: rename_maintenance_index
--- Renames the maintenance index to the idx_ pattern every other index uses.
-
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_automation_maintenance_host_owner" ON "p_automations_host_maintenance" ("user_id", "host_id");
-DROP INDEX IF EXISTS "maintenance_host_owner";
diff --git a/plugins/automations/package.json b/plugins/automations/package.json
deleted file mode 100644
index 5ad39445a..000000000
--- a/plugins/automations/package.json
+++ /dev/null
@@ -1,34 +0,0 @@
-{
-  "name": "@termix-plugin/automations",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "lucide-react": "^1.33.0"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "react": "^19.2.8",
-    "sonner": "^2.0.8",
-    "ssh2": "^1.17.0"
-  }
-}
diff --git a/plugins/automations/src/backend/actions/host-targets.ts b/plugins/automations/src/backend/actions/host-targets.ts
deleted file mode 100644
index 431f193a6..000000000
--- a/plugins/automations/src/backend/actions/host-targets.ts
+++ /dev/null
@@ -1,85 +0,0 @@
-import type { PluginSshHost } from "@termix/plugin-sdk/backend";
-import type { HostSelector } from "../../types.js";
-import type { StepExecutionContext, StepRuntime } from "./types.js";
-
-/** A host the owner may act on, resolved through core's connect pipeline. */
-export interface ResolvedTarget {
-  id: number;
-  name: string;
-  host: PluginSshHost;
-}
-
-/**
- * Turns a selector into the hosts a step may actually act on.
- *
- * Access is checked at execution time rather than when the automation was
- * saved, so a permission revoked after the fact takes effect on the next run.
- * resolveHost runs as the automation's owner and answers null when they can
- * no longer reach the host.
- */
-export async function resolveTargets(
-  selector: HostSelector,
-  context: StepExecutionContext,
-  runtime: StepRuntime,
-): Promise<{ targets: ResolvedTarget[]; skipped: number[] }> {
-  const ids = await selectorHostIds(selector, context, runtime);
-  const targets: ResolvedTarget[] = [];
-  const skipped: number[] = [];
-
-  for (const id of ids) {
-    let host: PluginSshHost | null = null;
-    try {
-      host = await runtime.ctx.ssh.resolveHost(id);
-    } catch {
-      host = null;
-    }
-    if (!host) {
-      skipped.push(id);
-      continue;
-    }
-    const name =
-      typeof host.name === "string" && host.name ? host.name : host.ip;
-    targets.push({ id, name, host });
-  }
-
-  return { targets, skipped };
-}
-
-async function selectorHostIds(
-  selector: HostSelector,
-  context: StepExecutionContext,
-  runtime: StepRuntime,
-): Promise<number[]> {
-  switch (selector.kind) {
-    case "host":
-      return [selector.hostId];
-    case "hosts":
-      return selector.hostIds;
-    case "trigger":
-      return context.triggerHostId ? [context.triggerHostId] : [];
-    case "fleet": {
-      const fleets = runtime.deps.fleets();
-      if (typeof fleets.members !== "function") return [];
-      try {
-        const members = await fleets.members(selector.fleetId);
-        return members.map((member) => member.id);
-      } catch {
-        return [];
-      }
-    }
-    case "all": {
-      try {
-        const hosts = await runtime.ctx.hosts.list();
-        // The owner's own hosts, as before: "all" never fans out onto hosts
-        // someone else shared with them.
-        return hosts
-          .filter((host) => host.userId === context.userId)
-          .map((host) => host.id);
-      } catch {
-        return [];
-      }
-    }
-    default:
-      return [];
-  }
-}
diff --git a/plugins/automations/src/backend/actions/index.ts b/plugins/automations/src/backend/actions/index.ts
deleted file mode 100644
index fb8d1fd16..000000000
--- a/plugins/automations/src/backend/actions/index.ts
+++ /dev/null
@@ -1,442 +0,0 @@
-import type { Client } from "ssh2";
-import { DEFAULT_STEP_TIMEOUT_MS, type Step } from "../../types.js";
-import { execCommand, execElevated } from "@termix/plugin-sdk/host-commands";
-import { renderRecord, renderTemplate } from "../template.js";
-import { resolveTargets, type ResolvedTarget } from "./host-targets.js";
-import {
-  fail,
-  ok,
-  stepTimeout,
-  type StepExecutionContext,
-  type StepResult,
-  type StepRuntime,
-} from "./types.js";
-
-/** The admin allowlist of private hosts an HTTP step may reach. */
-const PRIVATE_ALLOWLIST_KEY = "notification_private_endpoint_allowlist";
-const errorText = (error: unknown) =>
-  error instanceof Error ? error.message : String(error);
-
-/**
- * One executor per step type.
- *
- * Anything that leaves Termix checks context.dryRun first and reports what it
- * would have done instead of doing it, so an automation can be exercised
- * safely while it is being built.
- */
-export async function executeStep(
-  step: Step,
-  context: StepExecutionContext,
-  runtime: StepRuntime,
-): Promise<StepResult> {
-  switch (step.type) {
-    case "notify":
-      return runNotify(step, context, runtime);
-    case "http":
-      return runHttp(step, context, runtime);
-    case "run_command":
-      return runCommand(step, context, runtime);
-    case "run_snippet":
-      return runSnippet(step, context, runtime);
-    case "docker":
-      return runDocker(step, context, runtime);
-    case "tunnel":
-      return runTunnel(step, context, runtime);
-    case "wol":
-      return runWol(step, context, runtime);
-    case "wait":
-      return runWait(step, context);
-    case "set_var":
-      return runSetVar(step, context);
-    case "stop":
-      return {
-        success: true,
-        halt: { status: step.status ?? "success" },
-        output: `Stopped with status ${step.status ?? "success"}`,
-      };
-    default:
-      return fail(`Unsupported step type: ${(step as Step).type}`);
-  }
-}
-
-async function runNotify(
-  step: Extract<Step, { type: "notify" }>,
-  context: StepExecutionContext,
-  runtime: StepRuntime,
-): Promise<StepResult> {
-  const title = renderTemplate(step.title ?? "", context.template);
-  const body = renderTemplate(step.body ?? "", context.template);
-
-  const channelIds = step.channelIds ?? [];
-  if (context.dryRun) {
-    return ok(
-      channelIds.length > 0
-        ? `Would send an alert to the inbox and ${channelIds.length} channel(s): ${title || body}`
-        : `Would send an alert to the inbox: ${title || body}`,
-    );
-  }
-
-  const trigger = context.template.trigger ?? {};
-  let result;
-  try {
-    result = await runtime.ctx.notify.send({
-      title: title || "Termix automation",
-      body,
-      severity: step.severity ?? "warning",
-      category: "automations.notify",
-      audience: { userId: context.userId },
-      channelIds,
-      link: { tab: "automations" },
-      context: {
-        hostId:
-          context.template.host?.id ??
-          (typeof trigger.hostId === "number" ? trigger.hostId : undefined),
-        hostName:
-          context.template.host?.name ??
-          (typeof trigger.hostName === "string" ? trigger.hostName : undefined),
-        sourceId: context.automationId,
-        sourceName: title || undefined,
-        triggerType:
-          typeof trigger.type === "string" ? trigger.type : undefined,
-        value: trigger.value,
-        threshold: trigger.threshold,
-      },
-    });
-  } catch (error) {
-    return fail(errorText(error));
-  }
-
-  if (result.recipients === 0) {
-    return fail("Alerts are turned off on this server");
-  }
-  const errors = result.failures.map((f) => `${f.name}: ${f.error}`);
-  if (channelIds.length > 0 && result.delivered === 0 && errors.length > 0) {
-    return fail(errors.join("; "));
-  }
-  return ok(
-    `Sent an alert${result.delivered ? ` and notified ${result.delivered} channel(s)` : ""}${errors.length ? `; ${errors.join("; ")}` : ""}`,
-  );
-}
-
-async function runHttp(
-  step: Extract<Step, { type: "http" }>,
-  context: StepExecutionContext,
-  runtime: StepRuntime,
-): Promise<StepResult> {
-  const url = renderTemplate(step.url, context.template);
-  const headers = renderRecord(step.headers, context.template);
-  const body = step.body
-    ? renderTemplate(step.body, context.template)
-    : undefined;
-
-  if (context.dryRun) {
-    return ok(`Would ${step.method} ${url}`);
-  }
-
-  try {
-    // Private delivery needs both the step's opt-in and an exact host in
-    // the admin allowlist.
-    const allowPrivateHosts = step.allowPrivateNetwork
-      ? parseAllowlist(
-          await runtime.ctx.settings.readCore(PRIVATE_ALLOWLIST_KEY),
-        )
-      : [];
-    const response = await runtime.ctx.fetch(url, {
-      method: step.method,
-      headers: body
-        ? { "Content-Type": "application/json", ...(headers ?? {}) }
-        : headers,
-      body,
-      allowPrivateHosts,
-      timeoutMs: stepTimeout(context, step.timeoutMs, DEFAULT_STEP_TIMEOUT_MS),
-    });
-
-    const text = await response.text();
-    const summary = `HTTP ${response.status} ${response.statusText}\n${text}`;
-    return response.ok ? ok(summary) : fail(`HTTP ${response.status}`, summary);
-  } catch (error) {
-    return fail(errorText(error));
-  }
-}
-
-function parseAllowlist(raw: unknown): string[] {
-  if (typeof raw !== "string" || !raw) return [];
-  try {
-    const value = JSON.parse(raw);
-    if (!Array.isArray(value)) return [];
-    return value
-      .filter((entry): entry is string => typeof entry === "string")
-      .map((entry) => entry.trim().toLowerCase())
-      .filter(Boolean);
-  } catch {
-    return [];
-  }
-}
-
-async function runCommand(
-  step: Extract<Step, { type: "run_command" }>,
-  context: StepExecutionContext,
-  runtime: StepRuntime,
-): Promise<StepResult> {
-  const command = renderTemplate(step.command, context.template);
-  return runOnTargets(step.hostSelector, context, runtime, async (target) => {
-    if (context.dryRun) {
-      return { output: `Would run on ${target.name}: ${command}` };
-    }
-    return execOnHost(
-      target.host,
-      command,
-      step.elevated,
-      context,
-      runtime,
-      step.timeoutMs,
-    );
-  });
-}
-
-async function runSnippet(
-  step: Extract<Step, { type: "run_snippet" }>,
-  context: StepExecutionContext,
-  runtime: StepRuntime,
-): Promise<StepResult> {
-  const snippets = runtime.deps.snippets();
-  const getSnippet = snippets.get;
-  const resolveCommand = snippets.resolveCommand;
-  if (
-    typeof getSnippet !== "function" ||
-    typeof resolveCommand !== "function"
-  ) {
-    return fail("The snippets plugin is not available");
-  }
-  const snippet = await getSnippet(step.snippetId).catch(() => null);
-
-  if (!snippet) return fail("Snippet not found");
-  if (snippet.isNote) return fail("Notes cannot be executed on a host");
-
-  // Template values only ever reach the snippet through inputValues, never by
-  // rewriting the snippet body, so automation variables cannot inject snippet
-  // syntax of their own.
-  const inputValues = renderRecord(step.inputValues, context.template) ?? {};
-
-  return runOnTargets(step.hostSelector, context, runtime, async (target) => {
-    const command = await resolveCommand(
-      step.snippetId,
-      {
-        ip: target.host.ip,
-        username: target.host.username,
-        port: target.host.port,
-        name: target.name,
-      },
-      inputValues,
-    ).catch(() => null);
-    if (!command) {
-      return { output: "", error: "Snippet could not be resolved" };
-    }
-
-    if (context.dryRun) {
-      return { output: `Would run snippet on ${target.name}: ${command}` };
-    }
-    return execOnHost(
-      target.host,
-      command,
-      step.elevated,
-      context,
-      runtime,
-      step.timeoutMs,
-    );
-  });
-}
-
-async function runDocker(
-  step: Extract<Step, { type: "docker" }>,
-  context: StepExecutionContext,
-  runtime: StepRuntime,
-): Promise<StepResult> {
-  const container = renderTemplate(step.container, context.template);
-  if (!container) return fail("Container name is required");
-  const action = runtime.deps.docker().action;
-  if (typeof action !== "function") {
-    return fail("The docker plugin is not available");
-  }
-
-  return runOnTargets(step.hostSelector, context, runtime, async (target) => {
-    if (context.dryRun) {
-      return {
-        output: `Would ${step.action} container ${container} on ${target.name}`,
-      };
-    }
-
-    try {
-      await action(target.id, container, step.action);
-      return { output: `Container ${container}: ${step.action} done` };
-    } catch (error) {
-      return { output: "", error: errorText(error) };
-    }
-  });
-}
-
-async function runTunnel(
-  step: Extract<Step, { type: "tunnel" }>,
-  context: StepExecutionContext,
-  runtime: StepRuntime,
-): Promise<StepResult> {
-  const name = renderTemplate(step.tunnelName, context.template);
-  if (context.dryRun) return ok(`Would ${step.action} tunnel ${name}`);
-
-  const tunnels = runtime.deps.tunnels();
-  const act = step.action === "connect" ? tunnels.start : tunnels.stop;
-  if (typeof act !== "function") {
-    return fail("The tunnels plugin is not available");
-  }
-  // A disconnect goes through the tunnels plugin's manual stop, which also
-  // holds off its retries, so the tunnel stays down.
-  try {
-    await act(name);
-  } catch (error) {
-    return fail(errorText(error));
-  }
-  return ok(
-    step.action === "connect"
-      ? `Tunnel ${name} connected`
-      : `Tunnel ${name} disconnected`,
-  );
-}
-
-async function runWol(
-  step: Extract<Step, { type: "wol" }>,
-  context: StepExecutionContext,
-  runtime: StepRuntime,
-): Promise<StepResult> {
-  const host = await runtime.ctx.hosts.get(step.hostId).catch(() => null);
-  if (!host) return fail("Host not found or not accessible");
-  const name = host.name || host.ip;
-
-  const wake = runtime.deps.wakeOnLan().wake;
-  if (typeof wake !== "function") {
-    return fail("The wake-on-lan plugin is not available");
-  }
-  if (context.dryRun) return ok(`Would wake ${name}`);
-
-  try {
-    await wake(step.hostId);
-    return ok(`Sent magic packet to ${name}`);
-  } catch (error) {
-    return fail(errorText(error));
-  }
-}
-
-async function runWait(
-  step: Extract<Step, { type: "wait" }>,
-  context: StepExecutionContext,
-): Promise<StepResult> {
-  const requested = Math.max(step.seconds, 0) * 1000;
-  const waitMs = Math.min(
-    requested,
-    stepTimeout(context, undefined, requested),
-  );
-  if (context.dryRun) return ok(`Would wait ${step.seconds}s`);
-
-  await new Promise((resolve) => setTimeout(resolve, waitMs));
-  return ok(`Waited ${Math.round(waitMs / 1000)}s`);
-}
-
-async function runSetVar(
-  step: Extract<Step, { type: "set_var" }>,
-  context: StepExecutionContext,
-): Promise<StepResult> {
-  const value = renderTemplate(step.value, context.template);
-  return ok(`${step.name} = ${value}`, { [step.name]: value });
-}
-
-/**
- * Runs a per-host action across a selector's targets. One host failing does
- * not stop the others, matching how fleet execution behaves.
- */
-async function runOnTargets(
-  selector: Extract<Step, { type: "run_command" }>["hostSelector"],
-  context: StepExecutionContext,
-  runtime: StepRuntime,
-  run: (target: ResolvedTarget) => Promise<{ output?: string; error?: string }>,
-): Promise<StepResult> {
-  const { targets, skipped } = await resolveTargets(selector, context, runtime);
-
-  if (targets.length === 0) {
-    return fail(
-      skipped.length > 0
-        ? `No accessible hosts (${skipped.length} skipped)`
-        : "No hosts matched the selector",
-    );
-  }
-
-  const results = await Promise.allSettled(
-    targets.map(async (target) => ({
-      target,
-      result: await run(target),
-    })),
-  );
-
-  const lines: string[] = [];
-  let failures = 0;
-
-  for (const [index, settled] of results.entries()) {
-    const name = targets[index].name;
-    if (settled.status === "rejected") {
-      failures++;
-      lines.push(`${name}: ${String(settled.reason)}`);
-      continue;
-    }
-    const { result } = settled.value;
-    if (result.error) {
-      failures++;
-      lines.push(`${name}: ${result.error}`);
-    } else {
-      lines.push(`${name}: ${result.output ?? "ok"}`);
-    }
-  }
-
-  if (skipped.length > 0) {
-    lines.push(`${skipped.length} host(s) skipped: no access`);
-  }
-
-  const output = lines.join("\n");
-  return failures > 0 && failures === targets.length
-    ? fail(`All ${failures} host(s) failed`, output)
-    : ok(output);
-}
-
-async function execOnHost(
-  host: ResolvedTarget["host"],
-  command: string,
-  elevated: boolean | undefined,
-  context: StepExecutionContext,
-  runtime: StepRuntime,
-  timeoutMs: number | undefined,
-): Promise<{ output?: string; error?: string }> {
-  const timeout = stepTimeout(context, timeoutMs, DEFAULT_STEP_TIMEOUT_MS);
-  if (timeout <= 0) return { error: "Run deadline exceeded" };
-
-  try {
-    const result = await runtime.ctx.ssh.withConnection<
-      { stdout: string; stderr: string; code: number | null },
-      Client
-    >(host, { pool: "automations", purpose: "fleet" }, async (client) => {
-      if (elevated) {
-        return execElevated(
-          client,
-          command,
-          host.sudoPassword as string | undefined,
-          { timeoutMs: timeout },
-        );
-      }
-      return execCommand(client, command, timeout);
-    });
-
-    const output = [result.stdout, result.stderr].filter(Boolean).join("\n");
-    if (result.code === 0 || result.code === null) {
-      return { output: output || "(no output)" };
-    }
-    return { error: `Exited with code ${result.code}`, output };
-  } catch (error) {
-    return { error: errorText(error) };
-  }
-}
diff --git a/plugins/automations/src/backend/actions/types.ts b/plugins/automations/src/backend/actions/types.ts
deleted file mode 100644
index 139387d49..000000000
--- a/plugins/automations/src/backend/actions/types.ts
+++ /dev/null
@@ -1,66 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { Step } from "../../types.js";
-import type { Deps } from "../deps.js";
-import type { TemplateContext } from "../template.js";
-
-/** What every executor returns. `output` is what later steps can read. */
-export interface StepResult {
-  success: boolean;
-  output?: string;
-  error?: string;
-  /** Merged into the run's variables, for set_var and friends. */
-  vars?: Record<string, string>;
-  /** Set by the stop step to end the run early. */
-  halt?: { status: "success" | "failed" };
-}
-
-/** What the executors reach the rest of Termix through. */
-export interface StepRuntime {
-  ctx: PluginContext;
-  deps: Deps;
-}
-
-export interface StepExecutionContext {
-  userId: string;
-  automationId: number;
-  runId: number;
-  /** Nothing that leaves Termix may actually happen when this is set. */
-  dryRun: boolean;
-  template: TemplateContext;
-  /** Host the trigger fired for, when there was one. */
-  triggerHostId?: number;
-  /** Automations already on the stack, to refuse recursion. */
-  ancestry: number[];
-  depth: number;
-  /** Wall-clock deadline for the whole run. */
-  deadlineAt: number;
-  signal?: AbortSignal;
-}
-
-export type StepExecutor<T extends Step = Step> = (
-  step: T,
-  context: StepExecutionContext,
-) => Promise<StepResult>;
-
-export function ok(output?: string, vars?: Record<string, string>): StepResult {
-  return { success: true, output, vars };
-}
-
-export function fail(error: string, output?: string): StepResult {
-  return { success: false, error, output };
-}
-
-/** Milliseconds left before the run's overall deadline. */
-export function remainingMs(context: StepExecutionContext): number {
-  return Math.max(context.deadlineAt - Date.now(), 0);
-}
-
-/** A step's timeout, clamped so it can never outlive the run. */
-export function stepTimeout(
-  context: StepExecutionContext,
-  requested: number | undefined,
-  fallback: number,
-): number {
-  const wanted = requested && requested > 0 ? requested : fallback;
-  return Math.max(Math.min(wanted, remainingMs(context)), 0);
-}
diff --git a/plugins/automations/src/backend/conditions.ts b/plugins/automations/src/backend/conditions.ts
deleted file mode 100644
index 794c767d6..000000000
--- a/plugins/automations/src/backend/conditions.ts
+++ /dev/null
@@ -1,203 +0,0 @@
-import type { MetricPath, Operator } from "../types.js";
-
-/**
- * Operator evaluation and metric extraction.
- *
- * Pure: no database, no SSH, no clock. Everything here is driven by values the
- * caller already has, which keeps the comparison rules testable on their own.
- */
-
-/** Shape of the metrics snapshot this module reads. Mirrors collectMetrics(). */
-export interface MetricsSnapshot {
-  cpu?: {
-    percent?: number | null;
-    load?: [number, number, number] | null;
-  } | null;
-  memory?: { percent?: number | null; usedGiB?: number | null } | null;
-  disk?: {
-    percent?: number | null;
-    filesystems?: Array<{
-      mount?: string;
-      percent?: number | null;
-      availableBytes?: number | null;
-    }> | null;
-  } | null;
-  network?: {
-    interfaces?: Array<{
-      name?: string;
-      rxBytes?: string | number | null;
-      txBytes?: string | number | null;
-      rxRateBps?: number | null;
-      txRateBps?: number | null;
-    }> | null;
-  } | null;
-  temperature?: { highestCelsius?: number | null } | null;
-  uptime?: { seconds?: number | null } | null;
-  processes?: { total?: number | null } | null;
-}
-
-function toNumber(value: unknown): number | null {
-  if (value === null || value === undefined || value === "") return null;
-  const parsed = typeof value === "number" ? value : Number(value);
-  return Number.isFinite(parsed) ? parsed : null;
-}
-
-/**
- * Pulls the value a trigger watches out of a metrics snapshot.
- *
- * The mount and iface selectors are what let a rule watch one filesystem or
- * one interface. Without a selector the aggregate is used, which for disk is
- * the primary (root) mount, matching what the metrics UI shows.
- */
-export function extractMetricValue(
-  metrics: MetricsSnapshot | null | undefined,
-  metric: MetricPath,
-): number | null {
-  if (!metrics) return null;
-
-  switch (metric.path) {
-    case "cpu.percent":
-      return toNumber(metrics.cpu?.percent);
-    case "cpu.load1":
-      return toNumber(metrics.cpu?.load?.[0]);
-    case "cpu.load5":
-      return toNumber(metrics.cpu?.load?.[1]);
-    case "cpu.load15":
-      return toNumber(metrics.cpu?.load?.[2]);
-    case "memory.percent":
-      return toNumber(metrics.memory?.percent);
-    case "memory.usedGiB":
-      return toNumber(metrics.memory?.usedGiB);
-    case "disk.percent": {
-      if (!metric.mount) return toNumber(metrics.disk?.percent);
-      const fs = findMount(metrics, metric.mount);
-      return fs ? toNumber(fs.percent) : null;
-    }
-    case "disk.availableBytes": {
-      const fs = metric.mount ? findMount(metrics, metric.mount) : null;
-      if (metric.mount) return fs ? toNumber(fs.availableBytes) : null;
-      const first = metrics.disk?.filesystems?.[0];
-      return first ? toNumber(first.availableBytes) : null;
-    }
-    case "temperature.highestCelsius":
-      return toNumber(metrics.temperature?.highestCelsius);
-    case "uptime.seconds":
-      return toNumber(metrics.uptime?.seconds);
-    case "processes.total":
-      return toNumber(metrics.processes?.total);
-    case "network.rxBytes":
-      return toNumber(findInterface(metrics, metric.iface)?.rxBytes);
-    case "network.txBytes":
-      return toNumber(findInterface(metrics, metric.iface)?.txBytes);
-    case "network.rxRateBps":
-      return toNumber(findInterface(metrics, metric.iface)?.rxRateBps);
-    case "network.txRateBps":
-      return toNumber(findInterface(metrics, metric.iface)?.txRateBps);
-    default:
-      return null;
-  }
-}
-
-function findMount(metrics: MetricsSnapshot, mount: string) {
-  return (
-    metrics.disk?.filesystems?.find((entry) => entry.mount === mount) ?? null
-  );
-}
-
-function findInterface(metrics: MetricsSnapshot, iface?: string) {
-  const interfaces = metrics.network?.interfaces;
-  if (!interfaces || interfaces.length === 0) return null;
-  if (!iface) return interfaces[0];
-  return interfaces.find((entry) => entry.name === iface) ?? null;
-}
-
-/**
- * The key a trigger's durable state is stored under. Including the mount or
- * container is what allows a sustained-breach window per filesystem rather
- * than per host.
- */
-export function metricStateKey(hostId: number, metric: MetricPath): string {
-  if ("mount" in metric && metric.mount) return `${hostId}:${metric.mount}`;
-  if ("iface" in metric && metric.iface) return `${hostId}:${metric.iface}`;
-  return String(hostId);
-}
-
-/**
- * Compares two values. Numeric when both sides look numeric, so "90" and 90
- * behave the same; string comparison otherwise. `changed` is handled by the
- * caller, which is the only place that knows the previous value.
- */
-export function compare(
-  left: unknown,
-  operator: Operator,
-  right: unknown,
-): boolean {
-  if (operator === "contains" || operator === "not_contains") {
-    const haystack = String(left ?? "");
-    const needle = String(right ?? "");
-    const found = haystack.includes(needle);
-    return operator === "contains" ? found : !found;
-  }
-
-  const leftNumber = toNumber(left);
-  const rightNumber = toNumber(right);
-  const numeric = leftNumber !== null && rightNumber !== null;
-
-  switch (operator) {
-    case ">":
-      return numeric && leftNumber > rightNumber;
-    case "<":
-      return numeric && leftNumber < rightNumber;
-    case ">=":
-      return numeric && leftNumber >= rightNumber;
-    case "<=":
-      return numeric && leftNumber <= rightNumber;
-    case "==":
-      return numeric
-        ? leftNumber === rightNumber
-        : String(left ?? "") === String(right ?? "");
-    case "!=":
-      return numeric
-        ? leftNumber !== rightNumber
-        : String(left ?? "") !== String(right ?? "");
-    case "changed":
-      return String(left ?? "") !== String(right ?? "");
-    default:
-      return false;
-  }
-}
-
-/** Whether a cooldown window is still open. */
-export function isCoolingDown(
-  lastFiredAt: string | null | undefined,
-  cooldownMinutes: number,
-  now: number = Date.now(),
-): boolean {
-  if (!lastFiredAt) return false;
-  const last = Date.parse(lastFiredAt);
-  if (Number.isNaN(last)) return false;
-  return now - last < Math.max(cooldownMinutes, 0) * 60_000;
-}
-
-/** Whether a sustained breach has been held long enough to fire. */
-export function hasDwelled(
-  breachStartedAt: string | null | undefined,
-  forSeconds: number | undefined,
-  now: number = Date.now(),
-): boolean {
-  if (!forSeconds) return true;
-  if (!breachStartedAt) return false;
-  const started = Date.parse(breachStartedAt);
-  if (Number.isNaN(started)) return false;
-  return now - started >= forSeconds * 1000;
-}
-
-/** Severity for a threshold breach, matching the old engine's behaviour. */
-export function severityForValue(
-  value: number | null,
-  explicit?: "info" | "warning" | "critical",
-): "info" | "warning" | "critical" {
-  if (explicit) return explicit;
-  if (value !== null && value >= 95) return "critical";
-  return "warning";
-}
diff --git a/plugins/automations/src/backend/cron.ts b/plugins/automations/src/backend/cron.ts
deleted file mode 100644
index 7fd2a33ae..000000000
--- a/plugins/automations/src/backend/cron.ts
+++ /dev/null
@@ -1,291 +0,0 @@
-/**
- * A small five field cron parser, used only to work out when a schedule is
- * next due.
- *
- * Deliberately not a dependency: the engine needs "when is this next due?" and
- * nothing else, and a pure function is far easier to test than a scheduler
- * library. Fields are the standard minute, hour, day-of-month, month and
- * day-of-week, supporting *, lists (1,2), ranges (1-5) and steps (a slash).
- *
- * Day-of-month and day-of-week follow cron's union rule: when both are
- * restricted, a date matching either one matches.
- */
-
-interface CronFields {
-  minutes: Set<number>;
-  hours: Set<number>;
-  daysOfMonth: Set<number>;
-  months: Set<number>;
-  daysOfWeek: Set<number>;
-  domRestricted: boolean;
-  dowRestricted: boolean;
-}
-
-const RANGES: Record<string, [number, number]> = {
-  minute: [0, 59],
-  hour: [0, 23],
-  dayOfMonth: [1, 31],
-  month: [1, 12],
-  // 7 is accepted as an alias for Sunday and folded to 0 once parsed.
-  dayOfWeek: [0, 7],
-};
-
-const NAMED_MONTHS: Record<string, number> = {
-  jan: 1,
-  feb: 2,
-  mar: 3,
-  apr: 4,
-  may: 5,
-  jun: 6,
-  jul: 7,
-  aug: 8,
-  sep: 9,
-  oct: 10,
-  nov: 11,
-  dec: 12,
-};
-
-const NAMED_DAYS: Record<string, number> = {
-  sun: 0,
-  mon: 1,
-  tue: 2,
-  wed: 3,
-  thu: 4,
-  fri: 5,
-  sat: 6,
-};
-
-function normalize(token: string, kind: string): string {
-  const lower = token.toLowerCase();
-  if (kind === "month" && lower in NAMED_MONTHS) {
-    return String(NAMED_MONTHS[lower]);
-  }
-  if (kind === "dayOfWeek" && lower in NAMED_DAYS) {
-    return String(NAMED_DAYS[lower]);
-  }
-  return token;
-}
-
-function parseField(field: string, kind: keyof typeof RANGES): Set<number> {
-  const [min, max] = RANGES[kind];
-  const values = new Set<number>();
-
-  for (const part of field.split(",")) {
-    const trimmed = part.trim();
-    if (!trimmed) throw new Error(`Empty value in ${kind} field`);
-
-    const [rangePart, stepPart] = trimmed.split("/");
-    const step = stepPart === undefined ? 1 : Number(stepPart);
-    if (!Number.isInteger(step) || step < 1) {
-      throw new Error(`Invalid step in ${kind} field`);
-    }
-
-    let start: number;
-    let end: number;
-
-    if (rangePart === "*" || rangePart === "") {
-      start = min;
-      end = max;
-    } else if (rangePart.includes("-")) {
-      const [from, to] = rangePart.split("-");
-      start = Number(normalize(from, kind));
-      end = Number(normalize(to, kind));
-    } else {
-      start = Number(normalize(rangePart, kind));
-      end = stepPart === undefined ? start : max;
-    }
-
-    if (!Number.isInteger(start) || !Number.isInteger(end)) {
-      throw new Error(`Invalid value in ${kind} field`);
-    }
-    if (start < min || end > max || start > end) {
-      throw new Error(`Value out of range in ${kind} field`);
-    }
-
-    for (let value = start; value <= end; value += step) {
-      // Sunday can be written as 7; cron treats it as 0.
-      values.add(kind === "dayOfWeek" && value === 7 ? 0 : value);
-    }
-  }
-
-  return values;
-}
-
-export function parseCron(expression: string): CronFields {
-  const fields = expression.trim().split(/\s+/);
-  if (fields.length !== 5) {
-    throw new Error("A cron expression needs five fields");
-  }
-
-  const [minute, hour, dayOfMonth, month, dayOfWeek] = fields;
-  return {
-    minutes: parseField(minute, "minute"),
-    hours: parseField(hour, "hour"),
-    daysOfMonth: parseField(dayOfMonth, "dayOfMonth"),
-    months: parseField(month, "month"),
-    daysOfWeek: parseField(dayOfWeek, "dayOfWeek"),
-    domRestricted: dayOfMonth.trim() !== "*",
-    dowRestricted: dayOfWeek.trim() !== "*",
-  };
-}
-
-export function isValidCron(expression: string): boolean {
-  try {
-    parseCron(expression);
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-/** Wall-clock fields for a moment, in a given zone or server local time. */
-interface WallClock {
-  minute: number;
-  hour: number;
-  dayOfMonth: number;
-  month: number;
-  dayOfWeek: number;
-}
-
-const WEEKDAYS: Record<string, number> = {
-  Sun: 0,
-  Mon: 1,
-  Tue: 2,
-  Wed: 3,
-  Thu: 4,
-  Fri: 5,
-  Sat: 6,
-};
-
-const formatterCache = new Map<string, Intl.DateTimeFormat>();
-
-/**
- * Whether a zone name is one this runtime actually knows. An unknown zone
- * falls back to server local time rather than throwing, so a bad value saved
- * against a schedule cannot stop it from ever running.
- */
-export function isValidTimezone(timezone: string): boolean {
-  try {
-    new Intl.DateTimeFormat("en-US", { timeZone: timezone });
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-function formatterFor(timezone: string): Intl.DateTimeFormat | null {
-  const cached = formatterCache.get(timezone);
-  if (cached) return cached;
-
-  try {
-    const formatter = new Intl.DateTimeFormat("en-US", {
-      timeZone: timezone,
-      hour12: false,
-      weekday: "short",
-      month: "numeric",
-      day: "numeric",
-      hour: "numeric",
-      minute: "numeric",
-    });
-    formatterCache.set(timezone, formatter);
-    return formatter;
-  } catch {
-    return null;
-  }
-}
-
-function wallClock(date: Date, timezone?: string | null): WallClock {
-  const formatter = timezone ? formatterFor(timezone) : null;
-  if (!formatter) {
-    return {
-      minute: date.getMinutes(),
-      hour: date.getHours(),
-      dayOfMonth: date.getDate(),
-      month: date.getMonth() + 1,
-      dayOfWeek: date.getDay(),
-    };
-  }
-
-  const parts: Record<string, string> = {};
-  for (const part of formatter.formatToParts(date)) {
-    parts[part.type] = part.value;
-  }
-
-  return {
-    // Midnight formats as 24 in some locales' hour-cycle handling.
-    minute: Number(parts.minute),
-    hour: Number(parts.hour) % 24,
-    dayOfMonth: Number(parts.day),
-    month: Number(parts.month),
-    dayOfWeek: WEEKDAYS[parts.weekday] ?? date.getDay(),
-  };
-}
-
-function matches(
-  fields: CronFields,
-  date: Date,
-  timezone?: string | null,
-): boolean {
-  const clock = wallClock(date, timezone);
-  if (!fields.months.has(clock.month)) return false;
-  if (!fields.minutes.has(clock.minute)) return false;
-  if (!fields.hours.has(clock.hour)) return false;
-
-  const domMatch = fields.daysOfMonth.has(clock.dayOfMonth);
-  const dowMatch = fields.daysOfWeek.has(clock.dayOfWeek);
-
-  // Both restricted means either may match, which is how cron behaves.
-  if (fields.domRestricted && fields.dowRestricted) return domMatch || dowMatch;
-  if (fields.domRestricted) return domMatch;
-  if (fields.dowRestricted) return dowMatch;
-  return true;
-}
-
-/**
- * The next time on or after `from` that the expression matches, or null when
- * nothing matches within a four year window (e.g. Feb 30).
- */
-export function nextCronRun(
-  expression: string,
-  from: Date = new Date(),
-  timezone?: string | null,
-): Date | null {
-  const fields = parseCron(expression);
-
-  const candidate = new Date(from.getTime());
-  candidate.setSeconds(0, 0);
-  candidate.setMinutes(candidate.getMinutes() + 1);
-
-  // Four years covers every leap year cycle, so a date that never matches
-  // gives up rather than looping.
-  const limit = 366 * 4 * 24 * 60;
-  for (let i = 0; i < limit; i++) {
-    if (matches(fields, candidate, timezone)) return candidate;
-    candidate.setMinutes(candidate.getMinutes() + 1);
-  }
-  return null;
-}
-
-/**
- * Next due time for a schedule trigger, as an ISO string. Interval wins over
- * cron when both are set, matching the editor which offers one or the other.
- */
-export function computeNextDueAt(
-  schedule: {
-    cron?: string | null;
-    intervalSeconds?: number | null;
-    timezone?: string | null;
-  },
-  from: Date = new Date(),
-): string | null {
-  if (schedule.intervalSeconds && schedule.intervalSeconds > 0) {
-    return new Date(
-      from.getTime() + schedule.intervalSeconds * 1000,
-    ).toISOString();
-  }
-  if (schedule.cron) {
-    const next = nextCronRun(schedule.cron, from, schedule.timezone);
-    return next ? next.toISOString() : null;
-  }
-  return null;
-}
diff --git a/plugins/automations/src/backend/deps.ts b/plugins/automations/src/backend/deps.ts
deleted file mode 100644
index a5b2d3234..000000000
--- a/plugins/automations/src/backend/deps.ts
+++ /dev/null
@@ -1,121 +0,0 @@
-import type { PluginServices } from "@termix/plugin-sdk/backend";
-import type { DockerEventKind } from "../types.js";
-
-/*
- * Other plugins, as automations reaches them. Every call runs as the current
- * actor (the automation's owner, set by the engine with ctx.asUser). A
- * missing provider answers an empty handle, so each method is probed before
- * it is called.
- */
-
-export interface SnippetsAccessV1 {
-  list?: () => Promise<Array<{ id: number; name: string; isNote?: boolean }>>;
-  get: (id: number) => Promise<{
-    id: number;
-    name: string;
-    content: string;
-    isNote: boolean;
-  } | null>;
-  resolveCommand: (
-    id: number,
-    vars: { ip?: string; username?: string; port?: number; name?: string },
-    inputValues?: Record<string, string>,
-  ) => Promise<string | null>;
-}
-
-export interface FleetsAccessV1 {
-  list: () => Promise<Array<{ id: number; name: string }>>;
-  members: (
-    fleetId: number,
-  ) => Promise<Array<{ id: number; name: string | null; ip: string }>>;
-}
-
-export interface TunnelsAccessV1 {
-  start: (name: string) => Promise<void>;
-  stop: (name: string) => Promise<void>;
-}
-
-export interface DockerContainersV1 {
-  action: (
-    hostId: number,
-    container: string,
-    action: "start" | "stop" | "restart",
-  ) => Promise<void>;
-}
-
-export interface DockerEvent {
-  hostId: number;
-  container: string;
-  event: DockerEventKind;
-}
-
-export interface DockerEventsV1 {
-  subscribe: (
-    hostId: number,
-    listener: (event: DockerEvent) => void,
-  ) => Promise<() => void>;
-}
-
-export interface MetricsViewersV1 {
-  register: (
-    hostId: number,
-  ) => Promise<{ viewerSessionId: string } | { skipped: true; reason: string }>;
-  heartbeat: (viewerSessionId: string) => boolean;
-  unregister: (hostId: number, viewerSessionId: string) => void;
-}
-
-/** Provided by the wake-on-lan plugin. It resolves the host's MAC itself. */
-export interface WakeOnLanV1 {
-  wake: (hostId: number) => Promise<void>;
-}
-
-/** The plugin id behind each service, for "needs <plugin>" messages. */
-export const PROVIDERS = {
-  snippets: "snippets.access",
-  fleets: "fleets.access",
-  tunnels: "tunnels.access",
-  docker: "docker.containers",
-  "docker-events": "docker.events",
-  "host-metrics": "host-metrics.viewers",
-  "wake-on-lan": "wake-on-lan.send",
-} as const;
-
-export type ProviderKey = keyof typeof PROVIDERS;
-
-/** The plugin a provider key belongs to. */
-export function pluginOf(key: ProviderKey): string {
-  return key === "docker-events" ? "docker" : key;
-}
-
-export type Deps = ReturnType<typeof createDeps>;
-
-export function createDeps(services: PluginServices) {
-  function handle<T extends object>(name: string): Partial<T> {
-    try {
-      return services.get<T>(name) as Partial<T>;
-    } catch {
-      return {};
-    }
-  }
-
-  return {
-    /** Which providers are running now. */
-    available(key: ProviderKey): boolean {
-      return services.providers(PROVIDERS[key]).length > 0;
-    },
-    providers(): Record<ProviderKey, boolean> {
-      const result = {} as Record<ProviderKey, boolean>;
-      for (const key of Object.keys(PROVIDERS) as ProviderKey[]) {
-        result[key] = services.providers(PROVIDERS[key]).length > 0;
-      }
-      return result;
-    },
-    snippets: () => handle<SnippetsAccessV1>(PROVIDERS.snippets),
-    fleets: () => handle<FleetsAccessV1>(PROVIDERS.fleets),
-    tunnels: () => handle<TunnelsAccessV1>(PROVIDERS.tunnels),
-    docker: () => handle<DockerContainersV1>(PROVIDERS.docker),
-    dockerEvents: () => handle<DockerEventsV1>(PROVIDERS["docker-events"]),
-    viewers: () => handle<MetricsViewersV1>(PROVIDERS["host-metrics"]),
-    wakeOnLan: () => handle<WakeOnLanV1>(PROVIDERS["wake-on-lan"]),
-  };
-}
diff --git a/plugins/automations/src/backend/docker-watcher.ts b/plugins/automations/src/backend/docker-watcher.ts
deleted file mode 100644
index 1a9c5a61f..000000000
--- a/plugins/automations/src/backend/docker-watcher.ts
+++ /dev/null
@@ -1,90 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { Deps, DockerEvent } from "./deps.js";
-import type { DockerEvent as TriggerDockerEvent } from "./triggers.js";
-
-/**
- * Keeps a docker.events subscription for every host a docker_event trigger
- * names, as the automation's owner. The docker plugin does the polling; this
- * only follows which hosts are watched.
- *
- * Subscribing is idempotent on the docker side, so every watched host is
- * subscribed again once a minute. That is what picks the subscriptions back
- * up after the docker plugin is disabled and enabled again.
- */
-
-const RESUBSCRIBE_MS = 60_000;
-
-interface Watch {
-  listener: (event: DockerEvent) => void;
-  unsubscribe: (() => void) | null;
-  subscribedAt: number;
-}
-
-export function createDockerWatcher(
-  ctx: Pick<PluginContext, "asUser">,
-  deps: Pick<Deps, "dockerEvents">,
-  watchedHosts: () => Promise<Map<number, string>>,
-  onEvent: (event: TriggerDockerEvent) => Promise<void>,
-) {
-  const watches = new Map<string, Watch>();
-  const keyOf = (hostId: number, userId: string) => `${userId}:${hostId}`;
-
-  return {
-    /** Brings the subscriptions in line with the watched hosts. */
-    async reconcile(now: number = Date.now()): Promise<void> {
-      const wanted = await watchedHosts();
-      const wantedKeys = new Set(
-        [...wanted].map(([hostId, userId]) => keyOf(hostId, userId)),
-      );
-
-      for (const [key, watch] of watches) {
-        if (wantedKeys.has(key)) continue;
-        watch.unsubscribe?.();
-        watches.delete(key);
-      }
-
-      for (const [hostId, userId] of wanted) {
-        const key = keyOf(hostId, userId);
-        let watch = watches.get(key);
-        if (!watch) {
-          watch = {
-            listener: (event) => {
-              void onEvent({
-                hostId: event.hostId,
-                ownerUserId: userId,
-                container: event.container,
-                event: event.event,
-              }).catch(() => undefined);
-            },
-            unsubscribe: null,
-            subscribedAt: 0,
-          };
-          watches.set(key, watch);
-        }
-        if (watch.subscribedAt && now - watch.subscribedAt < RESUBSCRIBE_MS) {
-          continue;
-        }
-        const subscribe = deps.dockerEvents().subscribe;
-        if (typeof subscribe !== "function") {
-          watch.subscribedAt = 0;
-          continue;
-        }
-        try {
-          const current = watch;
-          watch.unsubscribe = await ctx.asUser(userId, () =>
-            subscribe(hostId, current.listener),
-          );
-          watch.subscribedAt = now;
-        } catch {
-          watch.subscribedAt = 0;
-        }
-      }
-    },
-
-    /** Drops every subscription, on deactivate. */
-    reset(): void {
-      for (const watch of watches.values()) watch.unsubscribe?.();
-      watches.clear();
-    },
-  };
-}
diff --git a/plugins/automations/src/backend/engine.ts b/plugins/automations/src/backend/engine.ts
deleted file mode 100644
index 9e8a4796a..000000000
--- a/plugins/automations/src/backend/engine.ts
+++ /dev/null
@@ -1,501 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { AutomationDefinition, RunStatus, Step } from "../types.js";
-import {
-  DEFAULT_MAX_RUN_SECONDS,
-  MAX_AUTOMATION_DEPTH,
-  MAX_STEP_OUTPUT_BYTES,
-} from "../types.js";
-import { executeStep } from "./actions/index.js";
-import type { StepExecutionContext, StepResult } from "./actions/types.js";
-import { compare } from "./conditions.js";
-import type { Deps } from "./deps.js";
-import type {
-  AutomationEngineRow,
-  AutomationRepository,
-} from "./repository.js";
-import { missingPlugins } from "./requirements.js";
-import { renderTemplate, type TemplateContext } from "./template.js";
-
-/** Emitted when a run fails, so an automation_failed trigger can react. */
-export const TOPIC_AUTOMATION_FAILED = "plugin.automations.automation_failed";
-
-export interface RunRequest {
-  automationId: number;
-  triggerType: string;
-  triggerContext?: Record<string, unknown>;
-  triggerHostId?: number;
-  /** Overrides the automation's own dry-run flag, for "test run". */
-  dryRun?: boolean;
-  parentRunId?: number;
-  ancestry?: number[];
-  depth?: number;
-}
-
-export interface RunOutcome {
-  runId: number | null;
-  status: RunStatus;
-  error?: string;
-}
-
-/**
- * Executes automations. One per activation. State that has to survive a
- * restart (cooldowns, dwell windows) lives in the database; the only thing
- * held in memory is the set of runs in flight, which is meaningless after a
- * restart anyway.
- */
-export class AutomationEngine {
-  private readonly running = new Set<number>();
-  private readonly queued = new Map<number, number>();
-
-  constructor(
-    private readonly ctx: PluginContext,
-    private readonly repository: AutomationRepository,
-    private readonly deps: Deps,
-  ) {}
-
-  isRunning(automationId: number): boolean {
-    return this.running.has(automationId);
-  }
-
-  /**
-   * Runs an automation as its owner. Never throws: a failure is the outcome.
-   */
-  async run(request: RunRequest): Promise<RunOutcome> {
-    let automation: AutomationEngineRow | null;
-    try {
-      automation = await this.repository.findById(request.automationId);
-    } catch (err) {
-      return { runId: null, status: "failed", error: errorText(err) };
-    }
-    if (!automation) {
-      return { runId: null, status: "failed", error: "Automation not found" };
-    }
-    const owner = automation;
-    try {
-      return await this.ctx.asUser(owner.userId, () =>
-        this.runAsOwner(owner, request),
-      );
-    } catch (err) {
-      return { runId: null, status: "failed", error: errorText(err) };
-    }
-  }
-
-  private async runAsOwner(
-    automation: AutomationEngineRow,
-    request: RunRequest,
-  ): Promise<RunOutcome> {
-    const repository = this.repository;
-
-    const depth = request.depth ?? 0;
-    const ancestry = request.ancestry ?? [];
-
-    // Refuse recursion before anything is recorded, so a cycle cannot spin.
-    if (depth > MAX_AUTOMATION_DEPTH) {
-      return {
-        runId: null,
-        status: "failed",
-        error: `Maximum automation depth of ${MAX_AUTOMATION_DEPTH} exceeded`,
-      };
-    }
-    if (ancestry.includes(automation.id)) {
-      return {
-        runId: null,
-        status: "failed",
-        error: `Automation ${automation.id} is already running in this chain`,
-      };
-    }
-
-    let definition: AutomationDefinition;
-    try {
-      definition = JSON.parse(automation.definition) as AutomationDefinition;
-    } catch {
-      return {
-        runId: null,
-        status: "failed",
-        error: "Automation definition is not valid JSON",
-      };
-    }
-
-    // A trigger or step whose plugin is off skips the whole run with the
-    // reason on record, rather than running half of it.
-    const missing = missingPlugins(definition, this.deps);
-    if (missing.length > 0) {
-      const reason = `Needs the ${missing.join(", ")} plugin${missing.length > 1 ? "s" : ""}`;
-      this.ctx.log.info(
-        `Skipping automation ${automation.id} (${request.triggerType}): ${reason}`,
-      );
-      const run = await repository.createRun({
-        automationId: automation.id,
-        userId: automation.userId,
-        triggerType: request.triggerType,
-        triggerContext: JSON.stringify(request.triggerContext ?? {}),
-        status: "skipped",
-        parentRunId: request.parentRunId ?? null,
-      });
-      await repository.finishRun(run.id, {
-        status: "skipped",
-        error: reason,
-        durationMs: 0,
-      });
-      return { runId: run.id, status: "skipped", error: reason };
-    }
-
-    // A second trigger while a run is in flight is recorded as skipped rather
-    // than dropped silently, so the history explains what happened.
-    //
-    // The slot has to be claimed in the same tick as the check. It used to be
-    // claimed several awaits later, so two triggers arriving together both
-    // passed this test and both ran.
-    let claimed = false;
-    if (this.running.has(automation.id)) {
-      const policy = automation.concurrencyPolicy;
-      if (policy === "skip") {
-        const run = await repository.createRun({
-          automationId: automation.id,
-          userId: automation.userId,
-          triggerType: request.triggerType,
-          triggerContext: JSON.stringify(request.triggerContext ?? {}),
-          status: "skipped",
-        });
-        await repository.finishRun(run.id, {
-          status: "skipped",
-          error: "A previous run was still in progress",
-          durationMs: 0,
-        });
-        return { runId: run.id, status: "skipped" };
-      }
-      if (policy === "queue") {
-        const depthNow = this.queued.get(automation.id) ?? 0;
-        if (depthNow >= 5) {
-          return { runId: null, status: "skipped", error: "Queue is full" };
-        }
-        this.queued.set(automation.id, depthNow + 1);
-        try {
-          await this.waitUntilFree(automation.id);
-        } finally {
-          this.queued.set(
-            automation.id,
-            (this.queued.get(automation.id) ?? 1) - 1,
-          );
-        }
-        // waitUntilFree gives up on its own deadline, so the slot may still be
-        // taken. Only claim it when it is genuinely free.
-        if (!this.running.has(automation.id)) {
-          this.running.add(automation.id);
-          claimed = true;
-        }
-      }
-    } else {
-      this.running.add(automation.id);
-      claimed = true;
-    }
-
-    const dryRun = request.dryRun ?? automation.dryRun;
-    const maxRunSeconds = automation.maxRunSeconds || DEFAULT_MAX_RUN_SECONDS;
-    const startedAt = Date.now();
-
-    let run: { id: number };
-    try {
-      run = await repository.createRun({
-        automationId: automation.id,
-        userId: automation.userId,
-        triggerType: request.triggerType,
-        triggerContext: JSON.stringify(request.triggerContext ?? {}),
-        status: "running",
-        dryRun,
-        parentRunId: request.parentRunId ?? null,
-      });
-    } catch (err) {
-      // The slot is already claimed at this point, so it has to be given back
-      // here; the finally below is only reached once a run row exists.
-      if (claimed) this.running.delete(automation.id);
-      return {
-        runId: null,
-        status: "failed",
-        error: err instanceof Error ? err.message : String(err),
-      };
-    }
-
-    if (!claimed) this.running.add(automation.id);
-
-    const trigger = { ...(request.triggerContext ?? {}) };
-    trigger.type ??= request.triggerType;
-    let host: TemplateContext["host"];
-    if (request.triggerHostId) {
-      try {
-        const resolved = await this.ctx.hosts.get(request.triggerHostId);
-        if (resolved) {
-          host = {
-            id: request.triggerHostId,
-            name: resolved.name || resolved.ip,
-            ip: resolved.ip,
-            username: resolved.username,
-            port: resolved.port,
-          };
-          trigger.hostName ??= host.name;
-        }
-      } catch {
-        // A notification should still run with its numeric host id.
-      }
-    }
-
-    const template: TemplateContext = {
-      host,
-      trigger,
-      steps: {},
-      vars: {},
-      run: {
-        id: run.id,
-        automationId: automation.id,
-        startedAt: new Date(startedAt).toISOString(),
-      },
-    };
-
-    const context: StepExecutionContext = {
-      userId: automation.userId,
-      automationId: automation.id,
-      runId: run.id,
-      dryRun,
-      template,
-      triggerHostId: request.triggerHostId,
-      ancestry: [...ancestry, automation.id],
-      depth,
-      deadlineAt: startedAt + maxRunSeconds * 1000,
-    };
-
-    let status: RunStatus = "success";
-    let error: string | undefined;
-
-    try {
-      const result = await this.runSteps(definition.steps ?? [], context, {
-        index: 0,
-      });
-      if (result.halted?.status === "failed") {
-        status = "failed";
-        error = "Stopped by a stop step";
-      } else if (result.failed) {
-        status = "failed";
-        error = result.error;
-      }
-      if (Date.now() >= context.deadlineAt) {
-        status = "timeout";
-        error = `Run exceeded ${maxRunSeconds}s`;
-      }
-    } catch (err) {
-      status = "failed";
-      error = errorText(err);
-    } finally {
-      this.running.delete(automation.id);
-    }
-
-    await repository.finishRun(run.id, {
-      status,
-      error: error ?? null,
-      durationMs: Date.now() - startedAt,
-    });
-
-    if (status === "failed") {
-      this.ctx.log.warn(
-        `Automation "${automation.name}" (${automation.id}) failed in run ${run.id}: ${error ?? "unknown error"}`,
-      );
-
-      // An automation_failed handler that itself fails must not re-announce
-      // its own failure, so the event is not emitted for runs that this event
-      // already started.
-      await this.ctx.notify
-        .send({
-          title: `Automation "${automation.name}" failed`,
-          body: error ?? undefined,
-          severity: "warning",
-          category: "automations.run_failed",
-          audience: { userId: automation.userId },
-          link: { tab: "automations" },
-          dedupeKey: `automations.run_failed:${automation.id}`,
-          context: {
-            sourceId: automation.id,
-            sourceName: automation.name,
-            triggerType: request.triggerType,
-          },
-        })
-        .catch((notifyError: unknown) =>
-          this.ctx.log.warn(
-            `Could not send the failure alert for automation ${automation.id}: ${errorText(notifyError)}`,
-          ),
-        );
-
-      if (request.triggerType !== "internal_event") {
-        this.ctx.events.emit(TOPIC_AUTOMATION_FAILED, {
-          userId: automation.userId,
-          automationId: automation.id,
-          automationName: automation.name,
-          runId: run.id,
-          error: error ?? null,
-        });
-      }
-    }
-
-    return { runId: run.id, status, error };
-  }
-
-  /**
-   * Runs a list of steps in order, descending into if/else. Returns as soon as
-   * a stop step halts the run or a failing step's policy says to stop.
-   */
-  private async runSteps(
-    steps: Step[],
-    context: StepExecutionContext,
-    cursor: { index: number },
-  ): Promise<{
-    failed: boolean;
-    error?: string;
-    halted?: { status: "success" | "failed" };
-  }> {
-    const repository = this.repository;
-
-    for (const step of steps) {
-      if (step.enabled === false) continue;
-
-      if (Date.now() >= context.deadlineAt) {
-        return { failed: true, error: "Run deadline exceeded" };
-      }
-
-      const stepIndex = cursor.index++;
-
-      if (step.type === "if") {
-        const left = renderTemplate(step.condition.left, context.template);
-        const right = renderTemplate(
-          step.condition.right ?? "",
-          context.template,
-        );
-        const matched = compare(left, step.condition.operator, right);
-
-        const rowId = await repository.createRunStep({
-          runId: context.runId,
-          stepIndex,
-          stepId: step.id,
-          stepType: "if",
-          status: "running",
-        });
-        await repository.finishRunStep(rowId, {
-          status: "success",
-          output: `Condition ${matched ? "matched" : "did not match"}: ${left} ${step.condition.operator} ${right}`,
-        });
-
-        const branch = matched ? step.then : (step.else ?? []);
-        const result = await this.runSteps(branch, context, cursor);
-        if (result.halted) return result;
-        if (result.failed) return result;
-        continue;
-      }
-
-      if (step.type === "run_automation") {
-        const rowId = await repository.createRunStep({
-          runId: context.runId,
-          stepIndex,
-          stepId: step.id,
-          stepType: step.type,
-          status: "running",
-        });
-
-        const nested = await this.run({
-          automationId: step.automationId,
-          triggerType: "run_automation",
-          triggerContext: { parentAutomationId: context.automationId },
-          triggerHostId: context.triggerHostId,
-          dryRun: context.dryRun,
-          parentRunId: context.runId,
-          ancestry: context.ancestry,
-          depth: context.depth + 1,
-        });
-
-        const nestedOk = nested.status === "success";
-        await repository.finishRunStep(rowId, {
-          status: nestedOk ? "success" : "failed",
-          output: `Nested run ${nested.runId ?? "not started"}: ${nested.status}`,
-          error: nested.error ?? null,
-        });
-
-        if (!nestedOk && (step.onError ?? "stop") === "stop") {
-          return { failed: true, error: nested.error ?? "Nested run failed" };
-        }
-        continue;
-      }
-
-      const rowId = await repository.createRunStep({
-        runId: context.runId,
-        stepIndex,
-        stepId: step.id,
-        stepType: step.type,
-        status: "running",
-      });
-
-      let result: StepResult;
-      try {
-        result = await executeStep(step, context, {
-          ctx: this.ctx,
-          deps: this.deps,
-        });
-      } catch (err) {
-        result = { success: false, error: errorText(err) };
-      }
-
-      const { text, truncated } = truncate(result.output);
-      await repository.finishRunStep(rowId, {
-        status: result.success ? "success" : "failed",
-        output: text,
-        error: result.error ?? null,
-        truncated,
-      });
-
-      // Later steps read earlier output through {{steps.<id>.stdout}}.
-      context.template.steps = {
-        ...context.template.steps,
-        [step.id]: {
-          stdout: result.output ?? "",
-          code: result.success ? 0 : 1,
-        },
-      };
-      if (result.vars) {
-        context.template.vars = { ...context.template.vars, ...result.vars };
-      }
-
-      if (result.halt) return { failed: false, halted: result.halt };
-
-      if (!result.success) {
-        const policy = step.onError ?? "stop";
-        if (policy === "stop") {
-          return { failed: true, error: result.error };
-        }
-      }
-    }
-
-    return { failed: false };
-  }
-
-  private async waitUntilFree(automationId: number): Promise<void> {
-    const started = Date.now();
-    while (this.running.has(automationId)) {
-      if (Date.now() - started > 60_000) return;
-      await new Promise((resolve) => setTimeout(resolve, 250));
-    }
-  }
-}
-
-function errorText(error: unknown): string {
-  return error instanceof Error ? error.message : String(error);
-}
-
-/** Keeps a single step's output from bloating the database. */
-function truncate(output: string | undefined): {
-  text: string | null;
-  truncated: boolean;
-} {
-  if (!output) return { text: null, truncated: false };
-  if (Buffer.byteLength(output, "utf8") <= MAX_STEP_OUTPUT_BYTES) {
-    return { text: output, truncated: false };
-  }
-  return {
-    text: output.slice(0, MAX_STEP_OUTPUT_BYTES) + "\n... (truncated)",
-    truncated: true,
-  };
-}
diff --git a/plugins/automations/src/backend/headless-viewer.ts b/plugins/automations/src/backend/headless-viewer.ts
deleted file mode 100644
index ad07fd3f2..000000000
--- a/plugins/automations/src/backend/headless-viewer.ts
+++ /dev/null
@@ -1,101 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { Deps } from "./deps.js";
-
-/**
- * Keeps metric collection running for hosts an automation watches.
- *
- * Host metrics only polls hosts somebody is looking at. Automations register
- * as a viewer through the host-metrics.viewers service, as the automation's
- * owner, and heartbeat every tick so the viewer is not reaped. A heartbeat
- * that comes back false means host-metrics restarted and forgot the viewer,
- * so the next tick registers it again.
- */
-
-interface Registered {
-  userId: string;
-  viewerSessionId: string;
-}
-
-export function createHeadlessViewers(
-  ctx: Pick<PluginContext, "asUser" | "log">,
-  deps: Pick<Deps, "viewers">,
-  watchedHosts: () => Promise<Map<number, string>>,
-) {
-  const registered = new Map<number, Registered>();
-
-  async function release(hostId: number, entry: Registered): Promise<void> {
-    registered.delete(hostId);
-    const unregister = deps.viewers().unregister;
-    if (typeof unregister !== "function") return;
-    try {
-      await ctx.asUser(entry.userId, () =>
-        unregister(hostId, entry.viewerSessionId),
-      );
-    } catch {
-      // Already gone; drop it either way.
-    }
-  }
-
-  return {
-    /** Brings the viewers in line with what the automations watch. */
-    async reconcile(): Promise<{ added: number; removed: number }> {
-      const viewers = deps.viewers();
-      if (typeof viewers.register !== "function") {
-        // host-metrics is off: its viewers went with it.
-        registered.clear();
-        return { added: 0, removed: 0 };
-      }
-
-      const watched = await watchedHosts();
-      let added = 0;
-      let removed = 0;
-
-      for (const [hostId, entry] of [...registered]) {
-        if (watched.get(hostId) === entry.userId) continue;
-        await release(hostId, entry);
-        removed++;
-      }
-
-      for (const [hostId, userId] of watched) {
-        const existing = registered.get(hostId);
-        if (existing) {
-          const alive = await ctx
-            .asUser(userId, () => viewers.heartbeat!(existing.viewerSessionId))
-            .catch(() => false);
-          if (alive) continue;
-          registered.delete(hostId);
-        }
-
-        try {
-          const result = await ctx.asUser(userId, () =>
-            viewers.register!(hostId),
-          );
-          if ("viewerSessionId" in result) {
-            registered.set(hostId, {
-              userId,
-              viewerSessionId: result.viewerSessionId,
-            });
-            added++;
-          }
-        } catch (error) {
-          ctx.log.warn(
-            `Could not start headless metrics for host ${hostId}: ${
-              error instanceof Error ? error.message : String(error)
-            }`,
-          );
-        }
-      }
-
-      return { added, removed };
-    },
-
-    /** Drops every viewer, on deactivate. */
-    async releaseAll(): Promise<void> {
-      for (const [hostId, entry] of [...registered]) {
-        await release(hostId, entry);
-      }
-    },
-
-    registeredHosts: () => [...registered.keys()],
-  };
-}
diff --git a/plugins/automations/src/backend/index.ts b/plugins/automations/src/backend/index.ts
deleted file mode 100644
index 74b4eb2a0..000000000
--- a/plugins/automations/src/backend/index.ts
+++ /dev/null
@@ -1,92 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { createDeps } from "./deps.js";
-import { createDockerWatcher } from "./docker-watcher.js";
-import { AutomationEngine } from "./engine.js";
-import { createHeadlessViewers } from "./headless-viewer.js";
-import { createAutomationRepository } from "./repository.js";
-import { registerRoutes } from "./routes.js";
-import { createScheduler, STARTUP_DELAY_MS, TICK_MS } from "./scheduler.js";
-import { createAutomationsService } from "./service.js";
-import { createTriggers } from "./triggers.js";
-import { createMaintenanceRepository } from "./maintenance-repository.js";
-import { createMaintenanceService } from "./maintenance-service.js";
-import { registerMaintenanceRoutes } from "./maintenance-routes.js";
-
-export type { AutomationsAccessV1, AutomationSummary } from "./service.js";
-
-export async function activate(ctx: PluginContext) {
-  const repository = await createAutomationRepository(ctx.db, async () => {
-    const channels = await ctx.notify.channels();
-    return channels.map((channel) => channel.id);
-  });
-  const maintenance = createMaintenanceService(
-    ctx,
-    await createMaintenanceRepository(ctx.db),
-    async (userId, hostId) => {
-      for (const state of await repository.listOpenBreaches()) {
-        if (Number(state.stateKey.split(":")[0]) !== hostId) continue;
-        const automation = await repository.findById(state.automationId);
-        if (automation?.userId === userId)
-          await repository.clearBreach(state.automationId, state.stateKey);
-      }
-    },
-  );
-  ctx.events.on("user.data_wiped", (payload) => {
-    const userId = (payload as { userId?: string } | undefined)?.userId;
-    if (userId) return maintenance.wipeUser(userId);
-  });
-  const deps = createDeps(ctx.services);
-  const engine = new AutomationEngine(ctx, repository, deps);
-  const triggers = createTriggers(
-    repository,
-    engine,
-    ctx.log,
-    maintenance.isMaintaining,
-  );
-  triggers.subscribe(ctx.events);
-
-  const viewers = createHeadlessViewers(ctx, deps, () =>
-    triggers.watchedHosts("metric_threshold"),
-  );
-  const docker = createDockerWatcher(
-    ctx,
-    deps,
-    () => triggers.watchedHosts("docker_event"),
-    triggers.onDockerEvent,
-  );
-  ctx.disposables.add(() => {
-    docker.reset();
-    void viewers.releaseAll();
-  });
-
-  const scheduler = createScheduler({
-    repository,
-    engine,
-    log: ctx.log,
-    reconcile: [
-      () => maintenance.tick(),
-      () => viewers.reconcile(),
-      (now) => docker.reconcile(now),
-    ],
-    isMaintaining: maintenance.isMaintaining,
-  });
-  ctx.schedule.after(STARTUP_DELAY_MS, () => scheduler.tick());
-  ctx.schedule.every(TICK_MS, () => scheduler.tick());
-
-  const router = ctx.http.router<Router>({ public: ["/webhook/:token"] });
-  registerMaintenanceRoutes(router, ctx, maintenance);
-  registerRoutes(
-    // The webhook route authenticates on its own per-automation token rather
-    // than a session, which is the point of an inbound webhook.
-    router,
-    { ctx, repository, engine, deps },
-  );
-
-  ctx.services.provide(
-    "automations.access",
-    createAutomationsService(ctx, repository, engine, deps),
-  );
-}
-
-export async function deactivate() {}
diff --git a/plugins/automations/src/backend/maintenance-repository.ts b/plugins/automations/src/backend/maintenance-repository.ts
deleted file mode 100644
index 4c8914ed8..000000000
--- a/plugins/automations/src/backend/maintenance-repository.ts
+++ /dev/null
@@ -1,66 +0,0 @@
-import { and, eq } from "drizzle-orm";
-import type { PluginDatabase } from "@termix/plugin-sdk/backend";
-import { maintenanceTable } from "./tables.js";
-import { emptyMaintenance, type HostMaintenance } from "../maintenance.js";
-
-export interface MaintenanceRow {
-  userId: string;
-  hostId: number;
-  state: HostMaintenance;
-}
-export type MaintenanceRepository = Awaited<
-  ReturnType<typeof createMaintenanceRepository>
->;
-
-export async function createMaintenanceRepository(db: PluginDatabase) {
-  // The SDK constructs dialect-specific tables at runtime.
-  /* eslint-disable @typescript-eslint/no-explicit-any */
-  const table: any = await db.define(maintenanceTable);
-  const client = () => db.client<any>();
-  /* eslint-enable @typescript-eslint/no-explicit-any */
-  const where = (userId: string, hostId: number) =>
-    and(eq(table.userId, userId), eq(table.hostId, hostId));
-  return {
-    async read(userId: string, hostId: number): Promise<HostMaintenance> {
-      const rows = await (
-        await client()
-      )
-        .select()
-        .from(table)
-        .where(where(userId, hostId));
-      return rows.length ? JSON.parse(rows[0].state) : emptyMaintenance();
-    },
-    async write(
-      userId: string,
-      hostId: number,
-      state: HostMaintenance,
-    ): Promise<void> {
-      const connection = await client();
-      const rows = await connection
-        .select({ id: table.id })
-        .from(table)
-        .where(where(userId, hostId));
-      const values = { state: JSON.stringify(state) };
-      if (rows.length)
-        await connection.update(table).set(values).where(where(userId, hostId));
-      else await connection.insert(table).values({ userId, hostId, ...values });
-      await db.persist();
-    },
-    async list(userId?: string): Promise<MaintenanceRow[]> {
-      const query = (await client()).select().from(table);
-      const rows = await (userId
-        ? query.where(eq(table.userId, userId))
-        : query);
-      return rows.map(
-        (row: { userId: string; hostId: number; state: string }) => ({
-          ...row,
-          state: JSON.parse(row.state),
-        }),
-      );
-    },
-    async wipeUser(userId: string): Promise<void> {
-      await (await client()).delete(table).where(eq(table.userId, userId));
-      await db.persist();
-    },
-  };
-}
diff --git a/plugins/automations/src/backend/maintenance-routes.ts b/plugins/automations/src/backend/maintenance-routes.ts
deleted file mode 100644
index c75e79491..000000000
--- a/plugins/automations/src/backend/maintenance-routes.ts
+++ /dev/null
@@ -1,155 +0,0 @@
-import type { Router, Request, Response } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { MaintenanceInputError } from "./maintenance-time.js";
-import type { MaintenanceService } from "./maintenance-service.js";
-
-export function registerMaintenanceRoutes(
-  router: Router,
-  ctx: PluginContext,
-  service: MaintenanceService,
-) {
-  /**
-   * @openapi
-   * /plugin-api/automations/maintenance:
-   *   get:
-   *     summary: List maintenance windows on the caller's hosts
-   *     description: Covers hosts the caller owns and hosts shared with them. A shared host carries its owner's maintenance with owned set to false.
-   *     tags: [Automations]
-   *     responses:
-   *       200: { description: Maintenance state per host. }
-   *       401: { description: Not signed in. }
-   */
-  router.get(
-    "/maintenance",
-    ctx.rbac.require("view") as never,
-    async (_req: Request, res: Response) => {
-      try {
-        const user = ctx.currentActor();
-        if (!user)
-          return res.status(401).json({ error: "Authentication required" });
-        // Maintenance belongs to the host's owner, so a shared host shows
-        // the owner's windows, read only.
-        const hostsByOwner = new Map<string, Set<number>>();
-        for (const host of await ctx.hosts.list()) {
-          const ids = hostsByOwner.get(host.userId) ?? new Set<number>();
-          ids.add(host.id);
-          hostsByOwner.set(host.userId, ids);
-        }
-        const rows = [];
-        for (const [owner, ids] of hostsByOwner) {
-          for (const row of await service.list(owner)) {
-            if (!ids.has(row.hostId)) continue;
-            rows.push({
-              hostId: row.hostId,
-              state: { ...row.state, owned: owner === user },
-            });
-          }
-        }
-        res.json(rows);
-      } catch (error) {
-        ctx.log.error("Failed to list maintenance", error as Error);
-        res.status(500).json({ error: "Failed to list maintenance" });
-      }
-    },
-  );
-  const handle = (mutate: boolean) => async (req: Request, res: Response) => {
-    const hostId = Number(req.params.hostId);
-    if (!Number.isSafeInteger(hostId) || hostId < 1)
-      return res.status(400).json({ error: "Invalid host id" });
-    const user = ctx.currentActor();
-    if (!user)
-      return res.status(401).json({ error: "Authentication required" });
-    try {
-      const host = await ctx.hosts.get(hostId);
-      if (!host) return res.status(404).json({ error: "Host not found" });
-      const owned = host.userId === user;
-      if (!mutate)
-        return res.json({
-          ...(await service.read(host.userId, hostId)),
-          owned,
-        });
-      if (!owned)
-        return res
-          .status(403)
-          .json({ error: "Only the host's owner can change maintenance" });
-      const state = await service.edit(
-        user,
-        hostId,
-        req.body?.action,
-        req.body,
-      );
-      await ctx.audit.record({
-        action: `maintenance_${req.body.action}`,
-        resourceType: "host",
-        resourceId: String(hostId),
-        resourceName: host.name || host.ip,
-        success: true,
-      });
-      res.json({ ...state, owned: true });
-    } catch (error) {
-      // Validation failures have no side effects; storage failures remain errors.
-      if (error instanceof MaintenanceInputError) {
-        return res.status(400).json({ error: error.message });
-      }
-      ctx.log.error("Failed to update maintenance", error as Error);
-      res.status(500).json({ error: "Failed to update maintenance" });
-    }
-  };
-  /**
-   * @openapi
-   * /plugin-api/automations/maintenance/{hostId}:
-   *   get:
-   *     summary: Get a host's maintenance state and schedule
-   *     tags: [Automations]
-   *     parameters:
-   *       - in: path
-   *         name: hostId
-   *         required: true
-   *         schema: { type: integer }
-   *     responses:
-   *       200: { description: The active window, if any, and the planned ones. owned is false on a host shared with the caller. }
-   *       404: { description: A host the caller cannot see. }
-   */
-  router.get(
-    "/maintenance/:hostId",
-    ctx.rbac.require("view") as never,
-    handle(false),
-  );
-  /**
-   * @openapi
-   * /plugin-api/automations/maintenance/{hostId}:
-   *   post:
-   *     summary: Start, schedule, end or remove maintenance on a host
-   *     description: While a host is in maintenance, automations with host status, health check, metric, Docker or tunnel triggers do not fire for it. Manual, scheduled, webhook and login triggers still run. Past the estimated end plus the grace period, an optional overdue alert is sent.
-   *     tags: [Automations]
-   *     parameters:
-   *       - in: path
-   *         name: hostId
-   *         required: true
-   *         schema: { type: integer }
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required: [action]
-   *             properties:
-   *               action: { type: string, enum: [start, schedule, end, remove] }
-   *               reason: { type: string }
-   *               start: { type: string, format: date-time, description: When a scheduled window begins. }
-   *               durationMinutes: { type: integer, description: Estimated length. }
-   *               graceMinutes: { type: integer }
-   *               recurrence: { type: string, description: Repeat a scheduled window, e.g. weekly or monthly. }
-   *     responses:
-   *       200: { description: The new maintenance state. }
-   *       400: { description: Invalid action or plan. }
-   *       403: { description: The host was shared with the caller; only its owner can change maintenance. }
-   *       404: { description: A host the caller cannot see. }
-   */
-  router.post(
-    "/maintenance/:hostId",
-    ctx.rbac.require("edit") as never,
-    handle(true),
-  );
-}
diff --git a/plugins/automations/src/backend/maintenance-service.ts b/plugins/automations/src/backend/maintenance-service.ts
deleted file mode 100644
index c4a5f9501..000000000
--- a/plugins/automations/src/backend/maintenance-service.ts
+++ /dev/null
@@ -1,152 +0,0 @@
-import { randomUUID } from "node:crypto";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { HostMaintenance } from "../maintenance.js";
-import type { MaintenanceRepository } from "./maintenance-repository.js";
-import {
-  MaintenanceInputError,
-  advanceMaintenance,
-  beginMaintenance,
-  parsePlan,
-  plansOverlap,
-} from "./maintenance-time.js";
-
-export type MaintenanceService = ReturnType<typeof createMaintenanceService>;
-
-export function createMaintenanceService(
-  ctx: PluginContext,
-  repository: MaintenanceRepository,
-  resetBreaches: (
-    userId: string,
-    hostId: number,
-  ) => Promise<void> = async () => {},
-) {
-  // Serialize reads that advance schedules with edits and the reminder tick.
-  let tail: Promise<unknown> = Promise.resolve();
-  const exclusive = <T>(work: () => Promise<T>): Promise<T> => {
-    const result = tail.then(work);
-    tail = result.catch(() => undefined);
-    return result;
-  };
-  async function update(
-    userId: string,
-    hostId: number,
-    edit?: (state: HostMaintenance) => void,
-  ) {
-    const state = await repository.read(userId, hostId);
-    const previous = JSON.stringify(state);
-    const wasActive = !!state.active;
-    advanceMaintenance(state, Date.now());
-    const activated = !wasActive && !!state.active;
-    edit?.(state);
-    if (activated || wasActive !== !!state.active)
-      await resetBreaches(userId, hostId);
-    if (JSON.stringify(state) !== previous)
-      await repository.write(userId, hostId, state);
-    return state;
-  }
-  const service = {
-    read: (userId: string, hostId: number) =>
-      exclusive(() => update(userId, hostId)),
-    async isMaintaining(userId: string, hostId: number): Promise<boolean> {
-      return !!(await service.read(userId, hostId)).active;
-    },
-    edit: (userId: string, hostId: number, action: string, input: unknown) =>
-      exclusive(() =>
-        update(userId, hostId, (state) => {
-          if (action === "end") {
-            state.active = null;
-            return;
-          }
-          if (action === "remove") {
-            const id = (input as { id?: unknown } | null)?.id;
-            if (
-              typeof id !== "string" ||
-              !state.plans.some((plan) => plan.id === id)
-            )
-              throw new MaintenanceInputError("Schedule not found");
-            state.plans = state.plans.filter((plan) => plan.id !== id);
-            return;
-          }
-          if (action !== "start" && action !== "schedule")
-            throw new MaintenanceInputError("Invalid maintenance action");
-          if (action === "start" && state.active)
-            throw new MaintenanceInputError("Maintenance is already active");
-          const plan = parsePlan(input, Date.now(), action === "start");
-          plan.id = randomUUID();
-          if (action === "start") {
-            beginMaintenance(state, plan, Date.now());
-            return;
-          }
-          if (state.plans.length >= 20)
-            throw new MaintenanceInputError(
-              "At most 20 maintenance schedules are allowed per host",
-            );
-          if (
-            state.plans.some(
-              (other) =>
-                other.nextStart &&
-                plansOverlap(plan, { ...other, start: other.nextStart }),
-            )
-          ) {
-            throw new MaintenanceInputError(
-              "Planned maintenance times overlap",
-            );
-          }
-          state.plans.push(plan);
-        }),
-      ),
-    async list(userId: string) {
-      const rows = await repository.list(userId);
-      return Promise.all(
-        rows.map(async (row) => ({
-          hostId: row.hostId,
-          state: await service.read(userId, row.hostId),
-        })),
-      );
-    },
-    wipeUser: (userId: string) => exclusive(() => repository.wipeUser(userId)),
-    async tick() {
-      for (const row of await repository.list()) {
-        try {
-          await exclusive(async () => {
-            const state = await update(row.userId, row.hostId);
-            const active = state.active;
-            if (!active?.notifyOverdue || active.notified) return;
-            const deadline =
-              Date.parse(active.estimatedEnd) + active.graceMinutes * 60_000;
-            if (Date.now() < deadline) return;
-            await ctx.asUser(row.userId, async () => {
-              const host = await ctx.hosts.get(row.hostId);
-              if (!host || host.userId !== row.userId) return;
-              const status = await ctx.hosts.status.get(row.hostId);
-              // Unknown or stale data is not evidence of an overdue outage.
-              if (
-                status?.status !== "offline" ||
-                Date.parse(status.lastChecked) < deadline ||
-                !Number.isFinite(Date.parse(status.lastChecked))
-              )
-                return;
-              const result = await ctx.notify.send({
-                title: `Maintenance overdue: ${host.name || host.ip}`,
-                body: `${active.reasons.join("; ")}. Estimated completion: ${active.estimatedEnd}. The host is still unavailable after the grace period. Maintenance remains active until you end it.`,
-                severity: "warning",
-                category: "automations.maintenance_overdue",
-                dedupeKey: `maintenance:${row.hostId}:${active.startedAt}:${active.estimatedEnd}`,
-                context: { hostId: row.hostId },
-              });
-              if (result.recipients > 0) {
-                active.notified = true;
-                await repository.write(row.userId, row.hostId, state);
-              }
-            });
-          });
-        } catch (error) {
-          ctx.log.warn(
-            `Maintenance check for host ${row.hostId} failed: ${String(error)}`,
-          );
-        }
-      }
-    },
-  };
-  return service;
-}
diff --git a/plugins/automations/src/backend/maintenance-time.ts b/plugins/automations/src/backend/maintenance-time.ts
deleted file mode 100644
index 082049981..000000000
--- a/plugins/automations/src/backend/maintenance-time.ts
+++ /dev/null
@@ -1,155 +0,0 @@
-import type { MaintenancePlan, HostMaintenance } from "../maintenance.js";
-
-export class MaintenanceInputError extends Error {}
-
-const DAY = 86_400_000;
-const WEEK = 7 * DAY;
-
-/** UTC wall-clock recurrence; monthly dates missing from a month are skipped. */
-export function nextOccurrence(
-  plan: MaintenancePlan,
-  after: number,
-): number | null {
-  const first = Date.parse(plan.start);
-  if (first > after) return first;
-  if (plan.recurrence === "once") return null;
-  if (plan.recurrence === "weekly") {
-    return first + (Math.floor((after - first) / WEEK) + 1) * WEEK;
-  }
-  const start = new Date(first);
-  const from = new Date(after);
-  let month = from.getUTCFullYear() * 12 + from.getUTCMonth();
-  for (let i = 0; i < 14; i++, month++) {
-    const candidate = Date.UTC(
-      Math.floor(month / 12),
-      month % 12,
-      start.getUTCDate(),
-      start.getUTCHours(),
-      start.getUTCMinutes(),
-    );
-    if (new Date(candidate).getUTCMonth() === month % 12 && candidate > after)
-      return candidate;
-  }
-  throw new MaintenanceInputError("Cannot calculate maintenance recurrence");
-}
-
-/** Exhaust a Gregorian cycle for recurring pairs, not an arbitrary lookahead. */
-export function plansOverlap(a: MaintenancePlan, b: MaintenancePlan): boolean {
-  const start = Math.max(Date.parse(a.start), Date.parse(b.start));
-  const end =
-    a.recurrence === "once" || b.recurrence === "once"
-      ? start + WEEK
-      : start + 146097 * DAY + WEEK;
-  let left = nextOccurrence(a, start - WEEK - 1);
-  let right = nextOccurrence(b, start - WEEK - 1);
-  while (left !== null && right !== null && left <= end && right <= end) {
-    const leftEnd = left + a.durationMinutes * 60_000;
-    const rightEnd = right + b.durationMinutes * 60_000;
-    if (left < rightEnd && right < leftEnd) return true;
-    if (leftEnd <= right) left = nextOccurrence(a, left);
-    else right = nextOccurrence(b, right);
-  }
-  return false;
-}
-
-export function beginMaintenance(
-  state: HostMaintenance,
-  plan: MaintenancePlan,
-  start: number,
-): void {
-  const end = new Date(start + plan.durationMinutes * 60_000).toISOString();
-  const current = state.active;
-  state.active = {
-    startedAt: new Date(
-      Math.min(start, current ? Date.parse(current.startedAt) : start),
-    ).toISOString(),
-    reasons: [...new Set([...(current?.reasons ?? []), plan.reason])].slice(
-      -20,
-    ),
-    estimatedEnd:
-      current && current.estimatedEnd > end ? current.estimatedEnd : end,
-    graceMinutes: Math.max(current?.graceMinutes ?? 0, plan.graceMinutes),
-    notifyOverdue: !!current?.notifyOverdue || plan.notifyOverdue,
-    notified: current && current.estimatedEnd >= end ? current.notified : false,
-  };
-}
-
-/** Catch up after downtime, preserving maintenance until explicitly ended. */
-export function advanceMaintenance(state: HostMaintenance, now: number): void {
-  for (const plan of state.plans) {
-    if (!plan.nextStart || Date.parse(plan.nextStart) > now) continue;
-    let due = Date.parse(plan.nextStart);
-    let next = nextOccurrence(plan, due);
-    while (next !== null && next <= now) {
-      due = next;
-      next = nextOccurrence(plan, due);
-    }
-    beginMaintenance(state, plan, due);
-    plan.nextStart = next === null ? null : new Date(next).toISOString();
-  }
-}
-
-export function parsePlan(
-  input: unknown,
-  now: number,
-  immediate = false,
-): MaintenancePlan {
-  if (!input || typeof input !== "object")
-    throw new MaintenanceInputError("Invalid maintenance plan");
-  const value = input as Record<string, unknown>;
-  const reason = typeof value.reason === "string" ? value.reason.trim() : "";
-  const start = immediate
-    ? now
-    : typeof value.start === "string"
-      ? Date.parse(value.start)
-      : NaN;
-  const duration = value.durationMinutes;
-  const grace = value.graceMinutes;
-  const recurrence = immediate ? "once" : value.recurrence;
-  if (!reason || reason.length > 200)
-    throw new MaintenanceInputError("Reason must contain 1 to 200 characters");
-  if (
-    !Number.isFinite(start) ||
-    (!immediate && start <= now) ||
-    start > now + 366 * 10 * DAY
-  ) {
-    throw new MaintenanceInputError(
-      "Start must be a future time within ten years",
-    );
-  }
-  if (
-    typeof duration !== "number" ||
-    !Number.isInteger(duration) ||
-    duration < 1 ||
-    duration > 10080
-  ) {
-    throw new MaintenanceInputError(
-      "Estimated duration must be 1 to 10080 minutes",
-    );
-  }
-  if (
-    typeof grace !== "number" ||
-    !Number.isInteger(grace) ||
-    grace < 0 ||
-    grace > 1440
-  ) {
-    throw new MaintenanceInputError("Grace period must be 0 to 1440 minutes");
-  }
-  if (!["once", "weekly", "monthly"].includes(String(recurrence)))
-    throw new MaintenanceInputError("Invalid recurrence");
-  if (typeof value.notifyOverdue !== "boolean")
-    throw new MaintenanceInputError("Invalid overdue notification setting");
-  const iso = new Date(start).toISOString();
-  if (!immediate && start % 60_000 !== 0)
-    throw new MaintenanceInputError("Start must use whole minutes");
-  return {
-    id: "",
-    reason,
-    start: iso,
-    durationMinutes: duration,
-    graceMinutes: grace,
-    recurrence: recurrence as MaintenancePlan["recurrence"],
-    notifyOverdue: value.notifyOverdue,
-    nextStart: iso,
-  };
-}
diff --git a/plugins/automations/src/backend/repository.ts b/plugins/automations/src/backend/repository.ts
deleted file mode 100644
index d200e6dc5..000000000
--- a/plugins/automations/src/backend/repository.ts
+++ /dev/null
@@ -1,738 +0,0 @@
-import { and, asc, desc, eq, inArray, lt, lte, sql } from "drizzle-orm";
-import type { PluginDatabase } from "@termix/plugin-sdk/backend";
-import {
-  automations as automationsDef,
-  channels as channelsDef,
-  runSteps as runStepsDef,
-  runs as runsDef,
-  schedules as schedulesDef,
-  triggerState as triggerStateDef,
-} from "./tables.js";
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// Tables come from ctx.db.define, which the SDK hands back untyped, and the
-// drizzle handle is the server's own. Typed at this module's edge instead.
-type Table = any;
-type Drizzle = any;
-type Row = Record<string, any>;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export interface AutomationRow {
-  id: number;
-  user_id: string;
-  name: string;
-  description: string | null;
-  enabled: number;
-  definition: string;
-  definition_version: number;
-  concurrency_policy: string;
-  max_run_seconds: number;
-  dry_run: number;
-  last_run_at: string | null;
-  last_run_status: string | null;
-  created_at: string;
-  updated_at: string;
-  channels: number[];
-}
-
-export interface AutomationRunRow {
-  id: number;
-  automation_id: number;
-  user_id: string;
-  trigger_type: string;
-  trigger_context: string | null;
-  status: string;
-  started_at: string;
-  finished_at: string | null;
-  duration_ms: number | null;
-  error: string | null;
-  dry_run: number;
-  parent_run_id: number | null;
-  automation_name?: string | null;
-}
-
-export interface AutomationRunStepRow {
-  id: number;
-  run_id: number;
-  step_index: number;
-  step_id: string;
-  step_type: string;
-  status: string;
-  started_at: string;
-  finished_at: string | null;
-  output: string | null;
-  error: string | null;
-  truncated: number;
-}
-
-/** The shape the engine loads. */
-export interface AutomationEngineRow {
-  id: number;
-  userId: string;
-  name: string;
-  enabled: boolean;
-  definition: string;
-  concurrencyPolicy: string;
-  maxRunSeconds: number;
-  dryRun: boolean;
-}
-
-export interface TriggerStateRow {
-  automationId: number;
-  stateKey: string;
-  breachStartedAt: string | null;
-  lastFiredAt: string | null;
-  lastValue: number | null;
-  lastObservedState: string | null;
-}
-
-export interface DueScheduleRow {
-  automationId: number;
-  cron: string | null;
-  intervalSeconds: number | null;
-  timezone: string | null;
-  nextDueAt: string | null;
-}
-
-export type AutomationRepository = Awaited<
-  ReturnType<typeof createAutomationRepository>
->;
-
-/**
- * Automation storage. `ownedChannelIds` answers which alert
- * channels the user owns, so a link can never point at another user's.
- */
-export async function createAutomationRepository(
-  db: PluginDatabase,
-  ownedChannelIds: (userId: string) => Promise<number[]>,
-) {
-  const automations: Table = await db.define(automationsDef);
-  const triggerState: Table = await db.define(triggerStateDef);
-  const schedules: Table = await db.define(schedulesDef);
-  const runs: Table = await db.define(runsDef);
-  const runSteps: Table = await db.define(runStepsDef);
-  const channels: Table = await db.define(channelsDef);
-
-  const client = () => db.client<Drizzle>();
-
-  /** Inserts one row and returns its id. MySQL has no RETURNING. */
-  async function insertId(
-    table: Table,
-    values: Record<string, unknown>,
-  ): Promise<number> {
-    const drizzle = await client();
-    if (db.dialect === "mysql") {
-      const result = await drizzle.insert(table).values(values);
-      const header = Array.isArray(result) ? result[0] : result;
-      return Number(header?.insertId);
-    }
-    const rows = await drizzle
-      .insert(table)
-      .values(values)
-      .returning({ id: table.id });
-    return rows[0].id as number;
-  }
-
-  async function listChannelIds(automationId: number): Promise<number[]> {
-    const drizzle = await client();
-    const rows: Row[] = await drizzle
-      .select({ channelId: channels.channelId })
-      .from(channels)
-      .where(eq(channels.automationId, automationId));
-    return rows.map((row) => row.channelId as number);
-  }
-
-  async function replaceChannels(
-    automationId: number,
-    userId: string,
-    channelIds: number[],
-  ): Promise<void> {
-    const drizzle = await client();
-    await drizzle
-      .delete(channels)
-      .where(eq(channels.automationId, automationId));
-    if (channelIds.length === 0) return;
-
-    const owned = new Set(await ownedChannelIds(userId));
-    const linked = [...new Set(channelIds)].filter((id) => owned.has(id));
-    if (linked.length > 0) {
-      await drizzle
-        .insert(channels)
-        .values(linked.map((channelId) => ({ automationId, channelId })));
-    }
-  }
-
-  async function findForUser(
-    id: number,
-    userId: string,
-  ): Promise<AutomationRow | null> {
-    const drizzle = await client();
-    const rows: Row[] = await drizzle
-      .select()
-      .from(automations)
-      .where(and(eq(automations.id, id), eq(automations.userId, userId)))
-      .limit(1);
-    if (!rows[0]) return null;
-    return mapAutomationRow(rows[0], await listChannelIds(id));
-  }
-
-  async function getTriggerState(
-    automationId: number,
-    stateKey: string,
-  ): Promise<TriggerStateRow | null> {
-    const drizzle = await client();
-    const rows: Row[] = await drizzle
-      .select()
-      .from(triggerState)
-      .where(
-        and(
-          eq(triggerState.automationId, automationId),
-          eq(triggerState.stateKey, stateKey),
-        ),
-      )
-      .limit(1);
-    return rows[0] ? mapTriggerStateRow(rows[0]) : null;
-  }
-
-  return {
-    async list(userId: string): Promise<AutomationRow[]> {
-      const drizzle = await client();
-      const rows: Row[] = await drizzle
-        .select()
-        .from(automations)
-        .where(eq(automations.userId, userId))
-        .orderBy(asc(automations.name));
-      if (rows.length === 0) return [];
-
-      // One query for every automation's channels rather than one per row.
-      const links: Row[] = await drizzle
-        .select({
-          automationId: channels.automationId,
-          channelId: channels.channelId,
-        })
-        .from(channels)
-        .where(
-          inArray(
-            channels.automationId,
-            rows.map((row) => row.id),
-          ),
-        );
-      const byAutomation = new Map<number, number[]>();
-      for (const link of links) {
-        const list = byAutomation.get(link.automationId) ?? [];
-        list.push(link.channelId);
-        byAutomation.set(link.automationId, list);
-      }
-      return rows.map((row) => mapAutomationRow(row, byAutomation.get(row.id)));
-    },
-
-    findForUser,
-
-    async findById(id: number): Promise<AutomationEngineRow | null> {
-      const drizzle = await client();
-      const rows: Row[] = await drizzle
-        .select()
-        .from(automations)
-        .where(eq(automations.id, id))
-        .limit(1);
-      return rows[0] ? mapEngineRow(rows[0]) : null;
-    },
-
-    async create(input: {
-      userId: string;
-      name: string;
-      description?: string | null;
-      enabled?: boolean;
-      definition: string;
-      concurrencyPolicy?: string;
-      maxRunSeconds?: number;
-      dryRun?: boolean;
-      channels?: number[];
-    }): Promise<AutomationRow> {
-      const now = new Date().toISOString();
-      const id = await insertId(automations, {
-        userId: input.userId,
-        name: input.name,
-        description: input.description ?? null,
-        enabled: input.enabled ?? true,
-        definition: input.definition,
-        concurrencyPolicy: input.concurrencyPolicy ?? "skip",
-        maxRunSeconds: input.maxRunSeconds ?? 300,
-        dryRun: input.dryRun ?? false,
-        createdAt: now,
-        updatedAt: now,
-      });
-      await replaceChannels(id, input.userId, input.channels ?? []);
-      await db.persist();
-      const created = await findForUser(id, input.userId);
-      if (!created) throw new Error("Automation could not be read back");
-      return created;
-    },
-
-    async update(
-      id: number,
-      userId: string,
-      input: {
-        name?: string;
-        description?: string | null;
-        enabled?: boolean;
-        definition?: string;
-        concurrencyPolicy?: string;
-        maxRunSeconds?: number;
-        dryRun?: boolean;
-        channels?: number[];
-      },
-    ): Promise<AutomationRow | null> {
-      const existing = await findForUser(id, userId);
-      if (!existing) return null;
-
-      const { channels: channelIds, ...fields } = input;
-      const drizzle = await client();
-      if (Object.keys(fields).length > 0) {
-        await drizzle
-          .update(automations)
-          .set({ ...fields, updatedAt: new Date().toISOString() })
-          .where(and(eq(automations.id, id), eq(automations.userId, userId)));
-      }
-      if (channelIds) await replaceChannels(id, userId, channelIds);
-      await db.persist();
-      return findForUser(id, userId);
-    },
-
-    async delete(id: number, userId: string): Promise<boolean> {
-      const existing = await findForUser(id, userId);
-      if (!existing) return false;
-      const drizzle = await client();
-      await drizzle
-        .delete(automations)
-        .where(and(eq(automations.id, id), eq(automations.userId, userId)));
-      await db.persist();
-      return true;
-    },
-
-    /**
-     * Enabled automations owned by one user. Wildcard targets must never
-     * reach across users.
-     */
-    async listEnabledForUser(userId: string): Promise<AutomationEngineRow[]> {
-      const drizzle = await client();
-      const rows: Row[] = await drizzle
-        .select()
-        .from(automations)
-        .where(
-          and(eq(automations.enabled, true), eq(automations.userId, userId)),
-        );
-      return rows.map(mapEngineRow);
-    },
-
-    async listAllEnabled(): Promise<AutomationEngineRow[]> {
-      const drizzle = await client();
-      const rows: Row[] = await drizzle
-        .select()
-        .from(automations)
-        .where(eq(automations.enabled, true));
-      return rows.map(mapEngineRow);
-    },
-
-    getTriggerState,
-
-    async upsertTriggerState(input: {
-      automationId: number;
-      stateKey: string;
-      breachStartedAt?: string | null;
-      lastFiredAt?: string | null;
-      lastValue?: number | null;
-      lastObservedState?: string | null;
-    }): Promise<void> {
-      const existing = await getTriggerState(
-        input.automationId,
-        input.stateKey,
-      );
-      const updatedAt = new Date().toISOString();
-      const drizzle = await client();
-
-      if (existing) {
-        const values: Record<string, unknown> = { updatedAt };
-        if (input.breachStartedAt !== undefined)
-          values.breachStartedAt = input.breachStartedAt;
-        if (input.lastFiredAt !== undefined)
-          values.lastFiredAt = input.lastFiredAt;
-        if (input.lastValue !== undefined) values.lastValue = input.lastValue;
-        if (input.lastObservedState !== undefined)
-          values.lastObservedState = input.lastObservedState;
-        await drizzle
-          .update(triggerState)
-          .set(values)
-          .where(
-            and(
-              eq(triggerState.automationId, input.automationId),
-              eq(triggerState.stateKey, input.stateKey),
-            ),
-          );
-      } else {
-        await drizzle.insert(triggerState).values({
-          automationId: input.automationId,
-          stateKey: input.stateKey,
-          breachStartedAt: input.breachStartedAt ?? null,
-          lastFiredAt: input.lastFiredAt ?? null,
-          lastValue: input.lastValue ?? null,
-          lastObservedState: input.lastObservedState ?? null,
-          updatedAt,
-        });
-      }
-      await db.persist({ lazy: true });
-    },
-
-    async clearBreach(automationId: number, stateKey: string): Promise<void> {
-      const drizzle = await client();
-      await drizzle
-        .update(triggerState)
-        .set({ breachStartedAt: null, updatedAt: new Date().toISOString() })
-        .where(
-          and(
-            eq(triggerState.automationId, automationId),
-            eq(triggerState.stateKey, stateKey),
-          ),
-        );
-      await db.persist({ lazy: true });
-    },
-
-    /** Dwell windows the scheduler has to re-check without a fresh sample. */
-    async listOpenBreaches(): Promise<TriggerStateRow[]> {
-      const drizzle = await client();
-      const rows: Row[] = await drizzle
-        .select()
-        .from(triggerState)
-        .where(sql`${triggerState.breachStartedAt} IS NOT NULL`);
-      return rows.map(mapTriggerStateRow);
-    },
-
-    async upsertSchedule(input: {
-      automationId: number;
-      cron: string | null;
-      intervalSeconds: number | null;
-      timezone: string | null;
-      nextDueAt: string | null;
-    }): Promise<void> {
-      const drizzle = await client();
-      const existing: Row[] = await drizzle
-        .select({ id: schedules.id })
-        .from(schedules)
-        .where(eq(schedules.automationId, input.automationId))
-        .limit(1);
-      if (existing[0]) {
-        await drizzle
-          .update(schedules)
-          .set({
-            cron: input.cron,
-            intervalSeconds: input.intervalSeconds,
-            timezone: input.timezone,
-            nextDueAt: input.nextDueAt,
-          })
-          .where(eq(schedules.automationId, input.automationId));
-      } else {
-        await drizzle.insert(schedules).values(input);
-      }
-      await db.persist();
-    },
-
-    async deleteSchedule(automationId: number): Promise<void> {
-      const drizzle = await client();
-      await drizzle
-        .delete(schedules)
-        .where(eq(schedules.automationId, automationId));
-      await db.persist();
-    },
-
-    /** Schedules due at or before `now`, joined to their enabled automation. */
-    async listDueSchedules(now: string): Promise<DueScheduleRow[]> {
-      const drizzle = await client();
-      return drizzle
-        .select({
-          automationId: schedules.automationId,
-          cron: schedules.cron,
-          intervalSeconds: schedules.intervalSeconds,
-          timezone: schedules.timezone,
-          nextDueAt: schedules.nextDueAt,
-        })
-        .from(schedules)
-        .innerJoin(automations, eq(automations.id, schedules.automationId))
-        .where(
-          and(eq(automations.enabled, true), lte(schedules.nextDueAt, now)),
-        );
-    },
-
-    async markScheduleTicked(
-      automationId: number,
-      nextDueAt: string | null,
-      lastTickAt: string,
-    ): Promise<void> {
-      const drizzle = await client();
-      await drizzle
-        .update(schedules)
-        .set({ nextDueAt, lastTickAt })
-        .where(eq(schedules.automationId, automationId));
-      await db.persist({ lazy: true });
-    },
-
-    async createRun(input: {
-      automationId: number;
-      userId: string;
-      triggerType: string;
-      triggerContext?: string | null;
-      status: string;
-      dryRun?: boolean;
-      parentRunId?: number | null;
-    }): Promise<{ id: number }> {
-      const id = await insertId(runs, {
-        automationId: input.automationId,
-        userId: input.userId,
-        triggerType: input.triggerType,
-        triggerContext: input.triggerContext ?? null,
-        status: input.status,
-        startedAt: new Date().toISOString(),
-        dryRun: input.dryRun ?? false,
-        parentRunId: input.parentRunId ?? null,
-      });
-      await db.persist({ lazy: true });
-      return { id };
-    },
-
-    async finishRun(
-      runId: number,
-      input: {
-        status: string;
-        error?: string | null;
-        durationMs?: number | null;
-      },
-    ): Promise<void> {
-      const drizzle = await client();
-      await drizzle
-        .update(runs)
-        .set({
-          status: input.status,
-          error: input.error ?? null,
-          finishedAt: new Date().toISOString(),
-          durationMs: input.durationMs ?? null,
-        })
-        .where(eq(runs.id, runId));
-
-      const run: Row[] = await drizzle
-        .select({ automationId: runs.automationId, startedAt: runs.startedAt })
-        .from(runs)
-        .where(eq(runs.id, runId))
-        .limit(1);
-      if (run[0]) {
-        await drizzle
-          .update(automations)
-          .set({ lastRunAt: run[0].startedAt, lastRunStatus: input.status })
-          .where(eq(automations.id, run[0].automationId));
-      }
-      await db.persist({ lazy: true });
-    },
-
-    async listRuns(
-      userId: string,
-      options: { automationId?: number; limit?: number; offset?: number } = {},
-    ): Promise<AutomationRunRow[]> {
-      const limit = Math.min(Math.max(options.limit ?? 50, 1), 200);
-      const offset = Math.max(options.offset ?? 0, 0);
-      const where = options.automationId
-        ? and(
-            eq(runs.userId, userId),
-            eq(runs.automationId, options.automationId),
-          )
-        : eq(runs.userId, userId);
-
-      const drizzle = await client();
-      const rows: Row[] = await drizzle
-        .select({ run: runs, automationName: automations.name })
-        .from(runs)
-        .leftJoin(automations, eq(automations.id, runs.automationId))
-        .where(where)
-        .orderBy(desc(runs.startedAt), desc(runs.id))
-        .limit(limit)
-        .offset(offset);
-      return rows.map((row) => ({
-        ...mapRunRow(row.run),
-        automation_name: row.automationName ?? null,
-      }));
-    },
-
-    async findRunForUser(
-      runId: number,
-      userId: string,
-    ): Promise<AutomationRunRow | null> {
-      const drizzle = await client();
-      const rows: Row[] = await drizzle
-        .select()
-        .from(runs)
-        .where(and(eq(runs.id, runId), eq(runs.userId, userId)))
-        .limit(1);
-      return rows[0] ? mapRunRow(rows[0]) : null;
-    },
-
-    async createRunStep(input: {
-      runId: number;
-      stepIndex: number;
-      stepId: string;
-      stepType: string;
-      status: string;
-    }): Promise<number> {
-      const id = await insertId(runSteps, {
-        ...input,
-        startedAt: new Date().toISOString(),
-      });
-      await db.persist({ lazy: true });
-      return id;
-    },
-
-    async finishRunStep(
-      stepRowId: number,
-      input: {
-        status: string;
-        output?: string | null;
-        error?: string | null;
-        truncated?: boolean;
-      },
-    ): Promise<void> {
-      const drizzle = await client();
-      await drizzle
-        .update(runSteps)
-        .set({
-          status: input.status,
-          output: input.output ?? null,
-          error: input.error ?? null,
-          truncated: input.truncated ?? false,
-          finishedAt: new Date().toISOString(),
-        })
-        .where(eq(runSteps.id, stepRowId));
-      await db.persist({ lazy: true });
-    },
-
-    async listRunSteps(runId: number): Promise<AutomationRunStepRow[]> {
-      const drizzle = await client();
-      const rows: Row[] = await drizzle
-        .select()
-        .from(runSteps)
-        .where(eq(runSteps.runId, runId))
-        .orderBy(asc(runSteps.stepIndex));
-      return rows.map(mapRunStepRow);
-    },
-
-    /** Trims run history. Called from the scheduler's daily sweep. */
-    async pruneRunsOlderThan(days: number): Promise<number> {
-      const cutoff = new Date(Date.now() - days * 86400000).toISOString();
-      const drizzle = await client();
-      const old: Row[] = await drizzle
-        .select({ id: runs.id })
-        .from(runs)
-        .where(lt(runs.startedAt, cutoff));
-      if (old.length === 0) return 0;
-      await drizzle.delete(runs).where(lt(runs.startedAt, cutoff));
-      await db.persist({ lazy: true });
-      return old.length;
-    },
-
-    /** Marks runs left behind by a crash so they do not block concurrency. */
-    async failStaleRunningRuns(olderThanIso: string): Promise<number> {
-      const where = and(
-        eq(runs.status, "running"),
-        lt(runs.startedAt, olderThanIso),
-      );
-      const drizzle = await client();
-      const stale: Row[] = await drizzle
-        .select({ id: runs.id })
-        .from(runs)
-        .where(where);
-      if (stale.length === 0) return 0;
-      await drizzle
-        .update(runs)
-        .set({
-          status: "failed",
-          error: "Interrupted by a server restart",
-          finishedAt: new Date().toISOString(),
-        })
-        .where(where);
-      await db.persist();
-      return stale.length;
-    },
-  };
-}
-
-function mapAutomationRow(row: Row, channelIds: number[] = []): AutomationRow {
-  return {
-    id: row.id,
-    user_id: row.userId,
-    name: row.name,
-    description: row.description ?? null,
-    enabled: row.enabled ? 1 : 0,
-    definition: row.definition,
-    definition_version: row.definitionVersion,
-    concurrency_policy: row.concurrencyPolicy,
-    max_run_seconds: row.maxRunSeconds,
-    dry_run: row.dryRun ? 1 : 0,
-    last_run_at: row.lastRunAt ?? null,
-    last_run_status: row.lastRunStatus ?? null,
-    created_at: row.createdAt,
-    updated_at: row.updatedAt,
-    channels: channelIds,
-  };
-}
-
-function mapEngineRow(row: Row): AutomationEngineRow {
-  return {
-    id: row.id,
-    userId: row.userId,
-    name: row.name,
-    enabled: !!row.enabled,
-    definition: row.definition,
-    concurrencyPolicy: row.concurrencyPolicy,
-    maxRunSeconds: row.maxRunSeconds,
-    dryRun: !!row.dryRun,
-  };
-}
-
-function mapTriggerStateRow(row: Row): TriggerStateRow {
-  return {
-    automationId: row.automationId,
-    stateKey: row.stateKey,
-    breachStartedAt: row.breachStartedAt ?? null,
-    lastFiredAt: row.lastFiredAt ?? null,
-    lastValue: row.lastValue ?? null,
-    lastObservedState: row.lastObservedState ?? null,
-  };
-}
-
-function mapRunRow(row: Row): AutomationRunRow {
-  return {
-    id: row.id,
-    automation_id: row.automationId,
-    user_id: row.userId,
-    trigger_type: row.triggerType,
-    trigger_context: row.triggerContext ?? null,
-    status: row.status,
-    started_at: row.startedAt,
-    finished_at: row.finishedAt ?? null,
-    duration_ms: row.durationMs ?? null,
-    error: row.error ?? null,
-    dry_run: row.dryRun ? 1 : 0,
-    parent_run_id: row.parentRunId ?? null,
-  };
-}
-
-function mapRunStepRow(row: Row): AutomationRunStepRow {
-  return {
-    id: row.id,
-    run_id: row.runId,
-    step_index: row.stepIndex,
-    step_id: row.stepId,
-    step_type: row.stepType,
-    status: row.status,
-    started_at: row.startedAt,
-    finished_at: row.finishedAt ?? null,
-    output: row.output ?? null,
-    error: row.error ?? null,
-    truncated: row.truncated ? 1 : 0,
-  };
-}
diff --git a/plugins/automations/src/backend/requirements.ts b/plugins/automations/src/backend/requirements.ts
deleted file mode 100644
index 2d1abde83..000000000
--- a/plugins/automations/src/backend/requirements.ts
+++ /dev/null
@@ -1,93 +0,0 @@
-import type { AutomationDefinition, HostSelector, Step } from "../types.js";
-import { pluginOf, type Deps, type ProviderKey } from "./deps.js";
-
-/**
- * The providers a definition cannot run without. A trigger or step whose
- * plugin is off makes the whole automation wait for it, rather than half of
- * it running.
- */
-export function requiredProviders(
-  definition: AutomationDefinition | null | undefined,
-): ProviderKey[] {
-  const needed = new Set<ProviderKey>();
-  if (!definition) return [];
-
-  const selector = (value: HostSelector | undefined) => {
-    if (value?.kind === "fleet") needed.add("fleets");
-  };
-
-  const trigger = definition.trigger;
-  switch (trigger?.kind) {
-    case "metric_threshold":
-    case "health_check":
-      needed.add("host-metrics");
-      selector(trigger.hostSelector);
-      break;
-    case "docker_event":
-      needed.add("docker-events");
-      selector(trigger.hostSelector);
-      break;
-    case "host_status":
-      selector(trigger.hostSelector);
-      break;
-    case "internal_event":
-      if (trigger.event === "tunnel_disconnected") needed.add("tunnels");
-      selector(trigger.hostSelector);
-      break;
-    default:
-      break;
-  }
-
-  const walk = (steps: Step[] | undefined) => {
-    for (const step of steps ?? []) {
-      if (step.enabled === false) continue;
-      switch (step.type) {
-        case "run_snippet":
-          needed.add("snippets");
-          selector(step.hostSelector);
-          break;
-        case "run_command":
-          selector(step.hostSelector);
-          break;
-        case "docker":
-          needed.add("docker");
-          selector(step.hostSelector);
-          break;
-        case "tunnel":
-          needed.add("tunnels");
-          break;
-        case "wol":
-          needed.add("wake-on-lan");
-          break;
-        case "if":
-          walk(step.then);
-          walk(step.else);
-          break;
-        default:
-          break;
-      }
-    }
-  };
-  walk(definition.steps);
-
-  return [...needed];
-}
-
-/** Plugin ids the definition needs that are not running, deduplicated. */
-export function missingPlugins(
-  definition: AutomationDefinition | null | undefined,
-  deps: Pick<Deps, "available">,
-): string[] {
-  const missing = requiredProviders(definition)
-    .filter((key) => !deps.available(key))
-    .map(pluginOf);
-  return [...new Set(missing)];
-}
-
-export function parseDefinition(raw: string): AutomationDefinition | null {
-  try {
-    return JSON.parse(raw) as AutomationDefinition;
-  } catch {
-    return null;
-  }
-}
diff --git a/plugins/automations/src/backend/routes.ts b/plugins/automations/src/backend/routes.ts
deleted file mode 100644
index 99ddc1041..000000000
--- a/plugins/automations/src/backend/routes.ts
+++ /dev/null
@@ -1,618 +0,0 @@
-import crypto from "node:crypto";
-import type { Request, Response, Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { AutomationDefinition } from "../types.js";
-import { computeNextDueAt } from "./cron.js";
-import type { Deps } from "./deps.js";
-import type { AutomationEngine } from "./engine.js";
-import type { AutomationRepository, AutomationRow } from "./repository.js";
-import { missingPlugins, parseDefinition } from "./requirements.js";
-import { isNonEmptyString, validateDefinition } from "./validate.js";
-
-export interface RouteDeps {
-  ctx: PluginContext;
-  repository: AutomationRepository;
-  engine: Pick<AutomationEngine, "run">;
-  deps: Deps;
-}
-
-function parseId(raw: unknown): number | null {
-  const id = typeof raw === "string" ? parseInt(raw, 10) : NaN;
-  return Number.isInteger(id) && id > 0 ? id : null;
-}
-
-export function hashToken(token: string): string {
-  return crypto.createHash("sha256").update(token).digest("hex");
-}
-
-function timingSafeEqual(a: string, b: string): boolean {
-  const left = Buffer.from(a || "", "utf8");
-  const right = Buffer.from(b || "", "utf8");
-  if (left.length !== right.length) return false;
-  return crypto.timingSafeEqual(left, right);
-}
-
-/**
- * The wire shape of an automation: the definition parsed, the webhook token
- * hash blanked, and the plugins it needs that are not running.
- */
-export function serializeAutomation(row: AutomationRow, deps: Deps) {
-  let definition: AutomationDefinition | null = parseDefinition(row.definition);
-  if (definition?.trigger?.kind === "webhook") {
-    definition = {
-      ...definition,
-      trigger: { ...definition.trigger, tokenHash: "" },
-    };
-  }
-  return {
-    ...row,
-    definition,
-    missingPlugins: missingPlugins(definition, deps),
-  };
-}
-
-export async function syncSchedule(
-  repository: AutomationRepository,
-  automationId: number,
-  definition: AutomationDefinition,
-): Promise<void> {
-  if (definition.trigger?.kind !== "schedule") {
-    await repository.deleteSchedule(automationId);
-    return;
-  }
-  const trigger = definition.trigger;
-  await repository.upsertSchedule({
-    automationId,
-    cron: trigger.cron ?? null,
-    intervalSeconds: trigger.intervalSeconds ?? null,
-    timezone: trigger.timezone ?? null,
-    nextDueAt: computeNextDueAt({
-      cron: trigger.cron,
-      intervalSeconds: trigger.intervalSeconds,
-      timezone: trigger.timezone,
-    }),
-  });
-}
-
-export function registerRoutes(
-  router: Router,
-  { ctx, repository, engine, deps }: RouteDeps,
-): void {
-  const actor = () => ctx.currentActor() as string;
-  const fail = (res: Response, message: string, error: unknown) => {
-    ctx.log.error(
-      message,
-      error instanceof Error ? error : new Error(String(error)),
-    );
-    res.status(500).json({ error: message });
-  };
-  const audit = (
-    action: string,
-    id: number,
-    name: string | undefined,
-    success = true,
-    details?: string,
-  ) =>
-    ctx.audit.record({
-      action,
-      resourceType: "automation",
-      resourceId: String(id),
-      resourceName: name,
-      details,
-      success,
-    });
-
-  /**
-   * @openapi
-   * /plugin-api/automations/webhook/{token}:
-   *   post:
-   *     summary: Trigger an automation from an external system
-   *     description: Unauthenticated by design; the 32-byte token in the path is the credential and is compared against a stored hash in constant time.
-   *     tags:
-   *       - Automations
-   *     parameters:
-   *       - in: path
-   *         name: token
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       202:
-   *         description: The run was accepted.
-   *       404:
-   *         description: No automation matches that token.
-   */
-  router.post("/webhook/:token", async (req: Request, res: Response) => {
-    const token = req.params.token;
-    if (!isNonEmptyString(token) || token.length < 32) {
-      return res.status(404).json({ error: "Not found" });
-    }
-
-    try {
-      const wanted = hashToken(token);
-      const match = (await repository.listAllEnabled()).find((row) => {
-        const definition = parseDefinition(row.definition);
-        if (definition?.trigger?.kind !== "webhook") return false;
-        return timingSafeEqual(definition.trigger.tokenHash, wanted);
-      });
-      if (!match) return res.status(404).json({ error: "Not found" });
-
-      const outcome = await engine.run({
-        automationId: match.id,
-        triggerType: "webhook",
-        triggerContext: {
-          body: req.body ?? {},
-          receivedAt: new Date().toISOString(),
-        },
-      });
-      res.status(202).json({ runId: outcome.runId, status: outcome.status });
-    } catch (error) {
-      fail(res, "Failed to run automation", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/automations:
-   *   get:
-   *     summary: List the current user's automations
-   *     description: Returns every automation the caller owns, with its parsed definition, linked notification channels and the plugins it needs that are not running.
-   *     tags:
-   *       - Automations
-   *     responses:
-   *       200:
-   *         description: List of automations.
-   *       403:
-   *         description: Missing the automations.view permission.
-   */
-  router.get(
-    "/",
-    ctx.rbac.require("view") as never,
-    async (_req: Request, res: Response) => {
-      try {
-        const rows = await repository.list(actor());
-        res.json(rows.map((row) => serializeAutomation(row, deps)));
-      } catch (error) {
-        fail(res, "Failed to list automations", error);
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/automations/editor-options:
-   *   get:
-   *     summary: What the automation editor can offer
-   *     description: The caller's hosts, snippets, fleets and notification channels, and which optional plugins are running, so the editor only offers triggers and steps it can run.
-   *     tags:
-   *       - Automations
-   *     responses:
-   *       200:
-   *         description: Lookup lists and the running providers.
-   *       403:
-   *         description: Missing the automations.view permission.
-   */
-  router.get(
-    "/editor-options",
-    ctx.rbac.require("view") as never,
-    async (_req: Request, res: Response) => {
-      const userId = actor();
-      const settle = async <T>(fn: () => Promise<T>, fallback: T) => {
-        try {
-          return await fn();
-        } catch {
-          return fallback;
-        }
-      };
-      const snippets = deps.snippets();
-      const fleets = deps.fleets();
-
-      const [hosts, snippetList, fleetList, channels] = await Promise.all([
-        settle(() => ctx.hosts.list(), []),
-        settle(
-          async () =>
-            typeof snippets.list === "function" ? snippets.list() : [],
-          [],
-        ),
-        settle(
-          async () => (typeof fleets.list === "function" ? fleets.list() : []),
-          [],
-        ),
-        settle(() => ctx.notify.channels(), []),
-      ]);
-
-      res.json({
-        hosts: hosts
-          .filter((host) => host.userId === userId)
-          .map((host) => ({ id: host.id, name: host.name || host.ip })),
-        snippets: snippetList
-          .filter((snippet) => !snippet.isNote)
-          .map((snippet) => ({ id: snippet.id, name: snippet.name })),
-        fleets: fleetList.map((fleet) => ({ id: fleet.id, name: fleet.name })),
-        channels: channels.map((channel) => ({
-          id: channel.id,
-          name: channel.name,
-        })),
-        providers: deps.providers(),
-      });
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/automations/runs/history:
-   *   get:
-   *     summary: List automation runs
-   *     tags:
-   *       - Automations
-   *     parameters:
-   *       - in: query
-   *         name: automationId
-   *         schema:
-   *           type: integer
-   *       - in: query
-   *         name: limit
-   *         schema:
-   *           type: integer
-   *       - in: query
-   *         name: offset
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Recent runs, newest first.
-   */
-  router.get(
-    "/runs/history",
-    ctx.rbac.require("view") as never,
-    async (req: Request, res: Response) => {
-      try {
-        res.json(
-          await repository.listRuns(actor(), {
-            automationId: parseId(req.query.automationId) ?? undefined,
-            limit: Number(req.query.limit) || 50,
-            offset: Number(req.query.offset) || 0,
-          }),
-        );
-      } catch (error) {
-        fail(res, "Failed to list runs", error);
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/automations/runs/{runId}/steps:
-   *   get:
-   *     summary: Step-by-step results for a run
-   *     tags:
-   *       - Automations
-   *     parameters:
-   *       - in: path
-   *         name: runId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: The run's steps in order.
-   *       404:
-   *         description: Run not found.
-   */
-  router.get(
-    "/runs/:runId/steps",
-    ctx.rbac.require("view") as never,
-    async (req: Request, res: Response) => {
-      const runId = parseId(req.params.runId);
-      if (runId === null) return res.status(400).json({ error: "Invalid id" });
-      try {
-        const run = await repository.findRunForUser(runId, actor());
-        if (!run) return res.status(404).json({ error: "Run not found" });
-        res.json(await repository.listRunSteps(runId));
-      } catch (error) {
-        fail(res, "Failed to list run steps", error);
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/automations/{id}:
-   *   get:
-   *     summary: Fetch a single automation
-   *     tags:
-   *       - Automations
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: The automation.
-   *       404:
-   *         description: Automation not found.
-   */
-  router.get(
-    "/:id",
-    ctx.rbac.require("view") as never,
-    async (req: Request, res: Response) => {
-      const id = parseId(req.params.id);
-      if (id === null) return res.status(400).json({ error: "Invalid id" });
-      try {
-        const row = await repository.findForUser(id, actor());
-        if (!row)
-          return res.status(404).json({ error: "Automation not found" });
-        res.json(serializeAutomation(row, deps));
-      } catch (error) {
-        fail(res, "Failed to fetch automation", error);
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/automations:
-   *   post:
-   *     summary: Create an automation
-   *     description: Validates the trigger and every step before storing the definition. A schedule trigger also registers its next due time, and a webhook trigger returns its token once.
-   *     tags:
-   *       - Automations
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               name:
-   *                 type: string
-   *               definition:
-   *                 type: object
-   *     responses:
-   *       201:
-   *         description: The created automation.
-   *       400:
-   *         description: Validation failed.
-   */
-  router.post(
-    "/",
-    ctx.rbac.require("create") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor();
-      const { name, description, enabled, definition, concurrencyPolicy } =
-        req.body ?? {};
-
-      if (!isNonEmptyString(name)) {
-        return res.status(400).json({ error: "Name is required" });
-      }
-      const validated = validateDefinition(definition);
-      if (!validated.ok || !validated.definition) {
-        return res.status(400).json({ error: validated.error });
-      }
-
-      // A webhook trigger's token is shown once here and only stored hashed.
-      let webhookToken: string | undefined;
-      if (validated.definition.trigger.kind === "webhook") {
-        webhookToken = crypto.randomBytes(32).toString("hex");
-        validated.definition = {
-          ...validated.definition,
-          trigger: { kind: "webhook", tokenHash: hashToken(webhookToken) },
-        };
-      }
-
-      try {
-        const created = await repository.create({
-          userId,
-          name: name.trim(),
-          description: description ?? null,
-          enabled: enabled !== false,
-          definition: JSON.stringify(validated.definition),
-          concurrencyPolicy,
-          channels: Array.isArray(req.body?.channels) ? req.body.channels : [],
-        });
-        await syncSchedule(repository, created.id, validated.definition);
-        await audit("create_automation", created.id, created.name);
-        res
-          .status(201)
-          .json({ ...serializeAutomation(created, deps), webhookToken });
-      } catch (error) {
-        fail(res, "Failed to create automation", error);
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/automations/{id}:
-   *   put:
-   *     summary: Update an automation
-   *     tags:
-   *       - Automations
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: The updated automation.
-   *       400:
-   *         description: Validation failed.
-   *       404:
-   *         description: Automation not found.
-   */
-  router.put(
-    "/:id",
-    ctx.rbac.require("edit") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor();
-      const id = parseId(req.params.id);
-      if (id === null) return res.status(400).json({ error: "Invalid id" });
-
-      try {
-        const existing = await repository.findForUser(id, userId);
-        if (!existing) {
-          return res.status(404).json({ error: "Automation not found" });
-        }
-
-        const update: Parameters<AutomationRepository["update"]>[2] = {};
-        if (req.body?.name !== undefined) {
-          if (!isNonEmptyString(req.body.name)) {
-            return res.status(400).json({ error: "Name cannot be empty" });
-          }
-          update.name = req.body.name.trim();
-        }
-        if (req.body?.description !== undefined) {
-          update.description = req.body.description;
-        }
-        if (req.body?.enabled !== undefined)
-          update.enabled = !!req.body.enabled;
-        if (req.body?.concurrencyPolicy !== undefined) {
-          update.concurrencyPolicy = req.body.concurrencyPolicy;
-        }
-        if (Array.isArray(req.body?.channels)) {
-          update.channels = req.body.channels;
-        }
-
-        let parsedDefinition: AutomationDefinition | null = null;
-        if (req.body?.definition !== undefined) {
-          const validated = validateDefinition(req.body.definition);
-          if (!validated.ok || !validated.definition) {
-            return res.status(400).json({ error: validated.error });
-          }
-          // Keep the stored token hash: the raw token is only shown once.
-          if (validated.definition.trigger.kind === "webhook") {
-            const previous = parseDefinition(existing.definition);
-            validated.definition = {
-              ...validated.definition,
-              trigger: {
-                kind: "webhook",
-                tokenHash:
-                  previous?.trigger?.kind === "webhook"
-                    ? previous.trigger.tokenHash
-                    : "",
-              },
-            };
-          }
-          parsedDefinition = validated.definition;
-          update.definition = JSON.stringify(validated.definition);
-        }
-
-        const updated = await repository.update(id, userId, update);
-        if (!updated) {
-          return res.status(404).json({ error: "Automation not found" });
-        }
-        if (parsedDefinition) {
-          await syncSchedule(repository, id, parsedDefinition);
-        }
-        await audit("update_automation", id, updated.name);
-        res.json(serializeAutomation(updated, deps));
-      } catch (error) {
-        fail(res, "Failed to update automation", error);
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/automations/{id}:
-   *   delete:
-   *     summary: Delete an automation
-   *     tags:
-   *       - Automations
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Deleted.
-   *       404:
-   *         description: Automation not found.
-   */
-  router.delete(
-    "/:id",
-    ctx.rbac.require("delete") as never,
-    async (req: Request, res: Response) => {
-      const id = parseId(req.params.id);
-      if (id === null) return res.status(400).json({ error: "Invalid id" });
-      try {
-        const deleted = await repository.delete(id, actor());
-        if (!deleted) {
-          return res.status(404).json({ error: "Automation not found" });
-        }
-        await audit("delete_automation", id, undefined);
-        res.json({ success: true });
-      } catch (error) {
-        fail(res, "Failed to delete automation", error);
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/automations/{id}/run:
-   *   post:
-   *     summary: Run an automation now
-   *     description: Runs immediately, as the automation's owner. Pass dryRun to record what each step would do without touching anything outside Termix. An automation that needs a plugin that is off is recorded as skipped.
-   *     tags:
-   *       - Automations
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               dryRun:
-   *                 type: boolean
-   *     responses:
-   *       200:
-   *         description: The run outcome.
-   *       404:
-   *         description: Automation not found.
-   */
-  router.post(
-    "/:id/run",
-    ctx.rbac.require("run") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor();
-      const id = parseId(req.params.id);
-      if (id === null) return res.status(400).json({ error: "Invalid id" });
-
-      try {
-        const existing = await repository.findForUser(id, userId);
-        if (!existing) {
-          return res.status(404).json({ error: "Automation not found" });
-        }
-        const dryRun = req.body?.dryRun === true;
-        const outcome = await engine.run({
-          automationId: id,
-          triggerType: "manual",
-          triggerContext: { manual: true, requestedBy: userId },
-          dryRun,
-        });
-        await audit(
-          "run_automation",
-          id,
-          existing.name,
-          outcome.status === "success",
-          JSON.stringify({ status: outcome.status, dryRun }),
-        );
-        res.json(outcome);
-      } catch (error) {
-        fail(res, "Failed to run automation", error);
-      }
-    },
-  );
-}
diff --git a/plugins/automations/src/backend/scheduler.ts b/plugins/automations/src/backend/scheduler.ts
deleted file mode 100644
index e9885ef4d..000000000
--- a/plugins/automations/src/backend/scheduler.ts
+++ /dev/null
@@ -1,166 +0,0 @@
-import type { PluginLogger } from "@termix/plugin-sdk/backend";
-import type { AutomationDefinition } from "../types.js";
-import { computeNextDueAt } from "./cron.js";
-import { hasDwelled, isCoolingDown } from "./conditions.js";
-import type { AutomationEngine } from "./engine.js";
-import type { AutomationRepository } from "./repository.js";
-
-/**
- * The one tick the automations plugin runs. It handles due schedules, dwell
- * windows that need re-checking without a fresh sample, the watchers that
- * keep metrics and Docker events flowing for watched hosts, and history
- * pruning. activate() drives it through ctx.schedule.
- */
-
-export const TICK_MS = 15_000;
-export const STARTUP_DELAY_MS = 30_000;
-const PRUNE_INTERVAL_MS = 24 * 60 * 60 * 1000;
-const RUN_RETENTION_DAYS = 30;
-/** A "running" row older than this belongs to a process that is gone. */
-const STALE_RUN_MS = 6 * 60 * 60 * 1000;
-
-export interface SchedulerDeps {
-  repository: AutomationRepository;
-  engine: Pick<AutomationEngine, "run">;
-  log: PluginLogger;
-  isMaintaining?: (userId: string, hostId: number) => Promise<boolean>;
-  /** Watchers brought in line with the enabled automations every tick. */
-  reconcile: Array<(now: number) => Promise<unknown>>;
-}
-
-export function createScheduler(deps: SchedulerDeps) {
-  const { repository, engine, log } = deps;
-  let lastPruneAt = 0;
-  let ticking = false;
-
-  const errorText = (error: unknown) =>
-    error instanceof Error ? error.message : String(error);
-
-  async function runDueSchedules(now: Date): Promise<void> {
-    const due = await repository.listDueSchedules(now.toISOString());
-
-    for (const schedule of due) {
-      const nextDueAt = computeNextDueAt(
-        {
-          cron: schedule.cron,
-          intervalSeconds: schedule.intervalSeconds,
-          timezone: schedule.timezone,
-        },
-        now,
-      );
-      await repository.markScheduleTicked(
-        schedule.automationId,
-        nextDueAt,
-        now.toISOString(),
-      );
-
-      void engine
-        .run({
-          automationId: schedule.automationId,
-          triggerType: "schedule",
-          triggerContext: { scheduledFor: now.toISOString() },
-        })
-        .catch((error: unknown) =>
-          log.warn(
-            `Scheduled automation ${schedule.automationId} failed to start: ${errorText(error)}`,
-          ),
-        );
-    }
-  }
-
-  /**
-   * Fires sustained breaches whose window has elapsed. Without this a dwell
-   * window only completes when another sample happens to arrive.
-   */
-  async function recheckOpenBreaches(now: Date): Promise<void> {
-    const open = await repository.listOpenBreaches();
-    const nowMs = now.getTime();
-
-    for (const state of open) {
-      const automation = await repository.findById(state.automationId);
-      if (!automation || !automation.enabled) continue;
-      const hostId = Number(state.stateKey.split(":")[0]);
-      if (
-        Number.isFinite(hostId) &&
-        (await deps.isMaintaining?.(automation.userId, hostId))
-      ) {
-        await repository.clearBreach(automation.id, state.stateKey);
-        continue;
-      }
-
-      let definition: AutomationDefinition;
-      try {
-        definition = JSON.parse(automation.definition) as AutomationDefinition;
-      } catch {
-        continue;
-      }
-
-      const trigger = definition.trigger;
-      if (trigger?.kind !== "metric_threshold") continue;
-      if (!trigger.forSeconds) continue;
-      if (!hasDwelled(state.breachStartedAt, trigger.forSeconds, nowMs)) {
-        continue;
-      }
-      if (isCoolingDown(state.lastFiredAt, trigger.cooldownMinutes, nowMs)) {
-        continue;
-      }
-
-      await repository.upsertTriggerState({
-        automationId: automation.id,
-        stateKey: state.stateKey,
-        lastFiredAt: now.toISOString(),
-      });
-
-      void engine
-        .run({
-          automationId: automation.id,
-          triggerType: "metric_threshold",
-          triggerContext: {
-            hostId,
-            value: state.lastValue,
-            threshold: trigger.value,
-            metric: trigger.metric.path,
-            sustained: true,
-          },
-          triggerHostId: Number.isFinite(hostId) ? hostId : undefined,
-        })
-        .catch(() => undefined);
-    }
-  }
-
-  async function pruneIfDue(now: Date): Promise<void> {
-    if (now.getTime() - lastPruneAt < PRUNE_INTERVAL_MS) return;
-    lastPruneAt = now.getTime();
-    try {
-      await repository.failStaleRunningRuns(
-        new Date(now.getTime() - STALE_RUN_MS).toISOString(),
-      );
-      const deleted = await repository.pruneRunsOlderThan(RUN_RETENTION_DAYS);
-      if (deleted > 0) log.info(`Pruned ${deleted} old automation run(s)`);
-    } catch (error) {
-      log.warn(`Automation run pruning failed: ${errorText(error)}`);
-    }
-  }
-
-  return {
-    async tick(now: Date = new Date()): Promise<void> {
-      // A slow tick must not overlap the next one.
-      if (ticking) return;
-      ticking = true;
-      try {
-        for (const reconcile of deps.reconcile) {
-          await reconcile(now.getTime()).catch((error: unknown) =>
-            log.warn(`Automation watcher failed: ${errorText(error)}`),
-          );
-        }
-        await runDueSchedules(now);
-        await recheckOpenBreaches(now);
-        await pruneIfDue(now);
-      } catch (error) {
-        log.warn(`Automation scheduler tick failed: ${errorText(error)}`);
-      } finally {
-        ticking = false;
-      }
-    },
-  };
-}
diff --git a/plugins/automations/src/backend/service.ts b/plugins/automations/src/backend/service.ts
deleted file mode 100644
index 48179f9cf..000000000
--- a/plugins/automations/src/backend/service.ts
+++ /dev/null
@@ -1,139 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { AutomationDefinition, RunStatus } from "../types.js";
-import type { Deps } from "./deps.js";
-import type { AutomationEngine } from "./engine.js";
-import type { AutomationRepository } from "./repository.js";
-import { missingPlugins, parseDefinition } from "./requirements.js";
-import { syncSchedule } from "./routes.js";
-import { validateDefinition } from "./validate.js";
-
-export interface AutomationSummary {
-  id: number;
-  name: string;
-  description: string | null;
-  enabled: boolean;
-  triggerKind: string | null;
-  lastRunAt: string | null;
-  lastRunStatus: string | null;
-  missingPlugins: string[];
-}
-
-/**
- * The "automations.access" service, version 1. Runs as the caller's user,
- * gated on automations.view; create and run also need automations.create and
- * automations.run.
- */
-export interface AutomationsAccessV1 {
-  list: () => Promise<AutomationSummary[]>;
-  get: (
-    id: number,
-  ) => Promise<
-    (AutomationSummary & { definition: AutomationDefinition | null }) | null
-  >;
-  /**
-   * Validates the definition the same way the create route does. Starts
-   * disabled unless `enabled` is set, so an automation nobody watched run
-   * does not start firing on its own.
-   */
-  create: (input: {
-    name: string;
-    description?: string | null;
-    definition: unknown;
-    enabled?: boolean;
-  }) => Promise<{ id: number; name: string }>;
-  run: (
-    id: number,
-    options?: { dryRun?: boolean },
-  ) => Promise<{ runId: number | null; status: RunStatus; error?: string }>;
-}
-
-export function createAutomationsService(
-  ctx: PluginContext,
-  repository: AutomationRepository,
-  engine: Pick<AutomationEngine, "run">,
-  deps: Deps,
-): AutomationsAccessV1 {
-  const actor = (method: string) => {
-    const userId = ctx.currentActor();
-    if (!userId) throw new Error(`automations.access.${method} needs an actor`);
-    return userId;
-  };
-  const summarize = (
-    row: Awaited<ReturnType<AutomationRepository["list"]>>[number],
-  ) => {
-    const definition = parseDefinition(row.definition);
-    if (definition?.trigger?.kind === "webhook") {
-      definition.trigger = { ...definition.trigger, tokenHash: "" };
-    }
-    return {
-      summary: {
-        id: row.id,
-        name: row.name,
-        description: row.description,
-        enabled: !!row.enabled,
-        triggerKind: definition?.trigger?.kind ?? null,
-        lastRunAt: row.last_run_at,
-        lastRunStatus: row.last_run_status,
-        missingPlugins: missingPlugins(definition, deps),
-      },
-      definition,
-    };
-  };
-
-  return {
-    list: async () => {
-      const rows = await repository.list(actor("list"));
-      return rows.map((row) => summarize(row).summary);
-    },
-
-    get: async (id) => {
-      const row = await repository.findForUser(id, actor("get"));
-      if (!row) return null;
-      const { summary, definition } = summarize(row);
-      return { ...summary, definition };
-    },
-
-    create: async (input) => {
-      const userId = actor("create");
-      if (!(await ctx.rbac.has("create"))) {
-        throw new Error('Creating automations needs "automations.create"');
-      }
-      const name = typeof input.name === "string" ? input.name.trim() : "";
-      if (!name) throw new Error("Name is required");
-      const validated = validateDefinition(input.definition);
-      if (!validated.ok || !validated.definition) {
-        throw new Error(
-          validated.error ?? "The automation definition is invalid",
-        );
-      }
-      if (validated.definition.trigger.kind === "webhook") {
-        // A webhook's token is only ever shown by the create route.
-        throw new Error("Webhook automations are created from the editor");
-      }
-      const created = await repository.create({
-        userId,
-        name,
-        description: input.description ?? null,
-        definition: JSON.stringify(validated.definition),
-        enabled: input.enabled ?? false,
-      });
-      await syncSchedule(repository, created.id, validated.definition);
-      return { id: created.id, name: created.name };
-    },
-
-    run: async (id, options = {}) => {
-      const userId = actor("run");
-      if (!(await ctx.rbac.has("run"))) {
-        throw new Error('Running automations needs "automations.run"');
-      }
-      const existing = await repository.findForUser(id, userId);
-      if (!existing) throw new Error("Automation not found");
-      return engine.run({
-        automationId: id,
-        triggerType: "manual",
-        triggerContext: { manual: true, requestedBy: userId },
-        dryRun: options.dryRun === true,
-      });
-    },
-  };
-}
diff --git a/plugins/automations/src/backend/tables.ts b/plugins/automations/src/backend/tables.ts
deleted file mode 100644
index 9cd037d89..000000000
--- a/plugins/automations/src/backend/tables.ts
+++ /dev/null
@@ -1,217 +0,0 @@
-import {
-  adoptLegacyTable,
-  boolean,
-  defineTable,
-  id,
-  integer,
-  real,
-  refUser,
-  refHost,
-  text,
-  timestamp,
-  varchar,
-} from "@termix/plugin-sdk/db";
-
-/*
- * Adopted from core's automation tables, so column and index names are the
- * legacy ones and the rename carries every row across.
- *
- * The links between these tables are plain integers here: the SDK only
- * references users and ssh_data. The adoption migrations keep the legacy
- * FOREIGN KEY clauses by hand, so deleting an automation still cascades. A
- * channel id points into the alerts plugin's table and has no foreign key.
- */
-
-export const automations = adoptLegacyTable(
-  "automations",
-  defineTable(
-    "automations",
-    {
-      id: id(),
-      userId: refUser(),
-      name: text().notNull(),
-      description: text(),
-      enabled: boolean().notNull().default(true),
-      // The whole trigger and steps graph, read and written as a unit.
-      definition: text().notNull(),
-      definitionVersion: integer().notNull().default(1),
-      concurrencyPolicy: text().notNull().default("skip"),
-      maxRunSeconds: integer().notNull().default(300),
-      dryRun: boolean().notNull().default(false),
-      lastRunAt: text(),
-      lastRunStatus: text(),
-      createdAt: timestamp().notNull().defaultNow(),
-      updatedAt: timestamp().notNull().defaultNow(),
-    },
-    {
-      indexes: [
-        { name: "idx_automations_user", columns: ["userId", "enabled"] },
-      ],
-    },
-  ),
-);
-
-/**
- * Durable per-target trigger state, so cooldowns and dwell windows survive a
- * restart. state_key scopes it to what the trigger watches ("<hostId>",
- * "<hostId>:/data", "<hostId>:<container>").
- */
-export const triggerState = adoptLegacyTable(
-  "automation_trigger_state",
-  defineTable(
-    "trigger_state",
-    {
-      id: id(),
-      automationId: integer().notNull(),
-      stateKey: varchar().notNull(),
-      breachStartedAt: text(),
-      lastFiredAt: text(),
-      lastValue: real(),
-      lastObservedState: text(),
-      updatedAt: timestamp().notNull().defaultNow(),
-    },
-    {
-      uniques: [
-        {
-          name: "idx_automation_trigger_state_key",
-          columns: ["automationId", "stateKey"],
-        },
-      ],
-    },
-  ),
-);
-
-export const schedules = adoptLegacyTable(
-  "automation_schedules",
-  defineTable(
-    "schedules",
-    {
-      id: id(),
-      automationId: integer().notNull(),
-      cron: text(),
-      intervalSeconds: integer(),
-      timezone: text(),
-      nextDueAt: timestamp(),
-      lastTickAt: text(),
-    },
-    {
-      uniques: [
-        {
-          name: "idx_automation_schedules_automation",
-          columns: ["automationId"],
-        },
-      ],
-      indexes: [
-        { name: "idx_automation_schedules_due", columns: ["nextDueAt"] },
-      ],
-    },
-  ),
-);
-
-export const runs = adoptLegacyTable(
-  "automation_runs",
-  defineTable(
-    "runs",
-    {
-      id: id(),
-      automationId: integer().notNull(),
-      userId: refUser(),
-      triggerType: text().notNull(),
-      triggerContext: text(),
-      status: text().notNull(),
-      startedAt: timestamp().notNull().defaultNow(),
-      finishedAt: text(),
-      durationMs: integer(),
-      error: text(),
-      dryRun: boolean().notNull().default(false),
-      // Set when one automation invoked another, so a chain can be traced.
-      parentRunId: integer(),
-    },
-    {
-      indexes: [
-        {
-          name: "idx_automation_runs_automation",
-          columns: ["automationId", "startedAt"],
-        },
-        { name: "idx_automation_runs_user", columns: ["userId", "startedAt"] },
-      ],
-    },
-  ),
-);
-
-export const runSteps = adoptLegacyTable(
-  "automation_run_steps",
-  defineTable(
-    "run_steps",
-    {
-      id: id(),
-      runId: integer().notNull(),
-      stepIndex: integer().notNull(),
-      stepId: text().notNull(),
-      stepType: text().notNull(),
-      status: text().notNull(),
-      startedAt: timestamp().notNull().defaultNow(),
-      finishedAt: text(),
-      output: text(),
-      error: text(),
-      truncated: boolean().notNull().default(false),
-    },
-    {
-      indexes: [
-        {
-          name: "idx_automation_run_steps_run",
-          columns: ["runId", "stepIndex"],
-        },
-      ],
-    },
-  ),
-);
-
-/** Which alert channels an automation is linked to. */
-export const channels = adoptLegacyTable(
-  "automation_channels",
-  defineTable(
-    "channels",
-    {
-      id: id(),
-      automationId: integer().notNull(),
-      channelId: integer().notNull(),
-    },
-    {
-      uniques: [
-        {
-          name: "idx_automation_channels_pair",
-          columns: ["automationId", "channelId"],
-        },
-      ],
-    },
-  ),
-);
-
-export const maintenanceTable = defineTable(
-  "host_maintenance",
-  {
-    id: id(),
-    userId: refUser(),
-    hostId: refHost(),
-    state: text().notNull(),
-  },
-  {
-    uniques: [
-      {
-        name: "idx_automation_maintenance_host_owner",
-        columns: ["userId", "hostId"],
-      },
-    ],
-  },
-);
-
-export const tables = [
-  maintenanceTable,
-  automations,
-  triggerState,
-  schedules,
-  runs,
-  runSteps,
-  channels,
-];
diff --git a/plugins/automations/src/backend/template.ts b/plugins/automations/src/backend/template.ts
deleted file mode 100644
index 9efc86ab7..000000000
--- a/plugins/automations/src/backend/template.ts
+++ /dev/null
@@ -1,101 +0,0 @@
-/**
- * Variable substitution for automation steps.
- *
- * Templates read from the run context: {{host.name}}, {{trigger.value}},
- * {{steps.<stepId>.stdout}}, {{vars.myVar}}. Resolution always produces a
- * plain string and never shell syntax; callers that build a command are
- * responsible for quoting the result (see shellSingleQuote in
- * hosts/metrics/managers/exec-elevated.ts). Nothing here escapes anything,
- * precisely so there is one obvious place where quoting happens.
- */
-
-export interface TemplateContext {
-  host?: {
-    id?: number;
-    name?: string;
-    ip?: string;
-    username?: string;
-    port?: number;
-  };
-  trigger?: Record<string, unknown>;
-  steps?: Record<string, { stdout?: string; stderr?: string; code?: number }>;
-  vars?: Record<string, string>;
-  run?: { id?: number; automationId?: number; startedAt?: string };
-}
-
-const TOKEN = /\{\{\s*([a-zA-Z0-9_.-]+)\s*\}\}/g;
-
-function readPath(context: TemplateContext, path: string): unknown {
-  const parts = path.split(".");
-  let current: unknown = context;
-
-  for (const part of parts) {
-    if (current === null || current === undefined) return undefined;
-    if (typeof current !== "object") return undefined;
-    current = (current as Record<string, unknown>)[part];
-  }
-  return current;
-}
-
-function stringify(value: unknown): string {
-  if (value === null || value === undefined) return "";
-  if (typeof value === "string") return value;
-  if (typeof value === "number" || typeof value === "boolean") {
-    return String(value);
-  }
-  return JSON.stringify(value);
-}
-
-/**
- * Replaces every {{token}} it can resolve. An unresolvable token is left
- * as-is so a typo shows up in the run output rather than silently becoming an
- * empty string, which is the difference between a visible mistake and a
- * command that quietly does the wrong thing.
- */
-export function renderTemplate(
-  input: string,
-  context: TemplateContext,
-): string {
-  if (!input || !input.includes("{{")) return input;
-
-  return input.replace(TOKEN, (match, path: string) => {
-    const value = readPath(context, path);
-    return value === undefined ? match : stringify(value);
-  });
-}
-
-/** Renders every string in a flat record, leaving keys untouched. */
-export function renderRecord(
-  input: Record<string, string> | undefined,
-  context: TemplateContext,
-): Record<string, string> | undefined {
-  if (!input) return undefined;
-  const output: Record<string, string> = {};
-  for (const [key, value] of Object.entries(input)) {
-    output[key] = renderTemplate(value, context);
-  }
-  return output;
-}
-
-/** True when a template still has unresolved tokens after rendering. */
-export function hasUnresolvedTokens(rendered: string): boolean {
-  TOKEN.lastIndex = 0;
-  return TOKEN.test(rendered);
-}
-
-const SECRET_KEY = /(authorization|token|password|secret|api[-_]?key|cookie)/i;
-
-/**
- * Masks values whose key looks like a credential, for anything written to run
- * history or returned by the API.
- */
-export function redactSecrets(
-  input: Record<string, string> | undefined,
-): Record<string, string> | undefined {
-  if (!input) return undefined;
-  const output: Record<string, string> = {};
-  for (const [key, value] of Object.entries(input)) {
-    output[key] = SECRET_KEY.test(key) ? "***" : value;
-  }
-  return output;
-}
diff --git a/plugins/automations/src/backend/triggers.ts b/plugins/automations/src/backend/triggers.ts
deleted file mode 100644
index 09e31b06e..000000000
--- a/plugins/automations/src/backend/triggers.ts
+++ /dev/null
@@ -1,485 +0,0 @@
-import type { PluginEvents, PluginLogger } from "@termix/plugin-sdk/backend";
-import type { AutomationDefinition, HostSelector, Trigger } from "../types.js";
-import type {
-  AutomationEngineRow,
-  AutomationRepository,
-} from "./repository.js";
-import {
-  compare,
-  extractMetricValue,
-  hasDwelled,
-  isCoolingDown,
-  metricStateKey,
-  severityForValue,
-  type MetricsSnapshot,
-} from "./conditions.js";
-import { TOPIC_AUTOMATION_FAILED, type AutomationEngine } from "./engine.js";
-
-/**
- * Matches events against automation triggers and decides what fires.
- *
- * Dwell windows and cooldowns live in automation_trigger_state rather than in
- * memory, so a restart mid-breach neither loses the window nor re-fires an
- * alert that already went out.
- */
-
-export interface MetricEvent {
-  hostId: number;
-  ownerUserId: string;
-  metrics: MetricsSnapshot;
-}
-
-export interface StatusEvent {
-  hostId: number;
-  ownerUserId: string;
-  online: boolean;
-}
-
-export interface HealthEvent {
-  hostId: number;
-  userId: string;
-  checkId: string;
-  ok: boolean;
-  detail?: string;
-}
-
-export interface DockerEvent {
-  hostId: number;
-  ownerUserId: string;
-  container: string;
-  event: "exited" | "started" | "unhealthy" | "restarting";
-}
-
-export interface InternalEvent {
-  event: string;
-  userId: string;
-  hostId?: number;
-  details?: Record<string, unknown>;
-}
-
-interface LoadedAutomation {
-  row: AutomationEngineRow;
-  definition: AutomationDefinition;
-}
-
-export type Triggers = ReturnType<typeof createTriggers>;
-
-/** Built once per activation. */
-export function createTriggers(
-  repository: AutomationRepository,
-  engine: Pick<AutomationEngine, "run">,
-  log: PluginLogger,
-  isMaintaining: (
-    userId: string,
-    hostId: number,
-  ) => Promise<boolean> = async () => false,
-) {
-  async function loadEnabledFor(userId: string): Promise<LoadedAutomation[]> {
-    try {
-      const rows = await repository.listEnabledForUser(userId);
-      const loaded: LoadedAutomation[] = [];
-      for (const row of rows) {
-        try {
-          loaded.push({
-            row,
-            definition: JSON.parse(row.definition) as AutomationDefinition,
-          });
-        } catch {
-          // A malformed definition should not stop the others from evaluating.
-        }
-      }
-      return loaded;
-    } catch {
-      return [];
-    }
-  }
-
-  /** Whether a selector covers a host. Ownership is checked by the caller. */
-  function selectorCoversHost(
-    selector: HostSelector | undefined,
-    hostId: number,
-  ): boolean {
-    if (!selector) return true;
-    switch (selector.kind) {
-      case "all":
-      case "trigger":
-        return true;
-      case "host":
-        return selector.hostId === hostId;
-      case "hosts":
-        return selector.hostIds.includes(hostId);
-      case "fleet":
-        // Fleet membership is resolved at execution time; evaluate optimistically
-        // so a fleet-scoped trigger still reaches the engine.
-        return true;
-      default:
-        return false;
-    }
-  }
-
-  async function fire(
-    automation: AutomationEngineRow,
-    stateKey: string,
-    triggerType: string,
-    triggerContext: Record<string, unknown>,
-    hostId?: number,
-  ): Promise<void> {
-    if (
-      hostId !== undefined &&
-      triggerType !== "internal_event" &&
-      (await isMaintaining(automation.userId, hostId))
-    )
-      return;
-    await repository.upsertTriggerState({
-      automationId: automation.id,
-      stateKey,
-      lastFiredAt: new Date().toISOString(),
-    });
-
-    engine
-      .run({
-        automationId: automation.id,
-        triggerType,
-        triggerContext,
-        triggerHostId: hostId,
-      })
-      .catch((error: unknown) => {
-        log.warn(
-          `Automation ${automation.id} failed to start: ${
-            error instanceof Error ? error.message : String(error)
-          }`,
-        );
-      });
-  }
-
-  /**
-   * Metric samples. Called for every polled host, including hosts polled only
-   * because an automation asked for them.
-   */
-  async function onMetrics(event: MetricEvent): Promise<void> {
-    const automations = await loadEnabledFor(event.ownerUserId);
-    const now = Date.now();
-    const maintaining = await isMaintaining(event.ownerUserId, event.hostId);
-
-    for (const { row, definition } of automations) {
-      const trigger = definition.trigger;
-      if (trigger?.kind !== "metric_threshold") continue;
-      if (!selectorCoversHost(trigger.hostSelector, event.hostId)) continue;
-
-      const value = extractMetricValue(event.metrics, trigger.metric);
-      if (value === null) continue;
-
-      const stateKey = metricStateKey(event.hostId, trigger.metric);
-      const state = await repository.getTriggerState(row.id, stateKey);
-      const breaching = compare(value, trigger.operator, trigger.value);
-
-      if (maintaining || !breaching) {
-        if (state?.breachStartedAt) {
-          await repository.clearBreach(row.id, stateKey);
-        }
-        continue;
-      }
-
-      // Open the dwell window on the first breaching sample.
-      if (!state?.breachStartedAt) {
-        await repository.upsertTriggerState({
-          automationId: row.id,
-          stateKey,
-          breachStartedAt: new Date(now).toISOString(),
-          lastValue: value,
-        });
-        if (trigger.forSeconds) continue;
-      }
-
-      const breachStartedAt =
-        state?.breachStartedAt ?? new Date(now).toISOString();
-      if (!hasDwelled(breachStartedAt, trigger.forSeconds, now)) continue;
-      if (isCoolingDown(state?.lastFiredAt, trigger.cooldownMinutes, now))
-        continue;
-
-      await fire(
-        row,
-        stateKey,
-        "metric_threshold",
-        {
-          hostId: event.hostId,
-          value,
-          threshold: trigger.value,
-          operator: trigger.operator,
-          metric: trigger.metric.path,
-          mount: "mount" in trigger.metric ? trigger.metric.mount : undefined,
-          severity: severityForValue(value, trigger.severity),
-        },
-        event.hostId,
-      );
-    }
-  }
-
-  /** Host reachability transitions. Only edges fire, never steady state. */
-  async function onStatus(event: StatusEvent): Promise<void> {
-    const automations = await loadEnabledFor(event.ownerUserId);
-    const now = Date.now();
-    const observed = event.online ? "online" : "offline";
-
-    for (const { row, definition } of automations) {
-      const trigger = definition.trigger;
-      if (trigger?.kind !== "host_status") continue;
-      if (!selectorCoversHost(trigger.hostSelector, event.hostId)) continue;
-
-      const stateKey = String(event.hostId);
-      const state = await repository.getTriggerState(row.id, stateKey);
-
-      if (state?.lastObservedState === observed) continue;
-
-      await repository.upsertTriggerState({
-        automationId: row.id,
-        stateKey,
-        lastObservedState: observed,
-      });
-
-      // The first observation establishes a baseline rather than firing, so a
-      // restart does not announce every host as though it just changed.
-      if (await isMaintaining(row.userId, event.hostId)) continue;
-      if (!state?.lastObservedState) continue;
-      if (trigger.to !== observed) continue;
-      if (isCoolingDown(state?.lastFiredAt, trigger.cooldownMinutes, now))
-        continue;
-
-      await fire(
-        row,
-        stateKey,
-        "host_status",
-        { hostId: event.hostId, status: observed },
-        event.hostId,
-      );
-    }
-  }
-
-  async function onHealthCheck(event: HealthEvent): Promise<void> {
-    const automations = await loadEnabledFor(event.userId);
-    const now = Date.now();
-    const observed = event.ok ? "recovered" : "failing";
-
-    for (const { row, definition } of automations) {
-      const trigger = definition.trigger;
-      if (trigger?.kind !== "health_check") continue;
-      if (!selectorCoversHost(trigger.hostSelector, event.hostId)) continue;
-      if (trigger.checkId && trigger.checkId !== event.checkId) continue;
-
-      const stateKey = `${event.hostId}:${event.checkId}`;
-      const state = await repository.getTriggerState(row.id, stateKey);
-
-      if (state?.lastObservedState === observed) continue;
-
-      await repository.upsertTriggerState({
-        automationId: row.id,
-        stateKey,
-        lastObservedState: observed,
-      });
-
-      if (await isMaintaining(row.userId, event.hostId)) continue;
-      if (!state?.lastObservedState) continue;
-      if (trigger.to !== observed) continue;
-      if (isCoolingDown(state?.lastFiredAt, trigger.cooldownMinutes, now))
-        continue;
-
-      await fire(
-        row,
-        stateKey,
-        "health_check",
-        {
-          hostId: event.hostId,
-          checkId: event.checkId,
-          state: observed,
-          detail: event.detail,
-        },
-        event.hostId,
-      );
-    }
-  }
-
-  async function onDockerEvent(event: DockerEvent): Promise<void> {
-    if (await isMaintaining(event.ownerUserId, event.hostId)) return;
-    const automations = await loadEnabledFor(event.ownerUserId);
-    const now = Date.now();
-
-    for (const { row, definition } of automations) {
-      const trigger = definition.trigger;
-      if (trigger?.kind !== "docker_event") continue;
-      if (!selectorCoversHost(trigger.hostSelector, event.hostId)) continue;
-      if (trigger.container && trigger.container !== event.container) continue;
-      if (trigger.event !== event.event) continue;
-
-      const stateKey = `${event.hostId}:${event.container}`;
-      const state = await repository.getTriggerState(row.id, stateKey);
-      if (isCoolingDown(state?.lastFiredAt, trigger.cooldownMinutes, now))
-        continue;
-
-      await fire(
-        row,
-        stateKey,
-        "docker_event",
-        {
-          hostId: event.hostId,
-          container: event.container,
-          event: event.event,
-        },
-        event.hostId,
-      );
-    }
-  }
-
-  async function onInternalEvent(event: InternalEvent): Promise<void> {
-    if (
-      event.event === "tunnel_disconnected" &&
-      event.hostId !== undefined &&
-      (await isMaintaining(event.userId, event.hostId))
-    )
-      return;
-    const automations = await loadEnabledFor(event.userId);
-    const now = Date.now();
-
-    for (const { row, definition } of automations) {
-      const trigger = definition.trigger;
-      if (trigger?.kind !== "internal_event") continue;
-      if (trigger.event !== event.event) continue;
-      if (
-        event.hostId !== undefined &&
-        !selectorCoversHost(trigger.hostSelector, event.hostId)
-      ) {
-        continue;
-      }
-
-      const stateKey = event.hostId ? String(event.hostId) : "global";
-      const state = await repository.getTriggerState(row.id, stateKey);
-      if (isCoolingDown(state?.lastFiredAt, trigger.cooldownMinutes, now))
-        continue;
-
-      await fire(
-        row,
-        stateKey,
-        "internal_event",
-        { event: event.event, hostId: event.hostId, ...(event.details ?? {}) },
-        event.hostId,
-      );
-    }
-  }
-
-  /**
-   * Hosts an enabled automation watches with the given trigger kind, with
-   * the owning user. Fleet and "all" selectors are not expanded: collecting
-   * for every host a user owns is far too costly.
-   */
-  async function watchedHosts(
-    kind: "metric_threshold" | "docker_event",
-  ): Promise<Map<number, string>> {
-    const watched = new Map<number, string>();
-    try {
-      for (const row of await repository.listAllEnabled()) {
-        let definition: AutomationDefinition;
-        try {
-          definition = JSON.parse(row.definition) as AutomationDefinition;
-        } catch {
-          continue;
-        }
-        const trigger: Trigger | undefined = definition.trigger;
-        if (trigger?.kind !== kind) continue;
-        const selector = trigger.hostSelector;
-        if (selector?.kind === "host") {
-          watched.set(selector.hostId, row.userId);
-        } else if (selector?.kind === "hosts") {
-          for (const hostId of selector.hostIds)
-            watched.set(hostId, row.userId);
-        }
-      }
-    } catch {
-      return watched;
-    }
-    return watched;
-  }
-
-  /**
-   * Subscribes to the topics the triggers read. Every listener is disposed
-   * with the plugin. Handlers are async and the bus is fire-and-forget, so a
-   * rejection is logged here rather than reaching whoever emitted.
-   */
-  function subscribe(events: PluginEvents): void {
-    const on = <T>(
-      topic: string,
-      handler: (payload: T) => Promise<void> | undefined,
-    ) =>
-      events.on(topic, (payload) => {
-        void Promise.resolve(handler(payload as T)).catch((error: unknown) =>
-          log.warn(
-            `Automation trigger for ${topic} failed: ${
-              error instanceof Error ? error.message : String(error)
-            }`,
-          ),
-        );
-      });
-
-    on<MetricEvent>("plugin.host-metrics.snapshot", onMetrics);
-    on<HealthEvent>("plugin.host-metrics.health-check", onHealthCheck);
-    on<StatusEvent>("host.status", onStatus);
-    on<InternalEvent>("internal.event", (event) =>
-      event?.userId ? onInternalEvent(event) : undefined,
-    );
-    // An SSH login seen by the terminal.
-    on<{ hostId: number; userId: string; sshUser?: string; fromIp?: string }>(
-      "host.login",
-      (login) =>
-        login?.userId
-          ? onInternalEvent({
-              event: "user_login",
-              userId: login.userId,
-              hostId: login.hostId,
-              details: { sshUser: login.sshUser, fromIp: login.fromIp },
-            })
-          : undefined,
-    );
-    // Nothing arrives here while the tunnels plugin is off, which is the
-    // whole of that optional dependency.
-    on<{ userId?: string; hostId?: number; tunnelName?: string }>(
-      "plugin.tunnels.tunnel_disconnected",
-      (event) =>
-        event?.userId
-          ? onInternalEvent({
-              event: "tunnel_disconnected",
-              userId: event.userId,
-              hostId: event.hostId,
-              details: { tunnelName: event.tunnelName },
-            })
-          : undefined,
-    );
-    on<{
-      userId?: string;
-      automationId?: number;
-      automationName?: string;
-      runId?: number;
-      error?: string | null;
-    }>(TOPIC_AUTOMATION_FAILED, (event) =>
-      event?.userId
-        ? onInternalEvent({
-            event: "automation_failed",
-            userId: event.userId,
-            details: {
-              automationId: event.automationId,
-              automationName: event.automationName,
-              runId: event.runId,
-              error: event.error ?? null,
-            },
-          })
-        : undefined,
-    );
-  }
-
-  return {
-    onMetrics,
-    onStatus,
-    onHealthCheck,
-    onDockerEvent,
-    onInternalEvent,
-    watchedHosts,
-    subscribe,
-  };
-}
diff --git a/plugins/automations/src/backend/validate.ts b/plugins/automations/src/backend/validate.ts
deleted file mode 100644
index 2d06d7da9..000000000
--- a/plugins/automations/src/backend/validate.ts
+++ /dev/null
@@ -1,153 +0,0 @@
-import type { AutomationDefinition, Step, Trigger } from "../types.js";
-import { AUTOMATION_DEFINITION_VERSION } from "../types.js";
-import { isValidCron, isValidTimezone } from "./cron.js";
-
-const TRIGGER_KINDS = new Set([
-  "metric_threshold",
-  "host_status",
-  "health_check",
-  "schedule",
-  "docker_event",
-  "internal_event",
-  "webhook",
-]);
-
-const STEP_TYPES = new Set([
-  "notify",
-  "http",
-  "run_snippet",
-  "run_command",
-  "docker",
-  "tunnel",
-  "wol",
-  "wait",
-  "set_var",
-  "if",
-  "run_automation",
-  "stop",
-]);
-
-const OPERATORS = new Set([
-  ">",
-  "<",
-  ">=",
-  "<=",
-  "==",
-  "!=",
-  "contains",
-  "not_contains",
-  "changed",
-]);
-
-export function isNonEmptyString(value: unknown): value is string {
-  return typeof value === "string" && value.trim().length > 0;
-}
-
-/**
- * Validates a definition before it is stored. The engine treats the stored
- * blob as trusted, so everything it relies on is checked once here.
- */
-export function validateDefinition(value: unknown): {
-  ok: boolean;
-  error?: string;
-  definition?: AutomationDefinition;
-} {
-  if (typeof value !== "object" || value === null) {
-    return { ok: false, error: "Definition must be an object" };
-  }
-
-  const candidate = value as Partial<AutomationDefinition>;
-  const trigger = candidate.trigger as Trigger | undefined;
-
-  if (!trigger || !TRIGGER_KINDS.has(trigger.kind)) {
-    return { ok: false, error: "Unknown or missing trigger kind" };
-  }
-
-  if (trigger.kind === "metric_threshold") {
-    if (!OPERATORS.has(trigger.operator)) {
-      return { ok: false, error: "Unknown comparison operator" };
-    }
-    if (typeof trigger.value !== "number" || !Number.isFinite(trigger.value)) {
-      return { ok: false, error: "Threshold value must be a number" };
-    }
-    if (!trigger.metric?.path) {
-      return { ok: false, error: "Trigger is missing a metric" };
-    }
-  }
-
-  if (trigger.kind === "schedule") {
-    const hasInterval =
-      typeof trigger.intervalSeconds === "number" &&
-      trigger.intervalSeconds > 0;
-    const hasCron = isNonEmptyString(trigger.cron);
-    if (!hasInterval && !hasCron) {
-      return { ok: false, error: "Schedule needs an interval or a cron" };
-    }
-    if (hasCron && !isValidCron(trigger.cron as string)) {
-      return { ok: false, error: "Cron expression is not valid" };
-    }
-    if (hasInterval && (trigger.intervalSeconds as number) < 60) {
-      return { ok: false, error: "Interval must be at least 60 seconds" };
-    }
-    if (
-      isNonEmptyString(trigger.timezone) &&
-      !isValidTimezone(trigger.timezone)
-    ) {
-      return { ok: false, error: "Time zone is not valid" };
-    }
-  }
-
-  const steps = candidate.steps;
-  if (!Array.isArray(steps)) {
-    return { ok: false, error: "Definition must include a steps array" };
-  }
-
-  const seen = new Set<string>();
-  const stepError = validateSteps(steps as Step[], seen);
-  if (stepError) return { ok: false, error: stepError };
-
-  return {
-    ok: true,
-    definition: {
-      version: candidate.version ?? AUTOMATION_DEFINITION_VERSION,
-      trigger,
-      steps: steps as Step[],
-    },
-  };
-}
-
-function validateSteps(steps: Step[], seen: Set<string>): string | null {
-  for (const step of steps) {
-    if (!step || typeof step !== "object") return "Step must be an object";
-    if (!isNonEmptyString(step.id)) return "Every step needs an id";
-    if (seen.has(step.id)) return `Duplicate step id: ${step.id}`;
-    seen.add(step.id);
-    if (!STEP_TYPES.has(step.type)) {
-      return `Unknown step type: ${step.type}`;
-    }
-
-    if (step.type === "if") {
-      if (!step.condition || !OPERATORS.has(step.condition.operator)) {
-        return "Condition needs a valid operator";
-      }
-      const thenError = validateSteps(step.then ?? [], seen);
-      if (thenError) return thenError;
-      const elseError = validateSteps(step.else ?? [], seen);
-      if (elseError) return elseError;
-    }
-
-    if (step.type === "http" && !isNonEmptyString(step.url)) {
-      return "HTTP steps need a URL";
-    }
-    if (step.type === "run_command" && !isNonEmptyString(step.command)) {
-      return "Command steps need a command";
-    }
-    if (step.type === "wait" && typeof step.seconds !== "number") {
-      return "Wait steps need a number of seconds";
-    }
-    if (step.type === "set_var" && !isNonEmptyString(step.name)) {
-      return "Variable steps need a name";
-    }
-  }
-  return null;
-}
diff --git a/plugins/automations/src/frontend/AutomationsPanel.tsx b/plugins/automations/src/frontend/AutomationsPanel.tsx
deleted file mode 100644
index 8ac57d886..000000000
--- a/plugins/automations/src/frontend/AutomationsPanel.tsx
+++ /dev/null
@@ -1,557 +0,0 @@
-import { useCallback, useEffect, useState } from "react";
-import { invokeAction, useTranslation } from "@termix/plugin-sdk/frontend";
-import { toast } from "sonner";
-import {
-  ArrowLeft,
-  Copy,
-  FlaskConical,
-  Loader2,
-  Play,
-  Plus,
-  Trash2,
-  Workflow,
-} from "lucide-react";
-import { Badge, Button, getBasePath } from "@termix/plugin-sdk/ui";
-import {
-  useAutomationsApi,
-  type AutomationRow,
-  type AutomationRunRow,
-  type AutomationRunStepRow,
-} from "./automations-api";
-
-import {
-  AutomationEditor,
-  emptyDraft,
-  type AutomationDraft,
-} from "./automations/AutomationEditor";
-import {
-  EMPTY_EDITOR_OPTIONS,
-  type AutomationEditorOptions,
-} from "./automations/editor-types";
-
-function getErrorMessage(error: unknown, fallback: string): string {
-  return error instanceof Error ? error.message : fallback;
-}
-
-type PanelTab = "automations" | "runs";
-
-const STATUS_CLASS: Record<string, string> = {
-  success: "text-green-500",
-  failed: "text-destructive",
-  timeout: "text-destructive",
-  running: "text-foreground",
-  skipped: "text-muted-foreground",
-  cancelled: "text-muted-foreground",
-};
-
-type Translate = (key: string, options?: Record<string, unknown>) => string;
-
-function timeAgo(iso: string | null, t: Translate): string {
-  if (!iso) return "";
-  const ms = Date.now() - new Date(iso).getTime();
-  if (!Number.isFinite(ms)) return "";
-  const base = "newUi.sidebar.automations.ago";
-  const sec = Math.floor(ms / 1000);
-  if (sec < 60) return t(`${base}.seconds`, { count: sec });
-  const min = Math.floor(sec / 60);
-  if (min < 60) return t(`${base}.minutes`, { count: min });
-  const hr = Math.floor(min / 60);
-  if (hr < 24) return t(`${base}.hours`, { count: hr });
-  return t(`${base}.days`, { count: Math.floor(hr / 24) });
-}
-
-export function AutomationsPanel({
-  active = true,
-  onEditingChange,
-}: {
-  active?: boolean;
-  onEditingChange?: (editing: boolean) => void;
-}) {
-  const { t } = useTranslation();
-  const api = useAutomationsApi();
-  const base = "newUi.sidebar.automations";
-
-  const [tab, setTab] = useState<PanelTab>("automations");
-  const [automations, setAutomations] = useState<AutomationRow[]>([]);
-  const [runs, setRuns] = useState<AutomationRunRow[]>([]);
-  const [loading, setLoading] = useState(false);
-  const [options, setOptions] =
-    useState<AutomationEditorOptions>(EMPTY_EDITOR_OPTIONS);
-
-  const [editorOpen, setEditorOpen] = useState(false);
-  const [editingId, setEditingId] = useState<number | null>(null);
-  const [draft, setDraft] = useState<AutomationDraft>(emptyDraft());
-  const [saving, setSaving] = useState(false);
-  const [webhookToken, setWebhookToken] = useState<string | null>(null);
-
-  const [expandedRun, setExpandedRun] = useState<number | null>(null);
-  const [runSteps, setRunSteps] = useState<AutomationRunStepRow[]>([]);
-
-  const loadAutomations = useCallback(async () => {
-    setLoading(true);
-    try {
-      setAutomations(await api.list());
-    } catch {
-      // A failed load leaves the previous list on screen.
-    } finally {
-      setLoading(false);
-    }
-  }, [api]);
-
-  const loadRuns = useCallback(async () => {
-    try {
-      setRuns(await api.runs({ limit: 100 }));
-    } catch {
-      // Non-fatal.
-    }
-  }, [api]);
-
-  const loadOptions = useCallback(async () => {
-    try {
-      setOptions(await api.editorOptions());
-    } catch {
-      // The editor falls back to empty pickers.
-    }
-  }, [api]);
-
-  useEffect(() => {
-    if (!active) return;
-    void loadAutomations();
-    void loadOptions();
-  }, [active, loadAutomations, loadOptions]);
-
-  useEffect(() => {
-    if (active && tab === "runs") void loadRuns();
-  }, [active, tab, loadRuns]);
-
-  // Widens the sidebar while the editor is open, and releases it again on the
-  // way out or when the user switches to another rail destination.
-  useEffect(() => {
-    if (active) onEditingChange?.(editorOpen);
-  }, [active, editorOpen, onEditingChange]);
-
-  useEffect(() => {
-    return () => onEditingChange?.(false);
-  }, [onEditingChange]);
-
-  function closeEditor() {
-    setWebhookToken(null);
-    setEditorOpen(false);
-  }
-
-  function openCreate() {
-    setEditingId(null);
-    setDraft(emptyDraft());
-    setWebhookToken(null);
-    setEditorOpen(true);
-  }
-
-  function openEdit(row: AutomationRow) {
-    setEditingId(row.id);
-    setDraft({
-      name: row.name,
-      description: row.description ?? "",
-      enabled: !!row.enabled,
-      concurrencyPolicy: row.concurrency_policy ?? "skip",
-      definition: row.definition ?? emptyDraft().definition,
-    });
-    setWebhookToken(null);
-    setEditorOpen(true);
-  }
-
-  async function save() {
-    if (!draft.name.trim()) {
-      toast.error(t(`${base}.nameRequired`));
-      return;
-    }
-
-    setSaving(true);
-    try {
-      if (editingId === null) {
-        const created = await api.create({
-          name: draft.name.trim(),
-          description: draft.description || null,
-          enabled: draft.enabled,
-          concurrencyPolicy: draft.concurrencyPolicy,
-          definition: draft.definition,
-        });
-        toast.success(t(`${base}.created`));
-        if (created.webhookToken) {
-          setWebhookToken(created.webhookToken);
-        } else {
-          setEditorOpen(false);
-        }
-      } else {
-        await api.update(editingId, {
-          name: draft.name.trim(),
-          description: draft.description || null,
-          enabled: draft.enabled,
-          concurrencyPolicy: draft.concurrencyPolicy,
-          definition: draft.definition,
-        });
-        toast.success(t(`${base}.updated`));
-        setEditorOpen(false);
-      }
-      await loadAutomations();
-    } catch (error) {
-      toast.error(getErrorMessage(error, String(error)));
-    } finally {
-      setSaving(false);
-    }
-  }
-
-  async function remove(row: AutomationRow) {
-    if (!confirm(t(`${base}.deleteConfirm`))) return;
-    try {
-      await api.remove(row.id);
-      toast.success(t(`${base}.deleted`));
-      await loadAutomations();
-    } catch (error) {
-      toast.error(getErrorMessage(error, String(error)));
-    }
-  }
-
-  async function run(row: AutomationRow, dryRun: boolean) {
-    try {
-      const outcome = await api.run(row.id, { dryRun });
-      toast.success(t(`${base}.runFinished`, { status: outcome.status }));
-      await loadAutomations();
-      if (tab === "runs") await loadRuns();
-    } catch (error) {
-      toast.error(getErrorMessage(error, String(error)));
-    }
-  }
-
-  async function toggleRun(runId: number) {
-    if (expandedRun === runId) {
-      setExpandedRun(null);
-      return;
-    }
-    setExpandedRun(runId);
-    try {
-      setRunSteps(await api.runSteps(runId));
-    } catch {
-      setRunSteps([]);
-    }
-  }
-
-  // Editing takes over the whole panel and widens the sidebar, the same way the
-  // host manager does, rather than opening a dialog over the app.
-  if (editorOpen) {
-    const webhookUrl = webhookToken
-      ? `${window.location.origin}${getBasePath()}/plugin-api/automations/webhook/${webhookToken}`
-      : "";
-
-    return (
-      <div className="flex flex-col h-full min-h-0">
-        <button
-          onClick={closeEditor}
-          className="flex items-center gap-2 px-3 py-2 text-xs text-muted-foreground hover:text-foreground hover:bg-muted/40 transition-colors border-b border-border/50 shrink-0"
-        >
-          <ArrowLeft className="size-3.5 shrink-0" />
-          <span>{t(`${base}.backToAutomations`)}</span>
-          {editingId !== null && (
-            <span
-              className="ml-auto font-semibold text-foreground truncate max-w-[200px]"
-              title={draft.name}
-            >
-              {draft.name}
-            </span>
-          )}
-        </button>
-
-        <div className="flex-1 min-h-0 overflow-y-auto p-3">
-          {webhookToken ? (
-            <div className="space-y-2">
-              <p className="text-sm">{t(`${base}.webhookTokenTitle`)}</p>
-              <p className="text-xs text-muted-foreground">
-                {t(`${base}.webhookTokenDescription`)}
-              </p>
-              <div className="flex gap-2">
-                <code className="flex-1 p-2 bg-muted text-xs break-all">
-                  {webhookUrl}
-                </code>
-                <Button
-                  size="sm"
-                  variant="outline"
-                  className="rounded-none border-border shrink-0"
-                  onClick={() => {
-                    navigator.clipboard?.writeText(webhookUrl);
-                    toast.success(t(`${base}.copied`));
-                  }}
-                >
-                  <Copy size={14} />
-                </Button>
-              </div>
-            </div>
-          ) : (
-            <AutomationEditor
-              draft={draft}
-              options={options}
-              onChange={setDraft}
-            />
-          )}
-        </div>
-
-        <div className="flex items-center gap-2 p-3 border-t border-border shrink-0">
-          {webhookToken ? (
-            <Button
-              variant="outline"
-              className="rounded-none ml-auto h-9 px-6 border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-              onClick={closeEditor}
-            >
-              {t("common.close")}
-            </Button>
-          ) : (
-            <>
-              <Button
-                variant="outline"
-                className="rounded-none border-border h-9 px-5"
-                onClick={closeEditor}
-              >
-                {t("common.cancel")}
-              </Button>
-              <Button
-                variant="outline"
-                className="rounded-none ml-auto h-9 px-6 border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-                disabled={saving}
-                onClick={save}
-              >
-                {saving && (
-                  <Loader2 size={14} className="mr-1.5 animate-spin" />
-                )}
-                {t(`${base}.save`)}
-              </Button>
-            </>
-          )}
-        </div>
-      </div>
-    );
-  }
-
-  return (
-    <div className="flex flex-col h-full">
-      <div className="flex items-center gap-1 p-2 border-b border-border">
-        {(["automations", "runs"] as PanelTab[]).map((key) => (
-          <Button
-            key={key}
-            variant={tab === key ? "outline" : "ghost"}
-            size="sm"
-            className={`min-w-0 flex-shrink rounded-none h-7 px-2 text-xs ${
-              tab === key
-                ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand hover:bg-accent-brand/20 hover:text-accent-brand"
-                : ""
-            }`}
-            onClick={() => setTab(key)}
-          >
-            <span className="truncate">
-              {t(
-                `${base}.${key === "automations" ? "tabAutomations" : "tabRuns"}`,
-              )}
-            </span>
-          </Button>
-        ))}
-        <Button
-          variant="ghost"
-          size="sm"
-          className="min-w-0 flex-shrink rounded-none h-7 px-2 text-xs"
-          title={t(`${base}.channelsHint`)}
-          onClick={() => void invokeAction("alerts.openChannels")}
-        >
-          <span className="truncate">{t(`${base}.tabChannels`)}</span>
-        </Button>
-        <a
-          href="https://docs.termix.site/features/automations/overview"
-          target="_blank"
-          rel="noreferrer"
-          className="ml-auto shrink-0 text-[10px] text-accent-brand hover:underline"
-        >
-          {t(`${base}.docsLink`)}
-        </a>
-      </div>
-
-      <div className="flex-1 overflow-y-auto p-2">
-        {tab === "automations" && (
-          <>
-            <Button
-              size="sm"
-              variant="outline"
-              className="rounded-none w-full mb-2 border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-              onClick={openCreate}
-            >
-              <Plus size={14} className="mr-1" />
-              {t(`${base}.createAutomation`)}
-            </Button>
-
-            {loading && automations.length === 0 && (
-              <div className="flex justify-center p-4">
-                <Loader2 size={16} className="animate-spin" />
-              </div>
-            )}
-
-            {!loading && automations.length === 0 && (
-              <p className="text-xs text-muted-foreground p-2">
-                {t(`${base}.empty`)}
-              </p>
-            )}
-
-            <div className="space-y-1">
-              {automations.map((row) => (
-                <div
-                  key={row.id}
-                  className="border border-border p-2.5 hover:bg-muted/40"
-                >
-                  <div className="flex items-center gap-2">
-                    <Workflow size={14} className="shrink-0" />
-                    <button
-                      className="flex-1 text-left text-sm truncate"
-                      onClick={() => openEdit(row)}
-                    >
-                      {row.name}
-                    </button>
-                    {!!row.missingPlugins?.length && (
-                      <Badge
-                        variant="outline"
-                        className="text-[10px] border-destructive/50 text-destructive"
-                        title={t(`${base}.needsPluginHint`)}
-                      >
-                        {t(`${base}.needsPlugin`, {
-                          plugin: row.missingPlugins.join(", "),
-                        })}
-                      </Badge>
-                    )}
-                    {!row.enabled && (
-                      <Badge variant="outline" className="text-[10px]">
-                        {t(`${base}.offBadge`)}
-                      </Badge>
-                    )}
-                  </div>
-
-                  <div className="flex items-center gap-1 mt-1">
-                    <span className="text-[11px] text-muted-foreground flex-1 flex gap-2.5 min-w-0 overflow-hidden whitespace-nowrap">
-                      {row.definition && (
-                        <span className="truncate">
-                          {t(
-                            `${base}.triggerKinds.${row.definition.trigger.kind}`,
-                          )}
-                        </span>
-                      )}
-                      {row.last_run_status && (
-                        <span className="shrink-0">
-                          {timeAgo(row.last_run_at, t)}
-                        </span>
-                      )}
-                    </span>
-                    <Button
-                      variant="ghost"
-                      size="icon"
-                      className="h-6 w-6 rounded-none"
-                      title={t(`${base}.testRun`)}
-                      onClick={() => run(row, true)}
-                    >
-                      <FlaskConical size={12} />
-                    </Button>
-                    <Button
-                      variant="ghost"
-                      size="icon"
-                      className="h-6 w-6 rounded-none"
-                      title={t(`${base}.runNow`)}
-                      onClick={() => run(row, false)}
-                    >
-                      <Play size={12} />
-                    </Button>
-                    <Button
-                      variant="ghost"
-                      size="icon"
-                      className="h-6 w-6 rounded-none"
-                      onClick={() => remove(row)}
-                    >
-                      <Trash2 size={12} />
-                    </Button>
-                  </div>
-                </div>
-              ))}
-            </div>
-          </>
-        )}
-
-        {tab === "runs" && (
-          <div className="space-y-1">
-            {runs.length === 0 && (
-              <p className="text-xs text-muted-foreground p-2">
-                {t(`${base}.emptyRuns`)}
-              </p>
-            )}
-            {runs.map((entry) => (
-              <div key={entry.id} className="border border-border">
-                <button
-                  className="w-full text-left p-2.5 hover:bg-muted/40"
-                  onClick={() => toggleRun(entry.id)}
-                >
-                  <div className="flex items-center gap-2">
-                    <span className="text-sm flex-1 truncate">
-                      {entry.automation_name ?? `#${entry.automation_id}`}
-                    </span>
-                    {entry.dry_run ? (
-                      <Badge variant="outline" className="text-[10px]">
-                        {t(`${base}.dryRunBadge`)}
-                      </Badge>
-                    ) : null}
-                    <span
-                      className={`text-[11px] ${STATUS_CLASS[entry.status] ?? ""}`}
-                    >
-                      {t(`${base}.statuses.${entry.status}`)}
-                    </span>
-                  </div>
-                  <div className="flex gap-2.5 text-[11px] text-muted-foreground">
-                    <span>{timeAgo(entry.started_at, t)}</span>
-                    {entry.duration_ms !== null && (
-                      <span>{Math.round(entry.duration_ms / 100) / 10}s</span>
-                    )}
-                  </div>
-                  {entry.error && (
-                    <div className="text-[11px] text-destructive truncate">
-                      {entry.error}
-                    </div>
-                  )}
-                </button>
-
-                {expandedRun === entry.id && (
-                  <div className="border-t border-border p-2 space-y-1">
-                    {runSteps.map((step) => (
-                      <div key={step.id} className="text-[11px]">
-                        <div className="flex gap-2">
-                          <span className="text-muted-foreground">
-                            {step.step_index + 1}.
-                          </span>
-                          <span className="flex-1">
-                            {t(`${base}.stepTypes.${step.step_type}`, {
-                              defaultValue: step.step_type,
-                            })}
-                          </span>
-                          <span className={STATUS_CLASS[step.status] ?? ""}>
-                            {step.status}
-                          </span>
-                        </div>
-                        {step.output && (
-                          <pre className="mt-1 p-1 bg-muted overflow-x-auto whitespace-pre-wrap break-all text-[10px]">
-                            {step.output}
-                          </pre>
-                        )}
-                        {step.error && (
-                          <div className="text-destructive">{step.error}</div>
-                        )}
-                      </div>
-                    ))}
-                  </div>
-                )}
-              </div>
-            ))}
-          </div>
-        )}
-      </div>
-    </div>
-  );
-}
-
-export default AutomationsPanel;
diff --git a/plugins/automations/src/frontend/HostMaintenance.tsx b/plugins/automations/src/frontend/HostMaintenance.tsx
deleted file mode 100644
index 6c57135c9..000000000
--- a/plugins/automations/src/frontend/HostMaintenance.tsx
+++ /dev/null
@@ -1,343 +0,0 @@
-import {
-  useEffect,
-  useState,
-  useSyncExternalStore,
-  type FormEvent,
-} from "react";
-import {
-  usePermission,
-  useTranslation,
-  type PluginHostRecord,
-} from "@termix/plugin-sdk/frontend";
-import { Badge, Button, Input, Label } from "@termix/plugin-sdk/ui";
-import type { MaintenanceStore } from "./maintenance-store";
-import type { Recurrence } from "../maintenance";
-
-export function MaintenanceBadge({
-  host,
-  store,
-}: {
-  host: PluginHostRecord;
-  store: MaintenanceStore;
-}) {
-  const allowed = usePermission("view");
-  const { t } = useTranslation();
-  return allowed ? (
-    <VisibleBadge host={host} store={store} title={t("maintenance.title")} />
-  ) : null;
-}
-function VisibleBadge({
-  host,
-  store,
-  title,
-}: {
-  host: PluginHostRecord;
-  store: MaintenanceStore;
-  title: string;
-}) {
-  const states = useSyncExternalStore(store.subscribe, store.snapshot);
-  const active = states[Number(host.id)]?.active;
-  if (!active) return null;
-  return (
-    <Badge
-      variant="outline"
-      title={`${active.reasons.join("; ")}\n${new Date(active.estimatedEnd).toLocaleString()}`}
-    >
-      {title}
-    </Badge>
-  );
-}
-
-export function HostMaintenance({
-  host,
-  store,
-  visible,
-}: {
-  host: PluginHostRecord;
-  store: MaintenanceStore;
-  visible: boolean;
-}) {
-  const canView = usePermission("view");
-  const { t } = useTranslation();
-  if (!canView) return <p className="p-4">{t("maintenance.denied")}</p>;
-  if (!visible) return null;
-  return <MaintenanceEditor key={host.id} host={host} store={store} />;
-}
-
-function MaintenanceEditor({
-  host,
-  store,
-}: {
-  host: PluginHostRecord;
-  store: MaintenanceStore;
-}) {
-  const { t } = useTranslation();
-  const canEditPermission = usePermission("edit");
-  const states = useSyncExternalStore(store.subscribe, store.snapshot);
-  const state = states[Number(host.id)];
-  // A shared host shows its owner's maintenance, read only.
-  const canEdit = canEditPermission && state?.owned !== false;
-  const [mode, setMode] = useState<"start" | "schedule">("start");
-  const [reason, setReason] = useState("");
-  const [start, setStart] = useState("");
-  const [duration, setDuration] = useState(60);
-  const [grace, setGrace] = useState(20);
-  const [recurrence, setRecurrence] = useState<Recurrence>("once");
-  const [notify, setNotify] = useState(false);
-  const [busy, setBusy] = useState(false);
-  const [error, setError] = useState("");
-  const [ending, setEnding] = useState(false);
-  useEffect(() => {
-    void store.refresh();
-  }, [store]);
-  async function mutate(input: Record<string, unknown>) {
-    setBusy(true);
-    setError("");
-    try {
-      await store.edit(Number(host.id), input);
-      setEnding(false);
-    } catch (error) {
-      const body = (error as { response?: { data?: { error?: string } } })
-        .response?.data?.error;
-      setError(
-        body ||
-          (error instanceof Error ? error.message : t("maintenance.failed")),
-      );
-    } finally {
-      setBusy(false);
-    }
-  }
-  function submit(event: FormEvent) {
-    event.preventDefault();
-    void mutate({
-      action: mode,
-      reason,
-      start: start ? `${start}:00.000Z` : undefined,
-      durationMinutes: duration,
-      graceMinutes: grace,
-      recurrence,
-      notifyOverdue: notify,
-    });
-  }
-  const fieldClass = "h-9 border bg-background px-3 text-sm";
-  return (
-    <div className="mx-auto w-full max-w-3xl space-y-6 overflow-auto p-6">
-      <div>
-        <h2 className="text-lg font-semibold">{t("maintenance.title")}</h2>
-        <p className="text-sm font-medium">{host.name || host.ip}</p>
-        <p className="text-sm text-muted-foreground">
-          {t("maintenance.description")}
-        </p>
-      </div>
-      {store.error() && (
-        <p role="alert" className="text-sm text-destructive">
-          {t(store.error())}
-        </p>
-      )}
-      {!store.loaded() && <p>{t("maintenance.loading")}</p>}
-      {error && (
-        <p role="alert" className="text-sm text-destructive">
-          {error}
-        </p>
-      )}
-      {state?.active && (
-        <section className="space-y-3 border p-4">
-          <Badge>{t("maintenance.active")}</Badge>
-          <p className="break-words">{state.active.reasons.join("; ")}</p>
-          <p>
-            {t("maintenance.estimated")}:{" "}
-            {new Date(state.active.estimatedEnd).toLocaleString()}
-          </p>
-          <p className="text-sm text-muted-foreground">
-            {t("maintenance.noAutoEnd")}
-          </p>
-          {canEdit &&
-            (ending ? (
-              <div className="space-y-2">
-                <p>{t("maintenance.endConfirm")}</p>
-                <Button
-                  disabled={busy || !store.loaded() || !!store.error()}
-                  onClick={() => void mutate({ action: "end" })}
-                >
-                  {t("maintenance.confirmEnd")}
-                </Button>{" "}
-                <Button variant="outline" onClick={() => setEnding(false)}>
-                  {t("maintenance.cancel")}
-                </Button>
-              </div>
-            ) : (
-              <Button
-                variant="outline"
-                disabled={busy || !store.loaded() || !!store.error()}
-                onClick={() => setEnding(true)}
-              >
-                {t("maintenance.end")}
-              </Button>
-            ))}
-        </section>
-      )}
-      {state?.owned === false && (
-        <p className="text-sm text-muted-foreground">
-          {t("maintenance.sharedReadOnly")}
-        </p>
-      )}
-      {canEdit && (
-        <form onSubmit={submit} className="space-y-4 border p-4">
-          <div className="flex flex-wrap gap-3">
-            <Label htmlFor="maintenance-mode">{t("maintenance.action")}</Label>
-            <select
-              id="maintenance-mode"
-              className={fieldClass}
-              value={mode}
-              onChange={(event) => setMode(event.target.value as typeof mode)}
-            >
-              <option value="start">{t("maintenance.startNow")}</option>
-              <option value="schedule">{t("maintenance.schedule")}</option>
-            </select>
-          </div>
-          <div className="space-y-2">
-            <Label htmlFor="maintenance-reason">
-              {t("maintenance.reason")}
-            </Label>
-            <Input
-              id="maintenance-reason"
-              required
-              maxLength={200}
-              value={reason}
-              onChange={(event) => setReason(event.target.value)}
-            />
-          </div>
-          {mode === "schedule" && (
-            <div className="grid gap-4 sm:grid-cols-2">
-              <div className="space-y-2">
-                <Label htmlFor="maintenance-start">
-                  {t("maintenance.startUtc")}
-                </Label>
-                <Input
-                  id="maintenance-start"
-                  type="datetime-local"
-                  required
-                  value={start}
-                  onChange={(event) => setStart(event.target.value)}
-                />
-              </div>
-              <div className="space-y-2">
-                <Label htmlFor="maintenance-repeat">
-                  {t("maintenance.repeat")}
-                </Label>
-                <select
-                  id="maintenance-repeat"
-                  className={`${fieldClass} w-full`}
-                  value={recurrence}
-                  onChange={(event) =>
-                    setRecurrence(event.target.value as Recurrence)
-                  }
-                >
-                  {(["once", "weekly", "monthly"] as const).map((value) => (
-                    <option key={value} value={value}>
-                      {t(`maintenance.${value}`)}
-                    </option>
-                  ))}
-                </select>
-              </div>
-              <p className="text-sm text-muted-foreground sm:col-span-2">
-                {t("maintenance.utcHelp")}
-              </p>
-            </div>
-          )}
-          <div className="grid gap-4 sm:grid-cols-2">
-            <div className="space-y-2">
-              <Label htmlFor="maintenance-duration">
-                {t("maintenance.duration")}
-              </Label>
-              <Input
-                id="maintenance-duration"
-                type="number"
-                min={1}
-                max={10080}
-                required
-                value={duration}
-                onChange={(event) => setDuration(Number(event.target.value))}
-              />
-            </div>
-            <div className="space-y-2">
-              <Label htmlFor="maintenance-grace">
-                {t("maintenance.grace")}
-              </Label>
-              <Input
-                id="maintenance-grace"
-                type="number"
-                min={0}
-                max={1440}
-                required
-                value={grace}
-                onChange={(event) => setGrace(Number(event.target.value))}
-              />
-            </div>
-          </div>
-          <label className="flex items-center gap-2 text-sm">
-            <input
-              type="checkbox"
-              checked={notify}
-              onChange={(event) => setNotify(event.target.checked)}
-            />
-            {t("maintenance.notify")}
-          </label>
-          <Button
-            type="submit"
-            disabled={
-              busy ||
-              !store.loaded() ||
-              !!store.error() ||
-              (mode === "start" && !!state?.active)
-            }
-          >
-            {t(
-              mode === "start"
-                ? "maintenance.startNow"
-                : "maintenance.addSchedule",
-            )}
-          </Button>
-        </form>
-      )}
-      <section className="space-y-3">
-        <h3 className="font-medium">{t("maintenance.schedules")}</h3>
-        {!state?.plans.length && (
-          <p className="text-sm text-muted-foreground">
-            {t("maintenance.noSchedules")}
-          </p>
-        )}
-        {state?.plans.map((plan) => (
-          <div
-            key={plan.id}
-            className="flex flex-wrap items-center justify-between gap-3 border p-3"
-          >
-            <div className="min-w-0 space-y-1">
-              <p className="break-words">{plan.reason}</p>
-              <p className="flex flex-wrap gap-x-3 text-sm text-muted-foreground">
-                <span>{t(`maintenance.${plan.recurrence}`)}</span>
-                <span>
-                  {plan.nextStart
-                    ? `${plan.nextStart.replace("T", " ").slice(0, 16)} UTC`
-                    : t("maintenance.completed")}
-                </span>
-                <span>
-                  {t("maintenance.minutes", { count: plan.durationMinutes })}
-                </span>
-              </p>
-            </div>
-            {canEdit && (
-              <Button
-                variant="outline"
-                disabled={busy || !store.loaded() || !!store.error()}
-                onClick={() => void mutate({ action: "remove", id: plan.id })}
-              >
-                {t("maintenance.remove")}
-              </Button>
-            )}
-          </div>
-        ))}
-      </section>
-    </div>
-  );
-}
diff --git a/plugins/automations/src/frontend/automations-api.ts b/plugins/automations/src/frontend/automations-api.ts
deleted file mode 100644
index 89d4f0cdc..000000000
--- a/plugins/automations/src/frontend/automations-api.ts
+++ /dev/null
@@ -1,160 +0,0 @@
-import { useMemo } from "react";
-import {
-  usePluginApi,
-  type PluginApiClient,
-} from "@termix/plugin-sdk/frontend";
-import type {
-  AutomationDefinition,
-  ConcurrencyPolicy,
-  RunStatus,
-  StepStatus,
-  StepType,
-  TriggerKind,
-} from "../types";
-
-export interface AutomationRow {
-  id: number;
-  user_id: string;
-  name: string;
-  description: string | null;
-  enabled: number;
-  definition: AutomationDefinition | null;
-  definition_version: number;
-  concurrency_policy: ConcurrencyPolicy;
-  max_run_seconds: number;
-  dry_run: number;
-  last_run_at: string | null;
-  last_run_status: RunStatus | null;
-  created_at: string;
-  updated_at: string;
-  channels: number[];
-  /** Plugins this automation needs that are not running. */
-  missingPlugins?: string[];
-  /** Returned once, only when a webhook automation is created. */
-  webhookToken?: string;
-}
-
-export interface AutomationRunRow {
-  id: number;
-  automation_id: number;
-  user_id: string;
-  trigger_type: TriggerKind | "manual";
-  trigger_context: string | null;
-  status: RunStatus;
-  started_at: string;
-  finished_at: string | null;
-  duration_ms: number | null;
-  error: string | null;
-  dry_run: number;
-  parent_run_id: number | null;
-  automation_name?: string | null;
-}
-
-export interface AutomationRunStepRow {
-  id: number;
-  run_id: number;
-  step_index: number;
-  step_id: string;
-  step_type: StepType;
-  status: StepStatus;
-  started_at: string;
-  finished_at: string | null;
-  output: string | null;
-  error: string | null;
-  truncated: number;
-}
-
-export interface AutomationRunOutcome {
-  runId: number | null;
-  status: RunStatus;
-  error?: string;
-}
-
-export interface AutomationInput {
-  name: string;
-  description?: string | null;
-  enabled?: boolean;
-  definition: AutomationDefinition;
-  concurrencyPolicy?: ConcurrencyPolicy;
-  channels?: number[];
-}
-
-/** Which optional plugins are running, keyed like the backend's deps. */
-export interface AutomationProviders {
-  snippets: boolean;
-  fleets: boolean;
-  tunnels: boolean;
-  docker: boolean;
-  "docker-events": boolean;
-  "host-metrics": boolean;
-  "wake-on-lan": boolean;
-}
-
-export interface AutomationEditorOptionsResponse {
-  hosts: Array<{ id: number; name: string }>;
-  snippets: Array<{ id: number; name: string }>;
-  fleets: Array<{ id: number; name: string }>;
-  channels: Array<{ id: number; name: string }>;
-  providers: AutomationProviders;
-}
-
-function apiError(error: unknown, action: string): Error {
-  const data = (
-    error as { response?: { data?: { error?: string; message?: string } } }
-  )?.response?.data;
-  return new Error(
-    data?.error ||
-      data?.message ||
-      (error instanceof Error ? error.message : `Failed to ${action}`),
-  );
-}
-
-async function call<T>(
-  action: string,
-  request: () => Promise<{ data: T }>,
-): Promise<T> {
-  try {
-    return (await request()).data;
-  } catch (error) {
-    throw apiError(error, action);
-  }
-}
-
-export function createAutomationsApi(api: PluginApiClient) {
-  return {
-    list: () => call<AutomationRow[]>("fetch automations", () => api.get("/")),
-    editorOptions: () =>
-      call<AutomationEditorOptionsResponse>("fetch editor options", () =>
-        api.get("/editor-options"),
-      ),
-    create: (input: AutomationInput) =>
-      call<AutomationRow>("create automation", () => api.post("/", input)),
-    update: (id: number, input: Partial<AutomationInput>) =>
-      call<AutomationRow>("update automation", () => api.put(`/${id}`, input)),
-    remove: (id: number) =>
-      call<{ success: boolean }>("delete automation", () =>
-        api.delete(`/${id}`),
-      ),
-    run: (id: number, options: { dryRun?: boolean } = {}) =>
-      call<AutomationRunOutcome>("run automation", () =>
-        api.post(`/${id}/run`, options),
-      ),
-    runs: (
-      options: { automationId?: number; limit?: number; offset?: number } = {},
-    ) =>
-      call<AutomationRunRow[]>("fetch automation runs", () =>
-        api.get("/runs/history", { params: options }),
-      ),
-    runSteps: (runId: number) =>
-      call<AutomationRunStepRow[]>("fetch run steps", () =>
-        api.get(`/runs/${runId}/steps`),
-      ),
-  };
-}
-
-export type AutomationsApi = ReturnType<typeof createAutomationsApi>;
-
-export function useAutomationsApi(): AutomationsApi {
-  const api = usePluginApi();
-  return useMemo(() => createAutomationsApi(api), [api]);
-}
diff --git a/plugins/automations/src/frontend/automations/AutomationEditor.tsx b/plugins/automations/src/frontend/automations/AutomationEditor.tsx
deleted file mode 100644
index 2d0cca6e0..000000000
--- a/plugins/automations/src/frontend/automations/AutomationEditor.tsx
+++ /dev/null
@@ -1,259 +0,0 @@
-import { useState } from "react";
-import {
-  Button,
-  Input,
-  Label,
-  Switch,
-  Select,
-  SelectContent,
-  SelectItem,
-  SelectTrigger,
-  SelectValue,
-} from "@termix/plugin-sdk/ui";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Plus } from "lucide-react";
-import {
-  AUTOMATION_DEFINITION_VERSION,
-  type AutomationDefinition,
-  type ConcurrencyPolicy,
-  type Step,
-} from "../../types";
-import { StepBlock } from "./StepBlock";
-import { TriggerCard, defaultTrigger } from "./TriggerCard";
-import { newStepId, type AutomationEditorOptions } from "./editor-types";
-
-export interface AutomationDraft {
-  name: string;
-  description: string;
-  enabled: boolean;
-  concurrencyPolicy: ConcurrencyPolicy;
-  definition: AutomationDefinition;
-}
-
-export function emptyDraft(): AutomationDraft {
-  return {
-    name: "",
-    description: "",
-    enabled: true,
-    concurrencyPolicy: "skip",
-    definition: {
-      version: AUTOMATION_DEFINITION_VERSION,
-      trigger: defaultTrigger("metric_threshold"),
-      steps: [],
-    },
-  };
-}
-
-/**
- * The automation builder: one trigger, then an ordered list of steps that can
- * nest through if/otherwise. A JSON view is available for anything the form
- * does not cover yet.
- */
-export function AutomationEditor({
-  draft,
-  options,
-  onChange,
-}: {
-  draft: AutomationDraft;
-  options: AutomationEditorOptions;
-  onChange: (next: AutomationDraft) => void;
-}) {
-  const { t } = useTranslation();
-  const base = "newUi.sidebar.automations";
-  const [view, setView] = useState<"builder" | "json">("builder");
-  const [jsonText, setJsonText] = useState("");
-  const [jsonError, setJsonError] = useState<string | null>(null);
-
-  function setDefinition(definition: AutomationDefinition) {
-    onChange({ ...draft, definition });
-  }
-
-  function setSteps(steps: Step[]) {
-    setDefinition({ ...draft.definition, steps });
-  }
-
-  function renderSteps(
-    steps: Step[],
-    onStepsChange: (next: Step[]) => void,
-    depth: number,
-  ): React.ReactNode {
-    return (
-      <div className="space-y-2">
-        {steps.map((step, index) => (
-          <StepBlock
-            key={step.id}
-            step={step}
-            index={index}
-            total={steps.length}
-            depth={depth}
-            options={options}
-            onChange={(next) => {
-              const copy = [...steps];
-              copy[index] = next;
-              onStepsChange(copy);
-            }}
-            onRemove={() => onStepsChange(steps.filter((_, i) => i !== index))}
-            onMove={(direction) => {
-              const target = index + direction;
-              if (target < 0 || target >= steps.length) return;
-              const copy = [...steps];
-              [copy[index], copy[target]] = [copy[target], copy[index]];
-              onStepsChange(copy);
-            }}
-            renderNested={renderSteps}
-          />
-        ))}
-
-        <Button
-          variant="outline"
-          size="sm"
-          className="rounded-none w-full border-border"
-          onClick={() =>
-            onStepsChange([
-              ...steps,
-              { id: newStepId(), type: "notify", channelIds: [] } as Step,
-            ])
-          }
-        >
-          <Plus size={14} className="mr-1" />
-          {t(`${base}.addStep`)}
-        </Button>
-      </div>
-    );
-  }
-
-  return (
-    <div className="space-y-4">
-      <div className="space-y-1">
-        <Label className="text-xs text-muted-foreground">
-          {t(`${base}.nameLabel`)}
-        </Label>
-        <Input
-          className="h-8 rounded-none"
-          placeholder={t(`${base}.namePlaceholder`)}
-          value={draft.name}
-          onChange={(e) => onChange({ ...draft, name: e.target.value })}
-        />
-      </div>
-
-      <label className="flex items-center gap-2 text-xs text-muted-foreground">
-        <Switch
-          checked={draft.enabled}
-          onCheckedChange={(enabled) => onChange({ ...draft, enabled })}
-        />
-        {t(`${base}.enabledLabel`)}
-      </label>
-
-      <div className="space-y-1">
-        <Label className="text-xs text-muted-foreground">
-          {t(`${base}.concurrencyLabel`)}
-        </Label>
-        <Select
-          value={draft.concurrencyPolicy}
-          onValueChange={(value) =>
-            onChange({
-              ...draft,
-              concurrencyPolicy: value as ConcurrencyPolicy,
-            })
-          }
-        >
-          <SelectTrigger
-            size="sm"
-            className="w-full rounded-none border-border"
-          >
-            <SelectValue />
-          </SelectTrigger>
-          <SelectContent>
-            <SelectItem value="skip">
-              {t(`${base}.concurrency.skip`)}
-            </SelectItem>
-            <SelectItem value="queue">
-              {t(`${base}.concurrency.queue`)}
-            </SelectItem>
-            <SelectItem value="allow">
-              {t(`${base}.concurrency.allow`)}
-            </SelectItem>
-          </SelectContent>
-        </Select>
-        <p className="text-xs text-muted-foreground">
-          {t(`${base}.concurrencyHint`)}
-        </p>
-      </div>
-
-      <div className="flex gap-1">
-        <Button
-          variant="outline"
-          size="sm"
-          className={`rounded-none ${
-            view === "builder"
-              ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand hover:bg-accent-brand/20 hover:text-accent-brand"
-              : "border-border"
-          }`}
-          onClick={() => setView("builder")}
-        >
-          {t(`${base}.viewBuilder`)}
-        </Button>
-        <Button
-          variant="outline"
-          size="sm"
-          className={`rounded-none ${
-            view === "json"
-              ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand hover:bg-accent-brand/20 hover:text-accent-brand"
-              : "border-border"
-          }`}
-          onClick={() => {
-            setJsonText(JSON.stringify(draft.definition, null, 2));
-            setJsonError(null);
-            setView("json");
-          }}
-        >
-          {t(`${base}.viewJson`)}
-        </Button>
-      </div>
-
-      {view === "builder" ? (
-        <>
-          <TriggerCard
-            trigger={draft.definition.trigger}
-            options={options}
-            onChange={(trigger) =>
-              setDefinition({ ...draft.definition, trigger })
-            }
-          />
-
-          <div className="space-y-2">
-            <Label className="text-xs text-muted-foreground">
-              {t(`${base}.steps`)}
-            </Label>
-            {draft.definition.steps.length === 0 && (
-              <p className="text-xs text-muted-foreground">
-                {t(`${base}.noSteps`)}
-              </p>
-            )}
-            {renderSteps(draft.definition.steps, setSteps, 0)}
-          </div>
-        </>
-      ) : (
-        <div className="space-y-2">
-          <textarea
-            className="w-full min-h-64 bg-background border border-border p-2 font-mono text-xs"
-            value={jsonText}
-            onChange={(e) => {
-              setJsonText(e.target.value);
-              try {
-                const parsed = JSON.parse(e.target.value);
-                setDefinition(parsed as AutomationDefinition);
-                setJsonError(null);
-              } catch (error) {
-                setJsonError(
-                  error instanceof Error ? error.message : String(error),
-                );
-              }
-            }}
-          />
-          {jsonError && <p className="text-xs text-destructive">{jsonError}</p>}
-        </div>
-      )}
-    </div>
-  );
-}
diff --git a/plugins/automations/src/frontend/automations/HostSelectorField.tsx b/plugins/automations/src/frontend/automations/HostSelectorField.tsx
deleted file mode 100644
index df609b1a8..000000000
--- a/plugins/automations/src/frontend/automations/HostSelectorField.tsx
+++ /dev/null
@@ -1,137 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import {
-  Label,
-  Select,
-  SelectContent,
-  SelectItem,
-  SelectTrigger,
-  SelectValue,
-} from "@termix/plugin-sdk/ui";
-import type { HostSelector } from "../../types";
-import type { AutomationEditorOptions } from "./editor-types";
-
-/**
- * Picks which hosts a step acts on. "The host that triggered this" is the
- * common case, so it is offered first and used as the default.
- */
-export function HostSelectorField({
-  value,
-  options,
-  onChange,
-  allowTrigger = true,
-}: {
-  value: HostSelector | undefined;
-  options: AutomationEditorOptions;
-  onChange: (next: HostSelector) => void;
-  allowTrigger?: boolean;
-}) {
-  const { t } = useTranslation();
-  const base = "newUi.sidebar.automations";
-  const kind = value?.kind ?? (allowTrigger ? "trigger" : "host");
-
-  return (
-    <div className="space-y-1">
-      <Label className="text-xs text-muted-foreground">
-        {t(`${base}.fields.host`)}
-      </Label>
-      <div className="flex gap-2">
-        <Select
-          value={kind}
-          onValueChange={(next) =>
-            onChange(defaultFor(next as HostSelector["kind"]))
-          }
-        >
-          <SelectTrigger
-            size="sm"
-            className="min-w-0 flex-1 rounded-none border-border"
-          >
-            <SelectValue />
-          </SelectTrigger>
-          <SelectContent>
-            {allowTrigger && (
-              <SelectItem value="trigger">
-                {t(`${base}.hostSelector.trigger`)}
-              </SelectItem>
-            )}
-            <SelectItem value="host">
-              {t(`${base}.hostSelector.host`)}
-            </SelectItem>
-            {(options.providers.fleets || kind === "fleet") && (
-              <SelectItem value="fleet">
-                {t(`${base}.hostSelector.fleet`)}
-              </SelectItem>
-            )}
-            <SelectItem value="all">{t(`${base}.hostSelector.all`)}</SelectItem>
-          </SelectContent>
-        </Select>
-
-        {kind === "host" && (
-          <Select
-            value={
-              value?.kind === "host" && value.hostId ? String(value.hostId) : ""
-            }
-            onValueChange={(next) =>
-              onChange({ kind: "host", hostId: Number(next) })
-            }
-          >
-            <SelectTrigger
-              size="sm"
-              className="min-w-0 flex-1 rounded-none border-border"
-            >
-              <SelectValue />
-            </SelectTrigger>
-            <SelectContent>
-              {options.hosts.map((host) => (
-                <SelectItem key={host.id} value={String(host.id)}>
-                  {host.name}
-                </SelectItem>
-              ))}
-            </SelectContent>
-          </Select>
-        )}
-
-        {kind === "fleet" && (
-          <Select
-            value={
-              value?.kind === "fleet" && value.fleetId
-                ? String(value.fleetId)
-                : ""
-            }
-            onValueChange={(next) =>
-              onChange({ kind: "fleet", fleetId: Number(next) })
-            }
-          >
-            <SelectTrigger
-              size="sm"
-              className="min-w-0 flex-1 rounded-none border-border"
-            >
-              <SelectValue />
-            </SelectTrigger>
-            <SelectContent>
-              {options.fleets.map((fleet) => (
-                <SelectItem key={fleet.id} value={String(fleet.id)}>
-                  {fleet.name}
-                </SelectItem>
-              ))}
-            </SelectContent>
-          </Select>
-        )}
-      </div>
-    </div>
-  );
-}
-
-function defaultFor(kind: HostSelector["kind"]): HostSelector {
-  switch (kind) {
-    case "host":
-      return { kind: "host", hostId: 0 };
-    case "fleet":
-      return { kind: "fleet", fleetId: 0 };
-    case "hosts":
-      return { kind: "hosts", hostIds: [] };
-    case "all":
-      return { kind: "all" };
-    default:
-      return { kind: "trigger" };
-  }
-}
diff --git a/plugins/automations/src/frontend/automations/StepBlock.tsx b/plugins/automations/src/frontend/automations/StepBlock.tsx
deleted file mode 100644
index 653b7a51a..000000000
--- a/plugins/automations/src/frontend/automations/StepBlock.tsx
+++ /dev/null
@@ -1,601 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import {
-  Button,
-  Input,
-  Label,
-  Textarea,
-  Switch,
-  Select,
-  SelectContent,
-  SelectItem,
-  SelectTrigger,
-  SelectValue,
-} from "@termix/plugin-sdk/ui";
-import { ChevronDown, ChevronUp, Trash2 } from "lucide-react";
-import type { Step, StepType } from "../../types";
-import { HostSelectorField } from "./HostSelectorField";
-import {
-  missingStepProvider,
-  type AutomationEditorOptions,
-} from "./editor-types";
-
-const STEP_TYPES: StepType[] = [
-  "notify",
-  "http",
-  "run_command",
-  "run_snippet",
-  "docker",
-  "tunnel",
-  "wol",
-  "wait",
-  "set_var",
-  "if",
-  "stop",
-];
-
-interface StepBlockProps {
-  step: Step;
-  index: number;
-  total: number;
-  depth: number;
-  options: AutomationEditorOptions;
-  onChange: (next: Step) => void;
-  onRemove: () => void;
-  onMove: (direction: -1 | 1) => void;
-  renderNested: (
-    steps: Step[],
-    onChange: (next: Step[]) => void,
-    depth: number,
-  ) => React.ReactNode;
-}
-
-/**
- * One block in the automation's step list. Each step type renders only the
- * fields it actually uses, so the form stays readable as more types are added.
- */
-export function StepBlock({
-  step,
-  index,
-  total,
-  depth,
-  options,
-  onChange,
-  onRemove,
-  onMove,
-  renderNested,
-}: StepBlockProps) {
-  const { t } = useTranslation();
-  const base = "newUi.sidebar.automations";
-
-  function patch(changes: Partial<Step>) {
-    onChange({ ...step, ...changes } as Step);
-  }
-
-  return (
-    <div
-      className={`border border-border p-3 ${depth > 0 ? "border-l-2 border-l-primary/40" : ""}`}
-    >
-      <div className="flex items-center gap-2 mb-3">
-        <Select
-          value={step.type}
-          onValueChange={(value) =>
-            onChange(changeStepType(step, value as StepType))
-          }
-        >
-          <SelectTrigger
-            size="sm"
-            className="flex-1 rounded-none border-border"
-          >
-            <SelectValue />
-          </SelectTrigger>
-          <SelectContent>
-            {STEP_TYPES.map((type) => {
-              const needs = missingStepProvider(type, options.providers);
-              // A type whose plugin is off is only listed when this step
-              // already uses it, marked as needing that plugin.
-              if (needs && type !== step.type) return null;
-              return (
-                <SelectItem key={type} value={type}>
-                  {t(`${base}.stepTypes.${type}`)}
-                  {needs
-                    ? ` (${t(`${base}.needsPlugin`, { plugin: needs })})`
-                    : ""}
-                </SelectItem>
-              );
-            })}
-          </SelectContent>
-        </Select>
-
-        <Button
-          variant="ghost"
-          size="icon"
-          className="h-8 w-8 rounded-none"
-          disabled={index === 0}
-          title={t(`${base}.moveUp`)}
-          onClick={() => onMove(-1)}
-        >
-          <ChevronUp size={14} />
-        </Button>
-        <Button
-          variant="ghost"
-          size="icon"
-          className="h-8 w-8 rounded-none"
-          disabled={index === total - 1}
-          title={t(`${base}.moveDown`)}
-          onClick={() => onMove(1)}
-        >
-          <ChevronDown size={14} />
-        </Button>
-        <Button
-          variant="ghost"
-          size="icon"
-          className="h-8 w-8 rounded-none"
-          title={t(`${base}.removeStep`)}
-          onClick={onRemove}
-        >
-          <Trash2 size={14} />
-        </Button>
-      </div>
-
-      <div className="space-y-3">
-        {step.type === "notify" && (
-          <>
-            <Field label={t(`${base}.fields.title`)}>
-              <Input
-                className="h-8 rounded-none border-border"
-                value={step.title ?? ""}
-                onChange={(e) =>
-                  patch({ title: e.target.value } as Partial<Step>)
-                }
-              />
-            </Field>
-            <Field label={t(`${base}.fields.message`)}>
-              <Textarea
-                className="rounded-none border-border min-h-16"
-                value={step.body ?? ""}
-                onChange={(e) =>
-                  patch({ body: e.target.value } as Partial<Step>)
-                }
-              />
-            </Field>
-            <Field label={t(`${base}.fields.channels`)}>
-              <div className="flex flex-wrap gap-2">
-                {options.channels.length === 0 && (
-                  <span className="text-xs text-muted-foreground">
-                    {t(`${base}.noChannelsHint`)}
-                  </span>
-                )}
-                {options.channels.map((channel) => {
-                  const checked = step.channelIds?.includes(channel.id);
-                  return (
-                    <button
-                      key={channel.id}
-                      type="button"
-                      onClick={() =>
-                        patch({
-                          channelIds: checked
-                            ? step.channelIds.filter((id) => id !== channel.id)
-                            : [...(step.channelIds ?? []), channel.id],
-                        } as Partial<Step>)
-                      }
-                      className={`px-2 py-1 text-xs border ${
-                        checked
-                          ? "border-primary text-foreground"
-                          : "border-border text-muted-foreground"
-                      }`}
-                    >
-                      {channel.name}
-                    </button>
-                  );
-                })}
-              </div>
-            </Field>
-          </>
-        )}
-
-        {step.type === "http" && (
-          <>
-            <div className="flex gap-2">
-              <Select
-                value={step.method}
-                onValueChange={(value) =>
-                  patch({ method: value } as Partial<Step>)
-                }
-              >
-                <SelectTrigger
-                  size="sm"
-                  className="w-28 rounded-none border-border"
-                >
-                  <SelectValue />
-                </SelectTrigger>
-                <SelectContent>
-                  {["GET", "POST", "PUT", "PATCH", "DELETE"].map((method) => (
-                    <SelectItem key={method} value={method}>
-                      {method}
-                    </SelectItem>
-                  ))}
-                </SelectContent>
-              </Select>
-              <Input
-                className="h-8 flex-1 rounded-none border-border"
-                placeholder="https://"
-                value={step.url ?? ""}
-                onChange={(e) =>
-                  patch({ url: e.target.value } as Partial<Step>)
-                }
-              />
-            </div>
-            <Field label={t(`${base}.fields.body`)}>
-              <Textarea
-                className="rounded-none border-border min-h-16 font-mono text-xs"
-                value={step.body ?? ""}
-                onChange={(e) =>
-                  patch({ body: e.target.value } as Partial<Step>)
-                }
-              />
-            </Field>
-            <label className="flex items-start gap-2 text-xs text-muted-foreground">
-              <Switch
-                checked={!!step.allowPrivateNetwork}
-                onCheckedChange={(checked) =>
-                  patch({ allowPrivateNetwork: checked } as Partial<Step>)
-                }
-              />
-              <span>
-                {t(`${base}.fields.allowPrivateNetwork`)}
-                <span className="block">
-                  {t(`${base}.fields.allowPrivateNetworkHint`)}
-                </span>
-              </span>
-            </label>
-          </>
-        )}
-
-        {step.type === "run_command" && (
-          <>
-            <HostSelectorField
-              value={step.hostSelector}
-              options={options}
-              onChange={(hostSelector) =>
-                patch({ hostSelector } as Partial<Step>)
-              }
-            />
-            <Field label={t(`${base}.fields.command`)}>
-              <Textarea
-                className="rounded-none border-border min-h-16 font-mono text-xs"
-                value={step.command ?? ""}
-                onChange={(e) =>
-                  patch({ command: e.target.value } as Partial<Step>)
-                }
-              />
-            </Field>
-            <ElevatedToggle
-              checked={!!step.elevated}
-              onChange={(elevated) => patch({ elevated } as Partial<Step>)}
-            />
-          </>
-        )}
-
-        {step.type === "run_snippet" && (
-          <>
-            <HostSelectorField
-              value={step.hostSelector}
-              options={options}
-              onChange={(hostSelector) =>
-                patch({ hostSelector } as Partial<Step>)
-              }
-            />
-            <Field label={t(`${base}.fields.snippet`)}>
-              <Select
-                value={step.snippetId ? String(step.snippetId) : ""}
-                onValueChange={(value) =>
-                  patch({ snippetId: Number(value) } as Partial<Step>)
-                }
-              >
-                <SelectTrigger size="sm" className="rounded-none border-border">
-                  <SelectValue />
-                </SelectTrigger>
-                <SelectContent>
-                  {options.snippets.map((snippet) => (
-                    <SelectItem key={snippet.id} value={String(snippet.id)}>
-                      {snippet.name}
-                    </SelectItem>
-                  ))}
-                </SelectContent>
-              </Select>
-            </Field>
-            <ElevatedToggle
-              checked={!!step.elevated}
-              onChange={(elevated) => patch({ elevated } as Partial<Step>)}
-            />
-          </>
-        )}
-
-        {step.type === "docker" && (
-          <>
-            <HostSelectorField
-              value={step.hostSelector}
-              options={options}
-              onChange={(hostSelector) =>
-                patch({ hostSelector } as Partial<Step>)
-              }
-            />
-            <div className="flex gap-2">
-              <Select
-                value={step.action}
-                onValueChange={(value) =>
-                  patch({ action: value } as Partial<Step>)
-                }
-              >
-                <SelectTrigger
-                  size="sm"
-                  className="min-w-0 flex-1 rounded-none border-border"
-                >
-                  <SelectValue />
-                </SelectTrigger>
-                <SelectContent>
-                  {["start", "stop", "restart"].map((action) => (
-                    <SelectItem key={action} value={action}>
-                      {action}
-                    </SelectItem>
-                  ))}
-                </SelectContent>
-              </Select>
-              <Input
-                className="h-8 flex-1 rounded-none border-border"
-                placeholder={t(`${base}.fields.container`)}
-                value={step.container ?? ""}
-                onChange={(e) =>
-                  patch({ container: e.target.value } as Partial<Step>)
-                }
-              />
-            </div>
-          </>
-        )}
-
-        {step.type === "tunnel" && (
-          <div className="flex gap-2">
-            <Select
-              value={step.action}
-              onValueChange={(value) =>
-                patch({ action: value } as Partial<Step>)
-              }
-            >
-              <SelectTrigger
-                size="sm"
-                className="min-w-0 flex-1 rounded-none border-border"
-              >
-                <SelectValue />
-              </SelectTrigger>
-              <SelectContent>
-                <SelectItem value="connect">
-                  {t("ui.sidebar.automations.options.connect")}
-                </SelectItem>
-                <SelectItem value="disconnect">
-                  {t("ui.sidebar.automations.options.disconnect")}
-                </SelectItem>
-              </SelectContent>
-            </Select>
-            <Input
-              className="h-8 flex-1 rounded-none border-border"
-              value={step.tunnelName ?? ""}
-              onChange={(e) =>
-                patch({ tunnelName: e.target.value } as Partial<Step>)
-              }
-            />
-          </div>
-        )}
-
-        {step.type === "wol" && (
-          <Field label={t(`${base}.fields.host`)}>
-            <Select
-              value={step.hostId ? String(step.hostId) : ""}
-              onValueChange={(value) =>
-                patch({ hostId: Number(value) } as Partial<Step>)
-              }
-            >
-              <SelectTrigger size="sm" className="rounded-none border-border">
-                <SelectValue />
-              </SelectTrigger>
-              <SelectContent>
-                {options.hosts.map((host) => (
-                  <SelectItem key={host.id} value={String(host.id)}>
-                    {host.name}
-                  </SelectItem>
-                ))}
-              </SelectContent>
-            </Select>
-          </Field>
-        )}
-
-        {step.type === "wait" && (
-          <Field label={t(`${base}.fields.seconds`)}>
-            <Input
-              type="number"
-              min={1}
-              className="h-8 w-32 rounded-none border-border"
-              value={step.seconds ?? 0}
-              onChange={(e) =>
-                patch({ seconds: Number(e.target.value) } as Partial<Step>)
-              }
-            />
-          </Field>
-        )}
-
-        {step.type === "set_var" && (
-          <div className="flex gap-2">
-            <Input
-              className="h-8 w-40 rounded-none border-border"
-              placeholder={t(`${base}.fields.variableName`)}
-              value={step.name ?? ""}
-              onChange={(e) => patch({ name: e.target.value } as Partial<Step>)}
-            />
-            <Input
-              className="h-8 flex-1 rounded-none border-border"
-              placeholder={t(`${base}.fields.variableValue`)}
-              value={step.value ?? ""}
-              onChange={(e) =>
-                patch({ value: e.target.value } as Partial<Step>)
-              }
-            />
-          </div>
-        )}
-
-        {step.type === "if" && (
-          <div className="space-y-3">
-            <div className="flex gap-2">
-              <Input
-                className="h-8 flex-1 rounded-none border-border font-mono text-xs"
-                placeholder={t(`${base}.fields.conditionLeftPlaceholder`)}
-                value={step.condition?.left ?? ""}
-                onChange={(e) =>
-                  patch({
-                    condition: { ...step.condition, left: e.target.value },
-                  } as Partial<Step>)
-                }
-              />
-              <Select
-                value={step.condition?.operator ?? "=="}
-                onValueChange={(value) =>
-                  patch({
-                    condition: { ...step.condition, operator: value },
-                  } as Partial<Step>)
-                }
-              >
-                <SelectTrigger
-                  size="sm"
-                  className="w-28 rounded-none border-border"
-                >
-                  <SelectValue />
-                </SelectTrigger>
-                <SelectContent>
-                  {[">", "<", ">=", "<=", "==", "!=", "contains"].map((op) => (
-                    <SelectItem key={op} value={op}>
-                      {op}
-                    </SelectItem>
-                  ))}
-                </SelectContent>
-              </Select>
-              <Input
-                className="h-8 flex-1 rounded-none border-border font-mono text-xs"
-                placeholder={t(`${base}.fields.conditionRightPlaceholder`)}
-                value={step.condition?.right ?? ""}
-                onChange={(e) =>
-                  patch({
-                    condition: { ...step.condition, right: e.target.value },
-                  } as Partial<Step>)
-                }
-              />
-            </div>
-            {renderNested(
-              step.then ?? [],
-              (next) => patch({ then: next } as Partial<Step>),
-              depth + 1,
-            )}
-          </div>
-        )}
-
-        {step.type !== "stop" && (
-          <Field label={t(`${base}.fields.onError`)}>
-            <Select
-              value={step.onError ?? "stop"}
-              onValueChange={(value) =>
-                patch({ onError: value } as Partial<Step>)
-              }
-            >
-              <SelectTrigger
-                size="sm"
-                className="min-w-0 w-full rounded-none border-border"
-              >
-                <SelectValue />
-              </SelectTrigger>
-              <SelectContent>
-                <SelectItem value="stop">
-                  {t(`${base}.onError.stop`)}
-                </SelectItem>
-                <SelectItem value="continue">
-                  {t(`${base}.onError.continue`)}
-                </SelectItem>
-              </SelectContent>
-            </Select>
-          </Field>
-        )}
-      </div>
-    </div>
-  );
-}
-
-function Field({
-  label,
-  children,
-}: {
-  label: string;
-  children: React.ReactNode;
-}) {
-  return (
-    <div className="space-y-1">
-      <Label className="text-xs text-muted-foreground">{label}</Label>
-      {children}
-    </div>
-  );
-}
-
-function ElevatedToggle({
-  checked,
-  onChange,
-}: {
-  checked: boolean;
-  onChange: (value: boolean) => void;
-}) {
-  const { t } = useTranslation();
-  return (
-    <label className="flex items-center gap-2 text-xs text-muted-foreground">
-      <Switch checked={checked} onCheckedChange={onChange} />
-      {t("newUi.sidebar.automations.fields.elevated")}
-    </label>
-  );
-}
-
-/** Keeps the step id when the type changes, so run history stays linked. */
-function changeStepType(step: Step, type: StepType): Step {
-  const next: Record<string, unknown> = { id: step.id, type };
-  switch (type) {
-    case "notify":
-      next.channelIds = [];
-      break;
-    case "http":
-      next.method = "POST";
-      next.url = "";
-      break;
-    case "run_command":
-      next.command = "";
-      next.hostSelector = { kind: "trigger" };
-      break;
-    case "run_snippet":
-      next.hostSelector = { kind: "trigger" };
-      break;
-    case "docker":
-      next.action = "restart";
-      next.container = "";
-      next.hostSelector = { kind: "trigger" };
-      break;
-    case "tunnel":
-      next.action = "connect";
-      next.tunnelName = "";
-      break;
-    case "wait":
-      next.seconds = 30;
-      break;
-    case "set_var":
-      next.name = "";
-      next.value = "";
-      break;
-    case "if":
-      next.condition = { left: "", operator: "==", right: "" };
-      next.then = [];
-      break;
-    default:
-      break;
-  }
-  return next as unknown as Step;
-}
diff --git a/plugins/automations/src/frontend/automations/TriggerCard.tsx b/plugins/automations/src/frontend/automations/TriggerCard.tsx
deleted file mode 100644
index 15213d92c..000000000
--- a/plugins/automations/src/frontend/automations/TriggerCard.tsx
+++ /dev/null
@@ -1,445 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import {
-  Input,
-  Label,
-  Select,
-  SelectContent,
-  SelectItem,
-  SelectTrigger,
-  SelectValue,
-} from "@termix/plugin-sdk/ui";
-import type { Trigger, TriggerKind } from "../../types";
-import { HostSelectorField } from "./HostSelectorField";
-import {
-  missingTriggerProvider,
-  type AutomationEditorOptions,
-} from "./editor-types";
-
-const TRIGGER_KINDS: TriggerKind[] = [
-  "metric_threshold",
-  "host_status",
-  "health_check",
-  "schedule",
-  "docker_event",
-  "webhook",
-];
-
-/** Sentinel for "no zone set", which means the server's own time. */
-const SERVER_TIMEZONE = "__server__";
-
-/**
- * Zones offered for a cron schedule. Uses the runtime's own list where it is
- * available so the picker is complete, with a small fallback for older
- * browsers that do not expose supportedValuesOf.
- */
-const TIMEZONES: string[] = (() => {
-  try {
-    const supported = (
-      Intl as unknown as { supportedValuesOf?: (key: string) => string[] }
-    ).supportedValuesOf?.("timeZone");
-    if (supported?.length) return supported;
-  } catch {
-    // Fall through to the short list.
-  }
-  return [
-    "UTC",
-    "America/New_York",
-    "America/Chicago",
-    "America/Denver",
-    "America/Los_Angeles",
-    "Europe/London",
-    "Europe/Berlin",
-    "Europe/Moscow",
-    "Asia/Kolkata",
-    "Asia/Shanghai",
-    "Asia/Tokyo",
-    "Australia/Sydney",
-  ];
-})();
-
-const METRIC_PATHS = [
-  "cpu.percent",
-  "memory.percent",
-  "disk.percent",
-  "temperature.highestCelsius",
-  "cpu.load1",
-  "processes.total",
-  "network.rxRateBps",
-  "network.txRateBps",
-];
-
-/** The single trigger at the top of an automation. */
-export function TriggerCard({
-  trigger,
-  options,
-  onChange,
-}: {
-  trigger: Trigger;
-  options: AutomationEditorOptions;
-  onChange: (next: Trigger) => void;
-}) {
-  const { t } = useTranslation();
-  const base = "newUi.sidebar.automations";
-
-  function patch(changes: Record<string, unknown>) {
-    onChange({ ...trigger, ...changes } as Trigger);
-  }
-
-  return (
-    <div className="border border-border p-3 space-y-3">
-      <div className="space-y-1">
-        <Label className="text-xs text-muted-foreground">
-          {t(`${base}.trigger`)}
-        </Label>
-        <Select
-          value={trigger.kind}
-          onValueChange={(value) =>
-            onChange(defaultTrigger(value as TriggerKind))
-          }
-        >
-          <SelectTrigger size="sm" className="rounded-none border-border">
-            <SelectValue />
-          </SelectTrigger>
-          <SelectContent>
-            {TRIGGER_KINDS.map((kind) => {
-              const needs = missingTriggerProvider(kind, options.providers);
-              // A kind whose plugin is off is only listed when this trigger
-              // already uses it, marked as needing that plugin.
-              if (needs && kind !== trigger.kind) return null;
-              return (
-                <SelectItem key={kind} value={kind}>
-                  {t(`${base}.triggerKinds.${kind}`)}
-                  {needs
-                    ? ` (${t(`${base}.needsPlugin`, { plugin: needs })})`
-                    : ""}
-                </SelectItem>
-              );
-            })}
-          </SelectContent>
-        </Select>
-      </div>
-
-      {trigger.kind === "metric_threshold" && (
-        <>
-          <HostSelectorField
-            value={trigger.hostSelector}
-            options={options}
-            allowTrigger={false}
-            onChange={(hostSelector) => patch({ hostSelector })}
-          />
-          <div className="flex gap-2">
-            <Select
-              value={trigger.metric?.path ?? "cpu.percent"}
-              onValueChange={(value) =>
-                patch({ metric: { ...trigger.metric, path: value } })
-              }
-            >
-              <SelectTrigger
-                size="sm"
-                className="flex-1 rounded-none border-border"
-              >
-                <SelectValue />
-              </SelectTrigger>
-              <SelectContent>
-                {METRIC_PATHS.map((path) => (
-                  <SelectItem key={path} value={path}>
-                    {path}
-                  </SelectItem>
-                ))}
-              </SelectContent>
-            </Select>
-            <Select
-              value={trigger.operator}
-              onValueChange={(value) => patch({ operator: value })}
-            >
-              <SelectTrigger
-                size="sm"
-                className="w-20 rounded-none border-border"
-              >
-                <SelectValue />
-              </SelectTrigger>
-              <SelectContent>
-                {[">", ">=", "<", "<=", "==", "!="].map((op) => (
-                  <SelectItem key={op} value={op}>
-                    {op}
-                  </SelectItem>
-                ))}
-              </SelectContent>
-            </Select>
-            <Input
-              type="number"
-              className="h-8 w-24 rounded-none border-border"
-              value={trigger.value ?? 0}
-              onChange={(e) => patch({ value: Number(e.target.value) })}
-            />
-          </div>
-
-          {trigger.metric?.path === "disk.percent" && (
-            <div className="space-y-1">
-              <Label className="text-xs text-muted-foreground">
-                {t(`${base}.fields.mount`)}
-              </Label>
-              <Input
-                className="h-8 rounded-none border-border font-mono text-xs"
-                placeholder="/data"
-                value={trigger.metric?.mount ?? ""}
-                onChange={(e) =>
-                  patch({
-                    metric: {
-                      ...trigger.metric,
-                      mount: e.target.value || undefined,
-                    },
-                  })
-                }
-              />
-            </div>
-          )}
-
-          {trigger.metric?.path.startsWith("network.") &&
-            "iface" in trigger.metric && (
-              <div className="space-y-1">
-                <Label className="text-xs text-muted-foreground">
-                  {t(`${base}.fields.interface`)}
-                </Label>
-                <Input
-                  className="h-8 rounded-none border-border font-mono text-xs"
-                  placeholder="eth0"
-                  value={trigger.metric.iface ?? ""}
-                  onChange={(e) =>
-                    patch({
-                      metric: {
-                        ...trigger.metric,
-                        iface: e.target.value || undefined,
-                      },
-                    })
-                  }
-                />
-              </div>
-            )}
-
-          <div className="flex gap-2">
-            <NumberField
-              label={t(`${base}.fields.forSeconds`)}
-              value={trigger.forSeconds ?? 0}
-              onChange={(value) => patch({ forSeconds: value })}
-            />
-            <NumberField
-              label={t(`${base}.fields.cooldown`)}
-              value={trigger.cooldownMinutes ?? 15}
-              onChange={(value) => patch({ cooldownMinutes: value })}
-            />
-          </div>
-        </>
-      )}
-
-      {(trigger.kind === "host_status" || trigger.kind === "health_check") && (
-        <>
-          <HostSelectorField
-            value={trigger.hostSelector}
-            options={options}
-            allowTrigger={false}
-            onChange={(hostSelector) => patch({ hostSelector })}
-          />
-          <Select
-            value={trigger.to}
-            onValueChange={(value) => patch({ to: value })}
-          >
-            <SelectTrigger size="sm" className="rounded-none border-border">
-              <SelectValue />
-            </SelectTrigger>
-            <SelectContent>
-              {trigger.kind === "host_status" ? (
-                <>
-                  <SelectItem value="offline">
-                    {t("ui.sidebar.automations.options.offline")}
-                  </SelectItem>
-                  <SelectItem value="online">
-                    {t("ui.sidebar.automations.options.online")}
-                  </SelectItem>
-                </>
-              ) : (
-                <>
-                  <SelectItem value="failing">
-                    {t("ui.sidebar.automations.options.failing")}
-                  </SelectItem>
-                  <SelectItem value="recovered">
-                    {t("ui.sidebar.automations.options.recovered")}
-                  </SelectItem>
-                </>
-              )}
-            </SelectContent>
-          </Select>
-          <NumberField
-            label={t(`${base}.fields.cooldown`)}
-            value={trigger.cooldownMinutes ?? 15}
-            onChange={(value) => patch({ cooldownMinutes: value })}
-          />
-        </>
-      )}
-
-      {trigger.kind === "schedule" && (
-        <div className="space-y-3">
-          <div className="space-y-1">
-            <Label className="text-xs text-muted-foreground">
-              {t(`${base}.fields.cron`)}
-            </Label>
-            <Input
-              className="h-8 rounded-none border-border font-mono text-xs"
-              placeholder="0 2 * * *"
-              value={trigger.cron ?? ""}
-              onChange={(e) =>
-                patch({ cron: e.target.value, intervalSeconds: undefined })
-              }
-            />
-          </div>
-          <NumberField
-            label={t(`${base}.fields.intervalSeconds`)}
-            value={trigger.intervalSeconds ?? 0}
-            onChange={(value) =>
-              patch({ intervalSeconds: value || undefined, cron: undefined })
-            }
-          />
-          <div className="space-y-1">
-            <Label className="text-xs text-muted-foreground">
-              {t(`${base}.fields.timezone`)}
-            </Label>
-            <Select
-              value={trigger.timezone ?? SERVER_TIMEZONE}
-              onValueChange={(value) =>
-                patch({
-                  timezone: value === SERVER_TIMEZONE ? undefined : value,
-                })
-              }
-            >
-              <SelectTrigger
-                size="sm"
-                className="w-full rounded-none border-border"
-              >
-                <SelectValue />
-              </SelectTrigger>
-              <SelectContent>
-                <SelectItem value={SERVER_TIMEZONE}>
-                  {t(`${base}.fields.timezoneServer`)}
-                </SelectItem>
-                {TIMEZONES.map((zone) => (
-                  <SelectItem key={zone} value={zone}>
-                    {zone}
-                  </SelectItem>
-                ))}
-              </SelectContent>
-            </Select>
-            <p className="text-xs text-muted-foreground">
-              {t(`${base}.fields.timezoneHint`)}
-            </p>
-          </div>
-        </div>
-      )}
-
-      {trigger.kind === "docker_event" && (
-        <>
-          <HostSelectorField
-            value={trigger.hostSelector}
-            options={options}
-            allowTrigger={false}
-            onChange={(hostSelector) => patch({ hostSelector })}
-          />
-          <div className="flex gap-2">
-            <Input
-              className="h-8 flex-1 rounded-none border-border"
-              placeholder={t(`${base}.fields.container`)}
-              value={trigger.container ?? ""}
-              onChange={(e) => patch({ container: e.target.value })}
-            />
-            <Select
-              value={trigger.event}
-              onValueChange={(value) => patch({ event: value })}
-            >
-              <SelectTrigger
-                size="sm"
-                className="min-w-0 flex-1 rounded-none border-border"
-              >
-                <SelectValue />
-              </SelectTrigger>
-              <SelectContent>
-                {["exited", "started", "unhealthy", "restarting"].map((e) => (
-                  <SelectItem key={e} value={e}>
-                    {e}
-                  </SelectItem>
-                ))}
-              </SelectContent>
-            </Select>
-          </div>
-        </>
-      )}
-
-      {trigger.kind === "webhook" && (
-        <p className="text-xs text-muted-foreground">
-          {t(`${base}.webhookTokenDescription`)}
-        </p>
-      )}
-    </div>
-  );
-}
-
-function NumberField({
-  label,
-  value,
-  onChange,
-}: {
-  label: string;
-  value: number;
-  onChange: (value: number) => void;
-}) {
-  return (
-    <div className="space-y-1 flex-1">
-      <Label className="text-xs text-muted-foreground">{label}</Label>
-      <Input
-        type="number"
-        min={0}
-        className="h-8 rounded-none border-border"
-        value={value}
-        onChange={(e) => onChange(Number(e.target.value))}
-      />
-    </div>
-  );
-}
-
-export function defaultTrigger(kind: TriggerKind): Trigger {
-  switch (kind) {
-    case "host_status":
-      return {
-        kind: "host_status",
-        hostSelector: { kind: "all" },
-        to: "offline",
-        cooldownMinutes: 15,
-      };
-    case "health_check":
-      return {
-        kind: "health_check",
-        hostSelector: { kind: "all" },
-        to: "failing",
-        cooldownMinutes: 15,
-      };
-    case "schedule":
-      return { kind: "schedule", cron: "0 2 * * *" };
-    case "docker_event":
-      return {
-        kind: "docker_event",
-        hostSelector: { kind: "all" },
-        event: "exited",
-        cooldownMinutes: 15,
-      };
-    case "webhook":
-      return { kind: "webhook", tokenHash: "" };
-    default:
-      return {
-        kind: "metric_threshold",
-        hostSelector: { kind: "all" },
-        metric: { path: "cpu.percent" },
-        operator: ">",
-        value: 90,
-        forSeconds: 300,
-        cooldownMinutes: 15,
-      };
-  }
-}
diff --git a/plugins/automations/src/frontend/automations/editor-types.ts b/plugins/automations/src/frontend/automations/editor-types.ts
deleted file mode 100644
index c4e5b83e1..000000000
--- a/plugins/automations/src/frontend/automations/editor-types.ts
+++ /dev/null
@@ -1,72 +0,0 @@
-import type { StepType, TriggerKind } from "../../types";
-import type { AutomationProviders } from "../automations-api";
-
-/** Lookup data the editor needs to turn ids into names. */
-export interface AutomationEditorOptions {
-  hosts: Array<{ id: number; name: string }>;
-  snippets: Array<{ id: number; name: string }>;
-  channels: Array<{ id: number; name: string }>;
-  fleets: Array<{ id: number; name: string }>;
-  /** Which optional plugins are running. */
-  providers: AutomationProviders;
-}
-
-export const EMPTY_EDITOR_OPTIONS: AutomationEditorOptions = {
-  hosts: [],
-  snippets: [],
-  channels: [],
-  fleets: [],
-  providers: {
-    snippets: false,
-    fleets: false,
-    tunnels: false,
-    docker: false,
-    "docker-events": false,
-    "host-metrics": false,
-    "wake-on-lan": false,
-  },
-};
-
-/** Short unique id for a new step, stable for the life of the automation. */
-export function newStepId(): string {
-  return `s${Math.random().toString(36).slice(2, 8)}`;
-}
-
-/** The plugin a trigger kind needs, when it is not core. */
-const TRIGGER_PROVIDERS: Partial<
-  Record<TriggerKind, keyof AutomationProviders>
-> = {
-  metric_threshold: "host-metrics",
-  health_check: "host-metrics",
-  docker_event: "docker-events",
-};
-
-/** The plugin a step type needs, when it is not core. */
-const STEP_PROVIDERS: Partial<Record<StepType, keyof AutomationProviders>> = {
-  run_snippet: "snippets",
-  docker: "docker",
-  tunnel: "tunnels",
-  wol: "wake-on-lan",
-};
-
-/** The plugin id shown in "needs <plugin>", for a provider key. */
-export function providerPlugin(key: keyof AutomationProviders): string {
-  return key === "docker-events" ? "docker" : key;
-}
-
-/** The provider a kind needs that is not running, or null when it can run. */
-export function missingTriggerProvider(
-  kind: TriggerKind,
-  providers: AutomationProviders,
-): string | null {
-  const key = TRIGGER_PROVIDERS[kind];
-  return key && !providers[key] ? providerPlugin(key) : null;
-}
-
-export function missingStepProvider(
-  type: StepType,
-  providers: AutomationProviders,
-): string | null {
-  const key = STEP_PROVIDERS[type];
-  return key && !providers[key] ? providerPlugin(key) : null;
-}
diff --git a/plugins/automations/src/frontend/index.tsx b/plugins/automations/src/frontend/index.tsx
deleted file mode 100644
index a196c74ec..000000000
--- a/plugins/automations/src/frontend/index.tsx
+++ /dev/null
@@ -1,84 +0,0 @@
-import { Workflow, Wrench } from "lucide-react";
-import type {
-  PanelProps,
-  TabProps,
-  TermixApp,
-} from "@termix/plugin-sdk/frontend";
-import { AutomationsPanel } from "./AutomationsPanel";
-import { createAutomationsApi } from "./automations-api";
-
-import { createMaintenanceStore } from "./maintenance-store";
-import { HostMaintenance, MaintenanceBadge } from "./HostMaintenance";
-
-const VIEW_ID = "automations";
-
-function Panel({ active, setEditing }: PanelProps) {
-  return (
-    <div className="flex-1 min-h-0 overflow-y-auto">
-      <AutomationsPanel active={active} onEditingChange={setEditing} />
-    </div>
-  );
-}
-
-function AutomationsTab({ isVisible }: TabProps) {
-  return <AutomationsPanel active={isVisible} />;
-}
-
-export function activate(app: TermixApp): void {
-  const maintenance = createMaintenanceStore(app.api);
-  app.onDispose(() => maintenance.dispose());
-  app.registerTab(
-    "host_maintenance",
-    ({ host, isVisible }) =>
-      host ? (
-        <HostMaintenance host={host} store={maintenance} visible={isVisible} />
-      ) : null,
-    {
-      icon: Wrench,
-      titleKey: "maintenance.title",
-    },
-  );
-  app.registerHostAction({
-    id: "maintenance",
-    titleKey: "maintenance.title",
-    icon: Wrench,
-    kind: "open",
-    tabType: "host_maintenance",
-    tray: false,
-    when: (host) => Number(host.id) > 0,
-  });
-  app.registerHostBadge({
-    id: "maintenance",
-    when: (host) => Number(host.id) > 0,
-    component: ({ host }) => (
-      <MaintenanceBadge host={host} store={maintenance} />
-    ),
-  });
-  app.registerRailItem({
-    id: VIEW_ID,
-    icon: Workflow,
-    titleKey: "nav.automations",
-    promotable: true,
-    after: "macros",
-    order: 30,
-  });
-  app.registerPanel(VIEW_ID, Panel);
-  app.registerTab(VIEW_ID, AutomationsTab, {
-    icon: Workflow,
-    titleKey: "nav.automations",
-    singleton: true,
-    hostless: true,
-    panelFrame: true,
-  });
-
-  // The assistant's @-mentions list automations through this.
-  const api = createAutomationsApi(app.api);
-  app.registerAction("automations.list", () => api.list());
-
-  app.registerSlotContribution("onboarding.features", {
-    actionId: "automations.feature",
-    titleKey: "onboarding.feature_automations",
-    descriptionKey: "onboarding.feature_automations_desc",
-    icon: Workflow,
-  });
-}
diff --git a/plugins/automations/src/frontend/maintenance-store.ts b/plugins/automations/src/frontend/maintenance-store.ts
deleted file mode 100644
index 7344d6df1..000000000
--- a/plugins/automations/src/frontend/maintenance-store.ts
+++ /dev/null
@@ -1,85 +0,0 @@
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import type { HostMaintenance } from "../maintenance";
-
-export function createMaintenanceStore(api: PluginApiClient) {
-  let snapshot: Record<number, HostMaintenance> = {};
-  const listeners = new Set<() => void>();
-  let timer: ReturnType<typeof setInterval> | undefined;
-  let loading = false;
-  let disposed = false;
-  let revision = 0;
-  let error = "";
-  let loaded = false;
-  const emit = () => listeners.forEach((listener) => listener());
-  async function refresh() {
-    if (loading || disposed || document.hidden) return;
-    loading = true;
-    const version = revision;
-    try {
-      const { data } =
-        await api.get<Array<{ hostId: number; state: HostMaintenance }>>(
-          "/maintenance",
-        );
-      if (!disposed && version === revision) {
-        const next = Object.fromEntries(
-          data.map(({ hostId, state }) => [hostId, state]),
-        );
-        // Most polls change nothing; skip the emit so badges do not re-render.
-        const unchanged =
-          loaded && !error && JSON.stringify(next) === JSON.stringify(snapshot);
-        error = "";
-        loaded = true;
-        if (unchanged) return;
-        snapshot = next;
-        emit();
-      }
-    } catch {
-      if (!disposed && version === revision) {
-        error = "maintenance.loadFailed";
-        snapshot = { ...snapshot };
-        emit();
-      }
-    } finally {
-      loading = false;
-    }
-  }
-  return {
-    snapshot: () => snapshot,
-    error: () => error,
-    loaded: () => loaded,
-    subscribe(listener: () => void) {
-      listeners.add(listener);
-      if (!timer) {
-        void refresh();
-        timer = setInterval(() => void refresh(), 15_000);
-        document.addEventListener("visibilitychange", refresh);
-      }
-      return () => {
-        listeners.delete(listener);
-        if (!listeners.size) {
-          clearInterval(timer);
-          timer = undefined;
-          document.removeEventListener("visibilitychange", refresh);
-        }
-      };
-    },
-    async edit(hostId: number, input: Record<string, unknown>) {
-      const { data } = await api.post<HostMaintenance>(
-        `/maintenance/${hostId}`,
-        input,
-      );
-      revision++;
-      snapshot = { ...snapshot, [hostId]: data };
-      emit();
-      return data;
-    },
-    refresh,
-    dispose() {
-      disposed = true;
-      clearInterval(timer);
-      document.removeEventListener("visibilitychange", refresh);
-      listeners.clear();
-    },
-  };
-}
-export type MaintenanceStore = ReturnType<typeof createMaintenanceStore>;
diff --git a/plugins/automations/src/maintenance.ts b/plugins/automations/src/maintenance.ts
deleted file mode 100644
index 4d27ae056..000000000
--- a/plugins/automations/src/maintenance.ts
+++ /dev/null
@@ -1,33 +0,0 @@
-export type Recurrence = "once" | "weekly" | "monthly";
-
-export interface MaintenancePlan {
-  id: string;
-  reason: string;
-  start: string;
-  durationMinutes: number;
-  recurrence: Recurrence;
-  graceMinutes: number;
-  notifyOverdue: boolean;
-  nextStart: string | null;
-}
-
-export interface ActiveMaintenance {
-  startedAt: string;
-  reasons: string[];
-  estimatedEnd: string;
-  graceMinutes: number;
-  notifyOverdue: boolean;
-  notified: boolean;
-}
-
-export interface HostMaintenance {
-  active: ActiveMaintenance | null;
-  plans: MaintenancePlan[];
-  /** Set on API responses: false when the host was shared with the caller. */
-  owned?: boolean;
-}
-
-export const emptyMaintenance = (): HostMaintenance => ({
-  active: null,
-  plans: [],
-});
diff --git a/plugins/automations/src/types.ts b/plugins/automations/src/types.ts
deleted file mode 100644
index 02a139952..000000000
--- a/plugins/automations/src/types.ts
+++ /dev/null
@@ -1,286 +0,0 @@
-/**
- * Shared automation model used by both the backend engine and the editor UI.
- * An automation is one trigger plus an ordered list of steps. The whole
- * definition is stored as JSON on the automations row, so this file is the
- * only contract describing that blob.
- */
-
-export const AUTOMATION_DEFINITION_VERSION = 1;
-
-/** Which hosts a trigger watches or a step acts on. */
-export type HostSelector =
-  | { kind: "host"; hostId: number }
-  | { kind: "hosts"; hostIds: number[] }
-  | { kind: "fleet"; fleetId: number }
-  | { kind: "all" }
-  /** The host that produced the event. Only valid for host-scoped triggers. */
-  | { kind: "trigger" };
-
-/**
- * A metric to compare against. Paths mirror the shape returned by
- * collectMetrics(). mount/iface pick one entry out of a per-instance list so a
- * rule can watch a single filesystem rather than the aggregate.
- */
-export type MetricPath =
-  | { path: "cpu.percent" }
-  | { path: "cpu.load1" }
-  | { path: "cpu.load5" }
-  | { path: "cpu.load15" }
-  | { path: "memory.percent" }
-  | { path: "memory.usedGiB" }
-  | { path: "disk.percent"; mount?: string }
-  | { path: "disk.availableBytes"; mount?: string }
-  | { path: "temperature.highestCelsius" }
-  | { path: "uptime.seconds" }
-  | { path: "processes.total" }
-  | { path: "network.rxBytes"; iface?: string }
-  | { path: "network.txBytes"; iface?: string }
-  | { path: "network.rxRateBps"; iface?: string }
-  | { path: "network.txRateBps"; iface?: string };
-
-export type Operator =
-  | ">"
-  | "<"
-  | ">="
-  | "<="
-  | "=="
-  | "!="
-  | "contains"
-  | "not_contains"
-  | "changed";
-
-export type Severity = "info" | "warning" | "critical";
-
-export type HostStatusState = "online" | "offline";
-export type HealthCheckState = "failing" | "recovered";
-export type DockerEventKind = "exited" | "started" | "unhealthy" | "restarting";
-
-export type InternalEventKind =
-  | "user_login"
-  | "host_added"
-  | "host_deleted"
-  | "tunnel_disconnected"
-  | "automation_failed";
-
-export type Trigger =
-  | {
-      kind: "metric_threshold";
-      hostSelector: HostSelector;
-      metric: MetricPath;
-      operator: Operator;
-      value: number;
-      /** Sustained breach window before firing. 0 fires immediately. */
-      forSeconds?: number;
-      cooldownMinutes: number;
-      severity?: Severity;
-    }
-  | {
-      kind: "host_status";
-      hostSelector: HostSelector;
-      to: HostStatusState;
-      cooldownMinutes: number;
-    }
-  | {
-      kind: "health_check";
-      hostSelector: HostSelector;
-      checkId?: string;
-      to: HealthCheckState;
-      cooldownMinutes: number;
-    }
-  | {
-      kind: "schedule";
-      /** Five field cron. Ignored when intervalSeconds is set. */
-      cron?: string;
-      intervalSeconds?: number;
-      timezone?: string;
-    }
-  | {
-      kind: "docker_event";
-      hostSelector: HostSelector;
-      container?: string;
-      event: DockerEventKind;
-      cooldownMinutes: number;
-    }
-  | {
-      kind: "internal_event";
-      event: InternalEventKind;
-      hostSelector?: HostSelector;
-      cooldownMinutes: number;
-    }
-  | {
-      kind: "webhook";
-      /** Only the hash is persisted. The raw token is shown once on creation. */
-      tokenHash: string;
-    };
-
-export type TriggerKind = Trigger["kind"];
-
-/** A comparison used by `if` steps, evaluated against the run context. */
-export interface Condition {
-  /** Template string, e.g. "{{steps.check.stdout}}" or "{{trigger.value}}". */
-  left: string;
-  operator: Operator;
-  /** Template string. Compared numerically when both sides parse as numbers. */
-  right?: string;
-}
-
-export type StepErrorPolicy = "stop" | "continue" | "branch";
-
-interface StepBase {
-  /** Stable across edits so run history survives reordering. */
-  id: string;
-  name?: string;
-  enabled?: boolean;
-  onError?: StepErrorPolicy;
-  timeoutMs?: number;
-}
-
-export type Step =
-  | (StepBase & {
-      type: "notify";
-      channelIds: number[];
-      title?: string;
-      body?: string;
-      severity?: Severity;
-    })
-  | (StepBase & {
-      type: "http";
-      method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
-      url: string;
-      headers?: Record<string, string>;
-      body?: string;
-      /** Opt in to LAN/private addresses. Off by default, see safe-outbound-fetch. */
-      allowPrivateNetwork?: boolean;
-    })
-  | (StepBase & {
-      type: "run_snippet";
-      snippetId: number;
-      hostSelector: HostSelector;
-      inputValues?: Record<string, string>;
-      elevated?: boolean;
-    })
-  | (StepBase & {
-      type: "run_command";
-      command: string;
-      hostSelector: HostSelector;
-      elevated?: boolean;
-    })
-  | (StepBase & {
-      type: "docker";
-      action: "start" | "stop" | "restart";
-      container: string;
-      hostSelector: HostSelector;
-    })
-  | (StepBase & {
-      type: "tunnel";
-      action: "connect" | "disconnect";
-      tunnelName: string;
-    })
-  | (StepBase & { type: "wol"; hostId: number })
-  | (StepBase & { type: "wait"; seconds: number })
-  | (StepBase & { type: "set_var"; name: string; value: string })
-  | (StepBase & {
-      type: "if";
-      condition: Condition;
-      then: Step[];
-      else?: Step[];
-    })
-  | (StepBase & { type: "run_automation"; automationId: number })
-  | (StepBase & { type: "stop"; status?: "success" | "failed" });
-
-export type StepType = Step["type"];
-
-export interface AutomationDefinition {
-  version: number;
-  trigger: Trigger;
-  steps: Step[];
-}
-
-export type ConcurrencyPolicy = "skip" | "queue" | "allow";
-
-export type RunStatus =
-  "running" | "success" | "failed" | "timeout" | "skipped" | "cancelled";
-
-export type StepStatus =
-  "pending" | "running" | "success" | "failed" | "skipped";
-
-export interface Automation {
-  id: number;
-  userId: string;
-  name: string;
-  description: string | null;
-  enabled: boolean;
-  definition: AutomationDefinition;
-  concurrencyPolicy: ConcurrencyPolicy;
-  maxRunSeconds: number;
-  dryRun: boolean;
-  lastRunAt: string | null;
-  lastRunStatus: RunStatus | null;
-  createdAt: string;
-  updatedAt: string;
-}
-
-export interface AutomationRun {
-  id: number;
-  automationId: number;
-  userId: string;
-  triggerType: TriggerKind | "manual";
-  triggerContext: Record<string, unknown> | null;
-  status: RunStatus;
-  startedAt: string;
-  finishedAt: string | null;
-  durationMs: number | null;
-  error: string | null;
-  dryRun: boolean;
-  parentRunId: number | null;
-}
-
-export interface AutomationRunStep {
-  id: number;
-  runId: number;
-  stepIndex: number;
-  stepId: string;
-  stepType: StepType;
-  status: StepStatus;
-  startedAt: string;
-  finishedAt: string | null;
-  output: string | null;
-  error: string | null;
-  truncated: boolean;
-}
-
-/** Defaults applied when an automation does not override them. */
-export const DEFAULT_MAX_RUN_SECONDS = 300;
-export const DEFAULT_STEP_TIMEOUT_MS = 60_000;
-export const DEFAULT_COOLDOWN_MINUTES = 15;
-/** Guards run_automation against direct and mutual recursion. */
-export const MAX_AUTOMATION_DEPTH = 5;
-/** Step output beyond this is truncated before it reaches the database. */
-export const MAX_STEP_OUTPUT_BYTES = 32_768;
-
-export const OPERATOR_LABELS: Record<Operator, string> = {
-  ">": "greater than",
-  "<": "less than",
-  ">=": "greater than or equal to",
-  "<=": "less than or equal to",
-  "==": "equals",
-  "!=": "does not equal",
-  contains: "contains",
-  not_contains: "does not contain",
-  changed: "changed",
-};
-
-/** Steps that reach outside Termix and are therefore stubbed in a dry run. */
-export const SIDE_EFFECTING_STEP_TYPES: readonly StepType[] = [
-  "notify",
-  "http",
-  "run_snippet",
-  "run_command",
-  "docker",
-  "tunnel",
-  "wol",
-];
-
-export function isSideEffectingStep(type: StepType): boolean {
-  return SIDE_EFFECTING_STEP_TYPES.includes(type);
-}
diff --git a/plugins/automations/tests/backend/activate.test.ts b/plugins/automations/tests/backend/activate.test.ts
deleted file mode 100644
index 4b4ea31b6..000000000
--- a/plugins/automations/tests/backend/activate.test.ts
+++ /dev/null
@@ -1,82 +0,0 @@
-import express from "express";
-import { afterEach, describe, expect, it } from "vitest";
-import { PluginCapabilityError } from "@termix/plugin-sdk/backend";
-import {
-  createMockCtx,
-  createTestDb,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import { activate } from "../../src/backend/index.js";
-import {
-  NOTIFICATION_CHANNELS_DDL,
-  definition,
-  manifest,
-  pluginDir,
-  startServer,
-  type TestServer,
-} from "./helpers";
-
-let db: TestDb | null = null;
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  db?.close();
-  db = null;
-  await server?.close();
-  server = null;
-});
-
-describe("automations activate", () => {
-  it("provides automations.access and mounts the webhook as public", async () => {
-    server = await startServer();
-    expect(server.mock.services.get("automations.access")).toBeDefined();
-    expect(server.mock.httpRouters).toEqual([{ public: ["/webhook/:token"] }]);
-  });
-
-  it.each(["db:own", "network:serve"])(
-    "fails closed without %s",
-    async (capability) => {
-      db = await createTestDb(pluginDir, {
-        before: (sqlite) => sqlite.exec(NOTIFICATION_CHANNELS_DDL),
-      });
-      const mock = createMockCtx({
-        pluginId: manifest.id,
-        manifest,
-        capabilities: manifest.capabilities.filter((c) => c !== capability),
-        db: db.database,
-        router: () => express.Router(),
-      });
-      await expect(activate(mock.ctx)).rejects.toBeInstanceOf(
-        PluginCapabilityError,
-      );
-      for (const dispose of [...mock.disposals].reverse()) await dispose();
-    },
-  );
-
-  it("cannot notify without notify:send", async () => {
-    server = await startServer();
-    const withoutNotify = createMockCtx({
-      pluginId: manifest.id,
-      manifest,
-      capabilities: manifest.capabilities.filter((c) => c !== "notify:send"),
-    });
-    await expect(
-      withoutNotify.ctx.notify.send({ title: "t", body: "b" } as never),
-    ).rejects.toBeInstanceOf(PluginCapabilityError);
-  });
-
-  it("stops every timer on deactivate", async () => {
-    server = await startServer();
-    await server.request("POST", "/", {
-      body: {
-        name: "Tick",
-        definition: definition({ kind: "schedule", intervalSeconds: 300 }),
-      },
-    });
-    for (const dispose of [...server.mock.disposals].reverse()) {
-      await Promise.resolve(dispose()).catch(() => {});
-    }
-    server.mock.disposals.length = 0;
-    expect(server.mock.scheduled.every((job) => job.stopped)).toBe(true);
-  });
-});
diff --git a/plugins/automations/tests/backend/conditions.test.ts b/plugins/automations/tests/backend/conditions.test.ts
deleted file mode 100644
index a3bc8632a..000000000
--- a/plugins/automations/tests/backend/conditions.test.ts
+++ /dev/null
@@ -1,192 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  compare,
-  extractMetricValue,
-  hasDwelled,
-  isCoolingDown,
-  metricStateKey,
-  severityForValue,
-  type MetricsSnapshot,
-} from "../../src/backend/conditions.js";
-
-const metrics: MetricsSnapshot = {
-  cpu: { percent: 42.5, load: [1.5, 1.2, 0.9] },
-  memory: { percent: 61, usedGiB: 7.5 },
-  disk: {
-    percent: 30,
-    filesystems: [
-      { mount: "/", percent: 30, availableBytes: 100 },
-      { mount: "/data", percent: 93.4, availableBytes: 25 },
-    ],
-  },
-  network: {
-    interfaces: [
-      { name: "eth0", rxBytes: "1000", txBytes: "2000" },
-      { name: "eth1", rxBytes: "50", txBytes: "60" },
-    ],
-  },
-  temperature: { highestCelsius: 71 },
-  uptime: { seconds: 86400 },
-  processes: { total: 210 },
-};
-
-describe("extractMetricValue", () => {
-  it("reads simple scalar paths", () => {
-    expect(extractMetricValue(metrics, { path: "cpu.percent" })).toBe(42.5);
-    expect(extractMetricValue(metrics, { path: "memory.percent" })).toBe(61);
-    expect(
-      extractMetricValue(metrics, { path: "temperature.highestCelsius" }),
-    ).toBe(71);
-    expect(extractMetricValue(metrics, { path: "uptime.seconds" })).toBe(86400);
-    expect(extractMetricValue(metrics, { path: "processes.total" })).toBe(210);
-  });
-
-  it("reads load averages positionally", () => {
-    expect(extractMetricValue(metrics, { path: "cpu.load1" })).toBe(1.5);
-    expect(extractMetricValue(metrics, { path: "cpu.load15" })).toBe(0.9);
-  });
-
-  it("reads a specific mount rather than the aggregate", () => {
-    // The motivating case: /data is nearly full while / is fine.
-    expect(
-      extractMetricValue(metrics, { path: "disk.percent", mount: "/data" }),
-    ).toBe(93.4);
-    expect(extractMetricValue(metrics, { path: "disk.percent" })).toBe(30);
-  });
-
-  it("returns null for a mount that is not present", () => {
-    expect(
-      extractMetricValue(metrics, { path: "disk.percent", mount: "/nope" }),
-    ).toBeNull();
-  });
-
-  it("selects a named interface and coerces string counters", () => {
-    expect(
-      extractMetricValue(metrics, { path: "network.rxBytes", iface: "eth1" }),
-    ).toBe(50);
-    expect(extractMetricValue(metrics, { path: "network.rxBytes" })).toBe(1000);
-  });
-
-  it("extracts per-interface network rates for bandwidth alerts", () => {
-    const rateMetrics = {
-      network: {
-        interfaces: [
-          { name: "eth0", rxRateBps: 1024, txRateBps: 2048 },
-          { name: "eth1", rxRateBps: 4096, txRateBps: 8192 },
-        ],
-      },
-    };
-
-    expect(
-      extractMetricValue(rateMetrics, {
-        path: "network.rxRateBps",
-        iface: "eth1",
-      }),
-    ).toBe(4096);
-    expect(
-      extractMetricValue(rateMetrics, {
-        path: "network.txRateBps",
-        iface: "eth0",
-      }),
-    ).toBe(2048);
-  });
-
-  it("returns null for missing metrics rather than throwing", () => {
-    expect(extractMetricValue(null, { path: "cpu.percent" })).toBeNull();
-    expect(extractMetricValue({}, { path: "cpu.percent" })).toBeNull();
-    expect(
-      extractMetricValue({ cpu: { percent: null } }, { path: "cpu.percent" }),
-    ).toBeNull();
-  });
-});
-
-describe("metricStateKey", () => {
-  it("scopes state per mount so dwell tracks one filesystem", () => {
-    expect(metricStateKey(7, { path: "disk.percent" })).toBe("7");
-    expect(metricStateKey(7, { path: "disk.percent", mount: "/data" })).toBe(
-      "7:/data",
-    );
-    expect(metricStateKey(7, { path: "network.rxBytes", iface: "eth1" })).toBe(
-      "7:eth1",
-    );
-  });
-});
-
-describe("compare", () => {
-  it("handles numeric operators", () => {
-    expect(compare(93, ">", 90)).toBe(true);
-    expect(compare(90, ">", 90)).toBe(false);
-    expect(compare(90, ">=", 90)).toBe(true);
-    expect(compare(10, "<", 90)).toBe(true);
-    expect(compare(90, "<=", 90)).toBe(true);
-  });
-
-  it("compares numeric strings numerically", () => {
-    expect(compare("93", ">", "90")).toBe(true);
-    // Lexically "9" > "10", so this would be wrong as a string compare.
-    expect(compare("9", "<", "10")).toBe(true);
-  });
-
-  it("falls back to string equality for non-numeric values", () => {
-    expect(compare("running", "==", "running")).toBe(true);
-    expect(compare("running", "!=", "exited")).toBe(true);
-  });
-
-  it("handles containment", () => {
-    expect(compare("disk full", "contains", "full")).toBe(true);
-    expect(compare("disk full", "not_contains", "full")).toBe(false);
-    expect(compare("all good", "not_contains", "error")).toBe(true);
-  });
-
-  it("treats changed as inequality of the rendered values", () => {
-    expect(compare("online", "changed", "offline")).toBe(true);
-    expect(compare("online", "changed", "online")).toBe(false);
-  });
-
-  it("is false when a numeric comparison has a non-numeric side", () => {
-    expect(compare("abc", ">", 5)).toBe(false);
-  });
-});
-
-describe("isCoolingDown", () => {
-  const now = Date.parse("2026-01-01T12:00:00.000Z");
-
-  it("is false when nothing has fired yet", () => {
-    expect(isCoolingDown(null, 15, now)).toBe(false);
-  });
-
-  it("is true inside the window and false outside it", () => {
-    expect(isCoolingDown("2026-01-01T11:50:00.000Z", 15, now)).toBe(true);
-    expect(isCoolingDown("2026-01-01T11:40:00.000Z", 15, now)).toBe(false);
-  });
-
-  it("treats a zero cooldown as always ready", () => {
-    expect(isCoolingDown("2026-01-01T11:59:59.000Z", 0, now)).toBe(false);
-  });
-});
-
-describe("hasDwelled", () => {
-  const now = Date.parse("2026-01-01T12:00:00.000Z");
-
-  it("fires immediately when no window is configured", () => {
-    expect(hasDwelled(null, undefined, now)).toBe(true);
-    expect(hasDwelled(null, 0, now)).toBe(true);
-  });
-
-  it("requires the window to have elapsed", () => {
-    expect(hasDwelled("2026-01-01T11:49:00.000Z", 600, now)).toBe(true);
-    expect(hasDwelled("2026-01-01T11:55:00.000Z", 600, now)).toBe(false);
-  });
-
-  it("is false when a window is set but no breach is open", () => {
-    expect(hasDwelled(null, 600, now)).toBe(false);
-  });
-});
-
-describe("severityForValue", () => {
-  it("escalates at 95 and honours an explicit override", () => {
-    expect(severityForValue(96)).toBe("critical");
-    expect(severityForValue(90)).toBe("warning");
-    expect(severityForValue(96, "info")).toBe("info");
-  });
-});
diff --git a/plugins/automations/tests/backend/cron.test.ts b/plugins/automations/tests/backend/cron.test.ts
deleted file mode 100644
index 318600bc5..000000000
--- a/plugins/automations/tests/backend/cron.test.ts
+++ /dev/null
@@ -1,182 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  computeNextDueAt,
-  isValidCron,
-  isValidTimezone,
-  nextCronRun,
-  parseCron,
-} from "../../src/backend/cron.js";
-
-describe("parseCron", () => {
-  it("rejects anything that is not five fields", () => {
-    expect(() => parseCron("* * * *")).toThrow(/five fields/);
-    expect(() => parseCron("* * * * * *")).toThrow(/five fields/);
-  });
-
-  it("expands wildcards, lists, ranges and steps", () => {
-    const fields = parseCron("0,30 9-17 * * 1-5");
-    expect([...fields.minutes]).toEqual([0, 30]);
-    expect([...fields.hours]).toEqual([9, 10, 11, 12, 13, 14, 15, 16, 17]);
-    expect([...fields.daysOfWeek]).toEqual([1, 2, 3, 4, 5]);
-    expect(fields.dowRestricted).toBe(true);
-    expect(fields.domRestricted).toBe(false);
-  });
-
-  it("supports step syntax", () => {
-    expect([...parseCron("*/15 * * * *").minutes]).toEqual([0, 15, 30, 45]);
-  });
-
-  it("accepts month and day names", () => {
-    expect([...parseCron("0 0 1 jan *").months]).toEqual([1]);
-    expect([...parseCron("0 0 * * sun").daysOfWeek]).toEqual([0]);
-  });
-
-  it("treats day 7 as Sunday", () => {
-    expect([...parseCron("0 0 * * 7").daysOfWeek]).toEqual([0]);
-  });
-
-  it("rejects out of range values", () => {
-    expect(() => parseCron("60 * * * *")).toThrow(/out of range/);
-    expect(() => parseCron("* 24 * * *")).toThrow(/out of range/);
-    expect(() => parseCron("* * 0 * *")).toThrow(/out of range/);
-  });
-
-  it("reports validity without throwing", () => {
-    expect(isValidCron("*/5 * * * *")).toBe(true);
-    expect(isValidCron("nonsense")).toBe(false);
-  });
-});
-
-describe("nextCronRun", () => {
-  it("finds the next matching minute", () => {
-    const from = new Date(2026, 0, 1, 10, 3, 30);
-    expect(nextCronRun("*/15 * * * *", from)).toEqual(
-      new Date(2026, 0, 1, 10, 15, 0, 0),
-    );
-  });
-
-  it("never returns the starting minute", () => {
-    const from = new Date(2026, 0, 1, 10, 0, 0);
-    expect(nextCronRun("0 * * * *", from)).toEqual(
-      new Date(2026, 0, 1, 11, 0, 0, 0),
-    );
-  });
-
-  it("rolls into the next day", () => {
-    const from = new Date(2026, 0, 1, 23, 45, 0);
-    expect(nextCronRun("0 2 * * *", from)).toEqual(
-      new Date(2026, 0, 2, 2, 0, 0, 0),
-    );
-  });
-
-  it("unions day-of-month and day-of-week when both are set", () => {
-    // The 15th, or any Monday.
-    const from = new Date(2026, 0, 1, 0, 0, 0);
-    const next = nextCronRun("0 0 15 * 1", from);
-    expect(next).not.toBeNull();
-    const isFifteenth = next!.getDate() === 15;
-    const isMonday = next!.getDay() === 1;
-    expect(isFifteenth || isMonday).toBe(true);
-  });
-
-  it("gives up on a date that can never match", () => {
-    expect(nextCronRun("0 0 30 2 *", new Date(2026, 0, 1))).toBeNull();
-  });
-});
-
-describe("computeNextDueAt", () => {
-  it("prefers an interval over a cron expression", () => {
-    const from = new Date("2026-01-01T00:00:00.000Z");
-    expect(
-      computeNextDueAt({ intervalSeconds: 300, cron: "0 0 * * *" }, from),
-    ).toBe("2026-01-01T00:05:00.000Z");
-  });
-
-  it("falls back to cron", () => {
-    const from = new Date(2026, 0, 1, 10, 0, 0);
-    const due = computeNextDueAt({ cron: "30 10 * * *" }, from);
-    expect(due).toBe(new Date(2026, 0, 1, 10, 30, 0, 0).toISOString());
-  });
-
-  it("returns null when nothing is scheduled", () => {
-    expect(computeNextDueAt({})).toBeNull();
-  });
-
-  it("passes the zone through to the cron evaluation", () => {
-    // 02:00 in Tokyo on 2026-06-02 is 17:00 UTC on 2026-06-01.
-    const from = new Date("2026-06-01T00:00:00.000Z");
-    expect(
-      computeNextDueAt({ cron: "0 2 * * *", timezone: "Asia/Tokyo" }, from),
-    ).toBe("2026-06-01T17:00:00.000Z");
-  });
-
-  it("ignores the zone for interval schedules", () => {
-    const from = new Date("2026-01-01T00:00:00.000Z");
-    expect(
-      computeNextDueAt({ intervalSeconds: 600, timezone: "Asia/Tokyo" }, from),
-    ).toBe("2026-01-01T00:10:00.000Z");
-  });
-});
-
-describe("time zone handling", () => {
-  it("resolves a daily cron against the given zone", () => {
-    const from = new Date("2026-06-01T00:00:00.000Z");
-    // 09:30 New York in June (UTC-4) is 13:30 UTC.
-    const next = nextCronRun("30 9 * * *", from, "America/New_York");
-    expect(next?.toISOString()).toBe("2026-06-01T13:30:00.000Z");
-  });
-
-  it("tracks daylight saving, so the UTC instant shifts by an hour", () => {
-    const summer = nextCronRun(
-      "0 12 * * *",
-      new Date("2026-07-01T00:00:00.000Z"),
-      "America/New_York",
-    );
-    const winter = nextCronRun(
-      "0 12 * * *",
-      new Date("2026-01-01T00:00:00.000Z"),
-      "America/New_York",
-    );
-
-    // Noon local both times, but UTC-4 in July and UTC-5 in January.
-    expect(summer?.toISOString()).toBe("2026-07-01T16:00:00.000Z");
-    expect(winter?.toISOString()).toBe("2026-01-01T17:00:00.000Z");
-  });
-
-  it("matches the day of week in the target zone, not the server's", () => {
-    // 23:00 UTC Sunday is already Monday in Tokyo.
-    const next = nextCronRun(
-      "0 8 * * mon",
-      new Date("2026-06-07T22:00:00.000Z"),
-      "Asia/Tokyo",
-    );
-    expect(next?.toISOString()).toBe("2026-06-07T23:00:00.000Z");
-  });
-
-  it("falls back to server time for an unknown zone instead of throwing", () => {
-    const from = new Date(2026, 0, 1, 10, 0, 0);
-    const next = nextCronRun("30 10 * * *", from, "Not/AZone");
-    expect(next).toEqual(new Date(2026, 0, 1, 10, 30, 0, 0));
-  });
-
-  it("handles midnight, which some hour cycles format as 24", () => {
-    const next = nextCronRun(
-      "0 0 * * *",
-      new Date("2026-06-01T10:00:00.000Z"),
-      "UTC",
-    );
-    expect(next?.toISOString()).toBe("2026-06-02T00:00:00.000Z");
-  });
-});
-
-describe("isValidTimezone", () => {
-  it("accepts real zones", () => {
-    expect(isValidTimezone("UTC")).toBe(true);
-    expect(isValidTimezone("Europe/London")).toBe(true);
-  });
-
-  it("rejects made-up ones", () => {
-    expect(isValidTimezone("Middle/Earth")).toBe(false);
-    expect(isValidTimezone("")).toBe(false);
-  });
-});
diff --git a/plugins/automations/tests/backend/engine-runtime.test.ts b/plugins/automations/tests/backend/engine-runtime.test.ts
deleted file mode 100644
index 5565e7dc9..000000000
--- a/plugins/automations/tests/backend/engine-runtime.test.ts
+++ /dev/null
@@ -1,458 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { definition, startServer, type TestServer } from "./helpers";
-
-/**
- * The engine as activate() wires it: the ctx.schedule tick, the services it
- * reaches, and what happens when a plugin an automation needs is off.
- */
-
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-});
-
-async function create(
-  s: TestServer,
-  name: string,
-  body: ReturnType<typeof definition>,
-): Promise<number> {
-  const created = await s.request("POST", "/", {
-    body: { name, definition: body },
-  });
-  expect(created.status).toBe(201);
-  return created.body.id;
-}
-
-function makeDue(s: TestServer, automationId: number) {
-  s.db.sqlite
-    .prepare(
-      "UPDATE p_automations_schedules SET next_due_at = ? WHERE automation_id = ?",
-    )
-    .run(new Date(Date.now() - 60_000).toISOString(), automationId);
-}
-
-describe("scheduled automations", () => {
-  it("fire from the ctx.schedule tick and notify as the owner", async () => {
-    server = await startServer();
-    const id = await create(
-      server,
-      "Every five minutes",
-      definition({ kind: "schedule", intervalSeconds: 300 }, [
-        {
-          id: "n",
-          type: "notify",
-          channelIds: [1],
-          title: "Ping {{trigger.type}}",
-          body: "hello",
-        },
-      ]),
-    );
-    makeDue(server, id);
-
-    // The tick is registered through ctx.schedule, never a bare timer.
-    expect(server.mock.scheduled.filter((job) => !job.stopped).length).toBe(2);
-    await server.mock.runScheduled();
-
-    expect(await server.waitForRun(id)).toEqual({
-      status: "success",
-      error: null,
-    });
-    expect(server.mock.notifications).toEqual([
-      {
-        actor: "alice",
-        notification: expect.objectContaining({
-          title: "Ping schedule",
-          body: "hello",
-          category: "automations.notify",
-          audience: { userId: "alice" },
-          channelIds: [1],
-        }),
-      },
-    ]);
-
-    // The next due time moved forward, so the next tick does not re-run it.
-    const due = server.db.sqlite
-      .prepare(
-        "SELECT next_due_at FROM p_automations_schedules WHERE automation_id = ?",
-      )
-      .get(id) as { next_due_at: string };
-    expect(new Date(due.next_due_at).getTime()).toBeGreaterThan(Date.now());
-  });
-
-  it("are skipped with a reason while the docker plugin is off, and the engine keeps going", async () => {
-    server = await startServer();
-    const needsDocker = await create(
-      server,
-      "Restart app",
-      definition({ kind: "schedule", intervalSeconds: 300 }, [
-        {
-          id: "d",
-          type: "docker",
-          action: "restart",
-          container: "app",
-          hostSelector: { kind: "host", hostId: 1 },
-        },
-      ]),
-    );
-    const plain = await create(
-      server,
-      "Plain",
-      definition({ kind: "schedule", intervalSeconds: 300 }),
-    );
-    makeDue(server, needsDocker);
-    makeDue(server, plain);
-
-    await server.mock.runScheduled();
-
-    expect(await server.waitForRun(needsDocker)).toEqual({
-      status: "skipped",
-      error: "Needs the docker plugin",
-    });
-    expect(await server.waitForRun(plain)).toEqual({
-      status: "success",
-      error: null,
-    });
-
-    // A manual run says the same thing instead of throwing.
-    const manual = await server.request("POST", `/${needsDocker}/run`, {
-      body: {},
-    });
-    expect(manual.status).toBe(200);
-    expect(manual.body).toMatchObject({
-      status: "skipped",
-      error: "Needs the docker plugin",
-    });
-  });
-
-  it("run once docker is back", async () => {
-    const actions: unknown[] = [];
-    server = await startServer({
-      services: {
-        "docker.containers": {
-          action: async (...args: unknown[]) => {
-            actions.push(args);
-          },
-        },
-      },
-    });
-    const id = await create(
-      server,
-      "Restart app",
-      definition({ kind: "schedule", intervalSeconds: 300 }, [
-        {
-          id: "d",
-          type: "docker",
-          action: "restart",
-          container: "app",
-          hostSelector: { kind: "host", hostId: 1 },
-        },
-      ]),
-    );
-    const outcome = await server.request("POST", `/${id}/run`, { body: {} });
-    // Host 1 does not resolve here, so the step has no target, but the
-    // automation is no longer skipped for a missing plugin.
-    expect(outcome.body.status).not.toBe("skipped");
-  });
-});
-
-describe("automations.access", () => {
-  it("lists, reads, creates disabled and runs as the caller", async () => {
-    server = await startServer();
-    const service = server.service;
-
-    const created = await server.mock.ctx.asUser("alice", () =>
-      service.create({
-        name: "From the assistant",
-        definition: definition({ kind: "schedule", intervalSeconds: 600 }),
-      }),
-    );
-    const listed = await server.mock.ctx.asUser("alice", () => service.list());
-    expect(listed).toEqual([
-      expect.objectContaining({
-        id: created.id,
-        enabled: false,
-        triggerKind: "schedule",
-        missingPlugins: [],
-      }),
-    ]);
-
-    const one = await server.mock.ctx.asUser("alice", () =>
-      service.get(created.id),
-    );
-    expect(one?.definition?.trigger.kind).toBe("schedule");
-    expect(
-      await server.mock.ctx.asUser("bob", () => service.get(created.id)),
-    ).toBeNull();
-
-    const outcome = await server.mock.ctx.asUser("alice", () =>
-      service.run(created.id, { dryRun: true }),
-    );
-    expect(outcome.status).toBe("success");
-  });
-
-  it("refuses an invalid definition", async () => {
-    server = await startServer();
-    await expect(
-      server.mock.ctx.asUser("alice", () =>
-        server!.service.create({ name: "x", definition: { steps: [] } }),
-      ),
-    ).rejects.toThrow(/trigger/);
-  });
-});
-
-describe("optional steps", () => {
-  it("fail the step cleanly while the tunnels plugin is off", async () => {
-    server = await startServer();
-    const id = await create(
-      server,
-      "Tunnel",
-      definition({ kind: "webhook" }, [
-        { id: "t", type: "tunnel", action: "connect", tunnelName: "db" },
-      ]),
-    );
-    const outcome = await server.request("POST", `/${id}/run`, { body: {} });
-    expect(outcome.body).toMatchObject({
-      status: "skipped",
-      error: "Needs the tunnels plugin",
-    });
-  });
-
-  it("start a tunnel through tunnels.access", async () => {
-    const started: string[] = [];
-    server = await startServer({
-      services: {
-        "tunnels.access": {
-          start: async (name: string) => {
-            started.push(name);
-          },
-          stop: async () => {},
-        },
-      },
-    });
-    const id = await create(
-      server,
-      "Tunnel",
-      definition({ kind: "webhook" }, [
-        { id: "t", type: "tunnel", action: "connect", tunnelName: "db" },
-      ]),
-    );
-    const outcome = await server.request("POST", `/${id}/run`, { body: {} });
-    expect(outcome.body.status).toBe("success");
-    expect(started).toEqual(["db"]);
-  });
-
-  it("wake a host through the wake-on-lan service", async () => {
-    const woken: number[] = [];
-    server = await startServer({
-      services: {
-        "wake-on-lan.send": {
-          wake: async (hostId: number) => {
-            woken.push(hostId);
-          },
-        },
-      },
-    });
-    const id = await create(
-      server,
-      "Wake",
-      definition({ kind: "webhook" }, [{ id: "w", type: "wol", hostId: 2 }]),
-    );
-    const outcome = await server.request("POST", `/${id}/run`, { body: {} });
-    expect(outcome.body.status).toBe("success");
-    expect(woken).toEqual([2]);
-  });
-});
-
-describe("watchers", () => {
-  it("subscribe to docker.events as the owner and fire docker_event triggers", async () => {
-    let listener: ((event: unknown) => void) | null = null;
-    const subscribedAs: Array<string | undefined> = [];
-    server = await startServer({
-      services: {
-        "docker.events": {
-          subscribe: async (_hostId: number, fn: (event: unknown) => void) => {
-            listener = fn;
-            subscribedAs.push(server?.mock.ctx.currentActor());
-            return () => {
-              listener = null;
-            };
-          },
-        },
-      },
-    });
-    const id = await create(
-      server,
-      "Container died",
-      definition({
-        kind: "docker_event",
-        hostSelector: { kind: "host", hostId: 1 },
-        container: "app",
-        event: "exited",
-        cooldownMinutes: 0,
-      }),
-    );
-
-    await server.mock.runScheduled();
-    expect(subscribedAs).toEqual(["alice"]);
-    expect(listener).not.toBeNull();
-
-    listener!({ hostId: 1, container: "app", event: "exited" });
-    expect(await server.waitForRun(id)).toEqual({
-      status: "success",
-      error: null,
-    });
-  });
-
-  it("keep headless metrics viewers registered as the owner", async () => {
-    const registered: Array<[number, string | undefined]> = [];
-    let beats = 0;
-    server = await startServer({
-      services: {
-        "host-metrics.viewers": {
-          register: async (hostId: number) => {
-            registered.push([hostId, server?.mock.ctx.currentActor()]);
-            return { viewerSessionId: `v${hostId}` };
-          },
-          heartbeat: () => {
-            beats++;
-            return true;
-          },
-          unregister: () => {},
-        },
-      },
-    });
-    await create(
-      server,
-      "CPU",
-      definition({
-        kind: "metric_threshold",
-        hostSelector: { kind: "hosts", hostIds: [1, 2] },
-        metric: { path: "cpu.percent" },
-        operator: ">",
-        value: 90,
-        cooldownMinutes: 15,
-      }),
-    );
-
-    await server.mock.runScheduled();
-    expect(registered).toEqual([
-      [1, "alice"],
-      [2, "alice"],
-    ]);
-    const before = beats;
-    await server.mock.runScheduled();
-    // Each tick heartbeats both viewers and registers nothing new.
-    expect(beats).toBeGreaterThan(before);
-    expect((beats - before) % 2).toBe(0);
-    expect(registered).toHaveLength(2);
-  });
-
-  it("fire a metric trigger from a host-metrics snapshot event", async () => {
-    server = await startServer({
-      services: {
-        "host-metrics.viewers": {
-          register: async () => ({ viewerSessionId: "v" }),
-          heartbeat: () => true,
-          unregister: () => {},
-        },
-      },
-    });
-    const id = await create(
-      server,
-      "CPU",
-      definition({
-        kind: "metric_threshold",
-        hostSelector: { kind: "host", hostId: 1 },
-        metric: { path: "cpu.percent" },
-        operator: ">",
-        value: 90,
-        cooldownMinutes: 15,
-      }),
-    );
-
-    server.mock.ctx.events.emit("plugin.host-metrics.snapshot", {
-      hostId: 1,
-      ownerUserId: "alice",
-      metrics: { cpu: { percent: 97 } },
-    });
-    expect(await server.waitForRun(id)).toEqual({
-      status: "success",
-      error: null,
-    });
-  });
-});
-
-describe("alerts", () => {
-  const schedule = { kind: "schedule", intervalSeconds: 300 };
-
-  it("sends a notify step to the owner's inbox when no channel is picked", async () => {
-    server = await startServer();
-    const id = await create(
-      server,
-      "Inbox only",
-      definition(schedule, [
-        { id: "n", type: "notify", channelIds: [], title: "Heads up" },
-      ]),
-    );
-
-    const outcome = await server.request("POST", `/${id}/run`, { body: {} });
-
-    expect(outcome.body.status).toBe("success");
-    expect(server.mock.notifications).toEqual([
-      {
-        actor: "alice",
-        notification: expect.objectContaining({
-          title: "Heads up",
-          audience: { userId: "alice" },
-          channelIds: [],
-          link: { tab: "automations" },
-        }),
-      },
-    ]);
-  });
-
-  it("only describes the alert on a dry run", async () => {
-    server = await startServer();
-    const id = await create(
-      server,
-      "Dry",
-      definition(schedule, [
-        { id: "n", type: "notify", channelIds: [1], title: "Heads up" },
-      ]),
-    );
-
-    const outcome = await server.request("POST", `/${id}/run`, {
-      body: { dryRun: true },
-    });
-
-    expect(outcome.body.status).toBe("success");
-    expect(server.mock.notifications).toEqual([]);
-  });
-
-  it("alerts the owner when a run fails", async () => {
-    server = await startServer();
-    const id = await create(
-      server,
-      "Breaks",
-      definition(schedule, [{ id: "s", type: "stop", status: "failed" }]),
-    );
-
-    const outcome = await server.request("POST", `/${id}/run`, { body: {} });
-
-    expect(outcome.body.status).toBe("failed");
-    expect(server.mock.notifications).toEqual([
-      {
-        actor: "alice",
-        notification: expect.objectContaining({
-          title: 'Automation "Breaks" failed',
-          severity: "warning",
-          category: "automations.run_failed",
-          audience: { userId: "alice" },
-          dedupeKey: `automations.run_failed:${id}`,
-        }),
-      },
-    ]);
-  });
-});
diff --git a/plugins/automations/tests/backend/engine.test.ts b/plugins/automations/tests/backend/engine.test.ts
deleted file mode 100644
index 77b591d2e..000000000
--- a/plugins/automations/tests/backend/engine.test.ts
+++ /dev/null
@@ -1,615 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
-import { createFakeContext } from "@termix/plugin-sdk/testing";
-import type { PluginHostSummary } from "@termix/plugin-sdk/backend";
-import type { AutomationDefinition, Step } from "../../src/types.js";
-
-/**
- * The engine reaches the database through its repository and the outside
- * world through the step executors, so both are faked here. What is under
- * test is the run loop itself: ordering, branching, error policy,
- * concurrency, recursion and dry-run.
- */
-
-interface FakeAutomation {
-  id: number;
-  userId: string;
-  name: string;
-  enabled: boolean;
-  definition: string;
-  concurrencyPolicy: string;
-  maxRunSeconds: number;
-  dryRun: boolean;
-}
-
-const automations = new Map<number, FakeAutomation>();
-const runs: Array<Record<string, unknown>> = [];
-const runSteps: Array<Record<string, unknown>> = [];
-let nextRunId = 1;
-let nextStepRowId = 1;
-
-const repository = {
-  findById: vi.fn(async (id: number) => automations.get(id) ?? null),
-  createRun: vi.fn(async (input: Record<string, unknown>) => {
-    const run = { id: nextRunId++, ...input };
-    runs.push(run);
-    return run;
-  }),
-  finishRun: vi.fn(async (runId: number, input: Record<string, unknown>) => {
-    const run = runs.find((entry) => entry.id === runId);
-    if (run) Object.assign(run, input);
-  }),
-  createRunStep: vi.fn(async (input: Record<string, unknown>) => {
-    const id = nextStepRowId++;
-    runSteps.push({ id, ...input });
-    return id;
-  }),
-  finishRunStep: vi.fn(async (id: number, input: Record<string, unknown>) => {
-    const step = runSteps.find((entry) => entry.id === id);
-    if (step) Object.assign(step, input);
-  }),
-};
-
-let hosts: PluginHostSummary[] = [];
-
-const executeStep = vi.fn();
-vi.mock("../../src/backend/actions/index.js", () => ({
-  executeStep: (...args: unknown[]) => executeStep(...args),
-}));
-
-const { AutomationEngine } = await import("../../src/backend/engine.js");
-
-// Every provider is running unless a test says otherwise.
-const deps = { available: () => true };
-
-let current: InstanceType<typeof AutomationEngine>;
-function getEngine() {
-  return current;
-}
-function freshEngine() {
-  const { ctx } = createFakeContext({ pluginId: "automations", hosts });
-  current = new AutomationEngine(ctx, repository as never, deps as never);
-}
-
-function defineAutomation(
-  steps: Step[],
-  overrides: Partial<FakeAutomation> = {},
-): FakeAutomation {
-  const definition: AutomationDefinition = {
-    version: 1,
-    trigger: { kind: "webhook", tokenHash: "x" },
-    steps,
-  };
-  const automation: FakeAutomation = {
-    id: overrides.id ?? 1,
-    userId: "user-1",
-    name: "Test",
-    enabled: true,
-    definition: JSON.stringify(definition),
-    concurrencyPolicy: "skip",
-    maxRunSeconds: 300,
-    dryRun: false,
-    ...overrides,
-  };
-  automations.set(automation.id, automation);
-  return automation;
-}
-
-function step(partial: Partial<Step> & { id: string; type: string }): Step {
-  return partial as Step;
-}
-
-beforeEach(() => {
-  automations.clear();
-  runs.length = 0;
-  runSteps.length = 0;
-  nextRunId = 1;
-  nextStepRowId = 1;
-  vi.clearAllMocks();
-  hosts = [];
-  executeStep.mockResolvedValue({ success: true, output: "ok" });
-  freshEngine();
-});
-
-describe("AutomationEngine.run", () => {
-  it("adds the trigger host name to the template context", async () => {
-    defineAutomation([step({ id: "notify", type: "notify" })]);
-    hosts = [
-      {
-        id: 11,
-        userId: "user-1",
-        name: "Proxmox Node",
-        ip: "10.0.0.11",
-        port: 22,
-        username: "root",
-        tags: null,
-        folder: null,
-        authType: "password",
-      },
-    ];
-    freshEngine();
-
-    await getEngine().run({
-      automationId: 1,
-      triggerType: "metric_threshold",
-      triggerHostId: 11,
-      triggerContext: { hostId: 11, value: 97 },
-    });
-
-    const context = executeStep.mock.calls[0][1] as {
-      template: {
-        host: { id: number; name: string };
-        trigger: { hostName: string };
-      };
-    };
-    expect(context.template.host).toMatchObject({
-      id: 11,
-      name: "Proxmox Node",
-    });
-    expect(context.template.trigger.hostName).toBe("Proxmox Node");
-  });
-  it("runs steps in order and records each one", async () => {
-    defineAutomation([
-      step({ id: "a", type: "run_command" }),
-      step({ id: "b", type: "http" }),
-    ]);
-
-    const outcome = await getEngine().run({
-      automationId: 1,
-      triggerType: "manual",
-    });
-
-    expect(outcome.status).toBe("success");
-    expect(executeStep).toHaveBeenCalledTimes(2);
-    expect(runSteps.map((s) => s.stepId)).toEqual(["a", "b"]);
-    expect(runSteps.map((s) => s.stepIndex)).toEqual([0, 1]);
-  });
-
-  it("fails the run and stops when a step fails under the default policy", async () => {
-    defineAutomation([
-      step({ id: "a", type: "run_command" }),
-      step({ id: "b", type: "http" }),
-    ]);
-    executeStep.mockResolvedValueOnce({ success: false, error: "boom" });
-
-    const outcome = await getEngine().run({
-      automationId: 1,
-      triggerType: "manual",
-    });
-
-    expect(outcome.status).toBe("failed");
-    expect(outcome.error).toBe("boom");
-    expect(executeStep).toHaveBeenCalledTimes(1);
-  });
-
-  it("keeps going when a step is marked continue-on-error", async () => {
-    defineAutomation([
-      step({ id: "a", type: "run_command", onError: "continue" }),
-      step({ id: "b", type: "http" }),
-    ]);
-    executeStep.mockResolvedValueOnce({ success: false, error: "boom" });
-
-    const outcome = await getEngine().run({
-      automationId: 1,
-      triggerType: "manual",
-    });
-
-    expect(outcome.status).toBe("success");
-    expect(executeStep).toHaveBeenCalledTimes(2);
-  });
-
-  it("skips disabled steps", async () => {
-    defineAutomation([
-      step({ id: "a", type: "run_command", enabled: false }),
-      step({ id: "b", type: "http" }),
-    ]);
-
-    await getEngine().run({
-      automationId: 1,
-      triggerType: "manual",
-    });
-
-    expect(executeStep).toHaveBeenCalledTimes(1);
-    expect(runSteps.map((s) => s.stepId)).toEqual(["b"]);
-  });
-
-  it("passes earlier step output to later steps", async () => {
-    defineAutomation([
-      step({ id: "first", type: "run_command" }),
-      step({ id: "second", type: "http" }),
-    ]);
-    executeStep.mockResolvedValueOnce({ success: true, output: "hello" });
-
-    await getEngine().run({
-      automationId: 1,
-      triggerType: "manual",
-    });
-
-    const secondCallContext = executeStep.mock.calls[1][1] as {
-      template: { steps: Record<string, { stdout: string }> };
-    };
-    expect(secondCallContext.template.steps.first.stdout).toBe("hello");
-  });
-
-  it("merges variables set by a step into the template context", async () => {
-    defineAutomation([
-      step({ id: "setter", type: "set_var" }),
-      step({ id: "next", type: "http" }),
-    ]);
-    executeStep.mockResolvedValueOnce({
-      success: true,
-      output: "x = 1",
-      vars: { x: "1" },
-    });
-
-    await getEngine().run({
-      automationId: 1,
-      triggerType: "manual",
-    });
-
-    const context = executeStep.mock.calls[1][1] as {
-      template: { vars: Record<string, string> };
-    };
-    expect(context.template.vars.x).toBe("1");
-  });
-
-  describe("if branching", () => {
-    it("runs the then branch when the condition matches", async () => {
-      defineAutomation([
-        step({
-          id: "cond",
-          type: "if",
-          condition: { left: "93", operator: ">", right: "90" },
-          then: [step({ id: "yes", type: "http" })],
-          else: [step({ id: "no", type: "http" })],
-        }),
-      ]);
-
-      await getEngine().run({
-        automationId: 1,
-        triggerType: "manual",
-      });
-
-      expect(executeStep).toHaveBeenCalledTimes(1);
-      expect(runSteps.map((s) => s.stepId)).toEqual(["cond", "yes"]);
-    });
-
-    it("runs the else branch when it does not", async () => {
-      defineAutomation([
-        step({
-          id: "cond",
-          type: "if",
-          condition: { left: "10", operator: ">", right: "90" },
-          then: [step({ id: "yes", type: "http" })],
-          else: [step({ id: "no", type: "http" })],
-        }),
-      ]);
-
-      await getEngine().run({
-        automationId: 1,
-        triggerType: "manual",
-      });
-
-      expect(runSteps.map((s) => s.stepId)).toEqual(["cond", "no"]);
-    });
-
-    it("resolves templates on both sides of the condition", async () => {
-      defineAutomation([
-        step({
-          id: "cond",
-          type: "if",
-          condition: {
-            left: "{{trigger.value}}",
-            operator: ">=",
-            right: "90",
-          },
-          then: [step({ id: "yes", type: "http" })],
-        }),
-      ]);
-
-      await getEngine().run({
-        automationId: 1,
-        triggerType: "metric_threshold",
-        triggerContext: { value: 95 },
-      });
-
-      expect(runSteps.map((s) => s.stepId)).toEqual(["cond", "yes"]);
-    });
-
-    it("treats an empty else as a no-op", async () => {
-      defineAutomation([
-        step({
-          id: "cond",
-          type: "if",
-          condition: { left: "1", operator: "==", right: "2" },
-          then: [step({ id: "yes", type: "http" })],
-        }),
-        step({ id: "after", type: "http" }),
-      ]);
-
-      await getEngine().run({
-        automationId: 1,
-        triggerType: "manual",
-      });
-
-      expect(runSteps.map((s) => s.stepId)).toEqual(["cond", "after"]);
-    });
-  });
-
-  it("halts the run when a step returns a stop signal", async () => {
-    defineAutomation([
-      step({ id: "a", type: "run_command" }),
-      step({ id: "b", type: "http" }),
-    ]);
-    executeStep.mockResolvedValueOnce({
-      success: true,
-      halt: { status: "success" },
-    });
-
-    const outcome = await getEngine().run({
-      automationId: 1,
-      triggerType: "manual",
-    });
-
-    expect(outcome.status).toBe("success");
-    expect(executeStep).toHaveBeenCalledTimes(1);
-  });
-
-  it("marks the run failed when a stop step asks for failure", async () => {
-    defineAutomation([step({ id: "a", type: "run_command" })]);
-    executeStep.mockResolvedValueOnce({
-      success: true,
-      halt: { status: "failed" },
-    });
-
-    const outcome = await getEngine().run({
-      automationId: 1,
-      triggerType: "manual",
-    });
-
-    expect(outcome.status).toBe("failed");
-  });
-
-  describe("recursion protection", () => {
-    it("refuses to re-enter an automation already in the chain", async () => {
-      defineAutomation([
-        step({ id: "nested", type: "run_automation", automationId: 1 }),
-      ]);
-
-      const outcome = await getEngine().run({
-        automationId: 1,
-        triggerType: "manual",
-      });
-
-      // The nested call is refused, and the refusal is recorded on the step.
-      const nestedStep = runSteps.find((s) => s.stepId === "nested");
-      expect(nestedStep?.status).toBe("failed");
-      expect(String(nestedStep?.error)).toMatch(
-        /already running in this chain/,
-      );
-      expect(outcome.status).toBe("failed");
-    });
-
-    it("refuses a mutual cycle between two automations", async () => {
-      defineAutomation(
-        [step({ id: "toB", type: "run_automation", automationId: 2 })],
-        { id: 1 },
-      );
-      defineAutomation(
-        [step({ id: "toA", type: "run_automation", automationId: 1 })],
-        { id: 2 },
-      );
-
-      await getEngine().run({
-        automationId: 1,
-        triggerType: "manual",
-      });
-
-      const inner = runSteps.find((s) => s.stepId === "toA");
-      expect(inner?.status).toBe("failed");
-      expect(String(inner?.error)).toMatch(/already running in this chain/);
-    });
-
-    it("refuses to nest deeper than the maximum depth", async () => {
-      defineAutomation([step({ id: "a", type: "http" })]);
-
-      const outcome = await getEngine().run({
-        automationId: 1,
-        triggerType: "manual",
-        depth: 99,
-      });
-
-      expect(outcome.status).toBe("failed");
-      expect(outcome.error).toMatch(/depth/);
-      expect(runs).toHaveLength(0);
-    });
-  });
-
-  describe("concurrency", () => {
-    it("records a skipped run rather than dropping it silently", async () => {
-      defineAutomation([step({ id: "slow", type: "run_command" })], {
-        concurrencyPolicy: "skip",
-      });
-
-      let release: () => void = () => {};
-      executeStep.mockImplementationOnce(
-        () =>
-          new Promise((resolve) => {
-            release = () => resolve({ success: true, output: "done" });
-          }),
-      );
-
-      const engine = getEngine();
-      const first = engine.run({ automationId: 1, triggerType: "manual" });
-      // Let the first run register itself as in flight.
-      await new Promise((resolve) => setTimeout(resolve, 10));
-
-      const second = await engine.run({
-        automationId: 1,
-        triggerType: "manual",
-      });
-      expect(second.status).toBe("skipped");
-
-      release();
-      await first;
-
-      const skipped = runs.find((run) => run.status === "skipped");
-      expect(skipped).toBeDefined();
-      expect(String(skipped?.error)).toMatch(/still in progress/);
-    });
-
-    it("skips the second of two triggers that arrive in the same tick", async () => {
-      defineAutomation([step({ id: "slow", type: "run_command" })], {
-        concurrencyPolicy: "skip",
-      });
-
-      executeStep.mockImplementation(
-        () =>
-          new Promise((resolve) =>
-            setTimeout(() => resolve({ success: true, output: "done" }), 20),
-          ),
-      );
-
-      // No gap between the two: the in-flight slot used to be claimed several
-      // awaits after it was checked, so both runs got through.
-      const engine = getEngine();
-      const [first, second] = await Promise.all([
-        engine.run({ automationId: 1, triggerType: "manual" }),
-        engine.run({ automationId: 1, triggerType: "manual" }),
-      ]);
-
-      expect([first.status, second.status].sort()).toEqual([
-        "skipped",
-        "success",
-      ]);
-      expect(executeStep).toHaveBeenCalledTimes(1);
-    });
-
-    it("releases the in-flight slot when the run row cannot be created", async () => {
-      defineAutomation([step({ id: "a", type: "run_command" })]);
-      repository.createRun.mockRejectedValueOnce(new Error("db down"));
-
-      const engine = getEngine();
-      const failed = await engine.run({
-        automationId: 1,
-        triggerType: "manual",
-      });
-      expect(failed.status).toBe("failed");
-
-      // A leaked slot would make every later run skip forever.
-      const after = await engine.run({
-        automationId: 1,
-        triggerType: "manual",
-      });
-      expect(after.status).toBe("success");
-    });
-  });
-
-  it("propagates the dry-run flag to executors", async () => {
-    defineAutomation([step({ id: "a", type: "http" })], { dryRun: true });
-
-    await getEngine().run({
-      automationId: 1,
-      triggerType: "manual",
-    });
-
-    const context = executeStep.mock.calls[0][1] as { dryRun: boolean };
-    expect(context.dryRun).toBe(true);
-  });
-
-  it("lets a caller force a dry run on a live automation", async () => {
-    defineAutomation([step({ id: "a", type: "http" })], { dryRun: false });
-
-    await getEngine().run({
-      automationId: 1,
-      triggerType: "manual",
-      dryRun: true,
-    });
-
-    const context = executeStep.mock.calls[0][1] as { dryRun: boolean };
-    expect(context.dryRun).toBe(true);
-  });
-
-  it("fails cleanly when the automation is missing", async () => {
-    const outcome = await getEngine().run({
-      automationId: 404,
-      triggerType: "manual",
-    });
-    expect(outcome).toMatchObject({ status: "failed", runId: null });
-  });
-
-  it("fails cleanly when the definition is not valid JSON", async () => {
-    automations.set(1, {
-      id: 1,
-      userId: "user-1",
-      name: "Broken",
-      enabled: true,
-      definition: "not json",
-      concurrencyPolicy: "skip",
-      maxRunSeconds: 300,
-      dryRun: false,
-    });
-
-    const outcome = await getEngine().run({
-      automationId: 1,
-      triggerType: "manual",
-    });
-    expect(outcome.status).toBe("failed");
-    expect(outcome.error).toMatch(/not valid JSON/);
-  });
-
-  it("turns a thrown executor error into a failed step", async () => {
-    defineAutomation([step({ id: "a", type: "run_command" })]);
-    executeStep.mockRejectedValueOnce(new Error("connection reset"));
-
-    const outcome = await getEngine().run({
-      automationId: 1,
-      triggerType: "manual",
-    });
-
-    expect(outcome.status).toBe("failed");
-    expect(runSteps[0].status).toBe("failed");
-    expect(String(runSteps[0].error)).toMatch(/connection reset/);
-  });
-
-  it("truncates very large step output", async () => {
-    defineAutomation([step({ id: "a", type: "run_command" })]);
-    executeStep.mockResolvedValueOnce({
-      success: true,
-      output: "x".repeat(40_000),
-    });
-
-    await getEngine().run({
-      automationId: 1,
-      triggerType: "manual",
-    });
-
-    expect(runSteps[0].truncated).toBe(true);
-    expect(String(runSteps[0].output)).toMatch(/truncated/);
-  });
-
-  it("stops once the run deadline has passed", async () => {
-    defineAutomation(
-      [step({ id: "a", type: "run_command" }), step({ id: "b", type: "http" })],
-      { maxRunSeconds: 1 },
-    );
-
-    // The first step consumes the whole budget, so the second must not start.
-    executeStep.mockImplementationOnce(async () => {
-      vi.setSystemTime(Date.now() + 5_000);
-      return { success: true, output: "slow" };
-    });
-
-    vi.useFakeTimers({ shouldAdvanceTime: true });
-    try {
-      const outcome = await getEngine().run({
-        automationId: 1,
-        triggerType: "manual",
-      });
-
-      expect(outcome.status).toBe("timeout");
-      expect(executeStep).toHaveBeenCalledTimes(1);
-    } finally {
-      vi.useRealTimers();
-    }
-  });
-});
diff --git a/plugins/automations/tests/backend/helpers.ts b/plugins/automations/tests/backend/helpers.ts
deleted file mode 100644
index b9a84c45b..000000000
--- a/plugins/automations/tests/backend/helpers.ts
+++ /dev/null
@@ -1,205 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import type {
-  PluginHostSummary,
-  PluginNotificationChannel,
-} from "@termix/plugin-sdk/backend";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-import type { AutomationsAccessV1 } from "../../src/backend/service.js";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-export const manifest = manifestJson as unknown as PluginManifest;
-
-export const ALL_PERMISSIONS = [
-  "automations.view",
-  "automations.create",
-  "automations.edit",
-  "automations.delete",
-  "automations.run",
-];
-
-/** Core's notification_channels, which automation_channels points at. */
-export const NOTIFICATION_CHANNELS_DDL = `
-  CREATE TABLE notification_channels (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-    name TEXT NOT NULL,
-    type TEXT NOT NULL,
-    config TEXT NOT NULL,
-    enabled INTEGER NOT NULL DEFAULT 1,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
-  );
-`;
-
-export function host(id: number, userId = "alice"): PluginHostSummary {
-  return {
-    id,
-    userId,
-    name: `host-${id}`,
-    ip: `10.0.0.${id}`,
-    port: 22,
-    username: "root",
-    tags: null,
-    folder: null,
-    authType: "password",
-  };
-}
-
-/** A snippets.access provider, always there since snippets is a hard dependency. */
-export function fakeSnippets() {
-  return {
-    list: async () => [{ id: 5, name: "Restart nginx", isNote: false }],
-    get: async (id: number) =>
-      id === 5
-        ? {
-            id: 5,
-            name: "Restart nginx",
-            content: "systemctl restart nginx",
-            isNote: false,
-          }
-        : null,
-    resolveCommand: async (id: number) =>
-      id === 5 ? "systemctl restart nginx" : null,
-  };
-}
-
-export interface TestServer {
-  db: TestDb;
-  mock: MockPluginContext;
-  service: AutomationsAccessV1;
-  request: (
-    method: string,
-    path: string,
-    options?: { user?: string | null; body?: unknown },
-    // Route bodies vary per test; asserting on them is the point.
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any }>;
-  /** Waits until a run for the automation reaches a final status. */
-  waitForRun: (
-    automationId: number,
-  ) => Promise<{ status: string; error: string | null }>;
-  close: () => Promise<void>;
-}
-
-/**
- * The plugin activated against a real in-memory database, its router mounted
- * the way core mounts it: JSON parsed and the acting user set from the
- * request, everything else left to the plugin.
- */
-export async function startServer(
-  options: {
-    permissions?: string[];
-    services?: Record<string, object>;
-    hosts?: PluginHostSummary[];
-    channels?: PluginNotificationChannel[];
-    before?: (db: TestDb["sqlite"]) => void;
-  } = {},
-): Promise<TestServer> {
-  const db = await createTestDb(pluginDir, {
-    before: (sqlite) => {
-      sqlite.exec(NOTIFICATION_CHANNELS_DDL);
-      options.before?.(sqlite);
-    },
-  });
-  for (const user of ["alice", "bob"]) {
-    db.sqlite
-      .prepare("INSERT INTO users (id, username) VALUES (?, ?)")
-      .run(user, user);
-  }
-  const channels = options.channels ?? [
-    { id: 1, name: "ops", type: "webhook", enabled: true },
-  ];
-  for (const channel of channels) {
-    db.sqlite
-      .prepare(
-        "INSERT INTO notification_channels (id, user_id, name, type, config, enabled) VALUES (?, 'alice', ?, ?, '{}', ?)",
-      )
-      .run(channel.id, channel.name, channel.type, channel.enabled ? 1 : 0);
-  }
-
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    permissions: options.permissions ?? ALL_PERMISSIONS,
-    hosts: options.hosts ?? [host(1), host(2)],
-    notificationChannels: channels,
-    services: { "snippets.access": fakeSnippets(), ...options.services },
-  });
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") || undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    db,
-    mock,
-    service: mock.services.get("automations.access") as AutomationsAccessV1,
-    async request(method, path, { user = "alice", body: given } = {}) {
-      const body = method === "GET" ? undefined : given;
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        headers: {
-          ...(user ? { "x-test-user": user } : {}),
-          ...(body !== undefined ? { "content-type": "application/json" } : {}),
-        },
-        body: body !== undefined ? JSON.stringify(body) : undefined,
-      });
-      const text = await response.text();
-      return { status: response.status, body: text ? JSON.parse(text) : null };
-    },
-    async waitForRun(automationId) {
-      for (let attempt = 0; attempt < 100; attempt++) {
-        const row = db.sqlite
-          .prepare(
-            "SELECT status, error FROM p_automations_runs WHERE automation_id = ? AND status != 'running' ORDER BY id DESC LIMIT 1",
-          )
-          .get(automationId) as
-          { status: string; error: string | null } | undefined;
-        if (row) return row;
-        await new Promise((resolve) => setTimeout(resolve, 10));
-      }
-      throw new Error(`No finished run for automation ${automationId}`);
-    },
-    async close() {
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-      for (const dispose of [...mock.disposals].reverse()) {
-        await Promise.resolve(dispose()).catch(() => {});
-      }
-      db.close();
-    },
-  };
-}
-
-/** A definition with one step, for tests that only care about the trigger. */
-export function definition(
-  trigger: Record<string, unknown>,
-  steps: Array<Record<string, unknown>> = [
-    { id: "v", type: "set_var", name: "done", value: "yes" },
-  ],
-) {
-  return { version: 1, trigger, steps };
-}
diff --git a/plugins/automations/tests/backend/maintenance-scheduler.test.ts b/plugins/automations/tests/backend/maintenance-scheduler.test.ts
deleted file mode 100644
index a400faf9e..000000000
--- a/plugins/automations/tests/backend/maintenance-scheduler.test.ts
+++ /dev/null
@@ -1,47 +0,0 @@
-import { expect, it, vi } from "vitest";
-import { createScheduler } from "../../src/backend/scheduler.js";
-
-it("discards sustained breaches during maintenance but still runs scheduled work", async () => {
-  const run = vi.fn(async () => ({ runId: 1, status: "success" as const }));
-  const clearBreach = vi.fn(async () => {});
-  const repository = {
-    listDueSchedules: async () => [{ automationId: 2, intervalSeconds: 60 }],
-    markScheduleTicked: vi.fn(),
-    listOpenBreaches: async () => [
-      {
-        automationId: 1,
-        stateKey: "7:cpu.percent",
-        breachStartedAt: "2000-01-01T00:00:00Z",
-      },
-    ],
-    findById: async () => ({
-      id: 1,
-      userId: "alice",
-      enabled: true,
-      definition: JSON.stringify({
-        trigger: { kind: "metric_threshold", forSeconds: 60 },
-      }),
-    }),
-    clearBreach,
-    failStaleRunningRuns: vi.fn(),
-    pruneRunsOlderThan: async () => 0,
-  };
-  const maintaining = vi.fn(async () => true);
-  const scheduler = createScheduler({
-    repository: repository as never,
-    engine: { run },
-    log: { debug() {}, info() {}, warn() {}, error() {} },
-    reconcile: [],
-    isMaintaining: maintaining,
-  });
-  await scheduler.tick();
-  expect(maintaining).toHaveBeenCalledWith("alice", 7);
-  expect(clearBreach).toHaveBeenCalledWith(1, "7:cpu.percent");
-  expect(run).toHaveBeenCalledTimes(1);
-  expect(run).toHaveBeenCalledWith(
-    expect.objectContaining({
-      automationId: 2,
-      triggerType: "schedule",
-    }),
-  );
-});
diff --git a/plugins/automations/tests/backend/maintenance-time.test.ts b/plugins/automations/tests/backend/maintenance-time.test.ts
deleted file mode 100644
index 4d9eefcac..000000000
--- a/plugins/automations/tests/backend/maintenance-time.test.ts
+++ /dev/null
@@ -1,130 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  advanceMaintenance,
-  beginMaintenance,
-  nextOccurrence,
-  parsePlan,
-  plansOverlap,
-} from "../../src/backend/maintenance-time.js";
-import {
-  emptyMaintenance,
-  type MaintenancePlan,
-} from "../../src/maintenance.js";
-
-const at = (value: string) => Date.parse(value);
-const plan = (overrides: Partial<MaintenancePlan> = {}): MaintenancePlan => ({
-  id: "one",
-  reason: "Upgrade",
-  start: "2026-01-31T21:00:00.000Z",
-  nextStart: "2026-01-31T21:00:00.000Z",
-  durationMinutes: 60,
-  recurrence: "once",
-  graceMinutes: 20,
-  notifyOverdue: true,
-  ...overrides,
-});
-
-describe("maintenance calendar", () => {
-  it("keeps weekly UTC time across DST and skips missing monthly days", () => {
-    expect(
-      new Date(
-        nextOccurrence(
-          plan({ recurrence: "weekly" }),
-          at("2026-03-28T21:00Z"),
-        )!,
-      ).toISOString(),
-    ).toBe("2026-04-04T21:00:00.000Z");
-    expect(
-      new Date(
-        nextOccurrence(
-          plan({ recurrence: "monthly" }),
-          at("2026-01-31T21:00Z"),
-        )!,
-      ).toISOString(),
-    ).toBe("2026-03-31T21:00:00.000Z");
-    expect(nextOccurrence(plan(), at("2026-01-31T21:00Z"))).toBeNull();
-  });
-  it("rejects actual overlaps and accepts touching windows", () => {
-    expect(plansOverlap(plan(), plan({ start: "2026-01-31T21:59:00Z" }))).toBe(
-      true,
-    );
-    expect(plansOverlap(plan(), plan({ start: "2026-01-31T22:00:00Z" }))).toBe(
-      false,
-    );
-    expect(
-      plansOverlap(
-        plan({ recurrence: "monthly" }),
-        plan({ start: "2030-03-31T21:30:00Z" }),
-      ),
-    ).toBe(true);
-    expect(
-      plansOverlap(
-        plan({ recurrence: "weekly" }),
-        plan({ recurrence: "monthly", start: "2026-03-31T21:30:00Z" }),
-      ),
-    ).toBe(true);
-    expect(
-      plansOverlap(
-        plan({ recurrence: "weekly" }),
-        plan({ recurrence: "monthly", start: "2026-03-31T23:00:00Z" }),
-      ),
-    ).toBe(false);
-  });
-  it("does not end at ETM and merges a later nonoverlapping schedule", () => {
-    const state = emptyMaintenance();
-    state.plans = [
-      plan(),
-      plan({
-        id: "two",
-        reason: "Firmware",
-        start: "2026-01-31T22:30:00Z",
-        nextStart: "2026-01-31T22:30:00Z",
-      }),
-    ];
-    advanceMaintenance(state, at("2026-01-31T22:15Z"));
-    expect(state.active?.estimatedEnd).toBe("2026-01-31T22:00:00.000Z");
-    advanceMaintenance(state, at("2026-01-31T22:45Z"));
-    expect(state.active?.startedAt).toBe("2026-01-31T21:00:00.000Z");
-    expect(state.active?.estimatedEnd).toBe("2026-01-31T23:30:00.000Z");
-    expect(state.active?.reasons).toEqual(["Upgrade", "Firmware"]);
-    advanceMaintenance(state, at("2026-02-02T00:00Z"));
-    expect(state.active).not.toBeNull();
-  });
-  it("catches up after restart and never re-enters a consumed one-time plan", () => {
-    const state = emptyMaintenance();
-    state.plans = [plan({ recurrence: "monthly" })];
-    advanceMaintenance(state, at("2026-05-01T00:00Z"));
-    expect(state.active?.startedAt).toBe("2026-03-31T21:00:00.000Z");
-    expect(state.plans[0].nextStart).toBe("2026-05-31T21:00:00.000Z");
-    state.active = null;
-    advanceMaintenance(state, at("2026-05-01T00:00Z"));
-    expect(state.active).toBeNull();
-  });
-  it("preserves a delivered reminder unless a later estimate extends maintenance", () => {
-    const state = emptyMaintenance();
-    beginMaintenance(state, plan(), at("2026-01-31T21:00Z"));
-    state.active!.notified = true;
-    beginMaintenance(
-      state,
-      plan({ durationMinutes: 10 }),
-      at("2026-01-31T21:05Z"),
-    );
-    expect(state.active!.notified).toBe(true);
-    beginMaintenance(state, plan(), at("2026-01-31T22:30Z"));
-    expect(state.active!.notified).toBe(false);
-  });
-  it.each([
-    { reason: " " },
-    { durationMinutes: 0 },
-    { durationMinutes: 10081 },
-    { graceMinutes: -1 },
-    { recurrence: "daily" },
-    { notifyOverdue: "true" },
-    { start: "2020-01-01T00:00Z" },
-    { start: "2026-01-31T21:00:01Z" },
-  ])("rejects invalid input %j", (override) => {
-    expect(() =>
-      parsePlan(plan(override as never), at("2026-01-01T00:00Z")),
-    ).toThrow();
-  });
-});
diff --git a/plugins/automations/tests/backend/maintenance.test.ts b/plugins/automations/tests/backend/maintenance.test.ts
deleted file mode 100644
index ddcef56cb..000000000
--- a/plugins/automations/tests/backend/maintenance.test.ts
+++ /dev/null
@@ -1,224 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { startServer as createServer, host, type TestServer } from "./helpers";
-import { createMaintenanceRepository } from "../../src/backend/maintenance-repository.js";
-import { createMaintenanceService } from "../../src/backend/maintenance-service.js";
-
-function startServer(options: Parameters<typeof createServer>[0] = {}) {
-  return createServer({
-    ...options,
-    before: (db) => {
-      db.exec("INSERT INTO ssh_data (id) VALUES (1), (2)");
-      options.before?.(db);
-    },
-  });
-}
-
-let server: TestServer | undefined;
-afterEach(async () => {
-  vi.restoreAllMocks();
-  await server?.close();
-  server = undefined;
-});
-const input = {
-  action: "start",
-  reason: "OS upgrade",
-  durationMinutes: 60,
-  graceMinutes: 20,
-  notifyOverdue: true,
-};
-
-describe("host maintenance", () => {
-  it("shows a shared host the owner's maintenance read only and enforces edit permission", async () => {
-    // The mock serves every host to every user, as if alice shared host 1.
-    server = await startServer({ hosts: [host(1), host(2, "bob")] });
-    const started = await server.request("POST", "/maintenance/1", {
-      body: input,
-    });
-    expect(started.status).toBe(200);
-    expect(started.body).toMatchObject({ owned: true });
-
-    const listed = (
-      await server.request("GET", "/maintenance", { user: "bob" })
-    ).body as Array<{
-      hostId: number;
-      state: { owned: boolean; active: unknown };
-    }>;
-    expect(listed).toHaveLength(1);
-    expect(listed[0].hostId).toBe(1);
-    expect(listed[0].state.owned).toBe(false);
-    expect(listed[0].state.active).toBeTruthy();
-
-    const read = await server.request("GET", "/maintenance/1", { user: "bob" });
-    expect(read.status).toBe(200);
-    expect(read.body).toMatchObject({ owned: false });
-    expect(
-      (
-        await server.request("POST", "/maintenance/1", {
-          user: "bob",
-          body: { action: "end" },
-        })
-      ).status,
-    ).toBe(403);
-    expect(
-      (await server.request("GET", "/maintenance/99", { user: "bob" })).status,
-    ).toBe(404);
-    expect(
-      (await server.request("POST", "/maintenance/1x", { body: input })).status,
-    ).toBe(400);
-    expect(
-      (await server.request("GET", "/maintenance/1", { user: null })).status,
-    ).toBe(401);
-    await server.close();
-    server = await startServer({ permissions: ["automations.view"] });
-    expect(
-      (await server.request("POST", "/maintenance/1", { body: input })).status,
-    ).toBe(403);
-  });
-  it("survives service restart, remains active beyond ETM, and reminds only once with fresh offline evidence", async () => {
-    server = await startServer();
-    let now = Date.parse("2026-01-01T12:00Z");
-    vi.spyOn(Date, "now").mockImplementation(() => now);
-    await server.request("POST", "/maintenance/1", { body: input });
-    const repository = await createMaintenanceRepository(server.db.database);
-    let service = createMaintenanceService(server.mock.ctx, repository);
-    now = Date.parse("2026-01-01T13:21Z");
-    server.mock.hostStatuses.set(1, {
-      status: "offline",
-      lastChecked: "2026-01-01T12:00Z",
-    });
-    await service.tick();
-    expect(server.mock.notifications).toHaveLength(0);
-    server.mock.hostStatuses.set(1, {
-      status: "online",
-      lastChecked: "2026-01-01T13:21Z",
-    });
-    await service.tick();
-    expect(server.mock.notifications).toHaveLength(0);
-    server.mock.hostStatuses.set(1, {
-      status: "offline",
-      lastChecked: "2026-01-01T13:21Z",
-    });
-    await service.tick();
-    expect(server.mock.notifications).toHaveLength(1);
-    expect(server.mock.notifications[0].actor).toBe("alice");
-    service = createMaintenanceService(server.mock.ctx, repository);
-    await service.tick();
-    expect(server.mock.notifications).toHaveLength(1);
-    expect((await service.read("alice", 1)).active).not.toBeNull();
-    await service.edit("alice", 1, "end", {});
-    expect(await service.isMaintaining("alice", 1)).toBe(false);
-  });
-  it("serializes concurrent starts and conflicting schedules without losing state", async () => {
-    server = await startServer();
-    const service = createMaintenanceService(
-      server.mock.ctx,
-      await createMaintenanceRepository(server.db.database),
-    );
-    const starts = await Promise.allSettled([
-      service.edit("alice", 1, "start", input),
-      service.edit("alice", 1, "start", input),
-    ]);
-    expect(starts.map((r) => r.status).sort()).toEqual([
-      "fulfilled",
-      "rejected",
-    ]);
-    const start = new Date(
-      Math.ceil((Date.now() + 86400000) / 60000) * 60000,
-    ).toISOString();
-    const schedules = await Promise.allSettled([
-      service.edit("alice", 1, "schedule", {
-        ...input,
-        start,
-        recurrence: "weekly",
-      }),
-      service.edit("alice", 1, "schedule", {
-        ...input,
-        start,
-        recurrence: "monthly",
-      }),
-    ]);
-    expect(schedules.map((r) => r.status).sort()).toEqual([
-      "fulfilled",
-      "rejected",
-    ]);
-    expect((await service.read("alice", 1)).plans).toHaveLength(1);
-  });
-  it("starts a due schedule before accepting status events and handles deletion", async () => {
-    server = await startServer();
-    let now = Date.parse("2026-01-01T12:00Z");
-    vi.spyOn(Date, "now").mockImplementation(() => now);
-    const service = createMaintenanceService(
-      server.mock.ctx,
-      await createMaintenanceRepository(server.db.database),
-    );
-    await service.edit("alice", 1, "schedule", {
-      ...input,
-      start: "2026-01-01T13:00:00Z",
-      recurrence: "once",
-    });
-    expect(await service.isMaintaining("alice", 1)).toBe(false);
-    now = Date.parse("2026-01-01T13:00Z");
-    expect(await service.isMaintaining("alice", 1)).toBe(true);
-    const state = await service.read("alice", 1);
-    await service.edit("alice", 1, "remove", { id: state.plans[0].id });
-    expect(await service.isMaintaining("alice", 1)).toBe(true);
-    await service.wipeUser("alice");
-    expect(await service.list("alice")).toEqual([]);
-  });
-  it("clears old dwell windows on start and end and cascades host deletion", async () => {
-    server = await startServer();
-    const created = await server.request("POST", "/", {
-      body: {
-        name: "CPU",
-        definition: {
-          version: 1,
-          trigger: {
-            kind: "metric_threshold",
-            hostSelector: { kind: "host", hostId: 1 },
-            metric: { path: "cpu.percent" },
-            operator: ">",
-            value: 90,
-            forSeconds: 60,
-            cooldownMinutes: 0,
-          },
-          steps: [],
-        },
-      },
-    });
-    expect(created.status).toBe(201);
-    const { createAutomationRepository } =
-      await import("../../src/backend/repository.js");
-    const repository = await createAutomationRepository(
-      server.db.database,
-      async () => [],
-    );
-    const seed = () =>
-      repository.upsertTriggerState({
-        automationId: created.body.id,
-        stateKey: "1",
-        breachStartedAt: "2000-01-01T00:00:00Z",
-      });
-    await seed();
-    expect(
-      (await server.request("POST", "/maintenance/1", { body: input })).status,
-    ).toBe(200);
-    expect(
-      (await repository.getTriggerState(created.body.id, "1"))?.breachStartedAt,
-    ).toBeNull();
-    await seed();
-    expect(
-      (
-        await server.request("POST", "/maintenance/1", {
-          body: { action: "end" },
-        })
-      ).status,
-    ).toBe(200);
-    expect(
-      (await repository.getTriggerState(created.body.id, "1"))?.breachStartedAt,
-    ).toBeNull();
-    server.db.sqlite.prepare("DELETE FROM ssh_data WHERE id = 1").run();
-    expect(
-      await (await createMaintenanceRepository(server.db.database)).list(),
-    ).toEqual([]);
-  });
-});
diff --git a/plugins/automations/tests/backend/migrations.test.ts b/plugins/automations/tests/backend/migrations.test.ts
deleted file mode 100644
index 5316957e9..000000000
--- a/plugins/automations/tests/backend/migrations.test.ts
+++ /dev/null
@@ -1,259 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { createTestDb, type TestDb } from "@termix/plugin-sdk/testing";
-import { NOTIFICATION_CHANNELS_DDL, pluginDir } from "./helpers";
-
-// The six tables as core's SQLite bootstrap created them before 2.9.0, with
-// the indexes performance-indexes.ts added.
-const LEGACY_DDL = `
-  CREATE TABLE automations (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-    name TEXT NOT NULL,
-    description TEXT,
-    enabled INTEGER NOT NULL DEFAULT 1,
-    definition TEXT NOT NULL,
-    definition_version INTEGER NOT NULL DEFAULT 1,
-    concurrency_policy TEXT NOT NULL DEFAULT 'skip',
-    max_run_seconds INTEGER NOT NULL DEFAULT 300,
-    dry_run INTEGER NOT NULL DEFAULT 0,
-    last_run_at TEXT,
-    last_run_status TEXT,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
-  );
-  CREATE TABLE automation_trigger_state (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    automation_id INTEGER NOT NULL REFERENCES automations(id) ON DELETE CASCADE,
-    state_key TEXT NOT NULL,
-    breach_started_at TEXT,
-    last_fired_at TEXT,
-    last_value REAL,
-    last_observed_state TEXT,
-    updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
-  );
-  CREATE TABLE automation_schedules (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    automation_id INTEGER NOT NULL REFERENCES automations(id) ON DELETE CASCADE,
-    cron TEXT,
-    interval_seconds INTEGER,
-    timezone TEXT,
-    next_due_at TEXT,
-    last_tick_at TEXT
-  );
-  CREATE TABLE automation_runs (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    automation_id INTEGER NOT NULL REFERENCES automations(id) ON DELETE CASCADE,
-    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-    trigger_type TEXT NOT NULL,
-    trigger_context TEXT,
-    status TEXT NOT NULL,
-    started_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    finished_at TEXT,
-    duration_ms INTEGER,
-    error TEXT,
-    dry_run INTEGER NOT NULL DEFAULT 0,
-    parent_run_id INTEGER
-  );
-  CREATE TABLE automation_run_steps (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    run_id INTEGER NOT NULL REFERENCES automation_runs(id) ON DELETE CASCADE,
-    step_index INTEGER NOT NULL,
-    step_id TEXT NOT NULL,
-    step_type TEXT NOT NULL,
-    status TEXT NOT NULL,
-    started_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    finished_at TEXT,
-    output TEXT,
-    error TEXT,
-    truncated INTEGER NOT NULL DEFAULT 0
-  );
-  CREATE TABLE automation_channels (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    automation_id INTEGER NOT NULL REFERENCES automations(id) ON DELETE CASCADE,
-    channel_id INTEGER NOT NULL REFERENCES notification_channels(id) ON DELETE CASCADE
-  );
-  CREATE INDEX idx_automations_user ON automations (user_id, enabled);
-  CREATE UNIQUE INDEX idx_automation_trigger_state_key ON automation_trigger_state (automation_id, state_key);
-  CREATE UNIQUE INDEX idx_automation_schedules_automation ON automation_schedules (automation_id);
-  CREATE INDEX idx_automation_schedules_due ON automation_schedules (next_due_at);
-  CREATE INDEX idx_automation_runs_automation ON automation_runs (automation_id, started_at);
-  CREATE INDEX idx_automation_runs_user ON automation_runs (user_id, started_at);
-  CREATE INDEX idx_automation_run_steps_run ON automation_run_steps (run_id, step_index);
-  CREATE UNIQUE INDEX idx_automation_channels_pair ON automation_channels (automation_id, channel_id);
-`;
-
-const SEED = `
-  INSERT INTO users (id, username) VALUES ('alice', 'alice');
-  INSERT INTO notification_channels (id, user_id, name, type, config) VALUES (4, 'alice', 'ops', 'webhook', '{}');
-  INSERT INTO automations (id, user_id, name, definition) VALUES (7, 'alice', 'Disk', '{"version":1,"trigger":{"kind":"webhook","tokenHash":"x"},"steps":[]}');
-  INSERT INTO automation_trigger_state (automation_id, state_key, last_fired_at) VALUES (7, '1:/data', '2026-01-01T00:00:00Z');
-  INSERT INTO automation_schedules (automation_id, interval_seconds, next_due_at) VALUES (7, 300, '2026-01-01T00:05:00Z');
-  INSERT INTO automation_runs (id, automation_id, user_id, trigger_type, status) VALUES (3, 7, 'alice', 'manual', 'success');
-  INSERT INTO automation_run_steps (run_id, step_index, step_id, step_type, status) VALUES (3, 0, 'a', 'notify', 'success');
-  INSERT INTO automation_channels (automation_id, channel_id) VALUES (7, 4);
-`;
-
-const ADOPTED = [
-  "p_automations_automations",
-  "p_automations_trigger_state",
-  "p_automations_schedules",
-  "p_automations_runs",
-  "p_automations_run_steps",
-  "p_automations_channels",
-];
-
-const LEGACY = [
-  "automations",
-  "automation_trigger_state",
-  "automation_schedules",
-  "automation_runs",
-  "automation_run_steps",
-  "automation_channels",
-];
-
-let db: TestDb | null = null;
-
-afterEach(() => {
-  db?.close();
-  db = null;
-});
-
-function tables(target: TestDb): string[] {
-  return (
-    target.sqlite
-      .prepare("SELECT name FROM sqlite_master WHERE type = 'table'")
-      .all() as Array<{ name: string }>
-  ).map((row) => row.name);
-}
-
-function indexes(target: TestDb, table: string): string[] {
-  return (
-    target.sqlite
-      .prepare(
-        "SELECT name FROM sqlite_master WHERE type = 'index' AND tbl_name = ? AND name NOT LIKE 'sqlite_%'",
-      )
-      .all(table) as Array<{ name: string }>
-  )
-    .map((row) => row.name)
-    .sort();
-}
-
-const count = (target: TestDb, table: string) =>
-  (
-    target.sqlite.prepare(`SELECT COUNT(*) AS n FROM ${table}`).get() as {
-      n: number;
-    }
-  ).n;
-
-describe("adopting the automation tables", () => {
-  it("keeps every row, index and cascade when the legacy tables exist", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec(NOTIFICATION_CHANNELS_DDL);
-        sqlite.exec(LEGACY_DDL);
-        sqlite.exec(SEED);
-      },
-    });
-
-    const names = tables(db);
-    for (const table of ADOPTED) expect(names).toContain(table);
-    for (const table of LEGACY) expect(names).not.toContain(table);
-
-    for (const table of ADOPTED) expect(count(db, table)).toBe(1);
-    expect(
-      db.sqlite
-        .prepare("SELECT name FROM p_automations_automations WHERE id = 7")
-        .get(),
-    ).toEqual({ name: "Disk" });
-
-    // Only one copy of each legacy index, never a second one.
-    expect(indexes(db, "p_automations_trigger_state")).toEqual([
-      "idx_automation_trigger_state_key",
-    ]);
-    expect(indexes(db, "p_automations_runs")).toEqual([
-      "idx_automation_runs_automation",
-      "idx_automation_runs_user",
-    ]);
-
-    // Channels moved to the alerts plugin, so a link may name a channel the
-    // old table never had, and the old one's link is still there.
-    expect(indexes(db, "p_automations_channels")).toEqual([
-      "idx_automation_channels_pair",
-    ]);
-    expect(
-      db.sqlite.prepare("SELECT channel_id FROM p_automations_channels").all(),
-    ).toEqual([{ channel_id: 4 }]);
-    db.sqlite
-      .prepare(
-        "INSERT INTO p_automations_channels (automation_id, channel_id) VALUES (7, 99)",
-      )
-      .run();
-    db.sqlite
-      .prepare("DELETE FROM p_automations_channels WHERE channel_id = 99")
-      .run();
-
-    // The foreign keys followed the rename: deleting the automation still
-    // takes its state, schedule, runs, steps and channel links with it.
-    db.sqlite
-      .prepare("DELETE FROM p_automations_automations WHERE id = 7")
-      .run();
-    for (const table of ADOPTED) expect(count(db, table)).toBe(0);
-  });
-
-  it("creates the same tables on a fresh install", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => sqlite.exec(NOTIFICATION_CHANNELS_DDL),
-    });
-
-    const names = tables(db);
-    for (const table of ADOPTED) expect(names).toContain(table);
-    for (const table of LEGACY) expect(names).not.toContain(table);
-    expect(indexes(db, "p_automations_schedules")).toEqual([
-      "idx_automation_schedules_automation",
-      "idx_automation_schedules_due",
-    ]);
-
-    db.sqlite.exec(`
-      INSERT INTO users (id, username) VALUES ('alice', 'alice');
-      INSERT INTO p_automations_automations (id, user_id, name, definition) VALUES (1, 'alice', 'A', '{}');
-      INSERT INTO p_automations_runs (id, automation_id, user_id, trigger_type, status) VALUES (1, 1, 'alice', 'manual', 'success');
-      INSERT INTO p_automations_run_steps (run_id, step_index, step_id, step_type, status) VALUES (1, 0, 'a', 'notify', 'success');
-    `);
-    // Deleting the user cascades all the way down.
-    db.sqlite.prepare("DELETE FROM users WHERE id = 'alice'").run();
-    expect(count(db, "p_automations_automations")).toBe(0);
-    expect(count(db, "p_automations_run_steps")).toBe(0);
-  });
-
-  it("creates host maintenance with one row per owner and host, removed with either", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => sqlite.exec(NOTIFICATION_CHANNELS_DDL),
-    });
-
-    const maintenanceIndexes = indexes(db, "p_automations_host_maintenance");
-    expect(maintenanceIndexes).toContain(
-      "idx_automation_maintenance_host_owner",
-    );
-    expect(maintenanceIndexes).not.toContain("maintenance_host_owner");
-
-    db.sqlite.exec(`
-      INSERT INTO users (id, username) VALUES ('alice', 'alice');
-      INSERT INTO ssh_data (id) VALUES (1);
-      INSERT INTO ssh_data (id) VALUES (2);
-      INSERT INTO p_automations_host_maintenance (user_id, host_id, state) VALUES ('alice', 1, '{}');
-      INSERT INTO p_automations_host_maintenance (user_id, host_id, state) VALUES ('alice', 2, '{}');
-    `);
-    expect(() =>
-      db.sqlite
-        .prepare(
-          "INSERT INTO p_automations_host_maintenance (user_id, host_id, state) VALUES ('alice', 1, '{}')",
-        )
-        .run(),
-    ).toThrow();
-
-    db.sqlite.prepare("DELETE FROM ssh_data WHERE id = 1").run();
-    expect(count(db, "p_automations_host_maintenance")).toBe(1);
-    db.sqlite.prepare("DELETE FROM users WHERE id = 'alice'").run();
-    expect(count(db, "p_automations_host_maintenance")).toBe(0);
-  });
-});
diff --git a/plugins/automations/tests/backend/permissions.test.ts b/plugins/automations/tests/backend/permissions.test.ts
deleted file mode 100644
index cba923f3b..000000000
--- a/plugins/automations/tests/backend/permissions.test.ts
+++ /dev/null
@@ -1,60 +0,0 @@
-import { describe, it, expect } from "vitest";
-import fs from "node:fs";
-import path from "node:path";
-import { parseManifest, qualifyPermission } from "@termix/plugin-sdk/manifest";
-
-/**
- * The permission ids an admin grants.
- *
- * Core registers each declared name as `<pluginId>.<name>`, so these strings
- * are what end up stored in a role. They have to keep matching what automations
- * shipped before the permissions moved out of the core catalog, or every role
- * holding one would silently stop working.
- */
-const EXPECTED = [
-  "automations.view",
-  "automations.create",
-  "automations.edit",
-  "automations.delete",
-  "automations.run",
-];
-
-describe("automations permissions", () => {
-  const manifest = parseManifest(
-    JSON.parse(
-      fs.readFileSync(
-        path.resolve(import.meta.dirname, "../../manifest.json"),
-        "utf8",
-      ),
-    ),
-  );
-
-  it("parses cleanly", () => {
-    expect(manifest.errors).toEqual([]);
-  });
-
-  it("registers exactly the ids roles already hold", () => {
-    const ids = (manifest.manifest?.contributes?.permissions ?? []).map(
-      (permission) => qualifyPermission("automations", permission.name),
-    );
-
-    expect(ids).toEqual(EXPECTED);
-  });
-
-  it("declares a title and description for every permission", () => {
-    for (const permission of manifest.manifest?.contributes?.permissions ??
-      []) {
-      expect(permission.titleKey).toBeTruthy();
-      expect(permission.descriptionKey).toBeTruthy();
-    }
-  });
-
-  // Core used to grant these through SYSTEM_ROLE_DEFAULTS, so a fresh install
-  // has to keep giving them to the user role.
-  it("keeps the fresh-install defaults core used to seed", () => {
-    for (const permission of manifest.manifest?.contributes?.permissions ??
-      []) {
-      expect(permission.defaultRoles).toEqual(["user"]);
-    }
-  });
-});
diff --git a/plugins/automations/tests/backend/routes.test.ts b/plugins/automations/tests/backend/routes.test.ts
deleted file mode 100644
index 736addfdd..000000000
--- a/plugins/automations/tests/backend/routes.test.ts
+++ /dev/null
@@ -1,231 +0,0 @@
-import crypto from "node:crypto";
-import { afterEach, describe, expect, it } from "vitest";
-import { definition, startServer, type TestServer } from "./helpers";
-
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-});
-
-const schedule = definition({ kind: "schedule", intervalSeconds: 300 });
-
-describe("automation routes", () => {
-  it("creates, lists, updates and deletes an automation", async () => {
-    server = await startServer();
-
-    const created = await server.request("POST", "/", {
-      body: { name: " Nightly ", definition: schedule, channels: [1, 99] },
-    });
-    expect(created.status).toBe(201);
-    expect(created.body).toMatchObject({
-      name: "Nightly",
-      enabled: 1,
-      // 99 is not one of alice's channels, so it is not linked.
-      channels: [1],
-      missingPlugins: [],
-    });
-    const id = created.body.id;
-
-    // A schedule trigger registers its next due time.
-    const scheduleRow = server.db.sqlite
-      .prepare(
-        "SELECT next_due_at FROM p_automations_schedules WHERE automation_id = ?",
-      )
-      .get(id) as { next_due_at: string | null };
-    expect(scheduleRow.next_due_at).toBeTruthy();
-
-    const listed = await server.request("GET", "/");
-    expect(listed.body.map((row: { id: number }) => row.id)).toEqual([id]);
-    expect(listed.body[0].definition.trigger.kind).toBe("schedule");
-
-    const updated = await server.request("PUT", `/${id}`, {
-      body: { enabled: false, name: "Nightly job" },
-    });
-    expect(updated.status).toBe(200);
-    expect(updated.body).toMatchObject({ enabled: 0, name: "Nightly job" });
-
-    expect((await server.request("DELETE", `/${id}`)).status).toBe(200);
-    expect((await server.request("GET", `/${id}`)).status).toBe(404);
-    // The schedule goes with it.
-    expect(
-      server.db.sqlite
-        .prepare("SELECT COUNT(*) AS n FROM p_automations_schedules")
-        .get(),
-    ).toEqual({ n: 0 });
-  });
-
-  it("never shows one user's automations to another", async () => {
-    server = await startServer();
-    const created = await server.request("POST", "/", {
-      body: { name: "Mine", definition: schedule },
-    });
-
-    expect((await server.request("GET", "/", { user: "bob" })).body).toEqual(
-      [],
-    );
-    expect(
-      (await server.request("GET", `/${created.body.id}`, { user: "bob" }))
-        .status,
-    ).toBe(404);
-    expect(
-      (await server.request("DELETE", `/${created.body.id}`, { user: "bob" }))
-        .status,
-    ).toBe(404);
-  });
-
-  it("rejects an invalid definition", async () => {
-    server = await startServer();
-    const response = await server.request("POST", "/", {
-      body: {
-        name: "Bad",
-        definition: {
-          trigger: { kind: "schedule", intervalSeconds: 5 },
-          steps: [],
-        },
-      },
-    });
-    expect(response.status).toBe(400);
-    expect(response.body.error).toMatch(/60 seconds/);
-  });
-
-  it("marks an automation that needs a plugin that is off", async () => {
-    server = await startServer();
-    const created = await server.request("POST", "/", {
-      body: {
-        name: "Restart app",
-        definition: definition({ kind: "schedule", intervalSeconds: 300 }, [
-          {
-            id: "d",
-            type: "docker",
-            action: "restart",
-            container: "app",
-            hostSelector: { kind: "host", hostId: 1 },
-          },
-        ]),
-      },
-    });
-    expect(created.body.missingPlugins).toEqual(["docker"]);
-  });
-
-  it("offers editor options and the running providers", async () => {
-    server = await startServer({
-      services: {
-        "fleets.access": { list: async () => [{ id: 3, name: "web" }] },
-      },
-    });
-    const response = await server.request("GET", "/editor-options");
-    expect(response.status).toBe(200);
-    expect(response.body).toMatchObject({
-      hosts: [
-        { id: 1, name: "host-1" },
-        { id: 2, name: "host-2" },
-      ],
-      snippets: [{ id: 5, name: "Restart nginx" }],
-      fleets: [{ id: 3, name: "web" }],
-      channels: [{ id: 1, name: "ops" }],
-    });
-    expect(response.body.providers).toMatchObject({
-      snippets: true,
-      fleets: true,
-      docker: false,
-      "host-metrics": false,
-      "wake-on-lan": false,
-    });
-  });
-
-  it("returns a webhook token once and runs the automation from it", async () => {
-    server = await startServer();
-    const created = await server.request("POST", "/", {
-      body: { name: "Hook", definition: definition({ kind: "webhook" }) },
-    });
-    const token = created.body.webhookToken as string;
-    expect(token).toHaveLength(64);
-    expect(created.body.definition.trigger.tokenHash).toBe("");
-
-    const stored = server.db.sqlite
-      .prepare("SELECT definition FROM p_automations_automations WHERE id = ?")
-      .get(created.body.id) as { definition: string };
-    expect(JSON.parse(stored.definition).trigger.tokenHash).toBe(
-      crypto.createHash("sha256").update(token).digest("hex"),
-    );
-
-    const fired = await server.request("POST", `/webhook/${token}`, {
-      user: null,
-      body: { hello: "world" },
-    });
-    expect(fired.status).toBe(202);
-    expect(fired.body.status).toBe("success");
-
-    const wrong = await server.request("POST", `/webhook/${"0".repeat(64)}`, {
-      user: null,
-      body: {},
-    });
-    expect(wrong.status).toBe(404);
-  });
-
-  it("runs now, records the steps and lists the run", async () => {
-    server = await startServer();
-    const created = await server.request("POST", "/", {
-      body: { name: "Now", definition: schedule },
-    });
-    const outcome = await server.request("POST", `/${created.body.id}/run`, {
-      body: { dryRun: true },
-    });
-    expect(outcome.body.status).toBe("success");
-
-    const runs = await server.request("GET", "/runs/history");
-    expect(runs.body[0]).toMatchObject({
-      automation_id: created.body.id,
-      automation_name: "Now",
-      status: "success",
-      dry_run: 1,
-      trigger_type: "manual",
-    });
-    const steps = await server.request("GET", `/runs/${runs.body[0].id}/steps`);
-    expect(steps.body).toMatchObject([
-      { step_type: "set_var", status: "success" },
-    ]);
-    expect(
-      (
-        await server.request("GET", `/runs/${runs.body[0].id}/steps`, {
-          user: "bob",
-        })
-      ).status,
-    ).toBe(404);
-  });
-});
-
-describe("permissions", () => {
-  const routes: Array<[string, string, string]> = [
-    ["GET", "/", "view"],
-    ["GET", "/editor-options", "view"],
-    ["GET", "/runs/history", "view"],
-    ["GET", "/runs/1/steps", "view"],
-    ["GET", "/1", "view"],
-    ["POST", "/", "create"],
-    ["PUT", "/1", "edit"],
-    ["DELETE", "/1", "delete"],
-    ["POST", "/1/run", "run"],
-  ];
-
-  it.each(routes)(
-    "%s %s answers 403 without automations.%s",
-    async (method, path) => {
-      server = await startServer({ permissions: [] });
-      const response = await server.request(method, path, { body: {} });
-      expect(response.status).toBe(403);
-    },
-  );
-
-  it("serves the webhook without a session", async () => {
-    server = await startServer({ permissions: [] });
-    const response = await server.request(
-      "POST",
-      `/webhook/${"a".repeat(64)}`,
-      { user: null, body: {} },
-    );
-    expect(response.status).toBe(404);
-  });
-});
diff --git a/plugins/automations/tests/backend/sudo-capability.test.ts b/plugins/automations/tests/backend/sudo-capability.test.ts
deleted file mode 100644
index ab3f3d7a1..000000000
--- a/plugins/automations/tests/backend/sudo-capability.test.ts
+++ /dev/null
@@ -1,17 +0,0 @@
-import { describe, expect, it } from "vitest";
-import fs from "node:fs";
-import path from "node:path";
-
-// Elevated commands read the host's sudo password, which core only hands to
-// a plugin holding credentials:read.
-describe("sudo password access", () => {
-  it("declares credentials:read", () => {
-    const manifest = JSON.parse(
-      fs.readFileSync(
-        path.resolve(import.meta.dirname, "../../manifest.json"),
-        "utf8",
-      ),
-    );
-    expect(manifest.capabilities).toContain("credentials:read");
-  });
-});
diff --git a/plugins/automations/tests/backend/template.test.ts b/plugins/automations/tests/backend/template.test.ts
deleted file mode 100644
index 25192f707..000000000
--- a/plugins/automations/tests/backend/template.test.ts
+++ /dev/null
@@ -1,99 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  hasUnresolvedTokens,
-  redactSecrets,
-  renderRecord,
-  renderTemplate,
-} from "../../src/backend/template.js";
-
-const context = {
-  host: { id: 7, name: "Zeus", ip: "10.0.0.5", username: "root", port: 22 },
-  trigger: { value: 93.4, mount: "/data" },
-  steps: { check: { stdout: "ok\n", stderr: "", code: 0 } },
-  vars: { target: "/var/log" },
-};
-
-describe("renderTemplate", () => {
-  it("substitutes host, trigger, step and var tokens", () => {
-    expect(renderTemplate("{{host.name}} at {{trigger.value}}%", context)).toBe(
-      "Zeus at 93.4%",
-    );
-    expect(renderTemplate("{{steps.check.stdout}}", context)).toBe("ok\n");
-    expect(renderTemplate("{{vars.target}}", context)).toBe("/var/log");
-  });
-
-  it("tolerates whitespace inside the braces", () => {
-    expect(renderTemplate("{{  host.name  }}", context)).toBe("Zeus");
-  });
-
-  it("leaves unknown tokens in place so typos are visible", () => {
-    expect(renderTemplate("{{host.nope}}", context)).toBe("{{host.nope}}");
-    expect(hasUnresolvedTokens(renderTemplate("{{host.nope}}", context))).toBe(
-      true,
-    );
-  });
-
-  it("returns the input untouched when there is nothing to render", () => {
-    expect(renderTemplate("plain text", context)).toBe("plain text");
-    expect(renderTemplate("", context)).toBe("");
-  });
-
-  it("does not escape or alter shell metacharacters", () => {
-    // Quoting is the caller's job; this keeps that boundary explicit.
-    const rendered = renderTemplate("{{vars.payload}}", {
-      vars: { payload: "; rm -rf /" },
-    });
-    expect(rendered).toBe("; rm -rf /");
-  });
-
-  it("does not recursively expand a value that looks like a token", () => {
-    const rendered = renderTemplate("{{vars.a}}", {
-      vars: { a: "{{vars.b}}", b: "gotcha" },
-    });
-    expect(rendered).toBe("{{vars.b}}");
-  });
-
-  it("serializes objects rather than printing [object Object]", () => {
-    expect(renderTemplate("{{trigger}}", { trigger: { a: 1 } })).toBe(
-      '{"a":1}',
-    );
-  });
-
-  it("renders missing branches as the literal token", () => {
-    expect(renderTemplate("{{steps.other.stdout}}", context)).toBe(
-      "{{steps.other.stdout}}",
-    );
-  });
-});
-
-describe("renderRecord", () => {
-  it("renders values and leaves keys alone", () => {
-    expect(renderRecord({ "X-Host": "{{host.name}}" }, context)).toEqual({
-      "X-Host": "Zeus",
-    });
-  });
-
-  it("passes undefined through", () => {
-    expect(renderRecord(undefined, context)).toBeUndefined();
-  });
-});
-
-describe("redactSecrets", () => {
-  it("masks credential-shaped keys", () => {
-    expect(
-      redactSecrets({
-        Authorization: "Bearer abc",
-        "X-Api-Key": "k",
-        token: "t",
-        password: "p",
-        Accept: "application/json",
-      }),
-    ).toEqual({
-      Authorization: "***",
-      "X-Api-Key": "***",
-      token: "***",
-      password: "***",
-      Accept: "application/json",
-    });
-  });
-});
diff --git a/plugins/automations/tests/backend/triggers.test.ts b/plugins/automations/tests/backend/triggers.test.ts
deleted file mode 100644
index 1e90e3ec2..000000000
--- a/plugins/automations/tests/backend/triggers.test.ts
+++ /dev/null
@@ -1,569 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
-import type { AutomationDefinition, Trigger } from "../../src/types.js";
-import { createTriggers } from "../../src/backend/triggers.js";
-
-/**
- * Trigger matching, dwell windows and cooldowns. The repository and the engine
- * are mocked so these tests only exercise the decision of whether to fire.
- */
-
-interface FakeRow {
-  id: number;
-  userId: string;
-  name: string;
-  enabled: boolean;
-  definition: string;
-  concurrencyPolicy: string;
-  maxRunSeconds: number;
-  dryRun: boolean;
-}
-
-const rows: FakeRow[] = [];
-const triggerState = new Map<string, Record<string, unknown>>();
-
-const repository = {
-  listEnabledForUser: vi.fn(async (userId: string) =>
-    rows.filter((row) => row.userId === userId && row.enabled),
-  ),
-  listAllEnabled: vi.fn(async () => rows.filter((row) => row.enabled)),
-  getTriggerState: vi.fn(async (automationId: number, stateKey: string) => {
-    return triggerState.get(`${automationId}:${stateKey}`) ?? null;
-  }),
-  upsertTriggerState: vi.fn(async (input: Record<string, unknown>) => {
-    const key = `${input.automationId}:${input.stateKey}`;
-    triggerState.set(key, { ...(triggerState.get(key) ?? {}), ...input });
-  }),
-  clearBreach: vi.fn(async (automationId: number, stateKey: string) => {
-    const key = `${automationId}:${stateKey}`;
-    const existing = triggerState.get(key);
-    if (existing) existing.breachStartedAt = null;
-  }),
-};
-
-const run = vi.fn(async () => ({ runId: 1, status: "success" as const }));
-const log = {
-  debug: () => {},
-  info: () => {},
-  warn: () => {},
-  error: () => {},
-};
-const triggers = createTriggers(repository as never, { run }, log);
-
-function addAutomation(trigger: Trigger, overrides: Partial<FakeRow> = {}) {
-  const definition: AutomationDefinition = { version: 1, trigger, steps: [] };
-  const row: FakeRow = {
-    id: overrides.id ?? rows.length + 1,
-    userId: overrides.userId ?? "user-1",
-    name: "Test",
-    enabled: overrides.enabled ?? true,
-    definition: JSON.stringify(definition),
-    concurrencyPolicy: "skip",
-    maxRunSeconds: 300,
-    dryRun: false,
-  };
-  rows.push(row);
-  return row;
-}
-
-const diskMetrics = {
-  disk: {
-    percent: 30,
-    filesystems: [
-      { mount: "/", percent: 30 },
-      { mount: "/data", percent: 93 },
-    ],
-  },
-};
-
-beforeEach(() => {
-  rows.length = 0;
-  triggerState.clear();
-  vi.clearAllMocks();
-});
-
-describe("onMetrics", () => {
-  it("fires immediately when no dwell window is set", async () => {
-    addAutomation({
-      kind: "metric_threshold",
-      hostSelector: { kind: "host", hostId: 7 },
-      metric: { path: "disk.percent", mount: "/data" },
-      operator: ">",
-      value: 90,
-      cooldownMinutes: 15,
-    });
-
-    await triggers.onMetrics({
-      hostId: 7,
-      ownerUserId: "user-1",
-      metrics: diskMetrics,
-    });
-
-    expect(run).toHaveBeenCalledTimes(1);
-    expect((run.mock.calls[0] as unknown[])[0]).toMatchObject({
-      triggerType: "metric_threshold",
-      triggerHostId: 7,
-    });
-  });
-
-  it("watches the named mount rather than the aggregate", async () => {
-    // Root is at 30%, so a rule on / must not fire at a 90% threshold.
-    addAutomation({
-      kind: "metric_threshold",
-      hostSelector: { kind: "host", hostId: 7 },
-      metric: { path: "disk.percent", mount: "/" },
-      operator: ">",
-      value: 90,
-      cooldownMinutes: 15,
-    });
-
-    await triggers.onMetrics({
-      hostId: 7,
-      ownerUserId: "user-1",
-      metrics: diskMetrics,
-    });
-
-    expect(run).not.toHaveBeenCalled();
-  });
-
-  it("opens a dwell window instead of firing on the first sample", async () => {
-    const row = addAutomation({
-      kind: "metric_threshold",
-      hostSelector: { kind: "host", hostId: 7 },
-      metric: { path: "disk.percent", mount: "/data" },
-      operator: ">",
-      value: 90,
-      forSeconds: 600,
-      cooldownMinutes: 15,
-    });
-
-    await triggers.onMetrics({
-      hostId: 7,
-      ownerUserId: "user-1",
-      metrics: diskMetrics,
-    });
-
-    expect(run).not.toHaveBeenCalled();
-    expect(triggerState.get(`${row.id}:7:/data`)).toMatchObject({
-      breachStartedAt: expect.any(String),
-    });
-  });
-
-  it("fires once the dwell window has elapsed", async () => {
-    const row = addAutomation({
-      kind: "metric_threshold",
-      hostSelector: { kind: "host", hostId: 7 },
-      metric: { path: "disk.percent", mount: "/data" },
-      operator: ">",
-      value: 90,
-      forSeconds: 600,
-      cooldownMinutes: 15,
-    });
-    triggerState.set(`${row.id}:7:/data`, {
-      breachStartedAt: new Date(Date.now() - 700_000).toISOString(),
-    });
-
-    await triggers.onMetrics({
-      hostId: 7,
-      ownerUserId: "user-1",
-      metrics: diskMetrics,
-    });
-
-    expect(run).toHaveBeenCalledTimes(1);
-  });
-
-  it("clears the window as soon as the value recovers", async () => {
-    const row = addAutomation({
-      kind: "metric_threshold",
-      hostSelector: { kind: "host", hostId: 7 },
-      metric: { path: "disk.percent", mount: "/data" },
-      operator: ">",
-      value: 95,
-      forSeconds: 600,
-      cooldownMinutes: 15,
-    });
-    triggerState.set(`${row.id}:7:/data`, {
-      breachStartedAt: new Date(Date.now() - 700_000).toISOString(),
-    });
-
-    await triggers.onMetrics({
-      hostId: 7,
-      ownerUserId: "user-1",
-      metrics: diskMetrics,
-    });
-
-    expect(run).not.toHaveBeenCalled();
-    expect(repository.clearBreach).toHaveBeenCalled();
-  });
-
-  it("stays quiet while the cooldown is open", async () => {
-    const row = addAutomation({
-      kind: "metric_threshold",
-      hostSelector: { kind: "host", hostId: 7 },
-      metric: { path: "disk.percent", mount: "/data" },
-      operator: ">",
-      value: 90,
-      cooldownMinutes: 15,
-    });
-    triggerState.set(`${row.id}:7:/data`, {
-      lastFiredAt: new Date(Date.now() - 60_000).toISOString(),
-      breachStartedAt: new Date(Date.now() - 700_000).toISOString(),
-    });
-
-    await triggers.onMetrics({
-      hostId: 7,
-      ownerUserId: "user-1",
-      metrics: diskMetrics,
-    });
-
-    expect(run).not.toHaveBeenCalled();
-  });
-
-  it("ignores hosts outside the selector", async () => {
-    addAutomation({
-      kind: "metric_threshold",
-      hostSelector: { kind: "host", hostId: 99 },
-      metric: { path: "disk.percent", mount: "/data" },
-      operator: ">",
-      value: 90,
-      cooldownMinutes: 15,
-    });
-
-    await triggers.onMetrics({
-      hostId: 7,
-      ownerUserId: "user-1",
-      metrics: diskMetrics,
-    });
-
-    expect(run).not.toHaveBeenCalled();
-  });
-
-  it("never evaluates another user's automations", async () => {
-    addAutomation(
-      {
-        kind: "metric_threshold",
-        hostSelector: { kind: "all" },
-        metric: { path: "disk.percent", mount: "/data" },
-        operator: ">",
-        value: 90,
-        cooldownMinutes: 15,
-      },
-      { userId: "user-2" },
-    );
-
-    await triggers.onMetrics({
-      hostId: 7,
-      ownerUserId: "user-1",
-      metrics: diskMetrics,
-    });
-
-    expect(run).not.toHaveBeenCalled();
-  });
-});
-
-describe("onStatus", () => {
-  it("treats the first observation as a baseline", async () => {
-    addAutomation({
-      kind: "host_status",
-      hostSelector: { kind: "host", hostId: 7 },
-      to: "offline",
-      cooldownMinutes: 0,
-    });
-
-    await triggers.onStatus({
-      hostId: 7,
-      ownerUserId: "user-1",
-      online: false,
-    });
-
-    // Otherwise every host would announce itself after a restart.
-    expect(run).not.toHaveBeenCalled();
-  });
-
-  it("fires on a transition into the watched state", async () => {
-    const row = addAutomation({
-      kind: "host_status",
-      hostSelector: { kind: "host", hostId: 7 },
-      to: "offline",
-      cooldownMinutes: 0,
-    });
-    triggerState.set(`${row.id}:7`, { lastObservedState: "online" });
-
-    await triggers.onStatus({
-      hostId: 7,
-      ownerUserId: "user-1",
-      online: false,
-    });
-
-    expect(run).toHaveBeenCalledTimes(1);
-  });
-
-  it("does not fire on a transition in the other direction", async () => {
-    const row = addAutomation({
-      kind: "host_status",
-      hostSelector: { kind: "host", hostId: 7 },
-      to: "offline",
-      cooldownMinutes: 0,
-    });
-    triggerState.set(`${row.id}:7`, { lastObservedState: "offline" });
-
-    await triggers.onStatus({ hostId: 7, ownerUserId: "user-1", online: true });
-
-    expect(run).not.toHaveBeenCalled();
-  });
-
-  it("stays quiet while the state is unchanged", async () => {
-    const row = addAutomation({
-      kind: "host_status",
-      hostSelector: { kind: "host", hostId: 7 },
-      to: "offline",
-      cooldownMinutes: 0,
-    });
-    triggerState.set(`${row.id}:7`, { lastObservedState: "offline" });
-
-    await triggers.onStatus({
-      hostId: 7,
-      ownerUserId: "user-1",
-      online: false,
-    });
-
-    expect(run).not.toHaveBeenCalled();
-  });
-});
-
-describe("onHealthCheck", () => {
-  it("fires when a check transitions to failing", async () => {
-    const row = addAutomation({
-      kind: "health_check",
-      hostSelector: { kind: "host", hostId: 7 },
-      to: "failing",
-      cooldownMinutes: 0,
-    });
-    triggerState.set(`${row.id}:7:web`, { lastObservedState: "recovered" });
-
-    await triggers.onHealthCheck({
-      hostId: 7,
-      userId: "user-1",
-      checkId: "web",
-      ok: false,
-    });
-
-    expect(run).toHaveBeenCalledTimes(1);
-  });
-
-  it("ignores a different check id", async () => {
-    const row = addAutomation({
-      kind: "health_check",
-      hostSelector: { kind: "host", hostId: 7 },
-      checkId: "db",
-      to: "failing",
-      cooldownMinutes: 0,
-    });
-    triggerState.set(`${row.id}:7:web`, { lastObservedState: "recovered" });
-
-    await triggers.onHealthCheck({
-      hostId: 7,
-      userId: "user-1",
-      checkId: "web",
-      ok: false,
-    });
-
-    expect(run).not.toHaveBeenCalled();
-  });
-});
-
-describe("onDockerEvent", () => {
-  it("fires for a matching container and event", async () => {
-    addAutomation({
-      kind: "docker_event",
-      hostSelector: { kind: "host", hostId: 7 },
-      container: "api",
-      event: "exited",
-      cooldownMinutes: 0,
-    });
-
-    await triggers.onDockerEvent({
-      hostId: 7,
-      ownerUserId: "user-1",
-      container: "api",
-      event: "exited",
-    });
-
-    expect(run).toHaveBeenCalledTimes(1);
-  });
-
-  it("ignores a different container", async () => {
-    addAutomation({
-      kind: "docker_event",
-      hostSelector: { kind: "host", hostId: 7 },
-      container: "api",
-      event: "exited",
-      cooldownMinutes: 0,
-    });
-
-    await triggers.onDockerEvent({
-      hostId: 7,
-      ownerUserId: "user-1",
-      container: "worker",
-      event: "exited",
-    });
-
-    expect(run).not.toHaveBeenCalled();
-  });
-});
-
-describe("watchedHosts", () => {
-  it("collects hosts from metric triggers so they can be polled headlessly", async () => {
-    addAutomation({
-      kind: "metric_threshold",
-      hostSelector: { kind: "hosts", hostIds: [3, 4] },
-      metric: { path: "cpu.percent" },
-      operator: ">",
-      value: 90,
-      cooldownMinutes: 15,
-    });
-
-    const watched = await triggers.watchedHosts("metric_threshold");
-
-    expect([...watched.keys()].sort()).toEqual([3, 4]);
-  });
-
-  it("ignores triggers that do not need heavy collection", async () => {
-    addAutomation({
-      kind: "host_status",
-      hostSelector: { kind: "host", hostId: 3 },
-      to: "offline",
-      cooldownMinutes: 0,
-    });
-
-    expect((await triggers.watchedHosts("metric_threshold")).size).toBe(0);
-  });
-});
-
-describe("maintenance suppression", () => {
-  it("updates the status baseline without firing or replaying maintenance edges", async () => {
-    let maintaining = false;
-    const guarded = createTriggers(
-      repository as never,
-      { run },
-      log,
-      async () => maintaining,
-    );
-    addAutomation({
-      kind: "host_status",
-      hostSelector: { kind: "all" },
-      to: "offline",
-      cooldownMinutes: 0,
-    });
-    await guarded.onStatus({ hostId: 7, ownerUserId: "user-1", online: true });
-    maintaining = true;
-    await guarded.onStatus({ hostId: 7, ownerUserId: "user-1", online: false });
-    maintaining = false;
-    await guarded.onStatus({ hostId: 7, ownerUserId: "user-1", online: false });
-    expect(run).not.toHaveBeenCalled();
-    await guarded.onStatus({ hostId: 7, ownerUserId: "user-1", online: true });
-    await guarded.onStatus({ hostId: 7, ownerUserId: "user-1", online: false });
-    expect(run).toHaveBeenCalledTimes(1);
-  });
-  it("maintains health baselines and suppresses container events", async () => {
-    const guarded = createTriggers(
-      repository as never,
-      { run },
-      log,
-      async () => true,
-    );
-    addAutomation({
-      kind: "health_check",
-      hostSelector: { kind: "all" },
-      to: "failing",
-      cooldownMinutes: 0,
-    });
-    addAutomation({
-      kind: "docker_event",
-      hostSelector: { kind: "all" },
-      event: "exited",
-      cooldownMinutes: 0,
-    });
-    await guarded.onHealthCheck({
-      hostId: 7,
-      userId: "user-1",
-      checkId: "http",
-      ok: true,
-    });
-    await guarded.onHealthCheck({
-      hostId: 7,
-      userId: "user-1",
-      checkId: "http",
-      ok: false,
-    });
-    await guarded.onDockerEvent({
-      hostId: 7,
-      ownerUserId: "user-1",
-      container: "app",
-      event: "exited",
-    });
-    expect(run).not.toHaveBeenCalled();
-    expect(triggerState.get("1:7:http")?.lastObservedState).toBe("failing");
-  });
-  it("clears a metric dwell window so maintenance time cannot count toward a later alert", async () => {
-    let maintaining = true;
-    const guarded = createTriggers(
-      repository as never,
-      { run },
-      log,
-      async () => maintaining,
-    );
-    addAutomation({
-      kind: "metric_threshold",
-      hostSelector: { kind: "all" },
-      metric: { path: "cpu.percent" },
-      operator: ">",
-      value: 90,
-      forSeconds: 60,
-      cooldownMinutes: 0,
-    });
-    triggerState.set("1:7", {
-      breachStartedAt: "2000-01-01T00:00:00Z",
-    });
-    const event = {
-      hostId: 7,
-      ownerUserId: "user-1",
-      metrics: { cpu: { percent: 99 } },
-    };
-    await guarded.onMetrics(event);
-    expect(triggerState.get("1:7")?.breachStartedAt).toBeNull();
-    maintaining = false;
-    await guarded.onMetrics(event);
-    expect(run).not.toHaveBeenCalled();
-    expect(triggerState.get("1:7")?.breachStartedAt).not.toBeNull();
-  });
-  it("suppresses tunnel disconnects but preserves security login events", async () => {
-    const guarded = createTriggers(
-      repository as never,
-      { run },
-      log,
-      async () => true,
-    );
-    addAutomation({
-      kind: "internal_event",
-      event: "tunnel_disconnected",
-      cooldownMinutes: 0,
-    });
-    addAutomation({
-      kind: "internal_event",
-      event: "user_login",
-      cooldownMinutes: 0,
-    });
-    await guarded.onInternalEvent({
-      event: "tunnel_disconnected",
-      userId: "user-1",
-      hostId: 7,
-    });
-    expect(run).not.toHaveBeenCalled();
-    await guarded.onInternalEvent({
-      event: "user_login",
-      userId: "user-1",
-      hostId: 7,
-    });
-    expect(run).toHaveBeenCalledTimes(1);
-  });
-});
diff --git a/plugins/automations/tests/frontend/activate.test.tsx b/plugins/automations/tests/frontend/activate.test.tsx
deleted file mode 100644
index 814097280..000000000
--- a/plugins/automations/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,53 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-const declared = (views?: Array<{ id: string }>) =>
-  (views ?? []).map((view) => view.id).sort();
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe(`${manifest.id} activate`, () => {
-  it("activates and registers only views its manifest declares", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    const contributes = manifest.contributes as unknown as Record<
-      string,
-      Array<{ id: string }> | undefined
-    >;
-    const tabs = declared(contributes.tabs);
-    // A rail panel may reuse one of the plugin's tab ids.
-    const panels = [...declared(contributes.panels), ...tabs];
-    const cards = declared(contributes.dashboardCards);
-    for (const id of rendered.registered.tabs()) expect(tabs).toContain(id);
-    for (const id of rendered.registered.panels()) expect(panels).toContain(id);
-    for (const id of rendered.registered.dashboardCards()) {
-      expect(cards).toContain(id);
-    }
-  });
-
-  it("removes everything it registered on deactivate", async () => {
-    const app = await renderWithApp(plugin, { manifest, locales });
-    await app.deactivate();
-    expect(app.registered.tabs()).toEqual([]);
-    expect(app.registered.panels()).toEqual([]);
-    expect(app.registered.railItems()).toEqual([]);
-    expect(app.registered.hostActions()).toEqual([]);
-    expect(app.registered.hostEditorSections()).toEqual([]);
-    expect(app.registered.dashboardCards()).toEqual([]);
-    expect(app.registered.settingsComponents()).toEqual([]);
-    expect(app.registered.actions()).toEqual([]);
-  });
-});
diff --git a/plugins/automations/tests/frontend/automations-editor.test.ts b/plugins/automations/tests/frontend/automations-editor.test.ts
deleted file mode 100644
index 9f1285e17..000000000
--- a/plugins/automations/tests/frontend/automations-editor.test.ts
+++ /dev/null
@@ -1,56 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { defaultTrigger } from "../../src/frontend/automations/TriggerCard";
-import { emptyDraft } from "../../src/frontend/automations/AutomationEditor";
-import { newStepId } from "../../src/frontend/automations/editor-types";
-import { AUTOMATION_DEFINITION_VERSION } from "../../src/types";
-
-describe("emptyDraft", () => {
-  it("starts on a metric threshold with no steps", () => {
-    const draft = emptyDraft();
-    expect(draft.name).toBe("");
-    expect(draft.enabled).toBe(true);
-    expect(draft.definition.version).toBe(AUTOMATION_DEFINITION_VERSION);
-    expect(draft.definition.trigger.kind).toBe("metric_threshold");
-    expect(draft.definition.steps).toEqual([]);
-  });
-});
-
-describe("defaultTrigger", () => {
-  it("gives every trigger kind a usable starting shape", () => {
-    expect(defaultTrigger("metric_threshold")).toMatchObject({
-      kind: "metric_threshold",
-      operator: ">",
-      cooldownMinutes: 15,
-    });
-    expect(defaultTrigger("host_status")).toMatchObject({
-      kind: "host_status",
-      to: "offline",
-    });
-    expect(defaultTrigger("health_check")).toMatchObject({
-      kind: "health_check",
-      to: "failing",
-    });
-    expect(defaultTrigger("schedule")).toMatchObject({ kind: "schedule" });
-    expect(defaultTrigger("docker_event")).toMatchObject({
-      kind: "docker_event",
-      event: "exited",
-    });
-    expect(defaultTrigger("webhook")).toMatchObject({ kind: "webhook" });
-  });
-
-  it("defaults a schedule to a valid cron expression", () => {
-    const trigger = defaultTrigger("schedule");
-    expect(trigger).toHaveProperty("cron");
-    // Five fields, which is what the backend parser requires.
-    expect(
-      String((trigger as { cron: string }).cron).split(/\s+/),
-    ).toHaveLength(5);
-  });
-});
-
-describe("newStepId", () => {
-  it("produces distinct ids", () => {
-    const ids = new Set(Array.from({ length: 100 }, () => newStepId()));
-    expect(ids.size).toBe(100);
-  });
-});
diff --git a/plugins/automations/tests/frontend/maintenance.test.tsx b/plugins/automations/tests/frontend/maintenance.test.tsx
deleted file mode 100644
index 1161bace3..000000000
--- a/plugins/automations/tests/frontend/maintenance.test.tsx
+++ /dev/null
@@ -1,148 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { fireEvent, waitFor, within } from "@testing-library/react";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import * as plugin from "../../src/frontend/index";
-import manifest from "../../manifest.json";
-import locales from "../../locales/en.json";
-import { emptyMaintenance, type HostMaintenance } from "../../src/maintenance";
-import { createMaintenanceStore } from "../../src/frontend/maintenance-store";
-
-let rendered: RenderedPluginApp | undefined;
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = undefined;
-  vi.restoreAllMocks();
-});
-const active: HostMaintenance = {
-  plans: [],
-  active: {
-    startedAt: "2026-01-01T12:00Z",
-    estimatedEnd: "2026-01-01T13:00Z",
-    reasons: ["OS upgrade"],
-    graceMinutes: 20,
-    notifyOverdue: true,
-    notified: false,
-  },
-};
-const host = { id: 7, name: "Database", ip: "10.0.0.7" };
-function apiFor(state: HostMaintenance) {
-  return {
-    get: vi.fn(async () => ({ data: [{ hostId: 7, state }] })),
-    post: vi.fn(async () => ({ data: emptyMaintenance() })),
-  };
-}
-async function render(
-  api: ReturnType<typeof apiFor>,
-  permissions = ["automations.view", "automations.edit"],
-) {
-  rendered = await renderWithApp(plugin, {
-    manifest: manifest as unknown as PluginManifest,
-    locales,
-    api: api as unknown as PluginApiClient,
-    permissions,
-  });
-  return within(
-    rendered.renderTab("host_maintenance", { host, isVisible: true }),
-  );
-}
-
-describe("maintenance UI", () => {
-  it("shows the reason and estimate and confirms before ending the correct host", async () => {
-    const api = apiFor(active);
-    const view = await render(api);
-    await waitFor(() => expect(view.getByText("OS upgrade")).toBeTruthy());
-    fireEvent.click(view.getByRole("button", { name: "End maintenance" }));
-    expect(api.post).not.toHaveBeenCalled();
-    fireEvent.click(view.getByRole("button", { name: "Confirm end" }));
-    await waitFor(() =>
-      expect(api.post).toHaveBeenCalledWith("/maintenance/7", {
-        action: "end",
-      }),
-    );
-  });
-  it("offers a read-only view without edit permission", async () => {
-    const view = await render(apiFor(active), ["automations.view"]);
-    await waitFor(() => expect(view.getByText("OS upgrade")).toBeTruthy());
-    expect(view.queryByRole("button", { name: "End maintenance" })).toBeNull();
-    expect(view.queryByLabelText("Reason")).toBeNull();
-  });
-  it("shows a shared host's maintenance read only even with edit permission", async () => {
-    const view = await render(apiFor({ ...active, owned: false }));
-    await waitFor(() => expect(view.getByText("OS upgrade")).toBeTruthy());
-    expect(view.getByText(locales.maintenance.sharedReadOnly)).toBeTruthy();
-    expect(view.queryByRole("button", { name: "End maintenance" })).toBeNull();
-    expect(view.queryByLabelText("Reason")).toBeNull();
-  });
-  it("submits a recurring UTC schedule with its grace period", async () => {
-    const api = apiFor(emptyMaintenance());
-    const view = await render(api);
-    await waitFor(() =>
-      expect(
-        view
-          .getByRole("button", { name: "Start now" })
-          .hasAttribute("disabled"),
-      ).toBe(false),
-    );
-    fireEvent.change(view.getByLabelText("Action"), {
-      target: { value: "schedule" },
-    });
-    fireEvent.change(view.getByLabelText("Reason"), {
-      target: { value: "Upgrade" },
-    });
-    fireEvent.change(view.getByLabelText("First start (UTC)"), {
-      target: { value: "2027-01-01T12:00" },
-    });
-    fireEvent.change(view.getByLabelText("Repeat"), {
-      target: { value: "monthly" },
-    });
-    fireEvent.click(view.getByRole("button", { name: "Add schedule" }));
-    await waitFor(() =>
-      expect(api.post).toHaveBeenCalledWith(
-        "/maintenance/7",
-        expect.objectContaining({
-          action: "schedule",
-          start: "2027-01-01T12:00:00.000Z",
-          recurrence: "monthly",
-          graceMinutes: 20,
-        }),
-      ),
-    );
-  });
-  it("disables edits when status cannot be loaded", async () => {
-    const api = apiFor(active);
-    api.get.mockRejectedValue(new Error("offline"));
-    const view = await render(api);
-    await waitFor(() =>
-      expect(view.getByRole("alert").textContent).toContain(
-        "Could not refresh",
-      ),
-    );
-    expect(
-      view.getByRole("button", { name: "Start now" }).hasAttribute("disabled"),
-    ).toBe(true);
-  });
-  it("does not let a stale refresh overwrite an acknowledged edit", async () => {
-    let resolve!: (value: unknown) => void;
-    const api = {
-      get: vi.fn(
-        () =>
-          new Promise((done) => {
-            resolve = done;
-          }),
-      ),
-      post: vi.fn(async () => ({ data: active })),
-    };
-    const store = createMaintenanceStore(api as unknown as PluginApiClient);
-    const request = store.refresh();
-    await store.edit(7, { action: "start" });
-    resolve({ data: [] });
-    await request;
-    expect(store.snapshot()[7]).toEqual(active);
-    store.dispose();
-  });
-});
diff --git a/plugins/automations/tests/frontend/panel.test.tsx b/plugins/automations/tests/frontend/panel.test.tsx
deleted file mode 100644
index d548cbc9e..000000000
--- a/plugins/automations/tests/frontend/panel.test.tsx
+++ /dev/null
@@ -1,78 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { waitFor } from "@testing-library/react";
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-const rows = [
-  {
-    id: 1,
-    name: "Restart app",
-    description: null,
-    enabled: 1,
-    definition: {
-      version: 1,
-      trigger: { kind: "schedule", intervalSeconds: 300 },
-      steps: [],
-    },
-    concurrency_policy: "skip",
-    last_run_at: null,
-    last_run_status: null,
-    channels: [],
-    missingPlugins: ["docker"],
-  },
-];
-
-function stubApi(): PluginApiClient {
-  return {
-    get: vi.fn(async (path: string) => {
-      if (path === "/editor-options") {
-        return {
-          data: {
-            hosts: [],
-            snippets: [],
-            fleets: [],
-            channels: [],
-            providers: { snippets: true },
-          },
-        };
-      }
-      return { data: path === "/" ? rows : [] };
-    }),
-    post: vi.fn(async () => ({ data: {} })),
-    put: vi.fn(async () => ({ data: {} })),
-    patch: vi.fn(async () => ({ data: {} })),
-    delete: vi.fn(async () => ({ data: {} })),
-  } as unknown as PluginApiClient;
-}
-
-describe("automations panel", () => {
-  it("lists automations from the plugin API and marks one that needs a plugin", async () => {
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: stubApi(),
-    });
-    const element = rendered.renderPanel("automations") as HTMLElement;
-
-    await waitFor(() => {
-      expect(element.textContent).toContain("Restart app");
-      expect(element.textContent).toContain("Needs docker");
-    });
-  });
-});
diff --git a/plugins/automations/tsconfig.json b/plugins/automations/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/automations/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/automations/vitest.config.ts b/plugins/automations/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/automations/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/docker/CHANGELOG.md b/plugins/docker/CHANGELOG.md
deleted file mode 100644
index 997d01d5d..000000000
--- a/plugins/docker/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Manages Docker and Podman containers over SSH. List, inspect, start, stop and remove containers, read their logs and open a console inside them.
diff --git a/plugins/docker/README.md b/plugins/docker/README.md
deleted file mode 100644
index 3cd0b37bf..000000000
--- a/plugins/docker/README.md
+++ /dev/null
@@ -1,37 +0,0 @@
-# Docker
-
-Manage Docker and Podman containers over SSH, with logs and a container console.
-
-## Features
-
-- List, inspect, start, stop, restart, pause and remove containers.
-- Read and download container logs.
-- Open an interactive console inside a container.
-- Works with Docker or Podman.
-- Adds a Docker widget to the homepage.
-
-## Settings
-
-### Host
-
-- Enable Docker: show the Docker tab for this host.
-- Container Runtime: Docker or Podman.
-
-## Permissions
-
-- `docker.use`: Use Docker. Admins and users have it by default.
-
-## Services
-
-Provides to other plugins:
-
-- `docker.containers`: list containers and start, stop, restart, pause, unpause or remove them.
-- `docker.events`: get notified when a container starts, exits, restarts or turns unhealthy.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/docker/locales/en.json b/plugins/docker/locales/en.json
deleted file mode 100644
index 631c3a919..000000000
--- a/plugins/docker/locales/en.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Docker is not enabled for this host",
-    "validating": "Validating Docker...",
-    "connecting": "Connecting...",
-    "error": "Error",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Failed to connect to Docker",
-    "containerStarted": "Container {{name}} started",
-    "failedToStartContainer": "Failed to start container {{name}}",
-    "containerStopped": "Container {{name}} stopped",
-    "failedToStopContainer": "Failed to stop container {{name}}",
-    "containerRestarted": "Container {{name}} restarted",
-    "failedToRestartContainer": "Failed to restart container {{name}}",
-    "containerPaused": "Container {{name}} paused",
-    "containerUnpaused": "Container {{name}} unpaused",
-    "failedToTogglePauseContainer": "Failed to toggle pause state for container {{name}}",
-    "containerRemoved": "Container {{name}} removed",
-    "failedToRemoveContainer": "Failed to remove container {{name}}",
-    "image": "Image",
-    "ports": "Ports",
-    "noPorts": "No ports",
-    "start": "Start",
-    "stop": "Stop",
-    "status": "Status",
-    "actions": "Actions",
-    "cardView": "Card view",
-    "listView": "List view",
-    "confirmRemoveContainer": "Are you sure you want to remove the container '{{name}}'? This action cannot be undone.",
-    "runningContainerWarning": "Warning: This container is currently running. Removing it will stop the container first.",
-    "loadingContainers": "Loading containers...",
-    "manager": "Docker Manager",
-    "autoRefresh": "Auto Refresh",
-    "timestamps": "Timestamps",
-    "lines": "Lines",
-    "filterLogs": "Filter logs...",
-    "refresh": "Refresh",
-    "download": "Download",
-    "clear": "Clear",
-    "logsDownloaded": "Logs downloaded successfully",
-    "last50": "Last 50",
-    "last100": "Last 100",
-    "last500": "Last 500",
-    "last1000": "Last 1000",
-    "allLogs": "All Logs",
-    "noLogsMatching": "No logs matching \"{{query}}\"",
-    "noLogsAvailable": "No logs available",
-    "noContainersFound": "No containers found",
-    "noContainersFoundHint": "No Docker containers are available on this host",
-    "searchPlaceholder": "Search containers...",
-    "allStatuses": "All Statuses",
-    "stateRunning": "Running",
-    "statePaused": "Paused",
-    "stateExited": "Exited",
-    "stateRestarting": "Restarting",
-    "noContainersMatchFilters": "No containers match your filters",
-    "noContainersMatchFiltersHint": "Try adjusting your search or filter criteria",
-    "failedToFetchStats": "Failed to fetch container statistics",
-    "containerNotRunning": "Container not running",
-    "startContainerToViewStats": "Start the container to view statistics",
-    "loadingStats": "Loading statistics...",
-    "errorLoadingStats": "Error loading statistics",
-    "noStatsAvailable": "No statistics available",
-    "cpuUsage": "CPU Usage",
-    "current": "Current",
-    "memoryUsage": "Memory Usage",
-    "networkIo": "Network I/O",
-    "input": "Input",
-    "output": "Output",
-    "blockIo": "Block I/O",
-    "read": "Read",
-    "write": "Write",
-    "pids": "PIDs",
-    "containerInformation": "Container Information",
-    "name": "Name",
-    "id": "ID",
-    "state": "State",
-    "containerMustBeRunning": "Container must be running to access console",
-    "verificationCodePrompt": "Enter verification code",
-    "totpVerificationFailed": "TOTP verification failed. Please try again.",
-    "browserSignInFailed": "Sign-in failed. Please try again.",
-    "connectedTo": "Connected to {{containerName}}",
-    "disconnected": "Disconnected",
-    "consoleError": "Console error",
-    "errorMessage": "Error: {{message}}",
-    "failedToConnect": "Failed to connect to container",
-    "console": "Console",
-    "selectShell": "Select shell",
-    "bash": "Bash",
-    "sh": "sh",
-    "ash": "ash",
-    "connect": "Connect",
-    "disconnect": "Disconnect",
-    "notConnected": "Not connected",
-    "clickToConnect": "Click connect to start a shell session",
-    "connectingTo": "Connecting to {{containerName}}...",
-    "containerNotFound": "Container not found",
-    "backToList": "Back to List",
-    "logs": "Logs",
-    "stats": "Stats",
-    "consoleTab": "Console",
-    "startContainerToAccess": "Start the container to access the console",
-    "noHostSelected": "No host selected",
-    "failedToFetchLogs": "Failed to fetch logs: {{error}}",
-    "failedToDownloadLogs": "Failed to download logs: {{error}}"
-  },
-  "nav": {
-    "docker": "Docker"
-  },
-  "onboarding": {
-    "feature_docker": "Docker",
-    "feature_docker_desc": "See containers, read logs and watch stats on any host running Docker."
-  },
-  "terminal": {
-    "retry": "Retry",
-    "clipboardReadFailed": "Failed to read from clipboard. Make sure clipboard permissions are granted.",
-    "clipboardWriteFailed": "Failed to copy to clipboard. Make sure the page is served over HTTPS or localhost."
-  },
-  "permissions": {
-    "use": {
-      "title": "Use Docker",
-      "description": "Open the Docker manager and container consoles on hosts with Docker enabled."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Enable Docker",
-        "description": "Manage containers on this host."
-      },
-      "containerRuntime": {
-        "label": "Container Runtime",
-        "description": "Choose the CLI used for container management on this host",
-        "docker": "Docker",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Remote server required. Connect a remote server in Settings to use this connection type."
-  },
-  "hosts": {
-    "docsLink": "View docs",
-    "hostNotFound": "Host not found",
-    "loadingHost": "Loading host..."
-  }
-}
diff --git a/plugins/docker/locales/translated/af_ZA.json b/plugins/docker/locales/translated/af_ZA.json
deleted file mode 100644
index 5f4ba7276..000000000
--- a/plugins/docker/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Docker is nie vir hierdie gasheer geaktiveer nie",
-    "validating": "Valideer Docker...",
-    "connecting": "Verbind...",
-    "error": "Fout",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Kon nie aan Docker koppel nie",
-    "containerStarted": "Houer {{name}} het begin",
-    "failedToStartContainer": "Kon nie houer {{name}} begin nie",
-    "containerStopped": "Houer {{name}} gestop",
-    "failedToStopContainer": "Kon nie houer {{name}} stop nie",
-    "containerRestarted": "Houer {{name}} herbegin",
-    "failedToRestartContainer": "Kon nie houer {{name}} herbegin nie",
-    "containerPaused": "Houer {{name}} gepouseer",
-    "containerUnpaused": "Houer {{name}} ontpoos",
-    "failedToTogglePauseContainer": "Kon nie pousestatus vir houer {{name}} wissel nie",
-    "containerRemoved": "Houer {{name}} is verwyder",
-    "failedToRemoveContainer": "Kon nie houer {{name}} verwyder nie",
-    "image": "Beeld",
-    "ports": "Hawens",
-    "noPorts": "Geen poorte nie",
-    "start": "Begin",
-    "stop": "Stop",
-    "status": "Status",
-    "actions": "Aksies",
-    "cardView": "Kaartaansig",
-    "listView": "Lysaansig",
-    "confirmRemoveContainer": "Is jy seker jy wil die houer '{{name}}' verwyder? Hierdie aksie kan nie ongedaan gemaak word nie.",
-    "runningContainerWarning": "Waarskuwing: Hierdie houer loop tans. As dit verwyder word, sal die houer eers gestop word.",
-    "loadingContainers": "Laai houers...",
-    "manager": "Docker Bestuurder",
-    "autoRefresh": "Outomatiese Herlaai",
-    "timestamps": "Tydstempels",
-    "lines": "Lyne",
-    "filterLogs": "Filtreer logboeke...",
-    "refresh": "Verfris",
-    "download": "Laai af",
-    "clear": "Duidelik",
-    "logsDownloaded": "Logboeke suksesvol afgelaai",
-    "last50": "Laaste 50",
-    "last100": "Laaste 100",
-    "last500": "Laaste 500",
-    "last1000": "Laaste 1000",
-    "allLogs": "Alle logboeke",
-    "noLogsMatching": "Geen logboeke wat ooreenstem met \"{{query}}\"",
-    "noLogsAvailable": "Geen logboeke beskikbaar nie",
-    "noContainersFound": "Geen houers gevind nie",
-    "noContainersFoundHint": "Geen Docker-houers is op hierdie gasheer beskikbaar nie",
-    "searchPlaceholder": "Soek houers...",
-    "allStatuses": "Alle statusse",
-    "stateRunning": "Hardloop",
-    "statePaused": "Onderbreek",
-    "stateExited": "Uitgegaan",
-    "stateRestarting": "Herbegin",
-    "noContainersMatchFilters": "Geen houers stem ooreen met jou filters nie",
-    "noContainersMatchFiltersHint": "Probeer om jou soek- of filterkriteria aan te pas",
-    "failedToFetchStats": "Kon nie houerstatistieke haal nie",
-    "containerNotRunning": "Houer loop nie",
-    "startContainerToViewStats": "Begin die houer om statistieke te sien",
-    "loadingStats": "Laai statistieke...",
-    "errorLoadingStats": "Fout by die laai van statistieke",
-    "noStatsAvailable": "Geen statistieke beskikbaar nie",
-    "cpuUsage": "SVE-gebruik",
-    "current": "Huidige",
-    "memoryUsage": "Geheuegebruik",
-    "networkIo": "Netwerk I/O",
-    "input": "Invoer",
-    "output": "Uitset",
-    "blockIo": "Blok I/O",
-    "read": "Lees",
-    "write": "Skryf",
-    "pids": "PID's",
-    "containerInformation": "Houerinligting",
-    "name": "Naam",
-    "id": "ID",
-    "state": "Staat",
-    "containerMustBeRunning": "Die houer moet loop om toegang tot die konsole te verkry",
-    "verificationCodePrompt": "Voer verifikasiekode in",
-    "totpVerificationFailed": "TOTP-verifikasie het misluk. Probeer asseblief weer.",
-    "browserSignInFailed": "Aanmelding het misluk. Probeer asseblief weer.",
-    "connectedTo": "Gekoppel aan {{containerName}}",
-    "disconnected": "Ontkoppel",
-    "consoleError": "Konsolefout",
-    "errorMessage": "Fout: {{message}}",
-    "failedToConnect": "Kon nie aan houer koppel nie",
-    "console": "Konsole",
-    "selectShell": "Kies dop",
-    "bash": "Bash",
-    "sh": "sj",
-    "ash": "as",
-    "connect": "Verbind",
-    "disconnect": "Ontkoppel",
-    "notConnected": "Nie gekoppel nie",
-    "clickToConnect": "Klik verbind om 'n dopsessie te begin",
-    "connectingTo": "Verbind met {{containerName}}...",
-    "containerNotFound": "Houer nie gevind nie",
-    "backToList": "Terug na lys",
-    "logs": "Logboeke",
-    "stats": "Statistiek",
-    "consoleTab": "Konsole",
-    "startContainerToAccess": "Begin die houer om toegang tot die konsole te verkry",
-    "noHostSelected": "Geen gasheer gekies nie",
-    "failedToFetchLogs": "Kon nie logboeke haal nie: {{error}}",
-    "failedToDownloadLogs": "Kon nie logboeke aflaai nie: {{error}}"
-  },
-  "nav": {
-    "docker": "Docker"
-  },
-  "onboarding": {
-    "feature_docker": "Docker",
-    "feature_docker_desc": "Sien houers, lees logs en kyk na statistieke op enige gasheer wat Docker gebruik."
-  },
-  "terminal": {
-    "retry": "Probeer weer",
-    "clipboardReadFailed": "Kon nie vanaf knipbord lees nie. Maak seker dat knipbordtoestemmings toegestaan is.",
-    "clipboardWriteFailed": "Kon nie na knipbord kopieer nie. Maak seker dat die bladsy oor HTTPS of localhost bedien word."
-  },
-  "permissions": {
-    "use": {
-      "title": "Gebruik Docker",
-      "description": "Maak die Docker-bestuurder en houerkonsoles op gashere oop met Docker geaktiveer."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Aktiveer Docker",
-        "description": "Bestuur houers op hierdie gasheer."
-      },
-      "containerRuntime": {
-        "label": "Houerlooptyd",
-        "description": "Kies die CLI wat vir houerbestuur op hierdie gasheer gebruik word",
-        "docker": "Docker",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Afstandbediener word benodig. Koppel 'n afstandbediener in Instellings om hierdie verbindingstipe te gebruik."
-  },
-  "hosts": {
-    "docsLink": "Bekyk dokumente",
-    "hostNotFound": "Gasheer nie gevind nie",
-    "loadingHost": "Laai gasheer..."
-  }
-}
diff --git a/plugins/docker/locales/translated/ar_SA.json b/plugins/docker/locales/translated/ar_SA.json
deleted file mode 100644
index 35909373c..000000000
--- a/plugins/docker/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Docker غير مفعّل لهذا المضيف",
-    "validating": "جارٍ التحقق من Docker...",
-    "connecting": "جارٍ الاتصال...",
-    "error": "خطأ",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "فشل الاتصال بـ Docker",
-    "containerStarted": "بدأت الحاوية {{name}}",
-    "failedToStartContainer": "فشل تشغيل الحاوية {{name}}",
-    "containerStopped": "توقفت الحاوية {{name}}",
-    "failedToStopContainer": "فشل إيقاف الحاوية {{name}}",
-    "containerRestarted": "أعيد تشغيل الحاوية {{name}}",
-    "failedToRestartContainer": "فشل إعادة تشغيل الحاوية {{name}}",
-    "containerPaused": "تم إيقاف الحاوية {{name}} مؤقتاً",
-    "containerUnpaused": "تم استئناف الحاوية {{name}}",
-    "failedToTogglePauseContainer": "فشل تبديل حالة الإيقاف المؤقت للحاوية {{name}}",
-    "containerRemoved": "تمت إزالة الحاوية {{name}}",
-    "failedToRemoveContainer": "فشلت إزالة الحاوية {{name}}",
-    "image": "صورة",
-    "ports": "منافذ",
-    "noPorts": "لا توجد منافذ",
-    "start": "ابدأ",
-    "stop": "التوقف",
-    "status": "الحالة",
-    "actions": "الإجراءات",
-    "cardView": "عرض البطاقة",
-    "listView": "عرض القائمة",
-    "confirmRemoveContainer": "هل أنت متأكد من رغبتك في إزالة الحاوية '{{name}}'؟ لا يمكن التراجع عن هذا الإجراء.",
-    "runningContainerWarning": "تحذير: هذه الحاوية قيد التشغيل حالياً. ستؤدي إزالتها إلى إيقافها أولاً.",
-    "loadingContainers": "جارٍ تحميل الحاويات...",
-    "manager": "مدير Docker",
-    "autoRefresh": "تحديث تلقائي",
-    "timestamps": "الطوابع الزمنية",
-    "lines": "الأسطر",
-    "filterLogs": "تصفية السجلات...",
-    "refresh": "تحديث",
-    "download": "تنزيل",
-    "clear": "مسح",
-    "logsDownloaded": "تم تنزيل السجلات بنجاح",
-    "last50": "آخر 50",
-    "last100": "آخر 100",
-    "last500": "آخر 500",
-    "last1000": "آخر 1000",
-    "allLogs": "كل السجلات",
-    "noLogsMatching": "لا توجد سجلات تطابق \"{{query}}\"",
-    "noLogsAvailable": "لا توجد سجلات متاحة",
-    "noContainersFound": "لا توجد حاويات",
-    "noContainersFoundHint": "لا توجد حاويات Docker متاحة على هذا المضيف",
-    "searchPlaceholder": "البحث عن حاويات...",
-    "allStatuses": "جميع الحالات",
-    "stateRunning": "قيد التشغيل",
-    "statePaused": "معلق",
-    "stateExited": "متوقف",
-    "stateRestarting": "إعادة التشغيل",
-    "noContainersMatchFilters": "لا توجد حاويات تطابق عوامل التصفية الخاصة بك",
-    "noContainersMatchFiltersHint": "جرّب تعديل معايير البحث أو التصفية",
-    "failedToFetchStats": "فشل جلب إحصائيات الحاوية",
-    "containerNotRunning": "الحاوية غير قيد التشغيل",
-    "startContainerToViewStats": "ابدأ الحاوية لعرض الإحصائيات",
-    "loadingStats": "جارٍ تحميل الإحصائيات...",
-    "errorLoadingStats": "خطأ في تحميل الإحصائيات",
-    "noStatsAvailable": "لا توجد إحصائيات متاحة",
-    "cpuUsage": "استخدام CPU",
-    "current": "الحالي",
-    "memoryUsage": "استخدام الذاكرة",
-    "networkIo": "الإدخال/الإخراج للشبكة",
-    "input": "إدخال",
-    "output": "المخرجات",
-    "blockIo": "الإدخال/الإخراج الكتلي",
-    "read": "قراءة",
-    "write": "كتابة",
-    "pids": "PIDs",
-    "containerInformation": "معلومات الحاوية",
-    "name": "الاسم",
-    "id": "المعرف",
-    "state": "الحالة",
-    "containerMustBeRunning": "يجب أن تكون الحاوية قيد التشغيل للوصول إلى وحدة التحكم",
-    "verificationCodePrompt": "أدخل رمز التحقق",
-    "totpVerificationFailed": "فشل التحقق من TOTP. يرجى المحاولة مرة أخرى.",
-    "browserSignInFailed": "فشل تسجيل الدخول. يرجى المحاولة مرة أخرى.",
-    "connectedTo": "متصل بـ {{containerName}}",
-    "disconnected": "تم قطع الاتصال",
-    "consoleError": "خطأ في وحدة التحكم",
-    "errorMessage": "خطأ: {{message}}",
-    "failedToConnect": "فشل الاتصال بالحاوية",
-    "console": "وحدة التحكم",
-    "selectShell": "اختر الصدفة",
-    "bash": "Bash",
-    "sh": "sh",
-    "ash": "ash",
-    "connect": "اتصل",
-    "disconnect": "قطع الاتصال",
-    "notConnected": "غير متصل",
-    "clickToConnect": "انقر فوق 'اتصل' لبدء جلسة صدفة",
-    "connectingTo": "جارٍ الاتصال بـ {{containerName}}...",
-    "containerNotFound": "الحاوية غير موجودة",
-    "backToList": "عودة إلى القائمة",
-    "logs": "السجلات",
-    "stats": "الإحصائيات",
-    "consoleTab": "وحدة التحكم",
-    "startContainerToAccess": "ابدأ تشغيل الحاوية للوصول إلى وحدة التحكم",
-    "noHostSelected": "لم يتم تحديد أي جهاز مضيف",
-    "failedToFetchLogs": "فشل في جلب السجلات: {{error}}",
-    "failedToDownloadLogs": "فشل تنزيل السجلات: {{error}}"
-  },
-  "nav": {
-    "docker": "Docker"
-  },
-  "onboarding": {
-    "feature_docker": "Docker",
-    "feature_docker_desc": "اطلع على الحاويات، واقرأ السجلات، وراقب الإحصائيات على أي مضيف يعمل بنظام Docker."
-  },
-  "terminal": {
-    "retry": "إعادة المحاولة",
-    "clipboardReadFailed": "فشلت القراءة من الحافظة. تأكد من منح أذونات الحافظة.",
-    "clipboardWriteFailed": "فشل النسخ إلى الحافظة. تأكد من تقديم الصفحة عبر HTTPS أو localhost."
-  },
-  "permissions": {
-    "use": {
-      "title": "استخدم Docker",
-      "description": "افتح مدير Docker ووحدات تحكم الحاويات على المضيفين الذين تم تمكين Docker عليهم."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "تفعيل Docker",
-        "description": "إدارة الحاويات على هذا المضيف."
-      },
-      "containerRuntime": {
-        "label": "بيئة تشغيل الحاويات",
-        "description": "اختر واجهة سطر الأوامر المستخدمة لإدارة الحاويات على هذا المضيف",
-        "docker": "Docker",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "يلزم وجود خادم بعيد. قم بتوصيل خادم بعيد في الإعدادات لاستخدام نوع الاتصال هذا."
-  },
-  "hosts": {
-    "docsLink": "عرض المستندات",
-    "hostNotFound": "المضيف غير موجود",
-    "loadingHost": "جارٍ تحميل المضيف..."
-  }
-}
diff --git a/plugins/docker/locales/translated/bg_BG.json b/plugins/docker/locales/translated/bg_BG.json
deleted file mode 100644
index b750a504d..000000000
--- a/plugins/docker/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Docker не е активиран за този хост",
-    "validating": "Валидиране на Docker...",
-    "connecting": "Свързване...",
-    "error": "Грешка",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Неуспешно свързване с Docker",
-    "containerStarted": "Контейнерът {{name}} е стартиран",
-    "failedToStartContainer": "Неуспешно стартиране на контейнера {{name}}",
-    "containerStopped": "Контейнерът {{name}} е спрян",
-    "failedToStopContainer": "Неуспешно спиране на контейнера {{name}}",
-    "containerRestarted": "Контейнерът {{name}} е рестартиран",
-    "failedToRestartContainer": "Рестартирането на контейнера не бе успешно {{name}}",
-    "containerPaused": "Контейнерът {{name}} е на пауза",
-    "containerUnpaused": "Контейнерът {{name}} е възстановен",
-    "failedToTogglePauseContainer": "Неуспешно превключване на състоянието на пауза за контейнер {{name}}",
-    "containerRemoved": "Контейнерът {{name}} е премахнат",
-    "failedToRemoveContainer": "Неуспешно премахване на контейнера {{name}}",
-    "image": "Изображение",
-    "ports": "Портове",
-    "noPorts": "Няма портове",
-    "start": "Старт",
-    "stop": "Спри",
-    "status": "Статус",
-    "actions": "Действия",
-    "cardView": "Изглед на картата",
-    "listView": "Списъчен изглед",
-    "confirmRemoveContainer": "Сигурни ли сте, че искате да премахнете контейнера „{{name}}“? Това действие не може да бъде отменено.",
-    "runningContainerWarning": "Предупреждение: Този контейнер в момента работи. Премахването му първо ще спре контейнера.",
-    "loadingContainers": "Зареждане на контейнери...",
-    "manager": "Докер мениджър",
-    "autoRefresh": "Автоматично опресняване",
-    "timestamps": "Времеви печати",
-    "lines": "Линии",
-    "filterLogs": "Филтриране на лог файлове...",
-    "refresh": "Обновяване",
-    "download": "Изтегляне",
-    "clear": "Изчисти",
-    "logsDownloaded": "Дневниците са изтеглени успешно",
-    "last50": "Последните 50",
-    "last100": "Последните 100",
-    "last500": "Последните 500",
-    "last1000": "Последни 1000",
-    "allLogs": "Всички лог файлове",
-    "noLogsMatching": "Няма регистрационни файлове, съответстващи на „{{query}}“",
-    "noLogsAvailable": "Няма налични лог файлове",
-    "noContainersFound": "Не са намерени контейнери",
-    "noContainersFoundHint": "На този хост няма налични Docker контейнери",
-    "searchPlaceholder": "Търсене на контейнери...",
-    "allStatuses": "Всички статуси",
-    "stateRunning": "Бягане",
-    "statePaused": "Пауза",
-    "stateExited": "Изход",
-    "stateRestarting": "Рестартиране",
-    "noContainersMatchFilters": "Няма контейнери, които да отговарят на вашите филтри",
-    "noContainersMatchFiltersHint": "Опитайте да коригирате критериите си за търсене или филтриране",
-    "failedToFetchStats": "Извличането на статистически данни за контейнера не бе успешно",
-    "containerNotRunning": "Контейнерът не работи",
-    "startContainerToViewStats": "Стартирайте контейнера, за да видите статистиката",
-    "loadingStats": "Зареждане на статистика...",
-    "errorLoadingStats": "Грешка при зареждане на статистиката",
-    "noStatsAvailable": "Няма налична статистика",
-    "cpuUsage": "Използване на процесора",
-    "current": "Текущ",
-    "memoryUsage": "Използване на паметта",
-    "networkIo": "Мрежов вход/изход",
-    "input": "Вход",
-    "output": "Изход",
-    "blockIo": "Блокиране на входно/изходни данни",
-    "read": "Прочетете",
-    "write": "Пишете",
-    "pids": "PID-ове",
-    "containerInformation": "Информация за контейнера",
-    "name": "Име",
-    "id": "Идентификационен номер",
-    "state": "Щат",
-    "containerMustBeRunning": "Контейнерът трябва да е работещ, за да има достъп до конзолата",
-    "verificationCodePrompt": "Въведете код за потвърждение",
-    "totpVerificationFailed": "Проверката на TOTP не бе успешна. Моля, опитайте отново.",
-    "browserSignInFailed": "Влизането не бе успешно. Моля, опитайте отново.",
-    "connectedTo": "Свързано с {{containerName}}",
-    "disconnected": "Изключен",
-    "consoleError": "Грешка в конзолата",
-    "errorMessage": "Грешка: {{message}}",
-    "failedToConnect": "Неуспешно свързване с контейнера",
-    "console": "Конзола",
-    "selectShell": "Изберете черупка",
-    "bash": "Баш",
-    "sh": "ш",
-    "ash": "пепел",
-    "connect": "Свържете се",
-    "disconnect": "Изключване",
-    "notConnected": "Няма връзка",
-    "clickToConnect": "Щракнете върху „Свързване“, за да стартирате сесия на shell",
-    "connectingTo": "Свързване към {{containerName}}...",
-    "containerNotFound": "Контейнерът не е намерен",
-    "backToList": "Обратно към списъка",
-    "logs": "Дневници",
-    "stats": "Статистика",
-    "consoleTab": "Конзола",
-    "startContainerToAccess": "Стартирайте контейнера, за да получите достъп до конзолата",
-    "noHostSelected": "Няма избран хост",
-    "failedToFetchLogs": "Неуспешно извличане на лог файлове: {{error}}",
-    "failedToDownloadLogs": "Неуспешно изтегляне на лог файлове: {{error}}"
-  },
-  "nav": {
-    "docker": "Докер"
-  },
-  "onboarding": {
-    "feature_docker": "Докер",
-    "feature_docker_desc": "Вижте контейнери, прочетете лог файлове и наблюдавайте статистики на всеки хост, на който работи Docker."
-  },
-  "terminal": {
-    "retry": "Опитай отново",
-    "clipboardReadFailed": "Четенето от клипборда не бе успешно. Уверете се, че са предоставени разрешения за достъп до клипборда.",
-    "clipboardWriteFailed": "Копирането в клипборда не бе успешно. Уверете се, че страницата се предоставя през HTTPS или localhost."
-  },
-  "permissions": {
-    "use": {
-      "title": "Използвайте Докер",
-      "description": "Отворете Docker manager-а и конзолите за контейнери на хостове с активиран Docker."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Активиране на Докер",
-        "description": "Управлявайте контейнери на този хост."
-      },
-      "containerRuntime": {
-        "label": "Изпълнение на контейнера",
-        "description": "Изберете CLI, използван за управление на контейнери на този хост",
-        "docker": "Докер",
-        "podman": "Подман"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Изисква се отдалечен сървър. Свържете се с отдалечен сървър в „Настройки“, за да използвате този тип връзка."
-  },
-  "hosts": {
-    "docsLink": "Преглед на документи",
-    "hostNotFound": "Хостът не е намерен",
-    "loadingHost": "Зареждане на хоста..."
-  }
-}
diff --git a/plugins/docker/locales/translated/bn_BD.json b/plugins/docker/locales/translated/bn_BD.json
deleted file mode 100644
index 30f924a5b..000000000
--- a/plugins/docker/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "এই হোস্টের জন্য ডকার সক্রিয় করা নেই।",
-    "validating": "ডকার যাচাই করা হচ্ছে...",
-    "connecting": "সংযোগ স্থাপন...",
-    "error": "ত্রুটি",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "ডকারের সাথে সংযোগ করতে ব্যর্থ হয়েছে",
-    "containerStarted": "কন্টেইনার {{name}} চালু হয়েছে",
-    "failedToStartContainer": "{{name}} কন্টেইনারটি শুরু করতে ব্যর্থ হয়েছে",
-    "containerStopped": "কন্টেইনার {{name}} থেমে গেছে",
-    "failedToStopContainer": "কন্টেইনার বন্ধ করতে ব্যর্থ {{name}}",
-    "containerRestarted": "কন্টেইনার {{name}} পুনরায় চালু হয়েছে",
-    "failedToRestartContainer": "কন্টেইনার পুনরায় চালু করতে ব্যর্থ {{name}}",
-    "containerPaused": "কন্টেইনার {{name}} থামানো হয়েছে",
-    "containerUnpaused": "কন্টেইনার {{name}} বিরতিহীন",
-    "failedToTogglePauseContainer": "কন্টেইনার {{name}} এর জন্য বিরতি অবস্থা টগল করতে ব্যর্থ হয়েছে",
-    "containerRemoved": "কন্টেইনার {{name}} সরানো হয়েছে",
-    "failedToRemoveContainer": "কন্টেইনার অপসারণ করা সম্ভব হয়নি {{name}}",
-    "image": "ছবি",
-    "ports": "বন্দর",
-    "noPorts": "কোন পোর্ট নেই",
-    "start": "শুরু করুন",
-    "stop": "থামুন",
-    "status": "অবস্থা",
-    "actions": "কর্ম",
-    "cardView": "কার্ড ভিউ",
-    "listView": "তালিকা দৃশ্য",
-    "confirmRemoveContainer": "আপনি কি '{{name}}' কন্টেইনারটি সরাতে নিশ্চিত? এই কাজটি পূর্বাবস্থায় ফেরানো যাবে না।",
-    "runningContainerWarning": "সতর্কীকরণ: এই কন্টেইনারটি বর্তমানে চালু আছে। এটি অপসারণ করলে প্রথমে কন্টেইনারটি বন্ধ হবে।",
-    "loadingContainers": "কন্টেইনার লোড করা হচ্ছে...",
-    "manager": "ডকার ম্যানেজার",
-    "autoRefresh": "স্বয়ংক্রিয় রিফ্রেশ",
-    "timestamps": "টাইমস্ট্যাম্প",
-    "lines": "লাইন",
-    "filterLogs": "লগ ফিল্টার করুন...",
-    "refresh": "রিফ্রেশ",
-    "download": "ডাউনলোড করুন",
-    "clear": "পরিষ্কার",
-    "logsDownloaded": "লগগুলি সফলভাবে ডাউনলোড করা হয়েছে।",
-    "last50": "শেষ ৫০",
-    "last100": "শেষ ১০০",
-    "last500": "শেষ ৫০০",
-    "last1000": "শেষ ১০০০",
-    "allLogs": "সমস্ত লগ",
-    "noLogsMatching": "\"{{query}} \" এর সাথে মেলে এমন কোনও লগ নেই",
-    "noLogsAvailable": "কোন লগ উপলব্ধ নেই",
-    "noContainersFound": "কোন কন্টেইনার পাওয়া যায়নি",
-    "noContainersFoundHint": "এই হোস্টে কোনো ডকার কন্টেইনার উপলব্ধ নেই।",
-    "searchPlaceholder": "কন্টেইনারগুলি অনুসন্ধান করুন...",
-    "allStatuses": "সমস্ত স্ট্যাটাস",
-    "stateRunning": "দৌড়ানো",
-    "statePaused": "বিরতি দেওয়া হয়েছে",
-    "stateExited": "উত্তেজিত",
-    "stateRestarting": "পুনরায় চালু করা",
-    "noContainersMatchFilters": "আপনার ফিল্টারগুলির সাথে কোনও কন্টেইনার মেলে না",
-    "noContainersMatchFiltersHint": "আপনার অনুসন্ধান বা ফিল্টারের শর্তাবলী পরিবর্তন করে দেখুন।",
-    "failedToFetchStats": "কন্টেইনার পরিসংখ্যান আনতে ব্যর্থ হয়েছে",
-    "containerNotRunning": "কন্টেইনারটি চলছে না",
-    "startContainerToViewStats": "পরিসংখ্যান দেখতে কন্টেইনারটি চালু করুন।",
-    "loadingStats": "পরিসংখ্যান লোড হচ্ছে...",
-    "errorLoadingStats": "পরিসংখ্যান লোড করতে ত্রুটি",
-    "noStatsAvailable": "কোন পরিসংখ্যান উপলব্ধ নেই",
-    "cpuUsage": "সিপিইউ ব্যবহার",
-    "current": "বর্তমান",
-    "memoryUsage": "মেমরি ব্যবহার",
-    "networkIo": "নেটওয়ার্ক আই/ও",
-    "input": "ইনপুট",
-    "output": "আউটপুট",
-    "blockIo": "ব্লক আই/ও",
-    "read": "পড়ুন",
-    "write": "লিখুন",
-    "pids": "পিআইডি",
-    "containerInformation": "কন্টেইনারের তথ্য",
-    "name": "নাম",
-    "id": "আইডি",
-    "state": "রাজ্য",
-    "containerMustBeRunning": "কনসোল অ্যাক্সেস করতে হলে কন্টেইনারটি অবশ্যই চালু থাকতে হবে।",
-    "verificationCodePrompt": "যাচাইকরণ কোড প্রবেশ করান",
-    "totpVerificationFailed": "TOTP যাচাইকরণ ব্যর্থ হয়েছে। অনুগ্রহ করে আবার চেষ্টা করুন।",
-    "browserSignInFailed": "সাইন-ইন ব্যর্থ হয়েছে। অনুগ্রহ করে আবার চেষ্টা করুন।",
-    "connectedTo": "{{containerName}} এর সাথে সংযুক্ত",
-    "disconnected": "বিচ্ছিন্ন",
-    "consoleError": "কনসোল ত্রুটি",
-    "errorMessage": "ত্রুটি: {{message}}",
-    "failedToConnect": "কন্টেইনারের সাথে সংযোগ করতে ব্যর্থ হয়েছে",
-    "console": "কনসোল",
-    "selectShell": "শেল নির্বাচন করুন",
-    "bash": "ব্যাশ",
-    "sh": "শ",
-    "ash": "ছাই",
-    "connect": "সংযোগ করুন",
-    "disconnect": "সংযোগ বিচ্ছিন্ন করুন",
-    "notConnected": "সংযুক্ত নয়",
-    "clickToConnect": "শেল সেশন শুরু করতে কানেক্ট-এ ক্লিক করুন।",
-    "connectingTo": "{{containerName}} এর সাথে সংযোগ স্থাপন করা হচ্ছে...",
-    "containerNotFound": "কন্টেইনারটি খুঁজে পাওয়া যায়নি",
-    "backToList": "তালিকায় ফিরে যান",
-    "logs": "লগ",
-    "stats": "পরিসংখ্যান",
-    "consoleTab": "কনসোল",
-    "startContainerToAccess": "কনসোল অ্যাক্সেস করতে কন্টেইনারটি চালু করুন।",
-    "noHostSelected": "কোন হোস্ট নির্বাচন করা হয়নি",
-    "failedToFetchLogs": "লগ আনতে ব্যর্থ: {{error}}",
-    "failedToDownloadLogs": "লগ ডাউনলোড করা যায়নি: {{error}}"
-  },
-  "nav": {
-    "docker": "ডকার"
-  },
-  "onboarding": {
-    "feature_docker": "ডকার",
-    "feature_docker_desc": "ডকার চালিত যেকোনো হোস্টে কন্টেইনার দেখুন, লগ পড়ুন এবং পরিসংখ্যান পর্যবেক্ষণ করুন।"
-  },
-  "terminal": {
-    "retry": "পুনরায় চেষ্টা করুন",
-    "clipboardReadFailed": "ক্লিপবোর্ড থেকে পড়তে ব্যর্থ হয়েছে। নিশ্চিত করুন যে ক্লিপবোর্ডের অনুমতি দেওয়া আছে।",
-    "clipboardWriteFailed": "ক্লিপবোর্ডে কপি করা সম্ভব হয়নি। নিশ্চিত করুন যে পৃষ্ঠাটি HTTPS বা লোকালহোস্টের মাধ্যমে পরিবেশিত হচ্ছে।"
-  },
-  "permissions": {
-    "use": {
-      "title": "ডকার ব্যবহার করুন",
-      "description": "যেসব হোস্টে ডকার সক্রিয় করা আছে, সেগুলোতে ডকার ম্যানেজার এবং কন্টেইনার কনসোল খুলুন।"
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "ডকার সক্রিয় করুন",
-        "description": "এই হোস্টে কন্টেইনারগুলি পরিচালনা করুন।"
-      },
-      "containerRuntime": {
-        "label": "কন্টেইনার রানটাইম",
-        "description": "এই হোস্টে কন্টেইনার ব্যবস্থাপনার জন্য ব্যবহৃত CLI নির্বাচন করুন",
-        "docker": "ডকার",
-        "podman": "পডম্যান"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "রিমোট সার্ভার প্রয়োজন। এই সংযোগের ধরণটি ব্যবহার করতে সেটিংস-এ একটি রিমোট সার্ভার সংযুক্ত করুন।"
-  },
-  "hosts": {
-    "docsLink": "নথি দেখুন",
-    "hostNotFound": "হোস্ট খুঁজে পাওয়া যায়নি",
-    "loadingHost": "হোস্ট লোড হচ্ছে..."
-  }
-}
diff --git a/plugins/docker/locales/translated/ca_ES.json b/plugins/docker/locales/translated/ca_ES.json
deleted file mode 100644
index 752b52f75..000000000
--- a/plugins/docker/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Docker no està habilitat per a aquest amfitrió",
-    "validating": "Validant Docker...",
-    "connecting": "Connectant...",
-    "error": "Error",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "No s'ha pogut connectar a Docker",
-    "containerStarted": "Contenidor {{name}} iniciat",
-    "failedToStartContainer": "No s'ha pogut iniciar el contenidor {{name}}",
-    "containerStopped": "El contenidor {{name}} s'ha aturat",
-    "failedToStopContainer": "No s'ha pogut aturar el contenidor {{name}}",
-    "containerRestarted": "El contenidor {{name}} s'ha reiniciat",
-    "failedToRestartContainer": "No s'ha pogut reiniciar el contenidor {{name}}",
-    "containerPaused": "Contenidor {{name}} en pausa",
-    "containerUnpaused": "Contenidor {{name}} reactivat",
-    "failedToTogglePauseContainer": "No s'ha pogut activar o desactivar l'estat de pausa per al contenidor {{name}}",
-    "containerRemoved": "Contenidor {{name}} eliminat",
-    "failedToRemoveContainer": "No s'ha pogut eliminar el contenidor {{name}}",
-    "image": "Imatge",
-    "ports": "Ports",
-    "noPorts": "Sense ports",
-    "start": "Inici",
-    "stop": "Atura",
-    "status": "Estat",
-    "actions": "Accions",
-    "cardView": "Vista de targeta",
-    "listView": "Vista de llista",
-    "confirmRemoveContainer": "Esteu segur que voleu eliminar el contenidor '{{name}}'? Aquesta acció no es pot desfer.",
-    "runningContainerWarning": "Avís: Aquest contenidor està en execució. Si el suprimiu, primer s'aturarà el contenidor.",
-    "loadingContainers": "Carregant contenidors...",
-    "manager": "Gestor de Docker",
-    "autoRefresh": "Actualització automàtica",
-    "timestamps": "Marques de temps",
-    "lines": "Línies",
-    "filterLogs": "Filtra els registres...",
-    "refresh": "Actualitza",
-    "download": "Descarrega",
-    "clear": "Clar",
-    "logsDownloaded": "Registres descarregats correctament",
-    "last50": "Últims 50",
-    "last100": "Últims 100",
-    "last500": "Últims 500",
-    "last1000": "Últims 1000",
-    "allLogs": "Tots els registres",
-    "noLogsMatching": "No hi ha registres que coincideixin amb \"{{query}}\"",
-    "noLogsAvailable": "No hi ha registres disponibles",
-    "noContainersFound": "No s'han trobat contenidors",
-    "noContainersFoundHint": "No hi ha contenidors Docker disponibles en aquest amfitrió.",
-    "searchPlaceholder": "Cerca contenidors...",
-    "allStatuses": "Tots els estats",
-    "stateRunning": "Córrer",
-    "statePaused": "En pausa",
-    "stateExited": "Sortit",
-    "stateRestarting": "Reinici",
-    "noContainersMatchFilters": "No hi ha contenidors que coincideixin amb els vostres filtres",
-    "noContainersMatchFiltersHint": "Prova d'ajustar els criteris de cerca o de filtre",
-    "failedToFetchStats": "No s'han pogut obtenir les estadístiques del contenidor",
-    "containerNotRunning": "El contenidor no funciona",
-    "startContainerToViewStats": "Inicia el contenidor per veure les estadístiques",
-    "loadingStats": "S'estan carregant les estadístiques...",
-    "errorLoadingStats": "S'ha produït un error en carregar les estadístiques",
-    "noStatsAvailable": "No hi ha estadístiques disponibles",
-    "cpuUsage": "Ús de la CPU",
-    "current": "Actual",
-    "memoryUsage": "Ús de memòria",
-    "networkIo": "E/S de xarxa",
-    "input": "Entrada",
-    "output": "Sortida",
-    "blockIo": "Bloc d'E/S",
-    "read": "Llegir",
-    "write": "Escriure",
-    "pids": "PID",
-    "containerInformation": "Informació del contenidor",
-    "name": "Nom",
-    "id": "ID",
-    "state": "Estat",
-    "containerMustBeRunning": "El contenidor ha d'estar en execució per accedir a la consola.",
-    "verificationCodePrompt": "Introduïu el codi de verificació",
-    "totpVerificationFailed": "La verificació TOTP ha fallat. Torna-ho a provar.",
-    "browserSignInFailed": "L'inici de sessió ha fallat. Torna-ho a provar.",
-    "connectedTo": "Connectat a {{containerName}}",
-    "disconnected": "Desconnectat",
-    "consoleError": "Error de consola",
-    "errorMessage": "Error: {{message}}",
-    "failedToConnect": "No s'ha pogut connectar al contenidor",
-    "console": "Consola",
-    "selectShell": "Selecciona l'intèrpret d'ordres",
-    "bash": "Bash",
-    "sh": "sh",
-    "ash": "cendra",
-    "connect": "Connecta",
-    "disconnect": "Desconnecta",
-    "notConnected": "No connectat",
-    "clickToConnect": "Feu clic a Connecta per iniciar una sessió de shell",
-    "connectingTo": "Connectant a {{containerName}}...",
-    "containerNotFound": "No s'ha trobat el contenidor",
-    "backToList": "Torna a la llista",
-    "logs": "Registres",
-    "stats": "Estadístiques",
-    "consoleTab": "Consola",
-    "startContainerToAccess": "Inicieu el contenidor per accedir a la consola",
-    "noHostSelected": "No s'ha seleccionat cap amfitrió",
-    "failedToFetchLogs": "No s'han pogut obtenir els registres: {{error}}",
-    "failedToDownloadLogs": "No s'han pogut descarregar els registres: {{error}}"
-  },
-  "nav": {
-    "docker": "Docker"
-  },
-  "onboarding": {
-    "feature_docker": "Docker",
-    "feature_docker_desc": "Veure contenidors, llegir registres i observar estadístiques de qualsevol host que executi Docker."
-  },
-  "terminal": {
-    "retry": "Torna-ho a intentar",
-    "clipboardReadFailed": "No s'ha pogut llegir del porta-retalls. Assegureu-vos que els permisos del porta-retalls estiguin concedits.",
-    "clipboardWriteFailed": "No s'ha pogut copiar al porta-retalls. Assegureu-vos que la pàgina es serveix per HTTPS o localhost."
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilitza Docker",
-      "description": "Obriu el gestor de Docker i les consoles de contenidors als hosts amb Docker habilitat."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Activa Docker",
-        "description": "Gestiona els contenidors en aquest amfitrió."
-      },
-      "containerRuntime": {
-        "label": "Temps d'execució del contenidor",
-        "description": "Trieu la CLI utilitzada per a la gestió de contenidors en aquest amfitrió",
-        "docker": "Docker",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Cal un servidor remot. Connecteu un servidor remot a Configuració per utilitzar aquest tipus de connexió."
-  },
-  "hosts": {
-    "docsLink": "Veure documents",
-    "hostNotFound": "No s'ha trobat l'amfitrió",
-    "loadingHost": "S'està carregant l'amfitrió..."
-  }
-}
diff --git a/plugins/docker/locales/translated/cs_CZ.json b/plugins/docker/locales/translated/cs_CZ.json
deleted file mode 100644
index 04a289181..000000000
--- a/plugins/docker/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Docker není pro tohoto hostitele povolen.",
-    "validating": "Ověřování Dockeru...",
-    "connecting": "Spojovací...",
-    "error": "Chyba",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Nepodařilo se připojit k Dockeru",
-    "containerStarted": "Kontejner {{name}} spuštěn",
-    "failedToStartContainer": "Nepodařilo se spustit kontejner {{name}}",
-    "containerStopped": "Kontejner {{name}} zastaven",
-    "failedToStopContainer": "Nepodařilo se zastavit kontejner {{name}}",
-    "containerRestarted": "Kontejner {{name}} restartován",
-    "failedToRestartContainer": "Nepodařilo se restartovat kontejner {{name}}",
-    "containerPaused": "Kontejner {{name}} pozastaven",
-    "containerUnpaused": "Kontejner {{name}} pozastaven",
-    "failedToTogglePauseContainer": "Nepodařilo se přepnout stav pozastavení pro kontejner {{name}}",
-    "containerRemoved": "Kontejner {{name}} byl odstraněn",
-    "failedToRemoveContainer": "Nepodařilo se odstranit kontejner {{name}}",
-    "image": "Obraz",
-    "ports": "Porty",
-    "noPorts": "Žádné porty",
-    "start": "Start",
-    "stop": "Zastávka",
-    "status": "Postavení",
-    "actions": "Akce",
-    "cardView": "Zobrazení karty",
-    "listView": "Seznam",
-    "confirmRemoveContainer": "Opravdu chcete odstranit kontejner '{{name}}'? Tuto akci nelze vrátit zpět.",
-    "runningContainerWarning": "Varování: Tento kontejner je aktuálně spuštěný. Jeho odstraněním se nejprve zastaví.",
-    "loadingContainers": "Nakládání kontejnerů...",
-    "manager": "Správce Dockeru",
-    "autoRefresh": "Automatické obnovení",
-    "timestamps": "Časová razítka",
-    "lines": "Čáry",
-    "filterLogs": "Filtrovat protokoly...",
-    "refresh": "Obnovit",
-    "download": "Stáhnout",
-    "clear": "Jasný",
-    "logsDownloaded": "Protokoly byly úspěšně staženy",
-    "last50": "Posledních 50",
-    "last100": "Posledních 100",
-    "last500": "Posledních 500",
-    "last1000": "Posledních 1000",
-    "allLogs": "Všechny protokoly",
-    "noLogsMatching": "Žádné protokoly neodpovídají „{{query}}“",
-    "noLogsAvailable": "Žádné protokoly nejsou k dispozici",
-    "noContainersFound": "Nenalezeny žádné kontejnery",
-    "noContainersFoundHint": "Na tomto hostiteli nejsou k dispozici žádné kontejnery Docker.",
-    "searchPlaceholder": "Hledat kontejnery...",
-    "allStatuses": "Všechny stavy",
-    "stateRunning": "Běh",
-    "statePaused": "Pozastaveno",
-    "stateExited": "Ukončeno",
-    "stateRestarting": "Restartování",
-    "noContainersMatchFilters": "Žádné kontejnery neodpovídají vašim filtrům",
-    "noContainersMatchFiltersHint": "Zkuste upravit kritéria vyhledávání nebo filtru",
-    "failedToFetchStats": "Nepodařilo se načíst statistiky kontejneru",
-    "containerNotRunning": "Kontejner neběží",
-    "startContainerToViewStats": "Spusťte kontejner pro zobrazení statistik",
-    "loadingStats": "Načítání statistik...",
-    "errorLoadingStats": "Chyba při načítání statistik",
-    "noStatsAvailable": "Žádné statistiky nejsou k dispozici",
-    "cpuUsage": "Využití CPU",
-    "current": "Proud",
-    "memoryUsage": "Využití paměti",
-    "networkIo": "Síťové I/O",
-    "input": "Vstup",
-    "output": "Výstup",
-    "blockIo": "Blok I/O",
-    "read": "Číst",
-    "write": "Napsat",
-    "pids": "PIDy",
-    "containerInformation": "Informace o kontejneru",
-    "name": "Jméno",
-    "id": "Průkaz totožnosti",
-    "state": "Stát",
-    "containerMustBeRunning": "Pro přístup ke konzoli musí být kontejner spuštěný.",
-    "verificationCodePrompt": "Zadejte ověřovací kód",
-    "totpVerificationFailed": "Ověření TOTP se nezdařilo. Zkuste to prosím znovu.",
-    "browserSignInFailed": "Přihlášení se nezdařilo. Zkuste to prosím znovu.",
-    "connectedTo": "Připojeno k {{containerName}}",
-    "disconnected": "Odpojeno",
-    "consoleError": "Chyba konzole",
-    "errorMessage": "Chyba: {{message}}",
-    "failedToConnect": "Nepodařilo se připojit ke kontejneru",
-    "console": "Utěšit",
-    "selectShell": "Vyberte skořápku",
-    "bash": "Bash",
-    "sh": "sh",
-    "ash": "popel",
-    "connect": "Připojit",
-    "disconnect": "Odpojit",
-    "notConnected": "Nepřipojeno",
-    "clickToConnect": "Kliknutím na tlačítko Připojit spusťte relaci shellu.",
-    "connectingTo": "Připojování k {{containerName}}...",
-    "containerNotFound": "Kontejner nenalezen",
-    "backToList": "Zpět na seznam",
-    "logs": "Protokoly",
-    "stats": "Statistiky",
-    "consoleTab": "Utěšit",
-    "startContainerToAccess": "Spusťte kontejner pro přístup ke konzoli",
-    "noHostSelected": "Nebyl vybrán žádný hostitel",
-    "failedToFetchLogs": "Nepodařilo se načíst protokoly: {{error}}",
-    "failedToDownloadLogs": "Stažení protokolů se nezdařilo: {{error}}"
-  },
-  "nav": {
-    "docker": "Přístavní dělník"
-  },
-  "onboarding": {
-    "feature_docker": "Přístavní dělník",
-    "feature_docker_desc": "Zobrazujte kontejnery, čtěte protokoly a sledujte statistiky na jakémkoli hostiteli s Dockerem."
-  },
-  "terminal": {
-    "retry": "Zkusit znovu",
-    "clipboardReadFailed": "Čtení ze schránky se nezdařilo. Ujistěte se, že máte povolena přístup ke schránce.",
-    "clipboardWriteFailed": "Kopírování do schránky se nezdařilo. Ujistěte se, že stránka je zobrazována přes HTTPS nebo localhost."
-  },
-  "permissions": {
-    "use": {
-      "title": "Použijte Docker",
-      "description": "Otevřete správce Dockeru a konzole kontejnerů na hostitelích s povoleným Dockerem."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Povolit Docker",
-        "description": "Spravovat kontejnery na tomto hostiteli."
-      },
-      "containerRuntime": {
-        "label": "Běh kontejneru",
-        "description": "Vyberte rozhraní CLI používané pro správu kontejnerů na tomto hostiteli",
-        "docker": "Přístavní dělník",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Je vyžadován vzdálený server. Pro použití tohoto typu připojení se připojte ke vzdálenému serveru v Nastavení."
-  },
-  "hosts": {
-    "docsLink": "Zobrazit dokumenty",
-    "hostNotFound": "Hostitel nenalezen",
-    "loadingHost": "Načítání hostitele..."
-  }
-}
diff --git a/plugins/docker/locales/translated/da_DK.json b/plugins/docker/locales/translated/da_DK.json
deleted file mode 100644
index b2179fddb..000000000
--- a/plugins/docker/locales/translated/da_DK.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Docker er ikke aktiveret for denne vært",
-    "validating": "Validerer Docker...",
-    "connecting": "Forbinder...",
-    "error": "Fejl",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Kunne ikke oprette forbindelse til Docker",
-    "containerStarted": "Container {{name}} startet",
-    "failedToStartContainer": "Kunne ikke starte containeren {{name}}",
-    "containerStopped": "Container {{name}} stoppet",
-    "failedToStopContainer": "Kunne ikke stoppe containeren {{name}}",
-    "containerRestarted": "Container {{name}} genstartet",
-    "failedToRestartContainer": "Kunne ikke genstarte containeren {{name}}",
-    "containerPaused": "Container {{name}} sat på pause",
-    "containerUnpaused": "Container {{name}} genoptaget",
-    "failedToTogglePauseContainer": "Kunne ikke slå pausetilstand til og fra for container {{name}}",
-    "containerRemoved": "Container {{name}} fjernet",
-    "failedToRemoveContainer": "Kunne ikke fjerne containeren {{name}}",
-    "image": "Billede",
-    "ports": "Havne",
-    "noPorts": "Ingen porte",
-    "start": "Starte",
-    "stop": "Stop",
-    "status": "Status",
-    "actions": "Handlinger",
-    "cardView": "Kortvisning",
-    "listView": "Listevisning",
-    "confirmRemoveContainer": "Er du sikker på, at du vil fjerne containeren '{{name}}'? Denne handling kan ikke fortrydes.",
-    "runningContainerWarning": "Advarsel: Denne container kører i øjeblikket. Fjernelse af den vil stoppe containeren først.",
-    "loadingContainers": "Indlæser containere...",
-    "manager": "Docker Manager",
-    "autoRefresh": "Automatisk opdatering",
-    "timestamps": "Tidsstempler",
-    "lines": "Linjer",
-    "filterLogs": "Filtrer logfiler...",
-    "refresh": "Opfriske",
-    "download": "Download",
-    "clear": "Klar",
-    "logsDownloaded": "Logfilerne er downloadet",
-    "last50": "Sidste 50",
-    "last100": "Sidste 100",
-    "last500": "Sidste 500",
-    "last1000": "Sidste 1000",
-    "allLogs": "Alle logfiler",
-    "noLogsMatching": "Ingen logfiler matcher \"{{query}}\"",
-    "noLogsAvailable": "Ingen logfiler tilgængelige",
-    "noContainersFound": "Ingen containere fundet",
-    "noContainersFoundHint": "Der er ingen Docker-containere tilgængelige på denne vært",
-    "searchPlaceholder": "Søg i containere...",
-    "allStatuses": "Alle statusser",
-    "stateRunning": "Løb",
-    "statePaused": "Pausesat",
-    "stateExited": "Afsluttet",
-    "stateRestarting": "Genstart",
-    "noContainersMatchFilters": "Ingen containere matcher dine filtre",
-    "noContainersMatchFiltersHint": "Prøv at justere dine søge- eller filterkriterier",
-    "failedToFetchStats": "Kunne ikke hente containerstatistik",
-    "containerNotRunning": "Containeren kører ikke",
-    "startContainerToViewStats": "Start containeren for at se statistik",
-    "loadingStats": "Indlæser statistik...",
-    "errorLoadingStats": "Fejl ved indlæsning af statistik",
-    "noStatsAvailable": "Ingen statistik tilgængelig",
-    "cpuUsage": "CPU-forbrug",
-    "current": "Strøm",
-    "memoryUsage": "Hukommelsesforbrug",
-    "networkIo": "Netværks-I/O",
-    "input": "Input",
-    "output": "Produktion",
-    "blockIo": "Blok I/O",
-    "read": "Læse",
-    "write": "Skrive",
-    "pids": "PID'er",
-    "containerInformation": "Containeroplysninger",
-    "name": "Navn",
-    "id": "ID",
-    "state": "Tilstand",
-    "containerMustBeRunning": "Containeren skal køre for at få adgang til konsollen",
-    "verificationCodePrompt": "Indtast bekræftelseskode",
-    "totpVerificationFailed": "TOTP-bekræftelse mislykkedes. Prøv igen.",
-    "browserSignInFailed": "Log ind mislykkedes. Prøv igen.",
-    "connectedTo": "Forbundet til {{containerName}}",
-    "disconnected": "Afbrudt",
-    "consoleError": "Konsolfejl",
-    "errorMessage": "Fejl: {{message}}",
-    "failedToConnect": "Kunne ikke oprette forbindelse til containeren",
-    "console": "Konsol",
-    "selectShell": "Vælg skal",
-    "bash": "Bash",
-    "sh": "sh",
-    "ash": "aske",
-    "connect": "Forbinde",
-    "disconnect": "Afbryde",
-    "notConnected": "Ikke forbundet",
-    "clickToConnect": "Klik på Opret forbindelse for at starte en shell-session",
-    "connectingTo": "Forbinder til {{containerName}}...",
-    "containerNotFound": "Beholderen blev ikke fundet",
-    "backToList": "Tilbage til listen",
-    "logs": "Logfiler",
-    "stats": "Statistik",
-    "consoleTab": "Konsol",
-    "startContainerToAccess": "Start containeren for at få adgang til konsollen",
-    "noHostSelected": "Ingen vært valgt",
-    "failedToFetchLogs": "Kunne ikke hente logfiler: {{error}}",
-    "failedToDownloadLogs": "Kunne ikke downloade logfiler: {{error}}"
-  },
-  "nav": {
-    "docker": "Docker"
-  },
-  "onboarding": {
-    "feature_docker": "Docker",
-    "feature_docker_desc": "Se containere, læs logfiler og se statistikker på enhver vært, der kører Docker."
-  },
-  "terminal": {
-    "retry": "Prøv igen",
-    "clipboardReadFailed": "Kunne ikke læse fra udklipsholderen. Sørg for, at der er givet tilladelse til udklipsholderen.",
-    "clipboardWriteFailed": "Kunne ikke kopiere til udklipsholder. Sørg for, at siden serveres via HTTPS eller localhost."
-  },
-  "permissions": {
-    "use": {
-      "title": "Brug Docker",
-      "description": "Åbn Docker-manageren og containerkonsollerne på værter med Docker aktiveret."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Aktivér Docker",
-        "description": "Administrer containere på denne vært."
-      },
-      "containerRuntime": {
-        "label": "Containerkørselstid",
-        "description": "Vælg den CLI, der bruges til containeradministration på denne vært",
-        "docker": "Docker",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Fjernserver kræves. Opret forbindelse til en fjernserver i Indstillinger for at bruge denne forbindelsestype."
-  },
-  "hosts": {
-    "docsLink": "Se dokumenter",
-    "hostNotFound": "Værten blev ikke fundet",
-    "loadingHost": "Indlæser vært..."
-  }
-}
diff --git a/plugins/docker/locales/translated/de_DE.json b/plugins/docker/locales/translated/de_DE.json
deleted file mode 100644
index e4aae504d..000000000
--- a/plugins/docker/locales/translated/de_DE.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Docker ist für diesen Host nicht aktiviert",
-    "validating": "Docker wird überprüft...",
-    "connecting": "Verbindung wird hergestellt...",
-    "error": "Fehler",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Verbindung zu Docker fehlgeschlagen",
-    "containerStarted": "Container {{name}} gestartet",
-    "failedToStartContainer": "Starten des Containers {{name}} fehlgeschlagen",
-    "containerStopped": "Container {{name}} gestoppt",
-    "failedToStopContainer": "Stoppen des Containers {{name}} fehlgeschlagen",
-    "containerRestarted": "Container {{name}} neu gestartet",
-    "failedToRestartContainer": "Neustart des Containers {{name}} fehlgeschlagen",
-    "containerPaused": "Container {{name}} pausiert",
-    "containerUnpaused": "Container {{name}} fortgesetzt",
-    "failedToTogglePauseContainer": "Umschalten des Pause-Zustands für Container {{name}} fehlgeschlagen",
-    "containerRemoved": "Container {{name}} entfernt",
-    "failedToRemoveContainer": "Entfernen des Containers {{name}} fehlgeschlagen",
-    "image": "Image",
-    "ports": "Ports",
-    "noPorts": "Keine Ports",
-    "start": "Start",
-    "stop": "Stoppen",
-    "status": "Status",
-    "actions": "Aktionen",
-    "cardView": "Kartenansicht",
-    "listView": "Listenansicht",
-    "confirmRemoveContainer": "Sind Sie sicher, dass Sie den Container '{{name}}' entfernen möchten? Diese Aktion kann nicht rückgängig gemacht werden.",
-    "runningContainerWarning": "Warnung: Dieser Container wird gerade ausgeführt. Beim Entfernen wird der Container zuerst gestoppt.",
-    "loadingContainers": "Container werden geladen...",
-    "manager": "Docker-Manager",
-    "autoRefresh": "Automatische Aktualisierung",
-    "timestamps": "Zeitstempel",
-    "lines": "Zeilen",
-    "filterLogs": "Logs filtern...",
-    "refresh": "Aktualisieren",
-    "download": "Herunterladen",
-    "clear": "Löschen",
-    "logsDownloaded": "Logs erfolgreich heruntergeladen",
-    "last50": "Letzte 50",
-    "last100": "Letzte 100",
-    "last500": "Letzte 500",
-    "last1000": "Letzte 1000",
-    "allLogs": "Alle Logs",
-    "noLogsMatching": "Keine Logs passend zu \"{{query}}\"",
-    "noLogsAvailable": "Keine Logs verfügbar",
-    "noContainersFound": "Keine Container gefunden",
-    "noContainersFoundHint": "Auf diesem Host sind keine Docker-Container verfügbar",
-    "searchPlaceholder": "Container durchsuchen...",
-    "allStatuses": "Alle Status",
-    "stateRunning": "Läuft",
-    "statePaused": "Pausiert",
-    "stateExited": "Beendet",
-    "stateRestarting": "Wird neu gestartet",
-    "noContainersMatchFilters": "Keine Container entsprechen Ihren Filtern",
-    "noContainersMatchFiltersHint": "Versuchen Sie, Ihre Such- oder Filterkriterien anzupassen.",
-    "failedToFetchStats": "Container-Statistiken konnten nicht abgerufen werden",
-    "containerNotRunning": "Container läuft nicht",
-    "startContainerToViewStats": "Starten Sie den Container, um Statistiken anzuzeigen",
-    "loadingStats": "Statistiken werden geladen...",
-    "errorLoadingStats": "Fehler beim Laden der Statistiken",
-    "noStatsAvailable": "Keine Statistiken verfügbar",
-    "cpuUsage": "CPU-Auslastung",
-    "current": "Aktuell",
-    "memoryUsage": "Speicherauslastung",
-    "networkIo": "Netzwerk-I/O",
-    "input": "Eingabe",
-    "output": "Ausgabe",
-    "blockIo": "Block-I/O",
-    "read": "Lesen",
-    "write": "Schreiben",
-    "pids": "PIDs",
-    "containerInformation": "Container-Informationen",
-    "name": "Name",
-    "id": "ID",
-    "state": "Status",
-    "containerMustBeRunning": "Der Container muss ausgeführt werden, um auf die Konsole zuzugreifen",
-    "verificationCodePrompt": "Bestätigungscode eingeben",
-    "totpVerificationFailed": "TOTP-Überprüfung fehlgeschlagen. Bitte versuchen Sie es erneut.",
-    "browserSignInFailed": "Anmeldung fehlgeschlagen. Bitte versuchen Sie es erneut.",
-    "connectedTo": "Verbunden mit {{containerName}}",
-    "disconnected": "Getrennt",
-    "consoleError": "Konsolenfehler",
-    "errorMessage": "Fehler: {{message}}",
-    "failedToConnect": "Verbindung zum Container fehlgeschlagen",
-    "console": "Konsole",
-    "selectShell": "Shell auswählen",
-    "bash": "Bash",
-    "sh": "sh",
-    "ash": "ash",
-    "connect": "Verbinden",
-    "disconnect": "Trennen",
-    "notConnected": "Nicht verbunden",
-    "clickToConnect": "Klicken Sie auf 'Verbinden', um eine Shell-Sitzung zu starten",
-    "connectingTo": "Verbinden mit {{containerName}}...",
-    "containerNotFound": "Container nicht gefunden",
-    "backToList": "Zurück zur Liste",
-    "logs": "Protokolle",
-    "stats": "Statistiken",
-    "consoleTab": "Konsole",
-    "startContainerToAccess": "Starten Sie den Container, um auf die Konsole zuzugreifen",
-    "noHostSelected": "Kein Host ausgewählt",
-    "failedToFetchLogs": "Protokolle konnten nicht abgerufen werden: {{error}}",
-    "failedToDownloadLogs": "Protokolle konnten nicht heruntergeladen werden: {{error}}"
-  },
-  "nav": {
-    "docker": "Docker"
-  },
-  "onboarding": {
-    "feature_docker": "Docker",
-    "feature_docker_desc": "Container anzeigen, Protokolle lesen und Statistiken auf jedem Host, auf dem Docker ausgeführt wird, einsehen."
-  },
-  "terminal": {
-    "retry": "Erneut versuchen",
-    "clipboardReadFailed": "Lesen aus der Zwischenablage fehlgeschlagen. Stellen Sie sicher, dass die Zwischenablageberechtigungen erteilt wurden.",
-    "clipboardWriteFailed": "Kopieren in die Zwischenablage fehlgeschlagen. Stellen Sie sicher, dass die Seite über HTTPS oder localhost bereitgestellt wird."
-  },
-  "permissions": {
-    "use": {
-      "title": "Docker verwenden",
-      "description": "Öffnen Sie die Docker Manager- und Containerkonsolen auf Hosts, auf denen Docker aktiviert ist."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Docker aktivieren",
-        "description": "Container auf diesem Host verwalten."
-      },
-      "containerRuntime": {
-        "label": "Container-Runtime",
-        "description": "Wählen Sie die CLI für die Container-Verwaltung auf diesem Host",
-        "docker": "Docker",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Remote-Server erforderlich. Um diesen Verbindungstyp zu verwenden, verbinden Sie einen Remote-Server in den Einstellungen."
-  },
-  "hosts": {
-    "docsLink": "Dokumentation anzeigen",
-    "hostNotFound": "Host nicht gefunden",
-    "loadingHost": "Host wird geladen..."
-  }
-}
diff --git a/plugins/docker/locales/translated/el_GR.json b/plugins/docker/locales/translated/el_GR.json
deleted file mode 100644
index d32d64498..000000000
--- a/plugins/docker/locales/translated/el_GR.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Το Docker δεν είναι ενεργοποιημένο για αυτόν τον κεντρικό υπολογιστή",
-    "validating": "Επικύρωση Docker...",
-    "connecting": "Συνδετικός...",
-    "error": "Σφάλμα",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Αποτυχία σύνδεσης με το Docker",
-    "containerStarted": "Το κοντέινερ {{name}} ξεκίνησε",
-    "failedToStartContainer": "Αποτυχία εκκίνησης κοντέινερ {{name}}",
-    "containerStopped": "Το κοντέινερ {{name}} σταμάτησε",
-    "failedToStopContainer": "Αποτυχία διακοπής του κοντέινερ {{name}}",
-    "containerRestarted": "Το κοντέινερ {{name}} επανεκκινήθηκε",
-    "failedToRestartContainer": "Αποτυχία επανεκκίνησης κοντέινερ {{name}}",
-    "containerPaused": "Το κοντέινερ {{name}} τέθηκε σε παύση",
-    "containerUnpaused": "Το κοντέινερ {{name}} δεν έπαυσε να λειτουργεί",
-    "failedToTogglePauseContainer": "Αποτυχία εναλλαγής κατάστασης παύσης για το κοντέινερ {{name}}",
-    "containerRemoved": "Το κοντέινερ {{name}} αφαιρέθηκε",
-    "failedToRemoveContainer": "Αποτυχία κατάργησης του κοντέινερ {{name}}",
-    "image": "Εικών",
-    "ports": "Λιμάνια",
-    "noPorts": "Δεν υπάρχουν θύρες",
-    "start": "Αρχή",
-    "stop": "Στάση",
-    "status": "Κατάσταση",
-    "actions": "Ενέργειες",
-    "cardView": "Προβολή κάρτας",
-    "listView": "Προβολή λίστας",
-    "confirmRemoveContainer": "Είστε βέβαιοι ότι θέλετε να καταργήσετε το κοντέινερ '{{name}}'; Αυτή η ενέργεια δεν μπορεί να αναιρεθεί.",
-    "runningContainerWarning": "Προειδοποίηση: Αυτό το κοντέινερ εκτελείται αυτήν τη στιγμή. Η αφαίρεσή του θα διακόψει πρώτα τη λειτουργία του.",
-    "loadingContainers": "Φόρτωση κοντέινερ...",
-    "manager": "Διαχειριστής Docker",
-    "autoRefresh": "Αυτόματη Ανανέωση",
-    "timestamps": "Χρονικές σημάνσεις",
-    "lines": "Γραμμές",
-    "filterLogs": "Φιλτράρισμα αρχείων καταγραφής...",
-    "refresh": "Φρεσκάρω",
-    "download": "Λήψη",
-    "clear": "Σαφής",
-    "logsDownloaded": "Τα αρχεία καταγραφής λήφθηκαν με επιτυχία",
-    "last50": "Τελευταία 50",
-    "last100": "Τελευταία 100",
-    "last500": "Τελευταία 500",
-    "last1000": "Τελευταία 1000",
-    "allLogs": "Όλα τα αρχεία καταγραφής",
-    "noLogsMatching": "Δεν υπάρχουν αρχεία καταγραφής που να ταιριάζουν με το \"{{query}}\"",
-    "noLogsAvailable": "Δεν υπάρχουν διαθέσιμα αρχεία καταγραφής",
-    "noContainersFound": "Δεν βρέθηκαν κοντέινερ",
-    "noContainersFoundHint": "Δεν υπάρχουν διαθέσιμα κοντέινερ Docker σε αυτόν τον κεντρικό υπολογιστή",
-    "searchPlaceholder": "Αναζήτηση κοντέινερ...",
-    "allStatuses": "Όλες οι καταστάσεις",
-    "stateRunning": "Τρέξιμο",
-    "statePaused": "Σε παύση",
-    "stateExited": "Έξοδος",
-    "stateRestarting": "Επανεκκίνηση",
-    "noContainersMatchFilters": "Δεν υπάρχουν κοντέινερ που να αντιστοιχούν στα φίλτρα σας",
-    "noContainersMatchFiltersHint": "Δοκιμάστε να προσαρμόσετε τα κριτήρια αναζήτησης ή φιλτραρίσματος",
-    "failedToFetchStats": "Αποτυχία ανάκτησης στατιστικών στοιχείων κοντέινερ",
-    "containerNotRunning": "Το κοντέινερ δεν λειτουργεί",
-    "startContainerToViewStats": "Ξεκινήστε το κοντέινερ για να δείτε στατιστικά στοιχεία",
-    "loadingStats": "Φόρτωση στατιστικών στοιχείων...",
-    "errorLoadingStats": "Σφάλμα φόρτωσης στατιστικών στοιχείων",
-    "noStatsAvailable": "Δεν υπάρχουν διαθέσιμα στατιστικά στοιχεία",
-    "cpuUsage": "Χρήση CPU",
-    "current": "Ρεύμα",
-    "memoryUsage": "Χρήση μνήμης",
-    "networkIo": "Είσοδος/Έξοδος Δικτύου",
-    "input": "Εισαγωγή",
-    "output": "Παραγωγή",
-    "blockIo": "Είσοδος/Έξοδος μπλοκ",
-    "read": "Ανάγνωση",
-    "write": "Γράφω",
-    "pids": "PID",
-    "containerInformation": "Πληροφορίες κοντέινερ",
-    "name": "Ονομα",
-    "id": "ταυτότητα",
-    "state": "Κατάσταση",
-    "containerMustBeRunning": "Το κοντέινερ πρέπει να εκτελείται για πρόσβαση στην κονσόλα",
-    "verificationCodePrompt": "Εισαγάγετε τον κωδικό επαλήθευσης",
-    "totpVerificationFailed": "Η επαλήθευση TOTP απέτυχε. Δοκιμάστε ξανά.",
-    "browserSignInFailed": "Η σύνδεση απέτυχε. Δοκιμάστε ξανά.",
-    "connectedTo": "Συνδεδεμένο με {{containerName}}",
-    "disconnected": "Ασύνδετος",
-    "consoleError": "Σφάλμα κονσόλας",
-    "errorMessage": "Σφάλμα: {{message}}",
-    "failedToConnect": "Αποτυχία σύνδεσης με το κοντέινερ",
-    "console": "Κονσόλα",
-    "selectShell": "Επιλογή κελύφους",
-    "bash": "Βίαιο χτύπημα",
-    "sh": "σς",
-    "ash": "φλαμουριά",
-    "connect": "Συνδέω",
-    "disconnect": "Αποσυνδέω",
-    "notConnected": "Δεν είναι συνδεδεμένο",
-    "clickToConnect": "Κάντε κλικ στη σύνδεση για να ξεκινήσετε μια συνεδρία κελύφους",
-    "connectingTo": "Σύνδεση με {{containerName}}...",
-    "containerNotFound": "Δεν βρέθηκε κοντέινερ",
-    "backToList": "Επιστροφή στη λίστα",
-    "logs": "Αρχεία καταγραφής",
-    "stats": "Στατιστικά",
-    "consoleTab": "Κονσόλα",
-    "startContainerToAccess": "Ξεκινήστε το κοντέινερ για να αποκτήσετε πρόσβαση στην κονσόλα",
-    "noHostSelected": "Δεν έχει επιλεγεί κεντρικός υπολογιστής",
-    "failedToFetchLogs": "Αποτυχία ανάκτησης αρχείων καταγραφής: {{error}}",
-    "failedToDownloadLogs": "Αποτυχία λήψης αρχείων καταγραφής: {{error}}"
-  },
-  "nav": {
-    "docker": "Λιμενεργάτης"
-  },
-  "onboarding": {
-    "feature_docker": "Λιμενεργάτης",
-    "feature_docker_desc": "Δείτε κοντέινερ, διαβάστε αρχεία καταγραφής και παρακολουθήστε στατιστικά στοιχεία σε οποιονδήποτε κεντρικό υπολογιστή που εκτελεί Docker."
-  },
-  "terminal": {
-    "retry": "Δοκιμάζω πάλι",
-    "clipboardReadFailed": "Αποτυχία ανάγνωσης από το πρόχειρο. Βεβαιωθείτε ότι έχουν εκχωρηθεί δικαιώματα στο πρόχειρο.",
-    "clipboardWriteFailed": "Αποτυχία αντιγραφής στο πρόχειρο. Βεβαιωθείτε ότι η σελίδα προβάλλεται μέσω HTTPS ή localhost."
-  },
-  "permissions": {
-    "use": {
-      "title": "Χρήση Docker",
-      "description": "Ανοίξτε τον διαχειριστή Docker και τις κονσόλες κοντέινερ σε κεντρικούς υπολογιστές με ενεργοποιημένο το Docker."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Ενεργοποίηση Docker",
-        "description": "Διαχείριση κοντέινερ σε αυτόν τον κεντρικό υπολογιστή."
-      },
-      "containerRuntime": {
-        "label": "Χρόνος εκτέλεσης κοντέινερ",
-        "description": "Επιλέξτε το CLI που χρησιμοποιείται για τη διαχείριση κοντέινερ σε αυτόν τον κεντρικό υπολογιστή",
-        "docker": "Λιμενεργάτης",
-        "podman": "Πόντμαν"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Απαιτείται απομακρυσμένος διακομιστής. Συνδέστε έναν απομακρυσμένο διακομιστή στις Ρυθμίσεις για να χρησιμοποιήσετε αυτόν τον τύπο σύνδεσης."
-  },
-  "hosts": {
-    "docsLink": "Προβολή εγγράφων",
-    "hostNotFound": "Δεν βρέθηκε κεντρικός υπολογιστής",
-    "loadingHost": "Φόρτωση κεντρικού υπολογιστή..."
-  }
-}
diff --git a/plugins/docker/locales/translated/es_ES.json b/plugins/docker/locales/translated/es_ES.json
deleted file mode 100644
index 4462aac8a..000000000
--- a/plugins/docker/locales/translated/es_ES.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Docker no está habilitado para este host",
-    "validating": "Validando Docker...",
-    "connecting": "Conectando...",
-    "error": "Error",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Error al conectar con Docker",
-    "containerStarted": "Contenedor {{name}} iniciado",
-    "failedToStartContainer": "Error al iniciar el contenedor {{name}}",
-    "containerStopped": "Contenedor {{name}} detenido",
-    "failedToStopContainer": "Error al detener el contenedor {{name}}",
-    "containerRestarted": "Contenedor {{name}} reiniciado",
-    "failedToRestartContainer": "Error al reiniciar el contenedor {{name}}",
-    "containerPaused": "Contenedor {{name}} pausado",
-    "containerUnpaused": "Contenedor {{name}} reanudado",
-    "failedToTogglePauseContainer": "Error al cambiar el estado de pausa del contenedor {{name}}",
-    "containerRemoved": "Contenedor {{name}} eliminado",
-    "failedToRemoveContainer": "Error al eliminar el contenedor {{name}}",
-    "image": "Imagen",
-    "ports": "Puertos",
-    "noPorts": "Sin puertos",
-    "start": "Iniciar",
-    "stop": "Parada",
-    "status": "Estado",
-    "actions": "Comportamiento",
-    "cardView": "Vista de la tarjeta",
-    "listView": "Vista de lista",
-    "confirmRemoveContainer": "¿Está seguro de que desea eliminar el contenedor '{{name}}'? Esta acción no se puede deshacer.",
-    "runningContainerWarning": "Advertencia: Este contenedor está actualmente en ejecución. Al eliminarlo, se detendrá primero.",
-    "loadingContainers": "Cargando contenedores...",
-    "manager": "Administrador de Docker",
-    "autoRefresh": "Actualización automática",
-    "timestamps": "Marcas de tiempo",
-    "lines": "Líneas",
-    "filterLogs": "Filtrar registros...",
-    "refresh": "Actualizar",
-    "download": "Descargar",
-    "clear": "Limpiar",
-    "logsDownloaded": "Registros descargados correctamente",
-    "last50": "Últimos 50",
-    "last100": "Últimos 100",
-    "last500": "Últimos 500",
-    "last1000": "Últimos 1000",
-    "allLogs": "Todos los registros",
-    "noLogsMatching": "No hay registros que coincidan con \"{{query}}\"",
-    "noLogsAvailable": "No hay registros disponibles",
-    "noContainersFound": "No se encontraron contenedores",
-    "noContainersFoundHint": "No hay contenedores Docker disponibles en este host",
-    "searchPlaceholder": "Buscar contenedores...",
-    "allStatuses": "Todos los estados",
-    "stateRunning": "En ejecución",
-    "statePaused": "En pausa",
-    "stateExited": "Detenido",
-    "stateRestarting": "Reiniciando",
-    "noContainersMatchFilters": "Ningún contenedor coincide con los filtros",
-    "noContainersMatchFiltersHint": "Intente ajustar los criterios de búsqueda o filtro",
-    "failedToFetchStats": "Error al obtener las estadísticas del contenedor",
-    "containerNotRunning": "El contenedor no está en ejecución",
-    "startContainerToViewStats": "Inicie el contenedor para ver las estadísticas",
-    "loadingStats": "Cargando estadísticas...",
-    "errorLoadingStats": "Error al cargar las estadísticas",
-    "noStatsAvailable": "No hay estadísticas disponibles",
-    "cpuUsage": "Uso de CPU",
-    "current": "Actual",
-    "memoryUsage": "Uso de memoria",
-    "networkIo": "E/S de red",
-    "input": "Entrada",
-    "output": "Salida",
-    "blockIo": "E/S de bloques",
-    "read": "Lectura",
-    "write": "Escritura",
-    "pids": "PIDs",
-    "containerInformation": "Información del contenedor",
-    "name": "Nombre",
-    "id": "ID",
-    "state": "Estado",
-    "containerMustBeRunning": "El contenedor debe estar en ejecución para acceder a la consola",
-    "verificationCodePrompt": "Introduzca el código de verificación",
-    "totpVerificationFailed": "La verificación TOTP falló. Inténtelo de nuevo.",
-    "browserSignInFailed": "Error al iniciar sesión. Inténtalo de nuevo.",
-    "connectedTo": "Conectado a {{containerName}}",
-    "disconnected": "Desconectado",
-    "consoleError": "Error de consola",
-    "errorMessage": "Error: {{message}}",
-    "failedToConnect": "No se pudo conectar al contenedor",
-    "console": "Consola",
-    "selectShell": "Seleccionar shell",
-    "bash": "Bash",
-    "sh": "sh",
-    "ash": "ash",
-    "connect": "Conectar",
-    "disconnect": "Desconectar",
-    "notConnected": "No conectado",
-    "clickToConnect": "Haga clic en conectar para iniciar una sesión de shell",
-    "connectingTo": "Conectando a {{containerName}}...",
-    "containerNotFound": "Contenedor no encontrado",
-    "backToList": "Volver a la lista",
-    "logs": "Registros",
-    "stats": "Estadísticas",
-    "consoleTab": "Consola",
-    "startContainerToAccess": "Inicie el contenedor para acceder a la consola",
-    "noHostSelected": "Ningún host seleccionado",
-    "failedToFetchLogs": "Error al obtener los registros: {{error}}",
-    "failedToDownloadLogs": "Error al descargar los registros: {{error}}"
-  },
-  "nav": {
-    "docker": "Docker"
-  },
-  "onboarding": {
-    "feature_docker": "Docker",
-    "feature_docker_desc": "Vea los contenedores, lea los registros y observe las estadísticas en cualquier host que ejecute Docker."
-  },
-  "terminal": {
-    "retry": "Reintentar",
-    "clipboardReadFailed": "No se pudo leer del portapapeles. Asegúrese de que los permisos del portapapeles estén concedidos.",
-    "clipboardWriteFailed": "Error al copiar al portapapeles. Asegúrese de que la página se sirva a través de HTTPS o en localhost."
-  },
-  "permissions": {
-    "use": {
-      "title": "Utiliza Docker",
-      "description": "Abra las consolas del administrador de Docker y de los contenedores en los hosts que tengan Docker habilitado."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Activar Docker",
-        "description": "Administra los contenedores en este host."
-      },
-      "containerRuntime": {
-        "label": "Runtime de contenedores",
-        "description": "Elegir la CLI utilizada para la gestión de contenedores en este host.",
-        "docker": "Docker",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Se requiere un servidor remoto. Conecte un servidor remoto en Configuración para usar este tipo de conexión."
-  },
-  "hosts": {
-    "docsLink": "Ver documentación",
-    "hostNotFound": "Host no encontrado",
-    "loadingHost": "Cargando host..."
-  }
-}
diff --git a/plugins/docker/locales/translated/fi_FI.json b/plugins/docker/locales/translated/fi_FI.json
deleted file mode 100644
index 1b9e9145e..000000000
--- a/plugins/docker/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Docker ei ole käytössä tälle isännälle",
-    "validating": "Dockerin validointi...",
-    "connecting": "Yhdistetään...",
-    "error": "Virhe",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Yhteyden muodostaminen Dockeriin epäonnistui",
-    "containerStarted": "Säiliö {{name}} aloitettu",
-    "failedToStartContainer": "Säiliön {{name}} käynnistäminen epäonnistui",
-    "containerStopped": "Kontti {{name}} pysäytetty",
-    "failedToStopContainer": "Säiliön {{name}} pysäyttäminen epäonnistui",
-    "containerRestarted": "Säiliö {{name}} käynnistetty uudelleen",
-    "failedToRestartContainer": "Säiliön uudelleenkäynnistys epäonnistui {{name}}",
-    "containerPaused": "Säilö {{name}} keskeytetty",
-    "containerUnpaused": "Säiliö {{name}} keskeytetty",
-    "failedToTogglePauseContainer": "Säilön {{name}} taukotilan vaihtaminen epäonnistui",
-    "containerRemoved": "Säiliö {{name}} poistettu",
-    "failedToRemoveContainer": "Säilön {{name}} poistaminen epäonnistui",
-    "image": "Kuva",
-    "ports": "Portit",
-    "noPorts": "Ei portteja",
-    "start": "Aloita",
-    "stop": "Stop",
-    "status": "Status",
-    "actions": "Toiminnot",
-    "cardView": "Korttinäkymä",
-    "listView": "Listanäkymä",
-    "confirmRemoveContainer": "Haluatko varmasti poistaa säilön '{{name}}'? Tätä toimintoa ei voi perua.",
-    "runningContainerWarning": "Varoitus: Tämä säilö on parhaillaan käynnissä. Sen poistaminen pysäyttää säilön ensin.",
-    "loadingContainers": "Konttien lastaus...",
-    "manager": "Docker-hallinta",
-    "autoRefresh": "Automaattinen päivitys",
-    "timestamps": "Aikaleimat",
-    "lines": "Viivat",
-    "filterLogs": "Suodata lokit...",
-    "refresh": "Päivitä",
-    "download": "Lataa",
-    "clear": "Tyhjennä",
-    "logsDownloaded": "Lokien lataus onnistui",
-    "last50": "Viimeiset 50",
-    "last100": "Viimeiset 100",
-    "last500": "Viimeiset 500",
-    "last1000": "Viimeiset 1000",
-    "allLogs": "Kaikki lokit",
-    "noLogsMatching": "Ei lokeja, jotka vastaavat \"{{query}}\"",
-    "noLogsAvailable": "Ei lokeja saatavilla",
-    "noContainersFound": "Ei löytynyt säiliöitä",
-    "noContainersFoundHint": "Docker-kontteja ei ole saatavilla tällä isännöintipalvelimella",
-    "searchPlaceholder": "Hae säilöjä...",
-    "allStatuses": "Kaikki tilat",
-    "stateRunning": "Juoksu",
-    "statePaused": "Keskeytetty",
-    "stateExited": "Poistui",
-    "stateRestarting": "Uudelleenkäynnistys",
-    "noContainersMatchFilters": "Yksikään säilö ei vastaa suodattimiasi",
-    "noContainersMatchFiltersHint": "Kokeile muokata haku- tai suodatusehtojasi",
-    "failedToFetchStats": "Säilön tilastojen nouto epäonnistui",
-    "containerNotRunning": "Säiliö ei ole käynnissä",
-    "startContainerToViewStats": "Käynnistä säilö tilastojen tarkastelemiseksi",
-    "loadingStats": "Ladataan tilastoja...",
-    "errorLoadingStats": "Virhe tilastojen lataamisessa",
-    "noStatsAvailable": "Ei tilastoja saatavilla",
-    "cpuUsage": "Suorittimen käyttö",
-    "current": "Nykyinen",
-    "memoryUsage": "Muistin käyttö",
-    "networkIo": "Verkko-I/O",
-    "input": "Syöttö",
-    "output": "Lähtö",
-    "blockIo": "Estä I/O",
-    "read": "Lukea",
-    "write": "Kirjoittaa",
-    "pids": "PID-tunnukset",
-    "containerInformation": "Säiliön tiedot",
-    "name": "Nimi",
-    "id": "Henkilöllisyystodistus",
-    "state": "Osavaltio",
-    "containerMustBeRunning": "Kontin on oltava käynnissä, jotta konsoliin pääsee käsiksi.",
-    "verificationCodePrompt": "Syötä vahvistuskoodi",
-    "totpVerificationFailed": "TOTP-vahvistus epäonnistui. Yritä uudelleen.",
-    "browserSignInFailed": "Kirjautuminen epäonnistui. Yritä uudelleen.",
-    "connectedTo": "Yhdistetty kohteeseen {{containerName}}",
-    "disconnected": "Yhteys katkennut",
-    "consoleError": "Konsolivirhe",
-    "errorMessage": "Virhe: {{message}}",
-    "failedToConnect": "Yhteyden muodostaminen säilöön epäonnistui",
-    "console": "Konsoli",
-    "selectShell": "Valitse komentotulkki",
-    "bash": "Lyödä",
-    "sh": "sh",
-    "ash": "tuhka",
-    "connect": "Yhdistä",
-    "disconnect": "Katkaise yhteys",
-    "notConnected": "Ei yhdistetty",
-    "clickToConnect": "Aloita shell-istunto napsauttamalla Yhdistä",
-    "connectingTo": "Yhdistetään kohteeseen {{containerName}}...",
-    "containerNotFound": "Säiliötä ei löydy",
-    "backToList": "Takaisin listaan",
-    "logs": "Lokit",
-    "stats": "Tilastot",
-    "consoleTab": "Konsoli",
-    "startContainerToAccess": "Käynnistä säilö päästäksesi konsoliin",
-    "noHostSelected": "Ei valittua isäntää",
-    "failedToFetchLogs": "Lokien nouto epäonnistui: {{error}}",
-    "failedToDownloadLogs": "Lokien lataus epäonnistui: {{error}}"
-  },
-  "nav": {
-    "docker": "Satamatyöläinen"
-  },
-  "onboarding": {
-    "feature_docker": "Satamatyöläinen",
-    "feature_docker_desc": "Katso säilöjä, lue lokeja ja seuraa tilastoja millä tahansa Dockeria käyttävällä isännällä."
-  },
-  "terminal": {
-    "retry": "Yritä uudelleen",
-    "clipboardReadFailed": "Leikepöydän lukeminen epäonnistui. Varmista, että leikepöydän käyttöoikeudet on myönnetty.",
-    "clipboardWriteFailed": "Kopiointi leikepöydälle epäonnistui. Varmista, että sivua käytetään HTTPS:n tai paikallisen isännän kautta."
-  },
-  "permissions": {
-    "use": {
-      "title": "Käytä Dockeria",
-      "description": "Avaa Docker-hallinta ja säilökonsolit isännillä, joissa Docker on käytössä."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Ota Docker käyttöön",
-        "description": "Hallitse säilöjä tällä isännöinnillä."
-      },
-      "containerRuntime": {
-        "label": "Säilön suoritusaika",
-        "description": "Valitse CLI, jota käytetään säilön hallintaan tässä isännässä",
-        "docker": "Satamatyöläinen",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Etäpalvelin vaaditaan. Yhdistä etäpalvelin asetuksissa käyttääksesi tätä yhteystyyppiä."
-  },
-  "hosts": {
-    "docsLink": "Näytä dokumentit",
-    "hostNotFound": "Isäntää ei löydy",
-    "loadingHost": "Ladataan isäntää..."
-  }
-}
diff --git a/plugins/docker/locales/translated/fr_FR.json b/plugins/docker/locales/translated/fr_FR.json
deleted file mode 100644
index af7787daa..000000000
--- a/plugins/docker/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Docker n'est pas activé pour cet hôte",
-    "validating": "Validation de Docker...",
-    "connecting": "Connexion...",
-    "error": "Erreur",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Échec de la connexion à Docker",
-    "containerStarted": "Conteneur {{name}} démarré",
-    "failedToStartContainer": "Échec du démarrage du conteneur {{name}}",
-    "containerStopped": "Conteneur {{name}} arrêté",
-    "failedToStopContainer": "Échec de l'arrêt du conteneur {{name}}",
-    "containerRestarted": "Conteneur {{name}} redémarré",
-    "failedToRestartContainer": "Échec du redémarrage du conteneur {{name}}",
-    "containerPaused": "Conteneur {{name}} mis en pause",
-    "containerUnpaused": "Conteneur {{name}} repris",
-    "failedToTogglePauseContainer": "Échec du basculement de l'état de pause du conteneur {{name}}",
-    "containerRemoved": "Conteneur {{name}} supprimé",
-    "failedToRemoveContainer": "Échec de la suppression du conteneur {{name}}",
-    "image": "Image",
-    "ports": "Ports",
-    "noPorts": "Aucun port",
-    "start": "Démarrer",
-    "stop": "Stop",
-    "status": "État",
-    "actions": "Actes",
-    "cardView": "Vue de carte",
-    "listView": "Vue liste",
-    "confirmRemoveContainer": "Êtes-vous sûr de vouloir supprimer le conteneur '{{name}}' ? Cette action est irréversible.",
-    "runningContainerWarning": "Attention : Ce conteneur est en cours d'exécution. Sa suppression l'arrêtera d'abord.",
-    "loadingContainers": "Chargement des conteneurs...",
-    "manager": "Gestionnaire Docker",
-    "autoRefresh": "Actualisation automatique",
-    "timestamps": "Horodatages",
-    "lines": "Lignes",
-    "filterLogs": "Filtrer les journaux...",
-    "refresh": "Actualiser",
-    "download": "Télécharger",
-    "clear": "Effacer",
-    "logsDownloaded": "Journaux téléchargés avec succès",
-    "last50": "50 derniers",
-    "last100": "100 derniers",
-    "last500": "500 derniers",
-    "last1000": "1 000 derniers",
-    "allLogs": "Tous les journaux",
-    "noLogsMatching": "Aucun journal correspondant à \"{{query}}\"",
-    "noLogsAvailable": "Aucun journal disponible",
-    "noContainersFound": "Aucun conteneur trouvé",
-    "noContainersFoundHint": "Aucun conteneur Docker n’est disponible sur cet hôte",
-    "searchPlaceholder": "Rechercher des conteneurs...",
-    "allStatuses": "Tous les statuts",
-    "stateRunning": "En cours d’exécution",
-    "statePaused": "En pause",
-    "stateExited": "Arrêté",
-    "stateRestarting": "Redémarrage en cours",
-    "noContainersMatchFilters": "Aucun conteneur ne correspond à vos filtres",
-    "noContainersMatchFiltersHint": "Essayez de modifier vos critères de recherche ou de filtrage",
-    "failedToFetchStats": "Échec de la récupération des statistiques du conteneur",
-    "containerNotRunning": "Conteneur arrêté",
-    "startContainerToViewStats": "Démarrez le conteneur pour afficher les statistiques",
-    "loadingStats": "Chargement des statistiques...",
-    "errorLoadingStats": "Erreur lors du chargement des statistiques",
-    "noStatsAvailable": "Aucune statistique disponible",
-    "cpuUsage": "Utilisation CPU",
-    "current": "Actuel",
-    "memoryUsage": "Utilisation mémoire",
-    "networkIo": "E/S réseau",
-    "input": "Entrée",
-    "output": "Sortie",
-    "blockIo": "E/S de blocs",
-    "read": "Lecture",
-    "write": "Écriture",
-    "pids": "PIDs",
-    "containerInformation": "Informations sur le conteneur",
-    "name": "Nom",
-    "id": "ID",
-    "state": "État",
-    "containerMustBeRunning": "Le conteneur doit être en cours d'exécution pour accéder à la console",
-    "verificationCodePrompt": "Saisissez le code de vérification",
-    "totpVerificationFailed": "La vérification TOTP a échoué. Veuillez réessayer.",
-    "browserSignInFailed": "Échec de la connexion. Veuillez réessayer.",
-    "connectedTo": "Connecté à {{containerName}}",
-    "disconnected": "Déconnecté",
-    "consoleError": "Erreur de la console",
-    "errorMessage": "Erreur : {{message}}",
-    "failedToConnect": "Échec de la connexion au conteneur",
-    "console": "Console",
-    "selectShell": "Sélectionner le shell",
-    "bash": "Bash",
-    "sh": "sh",
-    "ash": "ash",
-    "connect": "Connecter",
-    "disconnect": "Déconnecter",
-    "notConnected": "Non connecté",
-    "clickToConnect": "Cliquez sur Connecter pour démarrer une session shell",
-    "connectingTo": "Connexion à {{containerName}}…",
-    "containerNotFound": "Conteneur introuvable",
-    "backToList": "Retour à la liste",
-    "logs": "Journaux",
-    "stats": "Stats",
-    "consoleTab": "Console",
-    "startContainerToAccess": "Démarrez le conteneur pour accéder à la console",
-    "noHostSelected": "Aucun hôte sélectionné",
-    "failedToFetchLogs": "Échec de la récupération des journaux : {{error}}",
-    "failedToDownloadLogs": "Échec du téléchargement des journaux : {{error}}"
-  },
-  "nav": {
-    "docker": "Docker"
-  },
-  "onboarding": {
-    "feature_docker": "Docker",
-    "feature_docker_desc": "Consultez les conteneurs, lisez les journaux et surveillez les statistiques sur n'importe quel hôte exécutant Docker."
-  },
-  "terminal": {
-    "retry": "Réessayer",
-    "clipboardReadFailed": "Échec de la lecture du presse-papiers. Assurez-vous que les autorisations du presse-papiers sont accordées.",
-    "clipboardWriteFailed": "Échec de la copie dans le presse-papiers. Assurez-vous que la page est servie en HTTPS ou localhost."
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilisez Docker",
-      "description": "Ouvrez les consoles du gestionnaire Docker et des conteneurs sur les hôtes sur lesquels Docker est activé."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Activer Docker",
-        "description": "Gérer les conteneurs sur cet hôte."
-      },
-      "containerRuntime": {
-        "label": "Moteur d'exécution de conteneurs",
-        "description": "Choisissez le CLI utilisé pour la gestion des conteneurs sur cet hôte",
-        "docker": "Docker",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Serveur distant requis. Connectez un serveur distant dans les paramètres pour utiliser ce type de connexion."
-  },
-  "hosts": {
-    "docsLink": "Voir la documentation",
-    "hostNotFound": "Hôte introuvable",
-    "loadingHost": "Chargement de l'hôte..."
-  }
-}
diff --git a/plugins/docker/locales/translated/he_IL.json b/plugins/docker/locales/translated/he_IL.json
deleted file mode 100644
index b0dfe8ff4..000000000
--- a/plugins/docker/locales/translated/he_IL.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Docker אינו מופעל עבור מארח זה",
-    "validating": "מאמת את Docker...",
-    "connecting": "מְקַשֵׁר...",
-    "error": "שְׁגִיאָה",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "נכשלה ההתחברות ל-Docker",
-    "containerStarted": "מיכל {{name}} הופעל",
-    "failedToStartContainer": "נכשל בהפעלת המכולה {{name}}",
-    "containerStopped": "מיכל {{name}} נעצר",
-    "failedToStopContainer": "נכשלה עצירת המכולה {{name}}",
-    "containerRestarted": "המיכל {{name}} הופעל מחדש",
-    "failedToRestartContainer": "נכשלה ההפעלה מחדש של המכולה {{name}}",
-    "containerPaused": "מיכל {{name}} הושהה",
-    "containerUnpaused": "השהייתה של המיכל {{name}} בוטלה",
-    "failedToTogglePauseContainer": "נכשל הניסיון להחליף בין מצב השהייה עבור המכולה {{name}}",
-    "containerRemoved": "המיכל {{name}} הוסר",
-    "failedToRemoveContainer": "נכשלה הסרת המיכל {{name}}",
-    "image": "תְמוּנָה",
-    "ports": "נמלים",
-    "noPorts": "אין יציאות",
-    "start": "הַתחָלָה",
-    "stop": "לְהַפְסִיק",
-    "status": "סטָטוּס",
-    "actions": "פעולות",
-    "cardView": "תצוגת כרטיס",
-    "listView": "תצוגת רשימה",
-    "confirmRemoveContainer": "האם אתה בטוח שברצונך להסיר את המכולה '{{name}}'? לא ניתן לבטל פעולה זו.",
-    "runningContainerWarning": "אזהרה: מיכל זה פועל כעת. הסרתו תעצור את המיכל תחילה.",
-    "loadingContainers": "טוען מכולות...",
-    "manager": "מנהל דוקר",
-    "autoRefresh": "רענון אוטומטי",
-    "timestamps": "חותמות זמן",
-    "lines": "קווים",
-    "filterLogs": "סנן יומני רישום...",
-    "refresh": "לְרַעֲנֵן",
-    "download": "הורדה",
-    "clear": "בָּרוּר",
-    "logsDownloaded": "יומני הרישום הורדו בהצלחה",
-    "last50": "50 האחרונים",
-    "last100": "100 האחרונים",
-    "last500": "500 האחרונים",
-    "last1000": "1000 האחרונים",
-    "allLogs": "כל היומנים",
-    "noLogsMatching": "אין יומנים התואמים ל-\"{{query}}\"",
-    "noLogsAvailable": "אין יומנים זמינים",
-    "noContainersFound": "לא נמצאו מכולות",
-    "noContainersFoundHint": "אין מכולות Docker זמינות במארח זה",
-    "searchPlaceholder": "חיפוש מכולות...",
-    "allStatuses": "כל הסטטוסים",
-    "stateRunning": "רִיצָה",
-    "statePaused": "מושהה",
-    "stateExited": "יצא",
-    "stateRestarting": "הפעלה מחדש",
-    "noContainersMatchFilters": "אין מכולות התואמות את המסננים שלך",
-    "noContainersMatchFiltersHint": "נסה להתאים את קריטריוני החיפוש או הסינון שלך",
-    "failedToFetchStats": "נכשל באחזור סטטיסטיקות המכולה",
-    "containerNotRunning": "המכולה לא פועלת",
-    "startContainerToViewStats": "הפעל את המכולה כדי להציג נתונים סטטיסטיים",
-    "loadingStats": "טוען סטטיסטיקות...",
-    "errorLoadingStats": "שגיאה בטעינת סטטיסטיקות",
-    "noStatsAvailable": "אין סטטיסטיקות זמינות",
-    "cpuUsage": "שימוש במעבד",
-    "current": "נוֹכְחִי",
-    "memoryUsage": "שימוש בזיכרון",
-    "networkIo": "קלט/פלט של הרשת",
-    "input": "קֶלֶט",
-    "output": "תְפוּקָה",
-    "blockIo": "בלוק קלט/פלט",
-    "read": "לִקְרוֹא",
-    "write": "לִכתוֹב",
-    "pids": "PIDs",
-    "containerInformation": "מידע על המכולה",
-    "name": "שֵׁם",
-    "id": "תְעוּדַת זֶהוּת",
-    "state": "מְדִינָה",
-    "containerMustBeRunning": "יש לפעול על מנת לגשת למסוף.",
-    "verificationCodePrompt": "הזן קוד אימות",
-    "totpVerificationFailed": "אימות TOTP נכשל. אנא נסה שוב.",
-    "browserSignInFailed": "הכניסה נכשלה. אנא נסה שוב.",
-    "connectedTo": "מחובר אל {{containerName}}",
-    "disconnected": "מְנוּתָק",
-    "consoleError": "שגיאת קונסולה",
-    "errorMessage": "שגיאה: {{message}}",
-    "failedToConnect": "נכשל החיבור למכולה",
-    "console": "לְנַחֵם",
-    "selectShell": "בחר מעטפת",
-    "bash": "לַחֲבוֹט",
-    "sh": "ש",
-    "ash": "אֵפֶר",
-    "connect": "לְחַבֵּר",
-    "disconnect": "לְנַתֵק",
-    "notConnected": "לא מחובר",
-    "clickToConnect": "לחץ על התחבר כדי להתחיל סשן מעטפת",
-    "connectingTo": "מתחבר אל {{containerName}}...",
-    "containerNotFound": "המיכל לא נמצא",
-    "backToList": "חזרה לרשימה",
-    "logs": "יומני רישום",
-    "stats": "סטטיסטיקות",
-    "consoleTab": "לְנַחֵם",
-    "startContainerToAccess": "הפעל את המכולה כדי לגשת לקונסולה",
-    "noHostSelected": "לא נבחר מארח",
-    "failedToFetchLogs": "נכשלה אחזור הלוגים: {{error}}",
-    "failedToDownloadLogs": "הורדת יומני רישום נכשלה: {{error}}"
-  },
-  "nav": {
-    "docker": "דוקר"
-  },
-  "onboarding": {
-    "feature_docker": "דוקר",
-    "feature_docker_desc": "ראה קונטיינרים, קרא יומני רישום וצפה בסטטיסטיקות על כל מארח שמפעיל את Docker."
-  },
-  "terminal": {
-    "retry": "נסה שוב",
-    "clipboardReadFailed": "הקריאה מהלוח נכשלה. ודא שהרשאות הלוח ניתנות.",
-    "clipboardWriteFailed": "ההעתקה ללוח נכשלה. ודא שהדף מוגש דרך HTTPS או localhost."
-  },
-  "permissions": {
-    "use": {
-      "title": "השתמש ב-Docker",
-      "description": "פתח את מנהל ה-Docker ואת קונסולות המכולות במחשבים מארחים שבהם Docker מופעל."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "הפעל את Docker",
-        "description": "ניהול מכולות במארח זה."
-      },
-      "containerRuntime": {
-        "label": "זמן ריצה של המכולה",
-        "description": "בחר את ממשק שורת הפקודה (CLI) המשמש לניהול מכולות במארח זה",
-        "docker": "דוקר",
-        "podman": "פודמן"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "נדרש שרת מרוחק. יש להתחבר לשרת מרוחק בהגדרות כדי להשתמש בסוג חיבור זה."
-  },
-  "hosts": {
-    "docsLink": "הצג מסמכים",
-    "hostNotFound": "המארח לא נמצא",
-    "loadingHost": "טוען מארח..."
-  }
-}
diff --git a/plugins/docker/locales/translated/hi_IN.json b/plugins/docker/locales/translated/hi_IN.json
deleted file mode 100644
index c435dd5eb..000000000
--- a/plugins/docker/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "इस होस्ट के लिए Docker सक्षम नहीं है",
-    "validating": "Docker सत्यापित कर रहा है...",
-    "connecting": "कनेक्ट हो रहा है...",
-    "error": "त्रुटि",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Docker से कनेक्ट होने में विफल",
-    "containerStarted": "कंटेनर {{name}} प्रारंभ हुआ",
-    "failedToStartContainer": "कंटेनर {{name}} प्रारंभ करने में विफल",
-    "containerStopped": "कंटेनर {{name}} रुका",
-    "failedToStopContainer": "कंटेनर {{name}} रोकने में विफल",
-    "containerRestarted": "कंटेनर {{name}} पुनरारंभ हुआ",
-    "failedToRestartContainer": "कंटेनर {{name}} पुनरारंभ करने में विफल",
-    "containerPaused": "कंटेनर {{name}} विरामित",
-    "containerUnpaused": "कंटेनर {{name}} जारी",
-    "failedToTogglePauseContainer": "कंटेनर {{name}} के लिए विराम/जारी स्थिति बदलने में विफल",
-    "containerRemoved": "कंटेनर {{name}} हटा दिया गया",
-    "failedToRemoveContainer": "कंटेनर {{name}} हटाने में विफल",
-    "image": "इमेज",
-    "ports": "पोर्ट",
-    "noPorts": "कोई पोर्ट नहीं",
-    "start": "प्रारंभ करें",
-    "stop": "स्टॉप",
-    "status": "स्थिति",
-    "actions": "कार्रवाई",
-    "cardView": "कार्ड दृश्य",
-    "listView": "लिस्ट व्यू",
-    "confirmRemoveContainer": "क्या आप वाकई कंटेनर '{{name}}' हटाना चाहते हैं? यह क्रिया पूर्ववत नहीं की जा सकती।",
-    "runningContainerWarning": "चेतावनी: यह कंटेनर वर्तमान में चल रहा है। हटाने पर पहले इसे रोका जाएगा।",
-    "loadingContainers": "कंटेनर लोड हो रहे हैं...",
-    "manager": "Docker प्रबंधक",
-    "autoRefresh": "स्वतः ताज़ा करें",
-    "timestamps": "टाइमस्टैम्प्स",
-    "lines": "पंक्तियाँ",
-    "filterLogs": "लॉग फ़िल्टर करें...",
-    "refresh": "ताज़ा करें",
-    "download": "डाउनलोड करें",
-    "clear": "साफ़ करें",
-    "logsDownloaded": "लॉग सफलतापूर्वक डाउनलोड हो गए",
-    "last50": "अंतिम 50",
-    "last100": "अंतिम 100",
-    "last500": "अंतिम 500",
-    "last1000": "अंतिम 1000",
-    "allLogs": "सभी लॉग",
-    "noLogsMatching": "\"{{query}}\" से मेल खाने वाले कोई लॉग नहीं हैं",
-    "noLogsAvailable": "कोई लॉग उपलब्ध नहीं",
-    "noContainersFound": "कोई कंटेनर नहीं मिले",
-    "noContainersFoundHint": "इस होस्ट पर कोई Docker कंटेनर उपलब्ध नहीं हैं",
-    "searchPlaceholder": "कंटेनर खोजें...",
-    "allStatuses": "सभी स्टेटस",
-    "stateRunning": "चालू",
-    "statePaused": "रुका हुआ",
-    "stateExited": "बंद",
-    "stateRestarting": "रीस्टार्ट हो रहा है",
-    "noContainersMatchFilters": "आपके फ़िल्टर से मेल खाने वाले कोई कंटेनर नहीं हैं",
-    "noContainersMatchFiltersHint": "अपनी खोज या फ़िल्टर मापदंड बदलकर देखें",
-    "failedToFetchStats": "कंटेनर के आँकड़े प्राप्त नहीं हो सके",
-    "containerNotRunning": "कंटेनर चालू नहीं है",
-    "startContainerToViewStats": "आँकड़े देखने के लिए कंटेनर चालू करें",
-    "loadingStats": "आँकड़े लोड हो रहे हैं...",
-    "errorLoadingStats": "आँकड़े लोड करने में त्रुटि",
-    "noStatsAvailable": "कोई आँकड़े उपलब्ध नहीं",
-    "cpuUsage": "CPU उपयोग",
-    "current": "वर्तमान",
-    "memoryUsage": "मेमोरी उपयोग",
-    "networkIo": "नेटवर्क I/O",
-    "input": "इनपुट",
-    "output": "आउटपुट",
-    "blockIo": "ब्लॉक I/O",
-    "read": "रीड",
-    "write": "राइट",
-    "pids": "PIDs",
-    "containerInformation": "कंटेनर जानकारी",
-    "name": "नाम",
-    "id": "आईडी",
-    "state": "स्थिति",
-    "containerMustBeRunning": "कंसोल तक पहुंचने के लिए कंटेनर चालू होना चाहिए",
-    "verificationCodePrompt": "सत्यापन कोड दर्ज करें",
-    "totpVerificationFailed": "TOTP सत्यापन विफल। कृपया पुनः प्रयास करें।",
-    "browserSignInFailed": "प्रवेश विफल। कृपया दोबारा प्रयास करें।",
-    "connectedTo": "{{containerName}} से जुड़ा",
-    "disconnected": "डिस्कनेक्टेड",
-    "consoleError": "कंसोल त्रुटि",
-    "errorMessage": "त्रुटि: {{message}}",
-    "failedToConnect": "कंटेनर से जुड़ने में विफल",
-    "console": "कंसोल",
-    "selectShell": "शेल चुनें",
-    "bash": "Bash",
-    "sh": "sh",
-    "ash": "ash",
-    "connect": "कनेक्ट करें",
-    "disconnect": "डिस्कनेक्ट करें",
-    "notConnected": "कनेक्टेड नहीं",
-    "clickToConnect": "शेल सत्र शुरू करने के लिए कनेक्ट पर क्लिक करें",
-    "connectingTo": "{{containerName}} से कनेक्ट हो रहा है...",
-    "containerNotFound": "कंटेनर नहीं मिला",
-    "backToList": "सूची में वापस जाएं",
-    "logs": "लॉग",
-    "stats": "आंकड़े",
-    "consoleTab": "कंसोल",
-    "startContainerToAccess": "कंसोल तक पहुंचने के लिए कंटेनर चालू करें",
-    "noHostSelected": "कोई होस्ट चयनित नहीं है",
-    "failedToFetchLogs": "लॉग प्राप्त करने में विफल: {{error}}",
-    "failedToDownloadLogs": "लॉग डाउनलोड करने में विफल: {{error}}"
-  },
-  "nav": {
-    "docker": "Docker"
-  },
-  "onboarding": {
-    "feature_docker": "Docker",
-    "feature_docker_desc": "डॉकर चलाने वाले किसी भी होस्ट पर कंटेनर देखें, लॉग पढ़ें और आंकड़े देखें।"
-  },
-  "terminal": {
-    "retry": "पुनः प्रयास करें",
-    "clipboardReadFailed": "क्लिपबोर्ड से पढ़ने में विफल। सुनिश्चित करें कि क्लिपबोर्ड अनुमतियाँ दी गई हैं।",
-    "clipboardWriteFailed": "क्लिपबोर्ड पर कॉपी करने में विफल। सुनिश्चित करें कि पेज HTTPS या लोकलहोस्ट पर सर्व किया गया है।"
-  },
-  "permissions": {
-    "use": {
-      "title": "डॉकर का उपयोग करें",
-      "description": "जिन होस्ट पर डॉकर सक्षम है, उन पर डॉकर मैनेजर और कंटेनर कंसोल खोलें।"
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Docker सक्षम करें",
-        "description": "इस होस्ट पर कंटेनरों का प्रबंधन करें।"
-      },
-      "containerRuntime": {
-        "label": "कंटेनर रनटाइम",
-        "description": "इस होस्ट पर कंटेनर प्रबंधन के लिए उपयोग किए जाने वाले CLI को चुनें",
-        "docker": "Docker",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "रिमोट सर्वर आवश्यक है। इस कनेक्शन प्रकार का उपयोग करने के लिए सेटिंग्स में जाकर रिमोट सर्वर कनेक्ट करें।"
-  },
-  "hosts": {
-    "docsLink": "दस्तावेज़ देखें",
-    "hostNotFound": "होस्ट नहीं मिला",
-    "loadingHost": "होस्ट लोड हो रहा है..."
-  }
-}
diff --git a/plugins/docker/locales/translated/hu_HU.json b/plugins/docker/locales/translated/hu_HU.json
deleted file mode 100644
index 3c5ac7340..000000000
--- a/plugins/docker/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "A Docker nincs engedélyezve ehhez a gazdagéphez",
-    "validating": "Docker érvényesítése...",
-    "connecting": "Kapcsolódás...",
-    "error": "Hiba",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Nem sikerült csatlakozni a Dockerhez",
-    "containerStarted": "{{name}} konténer elindítva",
-    "failedToStartContainer": "Nem sikerült elindítani a(z) {{name}} konténert",
-    "containerStopped": "Konténer {{name}} leállítva",
-    "failedToStopContainer": "Nem sikerült leállítani a(z) {{name}} konténert",
-    "containerRestarted": "{{name}} konténer újraindítva",
-    "failedToRestartContainer": "Nem sikerült újraindítani a konténert {{name}}",
-    "containerPaused": "{{name}} konténer szünetel",
-    "containerUnpaused": "{{name}} konténer szüneteltetése feloldva",
-    "failedToTogglePauseContainer": "Nem sikerült a szüneteltetési állapotot be- és kikapcsolni a következő konténernél: {{name}}",
-    "containerRemoved": "{{name}} konténer eltávolítva",
-    "failedToRemoveContainer": "Nem sikerült eltávolítani a(z) {{name}} konténert",
-    "image": "Kép",
-    "ports": "kikötők",
-    "noPorts": "Nincsenek portok",
-    "start": "Indul",
-    "stop": "Stop",
-    "status": "Állapot",
-    "actions": "Műveletek",
-    "cardView": "Kártyanézet",
-    "listView": "Lista nézet",
-    "confirmRemoveContainer": "Are you sure you want to remove the container '{{name}}'? This action cannot be undone.",
-    "runningContainerWarning": "Figyelmeztetés: Ez a konténer jelenleg fut. Eltávolítása először a konténer leállítását jelenti.",
-    "loadingContainers": "Konténerek betöltése...",
-    "manager": "Docker-kezelő",
-    "autoRefresh": "Automatikus frissítés",
-    "timestamps": "Időbélyegek",
-    "lines": "Vonalak",
-    "filterLogs": "Naplók szűrése...",
-    "refresh": "Frissítés",
-    "download": "Letöltés",
-    "clear": "Világos",
-    "logsDownloaded": "Naplók sikeresen letöltve",
-    "last50": "Utolsó 50",
-    "last100": "Utolsó 100",
-    "last500": "Utolsó 500",
-    "last1000": "Utolsó 1000",
-    "allLogs": "Minden napló",
-    "noLogsMatching": "Nincsenek a következőnek megfelelő naplók: \"{{query}}\"",
-    "noLogsAvailable": "Nincsenek elérhető naplók",
-    "noContainersFound": "Nem találhatók konténerek",
-    "noContainersFoundHint": "Nincsenek elérhető Docker konténerek ezen a gazdagépen",
-    "searchPlaceholder": "Konténerek keresése...",
-    "allStatuses": "Minden állapot",
-    "stateRunning": "Futás",
-    "statePaused": "Szüneteltetett",
-    "stateExited": "Kilépett",
-    "stateRestarting": "Újraindítás",
-    "noContainersMatchFilters": "Egyetlen tároló sem felel meg a szűrőknek",
-    "noContainersMatchFiltersHint": "Próbálja meg módosítani a keresési vagy szűrési feltételeket",
-    "failedToFetchStats": "Nem sikerült lekérni a konténer statisztikáit",
-    "containerNotRunning": "A konténer nem működik",
-    "startContainerToViewStats": "Indítsa el a konténert a statisztikák megtekintéséhez",
-    "loadingStats": "Statisztikák betöltése...",
-    "errorLoadingStats": "Hiba a statisztikák betöltése során",
-    "noStatsAvailable": "Nincsenek elérhető statisztikák",
-    "cpuUsage": "CPU-használat",
-    "current": "Jelenlegi",
-    "memoryUsage": "Memóriahasználat",
-    "networkIo": "Hálózati I/O",
-    "input": "Bemenet",
-    "output": "Kimenet",
-    "blockIo": "Blokk I/O",
-    "read": "Olvas",
-    "write": "Írás",
-    "pids": "PID-ek",
-    "containerInformation": "Konténerinformációk",
-    "name": "Név",
-    "id": "azonosító",
-    "state": "Állami",
-    "containerMustBeRunning": "A konténernek futnia kell a konzol eléréséhez",
-    "verificationCodePrompt": "Írja be az ellenőrző kódot",
-    "totpVerificationFailed": "A TOTP ellenőrzése sikertelen. Próbáld újra.",
-    "browserSignInFailed": "Sikertelen bejelentkezés. Kérjük, próbálja újra.",
-    "connectedTo": "Csatlakoztatva ehhez: {{containerName}}",
-    "disconnected": "Szétkapcsolt",
-    "consoleError": "Konzolhiba",
-    "errorMessage": "Hiba: {{message}}",
-    "failedToConnect": "Nem sikerült csatlakozni a konténerhez",
-    "console": "Konzol",
-    "selectShell": "Válassza ki a héjat",
-    "bash": "Bash",
-    "sh": "sh",
-    "ash": "hamu",
-    "connect": "Csatlakozás",
-    "disconnect": "Leválasztás",
-    "notConnected": "Nincs csatlakoztatva",
-    "clickToConnect": "Kattintson a Csatlakozás gombra a shell munkamenet elindításához",
-    "connectingTo": "Kapcsolódás ehhez: {{containerName}}...",
-    "containerNotFound": "A konténer nem található",
-    "backToList": "Vissza a listához",
-    "logs": "Naplók",
-    "stats": "Statisztikák",
-    "consoleTab": "Konzol",
-    "startContainerToAccess": "Indítsa el a konténert a konzol eléréséhez",
-    "noHostSelected": "Nincs kiválasztva gazdagép",
-    "failedToFetchLogs": "Nem sikerült lekérni a naplókat: {{error}}",
-    "failedToDownloadLogs": "Nem sikerült letölteni a naplókat: {{error}}"
-  },
-  "nav": {
-    "docker": "Dokkmunkás"
-  },
-  "onboarding": {
-    "feature_docker": "Dokkmunkás",
-    "feature_docker_desc": "Tekintsd meg a konténereket, olvasd el a naplókat és figyeld a statisztikákat bármelyik Dockert futtató gazdagépen."
-  },
-  "terminal": {
-    "retry": "Újrapróbálkozás",
-    "clipboardReadFailed": "Nem sikerült beolvasni a vágólapról. Győződjön meg arról, hogy a vágólapra vonatkozó engedélyek meg vannak adva.",
-    "clipboardWriteFailed": "Nem sikerült a vágólapra másolni. Győződjön meg arról, hogy az oldal HTTPS vagy localhost protokollon keresztül jelenik meg."
-  },
-  "permissions": {
-    "use": {
-      "title": "Docker használata",
-      "description": "Nyissa meg a Docker Managert és a konténerkonzolokat olyan gazdagépeken, amelyeken engedélyezve van a Docker."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Docker engedélyezése",
-        "description": "Konténerek kezelése ezen a gazdagépen."
-      },
-      "containerRuntime": {
-        "label": "Konténer futásideje",
-        "description": "Válassza ki a gazdagépen a konténerkezeléshez használt parancssori felületet",
-        "docker": "Dokkmunkás",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Távoli szerver szükséges. Csatlakoztasson egy távoli szervert a Beállításokban a kapcsolattípus használatához."
-  },
-  "hosts": {
-    "docsLink": "Dokumentumok megtekintése",
-    "hostNotFound": "Nem található gazdagép",
-    "loadingHost": "Gazdagép betöltése..."
-  }
-}
diff --git a/plugins/docker/locales/translated/id_ID.json b/plugins/docker/locales/translated/id_ID.json
deleted file mode 100644
index 170d6d860..000000000
--- a/plugins/docker/locales/translated/id_ID.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Docker tidak diaktifkan untuk host ini.",
-    "validating": "Memvalidasi Docker...",
-    "connecting": "Menghubungkan...",
-    "error": "Kesalahan",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Gagal terhubung ke Docker",
-    "containerStarted": "Kontainer {{name}} dimulai",
-    "failedToStartContainer": "Gagal memulai kontainer {{name}}",
-    "containerStopped": "Kontainer {{name}} berhenti",
-    "failedToStopContainer": "Gagal menghentikan kontainer {{name}}",
-    "containerRestarted": "Kontainer {{name}} dimulai ulang",
-    "failedToRestartContainer": "Gagal memulai ulang kontainer {{name}}",
-    "containerPaused": "Kontainer {{name}} berhenti",
-    "containerUnpaused": "Kontainer {{name}} tidak dijeda",
-    "failedToTogglePauseContainer": "Gagal mengubah status jeda untuk kontainer {{name}}",
-    "containerRemoved": "Kontainer {{name}} dihapus",
-    "failedToRemoveContainer": "Gagal menghapus kontainer {{name}}",
-    "image": "Gambar",
-    "ports": "Pelabuhan",
-    "noPorts": "Tidak ada port",
-    "start": "Awal",
-    "stop": "Berhenti",
-    "status": "Status",
-    "actions": "Tindakan",
-    "cardView": "Tampilan kartu",
-    "listView": "Tampilan daftar",
-    "confirmRemoveContainer": "Apakah Anda yakin ingin menghapus kontainer '{{name}}'? Tindakan ini tidak dapat dibatalkan.",
-    "runningContainerWarning": "Peringatan: Kontainer ini sedang berjalan. Menghapusnya akan menghentikan kontainer terlebih dahulu.",
-    "loadingContainers": "Memuat kontainer...",
-    "manager": "Manajer Docker",
-    "autoRefresh": "Penyegaran Otomatis",
-    "timestamps": "Cap waktu",
-    "lines": "Garis",
-    "filterLogs": "Filter log...",
-    "refresh": "Menyegarkan",
-    "download": "Unduh",
-    "clear": "Jernih",
-    "logsDownloaded": "Log berhasil diunduh.",
-    "last50": "50 Terakhir",
-    "last100": "100 terakhir",
-    "last500": "500 Terakhir",
-    "last1000": "1000 terakhir",
-    "allLogs": "Semua Log",
-    "noLogsMatching": "Tidak ada log yang cocok dengan \"{{query}}\"",
-    "noLogsAvailable": "Tidak ada log yang tersedia.",
-    "noContainersFound": "Tidak ditemukan wadah apa pun",
-    "noContainersFoundHint": "Tidak ada kontainer Docker yang tersedia di host ini.",
-    "searchPlaceholder": "Cari kontainer...",
-    "allStatuses": "Semua Status",
-    "stateRunning": "Berlari",
-    "statePaused": "Dijeda",
-    "stateExited": "Keluar",
-    "stateRestarting": "Memulai ulang",
-    "noContainersMatchFilters": "Tidak ada wadah yang sesuai dengan filter Anda.",
-    "noContainersMatchFiltersHint": "Cobalah menyesuaikan kriteria pencarian atau filter Anda.",
-    "failedToFetchStats": "Gagal mengambil statistik kontainer",
-    "containerNotRunning": "Kontainer tidak berjalan",
-    "startContainerToViewStats": "Jalankan kontainer untuk melihat statistik.",
-    "loadingStats": "Memuat statistik...",
-    "errorLoadingStats": "Terjadi kesalahan saat memuat statistik.",
-    "noStatsAvailable": "Tidak ada statistik yang tersedia.",
-    "cpuUsage": "Penggunaan CPU",
-    "current": "Saat ini",
-    "memoryUsage": "Penggunaan Memori",
-    "networkIo": "Input/Output Jaringan",
-    "input": "Masukan",
-    "output": "Keluaran",
-    "blockIo": "Blok I/O",
-    "read": "Membaca",
-    "write": "Menulis",
-    "pids": "PID",
-    "containerInformation": "Informasi Kontainer",
-    "name": "Nama",
-    "id": "PENGENAL",
-    "state": "Negara",
-    "containerMustBeRunning": "Kontainer harus berjalan agar dapat mengakses konsol.",
-    "verificationCodePrompt": "Masukkan kode verifikasi",
-    "totpVerificationFailed": "Verifikasi TOTP gagal. Silakan coba lagi.",
-    "browserSignInFailed": "Login gagal. Silakan coba lagi.",
-    "connectedTo": "Terhubung ke {{containerName}}",
-    "disconnected": "Terputus",
-    "consoleError": "Kesalahan konsol",
-    "errorMessage": "Kesalahan: {{message}}",
-    "failedToConnect": "Gagal terhubung ke kontainer",
-    "console": "Menghibur",
-    "selectShell": "Pilih cangkang",
-    "bash": "Pesta",
-    "sh": "sh",
-    "ash": "abu",
-    "connect": "Menghubungkan",
-    "disconnect": "Memutuskan",
-    "notConnected": "Tidak terhubung",
-    "clickToConnect": "Klik sambungkan untuk memulai sesi shell.",
-    "connectingTo": "Menghubungkan ke {{containerName}}...",
-    "containerNotFound": "Kontainer tidak ditemukan",
-    "backToList": "Kembali ke Daftar",
-    "logs": "Log",
-    "stats": "Statistik",
-    "consoleTab": "Menghibur",
-    "startContainerToAccess": "Jalankan kontainer untuk mengakses konsol.",
-    "noHostSelected": "Tidak ada pembawa acara yang dipilih.",
-    "failedToFetchLogs": "Gagal mengambil log: {{error}}",
-    "failedToDownloadLogs": "Gagal mengunduh log: {{error}}"
-  },
-  "nav": {
-    "docker": "Buruh pelabuhan"
-  },
-  "onboarding": {
-    "feature_docker": "Buruh pelabuhan",
-    "feature_docker_desc": "Lihat kontainer, baca log, dan pantau statistik pada host mana pun yang menjalankan Docker."
-  },
-  "terminal": {
-    "retry": "Mencoba kembali",
-    "clipboardReadFailed": "Gagal membaca dari clipboard. Pastikan izin clipboard telah diberikan.",
-    "clipboardWriteFailed": "Gagal menyalin ke papan klip. Pastikan halaman disajikan melalui HTTPS atau localhost."
-  },
-  "permissions": {
-    "use": {
-      "title": "Gunakan Docker",
-      "description": "Buka pengelola Docker dan konsol kontainer pada host yang telah mengaktifkan Docker."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Aktifkan Docker",
-        "description": "Kelola kontainer di host ini."
-      },
-      "containerRuntime": {
-        "label": "Lingkungan Eksekusi Kontainer",
-        "description": "Pilih CLI yang digunakan untuk manajemen kontainer pada host ini.",
-        "docker": "Buruh pelabuhan",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Diperlukan server jarak jauh. Hubungkan server jarak jauh di Pengaturan untuk menggunakan jenis koneksi ini."
-  },
-  "hosts": {
-    "docsLink": "Lihat dokumen",
-    "hostNotFound": "Host tidak ditemukan",
-    "loadingHost": "Memuat host..."
-  }
-}
diff --git a/plugins/docker/locales/translated/it_IT.json b/plugins/docker/locales/translated/it_IT.json
deleted file mode 100644
index a55d3295d..000000000
--- a/plugins/docker/locales/translated/it_IT.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Docker non è abilitato per questo host",
-    "validating": "Convalida Docker in corso...",
-    "connecting": "Connessione in corso...",
-    "error": "Errore",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Connessione a Docker non riuscita",
-    "containerStarted": "Container {{name}} avviato",
-    "failedToStartContainer": "Impossibile avviare il container {{name}}",
-    "containerStopped": "Container {{name}} arrestato",
-    "failedToStopContainer": "Impossibile arrestare il container {{name}}",
-    "containerRestarted": "Container {{name}} riavviato",
-    "failedToRestartContainer": "Impossibile riavviare il container {{name}}",
-    "containerPaused": "Container {{name}} in pausa",
-    "containerUnpaused": "Container {{name}} riattivato",
-    "failedToTogglePauseContainer": "Impossibile cambiare lo stato di pausa del container {{name}}",
-    "containerRemoved": "Container {{name}} rimosso",
-    "failedToRemoveContainer": "Impossibile rimuovere il container {{name}}",
-    "image": "Immagine",
-    "ports": "Porte",
-    "noPorts": "Nessuna porta",
-    "start": "Avvia",
-    "stop": "Stop",
-    "status": "Stato",
-    "actions": "Azioni",
-    "cardView": "Visualizzazione a schede",
-    "listView": "Visualizzazione elenco",
-    "confirmRemoveContainer": "Sei sicuro di voler rimuovere il container '{{name}}'? Questa azione non può essere annullata.",
-    "runningContainerWarning": "Attenzione: questo container è attualmente in esecuzione. La rimozione lo arresterà prima.",
-    "loadingContainers": "Caricamento container in corso...",
-    "manager": "Gestore Docker",
-    "autoRefresh": "Aggiornamento automatico",
-    "timestamps": "Timestamp",
-    "lines": "Righe",
-    "filterLogs": "Filtra log...",
-    "refresh": "Aggiorna",
-    "download": "Scarica",
-    "clear": "Pulisci",
-    "logsDownloaded": "Log scaricati con successo",
-    "last50": "Ultime 50",
-    "last100": "Ultime 100",
-    "last500": "Ultime 500",
-    "last1000": "Ultime 1000",
-    "allLogs": "Tutti i log",
-    "noLogsMatching": "Nessun log corrispondente a \"{{query}}\"",
-    "noLogsAvailable": "Nessun log disponibile",
-    "noContainersFound": "Nessun contenitore trovato",
-    "noContainersFoundHint": "Nessun contenitore Docker disponibile su questo host",
-    "searchPlaceholder": "Cerca contenitori...",
-    "allStatuses": "Tutti gli stati",
-    "stateRunning": "In esecuzione",
-    "statePaused": "In pausa",
-    "stateExited": "Terminato",
-    "stateRestarting": "In riavvio",
-    "noContainersMatchFilters": "Nessun contenitore corrisponde ai filtri",
-    "noContainersMatchFiltersHint": "Prova a modificare i criteri di ricerca o di filtro",
-    "failedToFetchStats": "Impossibile recuperare le statistiche del contenitore",
-    "containerNotRunning": "Contenitore non in esecuzione",
-    "startContainerToViewStats": "Avvia il contenitore per visualizzare le statistiche",
-    "loadingStats": "Caricamento statistiche...",
-    "errorLoadingStats": "Errore nel caricamento delle statistiche",
-    "noStatsAvailable": "Nessuna statistica disponibile",
-    "cpuUsage": "Utilizzo CPU",
-    "current": "Corrente",
-    "memoryUsage": "Utilizzo memoria",
-    "networkIo": "I/O di rete",
-    "input": "Input",
-    "output": "Output",
-    "blockIo": "Block I/O",
-    "read": "Lettura",
-    "write": "Scrittura",
-    "pids": "PIDs",
-    "containerInformation": "Informazioni sul container",
-    "name": "Nome",
-    "id": "ID",
-    "state": "Stato",
-    "containerMustBeRunning": "Il container deve essere in esecuzione per accedere alla console",
-    "verificationCodePrompt": "Inserisci il codice di verifica",
-    "totpVerificationFailed": "Verifica TOTP fallita. Riprova.",
-    "browserSignInFailed": "Accesso non riuscito. Riprova.",
-    "connectedTo": "Connesso a {{containerName}}",
-    "disconnected": "Disconnesso",
-    "consoleError": "Errore console",
-    "errorMessage": "Errore: {{message}}",
-    "failedToConnect": "Connessione al container fallita",
-    "console": "Console",
-    "selectShell": "Seleziona shell",
-    "bash": "Bash",
-    "sh": "sh",
-    "ash": "ash",
-    "connect": "Connetti",
-    "disconnect": "Disconnetti",
-    "notConnected": "Non connesso",
-    "clickToConnect": "Clicca Connetti per avviare una sessione shell",
-    "connectingTo": "Connessione a {{containerName}} in corso...",
-    "containerNotFound": "Container non trovato",
-    "backToList": "Torna all'elenco",
-    "logs": "Log",
-    "stats": "Statistiche",
-    "consoleTab": "Console",
-    "startContainerToAccess": "Avvia il container per accedere alla console",
-    "noHostSelected": "Nessun host selezionato",
-    "failedToFetchLogs": "Impossibile recuperare i log: {{error}}",
-    "failedToDownloadLogs": "Impossibile scaricare i log: {{error}}"
-  },
-  "nav": {
-    "docker": "Docker"
-  },
-  "onboarding": {
-    "feature_docker": "Docker",
-    "feature_docker_desc": "Visualizza i container, leggi i log e controlla le statistiche su qualsiasi host che esegue Docker."
-  },
-  "terminal": {
-    "retry": "Riprova",
-    "clipboardReadFailed": "Lettura dagli appunti non riuscita. Assicurati che i permessi degli appunti siano stati concessi.",
-    "clipboardWriteFailed": "Copia negli appunti non riuscita. Assicurati che la pagina sia servita via HTTPS o localhost."
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilizzare Docker",
-      "description": "Apri il gestore Docker e le console dei container sugli host in cui Docker è abilitato."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Abilita Docker",
-        "description": "Gestisci i container su questo host."
-      },
-      "containerRuntime": {
-        "label": "Runtime container",
-        "description": "Scegli la CLI utilizzata per la gestione dei container su questo host",
-        "docker": "Docker",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "È necessario un server remoto. Per utilizzare questo tipo di connessione, collega un server remoto nelle Impostazioni."
-  },
-  "hosts": {
-    "docsLink": "Visualizza documentazione",
-    "hostNotFound": "Host non trovato",
-    "loadingHost": "Caricamento host..."
-  }
-}
diff --git a/plugins/docker/locales/translated/ja_JP.json b/plugins/docker/locales/translated/ja_JP.json
deleted file mode 100644
index 596730469..000000000
--- a/plugins/docker/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "このホストではDockerが有効になっていません",
-    "validating": "Dockerを検証中...",
-    "connecting": "接続中...",
-    "error": "エラー",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Dockerへの接続に失敗しました",
-    "containerStarted": "コンテナ {{name}} が起動しました",
-    "failedToStartContainer": "コンテナ {{name}} の起動に失敗しました",
-    "containerStopped": "コンテナ {{name}} が停止しました",
-    "failedToStopContainer": "コンテナ {{name}} の停止に失敗しました",
-    "containerRestarted": "コンテナ {{name}} が再起動しました",
-    "failedToRestartContainer": "コンテナ {{name}} の再起動に失敗しました",
-    "containerPaused": "コンテナ {{name}} が一時停止しました",
-    "containerUnpaused": "コンテナ {{name}} の一時停止が解除されました",
-    "failedToTogglePauseContainer": "コンテナ {{name}} の一時停止状態の切り替えに失敗しました",
-    "containerRemoved": "コンテナ {{name}} が削除されました",
-    "failedToRemoveContainer": "コンテナ {{name}} の削除に失敗しました",
-    "image": "イメージ",
-    "ports": "ポート",
-    "noPorts": "ポートなし",
-    "start": "起動",
-    "stop": "ストップ",
-    "status": "状態",
-    "actions": "行動",
-    "cardView": "カードビュー",
-    "listView": "リストビュー",
-    "confirmRemoveContainer": "コンテナ '{{name}}' を削除してもよろしいですか？ この操作は元に戻せません。",
-    "runningContainerWarning": "警告: このコンテナは現在実行中です。削除すると、まずコンテナが停止されます。",
-    "loadingContainers": "コンテナを読み込み中...",
-    "manager": "Docker マネージャー",
-    "autoRefresh": "自動更新",
-    "timestamps": "タイムスタンプ",
-    "lines": "行数",
-    "filterLogs": "ログをフィルター...",
-    "refresh": "再読み込み",
-    "download": "ダウンロード",
-    "clear": "クリア",
-    "logsDownloaded": "ログのダウンロードに成功しました",
-    "last50": "直近50件",
-    "last100": "直近100件",
-    "last500": "直近500件",
-    "last1000": "直近1000件",
-    "allLogs": "すべてのログ",
-    "noLogsMatching": "検索条件 \"{{query}}\" に一致するログはありません",
-    "noLogsAvailable": "利用可能なログはありません",
-    "noContainersFound": "コンテナが見つかりません",
-    "noContainersFoundHint": "このホストには利用可能なDockerコンテナがありません",
-    "searchPlaceholder": "コンテナを検索...",
-    "allStatuses": "すべての状態",
-    "stateRunning": "実行中",
-    "statePaused": "一時停止中",
-    "stateExited": "終了済み",
-    "stateRestarting": "再起動中",
-    "noContainersMatchFilters": "条件に一致するコンテナはありません",
-    "noContainersMatchFiltersHint": "検索条件またはフィルター条件を調整してください",
-    "failedToFetchStats": "コンテナの統計情報の取得に失敗しました",
-    "containerNotRunning": "コンテナが実行されていません",
-    "startContainerToViewStats": "統計情報を表示するにはコンテナを起動してください",
-    "loadingStats": "統計情報を読み込み中...",
-    "errorLoadingStats": "統計情報の読み込みエラー",
-    "noStatsAvailable": "利用可能な統計情報はありません",
-    "cpuUsage": "CPU使用率",
-    "current": "現在",
-    "memoryUsage": "メモリ使用量",
-    "networkIo": "ネットワークI/O",
-    "input": "受信",
-    "output": "出力",
-    "blockIo": "ブロック I/O",
-    "read": "読み取り",
-    "write": "書き込み",
-    "pids": "PIDs",
-    "containerInformation": "コンテナ情報",
-    "name": "名前",
-    "id": "ID",
-    "state": "状態",
-    "containerMustBeRunning": "コンソールにアクセスするにはコンテナが実行中である必要があります",
-    "verificationCodePrompt": "認証コードを入力してください",
-    "totpVerificationFailed": "TOTP認証に失敗しました。もう一度お試しください。",
-    "browserSignInFailed": "ログインに失敗しました。もう一度お試しください。",
-    "connectedTo": "{{containerName}}に接続しました",
-    "disconnected": "切断されました",
-    "consoleError": "コンソールエラー",
-    "errorMessage": "エラー: {{message}}",
-    "failedToConnect": "コンテナに接続できませんでした",
-    "console": "コンソール",
-    "selectShell": "シェルを選択",
-    "bash": "Bash",
-    "sh": "sh",
-    "ash": "ash",
-    "connect": "接続",
-    "disconnect": "切断",
-    "notConnected": "未接続",
-    "clickToConnect": "接続ボタンをクリックしてシェルセッションを開始",
-    "connectingTo": "{{containerName}}に接続中...",
-    "containerNotFound": "コンテナが見つかりません",
-    "backToList": "一覧に戻る",
-    "logs": "ログ",
-    "stats": "統計",
-    "consoleTab": "コンソール",
-    "startContainerToAccess": "コンテナを起動してコンソールにアクセスしてください",
-    "noHostSelected": "ホストが選択されていません",
-    "failedToFetchLogs": "ログの取得に失敗しました: {{error}}",
-    "failedToDownloadLogs": "ログのダウンロードに失敗しました: {{error}}"
-  },
-  "nav": {
-    "docker": "Docker"
-  },
-  "onboarding": {
-    "feature_docker": "Docker",
-    "feature_docker_desc": "Dockerを実行している任意のホスト上で、コンテナの表示、ログの読み取り、統計情報の監視が可能です。"
-  },
-  "terminal": {
-    "retry": "再試行",
-    "clipboardReadFailed": "クリップボードからの読み取りに失敗しました。クリップボードのアクセス許可が付与されていることを確認してください。",
-    "clipboardWriteFailed": "クリップボードへのコピーに失敗しました。ページがHTTPSまたはlocalhostで提供されていることを確認してください。"
-  },
-  "permissions": {
-    "use": {
-      "title": "Dockerを使用する",
-      "description": "Dockerが有効になっているホスト上で、Dockerマネージャーとコンテナコンソールを開きます。"
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Dockerを有効化",
-        "description": "このホスト上のコンテナを管理します。"
-      },
-      "containerRuntime": {
-        "label": "コンテナランタイム",
-        "description": "このホストのコンテナ管理に使用するCLIを選択します。",
-        "docker": "Docker",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "リモートサーバーが必要です。この接続タイプを使用するには、設定でリモートサーバーを接続してください。"
-  },
-  "hosts": {
-    "docsLink": "ドキュメントを表示",
-    "hostNotFound": "ホストが見つかりません",
-    "loadingHost": "ホストを読み込み中..."
-  }
-}
diff --git a/plugins/docker/locales/translated/ko_KR.json b/plugins/docker/locales/translated/ko_KR.json
deleted file mode 100644
index 626d23871..000000000
--- a/plugins/docker/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "이 호스트에서 Docker가 활성화되지 않았습니다",
-    "validating": "Docker 확인 중...",
-    "connecting": "연결 중...",
-    "error": "오류",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Docker에 연결하지 못했습니다",
-    "containerStarted": "컨테이너 {{name}} 시작됨",
-    "failedToStartContainer": "컨테이너 {{name}} 시작에 실패했습니다",
-    "containerStopped": "컨테이너 {{name}} 중지됨",
-    "failedToStopContainer": "컨테이너 {{name}} 중지에 실패했습니다",
-    "containerRestarted": "컨테이너 {{name}} 재시작됨",
-    "failedToRestartContainer": "컨테이너 {{name}} 재시작에 실패했습니다",
-    "containerPaused": "컨테이너 {{name}} 일시 정지됨",
-    "containerUnpaused": "컨테이너 {{name}} 일시 정지 해제됨",
-    "failedToTogglePauseContainer": "컨테이너 {{name}}의 일시 정지 상태 전환에 실패했습니다",
-    "containerRemoved": "컨테이너 {{name}} 제거됨",
-    "failedToRemoveContainer": "컨테이너 {{name}} 제거에 실패했습니다",
-    "image": "이미지",
-    "ports": "포트",
-    "noPorts": "포트 없음",
-    "start": "시작",
-    "stop": "중지",
-    "status": "상태",
-    "actions": "작업",
-    "cardView": "카드 보기",
-    "listView": "목록 보기",
-    "confirmRemoveContainer": "컨테이너 '{{name}}'을(를) 제거하시겠습니까? 이 작업은 되돌릴 수 없습니다.",
-    "runningContainerWarning": "경고: 이 컨테이너는 현재 실행 중입니다. 제거하면 먼저 컨테이너가 중지됩니다.",
-    "loadingContainers": "컨테이너 로딩 중...",
-    "manager": "Docker 관리자",
-    "autoRefresh": "자동 새로고침",
-    "timestamps": "타임스탬프",
-    "lines": "라인",
-    "filterLogs": "로그 필터...",
-    "refresh": "새로고침",
-    "download": "다운로드",
-    "clear": "지우기",
-    "logsDownloaded": "로그가 성공적으로 다운로드되었습니다.",
-    "last50": "최근 50개",
-    "last100": "최근 100개",
-    "last500": "최근 500개",
-    "last1000": "최근 1000개",
-    "allLogs": "전체 로그",
-    "noLogsMatching": "\"{{query}}\"와 일치하는 로그가 없습니다.",
-    "noLogsAvailable": "사용 가능한 로그가 없습니다.",
-    "noContainersFound": "컨테이너를 찾을 수 없습니다.",
-    "noContainersFoundHint": "이 호스트에 Docker 컨테이너가 없습니다.",
-    "searchPlaceholder": "컨테이너 검색...",
-    "allStatuses": "모든 상태",
-    "stateRunning": "실행 중",
-    "statePaused": "일시 중지",
-    "stateExited": "종료됨",
-    "stateRestarting": "다시 시작 중",
-    "noContainersMatchFilters": "필터와 일치하는 컨테이너가 없습니다.",
-    "noContainersMatchFiltersHint": "검색 또는 필터 조건을 조정해 보세요.",
-    "failedToFetchStats": "컨테이너 통계를 가져오지 못했습니다.",
-    "containerNotRunning": "컨테이너가 실행 중이 아닙니다.",
-    "startContainerToViewStats": "통계를 보려면 컨테이너를 시작하세요.",
-    "loadingStats": "통계 로딩 중...",
-    "errorLoadingStats": "통계 로딩 오류",
-    "noStatsAvailable": "사용 가능한 통계가 없습니다.",
-    "cpuUsage": "CPU 사용량",
-    "current": "현재",
-    "memoryUsage": "메모리 사용량",
-    "networkIo": "네트워크 I/O",
-    "input": "입력",
-    "output": "출력",
-    "blockIo": "블록 I/O",
-    "read": "읽기",
-    "write": "쓰기",
-    "pids": "PID",
-    "containerInformation": "컨테이너 정보",
-    "name": "이름",
-    "id": "ID",
-    "state": "상태",
-    "containerMustBeRunning": "컨테이너가 실행 중이어야 콘솔에 접근할 수 있습니다",
-    "verificationCodePrompt": "인증 코드를 입력하세요",
-    "totpVerificationFailed": "TOTP 인증에 실패했습니다. 다시 시도하세요.",
-    "browserSignInFailed": "로그인에 실패했습니다. 다시 시도해 주세요.",
-    "connectedTo": "{{containerName}}에 연결됨",
-    "disconnected": "연결 끊김",
-    "consoleError": "콘솔 오류",
-    "errorMessage": "오류: {{message}}",
-    "failedToConnect": "컨테이너에 연결하지 못했습니다",
-    "console": "콘솔",
-    "selectShell": "셸 선택",
-    "bash": "Bash",
-    "sh": "sh",
-    "ash": "ash",
-    "connect": "연결",
-    "disconnect": "연결 해제",
-    "notConnected": "연결되지 않음",
-    "clickToConnect": "연결을 클릭하여 셸 세션을 시작하세요",
-    "connectingTo": "{{containerName}}에 연결 중...",
-    "containerNotFound": "컨테이너를 찾을 수 없음",
-    "backToList": "목록으로 돌아가기",
-    "logs": "로그",
-    "stats": "통계",
-    "consoleTab": "콘솔",
-    "startContainerToAccess": "컨테이너를 시작하여 콘솔에 접근하세요",
-    "noHostSelected": "선택된 호스트가 없습니다",
-    "failedToFetchLogs": "로그를 가져오는 데 실패했습니다: {{error}}",
-    "failedToDownloadLogs": "로그 다운로드 실패: {{error}}"
-  },
-  "nav": {
-    "docker": "Docker"
-  },
-  "onboarding": {
-    "feature_docker": "Docker",
-    "feature_docker_desc": "Docker가 실행 중인 모든 호스트에서 컨테이너를 확인하고, 로그를 읽고, 통계를 볼 수 있습니다."
-  },
-  "terminal": {
-    "retry": "재시도",
-    "clipboardReadFailed": "클립보드에서 읽지 못했습니다. 클립보드 권한이 허용되었는지 확인하세요.",
-    "clipboardWriteFailed": "클립보드에 복사하지 못했습니다. 페이지가 HTTPS 또는 localhost에서 제공되는지 확인하세요."
-  },
-  "permissions": {
-    "use": {
-      "title": "Docker를 사용하세요",
-      "description": "Docker가 활성화된 호스트에서 Docker 관리자 및 컨테이너 콘솔을 엽니다."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Docker 활성화",
-        "description": "이 호스트에서 컨테이너를 관리하세요."
-      },
-      "containerRuntime": {
-        "label": "컨테이너 런타임",
-        "description": "이 호스트에서 컨테이너 관리에 사용할 CLI를 선택합니다.",
-        "docker": "Docker",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "원격 서버가 필요합니다. 이 연결 유형을 사용하려면 설정에서 원격 서버를 연결하세요."
-  },
-  "hosts": {
-    "docsLink": "문서 보기",
-    "hostNotFound": "호스트를 찾을 수 없습니다",
-    "loadingHost": "호스트 로드 중..."
-  }
-}
diff --git a/plugins/docker/locales/translated/nl_NL.json b/plugins/docker/locales/translated/nl_NL.json
deleted file mode 100644
index 813a79869..000000000
--- a/plugins/docker/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Docker is niet ingeschakeld voor deze host.",
-    "validating": "Docker valideren...",
-    "connecting": "Verbinden...",
-    "error": "Fout",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Verbinding met Docker mislukt.",
-    "containerStarted": "Container {{name}} gestart",
-    "failedToStartContainer": "Het starten van de container is mislukt {{name}}",
-    "containerStopped": "Container {{name}} is gestopt",
-    "failedToStopContainer": "Het is niet gelukt om de container {{name}} te stoppen.",
-    "containerRestarted": "Container {{name}} opnieuw opgestart",
-    "failedToRestartContainer": "Het opnieuw opstarten van de container is mislukt {{name}}",
-    "containerPaused": "Container {{name}} gepauzeerd",
-    "containerUnpaused": "Container {{name}} is niet langer gepauzeerd",
-    "failedToTogglePauseContainer": "Het is niet gelukt om de pauzestatus voor container {{name}} te wijzigen.",
-    "containerRemoved": "Container {{name}} verwijderd",
-    "failedToRemoveContainer": "Het verwijderen van de container is mislukt {{name}}",
-    "image": "Afbeelding",
-    "ports": "Havens",
-    "noPorts": "Geen poorten",
-    "start": "Begin",
-    "stop": "Stop",
-    "status": "Status",
-    "actions": "Acties",
-    "cardView": "Kaartweergave",
-    "listView": "Lijstweergave",
-    "confirmRemoveContainer": "Weet je zeker dat je de container '{{name}}' wilt verwijderen? Deze actie kan niet ongedaan worden gemaakt.",
-    "runningContainerWarning": "Waarschuwing: Deze container is momenteel actief. Als u deze verwijdert, wordt de container eerst gestopt.",
-    "loadingContainers": "Containers laden...",
-    "manager": "Docker Manager",
-    "autoRefresh": "Automatisch vernieuwen",
-    "timestamps": "Tijdstempels",
-    "lines": "Lijnen",
-    "filterLogs": "Filterlogboeken...",
-    "refresh": "Vernieuwen",
-    "download": "Download",
-    "clear": "Duidelijk",
-    "logsDownloaded": "Logbestanden succesvol gedownload.",
-    "last50": "Laatste 50",
-    "last100": "Laatste 100",
-    "last500": "Laatste 500",
-    "last1000": "Laatste 1000",
-    "allLogs": "Alle logboeken",
-    "noLogsMatching": "Geen logbestanden gevonden die overeenkomen met \"{{query}}\"",
-    "noLogsAvailable": "Geen logbestanden beschikbaar",
-    "noContainersFound": "Geen containers gevonden",
-    "noContainersFoundHint": "Er zijn geen Docker-containers beschikbaar op deze host.",
-    "searchPlaceholder": "Containers doorzoeken...",
-    "allStatuses": "Alle statussen",
-    "stateRunning": "Rennen",
-    "statePaused": "Gepauzeerd",
-    "stateExited": "Uitgang",
-    "stateRestarting": "Opnieuw opstarten",
-    "noContainersMatchFilters": "Geen containers komen overeen met uw filters.",
-    "noContainersMatchFiltersHint": "Probeer je zoek- of filtercriteria aan te passen.",
-    "failedToFetchStats": "Het ophalen van containerstatistieken is mislukt.",
-    "containerNotRunning": "Container draait niet",
-    "startContainerToViewStats": "Start de container om de statistieken te bekijken.",
-    "loadingStats": "Statistieken laden...",
-    "errorLoadingStats": "Fout bij het laden van statistieken",
-    "noStatsAvailable": "Geen statistieken beschikbaar",
-    "cpuUsage": "CPU-gebruik",
-    "current": "Huidig",
-    "memoryUsage": "Geheugengebruik",
-    "networkIo": "Netwerk I/O",
-    "input": "Invoer",
-    "output": "Uitvoer",
-    "blockIo": "Blok I/O",
-    "read": "Lezen",
-    "write": "Schrijven",
-    "pids": "PID's",
-    "containerInformation": "Containerinformatie",
-    "name": "Naam",
-    "id": "ID",
-    "state": "Staat",
-    "containerMustBeRunning": "De container moet actief zijn om toegang te krijgen tot de console.",
-    "verificationCodePrompt": "Voer de verificatiecode in.",
-    "totpVerificationFailed": "TOTP-verificatie mislukt. Probeer het opnieuw.",
-    "browserSignInFailed": "Aanmelden is mislukt. Probeer het opnieuw.",
-    "connectedTo": "Verbonden met {{containerName}}",
-    "disconnected": "Verbinding verbroken",
-    "consoleError": "Consolefout",
-    "errorMessage": "Fout: {{message}}",
-    "failedToConnect": "Verbinding met de container mislukt.",
-    "console": "Troosten",
-    "selectShell": "Selecteer shell",
-    "bash": "Knal",
-    "sh": "sh",
-    "ash": "as",
-    "connect": "Verbinden",
-    "disconnect": "Verbinding verbreken",
-    "notConnected": "Niet verbonden",
-    "clickToConnect": "Klik op 'Verbinden' om een shellsessie te starten.",
-    "connectingTo": "Verbinding maken met {{containerName}}...",
-    "containerNotFound": "Container niet gevonden",
-    "backToList": "Terug naar de lijst",
-    "logs": "Logboeken",
-    "stats": "Statistieken",
-    "consoleTab": "Troosten",
-    "startContainerToAccess": "Start de container om toegang te krijgen tot de console.",
-    "noHostSelected": "Geen host geselecteerd",
-    "failedToFetchLogs": "Het ophalen van logbestanden is mislukt: {{error}}",
-    "failedToDownloadLogs": "Het downloaden van logbestanden is mislukt: {{error}}"
-  },
-  "nav": {
-    "docker": "Docker"
-  },
-  "onboarding": {
-    "feature_docker": "Docker",
-    "feature_docker_desc": "Bekijk containers, lees logboeken en bekijk statistieken op elke host waarop Docker draait."
-  },
-  "terminal": {
-    "retry": "Opnieuw proberen",
-    "clipboardReadFailed": "Het lezen van het klembord is mislukt. Zorg ervoor dat de juiste klembordrechten zijn verleend.",
-    "clipboardWriteFailed": "Kopiëren naar klembord mislukt. Zorg ervoor dat de pagina via HTTPS of localhost wordt aangeboden."
-  },
-  "permissions": {
-    "use": {
-      "title": "Gebruik Docker",
-      "description": "Open de Docker Manager en de containerconsoles op hosts waarop Docker is ingeschakeld."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Docker inschakelen",
-        "description": "Beheer containers op deze host."
-      },
-      "containerRuntime": {
-        "label": "Container Runtime",
-        "description": "Kies de CLI die op deze host wordt gebruikt voor containerbeheer.",
-        "docker": "Docker",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Externe server vereist. Verbind een externe server in de instellingen om dit verbindingstype te gebruiken."
-  },
-  "hosts": {
-    "docsLink": "Documenten bekijken",
-    "hostNotFound": "Host niet gevonden",
-    "loadingHost": "Host wordt geladen..."
-  }
-}
diff --git a/plugins/docker/locales/translated/no_NO.json b/plugins/docker/locales/translated/no_NO.json
deleted file mode 100644
index bfb75e1d7..000000000
--- a/plugins/docker/locales/translated/no_NO.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Docker er ikke aktivert for denne verten",
-    "validating": "Validerer Docker...",
-    "connecting": "Kobler til...",
-    "error": "Feil",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Kunne ikke koble til Docker",
-    "containerStarted": "Container {{name}} startet",
-    "failedToStartContainer": "Kunne ikke starte containeren {{name}}",
-    "containerStopped": "Container {{name}} stoppet",
-    "failedToStopContainer": "Klarte ikke å stoppe containeren {{name}}",
-    "containerRestarted": "Beholder {{name}} startet på nytt",
-    "failedToRestartContainer": "Kunne ikke starte beholderen {{name}} på nytt",
-    "containerPaused": "Beholder {{name}} satt på pause",
-    "containerUnpaused": "Beholder {{name}} er ikke satt på pause lenger",
-    "failedToTogglePauseContainer": "Kunne ikke slå av/på pausetilstand for container {{name}}",
-    "containerRemoved": "Beholder {{name}} fjernet",
-    "failedToRemoveContainer": "Kunne ikke fjerne beholderen {{name}}",
-    "image": "Bilde",
-    "ports": "Porter",
-    "noPorts": "Ingen porter",
-    "start": "Start",
-    "stop": "Stopp",
-    "status": "Status",
-    "actions": "Handlinger",
-    "cardView": "Kortvisning",
-    "listView": "Listevisning",
-    "confirmRemoveContainer": "Er du sikker på at du vil fjerne beholderen '{{name}}'? Denne handlingen kan ikke angres.",
-    "runningContainerWarning": "Advarsel: Denne beholderen kjører for øyeblikket. Hvis du fjerner den, stoppes beholderen først.",
-    "loadingContainers": "Laster containere ...",
-    "manager": "Docker Manager",
-    "autoRefresh": "Automatisk oppdatering",
-    "timestamps": "Tidsstempler",
-    "lines": "Linjer",
-    "filterLogs": "Filtrer logger...",
-    "refresh": "Oppdater",
-    "download": "Last ned",
-    "clear": "Tøm",
-    "logsDownloaded": "Loggene er lastet ned",
-    "last50": "Siste 50",
-    "last100": "Siste 100",
-    "last500": "Siste 500",
-    "last1000": "Siste 1000",
-    "allLogs": "Alle logger",
-    "noLogsMatching": "Ingen logger som samsvarer med «{{query}}»",
-    "noLogsAvailable": "Ingen logger tilgjengelig",
-    "noContainersFound": "Ingen containere funnet",
-    "noContainersFoundHint": "Ingen Docker-containere er tilgjengelige på denne verten",
-    "searchPlaceholder": "Søk i containere...",
-    "allStatuses": "Alle statuser",
-    "stateRunning": "Kjører",
-    "statePaused": "Pauset",
-    "stateExited": "Avsluttet",
-    "stateRestarting": "Starter på nytt",
-    "noContainersMatchFilters": "Ingen beholdere samsvarer med filtrene dine",
-    "noContainersMatchFiltersHint": "Prøv å justere søke- eller filterkriteriene dine",
-    "failedToFetchStats": "Kunne ikke hente containerstatistikk",
-    "containerNotRunning": "Beholderen kjører ikke",
-    "startContainerToViewStats": "Start beholderen for å se statistikk",
-    "loadingStats": "Laster inn statistikk ...",
-    "errorLoadingStats": "Feil ved lasting av statistikk",
-    "noStatsAvailable": "Ingen statistikk tilgjengelig",
-    "cpuUsage": "CPU-bruk",
-    "current": "Nåværende",
-    "memoryUsage": "Minnebruk",
-    "networkIo": "Nettverk I/O",
-    "input": "Inndata",
-    "output": "Produksjon",
-    "blockIo": "Blokk I/O",
-    "read": "Les",
-    "write": "Skriv",
-    "pids": "PID-er",
-    "containerInformation": "Containerinformasjon",
-    "name": "Navn",
-    "id": "ID",
-    "state": "Tilstand",
-    "containerMustBeRunning": "Containeren må kjøre for å få tilgang til konsollen",
-    "verificationCodePrompt": "Angi verifikasjonskode",
-    "totpVerificationFailed": "TOTP-verifisering mislyktes. Prøv på nytt.",
-    "browserSignInFailed": "Påloggingen mislyktes. Prøv på nytt.",
-    "connectedTo": "Koblet til {{containerName}}",
-    "disconnected": "Frakoblet",
-    "consoleError": "Konsollfeil",
-    "errorMessage": "Feil: {{message}}",
-    "failedToConnect": "Kunne ikke koble til beholderen",
-    "console": "Konsoll",
-    "selectShell": "Velg skall",
-    "bash": "Bash",
-    "sh": "sh",
-    "ash": "aske",
-    "connect": "Koble til",
-    "disconnect": "Koble fra",
-    "notConnected": "Ikke tilkoblet",
-    "clickToConnect": "Klikk på koble til for å starte en skalløkt",
-    "connectingTo": "Kobler til {{containerName}}...",
-    "containerNotFound": "Beholderen ble ikke funnet",
-    "backToList": "Tilbake til listen",
-    "logs": "Logger",
-    "stats": "Statistikk",
-    "consoleTab": "Konsoll",
-    "startContainerToAccess": "Start containeren for å få tilgang til konsollen",
-    "noHostSelected": "Ingen vert valgt",
-    "failedToFetchLogs": "Kunne ikke hente logger: {{error}}",
-    "failedToDownloadLogs": "Kunne ikke laste ned logger: {{error}}"
-  },
-  "nav": {
-    "docker": "Dokker"
-  },
-  "onboarding": {
-    "feature_docker": "Dokker",
-    "feature_docker_desc": "Se containere, les logger og se statistikk på alle verter som kjører Docker."
-  },
-  "terminal": {
-    "retry": "Prøv igjen",
-    "clipboardReadFailed": "Kunne ikke lese fra utklippstavlen. Sørg for at utklippstavlen har tillatelser.",
-    "clipboardWriteFailed": "Kunne ikke kopiere til utklippstavlen. Sørg for at siden serveres via HTTPS eller localhost."
-  },
-  "permissions": {
-    "use": {
-      "title": "Bruk Docker",
-      "description": "Åpne Docker-behandleren og containerkonsollene på verter med Docker aktivert."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Aktiver Docker",
-        "description": "Administrer containere på denne verten."
-      },
-      "containerRuntime": {
-        "label": "Containerkjøringstid",
-        "description": "Velg CRI-et som brukes for containeradministrasjon på denne verten",
-        "docker": "Dokker",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Ekstern server kreves. Koble til en ekstern server i Innstillinger for å bruke denne tilkoblingstypen."
-  },
-  "hosts": {
-    "docsLink": "Vis dokumenter",
-    "hostNotFound": "Verten ble ikke funnet",
-    "loadingHost": "Laster inn vert ..."
-  }
-}
diff --git a/plugins/docker/locales/translated/pl_PL.json b/plugins/docker/locales/translated/pl_PL.json
deleted file mode 100644
index feddd9fe7..000000000
--- a/plugins/docker/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Docker nie jest włączony dla tego hosta",
-    "validating": "Sprawdzanie poprawności Dockera...",
-    "connecting": "Łączenie...",
-    "error": "Błąd",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Nie udało się połączyć z Dockerem",
-    "containerStarted": "Kontener {{name}} został uruchomiony",
-    "failedToStartContainer": "Nie udało się uruchomić kontenera {{name}}",
-    "containerStopped": "Kontener {{name}} zatrzymany",
-    "failedToStopContainer": "Nie udało się zatrzymać kontenera {{name}}",
-    "containerRestarted": "Kontener {{name}} został ponownie uruchomiony",
-    "failedToRestartContainer": "Nie udało się ponownie uruchomić kontenera {{name}}",
-    "containerPaused": "Kontener {{name}} wstrzymany",
-    "containerUnpaused": "Kontener {{name}} wznowiony",
-    "failedToTogglePauseContainer": "Nie udało się przełączyć stanu pauzy dla kontenera {{name}}",
-    "containerRemoved": "Kontener {{name}} został usunięty",
-    "failedToRemoveContainer": "Nie udało się usunąć kontenera {{name}}",
-    "image": "Obraz",
-    "ports": "Porty",
-    "noPorts": "Brak portów",
-    "start": "Start",
-    "stop": "Stop",
-    "status": "Status",
-    "actions": "Akcje",
-    "cardView": "Widok karty",
-    "listView": "Widok listy",
-    "confirmRemoveContainer": "Czy na pewno chcesz usunąć kontener „{{name}}”? Tej czynności nie można cofnąć.",
-    "runningContainerWarning": "Ostrzeżenie: Ten kontener jest obecnie uruchomiony. Jego usunięcie spowoduje najpierw jego zatrzymanie.",
-    "loadingContainers": "Ładowanie kontenerów...",
-    "manager": "Menedżer Dockera",
-    "autoRefresh": "Automatyczne odświeżanie",
-    "timestamps": "Znaczniki czasu",
-    "lines": "Wiersze",
-    "filterLogs": "Filtruj logi...",
-    "refresh": "Odśwież",
-    "download": "Pobierz",
-    "clear": "Wyczyść",
-    "logsDownloaded": "Pomyślnie pobrano logi",
-    "last50": "Ostatnie 50",
-    "last100": "Ostatnie 100",
-    "last500": "Ostatnie 500",
-    "last1000": "Ostatnie 1000",
-    "allLogs": "Wszystkie logi",
-    "noLogsMatching": "Brak logów pasujących do „{{query}}”",
-    "noLogsAvailable": "Brak dostępnych logów",
-    "noContainersFound": "Nie znaleziono kontenerów",
-    "noContainersFoundHint": "Na tym hoście nie ma dostępnych kontenerów Docker",
-    "searchPlaceholder": "Przeszukaj kontenery...",
-    "allStatuses": "Wszystkie statusy",
-    "stateRunning": "Działa",
-    "statePaused": "Wstrzymano",
-    "stateExited": "Zakończony",
-    "stateRestarting": "Restartuje się",
-    "noContainersMatchFilters": "Brak kontenerów pasujących do filtrów",
-    "noContainersMatchFiltersHint": "Spróbuj dostosować kryteria wyszukiwania lub filtrowania",
-    "failedToFetchStats": "Nie udało się pobrać statystyk kontenera",
-    "containerNotRunning": "Kontener nie działa",
-    "startContainerToViewStats": "Uruchom kontener, aby wyświetlić statystyki",
-    "loadingStats": "Ładowanie statystyk...",
-    "errorLoadingStats": "Błąd ładowania statystyk",
-    "noStatsAvailable": "Brak dostępnych statystyk",
-    "cpuUsage": "Wykorzystanie procesora",
-    "current": "Bieżące",
-    "memoryUsage": "Wykorzystanie pamięci",
-    "networkIo": "Wejście/wyjście sieciowe",
-    "input": "Wejście",
-    "output": "Wyjście",
-    "blockIo": "Blokowe I/O",
-    "read": "Odczyt",
-    "write": "Zapis",
-    "pids": "PID-y",
-    "containerInformation": "Informacje o kontenerze",
-    "name": "Nazwa",
-    "id": "ID",
-    "state": "Stan",
-    "containerMustBeRunning": "Aby uzyskać dostęp do konsoli, kontener musi być uruchomiony",
-    "verificationCodePrompt": "Wprowadź kod weryfikacyjny",
-    "totpVerificationFailed": "Weryfikacja TOTP nie powiodła się. Spróbuj ponownie.",
-    "browserSignInFailed": "Logowanie nie powiodło się. Spróbuj ponownie.",
-    "connectedTo": "Połączono z {{containerName}}",
-    "disconnected": "Rozłączono",
-    "consoleError": "Błąd konsoli",
-    "errorMessage": "Błąd: {{message}}",
-    "failedToConnect": "Nie udało się połączyć z kontenerem",
-    "console": "Konsola",
-    "selectShell": "Wybierz powłokę",
-    "bash": "Bash",
-    "sh": "sh",
-    "ash": "ash",
-    "connect": "Połącz",
-    "disconnect": "Odłącz",
-    "notConnected": "Nie połączono",
-    "clickToConnect": "Kliknij „Połącz”, aby rozpocząć sesję powłoki",
-    "connectingTo": "Łączenie z {{containerName}}...",
-    "containerNotFound": "Nie znaleziono kontenera",
-    "backToList": "Powrót do listy",
-    "logs": "Logi",
-    "stats": "Statystyki",
-    "consoleTab": "Konsola",
-    "startContainerToAccess": "Uruchom kontener, aby uzyskać dostęp do konsoli",
-    "noHostSelected": "Nie wybrano hosta",
-    "failedToFetchLogs": "Nie udało się pobrać dzienników: {{error}}",
-    "failedToDownloadLogs": "Nie udało się pobrać dzienników: {{error}}"
-  },
-  "nav": {
-    "docker": "Docker"
-  },
-  "onboarding": {
-    "feature_docker": "Docker",
-    "feature_docker_desc": "Przeglądaj kontenery, czytaj logi i śledź statystyki na dowolnym hoście, na którym działa Docker."
-  },
-  "terminal": {
-    "retry": "Ponów",
-    "clipboardReadFailed": "Nie udało się odczytać danych ze schowka. Upewnij się, że uprawnienia do schowka zostały przyznane.",
-    "clipboardWriteFailed": "Nie udało się skopiować do schowka. Upewnij się, że strona jest serwowana przez HTTPS lub localhost."
-  },
-  "permissions": {
-    "use": {
-      "title": "Użyj Dockera",
-      "description": "Otwórz menedżera Docker i konsole kontenerów na hostach z włączonym Dockerem."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Włącz Docker",
-        "description": "Zarządzaj kontenerami na tym hoście."
-      },
-      "containerRuntime": {
-        "label": "Środowisko wykonawcze kontenera",
-        "description": "Wybierz CLI używane do zarządzania kontenerami na tym hoście",
-        "docker": "Docker",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Wymagany jest serwer zdalny. Połącz się z serwerem zdalnym w Ustawieniach, aby korzystać z tego typu połączenia."
-  },
-  "hosts": {
-    "docsLink": "Zobacz dokumentację",
-    "hostNotFound": "Nie znaleziono hosta",
-    "loadingHost": "Ładowanie hosta..."
-  }
-}
diff --git a/plugins/docker/locales/translated/pt_BR.json b/plugins/docker/locales/translated/pt_BR.json
deleted file mode 100644
index 099204988..000000000
--- a/plugins/docker/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "O Docker não está habilitado para este host.",
-    "validating": "Validando o Docker...",
-    "connecting": "Conectando...",
-    "error": "Erro",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Falha ao conectar ao Docker",
-    "containerStarted": "Contêiner {{name}} iniciado",
-    "failedToStartContainer": "Falha ao iniciar o contêiner {{name}}",
-    "containerStopped": "Contêiner {{name}} parado",
-    "failedToStopContainer": "Falha ao parar o contêiner {{name}}",
-    "containerRestarted": "Contêiner {{name}} reiniciado",
-    "failedToRestartContainer": "Falha ao reiniciar o contêiner {{name}}",
-    "containerPaused": "Contêiner {{name}} pausado",
-    "containerUnpaused": "Contêiner {{name}} despausado",
-    "failedToTogglePauseContainer": "Falha ao alternar o estado de pausa para o contêiner {{name}}",
-    "containerRemoved": "Contêiner {{name}} removido",
-    "failedToRemoveContainer": "Falha ao remover o contêiner {{name}}",
-    "image": "Imagem",
-    "ports": "Portos",
-    "noPorts": "Sem portas",
-    "start": "Iniciar",
-    "stop": "Parar",
-    "status": "Status",
-    "actions": "Ações",
-    "cardView": "Visualização em cartão",
-    "listView": "Visualização em lista",
-    "confirmRemoveContainer": "Tem certeza de que deseja remover o contêiner '{{name}}'? Esta ação não pode ser desfeita.",
-    "runningContainerWarning": "Aviso: Este contêiner está em execução. Removê-lo interromperá o contêiner primeiro.",
-    "loadingContainers": "Carregando contêineres...",
-    "manager": "Gerenciador de Docker",
-    "autoRefresh": "Atualização automática",
-    "timestamps": "Carimbos de data/hora",
-    "lines": "Linhas",
-    "filterLogs": "Filtrar registros...",
-    "refresh": "Atualizar",
-    "download": "Download",
-    "clear": "Limpar",
-    "logsDownloaded": "Registros baixados com sucesso",
-    "last50": "Últimos 50",
-    "last100": "Últimos 100",
-    "last500": "Últimos 500",
-    "last1000": "Últimos 1000",
-    "allLogs": "Todos os registros",
-    "noLogsMatching": "Nenhum registro correspondente a \"{{query}}\"",
-    "noLogsAvailable": "Nenhum registro disponível",
-    "noContainersFound": "Nenhum contêiner encontrado",
-    "noContainersFoundHint": "Não há contêineres Docker disponíveis neste host.",
-    "searchPlaceholder": "Contêineres de pesquisa...",
-    "allStatuses": "Todos os status",
-    "stateRunning": "Correndo",
-    "statePaused": "Em pausa",
-    "stateExited": "Saiu",
-    "stateRestarting": "Reiniciando",
-    "noContainersMatchFilters": "Nenhum recipiente corresponde aos seus filtros.",
-    "noContainersMatchFiltersHint": "Tente ajustar seus critérios de pesquisa ou filtro.",
-    "failedToFetchStats": "Falha ao obter as estatísticas do contêiner.",
-    "containerNotRunning": "Contêiner não está em execução",
-    "startContainerToViewStats": "Inicie o contêiner para visualizar as estatísticas.",
-    "loadingStats": "Carregando estatísticas...",
-    "errorLoadingStats": "Estatísticas de carregamento de erros",
-    "noStatsAvailable": "Não há estatísticas disponíveis.",
-    "cpuUsage": "Utilização da CPU",
-    "current": "Atual",
-    "memoryUsage": "Uso de memória",
-    "networkIo": "Entrada e Saída de rede",
-    "input": "Entrada",
-    "output": "Saída",
-    "blockIo": "Bloco de E/S",
-    "read": "Ler",
-    "write": "Escrever",
-    "pids": "Identificadores de Processos",
-    "containerInformation": "Informações do contêiner",
-    "name": "Nome",
-    "id": "EU IA",
-    "state": "Estado",
-    "containerMustBeRunning": "O contêiner precisa estar em execução para acessar o console",
-    "verificationCodePrompt": "Insira o código de verificação",
-    "totpVerificationFailed": "A verificação TOTP falhou. Tente novamente.",
-    "browserSignInFailed": "Falha ao efetuar o login. Tente novamente.",
-    "connectedTo": "Conectado a {{containerName}}",
-    "disconnected": "Desconectado",
-    "consoleError": "Erro no console",
-    "errorMessage": "Erro: {{message}}",
-    "failedToConnect": "Falha ao conectar ao contêiner",
-    "console": "Console",
-    "selectShell": "Selecione shell",
-    "bash": "Bash",
-    "sh": "sh",
-    "ash": "cinzas",
-    "connect": "Conectar",
-    "disconnect": "Desconectar",
-    "notConnected": "Não conectado",
-    "clickToConnect": "Clique em conectar para iniciar uma sessão de shell.",
-    "connectingTo": "Conectando a {{containerName}}...",
-    "containerNotFound": "Contêiner não encontrado",
-    "backToList": "Voltar à lista",
-    "logs": "Registros",
-    "stats": "Estatísticas",
-    "consoleTab": "Console",
-    "startContainerToAccess": "Inicie o contêiner para acessar o console.",
-    "noHostSelected": "Nenhum host selecionado",
-    "failedToFetchLogs": "Falha ao obter os registros: {{error}}",
-    "failedToDownloadLogs": "Falha ao baixar os registros: {{error}}"
-  },
-  "nav": {
-    "docker": "Docker"
-  },
-  "onboarding": {
-    "feature_docker": "Docker",
-    "feature_docker_desc": "Visualize contêineres, leia registros e acompanhe as estatísticas em qualquer host que execute o Docker."
-  },
-  "terminal": {
-    "retry": "Tentar novamente",
-    "clipboardReadFailed": "Não foi possível ler o conteúdo da área de transferência. Certifique-se de que as permissões de acesso à área de transferência estejam concedidas.",
-    "clipboardWriteFailed": "Falha ao copiar para a área de transferência. Certifique-se de que a página esteja sendo servida via HTTPS ou localhost."
-  },
-  "permissions": {
-    "use": {
-      "title": "Use o Docker",
-      "description": "Abra o gerenciador do Docker e os consoles de contêineres nos hosts com o Docker habilitado."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Ativar Docker",
-        "description": "Gerencie os contêineres neste host."
-      },
-      "containerRuntime": {
-        "label": "Tempo de execução do contêiner",
-        "description": "Escolha a CLI usada para gerenciamento de contêineres neste host.",
-        "docker": "Docker",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "É necessário um servidor remoto. Conecte um servidor remoto nas Configurações para usar este tipo de conexão."
-  },
-  "hosts": {
-    "docsLink": "Documentação",
-    "hostNotFound": "Host não encontrado",
-    "loadingHost": "Carregando host..."
-  }
-}
diff --git a/plugins/docker/locales/translated/pt_PT.json b/plugins/docker/locales/translated/pt_PT.json
deleted file mode 100644
index 1ed015fe5..000000000
--- a/plugins/docker/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Docker não está ativado para este host",
-    "validating": "A validar o Docker...",
-    "connecting": "A ligar...",
-    "error": "Erro",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Falha ao ligar ao Docker",
-    "containerStarted": "Contentor {{name}} iniciado",
-    "failedToStartContainer": "Falha ao iniciar o contentor {{name}}",
-    "containerStopped": "Contentor {{name}} parado",
-    "failedToStopContainer": "Falha ao parar o contentor {{name}}",
-    "containerRestarted": "Contentor {{name}} reiniciado",
-    "failedToRestartContainer": "Falha ao reiniciar o contentor {{name}}",
-    "containerPaused": "Contentor {{name}} suspenso",
-    "containerUnpaused": "Contentor {{name}} retomado",
-    "failedToTogglePauseContainer": "Falha ao alternar estado de pausa do contentor {{name}}",
-    "containerRemoved": "Contentor {{name}} removido",
-    "failedToRemoveContainer": "Falha ao remover o contentor {{name}}",
-    "image": "Imagem",
-    "ports": "Portas",
-    "noPorts": "Sem portas",
-    "start": "Iniciar",
-    "stop": "Stop",
-    "status": "Estado",
-    "actions": "Ações",
-    "cardView": "Visualização em cartão",
-    "listView": "Visualização em lista",
-    "confirmRemoveContainer": "Tem a certeza de que pretende remover o contentor '{{name}}'? Esta ação não pode ser desfeita.",
-    "runningContainerWarning": "Aviso: Este contentor está em execução. Removê-lo irá pará-lo primeiro.",
-    "loadingContainers": "A carregar contentores...",
-    "manager": "Gestor Docker",
-    "autoRefresh": "Atualização automática",
-    "timestamps": "Marcas de tempo",
-    "lines": "Linhas",
-    "filterLogs": "Filtrar registos...",
-    "refresh": "Atualizar",
-    "download": "Transferir",
-    "clear": "Limpar",
-    "logsDownloaded": "Registos transferidos com sucesso",
-    "last50": "Últimos 50",
-    "last100": "Últimos 100",
-    "last500": "Últimos 500",
-    "last1000": "Últimos 1000",
-    "allLogs": "Todos os registos",
-    "noLogsMatching": "Nenhum registo corresponde a \"{{query}}\"",
-    "noLogsAvailable": "Nenhum registo disponível",
-    "noContainersFound": "Nenhum contentor encontrado",
-    "noContainersFoundHint": "Não existem contentores Docker disponíveis neste host",
-    "searchPlaceholder": "Pesquisar contentores...",
-    "allStatuses": "Todos os estados",
-    "stateRunning": "Em execução",
-    "statePaused": "Em pausa",
-    "stateExited": "Terminado",
-    "stateRestarting": "A reiniciar",
-    "noContainersMatchFilters": "Nenhum contentor corresponde aos seus filtros",
-    "noContainersMatchFiltersHint": "Tente ajustar os seus critérios de pesquisa ou filtro",
-    "failedToFetchStats": "Falha ao obter estatísticas do contentor",
-    "containerNotRunning": "O contentor não está em execução",
-    "startContainerToViewStats": "Inicie o contentor para ver as estatísticas",
-    "loadingStats": "A carregar estatísticas...",
-    "errorLoadingStats": "Erro ao carregar estatísticas",
-    "noStatsAvailable": "Nenhuma estatística disponível",
-    "cpuUsage": "Utilização da CPU",
-    "current": "Atual",
-    "memoryUsage": "Utilização da memória",
-    "networkIo": "I/O de rede",
-    "input": "Entrada",
-    "output": "Saída",
-    "blockIo": "E/S de blocos",
-    "read": "Leitura",
-    "write": "Escrita",
-    "pids": "PIDs",
-    "containerInformation": "Informações do contentor",
-    "name": "Nome",
-    "id": "ID",
-    "state": "Estado",
-    "containerMustBeRunning": "O contentor tem de estar em execução para aceder à consola",
-    "verificationCodePrompt": "Introduza o código de verificação",
-    "totpVerificationFailed": "A verificação TOTP falhou. Por favor, tente novamente.",
-    "browserSignInFailed": "Falha ao efetuar o login. Tente novamente.",
-    "connectedTo": "Ligado a {{containerName}}",
-    "disconnected": "Desligado",
-    "consoleError": "Erro da consola",
-    "errorMessage": "Erro: {{message}}",
-    "failedToConnect": "Falha ao ligar ao contentor",
-    "console": "Consola",
-    "selectShell": "Selecionar shell",
-    "bash": "Bash",
-    "sh": "sh",
-    "ash": "ash",
-    "connect": "Ligar",
-    "disconnect": "Desligar",
-    "notConnected": "Não ligado",
-    "clickToConnect": "Clique em Ligar para iniciar uma sessão shell",
-    "connectingTo": "A ligar a {{containerName}}...",
-    "containerNotFound": "Contentor não encontrado",
-    "backToList": "Voltar à lista",
-    "logs": "Registos",
-    "stats": "Estatísticas",
-    "consoleTab": "Consola",
-    "startContainerToAccess": "Inicie o contentor para aceder à consola",
-    "noHostSelected": "Nenhum anfitrião selecionado",
-    "failedToFetchLogs": "Falha ao obter os registos: {{error}}",
-    "failedToDownloadLogs": "Falha ao descarregar os registos: {{error}}"
-  },
-  "nav": {
-    "docker": "Docker"
-  },
-  "onboarding": {
-    "feature_docker": "Docker",
-    "feature_docker_desc": "Visualize contentores, leia registos e acompanhe as estatísticas em qualquer host que execute o Docker."
-  },
-  "terminal": {
-    "retry": "Repetir",
-    "clipboardReadFailed": "Erro ao ler da área de transferência. Certifique-se de que as permissões da área de transferência foram concedidas.",
-    "clipboardWriteFailed": "Erro ao copiar para a área de transferência. Certifique-se de que a página é servida via HTTPS ou localhost."
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilize o Docker",
-      "description": "Abra o gestor do Docker e as consolas de contentores nos hosts com o Docker ativado."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Ativar Docker",
-        "description": "Gerir os contentores neste host."
-      },
-      "containerRuntime": {
-        "label": "Runtime de Contentores",
-        "description": "Escolha a CLI usada para a gestão de contentores neste host",
-        "docker": "Docker",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "É necessário um servidor remoto. Ligue um servidor remoto nas Definições para utilizar este tipo de ligação."
-  },
-  "hosts": {
-    "docsLink": "Ver documentação",
-    "hostNotFound": "Host não encontrado",
-    "loadingHost": "A carregar o host..."
-  }
-}
diff --git a/plugins/docker/locales/translated/ro_RO.json b/plugins/docker/locales/translated/ro_RO.json
deleted file mode 100644
index f62b384d0..000000000
--- a/plugins/docker/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Docker nu este activat pentru această gazdă",
-    "validating": "Se validează Docker...",
-    "connecting": "Se conectează...",
-    "error": "Eroare",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Conectarea la Docker nu a reușit",
-    "containerStarted": "Containerul {{name}} a fost pornit",
-    "failedToStartContainer": "Containerul {{name}} nu a putut fi pornit",
-    "containerStopped": "Containerul {{name}} s-a oprit",
-    "failedToStopContainer": "Containerul {{name}} nu a putut fi oprit.",
-    "containerRestarted": "Containerul {{name}} a fost repornit",
-    "failedToRestartContainer": "Repornirea containerului {{name}} a eșuat.",
-    "containerPaused": "Containerul {{name}} a fost întrerupt",
-    "containerUnpaused": "Containerul {{name}} a fost reluat",
-    "failedToTogglePauseContainer": "Nu s-a putut comuta starea de pauză pentru containerul {{name}}",
-    "containerRemoved": "Containerul {{name}} a fost eliminat",
-    "failedToRemoveContainer": "Nu s-a putut elimina containerul {{name}}",
-    "image": "Imagine",
-    "ports": "Porturi",
-    "noPorts": "Fără porturi",
-    "start": "Început",
-    "stop": "Stop",
-    "status": "Stare",
-    "actions": "Acțiuni",
-    "cardView": "Vizualizare card",
-    "listView": "Vizualizare listă",
-    "confirmRemoveContainer": "Sigur doriți să eliminați containerul „{{name}}”? Această acțiune nu poate fi anulată.",
-    "runningContainerWarning": "Avertisment: Acest container rulează în prezent. Eliminarea sa va opri mai întâi containerul.",
-    "loadingContainers": "Se încarcă containerele...",
-    "manager": "Manager Docker",
-    "autoRefresh": "Reîmprospătare automată",
-    "timestamps": "Marcaje temporale",
-    "lines": "Linii",
-    "filterLogs": "Filtrare jurnale...",
-    "refresh": "Reîmprospăta",
-    "download": "Descărcare",
-    "clear": "Clar",
-    "logsDownloaded": "Jurnalele au fost descărcate cu succes",
-    "last50": "Ultimii 50",
-    "last100": "Ultimele 100",
-    "last500": "Ultimii 500",
-    "last1000": "Ultimele 1000",
-    "allLogs": "Toate jurnalele",
-    "noLogsMatching": "Niciun jurnal care să corespundă cu „{{query}}”",
-    "noLogsAvailable": "Nu sunt disponibile jurnale",
-    "noContainersFound": "Nu s-au găsit containere",
-    "noContainersFoundHint": "Nu există containere Docker disponibile pe această gazdă",
-    "searchPlaceholder": "Căutați containere...",
-    "allStatuses": "Toate stările",
-    "stateRunning": "Funcţionare",
-    "statePaused": "Întrerupt",
-    "stateExited": "Ieșit",
-    "stateRestarting": "Repornire",
-    "noContainersMatchFilters": "Niciun container nu corespunde filtrelor dvs.",
-    "noContainersMatchFiltersHint": "Încercați să ajustați criteriile de căutare sau de filtrare",
-    "failedToFetchStats": "Nu s-au putut prelua statisticile containerului",
-    "containerNotRunning": "Containerul nu rulează",
-    "startContainerToViewStats": "Porniți containerul pentru a vizualiza statisticile",
-    "loadingStats": "Se încarcă statisticile...",
-    "errorLoadingStats": "Eroare la încărcarea statisticilor",
-    "noStatsAvailable": "Nu sunt disponibile statistici",
-    "cpuUsage": "Utilizarea procesorului",
-    "current": "Actual",
-    "memoryUsage": "Utilizarea memoriei",
-    "networkIo": "I/O de rețea",
-    "input": "Intrare",
-    "output": "Ieșire",
-    "blockIo": "Bloc I/O",
-    "read": "Citire",
-    "write": "Scrie",
-    "pids": "PID-uri",
-    "containerInformation": "Informații despre container",
-    "name": "Nume",
-    "id": "ID-ul",
-    "state": "Stat",
-    "containerMustBeRunning": "Containerul trebuie să ruleze pentru a accesa consola.",
-    "verificationCodePrompt": "Introduceți codul de verificare",
-    "totpVerificationFailed": "Verificarea TOTP a eșuat. Vă rugăm să încercați din nou.",
-    "browserSignInFailed": "Conectarea a eșuat. Vă rugăm să încercați din nou.",
-    "connectedTo": "Conectat la {{containerName}}",
-    "disconnected": "Deconectat",
-    "consoleError": "Eroare consolă",
-    "errorMessage": "Eroare: {{message}}",
-    "failedToConnect": "Conectarea la container nu a reușit",
-    "console": "Consolă",
-    "selectShell": "Selectați shell-ul",
-    "bash": "Bash",
-    "sh": "sh",
-    "ash": "frasin",
-    "connect": "Conectează-te",
-    "disconnect": "Deconecta",
-    "notConnected": "Neconectat",
-    "clickToConnect": "Faceți clic pe conectare pentru a începe o sesiune shell",
-    "connectingTo": "Conectare la {{containerName}}...",
-    "containerNotFound": "Container negăsit",
-    "backToList": "Înapoi la listă",
-    "logs": "Jurnalele",
-    "stats": "Statistici",
-    "consoleTab": "Consolă",
-    "startContainerToAccess": "Porniți containerul pentru a accesa consola",
-    "noHostSelected": "Nicio gazdă selectată",
-    "failedToFetchLogs": "Nu s-au putut prelua jurnalele: {{error}}",
-    "failedToDownloadLogs": "Descărcarea jurnalelor a eșuat: {{error}}"
-  },
-  "nav": {
-    "docker": "Docher"
-  },
-  "onboarding": {
-    "feature_docker": "Docher",
-    "feature_docker_desc": "Vizualizați containere, citiți jurnale și urmăriți statistici pe orice gazdă care rulează Docker."
-  },
-  "terminal": {
-    "retry": "Reîncercați",
-    "clipboardReadFailed": "Citirea din clipboard nu a reușit. Asigurați-vă că permisiunile de acces la clipboard sunt acordate.",
-    "clipboardWriteFailed": "Copierea în clipboard nu a reușit. Asigurați-vă că pagina este servită prin HTTPS sau localhost."
-  },
-  "permissions": {
-    "use": {
-      "title": "Folosește Docker",
-      "description": "Deschideți managerul Docker și consolele containerelor pe gazdele cu Docker activat."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Activează Docker",
-        "description": "Gestionați containerele de pe această gazdă."
-      },
-      "containerRuntime": {
-        "label": "Runtime de container",
-        "description": "Alegeți interfața CLI utilizată pentru gestionarea containerelor pe această gazdă",
-        "docker": "Docher",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Este necesar un server la distanță. Conectați un server la distanță în Setări pentru a utiliza acest tip de conexiune."
-  },
-  "hosts": {
-    "docsLink": "Vizualizați documentele",
-    "hostNotFound": "Gazdă negăsită",
-    "loadingHost": "Se încarcă gazda..."
-  }
-}
diff --git a/plugins/docker/locales/translated/ru_RU.json b/plugins/docker/locales/translated/ru_RU.json
deleted file mode 100644
index 5cdfa206f..000000000
--- a/plugins/docker/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Docker не включен для этого хоста",
-    "validating": "Проверка Docker...",
-    "connecting": "Подключение...",
-    "error": "Ошибка",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Не удалось подключиться к Docker",
-    "containerStarted": "Контейнер {{name}} запущен",
-    "failedToStartContainer": "Не удалось запустить контейнер {{name}}",
-    "containerStopped": "Контейнер {{name}} остановлен",
-    "failedToStopContainer": "Не удалось остановить контейнер {{name}}",
-    "containerRestarted": "Контейнер {{name}} перезапущен",
-    "failedToRestartContainer": "Не удалось перезапустить контейнер {{name}}",
-    "containerPaused": "Контейнер {{name}} приостановлен",
-    "containerUnpaused": "Контейнер {{name}} возобновлён",
-    "failedToTogglePauseContainer": "Не удалось изменить состояние приостановки для контейнера {{name}}",
-    "containerRemoved": "Контейнер {{name}} удалён",
-    "failedToRemoveContainer": "Не удалось удалить контейнер {{name}}",
-    "image": "Образ",
-    "ports": "Порты",
-    "noPorts": "Нет портов",
-    "start": "Запустить",
-    "stop": "Остановить",
-    "status": "Статус",
-    "actions": "Действия",
-    "cardView": "Карточный вид",
-    "listView": "Список",
-    "confirmRemoveContainer": "Вы уверены, что хотите удалить контейнер «{{name}}»? Это действие нельзя отменить.",
-    "runningContainerWarning": "Предупреждение: этот контейнер в настоящее время работает. При удалении он будет сначала остановлен.",
-    "loadingContainers": "Загрузка контейнеров...",
-    "manager": "Менеджер Docker",
-    "autoRefresh": "Автообновление",
-    "timestamps": "Отметки времени",
-    "lines": "Строки",
-    "filterLogs": "Фильтровать логи...",
-    "refresh": "Обновить",
-    "download": "Скачать",
-    "clear": "Очистить",
-    "logsDownloaded": "Логи успешно скачаны",
-    "last50": "Последние 50",
-    "last100": "Последние 100",
-    "last500": "Последние 500",
-    "last1000": "Последние 1000",
-    "allLogs": "Все логи",
-    "noLogsMatching": "Нет логов, соответствующих \"{{query}}\"",
-    "noLogsAvailable": "Логи отсутствуют",
-    "noContainersFound": "Контейнеры не найдены",
-    "noContainersFoundHint": "На этом хосте нет Docker-контейнеров",
-    "searchPlaceholder": "Поиск контейнеров...",
-    "allStatuses": "Все состояния",
-    "stateRunning": "Запущен",
-    "statePaused": "Приостановлен",
-    "stateExited": "Завершён",
-    "stateRestarting": "Перезапускается",
-    "noContainersMatchFilters": "Нет контейнеров, соответствующих фильтрам",
-    "noContainersMatchFiltersHint": "Попробуйте изменить параметры поиска или фильтры",
-    "failedToFetchStats": "Не удалось получить статистику контейнера",
-    "containerNotRunning": "Контейнер не запущен",
-    "startContainerToViewStats": "Запустите контейнер, чтобы посмотреть статистику",
-    "loadingStats": "Загрузка статистики...",
-    "errorLoadingStats": "Ошибка загрузки статистики",
-    "noStatsAvailable": "Статистика недоступна",
-    "cpuUsage": "Использование ЦП",
-    "current": "Текущий",
-    "memoryUsage": "Использование памяти",
-    "networkIo": "Сетевой ввод-вывод",
-    "input": "Ввод",
-    "output": "Вывод",
-    "blockIo": "Блочный ввод-вывод",
-    "read": "Чтение",
-    "write": "Запись",
-    "pids": "PID",
-    "containerInformation": "Информация о контейнере",
-    "name": "Имя",
-    "id": "ID",
-    "state": "Состояние",
-    "containerMustBeRunning": "Для доступа к консоли контейнер должен быть запущен",
-    "verificationCodePrompt": "Введите код подтверждения",
-    "totpVerificationFailed": "Ошибка проверки TOTP. Попробуйте еще раз.",
-    "browserSignInFailed": "Вход в систему не удался. Пожалуйста, попробуйте еще раз.",
-    "connectedTo": "Подключено к {{containerName}}",
-    "disconnected": "Отключено",
-    "consoleError": "Ошибка консоли",
-    "errorMessage": "Ошибка: {{message}}",
-    "failedToConnect": "Не удалось подключиться к контейнеру",
-    "console": "Консоль",
-    "selectShell": "Выберите оболочку",
-    "bash": "Bash",
-    "sh": "sh",
-    "ash": "ash",
-    "connect": "Подключиться",
-    "disconnect": "Отключиться",
-    "notConnected": "Не подключено",
-    "clickToConnect": "Нажмите «Подключиться», чтобы запустить сеанс оболочки",
-    "connectingTo": "Подключение к {{containerName}}...",
-    "containerNotFound": "Контейнер не найден",
-    "backToList": "Вернуться к списку",
-    "logs": "Логи",
-    "stats": "Статистика",
-    "consoleTab": "Консоль",
-    "startContainerToAccess": "Запустите контейнер, чтобы получить доступ к консоли",
-    "noHostSelected": "Хост не выбран",
-    "failedToFetchLogs": "Не удалось получить логи: {{error}}",
-    "failedToDownloadLogs": "Не удалось загрузить логи: {{error}}"
-  },
-  "nav": {
-    "docker": "Docker"
-  },
-  "onboarding": {
-    "feature_docker": "Docker",
-    "feature_docker_desc": "Просматривайте контейнеры, читайте журналы и отслеживайте статистику на любом хосте, где запущен Docker."
-  },
-  "terminal": {
-    "retry": "Повторить",
-    "clipboardReadFailed": "Не удалось прочитать из буфера обмена. Убедитесь, что предоставлены разрешения на доступ к буферу обмена.",
-    "clipboardWriteFailed": "Не удалось скопировать в буфер обмена. Убедитесь, что страница загружена по HTTPS или с localhost."
-  },
-  "permissions": {
-    "use": {
-      "title": "Используйте Docker",
-      "description": "Откройте Docker Manager и консоли контейнеров на хостах с включенным Docker."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Включить Docker",
-        "description": "Управляйте контейнерами на этом хосте."
-      },
-      "containerRuntime": {
-        "label": "Среда выполнения контейнеров",
-        "description": "Выберите CLI, используемый для управления контейнерами на этом хосте",
-        "docker": "Docker",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Требуется удаленный сервер. Для использования этого типа подключения подключите удаленный сервер в настройках."
-  },
-  "hosts": {
-    "docsLink": "Документация",
-    "hostNotFound": "Хост не найден",
-    "loadingHost": "Загрузка хоста..."
-  }
-}
diff --git a/plugins/docker/locales/translated/sr_SP.json b/plugins/docker/locales/translated/sr_SP.json
deleted file mode 100644
index 6968f7ab3..000000000
--- a/plugins/docker/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Докер није омогућен за овај хост",
-    "validating": "Валидација Докера...",
-    "connecting": "Повезивање...",
-    "error": "Грешка",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Повезивање са Докером није успело",
-    "containerStarted": "Контејнер {{name}} је покренут",
-    "failedToStartContainer": "Покретање контејнера {{name}} није успело",
-    "containerStopped": "Контејнер {{name}} је заустављен",
-    "failedToStopContainer": "Заустављање контејнера {{name}} није успело",
-    "containerRestarted": "Контејнер {{name}} поново покренут",
-    "failedToRestartContainer": "Поновно покретање контејнера није успело {{name}}",
-    "containerPaused": "Контејнер {{name}} је паузиран",
-    "containerUnpaused": "Паузирање контејнера {{name}} је прекинуто",
-    "failedToTogglePauseContainer": "Није успело пребацивање стања паузе за контејнер {{name}}",
-    "containerRemoved": "Контејнер {{name}} је уклоњен",
-    "failedToRemoveContainer": "Није успело уклањање контејнера {{name}}",
-    "image": "Слика",
-    "ports": "Портови",
-    "noPorts": "Нема портова",
-    "start": "Почетак",
-    "stop": "Заустави",
-    "status": "Статус",
-    "actions": "Акције",
-    "cardView": "Приказ картице",
-    "listView": "Приказ листе",
-    "confirmRemoveContainer": "Да ли сте сигурни да желите да уклоните контејнер „{{name}}“? Ова радња се не може поништити.",
-    "runningContainerWarning": "Упозорење: Овај контејнер је тренутно покренут. Његово уклањање ће прво зауставити рад контејнера.",
-    "loadingContainers": "Учитавање контејнера...",
-    "manager": "Докер менаџер",
-    "autoRefresh": "Аутоматско освежавање",
-    "timestamps": "Временске ознаке",
-    "lines": "Линије",
-    "filterLogs": "Филтрирај логове...",
-    "refresh": "Освежи",
-    "download": "Преузми",
-    "clear": "Јасно",
-    "logsDownloaded": "Дневници су успешно преузети",
-    "last50": "Последњих 50",
-    "last100": "Последњих 100",
-    "last500": "Последњих 500",
-    "last1000": "Последњих 1000",
-    "allLogs": "Сви дневници",
-    "noLogsMatching": "Нема логова који одговарају „{{query}}“",
-    "noLogsAvailable": "Нема доступних логова",
-    "noContainersFound": "Нису пронађени контејнери",
-    "noContainersFoundHint": "На овом хосту нису доступни Docker контејнери",
-    "searchPlaceholder": "Претражи контејнере...",
-    "allStatuses": "Сви статуси",
-    "stateRunning": "Трчање",
-    "statePaused": "Паузирано",
-    "stateExited": "Изашао/ла",
-    "stateRestarting": "Поновно покретање",
-    "noContainersMatchFilters": "Ниједан контејнер не одговара вашим филтерима",
-    "noContainersMatchFiltersHint": "Покушајте да прилагодите критеријуме претраге или филтрирања",
-    "failedToFetchStats": "Није успело преузимање статистике контејнера",
-    "containerNotRunning": "Контејнер се не покреће",
-    "startContainerToViewStats": "Покрените контејнер да бисте видели статистику",
-    "loadingStats": "Учитавање статистике...",
-    "errorLoadingStats": "Грешка при учитавању статистике",
-    "noStatsAvailable": "Нема доступних статистика",
-    "cpuUsage": "Искоришћеност процесора",
-    "current": "Тренутни",
-    "memoryUsage": "Коришћење меморије",
-    "networkIo": "Мрежни улаз/излаз",
-    "input": "Унос",
-    "output": "Излаз",
-    "blockIo": "Блок У/И",
-    "read": "Читај",
-    "write": "Пиши",
-    "pids": "ПИД-ови",
-    "containerInformation": "Информације о контејнеру",
-    "name": "Име",
-    "id": "ИД",
-    "state": "Држава",
-    "containerMustBeRunning": "Контејнер мора бити покренут да би се приступило конзоли",
-    "verificationCodePrompt": "Унесите верификациони код",
-    "totpVerificationFailed": "Верификација TOTP-а није успела. Молимо покушајте поново.",
-    "browserSignInFailed": "Пријављивање није успело. Молимо покушајте поново.",
-    "connectedTo": "Повезано са {{containerName}}",
-    "disconnected": "Искључено",
-    "consoleError": "Грешка конзоле",
-    "errorMessage": "Грешка: {{message}}",
-    "failedToConnect": "Повезивање са контејнером није успело",
-    "console": "Конзола",
-    "selectShell": "Изаберите љуску",
-    "bash": "Баш",
-    "sh": "ш",
-    "ash": "пепео",
-    "connect": "Повежи се",
-    "disconnect": "Прекини везу",
-    "notConnected": "Није повезано",
-    "clickToConnect": "Кликните на повезивање да бисте покренули сесију шкољке",
-    "connectingTo": "Повезивање са {{containerName}}...",
-    "containerNotFound": "Контејнер није пронађен",
-    "backToList": "Назад на листу",
-    "logs": "Дневници",
-    "stats": "Статистика",
-    "consoleTab": "Конзола",
-    "startContainerToAccess": "Покрените контејнер да бисте приступили конзоли",
-    "noHostSelected": "Није изабран домаћин",
-    "failedToFetchLogs": "Није успело преузимање логова: {{error}}",
-    "failedToDownloadLogs": "Није успело преузимање логова: {{error}}"
-  },
-  "nav": {
-    "docker": "Докер"
-  },
-  "onboarding": {
-    "feature_docker": "Докер",
-    "feature_docker_desc": "Погледајте контејнере, читајте логове и пратите статистику на било ком хосту који користи Docker."
-  },
-  "terminal": {
-    "retry": "Покушај поново",
-    "clipboardReadFailed": "Читање из међуспремника није успело. Уверите се да су дозволе за међуспремник одобрене.",
-    "clipboardWriteFailed": "Копирање у међуспремник није успело. Уверите се да се страница приказује преко HTTPS-а или localhost-а."
-  },
-  "permissions": {
-    "use": {
-      "title": "Користите Докер",
-      "description": "Отворите Docker менаџер и конзоле контејнера на хостовима са омогућеним Docker-ом."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Омогући Докер",
-        "description": "Управљајте контејнерима на овом хосту."
-      },
-      "containerRuntime": {
-        "label": "Време извршавања контејнера",
-        "description": "Изаберите CLI који се користи за управљање контејнерима на овом хосту",
-        "docker": "Докер",
-        "podman": "Подман"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Потребан је удаљени сервер. Повежите се са удаљеним сервером у Подешавањима да бисте користили овај тип везе."
-  },
-  "hosts": {
-    "docsLink": "Прикажи документе",
-    "hostNotFound": "Хост није пронађен",
-    "loadingHost": "Учитавање хоста..."
-  }
-}
diff --git a/plugins/docker/locales/translated/sv_SE.json b/plugins/docker/locales/translated/sv_SE.json
deleted file mode 100644
index fdddcca22..000000000
--- a/plugins/docker/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Docker är inte aktiverat för den här värden",
-    "validating": "Validerar Docker...",
-    "connecting": "Ansluter...",
-    "error": "Fel",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Misslyckades med att ansluta till Docker",
-    "containerStarted": "Behållaren {{name}} startad",
-    "failedToStartContainer": "Misslyckades med att starta containern {{name}}",
-    "containerStopped": "Behållaren {{name}} har stoppats",
-    "failedToStopContainer": "Misslyckades med att stoppa containern {{name}}",
-    "containerRestarted": "Behållaren {{name}} har startats om",
-    "failedToRestartContainer": "Misslyckades med att starta om behållaren {{name}}",
-    "containerPaused": "Behållaren {{name}} pausad",
-    "containerUnpaused": "Behållaren {{name}} har återupptagits",
-    "failedToTogglePauseContainer": "Misslyckades med att växla pausläge för container {{name}}",
-    "containerRemoved": "Behållaren {{name}} har tagits bort",
-    "failedToRemoveContainer": "Misslyckades med att ta bort behållaren {{name}}",
-    "image": "Bild",
-    "ports": "Hamnar",
-    "noPorts": "Inga portar",
-    "start": "Start",
-    "stop": "Stopp",
-    "status": "Status",
-    "actions": "Åtgärder",
-    "cardView": "Kortvy",
-    "listView": "Listvy",
-    "confirmRemoveContainer": "Är du säker på att du vill ta bort behållaren '{{name}}'? Den här åtgärden kan inte ångras.",
-    "runningContainerWarning": "Varning: Den här behållaren körs för närvarande. Om du tar bort den stoppas behållaren först.",
-    "loadingContainers": "Lastar containrar...",
-    "manager": "Docker Manager",
-    "autoRefresh": "Automatisk uppdatering",
-    "timestamps": "Tidsstämplar",
-    "lines": "Rader",
-    "filterLogs": "Filtrera loggar...",
-    "refresh": "Uppdatera",
-    "download": "Ladda ner",
-    "clear": "Rensa",
-    "logsDownloaded": "Loggarna har laddats ner",
-    "last50": "Senaste 50",
-    "last100": "Senaste 100",
-    "last500": "Senaste 500",
-    "last1000": "Senaste 1000",
-    "allLogs": "Alla loggar",
-    "noLogsMatching": "Inga loggar som matchar \"{{query}}\"",
-    "noLogsAvailable": "Inga loggar tillgängliga",
-    "noContainersFound": "Inga containrar hittades",
-    "noContainersFoundHint": "Inga Docker-containrar är tillgängliga på den här värden",
-    "searchPlaceholder": "Sök behållare...",
-    "allStatuses": "Alla statusar",
-    "stateRunning": "Spring",
-    "statePaused": "Pausad",
-    "stateExited": "Avslutad",
-    "stateRestarting": "Omstart",
-    "noContainersMatchFilters": "Inga behållare matchar dina filter",
-    "noContainersMatchFiltersHint": "Försök att justera dina sök- eller filterkriterier",
-    "failedToFetchStats": "Misslyckades med att hämta containerstatistik",
-    "containerNotRunning": "Behållaren körs inte",
-    "startContainerToViewStats": "Starta containern för att visa statistik",
-    "loadingStats": "Laddar statistik...",
-    "errorLoadingStats": "Fel vid inläsning av statistik",
-    "noStatsAvailable": "Ingen statistik tillgänglig",
-    "cpuUsage": "CPU-användning",
-    "current": "Nuvarande",
-    "memoryUsage": "Minnesanvändning",
-    "networkIo": "Nätverks-I/O",
-    "input": "Input",
-    "output": "Produktion",
-    "blockIo": "Blockera I/O",
-    "read": "Läsa",
-    "write": "Skriva",
-    "pids": "PID:er",
-    "containerInformation": "Containerinformation",
-    "name": "Namn",
-    "id": "ID",
-    "state": "Ange",
-    "containerMustBeRunning": "Behållaren måste köras för att komma åt konsolen",
-    "verificationCodePrompt": "Ange verifieringskod",
-    "totpVerificationFailed": "TOTP-verifieringen misslyckades. Försök igen.",
-    "browserSignInFailed": "Inloggningen misslyckades. Försök igen.",
-    "connectedTo": "Ansluten till {{containerName}}",
-    "disconnected": "Osammanhängande",
-    "consoleError": "Konsolfel",
-    "errorMessage": "Fel: {{message}}",
-    "failedToConnect": "Misslyckades med att ansluta till containern",
-    "console": "Trösta",
-    "selectShell": "Välj skal",
-    "bash": "Våldsamt slag",
-    "sh": "sh",
-    "ash": "aska",
-    "connect": "Ansluta",
-    "disconnect": "Koppla från",
-    "notConnected": "Inte ansluten",
-    "clickToConnect": "Klicka på Anslut för att starta en shell-session",
-    "connectingTo": "Ansluter till {{containerName}}...",
-    "containerNotFound": "Behållaren hittades inte",
-    "backToList": "Tillbaka till listan",
-    "logs": "Loggar",
-    "stats": "Statistik",
-    "consoleTab": "Trösta",
-    "startContainerToAccess": "Starta containern för att komma åt konsolen",
-    "noHostSelected": "Ingen värd vald",
-    "failedToFetchLogs": "Misslyckades med att hämta loggar: {{error}}",
-    "failedToDownloadLogs": "Misslyckades med att ladda ner loggar: {{error}}"
-  },
-  "nav": {
-    "docker": "Hamnarbetare"
-  },
-  "onboarding": {
-    "feature_docker": "Hamnarbetare",
-    "feature_docker_desc": "Se containrar, läs loggar och titta på statistik för alla värdar som kör Docker."
-  },
-  "terminal": {
-    "retry": "Försöka igen",
-    "clipboardReadFailed": "Kunde inte läsa från urklipp. Kontrollera att behörigheter för urklipp är beviljade.",
-    "clipboardWriteFailed": "Kunde inte kopiera till urklipp. Kontrollera att sidan serveras via HTTPS eller localhost."
-  },
-  "permissions": {
-    "use": {
-      "title": "Använd Docker",
-      "description": "Öppna Docker-hanteraren och containerkonsolerna på värdar med Docker aktiverat."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Aktivera Docker",
-        "description": "Hantera containrar på den här värden."
-      },
-      "containerRuntime": {
-        "label": "Containerkörningstid",
-        "description": "Välj det CRI som används för containerhantering på den här värden",
-        "docker": "Hamnarbetare",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Fjärrserver krävs. Anslut en fjärrserver i Inställningar för att använda den här anslutningstypen."
-  },
-  "hosts": {
-    "docsLink": "Visa dokument",
-    "hostNotFound": "Värden hittades inte",
-    "loadingHost": "Laddar värd..."
-  }
-}
diff --git a/plugins/docker/locales/translated/th_TH.json b/plugins/docker/locales/translated/th_TH.json
deleted file mode 100644
index 5b3f97851..000000000
--- a/plugins/docker/locales/translated/th_TH.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Docker ไม่ได้เปิดใช้งานสำหรับโฮสต์นี้",
-    "validating": "กำลังตรวจสอบความถูกต้องของ Docker...",
-    "connecting": "กำลังเชื่อมต่อ...",
-    "error": "ข้อผิดพลาด",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "ไม่สามารถเชื่อมต่อกับ Docker ได้",
-    "containerStarted": "คอนเทนเนอร์ {{name}} เริ่มทำงานแล้ว",
-    "failedToStartContainer": "ไม่สามารถเริ่มต้นคอนเทนเนอร์ได้ {{name}}",
-    "containerStopped": "คอนเทนเนอร์ {{name}} หยุดทำงานแล้ว",
-    "failedToStopContainer": "ไม่สามารถหยุดคอนเทนเนอร์ได้ {{name}}",
-    "containerRestarted": "คอนเทนเนอร์ {{name}} รีสตาร์ทแล้ว",
-    "failedToRestartContainer": "ไม่สามารถรีสตาร์ทคอนเทนเนอร์ได้ {{name}}",
-    "containerPaused": "คอนเทนเนอร์ {{name}} หยุดชั่วคราว",
-    "containerUnpaused": "คอนเทนเนอร์ {{name}} ยกเลิกการหยุดชั่วคราว",
-    "failedToTogglePauseContainer": "ไม่สามารถสลับสถานะหยุดชั่วคราวสำหรับคอนเทนเนอร์ {{name}} ได้",
-    "containerRemoved": "คอนเทนเนอร์ {{name}} ถูกลบออกแล้ว",
-    "failedToRemoveContainer": "ไม่สามารถลบคอนเทนเนอร์ {{name}} ได้",
-    "image": "ภาพ",
-    "ports": "ท่าเรือ",
-    "noPorts": "ไม่มีพอร์ต",
-    "start": "เริ่ม",
-    "stop": "หยุด",
-    "status": "สถานะ",
-    "actions": "การกระทำ",
-    "cardView": "มุมมองการ์ด",
-    "listView": "มุมมองรายการ",
-    "confirmRemoveContainer": "คุณแน่ใจหรือไม่ว่าต้องการลบคอนเทนเนอร์ '{{name}}'? การกระทำนี้ไม่สามารถย้อนกลับได้",
-    "runningContainerWarning": "คำเตือน: ขณะนี้คอนเทนเนอร์นี้กำลังทำงานอยู่ การลบคอนเทนเนอร์นี้จะหยุดการทำงานของคอนเทนเนอร์ก่อน",
-    "loadingContainers": "กำลังขนถ่ายตู้คอนเทนเนอร์...",
-    "manager": "ตัวจัดการ Docker",
-    "autoRefresh": "รีเฟรชอัตโนมัติ",
-    "timestamps": "ไทม์สแตมป์",
-    "lines": "เส้น",
-    "filterLogs": "กรองบันทึก...",
-    "refresh": "รีเฟรช",
-    "download": "ดาวน์โหลด",
-    "clear": "ชัดเจน",
-    "logsDownloaded": "ดาวน์โหลดบันทึกข้อมูลสำเร็จแล้ว",
-    "last50": "50 ครั้งสุดท้าย",
-    "last100": "100 ปีที่แล้ว",
-    "last500": "500 ครั้งสุดท้าย",
-    "last1000": "1000 ครั้งสุดท้าย",
-    "allLogs": "บันทึกทั้งหมด",
-    "noLogsMatching": "ไม่พบบันทึกใดที่ตรงกับ \"{{query}}\"",
-    "noLogsAvailable": "ไม่มีบันทึกข้อมูล",
-    "noContainersFound": "ไม่พบภาชนะบรรจุใดๆ",
-    "noContainersFoundHint": "ไม่มีคอนเทนเนอร์ Docker ให้บริการบนโฮสต์นี้",
-    "searchPlaceholder": "ค้นหาตู้คอนเทนเนอร์...",
-    "allStatuses": "สถานะทั้งหมด",
-    "stateRunning": "วิ่ง",
-    "statePaused": "หยุดชั่วคราว",
-    "stateExited": "ออกแล้ว",
-    "stateRestarting": "เริ่มใหม่",
-    "noContainersMatchFilters": "ไม่มีภาชนะใดตรงกับตัวกรองของคุณ",
-    "noContainersMatchFiltersHint": "ลองปรับเกณฑ์การค้นหาหรือตัวกรองของคุณดู",
-    "failedToFetchStats": "ไม่สามารถดึงข้อมูลสถิติของคอนเทนเนอร์ได้",
-    "containerNotRunning": "คอนเทนเนอร์ไม่ทำงาน",
-    "startContainerToViewStats": "เริ่มคอนเทนเนอร์เพื่อดูสถิติ",
-    "loadingStats": "กำลังโหลดสถิติ...",
-    "errorLoadingStats": "ข้อผิดพลาดในการโหลดสถิติ",
-    "noStatsAvailable": "ไม่มีสถิติให้ดู",
-    "cpuUsage": "การใช้งาน CPU",
-    "current": "ปัจจุบัน",
-    "memoryUsage": "การใช้งานหน่วยความจำ",
-    "networkIo": "อินพุต/เอาต์พุตเครือข่าย",
-    "input": "ป้อนข้อมูล",
-    "output": "เอาต์พุต",
-    "blockIo": "บล็อก I/O",
-    "read": "อ่าน",
-    "write": "เขียน",
-    "pids": "PIDs",
-    "containerInformation": "ข้อมูลเกี่ยวกับตู้คอนเทนเนอร์",
-    "name": "ชื่อ",
-    "id": "รหัสประจำตัว",
-    "state": "สถานะ",
-    "containerMustBeRunning": "ต้องรอให้คอนเทนเนอร์ทำงานอยู่จึงจะสามารถเข้าถึงคอนโซลได้",
-    "verificationCodePrompt": "ป้อนรหัสยืนยัน",
-    "totpVerificationFailed": "การตรวจสอบ TOTP ล้มเหลว โปรดลองอีกครั้ง",
-    "browserSignInFailed": "การเข้าสู่ระบบล้มเหลว โปรดลองใหม่อีกครั้ง",
-    "connectedTo": "เชื่อมต่อกับ {{containerName}}",
-    "disconnected": "ตัดการเชื่อมต่อ",
-    "consoleError": "ข้อผิดพลาดของคอนโซล",
-    "errorMessage": "ข้อผิดพลาด: {{message}}",
-    "failedToConnect": "ไม่สามารถเชื่อมต่อกับคอนเทนเนอร์ได้",
-    "console": "คอนโซล",
-    "selectShell": "เลือกเปลือกหอย",
-    "bash": "ทุบตี",
-    "sh": "ช",
-    "ash": "เถ้า",
-    "connect": "เชื่อมต่อ",
-    "disconnect": "ตัดการเชื่อมต่อ",
-    "notConnected": "ไม่ได้เชื่อมต่อ",
-    "clickToConnect": "คลิกเชื่อมต่อเพื่อเริ่มเซสชันเชลล์",
-    "connectingTo": "กำลังเชื่อมต่อกับ {{containerName}}...",
-    "containerNotFound": "ไม่พบคอนเทนเนอร์",
-    "backToList": "กลับสู่รายการ",
-    "logs": "บันทึก",
-    "stats": "สถิติ",
-    "consoleTab": "คอนโซล",
-    "startContainerToAccess": "เริ่มคอนเทนเนอร์เพื่อเข้าถึงคอนโซล",
-    "noHostSelected": "ไม่ได้เลือกโฮสต์",
-    "failedToFetchLogs": "ไม่สามารถดึงข้อมูลบันทึกได้: {{error}}",
-    "failedToDownloadLogs": "ไม่สามารถดาวน์โหลดบันทึกได้: {{error}}"
-  },
-  "nav": {
-    "docker": "ด็อกเกอร์"
-  },
-  "onboarding": {
-    "feature_docker": "ด็อกเกอร์",
-    "feature_docker_desc": "ดูคอนเทนเนอร์ อ่านบันทึก และตรวจสอบสถิติบนโฮสต์ใดก็ได้ที่ใช้งาน Docker"
-  },
-  "terminal": {
-    "retry": "ลองใหม่อีกครั้ง",
-    "clipboardReadFailed": "ไม่สามารถอ่านข้อมูลจากคลิปบอร์ดได้ โปรดตรวจสอบให้แน่ใจว่าได้ให้สิทธิ์การเข้าถึงคลิปบอร์ดแล้ว",
-    "clipboardWriteFailed": "ไม่สามารถคัดลอกไปยังคลิปบอร์ดได้ โปรดตรวจสอบให้แน่ใจว่าหน้าเว็บนั้นให้บริการผ่าน HTTPS หรือ localhost"
-  },
-  "permissions": {
-    "use": {
-      "title": "ใช้ Docker",
-      "description": "เปิดตัวจัดการ Docker และคอนโซลคอนเทนเนอร์บนโฮสต์ที่เปิดใช้งาน Docker ไว้"
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "เปิดใช้งาน Docker",
-        "description": "จัดการคอนเทนเนอร์บนโฮสต์นี้"
-      },
-      "containerRuntime": {
-        "label": "รันไทม์คอนเทนเนอร์",
-        "description": "เลือก CLI ที่ใช้สำหรับการจัดการคอนเทนเนอร์บนโฮสต์นี้",
-        "docker": "ด็อกเกอร์",
-        "podman": "พอดแมน"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "จำเป็นต้องใช้เซิร์ฟเวอร์ระยะไกล เชื่อมต่อเซิร์ฟเวอร์ระยะไกลในการตั้งค่าเพื่อใช้ประเภทการเชื่อมต่อนี้"
-  },
-  "hosts": {
-    "docsLink": "ดูเอกสาร",
-    "hostNotFound": "ไม่พบโฮสต์",
-    "loadingHost": "กำลังโหลดโฮสต์..."
-  }
-}
diff --git a/plugins/docker/locales/translated/tr_TR.json b/plugins/docker/locales/translated/tr_TR.json
deleted file mode 100644
index cc88e6f5d..000000000
--- a/plugins/docker/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Bu sunucu için Docker etkinleştirilmemiş",
-    "validating": "Docker doğrulanıyor...",
-    "connecting": "Bağlanıyor...",
-    "error": "Hata",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Docker'a bağlanılamadı",
-    "containerStarted": "{{name}} konteyneri başlatıldı",
-    "failedToStartContainer": "{{name}} konteyneri başlatılamadı",
-    "containerStopped": "{{name}} konteyneri durduruldu",
-    "failedToStopContainer": "{{name}} konteyneri durdurulamadı",
-    "containerRestarted": "{{name}} konteyneri yeniden başlatıldı",
-    "failedToRestartContainer": "{{name}} konteyneri yeniden başlatılamadı",
-    "containerPaused": "{{name}} konteyneri duraklatıldı",
-    "containerUnpaused": "{{name}} konteyneri devam ettirildi",
-    "failedToTogglePauseContainer": "{{name}} konteyneri için duraklatma durumu değiştirilemedi",
-    "containerRemoved": "{{name}} konteyneri kaldırıldı",
-    "failedToRemoveContainer": "{{name}} konteyneri kaldırılamadı",
-    "image": "İmaj",
-    "ports": "Portlar",
-    "noPorts": "Port yok",
-    "start": "Başlat",
-    "stop": "Durdurma",
-    "status": "Durum",
-    "actions": "Eylemler",
-    "cardView": "Kart görünümü",
-    "listView": "Liste görünümü",
-    "confirmRemoveContainer": "'{{name}}' konteynerini kaldırmak istediğinizden emin misiniz? Bu işlem geri alınamaz.",
-    "runningContainerWarning": "Uyarı: Bu konteyner şu anda çalışıyor. Kaldırma işlemi önce konteyneri durduracak.",
-    "loadingContainers": "Konteynerler yükleniyor...",
-    "manager": "Docker Yöneticisi",
-    "autoRefresh": "Otomatik Yenile",
-    "timestamps": "Zaman Damgaları",
-    "lines": "Satırlar",
-    "filterLogs": "Günlükleri filtrele...",
-    "refresh": "Yenile",
-    "download": "İndir",
-    "clear": "Temizle",
-    "logsDownloaded": "Günlükler başarıyla indirildi",
-    "last50": "Son 50",
-    "last100": "Son 100",
-    "last500": "Son 500",
-    "last1000": "Son 1000",
-    "allLogs": "Tüm Günlükler",
-    "noLogsMatching": "\"{{query}}\" ile eşleşen günlük yok",
-    "noLogsAvailable": "Günlükler mevcut değil",
-    "noContainersFound": "Konteyner bulunamadı",
-    "noContainersFoundHint": "Bu ana bilgisayarda Docker konteyneri bulunmuyor",
-    "searchPlaceholder": "Konteyner ara...",
-    "allStatuses": "Tüm Durumlar",
-    "stateRunning": "Çalışıyor",
-    "statePaused": "Duraklatıldı",
-    "stateExited": "Durduruldu",
-    "stateRestarting": "Yeniden başlatılıyor",
-    "noContainersMatchFilters": "Filtrelere uyan konteyner yok",
-    "noContainersMatchFiltersHint": "Aramanızı veya filtre ölçütlerinizi değiştirmeyi deneyin",
-    "failedToFetchStats": "Konteyner istatistikleri alınamadı",
-    "containerNotRunning": "Konteyner çalışmıyor",
-    "startContainerToViewStats": "İstatistikleri görüntülemek için konteyneri başlatın",
-    "loadingStats": "İstatistikler yükleniyor...",
-    "errorLoadingStats": "İstatistikler yüklenirken hata oluştu",
-    "noStatsAvailable": "İstatistikler mevcut değil",
-    "cpuUsage": "CPU Kullanımı",
-    "current": "Anlık",
-    "memoryUsage": "Bellek Kullanımı",
-    "networkIo": "Ağ G/Ç",
-    "input": "Giriş",
-    "output": "Çıktı",
-    "blockIo": "Blok G/Ç",
-    "read": "Okuma",
-    "write": "Yazma",
-    "pids": "PID'ler",
-    "containerInformation": "Konteyner Bilgileri",
-    "name": "Ad",
-    "id": "ID",
-    "state": "Durum",
-    "containerMustBeRunning": "Konsola erişmek için konteyner çalışıyor olmalıdır",
-    "verificationCodePrompt": "Doğrulama kodunu girin",
-    "totpVerificationFailed": "TOTP doğrulaması başarısız oldu. Lütfen tekrar deneyin.",
-    "browserSignInFailed": "Giriş başarısız oldu. Lütfen tekrar deneyin.",
-    "connectedTo": "{{containerName}} ile bağlantı kuruldu",
-    "disconnected": "Bağlantı kesildi",
-    "consoleError": "Konsol hatası",
-    "errorMessage": "Hata: {{message}}",
-    "failedToConnect": "Konteynere bağlanılamadı",
-    "console": "Konsol",
-    "selectShell": "Kabuk seç",
-    "bash": "Bash",
-    "sh": "sh",
-    "ash": "ash",
-    "connect": "Bağlan",
-    "disconnect": "Bağlantıyı kes",
-    "notConnected": "Bağlı değil",
-    "clickToConnect": "Kabuk oturumu başlatmak için bağlan düğmesine tıklayın",
-    "connectingTo": "{{containerName}} konteynerine bağlanılıyor...",
-    "containerNotFound": "Konteyner bulunamadı",
-    "backToList": "Listeye Dön",
-    "logs": "Günlükler",
-    "stats": "İstatistikler",
-    "consoleTab": "Konsol",
-    "startContainerToAccess": "Konsola erişmek için konteyneri başlatın",
-    "noHostSelected": "Sunucu seçilmedi",
-    "failedToFetchLogs": "Günlükleri alma işlemi başarısız oldu: {{error}}",
-    "failedToDownloadLogs": "Günlük dosyaları indirilemedi: {{error}}"
-  },
-  "nav": {
-    "docker": "Docker"
-  },
-  "onboarding": {
-    "feature_docker": "Docker",
-    "feature_docker_desc": "Docker çalıştıran herhangi bir sunucudaki konteynerleri görüntüleyin, günlükleri okuyun ve istatistikleri izleyin."
-  },
-  "terminal": {
-    "retry": "Yeniden dene",
-    "clipboardReadFailed": "Panodan okuma başarısız oldu. Pano izinlerinin verildiğinden emin olun.",
-    "clipboardWriteFailed": "Panoya kopyalama başarısız oldu. Sayfanın HTTPS veya localhost üzerinden sunulduğundan emin olun."
-  },
-  "permissions": {
-    "use": {
-      "title": "Docker kullanın",
-      "description": "Docker'ın etkinleştirildiği sunucularda Docker yöneticisini ve kapsayıcı konsollarını açın."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Docker'ı Etkinleştir",
-        "description": "Bu sunucudaki konteynerleri yönetin."
-      },
-      "containerRuntime": {
-        "label": "Kapsayıcı Çalışma Zamanı",
-        "description": "Bu ana bilgisayarda kapsayıcı yönetimi için kullanılan CLI'yi seçin",
-        "docker": "Docker",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Uzak sunucu gereklidir. Bu bağlantı türünü kullanmak için Ayarlar'dan bir uzak sunucu bağlayın."
-  },
-  "hosts": {
-    "docsLink": "Dokümanları görüntüle",
-    "hostNotFound": "Host bulunamadı",
-    "loadingHost": "Host yükleniyor..."
-  }
-}
diff --git a/plugins/docker/locales/translated/uk_UA.json b/plugins/docker/locales/translated/uk_UA.json
deleted file mode 100644
index b7380a5f8..000000000
--- a/plugins/docker/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Docker не ввімкнено для цього хоста",
-    "validating": "Перевірка Docker...",
-    "connecting": "Підключення...",
-    "error": "Помилка",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Не вдалося підключитися до Docker",
-    "containerStarted": "Контейнер {{name}} запущено",
-    "failedToStartContainer": "Не вдалося запустити контейнер {{name}}",
-    "containerStopped": "Контейнер {{name}} зупинено",
-    "failedToStopContainer": "Не вдалося зупинити контейнер {{name}}",
-    "containerRestarted": "Контейнер {{name}} перезапущено",
-    "failedToRestartContainer": "Не вдалося перезапустити контейнер {{name}}",
-    "containerPaused": "Контейнер {{name}} призупинено",
-    "containerUnpaused": "Контейнер {{name}} відновлено",
-    "failedToTogglePauseContainer": "Не вдалося перемкнути стан паузи для контейнера {{name}}",
-    "containerRemoved": "Контейнер {{name}} видалено",
-    "failedToRemoveContainer": "Не вдалося видалити контейнер {{name}}",
-    "image": "Зображення",
-    "ports": "Порти",
-    "noPorts": "Без портів",
-    "start": "Початок",
-    "stop": "СТІЙ",
-    "status": "Статус",
-    "actions": "Дії",
-    "cardView": "Перегляд картки",
-    "listView": "Список",
-    "confirmRemoveContainer": "Ви впевнені, що хочете видалити контейнер '{{name}}'? Цю дію не можна скасувати.",
-    "runningContainerWarning": "Попередження: Цей контейнер зараз працює. Його видалення спочатку зупинить його роботу.",
-    "loadingContainers": "Завантаження контейнерів...",
-    "manager": "Менеджер Докера",
-    "autoRefresh": "Автоматичне оновлення",
-    "timestamps": "Позначки часу",
-    "lines": "Лінії",
-    "filterLogs": "Фільтрувати журнали...",
-    "refresh": "Оновити",
-    "download": "Завантажити",
-    "clear": "Очистити",
-    "logsDownloaded": "Журнали успішно завантажено",
-    "last50": "Останні 50",
-    "last100": "Останні 100",
-    "last500": "Останні 500",
-    "last1000": "Останні 1000",
-    "allLogs": "Усі журнали",
-    "noLogsMatching": "Немає журналів, що відповідають \"{{query}}\"",
-    "noLogsAvailable": "Журнали недоступні",
-    "noContainersFound": "Контейнерів не знайдено",
-    "noContainersFoundHint": "На цьому хості немає доступних контейнерів Docker",
-    "searchPlaceholder": "Пошук контейнерів...",
-    "allStatuses": "Усі статуси",
-    "stateRunning": "Біг",
-    "statePaused": "Призупинено",
-    "stateExited": "Вихід",
-    "stateRestarting": "Перезапуск",
-    "noContainersMatchFilters": "Немає контейнерів, що відповідають вашим фільтрам",
-    "noContainersMatchFiltersHint": "Спробуйте змінити критерії пошуку або фільтра",
-    "failedToFetchStats": "Не вдалося отримати статистику контейнера",
-    "containerNotRunning": "Контейнер не працює",
-    "startContainerToViewStats": "Запустіть контейнер для перегляду статистики",
-    "loadingStats": "Завантаження статистики...",
-    "errorLoadingStats": "Помилка завантаження статистики",
-    "noStatsAvailable": "Статистика недоступна",
-    "cpuUsage": "Використання процесора",
-    "current": "Поточний",
-    "memoryUsage": "Використання пам'яті",
-    "networkIo": "Мережевий ввід/вивід",
-    "input": "Вхід",
-    "output": "Вихід",
-    "blockIo": "Блок вводу/виводу",
-    "read": "Читати",
-    "write": "Написати",
-    "pids": "PID-ідентифікатори",
-    "containerInformation": "Інформація про контейнер",
-    "name": "Ім'я",
-    "id": "Ідентифікатор",
-    "state": "Штат",
-    "containerMustBeRunning": "Для доступу до консолі контейнер має бути запущений",
-    "verificationCodePrompt": "Введіть код підтвердження",
-    "totpVerificationFailed": "Не вдалося перевірити TOTP. Спробуйте ще раз.",
-    "browserSignInFailed": "Не вдалося ввійти. Спробуйте ще раз.",
-    "connectedTo": "Підключено до {{containerName}}",
-    "disconnected": "Відключено",
-    "consoleError": "Помилка консолі",
-    "errorMessage": "Помилка: {{message}}",
-    "failedToConnect": "Не вдалося підключитися до контейнера",
-    "console": "Консоль",
-    "selectShell": "Виберіть оболонку",
-    "bash": "Баш",
-    "sh": "ш",
-    "ash": "попіл",
-    "connect": "Підключитися",
-    "disconnect": "Відключитися",
-    "notConnected": "Не підключено",
-    "clickToConnect": "Натисніть кнопку «Підключитися», щоб розпочати сеанс оболонки",
-    "connectingTo": "Підключення до {{containerName}}...",
-    "containerNotFound": "Контейнер не знайдено",
-    "backToList": "Назад до списку",
-    "logs": "Журнали",
-    "stats": "Статистика",
-    "consoleTab": "Консоль",
-    "startContainerToAccess": "Запустіть контейнер для доступу до консолі",
-    "noHostSelected": "Хост не вибрано",
-    "failedToFetchLogs": "Не вдалося отримати журнали: {{error}}",
-    "failedToDownloadLogs": "Не вдалося завантажити журнали: {{error}}"
-  },
-  "nav": {
-    "docker": "Докер"
-  },
-  "onboarding": {
-    "feature_docker": "Докер",
-    "feature_docker_desc": "Переглядайте контейнери, читайте журнали та переглядайте статистику на будь-якому хості, на якому працює Docker."
-  },
-  "terminal": {
-    "retry": "Повторити спробу",
-    "clipboardReadFailed": "Не вдалося прочитати з буфера обміну. Переконайтеся, що надано дозволи на доступ до буфера обміну.",
-    "clipboardWriteFailed": "Не вдалося скопіювати в буфер обміну. Переконайтеся, що сторінка обслуговується через HTTPS або localhost."
-  },
-  "permissions": {
-    "use": {
-      "title": "Використовуйте Docker",
-      "description": "Відкрийте менеджер Docker та консолі контейнерів на хостах з увімкненим Docker."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Увімкнути Докер",
-        "description": "Керувати контейнерами на цьому хості."
-      },
-      "containerRuntime": {
-        "label": "Середовище виконання контейнера",
-        "description": "Виберіть інтерфейс командного рядка, який використовується для керування контейнерами на цьому хості",
-        "docker": "Докер",
-        "podman": "Подман"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Потрібен віддалений сервер. Підключіться до віддаленого сервера в налаштуваннях, щоб використовувати цей тип підключення."
-  },
-  "hosts": {
-    "docsLink": "Переглянути документи",
-    "hostNotFound": "Хост не знайдено",
-    "loadingHost": "Завантаження хоста..."
-  }
-}
diff --git a/plugins/docker/locales/translated/vi_VN.json b/plugins/docker/locales/translated/vi_VN.json
deleted file mode 100644
index 9b4b819e0..000000000
--- a/plugins/docker/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "Docker chưa được kích hoạt cho máy chủ này",
-    "validating": "Đang kiểm tra Docker...",
-    "connecting": "Đang kết nối...",
-    "error": "Lỗi",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "Kết nối Docker thất bại",
-    "containerStarted": "Container {{name}} đã khởi động",
-    "failedToStartContainer": "Khởi động container {{name}} thất bại",
-    "containerStopped": "Container {{name}} đã dừng",
-    "failedToStopContainer": "Dừng container {{name}} thất bại",
-    "containerRestarted": "Container {{name}} đã khởi động lại",
-    "failedToRestartContainer": "Khởi động lại container {{name}} thất bại",
-    "containerPaused": "Container {{name}} đã tạm dừng",
-    "containerUnpaused": "Container {{name}} đã tiếp tục",
-    "failedToTogglePauseContainer": "Chuyển đổi trạng thái tạm dừng cho container {{name}} thất bại",
-    "containerRemoved": "Container {{name}} đã bị xóa",
-    "failedToRemoveContainer": "Xóa container {{name}} thất bại",
-    "image": "Image",
-    "ports": "Cổng",
-    "noPorts": "Không có cổng nào",
-    "start": "Khởi động",
-    "stop": "Bit dừng",
-    "status": "Trạng thái",
-    "actions": "Hành động",
-    "cardView": "Chế độ xem thẻ",
-    "listView": "Chế độ xem danh sách",
-    "confirmRemoveContainer": "Bạn có chắc chắn muốn xóa container '{{name}}' không? Hành động này không thể hoàn tác.",
-    "runningContainerWarning": "Cảnh báo: Container này đang chạy. Xóa nó sẽ dừng container trước.",
-    "loadingContainers": "Đang tải danh sách container...",
-    "manager": "Quản lý Docker",
-    "autoRefresh": "Tự động làm mới",
-    "timestamps": "Dấu thời gian",
-    "lines": "Dòng",
-    "filterLogs": "Lọc nhật ký...",
-    "refresh": "Làm mới",
-    "download": "Tải xuống",
-    "clear": "Xóa",
-    "logsDownloaded": "Đã tải xuống nhật ký thành công",
-    "last50": "50 cuối cùng",
-    "last100": "100 cuối cùng",
-    "last500": "500 cuối cùng",
-    "last1000": "1000 cuối cùng",
-    "allLogs": "Tất cả nhật ký",
-    "noLogsMatching": "Không có nhật ký nào khớp với \"{{query}}\"",
-    "noLogsAvailable": "Không có nhật ký khả dụng",
-    "noContainersFound": "Không tìm thấy container",
-    "noContainersFoundHint": "Không có container Docker nào trên máy chủ này",
-    "searchPlaceholder": "Tìm kiếm container...",
-    "allStatuses": "Tất cả trạng thái",
-    "stateRunning": "Đang chạy",
-    "statePaused": "Tạm dừng",
-    "stateExited": "Đã thoát",
-    "stateRestarting": "Đang khởi động lại",
-    "noContainersMatchFilters": "Không có container nào khớp bộ lọc của bạn",
-    "noContainersMatchFiltersHint": "Hãy thử điều chỉnh tiêu chí tìm kiếm hoặc lọc",
-    "failedToFetchStats": "Không thể lấy số liệu thống kê container",
-    "containerNotRunning": "Container không chạy",
-    "startContainerToViewStats": "Khởi động container để xem số liệu thống kê",
-    "loadingStats": "Đang tải số liệu thống kê...",
-    "errorLoadingStats": "Lỗi khi tải số liệu thống kê",
-    "noStatsAvailable": "Không có số liệu thống kê",
-    "cpuUsage": "Sử dụng CPU",
-    "current": "Hiện tại",
-    "memoryUsage": "Sử dụng bộ nhớ",
-    "networkIo": "I/O mạng",
-    "input": "Nhập",
-    "output": "Đầu ra",
-    "blockIo": "I/O khối",
-    "read": "Đọc",
-    "write": "Ghi",
-    "pids": "PIDs",
-    "containerInformation": "Thông tin container",
-    "name": "Tên",
-    "id": "ID",
-    "state": "Trạng thái",
-    "containerMustBeRunning": "Container phải đang chạy để truy cập bảng điều khiển",
-    "verificationCodePrompt": "Nhập mã xác minh",
-    "totpVerificationFailed": "Xác minh TOTP thất bại. Vui lòng thử lại.",
-    "browserSignInFailed": "Đăng nhập không thành công. Vui lòng thử lại.",
-    "connectedTo": "Đã kết nối đến {{containerName}}",
-    "disconnected": "Đã ngắt kết nối",
-    "consoleError": "Lỗi bảng điều khiển",
-    "errorMessage": "Lỗi: {{message}}",
-    "failedToConnect": "Không thể kết nối đến container",
-    "console": "Bảng điều khiển",
-    "selectShell": "Chọn shell",
-    "bash": "Bash",
-    "sh": "sh",
-    "ash": "ash",
-    "connect": "Kết nối",
-    "disconnect": "Ngắt kết nối",
-    "notConnected": "Chưa kết nối",
-    "clickToConnect": "Nhấn Kết nối để bắt đầu phiên shell",
-    "connectingTo": "Đang kết nối đến {{containerName}}...",
-    "containerNotFound": "Không tìm thấy container",
-    "backToList": "Quay lại danh sách",
-    "logs": "Nhật ký",
-    "stats": "Thống kê",
-    "consoleTab": "Bảng điều khiển",
-    "startContainerToAccess": "Khởi động container để truy cập bảng điều khiển",
-    "noHostSelected": "Chưa chọn máy chủ",
-    "failedToFetchLogs": "Không thể tải nhật ký: {{error}}",
-    "failedToDownloadLogs": "Không thể tải xuống nhật ký: {{error}}"
-  },
-  "nav": {
-    "docker": "Docker"
-  },
-  "onboarding": {
-    "feature_docker": "Docker",
-    "feature_docker_desc": "Xem các container, đọc nhật ký và theo dõi số liệu thống kê trên bất kỳ máy chủ nào đang chạy Docker."
-  },
-  "terminal": {
-    "retry": "Thử lại",
-    "clipboardReadFailed": "Đọc từ clipboard thất bại. Đảm bảo quyền truy cập clipboard đã được cấp.",
-    "clipboardWriteFailed": "Sao chép vào clipboard thất bại. Đảm bảo trang được phục vụ qua HTTPS hoặc localhost."
-  },
-  "permissions": {
-    "use": {
-      "title": "Sử dụng Docker",
-      "description": "Mở trình quản lý Docker và bảng điều khiển vùng chứa trên các máy chủ đã bật Docker."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Bật Docker",
-        "description": "Quản lý các container trên máy chủ này."
-      },
-      "containerRuntime": {
-        "label": "Môi trường chạy container",
-        "description": "Chọn CLI dùng để quản lý container trên máy chủ này",
-        "docker": "Docker",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Cần có máy chủ từ xa. Kết nối máy chủ từ xa trong Cài đặt để sử dụng loại kết nối này."
-  },
-  "hosts": {
-    "docsLink": "Xem tài liệu",
-    "hostNotFound": "Không tìm thấy máy chủ",
-    "loadingHost": "Đang tải máy chủ..."
-  }
-}
diff --git a/plugins/docker/locales/translated/zh_CN.json b/plugins/docker/locales/translated/zh_CN.json
deleted file mode 100644
index 91c2aec86..000000000
--- a/plugins/docker/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "此主机未启用 Docker",
-    "validating": "验证 Docker 中...",
-    "connecting": "连接中...",
-    "error": "错误",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "连接 Docker 失败",
-    "containerStarted": "容器 {{name}} 已启动",
-    "failedToStartContainer": "启动容器 {{name}} 失败",
-    "containerStopped": "容器 {{name}} 已停止",
-    "failedToStopContainer": "停止容器 {{name}} 失败",
-    "containerRestarted": "容器 {{name}} 已重启",
-    "failedToRestartContainer": "重启容器 {{name}} 失败",
-    "containerPaused": "容器 {{name}} 已暂停",
-    "containerUnpaused": "容器 {{name}} 已恢复",
-    "failedToTogglePauseContainer": "切换容器 {{name}} 暂停状态失败",
-    "containerRemoved": "容器 {{name}} 已移除",
-    "failedToRemoveContainer": "移除容器 {{name}} 失败",
-    "image": "镜像",
-    "ports": "端口",
-    "noPorts": "无端口",
-    "start": "启动",
-    "stop": "停止",
-    "status": "状态",
-    "actions": "操作",
-    "cardView": "卡片视图",
-    "listView": "列表视图",
-    "confirmRemoveContainer": "确定要移除容器 '{{name}}' 吗？此操作无法撤销。",
-    "runningContainerWarning": "警告：此容器正在运行。移除操作将先停止容器。",
-    "loadingContainers": "正在加载容器...",
-    "manager": "Docker 管理器",
-    "autoRefresh": "自动刷新",
-    "timestamps": "时间戳",
-    "lines": "行数",
-    "filterLogs": "筛选日志...",
-    "refresh": "刷新",
-    "download": "下载",
-    "clear": "清除",
-    "logsDownloaded": "日志下载成功",
-    "last50": "最近 50 条",
-    "last100": "最近 100 条",
-    "last500": "最近 500 条",
-    "last1000": "最近 1000 条",
-    "allLogs": "全部日志",
-    "noLogsMatching": "未找到匹配 \"{{query}}\" 的日志",
-    "noLogsAvailable": "暂无日志",
-    "noContainersFound": "未找到容器",
-    "noContainersFoundHint": "此主机上没有可用的 Docker 容器",
-    "searchPlaceholder": "搜索容器...",
-    "allStatuses": "所有状态",
-    "stateRunning": "运行中",
-    "statePaused": "已暂停",
-    "stateExited": "已退出",
-    "stateRestarting": "重启中",
-    "noContainersMatchFilters": "没有容器符合筛选条件",
-    "noContainersMatchFiltersHint": "请尝试调整搜索或筛选条件",
-    "failedToFetchStats": "获取容器统计信息失败",
-    "containerNotRunning": "容器未运行",
-    "startContainerToViewStats": "启动容器以查看统计信息",
-    "loadingStats": "加载统计信息...",
-    "errorLoadingStats": "加载统计信息时出错",
-    "noStatsAvailable": "无可用统计信息",
-    "cpuUsage": "CPU 使用率",
-    "current": "当前",
-    "memoryUsage": "内存使用量",
-    "networkIo": "网络 I/O",
-    "input": "输入",
-    "output": "输出",
-    "blockIo": "块 I/O",
-    "read": "读取",
-    "write": "写入",
-    "pids": "PIDs",
-    "containerInformation": "容器信息",
-    "name": "名称",
-    "id": "ID",
-    "state": "状态",
-    "containerMustBeRunning": "访问控制台需要容器处于运行状态",
-    "verificationCodePrompt": "输入验证码",
-    "totpVerificationFailed": "TOTP 验证失败，请重试。",
-    "browserSignInFailed": "登录失败，请重试。",
-    "connectedTo": "已连接到 {{containerName}}",
-    "disconnected": "已断开连接",
-    "consoleError": "控制台错误",
-    "errorMessage": "错误：{{message}}",
-    "failedToConnect": "连接到容器失败",
-    "console": "控制台",
-    "selectShell": "选择 shell",
-    "bash": "Bash",
-    "sh": "sh",
-    "ash": "ash",
-    "connect": "连接",
-    "disconnect": "断开连接",
-    "notConnected": "未连接",
-    "clickToConnect": "点击“连接”启动 shell 会话",
-    "connectingTo": "正在连接到 {{containerName}}...",
-    "containerNotFound": "未找到容器",
-    "backToList": "返回列表",
-    "logs": "日志",
-    "stats": "统计",
-    "consoleTab": "控制台",
-    "startContainerToAccess": "启动容器以访问控制台",
-    "noHostSelected": "未选择主机",
-    "failedToFetchLogs": "获取日志失败：{{error}}",
-    "failedToDownloadLogs": "日志下载失败：{{error}}"
-  },
-  "nav": {
-    "docker": "Docker"
-  },
-  "onboarding": {
-    "feature_docker": "Docker",
-    "feature_docker_desc": "在任何运行 Docker 的主机上查看容器、读取日志及监控运行状态。"
-  },
-  "terminal": {
-    "retry": "重试",
-    "clipboardReadFailed": "从剪贴板读取失败。请确保已授予剪贴板权限。",
-    "clipboardWriteFailed": "复制到剪贴板失败。请确保页面通过 HTTPS 或 localhost 提供服务。"
-  },
-  "permissions": {
-    "use": {
-      "title": "使用 Docker",
-      "description": "在已启用 Docker 的主机上打开 Docker 管理器和容器控制台。"
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "启用 Docker",
-        "description": "管理此主机上的容器。"
-      },
-      "containerRuntime": {
-        "label": "容器运行时",
-        "description": "选择此主机上用于容器管理的 CLI",
-        "docker": "Docker",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "需要远程服务器。请在“设置”中连接远程服务器以使用此连接类型。"
-  },
-  "hosts": {
-    "docsLink": "查看文档",
-    "hostNotFound": "未找到主机",
-    "loadingHost": "正在加载主机..."
-  }
-}
diff --git a/plugins/docker/locales/translated/zh_TW.json b/plugins/docker/locales/translated/zh_TW.json
deleted file mode 100644
index 86b96839b..000000000
--- a/plugins/docker/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,147 +0,0 @@
-{
-  "docker": {
-    "notEnabled": "此主機未啟用 Docker",
-    "validating": "正在驗證 Docker...",
-    "connecting": "連線中...",
-    "error": "錯誤",
-    "version": "{{runtime}} {{version}}",
-    "connectionFailed": "無法連線至 Docker",
-    "containerStarted": "容器 {{name}} 已啟動",
-    "failedToStartContainer": "無法啟動容器 {{name}}",
-    "containerStopped": "容器 {{name}} 已停止",
-    "failedToStopContainer": "無法停止容器 {{name}}",
-    "containerRestarted": "容器 {{name}} 已重新啟動",
-    "failedToRestartContainer": "無法重新啟動容器 {{name}}",
-    "containerPaused": "容器 {{name}} 已暫停",
-    "containerUnpaused": "容器 {{name}} 已取消暫停",
-    "failedToTogglePauseContainer": "無法切換容器 {{name}} 的暫停狀態",
-    "containerRemoved": "容器 {{name}} 已移除",
-    "failedToRemoveContainer": "無法移除容器 {{name}}",
-    "image": "映像",
-    "ports": "連接埠",
-    "noPorts": "無連接埠",
-    "start": "啟動",
-    "stop": "停止位元",
-    "status": "狀態",
-    "actions": "行動",
-    "cardView": "卡片視圖",
-    "listView": "清單視圖",
-    "confirmRemoveContainer": "確定要移除容器 '{{name}}' 嗎？此動作無法復原。",
-    "runningContainerWarning": "警告：此容器正在執行中。移除時會先將其停止。",
-    "loadingContainers": "正在載入容器...",
-    "manager": "Docker 管理",
-    "autoRefresh": "自動重新整理",
-    "timestamps": "時間戳記",
-    "lines": "行",
-    "filterLogs": "篩選日誌...",
-    "refresh": "重新整理",
-    "download": "下載",
-    "clear": "清除",
-    "logsDownloaded": "日誌下載成功",
-    "last50": "最後 50 筆",
-    "last100": "最後 100 筆",
-    "last500": "最後 500 筆",
-    "last1000": "最後 1000 筆",
-    "allLogs": "所有日誌",
-    "noLogsMatching": "沒有符合 \"{{query}}\" 的日誌",
-    "noLogsAvailable": "無可用日誌",
-    "noContainersFound": "找不到容器",
-    "noContainersFoundHint": "此主機上沒有可用的 Docker 容器",
-    "searchPlaceholder": "搜尋容器...",
-    "allStatuses": "所有狀態",
-    "stateRunning": "執行中",
-    "statePaused": "已暫停",
-    "stateExited": "已退出",
-    "stateRestarting": "正在重新啟動",
-    "noContainersMatchFilters": "沒有符合篩選條件的容器",
-    "noContainersMatchFiltersHint": "請嘗試調整搜尋或篩選條件",
-    "failedToFetchStats": "無法取得容器統計資料",
-    "containerNotRunning": "容器未執行",
-    "startContainerToViewStats": "啟動容器以檢視統計資料",
-    "loadingStats": "正在載入統計資料...",
-    "errorLoadingStats": "載入統計資料時發生錯誤",
-    "noStatsAvailable": "無可用統計資料",
-    "cpuUsage": "CPU 使用率",
-    "current": "目前",
-    "memoryUsage": "記憶體使用量",
-    "networkIo": "網路 I/O",
-    "input": "輸入",
-    "output": "輸出",
-    "blockIo": "區塊 I/O",
-    "read": "讀取",
-    "write": "寫入",
-    "pids": "PID",
-    "containerInformation": "容器資訊",
-    "name": "名稱",
-    "id": "ID",
-    "state": "狀態",
-    "containerMustBeRunning": "容器必須在執行中才能存取主控台",
-    "verificationCodePrompt": "請輸入驗證碼",
-    "totpVerificationFailed": "TOTP 驗證失敗，請再試一次。",
-    "browserSignInFailed": "登入失敗，請重試。",
-    "connectedTo": "已連線至 {{containerName}}",
-    "disconnected": "已中斷連線",
-    "consoleError": "主控台錯誤",
-    "errorMessage": "錯誤：{{message}}",
-    "failedToConnect": "無法連線至容器",
-    "console": "主控台",
-    "selectShell": "選取 shell",
-    "bash": "Bash",
-    "sh": "sh",
-    "ash": "ash",
-    "connect": "連線",
-    "disconnect": "中斷連線",
-    "notConnected": "未連線",
-    "clickToConnect": "點擊連線以啟動 shell 工作階段",
-    "connectingTo": "正在連線至 {{containerName}}...",
-    "containerNotFound": "找不到容器",
-    "backToList": "返回列表",
-    "logs": "記錄",
-    "stats": "統計資料",
-    "consoleTab": "主控台",
-    "startContainerToAccess": "啟動容器以存取主控台",
-    "noHostSelected": "未選擇主機",
-    "failedToFetchLogs": "取得日誌失敗： {{error}}",
-    "failedToDownloadLogs": "日誌下載失敗： {{error}}"
-  },
-  "nav": {
-    "docker": "Docker"
-  },
-  "onboarding": {
-    "feature_docker": "Docker",
-    "feature_docker_desc": "查看執行 Docker 的任何主機上的容器、讀取日誌和查看統計資料。"
-  },
-  "terminal": {
-    "retry": "重試",
-    "clipboardReadFailed": "從剪貼簿讀取失敗。請確認已授予剪貼簿權限。",
-    "clipboardWriteFailed": "複製到剪貼簿失敗。請確認頁面是透過 HTTPS 或 localhost 提供。"
-  },
-  "permissions": {
-    "use": {
-      "title": "使用 Docker",
-      "description": "在已啟用 Docker 的主機上開啟 Docker 管理員和容器控制台。"
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "啟用 Docker",
-        "description": "管理此主機上的容器。"
-      },
-      "containerRuntime": {
-        "label": "容器執行環境",
-        "description": "選擇用於此主機容器管理的 CLI",
-        "docker": "Docker",
-        "podman": "Podman"
-      }
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "需要遠端伺服器。請在「設定」中連接遠端伺服器以使用此連線類型。"
-  },
-  "hosts": {
-    "docsLink": "檢視文件",
-    "hostNotFound": "找不到主機",
-    "loadingHost": "正在載入主機..."
-  }
-}
diff --git a/plugins/docker/manifest.json b/plugins/docker/manifest.json
deleted file mode 100644
index f2a37c77b..000000000
--- a/plugins/docker/manifest.json
+++ /dev/null
@@ -1,102 +0,0 @@
-{
-  "id": "docker",
-  "name": "Docker",
-  "version": "1.0.0",
-  "description": "Manage Docker and Podman containers over SSH, with logs and a container console.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Infrastructure",
-  "icon": "Box",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "hosts:read",
-    "credentials:use",
-    "ssh:connect",
-    "network:serve",
-    "ui:surface",
-    "events:core",
-    "users:impersonate"
-  ],
-  "provides": [
-    {
-      "service": "docker.containers",
-      "version": "1.0.0",
-      "permission": "docker.use"
-    },
-    {
-      "service": "docker.events",
-      "version": "1.0.0",
-      "permission": "docker.use"
-    }
-  ],
-  "contributes": {
-    "tabs": [
-      {
-        "id": "docker",
-        "titleKey": "nav.docker",
-        "icon": "Box",
-        "openFrom": ["host-context-menu", "palette"]
-      }
-    ],
-    "permissions": [
-      {
-        "name": "use",
-        "titleKey": "permissions.use.title",
-        "descriptionKey": "permissions.use.description",
-        "defaultRoles": ["admin", "user"]
-      }
-    ],
-    "settings": {
-      "host": {
-        "editorGroup": "ssh",
-        "editorOrder": 30,
-        "enableKey": "enableDocker",
-        "enableLabelKey": "settings.host.enable.label",
-        "enableDescriptionKey": "settings.host.enable.description",
-        "fields": [
-          {
-            "key": "containerRuntime",
-            "type": "select",
-            "labelKey": "settings.host.containerRuntime.label",
-            "descriptionKey": "settings.host.containerRuntime.description",
-            "requires": "enableDocker",
-            "default": "docker",
-            "options": [
-              {
-                "value": "docker",
-                "labelKey": "settings.host.containerRuntime.docker"
-              },
-              {
-                "value": "podman",
-                "labelKey": "settings.host.containerRuntime.podman"
-              }
-            ]
-          }
-        ]
-      }
-    },
-    "uiPresets": {
-      "simple": {
-        "viewMode": "list",
-        "containerLayout": "card"
-      },
-      "balanced": {
-        "viewMode": "list",
-        "containerLayout": "card"
-      },
-      "advanced": {
-        "viewMode": "detail",
-        "containerLayout": "table"
-      }
-    },
-    "uses": ["homepage.widgets", "terminal.resolveTheme"]
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"]
-}
diff --git a/plugins/docker/package.json b/plugins/docker/package.json
deleted file mode 100644
index bdbb083c7..000000000
--- a/plugins/docker/package.json
+++ /dev/null
@@ -1,48 +0,0 @@
-{
-  "name": "@termix-plugin/docker",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "@xterm/addon-clipboard": "^0.2.0",
-    "@xterm/addon-fit": "^0.11.0",
-    "@xterm/addon-web-links": "^0.12.0",
-    "@xterm/xterm": "^6.0.0",
-    "lucide-react": "^1.33.0",
-    "react-xtermjs": "^1.0.10"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "express": "^5.2.1",
-    "react": "^19.2.8",
-    "sonner": "^2.0.8",
-    "ssh2": "^1.17.0",
-    "ws": "^8.21.3"
-  },
-  "termix": {
-    "patches": [
-      "xterm-android-ime"
-    ]
-  },
-  "overrides": {
-    "react-xtermjs": {
-      "@xterm/xterm": "$@xterm/xterm"
-    }
-  }
-}
diff --git a/plugins/docker/src/backend/connect.ts b/plugins/docker/src/backend/connect.ts
deleted file mode 100644
index 5501fef3a..000000000
--- a/plugins/docker/src/backend/connect.ts
+++ /dev/null
@@ -1,400 +0,0 @@
-/**
- * The Docker panel's interactive connect.
- *
- * Core's pipeline does the handshake; this only bridges its prompt channel to
- * HTTP. A connect that needs a person (a TOTP code, a browser sign-in, a
- * password the host does not store) answers the request that is waiting with
- * what to ask, and the next request (connect-totp, connect-browser-sign-in) carries
- * the answer back and waits for whatever comes after it: the session, another
- * prompt, or an error.
- */
-
-import type { Client } from "ssh2";
-import type {
-  PluginContext,
-  PluginSshHost,
-  PluginSshPromptRequest,
-} from "@termix/plugin-sdk/backend";
-import type { ContainerRuntime } from "./container-runtime.js";
-import type { DockerSessions } from "./sessions.js";
-import {
-  connectionLog,
-  getErrorMessage,
-  type ConnectionLogLine,
-  type DockerLogger,
-} from "./helpers.js";
-
-/** What one HTTP request answers with. */
-export interface ConnectStep {
-  status: number;
-  body: Record<string, unknown>;
-}
-
-const TOTP_WAIT_MS = 3 * 60 * 1000;
-const BROWSER_SIGN_IN_WAIT_MS = 5 * 60 * 1000;
-const STEP_WAIT_MS = 90 * 1000;
-// Covers the longest a person may take on a prompt, plus the handshake.
-const CONNECT_TIMEOUT_MS = BROWSER_SIGN_IN_WAIT_MS + 30 * 1000;
-
-const PASSWORD_PROMPT = /password/i;
-
-/** Hands each step to whichever request is waiting for one. */
-export class PendingConnect {
-  constructor(
-    readonly userId: string,
-    readonly hostId: number,
-  ) {}
-
-  expiresAt = Date.now() + TOTP_WAIT_MS;
-  /** What the open prompt expects, or null when nothing is being asked. */
-  awaiting: "totp" | "browser" | null = null;
-  abandoned = false;
-  private waiter: ((step: ConnectStep) => void) | null = null;
-  private queued: ConnectStep | null = null;
-  private answer: ((value: string | null) => void) | null = null;
-
-  emit(step: ConnectStep): void {
-    if (this.waiter) {
-      const waiter = this.waiter;
-      this.waiter = null;
-      waiter(step);
-    } else {
-      this.queued = step;
-    }
-  }
-
-  next(timeoutMs = STEP_WAIT_MS): Promise<ConnectStep> {
-    if (this.queued) {
-      const step = this.queued;
-      this.queued = null;
-      return Promise.resolve(step);
-    }
-    return new Promise((resolve) => {
-      const timer = setTimeout(() => {
-        if (this.waiter !== settle) return;
-        this.waiter = null;
-        this.cancel();
-        resolve({
-          status: 408,
-          body: { error: "Connection timed out. Please reconnect." },
-        });
-      }, timeoutMs);
-      const settle = (step: ConnectStep) => {
-        clearTimeout(timer);
-        resolve(step);
-      };
-      this.waiter = settle;
-    });
-  }
-
-  ask(kind: "totp" | "browser", waitMs: number): Promise<string | null> {
-    this.awaiting = kind;
-    this.expiresAt = Date.now() + waitMs;
-    return new Promise((resolve) => {
-      this.answer = resolve;
-    });
-  }
-
-  respond(value: string | null): void {
-    const answer = this.answer;
-    this.answer = null;
-    this.awaiting = null;
-    answer?.(value);
-  }
-
-  /** Nobody will read the result: give up the prompt and drop the client. */
-  cancel(): void {
-    this.abandoned = true;
-    this.respond(null);
-  }
-}
-
-function classifyConnectError(
-  message: string,
-  logs: ConnectionLogLine[],
-): { hostKeyChanged: boolean; authFailed: boolean } {
-  if (message.includes("ENOTFOUND") || message.includes("getaddrinfo")) {
-    logs.push(
-      connectionLog("error", "dns", `DNS resolution failed: ${message}`),
-    );
-  } else if (
-    message.includes("ECONNREFUSED") ||
-    message.includes("ETIMEDOUT")
-  ) {
-    logs.push(
-      connectionLog("error", "tcp", `TCP connection failed: ${message}`),
-    );
-  } else if (message.includes("verification failed")) {
-    logs.push(
-      connectionLog(
-        "error",
-        "handshake",
-        "SSH host key has changed. For security, please open a Terminal connection to this host first to verify and accept the new key fingerprint.",
-      ),
-    );
-    return { hostKeyChanged: true, authFailed: false };
-  } else if (
-    message.includes("handshake") ||
-    message.includes("key exchange")
-  ) {
-    logs.push(
-      connectionLog("error", "handshake", `SSH handshake failed: ${message}`),
-    );
-  } else if (/authentication/i.test(message)) {
-    logs.push(
-      connectionLog("error", "auth", `Authentication failed: ${message}`),
-    );
-    return { hostKeyChanged: false, authFailed: true };
-  } else {
-    logs.push(
-      connectionLog("error", "error", `SSH connection failed: ${message}`),
-    );
-  }
-  return { hostKeyChanged: false, authFailed: false };
-}
-
-export interface StartConnectInput {
-  sessionId: string;
-  userId: string;
-  host: PluginSshHost;
-  runtime: ContainerRuntime;
-  logs: ConnectionLogLine[];
-}
-
-/**
- * Starts a connect and returns the first step for the request that asked.
- * The pending entry lives in `sessions` until the connect settles, so the
- * answer routes can find it.
- */
-export async function startConnect(
-  ctx: PluginContext,
-  sessions: DockerSessions,
-  log: DockerLogger,
-  input: StartConnectInput,
-): Promise<ConnectStep> {
-  const { sessionId, userId, host, runtime, logs } = input;
-  const hostId = host.id;
-  const authType = (host.authType as string) || "none";
-  const credentialless = !ctx.ssh.requiresSecret(authType);
-
-  const pending = new PendingConnect(userId, hostId);
-  sessions.setPending(sessionId, pending);
-
-  const parkTotp = (prompt: string, extra: Record<string, unknown>) => {
-    logs.push(connectionLog("info", "docker_auth", "Verification required"));
-    const answer = pending.ask("totp", TOTP_WAIT_MS);
-    pending.emit({
-      status: 200,
-      body: {
-        requires_totp: true,
-        sessionId,
-        prompt,
-        connectionLogs: logs,
-        ...extra,
-      },
-    });
-    return answer;
-  };
-
-  const ask = async (
-    request: PluginSshPromptRequest,
-  ): Promise<string | null> => {
-    if (pending.abandoned) return null;
-    switch (request.kind) {
-      case "totp":
-        return parkTotp(request.prompt, request.retry ? { retry: true } : {});
-      case "browser": {
-        logs.push(
-          connectionLog(
-            "info",
-            "docker_auth",
-            `${request.label} sign-in required`,
-          ),
-        );
-        const answer = pending.ask("browser", BROWSER_SIGN_IN_WAIT_MS);
-        pending.emit({
-          status: 200,
-          body: {
-            requires_browser_sign_in: true,
-            sessionId,
-            label: request.label,
-            url: request.url,
-            code: request.code,
-            connectionLogs: logs,
-          },
-        });
-        return answer;
-      }
-      case "input": {
-        const isPassword = PASSWORD_PROMPT.test(request.prompt);
-        if (isPassword && credentialless) {
-          pending.abandoned = true;
-          pending.emit({
-            status: 200,
-            body: { status: "auth_required", reason: "no_keyboard" },
-          });
-          return null;
-        }
-        if (!isPassword && !request.isPush) return "";
-        return parkTotp(request.prompt, isPassword ? { isPassword: true } : {});
-      }
-    }
-  };
-
-  logs.push(connectionLog("info", "dns", `Resolving DNS for ${host.ip}`));
-  logs.push(
-    connectionLog("info", "tcp", `Connecting to ${host.ip}:${host.port}`),
-  );
-  logs.push(connectionLog("info", "handshake", "Initiating SSH handshake"));
-
-  ctx.ssh
-    .connect<Client>(host, {
-      purpose: "docker",
-      profile: "session",
-      timeoutMs: CONNECT_TIMEOUT_MS,
-      prompt: { ask },
-    })
-    .then(
-      (connection) => {
-        sessions.clearPending(sessionId);
-        ctx.hosts.status.reportLogin(hostId, { ok: true });
-        if (pending.abandoned) {
-          connection.dispose();
-          return;
-        }
-
-        const session = {
-          id: sessionId,
-          client: connection.client,
-          dispose: connection.dispose,
-          hostId,
-          userId,
-          runtime,
-          isWindows: false,
-          lastActive: Date.now(),
-          activeOperations: 0,
-        };
-        sessions.add(session);
-
-        connection.client.exec("ver", (err, stream) => {
-          if (err || !stream) return;
-          let output = "";
-          stream.on("data", (d: Buffer) => {
-            output += d.toString();
-          });
-          stream.on("close", () => {
-            if (output.toLowerCase().includes("windows")) {
-              session.isWindows = true;
-            }
-          });
-          stream.stderr.on("data", () => {});
-        });
-
-        void ctx.audit.record({
-          action: "docker_connect",
-          resourceType: "host",
-          resourceId: String(hostId),
-          resourceName: (host.name as string) || undefined,
-          success: true,
-        });
-
-        logs.push(
-          connectionLog(
-            "success",
-            "connected",
-            "SSH connection established successfully",
-          ),
-        );
-        pending.emit({
-          status: 200,
-          body: { success: true, status: "success", connectionLogs: logs },
-        });
-      },
-      (error: unknown) => {
-        sessions.clearPending(sessionId);
-        const message = getErrorMessage(error, "SSH connection failed");
-        if (pending.abandoned) return;
-
-        const outcome = (error as { outcome?: Record<string, unknown> })
-          .outcome;
-        if (outcome?.status === "interaction-required") {
-          logs.push(connectionLog("error", "docker_auth", message));
-          pending.emit({
-            status: 401,
-            body: {
-              error: message,
-              requiresAuthInteraction: outcome.interaction,
-              ...(typeof outcome.flag === "string"
-                ? { [outcome.flag]: true }
-                : {}),
-              connectionLogs: logs,
-            },
-          });
-          return;
-        }
-        if (outcome?.status === "error") {
-          logs.push(connectionLog("error", "docker_auth", message));
-          pending.emit({
-            status: 400,
-            body: { error: message, connectionLogs: logs },
-          });
-          return;
-        }
-
-        const { authFailed } = classifyConnectError(message, logs);
-        log.error("Docker SSH connection failed", {
-          hostId,
-          userId,
-          error: message,
-        });
-
-        if (credentialless && authFailed) {
-          pending.emit({
-            status: 200,
-            body: {
-              status: "auth_required",
-              reason: "no_keyboard",
-              connectionLogs: logs,
-            },
-          });
-          return;
-        }
-        pending.emit({
-          status: 500,
-          body: { success: false, message, connectionLogs: logs },
-        });
-      },
-    );
-
-  return pending.next();
-}
-
-/** Carries a person's answer to a parked connect and waits for what's next. */
-export async function answerConnect(
-  sessions: DockerSessions,
-  sessionId: string,
-  userId: string,
-  kind: "totp" | "browser",
-  value: string,
-): Promise<ConnectStep> {
-  const pending = sessions.getPending(sessionId);
-  if (!(pending instanceof PendingConnect) || pending.userId !== userId) {
-    return {
-      status: 404,
-      body: { error: "Authentication session expired. Please reconnect." },
-    };
-  }
-  if (pending.awaiting !== kind) {
-    return {
-      status: 400,
-      body: {
-        error:
-          kind === "browser"
-            ? "Session is not waiting for a browser sign-in"
-            : "Session is not waiting for a code",
-      },
-    };
-  }
-  pending.respond(value);
-  return pending.next();
-}
diff --git a/plugins/docker/src/backend/console.ts b/plugins/docker/src/backend/console.ts
deleted file mode 100644
index 61b6ff579..000000000
--- a/plugins/docker/src/backend/console.ts
+++ /dev/null
@@ -1,344 +0,0 @@
-import { AsyncResource } from "node:async_hooks";
-import { StringDecoder } from "node:string_decoder";
-import type { Client, ClientChannel } from "ssh2";
-import { WebSocket, type RawData } from "ws";
-import type {
-  PluginContext,
-  PluginWebSocketConnection,
-} from "@termix/plugin-sdk/backend";
-import {
-  containerCommand,
-  type ContainerRuntime,
-} from "./container-runtime.js";
-import { readDockerHostSettings } from "./host-settings.js";
-import {
-  CONTAINER_ID_RE,
-  HOST_ADDRESS_MISMATCH_MESSAGE,
-  HOST_NOT_ON_THIS_SERVER_MESSAGE,
-  asObject,
-  asString,
-  getErrorMessage,
-  hostAddressMismatch,
-  parseWsMessage,
-  toTerminalDimension,
-  type DockerLogger,
-} from "./helpers.js";
-
-const SHELLS = ["bash", "sh", "ash", "zsh"];
-const PING_MS = 30_000;
-
-interface ConsoleSession {
-  client: Client;
-  dispose: () => void;
-  stream: ClientChannel | null;
-  hostId: number;
-  containerId: string;
-  runtime: ContainerRuntime;
-}
-
-function shellExists(
-  client: Client,
-  runtime: ContainerRuntime,
-  containerId: string,
-  shell: string,
-): Promise<boolean> {
-  return new Promise((resolve) => {
-    client.exec(
-      containerCommand(runtime, `exec ${containerId} which ${shell}`),
-      (err, stream) => {
-        if (err) return resolve(false);
-        let output = "";
-        stream.on("data", (data: Buffer) => {
-          output += data.toString();
-        });
-        stream.on("close", (code: number) =>
-          resolve(code === 0 && output.trim().length > 0),
-        );
-        stream.stderr.on("data", () => {});
-        stream.stderr.on("error", () => {});
-        stream.on("error", () => resolve(false));
-      },
-    );
-  });
-}
-
-async function pickShell(
-  client: Client,
-  runtime: ContainerRuntime,
-  containerId: string,
-  requested: string | undefined,
-): Promise<string> {
-  if (requested && (await shellExists(client, runtime, containerId, requested)))
-    return requested;
-  for (const shell of ["bash", "sh", "ash"]) {
-    if (await shellExists(client, runtime, containerId, shell)) return shell;
-  }
-  return "sh";
-}
-
-/**
- * The container console at /plugin-ws/docker/console.
- *
- * Public with optionalAuth: core still resolves the caller's token, and the
- * handler refuses a socket without a user or without docker.use. Every live
- * console is closed when the plugin deactivates.
- */
-export function registerConsole(ctx: PluginContext, log: DockerLogger): void {
-  const live = new Set<() => void>();
-  ctx.disposables.add(() => {
-    for (const end of [...live]) end();
-    live.clear();
-  });
-
-  const onConnection = async (connection: PluginWebSocketConnection) => {
-    const ws = connection.socket as WebSocket;
-    const userId = connection.userId;
-    if (!userId || !(await ctx.rbac.hasFor(userId, "use"))) {
-      ws.close(1008, "Authentication required");
-      return;
-    }
-
-    let session: ConsoleSession | null = null;
-    const send = (message: Record<string, unknown>) => {
-      if (ws.readyState === WebSocket.OPEN) ws.send(JSON.stringify(message));
-    };
-
-    const endSession = () => {
-      if (!session) return;
-      const current = session;
-      session = null;
-      current.stream?.end();
-      current.dispose();
-    };
-
-    const pingTimer = setInterval(() => {
-      if (ws.readyState === WebSocket.OPEN) ws.ping();
-    }, PING_MS);
-
-    const cleanup = () => {
-      clearInterval(pingTimer);
-      endSession();
-      live.delete(shutdown);
-    };
-    const shutdown = () => {
-      cleanup();
-      try {
-        ws.close(1001, "Docker plugin disabled");
-      } catch {
-        // already closed
-      }
-    };
-    live.add(shutdown);
-
-    const connect = async (data: unknown) => {
-      if (!connection.isDataUnlocked()) {
-        send({
-          type: "error",
-          message: "Session expired - please log in again",
-        });
-        return;
-      }
-      const payload = asObject(data);
-      const hostConfig = asObject(payload.hostConfig);
-      const hostId = Number(hostConfig.id);
-      const syncId =
-        typeof hostConfig.syncId === "string" ? hostConfig.syncId : null;
-      const containerId = asString(payload.containerId);
-      const shell = asString(payload.shell) || undefined;
-      const cols = toTerminalDimension(payload.cols) || 80;
-      const rows = toTerminalDimension(payload.rows) || 24;
-
-      if (!hostId || !containerId) {
-        send({
-          type: "error",
-          message: "Host configuration and container ID are required",
-        });
-        return;
-      }
-      if (!CONTAINER_ID_RE.test(containerId)) {
-        send({ type: "error", message: "Invalid container ID" });
-        return;
-      }
-      if (shell && !SHELLS.includes(shell)) {
-        send({ type: "error", message: "Invalid shell" });
-        return;
-      }
-
-      endSession();
-
-      try {
-        // syncId names the host on both sides of a sync pair; the numeric
-        // id only names it in the database the client is displaying.
-        const host = await ctx.ssh.resolveHost(hostId, { syncId });
-        if (!host) {
-          send({
-            type: "error",
-            message: syncId
-              ? HOST_NOT_ON_THIS_SERVER_MESSAGE
-              : "Host not found",
-          });
-          return;
-        }
-        if (!syncId && hostAddressMismatch(hostConfig.ip, host.ip)) {
-          log.error("Refusing Docker console: host id resolves elsewhere", {
-            hostId,
-            userId,
-          });
-          send({ type: "error", message: HOST_ADDRESS_MISMATCH_MESSAGE });
-          return;
-        }
-
-        const settings = await readDockerHostSettings(ctx, host.id);
-        if (!settings.enabled) {
-          send({
-            type: "error",
-            message:
-              "Docker is not enabled for this host. Enable it in Host Settings.",
-          });
-          return;
-        }
-
-        const { client, dispose } = await ctx.ssh.connect<Client>(host, {
-          purpose: "docker-console",
-          profile: "stream",
-          timeoutMs: 65_000,
-        });
-        if (ws.readyState !== WebSocket.OPEN) {
-          dispose();
-          return;
-        }
-        const current: ConsoleSession = {
-          client,
-          dispose,
-          stream: null,
-          hostId: host.id,
-          containerId,
-          runtime: settings.runtime,
-        };
-        session = current;
-
-        const shellToUse = await pickShell(
-          client,
-          settings.runtime,
-          containerId,
-          shell,
-        );
-        if (session !== current) return;
-
-        client.exec(
-          containerCommand(
-            settings.runtime,
-            `exec -it ${containerId} /bin/${shellToUse}`,
-          ),
-          { pty: { term: "xterm-256color", cols, rows } },
-          (err, stream) => {
-            if (err) {
-              send({
-                type: "error",
-                message: `Failed to start console: ${err.message}`,
-              });
-              return;
-            }
-            if (session !== current) {
-              stream.end();
-              return;
-            }
-            current.stream = stream;
-
-            // Buffers split multi-byte UTF-8 sequences across chunks.
-            const decoder = new StringDecoder("utf-8");
-            stream.on("data", (chunk: Buffer) => {
-              const text = decoder.write(chunk);
-              if (text) send({ type: "output", data: text });
-            });
-            stream.stderr.on("data", () => {});
-            stream.stderr.on("error", () => {});
-            stream.on("error", (streamErr: Error) => {
-              send({
-                type: "error",
-                message: `Console error: ${streamErr.message}`,
-              });
-            });
-            stream.on("close", () => {
-              send({ type: "disconnected", message: "Console session ended" });
-              if (session === current) endSession();
-            });
-
-            send({
-              type: "connected",
-              data: {
-                shell: shellToUse,
-                requestedShell: shell,
-                shellChanged: !!shell && shell !== shellToUse,
-              },
-            });
-          },
-        );
-      } catch (error) {
-        log.error("Failed to connect to container", error, {
-          hostId,
-          containerId,
-        });
-        send({
-          type: "error",
-          message: getErrorMessage(error, "Failed to connect to container"),
-        });
-      }
-    };
-
-    ws.on(
-      "message",
-      AsyncResource.bind(async (raw: RawData) => {
-        let type: string;
-        let data: unknown;
-        try {
-          ({ type, data } = parseWsMessage(raw));
-        } catch (error) {
-          send({ type: "error", message: getErrorMessage(error) });
-          return;
-        }
-
-        switch (type) {
-          case "connect":
-            await connect(data);
-            break;
-          case "input": {
-            const input = asString(data);
-            if (input) session?.stream?.write(input);
-            break;
-          }
-          case "resize": {
-            const size = asObject(data);
-            const cols = toTerminalDimension(size.cols);
-            const rows = toTerminalDimension(size.rows);
-            if (cols && rows)
-              session?.stream?.setWindow(rows, cols, rows, cols);
-            break;
-          }
-          case "disconnect":
-            if (session) {
-              endSession();
-              send({
-                type: "disconnected",
-                message: "Disconnected from container",
-              });
-            }
-            break;
-          case "ping":
-            send({ type: "pong" });
-            break;
-          default:
-            log.warn("Unknown docker console message", { type });
-        }
-      }),
-    );
-
-    ws.on("close", cleanup);
-    ws.on("error", (error: Error) => {
-      log.error("Docker console socket error", error);
-      cleanup();
-    });
-  };
-
-  ctx.ws.route("/console", onConnection, { public: true, optionalAuth: true });
-}
diff --git a/plugins/docker/src/backend/container-runtime.ts b/plugins/docker/src/backend/container-runtime.ts
deleted file mode 100644
index d896df299..000000000
--- a/plugins/docker/src/backend/container-runtime.ts
+++ /dev/null
@@ -1,24 +0,0 @@
-export type ContainerRuntime = "docker" | "podman";
-
-export function normalizeContainerRuntime(value: unknown): ContainerRuntime {
-  return value === "podman" ? "podman" : "docker";
-}
-
-/**
- * Non-interactive SSH shells don't source ~/.zprofile or ~/.bash_profile,
- * so PATH additions from installers like Homebrew or OrbStack are missing.
- * Extend PATH with their common install locations before invoking the CLI.
- */
-const EXTRA_PATH_DIRS =
-  '/opt/homebrew/bin:/opt/homebrew/sbin:/usr/local/bin:"$HOME/.orbstack/bin"';
-
-export function containerCommand(
-  runtime: ContainerRuntime | undefined,
-  args: string,
-): string {
-  return `PATH="${EXTRA_PATH_DIRS}:$PATH" ${normalizeContainerRuntime(runtime)} ${args}`;
-}
-
-export function getRuntimeLabel(runtime: ContainerRuntime): string {
-  return runtime === "podman" ? "Podman" : "Docker";
-}
diff --git a/plugins/docker/src/backend/container-state.ts b/plugins/docker/src/backend/container-state.ts
deleted file mode 100644
index a56bb0782..000000000
--- a/plugins/docker/src/backend/container-state.ts
+++ /dev/null
@@ -1,84 +0,0 @@
-/**
- * Container state snapshots and the events two of them imply, for the
- * docker.events service.
- *
- * Events come from diffing successive `ps -a` snapshots, so the poll interval
- * is the resolution: a container that stops and starts between two polls is
- * not reported. That is the tradeoff for not holding a `docker events` stream
- * open against every watched host.
- */
-
-export interface ContainerState {
-  /** Docker's own state word: running, exited, restarting, ... */
-  state: string;
-  /** Health from the status text, when the image declares a healthcheck. */
-  unhealthy: boolean;
-}
-
-export type DockerEventName = "exited" | "started" | "unhealthy" | "restarting";
-
-export const PS_STATE_FORMAT = `'{"name":"{{.Names}}","state":"{{.State}}","status":"{{.Status}}"}'`;
-
-/** Parses `ps -a --format PS_STATE_FORMAT` output, one JSON object per line. */
-export function parseContainerStates(
-  output: string,
-): Map<string, ContainerState> {
-  const states = new Map<string, ContainerState>();
-
-  for (const line of output.split("\n")) {
-    const trimmed = line.trim();
-    if (!trimmed) continue;
-
-    try {
-      const parsed = JSON.parse(trimmed) as {
-        name?: string;
-        state?: string;
-        status?: string;
-      };
-      if (!parsed.name) continue;
-
-      states.set(parsed.name, {
-        state: (parsed.state ?? "").toLowerCase(),
-        unhealthy: /\(unhealthy\)/i.test(parsed.status ?? ""),
-      });
-    } catch {
-      // A partial line is not worth failing the whole poll over.
-    }
-  }
-
-  return states;
-}
-
-/**
- * The events a pair of snapshots implies. A container missing from the
- * previous snapshot counts as newly seen rather than started, so the first
- * poll after a restart does not replay every running container.
- */
-export function diffContainerStates(
-  previous: Map<string, ContainerState>,
-  current: Map<string, ContainerState>,
-): Array<{ container: string; event: DockerEventName }> {
-  const events: Array<{ container: string; event: DockerEventName }> = [];
-
-  for (const [name, now] of current) {
-    const before = previous.get(name);
-    if (!before) continue;
-
-    if (before.state !== now.state) {
-      if (now.state === "exited")
-        events.push({ container: name, event: "exited" });
-      else if (now.state === "running")
-        events.push({ container: name, event: "started" });
-      else if (now.state === "restarting")
-        events.push({ container: name, event: "restarting" });
-    }
-
-    // Health is independent of state: a container can go unhealthy while it
-    // stays up, which is exactly the case worth alerting on.
-    if (!before.unhealthy && now.unhealthy) {
-      events.push({ container: name, event: "unhealthy" });
-    }
-  }
-
-  return events;
-}
diff --git a/plugins/docker/src/backend/helpers.ts b/plugins/docker/src/backend/helpers.ts
deleted file mode 100644
index 70f4ab4b1..000000000
--- a/plugins/docker/src/backend/helpers.ts
+++ /dev/null
@@ -1,154 +0,0 @@
-import type { RawData } from "ws";
-import type { PluginLogger } from "@termix/plugin-sdk/backend";
-
-export function getErrorMessage(
-  error: unknown,
-  fallback = "Unknown error",
-): string {
-  return error instanceof Error ? error.message : fallback;
-}
-
-export type Meta = Record<string, unknown>;
-
-export interface DockerLogger {
-  info: (message: string, meta?: Meta) => void;
-  warn: (message: string, meta?: Meta) => void;
-  /** An error, or structured context, or both. */
-  error: (message: string, errorOrMeta?: unknown, meta?: Meta) => void;
-}
-
-function withMeta(message: string, meta?: Meta): string {
-  if (!meta || Object.keys(meta).length === 0) return message;
-  try {
-    return `${message} ${JSON.stringify(meta)}`;
-  } catch {
-    return message;
-  }
-}
-
-/** ctx.log with the structured context the old core logger carried. */
-export function createLogger(log: PluginLogger): DockerLogger {
-  return {
-    info: (message, meta) => log.info(withMeta(message, meta)),
-    warn: (message, meta) => log.warn(withMeta(message, meta)),
-    error: (message, errorOrMeta, meta) => {
-      if (errorOrMeta instanceof Error) {
-        log.error(withMeta(message, meta), errorOrMeta);
-        return;
-      }
-      log.error(
-        withMeta(message, {
-          ...((errorOrMeta as Meta | undefined) ?? {}),
-          ...meta,
-        }),
-      );
-    },
-  };
-}
-
-export type LogLevel = "info" | "success" | "warning" | "error";
-
-/** One line of the connection log the panel shows while connecting. */
-export interface ConnectionLogLine {
-  type: LogLevel;
-  stage: string;
-  message: string;
-}
-
-export function connectionLog(
-  type: LogLevel,
-  stage: string,
-  message: string,
-): ConnectionLogLine {
-  return { type, stage, message };
-}
-
-export const CONTAINER_ID_RE = /^[a-zA-Z0-9][a-zA-Z0-9_.-]*$/;
-export const DOCKER_TIMESTAMP_RE = /^[0-9T:.Z+-]+$/;
-
-// Cap on a single decoded text frame. Control messages are tiny, and console
-// input is bounded by what a user can type or paste.
-export const MAX_WS_MESSAGE_BYTES = 1024 * 1024;
-
-function rawByteLength(raw: RawData): number {
-  if (Buffer.isBuffer(raw)) return raw.length;
-  if (Array.isArray(raw))
-    return raw.reduce((sum, part) => sum + part.length, 0);
-  if (raw instanceof ArrayBuffer) return raw.byteLength;
-  return 0;
-}
-
-/** Parses a frame into `{ type, data }`, throwing on anything else. */
-export function parseWsMessage(raw: RawData): { type: string; data: unknown } {
-  if (rawByteLength(raw) > MAX_WS_MESSAGE_BYTES) {
-    throw new Error("Message too large");
-  }
-  let parsed: unknown;
-  try {
-    parsed = JSON.parse(raw.toString());
-  } catch {
-    throw new Error("Invalid JSON");
-  }
-  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
-    throw new Error("Message must be a JSON object");
-  }
-  const { type, data } = parsed as { type?: unknown; data?: unknown };
-  if (typeof type !== "string") {
-    throw new Error("Message type must be a string");
-  }
-  return { type, data };
-}
-
-export function asObject(data: unknown): Record<string, unknown> {
-  return data !== null && typeof data === "object" && !Array.isArray(data)
-    ? (data as Record<string, unknown>)
-    : {};
-}
-
-export function asString(value: unknown): string {
-  return typeof value === "string" ? value : "";
-}
-
-/** A sane integer width or height, or 0 when the value is unusable. */
-export function toTerminalDimension(value: unknown): number {
-  const n = typeof value === "number" ? value : Number(value);
-  if (!Number.isFinite(n)) return 0;
-  const rounded = Math.floor(n);
-  if (rounded < 1) return 0;
-  return Math.min(rounded, 10000);
-}
-
-function normalizeHostAddress(value: unknown): string {
-  if (typeof value !== "string") return "";
-  return value
-    .replace(/^\[|\]$/g, "")
-    .trim()
-    .toLowerCase();
-}
-
-/**
- * Whether a numeric host id resolved to a different machine than the client
- * meant. Ids from the desktop app and a sync server drift apart, and the
- * resolved row supplies the credentials, so a mismatch must be refused.
- */
-export function hostAddressMismatch(
-  clientAddress: unknown,
-  resolvedAddress: unknown,
-): boolean {
-  const resolved = normalizeHostAddress(resolvedAddress);
-  if (!resolved) return false;
-  return resolved !== normalizeHostAddress(clientAddress);
-}
-
-export const HOST_ADDRESS_MISMATCH_MESSAGE =
-  "Host mismatch: this server resolved the selected host to a different machine, so the connection was refused. " +
-  "The host ids on this device and on the sync server have drifted apart. " +
-  'Set the connection origin to "This device" for this host, or re-run a full sync, then try again.';
-
-export const HOST_NOT_ON_THIS_SERVER_MESSAGE =
-  "This host does not exist on the sync server, so the connection was refused. " +
-  'Run a sync so the server knows about it, or set the connection origin to "This device" for this host.';
-
-export function newSessionId(prefix: string): string {
-  return `${prefix}-${Date.now()}-${Math.random().toString(36).slice(2, 11)}`;
-}
diff --git a/plugins/docker/src/backend/host-settings.ts b/plugins/docker/src/backend/host-settings.ts
deleted file mode 100644
index c449b8f86..000000000
--- a/plugins/docker/src/backend/host-settings.ts
+++ /dev/null
@@ -1,70 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import {
-  normalizeContainerRuntime,
-  type ContainerRuntime,
-} from "./container-runtime.js";
-
-export const PLUGIN_ID = "docker";
-
-export interface DockerHostSettings {
-  enabled: boolean;
-  runtime: ContainerRuntime;
-}
-
-export async function readDockerHostSettings(
-  ctx: PluginContext,
-  hostId: number,
-): Promise<DockerHostSettings> {
-  const values = await ctx.settings.getAll("host", hostId);
-  return {
-    enabled: values.enableDocker === true,
-    runtime: normalizeContainerRuntime(values.containerRuntime),
-  };
-}
-
-function asObject(value: unknown): Record<string, unknown> | undefined {
-  let parsed = value;
-  if (typeof value === "string") {
-    try {
-      parsed = JSON.parse(value);
-    } catch {
-      return undefined;
-    }
-  }
-  return parsed && typeof parsed === "object" && !Array.isArray(parsed)
-    ? (parsed as Record<string, unknown>)
-    : undefined;
-}
-
-function asBool(value: unknown): boolean | undefined {
-  if (typeof value === "boolean") return value;
-  if (value === 1 || value === "1" || value === "true") return true;
-  if (value === 0 || value === "0" || value === "false") return false;
-  return undefined;
-}
-
-/**
- * The docker host settings in an imported or created host row: the nested
- * `pluginSettings.docker` of a Termix export first, then the flat
- * `enableDocker` and `dockerConfig.runtime` hosts had before 2.9.0 (older
- * exports, proxmox guests marked as Docker hosts).
- */
-export function normalizeImportedHost(
-  raw: Record<string, unknown>,
-): Record<string, unknown> | null {
-  const nested = asObject(asObject(raw.pluginSettings)?.[PLUGIN_ID]) ?? {};
-  const out: Record<string, unknown> = {};
-
-  const enabled = asBool(
-    nested.enableDocker !== undefined ? nested.enableDocker : raw.enableDocker,
-  );
-  if (enabled !== undefined) out.enableDocker = enabled;
-
-  const runtime =
-    nested.containerRuntime ?? asObject(raw.dockerConfig)?.runtime;
-  if (runtime === "docker" || runtime === "podman") {
-    out.containerRuntime = runtime;
-  }
-
-  return Object.keys(out).length > 0 ? out : null;
-}
diff --git a/plugins/docker/src/backend/index.ts b/plugins/docker/src/backend/index.ts
deleted file mode 100644
index 7af6b0d91..000000000
--- a/plugins/docker/src/backend/index.ts
+++ /dev/null
@@ -1,33 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { createLogger } from "./helpers.js";
-import { createDockerSessions } from "./sessions.js";
-import { registerRoutes } from "./routes.js";
-import { registerConsole } from "./console.js";
-import { registerServices } from "./services.js";
-import { normalizeImportedHost } from "./host-settings.js";
-
-export type {
-  DockerContainerAction,
-  DockerContainerSummary,
-  DockerEvent,
-  DockerEventsV1,
-  DockerServiceV1,
-} from "./services.js";
-
-export async function activate(ctx: PluginContext) {
-  const log = createLogger(ctx.log);
-  const sessions = createDockerSessions(ctx.schedule, log);
-  ctx.disposables.add(() => sessions.closeAll());
-
-  registerRoutes(ctx.http.router<Router>(), { ctx, sessions, log });
-  registerConsole(ctx, log);
-  registerServices(ctx, log);
-  ctx.registry.provide("docker.hostImportNormalizer", normalizeImportedHost);
-
-  ctx.log.info(
-    "Docker mounted at /plugin-api/docker and /plugin-ws/docker/console",
-  );
-}
-
-export async function deactivate() {}
diff --git a/plugins/docker/src/backend/routes.ts b/plugins/docker/src/backend/routes.ts
deleted file mode 100644
index 672d241d8..000000000
--- a/plugins/docker/src/backend/routes.ts
+++ /dev/null
@@ -1,1000 +0,0 @@
-import type { Request, Response, Router } from "express";
-import type { PluginContext, PluginSshHost } from "@termix/plugin-sdk/backend";
-import { answerConnect, startConnect } from "./connect.js";
-import { containerCommand, getRuntimeLabel } from "./container-runtime.js";
-import { readDockerHostSettings } from "./host-settings.js";
-import type { DockerSession, DockerSessions } from "./sessions.js";
-import {
-  CONTAINER_ID_RE,
-  DOCKER_TIMESTAMP_RE,
-  connectionLog,
-  getErrorMessage,
-  type ConnectionLogLine,
-  type DockerLogger,
-} from "./helpers.js";
-
-const CONTAINER_ACTIONS = [
-  "start",
-  "stop",
-  "restart",
-  "pause",
-  "unpause",
-] as const;
-type ContainerAction = (typeof CONTAINER_ACTIONS)[number];
-
-const LIST_FORMAT_UNIX = `'{"id":"{{.ID}}","name":"{{.Names}}","image":"{{.Image}}","status":"{{.Status}}","state":"{{.State}}","ports":"{{.Ports}}","created":"{{.CreatedAt}}"}' `;
-const LIST_FORMAT_WINDOWS = `"{\\"id\\":\\"{{.ID}}\\",\\"name\\":\\"{{.Names}}\\",\\"image\\":\\"{{.Image}}\\",\\"status\\":\\"{{.Status}}\\",\\"state\\":\\"{{.State}}\\",\\"ports\\":\\"{{.Ports}}\\",\\"created\\":\\"{{.CreatedAt}}\\"}"`;
-const STATS_FORMAT_UNIX = `'{"cpu":"{{.CPUPerc}}","memory":"{{.MemUsage}}","memoryPercent":"{{.MemPerc}}","netIO":"{{.NetIO}}","blockIO":"{{.BlockIO}}","pids":"{{.PIDs}}"}' `;
-const STATS_FORMAT_WINDOWS = `"{\\"cpu\\":\\"{{.CPUPerc}}\\",\\"memory\\":\\"{{.MemUsage}}\\",\\"memoryPercent\\":\\"{{.MemPerc}}\\",\\"netIO\\":\\"{{.NetIO}}\\",\\"blockIO\\":\\"{{.BlockIO}}\\",\\"pids\\":\\"{{.PIDs}}\\"}"`;
-
-export function listFormat(isWindows: boolean): string {
-  return isWindows ? LIST_FORMAT_WINDOWS : LIST_FORMAT_UNIX;
-}
-
-/** Parses `ps --format listFormat()` output, skipping lines that are not JSON. */
-export function parseContainerList(output: string): Record<string, unknown>[] {
-  return output
-    .split("\n")
-    .filter((line) => line.trim())
-    .flatMap((line) => {
-      try {
-        return [JSON.parse(line) as Record<string, unknown>];
-      } catch {
-        return [];
-      }
-    });
-}
-
-function notFound(error: unknown): boolean {
-  return getErrorMessage(error, "").includes("No such container");
-}
-
-interface Deps {
-  ctx: PluginContext;
-  sessions: DockerSessions;
-  log: DockerLogger;
-}
-
-export function registerRoutes(router: Router, { ctx, sessions, log }: Deps) {
-  router.use((_req, res, next) => {
-    res.setHeader("Cache-Control", "no-store");
-    next();
-  });
-  router.use(ctx.rbac.require("use") as never);
-
-  router.param("containerId", (_req, res, next, value) => {
-    if (!CONTAINER_ID_RE.test(value)) {
-      res.status(400).json({ error: "Invalid container ID" });
-      return;
-    }
-    next();
-  });
-
-  const userOf = (res: Response): string | null => {
-    const userId = ctx.currentActor();
-    if (!userId) {
-      res.status(401).json({ error: "Authentication required" });
-      return null;
-    }
-    return userId;
-  };
-
-  /** The caller's live session for the path's sessionId, or an error reply. */
-  const sessionOf = (req: Request, res: Response): DockerSession | null => {
-    const userId = userOf(res);
-    if (!userId) return null;
-    const sessionId = String(req.params.sessionId ?? "");
-    if (sessions.getPending(sessionId)) {
-      res.status(400).json({
-        error: "Connection pending authentication",
-        code: "AUTH_PENDING",
-      });
-      return null;
-    }
-    const session = sessions.get(sessionId, userId);
-    if (!session) {
-      res.status(400).json({ error: "SSH session not found or not connected" });
-      return null;
-    }
-    return session;
-  };
-
-  /**
-   * @openapi
-   * /plugin-api/docker/ssh/connect:
-   *   post:
-   *     summary: Establish SSH session for Docker
-   *     description: Opens an SSH session to a host for Docker operations. When the host asks for a code, a browser sign-in or a password, the reply says so and the session waits for connect-totp or connect-browser-sign-in.
-   *     tags:
-   *       - Docker
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required:
-   *               - sessionId
-   *               - hostId
-   *             properties:
-   *               sessionId:
-   *                 type: string
-   *               hostId:
-   *                 type: integer
-   *               userProvidedPassword:
-   *                 type: string
-   *               userProvidedSshKey:
-   *                 type: string
-   *               userProvidedKeyPassword:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Connected, or a prompt the user has to answer.
-   *       400:
-   *         description: Missing sessionId or hostId.
-   *       403:
-   *         description: Docker is not enabled for this host, or the user lacks docker.use.
-   *       404:
-   *         description: Host not found.
-   *       500:
-   *         description: SSH connection failed.
-   */
-  router.post("/ssh/connect", async (req, res) => {
-    const userId = userOf(res);
-    if (!userId) return;
-    const {
-      sessionId,
-      hostId,
-      userProvidedPassword,
-      userProvidedSshKey,
-      userProvidedKeyPassword,
-    } = (req.body ?? {}) as Record<string, unknown>;
-    const logs: ConnectionLogLine[] = [];
-
-    if (typeof sessionId !== "string" || !sessionId || !hostId) {
-      logs.push(
-        connectionLog(
-          "error",
-          "docker_connecting",
-          "Missing connection parameters",
-        ),
-      );
-      return res
-        .status(400)
-        .json({ error: "Missing sessionId or hostId", connectionLogs: logs });
-    }
-    const numericHostId = Number(hostId);
-
-    logs.push(
-      connectionLog(
-        "info",
-        "docker_connecting",
-        "Initiating Docker SSH connection",
-      ),
-    );
-
-    try {
-      const host = await ctx.ssh.resolveHost(numericHostId);
-      if (!host) {
-        logs.push(
-          connectionLog("error", "docker_connecting", "Host not found"),
-        );
-        return res
-          .status(404)
-          .json({ error: "Host not found", connectionLogs: logs });
-      }
-
-      const settings = await readDockerHostSettings(ctx, numericHostId);
-      if (!settings.enabled) {
-        logs.push(
-          connectionLog(
-            "error",
-            "docker_connecting",
-            "Docker is not enabled for this host",
-          ),
-        );
-        return res.status(403).json({
-          error:
-            "Docker is not enabled for this host. Enable it in Host Settings.",
-          code: "DOCKER_DISABLED",
-          connectionLogs: logs,
-        });
-      }
-
-      sessions.close(sessionId);
-      logs.push(
-        connectionLog(
-          "info",
-          "docker_auth",
-          "Resolving authentication credentials",
-        ),
-      );
-
-      const hasAuthOverride = [
-        userProvidedPassword,
-        userProvidedSshKey,
-        userProvidedKeyPassword,
-      ].some((value) => typeof value === "string" && value.length > 0);
-      // Core associates the redacted host object with its stored credentials.
-      const target: PluginSshHost = hasAuthOverride ? { ...host } : host;
-      if (typeof userProvidedPassword === "string" && userProvidedPassword) {
-        target.password = userProvidedPassword;
-        target.authType = "password";
-      }
-      if (typeof userProvidedSshKey === "string" && userProvidedSshKey) {
-        target.key = userProvidedSshKey;
-        target.authType = "key";
-      }
-      if (
-        typeof userProvidedKeyPassword === "string" &&
-        userProvidedKeyPassword
-      ) {
-        target.keyPassword = userProvidedKeyPassword;
-      }
-
-      const step = await startConnect(ctx, sessions, log, {
-        sessionId,
-        userId,
-        host: target,
-        runtime: settings.runtime,
-        logs,
-      });
-      return res.status(step.status).json(step.body);
-    } catch (error) {
-      log.error("Docker SSH connection error", error, {
-        hostId: numericHostId,
-        userId,
-      });
-      logs.push(
-        connectionLog(
-          "error",
-          "docker_connecting",
-          `Connection error: ${getErrorMessage(error)}`,
-        ),
-      );
-      return res.status(500).json({
-        success: false,
-        message: getErrorMessage(error),
-        connectionLogs: logs,
-      });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/docker/ssh/connect-totp:
-   *   post:
-   *     summary: Answer a verification prompt
-   *     description: Sends the code (or password) the host asked for and waits for the next step of the connect.
-   *     tags:
-   *       - Docker
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required:
-   *               - sessionId
-   *               - totpCode
-   *             properties:
-   *               sessionId:
-   *                 type: string
-   *               totpCode:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Connected, or another prompt.
-   *       400:
-   *         description: Session ID and code required, or the session is not waiting for a code.
-   *       404:
-   *         description: The connect expired.
-   *       408:
-   *         description: The host did not answer in time.
-   */
-  router.post("/ssh/connect-totp", async (req, res) => {
-    const userId = userOf(res);
-    if (!userId) return;
-    const { sessionId, totpCode } = (req.body ?? {}) as Record<string, unknown>;
-    if (typeof sessionId !== "string" || typeof totpCode !== "string") {
-      return res
-        .status(400)
-        .json({ error: "Session ID and TOTP code required" });
-    }
-    const step = await answerConnect(
-      sessions,
-      sessionId,
-      userId,
-      "totp",
-      totpCode.trim(),
-    );
-    return res.status(step.status).json(step.body);
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/docker/ssh/connect-browser-sign-in:
-   *   post:
-   *     summary: Continue after a browser sign-in
-   *     description: Continues a connect after the user finished signing in in the browser (an SSH gateway's approval, for example).
-   *     tags:
-   *       - Docker
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required:
-   *               - sessionId
-   *             properties:
-   *               sessionId:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Connected, or another prompt.
-   *       400:
-   *         description: Session ID required, or the session is not waiting for a browser sign-in.
-   *       404:
-   *         description: The connect expired.
-   *       408:
-   *         description: The host did not answer in time.
-   */
-  router.post("/ssh/connect-browser-sign-in", async (req, res) => {
-    const userId = userOf(res);
-    if (!userId) return;
-    const { sessionId } = (req.body ?? {}) as Record<string, unknown>;
-    if (typeof sessionId !== "string" || !sessionId) {
-      return res.status(400).json({ error: "Session ID required" });
-    }
-    const step = await answerConnect(
-      sessions,
-      sessionId,
-      userId,
-      "browser",
-      "",
-    );
-    return res.status(step.status).json(step.body);
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/docker/ssh/disconnect:
-   *   post:
-   *     summary: Disconnect SSH session
-   *     description: Closes the caller's Docker SSH session.
-   *     tags:
-   *       - Docker
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               sessionId:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: SSH session disconnected.
-   *       400:
-   *         description: Session ID is required.
-   */
-  router.post("/ssh/disconnect", (req, res) => {
-    const userId = userOf(res);
-    if (!userId) return;
-    const { sessionId } = (req.body ?? {}) as Record<string, unknown>;
-    if (typeof sessionId !== "string" || !sessionId) {
-      return res.status(400).json({ error: "Session ID is required" });
-    }
-    const pending = sessions.getPending(sessionId);
-    if (sessions.get(sessionId, userId) || pending?.userId === userId) {
-      sessions.close(sessionId);
-    }
-    return res.json({ success: true, message: "SSH session disconnected" });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/docker/ssh/keepalive:
-   *   post:
-   *     summary: Keep SSH session alive
-   *     description: Resets the idle timeout of the caller's Docker SSH session.
-   *     tags:
-   *       - Docker
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               sessionId:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Session keepalive successful.
-   *       400:
-   *         description: Session ID is required or session not found.
-   */
-  router.post("/ssh/keepalive", (req, res) => {
-    const userId = userOf(res);
-    if (!userId) return;
-    const { sessionId } = (req.body ?? {}) as Record<string, unknown>;
-    if (typeof sessionId !== "string" || !sessionId) {
-      return res.status(400).json({ error: "Session ID is required" });
-    }
-    const session = sessions.get(sessionId, userId);
-    if (!session) {
-      return res.status(400).json({
-        error: "SSH session not found or not connected",
-        connected: false,
-      });
-    }
-    sessions.touch(session);
-    return res.json({
-      success: true,
-      connected: true,
-      lastActive: session.lastActive,
-    });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/docker/ssh/status:
-   *   get:
-   *     summary: Check SSH session status
-   *     description: Whether the caller's Docker SSH session is connected.
-   *     tags:
-   *       - Docker
-   *     parameters:
-   *       - in: query
-   *         name: sessionId
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: Session status.
-   *       400:
-   *         description: Session ID is required.
-   */
-  router.get("/ssh/status", (req, res) => {
-    const userId = userOf(res);
-    if (!userId) return;
-    const sessionId = req.query.sessionId;
-    if (typeof sessionId !== "string" || !sessionId) {
-      return res.status(400).json({ error: "Session ID is required" });
-    }
-    return res.json({
-      success: true,
-      connected: !!sessions.get(sessionId, userId),
-    });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/docker/validate/{sessionId}:
-   *   get:
-   *     summary: Validate Docker availability
-   *     description: Checks that the container runtime is installed and its daemon answers.
-   *     tags:
-   *       - Docker
-   *     parameters:
-   *       - in: path
-   *         name: sessionId
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: Docker availability status.
-   *       400:
-   *         description: SSH session not found or not connected.
-   */
-  router.get("/validate/:sessionId", async (req, res) => {
-    const session = sessionOf(req, res);
-    if (!session) return;
-    const runtime = session.runtime;
-    const label = getRuntimeLabel(runtime);
-
-    await sessions.run(session, async () => {
-      let version = "unknown";
-      try {
-        const output = await sessions.exec(
-          session,
-          containerCommand(runtime, "--version"),
-        );
-        version =
-          output.match(/(?:Docker|podman) version ([^\s,]+)/i)?.[1] ??
-          "unknown";
-      } catch {
-        res.json({
-          available: false,
-          error: `${label} is not installed on this host.`,
-          code: "NOT_INSTALLED",
-          runtime,
-        });
-        return;
-      }
-
-      try {
-        await sessions.exec(session, containerCommand(runtime, "ps"));
-        res.json({ available: true, version, runtime });
-      } catch (error) {
-        const message = getErrorMessage(error, "");
-        if (message.includes("Cannot connect to the Docker daemon")) {
-          res.json({
-            available: false,
-            error: `${label} daemon is not running or accessible`,
-            code: "DAEMON_NOT_RUNNING",
-            runtime,
-          });
-        } else if (message.includes("permission denied")) {
-          res.json({
-            available: false,
-            error: `Permission denied accessing ${label}`,
-            code: "PERMISSION_DENIED",
-            runtime,
-          });
-        } else {
-          res.json({
-            available: false,
-            error: message,
-            code: "DOCKER_ERROR",
-            runtime,
-          });
-        }
-      }
-    });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/docker/containers/{sessionId}:
-   *   get:
-   *     summary: List all containers
-   *     description: Lists the containers on the session's host.
-   *     tags:
-   *       - Docker
-   *     parameters:
-   *       - in: path
-   *         name: sessionId
-   *         required: true
-   *         schema:
-   *           type: string
-   *       - in: query
-   *         name: all
-   *         schema:
-   *           type: boolean
-   *     responses:
-   *       200:
-   *         description: A list of containers.
-   *       400:
-   *         description: SSH session not found or not connected.
-   *       500:
-   *         description: Failed to list containers.
-   */
-  router.get("/containers/:sessionId", async (req, res) => {
-    const session = sessionOf(req, res);
-    if (!session) return;
-    const all = req.query.all !== "false";
-    try {
-      const output = await sessions.run(session, () =>
-        sessions.exec(
-          session,
-          containerCommand(
-            session.runtime,
-            `ps ${all ? "-a " : ""}--format ${listFormat(session.isWindows)}`,
-          ),
-        ),
-      );
-      res.json(parseContainerList(output));
-    } catch (error) {
-      log.error("Failed to list Docker containers", error, {
-        hostId: session.hostId,
-      });
-      res.status(500).json({
-        error: getErrorMessage(error, "Failed to list containers"),
-      });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/docker/containers/{sessionId}/{containerId}:
-   *   get:
-   *     summary: Get container details
-   *     description: The container's inspect output.
-   *     tags:
-   *       - Docker
-   *     parameters:
-   *       - in: path
-   *         name: sessionId
-   *         required: true
-   *         schema:
-   *           type: string
-   *       - in: path
-   *         name: containerId
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: Container details.
-   *       400:
-   *         description: SSH session not found or not connected.
-   *       404:
-   *         description: Container not found.
-   *       500:
-   *         description: Failed to get container details.
-   */
-  router.get("/containers/:sessionId/:containerId", async (req, res) => {
-    const session = sessionOf(req, res);
-    if (!session) return;
-    const { containerId } = req.params;
-    try {
-      const output = await sessions.run(session, () =>
-        sessions.exec(
-          session,
-          containerCommand(session.runtime, `inspect ${containerId}`),
-        ),
-      );
-      const details = JSON.parse(output) as unknown[];
-      if (details?.length > 0) {
-        res.json(details[0]);
-      } else {
-        res
-          .status(404)
-          .json({ error: "Container not found", code: "CONTAINER_NOT_FOUND" });
-      }
-    } catch (error) {
-      if (notFound(error)) {
-        return res
-          .status(404)
-          .json({ error: "Container not found", code: "CONTAINER_NOT_FOUND" });
-      }
-      log.error("Failed to get container details", error, {
-        hostId: session.hostId,
-        containerId,
-      });
-      res.status(500).json({
-        error: getErrorMessage(error, "Failed to get container details"),
-      });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/docker/containers/{sessionId}/{containerId}/{action}:
-   *   post:
-   *     summary: Start, stop, restart, pause or unpause a container
-   *     description: Runs the container action on the session's host.
-   *     tags:
-   *       - Docker
-   *     parameters:
-   *       - in: path
-   *         name: sessionId
-   *         required: true
-   *         schema:
-   *           type: string
-   *       - in: path
-   *         name: containerId
-   *         required: true
-   *         schema:
-   *           type: string
-   *       - in: path
-   *         name: action
-   *         required: true
-   *         schema:
-   *           type: string
-   *           enum: [start, stop, restart, pause, unpause]
-   *     responses:
-   *       200:
-   *         description: The action ran.
-   *       400:
-   *         description: SSH session not found or not connected.
-   *       404:
-   *         description: Container not found, or an unknown action.
-   *       500:
-   *         description: The action failed.
-   */
-  router.post(
-    "/containers/:sessionId/:containerId/:action",
-    async (req, res) => {
-      const action = req.params.action as ContainerAction;
-      if (!CONTAINER_ACTIONS.includes(action)) {
-        return res.status(404).json({ error: "Unknown container action" });
-      }
-      const session = sessionOf(req, res);
-      if (!session) return;
-      const { containerId } = req.params;
-      try {
-        log.info("Docker container operation", {
-          hostId: session.hostId,
-          containerId,
-          action,
-        });
-        await sessions.run(session, () =>
-          sessions.exec(
-            session,
-            containerCommand(session.runtime, `${action} ${containerId}`),
-          ),
-        );
-        res.json({ success: true, message: `Container ${action} succeeded` });
-      } catch (error) {
-        if (notFound(error)) {
-          return res.status(404).json({
-            success: false,
-            error: "Container not found",
-            code: "CONTAINER_NOT_FOUND",
-          });
-        }
-        log.error(`Failed to ${action} container`, error, {
-          hostId: session.hostId,
-          containerId,
-        });
-        res.status(500).json({
-          success: false,
-          error: getErrorMessage(error, `Failed to ${action} container`),
-        });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/docker/containers/{sessionId}/{containerId}/remove:
-   *   delete:
-   *     summary: Remove container
-   *     description: Removes a container, optionally by force.
-   *     tags:
-   *       - Docker
-   *     parameters:
-   *       - in: path
-   *         name: sessionId
-   *         required: true
-   *         schema:
-   *           type: string
-   *       - in: path
-   *         name: containerId
-   *         required: true
-   *         schema:
-   *           type: string
-   *       - in: query
-   *         name: force
-   *         schema:
-   *           type: boolean
-   *     responses:
-   *       200:
-   *         description: Container removed.
-   *       400:
-   *         description: Session not found, or the container is running and force was not set.
-   *       404:
-   *         description: Container not found.
-   *       500:
-   *         description: Failed to remove container.
-   */
-  router.delete(
-    "/containers/:sessionId/:containerId/remove",
-    async (req, res) => {
-      const session = sessionOf(req, res);
-      if (!session) return;
-      const { containerId } = req.params;
-      const force = req.query.force === "true";
-      try {
-        log.info("Docker container operation", {
-          hostId: session.hostId,
-          containerId,
-          action: "remove",
-        });
-        await sessions.run(session, () =>
-          sessions.exec(
-            session,
-            containerCommand(
-              session.runtime,
-              `rm ${force ? "-f " : ""}${containerId}`,
-            ),
-          ),
-        );
-        res.json({ success: true, message: "Container removed successfully" });
-      } catch (error) {
-        if (notFound(error)) {
-          return res.status(404).json({
-            success: false,
-            error: "Container not found",
-            code: "CONTAINER_NOT_FOUND",
-          });
-        }
-        if (
-          getErrorMessage(error, "").includes(
-            "cannot remove a running container",
-          )
-        ) {
-          return res.status(400).json({
-            success: false,
-            error:
-              "Cannot remove a running container. Stop it first or use force.",
-            code: "CONTAINER_RUNNING",
-          });
-        }
-        log.error("Failed to remove container", error, {
-          hostId: session.hostId,
-          containerId,
-        });
-        res.status(500).json({
-          success: false,
-          error: getErrorMessage(error, "Failed to remove container"),
-        });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/docker/containers/{sessionId}/{containerId}/logs:
-   *   get:
-   *     summary: Get container logs
-   *     description: The container's log output.
-   *     tags:
-   *       - Docker
-   *     parameters:
-   *       - in: path
-   *         name: sessionId
-   *         required: true
-   *         schema:
-   *           type: string
-   *       - in: path
-   *         name: containerId
-   *         required: true
-   *         schema:
-   *           type: string
-   *       - in: query
-   *         name: tail
-   *         schema:
-   *           type: integer
-   *       - in: query
-   *         name: timestamps
-   *         schema:
-   *           type: boolean
-   *       - in: query
-   *         name: since
-   *         schema:
-   *           type: string
-   *       - in: query
-   *         name: until
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: Container logs.
-   *       400:
-   *         description: SSH session not found or not connected.
-   *       404:
-   *         description: Container not found.
-   *       500:
-   *         description: Failed to get container logs.
-   */
-  router.get("/containers/:sessionId/:containerId/logs", async (req, res) => {
-    const session = sessionOf(req, res);
-    if (!session) return;
-    const { containerId } = req.params;
-    const tail = req.query.tail ? parseInt(String(req.query.tail), 10) : 100;
-    const since = typeof req.query.since === "string" ? req.query.since : "";
-    const until = typeof req.query.until === "string" ? req.query.until : "";
-
-    let command = containerCommand(session.runtime, `logs ${containerId}`);
-    if (tail && tail > 0) command += ` --tail ${Math.floor(tail)}`;
-    if (req.query.timestamps === "true") command += " --timestamps";
-    if (since && DOCKER_TIMESTAMP_RE.test(since))
-      command += ` --since ${since}`;
-    if (until && DOCKER_TIMESTAMP_RE.test(until))
-      command += ` --until ${until}`;
-    command += " 2>&1";
-
-    try {
-      const logs = await sessions.run(session, () =>
-        sessions.exec(session, command),
-      );
-      res.json({ success: true, logs });
-    } catch (error) {
-      if (notFound(error)) {
-        return res.status(404).json({
-          success: false,
-          error: "Container not found",
-          code: "CONTAINER_NOT_FOUND",
-        });
-      }
-      log.error("Failed to get container logs", error, {
-        hostId: session.hostId,
-        containerId,
-      });
-      res.status(500).json({
-        success: false,
-        error: getErrorMessage(error, "Failed to get container logs"),
-      });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/docker/containers/{sessionId}/{containerId}/stats:
-   *   get:
-   *     summary: Get container stats
-   *     description: One sample of the container's CPU, memory, network and block IO.
-   *     tags:
-   *       - Docker
-   *     parameters:
-   *       - in: path
-   *         name: sessionId
-   *         required: true
-   *         schema:
-   *           type: string
-   *       - in: path
-   *         name: containerId
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: Container stats.
-   *       400:
-   *         description: SSH session not found or not connected.
-   *       404:
-   *         description: Container not found.
-   *       500:
-   *         description: Failed to get container stats.
-   */
-  router.get("/containers/:sessionId/:containerId/stats", async (req, res) => {
-    const session = sessionOf(req, res);
-    if (!session) return;
-    const { containerId } = req.params;
-    const format = session.isWindows ? STATS_FORMAT_WINDOWS : STATS_FORMAT_UNIX;
-    try {
-      const output = await sessions.run(session, () =>
-        sessions.exec(
-          session,
-          containerCommand(
-            session.runtime,
-            `stats ${containerId} --no-stream --format ${format}`,
-          ),
-        ),
-      );
-      const raw = JSON.parse(output.trim()) as Record<string, string>;
-      const split = (value: string | undefined) => {
-        const [first, second] = (value ?? "").split(" / ");
-        return [first?.trim() || "0B", second?.trim() || "0B"];
-      };
-      const [memoryUsed, memoryLimit] = split(raw.memory);
-      const [netInput, netOutput] = split(raw.netIO);
-      const [blockRead, blockWrite] = split(raw.blockIO);
-      res.json({
-        cpu: raw.cpu,
-        memoryUsed,
-        memoryLimit,
-        memoryPercent: raw.memoryPercent,
-        netInput,
-        netOutput,
-        blockRead,
-        blockWrite,
-        pids: raw.pids,
-      });
-    } catch (error) {
-      if (notFound(error)) {
-        return res.status(404).json({
-          success: false,
-          error: "Container not found",
-          code: "CONTAINER_NOT_FOUND",
-        });
-      }
-      log.error("Failed to get container stats", error, {
-        hostId: session.hostId,
-        containerId,
-      });
-      res.status(500).json({
-        success: false,
-        error: getErrorMessage(error, "Failed to get container stats"),
-      });
-    }
-  });
-}
diff --git a/plugins/docker/src/backend/services.ts b/plugins/docker/src/backend/services.ts
deleted file mode 100644
index 5b6dd266d..000000000
--- a/plugins/docker/src/backend/services.ts
+++ /dev/null
@@ -1,256 +0,0 @@
-import type { Client } from "ssh2";
-import type { PluginContext, PluginSshHost } from "@termix/plugin-sdk/backend";
-import { containerCommand } from "./container-runtime.js";
-import {
-  PS_STATE_FORMAT,
-  diffContainerStates,
-  parseContainerStates,
-  type ContainerState,
-  type DockerEventName,
-} from "./container-state.js";
-import { readDockerHostSettings } from "./host-settings.js";
-import { execOnClient } from "./sessions.js";
-import { listFormat, parseContainerList } from "./routes.js";
-import {
-  CONTAINER_ID_RE,
-  getErrorMessage,
-  type DockerLogger,
-} from "./helpers.js";
-
-export const POOL = "docker";
-const TICK_MS = 15_000;
-const POLL_INTERVAL_MS = 60_000;
-const HOST_CACHE_MS = 5 * 60_000;
-
-export interface DockerContainerSummary {
-  id: string;
-  name: string;
-  image: string;
-  status: string;
-  state: string;
-  ports: string;
-  created: string;
-}
-
-export type DockerContainerAction =
-  "start" | "stop" | "restart" | "pause" | "unpause" | "remove";
-
-const ACTIONS: DockerContainerAction[] = [
-  "start",
-  "stop",
-  "restart",
-  "pause",
-  "unpause",
-  "remove",
-];
-
-/** The "docker.containers" service, version 1. Runs as the caller's user. */
-export interface DockerServiceV1 {
-  listContainers: (
-    hostId: number,
-    options?: { all?: boolean },
-  ) => Promise<DockerContainerSummary[]>;
-  action: (
-    hostId: number,
-    container: string,
-    action: DockerContainerAction,
-  ) => Promise<void>;
-}
-
-export interface DockerEvent {
-  hostId: number;
-  container: string;
-  event: DockerEventName;
-}
-
-/** The "docker.events" service, version 1. Runs as the caller's user. */
-export interface DockerEventsV1 {
-  /**
-   * Calls `listener` for container state changes on a host, polled about
-   * once a minute as the subscribing user. Subscribing the same listener
-   * again is a no-op, so a consumer can re-subscribe on a timer and pick up
-   * a restarted docker plugin. Resolves to an unsubscribe function.
-   */
-  subscribe: (
-    hostId: number,
-    listener: (event: DockerEvent) => void,
-  ) => Promise<() => void>;
-}
-
-function actorOf(ctx: PluginContext): string {
-  const userId = ctx.currentActor();
-  if (!userId) throw new Error("The docker service needs a calling user");
-  return userId;
-}
-
-export function registerServices(ctx: PluginContext, log: DockerLogger): void {
-  const runOnHost = async <T>(
-    hostId: number,
-    command: (runtime: "docker" | "podman") => string,
-    handle: (output: string) => T,
-  ): Promise<T> => {
-    const { runtime } = await readDockerHostSettings(ctx, hostId);
-    const output = await ctx.ssh.withConnection<string, Client>(
-      hostId,
-      { pool: POOL, purpose: "docker", profile: "session" },
-      (client) => execOnClient(client, command(runtime)),
-    );
-    return handle(output);
-  };
-
-  ctx.services.provide<DockerServiceV1>("docker.containers", {
-    listContainers: async (hostId, options) => {
-      actorOf(ctx);
-      const all = options?.all !== false;
-      return runOnHost(
-        hostId,
-        (runtime) =>
-          containerCommand(
-            runtime,
-            `ps ${all ? "-a " : ""}--format ${listFormat(false)}`,
-          ),
-        (output) =>
-          parseContainerList(output) as unknown as DockerContainerSummary[],
-      );
-    },
-    action: async (hostId, container, action) => {
-      actorOf(ctx);
-      if (!CONTAINER_ID_RE.test(container)) {
-        throw new Error("Invalid container name");
-      }
-      if (!ACTIONS.includes(action)) {
-        throw new Error(`Unknown container action: ${action}`);
-      }
-      const args =
-        action === "remove" ? `rm ${container}` : `${action} ${container}`;
-      await runOnHost(
-        hostId,
-        (runtime) => containerCommand(runtime, args),
-        () => undefined,
-      );
-    },
-  });
-
-  interface Watch {
-    userId: string;
-    hostId: number;
-    listeners: Set<(event: DockerEvent) => void>;
-    snapshot?: Map<string, ContainerState>;
-    host?: { value: PluginSshHost; at: number };
-    lastPolledAt: number;
-    failing: boolean;
-  }
-  const watches = new Map<string, Watch>();
-  ctx.disposables.add(() => watches.clear());
-
-  const hostFor = async (watch: Watch): Promise<PluginSshHost | null> => {
-    if (watch.host && Date.now() - watch.host.at < HOST_CACHE_MS) {
-      return watch.host.value;
-    }
-    const host = await ctx.asUser(watch.userId, () =>
-      ctx.ssh.resolveHost(watch.hostId),
-    );
-    watch.host = host ? { value: host, at: Date.now() } : undefined;
-    return host;
-  };
-
-  const pollOne = async (watch: Watch) => {
-    try {
-      const host = await hostFor(watch);
-      if (!host) throw new Error("Host not found");
-      const { runtime } = await readDockerHostSettings(ctx, watch.hostId);
-      const output = await ctx.ssh.withConnection<string, Client>(
-        host,
-        { pool: POOL, purpose: "docker", profile: "session" },
-        (client) =>
-          execOnClient(
-            client,
-            containerCommand(runtime, `ps -a --format ${PS_STATE_FORMAT}`),
-          ),
-      );
-      const current = parseContainerStates(output);
-      const previous = watch.snapshot;
-      watch.snapshot = current;
-      watch.failing = false;
-      if (!previous) return;
-      for (const { container, event } of diffContainerStates(
-        previous,
-        current,
-      )) {
-        for (const listener of [...watch.listeners]) {
-          try {
-            listener({ hostId: watch.hostId, container, event });
-          } catch (error) {
-            log.warn("Docker event listener failed", {
-              hostId: watch.hostId,
-              error: getErrorMessage(error),
-            });
-          }
-        }
-      }
-    } catch (error) {
-      // Docker missing, the host down or the owner's data locked. A later
-      // success is a first observation again rather than a diff.
-      watch.snapshot = undefined;
-      watch.host = undefined;
-      if (!watch.failing) {
-        log.warn("Docker event poll failed", {
-          hostId: watch.hostId,
-          error: getErrorMessage(error),
-        });
-      }
-      watch.failing = true;
-    }
-  };
-
-  ctx.schedule.every(TICK_MS, async () => {
-    const now = Date.now();
-    for (const watch of [...watches.values()]) {
-      if (now - watch.lastPolledAt < POLL_INTERVAL_MS) continue;
-      watch.lastPolledAt = now;
-      await pollOne(watch);
-    }
-  });
-
-  ctx.events.on("host.updated", (payload) => {
-    const { hostId } = payload as { hostId?: number };
-    if (!hostId) return;
-    ctx.ssh.dropPooled(POOL, hostId);
-    for (const watch of watches.values()) {
-      if (watch.hostId === hostId) watch.host = undefined;
-    }
-  });
-  ctx.events.on("host.deleted", (payload) => {
-    const { hostId } = payload as { hostId?: number };
-    if (!hostId) return;
-    for (const [key, watch] of watches) {
-      if (watch.hostId === hostId) watches.delete(key);
-    }
-  });
-
-  ctx.services.provide<DockerEventsV1>("docker.events", {
-    subscribe: async (hostId, listener) => {
-      const userId = actorOf(ctx);
-      const key = `${userId}:${hostId}`;
-      let watch = watches.get(key);
-      if (!watch) {
-        watch = {
-          userId,
-          hostId,
-          listeners: new Set(),
-          lastPolledAt: 0,
-          failing: false,
-        };
-        watches.set(key, watch);
-      }
-      watch.listeners.add(listener);
-      const current = watch;
-      return () => {
-        current.listeners.delete(listener);
-        if (current.listeners.size === 0 && watches.get(key) === current) {
-          watches.delete(key);
-        }
-      };
-    },
-  });
-}
diff --git a/plugins/docker/src/backend/sessions.ts b/plugins/docker/src/backend/sessions.ts
deleted file mode 100644
index 14486731e..000000000
--- a/plugins/docker/src/backend/sessions.ts
+++ /dev/null
@@ -1,183 +0,0 @@
-import type { Client } from "ssh2";
-import type { PluginSchedule } from "@termix/plugin-sdk/backend";
-import type { ContainerRuntime } from "./container-runtime.js";
-import type { DockerLogger } from "./helpers.js";
-
-const SESSION_IDLE_MS = 60 * 60 * 1000;
-const PENDING_SWEEP_MS = 60 * 1000;
-
-/** A live SSH connection behind the Docker panel, owned by one user. */
-export interface DockerSession {
-  id: string;
-  client: Client;
-  dispose: () => void;
-  hostId: number;
-  userId: string;
-  runtime: ContainerRuntime;
-  isWindows: boolean;
-  lastActive: number;
-  activeOperations: number;
-  cancelIdle?: () => void;
-}
-
-/** A connect still waiting on a person (TOTP, a browser sign-in). */
-export interface PendingEntry {
-  userId: string;
-  hostId: number;
-  expiresAt: number;
-  /** Gives up: answers the open prompt with nothing. */
-  cancel: () => void;
-}
-
-export interface DockerSessions {
-  add: (session: DockerSession) => void;
-  /** The session when `userId` owns it. */
-  get: (id: string, userId: string) => DockerSession | undefined;
-  close: (id: string) => void;
-  touch: (session: DockerSession) => void;
-  /** Runs `fn` with the session marked busy, so idle cleanup waits. */
-  run: <T>(session: DockerSession, fn: () => Promise<T>) => Promise<T>;
-  exec: (session: DockerSession, command: string) => Promise<string>;
-  setPending: (id: string, entry: PendingEntry) => void;
-  getPending: (id: string) => PendingEntry | undefined;
-  clearPending: (id: string) => void;
-  closeAll: () => void;
-}
-
-/** Runs one command and resolves stdout, rejecting on a non-zero exit. */
-export function execOnClient(client: Client, command: string): Promise<string> {
-  return new Promise((resolve, reject) => {
-    client.exec(command, (err, stream) => {
-      if (err) return reject(err);
-      let stdout = "";
-      let stderr = "";
-      stream.on("close", (code: number) => {
-        if (code !== 0 && code !== null && code !== undefined) {
-          reject(new Error(stderr || `Command exited with code ${code}`));
-        } else {
-          resolve(stdout);
-        }
-      });
-      stream.on("data", (data: Buffer) => {
-        stdout += data.toString();
-      });
-      stream.stderr.on("data", (data: Buffer) => {
-        stderr += data.toString();
-      });
-      stream.on("error", (streamErr: Error) => reject(streamErr));
-    });
-  });
-}
-
-export function createDockerSessions(
-  schedule: PluginSchedule,
-  log: DockerLogger,
-): DockerSessions {
-  const sessions = new Map<string, DockerSession>();
-  const pending = new Map<string, PendingEntry>();
-
-  const end = (session: DockerSession) => {
-    session.cancelIdle?.();
-    sessions.delete(session.id);
-    session.dispose();
-  };
-
-  const scheduleIdle = (session: DockerSession) => {
-    session.cancelIdle?.();
-    session.cancelIdle = schedule.after(SESSION_IDLE_MS, () => {
-      if (sessions.get(session.id) !== session) return;
-      if (session.activeOperations > 0) {
-        scheduleIdle(session);
-        return;
-      }
-      end(session);
-    });
-  };
-
-  schedule.every(PENDING_SWEEP_MS, () => {
-    const now = Date.now();
-    for (const [id, entry] of pending) {
-      if (now < entry.expiresAt) continue;
-      pending.delete(id);
-      entry.cancel();
-    }
-  });
-
-  return {
-    add: (session) => {
-      const existing = sessions.get(session.id);
-      if (existing) end(existing);
-      sessions.set(session.id, session);
-      session.client.once("close", () => {
-        if (sessions.get(session.id) === session) {
-          session.cancelIdle?.();
-          sessions.delete(session.id);
-        }
-      });
-      scheduleIdle(session);
-    },
-
-    get: (id, userId) => {
-      const session = sessions.get(id);
-      return session && session.userId === userId ? session : undefined;
-    },
-
-    close: (id) => {
-      const session = sessions.get(id);
-      if (session) end(session);
-      const entry = pending.get(id);
-      if (entry) {
-        pending.delete(id);
-        entry.cancel();
-      }
-    },
-
-    touch: (session) => {
-      session.lastActive = Date.now();
-      scheduleIdle(session);
-    },
-
-    run: async (session, fn) => {
-      session.lastActive = Date.now();
-      session.activeOperations++;
-      try {
-        return await fn();
-      } finally {
-        session.activeOperations--;
-      }
-    },
-
-    exec: async (session, command) => {
-      const started = Date.now();
-      try {
-        return await execOnClient(session.client, command);
-      } catch (error) {
-        log.warn("Docker command failed", {
-          hostId: session.hostId,
-          command: command.split(" ")[2],
-          durationMs: Date.now() - started,
-          error: error instanceof Error ? error.message : String(error),
-        });
-        throw error;
-      }
-    },
-
-    setPending: (id, entry) => {
-      const existing = pending.get(id);
-      if (existing) existing.cancel();
-      pending.set(id, entry);
-    },
-
-    getPending: (id) => pending.get(id),
-
-    clearPending: (id) => {
-      pending.delete(id);
-    },
-
-    closeAll: () => {
-      for (const session of [...sessions.values()]) end(session);
-      for (const entry of pending.values()) entry.cancel();
-      pending.clear();
-    },
-  };
-}
diff --git a/plugins/docker/src/frontend/DockerApp.tsx b/plugins/docker/src/frontend/DockerApp.tsx
deleted file mode 100644
index 91cabc614..000000000
--- a/plugins/docker/src/frontend/DockerApp.tsx
+++ /dev/null
@@ -1,53 +0,0 @@
-import { ConnectionScreen, FullScreenAppWrapper } from "@termix/plugin-sdk/ui";
-import React from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { DockerManager } from "./DockerManager.tsx";
-import { toDockerHost, type DockerHostSource } from "./types";
-
-interface DockerAppProps {
-  hostId?: string;
-}
-
-const DockerApp: React.FC<DockerAppProps> = ({ hostId }) => {
-  const { t } = useTranslation();
-  return (
-    <FullScreenAppWrapper hostId={hostId}>
-      {(hostConfig, phase) => {
-        if (phase === "loading") {
-          return (
-            <div className="relative h-full w-full">
-              <ConnectionScreen
-                status="connecting"
-                message={t("hosts.loadingHost")}
-              />
-            </div>
-          );
-        }
-
-        if (!hostConfig) {
-          return (
-            <div className="relative h-full w-full">
-              <ConnectionScreen
-                status="disconnected"
-                message={t("hosts.hostNotFound")}
-              />
-            </div>
-          );
-        }
-
-        return (
-          <DockerManager
-            host={toDockerHost(hostConfig as unknown as DockerHostSource)}
-            title={hostConfig.name || `${hostConfig.username}@${hostConfig.ip}`}
-            isVisible={true}
-            isTopbarOpen={false}
-            embedded={true}
-            onClose={() => {}}
-          />
-        );
-      }}
-    </FullScreenAppWrapper>
-  );
-};
-
-export default DockerApp;
diff --git a/plugins/docker/src/frontend/DockerManager.tsx b/plugins/docker/src/frontend/DockerManager.tsx
deleted file mode 100644
index cdcf1483c..000000000
--- a/plugins/docker/src/frontend/DockerManager.tsx
+++ /dev/null
@@ -1,714 +0,0 @@
-/* eslint-disable react-hooks/exhaustive-deps */
-import React from "react";
-import {
-  AlertCircle,
-  Box,
-  ExternalLink,
-  Grid3X3,
-  List as ListIcon,
-  RefreshCw,
-  Search,
-} from "lucide-react";
-import {
-  useConnectionRetry,
-  useHost,
-  useTranslation,
-  logActivity,
-  usePluginUiPreferences,
-} from "@termix/plugin-sdk/frontend";
-import {
-  Alert,
-  AlertDescription,
-  Button,
-  Card,
-  ConnectionLogProvider,
-  ConnectionScreen,
-  Input,
-  SSHAuthDialog,
-  Select2,
-  Separator,
-  TOTPDialog,
-  BrowserSignInDialog,
-  useAdaptivePolling,
-  useConnectionLog,
-  useTabsSafe,
-} from "@termix/plugin-sdk/ui";
-import { DockerApiError, useDockerApi, type ConnectResult } from "./docker-api";
-import {
-  dockerEnabled,
-  hostTitle,
-  toDockerHost,
-  type DockerContainer,
-  type DockerHost,
-  type DockerValidation,
-} from "./types";
-import { ContainerList } from "./components/ContainerList.tsx";
-import { ContainerTable } from "./components/ContainerTable.tsx";
-import { ContainerDetail } from "./components/ContainerDetail.tsx";
-
-interface DockerManagerProps {
-  host?: DockerHost;
-  title?: string;
-  isVisible?: boolean;
-  isTopbarOpen?: boolean;
-  embedded?: boolean;
-  onClose?: () => void;
-}
-
-interface PromptState {
-  kind: "totp" | "browser";
-  sessionId: string;
-  prompt?: string;
-  isPassword?: boolean;
-  url?: string;
-  code?: string;
-  label?: string;
-}
-
-function newSessionId(): string {
-  return `docker-${Date.now()}-${Math.random().toString(36).slice(2, 11)}`;
-}
-
-function DockerManagerInner({
-  host,
-  title,
-  isVisible = true,
-  isTopbarOpen = true,
-  embedded = false,
-  onClose,
-}: DockerManagerProps): React.ReactElement {
-  const { t } = useTranslation();
-  const docker = useDockerApi();
-  const { addLog, setLogs, clearLogs } = useConnectionLog();
-  const { currentTab, removeTab } = useTabsSafe();
-  const { values: dockerPrefs, set: setDockerPref } = usePluginUiPreferences<{
-    viewMode: "list" | "detail";
-    containerLayout: "card" | "table";
-  }>();
-
-  // The shell's host list keeps the host current after an edit; a
-  // standalone window has no shell, so it keeps the host it was given.
-  const liveRecord = useHost(host?.id);
-  const currentHost = React.useMemo(
-    () => (liveRecord ? toDockerHost(liveRecord) : host),
-    [liveRecord, host],
-  );
-  const enabled = dockerEnabled(currentHost);
-
-  const [sessionId, setSessionId] = React.useState<string | null>(null);
-  const [containers, setContainers] = React.useState<DockerContainer[]>([]);
-  const containersSignatureRef = React.useRef("");
-  const [selectedContainer, setSelectedContainer] = React.useState<
-    string | null
-  >(null);
-  const [detailInitialTab, setDetailInitialTab] = React.useState<
-    "logs" | "stats" | "console"
-  >("logs");
-  const [containerLayout, setContainerLayout] = React.useState<
-    "card" | "table"
-  >(dockerPrefs.containerLayout);
-
-  const handleSetContainerLayout = React.useCallback(
-    (layout: "card" | "table") => {
-      setContainerLayout(layout);
-      setDockerPref("containerLayout", layout);
-    },
-    [setDockerPref],
-  );
-  const [isConnecting, setIsConnecting] = React.useState(false);
-  const [dockerValidation, setDockerValidation] =
-    React.useState<DockerValidation | null>(null);
-  const [isValidating, setIsValidating] = React.useState(false);
-  // Initial view follows the interface preset; switching it afterwards is a
-  // per-session choice.
-  const [viewMode, setViewMode] = React.useState<"list" | "detail">(
-    dockerPrefs.viewMode,
-  );
-  const [isLoadingContainers, setIsLoadingContainers] = React.useState(false);
-  const [hasLoadedContainersOnce, setHasLoadedContainersOnce] =
-    React.useState(false);
-  const [prompt, setPrompt] = React.useState<PromptState | null>(null);
-  const [showAuthDialog, setShowAuthDialog] = React.useState(false);
-  const [authReason, setAuthReason] = React.useState<
-    "no_keyboard" | "auth_failed" | "timeout"
-  >("no_keyboard");
-  const [search, setSearch] = React.useState("");
-  const [statusFilter, setStatusFilter] = React.useState("all");
-  const [retryCount, setRetryCount] = React.useState(0);
-
-  const activityLoggedRef = React.useRef(false);
-
-  const logDockerActivity = () => {
-    if (!currentHost?.id || activityLoggedRef.current) return;
-    activityLoggedRef.current = true;
-    logActivity("docker", currentHost.id, hostTitle(currentHost)).catch(() => {
-      activityLoggedRef.current = false;
-    });
-  };
-
-  React.useEffect(() => {
-    setContainers([]);
-    setSelectedContainer(null);
-    setSessionId(null);
-    setDockerValidation(null);
-    setViewMode("list");
-  }, [host?.id]);
-
-  const retryRef = React.useRef<ReturnType<typeof useConnectionRetry> | null>(
-    null,
-  );
-
-  const validate = async (sid: string, clearAfter: boolean) => {
-    setSessionId(sid);
-    setIsValidating(true);
-    try {
-      const validation = await docker.validate(sid);
-      setDockerValidation(validation);
-      if (!validation.available) {
-        addLog({
-          type: "error",
-          stage: "validation",
-          message: validation.error || t("docker.error"),
-          details: validation.code
-            ? `Error code: ${validation.code}`
-            : undefined,
-        });
-        retryRef.current?.markFailed();
-      } else {
-        logDockerActivity();
-        if (clearAfter) setTimeout(() => clearLogs(), 1000);
-        retryRef.current?.markConnected();
-      }
-    } finally {
-      setIsValidating(false);
-    }
-  };
-
-  /** Acts on one step of a connect, whichever request it answered. */
-  const applyConnectResult = async (
-    sid: string,
-    result: ConnectResult,
-    clearAfter: boolean,
-  ) => {
-    if (result.connectionLogs) setLogs(result.connectionLogs);
-
-    if (result.requires_browser_sign_in) {
-      setPrompt({
-        kind: "browser",
-        sessionId: sid,
-        url: result.url || "",
-        code: result.code || "",
-        label: result.label || "",
-      });
-      return;
-    }
-    if (result.requires_totp) {
-      if (result.retry) {
-        addLog({
-          type: "error",
-          stage: "auth",
-          message: t("docker.totpVerificationFailed"),
-        });
-      }
-      setPrompt({
-        kind: "totp",
-        sessionId: sid,
-        prompt: result.prompt || t("docker.verificationCodePrompt"),
-        isPassword: result.isPassword,
-      });
-      return;
-    }
-    if (result.status === "auth_required") {
-      setAuthReason(
-        result.reason === "no_keyboard" ? "no_keyboard" : "auth_failed",
-      );
-      setShowAuthDialog(true);
-      return;
-    }
-    setPrompt(null);
-    await validate(sid, clearAfter);
-  };
-
-  const reportFailure = (error: unknown, fallback: string) => {
-    if (error instanceof DockerApiError && error.connectionLogs?.length) {
-      setLogs(error.connectionLogs);
-    } else {
-      addLog({
-        type: "error",
-        stage: "connection",
-        message: error instanceof Error ? error.message : fallback,
-      });
-    }
-    retryRef.current?.markFailed();
-  };
-
-  const connect = async (credentials?: {
-    userProvidedPassword?: string;
-    userProvidedSshKey?: string;
-    userProvidedKeyPassword?: string;
-  }) => {
-    if (!currentHost?.id) return;
-    const sid = newSessionId();
-    setIsConnecting(true);
-    try {
-      const result = await docker.connect(sid, currentHost.id, credentials);
-      await applyConnectResult(sid, result, !credentials);
-    } catch (error) {
-      reportFailure(error, t("docker.connectionFailed"));
-    } finally {
-      setIsConnecting(false);
-    }
-  };
-
-  const initializingRef = React.useRef(false);
-
-  React.useEffect(() => {
-    if (!currentHost?.id || !enabled) return;
-    if (initializingRef.current || sessionId) return;
-    initializingRef.current = true;
-    clearLogs();
-    void connect();
-
-    return () => {
-      initializingRef.current = false;
-    };
-  }, [currentHost?.id, enabled, retryCount]);
-
-  React.useEffect(() => {
-    if (!sessionId) return;
-    return () => {
-      docker.disconnect(sessionId).catch(() => {});
-    };
-  }, [sessionId]);
-
-  React.useEffect(() => {
-    if (!sessionId || !isVisible) return;
-    const keepalive = setInterval(
-      () => {
-        docker.keepalive(sessionId).catch(() => {});
-      },
-      10 * 60 * 1000,
-    );
-    return () => clearInterval(keepalive);
-  }, [sessionId, isVisible]);
-
-  const refreshContainers = React.useCallback(async () => {
-    if (!sessionId) return;
-    try {
-      setContainers(await docker.listContainers(sessionId, true));
-    } catch {
-      // the next poll tries again
-    }
-  }, [sessionId, docker]);
-
-  React.useEffect(() => {
-    setHasLoadedContainersOnce(false);
-  }, [sessionId]);
-
-  useAdaptivePolling(
-    async () => {
-      if (!sessionId) return;
-      setIsLoadingContainers((loading) =>
-        hasLoadedContainersOnce ? loading : true,
-      );
-      const data = await docker.listContainers(sessionId, true);
-      const signature = JSON.stringify(data);
-      const changed = signature !== containersSignatureRef.current;
-      containersSignatureRef.current = signature;
-      setContainers(data);
-      setIsLoadingContainers(false);
-      setHasLoadedContainersOnce(true);
-      return changed;
-    },
-    {
-      minIntervalMs: 5000,
-      maxIntervalMs: 30000,
-      stablePollsPerStep: 3,
-    },
-    !!sessionId && isVisible && !!dockerValidation?.available,
-    {
-      onError: () => {
-        setIsLoadingContainers(false);
-        setHasLoadedContainersOnce(true);
-      },
-    },
-  );
-
-  const handleBack = React.useCallback(() => {
-    setViewMode("list");
-    setSelectedContainer(null);
-  }, []);
-
-  const closeTab = () => {
-    if (currentTab !== null) removeTab(currentTab);
-  };
-
-  const handleTotpSubmit = async (code: string) => {
-    if (!prompt || prompt.kind !== "totp" || !code) return;
-    const sid = prompt.sessionId;
-    setPrompt(null);
-    setIsConnecting(true);
-    try {
-      await applyConnectResult(sid, await docker.answerTotp(sid, code), false);
-    } catch (error) {
-      reportFailure(error, t("docker.totpVerificationFailed"));
-    } finally {
-      setIsConnecting(false);
-    }
-  };
-
-  const handleBrowserSignInContinue = async () => {
-    if (!prompt || prompt.kind !== "browser") return;
-    const sid = prompt.sessionId;
-    setPrompt(null);
-    setIsConnecting(true);
-    try {
-      await applyConnectResult(
-        sid,
-        await docker.continueBrowserSignIn(sid),
-        false,
-      );
-    } catch (error) {
-      reportFailure(error, t("docker.browserSignInFailed"));
-    } finally {
-      setIsConnecting(false);
-    }
-  };
-
-  const handlePromptCancel = () => {
-    const sid = prompt?.sessionId;
-    setPrompt(null);
-    setIsConnecting(false);
-    if (sid) docker.disconnect(sid).catch(() => {});
-    closeTab();
-  };
-
-  const handleBrowserSignInOpenUrl = () => {
-    if (prompt?.url) window.open(prompt.url, "_blank", "noopener,noreferrer");
-  };
-
-  const handleAuthSubmit = async (credentials: {
-    password?: string;
-    sshKey?: string;
-    keyPassword?: string;
-  }) => {
-    setShowAuthDialog(false);
-    await connect({
-      userProvidedPassword: credentials.password,
-      userProvidedSshKey: credentials.sshKey,
-      userProvidedKeyPassword: credentials.keyPassword,
-    });
-  };
-
-  const handleAuthCancel = () => {
-    setShowAuthDialog(false);
-    setIsConnecting(false);
-    onClose?.();
-  };
-
-  const handleRetry = () => {
-    initializingRef.current = false;
-    setSessionId(null);
-    setDockerValidation(null);
-    clearLogs();
-    setRetryCount((c) => c + 1);
-  };
-
-  const dockerConnectRetry = useConnectionRetry({
-    connect: () => {
-      handleRetry();
-    },
-    enabled: enabled && !prompt && !showAuthDialog,
-    autoStart: false,
-  });
-  retryRef.current = dockerConnectRetry;
-
-  const topMarginPx = isTopbarOpen ? 74 : 16;
-  const leftMarginPx = 8;
-  const bottomMarginPx = 8;
-
-  const wrapperStyle: React.CSSProperties = embedded
-    ? { opacity: isVisible ? 1 : 0, height: "100%", width: "100%" }
-    : {
-        opacity: isVisible ? 1 : 0,
-        marginLeft: leftMarginPx,
-        marginRight: 17,
-        marginTop: topMarginPx,
-        marginBottom: bottomMarginPx,
-        height: `calc(100vh - ${topMarginPx + bottomMarginPx}px)`,
-      };
-
-  const containerClass = embedded
-    ? "h-full w-full text-foreground overflow-hidden bg-transparent"
-    : "bg-canvas text-foreground border-2 border-edge overflow-hidden";
-
-  if (!enabled) {
-    return (
-      <div style={wrapperStyle} className={`${containerClass} relative`}>
-        <div className="h-full w-full flex flex-col flex-1 min-h-0 overflow-hidden">
-          <div className="flex-1 overflow-y-auto px-3 py-3 flex flex-col gap-3">
-            <Card className="flex-row items-center justify-between px-3 py-3 shrink-0 gap-0">
-              <div className="flex items-center gap-3">
-                <div className="size-10 border border-border bg-muted flex items-center justify-center shrink-0">
-                  <Box className="size-5 text-accent-brand" />
-                </div>
-                <div>
-                  <h1 className="text-2xl font-bold">{title}</h1>
-                  <span className="text-xs text-muted-foreground uppercase tracking-widest font-semibold">
-                    {t("docker.manager")}
-                  </span>
-                </div>
-              </div>
-            </Card>
-            <Alert variant="destructive">
-              <AlertCircle className="h-4 w-4" />
-              <AlertDescription>{t("docker.notEnabled")}</AlertDescription>
-            </Alert>
-          </div>
-        </div>
-      </div>
-    );
-  }
-
-  const dialogs = (
-    <>
-      <TOTPDialog
-        isOpen={prompt?.kind === "totp"}
-        prompt={prompt?.prompt ?? ""}
-        mode={prompt?.isPassword ? "password" : "totp"}
-        onSubmit={handleTotpSubmit}
-        onCancel={handlePromptCancel}
-      />
-      <BrowserSignInDialog
-        isOpen={prompt?.kind === "browser"}
-        label={prompt?.label ?? ""}
-        url={prompt?.url ?? ""}
-        code={prompt?.code ?? ""}
-        onContinue={handleBrowserSignInContinue}
-        onCancel={handlePromptCancel}
-        onOpenUrl={handleBrowserSignInOpenUrl}
-      />
-      {currentHost && (
-        <SSHAuthDialog
-          isOpen={showAuthDialog}
-          reason={authReason}
-          onSubmit={handleAuthSubmit}
-          onCancel={handleAuthCancel}
-          hostInfo={{
-            ip: currentHost.ip,
-            port: currentHost.port,
-            username: currentHost.username ?? "",
-            name: currentHost.name,
-          }}
-        />
-      )}
-    </>
-  );
-
-  if (isConnecting || isValidating) {
-    return (
-      <div style={wrapperStyle} className={`${containerClass} relative`}>
-        <ConnectionScreen
-          status={dockerConnectRetry.status}
-          message={
-            isValidating ? t("docker.validating") : t("docker.connecting")
-          }
-          attempt={dockerConnectRetry.attempt}
-          maxAttempts={dockerConnectRetry.maxAttempts}
-          nextRetryInMs={dockerConnectRetry.nextRetryInMs}
-          onManualRetry={dockerConnectRetry.retryNow}
-        />
-        {dialogs}
-      </div>
-    );
-  }
-
-  if (dockerValidation && !dockerValidation.available) {
-    return (
-      <div style={wrapperStyle} className={`${containerClass} relative`}>
-        <ConnectionScreen
-          status={dockerConnectRetry.status}
-          message={t("docker.connectionFailed")}
-          attempt={dockerConnectRetry.attempt}
-          maxAttempts={dockerConnectRetry.maxAttempts}
-          nextRetryInMs={dockerConnectRetry.nextRetryInMs}
-          onManualRetry={dockerConnectRetry.retryNow}
-          retryLabel={t("terminal.retry")}
-          logPosition="top"
-        />
-      </div>
-    );
-  }
-
-  return (
-    <div style={wrapperStyle} className={`${containerClass} relative`}>
-      <div className="h-full w-full flex flex-col flex-1 min-h-0 overflow-hidden">
-        {viewMode === "detail" &&
-        sessionId &&
-        selectedContainer &&
-        currentHost ? (
-          <ContainerDetail
-            sessionId={sessionId}
-            containerId={selectedContainer}
-            containers={containers}
-            hostConfig={currentHost}
-            onBack={handleBack}
-            initialTab={detailInitialTab}
-          />
-        ) : (
-          <div className="flex-1 overflow-y-auto px-3 py-3 flex flex-col gap-3">
-            <Card className="flex-row items-center justify-between px-3 py-3 shrink-0 gap-0">
-              <div className="flex items-center gap-3">
-                <div className="size-10 border border-border bg-muted flex items-center justify-center shrink-0">
-                  <Box className="size-5 text-accent-brand" />
-                </div>
-                <div>
-                  <h1 className="text-2xl font-bold">{title}</h1>
-                  <div className="flex items-center gap-2">
-                    <span className="size-2 rounded-full bg-accent-brand" />
-                    <span className="text-xs text-muted-foreground uppercase tracking-widest font-semibold">
-                      {dockerValidation?.version
-                        ? t("docker.version", {
-                            runtime:
-                              dockerValidation.runtime === "podman"
-                                ? "Podman"
-                                : "Docker",
-                            version: dockerValidation.version,
-                          })
-                        : t("docker.manager")}
-                    </span>
-                  </div>
-                </div>
-              </div>
-              <div className="flex items-center gap-2">
-                <div className="relative w-56">
-                  <Search className="absolute left-2.5 top-1/2 -translate-y-1/2 size-3.5 text-muted-foreground" />
-                  <Input
-                    placeholder={t("docker.searchPlaceholder")}
-                    value={search}
-                    onChange={(e) => setSearch(e.target.value)}
-                    className="pl-8 h-8"
-                  />
-                </div>
-                <Select2
-                  value={statusFilter}
-                  onChange={(e) => setStatusFilter(e.target.value)}
-                  className="h-8 px-2 text-xs bg-background border border-border text-foreground outline-none focus:ring-1 focus:ring-ring"
-                >
-                  <option value="all">{t("docker.allStatuses")}</option>
-                  <option value="running">{t("docker.stateRunning")}</option>
-                  <option value="paused">{t("docker.statePaused")}</option>
-                  <option value="exited">{t("docker.stateExited")}</option>
-                  <option value="restarting">
-                    {t("docker.stateRestarting")}
-                  </option>
-                </Select2>
-                <Separator orientation="vertical" className="h-8 mx-1" />
-                <div className="flex items-center border border-border overflow-hidden">
-                  <Button
-                    variant={containerLayout === "card" ? "secondary" : "ghost"}
-                    size="icon"
-                    onClick={() => handleSetContainerLayout("card")}
-                    className={`size-8 rounded-none ${containerLayout === "card" ? "bg-accent-brand/10 text-accent-brand" : ""}`}
-                    title={t("docker.cardView")}
-                  >
-                    <Grid3X3 className="size-4" />
-                  </Button>
-                  <Button
-                    variant={
-                      containerLayout === "table" ? "secondary" : "ghost"
-                    }
-                    size="icon"
-                    onClick={() => handleSetContainerLayout("table")}
-                    className={`size-8 rounded-none border-l border-border ${containerLayout === "table" ? "bg-accent-brand/10 text-accent-brand" : ""}`}
-                    title={t("docker.listView")}
-                  >
-                    <ListIcon className="size-4" />
-                  </Button>
-                </div>
-                <Separator orientation="vertical" className="h-8 mx-1" />
-                <Button
-                  variant="ghost"
-                  size="icon"
-                  onClick={refreshContainers}
-                  disabled={isLoadingContainers}
-                >
-                  <RefreshCw
-                    className={`size-4 text-accent-brand ${isLoadingContainers ? "animate-spin" : ""}`}
-                  />
-                </Button>
-                <a
-                  href="https://docs.termix.site/features/networking/docker"
-                  target="_blank"
-                  rel="noreferrer"
-                  className="flex items-center justify-center size-9 text-muted-foreground hover:text-foreground transition-colors"
-                  title={t("hosts.docsLink")}
-                >
-                  <ExternalLink className="size-4" />
-                </a>
-              </div>
-            </Card>
-
-            {sessionId ? (
-              !hasLoadedContainersOnce ? (
-                <div className="flex flex-col items-center justify-center h-full opacity-40 py-20">
-                  <RefreshCw className="size-8 animate-spin mb-4" />
-                  <span className="text-sm font-semibold">
-                    {t("docker.loadingContainers")}
-                  </span>
-                </div>
-              ) : containerLayout === "table" ? (
-                <ContainerTable
-                  containers={containers}
-                  sessionId={sessionId}
-                  onSelectContainer={(id, tab) => {
-                    setSelectedContainer(id);
-                    setDetailInitialTab(tab ?? "logs");
-                    setViewMode("detail");
-                  }}
-                  selectedContainerId={selectedContainer}
-                  onRefresh={refreshContainers}
-                  search={search}
-                  statusFilter={statusFilter}
-                />
-              ) : (
-                <ContainerList
-                  containers={containers}
-                  sessionId={sessionId}
-                  onSelectContainer={(id) => {
-                    setSelectedContainer(id);
-                    setDetailInitialTab("logs");
-                    setViewMode("detail");
-                  }}
-                  selectedContainerId={selectedContainer}
-                  onRefresh={refreshContainers}
-                  search={search}
-                  statusFilter={statusFilter}
-                />
-              )
-            ) : null}
-          </div>
-        )}
-      </div>
-      {dialogs}
-      <ConnectionScreen
-        status={dockerConnectRetry.status}
-        message={t("docker.connecting")}
-        attempt={dockerConnectRetry.attempt}
-        maxAttempts={dockerConnectRetry.maxAttempts}
-        nextRetryInMs={dockerConnectRetry.nextRetryInMs}
-        onManualRetry={dockerConnectRetry.retryNow}
-        retryLabel={t("terminal.retry")}
-        logPosition="top"
-      />
-    </div>
-  );
-}
-
-export function DockerManager(props: DockerManagerProps): React.ReactElement {
-  return (
-    <ConnectionLogProvider>
-      <DockerManagerInner {...props} />
-    </ConnectionLogProvider>
-  );
-}
diff --git a/plugins/docker/src/frontend/DockerWidget.tsx b/plugins/docker/src/frontend/DockerWidget.tsx
deleted file mode 100644
index eeb112027..000000000
--- a/plugins/docker/src/frontend/DockerWidget.tsx
+++ /dev/null
@@ -1,61 +0,0 @@
-import { Box } from "lucide-react";
-import { useHost, useTranslation } from "@termix/plugin-sdk/frontend";
-import { WidgetTitle } from "@termix/plugin-sdk/ui";
-import { DockerWidgetEditForm } from "./DockerWidgetEditForm";
-import { DockerManager } from "./DockerManager";
-import {
-  GRID_SIZE,
-  type DockerWidgetConfig,
-  type WidgetComponentProps,
-  type WidgetDefinition,
-} from "./homepage";
-import { dockerEnabled, hostTitle, toDockerHost } from "./types";
-
-function DockerWidget({
-  widget,
-  config,
-}: WidgetComponentProps<DockerWidgetConfig>) {
-  const { t } = useTranslation();
-  const record = useHost(config.hostId || undefined);
-
-  if (!config.hostId || !record || !dockerEnabled(record)) {
-    return (
-      <div className="flex flex-col items-center justify-center w-full h-full gap-2 text-muted-foreground/60">
-        <Box size={20} />
-        <span className="text-xs">{t("common.noHostConfigured")}</span>
-      </div>
-    );
-  }
-
-  const host = toDockerHost(record);
-  return (
-    <div className="flex flex-col w-full h-full overflow-hidden">
-      <WidgetTitle title={widget.title} icon={<Box size={11} />} />
-      <div
-        className="flex-1 overflow-hidden"
-        onMouseDown={(e) => e.stopPropagation()}
-      >
-        <DockerManager
-          host={host}
-          title={hostTitle(host)}
-          isVisible={true}
-          isTopbarOpen={false}
-          embedded={true}
-        />
-      </div>
-    </div>
-  );
-}
-
-/** Registered by the plugin while it runs. */
-export const dockerWidget: WidgetDefinition<DockerWidgetConfig> = {
-  id: "docker_widget",
-  name: "Docker Manager",
-  description: "Embedded Docker container manager for a configured host",
-  category: "system",
-  icon: <Box size={14} />,
-  defaultConfig: { hostId: 0 },
-  defaultSize: { w: GRID_SIZE * 20, h: GRID_SIZE * 14 },
-  minSize: { w: GRID_SIZE * 10, h: GRID_SIZE * 8 },
-  components: { view: DockerWidget, editForm: DockerWidgetEditForm },
-};
diff --git a/plugins/docker/src/frontend/DockerWidgetEditForm.tsx b/plugins/docker/src/frontend/DockerWidgetEditForm.tsx
deleted file mode 100644
index 13000a3df..000000000
--- a/plugins/docker/src/frontend/DockerWidgetEditForm.tsx
+++ /dev/null
@@ -1,37 +0,0 @@
-import { useHosts, useTranslation } from "@termix/plugin-sdk/frontend";
-import { Select2 } from "@termix/plugin-sdk/ui";
-import type { DockerWidgetConfig, WidgetEditFormProps } from "./homepage";
-import { dockerEnabled } from "./types";
-
-export function DockerWidgetEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<DockerWidgetConfig>) {
-  const { t } = useTranslation();
-  const { hosts } = useHosts();
-  const options = hosts.filter(
-    (host) => host.enableSsh !== false && dockerEnabled(host),
-  );
-
-  return (
-    <div className="flex flex-col gap-1">
-      <label className="text-xs font-medium text-muted-foreground">
-        {t("common.host")}
-      </label>
-      <Select2
-        value={config.hostId || ""}
-        onChange={(e) =>
-          onChange({ ...config, hostId: Number(e.target.value) })
-        }
-        className="h-8 text-xs border border-border bg-background px-2"
-      >
-        <option value="">{t("common.selectHost")}</option>
-        {options.map((host) => (
-          <option key={host.id} value={host.id}>
-            {host.name || host.ip}
-          </option>
-        ))}
-      </Select2>
-    </div>
-  );
-}
diff --git a/plugins/docker/src/frontend/components/ConsoleTerminal.tsx b/plugins/docker/src/frontend/components/ConsoleTerminal.tsx
deleted file mode 100644
index a2e880237..000000000
--- a/plugins/docker/src/frontend/components/ConsoleTerminal.tsx
+++ /dev/null
@@ -1,601 +0,0 @@
-import { getErrorMessage } from "../error-message";
-import {
-  Button,
-  Card,
-  CardContent,
-  ConnectionLogProvider,
-  ConnectionScreen,
-  RobustClipboardProvider,
-  Select2,
-  copyToClipboard,
-  isElectron,
-  pluginWsUrl,
-  readFromClipboard,
-  resolveConnectionOrigin,
-  useAppTheme as useTheme,
-  useConnectionLog,
-} from "@termix/plugin-sdk/ui";
-import type { DockerHost } from "../types";
-import { useConsoleLook, type ConsoleLook } from "./console-look";
-import React from "react";
-import { useXTerm } from "react-xtermjs";
-import { FitAddon } from "@xterm/addon-fit";
-import { ClipboardAddon } from "@xterm/addon-clipboard";
-import { WebLinksAddon } from "@xterm/addon-web-links";
-import { Terminal as TerminalIcon, Power, PowerOff } from "lucide-react";
-import { toast } from "sonner";
-import {
-  useTranslation,
-  useConnectionRetry,
-} from "@termix/plugin-sdk/frontend";
-
-function applyConsoleLook(
-  terminal: NonNullable<ReturnType<typeof useXTerm>["instance"]>,
-  look: ConsoleLook,
-): void {
-  terminal.options.cursorBlink = look.cursorBlink;
-  terminal.options.cursorStyle = look.cursorStyle;
-  terminal.options.fontSize = look.fontSize;
-  terminal.options.fontFamily = look.fontFamily;
-  terminal.options.scrollback = look.scrollback;
-  terminal.options.letterSpacing = look.letterSpacing;
-  terminal.options.lineHeight = look.lineHeight;
-  terminal.options.theme = { ...look.colors };
-}
-
-interface ConsoleTerminalProps {
-  containerId: string;
-  containerName: string;
-  containerState: string;
-  hostConfig: DockerHost;
-}
-
-export function ConsoleTerminal(
-  props: ConsoleTerminalProps,
-): React.ReactElement {
-  return (
-    <ConnectionLogProvider>
-      <ConsoleTerminalInner {...props} />
-    </ConnectionLogProvider>
-  );
-}
-
-function ConsoleTerminalInner({
-  containerId,
-  containerName,
-  containerState,
-  hostConfig,
-}: ConsoleTerminalProps): React.ReactElement {
-  const { t } = useTranslation();
-  const { theme: appTheme } = useTheme();
-  const { instance: terminal, ref: xtermRef } = useXTerm();
-  const { addLog, clearLogs } = useConnectionLog();
-
-  // The SSH terminal's look on this host, or plain colors while it is off.
-  const look = useConsoleLook(
-    hostConfig as unknown as Parameters<typeof useConsoleLook>[0],
-    appTheme,
-  );
-  const themeColors = look.colors;
-  const lookRef = React.useRef<ConsoleLook>(look);
-  lookRef.current = look;
-
-  const [isConnected, setIsConnected] = React.useState(false);
-  const [isConnecting, setIsConnecting] = React.useState(false);
-  const [selectedShell, setSelectedShell] = React.useState<string>("bash");
-  const wsRef = React.useRef<WebSocket | null>(null);
-  const fitAddonRef = React.useRef<FitAddon | null>(null);
-  const pingIntervalRef = React.useRef<NodeJS.Timeout | null>(null);
-
-  React.useEffect(() => {
-    if (!terminal) return;
-
-    const fitAddon = new FitAddon();
-    const clipboardProvider = new RobustClipboardProvider();
-    const clipboardAddon = new ClipboardAddon(undefined, clipboardProvider);
-    const webLinksAddon = new WebLinksAddon();
-
-    fitAddonRef.current = fitAddon;
-
-    terminal.loadAddon(fitAddon);
-    terminal.loadAddon(clipboardAddon);
-    terminal.loadAddon(webLinksAddon);
-
-    applyConsoleLook(terminal, lookRef.current);
-
-    const readTextFromClipboard = async (): Promise<string> => {
-      return readFromClipboard();
-    };
-
-    const writeTextToClipboard = async (text: string): Promise<void> => {
-      await copyToClipboard(text);
-    };
-
-    terminal.attachCustomKeyEventHandler((e: KeyboardEvent): boolean => {
-      if (e.type !== "keydown") return true;
-
-      if (
-        ((e.ctrlKey && !e.shiftKey && !e.altKey && !e.metaKey) ||
-          (e.metaKey && !e.shiftKey && !e.ctrlKey && !e.altKey)) &&
-        e.key.toLowerCase() === "v"
-      ) {
-        e.preventDefault();
-        e.stopPropagation();
-        readTextFromClipboard()
-          .then((text) => {
-            if (text) terminal.paste(text);
-          })
-          .catch(() => {
-            toast.error(t("terminal.clipboardReadFailed"));
-          });
-        return false;
-      }
-
-      if (
-        e.ctrlKey &&
-        !e.shiftKey &&
-        !e.altKey &&
-        !e.metaKey &&
-        e.key.toLowerCase() === "c" &&
-        terminal.hasSelection()
-      ) {
-        e.preventDefault();
-        e.stopPropagation();
-        const selection = terminal.getSelection();
-        if (selection) {
-          writeTextToClipboard(selection).catch(() => {
-            toast.error(t("terminal.clipboardWriteFailed"));
-          });
-          terminal.clearSelection();
-        }
-        return false;
-      }
-
-      if (
-        e.ctrlKey &&
-        !e.shiftKey &&
-        !e.altKey &&
-        !e.metaKey &&
-        e.key === "Insert" &&
-        terminal.hasSelection()
-      ) {
-        e.preventDefault();
-        e.stopPropagation();
-        const selection = terminal.getSelection();
-        if (selection) {
-          writeTextToClipboard(selection).catch(() => {
-            toast.error(t("terminal.clipboardWriteFailed"));
-          });
-        }
-        return false;
-      }
-
-      if (
-        e.shiftKey &&
-        !e.ctrlKey &&
-        !e.altKey &&
-        !e.metaKey &&
-        e.key === "Insert"
-      ) {
-        e.preventDefault();
-        e.stopPropagation();
-        readTextFromClipboard()
-          .then((text) => {
-            if (text) terminal.paste(text);
-          })
-          .catch(() => {
-            toast.error(t("terminal.clipboardReadFailed"));
-          });
-        return false;
-      }
-
-      return true;
-    });
-
-    setTimeout(() => {
-      fitAddon.fit();
-    }, 100);
-
-    const resizeHandler = () => {
-      if (fitAddonRef.current) {
-        fitAddonRef.current.fit();
-
-        if (wsRef.current && wsRef.current.readyState === WebSocket.OPEN) {
-          const { rows, cols } = terminal;
-          wsRef.current.send(
-            JSON.stringify({
-              type: "resize",
-              data: { rows, cols },
-            }),
-          );
-        }
-      }
-    };
-
-    window.addEventListener("resize", resizeHandler);
-
-    return () => {
-      window.removeEventListener("resize", resizeHandler);
-      clipboardProvider.dispose();
-
-      if (wsRef.current) {
-        try {
-          wsRef.current.send(JSON.stringify({ type: "disconnect" }));
-        } catch {
-          // Best-effort disconnect during cleanup.
-        }
-        wsRef.current.close();
-        wsRef.current = null;
-      }
-
-      terminal.dispose();
-    };
-  }, [terminal, t]);
-
-  React.useEffect(() => {
-    if (!terminal) return;
-    applyConsoleLook(terminal, look);
-    fitAddonRef.current?.fit();
-  }, [terminal, look]);
-
-  const disconnect = React.useCallback(() => {
-    if (wsRef.current) {
-      try {
-        wsRef.current.send(JSON.stringify({ type: "disconnect" }));
-      } catch {
-        // Best-effort disconnect.
-      }
-      wsRef.current.close();
-      wsRef.current = null;
-    }
-    setIsConnected(false);
-    retryRef.current.reset();
-    clearLogs();
-    if (terminal) {
-      try {
-        terminal.clear();
-      } catch {
-        // Terminal clear can fail after disposal.
-      }
-    }
-  }, [terminal, clearLogs]);
-
-  const connect = React.useCallback(async () => {
-    if (!terminal || containerState !== "running") {
-      toast.error(t("docker.containerMustBeRunning"));
-      return;
-    }
-
-    setIsConnecting(true);
-    addLog({
-      type: "info",
-      stage: "docker_connecting",
-      message: t("docker.connectingTo", { containerName }),
-    });
-
-    try {
-      if (fitAddonRef.current) {
-        fitAddonRef.current.fit();
-      }
-
-      const isElectronApp = isElectron();
-
-      const origin = isElectronApp
-        ? await resolveConnectionOrigin({
-            connectionOrigin: hostConfig.connectionOrigin,
-          })
-        : "local";
-
-      const resolvedUrl = await pluginWsUrl("docker", "/console", { origin });
-      if (!resolvedUrl) {
-        setIsConnecting(false);
-        toast.error(t("errors.remoteServerRequired"));
-        return;
-      }
-
-      const ws = new WebSocket(resolvedUrl.url, resolvedUrl.protocols);
-
-      ws.onopen = () => {
-        const cols = terminal.cols || 80;
-        const rows = terminal.rows || 24;
-
-        ws.send(
-          JSON.stringify({
-            type: "connect",
-            data: {
-              hostConfig: {
-                id: hostConfig.id,
-                syncId: hostConfig.syncId ?? null,
-                ip: hostConfig.ip,
-              },
-              containerId,
-              shell: selectedShell,
-              cols,
-              rows,
-            },
-          }),
-        );
-      };
-
-      ws.onmessage = (event) => {
-        try {
-          const msg = JSON.parse(event.data);
-
-          switch (msg.type) {
-            case "output":
-              terminal.write(msg.data);
-              break;
-
-            case "connected":
-              setIsConnected(true);
-              setIsConnecting(false);
-              retryRef.current.markConnected();
-
-              if (msg.data?.shellChanged) {
-                toast.warning(
-                  `Shell "${msg.data.requestedShell}" not available. Using "${msg.data.shell}" instead.`,
-                );
-              } else {
-                toast.success(t("docker.connectedTo", { containerName }));
-              }
-
-              setTimeout(() => {
-                if (fitAddonRef.current) {
-                  fitAddonRef.current.fit();
-                }
-
-                if (ws.readyState === WebSocket.OPEN) {
-                  ws.send(
-                    JSON.stringify({
-                      type: "resize",
-                      data: { rows: terminal.rows, cols: terminal.cols },
-                    }),
-                  );
-                }
-              }, 100);
-              break;
-
-            case "disconnected":
-              setIsConnected(false);
-              setIsConnecting(false);
-              retryRef.current.reset();
-              terminal.write(
-                `\r\n\x1b[1;33m${msg.message || t("docker.disconnected")}\x1b[0m\r\n`,
-              );
-              if (wsRef.current) {
-                wsRef.current.close();
-                wsRef.current = null;
-              }
-              break;
-
-            case "error":
-              setIsConnecting(false);
-              toast.error(msg.message || t("docker.consoleError"));
-              terminal.write(
-                `\r\n\x1b[1;31m${t("docker.errorMessage", { message: msg.message })}\x1b[0m\r\n`,
-              );
-              addLog({
-                type: "error",
-                stage: "error",
-                message: msg.message || t("docker.consoleError"),
-              });
-              retryRef.current.markFailed();
-              break;
-          }
-        } catch (error) {
-          console.error("Failed to parse WebSocket message:", error);
-        }
-      };
-
-      ws.onerror = (error) => {
-        console.error("WebSocket error:", error);
-        setIsConnecting(false);
-        setIsConnected(false);
-        toast.error(t("docker.failedToConnect"));
-        addLog({
-          type: "error",
-          stage: "error",
-          message: t("docker.failedToConnect"),
-        });
-        retryRef.current.markFailed();
-      };
-
-      if (pingIntervalRef.current) {
-        clearInterval(pingIntervalRef.current);
-      }
-      pingIntervalRef.current = setInterval(() => {
-        if (ws.readyState === WebSocket.OPEN) {
-          ws.send(JSON.stringify({ type: "ping" }));
-        }
-      }, 30000);
-
-      ws.onclose = () => {
-        if (pingIntervalRef.current) {
-          clearInterval(pingIntervalRef.current);
-          pingIntervalRef.current = null;
-        }
-        setIsConnected(false);
-        setIsConnecting(false);
-        if (wsRef.current === ws) {
-          wsRef.current = null;
-        }
-      };
-
-      wsRef.current = ws;
-
-      terminal.onData((data) => {
-        if (ws.readyState === WebSocket.OPEN) {
-          ws.send(
-            JSON.stringify({
-              type: "input",
-              data,
-            }),
-          );
-        }
-      });
-    } catch (error) {
-      setIsConnecting(false);
-      const message = `Failed to connect: ${getErrorMessage(error)}`;
-      toast.error(message);
-      addLog({ type: "error", stage: "error", message });
-      retryRef.current.markFailed();
-    }
-  }, [
-    terminal,
-    containerState,
-    hostConfig,
-    containerId,
-    selectedShell,
-    containerName,
-    t,
-    addLog,
-  ]);
-
-  const retry = useConnectionRetry({
-    connect,
-    autoStart: false,
-  });
-  const retryRef = React.useRef(retry);
-  retryRef.current = retry;
-
-  React.useEffect(() => {
-    return () => {
-      if (pingIntervalRef.current) {
-        clearInterval(pingIntervalRef.current);
-        pingIntervalRef.current = null;
-      }
-      if (wsRef.current) {
-        try {
-          wsRef.current.send(JSON.stringify({ type: "disconnect" }));
-        } catch {
-          // Best-effort disconnect during cleanup.
-        }
-        wsRef.current.close();
-        wsRef.current = null;
-      }
-      setIsConnected(false);
-    };
-  }, []);
-
-  if (containerState !== "running") {
-    return (
-      <div className="flex items-center justify-center h-full">
-        <div className="text-center space-y-2">
-          <TerminalIcon className="h-12 w-12 text-muted-foreground/50 mx-auto" />
-          <p className="text-muted-foreground text-lg">
-            {t("docker.containerNotRunning")}
-          </p>
-          <p className="text-muted-foreground text-sm">
-            {t("docker.startContainerToAccess")}
-          </p>
-        </div>
-      </div>
-    );
-  }
-
-  return (
-    <div className="flex flex-col h-full gap-3">
-      <Card className="py-3">
-        <CardContent className="px-3">
-          <div className="flex flex-col sm:flex-row gap-2 items-center sm:items-center">
-            <div className="flex items-center gap-2 flex-1">
-              <TerminalIcon className="h-5 w-5" />
-              <span className="text-base font-medium">
-                {t("docker.console")}
-              </span>
-            </div>
-            <Select2
-              value={selectedShell}
-              onChange={(event) => setSelectedShell(event.target.value)}
-              disabled={isConnected}
-              placeholder={t("docker.selectShell")}
-              className="w-[120px]"
-            >
-              <option value="bash">{t("docker.bash")}</option>
-              <option value="sh">{t("docker.sh")}</option>
-              <option value="ash">{t("docker.ash")}</option>
-            </Select2>
-            <div className="flex gap-2 sm:gap-2">
-              {!isConnected ? (
-                <Button
-                  onClick={connect}
-                  disabled={isConnecting}
-                  className="min-w-[120px]"
-                >
-                  {isConnecting ? (
-                    <>
-                      <div className="h-4 w-4 mr-2 animate-spin rounded-full border-2 border-gray-400 border-t-transparent" />
-                      {t("docker.connecting")}
-                    </>
-                  ) : (
-                    <>
-                      <Power className="h-4 w-4 mr-2" />
-                      {t("docker.connect")}
-                    </>
-                  )}
-                </Button>
-              ) : (
-                <Button
-                  onClick={disconnect}
-                  variant="destructive"
-                  className="min-w-[120px]"
-                >
-                  <PowerOff className="h-4 w-4 mr-2" />
-                  {t("docker.disconnect")}
-                </Button>
-              )}
-            </div>
-          </div>
-        </CardContent>
-      </Card>
-
-      <Card
-        className="flex-1 overflow-hidden pt-1 pb-0"
-        style={{ background: themeColors.background }}
-      >
-        <CardContent className="p-0 h-full relative">
-          <div
-            ref={xtermRef}
-            className="h-full w-full"
-            style={{ display: isConnected ? "block" : "none" }}
-          />
-
-          {!isConnected &&
-            !isConnecting &&
-            retry.status !== "error" &&
-            retry.status !== "disconnected" && (
-              <div className="absolute inset-0 flex items-center justify-center">
-                <div className="text-center space-y-2">
-                  <TerminalIcon className="h-12 w-12 text-muted-foreground/50 mx-auto" />
-                  <p className="text-muted-foreground">
-                    {t("docker.notConnected")}
-                  </p>
-                  <p className="text-muted-foreground text-sm">
-                    {t("docker.clickToConnect")}
-                  </p>
-                </div>
-              </div>
-            )}
-
-          {!isConnected &&
-            (isConnecting ||
-              retry.status === "error" ||
-              retry.status === "disconnected") && (
-              <ConnectionScreen
-                status={isConnecting ? "connecting" : retry.status}
-                message={t("docker.connectingTo", { containerName })}
-                attempt={retry.attempt}
-                maxAttempts={retry.maxAttempts}
-                nextRetryInMs={retry.nextRetryInMs}
-                onManualRetry={() => {
-                  clearLogs();
-                  retry.retryNow();
-                }}
-                retryLabel={t("docker.connect")}
-              />
-            )}
-        </CardContent>
-      </Card>
-    </div>
-  );
-}
diff --git a/plugins/docker/src/frontend/components/ContainerCard.tsx b/plugins/docker/src/frontend/components/ContainerCard.tsx
deleted file mode 100644
index 4be50290b..000000000
--- a/plugins/docker/src/frontend/components/ContainerCard.tsx
+++ /dev/null
@@ -1,304 +0,0 @@
-import { getErrorMessage } from "../error-message";
-import { Button, Card, useConfirmation } from "@termix/plugin-sdk/ui";
-import type { DockerContainer } from "../types";
-import React from "react";
-import {
-  Box,
-  Play,
-  Square,
-  RotateCw,
-  Pause,
-  PlayCircle,
-  Trash2,
-  RefreshCw,
-} from "lucide-react";
-import { toast } from "sonner";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { useDockerApi } from "../docker-api";
-
-interface ContainerCardProps {
-  container: DockerContainer;
-  sessionId: string;
-  onSelect?: () => void;
-  isSelected?: boolean;
-  onRefresh?: () => void;
-}
-
-export function DockerBadge({ state }: { state: DockerContainer["state"] }) {
-  let colorClass = "border-border text-muted-foreground";
-  if (state === "running")
-    colorClass = "border-accent-brand/40 text-accent-brand bg-accent-brand/10";
-  if (state === "paused")
-    colorClass = "border-yellow-500/40 text-yellow-500 bg-yellow-500/10";
-  if (state === "exited")
-    colorClass = "border-destructive/40 text-destructive bg-destructive/5";
-  if (state === "restarting")
-    colorClass = "border-blue-400/40 text-blue-400 bg-blue-400/10";
-  return (
-    <span
-      className={`text-[10px] font-bold px-1.5 py-0.5 border uppercase tracking-wider ${colorClass}`}
-    >
-      {state}
-    </span>
-  );
-}
-
-export function ContainerCard({
-  container,
-  sessionId,
-  onSelect,
-  isSelected = false,
-  onRefresh,
-}: ContainerCardProps): React.ReactElement {
-  const { t } = useTranslation();
-  const { confirmWithToast } = useConfirmation();
-  const docker = useDockerApi();
-  const [isStarting, setIsStarting] = React.useState(false);
-  const [isStopping, setIsStopping] = React.useState(false);
-  const [isRestarting, setIsRestarting] = React.useState(false);
-  const [isPausing, setIsPausing] = React.useState(false);
-  const [isRemoving, setIsRemoving] = React.useState(false);
-
-  const isLoading =
-    isStarting || isStopping || isRestarting || isPausing || isRemoving;
-
-  const containerName = container.name.startsWith("/")
-    ? container.name.slice(1)
-    : container.name;
-  const portsList = (container.ports ?? "")
-    .split(",")
-    .map((p) => p.trim())
-    .filter(Boolean);
-
-  const handleStart = async (e: React.MouseEvent) => {
-    e.stopPropagation();
-    setIsStarting(true);
-    try {
-      await docker.containerAction(sessionId, container.id, "start");
-      toast.success(t("docker.containerStarted", { name: containerName }));
-      onRefresh?.();
-    } catch (err) {
-      toast.error(
-        t("docker.failedToStartContainer", {
-          error: getErrorMessage(err),
-        }),
-      );
-    } finally {
-      setIsStarting(false);
-    }
-  };
-
-  const handleStop = async (e: React.MouseEvent) => {
-    e.stopPropagation();
-    setIsStopping(true);
-    try {
-      await docker.containerAction(sessionId, container.id, "stop");
-      toast.success(t("docker.containerStopped", { name: containerName }));
-      onRefresh?.();
-    } catch (err) {
-      toast.error(
-        t("docker.failedToStopContainer", {
-          error: getErrorMessage(err),
-        }),
-      );
-    } finally {
-      setIsStopping(false);
-    }
-  };
-
-  const handleRestart = async (e: React.MouseEvent) => {
-    e.stopPropagation();
-    setIsRestarting(true);
-    try {
-      await docker.containerAction(sessionId, container.id, "restart");
-      toast.success(t("docker.containerRestarted", { name: containerName }));
-      onRefresh?.();
-    } catch (err) {
-      toast.error(
-        t("docker.failedToRestartContainer", {
-          error: getErrorMessage(err),
-        }),
-      );
-    } finally {
-      setIsRestarting(false);
-    }
-  };
-
-  const handlePause = async (e: React.MouseEvent) => {
-    e.stopPropagation();
-    setIsPausing(true);
-    try {
-      if (container.state === "paused") {
-        await docker.containerAction(sessionId, container.id, "unpause");
-        toast.success(t("docker.containerUnpaused", { name: containerName }));
-      } else {
-        await docker.containerAction(sessionId, container.id, "pause");
-        toast.success(t("docker.containerPaused", { name: containerName }));
-      }
-      onRefresh?.();
-    } catch (err) {
-      toast.error(
-        t("docker.failedToTogglePauseContainer", {
-          action: container.state === "paused" ? "unpause" : "pause",
-          error: getErrorMessage(err),
-        }),
-      );
-    } finally {
-      setIsPausing(false);
-    }
-  };
-
-  const handleRemove = async (e: React.MouseEvent) => {
-    e.stopPropagation();
-    confirmWithToast(
-      t("docker.confirmRemoveContainer", { name: containerName }) +
-        (container.state === "running"
-          ? " " + t("docker.runningContainerWarning")
-          : ""),
-      async () => {
-        setIsRemoving(true);
-        try {
-          await docker.removeContainer(
-            sessionId,
-            container.id,
-            container.state === "running",
-          );
-          toast.success(t("docker.containerRemoved", { name: containerName }));
-          onRefresh?.();
-        } catch (err) {
-          toast.error(
-            t("docker.failedToRemoveContainer", {
-              error: getErrorMessage(err),
-            }),
-          );
-        } finally {
-          setIsRemoving(false);
-        }
-      },
-      t("common.remove"),
-      t("common.cancel"),
-    );
-  };
-
-  return (
-    <Card
-      className={`flex flex-col overflow-hidden p-0 gap-0 group hover:border-accent-brand/40 transition-colors cursor-pointer ${isSelected ? "border-accent-brand/60 bg-accent-brand/5" : ""}`}
-      onClick={onSelect}
-    >
-      <div className="flex items-center justify-between px-4 py-2.5 border-b border-border bg-muted/10">
-        <div className="flex items-center gap-2 min-w-0">
-          <Box
-            className={`size-3.5 ${container.state === "running" ? "text-accent-brand" : "text-muted-foreground"}`}
-          />
-          <span className="text-sm font-bold truncate">{containerName}</span>
-        </div>
-        <DockerBadge state={container.state} />
-      </div>
-      <div className="px-4 py-3 flex flex-col gap-2">
-        <div className="flex flex-col gap-0.5">
-          <span className="text-[10px] text-muted-foreground uppercase font-bold tracking-widest">
-            {t("docker.image")}
-          </span>
-          <span className="text-xs font-mono truncate text-foreground/80">
-            {container.image}
-          </span>
-        </div>
-        <div className="flex flex-col gap-0.5 mt-1">
-          <span className="text-[10px] text-muted-foreground uppercase font-bold tracking-widest">
-            {t("docker.ports")}
-          </span>
-          <div className="flex flex-wrap gap-1 mt-0.5">
-            {portsList.length > 0 ? (
-              portsList.slice(0, 3).map((p) => (
-                <span
-                  key={p}
-                  className="text-[10px] font-mono px-1 border border-border bg-muted/30"
-                >
-                  {p}
-                </span>
-              ))
-            ) : (
-              <span className="text-[10px] text-muted-foreground italic">
-                {t("docker.noPorts")}
-              </span>
-            )}
-          </div>
-        </div>
-      </div>
-      <div className="px-4 py-2 border-t border-border bg-muted/5 flex items-center justify-between opacity-0 group-hover:opacity-100 transition-opacity">
-        <span className="text-[10px] text-muted-foreground italic">
-          {container.id.substring(0, 12)}
-        </span>
-        <div className="flex items-center gap-1">
-          {container.state !== "running" && (
-            <Button
-              variant="ghost"
-              size="icon-xs"
-              className="text-accent-brand"
-              disabled={isLoading}
-              onClick={handleStart}
-            >
-              {isStarting ? (
-                <RefreshCw className="size-3 animate-spin" />
-              ) : (
-                <Play className="size-3" />
-              )}
-            </Button>
-          )}
-          {container.state === "running" && (
-            <Button
-              variant="ghost"
-              size="icon-xs"
-              className="text-destructive"
-              disabled={isLoading}
-              onClick={handleStop}
-            >
-              {isStopping ? (
-                <RefreshCw className="size-3 animate-spin" />
-              ) : (
-                <Square className="size-3" />
-              )}
-            </Button>
-          )}
-          {(container.state === "running" || container.state === "paused") && (
-            <Button
-              variant="ghost"
-              size="icon-xs"
-              disabled={isLoading}
-              onClick={handlePause}
-            >
-              {isPausing ? (
-                <RefreshCw className="size-3 animate-spin" />
-              ) : container.state === "paused" ? (
-                <PlayCircle className="size-3" />
-              ) : (
-                <Pause className="size-3" />
-              )}
-            </Button>
-          )}
-          <Button
-            variant="ghost"
-            size="icon-xs"
-            disabled={isLoading || container.state === "exited"}
-            onClick={handleRestart}
-          >
-            {isRestarting ? (
-              <RefreshCw className="size-3 animate-spin" />
-            ) : (
-              <RotateCw className="size-3" />
-            )}
-          </Button>
-          <Button
-            variant="ghost"
-            size="icon-xs"
-            className="text-destructive"
-            disabled={isLoading}
-            onClick={handleRemove}
-          >
-            <Trash2 className="size-3" />
-          </Button>
-        </div>
-      </div>
-    </Card>
-  );
-}
diff --git a/plugins/docker/src/frontend/components/ContainerDetail.tsx b/plugins/docker/src/frontend/components/ContainerDetail.tsx
deleted file mode 100644
index d05138178..000000000
--- a/plugins/docker/src/frontend/components/ContainerDetail.tsx
+++ /dev/null
@@ -1,164 +0,0 @@
-import { Button, Card, Separator } from "@termix/plugin-sdk/ui";
-import type { DockerContainer, DockerHost } from "../types";
-import React from "react";
-import {
-  Activity,
-  ArrowLeft,
-  Box,
-  List,
-  Settings,
-  Terminal,
-} from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { LogViewer } from "./LogViewer.tsx";
-import { ContainerStats } from "./ContainerStats.tsx";
-import { ConsoleTerminal } from "./ConsoleTerminal.tsx";
-import { DockerBadge } from "./ContainerCard.tsx";
-
-type DetailTab = "logs" | "stats" | "console";
-
-interface ContainerDetailProps {
-  sessionId: string;
-  containerId: string;
-  containers: DockerContainer[];
-  hostConfig: DockerHost;
-  onBack: () => void;
-  initialTab?: DetailTab;
-}
-
-export function ContainerDetail({
-  sessionId,
-  containerId,
-  containers,
-  hostConfig,
-  onBack,
-  initialTab = "logs",
-}: ContainerDetailProps): React.ReactElement {
-  const { t } = useTranslation();
-  const [activeTab, setActiveTab] = React.useState<DetailTab>(initialTab);
-
-  React.useEffect(() => {
-    setActiveTab(initialTab);
-  }, [containerId, initialTab]);
-
-  const container = containers.find((c) => c.id === containerId);
-  const containerName = container
-    ? container.name.startsWith("/")
-      ? container.name.slice(1)
-      : container.name
-    : "";
-
-  if (!container) {
-    return (
-      <div className="flex items-center justify-center h-full">
-        <div className="text-center flex flex-col gap-3">
-          <p className="text-muted-foreground">
-            {t("docker.containerNotFound")}
-          </p>
-          <Button onClick={onBack} variant="outline" size="sm">
-            <ArrowLeft className="size-4 mr-2" />
-            {t("docker.backToList")}
-          </Button>
-        </div>
-      </div>
-    );
-  }
-
-  const tabs: { id: DetailTab; label: string; icon: React.ReactNode }[] = [
-    {
-      id: "logs",
-      label: t("docker.logs"),
-      icon: <List className="size-3.5" />,
-    },
-    {
-      id: "stats",
-      label: t("docker.stats"),
-      icon: <Activity className="size-3.5" />,
-    },
-    {
-      id: "console",
-      label: t("docker.consoleTab"),
-      icon: <Terminal className="size-3.5" />,
-    },
-  ];
-
-  return (
-    <div className="flex flex-col flex-1 min-h-0 overflow-hidden">
-      <div className="flex flex-col flex-1 min-h-0 overflow-y-auto px-3 py-3 gap-3">
-        <Card className="flex-row items-center justify-between px-3 py-3 shrink-0 gap-0">
-          <div className="flex items-center gap-3">
-            <Button
-              variant="ghost"
-              size="icon"
-              onClick={onBack}
-              className="size-8 text-muted-foreground hover:text-foreground"
-            >
-              <ArrowLeft className="size-4" />
-            </Button>
-            <div className="size-10 border border-border bg-muted flex items-center justify-center shrink-0">
-              <Box className="size-5 text-accent-brand" />
-            </div>
-            <div>
-              <h1 className="text-2xl font-bold">{containerName}</h1>
-              <span className="text-xs text-muted-foreground font-mono">
-                {container.image}
-              </span>
-            </div>
-          </div>
-          <div className="flex items-center gap-2">
-            <DockerBadge state={container.state} />
-            <Separator orientation="vertical" className="h-8 mx-2" />
-            <Button variant="ghost" size="icon">
-              <Settings className="size-4 text-accent-brand" />
-            </Button>
-          </div>
-        </Card>
-
-        <div className="flex flex-col flex-1 min-h-0 gap-3">
-          <div className="flex gap-1 border-b border-border shrink-0">
-            {tabs.map((tab) => (
-              <button
-                key={tab.id}
-                onClick={() => setActiveTab(tab.id)}
-                className={`flex items-center gap-2 px-4 py-2 text-sm font-semibold border-b-2 transition-colors ${
-                  activeTab === tab.id
-                    ? "border-b-accent-brand text-foreground bg-accent-brand/5"
-                    : "border-b-transparent text-muted-foreground hover:text-foreground hover:bg-muted"
-                }`}
-              >
-                {tab.icon}
-                {tab.label}
-              </button>
-            ))}
-          </div>
-
-          <div className="flex-1 min-h-0 flex flex-col">
-            {activeTab === "logs" && (
-              <LogViewer
-                sessionId={sessionId}
-                containerId={containerId}
-                containerName={containerName}
-              />
-            )}
-            {activeTab === "stats" && (
-              <ContainerStats
-                sessionId={sessionId}
-                containerId={containerId}
-                containerName={containerName}
-                containerState={container.state}
-              />
-            )}
-            {activeTab === "console" && (
-              <ConsoleTerminal
-                containerId={containerId}
-                containerName={containerName}
-                containerState={container.state}
-                hostConfig={hostConfig}
-              />
-            )}
-          </div>
-        </div>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/docker/src/frontend/components/ContainerList.tsx b/plugins/docker/src/frontend/components/ContainerList.tsx
deleted file mode 100644
index e058de1e1..000000000
--- a/plugins/docker/src/frontend/components/ContainerList.tsx
+++ /dev/null
@@ -1,83 +0,0 @@
-import type { DockerContainer } from "../types";
-import React from "react";
-import { Box } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { ContainerCard } from "./ContainerCard.tsx";
-
-interface ContainerListProps {
-  containers: DockerContainer[];
-  sessionId: string;
-  onSelectContainer: (containerId: string) => void;
-  selectedContainerId?: string | null;
-  onRefresh?: () => void;
-  search?: string;
-  statusFilter?: string;
-}
-
-export function ContainerList({
-  containers,
-  sessionId,
-  onSelectContainer,
-  selectedContainerId = null,
-  onRefresh,
-  search = "",
-  statusFilter = "all",
-}: ContainerListProps): React.ReactElement {
-  const { t } = useTranslation();
-
-  const filtered = React.useMemo(() => {
-    return containers.filter((c) => {
-      const name = c.name.startsWith("/") ? c.name.slice(1) : c.name;
-      const matchesSearch =
-        name.toLowerCase().includes(search.toLowerCase()) ||
-        c.image.toLowerCase().includes(search.toLowerCase()) ||
-        c.id.toLowerCase().includes(search.toLowerCase());
-      return (
-        matchesSearch && (statusFilter === "all" || c.state === statusFilter)
-      );
-    });
-  }, [containers, search, statusFilter]);
-
-  if (containers.length === 0) {
-    return (
-      <div className="flex flex-col items-center justify-center h-full opacity-20 py-20">
-        <Box className="size-16 mb-4" />
-        <span className="text-xl font-bold uppercase tracking-widest">
-          {t("docker.noContainersFound")}
-        </span>
-        <span className="text-xs font-semibold">
-          {t("docker.noContainersFoundHint")}
-        </span>
-      </div>
-    );
-  }
-
-  if (filtered.length === 0) {
-    return (
-      <div className="flex flex-col items-center justify-center h-full opacity-20 py-20">
-        <Box className="size-16 mb-4" />
-        <span className="text-xl font-bold uppercase tracking-widest">
-          {t("docker.noContainersMatchFilters")}
-        </span>
-        <span className="text-xs font-semibold">
-          {t("docker.noContainersMatchFiltersHint")}
-        </span>
-      </div>
-    );
-  }
-
-  return (
-    <div className="grid grid-cols-1 md:grid-cols-2 lg:grid-cols-3 xl:grid-cols-4 gap-3">
-      {filtered.map((container) => (
-        <ContainerCard
-          key={container.id}
-          container={container}
-          sessionId={sessionId}
-          onSelect={() => onSelectContainer(container.id)}
-          isSelected={selectedContainerId === container.id}
-          onRefresh={onRefresh}
-        />
-      ))}
-    </div>
-  );
-}
diff --git a/plugins/docker/src/frontend/components/ContainerStats.tsx b/plugins/docker/src/frontend/components/ContainerStats.tsx
deleted file mode 100644
index 3560961ef..000000000
--- a/plugins/docker/src/frontend/components/ContainerStats.tsx
+++ /dev/null
@@ -1,257 +0,0 @@
-import { getErrorMessage } from "../error-message";
-import { SectionCard, useAdaptivePolling } from "@termix/plugin-sdk/ui";
-import type { DockerStats } from "../types";
-import React from "react";
-import {
-  Activity,
-  Cpu,
-  HardDrive,
-  Info,
-  MemoryStick,
-  Network,
-  RefreshCw,
-} from "lucide-react";
-import { useDockerApi } from "../docker-api";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { DockerBadge } from "./ContainerCard.tsx";
-
-interface ContainerStatsProps {
-  sessionId: string;
-  containerId: string;
-  containerName: string;
-  containerState: string;
-}
-
-export function ContainerStats({
-  sessionId,
-  containerId,
-  containerName,
-  containerState,
-}: ContainerStatsProps): React.ReactElement {
-  const { t } = useTranslation();
-  const docker = useDockerApi();
-  const [stats, setStats] = React.useState<DockerStats | null>(null);
-  const [isLoading, setIsLoading] = React.useState(false);
-  const [error, setError] = React.useState<string | null>(null);
-  const statsRef = React.useRef(stats);
-  statsRef.current = stats;
-
-  const fetchStats = React.useCallback(async () => {
-    if (containerState !== "running") return false;
-    setIsLoading(true);
-    setError(null);
-    try {
-      const data = await docker.stats(sessionId, containerId);
-      const previous = statsRef.current;
-      const changed =
-        !previous ||
-        Math.abs(parseFloat(data.cpu) - parseFloat(previous.cpu)) >= 1.5 ||
-        Math.abs(
-          parseFloat(data.memoryPercent) - parseFloat(previous.memoryPercent),
-        ) >= 1 ||
-        data.pids !== previous.pids;
-      statsRef.current = data;
-      setStats(data);
-      return changed;
-    } catch (err) {
-      setError(getErrorMessage(err, t("docker.failedToFetchStats")));
-    } finally {
-      setIsLoading(false);
-    }
-  }, [sessionId, containerId, containerState, t, docker]);
-
-  useAdaptivePolling(
-    fetchStats,
-    {
-      minIntervalMs: 2_000,
-      maxIntervalMs: 12_000,
-      stablePollsPerStep: 2,
-      maxRequestDutyCycle: 0.2,
-    },
-    containerState === "running",
-  );
-
-  if (containerState !== "running") {
-    return (
-      <div className="flex flex-col items-center justify-center h-full opacity-20 py-20">
-        <Activity className="size-16 mb-4" />
-        <span className="text-xl font-bold uppercase tracking-widest">
-          {t("docker.containerNotRunning")}
-        </span>
-        <span className="text-xs font-semibold">
-          {t("docker.startContainerToViewStats")}
-        </span>
-      </div>
-    );
-  }
-
-  if (isLoading && !stats) {
-    return (
-      <div className="flex flex-col items-center justify-center h-full opacity-40 py-20">
-        <RefreshCw className="size-8 animate-spin mb-4" />
-        <span className="text-sm font-semibold">
-          {t("docker.loadingStats")}
-        </span>
-      </div>
-    );
-  }
-
-  if (error) {
-    return (
-      <div className="flex flex-col items-center justify-center h-full opacity-40 py-20">
-        <Activity className="size-8 mb-4" />
-        <span className="text-sm font-semibold text-destructive">
-          {t("docker.errorLoadingStats")}
-        </span>
-        <span className="text-xs text-muted-foreground mt-1">{error}</span>
-      </div>
-    );
-  }
-
-  if (!stats) {
-    return (
-      <div className="flex flex-col items-center justify-center h-full opacity-20 py-20">
-        <span className="text-sm font-semibold">
-          {t("docker.noStatsAvailable")}
-        </span>
-      </div>
-    );
-  }
-
-  const cpuPercent = parseFloat(stats.cpu) || 0;
-  const memPercent = parseFloat(stats.memoryPercent) || 0;
-
-  return (
-    <div className="grid grid-cols-1 md:grid-cols-2 lg:grid-cols-3 gap-3">
-      <SectionCard
-        title={t("docker.cpuUsage")}
-        icon={<Cpu className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-3 py-2">
-          <div className="flex items-end justify-between">
-            <span className="text-3xl font-bold text-accent-brand">
-              {stats.cpu}
-            </span>
-            <span className="text-[10px] text-muted-foreground uppercase font-bold">
-              {t("docker.current")}
-            </span>
-          </div>
-          <div className="h-1.5 bg-muted w-full overflow-hidden">
-            <div
-              className="h-full bg-accent-brand transition-all duration-500"
-              style={{ width: `${Math.min(cpuPercent, 100)}%` }}
-            />
-          </div>
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("docker.memoryUsage")}
-        icon={<MemoryStick className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-3 py-2">
-          <div className="flex items-end justify-between">
-            <span className="text-3xl font-bold text-accent-brand">
-              {stats.memoryPercent}
-            </span>
-            <span className="text-[10px] text-muted-foreground uppercase font-bold">
-              {stats.memoryUsed} / {stats.memoryLimit}
-            </span>
-          </div>
-          <div className="h-1.5 bg-muted w-full overflow-hidden">
-            <div
-              className="h-full bg-accent-brand transition-all duration-500"
-              style={{ width: `${Math.min(memPercent, 100)}%` }}
-            />
-          </div>
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("docker.networkIo")}
-        icon={<Network className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-1 py-1">
-          <div className="flex justify-between items-center py-1">
-            <span className="text-xs text-muted-foreground font-semibold">
-              {t("docker.input")}
-            </span>
-            <span className="text-sm font-mono font-bold">
-              {stats.netInput}
-            </span>
-          </div>
-          <div className="flex justify-between items-center py-1">
-            <span className="text-xs text-muted-foreground font-semibold">
-              {t("docker.output")}
-            </span>
-            <span className="text-sm font-mono font-bold text-accent-brand">
-              {stats.netOutput}
-            </span>
-          </div>
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("docker.blockIo")}
-        icon={<HardDrive className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-1 py-1">
-          <div className="flex justify-between items-center py-1">
-            <span className="text-xs text-muted-foreground font-semibold">
-              {t("docker.read")}
-            </span>
-            <span className="text-sm font-mono font-bold">
-              {stats.blockRead}
-            </span>
-          </div>
-          <div className="flex justify-between items-center py-1">
-            <span className="text-xs text-muted-foreground font-semibold">
-              {t("docker.write")}
-            </span>
-            <span className="text-sm font-mono font-bold text-accent-brand">
-              {stats.blockWrite}
-            </span>
-          </div>
-          {stats.pids && (
-            <div className="flex justify-between items-center py-1">
-              <span className="text-xs text-muted-foreground font-semibold">
-                {t("docker.pids")}
-              </span>
-              <span className="text-sm font-mono font-bold">{stats.pids}</span>
-            </div>
-          )}
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("docker.containerInformation")}
-        icon={<Info className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-1.5 py-1">
-          <div className="flex justify-between items-center text-xs py-1 border-b border-border/50">
-            <span className="text-muted-foreground font-semibold">
-              {t("docker.name")}
-            </span>
-            <span className="font-mono">{containerName}</span>
-          </div>
-          <div className="flex justify-between items-center text-xs py-1 border-b border-border/50">
-            <span className="text-muted-foreground font-semibold">
-              {t("docker.id")}
-            </span>
-            <span className="font-mono">{containerId.substring(0, 12)}</span>
-          </div>
-          <div className="flex justify-between items-center text-xs py-1">
-            <span className="text-muted-foreground font-semibold">
-              {t("docker.state")}
-            </span>
-            <DockerBadge
-              state={
-                containerState as import("../types").DockerContainer["state"]
-              }
-            />
-          </div>
-        </div>
-      </SectionCard>
-    </div>
-  );
-}
diff --git a/plugins/docker/src/frontend/components/ContainerTable.tsx b/plugins/docker/src/frontend/components/ContainerTable.tsx
deleted file mode 100644
index d939278ce..000000000
--- a/plugins/docker/src/frontend/components/ContainerTable.tsx
+++ /dev/null
@@ -1,264 +0,0 @@
-import { getErrorMessage } from "../error-message";
-import { Button } from "@termix/plugin-sdk/ui";
-import type { DockerContainer } from "../types";
-import React from "react";
-import { Box, List, Play, RefreshCw, Square, Terminal } from "lucide-react";
-import { toast } from "sonner";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { useDockerApi } from "../docker-api";
-import { DockerBadge } from "./ContainerCard.tsx";
-
-type DetailTab = "logs" | "stats" | "console";
-
-interface ContainerTableProps {
-  containers: DockerContainer[];
-  sessionId: string;
-  onSelectContainer: (containerId: string, tab?: DetailTab) => void;
-  selectedContainerId?: string | null;
-  onRefresh?: () => void;
-  search?: string;
-  statusFilter?: string;
-}
-
-export function ContainerTable({
-  containers,
-  sessionId,
-  onSelectContainer,
-  selectedContainerId = null,
-  onRefresh,
-  search = "",
-  statusFilter = "all",
-}: ContainerTableProps): React.ReactElement {
-  const { t } = useTranslation();
-  const docker = useDockerApi();
-  const [pendingId, setPendingId] = React.useState<string | null>(null);
-
-  const filtered = React.useMemo(() => {
-    return containers.filter((c) => {
-      const name = c.name.startsWith("/") ? c.name.slice(1) : c.name;
-      const matchesSearch =
-        name.toLowerCase().includes(search.toLowerCase()) ||
-        c.image.toLowerCase().includes(search.toLowerCase()) ||
-        c.id.toLowerCase().includes(search.toLowerCase());
-      return (
-        matchesSearch && (statusFilter === "all" || c.state === statusFilter)
-      );
-    });
-  }, [containers, search, statusFilter]);
-
-  const handleToggleRun = async (
-    e: React.MouseEvent,
-    container: DockerContainer,
-  ) => {
-    e.stopPropagation();
-    const containerName = container.name.startsWith("/")
-      ? container.name.slice(1)
-      : container.name;
-    setPendingId(container.id);
-    try {
-      if (container.state === "running") {
-        await docker.containerAction(sessionId, container.id, "stop");
-        toast.success(t("docker.containerStopped", { name: containerName }));
-      } else {
-        await docker.containerAction(sessionId, container.id, "start");
-        toast.success(t("docker.containerStarted", { name: containerName }));
-      }
-      onRefresh?.();
-    } catch (err) {
-      toast.error(
-        container.state === "running"
-          ? t("docker.failedToStopContainer", { error: getErrorMessage(err) })
-          : t("docker.failedToStartContainer", {
-              error: getErrorMessage(err),
-            }),
-      );
-    } finally {
-      setPendingId(null);
-    }
-  };
-
-  if (containers.length === 0) {
-    return (
-      <div className="flex flex-col items-center justify-center h-full opacity-20 py-20">
-        <Box className="size-16 mb-4" />
-        <span className="text-xl font-bold uppercase tracking-widest">
-          {t("docker.noContainersFound")}
-        </span>
-        <span className="text-xs font-semibold">
-          {t("docker.noContainersFoundHint")}
-        </span>
-      </div>
-    );
-  }
-
-  if (filtered.length === 0) {
-    return (
-      <div className="flex flex-col items-center justify-center h-full opacity-20 py-20">
-        <Box className="size-16 mb-4" />
-        <span className="text-xl font-bold uppercase tracking-widest">
-          {t("docker.noContainersMatchFilters")}
-        </span>
-        <span className="text-xs font-semibold">
-          {t("docker.noContainersMatchFiltersHint")}
-        </span>
-      </div>
-    );
-  }
-
-  return (
-    <div className="flex min-h-0 flex-1 flex-col overflow-hidden border border-border bg-card">
-      <div className="min-h-0 flex-1 overflow-y-auto thin-scrollbar">
-        <table className="w-full border-collapse text-xs">
-          <thead className="sticky top-0 z-10 bg-card">
-            <tr className="border-b border-border text-[10px] uppercase tracking-wider text-muted-foreground">
-              <th className="px-3 py-2 text-left font-semibold">
-                {t("docker.name")}
-              </th>
-              <th className="px-3 py-2 text-left font-semibold">
-                {t("docker.image")}
-              </th>
-              <th className="px-3 py-2 text-left font-semibold">
-                {t("docker.state")}
-              </th>
-              <th className="px-3 py-2 text-left font-semibold">
-                {t("docker.ports")}
-              </th>
-              <th className="px-3 py-2 text-left font-semibold">
-                {t("docker.status")}
-              </th>
-              <th className="px-3 py-2 text-right font-semibold">
-                {t("docker.actions")}
-              </th>
-            </tr>
-          </thead>
-          <tbody className="divide-y divide-border">
-            {filtered.map((container) => {
-              const containerName = container.name.startsWith("/")
-                ? container.name.slice(1)
-                : container.name;
-              const portsList = (container.ports ?? "")
-                .split(",")
-                .map((p) => p.trim())
-                .filter(Boolean);
-              const isSelected = selectedContainerId === container.id;
-              const isPending = pendingId === container.id;
-
-              return (
-                <tr
-                  key={container.id}
-                  onClick={() => onSelectContainer(container.id, "logs")}
-                  className={`cursor-pointer transition-colors hover:bg-muted/40 ${
-                    isSelected ? "bg-accent-brand/5" : ""
-                  }`}
-                >
-                  <td className="px-3 py-2">
-                    <div className="flex items-center gap-2 min-w-0">
-                      <Box
-                        className={`size-3.5 shrink-0 ${container.state === "running" ? "text-accent-brand" : "text-muted-foreground"}`}
-                      />
-                      <span className="min-w-0 truncate font-semibold">
-                        {containerName}
-                      </span>
-                    </div>
-                  </td>
-                  <td className="px-3 py-2 max-w-[220px]">
-                    <span className="block truncate font-mono text-muted-foreground">
-                      {container.image}
-                    </span>
-                  </td>
-                  <td className="px-3 py-2">
-                    <DockerBadge state={container.state} />
-                  </td>
-                  <td className="px-3 py-2 max-w-[200px]">
-                    {portsList.length > 0 ? (
-                      <div className="flex flex-wrap gap-1">
-                        {portsList.slice(0, 2).map((p) => (
-                          <span
-                            key={p}
-                            className="text-[10px] font-mono px-1 border border-border bg-muted/30"
-                          >
-                            {p}
-                          </span>
-                        ))}
-                        {portsList.length > 2 && (
-                          <span className="text-[10px] text-muted-foreground">
-                            +{portsList.length - 2}
-                          </span>
-                        )}
-                      </div>
-                    ) : (
-                      <span className="text-[10px] text-muted-foreground italic">
-                        {t("docker.noPorts")}
-                      </span>
-                    )}
-                  </td>
-                  <td className="px-3 py-2 whitespace-nowrap text-muted-foreground">
-                    {container.status}
-                  </td>
-                  <td className="px-3 py-2">
-                    <div
-                      className="flex items-center justify-end gap-1"
-                      onClick={(e) => e.stopPropagation()}
-                    >
-                      <Button
-                        variant="ghost"
-                        size="icon-xs"
-                        title={t("docker.logs")}
-                        onClick={() => onSelectContainer(container.id, "logs")}
-                      >
-                        <List className="size-3" />
-                      </Button>
-                      <Button
-                        variant="ghost"
-                        size="icon-xs"
-                        title={t("docker.stats")}
-                        onClick={() => onSelectContainer(container.id, "stats")}
-                      >
-                        <Box className="size-3" />
-                      </Button>
-                      <Button
-                        variant="ghost"
-                        size="icon-xs"
-                        title={t("docker.consoleTab")}
-                        disabled={container.state !== "running"}
-                        onClick={() =>
-                          onSelectContainer(container.id, "console")
-                        }
-                      >
-                        <Terminal className="size-3" />
-                      </Button>
-                      <Button
-                        variant="ghost"
-                        size="icon-xs"
-                        className={
-                          container.state === "running"
-                            ? "text-destructive"
-                            : "text-accent-brand"
-                        }
-                        disabled={isPending}
-                        title={
-                          container.state === "running"
-                            ? t("docker.stop")
-                            : t("docker.start")
-                        }
-                        onClick={(e) => handleToggleRun(e, container)}
-                      >
-                        {isPending ? (
-                          <RefreshCw className="size-3 animate-spin" />
-                        ) : container.state === "running" ? (
-                          <Square className="size-3" />
-                        ) : (
-                          <Play className="size-3" />
-                        )}
-                      </Button>
-                    </div>
-                  </td>
-                </tr>
-              );
-            })}
-          </tbody>
-        </table>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/docker/src/frontend/components/LogViewer.tsx b/plugins/docker/src/frontend/components/LogViewer.tsx
deleted file mode 100644
index 84b929f47..000000000
--- a/plugins/docker/src/frontend/components/LogViewer.tsx
+++ /dev/null
@@ -1,256 +0,0 @@
-import { getErrorMessage } from "../error-message";
-import {
-  Button,
-  Input,
-  Select2,
-  Separator,
-  useAdaptivePolling,
-} from "@termix/plugin-sdk/ui";
-import type { DockerLogOptions } from "../types";
-import React from "react";
-import { Download, RefreshCw, Search, Trash2 } from "lucide-react";
-import { toast } from "sonner";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { useDockerApi } from "../docker-api";
-
-interface LogViewerProps {
-  sessionId: string;
-  containerId: string;
-  containerName: string;
-}
-
-function AdminToggle({
-  on,
-  onToggle,
-  label,
-}: {
-  on: boolean;
-  onToggle: () => void;
-  label: string;
-}) {
-  return (
-    <div className="flex items-center gap-2">
-      <span className="text-[10px] text-muted-foreground uppercase font-bold">
-        {label}
-      </span>
-      <button
-        type="button"
-        onClick={onToggle}
-        className={`relative inline-flex h-5 w-9 shrink-0 cursor-pointer items-center border-2 transition-colors ${on ? "bg-accent-brand border-accent-brand" : "bg-muted border-border"}`}
-      >
-        <span
-          className={`pointer-events-none inline-block h-3 w-3 bg-background shadow-sm transition-transform ${on ? "translate-x-4" : "translate-x-0.5"}`}
-        />
-      </button>
-    </div>
-  );
-}
-
-function getLogColor(line: string): string {
-  if (line.includes(" WARN") || line.includes(" warn"))
-    return "text-yellow-400/90";
-  if (line.includes(" ERROR") || line.includes(" error"))
-    return "text-destructive";
-  if (line.includes(" DEBUG") || line.includes(" debug"))
-    return "text-muted-foreground/60";
-  return "text-foreground/90";
-}
-
-export function LogViewer({
-  sessionId,
-  containerId,
-  containerName,
-}: LogViewerProps): React.ReactElement {
-  const { t } = useTranslation();
-  const docker = useDockerApi();
-  const [rawLogs, setRawLogs] = React.useState<string[]>([]);
-  const [isLoading, setIsLoading] = React.useState(false);
-  const [isDownloading, setIsDownloading] = React.useState(false);
-  const [tailLines, setTailLines] = React.useState("100");
-  const [showTimestamps, setShowTimestamps] = React.useState(false);
-  const [autoRefresh, setAutoRefresh] = React.useState(false);
-  const [logSearch, setLogSearch] = React.useState("");
-  const logsEndRef = React.useRef<HTMLDivElement>(null);
-  const rawLogsRef = React.useRef(rawLogs);
-  rawLogsRef.current = rawLogs;
-
-  const fetchLogs = React.useCallback(async () => {
-    setIsLoading(true);
-    try {
-      const options: DockerLogOptions = {
-        tail: tailLines === "all" ? undefined : parseInt(tailLines, 10),
-        timestamps: showTimestamps,
-      };
-      const data = await docker.logs(sessionId, containerId, options);
-      const next = data.logs.split("\n").filter(Boolean);
-      const changed =
-        next.length !== rawLogsRef.current.length ||
-        next.some((line, index) => line !== rawLogsRef.current[index]);
-      if (changed) {
-        rawLogsRef.current = next;
-        setRawLogs(next);
-      }
-      return changed;
-    } catch (error) {
-      toast.error(
-        t("docker.failedToFetchLogs", { error: getErrorMessage(error) }),
-      );
-    } finally {
-      setIsLoading(false);
-    }
-  }, [sessionId, containerId, tailLines, showTimestamps, docker, t]);
-
-  React.useEffect(() => {
-    fetchLogs();
-  }, [fetchLogs]);
-
-  useAdaptivePolling(
-    fetchLogs,
-    {
-      minIntervalMs: 3_000,
-      maxIntervalMs: 18_000,
-      stablePollsPerStep: 2,
-      maxRequestDutyCycle: 0.2,
-    },
-    autoRefresh,
-    { runImmediately: false },
-  );
-
-  React.useEffect(() => {
-    if (autoRefresh && logsEndRef.current) {
-      logsEndRef.current.scrollIntoView({ behavior: "smooth" });
-    }
-  }, [rawLogs, autoRefresh]);
-
-  const handleDownload = async () => {
-    setIsDownloading(true);
-    try {
-      const data = await docker.logs(sessionId, containerId, {
-        timestamps: showTimestamps,
-      });
-      const blob = new Blob([data.logs], { type: "text/plain" });
-      const url = window.URL.createObjectURL(blob);
-      const a = document.createElement("a");
-      a.href = url;
-      a.download = `${containerName.replace(/[^a-z0-9]/gi, "_")}_logs.txt`;
-      document.body.appendChild(a);
-      a.click();
-      window.URL.revokeObjectURL(url);
-      document.body.removeChild(a);
-      toast.success(t("docker.logsDownloaded"));
-    } catch (error) {
-      toast.error(
-        t("docker.failedToDownloadLogs", { error: getErrorMessage(error) }),
-      );
-    } finally {
-      setIsDownloading(false);
-    }
-  };
-
-  const filteredLogs = logSearch
-    ? rawLogs.filter((l) => l.toLowerCase().includes(logSearch.toLowerCase()))
-    : rawLogs;
-
-  return (
-    <div className="flex flex-col flex-1 min-h-0 gap-3">
-      <div className="flex items-center justify-between bg-card border border-border px-3 py-2 gap-3 flex-wrap">
-        <div className="flex items-center gap-3 shrink-0 flex-wrap">
-          <AdminToggle
-            on={autoRefresh}
-            onToggle={() => setAutoRefresh(!autoRefresh)}
-            label={t("docker.autoRefresh")}
-          />
-          <Separator orientation="vertical" className="h-4" />
-          <AdminToggle
-            on={showTimestamps}
-            onToggle={() => setShowTimestamps(!showTimestamps)}
-            label={t("docker.timestamps")}
-          />
-          <Separator orientation="vertical" className="h-4" />
-          <Select2
-            value={tailLines}
-            onChange={(e) => setTailLines(e.target.value)}
-            className="h-7 px-2 text-[10px] bg-background border border-border text-foreground outline-none uppercase font-bold"
-          >
-            <option value="50">{t("docker.last50")}</option>
-            <option value="100">{t("docker.last100")}</option>
-            <option value="500">{t("docker.last500")}</option>
-            <option value="1000">{t("docker.last1000")}</option>
-            <option value="all">{t("docker.allLogs")}</option>
-          </Select2>
-          <Separator orientation="vertical" className="h-4" />
-          <span className="text-[10px] text-muted-foreground uppercase font-bold tracking-widest">
-            {filteredLogs.length}/{rawLogs.length} {t("docker.lines")}
-          </span>
-        </div>
-        <div className="flex items-center gap-2">
-          <div className="relative flex-1 max-w-64">
-            <Search className="absolute left-2.5 top-1/2 -translate-y-1/2 size-3 text-muted-foreground" />
-            <Input
-              placeholder={t("docker.filterLogs")}
-              value={logSearch}
-              onChange={(e) => setLogSearch(e.target.value)}
-              className="pl-7 h-7 text-xs bg-background border-border rounded-none"
-            />
-          </div>
-          <Button
-            variant="ghost"
-            size="sm"
-            className="h-7 text-xs gap-1.5"
-            onClick={fetchLogs}
-            disabled={isLoading}
-          >
-            <RefreshCw
-              className={`size-3 ${isLoading ? "animate-spin" : ""}`}
-            />
-            {t("docker.refresh")}
-          </Button>
-          <Button
-            variant="ghost"
-            size="sm"
-            className="h-7 text-xs gap-1.5"
-            onClick={handleDownload}
-            disabled={isDownloading}
-          >
-            <Download className="size-3" />
-            {t("docker.download")}
-          </Button>
-          <Button
-            variant="ghost"
-            size="sm"
-            className="h-7 text-xs gap-1.5"
-            onClick={() => setRawLogs([])}
-          >
-            <Trash2 className="size-3" />
-            {t("docker.clear")}
-          </Button>
-        </div>
-      </div>
-
-      <div className="flex-1 bg-background border border-border p-3 overflow-auto font-mono text-xs leading-relaxed scrollbar-thin min-h-0">
-        {filteredLogs.length > 0 ? (
-          filteredLogs.map((line, i) => {
-            const tsEnd = line.indexOf(" ", 1);
-            const maybeTs = tsEnd > 10 ? line.substring(0, tsEnd) : null;
-            const rest = maybeTs ? line.substring(tsEnd) : line;
-            return (
-              <div key={i} className="whitespace-pre-wrap break-all">
-                {maybeTs && (
-                  <span className="text-accent-brand/50">{maybeTs}</span>
-                )}
-                <span className={getLogColor(rest)}>{rest}</span>
-              </div>
-            );
-          })
-        ) : (
-          <span className="text-muted-foreground italic">
-            {logSearch
-              ? t("docker.noLogsMatching", { query: logSearch })
-              : t("docker.noLogsAvailable")}
-          </span>
-        )}
-        <div ref={logsEndRef} />
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/docker/src/frontend/components/console-look.ts b/plugins/docker/src/frontend/components/console-look.ts
deleted file mode 100644
index 58c26cc7c..000000000
--- a/plugins/docker/src/frontend/components/console-look.ts
+++ /dev/null
@@ -1,63 +0,0 @@
-import { useEffect, useState } from "react";
-import {
-  invokeAction,
-  type PluginHostRecord,
-} from "@termix/plugin-sdk/frontend";
-
-/** What the SSH terminal's "terminal.resolveTheme" action answers. */
-export interface ConsoleLook {
-  colors: Record<string, string | undefined> & {
-    background: string;
-    foreground: string;
-  };
-  fontFamily: string;
-  fontSize: number;
-  cursorStyle: "block" | "underline" | "bar";
-  cursorBlink: boolean;
-  letterSpacing: number;
-  lineHeight: number;
-  scrollback: number;
-}
-
-/** Plain colors, for when the SSH terminal plugin is off. */
-export const FALLBACK_CONSOLE_LOOK: ConsoleLook = {
-  colors: {
-    background: "#0c0d0b",
-    foreground: "#fafafa",
-    cursor: "#fafafa",
-    cursorAccent: "#0c0d0b",
-  },
-  fontFamily: '"SF Mono", Consolas, "Liberation Mono", monospace',
-  fontSize: 14,
-  cursorStyle: "bar",
-  cursorBlink: true,
-  letterSpacing: 0,
-  lineHeight: 1,
-  scrollback: 10000,
-};
-
-/** The look the SSH terminal uses on this host, or plain colors without it. */
-export function useConsoleLook(
-  host: PluginHostRecord | null | undefined,
-  appTheme: string,
-): ConsoleLook {
-  const [look, setLook] = useState<ConsoleLook>(FALLBACK_CONSOLE_LOOK);
-  // The terminal's settings live with the terminal, so it resolves them from
-  // the host id.
-  const hostId = host?.id;
-  useEffect(() => {
-    let active = true;
-    invokeAction("terminal.resolveTheme", { hostId, appTheme })
-      .then((resolved) => {
-        if (active) setLook((resolved as ConsoleLook) ?? FALLBACK_CONSOLE_LOOK);
-      })
-      .catch(() => {
-        if (active) setLook(FALLBACK_CONSOLE_LOOK);
-      });
-    return () => {
-      active = false;
-    };
-  }, [hostId, appTheme]);
-
-  return look;
-}
diff --git a/plugins/docker/src/frontend/docker-api.ts b/plugins/docker/src/frontend/docker-api.ts
deleted file mode 100644
index 75a060ed7..000000000
--- a/plugins/docker/src/frontend/docker-api.ts
+++ /dev/null
@@ -1,171 +0,0 @@
-import { useMemo } from "react";
-import {
-  usePluginApi,
-  type PluginApiClient,
-} from "@termix/plugin-sdk/frontend";
-import type { ConnectionStage } from "@termix/plugin-sdk/ui";
-import type {
-  DockerContainer,
-  DockerLogOptions,
-  DockerStats,
-  DockerValidation,
-} from "./types";
-
-export interface ApiConnectionLog {
-  type: "info" | "success" | "warning" | "error";
-  stage: ConnectionStage;
-  message: string;
-  details?: string;
-}
-
-/** One step of a connect: connected, a prompt to answer, or auth needed. */
-export interface ConnectResult {
-  success?: boolean;
-  status?: string;
-  reason?: string;
-  message?: string;
-  requires_totp?: boolean;
-  prompt?: string;
-  isPassword?: boolean;
-  retry?: boolean;
-  requires_browser_sign_in?: boolean;
-  url?: string | null;
-  code?: string;
-  label?: string;
-  connectionLogs?: ApiConnectionLog[];
-}
-
-/** An API failure carrying the server's message and connection logs. */
-export class DockerApiError extends Error {
-  constructor(
-    message: string,
-    readonly status?: number,
-    readonly connectionLogs?: ApiConnectionLog[],
-  ) {
-    super(message);
-    this.name = "DockerApiError";
-  }
-}
-
-function apiError(error: unknown, action: string): DockerApiError {
-  const response = (
-    error as {
-      response?: {
-        status?: number;
-        data?: {
-          error?: string;
-          message?: string;
-          connectionLogs?: ApiConnectionLog[];
-        };
-      };
-    }
-  )?.response;
-  const data = response?.data;
-  const message =
-    data?.error ||
-    data?.message ||
-    (error instanceof Error ? error.message : `Failed to ${action}`);
-  return new DockerApiError(message, response?.status, data?.connectionLogs);
-}
-
-async function call<T>(
-  action: string,
-  request: () => Promise<{ data: T }>,
-): Promise<T> {
-  try {
-    return (await request()).data;
-  } catch (error) {
-    throw apiError(error, action);
-  }
-}
-
-export type ContainerAction =
-  "start" | "stop" | "restart" | "pause" | "unpause";
-
-export function createDockerApi(api: PluginApiClient) {
-  return {
-    connect: (
-      sessionId: string,
-      hostId: number,
-      credentials?: {
-        userProvidedPassword?: string;
-        userProvidedSshKey?: string;
-        userProvidedKeyPassword?: string;
-      },
-    ) =>
-      call<ConnectResult>("connect to Docker", () =>
-        api.post("/ssh/connect", { sessionId, hostId, ...credentials }),
-      ),
-
-    answerTotp: (sessionId: string, totpCode: string) =>
-      call<ConnectResult>("verify the code", () =>
-        api.post("/ssh/connect-totp", { sessionId, totpCode }),
-      ),
-
-    continueBrowserSignIn: (sessionId: string) =>
-      call<ConnectResult>("continue after a browser sign-in", () =>
-        api.post("/ssh/connect-browser-sign-in", { sessionId }),
-      ),
-
-    disconnect: (sessionId: string) =>
-      call("disconnect from Docker", () =>
-        api.post("/ssh/disconnect", { sessionId }),
-      ),
-
-    keepalive: (sessionId: string) =>
-      call("keep the Docker session alive", () =>
-        api.post("/ssh/keepalive", { sessionId }),
-      ),
-
-    validate: (sessionId: string) =>
-      call<DockerValidation>("validate Docker", () =>
-        api.get(`/validate/${sessionId}`),
-      ),
-
-    listContainers: (sessionId: string, all = true) =>
-      call<DockerContainer[]>("list containers", () =>
-        api.get(`/containers/${sessionId}`, { params: { all } }),
-      ),
-
-    containerAction: (
-      sessionId: string,
-      containerId: string,
-      action: ContainerAction,
-    ) =>
-      call<{ success: boolean; message: string }>(
-        `${action} the container`,
-        () => api.post(`/containers/${sessionId}/${containerId}/${action}`),
-      ),
-
-    removeContainer: (sessionId: string, containerId: string, force = false) =>
-      call<{ success: boolean; message: string }>("remove the container", () =>
-        api.delete(`/containers/${sessionId}/${containerId}/remove`, {
-          params: { force },
-        }),
-      ),
-
-    logs: (
-      sessionId: string,
-      containerId: string,
-      options?: DockerLogOptions,
-    ) =>
-      call<{ logs: string }>("load container logs", () =>
-        api.get(`/containers/${sessionId}/${containerId}/logs`, {
-          params: options,
-        }),
-      ),
-
-    stats: (sessionId: string, containerId: string) =>
-      call<DockerStats>("load container stats", () =>
-        api.get(`/containers/${sessionId}/${containerId}/stats`),
-      ),
-  };
-}
-
-export type DockerApi = ReturnType<typeof createDockerApi>;
-
-/** The Docker API on this plugin's own client. */
-export function useDockerApi(): DockerApi {
-  const api = usePluginApi();
-  return useMemo(() => createDockerApi(api), [api]);
-}
diff --git a/plugins/docker/src/frontend/error-message.ts b/plugins/docker/src/frontend/error-message.ts
deleted file mode 100644
index 6ef95453a..000000000
--- a/plugins/docker/src/frontend/error-message.ts
+++ /dev/null
@@ -1,6 +0,0 @@
-export function getErrorMessage(
-  error: unknown,
-  fallback = "Unknown error",
-): string {
-  return error instanceof Error ? error.message : fallback;
-}
diff --git a/plugins/docker/src/frontend/homepage.ts b/plugins/docker/src/frontend/homepage.ts
deleted file mode 100644
index 2028c6aa9..000000000
--- a/plugins/docker/src/frontend/homepage.ts
+++ /dev/null
@@ -1,36 +0,0 @@
-import type { ComponentType, ReactNode } from "react";
-import type { ExtensionContribution } from "@termix/plugin-sdk/frontend";
-
-/** The homepage's grid step, in pixels. */
-export const GRID_SIZE = 30;
-
-export interface DockerWidgetConfig {
-  hostId: number;
-}
-
-/** What the homepage hands a widget; only the fields this plugin reads. */
-export interface WidgetComponentProps<C> {
-  widget: { title?: string | null };
-  config: C;
-}
-
-export interface WidgetEditFormProps<C> {
-  config: C;
-  onChange: (config: C) => void;
-}
-
-/** What app.registerExtension("homepage.widgets", ...) takes. */
-export interface WidgetDefinition<C> extends ExtensionContribution {
-  id: string;
-  name: string;
-  description: string;
-  category: "links" | "info" | "system" | "monitoring";
-  icon: ReactNode;
-  defaultConfig: C;
-  defaultSize: { w: number; h: number };
-  minSize: { w: number; h: number };
-  components: {
-    view: ComponentType<WidgetComponentProps<C>>;
-    editForm?: ComponentType<WidgetEditFormProps<C>>;
-  };
-}
diff --git a/plugins/docker/src/frontend/index.tsx b/plugins/docker/src/frontend/index.tsx
deleted file mode 100644
index 2ff1f30e5..000000000
--- a/plugins/docker/src/frontend/index.tsx
+++ /dev/null
@@ -1,69 +0,0 @@
-// The terminal surfaces need xterm's own stylesheet.
-import "@xterm/xterm/css/xterm.css";
-import type { ComponentType } from "react";
-import { Box } from "lucide-react";
-import type {
-  StandaloneViewProps,
-  TabProps,
-  TermixApp,
-} from "@termix/plugin-sdk/frontend";
-import { DockerManager } from "./DockerManager";
-import DockerApp from "./DockerApp";
-import { dockerWidget } from "./DockerWidget";
-import { dockerEnabled, toDockerHost, type DockerHostSource } from "./types";
-
-function DockerTab({ host, sshHost, label, isVisible }: TabProps) {
-  const record = host ?? (sshHost as DockerHostSource | undefined);
-  return (
-    <DockerManager
-      host={record ? toDockerHost(record) : undefined}
-      title={label}
-      isVisible={isVisible}
-      isTopbarOpen={false}
-      embedded={true}
-    />
-  );
-}
-
-function DockerStandalone({ hostId }: StandaloneViewProps) {
-  return <DockerApp hostId={hostId} />;
-}
-
-export function activate(app: TermixApp): void {
-  // Host actions filter synchronously, so the permission is read once here.
-  let canUse = true;
-  void app.hasPermission("use").then((allowed) => {
-    canUse = allowed;
-  });
-
-  app.registerTab("docker", DockerTab, {
-    icon: Box,
-    titleKey: "nav.docker",
-    requiresHost: true,
-    noHostMessageKey: "docker.noHostSelected",
-    persistent: true,
-    activityTypes: ["docker"],
-    standalone: DockerStandalone,
-    preload: () => import("./DockerManager"),
-  });
-
-  app.registerHostAction({
-    id: "docker",
-    titleKey: "nav.docker",
-    icon: Box,
-    kind: "open",
-    order: 30,
-    tabType: "docker",
-    copyUrlView: "docker",
-    when: (host) => canUse && !!host.enableSsh && dockerEnabled(host),
-  });
-
-  app.registerExtension("homepage.widgets", dockerWidget);
-
-  app.registerSlotContribution("onboarding.features", {
-    actionId: "docker.feature",
-    titleKey: "onboarding.feature_docker",
-    descriptionKey: "onboarding.feature_docker_desc",
-    icon: Box as ComponentType<{ className?: string }>,
-  });
-}
diff --git a/plugins/docker/src/frontend/types.ts b/plugins/docker/src/frontend/types.ts
deleted file mode 100644
index 284c61bdd..000000000
--- a/plugins/docker/src/frontend/types.ts
+++ /dev/null
@@ -1,97 +0,0 @@
-export interface DockerContainer {
-  id: string;
-  name: string;
-  image: string;
-  status: string;
-  state:
-    | "created"
-    | "running"
-    | "paused"
-    | "restarting"
-    | "removing"
-    | "exited"
-    | "dead";
-  ports: string;
-  created: string;
-  command?: string;
-  labels?: Record<string, string>;
-  networks?: string[];
-  mounts?: string[];
-}
-
-export interface DockerStats {
-  cpu: string;
-  memoryUsed: string;
-  memoryLimit: string;
-  memoryPercent: string;
-  netInput: string;
-  netOutput: string;
-  blockRead: string;
-  blockWrite: string;
-  pids?: string;
-}
-
-export interface DockerLogOptions {
-  tail?: number;
-  timestamps?: boolean;
-  since?: string;
-  until?: string;
-  follow?: boolean;
-}
-
-export interface DockerValidation {
-  available: boolean;
-  version?: string;
-  runtime?: "docker" | "podman";
-  error?: string;
-  code?: string;
-}
-
-/** What the Docker views read from a host. */
-export interface DockerHost {
-  id: number;
-  name?: string;
-  ip: string;
-  port: number;
-  username?: string;
-  syncId?: string | null;
-  connectionOrigin?: "local" | "remote" | null;
-  pluginSettings?: Record<string, Record<string, unknown> | undefined>;
-}
-
-/** The fields toDockerHost reads from a shell or API host. */
-export type DockerHostSource = Omit<DockerHost, "id" | "name"> & {
-  id: string | number;
-  name?: string | null;
-};
-
-/** Any host record the shell or an API hands over, as a DockerHost. */
-export function toDockerHost(record: DockerHostSource): DockerHost {
-  return {
-    id: Number(record.id),
-    name: record.name ?? undefined,
-    ip: record.ip,
-    port: record.port,
-    username: record.username,
-    syncId: record.syncId ?? null,
-    connectionOrigin: record.connectionOrigin ?? null,
-    pluginSettings: record.pluginSettings,
-  };
-}
-
-function dockerSettings(
-  host: object | null | undefined,
-): Record<string, unknown> {
-  const all = (host as { pluginSettings?: unknown } | null | undefined)
-    ?.pluginSettings as
-    Record<string, Record<string, unknown> | undefined> | undefined;
-  return all?.docker ?? {};
-}
-
-export function dockerEnabled(host: object | null | undefined): boolean {
-  return dockerSettings(host).enableDocker === true;
-}
-
-export function hostTitle(host: DockerHost): string {
-  return host.name || `${host.username ?? ""}@${host.ip}`;
-}
diff --git a/plugins/docker/tests/backend/console.test.ts b/plugins/docker/tests/backend/console.test.ts
deleted file mode 100644
index cb470aedc..000000000
--- a/plugins/docker/tests/backend/console.test.ts
+++ /dev/null
@@ -1,170 +0,0 @@
-import { EventEmitter } from "node:events";
-import express from "express";
-import { afterEach, describe, expect, it } from "vitest";
-import {
-  createMockCtx,
-  type MockPluginContext,
-} from "@termix/plugin-sdk/testing";
-import type { PluginWebSocketConnection } from "@termix/plugin-sdk/backend";
-import { activate } from "../../src/backend/index.js";
-import { manifest, sshHost } from "./server";
-import { FakeClient, FakeStream } from "./fake-ssh";
-
-/** A ws WebSocket as far as the console uses one. */
-class FakeSocket extends EventEmitter {
-  readyState = 1;
-  sent: Array<Record<string, unknown>> = [];
-  closedWith: [number, string] | null = null;
-
-  send(data: string) {
-    this.sent.push(JSON.parse(data));
-  }
-
-  ping() {}
-
-  close(code: number, reason: string) {
-    if (this.readyState !== 1) return;
-    this.readyState = 3;
-    this.closedWith = [code, reason];
-    this.emit("close");
-  }
-
-  message(payload: unknown) {
-    this.emit("message", Buffer.from(JSON.stringify(payload)));
-  }
-}
-
-function consoleClient() {
-  const shells: FakeStream[] = [];
-  const client = new FakeClient([
-    [/which bash/, { stdout: "/bin/bash\n" }],
-    [/exec -it abc123 \/bin\/bash/, (stream) => shells.push(stream)],
-  ]);
-  return { client, shells };
-}
-
-async function activated(client: FakeClient): Promise<MockPluginContext> {
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    router: () => express.Router(),
-    permissions: ["docker.use"],
-    sshHosts: [sshHost(7)],
-    sshClient: client,
-  });
-  await mock.ctx.settings.setHost(7, "enableDocker", true);
-  // Like the runtime, disposing a connection ends its client.
-  const connect = mock.ctx.ssh.connect;
-  mock.ctx.ssh.connect = (async (...args: Parameters<typeof connect>) => ({
-    ...(await connect(...args)),
-    dispose: () => client.end(),
-  })) as typeof connect;
-  await activate(mock.ctx);
-  return mock;
-}
-
-async function openConsole(mock: MockPluginContext, userId = "user-1") {
-  const route = mock.wsRoutes.find((r) => r.path === "/console");
-  expect(route?.options).toEqual({ public: true, optionalAuth: true });
-  const socket = new FakeSocket();
-  mock.setActor(userId || undefined);
-  await route!.handler!({
-    userId,
-    request: {},
-    socket,
-    clientIp: "127.0.0.1",
-    requestOrigin: "http://localhost",
-    isDataUnlocked: () => true,
-  } as PluginWebSocketConnection);
-  return socket;
-}
-
-async function until(check: () => boolean) {
-  for (let i = 0; i < 50 && !check(); i++) {
-    await new Promise((resolve) => setImmediate(resolve));
-  }
-  expect(check()).toBe(true);
-}
-
-let disposals: Array<() => void | Promise<void>> = [];
-
-afterEach(async () => {
-  for (const dispose of disposals.reverse()) await dispose();
-  disposals = [];
-});
-
-describe("docker console", () => {
-  it("refuses a socket without a user", async () => {
-    const mock = await activated(consoleClient().client);
-    disposals.push(...mock.disposals);
-    const socket = await openConsole(mock, "");
-    expect(socket.closedWith?.[0]).toBe(1008);
-  });
-
-  it("closes an open console on disable, and the next enable works", async () => {
-    const first = consoleClient();
-    const mock = await activated(first.client);
-
-    const socket = await openConsole(mock);
-    socket.message({
-      type: "connect",
-      data: {
-        hostConfig: { id: 7, ip: "10.0.0.7" },
-        containerId: "abc123",
-        shell: "bash",
-        cols: 100,
-        rows: 30,
-      },
-    });
-    await until(() => socket.sent.some((m) => m.type === "connected"));
-    socket.message({ type: "input", data: "ls\n" });
-    await until(() => first.shells[0]?.written.includes("ls\n") ?? false);
-
-    // Disable: the runtime empties the disposable bag.
-    for (const dispose of [...mock.disposals].reverse()) await dispose();
-    expect(first.shells[0].ended).toBe(true);
-    expect(first.client.ended).toBe(true);
-    expect(socket.closedWith?.[0]).toBe(1001);
-
-    // Enable again: a fresh activate on the same module serves a new console.
-    const second = consoleClient();
-    const again = await activated(second.client);
-    disposals.push(...again.disposals);
-    const next = await openConsole(again);
-    next.message({
-      type: "connect",
-      data: { hostConfig: { id: 7, ip: "10.0.0.7" }, containerId: "abc123" },
-    });
-    await until(() => next.sent.some((m) => m.type === "connected"));
-    second.shells[0].emit("data", Buffer.from("hello"));
-    await until(() =>
-      next.sent.some((m) => m.type === "output" && m.data === "hello"),
-    );
-  });
-
-  it("refuses a host id that resolves to another machine", async () => {
-    const mock = await activated(consoleClient().client);
-    disposals.push(...mock.disposals);
-    const socket = await openConsole(mock);
-    socket.message({
-      type: "connect",
-      data: { hostConfig: { id: 7, ip: "10.9.9.9" }, containerId: "abc123" },
-    });
-    await until(() => socket.sent.some((m) => m.type === "error"));
-    expect(String(socket.sent[0].message)).toMatch(/Host mismatch/);
-  });
-
-  it("refuses a host with Docker switched off", async () => {
-    const mock = await activated(consoleClient().client);
-    disposals.push(...mock.disposals);
-    await mock.ctx.settings.setHost(7, "enableDocker", false);
-    const socket = await openConsole(mock);
-    socket.message({
-      type: "connect",
-      data: { hostConfig: { id: 7, ip: "10.0.0.7" }, containerId: "abc123" },
-    });
-    await until(() => socket.sent.some((m) => m.type === "error"));
-    expect(String(socket.sent[0].message)).toMatch(/not enabled/);
-  });
-});
diff --git a/plugins/docker/tests/backend/fake-ssh.ts b/plugins/docker/tests/backend/fake-ssh.ts
deleted file mode 100644
index f4bbc80a6..000000000
--- a/plugins/docker/tests/backend/fake-ssh.ts
+++ /dev/null
@@ -1,84 +0,0 @@
-import { EventEmitter } from "node:events";
-
-/** An ssh2 exec channel: stdout on "data", stderr on `stderr`, then "close". */
-export class FakeStream extends EventEmitter {
-  stderr = new EventEmitter();
-  written: string[] = [];
-  ended = false;
-  window: [number, number] | null = null;
-
-  write(data: string) {
-    this.written.push(data);
-    return true;
-  }
-
-  end() {
-    this.ended = true;
-  }
-
-  setWindow(rows: number, cols: number) {
-    this.window = [rows, cols];
-  }
-
-  /** Emits output and exits, on the next tick like a real channel. */
-  finish(stdout: string, code = 0, stderr = "") {
-    setImmediate(() => {
-      if (stdout) this.emit("data", Buffer.from(stdout));
-      if (stderr) this.stderr.emit("data", Buffer.from(stderr));
-      this.emit("close", code);
-    });
-  }
-}
-
-export type ExecReply =
-  | { stdout?: string; stderr?: string; code?: number }
-  | ((stream: FakeStream) => void);
-
-/**
- * An ssh2 Client that answers exec by the first matching pattern. A reply
- * may be a function for a long-lived channel such as a console.
- */
-export class FakeClient extends EventEmitter {
-  commands: string[] = [];
-  streams: FakeStream[] = [];
-  ended = false;
-
-  constructor(private replies: Array<[RegExp, ExecReply]> = []) {
-    super();
-  }
-
-  reply(pattern: RegExp, reply: ExecReply) {
-    this.replies.unshift([pattern, reply]);
-  }
-
-  exec(
-    command: string,
-    optionsOrCallback: unknown,
-    maybeCallback?: (err: Error | undefined, stream: FakeStream) => void,
-  ) {
-    const callback = (
-      typeof optionsOrCallback === "function"
-        ? optionsOrCallback
-        : maybeCallback
-    ) as (err: Error | undefined, stream: FakeStream) => void;
-    this.commands.push(command);
-    const stream = new FakeStream();
-    this.streams.push(stream);
-    const match = this.replies.find(([pattern]) => pattern.test(command));
-    callback(undefined, stream);
-    if (!match) {
-      stream.finish("");
-      return this;
-    }
-    const reply = match[1];
-    if (typeof reply === "function") reply(stream);
-    else stream.finish(reply.stdout ?? "", reply.code ?? 0, reply.stderr ?? "");
-    return this;
-  }
-
-  end() {
-    if (this.ended) return;
-    this.ended = true;
-    this.emit("close");
-  }
-}
diff --git a/plugins/docker/tests/backend/host-settings.test.ts b/plugins/docker/tests/backend/host-settings.test.ts
deleted file mode 100644
index 8fc7f4f37..000000000
--- a/plugins/docker/tests/backend/host-settings.test.ts
+++ /dev/null
@@ -1,143 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import express from "express";
-import { createMockCtx } from "@termix/plugin-sdk/testing";
-import { PluginCapabilityError } from "@termix/plugin-sdk/backend";
-import { activate } from "../../src/backend/index.js";
-import {
-  normalizeImportedHost,
-  readDockerHostSettings,
-} from "../../src/backend/host-settings.js";
-import {
-  diffContainerStates,
-  parseContainerStates,
-} from "../../src/backend/container-state.js";
-import { manifest, startServer, type TestServer } from "./server";
-
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-});
-
-describe("docker activate", () => {
-  it("fails closed without network:serve", async () => {
-    const mock = createMockCtx({
-      pluginId: manifest.id,
-      manifest,
-      capabilities: manifest.capabilities.filter(
-        (cap) => cap !== "network:serve",
-      ),
-      router: () => express.Router(),
-    });
-    await expect(activate(mock.ctx)).rejects.toBeInstanceOf(
-      PluginCapabilityError,
-    );
-  });
-
-  it("cannot reach a host without ssh:connect", async () => {
-    server = await startServer({
-      mock: {
-        capabilities: manifest.capabilities.filter(
-          (cap) => cap !== "ssh:connect",
-        ),
-      },
-    });
-    const response = await server.request("POST", "/ssh/connect", {
-      body: { sessionId: "s1", hostId: 7 },
-    });
-    expect(response.status).toBe(500);
-  });
-
-  it("registers its import normalizer", async () => {
-    server = await startServer();
-    expect(
-      server.mock.ctx.registry.consume("docker.hostImportNormalizer"),
-    ).toBe(normalizeImportedHost);
-  });
-});
-
-describe("docker host settings", () => {
-  it("reads the switch and runtime with defaults", async () => {
-    server = await startServer({ dockerOn: false });
-    expect(await readDockerHostSettings(server.mock.ctx, 7)).toEqual({
-      enabled: false,
-      runtime: "docker",
-    });
-    await server.mock.ctx.settings.setHost(7, "enableDocker", true);
-    await server.mock.ctx.settings.setHost(7, "containerRuntime", "podman");
-    expect(await readDockerHostSettings(server.mock.ctx, 7)).toEqual({
-      enabled: true,
-      runtime: "podman",
-    });
-  });
-
-  it("takes an export's nested settings over the old flat fields", () => {
-    expect(
-      normalizeImportedHost({
-        enableDocker: false,
-        pluginSettings: {
-          docker: { enableDocker: true, containerRuntime: "podman" },
-        },
-      }),
-    ).toEqual({ enableDocker: true, containerRuntime: "podman" });
-  });
-
-  it("reads 2.8 flat fields and proxmox-created rows", () => {
-    expect(
-      normalizeImportedHost({
-        enableDocker: 1,
-        dockerConfig: '{"runtime":"podman"}',
-      }),
-    ).toEqual({ enableDocker: true, containerRuntime: "podman" });
-    expect(normalizeImportedHost({ enableDocker: true })).toEqual({
-      enableDocker: true,
-    });
-    expect(normalizeImportedHost({ name: "plain" })).toBeNull();
-  });
-});
-
-/**
- * The polling side needs SSH, so what is tested here is the pure part:
- * turning `ps` output into states, and two snapshots into events.
- */
-describe("container state", () => {
-  it("reads name, state and health out of the ps output", () => {
-    const states = parseContainerStates(
-      [
-        '{"name":"web","state":"running","status":"Up 2 hours"}',
-        "",
-        "not json at all",
-        '{"state":"running"}',
-        '{"name":"api","state":"running","status":"Up 1 hour (unhealthy)"}',
-      ].join("\n"),
-    );
-    expect([...states.keys()]).toEqual(["web", "api"]);
-    expect(states.get("api")).toEqual({ state: "running", unhealthy: true });
-  });
-
-  it("reports transitions and skips containers seen for the first time", () => {
-    const running = { state: "running", unhealthy: false };
-    const exited = { state: "exited", unhealthy: false };
-    const restarting = { state: "restarting", unhealthy: false };
-    expect(
-      diffContainerStates(
-        new Map([
-          ["web", running],
-          ["db", exited],
-          ["cache", running],
-        ]),
-        new Map([
-          ["web", exited],
-          ["db", running],
-          ["cache", restarting],
-          ["new", running],
-        ]),
-      ),
-    ).toEqual([
-      { container: "web", event: "exited" },
-      { container: "db", event: "started" },
-      { container: "cache", event: "restarting" },
-    ]);
-  });
-});
diff --git a/plugins/docker/tests/backend/routes.test.ts b/plugins/docker/tests/backend/routes.test.ts
deleted file mode 100644
index 21641a10a..000000000
--- a/plugins/docker/tests/backend/routes.test.ts
+++ /dev/null
@@ -1,316 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import type {
-  PluginSshConnectOptions,
-  PluginSshHost,
-} from "@termix/plugin-sdk/backend";
-import { startServer, sshHost, type TestServer } from "./server";
-import { FakeClient } from "./fake-ssh";
-
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-});
-
-async function connect(s: TestServer, sessionId = "s1", hostId = 7) {
-  return s.request("POST", "/ssh/connect", { body: { sessionId, hostId } });
-}
-
-/** Swaps ctx.ssh.connect for one that runs `flow` against the prompt channel. */
-function promptingConnect(
-  s: TestServer,
-  flow: (
-    ask: NonNullable<PluginSshConnectOptions["prompt"]>["ask"],
-  ) => Promise<void>,
-) {
-  s.mock.ctx.ssh.connect = (async (
-    host: PluginSshHost,
-    options?: PluginSshConnectOptions,
-  ) => {
-    await flow(options!.prompt!.ask);
-    return {
-      client: s.client as never,
-      jumpClient: null,
-      host,
-      dispose: () => s.client.end(),
-    };
-  }) as never;
-}
-
-describe("docker routes", () => {
-  it("refuses every route without docker.use", async () => {
-    server = await startServer({ permissions: [] });
-    const calls: Array<[string, string]> = [
-      ["POST", "/ssh/connect"],
-      ["POST", "/ssh/connect-totp"],
-      ["POST", "/ssh/connect-browser-sign-in"],
-      ["POST", "/ssh/disconnect"],
-      ["POST", "/ssh/keepalive"],
-      ["GET", "/ssh/status?sessionId=s1"],
-      ["GET", "/validate/s1"],
-      ["GET", "/containers/s1"],
-      ["GET", "/containers/s1/abc"],
-      ["POST", "/containers/s1/abc/start"],
-      ["DELETE", "/containers/s1/abc/remove"],
-      ["GET", "/containers/s1/abc/logs"],
-      ["GET", "/containers/s1/abc/stats"],
-    ];
-    for (const [method, path] of calls) {
-      const response = await server.request(method, path, {
-        body: method === "GET" ? undefined : {},
-      });
-      expect(response.status, `${method} ${path}`).toBe(403);
-    }
-  });
-
-  it("refuses a host with Docker switched off", async () => {
-    server = await startServer({ dockerOn: false });
-    const response = await connect(server);
-    expect(response.status).toBe(403);
-    expect(response.body.code).toBe("DOCKER_DISABLED");
-  });
-
-  it("answers 404 for a host the user cannot reach", async () => {
-    server = await startServer();
-    expect((await connect(server, "s1", 99)).status).toBe(404);
-  });
-
-  it("keeps the core-resolved host identity when using stored credentials", async () => {
-    server = await startServer();
-    const host = sshHost(7, { authType: "key", password: undefined });
-    const originalConnect = server.mock.ctx.ssh.connect;
-    server.mock.ctx.ssh.resolveHost = async () => host;
-    server.mock.ctx.ssh.connect = (async (target, options) => {
-      if (target !== host)
-        throw new Error("Stored credential association lost");
-      return originalConnect(target, options);
-    }) as typeof originalConnect;
-    const response = await connect(server);
-    expect(response.status).toBe(200);
-    expect(response.body.success).toBe(true);
-  });
-
-  it("applies explicit authentication overrides without changing the resolved host", async () => {
-    server = await startServer();
-    const host = sshHost(7, { authType: "key", password: undefined });
-    server.mock.ctx.ssh.resolveHost = async () => host;
-    const response = await server.request("POST", "/ssh/connect", {
-      body: {
-        sessionId: "override",
-        hostId: 7,
-        userProvidedPassword: "replacement",
-      },
-    });
-    expect(response.status).toBe(200);
-    expect(server.mock.sshConnections.at(-1)?.host).toMatchObject({
-      authType: "password",
-      password: "replacement",
-    });
-    expect(host.authType).toBe("key");
-    expect(host.password).toBeUndefined();
-  });
-
-  it("connects, validates and manages containers on the session", async () => {
-    server = await startServer();
-    const connected = await connect(server);
-    expect(connected.status).toBe(200);
-    expect(connected.body.success).toBe(true);
-    expect(server.mock.statusReports).toContainEqual({ hostId: 7, ok: true });
-
-    const validation = await server.request("GET", "/validate/s1");
-    expect(validation.body).toEqual({
-      available: true,
-      version: "27.1.1",
-      runtime: "docker",
-    });
-
-    const list = await server.request("GET", "/containers/s1");
-    expect(list.body).toEqual([
-      expect.objectContaining({ id: "abc123", name: "web", state: "running" }),
-    ]);
-
-    server.client.reply(/ start abc123$/, { stdout: "abc123" });
-    const started = await server.request("POST", "/containers/s1/abc123/start");
-    expect(started.status).toBe(200);
-    expect(
-      server.client.commands.some((c) => c.endsWith("docker start abc123")),
-    ).toBe(true);
-
-    server.client.reply(/ logs abc123/, { stdout: "line one\nline two\n" });
-    const logs = await server.request(
-      "GET",
-      "/containers/s1/abc123/logs?tail=50&since=2026-01-01T00:00:00Z",
-    );
-    expect(logs.body).toEqual({ success: true, logs: "line one\nline two\n" });
-    expect(server.client.commands.at(-1)).toContain(
-      "logs abc123 --tail 50 --since 2026-01-01T00:00:00Z 2>&1",
-    );
-
-    server.client.reply(/ stats abc123/, {
-      stdout:
-        '{"cpu":"1.5%","memory":"10MiB / 1GiB","memoryPercent":"1%","netIO":"1kB / 2kB","blockIO":"0B / 0B","pids":"3"}',
-    });
-    const stats = await server.request("GET", "/containers/s1/abc123/stats");
-    expect(stats.body).toMatchObject({
-      cpu: "1.5%",
-      memoryUsed: "10MiB",
-      memoryLimit: "1GiB",
-      netInput: "1kB",
-      netOutput: "2kB",
-    });
-
-    server.client.reply(/ rm abc123/, {
-      code: 1,
-      stderr: "Error: No such container: abc123",
-    });
-    const removed = await server.request(
-      "DELETE",
-      "/containers/s1/abc123/remove",
-    );
-    expect(removed.status).toBe(404);
-
-    expect(
-      (await server.request("POST", "/containers/s1/abc123/explode")).status,
-    ).toBe(404);
-    expect(
-      (await server.request("GET", "/containers/s1/bad;id/logs")).status,
-    ).toBe(400);
-
-    await server.request("POST", "/ssh/disconnect", {
-      body: { sessionId: "s1" },
-    });
-    const status = await server.request("GET", "/ssh/status?sessionId=s1");
-    expect(status.body.connected).toBe(false);
-  });
-
-  it("uses Podman when the host says so", async () => {
-    server = await startServer();
-    await server.mock.ctx.settings.setHost(7, "containerRuntime", "podman");
-    await connect(server);
-    await server.request("GET", "/containers/s1");
-    expect(server.client.commands.at(-1)).toMatch(/ podman ps -a --format/);
-  });
-
-  it("keeps another user's session to its owner", async () => {
-    server = await startServer();
-    await connect(server);
-    const response = await server.request("GET", "/containers/s1", {
-      user: "user-2",
-    });
-    expect(response.status).toBe(400);
-    const status = await server.request("GET", "/ssh/status?sessionId=s1", {
-      user: "user-2",
-    });
-    expect(status.body.connected).toBe(false);
-  });
-
-  it("parks a TOTP prompt and re-asks after a wrong code", async () => {
-    server = await startServer();
-    promptingConnect(server, async (ask) => {
-      let code = await ask({ kind: "totp", prompt: "Code:", retry: false });
-      while (code !== "123456") {
-        if (code === null) throw new Error("Cancelled");
-        code = await ask({ kind: "totp", prompt: "Code:", retry: true });
-      }
-    });
-
-    const first = await connect(server);
-    expect(first.body).toMatchObject({ requires_totp: true, prompt: "Code:" });
-
-    const pending = await server.request("GET", "/containers/s1");
-    expect(pending.body.code).toBe("AUTH_PENDING");
-
-    const wrong = await server.request("POST", "/ssh/connect-totp", {
-      body: { sessionId: "s1", totpCode: "000000" },
-    });
-    expect(wrong.body).toMatchObject({ requires_totp: true, retry: true });
-
-    const stranger = await server.request("POST", "/ssh/connect-totp", {
-      user: "user-2",
-      body: { sessionId: "s1", totpCode: "123456" },
-    });
-    expect(stranger.status).toBe(404);
-
-    const right = await server.request("POST", "/ssh/connect-totp", {
-      body: { sessionId: "s1", totpCode: "123456" },
-    });
-    expect(right.body).toMatchObject({ success: true, status: "success" });
-    expect((await server.request("GET", "/containers/s1")).status).toBe(200);
-  });
-
-  it("continues a browser sign-in and refuses a code for it", async () => {
-    server = await startServer();
-    promptingConnect(server, async (ask) => {
-      await ask({
-        kind: "browser",
-        id: "gateway",
-        label: "Gateway",
-        url: "https://gateway.example/login",
-        code: "KEY",
-        instructions: "",
-      });
-    });
-
-    const first = await connect(server);
-    expect(first.body).toMatchObject({
-      requires_browser_sign_in: true,
-      label: "Gateway",
-      url: "https://gateway.example/login",
-      code: "KEY",
-    });
-    const wrongKind = await server.request("POST", "/ssh/connect-totp", {
-      body: { sessionId: "s1", totpCode: "1" },
-    });
-    expect(wrongKind.status).toBe(400);
-
-    const done = await server.request("POST", "/ssh/connect-browser-sign-in", {
-      body: { sessionId: "s1" },
-    });
-    expect(done.body.success).toBe(true);
-  });
-
-  it("asks for credentials when a host with no secret gets a password prompt", async () => {
-    server = await startServer({
-      mock: {
-        sshHosts: [
-          {
-            id: 7,
-            userId: "user-1",
-            ip: "10.0.0.7",
-            port: 22,
-            username: "root",
-            authType: "none",
-          },
-        ],
-      },
-    });
-    promptingConnect(server, async (ask) => {
-      const answer = await ask({
-        kind: "input",
-        prompt: "Password:",
-        echo: false,
-        isPush: false,
-      });
-      if (answer === null)
-        throw new Error("All configured authentication methods failed");
-    });
-
-    const response = await connect(server);
-    expect(response.body).toEqual({
-      status: "auth_required",
-      reason: "no_keyboard",
-    });
-  });
-
-  it("never reports a failed login to core", async () => {
-    const client = new FakeClient();
-    server = await startServer({ client });
-    server.mock.ctx.ssh.connect = (async () => {
-      throw new Error("All configured authentication methods failed");
-    }) as never;
-    const response = await connect(server);
-    expect(response.status).toBe(500);
-    expect(server.mock.statusReports).toEqual([]);
-  });
-});
diff --git a/plugins/docker/tests/backend/server.ts b/plugins/docker/tests/backend/server.ts
deleted file mode 100644
index 1c9561545..000000000
--- a/plugins/docker/tests/backend/server.ts
+++ /dev/null
@@ -1,116 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import express, { type Router } from "express";
-import {
-  createMockCtx,
-  type MockContextOptions,
-  type MockPluginContext,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-import { activate } from "../../src/backend/index.js";
-import { FakeClient } from "./fake-ssh";
-
-export const manifest = manifestJson as unknown as PluginManifest;
-
-export const PS_LINE =
-  '{"id":"abc123","name":"web","image":"nginx","status":"Up 2 hours","state":"running","ports":"80/tcp","created":"2026-01-01"}';
-
-/** A host owned by user-1, as ctx.ssh.resolveHost sees it. */
-export function sshHost(id: number, extra: Record<string, unknown> = {}) {
-  return {
-    id,
-    userId: "user-1",
-    name: `host-${id}`,
-    ip: `10.0.0.${id}`,
-    port: 22,
-    username: "root",
-    authType: "password",
-    password: "pw",
-    ...extra,
-  };
-}
-
-/** A client that looks like a Linux host with Docker running. */
-export function dockerClient(): FakeClient {
-  return new FakeClient([
-    [/^ver$/, { stdout: "" }],
-    [/--version/, { stdout: "Docker version 27.1.1, build abc" }],
-    [/ ps -a --format/, { stdout: `${PS_LINE}\n` }],
-    [/ ps$/, { stdout: "" }],
-  ]);
-}
-
-export interface TestServer {
-  mock: MockPluginContext;
-  client: FakeClient;
-  request: (
-    method: string,
-    path: string,
-    options?: { user?: string; body?: unknown },
-    // Route bodies vary per test; asserting on them is the point.
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any }>;
-  close: () => Promise<void>;
-}
-
-/** The plugin activated with its router served the way core mounts it. */
-export async function startServer(
-  options: {
-    permissions?: string[];
-    dockerOn?: boolean;
-    client?: FakeClient;
-    mock?: Partial<MockContextOptions>;
-  } = {},
-): Promise<TestServer> {
-  const client = options.client ?? dockerClient();
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    router: () => (router = express.Router()),
-    permissions: options.permissions ?? ["docker.use"],
-    sshHosts: [sshHost(7), sshHost(8)],
-    sshClient: client,
-    ...options.mock,
-  });
-  if (options.dockerOn !== false) {
-    await mock.ctx.settings.setHost(7, "enableDocker", true);
-  }
-
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") ?? undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    mock,
-    client,
-    async request(method, path, { user = "user-1", body } = {}) {
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        headers: {
-          "x-test-user": user,
-          ...(body !== undefined ? { "content-type": "application/json" } : {}),
-        },
-        body: body !== undefined ? JSON.stringify(body) : undefined,
-      });
-      const text = await response.text();
-      return { status: response.status, body: text ? JSON.parse(text) : null };
-    },
-    async close() {
-      for (const dispose of mock.disposals.reverse()) await dispose();
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-    },
-  };
-}
diff --git a/plugins/docker/tests/backend/services.test.ts b/plugins/docker/tests/backend/services.test.ts
deleted file mode 100644
index 7a35203b2..000000000
--- a/plugins/docker/tests/backend/services.test.ts
+++ /dev/null
@@ -1,105 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import type {
-  DockerEvent,
-  DockerEventsV1,
-  DockerServiceV1,
-} from "../../src/backend/index.js";
-import { startServer, type TestServer } from "./server";
-
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  vi.useRealTimers();
-  await server?.close();
-  server = null;
-});
-
-const psState = (state: string, status = "Up") =>
-  `{"name":"web","state":"${state}","status":"${status}"}\n`;
-
-describe("docker.containers service", () => {
-  it("lists containers and runs actions as the caller", async () => {
-    server = await startServer();
-    const docker = server.mock.services.get(
-      "docker.containers",
-    ) as DockerServiceV1;
-
-    const containers = await server.mock.ctx.asUser("user-1", () =>
-      docker.listContainers(7),
-    );
-    expect(containers).toEqual([
-      expect.objectContaining({ id: "abc123", name: "web" }),
-    ]);
-
-    await server.mock.ctx.asUser("user-1", () =>
-      docker.action(7, "web", "restart"),
-    );
-    expect(server.client.commands.at(-1)).toMatch(/ docker restart web$/);
-    expect(server.mock.sshConnections.at(-1)).toMatchObject({
-      host: 7,
-      pool: "docker",
-    });
-
-    await expect(
-      server.mock.ctx.asUser("user-1", () =>
-        docker.action(7, "web; rm -rf /", "stop"),
-      ),
-    ).rejects.toThrow(/Invalid container name/);
-  });
-
-  it("needs a calling user", async () => {
-    server = await startServer();
-    const docker = server.mock.services.get(
-      "docker.containers",
-    ) as DockerServiceV1;
-    await expect(docker.listContainers(7)).rejects.toThrow(/calling user/);
-  });
-});
-
-describe("docker.events service", () => {
-  it("reports state changes between polls to every subscriber", async () => {
-    vi.useFakeTimers({ toFake: ["Date"] });
-    server = await startServer();
-    const events = server.mock.services.get("docker.events") as DockerEventsV1;
-    const seen: DockerEvent[] = [];
-    const listener = (event: DockerEvent) => seen.push(event);
-
-    const unsubscribe = await server.mock.ctx.asUser("user-1", () =>
-      events.subscribe(7, listener),
-    );
-    // Subscribing the same listener again is a no-op.
-    await server.mock.ctx.asUser("user-1", () => events.subscribe(7, listener));
-
-    const poll = async (output: string) => {
-      server!.client.reply(/ ps -a --format/, { stdout: output });
-      vi.setSystemTime(Date.now() + 61_000);
-      await server!.mock.runScheduled();
-    };
-
-    await poll(psState("running"));
-    expect(seen).toEqual([]);
-
-    await poll(psState("exited", "Exited (1)"));
-    expect(seen).toEqual([{ hostId: 7, container: "web", event: "exited" }]);
-
-    await poll(psState("running", "Up 1 second (unhealthy)"));
-    expect(seen.slice(1)).toEqual([
-      { hostId: 7, container: "web", event: "started" },
-      { hostId: 7, container: "web", event: "unhealthy" },
-    ]);
-
-    unsubscribe();
-    const before = server.client.commands.length;
-    await poll(psState("exited"));
-    expect(server.client.commands.length).toBe(before);
-    expect(seen).toHaveLength(3);
-  });
-
-  it("stops polling once the plugin is disposed", async () => {
-    server = await startServer();
-    const events = server.mock.services.get("docker.events") as DockerEventsV1;
-    await server.mock.ctx.asUser("user-1", () => events.subscribe(7, () => {}));
-    for (const dispose of [...server.mock.disposals].reverse()) await dispose();
-    expect(server.mock.scheduled.every((job) => job.stopped)).toBe(true);
-  });
-});
diff --git a/plugins/docker/tests/frontend/DockerManager.test.tsx b/plugins/docker/tests/frontend/DockerManager.test.tsx
deleted file mode 100644
index 9818169ec..000000000
--- a/plugins/docker/tests/frontend/DockerManager.test.tsx
+++ /dev/null
@@ -1,139 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { screen, waitFor } from "@testing-library/react";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-function host(enableDocker: boolean) {
-  return {
-    id: "7",
-    name: "box",
-    ip: "10.0.0.7",
-    port: 22,
-    username: "root",
-    enableSsh: true,
-    pluginSettings: { docker: { enableDocker } },
-  };
-}
-
-function stubApi(connectResult: Record<string, unknown>) {
-  const post = vi.fn(async (url: string) => {
-    if (url === "/ssh/connect") return { data: connectResult };
-    return { data: { success: true } };
-  });
-  const get = vi.fn(async (url: string) => {
-    if (url.startsWith("/validate/")) {
-      return {
-        data: { available: true, version: "27.1.1", runtime: "docker" },
-      };
-    }
-    if (url.startsWith("/containers/")) {
-      return {
-        data: [
-          {
-            id: "abc123",
-            name: "web",
-            image: "nginx",
-            status: "Up",
-            state: "running",
-            ports: "",
-            created: "",
-          },
-        ],
-      };
-    }
-    return { data: {} };
-  });
-  return {
-    post,
-    get,
-    delete: vi.fn(),
-    put: vi.fn(),
-    patch: vi.fn(),
-  } as unknown as {
-    post: typeof post;
-    get: typeof get;
-  } & PluginApiClient;
-}
-
-describe("DockerManager", () => {
-  it("says Docker is off for a host without the switch", async () => {
-    const api = stubApi({ success: true });
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      hosts: [host(false)],
-      api,
-    });
-    rendered.renderTab("docker", {
-      host: host(false),
-      label: "box",
-      isVisible: true,
-    });
-    expect(
-      await screen.findByText("Docker is not enabled for this host"),
-    ).toBeTruthy();
-    expect(api.post).not.toHaveBeenCalled();
-  });
-
-  it("connects through the plugin api and lists containers", async () => {
-    const api = stubApi({ success: true, status: "success" });
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      hosts: [host(true)],
-      api,
-    });
-    rendered.renderTab("docker", {
-      host: host(true),
-      label: "box",
-      isVisible: true,
-    });
-    await waitFor(() =>
-      expect(api.post).toHaveBeenCalledWith(
-        "/ssh/connect",
-        expect.objectContaining({ hostId: 7 }),
-      ),
-    );
-    await waitFor(() =>
-      expect(api.get).toHaveBeenCalledWith(
-        expect.stringMatching(/^\/validate\//),
-      ),
-    );
-  });
-
-  it("opens the code prompt when the host asks for one", async () => {
-    const api = stubApi({
-      requires_totp: true,
-      sessionId: "s1",
-      prompt: "Verification code:",
-    });
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      hosts: [host(true)],
-      api,
-    });
-    rendered.renderTab("docker", {
-      host: host(true),
-      label: "box",
-      isVisible: true,
-    });
-    expect(await screen.findByText("Verification code:")).toBeTruthy();
-  });
-});
diff --git a/plugins/docker/tests/frontend/activate.test.tsx b/plugins/docker/tests/frontend/activate.test.tsx
deleted file mode 100644
index ce679b717..000000000
--- a/plugins/docker/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,58 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-const declared = (views?: Array<{ id: string }>) =>
-  (views ?? []).map((view) => view.id).sort();
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe(`${manifest.id} activate`, () => {
-  it("activates and registers only views its manifest declares", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    const contributes = manifest.contributes as unknown as Record<
-      string,
-      Array<{ id: string }> | undefined
-    >;
-    const tabs = declared(contributes.tabs);
-    // A rail panel may reuse one of the plugin's tab ids.
-    const panels = [...declared(contributes.panels), ...tabs];
-    const cards = declared(contributes.dashboardCards);
-    for (const id of rendered.registered.tabs()) expect(tabs).toContain(id);
-    for (const id of rendered.registered.panels()) expect(panels).toContain(id);
-    for (const id of rendered.registered.dashboardCards()) {
-      expect(cards).toContain(id);
-    }
-    // Host settings render from the manifest; there is no editor tab.
-    expect(rendered.registered.hostEditorSections()).toEqual([]);
-    expect(rendered.registered.hostActions()).toEqual([
-      expect.objectContaining({ id: "docker", tabType: "docker" }),
-    ]);
-  });
-
-  it("removes everything it registered on deactivate", async () => {
-    const app = await renderWithApp(plugin, { manifest, locales });
-    await app.deactivate();
-    expect(app.registered.tabs()).toEqual([]);
-    expect(app.registered.panels()).toEqual([]);
-    expect(app.registered.railItems()).toEqual([]);
-    expect(app.registered.hostActions()).toEqual([]);
-    expect(app.registered.hostEditorSections()).toEqual([]);
-    expect(app.registered.dashboardCards()).toEqual([]);
-    expect(app.registered.settingsComponents()).toEqual([]);
-    expect(app.registered.actions()).toEqual([]);
-  });
-});
diff --git a/plugins/docker/tests/frontend/components/console-look.test.tsx b/plugins/docker/tests/frontend/components/console-look.test.tsx
deleted file mode 100644
index 622e13ce0..000000000
--- a/plugins/docker/tests/frontend/components/console-look.test.tsx
+++ /dev/null
@@ -1,16 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { renderHook, waitFor } from "@testing-library/react";
-import {
-  FALLBACK_CONSOLE_LOOK,
-  useConsoleLook,
-} from "../../../src/frontend/components/console-look";
-
-describe("useConsoleLook", () => {
-  it("uses plain colors while the SSH terminal is off", async () => {
-    const { result } = renderHook(() =>
-      useConsoleLook({ id: "1", name: "h", ip: "10.0.0.1", port: 22 }, "dark"),
-    );
-    await waitFor(() => expect(result.current).toBe(FALLBACK_CONSOLE_LOOK));
-    expect(result.current.colors.background).toBe("#0c0d0b");
-  });
-});
diff --git a/plugins/docker/tsconfig.json b/plugins/docker/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/docker/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/docker/vitest.config.ts b/plugins/docker/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/docker/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/file-manager/CHANGELOG.md b/plugins/file-manager/CHANGELOG.md
deleted file mode 100644
index 2ea4ae7ea..000000000
--- a/plugins/file-manager/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Browse, edit and transfer files over SFTP. Includes a code editor, a trash you can restore from, bookmarks and transfers between two hosts.
diff --git a/plugins/file-manager/README.md b/plugins/file-manager/README.md
deleted file mode 100644
index 4a4b0064f..000000000
--- a/plugins/file-manager/README.md
+++ /dev/null
@@ -1,38 +0,0 @@
-# File Manager
-
-Browse, edit and transfer files over SFTP, including between two hosts.
-
-## Features
-
-- Browse, upload, download, rename, move and delete files over SFTP.
-- Edit files in a built-in code editor.
-- Transfer files between two hosts in the SFTP tab.
-- Restore deleted files from the trash until they are cleaned up.
-- Save bookmarks to folders you use often.
-- Browse local files in the desktop app.
-
-## Settings
-
-### Host
-
-- Enable File Manager: show the file manager for this host.
-- Default Path: the folder to open first.
-- SCP Legacy Mode: use SCP for hosts without a working SFTP server.
-
-## Permissions
-
-- `file-manager.use`: Browse, edit and transfer files. Admins and users have it by default.
-
-## Services
-
-Provides to other plugins:
-
-- `files.sftp`: read and write files on a host.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/file-manager/locales/en.json b/plugins/file-manager/locales/en.json
deleted file mode 100644
index e162e7c37..000000000
--- a/plugins/file-manager/locales/en.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Files",
-    "sftp": "SFTP",
-    "openFileManager": "Open File Manager"
-  },
-  "permissions": {
-    "use": {
-      "title": "Use file manager",
-      "description": "Browse, edit and transfer files over SFTP."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Enable File Manager",
-        "description": "Browse and edit files on this host over SFTP."
-      },
-      "defaultPath": {
-        "label": "Default Path"
-      },
-      "scpLegacy": {
-        "label": "SCP Legacy Mode"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Simultaneous File Transfers",
-        "description": "How many files the side by side local/remote manager uploads or downloads at the same time. Lower this if your server limits SFTP channels."
-      },
-      "confirmBeforeTrash": {
-        "label": "Confirm before moving files to trash",
-        "description": "Ask before moving remote files to trash. Permanent deletion still requires confirmation."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "File Manager"
-  },
-  "fileManager": {
-    "noHostSelected": "No host selected",
-    "initializingEditor": "Initializing editor...",
-    "file": "File",
-    "folder": "Folder",
-    "uploadFile": "Upload File",
-    "downloadFile": "Download",
-    "extractArchive": "Extract Archive",
-    "extractingArchive": "Extracting {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} extracted successfully",
-    "extractFailed": "Extract failed",
-    "compressFile": "Compress File",
-    "compressFiles": "Compress Files",
-    "compressFilesDesc": "Compress {{count}} items into an archive",
-    "archiveName": "Archive Name",
-    "enterArchiveName": "Enter archive name...",
-    "compressionFormat": "Compression Format",
-    "selectedFiles": "Selected files",
-    "andMoreFiles": "and {{count}} more...",
-    "compress": "Compress",
-    "compressingFiles": "Compressing {{count}} items into {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} created successfully",
-    "compressFailed": "Compression failed",
-    "edit": "Edit",
-    "preview": "Preview",
-    "previous": "Previous",
-    "next": "Next",
-    "pageXOfY": "Page {{current}} of {{total}}",
-    "zoomOut": "Zoom Out",
-    "zoomIn": "Zoom In",
-    "newFile": "New File",
-    "newFolder": "New Folder",
-    "rename": "Rename",
-    "uploading": "Uploading...",
-    "uploadingFile": "Uploading {{name}}...",
-    "uploadingChunk": "Uploading {{name}}: {{percent}}% (part {{chunk}} of {{total}})",
-    "fileName": "File Name",
-    "folderName": "Folder Name",
-    "fileUploadedSuccessfully": "File \"{{name}}\" uploaded successfully",
-    "failedToUploadFile": "Failed to upload file",
-    "uploadingFolderFiles": "Uploading {{count}} file(s)...",
-    "uploadedFolderFiles": "Uploaded {{count}} file(s) successfully",
-    "uploadedFolderPartial": "Uploaded {{uploaded}} file(s), {{failed}} failed",
-    "fileDownloadedSuccessfully": "File \"{{name}}\" downloaded successfully",
-    "failedToDownloadFile": "Failed to download file",
-    "fileCreatedSuccessfully": "File \"{{name}}\" created successfully",
-    "folderCreatedSuccessfully": "Folder \"{{name}}\" created successfully",
-    "failedToCreateItem": "Failed to create item",
-    "operationFailed": "{{operation}} operation failed for {{name}}: {{error}}",
-    "failedToResolveSymlink": "Failed to resolve symlink",
-    "itemsDeletedSuccessfully": "{{count}} items deleted successfully",
-    "failedToDeleteItems": "Failed to delete items",
-    "sudoPasswordRequired": "Administrator Password Required",
-    "enterSudoPassword": "Enter sudo password to continue this operation",
-    "sudoPassword": "Sudo password",
-    "sudoOperationFailed": "Sudo operation failed",
-    "sudoAuthFailed": "Sudo authentication failed",
-    "dragFilesToUpload": "Drop files here to upload",
-    "dropToUploadHere": "Drop to upload here",
-    "dropToDownloadHere": "Drop to download here",
-    "localFiles": "Local",
-    "showLocalFiles": "Show local files (split view)",
-    "hideLocalFiles": "Hide local files",
-    "localHome": "Home folder",
-    "localPathPlaceholder": "Local folder path",
-    "localShowHidden": "Show hidden files",
-    "localHideHidden": "Hide hidden files",
-    "localRevealInFileManager": "Reveal in system file manager",
-    "localCannotOpenFolder": "Cannot open folder",
-    "localItemCount": "{{count}} items",
-    "localSelectedCount": "{{count}} selected",
-    "back": "Back",
-    "forward": "Forward",
-    "up": "Up",
-    "kind": "Kind",
-    "localUploadingProgress": "Uploading {{current}} of {{total}}",
-    "localDownloadingProgress": "Downloading {{current}} of {{total}}",
-    "localTransferInFlight": "{{count}} at once",
-    "localPreparingDownload": "Preparing download...",
-    "localTransferCancelled": "Transfer cancelled",
-    "localNothingToTransfer": "Nothing to transfer",
-    "localUploadComplete": "Uploaded {{count}} file(s)",
-    "localUploadFailed": "Upload failed",
-    "localUploadPartial": "Uploaded {{done}} file(s), {{failed}} failed",
-    "localDownloadComplete": "Downloaded {{count}} file(s)",
-    "localDownloadFailed": "Download failed",
-    "localDownloadPartial": "Downloaded {{done}} file(s), {{failed}} failed",
-    "localReplaceExistingPrompt": "{{count}} item(s) already exist in this folder. Replace them?",
-    "localReplace": "Replace",
-    "localSkipExisting": "Skip",
-    "localSkippedExisting": "Skipped {{count}} existing item(s)",
-    "localUnsafeNamesSkipped": "Skipped {{count}} item(s) whose names cannot be used on this computer",
-    "localOpen": "Open",
-    "localOpenFolder": "Open folder",
-    "localUploadToRemote": "Upload to server",
-    "localUploadToRemoteMany": "Upload {{count}} items to server",
-    "localMoveToTrash": "Move to Trash",
-    "localMoveToTrashMany": "Move {{count}} items to Trash",
-    "localTrashConfirmSingle": "Move \"{{name}}\" to the Trash?",
-    "localTrashConfirmFolder": "Move the folder \"{{name}}\" and all its contents to the Trash?",
-    "localTrashConfirmMany": "Move {{count}} items to the Trash?",
-    "localTrashed": "Moved {{count}} item(s) to the Trash",
-    "localTrashFailed": "Could not move to the Trash",
-    "localRenameFailed": "Rename failed",
-    "localCreateFailed": "Could not create item",
-    "goToParentFolder": "Go to parent folder",
-    "resizeSidebar": "Drag to resize the sidebar (double-click to reset)",
-    "resizeLocalPane": "Drag to resize the local pane (double-click to reset)",
-    "columns": "Columns",
-    "columnsHint": "Right-click to choose columns",
-    "emptyFolder": "This folder is empty",
-    "searchFiles": "Search files...",
-    "upload": "Upload",
-    "selectHostToStart": "Select a host to start file management",
-    "sshRequiredForFileManager": "File manager requires SSH. This host does not have SSH enabled.",
-    "failedToConnect": "Failed to connect to SSH",
-    "failedToLoadDirectory": "Failed to load directory",
-    "noSSHConnection": "No SSH connection available",
-    "copy": "Copy",
-    "cut": "Cut",
-    "paste": "Paste",
-    "copyPath": "Copy Path",
-    "copyPaths": "Copy Paths",
-    "delete": "Delete",
-    "properties": "Properties",
-    "refresh": "Refresh",
-    "downloadFiles": "Download {{count}} files to Browser",
-    "copyFiles": "Copy {{count}} items",
-    "cutFiles": "Cut {{count}} items",
-    "deleteFiles": "Delete {{count}} items",
-    "filesCopiedToClipboard": "{{count}} items copied to clipboard",
-    "filesCutToClipboard": "{{count}} items cut to clipboard",
-    "pathCopiedToClipboard": "Path copied to clipboard",
-    "pathsCopiedToClipboard": "{{count}} paths copied to clipboard",
-    "failedToCopyPath": "Failed to copy path to clipboard",
-    "copyFolderLink": "Copy Link to Folder",
-    "copyCurrentFolderLink": "Copy Link to Current Folder",
-    "folderLinkCopied": "Folder link copied to clipboard",
-    "failedToCopyFolderLink": "Failed to copy folder link",
-    "movedItems": "Moved {{count}} items",
-    "failedToDeleteItem": "Failed to delete item",
-    "itemRenamedSuccessfully": "{{type}} renamed successfully",
-    "failedToRenameItem": "Failed to rename item",
-    "download": "Download",
-    "openExternalEditor": "Open externally",
-    "chooseExternalEditor": "Choose external editor",
-    "externalEditorSelected": "External editor selected",
-    "externalEditorDesktopOnly": "External editor is only available in the desktop app",
-    "externalEditorOpened": "Opened in external editor. Saving there will upload changes back to the server.",
-    "failedToOpenExternalEditor": "Failed to open external editor",
-    "failedToSelectExternalEditor": "Failed to select external editor",
-    "permissions": "Permissions",
-    "size": "Size",
-    "modified": "Modified",
-    "path": "Path",
-    "confirmDelete": "Are you sure you want to delete {{name}}?",
-    "permissionDenied": "Permission denied",
-    "serverError": "Server Error",
-    "fileSavedSuccessfully": "File saved successfully",
-    "failedToSaveFile": "Failed to save file",
-    "confirmDeleteSingleItem": "Are you sure you want to permanently delete \"{{name}}\"?",
-    "confirmDeleteMultipleItems": "Are you sure you want to permanently delete {{count}} items?",
-    "confirmDeleteMultipleItemsWithFolders": "Are you sure you want to permanently delete {{count}} items? This includes folders and their contents.",
-    "confirmDeleteFolder": "Are you sure you want to permanently delete the folder \"{{name}}\" and all its contents?",
-    "permanentDeleteWarning": "This action cannot be undone. The item(s) will be permanently deleted from the server.",
-    "moveToTrashWarning": "The item(s) will be moved to the Termix Trash and can be restored before the retention period expires.",
-    "itemsMovedToTrash": "{{count}} item(s) moved to Trash",
-    "trash": "Trash",
-    "trashDescription": "Deleted items are retained for {{days}} day(s) on this host.",
-    "trashLoadFailed": "Failed to load Trash",
-    "trashEmpty": "Trash is empty",
-    "trashRestore": "Restore",
-    "trashRestored": "Restored {{name}}",
-    "trashRestoreFailed": "Failed to restore item. The original path may already exist.",
-    "trashDeletePermanently": "Delete permanently",
-    "trashDeleteConfirm": "Permanently delete {{name}}? This cannot be undone.",
-    "trashPermanentlyDeleted": "Permanently deleted {{name}}",
-    "trashDeleteFailed": "Failed to permanently delete item",
-    "trashEmptyAction": "Empty Trash",
-    "trashEmptyConfirm": "Permanently delete every item in Trash? This cannot be undone.",
-    "trashEmptied": "Trash emptied",
-    "trashRetention": "Automatic cleanup after (days)",
-    "trashRetentionSaved": "Trash retention updated",
-    "trashRetentionFailed": "Failed to update Trash retention",
-    "trashUnavailableConfirm": "This item cannot be moved to Trash, usually because it is on another filesystem or requires elevated permissions. Delete it permanently instead?",
-    "recent": "Recent",
-    "pinned": "Pinned",
-    "folderShortcuts": "Folder Shortcuts",
-    "failedToReconnectSSH": "Failed to reconnect SSH session",
-    "openTerminalHere": "Open Terminal Here",
-    "run": "Run",
-    "openTerminalInFolder": "Open Terminal in This Folder",
-    "openTerminalInFileLocation": "Open Terminal at File Location",
-    "runningFile": "Running - {{file}}",
-    "onlyRunExecutableFiles": "Can only run executable files",
-    "directories": "Directories",
-    "removedFromRecentFiles": "Removed \"{{name}}\" from recent files",
-    "removeFailed": "Remove failed",
-    "unpinnedSuccessfully": "Unpinned \"{{name}}\" successfully",
-    "unpinFailed": "Unpin failed",
-    "removedShortcut": "Removed shortcut \"{{name}}\"",
-    "removeShortcutFailed": "Remove shortcut failed",
-    "clearedAllRecentFiles": "Cleared all recent files",
-    "clearFailed": "Clear failed",
-    "removeFromRecentFiles": "Remove from recent files",
-    "clearAllRecentFiles": "Clear all recent files",
-    "unpinFile": "Unpin file",
-    "removeShortcut": "Remove shortcut",
-    "pinFile": "Pin file",
-    "addToShortcuts": "Add to shortcuts",
-    "pasteFailed": "Paste failed",
-    "noUndoableActions": "No undoable actions",
-    "undoCopySuccess": "Undid copy operation: Deleted {{count}} copied files",
-    "undoCopyFailedDelete": "Undo failed: Could not delete any copied files",
-    "undoCopyFailedNoInfo": "Undo failed: Could not find copied file information",
-    "undoMoveSuccess": "Undid move operation: Moved {{count}} files back to original location",
-    "undoMoveFailedMove": "Undo failed: Could not move any files back",
-    "undoMoveFailedNoInfo": "Undo failed: Could not find moved file information",
-    "undoDeleteNotSupported": "Delete operation cannot be undone: Files have been permanently deleted from server",
-    "undoTypeNotSupported": "Unsupported undo operation type",
-    "undoOperationFailed": "Undo operation failed",
-    "unknownError": "Unknown error",
-    "confirm": "Confirm",
-    "find": "Find...",
-    "replace": "Replace",
-    "downloadInstead": "Download Instead",
-    "keyboardShortcuts": "Keyboard Shortcuts",
-    "searchAndReplace": "Search & Replace",
-    "editing": "Editing",
-    "search": "Search",
-    "findNext": "Find Next",
-    "findPrevious": "Find Previous",
-    "save": "Save",
-    "selectAll": "Select All",
-    "undo": "Undo",
-    "redo": "Redo",
-    "moveLineUp": "Move Line Up",
-    "moveLineDown": "Move Line Down",
-    "toggleComment": "Toggle Comment",
-    "autoComplete": "Auto Complete",
-    "imageLoadError": "Failed to load image",
-    "startTyping": "Start typing...",
-    "unknownSize": "Unknown size",
-    "fileIsEmpty": "File is empty",
-    "largeFileWarning": "Large File Warning",
-    "largeFileWarningDesc": "This file is {{size}} in size, which may cause performance issues when opened as text.",
-    "fileNotFoundAndRemoved": "File \"{{name}}\" not found and has been removed from recent/pinned files",
-    "failedToLoadFile": "Failed to load file: {{error}}",
-    "serverErrorOccurred": "Server error occurred. Please try again later.",
-    "autoSaveFailed": "Auto-save failed",
-    "fileAutoSaved": "File auto-saved",
-    "moveFileFailed": "Failed to move {{name}}",
-    "moveOperationFailed": "Move operation failed",
-    "canOnlyCompareFiles": "Can only compare two files",
-    "comparingFiles": "Comparing files: {{file1}} and {{file2}}",
-    "dragFailed": "Drag operation failed",
-    "filePinnedSuccessfully": "File \"{{name}}\" pinned successfully",
-    "pinFileFailed": "Failed to pin file",
-    "fileUnpinnedSuccessfully": "File \"{{name}}\" unpinned successfully",
-    "unpinFileFailed": "Failed to unpin file",
-    "shortcutAddedSuccessfully": "Folder shortcut \"{{name}}\" added successfully",
-    "addShortcutFailed": "Failed to add shortcut",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} items successfully",
-    "operationCompleted": "{{operation}} {{count}} items",
-    "downloadFileSuccess": "File {{name}} downloaded successfully",
-    "downloadFileFailed": "Download failed",
-    "downloadingFile": "Downloading {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Move to {{name}}",
-    "diffCompareWith": "Diff compare with {{name}}",
-    "dragOutsideToDownload": "Drag outside window to download ({{count}} files)",
-    "newFolderDefault": "NewFolder",
-    "newFileDefault": "NewFile.txt",
-    "successfullyMovedItems": "Successfully moved {{count}} items to {{target}}",
-    "move": "Move",
-    "searchInFile": "Search in file (Ctrl+F)",
-    "showKeyboardShortcuts": "Show keyboard shortcuts",
-    "decreaseFontSize": "Decrease font size",
-    "increaseFontSize": "Increase font size",
-    "startWritingMarkdown": "Start writing your markdown content...",
-    "loadingFileComparison": "Loading file comparison...",
-    "reload": "Reload",
-    "compare": "Compare",
-    "sideBySide": "Side by Side",
-    "inline": "Inline",
-    "fileComparison": "File Comparison: {{file1}} vs {{file2}}",
-    "fileTooLarge": "File is too large (> 10MB) and cannot be opened as text for security reasons.",
-    "sshConnectionFailed": "SSH connection failed. Please check your connection to {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Failed to load file: {{error}}",
-    "connecting": "Connecting...",
-    "connectedSuccessfully": "Connected successfully",
-    "totpVerificationFailed": "TOTP verification failed",
-    "browserSignInFailed": "Sign-in failed. Please try again.",
-    "authenticationFailed": "Authentication failed",
-    "incorrectPassphrase": "Incorrect passphrase. Please try again.",
-    "verificationCodePrompt": "Verification code:",
-    "changePermissions": "Change Permissions",
-    "currentPermissions": "Current Permissions",
-    "owner": "Owner",
-    "group": "Group",
-    "others": "Others",
-    "read": "Read",
-    "write": "Write",
-    "execute": "Execute",
-    "permissionsChangedSuccessfully": "Permissions changed successfully",
-    "failedToChangePermissions": "Failed to change permissions",
-    "name": "Name",
-    "sortByName": "Name",
-    "sortByDate": "Date Modified",
-    "sortBySize": "Size",
-    "ascending": "Ascending",
-    "descending": "Descending",
-    "root": "Root",
-    "new": "New",
-    "sortBy": "Sort By",
-    "items": "Items",
-    "selected": "Selected",
-    "editor": "Editor",
-    "octal": "Octal",
-    "storage": "Storage",
-    "disk": "Disk",
-    "used": "Used",
-    "of": "of",
-    "toggleSidebar": "Toggle Sidebar",
-    "compactLayout": "Use compact layout",
-    "comfortableLayout": "Use comfortable layout",
-    "cannotLoadPdf": "Cannot load PDF",
-    "pdfLoadError": "There was an error loading this PDF file.",
-    "loadingPdf": "Loading PDF viewer...",
-    "loadingPage": "Loading page...",
-    "cancel": "Cancel",
-    "copiedItems_one": "Copied {{count}} item",
-    "copiedItems_other": "Copied {{count}} items",
-    "deleteCopiedFileFailed": "Could not delete the copy of {{name}}: {{error}}",
-    "dragMovedItems_one": "Moved {{count}} item to {{target}}",
-    "dragMovedItems_other": "Moved {{count}} items to {{target}}",
-    "moveBackFileFailed": "Could not move {{name}} back: {{error}}",
-    "terminal": "Terminal: {{host}} ({{path}})",
-    "dragToDesktop": "Dragging {{name}} to the desktop",
-    "dragFilesToDesktop": "Dragging {{count}} files to the desktop",
-    "folderDragUnsupported": "Dragging folders to the desktop is not supported yet",
-    "saveToDesktopFailed": "Save failed: {{error}}",
-    "dragFailedDetail": "Drag failed: {{error}}",
-    "videoUnsupported": "Your browser cannot play this video format.",
-    "downloadToPlay": "Download to play it elsewhere",
-    "cannotPreviewType": "Cannot preview this file type",
-    "cannotPreviewTypeHint": "This file type has no preview. Download it to open it in another app.",
-    "loadingFile": "Loading file...",
-    "loadingImage": "Loading image...",
-    "loadingEditor": "Loading editor...",
-    "loadingPreview": "Loading preview...",
-    "loadingAudio": "Loading audio player...",
-    "emptyPreview": "Nothing to preview yet...",
-    "revert": "Revert",
-    "openAsText": "Open as Text",
-    "confirmOpenAsText": "Do you want to continue opening this file as text? This may slow down your browser."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "Transfer files between two SSH hosts.",
-    "sourceServer": "Source Server",
-    "destinationServer": "Destination Server",
-    "selectHost": "Select host",
-    "noHostSelected": "No host selected",
-    "move": "Move",
-    "copy": "Copy",
-    "upload": "Upload",
-    "itemsSelected": "{{count}} item selected",
-    "itemsSelected_other": "{{count}} items selected",
-    "ready": "Ready",
-    "loadingHosts": "Loading hosts...",
-    "name": "Name",
-    "modified": "Modified",
-    "size": "Size",
-    "noFiles": "No files",
-    "open": "Open",
-    "up": "Up",
-    "refresh": "Refresh",
-    "copyToTarget": "Copy to Target Directory",
-    "rename": "Rename",
-    "delete": "Delete",
-    "editPermissions": "Edit Permissions",
-    "createNewFolder": "Create New Folder",
-    "deleteSelectedItems": "Delete Selected Items",
-    "deleteConfirm": "Delete {{count}} selected item?",
-    "deleteConfirm_other": "Delete {{count}} selected items?",
-    "cancel": "Cancel",
-    "save": "Save",
-    "folderCreated": "Folder created",
-    "itemRenamed": "Item renamed",
-    "actionFailed": "Action failed",
-    "itemsDeleted": "{{count}} item deleted",
-    "itemsDeleted_other": "{{count}} items deleted",
-    "deleteFailed": "Delete failed",
-    "permissionsUpdated": "Permissions updated",
-    "noRemoteSessionConnected": "No remote session connected",
-    "failedToListFiles": "Failed to list files",
-    "failedToRefresh": "Failed to refresh",
-    "destinationInsideSource": "Destination cannot be inside the selected source path.",
-    "sameHostNoOp": "Source and destination are the same folder."
-  },
-  "hosts": {
-    "fileManager": "File Manager",
-    "fileManagerUrlCopied": "File Manager URL copied",
-    "copyFileManagerUrlAction": "Copy File Manager URL",
-    "docsLink": "View docs",
-    "hostNotFound": "Host not found",
-    "loadingHost": "Loading host..."
-  },
-  "onboarding": {
-    "feature_files": "File manager",
-    "feature_files_desc": "Browse, upload, download and edit files over SFTP without leaving the app."
-  },
-  "terminal": {
-    "runTitle": "Running {{command}} - {{host}}",
-    "terminalTitle": "Terminal - {{host}}",
-    "terminalWithPath": "Terminal - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Browse destination folders",
-    "browsePathError": "Could not open this path on the destination host.",
-    "browsePathWillBeCreated": "This folder does not exist yet. It will be created when the transfer starts.",
-    "cancel": "Cancel",
-    "cleanupDestFiles": "Clean up destination",
-    "cleanupDestFilesError": "Cleanup failed",
-    "cleanupDestFilesNothing": "Nothing to clean up on the destination",
-    "cleanupDestFilesPartial": "Some partial files could not be removed",
-    "cleanupDestFilesSuccess": "Removed partial files from the destination",
-    "confirmCopy": "Copy",
-    "confirmMove": "Move",
-    "copyFolderToHost": "Copy folder to host…",
-    "copyItemsToHost": "Copy {{count}} items to host…",
-    "copyToHost": "Copy to host…",
-    "destinationPath": "Destination path",
-    "destMustBeDirectory": "Destination must be a directory for multi-item transfers",
-    "goUp": "Go up",
-    "hostAuthRequired": "Authentication required. Open File Manager on this host first",
-    "hostConnecting": "Connecting…",
-    "hostConnectionFailed": "Connection failed",
-    "hostDisconnected": "Not connected",
-    "hostReady": "Ready",
-    "itemsSummary": "{{count}} items",
-    "jumpHostLimitation": "Both hosts must be reachable from the Termix server. Direct host-to-host routing is not supported.",
-    "methodAuto": "Auto",
-    "methodAutoHint": "Picks tar or per-file SFTP based on file count, size, and compressibility. Single files always use streaming SFTP.",
-    "methodItemSftp": "Per-file SFTP",
-    "methodItemSftpHint": "Transfer each file individually over SFTP. Works on all hosts including Windows.",
-    "methodItemSftpLimitation": "Each file uses the same SFTP stream as a single-file copy, one after another. Progress is combined across all files, so the bar moves slowly during large files.",
-    "methodLabel": "Transfer method",
-    "methodPreviewError": "Could not preview transfer method. The server will still pick a method when you start.",
-    "methodPreviewLoading": "Calculating transfer method…",
-    "methodPreviewScanSummary": "{{fileCount}} files, {{totalSize}} total (scanned on source host).",
-    "methodPreviewWillUseItemSftp": "Will use: Per-file SFTP",
-    "methodPreviewWillUseTar": "Will use: Tar archive",
-    "methodReason": {
-      "user_item_sftp": "You chose per-file SFTP.",
-      "user_tar": "You chose tar archive.",
-      "tar_unavailable": "Tar is not available on one or both hosts, so per-file SFTP will be used instead.",
-      "windows_host": "A Windows host is involved, so tar is not used.",
-      "auto_multi_large": "Auto: multiple files including a large file ({{largestSize}}) with compressible data. Tar bundles them into one transfer.",
-      "auto_single_large_in_archive": "Auto: one large file ({{largestSize}}) in this set, so per-file SFTP.",
-      "auto_many_incompressible": "Auto: mostly incompressible data, so per-file SFTP.",
-      "auto_many_files": "Auto: many files ({{fileCount}}), tar cuts the per-file overhead.",
-      "auto_default": "Auto: per-file SFTP for this set."
-    },
-    "methodTar": "Tar archive",
-    "methodTarHint": "Compress on source, transfer one archive, extract on destination. Requires tar on both Unix hosts.",
-    "metricsCompress": "Compress on source: {{duration}}",
-    "metricsExtract": "Extract on destination: {{duration}}",
-    "metricsPrepare": "Prepare destination: {{duration}}",
-    "metricsRouteBenchmark": "Route probe: direct {{direct}}, relay {{relay}}",
-    "metricsSourceDelete": "Remove from source: {{duration}}",
-    "metricsTotal": "Total: {{duration}}",
-    "metricsTransfer": "End-to-end: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 verified: {{duration}}",
-    "moveFolderToHost": "Move folder to host…",
-    "moveItemsToHost": "Move {{count}} items to host…",
-    "moveToHost": "Move to host…",
-    "noHostsConnected": "No other file-manager hosts available.",
-    "noHostsConnectedHint": "Add another SSH host with File Manager enabled in Host Manager.",
-    "parallelSegmentsHint": "Large files are split into 256 MB chunks. Multiple lanes use separate connections (like starting several transfers) for higher total throughput.",
-    "parallelSegmentsLabel": "Parallel transfer lanes",
-    "parallelSegmentsOption": "{{count}} lanes",
-    "progressBenchmarking": "Selecting the fastest transfer route…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Cancel",
-    "progressCancelling": "Cancelling…",
-    "progressCompressing": "Compressing on source host…",
-    "progressExtracting": "Extracting on destination…",
-    "progressItems": "{{current}} / {{total}} files",
-    "progressReconnecting": "Reconnecting…",
-    "progressStalled": "Stalled",
-    "progressTotalSpeed": "{{speed}} total ({{lanes}} lanes)",
-    "progressTransferring": "Transferring data…",
-    "progressTransferringItems": "Transferring files ({{current}} of {{total}})…",
-    "progressVerifying": "Verifying file integrity…",
-    "recentDestinations": "Recent destinations",
-    "resumedHint": "Reconnected to an active transfer started in another window.",
-    "retryTransfer": "Retry",
-    "retryTransferError": "Retry failed",
-    "selectDestinationHost": "Select destination host",
-    "transferCancelled": "Transfer cancelled",
-    "transferCancelledCopyHint": "Partial files may remain on the destination.",
-    "transferCancelledMoveHint": "Partial files may remain on the destination. Source files were not removed.",
-    "transferError": "Transfer failed",
-    "transferFailedRetryHint": "Partial data was kept on the destination. Retry will resume when the connection is back.",
-    "transferPartialHint": "Could not transfer: {{paths}}",
-    "transferSuccess": "Transfer complete",
-    "metricsHopSourceRead": "Source → server: {{throughput}}",
-    "metricsHopDestSftpWrite": "Server → dest (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Server → dest (local): {{throughput}}"
-  },
-  "plugin": {
-    "name": "File Manager"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/af_ZA.json b/plugins/file-manager/locales/translated/af_ZA.json
deleted file mode 100644
index 828a4143d..000000000
--- a/plugins/file-manager/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Lêers",
-    "sftp": "SFTP",
-    "openFileManager": "Maak Lêerbestuurder oop"
-  },
-  "permissions": {
-    "use": {
-      "title": "Gebruik lêerbestuurder",
-      "description": "Blaai, wysig en dra lêers oor SFTP oor."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Aktiveer Lêerbestuurder",
-        "description": "Blaai en wysig lêers op hierdie gasheer via SFTP."
-      },
-      "defaultPath": {
-        "label": "Standaardpad"
-      },
-      "scpLegacy": {
-        "label": "SCP Legacy-modus"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Gelyktydige lêeroordragte",
-        "description": "Hoeveel lêers die sy-aan-sy plaaslike/afgeleë bestuurder gelyktydig oplaai of aflaai. Verlaag dit as jou bediener SFTP-kanale beperk."
-      },
-      "confirmBeforeTrash": {
-        "label": "Bevestig voordat lêers na die asblik geskuif word",
-        "description": "Vra voordat afgeleë lêers na die asblik geskuif word. Permanente verwydering vereis steeds bevestiging."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Lêerbestuurder"
-  },
-  "fileManager": {
-    "noHostSelected": "Geen gasheer gekies nie",
-    "initializingEditor": "Inisialiseer redigeerder...",
-    "file": "Lêer",
-    "folder": "Vouer",
-    "uploadFile": "Laai lêer op",
-    "downloadFile": "Laai af",
-    "extractArchive": "Uittrekselargief",
-    "extractingArchive": "Onttrek tans {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} suksesvol onttrek",
-    "extractFailed": "Uittreksel het misluk",
-    "compressFile": "Komprimeer lêer",
-    "compressFiles": "Komprimeer lêers",
-    "compressFilesDesc": "Kompresseer {{count}} items in 'n argief",
-    "archiveName": "Argiefnaam",
-    "enterArchiveName": "Voer argiefnaam in...",
-    "compressionFormat": "Kompressieformaat",
-    "selectedFiles": "Geselekteerde lêers",
-    "andMoreFiles": "en {{count}} meer...",
-    "compress": "Kompressie",
-    "compressingFiles": "Komprimering van {{count}} items in {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} suksesvol geskep",
-    "compressFailed": "Kompressie het misluk",
-    "edit": "Wysig",
-    "preview": "Voorskou",
-    "previous": "Vorige",
-    "next": "Volgende",
-    "pageXOfY": "Bladsy {{current}} van {{total}}",
-    "zoomOut": "Uitzoom",
-    "zoomIn": "Inzoem",
-    "newFile": "Nuwe Lêer",
-    "newFolder": "Nuwe Vouer",
-    "rename": "Hernoem",
-    "uploading": "Laai tans op...",
-    "uploadingFile": "Laai tans {{name}} op ...",
-    "uploadingChunk": "Laai tans {{name}}op: {{percent}}% (deel {{chunk}} van {{total}})",
-    "fileName": "Lêernaam",
-    "folderName": "Vouernaam",
-    "fileUploadedSuccessfully": "Lêer \"{{name}}\" is suksesvol opgelaai",
-    "failedToUploadFile": "Kon nie lêer oplaai nie",
-    "uploadingFolderFiles": "Laai tans {{count}} lêer(s) op...",
-    "uploadedFolderFiles": "{{count}} lêer(s) suksesvol opgelaai",
-    "uploadedFolderPartial": "Opgelaaide {{uploaded}} lêer(s), {{failed}} het misluk",
-    "fileDownloadedSuccessfully": "Lêer \"{{name}}\" suksesvol afgelaai",
-    "failedToDownloadFile": "Kon nie lêer aflaai nie",
-    "fileCreatedSuccessfully": "Lêer \"{{name}}\" suksesvol geskep",
-    "folderCreatedSuccessfully": "Lêer \"{{name}}\" suksesvol geskep",
-    "failedToCreateItem": "Kon nie item skep nie",
-    "operationFailed": "{{operation}} -bewerking het misluk vir {{name}}: {{error}}",
-    "failedToResolveSymlink": "Kon nie simskakel oplos nie",
-    "itemsDeletedSuccessfully": "{{count}} items is suksesvol verwyder",
-    "failedToDeleteItems": "Kon nie items uitvee nie",
-    "sudoPasswordRequired": "Administrateurwagwoord benodig",
-    "enterSudoPassword": "Voer die sudo-wagwoord in om hierdie operasie voort te sit",
-    "sudoPassword": "Sudo-wagwoord",
-    "sudoOperationFailed": "Sudo-bewerking het misluk",
-    "sudoAuthFailed": "Sudo-verifikasie het misluk",
-    "dragFilesToUpload": "Plaas lêers hier om op te laai",
-    "dropToUploadHere": "Laat val om hier op te laai",
-    "dropToDownloadHere": "Los om hier af te laai",
-    "localFiles": "Plaaslik",
-    "showLocalFiles": "Wys plaaslike lêers (gesplete aansig)",
-    "hideLocalFiles": "Versteek plaaslike lêers",
-    "localHome": "Tuisbladmap",
-    "localPathPlaceholder": "Plaaslike vouerpad",
-    "localShowHidden": "Wys versteekte lêers",
-    "localHideHidden": "Versteek versteekte lêers",
-    "localRevealInFileManager": "Wys in stelsellêerbestuurder",
-    "localCannotOpenFolder": "Kan nie lêer oopmaak nie",
-    "localItemCount": "{{count}} items",
-    "localSelectedCount": "{{count}} gekies",
-    "back": "Terug",
-    "forward": "Vorentoe",
-    "up": "Op",
-    "kind": "Soortgelyk",
-    "localUploadingProgress": "Laai tans {{current}} van {{total}} op",
-    "localDownloadingProgress": "Laai tans {{current}} van {{total}} af",
-    "localTransferInFlight": "{{count}} gelyktydig",
-    "localPreparingDownload": "Berei aflaai voor...",
-    "localTransferCancelled": "Oordrag gekanselleer",
-    "localNothingToTransfer": "Niks om oor te dra nie",
-    "localUploadComplete": "Opgelaaide {{count}} lêer(s)",
-    "localUploadFailed": "Oplaai het misluk",
-    "localUploadPartial": "Opgelaaide {{done}} lêer(s), {{failed}} het misluk",
-    "localDownloadComplete": "Afgelaaide {{count}} lêer(s)",
-    "localDownloadFailed": "Aflaai het misluk",
-    "localDownloadPartial": "Aflaai van {{done}} lêer(s), {{failed}} het misluk",
-    "localReplaceExistingPrompt": "{{count}} item(s) bestaan reeds in hierdie vouer. Vervang hulle?",
-    "localReplace": "Vervang",
-    "localSkipExisting": "Slaan oor",
-    "localSkippedExisting": "Oorgeslaan {{count}} bestaande item(s)",
-    "localUnsafeNamesSkipped": "Oorgeslaan {{count}} item(s) waarvan die name nie op hierdie rekenaar gebruik kan word nie",
-    "localOpen": "Oop",
-    "localOpenFolder": "Maak vouer oop",
-    "localUploadToRemote": "Laai op na bediener",
-    "localUploadToRemoteMany": "Laai {{count}} items na bediener op",
-    "localMoveToTrash": "Skuif na asblik",
-    "localMoveToTrashMany": "Skuif {{count}} items na die asblik",
-    "localTrashConfirmSingle": "Skuif \"{{name}}\" na die asblik?",
-    "localTrashConfirmFolder": "Skuif die vouer \"{{name}}\" en al sy inhoud na die asblik?",
-    "localTrashConfirmMany": "Skuif {{count}} items na die asblik?",
-    "localTrashed": "Het {{count}} item(s) na die asblik geskuif",
-    "localTrashFailed": "Kon nie na die asblik skuif nie",
-    "localRenameFailed": "Hernoem het misluk",
-    "localCreateFailed": "Kon nie item skep nie",
-    "goToParentFolder": "Gaan na ouermap",
-    "resizeSidebar": "Sleep om die sybalk se grootte te verander (dubbelklik om terug te stel)",
-    "resizeLocalPane": "Sleep om die plaaslike paneel se grootte te verander (dubbelklik om terug te stel)",
-    "columns": "Kolomme",
-    "columnsHint": "Regskliek om kolomme te kies",
-    "emptyFolder": "Hierdie vouer is leeg",
-    "searchFiles": "Soek lêers...",
-    "upload": "Oplaai",
-    "selectHostToStart": "Kies 'n gasheer om lêerbestuur te begin",
-    "sshRequiredForFileManager": "Lêerbestuurder benodig SSH. Hierdie gasheer het nie SSH geaktiveer nie.",
-    "failedToConnect": "Kon nie aan SSH koppel nie",
-    "failedToLoadDirectory": "Kon nie gids laai nie",
-    "noSSHConnection": "Geen SSH-verbinding beskikbaar nie",
-    "copy": "Kopieer",
-    "cut": "Sny",
-    "paste": "Plak",
-    "copyPath": "Kopieer Pad",
-    "copyPaths": "Kopieer paaie",
-    "delete": "Vee uit",
-    "properties": "Eienskappe",
-    "refresh": "Verfris",
-    "downloadFiles": "Laai {{count}} lêers na die blaaier af",
-    "copyFiles": "Kopieer {{count}} items",
-    "cutFiles": "Sny {{count}} items",
-    "deleteFiles": "Vee {{count}} items uit",
-    "filesCopiedToClipboard": "{{count}} items gekopieer na knipbord",
-    "filesCutToClipboard": "{{count}} items is na knipbord gesny",
-    "pathCopiedToClipboard": "Pad gekopieer na knipbord",
-    "pathsCopiedToClipboard": "{{count}} paaie gekopieer na knipbord",
-    "failedToCopyPath": "Kon nie pad na knipbord kopieer nie",
-    "copyFolderLink": "Kopieer skakel na vouer",
-    "copyCurrentFolderLink": "Kopieer skakel na huidige vouer",
-    "folderLinkCopied": "Vouerskakel gekopieer na knipbord",
-    "failedToCopyFolderLink": "Kon nie vouerskakel kopieer nie",
-    "movedItems": "Het {{count}} items geskuif",
-    "failedToDeleteItem": "Kon nie item verwyder nie",
-    "itemRenamedSuccessfully": "{{type}} suksesvol hernoem",
-    "failedToRenameItem": "Kon nie item hernoem nie",
-    "download": "Laai af",
-    "openExternalEditor": "Maak ekstern oop",
-    "chooseExternalEditor": "Kies eksterne redigeerder",
-    "externalEditorSelected": "Eksterne redigeerder gekies",
-    "externalEditorDesktopOnly": "Eksterne redigeerder is slegs beskikbaar in die rekenaarprogram",
-    "externalEditorOpened": "Oopgemaak in eksterne redigeerder. As jy dit daar stoor, sal dit veranderinge terug na die bediener oplaai.",
-    "failedToOpenExternalEditor": "Kon nie eksterne redigeerder oopmaak nie",
-    "failedToSelectExternalEditor": "Kon nie eksterne redigeerder kies nie",
-    "permissions": "Toestemmings",
-    "size": "Grootte",
-    "modified": "Gewysig",
-    "path": "Pad",
-    "confirmDelete": "Is jy seker jy wil {{name}} verwyder?",
-    "permissionDenied": "Toestemming geweier",
-    "serverError": "Bedienerfout",
-    "fileSavedSuccessfully": "Lêer suksesvol gestoor",
-    "failedToSaveFile": "Kon nie lêer stoor nie",
-    "confirmDeleteSingleItem": "Is jy seker jy wil \"{{name}} \" permanent verwyder?",
-    "confirmDeleteMultipleItems": "Is jy seker jy wil {{count}} items permanent verwyder?",
-    "confirmDeleteMultipleItemsWithFolders": "Is jy seker jy wil {{count}} items permanent verwyder? Dit sluit gidse en hul inhoud in.",
-    "confirmDeleteFolder": "Is jy seker jy wil die vouer \"{{name}}\" en al sy inhoud permanent verwyder?",
-    "permanentDeleteWarning": "Hierdie aksie kan nie ongedaan gemaak word nie. Die item(s) sal permanent van die bediener verwyder word.",
-    "moveToTrashWarning": "Die item(s) sal na die Termix-asblik geskuif word en kan herstel word voordat die bewaringstydperk verstryk.",
-    "itemsMovedToTrash": "{{count}} item(s) na die asblik geskuif",
-    "trash": "Asblik",
-    "trashDescription": "Geskrapte items word vir {{days}} dag(e) op hierdie gasheer behou.",
-    "trashLoadFailed": "Kon nie die asblik laai nie",
-    "trashEmpty": "Asblik is leeg",
-    "trashRestore": "Herstel",
-    "trashRestored": "Herstel {{name}}",
-    "trashRestoreFailed": "Kon nie item herstel nie. Die oorspronklike pad bestaan dalk reeds.",
-    "trashDeletePermanently": "Vee permanent uit",
-    "trashDeleteConfirm": "Wil jy {{name}}permanent verwyder? Dit kan nie ongedaan gemaak word nie.",
-    "trashPermanentlyDeleted": "Permanent verwyder {{name}}",
-    "trashDeleteFailed": "Kon nie item permanent verwyder nie",
-    "trashEmptyAction": "Maak asblik leeg",
-    "trashEmptyConfirm": "Wil jy elke item in die asblik permanent verwyder? Dit kan nie ongedaan gemaak word nie.",
-    "trashEmptied": "Asblik leeggemaak",
-    "trashRetention": "Outomatiese skoonmaak na (dae)",
-    "trashRetentionSaved": "Asblikbewaring opgedateer",
-    "trashRetentionFailed": "Kon nie asblikbehoud opdateer nie",
-    "trashUnavailableConfirm": "Hierdie item kan nie na die asblik geskuif word nie, gewoonlik omdat dit op 'n ander lêerstelsel is of verhoogde toestemmings benodig. Verwyder dit eerder permanent?",
-    "recent": "Onlangs",
-    "pinned": "Vasgepen",
-    "folderShortcuts": "Vouerkortpaaie",
-    "failedToReconnectSSH": "Kon nie SSH-sessie herkoppel nie",
-    "openTerminalHere": "Maak Terminaal Hier Oop",
-    "run": "Hardloop",
-    "openTerminalInFolder": "Maak Terminaal in Hierdie Vouer Oop",
-    "openTerminalInFileLocation": "Maak Terminaal oop by Lêerligging",
-    "runningFile": "Hardloop - {{file}}",
-    "onlyRunExecutableFiles": "Kan slegs uitvoerbare lêers uitvoer",
-    "directories": "Gidse",
-    "removedFromRecentFiles": "\"{{name}}\" is uit onlangse lêers verwyder",
-    "removeFailed": "Verwydering het misluk",
-    "unpinnedSuccessfully": "\"{{name}}\" suksesvol ontspeld",
-    "unpinFailed": "Ontspeld het misluk",
-    "removedShortcut": "Kortpad \"{{name}} \" verwyder",
-    "removeShortcutFailed": "Verwydering van kortpad het misluk",
-    "clearedAllRecentFiles": "Alle onlangse lêers is uitgevee",
-    "clearFailed": "Vee uit misluk",
-    "removeFromRecentFiles": "Verwyder uit onlangse lêers",
-    "clearAllRecentFiles": "Vee alle onlangse lêers uit",
-    "unpinFile": "Ontspeld lêer",
-    "removeShortcut": "Verwyder kortpad",
-    "pinFile": "Speld lêer vas",
-    "addToShortcuts": "Voeg by kortpaaie",
-    "pasteFailed": "Plak het misluk",
-    "noUndoableActions": "Geen ongedaanbare aksies nie",
-    "undoCopySuccess": "Kopieerbewerking ongedaan gemaak: Gekopieerde lêers is verwyder {{count}}",
-    "undoCopyFailedDelete": "Ongedaan maak het misluk: Kon geen gekopieerde lêers verwyder nie",
-    "undoCopyFailedNoInfo": "Ongedaan maak het misluk: Kon nie gekopieerde lêerinligting vind nie",
-    "undoMoveSuccess": "Ongedaan gemaak met skuifbewerking: {{count}} lêers teruggeskuif na oorspronklike ligging",
-    "undoMoveFailedMove": "Ongedaan maak het misluk: Kon geen lêers terugskuif nie",
-    "undoMoveFailedNoInfo": "Ongedaan maak het misluk: Kon nie inligting oor die verskuifde lêer vind nie",
-    "undoDeleteNotSupported": "Verwyderingsbewerking kan nie ongedaan gemaak word nie: Lêers is permanent van die bediener verwyder",
-    "undoTypeNotSupported": "Nie-ondersteunde ongedaanmaak-bewerkingtipe",
-    "undoOperationFailed": "Ongedaanmaak-bewerking het misluk",
-    "unknownError": "Onbekende fout",
-    "confirm": "Bevestig",
-    "find": "Vind...",
-    "replace": "Vervang",
-    "downloadInstead": "Laai eerder af",
-    "keyboardShortcuts": "Sleutelbordkortpaaie",
-    "searchAndReplace": "Soek en vervang",
-    "editing": "Redigering",
-    "search": "Soek",
-    "findNext": "Vind Volgende",
-    "findPrevious": "Vind Vorige",
-    "save": "Stoor",
-    "selectAll": "Kies Alles",
-    "undo": "Ongedaan maak",
-    "redo": "Herdoen",
-    "moveLineUp": "Skuif lyn op",
-    "moveLineDown": "Skuif lyn af",
-    "toggleComment": "Wissel kommentaar",
-    "autoComplete": "Outomatiese Voltooiing",
-    "imageLoadError": "Kon nie beeld laai nie",
-    "startTyping": "Begin tik...",
-    "unknownSize": "Onbekende grootte",
-    "fileIsEmpty": "Lêer is leeg",
-    "largeFileWarning": "Waarskuwing oor groot lêers",
-    "largeFileWarningDesc": "Hierdie lêer is {{size}} groot, wat werkverrigtingsprobleme kan veroorsaak wanneer dit as teks oopgemaak word.",
-    "fileNotFoundAndRemoved": "Lêer \"{{name}}\" nie gevind nie en is verwyder uit onlangse/vasgespelde lêers",
-    "failedToLoadFile": "Kon nie lêer laai nie: {{error}}",
-    "serverErrorOccurred": "Bedienerfout het voorgekom. Probeer asseblief later weer.",
-    "autoSaveFailed": "Outomatiese stoor het misluk",
-    "fileAutoSaved": "Lêer outomaties gestoor",
-    "moveFileFailed": "Kon nie {{name}} skuif nie",
-    "moveOperationFailed": "Skuifbewerking het misluk",
-    "canOnlyCompareFiles": "Kan slegs twee lêers vergelyk",
-    "comparingFiles": "Vergelyk lêers: {{file1}} en {{file2}}",
-    "dragFailed": "Sleepbewerking het misluk",
-    "filePinnedSuccessfully": "Lêer \"{{name}}\" suksesvol vasgepen",
-    "pinFileFailed": "Kon nie lêer vaspen nie",
-    "fileUnpinnedSuccessfully": "Lêer \"{{name}}\" suksesvol ontspeld",
-    "unpinFileFailed": "Kon nie lêer ontspeld nie",
-    "shortcutAddedSuccessfully": "Vouerkortpad \"{{name}}\" suksesvol bygevoeg",
-    "addShortcutFailed": "Kon nie kortpad byvoeg nie",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} items suksesvol",
-    "operationCompleted": "{{operation}} {{count}} items",
-    "downloadFileSuccess": "Lêer {{name}} suksesvol afgelaai",
-    "downloadFileFailed": "Aflaai het misluk",
-    "downloadingFile": "Laai tans af {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Skuif na {{name}}",
-    "diffCompareWith": "Verskil vergelyking met {{name}}",
-    "dragOutsideToDownload": "Sleep buite die venster om af te laai ({{count}} lêers)",
-    "newFolderDefault": "NuweVouer",
-    "newFileDefault": "NuweLêer.txt",
-    "successfullyMovedItems": "Suksesvol {{count}} items na {{target}} geskuif",
-    "move": "Beweeg",
-    "searchInFile": "Soek in lêer (Ctrl+F)",
-    "showKeyboardShortcuts": "Wys sleutelbordkortpaaie",
-    "decreaseFontSize": "Verklein lettergrootte",
-    "increaseFontSize": "Vergroot lettergrootte",
-    "startWritingMarkdown": "Begin om jou afslaginhoud te skryf...",
-    "loadingFileComparison": "Laai lêervergelyking...",
-    "reload": "Herlaai",
-    "compare": "Vergelyk",
-    "sideBySide": "Sy aan Sy",
-    "inline": "Inlyn",
-    "fileComparison": "Lêervergelyking: {{file1}} vs {{file2}}",
-    "fileTooLarge": "Die lêer is te groot (> 10MB) en kan om sekuriteitsredes nie as teks oopgemaak word nie.",
-    "sshConnectionFailed": "SSH-verbinding het misluk. Kontroleer asseblief jou verbinding met {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Kon nie lêer laai nie: {{error}}",
-    "connecting": "Verbind...",
-    "connectedSuccessfully": "Suksesvol gekoppel",
-    "totpVerificationFailed": "TOTP-verifikasie het misluk",
-    "browserSignInFailed": "Aanmelding het misluk. Probeer asseblief weer.",
-    "authenticationFailed": "Verifikasie het misluk",
-    "incorrectPassphrase": "Verkeerde wagwoordfrase. Probeer asseblief weer.",
-    "verificationCodePrompt": "Verifikasiekode:",
-    "changePermissions": "Verander Toestemmings",
-    "currentPermissions": "Huidige Toestemmings",
-    "owner": "Eienaar",
-    "group": "Groep",
-    "others": "Ander",
-    "read": "Lees",
-    "write": "Skryf",
-    "execute": "Voer uit",
-    "permissionsChangedSuccessfully": "Toestemmings suksesvol verander",
-    "failedToChangePermissions": "Kon nie toestemmings verander nie",
-    "name": "Naam",
-    "sortByName": "Naam",
-    "sortByDate": "Datum Gewysig",
-    "sortBySize": "Grootte",
-    "ascending": "Stygend",
-    "descending": "Dalend",
-    "root": "Wortel",
-    "new": "Nuut",
-    "sortBy": "Sorteer volgens",
-    "items": "Items",
-    "selected": "Gekies",
-    "editor": "Redakteur",
-    "octal": "Oktaal",
-    "storage": "Berging",
-    "disk": "Skyf",
-    "used": "Gebruik",
-    "of": "van",
-    "toggleSidebar": "Wissel sybalk",
-    "compactLayout": "Gebruik kompakte uitleg",
-    "comfortableLayout": "Gebruik gemaklike uitleg",
-    "cannotLoadPdf": "Kan nie PDF laai nie",
-    "pdfLoadError": "Daar was 'n fout tydens die laai van hierdie PDF-lêer.",
-    "loadingPdf": "Laai PDF-kyker...",
-    "loadingPage": "Laai bladsy...",
-    "cancel": "Kanselleer",
-    "copiedItems_one": "Gekopieerde {{count}} item",
-    "copiedItems_other": "Gekopieerde {{count}} items",
-    "deleteCopiedFileFailed": "Kon nie die kopie van {{name}}verwyder nie: {{error}}",
-    "dragMovedItems_one": "Het {{count}} item na {{target}} geskuif",
-    "dragMovedItems_other": "Het {{count}} items na {{target}} geskuif",
-    "moveBackFileFailed": "Kon nie {{name}} terugskuif nie: {{error}}",
-    "terminal": "Terminaal: {{host}} ({{path}})",
-    "dragToDesktop": "Sleep {{name}} na die lessenaar",
-    "dragFilesToDesktop": "Sleep {{count}} lêers na die lessenaar",
-    "folderDragUnsupported": "Die sleep van lêers na die lessenaar word nog nie ondersteun nie",
-    "saveToDesktopFailed": "Stoor het misluk: {{error}}",
-    "dragFailedDetail": "Sleep het misluk: {{error}}",
-    "videoUnsupported": "Jou blaaier kan nie hierdie videoformaat speel nie.",
-    "downloadToPlay": "Laai dit af om dit elders te speel",
-    "cannotPreviewType": "Kan nie hierdie lêertipe voorbeskou nie",
-    "cannotPreviewTypeHint": "Hierdie lêertipe het geen voorskou nie. Laai dit af om dit in 'n ander toepassing oop te maak.",
-    "loadingFile": "Laai lêer...",
-    "loadingImage": "Laai beeld...",
-    "loadingEditor": "Laai redigeerder...",
-    "loadingPreview": "Laai voorskou...",
-    "loadingAudio": "Laai oudiospeler...",
-    "emptyPreview": "Niks om nog te voorskou nie...",
-    "revert": "Terugkeer",
-    "openAsText": "Maak oop as teks",
-    "confirmOpenAsText": "Wil jy hierdie lêer as teks aanhou oopmaak? Dit kan jou blaaier vertraag."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "Dra lêers oor tussen twee SSH-gashere.",
-    "sourceServer": "Bronbediener",
-    "destinationServer": "Bestemmingsbediener",
-    "selectHost": "Kies gasheer",
-    "noHostSelected": "Geen gasheer gekies nie",
-    "move": "Beweeg",
-    "copy": "Kopieer",
-    "upload": "Oplaai",
-    "itemsSelected": "{{count}} item gekies",
-    "itemsSelected_other": "{{count}} items gekies",
-    "ready": "Gereed",
-    "loadingHosts": "Laai gashere...",
-    "name": "Naam",
-    "modified": "Gewysig",
-    "size": "Grootte",
-    "noFiles": "Geen lêers nie",
-    "open": "Oop",
-    "up": "Op",
-    "refresh": "Verfris",
-    "copyToTarget": "Kopieer na teikengids",
-    "rename": "Hernoem",
-    "delete": "Vee uit",
-    "editPermissions": "Wysig Toestemmings",
-    "createNewFolder": "Skep Nuwe Vouer",
-    "deleteSelectedItems": "Vee geselekteerde items uit",
-    "deleteConfirm": "Vee {{count}} gekose item uit?",
-    "deleteConfirm_other": "Vee {{count}} gekose items uit?",
-    "cancel": "Kanselleer",
-    "save": "Stoor",
-    "folderCreated": "Vouer geskep",
-    "itemRenamed": "Item hernoem",
-    "actionFailed": "Aksie het misluk",
-    "itemsDeleted": "{{count}} item is verwyder",
-    "itemsDeleted_other": "{{count}} items is uitgevee",
-    "deleteFailed": "Verwydering het misluk",
-    "permissionsUpdated": "Toestemmings opgedateer",
-    "noRemoteSessionConnected": "Geen afstandsessie gekoppel nie",
-    "failedToListFiles": "Kon nie lêers lys nie",
-    "failedToRefresh": "Kon nie herlaai nie",
-    "destinationInsideSource": "Bestemming kan nie binne die gekose bronpad wees nie.",
-    "sameHostNoOp": "Bron en bestemming is dieselfde lêergids."
-  },
-  "hosts": {
-    "fileManager": "Lêerbestuurder",
-    "fileManagerUrlCopied": "Lêerbestuurder-URL gekopieer",
-    "copyFileManagerUrlAction": "Kopieer Lêerbestuurder URL",
-    "docsLink": "Bekyk dokumente",
-    "hostNotFound": "Gasheer nie gevind nie",
-    "loadingHost": "Laai gasheer..."
-  },
-  "onboarding": {
-    "feature_files": "Lêerbestuurder",
-    "feature_files_desc": "Blaai, laai op, laai af en wysig lêers via SFTP sonder om die toepassing te verlaat."
-  },
-  "terminal": {
-    "runTitle": "Hardloop {{command}} - {{host}}",
-    "terminalTitle": "Terminaal - {{host}}",
-    "terminalWithPath": "Terminaal - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Blaai deur bestemmingsmappe",
-    "browsePathError": "Kon nie hierdie pad op die bestemmingsgasheer oopmaak nie.",
-    "browsePathWillBeCreated": "Hierdie vouer bestaan nog nie. Dit sal geskep word wanneer die oordrag begin.",
-    "cancel": "Kanselleer",
-    "cleanupDestFiles": "Maak bestemming skoon",
-    "cleanupDestFilesError": "Opruiming het misluk",
-    "cleanupDestFilesNothing": "Niks om op die bestemming skoon te maak nie",
-    "cleanupDestFilesPartial": "Sommige gedeeltelike lêers kon nie verwyder word nie",
-    "cleanupDestFilesSuccess": "Gedeeltelike lêers van die bestemming verwyder",
-    "confirmCopy": "Kopieer",
-    "confirmMove": "Beweeg",
-    "copyFolderToHost": "Kopieer lêergids na gasheer…",
-    "copyItemsToHost": "Kopieer {{count}} items om… aan te bied",
-    "copyToHost": "Kopieer na gasheer…",
-    "destinationPath": "Bestemmingspad",
-    "destMustBeDirectory": "Bestemming moet 'n gids wees vir oordragte van verskeie items",
-    "goUp": "Gaan op",
-    "hostAuthRequired": "Verifikasie vereis. Maak eers Lêerbestuurder op hierdie gasheer oop",
-    "hostConnecting": "Verbind…",
-    "hostConnectionFailed": "Verbinding het misluk",
-    "hostDisconnected": "Nie gekoppel nie",
-    "hostReady": "Gereed",
-    "itemsSummary": "{{count}} items",
-    "jumpHostLimitation": "Beide gashere moet vanaf die Termix-bediener bereikbaar wees. Direkte gasheer-tot-gasheer-roetering word nie ondersteun nie.",
-    "methodAuto": "Outomaties",
-    "methodAutoHint": "Kies tar- of per-lêer SFTP gebaseer op lêertelling, grootte en saampersbaarheid. Enkele lêers gebruik altyd stroom-SFTP.",
-    "methodItemSftp": "SFTP per lêer",
-    "methodItemSftpHint": "Dra elke lêer individueel oor SFTP. Werk op alle gashere, insluitend Windows.",
-    "methodItemSftpLimitation": "Elke lêer gebruik dieselfde SFTP-stroom as 'n enkellêerkopie, een na die ander. Vordering word oor alle lêers gekombineer, so die balk beweeg stadig tydens groot lêers.",
-    "methodLabel": "Oordragmetode",
-    "methodPreviewError": "Kon nie oordragmetode voorskou nie. Die bediener sal steeds 'n metode kies wanneer jy begin.",
-    "methodPreviewLoading": "Berekening van oordragmetode…",
-    "methodPreviewScanSummary": "{{fileCount}} lêers, {{totalSize}} totaal (geskandeer op brongasheer).",
-    "methodPreviewWillUseItemSftp": "Sal gebruik: SFTP per lêer",
-    "methodPreviewWillUseTar": "Sal gebruik: Tar-argief",
-    "methodReason": {
-      "user_item_sftp": "Jy het SFTP per lêer gekies.",
-      "user_tar": "Jy het teer-argief gekies.",
-      "tar_unavailable": "Teer is nie beskikbaar op een of albei gashere nie, dus sal SFTP per lêer eerder gebruik word.",
-      "windows_host": "'n Windows-gasheer is betrokke, dus word teer nie gebruik nie.",
-      "auto_multi_large": "Outomaties: veelvuldige lêers, insluitend 'n groot lêer ({{largestSize}}) met saampersbare data. Tar bundel hulle in een oordrag.",
-      "auto_single_large_in_archive": "Outomaties: een groot lêer ({{largestSize}}) in hierdie stel, dus SFTP per lêer.",
-      "auto_many_incompressible": "Outomaties: meestal onsaampersbare data, dus SFTP per lêer.",
-      "auto_many_files": "Outomaties: baie lêers ({{fileCount}}), tar sny die oorhoofse koste per lêer.",
-      "auto_default": "Outomaties: SFTP per lêer vir hierdie stel."
-    },
-    "methodTar": "Teer-argief",
-    "methodTarHint": "Komprimeer op bron, dra een argief oor, onttrek op bestemming. Vereis tar op beide Unix-gashere.",
-    "metricsCompress": "Kompresseer op bron: {{duration}}",
-    "metricsExtract": "Uittreksel op bestemming: {{duration}}",
-    "metricsPrepare": "Berei bestemming voor: {{duration}}",
-    "metricsRouteBenchmark": "Roete-sonde: direk {{direct}}, aflos {{relay}}",
-    "metricsSourceDelete": "Verwyder van bron: {{duration}}",
-    "metricsTotal": "Totaal: {{duration}}",
-    "metricsTransfer": "Van begin tot einde: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 geverifieer: {{duration}}",
-    "moveFolderToHost": "Skuif vouer na gasheer…",
-    "moveItemsToHost": "Skuif {{count}} items om… te huisves",
-    "moveToHost": "Skuif na gasheer…",
-    "noHostsConnected": "Geen ander lêerbestuurder-gashere beskikbaar nie.",
-    "noHostsConnectedHint": "Voeg nog 'n SSH-gasheer by met Lêerbestuurder geaktiveer in Gasheerbestuurder.",
-    "parallelSegmentsHint": "Groot lêers word in 256 MB-stukke verdeel. Verskeie bane gebruik afsonderlike verbindings (soos om verskeie oordragte te begin) vir hoër totale deurset.",
-    "parallelSegmentsLabel": "Parallelle oordragbane",
-    "parallelSegmentsOption": "{{count}} bane",
-    "progressBenchmarking": "Die vinnigste oordragroete kies…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Kanselleer",
-    "progressCancelling": "Kanselleer…",
-    "progressCompressing": "Kompressering op brongasheer…",
-    "progressExtracting": "Onttrek op bestemming…",
-    "progressItems": "{{current}} / {{total}} lêers",
-    "progressReconnecting": "Herverbind…",
-    "progressStalled": "Vasgevang",
-    "progressTotalSpeed": "{{speed}} totaal ({{lanes}} bane)",
-    "progressTransferring": "Oordrag van data…",
-    "progressTransferringItems": "Oordrag van lêers ({{current}} van {{total}})…",
-    "progressVerifying": "Verifieer lêerintegriteit…",
-    "recentDestinations": "Onlangse bestemmings",
-    "resumedHint": "Herverbind met 'n aktiewe oordrag wat in 'n ander venster begin is.",
-    "retryTransfer": "Probeer weer",
-    "retryTransferError": "Herprobeer het misluk",
-    "selectDestinationHost": "Kies bestemmingsgasheer",
-    "transferCancelled": "Oordrag gekanselleer",
-    "transferCancelledCopyHint": "Gedeeltelike lêers mag dalk op die bestemming bly.",
-    "transferCancelledMoveHint": "Gedeeltelike lêers mag dalk op die bestemming bly. Bronlêers is nie verwyder nie.",
-    "transferError": "Oordrag het misluk",
-    "transferFailedRetryHint": "Gedeeltelike data is op die bestemming gehou. Herprobeer sal hervat word wanneer die verbinding terug is.",
-    "transferPartialHint": "Kon nie oordra nie: {{paths}}",
-    "transferSuccess": "Oordrag voltooi",
-    "metricsHopSourceRead": "Bron → bediener: {{throughput}}",
-    "metricsHopDestSftpWrite": "Bediener → bestemming (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Bediener → bestemming (plaaslik): {{throughput}}"
-  },
-  "plugin": {
-    "name": "Lêerbestuurder"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/ar_SA.json b/plugins/file-manager/locales/translated/ar_SA.json
deleted file mode 100644
index 809bbb1cd..000000000
--- a/plugins/file-manager/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "الملفات",
-    "sftp": "SFTP",
-    "openFileManager": "فتح مدير الملفات"
-  },
-  "permissions": {
-    "use": {
-      "title": "استخدم مدير الملفات",
-      "description": "تصفح الملفات وحررها وانقلها عبر بروتوكول SFTP."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "تمكين مدير الملفات",
-        "description": "تصفح الملفات وقم بتحريرها على هذا المضيف عبر بروتوكول SFTP."
-      },
-      "defaultPath": {
-        "label": "المسار الافتراضي"
-      },
-      "scpLegacy": {
-        "label": "وضع SCP القديم"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "نقل الملفات المتزامن",
-        "description": "كم عدد الملفات التي يقوم مدير الملفات المحلي/البعيد بتحميلها أو تنزيلها في نفس الوقت؟ قلل هذا العدد إذا كان خادمك يحد من قنوات SFTP."
-      },
-      "confirmBeforeTrash": {
-        "label": "تأكد قبل نقل الملفات إلى سلة المهملات",
-        "description": "استأذن قبل نقل الملفات البعيدة إلى سلة المهملات. الحذف النهائي يتطلب تأكيداً."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "مدير الملفات"
-  },
-  "fileManager": {
-    "noHostSelected": "لم يتم اختيار مضيف",
-    "initializingEditor": "جارٍ تهيئة المحرر...",
-    "file": "ملف",
-    "folder": "مجلد",
-    "uploadFile": "رفع ملف",
-    "downloadFile": "تنزيل",
-    "extractArchive": "استخراج الأرشيف",
-    "extractingArchive": "جارٍ استخراج {{name}}...",
-    "archiveExtractedSuccessfully": "تم استخراج {{name}} بنجاح",
-    "extractFailed": "فشل الاستخراج",
-    "compressFile": "ضغط ملف",
-    "compressFiles": "ضغط ملفات",
-    "compressFilesDesc": "ضغط {{count}} عنصر في أرشيف",
-    "archiveName": "اسم الأرشيف",
-    "enterArchiveName": "أدخل اسم الأرشيف...",
-    "compressionFormat": "صيغة الضغط",
-    "selectedFiles": "الملفات المحددة",
-    "andMoreFiles": "و {{count}} المزيد...",
-    "compress": "ضغط",
-    "compressingFiles": "جارٍ ضغط {{count}} عنصر في {{name}}...",
-    "filesCompressedSuccessfully": "تم إنشاء {{name}} بنجاح",
-    "compressFailed": "فشل الضغط",
-    "edit": "تحرير",
-    "preview": "معاينة",
-    "previous": "السابق",
-    "next": "التالي",
-    "pageXOfY": "صفحة {{current}} من {{total}}",
-    "zoomOut": "تصغير",
-    "zoomIn": "تكبير",
-    "newFile": "ملف جديد",
-    "newFolder": "مجلد جديد",
-    "rename": "إعادة تسمية",
-    "uploading": "جارٍ الرفع...",
-    "uploadingFile": "جارٍ رفع {{name}}...",
-    "uploadingChunk": "جارٍ تحميل {{name}}: {{percent}}% (الجزء {{chunk}} من {{total}})",
-    "fileName": "اسم الملف",
-    "folderName": "اسم المجلد",
-    "fileUploadedSuccessfully": "تم رفع الملف \"{{name}}\" بنجاح",
-    "failedToUploadFile": "فشل رفع الملف",
-    "uploadingFolderFiles": "جارٍ تحميل {{count}} ملف(ملفات)...",
-    "uploadedFolderFiles": "تم تحميل {{count}} ملف بنجاح",
-    "uploadedFolderPartial": "تم تحميل {{uploaded}} ملفًا، {{failed}} فشل",
-    "fileDownloadedSuccessfully": "تم تنزيل الملف \"{{name}}\" بنجاح",
-    "failedToDownloadFile": "فشل تنزيل الملف",
-    "fileCreatedSuccessfully": "تم إنشاء الملف \"{{name}}\" بنجاح",
-    "folderCreatedSuccessfully": "تم إنشاء المجلد \"{{name}}\" بنجاح",
-    "failedToCreateItem": "فشل إنشاء العنصر",
-    "operationFailed": "فشلت عملية {{operation}} لـ {{name}}: {{error}}",
-    "failedToResolveSymlink": "فشل حل الرابط الرمزي",
-    "itemsDeletedSuccessfully": "تم حذف {{count}} عناصر بنجاح",
-    "failedToDeleteItems": "فشل حذف العناصر",
-    "sudoPasswordRequired": "كلمة مرور المسؤول مطلوبة",
-    "enterSudoPassword": "أدخل كلمة مرور sudo لمتابعة هذه العملية",
-    "sudoPassword": "كلمة مرور sudo",
-    "sudoOperationFailed": "فشلت عملية sudo",
-    "sudoAuthFailed": "فشلت مصادقة sudo",
-    "dragFilesToUpload": "أفلت الملفات هنا لرفعها",
-    "dropToUploadHere": "قم بإسقاط الملف هنا للتحميل",
-    "dropToDownloadHere": "قم بالتنزيل من هنا",
-    "localFiles": "محلي",
-    "showLocalFiles": "عرض الملفات المحلية (عرض مقسم)",
-    "hideLocalFiles": "إخفاء الملفات المحلية",
-    "localHome": "المجلد الرئيسي",
-    "localPathPlaceholder": "مسار المجلد المحلي",
-    "localShowHidden": "إظهار الملفات المخفية",
-    "localHideHidden": "إخفاء الملفات المخفية",
-    "localRevealInFileManager": "إظهار في مدير ملفات النظام",
-    "localCannotOpenFolder": "لا يمكن فتح المجلد",
-    "localItemCount": "{{count}} عنصر",
-    "localSelectedCount": "تم تحديد {{count}}",
-    "back": "رجوع",
-    "forward": "إلى الأمام",
-    "up": "أعلى",
-    "kind": "عطوف",
-    "localUploadingProgress": "جارٍ تحميل {{current}} من {{total}}",
-    "localDownloadingProgress": "جارٍ تنزيل {{current}} من {{total}}",
-    "localTransferInFlight": "{{count}} دفعة واحدة",
-    "localPreparingDownload": "جارٍ تحضير التنزيل...",
-    "localTransferCancelled": "تم إلغاء النقل",
-    "localNothingToTransfer": "لا يوجد شيء لنقله",
-    "localUploadComplete": "تم تحميل {{count}} ملف(ملفات)",
-    "localUploadFailed": "فشل التحميل",
-    "localUploadPartial": "تم تحميل {{done}} ملفًا، {{failed}} فشل",
-    "localDownloadComplete": "تم تنزيل {{count}} ملفًا(ملفات)",
-    "localDownloadFailed": "فشل التنزيل",
-    "localDownloadPartial": "تم تنزيل {{done}} ملفًا، {{failed}} فشل",
-    "localReplaceExistingPrompt": "{{count}} العنصر (العناصر) موجودة بالفعل في هذا المجلد. هل تريد استبدالها؟",
-    "localReplace": "استبدال",
-    "localSkipExisting": "يتخطى",
-    "localSkippedExisting": "تم تخطي {{count}} عنصر (عناصر) موجودة",
-    "localUnsafeNamesSkipped": "تم تخطي {{count}} عنصرًا لا يمكن استخدام أسمائها على هذا الكمبيوتر",
-    "localOpen": "فتح",
-    "localOpenFolder": "افتح المجلد",
-    "localUploadToRemote": "التحميل إلى الخادم",
-    "localUploadToRemoteMany": "قم بتحميل {{count}} عنصرًا إلى الخادم",
-    "localMoveToTrash": "انقل إلى سلة المهملات",
-    "localMoveToTrashMany": "انقل {{count}} عنصرًا إلى سلة المهملات",
-    "localTrashConfirmSingle": "هل تريد نقل \"{{name}}\" إلى سلة المهملات؟",
-    "localTrashConfirmFolder": "هل تريد نقل المجلد \"{{name}}\" وجميع محتوياته إلى سلة المهملات؟",
-    "localTrashConfirmMany": "هل تريد نقل العناصر {{count}} إلى سلة المهملات؟",
-    "localTrashed": "تم نقل {{count}} عنصرًا إلى سلة المهملات",
-    "localTrashFailed": "لم يتمكن من الانتقال إلى سلة المهملات",
-    "localRenameFailed": "فشلت عملية إعادة التسمية",
-    "localCreateFailed": "تعذر إنشاء العنصر",
-    "goToParentFolder": "انتقل إلى المجلد الرئيسي",
-    "resizeSidebar": "اسحب لتغيير حجم الشريط الجانبي (انقر نقراً مزدوجاً لإعادة التعيين)",
-    "resizeLocalPane": "اسحب لتغيير حجم اللوحة المحلية (انقر نقراً مزدوجاً لإعادة التعيين)",
-    "columns": "الأعمدة",
-    "columnsHint": "انقر بزر الماوس الأيمن لاختيار الأعمدة",
-    "emptyFolder": "هذا المجلد فارغ",
-    "searchFiles": "بحث في الملفات...",
-    "upload": "رفع",
-    "selectHostToStart": "حدد مضيفًا لبدء إدارة الملفات",
-    "sshRequiredForFileManager": "يتطلب مدير الملفات SSH. هذا المضيف لم يتم تمكين SSH عليه.",
-    "failedToConnect": "فشل الاتصال بـ SSH",
-    "failedToLoadDirectory": "فشل تحميل المجلد",
-    "noSSHConnection": "لا يوجد اتصال SSH متاح",
-    "copy": "نسخ",
-    "cut": "قص",
-    "paste": "لصق",
-    "copyPath": "نسخ المسار",
-    "copyPaths": "نسخ المسارات",
-    "delete": "حذف",
-    "properties": "خصائص",
-    "refresh": "تحديث",
-    "downloadFiles": "تنزيل {{count}} ملفات إلى المتصفح",
-    "copyFiles": "نسخ {{count}} عناصر",
-    "cutFiles": "قص {{count}} عناصر",
-    "deleteFiles": "حذف {{count}} عناصر",
-    "filesCopiedToClipboard": "تم نسخ {{count}} عناصر إلى الحافظة",
-    "filesCutToClipboard": "تم قص {{count}} عناصر إلى الحافظة",
-    "pathCopiedToClipboard": "تم نسخ المسار إلى الحافظة",
-    "pathsCopiedToClipboard": "تم نسخ {{count}} مسارات إلى الحافظة",
-    "failedToCopyPath": "فشل نسخ المسار إلى الحافظة",
-    "copyFolderLink": "نسخ رابط المجلد",
-    "copyCurrentFolderLink": "نسخ رابط المجلد الحالي",
-    "folderLinkCopied": "تم نسخ رابط المجلد إلى الحافظة",
-    "failedToCopyFolderLink": "فشل نسخ رابط المجلد",
-    "movedItems": "تم نقل {{count}} عناصر",
-    "failedToDeleteItem": "فشل حذف العنصر",
-    "itemRenamedSuccessfully": "تمت إعادة تسمية {{type}} بنجاح",
-    "failedToRenameItem": "فشلت إعادة تسمية العنصر",
-    "download": "تنزيل",
-    "openExternalEditor": "فتح خارجيًا",
-    "chooseExternalEditor": "اختيار محرر خارجي",
-    "externalEditorSelected": "تم اختيار المحرر الخارجي",
-    "externalEditorDesktopOnly": "المحرر الخارجي متاح فقط في تطبيق سطح المكتب",
-    "externalEditorOpened": "تم الفتح في المحرر الخارجي. سيؤدي الحفظ هناك إلى رفع التغييرات إلى الخادم.",
-    "failedToOpenExternalEditor": "فشل فتح المحرر الخارجي",
-    "failedToSelectExternalEditor": "فشل اختيار المحرر الخارجي",
-    "permissions": "الصلاحيات",
-    "size": "الحجم",
-    "modified": "تاريخ التعديل",
-    "path": "المسار",
-    "confirmDelete": "هل أنت متأكد أنك تريد حذف {{name}}؟",
-    "permissionDenied": "تم رفض الإذن",
-    "serverError": "خطأ في الخادم",
-    "fileSavedSuccessfully": "تم حفظ الملف بنجاح",
-    "failedToSaveFile": "فشل حفظ الملف",
-    "confirmDeleteSingleItem": "هل أنت متأكد أنك تريد حذف \"{{name}}\" نهائيًا؟",
-    "confirmDeleteMultipleItems": "هل أنت متأكد أنك تريد حذف {{count}} عناصر نهائيًا؟",
-    "confirmDeleteMultipleItemsWithFolders": "هل أنت متأكد أنك تريد حذف {{count}} عناصر نهائيًا؟ يتضمن ذلك المجلدات ومحتوياتها.",
-    "confirmDeleteFolder": "هل أنت متأكد أنك تريد حذف المجلد \"{{name}}\" وجميع محتوياته نهائيًا؟",
-    "permanentDeleteWarning": "لا يمكن التراجع عن هذا الإجراء. سيتم حذف العنصر (العناصر) نهائيًا من الخادم.",
-    "moveToTrashWarning": "سيتم نقل العنصر (العناصر) إلى سلة مهملات Termix ويمكن استعادتها قبل انتهاء فترة الاحتفاظ.",
-    "itemsMovedToTrash": "تم نقل العنصر (العناصر) إلى سلة المهملات {{count}}",
-    "trash": "نفاية",
-    "trashDescription": "يتم الاحتفاظ بالعناصر المحذوفة لمدة {{days}} يوم (أيام) على هذا المضيف.",
-    "trashLoadFailed": "فشل تحميل سلة المهملات",
-    "trashEmpty": "سلة المهملات فارغة",
-    "trashRestore": "استعادة",
-    "trashRestored": "تمت الاستعادة {{name}}",
-    "trashRestoreFailed": "فشلت عملية استعادة العنصر. قد يكون المسار الأصلي موجودًا بالفعل.",
-    "trashDeletePermanently": "حذف نهائياً",
-    "trashDeleteConfirm": "حذف {{name}}نهائياً؟ لا يمكن التراجع عن هذا الإجراء.",
-    "trashPermanentlyDeleted": "تم الحذف نهائياً {{name}}",
-    "trashDeleteFailed": "فشل حذف العنصر نهائياً",
-    "trashEmptyAction": "قم بإفراغ سلة المهملات",
-    "trashEmptyConfirm": "هل تريد حذف جميع العناصر الموجودة في سلة المهملات نهائياً؟ لا يمكن التراجع عن هذا الإجراء.",
-    "trashEmptied": "تم إفراغ سلة المهملات",
-    "trashRetention": "التنظيف التلقائي بعد (أيام)",
-    "trashRetentionSaved": "تحديث نظام الاحتفاظ بالنفايات",
-    "trashRetentionFailed": "فشل تحديث الاحتفاظ بالنفايات",
-    "trashUnavailableConfirm": "لا يمكن نقل هذا العنصر إلى سلة المهملات، عادةً لأنه موجود على نظام ملفات آخر أو يتطلب صلاحيات إدارية. هل تريد حذفه نهائياً بدلاً من ذلك؟",
-    "recent": "الأخيرة",
-    "pinned": "المثبتة",
-    "folderShortcuts": "اختصارات المجلدات",
-    "failedToReconnectSSH": "فشل إعادة الاتصال بجلسة SSH",
-    "openTerminalHere": "افتح الطرفية هنا",
-    "run": "تشغيل",
-    "openTerminalInFolder": "افتح الطرفية في هذا المجلد",
-    "openTerminalInFileLocation": "افتح الطرفية في موقع الملف",
-    "runningFile": "قيد التشغيل - {{file}}",
-    "onlyRunExecutableFiles": "يمكن تشغيل الملفات التنفيذية فقط",
-    "directories": "المجلدات",
-    "removedFromRecentFiles": "تمت إزالة \"{{name}}\" من الملفات الحديثة",
-    "removeFailed": "فشلت الإزالة",
-    "unpinnedSuccessfully": "تم إلغاء تثبيت \"{{name}}\" بنجاح",
-    "unpinFailed": "فشل إلغاء التثبيت",
-    "removedShortcut": "تمت إزالة الاختصار \"{{name}}\"",
-    "removeShortcutFailed": "فشلت إزالة الاختصار",
-    "clearedAllRecentFiles": "تم مسح جميع الملفات الحديثة",
-    "clearFailed": "فشل المسح",
-    "removeFromRecentFiles": "إزالة من الملفات الحديثة",
-    "clearAllRecentFiles": "مسح جميع الملفات الحديثة",
-    "unpinFile": "إلغاء تثبيت الملف",
-    "removeShortcut": "إزالة الاختصار",
-    "pinFile": "تثبيت الملف",
-    "addToShortcuts": "إضافة إلى الاختصارات",
-    "pasteFailed": "فشل اللصق",
-    "noUndoableActions": "لا توجد إجراءات يمكن التراجع عنها",
-    "undoCopySuccess": "تم التراجع عن عملية النسخ: حُذف {{count}} ملفًا منسوخًا",
-    "undoCopyFailedDelete": "فشل التراجع: تعذر حذف أي ملفات منسوخة",
-    "undoCopyFailedNoInfo": "فشل التراجع: تعذر العثور على معلومات الملفات المنسوخة",
-    "undoMoveSuccess": "تم التراجع عن عملية النقل: تم نقل {{count}} ملفًا إلى الموقع الأصلي",
-    "undoMoveFailedMove": "فشل التراجع: تعذر نقل أي ملفات للخلف",
-    "undoMoveFailedNoInfo": "فشل التراجع: تعذر العثور على معلومات الملفات المنقولة",
-    "undoDeleteNotSupported": "لا يمكن التراجع عن عملية الحذف: تم حذف الملفات نهائيًا من الخادم",
-    "undoTypeNotSupported": "نوع عملية التراجع غير مدعوم",
-    "undoOperationFailed": "فشلت عملية التراجع",
-    "unknownError": "خطأ غير معروف",
-    "confirm": "تأكيد",
-    "find": "بحث...",
-    "replace": "استبدال",
-    "downloadInstead": "تنزيل بدلاً من ذلك",
-    "keyboardShortcuts": "اختصارات لوحة المفاتيح",
-    "searchAndReplace": "بحث واستبدال",
-    "editing": "تعديل",
-    "search": "بحث",
-    "findNext": "بحث عن التالي",
-    "findPrevious": "بحث عن السابق",
-    "save": "حفظ",
-    "selectAll": "تحديد الكل",
-    "undo": "تراجع",
-    "redo": "إعادة",
-    "moveLineUp": "نقل السطر لأعلى",
-    "moveLineDown": "نقل السطر لأسفل",
-    "toggleComment": "تبديل التعليق",
-    "autoComplete": "إكمال تلقائي",
-    "imageLoadError": "فشل تحميل الصورة",
-    "startTyping": "ابدأ الكتابة...",
-    "unknownSize": "حجم غير معروف",
-    "fileIsEmpty": "الملف فارغ",
-    "largeFileWarning": "تحذير ملف كبير",
-    "largeFileWarningDesc": "هذا الملف بحجم {{size}}، مما قد يسبب مشكلات في الأداء عند فتحه كنص.",
-    "fileNotFoundAndRemoved": "الملف \"{{name}}\" غير موجود وتمت إزالته من الملفات الأخيرة/المثبتة",
-    "failedToLoadFile": "فشل تحميل الملف: {{error}}",
-    "serverErrorOccurred": "حدث خطأ في الخادم. يرجى المحاولة لاحقًا.",
-    "autoSaveFailed": "فشل الحفظ التلقائي",
-    "fileAutoSaved": "تم حفظ الملف تلقائيًا",
-    "moveFileFailed": "فشل نقل {{name}}",
-    "moveOperationFailed": "فشلت عملية النقل",
-    "canOnlyCompareFiles": "يمكن مقارنة ملفين فقط",
-    "comparingFiles": "مقارنة الملفات: {{file1}} و {{file2}}",
-    "dragFailed": "فشلت عملية السحب",
-    "filePinnedSuccessfully": "تم تثبيت الملف \"{{name}}\" بنجاح",
-    "pinFileFailed": "فشل تثبيت الملف",
-    "fileUnpinnedSuccessfully": "تم إلغاء تثبيت الملف \"{{name}}\" بنجاح",
-    "unpinFileFailed": "فشل إلغاء تثبيت الملف",
-    "shortcutAddedSuccessfully": "تمت إضافة اختصار المجلد \"{{name}}\" بنجاح",
-    "addShortcutFailed": "فشلت إضافة الاختصار",
-    "operationCompletedSuccessfully": "تمت {{operation}} {{count}} عناصر بنجاح",
-    "operationCompleted": "{{operation}} {{count}} عناصر",
-    "downloadFileSuccess": "تم تنزيل الملف {{name}} بنجاح",
-    "downloadFileFailed": "فشل التنزيل",
-    "downloadingFile": "جارٍ التنزيل {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "نقل إلى {{name}}",
-    "diffCompareWith": "مقارنة الاختلافات مع {{name}}",
-    "dragOutsideToDownload": "اسحب خارج النافذة للتنزيل ({{count}} ملفات)",
-    "newFolderDefault": "مجلد جديد",
-    "newFileDefault": "ملف جديد.txt",
-    "successfullyMovedItems": "تم نقل {{count}} عناصر بنجاح إلى {{target}}",
-    "move": "نقل",
-    "searchInFile": "بحث في الملف (Ctrl+F)",
-    "showKeyboardShortcuts": "إظهار اختصارات لوحة المفاتيح",
-    "decreaseFontSize": "تصغير حجم الخط",
-    "increaseFontSize": "تكبير حجم الخط",
-    "startWritingMarkdown": "ابدأ كتابة محتوى Markdown...",
-    "loadingFileComparison": "جارٍ تحميل مقارنة الملفات...",
-    "reload": "إعادة تحميل",
-    "compare": "مقارنة",
-    "sideBySide": "جنباً إلى جنب",
-    "inline": "مضمن",
-    "fileComparison": "مقارنة الملفات: {{file1}} مقابل {{file2}}",
-    "fileTooLarge": "الملف كبير جدًا (> 10 ميجابايت) ولا يمكن فتحه كنص لأسباب أمنية.",
-    "sshConnectionFailed": "فشل اتصال SSH. يرجى التحقق من الاتصال بـ {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "فشل تحميل الملف: {{error}}",
-    "connecting": "جارٍ الاتصال...",
-    "connectedSuccessfully": "تم الاتصال بنجاح",
-    "totpVerificationFailed": "فشل التحقق من TOTP",
-    "browserSignInFailed": "فشل تسجيل الدخول. يرجى المحاولة مرة أخرى.",
-    "authenticationFailed": "فشلت المصادقة",
-    "incorrectPassphrase": "عبارة المرور غير صحيحة. يرجى المحاولة مرة أخرى.",
-    "verificationCodePrompt": "رمز التحقق:",
-    "changePermissions": "تغيير الصلاحيات",
-    "currentPermissions": "الصلاحيات الحالية",
-    "owner": "المالك",
-    "group": "المجموعة",
-    "others": "الآخرون",
-    "read": "قراءة",
-    "write": "كتابة",
-    "execute": "تنفيذ",
-    "permissionsChangedSuccessfully": "تم تغيير الصلاحيات بنجاح",
-    "failedToChangePermissions": "فشل تغيير الصلاحيات",
-    "name": "الاسم",
-    "sortByName": "الاسم",
-    "sortByDate": "تاريخ التعديل",
-    "sortBySize": "الحجم",
-    "ascending": "تصاعدي",
-    "descending": "تنازلي",
-    "root": "الجذر",
-    "new": "جديد",
-    "sortBy": "ترتيب حسب",
-    "items": "عناصر",
-    "selected": "محدد",
-    "editor": "محرر",
-    "octal": "ثماني",
-    "storage": "التخزين",
-    "disk": "القرص",
-    "used": "مستخدم",
-    "of": "من",
-    "toggleSidebar": "إظهار/إخفاء الشريط الجانبي",
-    "compactLayout": "استخدم تصميمًا مضغوطًا",
-    "comfortableLayout": "استخدم تصميمًا مريحًا",
-    "cannotLoadPdf": "لا يمكن تحميل PDF",
-    "pdfLoadError": "حدث خطأ أثناء تحميل ملف PDF هذا.",
-    "loadingPdf": "جارٍ تحميل عارض ملفات PDF...",
-    "loadingPage": "جارٍ تحميل الصفحة...",
-    "cancel": "إلغاء",
-    "copiedItems_one": "تم نسخ العنصر {{count}}",
-    "copiedItems_other": "تم نسخ {{count}} عنصرًا",
-    "deleteCopiedFileFailed": "تعذر حذف نسخة من {{name}}: {{error}}",
-    "dragMovedItems_one": "تم نقل العنصر {{count}} إلى {{target}}",
-    "dragMovedItems_other": "تم نقل {{count}} عنصرًا إلى {{target}}",
-    "moveBackFileFailed": "تعذر تحريك {{name}} للخلف: {{error}}",
-    "terminal": "الطرفية: {{host}} ({{path}})",
-    "dragToDesktop": "سحب {{name}} إلى سطح المكتب",
-    "dragFilesToDesktop": "سحب الملفات {{count}} إلى سطح المكتب",
-    "folderDragUnsupported": "لا يدعم التطبيق سحب المجلدات إلى سطح المكتب حتى الآن",
-    "saveToDesktopFailed": "فشل الحفظ: {{error}}",
-    "dragFailedDetail": "فشل السحب: {{error}}",
-    "videoUnsupported": "لا يمكن لمتصفحك تشغيل هذا الفيديو.",
-    "downloadToPlay": "قم بتنزيله لتشغيله في مكان آخر",
-    "cannotPreviewType": "لا يمكن معاينة هذا النوع من الملفات",
-    "cannotPreviewTypeHint": "لا يتوفر معاينة لهذا النوع من الملفات. قم بتنزيله لفتحه في تطبيق آخر.",
-    "loadingFile": "جارٍ تحميل الملف...",
-    "loadingImage": "جارٍ تحميل الصورة...",
-    "loadingEditor": "جارٍ تحميل المحرر...",
-    "loadingPreview": "جارٍ تحميل المعاينة...",
-    "loadingAudio": "جارٍ تحميل مشغل الصوت...",
-    "emptyPreview": "لا يوجد شيء للمعاينة حتى الآن...",
-    "revert": "يرجع",
-    "openAsText": "افتح كنص",
-    "confirmOpenAsText": "هل تريد الاستمرار في فتح هذا الملف كنص؟ قد يؤدي ذلك إلى إبطاء متصفحك."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "نقل الملفات بين مضيفين عبر بروتوكول SSH.",
-    "sourceServer": "خادم المصدر",
-    "destinationServer": "خادم الوجهة",
-    "selectHost": "حدد المضيف",
-    "noHostSelected": "لم يتم تحديد أي جهاز مضيف",
-    "move": "نقل",
-    "copy": "نسخ",
-    "upload": "رفع",
-    "itemsSelected": "تم تحديد العنصر {{count}}",
-    "itemsSelected_other": "تم تحديد {{count}} عنصر",
-    "ready": "جاهز",
-    "loadingHosts": "جارٍ تحميل المضيفين...",
-    "name": "الاسم",
-    "modified": "تاريخ التعديل",
-    "size": "الحجم",
-    "noFiles": "لا توجد ملفات",
-    "open": "فتح",
-    "up": "أعلى",
-    "refresh": "تحديث",
-    "copyToTarget": "انسخ إلى الدليل الهدف",
-    "rename": "إعادة تسمية",
-    "delete": "حذف",
-    "editPermissions": "تعديل الأذونات",
-    "createNewFolder": "إنشاء مجلد جديد",
-    "deleteSelectedItems": "حذف العناصر المحددة",
-    "deleteConfirm": "حذف العنصر المحدد {{count}}؟",
-    "deleteConfirm_other": "حذف {{count}} من العناصر المحددة؟",
-    "cancel": "إلغاء",
-    "save": "حفظ",
-    "folderCreated": "تم إنشاء المجلد",
-    "itemRenamed": "تمت إعادة تسمية العنصر",
-    "actionFailed": "فشل الإجراء",
-    "itemsDeleted": "تم حذف العنصر {{count}}",
-    "itemsDeleted_other": "تم حذف {{count}} عنصر",
-    "deleteFailed": "فشلت عملية الحذف",
-    "permissionsUpdated": "تم تحديث الأذونات",
-    "noRemoteSessionConnected": "لم يتم الاتصال بأي جلسة عن بعد",
-    "failedToListFiles": "فشل في عرض قائمة الملفات",
-    "failedToRefresh": "فشل التحديث",
-    "destinationInsideSource": "لا يمكن أن تكون الوجهة داخل مسار المصدر المحدد.",
-    "sameHostNoOp": "المصدر والوجهة هما نفس المجلد."
-  },
-  "hosts": {
-    "fileManager": "مدير الملفات",
-    "fileManagerUrlCopied": "تم نسخ رابط مدير الملفات",
-    "copyFileManagerUrlAction": "نسخ رابط مدير الملفات",
-    "docsLink": "عرض المستندات",
-    "hostNotFound": "المضيف غير موجود",
-    "loadingHost": "جارٍ تحميل المضيف..."
-  },
-  "onboarding": {
-    "feature_files": "مدير الملفات",
-    "feature_files_desc": "تصفح الملفات وقم بتحميلها وتنزيلها وتعديلها عبر بروتوكول SFTP دون مغادرة التطبيق."
-  },
-  "terminal": {
-    "runTitle": "تشغيل {{command}} - {{host}}",
-    "terminalTitle": "الطرفية - {{host}}",
-    "terminalWithPath": "الطرفية - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "تصفح مجلدات الوجهة",
-    "browsePathError": "تعذر فتح هذا المسار على المضيف الوجهة.",
-    "browsePathWillBeCreated": "هذا المجلد غير موجود بعد. سيتم إنشاؤه عند بدء النقل.",
-    "cancel": "إلغاء",
-    "cleanupDestFiles": "تنظيف الوجهة",
-    "cleanupDestFilesError": "فشل التنظيف",
-    "cleanupDestFilesNothing": "لا شيء للتنظيف على الوجهة",
-    "cleanupDestFilesPartial": "تعذر إزالة بعض الملفات الجزئية",
-    "cleanupDestFilesSuccess": "تمت إزالة الملفات الجزئية من الوجهة",
-    "confirmCopy": "نسخ",
-    "confirmMove": "نقل",
-    "copyFolderToHost": "نسخ المجلد إلى المضيف…",
-    "copyItemsToHost": "نسخ {{count}} عناصر إلى المضيف…",
-    "copyToHost": "نسخ إلى المضيف…",
-    "destinationPath": "مسار الوجهة",
-    "destMustBeDirectory": "يجب أن تكون الوجهة مجلدًا لنقل عناصر متعددة",
-    "goUp": "للأعلى",
-    "hostAuthRequired": "يلزم المصادقة. افتح مدير الملفات على هذا المضيف أولاً",
-    "hostConnecting": "جارٍ الاتصال…",
-    "hostConnectionFailed": "فشل الاتصال",
-    "hostDisconnected": "غير متصل",
-    "hostReady": "جاهز",
-    "itemsSummary": "{{count}} عنصر",
-    "jumpHostLimitation": "يجب أن يكون كلا المضيفين قابلين للوصول من خادم Termix. التوجيه المباشر من مضيف إلى مضيف غير مدعوم.",
-    "methodAuto": "تلقائي",
-    "methodAutoHint": "يختار tar أو SFTP لكل ملف بناءً على عدد الملفات وحجمها وقابلية الضغط. الملفات المفردة تستخدم دائمًا SFTP التدفقي.",
-    "methodItemSftp": "SFTP لكل ملف",
-    "methodItemSftpHint": "نقل كل ملف على حدة عبر SFTP. يعمل على جميع المضيفين بما في ذلك Windows.",
-    "methodItemSftpLimitation": "يستخدم كل ملف نفس تدفق SFTP كنسخ الملف الواحد، واحداً تلو الآخر. يُجمع التقدم عبر جميع الملفات، لذا يتحرك الشريط ببطء أثناء الملفات الكبيرة.",
-    "methodLabel": "طريقة النقل",
-    "methodPreviewError": "تعذّر معاينة طريقة النقل. سيختار الخادم طريقة عند بدء النقل.",
-    "methodPreviewLoading": "جارٍ حساب طريقة النقل…",
-    "methodPreviewScanSummary": "{{fileCount}} ملفات، {{totalSize}} إجمالي (تم المسح على المضيف المصدر).",
-    "methodPreviewWillUseItemSftp": "سيُستخدم: SFTP لكل ملف",
-    "methodPreviewWillUseTar": "سيُستخدم: أرشيف Tar",
-    "methodReason": {
-      "user_item_sftp": "اخترت SFTP لكل ملف.",
-      "user_tar": "اخترت أرشيف tar.",
-      "tar_unavailable": "برنامج Tar غير متوفر على أحد المضيفين أو كليهما، لذلك سيتم استخدام SFTP لكل ملف بدلاً من ذلك.",
-      "windows_host": "يتم استخدام مضيف يعمل بنظام ويندوز، لذلك لا يتم استخدام برنامج tar.",
-      "auto_multi_large": "تلقائي: ملفات متعددة، بما في ذلك ملف كبير ({{largestSize}}) يحتوي على بيانات قابلة للضغط. يقوم برنامج Tar بتجميعها في عملية نقل واحدة.",
-      "auto_single_large_in_archive": "تلقائي: ملف واحد كبير ({{largestSize}}) في هذه المجموعة، لذا SFTP لكل ملف.",
-      "auto_many_incompressible": "تلقائي: بيانات غير قابلة للضغط في الغالب، لذا يتم استخدام بروتوكول SFTP لكل ملف.",
-      "auto_many_files": "الوضع التلقائي: العديد من الملفات ({{fileCount}})، يقوم برنامج tar بتقليل الحمل الزائد لكل ملف.",
-      "auto_default": "تلقائي: SFTP لكل ملف لهذه المجموعة."
-    },
-    "methodTar": "أرشيف Tar",
-    "methodTarHint": "ضغط على المصدر، نقل أرشيف واحد، فك على الوجهة. يتطلب tar على كلا المضيفين Unix.",
-    "metricsCompress": "ضغط على المصدر: {{duration}}",
-    "metricsExtract": "فك على الوجهة: {{duration}}",
-    "metricsPrepare": "تحضير الوجهة: {{duration}}",
-    "metricsRouteBenchmark": "مسار التحقيق: مباشر {{direct}}، مرحل {{relay}}",
-    "metricsSourceDelete": "إزالة من المصدر: {{duration}}",
-    "metricsTotal": "الإجمالي: {{duration}}",
-    "metricsTransfer": "نقل شامل: {{throughput}} ({{duration}})",
-    "metricsVerify": "تم التحقق من SHA-256: {{duration}}",
-    "moveFolderToHost": "نقل المجلد إلى المضيف…",
-    "moveItemsToHost": "نقل {{count}} عناصر إلى المضيف…",
-    "moveToHost": "نقل إلى المضيف…",
-    "noHostsConnected": "لا تتوفر مضيفات أخرى لمدير الملفات.",
-    "noHostsConnectedHint": "أضف مضيف SSH آخر مع تمكين مدير الملفات في مدير المضيفات.",
-    "parallelSegmentsHint": "تُقسم الملفات الكبيرة إلى أجزاء بحجم 256 ميغابايت. تستخدم المسارات المتعددة اتصالات منفصلة (مثل بدء عدة عمليات نقل) لتحقيق إنتاجية إجمالية أعلى.",
-    "parallelSegmentsLabel": "مسارات النقل المتوازية",
-    "parallelSegmentsOption": "{{count}} مسارات",
-    "progressBenchmarking": "اختيار أسرع مسار نقل…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "إلغاء",
-    "progressCancelling": "جارٍ الإلغاء…",
-    "progressCompressing": "جارٍ الضغط على المضيف المصدر…",
-    "progressExtracting": "جارٍ الفك على الوجهة…",
-    "progressItems": "{{current}} / {{total}} ملفات",
-    "progressReconnecting": "جارٍ إعادة الاتصال…",
-    "progressStalled": "متوقف",
-    "progressTotalSpeed": "{{speed}} إجمالي ({{lanes}} مسارات)",
-    "progressTransferring": "جارٍ نقل البيانات…",
-    "progressTransferringItems": "جارٍ نقل الملفات ({{current}} من {{total}})…",
-    "progressVerifying": "التحقق من سلامة الملف…",
-    "recentDestinations": "الوجهات الأخيرة",
-    "resumedHint": "تمت إعادة الاتصال بنقل نشط بدأ في نافذة أخرى.",
-    "retryTransfer": "إعادة المحاولة",
-    "retryTransferError": "فشلت إعادة المحاولة",
-    "selectDestinationHost": "تحديد المضيف الوجهة",
-    "transferCancelled": "تم إلغاء النقل",
-    "transferCancelledCopyHint": "قد تبقى ملفات جزئية على الوجهة.",
-    "transferCancelledMoveHint": "قد تبقى ملفات جزئية على الوجهة. لم يتم حذف ملفات المصدر.",
-    "transferError": "فشل النقل",
-    "transferFailedRetryHint": "تم الاحتفاظ بالبيانات الجزئية على الوجهة. ستُستأنف إعادة المحاولة عند عودة الاتصال.",
-    "transferPartialHint": "تعذر النقل: {{paths}}",
-    "transferSuccess": "اكتمل النقل",
-    "metricsHopSourceRead": "المصدر → الخادم: {{throughput}}",
-    "metricsHopDestSftpWrite": "الخادم → الوجهة (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "الخادم → الوجهة (محلي): {{throughput}}"
-  },
-  "plugin": {
-    "name": "مدير الملفات"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/bg_BG.json b/plugins/file-manager/locales/translated/bg_BG.json
deleted file mode 100644
index ee197af59..000000000
--- a/plugins/file-manager/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Файлове",
-    "sftp": "SFTP",
-    "openFileManager": "Отворете файловия мениджър"
-  },
-  "permissions": {
-    "use": {
-      "title": "Използвайте файлов мениджър",
-      "description": "Преглеждайте, редактирайте и прехвърляйте файлове през SFTP."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Активиране на файловия мениджър",
-        "description": "Разглеждайте и редактирайте файлове на този хост през SFTP."
-      },
-      "defaultPath": {
-        "label": "Път по подразбиране"
-      },
-      "scpLegacy": {
-        "label": "SCP Legacy режим"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Едновременно прехвърляне на файлове",
-        "description": "Колко файла едновременно качва или изтегля локалният/отдалечен мениджър. Намалете това, ако вашият сървър ограничава SFTP каналите."
-      },
-      "confirmBeforeTrash": {
-        "label": "Потвърдете преди преместване на файлове в кошчето",
-        "description": "Попитай преди преместване на отдалечени файлове в кошчето. За постоянното изтриване все още е необходимо потвърждение."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Файлов мениджър"
-  },
-  "fileManager": {
-    "noHostSelected": "Няма избран хост",
-    "initializingEditor": "Инициализиране на редактора...",
-    "file": "Файл",
-    "folder": "Папка",
-    "uploadFile": "Качване на файл",
-    "downloadFile": "Изтегляне",
-    "extractArchive": "Извличане на архив",
-    "extractingArchive": "Извличане на {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} е извлечено успешно",
-    "extractFailed": "Извличането не бе успешно",
-    "compressFile": "Компресиране на файл",
-    "compressFiles": "Компресиране на файлове",
-    "compressFilesDesc": "Компресиране на {{count}} елементи в архив",
-    "archiveName": "Име на архива",
-    "enterArchiveName": "Въведете име на архива...",
-    "compressionFormat": "Формат на компресия",
-    "selectedFiles": "Избрани файлове",
-    "andMoreFiles": "и още {{count}}...",
-    "compress": "Компресиране",
-    "compressingFiles": "Компресиране на {{count}} елементи в {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} е създадено успешно",
-    "compressFailed": "Компресията не беше успешна",
-    "edit": "Редактиране",
-    "preview": "Преглед",
-    "previous": "Предишен",
-    "next": "Следващо",
-    "pageXOfY": "Страница {{current}} от {{total}}",
-    "zoomOut": "Намаляване на мащаба",
-    "zoomIn": "Увеличаване на мащаба",
-    "newFile": "Нов файл",
-    "newFolder": "Нова папка",
-    "rename": "Преименуване",
-    "uploading": "Качване...",
-    "uploadingFile": "Качване {{name}}...",
-    "uploadingChunk": "Качване {{name}}: {{percent}}% (част {{chunk}} от {{total}})",
-    "fileName": "Име на файл",
-    "folderName": "Име на папката",
-    "fileUploadedSuccessfully": "Файлът „{{name}}“ е качен успешно",
-    "failedToUploadFile": "Качването на файла не бе успешно",
-    "uploadingFolderFiles": "Качване на {{count}} файл(а)...",
-    "uploadedFolderFiles": "Качени {{count}} файла(а) успешно",
-    "uploadedFolderPartial": "Качени {{uploaded}} файла(а), {{failed}} неуспешно",
-    "fileDownloadedSuccessfully": "Файлът „{{name}}“ е изтеглен успешно",
-    "failedToDownloadFile": "Изтеглянето на файла не бе успешно",
-    "fileCreatedSuccessfully": "Файлът „{{name}}“ е създаден успешно",
-    "folderCreatedSuccessfully": "Папка „{{name}}“ е създадена успешно",
-    "failedToCreateItem": "Създаването на елемент не бе успешно",
-    "operationFailed": "Операцията {{operation}} е неуспешна за {{name}}: {{error}}",
-    "failedToResolveSymlink": "Неуспешно разрешаване на символната връзка",
-    "itemsDeletedSuccessfully": "{{count}} елементи са изтрити успешно",
-    "failedToDeleteItems": "Изтриването на елементи не бе успешно",
-    "sudoPasswordRequired": "Изисква се администраторска парола",
-    "enterSudoPassword": "Въведете паролата за sudo, за да продължите тази операция",
-    "sudoPassword": "Парола за Sudo",
-    "sudoOperationFailed": "Sudo операцията не беше успешна",
-    "sudoAuthFailed": "Sudo удостоверяването не беше успешно",
-    "dragFilesToUpload": "Пуснете файлове тук, за да ги качите",
-    "dropToUploadHere": "Пуснете, за да качите тук",
-    "dropToDownloadHere": "Пуснете, за да изтеглите тук",
-    "localFiles": "Местно",
-    "showLocalFiles": "Показване на локални файлове (разделен изглед)",
-    "hideLocalFiles": "Скриване на локални файлове",
-    "localHome": "Начална папка",
-    "localPathPlaceholder": "Път към локалната папка",
-    "localShowHidden": "Показване на скритите файлове",
-    "localHideHidden": "Скриване на скрити файлове",
-    "localRevealInFileManager": "Разкриване в системния файлов мениджър",
-    "localCannotOpenFolder": "Не може да се отвори папка",
-    "localItemCount": "{{count}} артикули",
-    "localSelectedCount": "{{count}} избрано",
-    "back": "Обратно",
-    "forward": "Напред",
-    "up": "Нагоре",
-    "kind": "Вид",
-    "localUploadingProgress": "Качване на {{current}} от {{total}}",
-    "localDownloadingProgress": "Изтегляне на {{current}} от {{total}}",
-    "localTransferInFlight": "{{count}} наведнъж",
-    "localPreparingDownload": "Подготовка за изтегляне...",
-    "localTransferCancelled": "Прехвърлянето е анулирано",
-    "localNothingToTransfer": "Няма нищо за прехвърляне",
-    "localUploadComplete": "Качени {{count}} файла(а)",
-    "localUploadFailed": "Качването не бе успешно",
-    "localUploadPartial": "Качени {{done}} файла(а), {{failed}} неуспешно",
-    "localDownloadComplete": "Изтеглени {{count}} файлове",
-    "localDownloadFailed": "Изтеглянето не бе успешно",
-    "localDownloadPartial": "Изтеглени {{done}} файлове, {{failed}} неуспешно",
-    "localReplaceExistingPrompt": "{{count}} елемент(а) вече съществуват в тази папка. Да се заменят ли?",
-    "localReplace": "Замяна",
-    "localSkipExisting": "Пропускане",
-    "localSkippedExisting": "Пропуснати {{count}} съществуващи елементи",
-    "localUnsafeNamesSkipped": "Пропуснати {{count}} елементи, чиито имена не могат да се използват на този компютър",
-    "localOpen": "Отворено",
-    "localOpenFolder": "Отвори папка",
-    "localUploadToRemote": "Качване на сървъра",
-    "localUploadToRemoteMany": "Качване на {{count}} елементи на сървъра",
-    "localMoveToTrash": "Премести в кошчето",
-    "localMoveToTrashMany": "Преместване на {{count}} елемента в кошчето",
-    "localTrashConfirmSingle": "Да се премести ли „{{name}}“ в кошчето?",
-    "localTrashConfirmFolder": "Да се премести ли папката „{{name}}“ и цялото ѝ съдържание в кошчето?",
-    "localTrashConfirmMany": "Да се преместят ли {{count}} елементи в кошчето?",
-    "localTrashed": "Преместени {{count}} елемент(а) в кошчето",
-    "localTrashFailed": "Не можа да се премести в кошчето",
-    "localRenameFailed": "Преименуването не бе успешно",
-    "localCreateFailed": "Не можа да се създаде елемент",
-    "goToParentFolder": "Отиди до родителската папка",
-    "resizeSidebar": "Плъзнете, за да промените размера на страничната лента (щракнете двукратно за нулиране)",
-    "resizeLocalPane": "Плъзнете, за да промените размера на локалния панел (щракнете двукратно за нулиране)",
-    "columns": "Колони",
-    "columnsHint": "Щракнете с десния бутон, за да изберете колони",
-    "emptyFolder": "Тази папка е празна",
-    "searchFiles": "Търсене на файлове...",
-    "upload": "Качване",
-    "selectHostToStart": "Изберете хост, за да започнете управлението на файлове",
-    "sshRequiredForFileManager": "Файловият мениджър изисква SSH. Този хост не е активиран за SSH.",
-    "failedToConnect": "Неуспешно свързване към SSH",
-    "failedToLoadDirectory": "Неуспешно зареждане на директорията",
-    "noSSHConnection": "Няма налична SSH връзка",
-    "copy": "Копиране",
-    "cut": "Изрязване",
-    "paste": "Паста",
-    "copyPath": "Копиране на пътя",
-    "copyPaths": "Копиране на пътища",
-    "delete": "Изтриване",
-    "properties": "Имоти",
-    "refresh": "Обновяване",
-    "downloadFiles": "Изтегляне на {{count}} файлове в браузъра",
-    "copyFiles": "Копиране на {{count}} елементи",
-    "cutFiles": "Изрязване на {{count}} елементи",
-    "deleteFiles": "Изтриване на {{count}} елементи",
-    "filesCopiedToClipboard": "{{count}} елементи са копирани в клипборда",
-    "filesCutToClipboard": "{{count}} елементи, изрязани в клипборда",
-    "pathCopiedToClipboard": "Пътят е копиран в клипборда",
-    "pathsCopiedToClipboard": "{{count}} пътища, копирани в клипборда",
-    "failedToCopyPath": "Копирането на пътя в клипборда не бе успешно",
-    "copyFolderLink": "Копиране на връзката към папката",
-    "copyCurrentFolderLink": "Копиране на връзката към текущата папка",
-    "folderLinkCopied": "Връзката към папката е копирана в клипборда",
-    "failedToCopyFolderLink": "Копирането на връзката към папката не бе успешно",
-    "movedItems": "Преместени {{count}} елементи",
-    "failedToDeleteItem": "Изтриването на елемента не бе успешно",
-    "itemRenamedSuccessfully": "{{type}} преименуван успешно",
-    "failedToRenameItem": "Преименуването на елемента не бе успешно",
-    "download": "Изтегляне",
-    "openExternalEditor": "Отворено външно",
-    "chooseExternalEditor": "Изберете външен редактор",
-    "externalEditorSelected": "Избран външен редактор",
-    "externalEditorDesktopOnly": "Външният редактор е наличен само в настолното приложение",
-    "externalEditorOpened": "Отворено във външен редактор. Запазването там ще качи промените обратно на сървъра.",
-    "failedToOpenExternalEditor": "Неуспешно отваряне на външен редактор",
-    "failedToSelectExternalEditor": "Избирането на външен редактор не бе успешно",
-    "permissions": "Разрешения",
-    "size": "Размер",
-    "modified": "Модифицирано",
-    "path": "Път",
-    "confirmDelete": "Сигурни ли сте, че искате да изтриете {{name}}?",
-    "permissionDenied": "Разрешението е отказано",
-    "serverError": "Грешка на сървъра",
-    "fileSavedSuccessfully": "Файлът е запазен успешно",
-    "failedToSaveFile": "Запазването на файла не бе успешно",
-    "confirmDeleteSingleItem": "Сигурни ли сте, че искате да изтриете за постоянно „{{name}}“?",
-    "confirmDeleteMultipleItems": "Сигурни ли сте, че искате да изтриете за постоянно {{count}} елементи?",
-    "confirmDeleteMultipleItemsWithFolders": "Наистина ли искате да изтриете за постоянно {{count}} елементи? Това включва папки и тяхното съдържание.",
-    "confirmDeleteFolder": "Сигурни ли сте, че искате да изтриете окончателно папката „{{name}}“ и цялото ѝ съдържание?",
-    "permanentDeleteWarning": "Това действие не може да бъде отменено. Елементът(ите) ще бъдат изтрити за постоянно от сървъра.",
-    "moveToTrashWarning": "Елементът(ите) ще бъдат преместени в кошчето на Termix и могат да бъдат възстановени преди изтичане на срока на съхранение.",
-    "itemsMovedToTrash": "{{count}} елемент(а) преместени в кошчето",
-    "trash": "Кошче",
-    "trashDescription": "Изтритите елементи се запазват за {{days}} дни на този хост.",
-    "trashLoadFailed": "Зареждането на кошчето не бе успешно",
-    "trashEmpty": "Кошчето е празно",
-    "trashRestore": "Възстановяване",
-    "trashRestored": "Възстановено {{name}}",
-    "trashRestoreFailed": "Възстановяването на елемента не бе успешно. Възможно е оригиналният път вече да съществува.",
-    "trashDeletePermanently": "Изтрий за постоянно",
-    "trashDeleteConfirm": "Да се изтрие ли за постоянно {{name}}? Това не може да се отмени.",
-    "trashPermanentlyDeleted": "За постоянно изтрито {{name}}",
-    "trashDeleteFailed": "Неуспешно трайно изтриване на елемента",
-    "trashEmptyAction": "Изпразване на кошчето",
-    "trashEmptyConfirm": "Да се изтрие ли за постоянно всеки елемент в кошчето? Това не може да се отмени.",
-    "trashEmptied": "Кошчето е изпразнено",
-    "trashRetention": "Автоматично почистване след (дни)",
-    "trashRetentionSaved": "Запазването на кошчето е актуализирано",
-    "trashRetentionFailed": "Актуализирането на задържането на кошчето не бе успешно",
-    "trashUnavailableConfirm": "Този елемент не може да бъде преместен в кошчето, обикновено защото е на друга файлова система или изисква повишени права. Искате ли да го изтриете за постоянно вместо това?",
-    "recent": "Скорошни",
-    "pinned": "Закачено",
-    "folderShortcuts": "Преки пътища към папки",
-    "failedToReconnectSSH": "Неуспешно повторно свързване на SSH сесията",
-    "openTerminalHere": "Отворете терминала тук",
-    "run": "Бягане",
-    "openTerminalInFolder": "Отвори терминала в тази папка",
-    "openTerminalInFileLocation": "Отваряне на терминала на местоположението на файла",
-    "runningFile": "Бягане - {{file}}",
-    "onlyRunExecutableFiles": "Може да изпълнява само изпълними файлове",
-    "directories": "Директории",
-    "removedFromRecentFiles": "Премахнато е „{{name}}“ от последните файлове",
-    "removeFailed": "Премахването не бе успешно",
-    "unpinnedSuccessfully": "Откачено е успешно „{{name}}“",
-    "unpinFailed": "Откачването не бе успешно",
-    "removedShortcut": "Премахнат е пряк път „{{name}}“",
-    "removeShortcutFailed": "Премахването на пряк път не бе успешно",
-    "clearedAllRecentFiles": "Изчистени са всички скорошни файлове",
-    "clearFailed": "Изчистването не бе успешно",
-    "removeFromRecentFiles": "Премахване от скорошни файлове",
-    "clearAllRecentFiles": "Изчистване на всички скорошни файлове",
-    "unpinFile": "Откачи файл",
-    "removeShortcut": "Премахване на пряк път",
-    "pinFile": "Закачи файл",
-    "addToShortcuts": "Добавяне към преките пътища",
-    "pasteFailed": "Поставянето не бе успешно",
-    "noUndoableActions": "Няма отменими действия",
-    "undoCopySuccess": "Отменено копиране: Изтрити {{count}} копирани файлове",
-    "undoCopyFailedDelete": "Отмяната не бе успешна: Не можаха да бъдат изтрити копирани файлове",
-    "undoCopyFailedNoInfo": "Отмяната не бе успешна: Не можа да бъде намерена информация за копирания файл",
-    "undoMoveSuccess": "Отменена операция по преместване: {{count}} файлове са преместени обратно в оригиналното местоположение",
-    "undoMoveFailedMove": "Отмяната не бе успешна: Не можах да преместя файловете обратно",
-    "undoMoveFailedNoInfo": "Отмяната не бе успешна: Не можа да бъде намерена информация за преместения файл",
-    "undoDeleteNotSupported": "Операцията по изтриване не може да бъде отменена: Файловете са изтрити за постоянно от сървъра",
-    "undoTypeNotSupported": "Неподдържан тип операция за отмяна",
-    "undoOperationFailed": "Отмяната не бе успешна",
-    "unknownError": "Неизвестна грешка",
-    "confirm": "Потвърди",
-    "find": "Намерете...",
-    "replace": "Замяна",
-    "downloadInstead": "Изтегляне вместо това",
-    "keyboardShortcuts": "Клавишни комбинации",
-    "searchAndReplace": "Търсене и замяна",
-    "editing": "Редактиране",
-    "search": "Търсене",
-    "findNext": "Намери следващото",
-    "findPrevious": "Намери предишното",
-    "save": "Запазване",
-    "selectAll": "Избери всички",
-    "undo": "Отмяна",
-    "redo": "Преработи",
-    "moveLineUp": "Премести линията нагоре",
-    "moveLineDown": "Премести реда надолу",
-    "toggleComment": "Превключване на коментара",
-    "autoComplete": "Автоматично завършване",
-    "imageLoadError": "Зареждането на изображението не бе успешно",
-    "startTyping": "Започнете да пишете...",
-    "unknownSize": "Неизвестен размер",
-    "fileIsEmpty": "Файлът е празен",
-    "largeFileWarning": "Предупреждение за голям файл",
-    "largeFileWarningDesc": "Размерът на този файл е {{size}} , което може да причини проблеми с производителността, когато се отвори като текст.",
-    "fileNotFoundAndRemoved": "Файлът „{{name}}“ не е намерен и е премахнат от скорошни/закачени файлове",
-    "failedToLoadFile": "Неуспешно зареждане на файл: {{error}}",
-    "serverErrorOccurred": "Възникна грешка в сървъра. Моля, опитайте отново по-късно.",
-    "autoSaveFailed": "Автоматичното запазване не бе успешно",
-    "fileAutoSaved": "Файлът е автоматично запазен",
-    "moveFileFailed": "Преместването не бе успешно {{name}}",
-    "moveOperationFailed": "Операцията по преместване не бе успешна",
-    "canOnlyCompareFiles": "Може да се сравняват само два файла",
-    "comparingFiles": "Сравняване на файлове: {{file1}} и {{file2}}",
-    "dragFailed": "Плъзгането не беше успешно",
-    "filePinnedSuccessfully": "Файлът „{{name}}“ е успешно закачен",
-    "pinFileFailed": "Закачването на файла не бе успешно",
-    "fileUnpinnedSuccessfully": "Файлът „{{name}}“ е откачен успешно",
-    "unpinFileFailed": "Откачването на файла не бе успешно",
-    "shortcutAddedSuccessfully": "Прякият път към папка „{{name}}“ е добавен успешно",
-    "addShortcutFailed": "Добавянето на пряк път не бе успешно",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} елементи успешно",
-    "operationCompleted": "{{operation}} {{count}} артикули",
-    "downloadFileSuccess": "Файлът {{name}} е изтеглен успешно",
-    "downloadFileFailed": "Изтеглянето не бе успешно",
-    "downloadingFile": "Изтегляне {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Премести се в {{name}}",
-    "diffCompareWith": "Разлика в сравнение с {{name}}",
-    "dragOutsideToDownload": "Плъзнете извън прозореца, за да изтеглите ({{count}} файлове)",
-    "newFolderDefault": "НоваПапка",
-    "newFileDefault": "NewFile.txt",
-    "successfullyMovedItems": "Успешно преместени {{count}} елементи в {{target}}",
-    "move": "Преместване",
-    "searchInFile": "Търсене във файл (Ctrl+F)",
-    "showKeyboardShortcuts": "Показване на клавишни комбинации",
-    "decreaseFontSize": "Намаляване на размера на шрифта",
-    "increaseFontSize": "Увеличаване на размера на шрифта",
-    "startWritingMarkdown": "Започнете да пишете съдържанието си за markdown...",
-    "loadingFileComparison": "Зареждане на сравнението на файлове...",
-    "reload": "Презареждане",
-    "compare": "Сравни",
-    "sideBySide": "Рамо до рамо",
-    "inline": "Вграден",
-    "fileComparison": "Сравнение на файлове: {{file1}} срещу {{file2}}",
-    "fileTooLarge": "Файлът е твърде голям (> 10MB) и не може да бъде отворен като текст от съображения за сигурност.",
-    "sshConnectionFailed": "SSH връзката не бе успешна. Моля, проверете връзката си с {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Неуспешно зареждане на файл: {{error}}",
-    "connecting": "Свързване...",
-    "connectedSuccessfully": "Свързаването е осъществено успешно",
-    "totpVerificationFailed": "Проверката на TOTP не бе успешна",
-    "browserSignInFailed": "Влизането не бе успешно. Моля, опитайте отново.",
-    "authenticationFailed": "Удостоверяването не бе успешно",
-    "incorrectPassphrase": "Неправилна парола. Моля, опитайте отново.",
-    "verificationCodePrompt": "Код за потвърждение:",
-    "changePermissions": "Промяна на разрешенията",
-    "currentPermissions": "Текущи разрешения",
-    "owner": "Собственик",
-    "group": "Група",
-    "others": "Други",
-    "read": "Прочетете",
-    "write": "Пишете",
-    "execute": "Изпълнение",
-    "permissionsChangedSuccessfully": "Разрешенията са променени успешно",
-    "failedToChangePermissions": "Промяната на разрешенията не бе успешна",
-    "name": "Име",
-    "sortByName": "Име",
-    "sortByDate": "Дата на промяна",
-    "sortBySize": "Размер",
-    "ascending": "Възходящ",
-    "descending": "Низходящо",
-    "root": "Корен",
-    "new": "Ново",
-    "sortBy": "Сортиране по",
-    "items": "Елементи",
-    "selected": "Избрано",
-    "editor": "Редактор",
-    "octal": "Осмичен",
-    "storage": "Съхранение",
-    "disk": "Диск",
-    "used": "Използван",
-    "of": "от",
-    "toggleSidebar": "Превключване на страничната лента",
-    "compactLayout": "Използвайте компактно оформление",
-    "comfortableLayout": "Използвайте удобно оформление",
-    "cannotLoadPdf": "Не може да се зареди PDF файл",
-    "pdfLoadError": "Възникна грешка при зареждането на този PDF файл.",
-    "loadingPdf": "Зареждане на PDF визуализатора...",
-    "loadingPage": "Зареждане на страницата...",
-    "cancel": "Отказ",
-    "copiedItems_one": "Копиран елемент {{count}}",
-    "copiedItems_other": "Копирани {{count}} елементи",
-    "deleteCopiedFileFailed": "Не можа да се изтрие копието на {{name}}: {{error}}",
-    "dragMovedItems_one": "Елементът {{count}} е преместен в {{target}}",
-    "dragMovedItems_other": "Преместихме {{count}} елементи в {{target}}",
-    "moveBackFileFailed": "Не можа да се премести {{name}} назад: {{error}}",
-    "terminal": "Терминал: {{host}} ({{path}})",
-    "dragToDesktop": "Плъзгане на {{name}} към работния плот",
-    "dragFilesToDesktop": "Плъзгане на {{count}} файлове на работния плот",
-    "folderDragUnsupported": "Плъзгането на папки към работния плот все още не се поддържа",
-    "saveToDesktopFailed": "Запазването не бе успешно: {{error}}",
-    "dragFailedDetail": "Плъзгането не бе успешно: {{error}}",
-    "videoUnsupported": "Вашият браузър не може да възпроизведе този видео формат.",
-    "downloadToPlay": "Изтеглете, за да го играете другаде",
-    "cannotPreviewType": "Не може да се прегледа този тип файл",
-    "cannotPreviewTypeHint": "Този тип файл няма предварителен преглед. Изтеглете го, за да го отворите в друго приложение.",
-    "loadingFile": "Зареждане на файл...",
-    "loadingImage": "Зареждане на изображението...",
-    "loadingEditor": "Зареждане на редактора...",
-    "loadingPreview": "Зареждане на визуализация...",
-    "loadingAudio": "Зареждане на аудио плейъра...",
-    "emptyPreview": "Все още няма нищо за предварителен преглед...",
-    "revert": "Връщане",
-    "openAsText": "Отвори като текст",
-    "confirmOpenAsText": "Искате ли да продължите да отваряте този файл като текст? Това може да забави браузъра ви."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "Прехвърляне на файлове между два SSH хоста.",
-    "sourceServer": "Източник на сървъра",
-    "destinationServer": "Целеви сървър",
-    "selectHost": "Изберете хост",
-    "noHostSelected": "Няма избран хост",
-    "move": "Преместване",
-    "copy": "Копиране",
-    "upload": "Качване",
-    "itemsSelected": "{{count}} избран елемент",
-    "itemsSelected_other": "{{count}} избрани елементи",
-    "ready": "Готов",
-    "loadingHosts": "Зареждане на хостове...",
-    "name": "Име",
-    "modified": "Модифицирано",
-    "size": "Размер",
-    "noFiles": "Няма файлове",
-    "open": "Отворено",
-    "up": "Нагоре",
-    "refresh": "Обновяване",
-    "copyToTarget": "Копиране в целевата директория",
-    "rename": "Преименуване",
-    "delete": "Изтриване",
-    "editPermissions": "Редактиране на разрешения",
-    "createNewFolder": "Създаване на нова папка",
-    "deleteSelectedItems": "Изтриване на избраните елементи",
-    "deleteConfirm": "Да се изтрие ли {{count}} избран елемент?",
-    "deleteConfirm_other": "Да се изтрият ли {{count}} избрани елементи?",
-    "cancel": "Отказ",
-    "save": "Запазване",
-    "folderCreated": "Папката е създадена",
-    "itemRenamed": "Елементът е преименуван",
-    "actionFailed": "Действието е неуспешно",
-    "itemsDeleted": "{{count}} елементът е изтрит",
-    "itemsDeleted_other": "{{count}} елементи са изтрити",
-    "deleteFailed": "Изтриването не бе успешно",
-    "permissionsUpdated": "Разрешенията са актуализирани",
-    "noRemoteSessionConnected": "Няма свързана отдалечена сесия",
-    "failedToListFiles": "Неуспешно изброяване на файловете",
-    "failedToRefresh": "Опресняването не бе успешно",
-    "destinationInsideSource": "Дестинацията не може да бъде в избрания път на източника.",
-    "sameHostNoOp": "Източникът и местоназначението са една и съща папка."
-  },
-  "hosts": {
-    "fileManager": "Файлов мениджър",
-    "fileManagerUrlCopied": "URL адресът на файловия мениджър е копиран",
-    "copyFileManagerUrlAction": "Копиране на URL адреса на файловия мениджър",
-    "docsLink": "Преглед на документи",
-    "hostNotFound": "Хостът не е намерен",
-    "loadingHost": "Зареждане на хоста..."
-  },
-  "onboarding": {
-    "feature_files": "Файлов мениджър",
-    "feature_files_desc": "Преглеждайте, качвайте, изтегляйте и редактирайте файлове през SFTP, без да напускате приложението."
-  },
-  "terminal": {
-    "runTitle": "Изпълнява се {{command}} - {{host}}",
-    "terminalTitle": "Терминал - {{host}}",
-    "terminalWithPath": "Терминал - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Преглед на целевите папки",
-    "browsePathError": "Не можа да се отвори този път на целевия хост.",
-    "browsePathWillBeCreated": "Тази папка все още не съществува. Тя ще бъде създадена, когато започне прехвърлянето.",
-    "cancel": "Отказ",
-    "cleanupDestFiles": "Почистване на дестинацията",
-    "cleanupDestFilesError": "Почистването не бе успешно",
-    "cleanupDestFilesNothing": "Няма нищо за почистване на дестинацията",
-    "cleanupDestFilesPartial": "Някои частични файлове не можаха да бъдат премахнати",
-    "cleanupDestFilesSuccess": "Премахнати частични файлове от местоназначението",
-    "confirmCopy": "Копиране",
-    "confirmMove": "Преместване",
-    "copyFolderToHost": "Копиране на папката на хост…",
-    "copyItemsToHost": "Копиране на {{count}} елементи за хостване на…",
-    "copyToHost": "Копиране към хост…",
-    "destinationPath": "Път на местоназначението",
-    "destMustBeDirectory": "Дестинацията трябва да е директория за прехвърляне на множество елементи",
-    "goUp": "Качи се",
-    "hostAuthRequired": "Изисква се удостоверяване. Първо отворете Файловия мениджър на този хост.",
-    "hostConnecting": "Свързване…",
-    "hostConnectionFailed": "Връзката не бе успешна",
-    "hostDisconnected": "Няма връзка",
-    "hostReady": "Готов",
-    "itemsSummary": "{{count}} артикули",
-    "jumpHostLimitation": "И двата хоста трябва да са достъпни от Termix сървъра. Директното маршрутизиране от хост към хост не се поддържа.",
-    "methodAuto": "Автоматично",
-    "methodAutoHint": "Избира tar или SFTP за всеки файл въз основа на броя, размера и компресируемостта на файловете. Отделните файлове винаги използват стрийминг SFTP.",
-    "methodItemSftp": "SFTP за всеки файл",
-    "methodItemSftpHint": "Прехвърляйте всеки файл поотделно през SFTP. Работи на всички хостове, включително Windows.",
-    "methodItemSftpLimitation": "Всеки файл използва същия SFTP поток като копие на един файл, следвани един след друг. Напредъкът се комбинира във всички файлове, така че лентата се движи бавно при големи файлове.",
-    "methodLabel": "Метод на прехвърляне",
-    "methodPreviewError": "Не можа да се прегледа методът за прехвърляне. Сървърът все пак ще избере метод, когато стартирате.",
-    "methodPreviewLoading": "Метод за изчисляване на трансфер…",
-    "methodPreviewScanSummary": "{{fileCount}} файлове, {{totalSize}} общо (сканирани на изходния хост).",
-    "methodPreviewWillUseItemSftp": "Ще използва: SFTP за всеки файл",
-    "methodPreviewWillUseTar": "Ще използвам: Tar архив",
-    "methodReason": {
-      "user_item_sftp": "Избрали сте SFTP за всеки файл.",
-      "user_tar": "Избрахте tar архив.",
-      "tar_unavailable": "Tar не е наличен на единия или и на двата хоста, така че вместо това ще се използва SFTP за всеки файл.",
-      "windows_host": "Включен е хост на Windows, така че tar не се използва.",
-      "auto_multi_large": "Автоматично: множество файлове, включително голям файл ({{largestSize}}) със свиваеми данни. Tar ги обединява в един трансфер.",
-      "auto_single_large_in_archive": "Автоматично: един голям файл ({{largestSize}}) в този набор, така че SFTP за всеки файл.",
-      "auto_many_incompressible": "Автоматично: предимно некомпресируеми данни, така че SFTP за всеки файл.",
-      "auto_many_files": "Автоматично: много файлове ({{fileCount}}), tar намалява натоварването на всеки файл.",
-      "auto_default": "Автоматично: SFTP за всеки файл за този набор."
-    },
-    "methodTar": "Тар архив",
-    "methodTarHint": "Компресиране при източника, прехвърляне на един архив, разархивиране при местоназначението. Изисква tar и на двата Unix хоста.",
-    "metricsCompress": "Компресиране при източника: {{duration}}",
-    "metricsExtract": "Извличане в местоназначението: {{duration}}",
-    "metricsPrepare": "Подготовка на дестинацията: {{duration}}",
-    "metricsRouteBenchmark": "Сонда за маршрут: директна {{direct}}, релейна {{relay}}",
-    "metricsSourceDelete": "Премахване от източника: {{duration}}",
-    "metricsTotal": "Общо: {{duration}}",
-    "metricsTransfer": "От край до край: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 проверен: {{duration}}",
-    "moveFolderToHost": "Преместване на папката на хост…",
-    "moveItemsToHost": "Преместете {{count}} елементи, за да хоствате…",
-    "moveToHost": "Преместване към хост…",
-    "noHostsConnected": "Няма други налични хостове за файлови мениджъри.",
-    "noHostsConnectedHint": "Добавете друг SSH хост с активиран файлов мениджър в Host Manager.",
-    "parallelSegmentsHint": "Големите файлове се разделят на парчета от 256 MB. Няколко канала използват отделни връзки (като стартиране на няколко трансфера) за по-висока обща пропускателна способност.",
-    "parallelSegmentsLabel": "Паралелни трансферни ленти",
-    "parallelSegmentsOption": "{{count}} ленти",
-    "progressBenchmarking": "Избор на най-бързия маршрут за трансфер…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Отказ",
-    "progressCancelling": "Анулиране…",
-    "progressCompressing": "Компресиране на изходния хост…",
-    "progressExtracting": "Извличане в местоназначението…",
-    "progressItems": "{{current}} / {{total}} файлове",
-    "progressReconnecting": "Повторно свързване…",
-    "progressStalled": "Застоял",
-    "progressTotalSpeed": "{{speed}} общо ({{lanes}} ленти)",
-    "progressTransferring": "Прехвърляне на данни…",
-    "progressTransferringItems": "Прехвърляне на файлове ({{current}} от {{total}})…",
-    "progressVerifying": "Проверка на целостта на файла…",
-    "recentDestinations": "Последни дестинации",
-    "resumedHint": "Възстановена е връзка с активно прехвърляне, започнато в друг прозорец.",
-    "retryTransfer": "Опитай отново",
-    "retryTransferError": "Повторният опит не бе успешен",
-    "selectDestinationHost": "Изберете целеви хост",
-    "transferCancelled": "Прехвърлянето е анулирано",
-    "transferCancelledCopyHint": "Частични файлове може да останат в местоназначението.",
-    "transferCancelledMoveHint": "Възможно е част от файловете да са останали в местоназначението. Изходните файлове не са премахнати.",
-    "transferError": "Прехвърлянето не бе успешно",
-    "transferFailedRetryHint": "В местоназначението са запазени частични данни. Повторният опит ще се възобнови, когато връзката се възстанови.",
-    "transferPartialHint": "Не можа да се прехвърли: {{paths}}",
-    "transferSuccess": "Прехвърлянето е завършено",
-    "metricsHopSourceRead": "Източник → сървър: {{throughput}}",
-    "metricsHopDestSftpWrite": "Сървър → дестинация (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Сървър → дестинация (локална): {{throughput}}"
-  },
-  "plugin": {
-    "name": "Файлов мениджър"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/bn_BD.json b/plugins/file-manager/locales/translated/bn_BD.json
deleted file mode 100644
index 4412a3df2..000000000
--- a/plugins/file-manager/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "ফাইল",
-    "sftp": "এসএফটিপি",
-    "openFileManager": "ফাইল ম্যানেজার খুলুন"
-  },
-  "permissions": {
-    "use": {
-      "title": "ফাইল ম্যানেজার ব্যবহার করুন",
-      "description": "SFTP-এর মাধ্যমে ফাইল ব্রাউজ, সম্পাদনা এবং স্থানান্তর করুন।"
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "ফাইল ম্যানেজার সক্রিয় করুন",
-        "description": "SFTP-এর মাধ্যমে এই হোস্টের ফাইলগুলো ব্রাউজ ও সম্পাদনা করুন।"
-      },
-      "defaultPath": {
-        "label": "ডিফল্ট পথ"
-      },
-      "scpLegacy": {
-        "label": "SCP লিগ্যাসি মোড"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "একযোগে ফাইল স্থানান্তর",
-        "description": "সাইড বাই সাইড লোকাল/রিমোট ম্যানেজার একই সময়ে কতগুলো ফাইল আপলোড বা ডাউনলোড করে। আপনার সার্ভার যদি SFTP চ্যানেল সীমিত করে, তবে এই সংখ্যাটি কমিয়ে দিন।"
-      },
-      "confirmBeforeTrash": {
-        "label": "ট্র্যাশে ফাইল সরানোর আগে নিশ্চিত করুন।",
-        "description": "রিমোট ফাইল ট্র্যাশে সরানোর আগে জিজ্ঞাসা করুন। স্থায়ীভাবে মুছে ফেলার জন্যও নিশ্চিতকরণের প্রয়োজন হয়।"
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "ফাইল ম্যানেজার"
-  },
-  "fileManager": {
-    "noHostSelected": "কোন হোস্ট নির্বাচন করা হয়নি",
-    "initializingEditor": "এডিটর চালু করা হচ্ছে...",
-    "file": "ফাইল",
-    "folder": "ফোল্ডার",
-    "uploadFile": "ফাইল আপলোড করুন",
-    "downloadFile": "ডাউনলোড করুন",
-    "extractArchive": "আর্কাইভ নিষ্কাশন করুন",
-    "extractingArchive": "{{name}} নিষ্কাশন করা হচ্ছে ...",
-    "archiveExtractedSuccessfully": "{{name}} সফলভাবে নিষ্কাশন করা হয়েছে",
-    "extractFailed": "নিষ্কাশন ব্যর্থ হয়েছে",
-    "compressFile": "ফাইল সংকুচিত করুন",
-    "compressFiles": "ফাইলগুলি সংকুচিত করুন",
-    "compressFilesDesc": "{{count}} টি আইটেমকে আর্কাইভে সংকুচিত করুন",
-    "archiveName": "আর্কাইভের নাম",
-    "enterArchiveName": "আর্কাইভের নাম লিখুন...",
-    "compressionFormat": "কম্প্রেশন ফরম্যাট",
-    "selectedFiles": "নির্বাচিত ফাইল",
-    "andMoreFiles": "এবং {{count}} আরও...",
-    "compress": "সংকুচিত করুন",
-    "compressingFiles": "{{count}} টি আইটেমকে {{name}} টি আইটেমে সংকুচিত করা হচ্ছে...",
-    "filesCompressedSuccessfully": "{{name}} সফলভাবে তৈরি হয়েছে",
-    "compressFailed": "সংকোচন ব্যর্থ হয়েছে",
-    "edit": "সম্পাদনা",
-    "preview": "প্রিভিউ",
-    "previous": "পূর্ববর্তী",
-    "next": "পরবর্তী",
-    "pageXOfY": "{{current}} এর {{total}} পৃষ্ঠা",
-    "zoomOut": "জুম আউট",
-    "zoomIn": "জুম ইন",
-    "newFile": "নতুন ফাইল",
-    "newFolder": "নতুন ফোল্ডার",
-    "rename": "নাম পরিবর্তন",
-    "uploading": "আপলোড হচ্ছে...",
-    "uploadingFile": "{{name}} আপলোড হচ্ছে ...",
-    "uploadingChunk": "{{name}}আপলোড করা হচ্ছে : {{percent}}% ( {{total}} এর {{chunk}} এর অংশ)",
-    "fileName": "ফাইলের নাম",
-    "folderName": "ফোল্ডারের নাম",
-    "fileUploadedSuccessfully": "ফাইল \"{{name}}\" সফলভাবে আপলোড হয়েছে",
-    "failedToUploadFile": "ফাইল আপলোড করতে ব্যর্থ হয়েছে",
-    "uploadingFolderFiles": "{{count}} টি ফাইল আপলোড করা হচ্ছে...",
-    "uploadedFolderFiles": "{{count}} টি ফাইল সফলভাবে আপলোড করা হয়েছে",
-    "uploadedFolderPartial": "{{uploaded}} টি ফাইল আপলোড করা হয়েছে, {{failed}} টি ফাইল আপলোড ব্যর্থ হয়েছে",
-    "fileDownloadedSuccessfully": "ফাইল \"{{name}}\" সফলভাবে ডাউনলোড হয়েছে",
-    "failedToDownloadFile": "ফাইল ডাউনলোড করতে ব্যর্থ হয়েছে",
-    "fileCreatedSuccessfully": "ফাইল \"{{name}}\" সফলভাবে তৈরি হয়েছে",
-    "folderCreatedSuccessfully": "\"{{name}}\" ফোল্ডারটি সফলভাবে তৈরি করা হয়েছে",
-    "failedToCreateItem": "আইটেম তৈরি করতে ব্যর্থ হয়েছে",
-    "operationFailed": "{{operation}} অপারেশনটি {{name}}এর জন্য ব্যর্থ হয়েছে: {{error}}",
-    "failedToResolveSymlink": "সিমলিঙ্ক সমাধান করতে ব্যর্থ হয়েছে",
-    "itemsDeletedSuccessfully": "{{count}} আইটেম সফলভাবে মুছে ফেলা হয়েছে",
-    "failedToDeleteItems": "আইটেমগুলি মুছে ফেলতে ব্যর্থ হয়েছে",
-    "sudoPasswordRequired": "প্রশাসক পাসওয়ার্ড আবশ্যক",
-    "enterSudoPassword": "এই অপারেশনটি চালিয়ে যেতে sudo পাসওয়ার্ড দিন।",
-    "sudoPassword": "সুডো পাসওয়ার্ড",
-    "sudoOperationFailed": "Sudo অপারেশন ব্যর্থ হয়েছে",
-    "sudoAuthFailed": "Sudo প্রমাণীকরণ ব্যর্থ হয়েছে",
-    "dragFilesToUpload": "আপলোড করার জন্য ফাইলগুলো এখানে রাখুন।",
-    "dropToUploadHere": "এখানে আপলোড করতে ড্রপ করুন",
-    "dropToDownloadHere": "ডাউনলোড করতে এখানে ক্লিক করুন",
-    "localFiles": "স্থানীয়",
-    "showLocalFiles": "স্থানীয় ফাইলগুলি দেখান (বিভক্ত দৃশ্য)",
-    "hideLocalFiles": "স্থানীয় ফাইলগুলি লুকান",
-    "localHome": "হোম ফোল্ডার",
-    "localPathPlaceholder": "স্থানীয় ফোল্ডার পাথ",
-    "localShowHidden": "লুকানো ফাইলগুলি দেখান",
-    "localHideHidden": "লুকানো ফাইলগুলি লুকান",
-    "localRevealInFileManager": "সিস্টেম ফাইল ম্যানেজারে প্রকাশ করুন",
-    "localCannotOpenFolder": "ফোল্ডার খোলা যাচ্ছে না",
-    "localItemCount": "{{count}} আইটেম",
-    "localSelectedCount": "{{count}} নির্বাচিত",
-    "back": "ফিরে যান",
-    "forward": "ফরোয়ার্ড",
-    "up": "উপরে",
-    "kind": "ধরনের",
-    "localUploadingProgress": "{{total}} এর {{current}} আপলোড করা হচ্ছে",
-    "localDownloadingProgress": "{{total}} এর {{current}} ডাউনলোড হচ্ছে",
-    "localTransferInFlight": "{{count}} একবারে",
-    "localPreparingDownload": "ডাউনলোড প্রস্তুত হচ্ছে...",
-    "localTransferCancelled": "স্থানান্তর বাতিল করা হয়েছে",
-    "localNothingToTransfer": "স্থানান্তর করার কিছু নেই",
-    "localUploadComplete": "{{count}} টি ফাইল আপলোড করা হয়েছে",
-    "localUploadFailed": "আপলোড ব্যর্থ হয়েছে",
-    "localUploadPartial": "{{done}} টি ফাইল আপলোড করা হয়েছে, {{failed}} টি ফাইল আপলোড ব্যর্থ হয়েছে",
-    "localDownloadComplete": "{{count}} টি ফাইল ডাউনলোড করা হয়েছে",
-    "localDownloadFailed": "ডাউনলোড ব্যর্থ হয়েছে",
-    "localDownloadPartial": "{{done}} টি ফাইল ডাউনলোড করা হয়েছে, {{failed}} টি ফাইল ডাউনলোড ব্যর্থ হয়েছে",
-    "localReplaceExistingPrompt": "এই ফোল্ডারে {{count}} টি আইটেম ইতিমধ্যেই বিদ্যমান। এগুলো প্রতিস্থাপন করবেন?",
-    "localReplace": "প্রতিস্থাপন করুন",
-    "localSkipExisting": "এড়িয়ে যান",
-    "localSkippedExisting": "{{count}} টি বিদ্যমান আইটেম বাদ দেওয়া হয়েছে",
-    "localUnsafeNamesSkipped": "{{count}} টি আইটেম বাদ দেওয়া হয়েছে, যেগুলোর নাম এই কম্পিউটারে ব্যবহার করা যাবে না।",
-    "localOpen": "খোলা",
-    "localOpenFolder": "ফোল্ডার খুলুন",
-    "localUploadToRemote": "সার্ভারে আপলোড করুন",
-    "localUploadToRemoteMany": "সার্ভারে {{count}} টি আইটেম আপলোড করুন",
-    "localMoveToTrash": "ট্র্যাশে সরান",
-    "localMoveToTrashMany": "{{count}} টি আইটেম ট্র্যাশে সরান",
-    "localTrashConfirmSingle": "\"{{name}}\" ট্র্যাশে সরাবেন?",
-    "localTrashConfirmFolder": "\"{{name}}\" ফোল্ডারটি এবং এর সমস্ত বিষয়বস্তু ট্র্যাশে সরান?",
-    "localTrashConfirmMany": "{{count}} টি আইটেম ট্র্যাশে সরাবেন?",
-    "localTrashed": "ট্র্যাশে {{count}} টি আইটেম সরানো হয়েছে",
-    "localTrashFailed": "ট্র্যাশে সরানো যায়নি",
-    "localRenameFailed": "নাম পরিবর্তন ব্যর্থ হয়েছে",
-    "localCreateFailed": "আইটেমটি তৈরি করা যায়নি",
-    "goToParentFolder": "প্যারেন্ট ফোল্ডারে যান",
-    "resizeSidebar": "সাইডবারের আকার পরিবর্তন করতে ড্র্যাগ করুন (রিসেট করতে ডাবল-ক্লিক করুন)",
-    "resizeLocalPane": "স্থানীয় প্যানেলের আকার পরিবর্তন করতে ড্র্যাগ করুন (রিসেট করতে ডাবল-ক্লিক করুন)",
-    "columns": "কলাম",
-    "columnsHint": "কলাম বাছাই করতে ডান-ক্লিক করুন",
-    "emptyFolder": "এই ফোল্ডারটি খালি",
-    "searchFiles": "ফাইলগুলি অনুসন্ধান করুন...",
-    "upload": "আপলোড",
-    "selectHostToStart": "ফাইল ব্যবস্থাপনা শুরু করতে একটি হোস্ট নির্বাচন করুন",
-    "sshRequiredForFileManager": "ফাইল ম্যানেজারের জন্য SSH প্রয়োজন। এই হোস্টে SSH সক্রিয় করা নেই।",
-    "failedToConnect": "SSH-এর সাথে সংযোগ করতে ব্যর্থ হয়েছে",
-    "failedToLoadDirectory": "ডিরেক্টরি লোড করতে ব্যর্থ হয়েছে",
-    "noSSHConnection": "কোন SSH সংযোগ উপলব্ধ নেই",
-    "copy": "অনুলিপি",
-    "cut": "কাটা",
-    "paste": "পেস্ট",
-    "copyPath": "কপি পাথ",
-    "copyPaths": "কপি পাথ",
-    "delete": "মুছে ফেলুন",
-    "properties": "বৈশিষ্ট্য",
-    "refresh": "রিফ্রেশ",
-    "downloadFiles": "ব্রাউজারে {{count}} ফাইলগুলো ডাউনলোড করুন",
-    "copyFiles": "{{count}} আইটেম কপি করুন",
-    "cutFiles": "{{count}} টি আইটেম কাটুন",
-    "deleteFiles": "{{count}} টি আইটেম মুছুন",
-    "filesCopiedToClipboard": "{{count}} আইটেম ক্লিপবোর্ডে কপি করা হয়েছে",
-    "filesCutToClipboard": "{{count}} আইটেমগুলো ক্লিপবোর্ডে কাটা হয়েছে",
-    "pathCopiedToClipboard": "পাথটি ক্লিপবোর্ডে কপি করা হয়েছে",
-    "pathsCopiedToClipboard": "{{count}} পাথগুলো ক্লিপবোর্ডে কপি করা হয়েছে",
-    "failedToCopyPath": "ক্লিপবোর্ডে পাথ কপি করতে ব্যর্থ হয়েছে",
-    "copyFolderLink": "ফোল্ডারে লিঙ্ক কপি করুন",
-    "copyCurrentFolderLink": "বর্তমান ফোল্ডারে লিঙ্ক কপি করুন",
-    "folderLinkCopied": "ফোল্ডারের লিঙ্ক ক্লিপবোর্ডে কপি করা হয়েছে",
-    "failedToCopyFolderLink": "ফোল্ডার লিঙ্ক কপি করতে ব্যর্থ হয়েছে",
-    "movedItems": "{{count}} টি আইটেম সরানো হয়েছে",
-    "failedToDeleteItem": "আইটেমটি মুছে ফেলতে ব্যর্থ হয়েছে",
-    "itemRenamedSuccessfully": "{{type}} সফলভাবে নাম পরিবর্তন করা হয়েছে",
-    "failedToRenameItem": "আইটেমের নাম পরিবর্তন করতে ব্যর্থ হয়েছে",
-    "download": "ডাউনলোড করুন",
-    "openExternalEditor": "বাইরে খুলুন",
-    "chooseExternalEditor": "বাহ্যিক সম্পাদক নির্বাচন করুন",
-    "externalEditorSelected": "বাহ্যিক সম্পাদক নির্বাচিত",
-    "externalEditorDesktopOnly": "এক্সটার্নাল এডিটর শুধুমাত্র ডেস্কটপ অ্যাপে উপলব্ধ।",
-    "externalEditorOpened": "বাহ্যিক এডিটরে খোলা হয়েছে। সেখানে সেভ করলে পরিবর্তনগুলো সার্ভারে আপলোড হয়ে যাবে।",
-    "failedToOpenExternalEditor": "বাহ্যিক সম্পাদক খুলতে ব্যর্থ হয়েছে",
-    "failedToSelectExternalEditor": "বাহ্যিক সম্পাদক নির্বাচন করতে ব্যর্থ হয়েছে",
-    "permissions": "অনুমতি",
-    "size": "আকার",
-    "modified": "পরিবর্তিত",
-    "path": "পথ",
-    "confirmDelete": "আপনি কি {{name}} মুছে ফেলতে নিশ্চিত?",
-    "permissionDenied": "অনুমতি প্রত্যাখ্যান করা হয়েছে",
-    "serverError": "সার্ভার ত্রুটি",
-    "fileSavedSuccessfully": "ফাইল সফলভাবে সংরক্ষিত হয়েছে।",
-    "failedToSaveFile": "ফাইল সংরক্ষণ করতে ব্যর্থ হয়েছে",
-    "confirmDeleteSingleItem": "আপনি কি \"{{name}} \" স্থায়ীভাবে মুছে ফেলতে চান?",
-    "confirmDeleteMultipleItems": "আপনি কি {{count}} টি আইটেম স্থায়ীভাবে মুছে ফেলতে চান?",
-    "confirmDeleteMultipleItemsWithFolders": "আপনি কি {{count}} টি আইটেম স্থায়ীভাবে মুছে ফেলতে নিশ্চিত? এর মধ্যে ফোল্ডার এবং তার ভেতরের সবকিছু অন্তর্ভুক্ত।",
-    "confirmDeleteFolder": "আপনি কি \"{{name}}\" ফোল্ডারটি এবং এর ভেতরের সবকিছু স্থায়ীভাবে মুছে ফেলতে চান?",
-    "permanentDeleteWarning": "এই কাজটি পূর্বাবস্থায় ফেরানো যাবে না। আইটেম(গুলি) সার্ভার থেকে স্থায়ীভাবে মুছে ফেলা হবে।",
-    "moveToTrashWarning": "আইটেমটি টারমিক্স ট্র্যাশে স্থানান্তরিত হবে এবং সংরক্ষণের সময়সীমা শেষ হওয়ার আগে তা পুনরুদ্ধার করা যাবে।",
-    "itemsMovedToTrash": "{{count}} আইটেম(গুলি) ট্র্যাশে সরানো হয়েছে",
-    "trash": "আবর্জনা",
-    "trashDescription": "এই হোস্টে মুছে ফেলা আইটেমগুলি {{days}} দিন পর্যন্ত সংরক্ষিত থাকে।",
-    "trashLoadFailed": "ট্র্যাশ লোড করতে ব্যর্থ হয়েছে",
-    "trashEmpty": "ময়লার ঝুড়ি খালি",
-    "trashRestore": "পুনরুদ্ধার করুন",
-    "trashRestored": "পুনরুদ্ধার করা হয়েছে {{name}}",
-    "trashRestoreFailed": "আইটেমটি পুনরুদ্ধার করা সম্ভব হয়নি। মূল পাথটি হয়তো ইতিমধ্যেই বিদ্যমান আছে।",
-    "trashDeletePermanently": "স্থায়ীভাবে মুছে ফেলুন",
-    "trashDeleteConfirm": "{{name}}স্থায়ীভাবে মুছে ফেলবেন? এটি আর পূর্বাবস্থায় ফেরানো যাবে না।",
-    "trashPermanentlyDeleted": "স্থায়ীভাবে মুছে ফেলা হয়েছে {{name}}",
-    "trashDeleteFailed": "আইটেমটি স্থায়ীভাবে মুছে ফেলতে ব্যর্থ হয়েছে",
-    "trashEmptyAction": "ময়লা খালি করুন",
-    "trashEmptyConfirm": "ট্র্যাশের প্রতিটি আইটেম স্থায়ীভাবে মুছে ফেলবেন? এটি আর পূর্বাবস্থায় ফেরানো যাবে না।",
-    "trashEmptied": "ময়লা খালি করা হয়েছে",
-    "trashRetention": "(দিন) পর স্বয়ংক্রিয়ভাবে পরিষ্কার করা হবে",
-    "trashRetentionSaved": "আবর্জনা সংরক্ষণের সময় আপডেট করা হয়েছে",
-    "trashRetentionFailed": "ট্র্যাশ রিটেনশন আপডেট করতে ব্যর্থ হয়েছে",
-    "trashUnavailableConfirm": "এই আইটেমটি ট্র্যাশে সরানো যাচ্ছে না, কারণ এটি সাধারণত অন্য ফাইলসিস্টেমে রয়েছে অথবা এর জন্য বিশেষ অনুমতির প্রয়োজন। এর পরিবর্তে এটি স্থায়ীভাবে মুছে ফেলবেন?",
-    "recent": "সাম্প্রতিক",
-    "pinned": "পিন করা",
-    "folderShortcuts": "ফোল্ডার শর্টকাট",
-    "failedToReconnectSSH": "SSH সেশন পুনরায় সংযোগ করতে ব্যর্থ হয়েছে",
-    "openTerminalHere": "এখানে টার্মিনাল খুলুন",
-    "run": "দৌড়",
-    "openTerminalInFolder": "এই ফোল্ডারে টার্মিনাল খুলুন",
-    "openTerminalInFileLocation": "ফাইল লোকেশনে টার্মিনাল খুলুন",
-    "runningFile": "দৌড়ানো - {{file}}",
-    "onlyRunExecutableFiles": "শুধুমাত্র এক্সিকিউটেবল ফাইল চালানো যাবে",
-    "directories": "ডিরেক্টরি",
-    "removedFromRecentFiles": "সাম্প্রতিক ফাইলগুলি থেকে \"{{name}}\" সরানো হয়েছে",
-    "removeFailed": "ব্যর্থ অপসারণ",
-    "unpinnedSuccessfully": "\"{{name}}\" সফলভাবে আনপিন করা হয়েছে",
-    "unpinFailed": "আনপিন ব্যর্থ হয়েছে",
-    "removedShortcut": "\"{{name}} \" শর্টকাটটি সরানো হয়েছে",
-    "removeShortcutFailed": "শর্টকাট অপসারণ ব্যর্থ হয়েছে",
-    "clearedAllRecentFiles": "সাম্প্রতিক সমস্ত ফাইল মুছে ফেলা হয়েছে",
-    "clearFailed": "পরিষ্কার করতে ব্যর্থ হয়েছে",
-    "removeFromRecentFiles": "সাম্প্রতিক ফাইলগুলি থেকে সরান",
-    "clearAllRecentFiles": "সাম্প্রতিক সমস্ত ফাইল মুছে ফেলুন",
-    "unpinFile": "ফাইলটি আনপিন করুন",
-    "removeShortcut": "শর্টকাট সরান",
-    "pinFile": "পিন ফাইল",
-    "addToShortcuts": "শর্টকাটে যোগ করুন",
-    "pasteFailed": "পেস্ট ব্যর্থ হয়েছে",
-    "noUndoableActions": "কোনো পূর্বাবস্থায় ফেরানো যায় না এমন কাজ নেই।",
-    "undoCopySuccess": "কপি অপারেশন বাতিল করা হয়েছে: {{count}} টি কপি করা ফাইল মুছে ফেলা হয়েছে",
-    "undoCopyFailedDelete": "পূর্বাবস্থায় ফেরানো ব্যর্থ হয়েছে: কপি করা কোনো ফাইল মুছে ফেলা সম্ভব হয়নি",
-    "undoCopyFailedNoInfo": "পূর্বাবস্থায় ফেরানো ব্যর্থ হয়েছে: কপি করা ফাইলের তথ্য খুঁজে পাওয়া যায়নি",
-    "undoMoveSuccess": "স্থানান্তর প্রক্রিয়া বাতিল করা হয়েছে: {{count}} টি ফাইল মূল অবস্থানে ফিরিয়ে আনা হয়েছে",
-    "undoMoveFailedMove": "পূর্বাবস্থায় ফেরানো ব্যর্থ হয়েছে: কোনো ফাইল আগের জায়গায় সরানো সম্ভব হয়নি",
-    "undoMoveFailedNoInfo": "পূর্বাবস্থায় ফেরানো ব্যর্থ হয়েছে: স্থানান্তরিত ফাইলের তথ্য খুঁজে পাওয়া যায়নি",
-    "undoDeleteNotSupported": "মুছে ফেলার প্রক্রিয়াটি পূর্বাবস্থায় ফেরানো যাবে না: ফাইলগুলো সার্ভার থেকে স্থায়ীভাবে মুছে ফেলা হয়েছে।",
-    "undoTypeNotSupported": "অসমর্থিত পূর্বাবস্থায় ফেরানোর অপারেশনের ধরণ",
-    "undoOperationFailed": "পূর্বাবস্থায় ফেরানো ব্যর্থ হয়েছে",
-    "unknownError": "অজানা ত্রুটি",
-    "confirm": "নিশ্চিত করুন",
-    "find": "খুঁজুন...",
-    "replace": "প্রতিস্থাপন করুন",
-    "downloadInstead": "পরিবর্তে ডাউনলোড করুন",
-    "keyboardShortcuts": "কীবোর্ড শর্টকাট",
-    "searchAndReplace": "অনুসন্ধান ও প্রতিস্থাপন",
-    "editing": "সম্পাদনা",
-    "search": "অনুসন্ধান",
-    "findNext": "পরবর্তী খুঁজুন",
-    "findPrevious": "পূর্ববর্তী খুঁজুন",
-    "save": "সংরক্ষণ করুন",
-    "selectAll": "সব নির্বাচন করুন",
-    "undo": "পূর্বাবস্থায় ফেরান",
-    "redo": "পুনরায় করুন",
-    "moveLineUp": "লাইন আপ সরান",
-    "moveLineDown": "লাইন নিচে সরান",
-    "toggleComment": "মন্তব্য টগল করুন",
-    "autoComplete": "স্বয়ংক্রিয়ভাবে সম্পূর্ণ",
-    "imageLoadError": "ছবি লোড করতে ব্যর্থ হয়েছে",
-    "startTyping": "টাইপ করা শুরু করুন...",
-    "unknownSize": "অজানা আকার",
-    "fileIsEmpty": "ফাইলটি খালি",
-    "largeFileWarning": "বড় ফাইলের সতর্কতা",
-    "largeFileWarningDesc": "এই ফাইলটির আকার {{size}} , যা টেক্সট হিসেবে খুললে পারফরম্যান্সের সমস্যা সৃষ্টি করতে পারে।",
-    "fileNotFoundAndRemoved": "\"{{name}}\" ফাইলটি খুঁজে পাওয়া যায়নি এবং সাম্প্রতিক/পিন করা ফাইলগুলো থেকে সরিয়ে ফেলা হয়েছে।",
-    "failedToLoadFile": "ফাইল লোড করতে ব্যর্থ: {{error}}",
-    "serverErrorOccurred": "সার্ভার ত্রুটি ঘটেছে। অনুগ্রহ করে পরে আবার চেষ্টা করুন।",
-    "autoSaveFailed": "স্বয়ংক্রিয় সংরক্ষণ ব্যর্থ হয়েছে",
-    "fileAutoSaved": "ফাইল স্বয়ংক্রিয়ভাবে সংরক্ষিত হয়েছে",
-    "moveFileFailed": "{{name}} সরাতে ব্যর্থ",
-    "moveOperationFailed": "স্থানান্তর প্রক্রিয়া ব্যর্থ হয়েছে",
-    "canOnlyCompareFiles": "শুধুমাত্র দুটি ফাইল তুলনা করা যাবে।",
-    "comparingFiles": "ফাইলগুলোর তুলনা: {{file1}} এবং {{file2}}",
-    "dragFailed": "ড্র্যাগ অপারেশন ব্যর্থ হয়েছে",
-    "filePinnedSuccessfully": "ফাইল \"{{name}}\" সফলভাবে পিন করা হয়েছে",
-    "pinFileFailed": "ফাইল পিন করতে ব্যর্থ হয়েছে",
-    "fileUnpinnedSuccessfully": "ফাইল \"{{name}}\" সফলভাবে আনপিন করা হয়েছে",
-    "unpinFileFailed": "ফাইল আনপিন করতে ব্যর্থ হয়েছে",
-    "shortcutAddedSuccessfully": "ফোল্ডার শর্টকাট \"{{name}}\" সফলভাবে যোগ করা হয়েছে",
-    "addShortcutFailed": "শর্টকাট যোগ করতে ব্যর্থ হয়েছে",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} আইটেম সফলভাবে",
-    "operationCompleted": "{{operation}} {{count}} আইটেম",
-    "downloadFileSuccess": "ফাইল {{name}} সফলভাবে ডাউনলোড হয়েছে",
-    "downloadFileFailed": "ডাউনলোড ব্যর্থ হয়েছে",
-    "downloadingFile": "ডাউনলোড হচ্ছে {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "{{name}} এ যান",
-    "diffCompareWith": "{{name}} এর সাথে পার্থক্য তুলনা করুন",
-    "dragOutsideToDownload": "ডাউনলোড করতে উইন্ডোর বাইরে টেনে আনুন ({{count}} ফাইলগুলো)",
-    "newFolderDefault": "নতুন ফোল্ডার",
-    "newFileDefault": "NewFile.txt",
-    "successfullyMovedItems": "{{count}} টি আইটেম সফলভাবে {{target}} টি আইটেমে সরানো হয়েছে",
-    "move": "স্থানান্তর",
-    "searchInFile": "ফাইলে অনুসন্ধান করুন (Ctrl+F)",
-    "showKeyboardShortcuts": "কিবোর্ড শর্টকাট দেখান",
-    "decreaseFontSize": "ফন্টের আকার কমান",
-    "increaseFontSize": "ফন্টের আকার বাড়ান",
-    "startWritingMarkdown": "আপনার মার্কডাউন কন্টেন্ট লেখা শুরু করুন...",
-    "loadingFileComparison": "ফাইল তুলনা লোড হচ্ছে...",
-    "reload": "পুনরায় লোড করুন",
-    "compare": "তুলনা করুন",
-    "sideBySide": "পাশাপাশি",
-    "inline": "ইনলাইন",
-    "fileComparison": "ফাইল তুলনা: {{file1}} বনাম {{file2}}",
-    "fileTooLarge": "ফাইলটি অনেক বড় (> ১০ মেগাবাইট) হওয়ায় নিরাপত্তাজনিত কারণে এটি টেক্সট হিসেবে খোলা যাবে না।",
-    "sshConnectionFailed": "SSH সংযোগ ব্যর্থ হয়েছে। অনুগ্রহ করে {{name}} ({{ip}}:{{port}} ) -এ আপনার সংযোগ পরীক্ষা করুন।",
-    "loadFileFailed": "ফাইল লোড করতে ব্যর্থ: {{error}}",
-    "connecting": "সংযোগ স্থাপন...",
-    "connectedSuccessfully": "সফলভাবে সংযুক্ত হয়েছে",
-    "totpVerificationFailed": "TOTP যাচাইকরণ ব্যর্থ হয়েছে",
-    "browserSignInFailed": "সাইন-ইন ব্যর্থ হয়েছে। অনুগ্রহ করে আবার চেষ্টা করুন।",
-    "authenticationFailed": "প্রমাণীকরণ ব্যর্থ হয়েছে",
-    "incorrectPassphrase": "ভুল পাসফ্রেজ। অনুগ্রহ করে আবার চেষ্টা করুন।",
-    "verificationCodePrompt": "যাচাইকরণ কোড:",
-    "changePermissions": "অনুমতি পরিবর্তন করুন",
-    "currentPermissions": "বর্তমান অনুমতি",
-    "owner": "মালিক",
-    "group": "গ্রুপ",
-    "others": "অন্যান্য",
-    "read": "পড়ুন",
-    "write": "লিখুন",
-    "execute": "কার্যকর করুন",
-    "permissionsChangedSuccessfully": "অনুমতি সফলভাবে পরিবর্তন করা হয়েছে",
-    "failedToChangePermissions": "অনুমতি পরিবর্তন করতে ব্যর্থ হয়েছে",
-    "name": "নাম",
-    "sortByName": "নাম",
-    "sortByDate": "পরিবর্তিত তারিখ",
-    "sortBySize": "আকার",
-    "ascending": "আরোহী",
-    "descending": "অবতরণ",
-    "root": "মূল",
-    "new": "নতুন",
-    "sortBy": "অনুসারে সাজান",
-    "items": "আইটেম",
-    "selected": "নির্বাচিত",
-    "editor": "সম্পাদক",
-    "octal": "অক্টাল",
-    "storage": "স্টোরেজ",
-    "disk": "ডিস্ক",
-    "used": "ব্যবহৃত",
-    "of": "এর",
-    "toggleSidebar": "সাইডবার টগল করুন",
-    "compactLayout": "সংক্ষিপ্ত বিন্যাস ব্যবহার করুন",
-    "comfortableLayout": "আরামদায়ক বিন্যাস ব্যবহার করুন",
-    "cannotLoadPdf": "পিডিএফ লোড করা যাচ্ছে না",
-    "pdfLoadError": "এই পিডিএফ ফাইলটি লোড করতে ত্রুটি হয়েছে।",
-    "loadingPdf": "পিডিএফ ভিউয়ার লোড হচ্ছে...",
-    "loadingPage": "পৃষ্ঠা লোড হচ্ছে...",
-    "cancel": "বাতিল করুন",
-    "copiedItems_one": "{{count}} আইটেমটি অনুলিপি করা হয়েছে",
-    "copiedItems_other": "{{count}} টি আইটেম কপি করা হয়েছে",
-    "deleteCopiedFileFailed": "{{name}}এর অনুলিপিটি মুছে ফেলা যায়নি: {{error}}",
-    "dragMovedItems_one": "{{count}} আইটেমটিকে {{target}} এ সরানো হয়েছে",
-    "dragMovedItems_other": "{{count}} টি আইটেম {{target}} টি আইটেমে সরানো হয়েছে",
-    "moveBackFileFailed": "{{name}} কে পিছনে সরানো সম্ভব নয়: {{error}}",
-    "terminal": "টার্মিনাল: {{host}} ({{path}})",
-    "dragToDesktop": "{{name}} কে ডেস্কটপে টেনে নিয়ে যাওয়া",
-    "dragFilesToDesktop": "{{count}} ফাইলগুলো ডেস্কটপে টেনে আনা",
-    "folderDragUnsupported": "ডেস্কটপে ফোল্ডার টেনে নিয়ে যাওয়ার সুবিধাটি এখনও সমর্থিত নয়।",
-    "saveToDesktopFailed": "সংরক্ষণ ব্যর্থ: {{error}}",
-    "dragFailedDetail": "টেনে আনা ব্যর্থ: {{error}}",
-    "videoUnsupported": "আপনার ব্রাউজার এই ভিডিও ফরম্যাটটি চালাতে পারছে না।",
-    "downloadToPlay": "অন্যত্র চালানোর জন্য ডাউনলোড করুন",
-    "cannotPreviewType": "এই ফাইল প্রকারের প্রিভিউ দেখা সম্ভব নয়",
-    "cannotPreviewTypeHint": "এই ফাইল টাইপের কোনো প্রিভিউ নেই। অন্য কোনো অ্যাপে খোলার জন্য এটি ডাউনলোড করুন।",
-    "loadingFile": "ফাইল লোড হচ্ছে...",
-    "loadingImage": "ছবি লোড হচ্ছে...",
-    "loadingEditor": "এডিটর লোড হচ্ছে...",
-    "loadingPreview": "প্রিভিউ লোড হচ্ছে...",
-    "loadingAudio": "অডিও প্লেয়ার লোড হচ্ছে...",
-    "emptyPreview": "এখনো প্রিভিউ করার মতো কিছু নেই...",
-    "revert": "প্রত্যাবর্তন করুন",
-    "openAsText": "টেক্সট হিসেবে খুলুন",
-    "confirmOpenAsText": "আপনি কি এই ফাইলটি টেক্সট হিসেবে খোলা চালিয়ে যেতে চান? এতে আপনার ব্রাউজারের গতি কমে যেতে পারে।"
-  },
-  "sftpTransfer": {
-    "title": "এসএফটিপি",
-    "description": "দুটি SSH হোস্টের মধ্যে ফাইল স্থানান্তর করুন।",
-    "sourceServer": "উৎস সার্ভার",
-    "destinationServer": "গন্তব্য সার্ভার",
-    "selectHost": "হোস্ট নির্বাচন করুন",
-    "noHostSelected": "কোন হোস্ট নির্বাচন করা হয়নি",
-    "move": "স্থানান্তর",
-    "copy": "অনুলিপি",
-    "upload": "আপলোড",
-    "itemsSelected": "{{count}} আইটেম নির্বাচিত",
-    "itemsSelected_other": "{{count}} নির্বাচিত আইটেম",
-    "ready": "প্রস্তুত",
-    "loadingHosts": "হোস্ট লোড হচ্ছে...",
-    "name": "নাম",
-    "modified": "পরিবর্তিত",
-    "size": "আকার",
-    "noFiles": "কোন ফাইল নেই",
-    "open": "খোলা",
-    "up": "উপরে",
-    "refresh": "রিফ্রেশ",
-    "copyToTarget": "লক্ষ্য ডিরেক্টরিতে অনুলিপি করুন",
-    "rename": "নাম পরিবর্তন",
-    "delete": "মুছে ফেলুন",
-    "editPermissions": "সম্পাদনার অনুমতি",
-    "createNewFolder": "নতুন ফোল্ডার তৈরি করুন",
-    "deleteSelectedItems": "নির্বাচিত আইটেমগুলি মুছুন",
-    "deleteConfirm": "{{count}} নির্বাচিত আইটেমটি মুছবেন?",
-    "deleteConfirm_other": "{{count}} নির্বাচিত আইটেমগুলি মুছবেন?",
-    "cancel": "বাতিল করুন",
-    "save": "সংরক্ষণ করুন",
-    "folderCreated": "ফোল্ডার তৈরি করা হয়েছে",
-    "itemRenamed": "আইটেমের নাম পরিবর্তন করা হয়েছে",
-    "actionFailed": "পদক্ষেপ ব্যর্থ হয়েছে",
-    "itemsDeleted": "{{count}} আইটেমটি মুছে ফেলা হয়েছে",
-    "itemsDeleted_other": "{{count}} আইটেম মুছে ফেলা হয়েছে",
-    "deleteFailed": "মুছে ফেলা ব্যর্থ হয়েছে",
-    "permissionsUpdated": "অনুমতি আপডেট করা হয়েছে",
-    "noRemoteSessionConnected": "কোন রিমোট সেশন সংযুক্ত নেই",
-    "failedToListFiles": "ফাইলগুলি তালিকাভুক্ত করতে ব্যর্থ হয়েছে",
-    "failedToRefresh": "রিফ্রেশ করতে ব্যর্থ হয়েছে",
-    "destinationInsideSource": "গন্তব্য নির্বাচিত উৎস পথের মধ্যে থাকতে পারবে না।",
-    "sameHostNoOp": "উৎস এবং গন্তব্য একই ফোল্ডার।"
-  },
-  "hosts": {
-    "fileManager": "ফাইল ম্যানেজার",
-    "fileManagerUrlCopied": "ফাইল ম্যানেজার ইউআরএল কপি করা হয়েছে",
-    "copyFileManagerUrlAction": "ফাইল ম্যানেজার ইউআরএল কপি করুন",
-    "docsLink": "নথি দেখুন",
-    "hostNotFound": "হোস্ট খুঁজে পাওয়া যায়নি",
-    "loadingHost": "হোস্ট লোড হচ্ছে..."
-  },
-  "onboarding": {
-    "feature_files": "ফাইল ম্যানেজার",
-    "feature_files_desc": "অ্যাপ থেকে বের না হয়েই SFTP-এর মাধ্যমে ফাইল ব্রাউজ, আপলোড, ডাউনলোড এবং সম্পাদনা করুন।"
-  },
-  "terminal": {
-    "runTitle": "দৌড়ানো {{command}} - {{host}}",
-    "terminalTitle": "টার্মিনাল - {{host}}",
-    "terminalWithPath": "টার্মিনাল - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "গন্তব্য ফোল্ডারগুলি ব্রাউজ করুন",
-    "browsePathError": "গন্তব্য হোস্টে এই পাথটি খোলা সম্ভব হয়নি।",
-    "browsePathWillBeCreated": "এই ফোল্ডারটি এখনও তৈরি হয়নি। স্থানান্তর শুরু হলে এটি তৈরি হয়ে যাবে।",
-    "cancel": "বাতিল করুন",
-    "cleanupDestFiles": "পরিষ্কার করার গন্তব্য",
-    "cleanupDestFilesError": "পরিষ্কার করা ব্যর্থ হয়েছে",
-    "cleanupDestFilesNothing": "গন্তব্যে পরিষ্কার করার কিছু নেই।",
-    "cleanupDestFilesPartial": "কিছু আংশিক ফাইল সরানো যায়নি",
-    "cleanupDestFilesSuccess": "গন্তব্য থেকে আংশিক ফাইল সরানো হয়েছে",
-    "confirmCopy": "অনুলিপি",
-    "confirmMove": "স্থানান্তর",
-    "copyFolderToHost": "ফোল্ডারটি হোস্টে কপি করুন…",
-    "copyItemsToHost": "{{count}} টি আইটেম হোস্টে কপি করুন…",
-    "copyToHost": "হোস্টে কপি করুন…",
-    "destinationPath": "গন্তব্য পথ",
-    "destMustBeDirectory": "একাধিক আইটেম স্থানান্তরের জন্য গন্তব্য অবশ্যই একটি ডিরেক্টরি হতে হবে।",
-    "goUp": "উপরে যান",
-    "hostAuthRequired": "প্রমাণীকরণ আবশ্যক। প্রথমে এই হোস্টে ফাইল ম্যানেজার খুলুন।",
-    "hostConnecting": "… সংযোগ করা হচ্ছে",
-    "hostConnectionFailed": "সংযোগ ব্যর্থ হয়েছে",
-    "hostDisconnected": "সংযুক্ত নয়",
-    "hostReady": "প্রস্তুত",
-    "itemsSummary": "{{count}} আইটেম",
-    "jumpHostLimitation": "উভয় হোস্টকেই টারমিক্স সার্ভার থেকে পৌঁছানো সম্ভব হতে হবে। সরাসরি হোস্ট-টু-হোস্ট রাউটিং সমর্থিত নয়।",
-    "methodAuto": "অটো",
-    "methodAutoHint": "ফাইলের সংখ্যা, আকার এবং সংকোচনযোগ্যতার উপর ভিত্তি করে tar অথবা ফাইল-ভিত্তিক SFTP নির্বাচন করে। একক ফাইলের ক্ষেত্রে সর্বদা স্ট্রিমিং SFTP ব্যবহৃত হয়।",
-    "methodItemSftp": "প্রতি-ফাইল এসএফটিপি",
-    "methodItemSftpHint": "SFTP-এর মাধ্যমে প্রতিটি ফাইল আলাদাভাবে স্থানান্তর করুন। উইন্ডোজ সহ সকল হোস্টে কাজ করে।",
-    "methodItemSftpLimitation": "প্রতিটি ফাইল একই SFTP স্ট্রিম ব্যবহার করে একটির পর একটি একক-ফাইল কপি হিসেবে তৈরি হয়। সমস্ত ফাইলের অগ্রগতি একত্রিত করা হয়, তাই বড় ফাইলের ক্ষেত্রে বারটি ধীরে চলে।",
-    "methodLabel": "স্থানান্তর পদ্ধতি",
-    "methodPreviewError": "স্থানান্তর পদ্ধতির প্রিভিউ দেখা সম্ভব হয়নি। আপনি চালু করার সময় সার্ভার নিজেই একটি পদ্ধতি বেছে নেবে।",
-    "methodPreviewLoading": "স্থানান্তর পদ্ধতি গণনা করা হচ্ছে…",
-    "methodPreviewScanSummary": "{{fileCount}} টি ফাইল, {{totalSize}} টি মোট (উৎস হোস্টে স্ক্যান করা হয়েছে)।",
-    "methodPreviewWillUseItemSftp": "ব্যবহার করা হবে: প্রতি-ফাইল এসএফটিপি",
-    "methodPreviewWillUseTar": "ব্যবহৃত হবে: টার আর্কাইভ",
-    "methodReason": {
-      "user_item_sftp": "আপনি ফাইল-ভিত্তিক এসএফটিপি বেছে নিয়েছেন।",
-      "user_tar": "আপনি tar আর্কাইভটি বেছে নিয়েছেন।",
-      "tar_unavailable": "এক বা উভয় হোস্টে Tar উপলব্ধ না থাকায়, এর পরিবর্তে ফাইল-ভিত্তিক SFTP ব্যবহার করা হবে।",
-      "windows_host": "যেহেতু একটি উইন্ডোজ হোস্ট জড়িত, তাই tar ব্যবহার করা হয় না।",
-      "auto_multi_large": "স্বয়ংক্রিয়: সংকোচনযোগ্য ডেটা সহ একটি বড় ফাইল ({{largestSize}}) সহ একাধিক ফাইল। Tar সেগুলোকে একটি একক স্থানান্তরে একত্রিত করে।",
-      "auto_single_large_in_archive": "স্বয়ংক্রিয়: এই সেটে একটি বড় ফাইল ({{largestSize}}) আছে, তাই ফাইল-ভিত্তিক SFTP।",
-      "auto_many_incompressible": "অটো: বেশিরভাগ ডেটা অসংকোচনযোগ্য, তাই প্রতি-ফাইল এসএফটিপি।",
-      "auto_many_files": "স্বয়ংক্রিয়: একাধিক ফাইলের ক্ষেত্রে ({{fileCount}}), tar পদ্ধতি ব্যবহার করলে প্রতি ফাইলের অতিরিক্ত খরচ কমে যায়।",
-      "auto_default": "স্বয়ংক্রিয়: এই সেটের জন্য প্রতি-ফাইল এসএফটিপি।"
-    },
-    "methodTar": "টার আর্কাইভ",
-    "methodTarHint": "উৎসস্থলে কম্প্রেস করুন, একটি আর্কাইভ স্থানান্তর করুন, এবং গন্তব্যে এক্সট্র্যাক্ট করুন। উভয় ইউনিক্স হোস্টে tar প্রয়োজন।",
-    "metricsCompress": "উৎস থেকে সংকুচিত করুন: {{duration}}",
-    "metricsExtract": "গন্তব্যে নিষ্কাশন: {{duration}}",
-    "metricsPrepare": "গন্তব্য প্রস্তুত করুন: {{duration}}",
-    "metricsRouteBenchmark": "রুট প্রোব: সরাসরি {{direct}}, রিলে {{relay}}",
-    "metricsSourceDelete": "উৎস থেকে সরান: {{duration}}",
-    "metricsTotal": "মোট: {{duration}}",
-    "metricsTransfer": "প্রান্ত থেকে প্রান্ত: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 দ্বারা যাচাইকৃত: {{duration}}",
-    "moveFolderToHost": "ফোল্ডারটি হোস্টে সরান…",
-    "moveItemsToHost": "{{count}} টি আইটেম… টি হোস্টে সরান",
-    "moveToHost": "হোস্টে যান…",
-    "noHostsConnected": "অন্য কোনো ফাইল-ম্যানেজার হোস্ট উপলব্ধ নেই।",
-    "noHostsConnectedHint": "হোস্ট ম্যানেজারে ফাইল ম্যানেজার সক্রিয় করা আছে এমন আরেকটি SSH হোস্ট যোগ করুন।",
-    "parallelSegmentsHint": "বড় ফাইলগুলোকে ২৫৬ মেগাবাইটের খণ্ডে ভাগ করা হয়। মোট থ্রুপুট বাড়ানোর জন্য একাধিক লেন আলাদা সংযোগ ব্যবহার করে (যেমন কয়েকটি ট্রান্সফার শুরু করা)।",
-    "parallelSegmentsLabel": "সমান্তরাল স্থানান্তর লেন",
-    "parallelSegmentsOption": "{{count}} লেন",
-    "progressBenchmarking": "দ্রুততম স্থানান্তর পথ নির্বাচন করা হচ্ছে…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "বাতিল করুন",
-    "progressCancelling": "বাতিল করা হচ্ছে…",
-    "progressCompressing": "উৎস হোস্টে সংকুচিত করা হচ্ছে…",
-    "progressExtracting": "গন্তব্য… থেকে নিষ্কাশন করা হচ্ছে",
-    "progressItems": "{{current}} / {{total}} ফাইল",
-    "progressReconnecting": "পুনরায় সংযোগ স্থাপন…",
-    "progressStalled": "স্থবির",
-    "progressTotalSpeed": "{{speed}} মোট ({{lanes}} লেন)",
-    "progressTransferring": "ডেটা স্থানান্তর করা হচ্ছে…",
-    "progressTransferringItems": "ফাইল স্থানান্তর করা হচ্ছে ({{current}} {{total}})…",
-    "progressVerifying": "ফাইলের অখণ্ডতা যাচাই করা হচ্ছে…",
-    "recentDestinations": "সাম্প্রতিক গন্তব্যস্থল",
-    "resumedHint": "অন্য একটি উইন্ডোতে শুরু হওয়া একটি সক্রিয় ট্রান্সফারের সাথে পুনরায় সংযুক্ত হওয়া গেছে।",
-    "retryTransfer": "পুনরায় চেষ্টা করুন",
-    "retryTransferError": "পুনরায় চেষ্টা ব্যর্থ হয়েছে",
-    "selectDestinationHost": "গন্তব্য হোস্ট নির্বাচন করুন",
-    "transferCancelled": "স্থানান্তর বাতিল করা হয়েছে",
-    "transferCancelledCopyHint": "গন্তব্যে আংশিক ফাইল থেকে যেতে পারে।",
-    "transferCancelledMoveHint": "গন্তব্যে আংশিক ফাইল থেকে যেতে পারে। মূল ফাইলগুলো সরানো হয়নি।",
-    "transferError": "স্থানান্তর ব্যর্থ হয়েছে",
-    "transferFailedRetryHint": "গন্তব্যে আংশিক ডেটা সংরক্ষিত হয়েছে। সংযোগ ফিরে এলে পুনরায় চেষ্টা শুরু হবে।",
-    "transferPartialHint": "স্থানান্তর করা যায়নি: {{paths}}",
-    "transferSuccess": "স্থানান্তর সম্পন্ন হয়েছে",
-    "metricsHopSourceRead": "উৎস → সার্ভার: {{throughput}}",
-    "metricsHopDestSftpWrite": "সার্ভার → গন্তব্য (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "সার্ভার → গন্তব্য (স্থানীয়): {{throughput}}"
-  },
-  "plugin": {
-    "name": "ফাইল ম্যানেজার"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/ca_ES.json b/plugins/file-manager/locales/translated/ca_ES.json
deleted file mode 100644
index fae70a1c2..000000000
--- a/plugins/file-manager/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Fitxers",
-    "sftp": "SFTP",
-    "openFileManager": "Obre el gestor de fitxers"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilitza el gestor de fitxers",
-      "description": "Navega, edita i transfereix fitxers a través de SFTP."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Habilita el gestor de fitxers",
-        "description": "Navega i edita fitxers en aquest amfitrió mitjançant SFTP."
-      },
-      "defaultPath": {
-        "label": "Camí predeterminat"
-      },
-      "scpLegacy": {
-        "label": "Mode Llegat de SCP"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Transferències simultànies de fitxers",
-        "description": "Quants fitxers puja o descarrega el gestor local/remot en paral·lel alhora. Redueix aquest valor si el teu servidor limita els canals SFTP."
-      },
-      "confirmBeforeTrash": {
-        "label": "Confirma abans de moure els fitxers a la paperera",
-        "description": "Pregunta abans de moure fitxers remots a la paperera. L'eliminació permanent encara requereix confirmació."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Gestor de fitxers"
-  },
-  "fileManager": {
-    "noHostSelected": "No s'ha seleccionat cap amfitrió",
-    "initializingEditor": "Inicialitzant l'editor...",
-    "file": "Fitxer",
-    "folder": "Carpeta",
-    "uploadFile": "Puja el fitxer",
-    "downloadFile": "Descarrega",
-    "extractArchive": "Extreure l'arxiu",
-    "extractingArchive": "Extraient {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} s'ha extret correctament",
-    "extractFailed": "L'extracció ha fallat",
-    "compressFile": "Comprimir fitxer",
-    "compressFiles": "Comprimir fitxers",
-    "compressFilesDesc": "Comprimir elements {{count}} en un arxiu",
-    "archiveName": "Nom de l'arxiu",
-    "enterArchiveName": "Introduïu el nom de l'arxiu...",
-    "compressionFormat": "Format de compressió",
-    "selectedFiles": "Fitxers seleccionats",
-    "andMoreFiles": "i {{count}} més...",
-    "compress": "Comprimir",
-    "compressingFiles": "Comprimint elements {{count}} en {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} creat correctament",
-    "compressFailed": "La compressió ha fallat",
-    "edit": "Edita",
-    "preview": "Vista prèvia",
-    "previous": "Anterior",
-    "next": "Següent",
-    "pageXOfY": "Pàgina {{current}} de {{total}}",
-    "zoomOut": "Allunyar",
-    "zoomIn": "Ampliar zoom",
-    "newFile": "Fitxer nou",
-    "newFolder": "Nova carpeta",
-    "rename": "Canvia el nom",
-    "uploading": "S'està carregant...",
-    "uploadingFile": "S'està carregant {{name}}...",
-    "uploadingChunk": "Pujant {{name}}: {{percent}}% (part {{chunk}} de {{total}})",
-    "fileName": "Nom del fitxer",
-    "folderName": "Nom de la carpeta",
-    "fileUploadedSuccessfully": "El fitxer \"{{name}}\" s'ha carregat correctament",
-    "failedToUploadFile": "No s'ha pogut carregar el fitxer",
-    "uploadingFolderFiles": "S'estan pujant {{count}} fitxer(s)...",
-    "uploadedFolderFiles": "S'han carregat correctament {{count}} fitxers.",
-    "uploadedFolderPartial": "No s'han pogut pujar els fitxers {{uploaded}} i {{failed}}.",
-    "fileDownloadedSuccessfully": "Fitxer \"{{name}}\" descarregat correctament",
-    "failedToDownloadFile": "No s'ha pogut descarregar el fitxer",
-    "fileCreatedSuccessfully": "Fitxer \"{{name}}\" creat correctament",
-    "folderCreatedSuccessfully": "La carpeta \"{{name}}\" s'ha creat correctament",
-    "failedToCreateItem": "No s'ha pogut crear l'element",
-    "operationFailed": "L'operació {{operation}} ha fallat per a {{name}}: {{error}}",
-    "failedToResolveSymlink": "No s'ha pogut resoldre l'enllaç simbòlic",
-    "itemsDeletedSuccessfully": "{{count}} elements suprimits correctament",
-    "failedToDeleteItems": "No s'han pogut suprimir els elements",
-    "sudoPasswordRequired": "Contrasenya d'administrador requerida",
-    "enterSudoPassword": "Introduïu la contrasenya sudo per continuar amb aquesta operació",
-    "sudoPassword": "Contrasenya de Sudo",
-    "sudoOperationFailed": "L'operació Sudo ha fallat.",
-    "sudoAuthFailed": "L'autenticació del Sudo ha fallat.",
-    "dragFilesToUpload": "Deixa anar els fitxers aquí per pujar-los",
-    "dropToUploadHere": "Deixa anar per pujar aquí",
-    "dropToDownloadHere": "Deixa anar per descarregar aquí",
-    "localFiles": "Local",
-    "showLocalFiles": "Mostra els fitxers locals (vista dividida)",
-    "hideLocalFiles": "Amaga els fitxers locals",
-    "localHome": "Carpeta d'inici",
-    "localPathPlaceholder": "Ruta de la carpeta local",
-    "localShowHidden": "Mostra els fitxers ocults",
-    "localHideHidden": "Amaga els fitxers ocults",
-    "localRevealInFileManager": "Mostra al gestor de fitxers del sistema",
-    "localCannotOpenFolder": "No es pot obrir la carpeta",
-    "localItemCount": "{{count}} elements",
-    "localSelectedCount": "{{count}} seleccionat",
-    "back": "Enrere",
-    "forward": "Endavant",
-    "up": "Amunt",
-    "kind": "Amable",
-    "localUploadingProgress": "S'està pujant {{current}} de {{total}}",
-    "localDownloadingProgress": "Descarregant {{current}} de {{total}}",
-    "localTransferInFlight": "{{count}} alhora",
-    "localPreparingDownload": "Preparant la descàrrega...",
-    "localTransferCancelled": "Transferència cancel·lada",
-    "localNothingToTransfer": "Res a transferir",
-    "localUploadComplete": "Fitxer(s) {{count}} penjat(s)",
-    "localUploadFailed": "La pujada ha fallat",
-    "localUploadPartial": "No s'han pogut pujar els fitxers {{done}} i {{failed}}.",
-    "localDownloadComplete": "Fitxer(s) descarregat(s) {{count}}",
-    "localDownloadFailed": "La descàrrega ha fallat",
-    "localDownloadPartial": "No s'ha pogut descarregar el(s) fitxer(s) {{done}} , {{failed}}.",
-    "localReplaceExistingPrompt": "Ja existeixen elements {{count}} en aquesta carpeta. Voleu substituir-los?",
-    "localReplace": "Substitueix",
-    "localSkipExisting": "Omet",
-    "localSkippedExisting": "S'han omès {{count}} elements existents",
-    "localUnsafeNamesSkipped": "S'han omès {{count}} elements els noms dels quals no es poden utilitzar en aquest ordinador",
-    "localOpen": "Obre",
-    "localOpenFolder": "Obre la carpeta",
-    "localUploadToRemote": "Puja al servidor",
-    "localUploadToRemoteMany": "Puja {{count}} elements al servidor",
-    "localMoveToTrash": "Mou a la paperera",
-    "localMoveToTrashMany": "Mou {{count}} elements a la paperera",
-    "localTrashConfirmSingle": "Voleu moure \"{{name}}\" a la paperera?",
-    "localTrashConfirmFolder": "Voleu moure la carpeta \"{{name}}\" i tot el seu contingut a la paperera?",
-    "localTrashConfirmMany": "Voleu moure {{count}} elements a la paperera?",
-    "localTrashed": "S'han mogut {{count}} elements a la paperera.",
-    "localTrashFailed": "No s'ha pogut moure a la paperera",
-    "localRenameFailed": "No s'ha pogut canviar el nom",
-    "localCreateFailed": "No s'ha pogut crear l'element",
-    "goToParentFolder": "Anar a la carpeta principal",
-    "resizeSidebar": "Arrossegueu per canviar la mida de la barra lateral (feu doble clic per restablir-la)",
-    "resizeLocalPane": "Arrossegueu per canviar la mida del panell local (feu doble clic per restablir-lo)",
-    "columns": "Columnes",
-    "columnsHint": "Feu clic amb el botó dret per triar columnes",
-    "emptyFolder": "Aquesta carpeta està buida",
-    "searchFiles": "Cerca fitxers...",
-    "upload": "Pujada",
-    "selectHostToStart": "Seleccioneu un amfitrió per iniciar la gestió de fitxers",
-    "sshRequiredForFileManager": "El gestor de fitxers requereix SSH. Aquest amfitrió no té SSH habilitat.",
-    "failedToConnect": "No s'ha pogut connectar a SSH",
-    "failedToLoadDirectory": "No s'ha pogut carregar el directori",
-    "noSSHConnection": "No hi ha connexió SSH disponible",
-    "copy": "Còpia",
-    "cut": "Tallar",
-    "paste": "Enganxa",
-    "copyPath": "Copia la ruta",
-    "copyPaths": "Copiar camins",
-    "delete": "Suprimeix",
-    "properties": "Propietats",
-    "refresh": "Actualitza",
-    "downloadFiles": "Baixeu els fitxers {{count}} al navegador",
-    "copyFiles": "Copia elements {{count}}",
-    "cutFiles": "Retalla elements {{count}}",
-    "deleteFiles": "Suprimeix elements {{count}}",
-    "filesCopiedToClipboard": "{{count}} elements copiats al porta-retalls",
-    "filesCutToClipboard": "{{count}} elements retallats al porta-retalls",
-    "pathCopiedToClipboard": "La ruta s'ha copiat al porta-retalls",
-    "pathsCopiedToClipboard": "{{count}} camins copiats al porta-retalls",
-    "failedToCopyPath": "No s'ha pogut copiar la ruta al porta-retalls",
-    "copyFolderLink": "Copia l'enllaç a la carpeta",
-    "copyCurrentFolderLink": "Copia l'enllaç a la carpeta actual",
-    "folderLinkCopied": "Enllaç de carpeta copiat al porta-retalls",
-    "failedToCopyFolderLink": "No s'ha pogut copiar l'enllaç de la carpeta",
-    "movedItems": "Elements moguts {{count}}",
-    "failedToDeleteItem": "No s'ha pogut suprimir l'element",
-    "itemRenamedSuccessfully": "{{type}} s'ha canviat el nom correctament",
-    "failedToRenameItem": "No s'ha pogut canviar el nom de l'element",
-    "download": "Descarrega",
-    "openExternalEditor": "Obre externament",
-    "chooseExternalEditor": "Trieu un editor extern",
-    "externalEditorSelected": "Editor extern seleccionat",
-    "externalEditorDesktopOnly": "L'editor extern només està disponible a l'aplicació d'escriptori",
-    "externalEditorOpened": "Obert en un editor extern. Si deseu-ho, els canvis es tornaran a carregar al servidor.",
-    "failedToOpenExternalEditor": "No s'ha pogut obrir l'editor extern",
-    "failedToSelectExternalEditor": "No s'ha pogut seleccionar l'editor extern",
-    "permissions": "Permisos",
-    "size": "Mida",
-    "modified": "Modificat",
-    "path": "Camí",
-    "confirmDelete": "Esteu segur que voleu suprimir {{name}}?",
-    "permissionDenied": "Permís denegat",
-    "serverError": "Error del servidor",
-    "fileSavedSuccessfully": "Fitxer desat correctament",
-    "failedToSaveFile": "No s'ha pogut desar el fitxer",
-    "confirmDeleteSingleItem": "Esteu segur que voleu suprimir permanentment \"{{name}}\"?",
-    "confirmDeleteMultipleItems": "Esteu segur que voleu suprimir permanentment els elements {{count}}?",
-    "confirmDeleteMultipleItemsWithFolders": "Esteu segur que voleu suprimir permanentment els elements {{count}} ? Això inclou les carpetes i el seu contingut.",
-    "confirmDeleteFolder": "Esteu segur que voleu suprimir permanentment la carpeta \"{{name}}\" i tot el seu contingut?",
-    "permanentDeleteWarning": "Aquesta acció no es pot desfer. Els elements s'eliminaran permanentment del servidor.",
-    "moveToTrashWarning": "Els elements es mouran a la paperera de Termix i es podran restaurar abans que expiri el període de retenció.",
-    "itemsMovedToTrash": "{{count}} element(s) mogut(s) a la paperera",
-    "trash": "Escombraries",
-    "trashDescription": "Els elements suprimits es conserven durant {{days}} dies en aquest amfitrió.",
-    "trashLoadFailed": "No s'ha pogut carregar la paperera",
-    "trashEmpty": "La paperera és buida",
-    "trashRestore": "Restaurar",
-    "trashRestored": "Restaurat {{name}}",
-    "trashRestoreFailed": "No s'ha pogut restaurar l'element. És possible que la ruta original ja existeixi.",
-    "trashDeletePermanently": "Suprimeix permanentment",
-    "trashDeleteConfirm": "Voleu suprimir permanentment {{name}}? Això no es pot desfer.",
-    "trashPermanentlyDeleted": "Suprimit permanentment {{name}}",
-    "trashDeleteFailed": "No s'ha pogut suprimir l'element permanentment",
-    "trashEmptyAction": "Buida la paperera",
-    "trashEmptyConfirm": "Voleu suprimir permanentment tots els elements de la paperera? Això no es pot desfer.",
-    "trashEmptied": "Paperera buida",
-    "trashRetention": "Neteja automàtica després de (dies)",
-    "trashRetentionSaved": "Retenció de brossa actualitzada",
-    "trashRetentionFailed": "No s'ha pogut actualitzar la retenció de la paperera",
-    "trashUnavailableConfirm": "Aquest element no es pot moure a la paperera, normalment perquè es troba en un altre sistema de fitxers o requereix permisos elevats. Voleu suprimir-lo permanentment?",
-    "recent": "Recent",
-    "pinned": "Fixat",
-    "folderShortcuts": "Dreceres de carpeta",
-    "failedToReconnectSSH": "No s'ha pogut reconnectar la sessió SSH",
-    "openTerminalHere": "Obre el terminal aquí",
-    "run": "Corre",
-    "openTerminalInFolder": "Obre el terminal en aquesta carpeta",
-    "openTerminalInFileLocation": "Obre el terminal a la ubicació del fitxer",
-    "runningFile": "Córrer - {{file}}",
-    "onlyRunExecutableFiles": "Només pot executar fitxers executables",
-    "directories": "Directoris",
-    "removedFromRecentFiles": "S'ha eliminat \"{{name}}\" dels fitxers recents",
-    "removeFailed": "No s'ha pogut eliminar l'opció.",
-    "unpinnedSuccessfully": "S'ha desfixat \"{{name}}\" correctament",
-    "unpinFailed": "No s'ha pogut desancorar la fixació.",
-    "removedShortcut": "S'ha eliminat la drecera \"{{name}}\"",
-    "removeShortcutFailed": "No s'ha pogut eliminar la drecera.",
-    "clearedAllRecentFiles": "S'han esborrat tots els fitxers recents",
-    "clearFailed": "Error en esborrar",
-    "removeFromRecentFiles": "Elimina dels fitxers recents",
-    "clearAllRecentFiles": "Esborra tots els fitxers recents",
-    "unpinFile": "Desfixar fitxer",
-    "removeShortcut": "Elimina la drecera",
-    "pinFile": "Fitxer fixat",
-    "addToShortcuts": "Afegeix a les dreceres",
-    "pasteFailed": "No s'ha pogut enganxar",
-    "noUndoableActions": "Sense accions desfaibles",
-    "undoCopySuccess": "Operació de còpia desfeta: S'han suprimit {{count}} fitxers copiats",
-    "undoCopyFailedDelete": "Error en desfer: no s'han pogut suprimir els fitxers copiats.",
-    "undoCopyFailedNoInfo": "Error en desfer: no s'ha trobat la informació del fitxer copiat",
-    "undoMoveSuccess": "Operació de moviment desfeta: S'han tornat a moure els fitxers {{count}} a la ubicació original.",
-    "undoMoveFailedMove": "Desfer ha fallat: no s'han pogut moure cap fitxer enrere",
-    "undoMoveFailedNoInfo": "Desfer ha fallat: no s'ha pogut trobar la informació del fitxer mogut",
-    "undoDeleteNotSupported": "L'operació de supressió no es pot desfer: els fitxers s'han suprimit permanentment del servidor.",
-    "undoTypeNotSupported": "Tipus d'operació de desfer no compatible",
-    "undoOperationFailed": "L'operació de desfer ha fallat",
-    "unknownError": "Error desconegut",
-    "confirm": "Confirma",
-    "find": "Troba...",
-    "replace": "Substitueix",
-    "downloadInstead": "Descarrega en comptes d'això",
-    "keyboardShortcuts": "Dreceres de teclat",
-    "searchAndReplace": "Cerca i substitueix",
-    "editing": "Edició",
-    "search": "Cerca",
-    "findNext": "Cerca el següent",
-    "findPrevious": "Cerca anterior",
-    "save": "Desa",
-    "selectAll": "Selecciona-ho tot",
-    "undo": "Desfer",
-    "redo": "Refer",
-    "moveLineUp": "Mou la línia cap amunt",
-    "moveLineDown": "Mou la línia cap avall",
-    "toggleComment": "Activa/desactiva el comentari",
-    "autoComplete": "Completar automàticament",
-    "imageLoadError": "No s'ha pogut carregar la imatge",
-    "startTyping": "Comença a escriure...",
-    "unknownSize": "Mida desconeguda",
-    "fileIsEmpty": "El fitxer està buit",
-    "largeFileWarning": "Avís de fitxer gran",
-    "largeFileWarningDesc": "Aquest fitxer té una mida de {{size}} , cosa que pot causar problemes de rendiment quan s'obre com a text.",
-    "fileNotFoundAndRemoved": "No s'ha trobat el fitxer \"{{name}}\" i s'ha eliminat dels fitxers recents/fixats.",
-    "failedToLoadFile": "No s'ha pogut carregar el fitxer: {{error}}",
-    "serverErrorOccurred": "S'ha produït un error del servidor. Torna-ho a provar més tard.",
-    "autoSaveFailed": "Ha fallat el desament automàtic",
-    "fileAutoSaved": "Fitxer desat automàticament",
-    "moveFileFailed": "No s'ha pogut moure {{name}}",
-    "moveOperationFailed": "L'operació de moviment ha fallat",
-    "canOnlyCompareFiles": "Només es poden comparar dos fitxers",
-    "comparingFiles": "Comparació de fitxers: {{file1}} i {{file2}}",
-    "dragFailed": "L'operació d'arrossegament ha fallat",
-    "filePinnedSuccessfully": "Fitxer \"{{name}}\" fixat correctament",
-    "pinFileFailed": "No s'ha pogut fixar el fitxer",
-    "fileUnpinnedSuccessfully": "El fitxer \"{{name}}\" s'ha desanclat correctament",
-    "unpinFileFailed": "No s'ha pogut desancorar el fitxer",
-    "shortcutAddedSuccessfully": "Drecera de carpeta \"{{name}}\" afegida correctament",
-    "addShortcutFailed": "No s'ha pogut afegir la drecera",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} elements correctament",
-    "operationCompleted": "{{operation}} {{count}} elements",
-    "downloadFileSuccess": "Fitxer {{name}} descarregat correctament",
-    "downloadFileFailed": "La descàrrega ha fallat",
-    "downloadingFile": "Descarregant {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Mou a {{name}}",
-    "diffCompareWith": "Comparació de diferències amb {{name}}",
-    "dragOutsideToDownload": "Arrossega fora de la finestra per descarregar (fitxers{{count}})",
-    "newFolderDefault": "NovaCarpeta",
-    "newFileDefault": "NouFitxer.txt",
-    "successfullyMovedItems": "S'han mogut correctament {{count}} elements a {{target}}",
-    "move": "Moure",
-    "searchInFile": "Cerca en un fitxer (Ctrl+F)",
-    "showKeyboardShortcuts": "Mostra les dreceres de teclat",
-    "decreaseFontSize": "Reduir la mida de la lletra",
-    "increaseFontSize": "Augmenta la mida de la lletra",
-    "startWritingMarkdown": "Comença a escriure el teu contingut de rebaixes...",
-    "loadingFileComparison": "S'està carregant la comparació de fitxers...",
-    "reload": "Torna a carregar",
-    "compare": "Comparar",
-    "sideBySide": "Costat al costat",
-    "inline": "En línia",
-    "fileComparison": "Comparació de fitxers: {{file1}} vs {{file2}}",
-    "fileTooLarge": "El fitxer és massa gran (> 10 MB) i no es pot obrir com a text per motius de seguretat.",
-    "sshConnectionFailed": "La connexió SSH ha fallat. Si us plau, comproveu la connexió a {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "No s'ha pogut carregar el fitxer: {{error}}",
-    "connecting": "Connectant...",
-    "connectedSuccessfully": "Connexió correcta",
-    "totpVerificationFailed": "La verificació TOTP ha fallat",
-    "browserSignInFailed": "L'inici de sessió ha fallat. Torna-ho a provar.",
-    "authenticationFailed": "L'autenticació ha fallat",
-    "incorrectPassphrase": "Contrasenya incorrecta. Si us plau, torneu-ho a intentar.",
-    "verificationCodePrompt": "Codi de verificació:",
-    "changePermissions": "Canvia els permisos",
-    "currentPermissions": "Permisos actuals",
-    "owner": "propietari",
-    "group": "Grup",
-    "others": "Altres",
-    "read": "Llegir",
-    "write": "Escriure",
-    "execute": "Executar",
-    "permissionsChangedSuccessfully": "Els permisos s'han canviat correctament",
-    "failedToChangePermissions": "No s'han pogut canviar els permisos",
-    "name": "Nom",
-    "sortByName": "Nom",
-    "sortByDate": "Data de modificació",
-    "sortBySize": "Mida",
-    "ascending": "Ascendent",
-    "descending": "Descendent",
-    "root": "Arrel",
-    "new": "Nou",
-    "sortBy": "Ordena per",
-    "items": "Articles",
-    "selected": "Seleccionat",
-    "editor": "Editor",
-    "octal": "Octal",
-    "storage": "Emmagatzematge",
-    "disk": "Disc",
-    "used": "Usat",
-    "of": "de",
-    "toggleSidebar": "Obre/tanca la barra lateral",
-    "compactLayout": "Utilitza un disseny compacte",
-    "comfortableLayout": "Utilitza un disseny còmode",
-    "cannotLoadPdf": "No es pot carregar el PDF",
-    "pdfLoadError": "S'ha produït un error en carregar aquest fitxer PDF.",
-    "loadingPdf": "S'està carregant el visor de PDF...",
-    "loadingPage": "S'està carregant la pàgina...",
-    "cancel": "Cancel·la",
-    "copiedItems_one": "S'ha copiat l'element {{count}}",
-    "copiedItems_other": "S'han copiat {{count}} elements",
-    "deleteCopiedFileFailed": "No s'ha pogut suprimir la còpia de {{name}}: {{error}}",
-    "dragMovedItems_one": "S'ha mogut l'element {{count}} a {{target}}",
-    "dragMovedItems_other": "S'han mogut {{count}} elements a {{target}}",
-    "moveBackFileFailed": "No s'ha pogut moure {{name}} enrere: {{error}}",
-    "terminal": "Terminal: {{host}} ({{path}})",
-    "dragToDesktop": "Arrossegant {{name}} a l'escriptori",
-    "dragFilesToDesktop": "Arrossegar fitxers {{count}} a l'escriptori",
-    "folderDragUnsupported": "Encara no es pot arrossegar carpetes a l'escriptori.",
-    "saveToDesktopFailed": "No s'ha pogut desar: {{error}}",
-    "dragFailedDetail": "No s'ha pogut arrossegar: {{error}}",
-    "videoUnsupported": "El vostre navegador no pot reproduir aquest format de vídeo.",
-    "downloadToPlay": "Descarrega-ho per reproduir-ho en un altre lloc",
-    "cannotPreviewType": "No es pot previsualitzar aquest tipus de fitxer",
-    "cannotPreviewTypeHint": "Aquest tipus de fitxer no té vista prèvia. Baixeu-lo per obrir-lo en una altra aplicació.",
-    "loadingFile": "S'està carregant el fitxer...",
-    "loadingImage": "S'està carregant la imatge...",
-    "loadingEditor": "S'està carregant l'editor...",
-    "loadingPreview": "S'està carregant la vista prèvia...",
-    "loadingAudio": "S'està carregant el reproductor d'àudio...",
-    "emptyPreview": "Encara no hi ha res per previsualitzar...",
-    "revert": "Revertir",
-    "openAsText": "Obre com a text",
-    "confirmOpenAsText": "Voleu continuar obrint aquest fitxer com a text? Això pot alentir el vostre navegador."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "Transferir fitxers entre dos hosts SSH.",
-    "sourceServer": "Servidor d'origen",
-    "destinationServer": "Servidor de destinació",
-    "selectHost": "Selecciona l'amfitrió",
-    "noHostSelected": "No s'ha seleccionat cap amfitrió",
-    "move": "Moure",
-    "copy": "Còpia",
-    "upload": "Pujada",
-    "itemsSelected": "{{count}} element seleccionat",
-    "itemsSelected_other": "{{count}} elements seleccionats",
-    "ready": "Llest",
-    "loadingHosts": "S'estan carregant els amfitrions...",
-    "name": "Nom",
-    "modified": "Modificat",
-    "size": "Mida",
-    "noFiles": "Sense fitxers",
-    "open": "Obre",
-    "up": "Amunt",
-    "refresh": "Actualitza",
-    "copyToTarget": "Copia al directori de destinació",
-    "rename": "Canvia el nom",
-    "delete": "Suprimeix",
-    "editPermissions": "Edita els permisos",
-    "createNewFolder": "Crea una carpeta nova",
-    "deleteSelectedItems": "Suprimeix els elements seleccionats",
-    "deleteConfirm": "Voleu suprimir l'element seleccionat {{count}}?",
-    "deleteConfirm_other": "Voleu suprimir els elements seleccionats {{count}}?",
-    "cancel": "Cancel·la",
-    "save": "Desa",
-    "folderCreated": "Carpeta creada",
-    "itemRenamed": "L'element s'ha rebatejat",
-    "actionFailed": "L'acció ha fallat",
-    "itemsDeleted": "{{count}} element suprimit",
-    "itemsDeleted_other": "{{count}} elements suprimits",
-    "deleteFailed": "No s'ha pogut eliminar l'opció.",
-    "permissionsUpdated": "Permisos actualitzats",
-    "noRemoteSessionConnected": "No hi ha cap sessió remota connectada",
-    "failedToListFiles": "No s'han pogut llistar els fitxers",
-    "failedToRefresh": "No s'ha pogut actualitzar",
-    "destinationInsideSource": "La destinació no pot ser dins de la ruta d'origen seleccionada.",
-    "sameHostNoOp": "L'origen i la destinació són la mateixa carpeta."
-  },
-  "hosts": {
-    "fileManager": "Gestor de fitxers",
-    "fileManagerUrlCopied": "S'ha copiat l'URL del gestor de fitxers",
-    "copyFileManagerUrlAction": "Copia l'URL del gestor de fitxers",
-    "docsLink": "Veure documents",
-    "hostNotFound": "No s'ha trobat l'amfitrió",
-    "loadingHost": "S'està carregant l'amfitrió..."
-  },
-  "onboarding": {
-    "feature_files": "Gestor de fitxers",
-    "feature_files_desc": "Navegueu, pengeu, descarregueu i editeu fitxers a través de SFTP sense sortir de l'aplicació."
-  },
-  "terminal": {
-    "runTitle": "Executant {{command}} - {{host}}",
-    "terminalTitle": "Terminal - {{host}}",
-    "terminalWithPath": "Terminal - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Navega per les carpetes de destinació",
-    "browsePathError": "No s'ha pogut obrir aquesta ruta a l'amfitrió de destinació.",
-    "browsePathWillBeCreated": "Aquesta carpeta encara no existeix. Es crearà quan comenci la transferència.",
-    "cancel": "Cancel·la",
-    "cleanupDestFiles": "Neteja la destinació",
-    "cleanupDestFilesError": "La neteja ha fallat",
-    "cleanupDestFilesNothing": "Res a netejar a la destinació",
-    "cleanupDestFilesPartial": "No s'han pogut eliminar alguns fitxers parcials",
-    "cleanupDestFilesSuccess": "S'han eliminat fitxers parcials de la destinació",
-    "confirmCopy": "Còpia",
-    "confirmMove": "Moure",
-    "copyFolderToHost": "Copia la carpeta a l'amfitrió…",
-    "copyItemsToHost": "Copia els elements {{count}} a l'amfitrió…",
-    "copyToHost": "Copia a l'amfitrió…",
-    "destinationPath": "Camí de destinació",
-    "destMustBeDirectory": "La destinació ha de ser un directori per a transferències de diversos elements",
-    "goUp": "Puja",
-    "hostAuthRequired": "Cal autenticació. Obriu primer el Gestor de fitxers en aquest amfitrió.",
-    "hostConnecting": "Connectant…",
-    "hostConnectionFailed": "La connexió ha fallat",
-    "hostDisconnected": "No connectat",
-    "hostReady": "Llest",
-    "itemsSummary": "{{count}} elements",
-    "jumpHostLimitation": "Tots dos hosts han de ser accessibles des del servidor Termix. No s'admet l'encaminament directe d'host a host.",
-    "methodAuto": "Automàtic",
-    "methodAutoHint": "Tria tar o SFTP per fitxer en funció del nombre de fitxers, la mida i la compressibilitat. Els fitxers individuals sempre utilitzen SFTP en temps real.",
-    "methodItemSftp": "SFTP per fitxer",
-    "methodItemSftpHint": "Transfereix cada fitxer individualment per SFTP. Funciona en tots els hosts, inclòs Windows.",
-    "methodItemSftpLimitation": "Cada fitxer utilitza el mateix flux SFTP com una còpia d'un sol fitxer, un darrere l'altre. El progrés es combina en tots els fitxers, de manera que la barra es mou lentament durant els fitxers grans.",
-    "methodLabel": "Mètode de transferència",
-    "methodPreviewError": "No s'ha pogut previsualitzar el mètode de transferència. El servidor encara triarà un mètode quan l'inicieu.",
-    "methodPreviewLoading": "Càlcul del mètode de transferència…",
-    "methodPreviewScanSummary": "{{fileCount}} fitxers, {{totalSize}} total (escanejats a l'amfitrió d'origen).",
-    "methodPreviewWillUseItemSftp": "Utilitzarà: SFTP per fitxer",
-    "methodPreviewWillUseTar": "Utilitzarà: Arxiu Tar",
-    "methodReason": {
-      "user_item_sftp": "Heu triat SFTP per fitxer.",
-      "user_tar": "Has triat l'arxiu tar.",
-      "tar_unavailable": "Tar no està disponible en un o tots dos amfitrions, per tant, s'utilitzarà SFTP per fitxer.",
-      "windows_host": "Hi ha un host de Windows implicat, per tant no s'utilitza tar.",
-      "auto_multi_large": "Automàtic: diversos fitxers, inclòs un fitxer gran ({{largestSize}}) amb dades compressibles. Tar els agrupa en una sola transferència.",
-      "auto_single_large_in_archive": "Automàtic: un fitxer gran ({{largestSize}}) en aquest conjunt, per tant, SFTP per fitxer.",
-      "auto_many_incompressible": "Automàtic: dades majoritàriament incompressibles, per tant, SFTP per fitxer.",
-      "auto_many_files": "Automàtic: molts fitxers ({{fileCount}}), tar redueix la sobrecàrrega per fitxer.",
-      "auto_default": "Automàtic: SFTP per fitxer per a aquest conjunt."
-    },
-    "methodTar": "Arxiu Tar",
-    "methodTarHint": "Comprimir a l'origen, transferir un arxiu, extreure a la destinació. Requereix tar en ambdós hosts Unix.",
-    "metricsCompress": "Comprimir a la font: {{duration}}",
-    "metricsExtract": "Extracte a la destinació: {{duration}}",
-    "metricsPrepare": "Prepara la destinació: {{duration}}",
-    "metricsRouteBenchmark": "Sonda de ruta: directa {{direct}}, relé {{relay}}",
-    "metricsSourceDelete": "Elimina de la font: {{duration}}",
-    "metricsTotal": "Total: {{duration}}",
-    "metricsTransfer": "Extrem a extrem: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 verificat: {{duration}}",
-    "moveFolderToHost": "Mou la carpeta a l'amfitrió…",
-    "moveItemsToHost": "Mou els elements {{count}} a l'amfitrió…",
-    "moveToHost": "Moure a l'amfitrió…",
-    "noHostsConnected": "No hi ha altres amfitrions de gestors de fitxers disponibles.",
-    "noHostsConnectedHint": "Afegiu un altre amfitrió SSH amb el Gestor de fitxers habilitat al Gestor d'amfitrions.",
-    "parallelSegmentsHint": "Els fitxers grans es divideixen en blocs de 256 MB. Els carrils múltiples utilitzen connexions separades (com ara iniciar diverses transferències) per a un rendiment total més alt.",
-    "parallelSegmentsLabel": "Carrils de transferència paral·lels",
-    "parallelSegmentsOption": "carrils {{count}}",
-    "progressBenchmarking": "Selecció de la ruta de transferència més ràpida…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Cancel·la",
-    "progressCancelling": "Cancel·lant…",
-    "progressCompressing": "Compressió a l'amfitrió d'origen…",
-    "progressExtracting": "Extraient a la destinació…",
-    "progressItems": "{{current}} / {{total}} fitxers",
-    "progressReconnecting": "Reconnectant…",
-    "progressStalled": "Estancat",
-    "progressTotalSpeed": "{{speed}} total ({{lanes}} carrils)",
-    "progressTransferring": "Transferència de dades…",
-    "progressTransferringItems": "Transferència de fitxers ({{current}} de {{total}})…",
-    "progressVerifying": "Verificació de la integritat del fitxer…",
-    "recentDestinations": "Destinacions recents",
-    "resumedHint": "S'ha tornat a connectar a una transferència activa iniciada en una altra finestra.",
-    "retryTransfer": "Torna-ho a intentar",
-    "retryTransferError": "No s'ha pogut reintentar.",
-    "selectDestinationHost": "Selecciona l'amfitrió de destinació",
-    "transferCancelled": "Transferència cancel·lada",
-    "transferCancelledCopyHint": "És possible que hi hagi fitxers parcials a la destinació.",
-    "transferCancelledMoveHint": "És possible que hi hagi fitxers parcials a la destinació. No s'han eliminat els fitxers d'origen.",
-    "transferError": "La transferència ha fallat",
-    "transferFailedRetryHint": "S'han conservat dades parcials a la destinació. El reintent es reprendrà quan es restableixi la connexió.",
-    "transferPartialHint": "No s'ha pogut transferir: {{paths}}",
-    "transferSuccess": "Transferència completada",
-    "metricsHopSourceRead": "Font → servidor: {{throughput}}",
-    "metricsHopDestSftpWrite": "Servidor → destí (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Servidor → destí (local): {{throughput}}"
-  },
-  "plugin": {
-    "name": "Gestor de fitxers"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/cs_CZ.json b/plugins/file-manager/locales/translated/cs_CZ.json
deleted file mode 100644
index d03d836bb..000000000
--- a/plugins/file-manager/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Soubory",
-    "sftp": "SFTP",
-    "openFileManager": "Otevřít Správce souborů"
-  },
-  "permissions": {
-    "use": {
-      "title": "Používejte správce souborů",
-      "description": "Procházejte, upravujte a přenášejte soubory přes SFTP."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Povolit Správce souborů",
-        "description": "Procházejte a upravujte soubory na tomto hostiteli přes SFTP."
-      },
-      "defaultPath": {
-        "label": "Výchozí cesta"
-      },
-      "scpLegacy": {
-        "label": "Starší režim SCP"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Současné přenosy souborů",
-        "description": "Kolik souborů souběžně nahrává nebo stahuje lokální/vzdálený správce. Snižte tuto hodnotu, pokud váš server omezuje SFTP kanály."
-      },
-      "confirmBeforeTrash": {
-        "label": "Potvrďte před přesunutím souborů do koše",
-        "description": "Před přesunutím vzdálených souborů do koše se zeptat. Trvalé smazání stále vyžaduje potvrzení."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Správce souborů"
-  },
-  "fileManager": {
-    "noHostSelected": "Nebyl vybrán žádný hostitel",
-    "initializingEditor": "Inicializace editoru...",
-    "file": "Soubor",
-    "folder": "Složka",
-    "uploadFile": "Nahrát soubor",
-    "downloadFile": "Stáhnout",
-    "extractArchive": "Extrahovat archiv",
-    "extractingArchive": "Extrahování {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} byl úspěšně extrahován",
-    "extractFailed": "Extrakce se nezdařila",
-    "compressFile": "Komprimovat soubor",
-    "compressFiles": "Komprimovat soubory",
-    "compressFilesDesc": "Komprimovat {{count}} položek do archivu",
-    "archiveName": "Název archivu",
-    "enterArchiveName": "Zadejte název archivu...",
-    "compressionFormat": "Kompresní formát",
-    "selectedFiles": "Vybrané soubory",
-    "andMoreFiles": "a {{count}} dalších...",
-    "compress": "Komprimovat",
-    "compressingFiles": "Komprimace {{count}} položek do {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} úspěšně vytvořeno",
-    "compressFailed": "Komprese selhala",
-    "edit": "Upravit",
-    "preview": "Náhled",
-    "previous": "Předchozí",
-    "next": "Další",
-    "pageXOfY": "Strana {{current}} z {{total}}",
-    "zoomOut": "Oddálit",
-    "zoomIn": "Přiblížit",
-    "newFile": "Nový soubor",
-    "newFolder": "Nová složka",
-    "rename": "Přejmenovat",
-    "uploading": "Nahrávání...",
-    "uploadingFile": "Nahrávání {{name}}...",
-    "uploadingChunk": "Nahrávání {{name}}: {{percent}}% (část {{chunk}} z {{total}})",
-    "fileName": "Název souboru",
-    "folderName": "Název složky",
-    "fileUploadedSuccessfully": "Soubor „{{name}}“ byl úspěšně nahrán",
-    "failedToUploadFile": "Nahrávání souboru se nezdařilo",
-    "uploadingFolderFiles": "Nahrávání {{count}} souborů...",
-    "uploadedFolderFiles": "Úspěšně nahráno {{count}} souborů",
-    "uploadedFolderPartial": "Nahrání souboru {{uploaded}} , {{failed}} se nezdařilo",
-    "fileDownloadedSuccessfully": "Soubor „{{name}}“ byl úspěšně stažen",
-    "failedToDownloadFile": "Stažení souboru se nezdařilo",
-    "fileCreatedSuccessfully": "Soubor „{{name}}“ byl úspěšně vytvořen",
-    "folderCreatedSuccessfully": "Složka „{{name}}“ byla úspěšně vytvořena",
-    "failedToCreateItem": "Vytvoření položky se nezdařilo",
-    "operationFailed": "Operace {{operation}} se nezdařila pro {{name}}: {{error}}",
-    "failedToResolveSymlink": "Nepodařilo se vyřešit symbolický odkaz",
-    "itemsDeletedSuccessfully": "{{count}} položek bylo úspěšně smazáno",
-    "failedToDeleteItems": "Položky se nepodařilo smazat",
-    "sudoPasswordRequired": "Vyžadováno heslo správce",
-    "enterSudoPassword": "Pro pokračování v této operaci zadejte heslo sudo.",
-    "sudoPassword": "Heslo Sudo",
-    "sudoOperationFailed": "Operace Sudo selhala",
-    "sudoAuthFailed": "Ověření Sudo selhalo",
-    "dragFilesToUpload": "Přetáhněte sem soubory k nahrání",
-    "dropToUploadHere": "Přetáhněte sem pro nahrání",
-    "dropToDownloadHere": "Přetáhněte pro stažení sem",
-    "localFiles": "Místní",
-    "showLocalFiles": "Zobrazit lokální soubory (rozdělené zobrazení)",
-    "hideLocalFiles": "Skrýt lokální soubory",
-    "localHome": "Domovská složka",
-    "localPathPlaceholder": "Cesta k místní složce",
-    "localShowHidden": "Zobrazit skryté soubory",
-    "localHideHidden": "Skrýt skryté soubory",
-    "localRevealInFileManager": "Zobrazit ve správci systémových souborů",
-    "localCannotOpenFolder": "Nelze otevřít složku",
-    "localItemCount": "{{count}} položek",
-    "localSelectedCount": "{{count}} vybráno",
-    "back": "Zadní",
-    "forward": "Vpřed",
-    "up": "Nahoru",
-    "kind": "Druh",
-    "localUploadingProgress": "Nahrávání {{current}} z {{total}}",
-    "localDownloadingProgress": "Stahování {{current}} z {{total}}",
-    "localTransferInFlight": "{{count}} najednou",
-    "localPreparingDownload": "Příprava stahování...",
-    "localTransferCancelled": "Převod zrušen",
-    "localNothingToTransfer": "Nic k převodu",
-    "localUploadComplete": "Nahráno {{count}} souborů",
-    "localUploadFailed": "Nahrávání se nezdařilo",
-    "localUploadPartial": "Nahrání souboru {{done}} , {{failed}} se nezdařilo",
-    "localDownloadComplete": "Staženo {{count}} souborů",
-    "localDownloadFailed": "Stahování se nezdařilo",
-    "localDownloadPartial": "Stažení souboru (souborů) {{done}} se nezdařilo. {{failed}}",
-    "localReplaceExistingPrompt": "V této složce již existuje {{count}} položek. Nahradit je?",
-    "localReplace": "Nahradit",
-    "localSkipExisting": "Přeskočit",
-    "localSkippedExisting": "Přeskočeno {{count}} existujících položek",
-    "localUnsafeNamesSkipped": "Přeskočeno {{count}} položek, jejichž názvy nelze na tomto počítači použít",
-    "localOpen": "OTEVŘENO",
-    "localOpenFolder": "Otevřít složku",
-    "localUploadToRemote": "Nahrát na server",
-    "localUploadToRemoteMany": "Nahrát {{count}} položek na server",
-    "localMoveToTrash": "Přesunout do koše",
-    "localMoveToTrashMany": "Přesunout {{count}} položek do koše",
-    "localTrashConfirmSingle": "Přesunout „{{name}}“ do koše?",
-    "localTrashConfirmFolder": "Přesunout složku „{{name}}“ a veškerý její obsah do koše?",
-    "localTrashConfirmMany": "Přesunout {{count}} položek do koše?",
-    "localTrashed": "Přesunuto {{count}} položek do koše",
-    "localTrashFailed": "Nepodařilo se přesunout do koše",
-    "localRenameFailed": "Přejmenování se nezdařilo",
-    "localCreateFailed": "Nepodařilo se vytvořit položku",
-    "goToParentFolder": "Přejít do nadřazené složky",
-    "resizeSidebar": "Přetažením změníte velikost postranního panelu (dvojitým kliknutím resetujete)",
-    "resizeLocalPane": "Přetažením změníte velikost lokálního panelu (dvojitým kliknutím resetujete).",
-    "columns": "Sloupce",
-    "columnsHint": "Kliknutím pravým tlačítkem myši vyberete sloupce",
-    "emptyFolder": "Tato složka je prázdná",
-    "searchFiles": "Hledat soubory...",
-    "upload": "Nahrát",
-    "selectHostToStart": "Vyberte hostitele pro spuštění správy souborů",
-    "sshRequiredForFileManager": "Správce souborů vyžaduje SSH. Tento hostitel nemá SSH povoleno.",
-    "failedToConnect": "Nepodařilo se připojit k SSH",
-    "failedToLoadDirectory": "Nepodařilo se načíst adresář",
-    "noSSHConnection": "Není k dispozici žádné SSH připojení",
-    "copy": "Kopie",
-    "cut": "Střih",
-    "paste": "Pasta",
-    "copyPath": "Kopírovat cestu",
-    "copyPaths": "Kopírovat cesty",
-    "delete": "Vymazat",
-    "properties": "Nemovitosti",
-    "refresh": "Obnovit",
-    "downloadFiles": "Stáhnout {{count}} souborů do prohlížeče",
-    "copyFiles": "Kopírovat {{count}} položek",
-    "cutFiles": "Vyjmout {{count}} položek",
-    "deleteFiles": "Smazat {{count}} položek",
-    "filesCopiedToClipboard": "{{count}} položek zkopírováno do schránky",
-    "filesCutToClipboard": "{{count}} položek vyjmutých do schránky",
-    "pathCopiedToClipboard": "Cesta zkopírována do schránky",
-    "pathsCopiedToClipboard": "{{count}} cest zkopírováno do schránky",
-    "failedToCopyPath": "Nepodařilo se zkopírovat cestu do schránky",
-    "copyFolderLink": "Kopírovat odkaz do složky",
-    "copyCurrentFolderLink": "Kopírovat odkaz do aktuální složky",
-    "folderLinkCopied": "Odkaz na složku byl zkopírován do schránky",
-    "failedToCopyFolderLink": "Nepodařilo se zkopírovat odkaz na složku",
-    "movedItems": "Přesunuto {{count}} položek",
-    "failedToDeleteItem": "Položku se nepodařilo smazat",
-    "itemRenamedSuccessfully": "{{type}} přejmenováno úspěšně",
-    "failedToRenameItem": "Přejmenování položky se nezdařilo",
-    "download": "Stáhnout",
-    "openExternalEditor": "Otevřít externě",
-    "chooseExternalEditor": "Vyberte externího editora",
-    "externalEditorSelected": "Vybrán externí editor",
-    "externalEditorDesktopOnly": "Externí editor je k dispozici pouze v desktopové aplikaci",
-    "externalEditorOpened": "Otevřeno v externím editoru. Uložením tam se změny nahrají zpět na server.",
-    "failedToOpenExternalEditor": "Nepodařilo se otevřít externí editor",
-    "failedToSelectExternalEditor": "Nepodařilo se vybrat externí editor",
-    "permissions": "Oprávnění",
-    "size": "Velikost",
-    "modified": "Upraveno",
-    "path": "Cesta",
-    "confirmDelete": "Opravdu chcete smazat {{name}}?",
-    "permissionDenied": "Oprávnění zamítnuto",
-    "serverError": "Chyba serveru",
-    "fileSavedSuccessfully": "Soubor byl úspěšně uložen",
-    "failedToSaveFile": "Uložení souboru se nezdařilo",
-    "confirmDeleteSingleItem": "Opravdu chcete trvale smazat „{{name}}“?",
-    "confirmDeleteMultipleItems": "Opravdu chcete trvale smazat {{count}} položek?",
-    "confirmDeleteMultipleItemsWithFolders": "Opravdu chcete trvale smazat {{count}} položek? To zahrnuje i složky a jejich obsah.",
-    "confirmDeleteFolder": "Opravdu chcete trvale smazat složku „{{name}}“ a veškerý její obsah?",
-    "permanentDeleteWarning": "Tuto akci nelze vrátit zpět. Položka(y) bude(budou) trvale smazána(y) ze serveru.",
-    "moveToTrashWarning": "Položka(y) bude(budou) přesunuty(y) do koše Termix a bude(budou) možné je obnovit před uplynutím doby uchování.",
-    "itemsMovedToTrash": "{{count}} položek přesunutých do koše",
-    "trash": "Odpadky",
-    "trashDescription": "Smazané položky jsou na tomto hostiteli uchovávány po dobu {{days}} dní.",
-    "trashLoadFailed": "Načtení koše se nezdařilo",
-    "trashEmpty": "Koš je prázdný",
-    "trashRestore": "Obnovit",
-    "trashRestored": "Obnoveno {{name}}",
-    "trashRestoreFailed": "Obnovení položky se nezdařilo. Původní cesta již pravděpodobně existuje.",
-    "trashDeletePermanently": "Trvale smazat",
-    "trashDeleteConfirm": "Trvale smazat {{name}}? Tuto akci nelze vrátit zpět.",
-    "trashPermanentlyDeleted": "Trvale smazáno {{name}}",
-    "trashDeleteFailed": "Trvalé smazání položky se nezdařilo",
-    "trashEmptyAction": "Vysypat koš",
-    "trashEmptyConfirm": "Trvale smazat všechny položky v koši? Tuto akci nelze vrátit zpět.",
-    "trashEmptied": "Koš vyprázdněn",
-    "trashRetention": "Automatické čištění po (dnech)",
-    "trashRetentionSaved": "Uchovávání koše aktualizováno",
-    "trashRetentionFailed": "Aktualizace uchovávání v koši se nepodařilo",
-    "trashUnavailableConfirm": "Tuto položku nelze přesunout do koše, obvykle proto, že se nachází v jiném souborovém systému nebo vyžaduje zvýšená oprávnění. Chcete ji místo toho trvale smazat?",
-    "recent": "Nedávné",
-    "pinned": "Připnuto",
-    "folderShortcuts": "Zkratky složek",
-    "failedToReconnectSSH": "Nepodařilo se znovu připojit relaci SSH",
-    "openTerminalHere": "Otevřít terminál zde",
-    "run": "Běh",
-    "openTerminalInFolder": "Otevřít terminál v této složce",
-    "openTerminalInFileLocation": "Otevřít terminál v umístění souboru",
-    "runningFile": "Běh - {{file}}",
-    "onlyRunExecutableFiles": "Lze spustit pouze spustitelné soubory",
-    "directories": "Adresáře",
-    "removedFromRecentFiles": "Z posledních souborů odstraněno „{{name}}“",
-    "removeFailed": "Odebrání se nezdařilo",
-    "unpinnedSuccessfully": "Úspěšně odepnuto „{{name}}“",
-    "unpinFailed": "Odepnout se nepodařilo",
-    "removedShortcut": "Odstraněna zkratka „{{name}}“",
-    "removeShortcutFailed": "Odebrání zástupce se nezdařilo",
-    "clearedAllRecentFiles": "Vymazány všechny nedávné soubory",
-    "clearFailed": "Vymazání se nezdařilo",
-    "removeFromRecentFiles": "Odebrat z posledních souborů",
-    "clearAllRecentFiles": "Vymazat všechny nedávné soubory",
-    "unpinFile": "Odepnout soubor",
-    "removeShortcut": "Odebrat zkratku",
-    "pinFile": "Připnout soubor",
-    "addToShortcuts": "Přidat do zkratek",
-    "pasteFailed": "Vložení se nezdařilo",
-    "noUndoableActions": "Žádné akce, které lze vrátit zpět",
-    "undoCopySuccess": "Zrušená operace kopírování: Smazáno {{count}} zkopírovaných souborů",
-    "undoCopyFailedDelete": "Vrácení se nezdařilo: Nepodařilo se smazat žádné zkopírované soubory.",
-    "undoCopyFailedNoInfo": "Vrácení se nezdařilo: Nelze najít informace o zkopírovaném souboru.",
-    "undoMoveSuccess": "Zrušená operace přesunutí: {{count}} souborů bylo přesunuto zpět do původního umístění.",
-    "undoMoveFailedMove": "Vrácení se nezdařilo: Nepodařilo se přesunout žádné soubory zpět.",
-    "undoMoveFailedNoInfo": "Vrácení se nezdařilo: Nelze najít informace o přesunutém souboru.",
-    "undoDeleteNotSupported": "Operaci smazání nelze vrátit zpět: Soubory byly trvale smazány ze serveru.",
-    "undoTypeNotSupported": "Nepodporovaný typ operace vrácení zpět",
-    "undoOperationFailed": "Operace vrácení se nezdařila",
-    "unknownError": "Neznámá chyba",
-    "confirm": "Potvrdit",
-    "find": "Nalézt...",
-    "replace": "Nahradit",
-    "downloadInstead": "Stáhnout místo toho",
-    "keyboardShortcuts": "Klávesové zkratky",
-    "searchAndReplace": "Hledat a nahradit",
-    "editing": "Editace",
-    "search": "Vyhledávání",
-    "findNext": "Najít další",
-    "findPrevious": "Najít předchozí",
-    "save": "Uložit",
-    "selectAll": "Vybrat vše",
-    "undo": "Zpět",
-    "redo": "Předělat",
-    "moveLineUp": "Posunout seřadit nahoru",
-    "moveLineDown": "Posunout řádek dolů",
-    "toggleComment": "Přepnout komentář",
-    "autoComplete": "Automatické dokončení",
-    "imageLoadError": "Nepodařilo se načíst obrázek",
-    "startTyping": "Začněte psát...",
-    "unknownSize": "Neznámá velikost",
-    "fileIsEmpty": "Soubor je prázdný",
-    "largeFileWarning": "Varování před velkým souborem",
-    "largeFileWarningDesc": "Velikost tohoto souboru je {{size}} , což může při otevření jako text způsobit problémy s výkonem.",
-    "fileNotFoundAndRemoved": "Soubor „{{name}}“ nebyl nalezen a byl odstraněn z nedávných/připnutých souborů.",
-    "failedToLoadFile": "Nepodařilo se načíst soubor: {{error}}",
-    "serverErrorOccurred": "Došlo k chybě serveru. Zkuste to prosím znovu později.",
-    "autoSaveFailed": "Automatické ukládání se nezdařilo",
-    "fileAutoSaved": "Soubor se automaticky ukládá",
-    "moveFileFailed": "Přesun se nezdařilo {{name}}",
-    "moveOperationFailed": "Operace přesunu se nezdařila",
-    "canOnlyCompareFiles": "Lze porovnat pouze dva soubory",
-    "comparingFiles": "Porovnání souborů: {{file1}} a {{file2}}",
-    "dragFailed": "Operace přetažení se nezdařila",
-    "filePinnedSuccessfully": "Soubor „{{name}}“ byl úspěšně připnut",
-    "pinFileFailed": "Připnutí souboru se nezdařilo",
-    "fileUnpinnedSuccessfully": "Soubor „{{name}}“ byl úspěšně odepnut",
-    "unpinFileFailed": "Nepodařilo se odepnout soubor",
-    "shortcutAddedSuccessfully": "Zástupce složky „{{name}}“ byl úspěšně přidán",
-    "addShortcutFailed": "Přidání zástupce se nezdařilo",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} položek úspěšně",
-    "operationCompleted": "{{operation}} {{count}} položek",
-    "downloadFileSuccess": "Soubor {{name}} byl úspěšně stažen",
-    "downloadFileFailed": "Stahování se nezdařilo",
-    "downloadingFile": "Stahování {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Přesunout na {{name}}",
-    "diffCompareWith": "Rozdíl ve srovnání s {{name}}",
-    "dragOutsideToDownload": "Přetáhněte mimo okno pro stažení ({{count}} souborů)",
-    "newFolderDefault": "Nová složka",
-    "newFileDefault": "NovýSoubor.txt",
-    "successfullyMovedItems": "Položky {{count}} byly úspěšně přesunuty do {{target}}",
-    "move": "Pohyb",
-    "searchInFile": "Hledat v souboru (Ctrl+F)",
-    "showKeyboardShortcuts": "Zobrazit klávesové zkratky",
-    "decreaseFontSize": "Zmenšit velikost písma",
-    "increaseFontSize": "Zvětšit velikost písma",
-    "startWritingMarkdown": "Začněte psát svůj obsah v Markdownu...",
-    "loadingFileComparison": "Načítání porovnání souborů...",
-    "reload": "Znovu načíst",
-    "compare": "Porovnat",
-    "sideBySide": "Bok po boku",
-    "inline": "Vložený",
-    "fileComparison": "Porovnání souborů: {{file1}} vs. {{file2}}",
-    "fileTooLarge": "Soubor je příliš velký (> 10 MB) a z bezpečnostních důvodů jej nelze otevřít jako text.",
-    "sshConnectionFailed": "SSH připojení selhalo. Zkontrolujte prosím připojení k {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Nepodařilo se načíst soubor: {{error}}",
-    "connecting": "Spojovací...",
-    "connectedSuccessfully": "Úspěšné připojení",
-    "totpVerificationFailed": "Ověření TOTP se nezdařilo",
-    "browserSignInFailed": "Přihlášení se nezdařilo. Zkuste to prosím znovu.",
-    "authenticationFailed": "Ověření se nezdařilo",
-    "incorrectPassphrase": "Nesprávné heslo. Zkuste to prosím znovu.",
-    "verificationCodePrompt": "Ověřovací kód:",
-    "changePermissions": "Změnit oprávnění",
-    "currentPermissions": "Aktuální oprávnění",
-    "owner": "Majitel",
-    "group": "Skupina",
-    "others": "Ostatní",
-    "read": "Číst",
-    "write": "Napsat",
-    "execute": "Vykonat",
-    "permissionsChangedSuccessfully": "Oprávnění byla úspěšně změněna",
-    "failedToChangePermissions": "Nepodařilo se změnit oprávnění",
-    "name": "Jméno",
-    "sortByName": "Jméno",
-    "sortByDate": "Datum úpravy",
-    "sortBySize": "Velikost",
-    "ascending": "Vzestupně",
-    "descending": "Klesající",
-    "root": "Vykořenit",
-    "new": "Nový",
-    "sortBy": "Seřadit podle",
-    "items": "Položky",
-    "selected": "Vybraný",
-    "editor": "Editor",
-    "octal": "Osmičkové",
-    "storage": "Skladování",
-    "disk": "Disk",
-    "used": "Použitý",
-    "of": "z",
-    "toggleSidebar": "Přepnout postranní panel",
-    "compactLayout": "Použít kompaktní rozvržení",
-    "comfortableLayout": "Použijte pohodlné rozvržení",
-    "cannotLoadPdf": "Nelze načíst PDF",
-    "pdfLoadError": "Při načítání tohoto PDF souboru došlo k chybě.",
-    "loadingPdf": "Načítání prohlížeče PDF...",
-    "loadingPage": "Načítání stránky...",
-    "cancel": "Zrušit",
-    "copiedItems_one": "Zkopírována položka {{count}}",
-    "copiedItems_other": "Zkopírováno {{count}} položek",
-    "deleteCopiedFileFailed": "Nelze smazat kopii {{name}}: {{error}}",
-    "dragMovedItems_one": "Položka {{count}} přesunuta do {{target}}",
-    "dragMovedItems_other": "Přesunuto {{count}} položek do {{target}}",
-    "moveBackFileFailed": "Nelze přesunout {{name}} zpět: {{error}}",
-    "terminal": "Terminál: {{host}} ({{path}})",
-    "dragToDesktop": "Přetažení {{name}} na plochu",
-    "dragFilesToDesktop": "Přetažení souborů {{count}} na plochu",
-    "folderDragUnsupported": "Přetahování složek na plochu zatím není podporováno",
-    "saveToDesktopFailed": "Uložení se nezdařilo: {{error}}",
-    "dragFailedDetail": "Přetažení se nezdařilo: {{error}}",
-    "videoUnsupported": "Váš prohlížeč tento formát videa nepřehrává.",
-    "downloadToPlay": "Stáhněte si pro přehrávání jinde",
-    "cannotPreviewType": "Nelze zobrazit náhled tohoto typu souboru",
-    "cannotPreviewTypeHint": "Tento typ souboru nemá náhled. Stáhněte si jej a otevřete jej v jiné aplikaci.",
-    "loadingFile": "Načítání souboru...",
-    "loadingImage": "Načítání obrázku...",
-    "loadingEditor": "Načítání editoru...",
-    "loadingPreview": "Načítání náhledu...",
-    "loadingAudio": "Načítání audio přehrávače...",
-    "emptyPreview": "Zatím nic k náhledu...",
-    "revert": "Vrátit zpět",
-    "openAsText": "Otevřít jako text",
-    "confirmOpenAsText": "Chcete tento soubor i nadále otevírat jako text? Může to zpomalit váš prohlížeč."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "Přenos souborů mezi dvěma SSH hostiteli.",
-    "sourceServer": "Zdrojový server",
-    "destinationServer": "Cílový server",
-    "selectHost": "Vyberte hostitele",
-    "noHostSelected": "Nebyl vybrán žádný hostitel",
-    "move": "Pohyb",
-    "copy": "Kopie",
-    "upload": "Nahrát",
-    "itemsSelected": "Vybrána položka {{count}}",
-    "itemsSelected_other": "Vybráno {{count}} položek",
-    "ready": "Připraveno",
-    "loadingHosts": "Načítání hostitelů...",
-    "name": "Jméno",
-    "modified": "Upraveno",
-    "size": "Velikost",
-    "noFiles": "Žádné soubory",
-    "open": "OTEVŘENO",
-    "up": "Nahoru",
-    "refresh": "Obnovit",
-    "copyToTarget": "Kopírovat do cílového adresáře",
-    "rename": "Přejmenovat",
-    "delete": "Vymazat",
-    "editPermissions": "Upravit oprávnění",
-    "createNewFolder": "Vytvořit novou složku",
-    "deleteSelectedItems": "Smazat vybrané položky",
-    "deleteConfirm": "Smazat {{count}} vybranou položku?",
-    "deleteConfirm_other": "Smazat {{count}} vybraných položek?",
-    "cancel": "Zrušit",
-    "save": "Uložit",
-    "folderCreated": "Složka vytvořena",
-    "itemRenamed": "Položka přejmenována",
-    "actionFailed": "Akce se nezdařila",
-    "itemsDeleted": "{{count}} položka smazána",
-    "itemsDeleted_other": "{{count}} položek smazáno",
-    "deleteFailed": "Smazání se nezdařilo",
-    "permissionsUpdated": "Oprávnění aktualizována",
-    "noRemoteSessionConnected": "Není připojena žádná vzdálená relace",
-    "failedToListFiles": "Seznam souborů se nepodařilo zobrazit",
-    "failedToRefresh": "Obnovení se nezdařilo",
-    "destinationInsideSource": "Cíl nemůže být uvnitř vybrané zdrojové cesty.",
-    "sameHostNoOp": "Zdroj a cíl jsou stejná složka."
-  },
-  "hosts": {
-    "fileManager": "Správce souborů",
-    "fileManagerUrlCopied": "URL adresa Správce souborů zkopírována",
-    "copyFileManagerUrlAction": "Kopírovat URL Správce souborů",
-    "docsLink": "Zobrazit dokumenty",
-    "hostNotFound": "Hostitel nenalezen",
-    "loadingHost": "Načítání hostitele..."
-  },
-  "onboarding": {
-    "feature_files": "Správce souborů",
-    "feature_files_desc": "Procházejte, nahrávejte, stahujte a upravujte soubory přes SFTP, aniž byste museli opustit aplikaci."
-  },
-  "terminal": {
-    "runTitle": "Spuštěno {{command}} - {{host}}",
-    "terminalTitle": "Terminál - {{host}}",
-    "terminalWithPath": "Terminál - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Procházet cílové složky",
-    "browsePathError": "Tuto cestu se nepodařilo otevřít na cílovém hostiteli.",
-    "browsePathWillBeCreated": "Tato složka zatím neexistuje. Bude vytvořena po zahájení přenosu.",
-    "cancel": "Zrušit",
-    "cleanupDestFiles": "Vyčistit cíl",
-    "cleanupDestFilesError": "Vyčištění se nezdařilo",
-    "cleanupDestFilesNothing": "Na cílové destinaci není co uklízet",
-    "cleanupDestFilesPartial": "Některé částečné soubory se nepodařilo odstranit.",
-    "cleanupDestFilesSuccess": "Z cílového umístění byly odstraněny částečné soubory.",
-    "confirmCopy": "Kopie",
-    "confirmMove": "Pohyb",
-    "copyFolderToHost": "Zkopírovat složku na hostitele…",
-    "copyItemsToHost": "Zkopírovat {{count}} položek pro hostování…",
-    "copyToHost": "Kopírovat na hostitele…",
-    "destinationPath": "Cílová cesta",
-    "destMustBeDirectory": "Cíl musí být adresář pro přenosy více položek.",
-    "goUp": "Jdi nahoru",
-    "hostAuthRequired": "Vyžaduje se ověření. Nejprve otevřete Správce souborů na tomto hostiteli.",
-    "hostConnecting": "Připojování…",
-    "hostConnectionFailed": "Připojení se nezdařilo",
-    "hostDisconnected": "Nepřipojeno",
-    "hostReady": "Připraveno",
-    "itemsSummary": "{{count}} položek",
-    "jumpHostLimitation": "Oba hostitelé musí být dosažitelné ze serveru Termix. Přímé směrování mezi hostiteli není podporováno.",
-    "methodAuto": "Auto",
-    "methodAutoHint": "Vybírá tar nebo SFTP pro jednotlivé soubory na základě počtu souborů, velikosti a komprimovatelnosti. Jednotlivé soubory vždy používají streamovaný SFTP.",
-    "methodItemSftp": "SFTP pro jednotlivé soubory",
-    "methodItemSftpHint": "Přeneste každý soubor jednotlivě přes SFTP. Funguje na všech hostitelích včetně Windows.",
-    "methodItemSftpLimitation": "Každý soubor používá stejný SFTP stream jako kopie jednoho souboru, jeden po druhém. Průběh je sloučen napříč všemi soubory, takže se ukazatel u velkých souborů pohybuje pomalu.",
-    "methodLabel": "Způsob přenosu",
-    "methodPreviewError": "Nepodařilo se zobrazit náhled metody přenosu. Server si metodu vybere i po spuštění.",
-    "methodPreviewLoading": "Výpočet metody převodu…",
-    "methodPreviewScanSummary": "{{fileCount}} souborů, {{totalSize}} celkem (naskenováno na zdrojovém hostiteli).",
-    "methodPreviewWillUseItemSftp": "Použije se: SFTP pro jednotlivé soubory",
-    "methodPreviewWillUseTar": "Použiji: archiv Tar",
-    "methodReason": {
-      "user_item_sftp": "Zvolili jste SFTP pro jednotlivé soubory.",
-      "user_tar": "Zvolili jste archiv tar.",
-      "tar_unavailable": "Tar není k dispozici na jednom nebo obou hostitelích, takže se místo toho použije SFTP pro jednotlivé soubory.",
-      "windows_host": "Je zapojen hostitelský systém Windows, takže se nepoužívá tar.",
-      "auto_multi_large": "Auto: více souborů včetně velkého souboru ({{largestSize}}) s komprimovatelnými daty. Tar je sloučí do jednoho přenosu.",
-      "auto_single_large_in_archive": "Auto: jeden velký soubor ({{largestSize}}) v této sadě, takže SFTP pro jednotlivé soubory.",
-      "auto_many_incompressible": "Auto: většinou nekomprimovatelná data, takže SFTP pro jednotlivé soubory.",
-      "auto_many_files": "Automaticky: mnoho souborů ({{fileCount}}), tar snižuje režii pro každý soubor.",
-      "auto_default": "Automaticky: SFTP pro jednotlivé soubory pro tuto sadu."
-    },
-    "methodTar": "Archiv Tar",
-    "methodTarHint": "Komprimace ve zdroji, přenos jednoho archivu, extrakce v cíli. Vyžaduje tar na obou unixových hostitelích.",
-    "metricsCompress": "Komprimovat u zdroje: {{duration}}",
-    "metricsExtract": "Extrahovat v cíli: {{duration}}",
-    "metricsPrepare": "Připravit cíl: {{duration}}",
-    "metricsRouteBenchmark": "Sonda trasy: přímá {{direct}}, reléová {{relay}}",
-    "metricsSourceDelete": "Odebrat ze zdroje: {{duration}}",
-    "metricsTotal": "Celkem: {{duration}}",
-    "metricsTransfer": "Konec od konce: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 ověřeno: {{duration}}",
-    "moveFolderToHost": "Přesunout složku na hostitele…",
-    "moveItemsToHost": "Přesunout {{count}} položek na hostitele…",
-    "moveToHost": "Přesunout na hostitele…",
-    "noHostsConnected": "Žádní další hostitelé souborů nejsou k dispozici.",
-    "noHostsConnectedHint": "Přidejte dalšího hostitele SSH s povoleným Správcem souborů ve Správci hostitelů.",
-    "parallelSegmentsHint": "Velké soubory jsou rozděleny na bloky o velikosti 256 MB. Více linek používá samostatná připojení (například spuštění několika přenosů) pro vyšší celkovou propustnost.",
-    "parallelSegmentsLabel": "Paralelní přestupní pruhy",
-    "parallelSegmentsOption": "{{count}} jízdních pruhů",
-    "progressBenchmarking": "Výběr nejrychlejší trasy přestupu…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Zrušit",
-    "progressCancelling": "Zrušení…",
-    "progressCompressing": "Komprese na zdrojovém hostiteli…",
-    "progressExtracting": "Extrahování v cíli…",
-    "progressItems": "{{current}} / {{total}} souborů",
-    "progressReconnecting": "Opětovné připojení…",
-    "progressStalled": "Zastaveno",
-    "progressTotalSpeed": "{{speed}} celkem ({{lanes}} pruhů)",
-    "progressTransferring": "Přenos dat…",
-    "progressTransferringItems": "Přenos souborů ({{current}} z {{total}})…",
-    "progressVerifying": "Ověřování integrity souboru…",
-    "recentDestinations": "Nedávné destinace",
-    "resumedHint": "Znovu připojeno k aktivnímu přenosu zahájenému v jiném okně.",
-    "retryTransfer": "Zkusit znovu",
-    "retryTransferError": "Opakovaný pokus se nezdařil",
-    "selectDestinationHost": "Vyberte cílového hostitele",
-    "transferCancelled": "Převod zrušen",
-    "transferCancelledCopyHint": "V cílovém úložišti mohou zůstat jen částečné soubory.",
-    "transferCancelledMoveHint": "V cílovém umístění mohou zůstat jen některé soubory. Zdrojové soubory nebyly odstraněny.",
-    "transferError": "Přenos se nezdařil",
-    "transferFailedRetryHint": "V cíli byla uložena částečná data. Po obnovení připojení bude pokus pokračovat.",
-    "transferPartialHint": "Nepodařilo se přenést: {{paths}}",
-    "transferSuccess": "Převod dokončen",
-    "metricsHopSourceRead": "Zdroj → server: {{throughput}}",
-    "metricsHopDestSftpWrite": "Server → cíl (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Server → cíl (lokální): {{throughput}}"
-  },
-  "plugin": {
-    "name": "Správce souborů"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/da_DK.json b/plugins/file-manager/locales/translated/da_DK.json
deleted file mode 100644
index 91decbd5c..000000000
--- a/plugins/file-manager/locales/translated/da_DK.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Filer",
-    "sftp": "SFTP",
-    "openFileManager": "Åbn Filhåndtering"
-  },
-  "permissions": {
-    "use": {
-      "title": "Brug filhåndtering",
-      "description": "Gennemse, rediger og overfør filer via SFTP."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Aktivér Filhåndtering",
-        "description": "Gennemse og rediger filer på denne vært via SFTP."
-      },
-      "defaultPath": {
-        "label": "Standardsti"
-      },
-      "scpLegacy": {
-        "label": "SCP Legacy-tilstand"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Samtidige filoverførsler",
-        "description": "Hvor mange filer den side om side lokale/fjernstyrede administrator uploader eller downloader på samme tid. Sænk dette, hvis din server begrænser SFTP-kanaler."
-      },
-      "confirmBeforeTrash": {
-        "label": "Bekræft før du flytter filer til papirkurven",
-        "description": "Spørg før du flytter eksterne filer til papirkurven. Permanent sletning kræver stadig bekræftelse."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Filhåndtering"
-  },
-  "fileManager": {
-    "noHostSelected": "Ingen vært valgt",
-    "initializingEditor": "Initialiserer editor...",
-    "file": "Fil",
-    "folder": "Folder",
-    "uploadFile": "Upload fil",
-    "downloadFile": "Download",
-    "extractArchive": "Uddrag af arkivet",
-    "extractingArchive": "Udtrækker {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} blev udpakket",
-    "extractFailed": "Udpakning mislykkedes",
-    "compressFile": "Komprimer fil",
-    "compressFiles": "Komprimer filer",
-    "compressFilesDesc": "Komprimer {{count}} elementer til et arkiv",
-    "archiveName": "Arkivnavn",
-    "enterArchiveName": "Indtast arkivnavn...",
-    "compressionFormat": "Kompressionsformat",
-    "selectedFiles": "Valgte filer",
-    "andMoreFiles": "og {{count}} mere...",
-    "compress": "Sammenpresse",
-    "compressingFiles": "Komprimerer {{count}} elementer til {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} er oprettet",
-    "compressFailed": "Komprimering mislykkedes",
-    "edit": "Redigere",
-    "preview": "Forhåndsvisning",
-    "previous": "Tidligere",
-    "next": "Næste",
-    "pageXOfY": "Side {{current}} af {{total}}",
-    "zoomOut": "Zoom ud",
-    "zoomIn": "Zoom ind",
-    "newFile": "Ny fil",
-    "newFolder": "Ny mappe",
-    "rename": "Omdøb",
-    "uploading": "Uploader...",
-    "uploadingFile": "Uploader {{name}}...",
-    "uploadingChunk": "Uploader {{name}}: {{percent}}% (del {{chunk}} af {{total}})",
-    "fileName": "Filnavn",
-    "folderName": "Mappenavn",
-    "fileUploadedSuccessfully": "Filen \"{{name}}\" er blevet uploadet",
-    "failedToUploadFile": "Kunne ikke uploade filen",
-    "uploadingFolderFiles": "Uploader {{count}} fil(er)...",
-    "uploadedFolderFiles": "Uploadede {{count}} fil(er)",
-    "uploadedFolderPartial": "Upload af {{uploaded}} fil(er), {{failed}} mislykkedes",
-    "fileDownloadedSuccessfully": "Filen \"{{name}}\" er blevet downloadet",
-    "failedToDownloadFile": "Kunne ikke downloade filen",
-    "fileCreatedSuccessfully": "Filen \"{{name}}\" er blevet oprettet",
-    "folderCreatedSuccessfully": "Mappen \"{{name}}\" er blevet oprettet",
-    "failedToCreateItem": "Kunne ikke oprette elementet",
-    "operationFailed": "{{operation}} handling mislykkedes for {{name}}: {{error}}",
-    "failedToResolveSymlink": "Kunne ikke løse symbolsk link",
-    "itemsDeletedSuccessfully": "{{count}} elementer er blevet slettet",
-    "failedToDeleteItems": "Kunne ikke slette elementer",
-    "sudoPasswordRequired": "Administratoradgangskode påkrævet",
-    "enterSudoPassword": "Indtast sudo-adgangskoden for at fortsætte denne handling",
-    "sudoPassword": "Sudo-adgangskode",
-    "sudoOperationFailed": "Sudo-handlingen mislykkedes",
-    "sudoAuthFailed": "Sudo-godkendelse mislykkedes",
-    "dragFilesToUpload": "Slip filer her for at uploade",
-    "dropToUploadHere": "Slip for at uploade her",
-    "dropToDownloadHere": "Slip for at downloade her",
-    "localFiles": "Lokal",
-    "showLocalFiles": "Vis lokale filer (delt visning)",
-    "hideLocalFiles": "Skjul lokale filer",
-    "localHome": "Hjemmemappe",
-    "localPathPlaceholder": "Lokal mappesti",
-    "localShowHidden": "Vis skjulte filer",
-    "localHideHidden": "Skjul skjulte filer",
-    "localRevealInFileManager": "Vis i systemfilhåndtering",
-    "localCannotOpenFolder": "Kan ikke åbne mappen",
-    "localItemCount": "{{count}} elementer",
-    "localSelectedCount": "{{count}} valgt",
-    "back": "Tilbage",
-    "forward": "Forward",
-    "up": "Op",
-    "kind": "Slags",
-    "localUploadingProgress": "Uploader {{current}} af {{total}}",
-    "localDownloadingProgress": "Downloader {{current}} af {{total}}",
-    "localTransferInFlight": "{{count}} på én gang",
-    "localPreparingDownload": "Forbereder download...",
-    "localTransferCancelled": "Overførsel annulleret",
-    "localNothingToTransfer": "Intet at overføre",
-    "localUploadComplete": "Uploadede {{count}} fil(er)",
-    "localUploadFailed": "Upload mislykkedes",
-    "localUploadPartial": "Upload af {{done}} fil(er), {{failed}} mislykkedes",
-    "localDownloadComplete": "Downloadede {{count}} fil(er)",
-    "localDownloadFailed": "Download mislykkedes",
-    "localDownloadPartial": "Download af {{done}} fil(er), {{failed}} mislykkedes",
-    "localReplaceExistingPrompt": "{{count}} elementer findes allerede i denne mappe. Skal de erstattes?",
-    "localReplace": "Erstatte",
-    "localSkipExisting": "Springe",
-    "localSkippedExisting": "Springede {{count}} eksisterende element(er) over",
-    "localUnsafeNamesSkipped": "Springede {{count}} elementer over, hvis navne ikke kan bruges på denne computer",
-    "localOpen": "Åben",
-    "localOpenFolder": "Åbn mappe",
-    "localUploadToRemote": "Upload til server",
-    "localUploadToRemoteMany": "Upload {{count}} elementer til serveren",
-    "localMoveToTrash": "Flyt til papirkurven",
-    "localMoveToTrashMany": "Flyt {{count}} elementer til papirkurven",
-    "localTrashConfirmSingle": "Flytte \"{{name}}\" til papirkurven?",
-    "localTrashConfirmFolder": "Flytte mappen \"{{name}}\" og alt dens indhold til papirkurven?",
-    "localTrashConfirmMany": "Flytte {{count}} elementer til papirkurven?",
-    "localTrashed": "Flyttede {{count}} element(er) til papirkurven",
-    "localTrashFailed": "Kunne ikke flytte til papirkurven",
-    "localRenameFailed": "Omdøbning mislykkedes",
-    "localCreateFailed": "Kunne ikke oprette elementet",
-    "goToParentFolder": "Gå til overordnet mappe",
-    "resizeSidebar": "Træk for at ændre størrelsen på sidebjælken (dobbeltklik for at nulstille)",
-    "resizeLocalPane": "Træk for at ændre størrelsen på den lokale rude (dobbeltklik for at nulstille)",
-    "columns": "Kolonner",
-    "columnsHint": "Højreklik for at vælge kolonner",
-    "emptyFolder": "Denne mappe er tom",
-    "searchFiles": "Søg i filer...",
-    "upload": "Upload",
-    "selectHostToStart": "Vælg en vært for at starte filhåndtering",
-    "sshRequiredForFileManager": "Filhåndtering kræver SSH. Denne vært har ikke SSH aktiveret.",
-    "failedToConnect": "Kunne ikke oprette forbindelse til SSH",
-    "failedToLoadDirectory": "Kunne ikke indlæse mappen",
-    "noSSHConnection": "Ingen SSH-forbindelse tilgængelig",
-    "copy": "Kopi",
-    "cut": "Skære",
-    "paste": "Indsæt",
-    "copyPath": "Kopiér sti",
-    "copyPaths": "Kopier stier",
-    "delete": "Slet",
-    "properties": "Ejendomme",
-    "refresh": "Opfriske",
-    "downloadFiles": "Download {{count}} filer til browseren",
-    "copyFiles": "Kopiér {{count}} elementer",
-    "cutFiles": "Klip {{count}} elementer",
-    "deleteFiles": "Slet {{count}} elementer",
-    "filesCopiedToClipboard": "{{count}} elementer kopieret til udklipsholderen",
-    "filesCutToClipboard": "{{count}} elementer klippet til udklipsholder",
-    "pathCopiedToClipboard": "Sti kopieret til udklipsholder",
-    "pathsCopiedToClipboard": "{{count}} stier kopieret til udklipsholder",
-    "failedToCopyPath": "Kunne ikke kopiere stien til udklipsholderen",
-    "copyFolderLink": "Kopiér link til mappe",
-    "copyCurrentFolderLink": "Kopiér link til aktuel mappe",
-    "folderLinkCopied": "Mappelink kopieret til udklipsholder",
-    "failedToCopyFolderLink": "Kunne ikke kopiere mappelinket",
-    "movedItems": "Flyttede {{count}} elementer",
-    "failedToDeleteItem": "Kunne ikke slette elementet",
-    "itemRenamedSuccessfully": "{{type}} er omdøbt",
-    "failedToRenameItem": "Kunne ikke omdøbe elementet",
-    "download": "Download",
-    "openExternalEditor": "Åbn eksternt",
-    "chooseExternalEditor": "Vælg ekstern editor",
-    "externalEditorSelected": "Ekstern editor valgt",
-    "externalEditorDesktopOnly": "Ekstern editor er kun tilgængelig i desktop-appen",
-    "externalEditorOpened": "Åbnet i ekstern editor. Hvis du gemmer der, uploades ændringerne tilbage til serveren.",
-    "failedToOpenExternalEditor": "Kunne ikke åbne den eksterne editor",
-    "failedToSelectExternalEditor": "Kunne ikke vælge ekstern editor",
-    "permissions": "Tilladelser",
-    "size": "Størrelse",
-    "modified": "Ændret",
-    "path": "Sti",
-    "confirmDelete": "Er du sikker på, at du vil slette {{name}}?",
-    "permissionDenied": "Tilladelse nægtet",
-    "serverError": "Serverfejl",
-    "fileSavedSuccessfully": "Filen er gemt",
-    "failedToSaveFile": "Kunne ikke gemme filen",
-    "confirmDeleteSingleItem": "Er du sikker på, at du vil slette \"{{name}} \" permanent?",
-    "confirmDeleteMultipleItems": "Er du sikker på, at du vil slette {{count}} elementer permanent?",
-    "confirmDeleteMultipleItemsWithFolders": "Er du sikker på, at du vil slette {{count}} elementer permanent? Dette inkluderer mapper og deres indhold.",
-    "confirmDeleteFolder": "Er du sikker på, at du vil slette mappen \"{{name}}\" og alt dens indhold permanent?",
-    "permanentDeleteWarning": "Denne handling kan ikke fortrydes. Elementet/elementerne vil blive permanent slettet fra serveren.",
-    "moveToTrashWarning": "Elementet/elementerne vil blive flyttet til Termix-papirkurven og kan gendannes, inden opbevaringsperioden udløber.",
-    "itemsMovedToTrash": "{{count}} element(er) flyttet til papirkurven",
-    "trash": "Skrald",
-    "trashDescription": "Slettede elementer gemmes i {{days}} dag(e) på denne vært.",
-    "trashLoadFailed": "Kunne ikke indlæse papirkurven",
-    "trashEmpty": "Papirkurven er tom",
-    "trashRestore": "Gendan",
-    "trashRestored": "Gendannet {{name}}",
-    "trashRestoreFailed": "Elementet kunne ikke gendannes. Den oprindelige sti findes muligvis allerede.",
-    "trashDeletePermanently": "Slet permanent",
-    "trashDeleteConfirm": "Vil du slette {{name}}permanent? Dette kan ikke fortrydes.",
-    "trashPermanentlyDeleted": "Permanent slettet {{name}}",
-    "trashDeleteFailed": "Kunne ikke slette elementet permanent",
-    "trashEmptyAction": "Tøm papirkurven",
-    "trashEmptyConfirm": "Vil du slette alle elementer i papirkurven permanent? Dette kan ikke fortrydes.",
-    "trashEmptied": "Skraldespanden tømt",
-    "trashRetention": "Automatisk oprydning efter (dage)",
-    "trashRetentionSaved": "Papirkurvsopbevaring opdateret",
-    "trashRetentionFailed": "Kunne ikke opdatere opbevaring af papirkurven",
-    "trashUnavailableConfirm": "Dette element kan ikke flyttes til papirkurven, normalt fordi det er på et andet filsystem eller kræver forhøjede tilladelser. Slet det permanent i stedet?",
-    "recent": "Nylig",
-    "pinned": "Fastgjort",
-    "folderShortcuts": "Mappegenveje",
-    "failedToReconnectSSH": "Kunne ikke genoprette forbindelsen til SSH-sessionen",
-    "openTerminalHere": "Åbn terminalen her",
-    "run": "Løbe",
-    "openTerminalInFolder": "Åbn Terminal i denne mappe",
-    "openTerminalInFileLocation": "Åbn terminalen på filplaceringen",
-    "runningFile": "Løb - {{file}}",
-    "onlyRunExecutableFiles": "Kan kun køre eksekverbare filer",
-    "directories": "Kataloger",
-    "removedFromRecentFiles": "Fjernede \"{{name}}\" fra seneste filer",
-    "removeFailed": "Fjernelse mislykkedes",
-    "unpinnedSuccessfully": "\"{{name}}\" blev frigjort",
-    "unpinFailed": "Frigørelse mislykkedes",
-    "removedShortcut": "Fjernede genvejen \"{{name}}\"",
-    "removeShortcutFailed": "Fjernelse af genvej mislykkedes",
-    "clearedAllRecentFiles": "Rydde alle seneste filer",
-    "clearFailed": "Rydning mislykkedes",
-    "removeFromRecentFiles": "Fjern fra seneste filer",
-    "clearAllRecentFiles": "Ryd alle seneste filer",
-    "unpinFile": "Frigør fil",
-    "removeShortcut": "Fjern genvej",
-    "pinFile": "Fastgør fil",
-    "addToShortcuts": "Føj til genveje",
-    "pasteFailed": "Indsætning mislykkedes",
-    "noUndoableActions": "Ingen handlinger, der kan fortrydes",
-    "undoCopySuccess": "Fortrydt kopiering: Slettede {{count}} kopierede filer",
-    "undoCopyFailedDelete": "Fortryd mislykkedes: Kunne ikke slette nogen kopierede filer",
-    "undoCopyFailedNoInfo": "Fortryd mislykkedes: Kunne ikke finde kopierede filoplysninger",
-    "undoMoveSuccess": "Fortrydt flyttehandling: Flyttede {{count}} filer tilbage til den oprindelige placering",
-    "undoMoveFailedMove": "Fortryd mislykkedes: Kunne ikke flytte nogen filer tilbage",
-    "undoMoveFailedNoInfo": "Fortryd mislykkedes: Kunne ikke finde oplysninger om den flyttede fil",
-    "undoDeleteNotSupported": "Sletningen kan ikke fortrydes: Filerne er blevet permanent slettet fra serveren",
-    "undoTypeNotSupported": "Ikke-understøttet fortrydelseshandlingstype",
-    "undoOperationFailed": "Fortrydelseshandling mislykkedes",
-    "unknownError": "Ukendt fejl",
-    "confirm": "Bekræfte",
-    "find": "Finde...",
-    "replace": "Erstatte",
-    "downloadInstead": "Download i stedet",
-    "keyboardShortcuts": "Tastaturgenveje",
-    "searchAndReplace": "Søg og erstat",
-    "editing": "Redigering",
-    "search": "Søge",
-    "findNext": "Find næste",
-    "findPrevious": "Find forrige",
-    "save": "Spare",
-    "selectAll": "Vælg alle",
-    "undo": "Fortryd",
-    "redo": "Gentag",
-    "moveLineUp": "Flyt linje op",
-    "moveLineDown": "Flyt linje ned",
-    "toggleComment": "Slå kommentar til/fra",
-    "autoComplete": "Autofuldførelse",
-    "imageLoadError": "Billedet kunne ikke indlæses",
-    "startTyping": "Begynd at skrive...",
-    "unknownSize": "Ukendt størrelse",
-    "fileIsEmpty": "Filen er tom",
-    "largeFileWarning": "Advarsel om stor fil",
-    "largeFileWarningDesc": "Denne fil er {{size}} stor, hvilket kan forårsage problemer med ydeevnen, når den åbnes som tekst.",
-    "fileNotFoundAndRemoved": "Filen \"{{name}}\" blev ikke fundet og er blevet fjernet fra seneste/fastgjorte filer",
-    "failedToLoadFile": "Kunne ikke indlæse filen: {{error}}",
-    "serverErrorOccurred": "Der opstod en serverfejl. Prøv igen senere.",
-    "autoSaveFailed": "Automatisk lagring mislykkedes",
-    "fileAutoSaved": "Fil gemt automatisk",
-    "moveFileFailed": "Kunne ikke flytte {{name}}",
-    "moveOperationFailed": "Flytteoperationen mislykkedes",
-    "canOnlyCompareFiles": "Kan kun sammenligne to filer",
-    "comparingFiles": "Sammenligning af filer: {{file1}} og {{file2}}",
-    "dragFailed": "Trækhandlingen mislykkedes",
-    "filePinnedSuccessfully": "Filen \"{{name}}\" er blevet fastgjort",
-    "pinFileFailed": "Kunne ikke fastlåse filen",
-    "fileUnpinnedSuccessfully": "Filen \"{{name}}\" blev frigjort",
-    "unpinFileFailed": "Kunne ikke frigøre filen",
-    "shortcutAddedSuccessfully": "Mappens genvej \"{{name}}\" blev tilføjet",
-    "addShortcutFailed": "Kunne ikke tilføje genvej",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} elementer er blevet genanvendt",
-    "operationCompleted": "{{operation}} {{count}} elementer",
-    "downloadFileSuccess": "Fil {{name}} er blevet downloadet",
-    "downloadFileFailed": "Download mislykkedes",
-    "downloadingFile": "Downloader {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Flyt til {{name}}",
-    "diffCompareWith": "Differens sammenligning med {{name}}",
-    "dragOutsideToDownload": "Træk uden for vinduet for at downloade ({{count}} filer)",
-    "newFolderDefault": "NyMappe",
-    "newFileDefault": "Nyfil.txt",
-    "successfullyMovedItems": "{{count}} elementer er flyttet til {{target}}",
-    "move": "Flytte",
-    "searchInFile": "Søg i filen (Ctrl+F)",
-    "showKeyboardShortcuts": "Vis tastaturgenveje",
-    "decreaseFontSize": "Formindsk skriftstørrelsen",
-    "increaseFontSize": "Øg skriftstørrelsen",
-    "startWritingMarkdown": "Begynd at skrive dit indhold til nedskrivning...",
-    "loadingFileComparison": "Indlæser filsammenligning...",
-    "reload": "Genindlæs",
-    "compare": "Sammenligne",
-    "sideBySide": "Side om side",
-    "inline": "Indlejret",
-    "fileComparison": "Filsammenligning: {{file1}} vs. {{file2}}",
-    "fileTooLarge": "Filen er for stor (> 10 MB) og kan af sikkerhedsmæssige årsager ikke åbnes som tekst.",
-    "sshConnectionFailed": "SSH-forbindelse mislykkedes. Kontroller venligst din forbindelse til {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Kunne ikke indlæse filen: {{error}}",
-    "connecting": "Forbinder...",
-    "connectedSuccessfully": "Forbindelsen er oprettet",
-    "totpVerificationFailed": "TOTP-bekræftelse mislykkedes",
-    "browserSignInFailed": "Log ind mislykkedes. Prøv igen.",
-    "authenticationFailed": "Godkendelse mislykkedes",
-    "incorrectPassphrase": "Forkert adgangskode. Prøv igen.",
-    "verificationCodePrompt": "Bekræftelseskode:",
-    "changePermissions": "Ændre tilladelser",
-    "currentPermissions": "Nuværende tilladelser",
-    "owner": "Ejer",
-    "group": "Gruppe",
-    "others": "Andre",
-    "read": "Læse",
-    "write": "Skrive",
-    "execute": "Udfør",
-    "permissionsChangedSuccessfully": "Tilladelserne er ændret",
-    "failedToChangePermissions": "Kunne ikke ændre tilladelser",
-    "name": "Navn",
-    "sortByName": "Navn",
-    "sortByDate": "Dato ændret",
-    "sortBySize": "Størrelse",
-    "ascending": "Stigende",
-    "descending": "Faldende",
-    "root": "Rod",
-    "new": "Ny",
-    "sortBy": "Sortér efter",
-    "items": "Varer",
-    "selected": "Valgt",
-    "editor": "Redaktør",
-    "octal": "Oktal",
-    "storage": "Opbevaring",
-    "disk": "Disk",
-    "used": "Brugt",
-    "of": "af",
-    "toggleSidebar": "Slå sidebjælken til/fra",
-    "compactLayout": "Brug kompakt layout",
-    "comfortableLayout": "Brug et komfortabelt layout",
-    "cannotLoadPdf": "Kan ikke indlæse PDF'en",
-    "pdfLoadError": "Der opstod en fejl under indlæsning af denne PDF-fil.",
-    "loadingPdf": "Indlæser PDF-fremviser...",
-    "loadingPage": "Indlæser side...",
-    "cancel": "Ophæve",
-    "copiedItems_one": "Kopieret {{count}} element",
-    "copiedItems_other": "Kopierede {{count}} elementer",
-    "deleteCopiedFileFailed": "Kunne ikke slette kopien af {{name}}: {{error}}",
-    "dragMovedItems_one": "Flyttede {{count}} element til {{target}}",
-    "dragMovedItems_other": "Flyttede {{count}} elementer til {{target}}",
-    "moveBackFileFailed": "Kunne ikke flytte {{name}} tilbage: {{error}}",
-    "terminal": "Terminal: {{host}} ({{path}})",
-    "dragToDesktop": "Træk {{name}} til skrivebordet",
-    "dragFilesToDesktop": "Træk {{count}} filer til skrivebordet",
-    "folderDragUnsupported": "Det understøttes endnu ikke at trække mapper til skrivebordet",
-    "saveToDesktopFailed": "Gemning mislykkedes: {{error}}",
-    "dragFailedDetail": "Træk mislykkedes: {{error}}",
-    "videoUnsupported": "Din browser kan ikke afspille dette videoformat.",
-    "downloadToPlay": "Download for at afspille det et andet sted",
-    "cannotPreviewType": "Kan ikke forhåndsvise denne filtype",
-    "cannotPreviewTypeHint": "Denne filtype har ingen forhåndsvisning. Download den for at åbne den i en anden app.",
-    "loadingFile": "Indlæser fil...",
-    "loadingImage": "Indlæser billede...",
-    "loadingEditor": "Indlæser editor...",
-    "loadingPreview": "Indlæser forhåndsvisning...",
-    "loadingAudio": "Indlæser lydafspiller...",
-    "emptyPreview": "Intet at forhåndsvise endnu...",
-    "revert": "Vende tilbage",
-    "openAsText": "Åbn som tekst",
-    "confirmOpenAsText": "Vil du fortsætte med at åbne denne fil som tekst? Dette kan gøre din browser langsommere."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "Overfør filer mellem to SSH-værter.",
-    "sourceServer": "Kildeserver",
-    "destinationServer": "Destinationsserver",
-    "selectHost": "Vælg vært",
-    "noHostSelected": "Ingen vært valgt",
-    "move": "Flytte",
-    "copy": "Kopi",
-    "upload": "Upload",
-    "itemsSelected": "{{count}} element valgt",
-    "itemsSelected_other": "{{count}} elementer valgt",
-    "ready": "Parat",
-    "loadingHosts": "Indlæser værter...",
-    "name": "Navn",
-    "modified": "Ændret",
-    "size": "Størrelse",
-    "noFiles": "Ingen filer",
-    "open": "Åben",
-    "up": "Op",
-    "refresh": "Opfriske",
-    "copyToTarget": "Kopiér til målmappe",
-    "rename": "Omdøb",
-    "delete": "Slet",
-    "editPermissions": "Rediger tilladelser",
-    "createNewFolder": "Opret ny mappe",
-    "deleteSelectedItems": "Slet valgte elementer",
-    "deleteConfirm": "Slet {{count}} det valgte element?",
-    "deleteConfirm_other": "Slet {{count}} valgte elementer?",
-    "cancel": "Ophæve",
-    "save": "Spare",
-    "folderCreated": "Mappe oprettet",
-    "itemRenamed": "Varen er omdøbt",
-    "actionFailed": "Handlingen mislykkedes",
-    "itemsDeleted": "{{count}} element slettet",
-    "itemsDeleted_other": "{{count}} elementer slettet",
-    "deleteFailed": "Sletning mislykkedes",
-    "permissionsUpdated": "Tilladelser opdateret",
-    "noRemoteSessionConnected": "Ingen fjernsession tilsluttet",
-    "failedToListFiles": "Kunne ikke liste filer",
-    "failedToRefresh": "Kunne ikke opdatere",
-    "destinationInsideSource": "Destinationen må ikke være inden for den valgte kildesti.",
-    "sameHostNoOp": "Kilde og destination er den samme mappe."
-  },
-  "hosts": {
-    "fileManager": "Filhåndtering",
-    "fileManagerUrlCopied": "URL'en til filhåndtering er kopieret",
-    "copyFileManagerUrlAction": "Kopiér URL til filhåndtering",
-    "docsLink": "Se dokumenter",
-    "hostNotFound": "Værten blev ikke fundet",
-    "loadingHost": "Indlæser vært..."
-  },
-  "onboarding": {
-    "feature_files": "Filhåndtering",
-    "feature_files_desc": "Gennemse, upload, download og rediger filer via SFTP uden at forlade appen."
-  },
-  "terminal": {
-    "runTitle": "Kører {{command}} - {{host}}",
-    "terminalTitle": "Terminal - {{host}}",
-    "terminalWithPath": "Terminal - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Gennemse destinationsmapper",
-    "browsePathError": "Kunne ikke åbne denne sti på destinationsværten.",
-    "browsePathWillBeCreated": "Denne mappe findes ikke endnu. Den vil blive oprettet, når overførslen starter.",
-    "cancel": "Ophæve",
-    "cleanupDestFiles": "Oprydningsdestination",
-    "cleanupDestFilesError": "Oprydning mislykkedes",
-    "cleanupDestFilesNothing": "Intet at rydde op på destinationen",
-    "cleanupDestFilesPartial": "Nogle delvise filer kunne ikke fjernes",
-    "cleanupDestFilesSuccess": "Fjernede delvise filer fra destinationen",
-    "confirmCopy": "Kopi",
-    "confirmMove": "Flytte",
-    "copyFolderToHost": "Kopiér mappe til vært…",
-    "copyItemsToHost": "Kopiér {{count}} elementer til at være vært for…",
-    "copyToHost": "Kopiér til vært…",
-    "destinationPath": "Destinationssti",
-    "destMustBeDirectory": "Destinationen skal være en mappe for overførsler af flere elementer",
-    "goUp": "Gå op",
-    "hostAuthRequired": "Godkendelse kræves. Åbn først Filhåndtering på denne vært",
-    "hostConnecting": "Forbinder…",
-    "hostConnectionFailed": "Forbindelsen mislykkedes",
-    "hostDisconnected": "Ikke forbundet",
-    "hostReady": "Parat",
-    "itemsSummary": "{{count}} elementer",
-    "jumpHostLimitation": "Begge værter skal kunne nås fra Termix-serveren. Direkte vært-til-vært-routing understøttes ikke.",
-    "methodAuto": "Bil",
-    "methodAutoHint": "Vælger tar eller SFTP pr. fil baseret på antal filer, størrelse og komprimerbarhed. Enkeltfiler bruger altid streaming SFTP.",
-    "methodItemSftp": "SFTP pr. fil",
-    "methodItemSftpHint": "Overfør hver fil individuelt via SFTP. Fungerer på alle værter, inklusive Windows.",
-    "methodItemSftpLimitation": "Hver fil bruger den samme SFTP-strøm som en enkelt filkopi, én efter én. Status kombineres på tværs af alle filer, så bjælken bevæger sig langsomt under store filer.",
-    "methodLabel": "Overførselsmetode",
-    "methodPreviewError": "Kunne ikke forhåndsvise overførselsmetoden. Serveren vil stadig vælge en metode, når du starter.",
-    "methodPreviewLoading": "Beregning af overførselsmetode…",
-    "methodPreviewScanSummary": "{{fileCount}} filer, {{totalSize}} i alt (scannet på kildevært).",
-    "methodPreviewWillUseItemSftp": "Vil bruge: SFTP pr. fil",
-    "methodPreviewWillUseTar": "Vil bruge: Tar-arkiv",
-    "methodReason": {
-      "user_item_sftp": "Du valgte SFTP pr. fil.",
-      "user_tar": "Du valgte tar-arkivet.",
-      "tar_unavailable": "Tar er ikke tilgængelig på den ene eller begge værter, så SFTP pr. fil vil blive brugt i stedet.",
-      "windows_host": "En Windows-vært er involveret, så tar bruges ikke.",
-      "auto_multi_large": "Auto: flere filer inklusive en stor fil ({{largestSize}}) med komprimerbare data. Tar samler dem i én overførsel.",
-      "auto_single_large_in_archive": "Auto: én stor fil ({{largestSize}}) i dette sæt, så SFTP pr. fil.",
-      "auto_many_incompressible": "Auto: for det meste inkomprimerbare data, så SFTP pr. fil.",
-      "auto_many_files": "Auto: mange filer ({{fileCount}}), tar reducerer overhead pr. fil.",
-      "auto_default": "Auto: SFTP pr. fil for dette sæt."
-    },
-    "methodTar": "Tar-arkiv",
-    "methodTarHint": "Komprimer ved kildekode, overfør ét arkiv, udpak ved destination. Kræver tar på begge Unix-værter.",
-    "metricsCompress": "Komprimer på kilde: {{duration}}",
-    "metricsExtract": "Udtræk på destination: {{duration}}",
-    "metricsPrepare": "Forbered destination: {{duration}}",
-    "metricsRouteBenchmark": "Ruteprobe: direkte {{direct}}, relæ {{relay}}",
-    "metricsSourceDelete": "Fjern fra kilde: {{duration}}",
-    "metricsTotal": "I alt: {{duration}}",
-    "metricsTransfer": "End-to-end: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 verificeret: {{duration}}",
-    "moveFolderToHost": "Flyt mappe til vært…",
-    "moveItemsToHost": "Flyt {{count}} elementer til at være vært for…",
-    "moveToHost": "Flyt til vært…",
-    "noHostsConnected": "Ingen andre filhåndteringsværter tilgængelige.",
-    "noHostsConnectedHint": "Tilføj en anden SSH-vært med Filhåndtering aktiveret i Værtshåndtering.",
-    "parallelSegmentsHint": "Store filer opdeles i bidder på 256 MB. Flere baner bruger separate forbindelser (f.eks. at starte flere overførsler) for at opnå en højere samlet gennemløbshastighed.",
-    "parallelSegmentsLabel": "Parallelle overførselsbaner",
-    "parallelSegmentsOption": "{{count}} baner",
-    "progressBenchmarking": "Valg af den hurtigste overførselsrute…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Ophæve",
-    "progressCancelling": "Annullerer…",
-    "progressCompressing": "Komprimering på kildevært…",
-    "progressExtracting": "Udpakning på destination…",
-    "progressItems": "{{current}} / {{total}} filer",
-    "progressReconnecting": "Genopretter forbindelse…",
-    "progressStalled": "Standset",
-    "progressTotalSpeed": "{{speed}} i alt ({{lanes}} baner)",
-    "progressTransferring": "Overførsel af data…",
-    "progressTransferringItems": "Overførsel af filer ({{current}} af {{total}})…",
-    "progressVerifying": "Bekræfter filintegritet…",
-    "recentDestinations": "Seneste destinationer",
-    "resumedHint": "Genoprettet forbindelse til en aktiv overførsel, der er startet i et andet vindue.",
-    "retryTransfer": "Prøv igen",
-    "retryTransferError": "Genforsøg mislykkedes",
-    "selectDestinationHost": "Vælg destinationsvært",
-    "transferCancelled": "Overførsel annulleret",
-    "transferCancelledCopyHint": "Delvise filer kan forblive på destinationen.",
-    "transferCancelledMoveHint": "Delvise filer kan forblive på destinationen. Kildefilerne blev ikke fjernet.",
-    "transferError": "Overførslen mislykkedes",
-    "transferFailedRetryHint": "Delvise data blev gemt på destinationen. Forsøget genoptages, når forbindelsen er tilbage.",
-    "transferPartialHint": "Kunne ikke overføre: {{paths}}",
-    "transferSuccess": "Overførsel fuldført",
-    "metricsHopSourceRead": "Kilde → server: {{throughput}}",
-    "metricsHopDestSftpWrite": "Server → destination (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Server → destination (lokal): {{throughput}}"
-  },
-  "plugin": {
-    "name": "Filhåndtering"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/de_DE.json b/plugins/file-manager/locales/translated/de_DE.json
deleted file mode 100644
index e24d83fab..000000000
--- a/plugins/file-manager/locales/translated/de_DE.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Dateien",
-    "sftp": "SFTP",
-    "openFileManager": "Dateimanager öffnen"
-  },
-  "permissions": {
-    "use": {
-      "title": "Verwenden Sie den Dateimanager.",
-      "description": "Dateien per SFTP durchsuchen, bearbeiten und übertragen."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Dateimanager aktivieren",
-        "description": "Dateien auf diesem Host können über SFTP durchsucht und bearbeitet werden."
-      },
-      "defaultPath": {
-        "label": "Standardpfad"
-      },
-      "scpLegacy": {
-        "label": "SCP-Legacy-Modus"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Gleichzeitige Dateiübertragungen",
-        "description": "Wie viele Dateien der lokale/Remote-Manager gleichzeitig hoch- oder herunterlädt. Verringern Sie diesen Wert, wenn Ihr Server die Anzahl der SFTP-Kanäle begrenzt."
-      },
-      "confirmBeforeTrash": {
-        "label": "Bitte prüfen Sie dies, bevor Sie Dateien in den Papierkorb verschieben.",
-        "description": "Vor dem Verschieben von Dateien in den Papierkorb fragen. Auch für das endgültige Löschen ist eine Bestätigung erforderlich."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Dateimanager"
-  },
-  "fileManager": {
-    "noHostSelected": "Kein Host ausgewählt",
-    "initializingEditor": "Editor wird initialisiert...",
-    "file": "Datei",
-    "folder": "Ordner",
-    "uploadFile": "Datei hochladen",
-    "downloadFile": "Herunterladen",
-    "extractArchive": "Archiv entpacken",
-    "extractingArchive": "Extrahiere {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} erfolgreich extrahiert",
-    "extractFailed": "Extrahieren fehlgeschlagen",
-    "compressFile": "Datei komprimieren",
-    "compressFiles": "Dateien komprimieren",
-    "compressFilesDesc": "{{count}} Elemente in ein Archiv komprimieren",
-    "archiveName": "Archivname",
-    "enterArchiveName": "Archivname eingeben...",
-    "compressionFormat": "Komprimierungsformat",
-    "selectedFiles": "Ausgewählte Dateien",
-    "andMoreFiles": "und {{count}} weitere...",
-    "compress": "Komprimieren",
-    "compressingFiles": "Komprimiere {{count}} Elemente in {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} erfolgreich erstellt",
-    "compressFailed": "Komprimierung fehlgeschlagen",
-    "edit": "Bearbeiten",
-    "preview": "Vorschau",
-    "previous": "Zurück",
-    "next": "Weiter",
-    "pageXOfY": "Seite {{current}} von {{total}}",
-    "zoomOut": "Verkleinern",
-    "zoomIn": "Vergrößern",
-    "newFile": "Neue Datei",
-    "newFolder": "Neuer Ordner",
-    "rename": "Umbenennen",
-    "uploading": "Lade hoch...",
-    "uploadingFile": "Lade {{name}} hoch...",
-    "uploadingChunk": "Hochladen von {{name}}: {{percent}}% (Teil {{chunk}} von {{total}})",
-    "fileName": "Dateiname",
-    "folderName": "Ordnername",
-    "fileUploadedSuccessfully": "Datei \"{{name}}\" erfolgreich hochgeladen",
-    "failedToUploadFile": "Hochladen der Datei fehlgeschlagen",
-    "uploadingFolderFiles": "Uploading {{count}} file(s)...",
-    "uploadedFolderFiles": "{{count}} Datei(en) erfolgreich hochgeladen",
-    "uploadedFolderPartial": "Hochladen von {{uploaded}} Datei(en), {{failed}} fehlgeschlagen",
-    "fileDownloadedSuccessfully": "Datei \"{{name}}\" erfolgreich heruntergeladen",
-    "failedToDownloadFile": "Herunterladen der Datei fehlgeschlagen",
-    "fileCreatedSuccessfully": "Datei \"{{name}}\" erfolgreich erstellt",
-    "folderCreatedSuccessfully": "Ordner \"{{name}}\" erfolgreich erstellt",
-    "failedToCreateItem": "Fehler beim Erstellen des Elements",
-    "operationFailed": "{{operation}}-Operation für {{name}} fehlgeschlagen: {{error}}",
-    "failedToResolveSymlink": "Fehler beim Auflösen des Symlinks",
-    "itemsDeletedSuccessfully": "{{count}} Elemente erfolgreich gelöscht",
-    "failedToDeleteItems": "Fehler beim Löschen der Elemente",
-    "sudoPasswordRequired": "Sudo-Passwort erforderlich",
-    "enterSudoPassword": "Sudo-Passwort eingeben, um diesen Vorgang fortzusetzen",
-    "sudoPassword": "Sudo-Passwort",
-    "sudoOperationFailed": "Sudo-Vorgang fehlgeschlagen",
-    "sudoAuthFailed": "Sudo-Authentifizierung fehlgeschlagen",
-    "dragFilesToUpload": "Dateien hier ablegen, um sie hochzuladen",
-    "dropToUploadHere": "Hier zum Hochladen ablegen",
-    "dropToDownloadHere": "Hier klicken zum Herunterladen",
-    "localFiles": "Lokal",
-    "showLocalFiles": "Lokale Dateien anzeigen (geteilte Ansicht)",
-    "hideLocalFiles": "Lokale Dateien ausblenden",
-    "localHome": "Startseitenordner",
-    "localPathPlaceholder": "Lokaler Ordnerpfad",
-    "localShowHidden": "Versteckte Dateien anzeigen",
-    "localHideHidden": "Versteckte Dateien ausblenden",
-    "localRevealInFileManager": "Im Systemdateimanager anzeigen",
-    "localCannotOpenFolder": "Ordner kann nicht geöffnet werden",
-    "localItemCount": "{{count}} Elemente",
-    "localSelectedCount": "{{count}} ausgewählt",
-    "back": "Zurück",
-    "forward": "Nach vorne",
-    "up": "Hoch",
-    "kind": "Art",
-    "localUploadingProgress": "Hochladen von {{current}} von {{total}}",
-    "localDownloadingProgress": "Herunterladen von {{current}} von {{total}}",
-    "localTransferInFlight": "{{count}} gleichzeitig",
-    "localPreparingDownload": "Download wird vorbereitet...",
-    "localTransferCancelled": "Übertragung abgebrochen",
-    "localNothingToTransfer": "Nichts zu übertragen",
-    "localUploadComplete": "Es wurden {{count}} Dateien hochgeladen",
-    "localUploadFailed": "Hochladen fehlgeschlagen",
-    "localUploadPartial": "Hochladen von {{done}} Datei(en), {{failed}} fehlgeschlagen",
-    "localDownloadComplete": "Heruntergeladene Datei(en) {{count}}",
-    "localDownloadFailed": "Download fehlgeschlagen",
-    "localDownloadPartial": "Download der Datei(en) {{done}} , {{failed}} fehlgeschlagen",
-    "localReplaceExistingPrompt": "{{count}} In diesem Ordner sind bereits Elemente vorhanden. Sollen sie ersetzt werden?",
-    "localReplace": "Ersetzen",
-    "localSkipExisting": "Überspringen",
-    "localSkippedExisting": "Übersprungene {{count}} vorhandene Elemente",
-    "localUnsafeNamesSkipped": "{{count}} Elemente übersprungen, deren Namen auf diesem Computer nicht verwendet werden können",
-    "localOpen": "Offen",
-    "localOpenFolder": "Ordner öffnen",
-    "localUploadToRemote": "Auf Server hochladen",
-    "localUploadToRemoteMany": "{{count}} Elemente auf den Server hochladen",
-    "localMoveToTrash": "In den Papierkorb verschieben",
-    "localMoveToTrashMany": "Verschiebe {{count}} Elemente in den Papierkorb.",
-    "localTrashConfirmSingle": "\"{{name}}\" in den Papierkorb verschieben?",
-    "localTrashConfirmFolder": "Den Ordner \"{{name}}\" und seinen gesamten Inhalt in den Papierkorb verschieben?",
-    "localTrashConfirmMany": "{{count}} Elemente in den Papierkorb verschieben?",
-    "localTrashed": "{{count}} Elemente wurden in den Papierkorb verschoben.",
-    "localTrashFailed": "Konnte nicht in den Mülleimer bewegt werden.",
-    "localRenameFailed": "Umbenennen fehlgeschlagen",
-    "localCreateFailed": "Element konnte nicht erstellt werden",
-    "goToParentFolder": "Gehe zum übergeordneten Ordner",
-    "resizeSidebar": "Ziehen Sie, um die Seitenleiste in der Größe anzupassen (Doppelklick zum Zurücksetzen).",
-    "resizeLocalPane": "Ziehen Sie, um die Größe des lokalen Fensters zu ändern (Doppelklick zum Zurücksetzen).",
-    "columns": "Spalten",
-    "columnsHint": "Klicken Sie mit der rechten Maustaste, um Spalten auszuwählen.",
-    "emptyFolder": "Dieser Ordner ist leer",
-    "searchFiles": "Dateien durchsuchen...",
-    "upload": "Hochladen",
-    "selectHostToStart": "Wählen Sie einen Host aus, um die Dateiverwaltung zu starten",
-    "sshRequiredForFileManager": "Dateimanager erfordert SSH. SSH ist auf diesem Host nicht aktiviert.",
-    "failedToConnect": "Verbindung zu SSH fehlgeschlagen",
-    "failedToLoadDirectory": "Fehler beim Laden des Verzeichnisses",
-    "noSSHConnection": "Keine SSH-Verbindung verfügbar",
-    "copy": "Kopieren",
-    "cut": "Ausschneiden",
-    "paste": "Einfügen",
-    "copyPath": "Pfad kopieren",
-    "copyPaths": "Pfade kopieren",
-    "delete": "Löschen",
-    "properties": "Eigenschaften",
-    "refresh": "Aktualisieren",
-    "downloadFiles": "{{count}} Dateien über den Browser herunterladen",
-    "copyFiles": "{{count}} Elemente kopieren",
-    "cutFiles": "{{count}} Elemente ausschneiden",
-    "deleteFiles": "{{count}} Elemente löschen",
-    "filesCopiedToClipboard": "{{count}} Elemente in die Zwischenablage kopiert",
-    "filesCutToClipboard": "{{count}} Elemente in die Zwischenablage ausgeschnitten",
-    "pathCopiedToClipboard": "Pfad in die Zwischenablage kopiert",
-    "pathsCopiedToClipboard": "{{count}} Pfade in die Zwischenablage kopiert",
-    "failedToCopyPath": "Fehler beim Kopieren des Pfads in die Zwischenablage",
-    "copyFolderLink": "Link zum Ordner kopieren",
-    "copyCurrentFolderLink": "Link zum aktuellen Ordner kopieren",
-    "folderLinkCopied": "Ordner-Link in die Zwischenablage kopiert",
-    "failedToCopyFolderLink": "Fehler beim Kopieren des Ordner-Links",
-    "movedItems": "{{count}} Elemente verschoben",
-    "failedToDeleteItem": "Fehler beim Löschen des Elements",
-    "itemRenamedSuccessfully": "{{type}} erfolgreich umbenannt",
-    "failedToRenameItem": "Fehler beim Umbenennen des Elements",
-    "download": "Herunterladen",
-    "openExternalEditor": "Extern öffnen",
-    "chooseExternalEditor": "Externen Editor auswählen",
-    "externalEditorSelected": "Externer Editor ausgewählt",
-    "externalEditorDesktopOnly": "Externer Editor ist nur in der Desktop-App verfügbar",
-    "externalEditorOpened": "Im externen Editor geöffnet. Beim Speichern werden die Änderungen auf den Server hochgeladen.",
-    "failedToOpenExternalEditor": "Fehler beim Öffnen des externen Editors",
-    "failedToSelectExternalEditor": "Fehler bei der Auswahl des externen Editors",
-    "permissions": "Berechtigungen",
-    "size": "Größe",
-    "modified": "Geändert",
-    "path": "Pfad",
-    "confirmDelete": "Sind Sie sicher, dass Sie {{name}} löschen möchten?",
-    "permissionDenied": "Zugriff verweigert",
-    "serverError": "Serverfehler",
-    "fileSavedSuccessfully": "Datei erfolgreich gespeichert",
-    "failedToSaveFile": "Fehler beim Speichern der Datei",
-    "confirmDeleteSingleItem": "Sind Sie sicher, dass Sie \"{{name}}\" endgültig löschen möchten?",
-    "confirmDeleteMultipleItems": "Sind Sie sicher, dass Sie {{count}} Elemente endgültig löschen möchten?",
-    "confirmDeleteMultipleItemsWithFolders": "Sind Sie sicher, dass Sie {{count}} Elemente endgültig löschen möchten? Dies beinhaltet auch Ordner und deren Inhalte.",
-    "confirmDeleteFolder": "Sind Sie sicher, dass Sie den Ordner \"{{name}}\" und seinen gesamten Inhalt endgültig löschen möchten?",
-    "permanentDeleteWarning": "Diese Aktion kann nicht rückgängig gemacht werden. Die Elemente werden endgültig vom Server gelöscht.",
-    "moveToTrashWarning": "Die Elemente werden in den Termix-Papierkorb verschoben und können vor Ablauf der Aufbewahrungsfrist wiederhergestellt werden.",
-    "itemsMovedToTrash": "{{count}} Elemente in den Papierkorb verschoben",
-    "trash": "Müll",
-    "trashDescription": "Gelöschte Elemente werden auf diesem Host für {{days}} Tage aufbewahrt.",
-    "trashLoadFailed": "Der Papierkorb konnte nicht geladen werden.",
-    "trashEmpty": "Der Mülleimer ist leer",
-    "trashRestore": "Wiederherstellen",
-    "trashRestored": "Wiederhergestellt {{name}}",
-    "trashRestoreFailed": "Das Element konnte nicht wiederhergestellt werden. Der ursprüngliche Pfad existiert möglicherweise bereits.",
-    "trashDeletePermanently": "Endgültig löschen",
-    "trashDeleteConfirm": "{{name}}endgültig löschen? Dies kann nicht rückgängig gemacht werden.",
-    "trashPermanentlyDeleted": "Endgültig gelöscht {{name}}",
-    "trashDeleteFailed": "Fehler beim endgültigen Löschen des Eintrags",
-    "trashEmptyAction": "Mülleimer leeren",
-    "trashEmptyConfirm": "Alle Elemente im Papierkorb endgültig löschen? Dies kann nicht rückgängig gemacht werden.",
-    "trashEmptied": "Müll geleert",
-    "trashRetention": "Automatische Bereinigung nach (Tagen)",
-    "trashRetentionSaved": "Müllspeicherung aktualisiert",
-    "trashRetentionFailed": "Aktualisierung der Papierkorb-Aufbewahrung fehlgeschlagen",
-    "trashUnavailableConfirm": "Dieses Element kann nicht in den Papierkorb verschoben werden, üblicherweise weil es sich auf einem anderen Dateisystem befindet oder erhöhte Berechtigungen erfordert. Soll es stattdessen endgültig gelöscht werden?",
-    "recent": "Zuletzt verwendet",
-    "pinned": "Angepinnt",
-    "folderShortcuts": "Ordner-Verknüpfungen",
-    "failedToReconnectSSH": "Fehler beim Wiederherstellen der SSH-Sitzung",
-    "openTerminalHere": "Terminal hier öffnen",
-    "run": "Ausführen",
-    "openTerminalInFolder": "Terminal in diesem Ordner öffnen",
-    "openTerminalInFileLocation": "Terminal am Dateispeicherort öffnen",
-    "runningFile": "Läuft - {{file}}",
-    "onlyRunExecutableFiles": "Nur ausführbare Dateien können ausgeführt werden",
-    "directories": "Verzeichnisse",
-    "removedFromRecentFiles": "\"{{name}}\" aus den zuletzt verwendeten Dateien entfernt",
-    "removeFailed": "Entfernen fehlgeschlagen",
-    "unpinnedSuccessfully": "\"{{name}}\" erfolgreich gelöst",
-    "unpinFailed": "Lösen fehlgeschlagen",
-    "removedShortcut": "Verknüpfung \"{{name}}\" entfernt",
-    "removeShortcutFailed": "Entfernen der Verknüpfung fehlgeschlagen",
-    "clearedAllRecentFiles": "Alle zuletzt verwendeten Dateien gelöscht",
-    "clearFailed": "Löschen fehlgeschlagen",
-    "removeFromRecentFiles": "Aus zuletzt verwendeten Dateien entfernen",
-    "clearAllRecentFiles": "Alle zuletzt verwendeten Dateien löschen",
-    "unpinFile": "Datei lösen",
-    "removeShortcut": "Verknüpfung entfernen",
-    "pinFile": "Datei anheften",
-    "addToShortcuts": "Zu Verknüpfungen hinzufügen",
-    "pasteFailed": "Einfügen fehlgeschlagen",
-    "noUndoableActions": "Keine rückgängig zu machenden Aktionen",
-    "undoCopySuccess": "Kopiervorgang rückgängig gemacht: {{count}} kopierte Dateien gelöscht",
-    "undoCopyFailedDelete": "Rückgängig fehlgeschlagen: Konnte keine kopierten Dateien löschen",
-    "undoCopyFailedNoInfo": "Rückgängig fehlgeschlagen: Informationen zu kopierten Dateien nicht gefunden",
-    "undoMoveSuccess": "Verschiebevorgang rückgängig gemacht: {{count}} Dateien an den ursprünglichen Ort zurückverschoben",
-    "undoMoveFailedMove": "Rückgängig fehlgeschlagen: Konnte keine Dateien zurückverschieben",
-    "undoMoveFailedNoInfo": "Rückgängig fehlgeschlagen: Informationen zu verschobenen Dateien nicht gefunden",
-    "undoDeleteNotSupported": "Löschvorgang kann nicht rückgängig gemacht werden: Dateien wurden dauerhaft vom Server gelöscht",
-    "undoTypeNotSupported": "Nicht unterstützter Typ für Rückgängig-Vorgang",
-    "undoOperationFailed": "Rückgängig-Vorgang fehlgeschlagen",
-    "unknownError": "Unbekannter Fehler",
-    "confirm": "Bestätigen",
-    "find": "Suchen...",
-    "replace": "Ersetzen",
-    "downloadInstead": "Stattdessen herunterladen",
-    "keyboardShortcuts": "Tastaturkürzel",
-    "searchAndReplace": "Suchen & Ersetzen",
-    "editing": "Bearbeiten",
-    "search": "Suchen",
-    "findNext": "Weitersuchen",
-    "findPrevious": "Vorheriges suchen",
-    "save": "Speichern",
-    "selectAll": "Alles auswählen",
-    "undo": "Rückgängig",
-    "redo": "Wiederholen",
-    "moveLineUp": "Zeile nach oben verschieben",
-    "moveLineDown": "Zeile nach unten verschieben",
-    "toggleComment": "Kommentar umschalten",
-    "autoComplete": "Autovervollständigung",
-    "imageLoadError": "Bild konnte nicht geladen werden",
-    "startTyping": "Mit der Eingabe beginnen...",
-    "unknownSize": "Unbekannte Größe",
-    "fileIsEmpty": "Datei ist leer",
-    "largeFileWarning": "Warnung bei großen Dateien",
-    "largeFileWarningDesc": "Diese Datei ist {{size}} groß, was beim Öffnen als Text zu Leistungsproblemen führen kann.",
-    "fileNotFoundAndRemoved": "Datei \"{{name}}\" nicht gefunden und wurde aus den zuletzt verwendeten/angehefteten Dateien entfernt.",
-    "failedToLoadFile": "Datei konnte nicht geladen werden: {{error}}",
-    "serverErrorOccurred": "Ein Serverfehler ist aufgetreten. Bitte versuchen Sie es später erneut.",
-    "autoSaveFailed": "Automatisches Speichern fehlgeschlagen",
-    "fileAutoSaved": "Datei automatisch gespeichert",
-    "moveFileFailed": "Verschieben von {{name}} fehlgeschlagen",
-    "moveOperationFailed": "Verschiebevorgang fehlgeschlagen",
-    "canOnlyCompareFiles": "Es können nur zwei Dateien verglichen werden",
-    "comparingFiles": "Vergleiche Dateien: {{file1}} und {{file2}}",
-    "dragFailed": "Ziehvorgang fehlgeschlagen",
-    "filePinnedSuccessfully": "Datei \"{{name}}\" wurde erfolgreich angeheftet",
-    "pinFileFailed": "Anheften der Datei fehlgeschlagen",
-    "fileUnpinnedSuccessfully": "Datei \"{{name}}\" wurde erfolgreich abgeheftet",
-    "unpinFileFailed": "Loslösen der Datei fehlgeschlagen",
-    "shortcutAddedSuccessfully": "Ordnerverknüpfung \"{{name}}\" erfolgreich hinzugefügt",
-    "addShortcutFailed": "Hinzufügen der Verknüpfung fehlgeschlagen",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} Elemente erfolgreich abgeschlossen",
-    "operationCompleted": "{{operation}} {{count}} Elemente",
-    "downloadFileSuccess": "Datei {{name}} erfolgreich heruntergeladen",
-    "downloadFileFailed": "Download fehlgeschlagen",
-    "downloadingFile": "Herunterladen {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Verschieben nach {{name}}",
-    "diffCompareWith": "Diff-Vergleich mit {{name}}",
-    "dragOutsideToDownload": "Zum Herunterladen aus dem Fenster ziehen ({{count}} Dateien)",
-    "newFolderDefault": "Neuer Ordner",
-    "newFileDefault": "Neue Datei.txt",
-    "successfullyMovedItems": "{{count}} Elemente erfolgreich nach {{target}} verschoben",
-    "move": "Verschieben",
-    "searchInFile": "In Datei suchen (Strg+F)",
-    "showKeyboardShortcuts": "Tastaturkürzel anzeigen",
-    "decreaseFontSize": "Schriftgröße verkleinern",
-    "increaseFontSize": "Schriftgröße vergrößern",
-    "startWritingMarkdown": "Beginnen Sie mit der Eingabe Ihres Markdown-Inhalts...",
-    "loadingFileComparison": "Dateivergleich wird geladen...",
-    "reload": "Neu laden",
-    "compare": "Vergleichen",
-    "sideBySide": "Nebeneinander",
-    "inline": "Inline",
-    "fileComparison": "Dateivergleich: {{file1}} vs. {{file2}}",
-    "fileTooLarge": "Die Datei ist zu groß (> 10 MB) und kann aus Sicherheitsgründen nicht als Textdatei geöffnet werden.",
-    "sshConnectionFailed": "SSH-Verbindung fehlgeschlagen. Bitte überprüfen Sie Ihre Verbindung zu {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Fehler beim Laden der Datei: {{error}}",
-    "connecting": "Verbindung wird hergestellt...",
-    "connectedSuccessfully": "Erfolgreich verbunden",
-    "totpVerificationFailed": "TOTP-Überprüfung fehlgeschlagen",
-    "browserSignInFailed": "Anmeldung fehlgeschlagen. Bitte versuchen Sie es erneut.",
-    "authenticationFailed": "Authentifizierung fehlgeschlagen",
-    "incorrectPassphrase": "Falsche Passphrase. Bitte versuchen Sie es erneut.",
-    "verificationCodePrompt": "Verifizierungscode:",
-    "changePermissions": "Berechtigungen ändern",
-    "currentPermissions": "Aktuelle Berechtigungen",
-    "owner": "Besitzer",
-    "group": "Gruppe",
-    "others": "Andere",
-    "read": "Lesen",
-    "write": "Schreiben",
-    "execute": "Ausführen",
-    "permissionsChangedSuccessfully": "Berechtigungen erfolgreich geändert",
-    "failedToChangePermissions": "Berechtigungen konnten nicht geändert werden",
-    "name": "Name",
-    "sortByName": "Name",
-    "sortByDate": "Änderungsdatum",
-    "sortBySize": "Größe",
-    "ascending": "Aufsteigend",
-    "descending": "Absteigend",
-    "root": "Stammverzeichnis",
-    "new": "Neu",
-    "sortBy": "Sortieren nach",
-    "items": "Elemente",
-    "selected": "Ausgewählt",
-    "editor": "Editor",
-    "octal": "Oktal",
-    "storage": "Speicher",
-    "disk": "Datenträger",
-    "used": "Belegt",
-    "of": "von",
-    "toggleSidebar": "Seitenleiste umschalten",
-    "compactLayout": "Kompaktes Layout verwenden",
-    "comfortableLayout": "Nutzen Sie ein komfortables Layout",
-    "cannotLoadPdf": "PDF kann nicht geladen werden",
-    "pdfLoadError": "Beim Laden dieser PDF-Datei ist ein Fehler aufgetreten.",
-    "loadingPdf": "PDF-Viewer wird geladen...",
-    "loadingPage": "Seite wird geladen...",
-    "cancel": "Abbrechen",
-    "copiedItems_one": "Kopierter Eintrag {{count}}",
-    "copiedItems_other": "Kopierte {{count}} Elemente",
-    "deleteCopiedFileFailed": "Die Kopie von {{name}}konnte nicht gelöscht werden: {{error}}",
-    "dragMovedItems_one": "Element {{count}} nach {{target}} verschoben",
-    "dragMovedItems_other": "{{count}} Elemente nach {{target}} verschoben",
-    "moveBackFileFailed": "{{name}} konnte nicht zurückbewegt werden: {{error}}",
-    "terminal": "Terminal: {{host}} ({{path}})",
-    "dragToDesktop": "Ziehen Sie {{name}} auf den Desktop",
-    "dragFilesToDesktop": "Ziehen von {{count}} -Dateien auf den Desktop",
-    "folderDragUnsupported": "Das Ziehen von Ordnern auf den Desktop wird noch nicht unterstützt.",
-    "saveToDesktopFailed": "Speichern fehlgeschlagen: {{error}}",
-    "dragFailedDetail": "Drag fehlgeschlagen: {{error}}",
-    "videoUnsupported": "Ihr Browser kann dieses Videoformat nicht abspielen.",
-    "downloadToPlay": "Laden Sie es herunter, um es woanders abzuspielen.",
-    "cannotPreviewType": "Vorschau dieses Dateityps nicht möglich",
-    "cannotPreviewTypeHint": "Dieser Dateityp hat keine Vorschau. Laden Sie ihn herunter, um ihn in einer anderen App zu öffnen.",
-    "loadingFile": "Datei wird geladen...",
-    "loadingImage": "Bild wird geladen...",
-    "loadingEditor": "Editor wird geladen...",
-    "loadingPreview": "Vorschau wird geladen...",
-    "loadingAudio": "Audioplayer wird geladen...",
-    "emptyPreview": "Noch nichts zur Vorschau...",
-    "revert": "Zurücksetzen",
-    "openAsText": "Als Text öffnen",
-    "confirmOpenAsText": "Möchten Sie diese Datei weiterhin als Text öffnen? Dies kann Ihren Browser verlangsamen."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "Dateien zwischen zwei SSH-Hosts übertragen.",
-    "sourceServer": "Quellserver",
-    "destinationServer": "Zielserver",
-    "selectHost": "Host auswählen",
-    "noHostSelected": "Kein Host ausgewählt",
-    "move": "Verschieben",
-    "copy": "Kopieren",
-    "upload": "Hochladen",
-    "itemsSelected": "{{count}} Element ausgewählt",
-    "itemsSelected_other": "{{count}} ausgewählte Elemente",
-    "ready": "Bereit",
-    "loadingHosts": "Hosts werden geladen...",
-    "name": "Name",
-    "modified": "Geändert",
-    "size": "Größe",
-    "noFiles": "Keine Dateien",
-    "open": "Offen",
-    "up": "Hoch",
-    "refresh": "Aktualisieren",
-    "copyToTarget": "In Zielverzeichnis kopieren",
-    "rename": "Umbenennen",
-    "delete": "Löschen",
-    "editPermissions": "Berechtigungen bearbeiten",
-    "createNewFolder": "Neuen Ordner erstellen",
-    "deleteSelectedItems": "Ausgewählte Elemente löschen",
-    "deleteConfirm": "Delete {{count}} selected item?",
-    "deleteConfirm_other": "{{count}} ausgewählte Elemente löschen?",
-    "cancel": "Abbrechen",
-    "save": "Speichern",
-    "folderCreated": "Ordner erstellt",
-    "itemRenamed": "Artikel umbenannt",
-    "actionFailed": "Aktion fehlgeschlagen",
-    "itemsDeleted": "{{count}} Element gelöscht",
-    "itemsDeleted_other": "{{count}} gelöschte Elemente",
-    "deleteFailed": "Löschen fehlgeschlagen",
-    "permissionsUpdated": "Berechtigungen aktualisiert",
-    "noRemoteSessionConnected": "Keine Remote-Sitzung verbunden",
-    "failedToListFiles": "Fehler beim Auflisten der Dateien",
-    "failedToRefresh": "Aktualisierung fehlgeschlagen",
-    "destinationInsideSource": "Das Ziel darf nicht innerhalb des ausgewählten Quellpfads liegen.",
-    "sameHostNoOp": "Quell- und Zielordner sind derselbe Ordner."
-  },
-  "hosts": {
-    "fileManager": "Dateimanager",
-    "fileManagerUrlCopied": "Dateimanager-URL kopiert",
-    "copyFileManagerUrlAction": "Dateimanager-URL kopieren",
-    "docsLink": "Dokumentation anzeigen",
-    "hostNotFound": "Host nicht gefunden",
-    "loadingHost": "Host wird geladen..."
-  },
-  "onboarding": {
-    "feature_files": "Dateimanager",
-    "feature_files_desc": "Durchsuchen, hochladen, herunterladen und bearbeiten Sie Dateien über SFTP, ohne die App zu verlassen."
-  },
-  "terminal": {
-    "runTitle": "Ausführung: {{command}} - {{host}}",
-    "terminalTitle": "Terminal - {{host}}",
-    "terminalWithPath": "Terminal - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Zielordner durchsuchen",
-    "browsePathError": "Dieser Pfad konnte auf dem Zielhost nicht geöffnet werden.",
-    "browsePathWillBeCreated": "Dieser Ordner existiert noch nicht. Er wird beim Start der Übertragung erstellt.",
-    "cancel": "Abbrechen",
-    "cleanupDestFiles": "Ziel bereinigen",
-    "cleanupDestFilesError": "Bereinigung fehlgeschlagen.",
-    "cleanupDestFilesNothing": "Nichts zum Bereinigen am Ziel.",
-    "cleanupDestFilesPartial": "Einige unvollständige Dateien konnten nicht entfernt werden.",
-    "cleanupDestFilesSuccess": "Unvollständige Dateien vom Ziel entfernt.",
-    "confirmCopy": "Kopieren",
-    "confirmMove": "Verschieben",
-    "copyFolderToHost": "Ordner zum Host kopieren …",
-    "copyItemsToHost": "{{count}} Elemente auf Host kopieren…",
-    "copyToHost": "Auf Host kopieren…",
-    "destinationPath": "Zielpfad",
-    "destMustBeDirectory": "Bei Übertragung mehrerer Elemente muss das Ziel ein Verzeichnis sein.",
-    "goUp": "Nach oben",
-    "hostAuthRequired": "Authentifizierung erforderlich. Öffnen Sie zuerst den Dateimanager auf diesem Host.",
-    "hostConnecting": "Verbinden …",
-    "hostConnectionFailed": "Verbindung fehlgeschlagen",
-    "hostDisconnected": "Nicht verbunden",
-    "hostReady": "Bereit",
-    "itemsSummary": "{{count}} Elemente",
-    "jumpHostLimitation": "Beide Hosts müssen vom Termix-Server aus erreichbar sein. Direktes Host-zu-Host-Routing wird nicht unterstützt.",
-    "methodAuto": "Automatisch",
-    "methodAutoHint": "Wählt Tar-Archiv oder dateiweise SFTP basierend auf Dateianzahl, Größe und Komprimierbarkeit. Einzelne Dateien verwenden immer Streaming-SFTP.",
-    "methodItemSftp": "Dateiweise SFTP",
-    "methodItemSftpHint": "Jede Datei einzeln per SFTP übertragen. Funktioniert auf allen Hosts einschließlich Windows.",
-    "methodItemSftpLimitation": "Jede Datei verwendet denselben SFTP-Stream wie bei einer Einzeldatei-Kopie, eine nach der anderen. Der Fortschritt wird über alle Dateien kombiniert, sodass der Balken bei großen Dateien nur langsam voranschreitet.",
-    "methodLabel": "Übertragungsmethode",
-    "methodPreviewError": "Vorschau der Übertragungsmethode nicht möglich. Der Server wählt beim Start trotzdem eine Methode.",
-    "methodPreviewLoading": "Übertragungsmethode wird berechnet…",
-    "methodPreviewScanSummary": "{{fileCount}} Dateien, {{totalSize}} gesamt (auf Quellhost gescannt).",
-    "methodPreviewWillUseItemSftp": "Verwendet: Dateiweise SFTP",
-    "methodPreviewWillUseTar": "Verwendet: Tar-Archiv",
-    "methodReason": {
-      "user_item_sftp": "Sie haben dateiweises SFTP ausgewählt.",
-      "user_tar": "Sie haben tar-Archiv ausgewählt.",
-      "tar_unavailable": "Tar ist auf einem oder beiden Hosts nicht verfügbar, daher wird stattdessen SFTP pro Datei verwendet.",
-      "windows_host": "Da es sich um einen Windows-Host handelt, wird tar nicht verwendet.",
-      "auto_multi_large": "Auto: Mehrere Dateien, darunter eine große Datei ({{largestSize}}) mit komprimierbaren Daten. Tar bündelt sie zu einer einzigen Übertragung.",
-      "auto_single_large_in_archive": "Auto: eine große Datei ({{largestSize}}) in diesem Satz, also SFTP pro Datei.",
-      "auto_many_incompressible": "Auto: Meist unkomprimierbare Daten, daher SFTP pro Datei.",
-      "auto_many_files": "Auto: Viele Dateien ({{fileCount}}), tar reduziert den Overhead pro Datei.",
-      "auto_default": "Automatisch: dateiweises SFTP für diesen Satz."
-    },
-    "methodTar": "Tar-Archiv",
-    "methodTarHint": "Komprimieren auf der Quelle, ein Archiv übertragen, auf dem Ziel entpacken. Erfordert tar auf beiden Unix-Hosts.",
-    "metricsCompress": "Komprimieren auf der Quelle: {{duration}}",
-    "metricsExtract": "Entpacken auf dem Ziel: {{duration}}",
-    "metricsPrepare": "Ziel vorbereiten: {{duration}}",
-    "metricsRouteBenchmark": "Routenprüfung: direkt {{direct}}, Relais {{relay}}",
-    "metricsSourceDelete": "Löschen von der Quelle: {{duration}}",
-    "metricsTotal": "Gesamt: {{duration}}",
-    "metricsTransfer": "Ende-zu-Ende: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 verifiziert: {{duration}}",
-    "moveFolderToHost": "Ordner zum Host verschieben …",
-    "moveItemsToHost": "{{count}} Elemente zum Host verschieben…",
-    "moveToHost": "Auf Host verschieben…",
-    "noHostsConnected": "Keine weiteren Dateimanager-Hosts verfügbar.",
-    "noHostsConnectedHint": "Fügen Sie einen weiteren SSH-Host mit aktiviertem Dateimanager im Host-Manager hinzu.",
-    "parallelSegmentsHint": "Große Dateien werden in 256-MB-Blöcke aufgeteilt. Mehrere Kanäle verwenden eigene Verbindungen (ähnlich wie mehrere gleichzeitige Übertragungen) für einen höheren Gesamtdurchsatz.",
-    "parallelSegmentsLabel": "Parallele Übertragungskanäle",
-    "parallelSegmentsOption": "{{count}} Kanäle",
-    "progressBenchmarking": "Auswahl der schnellsten Transferroute…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Abbrechen",
-    "progressCancelling": "Wird abgebrochen…",
-    "progressCompressing": "Komprimieren auf dem Quellhost…",
-    "progressExtracting": "Entpacken auf dem Zielhost…",
-    "progressItems": "{{current}} / {{total}} Dateien",
-    "progressReconnecting": "Neu verbinden…",
-    "progressStalled": "Stockt",
-    "progressTotalSpeed": "{{speed}} gesamt ({{lanes}} Kanäle)",
-    "progressTransferring": "Daten übertragen…",
-    "progressTransferringItems": "Übertragen von Dateien ({{current}} von {{total}})…",
-    "progressVerifying": "Dateiintegrität wird überprüft…",
-    "recentDestinations": "Letzte Ziele",
-    "resumedHint": "Erneut mit einer aktiven Übertragung verbunden, die in einem anderen Fenster gestartet wurde.",
-    "retryTransfer": "Wiederholen",
-    "retryTransferError": "Wiederholung fehlgeschlagen.",
-    "selectDestinationHost": "Zielhost auswählen",
-    "transferCancelled": "Übertragung abgebrochen",
-    "transferCancelledCopyHint": "Unvollständige Dateien können am Zielort verbleiben.",
-    "transferCancelledMoveHint": "Unvollständige Dateien können am Zielort verbleiben. Quelldateien wurden nicht entfernt.",
-    "transferError": "Übertragung fehlgeschlagen",
-    "transferFailedRetryHint": "Unvollständige Daten wurden am Ziel beibehalten. Die Wiederholung wird fortgesetzt, sobald die Verbindung wiederhergestellt ist.",
-    "transferPartialHint": "Konnte nicht übertragen werden: {{paths}}",
-    "transferSuccess": "Übertragung abgeschlossen",
-    "metricsHopSourceRead": "Quelle → Server: {{throughput}}",
-    "metricsHopDestSftpWrite": "Server → Ziel (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Server → Ziel (lokal): {{throughput}}"
-  },
-  "plugin": {
-    "name": "Dateimanager"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/el_GR.json b/plugins/file-manager/locales/translated/el_GR.json
deleted file mode 100644
index eaab73a2b..000000000
--- a/plugins/file-manager/locales/translated/el_GR.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Αρχεία",
-    "sftp": "SFTP",
-    "openFileManager": "Άνοιγμα Διαχείρισης Αρχείων"
-  },
-  "permissions": {
-    "use": {
-      "title": "Χρήση διαχειριστή αρχείων",
-      "description": "Περιηγηθείτε, επεξεργαστείτε και μεταφέρετε αρχεία μέσω SFTP."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Ενεργοποίηση Διαχείρισης Αρχείων",
-        "description": "Περιηγηθείτε και επεξεργαστείτε αρχεία σε αυτόν τον κεντρικό υπολογιστή μέσω SFTP."
-      },
-      "defaultPath": {
-        "label": "Προεπιλεγμένη διαδρομή"
-      },
-      "scpLegacy": {
-        "label": "Λειτουργία παλαιού τύπου SCP"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Ταυτόχρονες μεταφορές αρχείων",
-        "description": "Πόσα αρχεία ανεβάζει ή κατεβάζει ο τοπικός/απομακρυσμένος διαχειριστής παράλληλων λήψεων ταυτόχρονα. Μειώστε αυτό το ποσό εάν ο διακομιστής σας περιορίζει τα κανάλια SFTP."
-      },
-      "confirmBeforeTrash": {
-        "label": "Επιβεβαίωση πριν από τη μετακίνηση αρχείων στον κάδο απορριμμάτων",
-        "description": "Ρωτήστε πριν μετακινήσετε απομακρυσμένα αρχεία στον κάδο απορριμμάτων. Η μόνιμη διαγραφή εξακολουθεί να απαιτεί επιβεβαίωση."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Διαχειριστής αρχείων"
-  },
-  "fileManager": {
-    "noHostSelected": "Δεν έχει επιλεγεί κεντρικός υπολογιστής",
-    "initializingEditor": "Αρχικοποίηση προγράμματος επεξεργασίας...",
-    "file": "Αρχείο",
-    "folder": "Ντοσιέ",
-    "uploadFile": "Μεταφόρτωση αρχείου",
-    "downloadFile": "Λήψη",
-    "extractArchive": "Εξαγωγή αρχείου",
-    "extractingArchive": "Εξαγωγή {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} εξήχθη με επιτυχία",
-    "extractFailed": "Η εξαγωγή απέτυχε.",
-    "compressFile": "Συμπίεση αρχείου",
-    "compressFiles": "Συμπίεση αρχείων",
-    "compressFilesDesc": "Συμπίεση στοιχείων {{count}} σε ένα αρχείο",
-    "archiveName": "Όνομα αρχείου",
-    "enterArchiveName": "Εισαγάγετε όνομα αρχείου...",
-    "compressionFormat": "Μορφή συμπίεσης",
-    "selectedFiles": "Επιλεγμένα αρχεία",
-    "andMoreFiles": "και {{count}} περισσότερα...",
-    "compress": "Κομπρέσα",
-    "compressingFiles": "Συμπίεση στοιχείων {{count}} σε {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} δημιουργήθηκε με επιτυχία",
-    "compressFailed": "Η συμπίεση απέτυχε",
-    "edit": "Εκδίδω",
-    "preview": "Πρεμιέρα",
-    "previous": "Προηγούμενος",
-    "next": "Επόμενος",
-    "pageXOfY": "Σελίδα {{current}} από {{total}}",
-    "zoomOut": "Σμίκρυνση",
-    "zoomIn": "Μεγέθυνση",
-    "newFile": "Νέο αρχείο",
-    "newFolder": "Νέος φάκελος",
-    "rename": "Μετονομάζω",
-    "uploading": "Μεταφόρτωση...",
-    "uploadingFile": "Μεταφόρτωση {{name}}...",
-    "uploadingChunk": "Μεταφόρτωση {{name}}: {{percent}}% (μέρος {{chunk}} από {{total}})",
-    "fileName": "Όνομα αρχείου",
-    "folderName": "Όνομα φακέλου",
-    "fileUploadedSuccessfully": "Το αρχείο \"{{name}}\" μεταφορτώθηκε με επιτυχία",
-    "failedToUploadFile": "Η μεταφόρτωση του αρχείου απέτυχε",
-    "uploadingFolderFiles": "Μεταφόρτωση {{count}} αρχείου(ων)...",
-    "uploadedFolderFiles": "Μεταφορτώθηκαν με επιτυχία τα {{count}} αρχεία",
-    "uploadedFolderPartial": "Η μεταφόρτωση {{uploaded}} αρχείου(ων), {{failed}} απέτυχε",
-    "fileDownloadedSuccessfully": "Το αρχείο \"{{name}}\" λήφθηκε με επιτυχία.",
-    "failedToDownloadFile": "Αποτυχία λήψης αρχείου",
-    "fileCreatedSuccessfully": "Το αρχείο \"{{name}}\" δημιουργήθηκε με επιτυχία",
-    "folderCreatedSuccessfully": "Ο φάκελος \"{{name}}\" δημιουργήθηκε με επιτυχία",
-    "failedToCreateItem": "Η δημιουργία στοιχείου απέτυχε",
-    "operationFailed": "Η λειτουργία {{operation}} απέτυχε για {{name}}: {{error}}",
-    "failedToResolveSymlink": "Αποτυχία επίλυσης συμβολικού συνδέσμου",
-    "itemsDeletedSuccessfully": "{{count}} στοιχεία διαγράφηκαν με επιτυχία",
-    "failedToDeleteItems": "Η διαγραφή στοιχείων απέτυχε",
-    "sudoPasswordRequired": "Απαιτείται κωδικός πρόσβασης διαχειριστή",
-    "enterSudoPassword": "Εισαγάγετε τον κωδικό πρόσβασης sudo για να συνεχίσετε αυτήν τη λειτουργία",
-    "sudoPassword": "Κωδικός πρόσβασης Sudo",
-    "sudoOperationFailed": "Η λειτουργία Sudo απέτυχε",
-    "sudoAuthFailed": "Ο έλεγχος ταυτότητας Sudo απέτυχε.",
-    "dragFilesToUpload": "Αποθέστε αρχεία εδώ για μεταφόρτωση",
-    "dropToUploadHere": "Αποθέστε εδώ για μεταφόρτωση",
-    "dropToDownloadHere": "Αποθέστε για λήψη εδώ",
-    "localFiles": "Τοπικός",
-    "showLocalFiles": "Εμφάνιση τοπικών αρχείων (διαιρεμένη προβολή)",
-    "hideLocalFiles": "Απόκρυψη τοπικών αρχείων",
-    "localHome": "Αρχική σελίδα",
-    "localPathPlaceholder": "Διαδρομή τοπικού φακέλου",
-    "localShowHidden": "Εμφάνιση κρυφών αρχείων",
-    "localHideHidden": "Απόκρυψη κρυφών αρχείων",
-    "localRevealInFileManager": "Εμφάνιση στον διαχειριστή αρχείων συστήματος",
-    "localCannotOpenFolder": "Δεν είναι δυνατό το άνοιγμα του φακέλου",
-    "localItemCount": "{{count}} στοιχεία",
-    "localSelectedCount": "επιλεγμένο {{count}}",
-    "back": "Πίσω",
-    "forward": "Προς τα εμπρός",
-    "up": "Επάνω",
-    "kind": "Είδος",
-    "localUploadingProgress": "Μεταφόρτωση {{current}} από {{total}}",
-    "localDownloadingProgress": "Λήψη {{current}} από {{total}}",
-    "localTransferInFlight": "{{count}} ταυτόχρονα",
-    "localPreparingDownload": "Προετοιμασία λήψης...",
-    "localTransferCancelled": "Η μεταφορά ακυρώθηκε.",
-    "localNothingToTransfer": "Δεν υπάρχει τίποτα προς μεταφορά",
-    "localUploadComplete": "Μεταφορτώθηκε {{count}} αρχείο(α)",
-    "localUploadFailed": "Η μεταφόρτωση απέτυχε.",
-    "localUploadPartial": "Η μεταφόρτωση {{done}} αρχείου(ων), {{failed}} απέτυχε",
-    "localDownloadComplete": "Λήψη {{count}} αρχείου(ων)",
-    "localDownloadFailed": "Η λήψη απέτυχε.",
-    "localDownloadPartial": "Η λήψη του/των {{done}} αρχείου/αρχείων απέτυχε, το {{failed}}",
-    "localReplaceExistingPrompt": "{{count}} στοιχεία υπάρχουν ήδη σε αυτόν τον φάκελο. Να αντικατασταθούν;",
-    "localReplace": "Αντικαθιστώ",
-    "localSkipExisting": "Παραλείπω",
-    "localSkippedExisting": "Παραλείφθηκαν {{count}} υπάρχοντα στοιχεία",
-    "localUnsafeNamesSkipped": "Παραλείφθηκαν {{count}} στοιχεία των οποίων τα ονόματα δεν μπορούν να χρησιμοποιηθούν σε αυτόν τον υπολογιστή",
-    "localOpen": "Ανοιχτό",
-    "localOpenFolder": "Άνοιγμα φακέλου",
-    "localUploadToRemote": "Μεταφόρτωση στον διακομιστή",
-    "localUploadToRemoteMany": "Μεταφόρτωση {{count}} στοιχείων στον διακομιστή",
-    "localMoveToTrash": "Μετακίνηση στον Κάδο",
-    "localMoveToTrashMany": "Μετακίνηση {{count}} στοιχείων στον Κάδο Απορριμμάτων",
-    "localTrashConfirmSingle": "Μετακίνηση του \"{{name}}\" στον Κάδο;",
-    "localTrashConfirmFolder": "Μετακίνηση του φακέλου \"{{name}}\" και όλου του περιεχομένου του στον Κάδο Απορριμμάτων;",
-    "localTrashConfirmMany": "Μετακίνηση {{count}} στοιχείων στον Κάδο;",
-    "localTrashed": "Μετακινήθηκαν {{count}} στοιχεία στον Κάδο Απορριμμάτων",
-    "localTrashFailed": "Δεν ήταν δυνατή η μετακίνηση στον Κάδο",
-    "localRenameFailed": "Η μετονομασία απέτυχε.",
-    "localCreateFailed": "Δεν ήταν δυνατή η δημιουργία στοιχείου",
-    "goToParentFolder": "Μετάβαση στον γονικό φάκελο",
-    "resizeSidebar": "Σύρετε για να αλλάξετε το μέγεθος της πλαϊνής γραμμής (κάντε διπλό κλικ για επαναφορά)",
-    "resizeLocalPane": "Σύρετε για να αλλάξετε το μέγεθος του τοπικού παραθύρου (κάντε διπλό κλικ για επαναφορά)",
-    "columns": "Στήλες",
-    "columnsHint": "Κάντε δεξί κλικ για να επιλέξετε στήλες",
-    "emptyFolder": "Αυτός ο φάκελος είναι κενός",
-    "searchFiles": "Αναζήτηση αρχείων...",
-    "upload": "Μεταφόρτωση",
-    "selectHostToStart": "Επιλέξτε έναν κεντρικό υπολογιστή για να ξεκινήσετε τη διαχείριση αρχείων",
-    "sshRequiredForFileManager": "Ο διαχειριστής αρχείων απαιτεί SSH. Αυτός ο κεντρικός υπολογιστής δεν έχει ενεργοποιημένο SSH.",
-    "failedToConnect": "Αποτυχία σύνδεσης με SSH",
-    "failedToLoadDirectory": "Αποτυχία φόρτωσης καταλόγου",
-    "noSSHConnection": "Δεν υπάρχει διαθέσιμη σύνδεση SSH",
-    "copy": "Αντίγραφο",
-    "cut": "Τομή",
-    "paste": "Πάστα",
-    "copyPath": "Αντιγραφή διαδρομής",
-    "copyPaths": "Διαδρομές αντιγραφής",
-    "delete": "Διαγράφω",
-    "properties": "Σκηνικά θέατρου",
-    "refresh": "Φρεσκάρω",
-    "downloadFiles": "Λήψη αρχείων {{count}} στο πρόγραμμα περιήγησης",
-    "copyFiles": "Αντιγραφή {{count}} στοιχείων",
-    "cutFiles": "Αποκοπή {{count}} στοιχείων",
-    "deleteFiles": "Διαγραφή {{count}} στοιχείων",
-    "filesCopiedToClipboard": "{{count}} στοιχεία αντιγράφηκαν στο πρόχειρο",
-    "filesCutToClipboard": "{{count}} στοιχεία αποκόπηκαν στο πρόχειρο",
-    "pathCopiedToClipboard": "Η διαδρομή αντιγράφηκε στο πρόχειρο",
-    "pathsCopiedToClipboard": "{{count}} διαδρομές αντιγράφηκαν στο πρόχειρο",
-    "failedToCopyPath": "Αποτυχία αντιγραφής διαδρομής στο πρόχειρο",
-    "copyFolderLink": "Αντιγραφή συνδέσμου σε φάκελο",
-    "copyCurrentFolderLink": "Αντιγραφή συνδέσμου στον τρέχοντα φάκελο",
-    "folderLinkCopied": "Ο σύνδεσμος φακέλου αντιγράφηκε στο πρόχειρο",
-    "failedToCopyFolderLink": "Αποτυχία αντιγραφής συνδέσμου φακέλου",
-    "movedItems": "Μετακινήθηκαν {{count}} στοιχεία",
-    "failedToDeleteItem": "Η διαγραφή του στοιχείου απέτυχε",
-    "itemRenamedSuccessfully": "Το {{type}} μετονομάστηκε με επιτυχία",
-    "failedToRenameItem": "Η μετονομασία του στοιχείου απέτυχε",
-    "download": "Λήψη",
-    "openExternalEditor": "Άνοιγμα εξωτερικά",
-    "chooseExternalEditor": "Επιλογή εξωτερικού επεξεργαστή",
-    "externalEditorSelected": "Επιλέχθηκε εξωτερικός επεξεργαστής",
-    "externalEditorDesktopOnly": "Ο εξωτερικός επεξεργαστής είναι διαθέσιμος μόνο στην εφαρμογή για υπολογιστές",
-    "externalEditorOpened": "Άνοιξε σε εξωτερικό πρόγραμμα επεξεργασίας. Η αποθήκευση εκεί θα μεταφορτώσει τις αλλαγές πίσω στον διακομιστή.",
-    "failedToOpenExternalEditor": "Αποτυχία ανοίγματος εξωτερικού προγράμματος επεξεργασίας",
-    "failedToSelectExternalEditor": "Αποτυχία επιλογής εξωτερικού προγράμματος επεξεργασίας",
-    "permissions": "Δικαιώματα",
-    "size": "Μέγεθος",
-    "modified": "Τροποποιημένο",
-    "path": "Μονοπάτι",
-    "confirmDelete": "Είστε σίγουροι ότι θέλετε να διαγράψετε το {{name}};",
-    "permissionDenied": "Η άδεια απορρίφθηκε",
-    "serverError": "Σφάλμα διακομιστή",
-    "fileSavedSuccessfully": "Το αρχείο αποθηκεύτηκε με επιτυχία",
-    "failedToSaveFile": "Η αποθήκευση του αρχείου απέτυχε",
-    "confirmDeleteSingleItem": "Είστε σίγουροι ότι θέλετε να διαγράψετε οριστικά το \"{{name}}\";",
-    "confirmDeleteMultipleItems": "Είστε βέβαιοι ότι θέλετε να διαγράψετε οριστικά τα στοιχεία {{count}};",
-    "confirmDeleteMultipleItemsWithFolders": "Είστε βέβαιοι ότι θέλετε να διαγράψετε οριστικά τα στοιχεία {{count}} ; Αυτό περιλαμβάνει τους φακέλους και το περιεχόμενό τους.",
-    "confirmDeleteFolder": "Είστε βέβαιοι ότι θέλετε να διαγράψετε οριστικά τον φάκελο \"{{name}}\" και όλα τα περιεχόμενά του;",
-    "permanentDeleteWarning": "Αυτή η ενέργεια δεν μπορεί να αναιρεθεί. Τα στοιχεία θα διαγραφούν οριστικά από τον διακομιστή.",
-    "moveToTrashWarning": "Τα στοιχεία θα μετακινηθούν στον Κάδο Απορριμμάτων του Termix και μπορούν να αποκατασταθούν πριν λήξει η περίοδος διατήρησης.",
-    "itemsMovedToTrash": "{{count}} στοιχείο(α) μετακινήθηκε(αν) στον Κάδο",
-    "trash": "Σκουπίδια",
-    "trashDescription": "Τα διαγραμμένα στοιχεία διατηρούνται για {{days}} ημέρα(ες) σε αυτόν τον κεντρικό υπολογιστή.",
-    "trashLoadFailed": "Αποτυχία φόρτωσης κάδου απορριμμάτων",
-    "trashEmpty": "Ο κάδος απορριμμάτων είναι άδειος",
-    "trashRestore": "Επαναφέρω",
-    "trashRestored": "Αποκαταστάθηκε {{name}}",
-    "trashRestoreFailed": "Αποτυχία επαναφοράς στοιχείου. Η αρχική διαδρομή ενδέχεται να υπάρχει ήδη.",
-    "trashDeletePermanently": "Οριστική διαγραφή",
-    "trashDeleteConfirm": "Να διαγραφεί οριστικά το {{name}}; Αυτή η ενέργεια δεν μπορεί να αναιρεθεί.",
-    "trashPermanentlyDeleted": "Διαγράφηκε οριστικά {{name}}",
-    "trashDeleteFailed": "Η οριστική διαγραφή του στοιχείου απέτυχε",
-    "trashEmptyAction": "Άδειασμα Κάδου",
-    "trashEmptyConfirm": "Να διαγραφούν οριστικά όλα τα στοιχεία στον Κάδο; Δεν είναι δυνατή η αναίρεση αυτής της ενέργειας.",
-    "trashEmptied": "Ο κάδος αδειάστηκε",
-    "trashRetention": "Αυτόματος καθαρισμός μετά από (ημέρες)",
-    "trashRetentionSaved": "Η διατήρηση απορριμμάτων ενημερώθηκε",
-    "trashRetentionFailed": "Αποτυχία ενημέρωσης διατήρησης κάδου απορριμμάτων",
-    "trashUnavailableConfirm": "Αυτό το στοιχείο δεν μπορεί να μετακινηθεί στον Κάδο, συνήθως επειδή βρίσκεται σε άλλο σύστημα αρχείων ή απαιτεί αυξημένα δικαιώματα. Να διαγραφεί οριστικά;",
-    "recent": "Πρόσφατος",
-    "pinned": "Καρφιτσωμένο",
-    "folderShortcuts": "Συντομεύσεις φακέλων",
-    "failedToReconnectSSH": "Αποτυχία επανασύνδεσης συνεδρίας SSH",
-    "openTerminalHere": "Άνοιγμα τερματικού εδώ",
-    "run": "Τρέξιμο",
-    "openTerminalInFolder": "Άνοιγμα τερματικού σε αυτόν τον φάκελο",
-    "openTerminalInFileLocation": "Άνοιγμα τερματικού στη θέση αρχείου",
-    "runningFile": "Τρέξιμο - {{file}}",
-    "onlyRunExecutableFiles": "Μπορεί να εκτελέσει μόνο εκτελέσιμα αρχεία",
-    "directories": "Κατάλογοι",
-    "removedFromRecentFiles": "Αφαιρέθηκε το \"{{name}}\" από πρόσφατα αρχεία",
-    "removeFailed": "Η κατάργηση απέτυχε.",
-    "unpinnedSuccessfully": "Το \"{{name}}\" ξεκαρφιτσώθηκε με επιτυχία",
-    "unpinFailed": "Το ξεκαρφίτσωμα απέτυχε.",
-    "removedShortcut": "Αφαιρέθηκε η συντόμευση \"{{name}}\"",
-    "removeShortcutFailed": "Η κατάργηση της συντόμευσης απέτυχε.",
-    "clearedAllRecentFiles": "Διαγράφηκαν όλα τα πρόσφατα αρχεία",
-    "clearFailed": "Η διαγραφή απέτυχε.",
-    "removeFromRecentFiles": "Κατάργηση από πρόσφατα αρχεία",
-    "clearAllRecentFiles": "Διαγραφή όλων των πρόσφατων αρχείων",
-    "unpinFile": "Ξεκαρφίτσωμα αρχείου",
-    "removeShortcut": "Κατάργηση συντόμευσης",
-    "pinFile": "Καρφίτσωμα αρχείου",
-    "addToShortcuts": "Προσθήκη στις συντομεύσεις",
-    "pasteFailed": "Η επικόλληση απέτυχε.",
-    "noUndoableActions": "Δεν υπάρχουν ενέργειες που μπορούν να αναιρεθούν",
-    "undoCopySuccess": "Αναίρεση λειτουργίας αντιγραφής: Διαγράφηκαν {{count}} αντιγραμμένα αρχεία",
-    "undoCopyFailedDelete": "Η αναίρεση απέτυχε: Δεν ήταν δυνατή η διαγραφή των αντιγραμμένων αρχείων",
-    "undoCopyFailedNoInfo": "Η αναίρεση απέτυχε: Δεν ήταν δυνατή η εύρεση των πληροφοριών του αντιγραμμένου αρχείου",
-    "undoMoveSuccess": "Αναίρεση λειτουργίας μετακίνησης: Μετακινήθηκαν τα αρχεία {{count}} πίσω στην αρχική τους θέση",
-    "undoMoveFailedMove": "Η αναίρεση απέτυχε: Δεν ήταν δυνατή η επαναφορά κανενός αρχείου",
-    "undoMoveFailedNoInfo": "Η αναίρεση απέτυχε: Δεν ήταν δυνατή η εύρεση των πληροφοριών του μετακινημένου αρχείου",
-    "undoDeleteNotSupported": "Η λειτουργία διαγραφής δεν μπορεί να αναιρεθεί: Τα αρχεία έχουν διαγραφεί οριστικά από τον διακομιστή",
-    "undoTypeNotSupported": "Μη υποστηριζόμενος τύπος λειτουργίας αναίρεσης",
-    "undoOperationFailed": "Η λειτουργία αναίρεσης απέτυχε",
-    "unknownError": "Άγνωστο σφάλμα",
-    "confirm": "Επιβεβαιώνω",
-    "find": "Εύρημα...",
-    "replace": "Αντικαθιστώ",
-    "downloadInstead": "Λήψη εναλλακτικά",
-    "keyboardShortcuts": "Συντομεύσεις πληκτρολογίου",
-    "searchAndReplace": "Αναζήτηση & Αντικατάσταση",
-    "editing": "Επεξεργασία",
-    "search": "Ερευνα",
-    "findNext": "Εύρεση επόμενου",
-    "findPrevious": "Εύρεση προηγούμενου",
-    "save": "Εκτός",
-    "selectAll": "Επιλογή όλων",
-    "undo": "Ξεκάνω",
-    "redo": "Ξανακάνω",
-    "moveLineUp": "Μετακίνηση γραμμής προς τα πάνω",
-    "moveLineDown": "Μετακίνηση γραμμής προς τα κάτω",
-    "toggleComment": "Εναλλαγή σχολίου",
-    "autoComplete": "Αυτόματη συμπλήρωση",
-    "imageLoadError": "Αποτυχία φόρτωσης εικόνας",
-    "startTyping": "Ξεκινήστε να πληκτρολογείτε...",
-    "unknownSize": "Άγνωστο μέγεθος",
-    "fileIsEmpty": "Το αρχείο είναι κενό",
-    "largeFileWarning": "Προειδοποίηση για μεγάλο αρχείο",
-    "largeFileWarningDesc": "Αυτό το αρχείο έχει μέγεθος {{size}} , το οποίο ενδέχεται να προκαλέσει προβλήματα απόδοσης όταν ανοιχτεί ως κείμενο.",
-    "fileNotFoundAndRemoved": "Το αρχείο \"{{name}}\" δεν βρέθηκε και έχει αφαιρεθεί από τα πρόσφατα/καρφιτσωμένα αρχεία",
-    "failedToLoadFile": "Αποτυχία φόρτωσης αρχείου: {{error}}",
-    "serverErrorOccurred": "Παρουσιάστηκε σφάλμα διακομιστή. Δοκιμάστε ξανά αργότερα.",
-    "autoSaveFailed": "Η αυτόματη αποθήκευση απέτυχε",
-    "fileAutoSaved": "Το αρχείο αποθηκεύτηκε αυτόματα",
-    "moveFileFailed": "Αποτυχία μετακίνησης {{name}}",
-    "moveOperationFailed": "Η λειτουργία μετακίνησης απέτυχε",
-    "canOnlyCompareFiles": "Μπορεί να συγκρίνει μόνο δύο αρχεία",
-    "comparingFiles": "Σύγκριση αρχείων: {{file1}} και {{file2}}",
-    "dragFailed": "Η λειτουργία μεταφοράς απέτυχε",
-    "filePinnedSuccessfully": "Το αρχείο \"{{name}}\" καρφιτσώθηκε με επιτυχία",
-    "pinFileFailed": "Αποτυχία καρφιτσώματος αρχείου",
-    "fileUnpinnedSuccessfully": "Το αρχείο \"{{name}}\" ξεκαρφιτσώθηκε με επιτυχία",
-    "unpinFileFailed": "Αποτυχία ξεκαρφιτσώματος αρχείου",
-    "shortcutAddedSuccessfully": "Η συντόμευση φακέλου \"{{name}}\" προστέθηκε με επιτυχία",
-    "addShortcutFailed": "Η προσθήκη συντόμευσης απέτυχε",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} στοιχεία με επιτυχία",
-    "operationCompleted": "{{operation}} {{count}} στοιχεία",
-    "downloadFileSuccess": "Το αρχείο {{name}} λήφθηκε με επιτυχία.",
-    "downloadFileFailed": "Η λήψη απέτυχε.",
-    "downloadingFile": "Λήψη {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Μετακίνηση σε {{name}}",
-    "diffCompareWith": "Διαφορά σε σύγκριση με {{name}}",
-    "dragOutsideToDownload": "Σύρετε έξω από το παράθυρο για λήψη ({{count}} αρχείων)",
-    "newFolderDefault": "ΝέοςΦάκελος",
-    "newFileDefault": "ΝέοΑρχείο.txt",
-    "successfullyMovedItems": "Επιτυχής μετακίνηση {{count}} στοιχείων στο {{target}}",
-    "move": "Κίνηση",
-    "searchInFile": "Αναζήτηση σε αρχείο (Ctrl+F)",
-    "showKeyboardShortcuts": "Εμφάνιση συντομεύσεων πληκτρολογίου",
-    "decreaseFontSize": "Μείωση μεγέθους γραμματοσειράς",
-    "increaseFontSize": "Αύξηση μεγέθους γραμματοσειράς",
-    "startWritingMarkdown": "Ξεκινήστε να γράφετε το περιεχόμενό σας με έκπτωση...",
-    "loadingFileComparison": "Φόρτωση σύγκρισης αρχείων...",
-    "reload": "Γεμίζω πάλι",
-    "compare": "Συγκρίνω",
-    "sideBySide": "Πλάι πλάι",
-    "inline": "Ενσωματωμένο",
-    "fileComparison": "Σύγκριση αρχείων: {{file1}} έναντι {{file2}}",
-    "fileTooLarge": "Το αρχείο είναι πολύ μεγάλο (> 10MB) και δεν μπορεί να ανοιχτεί ως κείμενο για λόγους ασφαλείας.",
-    "sshConnectionFailed": "Η σύνδεση SSH απέτυχε. Ελέγξτε τη σύνδεσή σας με {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Αποτυχία φόρτωσης αρχείου: {{error}}",
-    "connecting": "Συνδετικός...",
-    "connectedSuccessfully": "Η σύνδεση ολοκληρώθηκε με επιτυχία",
-    "totpVerificationFailed": "Η επαλήθευση TOTP απέτυχε.",
-    "browserSignInFailed": "Η σύνδεση απέτυχε. Δοκιμάστε ξανά.",
-    "authenticationFailed": "Η επαλήθευση ταυτότητας απέτυχε",
-    "incorrectPassphrase": "Λανθασμένη φράση πρόσβασης. Δοκιμάστε ξανά.",
-    "verificationCodePrompt": "Κωδικός επαλήθευσης:",
-    "changePermissions": "Αλλαγή Δικαιωμάτων",
-    "currentPermissions": "Τρέχοντα Δικαιώματα",
-    "owner": "Ιδιοκτήτης",
-    "group": "Ομάδα",
-    "others": "Άλλοι",
-    "read": "Ανάγνωση",
-    "write": "Γράφω",
-    "execute": "Εκτελώ",
-    "permissionsChangedSuccessfully": "Τα δικαιώματα άλλαξαν με επιτυχία",
-    "failedToChangePermissions": "Αποτυχία αλλαγής δικαιωμάτων",
-    "name": "Ονομα",
-    "sortByName": "Ονομα",
-    "sortByDate": "Ημερομηνία τροποποίησης",
-    "sortBySize": "Μέγεθος",
-    "ascending": "Αύξουσα",
-    "descending": "Φθίνων",
-    "root": "Ρίζα",
-    "new": "Νέος",
-    "sortBy": "Ταξινόμηση κατά",
-    "items": "Αντικείμενα",
-    "selected": "Επιλεγμένο",
-    "editor": "Συντάκτης",
-    "octal": "Οκτάεδρος",
-    "storage": "Αποθήκευση",
-    "disk": "Δίσκος",
-    "used": "Μεταχειρισμένος",
-    "of": "του",
-    "toggleSidebar": "Εναλλαγή πλευρικής γραμμής",
-    "compactLayout": "Χρήση συμπαγούς διάταξης",
-    "comfortableLayout": "Χρησιμοποιήστε άνετη διάταξη",
-    "cannotLoadPdf": "Δεν είναι δυνατή η φόρτωση του PDF",
-    "pdfLoadError": "Παρουσιάστηκε σφάλμα κατά τη φόρτωση αυτού του αρχείου PDF.",
-    "loadingPdf": "Φόρτωση προγράμματος προβολής PDF...",
-    "loadingPage": "Φόρτωση σελίδας...",
-    "cancel": "Ματαίωση",
-    "copiedItems_one": "Αντιγράφηκε {{count}} στοιχείο",
-    "copiedItems_other": "Αντιγράφηκαν {{count}} στοιχεία",
-    "deleteCopiedFileFailed": "Δεν ήταν δυνατή η διαγραφή του αντιγράφου του {{name}}: {{error}}",
-    "dragMovedItems_one": "Μετακινήθηκε το στοιχείο {{count}} στο {{target}}",
-    "dragMovedItems_other": "Μετακινήθηκαν {{count}} στοιχεία σε {{target}}",
-    "moveBackFileFailed": "Δεν ήταν δυνατή η μετακίνηση του {{name}} προς τα πίσω: {{error}}",
-    "terminal": "Τερματικό: {{host}} ({{path}})",
-    "dragToDesktop": "Σύρσιμο του {{name}} στην επιφάνεια εργασίας",
-    "dragFilesToDesktop": "Σύρσιμο αρχείων {{count}} στην επιφάνεια εργασίας",
-    "folderDragUnsupported": "Η μεταφορά φακέλων στην επιφάνεια εργασίας δεν υποστηρίζεται ακόμη",
-    "saveToDesktopFailed": "Η αποθήκευση απέτυχε: {{error}}",
-    "dragFailedDetail": "Η μεταφορά απέτυχε: {{error}}",
-    "videoUnsupported": "Το πρόγραμμα περιήγησής σας δεν μπορεί να αναπαράγει αυτήν τη μορφή βίντεο.",
-    "downloadToPlay": "Κατεβάστε το για να το παίξετε αλλού",
-    "cannotPreviewType": "Δεν είναι δυνατή η προεπισκόπηση αυτού του τύπου αρχείου",
-    "cannotPreviewTypeHint": "Αυτός ο τύπος αρχείου δεν έχει προεπισκόπηση. Κατεβάστε το για να το ανοίξετε σε άλλη εφαρμογή.",
-    "loadingFile": "Φόρτωση αρχείου...",
-    "loadingImage": "Φόρτωση εικόνας...",
-    "loadingEditor": "Φόρτωση προγράμματος επεξεργασίας...",
-    "loadingPreview": "Φόρτωση προεπισκόπησης...",
-    "loadingAudio": "Φόρτωση προγράμματος αναπαραγωγής ήχου...",
-    "emptyPreview": "Δεν υπάρχει τίποτα για προεπισκόπηση ακόμα...",
-    "revert": "Επαναστρέφω",
-    "openAsText": "Άνοιγμα ως κείμενο",
-    "confirmOpenAsText": "Θέλετε να συνεχίσετε να ανοίγετε αυτό το αρχείο ως κείμενο; Αυτό μπορεί να επιβραδύνει το πρόγραμμα περιήγησής σας."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "Μεταφορά αρχείων μεταξύ δύο κεντρικών υπολογιστών SSH.",
-    "sourceServer": "Διακομιστής πηγής",
-    "destinationServer": "Διακομιστής προορισμού",
-    "selectHost": "Επιλογή κεντρικού υπολογιστή",
-    "noHostSelected": "Δεν έχει επιλεγεί κεντρικός υπολογιστής",
-    "move": "Κίνηση",
-    "copy": "Αντίγραφο",
-    "upload": "Μεταφόρτωση",
-    "itemsSelected": "Επιλέχθηκε {{count}} στοιχείο",
-    "itemsSelected_other": "Επιλέχθηκαν {{count}} στοιχεία",
-    "ready": "Ετοιμος",
-    "loadingHosts": "Φόρτωση κεντρικών υπολογιστών...",
-    "name": "Ονομα",
-    "modified": "Τροποποιημένο",
-    "size": "Μέγεθος",
-    "noFiles": "Δεν υπάρχουν αρχεία",
-    "open": "Ανοιχτό",
-    "up": "Επάνω",
-    "refresh": "Φρεσκάρω",
-    "copyToTarget": "Αντιγραφή στον κατάλογο προορισμού",
-    "rename": "Μετονομάζω",
-    "delete": "Διαγράφω",
-    "editPermissions": "Επεξεργασία δικαιωμάτων",
-    "createNewFolder": "Δημιουργία νέου φακέλου",
-    "deleteSelectedItems": "Διαγραφή επιλεγμένων στοιχείων",
-    "deleteConfirm": "Διαγραφή του επιλεγμένου {{count}} στοιχείου;",
-    "deleteConfirm_other": "Διαγραφή {{count}} επιλεγμένων στοιχείων;",
-    "cancel": "Ματαίωση",
-    "save": "Εκτός",
-    "folderCreated": "Ο φάκελος δημιουργήθηκε",
-    "itemRenamed": "Το στοιχείο μετονομάστηκε",
-    "actionFailed": "Η ενέργεια απέτυχε",
-    "itemsDeleted": "{{count}} στοιχείο διαγράφηκε",
-    "itemsDeleted_other": "{{count}} στοιχεία διαγράφηκαν",
-    "deleteFailed": "Η διαγραφή απέτυχε.",
-    "permissionsUpdated": "Τα δικαιώματα ενημερώθηκαν",
-    "noRemoteSessionConnected": "Δεν έχει συνδεθεί απομακρυσμένη συνεδρία",
-    "failedToListFiles": "Αποτυχία καταχώρισης αρχείων",
-    "failedToRefresh": "Η ανανέωση απέτυχε",
-    "destinationInsideSource": "Ο προορισμός δεν μπορεί να βρίσκεται εντός της επιλεγμένης διαδρομής προέλευσης.",
-    "sameHostNoOp": "Η προέλευση και ο προορισμός είναι ο ίδιος φάκελος."
-  },
-  "hosts": {
-    "fileManager": "Διαχειριστής αρχείων",
-    "fileManagerUrlCopied": "Η διεύθυνση URL του διαχειριστή αρχείων αντιγράφηκε",
-    "copyFileManagerUrlAction": "Αντιγραφή URL Διαχείρισης Αρχείων",
-    "docsLink": "Προβολή εγγράφων",
-    "hostNotFound": "Δεν βρέθηκε κεντρικός υπολογιστής",
-    "loadingHost": "Φόρτωση κεντρικού υπολογιστή..."
-  },
-  "onboarding": {
-    "feature_files": "Διαχειριστής αρχείων",
-    "feature_files_desc": "Περιηγηθείτε, ανεβάστε, κατεβάστε και επεξεργαστείτε αρχεία μέσω SFTP χωρίς να φύγετε από την εφαρμογή."
-  },
-  "terminal": {
-    "runTitle": "Εκτέλεση {{command}} - {{host}}",
-    "terminalTitle": "Τερματικό - {{host}}",
-    "terminalWithPath": "Τερματικό - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Αναζήτηση φακέλων προορισμού",
-    "browsePathError": "Δεν ήταν δυνατό το άνοιγμα αυτής της διαδρομής στον κεντρικό υπολογιστή προορισμού.",
-    "browsePathWillBeCreated": "Αυτός ο φάκελος δεν υπάρχει ακόμη. Θα δημιουργηθεί όταν ξεκινήσει η μεταφορά.",
-    "cancel": "Ματαίωση",
-    "cleanupDestFiles": "Καθαρισμός προορισμού",
-    "cleanupDestFilesError": "Ο καθαρισμός απέτυχε",
-    "cleanupDestFilesNothing": "Δεν υπάρχει τίποτα προς διόρθωση στον προορισμό",
-    "cleanupDestFilesPartial": "Δεν ήταν δυνατή η κατάργηση ορισμένων τμηματικών αρχείων",
-    "cleanupDestFilesSuccess": "Αφαιρέθηκαν μερικά αρχεία από τον προορισμό",
-    "confirmCopy": "Αντίγραφο",
-    "confirmMove": "Κίνηση",
-    "copyFolderToHost": "Αντιγραφή φακέλου στον κεντρικό υπολογιστή…",
-    "copyItemsToHost": "Αντιγραφή στοιχείων {{count}} για φιλοξενία…",
-    "copyToHost": "Αντιγραφή στον κεντρικό υπολογιστή…",
-    "destinationPath": "Διαδρομή προορισμού",
-    "destMustBeDirectory": "Ο προορισμός πρέπει να είναι ένας κατάλογος για μεταφορές πολλαπλών στοιχείων",
-    "goUp": "Ανεβαίνω",
-    "hostAuthRequired": "Απαιτείται έλεγχος ταυτότητας. Ανοίξτε πρώτα τη Διαχείριση αρχείων σε αυτόν τον κεντρικό υπολογιστή.",
-    "hostConnecting": "Σύνδεση…",
-    "hostConnectionFailed": "Η σύνδεση απέτυχε",
-    "hostDisconnected": "Δεν είναι συνδεδεμένο",
-    "hostReady": "Ετοιμος",
-    "itemsSummary": "{{count}} στοιχεία",
-    "jumpHostLimitation": "Και οι δύο κεντρικοί υπολογιστές πρέπει να είναι προσβάσιμοι από τον διακομιστή Termix. Δεν υποστηρίζεται η άμεση δρομολόγηση από κεντρικό υπολογιστή σε κεντρικό υπολογιστή.",
-    "methodAuto": "Αυτο",
-    "methodAutoHint": "Επιλέγει SFTP tar ή ανά αρχείο με βάση τον αριθμό αρχείων, το μέγεθος και τη συμπιεστότητα. Τα μεμονωμένα αρχεία χρησιμοποιούν πάντα SFTP ροής.",
-    "methodItemSftp": "SFTP ανά αρχείο",
-    "methodItemSftpHint": "Μεταφέρετε κάθε αρχείο ξεχωριστά μέσω SFTP. Λειτουργεί σε όλους τους κεντρικούς υπολογιστές, συμπεριλαμβανομένων των Windows.",
-    "methodItemSftpLimitation": "Κάθε αρχείο χρησιμοποιεί την ίδια ροή SFTP ως αντίγραφο ενός μόνο αρχείου, το ένα μετά το άλλο. Η πρόοδος συνδυάζεται σε όλα τα αρχεία, επομένως η γραμμή κινείται αργά κατά τη διάρκεια μεγάλων αρχείων.",
-    "methodLabel": "Μέθοδος μεταφοράς",
-    "methodPreviewError": "Δεν ήταν δυνατή η προεπισκόπηση της μεθόδου μεταφοράς. Ο διακομιστής θα επιλέξει μια μέθοδο κατά την εκκίνηση.",
-    "methodPreviewLoading": "Υπολογισμός μεθόδου μεταφοράς…",
-    "methodPreviewScanSummary": "{{fileCount}} αρχεία, {{totalSize}} συνολικά (σαρωμένα στον κεντρικό υπολογιστή προέλευσης).",
-    "methodPreviewWillUseItemSftp": "Θα χρησιμοποιηθεί: SFTP ανά αρχείο",
-    "methodPreviewWillUseTar": "Θα χρησιμοποιηθεί: Αρχείο Tar",
-    "methodReason": {
-      "user_item_sftp": "Επιλέξατε SFTP ανά αρχείο.",
-      "user_tar": "Επιλέξατε το αρχείο tar.",
-      "tar_unavailable": "Το Tar δεν είναι διαθέσιμο σε έναν ή και στους δύο κεντρικούς υπολογιστές, επομένως θα χρησιμοποιηθεί το SFTP ανά αρχείο.",
-      "windows_host": "Εμπλέκεται ένας κεντρικός υπολογιστής των Windows, επομένως δεν χρησιμοποιείται το tar.",
-      "auto_multi_large": "Αυτόματα: πολλά αρχεία, συμπεριλαμβανομένου ενός μεγάλου αρχείου ({{largestSize}}) με συμπιέσιμα δεδομένα. Το Tar τα ομαδοποιεί σε μία μεταφορά.",
-      "auto_single_large_in_archive": "Αυτόματα: ένα μεγάλο αρχείο ({{largestSize}}) σε αυτό το σύνολο, άρα SFTP ανά αρχείο.",
-      "auto_many_incompressible": "Αυτόματα: ως επί το πλείστον ασυμπίεστα δεδομένα, άρα SFTP ανά αρχείο.",
-      "auto_many_files": "Αυτόματα: πολλά αρχεία ({{fileCount}}), η εντολή tar μειώνει την επιβάρυνση ανά αρχείο.",
-      "auto_default": "Αυτόματα: SFTP ανά αρχείο για αυτό το σύνολο."
-    },
-    "methodTar": "Αρχείο Tar",
-    "methodTarHint": "Συμπίεση στην πηγή, μεταφορά ενός αρχείου, εξαγωγή στον προορισμό. Απαιτείται tar και στους δύο κεντρικούς υπολογιστές Unix.",
-    "metricsCompress": "Συμπίεση στην πηγή: {{duration}}",
-    "metricsExtract": "Εξαγωγή στον προορισμό: {{duration}}",
-    "metricsPrepare": "Προετοιμασία προορισμού: {{duration}}",
-    "metricsRouteBenchmark": "Δρομολόγηση αισθητήρα: άμεση {{direct}}, αναμετάδοση {{relay}}",
-    "metricsSourceDelete": "Αφαίρεση από την πηγή: {{duration}}",
-    "metricsTotal": "Σύνολο: {{duration}}",
-    "metricsTransfer": "Από άκρο σε άκρο: {{throughput}} ({{duration}})",
-    "metricsVerify": "Επαληθεύτηκε το SHA-256: {{duration}}",
-    "moveFolderToHost": "Μετακίνηση φακέλου στον κεντρικό υπολογιστή…",
-    "moveItemsToHost": "Μετακίνηση στοιχείων {{count}} για φιλοξενία…",
-    "moveToHost": "Μετακίνηση στον κεντρικό υπολογιστή…",
-    "noHostsConnected": "Δεν υπάρχουν άλλοι διαθέσιμοι κεντρικοί υπολογιστές διαχείρισης αρχείων.",
-    "noHostsConnectedHint": "Προσθέστε έναν άλλο κεντρικό υπολογιστή SSH με ενεργοποιημένο το File Manager στο Host Manager.",
-    "parallelSegmentsHint": "Τα μεγάλα αρχεία χωρίζονται σε κομμάτια των 256 MB. Πολλαπλές λωρίδες χρησιμοποιούν ξεχωριστές συνδέσεις (όπως η έναρξη αρκετών μεταφορών) για υψηλότερη συνολική απόδοση.",
-    "parallelSegmentsLabel": "Παράλληλες λωρίδες μετεπιβίβασης",
-    "parallelSegmentsOption": "{{count}} λωρίδες",
-    "progressBenchmarking": "Επιλογή της ταχύτερης διαδρομής μεταφοράς…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Ματαίωση",
-    "progressCancelling": "Ακύρωση…",
-    "progressCompressing": "Συμπίεση στον κεντρικό υπολογιστή προέλευσης…",
-    "progressExtracting": "Εξαγωγή στον προορισμό…",
-    "progressItems": "{{current}} / {{total}} αρχεία",
-    "progressReconnecting": "Επανασύνδεση…",
-    "progressStalled": "Σταματημένο",
-    "progressTotalSpeed": "{{speed}} σύνολο ({{lanes}} λωρίδες)",
-    "progressTransferring": "Μεταφορά δεδομένων…",
-    "progressTransferringItems": "Μεταφορά αρχείων ({{current}} από {{total}})…",
-    "progressVerifying": "Επαλήθευση ακεραιότητας αρχείου…",
-    "recentDestinations": "Πρόσφατοι προορισμοί",
-    "resumedHint": "Επανασύνδεση με μια ενεργή μεταφορά που ξεκίνησε σε άλλο παράθυρο.",
-    "retryTransfer": "Δοκιμάζω πάλι",
-    "retryTransferError": "Η επανάληψη απέτυχε",
-    "selectDestinationHost": "Επιλέξτε κεντρικό υπολογιστή προορισμού",
-    "transferCancelled": "Η μεταφορά ακυρώθηκε.",
-    "transferCancelledCopyHint": "Ενδέχεται να παραμείνουν μερικά αρχεία στον προορισμό.",
-    "transferCancelledMoveHint": "Ενδέχεται να παραμείνουν μερικά αρχεία στον προορισμό. Τα αρχεία προέλευσης δεν καταργήθηκαν.",
-    "transferError": "Η μεταφορά απέτυχε",
-    "transferFailedRetryHint": "Μερικά δεδομένα διατηρήθηκαν στον προορισμό. Η επανάληψη θα συνεχιστεί όταν αποκατασταθεί η σύνδεση.",
-    "transferPartialHint": "Δεν ήταν δυνατή η μεταφορά: {{paths}}",
-    "transferSuccess": "Η μεταφορά ολοκληρώθηκε",
-    "metricsHopSourceRead": "Πηγή → διακομιστής: {{throughput}}",
-    "metricsHopDestSftpWrite": "Διακομιστής → προορισμός (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Διακομιστής → προορισμός (τοπικός): {{throughput}}"
-  },
-  "plugin": {
-    "name": "Διαχειριστής αρχείων"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/es_ES.json b/plugins/file-manager/locales/translated/es_ES.json
deleted file mode 100644
index b33604040..000000000
--- a/plugins/file-manager/locales/translated/es_ES.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Archivos",
-    "sftp": "SFTP",
-    "openFileManager": "Abrir gestor de archivos"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilice el administrador de archivos",
-      "description": "Explora, edita y transfiere archivos a través de SFTP."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Habilitar Gestor de archivos",
-        "description": "Explore y edite archivos en este servidor a través de SFTP."
-      },
-      "defaultPath": {
-        "label": "Ruta predeterminada"
-      },
-      "scpLegacy": {
-        "label": "Modo SCP heredado"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Transferencias simultáneas de archivos",
-        "description": "¿Cuántos archivos sube o descarga simultáneamente el gestor local/remoto? Reduzca este valor si su servidor limita los canales SFTP."
-      },
-      "confirmBeforeTrash": {
-        "label": "Confirme antes de mover los archivos a la papelera.",
-        "description": "Pregunte antes de mover archivos remotos a la papelera. La eliminación permanente aún requiere confirmación."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Gestor de archivos"
-  },
-  "fileManager": {
-    "noHostSelected": "Ningún host seleccionado",
-    "initializingEditor": "Inicializando editor...",
-    "file": "Archivo",
-    "folder": "Carpeta",
-    "uploadFile": "Subir archivo",
-    "downloadFile": "Descargar",
-    "extractArchive": "Extraer archivo",
-    "extractingArchive": "Extrayendo {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} extraído correctamente",
-    "extractFailed": "Extracción fallida",
-    "compressFile": "Comprimir archivo",
-    "compressFiles": "Comprimir archivos",
-    "compressFilesDesc": "Comprimir {{count}} elementos en un archivo",
-    "archiveName": "Nombre del archivo",
-    "enterArchiveName": "Introduzca el nombre del archivo...",
-    "compressionFormat": "Formato de compresión",
-    "selectedFiles": "Archivos seleccionados",
-    "andMoreFiles": "y {{count}} más...",
-    "compress": "Comprimir",
-    "compressingFiles": "Comprimiendo {{count}} elementos en {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} creado correctamente",
-    "compressFailed": "La compresión falló",
-    "edit": "Editar",
-    "preview": "Vista previa",
-    "previous": "Anterior",
-    "next": "Siguiente",
-    "pageXOfY": "Página {{current}} de {{total}}",
-    "zoomOut": "Alejar",
-    "zoomIn": "Acercar",
-    "newFile": "Nuevo archivo",
-    "newFolder": "Nueva carpeta",
-    "rename": "Renombrar",
-    "uploading": "Subiendo...",
-    "uploadingFile": "Subiendo {{name}}...",
-    "uploadingChunk": "Cargando {{name}}: {{percent}}% (parte {{chunk}} de {{total}})",
-    "fileName": "Nombre del archivo",
-    "folderName": "Nombre de la carpeta",
-    "fileUploadedSuccessfully": "Archivo \"{{name}}\" subido correctamente",
-    "failedToUploadFile": "Error al subir el archivo",
-    "uploadingFolderFiles": "Subiendo {{count}} archivo(s)...",
-    "uploadedFolderFiles": "Se subieron correctamente los archivos {{count}}",
-    "uploadedFolderPartial": "Se subieron {{uploaded}} archivos, {{failed}} falló.",
-    "fileDownloadedSuccessfully": "Archivo \"{{name}}\" descargado correctamente",
-    "failedToDownloadFile": "Error al descargar el archivo",
-    "fileCreatedSuccessfully": "Archivo \"{{name}}\" creado correctamente",
-    "folderCreatedSuccessfully": "Carpeta \"{{name}}\" creada correctamente",
-    "failedToCreateItem": "No se pudo crear el elemento",
-    "operationFailed": "La operación {{operation}} falló para {{name}}: {{error}}",
-    "failedToResolveSymlink": "No se pudo resolver el enlace simbólico",
-    "itemsDeletedSuccessfully": "{{count}} elementos eliminados correctamente",
-    "failedToDeleteItems": "No se pudieron eliminar los elementos",
-    "sudoPasswordRequired": "Se requiere contraseña de administrador",
-    "enterSudoPassword": "Introduzca la contraseña sudo para continuar esta operación",
-    "sudoPassword": "Contraseña sudo",
-    "sudoOperationFailed": "La operación sudo falló",
-    "sudoAuthFailed": "La autenticación sudo falló",
-    "dragFilesToUpload": "Suelte los archivos aquí para subirlos",
-    "dropToUploadHere": "Arrastra para subir aquí",
-    "dropToDownloadHere": "Haz clic aquí para descargar",
-    "localFiles": "Local",
-    "showLocalFiles": "Mostrar archivos locales (vista dividida)",
-    "hideLocalFiles": "Ocultar archivos locales",
-    "localHome": "Carpeta de inicio",
-    "localPathPlaceholder": "Ruta de la carpeta local",
-    "localShowHidden": "Mostrar archivos ocultos",
-    "localHideHidden": "Ocultar archivos ocultos",
-    "localRevealInFileManager": "Mostrar en el administrador de archivos del sistema",
-    "localCannotOpenFolder": "No se puede abrir la carpeta",
-    "localItemCount": "{{count}} elementos",
-    "localSelectedCount": "{{count}} seleccionados",
-    "back": "Volver",
-    "forward": "Adelante",
-    "up": "Arriba",
-    "kind": "Amable",
-    "localUploadingProgress": "Subiendo {{current}} de {{total}}",
-    "localDownloadingProgress": "Descargando {{current}} de {{total}}",
-    "localTransferInFlight": "{{count}} al instante",
-    "localPreparingDownload": "Preparando la descarga...",
-    "localTransferCancelled": "Transferencia cancelada",
-    "localNothingToTransfer": "Nada que transferir",
-    "localUploadComplete": "Archivo(s) subido(s) {{count}}",
-    "localUploadFailed": "Error al cargar la página",
-    "localUploadPartial": "Se subieron {{done}} archivos, {{failed}} falló.",
-    "localDownloadComplete": "Archivo(s) descargado(s) {{count}}",
-    "localDownloadFailed": "Error en la descarga",
-    "localDownloadPartial": "Se descargaron {{done}} archivos, {{failed}} falló.",
-    "localReplaceExistingPrompt": "Ya existen {{count}} elementos en esta carpeta. ¿Desea reemplazarlos?",
-    "localReplace": "Reemplazar",
-    "localSkipExisting": "Saltar",
-    "localSkippedExisting": "Se omitieron {{count}} elementos existentes",
-    "localUnsafeNamesSkipped": "Se omitieron {{count}} elementos cuyos nombres no se pueden usar en este ordenador.",
-    "localOpen": "Abrir",
-    "localOpenFolder": "Abrir carpeta",
-    "localUploadToRemote": "Subir al servidor",
-    "localUploadToRemoteMany": "Sube {{count}} elementos al servidor",
-    "localMoveToTrash": "Mover a la basura",
-    "localMoveToTrashMany": "Mover {{count}} elementos a la Papelera",
-    "localTrashConfirmSingle": "¿Mover \"{{name}}\" a la papelera?",
-    "localTrashConfirmFolder": "¿Mover la carpeta \"{{name}}\" y todo su contenido a la Papelera?",
-    "localTrashConfirmMany": "¿Mover {{count}} elementos a la Papelera?",
-    "localTrashed": "Se movieron {{count}} elementos a la Papelera",
-    "localTrashFailed": "No se pudo mover a la papelera",
-    "localRenameFailed": "Error al cambiar el nombre",
-    "localCreateFailed": "No se pudo crear el artículo.",
-    "goToParentFolder": "Ir a la carpeta principal",
-    "resizeSidebar": "Arrastra para cambiar el tamaño de la barra lateral (haz doble clic para restablecer).",
-    "resizeLocalPane": "Arrastra para cambiar el tamaño del panel local (haz doble clic para restablecer).",
-    "columns": "Columnas",
-    "columnsHint": "Haz clic con el botón derecho para elegir las columnas.",
-    "emptyFolder": "Esta carpeta está vacía",
-    "searchFiles": "Buscar archivos...",
-    "upload": "Subir",
-    "selectHostToStart": "Seleccione un host para iniciar la gestión de archivos",
-    "sshRequiredForFileManager": "El gestor de archivos requiere SSH. Este host no tiene SSH habilitado.",
-    "failedToConnect": "No se pudo conectar a SSH",
-    "failedToLoadDirectory": "No se pudo cargar el directorio",
-    "noSSHConnection": "No hay conexión SSH disponible",
-    "copy": "Copiar",
-    "cut": "Cortar",
-    "paste": "Pegar",
-    "copyPath": "Copiar ruta",
-    "copyPaths": "Copiar rutas",
-    "delete": "Eliminar",
-    "properties": "Propiedades",
-    "refresh": "Actualizar",
-    "downloadFiles": "Descargar {{count}} archivos al navegador",
-    "copyFiles": "Copiar {{count}} elementos",
-    "cutFiles": "Cortar {{count}} elementos",
-    "deleteFiles": "Eliminar {{count}} elementos",
-    "filesCopiedToClipboard": "{{count}} elementos copiados al portapapeles",
-    "filesCutToClipboard": "{{count}} elementos cortados al portapapeles",
-    "pathCopiedToClipboard": "Ruta copiada al portapapeles",
-    "pathsCopiedToClipboard": "{{count}} rutas copiadas al portapapeles",
-    "failedToCopyPath": "Error al copiar la ruta al portapapeles",
-    "copyFolderLink": "Copiar enlace a la carpeta",
-    "copyCurrentFolderLink": "Copiar enlace a la carpeta actual",
-    "folderLinkCopied": "Enlace a la carpeta copiado al portapapeles",
-    "failedToCopyFolderLink": "Error al copiar el enlace a la carpeta",
-    "movedItems": "{{count}} elementos movidos",
-    "failedToDeleteItem": "Error al eliminar el elemento",
-    "itemRenamedSuccessfully": "{{type}} renombrado con éxito",
-    "failedToRenameItem": "Error al renombrar el elemento",
-    "download": "Descargar",
-    "openExternalEditor": "Abrir externamente",
-    "chooseExternalEditor": "Elegir editor externo",
-    "externalEditorSelected": "Editor externo seleccionado",
-    "externalEditorDesktopOnly": "El editor externo solo está disponible en la aplicación de escritorio",
-    "externalEditorOpened": "Abierto en el editor externo. Al guardar allí se subirán los cambios al servidor.",
-    "failedToOpenExternalEditor": "Error al abrir el editor externo",
-    "failedToSelectExternalEditor": "Error al seleccionar el editor externo",
-    "permissions": "Permisos",
-    "size": "Tamaño",
-    "modified": "Modificado",
-    "path": "Ruta",
-    "confirmDelete": "¿Está seguro de que desea eliminar {{name}}?",
-    "permissionDenied": "Permiso denegado",
-    "serverError": "Error del servidor",
-    "fileSavedSuccessfully": "Archivo guardado con éxito",
-    "failedToSaveFile": "Error al guardar el archivo",
-    "confirmDeleteSingleItem": "¿Está seguro de que desea eliminar permanentemente \"{{name}}\"?",
-    "confirmDeleteMultipleItems": "¿Está seguro de que desea eliminar permanentemente {{count}} elementos?",
-    "confirmDeleteMultipleItemsWithFolders": "¿Está seguro de que desea eliminar permanentemente {{count}} elementos? Esto incluye carpetas y su contenido.",
-    "confirmDeleteFolder": "¿Está seguro de que desea eliminar permanentemente la carpeta \"{{name}}\" y todo su contenido?",
-    "permanentDeleteWarning": "Esta acción no se puede deshacer. Los elementos se eliminarán permanentemente del servidor.",
-    "moveToTrashWarning": "El/los elemento(s) se moverán a la Papelera de Termix y se podrán restaurar antes de que expire el período de retención.",
-    "itemsMovedToTrash": "{{count}} elemento(s) movido(s) a la Papelera",
-    "trash": "Basura",
-    "trashDescription": "Los elementos eliminados se conservan durante {{days}} día(s) en este host.",
-    "trashLoadFailed": "No se pudo cargar la papelera.",
-    "trashEmpty": "La papelera está vacía",
-    "trashRestore": "Restaurar",
-    "trashRestored": "Restaurado {{name}}",
-    "trashRestoreFailed": "No se pudo restaurar el elemento. Es posible que la ruta original ya exista.",
-    "trashDeletePermanently": "Eliminar permanentemente",
-    "trashDeleteConfirm": "¿Eliminar permanentemente {{name}}? Esto no se puede deshacer.",
-    "trashPermanentlyDeleted": "Eliminado permanentemente {{name}}",
-    "trashDeleteFailed": "No se pudo eliminar el elemento de forma permanente.",
-    "trashEmptyAction": "Vaciar la basura",
-    "trashEmptyConfirm": "¿Eliminar permanentemente todos los elementos de la Papelera? Esta acción es irreversible.",
-    "trashEmptied": "Vaciado de basura",
-    "trashRetention": "Limpieza automática después de (días)",
-    "trashRetentionSaved": "Se ha actualizado la retención de basura.",
-    "trashRetentionFailed": "Error al actualizar la retención de la papelera",
-    "trashUnavailableConfirm": "Este elemento no se puede mover a la Papelera, normalmente porque se encuentra en otro sistema de archivos o requiere permisos de administrador. ¿Desea eliminarlo permanentemente?",
-    "recent": "Recientes",
-    "pinned": "Fijados",
-    "folderShortcuts": "Accesos directos a carpetas",
-    "failedToReconnectSSH": "Error al reconectar la sesión SSH",
-    "openTerminalHere": "Abrir terminal aquí",
-    "run": "Ejecutar",
-    "openTerminalInFolder": "Abrir terminal en esta carpeta",
-    "openTerminalInFileLocation": "Abrir terminal en la ubicación del archivo",
-    "runningFile": "Ejecutando - {{file}}",
-    "onlyRunExecutableFiles": "Solo se pueden ejecutar archivos ejecutables",
-    "directories": "Directorios",
-    "removedFromRecentFiles": "Se eliminó \"{{name}}\" de los archivos recientes",
-    "removeFailed": "Error al eliminar",
-    "unpinnedSuccessfully": "Se desancló \"{{name}}\" correctamente",
-    "unpinFailed": "Error al desanclar",
-    "removedShortcut": "Se eliminó el acceso directo \"{{name}}\"",
-    "removeShortcutFailed": "Error al eliminar el acceso directo",
-    "clearedAllRecentFiles": "Se borraron todos los archivos recientes",
-    "clearFailed": "Error al borrar",
-    "removeFromRecentFiles": "Eliminar de archivos recientes",
-    "clearAllRecentFiles": "Borrar todos los archivos recientes",
-    "unpinFile": "Desanclar archivo",
-    "removeShortcut": "Eliminar acceso directo",
-    "pinFile": "Anclar archivo",
-    "addToShortcuts": "Añadir a accesos directos",
-    "pasteFailed": "Error al pegar",
-    "noUndoableActions": "No hay acciones para deshacer",
-    "undoCopySuccess": "Se deshizo la copia: se eliminaron {{count}} archivos copiados",
-    "undoCopyFailedDelete": "Error al deshacer: no se pudo eliminar ningún archivo copiado",
-    "undoCopyFailedNoInfo": "Error al deshacer: no se encontró información de los archivos copiados",
-    "undoMoveSuccess": "Se deshizo el movimiento: se movieron {{count}} archivos a su ubicación original",
-    "undoMoveFailedMove": "Error al deshacer: no se pudo mover ningún archivo de vuelta",
-    "undoMoveFailedNoInfo": "Error al deshacer: no se encontró información de los archivos movidos",
-    "undoDeleteNotSupported": "La operación de eliminación no se puede deshacer: los archivos se han eliminado permanentemente del servidor",
-    "undoTypeNotSupported": "Tipo de operación de deshacer no compatible",
-    "undoOperationFailed": "Error en la operación de deshacer",
-    "unknownError": "Error desconocido",
-    "confirm": "Confirmar",
-    "find": "Buscar...",
-    "replace": "Reemplazar",
-    "downloadInstead": "Descargar en su lugar",
-    "keyboardShortcuts": "Atajos de teclado",
-    "searchAndReplace": "Buscar y reemplazar",
-    "editing": "Edición",
-    "search": "Buscar",
-    "findNext": "Buscar siguiente",
-    "findPrevious": "Buscar anterior",
-    "save": "Guardar",
-    "selectAll": "Seleccionar todo",
-    "undo": "Deshacer",
-    "redo": "Rehacer",
-    "moveLineUp": "Mover línea hacia arriba",
-    "moveLineDown": "Mover línea hacia abajo",
-    "toggleComment": "Alternar comentario",
-    "autoComplete": "Autocompletar",
-    "imageLoadError": "Error al cargar la imagen",
-    "startTyping": "Empiece a escribir...",
-    "unknownSize": "Tamaño desconocido",
-    "fileIsEmpty": "El archivo está vacío",
-    "largeFileWarning": "Advertencia de archivo grande",
-    "largeFileWarningDesc": "Este archivo tiene un tamaño de {{size}}, lo que puede causar problemas de rendimiento al abrirlo como texto.",
-    "fileNotFoundAndRemoved": "El archivo \"{{name}}\" no se encontró y se ha eliminado de los archivos recientes/fijados.",
-    "failedToLoadFile": "Error al cargar el archivo: {{error}}",
-    "serverErrorOccurred": "Se ha producido un error en el servidor. Vuelva a intentarlo más tarde.",
-    "autoSaveFailed": "Error en el autoguardado",
-    "fileAutoSaved": "Archivo autoguardado",
-    "moveFileFailed": "Error al mover {{name}}",
-    "moveOperationFailed": "Error en la operación de mover",
-    "canOnlyCompareFiles": "Solo se pueden comparar dos archivos",
-    "comparingFiles": "Comparando archivos: {{file1}} y {{file2}}",
-    "dragFailed": "Error en la operación de arrastre",
-    "filePinnedSuccessfully": "Archivo \"{{name}}\" fijado correctamente",
-    "pinFileFailed": "Error al fijar el archivo",
-    "fileUnpinnedSuccessfully": "Archivo \"{{name}}\" desfijado correctamente",
-    "unpinFileFailed": "No se pudo desanclar el archivo",
-    "shortcutAddedSuccessfully": "Acceso directo a la carpeta \"{{name}}\" añadido correctamente",
-    "addShortcutFailed": "No se pudo añadir el acceso directo",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} elementos correctamente",
-    "operationCompleted": "{{operation}} {{count}} elementos",
-    "downloadFileSuccess": "Archivo {{name}} descargado correctamente",
-    "downloadFileFailed": "Error en la descarga",
-    "downloadingFile": "Descargando {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Mover a {{name}}",
-    "diffCompareWith": "Comparar diferencias con {{name}}",
-    "dragOutsideToDownload": "Arrastrar fuera de la ventana para descargar ({{count}} archivos)",
-    "newFolderDefault": "NuevaCarpeta",
-    "newFileDefault": "NuevoArchivo.txt",
-    "successfullyMovedItems": "{{count}} elementos movidos correctamente a {{target}}",
-    "move": "Mover",
-    "searchInFile": "Buscar en archivo (Ctrl+F)",
-    "showKeyboardShortcuts": "Mostrar atajos de teclado",
-    "decreaseFontSize": "Reducir tamaño de fuente",
-    "increaseFontSize": "Aumentar tamaño de fuente",
-    "startWritingMarkdown": "Empiece a escribir su contenido Markdown...",
-    "loadingFileComparison": "Cargando comparación de archivos...",
-    "reload": "Recargar",
-    "compare": "Comparar",
-    "sideBySide": "Lado a lado",
-    "inline": "En línea",
-    "fileComparison": "Comparación de archivos: {{file1}} vs {{file2}}",
-    "fileTooLarge": "El archivo es demasiado grande (> 10 MB) y no se puede abrir como texto por motivos de seguridad.",
-    "sshConnectionFailed": "Error de conexión SSH. Verifique su conexión a {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Error al cargar el archivo: {{error}}",
-    "connecting": "Conectando...",
-    "connectedSuccessfully": "Conectado correctamente",
-    "totpVerificationFailed": "Error en la verificación TOTP",
-    "browserSignInFailed": "Error al iniciar sesión. Inténtalo de nuevo.",
-    "authenticationFailed": "Error de autenticación",
-    "incorrectPassphrase": "Frase de contraseña incorrecta. Inténtelo de nuevo.",
-    "verificationCodePrompt": "Código de verificación:",
-    "changePermissions": "Cambiar permisos",
-    "currentPermissions": "Permisos actuales",
-    "owner": "Propietario",
-    "group": "Grupo",
-    "others": "Otros",
-    "read": "Lectura",
-    "write": "Escritura",
-    "execute": "Ejecución",
-    "permissionsChangedSuccessfully": "Permisos cambiados correctamente",
-    "failedToChangePermissions": "Error al cambiar los permisos",
-    "name": "Nombre",
-    "sortByName": "Nombre",
-    "sortByDate": "Fecha de modificación",
-    "sortBySize": "Tamaño",
-    "ascending": "Ascendente",
-    "descending": "Descendente",
-    "root": "Raíz",
-    "new": "Nuevo",
-    "sortBy": "Ordenar por",
-    "items": "Elementos",
-    "selected": "Seleccionados",
-    "editor": "Editor",
-    "octal": "Octal",
-    "storage": "Almacenamiento",
-    "disk": "Disco",
-    "used": "Usado",
-    "of": "de",
-    "toggleSidebar": "Alternar barra lateral",
-    "compactLayout": "Utilice un diseño compacto.",
-    "comfortableLayout": "Utilice una disposición cómoda",
-    "cannotLoadPdf": "No se puede cargar el PDF",
-    "pdfLoadError": "Se produjo un error al cargar este archivo PDF.",
-    "loadingPdf": "Cargando visor de PDF...",
-    "loadingPage": "Cargando página...",
-    "cancel": "Cancelar",
-    "copiedItems_one": "Copiado {{count}} elemento",
-    "copiedItems_other": "Elementos copiados {{count}}",
-    "deleteCopiedFileFailed": "No se pudo eliminar la copia de {{name}}: {{error}}",
-    "dragMovedItems_one": "Se movió el elemento {{count}} a {{target}}",
-    "dragMovedItems_other": "Se movieron {{count}} elementos a {{target}}",
-    "moveBackFileFailed": "No se pudo mover {{name}} hacia atrás: {{error}}",
-    "terminal": "Terminal: {{host}} ({{path}})",
-    "dragToDesktop": "Arrastrando {{name}} al escritorio",
-    "dragFilesToDesktop": "Arrastrar archivos {{count}} al escritorio",
-    "folderDragUnsupported": "Todavía no se admite arrastrar carpetas al escritorio.",
-    "saveToDesktopFailed": "Error al guardar: {{error}}",
-    "dragFailedDetail": "Error al arrastrar: {{error}}",
-    "videoUnsupported": "Tu navegador no puede reproducir este formato de vídeo.",
-    "downloadToPlay": "Descárgalo para jugarlo en otro lugar.",
-    "cannotPreviewType": "No se puede previsualizar este tipo de archivo.",
-    "cannotPreviewTypeHint": "Este tipo de archivo no tiene vista previa. Descárguelo para abrirlo en otra aplicación.",
-    "loadingFile": "Cargando archivo...",
-    "loadingImage": "Cargando imagen...",
-    "loadingEditor": "Cargando editor...",
-    "loadingPreview": "Cargando vista previa...",
-    "loadingAudio": "Cargando reproductor de audio...",
-    "emptyPreview": "Todavía no hay nada que mostrar...",
-    "revert": "Revertir",
-    "openAsText": "Abrir como texto",
-    "confirmOpenAsText": "¿Desea continuar abriendo este archivo como texto? Esto podría ralentizar su navegador."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "Transferir archivos entre dos hosts SSH.",
-    "sourceServer": "Servidor de origen",
-    "destinationServer": "Servidor de destino",
-    "selectHost": "Seleccione el host",
-    "noHostSelected": "Ningún host seleccionado",
-    "move": "Mover",
-    "copy": "Copiar",
-    "upload": "Subir",
-    "itemsSelected": "{{count}} elemento seleccionado",
-    "itemsSelected_other": "{{count}} elementos seleccionados",
-    "ready": "Listo",
-    "loadingHosts": "Cargando hosts...",
-    "name": "Nombre",
-    "modified": "Modificado",
-    "size": "Tamaño",
-    "noFiles": "No hay archivos",
-    "open": "Abrir",
-    "up": "Arriba",
-    "refresh": "Actualizar",
-    "copyToTarget": "Copiar al directorio de destino",
-    "rename": "Renombrar",
-    "delete": "Eliminar",
-    "editPermissions": "Editar permisos",
-    "createNewFolder": "Crear nueva carpeta",
-    "deleteSelectedItems": "Eliminar elementos seleccionados",
-    "deleteConfirm": "¿Eliminar {{count}} elemento seleccionado?",
-    "deleteConfirm_other": "¿Eliminar {{count}} elementos seleccionados?",
-    "cancel": "Cancelar",
-    "save": "Guardar",
-    "folderCreated": "Carpeta creada",
-    "itemRenamed": "Artículo renombrado",
-    "actionFailed": "Acción fallida",
-    "itemsDeleted": "{{count}} elemento eliminado",
-    "itemsDeleted_other": "{{count}} elementos eliminados",
-    "deleteFailed": "Error al eliminar",
-    "permissionsUpdated": "Permisos actualizados",
-    "noRemoteSessionConnected": "No hay ninguna sesión remota conectada.",
-    "failedToListFiles": "No se pudieron listar los archivos.",
-    "failedToRefresh": "No se pudo actualizar",
-    "destinationInsideSource": "El destino no puede estar dentro de la ruta de origen seleccionada.",
-    "sameHostNoOp": "La carpeta de origen y la de destino son la misma."
-  },
-  "hosts": {
-    "fileManager": "Gestor de archivos",
-    "fileManagerUrlCopied": "URL del gestor de archivos copiada",
-    "copyFileManagerUrlAction": "Copiar URL del gestor de archivos",
-    "docsLink": "Ver documentación",
-    "hostNotFound": "Host no encontrado",
-    "loadingHost": "Cargando host..."
-  },
-  "onboarding": {
-    "feature_files": "Gestor de archivos",
-    "feature_files_desc": "Navega, sube, descarga y edita archivos a través de SFTP sin salir de la aplicación."
-  },
-  "terminal": {
-    "runTitle": "Ejecutando {{command}} - {{host}}",
-    "terminalTitle": "Terminal - {{host}}",
-    "terminalWithPath": "Terminal - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Examinar carpetas de destino",
-    "browsePathError": "No se pudo abrir esta ruta en el host de destino.",
-    "browsePathWillBeCreated": "Esta carpeta no existe aún. Se creará al iniciar la transferencia.",
-    "cancel": "Cancelar",
-    "cleanupDestFiles": "Limpiar destino",
-    "cleanupDestFilesError": "Error al limpiar",
-    "cleanupDestFilesNothing": "Nada que limpiar en el destino",
-    "cleanupDestFilesPartial": "Algunos archivos parciales no se pudieron eliminar",
-    "cleanupDestFilesSuccess": "Se eliminaron los archivos parciales del destino",
-    "confirmCopy": "Copiar",
-    "confirmMove": "Mover",
-    "copyFolderToHost": "Copiar carpeta al host…",
-    "copyItemsToHost": "Copiar {{count}} elementos al host…",
-    "copyToHost": "Copiar al host…",
-    "destinationPath": "Ruta de destino",
-    "destMustBeDirectory": "El destino debe ser un directorio para transferencias de múltiples elementos",
-    "goUp": "Subir",
-    "hostAuthRequired": "Se requiere autenticación. Abra primero el administrador de archivos en este host.",
-    "hostConnecting": "Conectando…",
-    "hostConnectionFailed": "Conexión fallida",
-    "hostDisconnected": "No conectado",
-    "hostReady": "Listo",
-    "itemsSummary": "{{count}} elementos",
-    "jumpHostLimitation": "Ambos equipos deben ser accesibles desde el servidor de Termix. No se admite el enrutamiento directo entre equipos.",
-    "methodAuto": "Automático",
-    "methodAutoHint": "Elige tar o SFTP por archivo según el número de archivos, tamaño y compresibilidad. Los archivos individuales siempre usan SFTP por transmisión continua.",
-    "methodItemSftp": "SFTP por archivo",
-    "methodItemSftpHint": "Transfiere cada archivo individualmente por SFTP. Funciona en todos los equipos, incluido Windows.",
-    "methodItemSftpLimitation": "Cada archivo usa el mismo flujo SFTP que una copia de un solo archivo, uno tras otro. El progreso se combina en todos los archivos, por lo que la barra se mueve lentamente durante archivos grandes.",
-    "methodLabel": "Método de transferencia",
-    "methodPreviewError": "No se pudo previsualizar el método de transferencia. El servidor seleccionará un método al iniciar.",
-    "methodPreviewLoading": "Calculando el método de transferencia…",
-    "methodPreviewScanSummary": "{{fileCount}} archivos, {{totalSize}} total (analizado en el equipo de origen).",
-    "methodPreviewWillUseItemSftp": "Se usará: SFTP por archivo",
-    "methodPreviewWillUseTar": "Se usará: Archivo Tar",
-    "methodReason": {
-      "user_item_sftp": "Has elegido SFTP por archivo.",
-      "user_tar": "Has elegido archivo tar.",
-      "tar_unavailable": "Tar no está disponible en uno o ambos hosts, por lo que se utilizará SFTP por archivo.",
-      "windows_host": "Se trata de un sistema operativo Windows, por lo que no se utiliza tar.",
-      "auto_multi_large": "Automático: varios archivos, incluido un archivo grande ({{largestSize}}) con datos comprimibles. Tar los agrupa en una sola transferencia.",
-      "auto_single_large_in_archive": "Automático: un archivo grande ({{largestSize}}) en este conjunto, por lo que SFTP por archivo.",
-      "auto_many_incompressible": "Automático: datos mayormente incompresibles, por lo que se utiliza SFTP por archivo.",
-      "auto_many_files": "Automático: muchos archivos ({{fileCount}}), tar reduce la sobrecarga por archivo.",
-      "auto_default": "Auto: SFTP por archivo para este conjunto."
-    },
-    "methodTar": "Archivo Tar",
-    "methodTarHint": "Comprime en origen, transfiere un archivo, extrae en destino. Necesita tar en ambos equipos Unix.",
-    "metricsCompress": "Compresión en origen: {{duration}}",
-    "metricsExtract": "Extracción en destino: {{duration}}",
-    "metricsPrepare": "Preparar destino: {{duration}}",
-    "metricsRouteBenchmark": "Sondeo de ruta: directo {{direct}}, relé {{relay}}",
-    "metricsSourceDelete": "Eliminación del origen: {{duration}}",
-    "metricsTotal": "Total: {{duration}}",
-    "metricsTransfer": "Extremo a extremo: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 verificado: {{duration}}",
-    "moveFolderToHost": "Mover carpeta al host…",
-    "moveItemsToHost": "Mover {{count}} elementos al host…",
-    "moveToHost": "Mover al host…",
-    "noHostsConnected": "No hay otros hosts de gestor de archivos disponibles.",
-    "noHostsConnectedHint": "Añade otro host SSH con el Gestor de Archivos habilitado en el Administrador de Hosts.",
-    "parallelSegmentsHint": "Los archivos grandes se dividen en fragmentos de 256 MB. Varias vías utilizan conexiones separadas (como iniciar varias transferencias) para un mayor rendimiento total.",
-    "parallelSegmentsLabel": "Vías de transferencia en paralelo",
-    "parallelSegmentsOption": "{{count}} vías",
-    "progressBenchmarking": "Seleccionar la ruta de transferencia más rápida…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Cancelar",
-    "progressCancelling": "Cancelando…",
-    "progressCompressing": "Comprimiendo en el equipo de origen…",
-    "progressExtracting": "Extrayendo en el destino…",
-    "progressItems": "{{current}} / {{total}} archivos",
-    "progressReconnecting": "Reconectando…",
-    "progressStalled": "Estancado",
-    "progressTotalSpeed": "{{speed}} total ({{lanes}} vías)",
-    "progressTransferring": "Transfiriendo datos…",
-    "progressTransferringItems": "Transfiriendo archivos ({{current}} de {{total}})…",
-    "progressVerifying": "Verificando la integridad del archivo…",
-    "recentDestinations": "Destinos recientes",
-    "resumedHint": "Reconectado a una transferencia activa iniciada en otra ventana.",
-    "retryTransfer": "Reintentar",
-    "retryTransferError": "Error al reintentar",
-    "selectDestinationHost": "Seleccionar host de destino",
-    "transferCancelled": "Transferencia cancelada",
-    "transferCancelledCopyHint": "Pueden quedar archivos parciales en el destino.",
-    "transferCancelledMoveHint": "Pueden quedar archivos parciales en el destino. Los archivos de origen no se eliminaron.",
-    "transferError": "Transferencia fallida",
-    "transferFailedRetryHint": "Se conservaron datos parciales en el destino. El reintento se reanudará cuando se restablezca la conexión.",
-    "transferPartialHint": "No se pudo transferir: {{paths}}",
-    "transferSuccess": "Transferencia completada",
-    "metricsHopSourceRead": "Origen → servidor: {{throughput}}",
-    "metricsHopDestSftpWrite": "Servidor → destino (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Servidor → destino (local): {{throughput}}"
-  },
-  "plugin": {
-    "name": "Gestor de archivos"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/fi_FI.json b/plugins/file-manager/locales/translated/fi_FI.json
deleted file mode 100644
index 9da257f82..000000000
--- a/plugins/file-manager/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Tiedostot",
-    "sftp": "SFTP",
-    "openFileManager": "Avaa tiedostonhallinta"
-  },
-  "permissions": {
-    "use": {
-      "title": "Käytä tiedostonhallintaa",
-      "description": "Selaa, muokkaa ja siirrä tiedostoja SFTP:n kautta."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Ota tiedostonhallinta käyttöön",
-        "description": "Selaa ja muokkaa tiedostoja tällä isännöinnillä SFTP:n kautta."
-      },
-      "defaultPath": {
-        "label": "Oletuspolku"
-      },
-      "scpLegacy": {
-        "label": "SCP:n vanha tila"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Samanaikaiset tiedostonsiirrot",
-        "description": "Kuinka monta tiedostoa rinnakkainen paikallinen/etähallinta lataa tai lataa samanaikaisesti. Laske tätä arvoa, jos palvelimesi rajoittaa SFTP-kanavia."
-      },
-      "confirmBeforeTrash": {
-        "label": "Vahvista ennen tiedostojen siirtämistä roskakoriin",
-        "description": "Kysy ennen etätiedostojen siirtämistä roskakoriin. Pysyvä poistaminen vaatii edelleen vahvistuksen."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Tiedostonhallinta"
-  },
-  "fileManager": {
-    "noHostSelected": "Ei valittua isäntää",
-    "initializingEditor": "Editorin alustaminen...",
-    "file": "Tiedosto",
-    "folder": "Kansio",
-    "uploadFile": "Lähetä tiedosto",
-    "downloadFile": "Lataa",
-    "extractArchive": "Pura arkisto",
-    "extractingArchive": "Puretaan {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} uutettu onnistuneesti",
-    "extractFailed": "Poiminta epäonnistui",
-    "compressFile": "Pakkaa tiedosto",
-    "compressFiles": "Pakkaa tiedostot",
-    "compressFilesDesc": "Pakkaa {{count}} kohdetta arkistoon",
-    "archiveName": "Arkiston nimi",
-    "enterArchiveName": "Anna arkiston nimi...",
-    "compressionFormat": "Pakkausmuoto",
-    "selectedFiles": "Valitut tiedostot",
-    "andMoreFiles": "ja {{count}} lisää...",
-    "compress": "Pakkaa",
-    "compressingFiles": "Pakkaamalla {{count}} alkiota {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} luotu onnistuneesti",
-    "compressFailed": "Pakkaus epäonnistui",
-    "edit": "Muokata",
-    "preview": "Esikatselu",
-    "previous": "Edellinen",
-    "next": "Seuraava",
-    "pageXOfY": "Sivu {{current}} / {{total}}",
-    "zoomOut": "Loitonna",
-    "zoomIn": "Lähennä",
-    "newFile": "Uusi tiedosto",
-    "newFolder": "Uusi kansio",
-    "rename": "Nimeä uudelleen",
-    "uploading": "Ladataan...",
-    "uploadingFile": "Ladataan {{name}}...",
-    "uploadingChunk": "Ladataan {{name}}: {{percent}}% (osa {{chunk}} / {{total}})",
-    "fileName": "Tiedoston nimi",
-    "folderName": "Kansion nimi",
-    "fileUploadedSuccessfully": "Tiedosto \"{{name}}\" ladattu onnistuneesti",
-    "failedToUploadFile": "Tiedoston lataaminen epäonnistui",
-    "uploadingFolderFiles": "Ladataan {{count}} tiedostoa/tiedostoja...",
-    "uploadedFolderFiles": "{{count}} tiedostoa ladattu onnistuneesti",
-    "uploadedFolderPartial": "{{uploaded}} tiedoston/tiedostojen {{failed}} lataaminen epäonnistui",
-    "fileDownloadedSuccessfully": "Tiedosto \"{{name}}\" ladattu onnistuneesti",
-    "failedToDownloadFile": "Tiedoston lataaminen epäonnistui",
-    "fileCreatedSuccessfully": "Tiedosto \"{{name}}\" luotu onnistuneesti",
-    "folderCreatedSuccessfully": "Kansio \"{{name}}\" luotu onnistuneesti",
-    "failedToCreateItem": "Kohteen luominen epäonnistui",
-    "operationFailed": "{{operation}} toiminto epäonnistui kohteelle {{name}}: {{error}}",
-    "failedToResolveSymlink": "Symlinkin ratkaiseminen epäonnistui",
-    "itemsDeletedSuccessfully": "{{count}} kohdetta poistettu onnistuneesti",
-    "failedToDeleteItems": "Kohteiden poistaminen epäonnistui",
-    "sudoPasswordRequired": "Järjestelmänvalvojan salasana vaaditaan",
-    "enterSudoPassword": "Anna sudo-salasana jatkaaksesi tätä toimintoa",
-    "sudoPassword": "Sudo-salasana",
-    "sudoOperationFailed": "Sudo-toiminto epäonnistui",
-    "sudoAuthFailed": "Sudo-todennus epäonnistui",
-    "dragFilesToUpload": "Pudota tiedostot tähän ladataksesi",
-    "dropToUploadHere": "Pudota ladataksesi tähän",
-    "dropToDownloadHere": "Pudota ladataksesi tästä",
-    "localFiles": "Paikallinen",
-    "showLocalFiles": "Näytä paikalliset tiedostot (jaettu näkymä)",
-    "hideLocalFiles": "Piilota paikalliset tiedostot",
-    "localHome": "Kotikansio",
-    "localPathPlaceholder": "Paikallisen kansion polku",
-    "localShowHidden": "Näytä piilotetut tiedostot",
-    "localHideHidden": "Piilota piilotetut tiedostot",
-    "localRevealInFileManager": "Näytä järjestelmän tiedostonhallinnassa",
-    "localCannotOpenFolder": "Kansiota ei voi avata",
-    "localItemCount": "{{count}} kohdetta",
-    "localSelectedCount": "{{count}} valittu",
-    "back": "Takaisin",
-    "forward": "Eteenpäin",
-    "up": "Ylös",
-    "kind": "Ystävällinen",
-    "localUploadingProgress": "Ladataan {{current}} / {{total}}",
-    "localDownloadingProgress": "Ladataan {{current}} / {{total}}",
-    "localTransferInFlight": "{{count}} kerralla",
-    "localPreparingDownload": "Valmistellaan latausta...",
-    "localTransferCancelled": "Siirto peruttu",
-    "localNothingToTransfer": "Ei mitään siirrettävää",
-    "localUploadComplete": "Ladatut {{count}} tiedostot",
-    "localUploadFailed": "Lataus epäonnistui",
-    "localUploadPartial": "{{done}} tiedoston/tiedostojen {{failed}} lataaminen epäonnistui",
-    "localDownloadComplete": "Ladatut {{count}} tiedostot",
-    "localDownloadFailed": "Lataus epäonnistui",
-    "localDownloadPartial": "{{done}} tiedoston/tiedostojen {{failed}} lataus epäonnistui",
-    "localReplaceExistingPrompt": "{{count}} kohdetta on jo tässä kansiossa. Korvataanko ne?",
-    "localReplace": "Korvata",
-    "localSkipExisting": "Ohita",
-    "localSkippedExisting": "Ohitettu {{count}} olemassa olevaa kohdetta/kohteita",
-    "localUnsafeNamesSkipped": "Ohitettiin {{count}} kohdetta, joiden nimiä ei voi käyttää tässä tietokoneessa",
-    "localOpen": "Avata",
-    "localOpenFolder": "Avaa kansio",
-    "localUploadToRemote": "Lähetä palvelimelle",
-    "localUploadToRemoteMany": "Lataa {{count}} kohdetta palvelimelle",
-    "localMoveToTrash": "Siirrä roskakoriin",
-    "localMoveToTrashMany": "Siirrä {{count}} kohdetta roskakoriin",
-    "localTrashConfirmSingle": "Siirretäänkö \"{{name}}\" roskakoriin?",
-    "localTrashConfirmFolder": "Siirretäänkö kansio \"{{name}}\" ja kaikki sen sisältö roskakoriin?",
-    "localTrashConfirmMany": "Siirretäänkö {{count}} kohdetta roskakoriin?",
-    "localTrashed": "Siirretty {{count}} kohdetta roskakoriin",
-    "localTrashFailed": "Roskakoriin siirtäminen epäonnistui",
-    "localRenameFailed": "Uudelleennimeäminen epäonnistui",
-    "localCreateFailed": "Kohteen luominen epäonnistui",
-    "goToParentFolder": "Siirry pääkansioon",
-    "resizeSidebar": "Muuta sivupalkin kokoa vetämällä (nollaa kaksoisnapsauttamalla)",
-    "resizeLocalPane": "Vedä muuttaaksesi paikallisen ruudun kokoa (kaksoisnapsauta palauttaaksesi alkuperäisen)",
-    "columns": "Sarakkeet",
-    "columnsHint": "Valitse sarakkeet napsauttamalla hiiren kakkospainikkeella",
-    "emptyFolder": "Tämä kansio on tyhjä",
-    "searchFiles": "Hae tiedostoja...",
-    "upload": "Lataa",
-    "selectHostToStart": "Valitse isäntä tiedostonhallinnan aloittamiseksi",
-    "sshRequiredForFileManager": "Tiedostonhallinta vaatii SSH:n. Tässä isännässä SSH ei ole käytössä.",
-    "failedToConnect": "SSH-yhteyden muodostaminen epäonnistui",
-    "failedToLoadDirectory": "Hakemiston lataaminen epäonnistui",
-    "noSSHConnection": "SSH-yhteyttä ei ole saatavilla",
-    "copy": "Kopioida",
-    "cut": "Leikata",
-    "paste": "Liitä",
-    "copyPath": "Kopioi polku",
-    "copyPaths": "Kopioi polut",
-    "delete": "Poistaa",
-    "properties": "Ominaisuudet",
-    "refresh": "Päivitä",
-    "downloadFiles": "Lataa {{count}} tiedostoa selaimeen",
-    "copyFiles": "Kopioi {{count}} kohdetta",
-    "cutFiles": "Leikkaa {{count}} kohdetta",
-    "deleteFiles": "Poista {{count}} kohdetta",
-    "filesCopiedToClipboard": "{{count}} kohdetta kopioitiin leikepöydälle",
-    "filesCutToClipboard": "{{count}} kohdetta leikataan leikepöydälle",
-    "pathCopiedToClipboard": "Polku kopioitu leikepöydälle",
-    "pathsCopiedToClipboard": "{{count}} polut kopioitu leikepöydälle",
-    "failedToCopyPath": "Polun kopioiminen leikepöydälle epäonnistui",
-    "copyFolderLink": "Kopioi linkki kansioon",
-    "copyCurrentFolderLink": "Kopioi linkki nykyiseen kansioon",
-    "folderLinkCopied": "Kansiolinkki kopioitu leikepöydälle",
-    "failedToCopyFolderLink": "Kansiolinkin kopiointi epäonnistui",
-    "movedItems": "Siirretty {{count}} kohdetta",
-    "failedToDeleteItem": "Kohteen poistaminen epäonnistui",
-    "itemRenamedSuccessfully": "{{type}} nimettiin uudelleen onnistuneesti",
-    "failedToRenameItem": "Kohteen uudelleennimeäminen epäonnistui",
-    "download": "Lataa",
-    "openExternalEditor": "Avaa ulkopuolelta",
-    "chooseExternalEditor": "Valitse ulkoinen editori",
-    "externalEditorSelected": "Ulkoinen editori valittu",
-    "externalEditorDesktopOnly": "Ulkoinen editori on käytettävissä vain työpöytäsovelluksessa",
-    "externalEditorOpened": "Avattu ulkoisessa editorissa. Tallentamalla sinne muutokset latautuvat takaisin palvelimelle.",
-    "failedToOpenExternalEditor": "Ulkoisen editorin avaaminen epäonnistui",
-    "failedToSelectExternalEditor": "Ulkoisen editorin valinta epäonnistui",
-    "permissions": "Käyttöoikeudet",
-    "size": "Koko",
-    "modified": "Muokattu",
-    "path": "Polku",
-    "confirmDelete": "Oletko varma, että haluat poistaa {{name}}?",
-    "permissionDenied": "Lupa evätty",
-    "serverError": "Palvelinvirhe",
-    "fileSavedSuccessfully": "Tiedosto tallennettu onnistuneesti",
-    "failedToSaveFile": "Tiedoston tallennus epäonnistui",
-    "confirmDeleteSingleItem": "Oletko varma, että haluat poistaa pysyvästi \"{{name}}\"?",
-    "confirmDeleteMultipleItems": "Oletko varma, että haluat poistaa pysyvästi {{count}} kohdetta?",
-    "confirmDeleteMultipleItemsWithFolders": "Haluatko varmasti poistaa pysyvästi {{count}} kohdetta? Tämä koskee myös kansioita ja niiden sisältöä.",
-    "confirmDeleteFolder": "Oletko varma, että haluat poistaa pysyvästi kansion \"{{name}}\" ja kaiken sen sisällön?",
-    "permanentDeleteWarning": "Tätä toimintoa ei voi perua. Kohde/kohteet poistetaan pysyvästi palvelimelta.",
-    "moveToTrashWarning": "Kohde(et) siirretään Termixin roskakoriin ja ne voidaan palauttaa ennen säilytysajan päättymistä.",
-    "itemsMovedToTrash": "{{count}} kohdetta siirretty roskakoriin",
-    "trash": "Roska",
-    "trashDescription": "Poistetut kohteet säilytetään tällä isännöinnillä {{days}} päivää.",
-    "trashLoadFailed": "Roskakorin lataaminen epäonnistui",
-    "trashEmpty": "Roskakori on tyhjä",
-    "trashRestore": "Palauttaa",
-    "trashRestored": "Palautettu {{name}}",
-    "trashRestoreFailed": "Kohteen palauttaminen epäonnistui. Alkuperäinen polku saattaa jo olla olemassa.",
-    "trashDeletePermanently": "Poista pysyvästi",
-    "trashDeleteConfirm": "Poistetaanko {{name}}pysyvästi? Tätä ei voi perua.",
-    "trashPermanentlyDeleted": "Poistettu pysyvästi {{name}}",
-    "trashDeleteFailed": "Kohteen pysyvä poistaminen epäonnistui",
-    "trashEmptyAction": "Tyhjennä roskakori",
-    "trashEmptyConfirm": "Poistetaanko kaikki roskakorissa olevat kohteet pysyvästi? Tätä ei voi perua.",
-    "trashEmptied": "Roskakori tyhjennetty",
-    "trashRetention": "Automaattinen puhdistus (päivän) kuluttua",
-    "trashRetentionSaved": "Roskakorin säilytys päivitetty",
-    "trashRetentionFailed": "Roskakorin säilytystietojen päivittäminen epäonnistui.",
-    "trashUnavailableConfirm": "Tätä kohdetta ei voida siirtää roskakoriin, yleensä siksi, että se on toisessa tiedostojärjestelmässä tai vaatii laajennetut käyttöoikeudet. Poistetaanko se pysyvästi?",
-    "recent": "Viimeaikaiset",
-    "pinned": "Kiinnitetty",
-    "folderShortcuts": "Kansion pikavalinnat",
-    "failedToReconnectSSH": "SSH-istunnon uudelleenyhdistäminen epäonnistui",
-    "openTerminalHere": "Avaa terminaali tästä",
-    "run": "Juokse",
-    "openTerminalInFolder": "Avaa pääte tässä kansiossa",
-    "openTerminalInFileLocation": "Avaa pääte tiedoston sijainnissa",
-    "runningFile": "Juokseminen - {{file}}",
-    "onlyRunExecutableFiles": "Voi suorittaa vain suoritettavia tiedostoja",
-    "directories": "Hakemistot",
-    "removedFromRecentFiles": "Poistettu \"{{name}}\" viimeisimmistä tiedostoista",
-    "removeFailed": "Poisto epäonnistui",
-    "unpinnedSuccessfully": "Pinnauksen \"{{name}}\" irrotettu onnistuneesti",
-    "unpinFailed": "Irrottaminen epäonnistui",
-    "removedShortcut": "Pikakuvake \"{{name}} \" poistettu",
-    "removeShortcutFailed": "Pikakuvakkeen poistaminen epäonnistui",
-    "clearedAllRecentFiles": "Tyhjensi kaikki viimeisimmät tiedostot",
-    "clearFailed": "Tyhjennys epäonnistui",
-    "removeFromRecentFiles": "Poista viimeisimmistä tiedostoista",
-    "clearAllRecentFiles": "Tyhjennä kaikki viimeisimmät tiedostot",
-    "unpinFile": "Irrota tiedosto",
-    "removeShortcut": "Poista pikakuvake",
-    "pinFile": "Kiinnitä tiedosto",
-    "addToShortcuts": "Lisää pikakuvakkeisiin",
-    "pasteFailed": "Liittäminen epäonnistui",
-    "noUndoableActions": "Ei peruuttamattomia toimintoja",
-    "undoCopySuccess": "Kopioinnin peruutus: Poistettu {{count}} kopioitua tiedostoa",
-    "undoCopyFailedDelete": "Kumoaminen epäonnistui: Kopioituja tiedostoja ei voitu poistaa",
-    "undoCopyFailedNoInfo": "Kumoaminen epäonnistui: Kopioituja tiedostotietoja ei löytynyt",
-    "undoMoveSuccess": "Peruttu siirto: Siirsi {{count}} tiedostoa takaisin alkuperäiseen sijaintiinsa",
-    "undoMoveFailedMove": "Kumoaminen epäonnistui: Tiedostoja ei voitu siirtää takaisin",
-    "undoMoveFailedNoInfo": "Kumoaminen epäonnistui: Siirretyn tiedoston tietoja ei löytynyt",
-    "undoDeleteNotSupported": "Poistoa ei voi perua: Tiedostot on poistettu pysyvästi palvelimelta",
-    "undoTypeNotSupported": "Ei-tuettu kumoamistoimintotyyppi",
-    "undoOperationFailed": "Kumoamistoiminto epäonnistui",
-    "unknownError": "Tuntematon virhe",
-    "confirm": "Vahvistaa",
-    "find": "Löytää...",
-    "replace": "Korvata",
-    "downloadInstead": "Lataa sen sijaan",
-    "keyboardShortcuts": "Pikanäppäimet",
-    "searchAndReplace": "Etsi ja korvaa",
-    "editing": "Muokkaus",
-    "search": "Haku",
-    "findNext": "Etsi seuraava",
-    "findPrevious": "Etsi edellinen",
-    "save": "Tallentaa",
-    "selectAll": "Valitse kaikki",
-    "undo": "Kumoa",
-    "redo": "Tee uudelleen",
-    "moveLineUp": "Siirrä riviä ylös",
-    "moveLineDown": "Siirrä rivi alas",
-    "toggleComment": "Näytä kommentti",
-    "autoComplete": "Automaattinen täydennys",
-    "imageLoadError": "Kuvan lataaminen epäonnistui",
-    "startTyping": "Aloita kirjoittaminen...",
-    "unknownSize": "Tuntematon koko",
-    "fileIsEmpty": "Tiedosto on tyhjä",
-    "largeFileWarning": "Varoitus suuresta tiedostosta",
-    "largeFileWarningDesc": "Tiedoston koko on {{size}} , mikä voi aiheuttaa suorituskykyongelmia avattaessa sitä tekstinä.",
-    "fileNotFoundAndRemoved": "Tiedostoa \"{{name}}\" ei löytynyt ja se on poistettu viimeksi käytettyjen/kiinnitettyjen tiedostojen joukosta.",
-    "failedToLoadFile": "Tiedoston lataus epäonnistui: {{error}}",
-    "serverErrorOccurred": "Palvelinvirhe. Yritä myöhemmin uudelleen.",
-    "autoSaveFailed": "Automaattinen tallennus epäonnistui",
-    "fileAutoSaved": "Tiedosto tallennettu automaattisesti",
-    "moveFileFailed": "Siirto epäonnistui {{name}}",
-    "moveOperationFailed": "Siirto epäonnistui",
-    "canOnlyCompareFiles": "Voi verrata vain kahta tiedostoa",
-    "comparingFiles": "Tiedostojen vertailu: {{file1}} ja {{file2}}",
-    "dragFailed": "Vetotoiminto epäonnistui",
-    "filePinnedSuccessfully": "Tiedosto \"{{name}}\" kiinnitetty onnistuneesti",
-    "pinFileFailed": "Tiedoston kiinnittäminen epäonnistui",
-    "fileUnpinnedSuccessfully": "Tiedosto \"{{name}}\" irrotettu onnistuneesti",
-    "unpinFileFailed": "Tiedoston irrottaminen epäonnistui",
-    "shortcutAddedSuccessfully": "Kansion pikakuvake \"{{name}}\" lisätty onnistuneesti",
-    "addShortcutFailed": "Pikakuvakkeen lisääminen epäonnistui",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} kohteita onnistuneesti",
-    "operationCompleted": "{{operation}} {{count}} kohdetta",
-    "downloadFileSuccess": "Tiedosto {{name}} ladattu onnistuneesti",
-    "downloadFileFailed": "Lataus epäonnistui",
-    "downloadingFile": "Ladataan {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Siirrä kohtaan {{name}}",
-    "diffCompareWith": "Vertaa eroa kohtaan {{name}}",
-    "dragOutsideToDownload": "Vedä ikkunan ulkopuolelle ladataksesi ({{count}} tiedostoa)",
-    "newFolderDefault": "Uusi kansio",
-    "newFileDefault": "UusiTiedosto.txt",
-    "successfullyMovedItems": "{{count}} kohdetta siirretty onnistuneesti kohteeseen {{target}}",
-    "move": "Liikkua",
-    "searchInFile": "Hae tiedostosta (Ctrl+F)",
-    "showKeyboardShortcuts": "Näytä pikanäppäimet",
-    "decreaseFontSize": "Pienennä fonttikokoa",
-    "increaseFontSize": "Suurenna fonttikokoa",
-    "startWritingMarkdown": "Aloita Markdown-sisältösi kirjoittaminen...",
-    "loadingFileComparison": "Tiedostojen vertailua ladataan...",
-    "reload": "Lataa uudelleen",
-    "compare": "Vertaa",
-    "sideBySide": "Rinnakkain",
-    "inline": "Rivissä",
-    "fileComparison": "Tiedostovertailu: {{file1}} vs. {{file2}}",
-    "fileTooLarge": "Tiedosto on liian suuri (> 10 Mt), eikä sitä voida avata tekstinä turvallisuussyistä.",
-    "sshConnectionFailed": "SSH-yhteys epäonnistui. Tarkista yhteytesi kohteeseen {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Tiedoston lataus epäonnistui: {{error}}",
-    "connecting": "Yhdistetään...",
-    "connectedSuccessfully": "Yhteys onnistui",
-    "totpVerificationFailed": "TOTP-vahvistus epäonnistui",
-    "browserSignInFailed": "Kirjautuminen epäonnistui. Yritä uudelleen.",
-    "authenticationFailed": "Todennus epäonnistui",
-    "incorrectPassphrase": "Virheellinen salasana. Yritä uudelleen.",
-    "verificationCodePrompt": "Vahvistuskoodi:",
-    "changePermissions": "Muuta käyttöoikeuksia",
-    "currentPermissions": "Nykyiset käyttöoikeudet",
-    "owner": "Omistaja",
-    "group": "Ryhmä",
-    "others": "Muut",
-    "read": "Lukea",
-    "write": "Kirjoittaa",
-    "execute": "Suorittaa",
-    "permissionsChangedSuccessfully": "Käyttöoikeudet muutettu onnistuneesti",
-    "failedToChangePermissions": "Käyttöoikeuksien muuttaminen epäonnistui",
-    "name": "Nimi",
-    "sortByName": "Nimi",
-    "sortByDate": "Muokkauspäivämäärä",
-    "sortBySize": "Koko",
-    "ascending": "Nouseva",
-    "descending": "Laskeva",
-    "root": "Juuri",
-    "new": "Uusi",
-    "sortBy": "Lajittele",
-    "items": "Kohteet",
-    "selected": "Valittu",
-    "editor": "Toimittaja",
-    "octal": "Oktaali",
-    "storage": "Säilytys",
-    "disk": "Levy",
-    "used": "Käytetty",
-    "of": "jostakin",
-    "toggleSidebar": "Näytä/piilota sivupalkki",
-    "compactLayout": "Käytä kompaktia asettelua",
-    "comfortableLayout": "Käytä mukavaa asettelua",
-    "cannotLoadPdf": "PDF-tiedoston lataaminen ei onnistu",
-    "pdfLoadError": "PDF-tiedoston lataamisessa tapahtui virhe.",
-    "loadingPdf": "Ladataan PDF-lukuohjelmaa...",
-    "loadingPage": "Sivua ladataan...",
-    "cancel": "Peruuttaa",
-    "copiedItems_one": "Kopioitu {{count}} kohde",
-    "copiedItems_other": "Kopioitu {{count}} kohdetta",
-    "deleteCopiedFileFailed": "Tiedoston {{name}}kopiota ei voitu poistaa : {{error}}",
-    "dragMovedItems_one": "Siirretty kohde {{count}} kohteeseen {{target}}",
-    "dragMovedItems_other": "Siirretty {{count}} kohdetta kohteeseen {{target}}",
-    "moveBackFileFailed": "Ei voitu siirtää {{name}} takaisin: {{error}}",
-    "terminal": "Pääte: {{host}} ({{path}})",
-    "dragToDesktop": "Vetämällä {{name}} työpöydälle",
-    "dragFilesToDesktop": "Tiedostojen {{count}} vetäminen työpöydälle",
-    "folderDragUnsupported": "Kansioiden vetäminen työpöydälle ei ole vielä tuettua",
-    "saveToDesktopFailed": "Tallennus epäonnistui: {{error}}",
-    "dragFailedDetail": "Vetäminen epäonnistui: {{error}}",
-    "videoUnsupported": "Selaimesi ei voi toistaa tätä videomuotoa.",
-    "downloadToPlay": "Lataa toistaaksesi sen muualla",
-    "cannotPreviewType": "Tätä tiedostotyyppiä ei voi esikatsella",
-    "cannotPreviewTypeHint": "Tällä tiedostotyypillä ei ole esikatselua. Lataa se avataksesi sen toisessa sovelluksessa.",
-    "loadingFile": "Tiedostoa ladataan...",
-    "loadingImage": "Kuvaa ladataan...",
-    "loadingEditor": "Ladataan editoria...",
-    "loadingPreview": "Esikatselua ladataan...",
-    "loadingAudio": "Ladataan äänisoitinta...",
-    "emptyPreview": "Ei vielä esikatseltavaa...",
-    "revert": "Palauta",
-    "openAsText": "Avaa tekstinä",
-    "confirmOpenAsText": "Haluatko jatkaa tiedoston avaamista tekstinä? Tämä saattaa hidastaa selaintasi."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "Siirrä tiedostoja kahden SSH-isännän välillä.",
-    "sourceServer": "Lähdepalvelin",
-    "destinationServer": "Kohdepalvelin",
-    "selectHost": "Valitse isäntä",
-    "noHostSelected": "Ei valittua isäntää",
-    "move": "Liikkua",
-    "copy": "Kopioida",
-    "upload": "Lataa",
-    "itemsSelected": "{{count}} kohde valittu",
-    "itemsSelected_other": "{{count}} kohdetta valittu",
-    "ready": "Valmis",
-    "loadingHosts": "Ladataan isäntiä...",
-    "name": "Nimi",
-    "modified": "Muokattu",
-    "size": "Koko",
-    "noFiles": "Ei tiedostoja",
-    "open": "Avata",
-    "up": "Ylös",
-    "refresh": "Päivitä",
-    "copyToTarget": "Kopioi kohdehakemistoon",
-    "rename": "Nimeä uudelleen",
-    "delete": "Poistaa",
-    "editPermissions": "Muokkausoikeudet",
-    "createNewFolder": "Luo uusi kansio",
-    "deleteSelectedItems": "Poista valitut kohteet",
-    "deleteConfirm": "Poistetaanko {{count}} valittu kohde?",
-    "deleteConfirm_other": "Poistetaanko {{count}} valitut kohteet?",
-    "cancel": "Peruuttaa",
-    "save": "Tallentaa",
-    "folderCreated": "Kansio luotu",
-    "itemRenamed": "Kohteen nimi on muutettu",
-    "actionFailed": "Toiminto epäonnistui",
-    "itemsDeleted": "{{count}} kohde poistettu",
-    "itemsDeleted_other": "{{count}} kohdetta poistettu",
-    "deleteFailed": "Poisto epäonnistui",
-    "permissionsUpdated": "Käyttöoikeudet päivitetty",
-    "noRemoteSessionConnected": "Ei etäistuntoa yhdistettynä",
-    "failedToListFiles": "Tiedostojen listaaminen epäonnistui",
-    "failedToRefresh": "Päivitys epäonnistui",
-    "destinationInsideSource": "Kohde ei voi olla valitun lähdepolun sisällä.",
-    "sameHostNoOp": "Lähde- ja kohdekansiot ovat samassa kansiossa."
-  },
-  "hosts": {
-    "fileManager": "Tiedostonhallinta",
-    "fileManagerUrlCopied": "Tiedostonhallinnan URL-osoite kopioitu",
-    "copyFileManagerUrlAction": "Kopioi tiedostonhallinnan URL-osoite",
-    "docsLink": "Näytä dokumentit",
-    "hostNotFound": "Isäntää ei löydy",
-    "loadingHost": "Ladataan isäntää..."
-  },
-  "onboarding": {
-    "feature_files": "Tiedostonhallinta",
-    "feature_files_desc": "Selaa, lähetä, lataa ja muokkaa tiedostoja SFTP:n kautta poistumatta sovelluksesta."
-  },
-  "terminal": {
-    "runTitle": "Juoksemassa {{command}} - {{host}}",
-    "terminalTitle": "Pääte - {{host}}",
-    "terminalWithPath": "Pääte - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Selaa kohdekansioita",
-    "browsePathError": "Tätä polkua ei voitu avata kohdepalvelimella.",
-    "browsePathWillBeCreated": "Tätä kansiota ei ole vielä olemassa. Se luodaan, kun siirto alkaa.",
-    "cancel": "Peruuttaa",
-    "cleanupDestFiles": "Siivouskohde",
-    "cleanupDestFilesError": "Siivous epäonnistui",
-    "cleanupDestFilesNothing": "Ei mitään siivottavaa määränpäässä",
-    "cleanupDestFilesPartial": "Joitakin osittaisia tiedostoja ei voitu poistaa",
-    "cleanupDestFilesSuccess": "Osittainen tiedosto poistettu kohteesta",
-    "confirmCopy": "Kopioida",
-    "confirmMove": "Liikkua",
-    "copyFolderToHost": "Kopioi kansio isäntään…",
-    "copyItemsToHost": "Kopioi {{count}} kohdetta isäntään…",
-    "copyToHost": "Kopioi isäntäkoneeseen…",
-    "destinationPath": "Kohdepolku",
-    "destMustBeDirectory": "Määränpään on oltava hakemisto useiden kohteiden siirtoja varten",
-    "goUp": "Mene ylös",
-    "hostAuthRequired": "Todennus vaaditaan. Avaa ensin tiedostonhallinta tällä isännöintikoneella.",
-    "hostConnecting": "Yhdistetään…",
-    "hostConnectionFailed": "Yhteys epäonnistui",
-    "hostDisconnected": "Ei yhdistetty",
-    "hostReady": "Valmis",
-    "itemsSummary": "{{count}} kohdetta",
-    "jumpHostLimitation": "Molempien isäntien on oltava tavoitettavissa Termix-palvelimelta. Suoraa isäntien välistä reititystä ei tueta.",
-    "methodAuto": "Auto",
-    "methodAutoHint": "Valitsee tar- tai tiedostokohtaisen SFTP:n tiedostomäärän, koon ja pakkautuvuuden perusteella. Yksittäiset tiedostot käyttävät aina suoratoistettavaa SFTP:tä.",
-    "methodItemSftp": "Tiedostokohtainen SFTP",
-    "methodItemSftpHint": "Siirrä jokainen tiedosto erikseen SFTP:n kautta. Toimii kaikilla isännöintijärjestelmillä, mukaan lukien Windows.",
-    "methodItemSftpLimitation": "Jokainen tiedosto käyttää samaa SFTP-tietovirtaa kuin yksittäiset tiedostokopiot, yksi kerrallaan. Edistyminen yhdistetään kaikkien tiedostojen välillä, joten palkki liikkuu hitaasti suurten tiedostojen käsittelyssä.",
-    "methodLabel": "Siirtotapa",
-    "methodPreviewError": "Siirtomenetelmän esikatselu ei onnistunut. Palvelin valitsee silti menetelmän käynnistyksen yhteydessä.",
-    "methodPreviewLoading": "Siirtomenetelmän laskeminen…",
-    "methodPreviewScanSummary": "{{fileCount}} tiedostoa, {{totalSize}} yhteensä (skannattu lähdepalvelimella).",
-    "methodPreviewWillUseItemSftp": "Käytetään: Tiedostokohtaista SFTP:tä",
-    "methodPreviewWillUseTar": "Käytetään: Tar-arkistoa",
-    "methodReason": {
-      "user_item_sftp": "Valitsit tiedostokohtaisen SFTP:n.",
-      "user_tar": "Valitsit tar-arkiston.",
-      "tar_unavailable": "Tar ei ole käytettävissä yhdellä tai molemmilla isännillä, joten käytetään tiedostokohtaista SFTP:tä.",
-      "windows_host": "Windows-isäntä on mukana, joten tar-tiedostoa ei käytetä.",
-      "auto_multi_large": "Automaattinen: useita tiedostoja, mukaan lukien suuri tiedosto ({{largestSize}}), jossa on pakattavaa dataa. Tar niputtaa ne yhdeksi siirtokohteeksi.",
-      "auto_single_large_in_archive": "Automaattinen: yksi suuri tiedosto ({{largestSize}}) tässä joukossa, joten tiedostokohtainen SFTP.",
-      "auto_many_incompressible": "Automaattinen: enimmäkseen pakkaamatonta dataa, joten tiedostokohtainen SFTP.",
-      "auto_many_files": "Automaattinen: monta tiedostoa ({{fileCount}}), tar vähentää tiedostokohtaista kuormaa.",
-      "auto_default": "Automaattinen: tiedostokohtainen SFTP tälle joukolle."
-    },
-    "methodTar": "Tar-arkisto",
-    "methodTarHint": "Pakkaa lähdekoodissa, siirrä yksi arkisto, pura kohdetiedostossa. Vaatii tar-tiedoston molemmissa Unix-koneissa.",
-    "metricsCompress": "Pakkaa lähdekoodissa: {{duration}}",
-    "metricsExtract": "Ote määränpäässä: {{duration}}",
-    "metricsPrepare": "Valmistele kohde: {{duration}}",
-    "metricsRouteBenchmark": "Reititysanturi: suora {{direct}}, rele {{relay}}",
-    "metricsSourceDelete": "Poista lähteestä: {{duration}}",
-    "metricsTotal": "Yhteensä: {{duration}}",
-    "metricsTransfer": "Päästä päähän: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 vahvistettu: {{duration}}",
-    "moveFolderToHost": "Siirrä kansio isäntään…",
-    "moveItemsToHost": "Siirrä {{count}} kohdetta isäntään…",
-    "moveToHost": "Siirrä isäntäkoneeseen…",
-    "noHostsConnected": "Muita tiedostonhallintaohjelmia ei ole saatavilla.",
-    "noHostsConnectedHint": "Lisää toinen SSH-isäntä, jonka tiedostonhallinta on käytössä isäntähallinnassa.",
-    "parallelSegmentsHint": "Suuret tiedostot jaetaan 256 Mt:n osiin. Useat kaistat käyttävät erillisiä yhteyksiä (kuten useiden siirtojen aloittaminen) suuremman kokonaisläpivirtauksen saavuttamiseksi.",
-    "parallelSegmentsLabel": "Rinnakkaiset siirtokaistat",
-    "parallelSegmentsOption": "{{count}} kaistaa",
-    "progressBenchmarking": "Nopeimman vaihtoreitin valitseminen…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Peruuttaa",
-    "progressCancelling": "Peruutetaan…",
-    "progressCompressing": "Pakkaus lähdepalvelimella…",
-    "progressExtracting": "Puretaan kohteessa…",
-    "progressItems": "{{current}} / {{total}} tiedostoa",
-    "progressReconnecting": "Yhdistetään uudelleen…",
-    "progressStalled": "Pysähtynyt",
-    "progressTotalSpeed": "{{speed}} yhteensä ({{lanes}} kaistaa)",
-    "progressTransferring": "Tiedon siirtäminen…",
-    "progressTransferringItems": "Tiedostojen siirtäminen ({{current}} / {{total}})…",
-    "progressVerifying": "Tiedoston eheyden tarkistaminen…",
-    "recentDestinations": "Viimeaikaiset kohteet",
-    "resumedHint": "Yhdistetty uudelleen toisessa ikkunassa aloitettuun aktiiviseen siirtoon.",
-    "retryTransfer": "Yritä uudelleen",
-    "retryTransferError": "Uudelleenyritys epäonnistui",
-    "selectDestinationHost": "Valitse kohdeisäntä",
-    "transferCancelled": "Siirto peruttu",
-    "transferCancelledCopyHint": "Osittaisia tiedostoja voi jäädä kohteeseen.",
-    "transferCancelledMoveHint": "Kohdekansioon saattaa jäädä osittaisia tiedostoja. Lähdetiedostoja ei poistettu.",
-    "transferError": "Siirto epäonnistui",
-    "transferFailedRetryHint": "Kohteessa säilytettiin vain osa tiedoista. Uudelleenyritys jatkuu, kun yhteys on palannut.",
-    "transferPartialHint": "Siirto epäonnistui: {{paths}}",
-    "transferSuccess": "Siirto valmis",
-    "metricsHopSourceRead": "Lähde → palvelin: {{throughput}}",
-    "metricsHopDestSftpWrite": "Palvelin → kohde (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Palvelin → kohde (paikallinen): {{throughput}}"
-  },
-  "plugin": {
-    "name": "Tiedostonhallinta"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/fr_FR.json b/plugins/file-manager/locales/translated/fr_FR.json
deleted file mode 100644
index bc459663f..000000000
--- a/plugins/file-manager/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Fichiers",
-    "sftp": "SFTP",
-    "openFileManager": "Ouvrir le gestionnaire de fichiers"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilisez le gestionnaire de fichiers",
-      "description": "Parcourez, modifiez et transférez des fichiers via SFTP."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Activer le gestionnaire de fichiers",
-        "description": "Parcourez et modifiez les fichiers hébergés sur ce serveur via SFTP."
-      },
-      "defaultPath": {
-        "label": "Chemin par défaut"
-      },
-      "scpLegacy": {
-        "label": "Mode SCP hérité"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Transferts de fichiers simultanés",
-        "description": "Nombre de fichiers que le gestionnaire local/distant côte à côte télécharge ou charge simultanément. Réduisez cette valeur si votre serveur limite le nombre de canaux SFTP."
-      },
-      "confirmBeforeTrash": {
-        "label": "Veuillez confirmer avant de déplacer des fichiers vers la corbeille.",
-        "description": "Demandez l'autorisation avant de déplacer des fichiers distants vers la corbeille. La suppression définitive nécessite toujours une confirmation."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Gestionnaire de fichiers"
-  },
-  "fileManager": {
-    "noHostSelected": "Aucun hôte sélectionné",
-    "initializingEditor": "Initialisation de l'éditeur...",
-    "file": "Fichier",
-    "folder": "Dossier",
-    "uploadFile": "Téléverser un fichier",
-    "downloadFile": "Télécharger",
-    "extractArchive": "Extraire l'archive",
-    "extractingArchive": "Extraction de {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} extrait avec succès",
-    "extractFailed": "Échec de l'extraction",
-    "compressFile": "Compresser le fichier",
-    "compressFiles": "Compresser les fichiers",
-    "compressFilesDesc": "Compresser {{count}} éléments en une archive",
-    "archiveName": "Nom de l'archive",
-    "enterArchiveName": "Entrez le nom de l'archive...",
-    "compressionFormat": "Format de compression",
-    "selectedFiles": "Fichiers sélectionnés",
-    "andMoreFiles": "et {{count}} de plus...",
-    "compress": "Compresser",
-    "compressingFiles": "Compression de {{count}} éléments en {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} créé avec succès",
-    "compressFailed": "Échec de la compression",
-    "edit": "Modifier",
-    "preview": "Aperçu",
-    "previous": "Précédent",
-    "next": "Suivant",
-    "pageXOfY": "Page {{current}} sur {{total}}",
-    "zoomOut": "Zoom arrière",
-    "zoomIn": "Zoom avant",
-    "newFile": "Nouveau fichier",
-    "newFolder": "Nouveau dossier",
-    "rename": "Renommer",
-    "uploading": "Téléversement...",
-    "uploadingFile": "Téléversement de {{name}}...",
-    "uploadingChunk": "Téléchargement de {{name}}: {{percent}}% (partie de {{chunk}} de {{total}})",
-    "fileName": "Nom du fichier",
-    "folderName": "Nom du dossier",
-    "fileUploadedSuccessfully": "Fichier \"{{name}}\" téléversé avec succès",
-    "failedToUploadFile": "Échec du téléversement du fichier",
-    "uploadingFolderFiles": "Téléchargement du ou des fichiers {{count}}...",
-    "uploadedFolderFiles": "Fichier(s) {{count}} téléchargé(s) avec succès",
-    "uploadedFolderPartial": "Le(s) fichier(s) {{uploaded}} téléchargé(s), {{failed}} a échoué",
-    "fileDownloadedSuccessfully": "Fichier \"{{name}}\" téléchargé avec succès",
-    "failedToDownloadFile": "Échec du téléchargement du fichier",
-    "fileCreatedSuccessfully": "Fichier \"{{name}}\" créé avec succès",
-    "folderCreatedSuccessfully": "Dossier \"{{name}}\" créé avec succès",
-    "failedToCreateItem": "Échec de la création de l'élément",
-    "operationFailed": "L'opération {{operation}} a échoué pour {{name}} : {{error}}",
-    "failedToResolveSymlink": "Échec de la résolution du lien symbolique",
-    "itemsDeletedSuccessfully": "{{count}} éléments supprimés avec succès",
-    "failedToDeleteItems": "Échec de la suppression des éléments",
-    "sudoPasswordRequired": "Mot de passe administrateur requis",
-    "enterSudoPassword": "Entrez le mot de passe sudo pour continuer cette opération",
-    "sudoPassword": "Mot de passe sudo",
-    "sudoOperationFailed": "L'opération sudo a échoué",
-    "sudoAuthFailed": "L'authentification sudo a échoué",
-    "dragFilesToUpload": "Déposez les fichiers ici pour les téléverser",
-    "dropToUploadHere": "Déposez votre fichier ici.",
-    "dropToDownloadHere": "Cliquez ici pour télécharger",
-    "localFiles": "Locale",
-    "showLocalFiles": "Afficher les fichiers locaux (vue fractionnée)",
-    "hideLocalFiles": "Masquer les fichiers locaux",
-    "localHome": "Dossier personnel",
-    "localPathPlaceholder": "chemin du dossier local",
-    "localShowHidden": "Afficher les fichiers cachés",
-    "localHideHidden": "Masquer les fichiers cachés",
-    "localRevealInFileManager": "Afficher dans le gestionnaire de fichiers système",
-    "localCannotOpenFolder": "Impossible d'ouvrir le dossier",
-    "localItemCount": "{{count}} éléments",
-    "localSelectedCount": "{{count}} sélectionné(s)",
-    "back": "Retour",
-    "forward": "Avant",
-    "up": "En haut",
-    "kind": "Gentil",
-    "localUploadingProgress": "Téléchargement de {{current}} de {{total}}",
-    "localDownloadingProgress": "Téléchargement de {{current}} de {{total}}",
-    "localTransferInFlight": "{{count}} à la fois",
-    "localPreparingDownload": "Préparation du téléchargement...",
-    "localTransferCancelled": "Transfert annulé",
-    "localNothingToTransfer": "Rien à transférer",
-    "localUploadComplete": "Fichier(s) téléchargé(s) {{count}}",
-    "localUploadFailed": "Échec du chargement",
-    "localUploadPartial": "Le(s) fichier(s) {{done}} téléchargé(s), {{failed}} a échoué",
-    "localDownloadComplete": "Fichier(s) téléchargé(s) {{count}}",
-    "localDownloadFailed": "Échec du téléchargement",
-    "localDownloadPartial": "Téléchargement du(des) fichier(s) {{done}} , {{failed}} échoué",
-    "localReplaceExistingPrompt": "{{count}} éléments existent déjà dans ce dossier. Les remplacer ?",
-    "localReplace": "Remplacer",
-    "localSkipExisting": "Sauter",
-    "localSkippedExisting": "Élément(s) existant(s) ignoré(s) {{count}}",
-    "localUnsafeNamesSkipped": "Élément(s) ignoré(s) {{count}} dont le nom ne peut pas être utilisé sur cet ordinateur",
-    "localOpen": "Ouvrir",
-    "localOpenFolder": "Ouvrir le dossier",
-    "localUploadToRemote": "Téléverser sur le serveur",
-    "localUploadToRemoteMany": "Téléverser {{count}} éléments sur le serveur",
-    "localMoveToTrash": "Déplacer vers la corbeille",
-    "localMoveToTrashMany": "Déplacer les éléments {{count}} vers la Corbeille",
-    "localTrashConfirmSingle": "Déplacer «{{name}}» vers la Corbeille ?",
-    "localTrashConfirmFolder": "Déplacer le dossier «{{name}}» et tout son contenu vers la Corbeille ?",
-    "localTrashConfirmMany": "Déplacer {{count}} éléments vers la Corbeille ?",
-    "localTrashed": "Élément(s) déplacé(s) {{count}} vers la Corbeille",
-    "localTrashFailed": "Impossible de déplacer vers la poubelle",
-    "localRenameFailed": "Échec du renommage",
-    "localCreateFailed": "Impossible de créer l'élément",
-    "goToParentFolder": "Aller au dossier parent",
-    "resizeSidebar": "Faites glisser pour redimensionner la barre latérale (double-cliquez pour réinitialiser)",
-    "resizeLocalPane": "Faites glisser pour redimensionner le volet local (double-cliquez pour réinitialiser)",
-    "columns": "Colonnes",
-    "columnsHint": "Cliquez avec le bouton droit pour choisir les colonnes",
-    "emptyFolder": "Ce dossier est vide",
-    "searchFiles": "Rechercher des fichiers...",
-    "upload": "Téléverser",
-    "selectHostToStart": "Sélectionnez un hôte pour démarrer la gestion des fichiers",
-    "sshRequiredForFileManager": "Le gestionnaire de fichiers nécessite SSH. Cet hôte n'a pas SSH activé.",
-    "failedToConnect": "Échec de la connexion SSH",
-    "failedToLoadDirectory": "Échec du chargement du répertoire",
-    "noSSHConnection": "Aucune connexion SSH disponible",
-    "copy": "Copier",
-    "cut": "Couper",
-    "paste": "Coller",
-    "copyPath": "Copier le chemin",
-    "copyPaths": "Copier les chemins",
-    "delete": "Supprimer",
-    "properties": "Propriétés",
-    "refresh": "Actualiser",
-    "downloadFiles": "Télécharger {{count}} fichiers dans le navigateur",
-    "copyFiles": "Copier {{count}} éléments",
-    "cutFiles": "Couper {{count}} éléments",
-    "deleteFiles": "Supprimer {{count}} éléments",
-    "filesCopiedToClipboard": "{{count}} éléments copiés dans le presse-papiers",
-    "filesCutToClipboard": "{{count}} éléments coupés dans le presse-papiers",
-    "pathCopiedToClipboard": "Chemin copié dans le presse-papiers",
-    "pathsCopiedToClipboard": "{{count}} chemins copiés dans le presse-papiers",
-    "failedToCopyPath": "Échec de la copie du chemin dans le presse-papiers",
-    "copyFolderLink": "Copier le lien vers le dossier",
-    "copyCurrentFolderLink": "Copier le lien vers le dossier actuel",
-    "folderLinkCopied": "Lien du dossier copié dans le presse-papiers",
-    "failedToCopyFolderLink": "Échec de la copie du lien du dossier",
-    "movedItems": "{{count}} élément(s) déplacé(s)",
-    "failedToDeleteItem": "Échec de la suppression de l’élément",
-    "itemRenamedSuccessfully": "{{type}} renommé avec succès",
-    "failedToRenameItem": "Échec du renommage de l’élément",
-    "download": "Télécharger",
-    "openExternalEditor": "Ouvrir avec l’éditeur externe",
-    "chooseExternalEditor": "Choisir l’éditeur externe",
-    "externalEditorSelected": "Éditeur externe sélectionné",
-    "externalEditorDesktopOnly": "L’éditeur externe est uniquement disponible dans l’application de bureau",
-    "externalEditorOpened": "Ouvert dans l’éditeur externe. Les modifications enregistrées seront renvoyées vers le serveur.",
-    "failedToOpenExternalEditor": "Échec de l’ouverture de l’éditeur externe",
-    "failedToSelectExternalEditor": "Échec de la sélection de l’éditeur externe",
-    "permissions": "Permissions",
-    "size": "Taille",
-    "modified": "Modifié",
-    "path": "Chemin",
-    "confirmDelete": "Êtes-vous sûr de vouloir supprimer {{name}} ?",
-    "permissionDenied": "Permission refusée",
-    "serverError": "Erreur serveur",
-    "fileSavedSuccessfully": "Fichier enregistré avec succès",
-    "failedToSaveFile": "Échec de l’enregistrement du fichier",
-    "confirmDeleteSingleItem": "Êtes-vous sûr de vouloir supprimer définitivement « {{name}} » ?",
-    "confirmDeleteMultipleItems": "Êtes-vous sûr de vouloir supprimer définitivement {{count}} éléments ?",
-    "confirmDeleteMultipleItemsWithFolders": "Êtes-vous sûr de vouloir supprimer définitivement {{count}} éléments ? Cela inclut les dossiers et leur contenu.",
-    "confirmDeleteFolder": "Êtes-vous sûr de vouloir supprimer définitivement le dossier « {{name}} » et tout son contenu ?",
-    "permanentDeleteWarning": "Cette action est irréversible. Le ou les éléments seront définitivement supprimés du serveur.",
-    "moveToTrashWarning": "Les éléments seront déplacés vers la corbeille Termix et pourront être restaurés avant l'expiration de la période de conservation.",
-    "itemsMovedToTrash": "{{count}} élément(s) déplacé(s) vers la Corbeille",
-    "trash": "Poubelle",
-    "trashDescription": "Les éléments supprimés sont conservés pendant {{days}} jour(s) sur cet hôte.",
-    "trashLoadFailed": "Échec du chargement de la corbeille",
-    "trashEmpty": "La poubelle est vide.",
-    "trashRestore": "Restaurer",
-    "trashRestored": "Restauré {{name}}",
-    "trashRestoreFailed": "Impossible de restaurer l'élément. Le chemin d'accès d'origine existe peut-être déjà.",
-    "trashDeletePermanently": "Supprimer définitivement",
-    "trashDeleteConfirm": "Supprimer définitivement {{name}}? Cette action est irréversible.",
-    "trashPermanentlyDeleted": "Supprimé définitivement {{name}}",
-    "trashDeleteFailed": "Échec de la suppression définitive de l'élément",
-    "trashEmptyAction": "Vider la poubelle",
-    "trashEmptyConfirm": "Supprimer définitivement tous les éléments de la Corbeille ? Cette action est irréversible.",
-    "trashEmptied": "Poubelle vidée",
-    "trashRetention": "Nettoyage automatique après (jours)",
-    "trashRetentionSaved": "Mise à jour concernant la conservation des déchets",
-    "trashRetentionFailed": "Échec de la mise à jour de la conservation de la corbeille",
-    "trashUnavailableConfirm": "Cet élément ne peut pas être déplacé vers la Corbeille, généralement parce qu'il se trouve sur un autre système de fichiers ou qu'il nécessite des autorisations élevées. Voulez-vous plutôt le supprimer définitivement ?",
-    "recent": "Récents",
-    "pinned": "Épinglés",
-    "folderShortcuts": "Raccourcis de dossiers",
-    "failedToReconnectSSH": "Échec de la reconnexion de la session SSH",
-    "openTerminalHere": "Ouvrir le terminal ici",
-    "run": "Exécuter",
-    "openTerminalInFolder": "Ouvrir le terminal dans ce dossier",
-    "openTerminalInFileLocation": "Ouvrir le terminal à l'emplacement du fichier",
-    "runningFile": "En cours d'exécution - {{file}}",
-    "onlyRunExecutableFiles": "Seuls les fichiers exécutables peuvent être exécutés",
-    "directories": "Dossiers",
-    "removedFromRecentFiles": "« {{name}} » retiré des fichiers récents",
-    "removeFailed": "Échec de la suppression",
-    "unpinnedSuccessfully": "« {{name}} » désépinglé avec succès",
-    "unpinFailed": "Échec du désépinglage",
-    "removedShortcut": "Raccourci « {{name}} » supprimé",
-    "removeShortcutFailed": "Échec de la suppression du raccourci",
-    "clearedAllRecentFiles": "Tous les fichiers récents ont été effacés",
-    "clearFailed": "Échec de l'effacement",
-    "removeFromRecentFiles": "Retirer des fichiers récents",
-    "clearAllRecentFiles": "Effacer tous les fichiers récents",
-    "unpinFile": "Désépingler le fichier",
-    "removeShortcut": "Supprimer le raccourci",
-    "pinFile": "Épingler le fichier",
-    "addToShortcuts": "Ajouter aux raccourcis",
-    "pasteFailed": "Échec du collage",
-    "noUndoableActions": "Aucune action annulable",
-    "undoCopySuccess": "Annulation de la copie : {{count}} fichier(s) copié(s) supprimé(s)",
-    "undoCopyFailedDelete": "Échec de l'annulation : impossible de supprimer les fichiers copiés",
-    "undoCopyFailedNoInfo": "Échec de l'annulation : informations sur les fichiers copiés introuvables",
-    "undoMoveSuccess": "Annulation du déplacement : {{count}} fichier(s) remis à leur emplacement d’origine",
-    "undoMoveFailedMove": "Échec de l'annulation : impossible de remettre les fichiers en place",
-    "undoMoveFailedNoInfo": "Échec de l'annulation : informations sur les fichiers déplacés introuvables",
-    "undoDeleteNotSupported": "La suppression ne peut pas être annulée : les fichiers ont été définitivement supprimés du serveur",
-    "undoTypeNotSupported": "Type d’annulation non pris en charge",
-    "undoOperationFailed": "Échec de l’annulation",
-    "unknownError": "Erreur inconnue",
-    "confirm": "Confirmer",
-    "find": "Rechercher...",
-    "replace": "Remplacer",
-    "downloadInstead": "Télécharger à la place",
-    "keyboardShortcuts": "Raccourcis clavier",
-    "searchAndReplace": "Rechercher et remplacer",
-    "editing": "Édition",
-    "search": "Rechercher",
-    "findNext": "Rechercher le suivant",
-    "findPrevious": "Rechercher le précédent",
-    "save": "Enregistrer",
-    "selectAll": "Tout sélectionner",
-    "undo": "Annuler",
-    "redo": "Rétablir",
-    "moveLineUp": "Déplacer la ligne vers le haut",
-    "moveLineDown": "Déplacer la ligne vers le bas",
-    "toggleComment": "Commenter/Décommenter",
-    "autoComplete": "Complétion automatique",
-    "imageLoadError": "Échec du chargement de l’image",
-    "startTyping": "Commencez à taper…",
-    "unknownSize": "Taille inconnue",
-    "fileIsEmpty": "Le fichier est vide",
-    "largeFileWarning": "Avertissement – Fichier volumineux",
-    "largeFileWarningDesc": "Ce fichier a une taille de {{size}}, ce qui peut entraîner des problèmes de performances lorsqu’il est ouvert en tant que texte.",
-    "fileNotFoundAndRemoved": "Le fichier « {{name}} » est introuvable et a été retiré des fichiers récents/épinglés.",
-    "failedToLoadFile": "Échec du chargement du fichier : {{error}}",
-    "serverErrorOccurred": "Une erreur serveur s’est produite. Veuillez réessayer plus tard.",
-    "autoSaveFailed": "Échec de l’enregistrement automatique",
-    "fileAutoSaved": "Fichier enregistré automatiquement",
-    "moveFileFailed": "Échec du déplacement de {{name}}",
-    "moveOperationFailed": "L’opération de déplacement a échoué",
-    "canOnlyCompareFiles": "Il est uniquement possible de comparer deux fichiers",
-    "comparingFiles": "Comparaison des fichiers : {{file1}} et {{file2}}",
-    "dragFailed": "L’opération de glisser-déposer a échoué",
-    "filePinnedSuccessfully": "Le fichier « {{name}} » a été épinglé avec succès",
-    "pinFileFailed": "Échec de l’épinglage du fichier",
-    "fileUnpinnedSuccessfully": "Le fichier « {{name}} » a été désépinglé avec succès",
-    "unpinFileFailed": "Impossible de désépingler le fichier",
-    "shortcutAddedSuccessfully": "Raccourci de dossier « {{name}} » ajouté avec succès",
-    "addShortcutFailed": "Impossible d'ajouter le raccourci",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} éléments avec succès",
-    "operationCompleted": "{{operation}} {{count}} éléments",
-    "downloadFileSuccess": "Fichier {{name}} téléchargé avec succès",
-    "downloadFileFailed": "Échec du téléchargement",
-    "downloadingFile": "Téléchargement de {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Déplacer vers {{name}}",
-    "diffCompareWith": "Diff avec {{name}}",
-    "dragOutsideToDownload": "Faites glisser hors de la fenêtre pour télécharger ({{count}} fichiers)",
-    "newFolderDefault": "Nouveau dossier",
-    "newFileDefault": "Nouveau fichier.txt",
-    "successfullyMovedItems": "{{count}} éléments déplacés avec succès vers {{target}}",
-    "move": "Déplacer",
-    "searchInFile": "Rechercher dans le fichier (Ctrl+F)",
-    "showKeyboardShortcuts": "Afficher les raccourcis clavier",
-    "decreaseFontSize": "Diminuer la taille de police",
-    "increaseFontSize": "Augmenter la taille de police",
-    "startWritingMarkdown": "Commencez à rédiger votre contenu markdown...",
-    "loadingFileComparison": "Chargement de la comparaison de fichiers...",
-    "reload": "Recharger",
-    "compare": "Comparer",
-    "sideBySide": "Côte à côte",
-    "inline": "En ligne",
-    "fileComparison": "Comparaison de fichiers : {{file1}} vs {{file2}}",
-    "fileTooLarge": "Le fichier est trop volumineux (> 10 Mo) et ne peut pas être ouvert en mode texte pour des raisons de sécurité.",
-    "sshConnectionFailed": "La connexion SSH a échoué. Veuillez vérifier votre connexion à {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Impossible de charger le fichier : {{error}}",
-    "connecting": "Connexion en cours...",
-    "connectedSuccessfully": "Connecté avec succès",
-    "totpVerificationFailed": "Échec de la vérification TOTP",
-    "browserSignInFailed": "Échec de la connexion. Veuillez réessayer.",
-    "authenticationFailed": "Échec de l'authentification",
-    "incorrectPassphrase": "Phrase secrète incorrecte. Veuillez réessayer.",
-    "verificationCodePrompt": "Code de vérification :",
-    "changePermissions": "Modifier les permissions",
-    "currentPermissions": "Permissions actuelles",
-    "owner": "Propriétaire",
-    "group": "Groupe",
-    "others": "Autres",
-    "read": "Lecture",
-    "write": "Écriture",
-    "execute": "Exécution",
-    "permissionsChangedSuccessfully": "Permissions modifiées avec succès",
-    "failedToChangePermissions": "Échec de la modification des permissions",
-    "name": "Nom",
-    "sortByName": "Nom",
-    "sortByDate": "Date de modification",
-    "sortBySize": "Taille",
-    "ascending": "Croissant",
-    "descending": "Décroissant",
-    "root": "Racine",
-    "new": "Nouveau",
-    "sortBy": "Trier par",
-    "items": "Éléments",
-    "selected": "Sélectionné",
-    "editor": "Éditeur",
-    "octal": "Octal",
-    "storage": "Stockage",
-    "disk": "Disque",
-    "used": "Utilisé",
-    "of": "sur",
-    "toggleSidebar": "Afficher/Masquer la barre latérale",
-    "compactLayout": "Utilisez une mise en page compacte",
-    "comfortableLayout": "Utilisez une disposition confortable",
-    "cannotLoadPdf": "Impossible de charger le PDF",
-    "pdfLoadError": "Une erreur s'est produite lors du chargement de ce fichier PDF.",
-    "loadingPdf": "Chargement du visualiseur PDF...",
-    "loadingPage": "Chargement de la page...",
-    "cancel": "Annuler",
-    "copiedItems_one": "Élément copié {{count}}",
-    "copiedItems_other": "Éléments copiés {{count}}",
-    "deleteCopiedFileFailed": "Impossible de supprimer la copie de {{name}}: {{error}}",
-    "dragMovedItems_one": "Élément déplacé {{count}} vers {{target}}",
-    "dragMovedItems_other": "Éléments déplacés {{count}} vers {{target}}",
-    "moveBackFileFailed": "Impossible de déplacer {{name}} vers l'arrière : {{error}}",
-    "terminal": "Terminal : {{host}} ({{path}})",
-    "dragToDesktop": "Faire glisser {{name}} sur le bureau",
-    "dragFilesToDesktop": "Glisser-déposer des fichiers {{count}} sur le bureau",
-    "folderDragUnsupported": "Le glisser-déposer de dossiers sur le bureau n'est pas encore pris en charge.",
-    "saveToDesktopFailed": "Échec de l'enregistrement : {{error}}",
-    "dragFailedDetail": "Échec du glissement : {{error}}",
-    "videoUnsupported": "Votre navigateur ne peut pas lire ce format vidéo.",
-    "downloadToPlay": "Téléchargez-le pour y jouer ailleurs",
-    "cannotPreviewType": "Impossible de prévisualiser ce type de fichier",
-    "cannotPreviewTypeHint": "Ce type de fichier ne possède pas d'aperçu. Téléchargez-le pour l'ouvrir dans une autre application.",
-    "loadingFile": "Chargement du fichier...",
-    "loadingImage": "Chargement de l'image...",
-    "loadingEditor": "Chargement de l'éditeur...",
-    "loadingPreview": "Chargement de l'aperçu...",
-    "loadingAudio": "Chargement du lecteur audio...",
-    "emptyPreview": "Rien à prévisualiser pour le moment...",
-    "revert": "Revenir",
-    "openAsText": "Ouvrir comme texte",
-    "confirmOpenAsText": "Voulez-vous continuer à ouvrir ce fichier en mode texte ? Cela pourrait ralentir votre navigateur."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "Transférer des fichiers entre deux hôtes SSH.",
-    "sourceServer": "Serveur source",
-    "destinationServer": "Serveur de destination",
-    "selectHost": "Sélectionner l'hôte",
-    "noHostSelected": "Aucun hôte sélectionné",
-    "move": "Déplacer",
-    "copy": "Copier",
-    "upload": "Téléverser",
-    "itemsSelected": "{{count}} élément sélectionné",
-    "itemsSelected_other": "{{count}} éléments sélectionnés",
-    "ready": "Prêt",
-    "loadingHosts": "Chargement des hôtes...",
-    "name": "Nom",
-    "modified": "Modifié",
-    "size": "Taille",
-    "noFiles": "Aucun fichier",
-    "open": "Ouvrir",
-    "up": "En haut",
-    "refresh": "Actualiser",
-    "copyToTarget": "Copier dans le répertoire cible",
-    "rename": "Renommer",
-    "delete": "Supprimer",
-    "editPermissions": "Autorisations de modification",
-    "createNewFolder": "Créer un nouveau dossier",
-    "deleteSelectedItems": "Supprimer les éléments sélectionnés",
-    "deleteConfirm": "Supprimer l'élément sélectionné {{count}} ?",
-    "deleteConfirm_other": "Supprimer les éléments sélectionnés {{count}} ?",
-    "cancel": "Annuler",
-    "save": "Enregistrer",
-    "folderCreated": "Dossier créé",
-    "itemRenamed": "Article renommé",
-    "actionFailed": "Action échouée",
-    "itemsDeleted": "{{count}} élément supprimé",
-    "itemsDeleted_other": "{{count}} éléments supprimés",
-    "deleteFailed": "Échec de la suppression",
-    "permissionsUpdated": "Autorisations mises à jour",
-    "noRemoteSessionConnected": "Aucune session distante connectée",
-    "failedToListFiles": "Impossible de lister les fichiers",
-    "failedToRefresh": "Échec de l'actualisation",
-    "destinationInsideSource": "La destination ne peut pas se trouver à l'intérieur du chemin source sélectionné.",
-    "sameHostNoOp": "Le dossier source et le dossier de destination sont identiques."
-  },
-  "hosts": {
-    "fileManager": "Gestionnaire de fichiers",
-    "fileManagerUrlCopied": "URL du gestionnaire de fichiers copiée",
-    "copyFileManagerUrlAction": "Copier l'URL du gestionnaire de fichiers",
-    "docsLink": "Voir la documentation",
-    "hostNotFound": "Hôte introuvable",
-    "loadingHost": "Chargement de l'hôte..."
-  },
-  "onboarding": {
-    "feature_files": "Gestionnaire de fichiers",
-    "feature_files_desc": "Parcourez, téléchargez, chargez et modifiez des fichiers via SFTP sans quitter l'application."
-  },
-  "terminal": {
-    "runTitle": "Exécution de {{command}} - {{host}}",
-    "terminalTitle": "Terminal - {{host}}",
-    "terminalWithPath": "Terminal - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Parcourir les dossiers de destination",
-    "browsePathError": "Impossible d’ouvrir ce chemin sur l’hôte de destination.",
-    "browsePathWillBeCreated": "Ce dossier n’existe pas encore. Il sera créé au début du transfert.",
-    "cancel": "Annuler",
-    "cleanupDestFiles": "Nettoyer la destination",
-    "cleanupDestFilesError": "Échec du nettoyage",
-    "cleanupDestFilesNothing": "Rien à nettoyer sur la destination",
-    "cleanupDestFilesPartial": "Certains fichiers partiels n'ont pas pu être supprimés",
-    "cleanupDestFilesSuccess": "Fichiers partiels supprimés de la destination",
-    "confirmCopy": "Copier",
-    "confirmMove": "Déplacer",
-    "copyFolderToHost": "Copier le dossier vers l’hôte…",
-    "copyItemsToHost": "Copier {{count}} éléments vers l’hôte…",
-    "copyToHost": "Copier vers l’hôte…",
-    "destinationPath": "Chemin de destination",
-    "destMustBeDirectory": "La destination doit être un dossier pour les transferts de plusieurs éléments",
-    "goUp": "Remonter",
-    "hostAuthRequired": "Authentification requise. Ouvrez d'abord le Gestionnaire de fichiers sur cet hôte.",
-    "hostConnecting": "Connexion en cours…",
-    "hostConnectionFailed": "Échec de la connexion",
-    "hostDisconnected": "Non connecté",
-    "hostReady": "Prêt",
-    "itemsSummary": "{{count}} éléments",
-    "jumpHostLimitation": "Les deux hôtes doivent être accessibles depuis le serveur Termix. Le routage direct d’hôte à hôte n’est pas pris en charge.",
-    "methodAuto": "Auto",
-    "methodAutoHint": "Choisit l’archive tar ou le SFTP par fichier selon le nombre de fichiers, leur taille et leur compressibilité. Les fichiers uniques utilisent toujours le SFTP en continu (streaming).",
-    "methodItemSftp": "SFTP par fichier",
-    "methodItemSftpHint": "Transfère chaque fichier individuellement via SFTP. Fonctionne sur tous les hôtes, y compris Windows.",
-    "methodItemSftpLimitation": "Chaque fichier utilise le même flux SFTP qu’une copie de fichier unique, l’un après l’autre. La progression est combinée pour tous les fichiers, donc la barre avance lentement lors de gros fichiers.",
-    "methodLabel": "Méthode de transfert",
-    "methodPreviewError": "Impossible de prévisualiser la méthode de transfert. Le serveur choisira tout de même une méthode au lancement.",
-    "methodPreviewLoading": "Calcul de la méthode de transfert…",
-    "methodPreviewScanSummary": "{{fileCount}} fichiers, {{totalSize}} au total (analysés sur l’hôte source).",
-    "methodPreviewWillUseItemSftp": "Utilisera : SFTP par fichier",
-    "methodPreviewWillUseTar": "Utilisera : Archive tar",
-    "methodReason": {
-      "user_item_sftp": "Vous avez choisi SFTP par fichier.",
-      "user_tar": "Vous avez choisi l'archive tar.",
-      "tar_unavailable": "Tar n'étant pas disponible sur l'un ou les deux hôtes, le transfert SFTP par fichier sera utilisé à la place.",
-      "windows_host": "Un système hôte Windows est impliqué, donc tar n'est pas utilisé.",
-      "auto_multi_large": "Auto : plusieurs fichiers, dont un fichier volumineux ({{largestSize}}) contenant des données compressibles. Tar les regroupe en un seul transfert.",
-      "auto_single_large_in_archive": "Auto : un fichier volumineux ({{largestSize}}) dans cet ensemble, donc SFTP par fichier.",
-      "auto_many_incompressible": "Auto : données majoritairement incompressibles, donc SFTP par fichier.",
-      "auto_many_files": "Auto : nombreux fichiers ({{fileCount}}), tar réduit la surcharge par fichier.",
-      "auto_default": "Auto : SFTP par fichier pour cet ensemble."
-    },
-    "methodTar": "Archive tar",
-    "methodTarHint": "Compresse sur la source, transfère une archive, extrait sur la destination. Nécessite tar sur les deux hôtes Unix.",
-    "metricsCompress": "Compression sur la source : {{duration}}",
-    "metricsExtract": "Extraction sur la destination : {{duration}}",
-    "metricsPrepare": "Préparation de la destination : {{duration}}",
-    "metricsRouteBenchmark": "Sonde d'itinéraire : direct {{direct}}, relais {{relay}}",
-    "metricsSourceDelete": "Suppression depuis la source : {{duration}}",
-    "metricsTotal": "Total : {{duration}}",
-    "metricsTransfer": "De bout en bout : {{throughput}} ({{duration}})",
-    "metricsVerify": "Vérification SHA-256 : {{duration}}",
-    "moveFolderToHost": "Déplacer le dossier vers l’hôte…",
-    "moveItemsToHost": "Déplacer {{count}} éléments vers l’hôte…",
-    "moveToHost": "Déplacer vers l’hôte…",
-    "noHostsConnected": "Aucun autre hôte de gestionnaire de fichiers disponible.",
-    "noHostsConnectedHint": "Ajoutez un autre hôte SSH avec le gestionnaire de fichiers activé dans le gestionnaire d’hôtes.",
-    "parallelSegmentsHint": "Les fichiers volumineux sont divisés en segments de 256 Mo. Les voies multiples utilisent des connexions distinctes (comme lancer plusieurs transferts) pour un débit total plus élevé.",
-    "parallelSegmentsLabel": "Voies de transfert parallèles",
-    "parallelSegmentsOption": "{{count}} voies",
-    "progressBenchmarking": "Sélection de l'itinéraire de transfert le plus rapide…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Annuler",
-    "progressCancelling": "Annulation en cours…",
-    "progressCompressing": "Compression sur l’hôte source…",
-    "progressExtracting": "Extraction sur la destination…",
-    "progressItems": "{{current}} / {{total}} fichiers",
-    "progressReconnecting": "Reconnexion…",
-    "progressStalled": "Bloqué",
-    "progressTotalSpeed": "{{speed}} au total ({{lanes}} voies)",
-    "progressTransferring": "Transfert des données…",
-    "progressTransferringItems": "Transfert des fichiers ({{current}} sur {{total}})…",
-    "progressVerifying": "Vérification de l'intégrité du fichier…",
-    "recentDestinations": "Destinations récentes",
-    "resumedHint": "Reconnecté à un transfert actif démarré dans une autre fenêtre.",
-    "retryTransfer": "Réessayer",
-    "retryTransferError": "Échec de la nouvelle tentative",
-    "selectDestinationHost": "Sélectionner l’hôte de destination",
-    "transferCancelled": "Transfert annulé",
-    "transferCancelledCopyHint": "Des fichiers partiels peuvent subsister sur la destination.",
-    "transferCancelledMoveHint": "Des fichiers partiels peuvent subsister sur la destination. Les fichiers sources n'ont pas été supprimés.",
-    "transferError": "Échec du transfert",
-    "transferFailedRetryHint": "Des données partielles ont été conservées sur la destination. La nouvelle tentative reprendra lorsque la connexion sera rétablie.",
-    "transferPartialHint": "Impossible de transférer : {{paths}}",
-    "transferSuccess": "Transfert terminé",
-    "metricsHopSourceRead": "Source → serveur : {{throughput}}",
-    "metricsHopDestSftpWrite": "Serveur → dest (SFTP) : {{throughput}}",
-    "metricsHopDestLocalWrite": "Serveur → dest (local) : {{throughput}}"
-  },
-  "plugin": {
-    "name": "Gestionnaire de fichiers"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/he_IL.json b/plugins/file-manager/locales/translated/he_IL.json
deleted file mode 100644
index fe6a246df..000000000
--- a/plugins/file-manager/locales/translated/he_IL.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "קבצים",
-    "sftp": "SFTP",
-    "openFileManager": "פתח את מנהל הקבצים"
-  },
-  "permissions": {
-    "use": {
-      "title": "השתמש במנהל הקבצים",
-      "description": "עיון, עריכה והעברה של קבצים דרך SFTP."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "הפעל את מנהל הקבצים",
-        "description": "עיין וערוך קבצים במארח זה דרך SFTP."
-      },
-      "defaultPath": {
-        "label": "נתיב ברירת מחדל"
-      },
-      "scpLegacy": {
-        "label": "מצב SCP Legacy"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "העברות קבצים בו זמנית",
-        "description": "כמה קבצים מעלה או מוריד המנהל המקומי/מרחוק בו זמנית. יש להוריד ערך זה אם השרת שלך מגביל ערוצי SFTP."
-      },
-      "confirmBeforeTrash": {
-        "label": "אשר לפני העברת קבצים לאשפה",
-        "description": "שאל לפני העברת קבצים מרוחקים לאשפה. מחיקה לצמיתות עדיין דורשת אישור."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "מנהל הקבצים"
-  },
-  "fileManager": {
-    "noHostSelected": "לא נבחר מארח",
-    "initializingEditor": "מאתחל עורך...",
-    "file": "קוֹבֶץ",
-    "folder": "תיקייה",
-    "uploadFile": "העלאת קובץ",
-    "downloadFile": "הורדה",
-    "extractArchive": "ארכיון חילוץ",
-    "extractingArchive": "מחלץ {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} חולץ בהצלחה",
-    "extractFailed": "החילוץ נכשל",
-    "compressFile": "דחיסת קובץ",
-    "compressFiles": "דחיסת קבצים",
-    "compressFilesDesc": "דחיסת {{count}} פריטים לתוך ארכיון",
-    "archiveName": "שם הארכיון",
-    "enterArchiveName": "הזן שם ארכיון...",
-    "compressionFormat": "פורמט דחיסה",
-    "selectedFiles": "קבצים נבחרים",
-    "andMoreFiles": "ועוד {{count}}...",
-    "compress": "לִדחוֹס",
-    "compressingFiles": "דחיסת {{count}} פריטים לתוך {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} נוצר בהצלחה",
-    "compressFailed": "הדחיסה נכשלה",
-    "edit": "לַעֲרוֹך",
-    "preview": "תצוגה מקדימה",
-    "previous": "קוֹדֵם",
-    "next": "הַבָּא",
-    "pageXOfY": "עמוד {{current}} מתוך {{total}}",
-    "zoomOut": "התקרבות",
-    "zoomIn": "לְהִתְמַקֵד",
-    "newFile": "קובץ חדש",
-    "newFolder": "תיקייה חדשה",
-    "rename": "שינוי שם",
-    "uploading": "מעלה...",
-    "uploadingFile": "מעלה {{name}}...",
-    "uploadingChunk": "מעלה {{name}}: {{percent}}% (חלק {{chunk}} מתוך {{total}})",
-    "fileName": "שם הקובץ",
-    "folderName": "שם התיקייה",
-    "fileUploadedSuccessfully": "הקובץ \"{{name}}\" הועלה בהצלחה",
-    "failedToUploadFile": "העלאת הקובץ נכשלה",
-    "uploadingFolderFiles": "מעלה קובץ/ים {{count}}...",
-    "uploadedFolderFiles": "הקבצים {{count}} הועלו בהצלחה",
-    "uploadedFolderPartial": "העלאת קובץ/קבצים {{uploaded}} , {{failed}} נכשלה",
-    "fileDownloadedSuccessfully": "הקובץ \"{{name}}\" הורד בהצלחה",
-    "failedToDownloadFile": "הורדת הקובץ נכשלה",
-    "fileCreatedSuccessfully": "הקובץ \"{{name}}\" נוצר בהצלחה",
-    "folderCreatedSuccessfully": "תיקיית \"{{name}}\" נוצרה בהצלחה",
-    "failedToCreateItem": "יצירת הפריט נכשלה",
-    "operationFailed": "הפעולה {{operation}} נכשלה עבור {{name}}: {{error}}",
-    "failedToResolveSymlink": "נכשל בפענוח הסימבילינק",
-    "itemsDeletedSuccessfully": "{{count}} פריטים נמחקו בהצלחה",
-    "failedToDeleteItems": "מחיקת הפריטים נכשלה",
-    "sudoPasswordRequired": "נדרשת סיסמת מנהל",
-    "enterSudoPassword": "הזן את סיסמת הסודו כדי להמשיך בפעולה זו",
-    "sudoPassword": "סיסמת סודו",
-    "sudoOperationFailed": "פעולת הסודו נכשלה",
-    "sudoAuthFailed": "אימות סודו נכשל",
-    "dragFilesToUpload": "שחררו קבצים כאן כדי להעלות",
-    "dropToUploadHere": "שחרר כדי להעלות כאן",
-    "dropToDownloadHere": "שחררו להורדה כאן",
-    "localFiles": "מְקוֹמִי",
-    "showLocalFiles": "הצגת קבצים מקומיים (תצוגה מפוצלת)",
-    "hideLocalFiles": "הסתר קבצים מקומיים",
-    "localHome": "תיקיית הבית",
-    "localPathPlaceholder": "נתיב התיקייה המקומית",
-    "localShowHidden": "הצג קבצים מוסתרים",
-    "localHideHidden": "הסתר קבצים נסתרים",
-    "localRevealInFileManager": "חשיפה במנהל הקבצים של המערכת",
-    "localCannotOpenFolder": "לא ניתן לפתוח תיקייה",
-    "localItemCount": "פריטים {{count}}",
-    "localSelectedCount": "{{count}} נבחר",
-    "back": "בְּחֲזָרָה",
-    "forward": "קָדִימָה",
-    "up": "לְמַעלָה",
-    "kind": "סוּג",
-    "localUploadingProgress": "מעלה {{current}} מתוך {{total}}",
-    "localDownloadingProgress": "מוריד {{current}} מתוך {{total}}",
-    "localTransferInFlight": "{{count}} בבת אחת",
-    "localPreparingDownload": "מכין הורדה...",
-    "localTransferCancelled": "ההעברה בוטלה",
-    "localNothingToTransfer": "אין מה להעביר",
-    "localUploadComplete": "הועלו {{count}} קבצים",
-    "localUploadFailed": "ההעלאה נכשלה",
-    "localUploadPartial": "העלאת קובץ/קבצים {{done}} , {{failed}} נכשלה",
-    "localDownloadComplete": "הורד/י קובץ/ים {{count}}",
-    "localDownloadFailed": "ההורדה נכשלה",
-    "localDownloadPartial": "הורדת הקובץ/קבצים {{done}} , {{failed}} נכשלה",
-    "localReplaceExistingPrompt": "פריט/ים {{count}} כבר קיים/ים בתיקייה זו. האם להחליף אותם?",
-    "localReplace": "לְהַחלִיף",
-    "localSkipExisting": "לְדַלֵג",
-    "localSkippedExisting": "דילג על {{count}} פריטים קיימים",
-    "localUnsafeNamesSkipped": "דילגתי על {{count}} פריטים ששמם אינו ניתן לשימוש במחשב זה",
-    "localOpen": "לִפְתוֹחַ",
-    "localOpenFolder": "פתיחת תיקייה",
-    "localUploadToRemote": "העלאה לשרת",
-    "localUploadToRemoteMany": "העלה {{count}} פריטים לשרת",
-    "localMoveToTrash": "העברה לאשפה",
-    "localMoveToTrashMany": "העבר {{count}} פריטים לאשפה",
-    "localTrashConfirmSingle": "להעביר את \"{{name}}\" לאשפה?",
-    "localTrashConfirmFolder": "להעביר את התיקייה \"{{name}}\" ואת כל תוכנה לפח האשפה?",
-    "localTrashConfirmMany": "להעביר {{count}} פריטים לאשפה?",
-    "localTrashed": "הועבר/י {{count}} פריט/ים לאשפה",
-    "localTrashFailed": "לא ניתן היה להעביר לאשפה",
-    "localRenameFailed": "שינוי השם נכשל",
-    "localCreateFailed": "לא ניתן היה ליצור פריט",
-    "goToParentFolder": "עבור לתיקיית האב",
-    "resizeSidebar": "גרור כדי לשנות את גודל סרגל הצד (לחץ פעמיים כדי לאפס)",
-    "resizeLocalPane": "גרור כדי לשנות את גודל החלונית המקומית (לחץ פעמיים כדי לאפס)",
-    "columns": "עמודות",
-    "columnsHint": "לחיצה ימנית כדי לבחור עמודות",
-    "emptyFolder": "תיקייה זו ריקה",
-    "searchFiles": "חיפוש קבצים...",
-    "upload": "העלאה",
-    "selectHostToStart": "בחר מארח כדי להתחיל בניהול קבצים",
-    "sshRequiredForFileManager": "מנהל הקבצים דורש SSH. שרת זה אינו מופעל באמצעות SSH.",
-    "failedToConnect": "נכשלה ההתחברות ל-SSH",
-    "failedToLoadDirectory": "טעינת הספרייה נכשלה",
-    "noSSHConnection": "אין חיבור SSH זמין",
-    "copy": "לְהַעְתִיק",
-    "cut": "גְזִירָה",
-    "paste": "לְהַדבִּיק",
-    "copyPath": "העתק נתיב",
-    "copyPaths": "העתקת נתיבים",
-    "delete": "לִמְחוֹק",
-    "properties": "נכסים",
-    "refresh": "לְרַעֲנֵן",
-    "downloadFiles": "הורד {{count}} קבצים לדפדפן",
-    "copyFiles": "העתקת {{count}} פריטים",
-    "cutFiles": "גזור {{count}} פריטים",
-    "deleteFiles": "מחיקת {{count}} פריטים",
-    "filesCopiedToClipboard": "{{count}} פריטים הועתקו ללוח",
-    "filesCutToClipboard": "{{count}} פריטים נחתכו ללוח",
-    "pathCopiedToClipboard": "הנתיב הועתק ללוח",
-    "pathsCopiedToClipboard": "נתיבים {{count}} הועתקו ללוח",
-    "failedToCopyPath": "נכשלה העתקת הנתיב ללוח",
-    "copyFolderLink": "העתקת קישור לתיקייה",
-    "copyCurrentFolderLink": "העתקת קישור לתיקייה הנוכחית",
-    "folderLinkCopied": "קישור לתיקייה הועתק ללוח",
-    "failedToCopyFolderLink": "נכשל בהעתקת קישור לתיקייה",
-    "movedItems": "הועבר {{count}} פריטים",
-    "failedToDeleteItem": "מחיקת הפריט נכשלה",
-    "itemRenamedSuccessfully": "שם השינוי של {{type}} הצליח",
-    "failedToRenameItem": "שינוי שם הפריט נכשל",
-    "download": "הורדה",
-    "openExternalEditor": "פתוח חיצונית",
-    "chooseExternalEditor": "בחר עורך חיצוני",
-    "externalEditorSelected": "עורך חיצוני נבחר",
-    "externalEditorDesktopOnly": "עורך חיצוני זמין רק באפליקציית שולחן העבודה",
-    "externalEditorOpened": "נפתח בעורך חיצוני. שמירה שם תעלה את השינויים בחזרה לשרת.",
-    "failedToOpenExternalEditor": "נכשלה פתיחת העורך החיצוני",
-    "failedToSelectExternalEditor": "נכשלה בחירת עורך חיצוני",
-    "permissions": "הרשאות",
-    "size": "גוֹדֶל",
-    "modified": "שונה",
-    "path": "נָתִיב",
-    "confirmDelete": "האם אתה בטוח שאתה רוצה למחוק {{name}}?",
-    "permissionDenied": "ההרשאה נדחתה",
-    "serverError": "שגיאת שרת",
-    "fileSavedSuccessfully": "הקובץ נשמר בהצלחה",
-    "failedToSaveFile": "שמירת הקובץ נכשלה",
-    "confirmDeleteSingleItem": "האם אתה בטוח שברצונך למחוק לצמיתות את \"{{name}}\"?",
-    "confirmDeleteMultipleItems": "האם אתה בטוח שברצונך למחוק לצמיתות {{count}} פריטים?",
-    "confirmDeleteMultipleItemsWithFolders": "האם אתה בטוח שברצונך למחוק לצמיתות את הפריטים {{count}} ? זה כולל תיקיות ותוכן שלהן.",
-    "confirmDeleteFolder": "האם אתה בטוח שברצונך למחוק לצמיתות את התיקייה \"{{name}}\" ואת כל תוכנה?",
-    "permanentDeleteWarning": "לא ניתן לבטל פעולה זו. הפריט/ים יימחקו לצמיתות מהשרת.",
-    "moveToTrashWarning": "הפריט/ים יועברו לפח האשפה של Termix וניתן יהיה לשחזר אותם לפני שתקופת השמירה תפוג.",
-    "itemsMovedToTrash": "פריט/ים {{count}} הועברו לאשפה",
-    "trash": "אַשׁפָּה",
-    "trashDescription": "פריטים שנמחקו נשמרים למשך {{days}} יום/ימים במארח זה.",
-    "trashLoadFailed": "טעינת האשפה נכשלה",
-    "trashEmpty": "האשפה ריקה",
-    "trashRestore": "לְשַׁחְזֵר",
-    "trashRestored": "שוחזר {{name}}",
-    "trashRestoreFailed": "שחזור הפריט נכשל. ייתכן שהנתיב המקורי כבר קיים.",
-    "trashDeletePermanently": "מחיקה לצמיתות",
-    "trashDeleteConfirm": "למחוק לצמיתות את {{name}}? לא ניתן לבטל פעולה זו.",
-    "trashPermanentlyDeleted": "נמחק לצמיתות {{name}}",
-    "trashDeleteFailed": "נכשלה המחיקה לצמיתות של הפריט",
-    "trashEmptyAction": "רוקנו את האשפה",
-    "trashEmptyConfirm": "למחוק לצמיתות כל פריט באשפה? לא ניתן לבטל פעולה זו.",
-    "trashEmptied": "ריקון האשפה",
-    "trashRetention": "ניקוי אוטומטי לאחר (ימים)",
-    "trashRetentionSaved": "שמירת האשפה עודכנה",
-    "trashRetentionFailed": "נכשל עדכון שמירת האשפה",
-    "trashUnavailableConfirm": "לא ניתן להעביר פריט זה לאשפה, בדרך כלל מכיוון שהוא נמצא במערכת קבצים אחרת או דורש הרשאות מוגברות. האם למחוק אותו לצמיתות במקום זאת?",
-    "recent": "אחרונים",
-    "pinned": "מוצמד",
-    "folderShortcuts": "קיצורי דרך לתיקיות",
-    "failedToReconnectSSH": "נכשל בחיבור מחדש של סשן SSH",
-    "openTerminalHere": "פתח את הטרמינל כאן",
-    "run": "לָרוּץ",
-    "openTerminalInFolder": "פתח את הטרמינל בתיקייה זו",
-    "openTerminalInFileLocation": "פתיחת הטרמינל במיקום הקובץ",
-    "runningFile": "ריצה - {{file}}",
-    "onlyRunExecutableFiles": "יכול להריץ רק קבצי הפעלה",
-    "directories": "מדריכים",
-    "removedFromRecentFiles": "הוסר \"{{name}}\" מהקבצים האחרונים",
-    "removeFailed": "ההסרה נכשלה",
-    "unpinnedSuccessfully": "\"{{name}}\" בוטל בהצלחה",
-    "unpinFailed": "ביטול ההצמדה נכשל",
-    "removedShortcut": "קיצור הדרך \"{{name}}\" הוסר",
-    "removeShortcutFailed": "הסרת קיצור הדרך נכשלה",
-    "clearedAllRecentFiles": "ניקה את כל הקבצים האחרונים",
-    "clearFailed": "ניקוי נכשל",
-    "removeFromRecentFiles": "הסר מהקבצים האחרונים",
-    "clearAllRecentFiles": "נקה את כל הקבצים האחרונים",
-    "unpinFile": "ביטול הצמדת קובץ",
-    "removeShortcut": "הסר קיצור דרך",
-    "pinFile": "קובץ הצמדה",
-    "addToShortcuts": "הוסף לקיצורי דרך",
-    "pasteFailed": "ההדבקה נכשלה",
-    "noUndoableActions": "אין פעולות שניתן לבטל",
-    "undoCopySuccess": "פעולת העתקה שבוטלה: מחיקת {{count}} קבצים שהועתקו",
-    "undoCopyFailedDelete": "ביטול נכשל: לא ניתן היה למחוק קבצים שהועתקו",
-    "undoCopyFailedNoInfo": "ביטול נכשל: לא ניתן היה למצוא את פרטי הקובץ שהועתק",
-    "undoMoveSuccess": "פעולת העברה שבוטלה: העבירו {{count}} קבצים חזרה למיקום המקורי",
-    "undoMoveFailedMove": "ביטול נכשל: לא ניתן היה להעביר קבצים בחזרה",
-    "undoMoveFailedNoInfo": "ביטול נכשל: לא ניתן היה למצוא מידע על הקובץ שהועבר",
-    "undoDeleteNotSupported": "לא ניתן לבטל את פעולת המחיקה: הקבצים נמחקו לצמיתות מהשרת",
-    "undoTypeNotSupported": "סוג פעולת ביטול לא נתמך",
-    "undoOperationFailed": "פעולת הביטול נכשלה",
-    "unknownError": "שגיאה לא ידועה",
-    "confirm": "לְאַשֵׁר",
-    "find": "לִמצוֹא...",
-    "replace": "לְהַחלִיף",
-    "downloadInstead": "הורד במקום זאת",
-    "keyboardShortcuts": "קיצורי מקלדת",
-    "searchAndReplace": "חיפוש והחלפה",
-    "editing": "עֲרִיכָה",
-    "search": "לְחַפֵּשׂ",
-    "findNext": "מצא את הבא",
-    "findPrevious": "מצא את הקודם",
-    "save": "לְהַצִיל",
-    "selectAll": "בחר הכל",
-    "undo": "לְבַטֵל",
-    "redo": "לַעֲשׂוֹת שׁוּב",
-    "moveLineUp": "הזזת שורה למעלה",
-    "moveLineDown": "הזזת שורה למטה",
-    "toggleComment": "החלף/הפעל תגובה",
-    "autoComplete": "השלמה אוטומטית",
-    "imageLoadError": "טעינת התמונה נכשלה",
-    "startTyping": "התחל להקליד...",
-    "unknownSize": "גודל לא ידוע",
-    "fileIsEmpty": "הקובץ ריק",
-    "largeFileWarning": "אזהרת קובץ גדול",
-    "largeFileWarningDesc": "קובץ זה הוא בגודל {{size}} , דבר שעלול לגרום לבעיות ביצועים בעת פתיחה כטקסט.",
-    "fileNotFoundAndRemoved": "הקובץ \"{{name}}\" לא נמצא והוסר מהקבצים האחרונים/המוצמדים",
-    "failedToLoadFile": "טעינת הקובץ נכשלה: {{error}}",
-    "serverErrorOccurred": "אירעה שגיאת שרת. אנא נסה שוב מאוחר יותר.",
-    "autoSaveFailed": "השמירה האוטומטית נכשלה",
-    "fileAutoSaved": "קובץ נשמר אוטומטית",
-    "moveFileFailed": "נכשל בהזזת {{name}}",
-    "moveOperationFailed": "פעולת ההעברה נכשלה",
-    "canOnlyCompareFiles": "ניתן להשוות רק שני קבצים",
-    "comparingFiles": "השוואת קבצים: {{file1}} ו- {{file2}}",
-    "dragFailed": "פעולת הגרירה נכשלה",
-    "filePinnedSuccessfully": "הקובץ \"{{name}}\" הוצמד בהצלחה",
-    "pinFileFailed": "נכשל בהצמדת הקובץ",
-    "fileUnpinnedSuccessfully": "הקובץ \"{{name}}\" נותק בהצלחה",
-    "unpinFileFailed": "נכשל ניתוק הקובץ",
-    "shortcutAddedSuccessfully": "קיצור הדרך לתיקייה \"{{name}}\" נוסף בהצלחה",
-    "addShortcutFailed": "הוספת קיצור דרך נכשלה",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} פריטים הצליחו",
-    "operationCompleted": "{{operation}} {{count}} פריטים",
-    "downloadFileSuccess": "הקובץ {{name}} הורד בהצלחה",
-    "downloadFileFailed": "ההורדה נכשלה",
-    "downloadingFile": "מוריד {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "מעבר אל {{name}}",
-    "diffCompareWith": "השוואת הבדלים עם {{name}}",
-    "dragOutsideToDownload": "גרור את הקבצים אל מחוץ לחלון כדי להוריד אותם ({{count}})",
-    "newFolderDefault": "תיקייה חדשה",
-    "newFileDefault": "קובץ חדש.txt",
-    "successfullyMovedItems": "הועבר בהצלחה {{count}} פריטים אל {{target}}",
-    "move": "מַהֲלָך",
-    "searchInFile": "חיפוש בקובץ (Ctrl+F)",
-    "showKeyboardShortcuts": "הצג קיצורי מקלדת",
-    "decreaseFontSize": "הקטנת גודל הגופן",
-    "increaseFontSize": "הגדלת גודל הגופן",
-    "startWritingMarkdown": "התחל לכתוב את תוכן ההנחה שלך...",
-    "loadingFileComparison": "טוען השוואת קבצים...",
-    "reload": "לִטעוֹן מִחָדָשׁ",
-    "compare": "לְהַשְׁווֹת",
-    "sideBySide": "זֶה בְּצַד זֶה",
-    "inline": "מוטבע",
-    "fileComparison": "השוואת קבצים: {{file1}} לעומת {{file2}}",
-    "fileTooLarge": "הקובץ גדול מדי (מעל 10MB) ולא ניתן לפתוח אותו כטקסט מסיבות אבטחה.",
-    "sshConnectionFailed": "חיבור SSH נכשל. אנא בדוק את החיבור שלך אל {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "טעינת הקובץ נכשלה: {{error}}",
-    "connecting": "מְקַשֵׁר...",
-    "connectedSuccessfully": "התחבר בהצלחה",
-    "totpVerificationFailed": "אימות TOTP נכשל",
-    "browserSignInFailed": "הכניסה נכשלה. אנא נסה שוב.",
-    "authenticationFailed": "האימות נכשל",
-    "incorrectPassphrase": "סיסמה שגויה. אנא נסה שוב.",
-    "verificationCodePrompt": "קוד אימות:",
-    "changePermissions": "שינוי הרשאות",
-    "currentPermissions": "הרשאות נוכחיות",
-    "owner": "בַּעַל",
-    "group": "קְבוּצָה",
-    "others": "אחרים",
-    "read": "לִקְרוֹא",
-    "write": "לִכתוֹב",
-    "execute": "לְבַצֵעַ",
-    "permissionsChangedSuccessfully": "ההרשאות שונו בהצלחה",
-    "failedToChangePermissions": "שינוי ההרשאות נכשל",
-    "name": "שֵׁם",
-    "sortByName": "שֵׁם",
-    "sortByDate": "תאריך שינוי",
-    "sortBySize": "גוֹדֶל",
-    "ascending": "עוֹלֶה",
-    "descending": "יורד",
-    "root": "שׁוֹרֶשׁ",
-    "new": "חָדָשׁ",
-    "sortBy": "מיין לפי",
-    "items": "פריטים",
-    "selected": "נִבחָר",
-    "editor": "עוֹרֵך",
-    "octal": "אוקטלי",
-    "storage": "אִחסוּן",
-    "disk": "דִיסק",
-    "used": "מְשׁוּמָשׁ",
-    "of": "שֶׁל",
-    "toggleSidebar": "הפעלה/כיבוי סרגל צד",
-    "compactLayout": "השתמש בפריסה קומפקטית",
-    "comfortableLayout": "השתמש בפריסה נוחה",
-    "cannotLoadPdf": "לא ניתן לטעון את ה-PDF",
-    "pdfLoadError": "אירעה שגיאה בטעינת קובץ PDF זה.",
-    "loadingPdf": "טוען מציג PDF...",
-    "loadingPage": "טוען דף...",
-    "cancel": "לְבַטֵל",
-    "copiedItems_one": "פריט {{count}} הועתק",
-    "copiedItems_other": "הועתקו {{count}} פריטים",
-    "deleteCopiedFileFailed": "לא ניתן היה למחוק את העותק של {{name}}: {{error}}",
-    "dragMovedItems_one": "הועבר פריט {{count}} אל {{target}}",
-    "dragMovedItems_other": "הועבר {{count}} פריטים ל- {{target}}",
-    "moveBackFileFailed": "לא ניתן היה להזיז {{name}} אחורה: {{error}}",
-    "terminal": "טרמינל: {{host}} ({{path}})",
-    "dragToDesktop": "גרירת {{name}} לשולחן העבודה",
-    "dragFilesToDesktop": "גרירת קבצים {{count}} לשולחן העבודה",
-    "folderDragUnsupported": "גרירת תיקיות לשולחן העבודה אינה נתמכת עדיין",
-    "saveToDesktopFailed": "השמירה נכשלה: {{error}}",
-    "dragFailedDetail": "גרירה נכשלה: {{error}}",
-    "videoUnsupported": "הדפדפן שלך לא יכול להפעיל פורמט וידאו זה.",
-    "downloadToPlay": "הורד כדי להפעיל אותו במקום אחר",
-    "cannotPreviewType": "לא ניתן להציג תצוגה מקדימה של סוג קובץ זה",
-    "cannotPreviewTypeHint": "לסוג קובץ זה אין תצוגה מקדימה. הורד אותו כדי לפתוח אותו באפליקציה אחרת.",
-    "loadingFile": "טוען קובץ...",
-    "loadingImage": "טוען תמונה...",
-    "loadingEditor": "טוען את העורך...",
-    "loadingPreview": "טוען תצוגה מקדימה...",
-    "loadingAudio": "טוען נגן אודיו...",
-    "emptyPreview": "אין עוד אפשרות להציג בתצוגה מקדימה...",
-    "revert": "לַחֲזוֹר",
-    "openAsText": "פתח כטקסט",
-    "confirmOpenAsText": "האם ברצונך להמשיך לפתוח קובץ זה כטקסט? פעולה זו עלולה להאט את הדפדפן שלך."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "העברת קבצים בין שני מארחי SSH.",
-    "sourceServer": "שרת המקור",
-    "destinationServer": "שרת יעד",
-    "selectHost": "בחר מארח",
-    "noHostSelected": "לא נבחר מארח",
-    "move": "מַהֲלָך",
-    "copy": "לְהַעְתִיק",
-    "upload": "העלאה",
-    "itemsSelected": "פריט {{count}} נבחר",
-    "itemsSelected_other": "{{count}} פריטים נבחרו",
-    "ready": "מוּכָן",
-    "loadingHosts": "טוען מארחים...",
-    "name": "שֵׁם",
-    "modified": "שונה",
-    "size": "גוֹדֶל",
-    "noFiles": "אין קבצים",
-    "open": "לִפְתוֹחַ",
-    "up": "לְמַעלָה",
-    "refresh": "לְרַעֲנֵן",
-    "copyToTarget": "העתק לספריית היעד",
-    "rename": "שינוי שם",
-    "delete": "לִמְחוֹק",
-    "editPermissions": "עריכת הרשאות",
-    "createNewFolder": "צור תיקייה חדשה",
-    "deleteSelectedItems": "מחק פריטים שנבחרו",
-    "deleteConfirm": "למחוק את הפריט {{count}} שנבחר?",
-    "deleteConfirm_other": "למחוק את {{count}} הפריטים שנבחרו?",
-    "cancel": "לְבַטֵל",
-    "save": "לְהַצִיל",
-    "folderCreated": "תיקייה נוצרה",
-    "itemRenamed": "שם הפריט",
-    "actionFailed": "הפעולה נכשלה",
-    "itemsDeleted": "פריט {{count}} נמחק",
-    "itemsDeleted_other": "{{count}} פריטים נמחקו",
-    "deleteFailed": "המחיקה נכשלה",
-    "permissionsUpdated": "ההרשאות עודכנו",
-    "noRemoteSessionConnected": "אין חיבור סשן מרחוק",
-    "failedToListFiles": "רשימת הקבצים נכשלה",
-    "failedToRefresh": "רענון נכשל",
-    "destinationInsideSource": "היעד לא יכול להיות בתוך נתיב המקור שנבחר.",
-    "sameHostNoOp": "המקור והיעד הם אותה תיקייה."
-  },
-  "hosts": {
-    "fileManager": "מנהל הקבצים",
-    "fileManagerUrlCopied": "כתובת ה-URL של מנהל הקבצים הועתקה",
-    "copyFileManagerUrlAction": "העתקת כתובת URL של מנהל הקבצים",
-    "docsLink": "הצג מסמכים",
-    "hostNotFound": "המארח לא נמצא",
-    "loadingHost": "טוען מארח..."
-  },
-  "onboarding": {
-    "feature_files": "מנהל הקבצים",
-    "feature_files_desc": "דפדף, העלה, הורד וערוך קבצים דרך SFTP מבלי לצאת מהאפליקציה."
-  },
-  "terminal": {
-    "runTitle": "ריצה {{command}} - {{host}}",
-    "terminalTitle": "טרמינל - {{host}}",
-    "terminalWithPath": "טרמינל - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "עיון בתיקיות יעד",
-    "browsePathError": "לא ניתן היה לפתוח נתיב זה במארח היעד.",
-    "browsePathWillBeCreated": "תיקייה זו עדיין לא קיימת. היא תיווצר כאשר ההעברה תתחיל.",
-    "cancel": "לְבַטֵל",
-    "cleanupDestFiles": "יעד ניקוי",
-    "cleanupDestFilesError": "הניקוי נכשל",
-    "cleanupDestFilesNothing": "אין מה לנקות ביעד",
-    "cleanupDestFilesPartial": "לא ניתן היה להסיר חלק מהקבצים",
-    "cleanupDestFilesSuccess": "הוסרו קבצים חלקיים מהיעד",
-    "confirmCopy": "לְהַעְתִיק",
-    "confirmMove": "מַהֲלָך",
-    "copyFolderToHost": "העתקת תיקייה למארח…",
-    "copyItemsToHost": "העתק את הפריטים {{count}} לאירוח…",
-    "copyToHost": "העתק למארח…",
-    "destinationPath": "נתיב היעד",
-    "destMustBeDirectory": "היעד חייב להיות ספרייה עבור העברות מרובות פריטים",
-    "goUp": "לַעֲלוֹת",
-    "hostAuthRequired": "נדרש אימות. פתח תחילה את מנהל הקבצים במארח זה",
-    "hostConnecting": "חיבור…",
-    "hostConnectionFailed": "החיבור נכשל",
-    "hostDisconnected": "לא מחובר",
-    "hostReady": "מוּכָן",
-    "itemsSummary": "פריטים {{count}}",
-    "jumpHostLimitation": "שני המארחים חייבים להיות נגישים משרת Termix. ניתוב ישיר ממארח למארח אינו נתמך.",
-    "methodAuto": "אוטומטי",
-    "methodAutoHint": "בוחר SFTP לפי קובץ או tar בהתבסס על ספירת הקבצים, גודלם ויכולת הדחיסה. קבצים בודדים תמיד משתמשים ב-SFTP בסטרימינג.",
-    "methodItemSftp": "SFTP לפי קובץ",
-    "methodItemSftpHint": "העבר כל קובץ בנפרד דרך SFTP. עובד על כל המארחים כולל Windows.",
-    "methodItemSftpLimitation": "כל קובץ משתמש באותו זרם SFTP כעותק של קובץ בודד, אחד אחרי השני. ההתקדמות משולבת על פני כל הקבצים, כך שהסרגל נע לאט במהלך קבצים גדולים.",
-    "methodLabel": "שיטת העברה",
-    "methodPreviewError": "לא ניתן היה להציג תצוגה מקדימה של שיטת ההעברה. השרת עדיין יבחר שיטה כשתתחיל.",
-    "methodPreviewLoading": "חישוב שיטת ההעברה…",
-    "methodPreviewScanSummary": "{{fileCount}} קבצים, {{totalSize}} סה\"כ (נסרק במארח המקור).",
-    "methodPreviewWillUseItemSftp": "ישתמש ב: SFTP לפי קובץ",
-    "methodPreviewWillUseTar": "אשתמש ב: ארכיון Tar",
-    "methodReason": {
-      "user_item_sftp": "בחרת SFTP לפי קובץ.",
-      "user_tar": "בחרת בארכיון tar.",
-      "tar_unavailable": "Tar אינו זמין באחד המארחים או בשניהם, לכן ייעשה שימוש במקום זאת ב-SFTP לפי קובץ.",
-      "windows_host": "מחשב מארח של Windows מעורב, לכן לא נעשה שימוש ב-tar.",
-      "auto_multi_large": "אוטומטי: קבצים מרובים כולל קובץ גדול ({{largestSize}}) עם נתונים הניתנים לדחיסה. Tar מאגד אותם להעברה אחת.",
-      "auto_single_large_in_archive": "אוטומטי: קובץ אחד גדול ({{largestSize}}) בקבוצה זו, לכן SFTP לכל קובץ.",
-      "auto_many_incompressible": "אוטומטי: נתונים לרוב בלתי ניתנים לדחיסה, לכן SFTP לכל קובץ.",
-      "auto_many_files": "אוטומטי: קבצים רבים ({{fileCount}}), tar מוריד את התקורה לכל קובץ.",
-      "auto_default": "אוטומטי: SFTP לכל קובץ עבור קבוצה זו."
-    },
-    "methodTar": "ארכיון טאר",
-    "methodTarHint": "דחיסה במקור, העברת ארכיון אחד, חילוץ ביעד. דורש tar בשני מארחי יוניקס.",
-    "metricsCompress": "דחיסה במקור: {{duration}}",
-    "metricsExtract": "חילוץ ביעד: {{duration}}",
-    "metricsPrepare": "הכנת יעד: {{duration}}",
-    "metricsRouteBenchmark": "גשש מסלול: ישיר {{direct}}, ממסר {{relay}}",
-    "metricsSourceDelete": "הסר מהמקור: {{duration}}",
-    "metricsTotal": "סה\"כ: {{duration}}",
-    "metricsTransfer": "מקצה לקצה: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 אומת: {{duration}}",
-    "moveFolderToHost": "העברת תיקייה למארח…",
-    "moveItemsToHost": "העבר {{count}} פריטים לאירוח…",
-    "moveToHost": "מעבר למארח…",
-    "noHostsConnected": "אין מארחי מנהל קבצים אחרים זמינים.",
-    "noHostsConnectedHint": "הוסף מארח SSH נוסף כאשר מנהל הקבצים מופעל במנהל המארחים.",
-    "parallelSegmentsHint": "קבצים גדולים מחולקים לחתיכות של 256 מגה-בייט. מספר נתיבים משתמשים בחיבורים נפרדים (כמו התחלת מספר העברות) לקבלת תפוקה כוללת גבוהה יותר.",
-    "parallelSegmentsLabel": "נתיבי מעבר מקבילים",
-    "parallelSegmentsOption": "נתיבים {{count}}",
-    "progressBenchmarking": "בחירת נתיב ההעברה המהיר ביותר…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "לְבַטֵל",
-    "progressCancelling": "מבטל…",
-    "progressCompressing": "דחיסה במארח המקור…",
-    "progressExtracting": "מחלץ ביעד…",
-    "progressItems": "קבצים {{current}} / {{total}}",
-    "progressReconnecting": "מתחבר מחדש…",
-    "progressStalled": "אָבוּס",
-    "progressTotalSpeed": "סה\"כ {{speed}} (נתיבים{{lanes}})",
-    "progressTransferring": "העברת נתונים…",
-    "progressTransferringItems": "העברת קבצים ({{current}} מתוך {{total}})…",
-    "progressVerifying": "אימות שלמות הקובץ…",
-    "recentDestinations": "יעדים אחרונים",
-    "resumedHint": "התחבר מחדש להעברה פעילה שהתחילה בחלון אחר.",
-    "retryTransfer": "נסה שוב",
-    "retryTransferError": "ניסיון חוזר נכשל",
-    "selectDestinationHost": "בחר מארח יעד",
-    "transferCancelled": "ההעברה בוטלה",
-    "transferCancelledCopyHint": "ייתכן שיישארו קבצים חלקיים ביעד.",
-    "transferCancelledMoveHint": "ייתכן שיישארו קבצים חלקיים ביעד. קבצי המקור לא הוסרו.",
-    "transferError": "ההעברה נכשלה",
-    "transferFailedRetryHint": "נתונים חלקיים נשמרו ביעד. ניסיון חוזר יתחדש כאשר החיבור יחזור.",
-    "transferPartialHint": "לא ניתן היה להעביר: {{paths}}",
-    "transferSuccess": "ההעברה הושלמה",
-    "metricsHopSourceRead": "מקור → שרת: {{throughput}}",
-    "metricsHopDestSftpWrite": "שרת → יעד (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "שרת → יעד (מקומי): {{throughput}}"
-  },
-  "plugin": {
-    "name": "מנהל הקבצים"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/hi_IN.json b/plugins/file-manager/locales/translated/hi_IN.json
deleted file mode 100644
index cb88576be..000000000
--- a/plugins/file-manager/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "फ़ाइलें",
-    "sftp": "एसएफटीपी",
-    "openFileManager": "फ़ाइल प्रबंधक खोलें"
-  },
-  "permissions": {
-    "use": {
-      "title": "फ़ाइल प्रबंधक का उपयोग करें",
-      "description": "SFTP के माध्यम से फाइलों को ब्राउज़ करें, संपादित करें और स्थानांतरित करें।"
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "फ़ाइल प्रबंधक सक्षम करें",
-        "description": "इस होस्ट पर SFTP के माध्यम से फाइलों को ब्राउज़ और संपादित करें।"
-      },
-      "defaultPath": {
-        "label": "डिफ़ॉल्ट पथ"
-      },
-      "scpLegacy": {
-        "label": "SCP लीगेसी मोड"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "एक साथ फ़ाइल स्थानांतरण",
-        "description": "साइड-बाय-साइड लोकल/रिमोट मैनेजर एक ही समय में कितनी फाइलें अपलोड या डाउनलोड कर सकता है। यदि आपका सर्वर SFTP चैनलों को सीमित करता है तो इसे कम करें।"
-      },
-      "confirmBeforeTrash": {
-        "label": "फ़ाइलों को ट्रैश में भेजने से पहले पुष्टि कर लें",
-        "description": "रिमोट फ़ाइलों को ट्रैश में ले जाने से पहले पूछ लें। स्थायी रूप से हटाने के लिए भी पुष्टि आवश्यक है।"
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "फ़ाइल प्रबंधक"
-  },
-  "fileManager": {
-    "noHostSelected": "कोई होस्ट चयनित नहीं",
-    "initializingEditor": "संपादक आरंभ हो रहा है...",
-    "file": "फ़ाइल",
-    "folder": "फ़ोल्डर",
-    "uploadFile": "फ़ाइल अपलोड करें",
-    "downloadFile": "डाउनलोड करें",
-    "extractArchive": "संग्रह निकालें",
-    "extractingArchive": "{{name}} निकाला जा रहा है...",
-    "archiveExtractedSuccessfully": "{{name}} सफलतापूर्वक निकाला गया",
-    "extractFailed": "निकालने में विफल",
-    "compressFile": "फ़ाइल संपीड़ित करें",
-    "compressFiles": "फ़ाइलें संपीड़ित करें",
-    "compressFilesDesc": "{{count}} आइटम को एक संग्रह में संपीड़ित करें",
-    "archiveName": "संग्रह का नाम",
-    "enterArchiveName": "संग्रह का नाम दर्ज करें...",
-    "compressionFormat": "संपीड़न प्रारूप",
-    "selectedFiles": "चयनित फ़ाइलें",
-    "andMoreFiles": "और {{count}}...",
-    "compress": "संपीड़ित करें",
-    "compressingFiles": "{{count}} आइटम को {{name}} में संपीड़ित किया जा रहा है...",
-    "filesCompressedSuccessfully": "{{name}} सफलतापूर्वक बनाया गया",
-    "compressFailed": "संपीड़न विफल",
-    "edit": "संपादित करें",
-    "preview": "पूर्वावलोकन",
-    "previous": "पिछला",
-    "next": "अगला",
-    "pageXOfY": "पृष्ठ {{current}} / {{total}}",
-    "zoomOut": "ज़ूम आउट",
-    "zoomIn": "ज़ूम इन",
-    "newFile": "नई फ़ाइल",
-    "newFolder": "नया फ़ोल्डर",
-    "rename": "नाम बदलें",
-    "uploading": "अपलोड हो रहा है...",
-    "uploadingFile": "{{name}} अपलोड हो रहा है...",
-    "uploadingChunk": "अपलोड हो रहा है {{name}}: {{percent}}% (भाग {{chunk}} का {{total}})",
-    "fileName": "फ़ाइल का नाम",
-    "folderName": "फ़ोल्डर का नाम",
-    "fileUploadedSuccessfully": "फ़ाइल \"{{name}}\" सफलतापूर्वक अपलोड हो गई",
-    "failedToUploadFile": "फ़ाइल अपलोड करने में विफल",
-    "uploadingFolderFiles": "{{count}} फ़ाइलें अपलोड की जा रही हैं...",
-    "uploadedFolderFiles": "{{count}} फ़ाइलें सफलतापूर्वक अपलोड हो गईं",
-    "uploadedFolderPartial": "{{uploaded}} फ़ाइलें अपलोड की गईं, {{failed}} अपलोड विफल रहा।",
-    "fileDownloadedSuccessfully": "फ़ाइल \"{{name}}\" सफलतापूर्वक डाउनलोड हो गई",
-    "failedToDownloadFile": "फ़ाइल डाउनलोड करने में विफल",
-    "fileCreatedSuccessfully": "फ़ाइल \"{{name}}\" सफलतापूर्वक बनाई गई",
-    "folderCreatedSuccessfully": "फ़ोल्डर \"{{name}}\" सफलतापूर्वक बनाया गया",
-    "failedToCreateItem": "आइटम बनाने में विफल",
-    "operationFailed": "{{name}} के लिए {{operation}} कार्रवाई विफल: {{error}}",
-    "failedToResolveSymlink": "symlink को हल करने में विफल",
-    "itemsDeletedSuccessfully": "{{count}} आइटम सफलतापूर्वक हटाए गए",
-    "failedToDeleteItems": "आइटम हटाने में विफल",
-    "sudoPasswordRequired": "प्रशासक पासवर्ड आवश्यक है",
-    "enterSudoPassword": "इस कार्रवाई को जारी रखने के लिए sudo पासवर्ड दर्ज करें",
-    "sudoPassword": "sudo पासवर्ड",
-    "sudoOperationFailed": "sudo संचालन विफल",
-    "sudoAuthFailed": "sudo प्रमाणीकरण विफल",
-    "dragFilesToUpload": "अपलोड करने के लिए फ़ाइलें यहाँ छोड़ें",
-    "dropToUploadHere": "अपलोड करने के लिए यहां ड्रॉप करें",
-    "dropToDownloadHere": "डाउनलोड करने के लिए यहां क्लिक करें",
-    "localFiles": "स्थानीय",
-    "showLocalFiles": "स्थानीय फ़ाइलें दिखाएँ (स्प्लिट व्यू)",
-    "hideLocalFiles": "स्थानीय फ़ाइलों को छुपाएँ",
-    "localHome": "होम फ़ोल्डर",
-    "localPathPlaceholder": "स्थानीय फ़ोल्डर पथ",
-    "localShowHidden": "छिपी हुई फ़ाइलें दिखाएँ",
-    "localHideHidden": "छिपी हुई फ़ाइलों को छुपाएँ",
-    "localRevealInFileManager": "सिस्टम फ़ाइल प्रबंधक में दिखाएँ",
-    "localCannotOpenFolder": "फ़ोल्डर नहीं खोला जा सकता",
-    "localItemCount": "{{count}} आइटम",
-    "localSelectedCount": "{{count}} चयनित",
-    "back": "वापस",
-    "forward": "आगे",
-    "up": "ऊपर",
-    "kind": "दयालु",
-    "localUploadingProgress": "{{total}} में से {{current}} अपलोड किया जा रहा है",
-    "localDownloadingProgress": "{{total}} में से {{current}} डाउनलोड हो रहा है",
-    "localTransferInFlight": "{{count}} एक साथ",
-    "localPreparingDownload": "डाउनलोड की तैयारी हो रही है...",
-    "localTransferCancelled": "स्थानांतरण रद्द किया गया।",
-    "localNothingToTransfer": "स्थानांतरित करने के लिए कुछ भी नहीं है",
-    "localUploadComplete": "{{count}} फाइल अपलोड की गई",
-    "localUploadFailed": "अपलोड विफल",
-    "localUploadPartial": "{{done}} फ़ाइलें अपलोड की गईं, {{failed}} अपलोड विफल रहा।",
-    "localDownloadComplete": "डाउनलोड की गई {{count}} फ़ाइलें",
-    "localDownloadFailed": "डाउनलोड विफल",
-    "localDownloadPartial": "{{done}} फ़ाइलें डाउनलोड की गईं, {{failed}} डाउनलोड विफल रहा।",
-    "localReplaceExistingPrompt": "इस फ़ोल्डर में पहले से ही {{count}} आइटम मौजूद हैं। क्या आप उन्हें बदलना चाहेंगे?",
-    "localReplace": "बदलें",
-    "localSkipExisting": "छोडना",
-    "localSkippedExisting": "मौजूदा आइटमों में से {{count}} को छोड़ दिया गया",
-    "localUnsafeNamesSkipped": "इस कंप्यूटर पर जिन आइटमों के नाम इस्तेमाल नहीं किए जा सकते, उन्हें छोड़ दिया गया है {{count}}",
-    "localOpen": "खोलें",
-    "localOpenFolder": "फोल्डर खोलें",
-    "localUploadToRemote": "सर्वर पर अपलोड करें",
-    "localUploadToRemoteMany": "सर्वर पर {{count}} आइटम अपलोड करें",
-    "localMoveToTrash": "ट्रैश में ले जाएं",
-    "localMoveToTrashMany": "{{count}} आइटम ट्रैश में ले जाएं",
-    "localTrashConfirmSingle": "क्या आप \"{{name}}\" को ट्रैश में ले जाना चाहते हैं?",
-    "localTrashConfirmFolder": "क्या आप फोल्डर \"{{name}}\" और उसकी सभी सामग्री को ट्रैश में ले जाना चाहते हैं?",
-    "localTrashConfirmMany": "क्या {{count}} आइटम ट्रैश में ले जाएं?",
-    "localTrashed": "{{count}} आइटम ट्रैश में भेज दिए गए हैं",
-    "localTrashFailed": "ट्रैश में नहीं ले जाया जा सका",
-    "localRenameFailed": "नाम बदलने में विफल रहा",
-    "localCreateFailed": "आइटम नहीं बनाया जा सका",
-    "goToParentFolder": "मूल फ़ोल्डर पर जाएँ",
-    "resizeSidebar": "साइडबार का आकार बदलने के लिए उसे खींचें (रीसेट करने के लिए उस पर डबल-क्लिक करें)",
-    "resizeLocalPane": "स्थानीय फलक का आकार बदलने के लिए उसे खींचें (आकार बदलने के लिए उस पर दो बार क्लिक करें)",
-    "columns": "कॉलम",
-    "columnsHint": "कॉलम चुनने के लिए राइट-क्लिक करें",
-    "emptyFolder": "यह फ़ोल्डर खाली है",
-    "searchFiles": "फ़ाइलें खोजें...",
-    "upload": "अपलोड करें",
-    "selectHostToStart": "फ़ाइल प्रबंधन शुरू करने के लिए एक होस्ट चुनें",
-    "sshRequiredForFileManager": "फ़ाइल प्रबंधक को SSH की आवश्यकता है। इस होस्ट में SSH सक्षम नहीं है।",
-    "failedToConnect": "SSH से कनेक्ट करने में विफल",
-    "failedToLoadDirectory": "निर्देशिका लोड करने में विफल",
-    "noSSHConnection": "कोई SSH कनेक्शन उपलब्ध नहीं है",
-    "copy": "कॉपी",
-    "cut": "काटें",
-    "paste": "चिपकाएँ",
-    "copyPath": "पथ कॉपी करें",
-    "copyPaths": "पथ कॉपी करें",
-    "delete": "हटाएँ",
-    "properties": "गुण",
-    "refresh": "ताज़ा करें",
-    "downloadFiles": "{{count}} फ़ाइलें ब्राउज़र पर डाउनलोड करें",
-    "copyFiles": "{{count}} आइटम कॉपी करें",
-    "cutFiles": "{{count}} आइटम काटें",
-    "deleteFiles": "{{count}} आइटम हटाएँ",
-    "filesCopiedToClipboard": "{{count}} आइटम क्लिपबोर्ड पर कॉपी किए गए",
-    "filesCutToClipboard": "{{count}} आइटम क्लिपबोर्ड पर काटे गए",
-    "pathCopiedToClipboard": "पथ क्लिपबोर्ड पर कॉपी किया गया",
-    "pathsCopiedToClipboard": "{{count}} पथ क्लिपबोर्ड पर कॉपी किए गए",
-    "failedToCopyPath": "क्लिपबोर्ड पर पथ कॉपी करने में विफल",
-    "copyFolderLink": "फ़ोल्डर का लिंक कॉपी करें",
-    "copyCurrentFolderLink": "वर्तमान फ़ोल्डर का लिंक कॉपी करें",
-    "folderLinkCopied": "फ़ोल्डर लिंक क्लिपबोर्ड पर कॉपी किया गया",
-    "failedToCopyFolderLink": "फ़ोल्डर लिंक कॉपी करने में विफल",
-    "movedItems": "{{count}} आइटम स्थानांतरित किए गए",
-    "failedToDeleteItem": "आइटम हटाने में विफल",
-    "itemRenamedSuccessfully": "{{type}} का नाम सफलतापूर्वक बदल दिया गया",
-    "failedToRenameItem": "आइटम का नाम बदलने में विफल",
-    "download": "डाउनलोड",
-    "openExternalEditor": "बाह्य संपादक खोलें",
-    "chooseExternalEditor": "बाह्य संपादक चुनें",
-    "externalEditorSelected": "बाह्य संपादक चयनित",
-    "externalEditorDesktopOnly": "बाह्य संपादक केवल डेस्कटॉप ऐप में उपलब्ध है",
-    "externalEditorOpened": "बाह्य संपादक में खोला गया। वहाँ सहेजने पर परिवर्तन सर्वर पर वापस अपलोड हो जाएँगे।",
-    "failedToOpenExternalEditor": "बाह्य संपादक खोलने में विफल",
-    "failedToSelectExternalEditor": "बाह्य संपादक चुनने में विफल",
-    "permissions": "अनुमतियाँ",
-    "size": "आकार",
-    "modified": "संशोधित",
-    "path": "पथ",
-    "confirmDelete": "क्या आप वाकई {{name}} हटाना चाहते हैं?",
-    "permissionDenied": "अनुमति अस्वीकृत",
-    "serverError": "सर्वर त्रुटि",
-    "fileSavedSuccessfully": "फ़ाइल सफलतापूर्वक सहेजी गई",
-    "failedToSaveFile": "फ़ाइल सहेजने में विफल",
-    "confirmDeleteSingleItem": "क्या आप वाकई \"{{name}}\" को स्थायी रूप से हटाना चाहते हैं?",
-    "confirmDeleteMultipleItems": "क्या आप वाकई {{count}} आइटम स्थायी रूप से हटाना चाहते हैं?",
-    "confirmDeleteMultipleItemsWithFolders": "क्या आप वाकई {{count}} आइटम स्थायी रूप से हटाना चाहते हैं? इसमें फ़ोल्डर और उनकी सामग्री शामिल है।",
-    "confirmDeleteFolder": "क्या आप वाकई फ़ोल्डर \"{{name}}\" और उसकी सभी सामग्री को स्थायी रूप से हटाना चाहते हैं?",
-    "permanentDeleteWarning": "यह क्रिया पूर्ववत नहीं की जा सकती। आइटम सर्वर से स्थायी रूप से हटा दिए जाएँगे।",
-    "moveToTrashWarning": "आइटम को टर्मिक्स ट्रैश में भेज दिया जाएगा और प्रतिधारण अवधि समाप्त होने से पहले इसे पुनर्स्थापित किया जा सकता है।",
-    "itemsMovedToTrash": "{{count}} आइटम ट्रैश में चले गए",
-    "trash": "कचरा",
-    "trashDescription": "हटाए गए आइटम इस होस्ट पर {{days}} दिनों तक रखे जाते हैं।",
-    "trashLoadFailed": "ट्रैश लोड करने में विफल",
-    "trashEmpty": "कचरा पात्र खाली है",
-    "trashRestore": "पुनर्स्थापित करें",
-    "trashRestored": "पुनर्स्थापित {{name}}",
-    "trashRestoreFailed": "आइटम को पुनर्स्थापित करने में विफल। मूल पथ पहले से मौजूद हो सकता है।",
-    "trashDeletePermanently": "स्थायी रूप से हटाएं",
-    "trashDeleteConfirm": "{{name}}को स्थायी रूप से हटा दें? इसे पूर्ववत नहीं किया जा सकता।",
-    "trashPermanentlyDeleted": "स्थायी रूप से हटा दिया गया {{name}}",
-    "trashDeleteFailed": "आइटम को स्थायी रूप से हटाने में विफल रहा",
-    "trashEmptyAction": "कचरा खाली करें",
-    "trashEmptyConfirm": "ट्रैश में मौजूद सभी आइटम को स्थायी रूप से हटाना चाहते हैं? इसे वापस नहीं लिया जा सकता।",
-    "trashEmptied": "कचरा खाली कर दिया गया",
-    "trashRetention": "(दिनों) के बाद स्वचालित सफाई",
-    "trashRetentionSaved": "कचरा संग्रहण प्रणाली को अद्यतन किया गया",
-    "trashRetentionFailed": "ट्रैश रिटेंशन को अपडेट करने में विफलता",
-    "trashUnavailableConfirm": "इस आइटम को ट्रैश में नहीं ले जाया जा सकता, आमतौर पर इसलिए क्योंकि यह किसी अन्य फ़ाइल सिस्टम पर है या इसके लिए उच्च अनुमतियों की आवश्यकता होती है। क्या इसे स्थायी रूप से हटा देना बेहतर होगा?",
-    "recent": "हाल ही",
-    "pinned": "पिन किए गए",
-    "folderShortcuts": "फ़ोल्डर शॉर्टकट",
-    "failedToReconnectSSH": "SSH सत्र पुनः कनेक्ट करने में विफल",
-    "openTerminalHere": "यहाँ टर्मिनल खोलें",
-    "run": "चलाएँ",
-    "openTerminalInFolder": "इस फ़ोल्डर में टर्मिनल खोलें",
-    "openTerminalInFileLocation": "फ़ाइल स्थान पर टर्मिनल खोलें",
-    "runningFile": "चल रहा है - {{file}}",
-    "onlyRunExecutableFiles": "केवल एक्सीक्यूटेबल फ़ाइलें ही चलाई जा सकती हैं",
-    "directories": "निर्देशिकाएँ",
-    "removedFromRecentFiles": "हाल की फ़ाइलों से \"{{name}}\" हटा दिया गया",
-    "removeFailed": "हटाना विफल",
-    "unpinnedSuccessfully": "\"{{name}}\" सफलतापूर्वक अनपिन किया गया",
-    "unpinFailed": "अनपिन विफल",
-    "removedShortcut": "शॉर्टकट \"{{name}}\" हटा दिया गया",
-    "removeShortcutFailed": "शॉर्टकट हटाना विफल",
-    "clearedAllRecentFiles": "सभी हाल की फ़ाइलें साफ़ कर दी गईं",
-    "clearFailed": "साफ़ करना विफल",
-    "removeFromRecentFiles": "हाल की फ़ाइलों से हटाएँ",
-    "clearAllRecentFiles": "सभी हाल की फ़ाइलें साफ़ करें",
-    "unpinFile": "फ़ाइल अनपिन करें",
-    "removeShortcut": "शॉर्टकट हटाएँ",
-    "pinFile": "फ़ाइल पिन करें",
-    "addToShortcuts": "शॉर्टकट में जोड़ें",
-    "pasteFailed": "चिपकाना विफल",
-    "noUndoableActions": "कोई पूर्ववत करने योग्य कार्रवाई नहीं",
-    "undoCopySuccess": "कॉपी कार्रवाई पूर्ववत की गई: {{count}} कॉपी की गई फ़ाइलें हटा दी गईं",
-    "undoCopyFailedDelete": "पूर्ववत विफल: कोई भी कॉपी की गई फ़ाइल नहीं हटा सका",
-    "undoCopyFailedNoInfo": "पूर्ववत विफल: कॉपी की गई फ़ाइल की जानकारी नहीं मिली",
-    "undoMoveSuccess": "स्थानांतरण कार्रवाई पूर्ववत की गई: {{count}} फ़ाइलें वापस मूल स्थान पर ले जाई गईं",
-    "undoMoveFailedMove": "पूर्ववत विफल: कोई भी फ़ाइल वापस नहीं ले जा सका",
-    "undoMoveFailedNoInfo": "पूर्ववत विफल: स्थानांतरित फ़ाइल की जानकारी नहीं मिली",
-    "undoDeleteNotSupported": "हटाने की कार्रवाई पूर्ववत नहीं की जा सकती: फ़ाइलें सर्वर से स्थायी रूप से हटा दी गई हैं",
-    "undoTypeNotSupported": "असमर्थित पूर्ववत कार्रवाई प्रकार",
-    "undoOperationFailed": "पूर्ववत कार्रवाई विफल",
-    "unknownError": "अज्ञात त्रुटि",
-    "confirm": "पुष्टि करें",
-    "find": "खोजें...",
-    "replace": "बदलें",
-    "downloadInstead": "इसके बजाय डाउनलोड करें",
-    "keyboardShortcuts": "कीबोर्ड शॉर्टकट्स",
-    "searchAndReplace": "खोजें और बदलें",
-    "editing": "संपादन",
-    "search": "खोजें",
-    "findNext": "अगला खोजें",
-    "findPrevious": "पिछला खोजें",
-    "save": "सहेजें",
-    "selectAll": "सभी चुनें",
-    "undo": "पूर्ववत करें",
-    "redo": "फिर से करें",
-    "moveLineUp": "पंक्ति ऊपर ले जाएँ",
-    "moveLineDown": "पंक्ति नीचे ले जाएँ",
-    "toggleComment": "टिप्पणी टॉगल करें",
-    "autoComplete": "स्वतः पूर्ण करें",
-    "imageLoadError": "छवि लोड करने में विफल",
-    "startTyping": "टाइप करना शुरू करें...",
-    "unknownSize": "अज्ञात आकार",
-    "fileIsEmpty": "फ़ाइल खाली है",
-    "largeFileWarning": "बड़ी फ़ाइल की चेतावनी",
-    "largeFileWarningDesc": "यह फ़ाइल {{size}} आकार की है, जिसे टेक्स्ट के रूप में खोलने पर प्रदर्शन समस्याएँ हो सकती हैं।",
-    "fileNotFoundAndRemoved": "फ़ाइल \"{{name}}\" नहीं मिली और हाल की/पिन की गई फ़ाइलों से हटा दी गई है",
-    "failedToLoadFile": "फ़ाइल लोड करने में विफल: {{error}}",
-    "serverErrorOccurred": "सर्वर त्रुटि हुई। कृपया बाद में पुनः प्रयास करें।",
-    "autoSaveFailed": "स्वतः सहेजना विफल",
-    "fileAutoSaved": "फ़ाइल स्वतः सहेजी गई",
-    "moveFileFailed": "{{name}} को स्थानांतरित करने में विफल",
-    "moveOperationFailed": "स्थानांतरण क्रिया विफल",
-    "canOnlyCompareFiles": "केवल दो फ़ाइलों की तुलना की जा सकती है",
-    "comparingFiles": "फ़ाइलों की तुलना: {{file1}} और {{file2}}",
-    "dragFailed": "खींचने की क्रिया विफल",
-    "filePinnedSuccessfully": "फ़ाइल \"{{name}}\" सफलतापूर्वक पिन की गई",
-    "pinFileFailed": "फ़ाइल पिन करने में विफल",
-    "fileUnpinnedSuccessfully": "फ़ाइल \"{{name}}\" अनपिन की गई सफलतापूर्वक",
-    "unpinFileFailed": "फ़ाइल अनपिन करने में विफल",
-    "shortcutAddedSuccessfully": "फ़ोल्डर शॉर्टकट \"{{name}}\" सफलतापूर्वक जोड़ा गया",
-    "addShortcutFailed": "शॉर्टकट जोड़ने में विफल",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} आइटम सफलतापूर्वक",
-    "operationCompleted": "{{operation}} {{count}} आइटम",
-    "downloadFileSuccess": "फ़ाइल {{name}} सफलतापूर्वक डाउनलोड हुई",
-    "downloadFileFailed": "डाउनलोड विफल",
-    "downloadingFile": "डाउनलोड हो रहा है {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "{{name}} में ले जाएँ",
-    "diffCompareWith": "{{name}} के साथ डिफ तुलना करें",
-    "dragOutsideToDownload": "डाउनलोड करने के लिए विंडो से बाहर खींचें ({{count}} फ़ाइलें)",
-    "newFolderDefault": "नया फ़ोल्डर",
-    "newFileDefault": "नई फ़ाइल.txt",
-    "successfullyMovedItems": "{{count}} आइटम सफलतापूर्वक {{target}} में ले जाए गए",
-    "move": "स्थानांतरित करें",
-    "searchInFile": "फ़ाइल में खोजें (Ctrl+F)",
-    "showKeyboardShortcuts": "कीबोर्ड शॉर्टकट दिखाएँ",
-    "decreaseFontSize": "फ़ॉन्ट आकार घटाएँ",
-    "increaseFontSize": "फ़ॉन्ट आकार बढ़ाएँ",
-    "startWritingMarkdown": "अपनी Markdown सामग्री लिखना शुरू करें...",
-    "loadingFileComparison": "फ़ाइल तुलना लोड हो रही है...",
-    "reload": "पुनः लोड करें",
-    "compare": "तुलना करें",
-    "sideBySide": "साथ-साथ",
-    "inline": "इनलाइन",
-    "fileComparison": "फ़ाइल तुलना: {{file1}} बनाम {{file2}}",
-    "fileTooLarge": "फाइल का आकार बहुत बड़ा है (> 10MB) और सुरक्षा कारणों से इसे टेक्स्ट के रूप में नहीं खोला जा सकता है।",
-    "sshConnectionFailed": "SSH कनेक्शन विफल। कृपया {{name}} ({{ip}}:{{port}}) से अपना कनेक्शन जाँचें।",
-    "loadFileFailed": "फ़ाइल लोड करने में विफल: {{error}}",
-    "connecting": "कनेक्ट हो रहा है...",
-    "connectedSuccessfully": "सफलतापूर्वक कनेक्ट हुआ",
-    "totpVerificationFailed": "TOTP सत्यापन विफल",
-    "browserSignInFailed": "प्रवेश विफल। कृपया दोबारा प्रयास करें।",
-    "authenticationFailed": "प्रमाणीकरण विफल",
-    "incorrectPassphrase": "गलत पासफ़्रेज़। कृपया पुनः प्रयास करें।",
-    "verificationCodePrompt": "सत्यापन कोड:",
-    "changePermissions": "अनुमतियाँ बदलें",
-    "currentPermissions": "वर्तमान अनुमतियाँ",
-    "owner": "स्वामी",
-    "group": "समूह",
-    "others": "अन्य",
-    "read": "पठन",
-    "write": "लेखन",
-    "execute": "निष्पादन",
-    "permissionsChangedSuccessfully": "अनुमतियाँ सफलतापूर्वक बदल दी गईं",
-    "failedToChangePermissions": "अनुमतियाँ बदलने में विफल",
-    "name": "नाम",
-    "sortByName": "नाम",
-    "sortByDate": "संशोधन तिथि",
-    "sortBySize": "आकार",
-    "ascending": "आरोही",
-    "descending": "अवरोही",
-    "root": "रूट",
-    "new": "नया",
-    "sortBy": "क्रमबद्ध करें",
-    "items": "आइटम",
-    "selected": "चयनित",
-    "editor": "संपादक",
-    "octal": "ऑक्टल",
-    "storage": "भंडारण",
-    "disk": "डिस्क",
-    "used": "प्रयुक्त",
-    "of": "में से",
-    "toggleSidebar": "साइडबार टॉगल करें",
-    "compactLayout": "कॉम्पैक्ट लेआउट का उपयोग करें",
-    "comfortableLayout": "सुविधाजनक लेआउट का उपयोग करें",
-    "cannotLoadPdf": "PDF लोड नहीं कर सकता",
-    "pdfLoadError": "इस PDF फ़ाइल को लोड करने में त्रुटि हुई।",
-    "loadingPdf": "पीडीएफ व्यूअर लोड हो रहा है...",
-    "loadingPage": "पृष्ठ लोड हो रहा है...",
-    "cancel": "रद्द करें",
-    "copiedItems_one": "आइटम कॉपी किया गया {{count}}",
-    "copiedItems_other": "आइटम कॉपी किए गए {{count}}",
-    "deleteCopiedFileFailed": "{{name}}की प्रतिलिपि को हटाया नहीं जा सका : {{error}}",
-    "dragMovedItems_one": "{{count}} आइटम को {{target}} में स्थानांतरित किया गया",
-    "dragMovedItems_other": "{{count}} आइटम {{target}} में स्थानांतरित किए गए",
-    "moveBackFileFailed": "{{name}} को वापस नहीं ले जाया जा सका: {{error}}",
-    "terminal": "टर्मिनल: {{host}} ({{path}})",
-    "dragToDesktop": "{{name}} को डेस्कटॉप पर खींचना",
-    "dragFilesToDesktop": "{{count}} फ़ाइलों को डेस्कटॉप पर खींचना",
-    "folderDragUnsupported": "फ़ोल्डरों को डेस्कटॉप पर ड्रैग करने की सुविधा अभी समर्थित नहीं है।",
-    "saveToDesktopFailed": "सेव करने में विफल: {{error}}",
-    "dragFailedDetail": "ड्रैग विफल: {{error}}",
-    "videoUnsupported": "आपका ब्राउज़र इस वीडियो प्रारूप को नहीं चला सकता।",
-    "downloadToPlay": "इसे कहीं और खेलने के लिए डाउनलोड करें",
-    "cannotPreviewType": "इस फ़ाइल प्रकार का पूर्वावलोकन नहीं किया जा सकता है",
-    "cannotPreviewTypeHint": "इस फ़ाइल प्रकार का कोई पूर्वावलोकन नहीं है। इसे डाउनलोड करके किसी अन्य ऐप में खोलें।",
-    "loadingFile": "फ़ाइल लोड हो रही है...",
-    "loadingImage": "छवि लोड हो रही है...",
-    "loadingEditor": "एडिटर लोड हो रहा है...",
-    "loadingPreview": "पूर्वावलोकन लोड हो रहा है...",
-    "loadingAudio": "ऑडियो प्लेयर लोड हो रहा है...",
-    "emptyPreview": "अभी पूर्वावलोकन के लिए कुछ भी उपलब्ध नहीं है...",
-    "revert": "फिर लौट आना",
-    "openAsText": "टेक्स्ट के रूप में खोलें",
-    "confirmOpenAsText": "क्या आप इस फ़ाइल को टेक्स्ट के रूप में खोलना जारी रखना चाहते हैं? इससे आपके ब्राउज़र की गति धीमी हो सकती है।"
-  },
-  "sftpTransfer": {
-    "title": "एसएफटीपी",
-    "description": "दो SSH होस्ट के बीच फ़ाइलें स्थानांतरित करें।",
-    "sourceServer": "स्रोत सर्वर",
-    "destinationServer": "गंतव्य सर्वर",
-    "selectHost": "होस्ट का चयन करें",
-    "noHostSelected": "कोई होस्ट चयनित नहीं है",
-    "move": "ले जाएँ",
-    "copy": "कॉपी",
-    "upload": "अपलोड करें",
-    "itemsSelected": "{{count}} आइटम चयनित",
-    "itemsSelected_other": "{{count}} आइटम चयनित",
-    "ready": "तैयार",
-    "loadingHosts": "होस्ट लोड हो रहे हैं...",
-    "name": "नाम",
-    "modified": "संशोधित",
-    "size": "आकार",
-    "noFiles": "कोई फ़ाइल नहीं",
-    "open": "खोलें",
-    "up": "ऊपर",
-    "refresh": "ताज़ा करें",
-    "copyToTarget": "लक्ष्य निर्देशिका में प्रतिलिपि करें",
-    "rename": "नाम बदलें",
-    "delete": "हटाएँ",
-    "editPermissions": "संपादन अनुमतियाँ",
-    "createNewFolder": "नया फ़ोल्डर बनाएं",
-    "deleteSelectedItems": "चयनित आइटम हटाएं",
-    "deleteConfirm": "चयनित आइटम हटाएं {{count}}?",
-    "deleteConfirm_other": "चयनित आइटम हटाएं {{count}}?",
-    "cancel": "रद्द करें",
-    "save": "सहेजें",
-    "folderCreated": "फ़ोल्डर बनाया गया",
-    "itemRenamed": "आइटम का नाम बदल दिया गया",
-    "actionFailed": "कार्रवाई विफल",
-    "itemsDeleted": "{{count}} आइटम हटा दिया गया",
-    "itemsDeleted_other": "{{count}} आइटम हटा दिए गए",
-    "deleteFailed": "डिलीट विफल",
-    "permissionsUpdated": "अनुमतियाँ अपडेट की गईं",
-    "noRemoteSessionConnected": "कोई रिमोट सेशन कनेक्ट नहीं हुआ",
-    "failedToListFiles": "फ़ाइलों को सूचीबद्ध करने में विफल",
-    "failedToRefresh": "रीफ़्रेश करने में विफल",
-    "destinationInsideSource": "गंतव्य चयनित स्रोत पथ के अंदर नहीं हो सकता।",
-    "sameHostNoOp": "स्रोत और गंतव्य एक ही फ़ोल्डर हैं।"
-  },
-  "hosts": {
-    "fileManager": "फ़ाइल प्रबंधक",
-    "fileManagerUrlCopied": "फ़ाइल प्रबंधक URL कॉपी किया गया",
-    "copyFileManagerUrlAction": "फ़ाइल प्रबंधक URL कॉपी करें",
-    "docsLink": "दस्तावेज़ देखें",
-    "hostNotFound": "होस्ट नहीं मिला",
-    "loadingHost": "होस्ट लोड हो रहा है..."
-  },
-  "onboarding": {
-    "feature_files": "फ़ाइल मैनेजर",
-    "feature_files_desc": "ऐप छोड़े बिना SFTP के माध्यम से फाइलों को ब्राउज़ करें, अपलोड करें, डाउनलोड करें और संपादित करें।"
-  },
-  "terminal": {
-    "runTitle": "{{command}} चल रहा है - {{host}}",
-    "terminalTitle": "टर्मिनल - {{host}}",
-    "terminalWithPath": "टर्मिनल - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "गंतव्य फ़ोल्डर ब्राउज़ करें",
-    "browsePathError": "गंतव्य होस्ट पर यह पथ नहीं खोला जा सका।",
-    "browsePathWillBeCreated": "यह फ़ोल्डर अभी मौजूद नहीं है। स्थानांतरण शुरू होने पर इसे बनाया जाएगा।",
-    "cancel": "रद्द करें",
-    "cleanupDestFiles": "गंतव्य साफ करें",
-    "cleanupDestFilesError": "सफाई विफल रही।",
-    "cleanupDestFilesNothing": "गंतव्य पर साफ करने के लिए कुछ नहीं।",
-    "cleanupDestFilesPartial": "कुछ आंशिक फ़ाइलें नहीं हटाई जा सकीं।",
-    "cleanupDestFilesSuccess": "गंतव्य से आंशिक फ़ाइलें हटा दी गईं।",
-    "confirmCopy": "कॉपी करें",
-    "confirmMove": "स्थानांतरित करें",
-    "copyFolderToHost": "फ़ोल्डर होस्ट पर कॉपी करें…",
-    "copyItemsToHost": "{{count}} आइटम होस्ट पर कॉपी करें…",
-    "copyToHost": "होस्ट पर कॉपी करें…",
-    "destinationPath": "गंतव्य पथ",
-    "destMustBeDirectory": "कई आइटम स्थानांतरण के लिए गंतव्य एक निर्देशिका होना चाहिए",
-    "goUp": "ऊपर जाएं",
-    "hostAuthRequired": "प्रमाणीकरण आवश्यक है। पहले इस होस्ट पर फ़ाइल मैनेजर खोलें।",
-    "hostConnecting": "कनेक्ट हो रहा है…",
-    "hostConnectionFailed": "कनेक्शन विफल",
-    "hostDisconnected": "कनेक्ट नहीं है",
-    "hostReady": "तैयार",
-    "itemsSummary": "{{count}} आइटम",
-    "jumpHostLimitation": "दोनों होस्ट Termix सर्वर से पहुँच योग्य होने चाहिए। सीधा होस्ट-से-होस्ट रूटिंग समर्थित नहीं है।",
-    "methodAuto": "स्वचालित",
-    "methodAutoHint": "फ़ाइलों की संख्या, आकार और संपीड़न क्षमता के आधार पर tar या प्रति-फ़ाइल SFTP चुनता है। एकल फ़ाइलें हमेशा स्ट्रीमिंग SFTP का उपयोग करती हैं।",
-    "methodItemSftp": "प्रति-फ़ाइल SFTP",
-    "methodItemSftpHint": "प्रत्येक फ़ाइल को SFTP पर अलग-अलग स्थानांतरित करें। विंडोज़ सहित सभी होस्ट पर काम करता है।",
-    "methodItemSftpLimitation": "प्रत्येक फ़ाइल एक-एक करके एकल-फ़ाइल प्रतिलिपि के रूप में समान SFTP स्ट्रीम का उपयोग करती है। सभी फ़ाइलों में प्रगति संयुक्त होती है, इसलिए बड़ी फ़ाइलों के दौरान बार धीरे-धीरे चलता है।",
-    "methodLabel": "स्थानांतरण विधि",
-    "methodPreviewError": "स्थानांतरण विधि का पूर्वावलोकन नहीं किया जा सका। प्रारंभ करने पर सर्वर फिर भी एक विधि चुनेगा।",
-    "methodPreviewLoading": "स्थानांतरण विधि की गणना कर रहा है…",
-    "methodPreviewScanSummary": "{{fileCount}} फ़ाइलें, कुल {{totalSize}} (स्रोत होस्ट पर स्कैन किया गया)।",
-    "methodPreviewWillUseItemSftp": "उपयोग करेगा: प्रति-फ़ाइल SFTP",
-    "methodPreviewWillUseTar": "उपयोग करेगा: Tar संग्रह",
-    "methodReason": {
-      "user_item_sftp": "आपने प्रति-फ़ाइल SFTP चुना।",
-      "user_tar": "आपने tar संग्रह चुना।",
-      "tar_unavailable": "एक या दोनों होस्ट पर टार उपलब्ध नहीं है, इसलिए इसके बजाय प्रति-फाइल एसएफटीपी का उपयोग किया जाएगा।",
-      "windows_host": "इसमें विंडोज होस्ट शामिल है, इसलिए tar का उपयोग नहीं किया जाता है।",
-      "auto_multi_large": "ऑटो: कई फाइलें जिनमें संपीड़ित डेटा वाली एक बड़ी फाइल ({{largestSize}}) शामिल है। टार उन्हें एक ही स्थानांतरण में बंडल करता है।",
-      "auto_single_large_in_archive": "ऑटो: इस सेट में एक बड़ी फ़ाइल ({{largestSize}}), इसलिए प्रति-फ़ाइल SFTP.",
-      "auto_many_incompressible": "ऑटो: अधिकतर असंपीड़नीय डेटा, इसलिए प्रति-फ़ाइल SFTP।",
-      "auto_many_files": "ऑटो: कई फाइलें ({{fileCount}}), टार प्रति-फाइल ओवरहेड को कम करता है।",
-      "auto_default": "ऑटो: इस सेट के लिए प्रति-फ़ाइल SFTP।"
-    },
-    "methodTar": "Tar संग्रह",
-    "methodTarHint": "स्रोत पर संपीड़ित करें, एक संग्रह स्थानांतरित करें, गंतव्य पर निष्कर्षण करें। दोनों यूनिक्स होस्ट पर tar आवश्यक है।",
-    "metricsCompress": "स्रोत पर संपीड़न: {{duration}}",
-    "metricsExtract": "गंतव्य पर निष्कर्षण: {{duration}}",
-    "metricsPrepare": "गंतव्य तैयारी: {{duration}}",
-    "metricsRouteBenchmark": "रूट प्रोब: डायरेक्ट {{direct}}, रिले {{relay}}",
-    "metricsSourceDelete": "स्रोत से हटाना: {{duration}}",
-    "metricsTotal": "कुल: {{duration}}",
-    "metricsTransfer": "एंड-टू-एंड: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 सत्यापित: {{duration}}",
-    "moveFolderToHost": "फ़ोल्डर होस्ट पर स्थानांतरित करें…",
-    "moveItemsToHost": "{{count}} आइटम होस्ट पर स्थानांतरित करें…",
-    "moveToHost": "होस्ट पर ले जाएँ…",
-    "noHostsConnected": "कोई अन्य फ़ाइल प्रबंधक होस्ट उपलब्ध नहीं है।",
-    "noHostsConnectedHint": "होस्ट प्रबंधक में फ़ाइल प्रबंधक सक्षम किए हुए एक और SSH होस्ट जोड़ें।",
-    "parallelSegmentsHint": "बड़ी फ़ाइलें 256 MB टुकड़ों में विभाजित होती हैं। एकाधिक लेन उच्च कुल थ्रूपुट के लिए अलग-अलग कनेक्शन का उपयोग करती हैं (जैसे कई स्थानांतरण प्रारंभ करना)।",
-    "parallelSegmentsLabel": "समानांतर स्थानांतरण लेन",
-    "parallelSegmentsOption": "{{count}} लेन",
-    "progressBenchmarking": "सबसे तेज़ स्थानांतरण मार्ग का चयन करना…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "रद्द करें",
-    "progressCancelling": "रद्द कर रहा है…",
-    "progressCompressing": "स्रोत होस्ट पर संपीड़ित कर रहा है…",
-    "progressExtracting": "गंतव्य पर निष्कर्षण कर रहा है…",
-    "progressItems": "{{current}} / {{total}} फ़ाइलें",
-    "progressReconnecting": "पुनः कनेक्ट हो रहा है…",
-    "progressStalled": "रुका हुआ",
-    "progressTotalSpeed": "{{speed}} कुल ({{lanes}} लेन)",
-    "progressTransferring": "डेटा स्थानांतरित कर रहा है…",
-    "progressTransferringItems": "फ़ाइलें स्थानांतरित कर रहा है ({{current}} / {{total}})…",
-    "progressVerifying": "फ़ाइल की अखंडता का सत्यापन…",
-    "recentDestinations": "हाल के गंतव्य",
-    "resumedHint": "किसी अन्य विंडो में शुरू हुए सक्रिय स्थानांतरण से पुनः जुड़ा।",
-    "retryTransfer": "पुनः प्रयास करें",
-    "retryTransferError": "पुनः प्रयास विफल रहा।",
-    "selectDestinationHost": "गंतव्य होस्ट चुनें",
-    "transferCancelled": "स्थानांतरण रद्द किया गया।",
-    "transferCancelledCopyHint": "आंशिक फ़ाइलें गंतव्य पर रह सकती हैं।",
-    "transferCancelledMoveHint": "आंशिक फ़ाइलें गंतव्य पर रह सकती हैं। स्रोत फ़ाइलें नहीं हटाई गईं।",
-    "transferError": "स्थानांतरण विफल",
-    "transferFailedRetryHint": "आंशिक डेटा गंतव्य पर रखा गया था। कनेक्शन वापस आने पर पुनः प्रयास फिर से शुरू होगा।",
-    "transferPartialHint": "स्थानांतरित नहीं किया जा सका: {{paths}}",
-    "transferSuccess": "स्थानांतरण पूर्ण",
-    "metricsHopSourceRead": "स्रोत → सर्वर: {{throughput}}",
-    "metricsHopDestSftpWrite": "सर्वर → गंतव्य (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "सर्वर → गंतव्य (स्थानीय): {{throughput}}"
-  },
-  "plugin": {
-    "name": "फ़ाइल प्रबंधक"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/hu_HU.json b/plugins/file-manager/locales/translated/hu_HU.json
deleted file mode 100644
index 33749f1a2..000000000
--- a/plugins/file-manager/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Fájlok",
-    "sftp": "SFTP",
-    "openFileManager": "Fájlkezelő megnyitása"
-  },
-  "permissions": {
-    "use": {
-      "title": "Fájlkezelő használata",
-      "description": "Fájlok böngészése, szerkesztése és átvitele SFTP-n keresztül."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Fájlkezelő engedélyezése",
-        "description": "Böngésszen és szerkessze a fájlokat ezen a gazdagépen SFTP-n keresztül."
-      },
-      "defaultPath": {
-        "label": "Alapértelmezett elérési út"
-      },
-      "scpLegacy": {
-        "label": "SCP örökölt mód"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Egyidejű fájlátvitel",
-        "description": "Hány fájlt tölt fel vagy tölt le egyszerre az egymás melletti helyi/távoli kezelő. Csökkentse ezt az értéket, ha a szerver korlátozza az SFTP csatornákat."
-      },
-      "confirmBeforeTrash": {
-        "label": "Fájlok kukába helyezése előtt erősítse meg",
-        "description": "Kérdezzen rá, mielőtt a távoli fájlokat a kukába helyezi. A végleges törlés továbbra is megerősítést igényel."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Fájlkezelő"
-  },
-  "fileManager": {
-    "noHostSelected": "Nincs kiválasztva gazdagép",
-    "initializingEditor": "Szerkesztő inicializálása...",
-    "file": "Fájl",
-    "folder": "Mappa",
-    "uploadFile": "Fájl feltöltése",
-    "downloadFile": "Letöltés",
-    "extractArchive": "Archívum kibontása",
-    "extractingArchive": "{{name}} kinyerése ...",
-    "archiveExtractedSuccessfully": "{{name}} sikeresen kibontva",
-    "extractFailed": "Kibontás sikertelen",
-    "compressFile": "Fájl tömörítése",
-    "compressFiles": "Fájlok tömörítése",
-    "compressFilesDesc": "Tömörítsen {{count}} elemet archívumba",
-    "archiveName": "Archívum neve",
-    "enterArchiveName": "Adja meg az archívum nevét...",
-    "compressionFormat": "Tömörítési formátum",
-    "selectedFiles": "Kiválasztott fájlok",
-    "andMoreFiles": "és {{count}} több...",
-    "compress": "Borogatás",
-    "compressingFiles": "{{count}} elem tömörítése {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} sikeresen létrehozva",
-    "compressFailed": "Sikertelen tömörítés",
-    "edit": "Szerkesztés",
-    "preview": "Előnézet",
-    "previous": "Előző",
-    "next": "Következő",
-    "pageXOfY": "{{total}} oldalból a {{current}} oldal",
-    "zoomOut": "Kicsinyítés",
-    "zoomIn": "Nagyítás",
-    "newFile": "Új fájl",
-    "newFolder": "Új mappa",
-    "rename": "Átnevezés",
-    "uploading": "Feltöltés...",
-    "uploadingFile": "Feltöltés {{name}}...",
-    "uploadingChunk": "Feltöltés folyamatban {{name}}: {{percent}}% (a {{chunk}} része a {{total}}-ból)",
-    "fileName": "Fájlnév",
-    "folderName": "Mappa neve",
-    "fileUploadedSuccessfully": "A(z) \"{{name}}\" fájl feltöltése sikeresen megtörtént.",
-    "failedToUploadFile": "Nem sikerült feltölteni a fájlt",
-    "uploadingFolderFiles": "{{count}} fájl(ok) feltöltése...",
-    "uploadedFolderFiles": "{{count}} fájl(ok) feltöltve sikeresen",
-    "uploadedFolderPartial": "{{uploaded}} fájl(ok) feltöltése, {{failed}} sikertelen",
-    "fileDownloadedSuccessfully": "A(z) \"{{name}}\" fájl sikeresen letöltve",
-    "failedToDownloadFile": "Nem sikerült letölteni a fájlt",
-    "fileCreatedSuccessfully": "A(z) \"{{name}}\" fájl sikeresen létrehozva",
-    "folderCreatedSuccessfully": "A(z) \"{{name}}\" mappa sikeresen létrehozva",
-    "failedToCreateItem": "Nem sikerült létrehozni az elemet",
-    "operationFailed": "{{operation}} művelet sikertelen a következőhöz: {{name}}: {{error}}",
-    "failedToResolveSymlink": "Nem sikerült feloldani a szimbolikus linket",
-    "itemsDeletedSuccessfully": "{{count}} elem sikeresen törölve",
-    "failedToDeleteItems": "Nem sikerült törölni az elemeket",
-    "sudoPasswordRequired": "Rendszergazdai jelszó szükséges",
-    "enterSudoPassword": "Írja be a sudo jelszót a művelet folytatásához",
-    "sudoPassword": "Sudo jelszó",
-    "sudoOperationFailed": "Sudo művelet sikertelen",
-    "sudoAuthFailed": "Sudo hitelesítés sikertelen",
-    "dragFilesToUpload": "Húzd ide a fájlokat a feltöltéshez",
-    "dropToUploadHere": "Húzd ide a feltöltéshez",
-    "dropToDownloadHere": "Húzd ide a letöltéshez",
-    "localFiles": "Helyi",
-    "showLocalFiles": "Helyi fájlok megjelenítése (osztott nézet)",
-    "hideLocalFiles": "Helyi fájlok elrejtése",
-    "localHome": "Saját mappa",
-    "localPathPlaceholder": "Helyi mappa elérési útja",
-    "localShowHidden": "Rejtett fájlok megjelenítése",
-    "localHideHidden": "Rejtett fájlok elrejtése",
-    "localRevealInFileManager": "Megjelenítés a rendszerfájl-kezelőben",
-    "localCannotOpenFolder": "Nem lehet megnyitni a mappát",
-    "localItemCount": "{{count}} elem",
-    "localSelectedCount": "{{count}} kiválasztva",
-    "back": "Vissza",
-    "forward": "Előre",
-    "up": "Fel",
-    "kind": "Fajta",
-    "localUploadingProgress": "{{current}} / {{total}} feltöltése",
-    "localDownloadingProgress": "{{current}} letöltése a következőből: {{total}}",
-    "localTransferInFlight": "{{count}} egyszerre",
-    "localPreparingDownload": "Letöltés előkészítése...",
-    "localTransferCancelled": "Átutalás törölve",
-    "localNothingToTransfer": "Nincs mit átutalni",
-    "localUploadComplete": "Feltöltött {{count}} fájl(ok)",
-    "localUploadFailed": "Feltöltés sikertelen",
-    "localUploadPartial": "{{done}} fájl(ok) feltöltése, {{failed}} sikertelen",
-    "localDownloadComplete": "Letöltött {{count}} fájl(ok)",
-    "localDownloadFailed": "Letöltés sikertelen",
-    "localDownloadPartial": "{{done}} fájl(ok) letöltése, {{failed}} sikertelen",
-    "localReplaceExistingPrompt": "{{count}} elem már létezik ebben a mappában. Cserélje ki őket?",
-    "localReplace": "Csere",
-    "localSkipExisting": "Kihagyás",
-    "localSkippedExisting": "Kihagyott {{count}} meglévő elem(ek)",
-    "localUnsafeNamesSkipped": "Kihagyott {{count}} elem(ek), amelyek neve nem használható ezen a számítógépen",
-    "localOpen": "Nyitott",
-    "localOpenFolder": "Mappa megnyitása",
-    "localUploadToRemote": "Feltöltés a szerverre",
-    "localUploadToRemoteMany": "Tölts fel {{count}} elemet a szerverre",
-    "localMoveToTrash": "Áthelyezés a kukába",
-    "localMoveToTrashMany": "{{count}} elem áthelyezése a Kukába",
-    "localTrashConfirmSingle": "Áthelyeznéd a(z) \"{{name}}\"-t a Kukába?",
-    "localTrashConfirmFolder": "Áthelyezi a(z) \"{{name}}\" mappát és annak teljes tartalmát a Kukába?",
-    "localTrashConfirmMany": "Áthelyezi a {{count}} elemet a Kukába?",
-    "localTrashed": "{{count}} elem áthelyezve a Kukába",
-    "localTrashFailed": "Nem sikerült a Kukába helyezni",
-    "localRenameFailed": "Átnevezés sikertelen",
-    "localCreateFailed": "Nem sikerült létrehozni az elemet",
-    "goToParentFolder": "Ugrás a szülőmappára",
-    "resizeSidebar": "Húzással átméretezheted az oldalsávot (dupla kattintással visszaállíthatod)",
-    "resizeLocalPane": "Húzással átméretezheti a helyi panelt (dupla kattintással visszaállíthatja)",
-    "columns": "Oszlopok",
-    "columnsHint": "Kattintson jobb gombbal az oszlopok kiválasztásához",
-    "emptyFolder": "Ez a mappa üres",
-    "searchFiles": "Fájlok keresése...",
-    "upload": "Feltöltés",
-    "selectHostToStart": "Válasszon ki egy gazdagépet a fájlkezelés megkezdéséhez",
-    "sshRequiredForFileManager": "A fájlkezelő SSH-t igényel. Ezen a gazdagépen nincs engedélyezve az SSH.",
-    "failedToConnect": "Nem sikerült csatlakozni az SSH-hoz",
-    "failedToLoadDirectory": "Nem sikerült betölteni a könyvtárat",
-    "noSSHConnection": "Nincs elérhető SSH-kapcsolat",
-    "copy": "Másolat",
-    "cut": "Vágott",
-    "paste": "Paszta",
-    "copyPath": "Útvonal másolása",
-    "copyPaths": "Útvonalak másolása",
-    "delete": "Töröl",
-    "properties": "Tulajdonságok",
-    "refresh": "Frissítés",
-    "downloadFiles": "{{count}} fájlok letöltése böngészőbe",
-    "copyFiles": "{{count}} elem másolása",
-    "cutFiles": "{{count}} elem kivágása",
-    "deleteFiles": "{{count}} elem törlése",
-    "filesCopiedToClipboard": "{{count}} elem másolva a vágólapra",
-    "filesCutToClipboard": "{{count}} elem a vágólapra vágva",
-    "pathCopiedToClipboard": "Útvonal a vágólapra másolva",
-    "pathsCopiedToClipboard": "{{count}} elérési utak másolva a vágólapra",
-    "failedToCopyPath": "Nem sikerült a vágólapra másolni az elérési utat",
-    "copyFolderLink": "Link másolása mappába",
-    "copyCurrentFolderLink": "Link másolása az aktuális mappába",
-    "folderLinkCopied": "Mappa linkje a vágólapra másolva",
-    "failedToCopyFolderLink": "Nem sikerült a mappa linkjét másolni",
-    "movedItems": "Áthelyezett {{count}} elem",
-    "failedToDeleteItem": "Nem sikerült törölni az elemet",
-    "itemRenamedSuccessfully": "{{type}} átnevezése sikeresen megtörtént",
-    "failedToRenameItem": "Nem sikerült átnevezni az elemet",
-    "download": "Letöltés",
-    "openExternalEditor": "Külsőleg nyitott",
-    "chooseExternalEditor": "Válasszon külső szerkesztőt",
-    "externalEditorSelected": "Külső szerkesztő kiválasztva",
-    "externalEditorDesktopOnly": "A külső szerkesztő csak az asztali alkalmazásban érhető el.",
-    "externalEditorOpened": "Külső szerkesztőben megnyitva. A mentés oda feltölti a módosításokat a szerverre.",
-    "failedToOpenExternalEditor": "Nem sikerült megnyitni a külső szerkesztőt",
-    "failedToSelectExternalEditor": "Nem sikerült kiválasztani a külső szerkesztőt",
-    "permissions": "Engedélyek",
-    "size": "Méret",
-    "modified": "Módosított",
-    "path": "Útvonal",
-    "confirmDelete": "Biztosan törölni szeretnéd ezt: {{name}}?",
-    "permissionDenied": "Engedély megtagadva",
-    "serverError": "Szerverhiba",
-    "fileSavedSuccessfully": "Fájl mentése sikeresen megtörtént",
-    "failedToSaveFile": "Nem sikerült menteni a fájlt",
-    "confirmDeleteSingleItem": "Biztosan véglegesen törölni szeretnéd a(z) \"{{name}} \" fájlt?",
-    "confirmDeleteMultipleItems": "Biztosan véglegesen törölni szeretnéd a(z) {{count}} elemet?",
-    "confirmDeleteMultipleItemsWithFolders": "Biztosan véglegesen törölni szeretnéd a(z) {{count}} elemet? Ez a mappákat és azok tartalmát is tartalmazza.",
-    "confirmDeleteFolder": "Biztosan véglegesen törölni szeretné a(z) \"{{name}}\" mappát és annak teljes tartalmát?",
-    "permanentDeleteWarning": "Ez a művelet nem vonható vissza. Az elem(ek) véglegesen törlődnek a szerverről.",
-    "moveToTrashWarning": "Az elem(ek) a Termix Kukába kerülnek, és a megőrzési időszak lejárta előtt visszaállíthatók.",
-    "itemsMovedToTrash": "{{count}} elem áthelyezve a Kukába",
-    "trash": "Szemét",
-    "trashDescription": "A törölt elemek {{days}} napig maradnak meg ezen a gépen.",
-    "trashLoadFailed": "Nem sikerült betölteni a Kuka mappát",
-    "trashEmpty": "A kuka üres",
-    "trashRestore": "Visszaállítás",
-    "trashRestored": "Visszaállított {{name}}",
-    "trashRestoreFailed": "Nem sikerült visszaállítani az elemet. Az eredeti elérési út már létezhet.",
-    "trashDeletePermanently": "Végleges törlés",
-    "trashDeleteConfirm": "Véglegesen törölni szeretnéd a(z) {{name}}elemet? Ez a művelet nem vonható vissza.",
-    "trashPermanentlyDeleted": "Véglegesen törölve {{name}}",
-    "trashDeleteFailed": "Nem sikerült véglegesen törölni az elemet",
-    "trashEmptyAction": "Ürítse ki a szemetet",
-    "trashEmptyConfirm": "Véglegesen törli az összes elemet a Kukából? Ez a művelet nem vonható vissza.",
-    "trashEmptied": "Szemét kiürítve",
-    "trashRetention": "Automatikus tisztítás (nap) után",
-    "trashRetentionSaved": "A kuka megőrzése frissítve",
-    "trashRetentionFailed": "Nem sikerült frissíteni a Kuka megőrzési idejét",
-    "trashUnavailableConfirm": "Ez az elem nem helyezhető a Kukába, általában azért, mert egy másik fájlrendszeren van, vagy emelt szintű jogosultságokat igényel. Inkább véglegesen törli?",
-    "recent": "Legutóbbi",
-    "pinned": "Rögzítve",
-    "folderShortcuts": "Mappa parancsikonok",
-    "failedToReconnectSSH": "Nem sikerült újracsatlakozni az SSH-munkamenethez",
-    "openTerminalHere": "Nyissa meg a terminált itt",
-    "run": "Fut",
-    "openTerminalInFolder": "Nyissa meg a terminált ebben a mappában",
-    "openTerminalInFileLocation": "Nyissa meg a terminált a fájl helyén",
-    "runningFile": "Futás - {{file}}",
-    "onlyRunExecutableFiles": "Csak futtatható fájlokat futtathat",
-    "directories": "Könyvtárak",
-    "removedFromRecentFiles": "Eltávolította a(z) „{{name}}” elemet a legutóbbi fájlok közül",
-    "removeFailed": "Eltávolítás sikertelen",
-    "unpinnedSuccessfully": "A(z) \"{{name}}\" rögzítésének feloldása sikeresen megtörtént.",
-    "unpinFailed": "Feloldás sikertelen",
-    "removedShortcut": "Eltávolította a(z) \"{{name}} \" parancsikont",
-    "removeShortcutFailed": "A parancsikon eltávolítása sikertelen",
-    "clearedAllRecentFiles": "Az összes legutóbbi fájl törölve",
-    "clearFailed": "Törlés sikertelen",
-    "removeFromRecentFiles": "Eltávolítás a legutóbbi fájlok közül",
-    "clearAllRecentFiles": "Az összes legutóbbi fájl törlése",
-    "unpinFile": "Fájl rögzítésének feloldása",
-    "removeShortcut": "Parancsikon eltávolítása",
-    "pinFile": "Fájl rögzítése",
-    "addToShortcuts": "Hozzáadás a parancsikonokhoz",
-    "pasteFailed": "Beillesztés sikertelen",
-    "noUndoableActions": "Nincsenek visszavonható műveletek",
-    "undoCopySuccess": "Visszavont másolási művelet: Törölt {{count}} másolt fájlok",
-    "undoCopyFailedDelete": "Visszavonás sikertelen: Nem sikerült törölni a másolt fájlokat",
-    "undoCopyFailedNoInfo": "Visszavonás sikertelen: Nem találhatók másolt fájlinformációk",
-    "undoMoveSuccess": "Visszavont áthelyezési művelet: {{count}} fájl visszahelyezése az eredeti helyére",
-    "undoMoveFailedMove": "Visszavonás sikertelen: Nem sikerült visszahelyezni a fájlokat",
-    "undoMoveFailedNoInfo": "Visszavonás sikertelen: Nem találhatók áthelyezett fájlinformációk",
-    "undoDeleteNotSupported": "A törlési művelet nem vonható vissza: A fájlok véglegesen törölve lettek a szerverről.",
-    "undoTypeNotSupported": "Nem támogatott visszavonási művelettípus",
-    "undoOperationFailed": "A visszavonási művelet sikertelen",
-    "unknownError": "Ismeretlen hiba",
-    "confirm": "Megerősítés",
-    "find": "Lelet...",
-    "replace": "Csere",
-    "downloadInstead": "Letöltés helyett",
-    "keyboardShortcuts": "Billentyűparancsok",
-    "searchAndReplace": "Keresés és csere",
-    "editing": "Szerkesztés",
-    "search": "Keresés",
-    "findNext": "Következő keresése",
-    "findPrevious": "Előző keresése",
-    "save": "Megtakarítás",
-    "selectAll": "Összes kijelölése",
-    "undo": "Visszavonás",
-    "redo": "Újra",
-    "moveLineUp": "Sor felfelé mozgatása",
-    "moveLineDown": "Sor mozgatása lejjebb",
-    "toggleComment": "Hozzászólás be-/kikapcsolása",
-    "autoComplete": "Automatikus kiegészítés",
-    "imageLoadError": "Nem sikerült betölteni a képet",
-    "startTyping": "Kezdj el gépelni...",
-    "unknownSize": "Ismeretlen méret",
-    "fileIsEmpty": "A fájl üres",
-    "largeFileWarning": "Nagy fájlra vonatkozó figyelmeztetés",
-    "largeFileWarningDesc": "A fájl mérete {{size}} , ami teljesítményproblémákat okozhat szövegként megnyitva.",
-    "fileNotFoundAndRemoved": "A(z) „{{name}}” fájl nem található, és eltávolításra került a legutóbbi/rögzített fájlok közül.",
-    "failedToLoadFile": "Nem sikerült betölteni a fájlt: {{error}}",
-    "serverErrorOccurred": "Szerverhiba történt. Kérjük, próbálja meg később.",
-    "autoSaveFailed": "Automatikus mentés sikertelen",
-    "fileAutoSaved": "Fájl automatikusan mentve",
-    "moveFileFailed": "Nem sikerült áthelyezni {{name}}",
-    "moveOperationFailed": "Áthelyezési művelet sikertelen",
-    "canOnlyCompareFiles": "Csak két fájlt lehet összehasonlítani",
-    "comparingFiles": "Fájlok összehasonlítása: {{file1}} és {{file2}}",
-    "dragFailed": "Húzási művelet sikertelen",
-    "filePinnedSuccessfully": "A(z) „{{name}}” fájl rögzítése sikeresen megtörtént.",
-    "pinFileFailed": "Nem sikerült rögzíteni a fájlt",
-    "fileUnpinnedSuccessfully": "A(z) „{{name}}” fájl rögzítése sikeresen feloldva",
-    "unpinFileFailed": "Nem sikerült feloldani a fájl rögzítését",
-    "shortcutAddedSuccessfully": "A(z) „{{name}}” mappa parancsikonja sikeresen hozzáadva",
-    "addShortcutFailed": "Nem sikerült hozzáadni a parancsikont",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} elem sikeresen",
-    "operationCompleted": "{{operation}} {{count}} elem",
-    "downloadFileSuccess": "A {{name}} fájl sikeresen letöltve",
-    "downloadFileFailed": "Letöltés sikertelen",
-    "downloadingFile": "{{name}}… letöltése",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Áthelyezés ide: {{name}}",
-    "diffCompareWith": "Különbség összehasonlítása {{name}}-val",
-    "dragOutsideToDownload": "Húzd az ablakon kívülre a letöltéshez ({{count}} fájl)",
-    "newFolderDefault": "Új mappa",
-    "newFileDefault": "ÚjFájl.txt",
-    "successfullyMovedItems": "{{count}} elem sikeresen áthelyezve ide: {{target}}",
-    "move": "Mozog",
-    "searchInFile": "Keresés a fájlban (Ctrl+F)",
-    "showKeyboardShortcuts": "Billentyűparancsok megjelenítése",
-    "decreaseFontSize": "Betűméret csökkentése",
-    "increaseFontSize": "Betűméret növelése",
-    "startWritingMarkdown": "Kezdj el írni a Markdown tartalmaidat...",
-    "loadingFileComparison": "Fájl-összehasonlítás betöltése...",
-    "reload": "Újratöltés",
-    "compare": "Összehasonlítás",
-    "sideBySide": "Egymás mellett",
-    "inline": "Beágyazott",
-    "fileComparison": "Fájl-összehasonlítás: {{file1}} vs {{file2}}",
-    "fileTooLarge": "A fájl túl nagy (> 10 MB), és biztonsági okokból nem nyitható meg szövegként.",
-    "sshConnectionFailed": "SSH kapcsolat sikertelen. Kérjük, ellenőrizze a kapcsolatot a következővel: {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Nem sikerült betölteni a fájlt: {{error}}",
-    "connecting": "Kapcsolódás...",
-    "connectedSuccessfully": "Sikeres csatlakozás",
-    "totpVerificationFailed": "TOTP-ellenőrzés sikertelen",
-    "browserSignInFailed": "Sikertelen bejelentkezés. Kérjük, próbálja újra.",
-    "authenticationFailed": "Hitelesítés sikertelen",
-    "incorrectPassphrase": "Hibás jelszó. Kérjük, próbálja újra.",
-    "verificationCodePrompt": "Ellenőrző kód:",
-    "changePermissions": "Engedélyek módosítása",
-    "currentPermissions": "Jelenlegi engedélyek",
-    "owner": "Tulajdonos",
-    "group": "Csoport",
-    "others": "Mások",
-    "read": "Olvas",
-    "write": "Írás",
-    "execute": "Végrehajtás",
-    "permissionsChangedSuccessfully": "Engedélyek sikeresen módosítva",
-    "failedToChangePermissions": "Nem sikerült módosítani az engedélyeket",
-    "name": "Név",
-    "sortByName": "Név",
-    "sortByDate": "Módosítás dátuma",
-    "sortBySize": "Méret",
-    "ascending": "Növekvő",
-    "descending": "Csökkenő",
-    "root": "Gyökér",
-    "new": "Új",
-    "sortBy": "Rendezés alapja",
-    "items": "Tételek",
-    "selected": "Kiválasztott",
-    "editor": "Szerkesztő",
-    "octal": "Oktális",
-    "storage": "Tárolás",
-    "disk": "Korong",
-    "used": "Használt",
-    "of": "a",
-    "toggleSidebar": "Oldalsáv be- és kikapcsolása",
-    "compactLayout": "Kompakt elrendezés használata",
-    "comfortableLayout": "Használjon kényelmes elrendezést",
-    "cannotLoadPdf": "Nem tudom betölteni a PDF-et",
-    "pdfLoadError": "Hiba történt a PDF fájl betöltésekor.",
-    "loadingPdf": "PDF-megjelenítő betöltése...",
-    "loadingPage": "Oldal betöltése...",
-    "cancel": "Mégsem",
-    "copiedItems_one": "Másolt {{count}} elem",
-    "copiedItems_other": "{{count}} elem másolva",
-    "deleteCopiedFileFailed": "Nem sikerült törölni a(z) {{name}}másolatát : {{error}}",
-    "dragMovedItems_one": "Áthelyezve a {{count}} elemet ide: {{target}}",
-    "dragMovedItems_other": "{{count}} elem áthelyezve ide: {{target}}",
-    "moveBackFileFailed": "Nem sikerült a {{name}} visszamozgatása: {{error}}",
-    "terminal": "Terminál: {{host}} ({{path}})",
-    "dragToDesktop": "A {{name}} húzása az asztalra",
-    "dragFilesToDesktop": "{{count}} fájlok húzása az asztalra",
-    "folderDragUnsupported": "A mappák asztalra húzása még nem támogatott.",
-    "saveToDesktopFailed": "Mentés sikertelen: {{error}}",
-    "dragFailedDetail": "Húzása sikertelen: {{error}}",
-    "videoUnsupported": "A böngésződ nem tudja lejátszani ezt a videóformátumot.",
-    "downloadToPlay": "Töltsd le, hogy máshol is lejátszhasd",
-    "cannotPreviewType": "Ez a fájltípus nem tekinthető meg előnézetben",
-    "cannotPreviewTypeHint": "Ennek a fájltípusnak nincs előnézete. Töltse le, hogy egy másik alkalmazásban megnyissa.",
-    "loadingFile": "Fájl betöltése...",
-    "loadingImage": "Kép betöltése...",
-    "loadingEditor": "Szerkesztő betöltése...",
-    "loadingPreview": "Előnézet betöltése...",
-    "loadingAudio": "Hanglejátszó betöltése...",
-    "emptyPreview": "Még nincs mit előnézetben látni...",
-    "revert": "Visszaállítás",
-    "openAsText": "Megnyitás szövegként",
-    "confirmOpenAsText": "Szeretné továbbra is szövegként megnyitni ezt a fájlt? Ez lelassíthatja a böngészőjét."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "Fájlok átvitele két SSH hoszt között.",
-    "sourceServer": "Forráskiszolgáló",
-    "destinationServer": "Célkiszolgáló",
-    "selectHost": "Válasszon gazdagépet",
-    "noHostSelected": "Nincs kiválasztva gazdagép",
-    "move": "Mozog",
-    "copy": "Másolat",
-    "upload": "Feltöltés",
-    "itemsSelected": "{{count}} elem kiválasztva",
-    "itemsSelected_other": "{{count}} elem kijelölve",
-    "ready": "Kész",
-    "loadingHosts": "Gazdagépek betöltése...",
-    "name": "Név",
-    "modified": "Módosított",
-    "size": "Méret",
-    "noFiles": "Nincsenek fájlok",
-    "open": "Nyitott",
-    "up": "Fel",
-    "refresh": "Frissítés",
-    "copyToTarget": "Másolás a célkönyvtárba",
-    "rename": "Átnevezés",
-    "delete": "Töröl",
-    "editPermissions": "Szerkesztési engedélyek",
-    "createNewFolder": "Új mappa létrehozása",
-    "deleteSelectedItems": "Kijelölt elemek törlése",
-    "deleteConfirm": "Törli a {{count}} kijelölt elemet?",
-    "deleteConfirm_other": "Törli a {{count}} kijelölt elemeket?",
-    "cancel": "Mégsem",
-    "save": "Megtakarítás",
-    "folderCreated": "Mappa létrehozva",
-    "itemRenamed": "Elem átnevezve",
-    "actionFailed": "Sikertelen művelet",
-    "itemsDeleted": "{{count}} elem törölve",
-    "itemsDeleted_other": "{{count}} elem törölve",
-    "deleteFailed": "Törlés sikertelen",
-    "permissionsUpdated": "Engedélyek frissítve",
-    "noRemoteSessionConnected": "Nincs távoli munkamenet csatlakoztatva",
-    "failedToListFiles": "Nem sikerült listázni a fájlokat",
-    "failedToRefresh": "Nem sikerült frissíteni",
-    "destinationInsideSource": "A cél nem lehet a kiválasztott forrásútvonalon belül.",
-    "sameHostNoOp": "A forrás- és célmappa ugyanaz."
-  },
-  "hosts": {
-    "fileManager": "Fájlkezelő",
-    "fileManagerUrlCopied": "Fájlkezelő URL-címe másolva",
-    "copyFileManagerUrlAction": "Fájlkezelő URL-címének másolása",
-    "docsLink": "Dokumentumok megtekintése",
-    "hostNotFound": "Nem található gazdagép",
-    "loadingHost": "Gazdagép betöltése..."
-  },
-  "onboarding": {
-    "feature_files": "Fájlkezelő",
-    "feature_files_desc": "Böngésszen, töltsön fel, töltsön le és szerkeszthessen fájlokat SFTP-n keresztül az alkalmazás elhagyása nélkül."
-  },
-  "terminal": {
-    "runTitle": "Futás {{command}} - {{host}}",
-    "terminalTitle": "Terminál - {{host}}",
-    "terminalWithPath": "Terminál - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Célmappák böngészése",
-    "browsePathError": "Nem sikerült megnyitni ezt az elérési utat a célgépen.",
-    "browsePathWillBeCreated": "Ez a mappa még nem létezik. Létrejön, amikor az átvitel megkezdődik.",
-    "cancel": "Mégsem",
-    "cleanupDestFiles": "Takarítási célpont",
-    "cleanupDestFilesError": "A tisztítás sikertelen",
-    "cleanupDestFilesNothing": "Nincs mit takarítani a célállomáson",
-    "cleanupDestFilesPartial": "Néhány részleges fájlt nem sikerült eltávolítani",
-    "cleanupDestFilesSuccess": "Részleges fájlok eltávolítva a célhelyről",
-    "confirmCopy": "Másolat",
-    "confirmMove": "Mozog",
-    "copyFolderToHost": "Mappa másolása a… gazdagépre",
-    "copyItemsToHost": "Másolja a {{count}} elemet a… hosztba",
-    "copyToHost": "Másolás a… gazdagépre",
-    "destinationPath": "Célútvonal",
-    "destMustBeDirectory": "Több elem átviteléhez a célnak egy könyvtárnak kell lennie",
-    "goUp": "Felmegy",
-    "hostAuthRequired": "Hitelesítés szükséges. Először nyissa meg a Fájlkezelőt ezen a gazdagépen.",
-    "hostConnecting": "… csatlakoztatása",
-    "hostConnectionFailed": "Kapcsolódás sikertelen",
-    "hostDisconnected": "Nincs csatlakoztatva",
-    "hostReady": "Kész",
-    "itemsSummary": "{{count}} elem",
-    "jumpHostLimitation": "Mindkét gépnek elérhetőnek kell lennie a Termix szerverről. A közvetlen gépközi útvonalválasztás nem támogatott.",
-    "methodAuto": "Autó",
-    "methodAutoHint": "A fájlok száma, mérete és tömöríthetősége alapján választja ki a tar vagy a fájlonkénti SFTP protokollt. Az egyes fájlok mindig folyamatos SFTP-t használnak.",
-    "methodItemSftp": "Fájlonkénti SFTP",
-    "methodItemSftpHint": "Minden fájlt külön-külön átvihet SFTP-n keresztül. Minden gazdagépen működik, beleértve a Windowst is.",
-    "methodItemSftpLimitation": "Minden fájl ugyanazt az SFTP-folyamot használja, mint egyetlen fájl másolata, egymás után. A folyamat az összes fájlban összevonódik, így a sáv lassan mozog nagy fájlok esetén.",
-    "methodLabel": "Átviteli módszer",
-    "methodPreviewError": "Nem sikerült megtekinteni az átviteli módot. A szerver továbbra is kiválaszt egy módszert az indításkor.",
-    "methodPreviewLoading": "Átviteli módszer kiszámítása…",
-    "methodPreviewScanSummary": "{{fileCount}} fájl, {{totalSize}} összesen (a forrásgépen beolvasva).",
-    "methodPreviewWillUseItemSftp": "Használat: Fájlonkénti SFTP",
-    "methodPreviewWillUseTar": "Felhasználás: Tar archívum",
-    "methodReason": {
-      "user_item_sftp": "Fájlonkénti SFTP-t választottál.",
-      "user_tar": "A tar archívumot választottad.",
-      "tar_unavailable": "A Tar nem érhető el az egyik vagy mindkét hoszton, ezért fájlonkénti SFTP-t fogunk használni.",
-      "windows_host": "Egy Windows gazdagép érintett, így a tar-t nem használjuk.",
-      "auto_multi_large": "Automatikus: több fájl, beleértve egy nagy fájlt ({{largestSize}}) tömöríthető adatokkal. A Tar egyetlen átvitellé köti őket.",
-      "auto_single_large_in_archive": "Automatikus: egy nagy fájl ({{largestSize}}) ebben a készletben, tehát fájlonkénti SFTP.",
-      "auto_many_incompressible": "Automatikus: többnyire tömöríthetetlen adatok, tehát fájlonkénti SFTP.",
-      "auto_many_files": "Auto: sok fájl ({{fileCount}}), a tar csökkenti a fájlonkénti terhelést.",
-      "auto_default": "Automatikus: fájlonkénti SFTP ehhez a készlethez."
-    },
-    "methodTar": "Tar archívum",
-    "methodTarHint": "Tömörítés a forráskódban, egy archívum átvitele, kibontás a célkódban. Tar fájlt igényel mindkét Unix gépen.",
-    "metricsCompress": "Tömörítés forráskód szerint: {{duration}}",
-    "metricsExtract": "Kivonat a rendeltetési helyen: {{duration}}",
-    "metricsPrepare": "Célhely előkészítése: {{duration}}",
-    "metricsRouteBenchmark": "Útvonalszonda: direkt {{direct}}, relé {{relay}}",
-    "metricsSourceDelete": "Eltávolítás a forrásból: {{duration}}",
-    "metricsTotal": "Összesen: {{duration}}",
-    "metricsTransfer": "Végtől végig: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 ellenőrizve: {{duration}}",
-    "moveFolderToHost": "Mappa áthelyezése a… gazdagépre",
-    "moveItemsToHost": "Mozgass {{count}} elemet a… tárhelyre",
-    "moveToHost": "Áthelyezés a… gazdagépre",
-    "noHostsConnected": "Nincsenek más elérhető fájlkezelő gazdagépek.",
-    "noHostsConnectedHint": "Adjon hozzá egy másik SSH-hosztot, amelynél a Fájlkezelő engedélyezve van a Host Managerben.",
-    "parallelSegmentsHint": "A nagy fájlokat 256 MB-os darabokra osztja a rendszer. Több sáv külön kapcsolatokat használ (például több átvitel indítása) a nagyobb összátviteli sebesség érdekében.",
-    "parallelSegmentsLabel": "Párhuzamos átszállósávok",
-    "parallelSegmentsOption": "{{count}} sávok",
-    "progressBenchmarking": "A leggyorsabb átszállási útvonal kiválasztása…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Mégsem",
-    "progressCancelling": "Törlés…",
-    "progressCompressing": "Tömörítés a forrásgépen…",
-    "progressExtracting": "Kibontás a célállomáson…",
-    "progressItems": "{{current}} / {{total}} fájlok",
-    "progressReconnecting": "Újracsatlakozás…",
-    "progressStalled": "Elakadt",
-    "progressTotalSpeed": "{{speed}} összesen ({{lanes}} sávok)",
-    "progressTransferring": "Adatátvitel…",
-    "progressTransferringItems": "Fájlok átvitele ({{current}} / {{total}})…",
-    "progressVerifying": "Fájl integritásának ellenőrzése…",
-    "recentDestinations": "Legutóbbi úti célok",
-    "resumedHint": "Újracsatlakozva egy másik ablakban indított aktív átvitelhez.",
-    "retryTransfer": "Újrapróbálkozás",
-    "retryTransferError": "Újrapróbálkozás sikertelen",
-    "selectDestinationHost": "Célállomás kiválasztása",
-    "transferCancelled": "Átutalás törölve",
-    "transferCancelledCopyHint": "Részleges fájlok maradhatnak a célhelyen.",
-    "transferCancelledMoveHint": "Részleges fájlok maradhatnak a célhelyen. A forrásfájlok nem lettek eltávolítva.",
-    "transferError": "Átvitel sikertelen",
-    "transferFailedRetryHint": "Részleges adatok maradtak a célállomáson. Az újrapróbálkozás a kapcsolat helyreállásakor folytatódik.",
-    "transferPartialHint": "Nem sikerült átvinni: {{paths}}",
-    "transferSuccess": "Átvitel befejezve",
-    "metricsHopSourceRead": "Forrás → szerver: {{throughput}}",
-    "metricsHopDestSftpWrite": "Szerver → cél (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Szerver → cél (helyi): {{throughput}}"
-  },
-  "plugin": {
-    "name": "Fájlkezelő"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/id_ID.json b/plugins/file-manager/locales/translated/id_ID.json
deleted file mode 100644
index a7d5a95ec..000000000
--- a/plugins/file-manager/locales/translated/id_ID.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Berkas",
-    "sftp": "SFTP",
-    "openFileManager": "Buka Pengelola File"
-  },
-  "permissions": {
-    "use": {
-      "title": "Gunakan pengelola file.",
-      "description": "Telusuri, edit, dan transfer file melalui SFTP."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Aktifkan Pengelola File",
-        "description": "Jelajahi dan edit file di host ini melalui SFTP."
-      },
-      "defaultPath": {
-        "label": "Jalur Default"
-      },
-      "scpLegacy": {
-        "label": "Mode Warisan SCP"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Transfer File Serentak",
-        "description": "Jumlah file yang diunggah atau diunduh oleh pengelola file lokal/jarak jauh secara bersamaan. Kurangi nilai ini jika server Anda membatasi saluran SFTP."
-      },
-      "confirmBeforeTrash": {
-        "label": "Konfirmasikan sebelum memindahkan file ke tempat sampah",
-        "description": "Mintalah izin sebelum memindahkan file jarak jauh ke tempat sampah. Penghapusan permanen tetap memerlukan konfirmasi."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Pengelola File"
-  },
-  "fileManager": {
-    "noHostSelected": "Tidak ada pembawa acara yang dipilih.",
-    "initializingEditor": "Menginisialisasi editor...",
-    "file": "Mengajukan",
-    "folder": "Map",
-    "uploadFile": "Unggah File",
-    "downloadFile": "Unduh",
-    "extractArchive": "Ekstrak Arsip",
-    "extractingArchive": "Mengekstrak {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} berhasil diekstrak",
-    "extractFailed": "Ekstraksi gagal",
-    "compressFile": "Kompres File",
-    "compressFiles": "Kompres File",
-    "compressFilesDesc": "Kompres {{count}} item ke dalam arsip",
-    "archiveName": "Nama Arsip",
-    "enterArchiveName": "Masukkan nama arsip...",
-    "compressionFormat": "Format Kompresi",
-    "selectedFiles": "File terpilih",
-    "andMoreFiles": "dan {{count}} lainnya...",
-    "compress": "Kompres",
-    "compressingFiles": "Mengompres {{count}} item menjadi {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} berhasil dibuat",
-    "compressFailed": "Kompresi gagal",
-    "edit": "Edit",
-    "preview": "Pratinjau",
-    "previous": "Sebelumnya",
-    "next": "Berikutnya",
-    "pageXOfY": "Halaman {{current}} dari {{total}}",
-    "zoomOut": "Perkecil tampilan",
-    "zoomIn": "Perbesar",
-    "newFile": "Berkas Baru",
-    "newFolder": "Folder Baru",
-    "rename": "Ganti nama",
-    "uploading": "Sedang mengunggah...",
-    "uploadingFile": "Mengunggah {{name}}...",
-    "uploadingChunk": "Mengunggah {{name}}: {{percent}}% (bagian {{chunk}} dari {{total}})",
-    "fileName": "Nama File",
-    "folderName": "Nama Folder",
-    "fileUploadedSuccessfully": "Berkas \"{{name}}\" berhasil diunggah",
-    "failedToUploadFile": "Gagal mengunggah file",
-    "uploadingFolderFiles": "Mengunggah {{count}} berkas...",
-    "uploadedFolderFiles": "Berhasil mengunggah {{count}} berkas",
-    "uploadedFolderPartial": "Pengunggahan {{uploaded}} berkas, {{failed}} gagal",
-    "fileDownloadedSuccessfully": "File \"{{name}}\" berhasil diunduh",
-    "failedToDownloadFile": "Gagal mengunduh file",
-    "fileCreatedSuccessfully": "File \"{{name}}\" berhasil dibuat",
-    "folderCreatedSuccessfully": "Folder \"{{name}}\" berhasil dibuat",
-    "failedToCreateItem": "Gagal membuat item",
-    "operationFailed": "Operasi {{operation}} gagal untuk {{name}}: {{error}}",
-    "failedToResolveSymlink": "Gagal menyelesaikan symlink",
-    "itemsDeletedSuccessfully": "{{count}} item berhasil dihapus",
-    "failedToDeleteItems": "Gagal menghapus item",
-    "sudoPasswordRequired": "Kata Sandi Administrator Diperlukan",
-    "enterSudoPassword": "Masukkan kata sandi sudo untuk melanjutkan operasi ini.",
-    "sudoPassword": "Kata sandi Sudo",
-    "sudoOperationFailed": "Operasi Sudo gagal",
-    "sudoAuthFailed": "Autentikasi Sudo gagal",
-    "dragFilesToUpload": "Seret file ke sini untuk mengunggah",
-    "dropToUploadHere": "Unggah di sini",
-    "dropToDownloadHere": "Klik di sini untuk mengunduh.",
-    "localFiles": "Lokal",
-    "showLocalFiles": "Tampilkan file lokal (tampilan terpisah)",
-    "hideLocalFiles": "Sembunyikan file lokal",
-    "localHome": "Folder beranda",
-    "localPathPlaceholder": "Jalur folder lokal",
-    "localShowHidden": "Tampilkan file tersembunyi",
-    "localHideHidden": "Sembunyikan file tersembunyi",
-    "localRevealInFileManager": "Ungkapkan di pengelola file sistem",
-    "localCannotOpenFolder": "Tidak dapat membuka folder",
-    "localItemCount": "{{count}} item",
-    "localSelectedCount": "{{count}} terpilih",
-    "back": "Kembali",
-    "forward": "Maju",
-    "up": "Ke atas",
-    "kind": "Baik",
-    "localUploadingProgress": "Mengunggah {{current}} dari {{total}}",
-    "localDownloadingProgress": "Mengunduh {{current}} dari {{total}}",
-    "localTransferInFlight": "{{count}} sekaligus",
-    "localPreparingDownload": "Mempersiapkan pengunduhan...",
-    "localTransferCancelled": "Transfer dibatalkan",
-    "localNothingToTransfer": "Tidak ada yang perlu ditransfer",
-    "localUploadComplete": "Berkas {{count}} telah diunggah",
-    "localUploadFailed": "Unggahan gagal",
-    "localUploadPartial": "Pengunggahan {{done}} berkas, {{failed}} gagal",
-    "localDownloadComplete": "Berkas {{count}} telah diunduh",
-    "localDownloadFailed": "Pengunduhan gagal",
-    "localDownloadPartial": "Pengunduhan {{done}} berkas, {{failed}} gagal",
-    "localReplaceExistingPrompt": "{{count}} item sudah ada di folder ini. Ganti item tersebut?",
-    "localReplace": "Mengganti",
-    "localSkipExisting": "Melewati",
-    "localSkippedExisting": "Melewati {{count}} item yang sudah ada",
-    "localUnsafeNamesSkipped": "Melewati {{count}} item karena namanya tidak dapat digunakan di komputer ini",
-    "localOpen": "Membuka",
-    "localOpenFolder": "Buka folder",
-    "localUploadToRemote": "Unggah ke server",
-    "localUploadToRemoteMany": "Unggah {{count}} item ke server",
-    "localMoveToTrash": "Pindahkan ke Tempat Sampah",
-    "localMoveToTrashMany": "Pindahkan {{count}} item ke Sampah",
-    "localTrashConfirmSingle": "Pindahkan \"{{name}}\" ke Sampah?",
-    "localTrashConfirmFolder": "Pindahkan folder \"{{name}}\" beserta seluruh isinya ke Sampah?",
-    "localTrashConfirmMany": "Pindahkan {{count}} item ke Sampah?",
-    "localTrashed": "Memindahkan {{count}} item ke Sampah",
-    "localTrashFailed": "Tidak bisa dipindahkan ke tempat sampah",
-    "localRenameFailed": "Penggantian nama gagal",
-    "localCreateFailed": "Tidak dapat membuat item",
-    "goToParentFolder": "Buka folder induk",
-    "resizeSidebar": "Seret untuk mengubah ukuran bilah sisi (klik dua kali untuk mengatur ulang)",
-    "resizeLocalPane": "Seret untuk mengubah ukuran panel lokal (klik dua kali untuk mengatur ulang)",
-    "columns": "Kolom",
-    "columnsHint": "Klik kanan untuk memilih kolom",
-    "emptyFolder": "Folder ini kosong",
-    "searchFiles": "Cari file...",
-    "upload": "Mengunggah",
-    "selectHostToStart": "Pilih host untuk memulai manajemen file.",
-    "sshRequiredForFileManager": "Pengelola file memerlukan SSH. Host ini tidak mengaktifkan SSH.",
-    "failedToConnect": "Gagal terhubung ke SSH",
-    "failedToLoadDirectory": "Gagal memuat direktori",
-    "noSSHConnection": "Tidak ada koneksi SSH yang tersedia.",
-    "copy": "Menyalin",
-    "cut": "Memotong",
-    "paste": "Pasta",
-    "copyPath": "Salin Jalur",
-    "copyPaths": "Salin Jalur",
-    "delete": "Menghapus",
-    "properties": "Properti",
-    "refresh": "Menyegarkan",
-    "downloadFiles": "Unduh {{count}} file ke Browser",
-    "copyFiles": "Salin {{count}} item",
-    "cutFiles": "Potong {{count}} item",
-    "deleteFiles": "Hapus {{count}} item",
-    "filesCopiedToClipboard": "{{count}} item disalin ke papan klip",
-    "filesCutToClipboard": "{{count}} item dipotong ke papan klip",
-    "pathCopiedToClipboard": "Jalur disalin ke papan klip",
-    "pathsCopiedToClipboard": "{{count}} jalur disalin ke papan klip",
-    "failedToCopyPath": "Gagal menyalin jalur ke papan klip.",
-    "copyFolderLink": "Salin Tautan ke Folder",
-    "copyCurrentFolderLink": "Salin Tautan ke Folder Saat Ini",
-    "folderLinkCopied": "Tautan folder disalin ke papan klip",
-    "failedToCopyFolderLink": "Gagal menyalin tautan folder",
-    "movedItems": "Memindahkan {{count}} item",
-    "failedToDeleteItem": "Gagal menghapus item",
-    "itemRenamedSuccessfully": "{{type}} berhasil diganti namanya",
-    "failedToRenameItem": "Gagal mengganti nama item",
-    "download": "Unduh",
-    "openExternalEditor": "Buka secara eksternal",
-    "chooseExternalEditor": "Pilih editor eksternal",
-    "externalEditorSelected": "Editor eksternal terpilih",
-    "externalEditorDesktopOnly": "Editor eksternal hanya tersedia di aplikasi desktop.",
-    "externalEditorOpened": "Dibuka di editor eksternal. Menyimpan di sana akan mengunggah perubahan kembali ke server.",
-    "failedToOpenExternalEditor": "Gagal membuka editor eksternal",
-    "failedToSelectExternalEditor": "Gagal memilih editor eksternal",
-    "permissions": "Izin",
-    "size": "Ukuran",
-    "modified": "Dimodifikasi",
-    "path": "Jalur",
-    "confirmDelete": "Apakah Anda yakin ingin menghapus {{name}}?",
-    "permissionDenied": "Izin ditolak",
-    "serverError": "Kesalahan Server",
-    "fileSavedSuccessfully": "Berkas berhasil disimpan.",
-    "failedToSaveFile": "Gagal menyimpan file",
-    "confirmDeleteSingleItem": "Apakah Anda yakin ingin menghapus \"{{name}} \" secara permanen?",
-    "confirmDeleteMultipleItems": "Apakah Anda yakin ingin menghapus {{count}} item secara permanen?",
-    "confirmDeleteMultipleItemsWithFolders": "Apakah Anda yakin ingin menghapus {{count}} item secara permanen? Ini termasuk folder dan isinya.",
-    "confirmDeleteFolder": "Apakah Anda yakin ingin menghapus folder \"{{name}}\" beserta seluruh isinya secara permanen?",
-    "permanentDeleteWarning": "Tindakan ini tidak dapat dibatalkan. Item tersebut akan dihapus secara permanen dari server.",
-    "moveToTrashWarning": "Item tersebut akan dipindahkan ke Tempat Sampah Termix dan dapat dipulihkan sebelum masa penyimpanan berakhir.",
-    "itemsMovedToTrash": "{{count}} item dipindahkan ke Sampah",
-    "trash": "Sampah",
-    "trashDescription": "Item yang dihapus akan tetap tersimpan selama {{days}} hari di host ini.",
-    "trashLoadFailed": "Gagal memuat Sampah",
-    "trashEmpty": "Tempat sampah sudah kosong",
-    "trashRestore": "Memulihkan",
-    "trashRestored": "Dipulihkan {{name}}",
-    "trashRestoreFailed": "Gagal memulihkan item. Jalur asli mungkin sudah ada.",
-    "trashDeletePermanently": "Hapus secara permanen",
-    "trashDeleteConfirm": "Hapus secara permanen {{name}}? Tindakan ini tidak dapat dibatalkan.",
-    "trashPermanentlyDeleted": "Dihapus secara permanen {{name}}",
-    "trashDeleteFailed": "Gagal menghapus item secara permanen.",
-    "trashEmptyAction": "Kosongkan Tempat Sampah",
-    "trashEmptyConfirm": "Menghapus semua item di Sampah secara permanen? Tindakan ini tidak dapat dibatalkan.",
-    "trashEmptied": "Sampah sudah dikosongkan",
-    "trashRetention": "Pembersihan otomatis setelah (hari)",
-    "trashRetentionSaved": "Pembaruan tentang retensi sampah",
-    "trashRetentionFailed": "Gagal memperbarui pengaturan penyimpanan sampah.",
-    "trashUnavailableConfirm": "Item ini tidak dapat dipindahkan ke Sampah, biasanya karena berada di sistem file lain atau memerlukan hak akses administrator. Hapus saja secara permanen?",
-    "recent": "Terkini",
-    "pinned": "Disematkan",
-    "folderShortcuts": "Pintasan Folder",
-    "failedToReconnectSSH": "Gagal menyambungkan kembali sesi SSH.",
-    "openTerminalHere": "Buka Terminal di Sini",
-    "run": "Berlari",
-    "openTerminalInFolder": "Buka Terminal di Folder Ini",
-    "openTerminalInFileLocation": "Buka Terminal di Lokasi File",
-    "runningFile": "Berlari - {{file}}",
-    "onlyRunExecutableFiles": "Hanya dapat menjalankan file yang dapat dieksekusi.",
-    "directories": "Direktori",
-    "removedFromRecentFiles": "Menghapus \"{{name}}\" dari file terbaru",
-    "removeFailed": "Hapus yang gagal",
-    "unpinnedSuccessfully": "Pin \"{{name}}\" berhasil dilepas",
-    "unpinFailed": "Gagal membuka pin",
-    "removedShortcut": "Pintasan \"{{name}} \" telah dihapus",
-    "removeShortcutFailed": "Penghapusan pintasan gagal.",
-    "clearedAllRecentFiles": "Semua file terbaru telah dihapus.",
-    "clearFailed": "Hapus gagal",
-    "removeFromRecentFiles": "Hapus dari berkas terbaru",
-    "clearAllRecentFiles": "Hapus semua file terbaru",
-    "unpinFile": "Lepaskan pin file",
-    "removeShortcut": "Hapus pintasan",
-    "pinFile": "Pin file",
-    "addToShortcuts": "Tambahkan ke pintasan",
-    "pasteFailed": "Pasta gagal",
-    "noUndoableActions": "Tidak ada tindakan yang tidak dapat dibatalkan.",
-    "undoCopySuccess": "Batalkan operasi penyalinan: Menghapus {{count}} file yang disalin",
-    "undoCopyFailedDelete": "Pembatalan gagal: Tidak dapat menghapus file yang disalin.",
-    "undoCopyFailedNoInfo": "Pembatalan gagal: Informasi file yang disalin tidak ditemukan.",
-    "undoMoveSuccess": "Operasi pemindahan dibatalkan: {{count}} berkas dipindahkan kembali ke lokasi semula",
-    "undoMoveFailedMove": "Pembatalan gagal: Tidak dapat memindahkan file apa pun kembali.",
-    "undoMoveFailedNoInfo": "Pembatalan gagal: Informasi file yang dipindahkan tidak ditemukan.",
-    "undoDeleteNotSupported": "Operasi penghapusan tidak dapat dibatalkan: File telah dihapus secara permanen dari server.",
-    "undoTypeNotSupported": "Jenis operasi undo yang tidak didukung",
-    "undoOperationFailed": "Operasi pembatalan gagal",
-    "unknownError": "Kesalahan tidak dikenal",
-    "confirm": "Mengonfirmasi",
-    "find": "Menemukan...",
-    "replace": "Mengganti",
-    "downloadInstead": "Unduh sebagai gantinya",
-    "keyboardShortcuts": "Pintasan Keyboard",
-    "searchAndReplace": "Cari & Ganti",
-    "editing": "Pengeditan",
-    "search": "Mencari",
-    "findNext": "Temukan Selanjutnya",
-    "findPrevious": "Temukan Sebelumnya",
-    "save": "Menyimpan",
-    "selectAll": "Pilih Semua",
-    "undo": "Membuka",
-    "redo": "Mengulangi",
-    "moveLineUp": "Susunan Langkah",
-    "moveLineDown": "Geser Garis ke Bawah",
-    "toggleComment": "Alihkan Komentar",
-    "autoComplete": "Pelengkapan Otomatis",
-    "imageLoadError": "Gambar gagal dimuat",
-    "startTyping": "Mulai mengetik...",
-    "unknownSize": "Ukuran tidak diketahui",
-    "fileIsEmpty": "Berkas kosong",
-    "largeFileWarning": "Peringatan Ukuran File Besar",
-    "largeFileWarningDesc": "File ini berukuran {{size}} , yang dapat menyebabkan masalah kinerja saat dibuka sebagai teks.",
-    "fileNotFoundAndRemoved": "Berkas \"{{name}}\" tidak ditemukan dan telah dihapus dari berkas terbaru/yang disematkan",
-    "failedToLoadFile": "Gagal memuat file: {{error}}",
-    "serverErrorOccurred": "Terjadi kesalahan server. Silakan coba lagi nanti.",
-    "autoSaveFailed": "Penyimpanan otomatis gagal",
-    "fileAutoSaved": "Berkas tersimpan otomatis",
-    "moveFileFailed": "Gagal memindahkan {{name}}",
-    "moveOperationFailed": "Operasi pemindahan gagal",
-    "canOnlyCompareFiles": "Hanya dapat membandingkan dua file.",
-    "comparingFiles": "Membandingkan berkas: {{file1}} dan {{file2}}",
-    "dragFailed": "Operasi seret gagal",
-    "filePinnedSuccessfully": "Berkas \"{{name}}\" berhasil disematkan",
-    "pinFileFailed": "Gagal menyematkan file",
-    "fileUnpinnedSuccessfully": "Berkas \"{{name}}\" berhasil dilepas dari pin",
-    "unpinFileFailed": "Gagal melepaskan pin file",
-    "shortcutAddedSuccessfully": "Pintasan folder \"{{name}}\" berhasil ditambahkan",
-    "addShortcutFailed": "Gagal menambahkan pintasan",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} item berhasil",
-    "operationCompleted": "{{operation}} {{count}} item",
-    "downloadFileSuccess": "File {{name}} berhasil diunduh",
-    "downloadFileFailed": "Pengunduhan gagal",
-    "downloadingFile": "Mengunduh {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Pindah ke {{name}}",
-    "diffCompareWith": "Bandingkan perbedaan dengan {{name}}",
-    "dragOutsideToDownload": "Seret ke luar jendela untuk mengunduh ({{count}} file)",
-    "newFolderDefault": "Folder Baru",
-    "newFileDefault": "File Baru.txt",
-    "successfullyMovedItems": "Berhasil memindahkan {{count}} item ke {{target}}",
-    "move": "Bergerak",
-    "searchInFile": "Cari di dalam file (Ctrl+F)",
-    "showKeyboardShortcuts": "Tampilkan pintasan keyboard",
-    "decreaseFontSize": "Kurangi ukuran font",
-    "increaseFontSize": "Perbesar ukuran font",
-    "startWritingMarkdown": "Mulailah menulis konten markdown Anda...",
-    "loadingFileComparison": "Sedang memuat perbandingan file...",
-    "reload": "Muat Ulang",
-    "compare": "Membandingkan",
-    "sideBySide": "Berdampingan",
-    "inline": "Sejajar",
-    "fileComparison": "Perbandingan File: {{file1}} vs {{file2}}",
-    "fileTooLarge": "Ukuran file terlalu besar (> 10MB) dan tidak dapat dibuka sebagai teks karena alasan keamanan.",
-    "sshConnectionFailed": "Koneksi SSH gagal. Harap periksa koneksi Anda ke {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Gagal memuat file: {{error}}",
-    "connecting": "Menghubungkan...",
-    "connectedSuccessfully": "Terhubung berhasil",
-    "totpVerificationFailed": "Verifikasi TOTP gagal",
-    "browserSignInFailed": "Login gagal. Silakan coba lagi.",
-    "authenticationFailed": "Autentikasi gagal",
-    "incorrectPassphrase": "Kata sandi salah. Silakan coba lagi.",
-    "verificationCodePrompt": "Kode verifikasi:",
-    "changePermissions": "Ubah Izin",
-    "currentPermissions": "Izin Saat Ini",
-    "owner": "Pemilik",
-    "group": "Kelompok",
-    "others": "Yang lain",
-    "read": "Membaca",
-    "write": "Menulis",
-    "execute": "Menjalankan",
-    "permissionsChangedSuccessfully": "Izin berhasil diubah.",
-    "failedToChangePermissions": "Gagal mengubah izin",
-    "name": "Nama",
-    "sortByName": "Nama",
-    "sortByDate": "Tanggal Diubah",
-    "sortBySize": "Ukuran",
-    "ascending": "Naik",
-    "descending": "Menurun",
-    "root": "Akar",
-    "new": "Baru",
-    "sortBy": "Urutkan Berdasarkan",
-    "items": "Barang-barang",
-    "selected": "Terpilih",
-    "editor": "Editor",
-    "octal": "Oktal",
-    "storage": "Penyimpanan",
-    "disk": "Disk",
-    "used": "Digunakan",
-    "of": "dari",
-    "toggleSidebar": "Alihkan Sidebar",
-    "compactLayout": "Gunakan tata letak yang ringkas.",
-    "comfortableLayout": "Gunakan tata letak yang nyaman.",
-    "cannotLoadPdf": "Tidak dapat memuat PDF",
-    "pdfLoadError": "Terjadi kesalahan saat memuat file PDF ini.",
-    "loadingPdf": "Sedang memuat penampil PDF...",
-    "loadingPage": "Sedang memuat halaman...",
-    "cancel": "Membatalkan",
-    "copiedItems_one": "Item {{count}} disalin",
-    "copiedItems_other": "Item {{count}} disalin",
-    "deleteCopiedFileFailed": "Tidak dapat menghapus salinan {{name}}: {{error}}",
-    "dragMovedItems_one": "Item {{count}} dipindahkan ke {{target}}",
-    "dragMovedItems_other": "Memindahkan {{count}} item ke {{target}}",
-    "moveBackFileFailed": "Tidak dapat memindahkan {{name}} kembali: {{error}}",
-    "terminal": "Terminal: {{host}} ({{path}})",
-    "dragToDesktop": "Menyeret {{name}} ke desktop",
-    "dragFilesToDesktop": "Menyeret {{count}} berkas ke desktop",
-    "folderDragUnsupported": "Menyeret folder ke desktop belum didukung.",
-    "saveToDesktopFailed": "Penyimpanan gagal: {{error}}",
-    "dragFailedDetail": "Seret gagal: {{error}}",
-    "videoUnsupported": "Browser Anda tidak dapat memutar format video ini.",
-    "downloadToPlay": "Unduh untuk memainkannya di tempat lain",
-    "cannotPreviewType": "Tidak dapat melihat pratinjau tipe file ini.",
-    "cannotPreviewTypeHint": "Jenis file ini tidak memiliki pratinjau. Unduh untuk membukanya di aplikasi lain.",
-    "loadingFile": "Memuat file...",
-    "loadingImage": "Sedang memuat gambar...",
-    "loadingEditor": "Sedang memuat editor...",
-    "loadingPreview": "Memuat pratinjau...",
-    "loadingAudio": "Memuat pemutar audio...",
-    "emptyPreview": "Belum ada yang bisa dipratinjau...",
-    "revert": "Kembali",
-    "openAsText": "Buka sebagai Teks",
-    "confirmOpenAsText": "Apakah Anda ingin terus membuka file ini sebagai teks? Ini dapat memperlambat browser Anda."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "Mentransfer file antara dua host SSH.",
-    "sourceServer": "Server Sumber",
-    "destinationServer": "Server Tujuan",
-    "selectHost": "Pilih tuan rumah",
-    "noHostSelected": "Tidak ada pembawa acara yang dipilih.",
-    "move": "Bergerak",
-    "copy": "Menyalin",
-    "upload": "Mengunggah",
-    "itemsSelected": "{{count}} item dipilih",
-    "itemsSelected_other": "{{count}} item terpilih",
-    "ready": "Siap",
-    "loadingHosts": "Memuat host...",
-    "name": "Nama",
-    "modified": "Dimodifikasi",
-    "size": "Ukuran",
-    "noFiles": "Tidak ada berkas",
-    "open": "Membuka",
-    "up": "Ke atas",
-    "refresh": "Menyegarkan",
-    "copyToTarget": "Salin ke Direktori Target",
-    "rename": "Ganti nama",
-    "delete": "Menghapus",
-    "editPermissions": "Edit Izin",
-    "createNewFolder": "Buat Folder Baru",
-    "deleteSelectedItems": "Hapus Item yang Dipilih",
-    "deleteConfirm": "Hapus {{count}} item yang dipilih?",
-    "deleteConfirm_other": "Hapus {{count}} item yang dipilih?",
-    "cancel": "Membatalkan",
-    "save": "Menyimpan",
-    "folderCreated": "Folder telah dibuat.",
-    "itemRenamed": "Item diganti namanya",
-    "actionFailed": "Tindakan gagal",
-    "itemsDeleted": "{{count}} item dihapus",
-    "itemsDeleted_other": "{{count}} item dihapus",
-    "deleteFailed": "Penghapusan gagal",
-    "permissionsUpdated": "Izin telah diperbarui.",
-    "noRemoteSessionConnected": "Tidak ada sesi jarak jauh yang terhubung.",
-    "failedToListFiles": "Gagal menampilkan daftar file.",
-    "failedToRefresh": "Gagal memperbarui",
-    "destinationInsideSource": "Tujuan tidak boleh berada di dalam jalur sumber yang dipilih.",
-    "sameHostNoOp": "Sumber dan tujuan berada di folder yang sama."
-  },
-  "hosts": {
-    "fileManager": "Pengelola File",
-    "fileManagerUrlCopied": "URL Pengelola File disalin",
-    "copyFileManagerUrlAction": "Salin URL Pengelola File",
-    "docsLink": "Lihat dokumen",
-    "hostNotFound": "Host tidak ditemukan",
-    "loadingHost": "Memuat host..."
-  },
-  "onboarding": {
-    "feature_files": "Pengelola berkas",
-    "feature_files_desc": "Jelajahi, unggah, unduh, dan edit file melalui SFTP tanpa meninggalkan aplikasi."
-  },
-  "terminal": {
-    "runTitle": "Menjalankan {{command}} - {{host}}",
-    "terminalTitle": "Terminal - {{host}}",
-    "terminalWithPath": "Terminal - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Telusuri folder tujuan",
-    "browsePathError": "Tidak dapat membuka jalur ini pada host tujuan.",
-    "browsePathWillBeCreated": "Folder ini belum ada. Folder ini akan dibuat saat transfer dimulai.",
-    "cancel": "Membatalkan",
-    "cleanupDestFiles": "Tujuan pembersihan",
-    "cleanupDestFilesError": "Pembersihan gagal",
-    "cleanupDestFilesNothing": "Tidak ada yang perlu dibersihkan di tempat tujuan.",
-    "cleanupDestFilesPartial": "Beberapa file parsial tidak dapat dihapus.",
-    "cleanupDestFilesSuccess": "File parsial telah dihapus dari tujuan.",
-    "confirmCopy": "Menyalin",
-    "confirmMove": "Bergerak",
-    "copyFolderToHost": "Salin folder ke host…",
-    "copyItemsToHost": "Salin {{count}} item ke host…",
-    "copyToHost": "Salin ke host…",
-    "destinationPath": "Jalur tujuan",
-    "destMustBeDirectory": "Tujuan harus berupa direktori untuk transfer multi-item.",
-    "goUp": "Naik",
-    "hostAuthRequired": "Diperlukan autentikasi. Buka File Manager di host ini terlebih dahulu.",
-    "hostConnecting": "Menghubungkan…",
-    "hostConnectionFailed": "Koneksi gagal",
-    "hostDisconnected": "Tidak terhubung",
-    "hostReady": "Siap",
-    "itemsSummary": "{{count}} item",
-    "jumpHostLimitation": "Kedua host harus dapat dijangkau dari server Termix. Perutean langsung antar host tidak didukung.",
-    "methodAuto": "Mobil",
-    "methodAutoHint": "Memilih antara tar atau SFTP per-file berdasarkan jumlah file, ukuran, dan kemampuan kompresi. File tunggal selalu menggunakan SFTP streaming.",
-    "methodItemSftp": "SFTP per file",
-    "methodItemSftpHint": "Transfer setiap file secara individual melalui SFTP. Berfungsi di semua host termasuk Windows.",
-    "methodItemSftpLimitation": "Setiap berkas menggunakan aliran SFTP yang sama sebagai salinan berkas tunggal, satu demi satu. Kemajuan digabungkan di semua berkas, sehingga bilah kemajuan bergerak lambat selama pemrosesan berkas berukuran besar.",
-    "methodLabel": "Metode transfer",
-    "methodPreviewError": "Metode transfer tidak dapat dipratinjau. Server akan tetap memilih metode saat Anda memulai.",
-    "methodPreviewLoading": "Metode perhitungan transfer…",
-    "methodPreviewScanSummary": "{{fileCount}} berkas, {{totalSize}} total (dipindai pada host sumber).",
-    "methodPreviewWillUseItemSftp": "Akan menggunakan: SFTP per file",
-    "methodPreviewWillUseTar": "Akan menggunakan: Arsip Tar",
-    "methodReason": {
-      "user_item_sftp": "Anda memilih SFTP per-file.",
-      "user_tar": "Anda memilih arsip tar.",
-      "tar_unavailable": "Tar tidak tersedia di salah satu atau kedua host, jadi SFTP per-file akan digunakan sebagai gantinya.",
-      "windows_host": "Karena menggunakan sistem operasi Windows, maka tar tidak digunakan.",
-      "auto_multi_large": "Auto: beberapa file termasuk file besar ({{largestSize}}) dengan data yang dapat dikompresi. Tar menggabungkannya menjadi satu transfer.",
-      "auto_single_large_in_archive": "Otomatis: satu file besar ({{largestSize}}) dalam set ini, jadi SFTP per file.",
-      "auto_many_incompressible": "Otomatis: sebagian besar data tidak dapat dikompresi, jadi SFTP per file.",
-      "auto_many_files": "Auto: banyak file ({{fileCount}}), tar mengurangi overhead per file.",
-      "auto_default": "Otomatis: SFTP per-file untuk set ini."
-    },
-    "methodTar": "Arsip Tar",
-    "methodTarHint": "Kompres di sumber, transfer satu arsip, ekstrak di tujuan. Membutuhkan tar di kedua host Unix.",
-    "metricsCompress": "Kompres pada sumber: {{duration}}",
-    "metricsExtract": "Ekstrak pada tujuan: {{duration}}",
-    "metricsPrepare": "Siapkan tujuan: {{duration}}",
-    "metricsRouteBenchmark": "Pemeriksaan rute: langsung {{direct}}, relai {{relay}}",
-    "metricsSourceDelete": "Hapus dari sumber: {{duration}}",
-    "metricsTotal": "Total: {{duration}}",
-    "metricsTransfer": "Ujung ke ujung: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 terverifikasi: {{duration}}",
-    "moveFolderToHost": "Pindahkan folder ke host…",
-    "moveItemsToHost": "Pindahkan {{count}} item ke host…",
-    "moveToHost": "Pindah ke host…",
-    "noHostsConnected": "Tidak ada penyedia pengelola file lain yang tersedia.",
-    "noHostsConnectedHint": "Tambahkan host SSH lain dengan File Manager diaktifkan di Host Manager.",
-    "parallelSegmentsHint": "File berukuran besar dibagi menjadi bagian-bagian berukuran 256 MB. Beberapa jalur menggunakan koneksi terpisah (seperti memulai beberapa transfer) untuk throughput total yang lebih tinggi.",
-    "parallelSegmentsLabel": "Jalur transfer paralel",
-    "parallelSegmentsOption": "{{count}} jalur",
-    "progressBenchmarking": "Memilih rute transfer tercepat…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Membatalkan",
-    "progressCancelling": "Membatalkan…",
-    "progressCompressing": "Kompresi pada host sumber…",
-    "progressExtracting": "Mengekstraksi pada tujuan…",
-    "progressItems": "berkas {{current}} / {{total}}",
-    "progressReconnecting": "Menghubungkan kembali…",
-    "progressStalled": "Terhenti",
-    "progressTotalSpeed": "{{speed}} total ({{lanes}} lajur)",
-    "progressTransferring": "Mentransfer data…",
-    "progressTransferringItems": "Mentransfer berkas ({{current}} dari {{total}})…",
-    "progressVerifying": "Memverifikasi integritas file…",
-    "recentDestinations": "Destinasi terkini",
-    "resumedHint": "Terhubung kembali ke transfer aktif yang dimulai di jendela lain.",
-    "retryTransfer": "Mencoba kembali",
-    "retryTransferError": "Percobaan ulang gagal.",
-    "selectDestinationHost": "Pilih host tujuan",
-    "transferCancelled": "Transfer dibatalkan",
-    "transferCancelledCopyHint": "File yang tidak lengkap mungkin masih tersisa di tujuan.",
-    "transferCancelledMoveHint": "Sebagian berkas mungkin masih tersisa di tujuan. Berkas sumber tidak dihapus.",
-    "transferError": "Transfer gagal",
-    "transferFailedRetryHint": "Sebagian data tersimpan di tujuan. Upaya pengulangan akan dilanjutkan saat koneksi kembali pulih.",
-    "transferPartialHint": "Tidak dapat mentransfer: {{paths}}",
-    "transferSuccess": "Transfer selesai",
-    "metricsHopSourceRead": "Sumber → server: {{throughput}}",
-    "metricsHopDestSftpWrite": "Server → tujuan (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Server → tujuan (lokal): {{throughput}}"
-  },
-  "plugin": {
-    "name": "Pengelola File"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/it_IT.json b/plugins/file-manager/locales/translated/it_IT.json
deleted file mode 100644
index 5cde2633a..000000000
--- a/plugins/file-manager/locales/translated/it_IT.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "File",
-    "sftp": "SFTP",
-    "openFileManager": "Apri Gestione file"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilizzare il gestore file",
-      "description": "Sfoglia, modifica e trasferisci file tramite SFTP."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Abilita File Manager",
-        "description": "È possibile visualizzare e modificare i file su questo host tramite SFTP."
-      },
-      "defaultPath": {
-        "label": "Percorso predefinito"
-      },
-      "scpLegacy": {
-        "label": "Modalità SCP legacy"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Trasferimenti simultanei di file",
-        "description": "Quanti file il gestore locale/remoto affiancato carica o scarica contemporaneamente. Riduci questo valore se il tuo server limita i canali SFTP."
-      },
-      "confirmBeforeTrash": {
-        "label": "Conferma prima di spostare i file nel cestino",
-        "description": "Chiedi conferma prima di spostare i file remoti nel cestino. Anche la cancellazione definitiva richiede conferma."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Gestore file"
-  },
-  "fileManager": {
-    "noHostSelected": "Nessun host selezionato",
-    "initializingEditor": "Inizializzazione editor...",
-    "file": "File",
-    "folder": "Cartella",
-    "uploadFile": "Carica file",
-    "downloadFile": "Scarica",
-    "extractArchive": "Estrai archivio",
-    "extractingArchive": "Estrazione di {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} estratto con successo",
-    "extractFailed": "Estrazione non riuscita",
-    "compressFile": "Comprimi file",
-    "compressFiles": "Comprimi file",
-    "compressFilesDesc": "Comprimi {{count}} elementi in un archivio",
-    "archiveName": "Nome archivio",
-    "enterArchiveName": "Inserisci nome archivio...",
-    "compressionFormat": "Formato compressione",
-    "selectedFiles": "File selezionati",
-    "andMoreFiles": "e altri {{count}}...",
-    "compress": "Comprimi",
-    "compressingFiles": "Comprimendo {{count}} elementi in {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} creato con successo",
-    "compressFailed": "Compressione non riuscita",
-    "edit": "Modifica",
-    "preview": "Anteprima",
-    "previous": "Precedente",
-    "next": "Successivo",
-    "pageXOfY": "Pagina {{current}} di {{total}}",
-    "zoomOut": "Riduci zoom",
-    "zoomIn": "Aumenta zoom",
-    "newFile": "Nuovo file",
-    "newFolder": "Nuova cartella",
-    "rename": "Rinomina",
-    "uploading": "Caricamento in corso...",
-    "uploadingFile": "Caricamento di {{name}}...",
-    "uploadingChunk": "Caricamento di {{name}}: {{percent}}% (parte {{chunk}} di {{total}})",
-    "fileName": "Nome file",
-    "folderName": "Nome cartella",
-    "fileUploadedSuccessfully": "File \"{{name}}\" caricato con successo",
-    "failedToUploadFile": "Caricamento file non riuscito",
-    "uploadingFolderFiles": "Caricamento del/dei file {{count}} in corso...",
-    "uploadedFolderFiles": "File caricati con successo {{count}}",
-    "uploadedFolderPartial": "Caricamento del/i file {{uploaded}} non riuscito/i {{failed}}",
-    "fileDownloadedSuccessfully": "File \"{{name}}\" scaricato con successo",
-    "failedToDownloadFile": "Scaricamento file non riuscito",
-    "fileCreatedSuccessfully": "File \"{{name}}\" creato con successo",
-    "folderCreatedSuccessfully": "Cartella \"{{name}}\" creata con successo",
-    "failedToCreateItem": "Creazione elemento non riuscita",
-    "operationFailed": "Operazione {{operation}} non riuscita per {{name}}: {{error}}",
-    "failedToResolveSymlink": "Risoluzione del collegamento simbolico non riuscita",
-    "itemsDeletedSuccessfully": "{{count}} elementi eliminati con successo",
-    "failedToDeleteItems": "Eliminazione elementi non riuscita",
-    "sudoPasswordRequired": "Password amministratore richiesta",
-    "enterSudoPassword": "Inserisci la password sudo per continuare l'operazione",
-    "sudoPassword": "Password sudo",
-    "sudoOperationFailed": "Operazione sudo non riuscita",
-    "sudoAuthFailed": "Autenticazione sudo non riuscita",
-    "dragFilesToUpload": "Trascina qui i file per caricarli",
-    "dropToUploadHere": "Trascina qui per caricare",
-    "dropToDownloadHere": "Scarica qui",
-    "localFiles": "Locale",
-    "showLocalFiles": "Mostra i file locali (vista divisa)",
-    "hideLocalFiles": "Nascondi i file locali",
-    "localHome": "Cartella Home",
-    "localPathPlaceholder": "Percorso della cartella locale",
-    "localShowHidden": "Mostra i file nascosti",
-    "localHideHidden": "Nascondi i file nascosti",
-    "localRevealInFileManager": "Mostra nel gestore file di sistema",
-    "localCannotOpenFolder": "Impossibile aprire la cartella",
-    "localItemCount": "{{count}} elementi",
-    "localSelectedCount": "{{count}} selezionati",
-    "back": "Indietro",
-    "forward": "Inoltrare",
-    "up": "Su",
-    "kind": "Tipo",
-    "localUploadingProgress": "Caricamento di {{current}} di {{total}}",
-    "localDownloadingProgress": "Download di {{current}} di {{total}}",
-    "localTransferInFlight": "{{count}} subito",
-    "localPreparingDownload": "Download in corso...",
-    "localTransferCancelled": "Trasferimento annullato",
-    "localNothingToTransfer": "Nulla da trasferire",
-    "localUploadComplete": "Caricato/i file {{count}}",
-    "localUploadFailed": "Caricamento non riuscito",
-    "localUploadPartial": "Caricamento del/i file {{done}} non riuscito/i {{failed}}",
-    "localDownloadComplete": "Scaricato il/i file {{count}}",
-    "localDownloadFailed": "Download non riuscito",
-    "localDownloadPartial": "Scaricamento del/dei file {{done}} , {{failed}} non riuscito",
-    "localReplaceExistingPrompt": "{{count}} L'elemento/gli elementi esistono già in questa cartella. Sostituirli?",
-    "localReplace": "Sostituisci",
-    "localSkipExisting": "Saltare",
-    "localSkippedExisting": "Saltato {{count}} elemento/i esistente/i",
-    "localUnsafeNamesSkipped": "Saltati {{count}} elementi i cui nomi non possono essere utilizzati su questo computer",
-    "localOpen": "Apri",
-    "localOpenFolder": "Apri la cartella",
-    "localUploadToRemote": "Carica sul server",
-    "localUploadToRemoteMany": "Carica {{count}} elementi sul server",
-    "localMoveToTrash": "Sposta nel Cestino",
-    "localMoveToTrashMany": "Sposta {{count}} elementi nel Cestino",
-    "localTrashConfirmSingle": "Spostare \"{{name}}\" nel Cestino?",
-    "localTrashConfirmFolder": "Spostare la cartella \"{{name}}\" e tutto il suo contenuto nel Cestino?",
-    "localTrashConfirmMany": "Spostare {{count}} elementi nel Cestino?",
-    "localTrashed": "Spostati {{count}} elementi nel Cestino",
-    "localTrashFailed": "Impossibile spostare nel Cestino",
-    "localRenameFailed": "Rinominare non riuscito",
-    "localCreateFailed": "Impossibile creare l'elemento",
-    "goToParentFolder": "Vai alla cartella principale",
-    "resizeSidebar": "Trascina per ridimensionare la barra laterale (doppio clic per ripristinare le dimensioni originali)",
-    "resizeLocalPane": "Trascina per ridimensionare il riquadro locale (doppio clic per ripristinare le dimensioni originali)",
-    "columns": "Colonne",
-    "columnsHint": "Fare clic con il pulsante destro del mouse per scegliere le colonne",
-    "emptyFolder": "Questa cartella è vuota",
-    "searchFiles": "Cerca file...",
-    "upload": "Carica",
-    "selectHostToStart": "Seleziona un host per avviare la gestione file",
-    "sshRequiredForFileManager": "Il gestore file richiede SSH. Questo host non ha SSH abilitato.",
-    "failedToConnect": "Connessione a SSH non riuscita",
-    "failedToLoadDirectory": "Caricamento directory non riuscito",
-    "noSSHConnection": "Nessuna connessione SSH disponibile",
-    "copy": "Copia",
-    "cut": "Taglia",
-    "paste": "Incolla",
-    "copyPath": "Copia percorso",
-    "copyPaths": "Copia percorsi",
-    "delete": "Elimina",
-    "properties": "Proprietà",
-    "refresh": "Aggiorna",
-    "downloadFiles": "Scarica {{count}} file nel browser",
-    "copyFiles": "Copia {{count}} elementi",
-    "cutFiles": "Taglia {{count}} elementi",
-    "deleteFiles": "Elimina {{count}} elementi",
-    "filesCopiedToClipboard": "{{count}} elementi copiati negli appunti",
-    "filesCutToClipboard": "{{count}} elementi tagliati negli appunti",
-    "pathCopiedToClipboard": "Percorso copiato negli appunti",
-    "pathsCopiedToClipboard": "{{count}} percorsi copiati negli appunti",
-    "failedToCopyPath": "Impossibile copiare il percorso negli appunti",
-    "copyFolderLink": "Copia collegamento alla cartella",
-    "copyCurrentFolderLink": "Copia collegamento alla cartella corrente",
-    "folderLinkCopied": "Collegamento alla cartella copiato negli appunti",
-    "failedToCopyFolderLink": "Impossibile copiare il collegamento alla cartella",
-    "movedItems": "Spostati {{count}} elementi",
-    "failedToDeleteItem": "Impossibile eliminare l'elemento",
-    "itemRenamedSuccessfully": "{{type}} rinominato con successo",
-    "failedToRenameItem": "Impossibile rinominare l'elemento",
-    "download": "Scarica",
-    "openExternalEditor": "Apri esternamente",
-    "chooseExternalEditor": "Scegli editor esterno",
-    "externalEditorSelected": "Editor esterno selezionato",
-    "externalEditorDesktopOnly": "L'editor esterno è disponibile solo nell'app desktop",
-    "externalEditorOpened": "Aperto nell'editor esterno. Salvando lì, le modifiche verranno caricate nuovamente sul server.",
-    "failedToOpenExternalEditor": "Impossibile aprire l'editor esterno",
-    "failedToSelectExternalEditor": "Impossibile selezionare l'editor esterno",
-    "permissions": "Permessi",
-    "size": "Dimensione",
-    "modified": "Modificato",
-    "path": "Percorso",
-    "confirmDelete": "Sei sicuro di voler eliminare {{name}}?",
-    "permissionDenied": "Permesso negato",
-    "serverError": "Errore del server",
-    "fileSavedSuccessfully": "File salvato con successo",
-    "failedToSaveFile": "Impossibile salvare il file",
-    "confirmDeleteSingleItem": "Sei sicuro di voler eliminare definitivamente \"{{name}}\"?",
-    "confirmDeleteMultipleItems": "Sei sicuro di voler eliminare definitivamente {{count}} elementi?",
-    "confirmDeleteMultipleItemsWithFolders": "Sei sicuro di voler eliminare definitivamente {{count}} elementi? Sono incluse cartelle e il loro contenuto.",
-    "confirmDeleteFolder": "Sei sicuro di voler eliminare definitivamente la cartella \"{{name}}\" e tutto il suo contenuto?",
-    "permanentDeleteWarning": "Questa azione non può essere annullata. Gli elementi verranno eliminati definitivamente dal server.",
-    "moveToTrashWarning": "L'articolo o gli articoli verranno spostati nel Cestino di Termix e potranno essere ripristinati prima della scadenza del periodo di conservazione.",
-    "itemsMovedToTrash": "{{count}} elemento/i spostato/i nel Cestino",
-    "trash": "Spazzatura",
-    "trashDescription": "Gli elementi eliminati vengono conservati per {{days}} giorni su questo host.",
-    "trashLoadFailed": "Impossibile caricare il Cestino",
-    "trashEmpty": "Il cestino è vuoto",
-    "trashRestore": "Ripristina",
-    "trashRestored": "Ripristinato {{name}}",
-    "trashRestoreFailed": "Impossibile ripristinare l'elemento. Il percorso originale potrebbe già esistere.",
-    "trashDeletePermanently": "Eliminare definitivamente",
-    "trashDeleteConfirm": "Eliminare definitivamente {{name}}? Questa operazione non può essere annullata.",
-    "trashPermanentlyDeleted": "Eliminato definitivamente {{name}}",
-    "trashDeleteFailed": "Impossibile eliminare definitivamente l'elemento",
-    "trashEmptyAction": "Svuotare il cestino",
-    "trashEmptyConfirm": "Eliminare definitivamente tutti gli elementi nel Cestino? Questa operazione non può essere annullata.",
-    "trashEmptied": "Cestino svuotato",
-    "trashRetention": "Pulizia automatica dopo (giorni)",
-    "trashRetentionSaved": "Gestione dei rifiuti aggiornata",
-    "trashRetentionFailed": "Impossibile aggiornare la conservazione dei rifiuti",
-    "trashUnavailableConfirm": "Questo elemento non può essere spostato nel Cestino, solitamente perché si trova su un altro file system o richiede privilegi elevati. Vuoi eliminarlo definitivamente?",
-    "recent": "Recenti",
-    "pinned": "Fissati",
-    "folderShortcuts": "Collegamenti alle cartelle",
-    "failedToReconnectSSH": "Impossibile riconnettersi alla sessione SSH",
-    "openTerminalHere": "Apri terminale qui",
-    "run": "Esegui",
-    "openTerminalInFolder": "Apri terminale in questa cartella",
-    "openTerminalInFileLocation": "Apri terminale nella posizione del file",
-    "runningFile": "In esecuzione - {{file}}",
-    "onlyRunExecutableFiles": "È possibile eseguire solo file eseguibili",
-    "directories": "Directory",
-    "removedFromRecentFiles": "Rimosso \"{{name}}\" dai file recenti",
-    "removeFailed": "Rimozione non riuscita",
-    "unpinnedSuccessfully": "Rimosso \"{{name}}\" dai preferiti con successo",
-    "unpinFailed": "Rimozione dai preferiti non riuscita",
-    "removedShortcut": "Rimosso collegamento \"{{name}}\"",
-    "removeShortcutFailed": "Rimozione collegamento non riuscita",
-    "clearedAllRecentFiles": "Cancellati tutti i file recenti",
-    "clearFailed": "Cancellazione non riuscita",
-    "removeFromRecentFiles": "Rimuovi dai file recenti",
-    "clearAllRecentFiles": "Cancella tutti i file recenti",
-    "unpinFile": "Rimuovi dai preferiti",
-    "removeShortcut": "Rimuovi collegamento",
-    "pinFile": "Aggiungi ai preferiti",
-    "addToShortcuts": "Aggiungi ai collegamenti",
-    "pasteFailed": "Incolla non riuscito",
-    "noUndoableActions": "Nessuna azione annullabile",
-    "undoCopySuccess": "Operazione di copia annullata: eliminati {{count}} file copiati",
-    "undoCopyFailedDelete": "Annullamento non riuscito: impossibile eliminare i file copiati",
-    "undoCopyFailedNoInfo": "Annullamento non riuscito: impossibile trovare informazioni sui file copiati",
-    "undoMoveSuccess": "Operazione di spostamento annullata: riportati {{count}} file nella posizione originale",
-    "undoMoveFailedMove": "Annullamento non riuscito: impossibile riportare i file indietro",
-    "undoMoveFailedNoInfo": "Annullamento non riuscito: impossibile trovare informazioni sui file spostati",
-    "undoDeleteNotSupported": "L'operazione di eliminazione non può essere annullata: i file sono stati eliminati permanentemente dal server",
-    "undoTypeNotSupported": "Tipo di operazione di annullamento non supportato",
-    "undoOperationFailed": "Operazione di annullamento non riuscita",
-    "unknownError": "Errore sconosciuto",
-    "confirm": "Conferma",
-    "find": "Trova...",
-    "replace": "Sostituisci",
-    "downloadInstead": "Scarica invece",
-    "keyboardShortcuts": "Scorciatoie da tastiera",
-    "searchAndReplace": "Cerca e sostituisci",
-    "editing": "Modifica",
-    "search": "Cerca",
-    "findNext": "Trova successivo",
-    "findPrevious": "Trova precedente",
-    "save": "Salva",
-    "selectAll": "Seleziona tutto",
-    "undo": "Annulla",
-    "redo": "Ripristina",
-    "moveLineUp": "Sposta riga su",
-    "moveLineDown": "Sposta riga giù",
-    "toggleComment": "Commenta/Decommenta",
-    "autoComplete": "Completamento automatico",
-    "imageLoadError": "Caricamento immagine non riuscito",
-    "startTyping": "Inizia a digitare...",
-    "unknownSize": "Dimensione sconosciuta",
-    "fileIsEmpty": "Il file è vuoto",
-    "largeFileWarning": "Avviso file di grandi dimensioni",
-    "largeFileWarningDesc": "Questo file ha una dimensione di {{size}}, che potrebbe causare problemi di prestazioni se aperto come testo.",
-    "fileNotFoundAndRemoved": "File \"{{name}}\" non trovato ed è stato rimosso dai file recenti/fissati",
-    "failedToLoadFile": "Caricamento del file non riuscito: {{error}}",
-    "serverErrorOccurred": "Si è verificato un errore del server. Riprova più tardi.",
-    "autoSaveFailed": "Salvataggio automatico non riuscito",
-    "fileAutoSaved": "File salvato automaticamente",
-    "moveFileFailed": "Spostamento di {{name}} non riuscito",
-    "moveOperationFailed": "Operazione di spostamento non riuscita",
-    "canOnlyCompareFiles": "È possibile confrontare solo due file",
-    "comparingFiles": "Confronto dei file: {{file1}} e {{file2}}",
-    "dragFailed": "Operazione di trascinamento non riuscita",
-    "filePinnedSuccessfully": "File \"{{name}}\" fissato con successo",
-    "pinFileFailed": "Fissaggio del file non riuscito",
-    "fileUnpinnedSuccessfully": "File \"{{name}}\" rimosso dai fissati con successo",
-    "unpinFileFailed": "Impossibile rimuovere il file fissato",
-    "shortcutAddedSuccessfully": "Collegamento alla cartella \"{{name}}\" aggiunto con successo",
-    "addShortcutFailed": "Impossibile aggiungere il collegamento",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} elementi con successo",
-    "operationCompleted": "{{operation}} {{count}} elementi",
-    "downloadFileSuccess": "File {{name}} scaricato con successo",
-    "downloadFileFailed": "Download non riuscito",
-    "downloadingFile": "Download in corso {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Sposta in {{name}}",
-    "diffCompareWith": "Diff con {{name}}",
-    "dragOutsideToDownload": "Trascina fuori dalla finestra per scaricare ({{count}} file)",
-    "newFolderDefault": "NuovaCartella",
-    "newFileDefault": "NuovoFile.txt",
-    "successfullyMovedItems": "{{count}} elementi spostati con successo in {{target}}",
-    "move": "Sposta",
-    "searchInFile": "Cerca nel file (Ctrl+F)",
-    "showKeyboardShortcuts": "Mostra scorciatoie da tastiera",
-    "decreaseFontSize": "Riduci dimensione carattere",
-    "increaseFontSize": "Aumenta dimensione carattere",
-    "startWritingMarkdown": "Inizia a scrivere il tuo contenuto markdown...",
-    "loadingFileComparison": "Caricamento confronto file in corso...",
-    "reload": "Ricarica",
-    "compare": "Confronta",
-    "sideBySide": "Fianco a fianco",
-    "inline": "In linea",
-    "fileComparison": "Confronto file: {{file1}} vs {{file2}}",
-    "fileTooLarge": "Il file è troppo grande (> 10 MB) e non può essere aperto come testo per motivi di sicurezza.",
-    "sshConnectionFailed": "Connessione SSH non riuscita. Controlla la connessione a {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Caricamento del file non riuscito: {{error}}",
-    "connecting": "Connessione in corso...",
-    "connectedSuccessfully": "Connesso con successo",
-    "totpVerificationFailed": "Verifica TOTP non riuscita",
-    "browserSignInFailed": "Accesso non riuscito. Riprova.",
-    "authenticationFailed": "Autenticazione non riuscita",
-    "incorrectPassphrase": "Frase di accesso non corretta. Riprova.",
-    "verificationCodePrompt": "Codice di verifica:",
-    "changePermissions": "Modifica permessi",
-    "currentPermissions": "Permessi attuali",
-    "owner": "Proprietario",
-    "group": "Gruppo",
-    "others": "Altri",
-    "read": "Lettura",
-    "write": "Scrittura",
-    "execute": "Esecuzione",
-    "permissionsChangedSuccessfully": "Permessi modificati con successo",
-    "failedToChangePermissions": "Modifica dei permessi non riuscita",
-    "name": "Nome",
-    "sortByName": "Nome",
-    "sortByDate": "Data di modifica",
-    "sortBySize": "Dimensione",
-    "ascending": "Crescente",
-    "descending": "Decrescente",
-    "root": "Radice",
-    "new": "Nuovo",
-    "sortBy": "Ordina per",
-    "items": "Elementi",
-    "selected": "Selezionati",
-    "editor": "Editor",
-    "octal": "Ottale",
-    "storage": "Storage",
-    "disk": "Disco",
-    "used": "Usato",
-    "of": "di",
-    "toggleSidebar": "Mostra/Nascondi barra laterale",
-    "compactLayout": "Utilizzare un layout compatto",
-    "comfortableLayout": "Utilizzare una disposizione comoda",
-    "cannotLoadPdf": "Impossibile caricare il PDF",
-    "pdfLoadError": "Si è verificato un errore durante il caricamento del file PDF.",
-    "loadingPdf": "Caricamento del visualizzatore PDF in corso...",
-    "loadingPage": "Caricamento pagina in corso...",
-    "cancel": "Annulla",
-    "copiedItems_one": "Elemento copiato {{count}}",
-    "copiedItems_other": "Elementi copiati {{count}}",
-    "deleteCopiedFileFailed": "Impossibile eliminare la copia di {{name}}: {{error}}",
-    "dragMovedItems_one": "Elemento {{count}} spostato in {{target}}",
-    "dragMovedItems_other": "Spostati {{count}} elementi in {{target}}",
-    "moveBackFileFailed": "Impossibile spostare {{name}} indietro: {{error}}",
-    "terminal": "Terminale: {{host}} ({{path}})",
-    "dragToDesktop": "Trascinando {{name}} sul desktop",
-    "dragFilesToDesktop": "Trascinamento dei file {{count}} sul desktop",
-    "folderDragUnsupported": "Il trascinamento delle cartelle sul desktop non è ancora supportato.",
-    "saveToDesktopFailed": "Salvataggio non riuscito: {{error}}",
-    "dragFailedDetail": "Trascinamento non riuscito: {{error}}",
-    "videoUnsupported": "Il tuo browser non è in grado di riprodurre questo formato video.",
-    "downloadToPlay": "Scaricalo per riprodurlo altrove",
-    "cannotPreviewType": "Impossibile visualizzare l'anteprima di questo tipo di file",
-    "cannotPreviewTypeHint": "Questo tipo di file non ha un'anteprima. Scaricalo per aprirlo in un'altra applicazione.",
-    "loadingFile": "Caricamento del file in corso...",
-    "loadingImage": "Caricamento immagine...",
-    "loadingEditor": "Caricamento dell'editor in corso...",
-    "loadingPreview": "Caricamento anteprima...",
-    "loadingAudio": "Caricamento del lettore audio in corso...",
-    "emptyPreview": "Ancora niente da mostrare in anteprima...",
-    "revert": "Ripristina",
-    "openAsText": "Apri come testo",
-    "confirmOpenAsText": "Desideri continuare ad aprire questo file come testo? Ciò potrebbe rallentare il browser."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "Trasferire file tra due host SSH.",
-    "sourceServer": "Server sorgente",
-    "destinationServer": "Server di destinazione",
-    "selectHost": "Seleziona l'host",
-    "noHostSelected": "Nessun host selezionato",
-    "move": "Sposta",
-    "copy": "Copia",
-    "upload": "Carica",
-    "itemsSelected": "{{count}} elemento selezionato",
-    "itemsSelected_other": "{{count}} elementi selezionati",
-    "ready": "Pronto",
-    "loadingHosts": "Caricamento host...",
-    "name": "Nome",
-    "modified": "Modificato",
-    "size": "Dimensione",
-    "noFiles": "Nessun file",
-    "open": "Apri",
-    "up": "Su",
-    "refresh": "Aggiorna",
-    "copyToTarget": "Copia nella directory di destinazione",
-    "rename": "Rinomina",
-    "delete": "Elimina",
-    "editPermissions": "Modifica autorizzazioni",
-    "createNewFolder": "Crea una nuova cartella",
-    "deleteSelectedItems": "Elimina gli elementi selezionati",
-    "deleteConfirm": "Eliminare l'elemento selezionato {{count}}?",
-    "deleteConfirm_other": "Eliminare gli elementi selezionati {{count}}?",
-    "cancel": "Annulla",
-    "save": "Salva",
-    "folderCreated": "Cartella creata",
-    "itemRenamed": "Elemento rinominato",
-    "actionFailed": "Azione non riuscita",
-    "itemsDeleted": "{{count}} elemento eliminato",
-    "itemsDeleted_other": "{{count}} elementi eliminati",
-    "deleteFailed": "Eliminazione non riuscita",
-    "permissionsUpdated": "Autorizzazioni aggiornate",
-    "noRemoteSessionConnected": "Nessuna sessione remota connessa",
-    "failedToListFiles": "Impossibile elencare i file",
-    "failedToRefresh": "Aggiornamento non riuscito",
-    "destinationInsideSource": "La destinazione non può trovarsi all'interno del percorso di origine selezionato.",
-    "sameHostNoOp": "La cartella di origine e quella di destinazione sono la stessa."
-  },
-  "hosts": {
-    "fileManager": "File Manager",
-    "fileManagerUrlCopied": "URL file manager copiato",
-    "copyFileManagerUrlAction": "Copia URL File Manager",
-    "docsLink": "Visualizza documentazione",
-    "hostNotFound": "Host non trovato",
-    "loadingHost": "Caricamento host..."
-  },
-  "onboarding": {
-    "feature_files": "Gestore file",
-    "feature_files_desc": "Esplora, carica, scarica e modifica file tramite SFTP senza uscire dall'applicazione."
-  },
-  "terminal": {
-    "runTitle": "Esecuzione {{command}} - {{host}}",
-    "terminalTitle": "Terminale - {{host}}",
-    "terminalWithPath": "Terminale - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Sfoglia cartelle di destinazione",
-    "browsePathError": "Impossibile aprire questo percorso sull'host di destinazione.",
-    "browsePathWillBeCreated": "Questa cartella non esiste ancora. Verrà creata all'avvio del trasferimento.",
-    "cancel": "Annulla",
-    "cleanupDestFiles": "Pulisci destinazione",
-    "cleanupDestFilesError": "Pulizia fallita",
-    "cleanupDestFilesNothing": "Niente da pulire sulla destinazione",
-    "cleanupDestFilesPartial": "Alcuni file parziali non sono stati rimossi",
-    "cleanupDestFilesSuccess": "File parziali rimossi dalla destinazione",
-    "confirmCopy": "Copia",
-    "confirmMove": "Sposta",
-    "copyFolderToHost": "Copia cartella sull'host…",
-    "copyItemsToHost": "Copia {{count}} elementi su host…",
-    "copyToHost": "Copia su host…",
-    "destinationPath": "Percorso di destinazione",
-    "destMustBeDirectory": "La destinazione deve essere una directory per il trasferimento di più elementi",
-    "goUp": "Salire",
-    "hostAuthRequired": "Autenticazione richiesta. Apri prima il File Manager su questo host",
-    "hostConnecting": "Connessione in corso…",
-    "hostConnectionFailed": "Connessione non riuscita",
-    "hostDisconnected": "Non connesso",
-    "hostReady": "Pronto",
-    "itemsSummary": "{{count}} elementi",
-    "jumpHostLimitation": "Entrambi gli host devono essere raggiungibili dal server Termix. Il routing diretto host-to-host non è supportato.",
-    "methodAuto": "Auto",
-    "methodAutoHint": "Sceglie tar o SFTP per file in base al numero, dimensione e comprimibilità dei file. I file singoli usano sempre SFTP in streaming.",
-    "methodItemSftp": "SFTP per file",
-    "methodItemSftpHint": "Trasferisce ogni file singolarmente tramite SFTP. Funziona su tutti gli host, incluso Windows.",
-    "methodItemSftpLimitation": "Ogni file utilizza lo stesso flusso SFTP come una copia di file singolo, uno dopo l'altro. L'avanzamento è combinato su tutti i file, quindi la barra si muove lentamente durante i file di grandi dimensioni.",
-    "methodLabel": "Metodo di trasferimento",
-    "methodPreviewError": "Impossibile visualizzare l'anteprima del metodo di trasferimento. Il server sceglierà comunque un metodo all'avvio.",
-    "methodPreviewLoading": "Calcolo del metodo di trasferimento…",
-    "methodPreviewScanSummary": "{{fileCount}} file, {{totalSize}} in totale (scansionati sull'host sorgente).",
-    "methodPreviewWillUseItemSftp": "Userà: SFTP per file",
-    "methodPreviewWillUseTar": "Userà: Archivio Tar",
-    "methodReason": {
-      "user_item_sftp": "Hai scelto SFTP per-file.",
-      "user_tar": "Hai scelto archivio tar.",
-      "tar_unavailable": "Tar non è disponibile su uno o entrambi gli host, quindi verrà utilizzato SFTP per singolo file.",
-      "windows_host": "Poiché si tratta di un sistema host Windows, non viene utilizzato il comando tar.",
-      "auto_multi_large": "Automatico: più file, incluso un file di grandi dimensioni ({{largestSize}}) con dati comprimibili. Tar li raggruppa in un unico trasferimento.",
-      "auto_single_large_in_archive": "Automatico: un file di grandi dimensioni ({{largestSize}}) in questo set, quindi SFTP per file.",
-      "auto_many_incompressible": "Automatico: dati perlopiù incomprimibili, quindi SFTP file per file.",
-      "auto_many_files": "Auto: molti file ({{fileCount}}), tar riduce l'overhead per file.",
-      "auto_default": "Auto: SFTP per-file per questo set."
-    },
-    "methodTar": "Archivio Tar",
-    "methodTarHint": "Comprime sul sorgente, trasferisce un archivio, estrae sulla destinazione. Richiede tar su entrambi gli host Unix.",
-    "metricsCompress": "Compressione sul sorgente: {{duration}}",
-    "metricsExtract": "Estrazione sulla destinazione: {{duration}}",
-    "metricsPrepare": "Prepara destinazione: {{duration}}",
-    "metricsRouteBenchmark": "Sondaggio di percorso: diretto {{direct}}, relè {{relay}}",
-    "metricsSourceDelete": "Rimozione dal sorgente: {{duration}}",
-    "metricsTotal": "Totale: {{duration}}",
-    "metricsTransfer": "End-to-end: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 verificato: {{duration}}",
-    "moveFolderToHost": "Sposta cartella sull'host…",
-    "moveItemsToHost": "Sposta {{count}} elementi sull'host…",
-    "moveToHost": "Sposta su host…",
-    "noHostsConnected": "Nessun altro host con File Manager disponibile.",
-    "noHostsConnectedHint": "Aggiungi un altro host SSH con File Manager abilitato nella Gestione Host.",
-    "parallelSegmentsHint": "I file di grandi dimensioni vengono suddivisi in blocchi da 256 MB. Più corsie utilizzano connessioni separate (come avviare più trasferimenti) per una maggiore velocità complessiva.",
-    "parallelSegmentsLabel": "Corsie di trasferimento parallele",
-    "parallelSegmentsOption": "{{count}} corsie",
-    "progressBenchmarking": "Selezione del percorso di trasferimento più veloce…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Annulla",
-    "progressCancelling": "Annullamento in corso…",
-    "progressCompressing": "Compressione sull'host sorgente…",
-    "progressExtracting": "Estrazione sulla destinazione…",
-    "progressItems": "{{current}} / {{total}} file",
-    "progressReconnecting": "Riconnessione…",
-    "progressStalled": "Bloccato",
-    "progressTotalSpeed": "{{speed}} totale ({{lanes}} corsie)",
-    "progressTransferring": "Trasferimento dati…",
-    "progressTransferringItems": "Trasferimento file ({{current}} di {{total}})…",
-    "progressVerifying": "Verifica dell'integrità del file…",
-    "recentDestinations": "Destinazioni recenti",
-    "resumedHint": "Riconnesso a un trasferimento attivo avviato in un'altra finestra.",
-    "retryTransfer": "Riprova",
-    "retryTransferError": "Riprova fallita",
-    "selectDestinationHost": "Seleziona host di destinazione",
-    "transferCancelled": "Trasferimento annullato",
-    "transferCancelledCopyHint": "Potrebbero rimanere file parziali sulla destinazione.",
-    "transferCancelledMoveHint": "Potrebbero rimanere file parziali sulla destinazione. I file sorgente non sono stati rimossi.",
-    "transferError": "Trasferimento non riuscito",
-    "transferFailedRetryHint": "I dati parziali sono stati conservati sulla destinazione. Il nuovo tentativo riprenderà quando la connessione sarà ripristinata.",
-    "transferPartialHint": "Impossibile trasferire: {{paths}}",
-    "transferSuccess": "Trasferimento completato",
-    "metricsHopSourceRead": "Sorgente → server: {{throughput}}",
-    "metricsHopDestSftpWrite": "Server → dest (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Server → dest (locale): {{throughput}}"
-  },
-  "plugin": {
-    "name": "Gestore file"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/ja_JP.json b/plugins/file-manager/locales/translated/ja_JP.json
deleted file mode 100644
index ddf5de532..000000000
--- a/plugins/file-manager/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "ファイル",
-    "sftp": "SFTP",
-    "openFileManager": "ファイルマネージャーを開く"
-  },
-  "permissions": {
-    "use": {
-      "title": "ファイルマネージャーを使用する",
-      "description": "SFTP経由でファイルを閲覧、編集、転送できます。"
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "ファイルマネージャーを有効にする",
-        "description": "SFTP経由でこのホスト上のファイルを閲覧および編集できます。"
-      },
-      "defaultPath": {
-        "label": "デフォルトパス"
-      },
-      "scpLegacy": {
-        "label": "SCP レガシーモード"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "同時ファイル転送",
-        "description": "ローカル/リモートマネージャーが同時にアップロードまたはダウンロードできるファイルの数を指定します。サーバーがSFTPチャネルを制限している場合は、この値を小さくしてください。"
-      },
-      "confirmBeforeTrash": {
-        "label": "ファイルをゴミ箱に移動する前に確認してください",
-        "description": "リモートファイルをゴミ箱に移動する前に、必ず確認してください。完全削除の場合も確認が必要です。"
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "ファイルマネージャー"
-  },
-  "fileManager": {
-    "noHostSelected": "ホストが選択されていません",
-    "initializingEditor": "エディターを初期化中...",
-    "file": "ファイル",
-    "folder": "フォルダー",
-    "uploadFile": "ファイルをアップロード",
-    "downloadFile": "ダウンロード",
-    "extractArchive": "アーカイブを展開",
-    "extractingArchive": "{{name}} を展開中...",
-    "archiveExtractedSuccessfully": "{{name}} の展開が完了しました",
-    "extractFailed": "展開に失敗しました",
-    "compressFile": "ファイルを圧縮",
-    "compressFiles": "ファイルを圧縮",
-    "compressFilesDesc": "{{count}} 個の項目をアーカイブに圧縮",
-    "archiveName": "アーカイブ名",
-    "enterArchiveName": "アーカイブ名を入力...",
-    "compressionFormat": "圧縮形式",
-    "selectedFiles": "選択したファイル",
-    "andMoreFiles": "他 {{count}} 件...",
-    "compress": "圧縮",
-    "compressingFiles": "{{count}} 個の項目を {{name}} に圧縮中...",
-    "filesCompressedSuccessfully": "{{name}} が正常に作成されました",
-    "compressFailed": "圧縮に失敗しました",
-    "edit": "編集",
-    "preview": "プレビュー",
-    "previous": "前へ",
-    "next": "次へ",
-    "pageXOfY": "{{current}} / {{total}} ページ",
-    "zoomOut": "縮小",
-    "zoomIn": "拡大",
-    "newFile": "新規ファイル",
-    "newFolder": "新規フォルダ",
-    "rename": "名前を変更",
-    "uploading": "アップロード中...",
-    "uploadingFile": "{{name}} をアップロード中...",
-    "uploadingChunk": "{{name}}をアップロード中 : {{percent}}% ( {{chunk}} の一部、 {{total}})",
-    "fileName": "ファイル名",
-    "folderName": "フォルダ名",
-    "fileUploadedSuccessfully": "ファイル \"{{name}}\" のアップロードが完了しました",
-    "failedToUploadFile": "ファイルのアップロードに失敗しました",
-    "uploadingFolderFiles": "{{count}} 個のファイルをアップロードしています...",
-    "uploadedFolderFiles": "{{count}} 個のファイルが正常にアップロードされました",
-    "uploadedFolderPartial": "Uploaded {{uploaded}} file(s), {{failed}} failed",
-    "fileDownloadedSuccessfully": "ファイル \"{{name}}\" のダウンロードが完了しました",
-    "failedToDownloadFile": "ファイルのダウンロードに失敗しました",
-    "fileCreatedSuccessfully": "ファイル \"{{name}}\" が正常に作成されました",
-    "folderCreatedSuccessfully": "フォルダ \"{{name}}\" が正常に作成されました",
-    "failedToCreateItem": "アイテムの作成に失敗しました",
-    "operationFailed": "{{name}} の {{operation}} 操作が失敗しました: {{error}}",
-    "failedToResolveSymlink": "シンボリックリンクの解決に失敗しました",
-    "itemsDeletedSuccessfully": "{{count}} 個のアイテムが正常に削除されました",
-    "failedToDeleteItems": "アイテムの削除に失敗しました",
-    "sudoPasswordRequired": "管理者パスワードが必要です",
-    "enterSudoPassword": "操作を続行するには sudo パスワードを入力してください",
-    "sudoPassword": "Sudo パスワード",
-    "sudoOperationFailed": "Sudo 操作に失敗しました",
-    "sudoAuthFailed": "Sudo 認証に失敗しました",
-    "dragFilesToUpload": "ここにファイルをドロップしてアップロード",
-    "dropToUploadHere": "ここにアップロードしてください",
-    "dropToDownloadHere": "ここからダウンロードしてください",
-    "localFiles": "ローカル",
-    "showLocalFiles": "ローカルファイルを表示する（分割表示）",
-    "hideLocalFiles": "ローカルファイルを非表示にする",
-    "localHome": "ホームフォルダ",
-    "localPathPlaceholder": "ローカルフォルダパス",
-    "localShowHidden": "隠しファイルを表示する",
-    "localHideHidden": "隠しファイルを隠す",
-    "localRevealInFileManager": "システムファイルマネージャで表示",
-    "localCannotOpenFolder": "フォルダーを開けません",
-    "localItemCount": "{{count}} アイテム",
-    "localSelectedCount": "{{count}} 件選択中",
-    "back": "戻る",
-    "forward": "フォワード",
-    "up": "上",
-    "kind": "親切",
-    "localUploadingProgress": "{{current}} / {{total}} をアップロード中",
-    "localDownloadingProgress": "{{current}} をダウンロード中 {{total}}",
-    "localTransferInFlight": "{{count}} すぐに",
-    "localPreparingDownload": "ダウンロード準備中...",
-    "localTransferCancelled": "転送がキャンセルされました",
-    "localNothingToTransfer": "譲渡するものはありません",
-    "localUploadComplete": "{{count}} 個のファイルをアップロードしました",
-    "localUploadFailed": "アップロードに失敗しました",
-    "localUploadPartial": "Uploaded {{done}} file(s), {{failed}} failed",
-    "localDownloadComplete": "{{count}} 個のファイルをダウンロードしました",
-    "localDownloadFailed": "ダウンロードに失敗しました",
-    "localDownloadPartial": "{{done}} 個のファイルをダウンロードしましたが、 {{failed}} 失敗しました。",
-    "localReplaceExistingPrompt": "このフォルダには既に{{count}} 個のアイテムが存在します。置き換えますか？",
-    "localReplace": "置換",
-    "localSkipExisting": "スキップ",
-    "localSkippedExisting": "既存のアイテムをスキップしました {{count}}",
-    "localUnsafeNamesSkipped": "このコンピューターでは名前を使用できない {{count}} 個のアイテムをスキップしました",
-    "localOpen": "開く",
-    "localOpenFolder": "フォルダーを開く",
-    "localUploadToRemote": "サーバーにアップロード",
-    "localUploadToRemoteMany": "{{count}} 個のアイテムをサーバーにアップロードします",
-    "localMoveToTrash": "ゴミ箱に移動",
-    "localMoveToTrashMany": "{{count}} 個のアイテムをゴミ箱に移動します",
-    "localTrashConfirmSingle": "\"{{name}}\" をゴミ箱に移動しますか？",
-    "localTrashConfirmFolder": "フォルダ「{{name}}」とその中のすべての内容をゴミ箱に移動しますか？",
-    "localTrashConfirmMany": "{{count}} 個のアイテムをゴミ箱に移動しますか？",
-    "localTrashed": "{{count}} 個のアイテムをゴミ箱に移動しました",
-    "localTrashFailed": "ゴミ箱に移動できませんでした",
-    "localRenameFailed": "名前変更に失敗しました",
-    "localCreateFailed": "アイテムを作成できませんでした",
-    "goToParentFolder": "親フォルダへ移動",
-    "resizeSidebar": "サイドバーのサイズを変更するにはドラッグしてください（ダブルクリックでリセットできます）。",
-    "resizeLocalPane": "ローカルペインのサイズを変更するにはドラッグしてください（ダブルクリックでリセットできます）。",
-    "columns": "列",
-    "columnsHint": "右クリックして列を選択",
-    "emptyFolder": "このフォルダーは空です",
-    "searchFiles": "ファイルを検索...",
-    "upload": "アップロード",
-    "selectHostToStart": "ファイル管理を開始するホストを選択してください",
-    "sshRequiredForFileManager": "ファイルマネージャーには SSH が必要です。このホストでは SSH が有効になっていません。",
-    "failedToConnect": "SSH への接続に失敗しました",
-    "failedToLoadDirectory": "ディレクトリの読み込みに失敗しました",
-    "noSSHConnection": "利用可能な SSH 接続がありません",
-    "copy": "コピー",
-    "cut": "切り取り",
-    "paste": "貼り付け",
-    "copyPath": "パスをコピー",
-    "copyPaths": "パスをコピー",
-    "delete": "削除",
-    "properties": "プロパティ",
-    "refresh": "更新",
-    "downloadFiles": "{{count}} 個のファイルをブラウザにダウンロード",
-    "copyFiles": "{{count}} 個のアイテムをコピー",
-    "cutFiles": "{{count}} 個のアイテムを切り取り",
-    "deleteFiles": "{{count}} 個のアイテムを削除",
-    "filesCopiedToClipboard": "{{count}} 個のアイテムがクリップボードにコピーされました",
-    "filesCutToClipboard": "{{count}} 個のアイテムがクリップボードに切り取られました",
-    "pathCopiedToClipboard": "パスがクリップボードにコピーされました",
-    "pathsCopiedToClipboard": "{{count}} 個のパスがクリップボードにコピーされました",
-    "failedToCopyPath": "パスをクリップボードにコピーできませんでした",
-    "copyFolderLink": "フォルダへのリンクをコピー",
-    "copyCurrentFolderLink": "現在のフォルダへのリンクをコピー",
-    "folderLinkCopied": "フォルダリンクをクリップボードにコピーしました",
-    "failedToCopyFolderLink": "フォルダリンクをコピーできませんでした",
-    "movedItems": "{{count}} 個のアイテムを移動しました",
-    "failedToDeleteItem": "アイテムを削除できませんでした",
-    "itemRenamedSuccessfully": "{{type}} の名前を変更しました",
-    "failedToRenameItem": "アイテムの名前を変更できませんでした",
-    "download": "ダウンロード",
-    "openExternalEditor": "外部エディタで開く",
-    "chooseExternalEditor": "外部エディタを選択",
-    "externalEditorSelected": "外部エディタを選択しました",
-    "externalEditorDesktopOnly": "外部エディタはデスクトップアプリでのみ利用可能です",
-    "externalEditorOpened": "外部エディタで開きました。保存すると変更がサーバーにアップロードされます。",
-    "failedToOpenExternalEditor": "外部エディタを開けませんでした",
-    "failedToSelectExternalEditor": "外部エディタを選択できませんでした",
-    "permissions": "アクセス権限",
-    "size": "サイズ",
-    "modified": "更新日時",
-    "path": "パス",
-    "confirmDelete": "本当に {{name}} を削除しますか？",
-    "permissionDenied": "アクセスが拒否されました",
-    "serverError": "サーバーエラー",
-    "fileSavedSuccessfully": "ファイルを保存しました",
-    "failedToSaveFile": "ファイルを保存できませんでした",
-    "confirmDeleteSingleItem": "\"{{name}}\" を完全に削除してもよろしいですか？",
-    "confirmDeleteMultipleItems": "{{count}} 個のアイテムを完全に削除してもよろしいですか？",
-    "confirmDeleteMultipleItemsWithFolders": "{{count}} 個のアイテムを完全に削除してもよろしいですか？フォルダとその内容も含まれます。",
-    "confirmDeleteFolder": "フォルダ \"{{name}}\" とその内容をすべて完全に削除してもよろしいですか？",
-    "permanentDeleteWarning": "この操作は元に戻せません。アイテムはサーバーから完全に削除されます。",
-    "moveToTrashWarning": "該当品はTermixのゴミ箱に移動され、保管期間が終了する前に復元することができます。",
-    "itemsMovedToTrash": "{{count}} 個のアイテムがゴミ箱に移動されました",
-    "trash": "ごみ",
-    "trashDescription": "削除されたアイテムは、このホスト上で {{days}} 日間保持されます。",
-    "trashLoadFailed": "ゴミ箱の読み込みに失敗しました",
-    "trashEmpty": "ゴミ箱は空です",
-    "trashRestore": "復元",
-    "trashRestored": "復元済み {{name}}",
-    "trashRestoreFailed": "アイテムの復元に失敗しました。元のパスが既に存在している可能性があります。",
-    "trashDeletePermanently": "完全に削除する",
-    "trashDeleteConfirm": "{{name}}を完全に削除しますか？これは元に戻せません。",
-    "trashPermanentlyDeleted": "完全に削除されました {{name}}",
-    "trashDeleteFailed": "アイテムの完全削除に失敗しました",
-    "trashEmptyAction": "空のゴミ箱",
-    "trashEmptyConfirm": "ゴミ箱内のすべてのアイテムを完全に削除しますか？この操作は元に戻せません。",
-    "trashEmptied": "ゴミを空にする",
-    "trashRetention": "（日数）後に自動クリーンアップ",
-    "trashRetentionSaved": "ゴミ保持に関する最新情報",
-    "trashRetentionFailed": "ゴミ箱の保持期間の更新に失敗しました",
-    "trashUnavailableConfirm": "このアイテムはゴミ箱に移動できません。通常、別のファイルシステム上にあるか、管理者権限が必要なためです。代わりに完全に削除しますか？",
-    "recent": "最近使用した項目",
-    "pinned": "ピン留め",
-    "folderShortcuts": "フォルダショートカット",
-    "failedToReconnectSSH": "SSH セッションに再接続できませんでした",
-    "openTerminalHere": "ここでターミナルを開く",
-    "run": "実行",
-    "openTerminalInFolder": "このフォルダでターミナルを開く",
-    "openTerminalInFileLocation": "ファイルの場所でターミナルを開く",
-    "runningFile": "実行中 - {{file}}",
-    "onlyRunExecutableFiles": "実行可能ファイルのみ実行できます",
-    "directories": "ディレクトリ",
-    "removedFromRecentFiles": "最近使用したファイルから \"{{name}}\" を削除しました",
-    "removeFailed": "削除に失敗しました",
-    "unpinnedSuccessfully": "\"{{name}}\" のピン留めを解除しました",
-    "unpinFailed": "ピン留め解除に失敗しました",
-    "removedShortcut": "ショートカット \"{{name}}\" を削除しました",
-    "removeShortcutFailed": "ショートカットの削除に失敗しました",
-    "clearedAllRecentFiles": "最近使用したファイルをすべて消去しました",
-    "clearFailed": "消去に失敗しました",
-    "removeFromRecentFiles": "最近使用したファイルから削除",
-    "clearAllRecentFiles": "最近使用したファイルをすべて消去",
-    "unpinFile": "ファイルのピン留めを解除",
-    "removeShortcut": "ショートカットを削除",
-    "pinFile": "ファイルをピン留め",
-    "addToShortcuts": "ショートカットに追加",
-    "pasteFailed": "貼り付けに失敗しました",
-    "noUndoableActions": "元に戻せる操作はありません",
-    "undoCopySuccess": "コピー操作を元に戻しました: {{count}} 個のコピーファイルを削除しました",
-    "undoCopyFailedDelete": "元に戻せませんでした: コピーファイルを削除できませんでした",
-    "undoCopyFailedNoInfo": "元に戻せませんでした: コピーファイル情報が見つかりませんでした",
-    "undoMoveSuccess": "移動操作を元に戻しました: {{count}} 個のファイルを元の場所に戻しました",
-    "undoMoveFailedMove": "元に戻せませんでした: ファイルを元の場所に戻せませんでした",
-    "undoMoveFailedNoInfo": "元に戻せませんでした: 移動ファイル情報が見つかりませんでした",
-    "undoDeleteNotSupported": "削除操作は元に戻せません: ファイルはサーバーから完全に削除されました",
-    "undoTypeNotSupported": "元に戻せない操作タイプです",
-    "undoOperationFailed": "元に戻す操作に失敗しました",
-    "unknownError": "不明なエラー",
-    "confirm": "確認",
-    "find": "検索...",
-    "replace": "置換",
-    "downloadInstead": "代わりにダウンロード",
-    "keyboardShortcuts": "キーボードショートカット",
-    "searchAndReplace": "検索と置換",
-    "editing": "編集",
-    "search": "検索",
-    "findNext": "次を検索",
-    "findPrevious": "前を検索",
-    "save": "保存",
-    "selectAll": "すべて選択",
-    "undo": "元に戻す",
-    "redo": "やり直し",
-    "moveLineUp": "行を上に移動",
-    "moveLineDown": "行を下に移動",
-    "toggleComment": "コメント行の切り替え",
-    "autoComplete": "自動補完",
-    "imageLoadError": "画像の読み込みに失敗しました",
-    "startTyping": "入力を開始...",
-    "unknownSize": "サイズ不明",
-    "fileIsEmpty": "ファイルは空です",
-    "largeFileWarning": "大きなファイルの警告",
-    "largeFileWarningDesc": "このファイルのサイズは{{size}}で、テキストとして開くとパフォーマンスの問題が発生する可能性があります。",
-    "fileNotFoundAndRemoved": "ファイル \"{{name}}\" が見つからないため、最近使ったファイル/ピン留めから削除されました。",
-    "failedToLoadFile": "ファイルの読み込みに失敗しました: {{error}}",
-    "serverErrorOccurred": "サーバーエラーが発生しました。後でもう一度お試しください。",
-    "autoSaveFailed": "自動保存に失敗しました",
-    "fileAutoSaved": "ファイルを自動保存しました",
-    "moveFileFailed": "{{name}} の移動に失敗しました",
-    "moveOperationFailed": "移動操作に失敗しました",
-    "canOnlyCompareFiles": "2つのファイルのみ比較できます",
-    "comparingFiles": "ファイルを比較中: {{file1}} と {{file2}}",
-    "dragFailed": "ドラッグ操作に失敗しました",
-    "filePinnedSuccessfully": "ファイル \"{{name}}\" をピン留めしました",
-    "pinFileFailed": "ファイルのピン留めに失敗しました",
-    "fileUnpinnedSuccessfully": "ファイル \"{{name}}\" のピン留めを解除しました",
-    "unpinFileFailed": "ファイルのピン留め解除に失敗しました",
-    "shortcutAddedSuccessfully": "フォルダショートカット \"{{name}}\" を追加しました",
-    "addShortcutFailed": "ショートカットの追加に失敗しました",
-    "operationCompletedSuccessfully": "{{count}} アイテムを正常に{{operation}}しました",
-    "operationCompleted": "{{count}} アイテムを{{operation}}しました",
-    "downloadFileSuccess": "ファイル {{name}} のダウンロードが完了しました",
-    "downloadFileFailed": "ダウンロードに失敗しました",
-    "downloadingFile": "ダウンロード中 {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "{{name}} に移動",
-    "diffCompareWith": "{{name}} と差分比較",
-    "dragOutsideToDownload": "ウィンドウ外にドラッグしてダウンロード ({{count}} ファイル)",
-    "newFolderDefault": "新規フォルダ",
-    "newFileDefault": "新規ファイル.txt",
-    "successfullyMovedItems": "{{count}} アイテムを {{target}} に移動しました",
-    "move": "移動",
-    "searchInFile": "ファイル内検索 (Ctrl+F)",
-    "showKeyboardShortcuts": "キーボードショートカットを表示",
-    "decreaseFontSize": "フォントサイズを縮小",
-    "increaseFontSize": "フォントサイズを拡大",
-    "startWritingMarkdown": "マークダウンコンテンツの作成を開始...",
-    "loadingFileComparison": "ファイル比較を読み込み中...",
-    "reload": "再読み込み",
-    "compare": "比較",
-    "sideBySide": "横並び表示",
-    "inline": "インライン表示",
-    "fileComparison": "ファイル比較: {{file1}} 対 {{file2}}",
-    "fileTooLarge": "ファイルサイズが大きすぎる（10MB以上）ため、セキュリティ上の理由からテキストファイルとして開くことができません。",
-    "sshConnectionFailed": "SSH接続に失敗しました。 {{name}} ({{ip}}:{{port}}) への接続を確認してください",
-    "loadFileFailed": "ファイルの読み込みに失敗しました: {{error}}",
-    "connecting": "接続中...",
-    "connectedSuccessfully": "接続しました",
-    "totpVerificationFailed": "TOTP検証に失敗しました",
-    "browserSignInFailed": "ログインに失敗しました。もう一度お試しください。",
-    "authenticationFailed": "認証に失敗しました",
-    "incorrectPassphrase": "パスフレーズが間違っています。もう一度お試しください。",
-    "verificationCodePrompt": "認証コード:",
-    "changePermissions": "パーミッション変更",
-    "currentPermissions": "現在のパーミッション",
-    "owner": "所有者",
-    "group": "グループ",
-    "others": "その他",
-    "read": "読み取り",
-    "write": "書き込み",
-    "execute": "実行",
-    "permissionsChangedSuccessfully": "パーミッションが正常に変更されました",
-    "failedToChangePermissions": "パーミッションの変更に失敗しました",
-    "name": "名前",
-    "sortByName": "名前",
-    "sortByDate": "更新日時",
-    "sortBySize": "サイズ",
-    "ascending": "昇順",
-    "descending": "降順",
-    "root": "ルート",
-    "new": "新規",
-    "sortBy": "並べ替え",
-    "items": "アイテム",
-    "selected": "選択中",
-    "editor": "エディター",
-    "octal": "8進数",
-    "storage": "ストレージ",
-    "disk": "ディスク",
-    "used": "使用量",
-    "of": "の",
-    "toggleSidebar": "サイドバー切り替え",
-    "compactLayout": "コンパクトなレイアウトを使用する",
-    "comfortableLayout": "快適なレイアウトを使用する",
-    "cannotLoadPdf": "PDFを読み込めません",
-    "pdfLoadError": "このPDFファイルの読み込み中にエラーが発生しました。",
-    "loadingPdf": "PDFビューアを読み込んでいます...",
-    "loadingPage": "ページを読み込み中...",
-    "cancel": "キャンセル",
-    "copiedItems_one": "{{count}} アイテムをコピーしました",
-    "copiedItems_other": "{{count}} 個のアイテムをコピーしました",
-    "deleteCopiedFileFailed": "{{name}}のコピーを削除できませんでした: {{error}}",
-    "dragMovedItems_one": "{{count}} アイテムを {{target}} に移動しました。",
-    "dragMovedItems_other": "{{count}} 個のアイテムを {{target}}に移動しました。",
-    "moveBackFileFailed": "{{name}} を {{error}} に戻すことができませんでした。",
-    "terminal": "端末: {{host}} ({{path}})",
-    "dragToDesktop": "{{name}} をデスクトップにドラッグ",
-    "dragFilesToDesktop": "{{count}} ファイルをデスクトップにドラッグしています",
-    "folderDragUnsupported": "フォルダをデスクトップにドラッグする機能はまだサポートされていません。",
-    "saveToDesktopFailed": "保存に失敗しました: {{error}}",
-    "dragFailedDetail": "ドラッグに失敗しました: {{error}}",
-    "videoUnsupported": "お使いのブラウザはこの動画フォーマットを再生できません。",
-    "downloadToPlay": "他の場所でプレイするにはダウンロードしてください",
-    "cannotPreviewType": "このファイルタイプはプレビューできません",
-    "cannotPreviewTypeHint": "このファイル形式にはプレビュー機能がありません。ダウンロードして別のアプリで開いてください。",
-    "loadingFile": "ファイルを読み込んでいます...",
-    "loadingImage": "画像を読み込んでいます...",
-    "loadingEditor": "エディターを読み込んでいます...",
-    "loadingPreview": "プレビューを読み込んでいます...",
-    "loadingAudio": "オーディオプレーヤーを読み込んでいます...",
-    "emptyPreview": "現時点ではプレビューできるものはありません...",
-    "revert": "元に戻す",
-    "openAsText": "テキストとして開く",
-    "confirmOpenAsText": "このファイルをテキストファイルとして開き続けますか？ブラウザの動作が遅くなる可能性があります。"
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "2つのSSHホスト間でファイルを転送します。",
-    "sourceServer": "ソースサーバー",
-    "destinationServer": "宛先サーバー",
-    "selectHost": "ホストを選択",
-    "noHostSelected": "ホストが選択されていません",
-    "move": "移動",
-    "copy": "コピー",
-    "upload": "アップロード",
-    "itemsSelected": "{{count}} アイテムが選択されました",
-    "itemsSelected_other": "{{count}} 個のアイテムが選択されました",
-    "ready": "準備完了",
-    "loadingHosts": "ホストを読み込み中...",
-    "name": "名前",
-    "modified": "更新日時",
-    "size": "サイズ",
-    "noFiles": "ファイルなし",
-    "open": "開く",
-    "up": "上",
-    "refresh": "再読み込み",
-    "copyToTarget": "ターゲットディレクトリにコピー",
-    "rename": "名前変更",
-    "delete": "削除",
-    "editPermissions": "権限の編集",
-    "createNewFolder": "新しいフォルダーを作成する",
-    "deleteSelectedItems": "選択したアイテムを削除",
-    "deleteConfirm": "選択した項目 {{count}} を削除しますか？",
-    "deleteConfirm_other": "選択した項目 {{count}} を削除しますか？",
-    "cancel": "キャンセル",
-    "save": "保存",
-    "folderCreated": "フォルダが作成されました",
-    "itemRenamed": "アイテム名が変更されました",
-    "actionFailed": "アクションに失敗しました",
-    "itemsDeleted": "{{count}} アイテムが削除されました",
-    "itemsDeleted_other": "{{count}} 個のアイテムが削除されました",
-    "deleteFailed": "削除に失敗しました",
-    "permissionsUpdated": "権限が更新されました",
-    "noRemoteSessionConnected": "リモートセッションが接続されていません",
-    "failedToListFiles": "ファイルの一覧表示に失敗しました",
-    "failedToRefresh": "更新に失敗しました",
-    "destinationInsideSource": "宛先は、選択したソースパス内にあってはなりません。",
-    "sameHostNoOp": "ソースと宛先は同じフォルダです。"
-  },
-  "hosts": {
-    "fileManager": "ファイルマネージャー",
-    "fileManagerUrlCopied": "ファイルマネージャーURLをコピーしました",
-    "copyFileManagerUrlAction": "ファイルマネージャー URL をコピー",
-    "docsLink": "ドキュメントを表示",
-    "hostNotFound": "ホストが見つかりません",
-    "loadingHost": "ホストを読み込み中..."
-  },
-  "onboarding": {
-    "feature_files": "ファイルマネージャー",
-    "feature_files_desc": "アプリを離れることなく、SFTP経由でファイルの閲覧、アップロード、ダウンロード、編集が可能です。"
-  },
-  "terminal": {
-    "runTitle": "{{command}} 実行中 - {{host}}",
-    "terminalTitle": "ターミナル - {{host}}",
-    "terminalWithPath": "ターミナル - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "転送先フォルダを参照",
-    "browsePathError": "転送先ホストでこのパスを開けませんでした。",
-    "browsePathWillBeCreated": "このフォルダはまだ存在しません。転送開始時に作成されます。",
-    "cancel": "キャンセル",
-    "cleanupDestFiles": "宛先をクリーンアップ",
-    "cleanupDestFilesError": "クリーンアップに失敗しました",
-    "cleanupDestFilesNothing": "宛先にクリーンアップするものはありません",
-    "cleanupDestFilesPartial": "一部の部分的なファイルを削除できませんでした",
-    "cleanupDestFilesSuccess": "宛先から部分的なファイルを削除しました",
-    "confirmCopy": "コピー",
-    "confirmMove": "移動",
-    "copyFolderToHost": "フォルダをホストにコピー…",
-    "copyItemsToHost": "{{count}}個のアイテムをホストにコピー...",
-    "copyToHost": "ホストにコピー...",
-    "destinationPath": "転送先パス",
-    "destMustBeDirectory": "複数アイテムの転送では転送先はディレクトリである必要があります",
-    "goUp": "上へ",
-    "hostAuthRequired": "認証が必要です。まずこのホストでファイルマネージャを開いてください。",
-    "hostConnecting": "接続中…",
-    "hostConnectionFailed": "接続に失敗しました",
-    "hostDisconnected": "未接続",
-    "hostReady": "準備完了",
-    "itemsSummary": "{{count}} アイテム",
-    "jumpHostLimitation": "両方のホストが Termix サーバーから到達可能である必要があります。ホスト間直接ルーティングはサポートされていません。",
-    "methodAuto": "自動",
-    "methodAutoHint": "ファイル数、サイズ、圧縮可能性に基づいて tar またはファイル単位 SFTP を選択します。単一ファイルは常にストリーミング SFTP を使用します。",
-    "methodItemSftp": "ファイル単位 SFTP",
-    "methodItemSftpHint": "各ファイルを個別に SFTP で転送します。Windows を含むすべてのホストで動作します。",
-    "methodItemSftpLimitation": "各ファイルは単一ファイルコピーと同じ SFTP ストリームを順次使用します。進捗は全ファイルで統合されるため、大きなファイルではバーの動きが遅くなります。",
-    "methodLabel": "転送方式",
-    "methodPreviewError": "転送方式をプレビューできませんでした。開始時にサーバーが方式を選択します。",
-    "methodPreviewLoading": "転送方式を計算中…",
-    "methodPreviewScanSummary": "{{fileCount}} ファイル、合計 {{totalSize}} (ソースホストでスキャン)。",
-    "methodPreviewWillUseItemSftp": "使用方式: ファイル単位 SFTP",
-    "methodPreviewWillUseTar": "使用方式: Tar アーカイブ",
-    "methodReason": {
-      "user_item_sftp": "ファイルごとのSFTPを選択しました。",
-      "user_tar": "tarアーカイブを選択しました。",
-      "tar_unavailable": "片方または両方のホストでtarが利用できないため、代わりにファイル単位のSFTPが使用されます。",
-      "windows_host": "Windowsホストが関係しているため、tarコマンドは使用しません。",
-      "auto_multi_large": "自動: 圧縮可能なデータを含む、大きなファイル ({{largestSize}}) を含む複数のファイル。tar はそれらを 1 つの転送にまとめます。",
-      "auto_single_large_in_archive": "自動: このセットには大きなファイルが 1 つ ({{largestSize}}) 含まれているため、ファイルごとの SFTP です。",
-      "auto_many_incompressible": "自動: ほとんどが非圧縮データなので、ファイル単位のSFTPを使用します。",
-      "auto_many_files": "Auto: 多数のファイル ({{fileCount}}) 、tar はファイルごとのオーバーヘッドを削減します。",
-      "auto_default": "自動: このセットではファイルごとのSFTPです。"
-    },
-    "methodTar": "Tar アーカイブ",
-    "methodTarHint": "ソースで圧縮し、1つのアーカイブを転送し、送信先で展開します。両方の Unix ホストに tar が必要です。",
-    "metricsCompress": "送信元での圧縮: {{duration}}",
-    "metricsExtract": "送信先で展開: {{duration}}",
-    "metricsPrepare": "転送先の準備: {{duration}}",
-    "metricsRouteBenchmark": "経路プローブ: 直接 {{direct}}、リレー {{relay}}",
-    "metricsSourceDelete": "送信元から削除: {{duration}}",
-    "metricsTotal": "合計: {{duration}}",
-    "metricsTransfer": "エンドツーエンド: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256検証済み: {{duration}}",
-    "moveFolderToHost": "フォルダをホストに移動…",
-    "moveItemsToHost": "{{count}} アイテムをホストへ移動…",
-    "moveToHost": "ホストに移動...",
-    "noHostsConnected": "利用可能な他のファイルマネージャホストがありません。",
-    "noHostsConnectedHint": "ホストマネージャでファイルマネージャが有効なSSHホストを追加してください。",
-    "parallelSegmentsHint": "大きなファイルは 256 MB のチャンクに分割されます。複数レーンでは個別の接続を使用し (複数の転送を開始するように)、合計スループットが向上します。",
-    "parallelSegmentsLabel": "並列転送レーン",
-    "parallelSegmentsOption": "{{count}} レーン",
-    "progressBenchmarking": "最速の転送ルートを選択…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "キャンセル",
-    "progressCancelling": "キャンセル中…",
-    "progressCompressing": "ソースホストで圧縮中…",
-    "progressExtracting": "送信先で展開中…",
-    "progressItems": "{{current}} / {{total}} ファイル",
-    "progressReconnecting": "再接続中…",
-    "progressStalled": "停滞中",
-    "progressTotalSpeed": "合計 {{speed}} ({{lanes}} レーン)",
-    "progressTransferring": "データ転送中…",
-    "progressTransferringItems": "ファイル転送中 ({{current}} / {{total}})…",
-    "progressVerifying": "ファイルの整合性を検証中…",
-    "recentDestinations": "最近の転送先",
-    "resumedHint": "別のウィンドウで開始されたアクティブな転送に再接続しました。",
-    "retryTransfer": "再試行",
-    "retryTransferError": "再試行に失敗しました",
-    "selectDestinationHost": "転送先ホストを選択",
-    "transferCancelled": "転送がキャンセルされました",
-    "transferCancelledCopyHint": "部分的なファイルが宛先に残る可能性があります。",
-    "transferCancelledMoveHint": "部分的なファイルが宛先に残る可能性があります。ソースファイルは削除されていません。",
-    "transferError": "転送に失敗しました",
-    "transferFailedRetryHint": "部分的なデータが宛先に保持されました。接続が復旧したら再試行が再開されます。",
-    "transferPartialHint": "転送できませんでした: {{paths}}",
-    "transferSuccess": "転送が完了しました",
-    "metricsHopSourceRead": "送信元 → サーバー: {{throughput}}",
-    "metricsHopDestSftpWrite": "サーバー → 送信先 (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "サーバー → 送信先 (ローカル): {{throughput}}"
-  },
-  "plugin": {
-    "name": "ファイルマネージャー"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/ko_KR.json b/plugins/file-manager/locales/translated/ko_KR.json
deleted file mode 100644
index 67743a67f..000000000
--- a/plugins/file-manager/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "파일",
-    "sftp": "SFTP",
-    "openFileManager": "파일 관리자 열기"
-  },
-  "permissions": {
-    "use": {
-      "title": "파일 관리자를 사용하세요",
-      "description": "SFTP를 통해 파일을 검색, 편집 및 전송하세요."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "파일 관리자 활성화",
-        "description": "SFTP를 통해 이 호스트의 파일을 탐색하고 편집하세요."
-      },
-      "defaultPath": {
-        "label": "기본 경로"
-      },
-      "scpLegacy": {
-        "label": "SCP 레거시 모드"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "동시 파일 전송",
-        "description": "로컬/원격 파일 관리자가 동시에 업로드 또는 다운로드할 수 있는 파일 수를 지정합니다. 서버에서 SFTP 채널 수를 제한하는 경우 이 값을 낮추십시오."
-      },
-      "confirmBeforeTrash": {
-        "label": "파일을 휴지통으로 이동하기 전에 확인하십시오.",
-        "description": "원격 파일을 휴지통으로 이동하기 전에 확인 메시지를 표시합니다. 영구 삭제 시에는 여전히 확인이 필요합니다."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "파일 관리자"
-  },
-  "fileManager": {
-    "noHostSelected": "선택된 호스트 없음",
-    "initializingEditor": "편집기 초기화 중...",
-    "file": "파일",
-    "folder": "폴더",
-    "uploadFile": "파일 업로드",
-    "downloadFile": "다운로드",
-    "extractArchive": "아카이브 추출",
-    "extractingArchive": "{{name}} 압축 해제 중...",
-    "archiveExtractedSuccessfully": "{{name}} 압축 해제 완료",
-    "extractFailed": "압축 해제 실패",
-    "compressFile": "파일 압축",
-    "compressFiles": "파일 압축",
-    "compressFilesDesc": "{{count}}개 항목을 아카이브로 압축",
-    "archiveName": "아카이브 이름",
-    "enterArchiveName": "아카이브 이름 입력...",
-    "compressionFormat": "압축 형식",
-    "selectedFiles": "선택한 파일",
-    "andMoreFiles": "그리고 {{count}}개 더...",
-    "compress": "압축",
-    "compressingFiles": "{{count}}개 항목을 {{name}}(으)로 압축 중...",
-    "filesCompressedSuccessfully": "{{name}} 생성 완료",
-    "compressFailed": "압축 실패",
-    "edit": "편집",
-    "preview": "미리보기",
-    "previous": "이전",
-    "next": "다음",
-    "pageXOfY": "{{total}}페이지 중 {{current}}페이지",
-    "zoomOut": "축소",
-    "zoomIn": "확대",
-    "newFile": "새 파일",
-    "newFolder": "새 폴더",
-    "rename": "이름 변경",
-    "uploading": "업로드 중...",
-    "uploadingFile": "{{name}} 업로드 중...",
-    "uploadingChunk": "{{name}}업로드 중 : {{percent}}% ( {{total}}의 {{chunk}} 부분)",
-    "fileName": "파일 이름",
-    "folderName": "폴더 이름",
-    "fileUploadedSuccessfully": "파일 \"{{name}}\" 업로드 완료",
-    "failedToUploadFile": "파일 업로드 실패",
-    "uploadingFolderFiles": "{{count}} 파일을 업로드하는 중...",
-    "uploadedFolderFiles": "{{count}} 파일을 성공적으로 업로드했습니다.",
-    "uploadedFolderPartial": "업로드된 파일 {{uploaded}} 개 중 {{failed}} 개에 실패했습니다.",
-    "fileDownloadedSuccessfully": "파일 \"{{name}}\" 다운로드 완료",
-    "failedToDownloadFile": "파일 다운로드 실패",
-    "fileCreatedSuccessfully": "파일 \"{{name}}\" 생성 완료",
-    "folderCreatedSuccessfully": "폴더 \"{{name}}\" 생성 완료",
-    "failedToCreateItem": "항목 생성 실패",
-    "operationFailed": "{{name}}의 {{operation}} 작업 실패: {{error}}",
-    "failedToResolveSymlink": "심볼릭 링크 해석 실패",
-    "itemsDeletedSuccessfully": "{{count}}개 항목이 성공적으로 삭제되었습니다",
-    "failedToDeleteItems": "항목 삭제 실패",
-    "sudoPasswordRequired": "관리자 비밀번호가 필요합니다",
-    "enterSudoPassword": "계속하려면 sudo 암호를 입력하세요",
-    "sudoPassword": "Sudo 암호",
-    "sudoOperationFailed": "Sudo 작업 실패",
-    "sudoAuthFailed": "Sudo 인증 실패",
-    "dragFilesToUpload": "업로드할 파일을 여기에 놓으세요",
-    "dropToUploadHere": "여기에 드롭하여 업로드하세요",
-    "dropToDownloadHere": "여기를 클릭하여 다운로드하세요",
-    "localFiles": "로컬",
-    "showLocalFiles": "로컬 파일 표시(분할 화면)",
-    "hideLocalFiles": "로컬 파일 숨기기",
-    "localHome": "홈 폴더",
-    "localPathPlaceholder": "로컬 폴더 경로",
-    "localShowHidden": "숨겨진 파일 표시",
-    "localHideHidden": "숨겨진 파일 숨기기",
-    "localRevealInFileManager": "시스템 파일 관리자에서 보기",
-    "localCannotOpenFolder": "폴더를 열 수 없습니다",
-    "localItemCount": "{{count}}개 항목",
-    "localSelectedCount": "{{count}}개 선택됨",
-    "back": "뒤로",
-    "forward": "앞으로",
-    "up": "위로",
-    "kind": "친절한",
-    "localUploadingProgress": "{{current}} 의 {{total}}를 업로드 중입니다.",
-    "localDownloadingProgress": "{{current}} 의 {{total}} 다운로드 중",
-    "localTransferInFlight": "{{count}} 즉시",
-    "localPreparingDownload": "다운로드 준비 중...",
-    "localTransferCancelled": "전송 취소됨",
-    "localNothingToTransfer": "이체할 내용이 없습니다",
-    "localUploadComplete": "{{count}} 개의 파일을 업로드했습니다.",
-    "localUploadFailed": "업로드 실패",
-    "localUploadPartial": "업로드된 파일 {{done}} 개 중 {{failed}} 개에 실패했습니다.",
-    "localDownloadComplete": "{{count}} 파일을 다운로드했습니다.",
-    "localDownloadFailed": "다운로드 실패",
-    "localDownloadPartial": "{{done}} 파일 다운로드 실패, {{failed}}",
-    "localReplaceExistingPrompt": "이 폴더에 {{count}} 항목이 이미 있습니다. 바꾸시겠습니까?",
-    "localReplace": "바꾸기",
-    "localSkipExisting": "건너뛰다",
-    "localSkippedExisting": "기존 항목 {{count}} 개를 건너뛰었습니다.",
-    "localUnsafeNamesSkipped": "이 컴퓨터에서 사용할 수 없는 이름을 가진 {{count}} 항목을 건너뛰었습니다.",
-    "localOpen": "열기",
-    "localOpenFolder": "폴더 열기",
-    "localUploadToRemote": "서버에 업로드",
-    "localUploadToRemoteMany": "{{count}} 아이템을 서버에 업로드하세요",
-    "localMoveToTrash": "쓰레기통으로 이동",
-    "localMoveToTrashMany": "{{count}} 항목을 휴지통으로 이동",
-    "localTrashConfirmSingle": "\"{{name}}\"를 휴지통으로 옮기시겠습니까?",
-    "localTrashConfirmFolder": "폴더 \"{{name}}\"와 그 안의 모든 내용을 휴지통으로 옮기시겠습니까?",
-    "localTrashConfirmMany": "{{count}} 항목을 휴지통으로 옮기시겠습니까?",
-    "localTrashed": "{{count}} 항목을 휴지통으로 이동했습니다.",
-    "localTrashFailed": "쓰레기통으로 옮길 수 없었습니다",
-    "localRenameFailed": "이름 변경 실패",
-    "localCreateFailed": "항목을 생성할 수 없습니다.",
-    "goToParentFolder": "상위 폴더로 이동",
-    "resizeSidebar": "드래그하여 사이드바 크기를 조절하세요 (더블 클릭하면 원래 크기로 돌아갑니다).",
-    "resizeLocalPane": "드래그하여 로컬 창의 크기를 조정하세요(두 번 클릭하면 원래 크기로 돌아갑니다).",
-    "columns": "열",
-    "columnsHint": "마우스 오른쪽 버튼을 클릭하여 열을 선택하세요.",
-    "emptyFolder": "이 폴더는 비어 있습니다",
-    "searchFiles": "파일 검색...",
-    "upload": "업로드",
-    "selectHostToStart": "파일 관리를 시작할 호스트를 선택하세요",
-    "sshRequiredForFileManager": "파일 관리자에는 SSH가 필요합니다. 이 호스트에는 SSH가 활성화되어 있지 않습니다.",
-    "failedToConnect": "SSH 연결 실패",
-    "failedToLoadDirectory": "디렉터리 로드 실패",
-    "noSSHConnection": "SSH 연결을 사용할 수 없음",
-    "copy": "복사",
-    "cut": "잘라내기",
-    "paste": "붙여넣기",
-    "copyPath": "경로 복사",
-    "copyPaths": "경로 복사",
-    "delete": "삭제",
-    "properties": "속성",
-    "refresh": "새로 고침",
-    "downloadFiles": "브라우저로 {{count}}개 파일 다운로드",
-    "copyFiles": "{{count}}개 항목 복사",
-    "cutFiles": "{{count}}개 항목 잘라내기",
-    "deleteFiles": "{{count}}개 항목 삭제",
-    "filesCopiedToClipboard": "{{count}}개 항목이 클립보드에 복사되었습니다",
-    "filesCutToClipboard": "{{count}}개 항목을 클립보드로 잘라냈습니다",
-    "pathCopiedToClipboard": "경로가 클립보드에 복사되었습니다",
-    "pathsCopiedToClipboard": "{{count}}개 경로가 클립보드에 복사되었습니다",
-    "failedToCopyPath": "클립보드에 경로를 복사하지 못했습니다",
-    "copyFolderLink": "폴더 링크 복사",
-    "copyCurrentFolderLink": "현재 폴더 링크 복사",
-    "folderLinkCopied": "폴더 링크가 클립보드에 복사되었습니다",
-    "failedToCopyFolderLink": "폴더 링크를 복사하지 못했습니다",
-    "movedItems": "{{count}}개 항목을 이동했습니다",
-    "failedToDeleteItem": "항목을 삭제하지 못했습니다",
-    "itemRenamedSuccessfully": "{{type}} 이름이 변경되었습니다",
-    "failedToRenameItem": "항목 이름을 변경하지 못했습니다",
-    "download": "다운로드",
-    "openExternalEditor": "외부 편집기로 열기",
-    "chooseExternalEditor": "외부 편집기 선택",
-    "externalEditorSelected": "외부 편집기가 선택되었습니다",
-    "externalEditorDesktopOnly": "외부 편집기는 데스크톱 앱에서만 사용할 수 있습니다",
-    "externalEditorOpened": "외부 편집기에서 열렸습니다. 저장하면 변경 사항이 서버에 업로드됩니다.",
-    "failedToOpenExternalEditor": "외부 편집기를 열지 못했습니다",
-    "failedToSelectExternalEditor": "외부 편집기를 선택하지 못했습니다",
-    "permissions": "권한",
-    "size": "크기",
-    "modified": "수정됨",
-    "path": "경로",
-    "confirmDelete": "{{name}}을(를) 삭제하시겠습니까?",
-    "permissionDenied": "권한이 거부되었습니다",
-    "serverError": "서버 오류",
-    "fileSavedSuccessfully": "파일이 저장되었습니다",
-    "failedToSaveFile": "파일을 저장하지 못했습니다",
-    "confirmDeleteSingleItem": "\"{{name}}\"을(를) 영구적으로 삭제하시겠습니까?",
-    "confirmDeleteMultipleItems": "{{count}}개 항목을 영구적으로 삭제하시겠습니까?",
-    "confirmDeleteMultipleItemsWithFolders": "{{count}}개 항목을 영구적으로 삭제하시겠습니까? 폴더 및 해당 내용이 포함됩니다.",
-    "confirmDeleteFolder": "\"{{name}}\" 폴더와 모든 내용을 영구적으로 삭제하시겠습니까?",
-    "permanentDeleteWarning": "이 작업은 되돌릴 수 없습니다. 항목이 서버에서 영구적으로 삭제됩니다.",
-    "moveToTrashWarning": "해당 항목은 Termix 휴지통으로 이동되며, 보존 기간이 만료되기 전에 복원할 수 있습니다.",
-    "itemsMovedToTrash": "{{count}} 항목이 휴지통으로 이동되었습니다.",
-    "trash": "쓰레기",
-    "trashDescription": "삭제된 항목은 이 호스트에 {{days}} 일 동안 보관됩니다.",
-    "trashLoadFailed": "휴지통을 불러오는 데 실패했습니다.",
-    "trashEmpty": "쓰레기통이 비어있습니다",
-    "trashRestore": "복원",
-    "trashRestored": "복원됨 {{name}}",
-    "trashRestoreFailed": "항목 복원에 실패했습니다. 원래 경로가 이미 존재할 수 있습니다.",
-    "trashDeletePermanently": "영구 삭제",
-    "trashDeleteConfirm": "{{name}}를 영구적으로 삭제하시겠습니까? 이 작업은 되돌릴 수 없습니다.",
-    "trashPermanentlyDeleted": "영구 삭제됨 {{name}}",
-    "trashDeleteFailed": "항목을 영구적으로 삭제하는 데 실패했습니다.",
-    "trashEmptyAction": "쓰레기통을 비우세요",
-    "trashEmptyConfirm": "휴지통에 있는 모든 항목을 영구적으로 삭제하시겠습니까? 이 작업은 되돌릴 수 없습니다.",
-    "trashEmptied": "쓰레기통이 비워졌습니다",
-    "trashRetention": "자동 정리 시간 (일)",
-    "trashRetentionSaved": "휴지통 보존 시간 업데이트됨",
-    "trashRetentionFailed": "휴지통 보존 기간 업데이트에 실패했습니다.",
-    "trashUnavailableConfirm": "이 항목은 다른 파일 시스템에 있거나 관리자 권한이 필요하기 때문에 휴지통으로 이동할 수 없습니다. 영구적으로 삭제하시겠습니까?",
-    "recent": "최근 항목",
-    "pinned": "고정됨",
-    "folderShortcuts": "폴더 바로 가기",
-    "failedToReconnectSSH": "SSH 세션 재연결에 실패했습니다",
-    "openTerminalHere": "여기서 터미널 열기",
-    "run": "실행",
-    "openTerminalInFolder": "이 폴더에서 터미널 열기",
-    "openTerminalInFileLocation": "파일 위치에서 터미널 열기",
-    "runningFile": "실행 중 - {{file}}",
-    "onlyRunExecutableFiles": "실행 파일만 실행할 수 있습니다",
-    "directories": "디렉터리",
-    "removedFromRecentFiles": "최근 파일에서 \"{{name}}\" 제거됨",
-    "removeFailed": "제거 실패",
-    "unpinnedSuccessfully": "\"{{name}}\" 고정 해제 완료",
-    "unpinFailed": "고정 해제 실패",
-    "removedShortcut": "바로 가기 \"{{name}}\" 제거됨",
-    "removeShortcutFailed": "바로 가기 제거 실패",
-    "clearedAllRecentFiles": "모든 최근 파일 지움",
-    "clearFailed": "지우기 실패",
-    "removeFromRecentFiles": "최근 파일에서 제거",
-    "clearAllRecentFiles": "모든 최근 파일 지우기",
-    "unpinFile": "파일 고정 해제",
-    "removeShortcut": "바로 가기 제거",
-    "pinFile": "파일 고정",
-    "addToShortcuts": "바로 가기에 추가",
-    "pasteFailed": "붙여넣기 실패",
-    "noUndoableActions": "실행 취소할 동작 없음",
-    "undoCopySuccess": "복사 작업 실행 취소: 복사된 파일 {{count}}개 삭제됨",
-    "undoCopyFailedDelete": "실행 취소 실패: 복사된 파일을 삭제할 수 없음",
-    "undoCopyFailedNoInfo": "실행 취소 실패: 복사된 파일 정보를 찾을 수 없음",
-    "undoMoveSuccess": "이동 작업 실행 취소: {{count}}개 파일을 원래 위치로 다시 이동했습니다",
-    "undoMoveFailedMove": "실행 취소 실패: 파일을 되돌릴 수 없음",
-    "undoMoveFailedNoInfo": "실행 취소 실패: 이동된 파일 정보를 찾을 수 없음",
-    "undoDeleteNotSupported": "삭제 작업은 실행 취소할 수 없습니다: 서버에서 파일이 영구 삭제됨",
-    "undoTypeNotSupported": "지원되지 않는 실행 취소 작업 유형",
-    "undoOperationFailed": "실행 취소 작업 실패",
-    "unknownError": "알 수 없는 오류",
-    "confirm": "확인",
-    "find": "찾기...",
-    "replace": "바꾸기",
-    "downloadInstead": "대신 다운로드",
-    "keyboardShortcuts": "키보드 단축키",
-    "searchAndReplace": "검색 및 바꾸기",
-    "editing": "편집",
-    "search": "검색",
-    "findNext": "다음 찾기",
-    "findPrevious": "이전 찾기",
-    "save": "저장",
-    "selectAll": "모두 선택",
-    "undo": "실행 취소",
-    "redo": "다시 실행",
-    "moveLineUp": "줄 위로 이동",
-    "moveLineDown": "줄 아래로 이동",
-    "toggleComment": "주석 토글",
-    "autoComplete": "자동 완성",
-    "imageLoadError": "이미지를 불러오지 못했습니다",
-    "startTyping": "입력하세요...",
-    "unknownSize": "알 수 없는 크기",
-    "fileIsEmpty": "파일이 비어 있습니다",
-    "largeFileWarning": "대용량 파일 경고",
-    "largeFileWarningDesc": "이 파일의 크기는 {{size}}이며, 텍스트로 열 경우 성능 문제가 발생할 수 있습니다.",
-    "fileNotFoundAndRemoved": "\"{{name}}\" 파일을 찾을 수 없어 최근/고정 파일에서 제거되었습니다.",
-    "failedToLoadFile": "파일을 불러오지 못했습니다: {{error}}",
-    "serverErrorOccurred": "서버 오류가 발생했습니다. 나중에 다시 시도하세요.",
-    "autoSaveFailed": "자동 저장 실패",
-    "fileAutoSaved": "파일 자동 저장됨",
-    "moveFileFailed": "{{name}} 이동 실패",
-    "moveOperationFailed": "이동 작업 실패",
-    "canOnlyCompareFiles": "파일 두 개만 비교할 수 있습니다.",
-    "comparingFiles": "파일 비교 중: {{file1}} 및 {{file2}}",
-    "dragFailed": "드래그 작업 실패",
-    "filePinnedSuccessfully": "\"{{name}}\" 파일이 고정되었습니다.",
-    "pinFileFailed": "파일 고정 실패",
-    "fileUnpinnedSuccessfully": "\"{{name}}\" 파일이 고정 해제되었습니다.",
-    "unpinFileFailed": "파일 고정 해제 실패",
-    "shortcutAddedSuccessfully": "폴더 바로가기 \"{{name}}\"이 추가되었습니다.",
-    "addShortcutFailed": "바로가기 추가 실패",
-    "operationCompletedSuccessfully": "{{count}}개 항목 {{operation}} 성공",
-    "operationCompleted": "{{count}}개 항목 {{operation}}",
-    "downloadFileSuccess": "파일 {{name}} 다운로드 성공",
-    "downloadFileFailed": "다운로드 실패",
-    "downloadingFile": "{{name}}… 다운로드 중",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "{{name}}로 이동",
-    "diffCompareWith": "{{name}}와/과 Diff 비교",
-    "dragOutsideToDownload": "창 밖으로 드래그하여 다운로드 ({{count}}개 파일)",
-    "newFolderDefault": "새 폴더",
-    "newFileDefault": "새 파일.txt",
-    "successfullyMovedItems": "{{count}}개 항목을 {{target}}에 성공적으로 이동했습니다.",
-    "move": "이동",
-    "searchInFile": "파일에서 검색 (Ctrl+F)",
-    "showKeyboardShortcuts": "키보드 단축키 보기",
-    "decreaseFontSize": "글꼴 크기 줄이기",
-    "increaseFontSize": "글꼴 크기 늘리기",
-    "startWritingMarkdown": "마크다운 내용 작성을 시작하세요...",
-    "loadingFileComparison": "파일 비교 로딩 중...",
-    "reload": "새로 고침",
-    "compare": "비교",
-    "sideBySide": "나란히 보기",
-    "inline": "인라인",
-    "fileComparison": "파일 비교: {{file1}} vs {{file2}}",
-    "fileTooLarge": "파일 크기가 너무 커서(> 10MB) 보안상의 이유로 텍스트 형식으로 열 수 없습니다.",
-    "sshConnectionFailed": "SSH 연결 실패. {{name}}({{ip}}:{{port}})에 대한 연결을 확인하세요.",
-    "loadFileFailed": "파일 불러오기 실패: {{error}}",
-    "connecting": "연결 중...",
-    "connectedSuccessfully": "연결 성공",
-    "totpVerificationFailed": "TOTP 인증 실패",
-    "browserSignInFailed": "로그인에 실패했습니다. 다시 시도해 주세요.",
-    "authenticationFailed": "인증 실패",
-    "incorrectPassphrase": "잘못된 암호입니다. 다시 시도하세요.",
-    "verificationCodePrompt": "인증 코드:",
-    "changePermissions": "권한 변경",
-    "currentPermissions": "현재 권한",
-    "owner": "소유자",
-    "group": "그룹",
-    "others": "기타",
-    "read": "읽기",
-    "write": "쓰기",
-    "execute": "실행",
-    "permissionsChangedSuccessfully": "권한이 성공적으로 변경되었습니다",
-    "failedToChangePermissions": "권한 변경에 실패했습니다",
-    "name": "이름",
-    "sortByName": "이름",
-    "sortByDate": "수정일",
-    "sortBySize": "크기",
-    "ascending": "오름차순",
-    "descending": "내림차순",
-    "root": "루트",
-    "new": "새로 만들기",
-    "sortBy": "정렬 기준",
-    "items": "항목",
-    "selected": "선택됨",
-    "editor": "편집기",
-    "octal": "8진수",
-    "storage": "저장소",
-    "disk": "디스크",
-    "used": "사용",
-    "of": "중",
-    "toggleSidebar": "사이드바 표시/숨기기",
-    "compactLayout": "간결한 레이아웃을 사용하세요",
-    "comfortableLayout": "편안한 레이아웃을 사용하세요",
-    "cannotLoadPdf": "PDF를 로드할 수 없습니다",
-    "pdfLoadError": "이 PDF 파일을 로드하는 중 오류가 발생했습니다.",
-    "loadingPdf": "PDF 뷰어를 불러오는 중...",
-    "loadingPage": "페이지 로드 중...",
-    "cancel": "취소",
-    "copiedItems_one": "복사됨 {{count}} 항목",
-    "copiedItems_other": "복사된 {{count}} 항목",
-    "deleteCopiedFileFailed": "{{name}}: {{error}}의 복사본을 삭제할 수 없습니다.",
-    "dragMovedItems_one": "{{count}} 항목을 {{target}}로 이동했습니다.",
-    "dragMovedItems_other": "{{count}} 항목을 {{target}}로 이동했습니다.",
-    "moveBackFileFailed": "{{name}} 뒤로 이동할 수 없습니다: {{error}}",
-    "terminal": "터미널: {{host}} ({{path}})",
-    "dragToDesktop": "{{name}} 를 바탕 화면으로 드래그",
-    "dragFilesToDesktop": "{{count}} 파일을 바탕화면으로 드래그하기",
-    "folderDragUnsupported": "폴더를 데스크톱으로 드래그하는 기능은 아직 지원되지 않습니다.",
-    "saveToDesktopFailed": "저장 실패: {{error}}",
-    "dragFailedDetail": "드래그 실패: {{error}}",
-    "videoUnsupported": "현재 사용 중인 브라우저는 이 비디오 형식을 재생할 수 없습니다.",
-    "downloadToPlay": "다운로드하여 다른 곳에서 재생하세요.",
-    "cannotPreviewType": "이 파일 형식을 미리 볼 수 없습니다.",
-    "cannotPreviewTypeHint": "이 파일 형식은 미리보기를 지원하지 않습니다. 다운로드하여 다른 앱에서 열어보세요.",
-    "loadingFile": "파일을 불러오는 중...",
-    "loadingImage": "이미지 로딩 중...",
-    "loadingEditor": "에디터 로딩 중...",
-    "loadingPreview": "미리보기 로딩 중...",
-    "loadingAudio": "오디오 플레이어를 불러오는 중...",
-    "emptyPreview": "아직 미리 볼 내용이 없습니다...",
-    "revert": "돌아가는 것",
-    "openAsText": "텍스트로 열기",
-    "confirmOpenAsText": "이 파일을 텍스트 파일로 계속 열겠습니까? 이렇게 하면 브라우저 속도가 느려질 수 있습니다."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "두 SSH 호스트 간에 파일을 전송합니다.",
-    "sourceServer": "소스 서버",
-    "destinationServer": "대상 서버",
-    "selectHost": "호스트를 선택하세요",
-    "noHostSelected": "선택된 호스트가 없습니다",
-    "move": "이동",
-    "copy": "복사",
-    "upload": "업로드",
-    "itemsSelected": "{{count}} 항목이 선택되었습니다",
-    "itemsSelected_other": "{{count}} 항목이 선택되었습니다",
-    "ready": "준비됨",
-    "loadingHosts": "호스트 로드 중...",
-    "name": "이름",
-    "modified": "수정됨",
-    "size": "크기",
-    "noFiles": "파일 없음",
-    "open": "열기",
-    "up": "위로",
-    "refresh": "새로 고침",
-    "copyToTarget": "대상 디렉터리로 복사",
-    "rename": "이름 바꾸기",
-    "delete": "삭제",
-    "editPermissions": "편집 권한",
-    "createNewFolder": "새 폴더 만들기",
-    "deleteSelectedItems": "선택한 항목 삭제",
-    "deleteConfirm": "선택한 항목 {{count}} 을 삭제하시겠습니까?",
-    "deleteConfirm_other": "선택한 항목 {{count}} 을 삭제하시겠습니까?",
-    "cancel": "취소",
-    "save": "저장",
-    "folderCreated": "폴더가 생성되었습니다",
-    "itemRenamed": "항목 이름이 변경됨",
-    "actionFailed": "작업 실패",
-    "itemsDeleted": "{{count}} 항목이 삭제되었습니다",
-    "itemsDeleted_other": "{{count}} 항목이 삭제되었습니다",
-    "deleteFailed": "삭제 실패",
-    "permissionsUpdated": "권한이 업데이트되었습니다",
-    "noRemoteSessionConnected": "원격 세션이 연결되지 않았습니다.",
-    "failedToListFiles": "파일 목록을 불러오는 데 실패했습니다.",
-    "failedToRefresh": "새로 고침에 실패했습니다",
-    "destinationInsideSource": "대상 경로는 선택한 소스 경로 내에 있을 수 없습니다.",
-    "sameHostNoOp": "원본 폴더와 대상 폴더가 동일합니다."
-  },
-  "hosts": {
-    "fileManager": "파일 관리자",
-    "fileManagerUrlCopied": "파일 관리자 URL 복사됨",
-    "copyFileManagerUrlAction": "파일 관리자 URL 복사",
-    "docsLink": "문서 보기",
-    "hostNotFound": "호스트를 찾을 수 없습니다",
-    "loadingHost": "호스트 로드 중..."
-  },
-  "onboarding": {
-    "feature_files": "파일 관리자",
-    "feature_files_desc": "앱을 종료하지 않고 SFTP를 통해 파일을 검색, 업로드, 다운로드 및 편집할 수 있습니다."
-  },
-  "terminal": {
-    "runTitle": "{{command}} 실행 중 - {{host}}",
-    "terminalTitle": "터미널 - {{host}}",
-    "terminalWithPath": "터미널 - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "대상 폴더 찾아보기",
-    "browsePathError": "대상 호스트에서 이 경로를 열 수 없습니다.",
-    "browsePathWillBeCreated": "이 폴더가 아직 존재하지 않습니다. 전송 시작 시 생성됩니다.",
-    "cancel": "취소",
-    "cleanupDestFiles": "대상 정리",
-    "cleanupDestFilesError": "정리 실패",
-    "cleanupDestFilesNothing": "대상에 정리할 항목이 없습니다.",
-    "cleanupDestFilesPartial": "일부 부분 파일을 제거할 수 없었습니다.",
-    "cleanupDestFilesSuccess": "대상에서 부분 파일을 제거했습니다.",
-    "confirmCopy": "복사",
-    "confirmMove": "이동",
-    "copyFolderToHost": "폴더를 호스트로 복사…",
-    "copyItemsToHost": "{{count}}개 항목을 호스트로 복사…",
-    "copyToHost": "호스트로 복사…",
-    "destinationPath": "대상 경로",
-    "destMustBeDirectory": "여러 항목 전송 시 대상은 디렉터리여야 합니다.",
-    "goUp": "위로",
-    "hostAuthRequired": "인증이 필요합니다. 먼저 이 호스트에서 파일 관리자를 여십시오.",
-    "hostConnecting": "연결 중…",
-    "hostConnectionFailed": "연결 실패",
-    "hostDisconnected": "연결되지 않음",
-    "hostReady": "준비됨",
-    "itemsSummary": "{{count}}개 항목",
-    "jumpHostLimitation": "두 호스트 모두 Termix 서버에서 접근 가능해야 합니다. 호스트 간 직접 라우팅은 지원되지 않습니다.",
-    "methodAuto": "자동",
-    "methodAutoHint": "파일 수, 크기 및 압축 가능성을 기준으로 tar 또는 파일별 SFTP를 선택합니다. 단일 파일은 항상 스트리밍 SFTP를 사용합니다.",
-    "methodItemSftp": "파일별 SFTP",
-    "methodItemSftpHint": "SFTP를 통해 각 파일을 개별적으로 전송합니다. Windows를 포함한 모든 호스트에서 작동합니다.",
-    "methodItemSftpLimitation": "각 파일은 단일 파일 복사와 동일한 SFTP 스트림을 순차적으로 사용합니다. 진행률이 모든 파일에 걸쳐 결합되므로 대용량 파일에서는 진행 막대가 느리게 움직입니다.",
-    "methodLabel": "전송 방법",
-    "methodPreviewError": "전송 방법을 미리 볼 수 없습니다. 시작 시 서버가 방법을 선택합니다.",
-    "methodPreviewLoading": "전송 방법 계산 중…",
-    "methodPreviewScanSummary": "{{fileCount}}개 파일, 총 {{totalSize}} (소스 호스트에서 스캔됨).",
-    "methodPreviewWillUseItemSftp": "사용 예정: 파일별 SFTP",
-    "methodPreviewWillUseTar": "사용 예정: Tar 아카이브",
-    "methodReason": {
-      "user_item_sftp": "파일별 SFTP를 선택하셨습니다.",
-      "user_tar": "tar 아카이브를 선택하셨습니다.",
-      "tar_unavailable": "두 호스트 중 하나 또는 둘 모두에서 Tar를 사용할 수 없으므로 파일별 SFTP 전송이 대신 사용됩니다.",
-      "windows_host": "Windows 호스트가 사용되므로 tar는 사용되지 않습니다.",
-      "auto_multi_large": "자동: 압축 가능한 데이터가 포함된 대용량 파일({{largestSize}})을 비롯한 여러 파일. Tar는 이 파일들을 하나의 전송으로 묶습니다.",
-      "auto_single_large_in_archive": "자동: 이 세트에는 하나의 큰 파일({{largestSize}})이 있으므로 파일별 SFTP입니다.",
-      "auto_many_incompressible": "자동: 대부분 압축 불가능한 데이터이므로 파일별 SFTP를 사용합니다.",
-      "auto_many_files": "자동: 파일이 많음({{fileCount}}), tar는 파일당 오버헤드를 줄입니다.",
-      "auto_default": "자동: 이 세트에 대해 파일별 SFTP."
-    },
-    "methodTar": "Tar 아카이브",
-    "methodTarHint": "소스에서 압축, 하나의 아카이브 전송, 목적지에서 추출. 두 Unix 호스트에 tar가 필요합니다.",
-    "metricsCompress": "소스에서 압축: {{duration}}",
-    "metricsExtract": "목적지에서 추출: {{duration}}",
-    "metricsPrepare": "대상 준비: {{duration}}",
-    "metricsRouteBenchmark": "경로 탐색: 직접 {{direct}}, 릴레이 {{relay}}",
-    "metricsSourceDelete": "소스에서 제거: {{duration}}",
-    "metricsTotal": "총 시간: {{duration}}",
-    "metricsTransfer": "엔드 투 엔드: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 검증 완료: {{duration}}",
-    "moveFolderToHost": "폴더를 호스트로 이동…",
-    "moveItemsToHost": "{{count}}개 항목을 호스트로 이동…",
-    "moveToHost": "호스트로 이동…",
-    "noHostsConnected": "사용 가능한 다른 파일 관리자 호스트가 없습니다.",
-    "noHostsConnectedHint": "호스트 관리자에서 파일 관리자가 활성화된 다른 SSH 호스트를 추가하세요.",
-    "parallelSegmentsHint": "대용량 파일은 256 MB 청크로 분할됩니다. 여러 레인은 별도 연결을 사용하여 (여러 전송을 시작하는 것처럼) 총 처리량을 높입니다.",
-    "parallelSegmentsLabel": "병렬 전송 레인",
-    "parallelSegmentsOption": "{{count}}개 레인",
-    "progressBenchmarking": "가장 빠른 이동 경로 선택…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "취소",
-    "progressCancelling": "취소 중…",
-    "progressCompressing": "소스 호스트에서 압축 중…",
-    "progressExtracting": "목적지에서 추출 중…",
-    "progressItems": "{{current}} / {{total}} 파일",
-    "progressReconnecting": "재연결 중…",
-    "progressStalled": "지연됨",
-    "progressTotalSpeed": "총 {{speed}} ({{lanes}}개 레인)",
-    "progressTransferring": "데이터 전송 중…",
-    "progressTransferringItems": "파일 전송 중 ({{current}}/{{total}})…",
-    "progressVerifying": "파일 무결성 확인 중…",
-    "recentDestinations": "최근 대상",
-    "resumedHint": "다른 창에서 시작된 활성 전송에 다시 연결되었습니다.",
-    "retryTransfer": "재시도",
-    "retryTransferError": "재시도 실패",
-    "selectDestinationHost": "대상 호스트 선택",
-    "transferCancelled": "전송 취소됨",
-    "transferCancelledCopyHint": "대상에 부분 파일이 남아 있을 수 있습니다.",
-    "transferCancelledMoveHint": "대상에 부분 파일이 남아 있을 수 있습니다. 원본 파일은 제거되지 않았습니다.",
-    "transferError": "전송 실패",
-    "transferFailedRetryHint": "대상에 부분 데이터가 유지되었습니다. 연결이 복구되면 다시 시도하면 이어서 전송됩니다.",
-    "transferPartialHint": "전송할 수 없습니다: {{paths}}",
-    "transferSuccess": "전송 완료",
-    "metricsHopSourceRead": "소스 → 서버: {{throughput}}",
-    "metricsHopDestSftpWrite": "서버 → 목적지 (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "서버 → 목적지 (로컬): {{throughput}}"
-  },
-  "plugin": {
-    "name": "파일 관리자"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/nl_NL.json b/plugins/file-manager/locales/translated/nl_NL.json
deleted file mode 100644
index 73d75b111..000000000
--- a/plugins/file-manager/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Bestanden",
-    "sftp": "SFTP",
-    "openFileManager": "Open bestandsbeheerder"
-  },
-  "permissions": {
-    "use": {
-      "title": "Gebruik de bestandsbeheerder",
-      "description": "Bestanden bekijken, bewerken en overdragen via SFTP."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Bestandsbeheer inschakelen",
-        "description": "Via SFTP kunt u bestanden op deze host bekijken en bewerken."
-      },
-      "defaultPath": {
-        "label": "Standaardpad"
-      },
-      "scpLegacy": {
-        "label": "SCP Legacy-modus"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Gelijktijdige bestandsoverdracht",
-        "description": "Hoeveel bestanden de lokale/externe manager naast elkaar tegelijkertijd uploadt of downloadt. Verlaag deze waarde als uw server het aantal SFTP-kanalen beperkt."
-      },
-      "confirmBeforeTrash": {
-        "label": "Controleer voordat u bestanden naar de prullenbak verplaatst.",
-        "description": "Vraag eerst toestemming voordat je bestanden van een externe locatie naar de prullenbak verplaatst. Voor definitieve verwijdering is nog steeds bevestiging vereist."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Bestandsbeheerder"
-  },
-  "fileManager": {
-    "noHostSelected": "Geen host geselecteerd",
-    "initializingEditor": "Editor wordt geïnitialiseerd...",
-    "file": "Bestand",
-    "folder": "Map",
-    "uploadFile": "Bestand uploaden",
-    "downloadFile": "Download",
-    "extractArchive": "Archief uitpakken",
-    "extractingArchive": "Extractie van {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} succesvol geëxtraheerd",
-    "extractFailed": "Extractie mislukt",
-    "compressFile": "Bestand comprimeren",
-    "compressFiles": "Bestanden comprimeren",
-    "compressFilesDesc": "Comprimeer {{count}} items tot een archief",
-    "archiveName": "Archiefnaam",
-    "enterArchiveName": "Voer de archiefnaam in...",
-    "compressionFormat": "Compressieformaat",
-    "selectedFiles": "Geselecteerde bestanden",
-    "andMoreFiles": "en {{count}} meer...",
-    "compress": "Comprimeren",
-    "compressingFiles": "{{count}} items comprimeren tot {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} succesvol aangemaakt",
-    "compressFailed": "Compressie mislukt",
-    "edit": "Bewerking",
-    "preview": "Voorbeeld",
-    "previous": "Vorig",
-    "next": "Volgende",
-    "pageXOfY": "Pagina {{current}} van {{total}}",
-    "zoomOut": "Uitzoomen",
-    "zoomIn": "Inzoomen",
-    "newFile": "Nieuw bestand",
-    "newFolder": "Nieuwe map",
-    "rename": "Naam wijzigen",
-    "uploading": "Bezig met uploaden...",
-    "uploadingFile": "Bezig met uploaden {{name}}...",
-    "uploadingChunk": "Uploaden {{name}}: {{percent}}% (deel {{chunk}} van {{total}})",
-    "fileName": "Bestandsnaam",
-    "folderName": "Mapnaam",
-    "fileUploadedSuccessfully": "Bestand \"{{name}}\" succesvol geüpload",
-    "failedToUploadFile": "Het uploaden van het bestand is mislukt.",
-    "uploadingFolderFiles": "Bestand(en) {{count}} uploaden...",
-    "uploadedFolderFiles": "Bestand(en) {{count}} succesvol geüpload",
-    "uploadedFolderPartial": "Geüploade {{uploaded}} bestand(en), {{failed}} mislukt",
-    "fileDownloadedSuccessfully": "Bestand \"{{name}}\" succesvol gedownload",
-    "failedToDownloadFile": "Het downloaden van het bestand is mislukt.",
-    "fileCreatedSuccessfully": "Bestand \"{{name}}\" is succesvol aangemaakt.",
-    "folderCreatedSuccessfully": "Map \"{{name}}\" is succesvol aangemaakt",
-    "failedToCreateItem": "Het aanmaken van het item is mislukt.",
-    "operationFailed": "{{operation}} bewerking mislukt voor {{name}}: {{error}}",
-    "failedToResolveSymlink": "Het is niet gelukt om de symbolische link op te lossen.",
-    "itemsDeletedSuccessfully": "{{count}} items succesvol verwijderd",
-    "failedToDeleteItems": "Het verwijderen van items is mislukt.",
-    "sudoPasswordRequired": "Beheerderswachtwoord vereist",
-    "enterSudoPassword": "Voer het sudo-wachtwoord in om deze bewerking voort te zetten.",
-    "sudoPassword": "Sudo-wachtwoord",
-    "sudoOperationFailed": "De sudo-bewerking is mislukt.",
-    "sudoAuthFailed": "Sudo-authenticatie mislukt",
-    "dragFilesToUpload": "Sleep bestanden hierheen om ze te uploaden",
-    "dropToUploadHere": "Sleep hierheen om te uploaden",
-    "dropToDownloadHere": "Sleep hierheen om te downloaden",
-    "localFiles": "Lokaal",
-    "showLocalFiles": "Lokale bestanden weergeven (gesplitste weergave)",
-    "hideLocalFiles": "Lokale bestanden verbergen",
-    "localHome": "Startpagina-map",
-    "localPathPlaceholder": "Lokaal mappad",
-    "localShowHidden": "Verborgen bestanden weergeven",
-    "localHideHidden": "Verborgen bestanden verbergen",
-    "localRevealInFileManager": "Weergeven in de systeembestandsbeheerder",
-    "localCannotOpenFolder": "Kan de map niet openen",
-    "localItemCount": "{{count}} items",
-    "localSelectedCount": "{{count}} geselecteerd",
-    "back": "Rug",
-    "forward": "Vooruit",
-    "up": "Omhoog",
-    "kind": "Vriendelijk",
-    "localUploadingProgress": "Uploaden van {{current}} van {{total}}",
-    "localDownloadingProgress": "{{current}} van {{total}} downloaden",
-    "localTransferInFlight": "{{count}} tegelijk",
-    "localPreparingDownload": "Download wordt voorbereid...",
-    "localTransferCancelled": "Overdracht geannuleerd",
-    "localNothingToTransfer": "Niets over te dragen",
-    "localUploadComplete": "Geüploade {{count}} bestand(en)",
-    "localUploadFailed": "Uploaden mislukt",
-    "localUploadPartial": "Geüploade {{done}} bestand(en), {{failed}} mislukt",
-    "localDownloadComplete": "Gedownloade {{count}} bestand(en)",
-    "localDownloadFailed": "Download mislukt",
-    "localDownloadPartial": "Gedownloade {{done}} bestand(en), {{failed}} mislukt",
-    "localReplaceExistingPrompt": "{{count}} item(s) bestaan al in deze map. Wilt u ze vervangen?",
-    "localReplace": "Vervangen",
-    "localSkipExisting": "Overslaan",
-    "localSkippedExisting": "Bestaande item(s) overgeslagen {{count}}",
-    "localUnsafeNamesSkipped": "Er zijn {{count}} items overgeslagen waarvan de namen niet op deze computer gebruikt kunnen worden.",
-    "localOpen": "Open",
-    "localOpenFolder": "Map openen",
-    "localUploadToRemote": "Uploaden naar server",
-    "localUploadToRemoteMany": "Upload {{count}} items naar de server",
-    "localMoveToTrash": "Verplaats het naar de prullenbak",
-    "localMoveToTrashMany": "Verplaats {{count}} items naar de prullenbak",
-    "localTrashConfirmSingle": "\"{{name}}\" naar de prullenbak verplaatsen?",
-    "localTrashConfirmFolder": "Verplaats de map \"{{name}}\" en alle inhoud ervan naar de prullenbak?",
-    "localTrashConfirmMany": "Verplaats {{count}} items naar de prullenbak?",
-    "localTrashed": "Verplaatst {{count}} item(s) naar de prullenbak",
-    "localTrashFailed": "Kon niet naar de prullenbak verplaatst worden.",
-    "localRenameFailed": "Hernoemen mislukt",
-    "localCreateFailed": "Kon item niet aanmaken",
-    "goToParentFolder": "Ga naar de bovenliggende map",
-    "resizeSidebar": "Sleep om de zijbalk te vergroten of verkleinen (dubbelklik om terug te zetten).",
-    "resizeLocalPane": "Sleep om het lokale venster te vergroten of verkleinen (dubbelklikken om terug te zetten).",
-    "columns": "Kolommen",
-    "columnsHint": "Klik met de rechtermuisknop om kolommen te kiezen.",
-    "emptyFolder": "Deze map is leeg.",
-    "searchFiles": "Bestanden doorzoeken...",
-    "upload": "Uploaden",
-    "selectHostToStart": "Selecteer een host om het bestandsbeheer te starten.",
-    "sshRequiredForFileManager": "Bestandsbeheer vereist SSH. Op deze host is SSH niet ingeschakeld.",
-    "failedToConnect": "Verbinding met SSH mislukt",
-    "failedToLoadDirectory": "Map laden mislukt",
-    "noSSHConnection": "Geen SSH-verbinding beschikbaar",
-    "copy": "Kopiëren",
-    "cut": "Snee",
-    "paste": "Plakken",
-    "copyPath": "Kopieer pad",
-    "copyPaths": "Kopieerpaden",
-    "delete": "Verwijderen",
-    "properties": "Eigenschappen",
-    "refresh": "Vernieuwen",
-    "downloadFiles": "Download {{count}} bestanden naar de browser",
-    "copyFiles": "Kopieer {{count}} items",
-    "cutFiles": "Knip {{count}} items",
-    "deleteFiles": "Verwijder {{count}} items",
-    "filesCopiedToClipboard": "{{count}} items gekopieerd naar het klembord",
-    "filesCutToClipboard": "{{count}} items naar het klembord geknipt",
-    "pathCopiedToClipboard": "Pad gekopieerd naar klembord",
-    "pathsCopiedToClipboard": "{{count}} paden gekopieerd naar het klembord",
-    "failedToCopyPath": "Het kopiëren van het pad naar het klembord is mislukt.",
-    "copyFolderLink": "Kopieer de link naar de map",
-    "copyCurrentFolderLink": "Kopieer de link naar de huidige map",
-    "folderLinkCopied": "Maplink gekopieerd naar het klembord.",
-    "failedToCopyFolderLink": "Het kopiëren van de maplink is mislukt.",
-    "movedItems": "Verplaatste {{count}} items",
-    "failedToDeleteItem": "Het verwijderen van het item is mislukt.",
-    "itemRenamedSuccessfully": "{{type}} succesvol hernoemd",
-    "failedToRenameItem": "Het hernoemen van het item is mislukt.",
-    "download": "Download",
-    "openExternalEditor": "Extern openen",
-    "chooseExternalEditor": "Externe editor kiezen",
-    "externalEditorSelected": "Externe redacteur geselecteerd",
-    "externalEditorDesktopOnly": "De externe editor is alleen beschikbaar in de desktop-app.",
-    "externalEditorOpened": "Geopend in een externe editor. Door daar op te slaan, worden de wijzigingen naar de server geüpload.",
-    "failedToOpenExternalEditor": "Het openen van de externe editor is mislukt.",
-    "failedToSelectExternalEditor": "Externe editor selecteren mislukt",
-    "permissions": "Toestemmingen",
-    "size": "Maat",
-    "modified": "Gewijzigd",
-    "path": "Pad",
-    "confirmDelete": "Weet je zeker dat je {{name}} wilt verwijderen?",
-    "permissionDenied": "Toegang geweigerd",
-    "serverError": "Serverfout",
-    "fileSavedSuccessfully": "Bestand succesvol opgeslagen",
-    "failedToSaveFile": "Het opslaan van het bestand is mislukt.",
-    "confirmDeleteSingleItem": "Weet je zeker dat je \"{{name}} \" permanent wilt verwijderen?",
-    "confirmDeleteMultipleItems": "Weet je zeker dat je {{count}} items permanent wilt verwijderen?",
-    "confirmDeleteMultipleItemsWithFolders": "Weet je zeker dat je {{count}} items permanent wilt verwijderen? Dit omvat mappen en hun inhoud.",
-    "confirmDeleteFolder": "Weet je zeker dat je de map \"{{name}}\" en alle inhoud ervan permanent wilt verwijderen?",
-    "permanentDeleteWarning": "Deze actie kan niet ongedaan worden gemaakt. Het/de item(s) wordt/worden permanent van de server verwijderd.",
-    "moveToTrashWarning": "Het/de item(s) wordt/worden verplaatst naar de Termix-prullenbak en kan/kunnen worden hersteld voordat de bewaartermijn is verlopen.",
-    "itemsMovedToTrash": "{{count}} item(s) verplaatst naar de prullenbak",
-    "trash": "Afval",
-    "trashDescription": "Verwijderde items worden {{days}} dag(en) op deze host bewaard.",
-    "trashLoadFailed": "Het laden van de prullenbak is mislukt.",
-    "trashEmpty": "De prullenbak is leeg.",
-    "trashRestore": "Herstellen",
-    "trashRestored": "Hersteld {{name}}",
-    "trashRestoreFailed": "Het herstellen van het item is mislukt. Het oorspronkelijke pad bestaat mogelijk al.",
-    "trashDeletePermanently": "Permanent verwijderen",
-    "trashDeleteConfirm": "Permanent verwijderen {{name}}? Dit kan niet ongedaan gemaakt worden.",
-    "trashPermanentlyDeleted": "Permanent verwijderd {{name}}",
-    "trashDeleteFailed": "Het is niet gelukt om het item permanent te verwijderen.",
-    "trashEmptyAction": "Leeg de prullenbak",
-    "trashEmptyConfirm": "Alle items in de prullenbak permanent verwijderen? Deze actie kan niet ongedaan worden gemaakt.",
-    "trashEmptied": "Vuilnisbak geleegd",
-    "trashRetention": "Automatische opruiming na (dagen)",
-    "trashRetentionSaved": "Afvalretentie bijgewerkt",
-    "trashRetentionFailed": "Het bijwerken van de prullenbakretentie is mislukt.",
-    "trashUnavailableConfirm": "Dit item kan niet naar de prullenbak worden verplaatst, meestal omdat het zich op een ander bestandssysteem bevindt of verhoogde machtigingen vereist. Wilt u het in plaats daarvan permanent verwijderen?",
-    "recent": "Recent",
-    "pinned": "Vastgepind",
-    "folderShortcuts": "Mapsnelkoppelingen",
-    "failedToReconnectSSH": "Het opnieuw tot stand brengen van de SSH-sessie is mislukt.",
-    "openTerminalHere": "Terminal hier openen",
-    "run": "Loop",
-    "openTerminalInFolder": "Open Terminal in deze map",
-    "openTerminalInFileLocation": "Open Terminal op de bestandslocatie.",
-    "runningFile": "Hardlopen - {{file}}",
-    "onlyRunExecutableFiles": "Kan alleen uitvoerbare bestanden uitvoeren",
-    "directories": "Gidsen",
-    "removedFromRecentFiles": "\"{{name}}\" is verwijderd uit recente bestanden",
-    "removeFailed": "Verwijderen mislukt",
-    "unpinnedSuccessfully": "\"{{name}}\" succesvol losgemaakt",
-    "unpinFailed": "Ontgrendelen mislukt",
-    "removedShortcut": "Sneltoets \"{{name}}\" verwijderd",
-    "removeShortcutFailed": "Snelkoppeling verwijderen mislukt",
-    "clearedAllRecentFiles": "Alle recente bestanden verwijderd.",
-    "clearFailed": "Wissen mislukt",
-    "removeFromRecentFiles": "Verwijderen uit recente bestanden",
-    "clearAllRecentFiles": "Wis alle recente bestanden",
-    "unpinFile": "Maak het bestand los",
-    "removeShortcut": "Snelkoppeling verwijderen",
-    "pinFile": "Speldbestand",
-    "addToShortcuts": "Toevoegen aan snelkoppelingen",
-    "pasteFailed": "Plakken mislukt",
-    "noUndoableActions": "Geen onomkeerbare acties",
-    "undoCopySuccess": "Kopieerbewerking ongedaan gemaakt: {{count}} gekopieerde bestanden verwijderd",
-    "undoCopyFailedDelete": "Ongedaan maken mislukt: Er konden geen gekopieerde bestanden worden verwijderd.",
-    "undoCopyFailedNoInfo": "Ongedaan maken mislukt: Gekopieerde bestandsinformatie niet gevonden.",
-    "undoMoveSuccess": "Verplaatsingsbewerking ongedaan gemaakt: {{count}} bestanden teruggeplaatst naar de oorspronkelijke locatie",
-    "undoMoveFailedMove": "Ongedaan maken mislukt: Er konden geen bestanden teruggezet worden.",
-    "undoMoveFailedNoInfo": "Ongedaan maken mislukt: Verplaatste bestandsinformatie niet gevonden.",
-    "undoDeleteNotSupported": "De verwijderingsbewerking kan niet ongedaan worden gemaakt: de bestanden zijn permanent van de server verwijderd.",
-    "undoTypeNotSupported": "Niet-ondersteund type ongedaan maken-bewerking",
-    "undoOperationFailed": "De bewerking 'Ongedaan maken' is mislukt.",
-    "unknownError": "Onbekende fout",
-    "confirm": "Bevestigen",
-    "find": "Vinden...",
-    "replace": "Vervangen",
-    "downloadInstead": "Download in plaats daarvan",
-    "keyboardShortcuts": "Toetsenbord sneltoetsen",
-    "searchAndReplace": "Zoeken en vervangen",
-    "editing": "Bewerken",
-    "search": "Zoekopdracht",
-    "findNext": "Volgende zoeken",
-    "findPrevious": "Vorige zoeken",
-    "save": "Redden",
-    "selectAll": "Alles selecteren",
-    "undo": "Ongedaan maken",
-    "redo": "Opnieuw doen",
-    "moveLineUp": "Verplaats je in de rij",
-    "moveLineDown": "Lijn omlaag verplaatsen",
-    "toggleComment": "Reactie weergeven/verbergen",
-    "autoComplete": "Automatisch aanvullen",
-    "imageLoadError": "Afbeelding laden mislukt",
-    "startTyping": "Begin met typen...",
-    "unknownSize": "Onbekende grootte",
-    "fileIsEmpty": "Het bestand is leeg.",
-    "largeFileWarning": "Waarschuwing voor grote bestanden",
-    "largeFileWarningDesc": "Dit bestand is {{size}} groot, wat prestatieproblemen kan veroorzaken wanneer het als tekstbestand wordt geopend.",
-    "fileNotFoundAndRemoved": "Bestand \"{{name}}\" is niet gevonden en is verwijderd uit recente/vastgepinde bestanden.",
-    "failedToLoadFile": "Bestand laden mislukt: {{error}}",
-    "serverErrorOccurred": "Er is een serverfout opgetreden. Probeer het later opnieuw.",
-    "autoSaveFailed": "Automatisch opslaan is mislukt",
-    "fileAutoSaved": "Bestand automatisch opgeslagen",
-    "moveFileFailed": "Verplaatsen mislukt {{name}}",
-    "moveOperationFailed": "Verplaatsingsbewerking mislukt",
-    "canOnlyCompareFiles": "Er kunnen slechts twee bestanden vergeleken worden.",
-    "comparingFiles": "Bestanden vergelijken: {{file1}} en {{file2}}",
-    "dragFailed": "Sleepbewerking mislukt",
-    "filePinnedSuccessfully": "Bestand \"{{name}}\" succesvol vastgezet",
-    "pinFileFailed": "Het vastzetten van het bestand is mislukt.",
-    "fileUnpinnedSuccessfully": "Bestand \"{{name}}\" is succesvol losgemaakt.",
-    "unpinFileFailed": "Het losmaken van het bestand is mislukt.",
-    "shortcutAddedSuccessfully": "Mapsnelkoppeling \"{{name}}\" succesvol toegevoegd",
-    "addShortcutFailed": "Snelkoppeling toevoegen mislukt",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} items succesvol",
-    "operationCompleted": "{{operation}} {{count}} items",
-    "downloadFileSuccess": "Bestand {{name}} succesvol gedownload",
-    "downloadFileFailed": "Download mislukt",
-    "downloadingFile": "Downloaden {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Ga naar {{name}}",
-    "diffCompareWith": "Vergelijk het verschil met {{name}}",
-    "dragOutsideToDownload": "Sleep buiten het venster om bestanden te downloaden ({{count}})",
-    "newFolderDefault": "Nieuwe map",
-    "newFileDefault": "NieuwBestand.txt",
-    "successfullyMovedItems": "Succesvol {{count}} items verplaatst naar {{target}}",
-    "move": "Beweging",
-    "searchInFile": "Zoeken in bestand (Ctrl+F)",
-    "showKeyboardShortcuts": "Toon sneltoetsen",
-    "decreaseFontSize": "Verklein de lettergrootte",
-    "increaseFontSize": "Lettergrootte vergroten",
-    "startWritingMarkdown": "Begin met het schrijven van je markdown-content...",
-    "loadingFileComparison": "Bestandsvergelijking laden...",
-    "reload": "Herladen",
-    "compare": "Vergelijken",
-    "sideBySide": "Naast elkaar",
-    "inline": "Inline",
-    "fileComparison": "Bestandsvergelijking: {{file1}} versus {{file2}}",
-    "fileTooLarge": "Het bestand is te groot (> 10 MB) en kan om veiligheidsredenen niet als tekstbestand worden geopend.",
-    "sshConnectionFailed": "SSH-verbinding mislukt. Controleer uw verbinding met {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Bestand laden mislukt: {{error}}",
-    "connecting": "Verbinden...",
-    "connectedSuccessfully": "Verbinding succesvol tot stand gebracht.",
-    "totpVerificationFailed": "TOTP-verificatie mislukt",
-    "browserSignInFailed": "Aanmelden is mislukt. Probeer het opnieuw.",
-    "authenticationFailed": "Authenticatie mislukt",
-    "incorrectPassphrase": "Onjuiste wachtzin. Probeer het opnieuw.",
-    "verificationCodePrompt": "Verificatiecode:",
-    "changePermissions": "Machtigingen wijzigen",
-    "currentPermissions": "Huidige vergunningen",
-    "owner": "Eigenaar",
-    "group": "Groep",
-    "others": "Anderen",
-    "read": "Lezen",
-    "write": "Schrijven",
-    "execute": "Uitvoeren",
-    "permissionsChangedSuccessfully": "Machtigingen succesvol gewijzigd",
-    "failedToChangePermissions": "Het wijzigen van de machtigingen is mislukt.",
-    "name": "Naam",
-    "sortByName": "Naam",
-    "sortByDate": "Datum gewijzigd",
-    "sortBySize": "Maat",
-    "ascending": "Stijgend",
-    "descending": "Dalend",
-    "root": "Wortel",
-    "new": "Nieuw",
-    "sortBy": "Sorteren op",
-    "items": "Artikelen",
-    "selected": "Gekozen",
-    "editor": "Editor",
-    "octal": "Octaal",
-    "storage": "Opslag",
-    "disk": "Schijf",
-    "used": "Gebruikt",
-    "of": "van",
-    "toggleSidebar": "Zijbalk in-/uitschakelen",
-    "compactLayout": "Gebruik een compacte lay-out.",
-    "comfortableLayout": "Gebruik een comfortabele lay-out.",
-    "cannotLoadPdf": "Kan PDF niet laden",
-    "pdfLoadError": "Er is een fout opgetreden bij het laden van dit PDF-bestand.",
-    "loadingPdf": "PDF-viewer wordt geladen...",
-    "loadingPage": "Pagina laden...",
-    "cancel": "Annuleren",
-    "copiedItems_one": "Gekopieerd {{count}} item",
-    "copiedItems_other": "Gekopieerde {{count}} items",
-    "deleteCopiedFileFailed": "Kon de kopie van {{name}}niet verwijderen: {{error}}",
-    "dragMovedItems_one": "Item {{count}} verplaatst naar {{target}}",
-    "dragMovedItems_other": "Verplaatste {{count}} items naar {{target}}",
-    "moveBackFileFailed": "Kon {{name}} niet terugzetten: {{error}}",
-    "terminal": "Terminal: {{host}} ({{path}})",
-    "dragToDesktop": "{{name}} naar het bureaublad slepen",
-    "dragFilesToDesktop": "{{count}} bestanden naar het bureaublad slepen",
-    "folderDragUnsupported": "Het slepen van mappen naar het bureaublad wordt momenteel nog niet ondersteund.",
-    "saveToDesktopFailed": "Opslaan mislukt: {{error}}",
-    "dragFailedDetail": "Slepen mislukt: {{error}}",
-    "videoUnsupported": "Uw browser kan dit videoformaat niet afspelen.",
-    "downloadToPlay": "Download het om het elders te spelen.",
-    "cannotPreviewType": "Kan dit bestandstype niet bekijken.",
-    "cannotPreviewTypeHint": "Dit bestandstype heeft geen voorbeeldweergave. Download het om het in een andere app te openen.",
-    "loadingFile": "Bestand laden...",
-    "loadingImage": "Afbeelding laden...",
-    "loadingEditor": "Editor wordt geladen...",
-    "loadingPreview": "Voorbeeldweergave laden...",
-    "loadingAudio": "Audioplayer wordt geladen...",
-    "emptyPreview": "Nog niets om te bekijken...",
-    "revert": "Terugdraaien",
-    "openAsText": "Openen als tekst",
-    "confirmOpenAsText": "Wilt u dit bestand als tekstbestand blijven openen? Dit kan uw browser vertragen."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "Bestanden overdragen tussen twee SSH-hosts.",
-    "sourceServer": "Bronserver",
-    "destinationServer": "Doelserver",
-    "selectHost": "Selecteer host",
-    "noHostSelected": "Geen host geselecteerd",
-    "move": "Beweging",
-    "copy": "Kopiëren",
-    "upload": "Uploaden",
-    "itemsSelected": "{{count}} item geselecteerd",
-    "itemsSelected_other": "{{count}} items geselecteerd",
-    "ready": "Klaar",
-    "loadingHosts": "Hosts worden geladen...",
-    "name": "Naam",
-    "modified": "Gewijzigd",
-    "size": "Maat",
-    "noFiles": "Geen bestanden",
-    "open": "Open",
-    "up": "Omhoog",
-    "refresh": "Vernieuwen",
-    "copyToTarget": "Kopiëren naar doelmap",
-    "rename": "Naam wijzigen",
-    "delete": "Verwijderen",
-    "editPermissions": "Machtigingen bewerken",
-    "createNewFolder": "Nieuwe map maken",
-    "deleteSelectedItems": "Geselecteerde items verwijderen",
-    "deleteConfirm": "Verwijder het geselecteerde item {{count}}?",
-    "deleteConfirm_other": "Verwijder {{count}} geselecteerde items?",
-    "cancel": "Annuleren",
-    "save": "Redden",
-    "folderCreated": "Map aangemaakt",
-    "itemRenamed": "Item hernoemd",
-    "actionFailed": "Actie mislukt",
-    "itemsDeleted": "{{count}} item verwijderd",
-    "itemsDeleted_other": "{{count}} items verwijderd",
-    "deleteFailed": "Verwijderen mislukt",
-    "permissionsUpdated": "Machtigingen bijgewerkt",
-    "noRemoteSessionConnected": "Geen externe sessie verbonden",
-    "failedToListFiles": "Het lukte niet om de bestanden weer te geven.",
-    "failedToRefresh": "Vernieuwen mislukt",
-    "destinationInsideSource": "De bestemming mag zich niet binnen het geselecteerde bronpad bevinden.",
-    "sameHostNoOp": "De bron- en bestemmingsmap zijn dezelfde map."
-  },
-  "hosts": {
-    "fileManager": "Bestandsbeheerder",
-    "fileManagerUrlCopied": "URL van bestandsbeheerder gekopieerd",
-    "copyFileManagerUrlAction": "Kopieer de URL van de bestandsbeheerder",
-    "docsLink": "Documenten bekijken",
-    "hostNotFound": "Host niet gevonden",
-    "loadingHost": "Host wordt geladen..."
-  },
-  "onboarding": {
-    "feature_files": "Bestandsbeheerder",
-    "feature_files_desc": "Blader door bestanden, upload ze, download ze en bewerk ze via SFTP zonder de app te verlaten."
-  },
-  "terminal": {
-    "runTitle": "Bezig met uitvoeren van {{command}} - {{host}}",
-    "terminalTitle": "Terminal - {{host}}",
-    "terminalWithPath": "Terminal - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Blader door bestemmingsmappen",
-    "browsePathError": "Dit pad kon niet worden geopend op de doelhost.",
-    "browsePathWillBeCreated": "Deze map bestaat nog niet. Hij wordt aangemaakt zodra de overdracht start.",
-    "cancel": "Annuleren",
-    "cleanupDestFiles": "Opruimbestemming",
-    "cleanupDestFilesError": "Opruimen mislukt",
-    "cleanupDestFilesNothing": "Niets op te ruimen op de bestemming.",
-    "cleanupDestFilesPartial": "Sommige gedeeltelijke bestanden konden niet worden verwijderd.",
-    "cleanupDestFilesSuccess": "Gedeeltelijke bestanden verwijderd van de bestemming.",
-    "confirmCopy": "Kopiëren",
-    "confirmMove": "Beweging",
-    "copyFolderToHost": "Kopieer de map naar de host…",
-    "copyItemsToHost": "Kopieer {{count}} items naar host…",
-    "copyToHost": "Kopiëren naar host…",
-    "destinationPath": "Bestemmingspad",
-    "destMustBeDirectory": "De bestemming moet een adresboek zijn voor overdrachten van meerdere items.",
-    "goUp": "Ga omhoog",
-    "hostAuthRequired": "Authenticatie vereist. Open eerst Bestandsbeheer op deze host.",
-    "hostConnecting": "Verbinding maken…",
-    "hostConnectionFailed": "Verbinding mislukt",
-    "hostDisconnected": "Niet verbonden",
-    "hostReady": "Klaar",
-    "itemsSummary": "{{count}} items",
-    "jumpHostLimitation": "Beide hosts moeten bereikbaar zijn vanaf de Termix-server. Directe routering tussen hosts wordt niet ondersteund.",
-    "methodAuto": "Auto",
-    "methodAutoHint": "Selecteert tar of SFTP per bestand op basis van het aantal bestanden, de grootte en de comprimeerbaarheid. Voor afzonderlijke bestanden wordt altijd streaming SFTP gebruikt.",
-    "methodItemSftp": "SFTP per bestand",
-    "methodItemSftpHint": "Verstuur elk bestand afzonderlijk via SFTP. Werkt op alle besturingssystemen, inclusief Windows.",
-    "methodItemSftpLimitation": "Elk bestand gebruikt dezelfde SFTP-stream als een kopie van een enkel bestand, de een na de ander. De voortgang wordt gecombineerd voor alle bestanden, waardoor de voortgangsbalk langzaam beweegt bij grote bestanden.",
-    "methodLabel": "Overdrachtsmethode",
-    "methodPreviewError": "De overdrachtsmethode kon niet worden bekeken. De server kiest nog steeds een methode wanneer u start.",
-    "methodPreviewLoading": "Berekeningsmethode voor overdracht…",
-    "methodPreviewScanSummary": "{{fileCount}} bestanden, {{totalSize}} totaal (gescand op de bronhost).",
-    "methodPreviewWillUseItemSftp": "Zal gebruikmaken van: SFTP per bestand",
-    "methodPreviewWillUseTar": "Zal gebruiken: Tar-archief",
-    "methodReason": {
-      "user_item_sftp": "Je hebt gekozen voor SFTP per bestand.",
-      "user_tar": "Je hebt gekozen voor een tar-archief.",
-      "tar_unavailable": "Tar is niet beschikbaar op een of beide hosts, daarom wordt in plaats daarvan SFTP per bestand gebruikt.",
-      "windows_host": "Het betreft een Windows-host, dus tar wordt niet gebruikt.",
-      "auto_multi_large": "Auto: meerdere bestanden, waaronder een groot bestand ({{largestSize}}) met comprimeerbare gegevens. Tar bundelt ze tot één overdracht.",
-      "auto_single_large_in_archive": "Auto: één groot bestand ({{largestSize}}) in deze set, dus SFTP per bestand.",
-      "auto_many_incompressible": "Automatisch: meestal niet-comprimeerbare gegevens, dus SFTP per bestand.",
-      "auto_many_files": "Auto: veel bestanden ({{fileCount}}), tar vermindert de overhead per bestand.",
-      "auto_default": "Automatisch: SFTP per bestand voor deze set."
-    },
-    "methodTar": "Tar-archief",
-    "methodTarHint": "Comprimeer op de bron, verstuur één archiefbestand en pak het uit op de bestemming. Vereist tar op beide Unix-hosts.",
-    "metricsCompress": "Comprimeren op bron: {{duration}}",
-    "metricsExtract": "Uitpakken op bestemming: {{duration}}",
-    "metricsPrepare": "Bestemming voorbereiden: {{duration}}",
-    "metricsRouteBenchmark": "Route probe: direct {{direct}}, relay {{relay}}",
-    "metricsSourceDelete": "Verwijderen uit de bron: {{duration}}",
-    "metricsTotal": "Totaal: {{duration}}",
-    "metricsTransfer": "Einde tot einde: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 geverifieerd: {{duration}}",
-    "moveFolderToHost": "Map verplaatsen naar host…",
-    "moveItemsToHost": "Verplaats {{count}} items naar host…",
-    "moveToHost": "Verplaats naar host…",
-    "noHostsConnected": "Er zijn geen andere bestandsbeheerhosts beschikbaar.",
-    "noHostsConnectedHint": "Voeg een andere SSH-host toe met Bestandsbeheer ingeschakeld in Hostbeheer.",
-    "parallelSegmentsHint": "Grote bestanden worden opgesplitst in blokken van 256 MB. Meerdere lanes gebruiken aparte verbindingen (alsof er meerdere overdrachten worden gestart) voor een hogere totale doorvoer.",
-    "parallelSegmentsLabel": "Parallelle transferstroken",
-    "parallelSegmentsOption": "{{count}} rijstroken",
-    "progressBenchmarking": "De snelste overstaproute selecteren…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Annuleren",
-    "progressCancelling": "Annuleren…",
-    "progressCompressing": "Comprimeren op de bronhost…",
-    "progressExtracting": "Uitpakken op bestemming…",
-    "progressItems": "{{current}} / {{total}} bestanden",
-    "progressReconnecting": "Opnieuw verbinding maken…",
-    "progressStalled": "Vastgelopen",
-    "progressTotalSpeed": "{{speed}} totaal ({{lanes}} rijstroken)",
-    "progressTransferring": "Gegevens overdragen…",
-    "progressTransferringItems": "Bestanden overdragen ({{current}} van {{total}})…",
-    "progressVerifying": "Bestandsintegriteit controleren…",
-    "recentDestinations": "Recente bestemmingen",
-    "resumedHint": "De verbinding met een actieve overdracht die in een ander venster is gestart, is hersteld.",
-    "retryTransfer": "Opnieuw proberen",
-    "retryTransferError": "Opnieuw proberen mislukt",
-    "selectDestinationHost": "Selecteer de bestemmingshost",
-    "transferCancelled": "Overdracht geannuleerd",
-    "transferCancelledCopyHint": "Er kunnen gedeeltelijke bestanden op de bestemming achterblijven.",
-    "transferCancelledMoveHint": "Er kunnen gedeeltelijke bestanden op de bestemming achterblijven. De bronbestanden zijn niet verwijderd.",
-    "transferError": "Overdracht mislukt",
-    "transferFailedRetryHint": "Er zijn gedeeltelijke gegevens op de bestemming bewaard gebleven. De herhaalpoging wordt hervat zodra de verbinding hersteld is.",
-    "transferPartialHint": "Overdracht mislukt: {{paths}}",
-    "transferSuccess": "Overdracht voltooid",
-    "metricsHopSourceRead": "Bron → server: {{throughput}}",
-    "metricsHopDestSftpWrite": "Server → bestemming (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Server → bestemming (lokaal): {{throughput}}"
-  },
-  "plugin": {
-    "name": "Bestandsbeheerder"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/no_NO.json b/plugins/file-manager/locales/translated/no_NO.json
deleted file mode 100644
index b4f3ca5fe..000000000
--- a/plugins/file-manager/locales/translated/no_NO.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Filer",
-    "sftp": "SFTP",
-    "openFileManager": "Åpne filutforsker"
-  },
-  "permissions": {
-    "use": {
-      "title": "Bruk filbehandleren",
-      "description": "Bla gjennom, rediger og overfør filer via SFTP."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Aktiver filutforsker",
-        "description": "Bla gjennom og rediger filer på denne verten via SFTP."
-      },
-      "defaultPath": {
-        "label": "Standardsti"
-      },
-      "scpLegacy": {
-        "label": "SCP Legacy-modus"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Samtidige filoverføringer",
-        "description": "Hvor mange filer den side om side lokale/fjernstyrte administratoren laster opp eller ned samtidig. Reduser dette hvis serveren din begrenser SFTP-kanaler."
-      },
-      "confirmBeforeTrash": {
-        "label": "Bekreft før du flytter filer til papirkurven",
-        "description": "Spør før du flytter eksterne filer til papirkurven. Permanent sletting krever fortsatt bekreftelse."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Filbehandler"
-  },
-  "fileManager": {
-    "noHostSelected": "Ingen vert valgt",
-    "initializingEditor": "Initialiserer redigeringsprogrammet...",
-    "file": "Fil",
-    "folder": "Mappe",
-    "uploadFile": "Last opp fil",
-    "downloadFile": "Last ned",
-    "extractArchive": "Pakk ut arkiv",
-    "extractingArchive": "Pakker ut {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} ble pakket ut",
-    "extractFailed": "Utpakking mislyktes",
-    "compressFile": "Komprimer fil",
-    "compressFiles": "Komprimer filer",
-    "compressFilesDesc": "Komprimer {{count}} elementer til ett arkiv",
-    "archiveName": "Arkivnavn",
-    "enterArchiveName": "Skriv inn arkivnavn...",
-    "compressionFormat": "Komprimeringsformat",
-    "selectedFiles": "Valgte filer",
-    "andMoreFiles": "og {{count}} til...",
-    "compress": "Komprimer",
-    "compressingFiles": "Komprimerer {{count}} elementer til {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} ble opprettet",
-    "compressFailed": "Komprimering mislyktes",
-    "edit": "Rediger",
-    "preview": "Forhåndsvis",
-    "previous": "Forrige",
-    "next": "Neste",
-    "pageXOfY": "Side {{current}} av {{total}}",
-    "zoomOut": "Zoom ut",
-    "zoomIn": "Zoom inn",
-    "newFile": "Ny fil",
-    "newFolder": "Ny mappe",
-    "rename": "Gi nytt navn",
-    "uploading": "Laster opp...",
-    "uploadingFile": "Laster opp {{name}}...",
-    "uploadingChunk": "Laster opp {{name}}: {{percent}}% (del {{chunk}} av {{total}})",
-    "fileName": "Filnavn",
-    "folderName": "Mappenavn",
-    "fileUploadedSuccessfully": "Fil \"{{name}}\" ble lastet opp",
-    "failedToUploadFile": "Kunne ikke laste opp fil",
-    "uploadingFolderFiles": "Laster opp {{count}} fil(er)...",
-    "uploadedFolderFiles": "Lastet opp {{count}} fil(er)",
-    "uploadedFolderPartial": "Opplasting av {{uploaded}} fil(er), {{failed}} mislyktes",
-    "fileDownloadedSuccessfully": "Filen ble lastet ned",
-    "failedToDownloadFile": "Kunne ikke laste ned fil",
-    "fileCreatedSuccessfully": "Fil \"{{name}}\" ble opprettet",
-    "folderCreatedSuccessfully": "Mappe \"{{name}}\" ble opprettet",
-    "failedToCreateItem": "Kunne ikke opprette element",
-    "operationFailed": "{{operation}} mislyktes for {{name}}: {{error}}",
-    "failedToResolveSymlink": "Kunne ikke løse symbolske lenker",
-    "itemsDeletedSuccessfully": "{{count}} elementer ble slettet",
-    "failedToDeleteItems": "Kunne ikke slette elementer",
-    "sudoPasswordRequired": "Administratorpassord kreves",
-    "enterSudoPassword": "Skriv inn sudo-passordet for å fortsette denne operasjonen",
-    "sudoPassword": "Sudo-passord",
-    "sudoOperationFailed": "Sudo-operasjonen mislyktes",
-    "sudoAuthFailed": "Sudo-autentisering mislyktes",
-    "dragFilesToUpload": "Slipp filer her for å laste opp",
-    "dropToUploadHere": "Slipp for å laste opp her",
-    "dropToDownloadHere": "Slipp for å laste ned her",
-    "localFiles": "Lokal",
-    "showLocalFiles": "Vis lokale filer (delt visning)",
-    "hideLocalFiles": "Skjul lokale filer",
-    "localHome": "Hjemmappe",
-    "localPathPlaceholder": "Lokal mappebane",
-    "localShowHidden": "Vis skjulte filer",
-    "localHideHidden": "Skjul skjulte filer",
-    "localRevealInFileManager": "Avslør i systemfilbehandleren",
-    "localCannotOpenFolder": "Kan ikke åpne mappen",
-    "localItemCount": "{{count}} elementer",
-    "localSelectedCount": "{{count}} valgt",
-    "back": "Tilbake",
-    "forward": "Framover",
-    "up": "Opp",
-    "kind": "Type",
-    "localUploadingProgress": "Laster opp {{current}} av {{total}}",
-    "localDownloadingProgress": "Laster ned {{current}} av {{total}}",
-    "localTransferInFlight": "{{count}} med en gang",
-    "localPreparingDownload": "Forbereder nedlasting ...",
-    "localTransferCancelled": "Overføringen er avbrutt",
-    "localNothingToTransfer": "Ingenting å overføre",
-    "localUploadComplete": "Opplastede {{count}} fil(er)",
-    "localUploadFailed": "Opplastingen mislyktes",
-    "localUploadPartial": "Opplasting av {{done}} fil(er), {{failed}} mislyktes",
-    "localDownloadComplete": "Lastet ned {{count}} fil(er)",
-    "localDownloadFailed": "Nedlasting mislyktes",
-    "localDownloadPartial": "Nedlasting av {{done}} fil(er), {{failed}} mislyktes",
-    "localReplaceExistingPrompt": "{{count}} element(er) finnes allerede i denne mappen. Vil du erstatte dem?",
-    "localReplace": "Erstatt",
-    "localSkipExisting": "Hopp over",
-    "localSkippedExisting": "Hoppet over {{count}} eksisterende element(er)",
-    "localUnsafeNamesSkipped": "Hoppet over {{count}} elementer hvis navn ikke kan brukes på denne datamaskinen",
-    "localOpen": "Åpne",
-    "localOpenFolder": "Åpne mappen",
-    "localUploadToRemote": "Last opp til server",
-    "localUploadToRemoteMany": "Last opp {{count}} elementer til serveren",
-    "localMoveToTrash": "Flytt til papirkurven",
-    "localMoveToTrashMany": "Flytt {{count}} elementer til papirkurven",
-    "localTrashConfirmSingle": "Flytte «{{name}}» til papirkurven?",
-    "localTrashConfirmFolder": "Flytte mappen «{{name}}» og alt innholdet til papirkurven?",
-    "localTrashConfirmMany": "Flytte {{count}} elementer til papirkurven?",
-    "localTrashed": "Flyttet {{count}} element(er) til papirkurven",
-    "localTrashFailed": "Kunne ikke flytte til papirkurven",
-    "localRenameFailed": "Mislyktes i å gi nytt navn",
-    "localCreateFailed": "Kunne ikke opprette elementet",
-    "goToParentFolder": "Gå til overordnet mappe",
-    "resizeSidebar": "Dra for å endre størrelsen på sidefeltet (dobbeltklikk for å tilbakestille)",
-    "resizeLocalPane": "Dra for å endre størrelsen på den lokale ruten (dobbeltklikk for å tilbakestille)",
-    "columns": "Kolonner",
-    "columnsHint": "Høyreklikk for å velge kolonner",
-    "emptyFolder": "Denne mappen er tom",
-    "searchFiles": "Søk i filer...",
-    "upload": "Last opp",
-    "selectHostToStart": "Velg en vert for å starte filhåndtering",
-    "sshRequiredForFileManager": "Filbehandleren krever SSH. Denne verten har ikke SSH aktivert.",
-    "failedToConnect": "Kunne ikke koble til SSH",
-    "failedToLoadDirectory": "Kunne ikke laste katalog",
-    "noSSHConnection": "Ingen SSH-tilkobling tilgjengelig",
-    "copy": "Kopier",
-    "cut": "Klipp ut",
-    "paste": "Lim inn",
-    "copyPath": "Kopier sti",
-    "copyPaths": "Kopier stier",
-    "delete": "Slett",
-    "properties": "Egenskaper",
-    "refresh": "Oppdater",
-    "downloadFiles": "Last ned {{count}} filer til nettleseren",
-    "copyFiles": "Kopier {{count}} elementer",
-    "cutFiles": "Klipp ut {{count}} elementer",
-    "deleteFiles": "Slett {{count}} elementer",
-    "filesCopiedToClipboard": "{{count}} elementer kopiert til utklippstavlen",
-    "filesCutToClipboard": "{{count}} elementer klippet til utklippstavlen",
-    "pathCopiedToClipboard": "Sti kopiert til utklippstavlen",
-    "pathsCopiedToClipboard": "{{count}} stier kopiert til utklippstavlen",
-    "failedToCopyPath": "Kunne ikke kopiere sti",
-    "copyFolderLink": "Kopier lenke til mappe",
-    "copyCurrentFolderLink": "Kopier lenke til gjeldende mappe",
-    "folderLinkCopied": "Mappelenke kopiert til utklippstavlen",
-    "failedToCopyFolderLink": "Kunne ikke kopiere mappelenken",
-    "movedItems": "Flyttet {{count}} elementer",
-    "failedToDeleteItem": "Kunne ikke slette element",
-    "itemRenamedSuccessfully": "{{type}} fikk nytt navn",
-    "failedToRenameItem": "Kunne ikke gi element nytt navn",
-    "download": "Last ned",
-    "openExternalEditor": "Åpne eksternt",
-    "chooseExternalEditor": "Velg ekstern editor",
-    "externalEditorSelected": "Ekstern redigerer valgt",
-    "externalEditorDesktopOnly": "Ekstern editor er bare tilgjengelig i skrivebordsappen",
-    "externalEditorOpened": "Åpnet i ekstern editor. Hvis du lagrer der, lastes endringene opp tilbake til serveren.",
-    "failedToOpenExternalEditor": "Kunne ikke åpne ekstern editor",
-    "failedToSelectExternalEditor": "Kunne ikke velge ekstern redigeringsprogram",
-    "permissions": "Tillatelser",
-    "size": "Størrelse",
-    "modified": "Endret",
-    "path": "Sti",
-    "confirmDelete": "Er du sikker på at du vil slette {{name}}?",
-    "permissionDenied": "Tillatelse nektet",
-    "serverError": "Serverfeil",
-    "fileSavedSuccessfully": "Filen ble lagret",
-    "failedToSaveFile": "Kunne ikke lagre fil",
-    "confirmDeleteSingleItem": "Er du sikker på at du vil slette \"{{name}}\" permanent?",
-    "confirmDeleteMultipleItems": "Er du sikker på at du vil slette {{count}} elementer permanent?",
-    "confirmDeleteMultipleItemsWithFolders": "Er du sikker på at du vil slette {{count}} elementer permanent? Dette inkluderer mapper og innholdet deres.",
-    "confirmDeleteFolder": "Er du sikker på at du vil slette mappen \"{{name}}\" og alt innholdet permanent?",
-    "permanentDeleteWarning": "Denne handlingen kan ikke angres. Elementene blir slettet permanent fra serveren.",
-    "moveToTrashWarning": "Elementet/elementene vil bli flyttet til Termix-papirkurven og kan gjenopprettes før oppbevaringsperioden utløper.",
-    "itemsMovedToTrash": "{{count}} element(er) flyttet til papirkurven",
-    "trash": "Søppel",
-    "trashDescription": "Slettede elementer lagres i {{days}} dag(er) på denne verten.",
-    "trashLoadFailed": "Kunne ikke laste inn papirkurven",
-    "trashEmpty": "Papirkurven er tom",
-    "trashRestore": "Restaurere",
-    "trashRestored": "Gjenopprettet {{name}}",
-    "trashRestoreFailed": "Kunne ikke gjenopprette elementet. Den opprinnelige banen finnes kanskje allerede.",
-    "trashDeletePermanently": "Slett permanent",
-    "trashDeleteConfirm": "Vil du slette {{name}}permanent? Dette kan ikke angres.",
-    "trashPermanentlyDeleted": "Slettet permanent {{name}}",
-    "trashDeleteFailed": "Kunne ikke slette elementet permanent",
-    "trashEmptyAction": "Tøm søppelbøtten",
-    "trashEmptyConfirm": "Vil du slette alle elementene i papirkurven permanent? Dette kan ikke angres.",
-    "trashEmptied": "Søppelet tømt",
-    "trashRetention": "Automatisk opprydding etter (dager)",
-    "trashRetentionSaved": "Oppbevaring av søppel er oppdatert",
-    "trashRetentionFailed": "Kunne ikke oppdatere papirkurven",
-    "trashUnavailableConfirm": "Dette elementet kan ikke flyttes til papirkurven, vanligvis fordi det er på et annet filsystem eller krever utvidede tillatelser. Slette det permanent i stedet?",
-    "recent": "Nylige",
-    "pinned": "Festet",
-    "folderShortcuts": "Mappesnarveier",
-    "failedToReconnectSSH": "Kunne ikke koble til SSH-økt på nytt",
-    "openTerminalHere": "Åpne terminal her",
-    "run": "Kjør",
-    "openTerminalInFolder": "Åpne terminal i denne mappen",
-    "openTerminalInFileLocation": "Åpne terminal ved filplassering",
-    "runningFile": "Kjører - {{file}}",
-    "onlyRunExecutableFiles": "Kan bare kjøre kjørbare filer",
-    "directories": "Kataloger",
-    "removedFromRecentFiles": "Fjernet \"{{name}}\" fra nylige filer",
-    "removeFailed": "Fjerning mislyktes",
-    "unpinnedSuccessfully": "Fjernet festing av \"{{name}}\"",
-    "unpinFailed": "Fjerning av festing mislyktes",
-    "removedShortcut": "Fjernet snarvei \"{{name}}\"",
-    "removeShortcutFailed": "Kunne ikke fjerne snarvei",
-    "clearedAllRecentFiles": "Tømte alle nylige filer",
-    "clearFailed": "Tømming mislyktes",
-    "removeFromRecentFiles": "Fjern fra nylige filer",
-    "clearAllRecentFiles": "Tøm alle nylige filer",
-    "unpinFile": "Løsne fil",
-    "removeShortcut": "Fjern snarvei",
-    "pinFile": "Fest fil",
-    "addToShortcuts": "Legg til snarveier",
-    "pasteFailed": "Innliming mislyktes",
-    "noUndoableActions": "Ingen handlinger kan angres",
-    "undoCopySuccess": "Angret kopiering: Slettet {{count}} kopierte filer",
-    "undoCopyFailedDelete": "Angre mislyktes: Kunne ikke slette kopierte filer",
-    "undoCopyFailedNoInfo": "Angre mislyktes: Fant ingen info om kopierte filer",
-    "undoMoveSuccess": "Angret flytting: Flyttet {{count}} filer tilbake",
-    "undoMoveFailedMove": "Angre mislyktes: Kunne ikke flytte filer tilbake",
-    "undoMoveFailedNoInfo": "Angre mislyktes: Fant ingen info om flyttede filer",
-    "undoDeleteNotSupported": "Sletteoperasjon kan ikke angres: Filer er slettet permanent fra server",
-    "undoTypeNotSupported": "Ikke støttet angretype",
-    "undoOperationFailed": "Angreoperasjon mislyktes",
-    "unknownError": "Ukjent feil",
-    "confirm": "Bekreft",
-    "find": "Finn...",
-    "replace": "Erstatt",
-    "downloadInstead": "Last ned i stedet",
-    "keyboardShortcuts": "Tastatursnarveier",
-    "searchAndReplace": "Søk og erstatt",
-    "editing": "Redigering",
-    "search": "Søk",
-    "findNext": "Finn neste",
-    "findPrevious": "Finn forrige",
-    "save": "Lagre",
-    "selectAll": "Marker alt",
-    "undo": "Angre",
-    "redo": "Gjør om",
-    "moveLineUp": "Flytt linje opp",
-    "moveLineDown": "Flytt linje ned",
-    "toggleComment": "Veksle kommentar",
-    "autoComplete": "Autofullfør",
-    "imageLoadError": "Kunne ikke laste bilde",
-    "startTyping": "Begynn å skrive...",
-    "unknownSize": "Ukjent størrelse",
-    "fileIsEmpty": "Filen er tom",
-    "largeFileWarning": "Advarsel om stor fil",
-    "largeFileWarningDesc": "Denne filen er {{size}} stor, noe som kan gi ytelsesproblemer når den åpnes som tekst.",
-    "fileNotFoundAndRemoved": "Filen «{{name}}» ble ikke funnet og er fjernet fra nylige/festede filer",
-    "failedToLoadFile": "Kunne ikke laste fil: {{error}}",
-    "serverErrorOccurred": "Serverfeil oppstod. Prøv igjen senere.",
-    "autoSaveFailed": "Autolagring mislyktes",
-    "fileAutoSaved": "Filen ble autolagret",
-    "moveFileFailed": "Kunne ikke flytte {{name}}",
-    "moveOperationFailed": "Flytteoperasjon mislyktes",
-    "canOnlyCompareFiles": "Kan kun sammenligne to filer",
-    "comparingFiles": "Sammenligner filer: {{file1}} og {{file2}}",
-    "dragFailed": "Draoperasjon mislyktes",
-    "filePinnedSuccessfully": "Filen «{{name}}» ble festet",
-    "pinFileFailed": "Kunne ikke feste fil",
-    "fileUnpinnedSuccessfully": "Filen «{{name}}» ble løsnet",
-    "unpinFileFailed": "Kunne ikke løsne fil",
-    "shortcutAddedSuccessfully": "Mappesnarvei «{{name}}» ble lagt til",
-    "addShortcutFailed": "Kunne ikke legge til snarvei",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} elementer",
-    "operationCompleted": "{{operation}} {{count}} elementer",
-    "downloadFileSuccess": "Fil {{name}} ble lastet ned",
-    "downloadFileFailed": "Nedlasting mislyktes",
-    "downloadingFile": "Laster ned {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Flytt til {{name}}",
-    "diffCompareWith": "Sammenlign forskjeller med {{name}}",
-    "dragOutsideToDownload": "Dra utenfor vinduet for å laste ned ({{count}} filer)",
-    "newFolderDefault": "NyMappe",
-    "newFileDefault": "NyFil.txt",
-    "successfullyMovedItems": "Flyttet {{count}} elementer til {{target}}",
-    "move": "Flytt",
-    "searchInFile": "Søk i fil (Ctrl+F)",
-    "showKeyboardShortcuts": "Vis tastatursnarveier",
-    "decreaseFontSize": "Reduser skriftstørrelsen",
-    "increaseFontSize": "Øk skriftstørrelsen",
-    "startWritingMarkdown": "Begynn å skrive markdown-innhold...",
-    "loadingFileComparison": "Laster filsammenligning...",
-    "reload": "Last inn på nytt",
-    "compare": "Sammenlign",
-    "sideBySide": "Side om side",
-    "inline": "Innebygd",
-    "fileComparison": "Filsammenligning: {{file1}} vs {{file2}}",
-    "fileTooLarge": "Filen er for stor (> 10 MB) og kan ikke åpnes som tekst av sikkerhetshensyn.",
-    "sshConnectionFailed": "SSH-tilkobling mislyktes. Kontroller tilkoblingen til {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Kunne ikke laste fil: {{error}}",
-    "connecting": "Kobler til...",
-    "connectedSuccessfully": "Tilkoblet",
-    "totpVerificationFailed": "TOTP-verifisering mislyktes",
-    "browserSignInFailed": "Påloggingen mislyktes. Prøv på nytt.",
-    "authenticationFailed": "Autentisering mislyktes",
-    "incorrectPassphrase": "Feil passordfrase. Prøv på nytt.",
-    "verificationCodePrompt": "Verifiseringskode:",
-    "changePermissions": "Endre tillatelser",
-    "currentPermissions": "Gjeldende tillatelser",
-    "owner": "Eier",
-    "group": "Gruppe",
-    "others": "Andre",
-    "read": "Les",
-    "write": "Skriv",
-    "execute": "Kjør",
-    "permissionsChangedSuccessfully": "Tillatelser endret",
-    "failedToChangePermissions": "Kunne ikke endre tillatelser",
-    "name": "Navn",
-    "sortByName": "Navn",
-    "sortByDate": "Dato endret",
-    "sortBySize": "Størrelse",
-    "ascending": "Stigende",
-    "descending": "Synkende",
-    "root": "Rot",
-    "new": "Ny",
-    "sortBy": "Sorter etter",
-    "items": "Elementer",
-    "selected": "Valgt",
-    "editor": "Redaktør",
-    "octal": "Oktal",
-    "storage": "Lagring",
-    "disk": "Disk",
-    "used": "Brukt",
-    "of": "av",
-    "toggleSidebar": "Slå av/på sidepanel",
-    "compactLayout": "Bruk kompakt oppsett",
-    "comfortableLayout": "Bruk komfortabel layout",
-    "cannotLoadPdf": "Kan ikke laste inn PDF-filen",
-    "pdfLoadError": "Det oppsto en feil under lasting av denne PDF-filen.",
-    "loadingPdf": "Laster inn PDF-leseren...",
-    "loadingPage": "Laster inn side...",
-    "cancel": "Avbryt",
-    "copiedItems_one": "Kopierte {{count}} element",
-    "copiedItems_other": "Kopierte {{count}} elementer",
-    "deleteCopiedFileFailed": "Kunne ikke slette kopien av {{name}}: {{error}}",
-    "dragMovedItems_one": "Flyttet {{count}} element til {{target}}",
-    "dragMovedItems_other": "Flyttet {{count}} elementer til {{target}}",
-    "moveBackFileFailed": "Kunne ikke flytte {{name}} tilbake: {{error}}",
-    "terminal": "Terminal: {{host}} ({{path}})",
-    "dragToDesktop": "Dra {{name}} til skrivebordet",
-    "dragFilesToDesktop": "Dra {{count}} filer til skrivebordet",
-    "folderDragUnsupported": "Det støttes ikke ennå å dra mapper til skrivebordet",
-    "saveToDesktopFailed": "Lagring mislyktes: {{error}}",
-    "dragFailedDetail": "Drag mislyktes: {{error}}",
-    "videoUnsupported": "Nettleseren din kan ikke spille av dette videoformatet.",
-    "downloadToPlay": "Last ned for å spille det et annet sted",
-    "cannotPreviewType": "Kan ikke forhåndsvise denne filtypen",
-    "cannotPreviewTypeHint": "Denne filtypen har ingen forhåndsvisning. Last den ned for å åpne den i en annen app.",
-    "loadingFile": "Laster inn filen...",
-    "loadingImage": "Laster inn bilde...",
-    "loadingEditor": "Laster inn redigeringsprogrammet ...",
-    "loadingPreview": "Laster inn forhåndsvisning ...",
-    "loadingAudio": "Laster inn lydspilleren ...",
-    "emptyPreview": "Ingenting å forhåndsvise ennå...",
-    "revert": "Tilbakestill",
-    "openAsText": "Åpne som tekst",
-    "confirmOpenAsText": "Vil du fortsette å åpne denne filen som tekst? Dette kan gjøre nettleseren din tregere."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "Overfør filer mellom to SSH-verter.",
-    "sourceServer": "Kildeserver",
-    "destinationServer": "Destinasjonsserver",
-    "selectHost": "Velg vert",
-    "noHostSelected": "Ingen vert valgt",
-    "move": "Flytt",
-    "copy": "Kopier",
-    "upload": "Last opp",
-    "itemsSelected": "{{count}} element valgt",
-    "itemsSelected_other": "{{count}} elementer valgt",
-    "ready": "Klar",
-    "loadingHosts": "Laster verter...",
-    "name": "Navn",
-    "modified": "Endret",
-    "size": "Størrelse",
-    "noFiles": "Ingen filer",
-    "open": "Åpne",
-    "up": "Opp",
-    "refresh": "Oppdater",
-    "copyToTarget": "Kopier til målkatalogen",
-    "rename": "Gi nytt navn",
-    "delete": "Slett",
-    "editPermissions": "Rediger tillatelser",
-    "createNewFolder": "Opprett ny mappe",
-    "deleteSelectedItems": "Slett valgte elementer",
-    "deleteConfirm": "Slette {{count}} valgt element?",
-    "deleteConfirm_other": "Slette {{count}} valgte elementer?",
-    "cancel": "Avbryt",
-    "save": "Lagre",
-    "folderCreated": "Mappe opprettet",
-    "itemRenamed": "Elementet har fått nytt navn",
-    "actionFailed": "Handlingen mislyktes",
-    "itemsDeleted": "{{count}} element slettet",
-    "itemsDeleted_other": "{{count}} elementer slettet",
-    "deleteFailed": "Slettingen mislyktes",
-    "permissionsUpdated": "Tillatelser oppdatert",
-    "noRemoteSessionConnected": "Ingen ekstern økt tilkoblet",
-    "failedToListFiles": "Kunne ikke liste filer",
-    "failedToRefresh": "Kunne ikke laste inn på nytt",
-    "destinationInsideSource": "Destinasjonen kan ikke være innenfor den valgte kildebanen.",
-    "sameHostNoOp": "Kilde og destinasjon er i samme mappe."
-  },
-  "hosts": {
-    "fileManager": "Filbehandler",
-    "fileManagerUrlCopied": "URL-adressen til filbehandleren er kopiert",
-    "copyFileManagerUrlAction": "Kopier URL-adressen til filbehandleren",
-    "docsLink": "Vis dokumenter",
-    "hostNotFound": "Verten ble ikke funnet",
-    "loadingHost": "Laster inn vert ..."
-  },
-  "onboarding": {
-    "feature_files": "Filbehandler",
-    "feature_files_desc": "Bla gjennom, last opp, last ned og rediger filer via SFTP uten å forlate appen."
-  },
-  "terminal": {
-    "runTitle": "Kjører {{command}} - {{host}}",
-    "terminalTitle": "Terminal - {{host}}",
-    "terminalWithPath": "Terminal - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Bla gjennom målmapper",
-    "browsePathError": "Kunne ikke åpne denne banen på målverten.",
-    "browsePathWillBeCreated": "Denne mappen finnes ikke ennå. Den vil bli opprettet når overføringen starter.",
-    "cancel": "Avbryt",
-    "cleanupDestFiles": "Rydd opp destinasjonen",
-    "cleanupDestFilesError": "Opprydding mislyktes",
-    "cleanupDestFilesNothing": "Ingenting å rydde opp i på destinasjonen",
-    "cleanupDestFilesPartial": "Kunne ikke fjerne noen delvise filer",
-    "cleanupDestFilesSuccess": "Fjernet delvise filer fra destinasjonen",
-    "confirmCopy": "Kopier",
-    "confirmMove": "Flytt",
-    "copyFolderToHost": "Kopier mappe til vert…",
-    "copyItemsToHost": "Kopier {{count}} elementer til vert for…",
-    "copyToHost": "Kopier til vert…",
-    "destinationPath": "Destinasjonssti",
-    "destMustBeDirectory": "Destinasjonen må være en katalog for overføringer av flere elementer",
-    "goUp": "Gå opp",
-    "hostAuthRequired": "Autentisering kreves. Åpne Filbehandler på denne verten først",
-    "hostConnecting": "Kobler til…",
-    "hostConnectionFailed": "Tilkobling mislyktes",
-    "hostDisconnected": "Ikke tilkoblet",
-    "hostReady": "Klar",
-    "itemsSummary": "{{count}} elementer",
-    "jumpHostLimitation": "Begge vertene må være tilgjengelige fra Termix-serveren. Direkte vert-til-vert-ruting støttes ikke.",
-    "methodAuto": "Bil",
-    "methodAutoHint": "Velger tar eller SFTP per fil basert på antall filer, størrelse og komprimerbarhet. Enkeltfiler bruker alltid strømme-SFTP.",
-    "methodItemSftp": "SFTP per fil",
-    "methodItemSftpHint": "Overfør hver fil individuelt via SFTP. Fungerer på alle verter, inkludert Windows.",
-    "methodItemSftpLimitation": "Hver fil bruker den samme SFTP-strømmen som en enkeltfilskopi, én etter én. Fremdriften kombineres på tvers av alle filene, så linjen beveger seg sakte under store filer.",
-    "methodLabel": "Overføringsmetode",
-    "methodPreviewError": "Kunne ikke forhåndsvise overføringsmetoden. Serveren vil fortsatt velge en metode når du starter.",
-    "methodPreviewLoading": "Beregning av overføringsmetode…",
-    "methodPreviewScanSummary": "{{fileCount}} filer, {{totalSize}} totalt (skannet på kildeverten).",
-    "methodPreviewWillUseItemSftp": "Vil bruke: SFTP per fil",
-    "methodPreviewWillUseTar": "Vil bruke: Tar-arkiv",
-    "methodReason": {
-      "user_item_sftp": "Du valgte SFTP per fil.",
-      "user_tar": "Du valgte tar-arkiv.",
-      "tar_unavailable": "Tar er ikke tilgjengelig på én eller begge vertene, så SFTP per fil vil bli brukt i stedet.",
-      "windows_host": "En Windows-vert er involvert, så tar brukes ikke.",
-      "auto_multi_large": "Auto: flere filer, inkludert en stor fil ({{largestSize}}) med komprimerbare data. Tar samler dem i én overføring.",
-      "auto_single_large_in_archive": "Auto: én stor fil ({{largestSize}}) i dette settet, så SFTP per fil.",
-      "auto_many_incompressible": "Auto: stort sett inkomprimerbare data, så SFTP per fil.",
-      "auto_many_files": "Auto: mange filer ({{fileCount}}), tar reduserer overhead per fil.",
-      "auto_default": "Auto: SFTP per fil for dette settet."
-    },
-    "methodTar": "Tar-arkiv",
-    "methodTarHint": "Komprimer på kildekode, overfør ett arkiv, pakk ut på destinasjon. Krever tar på begge Unix-vertene.",
-    "metricsCompress": "Komprimer på kilde: {{duration}}",
-    "metricsExtract": "Uttrekk på destinasjon: {{duration}}",
-    "metricsPrepare": "Forbered destinasjon: {{duration}}",
-    "metricsRouteBenchmark": "Rutesonde: direkte {{direct}}, relé {{relay}}",
-    "metricsSourceDelete": "Fjern fra kilden: {{duration}}",
-    "metricsTotal": "Totalt: {{duration}}",
-    "metricsTransfer": "Ende-til-ende: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 bekreftet: {{duration}}",
-    "moveFolderToHost": "Flytt mappen til verten…",
-    "moveItemsToHost": "Flytt {{count}} elementer til vert for…",
-    "moveToHost": "Flytt til vert…",
-    "noHostsConnected": "Ingen andre filbehandlerverter tilgjengelig.",
-    "noHostsConnectedHint": "Legg til en annen SSH-vert med Filbehandling aktivert i Vertsbehandling.",
-    "parallelSegmentsHint": "Store filer deles inn i deler på 256 MB. Flere baner bruker separate tilkoblinger (som å starte flere overføringer) for høyere total gjennomstrømning.",
-    "parallelSegmentsLabel": "Parallelle overføringsfelt",
-    "parallelSegmentsOption": "{{count}} baner",
-    "progressBenchmarking": "Velge den raskeste overgangsruten…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Avbryt",
-    "progressCancelling": "Avbryter…",
-    "progressCompressing": "Komprimering på kildevert…",
-    "progressExtracting": "Uttrekker på destinasjon…",
-    "progressItems": "{{current}} / {{total}} filer",
-    "progressReconnecting": "Kobler til igjen…",
-    "progressStalled": "Fastlåst",
-    "progressTotalSpeed": "{{speed}} totalt ({{lanes}} baner)",
-    "progressTransferring": "Overføring av data…",
-    "progressTransferringItems": "Overføring av filer ({{current}} av {{total}})…",
-    "progressVerifying": "Verifiserer filintegritet…",
-    "recentDestinations": "Nylige destinasjoner",
-    "resumedHint": "Koblet til igjen en aktiv overføring som startet i et annet vindu.",
-    "retryTransfer": "Prøv igjen",
-    "retryTransferError": "Forsøk på nytt mislyktes",
-    "selectDestinationHost": "Velg destinasjonsvert",
-    "transferCancelled": "Overføringen er avbrutt",
-    "transferCancelledCopyHint": "Delvise filer kan bli liggende igjen på destinasjonen.",
-    "transferCancelledMoveHint": "Delvise filer kan bli liggende igjen på destinasjonen. Kildefilene ble ikke fjernet.",
-    "transferError": "Overføringen mislyktes",
-    "transferFailedRetryHint": "Delvise data ble lagret på destinasjonen. Forsøket gjenopptas når forbindelsen er tilbake.",
-    "transferPartialHint": "Kunne ikke overføre: {{paths}}",
-    "transferSuccess": "Overføringen er fullført",
-    "metricsHopSourceRead": "Kilde → server: {{throughput}}",
-    "metricsHopDestSftpWrite": "Server → destinasjon (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Server → dest (lokal): {{throughput}}"
-  },
-  "plugin": {
-    "name": "Filbehandler"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/pl_PL.json b/plugins/file-manager/locales/translated/pl_PL.json
deleted file mode 100644
index 91b82e9e2..000000000
--- a/plugins/file-manager/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Pliki",
-    "sftp": "SFTP",
-    "openFileManager": "Otwórz menedżer plików"
-  },
-  "permissions": {
-    "use": {
-      "title": "Użyj menedżera plików",
-      "description": "Przeglądaj, edytuj i przesyłaj pliki przez SFTP."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Włącz menedżer plików",
-        "description": "Przeglądaj i edytuj pliki na tym hoście przez SFTP."
-      },
-      "defaultPath": {
-        "label": "Domyślna ścieżka"
-      },
-      "scpLegacy": {
-        "label": "Tryb SCP Legacy"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Jednoczesne przesyłanie plików",
-        "description": "Ile plików lokalny/zdalny menedżer obok siebie przesyła lub pobiera jednocześnie? Zmniejsz tę wartość, jeśli Twój serwer ogranicza kanały SFTP."
-      },
-      "confirmBeforeTrash": {
-        "label": "Potwierdź przed przeniesieniem plików do kosza",
-        "description": "Zapytaj przed przeniesieniem plików zdalnych do kosza. Trwałe usunięcie nadal wymaga potwierdzenia."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Menedżer plików"
-  },
-  "fileManager": {
-    "noHostSelected": "Nie wybrano hosta",
-    "initializingEditor": "Inicjalizacja edytora...",
-    "file": "Plik",
-    "folder": "Folder",
-    "uploadFile": "Prześlij plik",
-    "downloadFile": "Pobierz",
-    "extractArchive": "Wyodrębnij archiwum",
-    "extractingArchive": "Wyodrębnianie {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} wyodrębniono pomyślnie",
-    "extractFailed": "Wyodrębnienie nie powiodło się",
-    "compressFile": "Kompresuj plik",
-    "compressFiles": "Kompresuj pliki",
-    "compressFilesDesc": "Kompresuj {{count}} elementów do archiwum",
-    "archiveName": "Nazwa archiwum",
-    "enterArchiveName": "Wprowadź nazwę archiwum...",
-    "compressionFormat": "Format kompresji",
-    "selectedFiles": "Wybrane pliki",
-    "andMoreFiles": "i jeszcze {{count}}...",
-    "compress": "Kompresuj",
-    "compressingFiles": "Kompresowanie {{count}} elementów do {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} utworzono pomyślnie",
-    "compressFailed": "Kompresja nie powiodła się",
-    "edit": "Edytuj",
-    "preview": "Podgląd",
-    "previous": "Poprzedni",
-    "next": "Następny",
-    "pageXOfY": "Strona {{current}} z {{total}}",
-    "zoomOut": "Oddal",
-    "zoomIn": "Powiększ",
-    "newFile": "Nowy plik",
-    "newFolder": "Nowy folder",
-    "rename": "Zmień nazwę",
-    "uploading": "Przesyłanie...",
-    "uploadingFile": "Przesyłanie {{name}}...",
-    "uploadingChunk": "Przesyłanie {{name}}: {{percent}}% (część {{chunk}} z {{total}})",
-    "fileName": "Nazwa pliku",
-    "folderName": "Nazwa folderu",
-    "fileUploadedSuccessfully": "Plik „{{name}}” został pomyślnie przesłany",
-    "failedToUploadFile": "Nie udało się przesłać pliku",
-    "uploadingFolderFiles": "Przesyłanie {{count}} plików...",
-    "uploadedFolderFiles": "Pomyślnie przesłano {{count}} plików",
-    "uploadedFolderPartial": "Przesłano {{uploaded}} plików, {{failed}} nie powiodło się",
-    "fileDownloadedSuccessfully": "Plik „{{name}}” został pomyślnie pobrany",
-    "failedToDownloadFile": "Nie udało się pobrać pliku",
-    "fileCreatedSuccessfully": "Plik „{{name}}” został pomyślnie utworzony",
-    "folderCreatedSuccessfully": "Folder „{{name}}” został pomyślnie utworzony",
-    "failedToCreateItem": "Nie udało się utworzyć elementu",
-    "operationFailed": "Operacja {{operation}} nie powiodła się dla {{name}}: {{error}}",
-    "failedToResolveSymlink": "Nie udało się rozwiązać dowiązania symbolicznego",
-    "itemsDeletedSuccessfully": "Pomyślnie usunięto {{count}} elementów",
-    "failedToDeleteItems": "Nie udało się usunąć elementów",
-    "sudoPasswordRequired": "Wymagane hasło administratora",
-    "enterSudoPassword": "Wprowadź hasło sudo, aby kontynuować tę operację",
-    "sudoPassword": "Hasło sudo",
-    "sudoOperationFailed": "Operacja sudo nie powiodła się",
-    "sudoAuthFailed": "Uwierzytelnianie sudo nie powiodło się",
-    "dragFilesToUpload": "Upuść pliki tutaj, aby je przesłać",
-    "dropToUploadHere": "Upuść, aby przesłać tutaj",
-    "dropToDownloadHere": "Upuść, aby pobrać tutaj",
-    "localFiles": "Lokalne",
-    "showLocalFiles": "Pokaż pliki lokalne (widok podzielony)",
-    "hideLocalFiles": "Ukryj pliki lokalne",
-    "localHome": "Folder domowy",
-    "localPathPlaceholder": "Ścieżka do folderu lokalnego",
-    "localShowHidden": "Pokaż ukryte pliki",
-    "localHideHidden": "Ukryj ukryte pliki",
-    "localRevealInFileManager": "Pokaż w menedżerze plików systemowych",
-    "localCannotOpenFolder": "Nie można otworzyć folderu",
-    "localItemCount": "{{count}} elementów",
-    "localSelectedCount": "Zaznaczono: {{count}}",
-    "back": "Wstecz",
-    "forward": "Do przodu",
-    "up": "W górę",
-    "kind": "Uprzejmy",
-    "localUploadingProgress": "Przesyłanie {{current}} z {{total}}",
-    "localDownloadingProgress": "Pobieranie {{current}} z {{total}}",
-    "localTransferInFlight": "{{count}} natychmiast",
-    "localPreparingDownload": "Przygotowywanie do pobrania...",
-    "localTransferCancelled": "Transfer anulowany",
-    "localNothingToTransfer": "Nic do przeniesienia",
-    "localUploadComplete": "Przesłano {{count}} plików",
-    "localUploadFailed": "Przesyłanie nie powiodło się",
-    "localUploadPartial": "Przesłano {{done}} plików, {{failed}} nie powiodło się",
-    "localDownloadComplete": "Pobrano {{count}} plików",
-    "localDownloadFailed": "Pobieranie nie powiodło się",
-    "localDownloadPartial": "Pobrano {{done}} plików, {{failed}} nie powiodło się",
-    "localReplaceExistingPrompt": "W tym folderze istnieje już {{count}} elementów. Czy je zastąpić?",
-    "localReplace": "Zamień",
-    "localSkipExisting": "Pominąć",
-    "localSkippedExisting": "Pominięto {{count}} istniejących elementów",
-    "localUnsafeNamesSkipped": "Pominięto {{count}} elementów, których nazw nie można używać na tym komputerze",
-    "localOpen": "Otwórz",
-    "localOpenFolder": "Otwórz folder",
-    "localUploadToRemote": "Prześlij na serwer",
-    "localUploadToRemoteMany": "Prześlij {{count}} elementów na serwer",
-    "localMoveToTrash": "Przenieś do kosza",
-    "localMoveToTrashMany": "Przenieś {{count}} elementów do Kosza",
-    "localTrashConfirmSingle": "Przenieść „{{name}}” do Kosza?",
-    "localTrashConfirmFolder": "Czy przenieść folder „{{name}}” i całą jego zawartość do Kosza?",
-    "localTrashConfirmMany": "Przenieść {{count}} elementów do Kosza?",
-    "localTrashed": "Przeniesiono {{count}} elementów do Kosza",
-    "localTrashFailed": "Nie można przenieść do Kosza",
-    "localRenameFailed": "Zmiana nazwy nie powiodła się",
-    "localCreateFailed": "Nie można utworzyć elementu",
-    "goToParentFolder": "Przejdź do folderu nadrzędnego",
-    "resizeSidebar": "Przeciągnij, aby zmienić rozmiar paska bocznego (kliknij dwukrotnie, aby zresetować)",
-    "resizeLocalPane": "Przeciągnij, aby zmienić rozmiar panelu lokalnego (kliknij dwukrotnie, aby zresetować)",
-    "columns": "Kolumny",
-    "columnsHint": "Kliknij prawym przyciskiem myszy, aby wybrać kolumny",
-    "emptyFolder": "Ten folder jest pusty",
-    "searchFiles": "Wyszukaj pliki...",
-    "upload": "Prześlij",
-    "selectHostToStart": "Wybierz hosta, aby rozpocząć zarządzanie plikami",
-    "sshRequiredForFileManager": "Menedżer plików wymaga SSH. Ten host nie ma włączonego SSH.",
-    "failedToConnect": "Nie udało się połączyć z SSH",
-    "failedToLoadDirectory": "Nie udało się załadować katalogu",
-    "noSSHConnection": "Brak dostępnego połączenia SSH",
-    "copy": "Kopiuj",
-    "cut": "Wytnij",
-    "paste": "Wklej",
-    "copyPath": "Kopiuj ścieżkę",
-    "copyPaths": "Kopiuj ścieżki",
-    "delete": "Usuń",
-    "properties": "Właściwości",
-    "refresh": "Odśwież",
-    "downloadFiles": "Pobierz {{count}} plików do przeglądarki",
-    "copyFiles": "Skopiuj {{count}} elementów",
-    "cutFiles": "Wytnij {{count}} elementów",
-    "deleteFiles": "Usuń {{count}} elementów",
-    "filesCopiedToClipboard": "{{count}} elementów skopiowano do schowka",
-    "filesCutToClipboard": "{{count}} elementów wycięto do schowka",
-    "pathCopiedToClipboard": "Ścieżka skopiowana do schowka",
-    "pathsCopiedToClipboard": "{{count}} ścieżek skopiowano do schowka",
-    "failedToCopyPath": "Nie udało się skopiować ścieżki do schowka",
-    "copyFolderLink": "Kopiuj link do folderu",
-    "copyCurrentFolderLink": "Kopiuj link do bieżącego folderu",
-    "folderLinkCopied": "Link do folderu skopiowany do schowka",
-    "failedToCopyFolderLink": "Nie udało się skopiować linku do folderu",
-    "movedItems": "Przeniesiono {{count}} elementów",
-    "failedToDeleteItem": "Nie udało się usunąć elementu",
-    "itemRenamedSuccessfully": "Zmieniono nazwę: {{type}}",
-    "failedToRenameItem": "Nie udało się zmienić nazwy elementu",
-    "download": "Pobierz",
-    "openExternalEditor": "Otwórz zewnętrznie",
-    "chooseExternalEditor": "Wybierz edytor zewnętrzny",
-    "externalEditorSelected": "Wybrano edytor zewnętrzny",
-    "externalEditorDesktopOnly": "Edytor zewnętrzny jest dostępny tylko w aplikacji desktopowej",
-    "externalEditorOpened": "Otwarto w edytorze zewnętrznym. Zapisanie tam spowoduje przesłanie zmian z powrotem na serwer.",
-    "failedToOpenExternalEditor": "Nie udało się otworzyć edytora zewnętrznego",
-    "failedToSelectExternalEditor": "Nie udało się wybrać edytora zewnętrznego",
-    "permissions": "Uprawnienia",
-    "size": "Rozmiar",
-    "modified": "Zmodyfikowano",
-    "path": "Ścieżka",
-    "confirmDelete": "Czy na pewno chcesz usunąć {{name}}?",
-    "permissionDenied": "Brak uprawnień",
-    "serverError": "Błąd serwera",
-    "fileSavedSuccessfully": "Plik zapisany pomyślnie",
-    "failedToSaveFile": "Nie udało się zapisać pliku",
-    "confirmDeleteSingleItem": "Czy na pewno chcesz trwale usunąć „{{name}}”?",
-    "confirmDeleteMultipleItems": "Czy na pewno chcesz trwale usunąć {{count}} elementów?",
-    "confirmDeleteMultipleItemsWithFolders": "Czy na pewno chcesz trwale usunąć {{count}} elementów? Dotyczy to również folderów i ich zawartości.",
-    "confirmDeleteFolder": "Czy na pewno chcesz trwale usunąć folder „{{name}}” i całą jego zawartość?",
-    "permanentDeleteWarning": "Tej czynności nie można cofnąć. Elementy zostaną trwale usunięte z serwera.",
-    "moveToTrashWarning": "Elementy zostaną przeniesione do Kosza Termix i będzie je można przywrócić przed upływem okresu przechowywania.",
-    "itemsMovedToTrash": "{{count}} elementów przeniesiono do Kosza",
-    "trash": "Kosz",
-    "trashDescription": "Usunięte elementy są przechowywane na tym hoście przez {{days}} dni.",
-    "trashLoadFailed": "Nie udało się załadować Kosza",
-    "trashEmpty": "Kosz jest pusty",
-    "trashRestore": "Przywróć",
-    "trashRestored": "Przywrócono {{name}}",
-    "trashRestoreFailed": "Nie udało się przywrócić elementu. Oryginalna ścieżka może już istnieć.",
-    "trashDeletePermanently": "Usuń trwale",
-    "trashDeleteConfirm": "Czy trwale usunąć {{name}}? Tego nie można cofnąć.",
-    "trashPermanentlyDeleted": "Trwale usunięto {{name}}",
-    "trashDeleteFailed": "Nie udało się trwale usunąć elementu",
-    "trashEmptyAction": "Opróżnij kosz",
-    "trashEmptyConfirm": "Trwale usunąć wszystkie elementy z Kosza? Tego nie da się cofnąć.",
-    "trashEmptied": "Kosz opróżniony",
-    "trashRetention": "Automatyczne czyszczenie po (dniach)",
-    "trashRetentionSaved": "Zaktualizowano czas przechowywania w Koszu",
-    "trashRetentionFailed": "Nie udało się zaktualizować czasu przechowywania w Koszu",
-    "trashUnavailableConfirm": "Tego elementu nie można przenieść do Kosza, zazwyczaj dlatego, że znajduje się w innym systemie plików lub wymaga podwyższonych uprawnień. Czy zamiast tego usunąć go trwale?",
-    "recent": "Ostatnie",
-    "pinned": "Przypięte",
-    "folderShortcuts": "Skróty folderów",
-    "failedToReconnectSSH": "Nie udało się ponownie połączyć z sesją SSH",
-    "openTerminalHere": "Otwórz terminal tutaj",
-    "run": "Uruchom",
-    "openTerminalInFolder": "Otwórz terminal w tym folderze",
-    "openTerminalInFileLocation": "Otwórz terminal w lokalizacji pliku",
-    "runningFile": "Wykonywanie - {{file}}",
-    "onlyRunExecutableFiles": "Można uruchamiać tylko pliki wykonywalne",
-    "directories": "Katalogi",
-    "removedFromRecentFiles": "Usunięto „{{name}}” z ostatnich plików",
-    "removeFailed": "Nie udało się usunąć",
-    "unpinnedSuccessfully": "Pomyślnie odpięto „{{name}}”",
-    "unpinFailed": "Odpięcie nie powiodło się",
-    "removedShortcut": "Usunięto skrót „{{name}}”",
-    "removeShortcutFailed": "Nie udało się usunąć skrótu",
-    "clearedAllRecentFiles": "Wyczyszczono wszystkie ostatnie pliki",
-    "clearFailed": "Nie udało się wyczyścić",
-    "removeFromRecentFiles": "Usuń z ostatnich plików",
-    "clearAllRecentFiles": "Wyczyść wszystkie ostatnie pliki",
-    "unpinFile": "Odepnij plik",
-    "removeShortcut": "Usuń skrót",
-    "pinFile": "Przypnij plik",
-    "addToShortcuts": "Dodaj do skrótów",
-    "pasteFailed": "Wklejenie nie powiodło się",
-    "noUndoableActions": "Brak działań do cofnięcia",
-    "undoCopySuccess": "Cofnięto kopiowanie: usunięto {{count}} skopiowanych plików",
-    "undoCopyFailedDelete": "Nie udało się cofnąć: Nie udało się usunąć żadnych skopiowanych plików",
-    "undoCopyFailedNoInfo": "Nie udało się cofnąć: Nie można znaleźć informacji o skopiowanym pliku",
-    "undoMoveSuccess": "Cofnięto przenoszenie: przeniesiono {{count}} plików z powrotem do pierwotnej lokalizacji",
-    "undoMoveFailedMove": "Nie udało się cofnąć: Nie można przenieść żadnych plików z powrotem",
-    "undoMoveFailedNoInfo": "Nie udało się cofnąć: Nie można znaleźć informacji o przeniesionym pliku",
-    "undoDeleteNotSupported": "Operacji usunięcia nie można cofnąć: pliki zostały trwale usunięte z serwera",
-    "undoTypeNotSupported": "Nieobsługiwany typ operacji cofania",
-    "undoOperationFailed": "Operacja cofania nie powiodła się",
-    "unknownError": "Nieznany błąd",
-    "confirm": "Potwierdź",
-    "find": "Znajdź...",
-    "replace": "Zamień",
-    "downloadInstead": "Pobierz zamiast tego",
-    "keyboardShortcuts": "Skróty klawiaturowe",
-    "searchAndReplace": "Wyszukaj i zamień",
-    "editing": "Edycja",
-    "search": "Szukaj",
-    "findNext": "Znajdź następny",
-    "findPrevious": "Znajdź poprzednie",
-    "save": "Zapisz",
-    "selectAll": "Zaznacz wszystko",
-    "undo": "Cofnij",
-    "redo": "Ponów",
-    "moveLineUp": "Przesuń linię w górę",
-    "moveLineDown": "Przesuń linię w dół",
-    "toggleComment": "Przełącz komentarz",
-    "autoComplete": "Automatyczne uzupełnianie",
-    "imageLoadError": "Nie udało się załadować obrazu",
-    "startTyping": "Zacznij pisać...",
-    "unknownSize": "Nieznany rozmiar",
-    "fileIsEmpty": "Plik jest pusty",
-    "largeFileWarning": "Ostrzeżenie o dużym pliku",
-    "largeFileWarningDesc": "Ten plik ma rozmiar {{size}}, co może powodować problemy z wydajnością przy otwarciu jako tekst.",
-    "fileNotFoundAndRemoved": "Plik „{{name}}” nie został znaleziony i został usunięty z ostatnich/przypiętych plików",
-    "failedToLoadFile": "Nie udało się załadować pliku: {{error}}",
-    "serverErrorOccurred": "Wystąpił błąd serwera. Spróbuj ponownie później.",
-    "autoSaveFailed": "Automatyczne zapisywanie nie powiodło się",
-    "fileAutoSaved": "Plik zapisany automatycznie",
-    "moveFileFailed": "Nie udało się przenieść {{name}}",
-    "moveOperationFailed": "Operacja przenoszenia nie powiodła się",
-    "canOnlyCompareFiles": "Można porównać tylko dwa pliki",
-    "comparingFiles": "Porównywanie plików: {{file1}} i {{file2}}",
-    "dragFailed": "Operacja przeciągania nie powiodła się",
-    "filePinnedSuccessfully": "Plik „{{name}}” został pomyślnie przypięty",
-    "pinFileFailed": "Nie udało się przypiąć pliku",
-    "fileUnpinnedSuccessfully": "Plik „{{name}}” został pomyślnie odpięty",
-    "unpinFileFailed": "Nie udało się odpiąć pliku",
-    "shortcutAddedSuccessfully": "Skrót folderu „{{name}}” został pomyślnie dodany",
-    "addShortcutFailed": "Nie udało się dodać skrótu",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} elementów pomyślnie",
-    "operationCompleted": "{{operation}} {{count}} elementów",
-    "downloadFileSuccess": "Plik {{name}} został pomyślnie pobrany",
-    "downloadFileFailed": "Pobieranie nie powiodło się",
-    "downloadingFile": "Pobieranie {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Przenieś do {{name}}",
-    "diffCompareWith": "Porównaj z {{name}}",
-    "dragOutsideToDownload": "Przeciągnij poza okno, aby pobrać ({{count}} plików)",
-    "newFolderDefault": "NowyFolder",
-    "newFileDefault": "NowyPlik.txt",
-    "successfullyMovedItems": "Pomyślnie przeniesiono {{count}} elementów do {{target}}",
-    "move": "Przenieś",
-    "searchInFile": "Wyszukaj w pliku (Ctrl+F)",
-    "showKeyboardShortcuts": "Pokaż skróty klawiaturowe",
-    "decreaseFontSize": "Zmniejsz rozmiar czcionki",
-    "increaseFontSize": "Zwiększ rozmiar czcionki",
-    "startWritingMarkdown": "Zacznij pisać treść w Markdown...",
-    "loadingFileComparison": "Ładowanie porównania plików...",
-    "reload": "Przeładuj",
-    "compare": "Porównaj",
-    "sideBySide": "Obok siebie",
-    "inline": "W linii",
-    "fileComparison": "Porównanie plików: {{file1}} vs {{file2}}",
-    "fileTooLarge": "Plik jest za duży (> 10 MB) i ze względów bezpieczeństwa nie można go otworzyć w formacie tekstowym.",
-    "sshConnectionFailed": "Połączenie SSH nie powiodło się. Sprawdź połączenie z {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Nie udało się załadować pliku: {{error}}",
-    "connecting": "Łączenie...",
-    "connectedSuccessfully": "Połączono pomyślnie",
-    "totpVerificationFailed": "Weryfikacja TOTP nie powiodła się",
-    "browserSignInFailed": "Logowanie nie powiodło się. Spróbuj ponownie.",
-    "authenticationFailed": "Uwierzytelnianie nie powiodło się",
-    "incorrectPassphrase": "Nieprawidłowe hasło klucza. Spróbuj ponownie.",
-    "verificationCodePrompt": "Kod weryfikacyjny:",
-    "changePermissions": "Zmień uprawnienia",
-    "currentPermissions": "Aktualne uprawnienia",
-    "owner": "Właściciel",
-    "group": "Grupa",
-    "others": "Inni",
-    "read": "Odczyt",
-    "write": "Zapis",
-    "execute": "Wykonywanie",
-    "permissionsChangedSuccessfully": "Uprawnienia zostały pomyślnie zmienione",
-    "failedToChangePermissions": "Nie udało się zmienić uprawnień",
-    "name": "Nazwa",
-    "sortByName": "Nazwa",
-    "sortByDate": "Data modyfikacji",
-    "sortBySize": "Rozmiar",
-    "ascending": "Rosnąco",
-    "descending": "Malejąco",
-    "root": "Katalog główny",
-    "new": "Nowy",
-    "sortBy": "Sortuj według",
-    "items": "Elementy",
-    "selected": "Zaznaczone",
-    "editor": "Edytor",
-    "octal": "Ósemkowy",
-    "storage": "Magazyn",
-    "disk": "Dysk",
-    "used": "Użyte",
-    "of": "z",
-    "toggleSidebar": "Przełącz pasek boczny",
-    "compactLayout": "Użyj kompaktowego układu",
-    "comfortableLayout": "Użyj wygodnego układu",
-    "cannotLoadPdf": "Nie można załadować pliku PDF",
-    "pdfLoadError": "Wystąpił błąd podczas ładowania pliku PDF.",
-    "loadingPdf": "Ładowanie przeglądarki PDF...",
-    "loadingPage": "Ładowanie strony...",
-    "cancel": "Anuluj",
-    "copiedItems_one": "Skopiowano element {{count}}",
-    "copiedItems_other": "Skopiowano {{count}} elementów",
-    "deleteCopiedFileFailed": "Nie można usunąć kopii {{name}}: {{error}}",
-    "dragMovedItems_one": "Przeniesiono {{count}} element do {{target}}",
-    "dragMovedItems_other": "Przeniesiono {{count}} elementów do {{target}}",
-    "moveBackFileFailed": "Nie można przesunąć {{name}} wstecz: {{error}}",
-    "terminal": "Terminal: {{host}} ({{path}})",
-    "dragToDesktop": "Przeciąganie {{name}} na pulpit",
-    "dragFilesToDesktop": "Przeciąganie plików {{count}} na pulpit",
-    "folderDragUnsupported": "Przeciąganie folderów na pulpit nie jest jeszcze obsługiwane",
-    "saveToDesktopFailed": "Nie udało się zapisać: {{error}}",
-    "dragFailedDetail": "Nie udało się przeciągnąć: {{error}}",
-    "videoUnsupported": "Twoja przeglądarka nie może odtworzyć tego formatu wideo.",
-    "downloadToPlay": "Pobierz, aby odtworzyć w innym miejscu",
-    "cannotPreviewType": "Nie można wyświetlić podglądu tego typu pliku",
-    "cannotPreviewTypeHint": "Ten typ pliku nie ma podglądu. Pobierz go, aby otworzyć w innej aplikacji.",
-    "loadingFile": "Ładowanie pliku...",
-    "loadingImage": "Ładowanie obrazu...",
-    "loadingEditor": "Ładowanie edytora...",
-    "loadingPreview": "Ładowanie podglądu...",
-    "loadingAudio": "Ładowanie odtwarzacza audio...",
-    "emptyPreview": "Na razie nic nie ma do wyświetlenia...",
-    "revert": "Przywróć",
-    "openAsText": "Otwórz jako tekst",
-    "confirmOpenAsText": "Czy chcesz kontynuować otwieranie tego pliku jako tekstu? Może to spowolnić działanie przeglądarki."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "Przesyłanie plików pomiędzy dwoma hostami SSH.",
-    "sourceServer": "Serwer źródłowy",
-    "destinationServer": "Serwer docelowy",
-    "selectHost": "Wybierz hosta",
-    "noHostSelected": "Nie wybrano hosta",
-    "move": "Przenieś",
-    "copy": "Kopiuj",
-    "upload": "Prześlij",
-    "itemsSelected": "{{count}} wybrano element",
-    "itemsSelected_other": "Wybrano {{count}} elementów",
-    "ready": "Gotowy",
-    "loadingHosts": "Ładowanie hostów...",
-    "name": "Nazwa",
-    "modified": "Zmodyfikowano",
-    "size": "Rozmiar",
-    "noFiles": "Brak plików",
-    "open": "Otwórz",
-    "up": "W górę",
-    "refresh": "Odśwież",
-    "copyToTarget": "Kopiuj do katalogu docelowego",
-    "rename": "Zmień nazwę",
-    "delete": "Usuń",
-    "editPermissions": "Edytuj uprawnienia",
-    "createNewFolder": "Utwórz nowy folder",
-    "deleteSelectedItems": "Usuń wybrane elementy",
-    "deleteConfirm": "Usunąć {{count}} wybrany element?",
-    "deleteConfirm_other": "Usunąć {{count}} wybranych elementów?",
-    "cancel": "Anuluj",
-    "save": "Zapisz",
-    "folderCreated": "Utworzono folder",
-    "itemRenamed": "Zmieniono nazwę elementu",
-    "actionFailed": "Akcja nie powiodła się",
-    "itemsDeleted": "{{count}} element usunięty",
-    "itemsDeleted_other": "Usunięto {{count}} elementów",
-    "deleteFailed": "Usunięcie nie powiodło się",
-    "permissionsUpdated": "Zaktualizowano uprawnienia",
-    "noRemoteSessionConnected": "Brak połączonych sesji zdalnych",
-    "failedToListFiles": "Nie udało się wyświetlić listy plików",
-    "failedToRefresh": "Nie udało się odświeżyć",
-    "destinationInsideSource": "Miejsce docelowe nie może znajdować się wewnątrz wybranej ścieżki źródłowej.",
-    "sameHostNoOp": "Źródło i cel znajdują się w tym samym folderze."
-  },
-  "hosts": {
-    "fileManager": "Menedżer plików",
-    "fileManagerUrlCopied": "Skopiowano adres URL menedżera plików",
-    "copyFileManagerUrlAction": "Kopiuj adres URL menedżera plików",
-    "docsLink": "Zobacz dokumentację",
-    "hostNotFound": "Nie znaleziono hosta",
-    "loadingHost": "Ładowanie hosta..."
-  },
-  "onboarding": {
-    "feature_files": "Menedżer plików",
-    "feature_files_desc": "Przeglądaj, przesyłaj, pobieraj i edytuj pliki przez SFTP bez opuszczania aplikacji."
-  },
-  "terminal": {
-    "runTitle": "Wykonywanie {{command}} - {{host}}",
-    "terminalTitle": "Terminal - {{host}}",
-    "terminalWithPath": "Terminal - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Przeglądaj foldery docelowe",
-    "browsePathError": "Nie można otworzyć tej ścieżki na hoście docelowym.",
-    "browsePathWillBeCreated": "Ten folder jeszcze nie istnieje. Zostanie utworzony po rozpoczęciu transferu.",
-    "cancel": "Anuluj",
-    "cleanupDestFiles": "Wyczyść miejsce docelowe",
-    "cleanupDestFilesError": "Czyszczenie nie powiodło się",
-    "cleanupDestFilesNothing": "Nie ma czego czyścić w miejscu docelowym",
-    "cleanupDestFilesPartial": "Niektórych częściowych plików nie można było usunąć",
-    "cleanupDestFilesSuccess": "Usunięto częściowe pliki z miejsca docelowego",
-    "confirmCopy": "Kopiuj",
-    "confirmMove": "Przenieś",
-    "copyFolderToHost": "Kopiuj folder do hosta…",
-    "copyItemsToHost": "Skopiuj {{count}} elementów do hosta…",
-    "copyToHost": "Kopiuj do hosta…",
-    "destinationPath": "Ścieżka docelowa",
-    "destMustBeDirectory": "Miejsce docelowe musi być katalogiem przy transferze wielu elementów",
-    "goUp": "W górę",
-    "hostAuthRequired": "Wymagane uwierzytelnienie. Najpierw otwórz Menedżera plików na tym hoście.",
-    "hostConnecting": "Łączenie…",
-    "hostConnectionFailed": "Połączenie nieudane",
-    "hostDisconnected": "Nie połączono",
-    "hostReady": "Gotowy",
-    "itemsSummary": "{{count}} elementów",
-    "jumpHostLimitation": "Oba hosty muszą być osiągalne z serwera Termix. Bezpośrednie trasowanie między hostami nie jest obsługiwane.",
-    "methodAuto": "Auto",
-    "methodAutoHint": "Wybiera tar albo SFTP dla każdego pliku na podstawie liczby plików, ich rozmiaru i podatności na kompresję. Pojedyncze pliki zawsze używają strumieniowego SFTP.",
-    "methodItemSftp": "SFTP dla każdego pliku",
-    "methodItemSftpHint": "Przesyłaj każdy plik osobno przez SFTP. Działa na wszystkich hostach, w tym Windows.",
-    "methodItemSftpLimitation": "Każdy plik korzysta z tego samego strumienia SFTP co kopiowanie pojedynczego pliku, jeden po drugim. Postęp jest sumowany dla wszystkich plików, więc przy dużych plikach pasek przesuwa się powoli.",
-    "methodLabel": "Metoda transferu",
-    "methodPreviewError": "Nie można wyświetlić podglądu metody transferu. Serwer i tak wybierze metodę po uruchomieniu.",
-    "methodPreviewLoading": "Obliczanie metody transferu…",
-    "methodPreviewScanSummary": "{{fileCount}} plików, łącznie {{totalSize}} (przeskanowano na hoście źródłowym).",
-    "methodPreviewWillUseItemSftp": "Zostanie użyte: SFTP dla każdego pliku",
-    "methodPreviewWillUseTar": "Zostanie użyte: archiwum tar",
-    "methodReason": {
-      "user_item_sftp": "Wybrano SFTP dla poszczególnych plików.",
-      "user_tar": "Wybrano archiwum tar.",
-      "tar_unavailable": "Tar nie jest dostępny na jednym lub obu hostach, więc zamiast tego używany będzie protokół SFTP dla każdego pliku.",
-      "windows_host": "Ponieważ wykorzystywany jest host Windows, nie używa się pliku tar.",
-      "auto_multi_large": "Auto: wiele plików, w tym duży plik ({{largestSize}}) z kompresowalnymi danymi. Tar łączy je w jeden transfer.",
-      "auto_single_large_in_archive": "Auto: jeden duży plik ({{largestSize}}) w tym zestawie, więc SFTP dla każdego pliku.",
-      "auto_many_incompressible": "Auto: dane w większości niekompresowalne, więc SFTP dla każdego pliku.",
-      "auto_many_files": "Auto: wiele plików ({{fileCount}}), tar redukuje narzut na plik.",
-      "auto_default": "Auto: SFTP dla każdego pliku w tym zestawie."
-    },
-    "methodTar": "Archiwum tar",
-    "methodTarHint": "Kompresja w źródle, transfer jednego archiwum, rozpakowanie w miejscu docelowym. Wymaga tar na obu hostach Unix.",
-    "metricsCompress": "Kompresja w źródle: {{duration}}",
-    "metricsExtract": "Rozpakowanie w miejscu docelowym: {{duration}}",
-    "metricsPrepare": "Przygotowanie miejsca docelowego: {{duration}}",
-    "metricsRouteBenchmark": "Sonda trasy: bezpośrednia {{direct}}, przekaźnikowa {{relay}}",
-    "metricsSourceDelete": "Usunięcie ze źródła: {{duration}}",
-    "metricsTotal": "Razem: {{duration}}",
-    "metricsTransfer": "Całościowo: {{throughput}} ({{duration}})",
-    "metricsVerify": "Zweryfikowano SHA-256: {{duration}}",
-    "moveFolderToHost": "Przenieś folder do hosta…",
-    "moveItemsToHost": "Przenieś {{count}} elementów do hosta…",
-    "moveToHost": "Przenieś do hosta…",
-    "noHostsConnected": "Brak innych hostów z menedżerem plików.",
-    "noHostsConnectedHint": "Dodaj kolejny host SSH z włączonym Menedżerem plików w Menedżerze hostów.",
-    "parallelSegmentsHint": "Duże pliki są dzielone na fragmenty po 256 MB. Wiele pasów korzysta z osobnych połączeń (jak uruchomienie kilku transferów naraz), co daje większą łączną przepustowość.",
-    "parallelSegmentsLabel": "Równoległe pasy transferowe",
-    "parallelSegmentsOption": "{{count}} pasów",
-    "progressBenchmarking": "Wybór najszybszej trasy transferu…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Anuluj",
-    "progressCancelling": "Anulowanie…",
-    "progressCompressing": "Kompresja na hoście źródłowym…",
-    "progressExtracting": "Wyodrębnianie w miejscu docelowym…",
-    "progressItems": "{{current}} / {{total}} plików",
-    "progressReconnecting": "Ponowne łączenie…",
-    "progressStalled": "Utknął",
-    "progressTotalSpeed": "{{speed}} łącznie ({{lanes}} pasów)",
-    "progressTransferring": "Przesyłanie danych…",
-    "progressTransferringItems": "Przesyłanie plików ({{current}} z {{total}})…",
-    "progressVerifying": "Sprawdzanie integralności pliku…",
-    "recentDestinations": "Ostatnie miejsca docelowe",
-    "resumedHint": "Połączono ponownie z aktywnym transferem rozpoczętym w innym oknie.",
-    "retryTransfer": "Ponów",
-    "retryTransferError": "Ponowna próba nie powiodła się",
-    "selectDestinationHost": "Wybierz hosta docelowego",
-    "transferCancelled": "Transfer anulowany",
-    "transferCancelledCopyHint": "W miejscu docelowym mogą pozostać częściowe pliki.",
-    "transferCancelledMoveHint": "W miejscu docelowym mogą pozostać częściowe pliki. Pliki źródłowe nie zostały usunięte.",
-    "transferError": "Transfer nie powiódł się",
-    "transferFailedRetryHint": "W miejscu docelowym zachowano częściowe dane. Ponowna próba zostanie wznowiona po przywróceniu połączenia.",
-    "transferPartialHint": "Nie można przesłać: {{paths}}",
-    "transferSuccess": "Transfer zakończony",
-    "metricsHopSourceRead": "Źródło → serwer: {{throughput}}",
-    "metricsHopDestSftpWrite": "Serwer → cel (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Serwer → cel (lokalny): {{throughput}}"
-  },
-  "plugin": {
-    "name": "Menedżer plików"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/pt_BR.json b/plugins/file-manager/locales/translated/pt_BR.json
deleted file mode 100644
index 99b359b6b..000000000
--- a/plugins/file-manager/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Arquivos",
-    "sftp": "SFTP",
-    "openFileManager": "Abrir o Gerenciador de Arquivos"
-  },
-  "permissions": {
-    "use": {
-      "title": "Use o gerenciador de arquivos",
-      "description": "Navegue, edite e transfira arquivos via SFTP."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Ativar Gerenciador de Arquivos",
-        "description": "Navegue e edite arquivos neste servidor via SFTP."
-      },
-      "defaultPath": {
-        "label": "Caminho padrão"
-      },
-      "scpLegacy": {
-        "label": "Modo Legado SCP"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Transferências simultâneas de arquivos",
-        "description": "Quantos arquivos o gerenciador local/remoto lado a lado carrega ou baixa simultaneamente? Diminua esse valor se o seu servidor limitar os canais SFTP."
-      },
-      "confirmBeforeTrash": {
-        "label": "Confirme antes de mover os arquivos para a lixeira.",
-        "description": "Peça permissão antes de mover arquivos remotos para a lixeira. A exclusão permanente ainda requer confirmação."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Gerenciador de Arquivos"
-  },
-  "fileManager": {
-    "noHostSelected": "Nenhum host selecionado",
-    "initializingEditor": "Inicializando o editor...",
-    "file": "Arquivo",
-    "folder": "Pasta",
-    "uploadFile": "Enviar arquivo",
-    "downloadFile": "Download",
-    "extractArchive": "Extrair arquivo",
-    "extractingArchive": "Extraindo {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} extraído com sucesso",
-    "extractFailed": "A extração falhou",
-    "compressFile": "Compactar arquivo",
-    "compressFiles": "Comprimir arquivos",
-    "compressFilesDesc": "Comprima {{count}} itens em um arquivo",
-    "archiveName": "Nome do arquivo",
-    "enterArchiveName": "Digite o nome do arquivo...",
-    "compressionFormat": "Formato de compressão",
-    "selectedFiles": "Arquivos selecionados",
-    "andMoreFiles": "e {{count}} mais...",
-    "compress": "Compressa",
-    "compressingFiles": "Comprimindo {{count}} itens em {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} criado com sucesso",
-    "compressFailed": "A compressão falhou",
-    "edit": "Editar",
-    "preview": "Pré-visualização",
-    "previous": "Voltar",
-    "next": "Próximo",
-    "pageXOfY": "Página {{current}} de {{total}}",
-    "zoomOut": "Diminuir o zoom",
-    "zoomIn": "Ampliar",
-    "newFile": "Novo arquivo",
-    "newFolder": "Nova pasta",
-    "rename": "Renomear",
-    "uploading": "Carregando...",
-    "uploadingFile": "Carregando {{name}}...",
-    "uploadingChunk": "Enviando {{name}}: {{percent}}% (parte {{chunk}} de {{total}})",
-    "fileName": "Nome do arquivo",
-    "folderName": "Nome da pasta",
-    "fileUploadedSuccessfully": "Arquivo \"{{name}}\" enviado com sucesso",
-    "failedToUploadFile": "Falha ao carregar o arquivo",
-    "uploadingFolderFiles": "Enviando {{count}} arquivo(s)...",
-    "uploadedFolderFiles": "Arquivo(s) carregado(s) com sucesso {{count}}",
-    "uploadedFolderPartial": "Uploaded {{uploaded}} file(s), {{failed}} failed",
-    "fileDownloadedSuccessfully": "Arquivo \"{{name}}\" baixado com sucesso",
-    "failedToDownloadFile": "Falha ao baixar o arquivo",
-    "fileCreatedSuccessfully": "Arquivo \"{{name}}\" criado com sucesso",
-    "folderCreatedSuccessfully": "Pasta \"{{name}}\" criada com sucesso",
-    "failedToCreateItem": "Falha ao criar o item",
-    "operationFailed": "A operação {{operation}} falhou para {{name}}: {{error}}",
-    "failedToResolveSymlink": "Falha ao resolver o link simbólico",
-    "itemsDeletedSuccessfully": "{{count}} itens excluídos com sucesso",
-    "failedToDeleteItems": "Falha ao excluir itens",
-    "sudoPasswordRequired": "Senha de administrador necessária",
-    "enterSudoPassword": "Digite a senha de sudo para continuar esta operação.",
-    "sudoPassword": "Senha de sudo",
-    "sudoOperationFailed": "A operação sudo falhou",
-    "sudoAuthFailed": "Falha na autenticação sudo",
-    "dragFilesToUpload": "Arraste e solte os arquivos aqui para fazer o upload.",
-    "dropToUploadHere": "Arraste e faça o upload aqui.",
-    "dropToDownloadHere": "Faça o download aqui.",
-    "localFiles": "Local",
-    "showLocalFiles": "Exibir arquivos locais (visualização dividida)",
-    "hideLocalFiles": "Ocultar arquivos locais",
-    "localHome": "Pasta inicial",
-    "localPathPlaceholder": "Caminho da pasta local",
-    "localShowHidden": "Mostrar arquivos ocultos",
-    "localHideHidden": "Ocultar arquivos ocultos",
-    "localRevealInFileManager": "Exibir no gerenciador de arquivos do sistema",
-    "localCannotOpenFolder": "Não é possível abrir a pasta",
-    "localItemCount": "{{count}} itens",
-    "localSelectedCount": "{{count}} selecionado",
-    "back": "Voltar",
-    "forward": "Avançar",
-    "up": "Acima",
-    "kind": "Tipo",
-    "localUploadingProgress": "Enviando {{current}} de {{total}}",
-    "localDownloadingProgress": "Baixando {{current}} de {{total}}",
-    "localTransferInFlight": "{{count}} imediatamente",
-    "localPreparingDownload": "Preparando o download...",
-    "localTransferCancelled": "Transferência cancelada",
-    "localNothingToTransfer": "Nada a transferir",
-    "localUploadComplete": "Uploaded {{count}} file(s)",
-    "localUploadFailed": "Falha no upload",
-    "localUploadPartial": "Uploaded {{done}} file(s), {{failed}} failed",
-    "localDownloadComplete": "Arquivo(s) baixado(s) {{count}}",
-    "localDownloadFailed": "Falha no download",
-    "localDownloadPartial": "O download de {{done}} arquivo(s) falhou. {{failed}}",
-    "localReplaceExistingPrompt": "{{count}} Já existem itens nesta pasta. Deseja substituí-los?",
-    "localReplace": "Substituir",
-    "localSkipExisting": "Pular",
-    "localSkippedExisting": "Ignorou {{count}} item(ns) existente(s)",
-    "localUnsafeNamesSkipped": "Ignorado {{count}} item(ns) cujos nomes não podem ser usados neste computador",
-    "localOpen": "Abrir",
-    "localOpenFolder": "Abra a pasta",
-    "localUploadToRemote": "Enviar para o servidor",
-    "localUploadToRemoteMany": "Enviar {{count}} itens para o servidor",
-    "localMoveToTrash": "Mover para a Lixeira",
-    "localMoveToTrashMany": "Mova {{count}} itens para a Lixeira",
-    "localTrashConfirmSingle": "Mover \"{{name}}\" para a Lixeira?",
-    "localTrashConfirmFolder": "Mover a pasta \"{{name}}\" e todo o seu conteúdo para a Lixeira?",
-    "localTrashConfirmMany": "Mover {{count}} itens para a Lixeira?",
-    "localTrashed": "Movidos {{count}} itens para a Lixeira",
-    "localTrashFailed": "Não foi possível mover para a Lixeira",
-    "localRenameFailed": "A renomeação falhou",
-    "localCreateFailed": "Não foi possível criar o item.",
-    "goToParentFolder": "Acesse a pasta principal",
-    "resizeSidebar": "Arraste para redimensionar a barra lateral (clique duas vezes para redefinir).",
-    "resizeLocalPane": "Arraste para redimensionar o painel local (clique duas vezes para redefinir).",
-    "columns": "Colunas",
-    "columnsHint": "Clique com o botão direito do mouse para escolher as colunas.",
-    "emptyFolder": "Esta pasta está vazia",
-    "searchFiles": "Pesquisar arquivos...",
-    "upload": "Fazer upload",
-    "selectHostToStart": "Selecione um host para iniciar o gerenciamento de arquivos.",
-    "sshRequiredForFileManager": "O gerenciador de arquivos requer SSH. Este host não tem o SSH habilitado.",
-    "failedToConnect": "Falha ao conectar-se ao SSH",
-    "failedToLoadDirectory": "Falha ao carregar o diretório",
-    "noSSHConnection": "Nenhuma conexão SSH disponível",
-    "copy": "Copiar",
-    "cut": "Corte",
-    "paste": "Colar",
-    "copyPath": "Copiar caminho",
-    "copyPaths": "Copiar caminhos",
-    "delete": "Apagar",
-    "properties": "Propriedades",
-    "refresh": "Atualizar",
-    "downloadFiles": "Baixar {{count}} arquivos para o navegador",
-    "copyFiles": "Copiar {{count}} itens",
-    "cutFiles": "Recortar {{count}} itens",
-    "deleteFiles": "Excluir {{count}} itens",
-    "filesCopiedToClipboard": "{{count}} itens copiados para a área de transferência",
-    "filesCutToClipboard": "{{count}} itens copiados para a área de transferência",
-    "pathCopiedToClipboard": "Caminho copiado para a área de transferência",
-    "pathsCopiedToClipboard": "{{count}} caminhos copiados para a área de transferência",
-    "failedToCopyPath": "Falha ao copiar o caminho para a área de transferência",
-    "copyFolderLink": "Copiar link para a pasta",
-    "copyCurrentFolderLink": "Copiar link para a pasta atual",
-    "folderLinkCopied": "Link da pasta copiado para a área de transferência",
-    "failedToCopyFolderLink": "Falha ao copiar o link da pasta",
-    "movedItems": "Itens movidos {{count}}",
-    "failedToDeleteItem": "Falha ao excluir o item",
-    "itemRenamedSuccessfully": "{{type}} renomeado com sucesso",
-    "failedToRenameItem": "Falha ao renomear o item",
-    "download": "Download",
-    "openExternalEditor": "Abrir externamente",
-    "chooseExternalEditor": "Escolha um editor externo.",
-    "externalEditorSelected": "Editor externo selecionado",
-    "externalEditorDesktopOnly": "O editor externo está disponível apenas no aplicativo para desktop.",
-    "externalEditorOpened": "Aberto em um editor externo. Salvar aqui enviará as alterações de volta para o servidor.",
-    "failedToOpenExternalEditor": "Não foi possível abrir o editor externo.",
-    "failedToSelectExternalEditor": "Não foi possível selecionar o editor externo.",
-    "permissions": "Permissões",
-    "size": "Tamanho",
-    "modified": "Modificado",
-    "path": "Caminho",
-    "confirmDelete": "Tem certeza de que deseja excluir {{name}}?",
-    "permissionDenied": "Permissão negada",
-    "serverError": "Erro do servidor",
-    "fileSavedSuccessfully": "Arquivo salvo com sucesso",
-    "failedToSaveFile": "Falha ao salvar o arquivo",
-    "confirmDeleteSingleItem": "Tem certeza de que deseja excluir permanentemente \"{{name}}\"?",
-    "confirmDeleteMultipleItems": "Tem certeza de que deseja excluir permanentemente {{count}} itens?",
-    "confirmDeleteMultipleItemsWithFolders": "Tem certeza de que deseja excluir permanentemente {{count}} itens? Isso inclui pastas e seus conteúdos.",
-    "confirmDeleteFolder": "Tem certeza de que deseja excluir permanentemente a pasta \"{{name}}\" e todo o seu conteúdo?",
-    "permanentDeleteWarning": "Esta ação não pode ser desfeita. O(s) item(ns) será(ão) excluído(s) permanentemente do servidor.",
-    "moveToTrashWarning": "O(s) item(ns) será(ão) movido(s) para a Lixeira Termix e poderá(ão) ser restaurado(s) antes do término do período de retenção.",
-    "itemsMovedToTrash": "{{count}} item(ns) movido(s) para a Lixeira",
-    "trash": "Lixo",
-    "trashDescription": "Os itens excluídos são retidos por {{days}} dia(s) neste host.",
-    "trashLoadFailed": "Falha ao carregar a Lixeira",
-    "trashEmpty": "A lixeira está vazia.",
-    "trashRestore": "Restaurar",
-    "trashRestored": "Restaurado {{name}}",
-    "trashRestoreFailed": "Falha ao restaurar o item. O caminho original pode já existir.",
-    "trashDeletePermanently": "Excluir permanentemente",
-    "trashDeleteConfirm": "Excluir permanentemente {{name}}? Esta ação não pode ser desfeita.",
-    "trashPermanentlyDeleted": "Excluído permanentemente {{name}}",
-    "trashDeleteFailed": "Falha ao excluir o item permanentemente",
-    "trashEmptyAction": "Esvaziar o lixo",
-    "trashEmptyConfirm": "Excluir permanentemente todos os itens da Lixeira? Esta ação é irreversível.",
-    "trashEmptied": "Lixo esvaziado",
-    "trashRetention": "Limpeza automática após (dias)",
-    "trashRetentionSaved": "Retenção de lixo atualizada",
-    "trashRetentionFailed": "Falha na atualização da retenção de lixo",
-    "trashUnavailableConfirm": "Este item não pode ser movido para a Lixeira, geralmente porque está em outro sistema de arquivos ou requer permissões elevadas. Deseja excluí-lo permanentemente?",
-    "recent": "Recente",
-    "pinned": "Fixado",
-    "folderShortcuts": "Atalhos de pastas",
-    "failedToReconnectSSH": "Falha ao reconectar a sessão SSH",
-    "openTerminalHere": "Abra o terminal aqui",
-    "run": "Correr",
-    "openTerminalInFolder": "Abra o terminal nesta pasta.",
-    "openTerminalInFileLocation": "Abra o terminal no local do arquivo.",
-    "runningFile": "Correndo - {{file}}",
-    "onlyRunExecutableFiles": "Só é possível executar arquivos executáveis.",
-    "directories": "Diretórios",
-    "removedFromRecentFiles": "Removemos \"{{name}}\" dos arquivos recentes",
-    "removeFailed": "Remover falha",
-    "unpinnedSuccessfully": "Desfixado \"{{name}}\" com sucesso",
-    "unpinFailed": "Desafixar falhou",
-    "removedShortcut": "Atalho removido \"{{name}}\"",
-    "removeShortcutFailed": "A remoção do atalho falhou",
-    "clearedAllRecentFiles": "Apaguei todos os arquivos recentes.",
-    "clearFailed": "Limpar falhou",
-    "removeFromRecentFiles": "Remover dos arquivos recentes",
-    "clearAllRecentFiles": "Limpar todos os arquivos recentes",
-    "unpinFile": "Desafixar arquivo",
-    "removeShortcut": "Remover atalho",
-    "pinFile": "Arquivo PIN",
-    "addToShortcuts": "Adicionar aos atalhos",
-    "pasteFailed": "A colagem falhou",
-    "noUndoableActions": "Ações não podem ser desfeitas",
-    "undoCopySuccess": "Operação de cópia desfeita: Arquivos copiados excluídos {{count}}",
-    "undoCopyFailedDelete": "Falha ao desfazer: Não foi possível excluir nenhum arquivo copiado.",
-    "undoCopyFailedNoInfo": "A ação de desfazer falhou: Não foi possível encontrar as informações do arquivo copiado.",
-    "undoMoveSuccess": "Operação de movimentação desfeita: {{count}} arquivos foram movidos de volta para o local original.",
-    "undoMoveFailedMove": "Falha ao desfazer: Não foi possível mover nenhum arquivo de volta.",
-    "undoMoveFailedNoInfo": "A ação de desfazer falhou: Não foi possível encontrar as informações do arquivo movido.",
-    "undoDeleteNotSupported": "A operação de exclusão não pode ser desfeita: os arquivos foram excluídos permanentemente do servidor.",
-    "undoTypeNotSupported": "Tipo de operação de desfazer não suportado",
-    "undoOperationFailed": "A operação de desfazer falhou",
-    "unknownError": "Erro desconhecido",
-    "confirm": "Confirmar",
-    "find": "Encontrar...",
-    "replace": "Substituir",
-    "downloadInstead": "Baixe em vez de baixar.",
-    "keyboardShortcuts": "Atalhos de teclado",
-    "searchAndReplace": "Localizar e substituir",
-    "editing": "Edição",
-    "search": "Procurar",
-    "findNext": "Encontre a seguir",
-    "findPrevious": "Encontrar Anterior",
-    "save": "Salvar",
-    "selectAll": "Selecionar Tudo",
-    "undo": "Desfazer",
-    "redo": "Refazer",
-    "moveLineUp": "Mova a fila para cima",
-    "moveLineDown": "Deslizar a linha para baixo",
-    "toggleComment": "Alternar comentário",
-    "autoComplete": "Preenchimento automático",
-    "imageLoadError": "Falha ao carregar a imagem",
-    "startTyping": "Comece a digitar...",
-    "unknownSize": "Tamanho desconhecido",
-    "fileIsEmpty": "O arquivo está vazio",
-    "largeFileWarning": "Aviso de Arquivo Grande",
-    "largeFileWarningDesc": "Este arquivo tem {{size}} de tamanho, o que pode causar problemas de desempenho ao ser aberto como texto.",
-    "fileNotFoundAndRemoved": "O arquivo \"{{name}}\" não foi encontrado e foi removido dos arquivos recentes/fixados",
-    "failedToLoadFile": "Falha ao carregar o arquivo: {{error}}",
-    "serverErrorOccurred": "Ocorreu um erro no servidor. Tente novamente mais tarde.",
-    "autoSaveFailed": "O salvamento automático falhou",
-    "fileAutoSaved": "Arquivo salvo automaticamente",
-    "moveFileFailed": "Falha ao mover {{name}}",
-    "moveOperationFailed": "A operação de movimentação falhou",
-    "canOnlyCompareFiles": "Só é possível comparar dois arquivos.",
-    "comparingFiles": "Comparando arquivos: {{file1}} e {{file2}}",
-    "dragFailed": "A operação de arrastar falhou",
-    "filePinnedSuccessfully": "Arquivo \"{{name}}\" fixado com sucesso",
-    "pinFileFailed": "Falha ao fixar o arquivo",
-    "fileUnpinnedSuccessfully": "Arquivo \"{{name}}\" desafixado com sucesso",
-    "unpinFileFailed": "Falha ao desafixar o arquivo",
-    "shortcutAddedSuccessfully": "Atalho de pasta \"{{name}}\" adicionado com sucesso",
-    "addShortcutFailed": "Falha ao adicionar atalho",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} itens com sucesso",
-    "operationCompleted": "{{operation}} {{count}} itens",
-    "downloadFileSuccess": "Arquivo {{name}} baixado com sucesso",
-    "downloadFileFailed": "Falha no download",
-    "downloadingFile": "Baixando {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Mover para {{name}}",
-    "diffCompareWith": "Diff compare com {{name}}",
-    "dragOutsideToDownload": "Arraste para fora da janela para baixar ({{count}} arquivos)",
-    "newFolderDefault": "Nova pasta",
-    "newFileDefault": "NovoArquivo.txt",
-    "successfullyMovedItems": "Movidos com sucesso {{count}} itens para {{target}}",
-    "move": "Mover",
-    "searchInFile": "Pesquisar no arquivo (Ctrl+F)",
-    "showKeyboardShortcuts": "Mostrar atalhos de teclado",
-    "decreaseFontSize": "Diminuir o tamanho da fonte",
-    "increaseFontSize": "Aumentar o tamanho da fonte",
-    "startWritingMarkdown": "Comece a escrever seu conteúdo em Markdown...",
-    "loadingFileComparison": "Carregando comparação de arquivos...",
-    "reload": "Recarregar",
-    "compare": "Comparar",
-    "sideBySide": "Lado a lado",
-    "inline": "Em linha",
-    "fileComparison": "Comparação de arquivos: {{file1}} vs {{file2}}",
-    "fileTooLarge": "O arquivo é muito grande (> 10 MB) e não pode ser aberto como texto por motivos de segurança.",
-    "sshConnectionFailed": "A conexão SSH falhou. Verifique sua conexão com {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Falha ao carregar o arquivo: {{error}}",
-    "connecting": "Conectando...",
-    "connectedSuccessfully": "Conexão estabelecida com sucesso.",
-    "totpVerificationFailed": "A verificação TOTP falhou.",
-    "browserSignInFailed": "Falha ao efetuar o login. Tente novamente.",
-    "authenticationFailed": "A autenticação falhou.",
-    "incorrectPassphrase": "Senha incorreta. Tente novamente.",
-    "verificationCodePrompt": "Código de verificação:",
-    "changePermissions": "Alterar permissões",
-    "currentPermissions": "Permissões atuais",
-    "owner": "Proprietário",
-    "group": "Grupo",
-    "others": "Outros",
-    "read": "Ler",
-    "write": "Escrever",
-    "execute": "Executar",
-    "permissionsChangedSuccessfully": "Permissões alteradas com sucesso",
-    "failedToChangePermissions": "Falha ao alterar as permissões",
-    "name": "Nome",
-    "sortByName": "Nome",
-    "sortByDate": "Data de modificação",
-    "sortBySize": "Tamanho",
-    "ascending": "Ascendente",
-    "descending": "Descendente",
-    "root": "Raiz",
-    "new": "Novo",
-    "sortBy": "Ordenar por",
-    "items": "Unid",
-    "selected": "Selecionado",
-    "editor": "Editor",
-    "octal": "Octal",
-    "storage": "Armazenar",
-    "disk": "Disco",
-    "used": "Usado",
-    "of": "de",
-    "toggleSidebar": "Alternar barra lateral",
-    "compactLayout": "Utilize um layout compacto.",
-    "comfortableLayout": "Use um layout confortável",
-    "cannotLoadPdf": "Não foi possível carregar o PDF.",
-    "pdfLoadError": "Ocorreu um erro ao carregar este arquivo PDF.",
-    "loadingPdf": "Carregando o visualizador de PDF...",
-    "loadingPage": "Carregando página...",
-    "cancel": "Cancelar",
-    "copiedItems_one": "Item copiado {{count}}",
-    "copiedItems_other": "Itens copiados {{count}}",
-    "deleteCopiedFileFailed": "Não foi possível excluir a cópia de {{name}}: {{error}}",
-    "dragMovedItems_one": "Moved {{count}} item to {{target}}",
-    "dragMovedItems_other": "Movidos {{count}} itens para {{target}}",
-    "moveBackFileFailed": "Não foi possível mover {{name}} para trás: {{error}}",
-    "terminal": "Terminal: {{host}} ({{path}})",
-    "dragToDesktop": "Arrastar {{name}} para a área de trabalho",
-    "dragFilesToDesktop": "Arrastar {{count}} arquivos para a área de trabalho",
-    "folderDragUnsupported": "Arrastar pastas para a área de trabalho ainda não é suportado.",
-    "saveToDesktopFailed": "Falha ao salvar: {{error}}",
-    "dragFailedDetail": "Falha ao arrastar: {{error}}",
-    "videoUnsupported": "Seu navegador não consegue reproduzir este formato de vídeo.",
-    "downloadToPlay": "Faça o download para jogar em outro lugar.",
-    "cannotPreviewType": "Não é possível visualizar este tipo de arquivo.",
-    "cannotPreviewTypeHint": "Este tipo de arquivo não possui pré-visualização. Faça o download para abri-lo em outro aplicativo.",
-    "loadingFile": "Carregando arquivo...",
-    "loadingImage": "Carregando imagem...",
-    "loadingEditor": "Carregando editor...",
-    "loadingPreview": "Carregando pré-visualização...",
-    "loadingAudio": "Carregando o reprodutor de áudio...",
-    "emptyPreview": "Ainda não há nada para visualizar...",
-    "revert": "Reverter",
-    "openAsText": "Abrir como texto",
-    "confirmOpenAsText": "Deseja continuar abrindo este arquivo como texto? Isso pode deixar seu navegador mais lento."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "Transferir arquivos entre dois hosts SSH.",
-    "sourceServer": "Servidor de origem",
-    "destinationServer": "Servidor de destino",
-    "selectHost": "Selecione o host",
-    "noHostSelected": "Nenhum host selecionado",
-    "move": "Mover",
-    "copy": "Copiar",
-    "upload": "Enviar",
-    "itemsSelected": "{{count}} item selecionado",
-    "itemsSelected_other": "{{count}} itens selecionados",
-    "ready": "Preparar",
-    "loadingHosts": "Carregando hosts...",
-    "name": "Nome",
-    "modified": "Modificado",
-    "size": "Tamanho",
-    "noFiles": "Nenhum arquivo",
-    "open": "Abrir",
-    "up": "Acima",
-    "refresh": "Atualizar",
-    "copyToTarget": "Copiar para o diretório de destino",
-    "rename": "Renomear",
-    "delete": "Apagar",
-    "editPermissions": "Editar permissões",
-    "createNewFolder": "Criar nova pasta",
-    "deleteSelectedItems": "Excluir itens selecionados",
-    "deleteConfirm": "Delete {{count}} selected item?",
-    "deleteConfirm_other": "Excluir {{count}} itens selecionados?",
-    "cancel": "Cancelar",
-    "save": "Salvar",
-    "folderCreated": "Pasta criada",
-    "itemRenamed": "Item renomeado",
-    "actionFailed": "A ação falhou",
-    "itemsDeleted": "{{count}} item excluído",
-    "itemsDeleted_other": "{{count}} itens excluídos",
-    "deleteFailed": "Falha ao excluir",
-    "permissionsUpdated": "Permissões atualizadas",
-    "noRemoteSessionConnected": "Nenhuma sessão remota conectada.",
-    "failedToListFiles": "Falha ao listar os arquivos",
-    "failedToRefresh": "Falha ao atualizar",
-    "destinationInsideSource": "O destino não pode estar dentro do caminho de origem selecionado.",
-    "sameHostNoOp": "A origem e o destino são a mesma pasta."
-  },
-  "hosts": {
-    "fileManager": "Gerenciador de Arquivos",
-    "fileManagerUrlCopied": "URL do Gerenciador de Arquivos copiada",
-    "copyFileManagerUrlAction": "Copiar URL do Gerenciador de Arquivos",
-    "docsLink": "Documentação",
-    "hostNotFound": "Host não encontrado",
-    "loadingHost": "Carregando host..."
-  },
-  "onboarding": {
-    "feature_files": "Gerenciador de arquivos",
-    "feature_files_desc": "Navegue, carregue, baixe e edite arquivos via SFTP sem sair do aplicativo."
-  },
-  "terminal": {
-    "runTitle": "Executando {{command}} - {{host}}",
-    "terminalTitle": "Terminal - {{host}}",
-    "terminalWithPath": "Terminal - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Procurar pastas de destino",
-    "browsePathError": "Não foi possível abrir este caminho no host de destino.",
-    "browsePathWillBeCreated": "Esta pasta ainda não existe. Ela será criada quando a transferência começar.",
-    "cancel": "Cancelar",
-    "cleanupDestFiles": "destino de limpeza",
-    "cleanupDestFilesError": "A limpeza falhou",
-    "cleanupDestFilesNothing": "Nada para limpar no destino.",
-    "cleanupDestFilesPartial": "Alguns arquivos parciais não puderam ser removidos.",
-    "cleanupDestFilesSuccess": "Arquivos parciais removidos do destino.",
-    "confirmCopy": "Copiar",
-    "confirmMove": "Mover",
-    "copyFolderToHost": "Copiar pasta para o host…",
-    "copyItemsToHost": "Copiar {{count}} itens para o host…",
-    "copyToHost": "Copiar para o host…",
-    "destinationPath": "Caminho de destino",
-    "destMustBeDirectory": "O destino deve ser um diretório para transferências de múltiplos itens.",
-    "goUp": "Subir",
-    "hostAuthRequired": "É necessária autenticação. Primeiro, abra o Gerenciador de Arquivos neste host.",
-    "hostConnecting": "Conectando…",
-    "hostConnectionFailed": "Falha na conexão",
-    "hostDisconnected": "Não conectado",
-    "hostReady": "Preparar",
-    "itemsSummary": "{{count}} itens",
-    "jumpHostLimitation": "Ambos os hosts devem ser acessíveis a partir do servidor Termix. O roteamento direto de host para host não é suportado.",
-    "methodAuto": "Auto",
-    "methodAutoHint": "Seleciona o método de compactação (tar) ou SFTP por arquivo com base na quantidade de arquivos, tamanho e compressibilidade. Arquivos individuais sempre utilizam SFTP de streaming.",
-    "methodItemSftp": "SFTP por arquivo",
-    "methodItemSftpHint": "Transfira cada arquivo individualmente via SFTP. Funciona em todos os hosts, incluindo Windows.",
-    "methodItemSftpLimitation": "Cada arquivo utiliza o mesmo fluxo SFTP como uma cópia de arquivo único, um após o outro. O progresso é combinado em todos os arquivos, portanto a barra se move lentamente durante a transferência de arquivos grandes.",
-    "methodLabel": "Método de transferência",
-    "methodPreviewError": "Não foi possível visualizar o método de transferência. O servidor ainda escolherá um método quando você iniciar o servidor.",
-    "methodPreviewLoading": "Calculando o método de transferência…",
-    "methodPreviewScanSummary": "{{fileCount}} arquivos, {{totalSize}} total (verificado no host de origem).",
-    "methodPreviewWillUseItemSftp": "Será utilizado: SFTP por arquivo",
-    "methodPreviewWillUseTar": "Será utilizado: Arquivo tar",
-    "methodReason": {
-      "user_item_sftp": "Você escolheu SFTP por arquivo.",
-      "user_tar": "Você escolheu o arquivo tar.",
-      "tar_unavailable": "O arquivo tar não está disponível em um ou ambos os servidores, portanto, será utilizado o SFTP por arquivo.",
-      "windows_host": "Como se trata de um host Windows, o tar não é utilizado.",
-      "auto_multi_large": "Automático: vários arquivos, incluindo um arquivo grande ({{largestSize}}) com dados compressíveis. O Tar os agrupa em uma única transferência.",
-      "auto_single_large_in_archive": "Automático: um arquivo grande ({{largestSize}}) neste conjunto, portanto, SFTP por arquivo.",
-      "auto_many_incompressible": "Automático: dados em sua maioria não compressíveis, portanto, SFTP por arquivo.",
-      "auto_many_files": "Automático: muitos arquivos ({{fileCount}}), tar reduz a sobrecarga por arquivo.",
-      "auto_default": "Automático: SFTP por arquivo para este conjunto."
-    },
-    "methodTar": "Arquivo Tar",
-    "methodTarHint": "Comprima na origem, transfira um único arquivo compactado e extraia no destino. Requer o uso do tar em ambos os hosts Unix.",
-    "metricsCompress": "Comprimir na origem: {{duration}}",
-    "metricsExtract": "Extrair no destino: {{duration}}",
-    "metricsPrepare": "Preparar destino: {{duration}}",
-    "metricsRouteBenchmark": "Sondagem de rota: direta {{direct}}, retransmissão {{relay}}",
-    "metricsSourceDelete": "Remover da fonte: {{duration}}",
-    "metricsTotal": "Total: {{duration}}",
-    "metricsTransfer": "De ponta a ponta: {{throughput}} ({{duration}})",
-    "metricsVerify": "Verificado por SHA-256: {{duration}}",
-    "moveFolderToHost": "Mover pasta para o host…",
-    "moveItemsToHost": "Mova {{count}} itens para o host…",
-    "moveToHost": "Mover para o host…",
-    "noHostsConnected": "Não há outros servidores de gerenciamento de arquivos disponíveis.",
-    "noHostsConnectedHint": "Adicione outro host SSH com o Gerenciador de Arquivos habilitado no Gerenciador de Hosts.",
-    "parallelSegmentsHint": "Arquivos grandes são divididos em partes de 256 MB. Várias vias utilizam conexões separadas (como iniciar várias transferências) para obter uma taxa de transferência total maior.",
-    "parallelSegmentsLabel": "Faixas de transferência paralelas",
-    "parallelSegmentsOption": "{{count}} faixas",
-    "progressBenchmarking": "Selecionando a rota de transferência mais rápida…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Cancelar",
-    "progressCancelling": "Cancelando…",
-    "progressCompressing": "Comprimindo no host de origem…",
-    "progressExtracting": "Extraindo no destino…",
-    "progressItems": "{{current}} / {{total}} arquivos",
-    "progressReconnecting": "Reconectando…",
-    "progressStalled": "Paralisado",
-    "progressTotalSpeed": "{{speed}} total ({{lanes}} faixas)",
-    "progressTransferring": "Transferindo dados…",
-    "progressTransferringItems": "Transferindo arquivos ({{current}} de {{total}})…",
-    "progressVerifying": "Verificando a integridade do arquivo…",
-    "recentDestinations": "Destinos recentes",
-    "resumedHint": "Reconectado a uma transferência ativa iniciada em outra janela.",
-    "retryTransfer": "Tentar novamente",
-    "retryTransferError": "A nova tentativa falhou.",
-    "selectDestinationHost": "Selecione o host de destino",
-    "transferCancelled": "Transferência cancelada",
-    "transferCancelledCopyHint": "Alguns arquivos podem permanecer no destino.",
-    "transferCancelledMoveHint": "É possível que alguns arquivos permaneçam no destino. Os arquivos de origem não foram removidos.",
-    "transferError": "A transferência falhou",
-    "transferFailedRetryHint": "Dados parciais foram mantidos no destino. A tentativa será retomada quando a conexão for restabelecida.",
-    "transferPartialHint": "Não foi possível transferir: {{paths}}",
-    "transferSuccess": "Transferência concluída",
-    "metricsHopSourceRead": "Origem → servidor: {{throughput}}",
-    "metricsHopDestSftpWrite": "Servidor → destino (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Servidor → destino (local): {{throughput}}"
-  },
-  "plugin": {
-    "name": "Gerenciador de Arquivos"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/pt_PT.json b/plugins/file-manager/locales/translated/pt_PT.json
deleted file mode 100644
index a269122c0..000000000
--- a/plugins/file-manager/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Ficheiros",
-    "sftp": "SFTP",
-    "openFileManager": "Abrir Gestor de Ficheiros"
-  },
-  "permissions": {
-    "use": {
-      "title": "Use o gestor de ficheiros",
-      "description": "Navegue, edite e transfira ficheiros via SFTP."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Ativar Gestor de Ficheiros",
-        "description": "Navegue e edite ficheiros neste servidor via SFTP."
-      },
-      "defaultPath": {
-        "label": "Caminho Predefinido"
-      },
-      "scpLegacy": {
-        "label": "Modo SCP Legado"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Transferências simultâneas de ficheiros",
-        "description": "Quantos ficheiros o gestor local/remoto lado a lado carrega ou descarrega simultaneamente? Diminua este valor se o seu servidor limitar os canais SFTP."
-      },
-      "confirmBeforeTrash": {
-        "label": "Confirme antes de mover os ficheiros para a reciclagem.",
-        "description": "Peça permissão antes de mover ficheiros remotos para a reciclagem. A eliminação permanente ainda requer confirmação."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Gestor de Ficheiros"
-  },
-  "fileManager": {
-    "noHostSelected": "Nenhum host selecionado",
-    "initializingEditor": "A inicializar editor...",
-    "file": "Ficheiro",
-    "folder": "Pasta",
-    "uploadFile": "Carregar Ficheiro",
-    "downloadFile": "Descarregar",
-    "extractArchive": "Extrair Arquivo",
-    "extractingArchive": "A extrair {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} extraído com sucesso",
-    "extractFailed": "Extração falhou",
-    "compressFile": "Comprimir Ficheiro",
-    "compressFiles": "Comprimir Ficheiros",
-    "compressFilesDesc": "Comprimir {{count}} itens num arquivo",
-    "archiveName": "Nome do arquivo",
-    "enterArchiveName": "Introduza o nome do arquivo...",
-    "compressionFormat": "Formato de compressão",
-    "selectedFiles": "Ficheiros selecionados",
-    "andMoreFiles": "e mais {{count}}...",
-    "compress": "Comprimir",
-    "compressingFiles": "A comprimir {{count}} itens em {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} criado com sucesso",
-    "compressFailed": "Compressão falhou",
-    "edit": "Editar",
-    "preview": "Pré-visualizar",
-    "previous": "Anterior",
-    "next": "Seguinte",
-    "pageXOfY": "Página {{current}} de {{total}}",
-    "zoomOut": "Reduzir",
-    "zoomIn": "Ampliar",
-    "newFile": "Novo Ficheiro",
-    "newFolder": "Nova Pasta",
-    "rename": "Renomear",
-    "uploading": "A enviar...",
-    "uploadingFile": "A enviar {{name}}...",
-    "uploadingChunk": "A enviar {{name}}: {{percent}}% (parte {{chunk}} de {{total}})",
-    "fileName": "Nome do ficheiro",
-    "folderName": "Nome da pasta",
-    "fileUploadedSuccessfully": "Ficheiro \"{{name}}\" enviado com sucesso",
-    "failedToUploadFile": "Falha ao enviar ficheiro",
-    "uploadingFolderFiles": "A enviar {{count}} ficheiro(s)...",
-    "uploadedFolderFiles": "Ficheiro(s) carregado(s) com sucesso {{count}}",
-    "uploadedFolderPartial": "Uploaded {{uploaded}} file(s), {{failed}} failed",
-    "fileDownloadedSuccessfully": "Ficheiro \"{{name}}\" descarregado com sucesso",
-    "failedToDownloadFile": "Falha ao descarregar ficheiro",
-    "fileCreatedSuccessfully": "Ficheiro \"{{name}}\" criado com sucesso",
-    "folderCreatedSuccessfully": "Pasta \"{{name}}\" criada com sucesso",
-    "failedToCreateItem": "Falha ao criar item",
-    "operationFailed": "Operação {{operation}} falhou para {{name}}: {{error}}",
-    "failedToResolveSymlink": "Falha ao resolver ligação simbólica",
-    "itemsDeletedSuccessfully": "{{count}} itens eliminados com êxito",
-    "failedToDeleteItems": "Falha ao eliminar itens",
-    "sudoPasswordRequired": "Palavra-passe de administrador necessária",
-    "enterSudoPassword": "Introduza a palavra-passe sudo para continuar esta operação",
-    "sudoPassword": "Palavra-passe sudo",
-    "sudoOperationFailed": "Operação sudo falhou",
-    "sudoAuthFailed": "Autenticação sudo falhou",
-    "dragFilesToUpload": "Arraste ficheiros aqui para carregar",
-    "dropToUploadHere": "Arraste e faça o upload aqui.",
-    "dropToDownloadHere": "Faça o download aqui.",
-    "localFiles": "Local",
-    "showLocalFiles": "Visualizar ficheiros locais (visualização dividida)",
-    "hideLocalFiles": "Ocultar ficheiros locais",
-    "localHome": "Pasta inicial",
-    "localPathPlaceholder": "Caminho da pasta local",
-    "localShowHidden": "Mostrar ficheiros ocultos",
-    "localHideHidden": "Ocultar ficheiros ocultos",
-    "localRevealInFileManager": "Exibir no gestor de ficheiros do sistema",
-    "localCannotOpenFolder": "Não é possível abrir a pasta",
-    "localItemCount": "{{count}} itens",
-    "localSelectedCount": "{{count}} selecionado(s)",
-    "back": "Voltar",
-    "forward": "Encaminhar",
-    "up": "Para cima",
-    "kind": "Amabilidade",
-    "localUploadingProgress": "A enviar {{current}} de {{total}}",
-    "localDownloadingProgress": "A descarregar {{current}} de {{total}}",
-    "localTransferInFlight": "{{count}} imediatamente",
-    "localPreparingDownload": "A preparar o download...",
-    "localTransferCancelled": "Transferência cancelada",
-    "localNothingToTransfer": "Nada a transferir",
-    "localUploadComplete": "Uploaded {{count}} file(s)",
-    "localUploadFailed": "Falha no upload",
-    "localUploadPartial": "Uploaded {{done}} file(s), {{failed}} failed",
-    "localDownloadComplete": "Ficheiro(s) descarregado(s) {{count}}",
-    "localDownloadFailed": "Falha ao descarregar",
-    "localDownloadPartial": "O download de {{done}} ficheiro(s) falhou. {{failed}}",
-    "localReplaceExistingPrompt": "{{count}} Já existem itens nesta pasta. Deseja substituí-los?",
-    "localReplace": "Substituir",
-    "localSkipExisting": "Ignorar",
-    "localSkippedExisting": "Ignorou {{count}} item(s) existente(s)",
-    "localUnsafeNamesSkipped": "Ignorado {{count}} item(s) cujos nomes não podem ser utilizados neste computador",
-    "localOpen": "Abrir",
-    "localOpenFolder": "Abra a pasta",
-    "localUploadToRemote": "Enviar para o servidor",
-    "localUploadToRemoteMany": "Enviar {{count}} itens para o servidor",
-    "localMoveToTrash": "Mover para a Reciclagem",
-    "localMoveToTrashMany": "Mover {{count}} itens para a Reciclagem",
-    "localTrashConfirmSingle": "Deslocar \"{{name}}\" para a Reciclagem?",
-    "localTrashConfirmFolder": "Mover a pasta \"{{name}}\" e todo o seu conteúdo para a Reciclagem?",
-    "localTrashConfirmMany": "Mover {{count}} itens para a Reciclagem?",
-    "localTrashed": "Movidos {{count}} itens para a Reciclagem",
-    "localTrashFailed": "Não foi possível mover para a Reciclagem",
-    "localRenameFailed": "A renomeação falhou",
-    "localCreateFailed": "Não foi possível criar o item.",
-    "goToParentFolder": "Aceda à pasta principal",
-    "resizeSidebar": "Arraste para redimensionar a barra lateral (clique duas vezes para repor).",
-    "resizeLocalPane": "Arraste para redimensionar o painel local (clique duas vezes para repor).",
-    "columns": "Colunas",
-    "columnsHint": "Clique com o botão direito do rato para escolher as colunas.",
-    "emptyFolder": "Esta pasta está vazia",
-    "searchFiles": "Procurar ficheiros...",
-    "upload": "Carregar",
-    "selectHostToStart": "Selecione uma máquina para iniciar a gestão de ficheiros",
-    "sshRequiredForFileManager": "O gestor de ficheiros requer SSH. Esta máquina não tem SSH ativado.",
-    "failedToConnect": "Falha ao ligar ao SSH",
-    "failedToLoadDirectory": "Falha ao carregar diretório",
-    "noSSHConnection": "Nenhuma ligação SSH disponível",
-    "copy": "Copiar",
-    "cut": "Cortar",
-    "paste": "Colar",
-    "copyPath": "Copiar caminho",
-    "copyPaths": "Copiar caminhos",
-    "delete": "Eliminar",
-    "properties": "Propriedades",
-    "refresh": "Atualizar",
-    "downloadFiles": "Descarregar {{count}} ficheiros para o navegador",
-    "copyFiles": "Copiar {{count}} itens",
-    "cutFiles": "Cortar {{count}} itens",
-    "deleteFiles": "Eliminar {{count}} itens",
-    "filesCopiedToClipboard": "{{count}} itens copiados para a área de transferência",
-    "filesCutToClipboard": "{{count}} itens cortados para a área de transferência",
-    "pathCopiedToClipboard": "Caminho copiado para a área de transferência",
-    "pathsCopiedToClipboard": "{{count}} caminhos copiados para a área de transferência",
-    "failedToCopyPath": "Falha ao copiar o caminho para a área de transferência",
-    "copyFolderLink": "Copiar ligação para a pasta",
-    "copyCurrentFolderLink": "Copiar ligação para a pasta atual",
-    "folderLinkCopied": "Ligação da pasta copiada para a área de transferência",
-    "failedToCopyFolderLink": "Falha ao copiar a ligação da pasta",
-    "movedItems": "{{count}} itens movidos",
-    "failedToDeleteItem": "Falha ao eliminar o item",
-    "itemRenamedSuccessfully": "Renomeação de {{type}} bem-sucedida.",
-    "failedToRenameItem": "Falha ao renomear o item",
-    "download": "Transferir",
-    "openExternalEditor": "Abrir externamente",
-    "chooseExternalEditor": "Escolher editor externo",
-    "externalEditorSelected": "Editor externo selecionado",
-    "externalEditorDesktopOnly": "O editor externo está disponível apenas na aplicação de ambiente de trabalho",
-    "externalEditorOpened": "Aberto no editor externo. Ao guardar, as alterações serão enviadas de volta para o servidor.",
-    "failedToOpenExternalEditor": "Falha ao abrir o editor externo",
-    "failedToSelectExternalEditor": "Falha ao selecionar o editor externo",
-    "permissions": "Permissões",
-    "size": "Tamanho",
-    "modified": "Modificado",
-    "path": "Caminho",
-    "confirmDelete": "Tem a certeza de que pretende eliminar {{name}}?",
-    "permissionDenied": "Permissão negada",
-    "serverError": "Erro do servidor",
-    "fileSavedSuccessfully": "Ficheiro guardado com sucesso",
-    "failedToSaveFile": "Falha ao guardar o ficheiro",
-    "confirmDeleteSingleItem": "Tem a certeza de que pretende eliminar permanentemente \"{{name}}\"?",
-    "confirmDeleteMultipleItems": "Tem a certeza de que pretende eliminar permanentemente {{count}} itens?",
-    "confirmDeleteMultipleItemsWithFolders": "Tem a certeza de que pretende eliminar permanentemente {{count}} itens? Isto inclui pastas e o seu conteúdo.",
-    "confirmDeleteFolder": "Tem a certeza de que pretende eliminar permanentemente a pasta \"{{name}}\" e todo o seu conteúdo?",
-    "permanentDeleteWarning": "Esta ação não pode ser anulada. Os itens serão permanentemente eliminados do servidor.",
-    "moveToTrashWarning": "O(s) artigo(s) será(ão) movido(s) para a Reciclagem Termix e poderá(ão) ser restaurado(s) antes do fim do período de retenção.",
-    "itemsMovedToTrash": "{{count}} artigo(s) movido(s) para a Reciclagem",
-    "trash": "Lixo",
-    "trashDescription": "Os itens eliminados são retidos durante {{days}} dia(s) neste host.",
-    "trashLoadFailed": "Falha ao carregar a Reciclagem",
-    "trashEmpty": "A papeleira está vazia.",
-    "trashRestore": "Restaurar",
-    "trashRestored": "Restaurado {{name}}",
-    "trashRestoreFailed": "Falha ao restaurar o item. O caminho original pode já existir.",
-    "trashDeletePermanently": "Apagar permanentemente",
-    "trashDeleteConfirm": "Apagar permanentemente {{name}}? Esta ação não pode ser anulada.",
-    "trashPermanentlyDeleted": "Eliminado permanentemente {{name}}",
-    "trashDeleteFailed": "Falha ao eliminar o item permanentemente",
-    "trashEmptyAction": "Esvaziar o lixo",
-    "trashEmptyConfirm": "Apagar permanentemente todos os itens da Reciclagem? Esta ação é irreversível.",
-    "trashEmptied": "Lixo esvaziado",
-    "trashRetention": "Limpeza automática após (dias)",
-    "trashRetentionSaved": "Retenção de lixo atualizada",
-    "trashRetentionFailed": "Falha na atualização da retenção de lixo",
-    "trashUnavailableConfirm": "Este item não pode ser movido para a Reciclagem, geralmente porque está noutro sistema de ficheiros ou requer permissões elevadas. Deseja eliminá-lo permanentemente?",
-    "recent": "Recentes",
-    "pinned": "Fixados",
-    "folderShortcuts": "Atalhos de pastas",
-    "failedToReconnectSSH": "Falha ao restabelecer a sessão SSH",
-    "openTerminalHere": "Abrir Terminal Aqui",
-    "run": "Executar",
-    "openTerminalInFolder": "Abrir Terminal Nesta Pasta",
-    "openTerminalInFileLocation": "Abrir Terminal na Localização do Ficheiro",
-    "runningFile": "Em execução - {{file}}",
-    "onlyRunExecutableFiles": "Só pode executar ficheiros executáveis",
-    "directories": "Pastas",
-    "removedFromRecentFiles": "Removido \"{{name}}\" dos ficheiros recentes",
-    "removeFailed": "Falha ao remover",
-    "unpinnedSuccessfully": "\"{{name}}\" desafixado com sucesso",
-    "unpinFailed": "Falha ao desafixar",
-    "removedShortcut": "Atalho \"{{name}}\" removido",
-    "removeShortcutFailed": "Falha ao remover atalho",
-    "clearedAllRecentFiles": "Limpos todos os ficheiros recentes",
-    "clearFailed": "Falha ao limpar",
-    "removeFromRecentFiles": "Remover dos ficheiros recentes",
-    "clearAllRecentFiles": "Limpar todos os ficheiros recentes",
-    "unpinFile": "Desafixar ficheiro",
-    "removeShortcut": "Remover atalho",
-    "pinFile": "Afixar ficheiro",
-    "addToShortcuts": "Adicionar aos atalhos",
-    "pasteFailed": "Falha ao colar",
-    "noUndoableActions": "Sem ações para desfazer",
-    "undoCopySuccess": "Desfeita a operação de cópia: Eliminados {{count}} ficheiros copiados",
-    "undoCopyFailedDelete": "Falha ao desfazer: Não foi possível eliminar os ficheiros copiados",
-    "undoCopyFailedNoInfo": "Falha ao desfazer: Não foi possível encontrar a informação dos ficheiros copiados",
-    "undoMoveSuccess": "Desfeita a operação de mover: {{count}} ficheiros movidos de volta para o local original",
-    "undoMoveFailedMove": "Falha ao desfazer: Não foi possível mover nenhum ficheiro de volta",
-    "undoMoveFailedNoInfo": "Falha ao desfazer: Não foi possível encontrar a informação dos ficheiros movidos",
-    "undoDeleteNotSupported": "A operação de eliminar não pode ser desfeita: Os ficheiros foram eliminados permanentemente do servidor",
-    "undoTypeNotSupported": "Tipo de operação de desfazer não suportado",
-    "undoOperationFailed": "Falha ao desfazer a operação",
-    "unknownError": "Erro desconhecido",
-    "confirm": "Confirmar",
-    "find": "Procurar...",
-    "replace": "Substituir",
-    "downloadInstead": "Transferir em alternativa",
-    "keyboardShortcuts": "Atalhos de teclado",
-    "searchAndReplace": "Pesquisar e substituir",
-    "editing": "Edição",
-    "search": "Pesquisar",
-    "findNext": "Localizar seguinte",
-    "findPrevious": "Localizar anterior",
-    "save": "Guardar",
-    "selectAll": "Selecionar tudo",
-    "undo": "Desfazer",
-    "redo": "Refazer",
-    "moveLineUp": "Mover linha para cima",
-    "moveLineDown": "Mover linha para baixo",
-    "toggleComment": "Alternar comentário",
-    "autoComplete": "Autocompletar",
-    "imageLoadError": "Erro ao carregar a imagem",
-    "startTyping": "Comece a escrever...",
-    "unknownSize": "Tamanho desconhecido",
-    "fileIsEmpty": "O ficheiro está vazio",
-    "largeFileWarning": "Aviso de ficheiro grande",
-    "largeFileWarningDesc": "Este ficheiro tem {{size}} de tamanho, o que poderá causar problemas de desempenho ao ser aberto como texto.",
-    "fileNotFoundAndRemoved": "O ficheiro \"{{name}}\" não foi encontrado e foi removido dos ficheiros recentes/fixados",
-    "failedToLoadFile": "Erro ao carregar o ficheiro: {{error}}",
-    "serverErrorOccurred": "Ocorreu um erro no servidor. Por favor, tente novamente mais tarde.",
-    "autoSaveFailed": "Falha na gravação automática",
-    "fileAutoSaved": "Ficheiro gravado automaticamente",
-    "moveFileFailed": "Falha ao mover {{name}}",
-    "moveOperationFailed": "Falha na operação de movimentação",
-    "canOnlyCompareFiles": "Só é possível comparar dois ficheiros",
-    "comparingFiles": "A comparar ficheiros: {{file1}} e {{file2}}",
-    "dragFailed": "Falha ao arrastar",
-    "filePinnedSuccessfully": "Ficheiro \"{{name}}\" fixado com sucesso",
-    "pinFileFailed": "Erro ao fixar o ficheiro",
-    "fileUnpinnedSuccessfully": "Ficheiro \"{{name}}\" desafixado com sucesso",
-    "unpinFileFailed": "Falha ao desafixar ficheiro",
-    "shortcutAddedSuccessfully": "Atalho para a pasta \"{{name}}\" adicionado com sucesso",
-    "addShortcutFailed": "Falha ao adicionar atalho",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} itens com sucesso",
-    "operationCompleted": "{{operation}} {{count}} itens",
-    "downloadFileSuccess": "Ficheiro {{name}} descarregado com sucesso",
-    "downloadFileFailed": "Falha ao descarregar",
-    "downloadingFile": "A descarregar {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Mover para {{name}}",
-    "diffCompareWith": "Comparar diferenças com {{name}}",
-    "dragOutsideToDownload": "Arraste para fora da janela para descarregar ({{count}} ficheiros)",
-    "newFolderDefault": "NovaPasta",
-    "newFileDefault": "NovoFicheiro.txt",
-    "successfullyMovedItems": "{{count}} itens movidos com sucesso para {{target}}",
-    "move": "Mover",
-    "searchInFile": "Procurar no ficheiro (Ctrl+F)",
-    "showKeyboardShortcuts": "Mostrar atalhos de teclado",
-    "decreaseFontSize": "Diminuir tamanho da letra",
-    "increaseFontSize": "Aumentar tamanho da letra",
-    "startWritingMarkdown": "Comece a escrever o seu conteúdo em markdown...",
-    "loadingFileComparison": "A carregar comparação de ficheiros...",
-    "reload": "Recarregar",
-    "compare": "Comparar",
-    "sideBySide": "Lado a lado",
-    "inline": "Em linha",
-    "fileComparison": "Comparação de ficheiros: {{file1}} vs {{file2}}",
-    "fileTooLarge": "O ficheiro é demasiado grande (> 10 MB) e não pode ser aberto como texto por motivos de segurança.",
-    "sshConnectionFailed": "Falha na ligação SSH. Verifique a sua ligação a {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Falha ao carregar ficheiro: {{error}}",
-    "connecting": "A ligar...",
-    "connectedSuccessfully": "Ligado com sucesso",
-    "totpVerificationFailed": "Falha na verificação TOTP",
-    "browserSignInFailed": "Falha ao efetuar o login. Tente novamente.",
-    "authenticationFailed": "Falha na autenticação",
-    "incorrectPassphrase": "Frase-passe incorreta. Tente novamente.",
-    "verificationCodePrompt": "Código de verificação:",
-    "changePermissions": "Alterar Permissões",
-    "currentPermissions": "Permissões Atuais",
-    "owner": "Proprietário",
-    "group": "Grupo",
-    "others": "Outros",
-    "read": "Leitura",
-    "write": "Escrita",
-    "execute": "Execução",
-    "permissionsChangedSuccessfully": "Permissões alteradas com sucesso",
-    "failedToChangePermissions": "Falha ao alterar permissões",
-    "name": "Nome",
-    "sortByName": "Nome",
-    "sortByDate": "Data de modificação",
-    "sortBySize": "Tamanho",
-    "ascending": "Ascendente",
-    "descending": "Descendente",
-    "root": "Raiz",
-    "new": "Novo",
-    "sortBy": "Ordenar por",
-    "items": "Itens",
-    "selected": "Selecionados",
-    "editor": "Editor",
-    "octal": "Octal",
-    "storage": "Armazenamento",
-    "disk": "Disco",
-    "used": "Utilizado",
-    "of": "de",
-    "toggleSidebar": "Alternar Barra Lateral",
-    "compactLayout": "Utilize um layout compacto.",
-    "comfortableLayout": "Utilize um layout confortável",
-    "cannotLoadPdf": "Não é possível carregar o PDF",
-    "pdfLoadError": "Ocorreu um erro ao carregar este ficheiro PDF.",
-    "loadingPdf": "A carregar o visualizador de PDF...",
-    "loadingPage": "A carregar página...",
-    "cancel": "Cancelar",
-    "copiedItems_one": "Item copiado {{count}}",
-    "copiedItems_other": "Itens copiados {{count}}",
-    "deleteCopiedFileFailed": "Não foi possível eliminar a cópia de {{name}}: {{error}}",
-    "dragMovedItems_one": "Moved {{count}} item to {{target}}",
-    "dragMovedItems_other": "Movidos {{count}} itens para {{target}}",
-    "moveBackFileFailed": "Não foi possível mover {{name}} para trás: {{error}}",
-    "terminal": "Terminal: {{host}} ({{path}})",
-    "dragToDesktop": "Arrastar {{name}} para o ambiente de trabalho",
-    "dragFilesToDesktop": "Arrastar {{count}} ficheiros para o ambiente de trabalho",
-    "folderDragUnsupported": "Arrastar pastas para o ambiente de trabalho ainda não é suportado.",
-    "saveToDesktopFailed": "Falha ao guardar: {{error}}",
-    "dragFailedDetail": "Falha ao arrastar: {{error}}",
-    "videoUnsupported": "O seu navegador não consegue reproduzir este formato de vídeo.",
-    "downloadToPlay": "Faça o download para jogar noutro local.",
-    "cannotPreviewType": "Não é possível visualizar este tipo de ficheiro.",
-    "cannotPreviewTypeHint": "Este tipo de ficheiro não possui pré-visualização. Faça o download para abri-lo noutra aplicação.",
-    "loadingFile": "A carregar ficheiro...",
-    "loadingImage": "A carregar imagem...",
-    "loadingEditor": "Editor de carregamento...",
-    "loadingPreview": "Carregando pré-visualização...",
-    "loadingAudio": "Carregamento do leitor de áudio...",
-    "emptyPreview": "Ainda não há nada para visualizar...",
-    "revert": "Reverter",
-    "openAsText": "Abrir como texto",
-    "confirmOpenAsText": "Deseja continuar a abrir este ficheiro como texto? Isto pode deixar o seu navegador mais lento."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "Transferir ficheiros entre dois hosts SSH.",
-    "sourceServer": "Servidor de origem",
-    "destinationServer": "Servidor de destino",
-    "selectHost": "Selecione o host",
-    "noHostSelected": "Nenhum anfitrião selecionado",
-    "move": "Mover",
-    "copy": "Copiar",
-    "upload": "Carregar",
-    "itemsSelected": "{{count}} item selecionado",
-    "itemsSelected_other": "{{count}} itens selecionados",
-    "ready": "Pronto",
-    "loadingHosts": "A carregar hosts...",
-    "name": "Nome",
-    "modified": "Modificado",
-    "size": "Tamanho",
-    "noFiles": "Nenhum ficheiro",
-    "open": "Abrir",
-    "up": "Para cima",
-    "refresh": "Atualizar",
-    "copyToTarget": "Copiar para o diretório de destino",
-    "rename": "Renomear",
-    "delete": "Eliminar",
-    "editPermissions": "Editar permissões",
-    "createNewFolder": "Criar nova pasta",
-    "deleteSelectedItems": "Apagar itens selecionados",
-    "deleteConfirm": "Delete {{count}} selected item?",
-    "deleteConfirm_other": "Apagar {{count}} itens selecionados?",
-    "cancel": "Cancelar",
-    "save": "Guardar",
-    "folderCreated": "Pasta criada",
-    "itemRenamed": "Artigo renomeado",
-    "actionFailed": "A ação falhou",
-    "itemsDeleted": "{{count}} item eliminado",
-    "itemsDeleted_other": "{{count}} itens eliminados",
-    "deleteFailed": "Falha ao eliminar",
-    "permissionsUpdated": "Permissões atualizadas",
-    "noRemoteSessionConnected": "Nenhuma sessão remota ligada.",
-    "failedToListFiles": "Falha ao listar os ficheiros",
-    "failedToRefresh": "Falha ao atualizar",
-    "destinationInsideSource": "O destino não pode estar dentro do caminho de origem selecionado.",
-    "sameHostNoOp": "A origem e o destino são a mesma pasta."
-  },
-  "hosts": {
-    "fileManager": "Gestor de Ficheiros",
-    "fileManagerUrlCopied": "URL do gestor de ficheiros copiada",
-    "copyFileManagerUrlAction": "Copiar URL do Gestor de Ficheiros",
-    "docsLink": "Ver documentação",
-    "hostNotFound": "Host não encontrado",
-    "loadingHost": "A carregar o host..."
-  },
-  "onboarding": {
-    "feature_files": "Gestor de arquivos",
-    "feature_files_desc": "Navegue, carregue, descarregue e edite ficheiros via SFTP sem sair da aplicação."
-  },
-  "terminal": {
-    "runTitle": "A executar {{command}} - {{host}}",
-    "terminalTitle": "Terminal - {{host}}",
-    "terminalWithPath": "Terminal - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Navegar pelas pastas de destino",
-    "browsePathError": "Não foi possível abrir este caminho no host de destino.",
-    "browsePathWillBeCreated": "Esta pasta ainda não existe. Será criada quando a transferência for iniciada.",
-    "cancel": "Cancelar",
-    "cleanupDestFiles": "Limpar destino",
-    "cleanupDestFilesError": "A limpeza falhou.",
-    "cleanupDestFilesNothing": "Nada a limpar no destino.",
-    "cleanupDestFilesPartial": "Não foi possível remover alguns ficheiros parciais.",
-    "cleanupDestFilesSuccess": "Ficheiros parciais removidos do destino.",
-    "confirmCopy": "Copiar",
-    "confirmMove": "Mover",
-    "copyFolderToHost": "Copiar pasta para o host…",
-    "copyItemsToHost": "Copiar {{count}} itens para o host…",
-    "copyToHost": "Copiar para o host…",
-    "destinationPath": "Caminho de destino",
-    "destMustBeDirectory": "O destino deve ser uma pasta para transferências de vários itens.",
-    "goUp": "Subir",
-    "hostAuthRequired": "É necessária autenticação. Primeiro, abra o Gestor de Ficheiros neste host.",
-    "hostConnecting": "A ligar…",
-    "hostConnectionFailed": "Falha na ligação",
-    "hostDisconnected": "Desligado",
-    "hostReady": "Pronto",
-    "itemsSummary": "{{count}} itens",
-    "jumpHostLimitation": "Ambos os hosts têm de ser acessíveis a partir do servidor Termix. O encaminhamento direto entre hosts não é suportado.",
-    "methodAuto": "Automático",
-    "methodAutoHint": "Escolhe tar ou SFTP por ficheiro com base no número de ficheiros, tamanho e compressibilidade. Os ficheiros únicos usam sempre SFTP por streaming.",
-    "methodItemSftp": "SFTP por ficheiro",
-    "methodItemSftpHint": "Transfere cada ficheiro individualmente por SFTP. Funciona em todos os hosts, incluindo Windows.",
-    "methodItemSftpLimitation": "Cada ficheiro utiliza o mesmo stream SFTP como uma cópia de um único ficheiro, um após o outro. O progresso é combinado para todos os ficheiros, pelo que a barra se move lentamente durante ficheiros grandes.",
-    "methodLabel": "Método de transferência",
-    "methodPreviewError": "Não foi possível pré-visualizar o método de transferência. O servidor ainda escolherá um método quando iniciar.",
-    "methodPreviewLoading": "A calcular o método de transferência…",
-    "methodPreviewScanSummary": "{{fileCount}} ficheiros, {{totalSize}} no total (analisados no host de origem).",
-    "methodPreviewWillUseItemSftp": "Utilizará: SFTP por ficheiro",
-    "methodPreviewWillUseTar": "Utilizará: Arquivo Tar",
-    "methodReason": {
-      "user_item_sftp": "Optou por SFTP ficheiro a ficheiro.",
-      "user_tar": "Optou por ficheiro tar.",
-      "tar_unavailable": "O ficheiro tar não está disponível num ou em ambos os servidores, pelo que será utilizado o SFTP por ficheiro.",
-      "windows_host": "Como se trata de um host Windows, o tar não é utilizado.",
-      "auto_multi_large": "Automático: vários ficheiros, incluindo um ficheiro grande ({{largestSize}}) com dados compressíveis. O Tar agrupa-os numa única transferência.",
-      "auto_single_large_in_archive": "Automático: um ficheiro grande ({{largestSize}}) neste conjunto, portanto, SFTP por ficheiro.",
-      "auto_many_incompressible": "Automático: dados maioritariamente não compressíveis, portanto, SFTP por ficheiro.",
-      "auto_many_files": "Automático: muitos ficheiros ({{fileCount}}), o tar reduz a sobrecarga por ficheiro.",
-      "auto_default": "Automático: SFTP ficheiro a ficheiro para este conjunto."
-    },
-    "methodTar": "Arquivo Tar",
-    "methodTarHint": "Comprime na origem, transfere um arquivo, extrai no destino. Requer tar em ambos os hosts Unix.",
-    "metricsCompress": "Compressão na origem: {{duration}}",
-    "metricsExtract": "Extração no destino: {{duration}}",
-    "metricsPrepare": "Preparar destino: {{duration}}",
-    "metricsRouteBenchmark": "Sondagem de percurso: direta {{direct}}, retransmissão {{relay}}",
-    "metricsSourceDelete": "Remoção da origem: {{duration}}",
-    "metricsTotal": "Total: {{duration}}",
-    "metricsTransfer": "Ponta a ponta: {{throughput}} ({{duration}})",
-    "metricsVerify": "Verificado por SHA-256: {{duration}}",
-    "moveFolderToHost": "Mover pasta para o host…",
-    "moveItemsToHost": "Mover {{count}} itens para o host…",
-    "moveToHost": "Mover para o host…",
-    "noHostsConnected": "Não há outros hosts do gestor de ficheiros disponíveis.",
-    "noHostsConnectedHint": "Adicione outro host SSH com o Gestor de Ficheiros ativado no Gestor de Hosts.",
-    "parallelSegmentsHint": "Os ficheiros grandes são divididos em partes de 256 MB. Múltiplas vias utilizam ligações separadas (como iniciar várias transferências) para um maior débito total.",
-    "parallelSegmentsLabel": "Vias de transferência paralelas",
-    "parallelSegmentsOption": "{{count}} vias",
-    "progressBenchmarking": "Selecionando a rota de transferência mais rápida…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Cancelar",
-    "progressCancelling": "A cancelar…",
-    "progressCompressing": "A comprimir no host de origem…",
-    "progressExtracting": "A extrair no destino…",
-    "progressItems": "{{current}} / {{total}} ficheiros",
-    "progressReconnecting": "A reconectar…",
-    "progressStalled": "Parado",
-    "progressTotalSpeed": "{{speed}} total ({{lanes}} vias)",
-    "progressTransferring": "A transferir dados…",
-    "progressTransferringItems": "A transferir ficheiros ({{current}} de {{total}})…",
-    "progressVerifying": "Verificação da integridade do ficheiro…",
-    "recentDestinations": "Destinos recentes",
-    "resumedHint": "Reconectado a uma transferência ativa iniciada noutra janela.",
-    "retryTransfer": "Repetir",
-    "retryTransferError": "A repetição falhou.",
-    "selectDestinationHost": "Selecionar host de destino",
-    "transferCancelled": "Transferência cancelada",
-    "transferCancelledCopyHint": "Poderão permanecer ficheiros parciais no destino.",
-    "transferCancelledMoveHint": "Poderão permanecer ficheiros parciais no destino. Os ficheiros de origem não foram removidos.",
-    "transferError": "Transferência falhou",
-    "transferFailedRetryHint": "Foram mantidos dados parciais no destino. A repetição será retomada quando a ligação for restabelecida.",
-    "transferPartialHint": "Não foi possível transferir: {{paths}}",
-    "transferSuccess": "Transferência concluída",
-    "metricsHopSourceRead": "Origem → servidor: {{throughput}}",
-    "metricsHopDestSftpWrite": "Servidor → destino (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Servidor → destino (local): {{throughput}}"
-  },
-  "plugin": {
-    "name": "Gestor de Ficheiros"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/ro_RO.json b/plugins/file-manager/locales/translated/ro_RO.json
deleted file mode 100644
index e0612d6ef..000000000
--- a/plugins/file-manager/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Fișiere",
-    "sftp": "SFTP",
-    "openFileManager": "Deschideți Managerul de fișiere"
-  },
-  "permissions": {
-    "use": {
-      "title": "Folosește managerul de fișiere",
-      "description": "Răsfoiți, editați și transferați fișiere prin SFTP."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Activează Managerul de fișiere",
-        "description": "Răsfoiți și editați fișiere pe această gazdă prin SFTP."
-      },
-      "defaultPath": {
-        "label": "Calea implicită"
-      },
-      "scpLegacy": {
-        "label": "Modul SCP Legacy"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Transferuri simultane de fișiere",
-        "description": "Câte fișiere încarcă sau descarcă simultan managerul local/la distanță. Reduceți această valoare dacă serverul dvs. limitează canalele SFTP."
-      },
-      "confirmBeforeTrash": {
-        "label": "Confirmați înainte de a muta fișierele în coșul de gunoi",
-        "description": "Întreabă înainte de a muta fișierele la distanță în coșul de gunoi. Ștergerea definitivă necesită în continuare confirmare."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Manager de fișiere"
-  },
-  "fileManager": {
-    "noHostSelected": "Nicio gazdă selectată",
-    "initializingEditor": "Se inițializează editorul...",
-    "file": "Fişier",
-    "folder": "Pliant",
-    "uploadFile": "Încărcați fișierul",
-    "downloadFile": "Descărcare",
-    "extractArchive": "Extrageți arhiva",
-    "extractingArchive": "Extragerea {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} extras cu succes",
-    "extractFailed": "Extragerea a eșuat",
-    "compressFile": "Comprimați fișierul",
-    "compressFiles": "Comprimați fișierele",
-    "compressFilesDesc": "Comprimați elementele {{count}} într-o arhivă",
-    "archiveName": "Numele arhivei",
-    "enterArchiveName": "Introduceți numele arhivei...",
-    "compressionFormat": "Format de compresie",
-    "selectedFiles": "Fișiere selectate",
-    "andMoreFiles": "și {{count}} mai multe...",
-    "compress": "Comprima",
-    "compressingFiles": "Comprimarea elementelor {{count}} în {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} creat cu succes",
-    "compressFailed": "Compresia a eșuat",
-    "edit": "Edita",
-    "preview": "Previzualizare",
-    "previous": "Anterior",
-    "next": "Următorul",
-    "pageXOfY": "Pagina {{current}} din {{total}}",
-    "zoomOut": "Micșorare",
-    "zoomIn": "Mărire",
-    "newFile": "Fișier nou",
-    "newFolder": "Dosar nou",
-    "rename": "Redenumire",
-    "uploading": "Se încarcă...",
-    "uploadingFile": "Se încarcă {{name}}...",
-    "uploadingChunk": "Se încarcă {{name}}: {{percent}}% (partea {{chunk}} din {{total}})",
-    "fileName": "Nume de fișier",
-    "folderName": "Nume folder",
-    "fileUploadedSuccessfully": "Fișierul „{{name}}” a fost încărcat cu succes",
-    "failedToUploadFile": "Nu s-a putut încărca fișierul",
-    "uploadingFolderFiles": "Se încarcă {{count}} fișier(e)...",
-    "uploadedFolderFiles": "Fișier(e) {{count}} încărcat(e) cu succes",
-    "uploadedFolderPartial": "Încărcarea fișierelor {{uploaded}} , {{failed}} a eșuat.",
-    "fileDownloadedSuccessfully": "Fișierul „{{name}}” a fost descărcat cu succes",
-    "failedToDownloadFile": "Nu s-a putut descărca fișierul",
-    "fileCreatedSuccessfully": "Fișierul „{{name}}” a fost creat cu succes",
-    "folderCreatedSuccessfully": "Dosarul „{{name}}” a fost creat cu succes",
-    "failedToCreateItem": "Nu s-a putut crea elementul",
-    "operationFailed": "Operația {{operation}} a eșuat pentru {{name}}: {{error}}",
-    "failedToResolveSymlink": "Nu s-a putut rezolva legătura simbolică",
-    "itemsDeletedSuccessfully": "{{count}} elemente șterse cu succes",
-    "failedToDeleteItems": "Nu s-au putut șterge elementele",
-    "sudoPasswordRequired": "Parolă de administrator necesară",
-    "enterSudoPassword": "Introduceți parola sudo pentru a continua această operațiune",
-    "sudoPassword": "Parolă Sudo",
-    "sudoOperationFailed": "Operațiunea Sudo a eșuat",
-    "sudoAuthFailed": "Autentificarea Sudo a eșuat",
-    "dragFilesToUpload": "Plasați fișierele aici pentru încărcare",
-    "dropToUploadHere": "Plasați aici pentru a încărca",
-    "dropToDownloadHere": "Plasați pentru descărcare aici",
-    "localFiles": "Local",
-    "showLocalFiles": "Afișați fișierele locale (vizualizare divizată)",
-    "hideLocalFiles": "Ascunde fișierele locale",
-    "localHome": "Dosar principal",
-    "localPathPlaceholder": "Calea folderului local",
-    "localShowHidden": "Afișează fișierele ascunse",
-    "localHideHidden": "Ascunde fișierele ascunse",
-    "localRevealInFileManager": "Afișează în managerul de fișiere al sistemului",
-    "localCannotOpenFolder": "Nu se poate deschide folderul",
-    "localItemCount": "{{count}} articole",
-    "localSelectedCount": "{{count}} selectat",
-    "back": "Spate",
-    "forward": "Redirecţiona",
-    "up": "Sus",
-    "kind": "Fel",
-    "localUploadingProgress": "Se încarcă {{current}} din {{total}}",
-    "localDownloadingProgress": "Se descarcă {{current}} din {{total}}",
-    "localTransferInFlight": "{{count}} deodată",
-    "localPreparingDownload": "Se pregătește descărcarea...",
-    "localTransferCancelled": "Transfer anulat",
-    "localNothingToTransfer": "Nimic de transferat",
-    "localUploadComplete": "Fișiere încărcate {{count}}",
-    "localUploadFailed": "Încărcarea a eșuat",
-    "localUploadPartial": "Încărcarea fișierelor {{done}} , {{failed}} a eșuat.",
-    "localDownloadComplete": "Fișiere descărcate {{count}}",
-    "localDownloadFailed": "Descărcarea a eșuat",
-    "localDownloadPartial": "Descărcarea fișierelor {{done}} , {{failed}} a eșuat.",
-    "localReplaceExistingPrompt": "{{count}} element(e) există deja în acest folder. Le înlocuiți?",
-    "localReplace": "Înlocui",
-    "localSkipExisting": "Sari peste",
-    "localSkippedExisting": "{{count}} element(e) existent(e) omis(e)",
-    "localUnsafeNamesSkipped": "{{count}} element(e) ale cărui nume nu pot fi utilizate pe acest computer au fost omise",
-    "localOpen": "Deschide",
-    "localOpenFolder": "Deschideți folderul",
-    "localUploadToRemote": "Încărcare pe server",
-    "localUploadToRemoteMany": "Încărcați {{count}} elemente pe server",
-    "localMoveToTrash": "Mută în coșul de gunoi",
-    "localMoveToTrashMany": "Mută articolele {{count}} în coșul de gunoi",
-    "localTrashConfirmSingle": "Mutați „{{name}}” în coșul de gunoi?",
-    "localTrashConfirmFolder": "Mutați folderul „{{name}}” și tot conținutul său în Coșul de gunoi?",
-    "localTrashConfirmMany": "Mutați {{count}} elemente în coșul de gunoi?",
-    "localTrashed": "{{count}} element(e) mutat(e) în coșul de gunoi",
-    "localTrashFailed": "Nu s-a putut muta în coșul de gunoi",
-    "localRenameFailed": "Redenumirea a eșuat",
-    "localCreateFailed": "Nu s-a putut crea elementul",
-    "goToParentFolder": "Accesați folderul părinte",
-    "resizeSidebar": "Trageți pentru a redimensiona bara laterală (faceți dublu clic pentru a reseta)",
-    "resizeLocalPane": "Trageți pentru a redimensiona panoul local (faceți dublu clic pentru a reseta)",
-    "columns": "Coloane",
-    "columnsHint": "Faceți clic dreapta pentru a alege coloane",
-    "emptyFolder": "Acest folder este gol",
-    "searchFiles": "Căutați fișiere...",
-    "upload": "Încărcare",
-    "selectHostToStart": "Selectați o gazdă pentru a începe gestionarea fișierelor",
-    "sshRequiredForFileManager": "Managerul de fișiere necesită SSH. Această gazdă nu are SSH activat.",
-    "failedToConnect": "Conectarea la SSH a eșuat",
-    "failedToLoadDirectory": "Directorul nu a putut fi încărcat",
-    "noSSHConnection": "Nu este disponibilă nicio conexiune SSH",
-    "copy": "Copie",
-    "cut": "Tăiați",
-    "paste": "Pastă",
-    "copyPath": "Copiere cale",
-    "copyPaths": "Copiați căile",
-    "delete": "Şterge",
-    "properties": "Proprietăți",
-    "refresh": "Reîmprospăta",
-    "downloadFiles": "Descărcați fișierele {{count}} în browser",
-    "copyFiles": "Copiază elementele {{count}}",
-    "cutFiles": "Decupează elementele {{count}}",
-    "deleteFiles": "Ștergeți elementele {{count}}",
-    "filesCopiedToClipboard": "{{count}} elemente copiate în clipboard",
-    "filesCutToClipboard": "{{count}} elemente tăiate în clipboard",
-    "pathCopiedToClipboard": "Calea a fost copiată în clipboard",
-    "pathsCopiedToClipboard": "Căile {{count}} au fost copiate în clipboard",
-    "failedToCopyPath": "Nu s-a putut copia calea în clipboard",
-    "copyFolderLink": "Copiați linkul în folder",
-    "copyCurrentFolderLink": "Copiați linkul în folderul curent",
-    "folderLinkCopied": "Legătura la dosar a fost copiată în clipboard",
-    "failedToCopyFolderLink": "Nu s-a putut copia linkul dosarului",
-    "movedItems": "Articole mutate {{count}}",
-    "failedToDeleteItem": "Nu s-a putut șterge elementul",
-    "itemRenamedSuccessfully": "{{type}} redenumit cu succes",
-    "failedToRenameItem": "Nu s-a putut redenumi elementul",
-    "download": "Descărcare",
-    "openExternalEditor": "Deschis la exterior",
-    "chooseExternalEditor": "Alegeți un editor extern",
-    "externalEditorSelected": "Editor extern selectat",
-    "externalEditorDesktopOnly": "Editorul extern este disponibil doar în aplicația pentru desktop",
-    "externalEditorOpened": "Deschis într-un editor extern. Salvarea acolo va încărca modificările înapoi pe server.",
-    "failedToOpenExternalEditor": "Nu s-a putut deschide editorul extern",
-    "failedToSelectExternalEditor": "Nu s-a putut selecta editorul extern",
-    "permissions": "Permisiuni",
-    "size": "Dimensiune",
-    "modified": "Modificat",
-    "path": "Cale",
-    "confirmDelete": "Sigur vrei să ștergi {{name}}?",
-    "permissionDenied": "Acces refuzat",
-    "serverError": "Eroare server",
-    "fileSavedSuccessfully": "Fișierul a fost salvat cu succes",
-    "failedToSaveFile": "Nu s-a putut salva fișierul",
-    "confirmDeleteSingleItem": "Sigur vrei să ștergi definitiv „{{name}}”?",
-    "confirmDeleteMultipleItems": "Sigur vrei să ștergi definitiv elementele {{count}}?",
-    "confirmDeleteMultipleItemsWithFolders": "Sigur vrei să ștergi definitiv elementele {{count}} ? Aceasta include folderele și conținutul acestora.",
-    "confirmDeleteFolder": "Sigur doriți să ștergeți definitiv folderul „{{name}}” și tot conținutul său?",
-    "permanentDeleteWarning": "Această acțiune nu poate fi anulată. Elementul (elementele) va fi (vor) șters(e) definitiv de pe server.",
-    "moveToTrashWarning": "Elementul (elementele) va (vor) fi mutat(e) în Coșul de gunoi Termix și va (pot) fi restaurat(e) înainte de expirarea perioadei de păstrare.",
-    "itemsMovedToTrash": "{{count}} element(e) mutat(e) în Coșul de gunoi",
-    "trash": "Gunoi",
-    "trashDescription": "Elementele șterse sunt păstrate timp de {{days}} zi(le) pe această gazdă.",
-    "trashLoadFailed": "Nu s-a putut încărca Coșul de gunoi",
-    "trashEmpty": "Coșul de gunoi este gol",
-    "trashRestore": "Restabili",
-    "trashRestored": "Restaurat {{name}}",
-    "trashRestoreFailed": "Elementul nu a putut fi restaurat. Calea originală ar putea exista deja.",
-    "trashDeletePermanently": "Ștergeți definitiv",
-    "trashDeleteConfirm": "Ștergeți definitiv {{name}}? Această acțiune nu poate fi anulată.",
-    "trashPermanentlyDeleted": "Șters definitiv {{name}}",
-    "trashDeleteFailed": "Nu s-a putut șterge definitiv elementul",
-    "trashEmptyAction": "Goliți coșul de gunoi",
-    "trashEmptyConfirm": "Ștergeți definitiv toate elementele din Coșul de gunoi? Această acțiune nu poate fi anulată.",
-    "trashEmptied": "Coș de gunoi golit",
-    "trashRetention": "Curățare automată după (zile)",
-    "trashRetentionSaved": "Reținerea coșului de gunoi actualizată",
-    "trashRetentionFailed": "Nu s-a putut actualiza opțiunea „Păstrarea în coș”",
-    "trashUnavailableConfirm": "Acest element nu poate fi mutat în Coșul de gunoi, de obicei pentru că se află pe un alt sistem de fișiere sau necesită permisiuni ridicate. Îl ștergeți definitiv în schimb?",
-    "recent": "Recent",
-    "pinned": "Fixat",
-    "folderShortcuts": "Comenzi rapide pentru foldere",
-    "failedToReconnectSSH": "Reconectarea sesiunii SSH a eșuat.",
-    "openTerminalHere": "Deschideți terminalul aici",
-    "run": "Aleargă",
-    "openTerminalInFolder": "Deschideți terminalul în acest folder",
-    "openTerminalInFileLocation": "Deschideți terminalul la locația fișierului",
-    "runningFile": "Alergare - {{file}}",
-    "onlyRunExecutableFiles": "Poate rula doar fișiere executabile",
-    "directories": "Directoare",
-    "removedFromRecentFiles": "„{{name}}” a fost eliminat din fișierele recente",
-    "removeFailed": "Eliminarea a eșuat",
-    "unpinnedSuccessfully": "„{{name}}” a fost anulată cu succes",
-    "unpinFailed": "Anularea fixării a eșuat",
-    "removedShortcut": "S-a eliminat comanda rapidă „{{name}}”",
-    "removeShortcutFailed": "Eliminarea comenzii rapide a eșuat.",
-    "clearedAllRecentFiles": "Am șters toate fișierele recente",
-    "clearFailed": "Ștergerea a eșuat",
-    "removeFromRecentFiles": "Eliminați din fișierele recente",
-    "clearAllRecentFiles": "Ștergeți toate fișierele recente",
-    "unpinFile": "Anulează fixarea fișierului",
-    "removeShortcut": "Eliminați comanda rapidă",
-    "pinFile": "Fișier fixat",
-    "addToShortcuts": "Adăugați la comenzi rapide",
-    "pasteFailed": "Lipirea a eșuat",
-    "noUndoableActions": "Nicio acțiune care nu poate fi anulată",
-    "undoCopySuccess": "Operațiune de copiere anulată: Fișierele copiate {{count}} au fost șterse",
-    "undoCopyFailedDelete": "Anulare eșuată: Nu s-au putut șterge fișierele copiate",
-    "undoCopyFailedNoInfo": "Anulare eșuată: Nu s-au găsit informațiile despre fișierul copiat",
-    "undoMoveSuccess": "Operațiune de mutare anulată: Fișierele {{count}} au fost mutate înapoi în locația originală.",
-    "undoMoveFailedMove": "Anulare eșuată: Nu s-au putut muta fișierele înapoi",
-    "undoMoveFailedNoInfo": "Anulare eșuată: Nu s-au găsit informații despre fișierul mutat",
-    "undoDeleteNotSupported": "Operațiunea de ștergere nu poate fi anulată: Fișierele au fost șterse definitiv de pe server.",
-    "undoTypeNotSupported": "Tip de operațiune de anulare neacceptat",
-    "undoOperationFailed": "Operațiunea de anulare a eșuat",
-    "unknownError": "Eroare necunoscută",
-    "confirm": "Confirma",
-    "find": "Găsi...",
-    "replace": "Înlocui",
-    "downloadInstead": "Descărcați în schimb",
-    "keyboardShortcuts": "Comenzi rapide de la tastatură",
-    "searchAndReplace": "Căutare și înlocuire",
-    "editing": "Editare",
-    "search": "Căutare",
-    "findNext": "Găsește următorul",
-    "findPrevious": "Găsește precedentul",
-    "save": "Salva",
-    "selectAll": "Selectați tot",
-    "undo": "Anula",
-    "redo": "Refaceți",
-    "moveLineUp": "Mută alinierea în sus",
-    "moveLineDown": "Mută linia în jos",
-    "toggleComment": "Comutare comentariu",
-    "autoComplete": "Completare automată",
-    "imageLoadError": "Nu s-a putut încărca imaginea",
-    "startTyping": "Începeți să tastați...",
-    "unknownSize": "Dimensiune necunoscută",
-    "fileIsEmpty": "Fișierul este gol",
-    "largeFileWarning": "Avertisment fișier mare",
-    "largeFileWarningDesc": "Acest fișier are dimensiunea {{size}} , ceea ce poate cauza probleme de performanță atunci când este deschis ca text.",
-    "fileNotFoundAndRemoved": "Fișierul „{{name}}” nu a fost găsit și a fost eliminat din fișierele recente/fixate.",
-    "failedToLoadFile": "Nu s-a putut încărca fișierul: {{error}}",
-    "serverErrorOccurred": "A apărut o eroare de server. Vă rugăm să încercați din nou mai târziu.",
-    "autoSaveFailed": "Salvarea automată a eșuat",
-    "fileAutoSaved": "Fișier salvat automat",
-    "moveFileFailed": "Nu s-a putut muta {{name}}",
-    "moveOperationFailed": "Operațiunea de mutare a eșuat",
-    "canOnlyCompareFiles": "Se pot compara doar două fișiere",
-    "comparingFiles": "Compararea fișierelor: {{file1}} și {{file2}}",
-    "dragFailed": "Operația de tragere a eșuat",
-    "filePinnedSuccessfully": "Fișierul „{{name}}” a fost fixat cu succes",
-    "pinFileFailed": "Fișierul nu a fost fixat",
-    "fileUnpinnedSuccessfully": "Fișierul „{{name}}” a fost anulat cu succes.",
-    "unpinFileFailed": "Nu s-a putut anula fixarea fișierului",
-    "shortcutAddedSuccessfully": "Comanda rapidă pentru folderul „{{name}}” a fost adăugată cu succes",
-    "addShortcutFailed": "Nu s-a putut adăuga comanda rapidă",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} articole au fost selectate cu succes",
-    "operationCompleted": "{{operation}} {{count}} articole",
-    "downloadFileSuccess": "Fișierul {{name}} a fost descărcat cu succes",
-    "downloadFileFailed": "Descărcarea a eșuat",
-    "downloadingFile": "Se descarcă {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Mută la {{name}}",
-    "diffCompareWith": "Comparație diferențială cu {{name}}",
-    "dragOutsideToDownload": "Trageți în afara ferestrei pentru a descărca (fișiere{{count}})",
-    "newFolderDefault": "Dosar nou",
-    "newFileDefault": "FișierNou.txt",
-    "successfullyMovedItems": "{{count}} articole au fost mutate cu succes în {{target}}",
-    "move": "Mişcare",
-    "searchInFile": "Căutare în fișier (Ctrl+F)",
-    "showKeyboardShortcuts": "Afișați comenzile rapide de la tastatură",
-    "decreaseFontSize": "Micșorează dimensiunea fontului",
-    "increaseFontSize": "Măriți dimensiunea fontului",
-    "startWritingMarkdown": "Începe să scrii conținutul pentru markdown...",
-    "loadingFileComparison": "Se încarcă comparația fișierelor...",
-    "reload": "Reîncărcare",
-    "compare": "Comparaţie",
-    "sideBySide": "Alăturat",
-    "inline": "În linie",
-    "fileComparison": "Comparație fișiere: {{file1}} vs {{file2}}",
-    "fileTooLarge": "Fișierul este prea mare (> 10 MB) și nu poate fi deschis ca text din motive de securitate.",
-    "sshConnectionFailed": "Conexiunea SSH a eșuat. Vă rugăm să verificați conexiunea la {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Nu s-a putut încărca fișierul: {{error}}",
-    "connecting": "Se conectează...",
-    "connectedSuccessfully": "Conectare reușită",
-    "totpVerificationFailed": "Verificarea TOTP a eșuat",
-    "browserSignInFailed": "Conectarea a eșuat. Vă rugăm să încercați din nou.",
-    "authenticationFailed": "Autentificarea a eșuat",
-    "incorrectPassphrase": "Parolă incorectă. Vă rugăm să încercați din nou.",
-    "verificationCodePrompt": "Cod de verificare:",
-    "changePermissions": "Modificați permisiunile",
-    "currentPermissions": "Permisiuni actuale",
-    "owner": "Proprietar",
-    "group": "Grup",
-    "others": "Alţii",
-    "read": "Citire",
-    "write": "Scrie",
-    "execute": "Executa",
-    "permissionsChangedSuccessfully": "Permisiunile au fost modificate cu succes",
-    "failedToChangePermissions": "Nu s-au putut modifica permisiunile",
-    "name": "Nume",
-    "sortByName": "Nume",
-    "sortByDate": "Data modificării",
-    "sortBySize": "Dimensiune",
-    "ascending": "Ascendent",
-    "descending": "Descendent",
-    "root": "Rădăcină",
-    "new": "Nou",
-    "sortBy": "Filtrează după",
-    "items": "Articole",
-    "selected": "Selectat",
-    "editor": "Editor",
-    "octal": "Octal",
-    "storage": "Depozitare",
-    "disk": "Disc",
-    "used": "Folosit",
-    "of": "de",
-    "toggleSidebar": "Comutare bară laterală",
-    "compactLayout": "Folosește un aspect compact",
-    "comfortableLayout": "Folosește un aspect confortabil",
-    "cannotLoadPdf": "Nu se poate încărca PDF-ul",
-    "pdfLoadError": "A apărut o eroare la încărcarea acestui fișier PDF.",
-    "loadingPdf": "Se încarcă vizualizatorul PDF...",
-    "loadingPage": "Se încarcă pagina...",
-    "cancel": "Anula",
-    "copiedItems_one": "Elementul {{count}} a fost copiat",
-    "copiedItems_other": "Articole {{count}} copiate",
-    "deleteCopiedFileFailed": "Nu s-a putut șterge copia lui {{name}}: {{error}}",
-    "dragMovedItems_one": "Elementul {{count}} a fost mutat la {{target}}",
-    "dragMovedItems_other": "Am mutat {{count}} elemente la {{target}}",
-    "moveBackFileFailed": "Nu s-a putut muta {{name}} înapoi: {{error}}",
-    "terminal": "Terminal: {{host}} ({{path}})",
-    "dragToDesktop": "Tragerea {{name}} pe desktop",
-    "dragFilesToDesktop": "Tragerea fișierelor {{count}} pe desktop",
-    "folderDragUnsupported": "Tragerea folderelor pe desktop nu este încă acceptată",
-    "saveToDesktopFailed": "Salvarea a eșuat: {{error}}",
-    "dragFailedDetail": "Tragerea a eșuat: {{error}}",
-    "videoUnsupported": "Browserul dvs. nu poate reda acest format video.",
-    "downloadToPlay": "Descarcă pentru a-l reda în altă parte",
-    "cannotPreviewType": "Nu se poate previzualiza acest tip de fișier",
-    "cannotPreviewTypeHint": "Acest tip de fișier nu are previzualizare. Descărcați-l pentru a-l deschide în altă aplicație.",
-    "loadingFile": "Se încarcă fișierul...",
-    "loadingImage": "Se încarcă imaginea...",
-    "loadingEditor": "Se încarcă editorul...",
-    "loadingPreview": "Se încarcă previzualizarea...",
-    "loadingAudio": "Se încarcă playerul audio...",
-    "emptyPreview": "Nimic de previzualizat încă...",
-    "revert": "Reveni",
-    "openAsText": "Deschide ca text",
-    "confirmOpenAsText": "Doriți să continuați să deschideți acest fișier ca text? Acest lucru ar putea încetini browserul."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "Transferă fișiere între două gazde SSH.",
-    "sourceServer": "Server sursă",
-    "destinationServer": "Server de destinație",
-    "selectHost": "Selectați gazda",
-    "noHostSelected": "Nicio gazdă selectată",
-    "move": "Mişcare",
-    "copy": "Copie",
-    "upload": "Încărcare",
-    "itemsSelected": "{{count}} element selectat",
-    "itemsSelected_other": "{{count}} elemente selectate",
-    "ready": "Gata",
-    "loadingHosts": "Se încarcă gazdele...",
-    "name": "Nume",
-    "modified": "Modificat",
-    "size": "Dimensiune",
-    "noFiles": "Niciun fișier",
-    "open": "Deschide",
-    "up": "Sus",
-    "refresh": "Reîmprospăta",
-    "copyToTarget": "Copiați în directorul țintă",
-    "rename": "Redenumire",
-    "delete": "Şterge",
-    "editPermissions": "Editați permisiunile",
-    "createNewFolder": "Creați un folder nou",
-    "deleteSelectedItems": "Ștergeți elementele selectate",
-    "deleteConfirm": "Ștergeți elementul selectat {{count}}?",
-    "deleteConfirm_other": "Ștergeți {{count}} elementele selectate?",
-    "cancel": "Anula",
-    "save": "Salva",
-    "folderCreated": "Dosar creat",
-    "itemRenamed": "Element redenumit",
-    "actionFailed": "Acțiunea a eșuat",
-    "itemsDeleted": "{{count}} element șters",
-    "itemsDeleted_other": "{{count}} elemente șterse",
-    "deleteFailed": "Ștergerea a eșuat",
-    "permissionsUpdated": "Permisiunile au fost actualizate",
-    "noRemoteSessionConnected": "Nicio sesiune la distanță conectată",
-    "failedToListFiles": "Nu s-au putut lista fișierele",
-    "failedToRefresh": "Nu s-a putut actualiza",
-    "destinationInsideSource": "Destinația nu poate fi în interiorul căii sursă selectate.",
-    "sameHostNoOp": "Sursa și destinația sunt în același folder."
-  },
-  "hosts": {
-    "fileManager": "Manager de fișiere",
-    "fileManagerUrlCopied": "Adresa URL a Managerului de fișiere a fost copiată",
-    "copyFileManagerUrlAction": "Copiați adresa URL a managerului de fișiere",
-    "docsLink": "Vizualizați documentele",
-    "hostNotFound": "Gazdă negăsită",
-    "loadingHost": "Se încarcă gazda..."
-  },
-  "onboarding": {
-    "feature_files": "Manager de fișiere",
-    "feature_files_desc": "Răsfoiți, încărcați, descărcați și editați fișiere prin SFTP fără a părăsi aplicația."
-  },
-  "terminal": {
-    "runTitle": "Rulează {{command}} - {{host}}",
-    "terminalTitle": "Terminal - {{host}}",
-    "terminalWithPath": "Terminal - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Răsfoiți folderele de destinație",
-    "browsePathError": "Nu s-a putut deschide această cale pe gazda destinație.",
-    "browsePathWillBeCreated": "Acest folder nu există încă. Va fi creat când va începe transferul.",
-    "cancel": "Anula",
-    "cleanupDestFiles": "Destinația de curățare",
-    "cleanupDestFilesError": "Curățarea a eșuat",
-    "cleanupDestFilesNothing": "Nimic de curățat la destinație",
-    "cleanupDestFilesPartial": "Unele fișiere parțiale nu au putut fi eliminate",
-    "cleanupDestFilesSuccess": "Fișiere parțiale eliminate din destinație",
-    "confirmCopy": "Copie",
-    "confirmMove": "Mişcare",
-    "copyFolderToHost": "Copiați folderul pe gazdă…",
-    "copyItemsToHost": "Copiați elementele {{count}} pe gazda…",
-    "copyToHost": "Copiați către gazdă…",
-    "destinationPath": "Calea de destinație",
-    "destMustBeDirectory": "Destinația trebuie să fie un director pentru transferurile cu mai multe elemente",
-    "goUp": "Mergi sus",
-    "hostAuthRequired": "Autentificare necesară. Deschideți mai întâi File Manager pe această gazdă.",
-    "hostConnecting": "Conectare…",
-    "hostConnectionFailed": "Conexiunea a eșuat",
-    "hostDisconnected": "Neconectat",
-    "hostReady": "Gata",
-    "itemsSummary": "{{count}} articole",
-    "jumpHostLimitation": "Ambele gazde trebuie să fie accesibile de pe serverul Termix. Rutarea directă de la gazdă la gazdă nu este acceptată.",
-    "methodAuto": "Auto",
-    "methodAutoHint": "Alege SFTP tar sau per fișier în funcție de numărul de fișiere, dimensiune și compresibilitate. Fișierele individuale utilizează întotdeauna SFTP în flux continuu.",
-    "methodItemSftp": "SFTP per fișier",
-    "methodItemSftpHint": "Transferă fiecare fișier individual prin SFTP. Funcționează pe toate gazdele, inclusiv Windows.",
-    "methodItemSftpLimitation": "Fiecare fișier folosește același flux SFTP ca o copie a unui singur fișier, una după alta. Progresul este combinat în toate fișierele, astfel încât bara se mișcă lent în timpul fișierelor mari.",
-    "methodLabel": "Metoda de transfer",
-    "methodPreviewError": "Nu s-a putut previzualiza metoda de transfer. Serverul va alege în continuare o metodă când porniți.",
-    "methodPreviewLoading": "Metoda de calcul a transferului…",
-    "methodPreviewScanSummary": "{{fileCount}} fișiere, {{totalSize}} în total (scanate pe gazda sursă).",
-    "methodPreviewWillUseItemSftp": "Se va utiliza: SFTP per fișier",
-    "methodPreviewWillUseTar": "Se va folosi: arhiva Tar",
-    "methodReason": {
-      "user_item_sftp": "Ai ales SFTP per fișier.",
-      "user_tar": "Ai ales arhiva tar.",
-      "tar_unavailable": "Tar nu este disponibil pe una sau ambele gazde, așa că se va utiliza în schimb SFTP per fișier.",
-      "windows_host": "Este implicată o gazdă Windows, deci nu se folosește tar.",
-      "auto_multi_large": "Automat: fișiere multiple, inclusiv un fișier mare ({{largestSize}}) cu date compresibile. Tar le grupează într-un singur transfer.",
-      "auto_single_large_in_archive": "Automat: un fișier mare ({{largestSize}}) în acest set, deci SFTP per fișier.",
-      "auto_many_incompressible": "Automat: date în mare parte incompresibile, deci SFTP per fișier.",
-      "auto_many_files": "Auto: multe fișiere ({{fileCount}}), tar reduce costul per fișier.",
-      "auto_default": "Automat: SFTP per fișier pentru acest set."
-    },
-    "methodTar": "Arhivă Tar",
-    "methodTarHint": "Comprimare la sursă, transfer o arhivă, extragere la destinație. Necesită tar pe ambele gazde Unix.",
-    "metricsCompress": "Comprimare pe sursă: {{duration}}",
-    "metricsExtract": "Extras la destinație: {{duration}}",
-    "metricsPrepare": "Pregătiți destinația: {{duration}}",
-    "metricsRouteBenchmark": "Sondă de rută: directă {{direct}}, releu {{relay}}",
-    "metricsSourceDelete": "Eliminare din sursă: {{duration}}",
-    "metricsTotal": "Total: {{duration}}",
-    "metricsTransfer": "De la un capăt la altul: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 verificat: {{duration}}",
-    "moveFolderToHost": "Mută folderul pe gazdă…",
-    "moveItemsToHost": "Mută elementele {{count}} către gazda…",
-    "moveToHost": "Mutare la gazdă…",
-    "noHostsConnected": "Nu sunt disponibile alte gazde de gestionare a fișierelor.",
-    "noHostsConnectedHint": "Adăugați o altă gazdă SSH cu File Manager activat în Host Manager.",
-    "parallelSegmentsHint": "Fișierele mari sunt împărțite în blocuri de 256 MB. Mai multe benzi utilizează conexiuni separate (cum ar fi pornirea mai multor transferuri) pentru un debit total mai mare.",
-    "parallelSegmentsLabel": "Benzi de transfer paralele",
-    "parallelSegmentsOption": "{{count}} benzi",
-    "progressBenchmarking": "Selectarea celei mai rapide rute de transfer…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Anula",
-    "progressCancelling": "Anulare…",
-    "progressCompressing": "Comprimare pe gazda sursă…",
-    "progressExtracting": "Extragerea la destinație…",
-    "progressItems": "{{current}} / {{total}} fișiere",
-    "progressReconnecting": "Reconectare…",
-    "progressStalled": "Blocat",
-    "progressTotalSpeed": "{{speed}} total ({{lanes}} benzi)",
-    "progressTransferring": "Transferul datelor…",
-    "progressTransferringItems": "Transferarea fișierelor ({{current}} din {{total}})…",
-    "progressVerifying": "Verificarea integrității fișierului…",
-    "recentDestinations": "Destinații recente",
-    "resumedHint": "Reconectare la un transfer activ început într-o altă fereastră.",
-    "retryTransfer": "Reîncercați",
-    "retryTransferError": "Reîncercare eșuată",
-    "selectDestinationHost": "Selectați gazda de destinație",
-    "transferCancelled": "Transfer anulat",
-    "transferCancelledCopyHint": "Fișiere parțiale pot rămâne în destinație.",
-    "transferCancelledMoveHint": "Fișiere parțiale pot rămâne în destinație. Fișierele sursă nu au fost eliminate.",
-    "transferError": "Transferul a eșuat",
-    "transferFailedRetryHint": "Date parțiale au fost păstrate la destinație. Reîncercarea va fi reluată după restabilirea conexiunii.",
-    "transferPartialHint": "Nu s-a putut transfera: {{paths}}",
-    "transferSuccess": "Transfer finalizat",
-    "metricsHopSourceRead": "Sursă → server: {{throughput}}",
-    "metricsHopDestSftpWrite": "Server → destinație (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Server → destinație (locală): {{throughput}}"
-  },
-  "plugin": {
-    "name": "Manager de fișiere"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/ru_RU.json b/plugins/file-manager/locales/translated/ru_RU.json
deleted file mode 100644
index 13a34b788..000000000
--- a/plugins/file-manager/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Файлы",
-    "sftp": "SFTP",
-    "openFileManager": "Открыть файловый менеджер"
-  },
-  "permissions": {
-    "use": {
-      "title": "Используйте файловый менеджер",
-      "description": "Просматривайте, редактируйте и передавайте файлы по протоколу SFTP."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Включить файловый менеджер",
-        "description": "Просматривайте и редактируйте файлы на этом хосте по протоколу SFTP."
-      },
-      "defaultPath": {
-        "label": "Путь по умолчанию"
-      },
-      "scpLegacy": {
-        "label": "Устаревший режим SCP"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Одновременная передача файлов",
-        "description": "Сколько файлов менеджер, работающий в режиме локального/удалённого доступа, может загружать или скачивать одновременно. Уменьшите это значение, если ваш сервер ограничивает количество SFTP-каналов."
-      },
-      "confirmBeforeTrash": {
-        "label": "Перед перемещением файлов в корзину подтвердите перемещение.",
-        "description": "Перед перемещением удалённых файлов в корзину запросите подтверждение. Для окончательного удаления всё равно потребуется подтверждение."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Файловый менеджер"
-  },
-  "fileManager": {
-    "noHostSelected": "Хост не выбран",
-    "initializingEditor": "Инициализация редактора...",
-    "file": "Файл",
-    "folder": "Папка",
-    "uploadFile": "Загрузить файл",
-    "downloadFile": "Скачать",
-    "extractArchive": "Извлечь архив",
-    "extractingArchive": "Распаковка {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} успешно распакован",
-    "extractFailed": "Ошибка распаковки",
-    "compressFile": "Сжать файл",
-    "compressFiles": "Сжать файлы",
-    "compressFilesDesc": "Сжать {{count}} элементов в архив",
-    "archiveName": "Имя архива",
-    "enterArchiveName": "Введите имя архива...",
-    "compressionFormat": "Формат сжатия",
-    "selectedFiles": "Выбранные файлы",
-    "andMoreFiles": "и ещё {{count}}...",
-    "compress": "Сжать",
-    "compressingFiles": "Сжатие {{count}} элементов в {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} успешно создан",
-    "compressFailed": "Ошибка сжатия",
-    "edit": "Редактировать",
-    "preview": "Предпросмотр",
-    "previous": "Назад",
-    "next": "Далее",
-    "pageXOfY": "Страница {{current}} из {{total}}",
-    "zoomOut": "Уменьшить",
-    "zoomIn": "Увеличить",
-    "newFile": "Новый файл",
-    "newFolder": "Новая папка",
-    "rename": "Переименовать",
-    "uploading": "Загрузка...",
-    "uploadingFile": "Загрузка {{name}}...",
-    "uploadingChunk": "Загрузка {{name}}: {{percent}}% (часть {{chunk}} из {{total}})",
-    "fileName": "Имя файла",
-    "folderName": "Имя папки",
-    "fileUploadedSuccessfully": "Файл «{{name}}» успешно загружен",
-    "failedToUploadFile": "Не удалось загрузить файл",
-    "uploadingFolderFiles": "Загрузка {{count}} файла(ов)...",
-    "uploadedFolderFiles": "Файл(ы) {{count}} успешно загружен(ы).",
-    "uploadedFolderPartial": "Загрузка {{uploaded}} файла(ов), {{failed}} не удалась.",
-    "fileDownloadedSuccessfully": "Файл «{{name}}» успешно скачан",
-    "failedToDownloadFile": "Не удалось скачать файл",
-    "fileCreatedSuccessfully": "Файл «{{name}}» успешно создан",
-    "folderCreatedSuccessfully": "Папка «{{name}}» успешно создана",
-    "failedToCreateItem": "Не удалось создать элемент",
-    "operationFailed": "Операция {{operation}} не удалась для {{name}}: {{error}}",
-    "failedToResolveSymlink": "Не удалось разрешить символическую ссылку",
-    "itemsDeletedSuccessfully": "{{count}} элементов успешно удалено",
-    "failedToDeleteItems": "Не удалось удалить элементы",
-    "sudoPasswordRequired": "Требуется пароль администратора",
-    "enterSudoPassword": "Введите пароль sudo для продолжения операции",
-    "sudoPassword": "Пароль sudo",
-    "sudoOperationFailed": "Операция sudo не удалась",
-    "sudoAuthFailed": "Аутентификация sudo не удалась",
-    "dragFilesToUpload": "Перетащите файлы сюда для загрузки",
-    "dropToUploadHere": "Перетащите файл для загрузки сюда.",
-    "dropToDownloadHere": "Скачать можно здесь (перетащите ссылку)",
-    "localFiles": "Локальная",
-    "showLocalFiles": "Отображение локальных файлов (в режиме разделенного экрана)",
-    "hideLocalFiles": "Скрыть локальные файлы",
-    "localHome": "Домашняя папка",
-    "localPathPlaceholder": "Путь к локальной папке",
-    "localShowHidden": "Показать скрытые файлы",
-    "localHideHidden": "Скрыть скрытые файлы",
-    "localRevealInFileManager": "Показать в системном файловом менеджере",
-    "localCannotOpenFolder": "Не удаётся открыть папку",
-    "localItemCount": "{{count}} элементов",
-    "localSelectedCount": "{{count}} выбрано",
-    "back": "Назад",
-    "forward": "Вперед",
-    "up": "Вверх",
-    "kind": "Добрый",
-    "localUploadingProgress": "Загрузка {{current}} из {{total}}",
-    "localDownloadingProgress": "Загрузка {{current}} из {{total}}",
-    "localTransferInFlight": "{{count}} сразу",
-    "localPreparingDownload": "Подготовка к загрузке...",
-    "localTransferCancelled": "Передача отменена",
-    "localNothingToTransfer": "Нет ничего для перевода",
-    "localUploadComplete": "Загружено {{count}} файлов",
-    "localUploadFailed": "Загрузка не удалась.",
-    "localUploadPartial": "Загрузка {{done}} файла(ов), {{failed}} не удалась.",
-    "localDownloadComplete": "Загружено {{count}} файлов",
-    "localDownloadFailed": "Не удалось загрузить",
-    "localDownloadPartial": "Загрузка {{done}} файла(ов), {{failed}} не удалась.",
-    "localReplaceExistingPrompt": "{{count}} Элемент(ы) уже существуют в этой папке. Заменить их?",
-    "localReplace": "Заменить",
-    "localSkipExisting": "Пропускать",
-    "localSkippedExisting": "Пропущено {{count}} существующих элементов",
-    "localUnsafeNamesSkipped": "Пропущено {{count}} элементов, названия которых нельзя использовать на этом компьютере",
-    "localOpen": "Открыть",
-    "localOpenFolder": "Открыть папку",
-    "localUploadToRemote": "Загрузка на сервер",
-    "localUploadToRemoteMany": "Загрузите {{count}} предметов на сервер",
-    "localMoveToTrash": "Переместить в мусорное ведро",
-    "localMoveToTrashMany": "Переместить {{count}} элементов в корзину",
-    "localTrashConfirmSingle": "Переместить \"{{name}}\" в корзину?",
-    "localTrashConfirmFolder": "Переместить папку \"{{name}}\" и всё её содержимое в корзину?",
-    "localTrashConfirmMany": "Переместить {{count}} элементов в корзину?",
-    "localTrashed": "Перемещено {{count}} предметов в корзину",
-    "localTrashFailed": "Не удалось переместить в мусорный бак.",
-    "localRenameFailed": "Переименование не удалось.",
-    "localCreateFailed": "Не удалось создать элемент.",
-    "goToParentFolder": "Перейдите в родительскую папку",
-    "resizeSidebar": "Перетащите ползунок, чтобы изменить размер боковой панели (двойной щелчок для сброса).",
-    "resizeLocalPane": "Перетащите курсор, чтобы изменить размер локальной панели (двойной щелчок для сброса).",
-    "columns": "Столбцы",
-    "columnsHint": "Щелкните правой кнопкой мыши, чтобы выбрать столбцы.",
-    "emptyFolder": "Эта папка пуста",
-    "searchFiles": "Поиск файлов...",
-    "upload": "Загрузить",
-    "selectHostToStart": "Выберите хост для начала управления файлами",
-    "sshRequiredForFileManager": "Файловому менеджеру требуется SSH. У этого хоста SSH не включен.",
-    "failedToConnect": "Не удалось подключиться к SSH",
-    "failedToLoadDirectory": "Не удалось загрузить каталог",
-    "noSSHConnection": "Нет доступного SSH-подключения",
-    "copy": "Копировать",
-    "cut": "Вырезать",
-    "paste": "Вставить",
-    "copyPath": "Копировать путь",
-    "copyPaths": "Копировать пути",
-    "delete": "Удалить",
-    "properties": "Свойства",
-    "refresh": "Обновить",
-    "downloadFiles": "Скачать {{count}} файлов в браузер",
-    "copyFiles": "Копировать {{count}} элементов",
-    "cutFiles": "Вырезать {{count}} элементов",
-    "deleteFiles": "Удалить {{count}} элементов",
-    "filesCopiedToClipboard": "{{count}} элементов скопировано в буфер обмена",
-    "filesCutToClipboard": "{{count}} элементов вырезано в буфер обмена",
-    "pathCopiedToClipboard": "Путь скопирован в буфер обмена",
-    "pathsCopiedToClipboard": "{{count}} путей скопировано в буфер обмена",
-    "failedToCopyPath": "Не удалось скопировать путь в буфер обмена",
-    "copyFolderLink": "Скопировать ссылку на папку",
-    "copyCurrentFolderLink": "Скопировать ссылку на текущую папку",
-    "folderLinkCopied": "Ссылка на папку скопирована в буфер обмена",
-    "failedToCopyFolderLink": "Не удалось скопировать ссылку на папку",
-    "movedItems": "Перемещено {{count}} элементов",
-    "failedToDeleteItem": "Не удалось удалить элемент",
-    "itemRenamedSuccessfully": "{{type}} успешно переименован(а)",
-    "failedToRenameItem": "Не удалось переименовать элемент",
-    "download": "Скачать",
-    "openExternalEditor": "Открыть во внешнем редакторе",
-    "chooseExternalEditor": "Выбрать внешний редактор",
-    "externalEditorSelected": "Внешний редактор выбран",
-    "externalEditorDesktopOnly": "Внешний редактор доступен только в настольном приложении",
-    "externalEditorOpened": "Открыт во внешнем редакторе. Сохранение в нём загрузит изменения обратно на сервер.",
-    "failedToOpenExternalEditor": "Не удалось открыть внешний редактор",
-    "failedToSelectExternalEditor": "Не удалось выбрать внешний редактор",
-    "permissions": "Права доступа",
-    "size": "Размер",
-    "modified": "Изменён",
-    "path": "Путь",
-    "confirmDelete": "Вы уверены, что хотите удалить {{name}}?",
-    "permissionDenied": "Доступ запрещён",
-    "serverError": "Ошибка сервера",
-    "fileSavedSuccessfully": "Файл успешно сохранён",
-    "failedToSaveFile": "Не удалось сохранить файл",
-    "confirmDeleteSingleItem": "Вы уверены, что хотите безвозвратно удалить \"{{name}}\"?",
-    "confirmDeleteMultipleItems": "Вы уверены, что хотите безвозвратно удалить {{count}} элементов?",
-    "confirmDeleteMultipleItemsWithFolders": "Вы уверены, что хотите безвозвратно удалить {{count}} элементов? Включая папки и их содержимое.",
-    "confirmDeleteFolder": "Вы уверены, что хотите безвозвратно удалить папку \"{{name}}\" и всё её содержимое?",
-    "permanentDeleteWarning": "Это действие необратимо. Элемент(ы) будут безвозвратно удалены с сервера.",
-    "moveToTrashWarning": "Предмет(ы) будут перемещены в корзину Termix и могут быть возвращены на место до истечения срока хранения.",
-    "itemsMovedToTrash": "{{count}} элемент(ы) перемещены в корзину",
-    "trash": "Мусор",
-    "trashDescription": "Удаленные элементы сохраняются на этом хосте в течение {{days}} дней.",
-    "trashLoadFailed": "Не удалось загрузить мусор.",
-    "trashEmpty": "Мусорное ведро пусто.",
-    "trashRestore": "Восстановить",
-    "trashRestored": "Восстановлено {{name}}",
-    "trashRestoreFailed": "Не удалось восстановить элемент. Возможно, исходный путь уже существует.",
-    "trashDeletePermanently": "Удалить навсегда",
-    "trashDeleteConfirm": "Удалить {{name}}навсегда? Это действие необратимо.",
-    "trashPermanentlyDeleted": "Удалено навсегда {{name}}",
-    "trashDeleteFailed": "Не удалось удалить элемент навсегда.",
-    "trashEmptyAction": "Опустошите мусорный бак",
-    "trashEmptyConfirm": "Удалить все элементы из корзины навсегда? Это действие необратимо.",
-    "trashEmptied": "Мусор вывезен",
-    "trashRetention": "Автоматическая очистка через (дней)",
-    "trashRetentionSaved": "Обновлена информация о хранении мусора.",
-    "trashRetentionFailed": "Не удалось обновить срок хранения корзины.",
-    "trashUnavailableConfirm": "Этот элемент нельзя переместить в корзину, как правило, потому что он находится в другой файловой системе или требует повышенных прав доступа. Может, лучше удалить его навсегда?",
-    "recent": "Недавние",
-    "pinned": "Закреплённые",
-    "folderShortcuts": "Ярлыки папок",
-    "failedToReconnectSSH": "Не удалось переподключить SSH-сессию",
-    "openTerminalHere": "Открыть терминал здесь",
-    "run": "Запустить",
-    "openTerminalInFolder": "Открыть терминал в этой папке",
-    "openTerminalInFileLocation": "Открыть терминал в расположении файла",
-    "runningFile": "Выполняется - {{file}}",
-    "onlyRunExecutableFiles": "Можно запускать только исполняемые файлы",
-    "directories": "Каталоги",
-    "removedFromRecentFiles": "Удалено \"{{name}}\" из недавних файлов",
-    "removeFailed": "Не удалось удалить",
-    "unpinnedSuccessfully": "Успешно откреплено \"{{name}}\"",
-    "unpinFailed": "Не удалось открепить",
-    "removedShortcut": "Ярлык \"{{name}}\" удалён",
-    "removeShortcutFailed": "Не удалось удалить ярлык",
-    "clearedAllRecentFiles": "Очищен список недавних файлов",
-    "clearFailed": "Очистка не удалась",
-    "removeFromRecentFiles": "Удалить из списка недавних файлов",
-    "clearAllRecentFiles": "Очистить список недавних файлов",
-    "unpinFile": "Открепить файл",
-    "removeShortcut": "Удалить ярлык",
-    "pinFile": "Закрепить файл",
-    "addToShortcuts": "Добавить в ярлыки",
-    "pasteFailed": "Вставка не удалась",
-    "noUndoableActions": "Нет действий для отмены",
-    "undoCopySuccess": "Отмена копирования: удалено {{count}} скопированных файлов",
-    "undoCopyFailedDelete": "Отмена не удалась: не удалось удалить скопированные файлы",
-    "undoCopyFailedNoInfo": "Отмена не удалась: не найдена информация о скопированных файлах",
-    "undoMoveSuccess": "Отмена перемещения: {{count}} файлов возвращено в исходное расположение",
-    "undoMoveFailedMove": "Отмена не удалась: не удалось вернуть файлы",
-    "undoMoveFailedNoInfo": "Отмена не удалась: не найдена информация о перемещённых файлах",
-    "undoDeleteNotSupported": "Операцию удаления нельзя отменить: файлы навсегда удалены с сервера",
-    "undoTypeNotSupported": "Неподдерживаемый тип операции отмены",
-    "undoOperationFailed": "Операция отмены не удалась",
-    "unknownError": "Неизвестная ошибка",
-    "confirm": "Подтвердить",
-    "find": "Поиск...",
-    "replace": "Заменить",
-    "downloadInstead": "Скачать вместо",
-    "keyboardShortcuts": "Горячие клавиши",
-    "searchAndReplace": "Поиск и замена",
-    "editing": "Редактирование",
-    "search": "Поиск",
-    "findNext": "Найти далее",
-    "findPrevious": "Найти предыдущий",
-    "save": "Сохранить",
-    "selectAll": "Выделить всё",
-    "undo": "Отменить",
-    "redo": "Повторить",
-    "moveLineUp": "Переместить строку вверх",
-    "moveLineDown": "Переместить строку вниз",
-    "toggleComment": "Переключить комментарий",
-    "autoComplete": "Автодополнение",
-    "imageLoadError": "Не удалось загрузить изображение",
-    "startTyping": "Начните вводить...",
-    "unknownSize": "Неизвестный размер",
-    "fileIsEmpty": "Файл пуст",
-    "largeFileWarning": "Предупреждение о большом файле",
-    "largeFileWarningDesc": "Размер этого файла {{size}}, что может вызвать проблемы с производительностью при открытии в текстовом виде.",
-    "fileNotFoundAndRemoved": "Файл \"{{name}}\" не найден и был удалён из недавних/закреплённых файлов",
-    "failedToLoadFile": "Не удалось загрузить файл: {{error}}",
-    "serverErrorOccurred": "Произошла ошибка сервера. Попробуйте позже.",
-    "autoSaveFailed": "Автосохранение не удалось",
-    "fileAutoSaved": "Файл автосохранён",
-    "moveFileFailed": "Не удалось переместить {{name}}",
-    "moveOperationFailed": "Операция перемещения не удалась",
-    "canOnlyCompareFiles": "Можно сравнивать только два файла",
-    "comparingFiles": "Сравнение файлов: {{file1}} и {{file2}}",
-    "dragFailed": "Операция перетаскивания не удалась",
-    "filePinnedSuccessfully": "Файл \"{{name}}\" успешно закреплён",
-    "pinFileFailed": "Не удалось закрепить файл",
-    "fileUnpinnedSuccessfully": "Файл \"{{name}}\" успешно откреплён",
-    "unpinFileFailed": "Не удалось открепить файл",
-    "shortcutAddedSuccessfully": "Ярлык папки \"{{name}}\" успешно добавлен",
-    "addShortcutFailed": "Не удалось добавить ярлык",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} элементов успешно",
-    "operationCompleted": "{{operation}} {{count}} элементов",
-    "downloadFileSuccess": "Файл {{name}} успешно загружен",
-    "downloadFileFailed": "Не удалось загрузить",
-    "downloadingFile": "Загрузка {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Переместить в {{name}}",
-    "diffCompareWith": "Сравнить с {{name}}",
-    "dragOutsideToDownload": "Перетащите за пределы окна для загрузки ({{count}} файлов)",
-    "newFolderDefault": "Новая папка",
-    "newFileDefault": "Новый файл.txt",
-    "successfullyMovedItems": "Успешно перемещено {{count}} элементов в {{target}}",
-    "move": "Переместить",
-    "searchInFile": "Поиск в файле (Ctrl+F)",
-    "showKeyboardShortcuts": "Показать сочетания клавиш",
-    "decreaseFontSize": "Уменьшить размер шрифта",
-    "increaseFontSize": "Увеличить размер шрифта",
-    "startWritingMarkdown": "Начните писать Markdown-контент...",
-    "loadingFileComparison": "Загрузка сравнения файлов...",
-    "reload": "Перезагрузить",
-    "compare": "Сравнить",
-    "sideBySide": "Бок о бок",
-    "inline": "Встроенный",
-    "fileComparison": "Сравнение файлов: {{file1}} и {{file2}}",
-    "fileTooLarge": "Файл слишком большой (> 10 МБ) и не может быть открыт как текстовый файл по соображениям безопасности.",
-    "sshConnectionFailed": "Ошибка SSH-подключения. Проверьте подключение к {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Не удалось загрузить файл: {{error}}",
-    "connecting": "Подключение...",
-    "connectedSuccessfully": "Подключено успешно",
-    "totpVerificationFailed": "Ошибка проверки TOTP",
-    "browserSignInFailed": "Вход в систему не удался. Пожалуйста, попробуйте еще раз.",
-    "authenticationFailed": "Ошибка аутентификации",
-    "incorrectPassphrase": "Неверная парольная фраза. Попробуйте еще раз.",
-    "verificationCodePrompt": "Код подтверждения:",
-    "changePermissions": "Изменить права доступа",
-    "currentPermissions": "Текущие права доступа",
-    "owner": "Владелец",
-    "group": "Группа",
-    "others": "Остальные",
-    "read": "Чтение",
-    "write": "Запись",
-    "execute": "Выполнение",
-    "permissionsChangedSuccessfully": "Права доступа успешно изменены",
-    "failedToChangePermissions": "Не удалось изменить права доступа",
-    "name": "Имя",
-    "sortByName": "По имени",
-    "sortByDate": "По дате изменения",
-    "sortBySize": "По размеру",
-    "ascending": "По возрастанию",
-    "descending": "По убыванию",
-    "root": "Корень",
-    "new": "Создать",
-    "sortBy": "Сортировка",
-    "items": "Элементов",
-    "selected": "Выбрано",
-    "editor": "Редактор",
-    "octal": "Восьмеричный",
-    "storage": "Хранилище",
-    "disk": "Диск",
-    "used": "Занято",
-    "of": "из",
-    "toggleSidebar": "Переключить боковую панель",
-    "compactLayout": "Используйте компактную компоновку.",
-    "comfortableLayout": "Используйте удобную планировку",
-    "cannotLoadPdf": "Не удаётся загрузить PDF",
-    "pdfLoadError": "Ошибка при загрузке этого PDF-файла.",
-    "loadingPdf": "Загрузка программы просмотра PDF-файлов...",
-    "loadingPage": "Загрузка страницы...",
-    "cancel": "Отмена",
-    "copiedItems_one": "Скопировано {{count}} элемент",
-    "copiedItems_other": "Скопировано {{count}} элементов",
-    "deleteCopiedFileFailed": "Не удалось удалить копию {{name}}: {{error}}",
-    "dragMovedItems_one": "Перемещен элемент {{count}} в {{target}}",
-    "dragMovedItems_other": "Перемещено {{count}} элементов в {{target}}",
-    "moveBackFileFailed": "Не удалось переместить {{name}} назад: {{error}}",
-    "terminal": "Терминал: {{host}} ({{path}})",
-    "dragToDesktop": "Перетаскивание {{name}} на рабочий стол",
-    "dragFilesToDesktop": "Перетаскивание {{count}} файлов на рабочий стол",
-    "folderDragUnsupported": "Перетаскивание папок на рабочий стол пока не поддерживается.",
-    "saveToDesktopFailed": "Сохранение не удалось: {{error}}",
-    "dragFailedDetail": "Перетаскивание не удалось: {{error}}",
-    "videoUnsupported": "Ваш браузер не может воспроизвести этот видеоформат.",
-    "downloadToPlay": "Скачайте, чтобы играть в другом месте.",
-    "cannotPreviewType": "Предварительный просмотр файла этого типа невозможен.",
-    "cannotPreviewTypeHint": "Для этого типа файла предварительный просмотр недоступен. Скачайте его, чтобы открыть в другом приложении.",
-    "loadingFile": "Загрузка файла...",
-    "loadingImage": "Загрузка изображения...",
-    "loadingEditor": "Загрузка редактора...",
-    "loadingPreview": "Загрузка предварительного просмотра...",
-    "loadingAudio": "Загрузка аудиоплеера...",
-    "emptyPreview": "Пока ничего для предварительного просмотра нет...",
-    "revert": "Возвращаться",
-    "openAsText": "Открыть как текст",
-    "confirmOpenAsText": "Вы хотите продолжить открывать этот файл как текстовый? Это может замедлить работу вашего браузера."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "Передача файлов между двумя SSH-хостами.",
-    "sourceServer": "Исходный сервер",
-    "destinationServer": "Сервер назначения",
-    "selectHost": "Выберите хост",
-    "noHostSelected": "Хост не выбран",
-    "move": "Переместить",
-    "copy": "Копировать",
-    "upload": "Загрузить",
-    "itemsSelected": "{{count}} выбранный элемент",
-    "itemsSelected_other": "{{count}} выбранные элементы",
-    "ready": "Готов",
-    "loadingHosts": "Загрузка хостов...",
-    "name": "Название",
-    "modified": "Изменён",
-    "size": "По размеру",
-    "noFiles": "Нет файлов",
-    "open": "Открыть",
-    "up": "Вверх",
-    "refresh": "Обновить",
-    "copyToTarget": "Скопировать в целевую директорию",
-    "rename": "Переименовать",
-    "delete": "Удалить",
-    "editPermissions": "Изменить права доступа",
-    "createNewFolder": "Создать новую папку",
-    "deleteSelectedItems": "Удалить выбранные элементы",
-    "deleteConfirm": "Удалить {{count}} выбранный элемент?",
-    "deleteConfirm_other": "Удалить {{count}} выбранные элементы?",
-    "cancel": "Отмена",
-    "save": "Сохранить",
-    "folderCreated": "Создана папка",
-    "itemRenamed": "Элемент переименован",
-    "actionFailed": "Действие не удалось",
-    "itemsDeleted": "{{count}} элемент удален",
-    "itemsDeleted_other": "{{count}} удаленные элементы",
-    "deleteFailed": "Удаление не удалось.",
-    "permissionsUpdated": "Права доступа обновлены.",
-    "noRemoteSessionConnected": "Удалённая сессия не подключена",
-    "failedToListFiles": "Не удалось отобразить список файлов.",
-    "failedToRefresh": "Не удалось обновить",
-    "destinationInsideSource": "Место назначения не может находиться внутри выбранного пути источника.",
-    "sameHostNoOp": "Исходная и целевая папки — одна и та же."
-  },
-  "hosts": {
-    "fileManager": "Файловый менеджер",
-    "fileManagerUrlCopied": "URL файлового менеджера скопирован",
-    "copyFileManagerUrlAction": "Копировать URL файлового менеджера",
-    "docsLink": "Документация",
-    "hostNotFound": "Хост не найден",
-    "loadingHost": "Загрузка хоста..."
-  },
-  "onboarding": {
-    "feature_files": "Файловый менеджер",
-    "feature_files_desc": "Просматривайте, загружайте, скачивайте и редактируйте файлы по протоколу SFTP, не выходя из приложения."
-  },
-  "terminal": {
-    "runTitle": "Выполнение {{command}} - {{host}}",
-    "terminalTitle": "Терминал - {{host}}",
-    "terminalWithPath": "Терминал - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Обзор папок назначения",
-    "browsePathError": "Не удалось открыть этот путь на целевом хосте.",
-    "browsePathWillBeCreated": "Эта папка ещё не существует. Она будет создана при запуске передачи.",
-    "cancel": "Отмена",
-    "cleanupDestFiles": "Очистить место назначения",
-    "cleanupDestFilesError": "Очистка не удалась",
-    "cleanupDestFilesNothing": "В месте назначения нечего очищать",
-    "cleanupDestFilesPartial": "Некоторые частично переданные файлы не удалось удалить",
-    "cleanupDestFilesSuccess": "Частично переданные файлы удалены из места назначения",
-    "confirmCopy": "Копировать",
-    "confirmMove": "Переместить",
-    "copyFolderToHost": "Копировать папку на хост…",
-    "copyItemsToHost": "Копировать {{count}} элементов на хост…",
-    "copyToHost": "Копировать на хост…",
-    "destinationPath": "Путь назначения",
-    "destMustBeDirectory": "Для передачи нескольких элементов путь назначения должен быть папкой",
-    "goUp": "Вверх",
-    "hostAuthRequired": "Требуется аутентификация. Сначала откройте файловый менеджер на этом хосте.",
-    "hostConnecting": "Подключение…",
-    "hostConnectionFailed": "Ошибка подключения",
-    "hostDisconnected": "Не подключен",
-    "hostReady": "Готов",
-    "itemsSummary": "{{count}} элементов",
-    "jumpHostLimitation": "Оба хоста должны быть доступны с сервера Termix. Прямая маршрутизация между хостами не поддерживается.",
-    "methodAuto": "Авто",
-    "methodAutoHint": "Выбирает tar или пофайловый SFTP в зависимости от количества файлов, размера и сжимаемости. Одиночные файлы всегда передаются потоковым SFTP.",
-    "methodItemSftp": "Пофайловый SFTP",
-    "methodItemSftpHint": "Передача каждого файла отдельно по SFTP. Работает на всех хостах, включая Windows.",
-    "methodItemSftpLimitation": "Каждый файл использует один и тот же поток SFTP, как при копировании одного файла, один за другим. Прогресс объединяется по всем файлам, поэтому индикатор движется медленно при больших файлах.",
-    "methodLabel": "Метод передачи",
-    "methodPreviewError": "Не удалось предварительно определить метод передачи. Сервер выберет метод при запуске.",
-    "methodPreviewLoading": "Расчёт метода передачи…",
-    "methodPreviewScanSummary": "{{fileCount}} файлов, {{totalSize}} всего (просканировано на исходном хосте).",
-    "methodPreviewWillUseItemSftp": "Будет использован: Пофайловый SFTP",
-    "methodPreviewWillUseTar": "Будет использован: Архив Tar",
-    "methodReason": {
-      "user_item_sftp": "Вы выбрали пофайловый SFTP.",
-      "user_tar": "Вы выбрали tar-архив.",
-      "tar_unavailable": "Tar недоступен на одном или обоих хостах, поэтому вместо него будет использоваться SFTP для каждого файла.",
-      "windows_host": "В процессе используется хост под управлением Windows, поэтому tar не применяется.",
-      "auto_multi_large": "Авто: несколько файлов, включая большой файл ({{largestSize}}) с данными, которые можно сжать. Tar объединяет их в одну передачу.",
-      "auto_single_large_in_archive": "Авто: один большой файл ({{largestSize}}) в этом наборе, поэтому SFTP для каждого файла отдельно.",
-      "auto_many_incompressible": "Авто: в основном несжимаемые данные, поэтому используется SFTP для каждого файла.",
-      "auto_many_files": "Авто: много файлов ({{fileCount}}), tar сокращает накладные расходы на каждый файл.",
-      "auto_default": "Авто: пофайловый SFTP для этого набора."
-    },
-    "methodTar": "Архив Tar",
-    "methodTarHint": "Сжатие на источнике, передача одного архива, распаковка на назначении. Требует tar на обоих Unix-хостах.",
-    "metricsCompress": "Сжатие на источнике: {{duration}}",
-    "metricsExtract": "Распаковка на назначении: {{duration}}",
-    "metricsPrepare": "Подготовка назначения: {{duration}}",
-    "metricsRouteBenchmark": "Маршрутизация: прямой {{direct}}, ретранслятор {{relay}}",
-    "metricsSourceDelete": "Удаление с источника: {{duration}}",
-    "metricsTotal": "Всего: {{duration}}",
-    "metricsTransfer": "Сквозной: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 проверен: {{duration}}",
-    "moveFolderToHost": "Переместить папку на хост…",
-    "moveItemsToHost": "Переместить {{count}} элементов на хост…",
-    "moveToHost": "Переместить на хост…",
-    "noHostsConnected": "Нет других доступных хостов с файловым менеджером.",
-    "noHostsConnectedHint": "Добавьте другой SSH-хост с включенным Файловым Менеджером в Менеджере Хостов.",
-    "parallelSegmentsHint": "Большие файлы разбиваются на фрагменты по 256 МБ. Несколько каналов используют отдельные соединения (как при запуске нескольких передач) для повышения общей пропускной способности.",
-    "parallelSegmentsLabel": "Параллельные каналы передачи",
-    "parallelSegmentsOption": "{{count}} каналов",
-    "progressBenchmarking": "Выбор самого быстрого маршрута пересадки…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Отмена",
-    "progressCancelling": "Отмена…",
-    "progressCompressing": "Сжатие на исходном хосте…",
-    "progressExtracting": "Распаковка на назначении…",
-    "progressItems": "{{current}} / {{total}} файлов",
-    "progressReconnecting": "Переподключение…",
-    "progressStalled": "Зависло",
-    "progressTotalSpeed": "{{speed}} всего ({{lanes}} каналов)",
-    "progressTransferring": "Передача данных…",
-    "progressTransferringItems": "Передача файлов ({{current}} из {{total}})…",
-    "progressVerifying": "Проверка целостности файла…",
-    "recentDestinations": "Недавние назначения",
-    "resumedHint": "Переподключено к активной передаче, запущенной в другом окне.",
-    "retryTransfer": "Повторить",
-    "retryTransferError": "Повтор не удался",
-    "selectDestinationHost": "Выберите целевой хост",
-    "transferCancelled": "Передача отменена",
-    "transferCancelledCopyHint": "Частично переданные файлы могут остаться в месте назначения.",
-    "transferCancelledMoveHint": "Частично переданные файлы могут остаться в месте назначения. Исходные файлы не были удалены.",
-    "transferError": "Ошибка передачи",
-    "transferFailedRetryHint": "Частичные данные сохранены в месте назначения. Повтор возобновится, когда соединение восстановится.",
-    "transferPartialHint": "Не удалось передать: {{paths}}",
-    "transferSuccess": "Передача завершена",
-    "metricsHopSourceRead": "Источник → сервер: {{throughput}}",
-    "metricsHopDestSftpWrite": "Сервер → назначение (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Сервер → назначение (локально): {{throughput}}"
-  },
-  "plugin": {
-    "name": "Файловый менеджер"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/sr_SP.json b/plugins/file-manager/locales/translated/sr_SP.json
deleted file mode 100644
index 5ddeca8f6..000000000
--- a/plugins/file-manager/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Датотеке",
-    "sftp": "СФТП",
-    "openFileManager": "Отвори менаџер датотека"
-  },
-  "permissions": {
-    "use": {
-      "title": "Користите менаџер датотека",
-      "description": "Прегледајте, уређујте и преносите датотеке преко SFTP-а."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Омогући менаџер датотека",
-        "description": "Прегледајте и уређујте датотеке на овом хосту преко SFTP-а."
-      },
-      "defaultPath": {
-        "label": "Подразумевана путања"
-      },
-      "scpLegacy": {
-        "label": "SCP Legacy Mode"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Истовремени пренос датотека",
-        "description": "Колико датотека локални/удаљени менаџер истовремено отпрема или преузима. Смањите ово ако ваш сервер ограничава SFTP канале."
-      },
-      "confirmBeforeTrash": {
-        "label": "Потврди пре премештања датотека у отпад",
-        "description": "Питај пре премештања удаљених датотека у смеће. Трајно брисање и даље захтева потврду."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Менаџер датотека"
-  },
-  "fileManager": {
-    "noHostSelected": "Није изабран домаћин",
-    "initializingEditor": "Иницијализација уређивача...",
-    "file": "Датотека",
-    "folder": "Фасцикла",
-    "uploadFile": "Отпреми датотеку",
-    "downloadFile": "Преузми",
-    "extractArchive": "Издвоји архиву",
-    "extractingArchive": "Издвајање {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} је успешно извучено",
-    "extractFailed": "Издвајање није успело",
-    "compressFile": "Компресуј датотеку",
-    "compressFiles": "Компресуј датотеке",
-    "compressFilesDesc": "Компресуј {{count}} ставки у архиву",
-    "archiveName": "Назив архиве",
-    "enterArchiveName": "Унесите име архиве...",
-    "compressionFormat": "Формат компресије",
-    "selectedFiles": "Изабране датотеке",
-    "andMoreFiles": "и још {{count}}...",
-    "compress": "Компресуј",
-    "compressingFiles": "Компресија {{count}} ставки у {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} је успешно креирано",
-    "compressFailed": "Компресија није успела",
-    "edit": "Измени",
-    "preview": "Преглед",
-    "previous": "Претходно",
-    "next": "Следеће",
-    "pageXOfY": "Страница {{current}} од {{total}}",
-    "zoomOut": "Умањи",
-    "zoomIn": "Увећај",
-    "newFile": "Нова датотека",
-    "newFolder": "Нова фасцикла",
-    "rename": "Преименуј",
-    "uploading": "Отпремање...",
-    "uploadingFile": "Отпремање {{name}}...",
-    "uploadingChunk": "Отпремање {{name}}: {{percent}}% (део {{chunk}} од {{total}})",
-    "fileName": "Име датотеке",
-    "folderName": "Назив фасцикле",
-    "fileUploadedSuccessfully": "Датотека „{{name}}“ је успешно отпремљена",
-    "failedToUploadFile": "Отпремање датотеке није успело",
-    "uploadingFolderFiles": "Отпремање {{count}} датотека...",
-    "uploadedFolderFiles": "Успешно отпремљено {{count}} датотека",
-    "uploadedFolderPartial": "Отпремљено {{uploaded}} датотека, {{failed}} није успело",
-    "fileDownloadedSuccessfully": "Датотека „{{name}}“ је успешно преузета",
-    "failedToDownloadFile": "Преузимање датотеке није успело",
-    "fileCreatedSuccessfully": "Датотека „{{name}}“ је успешно креирана",
-    "folderCreatedSuccessfully": "Фасцикла „{{name}}“ је успешно креирана",
-    "failedToCreateItem": "Није успело креирање ставке",
-    "operationFailed": "Операција {{operation}} није успела за {{name}}: {{error}}",
-    "failedToResolveSymlink": "Није успело решавање симболичке везе",
-    "itemsDeletedSuccessfully": "{{count}} ставке су успешно обрисане",
-    "failedToDeleteItems": "Брисање ставки није успело",
-    "sudoPasswordRequired": "Потребна је администраторска лозинка",
-    "enterSudoPassword": "Унесите лозинку за судо да бисте наставили ову операцију",
-    "sudoPassword": "Sudo лозинка",
-    "sudoOperationFailed": "Sudo операција није успела",
-    "sudoAuthFailed": "Судо аутентификација није успела",
-    "dragFilesToUpload": "Отпустите датотеке овде да бисте их отпремили",
-    "dropToUploadHere": "Отпустите да бисте отпремили овде",
-    "dropToDownloadHere": "Отпустите да бисте преузели овде",
-    "localFiles": "Локално",
-    "showLocalFiles": "Прикажи локалне датотеке (подељени приказ)",
-    "hideLocalFiles": "Сакриј локалне датотеке",
-    "localHome": "Почетна фасцикла",
-    "localPathPlaceholder": "Путања локалне фасцикле",
-    "localShowHidden": "Прикажи скривене датотеке",
-    "localHideHidden": "Сакриј скривене датотеке",
-    "localRevealInFileManager": "Откриј у системском менаџеру датотека",
-    "localCannotOpenFolder": "Не могу да отворим фасциклу",
-    "localItemCount": "{{count}} ставке",
-    "localSelectedCount": "{{count}} изабрано",
-    "back": "Назад",
-    "forward": "Напред",
-    "up": "Горе",
-    "kind": "Врста",
-    "localUploadingProgress": "Отпремање {{current}} од {{total}}",
-    "localDownloadingProgress": "Преузимање {{current}} од {{total}}",
-    "localTransferInFlight": "{{count}} одједном",
-    "localPreparingDownload": "Припрема преузимања...",
-    "localTransferCancelled": "Трансфер отказан",
-    "localNothingToTransfer": "Ништа за пренос",
-    "localUploadComplete": "Отпремљено {{count}} датотека",
-    "localUploadFailed": "Отпремање није успело",
-    "localUploadPartial": "Отпремљено {{done}} датотека, {{failed}} није успело",
-    "localDownloadComplete": "Преузето {{count}} датотека",
-    "localDownloadFailed": "Преузимање није успело",
-    "localDownloadPartial": "Преузимање {{done}} датотека, {{failed}} није успело",
-    "localReplaceExistingPrompt": "{{count}} став(е) већ постоје у овој фасцикли. Заменити их?",
-    "localReplace": "Замени",
-    "localSkipExisting": "Прескочи",
-    "localSkippedExisting": "Прескочено {{count}} постојећих ставки",
-    "localUnsafeNamesSkipped": "Прескочено је {{count}} ставки чија имена се не могу користити на овом рачунару",
-    "localOpen": "Отворено",
-    "localOpenFolder": "Отвори фасциклу",
-    "localUploadToRemote": "Отпреми на сервер",
-    "localUploadToRemoteMany": "Отпреми {{count}} ставки на сервер",
-    "localMoveToTrash": "Премести у отпад",
-    "localMoveToTrashMany": "Премести {{count}} ставки у Отпад",
-    "localTrashConfirmSingle": "Преместити „{{name}}“ у Отпад?",
-    "localTrashConfirmFolder": "Преместити фасциклу „{{name}}“ и сав њен садржај у корпу за отпад?",
-    "localTrashConfirmMany": "Преместити {{count}} ставки у Отпад?",
-    "localTrashed": "Премештено {{count}} ставки у Отпад",
-    "localTrashFailed": "Није могуће преместити у Отпад",
-    "localRenameFailed": "Преименовање није успело",
-    "localCreateFailed": "Није могуће креирати ставку",
-    "goToParentFolder": "Иди у надређени фолдер",
-    "resizeSidebar": "Превуците да бисте променили величину бочне траке (двапут кликните да бисте ресетовали)",
-    "resizeLocalPane": "Превуците да бисте променили величину локалног окна (двапут кликните да бисте ресетовали)",
-    "columns": "Колоне",
-    "columnsHint": "Кликните десним тастером миша да бисте изабрали колоне",
-    "emptyFolder": "Ова фасцикла је празна",
-    "searchFiles": "Претражи датотеке...",
-    "upload": "Отпреми",
-    "selectHostToStart": "Изаберите хост да бисте започели управљање датотекама",
-    "sshRequiredForFileManager": "Менаџер датотека захтева SSH. Овај хост нема омогућен SSH.",
-    "failedToConnect": "Повезивање са SSH-ом није успело",
-    "failedToLoadDirectory": "Учитавање директоријума није успело",
-    "noSSHConnection": "SSH веза није доступна",
-    "copy": "Копија",
-    "cut": "Исеци",
-    "paste": "Залепи",
-    "copyPath": "Копирај путању",
-    "copyPaths": "Копирај путање",
-    "delete": "Обриши",
-    "properties": "Некретнине",
-    "refresh": "Освежи",
-    "downloadFiles": "Преузмите {{count}} датотека у прегледач",
-    "copyFiles": "Копирај {{count}} ставке",
-    "cutFiles": "Исеци {{count}} ставки",
-    "deleteFiles": "Обриши {{count}} ставки",
-    "filesCopiedToClipboard": "{{count}} ставке копиране у међуспремник",
-    "filesCutToClipboard": "{{count}} ставке исечене у међуспремник",
-    "pathCopiedToClipboard": "Путања је копирана у међуспремник",
-    "pathsCopiedToClipboard": "{{count}} путање копиране у међуспремник",
-    "failedToCopyPath": "Копирање путање у међуспремник није успело",
-    "copyFolderLink": "Копирај везу у фасциклу",
-    "copyCurrentFolderLink": "Копирај везу у тренутну фасциклу",
-    "folderLinkCopied": "Линк фасцикле копиран у међуспремник",
-    "failedToCopyFolderLink": "Копирање линка фасцикле није успело",
-    "movedItems": "Премештено {{count}} ставки",
-    "failedToDeleteItem": "Брисање ставке није успело",
-    "itemRenamedSuccessfully": "{{type}} је успешно преименован",
-    "failedToRenameItem": "Преименовање ставке није успело",
-    "download": "Преузми",
-    "openExternalEditor": "Отвори споља",
-    "chooseExternalEditor": "Изаберите спољни уређивач",
-    "externalEditorSelected": "Изабран је спољни уредник",
-    "externalEditorDesktopOnly": "Спољни уређивач је доступан само у десктоп апликацији",
-    "externalEditorOpened": "Отворено у екстерном уређивачу. Чувањем тамо ће се измене отпремити назад на сервер.",
-    "failedToOpenExternalEditor": "Отварање екстерног уређивача није успело",
-    "failedToSelectExternalEditor": "Није успело бирање спољног уређивача",
-    "permissions": "Дозволе",
-    "size": "Величина",
-    "modified": "Измењено",
-    "path": "Путања",
-    "confirmDelete": "Да ли сте сигурни да желите да обришете {{name}}?",
-    "permissionDenied": "Дозвола одбијена",
-    "serverError": "Грешка сервера",
-    "fileSavedSuccessfully": "Датотека је успешно сачувана",
-    "failedToSaveFile": "Чување датотеке није успело",
-    "confirmDeleteSingleItem": "Да ли сте сигурни да желите трајно да избришете „{{name}}“?",
-    "confirmDeleteMultipleItems": "Да ли сте сигурни да желите трајно да избришете {{count}} ставке?",
-    "confirmDeleteMultipleItemsWithFolders": "Да ли сте сигурни да желите трајно да избришете {{count}} ставке? Ово укључује фасцикле и њихов садржај.",
-    "confirmDeleteFolder": "Да ли сте сигурни да желите трајно да избришете фасциклу „{{name}}“ и сав њен садржај?",
-    "permanentDeleteWarning": "Ова радња се не може поништити. Ставка(е) ће бити трајно избрисане са сервера.",
-    "moveToTrashWarning": "Ставка(е) ће бити премештена(е) у смеће Термикса и може(ју) се вратити пре истека периода чувања.",
-    "itemsMovedToTrash": "{{count}} ставке премештено у Отпад",
-    "trash": "Смеће",
-    "trashDescription": "Обрисане ставке се чувају {{days}} дана на овом хосту.",
-    "trashLoadFailed": "Учитавање Отпада није успело",
-    "trashEmpty": "Отпад је празан",
-    "trashRestore": "Врати",
-    "trashRestored": "Враћено {{name}}",
-    "trashRestoreFailed": "Враћање ставке није успело. Оригинална путања можда већ постоји.",
-    "trashDeletePermanently": "Трајно избриши",
-    "trashDeleteConfirm": "Трајно избрисати {{name}}? Ово се не може поништити.",
-    "trashPermanentlyDeleted": "Трајно обрисано {{name}}",
-    "trashDeleteFailed": "Трајно брисање ставке није успело",
-    "trashEmptyAction": "Испразни отпад",
-    "trashEmptyConfirm": "Трајно избрисати сваку ставку у Отпаду? Ово се не може поништити.",
-    "trashEmptied": "Отпад је испражњен",
-    "trashRetention": "Аутоматско чишћење после (дана)",
-    "trashRetentionSaved": "Задржавање отпада је ажурирано",
-    "trashRetentionFailed": "Ажурирање задржавања у отпаду није успело",
-    "trashUnavailableConfirm": "Ова ставка не може бити премештена у Отпад, обично зато што се налази на другом систему датотека или захтева повишена права. Желите ли да је трајно избришете?",
-    "recent": "Недавно",
-    "pinned": "Закачено",
-    "folderShortcuts": "Пречице за фасцикле",
-    "failedToReconnectSSH": "Поновно повезивање SSH сесије није успело",
-    "openTerminalHere": "Отвори терминал овде",
-    "run": "Трчи",
-    "openTerminalInFolder": "Отвори терминал у овој фасцикли",
-    "openTerminalInFileLocation": "Отвори терминал на локацији датотеке",
-    "runningFile": "Трчање - {{file}}",
-    "onlyRunExecutableFiles": "Може покренути само извршне датотеке",
-    "directories": "Директоријуми",
-    "removedFromRecentFiles": "Уклоњено је „{{name}}“ из недавних датотека",
-    "removeFailed": "Уклањање није успело",
-    "unpinnedSuccessfully": "Откачено „{{name}}“ успешно",
-    "unpinFailed": "Откачивање није успело",
-    "removedShortcut": "Уклоњена пречица „{{name}}“",
-    "removeShortcutFailed": "Уклањање пречице није успело",
-    "clearedAllRecentFiles": "Обрисани су сви недавно објављени фајлови",
-    "clearFailed": "Брисање није успело",
-    "removeFromRecentFiles": "Уклони из недавних датотека",
-    "clearAllRecentFiles": "Обриши све недавно објављене датотеке",
-    "unpinFile": "Откачи датотеку",
-    "removeShortcut": "Уклони пречицу",
-    "pinFile": "Закачи датотеку",
-    "addToShortcuts": "Додај у пречице",
-    "pasteFailed": "Лепљење није успело",
-    "noUndoableActions": "Нема радњи које се могу поништити",
-    "undoCopySuccess": "Поништена операција копирања: Обрисано {{count}} копираних датотека",
-    "undoCopyFailedDelete": "Поништавање није успело: Није могуће обрисати ниједну копирану датотеку",
-    "undoCopyFailedNoInfo": "Поништавање није успело: Нису пронађене информације о копираној датотеци",
-    "undoMoveSuccess": "Поништена операција премештања: Премештено {{count}} датотека назад на оригиналну локацију",
-    "undoMoveFailedMove": "Поништавање није успело: Није могуће вратити датотеке",
-    "undoMoveFailedNoInfo": "Поништавање није успело: Нису пронађене информације о премештеној датотеци",
-    "undoDeleteNotSupported": "Брисање се не може поништити: Датотеке су трајно обрисане са сервера",
-    "undoTypeNotSupported": "Неподржани тип операције поништавања",
-    "undoOperationFailed": "Поништавање није успело",
-    "unknownError": "Непозната грешка",
-    "confirm": "Потврди",
-    "find": "Пронађи...",
-    "replace": "Замени",
-    "downloadInstead": "Преузми уместо тога",
-    "keyboardShortcuts": "Пречице на тастатури",
-    "searchAndReplace": "Претражи и замени",
-    "editing": "Уређивање",
-    "search": "Претрага",
-    "findNext": "Пронађи следеће",
-    "findPrevious": "Пронађи претходно",
-    "save": "Сачувај",
-    "selectAll": "Изабери све",
-    "undo": "Поништи",
-    "redo": "Понови",
-    "moveLineUp": "Помери ред нагоре",
-    "moveLineDown": "Помери ред надоле",
-    "toggleComment": "Укључи/искључи коментар",
-    "autoComplete": "Аутоматско довршавање",
-    "imageLoadError": "Учитавање слике није успело",
-    "startTyping": "Почни да куцаш...",
-    "unknownSize": "Непозната величина",
-    "fileIsEmpty": "Датотека је празна",
-    "largeFileWarning": "Упозорење о великој датотеци",
-    "largeFileWarningDesc": "Величина ове датотеке је {{size}} , што може изазвати проблеме са перформансама када се отвори као текст.",
-    "fileNotFoundAndRemoved": "Датотека „{{name}}“ није пронађена и уклоњена је из недавно коришћених/закачених датотека",
-    "failedToLoadFile": "Није успело учитавање датотеке: {{error}}",
-    "serverErrorOccurred": "Дошло је до грешке сервера. Молимо покушајте поново касније.",
-    "autoSaveFailed": "Аутоматско чување није успело",
-    "fileAutoSaved": "Датотека је аутоматски сачувана",
-    "moveFileFailed": "Премештање није успело {{name}}",
-    "moveOperationFailed": "Операција премештања није успела",
-    "canOnlyCompareFiles": "Могуће је упоредити само две датотеке",
-    "comparingFiles": "Поређење датотека: {{file1}} и {{file2}}",
-    "dragFailed": "Превлачење није успело",
-    "filePinnedSuccessfully": "Датотека „{{name}}“ је успешно закачена",
-    "pinFileFailed": "Качење датотеке није успело",
-    "fileUnpinnedSuccessfully": "Датотека „{{name}}“ је успешно откачена",
-    "unpinFileFailed": "Откачивање датотеке није успело",
-    "shortcutAddedSuccessfully": "Пречица за фасциклу „{{name}}“ је успешно додата",
-    "addShortcutFailed": "Додавање пречице није успело",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} ставке успешно",
-    "operationCompleted": "{{operation}} {{count}} ставке",
-    "downloadFileSuccess": "Датотека {{name}} је успешно преузета",
-    "downloadFileFailed": "Преузимање није успело",
-    "downloadingFile": "Преузимање {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Премести на {{name}}",
-    "diffCompareWith": "Разлика у поређењу са {{name}}",
-    "dragOutsideToDownload": "Превуците спољашњост прозора да бисте преузели ({{count}} датотека)",
-    "newFolderDefault": "Нови фолдер",
-    "newFileDefault": "НоваДатотека.txt",
-    "successfullyMovedItems": "Успешно премештено {{count}} ставки у {{target}}",
-    "move": "Помери",
-    "searchInFile": "Претражи у датотеци (Ctrl+F)",
-    "showKeyboardShortcuts": "Прикажи пречице на тастатури",
-    "decreaseFontSize": "Смањи величину фонта",
-    "increaseFontSize": "Повећај величину фонта",
-    "startWritingMarkdown": "Почните да пишете свој садржај у markdown формату...",
-    "loadingFileComparison": "Учитавање поређења датотека...",
-    "reload": "Поново учитај",
-    "compare": "Упореди",
-    "sideBySide": "Један поред другог",
-    "inline": "Уграђено",
-    "fileComparison": "Поређење датотека: {{file1}} наспрам {{file2}}",
-    "fileTooLarge": "Датотека је превелика (> 10MB) и не може се отворити као текст из безбедносних разлога.",
-    "sshConnectionFailed": "SSH веза није успела. Молимо вас да проверите везу са {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Није успело учитавање датотеке: {{error}}",
-    "connecting": "Повезивање...",
-    "connectedSuccessfully": "Успешно повезано",
-    "totpVerificationFailed": "Верификација TOTP-а није успела",
-    "browserSignInFailed": "Пријављивање није успело. Молимо покушајте поново.",
-    "authenticationFailed": "Аутентификација није успела",
-    "incorrectPassphrase": "Нетачна лозинка. Молимо покушајте поново.",
-    "verificationCodePrompt": "Верификациони код:",
-    "changePermissions": "Промени дозволе",
-    "currentPermissions": "Тренутне дозволе",
-    "owner": "Власник",
-    "group": "Група",
-    "others": "Други",
-    "read": "Читај",
-    "write": "Пиши",
-    "execute": "Изврши",
-    "permissionsChangedSuccessfully": "Дозволе су успешно промењене",
-    "failedToChangePermissions": "Промена дозвола није успела",
-    "name": "Име",
-    "sortByName": "Име",
-    "sortByDate": "Датум измене",
-    "sortBySize": "Величина",
-    "ascending": "Растуће",
-    "descending": "Опадајући",
-    "root": "Корен",
-    "new": "Ново",
-    "sortBy": "Сортирај по",
-    "items": "Ставке",
-    "selected": "Изабрано",
-    "editor": "Уредник",
-    "octal": "Октално",
-    "storage": "Складиштење",
-    "disk": "Диск",
-    "used": "Коришћено",
-    "of": "од",
-    "toggleSidebar": "Укључи/искључи бочну траку",
-    "compactLayout": "Користите компактни распоред",
-    "comfortableLayout": "Користите удобан распоред",
-    "cannotLoadPdf": "Није могуће учитати PDF",
-    "pdfLoadError": "Дошло је до грешке при учитавању ове PDF датотеке.",
-    "loadingPdf": "Учитавање PDF прегледача...",
-    "loadingPage": "Учитавање странице...",
-    "cancel": "Откажи",
-    "copiedItems_one": "Копирана ставка {{count}}",
-    "copiedItems_other": "Копирано {{count}} ставки",
-    "deleteCopiedFileFailed": "Није могуће обрисати копију {{name}}: {{error}}",
-    "dragMovedItems_one": "Ставка {{count}} је премештена у {{target}}",
-    "dragMovedItems_other": "Премештено је {{count}} ставки у {{target}}",
-    "moveBackFileFailed": "Није могуће померити {{name}} назад: {{error}}",
-    "terminal": "Терминал: {{host}} ({{path}})",
-    "dragToDesktop": "Превлачење {{name}} на радну површину",
-    "dragFilesToDesktop": "Превлачење {{count}} датотека на радну површину",
-    "folderDragUnsupported": "Превлачење фасцикли на радну површину још увек није подржано",
-    "saveToDesktopFailed": "Чување није успело: {{error}}",
-    "dragFailedDetail": "Превлачење није успело: {{error}}",
-    "videoUnsupported": "Ваш прегледач не може да репродукује овај видео формат.",
-    "downloadToPlay": "Преузмите да бисте је репродуковали негде другде",
-    "cannotPreviewType": "Не могу да прегледам овај тип датотеке",
-    "cannotPreviewTypeHint": "Овај тип датотеке нема преглед. Преузмите је да бисте је отворили у другој апликацији.",
-    "loadingFile": "Учитавање датотеке...",
-    "loadingImage": "Учитавање слике...",
-    "loadingEditor": "Учитавање уређивача...",
-    "loadingPreview": "Учитавање прегледа...",
-    "loadingAudio": "Учитавање аудио плејера...",
-    "emptyPreview": "Још нема ништа за преглед...",
-    "revert": "Врати",
-    "openAsText": "Отвори као текст",
-    "confirmOpenAsText": "Да ли желите да наставите да отварате ову датотеку као текст? Ово може успорити ваш прегледач."
-  },
-  "sftpTransfer": {
-    "title": "СФТП",
-    "description": "Пренос датотека између два SSH хоста.",
-    "sourceServer": "Изворни сервер",
-    "destinationServer": "Одредишни сервер",
-    "selectHost": "Изаберите хоста",
-    "noHostSelected": "Није изабран домаћин",
-    "move": "Помери",
-    "copy": "Копија",
-    "upload": "Отпреми",
-    "itemsSelected": "{{count}} ставка је изабрана",
-    "itemsSelected_other": "Изабрано је {{count}} ставки",
-    "ready": "Спреман",
-    "loadingHosts": "Учитавање хостова...",
-    "name": "Име",
-    "modified": "Измењено",
-    "size": "Величина",
-    "noFiles": "Нема датотека",
-    "open": "Отворено",
-    "up": "Горе",
-    "refresh": "Освежи",
-    "copyToTarget": "Копирај у циљни директоријум",
-    "rename": "Преименуј",
-    "delete": "Обриши",
-    "editPermissions": "Измени дозволе",
-    "createNewFolder": "Направи нову фасциклу",
-    "deleteSelectedItems": "Обриши изабране ставке",
-    "deleteConfirm": "Обришите {{count}} изабрану ставку?",
-    "deleteConfirm_other": "Обришите {{count}} изабраних ставки?",
-    "cancel": "Откажи",
-    "save": "Сачувај",
-    "folderCreated": "Фасцикла је направљена",
-    "itemRenamed": "Ставка је преименована",
-    "actionFailed": "Акција није успела",
-    "itemsDeleted": "{{count}} ставка је обрисана",
-    "itemsDeleted_other": "{{count}} ставки су обрисане",
-    "deleteFailed": "Брисање није успело",
-    "permissionsUpdated": "Дозволе су ажуриране",
-    "noRemoteSessionConnected": "Није повезана удаљена сесија",
-    "failedToListFiles": "Навођење датотека није успело",
-    "failedToRefresh": "Освежавање није успело",
-    "destinationInsideSource": "Одредиште не може бити унутар изабране изворне путање.",
-    "sameHostNoOp": "Извор и одредиште су иста фасцикла."
-  },
-  "hosts": {
-    "fileManager": "Менаџер датотека",
-    "fileManagerUrlCopied": "URL менаџера датотека је копиран",
-    "copyFileManagerUrlAction": "Копирај УРЛ менаџера датотека",
-    "docsLink": "Прикажи документе",
-    "hostNotFound": "Хост није пронађен",
-    "loadingHost": "Учитавање хоста..."
-  },
-  "onboarding": {
-    "feature_files": "Менаџер датотека",
-    "feature_files_desc": "Прегледајте, отпремајте, преузимајте и уређујте датотеке преко SFTP-а без напуштања апликације."
-  },
-  "terminal": {
-    "runTitle": "Покреће се {{command}} - {{host}}",
-    "terminalTitle": "Терминал - {{host}}",
-    "terminalWithPath": "Терминал - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Прегледајте одредишне фасцикле",
-    "browsePathError": "Није могуће отворити ову путању на одредишном хосту.",
-    "browsePathWillBeCreated": "Ова фасцикла још увек не постоји. Биће креирана када пренос почне.",
-    "cancel": "Откажи",
-    "cleanupDestFiles": "Очистите одредиште",
-    "cleanupDestFilesError": "Чишћење није успело",
-    "cleanupDestFilesNothing": "Нема ништа за чишћење на одредишту",
-    "cleanupDestFilesPartial": "Неке делимичне датотеке нису могле бити уклоњене",
-    "cleanupDestFilesSuccess": "Уклоњене су делимичне датотеке са одредишта",
-    "confirmCopy": "Копија",
-    "confirmMove": "Помери",
-    "copyFolderToHost": "Копирај фасциклу на хост…",
-    "copyItemsToHost": "Копирај {{count}} ставке за хостовање…",
-    "copyToHost": "Копирај на хост…",
-    "destinationPath": "Путања одредишта",
-    "destMustBeDirectory": "Одредиште мора бити директоријум за преносе више ставки",
-    "goUp": "Иди горе",
-    "hostAuthRequired": "Потребна је аутентификација. Прво отворите Менаџер датотека на овом хосту.",
-    "hostConnecting": "Повезивање…",
-    "hostConnectionFailed": "Повезивање није успело",
-    "hostDisconnected": "Није повезано",
-    "hostReady": "Спреман",
-    "itemsSummary": "{{count}} ставке",
-    "jumpHostLimitation": "Оба хоста морају бити доступна са Termix сервера. Директно рутирање од хоста до хоста није подржано.",
-    "methodAuto": "Аутоматски",
-    "methodAutoHint": "Бира tar или SFTP за сваку датотеку на основу броја датотека, величине и компресибилности. Појединачне датотеке увек користе SFTP за стримовање.",
-    "methodItemSftp": "SFTP по датотеци",
-    "methodItemSftpHint": "Пренесите сваку датотеку појединачно преко SFTP-а. Ради на свим хостовима, укључујући Windows.",
-    "methodItemSftpLimitation": "Свака датотека користи исти SFTP ток као и копија појединачних датотека, једна за другом. Напредак се комбинује за све датотеке, тако да се трака помера споро током великих датотека.",
-    "methodLabel": "Метод преноса",
-    "methodPreviewError": "Није могуће прегледати метод преноса. Сервер ће ипак изабрати метод када покренете.",
-    "methodPreviewLoading": "Израчунавање методе преноса…",
-    "methodPreviewScanSummary": "{{fileCount}} датотека, {{totalSize}} укупно (скенирано на изворном хосту).",
-    "methodPreviewWillUseItemSftp": "Користиће се: SFTP за сваку датотеку",
-    "methodPreviewWillUseTar": "Користиће се: Тар архива",
-    "methodReason": {
-      "user_item_sftp": "Изабрали сте SFTP за сваку датотеку.",
-      "user_tar": "Изабрали сте tar архиву.",
-      "tar_unavailable": "Тар није доступан на једном или оба хоста, па ће се уместо тога користити SFTP протокол за сваку датотеку.",
-      "windows_host": "Укључен је Windows хост, тако да се tar не користи.",
-      "auto_multi_large": "Аутоматски: више датотека, укључујући велику датотеку ({{largestSize}}) са компресибилним подацима. Тар их обједињује у један пренос.",
-      "auto_single_large_in_archive": "Аутоматски: једна велика датотека ({{largestSize}}) у овом скупу, тако да се користи SFTP за сваку датотеку.",
-      "auto_many_incompressible": "Аутоматски: углавном некомпримљиви подаци, тако да се користи SFTP за сваку датотеку.",
-      "auto_many_files": "Аутоматски: више датотека ({{fileCount}}), tar смањује оптерећење по датотеци.",
-      "auto_default": "Аутоматски: SFTP за сваку датотеку за овај скуп."
-    },
-    "methodTar": "Тар архива",
-    "methodTarHint": "Компресуј на изворном коду, пренеси једну архиву, распакуј на одредишту. Потребан је tar на оба Unix хоста.",
-    "metricsCompress": "Компресуј на изворном коду: {{duration}}",
-    "metricsExtract": "Издвајање на одредишту: {{duration}}",
-    "metricsPrepare": "Припреми одредиште: {{duration}}",
-    "metricsRouteBenchmark": "Сонда руте: директна {{direct}}, релејна {{relay}}",
-    "metricsSourceDelete": "Уклони из извора: {{duration}}",
-    "metricsTotal": "Укупно: {{duration}}",
-    "metricsTransfer": "Од краја до краја: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 верификован: {{duration}}",
-    "moveFolderToHost": "Премести фасциклу на хост…",
-    "moveItemsToHost": "Премести {{count}} ставке на хост…",
-    "moveToHost": "Премести на хост…",
-    "noHostsConnected": "Нема других доступних хостова за управљање датотекама.",
-    "noHostsConnectedHint": "Додајте још један SSH хост са омогућеним File Manager-ом у Host Manager-у.",
-    "parallelSegmentsHint": "Велике датотеке су подељене на делове од 256 MB. Вишеструке траке користе одвојене везе (као што је покретање неколико преноса) за већи укупни проток.",
-    "parallelSegmentsLabel": "Паралелне траке за прелазак",
-    "parallelSegmentsOption": "{{count}} траке",
-    "progressBenchmarking": "Избор најбрже руте за трансфер…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Откажи",
-    "progressCancelling": "Отказивање…",
-    "progressCompressing": "Компресија на изворном хосту…",
-    "progressExtracting": "Распакује се на одредишту…",
-    "progressItems": "{{current}} / {{total}} датотеке",
-    "progressReconnecting": "Поновно повезивање…",
-    "progressStalled": "Заустављено",
-    "progressTotalSpeed": "{{speed}} укупно ({{lanes}} трака)",
-    "progressTransferring": "Пренос података…",
-    "progressTransferringItems": "Пренос датотека ({{current}} од {{total}})…",
-    "progressVerifying": "Провера интегритета датотеке…",
-    "recentDestinations": "Недавне дестинације",
-    "resumedHint": "Поново повезано са активним преносом започетим у другом прозору.",
-    "retryTransfer": "Покушај поново",
-    "retryTransferError": "Поновни покушај није успео",
-    "selectDestinationHost": "Изаберите одредишни хост",
-    "transferCancelled": "Трансфер отказан",
-    "transferCancelledCopyHint": "Делимични фајлови могу остати на одредишту.",
-    "transferCancelledMoveHint": "Делимични фајлови могу остати на одредишту. Изворни фајлови нису уклоњени.",
-    "transferError": "Пренос није успео",
-    "transferFailedRetryHint": "Делимични подаци су сачувани на одредишту. Покушај ће бити настављен када се веза поново успостави.",
-    "transferPartialHint": "Није могуће пренети: {{paths}}",
-    "transferSuccess": "Пренос завршен",
-    "metricsHopSourceRead": "Извор → сервер: {{throughput}}",
-    "metricsHopDestSftpWrite": "Сервер → одредиште (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Сервер → одредиште (локално): {{throughput}}"
-  },
-  "plugin": {
-    "name": "Менаџер датотека"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/sv_SE.json b/plugins/file-manager/locales/translated/sv_SE.json
deleted file mode 100644
index 49852359a..000000000
--- a/plugins/file-manager/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Filer",
-    "sftp": "SFTP",
-    "openFileManager": "Öppna filhanteraren"
-  },
-  "permissions": {
-    "use": {
-      "title": "Använd filhanteraren",
-      "description": "Bläddra, redigera och överför filer via SFTP."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Aktivera filhanteraren",
-        "description": "Bläddra och redigera filer på den här värden via SFTP."
-      },
-      "defaultPath": {
-        "label": "Standardsökväg"
-      },
-      "scpLegacy": {
-        "label": "SCP Legacy-läge"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Samtidiga filöverföringar",
-        "description": "Hur många filer den sida vid sida lokala/fjärrstyrda hanteraren laddar upp eller laddar ner samtidigt. Sänk detta om din server begränsar SFTP-kanaler."
-      },
-      "confirmBeforeTrash": {
-        "label": "Bekräfta innan du flyttar filer till papperskorgen",
-        "description": "Fråga innan du flyttar fjärrfiler till papperskorgen. Permanent borttagning kräver fortfarande bekräftelse."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Filhanteraren"
-  },
-  "fileManager": {
-    "noHostSelected": "Ingen värd vald",
-    "initializingEditor": "Initierar redigeraren...",
-    "file": "Fil",
-    "folder": "Mapp",
-    "uploadFile": "Ladda upp fil",
-    "downloadFile": "Ladda ner",
-    "extractArchive": "Utdragsarkiv",
-    "extractingArchive": "Extraherar {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} extraherades",
-    "extractFailed": "Extraheringen misslyckades",
-    "compressFile": "Komprimera fil",
-    "compressFiles": "Komprimera filer",
-    "compressFilesDesc": "Komprimera {{count}} objekt till ett arkiv",
-    "archiveName": "Arkivnamn",
-    "enterArchiveName": "Ange arkivnamn...",
-    "compressionFormat": "Komprimeringsformat",
-    "selectedFiles": "Valda filer",
-    "andMoreFiles": "och {{count}} mer...",
-    "compress": "Komprimera",
-    "compressingFiles": "Komprimerar {{count}} objekt till {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} skapades",
-    "compressFailed": "Komprimeringen misslyckades",
-    "edit": "Redigera",
-    "preview": "Förhandsvisning",
-    "previous": "Tidigare",
-    "next": "Nästa",
-    "pageXOfY": "Sida {{current}} av {{total}}",
-    "zoomOut": "Zooma ut",
-    "zoomIn": "Zooma in",
-    "newFile": "Ny fil",
-    "newFolder": "Ny mapp",
-    "rename": "Döpa om",
-    "uploading": "Laddar upp...",
-    "uploadingFile": "Laddar upp {{name}}...",
-    "uploadingChunk": "Laddar upp {{name}}: {{percent}}% (del {{chunk}} av {{total}})",
-    "fileName": "Filnamn",
-    "folderName": "Mappnamn",
-    "fileUploadedSuccessfully": "Filen \"{{name}}\" har laddats upp",
-    "failedToUploadFile": "Misslyckades med att ladda upp filen",
-    "uploadingFolderFiles": "Laddar upp {{count}} fil(er)...",
-    "uploadedFolderFiles": "Uppladdade {{count}} fil(er) framgångsrikt",
-    "uploadedFolderPartial": "Uppladdade {{uploaded}} fil(er), {{failed}} misslyckades",
-    "fileDownloadedSuccessfully": "Filen \"{{name}}\" har laddats ner",
-    "failedToDownloadFile": "Misslyckades med att ladda ner filen",
-    "fileCreatedSuccessfully": "Filen \"{{name}}\" skapades",
-    "folderCreatedSuccessfully": "Mappen \"{{name}}\" skapades",
-    "failedToCreateItem": "Misslyckades med att skapa objektet",
-    "operationFailed": "{{operation}} -åtgärden misslyckades för {{name}}: {{error}}",
-    "failedToResolveSymlink": "Misslyckades med att lösa symbolisk länk",
-    "itemsDeletedSuccessfully": "{{count}} objekt har raderats",
-    "failedToDeleteItems": "Misslyckades med att ta bort objekt",
-    "sudoPasswordRequired": "Administratörslösenord krävs",
-    "enterSudoPassword": "Ange sudo-lösenordet för att fortsätta den här operationen",
-    "sudoPassword": "Sudo-lösenord",
-    "sudoOperationFailed": "Sudo-operationen misslyckades",
-    "sudoAuthFailed": "Sudo-autentisering misslyckades",
-    "dragFilesToUpload": "Släpp filer här för att ladda upp",
-    "dropToUploadHere": "Släpp för att ladda upp här",
-    "dropToDownloadHere": "Släpp för att ladda ner här",
-    "localFiles": "Lokal",
-    "showLocalFiles": "Visa lokala filer (delad vy)",
-    "hideLocalFiles": "Dölj lokala filer",
-    "localHome": "Hemmappen",
-    "localPathPlaceholder": "Sökväg till lokal mapp",
-    "localShowHidden": "Visa dolda filer",
-    "localHideHidden": "Dölj dolda filer",
-    "localRevealInFileManager": "Visa i systemets filhanterare",
-    "localCannotOpenFolder": "Kan inte öppna mappen",
-    "localItemCount": "{{count}} objekt",
-    "localSelectedCount": "{{count}} vald",
-    "back": "Tillbaka",
-    "forward": "Fram",
-    "up": "Upp",
-    "kind": "Slag",
-    "localUploadingProgress": "Laddar upp {{current}} av {{total}}",
-    "localDownloadingProgress": "Laddar ner {{current}} av {{total}}",
-    "localTransferInFlight": "{{count}} på en gång",
-    "localPreparingDownload": "Förbereder nedladdning...",
-    "localTransferCancelled": "Överföringen avbruten",
-    "localNothingToTransfer": "Inget att överföra",
-    "localUploadComplete": "Uppladdade {{count}} fil(er)",
-    "localUploadFailed": "Uppladdningen misslyckades",
-    "localUploadPartial": "Uppladdade {{done}} fil(er), {{failed}} misslyckades",
-    "localDownloadComplete": "Nedladdade {{count}} fil(er)",
-    "localDownloadFailed": "Nedladdningen misslyckades",
-    "localDownloadPartial": "Nedladdning av {{done}} fil(er), {{failed}} misslyckades",
-    "localReplaceExistingPrompt": "{{count}} objekt finns redan i den här mappen. Vill du ersätta dem?",
-    "localReplace": "Ersätta",
-    "localSkipExisting": "Hoppa",
-    "localSkippedExisting": "Hoppade över {{count}} befintliga objekt",
-    "localUnsafeNamesSkipped": "Hoppade över {{count}} objekt vars namn inte kan användas på den här datorn",
-    "localOpen": "Öppna",
-    "localOpenFolder": "Öppna mappen",
-    "localUploadToRemote": "Ladda upp till servern",
-    "localUploadToRemoteMany": "Ladda upp {{count}} objekt till servern",
-    "localMoveToTrash": "Flytta till papperskorgen",
-    "localMoveToTrashMany": "Flytta {{count}} objekt till papperskorgen",
-    "localTrashConfirmSingle": "Flytta \"{{name}}\" till papperskorgen?",
-    "localTrashConfirmFolder": "Flytta mappen \"{{name}}\" och allt dess innehåll till papperskorgen?",
-    "localTrashConfirmMany": "Flytta {{count}} objekt till papperskorgen?",
-    "localTrashed": "Flyttade {{count}} objekt till papperskorgen",
-    "localTrashFailed": "Kunde inte flytta till papperskorgen",
-    "localRenameFailed": "Byte av namn misslyckades",
-    "localCreateFailed": "Kunde inte skapa objektet",
-    "goToParentFolder": "Gå till överordnad mapp",
-    "resizeSidebar": "Dra för att ändra storlek på sidofältet (dubbelklicka för att återställa)",
-    "resizeLocalPane": "Dra för att ändra storlek på den lokala rutan (dubbelklicka för att återställa)",
-    "columns": "Kolumner",
-    "columnsHint": "Högerklicka för att välja kolumner",
-    "emptyFolder": "Den här mappen är tom",
-    "searchFiles": "Sök filer...",
-    "upload": "Ladda upp",
-    "selectHostToStart": "Välj en värd för att starta filhanteringen",
-    "sshRequiredForFileManager": "Filhanteraren kräver SSH. Den här värden har inte SSH aktiverat.",
-    "failedToConnect": "Misslyckades med att ansluta till SSH",
-    "failedToLoadDirectory": "Misslyckades med att ladda katalogen",
-    "noSSHConnection": "Ingen SSH-anslutning tillgänglig",
-    "copy": "Kopiera",
-    "cut": "Skära",
-    "paste": "Klistra",
-    "copyPath": "Kopiera sökväg",
-    "copyPaths": "Kopiera sökvägar",
-    "delete": "Radera",
-    "properties": "Fastigheter",
-    "refresh": "Uppdatera",
-    "downloadFiles": "Ladda ner {{count}} filer till webbläsaren",
-    "copyFiles": "Kopiera {{count}} objekt",
-    "cutFiles": "Klipp ut {{count}} objekt",
-    "deleteFiles": "Ta bort {{count}} objekt",
-    "filesCopiedToClipboard": "{{count}} objekt kopierade till urklipp",
-    "filesCutToClipboard": "{{count}} objekt klippta till urklipp",
-    "pathCopiedToClipboard": "Sökväg kopierad till urklipp",
-    "pathsCopiedToClipboard": "{{count}} sökvägar kopierade till urklipp",
-    "failedToCopyPath": "Misslyckades med att kopiera sökvägen till urklipp",
-    "copyFolderLink": "Kopiera länk till mapp",
-    "copyCurrentFolderLink": "Kopiera länk till aktuell mapp",
-    "folderLinkCopied": "Mapplänk kopierad till urklipp",
-    "failedToCopyFolderLink": "Misslyckades med att kopiera mapplänken",
-    "movedItems": "Flyttade {{count}} objekt",
-    "failedToDeleteItem": "Misslyckades med att ta bort objektet",
-    "itemRenamedSuccessfully": "{{type}} har bytt namn",
-    "failedToRenameItem": "Misslyckades med att byta namn på objektet",
-    "download": "Ladda ner",
-    "openExternalEditor": "Öppna externt",
-    "chooseExternalEditor": "Välj extern redigerare",
-    "externalEditorSelected": "Extern redigerare vald",
-    "externalEditorDesktopOnly": "Extern redigerare är endast tillgänglig i skrivbordsappen",
-    "externalEditorOpened": "Öppnad i extern redigerare. Om du sparar där laddas ändringarna upp tillbaka till servern.",
-    "failedToOpenExternalEditor": "Misslyckades med att öppna den externa redigeraren",
-    "failedToSelectExternalEditor": "Misslyckades med att välja extern redigerare",
-    "permissions": "Behörigheter",
-    "size": "Storlek",
-    "modified": "Ändrad",
-    "path": "Väg",
-    "confirmDelete": "Är du säker på att du vill ta bort {{name}}?",
-    "permissionDenied": "Tillstånd nekad",
-    "serverError": "Serverfel",
-    "fileSavedSuccessfully": "Filen har sparats",
-    "failedToSaveFile": "Misslyckades med att spara filen",
-    "confirmDeleteSingleItem": "Är du säker på att du vill ta bort \"{{name}} \" permanent?",
-    "confirmDeleteMultipleItems": "Är du säker på att du vill ta bort {{count}} objekt permanent?",
-    "confirmDeleteMultipleItemsWithFolders": "Är du säker på att du vill ta bort {{count}} objekt permanent? Detta inkluderar mappar och deras innehåll.",
-    "confirmDeleteFolder": "Är du säker på att du vill permanent ta bort mappen \"{{name}}\" och allt dess innehåll?",
-    "permanentDeleteWarning": "Den här åtgärden kan inte ångras. Objektet/objekten kommer att raderas permanent från servern.",
-    "moveToTrashWarning": "Objektet/objekten kommer att flyttas till Termix-papperskorgen och kan återställas innan lagringsperioden löper ut.",
-    "itemsMovedToTrash": "{{count}} objekt flyttade till papperskorgen",
-    "trash": "Skräp",
-    "trashDescription": "Borttagna objekt sparas i {{days}} dag(ar) på den här värden.",
-    "trashLoadFailed": "Misslyckades med att ladda papperskorgen",
-    "trashEmpty": "Papperskorgen är tom",
-    "trashRestore": "Återställa",
-    "trashRestored": "Återställd {{name}}",
-    "trashRestoreFailed": "Det gick inte att återställa objektet. Den ursprungliga sökvägen kan redan finnas.",
-    "trashDeletePermanently": "Ta bort permanent",
-    "trashDeleteConfirm": "Vill du permanent radera {{name}}? Detta kan inte ångras.",
-    "trashPermanentlyDeleted": "Permanent borttagen {{name}}",
-    "trashDeleteFailed": "Misslyckades med att ta bort objektet permanent",
-    "trashEmptyAction": "Töm papperskorgen",
-    "trashEmptyConfirm": "Vill du permanent radera alla objekt i papperskorgen? Det här kan inte ångras.",
-    "trashEmptied": "Papperskorgen tömd",
-    "trashRetention": "Automatisk rensning efter (dagar)",
-    "trashRetentionSaved": "Papperskorgen har lagrats uppdaterad",
-    "trashRetentionFailed": "Misslyckades med att uppdatera papperskorgen",
-    "trashUnavailableConfirm": "Det här objektet kan inte flyttas till papperskorgen, vanligtvis för att det finns på ett annat filsystem eller kräver utökade behörigheter. Vill du ta bort det permanent istället?",
-    "recent": "Ny",
-    "pinned": "Fäst",
-    "folderShortcuts": "Mappgenvägar",
-    "failedToReconnectSSH": "Misslyckades med att återansluta SSH-sessionen",
-    "openTerminalHere": "Öppna terminalen här",
-    "run": "Sikt",
-    "openTerminalInFolder": "Öppna terminalen i den här mappen",
-    "openTerminalInFileLocation": "Öppna terminalen på filplatsen",
-    "runningFile": "Löpning - {{file}}",
-    "onlyRunExecutableFiles": "Kan bara köra körbara filer",
-    "directories": "Kataloger",
-    "removedFromRecentFiles": "Tog bort \"{{name}}\" från senaste filer",
-    "removeFailed": "Borttagning misslyckades",
-    "unpinnedSuccessfully": "\"{{name}}\" har lossats",
-    "unpinFailed": "Misslyckades med att lossa",
-    "removedShortcut": "Tog bort genvägen \"{{name}}\"",
-    "removeShortcutFailed": "Misslyckades med att ta bort genvägen",
-    "clearedAllRecentFiles": "Rensade alla senaste filer",
-    "clearFailed": "Rensa misslyckades",
-    "removeFromRecentFiles": "Ta bort från senaste filer",
-    "clearAllRecentFiles": "Rensa alla senaste filer",
-    "unpinFile": "Lossa filen",
-    "removeShortcut": "Ta bort genväg",
-    "pinFile": "Fäst fil",
-    "addToShortcuts": "Lägg till i genvägar",
-    "pasteFailed": "Klistra in misslyckades",
-    "noUndoableActions": "Inga ångerbara åtgärder",
-    "undoCopySuccess": "Ångrad kopiering: Raderade {{count}} kopierade filer",
-    "undoCopyFailedDelete": "Ångra misslyckades: Kunde inte ta bort några kopierade filer",
-    "undoCopyFailedNoInfo": "Ångra misslyckades: Kunde inte hitta kopierad filinformation",
-    "undoMoveSuccess": "Ångrade flyttåtgärd: Flyttade {{count}} filer tillbaka till ursprunglig plats",
-    "undoMoveFailedMove": "Ångra misslyckades: Kunde inte flytta tillbaka några filer",
-    "undoMoveFailedNoInfo": "Ångra misslyckades: Kunde inte hitta information om den flyttade filen",
-    "undoDeleteNotSupported": "Raderingen kan inte ångras: Filerna har raderats permanent från servern",
-    "undoTypeNotSupported": "Ångra-åtgärdstypen stöds inte",
-    "undoOperationFailed": "Ångraåtgärden misslyckades",
-    "unknownError": "Okänt fel",
-    "confirm": "Bekräfta",
-    "find": "Hitta...",
-    "replace": "Ersätta",
-    "downloadInstead": "Ladda ner istället",
-    "keyboardShortcuts": "Kortkommandon",
-    "searchAndReplace": "Sök och ersätt",
-    "editing": "Redigering",
-    "search": "Söka",
-    "findNext": "Hitta nästa",
-    "findPrevious": "Hitta föregående",
-    "save": "Spara",
-    "selectAll": "Markera alla",
-    "undo": "Ångra",
-    "redo": "Göra om",
-    "moveLineUp": "Flytta upp raden",
-    "moveLineDown": "Flytta raden nedåt",
-    "toggleComment": "Växla kommentar",
-    "autoComplete": "Autoslutför",
-    "imageLoadError": "Misslyckades med att ladda bilden",
-    "startTyping": "Börja skriva...",
-    "unknownSize": "Okänd storlek",
-    "fileIsEmpty": "Filen är tom",
-    "largeFileWarning": "Varning för stora filer",
-    "largeFileWarningDesc": "Den här filen är {{size}} stor, vilket kan orsaka prestandaproblem när den öppnas som text.",
-    "fileNotFoundAndRemoved": "Filen \"{{name}}\" hittades inte och har tagits bort från senaste/fästa filer",
-    "failedToLoadFile": "Misslyckades med att ladda filen: {{error}}",
-    "serverErrorOccurred": "Serverfel uppstod. Försök igen senare.",
-    "autoSaveFailed": "Automatisk sparning misslyckades",
-    "fileAutoSaved": "Filen sparades automatiskt",
-    "moveFileFailed": "Misslyckades med att flytta {{name}}",
-    "moveOperationFailed": "Flyttoperationen misslyckades",
-    "canOnlyCompareFiles": "Kan bara jämföra två filer",
-    "comparingFiles": "Jämför filer: {{file1}} och {{file2}}",
-    "dragFailed": "Dragningsåtgärden misslyckades",
-    "filePinnedSuccessfully": "Filen \"{{name}}\" har fästs",
-    "pinFileFailed": "Misslyckades med att fästa filen",
-    "fileUnpinnedSuccessfully": "Filen \"{{name}}\" har lossats",
-    "unpinFileFailed": "Misslyckades med att lossa filen",
-    "shortcutAddedSuccessfully": "Mappgenvägen \"{{name}}\" har lagts till",
-    "addShortcutFailed": "Misslyckades med att lägga till genväg",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} objekt lyckades",
-    "operationCompleted": "{{operation}} {{count}} objekt",
-    "downloadFileSuccess": "Filen {{name}} har laddats ner",
-    "downloadFileFailed": "Nedladdningen misslyckades",
-    "downloadingFile": "Laddar ner {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Flytta till {{name}}",
-    "diffCompareWith": "Differensjämförelse med {{name}}",
-    "dragOutsideToDownload": "Dra utanför fönstret för att ladda ner ({{count}} filer)",
-    "newFolderDefault": "Nymapp",
-    "newFileDefault": "Nyfil.txt",
-    "successfullyMovedItems": "Flyttade {{count}} objekt till {{target}}",
-    "move": "Flytta",
-    "searchInFile": "Sök i filen (Ctrl+F)",
-    "showKeyboardShortcuts": "Visa kortkommandon",
-    "decreaseFontSize": "Minska teckenstorleken",
-    "increaseFontSize": "Öka teckenstorleken",
-    "startWritingMarkdown": "Börja skriva ditt nedskrivningsinnehåll...",
-    "loadingFileComparison": "Laddar filjämförelse...",
-    "reload": "Ladda om",
-    "compare": "Jämföra",
-    "sideBySide": "Sida vid sida",
-    "inline": "Inline",
-    "fileComparison": "Filjämförelse: {{file1}} vs {{file2}}",
-    "fileTooLarge": "Filen är för stor (> 10 MB) och kan av säkerhetsskäl inte öppnas som text.",
-    "sshConnectionFailed": "SSH-anslutningen misslyckades. Kontrollera din anslutning till {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Misslyckades med att ladda filen: {{error}}",
-    "connecting": "Ansluter...",
-    "connectedSuccessfully": "Ansluten",
-    "totpVerificationFailed": "TOTP-verifiering misslyckades",
-    "browserSignInFailed": "Inloggningen misslyckades. Försök igen.",
-    "authenticationFailed": "Autentiseringen misslyckades",
-    "incorrectPassphrase": "Felaktigt lösenord. Försök igen.",
-    "verificationCodePrompt": "Verifieringskod:",
-    "changePermissions": "Ändra behörigheter",
-    "currentPermissions": "Nuvarande behörigheter",
-    "owner": "Ägare",
-    "group": "Grupp",
-    "others": "Andra",
-    "read": "Läsa",
-    "write": "Skriva",
-    "execute": "Utföra",
-    "permissionsChangedSuccessfully": "Behörigheter har ändrats",
-    "failedToChangePermissions": "Misslyckades med att ändra behörigheter",
-    "name": "Namn",
-    "sortByName": "Namn",
-    "sortByDate": "Datum ändrat",
-    "sortBySize": "Storlek",
-    "ascending": "Stigande",
-    "descending": "Fallande",
-    "root": "Rot",
-    "new": "Ny",
-    "sortBy": "Sortera efter",
-    "items": "Föremål",
-    "selected": "Vald",
-    "editor": "Redaktör",
-    "octal": "Oktal",
-    "storage": "Lagring",
-    "disk": "Disk",
-    "used": "Begagnad",
-    "of": "av",
-    "toggleSidebar": "Växla sidofält",
-    "compactLayout": "Använd kompakt layout",
-    "comfortableLayout": "Använd bekväm layout",
-    "cannotLoadPdf": "Kan inte ladda PDF-filen",
-    "pdfLoadError": "Det uppstod ett fel när PDF-filen laddades.",
-    "loadingPdf": "Laddar PDF-läsare...",
-    "loadingPage": "Laddar sida...",
-    "cancel": "Avboka",
-    "copiedItems_one": "Kopierade {{count}} objekt",
-    "copiedItems_other": "Kopierade {{count}} objekt",
-    "deleteCopiedFileFailed": "Kunde inte ta bort kopian av {{name}}: {{error}}",
-    "dragMovedItems_one": "Flyttade objektet {{count}} till {{target}}",
-    "dragMovedItems_other": "Flyttade {{count}} objekt till {{target}}",
-    "moveBackFileFailed": "Kunde inte flytta {{name}} tillbaka: {{error}}",
-    "terminal": "Terminal: {{host}} ({{path}})",
-    "dragToDesktop": "Dra {{name}} till skrivbordet",
-    "dragFilesToDesktop": "Dra {{count}} filer till skrivbordet",
-    "folderDragUnsupported": "Att dra mappar till skrivbordet stöds ännu inte",
-    "saveToDesktopFailed": "Spara misslyckades: {{error}}",
-    "dragFailedDetail": "Drag misslyckades: {{error}}",
-    "videoUnsupported": "Din webbläsare kan inte spela upp det här videoformatet.",
-    "downloadToPlay": "Ladda ner för att spela det någon annanstans",
-    "cannotPreviewType": "Det går inte att förhandsgranska den här filtypen",
-    "cannotPreviewTypeHint": "Den här filtypen har ingen förhandsgranskning. Ladda ner den för att öppna den i en annan app.",
-    "loadingFile": "Laddar fil...",
-    "loadingImage": "Laddar bild...",
-    "loadingEditor": "Laddar redigeraren...",
-    "loadingPreview": "Laddar förhandsgranskning...",
-    "loadingAudio": "Laddar ljudspelare...",
-    "emptyPreview": "Inget att förhandsgranska än...",
-    "revert": "Återgå",
-    "openAsText": "Öppna som text",
-    "confirmOpenAsText": "Vill du fortsätta öppna den här filen som text? Detta kan göra din webbläsare långsammare."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "Överför filer mellan två SSH-värdar.",
-    "sourceServer": "Källserver",
-    "destinationServer": "Destinationsserver",
-    "selectHost": "Välj värd",
-    "noHostSelected": "Ingen värd vald",
-    "move": "Flytta",
-    "copy": "Kopiera",
-    "upload": "Ladda upp",
-    "itemsSelected": "{{count}} objekt valt",
-    "itemsSelected_other": "{{count}} objekt valda",
-    "ready": "Redo",
-    "loadingHosts": "Laddar värdar...",
-    "name": "Namn",
-    "modified": "Ändrad",
-    "size": "Storlek",
-    "noFiles": "Inga filer",
-    "open": "Öppna",
-    "up": "Upp",
-    "refresh": "Uppdatera",
-    "copyToTarget": "Kopiera till målkatalog",
-    "rename": "Döpa om",
-    "delete": "Radera",
-    "editPermissions": "Redigera behörigheter",
-    "createNewFolder": "Skapa ny mapp",
-    "deleteSelectedItems": "Ta bort valda objekt",
-    "deleteConfirm": "Ta bort {{count}} markerat objekt?",
-    "deleteConfirm_other": "Ta bort {{count}} markerade objekt?",
-    "cancel": "Avboka",
-    "save": "Spara",
-    "folderCreated": "Mapp skapad",
-    "itemRenamed": "Artikeln har bytt namn",
-    "actionFailed": "Åtgärden misslyckades",
-    "itemsDeleted": "{{count}} objekt borttaget",
-    "itemsDeleted_other": "{{count}} objekt raderade",
-    "deleteFailed": "Raderingen misslyckades",
-    "permissionsUpdated": "Behörigheter uppdaterade",
-    "noRemoteSessionConnected": "Ingen fjärrsession ansluten",
-    "failedToListFiles": "Misslyckades med att lista filer",
-    "failedToRefresh": "Misslyckades med att uppdatera",
-    "destinationInsideSource": "Destinationen får inte vara inom den valda källsökvägen.",
-    "sameHostNoOp": "Källa och destination är samma mapp."
-  },
-  "hosts": {
-    "fileManager": "Filhanteraren",
-    "fileManagerUrlCopied": "Filhanterarens URL kopierad",
-    "copyFileManagerUrlAction": "Kopiera filhanterarens URL",
-    "docsLink": "Visa dokument",
-    "hostNotFound": "Värden hittades inte",
-    "loadingHost": "Laddar värd..."
-  },
-  "onboarding": {
-    "feature_files": "Filhanteraren",
-    "feature_files_desc": "Bläddra, ladda upp, ladda ner och redigera filer via SFTP utan att lämna appen."
-  },
-  "terminal": {
-    "runTitle": "Kör {{command}} - {{host}}",
-    "terminalTitle": "Terminal - {{host}}",
-    "terminalWithPath": "Terminal - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Bläddra bland målmappar",
-    "browsePathError": "Kunde inte öppna den här sökvägen på målvärden.",
-    "browsePathWillBeCreated": "Den här mappen finns inte ännu. Den kommer att skapas när överföringen startar.",
-    "cancel": "Avboka",
-    "cleanupDestFiles": "Städa upp destinationen",
-    "cleanupDestFilesError": "Rensningen misslyckades",
-    "cleanupDestFilesNothing": "Inget att städa upp på destinationen",
-    "cleanupDestFilesPartial": "Vissa delfiler kunde inte tas bort",
-    "cleanupDestFilesSuccess": "Tog bort delvisa filer från destinationen",
-    "confirmCopy": "Kopiera",
-    "confirmMove": "Flytta",
-    "copyFolderToHost": "Kopiera mapp till värden…",
-    "copyItemsToHost": "Kopiera {{count}} objekt till…",
-    "copyToHost": "Kopiera till värd…",
-    "destinationPath": "Destinationsväg",
-    "destMustBeDirectory": "Destinationen måste vara en katalog för överföringar av flera objekt",
-    "goUp": "Gå upp",
-    "hostAuthRequired": "Autentisering krävs. Öppna filhanteraren på den här värden först.",
-    "hostConnecting": "Ansluter…",
-    "hostConnectionFailed": "Anslutningen misslyckades",
-    "hostDisconnected": "Inte ansluten",
-    "hostReady": "Redo",
-    "itemsSummary": "{{count}} objekt",
-    "jumpHostLimitation": "Båda värdarna måste vara nåbara från Termix-servern. Direkt routing mellan värdar stöds inte.",
-    "methodAuto": "Bil",
-    "methodAutoHint": "Väljer tar eller SFTP per fil baserat på filantal, storlek och komprimerbarhet. Enstaka filer använder alltid strömmande SFTP.",
-    "methodItemSftp": "SFTP per fil",
-    "methodItemSftpHint": "Överför varje fil individuellt via SFTP. Fungerar på alla värdar inklusive Windows.",
-    "methodItemSftpLimitation": "Varje fil använder samma SFTP-ström som en kopia av en enda fil, en efter en. Förloppet kombineras över alla filer, så stapeln rör sig långsamt vid stora filer.",
-    "methodLabel": "Överföringsmetod",
-    "methodPreviewError": "Kunde inte förhandsgranska överföringsmetoden. Servern kommer fortfarande att välja en metod när du startar.",
-    "methodPreviewLoading": "Beräkning av överföringsmetod…",
-    "methodPreviewScanSummary": "{{fileCount}} filer, {{totalSize}} totalt (skannat på källvärd).",
-    "methodPreviewWillUseItemSftp": "Kommer att använda: SFTP per fil",
-    "methodPreviewWillUseTar": "Kommer att använda: Tar-arkiv",
-    "methodReason": {
-      "user_item_sftp": "Du valde SFTP per fil.",
-      "user_tar": "Du valde tar-arkivet.",
-      "tar_unavailable": "Tar är inte tillgängligt på en eller båda värdarna, så SFTP per fil kommer att användas istället.",
-      "windows_host": "En Windows-värd är inblandad, så tar används inte.",
-      "auto_multi_large": "Auto: flera filer inklusive en stor fil ({{largestSize}}) med komprimerbar data. Tar buntar dem i en överföring.",
-      "auto_single_large_in_archive": "Auto: en stor fil ({{largestSize}}) i den här uppsättningen, så SFTP per fil.",
-      "auto_many_incompressible": "Auto: mestadels inkomprimerbar data, så SFTP per fil.",
-      "auto_many_files": "Auto: många filer ({{fileCount}}), tar minskar overhead per fil.",
-      "auto_default": "Auto: SFTP per fil för den här uppsättningen."
-    },
-    "methodTar": "Tar-arkiv",
-    "methodTarHint": "Komprimera vid källan, överför ett arkiv, extrahera vid destinationen. Kräver tar på båda Unix-värdarna.",
-    "metricsCompress": "Komprimera på källan: {{duration}}",
-    "metricsExtract": "Extrahera på destination: {{duration}}",
-    "metricsPrepare": "Förbered destination: {{duration}}",
-    "metricsRouteBenchmark": "Ruttsond: direkt {{direct}}, relä {{relay}}",
-    "metricsSourceDelete": "Ta bort från källan: {{duration}}",
-    "metricsTotal": "Totalt: {{duration}}",
-    "metricsTransfer": "Från slut till slut: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 verifierad: {{duration}}",
-    "moveFolderToHost": "Flytta mappen till värden…",
-    "moveItemsToHost": "Flytta {{count}} objekt till…",
-    "moveToHost": "Flytta till värd…",
-    "noHostsConnected": "Inga andra filhanterarvärdar tillgängliga.",
-    "noHostsConnectedHint": "Lägg till en annan SSH-värd med filhanteraren aktiverad i värdhanteraren.",
-    "parallelSegmentsHint": "Stora filer delas upp i bitar på 256 MB. Flera filer använder separata anslutningar (som att starta flera överföringar) för högre total dataflöde.",
-    "parallelSegmentsLabel": "Parallella överföringsfält",
-    "parallelSegmentsOption": "{{count}} körfält",
-    "progressBenchmarking": "Välja den snabbaste transfervägen…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Avboka",
-    "progressCancelling": "Avbryter…",
-    "progressCompressing": "Komprimering på källvärd…",
-    "progressExtracting": "Extraherar på destination…",
-    "progressItems": "{{current}} / {{total}} filer",
-    "progressReconnecting": "Återansluter…",
-    "progressStalled": "Stannade",
-    "progressTotalSpeed": "{{speed}} totalt ({{lanes}} körfält)",
-    "progressTransferring": "Överför data…",
-    "progressTransferringItems": "Överföra filer ({{current}} av {{total}})…",
-    "progressVerifying": "Verifierar filintegritet…",
-    "recentDestinations": "Senaste destinationerna",
-    "resumedHint": "Återansluten till en aktiv överföring som startade i ett annat fönster.",
-    "retryTransfer": "Försöka igen",
-    "retryTransferError": "Återförsök misslyckades",
-    "selectDestinationHost": "Välj destinationsvärd",
-    "transferCancelled": "Överföringen avbruten",
-    "transferCancelledCopyHint": "Delvisa filer kan finnas kvar på destinationen.",
-    "transferCancelledMoveHint": "Delvisa filer kan finnas kvar på destinationen. Källfilerna togs inte bort.",
-    "transferError": "Överföringen misslyckades",
-    "transferFailedRetryHint": "Delvis data sparades på destinationen. Försöket återupptas när anslutningen är tillbaka.",
-    "transferPartialHint": "Kunde inte överföra: {{paths}}",
-    "transferSuccess": "Överföringen är klar",
-    "metricsHopSourceRead": "Källa → server: {{throughput}}",
-    "metricsHopDestSftpWrite": "Server → destination (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Server → destination (lokal): {{throughput}}"
-  },
-  "plugin": {
-    "name": "Filhanteraren"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/th_TH.json b/plugins/file-manager/locales/translated/th_TH.json
deleted file mode 100644
index ecad94f21..000000000
--- a/plugins/file-manager/locales/translated/th_TH.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "ไฟล์",
-    "sftp": "เอสเอฟทีพี",
-    "openFileManager": "เปิดตัวจัดการไฟล์"
-  },
-  "permissions": {
-    "use": {
-      "title": "ใช้โปรแกรมจัดการไฟล์",
-      "description": "เรียกดู แก้ไข และถ่ายโอนไฟล์ผ่าน SFTP"
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "เปิดใช้งานตัวจัดการไฟล์",
-        "description": "เรียกดูและแก้ไขไฟล์บนโฮสต์นี้ผ่านทาง SFTP"
-      },
-      "defaultPath": {
-        "label": "เส้นทางเริ่มต้น"
-      },
-      "scpLegacy": {
-        "label": "โหมด SCP ดั้งเดิม"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "การโอนไฟล์พร้อมกัน",
-        "description": "ตัวจัดการไฟล์แบบโลคอล/รีโมตที่ทำงานควบคู่กันไป สามารถอัปโหลดหรือดาวน์โหลดไฟล์ได้พร้อมกันกี่ไฟล์ ลดจำนวนไฟล์นี้ลงหากเซิร์ฟเวอร์ของคุณจำกัดจำนวนช่อง SFTP"
-      },
-      "confirmBeforeTrash": {
-        "label": "ตรวจสอบให้แน่ใจก่อนย้ายไฟล์ไปยังถังขยะ",
-        "description": "โปรดสอบถามก่อนย้ายไฟล์ระยะไกลไปยังถังขยะ การลบถาวรยังคงต้องได้รับการยืนยัน"
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "ตัวจัดการไฟล์"
-  },
-  "fileManager": {
-    "noHostSelected": "ไม่ได้เลือกโฮสต์",
-    "initializingEditor": "กำลังเริ่มต้นโปรแกรมแก้ไข...",
-    "file": "ไฟล์",
-    "folder": "โฟลเดอร์",
-    "uploadFile": "อัปโหลดไฟล์",
-    "downloadFile": "ดาวน์โหลด",
-    "extractArchive": "แตกไฟล์เก็บถาวร",
-    "extractingArchive": "กำลังดึงข้อมูล {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} ดึงข้อมูลสำเร็จแล้ว",
-    "extractFailed": "การดึงข้อมูลล้มเหลว",
-    "compressFile": "บีบอัดไฟล์",
-    "compressFiles": "บีบอัดไฟล์",
-    "compressFilesDesc": "บีบอัดรายการ {{count}} รายการลงในไฟล์เก็บถาวร",
-    "archiveName": "ชื่อไฟล์เก็บถาวร",
-    "enterArchiveName": "ป้อนชื่อไฟล์เก็บถาวร...",
-    "compressionFormat": "รูปแบบการบีบอัด",
-    "selectedFiles": "ไฟล์ที่เลือก",
-    "andMoreFiles": "และ {{count}} เพิ่มเติม...",
-    "compress": "บีบอัด",
-    "compressingFiles": "บีบอัดรายการ {{count}} รายการลงใน {{name}} รายการ ...",
-    "filesCompressedSuccessfully": "{{name}} สร้างสำเร็จแล้ว",
-    "compressFailed": "การบีบอัดล้มเหลว",
-    "edit": "แก้ไข",
-    "preview": "ตัวอย่าง",
-    "previous": "ก่อนหน้า",
-    "next": "ต่อไป",
-    "pageXOfY": "หน้า {{current}} จาก {{total}}",
-    "zoomOut": "ซูมออก",
-    "zoomIn": "ซูมเข้า",
-    "newFile": "ไฟล์ใหม่",
-    "newFolder": "โฟลเดอร์ใหม่",
-    "rename": "เปลี่ยนชื่อ",
-    "uploading": "กำลังอัปโหลด...",
-    "uploadingFile": "กำลังอัปโหลด {{name}}...",
-    "uploadingChunk": "กำลังอัปโหลด {{name}}: {{percent}}% (ส่วน {{chunk}} ของ {{total}})",
-    "fileName": "ชื่อไฟล์",
-    "folderName": "ชื่อโฟลเดอร์",
-    "fileUploadedSuccessfully": "ไฟล์ \"{{name}}\" อัปโหลดสำเร็จแล้ว",
-    "failedToUploadFile": "ไม่สามารถอัปโหลดไฟล์ได้",
-    "uploadingFolderFiles": "กำลังอัปโหลดไฟล์ {{count}} ไฟล์...",
-    "uploadedFolderFiles": "อัปโหลดไฟล์ {{count}} ไฟล์สำเร็จแล้ว",
-    "uploadedFolderPartial": "อัปโหลดไฟล์ {{uploaded}} ไฟล์, {{failed}} ล้มเหลว",
-    "fileDownloadedSuccessfully": "ดาวน์โหลดไฟล์ \"{{name}}\" สำเร็จแล้ว",
-    "failedToDownloadFile": "ไม่สามารถดาวน์โหลดไฟล์ได้",
-    "fileCreatedSuccessfully": "สร้างไฟล์ \"{{name}}\" สำเร็จแล้ว",
-    "folderCreatedSuccessfully": "สร้างโฟลเดอร์ \"{{name}}\" สำเร็จแล้ว",
-    "failedToCreateItem": "ไม่สามารถสร้างรายการได้",
-    "operationFailed": "การดำเนินการ {{operation}} ล้มเหลวสำหรับ {{name}}: {{error}}",
-    "failedToResolveSymlink": "ไม่สามารถแก้ไขลิงก์สัญลักษณ์ได้",
-    "itemsDeletedSuccessfully": "รายการ {{count}} ถูกลบสำเร็จแล้ว",
-    "failedToDeleteItems": "ไม่สามารถลบรายการได้",
-    "sudoPasswordRequired": "ต้องใช้รหัสผ่านผู้ดูแลระบบ",
-    "enterSudoPassword": "ป้อนรหัสผ่าน sudo เพื่อดำเนินการต่อ",
-    "sudoPassword": "รหัสผ่าน Sudo",
-    "sudoOperationFailed": "การดำเนินการ Sudo ล้มเหลว",
-    "sudoAuthFailed": "การตรวจสอบสิทธิ์ Sudo ล้มเหลว",
-    "dragFilesToUpload": "ลากไฟล์มาวางที่นี่เพื่ออัปโหลด",
-    "dropToUploadHere": "ลากเส้นเพื่ออัปโหลดที่นี่",
-    "dropToDownloadHere": "คลิกที่นี่เพื่อดาวน์โหลด",
-    "localFiles": "ท้องถิ่น",
-    "showLocalFiles": "แสดงไฟล์ในเครื่อง (มุมมองแบบแบ่งหน้าจอ)",
-    "hideLocalFiles": "ซ่อนไฟล์ในเครื่อง",
-    "localHome": "โฟลเดอร์บ้าน",
-    "localPathPlaceholder": "เส้นทางโฟลเดอร์ในเครื่อง",
-    "localShowHidden": "แสดงไฟล์ที่ซ่อนอยู่",
-    "localHideHidden": "ซ่อนไฟล์ที่ซ่อนไว้",
-    "localRevealInFileManager": "เปิดเผยในตัวจัดการไฟล์ระบบ",
-    "localCannotOpenFolder": "ไม่สามารถเปิดโฟลเดอร์ได้",
-    "localItemCount": "{{count}} รายการ",
-    "localSelectedCount": "{{count}} เลือกแล้ว",
-    "back": "กลับ",
-    "forward": "ซึ่งไปข้างหน้า",
-    "up": "ขึ้น",
-    "kind": "ใจดี",
-    "localUploadingProgress": "กำลังอัปโหลด {{current}} จาก {{total}}",
-    "localDownloadingProgress": "กำลังดาวน์โหลด {{current}} จาก {{total}}",
-    "localTransferInFlight": "{{count}} ทันที",
-    "localPreparingDownload": "กำลังเตรียมดาวน์โหลด...",
-    "localTransferCancelled": "การโอนเงินถูกยกเลิก",
-    "localNothingToTransfer": "ไม่มีอะไรต้องโอน",
-    "localUploadComplete": "อัปโหลดไฟล์ {{count}} ไฟล์แล้ว",
-    "localUploadFailed": "การอัปโหลดล้มเหลว",
-    "localUploadPartial": "อัปโหลดไฟล์ {{done}} ไฟล์, {{failed}} ล้มเหลว",
-    "localDownloadComplete": "ดาวน์โหลดไฟล์ {{count}} ไฟล์แล้ว",
-    "localDownloadFailed": "การดาวน์โหลดล้มเหลว",
-    "localDownloadPartial": "ดาวน์โหลดไฟล์ {{done}} ไฟล์, {{failed}} ไฟล์ล้มเหลว",
-    "localReplaceExistingPrompt": "{{count}} รายการมีอยู่แล้วในโฟลเดอร์นี้ ต้องการแทนที่หรือไม่?",
-    "localReplace": "แทนที่",
-    "localSkipExisting": "ข้าม",
-    "localSkippedExisting": "ข้ามรายการที่มีอยู่ {{count}} รายการ",
-    "localUnsafeNamesSkipped": "ข้ามรายการ {{count}} รายการ เนื่องจากไม่สามารถใช้ชื่อรายการดังกล่าวในคอมพิวเตอร์เครื่องนี้ได้",
-    "localOpen": "เปิด",
-    "localOpenFolder": "เปิดโฟลเดอร์",
-    "localUploadToRemote": "อัปโหลดไปยังเซิร์ฟเวอร์",
-    "localUploadToRemoteMany": "อัปโหลด {{count}} รายการไปยังเซิร์ฟเวอร์",
-    "localMoveToTrash": "ย้ายไปที่ถังขยะ",
-    "localMoveToTrashMany": "ย้ายรายการ {{count}} รายการไปยังถังขยะ",
-    "localTrashConfirmSingle": "ย้าย \"{{name}}\" ไปที่ถังขยะ?",
-    "localTrashConfirmFolder": "ย้ายโฟลเดอร์ \"{{name}}\" และเนื้อหาทั้งหมดไปที่ถังขยะ?",
-    "localTrashConfirmMany": "ย้ายรายการ {{count}} รายการไปยังถังขยะหรือไม่?",
-    "localTrashed": "ย้ายรายการ {{count}} รายการไปยังถังขยะ",
-    "localTrashFailed": "ไม่สามารถย้ายไปถังขยะได้",
-    "localRenameFailed": "การเปลี่ยนชื่อล้มเหลว",
-    "localCreateFailed": "ไม่สามารถสร้างรายการได้",
-    "goToParentFolder": "ไปที่โฟลเดอร์หลัก",
-    "resizeSidebar": "ลากเพื่อปรับขนาดแถบด้านข้าง (ดับเบิ้ลคลิกเพื่อรีเซ็ต)",
-    "resizeLocalPane": "ลากเพื่อปรับขนาดบานหน้าต่างเฉพาะที่ (ดับเบิ้ลคลิกเพื่อรีเซ็ต)",
-    "columns": "คอลัมน์",
-    "columnsHint": "คลิกขวาเพื่อเลือกคอลัมน์",
-    "emptyFolder": "โฟลเดอร์นี้ว่างเปล่า",
-    "searchFiles": "ค้นหาไฟล์...",
-    "upload": "อัปโหลด",
-    "selectHostToStart": "เลือกโฮสต์เพื่อเริ่มการจัดการไฟล์",
-    "sshRequiredForFileManager": "โปรแกรมจัดการไฟล์ต้องการการเชื่อมต่อ SSH แต่เครื่องนี้ไม่ได้เปิดใช้งาน SSH",
-    "failedToConnect": "ไม่สามารถเชื่อมต่อ SSH ได้",
-    "failedToLoadDirectory": "ไม่สามารถโหลดไดเร็กทอรีได้",
-    "noSSHConnection": "ไม่มีการเชื่อมต่อ SSH ให้ใช้งาน",
-    "copy": "สำเนา",
-    "cut": "ตัด",
-    "paste": "แปะ",
-    "copyPath": "คัดลอกเส้นทาง",
-    "copyPaths": "คัดลอกเส้นทาง",
-    "delete": "ลบ",
-    "properties": "คุณสมบัติ",
-    "refresh": "รีเฟรช",
-    "downloadFiles": "ดาวน์โหลดไฟล์ {{count}} ไปยังเบราว์เซอร์",
-    "copyFiles": "คัดลอกรายการ {{count}} รายการ",
-    "cutFiles": "ตัด {{count}} รายการ",
-    "deleteFiles": "ลบรายการ {{count}} รายการ",
-    "filesCopiedToClipboard": "{{count}} รายการที่คัดลอกไปยังคลิปบอร์ด",
-    "filesCutToClipboard": "{{count}} รายการที่ถูกตัดไปยังคลิปบอร์ด",
-    "pathCopiedToClipboard": "คัดลอกเส้นทางไปยังคลิปบอร์ดแล้ว",
-    "pathsCopiedToClipboard": "{{count}} คัดลอกเส้นทางไปยังคลิปบอร์ดแล้ว",
-    "failedToCopyPath": "ไม่สามารถคัดลอกเส้นทางไปยังคลิปบอร์ดได้",
-    "copyFolderLink": "คัดลink ไปยังโฟลเดอร์",
-    "copyCurrentFolderLink": "คัดลink ไปยังโฟลเดอร์ปัจจุบัน",
-    "folderLinkCopied": "คัดลอกลิงก์โฟลเดอร์ไปยังคลิปบอร์ดแล้ว",
-    "failedToCopyFolderLink": "ไม่สามารถคัดลอกลิงก์โฟลเดอร์ได้",
-    "movedItems": "ย้ายรายการ {{count}} รายการ",
-    "failedToDeleteItem": "ไม่สามารถลบรายการได้",
-    "itemRenamedSuccessfully": "{{type}} เปลี่ยนชื่อสำเร็จแล้ว",
-    "failedToRenameItem": "ไม่สามารถเปลี่ยนชื่อรายการได้",
-    "download": "ดาวน์โหลด",
-    "openExternalEditor": "เปิดจากภายนอก",
-    "chooseExternalEditor": "เลือกตัวแก้ไขภายนอก",
-    "externalEditorSelected": "เลือกบรรณาธิการภายนอก",
-    "externalEditorDesktopOnly": "โปรแกรมแก้ไขภายนอกใช้งานได้เฉพาะในแอปพลิเคชันบนเดสก์ท็อปเท่านั้น",
-    "externalEditorOpened": "เปิดในโปรแกรมแก้ไขภายนอก การบันทึกในโปรแกรมแก้ไขนั้นจะอัปโหลดการเปลี่ยนแปลงกลับไปยังเซิร์ฟเวอร์",
-    "failedToOpenExternalEditor": "ไม่สามารถเปิดโปรแกรมแก้ไขภายนอกได้",
-    "failedToSelectExternalEditor": "ไม่สามารถเลือกตัวแก้ไขภายนอกได้",
-    "permissions": "สิทธิ์การเข้าถึง",
-    "size": "ขนาด",
-    "modified": "แก้ไขแล้ว",
-    "path": "เส้นทาง",
-    "confirmDelete": "คุณแน่ใจหรือไม่ว่าต้องการลบ {{name}}?",
-    "permissionDenied": "ไม่ได้รับอนุญาต",
-    "serverError": "ข้อผิดพลาดของเซิร์ฟเวอร์",
-    "fileSavedSuccessfully": "บันทึกไฟล์สำเร็จแล้ว",
-    "failedToSaveFile": "ไม่สามารถบันทึกไฟล์ได้",
-    "confirmDeleteSingleItem": "คุณแน่ใจหรือไม่ว่าต้องการลบ \"{{name}} \" อย่างถาวร?",
-    "confirmDeleteMultipleItems": "คุณแน่ใจหรือไม่ว่าต้องการลบรายการ {{count}} อย่างถาวร?",
-    "confirmDeleteMultipleItemsWithFolders": "คุณแน่ใจหรือไม่ว่าต้องการลบรายการ {{count}} รายการอย่างถาวร ซึ่งรวมถึงโฟลเดอร์และเนื้อหาภายในด้วย",
-    "confirmDeleteFolder": "คุณแน่ใจหรือไม่ว่าต้องการลบโฟลเดอร์ \"{{name}}\" และเนื้อหาทั้งหมดในนั้นอย่างถาวร?",
-    "permanentDeleteWarning": "การดำเนินการนี้ไม่สามารถยกเลิกได้ รายการดังกล่าวจะถูกลบออกจากเซิร์ฟเวอร์อย่างถาวร",
-    "moveToTrashWarning": "ไฟล์ดังกล่าวจะถูกย้ายไปยังถังขยะของ Termix และสามารถกู้คืนได้ก่อนที่ระยะเวลาการเก็บรักษาจะหมดลง",
-    "itemsMovedToTrash": "{{count}} รายการถูกย้ายไปยังถังขยะ",
-    "trash": "ขยะ",
-    "trashDescription": "รายการที่ถูกลบจะยังคงอยู่เป็นเวลา {{days}} วันบนโฮสต์นี้",
-    "trashLoadFailed": "ไม่สามารถโหลดถังขยะได้",
-    "trashEmpty": "ถังขยะว่างเปล่า",
-    "trashRestore": "คืนค่า",
-    "trashRestored": "กู้คืนแล้ว {{name}}",
-    "trashRestoreFailed": "ไม่สามารถกู้คืนรายการได้ เส้นทางเดิมอาจมีอยู่แล้ว",
-    "trashDeletePermanently": "ลบอย่างถาวร",
-    "trashDeleteConfirm": "ลบ {{name}}อย่างถาวรหรือไม่? การดำเนินการนี้ไม่สามารถย้อนกลับได้",
-    "trashPermanentlyDeleted": "ลบถาวร {{name}}",
-    "trashDeleteFailed": "ไม่สามารถลบรายการอย่างถาวรได้",
-    "trashEmptyAction": "ขยะทิ้ง",
-    "trashEmptyConfirm": "ต้องการลบทุกอย่างในถังขยะอย่างถาวรหรือไม่? การกระทำนี้ไม่สามารถย้อนกลับได้",
-    "trashEmptied": "ขยะถูกเก็บแล้ว",
-    "trashRetention": "ล้างข้อมูลอัตโนมัติหลังจาก (วัน)",
-    "trashRetentionSaved": "การปรับปรุงการเก็บรักษาขยะ",
-    "trashRetentionFailed": "ไม่สามารถอัปเดตการเก็บรักษาข้อมูลถังขยะได้",
-    "trashUnavailableConfirm": "ไม่สามารถย้ายรายการนี้ไปยังถังขยะได้ เนื่องจากไฟล์นี้อยู่ในระบบไฟล์อื่น หรือต้องใช้สิทธิ์ระดับสูง ต้องการลบอย่างถาวรแทนหรือไม่?",
-    "recent": "ล่าสุด",
-    "pinned": "ปักหมุด",
-    "folderShortcuts": "ทางลัดโฟลเดอร์",
-    "failedToReconnectSSH": "ไม่สามารถเชื่อมต่อเซสชัน SSH ใหม่ได้",
-    "openTerminalHere": "เปิดเทอร์มินัลที่นี่",
-    "run": "วิ่ง",
-    "openTerminalInFolder": "เปิดเทอร์มินัลในโฟลเดอร์นี้",
-    "openTerminalInFileLocation": "เปิดเทอร์มินัลที่ตำแหน่งไฟล์",
-    "runningFile": "การวิ่ง - {{file}}",
-    "onlyRunExecutableFiles": "สามารถเรียกใช้งานได้เฉพาะไฟล์ปฏิบัติการเท่านั้น",
-    "directories": "รายชื่อ",
-    "removedFromRecentFiles": "ลบ \"{{name}}\" ออกจากไฟล์ล่าสุดแล้ว",
-    "removeFailed": "ลบสิ่งที่ล้มเหลว",
-    "unpinnedSuccessfully": "ยกเลิกการตรึง \"{{name}}\" สำเร็จแล้ว",
-    "unpinFailed": "ยกเลิกการตรึงไม่สำเร็จ",
-    "removedShortcut": "ลบทางลัด \"{{name}} \" ออกแล้ว",
-    "removeShortcutFailed": "การลบทางลัดล้มเหลว",
-    "clearedAllRecentFiles": "ลบไฟล์ล่าสุดทั้งหมดแล้ว",
-    "clearFailed": "เคลียร์ล้มเหลว",
-    "removeFromRecentFiles": "ลบออกจากไฟล์ล่าสุด",
-    "clearAllRecentFiles": "ลบไฟล์ล่าสุดทั้งหมด",
-    "unpinFile": "ยกเลิกการตรึงไฟล์",
-    "removeShortcut": "ลบทางลัด",
-    "pinFile": "ไฟล์พิน",
-    "addToShortcuts": "เพิ่มไปยังทางลัด",
-    "pasteFailed": "การวางล้มเหลว",
-    "noUndoableActions": "ไม่มีการกระทำใดที่ย้อนกลับไม่ได้",
-    "undoCopySuccess": "ยกเลิกการคัดลอก: ลบไฟล์ที่คัดลอก {{count}} ไฟล์",
-    "undoCopyFailedDelete": "การยกเลิกการกระทำล้มเหลว: ไม่สามารถลบไฟล์ที่คัดลอกไว้ได้",
-    "undoCopyFailedNoInfo": "การยกเลิกการกระทำล้มเหลว: ไม่พบข้อมูลไฟล์ที่คัดลอกไว้",
-    "undoMoveSuccess": "ยกเลิกการย้าย: ย้ายไฟล์ {{count}} ไฟล์กลับไปยังตำแหน่งเดิม",
-    "undoMoveFailedMove": "การยกเลิกไม่สำเร็จ: ไม่สามารถย้ายไฟล์ใดๆ กลับได้",
-    "undoMoveFailedNoInfo": "การยกเลิกไม่สำเร็จ: ไม่พบข้อมูลไฟล์ที่ถูกย้าย",
-    "undoDeleteNotSupported": "ไม่สามารถยกเลิกการลบได้: ไฟล์ถูกลบออกจากเซิร์ฟเวอร์อย่างถาวรแล้ว",
-    "undoTypeNotSupported": "ประเภทการดำเนินการยกเลิกที่ไม่รองรับ",
-    "undoOperationFailed": "การยกเลิกการดำเนินการล้มเหลว",
-    "unknownError": "ข้อผิดพลาดที่ไม่ทราบสาเหตุ",
-    "confirm": "ยืนยัน",
-    "find": "หา...",
-    "replace": "แทนที่",
-    "downloadInstead": "ดาวน์โหลดแทน",
-    "keyboardShortcuts": "แป้นพิมพ์ลัด",
-    "searchAndReplace": "ค้นหาและแทนที่",
-    "editing": "การแก้ไข",
-    "search": "ค้นหา",
-    "findNext": "ค้นหาถัดไป",
-    "findPrevious": "ค้นหาก่อนหน้า",
-    "save": "บันทึก",
-    "selectAll": "เลือกทั้งหมด",
-    "undo": "เลิกทำ",
-    "redo": "ทำซ้ำ",
-    "moveLineUp": "เคลื่อนแถว",
-    "moveLineDown": "เลื่อนเส้นลง",
-    "toggleComment": "สลับการแสดงความคิดเห็น",
-    "autoComplete": "การเติมข้อความอัตโนมัติ",
-    "imageLoadError": "ไม่สามารถโหลดรูปภาพได้",
-    "startTyping": "เริ่มพิมพ์...",
-    "unknownSize": "ขนาดไม่ทราบแน่ชัด",
-    "fileIsEmpty": "ไฟล์ว่างเปล่า",
-    "largeFileWarning": "คำเตือนเกี่ยวกับไฟล์ขนาดใหญ่",
-    "largeFileWarningDesc": "ไฟล์นี้มีขนาด {{size}} ซึ่งอาจทำให้เกิดปัญหาด้านประสิทธิภาพเมื่อเปิดเป็นข้อความ",
-    "fileNotFoundAndRemoved": "ไม่พบไฟล์ \"{{name}}\" และไฟล์ดังกล่าวถูกลบออกจากไฟล์ล่าสุด/ไฟล์ปักหมุดแล้ว",
-    "failedToLoadFile": "ไม่สามารถโหลดไฟล์ได้: {{error}}",
-    "serverErrorOccurred": "เกิดข้อผิดพลาดของเซิร์ฟเวอร์ โปรดลองใหม่อีกครั้งในภายหลัง",
-    "autoSaveFailed": "การบันทึกอัตโนมัติล้มเหลว",
-    "fileAutoSaved": "ไฟล์ถูกบันทึกอัตโนมัติ",
-    "moveFileFailed": "การย้ายล้มเหลว {{name}}",
-    "moveOperationFailed": "การดำเนินการย้ายล้มเหลว",
-    "canOnlyCompareFiles": "สามารถเปรียบเทียบไฟล์ได้เพียงสองไฟล์เท่านั้น",
-    "comparingFiles": "เปรียบเทียบไฟล์: {{file1}} และ {{file2}}",
-    "dragFailed": "การดำเนินการลากล้มเหลว",
-    "filePinnedSuccessfully": "ไฟล์ \"{{name}}\" ถูกปักหมุดสำเร็จแล้ว",
-    "pinFileFailed": "ไม่สามารถตรึงไฟล์ได้",
-    "fileUnpinnedSuccessfully": "ไฟล์ \"{{name}}\" ถูกยกเลิกการตรึงสำเร็จแล้ว",
-    "unpinFileFailed": "ไม่สามารถยกเลิกการตรึงไฟล์ได้",
-    "shortcutAddedSuccessfully": "เพิ่มทางลัดโฟลเดอร์ \"{{name}}\" สำเร็จแล้ว",
-    "addShortcutFailed": "ไม่สามารถเพิ่มทางลัดได้",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} รายการสำเร็จ",
-    "operationCompleted": "{{operation}} {{count}} รายการ",
-    "downloadFileSuccess": "ดาวน์โหลดไฟล์ {{name}} สำเร็จแล้ว",
-    "downloadFileFailed": "การดาวน์โหลดล้มเหลว",
-    "downloadingFile": "กำลังดาวน์โหลด {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "ย้ายไปที่ {{name}}",
-    "diffCompareWith": "เปรียบเทียบความแตกต่างกับ {{name}}",
-    "dragOutsideToDownload": "ลากออกนอกหน้าต่างเพื่อดาวน์โหลดไฟล์ ({{count}} ไฟล์)",
-    "newFolderDefault": "โฟลเดอร์ใหม่",
-    "newFileDefault": "ไฟล์ใหม่.txt",
-    "successfullyMovedItems": "ย้ายรายการ {{count}} รายการไปยัง {{target}} สำเร็จแล้ว",
-    "move": "เคลื่อนไหว",
-    "searchInFile": "ค้นหาในไฟล์ (Ctrl+F)",
-    "showKeyboardShortcuts": "แสดงทางลัดแป้นพิมพ์",
-    "decreaseFontSize": "ลดขนาดตัวอักษร",
-    "increaseFontSize": "เพิ่มขนาดตัวอักษร",
-    "startWritingMarkdown": "เริ่มเขียนเนื้อหา Markdown ของคุณได้เลย...",
-    "loadingFileComparison": "กำลังโหลดการเปรียบเทียบไฟล์...",
-    "reload": "โหลดซ้ำ",
-    "compare": "เปรียบเทียบ",
-    "sideBySide": "เคียงข้างกัน",
-    "inline": "อินไลน์",
-    "fileComparison": "การเปรียบเทียบไฟล์: {{file1}} กับ {{file2}}",
-    "fileTooLarge": "ไฟล์มีขนาดใหญ่เกินไป (> 10MB) และไม่สามารถเปิดเป็นข้อความได้เนื่องจากเหตุผลด้านความปลอดภัย",
-    "sshConnectionFailed": "การเชื่อมต่อ SSH ล้มเหลว โปรดตรวจสอบการเชื่อมต่อของคุณกับ {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "ไม่สามารถโหลดไฟล์ได้: {{error}}",
-    "connecting": "กำลังเชื่อมต่อ...",
-    "connectedSuccessfully": "เชื่อมต่อสำเร็จแล้ว",
-    "totpVerificationFailed": "การตรวจสอบ TOTP ล้มเหลว",
-    "browserSignInFailed": "การเข้าสู่ระบบล้มเหลว โปรดลองใหม่อีกครั้ง",
-    "authenticationFailed": "การตรวจสอบสิทธิ์ล้มเหลว",
-    "incorrectPassphrase": "รหัสผ่านไม่ถูกต้อง โปรดลองอีกครั้ง",
-    "verificationCodePrompt": "รหัสยืนยัน:",
-    "changePermissions": "เปลี่ยนสิทธิ์การเข้าถึง",
-    "currentPermissions": "สิทธิ์การเข้าถึงปัจจุบัน",
-    "owner": "เจ้าของ",
-    "group": "กลุ่ม",
-    "others": "คนอื่น",
-    "read": "อ่าน",
-    "write": "เขียน",
-    "execute": "ดำเนินการ",
-    "permissionsChangedSuccessfully": "สิทธิ์การเข้าถึงเปลี่ยนแปลงสำเร็จแล้ว",
-    "failedToChangePermissions": "ไม่สามารถเปลี่ยนสิทธิ์ได้",
-    "name": "ชื่อ",
-    "sortByName": "ชื่อ",
-    "sortByDate": "วันที่แก้ไข",
-    "sortBySize": "ขนาด",
-    "ascending": "ขึ้นไป",
-    "descending": "ลง",
-    "root": "ราก",
-    "new": "ใหม่",
-    "sortBy": "เรียงลำดับตาม",
-    "items": "รายการ",
-    "selected": "เลือกแล้ว",
-    "editor": "บรรณาธิการ",
-    "octal": "แปด",
-    "storage": "พื้นที่จัดเก็บ",
-    "disk": "ดิสก์",
-    "used": "ใช้แล้ว",
-    "of": "ของ",
-    "toggleSidebar": "สลับแถบด้านข้าง",
-    "compactLayout": "ใช้รูปแบบการจัดวางที่กะทัดรัด",
-    "comfortableLayout": "ใช้รูปแบบการจัดวางที่สะดวกสบาย",
-    "cannotLoadPdf": "ไม่สามารถโหลดไฟล์ PDF ได้",
-    "pdfLoadError": "เกิดข้อผิดพลาดในการโหลดไฟล์ PDF นี้",
-    "loadingPdf": "กำลังโหลดโปรแกรมดูไฟล์ PDF...",
-    "loadingPage": "กำลังโหลดหน้าเว็บ...",
-    "cancel": "ยกเลิก",
-    "copiedItems_one": "คัดลอกรายการ {{count}} แล้ว",
-    "copiedItems_other": "คัดลอกรายการ {{count}} รายการ",
-    "deleteCopiedFileFailed": "ไม่สามารถลบสำเนาของ {{name}}ได้ : {{error}}",
-    "dragMovedItems_one": "ย้ายรายการ {{count}} ไปยัง {{target}}",
-    "dragMovedItems_other": "ย้ายรายการ {{count}} รายการไปยัง {{target}}",
-    "moveBackFileFailed": "ไม่สามารถย้าย {{name}} กลับไปได้: {{error}}",
-    "terminal": "เทอร์มินัล: {{host}} ({{path}})",
-    "dragToDesktop": "ลาก {{name}} ไปยังเดสก์ท็อป",
-    "dragFilesToDesktop": "ลากไฟล์ {{count}} ไปยังเดสก์ท็อป",
-    "folderDragUnsupported": "ขณะนี้ยังไม่รองรับการลากโฟลเดอร์ไปยังเดสก์ท็อป",
-    "saveToDesktopFailed": "การบันทึกล้มเหลว: {{error}}",
-    "dragFailedDetail": "การลากไม่สำเร็จ: {{error}}",
-    "videoUnsupported": "เบราว์เซอร์ของคุณไม่สามารถเล่นวิดีโอรูปแบบนี้ได้",
-    "downloadToPlay": "ดาวน์โหลดเพื่อเล่นที่อื่น",
-    "cannotPreviewType": "ไม่สามารถแสดงตัวอย่างไฟล์ประเภทนี้ได้",
-    "cannotPreviewTypeHint": "ไฟล์ประเภทนี้ไม่มีตัวอย่างให้ดู ดาวน์โหลดเพื่อเปิดในแอปพลิเคชันอื่น",
-    "loadingFile": "กำลังโหลดไฟล์...",
-    "loadingImage": "กำลังโหลดรูปภาพ...",
-    "loadingEditor": "กำลังโหลดตัวแก้ไข...",
-    "loadingPreview": "กำลังโหลดตัวอย่าง...",
-    "loadingAudio": "กำลังโหลดเครื่องเล่นเสียง...",
-    "emptyPreview": "ยังไม่มีข้อมูลให้ชมล่วงหน้า...",
-    "revert": "ย้อนกลับ",
-    "openAsText": "เปิดเป็นข้อความ",
-    "confirmOpenAsText": "คุณต้องการเปิดไฟล์นี้เป็นข้อความต่อไปหรือไม่? การทำเช่นนี้อาจทำให้เบราว์เซอร์ของคุณทำงานช้าลง"
-  },
-  "sftpTransfer": {
-    "title": "เอสเอฟทีพี",
-    "description": "โอนไฟล์ระหว่างโฮสต์ SSH สองเครื่อง",
-    "sourceServer": "เซิร์ฟเวอร์ต้นทาง",
-    "destinationServer": "เซิร์ฟเวอร์ปลายทาง",
-    "selectHost": "เลือกโฮสต์",
-    "noHostSelected": "ไม่ได้เลือกโฮสต์",
-    "move": "เคลื่อนไหว",
-    "copy": "สำเนา",
-    "upload": "อัปโหลด",
-    "itemsSelected": "{{count}} รายการที่เลือก",
-    "itemsSelected_other": "รายการที่เลือก {{count}} รายการ",
-    "ready": "พร้อม",
-    "loadingHosts": "กำลังโหลดโฮสต์...",
-    "name": "ชื่อ",
-    "modified": "แก้ไขแล้ว",
-    "size": "ขนาด",
-    "noFiles": "ไม่มีไฟล์",
-    "open": "เปิด",
-    "up": "ขึ้น",
-    "refresh": "รีเฟรช",
-    "copyToTarget": "คัดลอกไปยังไดเร็กทอรีเป้าหมาย",
-    "rename": "เปลี่ยนชื่อ",
-    "delete": "ลบ",
-    "editPermissions": "แก้ไขสิทธิ์การเข้าถึง",
-    "createNewFolder": "สร้างโฟลเดอร์ใหม่",
-    "deleteSelectedItems": "ลบรายการที่เลือก",
-    "deleteConfirm": "ลบรายการที่เลือก {{count}} รายการหรือไม่?",
-    "deleteConfirm_other": "ลบรายการที่เลือก {{count}} รายการหรือไม่?",
-    "cancel": "ยกเลิก",
-    "save": "บันทึก",
-    "folderCreated": "สร้างโฟลเดอร์แล้ว",
-    "itemRenamed": "เปลี่ยนชื่อรายการ",
-    "actionFailed": "การดำเนินการล้มเหลว",
-    "itemsDeleted": "{{count}} รายการถูกลบ",
-    "itemsDeleted_other": "รายการที่ถูกลบ {{count}} รายการ",
-    "deleteFailed": "การลบล้มเหลว",
-    "permissionsUpdated": "สิทธิ์การเข้าถึงได้รับการอัปเดตแล้ว",
-    "noRemoteSessionConnected": "ไม่มีการเชื่อมต่อเซสชันระยะไกล",
-    "failedToListFiles": "ไม่สามารถแสดงรายการไฟล์ได้",
-    "failedToRefresh": "ไม่สามารถรีเฟรชได้",
-    "destinationInsideSource": "ปลายทางต้องไม่อยู่ภายในเส้นทางต้นทางที่เลือกไว้",
-    "sameHostNoOp": "ต้นทางและปลายทางเป็นโฟลเดอร์เดียวกัน"
-  },
-  "hosts": {
-    "fileManager": "ตัวจัดการไฟล์",
-    "fileManagerUrlCopied": "คัดลอก URL ของตัวจัดการไฟล์แล้ว",
-    "copyFileManagerUrlAction": "คัดลอก URL ของตัวจัดการไฟล์",
-    "docsLink": "ดูเอกสาร",
-    "hostNotFound": "ไม่พบโฮสต์",
-    "loadingHost": "กำลังโหลดโฮสต์..."
-  },
-  "onboarding": {
-    "feature_files": "ตัวจัดการไฟล์",
-    "feature_files_desc": "เรียกดู อัปโหลด ดาวน์โหลด และแก้ไขไฟล์ผ่าน SFTP โดยไม่ต้องออกจากแอปพลิเคชัน"
-  },
-  "terminal": {
-    "runTitle": "กำลังวิ่ง {{command}} - {{host}}",
-    "terminalTitle": "เทอร์มินัล - {{host}}",
-    "terminalWithPath": "เทอร์มินัล - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "เรียกดูโฟลเดอร์ปลายทาง",
-    "browsePathError": "ไม่สามารถเปิดเส้นทางนี้บนโฮสต์ปลายทางได้",
-    "browsePathWillBeCreated": "โฟลเดอร์นี้ยังไม่มีอยู่ จะถูกสร้างขึ้นเมื่อการถ่ายโอนเริ่มต้นขึ้น",
-    "cancel": "ยกเลิก",
-    "cleanupDestFiles": "สถานที่ทำความสะอาด",
-    "cleanupDestFilesError": "การทำความสะอาดล้มเหลว",
-    "cleanupDestFilesNothing": "ไม่มีอะไรต้องทำความสะอาดที่ปลายทาง",
-    "cleanupDestFilesPartial": "ไม่สามารถลบไฟล์บางส่วนได้",
-    "cleanupDestFilesSuccess": "ลบไฟล์บางส่วนออกจากปลายทางแล้ว",
-    "confirmCopy": "สำเนา",
-    "confirmMove": "เคลื่อนไหว",
-    "copyFolderToHost": "คัดลอกโฟลเดอร์ไปยังโฮสต์…",
-    "copyItemsToHost": "คัดลอกรายการ {{count}} รายการไปยังโฮสต์…",
-    "copyToHost": "คัดลอกไปยังโฮสต์…",
-    "destinationPath": "เส้นทางปลายทาง",
-    "destMustBeDirectory": "สำหรับการโอนย้ายหลายรายการ ปลายทางต้องเป็นไดเร็กทอรี",
-    "goUp": "ขึ้นไป",
-    "hostAuthRequired": "ต้องมีการยืนยันตัวตน โปรดเปิดตัวจัดการไฟล์บนโฮสต์นี้ก่อน",
-    "hostConnecting": "กำลังเชื่อมต่อ…",
-    "hostConnectionFailed": "การเชื่อมต่อล้มเหลว",
-    "hostDisconnected": "ไม่ได้เชื่อมต่อ",
-    "hostReady": "พร้อม",
-    "itemsSummary": "{{count}} รายการ",
-    "jumpHostLimitation": "โฮสต์ทั้งสองต้องสามารถเข้าถึงได้จากเซิร์ฟเวอร์ Termix ไม่รองรับการกำหนดเส้นทางโดยตรงระหว่างโฮสต์",
-    "methodAuto": "อัตโนมัติ",
-    "methodAutoHint": "เลือกใช้ไฟล์บีบอัดแบบ tar หรือ SFTP แบบต่อไฟล์ โดยพิจารณาจากจำนวนไฟล์ ขนาดไฟล์ และความสามารถในการบีบอัด ไฟล์เดี่ยวจะใช้ SFTP แบบสตรีมมิ่งเสมอ",
-    "methodItemSftp": "SFTP ต่อไฟล์",
-    "methodItemSftpHint": "โอนไฟล์แต่ละไฟล์ทีละไฟล์ผ่าน SFTP ใช้งานได้กับทุกระบบปฏิบัติการ รวมถึง Windows",
-    "methodItemSftpLimitation": "แต่ละไฟล์จะใช้สตรีม SFTP เดียวกันในการคัดลอกไฟล์ทีละไฟล์ ความคืบหน้าจะถูกรวมเข้าด้วยกัน ทำให้แถบแสดงความคืบหน้าเคลื่อนที่ช้าลงเมื่อคัดลอกไฟล์ขนาดใหญ่",
-    "methodLabel": "วิธีการถ่ายโอน",
-    "methodPreviewError": "ไม่สามารถดูตัวอย่างวิธีการถ่ายโอนได้ เซิร์ฟเวอร์จะเลือกวิธีการเมื่อคุณเริ่มต้นใช้งาน",
-    "methodPreviewLoading": "กำลังคำนวณวิธีการโอน…",
-    "methodPreviewScanSummary": "ไฟล์ {{fileCount}} ไฟล์, รวม {{totalSize}} ไฟล์ (สแกนจากโฮสต์ต้นทาง)",
-    "methodPreviewWillUseItemSftp": "จะใช้: SFTP แบบแยกไฟล์",
-    "methodPreviewWillUseTar": "จะใช้: ไฟล์เก็บถาวร Tar",
-    "methodReason": {
-      "user_item_sftp": "คุณเลือกใช้ SFTP แบบต่อไฟล์",
-      "user_tar": "คุณเลือกไฟล์เก็บถาวรแบบ tar",
-      "tar_unavailable": "Tar ไม่สามารถใช้งานได้บนโฮสต์หนึ่งหรือทั้งสองโฮสต์ ดังนั้นจะใช้ SFTP แบบแยกไฟล์แทน",
-      "windows_host": "เนื่องจากใช้ระบบปฏิบัติการ Windows จึงไม่ได้ใช้โปรแกรม tar",
-      "auto_multi_large": "อัตโนมัติ: ไฟล์หลายไฟล์ รวมถึงไฟล์ขนาดใหญ่ ({{largestSize}}) ที่มีข้อมูลที่สามารถบีบอัดได้ Tar จะรวมไฟล์เหล่านั้นเข้าไว้ในการถ่ายโอนครั้งเดียว",
-      "auto_single_large_in_archive": "อัตโนมัติ: ไฟล์ขนาดใหญ่หนึ่งไฟล์ ({{largestSize}}) ในชุดนี้ ดังนั้นจึงใช้ SFTP ต่อไฟล์",
-      "auto_many_incompressible": "อัตโนมัติ: ข้อมูลส่วนใหญ่ไม่สามารถบีบอัดได้ ดังนั้นจึงใช้ SFTP แบบแยกไฟล์",
-      "auto_many_files": "อัตโนมัติ: ไฟล์จำนวนมาก ({{fileCount}}) tar ช่วยลดค่าใช้จ่ายต่อไฟล์",
-      "auto_default": "อัตโนมัติ: ตั้งค่า SFTP สำหรับแต่ละไฟล์ในชุดนี้"
-    },
-    "methodTar": "คลังข้อมูลทาร์",
-    "methodTarHint": "บีบอัดไฟล์ที่ต้นทาง ถ่ายโอนไฟล์เก็บถาวรหนึ่งไฟล์ และแตกไฟล์ที่ปลายทาง ต้องใช้ tar บนเครื่อง Unix ทั้งสองเครื่อง",
-    "metricsCompress": "บีบอัดจากแหล่งที่มา: {{duration}}",
-    "metricsExtract": "แตกไฟล์ที่ปลายทาง: {{duration}}",
-    "metricsPrepare": "เตรียมปลายทาง: {{duration}}",
-    "metricsRouteBenchmark": "การตรวจสอบเส้นทาง: โดยตรง {{direct}}, รีเลย์ {{relay}}",
-    "metricsSourceDelete": "ลบออกจากแหล่งที่มา: {{duration}}",
-    "metricsTotal": "รวม: {{duration}}",
-    "metricsTransfer": "จากต้นทางถึงปลายทาง: {{throughput}} ({{duration}})",
-    "metricsVerify": "ตรวจสอบด้วย SHA-256 แล้ว: {{duration}}",
-    "moveFolderToHost": "ย้ายโฟลเดอร์ไปยังโฮสต์…",
-    "moveItemsToHost": "ย้ายรายการ {{count}} รายการไปยังโฮสต์…",
-    "moveToHost": "ย้ายไปยังโฮสต์…",
-    "noHostsConnected": "ไม่มีโฮสต์ตัวจัดการไฟล์อื่นให้บริการ",
-    "noHostsConnectedHint": "เพิ่มโฮสต์ SSH อีกตัวโดยเปิดใช้งานตัวจัดการไฟล์ในตัวจัดการโฮสต์",
-    "parallelSegmentsHint": "ไฟล์ขนาดใหญ่จะถูกแบ่งออกเป็นส่วนย่อยขนาด 256 MB การใช้หลายเลนจะใช้การเชื่อมต่อแยกกัน (เช่น การเริ่มการถ่ายโอนหลายรายการพร้อมกัน) เพื่อให้ได้ปริมาณงานโดยรวมที่สูงขึ้น",
-    "parallelSegmentsLabel": "ช่องทางเปลี่ยนถ่ายแบบขนาน",
-    "parallelSegmentsOption": "{{count}} เลน",
-    "progressBenchmarking": "เลือกเส้นทางการโอนย้ายที่เร็วที่สุด…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "ยกเลิก",
-    "progressCancelling": "การยกเลิก…",
-    "progressCompressing": "กำลังบีบอัดบนโฮสต์ต้นทาง…",
-    "progressExtracting": "กำลังแตกไฟล์ที่ปลายทาง…",
-    "progressItems": "ไฟล์ {{current}} / {{total}}",
-    "progressReconnecting": "กำลังเชื่อมต่อใหม่…",
-    "progressStalled": "หยุดชะงัก",
-    "progressTotalSpeed": "{{speed}} รวม ({{lanes}} เลน)",
-    "progressTransferring": "กำลังถ่ายโอนข้อมูล…",
-    "progressTransferringItems": "กำลังถ่ายโอนไฟล์ ({{current}} จาก {{total}})…",
-    "progressVerifying": "กำลังตรวจสอบความสมบูรณ์ของไฟล์…",
-    "recentDestinations": "จุดหมายปลายทางล่าสุด",
-    "resumedHint": "เชื่อมต่อใหม่กับการถ่ายโอนที่เริ่มทำงานในหน้าต่างอื่นแล้ว",
-    "retryTransfer": "ลองใหม่อีกครั้ง",
-    "retryTransferError": "การลองใหม่ล้มเหลว",
-    "selectDestinationHost": "เลือกโฮสต์ปลายทาง",
-    "transferCancelled": "การโอนเงินถูกยกเลิก",
-    "transferCancelledCopyHint": "ไฟล์บางส่วนอาจยังคงอยู่ในปลายทาง",
-    "transferCancelledMoveHint": "ไฟล์บางส่วนอาจยังคงอยู่ในปลายทาง ไฟล์ต้นฉบับไม่ได้ถูกลบออก",
-    "transferError": "การโอนล้มเหลว",
-    "transferFailedRetryHint": "ข้อมูลบางส่วนถูกเก็บไว้ในปลายทาง การลองใหม่จะดำเนินการต่อเมื่อการเชื่อมต่อกลับมาใช้งานได้",
-    "transferPartialHint": "ไม่สามารถโอนเงินได้: {{paths}}",
-    "transferSuccess": "การโอนเสร็จสมบูรณ์",
-    "metricsHopSourceRead": "แหล่งที่มา → เซิร์ฟเวอร์: {{throughput}}",
-    "metricsHopDestSftpWrite": "เซิร์ฟเวอร์ → ปลายทาง (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "เซิร์ฟเวอร์ → ปลายทาง (ภายในเครื่อง): {{throughput}}"
-  },
-  "plugin": {
-    "name": "ตัวจัดการไฟล์"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/tr_TR.json b/plugins/file-manager/locales/translated/tr_TR.json
deleted file mode 100644
index 915f07812..000000000
--- a/plugins/file-manager/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Dosyalar",
-    "sftp": "SFTP",
-    "openFileManager": "Dosya Yöneticisini Aç"
-  },
-  "permissions": {
-    "use": {
-      "title": "Dosya yöneticisini kullanın.",
-      "description": "SFTP üzerinden dosyalara göz atın, düzenleyin ve aktarın."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Dosya Yöneticisini Etkinleştir",
-        "description": "Bu sunucudaki dosyaları SFTP üzerinden tarayın ve düzenleyin."
-      },
-      "defaultPath": {
-        "label": "Varsayılan Yol"
-      },
-      "scpLegacy": {
-        "label": "SCP Eski Modu"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Eşzamanlı Dosya Aktarımları",
-        "description": "Yan yana yerel/uzaktan yönetici tarafından aynı anda yüklenen veya indirilen dosya sayısı. Sunucunuz SFTP kanallarını sınırlandırıyorsa bu değeri düşürün."
-      },
-      "confirmBeforeTrash": {
-        "label": "Dosyaları çöp kutusuna taşımadan önce onaylayın.",
-        "description": "Uzak dosyaları çöp kutusuna taşımadan önce izin isteyin. Kalıcı silme işlemi de onay gerektirir."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Dosya Yöneticisi"
-  },
-  "fileManager": {
-    "noHostSelected": "Hiçbir sunucu seçilmedi",
-    "initializingEditor": "Düzenleyici başlatılıyor...",
-    "file": "Dosya",
-    "folder": "Klasör",
-    "uploadFile": "Dosya Yükle",
-    "downloadFile": "İndir",
-    "extractArchive": "Arşivi Çıkar",
-    "extractingArchive": "{{name}} çıkartılıyor...",
-    "archiveExtractedSuccessfully": "{{name}} başarıyla çıkartıldı.",
-    "extractFailed": "Çıkartma başarısız.",
-    "compressFile": "Dosyayı Sıkıştır",
-    "compressFiles": "Dosyaları Sıkıştır",
-    "compressFilesDesc": "{{count}} öğeyi arşive sıkıştır",
-    "archiveName": "Arşiv Adı",
-    "enterArchiveName": "Arşiv adını girin...",
-    "compressionFormat": "Sıkıştırma Biçimi",
-    "selectedFiles": "Seçili dosyalar",
-    "andMoreFiles": "ve {{count}} tane daha...",
-    "compress": "Sıkıştır",
-    "compressingFiles": "{{count}} öğe {{name}} içine sıkıştırılıyor...",
-    "filesCompressedSuccessfully": "{{name}} başarıyla oluşturuldu.",
-    "compressFailed": "Sıkıştırma başarısız.",
-    "edit": "Düzenle",
-    "preview": "Önizle",
-    "previous": "Önceki",
-    "next": "Sonraki",
-    "pageXOfY": "Sayfa {{current}} / {{total}}",
-    "zoomOut": "Uzaklaştır",
-    "zoomIn": "Yakınlaştır",
-    "newFile": "Yeni Dosya",
-    "newFolder": "Yeni Klasör",
-    "rename": "Yeniden Adlandır",
-    "uploading": "Yükleniyor...",
-    "uploadingFile": "{{name}} yükleniyor...",
-    "uploadingChunk": "{{name}}yükleniyor : {{percent}}% ( {{total}}'ün {{chunk}} kısmı)",
-    "fileName": "Dosya Adı",
-    "folderName": "Klasör Adı",
-    "fileUploadedSuccessfully": "\"{{name}}\" dosyası başarıyla yüklendi.",
-    "failedToUploadFile": "Dosya yüklenemedi.",
-    "uploadingFolderFiles": "{{count}} dosya yükleniyor...",
-    "uploadedFolderFiles": "{{count}} dosya başarıyla yüklendi",
-    "uploadedFolderPartial": "{{uploaded}} dosya yüklendi, {{failed}} başarısız oldu",
-    "fileDownloadedSuccessfully": "\"{{name}}\" dosyası başarıyla indirildi.",
-    "failedToDownloadFile": "Dosya indirilemedi.",
-    "fileCreatedSuccessfully": "\"{{name}}\" dosyası başarıyla oluşturuldu.",
-    "folderCreatedSuccessfully": "\"{{name}}\" klasörü başarıyla oluşturuldu.",
-    "failedToCreateItem": "Öğe oluşturulamadı",
-    "operationFailed": "{{operation}} işlemi {{name}} için başarısız: {{error}}",
-    "failedToResolveSymlink": "Sembolik bağlantı çözümlenemedi",
-    "itemsDeletedSuccessfully": "{{count}} öğe başarıyla silindi",
-    "failedToDeleteItems": "Öğeler silinemedi",
-    "sudoPasswordRequired": "Yönetici Parolası Gerekli",
-    "enterSudoPassword": "Bu işleme devam etmek için sudo parolasını girin",
-    "sudoPassword": "Sudo parolası",
-    "sudoOperationFailed": "Sudo işlemi başarısız",
-    "sudoAuthFailed": "Sudo kimlik doğrulaması başarısız",
-    "dragFilesToUpload": "Yüklemek için dosyaları buraya bırakın",
-    "dropToUploadHere": "Yüklemek için sürükle bırak özelliğini kullanın.",
-    "dropToDownloadHere": "İndirmek için buraya tıklayın",
-    "localFiles": "Yerel",
-    "showLocalFiles": "Yerel dosyaları göster (bölünmüş görünüm)",
-    "hideLocalFiles": "Yerel dosyaları gizle",
-    "localHome": "Ana klasör",
-    "localPathPlaceholder": "Yerel klasör yolu",
-    "localShowHidden": "Gizli dosyaları göster",
-    "localHideHidden": "Gizli dosyaları gizle",
-    "localRevealInFileManager": "Sistem dosya yöneticisinde göster",
-    "localCannotOpenFolder": "Klasör açılamıyor.",
-    "localItemCount": "{{count}} öğe",
-    "localSelectedCount": "{{count}} seçili",
-    "back": "Geri",
-    "forward": "İleri",
-    "up": "Yukarı",
-    "kind": "Tür",
-    "localUploadingProgress": "{{total}}'ten {{current}} yükleniyor",
-    "localDownloadingProgress": "{{total}}'ten {{current}} indiriliyor",
-    "localTransferInFlight": "{{count}} hemen",
-    "localPreparingDownload": "İndirme işlemi hazırlanıyor...",
-    "localTransferCancelled": "Aktarım iptal edildi",
-    "localNothingToTransfer": "Aktarılacak bir şey yok.",
-    "localUploadComplete": "{{count}} dosya yüklendi",
-    "localUploadFailed": "Yükleme başarısız oldu",
-    "localUploadPartial": "{{done}} dosya yüklendi, {{failed}} başarısız oldu",
-    "localDownloadComplete": "{{count}} dosya indirildi",
-    "localDownloadFailed": "İndirme başarısız oldu",
-    "localDownloadPartial": "{{done}} dosya indirildi, {{failed}} başarısız oldu",
-    "localReplaceExistingPrompt": "Bu klasörde zaten {{count}} öğe mevcut. Bunların yerine yenilerini mi koymak istiyorsunuz?",
-    "localReplace": "Değiştir",
-    "localSkipExisting": "Atlamak",
-    "localSkippedExisting": "{{count}} mevcut öğe atlandı",
-    "localUnsafeNamesSkipped": "Bu bilgisayarda adları kullanılamayan {{count}} öğe atlandı.",
-    "localOpen": "Aç",
-    "localOpenFolder": "Klasörü aç",
-    "localUploadToRemote": "Sunucuya yükle",
-    "localUploadToRemoteMany": "Sunucuya {{count}} öğe yükle",
-    "localMoveToTrash": "Çöp Kutusuna Taşı",
-    "localMoveToTrashMany": "{{count}} öğeyi Çöp Kutusuna Taşı",
-    "localTrashConfirmSingle": "\"{{name}}\" öğesini Çöp Kutusuna taşı?",
-    "localTrashConfirmFolder": "\"{{name}}\" klasörünü ve tüm içeriğini Çöp Kutusu'na taşı?",
-    "localTrashConfirmMany": "{{count}} öğeyi Çöp Kutusuna taşı?",
-    "localTrashed": "{{count}} öğe Çöp Kutusu'na taşındı",
-    "localTrashFailed": "Çöp kutusuna taşınamadı",
-    "localRenameFailed": "Yeniden adlandırma başarısız oldu.",
-    "localCreateFailed": "Öğe oluşturulamadı.",
-    "goToParentFolder": "Üst klasöre git",
-    "resizeSidebar": "Kenar çubuğunu yeniden boyutlandırmak için sürükleyin (sıfırlamak için çift tıklayın)",
-    "resizeLocalPane": "Yerel bölmeyi yeniden boyutlandırmak için sürükleyin (sıfırlamak için çift tıklayın).",
-    "columns": "Sütunlar",
-    "columnsHint": "Sütunları seçmek için sağ tıklayın.",
-    "emptyFolder": "Bu klasör boş",
-    "searchFiles": "Dosya ara...",
-    "upload": "Yükle",
-    "selectHostToStart": "Dosya yönetimini başlatmak için bir sunucu seçin",
-    "sshRequiredForFileManager": "Dosya yöneticisi SSH gerektirir. Bu sunucuda SSH etkin değil.",
-    "failedToConnect": "SSH'ye bağlanılamadı",
-    "failedToLoadDirectory": "Dizin yüklenemedi",
-    "noSSHConnection": "SSH bağlantısı yok",
-    "copy": "Kopyala",
-    "cut": "Kes",
-    "paste": "Yapıştır",
-    "copyPath": "Yolu Kopyala",
-    "copyPaths": "Yolları Kopyala",
-    "delete": "Sil",
-    "properties": "Özellikler",
-    "refresh": "Yenile",
-    "downloadFiles": "{{count}} dosyayı tarayıcıya indir",
-    "copyFiles": "{{count}} öğeyi kopyala",
-    "cutFiles": "{{count}} öğeyi kes",
-    "deleteFiles": "{{count}} öğeyi sil",
-    "filesCopiedToClipboard": "{{count}} öğe panoya kopyalandı",
-    "filesCutToClipboard": "{{count}} öğe panoya kesildi",
-    "pathCopiedToClipboard": "Yol panoya kopyalandı",
-    "pathsCopiedToClipboard": "{{count}} yol panoya kopyalandı",
-    "failedToCopyPath": "Yol panoya kopyalanamadı",
-    "copyFolderLink": "Klasör Bağlantısını Kopyala",
-    "copyCurrentFolderLink": "Geçerli Klasörün Bağlantısını Kopyala",
-    "folderLinkCopied": "Klasör bağlantısı panoya kopyalandı",
-    "failedToCopyFolderLink": "Klasör bağlantısı kopyalanamadı",
-    "movedItems": "{{count}} öğe taşındı",
-    "failedToDeleteItem": "Öğe silinemedi",
-    "itemRenamedSuccessfully": "{{type}} başarıyla yeniden adlandırıldı",
-    "failedToRenameItem": "Öğe yeniden adlandırılamadı",
-    "download": "İndir",
-    "openExternalEditor": "Harici Olarak Aç",
-    "chooseExternalEditor": "Harici düzenleyici seç",
-    "externalEditorSelected": "Harici düzenleyici seçildi",
-    "externalEditorDesktopOnly": "Harici düzenleyici yalnızca masaüstü uygulamasında kullanılabilir",
-    "externalEditorOpened": "Harici düzenleyicide açıldı. Orada kaydetmek değişiklikleri sunucuya yükler.",
-    "failedToOpenExternalEditor": "Harici düzenleyici açılamadı",
-    "failedToSelectExternalEditor": "Harici düzenleyici seçilemedi",
-    "permissions": "İzinler",
-    "size": "Boyut",
-    "modified": "Değiştirilme",
-    "path": "Yol",
-    "confirmDelete": "{{name}} öğesini silmek istediğinize emin misiniz?",
-    "permissionDenied": "İzin reddedildi",
-    "serverError": "Sunucu Hatası",
-    "fileSavedSuccessfully": "Dosya başarıyla kaydedildi",
-    "failedToSaveFile": "Dosya kaydedilemedi",
-    "confirmDeleteSingleItem": "\"{{name}}\" öğesini kalıcı olarak silmek istediğinize emin misiniz?",
-    "confirmDeleteMultipleItems": "{{count}} öğeyi kalıcı olarak silmek istediğinize emin misiniz?",
-    "confirmDeleteMultipleItemsWithFolders": "{{count}} öğeyi kalıcı olarak silmek istediğinize emin misiniz? Bu, klasörleri ve içeriklerini de kapsar.",
-    "confirmDeleteFolder": "\"{{name}}\" klasörünü ve tüm içeriğini kalıcı olarak silmek istediğinize emin misiniz?",
-    "permanentDeleteWarning": "Bu işlem geri alınamaz. Öğe(ler) sunucudan kalıcı olarak silinecek.",
-    "moveToTrashWarning": "Öğeler Termix Çöp Kutusu'na taşınacak ve saklama süresi dolmadan önce geri yüklenebilecektir.",
-    "itemsMovedToTrash": "{{count}} öğe Çöp Kutusuna taşındı",
-    "trash": "Çöp",
-    "trashDescription": "Silinen öğeler bu sunucuda {{days}} gün boyunca saklanır.",
-    "trashLoadFailed": "Çöp kutusu yüklenemedi.",
-    "trashEmpty": "Çöp kutusu boş.",
-    "trashRestore": "Geri Yükle",
-    "trashRestored": "Geri Yüklendi {{name}}",
-    "trashRestoreFailed": "Öğeyi geri yükleme başarısız oldu. Orijinal yol zaten mevcut olabilir.",
-    "trashDeletePermanently": "Kalıcı olarak sil",
-    "trashDeleteConfirm": "{{name}}öğesini kalıcı olarak silmek istiyor musunuz? Bu işlem geri alınamaz.",
-    "trashPermanentlyDeleted": "Kalıcı olarak silindi {{name}}",
-    "trashDeleteFailed": "Öğeyi kalıcı olarak silme işlemi başarısız oldu.",
-    "trashEmptyAction": "Çöpü Boşaltın",
-    "trashEmptyConfirm": "Çöp kutusundaki tüm öğeleri kalıcı olarak silmek mi istiyorsunuz? Bu işlem geri alınamaz.",
-    "trashEmptied": "Çöp boşaltıldı.",
-    "trashRetention": "Otomatik temizleme süresi (gün)",
-    "trashRetentionSaved": "Çöp saklama süresi güncellendi",
-    "trashRetentionFailed": "Çöp kutusu saklama süresi güncellenemedi.",
-    "trashUnavailableConfirm": "Bu öğe Çöp Kutusu'na taşınamaz, genellikle başka bir dosya sisteminde olduğu veya yükseltilmiş izinler gerektirdiği içindir. Bunun yerine kalıcı olarak silin.",
-    "recent": "Son Kullanılanlar",
-    "pinned": "Sabitlenmiş",
-    "folderShortcuts": "Klasör Kısayolları",
-    "failedToReconnectSSH": "SSH oturumuna yeniden bağlanılamadı",
-    "openTerminalHere": "Terminali Burada Aç",
-    "run": "Çalıştır",
-    "openTerminalInFolder": "Bu Klasörde Terminal Aç",
-    "openTerminalInFileLocation": "Dosya Konumunda Terminal Aç",
-    "runningFile": "Çalıştırılıyor - {{file}}",
-    "onlyRunExecutableFiles": "Yalnızca çalıştırılabilir dosyalar çalıştırılabilir",
-    "directories": "Dizinler",
-    "removedFromRecentFiles": "\"{{name}}\" son dosyalardan kaldırıldı",
-    "removeFailed": "Kaldırma başarısız",
-    "unpinnedSuccessfully": "\"{{name}}\" sabitlemesi başarıyla kaldırıldı",
-    "unpinFailed": "Sabitleme kaldırma başarısız",
-    "removedShortcut": "\"{{name}}\" kısayolu kaldırıldı",
-    "removeShortcutFailed": "Kısayol kaldırma başarısız",
-    "clearedAllRecentFiles": "Tüm son dosyalar temizlendi",
-    "clearFailed": "Temizleme başarısız",
-    "removeFromRecentFiles": "Son dosyalardan kaldır",
-    "clearAllRecentFiles": "Tüm son dosyaları temizle",
-    "unpinFile": "Dosya sabitlemesini kaldır",
-    "removeShortcut": "Kısayolu kaldır",
-    "pinFile": "Dosyayı sabitle",
-    "addToShortcuts": "Kısayollara ekle",
-    "pasteFailed": "Yapıştırma başarısız",
-    "noUndoableActions": "Geri alınabilir işlem yok",
-    "undoCopySuccess": "Kopyalama işlemi geri alındı: {{count}} kopyalanmış dosya silindi",
-    "undoCopyFailedDelete": "Geri alma başarısız: Hiçbir kopyalanmış dosya silinemedi",
-    "undoCopyFailedNoInfo": "Geri alma başarısız: Kopyalanmış dosya bilgisi bulunamadı",
-    "undoMoveSuccess": "Taşıma işlemi geri alındı: {{count}} dosya orijinal konumuna geri taşındı",
-    "undoMoveFailedMove": "Geri alma başarısız: Hiçbir dosya geri taşınamadı",
-    "undoMoveFailedNoInfo": "Geri alma başarısız: Taşınmış dosya bilgisi bulunamadı",
-    "undoDeleteNotSupported": "Silme işlemi geri alınamaz: Dosyalar sunucudan kalıcı olarak silindi",
-    "undoTypeNotSupported": "Desteklenmeyen geri alma işlem türü",
-    "undoOperationFailed": "Geri alma işlemi başarısız",
-    "unknownError": "Bilinmeyen hata",
-    "confirm": "Onayla",
-    "find": "Bul...",
-    "replace": "Değiştir",
-    "downloadInstead": "Bunun Yerine İndir",
-    "keyboardShortcuts": "Klavye Kısayolları",
-    "searchAndReplace": "Ara ve Değiştir",
-    "editing": "Düzenleme",
-    "search": "Ara",
-    "findNext": "Sonrakini Bul",
-    "findPrevious": "Öncekini Bul",
-    "save": "Kaydet",
-    "selectAll": "Tümünü Seç",
-    "undo": "Geri Al",
-    "redo": "Yinele",
-    "moveLineUp": "Satırı Yukarı Taşı",
-    "moveLineDown": "Satırı Aşağı Taşı",
-    "toggleComment": "Yorumu Aç/Kapat",
-    "autoComplete": "Otomatik Tamamla",
-    "imageLoadError": "Görüntü yüklenemedi",
-    "startTyping": "Yazmaya başlayın...",
-    "unknownSize": "Bilinmeyen boyut",
-    "fileIsEmpty": "Dosya boş",
-    "largeFileWarning": "Büyük Dosya Uyarısı",
-    "largeFileWarningDesc": "Bu dosya {{size}} boyutunda, metin olarak açıldığında performans sorunlarına neden olabilir.",
-    "fileNotFoundAndRemoved": "\"{{name}}\" dosyası bulunamadı ve son kullanılanlar/sabitlenmiş dosyalardan kaldırıldı.",
-    "failedToLoadFile": "Dosya yüklenemedi: {{error}}",
-    "serverErrorOccurred": "Sunucu hatası oluştu. Lütfen daha sonra tekrar deneyin.",
-    "autoSaveFailed": "Otomatik kaydetme başarısız oldu",
-    "fileAutoSaved": "Dosya otomatik kaydedildi",
-    "moveFileFailed": "{{name}} taşınamadı",
-    "moveOperationFailed": "Taşıma işlemi başarısız oldu",
-    "canOnlyCompareFiles": "Yalnızca iki dosya karşılaştırılabilir",
-    "comparingFiles": "Dosyalar karşılaştırılıyor: {{file1}} ve {{file2}}",
-    "dragFailed": "Sürükleme işlemi başarısız oldu",
-    "filePinnedSuccessfully": "\"{{name}}\" dosyası başarıyla sabitlendi",
-    "pinFileFailed": "Dosya sabitleme başarısız oldu",
-    "fileUnpinnedSuccessfully": "\"{{name}}\" dosyasının sabitlemesi başarıyla kaldırıldı",
-    "unpinFileFailed": "Sabitlenmiş dosya kaldırılamadı",
-    "shortcutAddedSuccessfully": "Klasör kısayolu \"{{name}}\" başarıyla eklendi",
-    "addShortcutFailed": "Kısayol eklenemedi",
-    "operationCompletedSuccessfully": "{{count}} öğe başarıyla {{operation}}",
-    "operationCompleted": "{{count}} öğe {{operation}}",
-    "downloadFileSuccess": "{{name}} dosyası başarıyla indirildi",
-    "downloadFileFailed": "İndirme başarısız oldu",
-    "downloadingFile": "{{name}}… indiriliyor",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "{{name}} konumuna taşı",
-    "diffCompareWith": "{{name}} ile diff karşılaştır",
-    "dragOutsideToDownload": "İndirmek için pencere dışına sürükleyin ({{count}} dosya)",
-    "newFolderDefault": "Yeni Klasör",
-    "newFileDefault": "Yeni Dosya.txt",
-    "successfullyMovedItems": "{{count}} öğe başarıyla {{target}} konumuna taşındı",
-    "move": "Taşı",
-    "searchInFile": "Dosyada ara (Ctrl+F)",
-    "showKeyboardShortcuts": "Klavye kısayollarını göster",
-    "decreaseFontSize": "Yazı tipi boyutunu küçült",
-    "increaseFontSize": "Yazı tipi boyutunu büyüt",
-    "startWritingMarkdown": "Markdown içeriğinizi yazmaya başlayın...",
-    "loadingFileComparison": "Dosya karşılaştırması yükleniyor...",
-    "reload": "Yeniden yükle",
-    "compare": "Karşılaştır",
-    "sideBySide": "Yan Yana",
-    "inline": "Satır İçi",
-    "fileComparison": "Dosya Karşılaştırması: {{file1}} vs {{file2}}",
-    "fileTooLarge": "Dosya çok büyük (> 10 MB) ve güvenlik nedenleriyle metin dosyası olarak açılamıyor.",
-    "sshConnectionFailed": "SSH bağlantısı başarısız oldu. Lütfen {{name}} ({{ip}}:{{port}}) ile bağlantınızı kontrol edin",
-    "loadFileFailed": "Dosya yüklenemedi: {{error}}",
-    "connecting": "Bağlanıyor...",
-    "connectedSuccessfully": "Bağlantı başarıyla kuruldu",
-    "totpVerificationFailed": "TOTP doğrulaması başarısız oldu",
-    "browserSignInFailed": "Giriş başarısız oldu. Lütfen tekrar deneyin.",
-    "authenticationFailed": "Kimlik doğrulama başarısız oldu",
-    "incorrectPassphrase": "Yanlış parola. Lütfen tekrar deneyin.",
-    "verificationCodePrompt": "Doğrulama kodu:",
-    "changePermissions": "İzinleri Değiştir",
-    "currentPermissions": "Mevcut İzinler",
-    "owner": "Sahip",
-    "group": "Grup",
-    "others": "Diğerleri",
-    "read": "Okuma",
-    "write": "Yazma",
-    "execute": "Çalıştırma",
-    "permissionsChangedSuccessfully": "İzinler başarıyla değiştirildi",
-    "failedToChangePermissions": "İzinler değiştirilemedi",
-    "name": "Ad",
-    "sortByName": "Ad",
-    "sortByDate": "Değiştirilme Tarihi",
-    "sortBySize": "Boyut",
-    "ascending": "Artan",
-    "descending": "Azalan",
-    "root": "Kök",
-    "new": "Yeni",
-    "sortBy": "Sırala",
-    "items": "Öğeler",
-    "selected": "Seçili",
-    "editor": "Düzenleyici",
-    "octal": "Sekizlik",
-    "storage": "Depolama",
-    "disk": "Disk",
-    "used": "Kullanılan",
-    "of": " / ",
-    "toggleSidebar": "Kenar Çubuğunu Göster/Gizle",
-    "compactLayout": "Kompakt düzeni kullanın.",
-    "comfortableLayout": "Rahat bir düzen kullanın.",
-    "cannotLoadPdf": "PDF yüklenemiyor",
-    "pdfLoadError": "Bu PDF dosyası yüklenirken bir hata oluştu.",
-    "loadingPdf": "PDF görüntüleyici yükleniyor...",
-    "loadingPage": "Sayfa yükleniyor...",
-    "cancel": "İptal",
-    "copiedItems_one": "Kopyalanan {{count}} öğe",
-    "copiedItems_other": "Kopyalanan {{count}} öğe",
-    "deleteCopiedFileFailed": "{{name}}kopyası silinemedi : {{error}}",
-    "dragMovedItems_one": "{{count}} öğesi {{target}} konumuna taşındı.",
-    "dragMovedItems_other": "{{count}} öğe {{target}} konumuna taşındı.",
-    "moveBackFileFailed": "{{name}} geri taşınamadı: {{error}}",
-    "terminal": "Terminal: {{host}} ({{path}})",
-    "dragToDesktop": "{{name}} dosyasını masaüstüne sürükleme",
-    "dragFilesToDesktop": "{{count}} dosyaları masaüstüne sürükleme",
-    "folderDragUnsupported": "Klasörleri masaüstüne sürükleme özelliği henüz desteklenmiyor.",
-    "saveToDesktopFailed": "Kaydetme başarısız: {{error}}",
-    "dragFailedDetail": "Sürükleme başarısız oldu: {{error}}",
-    "videoUnsupported": "Tarayıcınız bu video formatını oynatamıyor.",
-    "downloadToPlay": "Başka yerde oynamak için indirin",
-    "cannotPreviewType": "Bu dosya türünün önizlemesi yapılamıyor.",
-    "cannotPreviewTypeHint": "Bu dosya türünün önizlemesi yok. Başka bir uygulamada açmak için indirin.",
-    "loadingFile": "Dosya yükleniyor...",
-    "loadingImage": "Resim yükleniyor...",
-    "loadingEditor": "Editör yükleniyor...",
-    "loadingPreview": "Önizleme yükleniyor...",
-    "loadingAudio": "Ses oynatıcısı yükleniyor...",
-    "emptyPreview": "Henüz önizlenecek bir şey yok...",
-    "revert": "Geri al",
-    "openAsText": "Metin olarak aç",
-    "confirmOpenAsText": "Bu dosyayı metin olarak açmaya devam etmek istiyor musunuz? Bu, tarayıcınızın yavaşlamasına neden olabilir."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "İki SSH sunucusu arasında dosya aktarımı.",
-    "sourceServer": "Kaynak Sunucusu",
-    "destinationServer": "Hedef Sunucu",
-    "selectHost": "Sunucu seçin",
-    "noHostSelected": "Sunucu seçilmedi",
-    "move": "Taşı",
-    "copy": "Kopyala",
-    "upload": "Yükle",
-    "itemsSelected": "{{count}} seçilen öğe",
-    "itemsSelected_other": "{{count}} öğe seçildi",
-    "ready": "Hazır",
-    "loadingHosts": "Hostlar yükleniyor...",
-    "name": "Ad",
-    "modified": "Değiştirilme",
-    "size": "Boyut",
-    "noFiles": "Dosya yok",
-    "open": "Aç",
-    "up": "Yukarı",
-    "refresh": "Yenile",
-    "copyToTarget": "Hedef Dizine Kopyala",
-    "rename": "Yeniden adlandır",
-    "delete": "Sil",
-    "editPermissions": "Düzenleme İzinleri",
-    "createNewFolder": "Yeni Klasör Oluştur",
-    "deleteSelectedItems": "Seçili Öğeleri Sil",
-    "deleteConfirm": "Delete {{count}} selected item?",
-    "deleteConfirm_other": "Delete {{count}} selected items?",
-    "cancel": "İptal",
-    "save": "Kaydet",
-    "folderCreated": "Klasör oluşturuldu",
-    "itemRenamed": "Öğe yeniden adlandırıldı.",
-    "actionFailed": "Eylem başarısız oldu",
-    "itemsDeleted": "{{count}} öğe silindi",
-    "itemsDeleted_other": "{{count}} öğe silindi",
-    "deleteFailed": "Silme işlemi başarısız oldu.",
-    "permissionsUpdated": "İzinler güncellendi",
-    "noRemoteSessionConnected": "Bağlantı kurulmuş uzaktan oturum yok.",
-    "failedToListFiles": "Dosyaları listeleme başarısız oldu.",
-    "failedToRefresh": "Yenileme başarısız oldu",
-    "destinationInsideSource": "Hedef, seçilen kaynak yolunun içinde olamaz.",
-    "sameHostNoOp": "Kaynak ve hedef aynı klasördedir."
-  },
-  "hosts": {
-    "fileManager": "Dosya Yöneticisi",
-    "fileManagerUrlCopied": "Dosya Yöneticisi URL'si kopyalandı",
-    "copyFileManagerUrlAction": "Dosya Yöneticisi URL'sini Kopyala",
-    "docsLink": "Dokümanları görüntüle",
-    "hostNotFound": "Host bulunamadı",
-    "loadingHost": "Host yükleniyor..."
-  },
-  "onboarding": {
-    "feature_files": "Dosya yöneticisi",
-    "feature_files_desc": "Uygulamadan çıkmadan SFTP üzerinden dosyalara göz atın, yükleyin, indirin ve düzenleyin."
-  },
-  "terminal": {
-    "runTitle": "Çalıştırılıyor: {{command}} - {{host}}",
-    "terminalTitle": "Terminal - {{host}}",
-    "terminalWithPath": "Terminal - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Hedef klasörlere göz at",
-    "browsePathError": "Hedef ana bilgisayarda bu yol açılamadı.",
-    "browsePathWillBeCreated": "Bu klasör henüz mevcut değil. Aktarım başladığında oluşturulacak.",
-    "cancel": "İptal",
-    "cleanupDestFiles": "Hedefi temizle",
-    "cleanupDestFilesError": "Temizleme başarısız oldu",
-    "cleanupDestFilesNothing": "Hedefte temizlenecek bir şey yok",
-    "cleanupDestFilesPartial": "Bazı kısmi dosyalar kaldırılamadı",
-    "cleanupDestFilesSuccess": "Hedefteki kısmi dosyalar kaldırıldı",
-    "confirmCopy": "Kopyala",
-    "confirmMove": "Taşı",
-    "copyFolderToHost": "Klasörü ana bilgisayara kopyala…",
-    "copyItemsToHost": "{{count}} öğeyi sunucuya kopyala…",
-    "copyToHost": "Sunucuya kopyala…",
-    "destinationPath": "Hedef yol",
-    "destMustBeDirectory": "Çoklu öğe aktarımları için hedef bir dizin olmalıdır",
-    "goUp": "Yukarı",
-    "hostAuthRequired": "Kimlik doğrulaması gereklidir. Öncelikle bu sunucuda Dosya Yöneticisini açın.",
-    "hostConnecting": "Bağlanıyor…",
-    "hostConnectionFailed": "Bağlantı başarısız",
-    "hostDisconnected": "Bağlı değil",
-    "hostReady": "Hazır",
-    "itemsSummary": "{{count}} öğe",
-    "jumpHostLimitation": "Her iki sunucuya da Termix sunucusundan erişilebilir olmalıdır. Sunucular arası doğrudan yönlendirme desteklenmez.",
-    "methodAuto": "Otomatik",
-    "methodAutoHint": "Dosya sayısı, boyutu ve sıkıştırılabilirliğe bağlı olarak tar veya dosya başına SFTP seçer. Tek dosyalar her zaman akış SFTP'si kullanır.",
-    "methodItemSftp": "Dosya başına SFTP",
-    "methodItemSftpHint": "Her dosyayı SFTP üzerinden tek tek aktarır. Windows dahil tüm sunucularda çalışır.",
-    "methodItemSftpLimitation": "Her dosya, tek bir dosya kopyasıyla aynı SFTP akışını sırayla kullanır. İlerleme tüm dosyalar için birleştirilmiştir, bu nedenle büyük dosyalar sırasında çubuk yavaş hareket eder.",
-    "methodLabel": "Aktarım yöntemi",
-    "methodPreviewError": "Aktarım yöntemi önizlenemedi. Başlattığınızda sunucu yine de bir yöntem seçecektir.",
-    "methodPreviewLoading": "Aktarım yöntemi hesaplanıyor…",
-    "methodPreviewScanSummary": "{{fileCount}} dosya, toplam {{totalSize}} (kaynak sunucuda tarandı).",
-    "methodPreviewWillUseItemSftp": "Kullanılacak: Dosya başına SFTP",
-    "methodPreviewWillUseTar": "Kullanılacak: Tar arşivi",
-    "methodReason": {
-      "user_item_sftp": "Dosya bazında SFTP seçtiniz.",
-      "user_tar": "Tar arşivi seçtiniz.",
-      "tar_unavailable": "Tar, sunuculardan birinde veya her ikisinde de mevcut olmadığından, bunun yerine dosya bazlı SFTP kullanılacaktır.",
-      "windows_host": "Windows işletim sistemli bir sunucu söz konusu olduğundan tar kullanılmamıştır.",
-      "auto_multi_large": "Otomatik: Sıkıştırılabilir veriler içeren büyük bir dosya ({{largestSize}}) dahil olmak üzere birden fazla dosya. Tar bunları tek bir aktarımda birleştirir.",
-      "auto_single_large_in_archive": "Otomatik: Bu kümede büyük bir dosya ({{largestSize}}) var, bu yüzden dosya başına SFTP.",
-      "auto_many_incompressible": "Otomatik: Çoğunlukla sıkıştırılamayan veriler, bu nedenle dosya bazında SFTP.",
-      "auto_many_files": "Otomatik: birden fazla dosya ({{fileCount}}), tar dosya başına ek yükü azaltır.",
-      "auto_default": "Otomatik: bu küme için dosya bazında SFTP."
-    },
-    "methodTar": "Tar arşivi",
-    "methodTarHint": "Kaynakta sıkıştır, tek arşiv aktar, hedefte çıkar. Her iki Unix sunucuda tar gerektirir.",
-    "metricsCompress": "Kaynakta sıkıştırma: {{duration}}",
-    "metricsExtract": "Hedefte çıkarma: {{duration}}",
-    "metricsPrepare": "Hedefi hazırla: {{duration}}",
-    "metricsRouteBenchmark": "Rota sondası: doğrudan {{direct}}, röle {{relay}}",
-    "metricsSourceDelete": "Kaynaktan silme: {{duration}}",
-    "metricsTotal": "Toplam: {{duration}}",
-    "metricsTransfer": "Uçtan uca: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 ile doğrulandı: {{duration}}",
-    "moveFolderToHost": "Klasörü ana bilgisayara taşı…",
-    "moveItemsToHost": "{{count}} öğeyi ana bilgisayara taşı…",
-    "moveToHost": "Sunucuya taşı…",
-    "noHostsConnected": "Kullanılabilir başka dosya yöneticisi ana bilgisayarı yok.",
-    "noHostsConnectedHint": "Ana Bilgisayar Yöneticisi'nde Dosya Yöneticisi etkinleştirilmiş başka bir SSH ana bilgisayarı ekleyin.",
-    "parallelSegmentsHint": "Büyük dosyalar 256 MB'lık parçalara bölünür. Çoklu yollar, daha yüksek toplam aktarım hızı için ayrı bağlantılar kullanır (birden fazla aktarım başlatmak gibi).",
-    "parallelSegmentsLabel": "Paralel aktarım yolları",
-    "parallelSegmentsOption": "{{count}} yol",
-    "progressBenchmarking": "En hızlı aktarma rotasını seçme…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "İptal",
-    "progressCancelling": "İptal ediliyor…",
-    "progressCompressing": "Kaynak sunucuda sıkıştırılıyor…",
-    "progressExtracting": "Hedefte çıkarılıyor…",
-    "progressItems": "{{current}} / {{total}} dosya",
-    "progressReconnecting": "Yeniden bağlanılıyor…",
-    "progressStalled": "Askıda",
-    "progressTotalSpeed": "{{speed}} toplam ({{lanes}} yol)",
-    "progressTransferring": "Veri aktarılıyor…",
-    "progressTransferringItems": "Dosyalar aktarılıyor ({{current}} / {{total}})…",
-    "progressVerifying": "Dosya bütünlüğünün doğrulanması…",
-    "recentDestinations": "Son hedefler",
-    "resumedHint": "Başka bir pencerede başlatılan aktif bir aktarıma yeniden bağlanıldı.",
-    "retryTransfer": "Yeniden dene",
-    "retryTransferError": "Yeniden deneme başarısız oldu",
-    "selectDestinationHost": "Hedef ana bilgisayarı seçin",
-    "transferCancelled": "Aktarım iptal edildi",
-    "transferCancelledCopyHint": "Hedefte kısmi dosyalar kalabilir.",
-    "transferCancelledMoveHint": "Hedefte kısmi dosyalar kalabilir. Kaynak dosyalar silinmedi.",
-    "transferError": "Aktarım başarısız",
-    "transferFailedRetryHint": "Hedefte kısmi veri tutuldu. Bağlantı geri geldiğinde yeniden deneme devam edecek.",
-    "transferPartialHint": "Aktarılamadı: {{paths}}",
-    "transferSuccess": "Aktarım tamamlandı",
-    "metricsHopSourceRead": "Kaynak → sunucu: {{throughput}}",
-    "metricsHopDestSftpWrite": "Sunucu → hedef (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Sunucu → hedef (yerel): {{throughput}}"
-  },
-  "plugin": {
-    "name": "Dosya Yöneticisi"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/uk_UA.json b/plugins/file-manager/locales/translated/uk_UA.json
deleted file mode 100644
index 08528bcbb..000000000
--- a/plugins/file-manager/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Файли",
-    "sftp": "SFTP",
-    "openFileManager": "Відкрити файловий менеджер"
-  },
-  "permissions": {
-    "use": {
-      "title": "Використовуйте файловий менеджер",
-      "description": "Переглядайте, редагуйте та передайте файли через SFTP."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Увімкнути файловий менеджер",
-        "description": "Переглядайте та редагуйте файли на цьому хості через SFTP."
-      },
-      "defaultPath": {
-        "label": "Шлях за замовчуванням"
-      },
-      "scpLegacy": {
-        "label": "Застарілий режим SCP"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Одночасна передача файлів",
-        "description": "Скільки файлів одночасно завантажує або вивантажує локальний/віддалений менеджер. Зменште це значення, якщо ваш сервер обмежує кількість каналів SFTP."
-      },
-      "confirmBeforeTrash": {
-        "label": "Підтвердити перед переміщенням файлів у кошик",
-        "description": "Запитувати перед переміщенням віддалених файлів до кошика. Для остаточного видалення все одно потрібне підтвердження."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Файловий менеджер"
-  },
-  "fileManager": {
-    "noHostSelected": "Хост не вибрано",
-    "initializingEditor": "Ініціалізація редактора...",
-    "file": "Файл",
-    "folder": "Папка",
-    "uploadFile": "Завантажити файл",
-    "downloadFile": "Завантажити",
-    "extractArchive": "Витягти архів",
-    "extractingArchive": "Видобування {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} успішно видобуто",
-    "extractFailed": "Не вдалося витягти",
-    "compressFile": "Стиснути файл",
-    "compressFiles": "Стиснути файли",
-    "compressFilesDesc": "Стиснути {{count}} елементів в архів",
-    "archiveName": "Назва архіву",
-    "enterArchiveName": "Введіть назву архіву...",
-    "compressionFormat": "Формат стиснення",
-    "selectedFiles": "Вибрані файли",
-    "andMoreFiles": "та {{count}} більше...",
-    "compress": "Стиснути",
-    "compressingFiles": "Стискання {{count}} елементів у {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} успішно створено",
-    "compressFailed": "Стиснення не вдалося",
-    "edit": "Редагувати",
-    "preview": "Попередній перегляд",
-    "previous": "Попередній",
-    "next": "Далі",
-    "pageXOfY": "Сторінка {{current}} з {{total}}",
-    "zoomOut": "Зменшити масштаб",
-    "zoomIn": "Збільшити масштаб",
-    "newFile": "Новий файл",
-    "newFolder": "Нова папка",
-    "rename": "Перейменувати",
-    "uploading": "Завантаження...",
-    "uploadingFile": "Завантаження {{name}}...",
-    "uploadingChunk": "Завантаження {{name}}: {{percent}}% (частина {{chunk}} з {{total}})",
-    "fileName": "Ім'я файлу",
-    "folderName": "Назва папки",
-    "fileUploadedSuccessfully": "Файл «{{name}}» успішно завантажено",
-    "failedToUploadFile": "Не вдалося завантажити файл",
-    "uploadingFolderFiles": "Завантаження {{count}} файлів...",
-    "uploadedFolderFiles": "Успішно завантажено {{count}} файл(ів)",
-    "uploadedFolderPartial": "Завантажено {{uploaded}} файл(ів), {{failed}} не вдалося",
-    "fileDownloadedSuccessfully": "Файл «{{name}}» успішно завантажено",
-    "failedToDownloadFile": "Не вдалося завантажити файл",
-    "fileCreatedSuccessfully": "Файл «{{name}}» успішно створено",
-    "folderCreatedSuccessfully": "Папка «{{name}}» успішно створена",
-    "failedToCreateItem": "Не вдалося створити елемент",
-    "operationFailed": "Операція {{operation}} не вдалася для {{name}}: {{error}}",
-    "failedToResolveSymlink": "Не вдалося вирішити проблему з символічним посиланням",
-    "itemsDeletedSuccessfully": "{{count}} елементів успішно видалено",
-    "failedToDeleteItems": "Не вдалося видалити елементи",
-    "sudoPasswordRequired": "Потрібен пароль адміністратора",
-    "enterSudoPassword": "Введіть пароль sudo, щоб продовжити цю операцію",
-    "sudoPassword": "Пароль Sudo",
-    "sudoOperationFailed": "Операція Sudo не вдалася",
-    "sudoAuthFailed": "Не вдалося виконати автентифікацію Sudo",
-    "dragFilesToUpload": "Перетягніть сюди файли для завантаження",
-    "dropToUploadHere": "Перетягніть сюди, щоб завантажити",
-    "dropToDownloadHere": "Перетягніть сюди, щоб завантажити",
-    "localFiles": "Місцевий",
-    "showLocalFiles": "Показати локальні файли (розділений вигляд)",
-    "hideLocalFiles": "Приховати локальні файли",
-    "localHome": "Домашня папка",
-    "localPathPlaceholder": "Шлях до локальної папки",
-    "localShowHidden": "Показати приховані файли",
-    "localHideHidden": "Приховати приховані файли",
-    "localRevealInFileManager": "Показати в системному файловому менеджері",
-    "localCannotOpenFolder": "Не вдається відкрити папку",
-    "localItemCount": "{{count}} елементів",
-    "localSelectedCount": "{{count}} вибрано",
-    "back": "Назад",
-    "forward": "Вперед",
-    "up": "Вгору",
-    "kind": "Вид",
-    "localUploadingProgress": "Завантаження {{current}} з {{total}}",
-    "localDownloadingProgress": "Завантаження {{current}} з {{total}}",
-    "localTransferInFlight": "{{count}} одразу",
-    "localPreparingDownload": "Підготовка завантаження...",
-    "localTransferCancelled": "Переказ скасовано",
-    "localNothingToTransfer": "Нічого для перенесення",
-    "localUploadComplete": "Завантажено {{count}} файл(ів)",
-    "localUploadFailed": "Не вдалося завантажити",
-    "localUploadPartial": "Завантажено {{done}} файл(ів), {{failed}} не вдалося",
-    "localDownloadComplete": "Завантажено {{count}} файл(ів)",
-    "localDownloadFailed": "Завантаження не вдалося",
-    "localDownloadPartial": "Завантажено {{done}} файл(ів), {{failed}} не вдалося",
-    "localReplaceExistingPrompt": "{{count}} елементів вже є в цій папці. Замінити їх?",
-    "localReplace": "Замінити",
-    "localSkipExisting": "Пропустити",
-    "localSkippedExisting": "Пропущено {{count}} існуючих елементів",
-    "localUnsafeNamesSkipped": "Пропущено {{count}} елементів, назви яких не можна використовувати на цьому комп’ютері",
-    "localOpen": "ВІДЧИНЕНО",
-    "localOpenFolder": "Відкрити папку",
-    "localUploadToRemote": "Завантажити на сервер",
-    "localUploadToRemoteMany": "Завантажити {{count}} елементів на сервер",
-    "localMoveToTrash": "Перемістити в кошик",
-    "localMoveToTrashMany": "Перемістити {{count}} елементів до кошика",
-    "localTrashConfirmSingle": "Перемістити \"{{name}}\" до кошика?",
-    "localTrashConfirmFolder": "Перемістити папку «{{name}}» та весь її вміст до кошика?",
-    "localTrashConfirmMany": "Перемістити {{count}} елементів до кошика?",
-    "localTrashed": "Переміщено {{count}} елементів до кошика",
-    "localTrashFailed": "Не вдалося перемістити в кошик",
-    "localRenameFailed": "Не вдалося перейменувати",
-    "localCreateFailed": "Не вдалося створити елемент",
-    "goToParentFolder": "Перейти до батьківської папки",
-    "resizeSidebar": "Перетягніть, щоб змінити розмір бічної панелі (двічі клацніть, щоб скинути налаштування)",
-    "resizeLocalPane": "Перетягніть, щоб змінити розмір локальної панелі (двічі клацніть, щоб скинути налаштування)",
-    "columns": "Колонки",
-    "columnsHint": "Клацніть правою кнопкою миші, щоб вибрати стовпці",
-    "emptyFolder": "Ця папка порожня",
-    "searchFiles": "Пошук файлів...",
-    "upload": "Завантажити",
-    "selectHostToStart": "Виберіть хост, щоб розпочати керування файлами",
-    "sshRequiredForFileManager": "Файловий менеджер вимагає SSH. На цьому хості SSH не ввімкнено.",
-    "failedToConnect": "Не вдалося підключитися до SSH",
-    "failedToLoadDirectory": "Не вдалося завантажити каталог",
-    "noSSHConnection": "SSH-з'єднання недоступне",
-    "copy": "Копіювати",
-    "cut": "Вирізати",
-    "paste": "Вставити",
-    "copyPath": "Копіювати шлях",
-    "copyPaths": "Копіювати шляхи",
-    "delete": "Видалити",
-    "properties": "Властивості",
-    "refresh": "Оновити",
-    "downloadFiles": "Завантажити {{count}} файлів у браузер",
-    "copyFiles": "Копіювати {{count}} елементів",
-    "cutFiles": "Вирізати {{count}} елементів",
-    "deleteFiles": "Видалити {{count}} елементів",
-    "filesCopiedToClipboard": "{{count}} елементів, скопійованих у буфер обміну",
-    "filesCutToClipboard": "{{count}} елементів, вирізаних у буфер обміну",
-    "pathCopiedToClipboard": "Шлях скопійовано в буфер обміну",
-    "pathsCopiedToClipboard": "{{count}} шляхів скопійовано в буфер обміну",
-    "failedToCopyPath": "Не вдалося скопіювати шлях до буфера обміну",
-    "copyFolderLink": "Копіювати посилання до папки",
-    "copyCurrentFolderLink": "Копіювати посилання до поточної папки",
-    "folderLinkCopied": "Посилання на папку скопійовано в буфер обміну",
-    "failedToCopyFolderLink": "Не вдалося скопіювати посилання на папку",
-    "movedItems": "Переміщено {{count}} елементів",
-    "failedToDeleteItem": "Не вдалося видалити елемент",
-    "itemRenamedSuccessfully": "{{type}} успішно перейменовано",
-    "failedToRenameItem": "Не вдалося перейменувати елемент",
-    "download": "Завантажити",
-    "openExternalEditor": "Відкрити зовні",
-    "chooseExternalEditor": "Виберіть зовнішній редактор",
-    "externalEditorSelected": "Вибрано зовнішнього редактора",
-    "externalEditorDesktopOnly": "Зовнішній редактор доступний лише в настільній програмі",
-    "externalEditorOpened": "Відкрито в зовнішньому редакторі. Збереження там завантажить зміни назад на сервер.",
-    "failedToOpenExternalEditor": "Не вдалося відкрити зовнішній редактор",
-    "failedToSelectExternalEditor": "Не вдалося вибрати зовнішній редактор",
-    "permissions": "Дозволи",
-    "size": "Розмір",
-    "modified": "Змінено",
-    "path": "Шлях",
-    "confirmDelete": "Ви впевнені, що хочете видалити {{name}}?",
-    "permissionDenied": "Дозвіл відхилено",
-    "serverError": "Помилка сервера",
-    "fileSavedSuccessfully": "Файл успішно збережено",
-    "failedToSaveFile": "Не вдалося зберегти файл",
-    "confirmDeleteSingleItem": "Ви впевнені, що хочете остаточно видалити \"{{name}}\"?",
-    "confirmDeleteMultipleItems": "Ви впевнені, що хочете остаточно видалити {{count}} елементів?",
-    "confirmDeleteMultipleItemsWithFolders": "Ви впевнені, що хочете остаточно видалити {{count}} елементів? Це стосується папок та їхнього вмісту.",
-    "confirmDeleteFolder": "Ви впевнені, що хочете остаточно видалити папку «{{name}}» та весь її вміст?",
-    "permanentDeleteWarning": "Цю дію неможливо скасувати. Елемент(и) буде назавжди видалено із сервера.",
-    "moveToTrashWarning": "Елемент(и) буде переміщено до кошика Termix і може бути відновлено до закінчення терміну зберігання.",
-    "itemsMovedToTrash": "{{count}} елементів переміщено до кошика",
-    "trash": "Сміття",
-    "trashDescription": "Видалені елементи зберігаються на цьому хості протягом {{days}} днів.",
-    "trashLoadFailed": "Не вдалося завантажити кошик",
-    "trashEmpty": "Кошик порожній",
-    "trashRestore": "Відновити",
-    "trashRestored": "Відновлено {{name}}",
-    "trashRestoreFailed": "Не вдалося відновити елемент. Можливо, початковий шлях уже існує.",
-    "trashDeletePermanently": "Видалити назавжди",
-    "trashDeleteConfirm": "Видалити {{name}}назавжди? Цю дію не можна скасувати.",
-    "trashPermanentlyDeleted": "Видалено назавжди {{name}}",
-    "trashDeleteFailed": "Не вдалося остаточно видалити елемент",
-    "trashEmptyAction": "Очистити кошик",
-    "trashEmptyConfirm": "Видалити всі елементи з кошика назавжди? Цю дію не можна скасувати.",
-    "trashEmptied": "Кошик очищено",
-    "trashRetention": "Автоматичне очищення через (дні)",
-    "trashRetentionSaved": "Збереження кошика оновлено",
-    "trashRetentionFailed": "Не вдалося оновити налаштування зберігання в кошику",
-    "trashUnavailableConfirm": "Цей елемент не можна перемістити до кошика, зазвичай тому, що він знаходиться в іншій файловій системі або потребує підвищених прав. Видалити його назавжди?",
-    "recent": "Нещодавні",
-    "pinned": "Закріплено",
-    "folderShortcuts": "Ярлики папок",
-    "failedToReconnectSSH": "Не вдалося відновити сеанс SSH",
-    "openTerminalHere": "Відкрити термінал тут",
-    "run": "Бігти",
-    "openTerminalInFolder": "Відкрити термінал у цій папці",
-    "openTerminalInFileLocation": "Відкрити термінал у місці розташування файлу",
-    "runningFile": "Біг – {{file}}",
-    "onlyRunExecutableFiles": "Можна запускати лише виконувані файли",
-    "directories": "Довідники",
-    "removedFromRecentFiles": "Видалено \"{{name}}\" з останніх файлів",
-    "removeFailed": "Видалити не вдалося",
-    "unpinnedSuccessfully": "Відкріплено \"{{name}}\" успішно",
-    "unpinFailed": "Не вдалося відкріпити",
-    "removedShortcut": "Видалено ярлик «{{name}}»",
-    "removeShortcutFailed": "Не вдалося видалити ярлик",
-    "clearedAllRecentFiles": "Очищено всі нещодавні файли",
-    "clearFailed": "Очистити не вдалося",
-    "removeFromRecentFiles": "Видалити з останніх файлів",
-    "clearAllRecentFiles": "Очистити всі нещодавні файли",
-    "unpinFile": "Відкріпити файл",
-    "removeShortcut": "Видалити ярлик",
-    "pinFile": "Закріпити файл",
-    "addToShortcuts": "Додати до ярликів",
-    "pasteFailed": "Вставити не вдалося",
-    "noUndoableActions": "Немає дій, які можна скасувати",
-    "undoCopySuccess": "Скасовано копіювання: Видалено {{count}} скопійованих файлів",
-    "undoCopyFailedDelete": "Не вдалося скасувати: не вдалося видалити жодного скопійованого файлу",
-    "undoCopyFailedNoInfo": "Не вдалося скасувати: не вдалося знайти інформацію про скопійований файл",
-    "undoMoveSuccess": "Скасовано операцію переміщення: {{count}} файлів переміщено назад у початкове розташування",
-    "undoMoveFailedMove": "Не вдалося скасувати: не вдалося перемістити жодного файлу назад",
-    "undoMoveFailedNoInfo": "Не вдалося скасувати: не вдалося знайти інформацію про переміщений файл",
-    "undoDeleteNotSupported": "Операцію видалення неможливо скасувати: файли остаточно видалено із сервера",
-    "undoTypeNotSupported": "Непідтримуваний тип операції скасування",
-    "undoOperationFailed": "Не вдалося скасувати операцію",
-    "unknownError": "Невідома помилка",
-    "confirm": "Підтвердити",
-    "find": "Знайти...",
-    "replace": "Замінити",
-    "downloadInstead": "Завантажити замість цього",
-    "keyboardShortcuts": "Комбінації клавіш",
-    "searchAndReplace": "Пошук і заміна",
-    "editing": "Редагування",
-    "search": "Пошук",
-    "findNext": "Знайти далі",
-    "findPrevious": "Знайти попередній",
-    "save": "Зберегти",
-    "selectAll": "Вибрати все",
-    "undo": "Скасувати",
-    "redo": "Повторити",
-    "moveLineUp": "Перемістити лінію вгору",
-    "moveLineDown": "Перемістити рядок вниз",
-    "toggleComment": "Перемикач коментарів",
-    "autoComplete": "Автоматичне завершення",
-    "imageLoadError": "Не вдалося завантажити зображення",
-    "startTyping": "Почніть друкувати...",
-    "unknownSize": "Невідомий розмір",
-    "fileIsEmpty": "Файл порожній",
-    "largeFileWarning": "Попередження про великий файл",
-    "largeFileWarningDesc": "Розмір цього файлу становить {{size}} , що може спричинити проблеми з продуктивністю під час відкриття його як тексту.",
-    "fileNotFoundAndRemoved": "Файл «{{name}}» не знайдено та видалено з нещодавніх/закріплених файлів",
-    "failedToLoadFile": "Не вдалося завантажити файл: {{error}}",
-    "serverErrorOccurred": "Сталася помилка сервера. Будь ласка, спробуйте пізніше.",
-    "autoSaveFailed": "Не вдалося автоматично зберегти",
-    "fileAutoSaved": "Файл автоматично збережено",
-    "moveFileFailed": "Не вдалося перемістити {{name}}",
-    "moveOperationFailed": "Не вдалося перемістити",
-    "canOnlyCompareFiles": "Можна порівняти лише два файли",
-    "comparingFiles": "Порівняння файлів: {{file1}} та {{file2}}",
-    "dragFailed": "Не вдалося перетягнути",
-    "filePinnedSuccessfully": "Файл «{{name}}» успішно закріплено",
-    "pinFileFailed": "Не вдалося закріпити файл",
-    "fileUnpinnedSuccessfully": "Файл «{{name}}» успішно відкріплено",
-    "unpinFileFailed": "Не вдалося відкріпити файл",
-    "shortcutAddedSuccessfully": "Ярлик папки «{{name}}» успішно додано",
-    "addShortcutFailed": "Не вдалося додати ярлик",
-    "operationCompletedSuccessfully": "{{operation}} {{count}} елементів успішно",
-    "operationCompleted": "{{operation}} {{count}} елементів",
-    "downloadFileSuccess": "Файл {{name}} успішно завантажено",
-    "downloadFileFailed": "Завантаження не вдалося",
-    "downloadingFile": "Завантаження {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Перейти до {{name}}",
-    "diffCompareWith": "Різниця у порівнянні з {{name}}",
-    "dragOutsideToDownload": "Перетягніть за межі вікна, щоб завантажити ({{count}} файлів)",
-    "newFolderDefault": "НоваПапка",
-    "newFileDefault": "НовийФайл.txt",
-    "successfullyMovedItems": "Елементів {{count}} успішно переміщено до {{target}}",
-    "move": "Перемістити",
-    "searchInFile": "Пошук у файлі (Ctrl+F)",
-    "showKeyboardShortcuts": "Показати комбінації клавіш",
-    "decreaseFontSize": "Зменшити розмір шрифту",
-    "increaseFontSize": "Збільшити розмір шрифту",
-    "startWritingMarkdown": "Почніть писати свій контент у форматі Markdown...",
-    "loadingFileComparison": "Завантаження порівняння файлів...",
-    "reload": "Перезавантажити",
-    "compare": "Порівняти",
-    "sideBySide": "Пліч-о-пліч",
-    "inline": "Вбудований",
-    "fileComparison": "Порівняння файлів: {{file1}} проти {{file2}}",
-    "fileTooLarge": "Файл занадто великий (> 10 МБ) і не може бути відкритий як текст з міркувань безпеки.",
-    "sshConnectionFailed": "Помилка SSH-з’єднання. Будь ласка, перевірте ваше з’єднання з {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Не вдалося завантажити файл: {{error}}",
-    "connecting": "Підключення...",
-    "connectedSuccessfully": "Підключено успішно",
-    "totpVerificationFailed": "Не вдалося перевірити TOTP",
-    "browserSignInFailed": "Не вдалося ввійти. Спробуйте ще раз.",
-    "authenticationFailed": "Помилка автентифікації",
-    "incorrectPassphrase": "Неправильна парольна фраза. Спробуйте ще раз.",
-    "verificationCodePrompt": "Код підтвердження:",
-    "changePermissions": "Змінити дозволи",
-    "currentPermissions": "Поточні дозволи",
-    "owner": "Власник",
-    "group": "Група",
-    "others": "Інші",
-    "read": "Читати",
-    "write": "Написати",
-    "execute": "Виконати",
-    "permissionsChangedSuccessfully": "Дозволи успішно змінено",
-    "failedToChangePermissions": "Не вдалося змінити дозволи",
-    "name": "Ім'я",
-    "sortByName": "Ім'я",
-    "sortByDate": "Дата зміни",
-    "sortBySize": "Розмір",
-    "ascending": "Зростаючий",
-    "descending": "Спадання",
-    "root": "Корінь",
-    "new": "Новий",
-    "sortBy": "Сортувати за",
-    "items": "Елементи",
-    "selected": "Вибрано",
-    "editor": "Редактор",
-    "octal": "Вісімкове",
-    "storage": "Зберігання",
-    "disk": "Диск",
-    "used": "Використано",
-    "of": "з",
-    "toggleSidebar": "Перемикання бічної панелі",
-    "compactLayout": "Використовуйте компактний макет",
-    "comfortableLayout": "Використовуйте зручний макет",
-    "cannotLoadPdf": "Не вдається завантажити PDF",
-    "pdfLoadError": "Під час завантаження цього PDF-файлу сталася помилка.",
-    "loadingPdf": "Завантаження засобу перегляду PDF-файлів...",
-    "loadingPage": "Завантаження сторінки...",
-    "cancel": "Скасувати",
-    "copiedItems_one": "Скопійовано елемент {{count}}",
-    "copiedItems_other": "Скопійовано {{count}} елементів",
-    "deleteCopiedFileFailed": "Не вдалося видалити копію {{name}}: {{error}}",
-    "dragMovedItems_one": "Переміщено елемент {{count}} до {{target}}",
-    "dragMovedItems_other": "Переміщено {{count}} елементів до {{target}}",
-    "moveBackFileFailed": "Не вдалося перемістити {{name}} назад: {{error}}",
-    "terminal": "Термінал: {{host}} ({{path}})",
-    "dragToDesktop": "Перетягування {{name}} на робочий стіл",
-    "dragFilesToDesktop": "Перетягування файлів {{count}} на робочий стіл",
-    "folderDragUnsupported": "Перетягування папок на робочий стіл поки що не підтримується",
-    "saveToDesktopFailed": "Не вдалося зберегти: {{error}}",
-    "dragFailedDetail": "Не вдалося перетягнути: {{error}}",
-    "videoUnsupported": "Ваш браузер не може відтворити цей відеоформат.",
-    "downloadToPlay": "Завантажте, щоб відтворити деінде",
-    "cannotPreviewType": "Неможливо переглянути цей тип файлу",
-    "cannotPreviewTypeHint": "Цей тип файлу не має попереднього перегляду. Завантажте його, щоб відкрити в іншій програмі.",
-    "loadingFile": "Завантаження файлу...",
-    "loadingImage": "Завантаження зображення...",
-    "loadingEditor": "Завантаження редактора...",
-    "loadingPreview": "Завантаження попереднього перегляду...",
-    "loadingAudio": "Завантаження аудіоплеєра...",
-    "emptyPreview": "Поки що нічого для попереднього перегляду...",
-    "revert": "Повернути",
-    "openAsText": "Відкрити як текст",
-    "confirmOpenAsText": "Ви хочете продовжити відкривати цей файл як текст? Це може уповільнити роботу вашого браузера."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "Передача файлів між двома SSH-хостами.",
-    "sourceServer": "Вихідний сервер",
-    "destinationServer": "Цільовий сервер",
-    "selectHost": "Виберіть хоста",
-    "noHostSelected": "Хост не вибрано",
-    "move": "Перемістити",
-    "copy": "Копіювати",
-    "upload": "Завантажити",
-    "itemsSelected": "Вибрано елемент {{count}}",
-    "itemsSelected_other": "Вибрано {{count}} елементів",
-    "ready": "Готовий",
-    "loadingHosts": "Завантаження хостів...",
-    "name": "Ім'я",
-    "modified": "Змінено",
-    "size": "Розмір",
-    "noFiles": "Немає файлів",
-    "open": "ВІДЧИНЕНО",
-    "up": "Вгору",
-    "refresh": "Оновити",
-    "copyToTarget": "Копіювати до цільового каталогу",
-    "rename": "Перейменувати",
-    "delete": "Видалити",
-    "editPermissions": "Редагувати дозволи",
-    "createNewFolder": "Створити нову папку",
-    "deleteSelectedItems": "Видалити вибрані елементи",
-    "deleteConfirm": "Видалити {{count}} вибраний елемент?",
-    "deleteConfirm_other": "Видалити {{count}} вибраних елементів?",
-    "cancel": "Скасувати",
-    "save": "Зберегти",
-    "folderCreated": "Папку створено",
-    "itemRenamed": "Елемент перейменовано",
-    "actionFailed": "Дія не вдалася",
-    "itemsDeleted": "{{count}} елемент видалено",
-    "itemsDeleted_other": "{{count}} елементів видалено",
-    "deleteFailed": "Видалити не вдалося",
-    "permissionsUpdated": "Дозволи оновлено",
-    "noRemoteSessionConnected": "Немає підключеного віддаленого сеансу",
-    "failedToListFiles": "Не вдалося переглянути файли",
-    "failedToRefresh": "Не вдалося оновити",
-    "destinationInsideSource": "Пункт призначення не може бути всередині вибраного вихідного шляху.",
-    "sameHostNoOp": "Джерело та призначення – це одна й та сама папка."
-  },
-  "hosts": {
-    "fileManager": "Файловий менеджер",
-    "fileManagerUrlCopied": "URL-адресу файлового менеджера скопійовано",
-    "copyFileManagerUrlAction": "Копіювати URL-адресу файлового менеджера",
-    "docsLink": "Переглянути документи",
-    "hostNotFound": "Хост не знайдено",
-    "loadingHost": "Завантаження хоста..."
-  },
-  "onboarding": {
-    "feature_files": "Файловий менеджер",
-    "feature_files_desc": "Переглядайте, завантажуйте, вивантажуйте та редагуйте файли через SFTP, не виходячи з програми."
-  },
-  "terminal": {
-    "runTitle": "Запуск {{command}} - {{host}}",
-    "terminalTitle": "Термінал - {{host}}",
-    "terminalWithPath": "Термінал - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Перегляд папок призначення",
-    "browsePathError": "Не вдалося відкрити цей шлях на хості призначення.",
-    "browsePathWillBeCreated": "Цієї папки ще не існує. Вона буде створена, коли розпочнеться передача.",
-    "cancel": "Скасувати",
-    "cleanupDestFiles": "Прибирання місця призначення",
-    "cleanupDestFilesError": "Очищення не вдалося",
-    "cleanupDestFilesNothing": "Нічого прибирати на місці призначення",
-    "cleanupDestFilesPartial": "Не вдалося видалити деякі часткові файли",
-    "cleanupDestFilesSuccess": "Видалено часткові файли з місця призначення",
-    "confirmCopy": "Копіювати",
-    "confirmMove": "Перемістити",
-    "copyFolderToHost": "Копіювати папку на хост…",
-    "copyItemsToHost": "Копіювати елементи {{count}} для розміщення…",
-    "copyToHost": "Копіювати на хост…",
-    "destinationPath": "Шлях призначення",
-    "destMustBeDirectory": "Для перенесення кількох елементів місцем призначення має бути каталог",
-    "goUp": "Піднімися",
-    "hostAuthRequired": "Потрібна автентифікація. Спочатку відкрийте файловий менеджер на цьому хості.",
-    "hostConnecting": "Підключення…",
-    "hostConnectionFailed": "Помилка підключення",
-    "hostDisconnected": "Не підключено",
-    "hostReady": "Готовий",
-    "itemsSummary": "{{count}} елементів",
-    "jumpHostLimitation": "Обидва хости мають бути доступні з сервера Termix. Пряма маршрутизація між хостами не підтримується.",
-    "methodAuto": "Авто",
-    "methodAutoHint": "Вибирає tar-файл або SFTP для кожного файлу на основі кількості файлів, розміру та стискальності. Окремі файли завжди використовують потоковий SFTP.",
-    "methodItemSftp": "SFTP для кожного файлу",
-    "methodItemSftpHint": "Передавайте кожен файл окремо через SFTP. Працює на всіх хостах, включаючи Windows.",
-    "methodItemSftpLimitation": "Кожен файл використовує той самий потік SFTP, що й копія окремого файлу, послідовно. Прогрес об'єднується для всіх файлів, тому шкала рухається повільно під час роботи з великими файлами.",
-    "methodLabel": "Спосіб переказу",
-    "methodPreviewError": "Не вдалося переглянути метод передачі. Сервер все одно вибере метод під час запуску.",
-    "methodPreviewLoading": "Розрахунок методу переказу…",
-    "methodPreviewScanSummary": "{{fileCount}} файлів, {{totalSize}} всього (проскановано на вихідному хості).",
-    "methodPreviewWillUseItemSftp": "Буде використовуватися: SFTP для кожного файлу",
-    "methodPreviewWillUseTar": "Буде використано: архів Tar",
-    "methodReason": {
-      "user_item_sftp": "Ви обрали SFTP для кожного файлу.",
-      "user_tar": "Ви обрали tar-архів.",
-      "tar_unavailable": "Архів TAR недоступний на одному або обох хостах, тому замість нього буде використовуватися SFTP для кожного файлу.",
-      "windows_host": "Задіяний хост Windows, тому tar не використовується.",
-      "auto_multi_large": "Авто: кілька файлів, включаючи великий файл ({{largestSize}}) зі стислими даними. Tar об'єднує їх в одну передачу.",
-      "auto_single_large_in_archive": "Авто: один великий файл ({{largestSize}}) у цьому наборі, тому SFTP для кожного файлу.",
-      "auto_many_incompressible": "Авто: переважно нестисливі дані, тому SFTP для кожного файлу.",
-      "auto_many_files": "Авто: багато файлів ({{fileCount}}), tar зменшує накладні витрати на кожен файл.",
-      "auto_default": "Авто: SFTP для кожного файлу для цього набору."
-    },
-    "methodTar": "Архів Tar",
-    "methodTarHint": "Стиснення у вихідному коді, перенесення одного архіву, розпакування у кінцевому. Потрібен tar-архів на обох хостах Unix.",
-    "metricsCompress": "Стиснути у вихідному коді: {{duration}}",
-    "metricsExtract": "Вилучити в місці призначення: {{duration}}",
-    "metricsPrepare": "Підготувати пункт призначення: {{duration}}",
-    "metricsRouteBenchmark": "Зонд маршруту: прямий {{direct}}, ретрансляційний {{relay}}",
-    "metricsSourceDelete": "Видалити з джерела: {{duration}}",
-    "metricsTotal": "Всього: {{duration}}",
-    "metricsTransfer": "Від кінця до кінця: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 перевірено: {{duration}}",
-    "moveFolderToHost": "Перемістити папку на хост…",
-    "moveItemsToHost": "Перемістити {{count}} елементів на хост…",
-    "moveToHost": "Перемістити на хост…",
-    "noHostsConnected": "Інших хостів файлових менеджерів немає.",
-    "noHostsConnectedHint": "Додайте ще один SSH-хост з увімкненим файловим менеджером у Host Manager.",
-    "parallelSegmentsHint": "Великі файли розділяються на фрагменти по 256 МБ. Кілька ліній використовують окремі з’єднання (наприклад, запуск кількох передач) для підвищення загальної пропускної здатності.",
-    "parallelSegmentsLabel": "Паралельні пересадочні смуги",
-    "parallelSegmentsOption": "{{count}} смуги",
-    "progressBenchmarking": "Вибір найшвидшого маршруту пересадки…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Скасувати",
-    "progressCancelling": "Скасування…",
-    "progressCompressing": "Стиснення на вихідному хості…",
-    "progressExtracting": "Видобування в місці призначення…",
-    "progressItems": "{{current}} / {{total}} файли",
-    "progressReconnecting": "Повторне підключення…",
-    "progressStalled": "Зупинився",
-    "progressTotalSpeed": "{{speed}} всього ({{lanes}} смуг)",
-    "progressTransferring": "Передача даних…",
-    "progressTransferringItems": "Передача файлів ({{current}} з {{total}})…",
-    "progressVerifying": "Перевірка цілісності файлу…",
-    "recentDestinations": "Нещодавні напрямки",
-    "resumedHint": "Повторне підключення до активної передачі, розпочатої в іншому вікні.",
-    "retryTransfer": "Повторити спробу",
-    "retryTransferError": "Повторна спроба не вдалася",
-    "selectDestinationHost": "Виберіть хост призначення",
-    "transferCancelled": "Переказ скасовано",
-    "transferCancelledCopyHint": "Часткові файли можуть залишатися на місці призначення.",
-    "transferCancelledMoveHint": "Часткові файли можуть залишатися в місці призначення. Вихідні файли не видалено.",
-    "transferError": "Передача не вдалася",
-    "transferFailedRetryHint": "На місці призначення збережено частку даних. Повторна спроба відновиться після відновлення з’єднання.",
-    "transferPartialHint": "Не вдалося перенести: {{paths}}",
-    "transferSuccess": "Перенесення завершено",
-    "metricsHopSourceRead": "Джерело → сервер: {{throughput}}",
-    "metricsHopDestSftpWrite": "Сервер → призначення (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Сервер → призначення (локальний): {{throughput}}"
-  },
-  "plugin": {
-    "name": "Файловий менеджер"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/vi_VN.json b/plugins/file-manager/locales/translated/vi_VN.json
deleted file mode 100644
index 6809a42e0..000000000
--- a/plugins/file-manager/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "Tệp",
-    "sftp": "SFTP",
-    "openFileManager": "Mở quản lý tệp"
-  },
-  "permissions": {
-    "use": {
-      "title": "Sử dụng trình quản lý tệp",
-      "description": "Duyệt, chỉnh sửa và chuyển file qua SFTP."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Bật Trình quản lý tập tin",
-        "description": "Duyệt và chỉnh sửa tệp trên máy chủ này qua SFTP."
-      },
-      "defaultPath": {
-        "label": "Đường dẫn mặc định"
-      },
-      "scpLegacy": {
-        "label": "Chế độ SCP cũ"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "Truyền tệp đồng thời",
-        "description": "Số lượng tệp mà trình quản lý cục bộ/từ xa song song tải lên hoặc tải xuống cùng lúc. Giảm giá trị này nếu máy chủ của bạn giới hạn số kênh SFTP."
-      },
-      "confirmBeforeTrash": {
-        "label": "Xác nhận trước khi chuyển tập tin vào thùng rác.",
-        "description": "Hãy hỏi ý kiến trước khi chuyển các tệp từ xa vào thùng rác. Việc xóa vĩnh viễn vẫn cần sự xác nhận."
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "Trình quản lý file"
-  },
-  "fileManager": {
-    "noHostSelected": "Chưa chọn máy chủ",
-    "initializingEditor": "Đang khởi tạo trình soạn thảo...",
-    "file": "Tệp",
-    "folder": "Thư mục",
-    "uploadFile": "Tải tệp lên",
-    "downloadFile": "Tải xuống",
-    "extractArchive": "Giải nén lưu trữ",
-    "extractingArchive": "Đang giải nén {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} đã được giải nén thành công",
-    "extractFailed": "Giải nén thất bại",
-    "compressFile": "Nén tập tin",
-    "compressFiles": "Nén tập tin",
-    "compressFilesDesc": "Nén {{count}} mục vào một tệp nén",
-    "archiveName": "Tên tệp lưu trữ",
-    "enterArchiveName": "Nhập tên tệp lưu trữ...",
-    "compressionFormat": "Định dạng nén",
-    "selectedFiles": "Tập tin đã chọn",
-    "andMoreFiles": "và {{count}} tập tin khác...",
-    "compress": "Nén",
-    "compressingFiles": "Đang nén {{count}} mục vào {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} đã được tạo thành công",
-    "compressFailed": "Nén thất bại",
-    "edit": "Chỉnh sửa",
-    "preview": "Xem trước",
-    "previous": "Trước",
-    "next": "Tiếp",
-    "pageXOfY": "Trang {{current}} / {{total}}",
-    "zoomOut": "Thu nhỏ",
-    "zoomIn": "Phóng to",
-    "newFile": "Tập tin mới",
-    "newFolder": "Thư mục mới",
-    "rename": "Đổi tên",
-    "uploading": "Đang tải lên...",
-    "uploadingFile": "Đang tải lên {{name}}...",
-    "uploadingChunk": "Đang tải lên {{name}}: {{percent}}% (một phần của {{chunk}} của {{total}})",
-    "fileName": "Tên tập tin",
-    "folderName": "Tên thư mục",
-    "fileUploadedSuccessfully": "Tập tin \"{{name}}\" đã được tải lên thành công",
-    "failedToUploadFile": "Tải tập tin lên thất bại",
-    "uploadingFolderFiles": "Đang tải lên {{count}} tập tin...",
-    "uploadedFolderFiles": "Đã tải lên {{count}} tập tin thành công",
-    "uploadedFolderPartial": "Đã tải lên {{uploaded}} tập tin, {{failed}} thất bại",
-    "fileDownloadedSuccessfully": "Tập tin \"{{name}}\" đã được tải xuống thành công",
-    "failedToDownloadFile": "Tải tập tin xuống thất bại",
-    "fileCreatedSuccessfully": "Tập tin \"{{name}}\" đã được tạo thành công",
-    "folderCreatedSuccessfully": "Thư mục \"{{name}}\" đã được tạo thành công",
-    "failedToCreateItem": "Không thể tạo mục",
-    "operationFailed": "Thao tác {{operation}} thất bại đối với {{name}}: {{error}}",
-    "failedToResolveSymlink": "Không thể theo dõi symlink",
-    "itemsDeletedSuccessfully": "Đã xóa thành công {{count}} mục",
-    "failedToDeleteItems": "Không thể xóa các mục",
-    "sudoPasswordRequired": "Yêu cầu mật khẩu quản trị",
-    "enterSudoPassword": "Nhập mật khẩu sudo để tiếp tục thao tác này",
-    "sudoPassword": "Mật khẩu sudo",
-    "sudoOperationFailed": "Thao tác sudo thất bại",
-    "sudoAuthFailed": "Xác thực sudo thất bại",
-    "dragFilesToUpload": "Kéo tệp vào đây để tải lên",
-    "dropToUploadHere": "Kéo thả để tải lên tại đây",
-    "dropToDownloadHere": "Kéo thả để tải xuống tại đây",
-    "localFiles": "Cục bộ",
-    "showLocalFiles": "Hiển thị các tệp cục bộ (chế độ chia đôi màn hình)",
-    "hideLocalFiles": "Ẩn các tệp cục bộ",
-    "localHome": "Thư mục trang chủ",
-    "localPathPlaceholder": "Đường dẫn thư mục cục bộ",
-    "localShowHidden": "Hiển thị các tệp ẩn",
-    "localHideHidden": "Ẩn các tệp tin ẩn",
-    "localRevealInFileManager": "Hiển thị trong trình quản lý tệp hệ thống",
-    "localCannotOpenFolder": "Không thể mở thư mục",
-    "localItemCount": "{{count}} mục",
-    "localSelectedCount": "{{count}} đã chọn",
-    "back": "Quay lại",
-    "forward": "Phía trước",
-    "up": "Hướng lên",
-    "kind": "Loại",
-    "localUploadingProgress": "Đang tải lên {{current}} trong số {{total}}",
-    "localDownloadingProgress": "Đang tải xuống {{current}} của {{total}}",
-    "localTransferInFlight": "{{count}} ngay lập tức",
-    "localPreparingDownload": "Đang chuẩn bị tải xuống...",
-    "localTransferCancelled": "Đã hủy chuyển",
-    "localNothingToTransfer": "Không có gì để chuyển",
-    "localUploadComplete": "Đã tải lên {{count}} tập tin",
-    "localUploadFailed": "Tải lên thất bại",
-    "localUploadPartial": "Đã tải lên {{done}} tập tin, {{failed}} thất bại",
-    "localDownloadComplete": "Đã tải xuống {{count}} tập tin",
-    "localDownloadFailed": "Tải xuống thất bại",
-    "localDownloadPartial": "Đã tải xuống {{done}} tập tin, {{failed}} thất bại",
-    "localReplaceExistingPrompt": "{{count}} mục đã tồn tại trong thư mục này. Bạn có muốn thay thế chúng không?",
-    "localReplace": "Thay thế",
-    "localSkipExisting": "Nhảy",
-    "localSkippedExisting": "Đã bỏ qua {{count}} mục hiện có",
-    "localUnsafeNamesSkipped": "Đã bỏ qua {{count}} mục có tên không thể sử dụng trên máy tính này",
-    "localOpen": "Mở",
-    "localOpenFolder": "Mở thư mục",
-    "localUploadToRemote": "Tải lên máy chủ",
-    "localUploadToRemoteMany": "Tải lên {{count}} mục lên máy chủ",
-    "localMoveToTrash": "Chuyển vào thùng rác",
-    "localMoveToTrashMany": "Di chuyển {{count}} mục vào Thùng rác",
-    "localTrashConfirmSingle": "Di chuyển \"{{name}}\" vào Thùng rác?",
-    "localTrashConfirmFolder": "Di chuyển thư mục \"{{name}}\" và tất cả nội dung bên trong vào Thùng rác?",
-    "localTrashConfirmMany": "Di chuyển {{count}} mục vào Thùng rác?",
-    "localTrashed": "Đã chuyển {{count}} mục vào Thùng rác",
-    "localTrashFailed": "Không thể chuyển vào Thùng rác",
-    "localRenameFailed": "Đổi tên không thành công",
-    "localCreateFailed": "Không thể tạo mục",
-    "goToParentFolder": "Đi đến thư mục cha",
-    "resizeSidebar": "Kéo để thay đổi kích thước thanh bên (nhấp đúp để đặt lại về kích thước ban đầu)",
-    "resizeLocalPane": "Kéo chuột để thay đổi kích thước khung cục bộ (nhấp đúp chuột để đặt lại về kích thước ban đầu)",
-    "columns": "Cột",
-    "columnsHint": "Nhấp chuột phải để chọn cột",
-    "emptyFolder": "Thư mục này trống",
-    "searchFiles": "Tìm kiếm tệp...",
-    "upload": "Tải lên",
-    "selectHostToStart": "Chọn máy chủ để bắt đầu quản lý tệp",
-    "sshRequiredForFileManager": "Trình quản lý tệp yêu cầu SSH. Máy chủ này không bật SSH.",
-    "failedToConnect": "Kết nối SSH thất bại",
-    "failedToLoadDirectory": "Không thể tải thư mục",
-    "noSSHConnection": "Không có kết nối SSH",
-    "copy": "Sao chép",
-    "cut": "Cắt",
-    "paste": "Dán",
-    "copyPath": "Sao chép đường dẫn",
-    "copyPaths": "Sao chép các đường dẫn",
-    "delete": "Xóa",
-    "properties": "Thuộc tính",
-    "refresh": "Làm mới",
-    "downloadFiles": "Tải {{count}} tệp xuống trình duyệt",
-    "copyFiles": "Sao chép {{count}} mục",
-    "cutFiles": "Cắt {{count}} mục",
-    "deleteFiles": "Xóa {{count}} mục",
-    "filesCopiedToClipboard": "Đã sao chép {{count}} mục vào clipboard",
-    "filesCutToClipboard": "Đã cắt {{count}} mục vào clipboard",
-    "pathCopiedToClipboard": "Đã sao chép đường dẫn vào clipboard",
-    "pathsCopiedToClipboard": "Đã sao chép {{count}} đường dẫn vào clipboard",
-    "failedToCopyPath": "Không thể sao chép đường dẫn vào clipboard",
-    "copyFolderLink": "Sao chép liên kết đến thư mục",
-    "copyCurrentFolderLink": "Sao chép liên kết đến thư mục hiện tại",
-    "folderLinkCopied": "Đã sao chép liên kết thư mục vào clipboard",
-    "failedToCopyFolderLink": "Không thể sao chép liên kết thư mục",
-    "movedItems": "Đã di chuyển {{count}} mục",
-    "failedToDeleteItem": "Không thể xóa mục",
-    "itemRenamedSuccessfully": "Đã đổi tên {{type}} thành công",
-    "failedToRenameItem": "Không thể đổi tên mục",
-    "download": "Tải xuống",
-    "openExternalEditor": "Mở bên ngoài",
-    "chooseExternalEditor": "Chọn trình soạn thảo bên ngoài",
-    "externalEditorSelected": "Đã chọn trình soạn thảo bên ngoài",
-    "externalEditorDesktopOnly": "Trình soạn thảo bên ngoài chỉ khả dụng trong ứng dụng desktop",
-    "externalEditorOpened": "Đã mở bằng trình soạn thảo bên ngoài. Lưu ở đó sẽ tải các thay đổi lên máy chủ.",
-    "failedToOpenExternalEditor": "Không thể mở trình soạn thảo bên ngoài",
-    "failedToSelectExternalEditor": "Không thể chọn trình soạn thảo bên ngoài",
-    "permissions": "Quyền",
-    "size": "Kích thước",
-    "modified": "Đã sửa",
-    "path": "Đường dẫn",
-    "confirmDelete": "Bạn có chắc chắn muốn xóa {{name}}?",
-    "permissionDenied": "Quyền bị từ chối",
-    "serverError": "Lỗi máy chủ",
-    "fileSavedSuccessfully": "Đã lưu tệp thành công",
-    "failedToSaveFile": "Không thể lưu tệp",
-    "confirmDeleteSingleItem": "Bạn có chắc chắn muốn xóa vĩnh viễn \"{{name}}\"?",
-    "confirmDeleteMultipleItems": "Bạn có chắc chắn muốn xóa vĩnh viễn {{count}} mục?",
-    "confirmDeleteMultipleItemsWithFolders": "Bạn có chắc chắn muốn xóa vĩnh viễn {{count}} mục? Điều này bao gồm các thư mục và nội dung của chúng.",
-    "confirmDeleteFolder": "Bạn có chắc chắn muốn xóa vĩnh viễn thư mục \"{{name}}\" và tất cả nội dung của nó?",
-    "permanentDeleteWarning": "Hành động này không thể hoàn tác. (Các) mục sẽ bị xóa vĩnh viễn khỏi máy chủ.",
-    "moveToTrashWarning": "Các mục này sẽ được chuyển vào Thùng rác Termix và có thể được khôi phục trước khi thời hạn lưu giữ hết hạn.",
-    "itemsMovedToTrash": "{{count}} mục đã được chuyển vào Thùng rác",
-    "trash": "Rác",
-    "trashDescription": "Các mục đã xóa sẽ được lưu giữ trong {{days}} ngày trên máy chủ này.",
-    "trashLoadFailed": "Không thể tải Thùng rác",
-    "trashEmpty": "Thùng rác trống",
-    "trashRestore": "Khôi phục",
-    "trashRestored": "Đã khôi phục {{name}}",
-    "trashRestoreFailed": "Không thể khôi phục mục. Đường dẫn gốc có thể đã tồn tại.",
-    "trashDeletePermanently": "Xóa vĩnh viễn",
-    "trashDeleteConfirm": "Xóa vĩnh viễn {{name}}? Thao tác này không thể hoàn tác.",
-    "trashPermanentlyDeleted": "Đã xóa vĩnh viễn {{name}}",
-    "trashDeleteFailed": "Không thể xóa mục vĩnh viễn",
-    "trashEmptyAction": "Đổ rác",
-    "trashEmptyConfirm": "Xóa vĩnh viễn mọi mục trong Thùng rác? Thao tác này không thể hoàn tác.",
-    "trashEmptied": "Thùng rác đã được đổ",
-    "trashRetention": "Tự động dọn dẹp sau (ngày)",
-    "trashRetentionSaved": "Cập nhật thời gian lưu trữ rác",
-    "trashRetentionFailed": "Không thể cập nhật thời gian lưu trữ thùng rác.",
-    "trashUnavailableConfirm": "Không thể chuyển mục này vào Thùng rác, thường là do nó nằm trên hệ thống tệp khác hoặc yêu cầu quyền quản trị. Thay vào đó, hãy xóa vĩnh viễn mục này?",
-    "recent": "Gần đây",
-    "pinned": "Đã ghim",
-    "folderShortcuts": "Lối tắt thư mục",
-    "failedToReconnectSSH": "Không thể kết nối lại phiên SSH",
-    "openTerminalHere": "Mở terminal tại đây",
-    "run": "Chạy",
-    "openTerminalInFolder": "Mở terminal trong thư mục này",
-    "openTerminalInFileLocation": "Mở terminal tại vị trí tệp",
-    "runningFile": "Đang chạy - {{file}}",
-    "onlyRunExecutableFiles": "Chỉ chạy được tệp thực thi",
-    "directories": "Thư mục",
-    "removedFromRecentFiles": "Đã xóa \"{{name}}\" khỏi tệp gần đây",
-    "removeFailed": "Xóa thất bại",
-    "unpinnedSuccessfully": "Đã bỏ ghim \"{{name}}\" thành công",
-    "unpinFailed": "Bỏ ghim thất bại",
-    "removedShortcut": "Đã xóa lối tắt \"{{name}}\"",
-    "removeShortcutFailed": "Xóa lối tắt thất bại",
-    "clearedAllRecentFiles": "Đã xóa toàn bộ tệp gần đây",
-    "clearFailed": "Xóa thất bại",
-    "removeFromRecentFiles": "Xóa khỏi tệp gần đây",
-    "clearAllRecentFiles": "Xóa toàn bộ tệp gần đây",
-    "unpinFile": "Bỏ ghim tệp",
-    "removeShortcut": "Xóa lối tắt",
-    "pinFile": "Ghim tệp",
-    "addToShortcuts": "Thêm vào lối tắt",
-    "pasteFailed": "Dán thất bại",
-    "noUndoableActions": "Không có hành động hoàn tác được",
-    "undoCopySuccess": "Đã hoàn tác sao chép: Đã xóa {{count}} tệp đã sao chép",
-    "undoCopyFailedDelete": "Hoàn tác thất bại: Không thể xóa tệp đã sao chép",
-    "undoCopyFailedNoInfo": "Hoàn tác thất bại: Không tìm thấy thông tin tệp đã sao chép",
-    "undoMoveSuccess": "Đã hoàn tác di chuyển: Đã di chuyển {{count}} tệp về vị trí ban đầu",
-    "undoMoveFailedMove": "Hoàn tác thất bại: Không thể di chuyển tệp về vị trí cũ",
-    "undoMoveFailedNoInfo": "Hoàn tác thất bại: Không tìm thấy thông tin tệp đã di chuyển",
-    "undoDeleteNotSupported": "Không thể hoàn tác xóa: Tệp đã bị xóa vĩnh viễn khỏi máy chủ",
-    "undoTypeNotSupported": "Loại thao tác hoàn tác không được hỗ trợ",
-    "undoOperationFailed": "Thao tác hoàn tác thất bại",
-    "unknownError": "Lỗi không xác định",
-    "confirm": "Xác nhận",
-    "find": "Tìm kiếm...",
-    "replace": "Thay thế",
-    "downloadInstead": "Tải xuống thay thế",
-    "keyboardShortcuts": "Phím tắt",
-    "searchAndReplace": "Tìm & Thay thế",
-    "editing": "Chỉnh sửa",
-    "search": "Tìm kiếm",
-    "findNext": "Tìm tiếp",
-    "findPrevious": "Tìm trước",
-    "save": "Lưu",
-    "selectAll": "Chọn tất cả",
-    "undo": "Hoàn tác",
-    "redo": "Làm lại",
-    "moveLineUp": "Di chuyển dòng lên",
-    "moveLineDown": "Di chuyển dòng xuống",
-    "toggleComment": "Chuyển đổi chú thích",
-    "autoComplete": "Tự động hoàn thành",
-    "imageLoadError": "Lỗi tải ảnh",
-    "startTyping": "Bắt đầu nhập...",
-    "unknownSize": "Kích thước không xác định",
-    "fileIsEmpty": "Tệp trống",
-    "largeFileWarning": "Cảnh báo tệp lớn",
-    "largeFileWarningDesc": "Tệp này có kích thước {{size}}, có thể gây ra vấn đề hiệu suất khi mở dưới dạng văn bản.",
-    "fileNotFoundAndRemoved": "Tệp \"{{name}}\" không tìm thấy và đã bị xóa khỏi tệp gần đây/đã ghim",
-    "failedToLoadFile": "Lỗi tải tệp: {{error}}",
-    "serverErrorOccurred": "Đã xảy ra lỗi máy chủ. Vui lòng thử lại sau.",
-    "autoSaveFailed": "Tự động lưu không thành công",
-    "fileAutoSaved": "Tệp đã được tự động lưu",
-    "moveFileFailed": "Không thể di chuyển {{name}}",
-    "moveOperationFailed": "Thao tác di chuyển không thành công",
-    "canOnlyCompareFiles": "Chỉ có thể so sánh hai tệp",
-    "comparingFiles": "Đang so sánh tệp: {{file1}} và {{file2}}",
-    "dragFailed": "Thao tác kéo không thành công",
-    "filePinnedSuccessfully": "Tệp \"{{name}}\" đã được ghim thành công",
-    "pinFileFailed": "Không thể ghim tệp",
-    "fileUnpinnedSuccessfully": "Tệp \"{{name}}\" đã được bỏ ghim thành công",
-    "unpinFileFailed": "Không thể bỏ ghim tệp",
-    "shortcutAddedSuccessfully": "Đã thêm lối tắt thư mục \"{{name}}\" thành công",
-    "addShortcutFailed": "Không thể thêm lối tắt",
-    "operationCompletedSuccessfully": "Đã {{operation}} thành công {{count}} mục",
-    "operationCompleted": "Đã {{operation}} {{count}} mục",
-    "downloadFileSuccess": "Đã tải xuống tệp {{name}} thành công",
-    "downloadFileFailed": "Tải xuống thất bại",
-    "downloadingFile": "Đang tải xuống {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "Di chuyển tới {{name}}",
-    "diffCompareWith": "So sánh khác biệt với {{name}}",
-    "dragOutsideToDownload": "Kéo ra ngoài cửa sổ để tải xuống ({{count}} tệp)",
-    "newFolderDefault": "Thư mục mới",
-    "newFileDefault": "Tệp mới.txt",
-    "successfullyMovedItems": "Đã di chuyển thành công {{count}} mục tới {{target}}",
-    "move": "Di chuyển",
-    "searchInFile": "Tìm trong tệp (Ctrl+F)",
-    "showKeyboardShortcuts": "Hiển thị phím tắt",
-    "decreaseFontSize": "Giảm cỡ chữ",
-    "increaseFontSize": "Tăng cỡ chữ",
-    "startWritingMarkdown": "Bắt đầu viết nội dung markdown...",
-    "loadingFileComparison": "Đang tải so sánh tệp...",
-    "reload": "Tải lại",
-    "compare": "So sánh",
-    "sideBySide": "Song song",
-    "inline": "Trong dòng",
-    "fileComparison": "So sánh tệp: {{file1}} vs {{file2}}",
-    "fileTooLarge": "Tệp quá lớn (> 10MB) và không thể mở dưới dạng văn bản vì lý do bảo mật.",
-    "sshConnectionFailed": "Kết nối SSH thất bại. Vui lòng kiểm tra kết nối tới {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Không thể tải tệp: {{error}}",
-    "connecting": "Đang kết nối...",
-    "connectedSuccessfully": "Đã kết nối thành công",
-    "totpVerificationFailed": "Xác minh TOTP thất bại",
-    "browserSignInFailed": "Đăng nhập không thành công. Vui lòng thử lại.",
-    "authenticationFailed": "Xác thực thất bại",
-    "incorrectPassphrase": "Cụm mật khẩu không đúng. Vui lòng thử lại.",
-    "verificationCodePrompt": "Mã xác minh:",
-    "changePermissions": "Thay đổi quyền",
-    "currentPermissions": "Quyền hiện tại",
-    "owner": "Chủ sở hữu",
-    "group": "Nhóm",
-    "others": "Khác",
-    "read": "Đọc",
-    "write": "Ghi",
-    "execute": "Thực thi",
-    "permissionsChangedSuccessfully": "Thay đổi quyền thành công",
-    "failedToChangePermissions": "Không thể thay đổi quyền",
-    "name": "Tên",
-    "sortByName": "Tên",
-    "sortByDate": "Ngày sửa đổi",
-    "sortBySize": "Kích thước",
-    "ascending": "Tăng dần",
-    "descending": "Giảm dần",
-    "root": "Thư mục gốc",
-    "new": "Mới",
-    "sortBy": "Sắp xếp theo",
-    "items": "Mục",
-    "selected": "Đã chọn",
-    "editor": "Soạn thảo",
-    "octal": "Bát phân",
-    "storage": "Lưu trữ",
-    "disk": "Đĩa",
-    "used": "Đã dùng",
-    "of": "của",
-    "toggleSidebar": "Ẩn/Hiện thanh bên",
-    "compactLayout": "Sử dụng bố cục nhỏ gọn",
-    "comfortableLayout": "Sử dụng bố cục thoải mái",
-    "cannotLoadPdf": "Không thể tải PDF",
-    "pdfLoadError": "Đã xảy ra lỗi khi tải tệp PDF này.",
-    "loadingPdf": "Đang tải trình xem PDF...",
-    "loadingPage": "Đang tải trang...",
-    "cancel": "Hủy",
-    "copiedItems_one": "Đã sao chép mục {{count}}",
-    "copiedItems_other": "Đã sao chép {{count}} mục",
-    "deleteCopiedFileFailed": "Không thể xóa bản sao của {{name}}: {{error}}",
-    "dragMovedItems_one": "Đã di chuyển mục {{count}} đến {{target}}",
-    "dragMovedItems_other": "Đã di chuyển {{count}} mục đến {{target}}",
-    "moveBackFileFailed": "Không thể di chuyển {{name}} trở lại: {{error}}",
-    "terminal": "Thiết bị đầu cuối: {{host}} ({{path}})",
-    "dragToDesktop": "Kéo {{name}} ra màn hình nền",
-    "dragFilesToDesktop": "Kéo {{count}} tập tin ra màn hình nền",
-    "folderDragUnsupported": "Hiện tại, tính năng kéo thả thư mục ra màn hình nền chưa được hỗ trợ.",
-    "saveToDesktopFailed": "Lưu thất bại: {{error}}",
-    "dragFailedDetail": "Kéo thả thất bại: {{error}}",
-    "videoUnsupported": "Trình duyệt của bạn không thể phát định dạng video này.",
-    "downloadToPlay": "Tải xuống để chơi ở nơi khác",
-    "cannotPreviewType": "Không thể xem trước loại tệp này",
-    "cannotPreviewTypeHint": "Loại tệp này không có bản xem trước. Hãy tải xuống để mở bằng ứng dụng khác.",
-    "loadingFile": "Đang tải tập tin...",
-    "loadingImage": "Đang tải hình ảnh...",
-    "loadingEditor": "Đang tải trình chỉnh sửa...",
-    "loadingPreview": "Đang tải bản xem trước...",
-    "loadingAudio": "Đang tải trình phát âm thanh...",
-    "emptyPreview": "Hiện chưa có gì để xem trước...",
-    "revert": "Hoàn tác",
-    "openAsText": "Mở dưới dạng văn bản",
-    "confirmOpenAsText": "Bạn có muốn tiếp tục mở tệp này dưới dạng văn bản không? Việc này có thể làm chậm trình duyệt của bạn."
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "Truyền tệp giữa hai máy chủ SSH.",
-    "sourceServer": "Máy chủ nguồn",
-    "destinationServer": "Máy chủ đích",
-    "selectHost": "Chọn máy chủ",
-    "noHostSelected": "Chưa chọn máy chủ",
-    "move": "Di chuyển",
-    "copy": "Sao chép",
-    "upload": "Tải lên",
-    "itemsSelected": "{{count}} mục đã chọn",
-    "itemsSelected_other": "{{count}} mục đã chọn",
-    "ready": "Sẵn sàng",
-    "loadingHosts": "Đang tải các máy chủ...",
-    "name": "Tên",
-    "modified": "Đã sửa",
-    "size": "Kích thước",
-    "noFiles": "Không có tệp nào",
-    "open": "Mở",
-    "up": "Hướng lên",
-    "refresh": "Làm mới",
-    "copyToTarget": "Sao chép vào thư mục đích",
-    "rename": "Đổi tên",
-    "delete": "Xóa",
-    "editPermissions": "Chỉnh sửa quyền",
-    "createNewFolder": "Tạo thư mục mới",
-    "deleteSelectedItems": "Xóa các mục đã chọn",
-    "deleteConfirm": "Xóa mục đã chọn {{count}}?",
-    "deleteConfirm_other": "Xóa {{count}} mục đã chọn?",
-    "cancel": "Hủy",
-    "save": "Lưu",
-    "folderCreated": "Thư mục đã được tạo",
-    "itemRenamed": "Mục đã được đổi tên",
-    "actionFailed": "Hành động thất bại",
-    "itemsDeleted": "{{count}} mục đã bị xóa",
-    "itemsDeleted_other": "{{count}} mục đã bị xóa",
-    "deleteFailed": "Xóa không thành công",
-    "permissionsUpdated": "Quyền hạn đã được cập nhật",
-    "noRemoteSessionConnected": "Không có phiên kết nối từ xa nào được thiết lập.",
-    "failedToListFiles": "Không thể liệt kê các tệp.",
-    "failedToRefresh": "Không thể làm mới",
-    "destinationInsideSource": "Đường dẫn đích không được nằm bên trong đường dẫn nguồn đã chọn.",
-    "sameHostNoOp": "Thư mục nguồn và thư mục đích đều nằm trong cùng một thư mục."
-  },
-  "hosts": {
-    "fileManager": "Trình quản lý tệp",
-    "fileManagerUrlCopied": "Đã sao chép URL Trình quản lý tệp",
-    "copyFileManagerUrlAction": "Sao chép URL File Manager",
-    "docsLink": "Xem tài liệu",
-    "hostNotFound": "Không tìm thấy máy chủ",
-    "loadingHost": "Đang tải máy chủ..."
-  },
-  "onboarding": {
-    "feature_files": "Trình quản lý tập tin",
-    "feature_files_desc": "Duyệt, tải lên, tải xuống và chỉnh sửa tệp qua SFTP mà không cần rời khỏi ứng dụng."
-  },
-  "terminal": {
-    "runTitle": "Đang chạy {{command}} - {{host}}",
-    "terminalTitle": "Terminal - {{host}}",
-    "terminalWithPath": "Terminal - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "Duyệt thư mục đích",
-    "browsePathError": "Không thể mở đường dẫn này trên máy chủ đích.",
-    "browsePathWillBeCreated": "Thư mục này chưa tồn tại. Nó sẽ được tạo khi truyền tải bắt đầu.",
-    "cancel": "Hủy",
-    "cleanupDestFiles": "Dọn dẹp đích",
-    "cleanupDestFilesError": "Dọn dẹp thất bại",
-    "cleanupDestFilesNothing": "Không có gì để dọn dẹp ở đích",
-    "cleanupDestFilesPartial": "Không thể xóa một số tệp chưa hoàn chỉnh",
-    "cleanupDestFilesSuccess": "Đã xóa các tệp chưa hoàn chỉnh ở đích",
-    "confirmCopy": "Sao chép",
-    "confirmMove": "Di chuyển",
-    "copyFolderToHost": "Sao chép thư mục tới máy chủ…",
-    "copyItemsToHost": "Sao chép {{count}} mục đến máy chủ…",
-    "copyToHost": "Sao chép đến máy chủ…",
-    "destinationPath": "Đường dẫn đích",
-    "destMustBeDirectory": "Đích phải là thư mục khi truyền tải nhiều mục",
-    "goUp": "Lên trên",
-    "hostAuthRequired": "Cần xác thực. Trước tiên hãy mở Trình quản lý tập tin trên máy chủ này.",
-    "hostConnecting": "Đang kết nối…",
-    "hostConnectionFailed": "Kết nối thất bại",
-    "hostDisconnected": "Chưa kết nối",
-    "hostReady": "Sẵn sàng",
-    "itemsSummary": "{{count}} mục",
-    "jumpHostLimitation": "Cả hai máy chủ phải có thể truy cập từ máy chủ Termix. Không hỗ trợ định tuyến trực tiếp giữa các máy.",
-    "methodAuto": "Tự động",
-    "methodAutoHint": "Chọn tar hoặc SFTP từng tệp dựa trên số lượng tệp, kích thước và khả năng nén. Tệp đơn lẻ luôn dùng SFTP truyền luồng.",
-    "methodItemSftp": "SFTP từng tệp",
-    "methodItemSftpHint": "Truyền từng tệp riêng lẻ qua SFTP. Hoạt động trên mọi máy, bao gồm Windows.",
-    "methodItemSftpLimitation": "Mỗi tệp sử dụng cùng một luồng SFTP như bản sao tệp đơn lẻ, lần lượt từng tệp một. Tiến trình được gộp chung cho tất cả tệp, do đó thanh tiến trình di chuyển chậm khi có tệp lớn.",
-    "methodLabel": "Phương thức truyền",
-    "methodPreviewError": "Không thể xem trước phương thức truyền. Máy chủ vẫn sẽ chọn phương thức khi bạn bắt đầu.",
-    "methodPreviewLoading": "Đang tính toán phương thức truyền…",
-    "methodPreviewScanSummary": "{{fileCount}} tệp, tổng {{totalSize}} (đã quét trên máy nguồn).",
-    "methodPreviewWillUseItemSftp": "Sẽ dùng: SFTP từng tệp",
-    "methodPreviewWillUseTar": "Sẽ dùng: Lưu trữ tar",
-    "methodReason": {
-      "user_item_sftp": "Bạn đã chọn SFTP từng tệp.",
-      "user_tar": "Bạn đã chọn dùng tar.",
-      "tar_unavailable": "Định dạng Tar không khả dụng trên một hoặc cả hai máy chủ, vì vậy thay vào đó sẽ sử dụng SFTP cho từng tệp.",
-      "windows_host": "Vì đây là máy chủ Windows nên không sử dụng lệnh tar.",
-      "auto_multi_large": "Tự động: nhiều tệp bao gồm một tệp lớn ({{largestSize}}) với dữ liệu có thể nén. Tar sẽ đóng gói chúng thành một lần truyền.",
-      "auto_single_large_in_archive": "Tự động: một tập tin lớn ({{largestSize}}) trong bộ này, vì vậy SFTP theo từng tập tin.",
-      "auto_many_incompressible": "Chế độ tự động: phần lớn dữ liệu không thể nén được, nên cần SFTP cho từng tệp riêng biệt.",
-      "auto_many_files": "Tự động: nhiều tệp ({{fileCount}}), tar giảm chi phí xử lý trên mỗi tệp.",
-      "auto_default": "Tự động: SFTP từng tệp cho tập này."
-    },
-    "methodTar": "Lưu trữ tar",
-    "methodTarHint": "Nén tại nguồn, truyền một tệp lưu trữ, giải nén tại đích. Yêu cầu tar trên cả hai máy Unix.",
-    "metricsCompress": "Nén tại nguồn: {{duration}}",
-    "metricsExtract": "Giải nén tại đích: {{duration}}",
-    "metricsPrepare": "Chuẩn bị đích: {{duration}}",
-    "metricsRouteBenchmark": "Đầu dò tuyến đường: trực tiếp {{direct}}, chuyển tiếp {{relay}}",
-    "metricsSourceDelete": "Xóa khỏi nguồn: {{duration}}",
-    "metricsTotal": "Tổng: {{duration}}",
-    "metricsTransfer": "Toàn trình: {{throughput}} ({{duration}})",
-    "metricsVerify": "Đã xác thực SHA-256: {{duration}}",
-    "moveFolderToHost": "Di chuyển thư mục tới máy chủ…",
-    "moveItemsToHost": "Di chuyển {{count}} mục tới máy chủ…",
-    "moveToHost": "Di chuyển đến máy chủ…",
-    "noHostsConnected": "Không có máy chủ nào khác có Trình quản lý tệp khả dụng.",
-    "noHostsConnectedHint": "Thêm một máy chủ SSH khác đã bật Trình quản lý tệp trong Trình quản lý máy chủ.",
-    "parallelSegmentsHint": "Các tệp lớn được chia thành các khối 256 MB. Nhiều làn sử dụng các kết nối riêng biệt (như khởi chạy nhiều lần truyền) để tăng tổng thông lượng.",
-    "parallelSegmentsLabel": "Làn truyền song song",
-    "parallelSegmentsOption": "{{count}} làn",
-    "progressBenchmarking": "Chọn tuyến đường chuyển tiếp nhanh nhất…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "Hủy",
-    "progressCancelling": "Đang hủy…",
-    "progressCompressing": "Đang nén trên máy nguồn…",
-    "progressExtracting": "Đang giải nén tại đích…",
-    "progressItems": "{{current}} / {{total}} tệp",
-    "progressReconnecting": "Đang kết nối lại…",
-    "progressStalled": "Đình trệ",
-    "progressTotalSpeed": "{{speed}} tổng ({{lanes}} làn)",
-    "progressTransferring": "Đang truyền dữ liệu…",
-    "progressTransferringItems": "Đang truyền tệp ({{current}}/{{total}})…",
-    "progressVerifying": "Đang xác minh tính toàn vẹn của tệp…",
-    "recentDestinations": "Đích gần đây",
-    "resumedHint": "Đã kết nối lại với một tác vụ chuyển đang hoạt động được bắt đầu từ cửa sổ khác.",
-    "retryTransfer": "Thử lại",
-    "retryTransferError": "Thử lại thất bại",
-    "selectDestinationHost": "Chọn máy chủ đích",
-    "transferCancelled": "Đã hủy chuyển",
-    "transferCancelledCopyHint": "Các tệp chưa hoàn chỉnh có thể còn ở đích.",
-    "transferCancelledMoveHint": "Các tệp chưa hoàn chỉnh có thể còn ở đích. Tệp nguồn chưa bị xóa.",
-    "transferError": "Truyền tải thất bại",
-    "transferFailedRetryHint": "Dữ liệu chưa hoàn chỉnh được giữ ở đích. Thử lại sẽ tiếp tục khi kết nối được khôi phục.",
-    "transferPartialHint": "Không thể truyền tải: {{paths}}",
-    "transferSuccess": "Truyền tải hoàn tất",
-    "metricsHopSourceRead": "Nguồn → máy chủ: {{throughput}}",
-    "metricsHopDestSftpWrite": "Máy chủ → đích (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "Máy chủ → đích (cục bộ): {{throughput}}"
-  },
-  "plugin": {
-    "name": "Trình quản lý file"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/zh_CN.json b/plugins/file-manager/locales/translated/zh_CN.json
deleted file mode 100644
index 1250d7f5a..000000000
--- a/plugins/file-manager/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "文件",
-    "sftp": "SFTP",
-    "openFileManager": "打开文件管理器"
-  },
-  "permissions": {
-    "use": {
-      "title": "使用文件管理器",
-      "description": "通过 SFTP 浏览、编辑和传输文件。"
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "启用文件管理器",
-        "description": "通过 SFTP 浏览和编辑此主机上的文件。"
-      },
-      "defaultPath": {
-        "label": "默认路径"
-      },
-      "scpLegacy": {
-        "label": "SCP 传统模式"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "同时文件传输",
-        "description": "本地/远程并排管理器同时上传或下载的文件数量。如果您的服务器限制 SFTP 通道，请降低此值。"
-      },
-      "confirmBeforeTrash": {
-        "label": "请确认后再将文件移至回收站",
-        "description": "将远程文件移至回收站前请先询问。永久删除仍需确认。"
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "文件管理器"
-  },
-  "fileManager": {
-    "noHostSelected": "未选择主机",
-    "initializingEditor": "正在初始化编辑器...",
-    "file": "文件",
-    "folder": "文件夹",
-    "uploadFile": "上传文件",
-    "downloadFile": "下载",
-    "extractArchive": "解压归档文件",
-    "extractingArchive": "正在解压 {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} 解压成功",
-    "extractFailed": "解压失败",
-    "compressFile": "压缩文件",
-    "compressFiles": "压缩文件",
-    "compressFilesDesc": "将 {{count}} 个项目压缩成一个归档文件",
-    "archiveName": "归档名称",
-    "enterArchiveName": "输入归档名称...",
-    "compressionFormat": "压缩格式",
-    "selectedFiles": "已选文件",
-    "andMoreFiles": "还有 {{count}} 个...",
-    "compress": "压缩",
-    "compressingFiles": "正在将 {{count}} 个项目压缩成 {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} 创建成功",
-    "compressFailed": "压缩失败",
-    "edit": "编辑",
-    "preview": "预览",
-    "previous": "上一个",
-    "next": "下一个",
-    "pageXOfY": "第 {{current}} 页，共 {{total}} 页",
-    "zoomOut": "缩小",
-    "zoomIn": "放大",
-    "newFile": "新建文件",
-    "newFolder": "新建文件夹",
-    "rename": "重命名",
-    "uploading": "上传中...",
-    "uploadingFile": "正在上传 {{name}}...",
-    "uploadingChunk": "正在上传 {{name}}: {{percent}}% ( {{chunk}} 的一部分，共 {{total}})",
-    "fileName": "文件名",
-    "folderName": "文件夹名称",
-    "fileUploadedSuccessfully": "文件 \"{{name}}\" 上传成功",
-    "failedToUploadFile": "上传文件失败",
-    "uploadingFolderFiles": "正在上传 {{count}} 文件...",
-    "uploadedFolderFiles": "已成功上传 {{count}} 个文件",
-    "uploadedFolderPartial": "上传了 {{uploaded}} 个文件， {{failed}} 个文件失败",
-    "fileDownloadedSuccessfully": "文件 \"{{name}}\" 下载成功",
-    "failedToDownloadFile": "下载文件失败",
-    "fileCreatedSuccessfully": "文件 \"{{name}}\" 创建成功",
-    "folderCreatedSuccessfully": "文件夹 \"{{name}}\" 创建成功",
-    "failedToCreateItem": "创建项目失败",
-    "operationFailed": "对 {{name}} 的 {{operation}} 操作失败：{{error}}",
-    "failedToResolveSymlink": "解析符号链接失败",
-    "itemsDeletedSuccessfully": "{{count}} 个项目删除成功",
-    "failedToDeleteItems": "删除项目失败",
-    "sudoPasswordRequired": "需要管理员密码",
-    "enterSudoPassword": "输入 sudo 密码以继续此操作",
-    "sudoPassword": "Sudo 密码",
-    "sudoOperationFailed": "Sudo 操作失败",
-    "sudoAuthFailed": "Sudo 认证失败",
-    "dragFilesToUpload": "将文件拖放到此处以上传",
-    "dropToUploadHere": "在此处上传",
-    "dropToDownloadHere": "点击此处下载",
-    "localFiles": "本地",
-    "showLocalFiles": "显示本地文件（分屏显示）",
-    "hideLocalFiles": "隐藏本地文件",
-    "localHome": "主页",
-    "localPathPlaceholder": "本地文件夹路径",
-    "localShowHidden": "显示隐藏文件",
-    "localHideHidden": "隐藏隐藏文件",
-    "localRevealInFileManager": "在系统文件管理器中显示",
-    "localCannotOpenFolder": "无法打开文件夹",
-    "localItemCount": "{{count}} 个项目",
-    "localSelectedCount": "已选择 {{count}} 项",
-    "back": "返回",
-    "forward": "向前",
-    "up": "向上",
-    "kind": "种类",
-    "localUploadingProgress": "正在上传 {{current}} 中的 {{total}}",
-    "localDownloadingProgress": "正在下载 {{current}} 中的 {{total}}",
-    "localTransferInFlight": "{{count}} 立刻",
-    "localPreparingDownload": "正在准备下载……",
-    "localTransferCancelled": "传输已取消",
-    "localNothingToTransfer": "无需转移",
-    "localUploadComplete": "已上传 {{count}} 个文件",
-    "localUploadFailed": "上传失败",
-    "localUploadPartial": "上传文件 {{done}} 个失败， {{failed}} 个失败",
-    "localDownloadComplete": "已下载 {{count}} 个文件",
-    "localDownloadFailed": "下载失败",
-    "localDownloadPartial": "下载了 {{done}} 个文件， {{failed}} 个文件失败",
-    "localReplaceExistingPrompt": "此文件夹中已存在 {{count}} 个项目。是否替换它们？",
-    "localReplace": "替换",
-    "localSkipExisting": "跳过",
-    "localSkippedExisting": "已跳过 {{count}} 个现有项目",
-    "localUnsafeNamesSkipped": "已跳过 {{count}} 个名称无法在此计算机上使用的项目。",
-    "localOpen": "打开",
-    "localOpenFolder": "打开文件夹",
-    "localUploadToRemote": "上传到服务器",
-    "localUploadToRemoteMany": "上传 {{count}} 项到服务器",
-    "localMoveToTrash": "移至垃圾桶",
-    "localMoveToTrashMany": "将 {{count}} 个物品移至垃圾桶",
-    "localTrashConfirmSingle": "将“{{name}}”移至回收站？",
-    "localTrashConfirmFolder": "将文件夹“{{name}}”及其所有内容移至回收站？",
-    "localTrashConfirmMany": "将 {{count}} 个项目移至回收站？",
-    "localTrashed": "已将 {{count}} 个项目移至回收站",
-    "localTrashFailed": "无法移至垃圾桶",
-    "localRenameFailed": "重命名失败",
-    "localCreateFailed": "无法创建项目",
-    "goToParentFolder": "转到上文件夹",
-    "resizeSidebar": "拖动即可调整侧边栏大小（双击即可重置）",
-    "resizeLocalPane": "拖动即可调整本地窗格大小（双击可重置）",
-    "columns": "列",
-    "columnsHint": "右键单击选择列",
-    "emptyFolder": "此文件夹为空",
-    "searchFiles": "搜索文件...",
-    "upload": "上传",
-    "selectHostToStart": "选择主机以开始文件管理",
-    "sshRequiredForFileManager": "文件管理器需要 SSH。此主机未启用 SSH。",
-    "failedToConnect": "连接 SSH 失败",
-    "failedToLoadDirectory": "加载目录失败",
-    "noSSHConnection": "没有可用的 SSH 连接",
-    "copy": "复制",
-    "cut": "剪切",
-    "paste": "粘贴",
-    "copyPath": "复制路径",
-    "copyPaths": "复制路径",
-    "delete": "删除",
-    "properties": "属性",
-    "refresh": "刷新",
-    "downloadFiles": "将 {{count}} 个文件下载到浏览器",
-    "copyFiles": "复制 {{count}} 个项目",
-    "cutFiles": "剪切 {{count}} 个项目",
-    "deleteFiles": "删除 {{count}} 个项目",
-    "filesCopiedToClipboard": "已将 {{count}} 个项目复制到剪贴板",
-    "filesCutToClipboard": "已将 {{count}} 个项目剪切到剪贴板",
-    "pathCopiedToClipboard": "路径已复制到剪贴板",
-    "pathsCopiedToClipboard": "已将 {{count}} 条路径复制到剪贴板",
-    "failedToCopyPath": "无法将路径复制到剪贴板",
-    "copyFolderLink": "复制文件夹链接",
-    "copyCurrentFolderLink": "复制当前文件夹链接",
-    "folderLinkCopied": "文件夹链接已复制到剪贴板",
-    "failedToCopyFolderLink": "无法复制文件夹链接",
-    "movedItems": "已移动 {{count}} 个项目",
-    "failedToDeleteItem": "删除项目失败",
-    "itemRenamedSuccessfully": "{{type}} 重命名成功",
-    "failedToRenameItem": "重命名项目失败",
-    "download": "下载",
-    "openExternalEditor": "在外部打开",
-    "chooseExternalEditor": "选择外部编辑器",
-    "externalEditorSelected": "已选择外部编辑器",
-    "externalEditorDesktopOnly": "外部编辑器仅在桌面应用中可用",
-    "externalEditorOpened": "已在外部编辑器中打开。在其中保存文件会将更改上传回服务器。",
-    "failedToOpenExternalEditor": "无法打开外部编辑器",
-    "failedToSelectExternalEditor": "无法选择外部编辑器",
-    "permissions": "权限",
-    "size": "大小",
-    "modified": "修改时间",
-    "path": "路径",
-    "confirmDelete": "确定要删除 {{name}} 吗？",
-    "permissionDenied": "权限被拒绝",
-    "serverError": "服务器错误",
-    "fileSavedSuccessfully": "文件已成功保存",
-    "failedToSaveFile": "保存文件失败",
-    "confirmDeleteSingleItem": "确定要永久删除“{{name}}”吗？",
-    "confirmDeleteMultipleItems": "确定要永久删除{{count}}个项目吗？",
-    "confirmDeleteMultipleItemsWithFolders": "确定要永久删除{{count}}个项目吗？这包括文件夹及其内容。",
-    "confirmDeleteFolder": "确定要永久删除文件夹“{{name}}”及其所有内容吗？",
-    "permanentDeleteWarning": "此操作无法撤销。项目将从服务器永久删除。",
-    "moveToTrashWarning": "该项目将被移至 Termix 回收站，可在保留期到期前恢复。",
-    "itemsMovedToTrash": "{{count}} 项已移至回收站",
-    "trash": "回收站",
-    "trashDescription": "已删除的项目将在本主机上保留 {{days}} 天。",
-    "trashLoadFailed": "加载回收站失败",
-    "trashEmpty": "回收站是空的",
-    "trashRestore": "恢复",
-    "trashRestored": "已恢复 {{name}}",
-    "trashRestoreFailed": "恢复项目失败。原始路径可能已存在。",
-    "trashDeletePermanently": "永久删除",
-    "trashDeleteConfirm": "永久删除 {{name}}？此操作无法撤销。",
-    "trashPermanentlyDeleted": "永久删除 {{name}}",
-    "trashDeleteFailed": "无法永久删除项目",
-    "trashEmptyAction": "清空回收站",
-    "trashEmptyConfirm": "永久删除回收站中的所有项目？此操作无法撤销。",
-    "trashEmptied": "回收站已清空",
-    "trashRetention": "自动清理（N 天后）",
-    "trashRetentionSaved": "回收站保留设置已更新",
-    "trashRetentionFailed": "更新回收站保留设置失败",
-    "trashUnavailableConfirm": "此项目无法移至回收站，通常是因为它位于其他文件系统或需要更高的权限。是否将其永久删除？",
-    "recent": "最近",
-    "pinned": "已固定",
-    "folderShortcuts": "文件夹快捷方式",
-    "failedToReconnectSSH": "重新连接SSH会话失败",
-    "openTerminalHere": "在此处打开终端",
-    "run": "运行",
-    "openTerminalInFolder": "在此文件夹中打开终端",
-    "openTerminalInFileLocation": "在文件位置打开终端",
-    "runningFile": "正在运行 - {{file}}",
-    "onlyRunExecutableFiles": "只能运行可执行文件",
-    "directories": "目录",
-    "removedFromRecentFiles": "已从最近文件中移除“{{name}}”",
-    "removeFailed": "移除失败",
-    "unpinnedSuccessfully": "已成功取消固定“{{name}}”",
-    "unpinFailed": "取消固定失败",
-    "removedShortcut": "已移除快捷方式“{{name}}”",
-    "removeShortcutFailed": "移除快捷方式失败",
-    "clearedAllRecentFiles": "已清空所有最近文件",
-    "clearFailed": "清空失败",
-    "removeFromRecentFiles": "从最近文件中移除",
-    "clearAllRecentFiles": "清空所有最近文件",
-    "unpinFile": "取消固定文件",
-    "removeShortcut": "移除快捷方式",
-    "pinFile": "固定文件",
-    "addToShortcuts": "添加到快捷方式",
-    "pasteFailed": "粘贴失败",
-    "noUndoableActions": "无可撤销的操作",
-    "undoCopySuccess": "已撤销复制操作：已删除{{count}}个已复制的文件",
-    "undoCopyFailedDelete": "撤销失败：无法删除任何已复制的文件",
-    "undoCopyFailedNoInfo": "撤销失败：找不到已复制的文件信息",
-    "undoMoveSuccess": "已撤销移动操作：已将{{count}}个文件移回原始位置",
-    "undoMoveFailedMove": "撤销失败：无法将任何文件移回",
-    "undoMoveFailedNoInfo": "撤销失败：找不到移动的文件信息",
-    "undoDeleteNotSupported": "删除操作无法撤销：文件已从服务器永久删除",
-    "undoTypeNotSupported": "不支持的撤销操作类型",
-    "undoOperationFailed": "撤销操作失败",
-    "unknownError": "未知错误",
-    "confirm": "确认",
-    "find": "查找...",
-    "replace": "替换",
-    "downloadInstead": "改为下载",
-    "keyboardShortcuts": "键盘快捷键",
-    "searchAndReplace": "查找和替换",
-    "editing": "编辑",
-    "search": "搜索",
-    "findNext": "查找下一个",
-    "findPrevious": "查找上一个",
-    "save": "保存",
-    "selectAll": "全选",
-    "undo": "撤销",
-    "redo": "重做",
-    "moveLineUp": "上移一行",
-    "moveLineDown": "下移一行",
-    "toggleComment": "切换注释",
-    "autoComplete": "自动补全",
-    "imageLoadError": "加载图像失败",
-    "startTyping": "开始键入...",
-    "unknownSize": "未知大小",
-    "fileIsEmpty": "文件为空",
-    "largeFileWarning": "大文件警告",
-    "largeFileWarningDesc": "该文件大小为 {{size}}，以文本方式打开可能会导致性能问题。",
-    "fileNotFoundAndRemoved": "文件 \"{{name}}\" 未找到，已从最近/固定文件中移除",
-    "failedToLoadFile": "加载文件失败：{{error}}",
-    "serverErrorOccurred": "服务器发生错误，请稍后重试。",
-    "autoSaveFailed": "自动保存失败",
-    "fileAutoSaved": "文件已自动保存",
-    "moveFileFailed": "移动 {{name}} 失败",
-    "moveOperationFailed": "移动操作失败",
-    "canOnlyCompareFiles": "只能比较两个文件",
-    "comparingFiles": "正在比较文件：{{file1}} 和 {{file2}}",
-    "dragFailed": "拖动操作失败",
-    "filePinnedSuccessfully": "文件 \"{{name}}\" 固定成功",
-    "pinFileFailed": "固定文件失败",
-    "fileUnpinnedSuccessfully": "文件 \"{{name}}\" 取消固定成功",
-    "unpinFileFailed": "取消固定文件失败",
-    "shortcutAddedSuccessfully": "文件夹快捷方式 \"{{name}}\" 添加成功",
-    "addShortcutFailed": "添加快捷方式失败",
-    "operationCompletedSuccessfully": "成功{{operation}}了{{count}}个项目",
-    "operationCompleted": "{{operation}}了{{count}}个项目",
-    "downloadFileSuccess": "文件 {{name}} 下载成功",
-    "downloadFileFailed": "下载失败",
-    "downloadingFile": "正在下载 {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "移动到 {{name}}",
-    "diffCompareWith": "与 {{name}} 对比差异",
-    "dragOutsideToDownload": "拖到窗口外以下载 ({{count}} 个文件)",
-    "newFolderDefault": "新建文件夹",
-    "newFileDefault": "新建文件.txt",
-    "successfullyMovedItems": "成功移动 {{count}} 个项目到 {{target}}",
-    "move": "移动",
-    "searchInFile": "在文件中搜索 (Ctrl+F)",
-    "showKeyboardShortcuts": "显示键盘快捷键",
-    "decreaseFontSize": "缩小字体",
-    "increaseFontSize": "放大字体",
-    "startWritingMarkdown": "开始编写Markdown内容...",
-    "loadingFileComparison": "加载文件比较中...",
-    "reload": "重新加载",
-    "compare": "比较",
-    "sideBySide": "并排",
-    "inline": "内联",
-    "fileComparison": "文件比较: {{file1}} 对比 {{file2}}",
-    "fileTooLarge": "文件过大（> 10MB），出于安全原因无法以文本格式打开。",
-    "sshConnectionFailed": "SSH 连接失败。请检查您到 {{name}} ({{ip}}:{{port}}) 的连接",
-    "loadFileFailed": "加载文件失败: {{error}}",
-    "connecting": "连接中...",
-    "connectedSuccessfully": "连接成功",
-    "totpVerificationFailed": "TOTP 验证失败",
-    "browserSignInFailed": "登录失败，请重试。",
-    "authenticationFailed": "认证失败",
-    "incorrectPassphrase": "密码错误。请重试。",
-    "verificationCodePrompt": "验证码:",
-    "changePermissions": "更改权限",
-    "currentPermissions": "当前权限",
-    "owner": "所有者",
-    "group": "组",
-    "others": "其他",
-    "read": "读取",
-    "write": "写入",
-    "execute": "执行",
-    "permissionsChangedSuccessfully": "权限修改成功",
-    "failedToChangePermissions": "权限修改失败",
-    "name": "名称",
-    "sortByName": "名称",
-    "sortByDate": "修改日期",
-    "sortBySize": "大小",
-    "ascending": "升序",
-    "descending": "降序",
-    "root": "根目录",
-    "new": "新建",
-    "sortBy": "排序方式",
-    "items": "项目",
-    "selected": "已选择",
-    "editor": "编辑器",
-    "octal": "八进制",
-    "storage": "存储",
-    "disk": "磁盘",
-    "used": "已用",
-    "of": "/",
-    "toggleSidebar": "切换侧边栏",
-    "compactLayout": "采用紧凑型布局",
-    "comfortableLayout": "采用舒适的布局",
-    "cannotLoadPdf": "无法加载 PDF",
-    "pdfLoadError": "加载此 PDF 文件时出错。",
-    "loadingPdf": "正在加载PDF查看器...",
-    "loadingPage": "正在加载页面...",
-    "cancel": "取消",
-    "copiedItems_one": "已复制 {{count}} 项目",
-    "copiedItems_other": "已复制 {{count}} 项",
-    "deleteCopiedFileFailed": "无法删除 {{name}}的副本： {{error}}",
-    "dragMovedItems_one": "将 {{count}} 项移动到 {{target}}",
-    "dragMovedItems_other": "已将 {{count}} 个项目移动到 {{target}}",
-    "moveBackFileFailed": "无法将 {{name}} 向后移动： {{error}}",
-    "terminal": "终端： {{host}} ({{path}})",
-    "dragToDesktop": "将 {{name}} 拖到桌面",
-    "dragFilesToDesktop": "将 {{count}} 文件拖到桌面",
-    "folderDragUnsupported": "目前尚不支持将文件夹拖到桌面。",
-    "saveToDesktopFailed": "保存失败： {{error}}",
-    "dragFailedDetail": "拖拽失败： {{error}}",
-    "videoUnsupported": "您的浏览器无法播放此视频格式。",
-    "downloadToPlay": "下载后即可在其他地方播放",
-    "cannotPreviewType": "无法预览此文件类型",
-    "cannotPreviewTypeHint": "此文件类型没有预览。请下载后在其他应用程序中打开。",
-    "loadingFile": "正在加载文件...",
-    "loadingImage": "正在加载图片……",
-    "loadingEditor": "正在加载编辑器...",
-    "loadingPreview": "正在加载预览……",
-    "loadingAudio": "正在加载音频播放器...",
-    "emptyPreview": "目前还没有预览内容……",
-    "revert": "恢复",
-    "openAsText": "以文本格式打开",
-    "confirmOpenAsText": "是否继续以文本格式打开此文件？这可能会降低浏览器的运行速度。"
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "在两台SSH主机之间传输文件。",
-    "sourceServer": "源服务器",
-    "destinationServer": "目标服务器",
-    "selectHost": "选择主机",
-    "noHostSelected": "未选择主机",
-    "move": "移动",
-    "copy": "复制",
-    "upload": "上传",
-    "itemsSelected": "{{count}} 已选择项目",
-    "itemsSelected_other": "{{count}} 已选择项目",
-    "ready": "就绪",
-    "loadingHosts": "正在加载主机...",
-    "name": "名称",
-    "modified": "修改时间",
-    "size": "大小",
-    "noFiles": "没有文件",
-    "open": "打开",
-    "up": "向上",
-    "refresh": "刷新",
-    "copyToTarget": "复制到目标目录",
-    "rename": "重命名",
-    "delete": "删除",
-    "editPermissions": "编辑权限",
-    "createNewFolder": "创建新文件夹",
-    "deleteSelectedItems": "删除选定项目",
-    "deleteConfirm": "删除 {{count}} 选定项目？",
-    "deleteConfirm_other": "删除 {{count}} 选定项目？",
-    "cancel": "取消",
-    "save": "保存",
-    "folderCreated": "已创建文件夹",
-    "itemRenamed": "项目已重命名",
-    "actionFailed": "操作失败",
-    "itemsDeleted": "{{count}} 项目已删除",
-    "itemsDeleted_other": "{{count}} 项已删除",
-    "deleteFailed": "删除失败",
-    "permissionsUpdated": "权限已更新",
-    "noRemoteSessionConnected": "未连接远程会话",
-    "failedToListFiles": "文件列表失败",
-    "failedToRefresh": "刷新失败",
-    "destinationInsideSource": "目标路径不能位于所选源路径内。",
-    "sameHostNoOp": "源文件夹和目标文件夹是同一个文件夹。"
-  },
-  "hosts": {
-    "fileManager": "文件管理器",
-    "fileManagerUrlCopied": "文件管理器 URL 已复制",
-    "copyFileManagerUrlAction": "复制文件管理器 URL",
-    "docsLink": "查看文档",
-    "hostNotFound": "未找到主机",
-    "loadingHost": "正在加载主机..."
-  },
-  "onboarding": {
-    "feature_files": "文件管理器",
-    "feature_files_desc": "无需离开应用，即可通过 SFTP 浏览、上传、下载及编辑文件。"
-  },
-  "terminal": {
-    "runTitle": "运行 {{command}} - {{host}}",
-    "terminalTitle": "终端 - {{host}}",
-    "terminalWithPath": "终端 - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "浏览目标文件夹",
-    "browsePathError": "无法在目标主机上打开此路径。",
-    "browsePathWillBeCreated": "此文件夹尚不存在，将在传输开始时创建。",
-    "cancel": "取消",
-    "cleanupDestFiles": "清理目标位置",
-    "cleanupDestFilesError": "清理失败",
-    "cleanupDestFilesNothing": "目标位置无需清理",
-    "cleanupDestFilesPartial": "部分文件无法删除",
-    "cleanupDestFilesSuccess": "已从目标位置删除部分文件",
-    "confirmCopy": "复制",
-    "confirmMove": "移动",
-    "copyFolderToHost": "复制文件夹到主机…",
-    "copyItemsToHost": "复制 {{count}} 个项目到主机…",
-    "copyToHost": "复制到主机…",
-    "destinationPath": "目标路径",
-    "destMustBeDirectory": "对于多项目传输，目标必须是一个目录",
-    "goUp": "向上",
-    "hostAuthRequired": "需要进行身份验证。请先在此主机上打开文件管理器。",
-    "hostConnecting": "连接中…",
-    "hostConnectionFailed": "连接失败",
-    "hostDisconnected": "未连接",
-    "hostReady": "就绪",
-    "itemsSummary": "{{count}} 个项目",
-    "jumpHostLimitation": "两个主机都必须能从 Termix 服务器访问。不支持直接的主机到主机路由。",
-    "methodAuto": "自动",
-    "methodAutoHint": "根据文件数量、大小和可压缩性选择 tar 或逐文件 SFTP。单个文件始终使用流式 SFTP。",
-    "methodItemSftp": "逐文件 SFTP",
-    "methodItemSftpHint": "通过 SFTP 逐个传输文件。适用于包括 Windows 在内的所有主机。",
-    "methodItemSftpLimitation": "每个文件使用相同的 SFTP 流（与单文件拷贝一样），一个接一个传输。所有文件的进度合并显示，因此大文件传输时进度条移动缓慢。",
-    "methodLabel": "传输方式",
-    "methodPreviewError": "无法预览传输方式。启动时服务器仍会选择方式。",
-    "methodPreviewLoading": "正在计算传输方式…",
-    "methodPreviewScanSummary": "{{fileCount}} 个文件，总计 {{totalSize}}（已在源主机上扫描）。",
-    "methodPreviewWillUseItemSftp": "将使用：逐文件 SFTP",
-    "methodPreviewWillUseTar": "将使用：Tar 归档",
-    "methodReason": {
-      "user_item_sftp": "您选择了逐文件 SFTP。",
-      "user_tar": "您选择了 Tar 归档。",
-      "tar_unavailable": "如果一台或两台主机上没有 Tar 服务，则将改用按文件传输的 SFTP 服务。",
-      "windows_host": "由于涉及 Windows 主机，因此不使用 tar。",
-      "auto_multi_large": "自动：支持多个文件，其中包括一个包含可压缩数据的大文件（{{largestSize}}）。Tar 会将它们打包成一个文件进行传输。",
-      "auto_single_large_in_archive": "自动：此集合中有一个大文件（{{largestSize}}），因此按文件 SFTP。",
-      "auto_many_incompressible": "自动：数据大多不可压缩，因此按文件进行 SFTP 传输。",
-      "auto_many_files": "自动：多个文件（{{fileCount}}），tar 可以减少每个文件的开销。",
-      "auto_default": "自动：此集合使用逐文件 SFTP。"
-    },
-    "methodTar": "Tar 归档",
-    "methodTarHint": "在源端压缩，传输单个归档文件，在目标端解压。要求两个 Unix 主机都有 tar。",
-    "metricsCompress": "源端压缩：{{duration}}",
-    "metricsExtract": "目标端解压：{{duration}}",
-    "metricsPrepare": "准备目标：{{duration}}",
-    "metricsRouteBenchmark": "路由探测：直接 {{direct}}，中继 {{relay}}",
-    "metricsSourceDelete": "从源端删除：{{duration}}",
-    "metricsTotal": "总计：{{duration}}",
-    "metricsTransfer": "端到端：{{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 已验证： {{duration}}",
-    "moveFolderToHost": "移动文件夹到主机…",
-    "moveItemsToHost": "移动 {{count}} 个项目到主机…",
-    "moveToHost": "移动到主机…",
-    "noHostsConnected": "没有其他可用的文件管理器主机。",
-    "noHostsConnectedHint": "在主机管理器中添加启用文件管理器的其他 SSH 主机。",
-    "parallelSegmentsHint": "大文件会被拆分为 256 MB 的块。多个通道使用独立连接（如同同时进行多个传输），以获得更高的总吞吐量。",
-    "parallelSegmentsLabel": "并行传输通道",
-    "parallelSegmentsOption": "{{count}} 个通道",
-    "progressBenchmarking": "选择最快的传输路线…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "取消",
-    "progressCancelling": "正在取消…",
-    "progressCompressing": "正在源主机上压缩…",
-    "progressExtracting": "正在目标端解压…",
-    "progressItems": "{{current}} / {{total}} 个文件",
-    "progressReconnecting": "重新连接中…",
-    "progressStalled": "已停滞",
-    "progressTotalSpeed": "{{speed}} 总计（{{lanes}} 通道）",
-    "progressTransferring": "正在传输数据…",
-    "progressTransferringItems": "正在传输文件（{{current}}/{{total}}）…",
-    "progressVerifying": "正在验证文件完整性…",
-    "recentDestinations": "最近目标",
-    "resumedHint": "已重新连接到在另一个窗口中启动的进行中的传输。",
-    "retryTransfer": "重试",
-    "retryTransferError": "重试失败",
-    "selectDestinationHost": "选择目标主机",
-    "transferCancelled": "传输已取消",
-    "transferCancelledCopyHint": "目标位置可能残留部分文件。",
-    "transferCancelledMoveHint": "目标位置可能残留部分文件。源文件未被删除。",
-    "transferError": "传输失败",
-    "transferFailedRetryHint": "部分数据已保留在目标位置。连接恢复后重试将继续。",
-    "transferPartialHint": "无法传输：{{paths}}",
-    "transferSuccess": "传输完成",
-    "metricsHopSourceRead": "源 → 服务器：{{throughput}}",
-    "metricsHopDestSftpWrite": "服务器 → 目标 (SFTP)：{{throughput}}",
-    "metricsHopDestLocalWrite": "服务器 → 目标 (本地)：{{throughput}}"
-  },
-  "plugin": {
-    "name": "文件管理器"
-  }
-}
diff --git a/plugins/file-manager/locales/translated/zh_TW.json b/plugins/file-manager/locales/translated/zh_TW.json
deleted file mode 100644
index bf4c66701..000000000
--- a/plugins/file-manager/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,555 +0,0 @@
-{
-  "nav": {
-    "files": "檔案",
-    "sftp": "SFTP",
-    "openFileManager": "開啟檔案管理員"
-  },
-  "permissions": {
-    "use": {
-      "title": "使用檔案管理器",
-      "description": "透過 SFTP 瀏覽、編輯和傳輸檔案。"
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "啟用檔案管理員",
-        "description": "透過 SFTP 瀏覽和編輯此主機上的檔案。"
-      },
-      "defaultPath": {
-        "label": "預設路徑"
-      },
-      "scpLegacy": {
-        "label": "SCP 舊版模式"
-      }
-    },
-    "user": {
-      "transferConcurrency": {
-        "label": "同時文件傳輸",
-        "description": "本機/遠端並排管理器同時上傳或下載的檔案數量。如果您的伺服器限制 SFTP 通道，請降低此值。"
-      },
-      "confirmBeforeTrash": {
-        "label": "請確認後再將文件移至回收站",
-        "description": "將遠端文件移至回收站前請先詢問。永久刪除仍需確認。"
-      }
-    }
-  },
-  "hostCapability": {
-    "label": "檔案管理員"
-  },
-  "fileManager": {
-    "noHostSelected": "未選取主機",
-    "initializingEditor": "正在初始化編輯器…",
-    "file": "檔案",
-    "folder": "資料夾",
-    "uploadFile": "上傳檔案",
-    "downloadFile": "下載",
-    "extractArchive": "解壓縮",
-    "extractingArchive": "正在解壓縮 {{name}}...",
-    "archiveExtractedSuccessfully": "{{name}} 解壓縮成功",
-    "extractFailed": "解壓縮失敗",
-    "compressFile": "壓縮檔案",
-    "compressFiles": "壓縮檔案",
-    "compressFilesDesc": "將 {{count}} 個項目壓縮為一個壓縮檔",
-    "archiveName": "壓縮檔名稱",
-    "enterArchiveName": "輸入壓縮檔名稱...",
-    "compressionFormat": "壓縮格式",
-    "selectedFiles": "已選取的檔案",
-    "andMoreFiles": "還有 {{count}} 個...",
-    "compress": "壓縮",
-    "compressingFiles": "正在將 {{count}} 個項目壓縮為 {{name}}...",
-    "filesCompressedSuccessfully": "{{name}} 建立成功",
-    "compressFailed": "壓縮失敗",
-    "edit": "編輯",
-    "preview": "預覽",
-    "previous": "上一個",
-    "next": "下一個",
-    "pageXOfY": "第 {{current}} 頁，共 {{total}} 頁",
-    "zoomOut": "縮小",
-    "zoomIn": "放大",
-    "newFile": "新增檔案",
-    "newFolder": "新增資料夾",
-    "rename": "重新命名",
-    "uploading": "上傳中...",
-    "uploadingFile": "正在上傳 {{name}}...",
-    "uploadingChunk": "正在上傳 {{name}}: {{percent}}% ( {{chunk}} 的一部分，共 {{total}})",
-    "fileName": "檔案名稱",
-    "folderName": "資料夾名稱",
-    "fileUploadedSuccessfully": "檔案「{{name}}」上傳成功",
-    "failedToUploadFile": "上傳檔案失敗",
-    "uploadingFolderFiles": "正在上傳 {{count}} 檔案...",
-    "uploadedFolderFiles": "已成功上傳 {{count}} 個文件",
-    "uploadedFolderPartial": "上傳檔案 {{uploaded}} 失敗， {{failed}} 失敗",
-    "fileDownloadedSuccessfully": "檔案「{{name}}」下載成功",
-    "failedToDownloadFile": "下載檔案失敗",
-    "fileCreatedSuccessfully": "檔案「{{name}}」建立成功",
-    "folderCreatedSuccessfully": "資料夾「{{name}}」建立成功",
-    "failedToCreateItem": "建立項目失敗",
-    "operationFailed": "{{operation}} 操作在 {{name}} 上失敗：{{error}}",
-    "failedToResolveSymlink": "無法解析符號連結",
-    "itemsDeletedSuccessfully": "成功刪除 {{count}} 個項目",
-    "failedToDeleteItems": "刪除項目失敗",
-    "sudoPasswordRequired": "需要管理員密碼",
-    "enterSudoPassword": "請輸入 sudo 密碼以繼續此操作",
-    "sudoPassword": "Sudo 密碼",
-    "sudoOperationFailed": "Sudo 操作失敗",
-    "sudoAuthFailed": "Sudo 驗證失敗",
-    "dragFilesToUpload": "拖放檔案至此以上傳",
-    "dropToUploadHere": "在此處上傳",
-    "dropToDownloadHere": "點此下載",
-    "localFiles": "本機",
-    "showLocalFiles": "顯示本地文件（分割畫面顯示）",
-    "hideLocalFiles": "隱藏本地文件",
-    "localHome": "首頁",
-    "localPathPlaceholder": "本機資料夾路徑",
-    "localShowHidden": "顯示隱藏文件",
-    "localHideHidden": "隱藏隱藏文件",
-    "localRevealInFileManager": "在系統檔案管理器中顯示",
-    "localCannotOpenFolder": "無法開啟資料夾",
-    "localItemCount": "{{count}} 個項目",
-    "localSelectedCount": "已選取 {{count}} 個",
-    "back": "返回",
-    "forward": "向前",
-    "up": "向上",
-    "kind": "種類",
-    "localUploadingProgress": "正在上傳 {{current}} 中的 {{total}}",
-    "localDownloadingProgress": "正在下載 {{current}} 中的 {{total}}",
-    "localTransferInFlight": "{{count}} 立刻",
-    "localPreparingDownload": "正在準備下載…",
-    "localTransferCancelled": "傳輸已取消",
-    "localNothingToTransfer": "無需轉移",
-    "localUploadComplete": "已上傳 {{count}} 個文件",
-    "localUploadFailed": "上傳失敗",
-    "localUploadPartial": "上傳檔案 {{done}} 失敗， {{failed}} 失敗",
-    "localDownloadComplete": "已下載 {{count}} 個文件",
-    "localDownloadFailed": "下載失敗",
-    "localDownloadPartial": "下載了 {{done}} 個文件， {{failed}} 個文件失敗",
-    "localReplaceExistingPrompt": "此資料夾中已存在 {{count}} 個項目。是否替換它們？",
-    "localReplace": "取代",
-    "localSkipExisting": "跳過",
-    "localSkippedExisting": "已跳過 {{count}} 個現有項目",
-    "localUnsafeNamesSkipped": "已跳過 {{count}} 個名稱無法在此電腦上使用的項目。",
-    "localOpen": "開啟",
-    "localOpenFolder": "打開資料夾",
-    "localUploadToRemote": "上傳到伺服器",
-    "localUploadToRemoteMany": "上傳 {{count}} 項目到伺服器",
-    "localMoveToTrash": "移至垃圾桶",
-    "localMoveToTrashMany": "將 {{count}} 個物品移至垃圾桶",
-    "localTrashConfirmSingle": "將「{{name}}」移至回收站？",
-    "localTrashConfirmFolder": "將資料夾「{{name}}」及其所有內容移至回收站？",
-    "localTrashConfirmMany": "將 {{count}} 個項目移至回收站？",
-    "localTrashed": "已將 {{count}} 個項目移至回收站",
-    "localTrashFailed": "無法移至垃圾桶",
-    "localRenameFailed": "重新命名失敗",
-    "localCreateFailed": "無法建立專案",
-    "goToParentFolder": "轉到上資料夾",
-    "resizeSidebar": "拖曳即可調整側邊欄大小（雙擊即可重設）",
-    "resizeLocalPane": "拖曳即可調整本機窗格大小（雙擊可重設）",
-    "columns": "欄",
-    "columnsHint": "右鍵單擊選擇列",
-    "emptyFolder": "此資料夾為空",
-    "searchFiles": "搜尋檔案...",
-    "upload": "上傳",
-    "selectHostToStart": "選擇主機以開始檔案管理",
-    "sshRequiredForFileManager": "檔案管理員需要 SSH。此主機未啟用 SSH。",
-    "failedToConnect": "無法連線至 SSH",
-    "failedToLoadDirectory": "載入目錄失敗",
-    "noSSHConnection": "沒有可用的 SSH 連線",
-    "copy": "複製",
-    "cut": "剪下",
-    "paste": "貼上",
-    "copyPath": "複製路徑",
-    "copyPaths": "複製路徑",
-    "delete": "刪除",
-    "properties": "內容",
-    "refresh": "重新整理",
-    "downloadFiles": "下載 {{count}} 個檔案到瀏覽器",
-    "copyFiles": "複製 {{count}} 個項目",
-    "cutFiles": "剪下 {{count}} 個項目",
-    "deleteFiles": "刪除 {{count}} 個項目",
-    "filesCopiedToClipboard": "{{count}} 個項目已複製到剪貼簿",
-    "filesCutToClipboard": "{{count}} 個項目已剪下到剪貼簿",
-    "pathCopiedToClipboard": "路徑已複製到剪貼簿",
-    "pathsCopiedToClipboard": "{{count}} 個路徑已複製到剪貼簿",
-    "failedToCopyPath": "無法複製路徑到剪貼簿",
-    "copyFolderLink": "複製資料夾連結",
-    "copyCurrentFolderLink": "複製目前資料夾連結",
-    "folderLinkCopied": "資料夾連結已複製到剪貼簿",
-    "failedToCopyFolderLink": "無法複製資料夾連結",
-    "movedItems": "已移動 {{count}} 個項目",
-    "failedToDeleteItem": "無法刪除項目",
-    "itemRenamedSuccessfully": "{{type}} 重新命名成功",
-    "failedToRenameItem": "無法重新命名項目",
-    "download": "下載",
-    "openExternalEditor": "以外部編輯器開啟",
-    "chooseExternalEditor": "選擇外部編輯器",
-    "externalEditorSelected": "已選擇外部編輯器",
-    "externalEditorDesktopOnly": "外部編輯器僅限桌面版應用程式使用",
-    "externalEditorOpened": "已於外部編輯器開啟。在此儲存將上傳變更回伺服器。",
-    "failedToOpenExternalEditor": "無法開啟外部編輯器",
-    "failedToSelectExternalEditor": "無法選擇外部編輯器",
-    "permissions": "權限",
-    "size": "大小",
-    "modified": "修改時間",
-    "path": "路徑",
-    "confirmDelete": "確定要刪除 {{name}} 嗎？",
-    "permissionDenied": "權限不足",
-    "serverError": "伺服器錯誤",
-    "fileSavedSuccessfully": "檔案儲存成功",
-    "failedToSaveFile": "無法儲存檔案",
-    "confirmDeleteSingleItem": "確定要永久刪除「{{name}}」嗎？",
-    "confirmDeleteMultipleItems": "確定要永久刪除 {{count}} 個項目嗎？",
-    "confirmDeleteMultipleItemsWithFolders": "確定要永久刪除 {{count}} 個項目嗎？這包含資料夾及其內容。",
-    "confirmDeleteFolder": "確定要永久刪除資料夾「{{name}}」及其所有內容嗎？",
-    "permanentDeleteWarning": "此動作無法復原。項目將從伺服器永久刪除。",
-    "moveToTrashWarning": "該物品將移至 Termix 回收站，可在保留期到期前恢復。",
-    "itemsMovedToTrash": "{{count}} 項已移至回收站",
-    "trash": "垃圾",
-    "trashDescription": "已刪除的項目將保留在本主機上 {{days}} 天。",
-    "trashLoadFailed": "載入回收站失敗",
-    "trashEmpty": "垃圾桶是空的。",
-    "trashRestore": "還原",
-    "trashRestored": "已恢復 {{name}}",
-    "trashRestoreFailed": "恢復專案失敗。原始路徑可能已存在。",
-    "trashDeletePermanently": "永久刪除",
-    "trashDeleteConfirm": "永久刪除 {{name}}？此操作無法撤銷。",
-    "trashPermanentlyDeleted": "永久刪除 {{name}}",
-    "trashDeleteFailed": "無法永久刪除項目",
-    "trashEmptyAction": "清空垃圾桶",
-    "trashEmptyConfirm": "永久刪除回收站中的所有項目？此操作無法撤銷。",
-    "trashEmptied": "垃圾已清空",
-    "trashRetention": "自動清理（天數）後",
-    "trashRetentionSaved": "垃圾保留狀況更新",
-    "trashRetentionFailed": "更新垃圾回收站保留策略失敗",
-    "trashUnavailableConfirm": "此項目無法移至回收站，通常是因為它位於其他檔案系統或需要更高的權限。是否將其永久刪除？",
-    "recent": "最近",
-    "pinned": "已釘選",
-    "folderShortcuts": "資料夾捷徑",
-    "failedToReconnectSSH": "無法重新連線 SSH 工作階段",
-    "openTerminalHere": "在此處開啟終端機",
-    "run": "執行",
-    "openTerminalInFolder": "在此資料夾中開啟終端機",
-    "openTerminalInFileLocation": "在檔案位置開啟終端機",
-    "runningFile": "執行中 - {{file}}",
-    "onlyRunExecutableFiles": "只能執行可執行檔案",
-    "directories": "目錄",
-    "removedFromRecentFiles": "已從最近檔案中移除 \"{{name}}\"",
-    "removeFailed": "移除失敗",
-    "unpinnedSuccessfully": "已成功取消釘選 \"{{name}}\"",
-    "unpinFailed": "取消釘選失敗",
-    "removedShortcut": "已移除捷徑 \"{{name}}\"",
-    "removeShortcutFailed": "移除捷徑失敗",
-    "clearedAllRecentFiles": "已清除所有最近檔案",
-    "clearFailed": "清除失敗",
-    "removeFromRecentFiles": "從最近檔案中移除",
-    "clearAllRecentFiles": "清除所有最近檔案",
-    "unpinFile": "取消釘選檔案",
-    "removeShortcut": "移除捷徑",
-    "pinFile": "釘選檔案",
-    "addToShortcuts": "加入捷徑",
-    "pasteFailed": "貼上失敗",
-    "noUndoableActions": "沒有可復原的動作",
-    "undoCopySuccess": "已復原複製操作：已刪除 {{count}} 個複製的檔案",
-    "undoCopyFailedDelete": "復原失敗：無法刪除任何複製的檔案",
-    "undoCopyFailedNoInfo": "復原失敗：找不到複製檔案的資訊",
-    "undoMoveSuccess": "已復原移動操作：已將 {{count}} 個檔案移回原始位置",
-    "undoMoveFailedMove": "復原失敗：無法移回任何檔案",
-    "undoMoveFailedNoInfo": "復原失敗：找不到移動檔案的資訊",
-    "undoDeleteNotSupported": "刪除操作無法復原：檔案已從伺服器永久刪除",
-    "undoTypeNotSupported": "不支援的復原操作類型",
-    "undoOperationFailed": "復原操作失敗",
-    "unknownError": "未知錯誤",
-    "confirm": "確認",
-    "find": "尋找...",
-    "replace": "取代",
-    "downloadInstead": "改為下載",
-    "keyboardShortcuts": "鍵盤快捷鍵",
-    "searchAndReplace": "搜尋與取代",
-    "editing": "編輯",
-    "search": "搜尋",
-    "findNext": "尋找下一個",
-    "findPrevious": "尋找上一個",
-    "save": "儲存",
-    "selectAll": "全選",
-    "undo": "復原",
-    "redo": "重做",
-    "moveLineUp": "將行上移",
-    "moveLineDown": "將行下移",
-    "toggleComment": "切換註解",
-    "autoComplete": "自動完成",
-    "imageLoadError": "無法載入圖片",
-    "startTyping": "開始輸入...",
-    "unknownSize": "未知大小",
-    "fileIsEmpty": "檔案為空",
-    "largeFileWarning": "大檔案警告",
-    "largeFileWarningDesc": "此檔案大小為 {{size}}，以文字模式開啟可能會影響效能。",
-    "fileNotFoundAndRemoved": "找不到檔案 \"{{name}}\"，已從最近使用的/已釘選的檔案中移除",
-    "failedToLoadFile": "無法載入檔案：{{error}}",
-    "serverErrorOccurred": "伺服器發生錯誤，請稍後再試。",
-    "autoSaveFailed": "自動儲存失敗",
-    "fileAutoSaved": "檔案已自動儲存",
-    "moveFileFailed": "無法移動 {{name}}",
-    "moveOperationFailed": "移動操作失敗",
-    "canOnlyCompareFiles": "只能比較兩個檔案",
-    "comparingFiles": "正在比較檔案：{{file1}} 與 {{file2}}",
-    "dragFailed": "拖曳操作失敗",
-    "filePinnedSuccessfully": "已成功釘選檔案 \"{{name}}\"",
-    "pinFileFailed": "釘選檔案失敗",
-    "fileUnpinnedSuccessfully": "已成功取消釘選檔案 \"{{name}}\"",
-    "unpinFileFailed": "取消釘選檔案失敗",
-    "shortcutAddedSuccessfully": "資料夾捷徑 \"{{name}}\" 已成功新增",
-    "addShortcutFailed": "新增捷徑失敗",
-    "operationCompletedSuccessfully": "已成功{{operation}} {{count}} 個項目",
-    "operationCompleted": "{{operation}} {{count}} 個項目",
-    "downloadFileSuccess": "檔案 {{name}} 已成功下載",
-    "downloadFileFailed": "下載失敗",
-    "downloadingFile": "正在下載 {{name}}…",
-    "downloadProgressBytes": "{{transferred}} / {{total}}",
-    "moveTo": "移動至 {{name}}",
-    "diffCompareWith": "與 {{name}} 進行差異比對",
-    "dragOutsideToDownload": "拖曳至視窗外以下載 ({{count}} 個檔案)",
-    "newFolderDefault": "新資料夾",
-    "newFileDefault": "新檔案.txt",
-    "successfullyMovedItems": "已成功移動 {{count}} 個項目至 {{target}}",
-    "move": "移動",
-    "searchInFile": "在檔案中搜尋 (Ctrl+F)",
-    "showKeyboardShortcuts": "顯示鍵盤快捷鍵",
-    "decreaseFontSize": "縮小字型大小",
-    "increaseFontSize": "放大字型大小",
-    "startWritingMarkdown": "開始撰寫您的 Markdown 內容...",
-    "loadingFileComparison": "載入檔案比對中...",
-    "reload": "重新載入",
-    "compare": "比對",
-    "sideBySide": "並排",
-    "inline": "內嵌",
-    "fileComparison": "檔案比對：{{file1}} vs {{file2}}",
-    "fileTooLarge": "檔案過大（> 10MB），因安全性原因無法以文字格式開啟。",
-    "sshConnectionFailed": "SSH 連線失敗。請檢查與 {{name}} ({{ip}}:{{port}}) 的連線",
-    "loadFileFailed": "載入檔案失敗：{{error}}",
-    "connecting": "連線中...",
-    "connectedSuccessfully": "已成功連線",
-    "totpVerificationFailed": "TOTP 驗證失敗",
-    "browserSignInFailed": "登入失敗，請重試。",
-    "authenticationFailed": "驗證失敗",
-    "incorrectPassphrase": "密碼片語錯誤。請再試一次。",
-    "verificationCodePrompt": "驗證碼：",
-    "changePermissions": "變更權限",
-    "currentPermissions": "目前權限",
-    "owner": "擁有者",
-    "group": "群組",
-    "others": "其他人",
-    "read": "讀取",
-    "write": "寫入",
-    "execute": "執行",
-    "permissionsChangedSuccessfully": "權限已成功變更",
-    "failedToChangePermissions": "無法變更權限",
-    "name": "名稱",
-    "sortByName": "名稱",
-    "sortByDate": "修改日期",
-    "sortBySize": "大小",
-    "ascending": "遞增",
-    "descending": "遞減",
-    "root": "根目錄",
-    "new": "新增",
-    "sortBy": "排序依據",
-    "items": "項目",
-    "selected": "已選取",
-    "editor": "編輯器",
-    "octal": "八進位",
-    "storage": "儲存空間",
-    "disk": "磁碟",
-    "used": "已使用",
-    "of": " / ",
-    "toggleSidebar": "切換側邊欄",
-    "compactLayout": "採用緊湊型佈局",
-    "comfortableLayout": "採用舒適的佈局",
-    "cannotLoadPdf": "無法載入 PDF",
-    "pdfLoadError": "載入此 PDF 檔案時發生錯誤。",
-    "loadingPdf": "正在載入PDF檢視器...",
-    "loadingPage": "正在載入頁面...",
-    "cancel": "取消",
-    "copiedItems_one": "已複製 {{count}} 項目",
-    "copiedItems_other": "已複製 {{count}} 項",
-    "deleteCopiedFileFailed": "無法刪除 {{name}}的副本： {{error}}",
-    "dragMovedItems_one": "將 {{count}} 項移到 {{target}}",
-    "dragMovedItems_other": "已將 {{count}} 個項目移至 {{target}}",
-    "moveBackFileFailed": "無法將 {{name}} 向後移動： {{error}}",
-    "terminal": "終端： {{host}} ({{path}})",
-    "dragToDesktop": "將 {{name}} 拖曳到桌面",
-    "dragFilesToDesktop": "將 {{count}} 檔案拖曳到桌面",
-    "folderDragUnsupported": "目前尚不支援將資料夾拖曳到桌面。",
-    "saveToDesktopFailed": "儲存失敗： {{error}}",
-    "dragFailedDetail": "拖曳失敗： {{error}}",
-    "videoUnsupported": "您的瀏覽器無法播放此影片格式。",
-    "downloadToPlay": "下載後即可在其他地方播放",
-    "cannotPreviewType": "無法預覽此文件類型",
-    "cannotPreviewTypeHint": "此文件類型沒有預覽。請下載後在其他應用程式中開啟。",
-    "loadingFile": "正在加載檔案...",
-    "loadingImage": "正在加載圖片…",
-    "loadingEditor": "正在載入編輯器...",
-    "loadingPreview": "正在加載預覽…",
-    "loadingAudio": "正在加載音訊播放器...",
-    "emptyPreview": "目前還沒有預覽內容…",
-    "revert": "恢復",
-    "openAsText": "以文字格式開啟",
-    "confirmOpenAsText": "是否繼續以文字格式開啟此文件？這可能會降低瀏覽器的運行速度。"
-  },
-  "sftpTransfer": {
-    "title": "SFTP",
-    "description": "在兩台SSH主機之間傳輸檔案。",
-    "sourceServer": "來源伺服器",
-    "destinationServer": "目標伺服器",
-    "selectHost": "選擇主機",
-    "noHostSelected": "未選擇主機",
-    "move": "移動",
-    "copy": "複製",
-    "upload": "上傳",
-    "itemsSelected": "{{count}} 已選擇項目",
-    "itemsSelected_other": "{{count}} 已選擇項目",
-    "ready": "就緒",
-    "loadingHosts": "正在載入主機...",
-    "name": "名稱",
-    "modified": "修改時間",
-    "size": "大小",
-    "noFiles": "沒有文件",
-    "open": "開啟",
-    "up": "向上",
-    "refresh": "重新整理",
-    "copyToTarget": "複製到目標目錄",
-    "rename": "重新命名",
-    "delete": "刪除",
-    "editPermissions": "編輯權限",
-    "createNewFolder": "建立新資料夾",
-    "deleteSelectedItems": "刪除選定項目",
-    "deleteConfirm": "刪除 {{count}} 選取項目？",
-    "deleteConfirm_other": "刪除 {{count}} 選取項目？",
-    "cancel": "取消",
-    "save": "儲存",
-    "folderCreated": "已建立資料夾",
-    "itemRenamed": "項目已重新命名",
-    "actionFailed": "操作失敗",
-    "itemsDeleted": "{{count}} 項目已刪除",
-    "itemsDeleted_other": "{{count}} 項目已刪除",
-    "deleteFailed": "刪除失敗",
-    "permissionsUpdated": "權限已更新",
-    "noRemoteSessionConnected": "未連接遠端會話",
-    "failedToListFiles": "檔案列表失敗",
-    "failedToRefresh": "刷新失敗",
-    "destinationInsideSource": "目標路徑不能位於所選來源路徑內。",
-    "sameHostNoOp": "來源資料夾和目標資料夾是同一個資料夾。"
-  },
-  "hosts": {
-    "fileManager": "檔案管理員",
-    "fileManagerUrlCopied": "檔案管理員 URL 已複製",
-    "copyFileManagerUrlAction": "複製檔案管理員 URL",
-    "docsLink": "檢視文件",
-    "hostNotFound": "找不到主機",
-    "loadingHost": "正在載入主機..."
-  },
-  "onboarding": {
-    "feature_files": "文件管理器",
-    "feature_files_desc": "無需離開應用程序，即可透過 SFTP 瀏覽、上傳、下載和編輯檔案。"
-  },
-  "terminal": {
-    "runTitle": "正在執行 {{command}} - {{host}}",
-    "terminalTitle": "終端機 - {{host}}",
-    "terminalWithPath": "終端機 - {{host}}:{{path}}"
-  },
-  "transfer": {
-    "browseFolders": "瀏覽目標資料夾",
-    "browsePathError": "無法在目標主機上開啟此路徑。",
-    "browsePathWillBeCreated": "此資料夾尚不存在。傳送開始時將會建立。",
-    "cancel": "取消",
-    "cleanupDestFiles": "清理目的地",
-    "cleanupDestFilesError": "清理失敗",
-    "cleanupDestFilesNothing": "目的地無需清理",
-    "cleanupDestFilesPartial": "部分檔案無法移除",
-    "cleanupDestFilesSuccess": "已從目的地移除部分檔案",
-    "confirmCopy": "複製",
-    "confirmMove": "移動",
-    "copyFolderToHost": "複製資料夾至主機…",
-    "copyItemsToHost": "複製 {{count}} 個項目到主機…",
-    "copyToHost": "複製到主機…",
-    "destinationPath": "目標路徑",
-    "destMustBeDirectory": "多項目傳送時，目標必須是資料夾",
-    "goUp": "向上",
-    "hostAuthRequired": "需要進行身份驗證。請先在此主機上開啟檔案總管。",
-    "hostConnecting": "連線中…",
-    "hostConnectionFailed": "連線失敗",
-    "hostDisconnected": "未連線",
-    "hostReady": "就緒",
-    "itemsSummary": "{{count}} 個項目",
-    "jumpHostLimitation": "兩台主機都必須可從 Termix 伺服器連線。不支援主機對主機的直接路由。",
-    "methodAuto": "自動",
-    "methodAutoHint": "根據檔案數量、大小及可壓縮性選擇 tar 封存或逐檔 SFTP。單一檔案一律使用串流 SFTP。",
-    "methodItemSftp": "逐檔 SFTP",
-    "methodItemSftpHint": "透過 SFTP 逐一傳輸每個檔案。適用於所有主機，包括 Windows。",
-    "methodItemSftpLimitation": "每個檔案依序使用相同的 SFTP 串流作為單一檔案複製。進度會合併所有檔案，因此處理大型檔案時進度條會緩慢移動。",
-    "methodLabel": "傳輸方法",
-    "methodPreviewError": "無法預覽傳輸方法。啟動時伺服器仍會選擇一個方法。",
-    "methodPreviewLoading": "正在計算傳輸方法…",
-    "methodPreviewScanSummary": "{{fileCount}} 個檔案，總計 {{totalSize}}（已在來源主機掃描）。",
-    "methodPreviewWillUseItemSftp": "將使用：逐檔 SFTP",
-    "methodPreviewWillUseTar": "將使用：Tar 封存",
-    "methodReason": {
-      "user_item_sftp": "您選擇了逐檔 SFTP。",
-      "user_tar": "您選擇了 tar 封存。",
-      "tar_unavailable": "如果一台或兩台主機上沒有 Tar 服務，則將改用按檔案傳輸的 SFTP 服務。",
-      "windows_host": "由於涉及 Windows 主機，因此不使用 tar。",
-      "auto_multi_large": "自動：支援多個文件，其中包括一個包含可壓縮資料的大文件（{{largestSize}}）。 Tar 會將它們打包成一個檔案來傳輸。",
-      "auto_single_large_in_archive": "自動：此集合中有一個大檔案（{{largestSize}}），因此請按檔案 SFTP。",
-      "auto_many_incompressible": "自動：資料大多不可壓縮，因此按檔案進行 SFTP 傳輸。",
-      "auto_many_files": "自動：多個檔案（{{fileCount}}），tar 可以減少每個檔案的開銷。",
-      "auto_default": "自動：此集合使用逐檔 SFTP。"
-    },
-    "methodTar": "Tar 封存",
-    "methodTarHint": "在來源主機壓縮，傳輸一個封存檔，在目標主機解壓縮。需兩台 Unix 主機皆安裝 tar。",
-    "metricsCompress": "在來源主機壓縮: {{duration}}",
-    "metricsExtract": "在目標主機解壓縮: {{duration}}",
-    "metricsPrepare": "準備目標：{{duration}}",
-    "metricsRouteBenchmark": "路由探測：直 {{direct}}，中繼 {{relay}}",
-    "metricsSourceDelete": "從來源主機刪除: {{duration}}",
-    "metricsTotal": "總計: {{duration}}",
-    "metricsTransfer": "端對端: {{throughput}} ({{duration}})",
-    "metricsVerify": "SHA-256 已驗證： {{duration}}",
-    "moveFolderToHost": "移動資料夾至主機…",
-    "moveItemsToHost": "將 {{count}} 個項目移至主機…",
-    "moveToHost": "移動到主機…",
-    "noHostsConnected": "無其他可用的檔案管理員主機。",
-    "noHostsConnectedHint": "在主機管理員中新增另一個已啟用檔案管理員的 SSH 主機。",
-    "parallelSegmentsHint": "大型檔案會分割成 256 MB 區塊。多個通道會使用獨立的連線（如同啟動多個傳輸作業）以獲取更高的總傳輸速率。",
-    "parallelSegmentsLabel": "平行傳輸通道",
-    "parallelSegmentsOption": "{{count}} 個通道",
-    "progressBenchmarking": "選擇最快的傳輸路線…",
-    "progressBytes": "{{transferred}} / {{total}}",
-    "progressCancel": "取消",
-    "progressCancelling": "正在取消…",
-    "progressCompressing": "在來源主機壓縮中…",
-    "progressExtracting": "在目標主機解壓縮中…",
-    "progressItems": "{{current}} / {{total}} 個檔案",
-    "progressReconnecting": "重新連線中…",
-    "progressStalled": "停滯",
-    "progressTotalSpeed": "總計 {{speed}}（{{lanes}} 個通道）",
-    "progressTransferring": "傳輸資料中…",
-    "progressTransferringItems": "傳輸檔案中（{{current}} / {{total}}）…",
-    "progressVerifying": "正在驗證檔案完整性…",
-    "recentDestinations": "最近使用的目的地",
-    "resumedHint": "已重新連線至在另一個視窗中啟動的進行中傳輸。",
-    "retryTransfer": "重試",
-    "retryTransferError": "重試失敗",
-    "selectDestinationHost": "選擇目標主機",
-    "transferCancelled": "傳輸已取消",
-    "transferCancelledCopyHint": "部分檔案可能仍留在目的地。",
-    "transferCancelledMoveHint": "部分檔案可能仍留在目的地，來源檔案未被移除。",
-    "transferError": "傳送失敗",
-    "transferFailedRetryHint": "部分資料已保留在目的地。重新連線後，重試將從斷點繼續。",
-    "transferPartialHint": "無法傳送：{{paths}}",
-    "transferSuccess": "傳送完成",
-    "metricsHopSourceRead": "來源主機 → 伺服器: {{throughput}}",
-    "metricsHopDestSftpWrite": "伺服器 → 目標主機 (SFTP): {{throughput}}",
-    "metricsHopDestLocalWrite": "伺服器 → 目標主機 (本機): {{throughput}}"
-  },
-  "plugin": {
-    "name": "檔案管理員"
-  }
-}
diff --git a/plugins/file-manager/manifest.json b/plugins/file-manager/manifest.json
deleted file mode 100644
index ea2b837e0..000000000
--- a/plugins/file-manager/manifest.json
+++ /dev/null
@@ -1,135 +0,0 @@
-{
-  "id": "file-manager",
-  "name": "File Manager",
-  "version": "1.0.0",
-  "description": "Browse, edit and transfer files over SFTP, including between two hosts.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Files & Transfer",
-  "icon": "FolderSearch",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "hosts:read",
-    "credentials:use",
-    "credentials:read",
-    "ssh:connect",
-    "db:own",
-    "network:serve",
-    "ui:surface",
-    "events:core",
-    "kv:own",
-    "users:impersonate"
-  ],
-  "provides": [
-    {
-      "service": "files.sftp",
-      "version": "1.0.0",
-      "permission": "file-manager.use"
-    }
-  ],
-  "contributes": {
-    "tabs": [
-      {
-        "id": "files",
-        "titleKey": "nav.files",
-        "icon": "FolderSearch",
-        "openFrom": ["host-context-menu", "palette"]
-      },
-      {
-        "id": "sftp",
-        "titleKey": "nav.sftp",
-        "icon": "ArrowLeftRight",
-        "openFrom": ["host-context-menu", "palette"]
-      }
-    ],
-    "actions": [
-      {
-        "id": "files.openHost",
-        "titleKey": "nav.files",
-        "handler": "openHost",
-        "permission": "file-manager.use"
-      },
-      {
-        "id": "files.openEditor",
-        "titleKey": "nav.files",
-        "handler": "openEditor",
-        "permission": "file-manager.use"
-      }
-    ],
-    "permissions": [
-      {
-        "name": "use",
-        "titleKey": "permissions.use.title",
-        "descriptionKey": "permissions.use.description",
-        "defaultRoles": ["admin", "user"]
-      }
-    ],
-    "settings": {
-      "user": [
-        {
-          "key": "transferConcurrency",
-          "type": "number",
-          "labelKey": "settings.user.transferConcurrency.label",
-          "descriptionKey": "settings.user.transferConcurrency.description",
-          "min": 1,
-          "max": 8,
-          "default": 4
-        },
-        {
-          "key": "confirmBeforeTrash",
-          "type": "boolean",
-          "labelKey": "settings.user.confirmBeforeTrash.label",
-          "descriptionKey": "settings.user.confirmBeforeTrash.description",
-          "default": true
-        }
-      ],
-      "host": {
-        "editorGroup": "ssh",
-        "editorOrder": 60,
-        "enableKey": "enableFileManager",
-        "enableLabelKey": "settings.host.enable.label",
-        "enableDescriptionKey": "settings.host.enable.description",
-        "enableDefault": true,
-        "fields": [
-          {
-            "key": "defaultPath",
-            "type": "string",
-            "labelKey": "settings.host.defaultPath.label",
-            "requires": "enableFileManager"
-          },
-          {
-            "key": "scpLegacy",
-            "type": "boolean",
-            "labelKey": "settings.host.scpLegacy.label",
-            "requires": "enableFileManager"
-          }
-        ]
-      }
-    },
-    "hostCapability": {
-      "key": "enableFileManager",
-      "labelKey": "hostCapability.label",
-      "editorTab": "plugins"
-    },
-    "uiPresets": {
-      "simple": {
-        "viewMode": "grid"
-      },
-      "balanced": {
-        "viewMode": "grid"
-      },
-      "advanced": {
-        "viewMode": "list"
-      }
-    },
-    "uses": ["homepage.widgets", "host-metrics.disk", "terminal.open"]
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"]
-}
diff --git a/plugins/file-manager/migrations/mysql/0001_adopt_file_manager_tables.sql b/plugins/file-manager/migrations/mysql/0001_adopt_file_manager_tables.sql
deleted file mode 100644
index c3c121b7b..000000000
--- a/plugins/file-manager/migrations/mysql/0001_adopt_file_manager_tables.sql
+++ /dev/null
@@ -1,49 +0,0 @@
--- file-manager 0001: adopt_file_manager_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `file_manager_recent` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `host_id` int NOT NULL,
-  `name` text NOT NULL,
-  `path` text NOT NULL,
-  `last_opened` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `file_manager_recent` TO `p_file_manager_recent`;
-CREATE TABLE IF NOT EXISTS `file_manager_pinned` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `host_id` int NOT NULL,
-  `name` text NOT NULL,
-  `path` text NOT NULL,
-  `pinned_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `file_manager_pinned` TO `p_file_manager_pinned`;
-CREATE TABLE IF NOT EXISTS `file_manager_shortcuts` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `host_id` int NOT NULL,
-  `name` text NOT NULL,
-  `path` text NOT NULL,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `file_manager_shortcuts` TO `p_file_manager_shortcuts`;
-CREATE TABLE IF NOT EXISTS `transfer_recent` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `source_host_id` int NOT NULL,
-  `dest_host_id` int NOT NULL,
-  `dest_path` text NOT NULL,
-  `dest_path_label` text NOT NULL,
-  `last_used` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`source_host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`dest_host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `transfer_recent` TO `p_file_manager_transfer_recent`;
diff --git a/plugins/file-manager/migrations/postgres/0001_adopt_file_manager_tables.sql b/plugins/file-manager/migrations/postgres/0001_adopt_file_manager_tables.sql
deleted file mode 100644
index c357cfef4..000000000
--- a/plugins/file-manager/migrations/postgres/0001_adopt_file_manager_tables.sql
+++ /dev/null
@@ -1,53 +0,0 @@
--- file-manager 0001: adopt_file_manager_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "file_manager_recent" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "host_id" integer NOT NULL,
-  "name" text NOT NULL,
-  "path" text NOT NULL,
-  "last_opened" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_file_manager_recent_user" ON "file_manager_recent" ("user_id", "host_id");
-ALTER TABLE "file_manager_recent" RENAME TO "p_file_manager_recent";
-CREATE TABLE IF NOT EXISTS "file_manager_pinned" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "host_id" integer NOT NULL,
-  "name" text NOT NULL,
-  "path" text NOT NULL,
-  "pinned_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_file_manager_pinned_user" ON "file_manager_pinned" ("user_id", "host_id");
-ALTER TABLE "file_manager_pinned" RENAME TO "p_file_manager_pinned";
-CREATE TABLE IF NOT EXISTS "file_manager_shortcuts" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "host_id" integer NOT NULL,
-  "name" text NOT NULL,
-  "path" text NOT NULL,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_file_manager_shortcuts_user" ON "file_manager_shortcuts" ("user_id", "host_id");
-ALTER TABLE "file_manager_shortcuts" RENAME TO "p_file_manager_shortcuts";
-CREATE TABLE IF NOT EXISTS "transfer_recent" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "source_host_id" integer NOT NULL,
-  "dest_host_id" integer NOT NULL,
-  "dest_path" text NOT NULL,
-  "dest_path_label" text NOT NULL,
-  "last_used" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("source_host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("dest_host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_transfer_recent_user" ON "transfer_recent" ("user_id");
-ALTER TABLE "transfer_recent" RENAME TO "p_file_manager_transfer_recent";
diff --git a/plugins/file-manager/migrations/snapshot.json b/plugins/file-manager/migrations/snapshot.json
deleted file mode 100644
index 44d803d8c..000000000
--- a/plugins/file-manager/migrations/snapshot.json
+++ /dev/null
@@ -1,161 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "recent": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "hostId": {
-          "type": "refHost",
-          "notNull": true
-        },
-        "name": {
-          "type": "text",
-          "notNull": true
-        },
-        "path": {
-          "type": "text",
-          "notNull": true
-        },
-        "lastOpened": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_file_manager_recent_user",
-          "columns": ["userId", "hostId"]
-        }
-      ],
-      "adopts": "file_manager_recent"
-    },
-    "pinned": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "hostId": {
-          "type": "refHost",
-          "notNull": true
-        },
-        "name": {
-          "type": "text",
-          "notNull": true
-        },
-        "path": {
-          "type": "text",
-          "notNull": true
-        },
-        "pinnedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_file_manager_pinned_user",
-          "columns": ["userId", "hostId"]
-        }
-      ],
-      "adopts": "file_manager_pinned"
-    },
-    "shortcuts": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "hostId": {
-          "type": "refHost",
-          "notNull": true
-        },
-        "name": {
-          "type": "text",
-          "notNull": true
-        },
-        "path": {
-          "type": "text",
-          "notNull": true
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_file_manager_shortcuts_user",
-          "columns": ["userId", "hostId"]
-        }
-      ],
-      "adopts": "file_manager_shortcuts"
-    },
-    "transfer_recent": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "sourceHostId": {
-          "type": "refHost",
-          "notNull": true
-        },
-        "destHostId": {
-          "type": "refHost",
-          "notNull": true
-        },
-        "destPath": {
-          "type": "text",
-          "notNull": true
-        },
-        "destPathLabel": {
-          "type": "text",
-          "notNull": true
-        },
-        "lastUsed": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_transfer_recent_user",
-          "columns": ["userId"]
-        }
-      ],
-      "adopts": "transfer_recent"
-    }
-  }
-}
diff --git a/plugins/file-manager/migrations/sqlite/0001_adopt_file_manager_tables.sql b/plugins/file-manager/migrations/sqlite/0001_adopt_file_manager_tables.sql
deleted file mode 100644
index 9c4907ab5..000000000
--- a/plugins/file-manager/migrations/sqlite/0001_adopt_file_manager_tables.sql
+++ /dev/null
@@ -1,53 +0,0 @@
--- file-manager 0001: adopt_file_manager_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "file_manager_recent" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "host_id" integer NOT NULL,
-  "name" text NOT NULL,
-  "path" text NOT NULL,
-  "last_opened" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_file_manager_recent_user" ON "file_manager_recent" ("user_id", "host_id");
-ALTER TABLE "file_manager_recent" RENAME TO "p_file_manager_recent";
-CREATE TABLE IF NOT EXISTS "file_manager_pinned" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "host_id" integer NOT NULL,
-  "name" text NOT NULL,
-  "path" text NOT NULL,
-  "pinned_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_file_manager_pinned_user" ON "file_manager_pinned" ("user_id", "host_id");
-ALTER TABLE "file_manager_pinned" RENAME TO "p_file_manager_pinned";
-CREATE TABLE IF NOT EXISTS "file_manager_shortcuts" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "host_id" integer NOT NULL,
-  "name" text NOT NULL,
-  "path" text NOT NULL,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_file_manager_shortcuts_user" ON "file_manager_shortcuts" ("user_id", "host_id");
-ALTER TABLE "file_manager_shortcuts" RENAME TO "p_file_manager_shortcuts";
-CREATE TABLE IF NOT EXISTS "transfer_recent" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "source_host_id" integer NOT NULL,
-  "dest_host_id" integer NOT NULL,
-  "dest_path" text NOT NULL,
-  "dest_path_label" text NOT NULL,
-  "last_used" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("source_host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("dest_host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_transfer_recent_user" ON "transfer_recent" ("user_id");
-ALTER TABLE "transfer_recent" RENAME TO "p_file_manager_transfer_recent";
diff --git a/plugins/file-manager/package.json b/plugins/file-manager/package.json
deleted file mode 100644
index ff03ff847..000000000
--- a/plugins/file-manager/package.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "name": "@termix-plugin/file-manager",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "@codemirror/autocomplete": "^6.20.3",
-    "@codemirror/commands": "^6.11.1",
-    "@codemirror/search": "^6.7.2",
-    "@codemirror/theme-one-dark": "^6.1.3",
-    "@codemirror/view": "^6.43.12",
-    "@monaco-editor/react": "^4.7.0",
-    "@tanstack/react-virtual": "^3.14.13",
-    "@uiw/codemirror-extensions-langs": "^4.25.11",
-    "@uiw/react-codemirror": "^4.25.11",
-    "busboy": "^1.6.0",
-    "jszip": "^3.10.2",
-    "lucide-react": "^1.33.0",
-    "motion": "^13.1.1",
-    "pdfjs-dist": "5.4.296",
-    "react-h5-audio-player": "^3.10.2",
-    "react-icons": "^5.7.0",
-    "react-markdown": "^10.1.0",
-    "react-pdf": "^10.5.0",
-    "react-photo-view": "^1.2.7",
-    "react-syntax-highlighter": "^16.1.1",
-    "remark-gfm": "^4.0.1"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/jest-dom": "^7.0.1",
-    "@testing-library/react": "^16.3.3",
-    "@testing-library/user-event": "^14.6.7",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "axios": "^1.19.0",
-    "cookie-parser": "^1.4.7",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "i18next": "^26.4.2",
-    "react": "^19.2.8",
-    "react-dom": "^19.2.8",
-    "react-i18next": "^17.0.14",
-    "sonner": "^2.0.8",
-    "ssh2": "^1.17.0"
-  }
-}
diff --git a/plugins/file-manager/src/backend/action-routes.ts b/plugins/file-manager/src/backend/action-routes.ts
deleted file mode 100644
index 92f861d54..000000000
--- a/plugins/file-manager/src/backend/action-routes.ts
+++ /dev/null
@@ -1,483 +0,0 @@
-import type { Express } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { execChannel, type SSHSession } from "./session.js";
-
-type FileActionRoutesDeps = {
-  ctx: PluginContext;
-  sshSessions: Record<string, SSHSession>;
-  scheduleSessionCleanup: (sessionId: string) => void;
-  verifySessionOwnership: (session: SSHSession, userId: string) => boolean;
-};
-
-export function registerFileActionRoutes(
-  app: Express,
-  {
-    ctx,
-    sshSessions,
-    scheduleSessionCleanup,
-    verifySessionOwnership,
-  }: FileActionRoutesDeps,
-): void {
-  /**
-   * @openapi
-   * /plugin-api/file-manager/copyItem:
-   *   post:
-   *     summary: Copy a file or directory
-   *     description: Copies a file or directory on the remote host.
-   *     tags:
-   *       - File Manager
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               sessionId:
-   *                 type: string
-   *               sourcePath:
-   *                 type: string
-   *               targetDir:
-   *                 type: string
-   *               hostId:
-   *                 type: integer
-   *               userId:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Item copied successfully.
-   *       400:
-   *         description: Missing required parameters or SSH connection not established.
-   *       500:
-   *         description: Failed to copy item.
-   */
-  app.post("/copyItem", async (req, res) => {
-    const { sessionId, sourcePath, targetDir, hostId } = req.body;
-    const userId = ctx.currentActor()!;
-
-    if (!sessionId || !sourcePath || !targetDir) {
-      return res.status(400).json({ error: "Missing required parameters" });
-    }
-
-    const sshConn = sshSessions[sessionId];
-    if (!sshConn || !sshConn.isConnected) {
-      return res
-        .status(400)
-        .json({ error: "SSH session not found or not connected" });
-    }
-
-    if (!verifySessionOwnership(sshConn, userId)) {
-      return res.status(403).json({ error: "Session access denied" });
-    }
-
-    sshConn.lastActive = Date.now();
-    scheduleSessionCleanup(sessionId);
-
-    const sourceName = sourcePath.split("/").pop() || "copied_item";
-
-    const timestamp = Date.now().toString().slice(-8);
-    const uniqueName = `${sourceName}_copy_${timestamp}`;
-    const targetPath = `${targetDir}/${uniqueName}`;
-
-    const escapedSource = sourcePath.replace(/'/g, "'\"'\"'");
-    const escapedTarget = targetPath.replace(/'/g, "'\"'\"'");
-
-    const copyCommand = `cp '${escapedSource}' '${escapedTarget}' && echo "COPY_SUCCESS"`;
-
-    const commandTimeout = setTimeout(() => {
-      ctx.log.error(
-        `Copy command timed out after 60 seconds: ${sourcePath} -> ${targetPath} (${copyCommand})`,
-      );
-      if (!res.headersSent) {
-        res.status(500).json({
-          error: "Copy operation timed out",
-          toast: {
-            type: "error",
-            message:
-              "Copy operation timed out. SSH connection may be unstable.",
-          },
-        });
-      }
-    }, 60000);
-
-    execChannel(sshConn, copyCommand, (err, stream) => {
-      if (err) {
-        clearTimeout(commandTimeout);
-        ctx.log.error("SSH copyItem error:", err);
-        if (!res.headersSent) {
-          return res.status(500).json({ error: err.message });
-        }
-        return;
-      }
-
-      let errorData = "";
-      let stdoutData = "";
-
-      stream.on("data", (data: Buffer) => {
-        const output = data.toString();
-        stdoutData += output;
-        stream.stderr.on("data", (data: Buffer) => {
-          const output = data.toString();
-          errorData += output;
-        });
-
-        stream.on("close", (code) => {
-          clearTimeout(commandTimeout);
-
-          if (code !== 0) {
-            const fullErrorInfo =
-              errorData || stdoutData || "No error message available";
-            ctx.log.error(
-              `SSH copyItem command failed with code ${code}: ${sourcePath} -> ${targetPath} (${copyCommand}) ${fullErrorInfo}`,
-            );
-            if (!res.headersSent) {
-              return res.status(500).json({
-                error: `Copy failed: ${fullErrorInfo}`,
-                toast: {
-                  type: "error",
-                  message: `Copy failed: ${fullErrorInfo}`,
-                },
-                debug: {
-                  sourcePath,
-                  targetPath,
-                  exitCode: code,
-                  command: copyCommand,
-                },
-              });
-            }
-            return;
-          }
-
-          const copySuccessful =
-            stdoutData.includes("COPY_SUCCESS") || code === 0;
-
-          if (copySuccessful) {
-            ctx.log.info(
-              `Item copied successfully: ${sourcePath} -> ${targetPath} (sessionId=${sessionId}, hostId=${hostId})`,
-            );
-
-            if (!res.headersSent) {
-              res.json({
-                message: "Item copied successfully",
-                sourcePath,
-                targetPath,
-                uniqueName,
-                toast: {
-                  type: "success",
-                  message: `Successfully copied to: ${uniqueName}`,
-                },
-              });
-            }
-          } else {
-            ctx.log.warn(
-              `Copy completed but without success confirmation: ${sourcePath} -> ${targetPath} (sessionId=${sessionId}, code=${code}, stdout=${stdoutData.substring(0, 200)})`,
-            );
-
-            if (!res.headersSent) {
-              res.json({
-                message: "Copy may have completed",
-                sourcePath,
-                targetPath,
-                uniqueName,
-                toast: {
-                  type: "warning",
-                  message: `Copy completed but verification uncertain for: ${uniqueName}`,
-                },
-              });
-            }
-          }
-        });
-
-        stream.on("error", (streamErr) => {
-          clearTimeout(commandTimeout);
-          ctx.log.error("SSH copyItem stream error:", streamErr);
-          if (!res.headersSent) {
-            res
-              .status(500)
-              .json({ error: `Stream error: ${streamErr.message}` });
-          }
-        });
-      });
-    });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/executeFile:
-   *   post:
-   *     summary: Execute a file
-   *     description: Executes a file on the remote host.
-   *     tags:
-   *       - File Manager
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               sessionId:
-   *                 type: string
-   *               filePath:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: File execution result.
-   *       400:
-   *         description: Missing required parameters or SSH connection not available.
-   *       500:
-   *         description: Failed to execute file.
-   */
-  app.post("/executeFile", async (req, res) => {
-    const { sessionId, filePath } = req.body;
-    const sshConn = sshSessions[sessionId];
-    const userId = ctx.currentActor()!;
-
-    if (!sshConn || !sshConn.isConnected) {
-      ctx.log.error(
-        `SSH connection not found or not connected for executeFile: ${sessionId} (hasConnection=${!!sshConn}, isConnected=${sshConn?.isConnected})`,
-      );
-      return res.status(400).json({ error: "SSH connection not available" });
-    }
-
-    if (!verifySessionOwnership(sshConn, userId)) {
-      return res.status(403).json({ error: "Session access denied" });
-    }
-
-    if (!filePath) {
-      return res.status(400).json({ error: "File path is required" });
-    }
-
-    const escapedPath = filePath.replace(/'/g, "'\"'\"'");
-
-    const checkCommand = `test -x '${escapedPath}' && echo "EXECUTABLE" || echo "NOT_EXECUTABLE"`;
-
-    execChannel(sshConn, checkCommand, (checkErr, checkStream) => {
-      if (checkErr) {
-        ctx.log.error("SSH executeFile check error:", checkErr);
-        return res
-          .status(500)
-          .json({ error: "Failed to check file executability" });
-      }
-
-      let checkResult = "";
-      checkStream.on("data", (data) => {
-        checkResult += data.toString();
-      });
-
-      checkStream.on("close", () => {
-        if (!checkResult.includes("EXECUTABLE")) {
-          return res.status(400).json({ error: "File is not executable" });
-        }
-
-        const executeCommand = `cd "$(dirname '${escapedPath}')" && '${escapedPath}' 2>&1; echo "EXIT_CODE:$?"`;
-
-        execChannel(sshConn, executeCommand, (err, stream) => {
-          if (err) {
-            ctx.log.error("SSH executeFile error:", err);
-            return res.status(500).json({ error: "Failed to execute file" });
-          }
-
-          let output = "";
-          let errorOutput = "";
-
-          stream.on("data", (data) => {
-            output += data.toString();
-          });
-
-          stream.stderr.on("data", (data) => {
-            errorOutput += data.toString();
-          });
-
-          stream.on("close", (code) => {
-            const exitCodeMatch = output.match(/EXIT_CODE:(\d+)$/);
-            const actualExitCode = exitCodeMatch
-              ? parseInt(exitCodeMatch[1])
-              : code;
-            const cleanOutput = output.replace(/EXIT_CODE:\d+$/, "").trim();
-
-            ctx.log.info(
-              `File execution completed: ${sessionId} (${filePath}, exitCode=${actualExitCode}, outputLength=${cleanOutput.length}, errorLength=${errorOutput.length})`,
-            );
-
-            res.json({
-              success: true,
-              exitCode: actualExitCode,
-              output: cleanOutput,
-              error: errorOutput,
-              timestamp: new Date().toISOString(),
-            });
-          });
-
-          stream.on("error", (streamErr) => {
-            ctx.log.error("SSH executeFile stream error:", streamErr);
-            if (!res.headersSent) {
-              res.status(500).json({ error: "Execution stream error" });
-            }
-          });
-        });
-      });
-    });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/changePermissions:
-   *   post:
-   *     summary: Change file permissions
-   *     description: Changes the permissions of a file on the remote host.
-   *     tags:
-   *       - File Manager
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               sessionId:
-   *                 type: string
-   *               path:
-   *                 type: string
-   *               permissions:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Permissions changed successfully.
-   *       400:
-   *         description: Missing required parameters or SSH connection not available.
-   *       408:
-   *         description: Permission change timed out.
-   *       500:
-   *         description: Failed to change permissions.
-   */
-  app.post("/changePermissions", async (req, res) => {
-    const { sessionId, path, permissions } = req.body;
-    const sshConn = sshSessions[sessionId];
-    const userId = ctx.currentActor()!;
-
-    if (!sshConn || !sshConn.isConnected) {
-      ctx.log.error(
-        `SSH connection not found or not connected for changePermissions: ${sessionId} (hasConnection=${!!sshConn}, isConnected=${sshConn?.isConnected})`,
-      );
-      return res.status(400).json({ error: "SSH connection not available" });
-    }
-
-    if (!verifySessionOwnership(sshConn, userId)) {
-      return res.status(403).json({ error: "Session access denied" });
-    }
-
-    if (!path) {
-      return res.status(400).json({ error: "File path is required" });
-    }
-
-    if (!permissions || !/^\d{3,4}$/.test(permissions)) {
-      return res.status(400).json({
-        error: "Valid permissions required (e.g., 755, 644)",
-      });
-    }
-
-    sshConn.lastActive = Date.now();
-    scheduleSessionCleanup(sessionId);
-
-    const octalPerms = permissions.slice(-3);
-    const escapedPath = path.replace(/'/g, "'\"'\"'");
-    const command = `chmod ${octalPerms} '${escapedPath}' && echo "SUCCESS"`;
-
-    ctx.log.info(
-      `Changing file permissions: ${sessionId} (${path}, permissions=${octalPerms})`,
-    );
-
-    const commandTimeout = setTimeout(() => {
-      if (!res.headersSent) {
-        ctx.log.error(
-          `changePermissions command timeout: ${sessionId} (${path}, permissions=${octalPerms})`,
-        );
-        res.status(408).json({
-          error: "Permission change timed out. SSH connection may be unstable.",
-        });
-      }
-    }, 10000);
-
-    execChannel(sshConn, command, (err, stream) => {
-      if (err) {
-        clearTimeout(commandTimeout);
-        ctx.log.error(
-          `SSH changePermissions exec error: ${sessionId} (${path}, permissions=${octalPerms})`,
-          err,
-        );
-        if (!res.headersSent) {
-          return res
-            .status(500)
-            .json({ error: "Failed to change permissions" });
-        }
-        return;
-      }
-
-      let outputData = "";
-      let errorOutput = "";
-
-      stream.on("data", (chunk: Buffer) => {
-        outputData += chunk.toString();
-      });
-
-      stream.stderr.on("data", (data: Buffer) => {
-        errorOutput += data.toString();
-      });
-
-      stream.on("close", (code) => {
-        clearTimeout(commandTimeout);
-
-        if (outputData.includes("SUCCESS")) {
-          ctx.log.info(
-            `File permissions changed successfully: ${sessionId} (${path}, permissions=${octalPerms})`,
-          );
-
-          if (!res.headersSent) {
-            res.json({
-              success: true,
-              message: "Permissions changed successfully",
-            });
-          }
-          return;
-        }
-
-        if (code !== 0) {
-          ctx.log.error(
-            `chmod command failed: ${sessionId} (${path}, permissions=${octalPerms}, exitCode=${code}, error=${errorOutput})`,
-          );
-          if (!res.headersSent) {
-            return res.status(500).json({
-              error: errorOutput || "Failed to change permissions",
-            });
-          }
-          return;
-        }
-
-        ctx.log.info(
-          `File permissions changed successfully: ${sessionId} (${path}, permissions=${octalPerms})`,
-        );
-
-        if (!res.headersSent) {
-          res.json({
-            success: true,
-            message: "Permissions changed successfully",
-          });
-        }
-      });
-
-      stream.on("error", (streamErr) => {
-        clearTimeout(commandTimeout);
-        ctx.log.error(
-          `SSH changePermissions stream error: ${sessionId} (${path}, permissions=${octalPerms})`,
-          streamErr,
-        );
-        if (!res.headersSent) {
-          res
-            .status(500)
-            .json({ error: "Stream error while changing permissions" });
-        }
-      });
-    });
-  });
-}
diff --git a/plugins/file-manager/src/backend/bookmark-routes.ts b/plugins/file-manager/src/backend/bookmark-routes.ts
deleted file mode 100644
index 200e874a2..000000000
--- a/plugins/file-manager/src/backend/bookmark-routes.ts
+++ /dev/null
@@ -1,645 +0,0 @@
-import type { Express, Request, Response } from "express";
-import { and, desc, eq } from "drizzle-orm";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// The tables come from ctx.db.define, which the SDK hands back untyped, and
-// the drizzle handle is the server's own. Typed at this module's edge instead.
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export interface BookmarkTables {
-  table: Table;
-  pinnedTable: Table;
-  shortcutsTable: Table;
-  transferRecentTable: Table;
-}
-
-function isNonEmptyString(value: unknown): value is string {
-  return typeof value === "string" && value.length > 0;
-}
-
-/**
- * Recent/pinned/shortcut files and recent transfer destinations, adopted from
- * core's host.ts and host-file-manager-bookmark-routes.ts. Kept simple, direct
- * Drizzle calls rather than a repository layer, since each is a handful of
- * lines and nothing else in the plugin reuses them.
- */
-export function registerBookmarkRoutes(
-  app: Express,
-  ctx: PluginContext,
-  tables: BookmarkTables,
-): void {
-  const { table, pinnedTable, shortcutsTable, transferRecentTable } = tables;
-  const client = () => ctx.db.client<Drizzle>();
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/recent:
-   *   get:
-   *     summary: Get recent files
-   *     description: Retrieves a list of recent files for a specific host.
-   *     tags:
-   *       - File Manager
-   *     parameters:
-   *       - in: query
-   *         name: hostId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: A list of recent files.
-   *       400:
-   *         description: Invalid userId or hostId.
-   *       500:
-   *         description: Failed to fetch recent files.
-   */
-  app.get("/recent", async (req: Request, res: Response) => {
-    const userId = ctx.currentActor();
-    const hostIdQuery = Array.isArray(req.query.hostId)
-      ? req.query.hostId[0]
-      : req.query.hostId;
-    const hostId = hostIdQuery ? parseInt(hostIdQuery as string) : null;
-
-    if (!isNonEmptyString(userId)) {
-      return res.status(400).json({ error: "Invalid userId" });
-    }
-    if (!hostId) {
-      return res.status(400).json({ error: "Host ID is required" });
-    }
-
-    try {
-      const drizzle = await client();
-      const rows = await drizzle
-        .select()
-        .from(table)
-        .where(and(eq(table.userId, userId), eq(table.hostId, hostId)))
-        .orderBy(desc(table.lastOpened))
-        .limit(20);
-      res.json(rows);
-    } catch (err) {
-      ctx.log.error("Failed to fetch recent files", err as Error);
-      res.status(500).json({ error: "Failed to fetch recent files" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/recent:
-   *   post:
-   *     summary: Add recent file
-   *     description: Adds a file to the list of recent files for a host.
-   *     tags:
-   *       - File Manager
-   *     responses:
-   *       200:
-   *         description: Recent file added.
-   *       400:
-   *         description: Invalid data.
-   *       500:
-   *         description: Failed to add recent file.
-   */
-  app.post("/recent", async (req: Request, res: Response) => {
-    const userId = ctx.currentActor();
-    const { hostId, path, name } = req.body;
-
-    if (!isNonEmptyString(userId) || !hostId || !path) {
-      return res.status(400).json({ error: "Invalid data" });
-    }
-
-    try {
-      const drizzle = await client();
-      const existing = await drizzle
-        .select()
-        .from(table)
-        .where(
-          and(
-            eq(table.userId, userId),
-            eq(table.hostId, hostId),
-            eq(table.path, path),
-          ),
-        )
-        .limit(1);
-
-      const now = new Date().toISOString();
-      if (existing[0]) {
-        await drizzle
-          .update(table)
-          .set({ name: name ?? existing[0].name, lastOpened: now })
-          .where(eq(table.id, existing[0].id));
-      } else {
-        await drizzle.insert(table).values({
-          userId,
-          hostId,
-          path,
-          name: name ?? path,
-          lastOpened: now,
-        });
-      }
-      await ctx.db.persist();
-      res.json({ message: "Recent file added" });
-    } catch (err) {
-      ctx.log.error("Failed to add recent file", err as Error);
-      res.status(500).json({ error: "Failed to add recent file" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/recent:
-   *   delete:
-   *     summary: Remove recent file
-   *     tags:
-   *       - File Manager
-   *     responses:
-   *       200:
-   *         description: Recent file removed.
-   *       400:
-   *         description: Invalid data.
-   *       500:
-   *         description: Failed to remove recent file.
-   */
-  app.delete("/recent", async (req: Request, res: Response) => {
-    const userId = ctx.currentActor();
-    const { hostId, path } = req.body;
-
-    if (!isNonEmptyString(userId) || !hostId || !path) {
-      return res.status(400).json({ error: "Invalid data" });
-    }
-
-    try {
-      const drizzle = await client();
-      await drizzle
-        .delete(table)
-        .where(
-          and(
-            eq(table.userId, userId),
-            eq(table.hostId, hostId),
-            eq(table.path, path),
-          ),
-        );
-      await ctx.db.persist();
-      res.json({ message: "Recent file removed" });
-    } catch (err) {
-      ctx.log.error("Failed to remove recent file", err as Error);
-      res.status(500).json({ error: "Failed to remove recent file" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/pinned:
-   *   get:
-   *     summary: Get pinned files
-   *     tags:
-   *       - File Manager
-   *     parameters:
-   *       - in: query
-   *         name: hostId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: A list of pinned files.
-   *       400:
-   *         description: Invalid userId or hostId.
-   *       500:
-   *         description: Failed to fetch pinned files.
-   */
-  app.get("/pinned", async (req: Request, res: Response) => {
-    const userId = ctx.currentActor();
-    const hostIdQuery = Array.isArray(req.query.hostId)
-      ? req.query.hostId[0]
-      : req.query.hostId;
-    const hostId = hostIdQuery ? parseInt(hostIdQuery as string) : null;
-
-    if (!isNonEmptyString(userId)) {
-      return res.status(400).json({ error: "Invalid userId" });
-    }
-    if (!hostId) {
-      return res.status(400).json({ error: "Host ID is required" });
-    }
-
-    try {
-      const drizzle = await client();
-      const rows = await drizzle
-        .select()
-        .from(pinnedTable)
-        .where(
-          and(eq(pinnedTable.userId, userId), eq(pinnedTable.hostId, hostId)),
-        )
-        .orderBy(desc(pinnedTable.pinnedAt));
-      res.json(rows);
-    } catch (err) {
-      ctx.log.error("Failed to fetch pinned files", err as Error);
-      res.status(500).json({ error: "Failed to fetch pinned files" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/pinned:
-   *   post:
-   *     summary: Add pinned file
-   *     tags:
-   *       - File Manager
-   *     responses:
-   *       200:
-   *         description: File pinned.
-   *       400:
-   *         description: Invalid data.
-   *       409:
-   *         description: File already pinned.
-   *       500:
-   *         description: Failed to pin file.
-   */
-  app.post("/pinned", async (req: Request, res: Response) => {
-    const userId = ctx.currentActor();
-    const { hostId, path, name } = req.body;
-
-    if (!isNonEmptyString(userId) || !hostId || !path) {
-      return res.status(400).json({ error: "Invalid data" });
-    }
-
-    try {
-      const drizzle = await client();
-      const existing = await drizzle
-        .select()
-        .from(pinnedTable)
-        .where(
-          and(
-            eq(pinnedTable.userId, userId),
-            eq(pinnedTable.hostId, hostId),
-            eq(pinnedTable.path, path),
-          ),
-        )
-        .limit(1);
-
-      if (existing[0]) {
-        return res.status(409).json({ error: "File already pinned" });
-      }
-
-      await drizzle.insert(pinnedTable).values({
-        userId,
-        hostId,
-        path,
-        name: name ?? path,
-        pinnedAt: new Date().toISOString(),
-      });
-      await ctx.db.persist();
-      res.json({ message: "File pinned" });
-    } catch (err) {
-      ctx.log.error("Failed to pin file", err as Error);
-      res.status(500).json({ error: "Failed to pin file" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/pinned:
-   *   delete:
-   *     summary: Remove pinned file
-   *     tags:
-   *       - File Manager
-   *     responses:
-   *       200:
-   *         description: Pinned file removed.
-   *       400:
-   *         description: Invalid data.
-   *       500:
-   *         description: Failed to remove pinned file.
-   */
-  app.delete("/pinned", async (req: Request, res: Response) => {
-    const userId = ctx.currentActor();
-    const { hostId, path } = req.body;
-
-    if (!isNonEmptyString(userId) || !hostId || !path) {
-      return res.status(400).json({ error: "Invalid data" });
-    }
-
-    try {
-      const drizzle = await client();
-      await drizzle
-        .delete(pinnedTable)
-        .where(
-          and(
-            eq(pinnedTable.userId, userId),
-            eq(pinnedTable.hostId, hostId),
-            eq(pinnedTable.path, path),
-          ),
-        );
-      await ctx.db.persist();
-      res.json({ message: "Pinned file removed" });
-    } catch (err) {
-      ctx.log.error("Failed to remove pinned file", err as Error);
-      res.status(500).json({ error: "Failed to remove pinned file" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/shortcuts:
-   *   get:
-   *     summary: Get shortcuts
-   *     tags:
-   *       - File Manager
-   *     parameters:
-   *       - in: query
-   *         name: hostId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: A list of shortcuts.
-   *       400:
-   *         description: Invalid userId or hostId.
-   *       500:
-   *         description: Failed to fetch shortcuts.
-   */
-  app.get("/shortcuts", async (req: Request, res: Response) => {
-    const userId = ctx.currentActor();
-    const hostIdQuery = Array.isArray(req.query.hostId)
-      ? req.query.hostId[0]
-      : req.query.hostId;
-    const hostId = hostIdQuery ? parseInt(hostIdQuery as string) : null;
-
-    if (!isNonEmptyString(userId)) {
-      return res.status(400).json({ error: "Invalid userId" });
-    }
-    if (!hostId) {
-      return res.status(400).json({ error: "Host ID is required" });
-    }
-
-    try {
-      const drizzle = await client();
-      const rows = await drizzle
-        .select()
-        .from(shortcutsTable)
-        .where(
-          and(
-            eq(shortcutsTable.userId, userId),
-            eq(shortcutsTable.hostId, hostId),
-          ),
-        )
-        .orderBy(desc(shortcutsTable.createdAt));
-      res.json(rows);
-    } catch (err) {
-      ctx.log.error("Failed to fetch shortcuts", err as Error);
-      res.status(500).json({ error: "Failed to fetch shortcuts" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/shortcuts:
-   *   post:
-   *     summary: Add shortcut
-   *     tags:
-   *       - File Manager
-   *     responses:
-   *       200:
-   *         description: Shortcut added.
-   *       400:
-   *         description: Invalid data.
-   *       409:
-   *         description: Shortcut already exists.
-   *       500:
-   *         description: Failed to add shortcut.
-   */
-  app.post("/shortcuts", async (req: Request, res: Response) => {
-    const userId = ctx.currentActor();
-    const { hostId, path, name } = req.body;
-
-    if (!isNonEmptyString(userId) || !hostId || !path) {
-      return res.status(400).json({ error: "Invalid data" });
-    }
-
-    try {
-      const drizzle = await client();
-      const existing = await drizzle
-        .select()
-        .from(shortcutsTable)
-        .where(
-          and(
-            eq(shortcutsTable.userId, userId),
-            eq(shortcutsTable.hostId, hostId),
-            eq(shortcutsTable.path, path),
-          ),
-        )
-        .limit(1);
-
-      if (existing[0]) {
-        return res.status(409).json({ error: "Shortcut already exists" });
-      }
-
-      await drizzle.insert(shortcutsTable).values({
-        userId,
-        hostId,
-        path,
-        name: name ?? path,
-        createdAt: new Date().toISOString(),
-      });
-      await ctx.db.persist();
-      res.json({ message: "Shortcut added" });
-    } catch (err) {
-      ctx.log.error("Failed to add shortcut", err as Error);
-      res.status(500).json({ error: "Failed to add shortcut" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/shortcuts:
-   *   delete:
-   *     summary: Remove shortcut
-   *     tags:
-   *       - File Manager
-   *     responses:
-   *       200:
-   *         description: Shortcut removed.
-   *       400:
-   *         description: Invalid data.
-   *       500:
-   *         description: Failed to remove shortcut.
-   */
-  app.delete("/shortcuts", async (req: Request, res: Response) => {
-    const userId = ctx.currentActor();
-    const { hostId, path } = req.body;
-
-    if (!isNonEmptyString(userId) || !hostId || !path) {
-      return res.status(400).json({ error: "Invalid data" });
-    }
-
-    try {
-      const drizzle = await client();
-      await drizzle
-        .delete(shortcutsTable)
-        .where(
-          and(
-            eq(shortcutsTable.userId, userId),
-            eq(shortcutsTable.hostId, hostId),
-            eq(shortcutsTable.path, path),
-          ),
-        );
-      await ctx.db.persist();
-      res.json({ message: "Shortcut removed" });
-    } catch (err) {
-      ctx.log.error("Failed to remove shortcut", err as Error);
-      res.status(500).json({ error: "Failed to remove shortcut" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/transfer-recent:
-   *   get:
-   *     summary: Get recent transfer destinations
-   *     description: Retrieves recently used host-to-host transfer destinations for a source host.
-   *     tags:
-   *       - File Manager
-   *     parameters:
-   *       - in: query
-   *         name: sourceHostId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: A list of recent transfer destinations.
-   *       400:
-   *         description: Invalid userId or sourceHostId.
-   *       500:
-   *         description: Failed to fetch recent destinations.
-   */
-  app.get("/transfer-recent", async (req: Request, res: Response) => {
-    const userId = ctx.currentActor();
-    const sourceHostIdQuery = Array.isArray(req.query.sourceHostId)
-      ? req.query.sourceHostId[0]
-      : req.query.sourceHostId;
-    const sourceHostId = sourceHostIdQuery
-      ? parseInt(sourceHostIdQuery as string)
-      : null;
-
-    if (!isNonEmptyString(userId)) {
-      return res.status(400).json({ error: "Invalid userId" });
-    }
-    if (!sourceHostId) {
-      return res.status(400).json({ error: "Source host ID is required" });
-    }
-
-    try {
-      const drizzle = await client();
-      const rows = await drizzle
-        .select()
-        .from(transferRecentTable)
-        .where(
-          and(
-            eq(transferRecentTable.userId, userId),
-            eq(transferRecentTable.sourceHostId, sourceHostId),
-          ),
-        )
-        .orderBy(desc(transferRecentTable.lastUsed))
-        .limit(10);
-      res.json(rows);
-    } catch (err) {
-      ctx.log.error(
-        "Failed to fetch transfer recent destinations",
-        err as Error,
-      );
-      res.status(500).json({ error: "Failed to fetch recent destinations" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/transfer-recent:
-   *   post:
-   *     summary: Save a recent transfer destination
-   *     tags:
-   *       - File Manager
-   *     responses:
-   *       200:
-   *         description: Recent destination saved.
-   *       400:
-   *         description: Invalid data.
-   *       500:
-   *         description: Failed to save recent destination.
-   */
-  app.post("/transfer-recent", async (req: Request, res: Response) => {
-    const userId = ctx.currentActor();
-    const { sourceHostId, destHostId, destPath, destPathLabel } = req.body;
-
-    if (
-      !isNonEmptyString(userId) ||
-      !sourceHostId ||
-      !destHostId ||
-      !destPath
-    ) {
-      return res.status(400).json({ error: "Invalid data" });
-    }
-
-    try {
-      const drizzle = await client();
-      const existing = await drizzle
-        .select()
-        .from(transferRecentTable)
-        .where(
-          and(
-            eq(transferRecentTable.userId, userId),
-            eq(transferRecentTable.sourceHostId, sourceHostId),
-            eq(transferRecentTable.destHostId, destHostId),
-            eq(transferRecentTable.destPath, destPath),
-          ),
-        )
-        .limit(1);
-
-      const now = new Date().toISOString();
-      if (existing[0]) {
-        await drizzle
-          .update(transferRecentTable)
-          .set({
-            destPathLabel: destPathLabel ?? existing[0].destPathLabel,
-            lastUsed: now,
-          })
-          .where(eq(transferRecentTable.id, existing[0].id));
-      } else {
-        await drizzle.insert(transferRecentTable).values({
-          userId,
-          sourceHostId,
-          destHostId,
-          destPath,
-          destPathLabel: destPathLabel ?? destPath,
-          lastUsed: now,
-        });
-      }
-
-      // Keep only the 10 most recent destinations per source host.
-      const all = await drizzle
-        .select()
-        .from(transferRecentTable)
-        .where(
-          and(
-            eq(transferRecentTable.userId, userId),
-            eq(transferRecentTable.sourceHostId, sourceHostId),
-          ),
-        )
-        .orderBy(desc(transferRecentTable.lastUsed));
-      const stale = all.slice(10);
-      for (const row of stale) {
-        await drizzle
-          .delete(transferRecentTable)
-          .where(eq(transferRecentTable.id, row.id));
-      }
-
-      await ctx.db.persist();
-      res.json({ message: "Recent destination saved" });
-    } catch (err) {
-      ctx.log.error("Failed to save transfer recent destination", err as Error);
-      res.status(500).json({ error: "Failed to save recent destination" });
-    }
-  });
-}
diff --git a/plugins/file-manager/src/backend/content-routes.ts b/plugins/file-manager/src/backend/content-routes.ts
deleted file mode 100644
index f8a285bf2..000000000
--- a/plugins/file-manager/src/backend/content-routes.ts
+++ /dev/null
@@ -1,1550 +0,0 @@
-import type { Express, Request, Response } from "express";
-import Busboy from "busboy";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import {
-  execBuffer,
-  execChannel,
-  execWithSudo,
-  execWithSudoBuffer,
-  getSessionSftp,
-  type SSHSession,
-} from "./session.js";
-import { detectBinary } from "./utils.js";
-
-type FileContentRoutesDeps = {
-  ctx: PluginContext;
-  sshSessions: Record<string, SSHSession>;
-  verifySessionOwnership: (session: SSHSession, userId: string) => boolean;
-};
-
-const getRequiredQueryParam = (
-  value: string | string[] | undefined,
-): string | undefined => {
-  if (Array.isArray(value)) return value[0];
-  return value;
-};
-
-const parseByteOffset = (value: string | undefined): number | null => {
-  if (!value) return null;
-  const parsed = Number(value);
-  if (!Number.isSafeInteger(parsed) || parsed < 0) return null;
-  return parsed;
-};
-
-/**
- * The editor sends text. Binary callers say so with encoding "base64";
- * guessing breaks text that happens to be valid base64.
- */
-export function decodeWriteContent(
-  content: unknown,
-  encoding?: unknown,
-): Buffer {
-  if (Buffer.isBuffer(content)) return content;
-  if (typeof content === "string") {
-    return Buffer.from(content, encoding === "base64" ? "base64" : "utf8");
-  }
-  return Buffer.from(content as ArrayLike<number>);
-}
-
-export function registerFileContentRoutes(
-  app: Express,
-  { ctx, sshSessions, verifySessionOwnership }: FileContentRoutesDeps,
-): void {
-  /**
-   * @openapi
-   * /plugin-api/file-manager/identifySymlink:
-   *   get:
-   *     summary: Identify symbolic link
-   *     description: Identifies the target of a symbolic link.
-   *     tags:
-   *       - File Manager
-   *     parameters:
-   *       - in: query
-   *         name: sessionId
-   *         required: true
-   *         schema:
-   *           type: string
-   *       - in: query
-   *         name: path
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: Symbolic link information.
-   *       400:
-   *         description: Missing required parameters or SSH connection not established.
-   *       500:
-   *         description: Failed to identify symbolic link.
-   */
-  app.get("/identifySymlink", (req, res) => {
-    const sessionId = req.query.sessionId as string;
-    const sshConn = sshSessions[sessionId];
-    const linkPath = req.query.path as string;
-    const userId = ctx.currentActor()!;
-
-    if (!sessionId) {
-      return res.status(400).json({ error: "Session ID is required" });
-    }
-
-    if (!sshConn?.isConnected) {
-      return res.status(400).json({ error: "SSH connection not established" });
-    }
-
-    if (!verifySessionOwnership(sshConn, userId)) {
-      return res.status(403).json({ error: "Session access denied" });
-    }
-
-    if (!linkPath) {
-      return res.status(400).json({ error: "Link path is required" });
-    }
-
-    sshConn.lastActive = Date.now();
-
-    const escapedPath = linkPath.replace(/'/g, "'\"'\"'");
-    const command = `stat -L -c "%F" '${escapedPath}' && readlink -f '${escapedPath}'`;
-
-    execChannel(sshConn, command, (err, stream) => {
-      if (err) {
-        ctx.log.error("SSH identifySymlink error:", err);
-        return res.status(500).json({ error: err.message });
-      }
-
-      let data = "";
-      let errorData = "";
-
-      stream.on("data", (chunk: Buffer) => {
-        data += chunk.toString();
-      });
-
-      stream.stderr.on("data", (chunk: Buffer) => {
-        errorData += chunk.toString();
-      });
-
-      stream.on("close", (code) => {
-        if (code !== 0) {
-          ctx.log.error(
-            `SSH identifySymlink command failed with code ${code}: ${errorData.replace(/\n/g, " ").trim()}`,
-          );
-          return res
-            .status(500)
-            .json({ error: `Command failed: ${errorData}` });
-        }
-
-        const [fileType, target] = data.trim().split("\n");
-
-        res.json({
-          path: linkPath,
-          target: target,
-          type: fileType.toLowerCase().includes("directory")
-            ? "directory"
-            : "file",
-        });
-      });
-
-      stream.on("error", (streamErr) => {
-        ctx.log.error("SSH identifySymlink stream error:", streamErr);
-        if (!res.headersSent) {
-          res.status(500).json({ error: `Stream error: ${streamErr.message}` });
-        }
-      });
-    });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/resolvePath:
-   *   get:
-   *     summary: Resolve a path with environment variables
-   *     description: Expands environment variables and ~ in a path via the SSH session.
-   *     tags:
-   *       - File Manager
-   *     parameters:
-   *       - in: query
-   *         name: sessionId
-   *         required: true
-   *         schema:
-   *           type: string
-   *       - in: query
-   *         name: path
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: The resolved absolute path.
-   *       400:
-   *         description: Missing required parameters.
-   *       500:
-   *         description: Failed to resolve path.
-   */
-  app.get("/resolvePath", (req, res) => {
-    const sessionId = req.query.sessionId as string;
-    const sshConn = sshSessions[sessionId];
-    const rawPath = req.query.path as string;
-    const userId = ctx.currentActor()!;
-
-    if (!sessionId) {
-      return res.status(400).json({ error: "Session ID is required" });
-    }
-
-    if (!sshConn?.isConnected) {
-      return res.status(400).json({ error: "SSH connection not established" });
-    }
-
-    if (!verifySessionOwnership(sshConn, userId)) {
-      return res.status(403).json({ error: "Session access denied" });
-    }
-
-    if (!rawPath) {
-      return res.status(400).json({ error: "Path is required" });
-    }
-
-    sshConn.lastActive = Date.now();
-
-    let command: string;
-    if (rawPath.startsWith("~")) {
-      const rest = rawPath.substring(1).replace(/'/g, "'\"'\"'");
-      command = `echo ~'${rest}'`;
-    } else {
-      const escapedPath = rawPath.replace(/'/g, "'\"'\"'");
-      command = `echo '${escapedPath}'`;
-    }
-
-    execChannel(sshConn, command, (err, stream) => {
-      if (err) {
-        ctx.log.error("SSH resolvePath error:", err);
-        return res.status(500).json({ error: err.message });
-      }
-
-      let data = "";
-      let errorData = "";
-
-      stream.on("data", (chunk: Buffer) => {
-        data += chunk.toString();
-      });
-
-      stream.stderr.on("data", (chunk: Buffer) => {
-        errorData += chunk.toString();
-      });
-
-      stream.on("close", (code) => {
-        if (code !== 0) {
-          ctx.log.error(
-            `SSH resolvePath command failed with code ${code}: ${errorData.replace(/\n/g, " ").trim()}`,
-          );
-          return res.json({ resolvedPath: rawPath });
-        }
-
-        const resolved = data.trim();
-        res.json({ resolvedPath: resolved || rawPath });
-      });
-
-      stream.on("error", (streamErr) => {
-        ctx.log.error("SSH resolvePath stream error:", streamErr);
-        if (!res.headersSent) {
-          res.json({ resolvedPath: rawPath });
-        }
-      });
-    });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/readFile:
-   *   get:
-   *     summary: Read a file
-   *     description: Reads the content of a file from the remote host.
-   *     tags:
-   *       - File Manager
-   *     parameters:
-   *       - in: query
-   *         name: sessionId
-   *         required: true
-   *         schema:
-   *           type: string
-   *       - in: query
-   *         name: path
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: The content of the file.
-   *       400:
-   *         description: Missing required parameters or file too large.
-   *       404:
-   *         description: File not found.
-   *       500:
-   *         description: Failed to read file.
-   */
-  app.get("/readFile", async (req, res) => {
-    const sessionId = req.query.sessionId as string;
-    const sshConn = sshSessions[sessionId];
-    const filePath = req.query.path as string;
-    const userId = ctx.currentActor()!;
-
-    if (!sessionId) {
-      return res.status(400).json({ error: "Session ID is required" });
-    }
-
-    if (!sshConn?.isConnected) {
-      return res.status(400).json({ error: "SSH connection not established" });
-    }
-
-    if (!verifySessionOwnership(sshConn, userId)) {
-      return res.status(403).json({ error: "Session access denied" });
-    }
-
-    if (!filePath) {
-      return res.status(400).json({ error: "File path is required" });
-    }
-
-    ctx.log.info(`Reading file: ${sessionId} (${filePath})`);
-    sshConn.lastActive = Date.now();
-
-    const MAX_READ_SIZE = 500 * 1024 * 1024;
-    const escapedPath = filePath.replace(/'/g, "'\"'\"'");
-
-    const isPermissionDenied = (message: string) =>
-      message.toLowerCase().includes("permission denied");
-    const isFileNotFound = (message: string) => {
-      const lower = message.toLowerCase();
-      return (
-        lower.includes("no such file or directory") ||
-        lower.includes("cannot access") ||
-        lower.includes("not found") ||
-        lower.includes("resource not found")
-      );
-    };
-
-    try {
-      let sizeResult = await execBuffer(
-        sshConn,
-        `stat -c%s '${escapedPath}' 2>/dev/null || wc -c < '${escapedPath}'`,
-      );
-      let sizeError = sizeResult.stderr || sizeResult.stdout.toString("utf8");
-
-      if (
-        sizeResult.code !== 0 &&
-        isPermissionDenied(sizeError) &&
-        sshConn.sudoPassword
-      ) {
-        sizeResult = await execWithSudoBuffer(
-          sshConn,
-          `stat -c%s '${escapedPath}'`,
-          sshConn.sudoPassword,
-        );
-        sizeError = sizeResult.stderr || sizeResult.stdout.toString("utf8");
-      }
-
-      if (sizeResult.code !== 0) {
-        const missing = isFileNotFound(sizeError);
-        const permissionDenied = isPermissionDenied(sizeError);
-        ctx.log.error(`File size check failed: ${sizeError}`);
-        return res.status(missing ? 404 : permissionDenied ? 403 : 500).json({
-          error: `Cannot check file size: ${sizeError}`,
-          fileNotFound: missing,
-          needsSudo: permissionDenied,
-        });
-      }
-
-      const fileSize = parseInt(sizeResult.stdout.toString("utf8").trim(), 10);
-      if (isNaN(fileSize)) {
-        ctx.log.error(
-          `Invalid file size response: ${sizeResult.stdout.toString("utf8")}`,
-        );
-        return res.status(500).json({ error: "Cannot determine file size" });
-      }
-
-      if (fileSize > MAX_READ_SIZE) {
-        ctx.log.warn(
-          `File too large for reading: ${sessionId} (${filePath}, size=${fileSize}, max=${MAX_READ_SIZE})`,
-        );
-        return res.status(400).json({
-          error: `File too large to open in editor. Maximum size is ${MAX_READ_SIZE / 1024 / 1024}MB, file is ${(fileSize / 1024 / 1024).toFixed(2)}MB. Use download instead.`,
-          fileSize,
-          maxSize: MAX_READ_SIZE,
-          tooLarge: true,
-        });
-      }
-
-      let contentResult = await execBuffer(
-        sshConn,
-        `cat '${escapedPath}'`,
-        MAX_READ_SIZE,
-      );
-      let contentError =
-        contentResult.stderr || contentResult.stdout.toString("utf8");
-
-      if (
-        contentResult.code !== 0 &&
-        isPermissionDenied(contentError) &&
-        sshConn.sudoPassword
-      ) {
-        contentResult = await execWithSudoBuffer(
-          sshConn,
-          `cat '${escapedPath}'`,
-          sshConn.sudoPassword,
-          MAX_READ_SIZE,
-        );
-        contentError =
-          contentResult.stderr || contentResult.stdout.toString("utf8");
-      }
-
-      if (contentResult.exceededLimit) {
-        return res.status(400).json({
-          error: `File grew beyond the ${MAX_READ_SIZE / 1024 / 1024}MB read limit`,
-          maxSize: MAX_READ_SIZE,
-          tooLarge: true,
-        });
-      }
-
-      if (contentResult.code !== 0) {
-        const missing = isFileNotFound(contentError);
-        const permissionDenied = isPermissionDenied(contentError);
-        ctx.log.error(
-          `SSH readFile command failed with code ${contentResult.code}: ${contentError.replace(/\n/g, " ").trim()}`,
-        );
-        return res.status(missing ? 404 : permissionDenied ? 403 : 500).json({
-          error: `Command failed: ${contentError}`,
-          fileNotFound: missing,
-          needsSudo: permissionDenied,
-        });
-      }
-
-      const isBinary = detectBinary(contentResult.stdout);
-      ctx.log.info(
-        `File read successfully: ${sessionId} (${filePath}, bytes=${contentResult.stdout.length})`,
-      );
-      return res.json({
-        content: contentResult.stdout.toString(isBinary ? "base64" : "utf8"),
-        path: filePath,
-        encoding: isBinary ? "base64" : "utf8",
-      });
-    } catch (error) {
-      const message = error instanceof Error ? error.message : String(error);
-      ctx.log.error("SSH readFile error:", error as Error);
-      return res.status(500).json({ error: message });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/writeFile:
-   *   post:
-   *     summary: Write to a file
-   *     description: Writes content to a file on the remote host and preserves the existing permissions when the file already exists.
-   *     tags:
-   *       - File Manager
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               sessionId:
-   *                 type: string
-   *               path:
-   *                 type: string
-   *               content:
-   *                 type: string
-   *               encoding:
-   *                 type: string
-   *                 enum: [utf8, base64]
-   *                 description: How content is encoded. Defaults to utf8.
-   *     responses:
-   *       200:
-   *         description: File written successfully.
-   *       403:
-   *         description: Permission denied; needsSudo is set when a sudo password would help.
-   *       400:
-   *         description: Missing required parameters or SSH connection not established.
-   *       500:
-   *         description: Failed to write file.
-   */
-  app.post("/writeFile", async (req, res) => {
-    const { sessionId, path: filePath, content, encoding } = req.body;
-    const sshConn = sshSessions[sessionId];
-    const userId = ctx.currentActor()!;
-
-    if (!sessionId) {
-      return res.status(400).json({ error: "Session ID is required" });
-    }
-
-    if (!sshConn?.isConnected) {
-      return res.status(400).json({ error: "SSH connection not established" });
-    }
-
-    if (!verifySessionOwnership(sshConn, userId)) {
-      return res.status(403).json({ error: "Session access denied" });
-    }
-
-    if (!filePath) {
-      return res.status(400).json({ error: "File path is required" });
-    }
-
-    if (content === undefined) {
-      return res.status(400).json({ error: "File content is required" });
-    }
-
-    const contentLength =
-      typeof content === "string" ? content.length : Buffer.byteLength(content);
-    ctx.log.info(
-      `Writing file: ${sessionId} (${filePath}, bytes=${contentLength})`,
-    );
-    sshConn.lastActive = Date.now();
-
-    let preservedMode: number | undefined;
-
-    const restoreOriginalMode = (
-      sftp: import("ssh2").SFTPWrapper | null,
-      onComplete: () => void,
-    ) => {
-      if (preservedMode === undefined) {
-        onComplete();
-        return;
-      }
-
-      const permissions = preservedMode.toString(8);
-
-      if (sftp) {
-        sftp.chmod(filePath, preservedMode, (chmodErr) => {
-          if (chmodErr) {
-            ctx.log.warn(
-              `Failed to restore file permissions after save: ${sessionId} (${filePath}, permissions=${permissions}, error=${chmodErr.message})`,
-            );
-          } else {
-            ctx.log.info(
-              `Restored file permissions after save: ${sessionId} (${filePath}, permissions=${permissions})`,
-            );
-          }
-
-          onComplete();
-        });
-        return;
-      }
-
-      const escapedPath = filePath.replace(/'/g, "'\"'\"'");
-      const chmodCommand = `chmod ${permissions} '${escapedPath}' && echo "SUCCESS"`;
-
-      execChannel(sshConn, chmodCommand, (err, stream) => {
-        if (err) {
-          ctx.log.warn(
-            `Failed to restore file permissions after save: ${sessionId} (${filePath}, permissions=${permissions}, error=${err.message})`,
-          );
-          onComplete();
-          return;
-        }
-
-        let outputData = "";
-        let errorData = "";
-
-        stream.on("data", (chunk: Buffer) => {
-          outputData += chunk.toString();
-        });
-
-        stream.stderr.on("data", (chunk: Buffer) => {
-          errorData += chunk.toString();
-        });
-
-        stream.on("close", (code) => {
-          if (outputData.includes("SUCCESS")) {
-            ctx.log.info(
-              `Restored file permissions after save: ${sessionId} (${filePath}, permissions=${permissions})`,
-            );
-          } else {
-            ctx.log.warn(
-              `Failed to restore file permissions after save: ${sessionId} (${filePath}, permissions=${permissions}, exitCode=${code}, error=${errorData || "Permission restore command did not report success"})`,
-            );
-          }
-
-          onComplete();
-        });
-
-        stream.on("error", (streamErr) => {
-          ctx.log.warn(
-            `Failed to restore file permissions after save: ${sessionId} (${filePath}, permissions=${permissions}, error=${streamErr.message})`,
-          );
-          onComplete();
-        });
-      });
-    };
-
-    const trySFTP = () => {
-      try {
-        ctx.log.info(
-          `Opening SFTP channel for writeFile: ${sessionId} (${filePath})`,
-        );
-        getSessionSftp(sshConn)
-          .then((sftp) => {
-            let fileBuffer: Buffer;
-            try {
-              fileBuffer = decodeWriteContent(content, encoding);
-            } catch (bufferErr) {
-              ctx.log.error("Buffer conversion error:", bufferErr as Error);
-              if (!res.headersSent) {
-                return res
-                  .status(500)
-                  .json({ error: "Invalid file content format" });
-              }
-              return;
-            }
-
-            sftp.stat(filePath, (statErr, stats) => {
-              try {
-                if (statErr) {
-                  ctx.log.warn(
-                    `Failed to read existing file permissions before save: ${sessionId} (${filePath}, error=${statErr.message})`,
-                  );
-                } else if (stats.isFile()) {
-                  preservedMode = stats.mode & 0o7777;
-                }
-
-                const writeStream = sftp.createWriteStream(filePath);
-
-                let hasError = false;
-                let hasFinished = false;
-                let isFinalizing = false;
-
-                const finalizeSuccess = () => {
-                  if (hasError || hasFinished) return;
-                  hasFinished = true;
-                  isFinalizing = false;
-                  ctx.log.info(
-                    `File written successfully: ${sessionId} (${filePath}, bytes=${fileBuffer.length})`,
-                  );
-                  if (!res.headersSent) {
-                    res.json({
-                      message: "File written successfully",
-                      path: filePath,
-                      toast: {
-                        type: "success",
-                        message: `File written: ${filePath}`,
-                      },
-                    });
-                  }
-                };
-
-                writeStream.on("error", (streamErr) => {
-                  if (hasError || hasFinished || isFinalizing) return;
-                  hasError = true;
-                  isFinalizing = false;
-                  ctx.log.warn(
-                    `SFTP write failed, trying fallback method: ${streamErr.message}`,
-                  );
-                  tryFallbackMethod();
-                });
-
-                const finishWrite = () => {
-                  if (hasError || hasFinished || isFinalizing) return;
-                  isFinalizing = true;
-                  restoreOriginalMode(sftp, finalizeSuccess);
-                };
-
-                writeStream.on("finish", () => {
-                  finishWrite();
-                });
-
-                writeStream.on("close", () => {
-                  finishWrite();
-                });
-
-                try {
-                  writeStream.write(fileBuffer);
-                  writeStream.end();
-                } catch (writeErr) {
-                  if (hasError || hasFinished) return;
-                  hasError = true;
-                  isFinalizing = false;
-                  ctx.log.warn(
-                    `SFTP write operation failed, trying fallback method: ${(writeErr as Error).message}`,
-                  );
-                  tryFallbackMethod();
-                }
-              } catch (callbackErr) {
-                ctx.log.warn(
-                  `SFTP stat callback error, trying fallback method: ${(callbackErr as Error).message}`,
-                );
-                tryFallbackMethod();
-              }
-            });
-          })
-          .catch((err: Error) => {
-            ctx.log.warn(`SFTP failed, trying fallback method: ${err.message}`);
-            tryFallbackMethod();
-          });
-      } catch (sftpErr) {
-        ctx.log.warn(
-          `SFTP connection error, trying fallback method: ${(sftpErr as Error).message}`,
-        );
-        tryFallbackMethod();
-      }
-    };
-
-    const tryFallbackMethod = () => {
-      if (!sshConn?.isConnected) {
-        if (!res.headersSent) {
-          return res.status(500).json({ error: "SSH session disconnected" });
-        }
-        return;
-      }
-      try {
-        const contentBuffer = decodeWriteContent(content, encoding);
-        const base64Content = contentBuffer.toString("base64");
-        const escapedPath = filePath.replace(/'/g, "'\"'\"'");
-
-        // Content goes through stdin; a command line argument caps it at 128 KB.
-        const writeCommand = `cat > '${escapedPath}' && echo "SUCCESS"`;
-
-        execChannel(sshConn, writeCommand, (err, stream) => {
-          if (err) {
-            ctx.log.error("Fallback write command failed:", err);
-            if (!res.headersSent) {
-              return res.status(500).json({
-                error: `Write failed: ${err.message}`,
-                toast: {
-                  type: "error",
-                  message: `Write failed: ${err.message}`,
-                },
-              });
-            }
-            return;
-          }
-
-          let outputData = "";
-          let errorData = "";
-
-          stream.on("data", (chunk: Buffer) => {
-            outputData += chunk.toString();
-          });
-
-          stream.stderr.on("data", (chunk: Buffer) => {
-            errorData += chunk.toString();
-          });
-
-          stream.stderr.on("error", (stderrErr) => {
-            ctx.log.error("Fallback write stderr error:", stderrErr);
-          });
-
-          stream.end(contentBuffer);
-
-          stream.on("close", (code) => {
-            if (outputData.includes("SUCCESS")) {
-              restoreOriginalMode(null, () => {
-                if (!res.headersSent) {
-                  res.json({
-                    message: "File written successfully",
-                    path: filePath,
-                    toast: {
-                      type: "success",
-                      message: `File written: ${filePath}`,
-                    },
-                  });
-                }
-              });
-            } else {
-              const isPermDenied = errorData
-                .toLowerCase()
-                .includes("permission denied");
-              if (isPermDenied && sshConn.sudoPassword) {
-                execWithSudo(
-                  sshConn,
-                  `bash -c "echo '${base64Content}' | base64 -d > '${escapedPath}' && echo SUCCESS"`,
-                  sshConn.sudoPassword,
-                )
-                  .then(({ stdout, code: sudoCode }) => {
-                    if (sudoCode === 0 && stdout.includes("SUCCESS")) {
-                      restoreOriginalMode(null, () => {
-                        if (!res.headersSent) {
-                          res.json({
-                            message: "File written successfully",
-                            path: filePath,
-                          });
-                        }
-                      });
-                    } else if (!res.headersSent) {
-                      res
-                        .status(403)
-                        .json({ error: "Permission denied", needsSudo: true });
-                    }
-                  })
-                  .catch(() => {
-                    if (!res.headersSent) {
-                      res
-                        .status(403)
-                        .json({ error: "Permission denied", needsSudo: true });
-                    }
-                  });
-                return;
-              }
-              ctx.log.error(
-                `Fallback write failed with code ${code}: ${errorData}`,
-              );
-              if (!res.headersSent) {
-                res.status(isPermDenied ? 403 : 500).json({
-                  error: `Write failed: ${errorData}`,
-                  needsSudo: isPermDenied,
-                  toast: {
-                    type: "error",
-                    message: `Write failed: ${errorData}`,
-                  },
-                });
-              }
-            }
-          });
-
-          stream.on("error", (streamErr) => {
-            ctx.log.error("Fallback write stream error:", streamErr);
-            if (!res.headersSent) {
-              res
-                .status(500)
-                .json({ error: `Write stream error: ${streamErr.message}` });
-            }
-          });
-        });
-      } catch (fallbackErr) {
-        ctx.log.error("Fallback method failed:", fallbackErr as Error);
-        if (!res.headersSent) {
-          res.status(500).json({
-            error: `All write methods failed: ${(fallbackErr as Error).message}`,
-          });
-        }
-      }
-    };
-
-    trySFTP();
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/uploadFile:
-   *   post:
-   *     summary: Upload a file
-   *     description: Uploads a file to the remote host.
-   *     tags:
-   *       - File Manager
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               sessionId:
-   *                 type: string
-   *               path:
-   *                 type: string
-   *               content:
-   *                 type: string
-   *               fileName:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: File uploaded successfully.
-   *       400:
-   *         description: Missing required parameters or SSH connection not established.
-   *       500:
-   *         description: Failed to upload file.
-   */
-  app.post("/uploadFile", async (req, res) => {
-    const { sessionId, path: filePath, content, fileName } = req.body;
-    const sshConn = sshSessions[sessionId];
-    const userId = ctx.currentActor()!;
-
-    if (!sessionId) {
-      return res.status(400).json({ error: "Session ID is required" });
-    }
-
-    if (!sshConn?.isConnected) {
-      return res.status(400).json({ error: "SSH connection not established" });
-    }
-
-    if (!verifySessionOwnership(sshConn, userId)) {
-      return res.status(403).json({ error: "Session access denied" });
-    }
-
-    if (!filePath || !fileName || content === undefined) {
-      return res
-        .status(400)
-        .json({ error: "File path, name, and content are required" });
-    }
-
-    sshConn.lastActive = Date.now();
-
-    const contentSize =
-      typeof content === "string"
-        ? Buffer.byteLength(content, "utf8")
-        : content.length;
-
-    const fullPath = filePath.endsWith("/")
-      ? filePath + fileName
-      : filePath + "/" + fileName;
-    const uploadStartTime = Date.now();
-    ctx.log.info(
-      `File upload started: ${sessionId} (${fullPath}, bytes=${contentSize})`,
-    );
-
-    const trySFTP = () => {
-      try {
-        ctx.log.info(
-          `Opening SFTP channel for uploadFile: ${sessionId} (${fullPath})`,
-        );
-        getSessionSftp(sshConn)
-          .then((sftp) => {
-            let fileBuffer;
-            try {
-              if (typeof content === "string") {
-                fileBuffer = Buffer.from(content, "base64");
-              } else if (Buffer.isBuffer(content)) {
-                fileBuffer = content;
-              } else {
-                fileBuffer = Buffer.from(content);
-              }
-            } catch (bufferErr) {
-              ctx.log.error("Buffer conversion error:", bufferErr as Error);
-              if (!res.headersSent) {
-                return res
-                  .status(500)
-                  .json({ error: "Invalid file content format" });
-              }
-              return;
-            }
-
-            const writeStream = sftp.createWriteStream(fullPath);
-
-            let hasError = false;
-            let hasFinished = false;
-
-            writeStream.on("error", (streamErr) => {
-              if (hasError || hasFinished) return;
-              hasError = true;
-              ctx.log.warn(
-                `SFTP write failed, trying fallback method: ${streamErr.message} (sessionId=${sessionId}, fileName=${fileName}, fileSize=${contentSize})`,
-              );
-              tryFallbackMethod();
-            });
-
-            writeStream.on("finish", () => {
-              if (hasError || hasFinished) return;
-              hasFinished = true;
-              ctx.log.info(
-                `File upload completed: ${sessionId} (${fullPath}, bytes=${fileBuffer.length}, duration=${Date.now() - uploadStartTime}ms)`,
-              );
-              if (!res.headersSent) {
-                res.json({
-                  message: "File uploaded successfully",
-                  path: fullPath,
-                  toast: {
-                    type: "success",
-                    message: `File uploaded: ${fullPath}`,
-                  },
-                });
-              }
-            });
-
-            writeStream.on("close", () => {
-              if (hasError || hasFinished) return;
-              hasFinished = true;
-              ctx.log.info(
-                `File upload completed: ${sessionId} (${fullPath}, bytes=${fileBuffer.length}, duration=${Date.now() - uploadStartTime}ms)`,
-              );
-              if (!res.headersSent) {
-                res.json({
-                  message: "File uploaded successfully",
-                  path: fullPath,
-                  toast: {
-                    type: "success",
-                    message: `File uploaded: ${fullPath}`,
-                  },
-                });
-              }
-            });
-
-            try {
-              writeStream.write(fileBuffer);
-              writeStream.end();
-            } catch (writeErr) {
-              if (hasError || hasFinished) return;
-              hasError = true;
-              ctx.log.warn(
-                `SFTP write operation failed, trying fallback method: ${(writeErr as Error).message}`,
-              );
-              tryFallbackMethod();
-            }
-          })
-          .catch((err: Error) => {
-            ctx.log.warn(`SFTP failed, trying fallback method: ${err.message}`);
-            tryFallbackMethod();
-          });
-      } catch (sftpErr) {
-        ctx.log.warn(
-          `SFTP connection error, trying fallback method: ${(sftpErr as Error).message}`,
-        );
-        tryFallbackMethod();
-      }
-    };
-
-    const tryFallbackMethod = () => {
-      if (!sshConn?.isConnected) {
-        if (!res.headersSent) {
-          return res.status(500).json({ error: "SSH session disconnected" });
-        }
-        return;
-      }
-      try {
-        let contentBuffer: Buffer;
-        if (typeof content === "string") {
-          try {
-            contentBuffer = Buffer.from(content, "base64");
-            if (contentBuffer.toString("base64") !== content) {
-              contentBuffer = Buffer.from(content, "utf8");
-            }
-          } catch {
-            contentBuffer = Buffer.from(content, "utf8");
-          }
-        } else if (Buffer.isBuffer(content)) {
-          contentBuffer = content;
-        } else {
-          contentBuffer = Buffer.from(content);
-        }
-        const base64Content = contentBuffer.toString("base64");
-        const chunkSize = 1000000;
-        const chunks = [];
-
-        for (let i = 0; i < base64Content.length; i += chunkSize) {
-          chunks.push(base64Content.slice(i, i + chunkSize));
-        }
-
-        if (!sshConn?.isConnected) {
-          ctx.log.error(
-            `SSH connection lost before fallback upload: ${sessionId} (${fullPath})`,
-          );
-          if (!res.headersSent) {
-            return res
-              .status(500)
-              .json({ error: "SSH connection lost during upload" });
-          }
-          return;
-        }
-
-        if (chunks.length === 1) {
-          const escapedPath = fullPath.replace(/'/g, "'\"'\"'");
-
-          const writeCommand = `echo '${chunks[0]}' | base64 -d > '${escapedPath}' && echo "SUCCESS"`;
-
-          execChannel(sshConn, writeCommand, (err, stream) => {
-            if (err) {
-              ctx.log.error("Fallback upload command failed:", err);
-              if (!res.headersSent) {
-                return res
-                  .status(500)
-                  .json({ error: `Upload failed: ${err.message}` });
-              }
-              return;
-            }
-
-            let outputData = "";
-            let errorData = "";
-
-            stream.on("data", (chunk: Buffer) => {
-              outputData += chunk.toString();
-            });
-
-            stream.stderr.on("data", (chunk: Buffer) => {
-              errorData += chunk.toString();
-            });
-
-            stream.stderr.on("error", (stderrErr) => {
-              ctx.log.error("Fallback upload stderr error:", stderrErr);
-            });
-
-            stream.on("close", (code) => {
-              if (outputData.includes("SUCCESS")) {
-                if (!res.headersSent) {
-                  res.json({
-                    message: "File uploaded successfully",
-                    path: fullPath,
-                    toast: {
-                      type: "success",
-                      message: `File uploaded: ${fullPath}`,
-                    },
-                  });
-                }
-              } else {
-                ctx.log.error(
-                  `Fallback upload failed with code ${code}: ${errorData}`,
-                );
-                if (!res.headersSent) {
-                  res.status(500).json({
-                    error: `Upload failed: ${errorData}`,
-                    toast: {
-                      type: "error",
-                      message: `Upload failed: ${errorData}`,
-                    },
-                  });
-                }
-              }
-            });
-
-            stream.on("error", (streamErr) => {
-              ctx.log.error("Fallback upload stream error:", streamErr);
-              if (!res.headersSent) {
-                res
-                  .status(500)
-                  .json({ error: `Upload stream error: ${streamErr.message}` });
-              }
-            });
-          });
-        } else {
-          const escapedPath = fullPath.replace(/'/g, "'\"'\"'");
-
-          let writeCommand = `> '${escapedPath}'`;
-
-          chunks.forEach((chunk) => {
-            writeCommand += ` && echo '${chunk}' | base64 -d >> '${escapedPath}'`;
-          });
-
-          writeCommand += ` && echo "SUCCESS"`;
-
-          execChannel(sshConn, writeCommand, (err, stream) => {
-            if (err) {
-              ctx.log.error("Chunked fallback upload failed:", err);
-              if (!res.headersSent) {
-                return res
-                  .status(500)
-                  .json({ error: `Chunked upload failed: ${err.message}` });
-              }
-              return;
-            }
-
-            let outputData = "";
-            let errorData = "";
-
-            stream.on("data", (chunk: Buffer) => {
-              outputData += chunk.toString();
-            });
-
-            stream.stderr.on("data", (chunk: Buffer) => {
-              errorData += chunk.toString();
-            });
-
-            stream.stderr.on("error", (stderrErr) => {
-              ctx.log.error("Chunked fallback upload stderr error:", stderrErr);
-            });
-
-            stream.on("close", (code) => {
-              if (outputData.includes("SUCCESS")) {
-                if (!res.headersSent) {
-                  res.json({
-                    message: "File uploaded successfully",
-                    path: fullPath,
-                    toast: {
-                      type: "success",
-                      message: `File uploaded: ${fullPath}`,
-                    },
-                  });
-                }
-              } else {
-                ctx.log.error(
-                  `Chunked fallback upload failed with code ${code}: ${errorData}`,
-                );
-                if (!res.headersSent) {
-                  res.status(500).json({
-                    error: `Chunked upload failed: ${errorData}`,
-                    toast: {
-                      type: "error",
-                      message: `Chunked upload failed: ${errorData}`,
-                    },
-                  });
-                }
-              }
-            });
-
-            stream.on("error", (streamErr) => {
-              ctx.log.error("Chunked fallback upload stream error:", streamErr);
-              if (!res.headersSent) {
-                res.status(500).json({
-                  error: `Chunked upload stream error: ${streamErr.message}`,
-                });
-              }
-            });
-          });
-        }
-      } catch (fallbackErr) {
-        ctx.log.error("Fallback method failed:", fallbackErr as Error);
-        if (!res.headersSent) {
-          res.status(500).json({
-            error: `All upload methods failed: ${(fallbackErr as Error).message}`,
-          });
-        }
-      }
-    };
-
-    trySFTP();
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/uploadFileStream:
-   *   post:
-   *     summary: Stream-upload a file via multipart form
-   *     description: Uploads a file to the remote host by streaming multipart form data directly into an SFTP write stream, avoiding full in-memory buffering.
-   *     tags:
-   *       - File Manager
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         multipart/form-data:
-   *           schema:
-   *             type: object
-   *             required:
-   *               - sessionId
-   *               - path
-   *               - file
-   *             properties:
-   *               sessionId:
-   *                 type: string
-   *               path:
-   *                 type: string
-   *               file:
-   *                 type: string
-   *                 format: binary
-   *     responses:
-   *       200:
-   *         description: File uploaded successfully.
-   *       400:
-   *         description: Missing required parameters or SSH connection not established.
-   *       500:
-   *         description: Failed to upload file.
-   */
-  app.post("/uploadFileStream", (req: Request, res: Response) => {
-    const userId = ctx.currentActor()!;
-
-    const contentType = req.headers["content-type"] || "";
-    if (!contentType.includes("multipart/form-data")) {
-      return res
-        .status(400)
-        .json({ error: "Expected multipart/form-data request" });
-    }
-
-    let sessionId: string | undefined;
-    let remotePath: string | undefined;
-    let fileName: string | undefined;
-    let uploadStartTime: number;
-    let resolved = false;
-    let requestAborted = false;
-    let cleanupStarted = false;
-    let destroyUpload: (() => void) | undefined;
-
-    const abortUpload = () => {
-      if (resolved || cleanupStarted) return;
-      requestAborted = true;
-      cleanupStarted = true;
-      destroyUpload?.();
-    };
-
-    req.once("aborted", abortUpload);
-    req.once("error", abortUpload);
-    req.once("close", () => {
-      if (!req.complete) abortUpload();
-    });
-    res.once("close", () => {
-      if (!res.writableFinished) abortUpload();
-    });
-
-    const bb = Busboy({ headers: req.headers });
-
-    bb.on("field", (name: string, value: string) => {
-      if (name === "sessionId") sessionId = value;
-      if (name === "path") remotePath = value;
-    });
-
-    bb.on(
-      "file",
-      (
-        fieldname: string,
-        fileStream: NodeJS.ReadableStream,
-        info: { filename: string; encoding: string; mimeType: string },
-      ) => {
-        fileName = info.filename;
-
-        if (!sessionId || !remotePath || !fileName) {
-          fileStream.resume();
-          if (!resolved) {
-            resolved = true;
-            res.status(400).json({ error: "Missing sessionId or path field" });
-          }
-          return;
-        }
-
-        const sshConn = sshSessions[sessionId];
-        if (!sshConn?.isConnected) {
-          fileStream.resume();
-          if (!resolved) {
-            resolved = true;
-            res.status(400).json({ error: "SSH connection not established" });
-          }
-          return;
-        }
-
-        if (!verifySessionOwnership(sshConn, userId)) {
-          fileStream.resume();
-          if (!resolved) {
-            resolved = true;
-            res.status(403).json({ error: "Session access denied" });
-          }
-          return;
-        }
-
-        sshConn.lastActive = Date.now();
-        uploadStartTime = Date.now();
-
-        const fullPath = remotePath.endsWith("/")
-          ? remotePath + fileName
-          : remotePath + "/" + fileName;
-
-        ctx.log.info(
-          `Streaming file upload started: ${sessionId} (${fullPath})`,
-        );
-
-        getSessionSftp(sshConn)
-          .then((sftp) => {
-            if (requestAborted) {
-              fileStream.resume();
-              return;
-            }
-            const writeStream = sftp.createWriteStream(fullPath);
-            const removePartialFile = () => {
-              writeStream.destroy();
-              sftp.unlink(fullPath, (err) => {
-                if (err) {
-                  ctx.log.error(
-                    "Failed to remove partial file after aborted upload:",
-                    err,
-                  );
-                }
-              });
-            };
-            destroyUpload = removePartialFile;
-
-            writeStream.on("error", (err) => {
-              ctx.log.error("SFTP write stream error during upload:", err);
-              if (!resolved && !requestAborted) {
-                resolved = true;
-                res
-                  .status(500)
-                  .json({ error: `Upload failed: ${err.message}` });
-              }
-            });
-
-            const completeUpload = () => {
-              if (resolved || requestAborted) return;
-              resolved = true;
-              ctx.log.info(
-                `Streaming file upload completed: ${sessionId} (${fullPath}, duration=${Date.now() - uploadStartTime}ms)`,
-              );
-              res.json({
-                message: "File uploaded successfully",
-                path: fullPath,
-                toast: {
-                  type: "success",
-                  message: `File uploaded: ${fullPath}`,
-                },
-              });
-            };
-
-            let sourceEnded = false;
-            fileStream.on("end", () => {
-              sourceEnded = true;
-            });
-            writeStream.on("finish", completeUpload);
-            // ssh2's SFTP WriteStream destroys itself inside _final (autoClose),
-            // and a Writable destroyed before its final callback never emits
-            // 'finish' on current Node. 'close' fires once the handle has been
-            // closed after the last write was acknowledged, so it is the
-            // completion signal that reliably arrives -- but only trust it
-            // when the whole body was consumed and nothing aborted the upload.
-            writeStream.on("close", () => {
-              if (sourceEnded) completeUpload();
-            });
-
-            fileStream.on("error", (err) => {
-              ctx.log.error("File read stream error during upload:", err);
-              writeStream.destroy();
-              if (!resolved && !requestAborted) {
-                resolved = true;
-                res
-                  .status(500)
-                  .json({ error: `Upload stream error: ${err.message}` });
-              }
-            });
-
-            (fileStream as NodeJS.ReadableStream).pipe(
-              writeStream as unknown as NodeJS.WritableStream,
-            );
-          })
-          .catch((err: Error) => {
-            fileStream.resume();
-            ctx.log.error("SFTP session error during stream upload:", err);
-            if (!resolved && !requestAborted) {
-              resolved = true;
-              res.status(500).json({ error: `SFTP error: ${err.message}` });
-            }
-          });
-      },
-    );
-
-    bb.on("error", (err: Error) => {
-      ctx.log.error("Busboy parse error during stream upload:", err);
-      if (!resolved && !requestAborted) {
-        resolved = true;
-        res.status(500).json({ error: `Upload parse error: ${err.message}` });
-      }
-    });
-
-    req.pipe(bb);
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/uploadFileChunk:
-   *   post:
-   *     summary: Upload one raw file chunk
-   *     description: Writes a raw request body to the remote file at the supplied byte offset, allowing browser clients to avoid multipart/FormData 2GB limits.
-   *     tags:
-   *       - File Manager
-   */
-  app.post("/uploadFileChunk", (req: Request, res: Response) => {
-    const userId = ctx.currentActor()!;
-    const sessionId = getRequiredQueryParam(req.query.sessionId as string);
-    const remotePath = getRequiredQueryParam(req.query.path as string);
-    const fileName = getRequiredQueryParam(req.query.fileName as string);
-    const offset = parseByteOffset(
-      getRequiredQueryParam(req.query.offset as string),
-    );
-    const totalSize = parseByteOffset(
-      getRequiredQueryParam(req.query.totalSize as string),
-    );
-
-    if (!sessionId || !remotePath || !fileName) {
-      req.resume();
-      return res
-        .status(400)
-        .json({ error: "Missing sessionId, path, or fileName" });
-    }
-
-    if (offset === null || totalSize === null || offset > totalSize) {
-      req.resume();
-      return res.status(400).json({ error: "Invalid upload offset" });
-    }
-
-    const sshConn = sshSessions[sessionId];
-    if (!sshConn?.isConnected) {
-      req.resume();
-      return res.status(400).json({ error: "SSH connection not established" });
-    }
-
-    if (!verifySessionOwnership(sshConn, userId)) {
-      req.resume();
-      return res.status(403).json({ error: "Session access denied" });
-    }
-
-    sshConn.lastActive = Date.now();
-    const fullPath = remotePath.endsWith("/")
-      ? remotePath + fileName
-      : remotePath + "/" + fileName;
-    let resolved = false;
-    let bytesWritten = 0;
-    const uploadStartTime = Date.now();
-
-    let destroyUpload: (() => void) | undefined;
-    res.once("close", () => {
-      if (resolved || res.writableFinished) return;
-      resolved = true;
-      destroyUpload?.();
-    });
-
-    getSessionSftp(sshConn)
-      .then((sftp) => {
-        if (resolved) return;
-        const writeStream = sftp.createWriteStream(fullPath, {
-          flags: offset === 0 ? "w" : "r+",
-          start: offset,
-        });
-        destroyUpload = () => {
-          req.unpipe(writeStream as unknown as NodeJS.WritableStream);
-          writeStream.destroy();
-        };
-
-        const fail = (status: number, error: string) => {
-          if (resolved) return;
-          resolved = true;
-          req.unpipe(writeStream as unknown as NodeJS.WritableStream);
-          writeStream.destroy();
-          res.status(status).json({ error });
-        };
-
-        writeStream.on("error", (err) => {
-          ctx.log.error("SFTP write stream error during chunk upload:", err);
-          fail(500, `Upload failed: ${err.message}`);
-        });
-
-        let sourceEnded = false;
-        const completeChunk = () => {
-          if (resolved) return;
-          resolved = true;
-          const nextOffset = offset + bytesWritten;
-          ctx.log.info(
-            `File chunk upload completed: ${sessionId} (${fullPath}, offset=${offset}, bytesWritten=${bytesWritten}, nextOffset=${nextOffset}, totalSize=${totalSize}, duration=${Date.now() - uploadStartTime}ms)`,
-          );
-          res.json({
-            message: "File chunk uploaded successfully",
-            path: fullPath,
-            offset,
-            bytesWritten,
-            nextOffset,
-            complete: nextOffset >= totalSize,
-          });
-        };
-        writeStream.on("finish", completeChunk);
-        // See uploadFileStream: ssh2's WriteStream does not emit 'finish'
-        // on current Node; 'close' after the body ended is completion.
-        writeStream.on("close", () => {
-          if (sourceEnded) completeChunk();
-        });
-
-        req.on("error", (err) => {
-          ctx.log.error("Request stream error during chunk upload:", err);
-          fail(500, `Upload stream error: ${err.message}`);
-        });
-
-        if (Buffer.isBuffer(req.body)) {
-          // Some middleware already drained the request into req.body;
-          // there is nothing left to pipe, so write what it collected.
-          bytesWritten = req.body.length;
-          sourceEnded = true;
-          writeStream.end(req.body);
-          return;
-        }
-
-        req.on("data", (chunk: Buffer) => {
-          bytesWritten += chunk.length;
-        });
-        req.on("end", () => {
-          sourceEnded = true;
-        });
-
-        req.pipe(writeStream as unknown as NodeJS.WritableStream);
-      })
-      .catch((err: Error) => {
-        req.resume();
-        ctx.log.error("SFTP session error during chunk upload:", err);
-        if (!resolved) {
-          resolved = true;
-          res.status(500).json({ error: `SFTP error: ${err.message}` });
-        }
-      });
-  });
-}
diff --git a/plugins/file-manager/src/backend/direct-transfer-routing.ts b/plugins/file-manager/src/backend/direct-transfer-routing.ts
deleted file mode 100644
index e490d34fb..000000000
--- a/plugins/file-manager/src/backend/direct-transfer-routing.ts
+++ /dev/null
@@ -1,72 +0,0 @@
-export interface DirectTransferEndpoint {
-  host: string;
-  port: number;
-  username: string;
-}
-
-export const DIRECT_TRANSFER_MIN_IMPROVEMENT = 0.2;
-export const DIRECT_TRANSFER_MIN_BYTES = 32 * 1024 * 1024;
-
-export function shouldBenchmarkDirectTransfer(totalBytes: number): boolean {
-  return totalBytes >= DIRECT_TRANSFER_MIN_BYTES;
-}
-
-export function quoteShell(value: string): string {
-  return `'${value.replace(/'/g, `'"'"'`)}'`;
-}
-
-function formatHost(host: string): string {
-  return host.includes(":") && !host.startsWith("[") ? `[${host}]` : host;
-}
-
-export function buildDirectSshCommand(
-  endpoint: DirectTransferEndpoint,
-): string {
-  const target = `${endpoint.username}@${formatHost(endpoint.host)}`;
-  return [
-    "ssh",
-    "-o BatchMode=yes",
-    "-o ConnectTimeout=5",
-    "-o StrictHostKeyChecking=yes",
-    `-p ${endpoint.port}`,
-    quoteShell(target),
-  ].join(" ");
-}
-
-export function buildDirectProbeCommand(
-  endpoint: DirectTransferEndpoint,
-): string {
-  return `${buildDirectSshCommand(endpoint)} ${quoteShell("command -v rsync >/dev/null")}`;
-}
-
-export function buildDirectRsyncCommand(
-  endpoint: DirectTransferEndpoint,
-  sourcePaths: string[],
-  destPath: string,
-  destIsDirectory: boolean,
-): string {
-  const sshTransport = buildDirectSshCommand(endpoint).replace(/ '[^']+'$/, "");
-  const targetHost = `${endpoint.username}@${formatHost(endpoint.host)}`;
-  const targetPath = destIsDirectory
-    ? `${destPath.replace(/\/+$/, "") || "/"}/`
-    : destPath;
-  const sources = sourcePaths.map(quoteShell).join(" ");
-  const target = quoteShell(`${targetHost}:${targetPath}`);
-
-  return [
-    "rsync -a --partial --append-verify --protect-args --info=progress2",
-    `-e ${quoteShell(sshTransport)}`,
-    "--",
-    sources,
-    target,
-  ].join(" ");
-}
-
-export function shouldUseDirectTransfer(
-  directMs: number,
-  relayMs: number,
-  minImprovement = DIRECT_TRANSFER_MIN_IMPROVEMENT,
-): boolean {
-  if (directMs <= 0 || relayMs <= 0) return false;
-  return directMs <= relayMs * (1 - minImprovement);
-}
diff --git a/plugins/file-manager/src/backend/download-routes.ts b/plugins/file-manager/src/backend/download-routes.ts
deleted file mode 100644
index 9de1faf97..000000000
--- a/plugins/file-manager/src/backend/download-routes.ts
+++ /dev/null
@@ -1,320 +0,0 @@
-import type { Express } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { getMimeType } from "./utils.js";
-import { createDownloadStream } from "./download-stream.js";
-import { execChannel, getSessionSftp, type SSHSession } from "./session.js";
-
-type FileDownloadRoutesDeps = {
-  ctx: PluginContext;
-  sshSessions: Record<string, SSHSession>;
-  scheduleSessionCleanup: (sessionId: string) => void;
-  verifySessionOwnership: (session: SSHSession, userId: string) => boolean;
-};
-
-function escapeSingleQuotes(path: string): string {
-  return path.replace(/'/g, "'\"'\"'");
-}
-
-function downloadViaExec(
-  session: SSHSession,
-  filePath: string,
-): Promise<Buffer> {
-  return new Promise((resolve, reject) => {
-    const escaped = escapeSingleQuotes(filePath);
-    execChannel(session, `cat '${escaped}'`, (err, stream) => {
-      if (err) return reject(err);
-      const chunks: Buffer[] = [];
-      let stderr = "";
-      stream.on("data", (chunk: Buffer) => chunks.push(chunk));
-      stream.stderr.on("data", (chunk: Buffer) => {
-        stderr += chunk.toString();
-      });
-      stream.on("close", (code: number) => {
-        if (code !== 0) {
-          return reject(
-            new Error(stderr.trim() || `cat exited with code ${code}`),
-          );
-        }
-        resolve(Buffer.concat(chunks));
-      });
-      stream.on("error", reject);
-    });
-  });
-}
-
-export function registerFileDownloadRoutes(
-  app: Express,
-  {
-    ctx,
-    sshSessions,
-    scheduleSessionCleanup,
-    verifySessionOwnership,
-  }: FileDownloadRoutesDeps,
-): void {
-  /**
-   * @openapi
-   * /plugin-api/file-manager/downloadFile:
-   *   post:
-   *     summary: Download a file
-   *     description: Downloads a file from the remote host. Uses SCP legacy mode (cat over exec) when the host has scpLegacy enabled, otherwise uses SFTP.
-   *     tags:
-   *       - File Manager
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               sessionId:
-   *                 type: string
-   *               path:
-   *                 type: string
-   *               hostId:
-   *                 type: integer
-   *               userId:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: The file content.
-   *       400:
-   *         description: Missing required parameters or file too large.
-   *       500:
-   *         description: Failed to download file.
-   */
-  app.post("/downloadFile", async (req, res) => {
-    const { sessionId, path: filePath, hostId } = req.body;
-    const userId = ctx.currentActor()!;
-    const downloadStartTime = Date.now();
-
-    if (!sessionId || !filePath) {
-      ctx.log.warn(
-        `Missing download parameters: ${sessionId} (hasFilePath=${!!filePath})`,
-      );
-      return res.status(400).json({ error: "Missing download parameters" });
-    }
-
-    ctx.log.info(`File download started: ${sessionId} (${filePath})`);
-
-    const sshConn = sshSessions[sessionId];
-    if (!sshConn || !sshConn.isConnected) {
-      ctx.log.warn(
-        `SSH session not found or not connected for download: ${sessionId} (isConnected=${sshConn?.isConnected})`,
-      );
-      return res
-        .status(400)
-        .json({ error: "SSH session not found or not connected" });
-    }
-
-    if (!verifySessionOwnership(sshConn, userId)) {
-      return res.status(403).json({ error: "Session access denied" });
-    }
-
-    sshConn.lastActive = Date.now();
-    scheduleSessionCleanup(sessionId);
-
-    if (sshConn.scpLegacy) {
-      ctx.log.info(
-        `Downloading file via legacy exec/cat (SCP legacy mode): ${sessionId} (${filePath})`,
-      );
-
-      try {
-        const data = await downloadViaExec(sshConn, filePath);
-        const fileName = filePath.split("/").pop() || "download";
-        ctx.log.info(
-          `File download completed (legacy mode): ${sessionId} (${filePath}, hostId=${hostId}, bytes=${data.length}, duration=${Date.now() - downloadStartTime}ms)`,
-        );
-        return res.json({
-          content: data.toString("base64"),
-          fileName,
-          size: data.length,
-          mimeType: getMimeType(fileName),
-          path: filePath,
-        });
-      } catch (err) {
-        ctx.log.error("Legacy exec/cat download failed:", err as Error);
-        return res.status(500).json({
-          error: `Failed to download file: ${(err as Error).message}`,
-        });
-      }
-    }
-
-    ctx.log.info(
-      `Opening SFTP channel for downloadFile: ${sessionId} (${filePath})`,
-    );
-
-    getSessionSftp(sshConn)
-      .then((sftp) => {
-        sftp.stat(filePath, (statErr, stats) => {
-          if (statErr) {
-            ctx.log.error("File stat failed for download:", statErr);
-            return res
-              .status(500)
-              .json({ error: `Cannot access file: ${statErr.message}` });
-          }
-
-          if (!stats.isFile()) {
-            ctx.log.warn(
-              `Attempted to download non-file: ${sessionId} (${filePath}, isFile=${stats.isFile()}, isDirectory=${stats.isDirectory()})`,
-            );
-            return res
-              .status(400)
-              .json({ error: "Cannot download directories or special files" });
-          }
-
-          const MAX_FILE_SIZE = 5 * 1024 * 1024 * 1024;
-          if (stats.size > MAX_FILE_SIZE) {
-            ctx.log.warn(
-              `File too large for download: ${sessionId} (${filePath}, fileSize=${stats.size}, maxSize=${MAX_FILE_SIZE})`,
-            );
-            return res.status(400).json({
-              error: `File too large. Maximum size is ${MAX_FILE_SIZE / 1024 / 1024}MB, file is ${(stats.size / 1024 / 1024).toFixed(2)}MB`,
-            });
-          }
-
-          sftp.readFile(filePath, (readErr, data) => {
-            if (readErr) {
-              ctx.log.error("File read failed for download:", readErr);
-              return res
-                .status(500)
-                .json({ error: `Failed to read file: ${readErr.message}` });
-            }
-
-            const base64Content = data.toString("base64");
-            const fileName = filePath.split("/").pop() || "download";
-            ctx.log.info(
-              `File download completed: ${sessionId} (${filePath}, hostId=${hostId}, bytes=${stats.size}, duration=${Date.now() - downloadStartTime}ms)`,
-            );
-
-            res.json({
-              content: base64Content,
-              fileName: fileName,
-              size: stats.size,
-              mimeType: getMimeType(fileName),
-              path: filePath,
-            });
-          });
-        });
-      })
-      .catch((err) => {
-        ctx.log.error("SFTP connection failed for download:", err);
-        return res.status(500).json({ error: "SFTP connection failed" });
-      });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/downloadFileStream:
-   *   post:
-   *     summary: Stream-download a file
-   *     description: Downloads a file as a binary stream. Uses SCP legacy mode (cat over exec) when the host has scpLegacy enabled, otherwise uses SFTP.
-   *     tags:
-   *       - File Manager
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               sessionId:
-   *                 type: string
-   *               path:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Binary file stream.
-   *       400:
-   *         description: Missing required parameters.
-   *       500:
-   *         description: Download failed.
-   */
-  app.post("/downloadFileStream", async (req, res) => {
-    const { sessionId, path: filePath } = req.body;
-    const userId = ctx.currentActor()!;
-
-    if (!sessionId || !filePath) {
-      return res.status(400).json({ error: "Missing download parameters" });
-    }
-
-    const sshConn = sshSessions[sessionId];
-    if (!sshConn?.isConnected) {
-      return res
-        .status(400)
-        .json({ error: "SSH session not found or not connected" });
-    }
-    if (!verifySessionOwnership(sshConn, userId)) {
-      return res.status(403).json({ error: "Session access denied" });
-    }
-
-    sshConn.lastActive = Date.now();
-
-    const fileName = filePath.split("/").pop() || "download";
-    res.setHeader("Content-Type", "application/octet-stream");
-    res.setHeader(
-      "Content-Disposition",
-      `attachment; filename="${encodeURIComponent(fileName)}"`,
-    );
-
-    if (sshConn.scpLegacy) {
-      ctx.log.info(
-        `Streaming file via legacy exec/cat (SCP legacy mode): ${sessionId} (${filePath})`,
-      );
-
-      const escaped = escapeSingleQuotes(filePath);
-      execChannel(sshConn, `cat '${escaped}'`, (err, stream) => {
-        if (err) {
-          if (!res.headersSent) {
-            res.status(500).json({ error: `Download failed: ${err.message}` });
-          }
-          return;
-        }
-        stream.on("error", (streamErr: Error) => {
-          if (!res.headersSent) {
-            res
-              .status(500)
-              .json({ error: `Download failed: ${streamErr.message}` });
-          } else {
-            res.destroy();
-          }
-        });
-        stream.pipe(res);
-      });
-      return;
-    }
-
-    try {
-      const sftp = await getSessionSftp(sshConn);
-      const stats = await new Promise<{ size: number; isFile: () => boolean }>(
-        (resolve, reject) => {
-          sftp.stat(filePath, (err, s) => (err ? reject(err) : resolve(s)));
-        },
-      );
-
-      if (!stats.isFile()) {
-        return res.status(400).json({ error: "Cannot download directories" });
-      }
-
-      res.setHeader("Content-Length", String(stats.size));
-
-      if (res.destroyed) return;
-      const readStream = createDownloadStream(sftp, filePath, stats.size);
-      res.on("close", () => readStream.destroy());
-      readStream.on("error", (err) => {
-        if (!res.headersSent) {
-          res.removeHeader("Content-Length");
-          res.status(500).json({ error: `Download failed: ${err.message}` });
-        } else {
-          res.destroy();
-        }
-      });
-      readStream.pipe(res);
-    } catch (err) {
-      if (!res.headersSent) {
-        res
-          .status(500)
-          .json({ error: `Download failed: ${(err as Error).message}` });
-      }
-    }
-  });
-}
diff --git a/plugins/file-manager/src/backend/download-stream.ts b/plugins/file-manager/src/backend/download-stream.ts
deleted file mode 100644
index 27f939e4a..000000000
--- a/plugins/file-manager/src/backend/download-stream.ts
+++ /dev/null
@@ -1,68 +0,0 @@
-import { Readable } from "node:stream";
-import type { SFTPWrapper } from "ssh2";
-import {
-  promisifySftpClose,
-  promisifySftpOpen,
-  SFTP_OPEN_READ,
-} from "./sftp-promisify.js";
-
-const CHUNK_SIZE = 32 * 1024;
-const CONCURRENCY = 8;
-
-/** Bounded read-ahead; batches retain file order even if replies arrive out of order. */
-export function createDownloadStream(
-  sftp: SFTPWrapper,
-  path: string,
-  size: number,
-): Readable {
-  const stream = Readable.from(readFile(), {
-    objectMode: false,
-    highWaterMark: CHUNK_SIZE,
-  });
-  return stream;
-
-  async function readChunk(handle: Buffer, position: number, length: number) {
-    const buffer = Buffer.allocUnsafe(length);
-    let offset = 0;
-    while (offset < length && !stream.destroyed) {
-      const bytesRead = await new Promise<number>((resolve, reject) => {
-        sftp.read(
-          handle,
-          buffer,
-          offset,
-          length - offset,
-          position + offset,
-          (err, bytes) => (err ? reject(err) : resolve(bytes)),
-        );
-      });
-      if (bytesRead === 0)
-        throw new Error("File ended before the advertised size");
-      offset += bytesRead;
-    }
-    return buffer;
-  }
-
-  async function* readFile() {
-    if (stream.destroyed) return;
-    const handle = await promisifySftpOpen(sftp, path, SFTP_OPEN_READ, 0o666);
-    try {
-      for (let position = 0; position < size && !stream.destroyed;) {
-        const reads: Promise<Buffer>[] = [];
-        for (let i = 0; i < CONCURRENCY && position < size; i++) {
-          const length = Math.min(CHUNK_SIZE, size - position);
-          reads.push(readChunk(handle, position, length));
-          position += length;
-        }
-        // Settle all reads before closing the shared handle after an error.
-        const results = await Promise.allSettled(reads);
-        if (stream.destroyed) return;
-        for (const result of results) {
-          if (result.status === "rejected") throw result.reason;
-          yield result.value;
-        }
-      }
-    } finally {
-      await promisifySftpClose(sftp, handle);
-    }
-  }
-}
diff --git a/plugins/file-manager/src/backend/error-message.ts b/plugins/file-manager/src/backend/error-message.ts
deleted file mode 100644
index 6ef95453a..000000000
--- a/plugins/file-manager/src/backend/error-message.ts
+++ /dev/null
@@ -1,6 +0,0 @@
-export function getErrorMessage(
-  error: unknown,
-  fallback = "Unknown error",
-): string {
-  return error instanceof Error ? error.message : fallback;
-}
diff --git a/plugins/file-manager/src/backend/home-directory.ts b/plugins/file-manager/src/backend/home-directory.ts
deleted file mode 100644
index 3cc9f2607..000000000
--- a/plugins/file-manager/src/backend/home-directory.ts
+++ /dev/null
@@ -1,35 +0,0 @@
-import { execChannel, getSessionSftp, type SSHSession } from "./session.js";
-
-/** The SFTP login directory also respects custom homes and chroot roots. */
-export async function resolveHomeDirectory(
-  session: SSHSession,
-): Promise<string> {
-  try {
-    const sftp = await getSessionSftp(session);
-    return await new Promise<string>((resolve, reject) => {
-      sftp.realpath(".", (error, path) => {
-        if (error) reject(error);
-        else if (!path) reject(new Error("Empty SFTP login directory"));
-        else resolve(path);
-      });
-    });
-  } catch {
-    // Keep the existing shell-only file browser usable without SFTP.
-    return new Promise<string>((resolve, reject) => {
-      execChannel(session, "pwd -P", (error, stream) => {
-        if (error) return reject(error);
-        let output = "";
-        stream.on("data", (chunk: Buffer) => {
-          output += chunk.toString();
-        });
-        stream.on("error", reject);
-        stream.on("close", (code: number) => {
-          const path = output.replace(/[\r\n]+$/, "");
-          if (code !== 0 || !path.startsWith("/")) {
-            reject(new Error("Could not resolve the remote login directory"));
-          } else resolve(path);
-        });
-      });
-    });
-  }
-}
diff --git a/plugins/file-manager/src/backend/host-identity.ts b/plugins/file-manager/src/backend/host-identity.ts
deleted file mode 100644
index 4afde5e46..000000000
--- a/plugins/file-manager/src/backend/host-identity.ts
+++ /dev/null
@@ -1,119 +0,0 @@
-import type { PluginLogger } from "@termix/plugin-sdk/backend";
-
-export type ConnectionStage =
-  | "dns"
-  | "tcp"
-  | "handshake"
-  | "auth"
-  | "connected"
-  | "connection"
-  | "error"
-  | "proxy"
-  | "jump"
-  | "sftp_connecting"
-  | "sftp_auth"
-  | "sftp_connected";
-
-export type LogEntry = {
-  id: string;
-  timestamp: Date;
-  type: "info" | "success" | "warning" | "error";
-  stage: ConnectionStage;
-  message: string;
-  details?: Record<string, unknown> | string;
-};
-
-export function createConnectionLog(
-  type: LogEntry["type"],
-  stage: ConnectionStage,
-  message: string,
-  details?: Record<string, unknown>,
-): Omit<LogEntry, "id" | "timestamp"> {
-  return { type, stage, message, details };
-}
-
-function normalizeHostAddress(value: unknown): string {
-  if (typeof value !== "string") return "";
-  return value
-    .replace(/^\[|\]$/g, "")
-    .trim()
-    .toLowerCase();
-}
-
-/**
- * Whether a numeric host id resolved to a different machine than the client
- * meant. Ids from the desktop app and a sync server drift apart, and the
- * resolved row supplies the credentials, so a mismatch must be refused.
- */
-export function hostAddressMismatch(
-  clientAddress: unknown,
-  resolvedAddress: unknown,
-): boolean {
-  const resolved = normalizeHostAddress(resolvedAddress);
-  if (!resolved) return false;
-  return resolved !== normalizeHostAddress(clientAddress);
-}
-
-export function resolveServerHostId(
-  clientHostId: number | null,
-  resolvedHost: { id?: unknown } | null,
-): number | null {
-  return typeof resolvedHost?.id === "number" ? resolvedHost.id : clientHostId;
-}
-
-export class HostAddressMismatchError extends Error {
-  constructor() {
-    super(
-      "Host mismatch: this server resolved the selected host to a different machine, so the connection was refused. " +
-        "The host ids on this device and on the sync server have drifted apart. " +
-        'Set the connection origin to "This device" for this host, or re-run a full sync, then try again.',
-    );
-    this.name = "HostAddressMismatchError";
-  }
-}
-
-export class HostNotOnThisServerError extends Error {
-  constructor() {
-    super(
-      "This host does not exist on the sync server, so the connection was refused. " +
-        'Run a sync so the server knows about it, or set the connection origin to "This device" for this host.',
-    );
-    this.name = "HostNotOnThisServerError";
-  }
-}
-
-type Meta = Record<string, unknown>;
-
-export interface FileLogger {
-  info: (message: string, meta?: Meta) => void;
-  success: (message: string, meta?: Meta) => void;
-  warn: (message: string, meta?: Meta) => void;
-  error: (message: string, error?: unknown, meta?: Meta) => void;
-}
-
-function withMeta(message: string, meta?: Meta): string {
-  if (!meta || Object.keys(meta).length === 0) return message;
-  try {
-    return `${message} ${JSON.stringify(meta)}`;
-  } catch {
-    return message;
-  }
-}
-
-/** ctx.log takes a plain message; this keeps the structured fields readable. */
-export function createFileLogger(log: PluginLogger): FileLogger {
-  return {
-    info: (message, meta) => log.info(withMeta(message, meta)),
-    success: (message, meta) => log.info(withMeta(message, meta)),
-    warn: (message, meta) => log.warn(withMeta(message, meta)),
-    error: (message, error, meta) => {
-      if (error instanceof Error) {
-        log.error(withMeta(message, meta), error);
-      } else if (error && typeof error === "object" && !meta) {
-        log.error(withMeta(message, error as Meta));
-      } else {
-        log.error(withMeta(message, meta));
-      }
-    },
-  };
-}
diff --git a/plugins/file-manager/src/backend/index.ts b/plugins/file-manager/src/backend/index.ts
deleted file mode 100644
index c1d5d308a..000000000
--- a/plugins/file-manager/src/backend/index.ts
+++ /dev/null
@@ -1,2374 +0,0 @@
-import express, { type Router } from "express";
-import cookieParser from "cookie-parser";
-import { Client as SSHClient } from "ssh2";
-import type {
-  PluginContext,
-  PluginSshHost,
-  PluginSshPromptChannel,
-} from "@termix/plugin-sdk/backend";
-import { getErrorMessage } from "./error-message.js";
-import { setPluginSsh, pluginSsh } from "./ssh.js";
-import { setPluginCtx } from "./plugin-ctx.js";
-import {
-  flushTransferProfiles,
-  setTransferProfileStore,
-} from "./transfer-tuning.js";
-
-const TRANSFER_PROFILES_KEY = "transfer-profiles";
-import {
-  createConnectionLog,
-  createFileLogger,
-  hostAddressMismatch,
-  HostAddressMismatchError,
-  HostNotOnThisServerError,
-  resolveServerHostId,
-  type ConnectionStage,
-  type FileLogger,
-  type LogEntry,
-} from "./host-identity.js";
-import {
-  ChannelOpenSerializer,
-  execChannel,
-  getSessionSftp,
-  type PendingTOTPSession,
-  type SSHSession,
-} from "./session.js";
-import { registerFileListingRoutes } from "./list-routes.js";
-import { registerFileContentRoutes } from "./content-routes.js";
-import { registerFileOperationRoutes } from "./operation-routes.js";
-import { registerFileDownloadRoutes } from "./download-routes.js";
-import { registerFileActionRoutes } from "./action-routes.js";
-import { registerBookmarkRoutes } from "./bookmark-routes.js";
-import {
-  startHostTransfer,
-  getTransferStatus,
-  listActiveTransfers,
-  probeHungStreamTransfers,
-  requestTransferCancel,
-  cleanupCancelledTransfer,
-  retryHostTransfer,
-  previewArchiveTransferMethod,
-  type HostTransferDeps,
-} from "./transfer-engine.js";
-import { createFilesService } from "./service.js";
-import { tables } from "./tables.js";
-
-let fileLogger: FileLogger = createFileLogger(console);
-
-// Shape of a resolved host as this route reads it; core fills more fields
-// than PluginSshHost names.
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-type LooseHost = PluginSshHost & Record<string, any>;
-
-// Core's jump chain failure, matched by name so no core class is imported.
-function isJumpHostChainError(error: unknown): boolean {
-  return error instanceof Error && error.name === "JumpHostChainError";
-}
-
-/** Cosmetic only: whether the proxy step is worth a connection-log line. */
-function hasSocks5Config(host: PluginSshHost): boolean {
-  const chain = Array.isArray(host.socks5ProxyChain)
-    ? host.socks5ProxyChain
-    : [];
-  return !!host.useSocks5 && (!!host.socks5Host || chain.length > 0);
-}
-
-/**
- * The host id came from whichever database the client is displaying. If this
- * server has a different machine under that id, refuse rather than browse,
- * edit or delete files on the wrong host.
- */
-function assertResolvedHost(
-  clientIp: unknown,
-  hostSyncId: string | null | undefined,
-  resolvedHost: { ip?: string } | null | undefined,
-  hostId: number,
-  userId: string,
-): void {
-  if (hostSyncId) {
-    if (resolvedHost) return;
-    fileLogger.error(
-      "Refusing SFTP connection: host is not known to this server",
-      undefined,
-      { operation: "file_manager_host_sync_id_unknown", hostId, userId },
-    );
-    throw new HostNotOnThisServerError();
-  }
-
-  if (!hostAddressMismatch(clientIp, resolvedHost?.ip)) return;
-
-  fileLogger.error(
-    "Refusing SFTP connection: host id resolves to a different address here",
-    undefined,
-    {
-      operation: "file_manager_host_id_mismatch",
-      hostId,
-      userId,
-      clientIp,
-      resolvedIp: resolvedHost?.ip,
-    },
-  );
-  throw new HostAddressMismatchError();
-}
-
-export async function activate(ctx: PluginContext) {
-  fileLogger = createFileLogger(ctx.log);
-  setPluginSsh(ctx.ssh);
-  setPluginCtx(ctx);
-  ctx.disposables.add(() => setPluginSsh(null));
-  ctx.disposables.add(() => setPluginCtx(null));
-  setTransferProfileStore({
-    read: () => ctx.kv.get(TRANSFER_PROFILES_KEY),
-    write: (value) => ctx.kv.set(TRANSFER_PROFILES_KEY, value),
-  });
-  ctx.disposables.add(async () => {
-    await flushTransferProfiles();
-    setTransferProfileStore(null);
-  });
-
-  /* eslint-disable @typescript-eslint/no-explicit-any */
-  // ctx.db.define hands back an untyped table object; typed at this module's
-  // edge, the same way plugins/workspaces/src/backend/repository.ts does.
-  const table: any = await ctx.db.define(tables[0]);
-  const pinnedTable: any = await ctx.db.define(tables[1]);
-  const shortcutsTable: any = await ctx.db.define(tables[2]);
-  const transferRecentTable: any = await ctx.db.define(tables[3]);
-  /* eslint-enable @typescript-eslint/no-explicit-any */
-
-  // The user row survives a password-reset data wipe (the DEK could not be
-  // recovered, not that the account is gone), so a refUser() cascade never
-  // fires for it. Core asks every plugin holding user data to drop its own
-  // rows on this topic instead.
-  ctx.events.on("user.data_wiped", (payload) => {
-    const userId = (payload as { userId?: string } | undefined)?.userId;
-    if (!userId) return;
-    void (async () => {
-      try {
-        /* eslint-disable @typescript-eslint/no-explicit-any */
-        const drizzle = await ctx.db.client<any>();
-        /* eslint-enable @typescript-eslint/no-explicit-any */
-        const { eq } = await import("drizzle-orm");
-        await drizzle.delete(table).where(eq(table.userId, userId));
-        await drizzle.delete(pinnedTable).where(eq(pinnedTable.userId, userId));
-        await drizzle
-          .delete(shortcutsTable)
-          .where(eq(shortcutsTable.userId, userId));
-        await drizzle
-          .delete(transferRecentTable)
-          .where(eq(transferRecentTable.userId, userId));
-        await ctx.db.persist();
-      } catch (error) {
-        ctx.log.error(
-          "Failed to wipe file manager data for user",
-          error as Error,
-        );
-      }
-    })();
-  });
-
-  const sshSessions: Record<string, SSHSession> = {};
-  const pendingTOTPSessions: Record<string, PendingTOTPSession> = {};
-  const activeListRequests: Record<string, boolean> = {};
-
-  function cleanupSession(sessionId: string) {
-    const session = sshSessions[sessionId];
-    if (!session) return;
-    if (session.activeOperations > 0) {
-      fileLogger.warn(
-        `Deferring session cleanup for ${sessionId} - ${session.activeOperations} active operations`,
-        {
-          operation: "cleanup_deferred",
-          sessionId,
-          activeOperations: session.activeOperations,
-        },
-      );
-      scheduleSessionCleanup(sessionId);
-      return;
-    }
-    try {
-      if (session.sftp) {
-        session.sftp.end();
-        session.sftp = undefined;
-      }
-    } catch {
-      // expected
-    }
-    try {
-      session.client.end();
-    } catch {
-      // expected
-    }
-    clearTimeout(session.timeout);
-    delete sshSessions[sessionId];
-  }
-
-  function scheduleSessionCleanup(sessionId: string) {
-    const session = sshSessions[sessionId];
-    if (!session) return;
-    if (session.timeout) clearTimeout(session.timeout);
-    session.timeout = setTimeout(
-      () => cleanupSession(sessionId),
-      30 * 60 * 1000,
-    );
-  }
-
-  // Pending TOTP and browser sign-in parking sessions expire on their own; sweep stale
-  // ones so a session left mid-handshake doesn't leak an open ssh2 Client.
-  const pendingSweep = setInterval(() => {
-    const now = Date.now();
-    for (const sessionId of Object.keys(pendingTOTPSessions)) {
-      const session = pendingTOTPSessions[sessionId];
-      if (now - session.createdAt > 300000) {
-        try {
-          session.client.end();
-        } catch {
-          // expected
-        }
-        delete pendingTOTPSessions[sessionId];
-      }
-    }
-  }, 60000);
-  ctx.disposables.add(() => clearInterval(pendingSweep));
-  ctx.disposables.add(() => {
-    for (const sessionId of Object.keys(sshSessions)) cleanupSession(sessionId);
-  });
-
-  function verifySessionOwnership(
-    session: SSHSession,
-    userId: string,
-  ): boolean {
-    return !session.userId || session.userId === userId;
-  }
-
-  function resolveBrowseHostId(
-    browseSessionId: string,
-    browseSession: SSHSession,
-  ): number | undefined {
-    if (browseSession.hostId) return browseSession.hostId;
-    const parsed = Number.parseInt(browseSessionId, 10);
-    return Number.isFinite(parsed) ? parsed : undefined;
-  }
-
-  async function openDedicatedTransferSession(
-    browseSessionId: string,
-    dedicatedSessionId: string,
-    userId: string,
-    transferId: string,
-    options?: { allowBrowseDisconnected?: boolean },
-  ): Promise<SSHSession> {
-    const browseSession = sshSessions[browseSessionId];
-    if (!options?.allowBrowseDisconnected && !browseSession?.isConnected) {
-      throw new Error("Browse SSH session not connected");
-    }
-    if (browseSession && !verifySessionOwnership(browseSession, userId)) {
-      throw new Error("Session access denied");
-    }
-
-    const hostId = browseSession
-      ? resolveBrowseHostId(browseSessionId, browseSession)
-      : (() => {
-          const parsed = Number.parseInt(browseSessionId, 10);
-          return Number.isFinite(parsed) ? parsed : undefined;
-        })();
-    if (!hostId) {
-      throw new Error("Cannot open transfer connection: unknown host");
-    }
-
-    const host = await ctx.asUser(userId, () => ctx.ssh.resolveHost(hostId));
-    if (!host) {
-      throw new Error("Host not found for transfer connection");
-    }
-
-    const existingSession = sshSessions[dedicatedSessionId];
-    if (
-      existingSession?.isConnected &&
-      verifySessionOwnership(existingSession, userId)
-    ) {
-      return existingSession;
-    }
-
-    fileLogger.info("Opening dedicated transfer SSH session", {
-      operation: "transfer_ssh_connect",
-      transferId,
-      browseSessionId,
-      dedicatedSessionId,
-      hostId,
-      ip: host.ip,
-      port: host.port,
-      username: host.username,
-    });
-
-    const connection = await ctx.ssh.connect<SSHClient>(
-      host as unknown as PluginSshHost,
-      {
-        purpose: "file-transfer",
-        profile: "stream",
-        timeoutMs: 60000,
-        overrides: { tcpKeepAliveInitialDelay: 5000 },
-      },
-    );
-    const client = connection.client;
-
-    const session: SSHSession = {
-      client,
-      isConnected: true,
-      lastActive: Date.now(),
-      activeOperations: 0,
-      channelOpener: new ChannelOpenSerializer(),
-      userId,
-      ip: host.ip,
-      port: host.port,
-      hostId: host.id,
-      username: host.username,
-      transferDedicated: true,
-      transferId,
-      browseSessionId,
-    };
-
-    client.on("close", () => {
-      fileLogger.info("Dedicated transfer SSH connection closed", {
-        operation: "transfer_ssh_disconnected",
-        transferId,
-        dedicatedSessionId,
-        browseSessionId,
-        hostId,
-      });
-      const existing = sshSessions[dedicatedSessionId];
-      if (existing) {
-        existing.isConnected = false;
-        closeDedicatedTransferSession(dedicatedSessionId);
-      }
-    });
-
-    sshSessions[dedicatedSessionId] = session;
-    return session;
-  }
-
-  function closeDedicatedTransferSession(sessionId: string): void {
-    const session = sshSessions[sessionId];
-    if (!session?.transferDedicated) return;
-
-    fileLogger.info("Closing dedicated transfer SSH session", {
-      operation: "transfer_ssh_close",
-      sessionId,
-      transferId: session.transferId,
-      browseSessionId: session.browseSessionId,
-    });
-
-    try {
-      if (session.sftp) {
-        session.sftp.end();
-        session.sftp = undefined;
-      }
-    } catch {
-      // expected
-    }
-    session.sftpPending = undefined;
-
-    try {
-      session.client.end();
-    } catch {
-      // expected
-    }
-
-    clearTimeout(session.timeout);
-    delete sshSessions[sessionId];
-  }
-
-  const app = express();
-  app.use(ctx.rbac.require("use") as never);
-  app.use(cookieParser());
-  // uploadFileChunk streams its octet-stream body straight into SFTP; letting
-  // the JSON/urlencoded parsers run is harmless (they ignore a body they do
-  // not claim), but the raw parser only applies to that one route so a chunk
-  // isn't buffered whole in memory first.
-  const rawBodyParser = express.raw({
-    limit: "5gb",
-    type: "application/octet-stream",
-  });
-  app.use((req, res, next) => {
-    if (req.path === "/uploadFileChunk") return rawBodyParser(req, res, next);
-    next();
-  });
-  app.use((_req, res, next) => {
-    res.setHeader("Cache-Control", "no-store");
-    next();
-  });
-
-  app.use((req, res, next) => {
-    if (
-      req.path === "/connect" ||
-      req.path === "/connect-totp" ||
-      req.path === "/connect-browser-sign-in"
-    ) {
-      return next();
-    }
-    const sessionId = (req.query.sessionId as string) || req.body?.sessionId;
-    if (!sessionId) return next();
-    const session = sshSessions[sessionId];
-    if (!session) return next();
-    const userId = ctx.currentActor();
-    if (!userId || !verifySessionOwnership(session, userId)) {
-      return res.status(403).json({ error: "Session access denied" });
-    }
-    next();
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/connect:
-   *   post:
-   *     summary: Connect to SSH for file management
-   *     description: Establishes an SSH/SFTP connection for file manager operations. Supports password, key-based, and keyboard-interactive authentication, as well as jump hosts and SOCKS5 proxies.
-   *     tags:
-   *       - File Manager
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required:
-   *               - sessionId
-   *               - ip
-   *               - port
-   *               - username
-   *             properties:
-   *               sessionId:
-   *                 type: string
-   *               hostId:
-   *                 type: number
-   *               ip:
-   *                 type: string
-   *               port:
-   *                 type: number
-   *               username:
-   *                 type: string
-   *               password:
-   *                 type: string
-   *               sshKey:
-   *                 type: string
-   *               keyPassword:
-   *                 type: string
-   *               authType:
-   *                 type: string
-   *                 enum: [password, key, none]
-   *               credentialId:
-   *                 type: number
-   *               jumpHosts:
-   *                 type: array
-   *                 items:
-   *                   type: object
-   *                   properties:
-   *                     hostId:
-   *                       type: number
-   *               useSocks5:
-   *                 type: boolean
-   *               socks5Host:
-   *                 type: string
-   *               socks5Port:
-   *                 type: number
-   *               socks5Username:
-   *                 type: string
-   *               socks5Password:
-   *                 type: string
-   *               socks5ProxyChain:
-   *                 type: array
-   *     responses:
-   *       200:
-   *         description: SSH connection established, or requires TOTP or a browser sign-in.
-   *       400:
-   *         description: Missing required parameters or invalid SSH key format.
-   *       401:
-   *         description: Authentication required.
-   *       500:
-   *         description: SSH connection failed.
-   */
-  app.post("/connect", async (req, res) => {
-    const {
-      sessionId,
-      hostId,
-      syncId: hostSyncId,
-      ip,
-      port,
-      username,
-      password,
-      sshKey,
-      keyPassword,
-      authType,
-      credentialId,
-      jumpHosts,
-      useSocks5,
-      socks5Host,
-      socks5Port,
-      socks5Username,
-      socks5Password,
-      socks5ProxyChain,
-    } = req.body;
-
-    const userId = ctx.currentActor();
-    const connectionLogs: Array<Omit<LogEntry, "id" | "timestamp">> = [];
-
-    connectionLogs.push(
-      createConnectionLog(
-        "info",
-        "sftp_connecting",
-        `Initiating SFTP connection to ${username}@${ip}:${port}`,
-      ),
-    );
-
-    if (!userId) {
-      fileLogger.error("SSH connection rejected: no authenticated user", {
-        operation: "file_connect_auth",
-        sessionId,
-      });
-      connectionLogs.push(
-        createConnectionLog(
-          "error",
-          "sftp_auth",
-          "Authentication required - no user session",
-        ),
-      );
-      return res
-        .status(401)
-        .json({ error: "Authentication required", connectionLogs });
-    }
-
-    if (!sessionId || !ip || !username || !port) {
-      fileLogger.warn("Missing SSH connection parameters for file manager", {
-        operation: "file_connect",
-        sessionId,
-        hasIp: !!ip,
-        hasUsername: !!username,
-        hasPort: !!port,
-      });
-      connectionLogs.push(
-        createConnectionLog(
-          "error",
-          "sftp_connecting",
-          "Missing required connection parameters",
-        ),
-      );
-      return res
-        .status(400)
-        .json({ error: "Missing SSH connection parameters", connectionLogs });
-    }
-
-    if (sshSessions[sessionId]?.isConnected) {
-      cleanupSession(sessionId);
-    }
-
-    if (pendingTOTPSessions[sessionId]) {
-      try {
-        pendingTOTPSessions[sessionId].client.end();
-      } catch {
-        // expected
-      }
-      delete pendingTOTPSessions[sessionId];
-    }
-
-    const client = new SSHClient();
-
-    connectionLogs.push(
-      createConnectionLog(
-        "info",
-        "sftp_auth",
-        "Resolving authentication credentials",
-      ),
-    );
-
-    let resolvedCredentials = {
-      password,
-      sshKey,
-      keyPassword,
-      authType,
-      sudoPassword: undefined as string | undefined,
-      certPublicKey: undefined as string | undefined,
-    };
-    let resolvedIp = ip;
-    let resolvedPort = port;
-    let resolvedUsername = username;
-    let resolvedSshOptions: PluginSshHost["sshOptions"];
-    let resolvedJumpHosts = jumpHosts;
-    let resolvedScpLegacy = false;
-    let resolvedUseSocks5 = useSocks5;
-    let resolvedSocks5Host = socks5Host;
-    let resolvedSocks5Port = socks5Port;
-    let resolvedSocks5Username = socks5Username;
-    let resolvedSocks5Password = socks5Password;
-    let resolvedSocks5ProxyChain = socks5ProxyChain;
-
-    const resolveFrom = async () => {
-      const resolvedHost = (await ctx.ssh.resolveHost(hostId, {
-        syncId: hostSyncId,
-      })) as LooseHost | null;
-      assertResolvedHost(ip, hostSyncId, resolvedHost, hostId, userId);
-      if (!resolvedHost) return;
-      resolvedIp = resolvedHost.ip;
-      resolvedPort = resolvedHost.port;
-      resolvedUsername = resolvedHost.username;
-      resolvedCredentials = {
-        password: resolvedHost.password,
-        sshKey: resolvedHost.key,
-        keyPassword: keyPassword || resolvedHost.keyPassword,
-        authType: resolvedHost.authType,
-        sudoPassword: resolvedHost.sudoPassword as string | undefined,
-        certPublicKey: (resolvedHost as { certPublicKey?: string })
-          .certPublicKey,
-      };
-      resolvedSshOptions =
-        resolvedHost.sshOptions as PluginSshHost["sshOptions"];
-      resolvedScpLegacy =
-        (await ctx.settings.getHost<boolean>(
-          Number(resolvedHost.id),
-          "scpLegacy",
-        )) === true;
-      if (resolvedHost.useSocks5) {
-        resolvedUseSocks5 = resolvedHost.useSocks5;
-        resolvedSocks5Host = resolvedHost.socks5Host;
-        resolvedSocks5Port = resolvedHost.socks5Port;
-        resolvedSocks5Username = resolvedHost.socks5Username;
-        resolvedSocks5Password = resolvedHost.socks5Password;
-        resolvedSocks5ProxyChain = resolvedHost.socks5ProxyChain;
-      }
-      if (
-        (!resolvedJumpHosts || resolvedJumpHosts.length === 0) &&
-        resolvedHost.jumpHosts &&
-        resolvedHost.jumpHosts.length > 0
-      ) {
-        resolvedJumpHosts = resolvedHost.jumpHosts;
-        connectionLogs.push(
-          createConnectionLog(
-            "info",
-            "jump",
-            `Loaded ${resolvedHost.jumpHosts.length} jump host(s) from server-side host data`,
-          ),
-        );
-      }
-      connectionLogs.push(
-        createConnectionLog(
-          "info",
-          "sftp_auth",
-          "Credentials resolved from server-side host data",
-        ),
-      );
-    };
-
-    if (hostId && userId && !password && !sshKey) {
-      try {
-        await resolveFrom();
-      } catch (error) {
-        if (
-          error instanceof HostAddressMismatchError ||
-          error instanceof HostNotOnThisServerError
-        )
-          throw error;
-        fileLogger.warn(`Failed to resolve host credentials for ${hostId}`, {
-          operation: "ssh_credentials",
-          hostId,
-          error: getErrorMessage(error),
-        });
-      }
-    } else if (credentialId && hostId && userId) {
-      try {
-        await resolveFrom();
-      } catch (error) {
-        if (
-          error instanceof HostAddressMismatchError ||
-          error instanceof HostNotOnThisServerError
-        )
-          throw error;
-        fileLogger.warn(`Failed to resolve credentials for host ${hostId}`, {
-          operation: "ssh_credentials",
-          hostId,
-          credentialId,
-          error: getErrorMessage(error),
-        });
-      }
-    }
-
-    let serverHostId = hostId;
-    if (hostSyncId && userId) {
-      const resolvedHost = await ctx.ssh.resolveHost(hostId, {
-        syncId: hostSyncId,
-      });
-      assertResolvedHost(ip, hostSyncId, resolvedHost, hostId, userId);
-      serverHostId = resolveServerHostId(hostId, resolvedHost) ?? hostId;
-    }
-
-    const effectiveAuthType =
-      resolvedCredentials.authType ||
-      (resolvedCredentials.sshKey
-        ? "key"
-        : resolvedCredentials.password
-          ? "password"
-          : undefined);
-    if (!effectiveAuthType) {
-      fileLogger.warn(
-        "No valid authentication method provided for file manager",
-        { operation: "file_connect", sessionId, hostId },
-      );
-      connectionLogs.push(
-        createConnectionLog(
-          "error",
-          "sftp_auth",
-          "No valid authentication method provided",
-        ),
-      );
-      return res.status(400).json({
-        error: "Either password or SSH key must be provided",
-        connectionLogs,
-      });
-    }
-
-    const connectTarget = {
-      id: serverHostId,
-      ip: resolvedIp,
-      port: resolvedPort,
-      username: resolvedUsername,
-      userId,
-      authType: effectiveAuthType,
-      password: resolvedCredentials.password,
-      key: resolvedCredentials.sshKey,
-      keyPassword: resolvedCredentials.keyPassword,
-      certPublicKey: resolvedCredentials.certPublicKey,
-      sshOptions: resolvedSshOptions ?? null,
-      jumpHosts: resolvedJumpHosts,
-      useSocks5: resolvedUseSocks5,
-      socks5Host: resolvedSocks5Host,
-      socks5Port: resolvedSocks5Port,
-      socks5Username: resolvedSocks5Username,
-      socks5Password: resolvedSocks5Password,
-      socks5ProxyChain: resolvedSocks5ProxyChain,
-    } as PluginSshHost;
-
-    const ssh = pluginSsh();
-    const prepared = await ssh.prepare(connectTarget, {
-      purpose: "file-manager",
-      profile: "session",
-      client,
-      serverHostId,
-      log: (level, message) =>
-        connectionLogs.push(createConnectionLog(level, "sftp_auth", message)),
-    });
-    const config = prepared.config as Record<string, unknown>;
-
-    if (prepared.outcome.status !== "ready") {
-      const outcome = prepared.outcome;
-      if (
-        outcome.status === "error" &&
-        outcome.code === "passphrase-required"
-      ) {
-        return res.json({ status: "passphrase_required", connectionLogs });
-      }
-      fileLogger.warn("File manager SSH auth could not be prepared", {
-        operation: "file_connect",
-        sessionId,
-        hostId,
-        authType: effectiveAuthType,
-        error: outcome.message,
-      });
-      connectionLogs.push(
-        createConnectionLog("error", "sftp_auth", outcome.message),
-      );
-      if (outcome.status === "interaction-required") {
-        return res.status(401).json({
-          error: outcome.message,
-          requiresAuthInteraction: outcome.interaction,
-          ...(outcome.flag ? { [outcome.flag]: true } : {}),
-          connectionLogs,
-        });
-      }
-      return res.status(400).json({
-        error:
-          outcome.status === "error" && outcome.code === "invalid-key"
-            ? "Invalid SSH key format"
-            : outcome.message,
-        connectionLogs,
-      });
-    }
-
-    const credentialless = !ssh.requiresSecret(effectiveAuthType);
-
-    let responseSent = false;
-
-    connectionLogs.push(
-      createConnectionLog("info", "dns", `Resolving DNS for ${ip}`),
-    );
-    connectionLogs.push(
-      createConnectionLog("info", "tcp", `Connecting to ${ip}:${port}`),
-    );
-    connectionLogs.push(
-      createConnectionLog("info", "handshake", "Initiating SSH handshake"),
-    );
-    connectionLogs.push(
-      createConnectionLog(
-        "info",
-        "sftp_connecting",
-        "Establishing SSH connection...",
-      ),
-    );
-
-    client.on("ready", () => {
-      if (responseSent) return;
-      responseSent = true;
-      fileLogger.info("File manager SSH connection established", {
-        operation: "file_ssh_connected",
-        sessionId,
-        userId,
-        hostId: serverHostId,
-        ip,
-        port,
-        username,
-      });
-      connectionLogs.push(
-        createConnectionLog(
-          "success",
-          "connected",
-          "SSH connection established successfully",
-        ),
-      );
-      connectionLogs.push(
-        createConnectionLog(
-          "success",
-          "sftp_connected",
-          "SFTP session established successfully",
-        ),
-      );
-      sshSessions[sessionId] = {
-        client,
-        isConnected: true,
-        lastActive: Date.now(),
-        activeOperations: 0,
-        channelOpener: new ChannelOpenSerializer(),
-        userId,
-        ip,
-        port,
-        hostId: serverHostId,
-        username,
-        sudoPassword: resolvedCredentials.sudoPassword,
-        scpLegacy: resolvedScpLegacy,
-      };
-      scheduleSessionCleanup(sessionId);
-
-      if (userId) {
-        void (async () => {
-          await ctx.audit.record({
-            request: req,
-            action: "file_manager_connect",
-            resourceType: "host",
-            resourceId: serverHostId ? String(serverHostId) : undefined,
-            resourceName: `${username}@${ip}:${port}`,
-            success: true,
-          });
-        })();
-      }
-
-      res.json({
-        status: "success",
-        message: "SSH connection established",
-        connectionLogs,
-      });
-
-      if (hostId && userId) {
-        void logFileManagerActivity(hostId, userId, username, ip, port);
-      }
-    });
-
-    client.on("error", (err) => {
-      if (responseSent) return;
-      responseSent = true;
-      fileLogger.error("SSH connection failed for file manager", {
-        operation: "file_connect",
-        sessionId,
-        hostId,
-        ip,
-        port,
-        username,
-        error: err.message,
-      });
-
-      let errorStage: ConnectionStage;
-      if (
-        err.message.includes("ENOTFOUND") ||
-        err.message.includes("getaddrinfo")
-      ) {
-        errorStage = "dns";
-        connectionLogs.push(
-          createConnectionLog(
-            "error",
-            errorStage,
-            `DNS resolution failed: ${err.message}`,
-          ),
-        );
-      } else if (
-        err.message.includes("ECONNREFUSED") ||
-        err.message.includes("ETIMEDOUT")
-      ) {
-        errorStage = "tcp";
-        connectionLogs.push(
-          createConnectionLog(
-            "error",
-            errorStage,
-            `TCP connection failed: ${err.message}`,
-          ),
-        );
-      } else if (
-        err.message.includes("handshake") ||
-        err.message.includes("key exchange")
-      ) {
-        errorStage = "handshake";
-        connectionLogs.push(
-          createConnectionLog(
-            "error",
-            errorStage,
-            `SSH handshake failed: ${err.message}`,
-          ),
-        );
-      } else if (
-        err.message.includes("authentication") ||
-        err.message.includes("Authentication")
-      ) {
-        errorStage = "auth";
-        connectionLogs.push(
-          createConnectionLog(
-            "error",
-            errorStage,
-            `Authentication failed: ${err.message}`,
-          ),
-        );
-      } else if (err.message.includes("verification failed")) {
-        errorStage = "handshake";
-        connectionLogs.push(
-          createConnectionLog(
-            "error",
-            errorStage,
-            "SSH host key has changed. For security, please open a Terminal connection to this host first to verify and accept the new key fingerprint.",
-          ),
-        );
-      } else {
-        connectionLogs.push(
-          createConnectionLog(
-            "error",
-            "error",
-            `SSH connection failed: ${err.message}`,
-          ),
-        );
-      }
-
-      if (
-        err.message.includes("Cannot parse privateKey") &&
-        err.message.includes("no passphrase")
-      ) {
-        res.json({ status: "passphrase_required", connectionLogs });
-      } else if (
-        credentialless &&
-        (err.message.includes("authentication") ||
-          err.message.includes("All configured authentication methods failed"))
-      ) {
-        res.json({
-          status: "auth_required",
-          reason: "no_keyboard",
-          connectionLogs,
-        });
-      } else {
-        res
-          .status(500)
-          .json({ status: "error", message: err.message, connectionLogs });
-      }
-    });
-
-    client.on("close", () => {
-      fileLogger.info("File manager SSH connection closed", {
-        operation: "file_ssh_disconnected",
-        sessionId,
-        userId,
-        hostId,
-      });
-      if (sshSessions[sessionId]) sshSessions[sessionId].isConnected = false;
-      cleanupSession(sessionId);
-    });
-
-    const parkForAnswer = (
-      finish: (responses: string[]) => void,
-      prompts: Array<{ prompt: string; echo: boolean }>,
-      promptIndex: number,
-      isBrowserSignIn = false,
-    ) => {
-      pendingTOTPSessions[sessionId] = {
-        client,
-        finish,
-        config,
-        createdAt: Date.now(),
-        sessionId,
-        hostId,
-        ip,
-        port,
-        username,
-        userId,
-        prompts,
-        totpPromptIndex: promptIndex,
-        resolvedPassword: resolvedCredentials.password,
-        totpAttempts: 0,
-        ...(isBrowserSignIn ? { isBrowserSignIn: true } : {}),
-      };
-    };
-
-    client.on(
-      "keyboard-interactive",
-      (
-        name: string,
-        instructions: string,
-        _instructionsLang: string,
-        prompts: Array<{ prompt: string; echo: boolean }>,
-        finish: (responses: string[]) => void,
-      ) => {
-        const decision = ssh.classifyKeyboardInteractive(
-          { name, instructions, prompts },
-          connectTarget,
-        );
-        const autoFinish = () =>
-          finish(ssh.autoResponses(prompts, resolvedCredentials.password));
-
-        if (decision.kind === "auto") {
-          finish(decision.responses);
-          return;
-        }
-
-        if (decision.kind === "browser") {
-          if (responseSent) return;
-          responseSent = true;
-          connectionLogs.push(
-            createConnectionLog(
-              "info",
-              "sftp_auth",
-              `${decision.label} sign-in required`,
-              { url: decision.url },
-            ),
-          );
-          parkForAnswer(finish, prompts, -1, true);
-          res.json({
-            requires_browser_sign_in: true,
-            sessionId,
-            label: decision.label,
-            url: decision.url,
-            code: decision.code,
-            connectionLogs,
-          });
-          return;
-        }
-
-        const promptIndex = decision.promptIndex;
-        const promptText = prompts[promptIndex].prompt;
-        const isPasswordPrompt = /password/i.test(promptText);
-
-        if (
-          decision.kind === "input" &&
-          !(decision as { isPush?: boolean }).isPush &&
-          !isPasswordPrompt
-        ) {
-          autoFinish();
-          return;
-        }
-
-        if (decision.kind === "input" && isPasswordPrompt && credentialless) {
-          if (responseSent) return;
-          responseSent = true;
-          client.end();
-          res.json({ status: "auth_required", reason: "no_keyboard" });
-          return;
-        }
-
-        if (responseSent || pendingTOTPSessions[sessionId]) {
-          autoFinish();
-          return;
-        }
-        responseSent = true;
-        parkForAnswer(finish, prompts, promptIndex);
-
-        if (decision.kind === "input" && isPasswordPrompt) {
-          res.json({
-            requires_totp: true,
-            sessionId,
-            prompt: promptText,
-            isPassword: true,
-          });
-          return;
-        }
-
-        connectionLogs.push(
-          createConnectionLog(
-            "info",
-            "sftp_auth",
-            "TOTP verification required",
-            {
-              prompt: promptText,
-            },
-          ),
-        );
-        res.json({
-          requires_totp: true,
-          sessionId,
-          prompt: promptText,
-          connectionLogs,
-        });
-      },
-    );
-
-    const jumpHostCount: number = Array.isArray(resolvedJumpHosts)
-      ? resolvedJumpHosts.length
-      : 0;
-
-    if (jumpHostCount > 0) {
-      if (hasSocks5Config(connectTarget)) {
-        connectionLogs.push(
-          createConnectionLog(
-            "info",
-            "proxy",
-            "Connecting via proxy + jump hosts",
-          ),
-        );
-      }
-      connectionLogs.push(
-        createConnectionLog(
-          "info",
-          "jump",
-          `Connecting via ${jumpHostCount} jump host(s)`,
-        ),
-      );
-    } else if (hasSocks5Config(connectTarget)) {
-      connectionLogs.push(
-        createConnectionLog("info", "proxy", "Connecting via proxy", {
-          proxyHost: resolvedSocks5Host,
-          proxyPort: resolvedSocks5Port || 1080,
-        }),
-      );
-    }
-
-    // A jump host asking for TOTP answers through /connect-totp like the host.
-    const jumpHostPrompt: PluginSshPromptChannel = {
-      ask: (request) =>
-        new Promise((resolve) => {
-          if (
-            (request.kind !== "totp" && request.kind !== "input") ||
-            responseSent ||
-            pendingTOTPSessions[sessionId]
-          ) {
-            resolve(null);
-            return;
-          }
-          responseSent = true;
-          parkForAnswer(
-            (answers) => resolve(answers[0] ?? null),
-            [
-              {
-                prompt: request.prompt,
-                echo: request.kind === "input" ? request.echo : false,
-              },
-            ],
-            0,
-          );
-          res.json({
-            requires_totp: true,
-            sessionId,
-            prompt: request.prompt,
-            ...(request.kind === "input" && !request.isPush
-              ? { isPassword: true }
-              : {}),
-            connectionLogs,
-          });
-        }),
-    };
-
-    try {
-      const transport = await ssh.openTransport(connectTarget, config, {
-        prompt: jumpHostPrompt,
-      });
-      if (transport.via === "proxy") {
-        connectionLogs.push(
-          createConnectionLog(
-            "success",
-            "proxy",
-            "Proxy connected successfully",
-          ),
-        );
-      }
-      if (transport.jumpClient) {
-        const jumpClient = transport.jumpClient as SSHClient;
-        client.on("close", () => jumpClient.end());
-      }
-    } catch (error) {
-      fileLogger.error("File manager transport failed", error, {
-        operation: "file_transport",
-        sessionId,
-        hostId,
-      });
-      // Already answered with a jump host prompt: fail the pending verify.
-      if (responseSent) {
-        client.emit("error", error);
-        return;
-      }
-      const stage =
-        isJumpHostChainError(error) || jumpHostCount > 0 ? "jump" : "proxy";
-      connectionLogs.push(
-        createConnectionLog("error", stage, getErrorMessage(error)),
-      );
-      return res.status(500).json({
-        error: isJumpHostChainError(error)
-          ? `Failed to connect through jump hosts: ${error.message}`
-          : getErrorMessage(error),
-        connectionLogs,
-      });
-    }
-
-    client.connect(config);
-  });
-
-  async function logFileManagerActivity(
-    hostId: number,
-    userId: string,
-    username: string,
-    ip: string,
-    port: number,
-  ): Promise<void> {
-    try {
-      const host = await ctx.hosts.get(hostId);
-      await ctx.asUser(userId, () =>
-        ctx.hosts.recordActivity(
-          hostId,
-          "file_manager",
-          host?.name || `${username}@${ip}:${port}`,
-        ),
-      );
-    } catch (error) {
-      fileLogger.warn("Failed to log file manager activity", {
-        operation: "activity_log_error",
-        userId,
-        hostId,
-        error: getErrorMessage(error),
-      });
-    }
-  }
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/connect-totp:
-   *   post:
-   *     summary: Verify TOTP and complete connection
-   *     description: Verifies the TOTP code and completes the SSH connection for file manager.
-   *     tags:
-   *       - File Manager
-   *     responses:
-   *       200:
-   *         description: TOTP verified, SSH connection established.
-   *       400:
-   *         description: Session ID and TOTP code required.
-   *       401:
-   *         description: Invalid TOTP code or authentication required.
-   *       404:
-   *         description: TOTP session expired.
-   *       408:
-   *         description: TOTP session timeout.
-   */
-  app.post("/connect-totp", async (req, res) => {
-    const { sessionId, totpCode } = req.body;
-    const userId = ctx.currentActor();
-
-    if (!userId) {
-      fileLogger.error("TOTP verification rejected: no authenticated user", {
-        operation: "file_totp_auth",
-        sessionId,
-      });
-      return res.status(401).json({ error: "Authentication required" });
-    }
-    if (!sessionId || !totpCode) {
-      return res
-        .status(400)
-        .json({ error: "Session ID and TOTP code required" });
-    }
-
-    const session = pendingTOTPSessions[sessionId];
-    if (!session) {
-      fileLogger.warn("TOTP session not found or expired", {
-        operation: "file_totp_verify",
-        sessionId,
-        userId,
-      });
-      return res
-        .status(404)
-        .json({ error: "TOTP session expired. Please reconnect." });
-    }
-
-    if (Date.now() - session.createdAt > 180000) {
-      delete pendingTOTPSessions[sessionId];
-      try {
-        session.client.end();
-      } catch {
-        // expected
-      }
-      return res
-        .status(408)
-        .json({ error: "TOTP session timeout. Please reconnect." });
-    }
-
-    const responses = (session.prompts || []).map((p, index) => {
-      if (index === session.totpPromptIndex) return totpCode;
-      if (/password/i.test(p.prompt) && session.resolvedPassword) {
-        return session.resolvedPassword;
-      }
-      return "";
-    });
-
-    let responseSent = false;
-
-    session.client.once("ready", () => {
-      if (responseSent) return;
-      responseSent = true;
-      clearTimeout(responseTimeout);
-      delete pendingTOTPSessions[sessionId];
-
-      setTimeout(() => {
-        sshSessions[sessionId] = {
-          client: session.client,
-          isConnected: true,
-          lastActive: Date.now(),
-          activeOperations: 0,
-          channelOpener: new ChannelOpenSerializer(),
-          userId,
-          ip: session.ip,
-          port: session.port,
-          hostId: session.hostId,
-          username: session.username,
-        };
-        scheduleSessionCleanup(sessionId);
-
-        res.json({
-          status: "success",
-          message: "TOTP verified, SSH connection established",
-        });
-
-        if (session.hostId && session.userId) {
-          void logFileManagerActivity(
-            session.hostId,
-            session.userId,
-            session.username ?? "",
-            session.ip ?? "",
-            session.port ?? 22,
-          );
-        }
-      }, 200);
-    });
-
-    session.client.once("error", (err) => {
-      if (responseSent) return;
-      responseSent = true;
-      clearTimeout(responseTimeout);
-      delete pendingTOTPSessions[sessionId];
-      fileLogger.error("TOTP verification failed", {
-        operation: "file_totp_verify",
-        sessionId,
-        userId,
-        error: err.message,
-      });
-      res.status(401).json({ status: "error", message: "Invalid TOTP code" });
-    });
-
-    const responseTimeout = setTimeout(() => {
-      if (!responseSent) {
-        responseSent = true;
-        delete pendingTOTPSessions[sessionId];
-        res.status(408).json({ error: "TOTP verification timeout" });
-      }
-    }, 60000);
-
-    session.finish(responses);
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/connect-browser-sign-in:
-   *   post:
-   *     summary: Continue after a browser sign-in
-   *     description: Answers the parked keyboard-interactive round once the user finished signing in in the browser (an SSH gateway's approval, for example).
-   *     tags:
-   *       - File Manager
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required:
-   *               - sessionId
-   *             properties:
-   *               sessionId:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Signed in, SSH connection established.
-   *       401:
-   *         description: Authentication failed or unauthorized.
-   *       404:
-   *         description: Sign-in session expired.
-   *       408:
-   *         description: Sign-in session timeout.
-   */
-  app.post("/connect-browser-sign-in", async (req, res) => {
-    const { sessionId } = req.body;
-    const userId = ctx.currentActor();
-
-    if (!userId) {
-      return res.status(401).json({ error: "Authentication required" });
-    }
-    if (!sessionId) {
-      return res.status(400).json({ error: "Session ID required" });
-    }
-
-    const session = pendingTOTPSessions[sessionId];
-    if (!session) {
-      return res
-        .status(404)
-        .json({ error: "Sign-in session expired. Please reconnect." });
-    }
-    if (!session.isBrowserSignIn) {
-      return res
-        .status(400)
-        .json({ error: "Session is not waiting for a browser sign-in" });
-    }
-    if (Date.now() - session.createdAt > 300000) {
-      delete pendingTOTPSessions[sessionId];
-      try {
-        session.client.end();
-      } catch {
-        // expected
-      }
-      return res
-        .status(408)
-        .json({ error: "Sign-in session timeout. Please reconnect." });
-    }
-
-    let responseSent = false;
-    const responseTimeout = setTimeout(() => {
-      if (!responseSent) {
-        responseSent = true;
-        delete pendingTOTPSessions[sessionId];
-        res.status(408).json({ error: "Sign-in verification timeout" });
-      }
-    }, 60000);
-
-    session.client.once("ready", () => {
-      if (responseSent) return;
-      responseSent = true;
-      clearTimeout(responseTimeout);
-      delete pendingTOTPSessions[sessionId];
-
-      setTimeout(() => {
-        sshSessions[sessionId] = {
-          client: session.client,
-          isConnected: true,
-          lastActive: Date.now(),
-          activeOperations: 0,
-          channelOpener: new ChannelOpenSerializer(),
-          userId,
-          ip: session.ip,
-          port: session.port,
-          hostId: session.hostId,
-          username: session.username,
-        };
-        scheduleSessionCleanup(sessionId);
-
-        res.json({
-          status: "success",
-          message: "Signed in, SSH connection established",
-        });
-
-        if (session.hostId && session.userId) {
-          void logFileManagerActivity(
-            session.hostId,
-            session.userId,
-            session.username ?? "",
-            session.ip ?? "",
-            session.port ?? 22,
-          );
-        }
-      }, 200);
-    });
-
-    session.client.once("error", () => {
-      if (responseSent) return;
-      responseSent = true;
-      clearTimeout(responseTimeout);
-      delete pendingTOTPSessions[sessionId];
-      res.status(401).json({ status: "error", message: "Sign-in failed" });
-    });
-
-    session.finish([""]);
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/disconnect:
-   *   post:
-   *     summary: Disconnect from SSH
-   *     tags:
-   *       - File Manager
-   *     responses:
-   *       200:
-   *         description: SSH connection disconnected.
-   */
-  app.post("/disconnect", (req, res) => {
-    const { sessionId } = req.body;
-    const userId = ctx.currentActor();
-    const session = sshSessions[sessionId];
-    if (session && (!userId || !verifySessionOwnership(session, userId))) {
-      return res.status(403).json({ error: "Session access denied" });
-    }
-    cleanupSession(sessionId);
-    res.json({ status: "success", message: "SSH connection disconnected" });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/sudo-password:
-   *   post:
-   *     summary: Set sudo password for session
-   *     tags:
-   *       - File Manager
-   *     responses:
-   *       200:
-   *         description: Sudo password set successfully.
-   *       400:
-   *         description: Invalid session.
-   */
-  app.post("/sudo-password", (req, res) => {
-    const { sessionId, password } = req.body;
-    const userId = ctx.currentActor();
-    const session = sshSessions[sessionId];
-    if (!session || !session.isConnected) {
-      return res.status(400).json({ error: "Invalid or disconnected session" });
-    }
-    if (!userId || !verifySessionOwnership(session, userId)) {
-      return res.status(403).json({ error: "Session access denied" });
-    }
-    session.sudoPassword = password;
-    session.lastActive = Date.now();
-    res.json({ status: "success", message: "Sudo password set" });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/status:
-   *   get:
-   *     summary: Get SSH connection status
-   *     tags:
-   *       - File Manager
-   *     parameters:
-   *       - in: query
-   *         name: sessionId
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: SSH connection status.
-   */
-  app.get("/status", (req, res) => {
-    const sessionId = req.query.sessionId as string;
-    const userId = ctx.currentActor();
-    const session = sshSessions[sessionId];
-    if (session && (!userId || !verifySessionOwnership(session, userId))) {
-      return res.status(403).json({ error: "Session access denied" });
-    }
-    res.json({ status: "success", connected: !!session?.isConnected });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/keepalive:
-   *   post:
-   *     summary: Keep SSH session alive
-   *     tags:
-   *       - File Manager
-   *     responses:
-   *       200:
-   *         description: Session keepalive successful.
-   *       400:
-   *         description: Session ID is required or session not found.
-   */
-  app.post("/keepalive", async (req, res) => {
-    const { sessionId } = req.body;
-    const userId = ctx.currentActor();
-
-    if (!sessionId) {
-      return res.status(400).json({ error: "Session ID is required" });
-    }
-    const session = sshSessions[sessionId];
-    if (!session || !session.isConnected) {
-      return res.status(400).json({
-        error: "SSH session not found or not connected",
-        connected: false,
-      });
-    }
-    if (!userId || !verifySessionOwnership(session, userId)) {
-      return res.status(403).json({ error: "Session access denied" });
-    }
-
-    session.lastActive = Date.now();
-    scheduleSessionCleanup(sessionId);
-
-    if (session.sftp && !session.sftpPending) {
-      try {
-        await new Promise<void>((resolve, reject) => {
-          session.sftp!.stat("/", (err) => (err ? reject(err) : resolve()));
-        });
-      } catch {
-        session.sftp = undefined;
-      }
-    }
-
-    res.json({
-      status: "success",
-      connected: true,
-      message: "Session keepalive successful",
-      lastActive: session.lastActive,
-    });
-  });
-
-  registerFileListingRoutes(app, {
-    ctx,
-    sshSessions,
-    activeListRequests,
-    verifySessionOwnership,
-  });
-  registerFileContentRoutes(app, { ctx, sshSessions, verifySessionOwnership });
-  registerFileOperationRoutes(app, {
-    ctx,
-    sshSessions,
-    verifySessionOwnership,
-  });
-  registerFileDownloadRoutes(app, {
-    ctx,
-    sshSessions,
-    scheduleSessionCleanup,
-    verifySessionOwnership,
-  });
-  registerFileActionRoutes(app, {
-    ctx,
-    sshSessions,
-    scheduleSessionCleanup,
-    verifySessionOwnership,
-  });
-  registerBookmarkRoutes(app, ctx, {
-    table,
-    pinnedTable,
-    shortcutsTable,
-    transferRecentTable,
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/extractArchive:
-   *   post:
-   *     summary: Extract archive file
-   *     description: Extracts an archive file (.tar, .tar.gz, .tgz, .zip, .tar.bz2, .tbz2, .tar.xz, .txz) to a specified or default location on the remote host.
-   *     tags:
-   *       - File Manager
-   *     responses:
-   *       200:
-   *         description: Archive extracted successfully.
-   *       400:
-   *         description: Missing required parameters, SSH connection not established, or unsupported archive format.
-   *       500:
-   *         description: Failed to extract archive.
-   */
-  app.post("/extractArchive", async (req, res) => {
-    const { sessionId, archivePath, extractPath } = req.body;
-    const userId = ctx.currentActor();
-
-    if (!sessionId || !archivePath) {
-      return res.status(400).json({ error: "Missing required parameters" });
-    }
-    const session = sshSessions[sessionId];
-    if (!session || !session.isConnected) {
-      return res.status(400).json({ error: "SSH session not connected" });
-    }
-    if (!userId || !verifySessionOwnership(session, userId)) {
-      return res.status(403).json({ error: "Session access denied" });
-    }
-
-    session.lastActive = Date.now();
-    scheduleSessionCleanup(sessionId);
-
-    const fileName = archivePath.split("/").pop() || "";
-    const fileExt = fileName.toLowerCase();
-
-    let extractCommand: string;
-    const targetPath =
-      extractPath || archivePath.substring(0, archivePath.lastIndexOf("/"));
-
-    const escapedArchive = archivePath.replace(/'/g, "'\"'\"'");
-    const escapedTarget = targetPath.replace(/'/g, "'\"'\"'");
-    const escapedDecompressed = archivePath
-      .replace(/\.gz$/, "")
-      .replace(/'/g, "'\"'\"'");
-
-    if (fileExt.endsWith(".tar.gz") || fileExt.endsWith(".tgz")) {
-      extractCommand = `tar -xzf '${escapedArchive}' -C '${escapedTarget}'`;
-    } else if (fileExt.endsWith(".tar.bz2") || fileExt.endsWith(".tbz2")) {
-      extractCommand = `tar -xjf '${escapedArchive}' -C '${escapedTarget}'`;
-    } else if (fileExt.endsWith(".tar.xz")) {
-      extractCommand = `tar -xJf '${escapedArchive}' -C '${escapedTarget}'`;
-    } else if (fileExt.endsWith(".tar")) {
-      extractCommand = `tar -xf '${escapedArchive}' -C '${escapedTarget}'`;
-    } else if (fileExt.endsWith(".zip")) {
-      extractCommand = `unzip -o '${escapedArchive}' -d '${escapedTarget}'`;
-    } else if (fileExt.endsWith(".gz") && !fileExt.endsWith(".tar.gz")) {
-      extractCommand = `gunzip -c '${escapedArchive}' > '${escapedDecompressed}'`;
-    } else if (fileExt.endsWith(".bz2") && !fileExt.endsWith(".tar.bz2")) {
-      extractCommand = `bunzip2 -k '${escapedArchive}'`;
-    } else if (fileExt.endsWith(".xz") && !fileExt.endsWith(".tar.xz")) {
-      extractCommand = `unxz -k '${escapedArchive}'`;
-    } else if (fileExt.endsWith(".7z")) {
-      extractCommand = `7z x '${escapedArchive}' -o'${escapedTarget}'`;
-    } else if (fileExt.endsWith(".rar")) {
-      extractCommand = `unrar x '${escapedArchive}' '${escapedTarget}/'`;
-    } else {
-      return res.status(400).json({ error: "Unsupported archive format" });
-    }
-
-    fileLogger.info("Extracting archive", {
-      operation: "extract_archive",
-      sessionId,
-      archivePath,
-      extractPath: targetPath,
-      command: extractCommand,
-    });
-
-    execChannel(session, extractCommand, (err, stream) => {
-      if (err) {
-        fileLogger.error("SSH exec error during extract:", err, {
-          operation: "extract_archive",
-          sessionId,
-          archivePath,
-        });
-        return res
-          .status(500)
-          .json({ error: "Failed to execute extract command" });
-      }
-
-      let errorOutput = "";
-      stream.on("data", () => {});
-      stream.stderr.on("data", (data: Buffer) => {
-        errorOutput += data.toString();
-      });
-      stream.on("close", (code: number) => {
-        if (code !== 0) {
-          fileLogger.error("Extract command failed", {
-            operation: "extract_archive",
-            sessionId,
-            archivePath,
-            exitCode: code,
-            error: errorOutput,
-          });
-
-          let friendlyError = errorOutput || "Failed to extract archive";
-          if (
-            errorOutput.includes("command not found") ||
-            errorOutput.includes("not found")
-          ) {
-            let missingCmd = "";
-            let installHint = "";
-            if (fileExt.endsWith(".zip")) {
-              missingCmd = "unzip";
-              installHint =
-                "apt install unzip / yum install unzip / brew install unzip";
-            } else if (
-              fileExt.endsWith(".tar.gz") ||
-              fileExt.endsWith(".tgz") ||
-              fileExt.endsWith(".tar.bz2") ||
-              fileExt.endsWith(".tbz2") ||
-              fileExt.endsWith(".tar.xz") ||
-              fileExt.endsWith(".tar")
-            ) {
-              missingCmd = "tar";
-              installHint = "Usually pre-installed on Linux/Unix systems";
-            } else if (fileExt.endsWith(".gz")) {
-              missingCmd = "gunzip";
-              installHint =
-                "apt install gzip / yum install gzip / Usually pre-installed";
-            } else if (fileExt.endsWith(".bz2")) {
-              missingCmd = "bunzip2";
-              installHint =
-                "apt install bzip2 / yum install bzip2 / brew install bzip2";
-            } else if (fileExt.endsWith(".xz")) {
-              missingCmd = "unxz";
-              installHint =
-                "apt install xz-utils / yum install xz / brew install xz";
-            } else if (fileExt.endsWith(".7z")) {
-              missingCmd = "7z";
-              installHint =
-                "apt install p7zip-full / yum install p7zip / brew install p7zip";
-            } else if (fileExt.endsWith(".rar")) {
-              missingCmd = "unrar";
-              installHint =
-                "apt install unrar / yum install unrar / brew install unrar";
-            }
-            if (missingCmd) {
-              friendlyError = `Command '${missingCmd}' not found on remote server. Please install it first: ${installHint}`;
-            }
-          }
-          return res.status(500).json({ error: friendlyError });
-        }
-
-        fileLogger.success("Archive extracted successfully", {
-          operation: "extract_archive",
-          sessionId,
-          archivePath,
-          extractPath: targetPath,
-        });
-        res.json({
-          success: true,
-          message: "Archive extracted successfully",
-          extractPath: targetPath,
-        });
-      });
-
-      stream.on("error", (streamErr) => {
-        fileLogger.error("SSH extractArchive stream error:", streamErr, {
-          operation: "extract_archive",
-          sessionId,
-          archivePath,
-        });
-        if (!res.headersSent) {
-          res
-            .status(500)
-            .json({ error: "Stream error while extracting archive" });
-        }
-      });
-    });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/compressFiles:
-   *   post:
-   *     summary: Compress files
-   *     description: Compresses files and/or directories on the remote host.
-   *     tags:
-   *       - File Manager
-   *     responses:
-   *       200:
-   *         description: Files compressed successfully.
-   *       400:
-   *         description: Missing required parameters or unsupported compression format.
-   *       500:
-   *         description: Failed to compress files.
-   */
-  app.post("/compressFiles", async (req, res) => {
-    const { sessionId, paths, archiveName, format } = req.body;
-    const userId = ctx.currentActor();
-
-    if (
-      !sessionId ||
-      !paths ||
-      !Array.isArray(paths) ||
-      paths.length === 0 ||
-      !archiveName
-    ) {
-      return res.status(400).json({ error: "Missing required parameters" });
-    }
-    const session = sshSessions[sessionId];
-    if (!session || !session.isConnected) {
-      return res.status(400).json({ error: "SSH session not connected" });
-    }
-    if (!userId || !verifySessionOwnership(session, userId)) {
-      return res.status(403).json({ error: "Session access denied" });
-    }
-
-    session.lastActive = Date.now();
-    scheduleSessionCleanup(sessionId);
-
-    const compressionFormat = format || "zip";
-    let compressCommand: string;
-
-    const firstPath = paths[0];
-    const workingDir =
-      firstPath.substring(0, firstPath.lastIndexOf("/")) || "/";
-    const escapeShell = (s: string) => s.replace(/'/g, "'\"'\"'");
-    const fileNames = paths
-      .map((p) => {
-        const name = p.split("/").pop();
-        return `'./${escapeShell(name || "")}'`;
-      })
-      .join(" ");
-
-    let archivePath = "";
-    if (archiveName.includes("/")) {
-      archivePath = archiveName;
-    } else {
-      archivePath = workingDir.endsWith("/")
-        ? `${workingDir}${archiveName}`
-        : `${workingDir}/${archiveName}`;
-    }
-
-    const escapedDir = escapeShell(workingDir);
-    const escapedArchive = escapeShell(archivePath);
-
-    if (compressionFormat === "zip") {
-      compressCommand = `cd '${escapedDir}' && zip -r '${escapedArchive}' -- ${fileNames}`;
-    } else if (compressionFormat === "tar.gz" || compressionFormat === "tgz") {
-      compressCommand = `cd '${escapedDir}' && tar -czf '${escapedArchive}' -- ${fileNames}`;
-    } else if (
-      compressionFormat === "tar.bz2" ||
-      compressionFormat === "tbz2"
-    ) {
-      compressCommand = `cd '${escapedDir}' && tar -cjf '${escapedArchive}' -- ${fileNames}`;
-    } else if (compressionFormat === "tar.xz") {
-      compressCommand = `cd '${escapedDir}' && tar -cJf '${escapedArchive}' -- ${fileNames}`;
-    } else if (compressionFormat === "tar") {
-      compressCommand = `cd '${escapedDir}' && tar -cf '${escapedArchive}' -- ${fileNames}`;
-    } else if (compressionFormat === "7z") {
-      compressCommand = `cd '${escapedDir}' && 7z a '${escapedArchive}' -- ${fileNames}`;
-    } else {
-      return res.status(400).json({ error: "Unsupported compression format" });
-    }
-
-    fileLogger.info("Compressing files", {
-      operation: "compress_files",
-      sessionId,
-      paths,
-      archivePath,
-      format: compressionFormat,
-      command: compressCommand,
-    });
-
-    execChannel(session, compressCommand, (err, stream) => {
-      if (err) {
-        fileLogger.error("SSH exec error during compress:", err, {
-          operation: "compress_files",
-          sessionId,
-          paths,
-        });
-        return res
-          .status(500)
-          .json({ error: "Failed to execute compress command" });
-      }
-
-      let errorOutput = "";
-      stream.on("data", () => {});
-      stream.stderr.on("data", (data: Buffer) => {
-        errorOutput += data.toString();
-      });
-      stream.on("close", (code: number) => {
-        if (code !== 0) {
-          fileLogger.error("Compress command failed", {
-            operation: "compress_files",
-            sessionId,
-            paths,
-            archivePath,
-            exitCode: code,
-            error: errorOutput,
-          });
-
-          let friendlyError = errorOutput || "Failed to compress files";
-          if (
-            errorOutput.includes("command not found") ||
-            errorOutput.includes("not found")
-          ) {
-            const commandMap: Record<string, { cmd: string; install: string }> =
-              {
-                zip: {
-                  cmd: "zip",
-                  install:
-                    "apt install zip / yum install zip / brew install zip",
-                },
-                "tar.gz": {
-                  cmd: "tar",
-                  install: "Usually pre-installed on Linux/Unix systems",
-                },
-                "tar.bz2": {
-                  cmd: "tar",
-                  install: "Usually pre-installed on Linux/Unix systems",
-                },
-                "tar.xz": {
-                  cmd: "tar",
-                  install: "Usually pre-installed on Linux/Unix systems",
-                },
-                tar: {
-                  cmd: "tar",
-                  install: "Usually pre-installed on Linux/Unix systems",
-                },
-                "7z": {
-                  cmd: "7z",
-                  install:
-                    "apt install p7zip-full / yum install p7zip / brew install p7zip",
-                },
-              };
-            const info = commandMap[compressionFormat];
-            if (info) {
-              friendlyError = `Command '${info.cmd}' not found on remote server. Please install it first: ${info.install}`;
-            }
-          }
-          return res.status(500).json({ error: friendlyError });
-        }
-
-        fileLogger.success("Files compressed successfully", {
-          operation: "compress_files",
-          sessionId,
-          paths,
-          archivePath,
-          format: compressionFormat,
-        });
-        res.json({
-          success: true,
-          message: "Files compressed successfully",
-          archivePath,
-        });
-      });
-
-      stream.on("error", (streamErr) => {
-        fileLogger.error("SSH compressFiles stream error:", streamErr, {
-          operation: "compress_files",
-          sessionId,
-          paths,
-        });
-        if (!res.headersSent) {
-          res
-            .status(500)
-            .json({ error: "Stream error while compressing files" });
-        }
-      });
-    });
-  });
-
-  const hostTransferDeps: HostTransferDeps = {
-    sshSessions,
-    getSessionSftp,
-    execChannel,
-    verifySessionOwnership,
-    openDedicatedTransferSession,
-    closeDedicatedTransferSession,
-  };
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/transferMethodPreview:
-   *   post:
-   *     summary: Preview how a host to host transfer would run
-   *     description: Says whether tar or per-file SFTP would be used, and why, without moving anything.
-   *     tags: [File Manager]
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required: [sourceSessionId, destSessionId, sourcePaths, destPath]
-   *             properties:
-   *               sourceSessionId: { type: string }
-   *               destSessionId: { type: string }
-   *               sourcePaths: { type: array, items: { type: string } }
-   *               destPath: { type: string }
-   *               methodPreference: { type: string, enum: [auto, tar, item_sftp] }
-   *     responses:
-   *       200: { description: The chosen method and the reason. }
-   *       400: { description: Missing parameters. }
-   */
-  app.post("/transferMethodPreview", async (req, res) => {
-    const {
-      sourceSessionId,
-      destSessionId,
-      sourcePaths,
-      destPath,
-      methodPreference,
-    } = req.body;
-    if (
-      !sourceSessionId ||
-      !destSessionId ||
-      !destPath ||
-      !sourcePaths ||
-      !Array.isArray(sourcePaths) ||
-      sourcePaths.length === 0
-    ) {
-      return res.status(400).json({ error: "Missing required parameters" });
-    }
-    try {
-      const userId = ctx.currentActor();
-      const preview = await previewArchiveTransferMethod(hostTransferDeps, {
-        sourceSessionId,
-        destSessionId,
-        sourcePaths,
-        destPath,
-        methodPreference:
-          methodPreference === "tar" || methodPreference === "item_sftp"
-            ? methodPreference
-            : "auto",
-        userId: userId ?? "",
-      });
-      res.json(preview);
-    } catch (err) {
-      fileLogger.error("Failed to preview transfer method", err, {
-        operation: "host_transfer",
-        sourceSessionId,
-        destSessionId,
-        sourcePaths,
-      });
-      res
-        .status(500)
-        .json({ error: getErrorMessage(err, "Failed to preview method") });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/transferToHost:
-   *   post:
-   *     summary: Copy or move files from one host to another
-   *     description: Starts a background transfer between two of the caller's file manager sessions.
-   *     tags: [File Manager]
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required: [sourceSessionId, destSessionId, sourcePaths, destPath]
-   *             properties:
-   *               sourceSessionId: { type: string }
-   *               destSessionId: { type: string }
-   *               sourcePaths: { type: array, items: { type: string } }
-   *               destPath: { type: string }
-   *               methodPreference: { type: string, enum: [auto, tar, item_sftp] }
-   *               move: { type: boolean, description: Delete the source after a successful copy. }
-   *               parallelSegmentCount: { type: integer }
-   *     responses:
-   *       200: { description: The new transfer id. }
-   *       400: { description: Missing parameters or a session is not connected. }
-   *       403: { description: A session belongs to someone else. }
-   *       500: { description: The transfer could not start. }
-   */
-  app.post("/transferToHost", async (req, res) => {
-    const {
-      sourceSessionId,
-      sourcePaths,
-      destSessionId,
-      destPath,
-      move,
-      methodPreference,
-      parallelSegmentCount: parallelSegmentCountRaw,
-    } = req.body;
-    const userId = ctx.currentActor();
-
-    if (
-      !sourceSessionId ||
-      !destSessionId ||
-      !destPath ||
-      !sourcePaths ||
-      !Array.isArray(sourcePaths) ||
-      sourcePaths.length === 0
-    ) {
-      return res.status(400).json({ error: "Missing required parameters" });
-    }
-
-    const sourceSession = sshSessions[sourceSessionId];
-    const destSession = sshSessions[destSessionId];
-    if (!sourceSession?.isConnected || !destSession?.isConnected) {
-      return res.status(400).json({ error: "SSH session not connected" });
-    }
-    if (
-      !userId ||
-      !verifySessionOwnership(sourceSession, userId) ||
-      !verifySessionOwnership(destSession, userId)
-    ) {
-      return res.status(403).json({ error: "Session access denied" });
-    }
-
-    sourceSession.lastActive = Date.now();
-    destSession.lastActive = Date.now();
-    scheduleSessionCleanup(sourceSessionId);
-    scheduleSessionCleanup(destSessionId);
-
-    try {
-      const rawParallel = Number(parallelSegmentCountRaw);
-      const parallelSegmentCount = Number.isFinite(rawParallel)
-        ? Math.max(1, Math.min(8, Math.floor(rawParallel)))
-        : undefined;
-
-      const { transferId } = startHostTransfer(hostTransferDeps, {
-        sourceSessionId,
-        sourcePaths,
-        destSessionId,
-        destPath,
-        move: !!move,
-        userId,
-        methodPreference:
-          methodPreference === "tar" || methodPreference === "item_sftp"
-            ? methodPreference
-            : "auto",
-        parallelSegmentCount,
-      });
-
-      res.json({ transferId });
-    } catch (err) {
-      fileLogger.error("Failed to start host transfer", err, {
-        operation: "host_transfer",
-        sourceSessionId,
-        destSessionId,
-        sourcePaths,
-      });
-      res.status(500).json({ error: "Failed to start transfer" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/activeTransfers:
-   *   get:
-   *     summary: List the caller's running host to host transfers
-   *     tags: [File Manager]
-   *     responses:
-   *       200: { description: The active transfers. }
-   *       401: { description: Not signed in. }
-   */
-  app.get("/activeTransfers", async (req, res) => {
-    const userId = ctx.currentActor();
-    if (!userId)
-      return res.status(401).json({ error: "Authentication required" });
-    await probeHungStreamTransfers(hostTransferDeps);
-    res.json({ transfers: listActiveTransfers(userId) });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/transferStatus/{transferId}:
-   *   get:
-   *     summary: Get a transfer's progress
-   *     tags: [File Manager]
-   *     parameters:
-   *       - in: path
-   *         name: transferId
-   *         required: true
-   *         schema: { type: string }
-   *     responses:
-   *       200: { description: The transfer's status and progress. }
-   *       401: { description: Not signed in. }
-   *       404: { description: No such transfer for this user. }
-   */
-  app.get("/transferStatus/:transferId", async (req, res) => {
-    const userId = ctx.currentActor();
-    const transferId = req.params.transferId;
-    if (!userId)
-      return res.status(401).json({ error: "Authentication required" });
-    await probeHungStreamTransfers(hostTransferDeps);
-    const status = getTransferStatus(transferId, userId);
-    if (!status) return res.status(404).json({ error: "Transfer not found" });
-    res.json(status);
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/transferCancel/{transferId}:
-   *   post:
-   *     summary: Cancel a running transfer
-   *     tags: [File Manager]
-   *     parameters:
-   *       - in: path
-   *         name: transferId
-   *         required: true
-   *         schema: { type: string }
-   *     responses:
-   *       200: { description: The transfer was asked to stop. }
-   *       401: { description: Not signed in. }
-   */
-  app.post("/transferCancel/:transferId", (req, res) => {
-    const userId = ctx.currentActor();
-    const transferId = req.params.transferId;
-    const cancelled = userId
-      ? requestTransferCancel(transferId, userId)
-      : false;
-    if (!cancelled)
-      return res
-        .status(404)
-        .json({ error: "Transfer not found or not running" });
-    res.json({ ok: true });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/transferCleanup/{transferId}:
-   *   post:
-   *     summary: Remove the partial files a cancelled transfer left
-   *     tags: [File Manager]
-   *     parameters:
-   *       - in: path
-   *         name: transferId
-   *         required: true
-   *         schema: { type: string }
-   *     responses:
-   *       200: { description: What was removed. }
-   *       401: { description: Not signed in. }
-   *       404: { description: No such transfer for this user. }
-   */
-  app.post("/transferCleanup/:transferId", async (req, res) => {
-    const userId = ctx.currentActor();
-    const transferId = req.params.transferId;
-    if (!userId)
-      return res.status(401).json({ error: "Authentication required" });
-    try {
-      const result = await cleanupCancelledTransfer(
-        hostTransferDeps,
-        transferId,
-        userId,
-      );
-      res.json(result);
-    } catch (err) {
-      const message = getErrorMessage(err, "Failed to clean up transfer");
-      const status = message === "Transfer not found" ? 404 : 400;
-      res.status(status).json({ error: message });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/transferRetry/{transferId}:
-   *   post:
-   *     summary: Retry a failed or cancelled transfer
-   *     tags: [File Manager]
-   *     parameters:
-   *       - in: path
-   *         name: transferId
-   *         required: true
-   *         schema: { type: string }
-   *     responses:
-   *       200: { description: The transfer started again. }
-   *       401: { description: Not signed in. }
-   *       404: { description: No such transfer for this user. }
-   */
-  app.post("/transferRetry/:transferId", (req, res) => {
-    const userId = ctx.currentActor();
-    const transferId = req.params.transferId;
-    if (!userId)
-      return res.status(401).json({ error: "Authentication required" });
-    const retried = retryHostTransfer(hostTransferDeps, transferId, userId);
-    if (!retried)
-      return res
-        .status(404)
-        .json({ error: "Transfer not found or not retryable" });
-    res.json({ ok: true, transferId });
-  });
-
-  ctx.http.router<Router>({ bodyLimit: "1gb" }).use(app);
-
-  const service = createFilesService(ctx, {
-    sshSessions,
-    verifySessionOwnership,
-  });
-  ctx.services.provide("files.sftp", service);
-
-  ctx.log.info("File manager mounted at /plugin-api/file-manager");
-}
-
-export async function deactivate() {
-  // Sessions are closed by the disposable registered in activate; the http
-  // router, db tables and service are all disposed by core.
-}
diff --git a/plugins/file-manager/src/backend/list-routes.ts b/plugins/file-manager/src/backend/list-routes.ts
deleted file mode 100644
index 230affa49..000000000
--- a/plugins/file-manager/src/backend/list-routes.ts
+++ /dev/null
@@ -1,476 +0,0 @@
-import { resolveHomeDirectory } from "./home-directory.js";
-import { getErrorMessage } from "./error-message.js";
-import type { Express } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { execChannel, getSessionSftp, type SSHSession } from "./session.js";
-import {
-  formatMtime,
-  isExecutableFile,
-  modeToPermissions,
-  parseLsDateToTimestamp,
-} from "./utils.js";
-
-type FileListingRoutesDeps = {
-  ctx: PluginContext;
-  sshSessions: Record<string, SSHSession>;
-  activeListRequests: Record<string, boolean>;
-  verifySessionOwnership: (session: SSHSession, userId: string) => boolean;
-};
-
-export function registerFileListingRoutes(
-  app: Express,
-  {
-    ctx,
-    sshSessions,
-    activeListRequests,
-    verifySessionOwnership,
-  }: FileListingRoutesDeps,
-): void {
-  /**
-   * @openapi
-   * /plugin-api/file-manager/listFiles:
-   *   get:
-   *     summary: List files in a directory
-   *     description: Lists the files and directories in a given path on the remote host.
-   *     tags:
-   *       - File Manager
-   *     parameters:
-   *       - in: query
-   *         name: sessionId
-   *         required: true
-   *         schema:
-   *           type: string
-   *       - in: query
-   *         name: path
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: A list of files and directories.
-   *       400:
-   *         description: Session ID is required or SSH connection not established.
-   *       500:
-   *         description: Failed to list files.
-   */
-  app.get("/listFiles", async (req, res) => {
-    const sessionId = req.query.sessionId as string;
-    const sshConn = sshSessions[sessionId];
-    let sshPath = (req.query.path as string) || ".";
-    const userId = ctx.currentActor()!;
-
-    if (!sessionId) {
-      return res.status(400).json({ error: "Session ID is required" });
-    }
-
-    if (!sshConn?.isConnected) {
-      return res.status(400).json({ error: "SSH connection not established" });
-    }
-
-    if (!verifySessionOwnership(sshConn, userId)) {
-      return res.status(403).json({ error: "Session access denied" });
-    }
-
-    if (sshPath === ".") {
-      try {
-        sshPath = await resolveHomeDirectory(sshConn);
-      } catch (error) {
-        return res.status(500).json({
-          error: getErrorMessage(error, "Could not resolve home directory"),
-        });
-      }
-    }
-
-    // Drop concurrent requests for the same session+path — each would open
-    // a new SSH channel and can exceed the server's per-connection channel limit.
-    const listKey = `${sessionId}:${sshPath}`;
-    if (activeListRequests[listKey]) {
-      return res
-        .status(409)
-        .json({ error: "List request already in progress" });
-    }
-    activeListRequests[listKey] = true;
-    res.on("finish", () => {
-      delete activeListRequests[listKey];
-    });
-
-    sshConn.lastActive = Date.now();
-    sshConn.activeOperations++;
-    const trySFTP = () => {
-      try {
-        ctx.log.info(
-          `Opening SFTP channel for listFiles: ${sessionId} (${sshPath})`,
-        );
-        getSessionSftp(sshConn)
-          .then((sftp) => {
-            sftp.readdir(sshPath, (readdirErr, list) => {
-              if (readdirErr) {
-                ctx.log.warn(
-                  `SFTP readdir failed, trying fallback: ${readdirErr.message}`,
-                );
-                tryFallbackMethod();
-                return;
-              }
-
-              const symlinks: Array<{ index: number; path: string }> = [];
-              const files: Array<{
-                name: string;
-                type: string;
-                size: number | undefined;
-                modified: string;
-                modifiedTimestamp: number;
-                permissions: string;
-                owner: string;
-                group: string;
-                linkTarget: string | undefined;
-                path: string;
-                executable: boolean;
-              }> = [];
-
-              for (const entry of list) {
-                if (entry.filename === "." || entry.filename === "..") continue;
-
-                const attrs = entry.attrs;
-                const permissions = modeToPermissions(attrs.mode);
-                const isDirectory = attrs.isDirectory();
-                const isLink = attrs.isSymbolicLink();
-
-                const fileEntry = {
-                  name: entry.filename,
-                  type: isDirectory ? "directory" : isLink ? "link" : "file",
-                  size: isDirectory ? undefined : attrs.size,
-                  modified: formatMtime(attrs.mtime),
-                  modifiedTimestamp: attrs.mtime,
-                  permissions,
-                  owner: String(attrs.uid),
-                  group: String(attrs.gid),
-                  linkTarget: undefined as string | undefined,
-                  path: `${sshPath.endsWith("/") ? sshPath : sshPath + "/"}${entry.filename}`,
-                  executable:
-                    !isDirectory && !isLink
-                      ? isExecutableFile(permissions, entry.filename)
-                      : false,
-                };
-
-                if (isLink) {
-                  symlinks.push({ index: files.length, path: fileEntry.path });
-                }
-
-                files.push(fileEntry);
-              }
-
-              if (symlinks.length === 0) {
-                sshConn.activeOperations--;
-                return res.json({ files, path: sshPath });
-              }
-
-              let resolved = 0;
-              let responded = false;
-
-              const sendResponse = () => {
-                if (responded) return;
-                responded = true;
-                sshConn.activeOperations--;
-                res.json({ files, path: sshPath });
-              };
-
-              const readlinkTimeout = setTimeout(sendResponse, 5000);
-
-              for (const link of symlinks) {
-                sftp.readlink(link.path, (linkErr, target) => {
-                  resolved++;
-                  if (!linkErr && target) {
-                    files[link.index].linkTarget = target;
-                  }
-                  if (resolved === symlinks.length) {
-                    clearTimeout(readlinkTimeout);
-                    sendResponse();
-                  }
-                });
-              }
-            });
-          })
-          .catch((err: Error) => {
-            ctx.log.warn(
-              `SFTP failed for listFiles, trying fallback: ${err.message}`,
-            );
-            const isChannelFailure =
-              err.message.toLowerCase().includes("channel open failure") ||
-              err.message.toLowerCase().includes("open failed");
-            if (isChannelFailure) {
-              sshConn.isConnected = false;
-              sshConn.sftp = undefined;
-            }
-            tryFallbackMethod();
-          });
-      } catch (sftpErr: unknown) {
-        const errMsg = getErrorMessage(sftpErr);
-        ctx.log.warn(`SFTP connection error, trying fallback: ${errMsg}`);
-        tryFallbackMethod();
-      }
-    };
-
-    const tryFallbackMethod = () => {
-      if (!sshConn?.isConnected) {
-        sshConn.activeOperations--;
-        return res
-          .status(503)
-          .json({ error: "SSH session disconnected", disconnected: true });
-      }
-      try {
-        const escapedPath = sshPath.replace(/'/g, "'\"'\"'");
-        execChannel(
-          sshConn,
-          `command ls -la --color=never '${escapedPath}'`,
-          (err, stream) => {
-            if (err) {
-              sshConn.activeOperations--;
-              ctx.log.error("SSH listFiles error:", err);
-              return res.status(500).json({ error: err.message });
-            }
-
-            let data = "";
-            let errorData = "";
-
-            stream.on("data", (chunk: Buffer) => {
-              data += chunk.toString();
-            });
-
-            stream.stderr.on("data", (chunk: Buffer) => {
-              errorData += chunk.toString();
-            });
-
-            stream.on("close", (code) => {
-              if (code !== 0) {
-                const isPermissionDenied =
-                  errorData.toLowerCase().includes("permission denied") ||
-                  errorData.toLowerCase().includes("access denied");
-
-                if (isPermissionDenied) {
-                  if (sshConn.sudoPassword) {
-                    ctx.log.info(
-                      `Permission denied for listFiles, retrying with sudo: ${sshPath}`,
-                    );
-                    tryWithSudo();
-                    return;
-                  }
-
-                  sshConn.activeOperations--;
-                  ctx.log.warn(
-                    `Permission denied for listFiles, sudo required: ${sshPath}`,
-                  );
-                  return res.status(403).json({
-                    error: `Permission denied: Cannot access ${sshPath}`,
-                    needsSudo: true,
-                    path: sshPath,
-                  });
-                }
-
-                sshConn.activeOperations--;
-                ctx.log.error(
-                  `SSH listFiles command failed with code ${code}: ${errorData.replace(/\n/g, " ").trim()}`,
-                );
-                return res
-                  .status(500)
-                  .json({ error: `Command failed: ${errorData}` });
-              }
-              sshConn.activeOperations--;
-
-              const lines = data.split("\n").filter((line) => line.trim());
-              const files = [];
-
-              for (let i = 1; i < lines.length; i++) {
-                const line = lines[i];
-                const parts = line.split(/\s+/);
-                if (parts.length >= 9) {
-                  const permissions = parts[0];
-                  const owner = parts[2];
-                  const group = parts[3];
-                  const size = parseInt(parts[4], 10);
-
-                  let dateStr = "";
-                  const nameStartIndex = 8;
-
-                  if (parts[5] && parts[6] && parts[7]) {
-                    dateStr = `${parts[5]} ${parts[6]} ${parts[7]}`;
-                  }
-
-                  const name = parts.slice(nameStartIndex).join(" ");
-                  const isDirectory = permissions.startsWith("d");
-                  const isLink = permissions.startsWith("l");
-
-                  if (name === "." || name === "..") continue;
-
-                  let actualName = name;
-                  let linkTarget = undefined;
-                  if (isLink && name.includes(" -> ")) {
-                    const linkParts = name.split(" -> ");
-                    actualName = linkParts[0];
-                    linkTarget = linkParts[1];
-                  }
-
-                  files.push({
-                    name: actualName,
-                    type: isDirectory ? "directory" : isLink ? "link" : "file",
-                    size: isDirectory ? undefined : size,
-                    modified: dateStr,
-                    modifiedTimestamp: parseLsDateToTimestamp(dateStr),
-                    permissions,
-                    owner,
-                    group,
-                    linkTarget,
-                    path: `${sshPath.endsWith("/") ? sshPath : sshPath + "/"}${actualName}`,
-                    executable:
-                      !isDirectory && !isLink
-                        ? isExecutableFile(permissions, actualName)
-                        : false,
-                  });
-                }
-              }
-
-              res.json({ files, path: sshPath });
-            });
-          },
-        );
-      } catch (execErr: unknown) {
-        sshConn.activeOperations--;
-        const errMsg = getErrorMessage(execErr);
-        ctx.log.error(`Fallback listFiles exec failed: ${errMsg}`);
-        if (!res.headersSent) {
-          return res.status(500).json({ error: errMsg });
-        }
-      }
-    };
-
-    const tryWithSudo = () => {
-      try {
-        const escapedPath = sshPath.replace(/'/g, "'\"'\"'");
-        const escapedPassword = sshConn.sudoPassword!.replace(/'/g, "'\"'\"'");
-        const sudoCommand = `echo '${escapedPassword}' | sudo -S /bin/ls -la --color=never '${escapedPath}' 2>&1`;
-
-        execChannel(sshConn, sudoCommand, (err, stream) => {
-          if (err) {
-            sshConn.activeOperations--;
-            ctx.log.error("SSH sudo listFiles error:", err);
-            return res.status(500).json({ error: err.message });
-          }
-
-          let data = "";
-          let errorData = "";
-
-          stream.on("data", (chunk: Buffer) => {
-            data += chunk.toString();
-          });
-
-          stream.stderr.on("data", (chunk: Buffer) => {
-            errorData += chunk.toString();
-          });
-
-          stream.on("close", (code) => {
-            sshConn.activeOperations--;
-
-            data = data.replace(/\[sudo\] password for .+?:\s*/g, "");
-
-            if (
-              data.toLowerCase().includes("sorry, try again") ||
-              data.toLowerCase().includes("incorrect password") ||
-              errorData.toLowerCase().includes("sorry, try again")
-            ) {
-              sshConn.sudoPassword = undefined;
-              return res.status(403).json({
-                error: "Sudo authentication failed. Please try again.",
-                needsSudo: true,
-                sudoFailed: true,
-                path: sshPath,
-              });
-            }
-
-            if (code !== 0 && !data.trim()) {
-              ctx.log.error(
-                `SSH sudo listFiles failed with code ${code}: ${errorData.replace(/\n/g, " ").trim()}`,
-              );
-              return res
-                .status(500)
-                .json({ error: `Sudo command failed: ${errorData || data}` });
-            }
-
-            const lines = data.split("\n").filter((line) => line.trim());
-            const files: Array<{
-              name: string;
-              type: string;
-              size: number | undefined;
-              modified: string;
-              modifiedTimestamp: number;
-              permissions: string;
-              owner: string;
-              group: string;
-              linkTarget: string | undefined;
-              path: string;
-              executable: boolean;
-            }> = [];
-
-            for (let i = 1; i < lines.length; i++) {
-              const line = lines[i];
-              const parts = line.split(/\s+/);
-              if (parts.length >= 9) {
-                const permissions = parts[0];
-                const owner = parts[2];
-                const group = parts[3];
-                const size = parseInt(parts[4], 10);
-
-                let dateStr = "";
-                const nameStartIndex = 8;
-
-                if (parts[5] && parts[6] && parts[7]) {
-                  dateStr = `${parts[5]} ${parts[6]} ${parts[7]}`;
-                }
-
-                const name = parts.slice(nameStartIndex).join(" ");
-                const isDirectory = permissions.startsWith("d");
-                const isLink = permissions.startsWith("l");
-
-                if (name === "." || name === "..") continue;
-
-                let actualName = name;
-                let linkTarget = undefined;
-                if (isLink && name.includes(" -> ")) {
-                  const linkParts = name.split(" -> ");
-                  actualName = linkParts[0];
-                  linkTarget = linkParts[1];
-                }
-
-                files.push({
-                  name: actualName,
-                  type: isDirectory ? "directory" : isLink ? "link" : "file",
-                  size: isDirectory ? undefined : size,
-                  modified: dateStr,
-                  modifiedTimestamp: parseLsDateToTimestamp(dateStr),
-                  permissions,
-                  owner,
-                  group,
-                  linkTarget,
-                  path: `${sshPath.endsWith("/") ? sshPath : sshPath + "/"}${actualName}`,
-                  executable:
-                    !isDirectory && !isLink
-                      ? isExecutableFile(permissions, actualName)
-                      : false,
-                });
-              }
-            }
-
-            res.json({ files, path: sshPath });
-          });
-        });
-      } catch (execErr: unknown) {
-        sshConn.activeOperations--;
-        const errMsg = getErrorMessage(execErr);
-        ctx.log.error(`Sudo listFiles exec failed: ${errMsg}`);
-        if (!res.headersSent) {
-          return res.status(500).json({ error: errMsg });
-        }
-      }
-    };
-
-    trySFTP();
-  });
-}
diff --git a/plugins/file-manager/src/backend/operation-commands.ts b/plugins/file-manager/src/backend/operation-commands.ts
deleted file mode 100644
index 0eea91c95..000000000
--- a/plugins/file-manager/src/backend/operation-commands.ts
+++ /dev/null
@@ -1,39 +0,0 @@
-import { isWindowsSftpPath, sftpPathToLocalPath } from "./transfer-paths.js";
-
-export interface DeleteCommand {
-  command: string;
-  commandWithSuccess: string;
-}
-
-function quotePosixPath(path: string): string {
-  return `'${path.replace(/'/g, "'\"'\"'")}'`;
-}
-
-function quotePowerShellLiteral(value: string): string {
-  return `'${value.replace(/'/g, "''")}'`;
-}
-
-export function buildDeleteCommand(
-  itemPath: string,
-  isDirectory: boolean,
-): DeleteCommand {
-  if (isWindowsSftpPath(itemPath)) {
-    const path = quotePowerShellLiteral(sftpPathToLocalPath(itemPath));
-    const command = isDirectory
-      ? `Remove-Item -LiteralPath ${path} -Recurse -Force -ErrorAction Stop`
-      : `Remove-Item -LiteralPath ${path} -Force -ErrorAction Stop`;
-
-    return {
-      command,
-      commandWithSuccess: `${command}; if ($?) { Write-Output "SUCCESS" }`,
-    };
-  }
-
-  const path = quotePosixPath(itemPath);
-  const command = isDirectory ? `rm -rf ${path}` : `rm -f ${path}`;
-
-  return {
-    command,
-    commandWithSuccess: `${command} && echo "SUCCESS"`,
-  };
-}
diff --git a/plugins/file-manager/src/backend/operation-routes.ts b/plugins/file-manager/src/backend/operation-routes.ts
deleted file mode 100644
index b2a3edc38..000000000
--- a/plugins/file-manager/src/backend/operation-routes.ts
+++ /dev/null
@@ -1,965 +0,0 @@
-import type { Express, Request, Response } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { SFTPWrapper } from "ssh2";
-import {
-  execChannel,
-  execWithSudo,
-  getSessionSftp,
-  type SSHSession,
-} from "./session.js";
-import { ensureDirectoryTreeSftp } from "./transfer-sftp-dir.js";
-import { buildDeleteCommand } from "./operation-commands.js";
-import {
-  emptyTrash,
-  listTrash,
-  moveToTrash,
-  permanentlyDeleteTrashItem,
-  restoreTrashItem,
-} from "./trash-service.js";
-
-type FileOperationRoutesDeps = {
-  ctx: PluginContext;
-  sshSessions: Record<string, SSHSession>;
-  verifySessionOwnership: (session: SSHSession, userId: string) => boolean;
-};
-
-const TRASH_RETENTION_DAYS_KEY = "trashRetentionDays";
-
-const TRASH_PURGE_INTERVAL_MS = 60 * 60 * 1000;
-
-export function registerFileOperationRoutes(
-  app: Express,
-  { ctx, sshSessions, verifySessionOwnership }: FileOperationRoutesDeps,
-): void {
-  // Trash retention is an install-wide admin setting, not a per-host check.
-  const canManageRetention = () => ctx.rbac.has("admin.settings.manage");
-  const getTrashRetentionDays = async (): Promise<number> => {
-    try {
-      const value = Number(await ctx.settings.get(TRASH_RETENTION_DAYS_KEY));
-      return Number.isInteger(value) && value >= 1 && value <= 3650 ? value : 7;
-    } catch {
-      return 7;
-    }
-  };
-
-  // Deleting used to purge expired trash first, reading every trash entry
-  // before answering. Do it after the response, at most hourly per session.
-  const lastPurge = new WeakMap<SSHSession, number>();
-  const purgeExpiredTrash = (session: SSHSession, sftp: SFTPWrapper) => {
-    const now = Date.now();
-    if (now - (lastPurge.get(session) ?? 0) < TRASH_PURGE_INTERVAL_MS) return;
-    lastPurge.set(session, now);
-    void getTrashRetentionDays()
-      .then((days) => listTrash(sftp, days))
-      .catch((error) =>
-        ctx.log.warn(
-          `Could not purge expired trash: ${(error as Error).message}`,
-        ),
-      );
-  };
-
-  async function ownedSession(
-    req: Request,
-    res: Response,
-  ): Promise<SSHSession | null> {
-    const sessionId = String(req.body?.sessionId ?? req.query?.sessionId ?? "");
-    const session = sshSessions[sessionId];
-    if (!sessionId || !session?.isConnected) {
-      res.status(400).json({ error: "SSH connection not established" });
-      return null;
-    }
-    if (!verifySessionOwnership(session, ctx.currentActor()!)) {
-      res.status(403).json({ error: "Session access denied" });
-      return null;
-    }
-    session.lastActive = Date.now();
-    return session;
-  }
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/trash:
-   *   get:
-   *     summary: List items in the host's Termix trash
-   *     tags: [File Manager]
-   *     parameters:
-   *       - in: query
-   *         name: sessionId
-   *         required: true
-   *         schema: { type: string }
-   *     responses:
-   *       200: { description: Trashed items, the retention in days and whether the caller may change it. }
-   *       400: { description: The session is not connected. }
-   *       403: { description: The session belongs to someone else. }
-   */
-  app.get("/trash", async (req, res) => {
-    const session = await ownedSession(req, res);
-    if (!session) return;
-    try {
-      const retentionDays = await getTrashRetentionDays();
-      res.json({
-        items: await listTrash(await getSessionSftp(session), retentionDays),
-        retentionDays,
-        canManageRetention: await canManageRetention(),
-      });
-    } catch (error) {
-      ctx.log.error("Failed to list trash", error as Error);
-      res.status(500).json({ error: (error as Error).message });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/trash/{id}/restore:
-   *   post:
-   *     summary: Restore a trashed item to where it was
-   *     tags: [File Manager]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: string }
-   *       - in: query
-   *         name: sessionId
-   *         required: true
-   *         schema: { type: string }
-   *     responses:
-   *       200: { description: The restored path. }
-   *       409: { description: Something already exists at the original path. }
-   */
-  app.post("/trash/:id/restore", async (req, res) => {
-    const session = await ownedSession(req, res);
-    if (!session) return;
-    try {
-      res.json({
-        item: await restoreTrashItem(
-          await getSessionSftp(session),
-          req.params.id,
-        ),
-      });
-    } catch (error) {
-      const message = (error as Error).message;
-      res
-        .status(message.includes("already exists") ? 409 : 500)
-        .json({ error: message });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/trash/{id}:
-   *   delete:
-   *     summary: Delete a trashed item for good
-   *     tags: [File Manager]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: string }
-   *       - in: query
-   *         name: sessionId
-   *         required: true
-   *         schema: { type: string }
-   *     responses:
-   *       200: { description: Deleted. }
-   *       500: { description: The delete failed on the host. }
-   */
-  app.delete("/trash/:id", async (req, res) => {
-    const session = await ownedSession(req, res);
-    if (!session) return;
-    try {
-      await permanentlyDeleteTrashItem(
-        await getSessionSftp(session),
-        req.params.id,
-      );
-      res.json({ success: true });
-    } catch (error) {
-      res.status(500).json({ error: (error as Error).message });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/trash:
-   *   delete:
-   *     summary: Empty the host's Termix trash
-   *     tags: [File Manager]
-   *     parameters:
-   *       - in: query
-   *         name: sessionId
-   *         required: true
-   *         schema: { type: string }
-   *     responses:
-   *       200: { description: How many items were deleted. }
-   *       500: { description: The delete failed on the host. }
-   */
-  app.delete("/trash", async (req, res) => {
-    const session = await ownedSession(req, res);
-    if (!session) return;
-    try {
-      res.json({ deleted: await emptyTrash(await getSessionSftp(session)) });
-    } catch (error) {
-      res.status(500).json({ error: (error as Error).message });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/trash-retention:
-   *   put:
-   *     summary: Set how long trashed items are kept (admin only)
-   *     tags: [File Manager]
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required: [retentionDays]
-   *             properties:
-   *               retentionDays: { type: integer, minimum: 1, maximum: 3650 }
-   *     responses:
-   *       200: { description: The new retention. }
-   *       400: { description: Out of range. }
-   *       403: { description: Admin access required. }
-   */
-  app.put("/trash-retention", async (req, res) => {
-    if (!(await canManageRetention())) {
-      return res.status(403).json({ error: "Admin access required" });
-    }
-    const retentionDays = Number(req.body?.retentionDays);
-    if (
-      !Number.isInteger(retentionDays) ||
-      retentionDays < 1 ||
-      retentionDays > 3650
-    ) {
-      return res
-        .status(400)
-        .json({ error: "Retention must be between 1 and 3650 days" });
-    }
-    await ctx.settings.set(TRASH_RETENTION_DAYS_KEY, String(retentionDays));
-    return res.json({ retentionDays });
-  });
-  /**
-   * @openapi
-   * /plugin-api/file-manager/createFile:
-   *   post:
-   *     summary: Create a file
-   *     description: Creates an empty file on the remote host.
-   *     tags:
-   *       - File Manager
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               sessionId:
-   *                 type: string
-   *               path:
-   *                 type: string
-   *               fileName:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: File created successfully.
-   *       400:
-   *         description: Missing required parameters or SSH connection not established.
-   *       403:
-   *         description: Permission denied.
-   *       500:
-   *         description: Failed to create file.
-   */
-  app.post("/createFile", async (req, res) => {
-    const { sessionId, path: filePath, fileName } = req.body;
-    const sshConn = sshSessions[sessionId];
-    const userId = ctx.currentActor()!;
-
-    if (!sessionId) {
-      return res.status(400).json({ error: "Session ID is required" });
-    }
-
-    if (!sshConn?.isConnected) {
-      return res.status(400).json({ error: "SSH connection not established" });
-    }
-
-    if (!verifySessionOwnership(sshConn, userId)) {
-      return res.status(403).json({ error: "Session access denied" });
-    }
-
-    if (!filePath || !fileName) {
-      return res.status(400).json({ error: "File path and name are required" });
-    }
-
-    sshConn.lastActive = Date.now();
-
-    const fullPath = filePath.endsWith("/")
-      ? filePath + fileName
-      : filePath + "/" + fileName;
-    const escapedPath = fullPath.replace(/'/g, "'\"'\"'");
-
-    const createCommand = `touch '${escapedPath}' && echo "SUCCESS" && exit 0`;
-
-    execChannel(sshConn, createCommand, (err, stream) => {
-      if (err) {
-        ctx.log.error("SSH createFile error:", err);
-        if (!res.headersSent) {
-          return res.status(500).json({ error: err.message });
-        }
-        return;
-      }
-
-      let outputData = "";
-      let errorData = "";
-
-      stream.on("data", (chunk: Buffer) => {
-        outputData += chunk.toString();
-      });
-
-      stream.stderr.on("data", (chunk: Buffer) => {
-        errorData += chunk.toString();
-
-        if (chunk.toString().includes("Permission denied")) {
-          ctx.log.error(`Permission denied creating file: ${fullPath}`);
-          if (!res.headersSent) {
-            return res.status(403).json({
-              error: `Permission denied: Cannot create file ${fullPath}. Check directory permissions.`,
-            });
-          }
-          return;
-        }
-      });
-
-      stream.on("close", (code) => {
-        if (outputData.includes("SUCCESS")) {
-          if (!res.headersSent) {
-            res.json({
-              message: "File created successfully",
-              path: fullPath,
-              toast: { type: "success", message: `File created: ${fullPath}` },
-            });
-          }
-          return;
-        }
-
-        if (code !== 0) {
-          ctx.log.error(
-            `SSH createFile command failed with code ${code}: ${errorData.replace(/\n/g, " ").trim()}`,
-          );
-          if (!res.headersSent) {
-            return res.status(500).json({
-              error: `Command failed: ${errorData}`,
-              toast: {
-                type: "error",
-                message: `File creation failed: ${errorData}`,
-              },
-            });
-          }
-          return;
-        }
-
-        if (!res.headersSent) {
-          res.json({
-            message: "File created successfully",
-            path: fullPath,
-            toast: { type: "success", message: `File created: ${fullPath}` },
-          });
-        }
-      });
-
-      stream.on("error", (streamErr) => {
-        ctx.log.error("SSH createFile stream error:", streamErr);
-        if (!res.headersSent) {
-          res.status(500).json({ error: `Stream error: ${streamErr.message}` });
-        }
-      });
-    });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/createFolder:
-   *   post:
-   *     summary: Create a folder
-   *     description: Creates a new folder on the remote host.
-   *     tags:
-   *       - File Manager
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               sessionId:
-   *                 type: string
-   *               path:
-   *                 type: string
-   *               folderName:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Folder created successfully.
-   *       400:
-   *         description: Missing required parameters or SSH connection not established.
-   *       403:
-   *         description: Permission denied.
-   *       500:
-   *         description: Failed to create folder.
-   */
-  app.post("/createFolder", async (req, res) => {
-    const { sessionId, path: folderPath, folderName } = req.body;
-    const sshConn = sshSessions[sessionId];
-    const userId = ctx.currentActor()!;
-
-    if (!sessionId) {
-      return res.status(400).json({ error: "Session ID is required" });
-    }
-
-    if (!sshConn?.isConnected) {
-      return res.status(400).json({ error: "SSH connection not established" });
-    }
-
-    if (!verifySessionOwnership(sshConn, userId)) {
-      return res.status(403).json({ error: "Session access denied" });
-    }
-
-    if (!folderPath || !folderName) {
-      return res
-        .status(400)
-        .json({ error: "Folder path and name are required" });
-    }
-
-    sshConn.lastActive = Date.now();
-
-    const fullPath = folderPath.endsWith("/")
-      ? folderPath + folderName
-      : folderPath + "/" + folderName;
-    ctx.log.info(`Creating directory: ${sessionId} (${fullPath})`);
-    try {
-      await ensureDirectoryTreeSftp(await getSessionSftp(sshConn), fullPath);
-      res.json({
-        message: "Folder created successfully",
-        path: fullPath,
-        toast: { type: "success", message: `Folder created: ${fullPath}` },
-      });
-    } catch (error) {
-      ctx.log.error("SFTP createFolder failed", error as Error);
-      const code = (error as { code?: string | number }).code;
-      res.status(code === 3 || code === "EACCES" ? 403 : 500).json({
-        error: (error as Error).message,
-      });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/deleteItem:
-   *   delete:
-   *     summary: Delete a file or directory
-   *     description: Deletes a file or directory on the remote host.
-   *     tags:
-   *       - File Manager
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               sessionId:
-   *                 type: string
-   *               path:
-   *                 type: string
-   *               isDirectory:
-   *                 type: boolean
-   *     responses:
-   *       200:
-   *         description: Item deleted successfully.
-   *       400:
-   *         description: Missing required parameters or SSH connection not established.
-   *       403:
-   *         description: Permission denied.
-   *       500:
-   *         description: Failed to delete item.
-   */
-  app.delete("/deleteItem", async (req, res) => {
-    const { sessionId, path: itemPath, isDirectory, permanent } = req.body;
-    const sshConn = sshSessions[sessionId];
-    const userId = ctx.currentActor()!;
-
-    if (!sessionId) {
-      return res.status(400).json({ error: "Session ID is required" });
-    }
-
-    if (!sshConn?.isConnected) {
-      return res.status(400).json({ error: "SSH connection not established" });
-    }
-
-    if (!verifySessionOwnership(sshConn, userId)) {
-      return res.status(403).json({ error: "Session access denied" });
-    }
-
-    if (!itemPath) {
-      return res.status(400).json({ error: "Item path is required" });
-    }
-
-    ctx.log.info(
-      `Deleting item: ${sessionId} (${itemPath}, type=${isDirectory ? "directory" : "file"})`,
-    );
-    sshConn.lastActive = Date.now();
-
-    if (!permanent) {
-      try {
-        const sftp = await getSessionSftp(sshConn);
-        const item = await moveToTrash(sftp, itemPath);
-        purgeExpiredTrash(sshConn, sftp);
-        ctx.log.info(
-          `Item moved to trash: ${sessionId} (${itemPath}, trashId=${item.id})`,
-        );
-        return res.json({
-          message: "Item moved to trash",
-          path: itemPath,
-          trashItem: item,
-        });
-      } catch (error) {
-        ctx.log.error(
-          `Failed to move item to trash: ${sessionId} (${itemPath})`,
-          error as Error,
-        );
-        return res.status(409).json({
-          error: (error as Error).message,
-          trashUnavailable: true,
-        });
-      }
-    }
-
-    const { command: deleteCommand, commandWithSuccess } = buildDeleteCommand(
-      itemPath,
-      Boolean(isDirectory),
-    );
-
-    const executeDelete = (useSudo: boolean): Promise<void> => {
-      return new Promise((resolve) => {
-        if (useSudo && sshConn.sudoPassword) {
-          execWithSudo(sshConn, deleteCommand, sshConn.sudoPassword).then(
-            (result) => {
-              if (
-                result.code === 0 ||
-                (!result.stderr.includes("Permission denied") &&
-                  !result.stdout.includes("Permission denied"))
-              ) {
-                res.json({
-                  message: "Item deleted successfully",
-                  path: itemPath,
-                  toast: {
-                    type: "success",
-                    message: `${isDirectory ? "Directory" : "File"} deleted: ${itemPath}`,
-                  },
-                });
-              } else {
-                res.status(500).json({
-                  error: `Delete failed: ${result.stderr || result.stdout}`,
-                });
-              }
-              resolve();
-            },
-          );
-          return;
-        }
-
-        execChannel(sshConn, commandWithSuccess, (err, stream) => {
-          if (err) {
-            ctx.log.error("SSH deleteItem error:", err);
-            res.status(500).json({ error: err.message });
-            resolve();
-            return;
-          }
-
-          let outputData = "";
-          let errorData = "";
-          let permissionDenied = false;
-
-          stream.on("data", (chunk: Buffer) => {
-            outputData += chunk.toString();
-          });
-
-          stream.stderr.on("data", (chunk: Buffer) => {
-            errorData += chunk.toString();
-            if (chunk.toString().includes("Permission denied")) {
-              permissionDenied = true;
-            }
-          });
-
-          stream.on("close", (code) => {
-            if (permissionDenied) {
-              if (sshConn.sudoPassword) {
-                executeDelete(true).then(resolve);
-                return;
-              }
-              ctx.log.error(`Permission denied deleting: ${itemPath}`);
-              res.status(403).json({
-                error: `Permission denied: Cannot delete ${itemPath}.`,
-                needsSudo: true,
-              });
-              resolve();
-              return;
-            }
-
-            if (outputData.includes("SUCCESS")) {
-              ctx.log.info(
-                `Item deleted successfully: ${sessionId} (${itemPath})`,
-              );
-              res.json({
-                message: "Item deleted successfully",
-                path: itemPath,
-                toast: {
-                  type: "success",
-                  message: `${isDirectory ? "Directory" : "File"} deleted: ${itemPath}`,
-                },
-              });
-            } else {
-              const detail =
-                errorData.trim() ||
-                outputData.trim() ||
-                `command exited with code ${code} and produced no output (the remote shell may not support the delete command)`;
-              ctx.log.error(
-                `Delete failed for ${itemPath}: ${detail} (sessionId=${sessionId})`,
-              );
-              res.status(500).json({
-                error: `Delete failed: ${detail}`,
-              });
-            }
-            resolve();
-          });
-
-          stream.on("error", (streamErr) => {
-            ctx.log.error("SSH deleteItem stream error:", streamErr);
-            res
-              .status(500)
-              .json({ error: `Stream error: ${streamErr.message}` });
-            resolve();
-          });
-        });
-      });
-    };
-
-    await executeDelete(false);
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/renameItem:
-   *   put:
-   *     summary: Rename a file or directory
-   *     description: Renames a file or directory on the remote host.
-   *     tags:
-   *       - File Manager
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               sessionId:
-   *                 type: string
-   *               oldPath:
-   *                 type: string
-   *               newName:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Item renamed successfully.
-   *       400:
-   *         description: Missing required parameters or SSH connection not established.
-   *       403:
-   *         description: Permission denied.
-   *       500:
-   *         description: Failed to rename item.
-   */
-  app.put("/renameItem", async (req, res) => {
-    const { sessionId, oldPath, newName } = req.body;
-    const sshConn = sshSessions[sessionId];
-    const userId = ctx.currentActor()!;
-
-    if (!sessionId) {
-      return res.status(400).json({ error: "Session ID is required" });
-    }
-
-    if (!sshConn?.isConnected) {
-      return res.status(400).json({ error: "SSH connection not established" });
-    }
-
-    if (!verifySessionOwnership(sshConn, userId)) {
-      return res.status(403).json({ error: "Session access denied" });
-    }
-
-    if (!oldPath || !newName) {
-      return res
-        .status(400)
-        .json({ error: "Old path and new name are required" });
-    }
-
-    sshConn.lastActive = Date.now();
-
-    const oldDir = oldPath.substring(0, oldPath.lastIndexOf("/") + 1);
-    const newPath = oldDir + newName;
-    ctx.log.info(`Renaming item: ${sessionId} (${oldPath} -> ${newPath})`);
-    const escapedOldPath = oldPath.replace(/'/g, "'\"'\"'");
-    const escapedNewPath = newPath.replace(/'/g, "'\"'\"'");
-
-    const renameCommand = `mv '${escapedOldPath}' '${escapedNewPath}' && echo "SUCCESS" && exit 0`;
-
-    execChannel(sshConn, renameCommand, (err, stream) => {
-      if (err) {
-        ctx.log.error("SSH renameItem error:", err);
-        if (!res.headersSent) {
-          return res.status(500).json({ error: err.message });
-        }
-        return;
-      }
-
-      let outputData = "";
-      let errorData = "";
-
-      stream.on("data", (chunk: Buffer) => {
-        outputData += chunk.toString();
-      });
-
-      stream.stderr.on("data", (chunk: Buffer) => {
-        errorData += chunk.toString();
-
-        if (chunk.toString().includes("Permission denied")) {
-          ctx.log.error(`Permission denied renaming: ${oldPath}`);
-          if (!res.headersSent) {
-            return res.status(403).json({
-              error: `Permission denied: Cannot rename ${oldPath}. Check file permissions.`,
-            });
-          }
-          return;
-        }
-      });
-
-      stream.on("close", (code) => {
-        if (outputData.includes("SUCCESS")) {
-          ctx.log.info(
-            `Item renamed successfully: ${sessionId} (${oldPath} -> ${newPath})`,
-          );
-          if (!res.headersSent) {
-            res.json({
-              message: "Item renamed successfully",
-              oldPath,
-              newPath,
-              toast: {
-                type: "success",
-                message: `Item renamed: ${oldPath} -> ${newPath}`,
-              },
-            });
-          }
-          return;
-        }
-
-        if (code !== 0) {
-          ctx.log.error(
-            `SSH renameItem command failed with code ${code}: ${errorData.replace(/\n/g, " ").trim()}`,
-          );
-          if (!res.headersSent) {
-            return res.status(500).json({
-              error: `Command failed: ${errorData}`,
-              toast: { type: "error", message: `Rename failed: ${errorData}` },
-            });
-          }
-          return;
-        }
-
-        ctx.log.info(
-          `Item renamed successfully: ${sessionId} (${oldPath} -> ${newPath})`,
-        );
-        if (!res.headersSent) {
-          res.json({
-            message: "Item renamed successfully",
-            oldPath,
-            newPath,
-            toast: {
-              type: "success",
-              message: `Item renamed: ${oldPath} -> ${newPath}`,
-            },
-          });
-        }
-      });
-
-      stream.on("error", (streamErr) => {
-        ctx.log.error("SSH renameItem stream error:", streamErr);
-        if (!res.headersSent) {
-          res.status(500).json({ error: `Stream error: ${streamErr.message}` });
-        }
-      });
-    });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/file-manager/moveItem:
-   *   put:
-   *     summary: Move a file or directory
-   *     description: Moves a file or directory on the remote host.
-   *     tags:
-   *       - File Manager
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               sessionId:
-   *                 type: string
-   *               oldPath:
-   *                 type: string
-   *               newPath:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Item moved successfully.
-   *       400:
-   *         description: Missing required parameters or SSH connection not established.
-   *       403:
-   *         description: Permission denied.
-   *       408:
-   *         description: Move operation timed out.
-   *       500:
-   *         description: Failed to move item.
-   */
-  app.put("/moveItem", async (req, res) => {
-    const { sessionId, oldPath, newPath } = req.body;
-    const sshConn = sshSessions[sessionId];
-    const userId = ctx.currentActor()!;
-
-    if (!sessionId) {
-      return res.status(400).json({ error: "Session ID is required" });
-    }
-
-    if (!sshConn?.isConnected) {
-      return res.status(400).json({ error: "SSH connection not established" });
-    }
-
-    if (!verifySessionOwnership(sshConn, userId)) {
-      return res.status(403).json({ error: "Session access denied" });
-    }
-
-    if (!oldPath || !newPath) {
-      return res
-        .status(400)
-        .json({ error: "Old path and new path are required" });
-    }
-
-    sshConn.lastActive = Date.now();
-
-    const escapedOldPath = oldPath.replace(/'/g, "'\"'\"'");
-    const escapedNewPath = newPath.replace(/'/g, "'\"'\"'");
-
-    const moveCommand = `mv '${escapedOldPath}' '${escapedNewPath}' && echo "SUCCESS" && exit 0`;
-
-    const commandTimeout = setTimeout(() => {
-      if (!res.headersSent) {
-        res.status(408).json({
-          error: "Move operation timed out. SSH connection may be unstable.",
-          toast: {
-            type: "error",
-            message:
-              "Move operation timed out. SSH connection may be unstable.",
-          },
-        });
-      }
-    }, 60000);
-
-    execChannel(sshConn, moveCommand, (err, stream) => {
-      if (err) {
-        clearTimeout(commandTimeout);
-        ctx.log.error("SSH moveItem error:", err);
-        if (!res.headersSent) {
-          return res.status(500).json({ error: err.message });
-        }
-        return;
-      }
-
-      let outputData = "";
-      let errorData = "";
-
-      stream.on("data", (chunk: Buffer) => {
-        outputData += chunk.toString();
-      });
-
-      stream.stderr.on("data", (chunk: Buffer) => {
-        errorData += chunk.toString();
-
-        if (chunk.toString().includes("Permission denied")) {
-          ctx.log.error(`Permission denied moving: ${oldPath}`);
-          if (!res.headersSent) {
-            return res.status(403).json({
-              error: `Permission denied: Cannot move ${oldPath}. Check file permissions.`,
-              toast: {
-                type: "error",
-                message: `Permission denied: Cannot move ${oldPath}. Check file permissions.`,
-              },
-            });
-          }
-          return;
-        }
-      });
-
-      stream.on("close", (code) => {
-        clearTimeout(commandTimeout);
-        if (outputData.includes("SUCCESS")) {
-          if (!res.headersSent) {
-            res.json({
-              message: "Item moved successfully",
-              oldPath,
-              newPath,
-              toast: {
-                type: "success",
-                message: `Item moved: ${oldPath} -> ${newPath}`,
-              },
-            });
-          }
-          return;
-        }
-
-        if (code !== 0) {
-          ctx.log.error(
-            `SSH moveItem command failed with code ${code}: ${errorData.replace(/\n/g, " ").trim()}`,
-          );
-          if (!res.headersSent) {
-            return res.status(500).json({
-              error: `Command failed: ${errorData}`,
-              toast: { type: "error", message: `Move failed: ${errorData}` },
-            });
-          }
-          return;
-        }
-
-        if (!res.headersSent) {
-          res.json({
-            message: "Item moved successfully",
-            oldPath,
-            newPath,
-            toast: {
-              type: "success",
-              message: `Item moved: ${oldPath} -> ${newPath}`,
-            },
-          });
-        }
-      });
-
-      stream.on("error", (streamErr) => {
-        clearTimeout(commandTimeout);
-        ctx.log.error("SSH moveItem stream error:", streamErr);
-        if (!res.headersSent) {
-          res.status(500).json({ error: `Stream error: ${streamErr.message}` });
-        }
-      });
-    });
-  });
-}
diff --git a/plugins/file-manager/src/backend/plugin-ctx.ts b/plugins/file-manager/src/backend/plugin-ctx.ts
deleted file mode 100644
index a36386f49..000000000
--- a/plugins/file-manager/src/backend/plugin-ctx.ts
+++ /dev/null
@@ -1,13 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-
-let current: PluginContext | null = null;
-
-/** Set in activate, cleared on deactivate. */
-export function setPluginCtx(ctx: PluginContext | null): void {
-  current = ctx;
-}
-
-export function pluginCtx(): PluginContext {
-  if (!current) throw new Error("The plugin is not active");
-  return current;
-}
diff --git a/plugins/file-manager/src/backend/service.ts b/plugins/file-manager/src/backend/service.ts
deleted file mode 100644
index bc10cd527..000000000
--- a/plugins/file-manager/src/backend/service.ts
+++ /dev/null
@@ -1,147 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import {
-  promisifySftpMkdir,
-  promisifySftpReaddir,
-  promisifySftpStat,
-  promisifySftpUnlink,
-  promisifySftpRmdir,
-} from "./sftp-promisify.js";
-
-const DEFAULT_DIR_MODE = 0o755;
-import type { SSHSession } from "./session.js";
-
-/** What other plugins get from ctx.services.get("files.sftp", {userId}). */
-export interface FilesService {
-  list: (
-    hostId: number,
-    path: string,
-  ) => Promise<
-    Array<{ name: string; type: "file" | "directory" | "link"; size?: number }>
-  >;
-  read: (hostId: number, path: string) => Promise<string>;
-  write: (hostId: number, path: string, content: string) => Promise<void>;
-  stat: (
-    hostId: number,
-    path: string,
-  ) => Promise<{ size: number; isDirectory: boolean; mtime: number }>;
-  delete: (hostId: number, path: string) => Promise<void>;
-  mkdir: (hostId: number, path: string) => Promise<void>;
-}
-
-/**
- * A short-lived SFTP connection for a service call, outside the browse
- * session map: a caller reaches this from any request the acting user makes,
- * not necessarily one that has an open file-manager tab.
- */
-async function withServiceSftp<T>(
-  ctx: PluginContext,
-  hostId: number,
-  fn: (sftp: import("ssh2").SFTPWrapper) => Promise<T>,
-): Promise<T> {
-  return ctx.ssh.withConnection<T, import("ssh2").Client>(
-    hostId,
-    {
-      pool: "file-manager-service",
-      purpose: "file-manager",
-      profile: "session",
-    },
-    (client) =>
-      new Promise<T>((resolve, reject) => {
-        client.sftp(async (err, sftp) => {
-          if (err) return reject(err);
-          try {
-            resolve(await fn(sftp));
-          } catch (error) {
-            reject(error);
-          }
-        });
-      }),
-  );
-}
-
-export function createFilesService(
-  ctx: PluginContext,
-  deps: {
-    sshSessions: Record<string, SSHSession>;
-    verifySessionOwnership: (session: SSHSession, userId: string) => boolean;
-  },
-): FilesService {
-  void deps;
-  return {
-    async list(hostId, path) {
-      return withServiceSftp(ctx, hostId, async (sftp) => {
-        const entries = await promisifySftpReaddir(sftp, path);
-        return entries
-          .filter((e) => e.filename !== "." && e.filename !== "..")
-          .map((e) => ({
-            name: e.filename,
-            type: e.attrs.isDirectory()
-              ? ("directory" as const)
-              : e.attrs.isSymbolicLink()
-                ? ("link" as const)
-                : ("file" as const),
-            size: e.attrs.isDirectory() ? undefined : e.attrs.size,
-          }));
-      });
-    },
-
-    async read(hostId, path) {
-      return withServiceSftp(
-        ctx,
-        hostId,
-        (sftp) =>
-          new Promise<string>((resolve, reject) => {
-            const chunks: Buffer[] = [];
-            const stream = sftp.createReadStream(path);
-            stream.on("data", (chunk: Buffer) => chunks.push(chunk));
-            stream.on("end", () =>
-              resolve(Buffer.concat(chunks).toString("utf8")),
-            );
-            stream.on("error", reject);
-          }),
-      );
-    },
-
-    async write(hostId, path, content) {
-      await withServiceSftp(
-        ctx,
-        hostId,
-        (sftp) =>
-          new Promise<void>((resolve, reject) => {
-            const stream = sftp.createWriteStream(path, { flags: "w" });
-            stream.on("close", () => resolve());
-            stream.on("error", reject);
-            stream.end(content, "utf8");
-          }),
-      );
-    },
-
-    async stat(hostId, path) {
-      return withServiceSftp(ctx, hostId, async (sftp) => {
-        const stats = await promisifySftpStat(sftp, path);
-        return {
-          size: stats.size,
-          isDirectory: stats.isDirectory(),
-          mtime: stats.mtime,
-        };
-      });
-    },
-
-    async delete(hostId, path) {
-      await withServiceSftp(ctx, hostId, async (sftp) => {
-        const stats = await promisifySftpStat(sftp, path);
-        if (stats.isDirectory()) {
-          await promisifySftpRmdir(sftp, path);
-        } else {
-          await promisifySftpUnlink(sftp, path);
-        }
-      });
-    },
-
-    async mkdir(hostId, path) {
-      await withServiceSftp(ctx, hostId, (sftp) =>
-        promisifySftpMkdir(sftp, path, DEFAULT_DIR_MODE),
-      );
-    },
-  };
-}
diff --git a/plugins/file-manager/src/backend/session.ts b/plugins/file-manager/src/backend/session.ts
deleted file mode 100644
index 954c2f470..000000000
--- a/plugins/file-manager/src/backend/session.ts
+++ /dev/null
@@ -1,282 +0,0 @@
-import type { Client as SSHClient } from "ssh2";
-
-// Serializes SSH channel open requests so only one channel negotiation is
-// in-flight at a time per session. Once the channel is established the slot
-// is released immediately so the next open can proceed; the channels
-// themselves remain open concurrently.
-export class ChannelOpenSerializer {
-  private tail: Promise<void> = Promise.resolve();
-
-  run<T>(action: () => Promise<T>): Promise<T> {
-    const next = this.tail.then(
-      () => action(),
-      () => action(),
-    );
-    this.tail = next.then(
-      () => {},
-      () => {},
-    );
-    return next;
-  }
-}
-
-export interface SSHSession {
-  client: SSHClient;
-  isConnected: boolean;
-  lastActive: number;
-  timeout?: NodeJS.Timeout;
-  activeOperations: number;
-  sudoPassword?: string;
-  sftp?: import("ssh2").SFTPWrapper;
-  sftpPending?: Promise<import("ssh2").SFTPWrapper>;
-  channelOpener: ChannelOpenSerializer;
-  poolKey?: string;
-  userId?: string;
-  hostId?: number;
-  ip?: string;
-  port?: number;
-  username?: string;
-  transferDedicated?: boolean;
-  transferId?: string;
-  browseSessionId?: string;
-  scpLegacy?: boolean;
-}
-
-export interface PendingTOTPSession {
-  client: SSHClient;
-  finish: (responses: string[]) => void;
-  config: import("ssh2").ConnectConfig;
-  createdAt: number;
-  sessionId: string;
-  hostId?: number;
-  ip?: string;
-  port?: number;
-  username?: string;
-  userId?: string;
-  prompts?: Array<{ prompt: string; echo: boolean }>;
-  totpPromptIndex?: number;
-  resolvedPassword?: string;
-  totpAttempts: number;
-  isBrowserSignIn?: boolean;
-}
-
-export function execWithSudo(
-  session: SSHSession,
-  command: string,
-  sudoPassword: string,
-): Promise<{ stdout: string; stderr: string; code: number }> {
-  return execWithSudoBuffer(session, command, sudoPassword).then((result) => ({
-    stdout: result.stdout.toString("utf8"),
-    stderr: result.stderr,
-    code: result.code,
-  }));
-}
-
-export function execWithSudoBuffer(
-  session: SSHSession,
-  command: string,
-  sudoPassword: string,
-  maxStdoutBytes?: number,
-): Promise<{
-  stdout: Buffer;
-  stderr: string;
-  code: number;
-  exceededLimit?: boolean;
-}> {
-  return new Promise((resolve) => {
-    const sudoCommand = `sudo -S -p '' ${command} 2>&1`;
-
-    execChannel(session, sudoCommand, (err, stream) => {
-      if (err) {
-        resolve({ stdout: Buffer.alloc(0), stderr: err.message, code: 1 });
-        return;
-      }
-
-      const stdoutChunks: Buffer[] = [];
-      let stdoutBytes = 0;
-      let stderr = "";
-      let settled = false;
-
-      const finish = (
-        code: number,
-        extra: { exceededLimit?: boolean } = {},
-      ) => {
-        if (settled) return;
-        settled = true;
-        resolve({
-          stdout: Buffer.concat(stdoutChunks),
-          stderr,
-          code,
-          ...extra,
-        });
-      };
-
-      stream.on("data", (chunk: Buffer) => {
-        if (settled) return;
-        stdoutBytes += chunk.length;
-        if (maxStdoutBytes !== undefined && stdoutBytes > maxStdoutBytes) {
-          stderr = `Command output exceeds ${maxStdoutBytes} bytes`;
-          finish(1, { exceededLimit: true });
-          stream.close();
-          return;
-        }
-        stdoutChunks.push(chunk);
-      });
-
-      stream.stderr.on("data", (chunk: Buffer) => {
-        stderr += chunk.toString();
-      });
-
-      stream.on("close", (code: number) => {
-        if (settled) return;
-        let stdout = Buffer.concat(stdoutChunks);
-        const sudoPromptMatch = stdout
-          .toString("utf8", 0, Math.min(stdout.length, 256))
-          .match(/^\[sudo\] password for .+?:\s*/);
-        if (sudoPromptMatch) {
-          stdout = stdout.subarray(Buffer.byteLength(sudoPromptMatch[0]));
-        }
-        settled = true;
-        resolve({ stdout, stderr, code: code || 0 });
-      });
-
-      stream.on("error", (streamErr: Error) => {
-        stderr = streamErr.message;
-        finish(1);
-      });
-
-      stream.write(`${sudoPassword}\n`);
-    });
-  });
-}
-
-export function execBuffer(
-  session: SSHSession,
-  command: string,
-  maxStdoutBytes?: number,
-): Promise<{
-  stdout: Buffer;
-  stderr: string;
-  code: number;
-  exceededLimit?: boolean;
-}> {
-  return new Promise((resolve) => {
-    execChannel(session, command, (err, stream) => {
-      if (err) {
-        resolve({ stdout: Buffer.alloc(0), stderr: err.message, code: 1 });
-        return;
-      }
-
-      const stdoutChunks: Buffer[] = [];
-      let stdoutBytes = 0;
-      let stderr = "";
-      let settled = false;
-
-      const finish = (
-        code: number,
-        extra: { exceededLimit?: boolean } = {},
-      ) => {
-        if (settled) return;
-        settled = true;
-        resolve({
-          stdout: Buffer.concat(stdoutChunks),
-          stderr,
-          code,
-          ...extra,
-        });
-      };
-
-      stream.on("data", (chunk: Buffer) => {
-        if (settled) return;
-        stdoutBytes += chunk.length;
-        if (maxStdoutBytes !== undefined && stdoutBytes > maxStdoutBytes) {
-          stderr = `Command output exceeds ${maxStdoutBytes} bytes`;
-          finish(1, { exceededLimit: true });
-          stream.close();
-          return;
-        }
-        stdoutChunks.push(chunk);
-      });
-      stream.stderr.on("data", (chunk: Buffer) => {
-        stderr += chunk.toString();
-      });
-      stream.on("close", (code: number) => finish(code || 0));
-      stream.on("error", (streamErr: Error) => {
-        stderr = stderr || streamErr.message;
-        finish(1);
-      });
-    });
-  });
-}
-
-export function getSessionSftp(
-  session: SSHSession,
-): Promise<import("ssh2").SFTPWrapper> {
-  if (session.sftp) {
-    return Promise.resolve(session.sftp);
-  }
-
-  if (session.sftpPending) {
-    return session.sftpPending;
-  }
-
-  const openOnce = (): Promise<import("ssh2").SFTPWrapper> =>
-    session.channelOpener.run(
-      () =>
-        new Promise<import("ssh2").SFTPWrapper>((resolve, reject) => {
-          session.client.sftp((err, sftp) => {
-            if (err) return reject(err);
-            session.sftp = sftp;
-            sftp.on("error", () => {
-              session.sftp = undefined;
-            });
-            sftp.on("close", () => {
-              session.sftp = undefined;
-            });
-            resolve(sftp);
-          });
-        }),
-    );
-
-  session.sftpPending = openOnce()
-    .catch((err: Error) => {
-      const isChannelFailure =
-        err.message.toLowerCase().includes("channel open failure") ||
-        err.message.toLowerCase().includes("open failed");
-      if (isChannelFailure) {
-        return new Promise<import("ssh2").SFTPWrapper>((resolve, reject) =>
-          setTimeout(() => openOnce().then(resolve, reject), 500),
-        );
-      }
-      return Promise.reject(err);
-    })
-    .finally(() => {
-      session.sftpPending = undefined;
-    });
-
-  return session.sftpPending;
-}
-
-export function execChannel(
-  session: SSHSession,
-  command: string,
-  callback: (
-    err: Error | undefined,
-    stream: import("ssh2").ClientChannel,
-  ) => void,
-): void {
-  session.channelOpener
-    .run(
-      () =>
-        new Promise<import("ssh2").ClientChannel>((resolve, reject) => {
-          session.client.exec(command, (err, stream) => {
-            if (err) return reject(err);
-            resolve(stream);
-          });
-        }),
-    )
-    .then(
-      (stream) => callback(undefined, stream),
-      (err: Error) => callback(err, undefined as never),
-    );
-}
diff --git a/plugins/file-manager/src/backend/sftp-promisify.ts b/plugins/file-manager/src/backend/sftp-promisify.ts
deleted file mode 100644
index 697b6b449..000000000
--- a/plugins/file-manager/src/backend/sftp-promisify.ts
+++ /dev/null
@@ -1,120 +0,0 @@
-type SFTPWrapper = import("ssh2").SFTPWrapper;
-
-export const SFTP_OPEN_READ = 0x00000001;
-export const SFTP_OPEN_WRITE = 0x00000002 | 0x00000008 | 0x00000010;
-export const SFTP_OPEN_WRITE_RESUME = 0x00000001 | 0x00000002 | 0x00000008;
-
-export function promisifySftpStat(
-  sftp: SFTPWrapper,
-  path: string,
-): Promise<import("ssh2").Stats> {
-  return new Promise((resolve, reject) => {
-    sftp.stat(path, (err, stats) => {
-      if (err) reject(err);
-      else resolve(stats);
-    });
-  });
-}
-
-export function promisifySftpUnlink(
-  sftp: SFTPWrapper,
-  path: string,
-): Promise<void> {
-  return new Promise((resolve, reject) => {
-    sftp.unlink(path, (err) => {
-      if (err) reject(err);
-      else resolve();
-    });
-  });
-}
-
-export function promisifySftpRmdir(
-  sftp: SFTPWrapper,
-  path: string,
-): Promise<void> {
-  return new Promise((resolve, reject) => {
-    sftp.rmdir(path, (err) => {
-      if (err) reject(err);
-      else resolve();
-    });
-  });
-}
-
-export function promisifySftpMkdir(
-  sftp: SFTPWrapper,
-  path: string,
-  mode: number,
-): Promise<void> {
-  return new Promise((resolve, reject) => {
-    sftp.mkdir(path, { mode }, (err) => {
-      if (err && (err as NodeJS.ErrnoException).code !== "EEXIST") {
-        reject(err);
-      } else {
-        resolve();
-      }
-    });
-  });
-}
-
-export function promisifySftpChmod(
-  sftp: SFTPWrapper,
-  path: string,
-  mode: number,
-): Promise<void> {
-  return new Promise((resolve, reject) => {
-    sftp.chmod(path, mode, (err) => {
-      if (err) reject(err);
-      else resolve();
-    });
-  });
-}
-
-export function promisifySftpReaddir(
-  sftp: SFTPWrapper,
-  path: string,
-): Promise<Array<{ filename: string; attrs: import("ssh2").Stats }>> {
-  return new Promise((resolve, reject) => {
-    sftp.readdir(path, (err, list) => {
-      if (err) reject(err);
-      else resolve(list);
-    });
-  });
-}
-
-export function promisifySftpOpen(
-  sftp: SFTPWrapper,
-  path: string,
-  flags: number,
-  mode: number,
-): Promise<Buffer> {
-  return new Promise((resolve, reject) => {
-    sftp.open(path, flags, mode, (err, handle) => {
-      if (err) reject(err);
-      else resolve(handle);
-    });
-  });
-}
-
-export function promisifySftpClose(
-  sftp: SFTPWrapper,
-  handle: Buffer,
-): Promise<void> {
-  return new Promise((resolve, reject) => {
-    sftp.close(handle, (err) => {
-      if (err) reject(err);
-      else resolve();
-    });
-  });
-}
-
-export function promisifySftpFstat(
-  sftp: SFTPWrapper,
-  handle: Buffer,
-): Promise<import("ssh2").Stats> {
-  return new Promise((resolve, reject) => {
-    sftp.fstat(handle, (err, stats) => {
-      if (err) reject(err);
-      else resolve(stats);
-    });
-  });
-}
diff --git a/plugins/file-manager/src/backend/ssh.ts b/plugins/file-manager/src/backend/ssh.ts
deleted file mode 100644
index 4111d6bc7..000000000
--- a/plugins/file-manager/src/backend/ssh.ts
+++ /dev/null
@@ -1,79 +0,0 @@
-import type { Client, ConnectConfig } from "ssh2";
-import type {
-  PluginSsh,
-  PluginSshAuthOutcome,
-  PluginSshConnection,
-  PluginSshConnectOptions,
-  PluginSshHost,
-} from "@termix/plugin-sdk/backend";
-
-let current: PluginSsh | null = null;
-
-/** Set in activate, cleared on deactivate. */
-export function setPluginSsh(ssh: PluginSsh | null): void {
-  current = ssh;
-}
-
-export function pluginSsh(): PluginSsh {
-  if (!current) throw new Error("The plugin is not active");
-  return current;
-}
-
-/** withConnection with ssh2's Client type filled in. */
-export function withSshConnection<T>(
-  host: number | PluginSshHost,
-  options: PluginSshConnectOptions & { pool: string },
-  fn: (client: Client) => Promise<T>,
-): Promise<T> {
-  return pluginSsh().withConnection<T, Client>(host, options, fn);
-}
-
-/** connect with ssh2's Client type filled in. */
-export function connectSsh(
-  host: number | PluginSshHost,
-  options?: PluginSshConnectOptions,
-): Promise<PluginSshConnection<Client>> {
-  return pluginSsh().connect<Client>(host, options);
-}
-
-/**
- * Lower-level primitives for the interactive /connect route, which drives its
- * own ssh2 Client through the TOTP and browser sign-in parking flow rather than letting
- * ctx.ssh.connect finish the handshake itself.
- */
-export function prepareSsh(
-  host: PluginSshHost,
-  options: {
-    purpose?: "file-manager" | "file-transfer";
-    client: Client;
-    serverHostId?: number;
-    log?: (level: "info" | "warning" | "error", message: string) => void;
-  },
-): Promise<{ config: ConnectConfig; outcome: PluginSshAuthOutcome }> {
-  return pluginSsh().prepare(host, options) as Promise<{
-    config: ConnectConfig;
-    outcome: PluginSshAuthOutcome;
-  }>;
-}
-
-export function openSshTransport(
-  host: PluginSshHost,
-  config: ConnectConfig,
-): Promise<{ jumpClient: Client | null; via: string }> {
-  return pluginSsh().openTransport(
-    host,
-    config as unknown as Record<string, unknown>,
-  ) as Promise<{
-    jumpClient: Client | null;
-    via: string;
-  }>;
-}
-
-export const classifyKeyboardInteractive: PluginSsh["classifyKeyboardInteractive"] =
-  (round, host) => pluginSsh().classifyKeyboardInteractive(round, host);
-
-export const autoResponses: PluginSsh["autoResponses"] = (prompts, password) =>
-  pluginSsh().autoResponses(prompts, password);
-
-export const requiresSecret: PluginSsh["requiresSecret"] = (authType) =>
-  pluginSsh().requiresSecret(authType);
diff --git a/plugins/file-manager/src/backend/tables.ts b/plugins/file-manager/src/backend/tables.ts
deleted file mode 100644
index 9e7fe82e3..000000000
--- a/plugins/file-manager/src/backend/tables.ts
+++ /dev/null
@@ -1,105 +0,0 @@
-import {
-  adoptLegacyTable,
-  defineTable,
-  id,
-  refHost,
-  refUser,
-  text,
-  timestamp,
-} from "@termix/plugin-sdk/db";
-
-/**
- * The paths and hosts a user recently opened in the file manager.
- *
- * Adopted from core's file_manager_recent, so the column and index names are
- * the legacy ones: the rename carries the existing rows and index across.
- */
-export const recent = adoptLegacyTable(
-  "file_manager_recent",
-  defineTable(
-    "recent",
-    {
-      id: id(),
-      userId: refUser(),
-      hostId: refHost(),
-      name: text().notNull(),
-      path: text().notNull(),
-      lastOpened: timestamp().notNull().defaultNow(),
-    },
-    {
-      indexes: [
-        { name: "idx_file_manager_recent_user", columns: ["userId", "hostId"] },
-      ],
-    },
-  ),
-);
-
-/** Paths a user pinned for quick access on a host. */
-export const pinned = adoptLegacyTable(
-  "file_manager_pinned",
-  defineTable(
-    "pinned",
-    {
-      id: id(),
-      userId: refUser(),
-      hostId: refHost(),
-      name: text().notNull(),
-      path: text().notNull(),
-      pinnedAt: timestamp().notNull().defaultNow(),
-    },
-    {
-      indexes: [
-        {
-          name: "idx_file_manager_pinned_user",
-          columns: ["userId", "hostId"],
-        },
-      ],
-    },
-  ),
-);
-
-/** Named folder shortcuts a user saved on a host. */
-export const shortcuts = adoptLegacyTable(
-  "file_manager_shortcuts",
-  defineTable(
-    "shortcuts",
-    {
-      id: id(),
-      userId: refUser(),
-      hostId: refHost(),
-      name: text().notNull(),
-      path: text().notNull(),
-      createdAt: timestamp().notNull().defaultNow(),
-    },
-    {
-      indexes: [
-        {
-          name: "idx_file_manager_shortcuts_user",
-          columns: ["userId", "hostId"],
-        },
-      ],
-    },
-  ),
-);
-
-/** Recently used destinations for host-to-host transfers. */
-export const transferRecent = adoptLegacyTable(
-  "transfer_recent",
-  defineTable(
-    "transfer_recent",
-    {
-      id: id(),
-      userId: refUser(),
-      sourceHostId: refHost(),
-      destHostId: refHost(),
-      destPath: text().notNull(),
-      destPathLabel: text().notNull(),
-      lastUsed: timestamp().notNull().defaultNow(),
-    },
-    {
-      indexes: [{ name: "idx_transfer_recent_user", columns: ["userId"] }],
-    },
-  ),
-);
-
-export const tables = [recent, pinned, shortcuts, transferRecent];
diff --git a/plugins/file-manager/src/backend/transfer-engine.ts b/plugins/file-manager/src/backend/transfer-engine.ts
deleted file mode 100644
index 1b260bea5..000000000
--- a/plugins/file-manager/src/backend/transfer-engine.ts
+++ /dev/null
@@ -1,3411 +0,0 @@
-import { getErrorMessage } from "./error-message.js";
-import { randomUUID } from "crypto";
-import { performance } from "node:perf_hooks";
-import type { ClientChannel } from "ssh2";
-import { pluginCtx } from "./plugin-ctx.js";
-import {
-  basename,
-  dirname,
-  getWorkingDir,
-  inferPlatformFromPath,
-  joinPath,
-  normalizeSftpPath,
-  pathsOverlap,
-  sftpPathToLocalPath,
-  type TransferPlatform,
-} from "./transfer-paths.js";
-import {
-  buildTransferScanSummary,
-  estimateIncompressibleSample,
-  getArchiveTransferReasonKey,
-  resolveArchiveTransferMethod,
-  type TransferMethodPreference,
-  type TransferScanSummary,
-} from "./transfer-routing.js";
-import { verifySftpFileIntegrity } from "./transfer-integrity.js";
-import {
-  promisifySftpChmod,
-  promisifySftpClose,
-  promisifySftpFstat,
-  promisifySftpOpen,
-  promisifySftpStat,
-  promisifySftpUnlink,
-} from "./sftp-promisify.js";
-import {
-  buildTransferHopTimings,
-  computeTransferMbPerSec,
-  createEmptyXferStats,
-  createHopWallClock,
-  createThrottledProgress,
-  elapsedMs,
-  hopSpanMs,
-  mergeXferStats,
-  noteHopEnd,
-  noteHopStart,
-  type PipelinedXferStats,
-  type TransferTimings,
-} from "./transfer-stats.js";
-import {
-  TransferCancelledError,
-  TransferStalledError,
-  isRecoverableTransferError,
-} from "./transfer-errors.js";
-import {
-  escapeShell,
-  isLocalSshEndpoint,
-  isPermissionError,
-  isRootOnlyPath,
-} from "./transfer-host-utils.js";
-import {
-  SFTP_OPEN_READ,
-  SFTP_OPEN_WRITE,
-  SFTP_OPEN_WRITE_RESUME,
-} from "./sftp-promisify.js";
-import {
-  collectFileWorkItems,
-  readSftpSample,
-  type FileWorkItem,
-} from "./transfer-scan.js";
-import {
-  deletePathSftp,
-  ensureDirectoryTreeSftp,
-} from "./transfer-sftp-dir.js";
-import {
-  DEFAULT_PARALLEL_SEGMENT_COUNT,
-  SFTP_XFER_SEGMENT_SIZE,
-  buildSegmentCopyJobs,
-  clampParallelSegmentCount,
-  type SegmentCopyJob,
-} from "./transfer-segment-copy.js";
-import {
-  buildDirectProbeCommand,
-  buildDirectRsyncCommand,
-  quoteShell,
-  shouldBenchmarkDirectTransfer,
-  shouldUseDirectTransfer,
-  type DirectTransferEndpoint,
-} from "./direct-transfer-routing.js";
-import {
-  getRecentDirectRouteDecision,
-  getTransferProfile,
-  initializeTransferProfiles,
-  recordDirectRouteBenchmark,
-  recordDirectRouteOutcome,
-  recordTransferProfile,
-  selectTransferTuning,
-} from "./transfer-tuning.js";
-
-export type {
-  TransferMethodPreference,
-  TransferScanSummary,
-} from "./transfer-routing.js";
-
-export interface TransferMethodPreview {
-  methodPreference: TransferMethodPreference;
-  resolvedMethod: "tar" | "item_sftp";
-  reasonKey: ReturnType<typeof getArchiveTransferReasonKey>;
-  sourcePlatform: TransferPlatform;
-  destPlatform: TransferPlatform;
-  sourceHasTar: boolean;
-  destHasTar: boolean;
-  summary: TransferScanSummary;
-}
-
-type SFTPWrapper = import("ssh2").SFTPWrapper;
-
-export interface SSHSessionLike {
-  client: import("ssh2").Client;
-  isConnected: boolean;
-  lastActive: number;
-  activeOperations: number;
-  sftp?: SFTPWrapper;
-  sftpPending?: Promise<SFTPWrapper>;
-  channelOpener: { run: <T>(fn: () => Promise<T>) => Promise<T> };
-  userId?: string;
-  ip?: string;
-  port?: number;
-  username?: string;
-  transferPlatform?: TransferPlatform;
-}
-
-export interface HostTransferDeps {
-  sshSessions: Record<string, SSHSessionLike>;
-  getSessionSftp: (session: SSHSessionLike) => Promise<SFTPWrapper>;
-  execChannel: (
-    session: SSHSessionLike,
-    command: string,
-    callback: (err: Error | undefined, stream: ClientChannel) => void,
-  ) => void;
-  verifySessionOwnership: (session: SSHSessionLike, userId: string) => boolean;
-  openDedicatedTransferSession: (
-    browseSessionId: string,
-    dedicatedSessionId: string,
-    userId: string,
-    transferId: string,
-    options?: { allowBrowseDisconnected?: boolean },
-  ) => Promise<SSHSessionLike>;
-  closeDedicatedTransferSession: (sessionId: string) => void;
-}
-
-export type TransferPhase =
-  | "compressing"
-  | "transferring"
-  | "benchmarking"
-  | "verifying"
-  | "extracting"
-  | "reconnecting";
-export type TransferStatus =
-  "running" | "success" | "partial" | "error" | "cancelled";
-export type TransferMethod = "stream" | "tar" | "item_sftp" | "direct_rsync";
-
-export type {
-  TransferHopId,
-  TransferHopMetrics,
-  TransferTimings,
-} from "./transfer-stats.js";
-
-export interface TransferProgress {
-  transferId: string;
-  status: TransferStatus;
-  phase: TransferPhase;
-  bytesTransferred?: number;
-  totalBytes?: number;
-  itemsCompleted?: number;
-  totalItems?: number;
-  failedPaths?: string[];
-  message?: string;
-  method?: TransferMethod;
-  sourcePaths?: string[];
-  destPath?: string;
-  userId?: string;
-  sourceSessionId?: string;
-  destSessionId?: string;
-  dedicatedSourceSessionId?: string;
-  dedicatedDestSessionId?: string;
-  startedAt?: number;
-  lastActivityAt?: number;
-  reconnectingAt?: number;
-  timings?: TransferTimings;
-  sourceDeleted?: boolean;
-  moveRequested?: boolean;
-  methodPreference?: TransferMethodPreference;
-  parallelSegmentCount?: number;
-  /** Destination paths created or partially written before cancel. */
-  destArtifacts?: string[];
-  tempArchivePath?: string;
-  partialDestRemaining?: boolean;
-  cleanupCompleted?: boolean;
-  retryable?: boolean;
-  integrityVerified?: boolean;
-  requestSnapshot?: {
-    sourceSessionId: string;
-    sourcePaths: string[];
-    destSessionId: string;
-    destPath: string;
-    move?: boolean;
-    methodPreference?: TransferMethodPreference;
-    parallelSegmentCount?: number;
-  };
-}
-
-export interface TransferRequest {
-  sourceSessionId: string;
-  sourcePaths: string[];
-  destSessionId: string;
-  destPath: string;
-  move?: boolean;
-  userId: string;
-  methodPreference?: TransferMethodPreference;
-  /** Explicit parallel lane override; omitted values are tuned automatically. */
-  parallelSegmentCount?: number;
-}
-
-const activeTransfers = new Map<string, TransferProgress>();
-const cancelRequestedTransfers = new Set<string>();
-const directRouteCache = new Map<
-  string,
-  { useDirect: boolean; expiresAt: number; directMs?: number; relayMs?: number }
->();
-
-/** In-flight pipelined SFTP reads; force-closed when the user cancels. */
-interface ActiveXferControl {
-  abort: (err: Error) => void;
-  closeResources: () => Promise<void>;
-}
-const activeXferControls = new Map<string, ActiveXferControl>();
-const cancelWatchdogs = new Map<string, ReturnType<typeof setTimeout>>();
-
-function throwIfCancelled(transferId: string): void {
-  if (cancelRequestedTransfers.has(transferId)) {
-    throw new TransferCancelledError();
-  }
-}
-
-function createTransferShouldAbort(transferId: string): () => boolean {
-  return () => {
-    if (cancelRequestedTransfers.has(transferId)) {
-      return true;
-    }
-    const progress = activeTransfers.get(transferId);
-    return progress !== undefined && progress.status !== "running";
-  };
-}
-
-export function requestTransferCancel(
-  transferId: string,
-  userId: string,
-): boolean {
-  const progress = activeTransfers.get(transferId);
-  if (
-    !progress ||
-    progress.userId !== userId ||
-    progress.status !== "running"
-  ) {
-    return false;
-  }
-  cancelRequestedTransfers.add(transferId);
-  updateTransfer(transferId, { message: "Cancellation requested" });
-  void forceAbortActiveXfer(transferId);
-
-  if (!cancelWatchdogs.has(transferId)) {
-    cancelWatchdogs.set(
-      transferId,
-      setTimeout(() => {
-        cancelWatchdogs.delete(transferId);
-        const current = activeTransfers.get(transferId);
-        if (
-          current?.status === "running" &&
-          cancelRequestedTransfers.has(transferId)
-        ) {
-          void forceAbortActiveXfer(transferId);
-          finalizeTransfer(
-            transferId,
-            cancelledProgressPatch(current, {
-              status: "cancelled",
-              phase: current.phase ?? "transferring",
-              message: "Transfer cancelled by user",
-              method: current.method,
-              sourcePaths: current.sourcePaths,
-              destPath: current.destPath,
-              bytesTransferred: current.bytesTransferred,
-              totalBytes: current.totalBytes,
-              itemsCompleted: current.itemsCompleted,
-              totalItems: current.totalItems,
-              moveRequested: current.moveRequested,
-              sourceDeleted: false,
-            }),
-          );
-          pluginCtx().log.warn(
-            `Force-finalized stuck transfer after cancel: ${transferId}`,
-          );
-        }
-      }, 8000),
-    );
-  }
-
-  return true;
-}
-
-async function forceAbortActiveXfer(transferId: string): Promise<void> {
-  const control = activeXferControls.get(transferId);
-  if (!control) return;
-  control.abort(new TransferCancelledError());
-  await control.closeResources().catch(() => {});
-}
-const SMALL_FILE_SYNC_THRESHOLD = 10 * 1024 * 1024;
-/** OpenSSH SFTP max packet payload is ~256 KiB; larger chunks cut round-trips. */
-const SFTP_XFER_CHUNK_SIZE = 256 * 1024;
-/** Pipelined in-flight READ requests per leg (ssh2 fastGet/fastPut default is 64). */
-const SFTP_XFER_CONCURRENCY = 32;
-/** Files above this size use segmented copy; smaller files use a single scheduler run. */
-const SFTP_XFER_SEGMENT_THRESHOLD = 32 * 1024 * 1024;
-/** Per-segment attempts before giving up (sequential and parallel). */
-const SFTP_SEQUENTIAL_SEGMENT_MAX_ATTEMPTS = 4;
-/** Per-lane attempts in parallel mode (each opens a fresh lane SSH pair quickly). */
-const SFTP_PARALLEL_SEGMENT_MAX_ATTEMPTS = 4;
-/** Full copy restarts after segment exhaustion. */
-const SFTP_SEQUENTIAL_COPY_MAX_ATTEMPTS = 2;
-const SFTP_PARALLEL_COPY_MAX_ATTEMPTS = 2;
-/** Short backoff before opening fresh dedicated SSH sessions. */
-const TRANSFER_SESSION_RESET_DELAYS_MS = [1000, 2000, 3000];
-const TRANSFER_HANDLE_CLOSE_TIMEOUT_MS = 2500;
-const HUNG_TRANSFER_MS = 90_000;
-const HUNG_RECONNECTING_MS = 180_000;
-
-interface TransferReconnectContext {
-  deps: HostTransferDeps;
-  userId: string;
-  browseSourceSessionId: string;
-  browseDestSessionId: string;
-  dedicatedSourceSessionId: string;
-  dedicatedDestSessionId: string;
-  transferId: string;
-  profileKey?: string;
-}
-
-type TransferReconnectMeta = Omit<
-  TransferReconnectContext,
-  "deps" | "transferId"
->;
-
-function buildTransferReconnectContext(
-  deps: HostTransferDeps,
-  transferId: string,
-  meta: TransferReconnectMeta,
-): TransferReconnectContext {
-  return { deps, transferId, ...meta };
-}
-
-async function probeDestResumeOffset(
-  destSftp: SFTPWrapper,
-  destPath: string,
-  fileSize: number,
-): Promise<number> {
-  try {
-    const destStat = await promisifySftpStat(destSftp, destPath);
-    return Math.min(destStat.size, fileSize);
-  } catch {
-    return 0;
-  }
-}
-
-function buildStreamTransferTimings(
-  transferId: string,
-  fileSize: number,
-  prepareDestMs?: number,
-): TransferTimings {
-  const progress = activeTransfers.get(transferId);
-  const wallStart = progress?.startedAt ?? Date.now();
-  const totalMs = elapsedMs(wallStart);
-  const prepare = prepareDestMs ?? progress?.timings?.prepareDestMs ?? 0;
-  const verify = progress?.timings?.verifyMs ?? 0;
-  const dataMs = Math.max(1, totalMs - prepare - verify);
-
-  return {
-    ...progress?.timings,
-    prepareDestMs: prepare > 0 ? prepare : undefined,
-    transferMs: dataMs,
-    transferBytes: fileSize,
-    endToEndMbPerSec: computeTransferMbPerSec(fileSize, dataMs),
-    totalMs,
-  };
-}
-
-async function finalizeStreamTransferIfDestAtSize(
-  transferId: string,
-  destSftp: SFTPWrapper,
-  destPath: string,
-  expectedSize: number,
-  extra: Partial<TransferProgress> = {},
-  verify?: () => Promise<void>,
-): Promise<boolean> {
-  try {
-    const destSize = await probeDestResumeOffset(
-      destSftp,
-      destPath,
-      expectedSize,
-    );
-    if (destSize < expectedSize) {
-      return false;
-    }
-
-    await verify?.();
-
-    pluginCtx().log.info(
-      `Destination file complete, finalizing transfer: ${transferId} (destSize=${destSize}, expectedSize=${expectedSize})`,
-    );
-
-    finalizeTransfer(transferId, {
-      status: "success",
-      phase: "transferring",
-      method: "stream",
-      bytesTransferred: expectedSize,
-      totalBytes: expectedSize,
-      destPath,
-      timings: buildStreamTransferTimings(transferId, expectedSize),
-      ...extra,
-    });
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-async function tryFinalizeStreamTransferIfDestComplete(
-  deps: HostTransferDeps,
-  transferId: string,
-  destSession: SSHSessionLike,
-  destPath: string,
-  expectedSize: number,
-  extra: Partial<TransferProgress> = {},
-  verify?: () => Promise<void>,
-): Promise<boolean> {
-  try {
-    const destSftp = await deps.getSessionSftp(destSession);
-    return finalizeStreamTransferIfDestAtSize(
-      transferId,
-      destSftp,
-      destPath,
-      expectedSize,
-      extra,
-      verify,
-    );
-  } catch {
-    return false;
-  }
-}
-
-async function reconnectDedicatedTransferSessions(
-  ctx: TransferReconnectContext,
-  parallelWorkers = 0,
-): Promise<{ sourceSession: SSHSessionLike; destSession: SSHSessionLike }> {
-  pluginCtx().log.warn(
-    `Reconnecting dedicated transfer SSH sessions: ${ctx.transferId} (parallelWorkers=${parallelWorkers})`,
-  );
-
-  closeAllTransferSessions(ctx.deps, ctx, parallelWorkers);
-
-  const [sourceSession, destSession] = await Promise.all([
-    ctx.deps.openDedicatedTransferSession(
-      ctx.browseSourceSessionId,
-      ctx.dedicatedSourceSessionId,
-      ctx.userId,
-      ctx.transferId,
-      { allowBrowseDisconnected: true },
-    ),
-    ctx.deps.openDedicatedTransferSession(
-      ctx.browseDestSessionId,
-      ctx.dedicatedDestSessionId,
-      ctx.userId,
-      ctx.transferId,
-      { allowBrowseDisconnected: true },
-    ),
-  ]);
-
-  return { sourceSession, destSession };
-}
-
-async function resetDedicatedTransferSessions(
-  ctx: TransferReconnectContext,
-  attempt: number,
-  reason: string,
-): Promise<{
-  sourceSession: SSHSessionLike;
-  destSession: SSHSessionLike;
-  sourceSftp: SFTPWrapper;
-  destSftp: SFTPWrapper;
-}> {
-  pluginCtx().log.warn(
-    `Resetting transfer SSH sessions (fresh connection): ${ctx.transferId} (attempt=${attempt}, reason=${reason})`,
-  );
-
-  closeAllTransferSessions(ctx.deps, ctx, 0);
-
-  const delayMs =
-    TRANSFER_SESSION_RESET_DELAYS_MS[
-      Math.min(attempt - 1, TRANSFER_SESSION_RESET_DELAYS_MS.length - 1)
-    ] ?? 3000;
-  await new Promise((resolve) => setTimeout(resolve, delayMs));
-
-  const { sourceSession, destSession } =
-    await reconnectDedicatedTransferSessions(ctx, 0);
-  const sourceSftp = await ctx.deps.getSessionSftp(sourceSession);
-  const destSftp = await ctx.deps.getSessionSftp(destSession);
-
-  if (ctx.transferId) {
-    updateTransfer(ctx.transferId, { lastActivityAt: Date.now() });
-  }
-
-  return { sourceSession, destSession, sourceSftp, destSftp };
-}
-
-async function detectTransferPlatform(
-  deps: HostTransferDeps,
-  session: SSHSessionLike,
-  pathHints: string[] = [],
-): Promise<TransferPlatform> {
-  if (session.transferPlatform) return session.transferPlatform;
-
-  for (const path of pathHints) {
-    const inferred = inferPlatformFromPath(path);
-    if (inferred === "windows") {
-      session.transferPlatform = "windows";
-      return "windows";
-    }
-  }
-
-  try {
-    const { code } = await execCommand(deps, session, "uname -s");
-    if (code === 0) {
-      session.transferPlatform = "unix";
-      return "unix";
-    }
-  } catch {
-    /* not unix */
-  }
-
-  try {
-    const { code } = await execCommand(
-      deps,
-      session,
-      'cmd /c "if defined OS (exit 0) else (exit 1)"',
-    );
-    if (code === 0) {
-      session.transferPlatform = "windows";
-      return "windows";
-    }
-  } catch {
-    /* not cmd */
-  }
-
-  try {
-    const { code } = await execCommand(
-      deps,
-      session,
-      "powershell -NoProfile -Command \"if ($IsWindows -or $env:OS -like 'Windows*') { exit 0 } else { exit 1 }\"",
-    );
-    if (code === 0) {
-      session.transferPlatform = "windows";
-      return "windows";
-    }
-  } catch {
-    /* not powershell */
-  }
-
-  session.transferPlatform = "unix";
-  return "unix";
-}
-
-function execCommand(
-  deps: HostTransferDeps,
-  session: SSHSessionLike,
-  command: string,
-  options: {
-    shouldAbort?: () => boolean;
-    onOutput?: (chunk: Buffer) => void;
-    timeoutMs?: number;
-  } = {},
-): Promise<{ code: number; stderr: string }> {
-  return new Promise((resolve, reject) => {
-    deps.execChannel(session, command, (err, stream) => {
-      if (err) {
-        reject(err);
-        return;
-      }
-      let settled = false;
-      const startedAt = Date.now();
-      let stderr = "";
-      const abortTimer =
-        options.shouldAbort || options.timeoutMs
-          ? setInterval(() => {
-              const timedOut =
-                options.timeoutMs !== undefined &&
-                Date.now() - startedAt >= options.timeoutMs;
-              if ((!options.shouldAbort?.() && !timedOut) || settled) return;
-              settled = true;
-              clearInterval(abortTimer);
-              stream.signal("KILL");
-              stream.close();
-              reject(
-                timedOut
-                  ? new Error(`Command timed out after ${options.timeoutMs}ms`)
-                  : new TransferCancelledError(),
-              );
-            }, 250)
-          : undefined;
-      stream.on("data", (data: Buffer) => {
-        options.onOutput?.(data);
-      });
-      stream.stderr.on("data", (data: Buffer) => {
-        stderr += data.toString();
-        options.onOutput?.(data);
-      });
-      stream.on("close", (code: number) => {
-        if (settled) return;
-        settled = true;
-        if (abortTimer) clearInterval(abortTimer);
-        resolve({ code: code ?? 0, stderr });
-      });
-      stream.on("error", (streamErr: Error) => {
-        if (settled) return;
-        settled = true;
-        if (abortTimer) clearInterval(abortTimer);
-        reject(streamErr);
-      });
-    });
-  });
-}
-
-async function checkTarAvailable(
-  deps: HostTransferDeps,
-  session: SSHSessionLike,
-): Promise<boolean> {
-  const platform = await detectTransferPlatform(deps, session);
-  if (platform === "windows") return false;
-
-  try {
-    const { code } = await execCommand(deps, session, "command -v tar");
-    return code === 0;
-  } catch {
-    return false;
-  }
-}
-
-async function ensureDestDirectory(
-  deps: HostTransferDeps,
-  destSession: SSHSessionLike,
-  dirPath: string,
-  created: Set<string> = new Set(),
-): Promise<void> {
-  const destSftp = await deps.getSessionSftp(destSession);
-  await ensureDirectoryTreeSftp(destSftp, dirPath, created);
-}
-
-function updateTransfer(
-  transferId: string,
-  patch: Partial<TransferProgress>,
-): void {
-  const current = activeTransfers.get(transferId);
-  if (current) {
-    const next: TransferProgress = { ...current, ...patch };
-    if (
-      patch.bytesTransferred !== undefined &&
-      current.totalBytes !== undefined &&
-      current.totalBytes > 0
-    ) {
-      next.bytesTransferred = Math.min(
-        patch.bytesTransferred,
-        current.totalBytes,
-      );
-    }
-    if (
-      patch.bytesTransferred !== undefined &&
-      patch.bytesTransferred !== current.bytesTransferred
-    ) {
-      next.lastActivityAt = Date.now();
-    }
-    activeTransfers.set(transferId, next);
-  }
-}
-
-async function closeTransferHandlesSafe(
-  handles: TransferFileHandles | null | undefined,
-): Promise<void> {
-  if (!handles) return;
-  await Promise.race([
-    handles.close(),
-    new Promise<void>((resolve) =>
-      setTimeout(resolve, TRANSFER_HANDLE_CLOSE_TIMEOUT_MS),
-    ),
-  ]).catch(() => {});
-}
-
-function checkHungTransfers(): void {
-  const now = Date.now();
-  for (const [transferId, progress] of activeTransfers) {
-    if (progress.status !== "running") continue;
-
-    if (
-      progress.method === "stream" &&
-      progress.totalBytes &&
-      progress.totalBytes > 0 &&
-      progress.bytesTransferred !== undefined &&
-      progress.bytesTransferred >= progress.totalBytes
-    ) {
-      pluginCtx().log.info(
-        `Transfer progress at 100%, marking complete: ${transferId} (${progress.bytesTransferred}/${progress.totalBytes})`,
-      );
-      finalizeTransfer(transferId, {
-        status: "success",
-        phase: "transferring",
-        method: "stream",
-        bytesTransferred: progress.totalBytes,
-        totalBytes: progress.totalBytes,
-        sourcePaths: progress.sourcePaths,
-        destPath: progress.destPath,
-        moveRequested: progress.moveRequested,
-        timings: buildStreamTransferTimings(transferId, progress.totalBytes),
-      });
-      continue;
-    }
-
-    if (progress.phase === "reconnecting") {
-      const reconnectStarted =
-        progress.reconnectingAt ?? progress.lastActivityAt ?? now;
-      if (now - reconnectStarted < HUNG_RECONNECTING_MS) continue;
-    }
-
-    const lastActivity = progress.lastActivityAt ?? progress.startedAt ?? now;
-    if (now - lastActivity < HUNG_TRANSFER_MS) continue;
-
-    pluginCtx().log.error(
-      `Force-finalizing unresponsive transfer: ${transferId} (lastActivityAt=${lastActivity}, bytesTransferred=${progress.bytesTransferred})`,
-    );
-
-    finalizeTransfer(
-      transferId,
-      failedProgressPatch(progress, {
-        status: "error",
-        phase:
-          progress.phase === "reconnecting" ? "transferring" : progress.phase,
-        message: "Transfer stopped responding",
-        method: progress.method,
-        sourcePaths: progress.sourcePaths,
-        destPath: progress.destPath,
-        bytesTransferred: Math.min(
-          progress.bytesTransferred ?? 0,
-          progress.totalBytes ?? Number.MAX_SAFE_INTEGER,
-        ),
-        totalBytes: progress.totalBytes,
-        itemsCompleted: progress.itemsCompleted,
-        totalItems: progress.totalItems,
-        moveRequested: progress.moveRequested,
-      }),
-    );
-  }
-}
-
-/** Before marking a stalled stream transfer as failed, verify the destination file size. */
-export async function probeHungStreamTransfers(
-  deps: HostTransferDeps,
-): Promise<void> {
-  const now = Date.now();
-  for (const [transferId, progress] of activeTransfers) {
-    if (progress.status !== "running" || progress.method !== "stream") {
-      continue;
-    }
-    if (!progress.destPath || !progress.totalBytes || !progress.userId) {
-      continue;
-    }
-
-    const lastActivity = progress.lastActivityAt ?? progress.startedAt ?? now;
-    if (now - lastActivity < HUNG_TRANSFER_MS) {
-      continue;
-    }
-
-    const browseDestId = progress.destSessionId;
-    if (!browseDestId) {
-      continue;
-    }
-
-    const destId = progress.dedicatedDestSessionId ?? `xfer:${transferId}:dst`;
-    let destSession = deps.sshSessions[destId];
-    if (!destSession?.isConnected) {
-      try {
-        destSession = await deps.openDedicatedTransferSession(
-          browseDestId,
-          destId,
-          progress.userId,
-          transferId,
-          { allowBrowseDisconnected: true },
-        );
-      } catch {
-        continue;
-      }
-    }
-
-    await tryFinalizeStreamTransferIfDestComplete(
-      deps,
-      transferId,
-      destSession,
-      progress.destPath,
-      progress.totalBytes,
-      {
-        sourcePaths: progress.sourcePaths,
-        moveRequested: progress.moveRequested,
-      },
-    );
-  }
-}
-
-function trackDestArtifact(transferId: string, path: string): void {
-  const normalized = normalizeSftpPath(path);
-  const current = activeTransfers.get(transferId);
-  if (!current) return;
-  const existing = current.destArtifacts ?? [];
-  if (existing.includes(normalized)) return;
-  updateTransfer(transferId, { destArtifacts: [...existing, normalized] });
-}
-
-function buildCleanupPaths(progress: TransferProgress): string[] {
-  const paths = new Set<string>(progress.destArtifacts ?? []);
-
-  if (progress.tempArchivePath) {
-    paths.add(normalizeSftpPath(progress.tempArchivePath));
-  }
-
-  if (paths.size === 0 && progress.destPath) {
-    if (progress.method === "stream") {
-      paths.add(normalizeSftpPath(progress.destPath));
-    } else if (progress.sourcePaths?.length) {
-      for (const sourcePath of progress.sourcePaths) {
-        paths.add(
-          normalizeSftpPath(joinPath(progress.destPath, basename(sourcePath))),
-        );
-      }
-    }
-  }
-
-  return [...paths];
-}
-
-function partialDestWasWritten(progress: TransferProgress): boolean {
-  return (
-    (progress.bytesTransferred ?? 0) > 0 ||
-    (progress.itemsCompleted ?? 0) > 0 ||
-    (progress.destArtifacts?.length ?? 0) > 0
-  );
-}
-
-function failedProgressPatch(
-  current: TransferProgress | undefined,
-  patch: Partial<TransferProgress>,
-): Partial<TransferProgress> {
-  const merged = { ...current, ...patch } as TransferProgress;
-  const hasPartial = partialDestWasWritten(merged);
-  return {
-    ...patch,
-    partialDestRemaining: hasPartial,
-    retryable: hasPartial && !!current?.requestSnapshot,
-  };
-}
-
-function cancelledProgressPatch(
-  current: TransferProgress | undefined,
-  patch: Partial<TransferProgress>,
-): Partial<TransferProgress> {
-  const merged = { ...current, ...patch } as TransferProgress;
-  return {
-    ...patch,
-    partialDestRemaining: partialDestWasWritten(merged),
-  };
-}
-
-function finalizeTransfer(
-  transferId: string,
-  patch: Partial<TransferProgress>,
-): TransferProgress {
-  cancelRequestedTransfers.delete(transferId);
-  const watchdog = cancelWatchdogs.get(transferId);
-  if (watchdog) {
-    clearTimeout(watchdog);
-    cancelWatchdogs.delete(transferId);
-  }
-  const current = activeTransfers.get(transferId);
-  const result: TransferProgress = {
-    transferId,
-    status: "success",
-    phase: "transferring",
-    ...current,
-    ...patch,
-  };
-  activeTransfers.set(transferId, result);
-  return result;
-}
-
-async function verifyTransferredFile(
-  deps: HostTransferDeps,
-  transferId: string,
-  reconnectMeta: TransferReconnectMeta,
-  sourcePath: string,
-  destPath: string,
-): Promise<void> {
-  updateTransfer(transferId, { phase: "verifying" });
-  const verifyStart = Date.now();
-  const [sourceSession, destSession] = await Promise.all([
-    deps.openDedicatedTransferSession(
-      reconnectMeta.browseSourceSessionId,
-      reconnectMeta.dedicatedSourceSessionId,
-      reconnectMeta.userId,
-      transferId,
-      { allowBrowseDisconnected: true },
-    ),
-    deps.openDedicatedTransferSession(
-      reconnectMeta.browseDestSessionId,
-      reconnectMeta.dedicatedDestSessionId,
-      reconnectMeta.userId,
-      transferId,
-      { allowBrowseDisconnected: true },
-    ),
-  ]);
-  const [sourceSftp, destSftp] = await Promise.all([
-    deps.getSessionSftp(sourceSession),
-    deps.getSessionSftp(destSession),
-  ]);
-  await verifySftpFileIntegrity(
-    sourceSftp,
-    destSftp,
-    sourcePath,
-    destPath,
-    createTransferShouldAbort(transferId),
-    () => new TransferCancelledError(),
-  );
-  const current = activeTransfers.get(transferId);
-  updateTransfer(transferId, {
-    integrityVerified: true,
-    timings: {
-      ...current?.timings,
-      verifyMs: (current?.timings?.verifyMs ?? 0) + elapsedMs(verifyStart),
-    },
-  });
-}
-
-async function deleteSourcePathsAfterSuccess(
-  deps: HostTransferDeps,
-  transferId: string,
-  sourceSession: SSHSessionLike,
-  sourcePaths: string[],
-): Promise<number> {
-  const deleteStart = Date.now();
-  await deleteSourcePaths(deps, sourceSession, sourcePaths);
-  const sourceDeleteMs = elapsedMs(deleteStart);
-  updateTransfer(transferId, {
-    sourceDeleted: true,
-    timings: {
-      ...activeTransfers.get(transferId)?.timings,
-      sourceDeleteMs,
-    },
-  });
-  return sourceDeleteMs;
-}
-
-async function ensureDestParentForFile(
-  deps: HostTransferDeps,
-  destSession: SSHSessionLike,
-  filePath: string,
-): Promise<void> {
-  const parent = dirname(filePath);
-  if (!parent || isRootOnlyPath(parent)) return;
-  await ensureDestDirectory(deps, destSession, parent);
-}
-
-async function scanSourcePathsForRouting(
-  sftp: SFTPWrapper,
-  sourcePaths: string[],
-  transferId: string,
-) {
-  const scanItems: Array<{ sourcePath: string; size: number }> = [];
-  for (const sourcePath of sourcePaths) {
-    throwIfCancelled(transferId);
-    const work = await collectFileWorkItems(sftp, sourcePath, "/");
-    scanItems.push(
-      ...work.map((w) => ({ sourcePath: w.sourcePath, size: w.size })),
-    );
-  }
-  const summary = buildTransferScanSummary(scanItems);
-  const candidates = [...scanItems]
-    .filter((item) => item.size > 0)
-    .sort((a, b) => b.size - a.size)
-    .slice(0, 3);
-  let sampledBytes = 0;
-  let sampledIncompressibleBytes = 0;
-  for (const item of candidates) {
-    throwIfCancelled(transferId);
-    try {
-      const sample = await readSftpSample(sftp, item.sourcePath, item.size);
-      sampledBytes += sample.length;
-      if (estimateIncompressibleSample(sample)) {
-        sampledIncompressibleBytes += sample.length;
-      }
-    } catch {
-      /* Extension-based routing remains the safe fallback. */
-    }
-  }
-  if (sampledBytes > 0) {
-    summary.sampledIncompressibleRatio =
-      sampledIncompressibleBytes / sampledBytes;
-  }
-  return summary;
-}
-
-interface PipelinedXferOptions {
-  fileSize?: number;
-  initialOffset?: number;
-  parallelSegmentCount?: number;
-  pipelineConcurrency?: number;
-  onProgress?: (bytes: number) => void;
-  shouldAbort?: () => boolean;
-  transferId?: string;
-  segmentIndex?: number;
-  reconnect?: TransferReconnectContext;
-  onResumeOffset?: (offset: number) => void;
-}
-
-function closeAllTransferSessions(
-  deps: HostTransferDeps,
-  ctx: TransferReconnectContext,
-  parallelWorkers: number,
-): void {
-  deps.closeDedicatedTransferSession(ctx.dedicatedSourceSessionId);
-  deps.closeDedicatedTransferSession(ctx.dedicatedDestSessionId);
-  for (let i = 0; i < parallelWorkers; i++) {
-    deps.closeDedicatedTransferSession(`${ctx.dedicatedSourceSessionId}:p${i}`);
-    deps.closeDedicatedTransferSession(`${ctx.dedicatedDestSessionId}:p${i}`);
-  }
-}
-
-interface TransferFileHandles {
-  sourceSftp: SFTPWrapper;
-  destSftp: SFTPWrapper;
-  srcHandle: Buffer;
-  dstHandle: Buffer;
-  close: () => Promise<void>;
-}
-
-async function openTransferFileHandles(
-  sourceSftp: SFTPWrapper,
-  destSftp: SFTPWrapper,
-  sourcePath: string,
-  destPath: string,
-  resume: boolean,
-): Promise<TransferFileHandles> {
-  const srcHandle = await promisifySftpOpen(
-    sourceSftp,
-    sourcePath,
-    SFTP_OPEN_READ,
-    0o666,
-  );
-  const dstHandle = await promisifySftpOpen(
-    destSftp,
-    destPath,
-    resume ? SFTP_OPEN_WRITE_RESUME : SFTP_OPEN_WRITE,
-    0o666,
-  );
-
-  return {
-    sourceSftp,
-    destSftp,
-    srcHandle,
-    dstHandle,
-    close: async () => {
-      await promisifySftpClose(sourceSftp, srcHandle).catch(() => {});
-      await promisifySftpClose(destSftp, dstHandle).catch(() => {});
-    },
-  };
-}
-
-/**
- * Parallel SFTP copy using the same scheduling model as ssh2's fastXfer.
- * Scoped to [fileBaseOffset, fileBaseOffset + byteLength) so callers can reset
- * scheduler state between segments on large files.
- */
-async function runFastSftpCopy(
-  sourceSftp: SFTPWrapper,
-  srcHandle: Buffer,
-  destSftp: SFTPWrapper,
-  dstHandle: Buffer,
-  byteLength: number,
-  fileBaseOffset: number,
-  options: PipelinedXferOptions,
-  sourceReadClock: ReturnType<typeof createHopWallClock>,
-  destWriteClock: ReturnType<typeof createHopWallClock>,
-): Promise<void> {
-  let concurrency = options.pipelineConcurrency ?? SFTP_XFER_CONCURRENCY;
-  let chunkSize = SFTP_XFER_CHUNK_SIZE;
-  let bufsize = chunkSize * concurrency;
-  while (bufsize > byteLength && concurrency > 1) {
-    bufsize -= chunkSize;
-    concurrency -= 1;
-  }
-  if (byteLength <= chunkSize) {
-    chunkSize = byteLength;
-    concurrency = 1;
-    bufsize = byteLength;
-  }
-
-  const readbuf = Buffer.alloc(bufsize);
-  const progress = createThrottledProgress(options.onProgress);
-  let lastActivity = Date.now();
-  let stallTimer: ReturnType<typeof setInterval> | undefined;
-
-  await new Promise<void>((resolve, reject) => {
-    let finished = false;
-    let hadError = false;
-    let pdst = 0;
-    let total = 0;
-
-    const fail = (err: Error) => {
-      if (hadError) return;
-      hadError = true;
-      finished = true;
-      progress.flush();
-      reject(err);
-    };
-
-    const succeed = () => {
-      if (finished) return;
-      finished = true;
-      progress.flush();
-      resolve();
-    };
-
-    stallTimer = setInterval(() => {
-      if (finished) return;
-      if (options.shouldAbort?.()) {
-        fail(new TransferCancelledError());
-        return;
-      }
-      if (Date.now() - lastActivity > 45000) {
-        fail(
-          new TransferStalledError(
-            fileBaseOffset + total,
-            options.segmentIndex,
-          ),
-        );
-      }
-    }, 10000);
-
-    const onread = (
-      err: Error | undefined,
-      nb: number,
-      _data: Buffer | undefined,
-      localDstPos: number,
-      datapos: number,
-      origChunkLen: number,
-    ) => {
-      if (err) {
-        fail(err);
-        return;
-      }
-      if (options.shouldAbort?.()) {
-        fail(new TransferCancelledError());
-        return;
-      }
-
-      noteHopStart(destWriteClock);
-      destSftp.write(
-        dstHandle,
-        readbuf,
-        datapos,
-        nb,
-        fileBaseOffset + localDstPos,
-        (writeErr: Error | undefined) => {
-          noteHopEnd(destWriteClock);
-          if (writeErr) {
-            fail(writeErr);
-            return;
-          }
-
-          total += nb;
-          progress.add(nb);
-          lastActivity = Date.now();
-
-          if (options.shouldAbort?.()) {
-            fail(new TransferCancelledError());
-            return;
-          }
-
-          if (nb < origChunkLen) {
-            singleRead(datapos, localDstPos + nb, origChunkLen - nb);
-            return;
-          }
-
-          if (total >= byteLength) {
-            succeed();
-            return;
-          }
-
-          if (pdst >= byteLength) {
-            return;
-          }
-
-          const chunk = Math.min(chunkSize, byteLength - pdst);
-          singleRead(datapos, pdst, chunk);
-          pdst += chunk;
-        },
-      );
-    };
-
-    const makeCb =
-      (psrc: number, localFilePos: number, chunk: number) =>
-      (err: Error | undefined, nb?: number, data?: Buffer) => {
-        onread(err, nb ?? 0, data, localFilePos, psrc, chunk);
-      };
-
-    const singleRead = (psrc: number, localFilePos: number, chunk: number) => {
-      if (options.shouldAbort?.()) {
-        fail(new TransferCancelledError());
-        return;
-      }
-      noteHopStart(sourceReadClock);
-      sourceSftp.read(
-        srcHandle,
-        readbuf,
-        psrc,
-        chunk,
-        fileBaseOffset + localFilePos,
-        (err, nb, data) => {
-          noteHopEnd(sourceReadClock);
-          makeCb(psrc, localFilePos, chunk)(err, nb, data);
-        },
-      );
-    };
-
-    const startReads = () => {
-      let reads = 0;
-      let psrc = 0;
-      while (pdst < byteLength && reads < concurrency) {
-        const chunk = Math.min(chunkSize, byteLength - pdst);
-        singleRead(psrc, pdst, chunk);
-        psrc += chunk;
-        pdst += chunk;
-        reads += 1;
-      }
-    };
-
-    startReads();
-  }).finally(() => {
-    if (stallTimer) clearInterval(stallTimer);
-  });
-}
-
-async function runFastSftpCopySegmented(
-  handles: TransferFileHandles,
-  fileSize: number,
-  options: PipelinedXferOptions,
-  sourceReadClock: ReturnType<typeof createHopWallClock>,
-  destWriteClock: ReturnType<typeof createHopWallClock>,
-  sourcePath: string,
-  destPath: string,
-): Promise<TransferFileHandles> {
-  const parallel = clampParallelSegmentCount(options.parallelSegmentCount);
-  if (parallel > 1 && options.reconnect) {
-    return runFastSftpCopySegmentedParallel(
-      handles,
-      fileSize,
-      { ...options, parallelSegmentCount: parallel },
-      sourceReadClock,
-      destWriteClock,
-      sourcePath,
-      destPath,
-    );
-  }
-  return runFastSftpCopySegmentedSequential(
-    handles,
-    fileSize,
-    options,
-    sourceReadClock,
-    destWriteClock,
-    sourcePath,
-    destPath,
-  );
-}
-
-async function runFastSftpCopySegmentedSequential(
-  handles: TransferFileHandles,
-  fileSize: number,
-  options: PipelinedXferOptions,
-  sourceReadClock: ReturnType<typeof createHopWallClock>,
-  destWriteClock: ReturnType<typeof createHopWallClock>,
-  sourcePath: string,
-  destPath: string,
-): Promise<TransferFileHandles> {
-  const transferId = options.transferId;
-  const segmentCount = Math.ceil(fileSize / SFTP_XFER_SEGMENT_SIZE);
-  let offset = options.initialOffset ?? 0;
-  let currentHandles = handles;
-
-  while (offset < fileSize) {
-    if (options.shouldAbort?.()) {
-      throw new TransferCancelledError();
-    }
-
-    let segLen = Math.min(SFTP_XFER_SEGMENT_SIZE, fileSize - offset);
-    const segmentIndex = Math.floor(offset / SFTP_XFER_SEGMENT_SIZE);
-    let attempts = 0;
-
-    while (true) {
-      pluginCtx().log.info(
-        `Transfer segment started: ${transferId} segment ${segmentIndex}/${segmentCount} (offset=${offset}, len=${segLen}, attempt=${attempts + 1})`,
-      );
-
-      try {
-        await runFastSftpCopy(
-          currentHandles.sourceSftp,
-          currentHandles.srcHandle,
-          currentHandles.destSftp,
-          currentHandles.dstHandle,
-          segLen,
-          offset,
-          { ...options, segmentIndex },
-          sourceReadClock,
-          destWriteClock,
-        );
-
-        pluginCtx().log.info(
-          `Transfer segment completed: ${transferId} segment ${segmentIndex}/${segmentCount} (offset=${offset}, len=${segLen})`,
-        );
-
-        offset += segLen;
-        break;
-      } catch (err) {
-        if (err instanceof TransferCancelledError) {
-          throw err;
-        }
-
-        const message = getErrorMessage(err, "Segment transfer failed");
-        const recoverable =
-          options.reconnect &&
-          isRecoverableTransferError(err) &&
-          attempts < SFTP_SEQUENTIAL_SEGMENT_MAX_ATTEMPTS;
-
-        pluginCtx().log.error(
-          `Transfer segment failed: ${transferId} segment ${segmentIndex} (offset=${offset}, len=${segLen}, attempt=${attempts + 1}/${SFTP_SEQUENTIAL_SEGMENT_MAX_ATTEMPTS}, recoverable=${recoverable})`,
-          err as Error,
-        );
-
-        if (!recoverable || !options.reconnect) {
-          throw new Error(
-            `Segment ${segmentIndex} failed at offset ${offset}: ${message}`,
-          );
-        }
-
-        attempts += 1;
-        await closeTransferHandlesSafe(currentHandles);
-
-        const { sourceSftp, destSftp } = await resetDedicatedTransferSessions(
-          options.reconnect,
-          attempts,
-          message,
-        );
-
-        let resumeOffset = offset;
-        try {
-          resumeOffset = await probeDestResumeOffset(
-            destSftp,
-            destPath,
-            fileSize,
-          );
-        } catch {
-          /* use last known offset */
-        }
-
-        if (resumeOffset > offset) {
-          pluginCtx().log.info(
-            `Resuming transfer from destination size: ${transferId} (previousOffset=${offset}, resumeOffset=${resumeOffset}, fileSize=${fileSize})`,
-          );
-          offset = resumeOffset;
-          options.onResumeOffset?.(offset);
-        }
-
-        if (offset >= fileSize) {
-          break;
-        }
-
-        segLen = Math.min(SFTP_XFER_SEGMENT_SIZE, fileSize - offset);
-        currentHandles = await openTransferFileHandles(
-          sourceSftp,
-          destSftp,
-          sourcePath,
-          destPath,
-          offset > 0,
-        );
-      }
-    }
-  }
-
-  return currentHandles;
-}
-
-interface WorkerSessionCache {
-  sourceSession: SSHSessionLike;
-  destSession: SSHSessionLike;
-  sourceSftp: SFTPWrapper;
-  destSftp: SFTPWrapper;
-}
-
-async function runFastSftpCopySegmentedParallel(
-  handles: TransferFileHandles,
-  fileSize: number,
-  options: PipelinedXferOptions,
-  sourceReadClock: ReturnType<typeof createHopWallClock>,
-  destWriteClock: ReturnType<typeof createHopWallClock>,
-  sourcePath: string,
-  destPath: string,
-): Promise<TransferFileHandles> {
-  const transferId = options.transferId;
-  const parallel = clampParallelSegmentCount(options.parallelSegmentCount);
-  const initialOffset = options.initialOffset ?? 0;
-  const reconnect = options.reconnect!;
-
-  let destResumeSize = initialOffset;
-  try {
-    destResumeSize = await probeDestResumeOffset(
-      handles.destSftp,
-      destPath,
-      fileSize,
-    );
-  } catch {
-    /* use initial offset */
-  }
-
-  const jobs = buildSegmentCopyJobs(fileSize, initialOffset, destResumeSize);
-  if (jobs.length === 0) {
-    options.onResumeOffset?.(fileSize);
-    return handles;
-  }
-
-  pluginCtx().log.info(
-    `Starting parallel segment transfer: ${transferId} (parallel=${parallel}, segmentJobs=${jobs.length}, fileSize=${fileSize}, destResumeSize=${destResumeSize})`,
-  );
-
-  updateTransfer(transferId ?? "", {
-    parallelSegmentCount: parallel,
-    bytesTransferred: destResumeSize,
-  });
-  options.onResumeOffset?.(destResumeSize);
-
-  let aggregateBytes = destResumeSize;
-  let lastDestProbeAt = 0;
-  const DEST_PROGRESS_PROBE_MS = 1500;
-
-  const refreshDestProgress = async (force = false): Promise<number> => {
-    const now = Date.now();
-    if (!force && now - lastDestProbeAt < DEST_PROGRESS_PROBE_MS) {
-      return aggregateBytes;
-    }
-    lastDestProbeAt = now;
-    try {
-      const size = await probeDestResumeOffset(
-        handles.destSftp,
-        destPath,
-        fileSize,
-      );
-      if (size > aggregateBytes) {
-        aggregateBytes = size;
-      } else if (force) {
-        aggregateBytes = size;
-      }
-      options.onResumeOffset?.(aggregateBytes);
-      if (transferId) {
-        updateTransfer(transferId, { bytesTransferred: aggregateBytes });
-      }
-    } catch {
-      /* keep last known progress */
-    }
-    return aggregateBytes;
-  };
-
-  /** Parallel lanes share one dest file — use dest size, not summed segment deltas. */
-  const reportDelta = (_delta: number) => {
-    void refreshDestProgress(false);
-  };
-
-  let nextJobIndex = 0;
-  const workerCaches = new Map<number, WorkerSessionCache>();
-
-  const resetParallelLane = async (
-    workerId: number,
-    attempt: number,
-    reason: string,
-  ): Promise<void> => {
-    pluginCtx().log.warn(
-      `Resetting parallel transfer lane (fresh SSH session): ${reconnect.transferId} lane ${workerId} (attempt=${attempt}, reason=${reason})`,
-    );
-    workerCaches.delete(workerId);
-    reconnect.deps.closeDedicatedTransferSession(
-      `${reconnect.dedicatedSourceSessionId}:p${workerId}`,
-    );
-    reconnect.deps.closeDedicatedTransferSession(
-      `${reconnect.dedicatedDestSessionId}:p${workerId}`,
-    );
-    const delayMs =
-      TRANSFER_SESSION_RESET_DELAYS_MS[
-        Math.min(attempt - 1, TRANSFER_SESSION_RESET_DELAYS_MS.length - 1)
-      ] ?? 3000;
-    await new Promise((resolve) => setTimeout(resolve, delayMs));
-  };
-
-  const ensureWorkerSessions = async (
-    workerId: number,
-  ): Promise<WorkerSessionCache> => {
-    const cached = workerCaches.get(workerId);
-    if (cached) return cached;
-
-    const srcId = `${reconnect.dedicatedSourceSessionId}:p${workerId}`;
-    const dstId = `${reconnect.dedicatedDestSessionId}:p${workerId}`;
-    const sourceSession = await reconnect.deps.openDedicatedTransferSession(
-      reconnect.browseSourceSessionId,
-      srcId,
-      reconnect.userId,
-      reconnect.transferId,
-      { allowBrowseDisconnected: true },
-    );
-    const destSession = await reconnect.deps.openDedicatedTransferSession(
-      reconnect.browseDestSessionId,
-      dstId,
-      reconnect.userId,
-      reconnect.transferId,
-      { allowBrowseDisconnected: true },
-    );
-    const sourceSftp = await reconnect.deps.getSessionSftp(sourceSession);
-    const destSftp = await reconnect.deps.getSessionSftp(destSession);
-    const entry: WorkerSessionCache = {
-      sourceSession,
-      destSession,
-      sourceSftp,
-      destSftp,
-    };
-    workerCaches.set(workerId, entry);
-    return entry;
-  };
-
-  const runSegmentJob = async (
-    job: SegmentCopyJob,
-    workerId: number,
-  ): Promise<void> => {
-    let attempts = 0;
-
-    while (true) {
-      if (options.shouldAbort?.()) {
-        throw new TransferCancelledError();
-      }
-
-      pluginCtx().log.info(
-        `Transfer segment started: ${transferId} segment ${job.segmentIndex} lane ${workerId} (offset=${job.offset}, len=${job.length}, attempt=${attempts + 1})`,
-      );
-
-      const { sourceSftp, destSftp } = await ensureWorkerSessions(workerId);
-      const laneHandles = await openTransferFileHandles(
-        sourceSftp,
-        destSftp,
-        sourcePath,
-        destPath,
-        job.offset > 0,
-      );
-
-      try {
-        await runFastSftpCopy(
-          laneHandles.sourceSftp,
-          laneHandles.srcHandle,
-          laneHandles.destSftp,
-          laneHandles.dstHandle,
-          job.length,
-          job.offset,
-          {
-            ...options,
-            segmentIndex: job.segmentIndex,
-            onProgress: reportDelta,
-          },
-          sourceReadClock,
-          destWriteClock,
-        );
-
-        pluginCtx().log.info(
-          `Transfer segment completed: ${transferId} segment ${job.segmentIndex} lane ${workerId} (offset=${job.offset}, len=${job.length})`,
-        );
-
-        await closeTransferHandlesSafe(laneHandles);
-        await refreshDestProgress(true);
-        return;
-      } catch (err) {
-        await closeTransferHandlesSafe(laneHandles);
-
-        if (err instanceof TransferCancelledError) {
-          throw err;
-        }
-
-        const message = getErrorMessage(err, "Segment transfer failed");
-        const recoverable =
-          isRecoverableTransferError(err) &&
-          attempts < SFTP_PARALLEL_SEGMENT_MAX_ATTEMPTS;
-
-        pluginCtx().log.error(
-          `Transfer segment failed: ${transferId} segment ${job.segmentIndex} lane ${workerId} (offset=${job.offset}, len=${job.length}, attempt=${attempts + 1}/${SFTP_PARALLEL_SEGMENT_MAX_ATTEMPTS}, recoverable=${recoverable})`,
-          err as Error,
-        );
-
-        if (!recoverable) {
-          if (
-            transferId &&
-            (await finalizeStreamTransferIfDestAtSize(
-              transferId,
-              handles.destSftp,
-              destPath,
-              fileSize,
-            ))
-          ) {
-            return;
-          }
-          throw new Error(
-            `Segment ${job.segmentIndex} failed at offset ${job.offset}: ${message}`,
-          );
-        }
-
-        attempts += 1;
-        await resetParallelLane(workerId, attempts, message);
-        await refreshDestProgress(true);
-      }
-    }
-  };
-
-  const runWorker = async (workerId: number) => {
-    while (true) {
-      if (options.shouldAbort?.()) {
-        throw new TransferCancelledError();
-      }
-
-      const jobIndex = nextJobIndex;
-      nextJobIndex += 1;
-      if (jobIndex >= jobs.length) {
-        return;
-      }
-
-      await runSegmentJob(jobs[jobIndex], workerId);
-    }
-  };
-
-  try {
-    await Promise.all(
-      Array.from({ length: parallel }, (_, workerId) => runWorker(workerId)),
-    );
-    await refreshDestProgress(true);
-  } finally {
-    workerCaches.clear();
-    for (let i = 0; i < parallel; i++) {
-      reconnect.deps.closeDedicatedTransferSession(
-        `${reconnect.dedicatedSourceSessionId}:p${i}`,
-      );
-      reconnect.deps.closeDedicatedTransferSession(
-        `${reconnect.dedicatedDestSessionId}:p${i}`,
-      );
-    }
-  }
-
-  options.onResumeOffset?.(fileSize);
-  return handles;
-}
-
-function promisifyFastGet(
-  sftp: SFTPWrapper,
-  remotePath: string,
-  localPath: string,
-  opts: {
-    concurrency?: number;
-    chunkSize?: number;
-    fileSize?: number;
-    step?: (totalTransferred: number, chunk: number, total: number) => void;
-  },
-): Promise<void> {
-  return new Promise((resolve, reject) => {
-    sftp.fastGet(remotePath, localPath, opts, (err) => {
-      if (err) reject(err);
-      else resolve();
-    });
-  });
-}
-
-async function pipelinedSftpFile(
-  sourceSftp: SFTPWrapper,
-  destSftp: SFTPWrapper,
-  sourcePath: string,
-  destPath: string,
-  options: PipelinedXferOptions = {},
-): Promise<PipelinedXferStats> {
-  let fileSize = options.fileSize ?? 0;
-  const stats = createEmptyXferStats();
-  stats.destWriteKind = "sftp";
-
-  let handles: TransferFileHandles | null = null;
-  const transferId = options.transferId;
-
-  try {
-    if (!fileSize) {
-      const srcProbe = await promisifySftpOpen(
-        sourceSftp,
-        sourcePath,
-        SFTP_OPEN_READ,
-        0o666,
-      );
-      try {
-        const fstats = await promisifySftpFstat(sourceSftp, srcProbe);
-        fileSize = fstats.size;
-      } finally {
-        await promisifySftpClose(sourceSftp, srcProbe).catch(() => {});
-      }
-    }
-    if (fileSize <= 0) return stats;
-
-    stats.bytes = fileSize;
-
-    const sourceReadClock = createHopWallClock();
-    const destWriteClock = createHopWallClock();
-
-    const runCopyWithRetry = async (): Promise<void> => {
-      let attempts = 0;
-      let sftpSource = sourceSftp;
-      let sftpDest = destSftp;
-      const parallelLanes = clampParallelSegmentCount(
-        options.parallelSegmentCount,
-      );
-      const isParallelCopy = parallelLanes > 1;
-      const maxCopyAttempts = isParallelCopy
-        ? SFTP_PARALLEL_COPY_MAX_ATTEMPTS
-        : SFTP_SEQUENTIAL_COPY_MAX_ATTEMPTS;
-
-      while (true) {
-        const resumeOffset = await probeDestResumeOffset(
-          sftpDest,
-          destPath,
-          fileSize,
-        );
-        if (resumeOffset >= fileSize) {
-          options.onResumeOffset?.(resumeOffset);
-          return;
-        }
-        if (resumeOffset > 0) {
-          options.onResumeOffset?.(resumeOffset);
-          if (attempts === 0) {
-            pluginCtx().log.info(
-              `Resuming transfer from destination size: ${transferId} (resumeOffset=${resumeOffset}, fileSize=${fileSize})`,
-            );
-          }
-        }
-
-        try {
-          if (handles) {
-            await handles.close().catch(() => {});
-          }
-          handles = await openTransferFileHandles(
-            sftpSource,
-            sftpDest,
-            sourcePath,
-            destPath,
-            resumeOffset > 0,
-          );
-
-          if (fileSize <= SFTP_XFER_SEGMENT_THRESHOLD) {
-            await runFastSftpCopy(
-              handles.sourceSftp,
-              handles.srcHandle,
-              handles.destSftp,
-              handles.dstHandle,
-              fileSize - resumeOffset,
-              resumeOffset,
-              options,
-              sourceReadClock,
-              destWriteClock,
-            );
-          } else {
-            handles = await runFastSftpCopySegmented(
-              handles,
-              fileSize,
-              { ...options, initialOffset: resumeOffset },
-              sourceReadClock,
-              destWriteClock,
-              sourcePath,
-              destPath,
-            );
-          }
-          return;
-        } catch (err) {
-          if (err instanceof TransferCancelledError) {
-            throw err;
-          }
-
-          const recoverable =
-            options.reconnect &&
-            isRecoverableTransferError(err) &&
-            attempts < maxCopyAttempts;
-
-          pluginCtx().log.error(
-            `Transfer copy attempt failed: ${transferId} (attempt=${attempts + 1}/${maxCopyAttempts}, recoverable=${recoverable}${isParallelCopy ? `, parallelLanes=${parallelLanes}` : ""})`,
-            err as Error,
-          );
-
-          if (!recoverable || !options.reconnect) {
-            if (
-              transferId &&
-              (await finalizeStreamTransferIfDestAtSize(
-                transferId,
-                sftpDest,
-                destPath,
-                fileSize,
-              ))
-            ) {
-              return;
-            }
-            throw err;
-          }
-
-          attempts += 1;
-          await closeTransferHandlesSafe(handles);
-
-          if (isParallelCopy) {
-            closeAllTransferSessions(
-              options.reconnect.deps,
-              options.reconnect,
-              parallelLanes,
-            );
-            const delayMs =
-              TRANSFER_SESSION_RESET_DELAYS_MS[
-                Math.min(
-                  attempts - 1,
-                  TRANSFER_SESSION_RESET_DELAYS_MS.length - 1,
-                )
-              ] ?? 3000;
-            pluginCtx().log.warn(
-              `Restarting parallel copy after segment exhaustion: ${transferId} (attempt=${attempts}, delayMs=${delayMs})`,
-            );
-            await new Promise((resolve) => setTimeout(resolve, delayMs));
-          } else {
-            const reset = await resetDedicatedTransferSessions(
-              options.reconnect,
-              attempts,
-              getErrorMessage(err, "copy failed"),
-            );
-            sftpSource = reset.sourceSftp;
-            sftpDest = reset.destSftp;
-          }
-        }
-      }
-    };
-
-    if (transferId) {
-      let abortFn: ((err: Error) => void) | null = null;
-      const control: ActiveXferControl = {
-        abort: (err) => abortFn?.(err),
-        closeResources: async () => {
-          await closeTransferHandlesSafe(handles);
-        },
-      };
-      activeXferControls.set(transferId, control);
-
-      try {
-        await new Promise<void>((resolve, reject) => {
-          abortFn = reject;
-          runCopyWithRetry().then(resolve).catch(reject);
-        });
-      } finally {
-        activeXferControls.delete(transferId);
-      }
-    } else {
-      await runCopyWithRetry();
-    }
-
-    stats.sourceReadSpanMs = hopSpanMs(sourceReadClock);
-    stats.destWriteSpanMs = hopSpanMs(destWriteClock);
-  } finally {
-    if (handles) {
-      await handles.close().catch(() => {});
-    }
-  }
-
-  return stats;
-}
-
-/** Source SFTP → local filesystem (skips SFTP write when dest SSH target is this host). */
-async function pipelinedSftpToLocalFile(
-  sourceSftp: SFTPWrapper,
-  sourcePath: string,
-  destPath: string,
-  options: PipelinedXferOptions = {},
-): Promise<PipelinedXferStats> {
-  let fileSize = options.fileSize ?? 0;
-  const stats = createEmptyXferStats();
-  stats.destWriteKind = "local";
-
-  if (!fileSize) {
-    const srcHandle = await promisifySftpOpen(
-      sourceSftp,
-      sourcePath,
-      SFTP_OPEN_READ,
-      0o666,
-    );
-    try {
-      const fstats = await promisifySftpFstat(sourceSftp, srcHandle);
-      fileSize = fstats.size;
-    } finally {
-      await promisifySftpClose(sourceSftp, srcHandle).catch(() => {});
-    }
-  }
-  if (fileSize <= 0) return stats;
-
-  stats.bytes = fileSize;
-  const localPath = sftpPathToLocalPath(destPath);
-  const progress = createThrottledProgress(options.onProgress);
-  const transferStart = Date.now();
-
-  await promisifyFastGet(sourceSftp, sourcePath, localPath, {
-    concurrency: options.pipelineConcurrency ?? SFTP_XFER_CONCURRENCY,
-    chunkSize: SFTP_XFER_CHUNK_SIZE,
-    fileSize,
-    step: (_total, chunk) => {
-      if (options.shouldAbort?.()) {
-        throw new TransferCancelledError();
-      }
-      progress.add(chunk);
-    },
-  });
-
-  progress.flush();
-  stats.sourceReadSpanMs = elapsedMs(transferStart);
-  stats.destWriteSpanMs = stats.sourceReadSpanMs;
-  return stats;
-}
-
-async function transferFileData(
-  sourceSftp: SFTPWrapper,
-  destSftp: SFTPWrapper,
-  destSession: SSHSessionLike,
-  sourcePath: string,
-  destPath: string,
-  fileSize: number,
-  onProgress?: (bytes: number) => void,
-  shouldAbort?: () => boolean,
-  transferId?: string,
-  reconnect?: TransferReconnectContext,
-  onResumeOffset?: (offset: number) => void,
-  parallelSegmentCount?: number,
-): Promise<PipelinedXferStats> {
-  const tuning = selectTransferTuning(
-    fileSize,
-    reconnect?.profileKey
-      ? getTransferProfile(reconnect.profileKey)
-      : undefined,
-    parallelSegmentCount,
-  );
-  const pipeOptions: PipelinedXferOptions = {
-    fileSize,
-    onProgress,
-    shouldAbort,
-    transferId,
-    reconnect,
-    onResumeOffset,
-    parallelSegmentCount: tuning.parallelSegmentCount,
-    pipelineConcurrency: tuning.pipelineConcurrency,
-  };
-
-  if (transferId) {
-    updateTransfer(transferId, {
-      parallelSegmentCount: tuning.parallelSegmentCount,
-    });
-  }
-
-  const startedAt = Date.now();
-  const shouldProfile = fileSize >= SFTP_XFER_SEGMENT_THRESHOLD;
-  pluginCtx().log.info(
-    `Selected adaptive transfer tuning: ${transferId} (fileSize=${fileSize}, parallelSegmentCount=${tuning.parallelSegmentCount}, pipelineConcurrency=${tuning.pipelineConcurrency}, explicitParallelOverride=${parallelSegmentCount !== undefined})`,
-  );
-  try {
-    const stats = isLocalSshEndpoint(destSession.ip)
-      ? await pipelinedSftpToLocalFile(
-          sourceSftp,
-          sourcePath,
-          destPath,
-          pipeOptions,
-        )
-      : await pipelinedSftpFile(
-          sourceSftp,
-          destSftp,
-          sourcePath,
-          destPath,
-          pipeOptions,
-        );
-    if (shouldProfile && reconnect?.profileKey) {
-      recordTransferProfile(reconnect.profileKey, {
-        bytes: stats.bytes,
-        durationMs: Math.max(1, Date.now() - startedAt),
-        lanes: tuning.parallelSegmentCount,
-        pipelineConcurrency: tuning.pipelineConcurrency,
-        failed: false,
-      });
-    }
-    return stats;
-  } catch (err) {
-    if (shouldProfile && reconnect?.profileKey) {
-      recordTransferProfile(reconnect.profileKey, {
-        bytes: 0,
-        durationMs: Math.max(1, Date.now() - startedAt),
-        lanes: tuning.parallelSegmentCount,
-        pipelineConcurrency: tuning.pipelineConcurrency,
-        failed: true,
-      });
-    }
-    throw err;
-  }
-}
-
-const DIRECT_BENCHMARK_BYTES = 8 * 1024 * 1024;
-const DIRECT_ROUTE_CACHE_MS = 10 * 60 * 1000;
-
-function getDirectEndpoint(
-  sourceSession: SSHSessionLike,
-  destSession: SSHSessionLike,
-): DirectTransferEndpoint | null {
-  if (
-    !sourceSession.ip ||
-    !destSession.ip ||
-    !destSession.username ||
-    !destSession.port ||
-    sourceSession.transferPlatform !== "unix" ||
-    destSession.transferPlatform !== "unix"
-  ) {
-    return null;
-  }
-  return {
-    host: destSession.ip,
-    port: destSession.port,
-    username: destSession.username,
-  };
-}
-
-function directRouteKey(
-  sourceSession: SSHSessionLike,
-  endpoint: DirectTransferEndpoint,
-): string {
-  return `${sourceSession.username ?? ""}@${sourceSession.ip}->${endpoint.username}@${endpoint.host}:${endpoint.port}`;
-}
-
-function transferProfileKey(
-  sourceSession: SSHSessionLike,
-  destSession: SSHSessionLike,
-  userId: string,
-): string {
-  return `${userId}:${sourceSession.username ?? ""}@${sourceSession.ip ?? "local"}:${sourceSession.port ?? 22}->${destSession.username ?? ""}@${destSession.ip ?? "local"}:${destSession.port ?? 22}`;
-}
-
-async function benchmarkTransferRoutes(
-  deps: HostTransferDeps,
-  transferId: string,
-  sourceSession: SSHSessionLike,
-  destSession: SSHSessionLike,
-  endpoint: DirectTransferEndpoint,
-  profileKey?: string,
-): Promise<{ useDirect: boolean; directMs?: number; relayMs?: number }> {
-  const key = directRouteKey(sourceSession, endpoint);
-  const cached = directRouteCache.get(key);
-  if (cached && cached.expiresAt > Date.now()) return cached;
-  const learned = profileKey
-    ? getRecentDirectRouteDecision(profileKey, DIRECT_ROUTE_CACHE_MS)
-    : undefined;
-  if (learned) {
-    const result = {
-      ...learned,
-      expiresAt: Date.now() + DIRECT_ROUTE_CACHE_MS,
-    };
-    directRouteCache.set(key, result);
-    return result;
-  }
-
-  updateTransfer(transferId, { phase: "benchmarking" });
-  const probe = await execCommand(
-    deps,
-    sourceSession,
-    `command -v rsync >/dev/null && ${buildDirectProbeCommand(endpoint)}`,
-    { timeoutMs: 8000 },
-  ).catch(() => ({ code: 1, stderr: "" }));
-  if (probe.code !== 0) {
-    const result = {
-      useDirect: false,
-      expiresAt: Date.now() + DIRECT_ROUTE_CACHE_MS,
-    };
-    directRouteCache.set(key, result);
-    return result;
-  }
-
-  const probeId = randomUUID();
-  const sourceProbe = `/tmp/termix-route-${probeId}.bin`;
-  const directProbe = `/tmp/termix-route-${probeId}.direct`;
-  const relayProbe = `/tmp/termix-route-${probeId}.relay`;
-  const cleanup = async () => {
-    await Promise.allSettled([
-      execCommand(deps, sourceSession, `rm -f ${quoteShell(sourceProbe)}`),
-      execCommand(
-        deps,
-        destSession,
-        `rm -f ${quoteShell(directProbe)} ${quoteShell(relayProbe)}`,
-      ),
-    ]);
-  };
-
-  try {
-    const created = await execCommand(
-      deps,
-      sourceSession,
-      `dd if=/dev/zero of=${quoteShell(sourceProbe)} bs=1048576 count=8 status=none`,
-      { timeoutMs: 8000 },
-    );
-    if (created.code !== 0) throw new Error("Failed to create route probe");
-
-    const directStart = performance.now();
-    const direct = await execCommand(
-      deps,
-      sourceSession,
-      buildDirectRsyncCommand(endpoint, [sourceProbe], directProbe, false),
-      { timeoutMs: 15000 },
-    );
-    const directMs = performance.now() - directStart;
-    if (direct.code !== 0) throw new Error("Direct route probe failed");
-
-    const [sourceSftp, destSftp] = await Promise.all([
-      deps.getSessionSftp(sourceSession),
-      deps.getSessionSftp(destSession),
-    ]);
-    const relayStart = performance.now();
-    const relayDeadline = Date.now() + 15000;
-    await transferFileData(
-      sourceSftp,
-      destSftp,
-      destSession,
-      sourceProbe,
-      relayProbe,
-      DIRECT_BENCHMARK_BYTES,
-      undefined,
-      () => Date.now() >= relayDeadline,
-    );
-    const relayMs = performance.now() - relayStart;
-    const profile = profileKey
-      ? recordDirectRouteBenchmark(profileKey, directMs, relayMs)
-      : undefined;
-    const useDirect =
-      shouldUseDirectTransfer(directMs, relayMs) &&
-      (!profile || profile.outcomeSamples < 2 || profile.failureRate < 0.25);
-    const result = {
-      useDirect,
-      directMs,
-      relayMs,
-      expiresAt: Date.now() + DIRECT_ROUTE_CACHE_MS,
-    };
-    directRouteCache.set(key, result);
-    updateTransfer(transferId, {
-      timings: {
-        ...activeTransfers.get(transferId)?.timings,
-        directBenchmarkMs: directMs,
-        relayBenchmarkMs: relayMs,
-      },
-    });
-    return result;
-  } catch {
-    const result = {
-      useDirect: false,
-      expiresAt: Date.now() + DIRECT_ROUTE_CACHE_MS,
-    };
-    directRouteCache.set(key, result);
-    return result;
-  } finally {
-    await cleanup();
-  }
-}
-
-async function tryAdaptiveDirectTransfer(
-  deps: HostTransferDeps,
-  transferId: string,
-  sourceSession: SSHSessionLike,
-  destSession: SSHSessionLike,
-  sourcePaths: string[],
-  destPath: string,
-  move: boolean,
-  reconnectMeta: TransferReconnectMeta,
-): Promise<TransferProgress | null> {
-  const endpoint = getDirectEndpoint(sourceSession, destSession);
-  if (!endpoint) return null;
-
-  const sourceSftp = await deps.getSessionSftp(sourceSession);
-  const firstStats = await promisifySftpStat(sourceSftp, sourcePaths[0]);
-  const destIsDirectory = sourcePaths.length > 1 || firstStats.isDirectory();
-  const summary = await scanSourcePathsForRouting(
-    sourceSftp,
-    sourcePaths,
-    transferId,
-  );
-  if (!shouldBenchmarkDirectTransfer(summary.totalBytes)) return null;
-
-  const route = await benchmarkTransferRoutes(
-    deps,
-    transferId,
-    sourceSession,
-    destSession,
-    endpoint,
-    reconnectMeta.profileKey,
-  );
-  if (!route.useDirect) return null;
-  if (destIsDirectory) {
-    await ensureDestDirectory(deps, destSession, destPath);
-  } else {
-    await ensureDestParentForFile(deps, destSession, destPath);
-  }
-
-  updateTransfer(transferId, {
-    method: "direct_rsync",
-    phase: "transferring",
-    bytesTransferred: 0,
-    totalBytes: summary.totalBytes,
-  });
-  const transferStart = performance.now();
-  let outputBuffer = "";
-
-  try {
-    const result = await execCommand(
-      deps,
-      sourceSession,
-      buildDirectRsyncCommand(endpoint, sourcePaths, destPath, destIsDirectory),
-      {
-        shouldAbort: createTransferShouldAbort(transferId),
-        onOutput: (chunk) => {
-          outputBuffer = `${outputBuffer}${chunk.toString()}`.slice(-2048);
-          const matches = [...outputBuffer.matchAll(/([\d,]+)\s+(\d+)%/g)];
-          const last = matches.at(-1);
-          if (!last) return;
-          const bytes = Number(last[1].replace(/,/g, ""));
-          if (Number.isFinite(bytes)) {
-            updateTransfer(transferId, {
-              bytesTransferred: Math.min(bytes, summary.totalBytes),
-            });
-          }
-        },
-      },
-    );
-    if (result.code !== 0) {
-      throw new Error(result.stderr || "Direct rsync transfer failed");
-    }
-
-    const workItems: FileWorkItem[] = [];
-    if (destIsDirectory) {
-      for (const sourcePath of sourcePaths) {
-        workItems.push(
-          ...(await collectFileWorkItems(sourceSftp, sourcePath, destPath)),
-        );
-      }
-    } else {
-      workItems.push({
-        sourcePath: sourcePaths[0],
-        destPath,
-        mode: firstStats.mode,
-        size: firstStats.size,
-      });
-    }
-    for (const item of workItems) {
-      await verifyTransferredFile(
-        deps,
-        transferId,
-        reconnectMeta,
-        item.sourcePath,
-        item.destPath,
-      );
-    }
-    if (move) {
-      await deleteSourcePathsAfterSuccess(
-        deps,
-        transferId,
-        sourceSession,
-        sourcePaths,
-      );
-    }
-
-    const transferMs = performance.now() - transferStart;
-    if (reconnectMeta.profileKey) {
-      recordDirectRouteOutcome(
-        reconnectMeta.profileKey,
-        false,
-        Date.now(),
-        DIRECT_ROUTE_CACHE_MS,
-      );
-    }
-    return finalizeTransfer(transferId, {
-      status: "success",
-      phase: "verifying",
-      method: "direct_rsync",
-      bytesTransferred: summary.totalBytes,
-      totalBytes: summary.totalBytes,
-      sourcePaths,
-      destPath,
-      sourceDeleted: move,
-      moveRequested: move,
-      integrityVerified: true,
-      timings: {
-        ...activeTransfers.get(transferId)?.timings,
-        transferMs,
-        transferBytes: summary.totalBytes,
-        endToEndMbPerSec: computeTransferMbPerSec(
-          summary.totalBytes,
-          transferMs,
-        ),
-      },
-    });
-  } catch (error) {
-    if (error instanceof TransferCancelledError) throw error;
-    pluginCtx().log.warn(
-      `Direct transfer failed, falling back to relay: ${transferId} (${getErrorMessage(error, "Direct transfer failed")})`,
-    );
-    if (reconnectMeta.profileKey) {
-      recordDirectRouteOutcome(
-        reconnectMeta.profileKey,
-        true,
-        Date.now(),
-        DIRECT_ROUTE_CACHE_MS,
-      );
-    }
-    directRouteCache.set(directRouteKey(sourceSession, endpoint), {
-      useDirect: false,
-      expiresAt: Date.now() + DIRECT_ROUTE_CACHE_MS,
-    });
-    updateTransfer(transferId, {
-      method: undefined,
-      phase: "transferring",
-      bytesTransferred: 0,
-      integrityVerified: false,
-    });
-    return null;
-  }
-}
-
-async function transferSingleFile(
-  deps: HostTransferDeps,
-  transferId: string,
-  sourceSession: SSHSessionLike,
-  destSession: SSHSessionLike,
-  sourcePath: string,
-  destPath: string,
-  move: boolean,
-  reconnectMeta: TransferReconnectMeta,
-  requestedParallelSegments?: number,
-): Promise<TransferProgress> {
-  const sourceSftp = await deps.getSessionSftp(sourceSession);
-  const destSftp = await deps.getSessionSftp(destSession);
-  const shouldAbort = createTransferShouldAbort(transferId);
-
-  const reconnect = buildTransferReconnectContext(
-    deps,
-    transferId,
-    reconnectMeta,
-  );
-
-  const stats = await promisifySftpStat(sourceSftp, sourcePath);
-  if (!stats.isFile()) {
-    throw new Error(`Source is not a regular file: ${sourcePath}`);
-  }
-
-  updateTransfer(transferId, {
-    method: "stream",
-    phase: "transferring",
-    totalBytes: stats.size,
-  });
-
-  let bytesTransferred = 0;
-  try {
-    const destStat = await promisifySftpStat(destSftp, destPath);
-    bytesTransferred = Math.min(destStat.size, stats.size);
-  } catch {
-    /* destination file does not exist yet */
-  }
-
-  updateTransfer(transferId, { bytesTransferred });
-  const prepareStart = Date.now();
-  await ensureDestParentForFile(deps, destSession, destPath);
-  const prepareDestMs = elapsedMs(prepareStart);
-  updateTransfer(transferId, { timings: { prepareDestMs } });
-
-  const syncProgress = (absoluteOffset: number) => {
-    bytesTransferred = absoluteOffset;
-    updateTransfer(transferId, { bytesTransferred: absoluteOffset });
-  };
-
-  const tuning = selectTransferTuning(
-    stats.size,
-    reconnect.profileKey ? getTransferProfile(reconnect.profileKey) : undefined,
-    requestedParallelSegments,
-  );
-  const parallelLanes = tuning.parallelSegmentCount;
-  const useAbsoluteProgressOnly = parallelLanes > 1;
-
-  throwIfCancelled(transferId);
-  trackDestArtifact(transferId, destPath);
-  await transferFileData(
-    sourceSftp,
-    destSftp,
-    destSession,
-    sourcePath,
-    destPath,
-    stats.size,
-    useAbsoluteProgressOnly
-      ? undefined
-      : (n) => {
-          bytesTransferred += n;
-          updateTransfer(transferId, { bytesTransferred });
-        },
-    shouldAbort,
-    transferId,
-    reconnect,
-    syncProgress,
-    requestedParallelSegments,
-  );
-
-  await verifyTransferredFile(
-    deps,
-    transferId,
-    reconnectMeta,
-    sourcePath,
-    destPath,
-  );
-
-  if (move) {
-    await deleteSourcePathsAfterSuccess(deps, transferId, sourceSession, [
-      sourcePath,
-    ]);
-  }
-
-  return finalizeTransfer(transferId, {
-    status: "success",
-    phase: "transferring",
-    method: "stream",
-    bytesTransferred: stats.size,
-    totalBytes: stats.size,
-    sourcePaths: [sourcePath],
-    destPath,
-    sourceDeleted: move,
-    moveRequested: move,
-    timings: buildStreamTransferTimings(transferId, stats.size, prepareDestMs),
-  });
-}
-
-async function cleanupDestItems(
-  deps: HostTransferDeps,
-  destSession: SSHSessionLike,
-  destDir: string,
-  basenames: string[],
-): Promise<void> {
-  const destSftp = await deps.getSessionSftp(destSession);
-  for (const name of basenames) {
-    const target = joinPath(destDir, name);
-    try {
-      await deletePathSftp(destSftp, target);
-    } catch {
-      /* best effort */
-    }
-  }
-}
-
-async function deleteSourcePaths(
-  deps: HostTransferDeps,
-  sourceSession: SSHSessionLike,
-  sourcePaths: string[],
-): Promise<void> {
-  const sourceSftp = await deps.getSessionSftp(sourceSession);
-  for (const path of sourcePaths) {
-    try {
-      await deletePathSftp(sourceSftp, path);
-    } catch {
-      /* best effort */
-    }
-  }
-}
-
-async function transferViaTar(
-  deps: HostTransferDeps,
-  transferId: string,
-  sourceSession: SSHSessionLike,
-  destSession: SSHSessionLike,
-  sourcePaths: string[],
-  destPath: string,
-  move: boolean,
-  reconnectMeta: TransferReconnectMeta,
-): Promise<TransferProgress> {
-  const sourceSftp = await deps.getSessionSftp(sourceSession);
-  const destSftp = await deps.getSessionSftp(destSession);
-  const reconnect = buildTransferReconnectContext(
-    deps,
-    transferId,
-    reconnectMeta,
-  );
-  const archiveId = randomUUID();
-  const tempArchive = `/tmp/termix-transfer-${archiveId}.tar.gz`;
-  updateTransfer(transferId, { tempArchivePath: tempArchive });
-  trackDestArtifact(transferId, tempArchive);
-  const workingDir = getWorkingDir(sourcePaths);
-  const basenames = sourcePaths.map((p) => basename(p));
-  const escapedNames = basenames.map((n) => `'${escapeShell(n)}'`).join(" ");
-  const escapedDir = escapeShell(workingDir);
-  const escapedArchive = escapeShell(tempArchive);
-  const escapedDest = escapeShell(destPath);
-
-  await ensureDestDirectory(deps, destSession, destPath);
-
-  updateTransfer(transferId, {
-    method: "tar",
-    phase: "compressing",
-  });
-
-  throwIfCancelled(transferId);
-  const compressStart = Date.now();
-  const compressCmd = `cd '${escapedDir}' && tar -czf '${escapedArchive}' ${escapedNames}`;
-  const compressResult = await execCommand(deps, sourceSession, compressCmd);
-  const compressMs = elapsedMs(compressStart);
-  updateTransfer(transferId, { timings: { compressMs } });
-  if (compressResult.code !== 0) {
-    throw new Error(
-      compressResult.stderr || "Failed to compress on source host",
-    );
-  }
-
-  throwIfCancelled(transferId);
-  let archiveSize = 0;
-  try {
-    const archiveStats = await promisifySftpStat(sourceSftp, tempArchive);
-    archiveSize = archiveStats.size;
-  } catch {
-    /* size unknown */
-  }
-
-  updateTransfer(transferId, {
-    phase: "transferring",
-    totalBytes: archiveSize,
-    bytesTransferred: 0,
-  });
-
-  let bytesTransferred = 0;
-  const transferStart = Date.now();
-  const xferStats = createEmptyXferStats();
-  const syncProgress = (absoluteOffset: number) => {
-    bytesTransferred = absoluteOffset;
-    updateTransfer(transferId, { bytesTransferred: absoluteOffset });
-  };
-  try {
-    const fileStats = await transferFileData(
-      sourceSftp,
-      destSftp,
-      destSession,
-      tempArchive,
-      tempArchive,
-      archiveSize,
-      (n) => {
-        bytesTransferred += n;
-        updateTransfer(transferId, { bytesTransferred });
-      },
-      () => cancelRequestedTransfers.has(transferId),
-      transferId,
-      reconnect,
-      syncProgress,
-    );
-    mergeXferStats(xferStats, fileStats);
-    await verifyTransferredFile(
-      deps,
-      transferId,
-      reconnectMeta,
-      tempArchive,
-      tempArchive,
-    );
-  } catch (err) {
-    if (!(err instanceof TransferCancelledError)) {
-      await promisifySftpUnlink(destSftp, tempArchive).catch(() => {});
-      await cleanupDestItems(deps, destSession, destPath, basenames);
-    }
-    throw err;
-  } finally {
-    await promisifySftpUnlink(sourceSftp, tempArchive);
-  }
-  throwIfCancelled(transferId);
-  const transferMs = elapsedMs(transferStart);
-  const hopTimings = buildTransferHopTimings(xferStats, transferMs);
-  updateTransfer(transferId, {
-    timings: {
-      ...activeTransfers.get(transferId)?.timings,
-      transferMs,
-      ...hopTimings,
-    },
-  });
-
-  updateTransfer(transferId, { phase: "extracting" });
-
-  throwIfCancelled(transferId);
-  const extractStart = Date.now();
-  const extractCmd = `tar -xzf '${escapedArchive}' -C '${escapedDest}'`;
-  const extractResult = await execCommand(deps, destSession, extractCmd);
-  const extractMs = elapsedMs(extractStart);
-
-  await promisifySftpUnlink(destSftp, tempArchive);
-
-  if (extractResult.code !== 0) {
-    await cleanupDestItems(deps, destSession, destPath, basenames);
-    throw new Error(
-      extractResult.stderr || "Failed to extract on destination host",
-    );
-  }
-
-  if (move) {
-    await deleteSourcePathsAfterSuccess(
-      deps,
-      transferId,
-      sourceSession,
-      sourcePaths,
-    );
-  }
-
-  return finalizeTransfer(transferId, {
-    status: "success",
-    phase: "extracting",
-    method: "tar",
-    bytesTransferred,
-    totalBytes: archiveSize,
-    sourcePaths,
-    destPath,
-    sourceDeleted: move,
-    moveRequested: move,
-    timings: {
-      ...activeTransfers.get(transferId)?.timings,
-      extractMs,
-      ...hopTimings,
-    },
-  });
-}
-
-async function transferViaItemSftp(
-  deps: HostTransferDeps,
-  transferId: string,
-  sourceSession: SSHSessionLike,
-  destSession: SSHSessionLike,
-  sourcePaths: string[],
-  destPath: string,
-  move: boolean,
-  destPlatform: TransferPlatform,
-  reconnectMeta: TransferReconnectMeta,
-): Promise<TransferProgress> {
-  const sourceSftp = await deps.getSessionSftp(sourceSession);
-  const destSftp = await deps.getSessionSftp(destSession);
-  const reconnect = buildTransferReconnectContext(
-    deps,
-    transferId,
-    reconnectMeta,
-  );
-
-  const createdDirs = new Set<string>();
-  await ensureDirectoryTreeSftp(destSftp, destPath, createdDirs);
-
-  const allWork: FileWorkItem[] = [];
-  for (const sourcePath of sourcePaths) {
-    const items = await collectFileWorkItems(sourceSftp, sourcePath, destPath);
-    allWork.push(...items);
-  }
-
-  allWork.sort((a, b) => b.size - a.size);
-
-  const totalBytes = allWork.reduce((sum, item) => sum + item.size, 0);
-
-  updateTransfer(transferId, {
-    method: "item_sftp",
-    phase: "transferring",
-    totalItems: allWork.length,
-    itemsCompleted: 0,
-    totalBytes,
-    bytesTransferred: 0,
-  });
-
-  const failedPaths: string[] = [];
-  const createdFiles: string[] = [];
-  let itemsCompleted = 0;
-  let bytesTransferred = 0;
-  const transferStart = Date.now();
-  const xferStats = createEmptyXferStats();
-
-  for (const item of allWork) {
-    throwIfCancelled(transferId);
-    trackDestArtifact(transferId, item.destPath);
-    const bytesBeforeItem = bytesTransferred;
-    try {
-      const parentDir = dirname(item.destPath);
-      if (parentDir && !isRootOnlyPath(parentDir)) {
-        await ensureDirectoryTreeSftp(destSftp, parentDir, createdDirs);
-      }
-      const itemStats = await promisifySftpStat(sourceSftp, item.sourcePath);
-      const itemXferStats = await transferFileData(
-        sourceSftp,
-        destSftp,
-        destSession,
-        item.sourcePath,
-        item.destPath,
-        itemStats.size,
-        (n) => {
-          bytesTransferred += n;
-          updateTransfer(transferId, { bytesTransferred });
-        },
-        () => cancelRequestedTransfers.has(transferId),
-        transferId,
-        reconnect,
-        (absoluteOffset) => {
-          bytesTransferred = bytesBeforeItem + absoluteOffset;
-          updateTransfer(transferId, { bytesTransferred });
-        },
-      );
-      mergeXferStats(xferStats, itemXferStats);
-      await verifyTransferredFile(
-        deps,
-        transferId,
-        reconnectMeta,
-        item.sourcePath,
-        item.destPath,
-      );
-      updateTransfer(transferId, { phase: "transferring" });
-      if (destPlatform !== "windows") {
-        await promisifySftpChmod(destSftp, item.destPath, item.mode);
-      }
-      createdFiles.push(item.destPath);
-      itemsCompleted++;
-      updateTransfer(transferId, { itemsCompleted, bytesTransferred });
-    } catch (err) {
-      if (isPermissionError(err as Error)) {
-        failedPaths.push(item.sourcePath);
-        itemsCompleted++;
-        updateTransfer(transferId, { itemsCompleted, bytesTransferred });
-        continue;
-      }
-      if (!(err instanceof TransferCancelledError)) {
-        await deletePathSftp(destSftp, item.destPath).catch(() => {});
-        for (const created of [...createdFiles].reverse()) {
-          await deletePathSftp(destSftp, created).catch(() => {});
-        }
-      }
-      throw err;
-    }
-  }
-
-  const transferMs = elapsedMs(transferStart);
-  const hopTimings = buildTransferHopTimings(xferStats, transferMs);
-
-  const status: TransferStatus = failedPaths.length > 0 ? "partial" : "success";
-
-  // Move only after every file succeeded — never delete source on partial transfer
-  if (status === "success" && move) {
-    await deleteSourcePathsAfterSuccess(
-      deps,
-      transferId,
-      sourceSession,
-      sourcePaths,
-    );
-  }
-
-  return finalizeTransfer(transferId, {
-    status,
-    phase: "transferring",
-    method: "item_sftp",
-    itemsCompleted,
-    totalItems: allWork.length,
-    failedPaths: failedPaths.length > 0 ? failedPaths : undefined,
-    sourcePaths,
-    destPath,
-    sourceDeleted: status === "success" && move,
-    moveRequested: move,
-    integrityVerified: status === "success",
-    timings: {
-      ...activeTransfers.get(transferId)?.timings,
-      transferMs,
-      ...hopTimings,
-    },
-  });
-}
-
-async function runTransfer(
-  deps: HostTransferDeps,
-  transferId: string,
-  request: TransferRequest,
-): Promise<void> {
-  await initializeTransferProfiles();
-  const {
-    sourceSessionId: browseSourceSessionId,
-    sourcePaths,
-    destSessionId: browseDestSessionId,
-    destPath,
-    move = false,
-    userId,
-    methodPreference = "auto",
-    parallelSegmentCount: requestParallelSegments,
-  } = request;
-
-  const parallelSegmentCount = requestParallelSegments;
-
-  const dedicatedSourceSessionId = `xfer:${transferId}:src`;
-  const dedicatedDestSessionId = `xfer:${transferId}:dst`;
-  const runStart = Date.now();
-  const reconnectMeta: TransferReconnectMeta = {
-    userId,
-    browseSourceSessionId,
-    browseDestSessionId,
-    dedicatedSourceSessionId,
-    dedicatedDestSessionId,
-  };
-
-  try {
-    const sourceSession = await deps.openDedicatedTransferSession(
-      browseSourceSessionId,
-      dedicatedSourceSessionId,
-      userId,
-      transferId,
-    );
-    const destSession = await deps.openDedicatedTransferSession(
-      browseDestSessionId,
-      dedicatedDestSessionId,
-      userId,
-      transferId,
-    );
-
-    reconnectMeta.profileKey = transferProfileKey(
-      sourceSession,
-      destSession,
-      userId,
-    );
-
-    sourceSession.lastActive = Date.now();
-    destSession.lastActive = Date.now();
-
-    updateTransfer(transferId, {
-      parallelSegmentCount:
-        parallelSegmentCount ?? DEFAULT_PARALLEL_SEGMENT_COUNT,
-      dedicatedSourceSessionId,
-      dedicatedDestSessionId,
-    });
-
-    const pathHints = [destPath, ...sourcePaths];
-    const sourcePlatform = await detectTransferPlatform(
-      deps,
-      sourceSession,
-      pathHints,
-    );
-    const destPlatform = await detectTransferPlatform(
-      deps,
-      destSession,
-      pathHints,
-    );
-
-    const sourceSftp = await deps.getSessionSftp(sourceSession);
-
-    for (const path of sourcePaths) {
-      try {
-        await promisifySftpStat(sourceSftp, path);
-      } catch {
-        throw new Error(`Source not found: ${path}`);
-      }
-    }
-
-    if (browseSourceSessionId === browseDestSessionId) {
-      for (const src of sourcePaths) {
-        if (pathsOverlap(src, destPath)) {
-          throw new Error("Source and destination paths overlap");
-        }
-      }
-    }
-
-    const directResult =
-      methodPreference === "auto"
-        ? await tryAdaptiveDirectTransfer(
-            deps,
-            transferId,
-            sourceSession,
-            destSession,
-            sourcePaths,
-            destPath,
-            move,
-            reconnectMeta,
-          )
-        : null;
-    if (directResult) {
-      updateTransfer(transferId, {
-        timings: {
-          ...directResult.timings,
-          totalMs: elapsedMs(runStart),
-        },
-      });
-      return;
-    }
-
-    let useArchive = sourcePaths.length > 1;
-
-    if (sourcePaths.length === 1) {
-      const stats = await promisifySftpStat(sourceSftp, sourcePaths[0]);
-      useArchive = stats.isDirectory();
-    }
-
-    if (!useArchive) {
-      await transferSingleFile(
-        deps,
-        transferId,
-        sourceSession,
-        destSession,
-        sourcePaths[0],
-        destPath,
-        move,
-        reconnectMeta,
-        parallelSegmentCount,
-      );
-    } else {
-      const prepareStart = Date.now();
-      await ensureDestDirectory(deps, destSession, destPath);
-      updateTransfer(transferId, {
-        timings: { prepareDestMs: elapsedMs(prepareStart) },
-      });
-
-      const sourceHasTar =
-        sourcePlatform === "unix" &&
-        (await checkTarAvailable(deps, sourceSession));
-      const destHasTar =
-        destPlatform === "unix" && (await checkTarAvailable(deps, destSession));
-
-      throwIfCancelled(transferId);
-      const scanSummary = await scanSourcePathsForRouting(
-        sourceSftp,
-        sourcePaths,
-        transferId,
-      );
-      const archiveMethod = resolveArchiveTransferMethod(
-        methodPreference,
-        scanSummary,
-        sourcePlatform,
-        destPlatform,
-        sourceHasTar,
-        destHasTar,
-      );
-
-      pluginCtx().log.info(
-        `Resolved archive transfer method: ${transferId} (methodPreference=${methodPreference}, archiveMethod=${archiveMethod}, fileCount=${scanSummary.fileCount}, totalBytes=${scanSummary.totalBytes}, incompressibleRatio=${scanSummary.incompressibleRatio})`,
-      );
-
-      if (archiveMethod === "tar") {
-        await transferViaTar(
-          deps,
-          transferId,
-          sourceSession,
-          destSession,
-          sourcePaths,
-          destPath,
-          move,
-          reconnectMeta,
-        );
-      } else {
-        await transferViaItemSftp(
-          deps,
-          transferId,
-          sourceSession,
-          destSession,
-          sourcePaths,
-          destPath,
-          move,
-          destPlatform,
-          reconnectMeta,
-        );
-      }
-    }
-
-    pluginCtx().log.info(
-      `Host transfer completed: ${transferId} (sourcePaths=${sourcePaths.join(", ")}, destPath=${destPath}, move=${move}, totalMs=${elapsedMs(runStart)})`,
-    );
-    updateTransfer(transferId, {
-      moveRequested: move,
-      timings: {
-        ...activeTransfers.get(transferId)?.timings,
-        totalMs: elapsedMs(runStart),
-      },
-    });
-  } catch (err) {
-    if (err instanceof TransferCancelledError) {
-      const current = activeTransfers.get(transferId);
-      finalizeTransfer(
-        transferId,
-        cancelledProgressPatch(current, {
-          status: "cancelled",
-          phase: current?.phase ?? "transferring",
-          message: "Transfer cancelled by user",
-          method: current?.method,
-          sourcePaths,
-          destPath,
-          bytesTransferred: current?.bytesTransferred,
-          totalBytes: current?.totalBytes,
-          itemsCompleted: current?.itemsCompleted,
-          totalItems: current?.totalItems,
-          moveRequested: move,
-          sourceDeleted: false,
-          integrityVerified: false,
-          timings: {
-            ...current?.timings,
-            totalMs: elapsedMs(runStart),
-          },
-        }),
-      );
-      pluginCtx().log.info(
-        `Host transfer cancelled: ${transferId} (sourcePaths=${sourcePaths.join(", ")}, destPath=${destPath})`,
-      );
-      return;
-    }
-
-    const current = activeTransfers.get(transferId);
-    const message = getErrorMessage(err, "Transfer failed");
-
-    if (
-      sourcePaths.length === 1 &&
-      current?.method === "stream" &&
-      current.destPath &&
-      current.totalBytes
-    ) {
-      try {
-        const destSession = await deps.openDedicatedTransferSession(
-          browseDestSessionId,
-          dedicatedDestSessionId,
-          userId,
-          transferId,
-          { allowBrowseDisconnected: true },
-        );
-        const finalized = await tryFinalizeStreamTransferIfDestComplete(
-          deps,
-          transferId,
-          destSession,
-          current.destPath,
-          current.totalBytes,
-          {
-            sourcePaths,
-            moveRequested: move,
-            sourceDeleted: current.sourceDeleted,
-          },
-          () =>
-            verifyTransferredFile(
-              deps,
-              transferId,
-              reconnectMeta,
-              sourcePaths[0],
-              current.destPath!,
-            ),
-        );
-        if (finalized) {
-          pluginCtx().log.info(
-            `Host transfer succeeded after destination verify: ${transferId} (sourcePaths=${sourcePaths.join(", ")}, destPath=${destPath})`,
-          );
-          return;
-        }
-      } catch {
-        /* fall through to error */
-      }
-    }
-
-    finalizeTransfer(
-      transferId,
-      failedProgressPatch(current, {
-        status: "error",
-        phase: current?.phase ?? "transferring",
-        message,
-        method: current?.method,
-        sourcePaths,
-        destPath,
-        bytesTransferred: current?.bytesTransferred,
-        totalBytes: current?.totalBytes,
-        itemsCompleted: current?.itemsCompleted,
-        totalItems: current?.totalItems,
-        moveRequested: move,
-        integrityVerified: false,
-        timings: {
-          ...current?.timings,
-          totalMs: elapsedMs(runStart),
-        },
-      }),
-    );
-    pluginCtx().log.error(
-      `${err instanceof TransferStalledError ? "Host transfer stalled" : "Host transfer failed"}: ${transferId} (sourcePaths=${sourcePaths.join(", ")}, destPath=${destPath})`,
-      err as Error,
-    );
-  } finally {
-    deps.closeDedicatedTransferSession(dedicatedSourceSessionId);
-    deps.closeDedicatedTransferSession(dedicatedDestSessionId);
-  }
-}
-
-export function getTransferStatus(
-  transferId: string,
-  userId: string,
-): TransferProgress | null {
-  checkHungTransfers();
-  const progress = activeTransfers.get(transferId);
-  if (!progress || progress.userId !== userId) return null;
-  return progress;
-}
-
-export function listActiveTransfers(userId: string): TransferProgress[] {
-  return Array.from(activeTransfers.values()).filter(
-    (progress) => progress.userId === userId && progress.status === "running",
-  );
-}
-
-export async function cleanupCancelledTransfer(
-  deps: HostTransferDeps,
-  transferId: string,
-  userId: string,
-): Promise<{ removedPaths: string[]; failedPaths: string[] }> {
-  const progress = activeTransfers.get(transferId);
-  if (!progress || progress.userId !== userId) {
-    throw new Error("Transfer not found");
-  }
-  if (progress.status !== "cancelled") {
-    throw new Error("Transfer is not cancelled");
-  }
-  if (progress.cleanupCompleted) {
-    return { removedPaths: [], failedPaths: [] };
-  }
-  if (!progress.destSessionId) {
-    throw new Error("Transfer has no destination session");
-  }
-
-  const pathsToRemove = buildCleanupPaths(progress);
-  if (pathsToRemove.length === 0) {
-    updateTransfer(transferId, { cleanupCompleted: true });
-    return { removedPaths: [], failedPaths: [] };
-  }
-
-  const cleanupSessionId = `xfer:cleanup:${transferId}:dst`;
-  const removedPaths: string[] = [];
-  const failedPaths: string[] = [];
-
-  try {
-    const destSession = await deps.openDedicatedTransferSession(
-      progress.destSessionId,
-      cleanupSessionId,
-      userId,
-      transferId,
-      { allowBrowseDisconnected: true },
-    );
-    const destSftp = await deps.getSessionSftp(destSession);
-
-    for (const path of pathsToRemove) {
-      try {
-        await deletePathSftp(destSftp, path);
-        removedPaths.push(path);
-      } catch {
-        failedPaths.push(path);
-      }
-    }
-  } finally {
-    deps.closeDedicatedTransferSession(cleanupSessionId);
-  }
-
-  updateTransfer(transferId, { cleanupCompleted: true });
-  return { removedPaths, failedPaths };
-}
-
-export function retryHostTransfer(
-  deps: HostTransferDeps,
-  transferId: string,
-  userId: string,
-): boolean {
-  const progress = activeTransfers.get(transferId);
-  if (
-    !progress ||
-    progress.userId !== userId ||
-    progress.status !== "error" ||
-    !progress.retryable ||
-    !progress.requestSnapshot
-  ) {
-    return false;
-  }
-
-  void (async () => {
-    if (
-      progress.method === "stream" &&
-      progress.destPath &&
-      progress.totalBytes &&
-      progress.destSessionId
-    ) {
-      const destId =
-        progress.dedicatedDestSessionId ?? `xfer:${transferId}:dst`;
-      try {
-        const destSession = await deps.openDedicatedTransferSession(
-          progress.destSessionId,
-          destId,
-          userId,
-          transferId,
-          { allowBrowseDisconnected: true },
-        );
-        const done = await tryFinalizeStreamTransferIfDestComplete(
-          deps,
-          transferId,
-          destSession,
-          progress.destPath,
-          progress.totalBytes,
-          {
-            sourcePaths: progress.sourcePaths,
-            moveRequested: progress.moveRequested,
-          },
-        );
-        if (done) {
-          return;
-        }
-      } catch {
-        /* destination not ready — restart transfer below */
-      }
-    }
-
-    const latest = activeTransfers.get(transferId);
-    if (!latest || latest.status !== "error" || !latest.requestSnapshot) {
-      return;
-    }
-
-    updateTransfer(transferId, {
-      status: "running",
-      phase: "transferring",
-      message: undefined,
-      retryable: false,
-      parallelSegmentCount:
-        latest.requestSnapshot?.parallelSegmentCount ??
-        latest.parallelSegmentCount,
-    });
-
-    await runTransfer(deps, transferId, {
-      ...latest.requestSnapshot,
-      userId,
-      parallelSegmentCount: latest.requestSnapshot.parallelSegmentCount,
-    });
-  })();
-
-  return true;
-}
-
-export async function previewArchiveTransferMethod(
-  deps: HostTransferDeps,
-  request: {
-    sourceSessionId: string;
-    destSessionId: string;
-    sourcePaths: string[];
-    destPath: string;
-    methodPreference?: TransferMethodPreference;
-    userId: string;
-  },
-): Promise<TransferMethodPreview> {
-  const {
-    sourceSessionId,
-    destSessionId,
-    sourcePaths,
-    destPath,
-    methodPreference = "auto",
-    userId,
-  } = request;
-
-  const sourceSession = deps.sshSessions[sourceSessionId];
-  const destSession = deps.sshSessions[destSessionId];
-
-  if (!sourceSession?.isConnected || !destSession?.isConnected) {
-    throw new Error("SSH session not connected");
-  }
-
-  if (
-    !deps.verifySessionOwnership(sourceSession, userId) ||
-    !deps.verifySessionOwnership(destSession, userId)
-  ) {
-    throw new Error("Session access denied");
-  }
-
-  const pathHints = [destPath, ...sourcePaths];
-  const sourcePlatform = await detectTransferPlatform(
-    deps,
-    sourceSession,
-    pathHints,
-  );
-  const destPlatform = await detectTransferPlatform(
-    deps,
-    destSession,
-    pathHints,
-  );
-
-  const sourceSftp = await deps.getSessionSftp(sourceSession);
-  const scanSummary = await scanSourcePathsForRouting(
-    sourceSftp,
-    sourcePaths,
-    "preview",
-  );
-
-  const sourceHasTar =
-    sourcePlatform === "unix" && (await checkTarAvailable(deps, sourceSession));
-  const destHasTar =
-    destPlatform === "unix" && (await checkTarAvailable(deps, destSession));
-
-  const resolvedMethod = resolveArchiveTransferMethod(
-    methodPreference,
-    scanSummary,
-    sourcePlatform,
-    destPlatform,
-    sourceHasTar,
-    destHasTar,
-  );
-
-  const reasonKey = getArchiveTransferReasonKey(
-    methodPreference,
-    resolvedMethod,
-    scanSummary,
-    sourcePlatform,
-    destPlatform,
-    sourceHasTar,
-    destHasTar,
-  );
-
-  return {
-    methodPreference,
-    resolvedMethod,
-    reasonKey,
-    sourcePlatform,
-    destPlatform,
-    sourceHasTar,
-    destHasTar,
-    summary: scanSummary,
-  };
-}
-
-export function startHostTransfer(
-  deps: HostTransferDeps,
-  request: TransferRequest,
-): { transferId: string; syncResult?: TransferProgress } {
-  const transferId = randomUUID();
-
-  activeTransfers.set(transferId, {
-    transferId,
-    status: "running",
-    phase: "transferring",
-    sourcePaths: request.sourcePaths,
-    destPath: request.destPath,
-    userId: request.userId,
-    sourceSessionId: request.sourceSessionId,
-    destSessionId: request.destSessionId,
-    startedAt: Date.now(),
-    moveRequested: request.move ?? false,
-    methodPreference: request.methodPreference ?? "auto",
-    parallelSegmentCount: clampParallelSegmentCount(
-      request.parallelSegmentCount,
-    ),
-    requestSnapshot: {
-      sourceSessionId: request.sourceSessionId,
-      sourcePaths: request.sourcePaths,
-      destSessionId: request.destSessionId,
-      destPath: request.destPath,
-      move: request.move,
-      methodPreference: request.methodPreference,
-      parallelSegmentCount: request.parallelSegmentCount,
-    },
-  });
-
-  const isSingleSmallFile = request.sourcePaths.length === 1 && !request.move;
-
-  if (isSingleSmallFile) {
-    const sourceSession = deps.sshSessions[request.sourceSessionId];
-    if (sourceSession?.sftp || sourceSession?.isConnected) {
-      void (async () => {
-        try {
-          const sftp = await deps.getSessionSftp(sourceSession);
-          const stats = await promisifySftpStat(sftp, request.sourcePaths[0]);
-          if (stats.isFile() && stats.size <= SMALL_FILE_SYNC_THRESHOLD) {
-            await runTransfer(deps, transferId, request);
-            return;
-          }
-        } catch {
-          /* fall through to async */
-        }
-        void runTransfer(deps, transferId, request);
-      })();
-      return { transferId };
-    }
-  }
-
-  void runTransfer(deps, transferId, request);
-  return { transferId };
-}
-
-export function cleanupOldTransfers(maxAgeMs = 60 * 60 * 1000): void {
-  const now = Date.now();
-  for (const [id, progress] of activeTransfers.entries()) {
-    if (
-      progress.status !== "running" &&
-      now - (progress as TransferProgress & { _ts?: number })._ts! > maxAgeMs
-    ) {
-      activeTransfers.delete(id);
-    }
-  }
-}
diff --git a/plugins/file-manager/src/backend/transfer-errors.ts b/plugins/file-manager/src/backend/transfer-errors.ts
deleted file mode 100644
index 5f8de3405..000000000
--- a/plugins/file-manager/src/backend/transfer-errors.ts
+++ /dev/null
@@ -1,52 +0,0 @@
-export class TransferCancelledError extends Error {
-  constructor() {
-    super("Transfer cancelled");
-    this.name = "TransferCancelledError";
-  }
-}
-
-export class TransferStalledError extends Error {
-  readonly byteOffset?: number;
-  readonly segmentIndex?: number;
-
-  constructor(byteOffset?: number, segmentIndex?: number) {
-    const pos = byteOffset !== undefined ? ` at byte offset ${byteOffset}` : "";
-    const seg = segmentIndex !== undefined ? ` (segment ${segmentIndex})` : "";
-    super(`Transfer stalled: no data moved for 45 seconds${pos}${seg}`);
-    this.name = "TransferStalledError";
-    this.byteOffset = byteOffset;
-    this.segmentIndex = segmentIndex;
-  }
-}
-
-export class TransferConnectionLostError extends Error {
-  constructor(message = "Transfer SSH connection lost") {
-    super(message);
-    this.name = "TransferConnectionLostError";
-  }
-}
-
-export function isRecoverableTransferConnectionError(err: unknown): boolean {
-  if (!(err instanceof Error)) return false;
-  const msg = err.message.toLowerCase();
-  return (
-    msg.includes("no response from server") ||
-    msg.includes("connection lost") ||
-    msg.includes("not connected") ||
-    msg.includes("econnreset") ||
-    msg.includes("econnrefused") ||
-    msg.includes("etimedout") ||
-    msg.includes("socket hang up") ||
-    msg.includes("protocol error") ||
-    msg.includes("connection closed") ||
-    msg.includes("channel open failure")
-  );
-}
-
-export function isRecoverableTransferError(err: unknown): boolean {
-  return (
-    err instanceof TransferStalledError ||
-    err instanceof TransferConnectionLostError ||
-    isRecoverableTransferConnectionError(err)
-  );
-}
diff --git a/plugins/file-manager/src/backend/transfer-host-utils.ts b/plugins/file-manager/src/backend/transfer-host-utils.ts
deleted file mode 100644
index ef90e475d..000000000
--- a/plugins/file-manager/src/backend/transfer-host-utils.ts
+++ /dev/null
@@ -1,59 +0,0 @@
-import { networkInterfaces } from "os";
-import { normalizeSftpPath } from "./transfer-paths.js";
-
-let cachedLocalAddresses: Set<string> | null = null;
-
-export function normalizeHostAddress(host: string): string {
-  const trimmed = host.trim().toLowerCase();
-  if (trimmed.startsWith("[") && trimmed.endsWith("]")) {
-    return trimmed.slice(1, -1);
-  }
-  return trimmed.split(":")[0] ?? trimmed;
-}
-
-function getLocalAddresses(): Set<string> {
-  if (cachedLocalAddresses) return cachedLocalAddresses;
-
-  const addresses = new Set(["127.0.0.1", "::1", "localhost"]);
-  for (const ifaces of Object.values(networkInterfaces())) {
-    if (!ifaces) continue;
-    for (const iface of ifaces) {
-      if (!iface.internal && iface.family === "IPv4") {
-        addresses.add(iface.address.toLowerCase());
-      }
-    }
-  }
-  cachedLocalAddresses = addresses;
-  return addresses;
-}
-
-export function isLocalSshEndpoint(ip?: string): boolean {
-  if (!ip) return false;
-  const bare = normalizeHostAddress(ip);
-  if (bare === "localhost" || bare === "127.0.0.1" || bare === "::1") {
-    return true;
-  }
-  return getLocalAddresses().has(bare);
-}
-
-export function escapeShell(s: string): string {
-  return s.replace(/'/g, "'\"'\"'");
-}
-
-export function isRootOnlyPath(path: string): boolean {
-  const normalized = normalizeSftpPath(path);
-  return (
-    normalized === "/" ||
-    /^\/[A-Za-z]:$/.test(normalized) ||
-    /^[A-Za-z]:$/.test(normalized)
-  );
-}
-
-export function isPermissionError(err: Error): boolean {
-  const msg = err.message.toLowerCase();
-  return (
-    msg.includes("permission denied") ||
-    msg.includes("eacces") ||
-    msg.includes("access denied")
-  );
-}
diff --git a/plugins/file-manager/src/backend/transfer-integrity.ts b/plugins/file-manager/src/backend/transfer-integrity.ts
deleted file mode 100644
index 0dc7052a2..000000000
--- a/plugins/file-manager/src/backend/transfer-integrity.ts
+++ /dev/null
@@ -1,54 +0,0 @@
-import { createHash } from "node:crypto";
-
-type SFTPWrapper = import("ssh2").SFTPWrapper;
-
-export interface TransferIntegrityResult {
-  algorithm: "sha256";
-  digest: string;
-}
-
-export async function hashSftpFile(
-  sftp: SFTPWrapper,
-  path: string,
-  shouldAbort: () => boolean = () => false,
-  createAbortError: () => Error = () => new Error("Transfer cancelled"),
-): Promise<string> {
-  const stream = sftp.createReadStream(path);
-  const hash = createHash("sha256");
-
-  try {
-    for await (const chunk of stream) {
-      if (shouldAbort()) {
-        const error = createAbortError();
-        stream.destroy(error);
-        throw error;
-      }
-      hash.update(chunk);
-    }
-  } finally {
-    stream.destroy();
-  }
-
-  if (shouldAbort()) throw createAbortError();
-  return hash.digest("hex");
-}
-
-export async function verifySftpFileIntegrity(
-  sourceSftp: SFTPWrapper,
-  destSftp: SFTPWrapper,
-  sourcePath: string,
-  destPath: string,
-  shouldAbort: () => boolean = () => false,
-  createAbortError: () => Error = () => new Error("Transfer cancelled"),
-): Promise<TransferIntegrityResult> {
-  const [sourceDigest, destDigest] = await Promise.all([
-    hashSftpFile(sourceSftp, sourcePath, shouldAbort, createAbortError),
-    hashSftpFile(destSftp, destPath, shouldAbort, createAbortError),
-  ]);
-
-  if (sourceDigest !== destDigest) {
-    throw new Error(`SHA-256 verification failed for ${sourcePath}`);
-  }
-
-  return { algorithm: "sha256", digest: sourceDigest };
-}
diff --git a/plugins/file-manager/src/backend/transfer-paths.ts b/plugins/file-manager/src/backend/transfer-paths.ts
deleted file mode 100644
index 694a9f5b7..000000000
--- a/plugins/file-manager/src/backend/transfer-paths.ts
+++ /dev/null
@@ -1,151 +0,0 @@
-export type TransferPlatform = "windows" | "unix";
-
-/** OpenSSH SFTP on Windows commonly uses `/C:/...` or `C:/...` style paths. */
-export function isWindowsSftpPath(path: string): boolean {
-  const normalized = path.replace(/\\/g, "/");
-  return /^[A-Za-z]:\//.test(normalized) || /^\/[A-Za-z]:\//.test(normalized);
-}
-
-export function inferPlatformFromPath(path: string): TransferPlatform | null {
-  if (isWindowsSftpPath(path)) return "windows";
-  if (path.startsWith("/") && !/^\/[A-Za-z]:/.test(path.replace(/\\/g, "/"))) {
-    return "unix";
-  }
-  return null;
-}
-
-export function normalizeSftpPath(path: string): string {
-  const normalized = path.replace(/\\/g, "/").replace(/\/+$/, "");
-  if (!normalized) return path.startsWith("/") ? "/" : ".";
-  return normalized.replace(/([^:])\/+/g, "$1/");
-}
-
-export function basename(path: string): string {
-  const normalized = path.replace(/\\/g, "/").replace(/\/+$/, "");
-  const idx = normalized.lastIndexOf("/");
-  if (idx < 0) return normalized;
-  return normalized.substring(idx + 1) || normalized;
-}
-
-export function dirname(path: string): string {
-  const normalized = path.replace(/\\/g, "/").replace(/\/+$/, "");
-  if (!normalized) return normalized;
-
-  const idx = normalized.lastIndexOf("/");
-  if (idx < 0) return normalized;
-
-  const parent = normalized.substring(0, idx);
-  if (!parent) return "/";
-  if (/^\/[A-Za-z]:$/.test(parent) || /^[A-Za-z]:$/.test(parent)) {
-    return parent;
-  }
-  return parent || "/";
-}
-
-export function joinPath(base: string, ...parts: string[]): string {
-  let result = base.replace(/\\/g, "/");
-  for (const part of parts) {
-    if (!part) continue;
-    const segment = part.replace(/\\/g, "/").replace(/^\/+/, "");
-    if (!segment) continue;
-    if (result.endsWith("/")) {
-      result += segment;
-    } else {
-      result = `${result}/${segment}`;
-    }
-  }
-  return normalizeSftpPath(result);
-}
-
-export interface PathSegments {
-  /** Drive root prefix, e.g. `/C:` or `C:`; empty for Unix absolute paths. */
-  root: string;
-  /** Path segments below the root (may be empty). */
-  segments: string[];
-}
-
-export function splitPathSegments(path: string): PathSegments {
-  const normalized = normalizeSftpPath(path);
-
-  const posixDrive = normalized.match(/^(\/[A-Za-z]:)(?:\/(.*))?$/);
-  if (posixDrive) {
-    return {
-      root: posixDrive[1],
-      segments: (posixDrive[2] ?? "").split("/").filter(Boolean),
-    };
-  }
-
-  const drive = normalized.match(/^([A-Za-z]:)(?:\/(.*))?$/);
-  if (drive) {
-    return {
-      root: drive[1],
-      segments: (drive[2] ?? "").split("/").filter(Boolean),
-    };
-  }
-
-  if (normalized.startsWith("/")) {
-    return {
-      root: "/",
-      segments: normalized.split("/").filter(Boolean),
-    };
-  }
-
-  return {
-    root: "",
-    segments: normalized.split("/").filter(Boolean),
-  };
-}
-
-export function buildPathFromSegments(
-  root: string,
-  segments: string[],
-  count: number,
-): string {
-  const slice = segments.slice(0, count);
-  if (/^\/[A-Za-z]:$/.test(root)) {
-    return slice.length ? `${root}/${slice.join("/")}` : root;
-  }
-  if (/^[A-Za-z]:$/.test(root)) {
-    return slice.length ? `${root}/${slice.join("/")}` : root;
-  }
-  if (root === "/") {
-    return slice.length ? `/${slice.join("/")}` : "/";
-  }
-  if (root === "") {
-    return slice.join("/");
-  }
-  return slice.length ? `${root}/${slice.join("/")}` : root;
-}
-
-export function pathsOverlap(source: string, dest: string): boolean {
-  const norm = (p: string) => {
-    const n = normalizeSftpPath(p).toLowerCase();
-    return n || (isWindowsSftpPath(p) ? p : "/");
-  };
-  const s = norm(source);
-  const d = norm(dest);
-  const sep = "/";
-  return s === d || s.startsWith(`${d}${sep}`) || d.startsWith(`${s}${sep}`);
-}
-
-export function getWorkingDir(paths: string[]): string {
-  if (paths.length === 0) return "/";
-  const parents = paths.map((p) => dirname(p));
-  const first = parents[0];
-  if (parents.every((p) => p === first)) {
-    return first;
-  }
-  return first;
-}
-
-/** Convert an SFTP path to a local filesystem path when Termix runs on the dest host. */
-export function sftpPathToLocalPath(sftpPath: string): string {
-  const normalized = sftpPath.replace(/\\/g, "/");
-  if (/^\/[A-Za-z]:\//.test(normalized)) {
-    return normalized.slice(1).replace(/\//g, "\\");
-  }
-  if (/^[A-Za-z]:\//.test(normalized)) {
-    return normalized.replace(/\//g, "\\");
-  }
-  return sftpPath;
-}
diff --git a/plugins/file-manager/src/backend/transfer-routing.ts b/plugins/file-manager/src/backend/transfer-routing.ts
deleted file mode 100644
index 5d9d9aac2..000000000
--- a/plugins/file-manager/src/backend/transfer-routing.ts
+++ /dev/null
@@ -1,205 +0,0 @@
-import type { TransferPlatform } from "./transfer-paths.js";
-import { deflateRawSync } from "node:zlib";
-
-export type TransferMethodPreference = "auto" | "tar" | "item_sftp";
-
-export interface TransferScanSummary {
-  fileCount: number;
-  totalBytes: number;
-  largestFileBytes: number;
-  /** Share of total bytes in likely incompressible file types (0–1). */
-  incompressibleRatio: number;
-  /** Share inferred from bounded content samples, when available. */
-  sampledIncompressibleRatio?: number;
-}
-
-const INCOMPRESSIBLE_EXT =
-  /\.(zip|gz|bz2|xz|7z|rar|tar|tgz|jpg|jpeg|png|gif|webp|mp3|mp4|mkv|avi|mov|wmv|iso|dmg|deb|rpm|pdf|db|sqlite|wasm|vmdk|qcow2)$/i;
-
-const GB = 1024 * 1024 * 1024;
-const MB = 1024 * 1024;
-
-export function isLikelyIncompressiblePath(path: string): boolean {
-  return INCOMPRESSIBLE_EXT.test(path);
-}
-
-export function buildTransferScanSummary(
-  items: Array<{ sourcePath: string; size: number }>,
-): TransferScanSummary {
-  let totalBytes = 0;
-  let largestFileBytes = 0;
-  let incompressibleBytes = 0;
-
-  for (const item of items) {
-    totalBytes += item.size;
-    largestFileBytes = Math.max(largestFileBytes, item.size);
-    if (isLikelyIncompressiblePath(item.sourcePath)) {
-      incompressibleBytes += item.size;
-    }
-  }
-
-  return {
-    fileCount: items.length,
-    totalBytes,
-    largestFileBytes,
-    incompressibleRatio: totalBytes > 0 ? incompressibleBytes / totalBytes : 0,
-  };
-}
-
-export function estimateIncompressibleSample(data: Buffer): boolean {
-  if (data.length === 0) return false;
-  return deflateRawSync(data, { level: 1 }).length / data.length >= 0.9;
-}
-
-function effectiveIncompressibleRatio(summary: TransferScanSummary): number {
-  return summary.sampledIncompressibleRatio ?? summary.incompressibleRatio;
-}
-
-/**
- * Choose tar vs per-item SFTP for directory / multi-file transfers.
- * Single-file stream transfers bypass this entirely.
- */
-export function resolveArchiveTransferMethod(
-  preference: TransferMethodPreference,
-  summary: TransferScanSummary,
-  sourcePlatform: TransferPlatform,
-  destPlatform: TransferPlatform,
-  sourceHasTar: boolean,
-  destHasTar: boolean,
-): "tar" | "item_sftp" {
-  if (sourcePlatform === "windows" || destPlatform === "windows") {
-    return "item_sftp";
-  }
-
-  if (preference === "item_sftp") {
-    return "item_sftp";
-  }
-
-  if (preference === "tar") {
-    return sourceHasTar && destHasTar ? "tar" : "item_sftp";
-  }
-
-  // auto
-  if (!sourceHasTar || !destHasTar) {
-    return "item_sftp";
-  }
-
-  const { fileCount, totalBytes, largestFileBytes } = summary;
-  const incompressibleRatio = effectiveIncompressibleRatio(summary);
-
-  if (fileCount === 0) {
-    return "item_sftp";
-  }
-
-  if (fileCount === 1 && largestFileBytes >= 2 * GB) {
-    return "item_sftp";
-  }
-
-  // Multi-item sets with a large file: tar only when data is likely compressible
-  // (mostly video/zip → per-file SFTP is simpler and avoids pack/unpack time).
-  if (
-    fileCount > 1 &&
-    largestFileBytes >= 2 * GB &&
-    totalBytes >= 500 * MB &&
-    incompressibleRatio < 0.7
-  ) {
-    return "tar";
-  }
-
-  if (fileCount === 1 && largestFileBytes >= 5 * GB) {
-    return "item_sftp";
-  }
-
-  if (totalBytes >= 10 * GB && incompressibleRatio >= 0.5) {
-    return "item_sftp";
-  }
-
-  if (incompressibleRatio >= 0.85) {
-    return "item_sftp";
-  }
-
-  if (fileCount >= 100) {
-    return "tar";
-  }
-
-  if (fileCount >= 20 && totalBytes >= 50 * MB && incompressibleRatio < 0.5) {
-    return "tar";
-  }
-
-  if (fileCount > 5 && incompressibleRatio < 0.7) {
-    return "tar";
-  }
-
-  return "item_sftp";
-}
-
-export type ArchiveTransferReasonKey =
-  | "user_item_sftp"
-  | "user_tar"
-  | "tar_unavailable"
-  | "windows_host"
-  | "auto_multi_large"
-  | "auto_single_large_in_archive"
-  | "auto_many_incompressible"
-  | "auto_many_files"
-  | "auto_default";
-
-/** i18n key suffix under transfer.methodReason.* */
-export function getArchiveTransferReasonKey(
-  preference: TransferMethodPreference,
-  resolvedMethod: "tar" | "item_sftp",
-  summary: TransferScanSummary,
-  sourcePlatform: TransferPlatform,
-  destPlatform: TransferPlatform,
-  sourceHasTar: boolean,
-  destHasTar: boolean,
-): ArchiveTransferReasonKey {
-  if (preference === "item_sftp") return "user_item_sftp";
-  if (preference === "tar") {
-    return sourceHasTar && destHasTar ? "user_tar" : "tar_unavailable";
-  }
-
-  if (sourcePlatform === "windows" || destPlatform === "windows") {
-    return "windows_host";
-  }
-  if (!sourceHasTar || !destHasTar) {
-    return "tar_unavailable";
-  }
-
-  const { fileCount, totalBytes, largestFileBytes } = summary;
-  const incompressibleRatio = effectiveIncompressibleRatio(summary);
-
-  if (
-    fileCount > 1 &&
-    largestFileBytes >= 2 * GB &&
-    totalBytes >= 500 * MB &&
-    incompressibleRatio < 0.7
-  ) {
-    return "auto_multi_large";
-  }
-
-  if (fileCount === 1 && largestFileBytes >= 2 * GB) {
-    return "auto_single_large_in_archive";
-  }
-
-  if (totalBytes >= 10 * GB && incompressibleRatio >= 0.5) {
-    return "auto_many_incompressible";
-  }
-  if (incompressibleRatio >= 0.85) {
-    return "auto_many_incompressible";
-  }
-
-  if (
-    fileCount >= 100 ||
-    (fileCount >= 20 && totalBytes >= 50 * MB && incompressibleRatio < 0.5) ||
-    (fileCount > 5 && incompressibleRatio < 0.7)
-  ) {
-    return "auto_many_files";
-  }
-
-  if (resolvedMethod === "tar") {
-    return "auto_many_files";
-  }
-
-  return "auto_default";
-}
diff --git a/plugins/file-manager/src/backend/transfer-scan.ts b/plugins/file-manager/src/backend/transfer-scan.ts
deleted file mode 100644
index 1d790cedc..000000000
--- a/plugins/file-manager/src/backend/transfer-scan.ts
+++ /dev/null
@@ -1,89 +0,0 @@
-import { basename, joinPath } from "./transfer-paths.js";
-import {
-  SFTP_OPEN_READ,
-  promisifySftpClose,
-  promisifySftpOpen,
-  promisifySftpReaddir,
-  promisifySftpStat,
-} from "./sftp-promisify.js";
-
-type SFTPWrapper = import("ssh2").SFTPWrapper;
-
-export interface FileWorkItem {
-  sourcePath: string;
-  destPath: string;
-  mode: number;
-  size: number;
-}
-
-export async function collectFileWorkItems(
-  sftp: SFTPWrapper,
-  sourcePath: string,
-  destRoot: string,
-  destBaseName?: string,
-): Promise<FileWorkItem[]> {
-  const stats = await promisifySftpStat(sftp, sourcePath);
-  const name = destBaseName ?? basename(sourcePath);
-  const destPath = joinPath(destRoot, name);
-
-  if (stats.isFile()) {
-    return [
-      {
-        sourcePath,
-        destPath,
-        mode: stats.mode & 0o7777,
-        size: stats.size,
-      },
-    ];
-  }
-
-  if (!stats.isDirectory()) {
-    return [];
-  }
-
-  const items: FileWorkItem[] = [];
-  const walk = async (srcDir: string, dstDir: string) => {
-    const entries = await promisifySftpReaddir(sftp, srcDir);
-    for (const entry of entries) {
-      if (entry.filename === "." || entry.filename === "..") continue;
-      const srcChild = joinPath(srcDir, entry.filename);
-      const dstChild = joinPath(dstDir, entry.filename);
-
-      if (entry.attrs.isDirectory()) {
-        await walk(srcChild, dstChild);
-      } else if (entry.attrs.isFile()) {
-        items.push({
-          sourcePath: srcChild,
-          destPath: dstChild,
-          mode: entry.attrs.mode & 0o7777,
-          size: entry.attrs.size,
-        });
-      }
-    }
-  };
-
-  await walk(sourcePath, destPath);
-  return items;
-}
-
-export async function readSftpSample(
-  sftp: SFTPWrapper,
-  path: string,
-  fileSize: number,
-): Promise<Buffer> {
-  const sampleSize = Math.min(64 * 1024, fileSize);
-  const position = Math.max(0, Math.floor((fileSize - sampleSize) / 2));
-  const handle = await promisifySftpOpen(sftp, path, SFTP_OPEN_READ, 0o666);
-  try {
-    const buffer = Buffer.alloc(sampleSize);
-    const bytesRead = await new Promise<number>((resolve, reject) => {
-      sftp.read(handle, buffer, 0, sampleSize, position, (err, count) => {
-        if (err) reject(err);
-        else resolve(count);
-      });
-    });
-    return buffer.subarray(0, bytesRead);
-  } finally {
-    await promisifySftpClose(sftp, handle).catch(() => {});
-  }
-}
diff --git a/plugins/file-manager/src/backend/transfer-segment-copy.ts b/plugins/file-manager/src/backend/transfer-segment-copy.ts
deleted file mode 100644
index 36a494db2..000000000
--- a/plugins/file-manager/src/backend/transfer-segment-copy.ts
+++ /dev/null
@@ -1,40 +0,0 @@
-export const SFTP_XFER_SEGMENT_SIZE = 256 * 1024 * 1024;
-export const DEFAULT_PARALLEL_SEGMENT_COUNT = 2;
-export const MAX_PARALLEL_SEGMENT_COUNT = 8;
-
-export interface SegmentCopyJob {
-  offset: number;
-  length: number;
-  segmentIndex: number;
-}
-
-export function clampParallelSegmentCount(value?: number): number {
-  const n = value ?? DEFAULT_PARALLEL_SEGMENT_COUNT;
-  return Math.max(1, Math.min(MAX_PARALLEL_SEGMENT_COUNT, Math.floor(n)));
-}
-
-export function buildSegmentCopyJobs(
-  fileSize: number,
-  initialOffset: number,
-  destResumeSize: number,
-): SegmentCopyJob[] {
-  const jobs: SegmentCopyJob[] = [];
-  for (
-    let offset = initialOffset;
-    offset < fileSize;
-    offset += SFTP_XFER_SEGMENT_SIZE
-  ) {
-    const length = Math.min(SFTP_XFER_SEGMENT_SIZE, fileSize - offset);
-    const segmentIndex = Math.floor(offset / SFTP_XFER_SEGMENT_SIZE);
-    if (destResumeSize >= offset + length) {
-      continue;
-    }
-    const start = destResumeSize > offset ? destResumeSize : offset;
-    jobs.push({
-      offset: start,
-      length: offset + length - start,
-      segmentIndex,
-    });
-  }
-  return jobs;
-}
diff --git a/plugins/file-manager/src/backend/transfer-sftp-dir.ts b/plugins/file-manager/src/backend/transfer-sftp-dir.ts
deleted file mode 100644
index 8e9236bff..000000000
--- a/plugins/file-manager/src/backend/transfer-sftp-dir.ts
+++ /dev/null
@@ -1,74 +0,0 @@
-import {
-  buildPathFromSegments,
-  joinPath,
-  normalizeSftpPath,
-  splitPathSegments,
-} from "./transfer-paths.js";
-import { isRootOnlyPath } from "./transfer-host-utils.js";
-import {
-  promisifySftpMkdir,
-  promisifySftpReaddir,
-  promisifySftpRmdir,
-  promisifySftpStat,
-  promisifySftpUnlink,
-} from "./sftp-promisify.js";
-
-type SFTPWrapper = import("ssh2").SFTPWrapper;
-
-export async function ensureDirectoryTreeSftp(
-  sftp: SFTPWrapper,
-  dirPath: string,
-  created: Set<string> = new Set(),
-): Promise<void> {
-  const normalized = normalizeSftpPath(dirPath);
-  if (!normalized || isRootOnlyPath(normalized)) return;
-
-  const { root, segments } = splitPathSegments(normalized);
-  if (segments.length === 0) return;
-
-  for (let i = 0; i < segments.length; i++) {
-    const current = buildPathFromSegments(root, segments, i + 1);
-    if (created.has(current)) continue;
-
-    try {
-      await promisifySftpMkdir(sftp, current, 0o755);
-    } catch (err) {
-      const code = (err as NodeJS.ErrnoException).code;
-      if (code !== "EEXIST") {
-        try {
-          const stats = await promisifySftpStat(sftp, current);
-          if (!stats.isDirectory()) throw err;
-        } catch {
-          throw err;
-        }
-      }
-    }
-    created.add(current);
-  }
-}
-
-export async function deletePathSftp(
-  sftp: SFTPWrapper,
-  path: string,
-): Promise<void> {
-  let stats: import("ssh2").Stats;
-  try {
-    stats = await promisifySftpStat(sftp, path);
-  } catch {
-    return;
-  }
-
-  if (stats.isDirectory()) {
-    const entries = await promisifySftpReaddir(sftp, path);
-    for (const entry of entries) {
-      if (entry.filename === "." || entry.filename === "..") continue;
-      await deletePathSftp(sftp, joinPath(path, entry.filename));
-    }
-    await promisifySftpRmdir(sftp, path);
-    return;
-  }
-
-  if (stats.isFile()) {
-    await promisifySftpUnlink(sftp, path);
-  }
-}
diff --git a/plugins/file-manager/src/backend/transfer-stats.ts b/plugins/file-manager/src/backend/transfer-stats.ts
deleted file mode 100644
index 14e43fe28..000000000
--- a/plugins/file-manager/src/backend/transfer-stats.ts
+++ /dev/null
@@ -1,157 +0,0 @@
-import { performance } from "node:perf_hooks";
-
-const TRANSFER_PROGRESS_INTERVAL_MS = 200;
-
-export type TransferHopId =
-  "source_read" | "dest_sftp_write" | "dest_local_write";
-
-export interface TransferHopMetrics {
-  id: TransferHopId;
-  bytes: number;
-  /** Wall-clock span from first I/O on this hop to last I/O complete. */
-  spanMs: number;
-  mbPerSec: number;
-}
-
-export interface TransferTimings {
-  prepareDestMs?: number;
-  compressMs?: number;
-  transferMs?: number;
-  extractMs?: number;
-  verifyMs?: number;
-  directBenchmarkMs?: number;
-  relayBenchmarkMs?: number;
-  sourceDeleteMs?: number;
-  totalMs?: number;
-  transferBytes?: number;
-  endToEndMbPerSec?: number;
-  hops?: TransferHopMetrics[];
-}
-
-export function elapsedMs(start: number): number {
-  return Date.now() - start;
-}
-
-export function computeTransferMbPerSec(
-  bytes: number,
-  ms: number,
-): number | undefined {
-  if (ms <= 0 || bytes <= 0) return undefined;
-  return ((bytes / ms) * 1000) / (1024 * 1024);
-}
-
-export interface HopWallClock {
-  firstAt: number | null;
-  lastAt: number | null;
-}
-
-export function createHopWallClock(): HopWallClock {
-  return { firstAt: null, lastAt: null };
-}
-
-export function noteHopStart(
-  clock: HopWallClock,
-  t: number = performance.now(),
-): void {
-  if (clock.firstAt === null) clock.firstAt = t;
-}
-
-export function noteHopEnd(
-  clock: HopWallClock,
-  t: number = performance.now(),
-): void {
-  clock.lastAt = t;
-}
-
-export function hopSpanMs(clock: HopWallClock): number {
-  if (clock.firstAt === null || clock.lastAt === null) return 0;
-  return Math.max(0, clock.lastAt - clock.firstAt);
-}
-
-export function createThrottledProgress(onProgress?: (bytes: number) => void) {
-  let pending = 0;
-  let lastFlush = 0;
-
-  const flush = () => {
-    if (pending > 0) {
-      onProgress?.(pending);
-      pending = 0;
-      lastFlush = Date.now();
-    }
-  };
-
-  return {
-    add(bytes: number) {
-      pending += bytes;
-      const now = Date.now();
-      if (now - lastFlush >= TRANSFER_PROGRESS_INTERVAL_MS) {
-        flush();
-      }
-    },
-    flush,
-  };
-}
-
-export interface PipelinedXferStats {
-  bytes: number;
-  sourceReadSpanMs: number;
-  destWriteSpanMs: number;
-  destWriteKind: "sftp" | "local";
-}
-
-export function createEmptyXferStats(): PipelinedXferStats {
-  return {
-    bytes: 0,
-    sourceReadSpanMs: 0,
-    destWriteSpanMs: 0,
-    destWriteKind: "sftp",
-  };
-}
-
-export function mergeXferStats(
-  target: PipelinedXferStats,
-  source: PipelinedXferStats,
-): void {
-  target.bytes += source.bytes;
-  target.sourceReadSpanMs += source.sourceReadSpanMs;
-  target.destWriteSpanMs += source.destWriteSpanMs;
-  target.destWriteKind = source.destWriteKind;
-}
-
-export function buildTransferHopTimings(
-  stats: PipelinedXferStats,
-  transferMs: number,
-): Pick<TransferTimings, "transferBytes" | "endToEndMbPerSec" | "hops"> {
-  const hops: TransferHopMetrics[] = [];
-
-  const sourceRate = computeTransferMbPerSec(
-    stats.bytes,
-    stats.sourceReadSpanMs,
-  );
-  if (sourceRate !== undefined) {
-    hops.push({
-      id: "source_read",
-      bytes: stats.bytes,
-      spanMs: stats.sourceReadSpanMs,
-      mbPerSec: sourceRate,
-    });
-  }
-
-  const destHopId: TransferHopId =
-    stats.destWriteKind === "local" ? "dest_local_write" : "dest_sftp_write";
-  const destRate = computeTransferMbPerSec(stats.bytes, stats.destWriteSpanMs);
-  if (destRate !== undefined) {
-    hops.push({
-      id: destHopId,
-      bytes: stats.bytes,
-      spanMs: stats.destWriteSpanMs,
-      mbPerSec: destRate,
-    });
-  }
-
-  return {
-    transferBytes: stats.bytes,
-    endToEndMbPerSec: computeTransferMbPerSec(stats.bytes, transferMs),
-    hops,
-  };
-}
diff --git a/plugins/file-manager/src/backend/transfer-tuning.ts b/plugins/file-manager/src/backend/transfer-tuning.ts
deleted file mode 100644
index 6742e9557..000000000
--- a/plugins/file-manager/src/backend/transfer-tuning.ts
+++ /dev/null
@@ -1,389 +0,0 @@
-import { createHash } from "node:crypto";
-
-export interface TransferPerformanceProfile {
-  throughputBps: number;
-  failureRate: number;
-  samples: number;
-  preferredLanes: number;
-  pipelineConcurrency: number;
-  updatedAt: number;
-}
-
-export interface TransferTuning {
-  parallelSegmentCount: number;
-  pipelineConcurrency: number;
-}
-
-export interface DirectRouteProfile {
-  directMs: number;
-  relayMs: number;
-  failureRate: number;
-  benchmarkSamples: number;
-  outcomeSamples: number;
-  benchmarkedAt: number;
-  cooldownUntil?: number;
-  updatedAt: number;
-}
-
-const MB = 1024 * 1024;
-const PROFILE_TTL_MS = 7 * 24 * 60 * 60 * 1000;
-const MAX_PROFILES = 128;
-const STORE_VERSION = 1;
-const profiles = new Map<string, TransferPerformanceProfile>();
-const directRoutes = new Map<string, DirectRouteProfile>();
-
-/** Where the learned profiles live: ctx.kv, set on activate. */
-export interface TransferProfileStore {
-  read: () => Promise<unknown>;
-  write: (value: PersistedProfiles) => Promise<void>;
-}
-
-let store: TransferProfileStore | null = null;
-let loadedStore: TransferProfileStore | null = null;
-let loadPromise: Promise<void> | undefined;
-
-export function setTransferProfileStore(
-  next: TransferProfileStore | null,
-): void {
-  store = next;
-  loadedStore = null;
-  loadPromise = undefined;
-  profiles.clear();
-  directRoutes.clear();
-}
-let persistTimer: ReturnType<typeof setTimeout> | undefined;
-let persistPromise = Promise.resolve();
-
-export interface PersistedProfiles {
-  version: typeof STORE_VERSION;
-  profiles: Record<string, TransferPerformanceProfile>;
-  directRoutes: Record<string, DirectRouteProfile>;
-}
-
-function validDirectRoute(value: unknown): value is DirectRouteProfile {
-  if (!value || typeof value !== "object") return false;
-  const profile = value as Partial<DirectRouteProfile>;
-  return (
-    Number.isFinite(profile.directMs) &&
-    Number(profile.directMs) > 0 &&
-    Number.isFinite(profile.relayMs) &&
-    Number(profile.relayMs) > 0 &&
-    Number.isFinite(profile.failureRate) &&
-    Number(profile.failureRate) >= 0 &&
-    Number(profile.failureRate) <= 1 &&
-    Number.isFinite(profile.benchmarkSamples) &&
-    Number(profile.benchmarkSamples) > 0 &&
-    Number.isFinite(profile.outcomeSamples) &&
-    Number(profile.outcomeSamples) >= 0 &&
-    Number.isFinite(profile.benchmarkedAt) &&
-    (profile.cooldownUntil === undefined ||
-      Number.isFinite(profile.cooldownUntil)) &&
-    Number.isFinite(profile.updatedAt)
-  );
-}
-
-function profileId(key: string): string {
-  return createHash("sha256").update(key).digest("hex");
-}
-
-function validProfile(value: unknown): value is TransferPerformanceProfile {
-  if (!value || typeof value !== "object") return false;
-  const profile = value as Partial<TransferPerformanceProfile>;
-  return (
-    Number.isFinite(profile.throughputBps) &&
-    Number(profile.throughputBps) >= 0 &&
-    Number.isFinite(profile.failureRate) &&
-    Number(profile.failureRate) >= 0 &&
-    Number(profile.failureRate) <= 1 &&
-    Number.isFinite(profile.samples) &&
-    Number(profile.samples) > 0 &&
-    Number.isFinite(profile.preferredLanes) &&
-    Number.isFinite(profile.pipelineConcurrency) &&
-    Number.isFinite(profile.updatedAt)
-  );
-}
-
-function trimProfiles(now = Date.now()): void {
-  for (const [key, profile] of profiles) {
-    if (now - profile.updatedAt > PROFILE_TTL_MS) profiles.delete(key);
-  }
-  const recent = [...profiles.entries()]
-    .sort(([, a], [, b]) => b.updatedAt - a.updatedAt)
-    .slice(0, MAX_PROFILES);
-  profiles.clear();
-  for (const [key, profile] of recent) profiles.set(key, profile);
-
-  for (const [key, profile] of directRoutes) {
-    if (now - profile.updatedAt > PROFILE_TTL_MS) directRoutes.delete(key);
-  }
-  const recentRoutes = [...directRoutes.entries()]
-    .sort(([, a], [, b]) => b.updatedAt - a.updatedAt)
-    .slice(0, MAX_PROFILES);
-  directRoutes.clear();
-  for (const [key, profile] of recentRoutes) directRoutes.set(key, profile);
-}
-
-async function persistProfiles(): Promise<void> {
-  trimProfiles();
-  if (!store) return;
-  try {
-    await store.write({
-      version: STORE_VERSION,
-      profiles: Object.fromEntries(profiles),
-      directRoutes: Object.fromEntries(directRoutes),
-    });
-  } catch {
-    // Learning data is a nicety; a failed write must not affect transfers.
-  }
-}
-
-function queuePersist(): void {
-  if (persistTimer) clearTimeout(persistTimer);
-  persistTimer = setTimeout(() => {
-    persistTimer = undefined;
-    persistPromise = persistPromise.then(persistProfiles);
-  }, 250);
-  persistTimer.unref?.();
-}
-
-export async function initializeTransferProfiles(): Promise<void> {
-  if (loadPromise && loadedStore === store) return loadPromise;
-  loadedStore = store;
-  const current = store;
-  loadPromise = (async () => {
-    profiles.clear();
-    directRoutes.clear();
-    if (!current) return;
-    try {
-      const parsed = ((await current.read()) ??
-        {}) as Partial<PersistedProfiles>;
-      if (parsed.version !== STORE_VERSION || !parsed.profiles) return;
-      for (const [key, profile] of Object.entries(parsed.profiles)) {
-        if (/^[a-f0-9]{64}$/.test(key) && validProfile(profile)) {
-          profiles.set(key, profile);
-        }
-      }
-      for (const [key, profile] of Object.entries(parsed.directRoutes ?? {})) {
-        if (/^[a-f0-9]{64}$/.test(key) && validDirectRoute(profile)) {
-          directRoutes.set(key, profile);
-        }
-      }
-      trimProfiles();
-    } catch {
-      // Missing or malformed local learning data must not affect transfers.
-    }
-  })();
-  return loadPromise;
-}
-
-export async function flushTransferProfiles(): Promise<void> {
-  if (persistTimer) {
-    clearTimeout(persistTimer);
-    persistTimer = undefined;
-  }
-  persistPromise = persistPromise.then(persistProfiles);
-  await persistPromise;
-}
-
-function clamp(value: number, min: number, max: number): number {
-  return Math.max(min, Math.min(max, Math.floor(value)));
-}
-
-export function selectTransferTuning(
-  fileSize: number,
-  profile?: TransferPerformanceProfile,
-  requestedLanes?: number,
-): TransferTuning {
-  if (fileSize < 32 * MB) {
-    return { parallelSegmentCount: 1, pipelineConcurrency: 8 };
-  }
-
-  let lanes = fileSize >= 1024 * MB ? 4 : 2;
-  let pipelineConcurrency = fileSize >= 256 * MB ? 32 : 16;
-
-  if (profile) {
-    lanes = profile.preferredLanes;
-    pipelineConcurrency = profile.pipelineConcurrency;
-    if (profile.failureRate >= 0.2) {
-      lanes = Math.min(lanes, 2);
-      pipelineConcurrency = Math.min(pipelineConcurrency, 16);
-    }
-  }
-
-  if (requestedLanes !== undefined) lanes = requestedLanes;
-
-  const segmentCapacity = Math.max(1, Math.ceil(fileSize / (256 * MB)));
-  return {
-    parallelSegmentCount: clamp(lanes, 1, Math.min(8, segmentCapacity)),
-    pipelineConcurrency: clamp(pipelineConcurrency, 8, 64),
-  };
-}
-
-export function updateTransferProfile(
-  previous: TransferPerformanceProfile | undefined,
-  observation: {
-    bytes: number;
-    durationMs: number;
-    lanes: number;
-    pipelineConcurrency: number;
-    failed: boolean;
-    now?: number;
-  },
-): TransferPerformanceProfile {
-  const now = observation.now ?? Date.now();
-  const throughputBps =
-    observation.durationMs > 0
-      ? (observation.bytes * 1000) / observation.durationMs
-      : 0;
-  const weight = previous ? 0.25 : 1;
-  const smoothedThroughput = previous
-    ? previous.throughputBps * (1 - weight) + throughputBps * weight
-    : throughputBps;
-  const failure = observation.failed ? 1 : 0;
-  const failureRate = previous
-    ? previous.failureRate * (1 - weight) + failure * weight
-    : failure;
-
-  let preferredLanes = observation.lanes;
-  let pipelineConcurrency = observation.pipelineConcurrency;
-  if (failureRate >= 0.2) {
-    preferredLanes = Math.max(1, Math.floor(preferredLanes / 2));
-    pipelineConcurrency = Math.max(8, Math.floor(pipelineConcurrency / 2));
-  } else if (
-    !observation.failed &&
-    previous &&
-    previous.samples >= 2 &&
-    throughputBps > previous.throughputBps * 1.25
-  ) {
-    preferredLanes = Math.min(8, preferredLanes + 1);
-    pipelineConcurrency = Math.min(64, pipelineConcurrency + 8);
-  }
-
-  return {
-    throughputBps: smoothedThroughput,
-    failureRate,
-    samples: (previous?.samples ?? 0) + 1,
-    preferredLanes,
-    pipelineConcurrency,
-    updatedAt: now,
-  };
-}
-
-export function getTransferProfile(
-  key: string,
-  now = Date.now(),
-): TransferPerformanceProfile | undefined {
-  const id = profileId(key);
-  const profile = profiles.get(id);
-  if (!profile) return undefined;
-  if (now - profile.updatedAt <= PROFILE_TTL_MS) return profile;
-  profiles.delete(id);
-  queuePersist();
-  return undefined;
-}
-
-export function recordTransferProfile(
-  key: string,
-  observation: Parameters<typeof updateTransferProfile>[1],
-): TransferPerformanceProfile {
-  const profile = updateTransferProfile(getTransferProfile(key), observation);
-  profiles.set(profileId(key), profile);
-  trimProfiles(observation.now);
-  queuePersist();
-  return profile;
-}
-
-export function getDirectRouteProfile(
-  key: string,
-  now = Date.now(),
-): DirectRouteProfile | undefined {
-  const id = profileId(key);
-  const profile = directRoutes.get(id);
-  if (!profile) return undefined;
-  if (now - profile.updatedAt <= PROFILE_TTL_MS) return profile;
-  directRoutes.delete(id);
-  queuePersist();
-  return undefined;
-}
-
-export function recordDirectRouteBenchmark(
-  key: string,
-  directMs: number,
-  relayMs: number,
-  now = Date.now(),
-): DirectRouteProfile {
-  const previous = getDirectRouteProfile(key, now);
-  const weight = previous ? 0.25 : 1;
-  const profile: DirectRouteProfile = {
-    directMs: previous
-      ? previous.directMs * (1 - weight) + directMs * weight
-      : directMs,
-    relayMs: previous
-      ? previous.relayMs * (1 - weight) + relayMs * weight
-      : relayMs,
-    failureRate: previous?.failureRate ?? 0,
-    benchmarkSamples: (previous?.benchmarkSamples ?? 0) + 1,
-    outcomeSamples: previous?.outcomeSamples ?? 0,
-    benchmarkedAt: now,
-    cooldownUntil: previous?.cooldownUntil,
-    updatedAt: now,
-  };
-  directRoutes.set(profileId(key), profile);
-  trimProfiles(now);
-  queuePersist();
-  return profile;
-}
-
-export function recordDirectRouteOutcome(
-  key: string,
-  failed: boolean,
-  now = Date.now(),
-  cooldownMs = 10 * 60 * 1000,
-): DirectRouteProfile | undefined {
-  const previous = getDirectRouteProfile(key, now);
-  if (!previous) return undefined;
-  const failure = failed ? 1 : 0;
-  const weight = previous.outcomeSamples > 0 ? 0.25 : 1;
-  const profile = {
-    ...previous,
-    failureRate: previous.failureRate * (1 - weight) + failure * weight,
-    outcomeSamples: previous.outcomeSamples + 1,
-    cooldownUntil: failed ? now + cooldownMs : undefined,
-    updatedAt: now,
-  };
-  directRoutes.set(profileId(key), profile);
-  queuePersist();
-  return profile;
-}
-
-export function getRecentDirectRouteDecision(
-  key: string,
-  maxAgeMs: number,
-  now = Date.now(),
-): { useDirect: boolean; directMs: number; relayMs: number } | undefined {
-  const profile = getDirectRouteProfile(key, now);
-  if (!profile) return undefined;
-  if ((profile.cooldownUntil ?? 0) > now) {
-    return {
-      useDirect: false,
-      directMs: profile.directMs,
-      relayMs: profile.relayMs,
-    };
-  }
-  if (now - profile.benchmarkedAt > maxAgeMs) return undefined;
-  return {
-    useDirect:
-      profile.failureRate < 0.2 && profile.directMs <= profile.relayMs * 0.8,
-    directMs: profile.directMs,
-    relayMs: profile.relayMs,
-  };
-}
-
-export function clearTransferProfiles(): void {
-  if (persistTimer) clearTimeout(persistTimer);
-  persistTimer = undefined;
-  loadedStore = null;
-  loadPromise = undefined;
-  profiles.clear();
-  directRoutes.clear();
-}
diff --git a/plugins/file-manager/src/backend/trash-service.ts b/plugins/file-manager/src/backend/trash-service.ts
deleted file mode 100644
index bf09e8e66..000000000
--- a/plugins/file-manager/src/backend/trash-service.ts
+++ /dev/null
@@ -1,255 +0,0 @@
-import crypto from "node:crypto";
-import path from "node:path";
-import type { SFTPWrapper, Stats } from "ssh2";
-
-export interface TrashItem {
-  id: string;
-  name: string;
-  originalPath: string;
-  isDirectory: boolean;
-  deletedAt: string;
-  size: number;
-}
-
-type StoredTrashItem = TrashItem & { trashPath: string };
-
-const TRASH_DIR = ".termix-trash";
-const ID_PATTERN = /^[0-9a-f-]{36}$/i;
-
-function call<T>(
-  run: (done: (error: Error | undefined, value: T) => void) => void,
-) {
-  return new Promise<T>((resolve, reject) => {
-    run((error, value) => (error ? reject(error) : resolve(value)));
-  });
-}
-
-function stat(sftp: SFTPWrapper, target: string) {
-  return call<Stats>((done) => sftp.stat(target, done));
-}
-
-function lstat(sftp: SFTPWrapper, target: string) {
-  return call<Stats>((done) => sftp.lstat(target, done));
-}
-
-function readdir(sftp: SFTPWrapper, target: string) {
-  return call<import("ssh2").FileEntry[]>((done) => sftp.readdir(target, done));
-}
-
-function readFile(sftp: SFTPWrapper, target: string) {
-  return call<Buffer>((done) => sftp.readFile(target, done));
-}
-
-function writeFile(sftp: SFTPWrapper, target: string, data: string) {
-  return call<void>((done) => sftp.writeFile(target, data, done));
-}
-
-function rename(sftp: SFTPWrapper, from: string, to: string) {
-  return call<void>((done) => sftp.rename(from, to, done));
-}
-
-function unlink(sftp: SFTPWrapper, target: string) {
-  return call<void>((done) => sftp.unlink(target, done));
-}
-
-function mkdir(sftp: SFTPWrapper, target: string) {
-  return call<void>((done) => sftp.mkdir(target, done));
-}
-
-function rmdir(sftp: SFTPWrapper, target: string) {
-  return call<void>((done) => sftp.rmdir(target, done));
-}
-
-async function exists(sftp: SFTPWrapper, target: string) {
-  try {
-    await stat(sftp, target);
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-async function ensureDirectory(sftp: SFTPWrapper, target: string) {
-  // Usually there already: one round trip instead of one per segment.
-  if (await exists(sftp, target)) return;
-  const normalized = target.replace(/\\/g, "/");
-  const root = normalized.startsWith("/") ? "/" : "";
-  const parts = normalized.split("/").filter(Boolean);
-  let current = root;
-  for (const part of parts) {
-    current =
-      current === "/" ? `/${part}` : current ? `${current}/${part}` : part;
-    if (await exists(sftp, current)) continue;
-    await mkdir(sftp, current);
-  }
-}
-
-async function removeTree(sftp: SFTPWrapper, target: string): Promise<void> {
-  const targetStat = await lstat(sftp, target);
-  if (!targetStat.isDirectory()) {
-    await unlink(sftp, target);
-    return;
-  }
-  for (const entry of await readdir(sftp, target)) {
-    if (entry.filename === "." || entry.filename === "..") continue;
-    await removeTree(sftp, path.posix.join(target, entry.filename));
-  }
-  await rmdir(sftp, target);
-}
-
-type TrashDirs = { root: string; files: string; info: string };
-
-// The trash folders of a channel do not move while it is open, and finding
-// them costs several round trips, which made every delete slow on a remote
-// host (#1390).
-const trashDirsByChannel = new WeakMap<SFTPWrapper, Promise<TrashDirs>>();
-
-function trashPaths(sftp: SFTPWrapper): Promise<TrashDirs> {
-  let dirs = trashDirsByChannel.get(sftp);
-  if (!dirs) {
-    dirs = findTrashPaths(sftp);
-    trashDirsByChannel.set(sftp, dirs);
-    dirs.catch(() => trashDirsByChannel.delete(sftp));
-  }
-  return dirs;
-}
-
-async function findTrashPaths(sftp: SFTPWrapper): Promise<TrashDirs> {
-  const home = await call<string>((done) => sftp.realpath(".", done));
-  const root = path.posix.join(home.replace(/\\/g, "/"), TRASH_DIR);
-  const files = path.posix.join(root, "files");
-  const info = path.posix.join(root, "info");
-  await Promise.all([
-    ensureDirectory(sftp, files),
-    ensureDirectory(sftp, info),
-  ]);
-  return { root, files, info };
-}
-
-export function isSafeTrashSource(itemPath: string, trashRoot: string) {
-  const normalized = path.posix.normalize(itemPath.replace(/\\/g, "/"));
-  const root = path.posix.normalize(trashRoot);
-  return (
-    normalized !== "." &&
-    normalized !== "/" &&
-    !/^[A-Za-z]:\/?$/.test(normalized) &&
-    normalized !== root &&
-    !normalized.startsWith(`${root}/`)
-  );
-}
-
-function publicItem(item: StoredTrashItem): TrashItem {
-  const { trashPath: _trashPath, ...result } = item;
-  return result;
-}
-
-async function readStoredItem(
-  sftp: SFTPWrapper,
-  dirs: TrashDirs,
-  id: string,
-): Promise<StoredTrashItem> {
-  if (!ID_PATTERN.test(id)) throw new Error("Invalid trash item id");
-  const parsed = JSON.parse(
-    (await readFile(sftp, path.posix.join(dirs.info, `${id}.json`))).toString(
-      "utf8",
-    ),
-  ) as StoredTrashItem;
-  if (
-    parsed.id !== id ||
-    parsed.trashPath !== path.posix.join(dirs.files, id) ||
-    !isSafeTrashSource(parsed.originalPath, dirs.root)
-  ) {
-    throw new Error("Invalid trash metadata");
-  }
-  return parsed;
-}
-
-export async function moveToTrash(
-  sftp: SFTPWrapper,
-  itemPath: string,
-): Promise<TrashItem> {
-  const dirs = await trashPaths(sftp);
-  if (!isSafeTrashSource(itemPath, dirs.root)) {
-    throw new Error("This path cannot be moved to trash");
-  }
-  const itemStat = await lstat(sftp, itemPath);
-  const id = crypto.randomUUID();
-  const trashPath = path.posix.join(dirs.files, id);
-  const item: StoredTrashItem = {
-    id,
-    name: path.posix.basename(itemPath.replace(/\\/g, "/")),
-    originalPath: itemPath,
-    trashPath,
-    isDirectory: itemStat.isDirectory(),
-    deletedAt: new Date().toISOString(),
-    size: itemStat.size,
-  };
-
-  await rename(sftp, itemPath, trashPath);
-  try {
-    await writeFile(
-      sftp,
-      path.posix.join(dirs.info, `${id}.json`),
-      JSON.stringify(item),
-    );
-  } catch (error) {
-    await rename(sftp, trashPath, itemPath).catch(() => {});
-    throw error;
-  }
-  return publicItem(item);
-}
-
-export async function listTrash(
-  sftp: SFTPWrapper,
-  retentionDays: number,
-): Promise<TrashItem[]> {
-  const dirs = await trashPaths(sftp);
-  const cutoff = Date.now() - retentionDays * 86_400_000;
-  const items: TrashItem[] = [];
-  for (const entry of await readdir(sftp, dirs.info)) {
-    if (!entry.filename.endsWith(".json")) continue;
-    const id = entry.filename.slice(0, -5);
-    try {
-      const item = await readStoredItem(sftp, dirs, id);
-      if (new Date(item.deletedAt).getTime() < cutoff) {
-        if (await exists(sftp, item.trashPath))
-          await removeTree(sftp, item.trashPath);
-        await unlink(sftp, path.posix.join(dirs.info, entry.filename));
-        continue;
-      }
-      if (await exists(sftp, item.trashPath)) items.push(publicItem(item));
-      else await unlink(sftp, path.posix.join(dirs.info, entry.filename));
-    } catch {
-      // Ignore corrupt metadata without exposing arbitrary paths to deletion.
-    }
-  }
-  return items.sort((a, b) => b.deletedAt.localeCompare(a.deletedAt));
-}
-
-export async function restoreTrashItem(sftp: SFTPWrapper, id: string) {
-  const dirs = await trashPaths(sftp);
-  const item = await readStoredItem(sftp, dirs, id);
-  if (await exists(sftp, item.originalPath)) {
-    throw new Error("A file already exists at the original path");
-  }
-  await rename(sftp, item.trashPath, item.originalPath);
-  await unlink(sftp, path.posix.join(dirs.info, `${id}.json`));
-  return publicItem(item);
-}
-
-export async function permanentlyDeleteTrashItem(
-  sftp: SFTPWrapper,
-  id: string,
-) {
-  const dirs = await trashPaths(sftp);
-  const item = await readStoredItem(sftp, dirs, id);
-  if (await exists(sftp, item.trashPath))
-    await removeTree(sftp, item.trashPath);
-  await unlink(sftp, path.posix.join(dirs.info, `${id}.json`));
-}
-
-export async function emptyTrash(sftp: SFTPWrapper) {
-  const items = await listTrash(sftp, 365_000);
-  for (const item of items) await permanentlyDeleteTrashItem(sftp, item.id);
-  return items.length;
-}
diff --git a/plugins/file-manager/src/backend/utils.ts b/plugins/file-manager/src/backend/utils.ts
deleted file mode 100644
index 5a0cf569f..000000000
--- a/plugins/file-manager/src/backend/utils.ts
+++ /dev/null
@@ -1,164 +0,0 @@
-export function isExecutableFile(
-  permissions: string,
-  fileName: string,
-): boolean {
-  const hasExecutePermission =
-    permissions[3] === "x" || permissions[6] === "x" || permissions[9] === "x";
-
-  const scriptExtensions = [
-    ".sh",
-    ".py",
-    ".pl",
-    ".rb",
-    ".js",
-    ".php",
-    ".bash",
-    ".zsh",
-    ".fish",
-  ];
-  const hasScriptExtension = scriptExtensions.some((ext) =>
-    fileName.toLowerCase().endsWith(ext),
-  );
-
-  const executableExtensions = [".bin", ".exe", ".out"];
-  const hasExecutableExtension = executableExtensions.some((ext) =>
-    fileName.toLowerCase().endsWith(ext),
-  );
-
-  const hasNoExtension = !fileName.includes(".") && hasExecutePermission;
-
-  return (
-    hasExecutePermission &&
-    (hasScriptExtension || hasExecutableExtension || hasNoExtension)
-  );
-}
-
-export function modeToPermissions(mode: number): string {
-  const S_IFDIR = 0o040000;
-  const S_IFLNK = 0o120000;
-  const S_IFMT = 0o170000;
-
-  const type = mode & S_IFMT;
-  const prefix = type === S_IFDIR ? "d" : type === S_IFLNK ? "l" : "-";
-
-  const perms = [
-    mode & 0o400 ? "r" : "-",
-    mode & 0o200 ? "w" : "-",
-    mode & 0o100 ? "x" : "-",
-    mode & 0o040 ? "r" : "-",
-    mode & 0o020 ? "w" : "-",
-    mode & 0o010 ? "x" : "-",
-    mode & 0o004 ? "r" : "-",
-    mode & 0o002 ? "w" : "-",
-    mode & 0o001 ? "x" : "-",
-  ].join("");
-
-  return prefix + perms;
-}
-
-export function parseLsDateToTimestamp(dateStr: string): number {
-  const parts = dateStr.trim().split(/\s+/);
-  if (parts.length < 3) return 0;
-
-  const [month, day, timeOrYear] = parts;
-  const monthIndex = [
-    "Jan",
-    "Feb",
-    "Mar",
-    "Apr",
-    "May",
-    "Jun",
-    "Jul",
-    "Aug",
-    "Sep",
-    "Oct",
-    "Nov",
-    "Dec",
-  ].indexOf(month);
-  if (monthIndex === -1) return 0;
-
-  const dayNum = parseInt(day, 10);
-  const now = new Date();
-
-  if (timeOrYear.includes(":")) {
-    const [hours, minutes] = timeOrYear.split(":").map(Number);
-    let year = now.getFullYear();
-    const candidate = new Date(year, monthIndex, dayNum, hours, minutes);
-    if (candidate > now) year -= 1;
-    return new Date(year, monthIndex, dayNum, hours, minutes).getTime() / 1000;
-  }
-
-  const year = parseInt(timeOrYear, 10);
-  if (isNaN(year)) return 0;
-  return new Date(year, monthIndex, dayNum).getTime() / 1000;
-}
-
-export function formatMtime(mtime: number): string {
-  const date = new Date(mtime * 1000);
-  const months = [
-    "Jan",
-    "Feb",
-    "Mar",
-    "Apr",
-    "May",
-    "Jun",
-    "Jul",
-    "Aug",
-    "Sep",
-    "Oct",
-    "Nov",
-    "Dec",
-  ];
-  const month = months[date.getMonth()];
-  const day = date.getDate().toString().padStart(2, " ");
-  const now = new Date();
-  const sixMonthsAgo = new Date(now.getTime() - 180 * 24 * 60 * 60 * 1000);
-
-  if (date > sixMonthsAgo) {
-    const hours = date.getHours().toString().padStart(2, "0");
-    const minutes = date.getMinutes().toString().padStart(2, "0");
-    return `${month} ${day} ${hours}:${minutes}`;
-  }
-  return `${month} ${day}  ${date.getFullYear()}`;
-}
-
-export function getMimeType(fileName: string): string {
-  const ext = fileName.split(".").pop()?.toLowerCase();
-  const mimeTypes: Record<string, string> = {
-    txt: "text/plain",
-    json: "application/json",
-    js: "text/javascript",
-    html: "text/html",
-    css: "text/css",
-    png: "image/png",
-    jpg: "image/jpeg",
-    jpeg: "image/jpeg",
-    gif: "image/gif",
-    pdf: "application/pdf",
-    zip: "application/zip",
-    tar: "application/x-tar",
-    gz: "application/gzip",
-  };
-  return mimeTypes[ext || ""] || "application/octet-stream";
-}
-
-export function detectBinary(buffer: Buffer): boolean {
-  if (buffer.length === 0) return false;
-
-  const sampleSize = Math.min(buffer.length, 8192);
-  let nullBytes = 0;
-
-  for (let i = 0; i < sampleSize; i++) {
-    const byte = buffer[i];
-
-    if (byte === 0) {
-      nullBytes++;
-    }
-
-    if (byte < 32 && byte !== 9 && byte !== 10 && byte !== 13) {
-      if (++nullBytes > 1) return true;
-    }
-  }
-
-  return nullBytes / sampleSize > 0.01;
-}
diff --git a/plugins/file-manager/src/frontend/FileManager.tsx b/plugins/file-manager/src/frontend/FileManager.tsx
deleted file mode 100644
index 9d10f5ff9..000000000
--- a/plugins/file-manager/src/frontend/FileManager.tsx
+++ /dev/null
@@ -1,3775 +0,0 @@
-import { fileManagerHostSetting } from "./host-settings";
-import { getErrorMessage } from "./lib/error-message";
-/* eslint-disable react-hooks/exhaustive-deps */
-import React, {
-  useState,
-  useEffect,
-  useRef,
-  useCallback,
-  useMemo,
-} from "react";
-import { asHttpError } from "./lib/http-error";
-import { cn } from "@termix/plugin-sdk/ui";
-import { FileManagerGrid } from "./FileManagerGrid.tsx";
-import { FileManagerSidebar, type SidebarItem } from "./FileManagerSidebar.tsx";
-import { FileManagerContextMenu } from "./FileManagerContextMenu.tsx";
-import { useFileSelection } from "./hooks/useFileSelection.ts";
-import { useDragAndDrop } from "./hooks/useDragAndDrop.ts";
-import {
-  WindowManager,
-  useWindowManager,
-} from "./components/WindowManager.tsx";
-import { FileWindow } from "./components/FileWindow.tsx";
-import { DownloadProgressToast } from "./components/DownloadProgressToast.tsx";
-import { DiffWindow } from "./components/DiffWindow.tsx";
-import { useDragToDesktop } from "./hooks/useDragToDesktop";
-import { useDragToSystemDesktop } from "./hooks/useDragToSystemDesktop";
-import { useConfirmation } from "@termix/plugin-sdk/ui";
-import { toast } from "sonner";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { FileManagerDialogs } from "./FileManagerDialogs.tsx";
-import { PassphraseDialog } from "@termix/plugin-sdk/ui";
-import { FileManagerToolbar } from "./FileManagerToolbar.tsx";
-import { LocalFilePane } from "./LocalFilePane.tsx";
-import { useLocalTransfers } from "./hooks/useLocalTransfers.ts";
-import { usePaneWidth } from "./hooks/usePaneWidth.ts";
-import { PaneResizeHandle } from "./components/PaneResizeHandle.tsx";
-import { isLocalFileBrowserAvailable } from "./lib/local-files";
-import { TransferToHostDialog } from "./components/TransferToHostDialog.tsx";
-import { FileManagerTrashDialog } from "./FileManagerTrashDialog.tsx";
-import { TerminalWindow } from "./components/TerminalWindow.tsx";
-import type { SSHHost, FileItem } from "./host-types";
-import {
-  ConnectionLogProvider,
-  useConnectionLog,
-  ConnectionScreen,
-} from "@termix/plugin-sdk/ui";
-import { ConnectionLogPanel } from "@termix/plugin-sdk/ui";
-import {
-  usePluginUiPreferences,
-  invokeAction,
-  useSettings,
-  useConnectionRetry,
-  logActivity,
-} from "@termix/plugin-sdk/frontend";
-import { copyToClipboard } from "@termix/plugin-sdk/ui";
-import {
-  listSSHFiles,
-  readSSHFile,
-  resolveSSHPath,
-  uploadSSHFile,
-  createSSHFile,
-  createSSHFolder,
-  deleteSSHItem,
-  copySSHItem,
-  renameSSHItem,
-  moveSSHItem,
-  connectSSH,
-  verifySSHTOTP,
-  verifySSHBrowserSignIn,
-  getSSHStatus,
-  keepSSHAlive,
-  identifySSHSymlink,
-  changeSSHPermissions,
-  extractSSHArchive,
-  compressSSHFiles,
-  setSudoPassword,
-} from "./api/ssh-file-operations-api";
-import {
-  addRecentFile,
-  addPinnedFile,
-  removePinnedFile,
-  removeRecentFile,
-  addFolderShortcut,
-  getPinnedFiles,
-} from "./api/file-manager-data-api";
-import {
-  transferToHost,
-  addTransferRecent,
-  type TransferMethodPreference,
-} from "./api/transfer-api";
-import type { DiskFilesystem, HostDiskInfo } from "./disk-info";
-import {
-  getAdaptiveResourceBudget,
-  markAdaptiveResourceUsed,
-  runAdaptiveBackgroundTask,
-} from "@termix/plugin-sdk/ui";
-import { shouldPrefetchFileContent } from "./lib/file-content-request-cache";
-import {
-  markFilePreviewUsed,
-  preloadFilePreview,
-} from "./file-preview-preload";
-import { beginTransferProgressMonitoring } from "./transferProgressMonitor.tsx";
-import { createFormatTransferMetrics } from "./transferMetricsFormat.ts";
-import type {
-  CreateIntent,
-  FileManagerProps,
-  PendingSudoOperation,
-  SSHConnectionError,
-} from "./file-manager-types.ts";
-import { formatFileSize, runWithConcurrency } from "./file-manager-utils.ts";
-import {
-  invalidateCachedFileList,
-  peekCachedFileList,
-  updateCachedFileList,
-} from "./lib/file-list-request-cache";
-import {
-  addOptimisticItem,
-  childPath,
-  removePaths,
-  renameOptimisticItem,
-  restoreItems,
-} from "./optimistic-file-list";
-
-const LOCAL_PANE_OPEN_STORAGE_KEY = "termix:file-manager:local-pane:open";
-const SIDEBAR_OPEN_STORAGE_KEY = "termix:file-manager:sidebar:open";
-const LOCAL_PANE_WIDTH_STORAGE_KEY = "termix:file-manager:local-pane:width";
-const LOCAL_PANE_MIN_WIDTH = 300;
-const LOCAL_PANE_DEFAULT_WIDTH = 440;
-const SIDEBAR_WIDTH_STORAGE_KEY = "termix:file-manager:sidebar:width";
-const SIDEBAR_MIN_WIDTH = 160;
-const SIDEBAR_DEFAULT_WIDTH = 224; // matches the previous fixed w-56
-
-const LARGE_FILE_WARNING_SIZE = 50 * 1024 * 1024;
-
-function FileManagerContent({
-  initialHost,
-  initialFilePath,
-  initialPath,
-  onClose,
-  onOpenTerminalTab,
-  isVisible = true,
-}: FileManagerProps) {
-  const { openWindow } = useWindowManager();
-  const { t } = useTranslation();
-  const formatTransferMetrics = useMemo(
-    () => createFormatTransferMetrics(t),
-    [t],
-  );
-  const { confirmWithToast } = useConfirmation();
-  const confirmBeforeTrash =
-    useSettings("user").values.confirmBeforeTrash !== false;
-  const { addLog, clearLogs } = useConnectionLog();
-
-  const [currentHost] = useState<SSHHost | null>(initialHost || null);
-  const [currentPath, setCurrentPath] = useState(
-    initialPath ||
-      fileManagerHostSetting(initialHost, "defaultPath", "") ||
-      ".",
-  );
-  const currentPathRef = useRef(currentPath);
-  currentPathRef.current = currentPath;
-  const lastSuccessfulPathRef = useRef(
-    initialPath ||
-      fileManagerHostSetting(initialHost, "defaultPath", "") ||
-      ".",
-  );
-  const [navHistory, setNavHistory] = useState<string[]>([
-    initialPath ||
-      fileManagerHostSetting(initialHost, "defaultPath", "") ||
-      ".",
-  ]);
-  const [navIndex, setNavIndex] = useState(0);
-  const [files, setFiles] = useState<FileItem[]>([]);
-  const filesRef = useRef(files);
-  filesRef.current = files;
-  const directoryRequestRef = useRef(0);
-  const [isLoading, setIsLoading] = useState(false);
-  const [sshSessionId, setSshSessionId] = useState<string | null>(null);
-  const sshSessionIdRef = useRef(sshSessionId);
-  sshSessionIdRef.current = sshSessionId;
-  const [isReconnecting, setIsReconnecting] = useState<boolean>(false);
-  const [searchQuery, setSearchQuery] = useState("");
-  const [lastRefreshTime, setLastRefreshTime] = useState<number>(0);
-  // An interface preset sets this too, so it is a plugin UI preference.
-  const { values: fmPrefs, set: setFmPref } = usePluginUiPreferences<{
-    viewMode: "grid" | "list";
-  }>();
-  const viewMode: "grid" | "list" =
-    fmPrefs.viewMode === "list" ? "list" : "grid";
-  const setViewMode = useCallback(
-    (next: "grid" | "list") => setFmPref("viewMode", next),
-    [setFmPref],
-  );
-  useEffect(() => {
-    // Before 2.9 the view mode lived in this browser's localStorage.
-    try {
-      const legacy = localStorage.getItem("fileManagerViewMode");
-      if (legacy === null) return;
-      localStorage.removeItem("fileManagerViewMode");
-      if (legacy === "grid" || legacy === "list") setFmPref("viewMode", legacy);
-    } catch {
-      // Storage can be unavailable.
-    }
-  }, []);
-  const [density, setDensity] = useState<"comfortable" | "compact">(() =>
-    localStorage.getItem("fileManagerDensity") === "compact"
-      ? "compact"
-      : "comfortable",
-  );
-  const [sortBy, setSortBy] = useState<"name" | "modified" | "size">(() => {
-    const saved = localStorage.getItem("fileManagerSortBy");
-    return saved === "name" || saved === "modified" || saved === "size"
-      ? saved
-      : "name";
-  });
-  const [sortOrder, setSortOrder] = useState<"asc" | "desc">(() => {
-    const saved = localStorage.getItem("fileManagerSortOrder");
-    return saved === "asc" || saved === "desc" ? saved : "asc";
-  });
-  const [totpRequired, setTotpRequired] = useState(false);
-  const [totpSessionId, setTotpSessionId] = useState<string | null>(null);
-  const [totpPrompt, setTotpPrompt] = useState<string>("");
-  const [browserSignInRequired, setBrowserSignInRequired] = useState(false);
-  const [browserSignInSessionId, setBrowserSignInSessionId] = useState<
-    string | null
-  >(null);
-  const [browserSignInUrl, setBrowserSignInUrl] = useState<string>("");
-  const [browserSignInCode, setBrowserSignInCode] = useState<string>("");
-  const [browserSignInLabel, setBrowserSignInLabel] = useState<string>("");
-  const [showAuthDialog, setShowAuthDialog] = useState(false);
-  const [authDialogReason, setAuthDialogReason] = useState<
-    "no_keyboard" | "auth_failed" | "timeout"
-  >("no_keyboard");
-  const [showPassphraseDialog, setShowPassphraseDialog] = useState(false);
-  const [pinnedFiles, setPinnedFiles] = useState<Set<string>>(new Set());
-  const [sidebarRefreshTrigger, setSidebarRefreshTrigger] = useState(0);
-  // Desktop-only Local | Remote split view (Termius-style dual pane).
-  const localPaneAvailable = isLocalFileBrowserAvailable();
-  const [localPaneOpen, setLocalPaneOpen] = useState<boolean>(() => {
-    try {
-      return localStorage.getItem(LOCAL_PANE_OPEN_STORAGE_KEY) === "true";
-    } catch {
-      return false;
-    }
-  });
-  const [localPaneRefreshToken, setLocalPaneRefreshToken] = useState(0);
-  // Desktop directories sidebar visibility (mobile uses the overlay state).
-  const [sidebarOpen, setSidebarOpen] = useState<boolean>(() => {
-    try {
-      return localStorage.getItem(SIDEBAR_OPEN_STORAGE_KEY) !== "false";
-    } catch {
-      return true;
-    }
-  });
-  const toggleSidebar = useCallback(() => {
-    setSidebarOpen((prev) => {
-      const next = !prev;
-      try {
-        localStorage.setItem(SIDEBAR_OPEN_STORAGE_KEY, String(next));
-      } catch {
-        // storage unavailable
-      }
-      return next;
-    });
-  }, []);
-  const panesRowRef = useRef<HTMLDivElement>(null);
-  const localPaneSize = usePaneWidth({
-    storageKey: LOCAL_PANE_WIDTH_STORAGE_KEY,
-    defaultWidth: LOCAL_PANE_DEFAULT_WIDTH,
-    minWidth: LOCAL_PANE_MIN_WIDTH,
-    maxFraction: 0.65,
-    containerRef: panesRowRef,
-  });
-  const sidebarSize = usePaneWidth({
-    storageKey: SIDEBAR_WIDTH_STORAGE_KEY,
-    defaultWidth: SIDEBAR_DEFAULT_WIDTH,
-    minWidth: SIDEBAR_MIN_WIDTH,
-    maxFraction: 0.4,
-    containerRef: panesRowRef,
-  });
-  const toggleLocalPane = useCallback(() => {
-    setLocalPaneOpen((prev) => {
-      const next = !prev;
-      try {
-        localStorage.setItem(LOCAL_PANE_OPEN_STORAGE_KEY, String(next));
-      } catch {
-        // storage unavailable
-      }
-      return next;
-    });
-  }, []);
-  const [trashOpen, setTrashOpen] = useState(false);
-  const [hasConnectionError, setHasConnectionError] = useState<boolean>(false);
-  const [mobileSidebarOpen, setMobileSidebarOpen] = useState(false);
-  const [diskInfo, setDiskInfo] = useState<{
-    usedHuman: string;
-    totalHuman: string;
-    percent: number;
-    mount: string | null;
-    filesystems: DiskFilesystem[];
-  } | null>(null);
-
-  const [contextMenu, setContextMenu] = useState<{
-    x: number;
-    y: number;
-    isVisible: boolean;
-    files: FileItem[];
-  }>({
-    x: 0,
-    y: 0,
-    isVisible: false,
-    files: [],
-  });
-
-  const [clipboard, setClipboard] = useState<{
-    files: FileItem[];
-    operation: "copy" | "cut";
-    sourceHostId: number | null;
-    sourceSessionId: string | null;
-  } | null>(null);
-
-  interface UndoAction {
-    type: "copy" | "cut" | "delete";
-    description: string;
-    data: {
-      operation: "copy" | "cut";
-      copiedFiles?: {
-        originalPath: string;
-        targetPath: string;
-        targetName: string;
-      }[];
-      deletedFiles?: { path: string; name: string }[];
-      targetDirectory?: string;
-    };
-    timestamp: number;
-  }
-
-  const [undoHistory, setUndoHistory] = useState<UndoAction[]>([]);
-
-  const [createIntent, setCreateIntent] = useState<CreateIntent | null>(null);
-  const [editingFile, setEditingFile] = useState<FileItem | null>(null);
-  const [permissionsDialogFile, setPermissionsDialogFile] =
-    useState<FileItem | null>(null);
-  const [compressDialogFiles, setCompressDialogFiles] = useState<FileItem[]>(
-    [],
-  );
-  const [transferDialogOpen, setTransferDialogOpen] = useState(false);
-  const [transferFiles, setTransferFiles] = useState<FileItem[]>([]);
-  const [transferMove, setTransferMove] = useState(false);
-
-  const [sudoDialogOpen, setSudoDialogOpen] = useState(false);
-  const [pendingSudoOperation, setPendingSudoOperation] =
-    useState<PendingSudoOperation | null>(null);
-
-  const { selectedFiles, clearSelection, setSelection } = useFileSelection();
-
-  const commitFilesForPath = useCallback(
-    (sessionId: string, path: string, next: FileItem[]) => {
-      updateCachedFileList(sessionId, path, next);
-      if (
-        sshSessionIdRef.current !== sessionId ||
-        currentPathRef.current !== path
-      ) {
-        return;
-      }
-      directoryRequestRef.current += 1;
-      filesRef.current = next;
-      setFiles(next);
-    },
-    [],
-  );
-
-  const filesForPath = useCallback((sessionId: string, path: string) => {
-    if (
-      sshSessionIdRef.current === sessionId &&
-      currentPathRef.current === path
-    ) {
-      return filesRef.current;
-    }
-    return peekCachedFileList(sessionId, path)?.files ?? [];
-  }, []);
-
-  const { dragHandlers } = useDragAndDrop({
-    onFilesDropped: handleFilesDropped,
-    onItemsDropped: handleItemsDropped,
-    onError: (error) => toast.error(error),
-    maxFileSize: 5120,
-  });
-
-  const dragToDesktop = useDragToDesktop({
-    sshSessionId: sshSessionId || "",
-    sshHost: currentHost!,
-  });
-
-  const systemDrag = useDragToSystemDesktop({
-    sshSessionId: sshSessionId || "",
-    sshHost: currentHost!,
-  });
-
-  const startKeepalive = useCallback(() => {
-    if (!sshSessionId) return;
-
-    if (keepaliveTimerRef.current) {
-      clearInterval(keepaliveTimerRef.current);
-    }
-
-    keepaliveTimerRef.current = setInterval(async () => {
-      if (sshSessionId) {
-        try {
-          await keepSSHAlive(sshSessionId);
-        } catch (error) {
-          console.error("SSH keepalive failed:", error);
-        }
-      }
-    }, 30 * 1000);
-  }, [sshSessionId]);
-
-  const stopKeepalive = useCallback(() => {
-    if (keepaliveTimerRef.current) {
-      clearInterval(keepaliveTimerRef.current);
-      keepaliveTimerRef.current = null;
-    }
-  }, []);
-
-  const handleCloseWithError = useCallback(
-    (errorMessage: string) => {
-      setHasConnectionError(true);
-      addLog({
-        type: "error",
-        stage: "connection",
-        message: errorMessage,
-      });
-      connectRetryRef.current?.markFailed();
-    },
-    [addLog],
-  );
-
-  const connectRetry = useConnectionRetry({
-    connect: () => {
-      void initializeSSHConnection();
-    },
-    enabled:
-      !!currentHost &&
-      !sshSessionId &&
-      !totpRequired &&
-      !browserSignInRequired &&
-      !showAuthDialog &&
-      !showPassphraseDialog,
-    autoStart: false,
-  });
-  const connectRetryRef = useRef(connectRetry);
-  connectRetryRef.current = connectRetry;
-
-  useEffect(() => {
-    if (currentHost) {
-      connectRetryRef.current.reset();
-      connectRetryRef.current.retryNow();
-    }
-  }, [currentHost]);
-
-  useEffect(() => {
-    if (sshSessionId && isVisible) {
-      startKeepalive();
-    } else {
-      stopKeepalive();
-    }
-
-    return () => {
-      stopKeepalive();
-    };
-  }, [sshSessionId, isVisible, startKeepalive, stopKeepalive]);
-
-  const initialFileOpenedRef = useRef(false);
-  useEffect(() => {
-    if (!sshSessionId || !initialFilePath || initialFileOpenedRef.current)
-      return;
-    initialFileOpenedRef.current = true;
-
-    const fileName = initialFilePath.split("/").pop() || initialFilePath;
-    const fileDir =
-      initialFilePath.lastIndexOf("/") > 0
-        ? initialFilePath.substring(0, initialFilePath.lastIndexOf("/"))
-        : "/";
-
-    setCurrentPath(fileDir);
-
-    const file: FileItem = {
-      name: fileName,
-      path: initialFilePath,
-      type: "file",
-    };
-
-    const windowCount = Date.now() % 10;
-    const offsetX = Math.min(
-      120 + windowCount * 30,
-      Math.max(0, window.innerWidth - 820),
-    );
-    const offsetY = Math.min(
-      120 + windowCount * 30,
-      Math.max(0, window.innerHeight - 620),
-    );
-
-    const createWindowComponent = (windowId: string) => (
-      <FileWindow
-        windowId={windowId}
-        file={file}
-        sshSessionId={sshSessionId}
-        sshHost={currentHost}
-        initialX={offsetX}
-        initialY={offsetY}
-        onFileNotFound={handleFileNotFound}
-      />
-    );
-
-    openWindow({
-      title: fileName,
-      x: offsetX,
-      y: offsetY,
-      width: 800,
-      height: 600,
-      isMaximized: false,
-      isMinimized: false,
-      component: createWindowComponent,
-    });
-  }, [sshSessionId, initialFilePath]);
-
-  const initialLoadDoneRef = useRef(false);
-  const lastPathChangeRef = useRef<string>("");
-  const pathChangeTimerRef = useRef<NodeJS.Timeout | null>(null);
-  const currentLoadingPathRef = useRef<string>("");
-  const keepaliveTimerRef = useRef<NodeJS.Timeout | null>(null);
-  const activityLoggedRef = useRef(false);
-  const activityLoggingRef = useRef(false);
-
-  const logFileManagerActivity = useCallback(async () => {
-    if (
-      !currentHost?.id ||
-      activityLoggedRef.current ||
-      activityLoggingRef.current
-    ) {
-      return;
-    }
-
-    activityLoggingRef.current = true;
-    activityLoggedRef.current = true;
-
-    try {
-      const hostName =
-        currentHost.name || `${currentHost.username}@${currentHost.ip}`;
-      await logActivity("file_manager", currentHost.id, hostName);
-    } catch (err) {
-      console.warn("Failed to log file manager activity:", err);
-      activityLoggedRef.current = false;
-    } finally {
-      activityLoggingRef.current = false;
-    }
-  }, [currentHost]);
-
-  const handleFileDragStart = useCallback(
-    (files: FileItem[]) => {
-      systemDrag.startDragToSystem(files, {
-        enableToast: true,
-        onSuccess: () => {
-          clearSelection();
-        },
-        onError: (error) => {
-          console.error("Drag failed:", error);
-        },
-      });
-    },
-    [systemDrag, clearSelection],
-  );
-
-  const handleFileDragEnd = useCallback(
-    (e: DragEvent, draggedFiles: FileItem[]) => {
-      const isOutside =
-        e.clientX < 0 ||
-        e.clientX > window.innerWidth ||
-        e.clientY < 0 ||
-        e.clientY > window.innerHeight;
-
-      if (isOutside) {
-        if (draggedFiles.length === 0) {
-          console.error("No files to drag - this should not happen");
-          return;
-        }
-
-        systemDrag.startDragToSystem(draggedFiles, {
-          enableToast: true,
-          onSuccess: () => {
-            clearSelection();
-          },
-          onError: (error) => {
-            console.error("Drag failed:", error);
-          },
-        });
-        systemDrag.handleDragEnd(e);
-      } else {
-        systemDrag.cancelDragToSystem();
-      }
-    },
-    [systemDrag, clearSelection],
-  );
-
-  const isConnectingRef = useRef(false);
-
-  async function initializeSSHConnection() {
-    if (!currentHost || isConnectingRef.current) return;
-
-    if (currentHost.enableSsh === false) {
-      setHasConnectionError(true);
-      addLog({
-        type: "error",
-        stage: "error",
-        message: t("fileManager.sshRequiredForFileManager"),
-      });
-      setIsLoading(false);
-      return;
-    }
-
-    isConnectingRef.current = true;
-
-    try {
-      setIsLoading(true);
-      initialLoadDoneRef.current = false;
-      setHasConnectionError(false);
-      clearLogs();
-
-      const sessionId = currentHost.id.toString();
-
-      const result = await connectSSH(sessionId, {
-        hostId: currentHost.id,
-        ip: currentHost.ip,
-        port: currentHost.port,
-        username: currentHost.username,
-        password: currentHost.password,
-        sshKey: currentHost.key,
-        keyPassword: currentHost.keyPassword,
-        authType: currentHost.authType,
-        credentialId: currentHost.credentialId,
-        userId: currentHost.userId,
-        forceKeyboardInteractive: currentHost.forceKeyboardInteractive,
-        jumpHosts: currentHost.jumpHosts,
-        useSocks5: currentHost.useSocks5,
-        socks5Host: currentHost.socks5Host,
-        socks5Port: currentHost.socks5Port,
-        socks5Username: currentHost.socks5Username,
-        socks5Password: currentHost.socks5Password,
-        socks5ProxyChain: currentHost.socks5ProxyChain,
-      });
-
-      if (result?.requires_browser_sign_in) {
-        setBrowserSignInRequired(true);
-        setBrowserSignInSessionId(sessionId);
-        setBrowserSignInUrl(result.url || "");
-        setBrowserSignInCode(result.code || "N/A");
-        setBrowserSignInLabel(result.label || "");
-        setIsLoading(false);
-        return;
-      }
-
-      if (result?.requires_totp) {
-        setTotpRequired(true);
-        setTotpSessionId(sessionId);
-        setTotpPrompt(result.prompt || t("fileManager.verificationCodePrompt"));
-        setIsLoading(false);
-        return;
-      }
-
-      if (result?.status === "auth_required") {
-        setAuthDialogReason(result.reason || "no_keyboard");
-        setShowAuthDialog(true);
-        setIsLoading(false);
-        return;
-      }
-
-      if (result?.status === "passphrase_required") {
-        setShowPassphraseDialog(true);
-        setIsLoading(false);
-        return;
-      }
-
-      setSshSessionId(sessionId);
-      connectRetryRef.current.markConnected();
-
-      try {
-        const response = await listSSHFiles(sessionId, currentPath);
-        const files = Array.isArray(response)
-          ? response
-          : response?.files || [];
-        setFiles(files);
-        const listedPath = response.path || currentPath;
-        setCurrentPath(listedPath);
-        setNavHistory((history) =>
-          history.map((path) => (path === "." ? listedPath : path)),
-        );
-        lastSuccessfulPathRef.current = listedPath;
-        clearSelection();
-        initialLoadDoneRef.current = true;
-
-        if (!result?.requires_totp) {
-          logFileManagerActivity();
-        }
-      } catch (dirError: unknown) {
-        console.error("Failed to load initial directory:", dirError);
-      }
-    } catch (error: unknown) {
-      const sshError = error as SSHConnectionError;
-      console.error("SSH connection failed:", error);
-
-      if (sshError.connectionLogs) {
-        sshError.connectionLogs.forEach((log) => {
-          addLog({
-            type: log.type,
-            stage: log.stage,
-            message: log.message,
-            details: log.details,
-          });
-        });
-        if (sshError.requires_totp) {
-          setTotpRequired(true);
-          setTotpSessionId(sshError.sessionId || currentHost.id.toString());
-          setTotpPrompt(
-            sshError.prompt || t("fileManager.verificationCodePrompt"),
-          );
-          setIsLoading(false);
-          return;
-        }
-        if (sshError.requires_browser_sign_in) {
-          setBrowserSignInRequired(true);
-          setBrowserSignInSessionId(
-            sshError.sessionId || currentHost.id.toString(),
-          );
-          setBrowserSignInUrl(sshError.url || "");
-          setBrowserSignInCode(sshError.code || "N/A");
-          setBrowserSignInLabel(sshError.label || "");
-          setIsLoading(false);
-          return;
-        }
-        if (sshError.status === "auth_required") {
-          setAuthDialogReason(sshError.reason || "no_keyboard");
-          setShowAuthDialog(true);
-          setIsLoading(false);
-          return;
-        }
-      } else {
-        addLog({
-          type: "error",
-          stage: "connection",
-          message:
-            error instanceof Error
-              ? error.message
-              : t("fileManager.failedToConnect"),
-        });
-      }
-
-      handleCloseWithError(
-        t("fileManager.failedToConnect") +
-          ": " +
-          getErrorMessage(error, String(error)),
-      );
-    } finally {
-      setIsLoading(false);
-      isConnectingRef.current = false;
-    }
-  }
-
-  const loadDirectory = useCallback(
-    async (path: string, conflictAttempt = 0): Promise<boolean> => {
-      if (!sshSessionId) {
-        console.error("Cannot load directory: no SSH session ID");
-        return false;
-      }
-      const requestId = ++directoryRequestRef.current;
-
-      let resolvedPath = path;
-      if (path.includes("$") || path.startsWith("~")) {
-        resolvedPath = await resolveSSHPath(sshSessionId, path);
-        if (resolvedPath !== path) {
-          setCurrentPath(resolvedPath);
-          lastPathChangeRef.current = resolvedPath;
-        }
-      }
-
-      currentLoadingPathRef.current = resolvedPath;
-      const cached = peekCachedFileList(sshSessionId, resolvedPath);
-      if (cached) {
-        setFiles(cached.files);
-        clearSelection();
-      }
-      setIsLoading(!cached);
-
-      try {
-        const response = await listSSHFiles(sshSessionId, resolvedPath, {
-          force: cached !== null,
-        });
-
-        if (directoryRequestRef.current !== requestId) {
-          return false;
-        }
-
-        const files = Array.isArray(response)
-          ? response
-          : response?.files || [];
-
-        setFiles(files);
-        const listedPath = response.path || resolvedPath;
-        if (listedPath !== resolvedPath) {
-          setCurrentPath(listedPath);
-          setNavHistory((history) =>
-            history.map((entry) => (entry === path ? listedPath : entry)),
-          );
-        }
-        lastSuccessfulPathRef.current = listedPath;
-        clearSelection();
-        return true;
-      } catch (error: unknown) {
-        if (directoryRequestRef.current === requestId) {
-          // ApiError has .status directly; raw axios errors have .response.status
-          const apiError = error as {
-            status?: number;
-            code?: string;
-            response?: {
-              status?: number;
-              data?: {
-                needsSudo?: boolean;
-                error?: string;
-                sudoFailed?: boolean;
-                disconnected?: boolean;
-              };
-            };
-            message?: string;
-          };
-
-          const httpStatus = apiError.status ?? apiError.response?.status;
-
-          // The sidebar may be listing the same path to populate its tree.
-          // Retry instead of leaving the breadcrumb and visible files out of sync.
-          if (httpStatus === 409) {
-            if (conflictAttempt < 3) {
-              await new Promise((resolve) => setTimeout(resolve, 250));
-              return loadDirectory(resolvedPath, conflictAttempt + 1);
-            }
-            const previousPath = lastSuccessfulPathRef.current;
-            lastPathChangeRef.current = previousPath;
-            setCurrentPath((current) =>
-              current === resolvedPath ? previousPath : current,
-            );
-            return false;
-          }
-
-          if (apiError.response?.data?.needsSudo) {
-            const previousPath = lastSuccessfulPathRef.current;
-            lastPathChangeRef.current = previousPath;
-            setCurrentPath((current) =>
-              current === resolvedPath ? previousPath : current,
-            );
-            if (!sudoDialogOpen) {
-              setPendingSudoOperation({ type: "navigate", path: resolvedPath });
-              setSudoDialogOpen(true);
-            }
-
-            if (apiError.response.data.sudoFailed) {
-              toast.error(t("fileManager.sudoAuthFailed"));
-            } else {
-              toast.error(t("fileManager.permissionDenied"));
-            }
-            return false;
-          }
-
-          console.error("Failed to load directory:", error);
-
-          const errorMessage =
-            apiError.response?.data?.error || apiError.message || String(error);
-
-          const isConnectionError =
-            // 500s from the file manager are SSH channel/session errors
-            httpStatus === 500 ||
-            httpStatus === 503 ||
-            apiError.response?.data?.disconnected === true ||
-            errorMessage?.includes("channel open failure") ||
-            errorMessage?.includes("open failed") ||
-            errorMessage?.includes("SSH connection not established") ||
-            errorMessage?.includes("SSH session") ||
-            errorMessage?.toLowerCase().includes("not connected");
-
-          if (isConnectionError && sshSessionId && currentHost) {
-            setIsReconnecting(true);
-            setIsLoading(false);
-            setFiles([]);
-            currentLoadingPathRef.current = "";
-
-            void (async () => {
-              const delays = [1000, 2000, 3000, 5000, 5000];
-              for (let attempt = 0; attempt < delays.length; attempt++) {
-                await new Promise((r) => setTimeout(r, delays[attempt]));
-                try {
-                  await ensureSSHConnection();
-                  setIsReconnecting(false);
-                  loadDirectory(resolvedPath);
-                  return;
-                } catch {
-                  // keep retrying
-                }
-              }
-              setIsReconnecting(false);
-              handleCloseWithError(
-                t("fileManager.failedToLoadDirectory") + ": " + errorMessage,
-              );
-            })();
-
-            return false;
-          } else if (initialLoadDoneRef.current) {
-            const isPermissionDenied =
-              httpStatus === 403 ||
-              errorMessage?.toLowerCase().includes("permission denied") ||
-              errorMessage?.toLowerCase().includes("eacces");
-            if (isPermissionDenied) {
-              toast.error(t("fileManager.permissionDenied"));
-            } else {
-              toast.error(
-                t("fileManager.failedToLoadDirectory") + ": " + errorMessage,
-              );
-            }
-          }
-        }
-        return false;
-      } finally {
-        if (directoryRequestRef.current === requestId) {
-          setIsLoading(false);
-          currentLoadingPathRef.current = "";
-        }
-      }
-    },
-    [sshSessionId, clearSelection, t, sudoDialogOpen, currentHost],
-  );
-
-  const debouncedLoadDirectory = useCallback(
-    (path: string, force?: boolean) => {
-      if (pathChangeTimerRef.current) {
-        clearTimeout(pathChangeTimerRef.current);
-      }
-
-      pathChangeTimerRef.current = setTimeout(() => {
-        if ((force || path !== lastPathChangeRef.current) && sshSessionId) {
-          lastPathChangeRef.current = path;
-          loadDirectory(path);
-        }
-      }, 150);
-    },
-    [sshSessionId, loadDirectory],
-  );
-
-  const navigateTo = useCallback(
-    (path: string) => {
-      directoryRequestRef.current += 1;
-      const cached = sshSessionId
-        ? peekCachedFileList(sshSessionId, path)
-        : null;
-      if (cached) setFiles(cached.files);
-      setIsLoading(!!sshSessionId && !cached);
-      setCurrentPath(path);
-      setNavHistory((prev) => {
-        const next = [...prev.slice(0, navIndex + 1), path];
-        setNavIndex(next.length - 1);
-        return next;
-      });
-    },
-    [navIndex, sshSessionId],
-  );
-
-  const goBack = useCallback(() => {
-    if (navIndex > 0) {
-      directoryRequestRef.current += 1;
-      const newIndex = navIndex - 1;
-      const path = navHistory[newIndex];
-      const cached = sshSessionId
-        ? peekCachedFileList(sshSessionId, path)
-        : null;
-      if (cached) setFiles(cached.files);
-      setIsLoading(!!sshSessionId && !cached);
-      setNavIndex(newIndex);
-      setCurrentPath(path);
-    }
-  }, [navIndex, navHistory, sshSessionId]);
-
-  const goForward = useCallback(() => {
-    if (navIndex < navHistory.length - 1) {
-      directoryRequestRef.current += 1;
-      const newIndex = navIndex + 1;
-      const path = navHistory[newIndex];
-      const cached = sshSessionId
-        ? peekCachedFileList(sshSessionId, path)
-        : null;
-      if (cached) setFiles(cached.files);
-      setIsLoading(!!sshSessionId && !cached);
-      setNavIndex(newIndex);
-      setCurrentPath(path);
-    }
-  }, [navIndex, navHistory, sshSessionId]);
-
-  useEffect(() => {
-    const handleMouseNavigation = (event: MouseEvent) => {
-      if (event.button !== 3 && event.button !== 4) return;
-      event.preventDefault();
-      if (event.button === 3) goBack();
-      else goForward();
-    };
-    const preventBrowserMouseNavigation = (event: MouseEvent) => {
-      if (event.button === 3 || event.button === 4) event.preventDefault();
-    };
-
-    window.addEventListener("mouseup", handleMouseNavigation);
-    window.addEventListener("auxclick", preventBrowserMouseNavigation);
-    return () => {
-      window.removeEventListener("mouseup", handleMouseNavigation);
-      window.removeEventListener("auxclick", preventBrowserMouseNavigation);
-    };
-  }, [goBack, goForward]);
-
-  const goUp = useCallback(() => {
-    if (currentPath === "/") return;
-    const parent =
-      currentPath.substring(0, currentPath.lastIndexOf("/")) || "/";
-    navigateTo(parent);
-  }, [currentPath, navigateTo]);
-
-  useEffect(() => {
-    if (sshSessionId && currentPath) {
-      if (!initialLoadDoneRef.current) {
-        initialLoadDoneRef.current = true;
-        lastPathChangeRef.current = currentPath;
-        return;
-      }
-
-      debouncedLoadDirectory(currentPath);
-    }
-
-    return () => {
-      if (pathChangeTimerRef.current) {
-        clearTimeout(pathChangeTimerRef.current);
-      }
-    };
-  }, [sshSessionId, currentPath, debouncedLoadDirectory]);
-
-  const handleRefreshDirectory = useCallback(() => {
-    const now = Date.now();
-    const DEBOUNCE_MS = 500;
-
-    if (now - lastRefreshTime < DEBOUNCE_MS) {
-      return;
-    }
-
-    setLastRefreshTime(now);
-    if (sshSessionId) invalidateCachedFileList(sshSessionId, currentPath);
-    // Force reset loading state to ensure refresh is not blocked
-    setIsLoading(false);
-    currentLoadingPathRef.current = "";
-    loadDirectory(currentPath);
-  }, [currentPath, lastRefreshTime, loadDirectory, sshSessionId]);
-
-  useEffect(() => {
-    const handler = (event: Event) => {
-      const detail = (event as CustomEvent<{ hostId: number; path: string }>)
-        .detail;
-      if (!detail || !currentHost?.id) return;
-      if (detail.hostId === currentHost.id) {
-        handleRefreshDirectory();
-      }
-    };
-    window.addEventListener("file-manager:refresh", handler);
-    return () => window.removeEventListener("file-manager:refresh", handler);
-  }, [currentHost?.id, handleRefreshDirectory]);
-
-  const localTransfers = useLocalTransfers({
-    sshSessionId,
-    hostId: currentHost?.id,
-    ensureSSHConnection,
-    onRemoteChanged: (remoteDir) => {
-      if (sshSessionId) invalidateCachedFileList(sshSessionId, remoteDir);
-      handleRefreshDirectory();
-      setSidebarRefreshTrigger((prev) => prev + 1);
-    },
-    onLocalChanged: () => setLocalPaneRefreshToken((prev) => prev + 1),
-  });
-
-  // Entries dragged from the local pane onto the remote grid (or onto one of
-  // its folders) upload into that folder, preserving directory structure.
-  const handleLocalFilesDrop = useCallback(
-    (localPaths: string[], targetDir?: FileItem) => {
-      const remoteDir = targetDir?.path ?? currentPathRef.current;
-      void localTransfers.uploadLocalPaths(localPaths, remoteDir);
-    },
-    [localTransfers],
-  );
-
-  // Remote rows dragged onto the local pane download into the folder shown
-  // there (or the folder row they were dropped on).
-  const handleRemoteItemsDroppedToLocal = useCallback(
-    (remotePaths: string[], localDir: string) => {
-      const known = new Map(files.map((f) => [f.path, f]));
-      const items: FileItem[] = remotePaths.map(
-        (p) =>
-          known.get(p) ?? {
-            name: p.split("/").filter(Boolean).pop() || p,
-            path: p,
-            type: "file",
-          },
-      );
-      void localTransfers.downloadRemoteItems(items, localDir);
-    },
-    [files, localTransfers],
-  );
-
-  useEffect(() => {
-    const handler = (event: Event) => {
-      const detail = (
-        event as CustomEvent<{
-          files: FileItem[];
-          operation: "copy" | "cut";
-          sourceHostId: number | null;
-          sourceSessionId: string | null;
-        }>
-      ).detail;
-      if (!detail) return;
-      setClipboard(detail);
-    };
-    window.addEventListener("file-manager:clipboard", handler);
-    return () => window.removeEventListener("file-manager:clipboard", handler);
-  }, []);
-
-  useEffect(() => {
-    const handleKeyDown = (event: KeyboardEvent) => {
-      const activeElement = document.activeElement;
-      if (
-        activeElement &&
-        (activeElement.tagName === "INPUT" ||
-          activeElement.tagName === "TEXTAREA" ||
-          (activeElement as HTMLElement).contentEditable === "true")
-      ) {
-        return;
-      }
-
-      if (event.key === "T" && event.ctrlKey && event.shiftKey) {
-        event.preventDefault();
-        handleOpenTerminal(currentPath);
-      }
-    };
-
-    document.addEventListener("keydown", handleKeyDown);
-    return () => document.removeEventListener("keydown", handleKeyDown);
-  }, [currentPath]);
-
-  async function handleItemsDropped(entries: FileSystemEntry[]) {
-    if (!sshSessionId) {
-      toast.error(t("fileManager.noSSHConnection"));
-      return;
-    }
-
-    const files: { file: File; relativePath: string }[] = [];
-    const emptyDirs: string[] = [];
-
-    async function readEntry(
-      entry: FileSystemEntry,
-      path: string,
-    ): Promise<void> {
-      if (entry.isFile) {
-        const file = await new Promise<File>((resolve, reject) =>
-          (entry as FileSystemFileEntry).file(resolve, reject),
-        );
-        files.push({ file, relativePath: path });
-        return;
-      }
-
-      if (!entry.isDirectory) return;
-
-      // readEntries only hands back a page at a time and signals the end with an
-      // empty batch, so drain it fully before walking into the children.
-      const reader = (entry as FileSystemDirectoryEntry).createReader();
-      const children: FileSystemEntry[] = [];
-      for (;;) {
-        const batch = await new Promise<FileSystemEntry[]>((resolve, reject) =>
-          reader.readEntries(resolve, reject),
-        );
-        if (batch.length === 0) break;
-        children.push(...batch);
-      }
-
-      if (children.length === 0) {
-        emptyDirs.push(path);
-        return;
-      }
-
-      for (const child of children) {
-        await readEntry(child, `${path}/${child.name}`);
-      }
-    }
-
-    try {
-      for (const entry of entries) {
-        await readEntry(entry, entry.name);
-      }
-    } catch (error) {
-      toast.error(t("fileManager.failedToUploadFile"));
-      console.error("Failed to read dropped folder:", error);
-      return;
-    }
-
-    if (files.length === 0 && emptyDirs.length === 0) return;
-
-    const controller = new AbortController();
-    const cancel = {
-      label: t("fileManager.cancel"),
-      onClick: () => controller.abort(),
-    };
-    const progressToast = toast.loading(
-      t("fileManager.uploadingFolderFiles", { count: files.length }),
-      { duration: Infinity, cancel },
-    );
-
-    const failed: string[] = [];
-
-    try {
-      await ensureSSHConnection();
-
-      const base = currentPath.endsWith("/") ? currentPath : currentPath + "/";
-
-      const dirs = new Set<string>();
-      for (const relativePath of [
-        ...files.map((f) => f.relativePath),
-        ...emptyDirs.map((d) => `${d}/`),
-      ]) {
-        const parts = relativePath.split("/");
-        for (let i = 1; i < parts.length; i++) {
-          dirs.add(parts.slice(0, i).join("/"));
-        }
-      }
-
-      // Shallowest first so each parent exists before its children.
-      const sortedDirs = Array.from(dirs).sort(
-        (a, b) =>
-          a.split("/").length - b.split("/").length || a.localeCompare(b),
-      );
-      for (const dir of sortedDirs) {
-        controller.signal.throwIfAborted();
-        const parentDir = dir.split("/").slice(0, -1).join("/");
-        const targetPath = parentDir ? `${base}${parentDir}/` : base;
-        const folderName = dir.split("/").pop()!;
-        await createSSHFolder(
-          sshSessionId,
-          targetPath,
-          folderName,
-          currentHost?.id,
-        );
-      }
-
-      for (const { file, relativePath } of files) {
-        controller.signal.throwIfAborted();
-        const dirPart = relativePath.includes("/")
-          ? relativePath.substring(0, relativePath.lastIndexOf("/"))
-          : "";
-        const uploadPath = dirPart ? `${base}${dirPart}/` : currentPath;
-
-        try {
-          await uploadSSHFile(
-            sshSessionId,
-            uploadPath,
-            file.name,
-            file,
-            currentHost?.id,
-            undefined,
-            undefined,
-            controller.signal,
-          );
-        } catch (error) {
-          controller.signal.throwIfAborted();
-          failed.push(relativePath);
-          console.error(`Failed to upload ${relativePath}:`, error);
-        }
-      }
-
-      controller.signal.throwIfAborted();
-      toast.dismiss(progressToast);
-      if (failed.length === 0) {
-        toast.success(
-          t("fileManager.uploadedFolderFiles", { count: files.length }),
-        );
-      } else if (failed.length === files.length) {
-        toast.error(t("fileManager.failedToUploadFile"));
-      } else {
-        toast.warning(
-          t("fileManager.uploadedFolderPartial", {
-            uploaded: files.length - failed.length,
-            failed: failed.length,
-          }),
-        );
-      }
-      handleRefreshDirectory();
-    } catch (error) {
-      toast.dismiss(progressToast);
-      if (controller.signal.aborted) {
-        toast.info(t("fileManager.localTransferCancelled"));
-        handleRefreshDirectory();
-        return;
-      }
-      toast.error(t("fileManager.failedToUploadFile"));
-      console.error("Folder upload failed:", error);
-    }
-  }
-
-  async function handleFilesDropped(fileList: FileList) {
-    if (!sshSessionId) {
-      toast.error(t("fileManager.noSSHConnection"));
-      return;
-    }
-
-    await runWithConcurrency(Array.from(fileList), 3, handleUploadFile);
-  }
-
-  async function handleUploadFile(file: File) {
-    if (!sshSessionId) return;
-
-    const controller = new AbortController();
-    const cancel = {
-      label: t("fileManager.cancel"),
-      onClick: () => controller.abort(),
-    };
-    const progressToast = toast.loading(
-      t("fileManager.uploadingFile", {
-        name: file.name,
-        size: formatFileSize(file.size),
-      }),
-      { duration: Infinity, cancel },
-    );
-
-    const updateProgress = (p: {
-      chunkIndex: number;
-      totalChunks: number;
-      bytesSent: number;
-      totalBytes: number;
-    }) => {
-      if (controller.signal.aborted) return;
-      const percent = Math.min(
-        100,
-        Math.round((p.bytesSent / p.totalBytes) * 100),
-      );
-      toast.loading(
-        t("fileManager.uploadingChunk", {
-          name: file.name,
-          percent,
-          chunk: p.chunkIndex + 1,
-          total: p.totalChunks,
-        }),
-        { id: progressToast, duration: Infinity, cancel },
-      );
-    };
-
-    try {
-      await ensureSSHConnection();
-
-      await uploadSSHFile(
-        sshSessionId,
-        currentPath,
-        file.name,
-        file,
-        currentHost?.id,
-        undefined,
-        updateProgress,
-        controller.signal,
-      );
-      controller.signal.throwIfAborted();
-
-      toast.dismiss(progressToast);
-
-      toast.success(
-        t("fileManager.fileUploadedSuccessfully", { name: file.name }),
-      );
-      handleRefreshDirectory();
-    } catch (error: unknown) {
-      toast.dismiss(progressToast);
-      if (controller.signal.aborted) {
-        toast.info(t("fileManager.localTransferCancelled"));
-        handleRefreshDirectory();
-        return;
-      }
-      const uploadErr = error instanceof Error ? error : null;
-      if (
-        uploadErr?.message?.includes("connection") ||
-        uploadErr?.message?.includes("established")
-      ) {
-        toast.error(
-          t("fileManager.sshConnectionFailed", {
-            name: currentHost?.name,
-            ip: currentHost?.ip,
-            port: currentHost?.port,
-          }),
-        );
-      } else {
-        toast.error(t("fileManager.failedToUploadFile"));
-      }
-      console.error("Upload failed:", error);
-    }
-  }
-
-  async function handleDownloadFile(file: FileItem) {
-    if (!sshSessionId) return;
-
-    const toastId = `download-${file.path}-${Date.now()}`;
-    let lastLoaded = 0;
-    let lastTime = Date.now();
-    let mbPerSec: number | undefined;
-
-    try {
-      await ensureSSHConnection();
-
-      const { downloadSSHFileStream } =
-        await import("./api/ssh-file-operations-api");
-
-      toast.loading(
-        <DownloadProgressToast t={t} fileName={file.name} loaded={0} />,
-        {
-          id: toastId,
-          duration: Infinity,
-        },
-      );
-
-      await downloadSSHFileStream(
-        sshSessionId,
-        file.path,
-        ({ loaded, total }) => {
-          const now = Date.now();
-          const deltaMs = now - lastTime;
-          if (deltaMs > 200) {
-            const deltaBytes = loaded - lastLoaded;
-            if (deltaBytes >= 0) {
-              mbPerSec = (deltaBytes / deltaMs / 1024 / 1024) * 1000;
-            }
-            lastLoaded = loaded;
-            lastTime = now;
-          }
-
-          toast.loading(
-            <DownloadProgressToast
-              t={t}
-              fileName={file.name}
-              loaded={loaded}
-              total={total}
-              mbPerSec={mbPerSec}
-            />,
-            { id: toastId, duration: Infinity },
-          );
-        },
-      );
-
-      toast.success(
-        t("fileManager.fileDownloadedSuccessfully", { name: file.name }),
-        { id: toastId, duration: undefined },
-      );
-    } catch (error: unknown) {
-      const err = error instanceof Error ? error : null;
-      if (
-        err?.message?.includes("connection") ||
-        err?.message?.includes("established")
-      ) {
-        toast.error(
-          t("fileManager.sshConnectionFailed", {
-            name: currentHost?.name,
-            ip: currentHost?.ip,
-            port: currentHost?.port,
-          }),
-          { id: toastId, duration: undefined },
-        );
-      } else {
-        toast.error(t("fileManager.failedToDownloadFile"), {
-          id: toastId,
-          duration: undefined,
-        });
-      }
-      console.error("Download failed:", error);
-    }
-  }
-
-  async function handleDeleteFiles(files: FileItem[]) {
-    if (!sshSessionId || files.length === 0) return;
-
-    let confirmMessage: string;
-    if (files.length === 1) {
-      const file = files[0];
-      if (file.type === "directory") {
-        confirmMessage = t("fileManager.confirmDeleteFolder", {
-          name: file.name,
-        });
-      } else {
-        confirmMessage = t("fileManager.confirmDeleteSingleItem", {
-          name: file.name,
-        });
-      }
-    } else {
-      const hasDirectory = files.some((file) => file.type === "directory");
-      const translationKey = hasDirectory
-        ? "fileManager.confirmDeleteMultipleItemsWithFolders"
-        : "fileManager.confirmDeleteMultipleItems";
-
-      confirmMessage = t(translationKey, {
-        count: files.length,
-      });
-    }
-
-    const fullMessage = `${confirmMessage}\n\n${t("fileManager.moveToTrashWarning")}`;
-
-    const moveToTrash = async () => {
-      const operationPath = currentPath;
-      const operationSession = sshSessionId;
-      const deletedPaths = new Set(files.map((file) => file.path));
-      commitFilesForPath(
-        operationSession,
-        operationPath,
-        removePaths(
-          filesForPath(operationSession, operationPath),
-          deletedPaths,
-        ),
-      );
-      clearSelection();
-      let completed = 0;
-      try {
-        await ensureSSHConnection();
-
-        for (const file of files) {
-          await deleteSSHItem(
-            sshSessionId,
-            file.path,
-            file.type === "directory",
-            currentHost?.id,
-            currentHost?.userId?.toString(),
-          );
-          completed += 1;
-        }
-
-        toast.success(
-          t("fileManager.itemsMovedToTrash", { count: files.length }),
-        );
-        if (
-          sshSessionIdRef.current === operationSession &&
-          currentPathRef.current === operationPath
-        ) {
-          handleRefreshDirectory();
-        } else {
-          invalidateCachedFileList(operationSession, operationPath);
-        }
-      } catch (error: unknown) {
-        commitFilesForPath(
-          operationSession,
-          operationPath,
-          restoreItems(
-            filesForPath(operationSession, operationPath),
-            files.slice(completed),
-          ),
-        );
-        const axiosError = error as {
-          response?: {
-            data?: { needsSudo?: boolean; error?: string };
-            status?: number;
-          };
-          message?: string;
-        };
-        if (axiosError.response?.data?.needsSudo) {
-          setPendingSudoOperation({
-            type: "delete",
-            files: files.slice(completed),
-          });
-          setSudoDialogOpen(true);
-          return;
-        }
-        if (
-          (axiosError.response?.data as { trashUnavailable?: boolean })
-            ?.trashUnavailable &&
-          window.confirm(t("fileManager.trashUnavailableConfirm"))
-        ) {
-          for (const file of files.slice(completed)) {
-            await deleteSSHItem(
-              sshSessionId,
-              file.path,
-              file.type === "directory",
-              currentHost?.id,
-              currentHost?.userId?.toString(),
-              true,
-            );
-          }
-          toast.success(
-            t("fileManager.itemsDeletedSuccessfully", {
-              count: files.length - completed,
-            }),
-          );
-          handleRefreshDirectory();
-          return;
-        }
-        if (
-          axiosError.response?.status === 403 ||
-          axiosError.response?.data?.error
-            ?.toLowerCase()
-            .includes("permission denied")
-        ) {
-          toast.error(t("fileManager.permissionDenied"));
-        } else if (
-          axiosError.message?.includes("connection") ||
-          axiosError.message?.includes("established")
-        ) {
-          toast.error(
-            t("fileManager.sshConnectionFailed", {
-              name: currentHost?.name,
-              ip: currentHost?.ip,
-              port: currentHost?.port,
-            }),
-          );
-        } else {
-          toast.error(t("fileManager.failedToDeleteItems"));
-        }
-        console.error("Delete failed:", error);
-      }
-    };
-    if (confirmBeforeTrash) {
-      confirmWithToast(fullMessage, moveToTrash, "destructive");
-    } else {
-      await moveToTrash();
-    }
-  }
-
-  async function handleSudoPasswordSubmit(password: string) {
-    if (!sshSessionId || !pendingSudoOperation) return;
-
-    try {
-      await setSudoPassword(sshSessionId, password);
-      setSudoDialogOpen(false);
-
-      if (pendingSudoOperation.type === "delete") {
-        for (const file of pendingSudoOperation.files) {
-          await deleteSSHItem(
-            sshSessionId,
-            file.path,
-            file.type === "directory",
-            currentHost?.id,
-            currentHost?.userId?.toString(),
-          );
-        }
-        toast.success(
-          t("fileManager.itemsDeletedSuccessfully", {
-            count: pendingSudoOperation.files.length,
-          }),
-        );
-        handleRefreshDirectory();
-        clearSelection();
-      } else if (pendingSudoOperation.type === "navigate") {
-        const success = await loadDirectory(pendingSudoOperation.path);
-        if (success) {
-          setCurrentPath(pendingSudoOperation.path);
-          setPendingSudoOperation(null);
-        }
-        return;
-      }
-
-      setPendingSudoOperation(null);
-    } catch (error: unknown) {
-      const axiosError = error as {
-        response?: { data?: { needsSudo?: boolean; sudoFailed?: boolean } };
-        message?: string;
-      };
-
-      if (axiosError.response?.data?.sudoFailed) {
-        toast.error(t("fileManager.sudoAuthFailed"));
-        setSudoDialogOpen(true);
-        return;
-      }
-
-      toast.error(axiosError.message || t("fileManager.sudoOperationFailed"));
-      setPendingSudoOperation(null);
-    }
-  }
-
-  function handleCreateNewFolder() {
-    const defaultName = generateUniqueName(
-      t("fileManager.newFolderDefault"),
-      "directory",
-    );
-    setCreateIntent({
-      id: Date.now().toString(),
-      type: "directory" as const,
-      defaultName,
-      currentName: defaultName,
-    });
-  }
-
-  function handleCreateNewFile() {
-    const defaultName = generateUniqueName(
-      t("fileManager.newFileDefault"),
-      "file",
-    );
-    setCreateIntent({
-      id: Date.now().toString(),
-      type: "file" as const,
-      defaultName,
-      currentName: defaultName,
-    });
-  }
-
-  const handleSymlinkClick = async (file: FileItem) => {
-    if (!currentHost || !sshSessionId) {
-      toast.error(t("fileManager.noSSHConnection"));
-      return;
-    }
-
-    try {
-      const currentSessionId = sshSessionId;
-      const status = await getSSHStatus(currentSessionId);
-      if (!status.connected) {
-        const result = await connectSSH(currentSessionId, {
-          hostId: currentHost.id,
-          ip: currentHost.ip,
-          port: currentHost.port,
-          username: currentHost.username,
-          authType: currentHost.authType,
-          password: currentHost.password,
-          sshKey: currentHost.key,
-          keyPassword: currentHost.keyPassword,
-          credentialId: currentHost.credentialId,
-          jumpHosts: currentHost.jumpHosts,
-          useSocks5: currentHost.useSocks5,
-          socks5Host: currentHost.socks5Host,
-          socks5Port: currentHost.socks5Port,
-          socks5Username: currentHost.socks5Username,
-          socks5Password: currentHost.socks5Password,
-          socks5ProxyChain: currentHost.socks5ProxyChain,
-        });
-
-        if (!result.success) {
-          throw new Error(t("fileManager.failedToReconnectSSH"));
-        }
-      }
-
-      const symlinkInfo = await identifySSHSymlink(currentSessionId, file.path);
-
-      if (symlinkInfo.type === "directory") {
-        setCurrentPath(symlinkInfo.target);
-      } else if (symlinkInfo.type === "file") {
-        const windowCount = Date.now() % 10;
-        const offsetX = 120 + windowCount * 30;
-        const offsetY = 120 + windowCount * 30;
-
-        const targetFile: FileItem = {
-          ...file,
-          path: symlinkInfo.target,
-        };
-
-        const createWindowComponent = (windowId: string) => (
-          <FileWindow
-            windowId={windowId}
-            file={targetFile}
-            sshSessionId={currentSessionId}
-            sshHost={currentHost}
-            initialX={offsetX}
-            initialY={offsetY}
-          />
-        );
-
-        openWindow({
-          title: file.name,
-          x: offsetX,
-          y: offsetY,
-          width: 800,
-          height: 600,
-          isMaximized: false,
-          isMinimized: false,
-          component: createWindowComponent,
-        });
-      }
-    } catch (error: unknown) {
-      const httpError = asHttpError(error);
-      toast.error(
-        httpError.response?.data?.error ||
-          httpError.message ||
-          t("fileManager.failedToResolveSymlink"),
-      );
-    }
-  };
-
-  function openFileWindow(file: FileItem, sessionId: string) {
-    const windowCount = Date.now() % 10;
-    const baseOffsetX = 120 + windowCount * 30;
-    const baseOffsetY = 120 + windowCount * 30;
-
-    const maxOffsetX = Math.max(0, window.innerWidth - 800 - 100);
-    const maxOffsetY = Math.max(0, window.innerHeight - 600 - 100);
-
-    const offsetX = Math.min(baseOffsetX, maxOffsetX);
-    const offsetY = Math.min(baseOffsetY, maxOffsetY);
-
-    const createWindowComponent = (windowId: string) => (
-      <FileWindow
-        windowId={windowId}
-        file={file}
-        sshSessionId={sessionId}
-        sshHost={currentHost}
-        initialX={offsetX}
-        initialY={offsetY}
-        onFileNotFound={handleFileNotFound}
-      />
-    );
-
-    openWindow({
-      title: file.name,
-      x: offsetX,
-      y: offsetY,
-      width: 800,
-      height: 600,
-      isMaximized: false,
-      isMinimized: false,
-      component: createWindowComponent,
-    });
-  }
-
-  async function confirmLargeFileOpen(file: FileItem) {
-    if (!file.size || file.size <= LARGE_FILE_WARNING_SIZE) return true;
-
-    return confirmWithToast(
-      {
-        title: t("fileManager.largeFileWarning"),
-        description: t("fileManager.largeFileWarningDesc", {
-          size: formatFileSize(file.size),
-        }),
-        confirmText: t("fileManager.confirm"),
-        cancelText: t("common.cancel"),
-      },
-      undefined,
-      "default",
-      t("common.cancel"),
-      { duration: 12000 },
-    );
-  }
-
-  async function handleFileOpen(file: FileItem) {
-    if (file.type === "directory") {
-      markAdaptiveResourceUsed("network", "directory-list");
-      directoryRequestRef.current += 1;
-      const cached = sshSessionId
-        ? peekCachedFileList(sshSessionId, file.path)
-        : null;
-      if (cached) setFiles(cached.files);
-      setIsLoading(!!sshSessionId && !cached);
-      setCurrentPath(file.path);
-      return;
-    }
-
-    if (file.type === "link") {
-      await handleSymlinkClick(file);
-      return;
-    }
-
-    if (!sshSessionId) {
-      toast.error(t("fileManager.noSSHConnection"));
-      return;
-    }
-
-    if (!(await confirmLargeFileOpen(file))) return;
-
-    markFilePreviewUsed(file.name);
-    markAdaptiveResourceUsed(
-      "network",
-      file.size && file.size > 128 * 1024
-        ? "file-content:medium"
-        : "file-content:small",
-    );
-    await recordRecentFile(file);
-    openFileWindow(file, sshSessionId);
-  }
-
-  const prefetchFileIntent = useCallback(
-    (file: FileItem) => {
-      if (!sshSessionId) return;
-      if (file.type === "directory") {
-        runAdaptiveBackgroundTask("network", "directory-list", () =>
-          listSSHFiles(sshSessionId, file.path),
-        );
-        return;
-      }
-      const budget = getAdaptiveResourceBudget("network");
-      if (shouldPrefetchFileContent(file, budget.maxPrefetchBytes)) {
-        preloadFilePreview(file.name);
-        runAdaptiveBackgroundTask(
-          "network",
-          file.size && file.size > 128 * 1024
-            ? "file-content:medium"
-            : "file-content:small",
-          () => readSSHFile(sshSessionId, file.path),
-          { estimatedBytes: file.size },
-        );
-      }
-    },
-    [sshSessionId],
-  );
-
-  function handleContextMenu(event: React.MouseEvent, file?: FileItem) {
-    event.preventDefault();
-
-    let files: FileItem[];
-    if (file) {
-      const isFileSelected = selectedFiles.some((f) => f.path === file.path);
-      files = isFileSelected ? selectedFiles : [file];
-    } else {
-      files = selectedFiles;
-    }
-
-    setContextMenu({
-      x: event.clientX,
-      y: event.clientY,
-      isVisible: true,
-      files,
-    });
-  }
-
-  function handleSidebarItemContextMenu(
-    event: React.MouseEvent,
-    item: SidebarItem,
-  ) {
-    const file: FileItem = {
-      name: item.name,
-      path: item.path,
-      type:
-        item.type === "recent" || item.type === "pinned" ? "file" : "directory",
-    };
-    handleContextMenu(event, file);
-  }
-
-  function handleCopyFiles(files: FileItem[]) {
-    const entry = {
-      files,
-      operation: "copy" as const,
-      sourceHostId: currentHost?.id ?? null,
-      sourceSessionId: sshSessionId,
-    };
-    setClipboard(entry);
-    window.dispatchEvent(
-      new CustomEvent("file-manager:clipboard", { detail: entry }),
-    );
-    toast.success(
-      t("fileManager.filesCopiedToClipboard", { count: files.length }),
-    );
-  }
-
-  function handleCutFiles(files: FileItem[]) {
-    const entry = {
-      files,
-      operation: "cut" as const,
-      sourceHostId: currentHost?.id ?? null,
-      sourceSessionId: sshSessionId,
-    };
-    setClipboard(entry);
-    window.dispatchEvent(
-      new CustomEvent("file-manager:clipboard", { detail: entry }),
-    );
-    toast.success(
-      t("fileManager.filesCutToClipboard", { count: files.length }),
-    );
-  }
-
-  function handleCopyPath(files: FileItem[]) {
-    if (files.length === 0) return;
-
-    const paths = files.map((file) => file.path).join("\n");
-
-    copyToClipboard(paths).then((ok) => {
-      if (ok) {
-        toast.success(
-          files.length === 1
-            ? t("fileManager.pathCopiedToClipboard")
-            : t("fileManager.pathsCopiedToClipboard", { count: files.length }),
-        );
-      } else {
-        toast.error(t("fileManager.failedToCopyPath"));
-      }
-    });
-  }
-
-  function handleCopyFolderLink(path: string) {
-    if (!currentHost?.id) return;
-    const params = new URLSearchParams({
-      view: "file-manager",
-      hostId: String(currentHost.id),
-      path,
-    });
-    const url = `${window.location.origin}?${params.toString()}`;
-    copyToClipboard(url).then((ok) => {
-      if (ok) {
-        toast.success(t("fileManager.folderLinkCopied"));
-      } else {
-        toast.error(t("fileManager.failedToCopyFolderLink"));
-      }
-    });
-  }
-
-  async function handleCrossHostPaste() {
-    if (!clipboard || !sshSessionId || !currentHost) return;
-
-    const { files, operation, sourceSessionId } = clipboard;
-    if (!sourceSessionId) return;
-
-    const sourcePaths = files.map((f) => f.path);
-    const isSingleFile = files.length === 1 && files[0].type === "file";
-    const base = currentPath.replace(/\/+$/, "") || "/";
-    const destPath = isSingleFile
-      ? base.endsWith("/")
-        ? `${base}${files[0].name}`
-        : `${base}/${files[0].name}`
-      : base;
-
-    try {
-      const { transferId } = await transferToHost(
-        sourceSessionId,
-        sourcePaths,
-        sshSessionId,
-        destPath,
-        operation === "cut",
-        "auto",
-        2,
-      );
-
-      const monitorHandle = beginTransferProgressMonitoring(transferId, t, {
-        formatTransferMetrics,
-      });
-      if (!monitorHandle) return;
-
-      const finalStatus = await monitorHandle.waitForCompletion;
-
-      if (
-        finalStatus.status !== "success" &&
-        finalStatus.status !== "partial"
-      ) {
-        return;
-      }
-
-      if (operation === "cut") {
-        setClipboard(null);
-      }
-
-      handleRefreshDirectory();
-      clearSelection();
-    } catch (error: unknown) {
-      const err = error as { message?: string };
-      toast.error(
-        `${t("transfer.transferError")}: ${err.message || t("fileManager.unknownError")}`,
-      );
-    }
-  }
-
-  async function handlePasteFiles() {
-    if (!clipboard || !sshSessionId) return;
-
-    if (
-      clipboard.sourceHostId !== null &&
-      clipboard.sourceHostId !== currentHost?.id
-    ) {
-      await handleCrossHostPaste();
-      return;
-    }
-
-    try {
-      await ensureSSHConnection();
-
-      const { files, operation } = clipboard;
-
-      let successCount = 0;
-      const copiedItems: string[] = [];
-
-      for (const file of files) {
-        try {
-          if (operation === "copy") {
-            const result = await copySSHItem(
-              sshSessionId,
-              file.path,
-              currentPath,
-              currentHost?.id,
-              currentHost?.userId?.toString(),
-            );
-            copiedItems.push(result.uniqueName || file.name);
-            successCount++;
-          } else {
-            const targetPath = currentPath.endsWith("/")
-              ? `${currentPath}${file.name}`
-              : `${currentPath}/${file.name}`;
-
-            if (file.path !== targetPath) {
-              await moveSSHItem(
-                sshSessionId,
-                file.path,
-                targetPath,
-                currentHost?.id,
-                currentHost?.userId?.toString(),
-              );
-              successCount++;
-            }
-          }
-        } catch (error: unknown) {
-          console.error(`Failed to ${operation} file ${file.name}:`, error);
-          const axiosError = error as {
-            response?: { status?: number; data?: { error?: string } };
-          };
-          if (
-            axiosError.response?.status === 403 ||
-            axiosError.response?.data?.error
-              ?.toLowerCase()
-              .includes("permission denied")
-          ) {
-            toast.error(t("fileManager.permissionDenied"));
-          } else {
-            toast.error(
-              t("fileManager.operationFailed", {
-                operation:
-                  operation === "copy"
-                    ? t("fileManager.copy")
-                    : t("fileManager.move"),
-                name: file.name,
-                error: getErrorMessage(error, String(error)),
-              }),
-            );
-          }
-        }
-      }
-
-      if (successCount > 0) {
-        if (operation === "copy") {
-          const copiedFiles = files
-            .slice(0, successCount)
-            .map((file, index) => ({
-              originalPath: file.path,
-              targetPath: `${currentPath}/${copiedItems[index] || file.name}`,
-              targetName: copiedItems[index] || file.name,
-            }));
-
-          const undoAction: UndoAction = {
-            type: "copy",
-            description: t("fileManager.copiedItems", { count: successCount }),
-            data: {
-              operation: "copy",
-              copiedFiles,
-              targetDirectory: currentPath,
-            },
-            timestamp: Date.now(),
-          };
-          setUndoHistory((prev) => [...prev.slice(-9), undoAction]);
-        } else if (operation === "cut") {
-          const movedFiles = files.slice(0, successCount).map((file) => {
-            const targetPath = currentPath.endsWith("/")
-              ? `${currentPath}${file.name}`
-              : `${currentPath}/${file.name}`;
-            return {
-              originalPath: file.path,
-              targetPath: targetPath,
-              targetName: file.name,
-            };
-          });
-
-          const undoAction: UndoAction = {
-            type: "cut",
-            description: t("fileManager.movedItems", { count: successCount }),
-            data: {
-              operation: "cut",
-              copiedFiles: movedFiles,
-              targetDirectory: currentPath,
-            },
-            timestamp: Date.now(),
-          };
-          setUndoHistory((prev) => [...prev.slice(-9), undoAction]);
-        }
-      }
-
-      if (successCount > 0) {
-        const operationText =
-          operation === "copy" ? t("fileManager.copy") : t("fileManager.move");
-        if (operation === "copy" && copiedItems.length > 0) {
-          const hasRenamed = copiedItems.some(
-            (name) => !files.some((file) => file.name === name),
-          );
-
-          if (hasRenamed) {
-            toast.success(
-              t("fileManager.operationCompletedSuccessfully", {
-                operation: operationText,
-                count: successCount,
-              }),
-            );
-          } else {
-            toast.success(
-              t("fileManager.operationCompleted", {
-                operation: operationText,
-                count: successCount,
-              }),
-            );
-          }
-        } else {
-          toast.success(
-            t("fileManager.operationCompleted", {
-              operation: operationText,
-              count: successCount,
-            }),
-          );
-        }
-      }
-
-      handleRefreshDirectory();
-      clearSelection();
-
-      if (operation === "cut") {
-        setClipboard(null);
-      }
-    } catch (error: unknown) {
-      const errorMessage = getErrorMessage(error, String(error));
-      toast.error(`${t("fileManager.pasteFailed")}: ${errorMessage}`);
-    }
-  }
-
-  async function handleExtractArchive(file: FileItem) {
-    if (!sshSessionId) return;
-
-    try {
-      await ensureSSHConnection();
-
-      toast.info(t("fileManager.extractingArchive", { name: file.name }));
-
-      await extractSSHArchive(
-        sshSessionId,
-        file.path,
-        undefined,
-        currentHost?.id,
-        currentHost?.userId?.toString(),
-      );
-
-      toast.success(
-        t("fileManager.archiveExtractedSuccessfully", { name: file.name }),
-      );
-      handleRefreshDirectory();
-    } catch (error: unknown) {
-      const errorMessage = getErrorMessage(error, String(error));
-      toast.error(`${t("fileManager.extractFailed")}: ${errorMessage}`);
-    }
-  }
-
-  function handleOpenCompressDialog(files: FileItem[]) {
-    setCompressDialogFiles(files);
-  }
-
-  async function handleCompress(archiveName: string, format: string) {
-    if (!sshSessionId || compressDialogFiles.length === 0) return;
-
-    try {
-      await ensureSSHConnection();
-
-      const paths = compressDialogFiles.map((f) => f.path);
-      const fileNames = compressDialogFiles.map((f) => f.name);
-
-      toast.info(
-        t("fileManager.compressingFiles", {
-          count: fileNames.length,
-          name: archiveName,
-        }),
-      );
-
-      await compressSSHFiles(
-        sshSessionId,
-        paths,
-        archiveName,
-        format,
-        currentHost?.id,
-        currentHost?.userId?.toString(),
-      );
-
-      toast.success(
-        t("fileManager.filesCompressedSuccessfully", {
-          name: archiveName,
-        }),
-      );
-      handleRefreshDirectory();
-      clearSelection();
-    } catch (error: unknown) {
-      const errorMessage = getErrorMessage(error, String(error));
-      toast.error(`${t("fileManager.compressFailed")}: ${errorMessage}`);
-    }
-  }
-
-  function handleOpenTransferDialog(files: FileItem[], move: boolean) {
-    setTransferFiles(files);
-    setTransferMove(move);
-    setTransferDialogOpen(true);
-  }
-
-  async function handleTransferConfirm(
-    destSessionId: string,
-    destHostId: number,
-    destPath: string,
-    destPathLabel: string,
-    methodPreference: TransferMethodPreference,
-    parallelSegmentCount?: number,
-  ) {
-    if (!sshSessionId || !currentHost?.id || transferFiles.length === 0) return;
-
-    const sourcePaths = transferFiles.map((f) => f.path);
-
-    try {
-      await ensureSSHConnection();
-
-      const { transferId } = await transferToHost(
-        sshSessionId,
-        sourcePaths,
-        destSessionId,
-        destPath,
-        transferMove,
-        methodPreference,
-        parallelSegmentCount,
-      );
-
-      const monitorHandle = beginTransferProgressMonitoring(transferId, t, {
-        formatTransferMetrics,
-      });
-      if (!monitorHandle) return;
-
-      const finalStatus = await monitorHandle.waitForCompletion;
-
-      if (
-        finalStatus.status !== "success" &&
-        finalStatus.status !== "partial"
-      ) {
-        return;
-      }
-
-      void addTransferRecent(
-        currentHost.id,
-        destHostId,
-        destPathLabel,
-        destPathLabel,
-      );
-
-      window.dispatchEvent(
-        new CustomEvent("file-manager:refresh", {
-          detail: { hostId: destHostId, path: destPathLabel },
-        }),
-      );
-
-      if (transferMove) {
-        handleRefreshDirectory();
-        clearSelection();
-      }
-    } catch (error: unknown) {
-      const err = error as { message?: string };
-      toast.error(
-        `${t("transfer.transferError")}: ${err.message || t("fileManager.unknownError")}`,
-      );
-    }
-  }
-
-  async function handleUndo() {
-    if (undoHistory.length === 0) {
-      toast.info(t("fileManager.noUndoableActions"));
-      return;
-    }
-
-    const lastAction = undoHistory[undoHistory.length - 1];
-
-    try {
-      await ensureSSHConnection();
-
-      switch (lastAction.type) {
-        case "copy":
-          if (lastAction.data.copiedFiles) {
-            let successCount = 0;
-            for (const copiedFile of lastAction.data.copiedFiles) {
-              try {
-                const isDirectory =
-                  files.find((f) => f.path === copiedFile.targetPath)?.type ===
-                  "directory";
-                await deleteSSHItem(
-                  sshSessionId!,
-                  copiedFile.targetPath,
-                  isDirectory,
-                  currentHost?.id,
-                  currentHost?.userId?.toString(),
-                );
-                successCount++;
-              } catch (error: unknown) {
-                console.error(
-                  `Failed to delete copied file ${copiedFile.targetName}:`,
-                  error,
-                );
-                toast.error(
-                  t("fileManager.deleteCopiedFileFailed", {
-                    name: copiedFile.targetName,
-                    error: getErrorMessage(error, String(error)),
-                  }),
-                );
-              }
-            }
-
-            if (successCount > 0) {
-              setUndoHistory((prev) => prev.slice(0, -1));
-              toast.success(
-                t("fileManager.undoCopySuccess", { count: successCount }),
-              );
-            } else {
-              toast.error(t("fileManager.undoCopyFailedDelete"));
-              return;
-            }
-          } else {
-            toast.error(t("fileManager.undoCopyFailedNoInfo"));
-            return;
-          }
-          break;
-
-        case "cut":
-          if (lastAction.data.copiedFiles) {
-            let successCount = 0;
-            for (const movedFile of lastAction.data.copiedFiles) {
-              try {
-                await moveSSHItem(
-                  sshSessionId!,
-                  movedFile.targetPath,
-                  movedFile.originalPath,
-                  currentHost?.id,
-                  currentHost?.userId?.toString(),
-                );
-                successCount++;
-              } catch (error: unknown) {
-                console.error(
-                  `Failed to move back file ${movedFile.targetName}:`,
-                  error,
-                );
-                toast.error(
-                  t("fileManager.moveBackFileFailed", {
-                    name: movedFile.targetName,
-                    error: getErrorMessage(error, String(error)),
-                  }),
-                );
-              }
-            }
-
-            if (successCount > 0) {
-              setUndoHistory((prev) => prev.slice(0, -1));
-              toast.success(
-                t("fileManager.undoMoveSuccess", { count: successCount }),
-              );
-            } else {
-              toast.error(t("fileManager.undoMoveFailedMove"));
-              return;
-            }
-          } else {
-            toast.error(t("fileManager.undoMoveFailedNoInfo"));
-            return;
-          }
-          break;
-
-        case "delete":
-          toast.info(t("fileManager.undoDeleteNotSupported"));
-          setUndoHistory((prev) => prev.slice(0, -1));
-          return;
-
-        default:
-          toast.error(t("fileManager.undoTypeNotSupported"));
-          return;
-      }
-
-      handleRefreshDirectory();
-    } catch (error: unknown) {
-      const errorMessage = getErrorMessage(error, String(error));
-      toast.error(`${t("fileManager.undoOperationFailed")}: ${errorMessage}`);
-      console.error("Undo failed:", error);
-    }
-  }
-
-  function handleRenameFile(file: FileItem) {
-    setEditingFile(file);
-  }
-
-  function handleOpenPermissionsDialog(file: FileItem) {
-    setPermissionsDialogFile(file);
-  }
-
-  async function handleSavePermissions(file: FileItem, permissions: string) {
-    if (!sshSessionId) {
-      toast.error(t("fileManager.noSSHConnection"));
-      return;
-    }
-
-    try {
-      await changeSSHPermissions(
-        sshSessionId,
-        file.path,
-        permissions,
-        currentHost?.id,
-        currentHost?.userId?.toString(),
-      );
-
-      toast.success(t("fileManager.permissionsChangedSuccessfully"));
-      await handleRefreshDirectory();
-    } catch (error: unknown) {
-      console.error("Failed to change permissions:", error);
-      toast.error(t("fileManager.failedToChangePermissions"));
-      throw error;
-    }
-  }
-
-  async function ensureSSHConnection() {
-    if (!sshSessionId || !currentHost) return;
-
-    const status = await getSSHStatus(sshSessionId);
-
-    if (!status.connected) {
-      await connectSSH(sshSessionId, {
-        hostId: currentHost.id,
-        ip: currentHost.ip,
-        port: currentHost.port,
-        username: currentHost.username,
-        password: currentHost.password,
-        sshKey: currentHost.key,
-        keyPassword: currentHost.keyPassword,
-        authType: currentHost.authType,
-        credentialId: currentHost.credentialId,
-        userId: currentHost.userId,
-        jumpHosts: currentHost.jumpHosts,
-        useSocks5: currentHost.useSocks5,
-        socks5Host: currentHost.socks5Host,
-        socks5Port: currentHost.socks5Port,
-        socks5Username: currentHost.socks5Username,
-        socks5Password: currentHost.socks5Password,
-        socks5ProxyChain: currentHost.socks5ProxyChain,
-      });
-    }
-  }
-
-  async function handleConfirmCreate(name: string) {
-    if (!createIntent || !sshSessionId) return;
-
-    const operationPath = currentPath;
-    const operationSession = sshSessionId;
-    const optimisticPath = childPath(operationPath, name);
-    const previousFiles = filesForPath(operationSession, operationPath);
-    const optimisticFiles = addOptimisticItem(
-      previousFiles,
-      operationPath,
-      name,
-      createIntent.type,
-    );
-    const didAddOptimistically = optimisticFiles !== previousFiles;
-    commitFilesForPath(operationSession, operationPath, optimisticFiles);
-    const createdType = createIntent.type;
-    setCreateIntent(null);
-
-    try {
-      await ensureSSHConnection();
-
-      if (createdType === "file") {
-        await createSSHFile(
-          sshSessionId,
-          currentPath,
-          name,
-          "",
-          currentHost?.id,
-          currentHost?.userId?.toString(),
-        );
-        toast.success(t("fileManager.fileCreatedSuccessfully", { name }));
-      } else {
-        await createSSHFolder(
-          sshSessionId,
-          currentPath,
-          name,
-          currentHost?.id,
-          currentHost?.userId?.toString(),
-        );
-        toast.success(t("fileManager.folderCreatedSuccessfully", { name }));
-      }
-
-      if (
-        sshSessionIdRef.current === operationSession &&
-        currentPathRef.current === operationPath
-      ) {
-        handleRefreshDirectory();
-      } else {
-        invalidateCachedFileList(operationSession, operationPath);
-      }
-    } catch (error: unknown) {
-      if (didAddOptimistically) {
-        commitFilesForPath(
-          operationSession,
-          operationPath,
-          removePaths(
-            filesForPath(operationSession, operationPath),
-            new Set([optimisticPath]),
-          ),
-        );
-      }
-      const axiosError = error as {
-        response?: { status?: number; data?: { error?: string } };
-      };
-      if (
-        axiosError.response?.status === 403 ||
-        axiosError.response?.data?.error
-          ?.toLowerCase()
-          .includes("permission denied")
-      ) {
-        toast.error(t("fileManager.permissionDenied"));
-      } else {
-        toast.error(t("fileManager.failedToCreateItem"));
-      }
-      console.error("Create failed:", error);
-    }
-  }
-
-  function handleCancelCreate() {
-    setCreateIntent(null);
-  }
-
-  async function handleRenameConfirm(file: FileItem, newName: string) {
-    if (!sshSessionId) return;
-
-    const operationPath = currentPath;
-    const operationSession = sshSessionId;
-    const renamedPath = childPath(
-      file.path.slice(0, Math.max(1, file.path.lastIndexOf("/"))),
-      newName,
-    );
-    const operationFiles = filesForPath(operationSession, operationPath);
-    const didRenameOptimistically = !operationFiles.some(
-      (entry) => entry.path === renamedPath && entry.path !== file.path,
-    );
-    if (didRenameOptimistically) {
-      commitFilesForPath(
-        operationSession,
-        operationPath,
-        renameOptimisticItem(operationFiles, file.path, newName),
-      );
-    }
-    setEditingFile(null);
-
-    try {
-      await ensureSSHConnection();
-
-      await renameSSHItem(
-        sshSessionId,
-        file.path,
-        newName,
-        currentHost?.id,
-        currentHost?.userId?.toString(),
-      );
-
-      toast.success(
-        t("fileManager.itemRenamedSuccessfully", { name: newName }),
-      );
-      if (
-        sshSessionIdRef.current === operationSession &&
-        currentPathRef.current === operationPath
-      ) {
-        handleRefreshDirectory();
-      } else {
-        invalidateCachedFileList(operationSession, operationPath);
-      }
-    } catch (error: unknown) {
-      if (didRenameOptimistically) {
-        commitFilesForPath(
-          operationSession,
-          operationPath,
-          renameOptimisticItem(
-            filesForPath(operationSession, operationPath),
-            renamedPath,
-            file.name,
-          ),
-        );
-      }
-      const axiosError = error as {
-        response?: { status?: number; data?: { error?: string } };
-      };
-      if (
-        axiosError.response?.status === 403 ||
-        axiosError.response?.data?.error
-          ?.toLowerCase()
-          .includes("permission denied")
-      ) {
-        toast.error(t("fileManager.permissionDenied"));
-      } else {
-        toast.error(t("fileManager.failedToRenameItem"));
-      }
-      console.error("Rename failed:", error);
-    }
-  }
-
-  function handleStartEdit(file: FileItem) {
-    setEditingFile(file);
-  }
-
-  function handleCancelEdit() {
-    setEditingFile(null);
-  }
-
-  async function handleTotpSubmit(code: string) {
-    if (!totpSessionId || !code) return;
-
-    try {
-      setIsLoading(true);
-      const result = await verifySSHTOTP(totpSessionId, code);
-
-      if (result?.status === "success") {
-        setTotpRequired(false);
-        setTotpPrompt("");
-        setSshSessionId(totpSessionId);
-        setTotpSessionId(null);
-        connectRetryRef.current.markConnected();
-
-        try {
-          const response = await listSSHFiles(totpSessionId, currentPath);
-          const files = Array.isArray(response)
-            ? response
-            : response?.files || [];
-          setFiles(files);
-          clearSelection();
-          initialLoadDoneRef.current = true;
-          toast.success(t("fileManager.connectedSuccessfully"));
-
-          logFileManagerActivity();
-        } catch (dirError: unknown) {
-          console.error("Failed to load initial directory:", dirError);
-        }
-      }
-    } catch (error: unknown) {
-      console.error("TOTP verification failed:", error);
-      toast.error(t("fileManager.totpVerificationFailed"));
-    } finally {
-      setIsLoading(false);
-    }
-  }
-
-  function handleTotpCancel() {
-    setTotpRequired(false);
-    setTotpPrompt("");
-    setTotpSessionId(null);
-    if (onClose) onClose();
-  }
-
-  async function handleBrowserSignInContinue() {
-    if (!browserSignInSessionId) return;
-
-    try {
-      setIsLoading(true);
-      const result = await verifySSHBrowserSignIn(browserSignInSessionId);
-
-      if (result?.status === "success") {
-        setBrowserSignInRequired(false);
-        setBrowserSignInUrl("");
-        setBrowserSignInCode("");
-        setSshSessionId(browserSignInSessionId);
-        setBrowserSignInSessionId(null);
-        connectRetryRef.current.markConnected();
-
-        try {
-          const response = await listSSHFiles(
-            browserSignInSessionId,
-            currentPath,
-          );
-          const files = Array.isArray(response)
-            ? response
-            : response?.files || [];
-          setFiles(files);
-          clearSelection();
-          initialLoadDoneRef.current = true;
-          toast.success(t("fileManager.connectedSuccessfully"));
-
-          logFileManagerActivity();
-        } catch (dirError: unknown) {
-          console.error("Failed to load initial directory:", dirError);
-        }
-      }
-    } catch (error: unknown) {
-      console.error("Browser sign-in failed:", error);
-      toast.error(t("fileManager.browserSignInFailed"));
-    } finally {
-      setIsLoading(false);
-    }
-  }
-
-  function handleBrowserSignInCancel() {
-    setBrowserSignInRequired(false);
-    setBrowserSignInUrl("");
-    setBrowserSignInCode("");
-    setBrowserSignInSessionId(null);
-    if (onClose) onClose();
-  }
-
-  function handleBrowserSignInOpenUrl() {
-    if (browserSignInUrl) {
-      window.open(browserSignInUrl, "_blank", "noopener,noreferrer");
-    }
-  }
-
-  async function handleAuthDialogSubmit(credentials: {
-    password?: string;
-    sshKey?: string;
-    keyPassword?: string;
-  }) {
-    if (!currentHost) return;
-
-    try {
-      setIsLoading(true);
-      setShowAuthDialog(false);
-
-      const sessionId = currentHost.id.toString();
-
-      const result = await connectSSH(sessionId, {
-        hostId: currentHost.id,
-        ip: currentHost.ip,
-        port: currentHost.port,
-        username: currentHost.username,
-        password: credentials.password,
-        sshKey: credentials.sshKey,
-        keyPassword: credentials.keyPassword,
-        authType: credentials.password ? "password" : "key",
-        credentialId: currentHost.credentialId,
-        userId: currentHost.userId,
-        jumpHosts: currentHost.jumpHosts,
-        useSocks5: currentHost.useSocks5,
-        socks5Host: currentHost.socks5Host,
-        socks5Port: currentHost.socks5Port,
-        socks5Username: currentHost.socks5Username,
-        socks5Password: currentHost.socks5Password,
-        socks5ProxyChain: currentHost.socks5ProxyChain,
-      });
-
-      if (result?.requires_browser_sign_in) {
-        setBrowserSignInRequired(true);
-        setBrowserSignInSessionId(sessionId);
-        setBrowserSignInUrl(result.url || "");
-        setBrowserSignInCode(result.code || "N/A");
-        setBrowserSignInLabel(result.label || "");
-        setIsLoading(false);
-        return;
-      }
-
-      if (result?.requires_totp) {
-        setTotpRequired(true);
-        setTotpSessionId(sessionId);
-        setTotpPrompt(result.prompt || t("fileManager.verificationCodePrompt"));
-        setIsLoading(false);
-        return;
-      }
-
-      if (result?.status === "auth_required") {
-        setAuthDialogReason(result.reason || "auth_failed");
-        setShowAuthDialog(true);
-        setIsLoading(false);
-        toast.error(t("fileManager.authenticationFailed"));
-        return;
-      }
-
-      setSshSessionId(sessionId);
-      connectRetryRef.current.markConnected();
-
-      try {
-        const response = await listSSHFiles(sessionId, currentPath);
-        const files = Array.isArray(response)
-          ? response
-          : response?.files || [];
-        setFiles(files);
-        clearSelection();
-        initialLoadDoneRef.current = true;
-        toast.success(t("fileManager.connectedSuccessfully"));
-        logFileManagerActivity();
-      } catch (dirError: unknown) {
-        console.error("Failed to load initial directory:", dirError);
-      }
-    } catch (error: unknown) {
-      console.error("SSH connection with credentials failed:", error);
-      setAuthDialogReason("auth_failed");
-      setShowAuthDialog(true);
-      toast.error(
-        t("fileManager.failedToConnect") +
-          ": " +
-          getErrorMessage(error, String(error)),
-      );
-    } finally {
-      setIsLoading(false);
-    }
-  }
-
-  function handleAuthDialogCancel() {
-    setShowAuthDialog(false);
-    if (onClose) onClose();
-  }
-
-  async function handlePassphraseSubmit(passphrase: string) {
-    if (!currentHost) return;
-
-    try {
-      setIsLoading(true);
-      setShowPassphraseDialog(false);
-
-      const sessionId = currentHost.id.toString();
-
-      const result = await connectSSH(sessionId, {
-        hostId: currentHost.id,
-        ip: currentHost.ip,
-        port: currentHost.port,
-        username: currentHost.username,
-        sshKey: currentHost.key,
-        keyPassword: passphrase,
-        authType: "key",
-        credentialId: currentHost.credentialId,
-        userId: currentHost.userId,
-        jumpHosts: currentHost.jumpHosts,
-        useSocks5: currentHost.useSocks5,
-        socks5Host: currentHost.socks5Host,
-        socks5Port: currentHost.socks5Port,
-        socks5Username: currentHost.socks5Username,
-        socks5Password: currentHost.socks5Password,
-        socks5ProxyChain: currentHost.socks5ProxyChain,
-      });
-
-      if (result?.status === "passphrase_required") {
-        setShowPassphraseDialog(true);
-        setIsLoading(false);
-        toast.error(t("fileManager.incorrectPassphrase"));
-        return;
-      }
-
-      if (result?.requires_totp) {
-        setTotpRequired(true);
-        setTotpSessionId(sessionId);
-        setTotpPrompt(result.prompt || t("fileManager.verificationCodePrompt"));
-        setIsLoading(false);
-        return;
-      }
-
-      if (result?.status === "auth_required") {
-        setAuthDialogReason(result.reason || "auth_failed");
-        setShowAuthDialog(true);
-        setIsLoading(false);
-        return;
-      }
-
-      setSshSessionId(sessionId);
-      connectRetryRef.current.markConnected();
-
-      try {
-        const response = await listSSHFiles(sessionId, currentPath);
-        const files = Array.isArray(response)
-          ? response
-          : response?.files || [];
-        setFiles(files);
-        clearSelection();
-        initialLoadDoneRef.current = true;
-        toast.success(t("fileManager.connectedSuccessfully"));
-        logFileManagerActivity();
-      } catch (dirError: unknown) {
-        console.error("Failed to load initial directory:", dirError);
-      }
-    } catch (error: unknown) {
-      console.error("SSH connection with passphrase failed:", error);
-      setShowPassphraseDialog(true);
-      toast.error(t("fileManager.incorrectPassphrase"));
-    } finally {
-      setIsLoading(false);
-    }
-  }
-
-  function handlePassphraseCancel() {
-    setShowPassphraseDialog(false);
-    if (onClose) onClose();
-  }
-
-  function generateUniqueName(
-    baseName: string,
-    type: "file" | "directory",
-  ): string {
-    const existingNames = files.map((f) => f.name.toLowerCase());
-    let candidateName = baseName;
-    let counter = 1;
-
-    while (existingNames.includes(candidateName.toLowerCase())) {
-      if (type === "file" && baseName.includes(".")) {
-        const lastDotIndex = baseName.lastIndexOf(".");
-        const nameWithoutExt = baseName.substring(0, lastDotIndex);
-        const extension = baseName.substring(lastDotIndex);
-        candidateName = `${nameWithoutExt}${counter}${extension}`;
-      } else {
-        candidateName = `${baseName}${counter}`;
-      }
-      counter++;
-    }
-
-    return candidateName;
-  }
-
-  async function handleFileDrop(
-    draggedFiles: FileItem[],
-    targetFolder: FileItem,
-  ) {
-    if (!sshSessionId || targetFolder.type !== "directory") return;
-
-    try {
-      await ensureSSHConnection();
-
-      let successCount = 0;
-      const movedItems: string[] = [];
-
-      for (const file of draggedFiles) {
-        try {
-          const targetPath = targetFolder.path.endsWith("/")
-            ? `${targetFolder.path}${file.name}`
-            : `${targetFolder.path}/${file.name}`;
-
-          if (file.path !== targetPath) {
-            await moveSSHItem(
-              sshSessionId,
-              file.path,
-              targetPath,
-              currentHost?.id,
-              currentHost?.userId?.toString(),
-            );
-            movedItems.push(file.name);
-            successCount++;
-          }
-        } catch (error: unknown) {
-          console.error(`Failed to move file ${file.name}:`, error);
-          toast.error(
-            t("fileManager.moveFileFailed", { name: file.name }) +
-              ": " +
-              getErrorMessage(error, String(error)),
-          );
-        }
-      }
-
-      if (successCount > 0) {
-        const movedFiles = draggedFiles.slice(0, successCount).map((file) => {
-          const targetPath = targetFolder.path.endsWith("/")
-            ? `${targetFolder.path}${file.name}`
-            : `${targetFolder.path}/${file.name}`;
-          return {
-            originalPath: file.path,
-            targetPath: targetPath,
-            targetName: file.name,
-          };
-        });
-
-        const undoAction: UndoAction = {
-          type: "cut",
-          description: t("fileManager.dragMovedItems", {
-            count: successCount,
-            target: targetFolder.name,
-          }),
-          data: {
-            operation: "cut",
-            copiedFiles: movedFiles,
-            targetDirectory: targetFolder.path,
-          },
-          timestamp: Date.now(),
-        };
-        setUndoHistory((prev) => [...prev.slice(-9), undoAction]);
-
-        toast.success(
-          t("fileManager.successfullyMovedItems", {
-            count: successCount,
-            target: targetFolder.name,
-          }),
-        );
-        handleRefreshDirectory();
-        clearSelection();
-      }
-    } catch (error: unknown) {
-      console.error("Drag move operation failed:", error);
-      toast.error(
-        t("fileManager.moveOperationFailed") +
-          ": " +
-          getErrorMessage(error, String(error)),
-      );
-    }
-  }
-
-  function handleFileDiff(file1: FileItem, file2: FileItem) {
-    if (file1.type !== "file" || file2.type !== "file") {
-      toast.error(t("fileManager.canOnlyCompareFiles"));
-      return;
-    }
-
-    if (!sshSessionId) {
-      toast.error(t("fileManager.noSSHConnection"));
-      return;
-    }
-
-    const offsetX = 100;
-    const offsetY = 80;
-
-    const createWindowComponent = (windowId: string) => (
-      <DiffWindow
-        windowId={windowId}
-        file1={file1}
-        file2={file2}
-        sshSessionId={sshSessionId}
-        sshHost={currentHost}
-        initialX={offsetX}
-        initialY={offsetY}
-      />
-    );
-
-    openWindow({
-      title: t("fileManager.fileComparison", {
-        file1: file1.name,
-        file2: file2.name,
-      }),
-      x: offsetX,
-      y: offsetY,
-      width: 800,
-      height: 600,
-      isMaximized: false,
-      isMinimized: false,
-      component: createWindowComponent,
-    });
-
-    toast.success(
-      t("fileManager.comparingFiles", { file1: file1.name, file2: file2.name }),
-    );
-  }
-
-  async function handleDragToDesktop(files: FileItem[]) {
-    if (!currentHost || !sshSessionId) {
-      toast.error(t("fileManager.noSSHConnection"));
-      return;
-    }
-
-    try {
-      if (systemDrag.isFileSystemAPISupported) {
-        await systemDrag.handleDragToSystem(files, {
-          enableToast: true,
-          onError: (error) => {
-            console.error("System-level drag failed:", error);
-          },
-        });
-      } else {
-        if (files.length === 1) {
-          await dragToDesktop.dragFileToDesktop(files[0]);
-        } else if (files.length > 1) {
-          await dragToDesktop.dragFilesToDesktop(files);
-        }
-      }
-    } catch (error: unknown) {
-      console.error("Drag to desktop failed:", error);
-      toast.error(
-        t("fileManager.dragFailed") +
-          ": " +
-          getErrorMessage(error, String(error)),
-      );
-    }
-  }
-
-  function handleOpenTerminal(path: string) {
-    if (!currentHost) {
-      toast.error(t("fileManager.noHostSelected"));
-      return;
-    }
-
-    const windowCount = Date.now() % 10;
-    const offsetX = 200 + windowCount * 40;
-    const offsetY = 150 + windowCount * 40;
-
-    const createTerminalComponent = (windowId: string) => (
-      <TerminalWindow
-        windowId={windowId}
-        hostConfig={currentHost}
-        initialPath={path}
-        initialX={offsetX}
-        initialY={offsetY}
-        onPromoteToTab={onOpenTerminalTab}
-      />
-    );
-
-    openWindow({
-      title: t("fileManager.terminal", { host: currentHost.name, path }),
-      x: offsetX,
-      y: offsetY,
-      width: 800,
-      height: 500,
-      isMaximized: false,
-      isMinimized: false,
-      component: createTerminalComponent,
-    });
-
-    toast.success(
-      t("terminal.terminalWithPath", { host: currentHost.name, path }),
-    );
-  }
-
-  function handleRunExecutable(file: FileItem) {
-    if (!currentHost) {
-      toast.error(t("fileManager.noHostSelected"));
-      return;
-    }
-
-    if (file.type !== "file" || !file.executable) {
-      toast.error(t("fileManager.onlyRunExecutableFiles"));
-      return;
-    }
-
-    const fileDir = file.path.substring(0, file.path.lastIndexOf("/"));
-    const fileName = file.name;
-    const executeCmd = `./${fileName}`;
-
-    const windowCount = Date.now() % 10;
-    const offsetX = 250 + windowCount * 40;
-    const offsetY = 200 + windowCount * 40;
-
-    const createExecutionTerminal = (windowId: string) => (
-      <TerminalWindow
-        windowId={windowId}
-        hostConfig={currentHost}
-        initialPath={fileDir}
-        initialX={offsetX}
-        initialY={offsetY}
-        executeCommand={executeCmd}
-        onPromoteToTab={onOpenTerminalTab}
-      />
-    );
-
-    openWindow({
-      title: t("fileManager.runningFile", { file: file.name }),
-      x: offsetX,
-      y: offsetY,
-      width: 800,
-      height: 500,
-      isMaximized: false,
-      isMinimized: false,
-      component: createExecutionTerminal,
-    });
-
-    toast.success(t("fileManager.runningFile", { file: file.name }));
-  }
-
-  async function loadPinnedFiles() {
-    if (!currentHost?.id) return;
-
-    try {
-      const pinnedData = await getPinnedFiles(currentHost.id);
-      const pinnedPaths = new Set(pinnedData.map((item) => item.path));
-      setPinnedFiles(pinnedPaths);
-    } catch (error) {
-      console.error("Failed to load pinned files:", error);
-    }
-  }
-
-  async function handlePinFile(file: FileItem) {
-    if (!currentHost?.id) return;
-
-    try {
-      await addPinnedFile(currentHost.id, file.path, file.name);
-      setPinnedFiles((prev) => new Set([...prev, file.path]));
-      setSidebarRefreshTrigger((prev) => prev + 1);
-      toast.success(
-        t("fileManager.filePinnedSuccessfully", { name: file.name }),
-      );
-    } catch (error) {
-      console.error("Failed to pin file:", error);
-      toast.error(t("fileManager.pinFileFailed"));
-    }
-  }
-
-  async function handleUnpinFile(file: FileItem) {
-    if (!currentHost?.id) return;
-
-    try {
-      await removePinnedFile(currentHost.id, file.path);
-      setPinnedFiles((prev) => {
-        const newSet = new Set(prev);
-        newSet.delete(file.path);
-        return newSet;
-      });
-      setSidebarRefreshTrigger((prev) => prev + 1);
-      toast.success(
-        t("fileManager.fileUnpinnedSuccessfully", { name: file.name }),
-      );
-    } catch (error) {
-      console.error("Failed to unpin file:", error);
-      toast.error(t("fileManager.unpinFileFailed"));
-    }
-  }
-
-  async function handleAddShortcut(path: string) {
-    if (!currentHost?.id) return;
-
-    try {
-      const folderName = path.split("/").pop() || path;
-      await addFolderShortcut(currentHost.id, path, folderName);
-      setSidebarRefreshTrigger((prev) => prev + 1);
-      toast.success(
-        t("fileManager.shortcutAddedSuccessfully", { name: folderName }),
-      );
-    } catch (error) {
-      console.error("Failed to add shortcut:", error);
-      toast.error(t("fileManager.addShortcutFailed"));
-    }
-  }
-
-  function isPinnedFile(file: FileItem): boolean {
-    return pinnedFiles.has(file.path);
-  }
-
-  async function recordRecentFile(file: FileItem) {
-    if (!currentHost?.id || file.type === "directory") return;
-
-    try {
-      await addRecentFile(currentHost.id, file.path, file.name);
-      setSidebarRefreshTrigger((prev) => prev + 1);
-    } catch (error) {
-      console.error("Failed to record recent file:", error);
-    }
-  }
-
-  async function handleSidebarFileOpen(sidebarItem: SidebarItem) {
-    const file: FileItem = {
-      name: sidebarItem.name,
-      path: sidebarItem.path,
-      type: "file",
-    };
-
-    await handleFileOpen(file);
-  }
-
-  async function handleFileNotFound(file: FileItem) {
-    if (!currentHost) return;
-
-    try {
-      await removeRecentFile(currentHost.id, file.path);
-
-      await removePinnedFile(currentHost.id, file.path);
-
-      setSidebarRefreshTrigger((prev) => prev + 1);
-    } catch (error) {
-      console.error("Failed to cleanup missing file:", error);
-    }
-  }
-
-  useEffect(() => {
-    setCreateIntent(null);
-  }, [currentPath]);
-
-  useEffect(() => {
-    if (currentHost?.id) loadPinnedFiles();
-  }, [currentHost?.id]);
-
-  useEffect(() => {
-    let cancelled = false;
-    setDiskInfo(null);
-    if (currentHost?.id) {
-      // Undefined while the host-metrics plugin is off: no disk bar then.
-      invokeAction("host-metrics.disk", currentHost.id)
-        .then((result) => {
-          if (cancelled) return;
-          const disk = result as HostDiskInfo | null | undefined;
-          if (disk?.percent != null && disk.usedHuman && disk.totalHuman) {
-            setDiskInfo({
-              usedHuman: disk.usedHuman,
-              totalHuman: disk.totalHuman,
-              percent: disk.percent,
-              mount: disk.mount ?? null,
-              filesystems: disk.filesystems ?? [],
-            });
-          }
-        })
-        .catch(() => {});
-    }
-    return () => {
-      cancelled = true;
-    };
-  }, [currentHost?.id, lastRefreshTime]);
-
-  useEffect(() => {
-    localStorage.setItem("fileManagerDensity", density);
-  }, [density]);
-
-  useEffect(() => {
-    localStorage.setItem("fileManagerSortBy", sortBy);
-    localStorage.setItem("fileManagerSortOrder", sortOrder);
-  }, [sortBy, sortOrder]);
-
-  const filteredFiles = useMemo(
-    () =>
-      files
-        .filter((file) =>
-          file.name.toLowerCase().includes(searchQuery.toLowerCase()),
-        )
-        .sort((a, b) => {
-          if (a.type === "directory" && b.type !== "directory") return -1;
-          if (a.type !== "directory" && b.type === "directory") return 1;
-
-          let result = 0;
-          switch (sortBy) {
-            case "name":
-              result = a.name.localeCompare(b.name, undefined, {
-                numeric: true,
-                sensitivity: "base",
-              });
-              break;
-            case "modified":
-              result = (a.modifiedTimestamp || 0) - (b.modifiedTimestamp || 0);
-              break;
-            case "size":
-              result = (a.size || 0) - (b.size || 0);
-              break;
-          }
-          return sortOrder === "desc" ? -result : result;
-        }),
-    [files, searchQuery, sortBy, sortOrder],
-  );
-
-  if (!currentHost) {
-    return (
-      <div className="h-full flex items-center justify-center">
-        <div className="text-center">
-          <p className="text-lg text-muted-foreground mb-4">
-            {t("fileManager.selectHostToStart")}
-          </p>
-        </div>
-      </div>
-    );
-  }
-
-  if ((isLoading || isReconnecting) && !sshSessionId) {
-    return (
-      <div className="h-full w-full flex flex-col bg-background relative">
-        <ConnectionScreen
-          status={isReconnecting ? "connecting" : connectRetry.status}
-          message={t("fileManager.connecting")}
-          attempt={connectRetry.attempt}
-          maxAttempts={connectRetry.maxAttempts}
-          nextRetryInMs={connectRetry.nextRetryInMs}
-          onManualRetry={connectRetry.retryNow}
-          logPosition={hasConnectionError ? "top" : "bottom"}
-        />
-      </div>
-    );
-  }
-
-  return (
-    <div className="h-full flex flex-col bg-background relative overflow-hidden isolate">
-      <div className="h-full w-full flex flex-col min-h-0">
-        <FileManagerToolbar
-          t={t}
-          currentPath={currentPath}
-          navIndex={navIndex}
-          navHistoryLength={navHistory.length}
-          isLoading={isLoading}
-          sshSessionId={sshSessionId}
-          selectedFiles={selectedFiles}
-          searchQuery={searchQuery}
-          setSearchQuery={setSearchQuery}
-          viewMode={viewMode}
-          setViewMode={setViewMode}
-          density={density}
-          setDensity={setDensity}
-          sortBy={sortBy}
-          setSortBy={setSortBy}
-          sortOrder={sortOrder}
-          setSortOrder={setSortOrder}
-          setMobileSidebarOpen={setMobileSidebarOpen}
-          goBack={goBack}
-          goForward={goForward}
-          goUp={goUp}
-          navigateTo={navigateTo}
-          handleRefreshDirectory={handleRefreshDirectory}
-          handleDeleteFiles={handleDeleteFiles}
-          handleCopyFiles={handleCopyFiles}
-          handleFilesDropped={handleFilesDropped}
-          handleCreateNewFolder={handleCreateNewFolder}
-          handleCreateNewFile={handleCreateNewFile}
-          showLocalPaneToggle={localPaneAvailable}
-          localPaneOpen={localPaneAvailable && localPaneOpen}
-          onToggleLocalPane={toggleLocalPane}
-          sidebarOpen={sidebarOpen}
-          onToggleSidebar={toggleSidebar}
-        />
-
-        <div
-          ref={panesRowRef}
-          className="flex-1 flex px-3 pb-3 pt-2 gap-3 min-h-0 relative"
-          {...dragHandlers}
-        >
-          {/* Mobile sidebar backdrop */}
-          {mobileSidebarOpen && (
-            <div
-              className="fixed inset-0 z-20 bg-black/40 md:hidden"
-              onClick={() => setMobileSidebarOpen(false)}
-            />
-          )}
-
-          {/* Sidebar — fixed overlay on mobile, static on desktop */}
-          <div
-            className={cn(
-              "flex-shrink-0 h-full flex flex-col",
-              mobileSidebarOpen
-                ? "fixed left-0 top-0 bottom-0 w-64 z-30 flex"
-                : sidebarOpen
-                  ? "hidden md:flex"
-                  : "hidden",
-            )}
-            style={
-              mobileSidebarOpen
-                ? undefined
-                : { width: sidebarSize.width, minWidth: SIDEBAR_MIN_WIDTH }
-            }
-          >
-            <div className="flex-1 flex flex-col overflow-hidden min-h-0 border border-border bg-card">
-              <FileManagerSidebar
-                density={density}
-                currentHost={currentHost}
-                currentPath={currentPath}
-                onPathChange={navigateTo}
-                onFileOpen={handleSidebarFileOpen}
-                onItemContextMenu={handleSidebarItemContextMenu}
-                sshSessionId={sshSessionId}
-                refreshTrigger={sidebarRefreshTrigger}
-                onOpenTrash={() => setTrashOpen(true)}
-                diskInfo={diskInfo ?? undefined}
-              />
-            </div>
-          </div>
-          {sidebarOpen && !mobileSidebarOpen && (
-            <PaneResizeHandle
-              label={t("fileManager.resizeSidebar")}
-              onMouseDown={sidebarSize.startResize}
-              onDoubleClick={sidebarSize.resetWidth}
-              active={sidebarSize.isResizing}
-            />
-          )}
-
-          {localPaneAvailable && localPaneOpen && (
-            <>
-              <div
-                className="hidden md:flex flex-shrink-0 relative overflow-hidden min-h-0 flex-col border border-border bg-card"
-                style={{
-                  width: localPaneSize.width,
-                  minWidth: LOCAL_PANE_MIN_WIDTH,
-                  maxWidth: "65%",
-                }}
-              >
-                <LocalFilePane
-                  refreshToken={localPaneRefreshToken}
-                  onClose={toggleLocalPane}
-                  onRemoteItemsDropped={handleRemoteItemsDroppedToLocal}
-                  onUploadToRemote={handleLocalFilesDrop}
-                />
-              </div>
-              <PaneResizeHandle
-                label={t("fileManager.resizeLocalPane")}
-                onMouseDown={localPaneSize.startResize}
-                onDoubleClick={localPaneSize.resetWidth}
-                active={localPaneSize.isResizing}
-              />
-            </>
-          )}
-
-          <div className="flex-1 basis-0 relative overflow-hidden min-h-0 flex flex-col border border-border bg-card">
-            <div className="flex-1 relative min-h-0 h-full">
-              <FileManagerGrid
-                files={filteredFiles}
-                selectedFiles={selectedFiles}
-                onFileOpen={handleFileOpen}
-                onFileIntent={prefetchFileIntent}
-                onSelectionChange={setSelection}
-                onRefresh={handleRefreshDirectory}
-                onUpload={handleFilesDropped}
-                onUploadItems={handleItemsDropped}
-                onLocalFilesDrop={
-                  localPaneAvailable ? handleLocalFilesDrop : undefined
-                }
-                parentPath={
-                  currentPath === "/"
-                    ? null
-                    : currentPath.substring(0, currentPath.lastIndexOf("/")) ||
-                      "/"
-                }
-                onNavigateUp={goUp}
-                sortBy={sortBy}
-                sortOrder={sortOrder}
-                onSortChange={(field) => {
-                  if (field === sortBy) {
-                    setSortOrder(sortOrder === "asc" ? "desc" : "asc");
-                  } else {
-                    setSortBy(field);
-                    setSortOrder("asc");
-                  }
-                }}
-                onDownload={(files) =>
-                  files
-                    .filter((f) => f.type === "file")
-                    .forEach(handleDownloadFile)
-                }
-                onContextMenu={handleContextMenu}
-                viewMode={viewMode}
-                density={density}
-                onRename={handleRenameConfirm}
-                editingFile={editingFile}
-                onStartEdit={handleStartEdit}
-                onCancelEdit={handleCancelEdit}
-                onDelete={handleDeleteFiles}
-                onCopy={handleCopyFiles}
-                onCut={handleCutFiles}
-                onPaste={handlePasteFiles}
-                onUndo={handleUndo}
-                hasClipboard={!!clipboard}
-                onFileDrop={handleFileDrop}
-                onFileDiff={handleFileDiff}
-                onSystemDragStart={handleFileDragStart}
-                onSystemDragEnd={handleFileDragEnd}
-                createIntent={createIntent}
-                onConfirmCreate={handleConfirmCreate}
-                onCancelCreate={handleCancelCreate}
-                onNewFile={handleCreateNewFile}
-                onNewFolder={handleCreateNewFolder}
-              />
-
-              <FileManagerContextMenu
-                x={contextMenu.x}
-                y={contextMenu.y}
-                files={contextMenu.files}
-                isVisible={contextMenu.isVisible}
-                onClose={() =>
-                  setContextMenu((prev) => ({ ...prev, isVisible: false }))
-                }
-                onDownload={(files) =>
-                  files
-                    .filter((f) => f.type === "file")
-                    .forEach(handleDownloadFile)
-                }
-                onPreview={handleFileOpen}
-                onRename={handleRenameFile}
-                onCopy={handleCopyFiles}
-                onCut={handleCutFiles}
-                onPaste={handlePasteFiles}
-                onDelete={handleDeleteFiles}
-                onUpload={() => {
-                  const input = document.createElement("input");
-                  input.type = "file";
-                  input.multiple = true;
-                  input.onchange = (e) => {
-                    const files = (e.target as HTMLInputElement).files;
-                    if (files) handleFilesDropped(files);
-                  };
-                  input.click();
-                }}
-                onNewFolder={handleCreateNewFolder}
-                onNewFile={handleCreateNewFile}
-                onRefresh={handleRefreshDirectory}
-                hasClipboard={!!clipboard}
-                onDragToDesktop={() => handleDragToDesktop(contextMenu.files)}
-                onOpenTerminal={(path) => handleOpenTerminal(path)}
-                onRunExecutable={(file) => handleRunExecutable(file)}
-                onPinFile={handlePinFile}
-                onUnpinFile={handleUnpinFile}
-                onAddShortcut={handleAddShortcut}
-                isPinned={isPinnedFile}
-                currentPath={currentPath}
-                onProperties={handleOpenPermissionsDialog}
-                onExtractArchive={handleExtractArchive}
-                onCompress={handleOpenCompressDialog}
-                onCopyPath={handleCopyPath}
-                onCopyFolderLink={handleCopyFolderLink}
-                onTransferToHost={handleOpenTransferDialog}
-              />
-            </div>
-          </div>
-        </div>
-
-        <FileManagerTrashDialog
-          open={trashOpen}
-          onOpenChange={setTrashOpen}
-          sessionId={sshSessionId}
-          onChanged={() => {
-            if (sshSessionId)
-              invalidateCachedFileList(sshSessionId, currentPath);
-            void handleRefreshDirectory();
-          }}
-        />
-      </div>
-
-      {currentHost && (
-        <TransferToHostDialog
-          open={transferDialogOpen}
-          onOpenChange={setTransferDialogOpen}
-          files={transferFiles}
-          move={transferMove}
-          sourceHost={currentHost}
-          sourceSessionId={sshSessionId}
-          onConfirm={handleTransferConfirm}
-        />
-      )}
-
-      {currentHost && (
-        <PassphraseDialog
-          isOpen={showPassphraseDialog}
-          onSubmit={handlePassphraseSubmit}
-          onCancel={handlePassphraseCancel}
-          hostInfo={{
-            ip: currentHost.ip,
-            port: currentHost.port,
-            username: currentHost.username,
-            name: currentHost.name,
-          }}
-          backgroundColor="var(--bg-canvas)"
-        />
-      )}
-
-      <FileManagerDialogs
-        compressDialogFiles={compressDialogFiles}
-        setCompressDialogFiles={setCompressDialogFiles}
-        handleCompress={handleCompress}
-        totpRequired={totpRequired}
-        totpPrompt={totpPrompt}
-        handleTotpSubmit={handleTotpSubmit}
-        handleTotpCancel={handleTotpCancel}
-        browserSignInRequired={browserSignInRequired}
-        browserSignInUrl={browserSignInUrl}
-        browserSignInCode={browserSignInCode}
-        browserSignInLabel={browserSignInLabel}
-        handleBrowserSignInContinue={handleBrowserSignInContinue}
-        handleBrowserSignInCancel={handleBrowserSignInCancel}
-        handleBrowserSignInOpenUrl={handleBrowserSignInOpenUrl}
-        currentHost={currentHost}
-        showAuthDialog={showAuthDialog}
-        authDialogReason={authDialogReason}
-        handleAuthDialogSubmit={handleAuthDialogSubmit}
-        handleAuthDialogCancel={handleAuthDialogCancel}
-        permissionsDialogFile={permissionsDialogFile}
-        setPermissionsDialogFile={setPermissionsDialogFile}
-        handleSavePermissions={handleSavePermissions}
-        sudoDialogOpen={sudoDialogOpen}
-        setSudoDialogOpen={setSudoDialogOpen}
-        setPendingSudoOperation={setPendingSudoOperation}
-        handleSudoPasswordSubmit={handleSudoPasswordSubmit}
-      />
-      <ConnectionLogPanel
-        isConnecting={isReconnecting || isLoading}
-        isConnected={!!sshSessionId && !isReconnecting}
-        hasConnectionError={hasConnectionError}
-        position={hasConnectionError ? "top" : "bottom"}
-      />
-    </div>
-  );
-}
-
-function FileManagerInner({
-  initialHost,
-  initialFilePath,
-  initialPath,
-  onClose,
-  onOpenTerminalTab,
-  isVisible = true,
-}: FileManagerProps) {
-  return (
-    <WindowManager>
-      <FileManagerContent
-        initialHost={initialHost}
-        initialFilePath={initialFilePath}
-        initialPath={initialPath}
-        onClose={onClose}
-        onOpenTerminalTab={onOpenTerminalTab}
-        isVisible={isVisible}
-      />
-    </WindowManager>
-  );
-}
-
-export function FileManager(props: FileManagerProps) {
-  return (
-    <ConnectionLogProvider>
-      <FileManagerInner {...props} />
-    </ConnectionLogProvider>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/FileManagerApp.tsx b/plugins/file-manager/src/frontend/FileManagerApp.tsx
deleted file mode 100644
index 18f57ec7d..000000000
--- a/plugins/file-manager/src/frontend/FileManagerApp.tsx
+++ /dev/null
@@ -1,53 +0,0 @@
-import React from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { FileManager } from "./FileManager.tsx";
-import { FullScreenAppWrapper, ConnectionScreen } from "@termix/plugin-sdk/ui";
-
-interface FileManagerAppProps {
-  hostId?: string;
-  initialPath?: string;
-}
-
-const FileManagerApp: React.FC<FileManagerAppProps> = ({
-  hostId,
-  initialPath,
-}) => {
-  const { t } = useTranslation();
-  return (
-    <FullScreenAppWrapper hostId={hostId}>
-      {(hostConfig, phase) => {
-        if (phase === "loading") {
-          return (
-            <div className="relative h-full w-full">
-              <ConnectionScreen
-                status="connecting"
-                message={t("hosts.loadingHost")}
-              />
-            </div>
-          );
-        }
-
-        if (!hostConfig) {
-          return (
-            <div className="relative h-full w-full">
-              <ConnectionScreen
-                status="disconnected"
-                message={t("hosts.hostNotFound")}
-              />
-            </div>
-          );
-        }
-
-        return (
-          <FileManager
-            initialHost={hostConfig}
-            initialPath={initialPath}
-            onClose={() => {}}
-          />
-        );
-      }}
-    </FullScreenAppWrapper>
-  );
-};
-
-export default FileManagerApp;
diff --git a/plugins/file-manager/src/frontend/FileManagerContextMenu.tsx b/plugins/file-manager/src/frontend/FileManagerContextMenu.tsx
deleted file mode 100644
index fbf33da55..000000000
--- a/plugins/file-manager/src/frontend/FileManagerContextMenu.tsx
+++ /dev/null
@@ -1,622 +0,0 @@
-import React, { useEffect, useLayoutEffect, useRef, useState } from "react";
-import { cn } from "@termix/plugin-sdk/ui";
-import {
-  Download,
-  Edit3,
-  Copy,
-  Scissors,
-  Trash2,
-  Info,
-  Upload,
-  FolderPlus,
-  FilePlus,
-  RefreshCw,
-  Clipboard,
-  Eye,
-  Terminal,
-  Play,
-  Star,
-  Bookmark,
-  FileArchive,
-  ArrowRightLeft,
-  Link,
-} from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Kbd, KbdKey, KbdSeparator } from "@termix/plugin-sdk/ui";
-
-const VIEWPORT_PADDING = 16;
-
-interface FileItem {
-  name: string;
-  type: "file" | "directory" | "link";
-  path: string;
-  size?: number;
-  modified?: string;
-  permissions?: string;
-  owner?: string;
-  group?: string;
-  executable?: boolean;
-}
-
-interface ContextMenuProps {
-  x: number;
-  y: number;
-  files: FileItem[];
-  isVisible: boolean;
-  onClose: () => void;
-  onDownload?: (files: FileItem[]) => void;
-  onRename?: (file: FileItem) => void;
-  onCopy?: (files: FileItem[]) => void;
-  onCut?: (files: FileItem[]) => void;
-  onDelete?: (files: FileItem[]) => void;
-  onProperties?: (file: FileItem) => void;
-  onUpload?: () => void;
-  onNewFolder?: () => void;
-  onNewFile?: () => void;
-  onRefresh?: () => void;
-  onPaste?: () => void;
-  onPreview?: (file: FileItem) => void;
-  hasClipboard?: boolean;
-  onDragToDesktop?: () => void;
-  onOpenTerminal?: (path: string) => void;
-  onRunExecutable?: (file: FileItem) => void;
-  onPinFile?: (file: FileItem) => void;
-  onUnpinFile?: (file: FileItem) => void;
-  onAddShortcut?: (path: string) => void;
-  isPinned?: (file: FileItem) => boolean;
-  currentPath?: string;
-  onExtractArchive?: (file: FileItem) => void;
-  onCompress?: (files: FileItem[]) => void;
-  onCopyPath?: (files: FileItem[]) => void;
-  onCopyFolderLink?: (path: string) => void;
-  onTransferToHost?: (files: FileItem[], move: boolean) => void;
-}
-
-interface MenuItem {
-  icon: React.ReactNode;
-  label: string;
-  action: () => void;
-  shortcut?: string;
-  separator?: boolean;
-  disabled?: boolean;
-  danger?: boolean;
-}
-
-export function FileManagerContextMenu({
-  x,
-  y,
-  files,
-  isVisible,
-  onClose,
-  onDownload,
-  onRename,
-  onCopy,
-  onCut,
-  onDelete,
-  onProperties,
-  onUpload,
-  onNewFolder,
-  onNewFile,
-  onRefresh,
-  onPaste,
-  onPreview,
-  hasClipboard = false,
-  onDragToDesktop,
-  onOpenTerminal,
-  onRunExecutable,
-  onPinFile,
-  onUnpinFile,
-  onAddShortcut,
-  isPinned,
-  currentPath,
-  onExtractArchive,
-  onCompress,
-  onCopyPath,
-  onCopyFolderLink,
-  onTransferToHost,
-}: ContextMenuProps) {
-  const { t } = useTranslation();
-  const menuRef = useRef<HTMLDivElement>(null);
-  const [menuPosition, setMenuPosition] = useState({ x, y });
-  const [isMounted, setIsMounted] = useState(false);
-
-  useEffect(() => {
-    if (!isVisible) {
-      setIsMounted(false);
-      return;
-    }
-
-    setIsMounted(true);
-
-    let cleanupFn: (() => void) | null = null;
-
-    const timeoutId = setTimeout(() => {
-      const handleClickOutside = (event: MouseEvent) => {
-        const target = event.target as Element;
-        const menuElement = document.querySelector("[data-context-menu]");
-
-        if (!menuElement?.contains(target)) {
-          onClose();
-        }
-      };
-
-      const handleRightClick = (event: MouseEvent) => {
-        event.preventDefault();
-        onClose();
-      };
-
-      const handleKeyDown = (event: KeyboardEvent) => {
-        if (event.key === "Escape") {
-          event.preventDefault();
-          onClose();
-        }
-      };
-
-      const handleBlur = () => {
-        onClose();
-      };
-
-      const handleScroll = () => {
-        onClose();
-      };
-
-      document.addEventListener("mousedown", handleClickOutside, true);
-      document.addEventListener("contextmenu", handleRightClick);
-      document.addEventListener("keydown", handleKeyDown);
-      window.addEventListener("blur", handleBlur);
-      window.addEventListener("scroll", handleScroll, true);
-
-      cleanupFn = () => {
-        document.removeEventListener("mousedown", handleClickOutside, true);
-        document.removeEventListener("contextmenu", handleRightClick);
-        document.removeEventListener("keydown", handleKeyDown);
-        window.removeEventListener("blur", handleBlur);
-        window.removeEventListener("scroll", handleScroll, true);
-      };
-    }, 50);
-
-    return () => {
-      clearTimeout(timeoutId);
-      if (cleanupFn) {
-        cleanupFn();
-      }
-    };
-  }, [isVisible, x, y, onClose]);
-
-  useLayoutEffect(() => {
-    if (!isVisible || !menuRef.current) return;
-    const menuWidth = menuRef.current.offsetWidth;
-    const menuHeight = menuRef.current.offsetHeight;
-    const viewportWidth = window.innerWidth;
-    const viewportHeight = window.innerHeight;
-    let adjustedX = x;
-    let adjustedY = y;
-    if (x + menuWidth > viewportWidth)
-      adjustedX = viewportWidth - menuWidth - 10;
-    if (y + menuHeight > viewportHeight)
-      adjustedY = Math.max(10, viewportHeight - menuHeight - 10);
-    adjustedX = Math.max(8, adjustedX);
-    adjustedY = Math.max(8, adjustedY);
-    setMenuPosition({ x: adjustedX, y: adjustedY });
-  }, [isVisible, x, y, files.length]);
-
-  const isFileContext = files.length > 0;
-  const isSingleFile = files.length === 1;
-  const isMultipleFiles = files.length > 1;
-  const hasFiles = files.some((f) => f.type === "file");
-  const hasExecutableFiles = files.some(
-    (f) => f.type === "file" && f.executable,
-  );
-
-  const menuItems: MenuItem[] = [];
-
-  if (isFileContext) {
-    if (onOpenTerminal) {
-      const targetPath = isSingleFile
-        ? files[0].type === "directory"
-          ? files[0].path
-          : files[0].path.substring(0, files[0].path.lastIndexOf("/"))
-        : files[0].path.substring(0, files[0].path.lastIndexOf("/"));
-
-      menuItems.push({
-        icon: <Terminal className="size-3.5" />,
-        label:
-          files[0].type === "directory"
-            ? t("fileManager.openTerminalInFolder")
-            : t("fileManager.openTerminalInFileLocation"),
-        action: () => onOpenTerminal(targetPath),
-        shortcut: "Ctrl+Shift+T",
-      });
-    }
-
-    if (isSingleFile && hasExecutableFiles && onRunExecutable) {
-      menuItems.push({
-        icon: <Play className="size-3.5" />,
-        label: t("fileManager.run"),
-        action: () => onRunExecutable(files[0]),
-        shortcut: "Enter",
-      });
-    }
-
-    if (
-      onOpenTerminal ||
-      (isSingleFile && hasExecutableFiles && onRunExecutable)
-    ) {
-      menuItems.push({ separator: true } as MenuItem);
-    }
-
-    if (hasFiles && onPreview) {
-      menuItems.push({
-        icon: <Eye className="size-3.5" />,
-        label: t("fileManager.preview"),
-        action: () => onPreview(files[0]),
-        disabled: !isSingleFile || files[0].type !== "file",
-      });
-    }
-
-    if (hasFiles && onDownload) {
-      menuItems.push({
-        icon: <Download className="size-3.5" />,
-        label: isMultipleFiles
-          ? t("fileManager.downloadFiles", { count: files.length })
-          : t("fileManager.downloadFile"),
-        action: () => onDownload(files),
-        shortcut: "Ctrl+D",
-      });
-    }
-
-    if (isFileContext && onTransferToHost) {
-      const isOnlyDirectories =
-        files.length > 0 && files.every((f) => f.type === "directory");
-      menuItems.push({
-        icon: <ArrowRightLeft className="size-3.5" />,
-        label: isMultipleFiles
-          ? t("transfer.copyItemsToHost", { count: files.length })
-          : isOnlyDirectories && isSingleFile
-            ? t("transfer.copyFolderToHost")
-            : t("transfer.copyToHost"),
-        action: () => onTransferToHost(files, false),
-      });
-      menuItems.push({
-        icon: <ArrowRightLeft className="size-3.5" />,
-        label: isMultipleFiles
-          ? t("transfer.moveItemsToHost", { count: files.length })
-          : isOnlyDirectories && isSingleFile
-            ? t("transfer.moveFolderToHost")
-            : t("transfer.moveToHost"),
-        action: () => onTransferToHost(files, true),
-      });
-    }
-
-    if (isSingleFile && files[0].type === "file" && onExtractArchive) {
-      const fileName = files[0].name.toLowerCase();
-      const isArchive =
-        fileName.endsWith(".zip") ||
-        fileName.endsWith(".tar") ||
-        fileName.endsWith(".tar.gz") ||
-        fileName.endsWith(".tgz") ||
-        fileName.endsWith(".tar.bz2") ||
-        fileName.endsWith(".tbz2") ||
-        fileName.endsWith(".tar.xz") ||
-        fileName.endsWith(".gz") ||
-        fileName.endsWith(".bz2") ||
-        fileName.endsWith(".xz") ||
-        fileName.endsWith(".7z") ||
-        fileName.endsWith(".rar");
-
-      if (isArchive) {
-        menuItems.push({
-          icon: <FileArchive className="size-3.5" />,
-          label: t("fileManager.extractArchive"),
-          action: () => onExtractArchive(files[0]),
-          shortcut: "Ctrl+E",
-        });
-      }
-    }
-
-    if (isFileContext && onCompress) {
-      menuItems.push({
-        icon: <FileArchive className="size-3.5" />,
-        label: isMultipleFiles
-          ? t("fileManager.compressFiles")
-          : t("fileManager.compressFile"),
-        action: () => onCompress(files),
-        shortcut: "Ctrl+Shift+C",
-      });
-    }
-
-    if (isSingleFile && files[0].type === "file") {
-      const isCurrentlyPinned = isPinned ? isPinned(files[0]) : false;
-
-      if (isCurrentlyPinned && onUnpinFile) {
-        menuItems.push({
-          icon: (
-            <Star className="size-3.5 fill-accent-brand text-accent-brand" />
-          ),
-          label: t("fileManager.unpinFile"),
-          action: () => onUnpinFile(files[0]),
-        });
-      } else if (!isCurrentlyPinned && onPinFile) {
-        menuItems.push({
-          icon: <Star className="size-3.5" />,
-          label: t("fileManager.pinFile"),
-          action: () => onPinFile(files[0]),
-        });
-      }
-    }
-
-    if (isSingleFile && files[0].type === "directory" && onAddShortcut) {
-      menuItems.push({
-        icon: <Bookmark className="size-3.5" />,
-        label: t("fileManager.addToShortcuts"),
-        action: () => onAddShortcut(files[0].path),
-      });
-    }
-
-    if (isSingleFile && files[0].type === "directory" && onCopyFolderLink) {
-      menuItems.push({
-        icon: <Link className="size-3.5" />,
-        label: t("fileManager.copyFolderLink"),
-        action: () => onCopyFolderLink(files[0].path),
-      });
-    }
-
-    if (
-      (hasFiles && (onPreview || onDragToDesktop)) ||
-      (isSingleFile &&
-        files[0].type === "file" &&
-        (onPinFile || onUnpinFile)) ||
-      (isSingleFile &&
-        files[0].type === "directory" &&
-        (onAddShortcut || onCopyFolderLink))
-    ) {
-      menuItems.push({ separator: true } as MenuItem);
-    }
-
-    if (isSingleFile && onRename) {
-      menuItems.push({
-        icon: <Edit3 className="size-3.5" />,
-        label: t("fileManager.rename"),
-        action: () => onRename(files[0]),
-        shortcut: "F2",
-      });
-    }
-
-    if (onCopy) {
-      menuItems.push({
-        icon: <Copy className="size-3.5" />,
-        label: isMultipleFiles
-          ? t("fileManager.copyFiles", { count: files.length })
-          : t("fileManager.copy"),
-        action: () => onCopy(files),
-        shortcut: "Ctrl+C",
-      });
-    }
-
-    if (onCut) {
-      menuItems.push({
-        icon: <Scissors className="size-3.5" />,
-        label: isMultipleFiles
-          ? t("fileManager.cutFiles", { count: files.length })
-          : t("fileManager.cut"),
-        action: () => onCut(files),
-        shortcut: "Ctrl+X",
-      });
-    }
-
-    if (onCopyPath) {
-      menuItems.push({
-        icon: <Clipboard className="size-3.5" />,
-        label: isMultipleFiles
-          ? t("fileManager.copyPaths")
-          : t("fileManager.copyPath"),
-        action: () => onCopyPath(files),
-        shortcut: "Ctrl+Shift+P",
-      });
-    }
-
-    if ((isSingleFile && onRename) || onCopy || onCut || onCopyPath) {
-      menuItems.push({ separator: true } as MenuItem);
-    }
-
-    if (isSingleFile && onProperties) {
-      menuItems.push({
-        icon: <Info className="size-3.5" />,
-        label: t("fileManager.properties"),
-        action: () => onProperties(files[0]),
-      });
-    }
-
-    if ((isSingleFile && onProperties) || onDelete) {
-      menuItems.push({ separator: true } as MenuItem);
-    }
-
-    if (onDelete) {
-      menuItems.push({
-        icon: <Trash2 className="size-3.5" />,
-        label: isMultipleFiles
-          ? t("fileManager.deleteFiles", { count: files.length })
-          : t("fileManager.delete"),
-        action: () => onDelete(files),
-        shortcut: "Delete",
-        danger: true,
-      });
-    }
-  } else {
-    if (onOpenTerminal && currentPath) {
-      menuItems.push({
-        icon: <Terminal className="size-3.5" />,
-        label: t("fileManager.openTerminalHere"),
-        action: () => onOpenTerminal(currentPath),
-        shortcut: "Ctrl+Shift+T",
-      });
-    }
-
-    if (onUpload) {
-      menuItems.push({
-        icon: <Upload className="size-3.5" />,
-        label: t("fileManager.uploadFile"),
-        action: onUpload,
-        shortcut: "Ctrl+U",
-      });
-    }
-
-    if ((onOpenTerminal && currentPath) || onUpload) {
-      menuItems.push({ separator: true } as MenuItem);
-    }
-
-    if (onNewFolder) {
-      menuItems.push({
-        icon: <FolderPlus className="size-3.5" />,
-        label: t("fileManager.newFolder"),
-        action: onNewFolder,
-        shortcut: "Ctrl+Shift+N",
-      });
-    }
-
-    if (onNewFile) {
-      menuItems.push({
-        icon: <FilePlus className="size-3.5" />,
-        label: t("fileManager.newFile"),
-        action: onNewFile,
-        shortcut: "Ctrl+N",
-      });
-    }
-
-    if (onNewFolder || onNewFile) {
-      menuItems.push({ separator: true } as MenuItem);
-    }
-
-    if (onRefresh) {
-      menuItems.push({
-        icon: <RefreshCw className="size-3.5" />,
-        label: t("fileManager.refresh"),
-        action: onRefresh,
-        shortcut: "Ctrl+Y",
-      });
-    }
-
-    if (hasClipboard && onPaste) {
-      menuItems.push({
-        icon: <Clipboard className="size-3.5" />,
-        label: t("fileManager.paste"),
-        action: onPaste,
-        shortcut: "Ctrl+V",
-      });
-    }
-
-    if (onCopyFolderLink && currentPath) {
-      menuItems.push({ separator: true } as MenuItem);
-      menuItems.push({
-        icon: <Link className="size-3.5" />,
-        label: t("fileManager.copyCurrentFolderLink"),
-        action: () => onCopyFolderLink(currentPath),
-      });
-    }
-  }
-
-  const filteredMenuItems = menuItems.filter((item, index) => {
-    if (!item.separator) return true;
-
-    const prevItem = index > 0 ? menuItems[index - 1] : null;
-    const nextItem = index < menuItems.length - 1 ? menuItems[index + 1] : null;
-
-    if (prevItem?.separator || nextItem?.separator) {
-      return false;
-    }
-
-    return true;
-  });
-
-  const finalMenuItems = filteredMenuItems.filter((item, index) => {
-    if (!item.separator) return true;
-    return index > 0 && index < filteredMenuItems.length - 1;
-  });
-
-  const renderShortcut = (shortcut: string) => {
-    const keys = shortcut.split("+");
-    if (keys.length === 1) {
-      return <Kbd>{keys[0]}</Kbd>;
-    }
-    return (
-      <Kbd>
-        {keys.map((key, index) => (
-          <>
-            <KbdKey key={`key-${index}`}>{key}</KbdKey>
-            {index < keys.length - 1 && <KbdSeparator key={`sep-${index}`} />}
-          </>
-        ))}
-      </Kbd>
-    );
-  };
-
-  if (!isVisible && !isMounted) return null;
-
-  return (
-    <>
-      <div
-        className={cn(
-          "fixed inset-0 z-[99990] transition-opacity duration-150",
-          !isMounted && "opacity-0",
-        )}
-      />
-
-      <div
-        ref={menuRef}
-        data-context-menu
-        className={cn(
-          "fixed bg-card border border-border rounded-none shadow-md min-w-[220px] max-w-[300px] z-[99995] overflow-x-hidden overflow-y-auto py-1",
-        )}
-        style={{
-          left: menuPosition.x,
-          top: menuPosition.y,
-          maxHeight: `calc(100vh - ${VIEWPORT_PADDING * 2}px)`,
-        }}
-      >
-        {finalMenuItems.map((item, index) => {
-          if (item.separator) {
-            return (
-              <div
-                key={`separator-${index}`}
-                className="my-1 border-t border-border"
-              />
-            );
-          }
-
-          return (
-            <button
-              key={index}
-              className={cn(
-                "w-full px-3 min-h-8 py-1.5 text-left text-xs font-semibold flex items-center justify-between gap-3 rounded-none transition-colors cursor-pointer",
-                "hover:bg-accent-brand/10 hover:text-accent-brand",
-                item.disabled &&
-                  "opacity-40 cursor-not-allowed hover:bg-transparent hover:text-current",
-                item.danger &&
-                  "text-destructive hover:bg-destructive/10 hover:text-destructive",
-              )}
-              onClick={() => {
-                if (!item.disabled) {
-                  item.action();
-                  onClose();
-                }
-              }}
-              disabled={item.disabled}
-            >
-              <div className="flex items-center gap-2 flex-1 min-w-0">
-                <div className="flex-shrink-0 text-muted-foreground">
-                  {item.icon}
-                </div>
-                <span className="flex-1 leading-tight">{item.label}</span>
-              </div>
-              {item.shortcut && (
-                <div className="ml-auto flex-shrink-0 opacity-50">
-                  {renderShortcut(item.shortcut)}
-                </div>
-              )}
-            </button>
-          );
-        })}
-      </div>
-    </>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/FileManagerDialogs.tsx b/plugins/file-manager/src/frontend/FileManagerDialogs.tsx
deleted file mode 100644
index 4b05c2f83..000000000
--- a/plugins/file-manager/src/frontend/FileManagerDialogs.tsx
+++ /dev/null
@@ -1,136 +0,0 @@
-import type { FileItem, SSHHost } from "./host-types";
-import {
-  TOTPDialog,
-  SSHAuthDialog,
-  BrowserSignInDialog,
-} from "@termix/plugin-sdk/ui";
-import { PermissionsDialog } from "./components/PermissionsDialog.tsx";
-import { CompressDialog } from "./components/CompressDialog.tsx";
-import { SudoPasswordDialog } from "./SudoPasswordDialog.tsx";
-import type { PendingSudoOperation } from "./file-manager-types.ts";
-
-type FileManagerDialogsProps = {
-  compressDialogFiles: FileItem[];
-  setCompressDialogFiles: (files: FileItem[]) => void;
-  handleCompress: (archiveName: string, format: string) => void | Promise<void>;
-  totpRequired: boolean;
-  totpPrompt: string;
-  handleTotpSubmit: (code: string) => void | Promise<void>;
-  handleTotpCancel: () => void;
-  browserSignInRequired: boolean;
-  browserSignInUrl: string;
-  browserSignInCode: string;
-  browserSignInLabel: string;
-  handleBrowserSignInContinue: () => void | Promise<void>;
-  handleBrowserSignInCancel: () => void;
-  handleBrowserSignInOpenUrl: () => void;
-  currentHost: SSHHost | null;
-  showAuthDialog: boolean;
-  authDialogReason: "no_keyboard" | "auth_failed" | "timeout";
-  handleAuthDialogSubmit: (credentials: {
-    password?: string;
-    sshKey?: string;
-    keyPassword?: string;
-  }) => void | Promise<void>;
-  handleAuthDialogCancel: () => void;
-  permissionsDialogFile: FileItem | null;
-  setPermissionsDialogFile: (file: FileItem | null) => void;
-  handleSavePermissions: (file: FileItem, permissions: string) => Promise<void>;
-  sudoDialogOpen: boolean;
-  setSudoDialogOpen: (open: boolean) => void;
-  setPendingSudoOperation: (operation: PendingSudoOperation | null) => void;
-  handleSudoPasswordSubmit: (password: string) => void | Promise<void>;
-};
-
-export function FileManagerDialogs({
-  compressDialogFiles,
-  setCompressDialogFiles,
-  handleCompress,
-  totpRequired,
-  totpPrompt,
-  handleTotpSubmit,
-  handleTotpCancel,
-  browserSignInRequired,
-  browserSignInUrl,
-  browserSignInCode,
-  browserSignInLabel,
-  handleBrowserSignInContinue,
-  handleBrowserSignInCancel,
-  handleBrowserSignInOpenUrl,
-  currentHost,
-  showAuthDialog,
-  authDialogReason,
-  handleAuthDialogSubmit,
-  handleAuthDialogCancel,
-  permissionsDialogFile,
-  setPermissionsDialogFile,
-  handleSavePermissions,
-  sudoDialogOpen,
-  setSudoDialogOpen,
-  setPendingSudoOperation,
-  handleSudoPasswordSubmit,
-}: FileManagerDialogsProps) {
-  return (
-    <>
-      <CompressDialog
-        open={compressDialogFiles.length > 0}
-        onOpenChange={(open) => !open && setCompressDialogFiles([])}
-        fileNames={compressDialogFiles.map((f) => f.name)}
-        onCompress={handleCompress}
-      />
-
-      <TOTPDialog
-        isOpen={totpRequired}
-        prompt={totpPrompt}
-        onSubmit={handleTotpSubmit}
-        onCancel={handleTotpCancel}
-        backgroundColor="var(--bg-canvas)"
-      />
-
-      <BrowserSignInDialog
-        isOpen={browserSignInRequired}
-        label={browserSignInLabel}
-        url={browserSignInUrl}
-        code={browserSignInCode}
-        onContinue={handleBrowserSignInContinue}
-        onCancel={handleBrowserSignInCancel}
-        onOpenUrl={handleBrowserSignInOpenUrl}
-        backgroundColor="var(--bg-canvas)"
-      />
-
-      {currentHost && (
-        <SSHAuthDialog
-          isOpen={showAuthDialog}
-          reason={authDialogReason}
-          onSubmit={handleAuthDialogSubmit}
-          onCancel={handleAuthDialogCancel}
-          hostInfo={{
-            ip: currentHost.ip,
-            port: currentHost.port,
-            username: currentHost.username,
-            name: currentHost.name,
-          }}
-          backgroundColor="var(--bg-canvas)"
-        />
-      )}
-
-      <PermissionsDialog
-        file={permissionsDialogFile}
-        open={permissionsDialogFile !== null}
-        onOpenChange={(open) => {
-          if (!open) setPermissionsDialogFile(null);
-        }}
-        onSave={handleSavePermissions}
-      />
-
-      <SudoPasswordDialog
-        open={sudoDialogOpen}
-        onOpenChange={(open) => {
-          setSudoDialogOpen(open);
-          if (!open) setPendingSudoOperation(null);
-        }}
-        onSubmit={handleSudoPasswordSubmit}
-      />
-    </>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/FileManagerGrid.tsx b/plugins/file-manager/src/frontend/FileManagerGrid.tsx
deleted file mode 100644
index b5c22d319..000000000
--- a/plugins/file-manager/src/frontend/FileManagerGrid.tsx
+++ /dev/null
@@ -1,1813 +0,0 @@
-/* eslint-disable react-hooks/exhaustive-deps */
-import React, {
-  useState,
-  useRef,
-  useCallback,
-  useEffect,
-  useMemo,
-  useLayoutEffect,
-} from "react";
-import { createPortal } from "react-dom";
-import { useVirtualizer } from "@tanstack/react-virtual";
-import { cn } from "@termix/plugin-sdk/ui";
-import {
-  Folder,
-  File,
-  FileText,
-  FileImage,
-  FileVideo,
-  FileAudio,
-  Archive,
-  Code,
-  Settings,
-  Download,
-  Upload,
-  ArrowUp,
-  CornerLeftUp,
-  ArrowDown,
-  FileSymlink,
-  Move,
-  GitCompare,
-} from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import type { FileItem } from "./host-types";
-import type { CreateIntent } from "./file-manager-types.ts";
-import { formatFileSize } from "./file-manager-utils.ts";
-import {
-  beginRemoteFilesDrag,
-  isLocalFilesDrag,
-  parseLocalFilesDragPayload,
-} from "./local-transfer-utils.ts";
-import {
-  useResizableColumns,
-  type ResizableColumnSpec,
-} from "./hooks/useResizableColumns.ts";
-import { ColumnResizeHandle } from "./components/ColumnResizeHandle.tsx";
-import { ColumnVisibilityMenu } from "./components/ColumnVisibilityMenu.tsx";
-
-// Fixed list-view columns after the flexible name column; user-resizable.
-const LIST_COLUMNS: ResizableColumnSpec[] = [
-  {
-    key: "modified",
-    labelKey: "fileManager.modified",
-    defaultWidth: 120,
-    minWidth: 70,
-  },
-  {
-    key: "owner",
-    labelKey: "fileManager.owner",
-    defaultWidth: 150,
-    minWidth: 60,
-  },
-  { key: "size", labelKey: "fileManager.size", defaultWidth: 80, minWidth: 56 },
-  {
-    key: "permissions",
-    labelKey: "fileManager.permissions",
-    defaultWidth: 90,
-    minWidth: 70,
-  },
-];
-const LIST_COLUMNS_STORAGE_KEY = "termix:file-manager:columns:remote";
-
-interface DragState {
-  /**
-   * internal: rows of this grid being moved around
-   * external: files dragged in from the OS
-   * local: entries dragged from the desktop app's local pane
-   */
-  type: "none" | "internal" | "external" | "local";
-  files: FileItem[];
-  draggedFiles?: FileItem[];
-  target?: FileItem;
-  counter: number;
-  mousePosition?: { x: number; y: number };
-}
-
-interface FileManagerGridProps {
-  files: FileItem[];
-  selectedFiles: FileItem[];
-  onFileOpen: (file: FileItem) => void;
-  onFileIntent?: (file: FileItem) => void;
-  onSelectionChange: (files: FileItem[]) => void;
-  onRefresh: () => void;
-  onUpload?: (files: FileList) => void;
-  /** OS drop that contains at least one directory (needs a recursive walk). */
-  onUploadItems?: (entries: FileSystemEntry[]) => void;
-  /** Entries dragged from the local pane; `targetDir` when dropped on a folder. */
-  onLocalFilesDrop?: (localPaths: string[], targetDir?: FileItem) => void;
-  onDownload?: (files: FileItem[]) => void;
-  onContextMenu?: (event: React.MouseEvent, file?: FileItem) => void;
-  viewMode?: "grid" | "list";
-  density?: "comfortable" | "compact";
-  onRename?: (file: FileItem, newName: string) => void;
-  editingFile?: FileItem | null;
-  onStartEdit?: (file: FileItem) => void;
-  onCancelEdit?: () => void;
-  onDelete?: (files: FileItem[]) => void;
-  onCopy?: (files: FileItem[]) => void;
-  onCut?: (files: FileItem[]) => void;
-  onPaste?: () => void;
-  onUndo?: () => void;
-  onFileDrop?: (draggedFiles: FileItem[], targetFile: FileItem) => void;
-  onFileDiff?: (file1: FileItem, file2: FileItem) => void;
-  onSystemDragStart?: (files: FileItem[]) => void;
-  onSystemDragEnd?: (e: DragEvent, files: FileItem[]) => void;
-  hasClipboard?: boolean;
-  createIntent?: CreateIntent | null;
-  onConfirmCreate?: (name: string) => void;
-  onCancelCreate?: () => void;
-  onNewFile?: () => void;
-  onNewFolder?: () => void;
-  sortBy?: "name" | "modified" | "size";
-  sortOrder?: "asc" | "desc";
-  onSortChange?: (field: "name" | "modified" | "size") => void;
-  /**
-   * Parent of the listed directory. When set (together with onNavigateUp) a
-   * pinned ".." entry is shown first; double-click goes up and drops on it
-   * target the parent folder.
-   */
-  parentPath?: string | null;
-  onNavigateUp?: () => void;
-}
-
-const getFileTypeColor = (file: FileItem): string => {
-  if (file.type === "directory") {
-    return "text-red-400";
-  }
-
-  if (file.type === "link") {
-    return "text-green-400";
-  }
-
-  return "text-blue-400";
-};
-
-const getFileIcon = (
-  file: FileItem,
-  viewMode: "grid" | "list" = "grid",
-  compact = false,
-) => {
-  const iconClass = compact
-    ? viewMode === "grid"
-      ? "size-6"
-      : "size-4"
-    : viewMode === "grid"
-      ? "size-8"
-      : "size-6";
-  const colorClass = getFileTypeColor(file);
-
-  if (file.type === "directory") {
-    return <Folder className={`${iconClass} ${colorClass}`} />;
-  }
-
-  if (file.type === "link") {
-    return <FileSymlink className={`${iconClass} ${colorClass}`} />;
-  }
-
-  const ext = file.name.split(".").pop()?.toLowerCase();
-
-  switch (ext) {
-    case "txt":
-    case "md":
-    case "readme":
-      return <FileText className={`${iconClass} ${colorClass}`} />;
-    case "png":
-    case "jpg":
-    case "jpeg":
-    case "gif":
-    case "bmp":
-    case "svg":
-      return <FileImage className={`${iconClass} ${colorClass}`} />;
-    case "mp4":
-    case "avi":
-    case "mkv":
-    case "mov":
-      return <FileVideo className={`${iconClass} ${colorClass}`} />;
-    case "mp3":
-    case "wav":
-    case "flac":
-    case "ogg":
-      return <FileAudio className={`${iconClass} ${colorClass}`} />;
-    case "zip":
-    case "tar":
-    case "gz":
-    case "rar":
-    case "7z":
-      return <Archive className={`${iconClass} ${colorClass}`} />;
-    case "js":
-    case "ts":
-    case "jsx":
-    case "tsx":
-    case "py":
-    case "java":
-    case "cpp":
-    case "c":
-    case "cs":
-    case "php":
-    case "rb":
-    case "go":
-    case "rs":
-      return <Code className={`${iconClass} ${colorClass}`} />;
-    case "json":
-    case "xml":
-    case "yaml":
-    case "yml":
-    case "toml":
-    case "ini":
-    case "conf":
-    case "config":
-      return <Settings className={`${iconClass} ${colorClass}`} />;
-    default:
-      return <File className={`${iconClass} ${colorClass}`} />;
-  }
-};
-
-export function FileManagerGrid({
-  files,
-  selectedFiles,
-  onFileOpen,
-  onFileIntent,
-  onSelectionChange,
-  onRefresh,
-  onUpload,
-  onUploadItems,
-  onLocalFilesDrop,
-  onDownload,
-  onContextMenu,
-  viewMode = "grid",
-  density = "comfortable",
-  onRename,
-  editingFile,
-  onStartEdit,
-  onCancelEdit,
-  onDelete,
-  onCopy,
-  onCut,
-  onPaste,
-  onUndo,
-  onFileDrop,
-  onFileDiff,
-  onSystemDragEnd,
-  hasClipboard,
-  createIntent,
-  onConfirmCreate,
-  onCancelCreate,
-  onNewFile,
-  onNewFolder,
-  sortBy,
-  sortOrder,
-  onSortChange,
-  parentPath,
-  onNavigateUp,
-}: FileManagerGridProps) {
-  const { t } = useTranslation();
-  const gridRef = useRef<HTMLDivElement>(null);
-  const [editingName, setEditingName] = useState("");
-  const [gridCols, setGridCols] = useState(4);
-
-  const compact = density === "compact";
-  const LIST_ROW_H = compact ? 29 : 41;
-  const GRID_ROW_H = compact ? 76 : 112;
-  const LIST_HEADER_H = compact ? 25 : 33;
-  const CONTENT_PAD = compact ? 8 : 16;
-  const GRID_GAP = compact ? 8 : 16;
-  const GRID_CELL = compact ? 76 : 112;
-
-  const [dragState, setDragState] = useState<DragState>({
-    type: "none",
-    files: [],
-    counter: 0,
-  });
-
-  // Responsive column count for grid virtualization (matches Tailwind breakpoints roughly).
-  useEffect(() => {
-    if (viewMode !== "grid") return;
-    const el = gridRef.current;
-    if (!el) return;
-
-    const updateCols = () => {
-      const w = el.clientWidth - CONTENT_PAD * 2;
-      const n = Math.max(
-        2,
-        Math.min(10, Math.floor((w + GRID_GAP) / GRID_CELL)),
-      );
-      setGridCols(n);
-    };
-    updateCols();
-    const ro = new ResizeObserver(updateCols);
-    ro.observe(el);
-    return () => ro.disconnect();
-  }, [viewMode, CONTENT_PAD, GRID_GAP, GRID_CELL]);
-
-  const gridRowCount = useMemo(
-    () => (viewMode === "grid" ? Math.ceil(files.length / gridCols) : 0),
-    [viewMode, files.length, gridCols],
-  );
-
-  const listVirtualizer = useVirtualizer({
-    count: viewMode === "list" ? files.length : 0,
-    getScrollElement: () => gridRef.current,
-    estimateSize: () => LIST_ROW_H,
-    overscan: 16,
-    getItemKey: (index) => files[index]?.path ?? index,
-    enabled: viewMode === "list" && files.length > 0,
-  });
-
-  const listColumns = useResizableColumns({
-    storageKey: LIST_COLUMNS_STORAGE_KEY,
-    columns: LIST_COLUMNS,
-  });
-  const [columnMenu, setColumnMenu] = useState<{
-    x: number;
-    y: number;
-    visible: boolean;
-  }>({ x: 0, y: 0, visible: false });
-  const closeColumnMenu = useCallback(
-    () => setColumnMenu((prev) => ({ ...prev, visible: false })),
-    [],
-  );
-
-  const gridVirtualizer = useVirtualizer({
-    count: gridRowCount,
-    getScrollElement: () => gridRef.current,
-    estimateSize: () => GRID_ROW_H,
-    overscan: 6,
-    getItemKey: (index) => `row-${index}`,
-    enabled: viewMode === "grid" && files.length > 0,
-  });
-
-  useLayoutEffect(() => {
-    if (viewMode === "list") listVirtualizer.measure();
-    else gridVirtualizer.measure();
-  }, [
-    viewMode,
-    density,
-    files.length,
-    editingFile?.path,
-    createIntent,
-    gridCols,
-  ]);
-
-  useEffect(() => {
-    const handleGlobalMouseMove = (e: MouseEvent) => {
-      if (dragState.type === "internal" && dragState.files.length > 0) {
-        setDragState((prev) => ({
-          ...prev,
-          mousePosition: { x: e.clientX, y: e.clientY },
-        }));
-      }
-    };
-
-    if (dragState.type === "internal" && dragState.files.length > 0) {
-      document.addEventListener("mousemove", handleGlobalMouseMove);
-      return () =>
-        document.removeEventListener("mousemove", handleGlobalMouseMove);
-    }
-  }, [dragState.type, dragState.files.length]);
-
-  const editInputRef = useRef<HTMLInputElement>(null);
-
-  useEffect(() => {
-    if (editingFile) {
-      setEditingName(editingFile.name);
-      setTimeout(() => {
-        editInputRef.current?.focus();
-        editInputRef.current?.select();
-      }, 0);
-    }
-  }, [editingFile]);
-
-  const handleEditConfirm = () => {
-    if (
-      editingFile &&
-      onRename &&
-      editingName.trim() &&
-      editingName !== editingFile.name
-    ) {
-      onRename(editingFile, editingName.trim());
-    }
-    onCancelEdit?.();
-  };
-
-  const handleEditCancel = () => {
-    setEditingName("");
-    onCancelEdit?.();
-  };
-
-  const handleEditKeyDown = (e: React.KeyboardEvent) => {
-    if (e.key === "Enter") {
-      e.preventDefault();
-      handleEditConfirm();
-    } else if (e.key === "Escape") {
-      e.preventDefault();
-      handleEditCancel();
-    }
-  };
-
-  const handleFileDragStart = (e: React.DragEvent, file: FileItem) => {
-    const filesToDrag = selectedFiles.includes(file) ? selectedFiles : [file];
-
-    setDragState({
-      type: "internal",
-      files: filesToDrag,
-      draggedFiles: filesToDrag,
-      counter: 0,
-      mousePosition: { x: e.clientX, y: e.clientY },
-    });
-
-    beginRemoteFilesDrag(
-      e.dataTransfer,
-      filesToDrag.map((f) => f.path),
-    );
-  };
-
-  const handleFileDragOver = (e: React.DragEvent, targetFile: FileItem) => {
-    e.preventDefault();
-    e.stopPropagation();
-
-    if (
-      dragState.type === "internal" &&
-      !dragState.files.some((f) => f.path === targetFile.path)
-    ) {
-      setDragState((prev) => ({ ...prev, target: targetFile }));
-      e.dataTransfer.dropEffect = "move";
-    } else if (isLocalFilesDrag(e.dataTransfer)) {
-      e.dataTransfer.dropEffect = "copy";
-      const nextTarget =
-        targetFile.type === "directory" ? targetFile : undefined;
-      if (
-        dragState.type !== "local" ||
-        dragState.target?.path !== nextTarget?.path
-      ) {
-        setDragState((prev) => ({
-          ...prev,
-          type: "local",
-          target: nextTarget,
-        }));
-      }
-    }
-  };
-
-  const handleFileDragLeave = (e: React.DragEvent, targetFile: FileItem) => {
-    e.preventDefault();
-    e.stopPropagation();
-
-    if (dragState.target?.path === targetFile.path) {
-      setDragState((prev) => ({ ...prev, target: undefined }));
-    }
-  };
-
-  const handleFileDrop = (e: React.DragEvent, targetFile: FileItem) => {
-    // OS drops belong to the pane's upload handler, even over an existing row.
-    if (dragState.type !== "internal" && !isLocalFilesDrag(e.dataTransfer))
-      return;
-    e.preventDefault();
-    e.stopPropagation();
-
-    if (isLocalFilesDrag(e.dataTransfer)) {
-      const localPaths = parseLocalFilesDragPayload(
-        e.dataTransfer.getData("text/plain"),
-      );
-      setDragState({ type: "none", files: [], counter: 0 });
-      if (localPaths) {
-        onLocalFilesDrop?.(
-          localPaths,
-          targetFile.type === "directory" ? targetFile : undefined,
-        );
-      }
-      return;
-    }
-
-    if (dragState.type !== "internal" || dragState.files.length === 0) {
-      setDragState((prev) => ({ ...prev, target: undefined }));
-      return;
-    }
-
-    const isDroppingOnSelf = dragState.files.some(
-      (f) => f.path === targetFile.path,
-    );
-    if (isDroppingOnSelf) {
-      setDragState({ type: "none", files: [], counter: 0 });
-      return;
-    }
-
-    if (targetFile.type === "directory") {
-      onFileDrop?.(dragState.files, targetFile);
-    } else if (
-      targetFile.type === "file" &&
-      dragState.files.length === 1 &&
-      dragState.files[0].type === "file"
-    ) {
-      onFileDiff?.(dragState.files[0], targetFile);
-    }
-
-    setDragState({ type: "none", files: [], counter: 0 });
-  };
-
-  const handleFileDragEnd = (e: React.DragEvent) => {
-    const draggedFiles = dragState.draggedFiles || [];
-    setDragState({ type: "none", files: [], counter: 0 });
-
-    onSystemDragEnd?.(e.nativeEvent, draggedFiles);
-  };
-
-  const [isSelecting, setIsSelecting] = useState(false);
-  const [selectionStart, setSelectionStart] = useState<{
-    x: number;
-    y: number;
-  } | null>(null);
-  const [selectionRect, setSelectionRect] = useState<{
-    x: number;
-    y: number;
-    width: number;
-    height: number;
-  } | null>(null);
-  const [justFinishedSelecting, setJustFinishedSelecting] = useState(false);
-
-  const handleDragEnter = useCallback(
-    (e: React.DragEvent) => {
-      e.preventDefault();
-      e.stopPropagation();
-
-      const isInternalDrag = dragState.type === "internal";
-
-      if (!isInternalDrag) {
-        const nextType = isLocalFilesDrag(e.dataTransfer)
-          ? "local"
-          : "external";
-        setDragState((prev) => ({
-          ...prev,
-          type: nextType,
-          counter: prev.counter + 1,
-        }));
-      }
-    },
-    [dragState.type],
-  );
-
-  const handleDragLeave = useCallback(
-    (e: React.DragEvent) => {
-      e.preventDefault();
-      e.stopPropagation();
-
-      const isInternalDrag = dragState.type === "internal";
-
-      if (
-        !isInternalDrag &&
-        (dragState.type === "external" || dragState.type === "local")
-      ) {
-        setDragState((prev) => {
-          const newCounter = prev.counter - 1;
-          return {
-            ...prev,
-            counter: newCounter,
-            type: newCounter <= 0 ? "none" : prev.type,
-            target: newCounter <= 0 ? undefined : prev.target,
-          };
-        });
-      }
-    },
-    [dragState.type],
-  );
-
-  const handleDragOver = useCallback(
-    (e: React.DragEvent) => {
-      e.preventDefault();
-      e.stopPropagation();
-
-      const isInternalDrag = dragState.type === "internal";
-
-      if (isInternalDrag) {
-        setDragState((prev) => ({
-          ...prev,
-          mousePosition: { x: e.clientX, y: e.clientY },
-        }));
-        e.dataTransfer.dropEffect = "move";
-      } else {
-        e.dataTransfer.dropEffect = "copy";
-      }
-    },
-    [dragState.type],
-  );
-
-  const handleWheel = useCallback((e: React.WheelEvent) => {
-    e.stopPropagation();
-  }, []);
-
-  const handleMouseDown = useCallback(
-    (e: React.MouseEvent) => {
-      if (createIntent) {
-        const target = e.target as HTMLElement;
-        if (target.tagName !== "INPUT") {
-          e.preventDefault();
-        }
-        return;
-      }
-      if (e.target === e.currentTarget && e.button === 0) {
-        e.preventDefault();
-        const rect = (e.currentTarget as HTMLElement).getBoundingClientRect();
-        const startX = e.clientX - rect.left;
-        const startY = e.clientY - rect.top;
-
-        setIsSelecting(true);
-        setSelectionStart({ x: startX, y: startY });
-        setSelectionRect({ x: startX, y: startY, width: 0, height: 0 });
-
-        setJustFinishedSelecting(false);
-      }
-    },
-    [createIntent],
-  );
-
-  const handleMouseMove = useCallback(
-    (e: React.MouseEvent) => {
-      if (isSelecting && selectionStart && gridRef.current) {
-        const rect = gridRef.current.getBoundingClientRect();
-        const currentX = e.clientX - rect.left;
-        const currentY = e.clientY - rect.top;
-
-        const x = Math.min(selectionStart.x, currentX);
-        const y = Math.min(selectionStart.y, currentY);
-        const width = Math.abs(currentX - selectionStart.x);
-        const height = Math.abs(currentY - selectionStart.y);
-
-        setSelectionRect({ x, y, width, height });
-
-        if (gridRef.current) {
-          const selectionBox = {
-            left: x,
-            top: y,
-            right: x + width,
-            bottom: y + height,
-          };
-
-          // Virtual list: only visible DOM nodes exist. For list mode compute
-          // selection from scroll position + fixed row height so drag-select
-          // still covers off-screen rows.
-          if (viewMode === "list" && files.length > 0) {
-            const scrollTop = gridRef.current.scrollTop;
-            const createExtra = createIntent ? LIST_ROW_H : 0;
-            const contentTop =
-              selectionBox.top +
-              scrollTop -
-              CONTENT_PAD -
-              LIST_HEADER_H -
-              createExtra;
-            const contentBottom =
-              selectionBox.bottom +
-              scrollTop -
-              CONTENT_PAD -
-              LIST_HEADER_H -
-              createExtra;
-            const startIdx = Math.max(0, Math.floor(contentTop / LIST_ROW_H));
-            const endIdx = Math.min(
-              files.length - 1,
-              Math.ceil(contentBottom / LIST_ROW_H),
-            );
-            if (endIdx >= startIdx) {
-              onSelectionChange(files.slice(startIdx, endIdx + 1));
-            } else {
-              onSelectionChange([]);
-            }
-            return;
-          }
-
-          if (viewMode === "grid" && files.length > 0) {
-            const scrollTop = gridRef.current.scrollTop;
-            const createExtra = createIntent ? GRID_ROW_H : 0;
-            const contentTop =
-              selectionBox.top + scrollTop - CONTENT_PAD - createExtra;
-            const contentBottom =
-              selectionBox.bottom + scrollTop - CONTENT_PAD - createExtra;
-            const startRow = Math.max(0, Math.floor(contentTop / GRID_ROW_H));
-            const endRow = Math.min(
-              gridRowCount - 1,
-              Math.ceil(contentBottom / GRID_ROW_H),
-            );
-            // Column range from X within padded content.
-            const contentLeft = selectionBox.left - CONTENT_PAD;
-            const contentRight = selectionBox.right - CONTENT_PAD;
-            const cellW =
-              (gridRef.current.clientWidth - CONTENT_PAD * 2 + GRID_GAP) /
-              gridCols;
-            const startCol = Math.max(0, Math.floor(contentLeft / cellW));
-            const endCol = Math.min(
-              gridCols - 1,
-              Math.ceil(contentRight / cellW),
-            );
-            const selected: FileItem[] = [];
-            for (let r = startRow; r <= endRow; r++) {
-              for (let c = startCol; c <= endCol; c++) {
-                const idx = r * gridCols + c;
-                if (idx >= 0 && idx < files.length) selected.push(files[idx]);
-              }
-            }
-            onSelectionChange(selected);
-            return;
-          }
-
-          const fileElements =
-            gridRef.current.querySelectorAll("[data-file-path]");
-          const selectedPaths: string[] = [];
-
-          fileElements.forEach((element) => {
-            const elementRect = element.getBoundingClientRect();
-            const containerRect = gridRef.current!.getBoundingClientRect();
-
-            const relativeElementRect = {
-              left: elementRect.left - containerRect.left,
-              top: elementRect.top - containerRect.top,
-              right: elementRect.right - containerRect.left,
-              bottom: elementRect.bottom - containerRect.top,
-            };
-
-            const intersects = !(
-              relativeElementRect.right < selectionBox.left ||
-              relativeElementRect.left > selectionBox.right ||
-              relativeElementRect.bottom < selectionBox.top ||
-              relativeElementRect.top > selectionBox.bottom
-            );
-
-            if (intersects) {
-              const filePath = element.getAttribute("data-file-path");
-              if (filePath) {
-                selectedPaths.push(filePath);
-              }
-            }
-          });
-
-          const newSelection = files.filter((file) =>
-            selectedPaths.includes(file.path),
-          );
-          onSelectionChange(newSelection);
-        }
-      }
-    },
-    [
-      isSelecting,
-      selectionStart,
-      files,
-      onSelectionChange,
-      viewMode,
-      GRID_GAP,
-      createIntent,
-      gridCols,
-      gridRowCount,
-    ],
-  );
-
-  const handleMouseUp = useCallback(
-    (e: React.MouseEvent) => {
-      if (isSelecting) {
-        setIsSelecting(false);
-        setSelectionStart(null);
-        setSelectionRect(null);
-
-        const startPos = selectionStart;
-        if (startPos) {
-          const rect = gridRef.current?.getBoundingClientRect();
-          if (rect) {
-            const endX = e.clientX - rect.left;
-            const endY = e.clientY - rect.top;
-            const distance = Math.sqrt(
-              Math.pow(endX - startPos.x, 2) + Math.pow(endY - startPos.y, 2),
-            );
-
-            if (distance > 5) {
-              setJustFinishedSelecting(true);
-              setTimeout(() => {
-                setJustFinishedSelecting(false);
-              }, 50);
-            } else {
-              setJustFinishedSelecting(false);
-            }
-          }
-        }
-      }
-    },
-    [isSelecting, selectionStart],
-  );
-
-  useEffect(() => {
-    const handleGlobalMouseUp = () => {
-      if (isSelecting) {
-        setIsSelecting(false);
-        setSelectionStart(null);
-        setSelectionRect(null);
-
-        setJustFinishedSelecting(true);
-        setTimeout(() => {
-          setJustFinishedSelecting(false);
-        }, 50);
-      }
-    };
-
-    const handleGlobalMouseMove = (e: MouseEvent) => {
-      if (isSelecting && selectionStart && gridRef.current) {
-        const rect = gridRef.current.getBoundingClientRect();
-        const currentX = e.clientX - rect.left;
-        const currentY = e.clientY - rect.top;
-
-        const x = Math.min(selectionStart.x, currentX);
-        const y = Math.min(selectionStart.y, currentY);
-        const width = Math.abs(currentX - selectionStart.x);
-        const height = Math.abs(currentY - selectionStart.y);
-
-        setSelectionRect({ x, y, width, height });
-      }
-    };
-
-    if (isSelecting) {
-      document.addEventListener("mouseup", handleGlobalMouseUp);
-      document.addEventListener("mousemove", handleGlobalMouseMove);
-
-      return () => {
-        document.removeEventListener("mouseup", handleGlobalMouseUp);
-        document.removeEventListener("mousemove", handleGlobalMouseMove);
-      };
-    }
-  }, [isSelecting, selectionStart]);
-
-  const handleDrop = useCallback(
-    (e: React.DragEvent) => {
-      e.preventDefault();
-      e.stopPropagation();
-
-      if (dragState.type === "internal") {
-        setDragState({ type: "none", files: [], counter: 0 });
-        return;
-      }
-
-      // Read everything off dataTransfer before any setState: the browser
-      // clears it once the handler unwinds and a state flush can get there
-      // first.
-      const localPaths = isLocalFilesDrag(e.dataTransfer)
-        ? parseLocalFilesDragPayload(e.dataTransfer.getData("text/plain"))
-        : null;
-      const files = e.dataTransfer.files;
-      const entries: FileSystemEntry[] = [];
-      if (onUploadItems && e.dataTransfer.items?.length > 0) {
-        for (const item of Array.from(e.dataTransfer.items)) {
-          const entry = item.webkitGetAsEntry?.();
-          if (entry) entries.push(entry);
-        }
-      }
-
-      setDragState({ type: "none", files: [], counter: 0 });
-
-      if (localPaths) {
-        onLocalFilesDrop?.(localPaths);
-        return;
-      }
-      if (onUploadItems && entries.some((entry) => entry.isDirectory)) {
-        onUploadItems(entries);
-        return;
-      }
-      if (onUpload && files.length > 0) {
-        onUpload(files);
-      }
-    },
-    [onUpload, onUploadItems, onLocalFilesDrop, dragState],
-  );
-
-  const handleFileClick = (file: FileItem, event: React.MouseEvent) => {
-    event.stopPropagation();
-
-    onFileIntent?.(file);
-
-    if (gridRef.current && !createIntent) {
-      gridRef.current.focus();
-    }
-
-    if (event.detail === 2) {
-      onFileOpen(file);
-    } else {
-      const multiSelect = event.ctrlKey || event.metaKey;
-      const rangeSelect = event.shiftKey;
-
-      if (rangeSelect && selectedFiles.length > 0) {
-        const lastSelected = selectedFiles[selectedFiles.length - 1];
-        const currentIndex = files.findIndex((f) => f.path === file.path);
-        const lastIndex = files.findIndex((f) => f.path === lastSelected.path);
-
-        if (currentIndex !== -1 && lastIndex !== -1) {
-          const start = Math.min(currentIndex, lastIndex);
-          const end = Math.max(currentIndex, lastIndex);
-          const rangeFiles = files.slice(start, end + 1);
-          onSelectionChange(rangeFiles);
-        }
-      } else if (multiSelect) {
-        const isSelected = selectedFiles.some((f) => f.path === file.path);
-        if (isSelected) {
-          onSelectionChange(selectedFiles.filter((f) => f.path !== file.path));
-        } else {
-          onSelectionChange([...selectedFiles, file]);
-        }
-      } else {
-        onSelectionChange([file]);
-      }
-    }
-  };
-
-  const handleGridClick = (event: React.MouseEvent) => {
-    if (gridRef.current && !createIntent) {
-      gridRef.current.focus();
-    }
-
-    if (
-      event.target === event.currentTarget &&
-      !isSelecting &&
-      !justFinishedSelecting
-    ) {
-      onSelectionChange([]);
-    }
-  };
-
-  useEffect(() => {
-    const handleKeyDown = (event: KeyboardEvent) => {
-      // Every open file-manager tab mounts its own grid with a global keydown
-      // listener, so without this guard a shortcut (notably Delete) would fire
-      // in every tab at once - including hidden ones - and act on their
-      // selections. Only the visible grid should respond. See issue #783.
-      const grid = gridRef.current;
-      if (!grid) return;
-      const isVisible =
-        typeof grid.checkVisibility === "function"
-          ? grid.checkVisibility({ visibilityProperty: true })
-          : grid.offsetParent !== null;
-      if (!isVisible) return;
-
-      const activeElement = document.activeElement;
-      if (
-        activeElement &&
-        (activeElement.tagName === "INPUT" ||
-          activeElement.tagName === "TEXTAREA" ||
-          (activeElement as HTMLElement).contentEditable === "true")
-      ) {
-        return;
-      }
-
-      switch (event.key) {
-        case "Escape":
-          onSelectionChange([]);
-          break;
-        case "a":
-        case "A":
-          if (event.ctrlKey || event.metaKey) {
-            event.preventDefault();
-            onSelectionChange([...files]);
-          }
-          break;
-        case "c":
-        case "C":
-          if (
-            (event.ctrlKey || event.metaKey) &&
-            selectedFiles.length > 0 &&
-            onCopy
-          ) {
-            event.preventDefault();
-            onCopy(selectedFiles);
-          }
-          break;
-        case "x":
-        case "X":
-          if (
-            (event.ctrlKey || event.metaKey) &&
-            selectedFiles.length > 0 &&
-            onCut
-          ) {
-            event.preventDefault();
-            onCut(selectedFiles);
-          }
-          break;
-        case "v":
-        case "V":
-          if ((event.ctrlKey || event.metaKey) && onPaste && hasClipboard) {
-            event.preventDefault();
-            onPaste();
-          }
-          break;
-        case "z":
-        case "Z":
-          if ((event.ctrlKey || event.metaKey) && onUndo) {
-            event.preventDefault();
-            onUndo();
-          }
-          break;
-        case "d":
-        case "D":
-          if (
-            (event.ctrlKey || event.metaKey) &&
-            selectedFiles.length > 0 &&
-            onDownload
-          ) {
-            event.preventDefault();
-            onDownload(selectedFiles);
-          }
-          break;
-        case "n":
-        case "N":
-          if (event.ctrlKey || event.metaKey) {
-            event.preventDefault();
-            if (event.shiftKey && onNewFolder) {
-              onNewFolder();
-            } else if (!event.shiftKey && onNewFile) {
-              onNewFile();
-            }
-          }
-          break;
-        case "u":
-        case "U":
-          if ((event.ctrlKey || event.metaKey) && onUpload) {
-            event.preventDefault();
-            const input = document.createElement("input");
-            input.type = "file";
-            input.multiple = true;
-            input.onchange = (e) => {
-              const files = (e.target as HTMLInputElement).files;
-              if (files) onUpload(files);
-            };
-            input.click();
-          }
-          break;
-        case "Delete":
-          if (selectedFiles.length > 0 && onDelete) {
-            onDelete(selectedFiles);
-          }
-          break;
-        case "F2":
-        case "F6":
-          if (selectedFiles.length === 1 && onStartEdit) {
-            event.preventDefault();
-            onStartEdit(selectedFiles[0]);
-          }
-          break;
-        case "Enter":
-          if (selectedFiles.length === 1) {
-            event.preventDefault();
-            onFileOpen(selectedFiles[0]);
-          }
-          break;
-        case "y":
-        case "Y":
-          if (event.ctrlKey || event.metaKey) {
-            event.preventDefault();
-            onRefresh();
-          }
-          break;
-      }
-    };
-
-    document.addEventListener("keydown", handleKeyDown);
-    return () => document.removeEventListener("keydown", handleKeyDown);
-  }, [
-    selectedFiles,
-    files,
-    onSelectionChange,
-    onRefresh,
-    onDelete,
-    onCopy,
-    onCut,
-    onPaste,
-    onUndo,
-  ]);
-
-  // Pinned ".." entry (Termius-style). Behaves as a directory drop target
-  // for internal moves and local-pane uploads, and navigates up on open.
-  const parentEntry: FileItem | null =
-    parentPath && onNavigateUp
-      ? { name: "..", path: parentPath, type: "directory" }
-      : null;
-  const isParentTarget =
-    !!parentEntry && dragState.target?.path === parentEntry.path;
-
-  const parentEntryHandlers = parentEntry
-    ? {
-        onClick: (e: React.MouseEvent) => {
-          e.stopPropagation();
-          onNavigateUp?.();
-        },
-        onDoubleClick: (e: React.MouseEvent) => e.stopPropagation(),
-        onContextMenu: (e: React.MouseEvent) => {
-          e.preventDefault();
-          e.stopPropagation();
-        },
-        onDragOver: (e: React.DragEvent) => handleFileDragOver(e, parentEntry),
-        onDragLeave: (e: React.DragEvent) =>
-          handleFileDragLeave(e, parentEntry),
-        onDrop: (e: React.DragEvent) => handleFileDrop(e, parentEntry),
-      }
-    : null;
-
-  const parentListRow =
-    parentEntry && parentEntryHandlers ? (
-      <div
-        data-parent-entry
-        title={t("fileManager.goToParentFolder")}
-        style={{ gridTemplateColumns: listColumns.gridTemplateColumns }}
-        className={cn(
-          "grid gap-2 items-center cursor-pointer border-b border-border hover:bg-muted/50 rounded-none select-none transition-colors text-xs",
-          compact ? "px-2 py-1" : "px-4 py-2",
-          isParentTarget &&
-            "bg-accent-brand/20 border-accent-brand border-dashed",
-        )}
-        {...parentEntryHandlers}
-      >
-        <div className="flex items-center gap-3 overflow-hidden pointer-events-none">
-          <div className="shrink-0">
-            <CornerLeftUp className="size-4 text-muted-foreground" />
-          </div>
-          <span className="font-bold tracking-tight text-muted-foreground">
-            ..
-          </span>
-        </div>
-      </div>
-    ) : null;
-
-  const parentGridStrip =
-    parentEntry && parentEntryHandlers ? (
-      <div
-        data-parent-entry
-        title={t("fileManager.goToParentFolder")}
-        className={cn(
-          "flex items-center gap-2 rounded-none border border-transparent transition-colors cursor-pointer hover:bg-muted/50 select-none text-xs",
-          compact ? "-mx-2 -mt-2 px-2 py-1" : "-mx-4 -mt-4 px-4 py-1.5",
-          isParentTarget &&
-            "bg-accent-brand/20 border-accent-brand border-dashed",
-        )}
-        {...parentEntryHandlers}
-      >
-        <CornerLeftUp className="size-3.5 text-muted-foreground pointer-events-none" />
-        <span className="font-bold tracking-tight text-muted-foreground pointer-events-none">
-          ..
-        </span>
-      </div>
-    ) : null;
-
-  return (
-    <div className="h-full flex flex-col bg-card overflow-hidden relative">
-      <div className="flex-1 relative overflow-hidden">
-        <div
-          ref={gridRef}
-          className={cn(
-            "absolute inset-0 overflow-y-auto thin-scrollbar",
-            compact ? "p-2" : "p-4",
-            (dragState.type === "external" || dragState.type === "local") &&
-              "bg-muted/20 border-2 border-dashed border-primary",
-          )}
-          onClick={handleGridClick}
-          onMouseDown={handleMouseDown}
-          onMouseMove={handleMouseMove}
-          onMouseUp={handleMouseUp}
-          onDragEnter={handleDragEnter}
-          onDragLeave={handleDragLeave}
-          onDragOver={handleDragOver}
-          onDrop={handleDrop}
-          onWheel={handleWheel}
-          onContextMenu={(e) => onContextMenu?.(e)}
-          tabIndex={0}
-        >
-          {files.length === 0 && !createIntent ? (
-            <div className="h-full flex flex-col">
-              {viewMode === "grid" ? parentGridStrip : parentListRow}
-              <div className="flex-1 flex flex-col items-center justify-center text-muted-foreground opacity-10 gap-4 select-none pointer-events-none">
-                <Folder className="size-32" strokeWidth={1} />
-                <span className="text-2xl font-black uppercase tracking-[0.2em]">
-                  {t("fileManager.emptyFolder")}
-                </span>
-              </div>
-            </div>
-          ) : viewMode === "grid" ? (
-            <div className={cn("flex flex-col", compact ? "gap-2" : "gap-4")}>
-              {parentGridStrip}
-              {createIntent && (
-                <div
-                  className={cn("grid", compact ? "gap-2" : "gap-4")}
-                  style={{
-                    gridTemplateColumns: `repeat(${gridCols}, minmax(0, 1fr))`,
-                  }}
-                >
-                  <CreateIntentGridItem
-                    intent={createIntent}
-                    onConfirm={onConfirmCreate}
-                    onCancel={onCancelCreate}
-                  />
-                </div>
-              )}
-              <div
-                className="relative w-full"
-                style={{ height: gridVirtualizer.getTotalSize() }}
-              >
-                {gridVirtualizer.getVirtualItems().map((vRow) => {
-                  const start = vRow.index * gridCols;
-                  const rowFiles = files.slice(start, start + gridCols);
-                  return (
-                    <div
-                      key={vRow.key}
-                      data-index={vRow.index}
-                      ref={gridVirtualizer.measureElement}
-                      className="absolute top-0 left-0 w-full"
-                      style={{
-                        transform: `translateY(${vRow.start}px)`,
-                      }}
-                    >
-                      <div
-                        className={cn(
-                          "grid",
-                          compact ? "gap-2 pb-2" : "gap-4 pb-4",
-                        )}
-                        style={{
-                          gridTemplateColumns: `repeat(${gridCols}, minmax(0, 1fr))`,
-                        }}
-                      >
-                        {rowFiles.map((file) => {
-                          const isSelected = selectedFiles.some(
-                            (f) => f.path === file.path,
-                          );
-                          return (
-                            <div
-                              key={file.path}
-                              data-file-path={file.path}
-                              draggable={true}
-                              className={cn(
-                                "group flex flex-col items-center rounded-none border-2 border-transparent transition-all cursor-pointer hover:bg-muted/50 select-none",
-                                compact ? "p-1.5" : "p-3",
-                                isSelected &&
-                                  "bg-accent-brand/10 hover:bg-accent-brand/10 border-accent-brand/40",
-                                dragState.target?.path === file.path &&
-                                  "bg-accent-brand/20 border-accent-brand border-dashed",
-                                dragState.files.some(
-                                  (f) => f.path === file.path,
-                                ) && "opacity-50",
-                              )}
-                              title={file.name}
-                              onClick={(e) => handleFileClick(file, e)}
-                              onContextMenu={(e) => {
-                                e.preventDefault();
-                                e.stopPropagation();
-                                onContextMenu?.(e, file);
-                              }}
-                              onDragStart={(e) => handleFileDragStart(e, file)}
-                              onDragOver={(e) => handleFileDragOver(e, file)}
-                              onDragLeave={(e) => handleFileDragLeave(e, file)}
-                              onDrop={(e) => handleFileDrop(e, file)}
-                              onDragEnd={handleFileDragEnd}
-                            >
-                              <div
-                                className={cn(
-                                  "relative pointer-events-none",
-                                  compact ? "mb-1" : "mb-2",
-                                )}
-                              >
-                                {getFileIcon(file, viewMode, compact)}
-                              </div>
-                              <div className="w-full flex flex-col items-center pointer-events-none">
-                                {editingFile?.path === file.path ? (
-                                  <input
-                                    ref={editInputRef}
-                                    type="text"
-                                    value={editingName}
-                                    onChange={(e) =>
-                                      setEditingName(e.target.value)
-                                    }
-                                    onKeyDown={handleEditKeyDown}
-                                    onBlur={handleEditConfirm}
-                                    className="max-w-[120px] min-w-[60px] w-fit border border-accent-brand/60 bg-card px-2 py-1 text-xs rounded-none outline-none focus:ring-1 focus:ring-accent-brand/50 text-center pointer-events-auto"
-                                    onClick={(e) => e.stopPropagation()}
-                                    onMouseDown={(e) => e.stopPropagation()}
-                                  />
-                                ) : (
-                                  <p
-                                    className="font-bold tracking-tight text-center truncate w-full px-1 text-[11px]"
-                                    title={file.name}
-                                  >
-                                    {file.name}
-                                  </p>
-                                )}
-                                {file.type === "file" &&
-                                  file.size !== undefined &&
-                                  file.size !== null && (
-                                    <p className="text-[10px] font-medium text-muted-foreground/60 mt-0.5">
-                                      {formatFileSize(file.size)}
-                                    </p>
-                                  )}
-                                {file.type === "link" && file.linkTarget && (
-                                  <p
-                                    className="text-[10px] text-accent-brand mt-0.5 truncate w-full text-center"
-                                    title={file.linkTarget}
-                                  >
-                                    → {file.linkTarget}
-                                  </p>
-                                )}
-                              </div>
-                            </div>
-                          );
-                        })}
-                      </div>
-                    </div>
-                  );
-                })}
-              </div>
-            </div>
-          ) : (
-            <div className="flex flex-col">
-              <div
-                className={cn(
-                  "grid gap-2 text-[10px] font-bold uppercase tracking-widest text-muted-foreground border-b border-border bg-card",
-                  compact ? "px-2 py-1" : "px-4 py-2",
-                )}
-                style={{ gridTemplateColumns: listColumns.gridTemplateColumns }}
-                title={t("fileManager.columnsHint")}
-                onContextMenu={(e) => {
-                  e.preventDefault();
-                  e.stopPropagation();
-                  setColumnMenu({ x: e.clientX, y: e.clientY, visible: true });
-                }}
-              >
-                <div
-                  className="flex items-center gap-1 cursor-pointer hover:text-accent-brand transition-colors min-w-0"
-                  onClick={() => onSortChange?.("name")}
-                >
-                  {t("fileManager.name")}
-                  {sortBy === "name" &&
-                    (sortOrder === "asc" ? (
-                      <ArrowUp className="size-3" />
-                    ) : (
-                      <ArrowDown className="size-3" />
-                    ))}
-                </div>
-                {listColumns.isVisible("modified") && (
-                  <div
-                    className="relative flex items-center gap-1 cursor-pointer hover:text-accent-brand transition-colors min-w-0"
-                    onClick={() => onSortChange?.("modified")}
-                  >
-                    <ColumnResizeHandle
-                      {...listColumns.getHandleProps("modified")}
-                    />
-                    <span className="truncate">
-                      {t("fileManager.modified")}
-                    </span>
-                    {sortBy === "modified" &&
-                      (sortOrder === "asc" ? (
-                        <ArrowUp className="size-3" />
-                      ) : (
-                        <ArrowDown className="size-3" />
-                      ))}
-                  </div>
-                )}
-                {listColumns.isVisible("owner") && (
-                  <div className="relative flex items-center min-w-0">
-                    <ColumnResizeHandle
-                      {...listColumns.getHandleProps("owner")}
-                    />
-                    <span className="truncate">{t("fileManager.owner")}</span>
-                  </div>
-                )}
-                {listColumns.isVisible("size") && (
-                  <div
-                    className="relative flex items-center gap-1 cursor-pointer hover:text-accent-brand transition-colors justify-end min-w-0"
-                    onClick={() => onSortChange?.("size")}
-                  >
-                    <ColumnResizeHandle
-                      {...listColumns.getHandleProps("size")}
-                    />
-                    <span className="truncate">{t("fileManager.size")}</span>
-                    {sortBy === "size" &&
-                      (sortOrder === "asc" ? (
-                        <ArrowUp className="size-3" />
-                      ) : (
-                        <ArrowDown className="size-3" />
-                      ))}
-                  </div>
-                )}
-                {listColumns.isVisible("permissions") && (
-                  <div className="relative flex items-center justify-end min-w-0">
-                    <ColumnResizeHandle
-                      {...listColumns.getHandleProps("permissions")}
-                    />
-                    <span className="truncate">
-                      {t("fileManager.permissions")}
-                    </span>
-                  </div>
-                )}
-              </div>
-              <ColumnVisibilityMenu
-                x={columnMenu.x}
-                y={columnMenu.y}
-                isVisible={columnMenu.visible}
-                columns={listColumns}
-                onClose={closeColumnMenu}
-              />
-              {parentListRow}
-              {createIntent && (
-                <CreateIntentListItem
-                  intent={createIntent}
-                  onConfirm={onConfirmCreate}
-                  onCancel={onCancelCreate}
-                  gridTemplateColumns={listColumns.gridTemplateColumns}
-                />
-              )}
-              <div
-                className="relative w-full"
-                style={{ height: listVirtualizer.getTotalSize() }}
-              >
-                {listVirtualizer.getVirtualItems().map((vItem) => {
-                  const file = files[vItem.index];
-                  if (!file) return null;
-                  const isSelected = selectedFiles.some(
-                    (f) => f.path === file.path,
-                  );
-                  const isEditing = editingFile?.path === file.path;
-                  return (
-                    <div
-                      key={vItem.key}
-                      data-index={vItem.index}
-                      ref={listVirtualizer.measureElement}
-                      className="absolute top-0 left-0 w-full"
-                      style={{
-                        transform: `translateY(${vItem.start}px)`,
-                      }}
-                    >
-                      <div
-                        data-file-path={file.path}
-                        draggable={true}
-                        style={{
-                          gridTemplateColumns: isEditing
-                            ? "minmax(0, 1fr)"
-                            : listColumns.gridTemplateColumns,
-                        }}
-                        className={cn(
-                          "grid gap-2 items-center cursor-pointer border-b border-border hover:bg-muted/50 rounded-none select-none transition-colors text-xs",
-                          compact ? "px-2 py-1" : "px-4 py-2",
-                          isSelected &&
-                            "bg-accent-brand/10 hover:bg-accent-brand/10",
-                          dragState.target?.path === file.path &&
-                            "bg-accent-brand/20 border-accent-brand border-dashed",
-                          dragState.files.some((f) => f.path === file.path) &&
-                            "opacity-50",
-                        )}
-                        onClick={(e) => handleFileClick(file, e)}
-                        onContextMenu={(e) => {
-                          e.preventDefault();
-                          e.stopPropagation();
-                          onContextMenu?.(e, file);
-                        }}
-                        onDragStart={(e) => handleFileDragStart(e, file)}
-                        onDragOver={(e) => handleFileDragOver(e, file)}
-                        onDragLeave={(e) => handleFileDragLeave(e, file)}
-                        onDrop={(e) => handleFileDrop(e, file)}
-                        onDragEnd={handleFileDragEnd}
-                      >
-                        <div
-                          className={cn(
-                            "flex items-center overflow-hidden pointer-events-none",
-                            compact ? "gap-2" : "gap-3",
-                            isEditing && "col-span-full",
-                          )}
-                        >
-                          <div className="shrink-0">
-                            {getFileIcon(file, viewMode, compact)}
-                          </div>
-                          {isEditing ? (
-                            <input
-                              ref={editInputRef}
-                              type="text"
-                              value={editingName}
-                              onChange={(e) => setEditingName(e.target.value)}
-                              onKeyDown={handleEditKeyDown}
-                              onBlur={handleEditConfirm}
-                              className={cn(
-                                "flex-1 min-w-0 border border-accent-brand/60 bg-card px-2 py-0 text-xs rounded-none outline-none focus:ring-1 focus:ring-accent-brand/50 pointer-events-auto",
-                                compact ? "h-5" : "h-6",
-                              )}
-                              onClick={(e) => e.stopPropagation()}
-                              onMouseDown={(e) => e.stopPropagation()}
-                            />
-                          ) : (
-                            <span
-                              className="font-bold truncate tracking-tight"
-                              title={file.name}
-                            >
-                              {file.name}
-                              {file.type === "link" && file.linkTarget && (
-                                <span className="text-accent-brand ml-1 normal-case font-normal">
-                                  → {file.linkTarget}
-                                </span>
-                              )}
-                            </span>
-                          )}
-                        </div>
-
-                        {!isEditing && listColumns.isVisible("modified") && (
-                          <span className="text-[10px] text-muted-foreground pointer-events-none truncate">
-                            {file.modified || "—"}
-                          </span>
-                        )}
-
-                        {!isEditing && listColumns.isVisible("owner") && (
-                          <span className="text-[10px] text-muted-foreground truncate pointer-events-none">
-                            {file.owner
-                              ? `${file.owner}${file.group ? `:${file.group}` : ""}`
-                              : "—"}
-                          </span>
-                        )}
-
-                        {!isEditing && listColumns.isVisible("size") && (
-                          <span className="text-[10px] text-right text-muted-foreground tabular-nums pointer-events-none truncate">
-                            {file.type === "file" &&
-                            file.size !== undefined &&
-                            file.size !== null
-                              ? formatFileSize(file.size)
-                              : "—"}
-                          </span>
-                        )}
-
-                        {!isEditing && listColumns.isVisible("permissions") && (
-                          <span className="text-[10px] text-right font-mono text-muted-foreground/60 pointer-events-none truncate">
-                            {file.permissions || "—"}
-                          </span>
-                        )}
-                      </div>
-                    </div>
-                  );
-                })}
-              </div>
-            </div>
-          )}
-
-          {isSelecting && selectionRect && (
-            <div
-              className="absolute border border-accent-brand bg-accent-brand/10 pointer-events-none z-50"
-              style={{
-                left: selectionRect.x,
-                top: selectionRect.y,
-                width: selectionRect.width,
-                height: selectionRect.height,
-              }}
-            />
-          )}
-        </div>
-
-        {/* Sibling of the scroll container, not a child: an absolutely
-            positioned child of a scroll container scrolls away with the
-            content, so the hint would land above the viewport whenever the
-            list is scrolled down. */}
-        {(dragState.type === "external" ||
-          (dragState.type === "local" && !dragState.target)) && (
-          <div className="absolute inset-0 flex items-center justify-center bg-background/50 z-10 pointer-events-none">
-            <div className="text-center p-8 bg-card/95 border border-accent-brand/40 flex flex-col items-center gap-4">
-              <Upload className="size-12 text-accent-brand" />
-              <p className="text-[10px] font-bold uppercase tracking-widest text-accent-brand">
-                {dragState.type === "local"
-                  ? t("fileManager.dropToUploadHere")
-                  : t("fileManager.dragFilesToUpload")}
-              </p>
-            </div>
-          </div>
-        )}
-      </div>
-
-      <div className="px-4 py-1.5 bg-muted/30 border-t border-border flex items-center justify-between text-[10px] font-bold uppercase tracking-widest text-muted-foreground shrink-0">
-        <span>
-          {files.length} {t("fileManager.items")}
-        </span>
-        {selectedFiles.length > 0 && (
-          <span className="text-accent-brand">
-            {selectedFiles.length} {t("fileManager.selected")}
-          </span>
-        )}
-      </div>
-
-      {dragState.type === "internal" &&
-        (dragState.files.length > 0 || dragState.draggedFiles?.length > 0) &&
-        dragState.mousePosition &&
-        createPortal(
-          <div
-            className="fixed pointer-events-none"
-            style={{
-              left: Math.min(
-                Math.max(dragState.mousePosition.x + 40, 0),
-                window.innerWidth - 300,
-              ),
-              top: Math.max(
-                Math.min(
-                  dragState.mousePosition.y - 80,
-                  window.innerHeight - 100,
-                ),
-                0,
-              ),
-              zIndex: 999999,
-            }}
-          >
-            <div className="bg-card border border-border rounded-none shadow-md px-3 py-2 flex items-center gap-2">
-              {(() => {
-                const files =
-                  dragState.files.length > 0
-                    ? dragState.files
-                    : dragState.draggedFiles || [];
-                return dragState.target ? (
-                  dragState.target.type === "directory" ? (
-                    <>
-                      <Move className="size-3.5 text-accent-brand" />
-                      <span className="text-[10px] font-bold uppercase tracking-widest text-foreground">
-                        {t("fileManager.moveTo", {
-                          name: dragState.target.name,
-                        })}
-                      </span>
-                    </>
-                  ) : (
-                    <>
-                      <GitCompare className="size-3.5 text-accent-brand" />
-                      <span className="text-[10px] font-bold uppercase tracking-widest text-foreground">
-                        {t("fileManager.diffCompareWith", {
-                          name: dragState.target.name,
-                        })}
-                      </span>
-                    </>
-                  )
-                ) : (
-                  <>
-                    <Download className="size-3.5 text-accent-brand" />
-                    <span className="text-[10px] font-bold uppercase tracking-widest text-foreground">
-                      {t("fileManager.dragOutsideToDownload", {
-                        count: files.length,
-                      })}
-                    </span>
-                  </>
-                );
-              })()}
-            </div>
-          </div>,
-          document.body,
-        )}
-    </div>
-  );
-}
-
-function CreateIntentGridItem({
-  intent,
-  onConfirm,
-  onCancel,
-}: {
-  intent: CreateIntent;
-  onConfirm?: (name: string) => void;
-  onCancel?: () => void;
-}) {
-  const { t } = useTranslation();
-  const [inputName, setInputName] = useState(intent.currentName);
-  const inputRef = useRef<HTMLInputElement>(null);
-  const doneRef = useRef(false);
-
-  useEffect(() => {
-    const timer = setTimeout(() => {
-      if (inputRef.current) {
-        inputRef.current.focus();
-        inputRef.current.select();
-      }
-    }, 50);
-    return () => clearTimeout(timer);
-  }, [intent.id]);
-
-  const commit = useCallback(
-    (name: string) => {
-      if (doneRef.current) return;
-      doneRef.current = true;
-      if (name) {
-        onConfirm?.(name);
-      } else {
-        onCancel?.();
-      }
-    },
-    [onConfirm, onCancel],
-  );
-
-  const handleKeyDown = (e: React.KeyboardEvent) => {
-    if (e.key === "Enter") {
-      e.preventDefault();
-      commit(inputName.trim());
-    } else if (e.key === "Escape") {
-      e.preventDefault();
-      if (doneRef.current) return;
-      doneRef.current = true;
-      onCancel?.();
-    }
-  };
-
-  return (
-    <div
-      className="group flex flex-col items-center p-3 rounded-none border-2 border-dashed border-accent-brand/60 bg-accent-brand/5"
-      onClick={(e) => e.stopPropagation()}
-      onMouseDown={(e) => e.stopPropagation()}
-    >
-      <div className="mb-2">
-        {intent.type === "directory" ? (
-          <Folder className="size-10 text-accent-brand" />
-        ) : (
-          <File className="size-10 text-accent-brand" />
-        )}
-      </div>
-      <input
-        ref={inputRef}
-        type="text"
-        value={inputName}
-        onChange={(e) => setInputName(e.target.value)}
-        onKeyDown={handleKeyDown}
-        onBlur={() => commit(inputName.trim())}
-        className="w-full max-w-[120px] border border-accent-brand/60 bg-card px-2 py-1 text-xs text-center rounded-none outline-none focus:ring-1 focus:ring-accent-brand/50"
-        placeholder={
-          intent.type === "directory"
-            ? t("fileManager.folderName")
-            : t("fileManager.fileName")
-        }
-      />
-    </div>
-  );
-}
-
-function CreateIntentListItem({
-  intent,
-  onConfirm,
-  onCancel,
-  gridTemplateColumns,
-}: {
-  intent: CreateIntent;
-  onConfirm?: (name: string) => void;
-  onCancel?: () => void;
-  gridTemplateColumns?: string;
-}) {
-  const { t } = useTranslation();
-  const [inputName, setInputName] = useState(intent.currentName);
-  const inputRef = useRef<HTMLInputElement>(null);
-  const doneRef = useRef(false);
-
-  useEffect(() => {
-    const timer = setTimeout(() => {
-      if (inputRef.current) {
-        inputRef.current.focus();
-        inputRef.current.select();
-      }
-    }, 50);
-    return () => clearTimeout(timer);
-  }, [intent.id]);
-
-  const commit = useCallback(
-    (name: string) => {
-      if (doneRef.current) return;
-      doneRef.current = true;
-      if (name) {
-        onConfirm?.(name);
-      } else {
-        onCancel?.();
-      }
-    },
-    [onConfirm, onCancel],
-  );
-
-  const handleKeyDown = (e: React.KeyboardEvent) => {
-    if (e.key === "Enter") {
-      e.preventDefault();
-      commit(inputName.trim());
-    } else if (e.key === "Escape") {
-      e.preventDefault();
-      if (doneRef.current) return;
-      doneRef.current = true;
-      onCancel?.();
-    }
-  };
-
-  return (
-    <div
-      className="grid gap-2 px-4 py-2 items-center border-b border-accent-brand/30 bg-accent-brand/5 rounded-none"
-      style={{
-        gridTemplateColumns:
-          gridTemplateColumns ?? "minmax(140px, 1fr) 120px 150px 80px 90px",
-      }}
-      onClick={(e) => e.stopPropagation()}
-      onMouseDown={(e) => e.stopPropagation()}
-    >
-      <div className="flex items-center gap-3">
-        <div className="shrink-0">
-          {intent.type === "directory" ? (
-            <Folder className="size-4 text-accent-brand" />
-          ) : (
-            <File className="size-4 text-accent-brand" />
-          )}
-        </div>
-        <input
-          ref={inputRef}
-          type="text"
-          value={inputName}
-          onChange={(e) => setInputName(e.target.value)}
-          onKeyDown={handleKeyDown}
-          onBlur={() => commit(inputName.trim())}
-          className="flex-1 min-w-0 max-w-[200px] border border-accent-brand/60 bg-card px-2 py-1 text-xs rounded-none outline-none focus:ring-1 focus:ring-accent-brand/50"
-          placeholder={
-            intent.type === "directory"
-              ? t("fileManager.folderName")
-              : t("fileManager.fileName")
-          }
-        />
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/FileManagerSidebar.tsx b/plugins/file-manager/src/frontend/FileManagerSidebar.tsx
deleted file mode 100644
index af24f3f4b..000000000
--- a/plugins/file-manager/src/frontend/FileManagerSidebar.tsx
+++ /dev/null
@@ -1,931 +0,0 @@
-import React, {
-  useState,
-  useEffect,
-  useRef,
-  useCallback,
-  useMemo,
-} from "react";
-import { cn } from "@termix/plugin-sdk/ui";
-import {
-  Star,
-  Clock,
-  Bookmark,
-  File,
-  Folder,
-  Trash2,
-  ChevronDown,
-  Check,
-} from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import type { SSHHost } from "./host-types";
-import {
-  getRecentFiles,
-  getPinnedFiles,
-  getFolderShortcuts,
-  removeRecentFile,
-  removePinnedFile,
-  removeFolderShortcut,
-} from "./api/file-manager-data-api";
-import { listSSHFiles } from "./api/ssh-file-operations-api";
-import { mountForPath, type DiskFilesystem } from "./disk-info";
-import { toast } from "sonner";
-import FolderTree from "./components/FolderTree";
-import {
-  DropdownMenu,
-  DropdownMenuTrigger,
-  DropdownMenuContent,
-  DropdownMenuItem,
-} from "@termix/plugin-sdk/ui";
-
-// ─── Interfaces ────────────────────────────────────────────────────────────────
-
-interface RecentFileData {
-  id: number;
-  name: string;
-  path: string;
-  lastOpened?: string;
-  [key: string]: unknown;
-}
-
-interface PinnedFileData {
-  id: number;
-  name: string;
-  path: string;
-  [key: string]: unknown;
-}
-
-interface ShortcutData {
-  id: number;
-  name: string;
-  path: string;
-  [key: string]: unknown;
-}
-
-interface DirectoryItemData {
-  name: string;
-  path: string;
-  type: string;
-  [key: string]: unknown;
-}
-
-export interface SidebarItem {
-  id: string;
-  name: string;
-  path: string;
-  type: "recent" | "pinned" | "shortcut" | "folder";
-  lastAccessed?: string;
-  isExpanded?: boolean;
-  children?: SidebarItem[];
-}
-
-interface FileManagerSidebarProps {
-  density?: "comfortable" | "compact";
-  currentHost: SSHHost;
-  currentPath: string;
-  onPathChange: (path: string) => void;
-  onFileOpen?: (file: SidebarItem) => void;
-  /** Full file-manager context menu (same as main grid). */
-  onItemContextMenu?: (event: React.MouseEvent, item: SidebarItem) => void;
-  sshSessionId?: string;
-  refreshTrigger?: number;
-  onOpenTrash?: () => void;
-  diskInfo?: {
-    usedHuman: string;
-    totalHuman: string;
-    percent: number;
-    mount?: string | null;
-    filesystems?: DiskFilesystem[];
-  };
-}
-
-// ─── Storage meter ─────────────────────────────────────────────────────────────
-
-function StorageMeter({
-  storage,
-  filesystems,
-  selectedMount,
-  onSelectMount,
-}: {
-  storage: { percent: number; usedHuman: string; totalHuman: string };
-  filesystems: DiskFilesystem[];
-  selectedMount: string | null;
-  onSelectMount: (mount: string) => void;
-}) {
-  const { t } = useTranslation();
-  const hasPicker = filesystems.length > 1;
-
-  return (
-    <div className="flex flex-col gap-2">
-      <div className="flex items-center justify-between gap-2 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-        {hasPicker ? (
-          <DropdownMenu>
-            <DropdownMenuTrigger className="flex min-w-0 items-center gap-1 transition-colors hover:text-foreground">
-              <span className="truncate">
-                {selectedMount ?? t("fileManager.disk")}
-              </span>
-              <ChevronDown className="size-3 shrink-0" />
-            </DropdownMenuTrigger>
-            <DropdownMenuContent
-              align="start"
-              className="w-auto min-w-[220px] max-w-[min(360px,calc(100vw-2rem))]"
-            >
-              {filesystems.map((fs) => (
-                <DropdownMenuItem
-                  key={fs.mount}
-                  onSelect={() => onSelectMount(fs.mount)}
-                  className="gap-3"
-                >
-                  <Check
-                    className={cn(
-                      "size-3 shrink-0",
-                      fs.mount === selectedMount ? "opacity-100" : "opacity-0",
-                    )}
-                  />
-                  <span className="min-w-0 flex-1 truncate font-medium">
-                    {fs.mount}
-                  </span>
-                  <span className="ml-auto flex shrink-0 gap-2 whitespace-nowrap text-[10px] tabular-nums text-muted-foreground">
-                    <span>
-                      {fs.usedHuman && fs.totalHuman
-                        ? `${fs.usedHuman}/${fs.totalHuman}`
-                        : "N/A"}
-                    </span>
-                    {fs.percent != null && <span>{fs.percent}%</span>}
-                  </span>
-                </DropdownMenuItem>
-              ))}
-            </DropdownMenuContent>
-          </DropdownMenu>
-        ) : (
-          <span className="truncate">
-            {selectedMount ?? t("fileManager.disk")}
-          </span>
-        )}
-        <span className="shrink-0 text-accent-brand">
-          {storage.percent}% {t("fileManager.used")}
-        </span>
-      </div>
-      <div className="h-1.5 bg-muted rounded-none overflow-hidden border border-border">
-        <div
-          className="h-full bg-accent-brand"
-          style={{ width: `${storage.percent}%` }}
-        />
-      </div>
-      <span className="text-[10px] font-bold text-muted-foreground/60 tracking-tight">
-        {storage.usedHuman} {t("fileManager.of")} {storage.totalHuman}{" "}
-        {t("fileManager.used").toLowerCase()}
-      </span>
-    </div>
-  );
-}
-
-// ─── Component ─────────────────────────────────────────────────────────────────
-
-export function FileManagerSidebar({
-  density = "comfortable",
-  currentHost,
-  currentPath,
-  onPathChange,
-  onFileOpen,
-  onItemContextMenu,
-  sshSessionId,
-  refreshTrigger,
-  onOpenTrash,
-  diskInfo,
-}: FileManagerSidebarProps) {
-  const { t } = useTranslation();
-
-  // ── Quick access state (API-backed) ──────────────────────────────────────────
-  const [recentItems, setRecentItems] = useState<SidebarItem[]>([]);
-  const [pinnedItems, setPinnedItems] = useState<SidebarItem[]>([]);
-  const [shortcuts, setShortcuts] = useState<SidebarItem[]>([]);
-
-  // ── Directory tree state ──────────────────────────────────────────────────────
-  const [directoryTree, setDirectoryTree] = useState<SidebarItem[]>([]);
-
-  // ── Storage state ─────────────────────────────────────────────────────────────
-  const [selectedMount, setSelectedMount] = useState<string | null>(null);
-
-  /**
-   * Tracks which folder paths have already been lazy-loaded so we don't
-   * re-fetch on every re-selection / collapse-reopen.
-   */
-  const loadedFoldersRef = useRef<Set<string>>(new Set(["/"]));
-
-  // ── Context menu state ────────────────────────────────────────────────────────
-  const [contextMenu, setContextMenu] = useState<{
-    x: number;
-    y: number;
-    isVisible: boolean;
-    item: SidebarItem | null;
-  }>({
-    x: 0,
-    y: 0,
-    isVisible: false,
-    item: null,
-  });
-
-  // ─── Effects ──────────────────────────────────────────────────────────────────
-
-  // ─── API: Quick access ────────────────────────────────────────────────────────
-
-  const loadQuickAccessData = useCallback(async () => {
-    if (!currentHost?.id) return;
-
-    try {
-      const recentData = await getRecentFiles(currentHost.id);
-      const recentItems = (recentData as unknown as RecentFileData[])
-        .slice(0, 5)
-        .map((item: RecentFileData) => ({
-          id: `recent-${item.id}`,
-          name: item.name,
-          path: item.path,
-          type: "recent" as const,
-          lastAccessed: item.lastOpened,
-        }));
-      setRecentItems(recentItems);
-
-      const pinnedData = await getPinnedFiles(currentHost.id);
-      const pinnedItems = (pinnedData as unknown as PinnedFileData[]).map(
-        (item: PinnedFileData) => ({
-          id: `pinned-${item.id}`,
-          name: item.name,
-          path: item.path,
-          type: "pinned" as const,
-        }),
-      );
-      setPinnedItems(pinnedItems);
-
-      const shortcutData = await getFolderShortcuts(currentHost.id);
-      const shortcutItems = (shortcutData as unknown as ShortcutData[]).map(
-        (item: ShortcutData) => ({
-          id: `shortcut-${item.id}`,
-          name: item.name,
-          path: item.path,
-          type: "shortcut" as const,
-        }),
-      );
-      setShortcuts(shortcutItems);
-    } catch (error) {
-      console.error("Failed to load quick access data:", error);
-      setRecentItems([]);
-      setPinnedItems([]);
-      setShortcuts([]);
-    }
-  }, [currentHost?.id]);
-
-  // ─── API: Directory tree ──────────────────────────────────────────────────────
-
-  const loadDirectoryTree = useCallback(
-    async (attempt = 0) => {
-      if (!sshSessionId) return;
-
-      try {
-        const response = await listSSHFiles(sshSessionId, "/");
-        const rootFiles = (response.files || []) as DirectoryItemData[];
-        const rootFolders = rootFiles
-          .filter((item: DirectoryItemData) => item.type === "directory")
-          .sort((a, b) =>
-            a.name.localeCompare(b.name, undefined, { sensitivity: "base" }),
-          );
-
-        const rootTreeItems = rootFolders.map((folder: DirectoryItemData) => ({
-          id: `folder-${folder.name}`,
-          name: folder.name,
-          path: folder.path,
-          type: "folder" as const,
-          isExpanded: false,
-          children: [],
-        }));
-
-        setDirectoryTree([
-          {
-            id: "root",
-            name: "/",
-            path: "/",
-            type: "folder" as const,
-            isExpanded: true,
-            children: rootTreeItems,
-          },
-        ]);
-      } catch (error: unknown) {
-        const status =
-          (error as { status?: number })?.status ||
-          (error as { response?: { status?: number } })?.response?.status;
-        if (status === 409 && attempt < 3) {
-          // Another request was already listing "/" — retry after a short delay
-          setTimeout(() => loadDirectoryTree(attempt + 1), 600);
-          return;
-        }
-        console.error("Failed to load directory tree:", error);
-        setDirectoryTree([
-          {
-            id: "root",
-            name: "/",
-            path: "/",
-            type: "folder" as const,
-            isExpanded: false,
-            children: [],
-          },
-        ]);
-      }
-    },
-    [sshSessionId],
-  );
-
-  /**
-   * Lazily fetches subdirectory contents and patches them into the tree state.
-   * Called the first time a folder is expanded via FolderTree's onSelect.
-   */
-  const loadSubdirectory = useCallback(
-    async (folderId: string, folderPath: string): Promise<boolean> => {
-      if (!sshSessionId) return false;
-
-      try {
-        const subResponse = await listSSHFiles(sshSessionId, folderPath);
-        const subFiles = (subResponse.files || []) as DirectoryItemData[];
-        const subFolders = subFiles
-          .filter((item: DirectoryItemData) => item.type === "directory")
-          .sort((a, b) =>
-            a.name.localeCompare(b.name, undefined, { sensitivity: "base" }),
-          );
-
-        const subTreeItems = subFolders.map((folder: DirectoryItemData) => ({
-          id: `folder-${folder.path.replace(/\//g, "-")}`,
-          name: folder.name,
-          path: folder.path,
-          type: "folder" as const,
-          isExpanded: false,
-          children: [],
-        }));
-
-        setDirectoryTree((prevTree) => {
-          const updateChildren = (items: SidebarItem[]): SidebarItem[] =>
-            items.map((item) => {
-              if (item.id === folderId) {
-                return { ...item, children: subTreeItems };
-              }
-              if (item.children) {
-                return { ...item, children: updateChildren(item.children) };
-              }
-              return item;
-            });
-          return updateChildren(prevTree);
-        });
-        loadedFoldersRef.current.add(folderPath);
-        return true;
-      } catch (error: unknown) {
-        const status =
-          (error as { status?: number })?.status ||
-          (error as { response?: { status?: number } })?.response?.status;
-        if (status === 409) {
-          // Another request was listing this path — retry after the lock clears
-          setTimeout(() => void loadSubdirectory(folderId, folderPath), 600);
-          return false;
-        }
-        loadedFoldersRef.current.delete(folderPath);
-        console.error("Failed to load subdirectory:", error);
-        return false;
-      }
-    },
-    [sshSessionId],
-  );
-
-  useEffect(() => {
-    loadQuickAccessData();
-  }, [loadQuickAccessData, refreshTrigger]);
-
-  useEffect(() => {
-    if (sshSessionId) {
-      loadedFoldersRef.current = new Set(["/"]);
-      loadDirectoryTree();
-    }
-  }, [loadDirectoryTree, sshSessionId]);
-
-  // When currentPath changes externally (grid navigation), ensure the parent
-  // directory is loaded in the tree so the selection highlight can appear.
-  useEffect(() => {
-    if (!sshSessionId || currentPath === "/") return;
-
-    const parentPath =
-      currentPath.substring(0, currentPath.lastIndexOf("/")) || "/";
-
-    const findByPath = (items: SidebarItem[]): SidebarItem | null => {
-      for (const item of items) {
-        if (item.path === parentPath) return item;
-        if (item.children) {
-          const found = findByPath(item.children);
-          if (found) return found;
-        }
-      }
-      return null;
-    };
-
-    const parent = findByPath(directoryTree);
-    if (parent && !loadedFoldersRef.current.has(parent.path)) {
-      void loadSubdirectory(parent.id, parent.path);
-    }
-  }, [currentPath, directoryTree, loadSubdirectory, sshSessionId]);
-
-  // ─── Quick-access mutation handlers ──────────────────────────────────────────
-
-  const handleRemoveRecentFile = async (item: SidebarItem) => {
-    if (!currentHost?.id) return;
-    try {
-      await removeRecentFile(currentHost.id, item.path);
-      loadQuickAccessData();
-      toast.success(
-        t("fileManager.removedFromRecentFiles", { name: item.name }),
-      );
-    } catch (error) {
-      console.error("Failed to remove recent file:", error);
-      toast.error(t("fileManager.removeFailed"));
-    }
-  };
-
-  const handleUnpinFile = async (item: SidebarItem) => {
-    if (!currentHost?.id) return;
-    try {
-      await removePinnedFile(currentHost.id, item.path);
-      loadQuickAccessData();
-      toast.success(t("fileManager.unpinnedSuccessfully", { name: item.name }));
-    } catch (error) {
-      console.error("Failed to unpin file:", error);
-      toast.error(t("fileManager.unpinFailed"));
-    }
-  };
-
-  const handleRemoveShortcut = async (item: SidebarItem) => {
-    if (!currentHost?.id) return;
-    try {
-      await removeFolderShortcut(currentHost.id, item.path);
-      loadQuickAccessData();
-      toast.success(t("fileManager.removedShortcut", { name: item.name }));
-    } catch (error) {
-      console.error("Failed to remove shortcut:", error);
-      toast.error(t("fileManager.removeShortcutFailed"));
-    }
-  };
-
-  const handleClearAllRecent = async () => {
-    if (!currentHost?.id || recentItems.length === 0) return;
-    try {
-      await Promise.all(
-        recentItems.map((item) => removeRecentFile(currentHost.id, item.path)),
-      );
-      loadQuickAccessData();
-      toast.success(t("fileManager.clearedAllRecentFiles"));
-    } catch (error) {
-      console.error("Failed to clear recent files:", error);
-      toast.error(t("fileManager.clearFailed"));
-    }
-  };
-
-  // ─── Quick-access item click ──────────────────────────────────────────────────
-
-  const handleQuickAccessClick = (item: SidebarItem) => {
-    if (item.type === "recent" || item.type === "pinned") {
-      if (onFileOpen) {
-        onFileOpen(item);
-      } else {
-        const directory =
-          item.path.substring(0, item.path.lastIndexOf("/")) || "/";
-        onPathChange(directory);
-      }
-    } else if (item.type === "shortcut") {
-      onPathChange(item.path);
-    }
-  };
-
-  // ─── FolderTree directory selection (onSelect callback) ──────────────────────
-
-  /**
-   * Called by FolderTree whenever the user selects (clicks) a tree item.
-   * We navigate to the folder and lazily load children on first visit.
-   */
-  const handleDirectorySelect = useCallback(
-    async (id: string) => {
-      // Walk the tree to find the item by id
-      const findItem = (items: SidebarItem[]): SidebarItem | null => {
-        for (const item of items) {
-          if (item.id === id) return item;
-          if (item.children) {
-            const found = findItem(item.children);
-            if (found) return found;
-          }
-        }
-        return null;
-      };
-
-      const item = findItem(directoryTree);
-      if (!item) return;
-
-      // Navigate to path
-      onPathChange(item.path);
-
-      // Lazy-load children the first time this folder is expanded
-      if (
-        sshSessionId &&
-        item.path !== "/" &&
-        !loadedFoldersRef.current.has(item.path)
-      ) {
-        await loadSubdirectory(id, item.path);
-      }
-    },
-    [directoryTree, onPathChange, sshSessionId, loadSubdirectory],
-  );
-
-  // ─── Context menu ─────────────────────────────────────────────────────────────
-
-  const findTreeItemById = useCallback(
-    (items: SidebarItem[], id: string): SidebarItem | null => {
-      for (const item of items) {
-        if (item.id === id) return item;
-        if (item.children) {
-          const found = findTreeItemById(item.children, id);
-          if (found) return found;
-        }
-      }
-      return null;
-    },
-    [],
-  );
-
-  const handleItemContextMenu = (e: React.MouseEvent, item: SidebarItem) => {
-    e.preventDefault();
-    e.stopPropagation();
-    if (onItemContextMenu) {
-      onItemContextMenu(e, item);
-      return;
-    }
-    setContextMenu({ x: e.clientX, y: e.clientY, isVisible: true, item });
-  };
-
-  const handleTreeContextMenu = (e: React.MouseEvent) => {
-    const target = e.target as HTMLElement;
-    const row = target.closest<HTMLElement>("[data-id]");
-    if (!row) return;
-    const id = row.getAttribute("data-id");
-    if (!id) return;
-    const item = findTreeItemById(directoryTree, id);
-    if (!item || item.type !== "folder") return;
-    handleItemContextMenu(e, item);
-  };
-
-  const closeContextMenu = () => {
-    setContextMenu((prev) => ({ ...prev, isVisible: false, item: null }));
-  };
-
-  useEffect(() => {
-    if (!contextMenu.isVisible || onItemContextMenu) return;
-
-    const handleClickOutside = (event: MouseEvent) => {
-      const target = event.target as Element;
-      const menuElement = document.querySelector("[data-sidebar-context-menu]");
-      if (!menuElement?.contains(target)) closeContextMenu();
-    };
-
-    const handleKeyDown = (event: KeyboardEvent) => {
-      if (event.key === "Escape") closeContextMenu();
-    };
-
-    const timeoutId = setTimeout(() => {
-      document.addEventListener("mousedown", handleClickOutside);
-      document.addEventListener("keydown", handleKeyDown);
-    }, 50);
-
-    return () => {
-      clearTimeout(timeoutId);
-      document.removeEventListener("mousedown", handleClickOutside);
-      document.removeEventListener("keydown", handleKeyDown);
-    };
-  }, [contextMenu.isVisible, onItemContextMenu]);
-
-  // ─── Derive selected tree node + ancestors from currentPath ──────────────────
-
-  const { selectedTreeId, ancestorIds } = useMemo(() => {
-    if (currentPath === "/")
-      return { selectedTreeId: "root", ancestorIds: new Set<string>() };
-
-    const ancestors: string[] = [];
-    const findByPath = (
-      items: SidebarItem[],
-      path: string[],
-    ): string | null => {
-      for (const item of items) {
-        if (item.path === currentPath) {
-          ancestors.push(...path, "root");
-          return item.id;
-        }
-        if (item.children) {
-          const found = findByPath(item.children, [...path, item.id]);
-          if (found) return found;
-        }
-      }
-      return null;
-    };
-
-    const id = findByPath(directoryTree, []);
-    return { selectedTreeId: id, ancestorIds: new Set(ancestors) };
-  }, [currentPath, directoryTree]);
-
-  // ─── Render helpers ───────────────────────────────────────────────────────────
-
-  /**
-   * Recursively renders directory tree items using FolderTree.Item + Content.
-   *
-   * FolderTree.Item detects "has children" via React.Children.count > 0.
-   * By always wrapping children in <FolderTree.Content> (even when the
-   * children array is empty), every directory shows the expand chevron.
-   * FolderTree.Content internally shows nothing when its own children are
-   * absent, so an unloaded folder simply expands to an empty state while
-   * the async fetch fills it in.
-   */
-  const renderFolderTreeItem = (item: SidebarItem): React.ReactNode => (
-    <FolderTree.Item
-      key={item.id}
-      id={item.id}
-      label={item.name}
-      className={density === "compact" ? "py-0.5" : undefined}
-    >
-      <FolderTree.Content>
-        {item.children?.map((child) => renderFolderTreeItem(child))}
-      </FolderTree.Content>
-    </FolderTree.Item>
-  );
-
-  const renderQuickAccessItem = (item: SidebarItem, icon: React.ReactNode) => {
-    const dirPath =
-      item.type === "shortcut"
-        ? item.path
-        : item.path.substring(0, item.path.lastIndexOf("/")) || "/";
-    const isActive = currentPath === dirPath;
-
-    return (
-      <button
-        key={item.id}
-        className={cn(
-          "w-full flex items-center gap-2.5 px-3 py-1.5 text-[11px] font-bold uppercase tracking-wider transition-colors text-left border-l-2",
-          isActive
-            ? "bg-accent-brand/10 text-accent-brand border-accent-brand"
-            : "text-muted-foreground hover:text-foreground hover:bg-muted border-transparent",
-        )}
-        onClick={() => handleQuickAccessClick(item)}
-        onContextMenu={(e) => handleItemContextMenu(e, item)}
-        title={item.path}
-      >
-        <div className="shrink-0">{icon}</div>
-        <span className="flex-1 truncate">{item.name}</span>
-      </button>
-    );
-  };
-
-  const renderSection = (
-    title: string,
-    items: SidebarItem[],
-    renderItem: (item: SidebarItem) => React.ReactNode,
-  ) => {
-    if (items.length === 0) return null;
-    return (
-      <div>
-        <div className="px-3 py-1.5">
-          <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-            {title}
-          </span>
-        </div>
-        {items.map((item) => renderItem(item))}
-      </div>
-    );
-  };
-
-  const hasQuickAccessItems =
-    recentItems.length > 0 || pinnedItems.length > 0 || shortcuts.length > 0;
-
-  // ─── Render ───────────────────────────────────────────────────────────────────
-
-  const storageFilesystems = diskInfo?.filesystems ?? [];
-  const pathFs = mountForPath(storageFilesystems, currentPath);
-  const activeStorageMount =
-    selectedMount ?? pathFs?.mount ?? diskInfo?.mount ?? null;
-  const selectedFs =
-    selectedMount !== null
-      ? (storageFilesystems.find((fs) => fs.mount === selectedMount) ?? null)
-      : pathFs;
-
-  const storage =
-    selectedFs && selectedFs.percent !== null
-      ? {
-          percent: selectedFs.percent,
-          usedHuman: selectedFs.usedHuman ?? "N/A",
-          totalHuman: selectedFs.totalHuman ?? "N/A",
-        }
-      : diskInfo && diskInfo.percent !== null
-        ? {
-            percent: diskInfo.percent,
-            usedHuman: diskInfo.usedHuman,
-            totalHuman: diskInfo.totalHuman,
-          }
-        : null;
-
-  return (
-    <>
-      <div className="h-full flex flex-col bg-card overflow-hidden">
-        <div className="flex-1 overflow-y-auto thin-scrollbar">
-          {onOpenTrash && (
-            <button
-              className="w-full flex items-center gap-2.5 px-3 py-2 text-[11px] font-bold uppercase tracking-wider text-muted-foreground hover:text-foreground hover:bg-muted border-l-2 border-transparent"
-              onClick={onOpenTrash}
-            >
-              <Trash2 className="size-3.5 shrink-0" />
-              <span>{t("fileManager.trash")}</span>
-            </button>
-          )}
-          {/* ── Recent files ──────────────────────────────────────── */}
-          {renderSection(t("fileManager.recent"), recentItems, (item) =>
-            renderQuickAccessItem(
-              item,
-              <File
-                className={cn(
-                  "size-3.5 shrink-0",
-                  currentPath ===
-                    (item.path.substring(0, item.path.lastIndexOf("/")) || "/")
-                    ? "text-accent-brand"
-                    : "text-muted-foreground/60",
-                )}
-              />,
-            ),
-          )}
-
-          {/* ── Pinned files ───────────────────────────────────────── */}
-          {renderSection(t("fileManager.pinned"), pinnedItems, (item) =>
-            renderQuickAccessItem(
-              item,
-              <Star
-                className={cn(
-                  "size-3.5 shrink-0",
-                  currentPath ===
-                    (item.path.substring(0, item.path.lastIndexOf("/")) || "/")
-                    ? "text-accent-brand fill-accent-brand"
-                    : "text-muted-foreground/60",
-                )}
-              />,
-            ),
-          )}
-
-          {/* ── Folder shortcuts ───────────────────────────────────── */}
-          {renderSection(t("fileManager.folderShortcuts"), shortcuts, (item) =>
-            renderQuickAccessItem(
-              item,
-              <Folder
-                className={cn(
-                  "size-3.5 shrink-0",
-                  currentPath === item.path
-                    ? "text-accent-brand"
-                    : "text-muted-foreground/60",
-                )}
-              />,
-            ),
-          )}
-
-          {/* ── Directory tree ─────────────────────────────────────── */}
-          <div
-            className={cn(
-              hasQuickAccessItems && "border-t border-border mt-1 pt-1",
-            )}
-          >
-            <div className="px-3 py-1.5">
-              <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("fileManager.directories")}
-              </span>
-            </div>
-            <div className="px-1">
-              <div onContextMenu={handleTreeContextMenu}>
-                <FolderTree.Root
-                  id="sidebar-directory-tree"
-                  defaultExpanded={["root"]}
-                  selectedId={selectedTreeId}
-                  expandedIds={ancestorIds}
-                  onSelect={(id) => handleDirectorySelect(id)}
-                  className="bg-transparent border-0 rounded-none shadow-none"
-                >
-                  {directoryTree.map((item) => renderFolderTreeItem(item))}
-                </FolderTree.Root>
-              </div>
-            </div>
-          </div>
-
-          {/* ── Storage — mobile only (inside scroll) ──────────────── */}
-          {storage && (
-            <div className="md:hidden">
-              <div className="border-t border-border mx-0 my-2" />
-              <div className="px-3 py-1.5">
-                <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                  {t("fileManager.storage")}
-                </span>
-              </div>
-              <div className="px-3 pb-3">
-                <StorageMeter
-                  storage={storage}
-                  filesystems={storageFilesystems}
-                  selectedMount={activeStorageMount}
-                  onSelectMount={setSelectedMount}
-                />
-              </div>
-            </div>
-          )}
-        </div>
-
-        {/* ── Storage — desktop only (bottom of sidebar) ──────────── */}
-        {storage && (
-          <div className="hidden md:flex flex-col p-3 gap-2 border-t border-border shrink-0">
-            <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("fileManager.storage")}
-            </span>
-            <StorageMeter
-              storage={storage}
-              filesystems={storageFilesystems}
-              selectedMount={activeStorageMount}
-              onSelectMount={setSelectedMount}
-            />
-          </div>
-        )}
-      </div>
-
-      {/* ── Context menu (fallback when parent does not supply onItemContextMenu) */}
-      {!onItemContextMenu && contextMenu.isVisible && contextMenu.item && (
-        <>
-          <div className="fixed inset-0 z-40" />
-
-          <div
-            data-sidebar-context-menu
-            className="fixed bg-card border border-border rounded-none shadow-xl min-w-[180px] z-50 overflow-hidden"
-            style={{ left: contextMenu.x, top: contextMenu.y }}
-          >
-            {contextMenu.item.type === "recent" && (
-              <>
-                <button
-                  className="w-full px-3 h-9 text-left text-[10px] font-bold uppercase tracking-widest flex items-center gap-2.5 hover:bg-accent-brand/10 hover:text-accent-brand text-muted-foreground transition-colors"
-                  onClick={() => {
-                    handleRemoveRecentFile(contextMenu.item!);
-                    closeContextMenu();
-                  }}
-                >
-                  <Clock className="size-3.5 shrink-0" />
-                  <span className="flex-1">
-                    {t("fileManager.removeFromRecentFiles")}
-                  </span>
-                </button>
-
-                {recentItems.length > 1 && (
-                  <>
-                    <div className="border-t border-border" />
-                    <button
-                      className="w-full px-3 h-9 text-left text-[10px] font-bold uppercase tracking-widest flex items-center gap-2.5 text-destructive hover:bg-destructive/10 transition-colors"
-                      onClick={() => {
-                        handleClearAllRecent();
-                        closeContextMenu();
-                      }}
-                    >
-                      <Clock className="size-3.5 shrink-0" />
-                      <span className="flex-1">
-                        {t("fileManager.clearAllRecentFiles")}
-                      </span>
-                    </button>
-                  </>
-                )}
-              </>
-            )}
-
-            {contextMenu.item.type === "pinned" && (
-              <button
-                className="w-full px-3 h-9 text-left text-[10px] font-bold uppercase tracking-widest flex items-center gap-2.5 hover:bg-accent-brand/10 hover:text-accent-brand text-muted-foreground transition-colors"
-                onClick={() => {
-                  handleUnpinFile(contextMenu.item!);
-                  closeContextMenu();
-                }}
-              >
-                <Star className="size-3.5 shrink-0" />
-                <span className="flex-1">{t("fileManager.unpinFile")}</span>
-              </button>
-            )}
-
-            {contextMenu.item.type === "shortcut" && (
-              <button
-                className="w-full px-3 h-9 text-left text-[10px] font-bold uppercase tracking-widest flex items-center gap-2.5 hover:bg-accent-brand/10 hover:text-accent-brand text-muted-foreground transition-colors"
-                onClick={() => {
-                  handleRemoveShortcut(contextMenu.item!);
-                  closeContextMenu();
-                }}
-              >
-                <Bookmark className="size-3.5 shrink-0" />
-                <span className="flex-1">
-                  {t("fileManager.removeShortcut")}
-                </span>
-              </button>
-            )}
-          </div>
-        </>
-      )}
-    </>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/FileManagerToolbar.tsx b/plugins/file-manager/src/frontend/FileManagerToolbar.tsx
deleted file mode 100644
index f8ba3d64b..000000000
--- a/plugins/file-manager/src/frontend/FileManagerToolbar.tsx
+++ /dev/null
@@ -1,536 +0,0 @@
-import React, { useEffect, useRef, useState } from "react";
-import {
-  ArrowUp,
-  ChevronLeft,
-  ChevronRight,
-  Copy,
-  FilePlus,
-  Folder,
-  FolderPlus,
-  Grid3X3,
-  Laptop,
-  Layout,
-  List,
-  Plus,
-  RefreshCw,
-  Rows3,
-  Search,
-  Trash2,
-  Upload,
-} from "lucide-react";
-import {
-  Button,
-  Input,
-  DropdownMenu,
-  DropdownMenuContent,
-  DropdownMenuItem,
-  DropdownMenuLabel,
-  DropdownMenuRadioGroup,
-  DropdownMenuRadioItem,
-  DropdownMenuSeparator,
-  DropdownMenuTrigger,
-} from "@termix/plugin-sdk/ui";
-import type { FileItem } from "./host-types";
-
-type SortBy = "name" | "modified" | "size";
-type SortOrder = "asc" | "desc";
-type ViewMode = "grid" | "list";
-type Density = "comfortable" | "compact";
-
-type FileManagerToolbarProps = {
-  t: (key: string) => string;
-  currentPath: string;
-  navIndex: number;
-  navHistoryLength: number;
-  isLoading: boolean;
-  sshSessionId: string | null;
-  selectedFiles: FileItem[];
-  searchQuery: string;
-  setSearchQuery: (query: string) => void;
-  viewMode: ViewMode;
-  setViewMode: (mode: ViewMode) => void;
-  density: Density;
-  setDensity: (density: Density) => void;
-  sortBy: SortBy;
-  setSortBy: (sortBy: SortBy) => void;
-  sortOrder: SortOrder;
-  setSortOrder: (sortOrder: SortOrder) => void;
-  setMobileSidebarOpen: (updater: (open: boolean) => boolean) => void;
-  goBack: () => void;
-  goForward: () => void;
-  goUp: () => void;
-  navigateTo: (path: string) => void;
-  handleRefreshDirectory: () => void;
-  handleDeleteFiles: (files: FileItem[]) => void;
-  handleCopyFiles: (files: FileItem[]) => void;
-  handleFilesDropped: (fileList: FileList) => void;
-  handleCreateNewFolder: () => void;
-  handleCreateNewFile: () => void;
-  /** Desktop app only: show the Local | Remote split-view toggle. */
-  showLocalPaneToggle?: boolean;
-  localPaneOpen?: boolean;
-  onToggleLocalPane?: () => void;
-  /** Desktop directories sidebar (mobile uses the overlay instead). */
-  sidebarOpen?: boolean;
-  onToggleSidebar?: () => void;
-};
-
-function Breadcrumb({
-  currentPath,
-  navigateTo,
-  t,
-}: Pick<FileManagerToolbarProps, "currentPath" | "navigateTo" | "t">) {
-  return (
-    <>
-      <Folder className="size-3.5 text-accent-brand shrink-0" />
-      <div className="flex items-center gap-1 overflow-x-auto scrollbar-none text-[10px] font-bold uppercase tracking-widest whitespace-nowrap">
-        {currentPath.split("/").map((part, i, arr) => (
-          <React.Fragment key={i}>
-            {part === "" && i === 0 ? (
-              <button
-                onClick={(e) => {
-                  e.stopPropagation();
-                  navigateTo("/");
-                }}
-                className="hover:text-accent-brand transition-colors"
-              >
-                {t("fileManager.root")}
-              </button>
-            ) : part !== "" ? (
-              <button
-                onClick={(e) => {
-                  e.stopPropagation();
-                  navigateTo(arr.slice(0, i + 1).join("/") || "/");
-                }}
-                className="hover:text-accent-brand transition-colors"
-              >
-                {part}
-              </button>
-            ) : null}
-            {i < arr.length - 1 && part !== "" && (
-              <ChevronRight className="size-3 text-muted-foreground shrink-0" />
-            )}
-            {i === 0 && arr.length > 1 && part === "" && (
-              <ChevronRight className="size-3 text-muted-foreground shrink-0" />
-            )}
-          </React.Fragment>
-        ))}
-      </div>
-    </>
-  );
-}
-
-function PathBar({
-  currentPath,
-  navigateTo,
-  t,
-  className,
-}: Pick<FileManagerToolbarProps, "currentPath" | "navigateTo" | "t"> & {
-  className: string;
-}) {
-  const [isEditing, setIsEditing] = useState(false);
-  const [value, setValue] = useState(currentPath);
-  const inputRef = useRef<HTMLInputElement>(null);
-  const doneRef = useRef(false);
-
-  useEffect(() => {
-    if (!isEditing) return;
-    doneRef.current = false;
-    const timer = setTimeout(() => {
-      inputRef.current?.focus();
-      inputRef.current?.select();
-    }, 0);
-    return () => clearTimeout(timer);
-  }, [isEditing]);
-
-  const commit = (path: string) => {
-    if (doneRef.current) return;
-    doneRef.current = true;
-    setIsEditing(false);
-    const trimmed = path.trim();
-    if (trimmed && trimmed !== currentPath) {
-      navigateTo(trimmed);
-    }
-  };
-
-  const cancel = () => {
-    if (doneRef.current) return;
-    doneRef.current = true;
-    setIsEditing(false);
-  };
-
-  if (isEditing) {
-    return (
-      <div className={className}>
-        <Folder className="size-3.5 text-accent-brand shrink-0" />
-        <input
-          ref={inputRef}
-          type="text"
-          value={value}
-          onChange={(e) => setValue(e.target.value)}
-          onKeyDown={(e) => {
-            if (e.key === "Enter") {
-              e.preventDefault();
-              commit(value);
-            } else if (e.key === "Escape") {
-              e.preventDefault();
-              cancel();
-            }
-          }}
-          onBlur={() => commit(value)}
-          className="flex-1 min-w-0 bg-transparent text-xs font-semibold tracking-wide outline-none text-foreground"
-        />
-      </div>
-    );
-  }
-
-  return (
-    <div
-      className={`${className} cursor-text`}
-      onClick={() => {
-        setValue(currentPath);
-        setIsEditing(true);
-      }}
-    >
-      <Breadcrumb currentPath={currentPath} navigateTo={navigateTo} t={t} />
-    </div>
-  );
-}
-
-export function FileManagerToolbar({
-  t,
-  currentPath,
-  navIndex,
-  navHistoryLength,
-  isLoading,
-  sshSessionId,
-  selectedFiles,
-  searchQuery,
-  setSearchQuery,
-  viewMode,
-  setViewMode,
-  density,
-  setDensity,
-  sortBy,
-  setSortBy,
-  sortOrder,
-  setSortOrder,
-  setMobileSidebarOpen,
-  goBack,
-  goForward,
-  goUp,
-  navigateTo,
-  handleRefreshDirectory,
-  handleDeleteFiles,
-  handleCopyFiles,
-  handleFilesDropped,
-  handleCreateNewFolder,
-  handleCreateNewFile,
-  showLocalPaneToggle = false,
-  localPaneOpen = false,
-  onToggleLocalPane,
-  sidebarOpen = true,
-  onToggleSidebar,
-}: FileManagerToolbarProps) {
-  const searchInputRef = useRef<HTMLInputElement>(null);
-
-  useEffect(() => {
-    const handleSearchShortcut = (event: KeyboardEvent) => {
-      if (
-        event.defaultPrevented ||
-        !(event.ctrlKey || event.metaKey) ||
-        event.altKey ||
-        event.shiftKey ||
-        event.key.toLowerCase() !== "f"
-      )
-        return;
-
-      const input = searchInputRef.current;
-      if (!input) return;
-      const visible =
-        typeof input.checkVisibility === "function"
-          ? input.checkVisibility({ visibilityProperty: true })
-          : input.offsetParent !== null;
-      if (!visible) return;
-      const active = document.activeElement;
-      if (
-        active !== input &&
-        active?.closest(
-          'input, textarea, [contenteditable="true"], [role="dialog"]',
-        )
-      )
-        return;
-
-      event.preventDefault();
-      input.focus();
-      input.select();
-    };
-    document.addEventListener("keydown", handleSearchShortcut);
-    return () => document.removeEventListener("keydown", handleSearchShortcut);
-  }, []);
-
-  return (
-    <div className="flex flex-col shrink-0 mx-3 mt-3 border border-border bg-card">
-      <div className="flex flex-row items-center justify-between px-3 py-2 gap-2">
-        <div className="flex items-center gap-1">
-          <Button
-            variant="ghost"
-            size="icon"
-            onClick={() => {
-              // Below md the sidebar is an overlay; above it, a persisted
-              // show/hide of the directories panel.
-              const isDesktop =
-                typeof window !== "undefined" &&
-                window.matchMedia("(min-width: 768px)").matches;
-              if (isDesktop && onToggleSidebar) onToggleSidebar();
-              else setMobileSidebarOpen((open) => !open);
-            }}
-            className={`size-8 rounded-none ${sidebarOpen ? "" : "md:bg-accent-brand/10 md:text-accent-brand"}`}
-            title={t("fileManager.toggleSidebar")}
-            aria-pressed={!sidebarOpen}
-          >
-            <Layout className="size-4" />
-          </Button>
-          <Button
-            variant="ghost"
-            size="icon"
-            onClick={goBack}
-            disabled={navIndex <= 0}
-            className="size-8 rounded-none"
-          >
-            <ChevronLeft className="size-4" />
-          </Button>
-          <Button
-            variant="ghost"
-            size="icon"
-            onClick={goForward}
-            disabled={navIndex >= navHistoryLength - 1}
-            className="size-8 rounded-none"
-          >
-            <ChevronRight className="size-4" />
-          </Button>
-          <Button
-            variant="ghost"
-            size="icon"
-            onClick={goUp}
-            disabled={currentPath === "/"}
-            className="size-8 rounded-none"
-          >
-            <ArrowUp className="size-4" />
-          </Button>
-          <Button
-            variant="ghost"
-            size="icon"
-            onClick={handleRefreshDirectory}
-            className="size-8 rounded-none"
-          >
-            <RefreshCw
-              className={`size-4 ${isLoading && !!sshSessionId ? "animate-spin [animation-duration:0.5s]" : ""}`}
-            />
-          </Button>
-        </div>
-
-        <PathBar
-          currentPath={currentPath}
-          navigateTo={navigateTo}
-          t={t}
-          className="hidden md:flex flex-1 items-center px-3 h-8 bg-muted/50 border border-border rounded-none gap-2 overflow-hidden"
-        />
-
-        <div className="flex items-center gap-2">
-          {selectedFiles.length > 0 && (
-            <div className="flex items-center gap-1 px-2 py-1 bg-accent-brand/10 border border-accent-brand/20 text-accent-brand text-[10px] font-black uppercase tracking-tighter">
-              <Button
-                variant="ghost"
-                size="icon"
-                className="size-6 text-accent-brand hover:bg-accent-brand/20 rounded-none"
-                onClick={() => handleDeleteFiles(selectedFiles)}
-              >
-                <Trash2 className="size-3.5" />
-              </Button>
-              <Button
-                variant="ghost"
-                size="icon"
-                className="size-6 text-accent-brand hover:bg-accent-brand/20 rounded-none"
-                onClick={() => handleCopyFiles(selectedFiles)}
-              >
-                <Copy className="size-3.5" />
-              </Button>
-            </div>
-          )}
-
-          <div className="relative w-28 md:w-48">
-            <Search className="absolute left-2.5 top-1/2 -translate-y-1/2 size-3.5 text-muted-foreground" />
-            <Input
-              ref={searchInputRef}
-              placeholder={t("fileManager.searchFiles")}
-              value={searchQuery}
-              onChange={(e) => setSearchQuery(e.target.value)}
-              className="h-8 pl-8 text-xs bg-muted/50 border-border rounded-none focus:ring-1 focus:ring-accent-brand/50"
-            />
-          </div>
-
-          {showLocalPaneToggle && (
-            <Button
-              variant={localPaneOpen ? "secondary" : "ghost"}
-              size="icon"
-              onClick={onToggleLocalPane}
-              title={
-                localPaneOpen
-                  ? t("fileManager.hideLocalFiles")
-                  : t("fileManager.showLocalFiles")
-              }
-              aria-pressed={localPaneOpen}
-              className={`hidden md:inline-flex size-8 rounded-none border border-border ${localPaneOpen ? "bg-accent-brand/10 text-accent-brand border-accent-brand/40" : ""}`}
-            >
-              <Laptop className="size-4" />
-            </Button>
-          )}
-
-          <div className="flex items-center border border-border rounded-none overflow-hidden">
-            <Button
-              variant={viewMode === "grid" ? "secondary" : "ghost"}
-              size="icon"
-              onClick={() => setViewMode("grid")}
-              className={`size-8 rounded-none ${viewMode === "grid" ? "bg-accent-brand/10 text-accent-brand" : ""}`}
-            >
-              <Grid3X3 className="size-4" />
-            </Button>
-            <Button
-              variant={viewMode === "list" ? "secondary" : "ghost"}
-              size="icon"
-              onClick={() => setViewMode("list")}
-              className={`size-8 rounded-none border-l border-border ${viewMode === "list" ? "bg-accent-brand/10 text-accent-brand" : ""}`}
-            >
-              <List className="size-4" />
-            </Button>
-            <Button
-              variant={density === "compact" ? "secondary" : "ghost"}
-              size="icon"
-              onClick={() =>
-                setDensity(density === "compact" ? "comfortable" : "compact")
-              }
-              className={`size-8 rounded-none border-l border-border ${density === "compact" ? "bg-accent-brand/10 text-accent-brand" : ""}`}
-              title={t(
-                density === "compact"
-                  ? "fileManager.comfortableLayout"
-                  : "fileManager.compactLayout",
-              )}
-            >
-              <Rows3 className="size-4" />
-            </Button>
-          </div>
-
-          <label
-            className="hidden md:block cursor-pointer"
-            title={t("fileManager.upload")}
-          >
-            <input
-              type="file"
-              multiple
-              className="hidden"
-              onChange={(e) => {
-                const files = e.target.files;
-                if (files) handleFilesDropped(files);
-              }}
-            />
-            <div className="h-8 px-3 flex items-center gap-1.5 border border-border hover:bg-muted text-muted-foreground hover:text-foreground transition-colors text-[10px] font-bold uppercase tracking-widest">
-              <Upload className="size-3.5" /> {t("fileManager.upload")}
-            </div>
-          </label>
-
-          <DropdownMenu>
-            <DropdownMenuTrigger asChild>
-              <Button
-                variant="outline"
-                size="sm"
-                className="h-8 gap-1.5 border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 rounded-none font-bold uppercase tracking-widest text-[10px]"
-              >
-                <Plus className="size-3.5" />
-                {t("fileManager.new")}
-              </Button>
-            </DropdownMenuTrigger>
-            <DropdownMenuContent
-              align="end"
-              className="w-44 rounded-none border-border bg-card"
-              onCloseAutoFocus={(e) => e.preventDefault()}
-            >
-              <DropdownMenuItem
-                onSelect={() => {
-                  setTimeout(() => handleCreateNewFolder(), 0);
-                }}
-                className="rounded-none text-xs font-semibold gap-2 focus:bg-accent-brand/10 focus:text-accent-brand"
-              >
-                <FolderPlus className="size-4 text-accent-brand" />
-                {t("fileManager.newFolder")}
-              </DropdownMenuItem>
-              <DropdownMenuItem
-                onSelect={() => {
-                  setTimeout(() => handleCreateNewFile(), 0);
-                }}
-                className="rounded-none text-xs font-semibold gap-2 focus:bg-accent-brand/10 focus:text-accent-brand"
-              >
-                <FilePlus className="size-4 text-muted-foreground" />
-                {t("fileManager.newFile")}
-              </DropdownMenuItem>
-              <DropdownMenuSeparator />
-              <DropdownMenuLabel className="text-[10px] uppercase tracking-widest text-muted-foreground py-1">
-                {t("fileManager.sortBy")}
-              </DropdownMenuLabel>
-              <DropdownMenuRadioGroup
-                value={sortBy}
-                onValueChange={(value) => setSortBy(value as SortBy)}
-              >
-                <DropdownMenuRadioItem
-                  value="name"
-                  className="rounded-none text-xs"
-                >
-                  {t("fileManager.sortByName")}
-                </DropdownMenuRadioItem>
-                <DropdownMenuRadioItem
-                  value="modified"
-                  className="rounded-none text-xs"
-                >
-                  {t("fileManager.sortByDate")}
-                </DropdownMenuRadioItem>
-                <DropdownMenuRadioItem
-                  value="size"
-                  className="rounded-none text-xs"
-                >
-                  {t("fileManager.sortBySize")}
-                </DropdownMenuRadioItem>
-              </DropdownMenuRadioGroup>
-              <DropdownMenuSeparator />
-              <DropdownMenuRadioGroup
-                value={sortOrder}
-                onValueChange={(value) => setSortOrder(value as SortOrder)}
-              >
-                <DropdownMenuRadioItem
-                  value="asc"
-                  className="rounded-none text-xs"
-                >
-                  {t("fileManager.ascending")}
-                </DropdownMenuRadioItem>
-                <DropdownMenuRadioItem
-                  value="desc"
-                  className="rounded-none text-xs"
-                >
-                  {t("fileManager.descending")}
-                </DropdownMenuRadioItem>
-              </DropdownMenuRadioGroup>
-            </DropdownMenuContent>
-          </DropdownMenu>
-        </div>
-      </div>
-
-      <div className="md:hidden flex items-center px-3 pb-2 gap-2">
-        <PathBar
-          currentPath={currentPath}
-          navigateTo={navigateTo}
-          t={t}
-          className="flex-1 flex items-center px-3 h-8 bg-muted/50 border border-border gap-2 overflow-hidden"
-        />
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/FileManagerTrashDialog.tsx b/plugins/file-manager/src/frontend/FileManagerTrashDialog.tsx
deleted file mode 100644
index fef1264be..000000000
--- a/plugins/file-manager/src/frontend/FileManagerTrashDialog.tsx
+++ /dev/null
@@ -1,214 +0,0 @@
-import { useCallback, useEffect, useState } from "react";
-import { RotateCcw, Trash2 } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { toast } from "sonner";
-import {
-  Button,
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogHeader,
-  DialogTitle,
-} from "@termix/plugin-sdk/ui";
-import {
-  emptySSHTrash,
-  getSSHTrash,
-  permanentlyDeleteSSHTrashItem,
-  restoreSSHTrashItem,
-  updateSSHTrashRetention,
-  type TrashItem,
-} from "./api/ssh-file-operations-api";
-
-export function FileManagerTrashDialog({
-  open,
-  onOpenChange,
-  sessionId,
-  onChanged,
-}: {
-  open: boolean;
-  onOpenChange: (open: boolean) => void;
-  sessionId: string | null;
-  onChanged: () => void;
-}) {
-  const { t } = useTranslation();
-  const [items, setItems] = useState<TrashItem[]>([]);
-  const [retentionDays, setRetentionDays] = useState(7);
-  const [canManageRetention, setCanManageRetention] = useState(false);
-  const [loading, setLoading] = useState(false);
-
-  const load = useCallback(async () => {
-    if (!sessionId) return;
-    setLoading(true);
-    try {
-      const result = await getSSHTrash(sessionId);
-      setItems(result.items);
-      setRetentionDays(result.retentionDays);
-      setCanManageRetention(result.canManageRetention);
-    } catch {
-      toast.error(t("fileManager.trashLoadFailed"));
-    } finally {
-      setLoading(false);
-    }
-  }, [sessionId, t]);
-
-  useEffect(() => {
-    if (open) void load();
-  }, [load, open]);
-
-  async function restore(item: TrashItem) {
-    if (!sessionId) return;
-    try {
-      await restoreSSHTrashItem(sessionId, item.id);
-      setItems((current) => current.filter((entry) => entry.id !== item.id));
-      onChanged();
-      toast.success(t("fileManager.trashRestored", { name: item.name }));
-    } catch {
-      toast.error(t("fileManager.trashRestoreFailed"));
-    }
-  }
-
-  async function remove(item: TrashItem) {
-    if (!sessionId) return;
-    if (
-      !window.confirm(t("fileManager.trashDeleteConfirm", { name: item.name }))
-    )
-      return;
-    try {
-      await permanentlyDeleteSSHTrashItem(sessionId, item.id);
-      setItems((current) => current.filter((entry) => entry.id !== item.id));
-      toast.success(
-        t("fileManager.trashPermanentlyDeleted", { name: item.name }),
-      );
-    } catch {
-      toast.error(t("fileManager.trashDeleteFailed"));
-    }
-  }
-
-  async function empty() {
-    if (!sessionId || items.length === 0) return;
-    if (!window.confirm(t("fileManager.trashEmptyConfirm"))) return;
-    try {
-      await emptySSHTrash(sessionId);
-      setItems([]);
-      toast.success(t("fileManager.trashEmptied"));
-    } catch {
-      toast.error(t("fileManager.trashDeleteFailed"));
-    }
-  }
-
-  return (
-    <Dialog open={open} onOpenChange={onOpenChange}>
-      <DialogContent className="flex max-h-[85dvh] w-[calc(100vw-2rem)] flex-col sm:max-w-3xl">
-        <DialogHeader className="shrink-0 pr-8">
-          <DialogTitle>{t("fileManager.trash")}</DialogTitle>
-          <DialogDescription>
-            {t("fileManager.trashDescription", { days: retentionDays })}{" "}
-            <a
-              href="https://docs.termix.site/features/files-and-hosts/trash"
-              target="_blank"
-              rel="noreferrer"
-              className="text-accent-brand hover:underline"
-            >
-              {t("hosts.docsLink")}
-            </a>
-          </DialogDescription>
-        </DialogHeader>
-
-        {canManageRetention && (
-          <div className="flex shrink-0 items-center gap-2 border border-border p-2 text-xs">
-            <span className="flex-1">{t("fileManager.trashRetention")}</span>
-            <input
-              type="number"
-              min={1}
-              max={3650}
-              value={retentionDays}
-              onChange={(event) => setRetentionDays(Number(event.target.value))}
-              className="h-8 w-20 border border-border bg-background px-2"
-            />
-            <Button
-              size="sm"
-              variant="outline"
-              onClick={async () => {
-                if (!sessionId || retentionDays < 1 || retentionDays > 3650)
-                  return;
-                try {
-                  await updateSSHTrashRetention(sessionId, retentionDays);
-                  toast.success(t("fileManager.trashRetentionSaved"));
-                } catch {
-                  toast.error(t("fileManager.trashRetentionFailed"));
-                }
-              }}
-            >
-              {t("common.save")}
-            </Button>
-          </div>
-        )}
-
-        <div className="min-h-0 flex-1 overflow-y-auto border border-border">
-          {loading ? (
-            <div className="p-6 text-center text-sm text-muted-foreground">
-              {t("common.loading")}
-            </div>
-          ) : items.length === 0 ? (
-            <div className="p-6 text-center text-sm text-muted-foreground">
-              {t("fileManager.trashEmpty")}
-            </div>
-          ) : (
-            items.map((item) => (
-              <div
-                key={item.id}
-                className="flex flex-col gap-2 border-b border-border p-3 last:border-b-0 sm:flex-row sm:items-center sm:gap-3"
-              >
-                <Trash2 className="size-4 shrink-0 text-muted-foreground" />
-                <div className="min-w-0 flex-1">
-                  <div
-                    className="truncate text-sm font-medium"
-                    title={item.name}
-                  >
-                    {item.name}
-                  </div>
-                  <div
-                    className="truncate text-xs text-muted-foreground"
-                    title={item.originalPath}
-                  >
-                    {item.originalPath}
-                  </div>
-                  <div className="text-xs text-muted-foreground">
-                    {new Date(item.deletedAt).toLocaleString()}
-                  </div>
-                </div>
-                <div className="flex shrink-0 gap-2">
-                  <Button
-                    size="sm"
-                    variant="outline"
-                    onClick={() => void restore(item)}
-                  >
-                    <RotateCcw className="mr-1 size-3.5" />
-                    {t("fileManager.trashRestore")}
-                  </Button>
-                  <Button
-                    size="sm"
-                    variant="destructive"
-                    onClick={() => void remove(item)}
-                  >
-                    {t("fileManager.trashDeletePermanently")}
-                  </Button>
-                </div>
-              </div>
-            ))
-          )}
-        </div>
-
-        <div className="flex shrink-0 justify-end">
-          <Button
-            variant="destructive"
-            disabled={items.length === 0}
-            onClick={() => void empty()}
-          >
-            {t("fileManager.trashEmptyAction")}
-          </Button>
-        </div>
-      </DialogContent>
-    </Dialog>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/LocalFileContextMenu.tsx b/plugins/file-manager/src/frontend/LocalFileContextMenu.tsx
deleted file mode 100644
index 4b2e0afcc..000000000
--- a/plugins/file-manager/src/frontend/LocalFileContextMenu.tsx
+++ /dev/null
@@ -1,322 +0,0 @@
-import React, { useEffect, useLayoutEffect, useRef, useState } from "react";
-import { cn } from "@termix/plugin-sdk/ui";
-import {
-  Clipboard,
-  Edit3,
-  Eye,
-  EyeOff,
-  ExternalLink,
-  FilePlus,
-  FolderOpen,
-  FolderPlus,
-  RefreshCw,
-  Trash2,
-  Upload,
-} from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Kbd, KbdKey, KbdSeparator } from "@termix/plugin-sdk/ui";
-import type { LocalFileEntry } from "@termix/plugin-sdk/frontend";
-
-const VIEWPORT_PADDING = 16;
-
-export interface LocalFileContextMenuProps {
-  x: number;
-  y: number;
-  /** Entries the menu acts on; empty means the pane background was clicked. */
-  entries: LocalFileEntry[];
-  isVisible: boolean;
-  showHidden: boolean;
-  canUpload: boolean;
-  onClose: () => void;
-  onOpen: (entry: LocalFileEntry) => void;
-  onUploadToRemote: (entries: LocalFileEntry[]) => void;
-  onReveal: (entry?: LocalFileEntry) => void;
-  onRename: (entry: LocalFileEntry) => void;
-  onCopyPath: (entries: LocalFileEntry[]) => void;
-  onNewFolder: () => void;
-  onNewFile: () => void;
-  onRefresh: () => void;
-  onToggleHidden: () => void;
-  onDelete: (entries: LocalFileEntry[]) => void;
-}
-
-interface MenuItem {
-  icon?: React.ReactNode;
-  label?: string;
-  action?: () => void;
-  shortcut?: string;
-  separator?: boolean;
-  disabled?: boolean;
-  danger?: boolean;
-}
-
-/**
- * Right-click menu for the local pane. Same chrome and dismissal rules as
- * FileManagerContextMenu, with the subset of actions that make sense for the
- * user's own disk.
- */
-export function LocalFileContextMenu({
-  x,
-  y,
-  entries,
-  isVisible,
-  showHidden,
-  canUpload,
-  onClose,
-  onOpen,
-  onUploadToRemote,
-  onReveal,
-  onRename,
-  onCopyPath,
-  onNewFolder,
-  onNewFile,
-  onRefresh,
-  onToggleHidden,
-  onDelete,
-}: LocalFileContextMenuProps) {
-  const { t } = useTranslation();
-  const menuRef = useRef<HTMLDivElement>(null);
-  const [menuPosition, setMenuPosition] = useState({ x, y });
-  const [isMounted, setIsMounted] = useState(false);
-
-  useEffect(() => {
-    if (!isVisible) {
-      setIsMounted(false);
-      return;
-    }
-    setIsMounted(true);
-
-    let cleanupFn: (() => void) | null = null;
-    const timeoutId = setTimeout(() => {
-      const handleClickOutside = (event: MouseEvent) => {
-        if (!menuRef.current?.contains(event.target as Node)) onClose();
-      };
-      const handleRightClick = (event: MouseEvent) => {
-        event.preventDefault();
-        onClose();
-      };
-      const handleKeyDown = (event: KeyboardEvent) => {
-        if (event.key === "Escape") {
-          event.preventDefault();
-          onClose();
-        }
-      };
-      const handleBlur = () => onClose();
-      const handleScroll = () => onClose();
-
-      document.addEventListener("mousedown", handleClickOutside, true);
-      document.addEventListener("contextmenu", handleRightClick);
-      document.addEventListener("keydown", handleKeyDown);
-      window.addEventListener("blur", handleBlur);
-      window.addEventListener("scroll", handleScroll, true);
-
-      cleanupFn = () => {
-        document.removeEventListener("mousedown", handleClickOutside, true);
-        document.removeEventListener("contextmenu", handleRightClick);
-        document.removeEventListener("keydown", handleKeyDown);
-        window.removeEventListener("blur", handleBlur);
-        window.removeEventListener("scroll", handleScroll, true);
-      };
-    }, 50);
-
-    return () => {
-      clearTimeout(timeoutId);
-      cleanupFn?.();
-    };
-  }, [isVisible, x, y, onClose]);
-
-  useLayoutEffect(() => {
-    if (!isVisible || !menuRef.current) return;
-    const menuWidth = menuRef.current.offsetWidth;
-    const menuHeight = menuRef.current.offsetHeight;
-    let adjustedX = x;
-    let adjustedY = y;
-    if (x + menuWidth > window.innerWidth) {
-      adjustedX = window.innerWidth - menuWidth - 10;
-    }
-    if (y + menuHeight > window.innerHeight) {
-      adjustedY = Math.max(10, window.innerHeight - menuHeight - 10);
-    }
-    setMenuPosition({ x: Math.max(8, adjustedX), y: Math.max(8, adjustedY) });
-  }, [isVisible, x, y, entries.length]);
-
-  const isEntryContext = entries.length > 0;
-  const isSingle = entries.length === 1;
-  const single = isSingle ? entries[0] : null;
-
-  const menuItems: MenuItem[] = [];
-
-  if (isEntryContext) {
-    if (single) {
-      menuItems.push({
-        icon: <ExternalLink className="size-3.5" />,
-        label:
-          single.type === "directory"
-            ? t("fileManager.localOpenFolder")
-            : t("fileManager.localOpen"),
-        action: () => onOpen(single),
-        shortcut: "Enter",
-      });
-    }
-
-    menuItems.push({
-      icon: <Upload className="size-3.5" />,
-      label: isSingle
-        ? t("fileManager.localUploadToRemote")
-        : t("fileManager.localUploadToRemoteMany", { count: entries.length }),
-      action: () => onUploadToRemote(entries),
-      disabled: !canUpload,
-    });
-
-    menuItems.push({
-      icon: <FolderOpen className="size-3.5" />,
-      label: t("fileManager.localRevealInFileManager"),
-      action: () => onReveal(entries[0]),
-    });
-
-    menuItems.push({ separator: true });
-
-    if (single) {
-      menuItems.push({
-        icon: <Edit3 className="size-3.5" />,
-        label: t("fileManager.rename"),
-        action: () => onRename(single),
-        shortcut: "F2",
-      });
-    }
-
-    menuItems.push({
-      icon: <Clipboard className="size-3.5" />,
-      label: isSingle ? t("fileManager.copyPath") : t("fileManager.copyPaths"),
-      action: () => onCopyPath(entries),
-    });
-
-    menuItems.push({ separator: true });
-
-    menuItems.push({
-      icon: <Trash2 className="size-3.5" />,
-      label: isSingle
-        ? t("fileManager.localMoveToTrash")
-        : t("fileManager.localMoveToTrashMany", { count: entries.length }),
-      action: () => onDelete(entries),
-      shortcut: "Del",
-      danger: true,
-    });
-  } else {
-    menuItems.push({
-      icon: <FolderPlus className="size-3.5" />,
-      label: t("fileManager.newFolder"),
-      action: onNewFolder,
-    });
-    menuItems.push({
-      icon: <FilePlus className="size-3.5" />,
-      label: t("fileManager.newFile"),
-      action: onNewFile,
-    });
-    menuItems.push({ separator: true });
-    menuItems.push({
-      icon: <FolderOpen className="size-3.5" />,
-      label: t("fileManager.localRevealInFileManager"),
-      action: () => onReveal(),
-    });
-    menuItems.push({
-      icon: showHidden ? (
-        <EyeOff className="size-3.5" />
-      ) : (
-        <Eye className="size-3.5" />
-      ),
-      label: showHidden
-        ? t("fileManager.localHideHidden")
-        : t("fileManager.localShowHidden"),
-      action: onToggleHidden,
-    });
-    menuItems.push({
-      icon: <RefreshCw className="size-3.5" />,
-      label: t("fileManager.refresh"),
-      action: onRefresh,
-      shortcut: "F5",
-    });
-  }
-
-  const renderShortcut = (shortcut: string) => {
-    const keys = shortcut.split("+");
-    if (keys.length === 1) return <Kbd>{keys[0]}</Kbd>;
-    return (
-      <Kbd>
-        {keys.map((key, index) => (
-          <React.Fragment key={`${key}-${index}`}>
-            <KbdKey>{key}</KbdKey>
-            {index < keys.length - 1 && <KbdSeparator />}
-          </React.Fragment>
-        ))}
-      </Kbd>
-    );
-  };
-
-  if (!isVisible && !isMounted) return null;
-
-  return (
-    <>
-      <div
-        className={cn(
-          "fixed inset-0 z-[99990] transition-opacity duration-150",
-          !isMounted && "opacity-0",
-        )}
-      />
-      <div
-        ref={menuRef}
-        data-context-menu
-        data-testid="local-file-context-menu"
-        className="fixed bg-card border border-border rounded-none shadow-md min-w-[220px] max-w-[300px] z-[99995] overflow-x-hidden overflow-y-auto py-1"
-        style={{
-          left: menuPosition.x,
-          top: menuPosition.y,
-          maxHeight: `calc(100vh - ${VIEWPORT_PADDING * 2}px)`,
-        }}
-      >
-        {menuItems.map((item, index) => {
-          if (item.separator) {
-            return (
-              <div
-                key={`separator-${index}`}
-                className="my-1 border-t border-border"
-              />
-            );
-          }
-          return (
-            <button
-              key={`${item.label}-${index}`}
-              type="button"
-              className={cn(
-                "w-full px-3 min-h-8 py-1.5 text-left text-xs font-semibold flex items-center justify-between gap-3 rounded-none transition-colors cursor-pointer",
-                "hover:bg-accent-brand/10 hover:text-accent-brand",
-                item.disabled &&
-                  "opacity-40 cursor-not-allowed hover:bg-transparent hover:text-current",
-                item.danger &&
-                  "text-destructive hover:bg-destructive/10 hover:text-destructive",
-              )}
-              onClick={() => {
-                if (item.disabled) return;
-                item.action?.();
-                onClose();
-              }}
-              disabled={item.disabled}
-            >
-              <div className="flex items-center gap-2 flex-1 min-w-0">
-                <div className="flex-shrink-0 text-muted-foreground">
-                  {item.icon}
-                </div>
-                <span className="flex-1 leading-tight">{item.label}</span>
-              </div>
-              {item.shortcut && (
-                <div className="ml-auto flex-shrink-0 opacity-50">
-                  {renderShortcut(item.shortcut)}
-                </div>
-              )}
-            </button>
-          );
-        })}
-      </div>
-    </>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/LocalFilePane.tsx b/plugins/file-manager/src/frontend/LocalFilePane.tsx
deleted file mode 100644
index ff78c9299..000000000
--- a/plugins/file-manager/src/frontend/LocalFilePane.tsx
+++ /dev/null
@@ -1,1132 +0,0 @@
-import React, {
-  useCallback,
-  useEffect,
-  useMemo,
-  useRef,
-  useState,
-} from "react";
-import { useVirtualizer } from "@tanstack/react-virtual";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { toast } from "sonner";
-import {
-  ArrowDown,
-  ArrowUp,
-  ChevronLeft,
-  ChevronRight,
-  CornerLeftUp,
-  Download,
-  Eye,
-  EyeOff,
-  File,
-  Folder,
-  FolderOpen,
-  FolderPlus,
-  Home,
-  Link2,
-  RefreshCw,
-  X,
-} from "lucide-react";
-import { cn } from "@termix/plugin-sdk/ui";
-import { Button, Input } from "@termix/plugin-sdk/ui";
-import type { LocalFileEntry } from "@termix/plugin-sdk/frontend";
-import {
-  createLocalFile,
-  createLocalFolder,
-  getLocalHome,
-  listLocalDirectory,
-  openLocalPath,
-  renameLocalEntry,
-  revealLocalPath,
-  trashLocalPaths,
-} from "./lib/local-files";
-import { copyToClipboard } from "@termix/plugin-sdk/ui";
-import { useConfirmation } from "@termix/plugin-sdk/ui";
-import { LocalFileContextMenu } from "./LocalFileContextMenu.tsx";
-import {
-  useResizableColumns,
-  type ResizableColumnSpec,
-} from "./hooks/useResizableColumns.ts";
-import { ColumnResizeHandle } from "./components/ColumnResizeHandle.tsx";
-import { ColumnVisibilityMenu } from "./components/ColumnVisibilityMenu.tsx";
-import { formatFileSize } from "./file-manager-utils.ts";
-import {
-  LOCAL_FILES_DRAG_MIME,
-  type LocalSortField,
-  describeLocalKind,
-  formatLocalModified,
-  isRemoteFilesDrag,
-  parseInternalFilesDragPayload,
-  serializeLocalFilesDragPayload,
-  sortLocalEntries,
-} from "./local-transfer-utils.ts";
-
-const LAST_PATH_STORAGE_KEY = "termix:file-manager:local-pane:path";
-const SHOW_HIDDEN_STORAGE_KEY = "termix:file-manager:local-pane:hidden";
-const ROW_HEIGHT = 34;
-const COLUMNS_STORAGE_KEY = "termix:file-manager:columns:local";
-const LOCAL_COLUMNS: ResizableColumnSpec[] = [
-  {
-    key: "modified",
-    labelKey: "fileManager.modified",
-    defaultWidth: 130,
-    minWidth: 70,
-  },
-  { key: "size", labelKey: "fileManager.size", defaultWidth: 72, minWidth: 56 },
-  { key: "kind", labelKey: "fileManager.kind", defaultWidth: 64, minWidth: 48 },
-];
-
-export interface LocalFilePaneProps {
-  /** Bump to force a re-read of the current directory. */
-  refreshToken?: number;
-  onClose?: () => void;
-  /**
-   * Remote grid items were dropped on this pane (or on one of its folders).
-   * `remotePaths` are the dragged remote paths; `localDir` is where they go.
-   */
-  onRemoteItemsDropped: (remotePaths: string[], localDir: string) => void;
-  /**
-   * "Upload to server" from the context menu: sends the given local paths to
-   * the remote pane's current folder. Omit to hide the action.
-   */
-  onUploadToRemote?: (localPaths: string[]) => void;
-  onPathChange?: (localPath: string) => void;
-}
-
-function readStoredPath(): string | null {
-  try {
-    return localStorage.getItem(LAST_PATH_STORAGE_KEY);
-  } catch {
-    return null;
-  }
-}
-
-function readStoredShowHidden(): boolean {
-  try {
-    return localStorage.getItem(SHOW_HIDDEN_STORAGE_KEY) !== "false";
-  } catch {
-    return true;
-  }
-}
-
-function LocalEntryIcon({ entry }: { entry: LocalFileEntry }) {
-  if (entry.type === "directory") {
-    return <Folder className="size-4 text-accent-brand fill-accent-brand/20" />;
-  }
-  if (entry.type === "link") {
-    return <Link2 className="size-4 text-muted-foreground" />;
-  }
-  return <File className="size-4 text-muted-foreground" />;
-}
-
-export function LocalFilePane({
-  refreshToken,
-  onClose,
-  onRemoteItemsDropped,
-  onUploadToRemote,
-  onPathChange,
-}: LocalFilePaneProps) {
-  const { t } = useTranslation();
-  const { confirmWithToast } = useConfirmation();
-  const [homePath, setHomePath] = useState<string | null>(null);
-  const [currentPath, setCurrentPath] = useState<string | null>(null);
-  const [parentPath, setParentPath] = useState<string | null>(null);
-  const [entries, setEntries] = useState<LocalFileEntry[]>([]);
-  const [loading, setLoading] = useState(false);
-  const [error, setError] = useState<string | null>(null);
-  const [pathInput, setPathInput] = useState("");
-  const [showHidden, setShowHidden] = useState(readStoredShowHidden);
-  const [sortBy, setSortBy] = useState<LocalSortField>("name");
-  const [sortOrder, setSortOrder] = useState<"asc" | "desc">("asc");
-  const [selected, setSelected] = useState<Set<string>>(new Set());
-  const [anchorPath, setAnchorPath] = useState<string | null>(null);
-  const historyRef = useRef<string[]>([]);
-  const historyIndexRef = useRef(-1);
-  const [nav, setNav] = useState({ canBack: false, canForward: false });
-  const [creating, setCreating] = useState<"folder" | "file" | null>(null);
-  const [newEntryName, setNewEntryName] = useState("");
-  const [renaming, setRenaming] = useState<{
-    path: string;
-    name: string;
-  } | null>(null);
-  const [contextMenu, setContextMenu] = useState<{
-    x: number;
-    y: number;
-    entries: LocalFileEntry[];
-    visible: boolean;
-  }>({ x: 0, y: 0, entries: [], visible: false });
-  const [dropTarget, setDropTarget] = useState<
-    { kind: "pane" } | { kind: "folder"; path: string } | null
-  >(null);
-  const dragCounter = useRef(0);
-  const scrollRef = useRef<HTMLDivElement>(null);
-  const newEntryInputRef = useRef<HTMLInputElement>(null);
-  const renameInputRef = useRef<HTMLInputElement>(null);
-  const currentPathRef = useRef<string | null>(null);
-  currentPathRef.current = currentPath;
-
-  const visibleEntries = useMemo(() => {
-    const filtered = showHidden
-      ? entries
-      : entries.filter((entry) => !entry.hidden);
-    return sortLocalEntries(filtered, sortBy, sortOrder);
-  }, [entries, showHidden, sortBy, sortOrder]);
-
-  const columns = useResizableColumns({
-    storageKey: COLUMNS_STORAGE_KEY,
-    columns: LOCAL_COLUMNS,
-  });
-  const rowStyle = { gridTemplateColumns: columns.gridTemplateColumns };
-  const [columnMenu, setColumnMenu] = useState<{
-    x: number;
-    y: number;
-    visible: boolean;
-  }>({ x: 0, y: 0, visible: false });
-  const closeColumnMenu = useCallback(
-    () => setColumnMenu((prev) => ({ ...prev, visible: false })),
-    [],
-  );
-
-  const virtualizer = useVirtualizer({
-    count: visibleEntries.length,
-    getScrollElement: () => scrollRef.current,
-    estimateSize: () => ROW_HEIGHT,
-    overscan: 12,
-  });
-
-  const load = useCallback(
-    async (dirPath: string) => {
-      setLoading(true);
-      setError(null);
-      try {
-        const listing = await listLocalDirectory(dirPath);
-        setCurrentPath(listing.path);
-        setParentPath(listing.parent);
-        setEntries(listing.entries);
-        setPathInput(listing.path);
-        setSelected(new Set());
-        setAnchorPath(null);
-        try {
-          localStorage.setItem(LAST_PATH_STORAGE_KEY, listing.path);
-        } catch {
-          // storage unavailable
-        }
-        onPathChange?.(listing.path);
-        return listing.path;
-      } catch (err) {
-        setError(err instanceof Error ? err.message : String(err));
-        return null;
-      } finally {
-        setLoading(false);
-      }
-    },
-    [onPathChange],
-  );
-
-  const syncNav = useCallback(() => {
-    setNav({
-      canBack: historyIndexRef.current > 0,
-      canForward: historyIndexRef.current < historyRef.current.length - 1,
-    });
-  }, []);
-
-  const navigateTo = useCallback(
-    async (dirPath: string, { record = true }: { record?: boolean } = {}) => {
-      const resolved = await load(dirPath);
-      if (resolved && record) {
-        const kept = historyRef.current.slice(0, historyIndexRef.current + 1);
-        if (kept[kept.length - 1] !== resolved) kept.push(resolved);
-        historyRef.current = kept;
-        historyIndexRef.current = kept.length - 1;
-        syncNav();
-      }
-    },
-    [load, syncNav],
-  );
-
-  // Initial load: last visited folder, falling back to the home directory.
-  useEffect(() => {
-    let cancelled = false;
-    (async () => {
-      try {
-        const info = await getLocalHome();
-        if (cancelled) return;
-        setHomePath(info.home);
-        const start = readStoredPath() || info.home;
-        let resolved = await load(start);
-        if (!resolved && start !== info.home) {
-          resolved = await load(info.home);
-        }
-        historyRef.current = [resolved || info.home];
-        historyIndexRef.current = 0;
-        syncNav();
-      } catch (err) {
-        if (!cancelled) {
-          setError(err instanceof Error ? err.message : String(err));
-        }
-      }
-    })();
-    return () => {
-      cancelled = true;
-    };
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, []);
-
-  // External refresh requests (e.g. after a download finished).
-  const lastRefreshToken = useRef(refreshToken);
-  useEffect(() => {
-    if (refreshToken === lastRefreshToken.current) return;
-    lastRefreshToken.current = refreshToken;
-    if (currentPathRef.current) void load(currentPathRef.current);
-  }, [refreshToken, load]);
-
-  useEffect(() => {
-    try {
-      localStorage.setItem(SHOW_HIDDEN_STORAGE_KEY, String(showHidden));
-    } catch {
-      // storage unavailable
-    }
-  }, [showHidden]);
-
-  useEffect(() => {
-    if (creating) newEntryInputRef.current?.focus();
-  }, [creating]);
-
-  useEffect(() => {
-    if (!renaming) return;
-    const input = renameInputRef.current;
-    if (!input) return;
-    input.focus();
-    // Select the stem so typing replaces the name but keeps the extension.
-    const dot = renaming.name.lastIndexOf(".");
-    input.setSelectionRange(0, dot > 0 ? dot : renaming.name.length);
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [renaming?.path]);
-
-  const goBack = () => {
-    if (historyIndexRef.current <= 0) return;
-    historyIndexRef.current -= 1;
-    syncNav();
-    void navigateTo(historyRef.current[historyIndexRef.current], {
-      record: false,
-    });
-  };
-
-  const goForward = () => {
-    if (historyIndexRef.current >= historyRef.current.length - 1) return;
-    historyIndexRef.current += 1;
-    syncNav();
-    void navigateTo(historyRef.current[historyIndexRef.current], {
-      record: false,
-    });
-  };
-
-  const goUp = () => {
-    if (parentPath) void navigateTo(parentPath);
-  };
-
-  const goHome = () => {
-    if (homePath) void navigateTo(homePath);
-  };
-
-  const refresh = () => {
-    if (currentPath) void load(currentPath);
-  };
-
-  const submitPathInput = () => {
-    const trimmed = pathInput.trim();
-    if (!trimmed || trimmed === currentPath) return;
-    void navigateTo(trimmed);
-  };
-
-  const toggleSort = (field: LocalSortField) => {
-    if (field === sortBy) {
-      setSortOrder((prev) => (prev === "asc" ? "desc" : "asc"));
-    } else {
-      setSortBy(field);
-      setSortOrder("asc");
-    }
-  };
-
-  const handleRowClick = (entry: LocalFileEntry, event: React.MouseEvent) => {
-    event.stopPropagation();
-    if (event.detail === 2) {
-      openEntry(entry);
-      return;
-    }
-
-    if (event.shiftKey && anchorPath) {
-      const paths = visibleEntries.map((e) => e.path);
-      const a = paths.indexOf(anchorPath);
-      const b = paths.indexOf(entry.path);
-      if (a !== -1 && b !== -1) {
-        const [from, to] = a < b ? [a, b] : [b, a];
-        setSelected(new Set(paths.slice(from, to + 1)));
-        return;
-      }
-    }
-
-    if (event.metaKey || event.ctrlKey) {
-      setSelected((prev) => {
-        const next = new Set(prev);
-        if (next.has(entry.path)) next.delete(entry.path);
-        else next.add(entry.path);
-        return next;
-      });
-      setAnchorPath(entry.path);
-      return;
-    }
-
-    setSelected(new Set([entry.path]));
-    setAnchorPath(entry.path);
-  };
-
-  const handleRowDragStart = (
-    event: React.DragEvent,
-    entry: LocalFileEntry,
-  ) => {
-    const paths = selected.has(entry.path)
-      ? Array.from(selected)
-      : [entry.path];
-    if (!selected.has(entry.path)) {
-      setSelected(new Set([entry.path]));
-      setAnchorPath(entry.path);
-    }
-    const payload = serializeLocalFilesDragPayload(paths);
-    event.dataTransfer.setData(LOCAL_FILES_DRAG_MIME, payload);
-    event.dataTransfer.setData("text/plain", payload);
-    event.dataTransfer.effectAllowed = "copy";
-  };
-
-  // ---- Drop target handling (remote grid -> local) ----
-
-  const handlePaneDragEnter = (event: React.DragEvent) => {
-    if (!isRemoteFilesDrag(event.dataTransfer)) return;
-    event.preventDefault();
-    dragCounter.current += 1;
-    setDropTarget((prev) => prev ?? { kind: "pane" });
-  };
-
-  const handlePaneDragOver = (event: React.DragEvent) => {
-    if (!isRemoteFilesDrag(event.dataTransfer)) return;
-    event.preventDefault();
-    event.dataTransfer.dropEffect = "copy";
-  };
-
-  const handlePaneDragLeave = (event: React.DragEvent) => {
-    if (!isRemoteFilesDrag(event.dataTransfer)) return;
-    event.preventDefault();
-    dragCounter.current = Math.max(0, dragCounter.current - 1);
-    if (dragCounter.current === 0) setDropTarget(null);
-  };
-
-  const finishDrop = (event: React.DragEvent, localDir: string | null) => {
-    const remotePaths = parseInternalFilesDragPayload(
-      event.dataTransfer.getData("text/plain"),
-    );
-    dragCounter.current = 0;
-    setDropTarget(null);
-    if (!remotePaths || !localDir) return;
-    onRemoteItemsDropped(remotePaths, localDir);
-  };
-
-  const handlePaneDrop = (event: React.DragEvent) => {
-    if (!isRemoteFilesDrag(event.dataTransfer)) return;
-    event.preventDefault();
-    event.stopPropagation();
-    finishDrop(event, currentPath);
-  };
-
-  const handleFolderDragOver = (
-    event: React.DragEvent,
-    entry: LocalFileEntry,
-  ) => {
-    if (entry.type !== "directory" || !isRemoteFilesDrag(event.dataTransfer)) {
-      return;
-    }
-    event.preventDefault();
-    event.stopPropagation();
-    event.dataTransfer.dropEffect = "copy";
-    setDropTarget((prev) =>
-      prev?.kind === "folder" && prev.path === entry.path
-        ? prev
-        : { kind: "folder", path: entry.path },
-    );
-  };
-
-  const handleFolderDragLeave = (
-    event: React.DragEvent,
-    entry: LocalFileEntry,
-  ) => {
-    if (entry.type !== "directory" || !isRemoteFilesDrag(event.dataTransfer)) {
-      return;
-    }
-    event.stopPropagation();
-    setDropTarget((prev) =>
-      prev?.kind === "folder" && prev.path === entry.path
-        ? { kind: "pane" }
-        : prev,
-    );
-  };
-
-  const handleFolderDrop = (event: React.DragEvent, entry: LocalFileEntry) => {
-    if (entry.type !== "directory" || !isRemoteFilesDrag(event.dataTransfer)) {
-      return;
-    }
-    event.preventDefault();
-    event.stopPropagation();
-    finishDrop(event, entry.path);
-  };
-
-  const reportError = (err: unknown, fallbackKey: string) => {
-    const message = err instanceof Error ? err.message : String(err ?? "");
-    toast.error(t(fallbackKey), message ? { description: message } : undefined);
-  };
-
-  const submitNewEntry = async () => {
-    const kind = creating;
-    const name = newEntryName.trim();
-    setCreating(null);
-    setNewEntryName("");
-    if (!kind || !name || !currentPath) return;
-    try {
-      if (kind === "folder") await createLocalFolder(currentPath, name);
-      else await createLocalFile(currentPath, name);
-      await load(currentPath);
-    } catch (err) {
-      reportError(err, "fileManager.localCreateFailed");
-    }
-  };
-
-  const startRename = (entry: LocalFileEntry) => {
-    setRenaming({ path: entry.path, name: entry.name });
-  };
-
-  const submitRename = async () => {
-    const current = renaming;
-    setRenaming(null);
-    if (!current || !currentPath) return;
-    const nextName = current.name.trim();
-    const entry = entries.find((e) => e.path === current.path);
-    if (!entry || !nextName || nextName === entry.name) return;
-    try {
-      await renameLocalEntry(entry.path, nextName);
-      await load(currentPath);
-    } catch (err) {
-      reportError(err, "fileManager.localRenameFailed");
-    }
-  };
-
-  const openEntry = (entry: LocalFileEntry) => {
-    if (entry.type === "directory") {
-      void navigateTo(entry.path);
-    } else {
-      void openLocalPath(entry.path).catch(() => {
-        void revealLocalPath(entry.path);
-      });
-    }
-  };
-
-  const copyEntryPaths = (targets: LocalFileEntry[]) => {
-    if (targets.length === 0) return;
-    void copyToClipboard(targets.map((e) => e.path).join("\n")).then((ok) => {
-      if (ok) {
-        toast.success(
-          targets.length === 1
-            ? t("fileManager.pathCopiedToClipboard")
-            : t("fileManager.pathsCopiedToClipboard", {
-                count: targets.length,
-              }),
-        );
-      } else {
-        toast.error(t("fileManager.failedToCopyPath"));
-      }
-    });
-  };
-
-  const trashEntries = (targets: LocalFileEntry[]) => {
-    if (targets.length === 0 || !currentPath) return;
-    const hasDirectory = targets.some((e) => e.type === "directory");
-    const message =
-      targets.length === 1
-        ? t(
-            hasDirectory
-              ? "fileManager.localTrashConfirmFolder"
-              : "fileManager.localTrashConfirmSingle",
-            { name: targets[0].name },
-          )
-        : t("fileManager.localTrashConfirmMany", { count: targets.length });
-
-    void confirmWithToast(
-      message,
-      async () => {
-        try {
-          const result = await trashLocalPaths(targets.map((e) => e.path));
-          if (result.failed.length === 0) {
-            toast.success(
-              t("fileManager.localTrashed", { count: result.trashed }),
-            );
-          } else {
-            toast.error(t("fileManager.localTrashFailed"), {
-              description: result.failed
-                .map((f) => `${f.path}: ${f.error}`)
-                .join("\n"),
-            });
-          }
-        } catch (err) {
-          reportError(err, "fileManager.localTrashFailed");
-        }
-        await load(currentPath);
-      },
-      "destructive",
-    );
-  };
-
-  const selectedEntries = () =>
-    visibleEntries.filter((e) => selected.has(e.path));
-
-  const openContextMenu = (event: React.MouseEvent, entry?: LocalFileEntry) => {
-    event.preventDefault();
-    event.stopPropagation();
-    let targets: LocalFileEntry[] = [];
-    if (entry) {
-      if (selected.has(entry.path)) {
-        targets = selectedEntries();
-      } else {
-        setSelected(new Set([entry.path]));
-        setAnchorPath(entry.path);
-        targets = [entry];
-      }
-    }
-    setContextMenu({
-      x: event.clientX,
-      y: event.clientY,
-      entries: targets,
-      visible: true,
-    });
-  };
-
-  const closeContextMenu = useCallback(
-    () => setContextMenu((prev) => ({ ...prev, visible: false })),
-    [],
-  );
-
-  const handleKeyDown = (event: React.KeyboardEvent) => {
-    // Inline editors handle their own keys.
-    if ((event.target as HTMLElement).tagName === "INPUT") return;
-    const targets = selectedEntries();
-    if (event.key === "Enter" && targets.length === 1) {
-      event.preventDefault();
-      openEntry(targets[0]);
-    } else if (event.key === "F2" && targets.length === 1) {
-      event.preventDefault();
-      startRename(targets[0]);
-    } else if (
-      (event.key === "Delete" ||
-        (event.key === "Backspace" && (event.metaKey || event.ctrlKey))) &&
-      targets.length > 0
-    ) {
-      event.preventDefault();
-      trashEntries(targets);
-    } else if (event.key === "F5") {
-      event.preventDefault();
-      refresh();
-    } else if (event.key === "Escape") {
-      setSelected(new Set());
-      setAnchorPath(null);
-    } else if (
-      event.key === "a" &&
-      (event.metaKey || event.ctrlKey) &&
-      visibleEntries.length > 0
-    ) {
-      event.preventDefault();
-      setSelected(new Set(visibleEntries.map((e) => e.path)));
-    }
-  };
-
-  const showPaneOverlay = dropTarget?.kind === "pane";
-
-  // Pinned ".." entry (Termius-style): double-click goes up, and remote
-  // items dropped on it download into the parent folder.
-  const parentEntry: LocalFileEntry | null = parentPath
-    ? {
-        name: "..",
-        path: parentPath,
-        type: "directory",
-        size: 0,
-        hidden: false,
-      }
-    : null;
-  const isParentDropTarget =
-    !!parentEntry &&
-    dropTarget?.kind === "folder" &&
-    dropTarget.path === parentEntry.path;
-
-  const sortIndicator = (field: LocalSortField) =>
-    sortBy === field ? (
-      sortOrder === "asc" ? (
-        <ArrowUp className="size-3" />
-      ) : (
-        <ArrowDown className="size-3" />
-      )
-    ) : null;
-
-  return (
-    <div
-      className="h-full flex flex-col bg-card overflow-hidden relative"
-      data-testid="local-file-pane"
-      onDragEnter={handlePaneDragEnter}
-      onDragOver={handlePaneDragOver}
-      onDragLeave={handlePaneDragLeave}
-      onDrop={handlePaneDrop}
-    >
-      {/* Header */}
-      <div className="flex items-center gap-1.5 px-2 py-1.5 border-b border-border">
-        <span className="hidden lg:inline text-[10px] font-bold uppercase tracking-widest text-muted-foreground px-1">
-          {t("fileManager.localFiles")}
-        </span>
-        <div className="flex items-center border border-border rounded-none overflow-hidden">
-          <Button
-            variant="ghost"
-            size="icon"
-            className="size-7 rounded-none"
-            onClick={goBack}
-            disabled={!nav.canBack}
-            title={t("fileManager.back")}
-          >
-            <ChevronLeft className="size-4" />
-          </Button>
-          <Button
-            variant="ghost"
-            size="icon"
-            className="size-7 rounded-none border-l border-border"
-            onClick={goForward}
-            disabled={!nav.canForward}
-            title={t("fileManager.forward")}
-          >
-            <ChevronRight className="size-4" />
-          </Button>
-          <Button
-            variant="ghost"
-            size="icon"
-            className="size-7 rounded-none border-l border-border"
-            onClick={goUp}
-            disabled={!parentPath}
-            title={t("fileManager.up")}
-          >
-            <ArrowUp className="size-4" />
-          </Button>
-          <Button
-            variant="ghost"
-            size="icon"
-            className="size-7 rounded-none border-l border-border"
-            onClick={goHome}
-            disabled={!homePath}
-            title={t("fileManager.localHome")}
-          >
-            <Home className="size-4" />
-          </Button>
-        </div>
-
-        <Input
-          value={pathInput}
-          onChange={(e) => setPathInput(e.target.value)}
-          onKeyDown={(e) => {
-            if (e.key === "Enter") submitPathInput();
-            if (e.key === "Escape" && currentPath) setPathInput(currentPath);
-          }}
-          onBlur={() => currentPath && setPathInput(currentPath)}
-          spellCheck={false}
-          className="h-7 flex-1 min-w-0 text-xs font-mono bg-muted/50 border-border rounded-none focus:ring-1 focus:ring-accent-brand/50"
-          placeholder={t("fileManager.localPathPlaceholder")}
-        />
-
-        <div className="flex items-center border border-border rounded-none overflow-hidden">
-          <Button
-            variant="ghost"
-            size="icon"
-            className="size-7 rounded-none"
-            onClick={refresh}
-            disabled={!currentPath || loading}
-            title={t("fileManager.refresh")}
-          >
-            <RefreshCw className={cn("size-4", loading && "animate-spin")} />
-          </Button>
-          <Button
-            variant="ghost"
-            size="icon"
-            className="size-7 rounded-none border-l border-border"
-            onClick={() => setCreating("folder")}
-            disabled={!currentPath}
-            title={t("fileManager.newFolder")}
-          >
-            <FolderPlus className="size-4" />
-          </Button>
-          <Button
-            variant="ghost"
-            size="icon"
-            className="size-7 rounded-none border-l border-border"
-            onClick={() => setShowHidden((prev) => !prev)}
-            title={
-              showHidden
-                ? t("fileManager.localHideHidden")
-                : t("fileManager.localShowHidden")
-            }
-          >
-            {showHidden ? (
-              <Eye className="size-4" />
-            ) : (
-              <EyeOff className="size-4" />
-            )}
-          </Button>
-          <Button
-            variant="ghost"
-            size="icon"
-            className="size-7 rounded-none border-l border-border"
-            onClick={() => currentPath && void revealLocalPath(currentPath)}
-            disabled={!currentPath}
-            title={t("fileManager.localRevealInFileManager")}
-          >
-            <FolderOpen className="size-4" />
-          </Button>
-        </div>
-
-        {onClose && (
-          <Button
-            variant="ghost"
-            size="icon"
-            className="size-7 rounded-none"
-            onClick={onClose}
-            title={t("fileManager.hideLocalFiles")}
-          >
-            <X className="size-4" />
-          </Button>
-        )}
-      </div>
-
-      {/* Column headers */}
-      <div
-        className="grid gap-2 px-3 py-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground border-b border-border bg-card select-none"
-        style={rowStyle}
-        title={t("fileManager.columnsHint")}
-        onContextMenu={(e) => {
-          e.preventDefault();
-          e.stopPropagation();
-          setColumnMenu({ x: e.clientX, y: e.clientY, visible: true });
-        }}
-      >
-        <button
-          type="button"
-          className="flex items-center gap-1 hover:text-accent-brand transition-colors text-left min-w-0"
-          onClick={() => toggleSort("name")}
-        >
-          <span className="truncate">{t("fileManager.name")}</span>
-          {sortIndicator("name")}
-        </button>
-        {columns.isVisible("modified") && (
-          <div className="relative flex min-w-0">
-            <ColumnResizeHandle {...columns.getHandleProps("modified")} />
-            <button
-              type="button"
-              className="flex items-center gap-1 hover:text-accent-brand transition-colors text-left min-w-0 flex-1"
-              onClick={() => toggleSort("modified")}
-            >
-              <span className="truncate">{t("fileManager.modified")}</span>
-              {sortIndicator("modified")}
-            </button>
-          </div>
-        )}
-        {columns.isVisible("size") && (
-          <div className="relative flex min-w-0">
-            <ColumnResizeHandle {...columns.getHandleProps("size")} />
-            <button
-              type="button"
-              className="flex items-center gap-1 justify-end hover:text-accent-brand transition-colors min-w-0 flex-1"
-              onClick={() => toggleSort("size")}
-            >
-              <span className="truncate">{t("fileManager.size")}</span>
-              {sortIndicator("size")}
-            </button>
-          </div>
-        )}
-        {columns.isVisible("kind") && (
-          <div className="relative flex min-w-0">
-            <ColumnResizeHandle {...columns.getHandleProps("kind")} />
-            <button
-              type="button"
-              className="flex items-center gap-1 hover:text-accent-brand transition-colors text-left min-w-0 flex-1"
-              onClick={() => toggleSort("kind")}
-            >
-              <span className="truncate">{t("fileManager.kind")}</span>
-              {sortIndicator("kind")}
-            </button>
-          </div>
-        )}
-      </div>
-
-      <ColumnVisibilityMenu
-        x={columnMenu.x}
-        y={columnMenu.y}
-        isVisible={columnMenu.visible}
-        columns={columns}
-        onClose={closeColumnMenu}
-      />
-
-      {/* Body */}
-      <div
-        ref={scrollRef}
-        className={cn(
-          "flex-1 min-h-0 overflow-y-auto thin-scrollbar relative",
-          showPaneOverlay && "bg-muted/20",
-        )}
-        tabIndex={0}
-        onKeyDown={handleKeyDown}
-        onClick={() => {
-          setSelected(new Set());
-          setAnchorPath(null);
-        }}
-        onContextMenu={(e) => openContextMenu(e)}
-      >
-        {parentEntry && (
-          <div
-            data-parent-entry
-            title={t("fileManager.goToParentFolder")}
-            style={rowStyle}
-            className={cn(
-              "grid gap-2 px-3 items-center text-xs cursor-default border-b border-border hover:bg-muted/50 rounded-none select-none transition-colors h-[34px]",
-              isParentDropTarget &&
-                "bg-accent-brand/20 outline outline-1 outline-dashed outline-accent-brand",
-            )}
-            onClick={(e) => {
-              e.stopPropagation();
-              goUp();
-            }}
-            onContextMenu={(e) => {
-              e.preventDefault();
-              e.stopPropagation();
-            }}
-            onDragOver={(e) => handleFolderDragOver(e, parentEntry)}
-            onDragLeave={(e) => handleFolderDragLeave(e, parentEntry)}
-            onDrop={(e) => handleFolderDrop(e, parentEntry)}
-          >
-            <div className="flex items-center gap-2.5 overflow-hidden pointer-events-none">
-              <span className="shrink-0">
-                <CornerLeftUp className="size-4 text-muted-foreground" />
-              </span>
-              <span className="font-bold tracking-tight text-muted-foreground">
-                ..
-              </span>
-            </div>
-          </div>
-        )}
-
-        {creating && (
-          <div
-            className="grid gap-2 px-3 items-center text-xs border-b border-border h-[34px]"
-            style={rowStyle}
-          >
-            <div className="flex items-center gap-2.5">
-              {creating === "folder" ? (
-                <Folder className="size-4 text-accent-brand shrink-0" />
-              ) : (
-                <File className="size-4 text-muted-foreground shrink-0" />
-              )}
-              <input
-                ref={newEntryInputRef}
-                value={newEntryName}
-                onChange={(e) => setNewEntryName(e.target.value)}
-                onKeyDown={(e) => {
-                  if (e.key === "Enter") void submitNewEntry();
-                  if (e.key === "Escape") {
-                    setCreating(null);
-                    setNewEntryName("");
-                  }
-                }}
-                onBlur={() => void submitNewEntry()}
-                onClick={(e) => e.stopPropagation()}
-                placeholder={
-                  creating === "folder"
-                    ? t("fileManager.newFolder")
-                    : t("fileManager.newFile")
-                }
-                className="flex-1 min-w-0 border border-accent-brand/60 bg-card px-2 py-0.5 text-xs rounded-none outline-none focus:ring-1 focus:ring-accent-brand/50"
-              />
-            </div>
-          </div>
-        )}
-
-        {error ? (
-          <div className="h-full flex flex-col items-center justify-center gap-2 p-6 text-center text-xs text-muted-foreground">
-            <p className="font-bold uppercase tracking-widest text-[10px]">
-              {t("fileManager.localCannotOpenFolder")}
-            </p>
-            <p className="font-mono break-all opacity-80">{error}</p>
-            <Button
-              variant="outline"
-              size="sm"
-              className="rounded-none mt-2 text-[10px] font-bold uppercase tracking-widest"
-              onClick={goHome}
-            >
-              {t("fileManager.localHome")}
-            </Button>
-          </div>
-        ) : visibleEntries.length === 0 && !loading ? (
-          <div className="flex-1 min-h-[200px] flex flex-col items-center justify-center text-muted-foreground opacity-10 gap-4 select-none pointer-events-none">
-            <Folder className="size-24" strokeWidth={1} />
-            <span className="text-xl font-black uppercase tracking-[0.2em]">
-              {t("fileManager.emptyFolder")}
-            </span>
-          </div>
-        ) : (
-          <div
-            className="relative w-full"
-            style={{ height: virtualizer.getTotalSize() }}
-          >
-            {virtualizer.getVirtualItems().map((vItem) => {
-              const entry = visibleEntries[vItem.index];
-              if (!entry) return null;
-              const isSelected = selected.has(entry.path);
-              const isFolderTarget =
-                dropTarget?.kind === "folder" && dropTarget.path === entry.path;
-              return (
-                <div
-                  key={entry.path}
-                  data-index={vItem.index}
-                  ref={virtualizer.measureElement}
-                  className="absolute top-0 left-0 w-full"
-                  style={{ transform: `translateY(${vItem.start}px)` }}
-                >
-                  <div
-                    data-local-path={entry.path}
-                    draggable
-                    style={rowStyle}
-                    className={cn(
-                      "grid gap-2 px-3 items-center text-xs cursor-default border-b border-border hover:bg-muted/50 rounded-none select-none transition-colors h-[34px]",
-                      isSelected &&
-                        "bg-accent-brand/10 hover:bg-accent-brand/10",
-                      isFolderTarget &&
-                        "bg-accent-brand/20 outline outline-1 outline-dashed outline-accent-brand",
-                      entry.hidden && "opacity-60",
-                    )}
-                    onClick={(e) => handleRowClick(entry, e)}
-                    onContextMenu={(e) => openContextMenu(e, entry)}
-                    onDragStart={(e) => handleRowDragStart(e, entry)}
-                    onDragOver={(e) => handleFolderDragOver(e, entry)}
-                    onDragLeave={(e) => handleFolderDragLeave(e, entry)}
-                    onDrop={(e) => handleFolderDrop(e, entry)}
-                    title={entry.path}
-                  >
-                    <div className="flex items-center gap-2.5 overflow-hidden pointer-events-none">
-                      <span className="shrink-0">
-                        <LocalEntryIcon entry={entry} />
-                      </span>
-                      {renaming?.path === entry.path ? (
-                        <input
-                          ref={renameInputRef}
-                          value={renaming.name}
-                          onChange={(e) =>
-                            setRenaming({
-                              path: entry.path,
-                              name: e.target.value,
-                            })
-                          }
-                          onKeyDown={(e) => {
-                            e.stopPropagation();
-                            if (e.key === "Enter") void submitRename();
-                            if (e.key === "Escape") setRenaming(null);
-                          }}
-                          onBlur={() => void submitRename()}
-                          onClick={(e) => e.stopPropagation()}
-                          onMouseDown={(e) => e.stopPropagation()}
-                          draggable={false}
-                          onDragStart={(e) => e.preventDefault()}
-                          className="flex-1 min-w-0 border border-accent-brand/60 bg-card px-2 py-0.5 text-xs rounded-none outline-none focus:ring-1 focus:ring-accent-brand/50 pointer-events-auto"
-                        />
-                      ) : (
-                        <span className="font-bold truncate tracking-tight">
-                          {entry.name}
-                          {entry.type === "link" && entry.linkTarget && (
-                            <span className="text-accent-brand ml-1 font-normal">
-                              → {entry.linkTarget}
-                            </span>
-                          )}
-                        </span>
-                      )}
-                    </div>
-                    {columns.isVisible("modified") && (
-                      <span className="text-muted-foreground truncate pointer-events-none tabular-nums">
-                        {formatLocalModified(entry.modifiedTimestamp)}
-                      </span>
-                    )}
-                    {columns.isVisible("size") && (
-                      <span className="text-muted-foreground text-right pointer-events-none tabular-nums truncate">
-                        {entry.type === "directory"
-                          ? "--"
-                          : formatFileSize(entry.size)}
-                      </span>
-                    )}
-                    {columns.isVisible("kind") && (
-                      <span className="text-muted-foreground truncate pointer-events-none">
-                        {describeLocalKind(entry)}
-                      </span>
-                    )}
-                  </div>
-                </div>
-              );
-            })}
-          </div>
-        )}
-      </div>
-
-      {/* Sits outside the scrolling list: an absolutely positioned child of a
-          scroll container scrolls away with the content, so the hint would
-          land above the viewport whenever the list is scrolled down. */}
-      {showPaneOverlay && (
-        <div className="absolute inset-0 flex items-center justify-center bg-background/50 border-2 border-dashed border-primary z-10 pointer-events-none">
-          <div className="text-center p-6 bg-card/95 border border-accent-brand/40 flex flex-col items-center gap-3">
-            <Download className="size-10 text-accent-brand" />
-            <p className="text-[10px] font-bold uppercase tracking-widest text-accent-brand">
-              {t("fileManager.dropToDownloadHere")}
-            </p>
-          </div>
-        </div>
-      )}
-
-      <LocalFileContextMenu
-        x={contextMenu.x}
-        y={contextMenu.y}
-        entries={contextMenu.entries}
-        isVisible={contextMenu.visible}
-        showHidden={showHidden}
-        canUpload={!!onUploadToRemote}
-        onClose={closeContextMenu}
-        onOpen={openEntry}
-        onUploadToRemote={(targets) =>
-          onUploadToRemote?.(targets.map((e) => e.path))
-        }
-        onReveal={(entry) => {
-          const target = entry?.path ?? currentPath;
-          if (target) void revealLocalPath(target);
-        }}
-        onRename={startRename}
-        onCopyPath={copyEntryPaths}
-        onNewFolder={() => setCreating("folder")}
-        onNewFile={() => setCreating("file")}
-        onRefresh={refresh}
-        onToggleHidden={() => setShowHidden((prev) => !prev)}
-        onDelete={trashEntries}
-      />
-
-      {/* Footer */}
-      <div className="flex items-center justify-between px-3 py-1 border-t border-border text-[10px] text-muted-foreground">
-        <span>
-          {t("fileManager.localItemCount", { count: visibleEntries.length })}
-        </span>
-        {selected.size > 0 && (
-          <span>
-            {t("fileManager.localSelectedCount", { count: selected.size })}
-          </span>
-        )}
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/SftpTransferTab.tsx b/plugins/file-manager/src/frontend/SftpTransferTab.tsx
deleted file mode 100644
index 55c079495..000000000
--- a/plugins/file-manager/src/frontend/SftpTransferTab.tsx
+++ /dev/null
@@ -1,1207 +0,0 @@
-import { useSettings } from "@termix/plugin-sdk/frontend";
-import { fileManagerHostSetting } from "./host-settings";
-import {
-  useCallback,
-  useEffect,
-  useMemo,
-  useRef,
-  useState,
-  type MouseEvent,
-} from "react";
-import { toast } from "sonner";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import type { TranslateFn as TFunction } from "@termix/plugin-sdk/frontend";
-import {
-  ArrowLeftRight,
-  File as FileIcon,
-  Folder,
-  RefreshCw,
-  Server,
-} from "lucide-react";
-import {
-  AlertDialog,
-  AlertDialogAction,
-  AlertDialogCancel,
-  AlertDialogContent,
-  AlertDialogDescription,
-  AlertDialogFooter,
-  AlertDialogHeader,
-  AlertDialogTitle,
-  Button,
-  Dialog,
-  DialogContent,
-  DialogFooter,
-  DialogHeader,
-  DialogTitle,
-  Input,
-  Label,
-  Select2,
-} from "@termix/plugin-sdk/ui";
-import {
-  addTransferRecent,
-  transferToHost,
-  type TransferProgressResponse,
-} from "./api/transfer-api";
-import { getSSHHosts } from "./api/hosts";
-import {
-  browseSSHDirectory,
-  changeSSHPermissions,
-  createSSHFolder,
-  deleteSSHItem,
-  ensureSSHSessionForHost,
-  renameSSHItem,
-  type HostConnectionState,
-} from "./api/ssh-file-operations-api";
-import type { SSHHost } from "./host-types";
-import { PermissionsDialog } from "./components/PermissionsDialog";
-import { formatFileSize } from "./file-manager-utils";
-import { beginTransferProgressMonitoring } from "./transferProgressMonitor";
-import { createFormatTransferMetrics } from "./transferMetricsFormat";
-import {
-  hasSameHostTransferConflict,
-  joinRemotePath,
-  normalizeRemoteDir,
-} from "./sftp-transfer-utils";
-
-type EntryType = "file" | "directory" | "link" | "other";
-type PaneId = "source" | "dest";
-
-interface BrowserEntry {
-  name: string;
-  path: string;
-  type: EntryType;
-  size?: number;
-  modified?: string;
-  modifiedTimestamp?: number;
-  permissions?: string;
-  owner?: string;
-  group?: string;
-}
-
-interface RemotePaneState {
-  hostId: string;
-  sessionId: string | null;
-  connectionState: HostConnectionState;
-  error: string | null;
-  path: string;
-  entries: BrowserEntry[];
-  selectedPaths: Set<string>;
-  loading: boolean;
-}
-
-interface ContextMenuState {
-  x: number;
-  y: number;
-  paneId: PaneId;
-  entry?: BrowserEntry;
-}
-
-interface NameDialogState {
-  kind: "rename" | "mkdir";
-  paneId: PaneId;
-  entry?: BrowserEntry;
-  value: string;
-}
-
-interface PermissionsTarget {
-  paneId: PaneId;
-  entry: BrowserEntry;
-}
-
-const defaultRemotePane = (): RemotePaneState => ({
-  hostId: "",
-  sessionId: null,
-  connectionState: "disconnected",
-  error: null,
-  path: "/",
-  entries: [],
-  selectedPaths: new Set(),
-  loading: false,
-});
-
-function formatModified(entry: BrowserEntry): string {
-  if (entry.modifiedTimestamp !== undefined) {
-    const date = new Date(entry.modifiedTimestamp * 1000);
-    if (!Number.isNaN(date.getTime())) {
-      const pad = (part: number) => String(part).padStart(2, "0");
-      return `${date.getFullYear()}-${pad(date.getMonth() + 1)}-${pad(date.getDate())} ${pad(date.getHours())}:${pad(date.getMinutes())}`;
-    }
-  }
-  if (entry.modified) {
-    const date = new Date(entry.modified);
-    if (!Number.isNaN(date.getTime())) {
-      const pad = (part: number) => String(part).padStart(2, "0");
-      return `${date.getFullYear()}-${pad(date.getMonth() + 1)}-${pad(date.getDate())} ${pad(date.getHours())}:${pad(date.getMinutes())}`;
-    }
-  }
-  return "-";
-}
-
-function parentRemotePath(remotePath: string): string {
-  const normalized = normalizeRemoteDir(remotePath);
-  if (normalized === "/") return "/";
-  const index = normalized.lastIndexOf("/");
-  return index <= 0 ? "/" : normalized.slice(0, index);
-}
-
-function connectionLabel(state: HostConnectionState, t: TFunction): string {
-  switch (state) {
-    case "ready":
-      return t("transfer.hostReady");
-    case "connecting":
-      return t("transfer.hostConnecting");
-    case "auth_required":
-      return t("transfer.hostAuthRequired");
-    case "error":
-      return t("transfer.hostConnectionFailed");
-    default:
-      return t("transfer.hostDisconnected");
-  }
-}
-
-function FileRow({
-  entry,
-  selected,
-  onToggle,
-  onOpen,
-  draggable = false,
-  onDragStart,
-  onDragEnd,
-  onDropPayload,
-  acceptsDrop,
-  onContextMenu,
-  t,
-}: {
-  entry: BrowserEntry;
-  selected: boolean;
-  onToggle: () => void;
-  onOpen?: () => void;
-  draggable?: boolean;
-  onDragStart?: () => void;
-  onDragEnd?: () => void;
-  onDropPayload?: () => void;
-  acceptsDrop?: boolean;
-  onContextMenu?: (
-    event: MouseEvent<HTMLDivElement>,
-    entry: BrowserEntry,
-  ) => void;
-  t: TFunction;
-}) {
-  const Icon = entry.type === "directory" ? Folder : FileIcon;
-  const canDrop = entry.type === "directory" && !!onDropPayload && acceptsDrop;
-  return (
-    <div
-      className={`grid grid-cols-[minmax(0,1fr)_8.5rem_5rem] items-center border-b border-border/70 text-xs ${
-        selected ? "bg-accent-brand/10 text-accent-brand" : "hover:bg-muted/50"
-      }`}
-      draggable={draggable}
-      onDragStart={(event) => {
-        if (!draggable || !onDragStart) return;
-        event.dataTransfer.effectAllowed = "copyMove";
-        event.dataTransfer.setData("text/plain", entry.path);
-        onDragStart();
-      }}
-      onDragEnd={onDragEnd}
-      onDragOver={(event) => {
-        if (!canDrop) return;
-        event.preventDefault();
-        event.dataTransfer.dropEffect = "copy";
-      }}
-      onDrop={(event) => {
-        if (!canDrop) return;
-        event.preventDefault();
-        event.stopPropagation();
-        onDropPayload();
-      }}
-      onContextMenu={(event) => onContextMenu?.(event, entry)}
-    >
-      <button
-        type="button"
-        className="flex min-w-0 items-center gap-2 px-3 py-2 text-left"
-        onClick={onToggle}
-        onDoubleClick={entry.type === "directory" ? onOpen : undefined}
-      >
-        <Icon
-          className={`size-3.5 shrink-0 ${
-            entry.type === "directory"
-              ? "text-yellow-500"
-              : "text-muted-foreground"
-          }`}
-        />
-        <span className="truncate font-medium" title={entry.path}>
-          {entry.name}
-        </span>
-      </button>
-      <div
-        className="px-3 py-2 text-[10px] tabular-nums text-muted-foreground"
-        title={entry.modified || undefined}
-      >
-        {formatModified(entry)}
-      </div>
-      <div className="flex items-center justify-end gap-2 px-3 py-2 text-[10px] text-muted-foreground">
-        {entry.type === "directory" && onOpen ? (
-          <button
-            type="button"
-            className="font-bold uppercase tracking-widest hover:text-accent-brand"
-            onClick={onOpen}
-          >
-            {t("sftpTransfer.open")}
-          </button>
-        ) : (
-          <span>{formatFileSize(entry.size)}</span>
-        )}
-      </div>
-    </div>
-  );
-}
-
-function ContextMenuButton({
-  children,
-  disabled,
-  onClick,
-}: {
-  children: string;
-  disabled?: boolean;
-  onClick: () => void;
-}) {
-  return (
-    <button
-      type="button"
-      disabled={disabled}
-      className="w-full px-3 py-2 text-left text-xs hover:bg-muted disabled:cursor-not-allowed disabled:text-muted-foreground/50 disabled:hover:bg-transparent"
-      onClick={(event) => {
-        event.stopPropagation();
-        if (!disabled) onClick();
-      }}
-    >
-      {children}
-    </button>
-  );
-}
-
-function RemotePane({
-  title,
-  hosts,
-  pane,
-  setPane,
-  dragActive,
-  onDragStart,
-  onDragEnd,
-  onDropPayload,
-  onPaneContextMenu,
-  onEntryContextMenu,
-  t,
-}: {
-  title: string;
-  hosts: SSHHost[];
-  pane: RemotePaneState;
-  setPane: (updater: (pane: RemotePaneState) => RemotePaneState) => void;
-  dragActive: boolean;
-  onDragStart: (paths: string[], pane: RemotePaneState) => void;
-  onDragEnd: () => void;
-  onDropPayload?: (destinationPath: string) => void;
-  onPaneContextMenu: (event: MouseEvent<HTMLDivElement>) => void;
-  onEntryContextMenu: (
-    event: MouseEvent<HTMLDivElement>,
-    entry: BrowserEntry,
-  ) => void;
-  t: TFunction;
-}) {
-  const selectedHost = hosts.find((host) => String(host.id) === pane.hostId);
-  const acceptsDrop = dragActive && !!pane.sessionId && !!onDropPayload;
-
-  const loadRemotePath = useCallback(
-    async (sessionId: string, nextPath: string) => {
-      setPane((current) => ({ ...current, loading: true, error: null }));
-      const result = await browseSSHDirectory(sessionId, nextPath);
-      if (result.status !== "ok") {
-        setPane((current) => ({
-          ...current,
-          entries: [],
-          loading: false,
-          error: t("sftpTransfer.failedToListFiles"),
-        }));
-        return;
-      }
-      const base = normalizeRemoteDir(result.path || nextPath);
-      setPane((current) => ({
-        ...current,
-        path: base,
-        entries: (result.files as BrowserEntry[])
-          .filter((entry) => entry.name !== "." && entry.name !== "..")
-          .map((entry) => ({
-            name: entry.name,
-            type: entry.type,
-            path: joinRemotePath(base, entry.name),
-            size: entry.size,
-            modified: entry.modified,
-            modifiedTimestamp: entry.modifiedTimestamp,
-          }))
-          .sort((a, b) => {
-            if (a.type === "directory" && b.type !== "directory") return -1;
-            if (a.type !== "directory" && b.type === "directory") return 1;
-            return a.name.localeCompare(b.name);
-          }),
-        selectedPaths: new Set(),
-        loading: false,
-      }));
-    },
-    [setPane, t],
-  );
-
-  const connect = useCallback(
-    async (host: SSHHost) => {
-      setPane((current) => ({
-        ...current,
-        hostId: String(host.id),
-        sessionId: null,
-        connectionState: "connecting",
-        error: null,
-        entries: [],
-        selectedPaths: new Set(),
-      }));
-      const result = await ensureSSHSessionForHost(host);
-      if (result.state !== "ready" || !result.sessionId) {
-        setPane((current) => ({
-          ...current,
-          connectionState: result.state,
-          error: result.error || null,
-          sessionId: result.sessionId || null,
-        }));
-        return;
-      }
-      setPane((current) => ({
-        ...current,
-        connectionState: "ready",
-        sessionId: result.sessionId || String(host.id),
-        path: fileManagerHostSetting(host, "defaultPath", "") || ".",
-      }));
-      await loadRemotePath(
-        result.sessionId || String(host.id),
-        fileManagerHostSetting(host, "defaultPath", "") || ".",
-      );
-    },
-    [loadRemotePath, setPane],
-  );
-
-  const toggle = (entryPath: string) => {
-    setPane((current) => {
-      const next = new Set(current.selectedPaths);
-      if (next.has(entryPath)) next.delete(entryPath);
-      else next.add(entryPath);
-      return { ...current, selectedPaths: next };
-    });
-  };
-
-  const getDragPaths = (entryPath: string): string[] => {
-    if (pane.selectedPaths.has(entryPath) && pane.selectedPaths.size > 0) {
-      return [...pane.selectedPaths];
-    }
-    setPane((current) => ({
-      ...current,
-      selectedPaths: new Set([entryPath]),
-    }));
-    return [entryPath];
-  };
-
-  return (
-    <section
-      className={`flex min-h-0 flex-1 flex-col border bg-card transition-colors ${
-        acceptsDrop ? "border-accent-brand/50" : "border-border"
-      }`}
-      onDragOver={(event) => {
-        if (!acceptsDrop) return;
-        event.preventDefault();
-        event.dataTransfer.dropEffect = "copy";
-      }}
-      onDrop={(event) => {
-        if (!acceptsDrop) return;
-        event.preventDefault();
-        onDropPayload?.(pane.path);
-      }}
-    >
-      <div className="flex items-center justify-between gap-2 border-b border-border px-3 py-2">
-        <div className="flex min-w-0 items-center gap-2">
-          <Server className="size-4 text-accent-brand" />
-          <span className="truncate text-xs font-bold uppercase tracking-widest">
-            {title}
-          </span>
-        </div>
-        <Button
-          variant="ghost"
-          size="icon"
-          className="size-7 rounded-none"
-          disabled={!pane.sessionId || pane.loading}
-          onClick={() =>
-            pane.sessionId && void loadRemotePath(pane.sessionId, pane.path)
-          }
-        >
-          <RefreshCw
-            className={`size-3.5 ${pane.loading ? "animate-spin" : ""}`}
-          />
-        </Button>
-      </div>
-
-      <div className="grid gap-2 border-b border-border px-3 py-2">
-        <Select2
-          value={pane.hostId}
-          onChange={(event) => {
-            const host = hosts.find(
-              (item) => String(item.id) === event.target.value,
-            );
-            if (host) void connect(host);
-          }}
-          className="h-8 w-full rounded-none border-border bg-background px-2 text-xs outline-none focus:ring-1 focus:ring-ring"
-        >
-          <option value="" disabled>
-            {t("sftpTransfer.selectHost")}
-          </option>
-          {hosts.map((host) => (
-            <option key={host.id} value={String(host.id)}>
-              {host.name || host.ip}
-            </option>
-          ))}
-        </Select2>
-        <div className="flex items-center gap-2">
-          <Input
-            value={pane.path}
-            onChange={(event) =>
-              setPane((current) => ({ ...current, path: event.target.value }))
-            }
-            onKeyDown={(event) => {
-              if (event.key === "Enter" && pane.sessionId) {
-                void loadRemotePath(pane.sessionId, pane.path);
-              }
-            }}
-            disabled={!pane.sessionId}
-            className="h-8 rounded-none border-border bg-muted/40 font-mono text-xs"
-          />
-          <Button
-            variant="outline"
-            className="h-8 rounded-none px-2 text-xs"
-            disabled={!pane.sessionId || pane.path === "/"}
-            onClick={() =>
-              pane.sessionId &&
-              void loadRemotePath(pane.sessionId, parentRemotePath(pane.path))
-            }
-          >
-            {t("sftpTransfer.up")}
-          </Button>
-        </div>
-        <div
-          className={`text-[10px] font-bold uppercase tracking-widest ${
-            pane.connectionState === "ready"
-              ? "text-green-500"
-              : pane.connectionState === "error"
-                ? "text-red-400"
-                : "text-muted-foreground"
-          }`}
-        >
-          {selectedHost
-            ? connectionLabel(pane.connectionState, t)
-            : t("sftpTransfer.noHostSelected")}
-          {pane.error ? `: ${pane.error}` : ""}
-        </div>
-      </div>
-
-      <div
-        className="min-h-0 flex-1 overflow-y-auto"
-        onContextMenu={onPaneContextMenu}
-      >
-        <div className="grid grid-cols-[minmax(0,1fr)_8.5rem_5rem] border-b border-border/70 px-3 py-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-          <span>{t("sftpTransfer.name")}</span>
-          <span>{t("sftpTransfer.modified")}</span>
-          <span className="text-right">{t("sftpTransfer.size")}</span>
-        </div>
-        {pane.entries.length === 0 && !pane.loading ? (
-          <div className="p-3 text-xs text-muted-foreground">
-            {t("sftpTransfer.noFiles")}
-          </div>
-        ) : (
-          pane.entries.map((entry) => (
-            <FileRow
-              key={entry.path}
-              entry={entry}
-              selected={pane.selectedPaths.has(entry.path)}
-              onToggle={() => toggle(entry.path)}
-              draggable
-              onDragStart={() => onDragStart(getDragPaths(entry.path), pane)}
-              onDragEnd={onDragEnd}
-              acceptsDrop={acceptsDrop}
-              onDropPayload={
-                entry.type === "directory"
-                  ? () => onDropPayload?.(entry.path)
-                  : undefined
-              }
-              onOpen={
-                entry.type === "directory" && pane.sessionId
-                  ? () => void loadRemotePath(pane.sessionId!, entry.path)
-                  : undefined
-              }
-              onContextMenu={onEntryContextMenu}
-              t={t}
-            />
-          ))
-        )}
-      </div>
-    </section>
-  );
-}
-
-export function SftpTransferTab() {
-  const confirmBeforeTrash =
-    useSettings("user").values.confirmBeforeTrash !== false;
-  const { t } = useTranslation();
-  const formatTransferMetrics = useMemo(
-    () => createFormatTransferMetrics(t),
-    [t],
-  );
-  const [hosts, setHosts] = useState<SSHHost[]>([]);
-  const [hostsLoading, setHostsLoading] = useState(false);
-  const [sourcePane, setSourcePaneState] = useState(defaultRemotePane);
-  const [destPane, setDestPaneState] = useState(defaultRemotePane);
-  const [move, setMove] = useState(false);
-  const [transferring, setTransferring] = useState(false);
-  const [dragActive, setDragActive] = useState(false);
-  const [contextMenu, setContextMenu] = useState<ContextMenuState | null>(null);
-  const [nameDialog, setNameDialog] = useState<NameDialogState | null>(null);
-  const [deleteTarget, setDeleteTarget] = useState<ContextMenuState | null>(
-    null,
-  );
-  const [permissionsTarget, setPermissionsTarget] =
-    useState<PermissionsTarget | null>(null);
-
-  const setSourcePane = useCallback(
-    (updater: (pane: RemotePaneState) => RemotePaneState) =>
-      setSourcePaneState(updater),
-    [],
-  );
-  const setDestPane = useCallback(
-    (updater: (pane: RemotePaneState) => RemotePaneState) =>
-      setDestPaneState(updater),
-    [],
-  );
-
-  useEffect(() => {
-    setHostsLoading(true);
-    getSSHHosts()
-      .then((data) =>
-        setHosts(
-          data.filter(
-            (host) =>
-              fileManagerHostSetting(host, "enableFileManager", true) &&
-              host.connectionType !== "rdp" &&
-              host.connectionType !== "vnc",
-          ),
-        ),
-      )
-      .catch(() => setHosts([]))
-      .finally(() => setHostsLoading(false));
-  }, []);
-
-  useEffect(() => {
-    if (!contextMenu) return;
-    const close = () => setContextMenu(null);
-    window.addEventListener("click", close);
-    window.addEventListener("keydown", close);
-    return () => {
-      window.removeEventListener("click", close);
-      window.removeEventListener("keydown", close);
-    };
-  }, [contextMenu]);
-
-  const sourceSelectionCount = sourcePane.selectedPaths.size;
-
-  const getPane = (paneId: PaneId): RemotePaneState =>
-    paneId === "source" ? sourcePane : destPane;
-
-  const getContextPaths = (menu: ContextMenuState): string[] => {
-    if (!menu.entry) return [];
-    const selectedPaths = getPane(menu.paneId).selectedPaths;
-    if (selectedPaths.has(menu.entry.path) && selectedPaths.size > 0) {
-      return [...selectedPaths];
-    }
-    return [menu.entry.path];
-  };
-
-  const getContextEntries = (menu: ContextMenuState): BrowserEntry[] => {
-    const paths = new Set(getContextPaths(menu));
-    return getPane(menu.paneId).entries.filter((entry) =>
-      paths.has(entry.path),
-    );
-  };
-
-  const refreshRemotePane = async (paneId: PaneId) => {
-    const pane = getPane(paneId);
-    const setPane = paneId === "source" ? setSourcePane : setDestPane;
-    if (!pane.sessionId) return;
-    setPane((current) => ({ ...current, loading: true, error: null }));
-    const refreshed = await browseSSHDirectory(pane.sessionId, pane.path);
-    if (refreshed.status !== "ok") {
-      setPane((current) => ({
-        ...current,
-        loading: false,
-        error: t("sftpTransfer.failedToRefresh"),
-      }));
-      return;
-    }
-    const base = normalizeRemoteDir(refreshed.path || pane.path);
-    setPane((current) => ({
-      ...current,
-      path: base,
-      entries: refreshed.files
-        .filter((entry) => entry.name !== "." && entry.name !== "..")
-        .map((entry) => ({
-          ...entry,
-          type: entry.type,
-          modified: entry.modified,
-          modifiedTimestamp: entry.modifiedTimestamp,
-          path: joinRemotePath(base, entry.name),
-        })),
-      selectedPaths: new Set(),
-      loading: false,
-    }));
-  };
-
-  const openPaneContextMenu = (
-    event: MouseEvent<HTMLDivElement>,
-    paneId: PaneId,
-  ) => {
-    event.preventDefault();
-    setContextMenu({ x: event.clientX, y: event.clientY, paneId });
-  };
-
-  const openEntryContextMenu = (
-    event: MouseEvent<HTMLDivElement>,
-    paneId: PaneId,
-    entry: BrowserEntry,
-  ) => {
-    event.preventDefault();
-    event.stopPropagation();
-    if (!getPane(paneId).selectedPaths.has(entry.path)) {
-      const setPane = paneId === "source" ? setSourcePane : setDestPane;
-      setPane((current) => ({
-        ...current,
-        selectedPaths: new Set([entry.path]),
-      }));
-    }
-    setContextMenu({ x: event.clientX, y: event.clientY, paneId, entry });
-  };
-
-  const runTransfer = async ({
-    paths,
-    destinationPath,
-    sourceSessionId,
-    sourceHostId,
-    destinationSessionId,
-    destinationHostId,
-    move: moveFiles,
-    refreshTarget,
-    sourceRefreshTarget,
-  }: {
-    paths: string[];
-    destinationPath: string;
-    sourceSessionId: string | null;
-    sourceHostId: string;
-    destinationSessionId: string | null;
-    destinationHostId: string;
-    move: boolean;
-    refreshTarget?: PaneId;
-    sourceRefreshTarget?: PaneId;
-  }) => {
-    if (!sourceSessionId || !destinationSessionId || paths.length === 0) {
-      return;
-    }
-    const destDir = normalizeRemoteDir(destinationPath);
-    if (
-      sourceHostId === destinationHostId &&
-      hasSameHostTransferConflict(paths, destDir)
-    ) {
-      toast.error(t("sftpTransfer.destinationInsideSource"));
-      return;
-    }
-
-    let destTarget = destDir;
-    if (paths.length === 1) {
-      const sourceEntries =
-        sourcePane.sessionId === sourceSessionId
-          ? sourcePane.entries
-          : destPane.sessionId === sourceSessionId
-            ? destPane.entries
-            : [];
-      const entry = sourceEntries.find((e) => e.path === paths[0]);
-      if (entry && entry.type === "file") {
-        destTarget = joinRemotePath(destDir, entry.name);
-      }
-    }
-
-    setTransferring(true);
-    try {
-      const { transferId } = await transferToHost(
-        sourceSessionId,
-        paths,
-        destinationSessionId,
-        destTarget,
-        moveFiles,
-        "auto",
-      );
-      const monitorHandle = beginTransferProgressMonitoring(transferId, t, {
-        formatTransferMetrics,
-      });
-      if (!monitorHandle) return;
-
-      const finalStatus: TransferProgressResponse =
-        await monitorHandle.waitForCompletion;
-
-      if (
-        finalStatus.status === "success" ||
-        finalStatus.status === "partial"
-      ) {
-        void addTransferRecent(
-          Number(sourceHostId),
-          Number(destinationHostId),
-          destDir,
-          destDir,
-        );
-        if (refreshTarget) void refreshRemotePane(refreshTarget);
-        if (moveFiles && sourceRefreshTarget) {
-          void refreshRemotePane(sourceRefreshTarget);
-        }
-      }
-    } catch (error) {
-      toast.error(
-        error instanceof Error ? error.message : t("transfer.transferError"),
-      );
-    } finally {
-      setTransferring(false);
-    }
-  };
-
-  const transferSelection = async (
-    paths = [...sourcePane.selectedPaths],
-    destinationPath = destPane.path,
-    sourceSessionId = sourcePane.sessionId,
-    sourceHostId = sourcePane.hostId,
-  ) => {
-    await runTransfer({
-      paths,
-      destinationPath,
-      sourceSessionId,
-      sourceHostId,
-      destinationSessionId: destPane.sessionId,
-      destinationHostId: destPane.hostId,
-      move,
-      refreshTarget: "dest",
-      sourceRefreshTarget: "source",
-    });
-  };
-
-  const dragSourceRef = useRef<{
-    paths: string[];
-    hostId: string;
-    sessionId: string;
-    paneId: PaneId;
-  }>({ paths: [], hostId: "", sessionId: "", paneId: "source" });
-
-  const startRemoteDrag = (
-    paneId: PaneId,
-    paths: string[],
-    pane: RemotePaneState,
-  ) => {
-    if (!pane.sessionId) return;
-    setDragActive(true);
-    dragSourceRef.current = {
-      paths,
-      hostId: pane.hostId,
-      sessionId: pane.sessionId,
-      paneId,
-    };
-  };
-
-  const handleDestinationDrop = (destinationPath: string) => {
-    if (!dragActive || transferring) return;
-    setDragActive(false);
-    const { paths, hostId, sessionId, paneId } = dragSourceRef.current;
-    void runTransfer({
-      paths,
-      destinationPath,
-      sourceSessionId: sessionId,
-      sourceHostId: hostId,
-      destinationSessionId: destPane.sessionId,
-      destinationHostId: destPane.hostId,
-      move,
-      refreshTarget: "dest",
-      sourceRefreshTarget: paneId,
-    });
-  };
-
-  const handleCopyToTarget = async (menu: ContextMenuState) => {
-    const paths = getContextPaths(menu);
-    setContextMenu(null);
-    if (paths.length === 0) return;
-
-    if (menu.paneId === "source") {
-      await runTransfer({
-        paths,
-        destinationPath: destPane.path,
-        sourceSessionId: sourcePane.sessionId,
-        sourceHostId: sourcePane.hostId,
-        destinationSessionId: destPane.sessionId,
-        destinationHostId: destPane.hostId,
-        move: false,
-        refreshTarget: "dest",
-      });
-      return;
-    }
-
-    await runTransfer({
-      paths,
-      destinationPath: sourcePane.path,
-      sourceSessionId: destPane.sessionId,
-      sourceHostId: destPane.hostId,
-      destinationSessionId: sourcePane.sessionId,
-      destinationHostId: sourcePane.hostId,
-      move: false,
-      refreshTarget: "source",
-    });
-  };
-
-  const handleRefreshPane = async (paneId: PaneId) => {
-    setContextMenu(null);
-    await refreshRemotePane(paneId);
-  };
-
-  const handleNameDialogSubmit = async () => {
-    if (!nameDialog) return;
-    const value = nameDialog.value.trim();
-    if (!value) return;
-
-    const pane = getPane(nameDialog.paneId);
-    if (!pane.sessionId) return;
-
-    try {
-      if (nameDialog.kind === "mkdir") {
-        await createSSHFolder(pane.sessionId, pane.path, value);
-        await refreshRemotePane(nameDialog.paneId);
-        toast.success(t("sftpTransfer.folderCreated"));
-      } else if (nameDialog.entry) {
-        await renameSSHItem(pane.sessionId, nameDialog.entry.path, value);
-        await refreshRemotePane(nameDialog.paneId);
-        toast.success(t("sftpTransfer.itemRenamed"));
-      }
-      setNameDialog(null);
-    } catch (error) {
-      toast.error(
-        error instanceof Error ? error.message : t("sftpTransfer.actionFailed"),
-      );
-    }
-  };
-
-  const handleDeleteConfirmed = async (target = deleteTarget) => {
-    if (!target) return;
-    const entries = getContextEntries(target);
-    const paneId = target.paneId;
-    setDeleteTarget(null);
-    if (entries.length === 0) return;
-
-    const pane = getPane(paneId);
-    if (!pane.sessionId) return;
-
-    try {
-      for (const entry of entries) {
-        await deleteSSHItem(
-          pane.sessionId,
-          entry.path,
-          entry.type === "directory",
-        );
-      }
-      await refreshRemotePane(paneId);
-      toast.success(t("sftpTransfer.itemsDeleted", { count: entries.length }));
-    } catch (error) {
-      toast.error(
-        error instanceof Error ? error.message : t("sftpTransfer.deleteFailed"),
-      );
-    }
-  };
-
-  const handlePermissionsSave = async (
-    entry: BrowserEntry,
-    permissions: string,
-  ) => {
-    if (!permissionsTarget) return;
-    const pane = getPane(permissionsTarget.paneId);
-    if (!pane.sessionId)
-      throw new Error(t("sftpTransfer.noRemoteSessionConnected"));
-    await changeSSHPermissions(pane.sessionId, entry.path, permissions);
-    await refreshRemotePane(permissionsTarget.paneId);
-    toast.success(t("sftpTransfer.permissionsUpdated"));
-  };
-
-  const canTransfer =
-    sourcePane.selectedPaths.size > 0 &&
-    !!sourcePane.sessionId &&
-    !!destPane.sessionId &&
-    !transferring;
-
-  const contextEntries = contextMenu ? getContextEntries(contextMenu) : [];
-  const contextPaths = contextMenu ? getContextPaths(contextMenu) : [];
-  const singleContextEntry =
-    contextEntries.length === 1 ? contextEntries[0] : contextMenu?.entry;
-  const contextPane = contextMenu ? getPane(contextMenu.paneId) : null;
-  const otherPane = contextMenu
-    ? getPane(contextMenu.paneId === "source" ? "dest" : "source")
-    : null;
-  const canCopyContext =
-    !!contextMenu?.entry &&
-    contextPaths.length > 0 &&
-    !transferring &&
-    !!contextPane?.sessionId &&
-    !!otherPane?.sessionId;
-  const canMutateContextPane = !!contextPane?.sessionId;
-  const permissionsDialogFile = permissionsTarget
-    ? {
-        ...permissionsTarget.entry,
-        type:
-          permissionsTarget.entry.type === "other"
-            ? "file"
-            : permissionsTarget.entry.type,
-      }
-    : null;
-
-  return (
-    <div className="flex h-full min-h-0 flex-col bg-background">
-      <header className="flex shrink-0 flex-col gap-3 border-b border-border px-4 py-3 md:flex-row md:items-center md:justify-between">
-        <div className="min-w-0">
-          <h1 className="text-sm font-bold uppercase tracking-widest">
-            {t("sftpTransfer.title")}
-          </h1>
-          <p className="mt-1 text-xs text-muted-foreground">
-            {t("sftpTransfer.description")}
-          </p>
-        </div>
-        <div className="flex flex-wrap items-center gap-2">
-          <Label className="flex items-center gap-2 border border-border px-3 py-1.5 text-xs">
-            <input
-              type="checkbox"
-              checked={move}
-              onChange={(event) => setMove(event.target.checked)}
-            />
-            {t("sftpTransfer.move")}
-          </Label>
-          <Button
-            className="h-8 rounded-none"
-            disabled={!canTransfer}
-            onClick={() => void transferSelection()}
-          >
-            <ArrowLeftRight className="size-4" />
-            {move ? t("sftpTransfer.move") : t("sftpTransfer.copy")}
-          </Button>
-        </div>
-      </header>
-
-      <div className="flex shrink-0 items-center justify-between gap-4 border-b border-border px-4 py-2 text-xs text-muted-foreground">
-        <span>
-          {t("sftpTransfer.itemsSelected", { count: sourceSelectionCount })}
-        </span>
-        <span>
-          {hostsLoading
-            ? t("sftpTransfer.loadingHosts")
-            : t("sftpTransfer.ready")}
-        </span>
-      </div>
-
-      <main className="grid min-h-0 flex-1 grid-cols-1 gap-3 p-3 lg:grid-cols-2">
-        <RemotePane
-          title={t("sftpTransfer.sourceServer")}
-          hosts={hosts}
-          pane={sourcePane}
-          setPane={setSourcePane}
-          dragActive={false}
-          onDragStart={(paths, pane) => startRemoteDrag("source", paths, pane)}
-          onDragEnd={() => setDragActive(false)}
-          onPaneContextMenu={(event) => openPaneContextMenu(event, "source")}
-          onEntryContextMenu={(event, entry) =>
-            openEntryContextMenu(event, "source", entry)
-          }
-          t={t}
-        />
-        <RemotePane
-          title={t("sftpTransfer.destinationServer")}
-          hosts={hosts}
-          pane={destPane}
-          setPane={setDestPane}
-          dragActive={dragActive}
-          onDragStart={(paths, pane) => startRemoteDrag("dest", paths, pane)}
-          onDragEnd={() => setDragActive(false)}
-          onDropPayload={handleDestinationDrop}
-          onPaneContextMenu={(event) => openPaneContextMenu(event, "dest")}
-          onEntryContextMenu={(event, entry) =>
-            openEntryContextMenu(event, "dest", entry)
-          }
-          t={t}
-        />
-      </main>
-
-      {contextMenu && (
-        <div
-          className="fixed z-50 min-w-48 border border-border bg-popover py-1 text-popover-foreground shadow-lg"
-          style={{ left: contextMenu.x, top: contextMenu.y }}
-          onContextMenu={(event) => event.preventDefault()}
-        >
-          {contextMenu.entry ? (
-            <>
-              <ContextMenuButton
-                disabled={!canCopyContext}
-                onClick={() => void handleCopyToTarget(contextMenu)}
-              >
-                {t("sftpTransfer.copyToTarget")}
-              </ContextMenuButton>
-              <ContextMenuButton
-                disabled={contextEntries.length !== 1 || !canMutateContextPane}
-                onClick={() => {
-                  if (!singleContextEntry) return;
-                  setContextMenu(null);
-                  setNameDialog({
-                    kind: "rename",
-                    paneId: contextMenu.paneId,
-                    entry: singleContextEntry,
-                    value: singleContextEntry.name,
-                  });
-                }}
-              >
-                {t("sftpTransfer.rename")}
-              </ContextMenuButton>
-              <ContextMenuButton
-                disabled={!canMutateContextPane || contextEntries.length === 0}
-                onClick={() => {
-                  if (confirmBeforeTrash) setDeleteTarget(contextMenu);
-                  else void handleDeleteConfirmed(contextMenu);
-                  setContextMenu(null);
-                }}
-              >
-                {t("sftpTransfer.delete")}
-              </ContextMenuButton>
-              <ContextMenuButton
-                disabled={contextEntries.length !== 1 || !canMutateContextPane}
-                onClick={() => {
-                  if (!singleContextEntry) return;
-                  setContextMenu(null);
-                  setPermissionsTarget({
-                    paneId: contextMenu.paneId,
-                    entry: singleContextEntry,
-                  });
-                }}
-              >
-                {t("sftpTransfer.editPermissions")}
-              </ContextMenuButton>
-            </>
-          ) : (
-            <>
-              <ContextMenuButton
-                disabled={!contextPane?.sessionId}
-                onClick={() => void handleRefreshPane(contextMenu.paneId)}
-              >
-                {t("sftpTransfer.refresh")}
-              </ContextMenuButton>
-              <ContextMenuButton
-                disabled={!canMutateContextPane}
-                onClick={() => {
-                  setNameDialog({
-                    kind: "mkdir",
-                    paneId: contextMenu.paneId,
-                    value: "",
-                  });
-                  setContextMenu(null);
-                }}
-              >
-                {t("sftpTransfer.createNewFolder")}
-              </ContextMenuButton>
-            </>
-          )}
-        </div>
-      )}
-
-      <Dialog
-        open={!!nameDialog}
-        onOpenChange={(open) => !open && setNameDialog(null)}
-      >
-        <DialogContent className="rounded-none border-border bg-card sm:max-w-sm">
-          <DialogHeader>
-            <DialogTitle className="text-xs font-bold uppercase tracking-widest">
-              {nameDialog?.kind === "mkdir"
-                ? t("sftpTransfer.createNewFolder")
-                : t("sftpTransfer.rename")}
-            </DialogTitle>
-          </DialogHeader>
-          <Input
-            autoFocus
-            value={nameDialog?.value || ""}
-            onChange={(event) =>
-              setNameDialog((current) =>
-                current ? { ...current, value: event.target.value } : current,
-              )
-            }
-            onKeyDown={(event) => {
-              if (event.key === "Enter") void handleNameDialogSubmit();
-            }}
-            className="h-9 rounded-none border-border bg-muted/40 text-xs"
-          />
-          <DialogFooter>
-            <Button
-              variant="ghost"
-              className="rounded-none text-xs"
-              onClick={() => setNameDialog(null)}
-            >
-              {t("sftpTransfer.cancel")}
-            </Button>
-            <Button
-              variant="outline"
-              className="rounded-none text-xs"
-              onClick={() => void handleNameDialogSubmit()}
-            >
-              {t("sftpTransfer.save")}
-            </Button>
-          </DialogFooter>
-        </DialogContent>
-      </Dialog>
-
-      <AlertDialog
-        open={!!deleteTarget}
-        onOpenChange={(open) => !open && setDeleteTarget(null)}
-      >
-        <AlertDialogContent className="rounded-none border-border bg-card">
-          <AlertDialogHeader>
-            <AlertDialogTitle className="text-xs font-bold uppercase tracking-widest">
-              {t("sftpTransfer.deleteSelectedItems")}
-            </AlertDialogTitle>
-            <AlertDialogDescription className="text-xs text-muted-foreground">
-              {t("sftpTransfer.deleteConfirm", {
-                count: deleteTarget
-                  ? getContextEntries(deleteTarget).length
-                  : 0,
-              })}
-            </AlertDialogDescription>
-          </AlertDialogHeader>
-          <AlertDialogFooter>
-            <AlertDialogCancel className="rounded-none text-xs">
-              {t("sftpTransfer.cancel")}
-            </AlertDialogCancel>
-            <AlertDialogAction
-              className="rounded-none text-xs"
-              onClick={() => void handleDeleteConfirmed()}
-            >
-              {t("sftpTransfer.delete")}
-            </AlertDialogAction>
-          </AlertDialogFooter>
-        </AlertDialogContent>
-      </AlertDialog>
-
-      <PermissionsDialog
-        file={permissionsDialogFile}
-        open={!!permissionsTarget}
-        onOpenChange={(open) => !open && setPermissionsTarget(null)}
-        onSave={handlePermissionsSave}
-      />
-    </div>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/SudoPasswordDialog.tsx b/plugins/file-manager/src/frontend/SudoPasswordDialog.tsx
deleted file mode 100644
index 9ade2eea9..000000000
--- a/plugins/file-manager/src/frontend/SudoPasswordDialog.tsx
+++ /dev/null
@@ -1,98 +0,0 @@
-import React, { useState, useEffect } from "react";
-import {
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogHeader,
-  DialogTitle,
-  DialogFooter,
-  Button,
-  PasswordInput,
-} from "@termix/plugin-sdk/ui";
-import { Shield } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-interface SudoPasswordDialogProps {
-  open: boolean;
-  onOpenChange: (open: boolean) => void;
-  onSubmit: (password: string) => void;
-}
-
-export function SudoPasswordDialog({
-  open,
-  onOpenChange,
-  onSubmit,
-}: SudoPasswordDialogProps) {
-  const { t } = useTranslation();
-  const [password, setPassword] = useState("");
-  const [loading, setLoading] = useState(false);
-
-  useEffect(() => {
-    if (!open) {
-      setPassword("");
-      setLoading(false);
-    }
-  }, [open]);
-
-  const handleSubmit = async (e?: React.FormEvent) => {
-    if (e) {
-      e.preventDefault();
-    }
-
-    if (!password.trim()) {
-      return;
-    }
-
-    setLoading(true);
-    onSubmit(password);
-  };
-
-  return (
-    <Dialog open={open} onOpenChange={onOpenChange}>
-      <DialogContent className="w-[calc(100vw-2rem)] sm:max-w-md rounded-none border-border bg-card">
-        <form onSubmit={handleSubmit}>
-          <DialogHeader>
-            <DialogTitle className="text-xs font-bold uppercase tracking-widest flex items-center gap-2">
-              <Shield className="size-4 text-accent-brand" />
-              {t("fileManager.sudoPasswordRequired")}
-            </DialogTitle>
-            <DialogDescription className="text-[10px] font-bold uppercase tracking-tight text-muted-foreground">
-              {t("fileManager.enterSudoPassword")}
-            </DialogDescription>
-          </DialogHeader>
-
-          <div className="py-4">
-            <PasswordInput
-              value={password}
-              onChange={(e) => setPassword(e.target.value)}
-              placeholder={t("fileManager.sudoPassword")}
-              className="rounded-none bg-muted/50 border-border text-xs focus:ring-1 focus:ring-accent-brand/50"
-              autoFocus
-              disabled={loading}
-            />
-          </div>
-
-          <DialogFooter>
-            <Button
-              type="button"
-              variant="ghost"
-              onClick={() => onOpenChange(false)}
-              disabled={loading}
-              className="rounded-none text-[10px] font-bold uppercase tracking-widest"
-            >
-              {t("common.cancel")}
-            </Button>
-            <Button
-              type="submit"
-              disabled={!password.trim() || loading}
-              variant="outline"
-              className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 rounded-none text-[10px] font-bold uppercase tracking-widest"
-            >
-              {loading ? t("common.loading") : t("common.confirm")}
-            </Button>
-          </DialogFooter>
-        </form>
-      </DialogContent>
-    </Dialog>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/TransferMonitor.tsx b/plugins/file-manager/src/frontend/TransferMonitor.tsx
deleted file mode 100644
index 819bfa40c..000000000
--- a/plugins/file-manager/src/frontend/TransferMonitor.tsx
+++ /dev/null
@@ -1,91 +0,0 @@
-import type { TranslateFn } from "@termix/plugin-sdk/frontend";
-import type { TranslateFn as TFunction } from "@termix/plugin-sdk/frontend";
-import { getTransferStatus, listActiveTransfers } from "./api/transfer-api";
-import { createFormatTransferMetrics } from "./transferMetricsFormat.ts";
-import {
-  beginTransferProgressMonitoring,
-  isTransferBeingMonitored,
-  showTransferCompletionToast,
-} from "./transferProgressMonitor.tsx";
-import {
-  clearStalePendingTransfer,
-  getPendingTransferIds,
-  isTransferNotified,
-} from "./transferNotificationStore.ts";
-import { runAdaptivePolling } from "@termix/plugin-sdk/ui";
-
-const POLL_INTERVAL_MS = 2000;
-
-/**
- * Resumes progress toasts for in-flight host-to-host transfers across app
- * reloads and tab switches. No UI of its own, so it runs as plain background
- * polling from activate() rather than a mounted headless component - core
- * cannot mount a plugin component outside a tab/panel/slot, and this needs
- * nothing from one.
- */
-export function startTransferMonitor(translate: TranslateFn): () => void {
-  // Every call here is a plain t("key") / t("key", {options}) - the calls
-  // these helpers make everywhere else, so the SDK's simpler translate
-  // function satisfies the same shape they're already typed against.
-  const t = translate as unknown as TFunction;
-  const formatTransferMetrics = createFormatTransferMetrics(t);
-
-  const reconcileTransfers = async () => {
-    let hasWork = false;
-    try {
-      const { transfers } = await listActiveTransfers();
-      hasWork = transfers.length > 0;
-      for (const transfer of transfers) {
-        if (isTransferBeingMonitored(transfer.transferId)) continue;
-        beginTransferProgressMonitoring(transfer.transferId, t, {
-          resumed: true,
-          initialStatus: transfer,
-          formatTransferMetrics,
-        });
-      }
-    } catch {
-      // Non-fatal: file-manager service may be unavailable briefly
-    }
-
-    const pendingTransferIds = getPendingTransferIds();
-    for (const transferId of pendingTransferIds) {
-      if (
-        isTransferBeingMonitored(transferId) ||
-        isTransferNotified(transferId)
-      ) {
-        continue;
-      }
-      hasWork = true;
-
-      try {
-        const status = await getTransferStatus(transferId);
-        if (status.status === "running") {
-          if (!isTransferBeingMonitored(transferId)) {
-            beginTransferProgressMonitoring(transferId, t, {
-              resumed: true,
-              initialStatus: status,
-              formatTransferMetrics,
-            });
-          }
-          continue;
-        }
-
-        showTransferCompletionToast(
-          status,
-          t,
-          undefined,
-          formatTransferMetrics,
-        );
-      } catch {
-        clearStalePendingTransfer(transferId);
-      }
-    }
-    return hasWork;
-  };
-
-  return runAdaptivePolling(reconcileTransfers, {
-    minIntervalMs: POLL_INTERVAL_MS,
-    maxIntervalMs: 30_000,
-    stablePollsPerStep: 1,
-  });
-}
diff --git a/plugins/file-manager/src/frontend/api/client.ts b/plugins/file-manager/src/frontend/api/client.ts
deleted file mode 100644
index 64402499d..000000000
--- a/plugins/file-manager/src/frontend/api/client.ts
+++ /dev/null
@@ -1,125 +0,0 @@
-import type { TermixApp } from "@termix/plugin-sdk/frontend";
-
-// Response bodies are typed at each call site's return type.
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-type Body = any;
-
-interface ClientResponse<T> {
-  data: T;
-  status: number;
-  headers: Record<string, unknown>;
-}
-
-/** The plugin client is axios underneath; these are the parts used here. */
-export interface FileManagerClient {
-  get<T = Body>(url: string, config?: unknown): Promise<ClientResponse<T>>;
-  delete<T = Body>(url: string, config?: unknown): Promise<ClientResponse<T>>;
-  post<T = Body>(
-    url: string,
-    body?: unknown,
-    config?: unknown,
-  ): Promise<ClientResponse<T>>;
-  put<T = Body>(
-    url: string,
-    body?: unknown,
-    config?: unknown,
-  ): Promise<ClientResponse<T>>;
-  patch<T = Body>(
-    url: string,
-    body?: unknown,
-    config?: unknown,
-  ): Promise<ClientResponse<T>>;
-  postForm<T = Body>(
-    url: string,
-    body?: unknown,
-    config?: unknown,
-  ): Promise<ClientResponse<T>>;
-}
-
-let current: TermixApp | null = null;
-
-/** Set in activate, cleared on deactivate. */
-export function setFileManagerApp(app: TermixApp | null): void {
-  current = app;
-}
-
-function app(): TermixApp {
-  if (!current) throw new Error("The file manager plugin is not active");
-  return current;
-}
-
-export function listHosts(): ReturnType<TermixApp["listHosts"]> {
-  return app().listHosts();
-}
-
-export function fileManagerApi(): FileManagerClient {
-  return app().api as unknown as FileManagerClient;
-}
-
-// A live SSH session (keyed by sessionId) remembers which backend holds it,
-// so every later call for that session reaches the same server.
-const sessionOrigins = new Map<string, "local" | "remote">();
-
-export function setSessionOrigin(
-  sessionId: string,
-  origin: "local" | "remote",
-): void {
-  sessionOrigins.set(sessionId, origin);
-}
-
-export function clearSessionOrigin(sessionId: string): void {
-  sessionOrigins.delete(sessionId);
-}
-
-export function getSessionOrigin(sessionId: string): "local" | "remote" {
-  return sessionOrigins.get(sessionId) === "remote" ? "remote" : "local";
-}
-
-export function getFileManagerApiForSession(
-  sessionId: string,
-): FileManagerClient {
-  return app().apiFor(
-    getSessionOrigin(sessionId),
-  ) as unknown as FileManagerClient;
-}
-
-export function fileManagerApiFor(
-  origin: "local" | "remote" | undefined,
-): FileManagerClient {
-  return app().apiFor(origin ?? "local") as unknown as FileManagerClient;
-}
-
-class ApiError extends Error {
-  constructor(
-    message: string,
-    public status?: number,
-    public code?: string,
-  ) {
-    super(message);
-    this.name = "ApiError";
-  }
-}
-
-interface AxiosLikeError {
-  message?: string;
-  response?: {
-    status?: number;
-    data?: { message?: string; error?: string; code?: string };
-  };
-}
-
-/** Turns an axios failure into an Error carrying the server's message. */
-export function handleApiError(error: unknown, operation: string): never {
-  const e = error as AxiosLikeError;
-  if (e?.response) {
-    const status = e.response.status;
-    const data = e.response.data ?? {};
-    const message =
-      data.message || data.error || e.message || `Failed to ${operation}`;
-    const apiError = new ApiError(message, status, data.code || data.error);
-    (apiError as ApiError & { response?: unknown }).response = e.response;
-    throw apiError;
-  }
-  if (error instanceof Error) throw error;
-  throw new ApiError(`Failed to ${operation}`);
-}
diff --git a/plugins/file-manager/src/frontend/api/file-manager-data-api.ts b/plugins/file-manager/src/frontend/api/file-manager-data-api.ts
deleted file mode 100644
index 76e5f26d5..000000000
--- a/plugins/file-manager/src/frontend/api/file-manager-data-api.ts
+++ /dev/null
@@ -1,156 +0,0 @@
-import { fileManagerApi, handleApiError } from "./client";
-
-/** Row shape shared by the recent / pinned / shortcut list endpoints. */
-export interface FileManagerEntry {
-  id: number;
-  name: string;
-  path: string;
-  lastOpened?: string;
-  [key: string]: unknown;
-}
-
-// FILE MANAGER DATA
-// ============================================================================
-
-export async function getRecentFiles(
-  hostId: number,
-): Promise<FileManagerEntry[]> {
-  try {
-    const response = await fileManagerApi().get("/recent", {
-      params: { hostId },
-    });
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "get recent files");
-    throw error;
-  }
-}
-
-export async function addRecentFile(
-  hostId: number,
-  path: string,
-  name?: string,
-): Promise<Record<string, unknown>> {
-  try {
-    const response = await fileManagerApi().post("/recent", {
-      hostId,
-      path,
-      name,
-    });
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "add recent file");
-    throw error;
-  }
-}
-
-export async function removeRecentFile(
-  hostId: number,
-  path: string,
-): Promise<Record<string, unknown>> {
-  try {
-    const response = await fileManagerApi().delete("/recent", {
-      data: { hostId, path },
-    });
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "remove recent file");
-    throw error;
-  }
-}
-
-export async function getPinnedFiles(
-  hostId: number,
-): Promise<FileManagerEntry[]> {
-  try {
-    const response = await fileManagerApi().get("/pinned", {
-      params: { hostId },
-    });
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "get pinned files");
-    throw error;
-  }
-}
-
-export async function addPinnedFile(
-  hostId: number,
-  path: string,
-  name?: string,
-): Promise<Record<string, unknown>> {
-  try {
-    const response = await fileManagerApi().post("/pinned", {
-      hostId,
-      path,
-      name,
-    });
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "add pinned file");
-    throw error;
-  }
-}
-
-export async function removePinnedFile(
-  hostId: number,
-  path: string,
-): Promise<Record<string, unknown>> {
-  try {
-    const response = await fileManagerApi().delete("/pinned", {
-      data: { hostId, path },
-    });
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "remove pinned file");
-    throw error;
-  }
-}
-
-export async function getFolderShortcuts(
-  hostId: number,
-): Promise<FileManagerEntry[]> {
-  try {
-    const response = await fileManagerApi().get("/shortcuts", {
-      params: { hostId },
-    });
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "get folder shortcuts");
-    throw error;
-  }
-}
-
-export async function addFolderShortcut(
-  hostId: number,
-  path: string,
-  name?: string,
-): Promise<Record<string, unknown>> {
-  try {
-    const response = await fileManagerApi().post("/shortcuts", {
-      hostId,
-      path,
-      name,
-    });
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "add folder shortcut");
-    throw error;
-  }
-}
-
-export async function removeFolderShortcut(
-  hostId: number,
-  path: string,
-): Promise<Record<string, unknown>> {
-  try {
-    const response = await fileManagerApi().delete("/shortcuts", {
-      data: { hostId, path },
-    });
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "remove folder shortcut");
-    throw error;
-  }
-}
-
-// ============================================================================
diff --git a/plugins/file-manager/src/frontend/api/hosts.ts b/plugins/file-manager/src/frontend/api/hosts.ts
deleted file mode 100644
index df74c48be..000000000
--- a/plugins/file-manager/src/frontend/api/hosts.ts
+++ /dev/null
@@ -1,6 +0,0 @@
-import { listHosts } from "./client";
-import type { SSHHost } from "../host-types";
-
-export async function getSSHHosts(): Promise<SSHHost[]> {
-  return (await listHosts()) as unknown as SSHHost[];
-}
diff --git a/plugins/file-manager/src/frontend/api/local-transfer-api.ts b/plugins/file-manager/src/frontend/api/local-transfer-api.ts
deleted file mode 100644
index 3a7e7d534..000000000
--- a/plugins/file-manager/src/frontend/api/local-transfer-api.ts
+++ /dev/null
@@ -1,181 +0,0 @@
-// Local disk <-> remote SFTP transfers for the desktop app's dual-pane file
-// manager. The bytes never pass through the renderer: the Electron main
-// process streams them between disk and the backend's existing
-// `uploadFileStream` / `downloadFileStream` routes (see
-// electron/local-files.cjs), and we only orchestrate + relay progress here.
-//
-// The renderer deliberately does not choose the URL or the auth headers. It
-// names the origin that owns the SSH session ("local" embedded backend or the
-// configured Remote Sync server) and the main process resolves the rest, so a
-// compromised renderer cannot turn the transfer bridge into an HTTP client.
-
-import {
-  getLocalAuthToken,
-  type LocalTransferOrigin,
-  type LocalTransferProgress,
-} from "@termix/plugin-sdk/frontend";
-import { getSessionOrigin } from "./client";
-import { getDeviceId } from "@termix/plugin-sdk/ui";
-
-export interface LocalTransferProgressEvent {
-  transferred: number;
-  total?: number;
-}
-
-type ProgressListener = (event: LocalTransferProgressEvent) => void;
-
-/** Error from the main process; `code` is e.g. "EEXIST" or "EBUSY". */
-export class LocalTransferError extends Error {
-  code?: string;
-  constructor(message: string, code?: string) {
-    super(message);
-    this.name = "LocalTransferError";
-    this.code = code;
-  }
-}
-
-const progressListeners = new Map<string, ProgressListener>();
-let unsubscribeProgress: (() => void) | null = null;
-
-function ensureProgressSubscription() {
-  if (unsubscribeProgress) return;
-  const api = window.electronAPI?.localTransfer;
-  if (!api) return;
-  unsubscribeProgress = api.onProgress((payload: LocalTransferProgress) => {
-    const listener = progressListeners.get(payload.transferId);
-    listener?.({ transferred: payload.transferred, total: payload.total });
-  });
-}
-
-function requireTransferApi() {
-  const api = window.electronAPI?.localTransfer;
-  if (!api) {
-    throw new Error("Local transfers are only available in the desktop app");
-  }
-  return api;
-}
-
-function transferOriginFor(sessionId: string): LocalTransferOrigin {
-  return getSessionOrigin(sessionId);
-}
-
-/**
- * The token the desktop renderer uses for the embedded backend. The `jwt`
- * cookie the main process would otherwise rely on lasts only a day after an
- * interactive login, while this token (and every request the app makes with
- * it) keeps working, so transfers must carry it too. Remote-origin transfers
- * are authenticated by the main process from its own Remote Sync state.
- */
-function localAuthTokenFor(origin: LocalTransferOrigin): string | undefined {
-  if (origin !== "local") return undefined;
-  return getLocalAuthToken() ?? undefined;
-}
-
-export function createLocalTransferId(prefix: string): string {
-  return `${prefix}-${Date.now()}-${Math.random().toString(36).slice(2, 10)}`;
-}
-
-/**
- * Streams a file from the local disk into `remoteDir` on the SSH session,
- * using the same multipart route the in-browser upload uses.
- */
-export async function uploadLocalFileToSession(options: {
-  sessionId: string;
-  remoteDir: string;
-  localPath: string;
-  fileName: string;
-  hostId?: number;
-  transferId?: string;
-  onProgress?: ProgressListener;
-}): Promise<void> {
-  const api = requireTransferApi();
-  ensureProgressSubscription();
-
-  const transferId =
-    options.transferId ?? createLocalTransferId("local-upload");
-
-  const fields: Record<string, string> = {
-    sessionId: options.sessionId,
-    path: options.remoteDir,
-  };
-  if (options.hostId !== undefined) fields.hostId = String(options.hostId);
-
-  if (options.onProgress) {
-    progressListeners.set(transferId, options.onProgress);
-  }
-  const origin = transferOriginFor(options.sessionId);
-  try {
-    const result = await api.upload({
-      transferId,
-      origin,
-      deviceId: getDeviceId() ?? undefined,
-      authToken: localAuthTokenFor(origin),
-      fields,
-      localPath: options.localPath,
-      fileName: options.fileName,
-    });
-    if (result.success !== true) {
-      throw new LocalTransferError(
-        result.error || "Upload failed",
-        result.code,
-      );
-    }
-  } finally {
-    progressListeners.delete(transferId);
-  }
-}
-
-/**
- * Streams a remote file from the SSH session straight to `destPath` on the
- * local disk. Refuses to replace an existing file (code "EEXIST") unless
- * `overwrite` is set.
- */
-export async function downloadSessionFileToLocal(options: {
-  sessionId: string;
-  remotePath: string;
-  destPath: string;
-  /** The folder the user picked; the main process refuses any destination outside it. */
-  rootPath: string;
-  expectedSize?: number;
-  overwrite?: boolean;
-  transferId?: string;
-  onProgress?: ProgressListener;
-}): Promise<void> {
-  const api = requireTransferApi();
-  ensureProgressSubscription();
-
-  const transferId =
-    options.transferId ?? createLocalTransferId("local-download");
-
-  if (options.onProgress) {
-    progressListeners.set(transferId, options.onProgress);
-  }
-  const origin = transferOriginFor(options.sessionId);
-  try {
-    const result = await api.download({
-      transferId,
-      origin,
-      deviceId: getDeviceId() ?? undefined,
-      authToken: localAuthTokenFor(origin),
-      body: { sessionId: options.sessionId, path: options.remotePath },
-      destPath: options.destPath,
-      rootPath: options.rootPath,
-      expectedSize: options.expectedSize,
-      overwrite: options.overwrite === true,
-    });
-    if (result.success !== true) {
-      throw new LocalTransferError(
-        result.error || "Download failed",
-        result.code,
-      );
-    }
-  } finally {
-    progressListeners.delete(transferId);
-  }
-}
-
-export async function cancelLocalTransfer(transferId: string): Promise<void> {
-  const api = window.electronAPI?.localTransfer;
-  if (!api) return;
-  await api.cancel(transferId);
-}
diff --git a/plugins/file-manager/src/frontend/api/ssh-file-operations-api.ts b/plugins/file-manager/src/frontend/api/ssh-file-operations-api.ts
deleted file mode 100644
index c2a22caa2..000000000
--- a/plugins/file-manager/src/frontend/api/ssh-file-operations-api.ts
+++ /dev/null
@@ -1,995 +0,0 @@
-import { getErrorMessage } from "../lib/error-message";
-import axios from "axios";
-import { asHttpError } from "../lib/http-error";
-import {
-  handleApiError,
-  getFileManagerApiForSession,
-  setSessionOrigin,
-  clearSessionOrigin,
-} from "./client";
-import {
-  createFrontendLogger,
-  resolveConnectionOrigin,
-} from "@termix/plugin-sdk/ui";
-import type { FileItem, SSHHost } from "../host-types";
-import { getCachedFileList } from "../lib/file-list-request-cache";
-import {
-  getCachedFileContent,
-  invalidateCachedFileContent,
-  type FileContentResult,
-} from "../lib/file-content-request-cache";
-
-const fileLogger = createFrontendLogger("FILE");
-
-type ApiConnectionLog = {
-  type: "info" | "success" | "warning" | "error";
-  stage: string;
-  message: string;
-  details?: Record<string, unknown>;
-};
-
-type ConnectErrorResponse = {
-  error?: string;
-  message?: string;
-  connectionLogs?: ApiConnectionLog[];
-  requires_totp?: boolean;
-  requires_browser_sign_in?: boolean;
-  sessionId?: string;
-  prompt?: string;
-  url?: string;
-  code?: string;
-  label?: string;
-  status?: string;
-  reason?: string;
-};
-
-/**
- * The interactive-auth branches /connect can take before a session exists.
- * Callers switch on these, so they cannot stay behind Record<string, unknown>.
- */
-export interface SSHConnectResult {
-  success?: boolean;
-  status?: string;
-  reason?: "timeout" | "no_keyboard" | "auth_failed";
-  requires_totp?: boolean;
-  requires_browser_sign_in?: boolean;
-  sessionId?: string;
-  prompt?: string;
-  url?: string;
-  code?: string;
-  label?: string;
-}
-
-function triggerBlobDownload(blob: Blob, fileName: string): void {
-  const url = URL.createObjectURL(blob);
-  const link = document.createElement("a");
-  link.href = url;
-  link.download = fileName;
-  link.style.display = "none";
-
-  document.body.appendChild(link);
-  link.click();
-
-  window.setTimeout(() => {
-    link.remove();
-    URL.revokeObjectURL(url);
-  }, 1000);
-}
-
-// SSH FILE OPERATIONS
-// ============================================================================
-
-export async function connectSSH(
-  sessionId: string,
-  config: {
-    hostId?: number;
-    /** Names the host across a sync pair; hostId only names it locally. */
-    syncId?: string | null;
-    ip: string;
-    port: number;
-    username: string;
-    password?: string;
-    sshKey?: string;
-    keyPassword?: string;
-    authType?: string;
-    credentialId?: number;
-    userId?: string;
-    forceKeyboardInteractive?: boolean;
-    useSocks5?: boolean;
-    socks5Host?: string;
-    socks5Port?: number;
-    socks5Username?: string;
-    socks5Password?: string;
-    socks5ProxyChain?: unknown;
-    jumpHosts?: Array<{ hostId: number }>;
-  },
-): Promise<SSHConnectResult> {
-  try {
-    const response = await getFileManagerApiForSession(sessionId).post(
-      "/connect",
-      { sessionId, ...config },
-      { timeout: 120000 },
-    );
-    return response.data;
-  } catch (error: unknown) {
-    if (
-      axios.isAxiosError<ConnectErrorResponse>(error) &&
-      error.response?.data?.connectionLogs
-    ) {
-      const data = error.response.data;
-      const errorWithLogs = new Error(
-        data.error || data.message || error.message,
-      );
-      Object.assign(errorWithLogs, {
-        connectionLogs: data.connectionLogs,
-      });
-      if (data.requires_totp) {
-        Object.assign(errorWithLogs, {
-          requires_totp: true,
-          sessionId: data.sessionId,
-          prompt: data.prompt,
-        });
-      }
-      if (data.requires_browser_sign_in) {
-        Object.assign(errorWithLogs, {
-          requires_browser_sign_in: true,
-          sessionId: data.sessionId,
-          url: data.url,
-          code: data.code,
-          label: data.label,
-        });
-      }
-      if (data.status === "auth_required") {
-        Object.assign(errorWithLogs, {
-          status: "auth_required",
-          reason: data.reason,
-        });
-      }
-      throw errorWithLogs;
-    }
-    handleApiError(error, "connect SSH");
-  }
-}
-
-export async function disconnectSSH(
-  sessionId: string,
-): Promise<Record<string, unknown>> {
-  try {
-    const response = await getFileManagerApiForSession(sessionId).post(
-      "/disconnect",
-      { sessionId },
-    );
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "disconnect SSH");
-  } finally {
-    clearSessionOrigin(sessionId);
-  }
-}
-
-export async function verifySSHTOTP(
-  sessionId: string,
-  totpCode: string,
-): Promise<Record<string, unknown>> {
-  try {
-    const response = await getFileManagerApiForSession(sessionId).post(
-      "/connect-totp",
-      { sessionId, totpCode },
-    );
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "verify SSH TOTP");
-  }
-}
-
-export async function verifySSHBrowserSignIn(
-  sessionId: string,
-): Promise<Record<string, unknown>> {
-  try {
-    const response = await getFileManagerApiForSession(sessionId).post(
-      "/connect-browser-sign-in",
-      { sessionId },
-    );
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "verify SSH browser sign-in");
-  }
-}
-
-export async function getSSHStatus(
-  sessionId: string,
-): Promise<{ connected: boolean }> {
-  try {
-    const response = await getFileManagerApiForSession(sessionId).get(
-      "/status",
-      { params: { sessionId } },
-    );
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "get SSH status");
-  }
-}
-
-export async function keepSSHAlive(
-  sessionId: string,
-): Promise<Record<string, unknown>> {
-  try {
-    const response = await getFileManagerApiForSession(sessionId).post(
-      "/keepalive",
-      { sessionId },
-    );
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "SSH keepalive");
-  }
-}
-
-export async function listSSHFiles(
-  sessionId: string,
-  path: string,
-  options: { force?: boolean } = {},
-): Promise<{ files: FileItem[]; path: string }> {
-  return getCachedFileList(
-    sessionId,
-    path,
-    async () => {
-      try {
-        const response = await getFileManagerApiForSession(sessionId).get(
-          "/listFiles",
-          { params: { sessionId, path } },
-        );
-        return response.data || { files: [], path };
-      } catch (error) {
-        handleApiError(error, "list SSH files");
-      }
-    },
-    options.force,
-  );
-}
-
-export async function identifySSHSymlink(
-  sessionId: string,
-  path: string,
-): Promise<{ path: string; target: string; type: "directory" | "file" }> {
-  try {
-    const response = await getFileManagerApiForSession(sessionId).get(
-      "/identifySymlink",
-      { params: { sessionId, path } },
-    );
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "identify SSH symlink");
-  }
-}
-
-export async function resolveSSHPath(
-  sessionId: string,
-  path: string,
-): Promise<string> {
-  try {
-    const response = await getFileManagerApiForSession(sessionId).get(
-      "/resolvePath",
-      { params: { sessionId, path } },
-    );
-    return response.data?.resolvedPath || path;
-  } catch {
-    return path;
-  }
-}
-
-export async function readSSHFile(
-  sessionId: string,
-  path: string,
-  options: { force?: boolean } = {},
-): Promise<FileContentResult> {
-  return getCachedFileContent(
-    sessionId,
-    path,
-    async () => {
-      try {
-        const response = await getFileManagerApiForSession(sessionId).get(
-          "/readFile",
-          { params: { sessionId, path } },
-        );
-        return response.data;
-      } catch (error: unknown) {
-        const httpError = asHttpError(error);
-        if (httpError.response?.status === 404) {
-          const customError = new Error("File not found");
-          (
-            customError as Error & {
-              response?: unknown;
-              isFileNotFound?: boolean;
-            }
-          ).response = httpError.response;
-          (
-            customError as Error & {
-              response?: unknown;
-              isFileNotFound?: boolean;
-            }
-          ).isFileNotFound = httpError.response.data?.fileNotFound || true;
-          throw customError;
-        }
-        handleApiError(error, "read SSH file");
-      }
-    },
-    options.force,
-  );
-}
-
-export async function writeSSHFile(
-  sessionId: string,
-  path: string,
-  content: string,
-  hostId?: number,
-  userId?: string,
-): Promise<Record<string, unknown>> {
-  try {
-    const response = await getFileManagerApiForSession(sessionId).post(
-      "/writeFile",
-      { sessionId, path, content, hostId, userId },
-    );
-
-    if (
-      response.data &&
-      (response.data.message === "File written successfully" ||
-        response.status === 200)
-    ) {
-      invalidateCachedFileContent(sessionId, path);
-      return response.data;
-    } else {
-      throw new Error("File write operation did not return success status");
-    }
-  } catch (error) {
-    handleApiError(error, "write SSH file");
-  }
-}
-
-export async function uploadSSHFile(
-  sessionId: string,
-  path: string,
-  fileName: string,
-  file: File,
-  hostId?: number,
-  userId?: string,
-  onChunkProgress?: (progress: {
-    chunkIndex: number;
-    totalChunks: number;
-    bytesSent: number;
-    totalBytes: number;
-  }) => void,
-  signal?: AbortSignal,
-): Promise<Record<string, unknown>> {
-  // Browser-side safety: any single multipart body approaching 2^31 bytes (~2.14GB)
-  // crashes the XHR/ArrayBuffer pipeline in both Chromium (Electron) and Firefox,
-  // surfacing as "DOMException: File could not be read" inside FileManager-*.js.
-  // For larger files we slice into <=8MB chunks and upload each one separately,
-  // never materializing the whole file in JS memory.
-  const CHUNK_THRESHOLD_BYTES = 1.5 * 1024 * 1024 * 1024; // 1.5 GiB
-  const CHUNK_SIZE_BYTES = 8 * 1024 * 1024; // 8 MiB
-
-  try {
-    signal?.throwIfAborted();
-    if (file.size > CHUNK_THRESHOLD_BYTES) {
-      const totalChunks = Math.ceil(file.size / CHUNK_SIZE_BYTES);
-      fileLogger.info("Starting chunked upload", {
-        operation: "file_upload_chunked_start",
-        fileName,
-        fileSize: file.size,
-        totalChunks,
-        chunkSize: CHUNK_SIZE_BYTES,
-      });
-
-      let bytesSent = 0;
-      for (let i = 0; i < totalChunks; i++) {
-        signal?.throwIfAborted();
-        const start = i * CHUNK_SIZE_BYTES;
-        const end = Math.min(start + CHUNK_SIZE_BYTES, file.size);
-        const chunkBlob = file.slice(start, end);
-
-        const response = await getFileManagerApiForSession(sessionId).post(
-          "/uploadFileChunk",
-          chunkBlob,
-          {
-            params: {
-              sessionId,
-              path,
-              fileName,
-              offset: start,
-              totalSize: file.size,
-            },
-            headers: { "Content-Type": "application/octet-stream" },
-            timeout: 0,
-            signal,
-          },
-        );
-
-        bytesSent = end;
-        onChunkProgress?.({
-          chunkIndex: i,
-          totalChunks,
-          bytesSent,
-          totalBytes: file.size,
-        });
-
-        if (i === totalChunks - 1) {
-          fileLogger.success("Chunked upload completed", {
-            operation: "file_upload_chunked_complete",
-            fileName,
-            fileSize: file.size,
-            totalChunks,
-          });
-          return response.data;
-        }
-      }
-      return { message: "File uploaded successfully", chunked: true };
-    }
-
-    const form = new FormData();
-    form.append("sessionId", sessionId);
-    form.append("path", path);
-    if (hostId !== undefined) form.append("hostId", String(hostId));
-    if (userId !== undefined) form.append("userId", userId);
-    form.append("file", file, fileName);
-
-    const response = await getFileManagerApiForSession(sessionId).postForm(
-      "/uploadFileStream",
-      form,
-      {
-        timeout: 0,
-        signal,
-        onUploadProgress: (event) => {
-          const totalBytes =
-            typeof event.total === "number" && event.total > 0
-              ? event.total
-              : file.size;
-          onChunkProgress?.({
-            chunkIndex: 0,
-            totalChunks: 1,
-            bytesSent: Math.min(event.loaded, totalBytes),
-            totalBytes,
-          });
-        },
-      },
-    );
-    return response.data;
-  } catch (error) {
-    if (signal?.aborted) throw error;
-    handleApiError(error, "upload SSH file");
-  }
-}
-
-export interface DownloadedSSHFile {
-  /** base64-encoded file contents */
-  content: string;
-  fileName: string;
-  size: number;
-  mimeType: string;
-  path: string;
-}
-
-export async function downloadSSHFile(
-  sessionId: string,
-  filePath: string,
-  hostId?: number,
-  userId?: string,
-): Promise<DownloadedSSHFile> {
-  try {
-    const response = await getFileManagerApiForSession(sessionId).post(
-      "/downloadFile",
-      {
-        sessionId,
-        path: filePath,
-        hostId,
-        userId,
-      },
-      { timeout: 0 },
-    );
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "download SSH file");
-  }
-}
-
-export interface DownloadProgressEvent {
-  loaded: number;
-  total?: number;
-}
-
-export async function downloadSSHFileStream(
-  sessionId: string,
-  filePath: string,
-  onProgress?: (event: DownloadProgressEvent) => void,
-): Promise<void> {
-  const response = await getFileManagerApiForSession(sessionId).post(
-    "/downloadFileStream",
-    { sessionId, path: filePath },
-    {
-      responseType: "blob",
-      timeout: 0,
-      onDownloadProgress: onProgress
-        ? (event) => onProgress({ loaded: event.loaded, total: event.total })
-        : undefined,
-    },
-  );
-  const blob = response.data as Blob;
-  const fileName = filePath.split("/").pop() || "download";
-  triggerBlobDownload(blob, fileName);
-}
-
-export async function createSSHFile(
-  sessionId: string,
-  path: string,
-  fileName: string,
-  content: string = "",
-  hostId?: number,
-  userId?: string,
-): Promise<Record<string, unknown>> {
-  try {
-    const response = await getFileManagerApiForSession(sessionId).post(
-      "/createFile",
-      { sessionId, path, fileName, content, hostId, userId },
-    );
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "create SSH file");
-  }
-}
-
-export async function createSSHFolder(
-  sessionId: string,
-  path: string,
-  folderName: string,
-  hostId?: number,
-  userId?: string,
-): Promise<Record<string, unknown>> {
-  try {
-    const response = await getFileManagerApiForSession(sessionId).post(
-      "/createFolder",
-      { sessionId, path, folderName, hostId, userId },
-    );
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "create SSH folder");
-  }
-}
-
-export async function deleteSSHItem(
-  sessionId: string,
-  path: string,
-  isDirectory: boolean,
-  hostId?: number,
-  userId?: string,
-  permanent = false,
-): Promise<Record<string, unknown>> {
-  try {
-    const response = await getFileManagerApiForSession(sessionId).delete(
-      "/deleteItem",
-      {
-        data: {
-          sessionId,
-          path,
-          isDirectory,
-          hostId,
-          userId,
-          permanent,
-        },
-      },
-    );
-    if (!isDirectory) invalidateCachedFileContent(sessionId, path);
-    return response.data;
-  } catch (error) {
-    if (
-      axios.isAxiosError(error) &&
-      error.response?.data?.trashUnavailable === true
-    ) {
-      throw error;
-    }
-    handleApiError(error, "delete SSH item");
-  }
-}
-
-export interface TrashItem {
-  id: string;
-  name: string;
-  originalPath: string;
-  isDirectory: boolean;
-  deletedAt: string;
-  size: number;
-}
-
-export async function getSSHTrash(sessionId: string): Promise<{
-  items: TrashItem[];
-  retentionDays: number;
-  canManageRetention: boolean;
-}> {
-  try {
-    const response = await getFileManagerApiForSession(sessionId).get(
-      "/trash",
-      { params: { sessionId } },
-    );
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "list SSH trash");
-  }
-}
-
-export async function restoreSSHTrashItem(sessionId: string, id: string) {
-  try {
-    const response = await getFileManagerApiForSession(sessionId).post(
-      `/trash/${encodeURIComponent(id)}/restore`,
-      { sessionId },
-    );
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "restore SSH trash item");
-  }
-}
-
-export async function permanentlyDeleteSSHTrashItem(
-  sessionId: string,
-  id: string,
-) {
-  try {
-    await getFileManagerApiForSession(sessionId).delete(
-      `/trash/${encodeURIComponent(id)}`,
-      { data: { sessionId } },
-    );
-  } catch (error) {
-    handleApiError(error, "permanently delete SSH trash item");
-  }
-}
-
-export async function emptySSHTrash(sessionId: string) {
-  try {
-    await getFileManagerApiForSession(sessionId).delete("/trash", {
-      data: { sessionId },
-    });
-  } catch (error) {
-    handleApiError(error, "empty SSH trash");
-  }
-}
-
-export async function updateSSHTrashRetention(
-  sessionId: string,
-  retentionDays: number,
-) {
-  try {
-    await getFileManagerApiForSession(sessionId).put("/trash-retention", {
-      retentionDays,
-    });
-  } catch (error) {
-    handleApiError(error, "update SSH trash retention");
-  }
-}
-
-export async function setSudoPassword(
-  sessionId: string,
-  password: string,
-): Promise<void> {
-  try {
-    await getFileManagerApiForSession(sessionId).post("/sudo-password", {
-      sessionId,
-      password,
-    });
-  } catch (error) {
-    handleApiError(error, "set sudo password");
-  }
-}
-
-export interface CopySSHItemResult {
-  message?: string;
-  /** Set when the copy was renamed to avoid clobbering an existing entry. */
-  uniqueName?: string;
-  targetPath?: string;
-}
-
-export async function copySSHItem(
-  sessionId: string,
-  sourcePath: string,
-  targetDir: string,
-  hostId?: number,
-  userId?: string,
-): Promise<CopySSHItemResult> {
-  try {
-    const response = await getFileManagerApiForSession(sessionId).post(
-      "/copyItem",
-      {
-        sessionId,
-        sourcePath,
-        targetDir,
-        hostId,
-        userId,
-      },
-      {
-        timeout: 60000,
-      },
-    );
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "copy SSH item");
-    throw error;
-  }
-}
-
-export async function renameSSHItem(
-  sessionId: string,
-  oldPath: string,
-  newName: string,
-  hostId?: number,
-  userId?: string,
-): Promise<Record<string, unknown>> {
-  try {
-    const response = await getFileManagerApiForSession(sessionId).put(
-      "/renameItem",
-      { sessionId, oldPath, newName, hostId, userId },
-    );
-    invalidateCachedFileContent(sessionId, oldPath);
-    const separator = oldPath.lastIndexOf("/");
-    const newPath = `${oldPath.slice(0, separator + 1)}${newName}`;
-    invalidateCachedFileContent(sessionId, newPath);
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "rename SSH item");
-    throw error;
-  }
-}
-
-export async function moveSSHItem(
-  sessionId: string,
-  oldPath: string,
-  newPath: string,
-  hostId?: number,
-  userId?: string,
-): Promise<Record<string, unknown>> {
-  try {
-    const response = await getFileManagerApiForSession(sessionId).put(
-      "/moveItem",
-      {
-        sessionId,
-        oldPath,
-        newPath,
-        hostId,
-        userId,
-      },
-      {
-        timeout: 60000,
-      },
-    );
-    invalidateCachedFileContent(sessionId, oldPath);
-    invalidateCachedFileContent(sessionId, newPath);
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "move SSH item");
-    throw error;
-  }
-}
-
-export async function changeSSHPermissions(
-  sessionId: string,
-  path: string,
-  permissions: string,
-  hostId?: number,
-  userId?: string,
-): Promise<{ success: boolean; message: string }> {
-  try {
-    fileLogger.info("Changing SSH file permissions", {
-      operation: "change_permissions",
-      sessionId,
-      path,
-      permissions,
-      hostId,
-      userId,
-    });
-
-    const response = await getFileManagerApiForSession(sessionId).post(
-      "/changePermissions",
-      { sessionId, path, permissions, hostId, userId },
-    );
-
-    fileLogger.success("SSH file permissions changed successfully", {
-      operation: "change_permissions",
-      sessionId,
-      path,
-      permissions,
-    });
-
-    return response.data;
-  } catch (error) {
-    fileLogger.error("Failed to change SSH file permissions", error, {
-      operation: "change_permissions",
-      sessionId,
-      path,
-      permissions,
-    });
-    handleApiError(error, "change SSH permissions");
-    throw error;
-  }
-}
-
-export async function extractSSHArchive(
-  sessionId: string,
-  archivePath: string,
-  extractPath?: string,
-  hostId?: number,
-  userId?: string,
-): Promise<{ success: boolean; message: string; extractPath: string }> {
-  try {
-    fileLogger.info("Extracting archive", {
-      operation: "extract_archive",
-      sessionId,
-      archivePath,
-      extractPath,
-      hostId,
-      userId,
-    });
-
-    const response = await getFileManagerApiForSession(sessionId).post(
-      "/extractArchive",
-      { sessionId, archivePath, extractPath, hostId, userId },
-    );
-
-    fileLogger.success("Archive extracted successfully", {
-      operation: "extract_archive",
-      sessionId,
-      archivePath,
-      extractPath: response.data.extractPath,
-    });
-
-    return response.data;
-  } catch (error) {
-    fileLogger.error("Failed to extract archive", error, {
-      operation: "extract_archive",
-      sessionId,
-      archivePath,
-      extractPath,
-    });
-    handleApiError(error, "extract archive");
-    throw error;
-  }
-}
-
-export async function compressSSHFiles(
-  sessionId: string,
-  paths: string[],
-  archiveName: string,
-  format?: string,
-  hostId?: number,
-  userId?: string,
-): Promise<{ success: boolean; message: string; archivePath: string }> {
-  try {
-    fileLogger.info("Compressing files", {
-      operation: "compress_files",
-      sessionId,
-      paths,
-      archiveName,
-      format,
-      hostId,
-      userId,
-    });
-
-    const response = await getFileManagerApiForSession(sessionId).post(
-      "/compressFiles",
-      {
-        sessionId,
-        paths,
-        archiveName,
-        format: format || "zip",
-        hostId,
-        userId,
-      },
-    );
-
-    fileLogger.success("Files compressed successfully", {
-      operation: "compress_files",
-      sessionId,
-      paths,
-      archivePath: response.data.archivePath,
-    });
-
-    return response.data;
-  } catch (error) {
-    fileLogger.error("Failed to compress files", error, {
-      operation: "compress_files",
-      sessionId,
-      paths,
-      archiveName,
-      format,
-    });
-    handleApiError(error, "compress files");
-    throw error;
-  }
-}
-
-// ============================================================================
-
-export type HostConnectionState =
-  "disconnected" | "connecting" | "ready" | "auth_required" | "error";
-
-export interface EnsureSSHSessionResult {
-  state: HostConnectionState;
-  sessionId?: string;
-  error?: string;
-}
-
-export async function ensureSSHSessionForHost(
-  host: SSHHost,
-): Promise<EnsureSSHSessionResult> {
-  const sessionId = host.id.toString();
-  const origin = await resolveConnectionOrigin({
-    connectionOrigin: host.connectionOrigin,
-  });
-  setSessionOrigin(sessionId, origin);
-
-  try {
-    const status = await getSSHStatus(sessionId);
-    if (status?.connected) {
-      return { state: "ready", sessionId };
-    }
-  } catch {
-    // not connected — fall through to connect
-  }
-
-  try {
-    const result = await connectSSH(sessionId, {
-      hostId: host.id,
-      syncId: host.syncId ?? null,
-      ip: host.ip,
-      port: host.port,
-      username: host.username,
-      password: host.password,
-      sshKey: host.key,
-      keyPassword: host.keyPassword,
-      authType: host.authType,
-      credentialId: host.credentialId,
-      userId: host.userId,
-      forceKeyboardInteractive: host.forceKeyboardInteractive,
-      jumpHosts: host.jumpHosts,
-      useSocks5: host.useSocks5,
-      socks5Host: host.socks5Host,
-      socks5Port: host.socks5Port,
-      socks5Username: host.socks5Username,
-      socks5Password: host.socks5Password,
-      socks5ProxyChain: host.socks5ProxyChain,
-    });
-
-    if (
-      result?.requires_totp ||
-      result?.requires_browser_sign_in ||
-      result?.status === "auth_required"
-    ) {
-      return { state: "auth_required", sessionId };
-    }
-
-    return { state: "ready", sessionId };
-  } catch (err) {
-    const message = getErrorMessage(err, "Connection failed");
-    return { state: "error", error: message };
-  }
-}
-
-export interface BrowseSSHDirectoryResult {
-  status: "ok" | "not_found" | "error";
-  path: string;
-  files: FileItem[];
-}
-
-export async function browseSSHDirectory(
-  sessionId: string,
-  path: string,
-): Promise<BrowseSSHDirectoryResult> {
-  try {
-    const result = await listSSHFiles(sessionId, path);
-    return {
-      status: "ok",
-      path: result.path,
-      files: result.files,
-    };
-  } catch (err) {
-    const status =
-      (err as { response?: { status?: number } })?.response?.status === 404
-        ? "not_found"
-        : "error";
-    return { status, path, files: [] };
-  }
-}
diff --git a/plugins/file-manager/src/frontend/api/transfer-api.ts b/plugins/file-manager/src/frontend/api/transfer-api.ts
deleted file mode 100644
index 0cd4d0d95..000000000
--- a/plugins/file-manager/src/frontend/api/transfer-api.ts
+++ /dev/null
@@ -1,384 +0,0 @@
-import { createFrontendLogger } from "@termix/plugin-sdk/ui";
-import { fileManagerApi, handleApiError } from "./client";
-
-const fileLogger = createFrontendLogger("FILE");
-
-// ============================================================================
-// HOST-TO-HOST TRANSFER
-// ============================================================================
-
-export type TransferMethodPreference = "auto" | "tar" | "item_sftp";
-
-export interface TransferScanSummary {
-  fileCount: number;
-  totalBytes: number;
-  largestFileBytes: number;
-  incompressibleRatio: number;
-}
-
-export interface TransferMethodPreview {
-  methodPreference: TransferMethodPreference;
-  resolvedMethod: "tar" | "item_sftp";
-  reasonKey: string;
-  sourcePlatform: "unix" | "windows";
-  destPlatform: "unix" | "windows";
-  sourceHasTar: boolean;
-  destHasTar: boolean;
-  summary: TransferScanSummary;
-}
-
-export async function getTransferMethodPreview(
-  sourceSessionId: string,
-  sourcePaths: string[],
-  destSessionId: string,
-  destPath: string,
-  methodPreference?: TransferMethodPreference,
-): Promise<TransferMethodPreview> {
-  try {
-    const response = await fileManagerApi().post("/transferMethodPreview", {
-      sourceSessionId,
-      sourcePaths,
-      destSessionId,
-      destPath,
-      methodPreference: methodPreference ?? "auto",
-    });
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "preview transfer method");
-    throw error;
-  }
-}
-
-export interface TransferHopMetrics {
-  id: string;
-  mbPerSec?: number;
-}
-
-export interface TransferTimings {
-  prepareDestMs?: number;
-  compressMs?: number;
-  transferMs?: number;
-  extractMs?: number;
-  verifyMs?: number;
-  directBenchmarkMs?: number;
-  relayBenchmarkMs?: number;
-  sourceDeleteMs?: number;
-  totalMs?: number;
-  transferBytes?: number;
-  endToEndMbPerSec?: number;
-  hops?: TransferHopMetrics[];
-}
-
-export function getTransferProgressPercent(
-  status: TransferProgressResponse,
-): number | undefined {
-  if (
-    status.bytesTransferred !== undefined &&
-    status.totalBytes !== undefined &&
-    status.totalBytes > 0
-  ) {
-    return Math.min(
-      100,
-      Math.round((status.bytesTransferred / status.totalBytes) * 100),
-    );
-  }
-  if (
-    status.itemsCompleted !== undefined &&
-    status.totalItems !== undefined &&
-    status.totalItems > 0
-  ) {
-    return Math.min(
-      100,
-      Math.round((status.itemsCompleted / status.totalItems) * 100),
-    );
-  }
-  return undefined;
-}
-
-export function formatTransferMbPerSec(
-  mbPerSec?: number,
-  _bytes?: number,
-  _ms?: number,
-): string {
-  if (mbPerSec === undefined || mbPerSec <= 0) return "";
-  if (mbPerSec < 1) return `${(mbPerSec * 1024).toFixed(0)} KB/s`;
-  return `${mbPerSec.toFixed(1)} MB/s`;
-}
-
-export function formatDurationMs(ms?: number): string {
-  if (ms === undefined) return "";
-  if (ms < 1000) return `${ms}ms`;
-  if (ms < 60000) return `${(ms / 1000).toFixed(1)}s`;
-  const minutes = Math.floor(ms / 60000);
-  const seconds = Math.round((ms % 60000) / 1000);
-  return `${minutes}m ${seconds}s`;
-}
-
-interface TransferProgressTracker {
-  update(status: TransferProgressResponse): {
-    rate: number | undefined;
-    stalled: boolean;
-  };
-}
-
-export function createTransferProgressTracker(): TransferProgressTracker {
-  let lastBytes: number | undefined;
-  let lastTime: number | undefined;
-  let lastRate: number | undefined;
-  let lastActivityTime: number | undefined;
-  const STALL_THRESHOLD_MS = 5000;
-
-  return {
-    update(status) {
-      const now = Date.now();
-      const bytes = status.bytesTransferred;
-
-      if (
-        bytes !== undefined &&
-        lastBytes !== undefined &&
-        lastTime !== undefined
-      ) {
-        const deltaBytes = bytes - lastBytes;
-        const deltaMs = now - lastTime;
-        if (deltaMs > 0 && deltaBytes >= 0) {
-          lastRate = (deltaBytes / deltaMs / 1024 / 1024) * 1000;
-          if (deltaBytes > 0) lastActivityTime = now;
-        }
-      } else if (bytes !== undefined) {
-        lastActivityTime = now;
-      }
-
-      lastBytes = bytes;
-      lastTime = now;
-
-      const stalled =
-        lastActivityTime !== undefined &&
-        now - lastActivityTime > STALL_THRESHOLD_MS &&
-        status.status === "running" &&
-        status.phase === "transferring";
-
-      return { rate: lastRate, stalled };
-    },
-  };
-}
-
-export interface TransferProgressResponse {
-  transferId: string;
-  status: "running" | "success" | "partial" | "error" | "cancelled";
-  phase:
-    | "compressing"
-    | "transferring"
-    | "benchmarking"
-    | "verifying"
-    | "extracting"
-    | "reconnecting";
-  bytesTransferred?: number;
-  totalBytes?: number;
-  itemsCompleted?: number;
-  totalItems?: number;
-  failedPaths?: string[];
-  message?: string;
-  method?: "stream" | "tar" | "item_sftp" | "direct_rsync";
-  sourcePaths?: string[];
-  destPath?: string;
-  sourceSessionId?: string;
-  destSessionId?: string;
-  startedAt?: number;
-  timings?: TransferTimings;
-  sourceDeleted?: boolean;
-  moveRequested?: boolean;
-  partialDestRemaining?: boolean;
-  cleanupCompleted?: boolean;
-  retryable?: boolean;
-  integrityVerified?: boolean;
-  parallelSegmentCount?: number;
-}
-
-export async function transferToHost(
-  sourceSessionId: string,
-  sourcePaths: string[],
-  destSessionId: string,
-  destPath: string,
-  move?: boolean,
-  methodPreference?: TransferMethodPreference,
-  parallelSegmentCount?: number,
-): Promise<{ transferId: string }> {
-  try {
-    fileLogger.info("Starting host transfer", {
-      operation: "host_transfer",
-      sourceSessionId,
-      destSessionId,
-      sourcePaths,
-      destPath,
-      move,
-      methodPreference,
-      parallelSegmentCount,
-    });
-
-    const response = await fileManagerApi().post("/transferToHost", {
-      sourceSessionId,
-      sourcePaths,
-      destSessionId,
-      destPath,
-      move,
-      methodPreference: methodPreference ?? "auto",
-      parallelSegmentCount,
-    });
-
-    return response.data;
-  } catch (error) {
-    fileLogger.error("Failed to start host transfer", error, {
-      operation: "host_transfer",
-      sourceSessionId,
-      destSessionId,
-      sourcePaths,
-    });
-    handleApiError(error, "transfer to host");
-    throw error;
-  }
-}
-
-export async function getTransferStatus(
-  transferId: string,
-): Promise<TransferProgressResponse> {
-  try {
-    const response = await fileManagerApi().get(
-      `/transferStatus/${transferId}`,
-    );
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "get transfer status");
-    throw error;
-  }
-}
-
-export async function listActiveTransfers(): Promise<{
-  transfers: TransferProgressResponse[];
-}> {
-  try {
-    const response = await fileManagerApi().get("/activeTransfers");
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "list active transfers");
-    throw error;
-  }
-}
-
-export async function cancelTransferToHost(transferId: string): Promise<void> {
-  try {
-    await fileManagerApi().post(`/transferCancel/${transferId}`);
-  } catch (error) {
-    fileLogger.warn("Transfer cancel request failed (non-fatal)", {
-      operation: "host_transfer",
-      transferId,
-      error,
-    });
-  }
-}
-
-export async function cleanupCancelledTransfer(
-  transferId: string,
-): Promise<{ removedPaths: string[]; failedPaths: string[] }> {
-  try {
-    const response = await fileManagerApi().post(
-      `/transferCleanup/${transferId}`,
-    );
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "clean up cancelled transfer");
-    throw error;
-  }
-}
-
-export async function retryTransferToHost(
-  transferId: string,
-): Promise<{ ok: boolean; transferId: string }> {
-  try {
-    const response = await fileManagerApi().post(
-      `/transferRetry/${transferId}`,
-    );
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "retry transfer");
-    throw error;
-  }
-}
-
-export async function pollTransferUntilComplete(
-  transferId: string,
-  onProgress?: (status: TransferProgressResponse) => void,
-  intervalMs = 500,
-): Promise<TransferProgressResponse> {
-  return new Promise((resolve, reject) => {
-    const poll = async () => {
-      try {
-        const status = await getTransferStatus(transferId);
-        onProgress?.(status);
-
-        if (
-          status.status === "success" ||
-          status.status === "partial" ||
-          status.status === "error" ||
-          status.status === "cancelled"
-        ) {
-          resolve(status);
-          return;
-        }
-
-        setTimeout(poll, intervalMs);
-      } catch (err) {
-        reject(err);
-      }
-    };
-
-    void poll();
-  });
-}
-
-// ============================================================================
-// FILE MANAGER DATA
-// ============================================================================
-
-export interface TransferDestination {
-  id: number;
-  userId: string;
-  sourceHostId: number;
-  destHostId: number;
-  destPath: string;
-  destPathLabel?: string;
-  lastUsed?: string;
-}
-
-export async function getTransferRecent(
-  sourceHostId: number,
-): Promise<TransferDestination[]> {
-  try {
-    const response = await fileManagerApi().get("/transfer-recent", {
-      params: { sourceHostId },
-    });
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "get transfer recent destinations");
-    throw error;
-  }
-}
-
-export async function addTransferRecent(
-  sourceHostId: number,
-  destHostId: number,
-  destPath: string,
-  destPathLabel?: string,
-): Promise<Record<string, unknown>> {
-  try {
-    const response = await fileManagerApi().post("/transfer-recent", {
-      sourceHostId,
-      destHostId,
-      destPath,
-      destPathLabel,
-    });
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "add transfer recent destination");
-    throw error;
-  }
-}
diff --git a/plugins/file-manager/src/frontend/components/AudioPreview.tsx b/plugins/file-manager/src/frontend/components/AudioPreview.tsx
deleted file mode 100644
index f05ab1f81..000000000
--- a/plugins/file-manager/src/frontend/components/AudioPreview.tsx
+++ /dev/null
@@ -1,109 +0,0 @@
-import React from "react";
-import AudioPlayer from "react-h5-audio-player";
-import "react-h5-audio-player/lib/styles.css";
-import { Music } from "lucide-react";
-import { cn } from "@termix/plugin-sdk/ui";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-interface FileItem {
-  name: string;
-  size?: number;
-}
-
-interface AudioPreviewProps {
-  file: FileItem;
-  content: string;
-  color: string;
-  onMediaDimensionsChange?: (dimensions: {
-    width: number;
-    height: number;
-  }) => void;
-}
-
-function formatFileSize(bytes?: number, t?: (key: string) => string): string {
-  if (!bytes) return t ? t("fileManager.unknownSize") : "Unknown size";
-  const sizes = ["B", "KB", "MB", "GB"];
-  const i = Math.floor(Math.log(bytes) / Math.log(1024));
-  return `${(bytes / Math.pow(1024, i)).toFixed(1)} ${sizes[i]}`;
-}
-
-function getAudioMimeType(filename: string): string {
-  const ext = filename.split(".").pop()?.toLowerCase() || "";
-
-  switch (ext) {
-    case "mp3":
-      return "audio/mpeg";
-    case "wav":
-      return "audio/wav";
-    case "flac":
-      return "audio/flac";
-    case "ogg":
-      return "audio/ogg";
-    case "aac":
-      return "audio/aac";
-    case "m4a":
-      return "audio/mp4";
-    default:
-      return "audio/mpeg";
-  }
-}
-
-export function AudioPreview({
-  file,
-  content,
-  color,
-  onMediaDimensionsChange,
-}: AudioPreviewProps) {
-  const { t } = useTranslation();
-  const ext = file.name.split(".").pop()?.toLowerCase() || "";
-  const audioUrl = `data:${getAudioMimeType(file.name)};base64,${content}`;
-
-  return (
-    <div className="p-6 flex items-center justify-center h-full">
-      <div className="w-full max-w-2xl">
-        <div className="space-y-4">
-          <div className="flex justify-center">
-            <div
-              className={cn(
-                "w-32 h-32 rounded-lg bg-gradient-to-br from-pink-100 to-purple-100 flex items-center justify-center shadow-lg",
-                color,
-              )}
-            >
-              <Music className="w-16 h-16 text-pink-600" />
-            </div>
-          </div>
-
-          <div className="text-center">
-            <h3 className="font-semibold text-foreground text-lg mb-1">
-              {file.name.replace(/\.[^/.]+$/, "")}
-            </h3>
-            <p className="flex justify-center gap-3 text-sm text-muted-foreground">
-              <span>{ext.toUpperCase()}</span>
-              <span>{formatFileSize(file.size, t)}</span>
-            </p>
-          </div>
-
-          <div className="rounded-lg overflow-hidden">
-            <AudioPlayer
-              src={audioUrl}
-              onLoadedMetaData={() => {
-                onMediaDimensionsChange?.({
-                  width: 600,
-                  height: 400,
-                });
-              }}
-              onError={(e) => {
-                console.error("Audio playback error:", e);
-              }}
-              showJumpControls={false}
-              showSkipControls={false}
-              showDownloadProgress={true}
-              customAdditionalControls={[]}
-              customVolumeControls={[]}
-            />
-          </div>
-        </div>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/components/CodeEditor.tsx b/plugins/file-manager/src/frontend/components/CodeEditor.tsx
deleted file mode 100644
index 449f57443..000000000
--- a/plugins/file-manager/src/frontend/components/CodeEditor.tsx
+++ /dev/null
@@ -1,164 +0,0 @@
-import React, { forwardRef, useImperativeHandle, useMemo, useRef } from "react";
-import CodeMirror from "@uiw/react-codemirror";
-import { oneDark } from "@codemirror/theme-one-dark";
-import {
-  loadLanguage,
-  type LanguageName,
-} from "@uiw/codemirror-extensions-langs";
-import { EditorView, keymap } from "@codemirror/view";
-import { searchKeymap, search, openSearchPanel } from "@codemirror/search";
-import {
-  defaultKeymap,
-  history,
-  historyKeymap,
-  toggleComment,
-} from "@codemirror/commands";
-import { autocompletion, completionKeymap } from "@codemirror/autocomplete";
-
-export interface CodeEditorHandle {
-  openSearchPanel: () => void;
-}
-
-interface CodeEditorProps {
-  fileName: string;
-  value: string;
-  placeholder: string;
-  onChange: (value: string) => void;
-  onFocus: () => void;
-  onBlur: () => void;
-  fontSize?: number;
-}
-
-function getLanguageExtension(filename: string) {
-  const ext = filename.split(".").pop()?.toLowerCase() || "";
-  const baseName = filename.toLowerCase();
-
-  if (["dockerfile", "makefile", "rakefile", "gemfile"].includes(baseName)) {
-    return loadLanguage(baseName as LanguageName);
-  }
-
-  const langMap: Record<string, string> = {
-    js: "javascript",
-    jsx: "jsx",
-    ts: "typescript",
-    tsx: "tsx",
-    py: "python",
-    java: "java",
-    cpp: "cpp",
-    c: "c",
-    cs: "csharp",
-    php: "php",
-    rb: "ruby",
-    go: "go",
-    rs: "rust",
-    html: "html",
-    css: "css",
-    scss: "sass",
-    less: "less",
-    json: "json",
-    xml: "xml",
-    yaml: "yaml",
-    yml: "yaml",
-    toml: "toml",
-    sql: "sql",
-    sh: "shell",
-    bash: "shell",
-    zsh: "shell",
-    vue: "vue",
-    svelte: "svelte",
-    md: "markdown",
-    conf: "shell",
-    ini: "properties",
-  };
-
-  const language = langMap[ext];
-  return language ? loadLanguage(language as LanguageName) : null;
-}
-
-export const CodeEditor = forwardRef<CodeEditorHandle, CodeEditorProps>(
-  function CodeEditor(
-    { fileName, value, placeholder, onChange, onFocus, onBlur, fontSize = 14 },
-    ref,
-  ) {
-    const editorRef = useRef<{ view?: EditorView } | null>(null);
-
-    const extensions = useMemo(() => {
-      const languageExtension = getLanguageExtension(fileName);
-
-      return [
-        ...(languageExtension ? [languageExtension] : []),
-        history(),
-        search(),
-        autocompletion(),
-        keymap.of([
-          ...defaultKeymap,
-          ...searchKeymap,
-          ...historyKeymap,
-          ...completionKeymap,
-          {
-            key: "Mod-/",
-            run: toggleComment,
-            preventDefault: true,
-          },
-          {
-            key: "Mod-h",
-            run: () => false,
-            preventDefault: true,
-          },
-        ]),
-        EditorView.theme({
-          "&": {
-            height: "100%",
-            fontSize: `${fontSize}px`,
-          },
-          ".cm-scroller": {
-            overflow: "auto",
-            scrollbarWidth: "thin",
-            scrollbarColor: "var(--scrollbar-thumb) var(--scrollbar-track)",
-          },
-          ".cm-editor": {
-            height: "100%",
-          },
-        }),
-      ];
-    }, [fileName, fontSize]);
-
-    useImperativeHandle(
-      ref,
-      () => ({
-        openSearchPanel: () => {
-          const view = editorRef.current?.view;
-          if (view) {
-            openSearchPanel(view);
-          }
-        },
-      }),
-      [],
-    );
-
-    return (
-      <CodeMirror
-        ref={editorRef}
-        value={value}
-        onChange={onChange}
-        onFocus={onFocus}
-        onBlur={onBlur}
-        extensions={extensions}
-        theme={oneDark}
-        placeholder={placeholder}
-        className="h-full"
-        basicSetup={{
-          lineNumbers: true,
-          foldGutter: true,
-          dropCursor: false,
-          allowMultipleSelections: false,
-          indentOnInput: true,
-          bracketMatching: true,
-          closeBrackets: true,
-          autocompletion: true,
-          highlightSelectionMatches: false,
-        }}
-      />
-    );
-  },
-);
diff --git a/plugins/file-manager/src/frontend/components/ColumnResizeHandle.tsx b/plugins/file-manager/src/frontend/components/ColumnResizeHandle.tsx
deleted file mode 100644
index 5b93b9516..000000000
--- a/plugins/file-manager/src/frontend/components/ColumnResizeHandle.tsx
+++ /dev/null
@@ -1,43 +0,0 @@
-import type React from "react";
-import { cn } from "@termix/plugin-sdk/ui";
-
-interface ColumnResizeHandleProps {
-  onMouseDown: (event: React.MouseEvent) => void;
-  onDoubleClick: (event: React.MouseEvent) => void;
-  onClick: (event: React.MouseEvent) => void;
-  "data-resizing"?: string;
-  title?: string;
-}
-
-/**
- * Thin grab area on the left edge of a list-view header cell. The parent cell
- * must be `relative`. Shows a hairline on hover and while dragging.
- */
-export function ColumnResizeHandle({
-  title,
-  "data-resizing": resizing,
-  ...handlers
-}: ColumnResizeHandleProps) {
-  return (
-    <div
-      role="separator"
-      aria-orientation="vertical"
-      title={title}
-      data-column-resize-handle
-      data-resizing={resizing}
-      className={cn(
-        "absolute -left-2 top-0 bottom-0 w-3 cursor-col-resize group/handle z-10",
-      )}
-      {...handlers}
-    >
-      <div
-        className={cn(
-          "absolute left-1/2 top-0.5 bottom-0.5 w-px -translate-x-1/2 transition-colors",
-          resizing
-            ? "bg-accent-brand"
-            : "bg-transparent group-hover/handle:bg-accent-brand/60",
-        )}
-      />
-    </div>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/components/ColumnVisibilityMenu.tsx b/plugins/file-manager/src/frontend/components/ColumnVisibilityMenu.tsx
deleted file mode 100644
index 81e513947..000000000
--- a/plugins/file-manager/src/frontend/components/ColumnVisibilityMenu.tsx
+++ /dev/null
@@ -1,105 +0,0 @@
-import { useEffect, useLayoutEffect, useRef, useState } from "react";
-import { Check } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { cn } from "@termix/plugin-sdk/ui";
-import type { ResizableColumns } from "../hooks/useResizableColumns.ts";
-
-interface ColumnVisibilityMenuProps {
-  x: number;
-  y: number;
-  isVisible: boolean;
-  columns: ResizableColumns;
-  onClose: () => void;
-}
-
-/**
- * Right-click menu for a list-view header: tick/untick which optional
- * columns are shown. The name column is always on and not listed.
- */
-export function ColumnVisibilityMenu({
-  x,
-  y,
-  isVisible,
-  columns,
-  onClose,
-}: ColumnVisibilityMenuProps) {
-  const { t } = useTranslation();
-  const menuRef = useRef<HTMLDivElement>(null);
-  const [position, setPosition] = useState({ x, y });
-
-  useEffect(() => {
-    if (!isVisible) return;
-    const handleMouseDown = (event: MouseEvent) => {
-      if (!menuRef.current?.contains(event.target as Node)) onClose();
-    };
-    const handleKeyDown = (event: KeyboardEvent) => {
-      if (event.key === "Escape") onClose();
-    };
-    const timeout = setTimeout(() => {
-      document.addEventListener("mousedown", handleMouseDown, true);
-      document.addEventListener("keydown", handleKeyDown);
-      window.addEventListener("blur", onClose);
-    }, 50);
-    return () => {
-      clearTimeout(timeout);
-      document.removeEventListener("mousedown", handleMouseDown, true);
-      document.removeEventListener("keydown", handleKeyDown);
-      window.removeEventListener("blur", onClose);
-    };
-  }, [isVisible, onClose]);
-
-  useLayoutEffect(() => {
-    if (!isVisible || !menuRef.current) return;
-    const { offsetWidth, offsetHeight } = menuRef.current;
-    setPosition({
-      x: Math.max(8, Math.min(x, window.innerWidth - offsetWidth - 10)),
-      y: Math.max(8, Math.min(y, window.innerHeight - offsetHeight - 10)),
-    });
-  }, [isVisible, x, y]);
-
-  if (!isVisible) return null;
-
-  const onlyOneVisible = columns.visibleColumns.length <= 1;
-
-  return (
-    <div
-      ref={menuRef}
-      data-context-menu
-      data-testid="column-visibility-menu"
-      className="fixed bg-card border border-border rounded-none shadow-md min-w-[200px] z-[99995] py-1"
-      style={{ left: position.x, top: position.y }}
-    >
-      <div className="px-3 pt-1.5 pb-1 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-        {t("fileManager.columns")}
-      </div>
-      {columns.columns.map((column) => {
-        const visible = columns.isVisible(column.key);
-        // Keep at least one optional column so the header stays meaningful.
-        const disabled = visible && onlyOneVisible;
-        return (
-          <button
-            key={column.key}
-            type="button"
-            role="menuitemcheckbox"
-            aria-checked={visible}
-            disabled={disabled}
-            className={cn(
-              "w-full px-3 min-h-8 py-1.5 text-left text-xs font-semibold flex items-center gap-2 rounded-none transition-colors cursor-pointer",
-              "hover:bg-accent-brand/10 hover:text-accent-brand",
-              disabled &&
-                "opacity-40 cursor-not-allowed hover:bg-transparent hover:text-current",
-            )}
-            onClick={() => {
-              if (!disabled) columns.toggleColumn(column.key);
-            }}
-          >
-            <span className="size-3.5 flex items-center justify-center text-accent-brand">
-              {visible && <Check className="size-3.5" />}
-            </span>
-            <span className="flex-1 leading-tight">{t(column.labelKey)}</span>
-          </button>
-        );
-      })}
-    </div>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/components/CompressDialog.tsx b/plugins/file-manager/src/frontend/components/CompressDialog.tsx
deleted file mode 100644
index 092ffebcd..000000000
--- a/plugins/file-manager/src/frontend/components/CompressDialog.tsx
+++ /dev/null
@@ -1,170 +0,0 @@
-import React, { useState, useEffect } from "react";
-import {
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogFooter,
-  DialogHeader,
-  DialogTitle,
-  Button,
-  Input,
-  Label,
-} from "@termix/plugin-sdk/ui";
-import { Package } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-interface CompressDialogProps {
-  open: boolean;
-  onOpenChange: (open: boolean) => void;
-  fileNames: string[];
-  onCompress: (archiveName: string, format: string) => void;
-}
-
-export function CompressDialog({
-  open,
-  onOpenChange,
-  fileNames,
-  onCompress,
-}: CompressDialogProps) {
-  const { t } = useTranslation();
-  const [archiveName, setArchiveName] = useState("");
-  const [format, setFormat] = useState("zip");
-
-  useEffect(() => {
-    if (open && fileNames.length > 0) {
-      if (fileNames.length === 1) {
-        const baseName = fileNames[0].replace(/\.[^/.]+$/, "");
-        setArchiveName(baseName);
-      } else {
-        setArchiveName("archive");
-      }
-    }
-  }, [open, fileNames]);
-
-  const handleCompress = () => {
-    if (!archiveName.trim()) return;
-
-    let finalName = archiveName.trim();
-    const extensions: Record<string, string> = {
-      zip: ".zip",
-      "tar.gz": ".tar.gz",
-      "tar.bz2": ".tar.bz2",
-      "tar.xz": ".tar.xz",
-      tar: ".tar",
-      "7z": ".7z",
-    };
-
-    const expectedExtension = extensions[format];
-    if (expectedExtension && !finalName.endsWith(expectedExtension)) {
-      finalName += expectedExtension;
-    }
-
-    onCompress(finalName, format);
-    onOpenChange(false);
-  };
-
-  const formats = ["zip", "tar.gz", "tar.bz2", "tar.xz", "tar", "7z"] as const;
-
-  return (
-    <Dialog open={open} onOpenChange={onOpenChange}>
-      <DialogContent className="w-[calc(100vw-2rem)] sm:max-w-md rounded-none border-border bg-card">
-        <DialogHeader>
-          <DialogTitle className="text-xs font-bold uppercase tracking-widest flex items-center gap-2">
-            <Package className="size-4 text-accent-brand" />
-            {t("fileManager.compressFiles")}
-          </DialogTitle>
-          <DialogDescription className="text-[10px] font-bold uppercase tracking-tight text-muted-foreground">
-            {t("fileManager.compressFilesDesc", { count: fileNames.length })}
-          </DialogDescription>
-        </DialogHeader>
-
-        <div className="py-4 flex flex-col gap-4">
-          <div className="flex flex-col gap-1.5">
-            <Label
-              className="text-xs font-bold uppercase tracking-widest text-muted-foreground"
-              htmlFor="archiveName"
-            >
-              {t("fileManager.archiveName")}
-            </Label>
-            <Input
-              id="archiveName"
-              value={archiveName}
-              onChange={(e) => setArchiveName(e.target.value)}
-              placeholder={t("fileManager.enterArchiveName")}
-              className="rounded-none bg-muted/50 border-border text-xs"
-              onKeyDown={(e) => {
-                if (e.key === "Enter") {
-                  e.preventDefault();
-                  handleCompress();
-                }
-              }}
-            />
-          </div>
-
-          <div className="flex flex-col gap-1.5">
-            <Label className="text-xs font-bold uppercase tracking-widest text-muted-foreground">
-              {t("fileManager.compressionFormat")}
-            </Label>
-            <div className="grid grid-cols-3 gap-1">
-              {formats.map((f) => (
-                <button
-                  key={f}
-                  onClick={() => setFormat(f)}
-                  className={`py-2 text-xs font-bold uppercase tracking-widest border transition-colors ${
-                    format === f
-                      ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand"
-                      : "border-border text-muted-foreground hover:text-foreground hover:bg-muted"
-                  }`}
-                >
-                  .{f}
-                </button>
-              ))}
-            </div>
-          </div>
-
-          <div className="rounded-none bg-muted/10 border border-border p-3">
-            <p className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground mb-2">
-              {t("fileManager.selectedFiles")}:
-            </p>
-            <ul className="text-xs space-y-1">
-              {fileNames.slice(0, 5).map((name, index) => (
-                <li
-                  key={index}
-                  className="truncate text-foreground font-medium"
-                >
-                  {name}
-                </li>
-              ))}
-              {fileNames.length > 5 && (
-                <li className="text-muted-foreground">
-                  {t("fileManager.andMoreFiles", {
-                    count: fileNames.length - 5,
-                  })}
-                </li>
-              )}
-            </ul>
-          </div>
-        </div>
-
-        <DialogFooter>
-          <Button
-            variant="ghost"
-            onClick={() => onOpenChange(false)}
-            className="rounded-none text-[10px] font-bold uppercase tracking-widest"
-          >
-            {t("common.cancel")}
-          </Button>
-          <Button
-            variant="outline"
-            onClick={handleCompress}
-            disabled={!archiveName.trim()}
-            className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 rounded-none text-[10px] font-bold uppercase tracking-widest"
-          >
-            <Package className="size-3.5 mr-1" />
-            {t("fileManager.compress")}
-          </Button>
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/components/DiffViewer.tsx b/plugins/file-manager/src/frontend/components/DiffViewer.tsx
deleted file mode 100644
index bf589205e..000000000
--- a/plugins/file-manager/src/frontend/components/DiffViewer.tsx
+++ /dev/null
@@ -1,347 +0,0 @@
-/* eslint-disable react-hooks/exhaustive-deps */
-import React, { useState, useEffect } from "react";
-import { DiffEditor } from "@monaco-editor/react";
-import { Button } from "@termix/plugin-sdk/ui";
-import { toast } from "sonner";
-import { DownloadProgressToast } from "./DownloadProgressToast";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import {
-  Download,
-  RefreshCw,
-  Eye,
-  EyeOff,
-  ArrowLeftRight,
-  FileText,
-} from "lucide-react";
-import {
-  readSSHFile,
-  downloadSSHFileStream,
-  getSSHStatus,
-  connectSSH,
-} from "../api/ssh-file-operations-api";
-import type { FileItem, SSHHost } from "../host-types";
-
-interface DiffViewerProps {
-  file1: FileItem;
-  file2: FileItem;
-  sshSessionId: string;
-  sshHost: SSHHost;
-  onDownload1?: () => void;
-  onDownload2?: () => void;
-}
-
-export function DiffViewer({
-  file1,
-  file2,
-  sshSessionId,
-  sshHost,
-}: DiffViewerProps) {
-  const { t } = useTranslation();
-  const [content1, setContent1] = useState<string>("");
-  const [content2, setContent2] = useState<string>("");
-  const [isLoading, setIsLoading] = useState(false);
-  const [error, setError] = useState<string | null>(null);
-  const [diffMode, setDiffMode] = useState<"side-by-side" | "inline">(
-    "side-by-side",
-  );
-  const [showLineNumbers, setShowLineNumbers] = useState(true);
-
-  const ensureSSHConnection = async () => {
-    try {
-      const status = await getSSHStatus(sshSessionId);
-      if (!status.connected) {
-        await connectSSH(sshSessionId, {
-          hostId: sshHost.id,
-          ip: sshHost.ip,
-          port: sshHost.port,
-          username: sshHost.username,
-          password: sshHost.password,
-          sshKey: sshHost.key,
-          keyPassword: sshHost.keyPassword,
-          authType: sshHost.authType,
-          credentialId: sshHost.credentialId,
-          userId: sshHost.userId,
-        });
-      }
-    } catch {
-      await connectSSH(sshSessionId, {
-        hostId: sshHost.id,
-        ip: sshHost.ip,
-        port: sshHost.port,
-        username: sshHost.username,
-        password: sshHost.password,
-        sshKey: sshHost.key,
-        keyPassword: sshHost.keyPassword,
-        authType: sshHost.authType,
-        credentialId: sshHost.credentialId,
-        userId: sshHost.userId,
-      });
-    }
-  };
-
-  const loadFileContents = async () => {
-    if (file1.type !== "file" || file2.type !== "file") {
-      setError(t("fileManager.canOnlyCompareFiles"));
-      return;
-    }
-
-    try {
-      setIsLoading(true);
-      setError(null);
-
-      await ensureSSHConnection();
-
-      const [response1, response2] = await Promise.all([
-        readSSHFile(sshSessionId, file1.path),
-        readSSHFile(sshSessionId, file2.path),
-      ]);
-
-      setContent1(response1.content || "");
-      setContent2(response2.content || "");
-    } catch (error: unknown) {
-      console.error("Failed to load files for diff:", error);
-
-      const err = error as {
-        message?: string;
-        response?: { data?: { tooLarge?: boolean; error?: string } };
-      };
-      const errorData = err?.response?.data;
-      if (errorData?.tooLarge) {
-        setError(t("fileManager.fileTooLarge", { error: errorData.error }));
-      } else if (
-        err.message?.includes("connection") ||
-        err.message?.includes("established")
-      ) {
-        setError(
-          t("fileManager.sshConnectionFailed", {
-            name: sshHost.name,
-            ip: sshHost.ip,
-            port: sshHost.port,
-          }),
-        );
-      } else {
-        setError(
-          t("fileManager.loadFileFailed", {
-            error:
-              err.message || errorData?.error || t("fileManager.unknownError"),
-          }),
-        );
-      }
-    } finally {
-      setIsLoading(false);
-    }
-  };
-
-  const handleDownloadFile = async (file: FileItem) => {
-    const toastId = toast.loading(
-      <DownloadProgressToast t={t} fileName={file.name} loaded={0} />,
-      { duration: Infinity },
-    );
-    try {
-      await ensureSSHConnection();
-      await downloadSSHFileStream(
-        sshSessionId,
-        file.path,
-        ({ loaded, total }) => {
-          toast.loading(
-            <DownloadProgressToast
-              t={t}
-              fileName={file.name}
-              loaded={loaded}
-              total={total}
-            />,
-            { id: toastId, duration: Infinity },
-          );
-        },
-      );
-      toast.success(t("fileManager.downloadFileSuccess", { name: file.name }), {
-        id: toastId,
-        duration: undefined,
-      });
-    } catch (error: unknown) {
-      console.error("Failed to download file:", error);
-      const err = error as { message?: string };
-      toast.error(
-        t("fileManager.downloadFileFailed") +
-          ": " +
-          (err.message || t("fileManager.unknownError")),
-        { id: toastId, duration: undefined },
-      );
-    }
-  };
-
-  const getFileLanguage = (fileName: string): string => {
-    const ext = fileName.split(".").pop()?.toLowerCase();
-    const languageMap: Record<string, string> = {
-      js: "javascript",
-      jsx: "javascript",
-      ts: "typescript",
-      tsx: "typescript",
-      py: "python",
-      java: "java",
-      c: "c",
-      cpp: "cpp",
-      cs: "csharp",
-      php: "php",
-      rb: "ruby",
-      go: "go",
-      rs: "rust",
-      html: "html",
-      css: "css",
-      scss: "scss",
-      less: "less",
-      json: "json",
-      xml: "xml",
-      yaml: "yaml",
-      yml: "yaml",
-      md: "markdown",
-      sql: "sql",
-      sh: "shell",
-      bash: "shell",
-      ps1: "powershell",
-      dockerfile: "dockerfile",
-    };
-    return languageMap[ext || ""] || "plaintext";
-  };
-
-  useEffect(() => {
-    loadFileContents();
-  }, [file1, file2, sshSessionId]);
-
-  if (isLoading) {
-    return (
-      <div className="h-full flex items-center justify-center bg-card">
-        <div className="text-center">
-          <div className="animate-spin rounded-full h-8 w-8 border-b-2 border-blue-500 mx-auto mb-2"></div>
-          <p className="text-sm text-muted-foreground">
-            {t("fileManager.loadingFileComparison")}
-          </p>
-        </div>
-      </div>
-    );
-  }
-
-  if (error) {
-    return (
-      <div className="h-full flex items-center justify-center bg-card">
-        <div className="text-center max-w-md">
-          <FileText className="w-16 h-16 mx-auto mb-4 text-red-500 opacity-50" />
-          <p className="text-red-500 mb-4">{error}</p>
-          <Button onClick={loadFileContents} variant="outline">
-            <RefreshCw className="w-4 h-4 mr-2" />
-            {t("fileManager.reload")}
-          </Button>
-        </div>
-      </div>
-    );
-  }
-
-  return (
-    <div className="h-full flex flex-col bg-card">
-      <div className="flex-shrink-0 border-b border-border p-3">
-        <div className="flex items-center justify-between">
-          <div className="flex items-center gap-4">
-            <div className="text-sm">
-              <span className="text-muted-foreground">
-                {t("fileManager.compare")}:
-              </span>
-              <span className="font-medium text-green-400 mx-2">
-                {file1.name}
-              </span>
-              <ArrowLeftRight className="w-4 h-4 inline mx-1" />
-              <span className="font-medium text-blue-400">{file2.name}</span>
-            </div>
-          </div>
-
-          <div className="flex items-center gap-2">
-            <Button
-              variant="outline"
-              size="sm"
-              onClick={() =>
-                setDiffMode(
-                  diffMode === "side-by-side" ? "inline" : "side-by-side",
-                )
-              }
-            >
-              {diffMode === "side-by-side"
-                ? t("fileManager.sideBySide")
-                : t("fileManager.inline")}
-            </Button>
-
-            <Button
-              variant="outline"
-              size="sm"
-              onClick={() => setShowLineNumbers(!showLineNumbers)}
-            >
-              {showLineNumbers ? (
-                <Eye className="w-4 h-4" />
-              ) : (
-                <EyeOff className="w-4 h-4" />
-              )}
-            </Button>
-
-            <Button
-              variant="outline"
-              size="sm"
-              onClick={() => handleDownloadFile(file1)}
-              title={t("fileManager.downloadFile", { name: file1.name })}
-            >
-              <Download className="w-4 h-4 mr-1" />
-              {file1.name}
-            </Button>
-
-            <Button
-              variant="outline"
-              size="sm"
-              onClick={() => handleDownloadFile(file2)}
-              title={t("fileManager.downloadFile", { name: file2.name })}
-            >
-              <Download className="w-4 h-4 mr-1" />
-              {file2.name}
-            </Button>
-
-            <Button variant="outline" size="sm" onClick={loadFileContents}>
-              <RefreshCw className="w-4 h-4" />
-            </Button>
-          </div>
-        </div>
-      </div>
-
-      <div className="flex-1">
-        <DiffEditor
-          original={content1}
-          modified={content2}
-          language={getFileLanguage(file1.name)}
-          theme="vs-dark"
-          options={{
-            renderSideBySide: diffMode === "side-by-side",
-            lineNumbers: showLineNumbers ? "on" : "off",
-            minimap: { enabled: false },
-            scrollBeyondLastLine: false,
-            fontSize: 13,
-            wordWrap: "off",
-            automaticLayout: true,
-            readOnly: true,
-            originalEditable: false,
-            scrollbar: {
-              vertical: "visible",
-              horizontal: "visible",
-            },
-            diffWordWrap: "off",
-            ignoreTrimWhitespace: false,
-          }}
-          loading={
-            <div className="h-full flex items-center justify-center">
-              <div className="text-center">
-                <div className="animate-spin rounded-full h-6 w-6 border-b-2 border-blue-500 mx-auto mb-2"></div>
-                <p className="text-sm text-muted-foreground">
-                  {t("fileManager.initializingEditor")}
-                </p>
-              </div>
-            </div>
-          }
-        />
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/components/DiffWindow.tsx b/plugins/file-manager/src/frontend/components/DiffWindow.tsx
deleted file mode 100644
index 01eddeff9..000000000
--- a/plugins/file-manager/src/frontend/components/DiffWindow.tsx
+++ /dev/null
@@ -1,75 +0,0 @@
-import React from "react";
-import { DraggableWindow } from "./DraggableWindow.tsx";
-import { DiffViewer } from "./DiffViewer.tsx";
-import { useWindowManager } from "./WindowManager.tsx";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import type { FileItem, SSHHost } from "../host-types";
-
-interface DiffWindowProps {
-  windowId: string;
-  file1: FileItem;
-  file2: FileItem;
-  sshSessionId: string;
-  sshHost: SSHHost;
-  initialX?: number;
-  initialY?: number;
-}
-
-export function DiffWindow({
-  windowId,
-  file1,
-  file2,
-  sshSessionId,
-  sshHost,
-  initialX = 150,
-  initialY = 100,
-}: DiffWindowProps) {
-  const { t } = useTranslation();
-  const { closeWindow, maximizeWindow, focusWindow, windows } =
-    useWindowManager();
-
-  const currentWindow = windows.find((w) => w.id === windowId);
-
-  const handleClose = () => {
-    closeWindow(windowId);
-  };
-
-  const handleMaximize = () => {
-    maximizeWindow(windowId);
-  };
-
-  const handleFocus = () => {
-    focusWindow(windowId);
-  };
-
-  if (!currentWindow) {
-    return null;
-  }
-
-  return (
-    <DraggableWindow
-      title={t("fileManager.fileComparison", {
-        file1: file1.name,
-        file2: file2.name,
-      })}
-      initialX={initialX}
-      initialY={initialY}
-      initialWidth={1200}
-      initialHeight={700}
-      minWidth={800}
-      minHeight={500}
-      onClose={handleClose}
-      onMaximize={handleMaximize}
-      onFocus={handleFocus}
-      isMaximized={currentWindow.isMaximized}
-      zIndex={currentWindow.zIndex}
-    >
-      <DiffViewer
-        file1={file1}
-        file2={file2}
-        sshSessionId={sshSessionId}
-        sshHost={sshHost}
-      />
-    </DraggableWindow>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/components/DownloadProgressToast.tsx b/plugins/file-manager/src/frontend/components/DownloadProgressToast.tsx
deleted file mode 100644
index cc5b7fb5c..000000000
--- a/plugins/file-manager/src/frontend/components/DownloadProgressToast.tsx
+++ /dev/null
@@ -1,72 +0,0 @@
-import { formatTransferMbPerSec } from "../api/transfer-api";
-import type { TranslateFn } from "@termix/plugin-sdk/frontend";
-import { ArrowDownToLine } from "lucide-react";
-import { TransferProgressBar } from "./TransferProgressBar";
-
-interface DownloadProgressToastProps {
-  t: TranslateFn;
-  fileName: string;
-  loaded: number;
-  total?: number;
-  mbPerSec?: number;
-}
-
-function formatBytes(bytes: number): string {
-  if (bytes <= 0) return "0 B";
-  const units = ["B", "KB", "MB", "GB", "TB"];
-  let size = bytes;
-  let unitIndex = 0;
-  while (size >= 1024 && unitIndex < units.length - 1) {
-    size /= 1024;
-    unitIndex++;
-  }
-  const formattedSize =
-    size < 10 && unitIndex > 0 ? size.toFixed(1) : Math.round(size).toString();
-  return `${formattedSize} ${units[unitIndex]}`;
-}
-
-export function DownloadProgressToast({
-  t,
-  fileName,
-  loaded,
-  total,
-  mbPerSec,
-}: DownloadProgressToastProps) {
-  const percent =
-    total !== undefined && total > 0
-      ? Math.min(100, Math.round((loaded / total) * 100))
-      : undefined;
-
-  const speed = formatTransferMbPerSec(mbPerSec);
-
-  return (
-    <div className="flex w-[min(calc(100vw-5rem),288px)] max-w-full flex-col gap-2 pr-2">
-      <p className="flex items-center gap-2 text-sm font-medium leading-tight">
-        <ArrowDownToLine className="size-3.5 shrink-0 text-accent-brand" />
-        <span className="truncate">
-          {t("fileManager.downloadingFile", { name: fileName })}
-        </span>
-      </p>
-      <TransferProgressBar
-        value={percent}
-        label={t("fileManager.downloadingFile", { name: fileName })}
-      />
-      <div className="flex items-center justify-between gap-3 pr-1 text-xs text-muted-foreground">
-        <span className="min-w-0 truncate">
-          {total !== undefined
-            ? t("fileManager.downloadProgressBytes", {
-                transferred: formatBytes(loaded),
-                total: formatBytes(total),
-              })
-            : formatBytes(loaded)}
-        </span>
-        <span
-          className={`shrink-0 tabular-nums ${speed ? "font-medium text-foreground" : "invisible"}`}
-          aria-hidden={!speed}
-        >
-          {speed || "0 MB/s"}
-        </span>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/components/DraggableWindow.tsx b/plugins/file-manager/src/frontend/components/DraggableWindow.tsx
deleted file mode 100644
index ea40f7217..000000000
--- a/plugins/file-manager/src/frontend/components/DraggableWindow.tsx
+++ /dev/null
@@ -1,381 +0,0 @@
-import React, { useState, useRef, useCallback, useEffect } from "react";
-import { cn } from "@termix/plugin-sdk/ui";
-import { Minus, X, Maximize2, Minimize2 } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-interface DraggableWindowProps {
-  title: string;
-  children: React.ReactNode;
-  initialX?: number;
-  initialY?: number;
-  initialWidth?: number;
-  initialHeight?: number;
-  minWidth?: number;
-  minHeight?: number;
-  onClose: () => void;
-  onMinimize?: () => void;
-  onMaximize?: () => void;
-  onResize?: () => void;
-  isMaximized?: boolean;
-  zIndex?: number;
-  onFocus?: () => void;
-  targetSize?: { width: number; height: number };
-  titleActions?: React.ReactNode;
-}
-
-export function DraggableWindow({
-  title,
-  children,
-  initialX = 100,
-  initialY = 100,
-  initialWidth = 600,
-  initialHeight = 400,
-  minWidth = 300,
-  minHeight = 200,
-  onClose,
-  onMinimize,
-  onMaximize,
-  onResize,
-  isMaximized = false,
-  zIndex = 1000,
-  onFocus,
-  targetSize,
-  titleActions,
-}: DraggableWindowProps) {
-  const { t } = useTranslation();
-  const [position, setPosition] = useState({ x: initialX, y: initialY });
-  const [size, setSize] = useState({
-    width: initialWidth,
-    height: initialHeight,
-  });
-  const [isDragging, setIsDragging] = useState(false);
-  const [isResizing, setIsResizing] = useState(false);
-  const [resizeDirection, setResizeDirection] = useState<string>("");
-
-  const [dragStart, setDragStart] = useState({ x: 0, y: 0 });
-  const [windowStart, setWindowStart] = useState({ x: 0, y: 0 });
-  const [sizeStart, setSizeStart] = useState({ width: 0, height: 0 });
-  const containerBoundsRef = useRef({ width: 0, height: 0 });
-
-  const windowRef = useRef<HTMLDivElement>(null);
-  const titleBarRef = useRef<HTMLDivElement>(null);
-
-  useEffect(() => {
-    if (targetSize && !isMaximized) {
-      const container = windowRef.current?.offsetParent as HTMLElement | null;
-      const maxWidth = container
-        ? Math.min(container.clientWidth * 0.9, 1200)
-        : Math.min(window.innerWidth * 0.9, 1200);
-      const maxHeight = container
-        ? Math.min(container.clientHeight * 0.8, 800)
-        : Math.min(window.innerHeight * 0.8, 800);
-
-      let newWidth = Math.min(targetSize.width + 50, maxWidth);
-      let newHeight = Math.min(targetSize.height + 150, maxHeight);
-
-      if (newWidth > maxWidth || newHeight > maxHeight) {
-        const widthRatio = maxWidth / newWidth;
-        const heightRatio = maxHeight / newHeight;
-        const scale = Math.min(widthRatio, heightRatio);
-
-        newWidth = Math.floor(newWidth * scale);
-        newHeight = Math.floor(newHeight * scale);
-      }
-
-      newWidth = Math.max(newWidth, minWidth);
-      newHeight = Math.max(newHeight, minHeight);
-
-      setSize({ width: newWidth, height: newHeight });
-
-      setPosition({
-        x: Math.max(
-          0,
-          (container ? container.clientWidth : window.innerWidth) / 2 -
-            newWidth / 2,
-        ),
-        y: Math.max(
-          0,
-          (container ? container.clientHeight : window.innerHeight) / 2 -
-            newHeight / 2,
-        ),
-      });
-    }
-  }, [targetSize, isMaximized, minWidth, minHeight]);
-
-  const handleWindowClick = useCallback(() => {
-    onFocus?.();
-  }, [onFocus]);
-
-  const handleMouseDown = useCallback(
-    (e: React.MouseEvent) => {
-      if (isMaximized) return;
-
-      e.preventDefault();
-      setIsDragging(true);
-      setDragStart({ x: e.clientX, y: e.clientY });
-      setWindowStart({ x: position.x, y: position.y });
-
-      const container = windowRef.current?.offsetParent as HTMLElement | null;
-      containerBoundsRef.current = {
-        width: container ? container.clientWidth : window.innerWidth,
-        height: container ? container.clientHeight : window.innerHeight,
-      };
-
-      onFocus?.();
-    },
-    [isMaximized, position, onFocus],
-  );
-
-  const handleMouseMove = useCallback(
-    (e: MouseEvent) => {
-      if (isDragging && !isMaximized) {
-        const deltaX = e.clientX - dragStart.x;
-        const deltaY = e.clientY - dragStart.y;
-
-        const newX = windowStart.x + deltaX;
-        const newY = windowStart.y + deltaY;
-
-        const { width: containerW, height: containerH } =
-          containerBoundsRef.current;
-        const maxX = containerW - size.width;
-        const maxY = containerH - size.height;
-
-        setPosition({
-          x: Math.max(0, Math.min(maxX, newX)),
-          y: Math.max(49, Math.min(maxY, newY)),
-        });
-      }
-
-      if (isResizing && !isMaximized) {
-        const deltaX = e.clientX - dragStart.x;
-        const deltaY = e.clientY - dragStart.y;
-
-        let newWidth = sizeStart.width;
-        let newHeight = sizeStart.height;
-        let newX = windowStart.x;
-        let newY = windowStart.y;
-
-        if (resizeDirection.includes("right")) {
-          newWidth = Math.max(minWidth, sizeStart.width + deltaX);
-        }
-        if (resizeDirection.includes("left")) {
-          const widthChange = -deltaX;
-          newWidth = Math.max(minWidth, sizeStart.width + widthChange);
-          if (newWidth > minWidth || widthChange > 0) {
-            newX = windowStart.x - (newWidth - sizeStart.width);
-          } else {
-            newX = windowStart.x - (minWidth - sizeStart.width);
-          }
-        }
-
-        if (resizeDirection.includes("bottom")) {
-          newHeight = Math.max(minHeight, sizeStart.height + deltaY);
-        }
-        if (resizeDirection.includes("top")) {
-          const heightChange = -deltaY;
-          newHeight = Math.max(minHeight, sizeStart.height + heightChange);
-          if (newHeight > minHeight || heightChange > 0) {
-            newY = windowStart.y - (newHeight - sizeStart.height);
-          } else {
-            newY = windowStart.y - (minHeight - sizeStart.height);
-          }
-        }
-
-        const { width: containerW, height: containerH } =
-          containerBoundsRef.current;
-        newX = Math.max(0, Math.min(containerW - newWidth, newX));
-        newY = Math.max(49, Math.min(containerH - newHeight, newY));
-
-        setSize({ width: newWidth, height: newHeight });
-        setPosition({ x: newX, y: newY });
-
-        if (onResize) {
-          onResize();
-        }
-      }
-    },
-    [
-      isDragging,
-      isResizing,
-      isMaximized,
-      dragStart,
-      windowStart,
-      sizeStart,
-      size,
-      minWidth,
-      minHeight,
-      resizeDirection,
-      onResize,
-    ],
-  );
-
-  const handleMouseUp = useCallback(() => {
-    setIsDragging(false);
-    setIsResizing(false);
-    setResizeDirection("");
-  }, []);
-
-  const handleResizeStart = useCallback(
-    (e: React.MouseEvent, direction: string) => {
-      if (isMaximized) return;
-
-      e.preventDefault();
-      e.stopPropagation();
-      setIsResizing(true);
-      setResizeDirection(direction);
-      setDragStart({ x: e.clientX, y: e.clientY });
-      setWindowStart({ x: position.x, y: position.y });
-      setSizeStart({ width: size.width, height: size.height });
-
-      const container = windowRef.current?.offsetParent as HTMLElement | null;
-      containerBoundsRef.current = {
-        width: container ? container.clientWidth : window.innerWidth,
-        height: container ? container.clientHeight : window.innerHeight,
-      };
-
-      onFocus?.();
-    },
-    [isMaximized, position, size, onFocus],
-  );
-
-  useEffect(() => {
-    if (isDragging || isResizing) {
-      document.addEventListener("mousemove", handleMouseMove);
-      document.addEventListener("mouseup", handleMouseUp);
-      document.body.style.userSelect = "none";
-      document.body.style.cursor = isDragging ? "grabbing" : "resizing";
-
-      return () => {
-        document.removeEventListener("mousemove", handleMouseMove);
-        document.removeEventListener("mouseup", handleMouseUp);
-        document.body.style.userSelect = "";
-        document.body.style.cursor = "";
-      };
-    }
-  }, [isDragging, isResizing, handleMouseMove, handleMouseUp]);
-
-  const handleTitleDoubleClick = useCallback(() => {
-    onMaximize?.();
-  }, [onMaximize]);
-
-  return (
-    <div
-      ref={windowRef}
-      className={cn(
-        "absolute bg-[#0d0e0c] border border-border rounded-none shadow-2xl",
-        "select-none overflow-hidden flex flex-col",
-        isMaximized ? "inset-0" : "",
-      )}
-      style={{
-        left: isMaximized ? 0 : position.x,
-        top: isMaximized ? 0 : position.y,
-        width: isMaximized ? "100%" : size.width,
-        height: isMaximized ? "100%" : size.height,
-        zIndex,
-      }}
-      onClick={handleWindowClick}
-    >
-      <div
-        ref={titleBarRef}
-        className="flex items-center justify-between px-4 py-2 bg-muted/30 border-b border-border shrink-0 cursor-grab active:cursor-grabbing"
-        onMouseDown={handleMouseDown}
-        onDoubleClick={handleTitleDoubleClick}
-      >
-        <div className="flex items-center gap-3 flex-1 overflow-hidden">
-          <span className="text-[10px] font-bold uppercase tracking-[0.2em] text-accent-brand shrink-0">
-            {t("fileManager.editor")}
-          </span>
-          <div className="h-4 w-px bg-border/50 shrink-0" />
-          <span className="text-[10px] font-bold tracking-tight text-muted-foreground truncate">
-            {title}
-          </span>
-        </div>
-
-        <div className="flex items-center gap-0.5">
-          {titleActions}
-
-          {onMinimize && (
-            <button
-              className="size-6 flex items-center justify-center rounded-none hover:bg-accent-brand/10 hover:text-accent-brand text-muted-foreground transition-colors"
-              onClick={(e) => {
-                e.stopPropagation();
-                onMinimize();
-              }}
-              title={t("common.minimize")}
-            >
-              <Minus className="size-3.5" />
-            </button>
-          )}
-
-          {onMaximize && (
-            <button
-              className="size-6 flex items-center justify-center rounded-none hover:bg-accent-brand/10 hover:text-accent-brand text-muted-foreground transition-colors"
-              onClick={(e) => {
-                e.stopPropagation();
-                onMaximize();
-              }}
-              title={isMaximized ? t("common.restore") : t("common.maximize")}
-            >
-              {isMaximized ? (
-                <Minimize2 className="size-3.5" />
-              ) : (
-                <Maximize2 className="size-3.5" />
-              )}
-            </button>
-          )}
-
-          <button
-            className="size-6 flex items-center justify-center rounded-none hover:bg-accent-brand/10 hover:text-accent-brand text-muted-foreground transition-colors"
-            onClick={(e) => {
-              e.stopPropagation();
-              onClose();
-            }}
-            title={t("common.close")}
-          >
-            <X className="size-3.5" />
-          </button>
-        </div>
-      </div>
-
-      <div className="flex-1 overflow-hidden">{children}</div>
-
-      {!isMaximized && (
-        <>
-          <div
-            className="absolute top-0 left-0 right-0 h-1 cursor-n-resize"
-            onMouseDown={(e) => handleResizeStart(e, "top")}
-          />
-          <div
-            className="absolute bottom-0 left-0 right-0 h-1 cursor-s-resize"
-            onMouseDown={(e) => handleResizeStart(e, "bottom")}
-          />
-          <div
-            className="absolute top-0 bottom-0 left-0 w-1 cursor-w-resize"
-            onMouseDown={(e) => handleResizeStart(e, "left")}
-          />
-          <div
-            className="absolute top-0 bottom-0 right-0 w-1 cursor-e-resize"
-            onMouseDown={(e) => handleResizeStart(e, "right")}
-          />
-
-          <div
-            className="absolute top-0 left-0 w-2 h-2 cursor-nw-resize"
-            onMouseDown={(e) => handleResizeStart(e, "top-left")}
-          />
-          <div
-            className="absolute top-0 right-0 w-2 h-2 cursor-ne-resize"
-            onMouseDown={(e) => handleResizeStart(e, "top-right")}
-          />
-          <div
-            className="absolute bottom-0 left-0 w-2 h-2 cursor-sw-resize"
-            onMouseDown={(e) => handleResizeStart(e, "bottom-left")}
-          />
-          <div
-            className="absolute bottom-0 right-0 w-2 h-2 cursor-se-resize"
-            onMouseDown={(e) => handleResizeStart(e, "bottom-right")}
-          />
-        </>
-      )}
-    </div>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/components/FileViewer.tsx b/plugins/file-manager/src/frontend/components/FileViewer.tsx
deleted file mode 100644
index 3d0d1e685..000000000
--- a/plugins/file-manager/src/frontend/components/FileViewer.tsx
+++ /dev/null
@@ -1,962 +0,0 @@
-/* eslint-disable react-hooks/exhaustive-deps */
-import React, { Suspense, lazy, useState, useEffect, useRef } from "react";
-import { cn } from "@termix/plugin-sdk/ui";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import {
-  FileText,
-  Image as ImageIcon,
-  Film,
-  Music,
-  File as FileIcon,
-  Code,
-  AlertCircle,
-  Download,
-  Eye,
-  Edit,
-  Save,
-  RotateCcw,
-  Keyboard,
-  ExternalLink,
-  Settings,
-  Search,
-  ZoomIn,
-  ZoomOut,
-} from "lucide-react";
-import {
-  SiJavascript,
-  SiTypescript,
-  SiPython,
-  SiCplusplus,
-  SiC,
-  SiDotnet,
-  SiPhp,
-  SiRuby,
-  SiGo,
-  SiRust,
-  SiHtml5,
-  SiSass,
-  SiVuedotjs,
-  SiSvelte,
-  SiMarkdown,
-  SiGnubash,
-  SiMysql,
-  SiDocker,
-} from "react-icons/si";
-import { Button } from "@termix/plugin-sdk/ui";
-import { Kbd, KbdKey } from "@termix/plugin-sdk/ui";
-import type { CodeEditorHandle } from "./CodeEditor.tsx";
-import {
-  loadAudioPreview,
-  loadCodeEditor,
-  loadImagePreview,
-  loadMarkdownRenderer,
-  loadPdfPreview,
-  resolveFilePreviewKind,
-} from "../file-preview-preload";
-
-const CodeEditor = lazy(loadCodeEditor);
-const ImagePreview = lazy(loadImagePreview);
-const MarkdownRenderer = lazy(loadMarkdownRenderer);
-const PdfPreview = lazy(loadPdfPreview);
-const AudioPreview = lazy(loadAudioPreview);
-
-interface FileItem {
-  name: string;
-  type: "file" | "directory" | "link";
-  path: string;
-  size?: number;
-  modified?: string;
-  permissions?: string;
-  owner?: string;
-  group?: string;
-}
-
-interface FileViewerProps {
-  file: FileItem;
-  content?: string;
-  savedContent?: string;
-  isLoading?: boolean;
-  isSaving?: boolean;
-  isEditable?: boolean;
-  resetKey?: number;
-  onContentChange?: (content: string) => void;
-  onSave?: (content: string) => void;
-  onRevert?: () => void;
-  onDownload?: () => void;
-  onOpenExternal?: () => void;
-  onChooseExternalEditor?: () => void;
-  onMediaDimensionsChange?: (dimensions: {
-    width: number;
-    height: number;
-  }) => void;
-}
-
-function getLanguageIcon(filename: string): React.ReactNode {
-  const ext = filename.split(".").pop()?.toLowerCase() || "";
-  const baseName = filename.toLowerCase();
-
-  if (["dockerfile"].includes(baseName)) {
-    return <SiDocker className="w-6 h-6 text-blue-400" />;
-  }
-  if (["makefile", "rakefile", "gemfile"].includes(baseName)) {
-    return <SiRuby className="w-6 h-6 text-red-500" />;
-  }
-
-  const iconMap: Record<string, React.ReactNode> = {
-    js: <SiJavascript className="w-6 h-6 text-yellow-400" />,
-    jsx: <SiJavascript className="w-6 h-6 text-yellow-400" />,
-    ts: <SiTypescript className="w-6 h-6 text-blue-500" />,
-    tsx: <SiTypescript className="w-6 h-6 text-blue-500" />,
-    py: <SiPython className="w-6 h-6 text-blue-400" />,
-    java: <Code className="w-6 h-6 text-red-500" />,
-    cpp: <SiCplusplus className="w-6 h-6 text-blue-600" />,
-    c: <SiC className="w-6 h-6 text-blue-700" />,
-    cs: <SiDotnet className="w-6 h-6 text-purple-600" />,
-    php: <SiPhp className="w-6 h-6 text-indigo-500" />,
-    rb: <SiRuby className="w-6 h-6 text-red-500" />,
-    go: <SiGo className="w-6 h-6 text-cyan-500" />,
-    rs: <SiRust className="w-6 h-6 text-orange-600" />,
-    html: <SiHtml5 className="w-6 h-6 text-orange-500" />,
-    css: <Code className="w-6 h-6 text-blue-500" />,
-    scss: <SiSass className="w-6 h-6 text-pink-500" />,
-    sass: <SiSass className="w-6 h-6 text-pink-500" />,
-    less: <Code className="w-6 h-6 text-blue-600" />,
-    json: <Code className="w-6 h-6 text-yellow-500" />,
-    xml: <Code className="w-6 h-6 text-orange-500" />,
-    yaml: <Code className="w-6 h-6 text-red-400" />,
-    yml: <Code className="w-6 h-6 text-red-400" />,
-    toml: <Code className="w-6 h-6 text-orange-400" />,
-    sql: <SiMysql className="w-6 h-6 text-blue-500" />,
-    sh: <SiGnubash className="w-6 h-6 text-foreground" />,
-    bash: <SiGnubash className="w-6 h-6 text-foreground" />,
-    zsh: <Code className="w-6 h-6 text-foreground" />,
-    vue: <SiVuedotjs className="w-6 h-6 text-green-500" />,
-    svelte: <SiSvelte className="w-6 h-6 text-orange-500" />,
-    md: <SiMarkdown className="w-6 h-6 text-muted-foreground" />,
-    conf: <Code className="w-6 h-6 text-muted-foreground" />,
-    ini: <Code className="w-6 h-6 text-muted-foreground" />,
-  };
-
-  return iconMap[ext] || <Code className="w-6 h-6 text-yellow-500" />;
-}
-
-function getFileType(filename: string): {
-  type: string;
-  icon: React.ReactNode;
-  color: string;
-} {
-  const kind = resolveFilePreviewKind(filename);
-
-  if (kind === "image") {
-    return {
-      type: "image",
-      icon: <ImageIcon className="w-6 h-6" />,
-      color: "text-green-500",
-    };
-  } else if (kind === "video") {
-    return {
-      type: "video",
-      icon: <Film className="w-6 h-6" />,
-      color: "text-purple-500",
-    };
-  } else if (kind === "audio") {
-    return {
-      type: "audio",
-      icon: <Music className="w-6 h-6" />,
-      color: "text-pink-500",
-    };
-  } else if (kind === "markdown") {
-    return {
-      type: "markdown",
-      icon: <FileText className="w-6 h-6" />,
-      color: "text-blue-600",
-    };
-  } else if (kind === "pdf") {
-    return {
-      type: "pdf",
-      icon: <FileText className="w-6 h-6" />,
-      color: "text-red-600",
-    };
-  } else if (kind === "text") {
-    return {
-      type: "text",
-      icon: <FileText className="w-6 h-6" />,
-      color: "text-blue-500",
-    };
-  } else if (kind === "code") {
-    return {
-      type: "code",
-      icon: getLanguageIcon(filename),
-      color: "text-yellow-500",
-    };
-  } else {
-    return {
-      type: "unknown",
-      icon: <FileIcon className="w-6 h-6" />,
-      color: "text-foreground-subtle",
-    };
-  }
-}
-
-function formatFileSize(bytes?: number, t?: (key: string) => string): string {
-  if (!bytes) return t ? t("fileManager.unknownSize") : "Unknown size";
-  const sizes = ["B", "KB", "MB", "GB"];
-  const i = Math.floor(Math.log(bytes) / Math.log(1024));
-  return `${(bytes / Math.pow(1024, i)).toFixed(1)} ${sizes[i]}`;
-}
-
-function PreviewFallback({ label }: { label: string }) {
-  return (
-    <div className="h-full flex items-center justify-center">
-      <div className="text-center">
-        <div className="animate-spin rounded-full h-8 w-8 border-b-2 border-blue-500 mx-auto mb-2"></div>
-        <p className="text-sm text-muted-foreground">{label}</p>
-      </div>
-    </div>
-  );
-}
-
-export function FileViewer({
-  file,
-  content = "",
-  savedContent = "",
-  isLoading = false,
-  isSaving = false,
-  isEditable = false,
-  resetKey,
-  onContentChange,
-  onSave,
-  onRevert,
-  onDownload,
-  onOpenExternal,
-  onChooseExternalEditor,
-  onMediaDimensionsChange,
-}: FileViewerProps) {
-  const { t } = useTranslation();
-  const [editedContent, setEditedContent] = useState(content);
-  const [, setOriginalContent] = useState(savedContent || content);
-  const [hasChanges, setHasChanges] = useState(false);
-  const [showLargeFileWarning, setShowLargeFileWarning] = useState(false);
-  const [forceShowAsText, setForceShowAsText] = useState(false);
-  const [showKeyboardShortcuts, setShowKeyboardShortcuts] = useState(false);
-  const [editorFocused, setEditorFocused] = useState(false);
-  const [markdownEditMode, setMarkdownEditMode] = useState(false);
-  const [editorFontSize, setEditorFontSize] = useState<number>(() => {
-    const stored = localStorage.getItem("fileManagerEditorFontSize");
-    return stored ? parseInt(stored, 10) : 14;
-  });
-  const editorRef = useRef<CodeEditorHandle | null>(null);
-
-  const MIN_FONT_SIZE = 8;
-  const MAX_FONT_SIZE = 32;
-
-  const decreaseFontSize = () => {
-    setEditorFontSize((prev) => {
-      const next = Math.max(MIN_FONT_SIZE, prev - 1);
-      localStorage.setItem("fileManagerEditorFontSize", String(next));
-      return next;
-    });
-  };
-
-  const increaseFontSize = () => {
-    setEditorFontSize((prev) => {
-      const next = Math.min(MAX_FONT_SIZE, prev + 1);
-      localStorage.setItem("fileManagerEditorFontSize", String(next));
-      return next;
-    });
-  };
-
-  const fileTypeInfo = getFileType(file.name);
-
-  const WARNING_SIZE = 50 * 1024 * 1024;
-  const MAX_SIZE = Number.MAX_SAFE_INTEGER;
-
-  const shouldShowAsText =
-    fileTypeInfo.type === "text" ||
-    fileTypeInfo.type === "code" ||
-    (fileTypeInfo.type === "unknown" &&
-      (forceShowAsText || !file.size || file.size <= WARNING_SIZE));
-
-  const isLargeFile = file.size && file.size > WARNING_SIZE;
-  const isTooLarge = file.size && file.size > MAX_SIZE;
-
-  useEffect(() => {
-    setEditedContent(content);
-    if (savedContent) {
-      setOriginalContent(savedContent);
-    }
-  }, [file.name, file.path, resetKey]);
-
-  useEffect(() => {
-    setHasChanges(content !== savedContent);
-
-    if (fileTypeInfo.type === "unknown" && isLargeFile && !forceShowAsText) {
-      setShowLargeFileWarning(true);
-    } else {
-      setShowLargeFileWarning(false);
-    }
-  }, [content, savedContent, fileTypeInfo.type, isLargeFile, forceShowAsText]);
-
-  const handleContentChange = (newContent: string) => {
-    setEditedContent(newContent);
-    setHasChanges(newContent !== savedContent);
-    onContentChange?.(newContent);
-  };
-
-  const handleSave = () => {
-    if (isSaving) return;
-    onSave?.(editedContent);
-  };
-
-  const handleRevert = () => {
-    if (onRevert) {
-      onRevert();
-    } else {
-      setEditedContent(savedContent);
-      setHasChanges(false);
-    }
-  };
-
-  useEffect(() => {
-    if (!editorFocused || !isEditable) return;
-
-    const handleKeyDown = (e: KeyboardEvent) => {
-      const isCtrl = e.ctrlKey || e.metaKey;
-      if (isCtrl && e.key.toLowerCase() === "s") {
-        e.preventDefault();
-        e.stopPropagation();
-        handleSave();
-      }
-    };
-
-    document.addEventListener("keydown", handleKeyDown, true);
-
-    return () => {
-      document.removeEventListener("keydown", handleKeyDown, true);
-    };
-  }, [editorFocused, isEditable, handleSave]);
-
-  const handleConfirmOpenAsText = () => {
-    setForceShowAsText(true);
-    setShowLargeFileWarning(false);
-  };
-
-  const handleCancelOpenAsText = () => {
-    setShowLargeFileWarning(false);
-  };
-
-  if (isLoading) {
-    return (
-      <div className="h-full flex items-center justify-center">
-        <div className="text-center">
-          <div className="animate-spin rounded-full h-8 w-8 border-b-2 border-blue-500 mx-auto mb-4"></div>
-          <p className="text-sm text-muted-foreground">
-            {t("fileManager.loadingFile")}
-          </p>
-        </div>
-      </div>
-    );
-  }
-
-  return (
-    <div className="h-full flex flex-col bg-background">
-      <div className="flex-shrink-0 bg-card border-b border-border p-4">
-        <div className="flex flex-wrap items-center justify-between gap-3">
-          <div className="flex items-center gap-3">
-            <div className={cn("p-2 rounded-lg bg-muted", fileTypeInfo.color)}>
-              {fileTypeInfo.icon}
-            </div>
-            <div>
-              <h3 className="font-medium text-foreground">{file.name}</h3>
-              <div className="flex items-center gap-4 text-sm text-muted-foreground">
-                <span>{formatFileSize(file.size, t)}</span>
-                {file.modified && (
-                  <span>
-                    {t("fileManager.modified")}: {file.modified}
-                  </span>
-                )}
-                <span
-                  className={cn(
-                    "px-2 py-1 rounded-full text-xs",
-                    fileTypeInfo.color,
-                    "bg-muted",
-                  )}
-                >
-                  {fileTypeInfo.type.toUpperCase()}
-                </span>
-              </div>
-            </div>
-          </div>
-
-          <div className="ml-auto flex min-w-0 max-w-full flex-wrap items-center justify-end gap-2">
-            {isEditable && (
-              <Button
-                variant="ghost"
-                size="sm"
-                onClick={() => editorRef.current?.openSearchPanel()}
-                className="flex items-center gap-2"
-                title={t("fileManager.searchInFile")}
-              >
-                <Search className="w-4 h-4" />
-              </Button>
-            )}
-            {isEditable && (
-              <div className="flex items-center gap-1">
-                <Button
-                  variant="ghost"
-                  size="sm"
-                  onClick={decreaseFontSize}
-                  disabled={editorFontSize <= MIN_FONT_SIZE}
-                  title={t("fileManager.decreaseFontSize")}
-                  className="w-7 h-7 p-0"
-                >
-                  <ZoomOut className="w-4 h-4" />
-                </Button>
-                <span className="text-xs text-muted-foreground w-8 text-center select-none">
-                  {editorFontSize}px
-                </span>
-                <Button
-                  variant="ghost"
-                  size="sm"
-                  onClick={increaseFontSize}
-                  disabled={editorFontSize >= MAX_FONT_SIZE}
-                  title={t("fileManager.increaseFontSize")}
-                  className="w-7 h-7 p-0"
-                >
-                  <ZoomIn className="w-4 h-4" />
-                </Button>
-              </div>
-            )}
-            {isEditable && (
-              <Button
-                variant="ghost"
-                size="sm"
-                onClick={() => setShowKeyboardShortcuts(!showKeyboardShortcuts)}
-                className="flex items-center gap-2"
-                title={t("fileManager.showKeyboardShortcuts")}
-              >
-                <Keyboard className="w-4 h-4" />
-              </Button>
-            )}
-            {hasChanges && (
-              <>
-                <Button
-                  variant="outline"
-                  size="sm"
-                  onClick={handleRevert}
-                  disabled={isSaving}
-                  className="flex items-center gap-2"
-                >
-                  <RotateCcw className="w-4 h-4" />
-                  {t("fileManager.revert")}
-                </Button>
-                <Button
-                  variant="default"
-                  size="sm"
-                  onClick={handleSave}
-                  disabled={isSaving}
-                  className="flex items-center gap-2"
-                >
-                  <Save className="w-4 h-4" />
-                  {t("common.save")}
-                </Button>
-              </>
-            )}
-            {onDownload && (
-              <Button
-                variant="outline"
-                size="sm"
-                onClick={onDownload}
-                className="flex items-center gap-2"
-              >
-                <Download className="w-4 h-4" />
-                {t("fileManager.download")}
-              </Button>
-            )}
-            {isEditable && onOpenExternal && (
-              <div className="flex items-center gap-1">
-                <Button
-                  variant="outline"
-                  size="sm"
-                  onClick={onOpenExternal}
-                  className="flex items-center gap-2"
-                >
-                  <ExternalLink className="w-4 h-4" />
-                  {t("fileManager.openExternalEditor")}
-                </Button>
-                {onChooseExternalEditor && (
-                  <Button
-                    variant="ghost"
-                    size="sm"
-                    onClick={onChooseExternalEditor}
-                    className="h-8 w-8 p-0"
-                    title={t("fileManager.chooseExternalEditor")}
-                  >
-                    <Settings className="w-4 h-4" />
-                  </Button>
-                )}
-              </div>
-            )}
-          </div>
-        </div>
-      </div>
-
-      {showKeyboardShortcuts && isEditable && (
-        <div className="flex-shrink-0 bg-muted/30 border-b border-border p-4">
-          <div className="flex items-center justify-between mb-3">
-            <h3 className="text-sm font-semibold">
-              {t("fileManager.keyboardShortcuts")}
-            </h3>
-            <Button
-              variant="ghost"
-              size="sm"
-              onClick={() => setShowKeyboardShortcuts(false)}
-              className="h-6 w-6 p-0"
-            >
-              ×
-            </Button>
-          </div>
-          <div className="grid grid-cols-1 md:grid-cols-2 gap-3 text-xs">
-            <div className="space-y-2">
-              <h4 className="font-medium text-muted-foreground">
-                {t("fileManager.searchAndReplace")}
-              </h4>
-              <div className="space-y-1">
-                <div className="flex justify-between">
-                  <span>{t("fileManager.search")}</span>
-                  <Kbd className="px-2 py-1 bg-background rounded text-xs">
-                    <KbdKey className="px-2 py-1 bg-background rounded text-xs">
-                      Ctrl+F
-                    </KbdKey>
-                  </Kbd>
-                </div>
-                <div className="flex justify-between">
-                  <span>{t("fileManager.replace")}</span>
-                  <Kbd className="px-2 py-1 bg-background rounded text-xs">
-                    <KbdKey className="px-2 py-1 bg-background rounded text-xs">
-                      Ctrl+H
-                    </KbdKey>
-                  </Kbd>
-                </div>
-                <div className="flex justify-between">
-                  <span>{t("fileManager.findNext")}</span>
-                  <Kbd className="px-2 py-1 bg-background rounded text-xs">
-                    <KbdKey className="px-2 py-1 bg-background rounded text-xs">
-                      F3
-                    </KbdKey>
-                  </Kbd>
-                </div>
-                <div className="flex justify-between">
-                  <span>{t("fileManager.findPrevious")}</span>
-                  <Kbd className="px-2 py-1 bg-background rounded text-xs">
-                    <KbdKey className="px-2 py-1 bg-background rounded text-xs">
-                      Shift+F3
-                    </KbdKey>
-                  </Kbd>
-                </div>
-              </div>
-            </div>
-            <div className="space-y-2">
-              <h4 className="font-medium text-muted-foreground">
-                {t("fileManager.editing")}
-              </h4>
-              <div className="space-y-1">
-                <div className="flex justify-between">
-                  <span>{t("fileManager.save")}</span>
-                  <Kbd className="px-2 py-1 bg-background rounded text-xs">
-                    <KbdKey className="px-2 py-1 bg-background rounded text-xs">
-                      Ctrl+S
-                    </KbdKey>
-                  </Kbd>
-                </div>
-                <div className="flex justify-between">
-                  <span>{t("fileManager.selectAll")}</span>
-                  <Kbd className="px-2 py-1 bg-background rounded text-xs">
-                    <KbdKey className="px-2 py-1 bg-background rounded text-xs">
-                      Ctrl+A
-                    </KbdKey>
-                  </Kbd>
-                </div>
-                <div className="flex justify-between">
-                  <span>{t("fileManager.undo")}</span>
-                  <Kbd className="px-2 py-1 bg-background rounded text-xs">
-                    <KbdKey className="px-2 py-1 bg-background rounded text-xs">
-                      Ctrl+Z
-                    </KbdKey>
-                  </Kbd>
-                </div>
-                <div className="flex justify-between">
-                  <span>{t("fileManager.redo")}</span>
-                  <Kbd className="px-2 py-1 bg-background rounded text-xs">
-                    <KbdKey className="px-2 py-1 bg-background rounded text-xs">
-                      Ctrl+Y
-                    </KbdKey>
-                  </Kbd>
-                </div>
-                <div className="flex justify-between">
-                  <span>{t("fileManager.toggleComment")}</span>
-                  <Kbd className="px-2 py-1 bg-background rounded text-xs">
-                    <KbdKey className="px-2 py-1 bg-background rounded text-xs">
-                      Ctrl+/
-                    </KbdKey>
-                  </Kbd>
-                </div>
-                <div className="flex justify-between">
-                  <span>{t("fileManager.autoComplete")}</span>
-                  <Kbd className="px-2 py-1 bg-background rounded text-xs">
-                    <KbdKey className="px-2 py-1 bg-background rounded text-xs">
-                      Ctrl+Space
-                    </KbdKey>
-                  </Kbd>
-                </div>
-                <div className="flex justify-between">
-                  <span>{t("fileManager.moveLineUp")}</span>
-                  <Kbd className="px-2 py-1 bg-background rounded text-xs">
-                    <KbdKey className="px-2 py-1 bg-background rounded text-xs">
-                      Alt+↑
-                    </KbdKey>
-                  </Kbd>
-                </div>
-                <div className="flex justify-between">
-                  <span>{t("fileManager.moveLineDown")}</span>
-                  <Kbd className="px-2 py-1 bg-background rounded text-xs">
-                    <KbdKey className="px-2 py-1 bg-background rounded text-xs">
-                      Alt+↓
-                    </KbdKey>
-                  </Kbd>
-                </div>
-              </div>
-            </div>
-          </div>
-        </div>
-      )}
-
-      <div className="flex-1 overflow-hidden">
-        {showLargeFileWarning && (
-          <div className="h-full flex items-center justify-center bg-background">
-            <div className="bg-card border border-destructive/30 rounded-lg p-6 max-w-md mx-4 shadow-lg">
-              <div className="flex items-start gap-3 mb-4">
-                <AlertCircle className="w-6 h-6 text-destructive flex-shrink-0 mt-0.5" />
-                <div>
-                  <h3 className="font-medium text-foreground mb-2">
-                    {t("fileManager.largeFileWarning")}
-                  </h3>
-                  <p className="text-sm text-muted-foreground mb-3">
-                    {t("fileManager.largeFileWarningDesc", {
-                      size: formatFileSize(file.size, t),
-                    })}
-                  </p>
-                  {isTooLarge ? (
-                    <div className="bg-destructive/10 border border-destructive/30 rounded p-3 mb-4">
-                      <p className="text-sm text-destructive font-medium">
-                        {t("fileManager.fileTooLarge")}
-                      </p>
-                    </div>
-                  ) : (
-                    <p className="text-sm text-muted-foreground mb-4">
-                      {t("fileManager.confirmOpenAsText")}
-                    </p>
-                  )}
-                </div>
-              </div>
-
-              <div className="flex gap-3">
-                {!isTooLarge && (
-                  <Button
-                    variant="default"
-                    size="sm"
-                    onClick={handleConfirmOpenAsText}
-                    className="flex items-center gap-2"
-                  >
-                    <FileText className="w-4 h-4" />
-                    {t("fileManager.openAsText")}
-                  </Button>
-                )}
-                <Button
-                  variant="outline"
-                  size="sm"
-                  onClick={onDownload}
-                  className="flex items-center gap-2"
-                >
-                  <Download className="w-4 h-4" />
-                  {t("fileManager.downloadInstead")}
-                </Button>
-                <Button
-                  variant="outline"
-                  size="sm"
-                  onClick={handleCancelOpenAsText}
-                >
-                  {t("common.cancel")}
-                </Button>
-              </div>
-            </div>
-          </div>
-        )}
-
-        {fileTypeInfo.type === "image" && !showLargeFileWarning && (
-          <Suspense
-            fallback={<PreviewFallback label={t("fileManager.loadingImage")} />}
-          >
-            <ImagePreview
-              content={content}
-              fileName={file.name}
-              onDownload={onDownload}
-              onMediaDimensionsChange={onMediaDimensionsChange}
-            />
-          </Suspense>
-        )}
-
-        {shouldShowAsText && !showLargeFileWarning && (
-          <div className="h-full flex flex-col">
-            {isEditable ? (
-              <Suspense
-                fallback={
-                  <PreviewFallback label={t("fileManager.loadingEditor")} />
-                }
-              >
-                <CodeEditor
-                  ref={editorRef}
-                  fileName={file.name}
-                  value={editedContent}
-                  onChange={handleContentChange}
-                  onFocus={() => setEditorFocused(true)}
-                  onBlur={() => setEditorFocused(false)}
-                  placeholder={t("fileManager.startTyping")}
-                  fontSize={editorFontSize}
-                />
-              </Suspense>
-            ) : (
-              <div className="h-full p-4 font-mono text-sm whitespace-pre-wrap overflow-auto thin-scrollbar bg-background text-foreground">
-                {editedContent || content || t("fileManager.fileIsEmpty")}
-              </div>
-            )}
-          </div>
-        )}
-
-        {fileTypeInfo.type === "video" && !showLargeFileWarning && (
-          <div className="p-6 flex items-center justify-center h-full">
-            <div className="w-full max-w-4xl">
-              {(() => {
-                const ext = file.name.split(".").pop()?.toLowerCase() || "";
-                const mimeType = (() => {
-                  switch (ext) {
-                    case "mp4":
-                      return "video/mp4";
-                    case "webm":
-                      return "video/webm";
-                    case "mkv":
-                      return "video/x-matroska";
-                    case "avi":
-                      return "video/x-msvideo";
-                    case "mov":
-                      return "video/quicktime";
-                    case "wmv":
-                      return "video/x-ms-wmv";
-                    case "flv":
-                      return "video/x-flv";
-                    default:
-                      return "video/mp4";
-                  }
-                })();
-
-                const videoUrl = `data:${mimeType};base64,${content}`;
-
-                return (
-                  <div className="relative">
-                    <video
-                      controls
-                      className="w-full rounded-lg shadow-sm"
-                      style={{
-                        maxHeight: "calc(100vh - 200px)",
-                        backgroundColor: "#000",
-                      }}
-                      preload="metadata"
-                      onError={(e) => {
-                        console.error(
-                          "Video playback error:",
-                          e.currentTarget.error,
-                        );
-                      }}
-                      onLoadedMetadata={(e) => {
-                        const video = e.currentTarget;
-                        if (
-                          onMediaDimensionsChange &&
-                          video.videoWidth &&
-                          video.videoHeight
-                        ) {
-                          onMediaDimensionsChange({
-                            width: video.videoWidth,
-                            height: video.videoHeight,
-                          });
-                        }
-                      }}
-                    >
-                      <source src={videoUrl} type={mimeType} />
-                      <div className="text-center text-muted-foreground p-4">
-                        <AlertCircle className="w-8 h-8 mx-auto mb-2" />
-                        <p>{t("fileManager.videoUnsupported")}</p>
-                        {onDownload && (
-                          <Button
-                            variant="outline"
-                            onClick={onDownload}
-                            className="mt-2 flex items-center gap-2 mx-auto"
-                          >
-                            <Download className="w-4 h-4" />
-                            {t("fileManager.downloadToPlay")}
-                          </Button>
-                        )}
-                      </div>
-                    </video>
-                  </div>
-                );
-              })()}
-            </div>
-          </div>
-        )}
-
-        {fileTypeInfo.type === "markdown" && !showLargeFileWarning && (
-          <div className="h-full flex flex-col">
-            <div className="flex-shrink-0 bg-muted/30 border-b border-border p-2">
-              <div className="flex items-center justify-between">
-                <div className="flex items-center gap-2">
-                  <Button
-                    variant={markdownEditMode ? "default" : "outline"}
-                    size="sm"
-                    onClick={() => setMarkdownEditMode(true)}
-                  >
-                    <Edit className="w-4 h-4 mr-1" />
-                    {t("fileManager.edit")}
-                  </Button>
-                  <Button
-                    variant={!markdownEditMode ? "default" : "outline"}
-                    size="sm"
-                    onClick={() => setMarkdownEditMode(false)}
-                  >
-                    <Eye className="w-4 h-4 mr-1" />
-                    {t("fileManager.preview")}
-                  </Button>
-                </div>
-                <div className="flex items-center gap-2"></div>
-              </div>
-            </div>
-
-            <div className="flex-1 flex overflow-hidden">
-              {markdownEditMode ? (
-                <>
-                  <div className="flex-1 border-r border-border">
-                    <div className="h-full p-4 bg-background">
-                      <textarea
-                        value={editedContent}
-                        onChange={(e) => {
-                          setEditedContent(e.target.value);
-                          onContentChange?.(e.target.value);
-                        }}
-                        className="w-full h-full resize-none border-0 bg-transparent text-foreground font-mono text-sm leading-relaxed focus:outline-none focus:ring-0"
-                        placeholder={t("fileManager.startWritingMarkdown")}
-                      />
-                    </div>
-                  </div>
-
-                  <div className="flex-1 overflow-auto thin-scrollbar bg-muted/10">
-                    <div className="p-4">
-                      <Suspense
-                        fallback={
-                          <PreviewFallback
-                            label={t("fileManager.loadingPreview")}
-                          />
-                        }
-                      >
-                        <MarkdownRenderer
-                          compact
-                          content={
-                            editedContent || t("fileManager.emptyPreview")
-                          }
-                        />
-                      </Suspense>
-                    </div>
-                  </div>
-                </>
-              ) : (
-                <div className="flex-1 overflow-auto thin-scrollbar p-6">
-                  <div className="max-w-4xl mx-auto">
-                    <Suspense
-                      fallback={
-                        <PreviewFallback
-                          label={t("fileManager.loadingPreview")}
-                        />
-                      }
-                    >
-                      <MarkdownRenderer content={editedContent} />
-                    </Suspense>
-                  </div>
-                </div>
-              )}
-            </div>
-          </div>
-        )}
-
-        {fileTypeInfo.type === "pdf" && !showLargeFileWarning && (
-          <Suspense
-            fallback={<PreviewFallback label={t("fileManager.loadingPdf")} />}
-          >
-            <PdfPreview
-              content={content}
-              onDownload={onDownload}
-              onMediaDimensionsChange={onMediaDimensionsChange}
-            />
-          </Suspense>
-        )}
-
-        {fileTypeInfo.type === "audio" && !showLargeFileWarning && (
-          <Suspense
-            fallback={<PreviewFallback label={t("fileManager.loadingAudio")} />}
-          >
-            <AudioPreview
-              file={file}
-              content={content}
-              color={fileTypeInfo.color}
-              onMediaDimensionsChange={onMediaDimensionsChange}
-            />
-          </Suspense>
-        )}
-
-        {fileTypeInfo.type === "unknown" &&
-          !shouldShowAsText &&
-          !showLargeFileWarning && (
-            <div className="h-full flex items-center justify-center">
-              <div className="text-center text-muted-foreground">
-                <AlertCircle className="w-16 h-16 mx-auto mb-4 text-muted-foreground/50" />
-                <h3 className="text-lg font-medium mb-2">
-                  {t("fileManager.cannotPreviewType")}
-                </h3>
-                <p className="text-sm mb-4">
-                  {t("fileManager.cannotPreviewTypeHint")}
-                </p>
-                {onDownload && (
-                  <Button
-                    variant="outline"
-                    onClick={onDownload}
-                    className="flex items-center gap-2 mx-auto"
-                  >
-                    <Download className="w-4 h-4" />
-                    {t("fileManager.downloadFile")}
-                  </Button>
-                )}
-              </div>
-            </div>
-          )}
-      </div>
-
-      <div className="flex-shrink-0 bg-muted/50 border-t border-border px-4 py-2 text-xs text-muted-foreground">
-        <div className="flex justify-between items-center">
-          <span>{file.path}</span>
-          {hasChanges && (
-            <span className="text-orange-600 font-medium">
-              ● {t("common.unsavedChanges")}
-            </span>
-          )}
-        </div>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/components/FileWindow.tsx b/plugins/file-manager/src/frontend/components/FileWindow.tsx
deleted file mode 100644
index e727e6527..000000000
--- a/plugins/file-manager/src/frontend/components/FileWindow.tsx
+++ /dev/null
@@ -1,605 +0,0 @@
-/* eslint-disable react-hooks/exhaustive-deps */
-import React, { useState, useEffect, useRef } from "react";
-import { DraggableWindow } from "./DraggableWindow.tsx";
-import { FileViewer } from "./FileViewer.tsx";
-import { useWindowManager } from "./WindowManager.tsx";
-import {
-  downloadSSHFileStream,
-  readSSHFile,
-  writeSSHFile,
-  getSSHStatus,
-  connectSSH,
-  setSudoPassword,
-} from "../api/ssh-file-operations-api";
-import { SudoPasswordDialog } from "../SudoPasswordDialog.tsx";
-import { toast } from "sonner";
-import { DownloadProgressToast } from "./DownloadProgressToast";
-import type { SSHHost } from "../host-types";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-interface FileItem {
-  name: string;
-  type: "file" | "directory" | "link";
-  path: string;
-  size?: number;
-  modified?: string;
-  permissions?: string;
-  owner?: string;
-  group?: string;
-}
-
-interface FileWindowProps {
-  windowId: string;
-  file: FileItem;
-  sshSessionId: string;
-  sshHost: SSHHost;
-  initialX?: number;
-  initialY?: number;
-  onFileNotFound?: (file: FileItem) => void;
-}
-
-function isDisplayableText(str: string): boolean {
-  let printable = 0;
-  for (let i = 0; i < Math.min(str.length, 1000); i++) {
-    const code = str.charCodeAt(i);
-    if (
-      (code >= 32 && code <= 126) ||
-      code === 9 ||
-      code === 10 ||
-      code === 13 ||
-      code >= 128
-    ) {
-      printable++;
-    }
-  }
-  return printable / Math.min(str.length, 1000) > 0.85;
-}
-
-export function FileWindow({
-  windowId,
-  file,
-  sshSessionId,
-  sshHost,
-  initialX = 100,
-  initialY = 100,
-  onFileNotFound,
-}: FileWindowProps) {
-  const { closeWindow, maximizeWindow, focusWindow, windows } =
-    useWindowManager();
-
-  const { t } = useTranslation();
-
-  const [content, setContent] = useState<string>("");
-  const [isLoading, setIsLoading] = useState(false);
-  const [isSaving, setIsSaving] = useState(false);
-  const [isEditable, setIsEditable] = useState(false);
-  const [pendingContent, setPendingContent] = useState<string>("");
-  const [resetKey, setResetKey] = useState(0);
-  const [mediaDimensions, setMediaDimensions] = useState<
-    { width: number; height: number } | undefined
-  >();
-  const [externalEditorPath, setExternalEditorPath] = useState<string>("");
-  const autoSaveTimerRef = useRef<NodeJS.Timeout | null>(null);
-  const externalEditorRef = useRef<{
-    editId: string;
-    unsubscribe?: () => void;
-  } | null>(null);
-
-  const currentWindow = windows.find((w) => w.id === windowId);
-
-  useEffect(() => {
-    if (!window.electronAPI?.isElectron) return;
-
-    window.electronAPI
-      .getSetting?.("fileManager.externalEditorPath")
-      .then((value) => {
-        if (typeof value === "string") setExternalEditorPath(value);
-      })
-      .catch(() => {});
-  }, []);
-
-  const ensureSSHConnection = async () => {
-    try {
-      const status = await getSSHStatus(sshSessionId);
-
-      if (!status.connected) {
-        await connectSSH(sshSessionId, {
-          hostId: sshHost.id,
-          ip: sshHost.ip,
-          port: sshHost.port,
-          username: sshHost.username,
-          password: sshHost.password,
-          sshKey: sshHost.key,
-          keyPassword: sshHost.keyPassword,
-          authType: sshHost.authType,
-          credentialId: sshHost.credentialId,
-          userId: sshHost.userId,
-        });
-      }
-    } catch (error) {
-      console.error("SSH connection check/reconnect failed:", error);
-      throw error;
-    }
-  };
-
-  useEffect(() => {
-    const loadFileContent = async () => {
-      if (file.type !== "file") return;
-
-      try {
-        setIsLoading(true);
-
-        await ensureSSHConnection();
-
-        const response = await readSSHFile(sshSessionId, file.path);
-        let fileContent = response.content || "";
-
-        if (response.encoding === "base64") {
-          try {
-            const bytes = Uint8Array.from(atob(fileContent), (c) =>
-              c.charCodeAt(0),
-            );
-            const decoded = new TextDecoder("utf-8").decode(bytes);
-            if (isDisplayableText(decoded)) {
-              fileContent = decoded;
-            }
-          } catch (err) {
-            console.error("Failed to decode base64 content:", err);
-          }
-        }
-
-        setContent(fileContent);
-        setPendingContent(fileContent);
-        setResetKey((k) => k + 1);
-
-        if (!file.size) {
-          const contentSize = new Blob([fileContent]).size;
-          file.size = contentSize;
-        }
-
-        const mediaExtensions = [
-          "jpg",
-          "jpeg",
-          "png",
-          "gif",
-          "bmp",
-          "svg",
-          "webp",
-          "tiff",
-          "ico",
-          "mp3",
-          "wav",
-          "ogg",
-          "aac",
-          "flac",
-          "m4a",
-          "wma",
-          "mp4",
-          "avi",
-          "mov",
-          "wmv",
-          "flv",
-          "mkv",
-          "webm",
-          "m4v",
-          "zip",
-          "rar",
-          "7z",
-          "tar",
-          "gz",
-          "bz2",
-          "xz",
-          "exe",
-          "dll",
-          "so",
-          "dylib",
-          "bin",
-          "iso",
-        ];
-
-        const extension = file.name.split(".").pop()?.toLowerCase();
-        setIsEditable(!mediaExtensions.includes(extension || ""));
-      } catch (error: unknown) {
-        console.error("Failed to load file:", error);
-
-        const err = error as {
-          message?: string;
-          isFileNotFound?: boolean;
-          response?: {
-            status?: number;
-            data?: {
-              tooLarge?: boolean;
-              error?: string;
-              fileNotFound?: boolean;
-            };
-          };
-        };
-        const errorData = err?.response?.data;
-        if (errorData?.tooLarge) {
-          toast.error(
-            t("fileManager.fileTooLarge", { error: errorData.error }),
-            {
-              duration: 10000,
-            },
-          );
-        } else if (
-          err.message?.includes("connection") ||
-          err.message?.includes("established")
-        ) {
-          toast.error(
-            `SSH connection failed. Please check your connection to ${sshHost.name} (${sshHost.ip}:${sshHost.port})`,
-          );
-        } else {
-          const errorMessage =
-            errorData?.error || err.message || "Unknown error";
-          const isFileNotFound =
-            err.isFileNotFound ||
-            errorData?.fileNotFound ||
-            err.response?.status === 404 ||
-            errorMessage.includes("File not found") ||
-            errorMessage.includes("No such file or directory") ||
-            errorMessage.includes("cannot access") ||
-            errorMessage.includes("not found") ||
-            errorMessage.includes("Resource not found");
-
-          if (isFileNotFound && onFileNotFound) {
-            onFileNotFound(file);
-            toast.error(
-              t("fileManager.fileNotFoundAndRemoved", { name: file.name }),
-            );
-
-            closeWindow(windowId);
-            return;
-          } else {
-            toast.error(
-              t("fileManager.failedToLoadFile", {
-                error: errorMessage.includes("Server error occurred")
-                  ? t("fileManager.serverErrorOccurred")
-                  : errorMessage,
-              }),
-            );
-          }
-        }
-      } finally {
-        setIsLoading(false);
-      }
-    };
-
-    loadFileContent();
-  }, [file, sshSessionId, sshHost]);
-
-  const handleRevert = async () => {
-    const loadFileContent = async () => {
-      if (file.type !== "file") return;
-
-      try {
-        setIsLoading(true);
-
-        await ensureSSHConnection();
-
-        const response = await readSSHFile(sshSessionId, file.path, {
-          force: true,
-        });
-        const fileContent = response.content || "";
-        setContent(fileContent);
-        setPendingContent("");
-        setResetKey((k) => k + 1);
-
-        if (!file.size) {
-          const contentSize = new Blob([fileContent]).size;
-          file.size = contentSize;
-        }
-      } catch (error: unknown) {
-        console.error("Failed to load file content:", error);
-        const err = error as { message?: string };
-        toast.error(
-          `${t("fileManager.failedToLoadFile")}: ${err.message || t("fileManager.unknownError")}`,
-        );
-      } finally {
-        setIsLoading(false);
-      }
-    };
-
-    loadFileContent();
-  };
-
-  const [sudoSaveContent, setSudoSaveContent] = useState<string | null>(null);
-
-  const handleSudoSave = async (password: string) => {
-    const pending = sudoSaveContent;
-    setSudoSaveContent(null);
-    if (pending === null) return;
-    try {
-      await setSudoPassword(sshSessionId, password);
-    } catch {
-      toast.error(t("fileManager.sudoAuthFailed"));
-      return;
-    }
-    await handleSave(pending);
-  };
-
-  const handleSave = async (newContent: string) => {
-    try {
-      setIsSaving(true);
-
-      await ensureSSHConnection();
-
-      await writeSSHFile(sshSessionId, file.path, newContent);
-      setContent(newContent);
-      setPendingContent("");
-
-      if (autoSaveTimerRef.current) {
-        clearTimeout(autoSaveTimerRef.current);
-        autoSaveTimerRef.current = null;
-      }
-
-      toast.success(t("fileManager.fileSavedSuccessfully"));
-    } catch (error: unknown) {
-      console.error("Failed to save file:", error);
-
-      const err = error as {
-        message?: string;
-        response?: { data?: { needsSudo?: boolean } };
-      };
-      if (err.response?.data?.needsSudo) {
-        setSudoSaveContent(newContent);
-      } else if (
-        err.message?.includes("connection") ||
-        err.message?.includes("established")
-      ) {
-        toast.error(
-          t("fileManager.sshConnectionFailed", {
-            name: sshHost.name,
-            ip: sshHost.ip,
-            port: sshHost.port,
-          }),
-        );
-      } else {
-        toast.error(
-          `${t("fileManager.failedToSaveFile")}: ${err.message || t("fileManager.unknownError")}`,
-        );
-      }
-    } finally {
-      setIsSaving(false);
-    }
-  };
-
-  const closeExternalEditor = async () => {
-    const session = externalEditorRef.current;
-    if (!session) return;
-
-    session.unsubscribe?.();
-    externalEditorRef.current = null;
-
-    try {
-      await window.electronAPI?.closeExternalEditor?.(session.editId);
-    } catch (error) {
-      console.error("Failed to close external editor session:", error);
-    }
-  };
-
-  const handleOpenExternalEditor = async () => {
-    if (!window.electronAPI?.isElectron) {
-      toast.error(t("fileManager.externalEditorDesktopOnly"));
-      return;
-    }
-
-    try {
-      await closeExternalEditor();
-      const result = await window.electronAPI.openExternalEditor({
-        fileName: file.name,
-        content: pendingContent || content,
-        encoding: "utf8",
-        editorPath: externalEditorPath || null,
-      });
-
-      if (!result.success || !result.editId) {
-        throw new Error(result.error || "Failed to open external editor");
-      }
-
-      const unsubscribe = window.electronAPI.onExternalEditorSaved?.(
-        (payload) => {
-          if (payload.editId !== result.editId) return;
-          void handleSave(payload.content);
-        },
-      );
-
-      externalEditorRef.current = {
-        editId: result.editId,
-        unsubscribe,
-      };
-      toast.success(t("fileManager.externalEditorOpened"));
-    } catch (error: unknown) {
-      console.error("Failed to open external editor:", error);
-      const err = error as { message?: string };
-      toast.error(
-        `${t("fileManager.failedToOpenExternalEditor")}: ${
-          err.message || t("fileManager.unknownError")
-        }`,
-      );
-    }
-  };
-
-  const handleChooseExternalEditor = async () => {
-    if (!window.electronAPI?.isElectron) {
-      toast.error(t("fileManager.externalEditorDesktopOnly"));
-      return;
-    }
-
-    try {
-      const result = await window.electronAPI.showOpenDialog({
-        title: t("fileManager.chooseExternalEditor"),
-        properties: ["openFile"],
-      });
-      const editorPath = result.filePaths?.[0];
-      if (result.canceled || !editorPath) return;
-
-      await window.electronAPI.setSetting?.(
-        "fileManager.externalEditorPath",
-        editorPath,
-      );
-      setExternalEditorPath(editorPath);
-      toast.success(t("fileManager.externalEditorSelected"));
-    } catch (error: unknown) {
-      console.error("Failed to select external editor:", error);
-      const err = error as { message?: string };
-      toast.error(
-        `${t("fileManager.failedToSelectExternalEditor")}: ${
-          err.message || t("fileManager.unknownError")
-        }`,
-      );
-    }
-  };
-
-  const handleContentChange = (newContent: string) => {
-    setPendingContent(newContent);
-
-    if (autoSaveTimerRef.current) {
-      clearTimeout(autoSaveTimerRef.current);
-      autoSaveTimerRef.current = null;
-    }
-
-    if (newContent !== content) {
-      autoSaveTimerRef.current = setTimeout(async () => {
-        try {
-          await handleSave(newContent);
-          toast.success(t("fileManager.fileAutoSaved"));
-        } catch (error) {
-          console.error("Auto-save failed:", error);
-          toast.error(t("fileManager.autoSaveFailed"));
-        }
-      }, 60000);
-    }
-  };
-
-  useEffect(() => {
-    return () => {
-      if (autoSaveTimerRef.current) {
-        clearTimeout(autoSaveTimerRef.current);
-      }
-      void closeExternalEditor();
-    };
-  }, []);
-
-  const handleDownload = async () => {
-    const toastId = toast.loading(
-      <DownloadProgressToast t={t} fileName={file.name} loaded={0} />,
-      { duration: Infinity },
-    );
-    try {
-      await ensureSSHConnection();
-
-      await downloadSSHFileStream(
-        sshSessionId,
-        file.path,
-        ({ loaded, total }) => {
-          toast.loading(
-            <DownloadProgressToast
-              t={t}
-              fileName={file.name}
-              loaded={loaded}
-              total={total}
-            />,
-            { id: toastId, duration: Infinity },
-          );
-        },
-      );
-      toast.success(
-        t("fileManager.fileDownloadedSuccessfully", { name: file.name }),
-        { id: toastId, duration: undefined },
-      );
-    } catch (error: unknown) {
-      console.error("Failed to download file:", error);
-
-      const err = error as { message?: string };
-      if (
-        err.message?.includes("connection") ||
-        err.message?.includes("established")
-      ) {
-        toast.error(
-          `SSH connection failed. Please check your connection to ${sshHost.name} (${sshHost.ip}:${sshHost.port})`,
-          { id: toastId, duration: undefined },
-        );
-      } else {
-        toast.error(
-          `Failed to download file: ${err.message || "Unknown error"}`,
-          { id: toastId, duration: undefined },
-        );
-      }
-    }
-  };
-
-  const handleClose = () => {
-    void closeExternalEditor();
-    closeWindow(windowId);
-  };
-
-  const handleMaximize = () => {
-    maximizeWindow(windowId);
-  };
-
-  const handleFocus = () => {
-    focusWindow(windowId);
-  };
-
-  const handleMediaDimensionsChange = (dimensions: {
-    width: number;
-    height: number;
-  }) => {
-    setMediaDimensions(dimensions);
-  };
-
-  if (!currentWindow) {
-    return null;
-  }
-
-  return (
-    <DraggableWindow
-      title={file.name}
-      initialX={initialX}
-      initialY={initialY}
-      initialWidth={800}
-      initialHeight={600}
-      minWidth={400}
-      minHeight={300}
-      onClose={handleClose}
-      onMaximize={handleMaximize}
-      onFocus={handleFocus}
-      isMaximized={currentWindow.isMaximized}
-      zIndex={currentWindow.zIndex}
-      targetSize={mediaDimensions}
-    >
-      <FileViewer
-        file={file}
-        content={pendingContent || content}
-        savedContent={content}
-        isLoading={isLoading}
-        isSaving={isSaving}
-        resetKey={resetKey}
-        onRevert={handleRevert}
-        isEditable={isEditable}
-        onContentChange={handleContentChange}
-        onSave={(newContent) => handleSave(newContent)}
-        onDownload={handleDownload}
-        onOpenExternal={
-          window.electronAPI?.isElectron && isEditable
-            ? handleOpenExternalEditor
-            : undefined
-        }
-        onChooseExternalEditor={
-          window.electronAPI?.isElectron && isEditable
-            ? handleChooseExternalEditor
-            : undefined
-        }
-        onMediaDimensionsChange={handleMediaDimensionsChange}
-      />
-      <SudoPasswordDialog
-        open={sudoSaveContent !== null}
-        onOpenChange={(open) => {
-          if (!open) setSudoSaveContent(null);
-        }}
-        onSubmit={(password) => void handleSudoSave(password)}
-      />
-    </DraggableWindow>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/components/FolderTree.tsx b/plugins/file-manager/src/frontend/components/FolderTree.tsx
deleted file mode 100644
index 9e6122f59..000000000
--- a/plugins/file-manager/src/frontend/components/FolderTree.tsx
+++ /dev/null
@@ -1,668 +0,0 @@
-"use client";
-import React, {
-  useState,
-  useCallback,
-  createContext,
-  useContext,
-  useRef,
-  useEffect,
-} from "react";
-import {
-  motion,
-  AnimatePresence,
-  easeInOut,
-  type Variants,
-} from "motion/react";
-import {
-  ChevronRight,
-  Folder,
-  FolderOpen,
-  File,
-  type LucideIcon,
-} from "lucide-react";
-import { cn } from "@termix/plugin-sdk/ui";
-
-const animationVariants: Variants = {
-  rootInitial: { opacity: 0, y: 20 },
-  rootAnimate: { opacity: 1, y: 0 },
-  itemInitial: { opacity: 0, x: -10 },
-  itemAnimate: { opacity: 1, x: 0 },
-  contentHidden: { opacity: 0, height: 0 },
-  contentVisible: { opacity: 1, height: "auto" },
-  chevronClosed: { rotate: 0 },
-  chevronOpen: { rotate: 90 },
-};
-
-const transitions = {
-  root: { duration: 0.4 },
-  item: { duration: 0.2 },
-  content: { duration: 0.3, ease: easeInOut },
-  chevron: { duration: 0.2 },
-};
-
-interface ExpansionContextType {
-  expandedIds: Set<string>;
-  toggleExpanded: (id: string) => void;
-}
-
-interface SelectionContextType {
-  selectedId: string | null;
-  setSelected: (id: string) => void;
-  onSelect?: (id: string, label: string) => void;
-}
-
-interface TreeContextType {
-  focusedId: string | null;
-  setFocusedId: (id: string | null) => void;
-  treeId: string;
-  setKeyboardMode: (mode: boolean) => void;
-  keyboardMode: boolean;
-}
-
-interface LevelContextType {
-  level: number;
-}
-
-const ExpansionContext = createContext<ExpansionContextType | null>(null);
-const SelectionContext = createContext<SelectionContextType | null>(null);
-const TreeContext = createContext<TreeContextType | null>(null);
-const LevelContext = createContext<LevelContextType>({ level: 0 });
-
-const useExpansion = () => {
-  const context = useContext(ExpansionContext);
-  if (!context) {
-    throw new Error(
-      "FolderTree components must be used within FolderTree.Root",
-    );
-  }
-  return context;
-};
-
-const useSelection = () => {
-  const context = useContext(SelectionContext);
-  if (!context) {
-    throw new Error(
-      "FolderTree components must be used within FolderTree.Root",
-    );
-  }
-  return context;
-};
-
-const useTree = () => {
-  const context = useContext(TreeContext);
-  if (!context) {
-    throw new Error(
-      "FolderTree components must be used within FolderTree.Root",
-    );
-  }
-  return context;
-};
-
-const useLevel = () => {
-  return useContext(LevelContext);
-};
-
-const getPaddingClass = (level: number): string => {
-  const paddingMap: Record<number, string> = {
-    0: "pl-3",
-    1: "pl-8",
-    2: "pl-12",
-    3: "pl-16",
-    4: "pl-20",
-    5: "pl-24",
-    6: "pl-28",
-    7: "pl-32",
-  };
-  return paddingMap[level] || `pl-[${Math.min(level * 4 + 12, 48)}px]`;
-};
-
-interface CustomBadge {
-  content: React.ReactNode;
-  className?: string;
-  ariaLabel?: string;
-}
-
-interface RootProps {
-  defaultExpanded?: string[];
-  defaultSelected?: string;
-  selectedId?: string | null;
-  expandedIds?: Set<string>;
-  onSelect?: (id: string, label: string) => void;
-  className?: string;
-  children: React.ReactNode;
-  id?: string;
-}
-
-interface ItemProps {
-  id: string;
-  label: string;
-  icon?: LucideIcon;
-  badge?: string | number;
-  modified?: boolean | CustomBadge;
-  untracked?: boolean | CustomBadge;
-  className?: string;
-  children?: React.ReactNode;
-}
-
-interface TriggerProps {
-  className?: string;
-}
-
-interface ContentProps {
-  children: React.ReactNode;
-  className?: string;
-}
-
-const Root: React.FC<RootProps> = ({
-  defaultExpanded = [],
-  defaultSelected,
-  selectedId: controlledSelectedId,
-  expandedIds: additionalExpandedIds,
-  onSelect,
-  className = "",
-  children,
-  id = "folder-tree",
-}) => {
-  const [expandedIds, setExpandedIds] = useState<Set<string>>(
-    new Set(defaultExpanded),
-  );
-  const [internalSelectedId, setInternalSelectedId] = useState<string | null>(
-    defaultSelected || null,
-  );
-  const selectedId =
-    controlledSelectedId !== undefined
-      ? controlledSelectedId
-      : internalSelectedId;
-  const [focusedId, setFocusedId] = useState<string | null>(null);
-  const [keyboardMode, setKeyboardMode] = useState(false);
-  const treeRef = useRef<HTMLDivElement>(null);
-
-  useEffect(() => {
-    if (!additionalExpandedIds || additionalExpandedIds.size === 0) return;
-    setExpandedIds((prev) => {
-      const merged = new Set(prev);
-      let changed = false;
-      for (const id of additionalExpandedIds) {
-        if (!merged.has(id)) {
-          merged.add(id);
-          changed = true;
-        }
-      }
-      return changed ? merged : prev;
-    });
-  }, [additionalExpandedIds]);
-
-  const toggleExpanded = useCallback((id: string) => {
-    setExpandedIds((prev) => {
-      const newSet = new Set(prev);
-      if (newSet.has(id)) {
-        newSet.delete(id);
-      } else {
-        newSet.add(id);
-      }
-      return newSet;
-    });
-  }, []);
-
-  const setSelected = useCallback((id: string) => {
-    setInternalSelectedId(id);
-  }, []);
-
-  const getVisibleItemIds = useCallback(() => {
-    const items = Array.from(
-      treeRef.current?.querySelectorAll('[role="treeitem"]') || [],
-    );
-    return items
-      .filter((item) => {
-        const element = item as HTMLElement;
-        return element.offsetHeight > 0 && element.offsetWidth > 0;
-      })
-      .map((item) => item.getAttribute("data-id"))
-      .filter(Boolean) as string[];
-  }, []);
-
-  const [treeHasFocus, setTreeHasFocus] = useState(false);
-
-  const handleTreeFocus = useCallback(() => {
-    if (!treeHasFocus) {
-      setTreeHasFocus(true);
-      setKeyboardMode(true);
-    }
-  }, [treeHasFocus]);
-
-  const handleTreeBlur = useCallback((e: React.FocusEvent) => {
-    if (!treeRef.current?.contains(e.relatedTarget as Node)) {
-      setTreeHasFocus(false);
-      setFocusedId(null);
-      setKeyboardMode(false);
-    }
-  }, []);
-
-  const handleKeyDown = useCallback(
-    (e: React.KeyboardEvent) => {
-      const getVisibleItems = () => {
-        return Array.from(
-          treeRef.current?.querySelectorAll('[role="treeitem"]') || [],
-        ).filter((item) => {
-          const element = item as HTMLElement;
-          return element.offsetHeight > 0 && element.offsetWidth > 0;
-        });
-      };
-
-      if (e.key === "Tab") {
-        if (treeHasFocus && !focusedId) {
-          const visibleItemIds = getVisibleItemIds();
-          if (visibleItemIds.length > 0) {
-            setFocusedId(visibleItemIds[0]);
-            e.preventDefault();
-            return;
-          }
-        }
-
-        if (focusedId) {
-          const visibleItems = getVisibleItems();
-          const currentIndex = visibleItems.findIndex(
-            (item) => item.getAttribute("data-id") === focusedId,
-          );
-
-          if (e.shiftKey) {
-            if (currentIndex === 0) {
-              setFocusedId(null);
-              setTreeHasFocus(false);
-              setKeyboardMode(false);
-              return;
-            }
-            const nextIndex = Math.max(0, currentIndex - 1);
-            const nextItem = visibleItems[nextIndex] as HTMLElement;
-            const nextId = nextItem?.getAttribute("data-id");
-            if (nextId) {
-              setFocusedId(nextId);
-              e.preventDefault();
-            }
-          } else {
-            if (currentIndex === visibleItems.length - 1) {
-              setFocusedId(null);
-              setTreeHasFocus(false);
-              setKeyboardMode(false);
-              return;
-            }
-            const nextIndex = Math.min(
-              visibleItems.length - 1,
-              currentIndex + 1,
-            );
-            const nextItem = visibleItems[nextIndex] as HTMLElement;
-            const nextId = nextItem?.getAttribute("data-id");
-            if (nextId) {
-              setFocusedId(nextId);
-              e.preventDefault();
-            }
-          }
-        }
-        return;
-      }
-
-      if (!keyboardMode || !focusedId) return;
-
-      const visibleItems = getVisibleItems();
-      const currentIndex = visibleItems.findIndex(
-        (item) => item.getAttribute("data-id") === focusedId,
-      );
-
-      switch (e.key) {
-        case "ArrowDown":
-          e.preventDefault();
-          if (currentIndex < visibleItems.length - 1) {
-            const nextItem = visibleItems[currentIndex + 1] as HTMLElement;
-            const nextId = nextItem.getAttribute("data-id");
-            if (nextId) setFocusedId(nextId);
-          }
-          break;
-        case "ArrowUp":
-          e.preventDefault();
-          if (currentIndex > 0) {
-            const prevItem = visibleItems[currentIndex - 1] as HTMLElement;
-            const prevId = prevItem.getAttribute("data-id");
-            if (prevId) setFocusedId(prevId);
-          }
-          break;
-        case "ArrowRight":
-          e.preventDefault();
-          if (!expandedIds.has(focusedId)) {
-            toggleExpanded(focusedId);
-          }
-          break;
-        case "ArrowLeft":
-          e.preventDefault();
-          if (expandedIds.has(focusedId)) {
-            toggleExpanded(focusedId);
-          }
-          break;
-        case "Enter":
-        case " ":
-          e.preventDefault();
-          setSelected(focusedId);
-          if (onSelect) {
-            const currentItem = visibleItems[currentIndex] as HTMLElement;
-            const label =
-              currentItem.querySelector("span:nth-of-type(2)")?.textContent ||
-              "";
-            onSelect(focusedId, label);
-          }
-          break;
-      }
-    },
-    [
-      focusedId,
-      keyboardMode,
-      expandedIds,
-      toggleExpanded,
-      setSelected,
-      onSelect,
-      getVisibleItemIds,
-      treeHasFocus,
-    ],
-  );
-
-  useEffect(() => {
-    const handleMouseDown = () => setKeyboardMode(false);
-    document.addEventListener("mousedown", handleMouseDown);
-    return () => {
-      document.removeEventListener("mousedown", handleMouseDown);
-    };
-  }, []);
-
-  const expansionValue: ExpansionContextType = {
-    expandedIds,
-    toggleExpanded,
-  };
-
-  const selectionValue: SelectionContextType = {
-    selectedId,
-    setSelected,
-    onSelect,
-  };
-
-  const treeValue: TreeContextType = {
-    focusedId,
-    setFocusedId,
-    treeId: id,
-    setKeyboardMode,
-    keyboardMode,
-  };
-
-  return (
-    <ExpansionContext.Provider value={expansionValue}>
-      <SelectionContext.Provider value={selectionValue}>
-        <TreeContext.Provider value={treeValue}>
-          <LevelContext.Provider value={{ level: 0 }}>
-            <motion.div
-              ref={treeRef}
-              variants={animationVariants}
-              initial="rootInitial"
-              animate="rootAnimate"
-              transition={transitions.root}
-              className={cn(
-                "bg-canvas border border-edge rounded-lg overflow-hidden",
-                className,
-              )}
-              role="tree"
-              aria-labelledby={`${id}-label`}
-              tabIndex={0}
-              onKeyDown={handleKeyDown}
-              onFocus={handleTreeFocus}
-              onBlur={handleTreeBlur}
-            >
-              <div className="w-full overflow-y-auto bg-canvas text-sm">
-                {children}
-              </div>
-            </motion.div>
-          </LevelContext.Provider>
-        </TreeContext.Provider>
-      </SelectionContext.Provider>
-    </ExpansionContext.Provider>
-  );
-};
-
-const ItemContext = createContext<{
-  itemId: string;
-  hasChildren: boolean;
-  isExpanded: boolean;
-  toggleExpanded: () => void;
-} | null>(null);
-
-const Item: React.FC<ItemProps> = ({
-  id,
-  label,
-  icon,
-  badge,
-  modified,
-  untracked,
-  className = "",
-  children,
-}) => {
-  const expansionContext = useExpansion();
-  const selectionContext = useSelection();
-  const treeContext = useTree();
-  const { level } = useLevel();
-  const itemRef = useRef<HTMLDivElement>(null);
-  const keyboardMode = treeContext.keyboardMode;
-
-  const hasChildren = React.Children.count(children) > 0;
-  const isExpanded = expansionContext.expandedIds.has(id);
-  const isSelected = selectionContext.selectedId === id;
-  const isFocused = treeContext.focusedId === id;
-
-  const handleItemClick = useCallback(() => {
-    treeContext.setKeyboardMode(false);
-    selectionContext.setSelected(id);
-    treeContext.setFocusedId(id);
-    if (selectionContext.onSelect) {
-      selectionContext.onSelect(id, label);
-    }
-  }, [id, label, selectionContext, treeContext]);
-
-  const toggleExpanded = useCallback(() => {
-    if (hasChildren) {
-      expansionContext.toggleExpanded(id);
-    }
-  }, [id, hasChildren, expansionContext]);
-
-  const handleFocus = useCallback(() => {
-    treeContext.setFocusedId(id);
-  }, [id, treeContext]);
-
-  useEffect(() => {
-    if (isFocused && itemRef.current) {
-      itemRef.current.focus();
-    }
-  }, [isFocused]);
-
-  const IconComponent =
-    icon || (hasChildren ? (isExpanded ? FolderOpen : Folder) : File);
-
-  const itemContextValue = {
-    itemId: id,
-    hasChildren,
-    isExpanded,
-    toggleExpanded,
-  };
-
-  const renderBadge = (
-    badgeData: boolean | CustomBadge | undefined,
-    defaultContent: string,
-    defaultClassName: string,
-  ) => {
-    if (!badgeData) return null;
-
-    if (typeof badgeData === "boolean") {
-      return (
-        <span
-          className={defaultClassName}
-          aria-label={`${defaultContent} status`}
-        >
-          {defaultContent}
-        </span>
-      );
-    }
-
-    return (
-      <span
-        className={cn(
-          "ml-auto text-xs px-2 py-0.5 rounded-full",
-          badgeData.className,
-        )}
-        aria-label={badgeData.ariaLabel || `Custom badge: ${badgeData.content}`}
-      >
-        {badgeData.content}
-      </span>
-    );
-  };
-
-  return (
-    <ItemContext.Provider value={itemContextValue}>
-      <LevelContext.Provider value={{ level: level + 1 }}>
-        <div>
-          <motion.div
-            ref={itemRef}
-            variants={animationVariants}
-            initial="itemInitial"
-            animate="itemAnimate"
-            transition={{ ...transitions.item, delay: level * 0.05 }}
-            data-selected={isSelected ? "true" : "false"}
-            data-id={id}
-            className={cn(
-              "flex items-center gap-2 py-1.5 text-sm transition-colors cursor-pointer select-none",
-              getPaddingClass(level),
-              className,
-              isSelected
-                ? "bg-accent text-accent-foreground border-r-2 border-ring"
-                : "",
-              !isSelected && "hover:bg-hover",
-              keyboardMode && isFocused
-                ? "focus:outline-hidden focus:ring-2 focus:ring-ring focus:ring-inset"
-                : "focus:outline-hidden",
-            )}
-            onClick={(e: React.MouseEvent) => {
-              handleItemClick();
-              e.stopPropagation();
-              toggleExpanded();
-            }}
-            onFocus={handleFocus}
-            role="treeitem"
-            tabIndex={isFocused ? 0 : -1}
-            aria-expanded={hasChildren ? isExpanded : undefined}
-            aria-selected={isSelected}
-            aria-label={`${hasChildren ? "Folder" : "File"}: ${label}`}
-            aria-level={level + 1}
-          >
-            {hasChildren && (
-              <motion.span
-                className="shrink-0 cursor-pointer"
-                variants={animationVariants}
-                animate={isExpanded ? "chevronOpen" : "chevronClosed"}
-                transition={transitions.chevron}
-                aria-hidden="true"
-              >
-                <ChevronRight size={14} className="text-muted-foreground" />
-              </motion.span>
-            )}
-            {!hasChildren && <span className="w-3 mr-2" aria-hidden="true" />}
-            {IconComponent && (
-              <IconComponent
-                size={16}
-                data-selected={isSelected ? "true" : "false"}
-                data-child={hasChildren ? "true" : "false"}
-                className={cn(
-                  "mr-1 shrink-0 text-muted-foreground data-[child=true]:text-primary data-[selected=true]:text-accent-foreground",
-                )}
-                aria-hidden="true"
-              />
-            )}
-            <span className="flex-1">{label}</span>
-            {badge && (
-              <span
-                className="ml-auto text-xs bg-muted text-muted-foreground px-2 py-0.5 rounded-full"
-                aria-label={`Badge: ${badge}`}
-              >
-                {badge}
-              </span>
-            )}
-            {renderBadge(
-              modified,
-              "M",
-              "ml-auto text-xs bg-yellow-200 dark:bg-yellow-700 text-yellow-800 dark:text-yellow-200 px-2 py-0.5 rounded-full",
-            )}
-            {renderBadge(
-              untracked,
-              "U",
-              "ml-auto text-xs bg-green-200 dark:bg-green-700 text-green-800 dark:text-green-200 px-2 py-0.5 rounded-full",
-            )}
-          </motion.div>
-          {children}
-        </div>
-      </LevelContext.Provider>
-    </ItemContext.Provider>
-  );
-};
-
-const Trigger: React.FC<TriggerProps> = ({ className = "" }) => {
-  const itemContext = useContext(ItemContext);
-  if (!itemContext || !itemContext.hasChildren) {
-    return null;
-  }
-
-  return (
-    <motion.span
-      className={cn("mr-2 shrink-0 cursor-pointer", className)}
-      variants={animationVariants}
-      animate={itemContext.isExpanded ? "chevronOpen" : "chevronClosed"}
-      transition={transitions.chevron}
-      onClick={(e: React.MouseEvent) => {
-        e.stopPropagation();
-        itemContext.toggleExpanded();
-      }}
-      role="button"
-      aria-label={itemContext.isExpanded ? "Collapse" : "Expand"}
-      tabIndex={-1}
-    >
-      <ChevronRight size={14} className="text-muted-foreground" />
-    </motion.span>
-  );
-};
-
-const Content: React.FC<ContentProps> = ({ children, className = "" }) => {
-  const itemContext = useContext(ItemContext);
-  if (!itemContext) {
-    return <>{children}</>;
-  }
-
-  const hasContent = React.Children.count(children) > 0;
-
-  return (
-    <AnimatePresence>
-      {hasContent && itemContext.isExpanded && (
-        <motion.div
-          variants={animationVariants}
-          initial="contentHidden"
-          animate="contentVisible"
-          exit="contentHidden"
-          transition={transitions.content}
-          style={{ overflow: "hidden" }}
-          className={className}
-          role="group"
-        >
-          {children}
-        </motion.div>
-      )}
-    </AnimatePresence>
-  );
-};
-
-const FolderTree = {
-  Root,
-  Item,
-  Trigger,
-  Content,
-};
-
-export default FolderTree;
diff --git a/plugins/file-manager/src/frontend/components/ImagePreview.tsx b/plugins/file-manager/src/frontend/components/ImagePreview.tsx
deleted file mode 100644
index 3d4f86915..000000000
--- a/plugins/file-manager/src/frontend/components/ImagePreview.tsx
+++ /dev/null
@@ -1,114 +0,0 @@
-import React, { useState } from "react";
-import { PhotoProvider, PhotoView } from "react-photo-view";
-import "react-photo-view/dist/react-photo-view.css";
-import { AlertCircle, Download } from "lucide-react";
-import { Button } from "@termix/plugin-sdk/ui";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-interface ImagePreviewProps {
-  content: string;
-  fileName: string;
-  onDownload?: () => void;
-  onMediaDimensionsChange?: (dimensions: {
-    width: number;
-    height: number;
-  }) => void;
-}
-
-function getImageDataUrl(content: string, fileName: string): string {
-  const ext = fileName.split(".").pop()?.toLowerCase() || "";
-
-  const mimeTypes: Record<string, string> = {
-    svg: "image/svg+xml",
-    png: "image/png",
-    jpg: "image/jpeg",
-    jpeg: "image/jpeg",
-    gif: "image/gif",
-    webp: "image/webp",
-    bmp: "image/bmp",
-    ico: "image/x-icon",
-    tiff: "image/tiff",
-    tif: "image/tiff",
-  };
-
-  const mimeType = mimeTypes[ext] || "image/png";
-  return `data:${mimeType};base64,${content}`;
-}
-
-export function ImagePreview({
-  content,
-  fileName,
-  onDownload,
-  onMediaDimensionsChange,
-}: ImagePreviewProps) {
-  const { t } = useTranslation();
-  const [imageLoadError, setImageLoadError] = useState(false);
-  const [imageLoading, setImageLoading] = useState(true);
-  const imageUrl = getImageDataUrl(content, fileName);
-
-  return (
-    <div className="p-6 flex items-center justify-center h-full relative">
-      {imageLoadError ? (
-        <div className="text-center text-muted-foreground">
-          <AlertCircle className="w-16 h-16 mx-auto mb-4 text-muted-foreground/50" />
-          <h3 className="text-lg font-medium mb-2">
-            {t("fileManager.imageLoadError")}
-          </h3>
-          <p className="text-sm mb-4">{fileName}</p>
-          {onDownload && (
-            <Button
-              variant="outline"
-              onClick={onDownload}
-              className="flex items-center gap-2 mx-auto"
-            >
-              <Download className="w-4 h-4" />
-              {t("fileManager.download")}
-            </Button>
-          )}
-        </div>
-      ) : (
-        <PhotoProvider maskOpacity={0.7}>
-          <PhotoView src={imageUrl}>
-            <img
-              src={imageUrl}
-              alt={fileName}
-              className="max-w-full max-h-full object-contain rounded-lg shadow-sm cursor-pointer hover:shadow-lg transition-shadow"
-              style={{ maxHeight: "calc(100vh - 200px)" }}
-              onLoad={(e) => {
-                setImageLoading(false);
-                setImageLoadError(false);
-
-                const img = e.currentTarget;
-                if (
-                  onMediaDimensionsChange &&
-                  img.naturalWidth &&
-                  img.naturalHeight
-                ) {
-                  onMediaDimensionsChange({
-                    width: img.naturalWidth,
-                    height: img.naturalHeight,
-                  });
-                }
-              }}
-              onError={() => {
-                setImageLoading(false);
-                setImageLoadError(true);
-              }}
-            />
-          </PhotoView>
-        </PhotoProvider>
-      )}
-
-      {imageLoading && !imageLoadError && (
-        <div className="absolute inset-0 flex items-center justify-center bg-background/80">
-          <div className="text-center">
-            <div className="animate-spin rounded-full h-8 w-8 border-b-2 border-blue-500 mx-auto mb-2"></div>
-            <p className="text-sm text-muted-foreground">
-              {t("fileManager.loadingImage")}
-            </p>
-          </div>
-        </div>
-      )}
-    </div>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/components/LocalTransferProgressToast.tsx b/plugins/file-manager/src/frontend/components/LocalTransferProgressToast.tsx
deleted file mode 100644
index 5f6b2dbaf..000000000
--- a/plugins/file-manager/src/frontend/components/LocalTransferProgressToast.tsx
+++ /dev/null
@@ -1,110 +0,0 @@
-import { Button } from "@termix/plugin-sdk/ui";
-import type { TranslateFn } from "@termix/plugin-sdk/frontend";
-import { formatFileSize } from "../file-manager-utils.ts";
-
-export interface LocalTransferBatchStatus {
-  direction: "upload" | "download";
-  totalFiles: number;
-  completedFiles: number;
-  currentFileName?: string;
-  /** Files being transferred right now (parallel transfers). */
-  activeFiles?: number;
-  bytesDone: number;
-  totalBytes: number;
-  mbPerSec?: number;
-  cancelling?: boolean;
-}
-
-interface LocalTransferProgressToastProps {
-  t: TranslateFn;
-  status: LocalTransferBatchStatus;
-  onCancel?: () => void;
-}
-
-export function LocalTransferProgressToast({
-  t,
-  status,
-  onCancel,
-}: LocalTransferProgressToastProps) {
-  const percent =
-    status.totalBytes > 0
-      ? Math.min(100, Math.round((status.bytesDone / status.totalBytes) * 100))
-      : undefined;
-
-  const title =
-    status.direction === "upload"
-      ? t("fileManager.localUploadingProgress", {
-          current: Math.min(
-            status.completedFiles + Math.max(1, status.activeFiles ?? 1),
-            status.totalFiles,
-          ),
-          total: status.totalFiles,
-        })
-      : t("fileManager.localDownloadingProgress", {
-          current: Math.min(
-            status.completedFiles + Math.max(1, status.activeFiles ?? 1),
-            status.totalFiles,
-          ),
-          total: status.totalFiles,
-        });
-
-  return (
-    <div className="flex w-[min(calc(100vw-5rem),288px)] max-w-full flex-col gap-2 pr-2">
-      <div className="flex items-start justify-between gap-2">
-        <div className="min-w-0">
-          <p className="text-sm font-medium leading-tight">{title}</p>
-          {status.currentFileName && (
-            <p
-              className="text-xs text-muted-foreground truncate"
-              title={status.currentFileName}
-            >
-              {(status.activeFiles ?? 0) > 1 && (
-                <span className="mr-2.5 text-foreground/70">
-                  {t("fileManager.localTransferInFlight", {
-                    count: status.activeFiles,
-                  })}
-                </span>
-              )}
-              {status.currentFileName}
-            </p>
-          )}
-        </div>
-        {onCancel && (
-          <Button
-            type="button"
-            variant="ghost"
-            size="sm"
-            className="h-7 shrink-0 px-2 text-xs"
-            disabled={status.cancelling}
-            onClick={onCancel}
-          >
-            {status.cancelling
-              ? t("transfer.progressCancelling")
-              : t("transfer.progressCancel")}
-          </Button>
-        )}
-      </div>
-      <div className="bg-primary/20 relative h-2 w-full overflow-hidden rounded-full">
-        {percent === undefined ? (
-          <div className="bg-primary/60 absolute inset-y-0 left-0 w-1/3 animate-pulse rounded-full" />
-        ) : (
-          <div
-            className="bg-primary h-full rounded-full transition-[width]"
-            style={{ width: `${percent}%` }}
-          />
-        )}
-      </div>
-      <div className="flex items-center justify-between gap-3 pr-1 text-xs text-muted-foreground">
-        <span className="min-w-0 truncate">
-          {formatFileSize(status.bytesDone)} /{" "}
-          {formatFileSize(status.totalBytes)}
-        </span>
-        <span className="shrink-0 tabular-nums font-medium text-foreground">
-          {status.mbPerSec !== undefined
-            ? `${status.mbPerSec.toFixed(status.mbPerSec >= 10 ? 0 : 1)} MB/s`
-            : ""}
-        </span>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/components/MarkdownRenderer.tsx b/plugins/file-manager/src/frontend/components/MarkdownRenderer.tsx
deleted file mode 100644
index fdc5733fa..000000000
--- a/plugins/file-manager/src/frontend/components/MarkdownRenderer.tsx
+++ /dev/null
@@ -1,134 +0,0 @@
-import React from "react";
-import ReactMarkdown from "react-markdown";
-import remarkGfm from "remark-gfm";
-import { Prism as SyntaxHighlighter } from "react-syntax-highlighter";
-import { oneDark as syntaxTheme } from "react-syntax-highlighter/dist/esm/styles/prism";
-
-interface MarkdownRendererProps {
-  content: string;
-  compact?: boolean;
-}
-
-export function MarkdownRenderer({
-  content,
-  compact = false,
-}: MarkdownRendererProps) {
-  const h1Class = compact
-    ? "text-2xl font-bold mb-4 mt-6 text-foreground border-b border-border pb-2"
-    : "text-3xl font-bold mb-6 mt-8 text-foreground border-b border-border pb-2";
-  const h2Class = compact
-    ? "text-xl font-semibold mb-3 mt-5 text-foreground border-b border-border pb-1"
-    : "text-2xl font-semibold mb-4 mt-6 text-foreground border-b border-border pb-1";
-  const h3Class = compact
-    ? "text-lg font-semibold mb-2 mt-4 text-foreground"
-    : "text-xl font-semibold mb-3 mt-4 text-foreground";
-  const h4Class = compact
-    ? "text-base font-semibold mb-2 mt-3 text-foreground"
-    : "text-lg font-semibold mb-2 mt-3 text-foreground";
-  const pClass = compact
-    ? "mb-3 text-foreground leading-relaxed"
-    : "mb-4 text-foreground leading-relaxed";
-  const listClass = compact
-    ? "mb-3 ml-4 text-foreground"
-    : "mb-4 ml-6 text-foreground";
-  const quoteClass = compact
-    ? "border-l-4 border-blue-500 pl-3 mb-3 italic text-muted-foreground bg-muted/30 py-1"
-    : "border-l-4 border-blue-500 pl-4 mb-4 italic text-muted-foreground bg-muted/30 py-2";
-  const tableWrapClass = compact
-    ? "mb-3 overflow-x-auto thin-scrollbar"
-    : "mb-4 overflow-x-auto thin-scrollbar";
-  const tableClass = compact
-    ? "min-w-full border border-border rounded-lg text-sm"
-    : "min-w-full border border-border rounded-lg";
-  const thClass = compact
-    ? "px-3 py-2 text-left font-semibold text-foreground"
-    : "px-4 py-2 text-left font-semibold text-foreground";
-  const tdClass = compact
-    ? "px-3 py-2 text-foreground"
-    : "px-4 py-2 text-foreground";
-
-  return (
-    <div
-      className="select-text"
-      tabIndex={0}
-      onKeyDown={(event) => {
-        // Keep native text copying out of the file grid's global shortcuts.
-        if ((event.ctrlKey || event.metaKey) && event.key.toLowerCase() === "c")
-          event.stopPropagation();
-      }}
-    >
-      <ReactMarkdown
-        remarkPlugins={[remarkGfm]}
-        components={{
-          code({ className, children, ...props }) {
-            const match = /language-(\w+)/.exec(className || "");
-            // v9 removed the `inline` flag; a fenced block always carries a
-            // language- class, an inline span never does.
-            const inline = !className;
-            return !inline && match ? (
-              <SyntaxHighlighter
-                style={syntaxTheme}
-                language={match[1]}
-                PreTag="div"
-                className="rounded-lg"
-                {...props}
-              >
-                {String(children).replace(/\n$/, "")}
-              </SyntaxHighlighter>
-            ) : (
-              <code
-                className="bg-muted px-1 py-0.5 rounded text-sm font-mono"
-                {...props}
-              >
-                {children}
-              </code>
-            );
-          },
-          h1: ({ children }) => <h1 className={h1Class}>{children}</h1>,
-          h2: ({ children }) => <h2 className={h2Class}>{children}</h2>,
-          h3: ({ children }) => <h3 className={h3Class}>{children}</h3>,
-          h4: ({ children }) => <h4 className={h4Class}>{children}</h4>,
-          p: ({ children }) => <p className={pClass}>{children}</p>,
-          ul: ({ children }) => (
-            <ul className={`${listClass} list-disc`}>{children}</ul>
-          ),
-          ol: ({ children }) => (
-            <ol className={`${listClass} list-decimal`}>{children}</ol>
-          ),
-          li: ({ children }) => (
-            <li className="mb-1 text-foreground">{children}</li>
-          ),
-          blockquote: ({ children }) => (
-            <blockquote className={quoteClass}>{children}</blockquote>
-          ),
-          table: ({ children }) => (
-            <div className={tableWrapClass}>
-              <table className={tableClass}>{children}</table>
-            </div>
-          ),
-          thead: ({ children }) => (
-            <thead className="bg-muted">{children}</thead>
-          ),
-          tbody: ({ children }) => <tbody>{children}</tbody>,
-          tr: ({ children }) => (
-            <tr className="border-b border-border">{children}</tr>
-          ),
-          th: ({ children }) => <th className={thClass}>{children}</th>,
-          td: ({ children }) => <td className={tdClass}>{children}</td>,
-          a: ({ href, children }) => (
-            <a
-              href={href}
-              target="_blank"
-              rel="noopener noreferrer"
-              className="text-blue-600 hover:text-blue-800 underline"
-            >
-              {children}
-            </a>
-          ),
-        }}
-      >
-        {content}
-      </ReactMarkdown>
-    </div>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/components/PaneResizeHandle.tsx b/plugins/file-manager/src/frontend/components/PaneResizeHandle.tsx
deleted file mode 100644
index a00592f4f..000000000
--- a/plugins/file-manager/src/frontend/components/PaneResizeHandle.tsx
+++ /dev/null
@@ -1,43 +0,0 @@
-import type React from "react";
-import { cn } from "@termix/plugin-sdk/ui";
-
-interface PaneResizeHandleProps {
-  label: string;
-  onMouseDown: (event: React.MouseEvent) => void;
-  onDoubleClick?: () => void;
-  active?: boolean;
-}
-
-/**
- * Vertical drag handle placed between two panes in a `gap-3` flex row. It
- * overlaps the gap (negative margins) so the panes' spacing is unchanged, and
- * shows a hairline on hover / while dragging. Double-click resets the width.
- */
-export function PaneResizeHandle({
-  label,
-  onMouseDown,
-  onDoubleClick,
-  active = false,
-}: PaneResizeHandleProps) {
-  return (
-    <div
-      role="separator"
-      aria-orientation="vertical"
-      aria-label={label}
-      title={label}
-      data-pane-resize-handle
-      onMouseDown={onMouseDown}
-      onDoubleClick={onDoubleClick}
-      className="hidden md:block -mx-3 w-3 shrink-0 cursor-col-resize group relative z-10"
-    >
-      <div
-        className={cn(
-          "absolute inset-y-0 left-1/2 w-px -translate-x-1/2 transition-colors",
-          active
-            ? "bg-accent-brand"
-            : "bg-transparent group-hover:bg-accent-brand/60",
-        )}
-      />
-    </div>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/components/PdfPreview.tsx b/plugins/file-manager/src/frontend/components/PdfPreview.tsx
deleted file mode 100644
index 9d0c270cf..000000000
--- a/plugins/file-manager/src/frontend/components/PdfPreview.tsx
+++ /dev/null
@@ -1,148 +0,0 @@
-import React, { useState } from "react";
-import { Document, Page, pdfjs } from "react-pdf";
-import { AlertCircle, Download } from "lucide-react";
-import { Button } from "@termix/plugin-sdk/ui";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import pdfjsWorkerUrl from "pdfjs-dist/build/pdf.worker.min.mjs?url";
-
-pdfjs.GlobalWorkerOptions.workerSrc = pdfjsWorkerUrl;
-
-interface PdfPreviewProps {
-  content: string;
-  onDownload?: () => void;
-  onMediaDimensionsChange?: (dimensions: {
-    width: number;
-    height: number;
-  }) => void;
-}
-
-export function PdfPreview({
-  content,
-  onDownload,
-  onMediaDimensionsChange,
-}: PdfPreviewProps) {
-  const { t } = useTranslation();
-  const [numPages, setNumPages] = useState<number | null>(null);
-  const [pageNumber, setPageNumber] = useState(1);
-  const [pdfScale, setPdfScale] = useState(1.2);
-  const [pdfError, setPdfError] = useState(false);
-
-  return (
-    <div className="h-full flex flex-col bg-background">
-      <div className="flex-shrink-0 bg-muted/30 border-b border-border p-4">
-        <div className="flex items-center justify-between">
-          <div className="flex items-center gap-4">
-            <div className="flex items-center gap-2">
-              <Button
-                variant="outline"
-                size="sm"
-                onClick={() => setPageNumber(Math.max(1, pageNumber - 1))}
-                disabled={pageNumber <= 1}
-              >
-                {t("fileManager.previous")}
-              </Button>
-              <span className="text-sm text-foreground px-3 py-1 bg-background border border-border">
-                {t("fileManager.pageXOfY", {
-                  current: pageNumber,
-                  total: numPages || 0,
-                })}
-              </span>
-              <Button
-                variant="outline"
-                size="sm"
-                onClick={() =>
-                  setPageNumber(Math.min(numPages || 1, pageNumber + 1))
-                }
-                disabled={!numPages || pageNumber >= numPages}
-              >
-                {t("fileManager.next")}
-              </Button>
-            </div>
-            <div className="flex items-center gap-2">
-              <Button
-                variant="outline"
-                size="sm"
-                onClick={() => setPdfScale(Math.max(0.5, pdfScale - 0.2))}
-              >
-                {t("fileManager.zoomOut")}
-              </Button>
-              <span className="text-sm text-foreground px-3 py-1 bg-background border border-border min-w-[80px] text-center">
-                {Math.round(pdfScale * 100)}%
-              </span>
-              <Button
-                variant="outline"
-                size="sm"
-                onClick={() => setPdfScale(Math.min(3.0, pdfScale + 0.2))}
-              >
-                {t("fileManager.zoomIn")}
-              </Button>
-            </div>
-          </div>
-        </div>
-      </div>
-
-      <div className="flex-1 overflow-auto thin-scrollbar p-6 bg-surface">
-        <div className="flex justify-center">
-          {pdfError ? (
-            <div className="text-center text-muted-foreground p-8">
-              <AlertCircle className="w-16 h-16 mx-auto mb-4 text-muted-foreground/50" />
-              <h3 className="text-lg font-medium mb-2">
-                {t("fileManager.cannotLoadPdf")}
-              </h3>
-              <p className="text-sm mb-4">{t("fileManager.pdfLoadError")}</p>
-              {onDownload && (
-                <Button
-                  variant="outline"
-                  onClick={onDownload}
-                  className="flex items-center gap-2 mx-auto"
-                >
-                  <Download className="w-4 h-4" />
-                  {t("fileManager.download")}
-                </Button>
-              )}
-            </div>
-          ) : (
-            <Document
-              file={`data:application/pdf;base64,${content}`}
-              onLoadSuccess={({ numPages }) => {
-                setNumPages(numPages);
-                setPdfError(false);
-
-                onMediaDimensionsChange?.({
-                  width: 800,
-                  height: 600,
-                });
-              }}
-              onLoadError={(error) => {
-                console.error("PDF load error:", error);
-                setPdfError(true);
-              }}
-              loading={
-                <div className="text-center p-8">
-                  <div className="animate-spin rounded-full h-8 w-8 border-b-2 border-blue-500 mx-auto mb-2"></div>
-                  <p className="text-sm text-muted-foreground">
-                    {t("fileManager.loadingPdf")}
-                  </p>
-                </div>
-              }
-            >
-              <Page
-                pageNumber={pageNumber}
-                scale={pdfScale}
-                className="shadow-lg"
-                loading={
-                  <div className="text-center p-4">
-                    <div className="animate-spin rounded-full h-6 w-6 border-b-2 border-blue-500 mx-auto mb-2"></div>
-                    <p className="text-xs text-muted-foreground">
-                      {t("fileManager.loadingPage")}
-                    </p>
-                  </div>
-                }
-              />
-            </Document>
-          )}
-        </div>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/components/PermissionsDialog.tsx b/plugins/file-manager/src/frontend/components/PermissionsDialog.tsx
deleted file mode 100644
index 43ebc0964..000000000
--- a/plugins/file-manager/src/frontend/components/PermissionsDialog.tsx
+++ /dev/null
@@ -1,264 +0,0 @@
-import React, { useState, useEffect } from "react";
-import {
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogHeader,
-  DialogTitle,
-  DialogFooter,
-  Button,
-  Input,
-} from "@termix/plugin-sdk/ui";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Lock } from "lucide-react";
-
-interface FileItem {
-  name: string;
-  type: "file" | "directory" | "link";
-  path: string;
-  permissions?: string;
-  owner?: string;
-  group?: string;
-}
-
-interface PermissionsDialogProps {
-  file: FileItem | null;
-  open: boolean;
-  onOpenChange: (open: boolean) => void;
-  onSave: (file: FileItem, permissions: string) => Promise<void>;
-}
-
-const parsePermissions = (
-  perms: string,
-): { owner: number; group: number; other: number } => {
-  if (!perms) {
-    return { owner: 0, group: 0, other: 0 };
-  }
-
-  if (/^\d{3,4}$/.test(perms)) {
-    const numStr = perms.slice(-3);
-    return {
-      owner: parseInt(numStr[0] || "0", 10),
-      group: parseInt(numStr[1] || "0", 10),
-      other: parseInt(numStr[2] || "0", 10),
-    };
-  }
-  const cleanPerms = perms.replace(/^-/, "").substring(0, 9);
-
-  const calcBits = (str: string): number => {
-    let value = 0;
-    if (str[0] === "r") value += 4;
-    if (str[1] === "w") value += 2;
-    if (str[2] === "x") value += 1;
-    return value;
-  };
-
-  return {
-    owner: calcBits(cleanPerms.substring(0, 3)),
-    group: calcBits(cleanPerms.substring(3, 6)),
-    other: calcBits(cleanPerms.substring(6, 9)),
-  };
-};
-
-const toNumeric = (owner: number, group: number, other: number): string => {
-  return `${owner}${group}${other}`;
-};
-
-export function PermissionsDialog({
-  file,
-  open,
-  onOpenChange,
-  onSave,
-}: PermissionsDialogProps) {
-  const { t } = useTranslation();
-  const [loading, setLoading] = useState(false);
-
-  const initialPerms = parsePermissions(file?.permissions || "644");
-  const [ownerRead, setOwnerRead] = useState((initialPerms.owner & 4) !== 0);
-  const [ownerWrite, setOwnerWrite] = useState((initialPerms.owner & 2) !== 0);
-  const [ownerExecute, setOwnerExecute] = useState(
-    (initialPerms.owner & 1) !== 0,
-  );
-
-  const [groupRead, setGroupRead] = useState((initialPerms.group & 4) !== 0);
-  const [groupWrite, setGroupWrite] = useState((initialPerms.group & 2) !== 0);
-  const [groupExecute, setGroupExecute] = useState(
-    (initialPerms.group & 1) !== 0,
-  );
-
-  const [otherRead, setOtherRead] = useState((initialPerms.other & 4) !== 0);
-  const [otherWrite, setOtherWrite] = useState((initialPerms.other & 2) !== 0);
-  const [otherExecute, setOtherExecute] = useState(
-    (initialPerms.other & 1) !== 0,
-  );
-
-  useEffect(() => {
-    if (file) {
-      const perms = parsePermissions(file.permissions || "644");
-      setOwnerRead((perms.owner & 4) !== 0);
-      setOwnerWrite((perms.owner & 2) !== 0);
-      setOwnerExecute((perms.owner & 1) !== 0);
-      setGroupRead((perms.group & 4) !== 0);
-      setGroupWrite((perms.group & 2) !== 0);
-      setGroupExecute((perms.group & 1) !== 0);
-      setOtherRead((perms.other & 4) !== 0);
-      setOtherWrite((perms.other & 2) !== 0);
-      setOtherExecute((perms.other & 1) !== 0);
-    }
-  }, [file]);
-
-  const calculateOctal = (): string => {
-    const owner =
-      (ownerRead ? 4 : 0) + (ownerWrite ? 2 : 0) + (ownerExecute ? 1 : 0);
-    const group =
-      (groupRead ? 4 : 0) + (groupWrite ? 2 : 0) + (groupExecute ? 1 : 0);
-    const other =
-      (otherRead ? 4 : 0) + (otherWrite ? 2 : 0) + (otherExecute ? 1 : 0);
-    return toNumeric(owner, group, other);
-  };
-
-  const handleSave = async () => {
-    if (!file) return;
-
-    setLoading(true);
-    try {
-      const permissions = calculateOctal();
-      await onSave(file, permissions);
-      onOpenChange(false);
-    } catch (error) {
-      console.error("Failed to update permissions:", error);
-    } finally {
-      setLoading(false);
-    }
-  };
-
-  if (!file) return null;
-
-  const octal = calculateOctal();
-
-  const rows = [
-    {
-      label: `${t("fileManager.owner")}${file.owner ? ` (${file.owner})` : ""}`,
-      read: ownerRead,
-      setRead: setOwnerRead,
-      write: ownerWrite,
-      setWrite: setOwnerWrite,
-      execute: ownerExecute,
-      setExecute: setOwnerExecute,
-    },
-    {
-      label: `${t("fileManager.group")}${file.group ? ` (${file.group})` : ""}`,
-      read: groupRead,
-      setRead: setGroupRead,
-      write: groupWrite,
-      setWrite: setGroupWrite,
-      execute: groupExecute,
-      setExecute: setGroupExecute,
-    },
-    {
-      label: t("fileManager.others"),
-      read: otherRead,
-      setRead: setOtherRead,
-      write: otherWrite,
-      setWrite: setOtherWrite,
-      execute: otherExecute,
-      setExecute: setOtherExecute,
-    },
-  ];
-
-  return (
-    <Dialog open={open} onOpenChange={onOpenChange}>
-      <DialogContent className="w-[calc(100vw-2rem)] sm:max-w-lg rounded-none border-border bg-card">
-        <DialogHeader>
-          <DialogTitle className="text-xs font-bold uppercase tracking-widest flex items-center gap-2">
-            <Lock className="size-4 text-accent-brand" />
-            {t("fileManager.changePermissions")}
-          </DialogTitle>
-          <DialogDescription className="text-[10px] font-bold tracking-tight text-muted-foreground font-mono break-all">
-            {file.path}
-          </DialogDescription>
-        </DialogHeader>
-
-        <div className="py-3 flex flex-col gap-4">
-          <div className="border border-border overflow-hidden">
-            <div className="grid grid-cols-[1fr_64px_64px_64px] bg-muted/50 border-b border-border">
-              <div className="px-3 py-2 text-[10px] font-bold uppercase tracking-widest text-muted-foreground" />
-              {[
-                t("fileManager.read"),
-                t("fileManager.write"),
-                t("fileManager.execute"),
-              ].map((h) => (
-                <div
-                  key={h}
-                  className="py-2 text-[10px] font-bold uppercase tracking-widest text-muted-foreground text-center border-l border-border"
-                >
-                  {h}
-                </div>
-              ))}
-            </div>
-            {rows.map((row, i) => (
-              <div
-                key={i}
-                className={`grid grid-cols-[1fr_64px_64px_64px] ${i < rows.length - 1 ? "border-b border-border" : ""}`}
-              >
-                <div className="px-3 py-3 text-xs font-semibold">
-                  {row.label}
-                </div>
-                {[
-                  { val: row.read, set: row.setRead },
-                  { val: row.write, set: row.setWrite },
-                  { val: row.execute, set: row.setExecute },
-                ].map((perm, j) => (
-                  <div
-                    key={j}
-                    className="flex items-center justify-center border-l border-border py-3"
-                  >
-                    <input
-                      type="checkbox"
-                      checked={perm.val}
-                      onChange={(e) => perm.set(e.target.checked)}
-                      className="accent-[var(--accent-brand)] size-4 cursor-pointer"
-                    />
-                  </div>
-                ))}
-              </div>
-            ))}
-          </div>
-
-          <div className="flex items-center gap-3">
-            <span className="text-xs font-bold uppercase tracking-widest text-muted-foreground shrink-0">
-              {t("fileManager.octal")}
-            </span>
-            <Input
-              value={octal}
-              readOnly
-              className="w-20 rounded-none bg-muted/50 border-border text-xs font-mono text-center h-8"
-            />
-            <span className="text-[10px] text-muted-foreground font-mono">
-              {t("fileManager.currentPermissions")}: {file.permissions || "—"}
-            </span>
-          </div>
-        </div>
-
-        <DialogFooter>
-          <Button
-            variant="ghost"
-            onClick={() => onOpenChange(false)}
-            disabled={loading}
-            className="rounded-none text-[10px] font-bold uppercase tracking-widest"
-          >
-            {t("common.cancel")}
-          </Button>
-          <Button
-            variant="outline"
-            onClick={handleSave}
-            disabled={loading}
-            className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 rounded-none text-[10px] font-bold uppercase tracking-widest"
-          >
-            {loading ? t("common.saving") : t("common.save")}
-          </Button>
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/components/TerminalWindow.tsx b/plugins/file-manager/src/frontend/components/TerminalWindow.tsx
deleted file mode 100644
index 7abcb364d..000000000
--- a/plugins/file-manager/src/frontend/components/TerminalWindow.tsx
+++ /dev/null
@@ -1,137 +0,0 @@
-import React from "react";
-import { DraggableWindow } from "./DraggableWindow.tsx";
-import type { TabHandle as TerminalHandle } from "@termix/plugin-sdk/frontend";
-import { PluginComponent } from "@termix/plugin-sdk/ui";
-import { useWindowManager } from "./WindowManager.tsx";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import type { SSHHost } from "../host-types";
-import { ExternalLink } from "lucide-react";
-
-interface TerminalWindowProps {
-  windowId: string;
-  hostConfig: SSHHost;
-  initialPath?: string;
-  initialX?: number;
-  initialY?: number;
-  executeCommand?: string;
-  onPromoteToTab?: (path?: string) => void;
-}
-
-export function TerminalWindow({
-  windowId,
-  hostConfig,
-  initialPath,
-  initialX = 200,
-  initialY = 150,
-  executeCommand,
-  onPromoteToTab,
-}: TerminalWindowProps) {
-  const { t } = useTranslation();
-  const { closeWindow, maximizeWindow, focusWindow, windows } =
-    useWindowManager();
-  const terminalRef = React.useRef<TerminalHandle | null>(null);
-  const resizeTimeoutRef = React.useRef<NodeJS.Timeout | null>(null);
-
-  React.useEffect(() => {
-    return () => {
-      if (resizeTimeoutRef.current) {
-        clearTimeout(resizeTimeoutRef.current);
-      }
-    };
-  }, []);
-
-  const currentWindow = windows.find((w) => w.id === windowId);
-  if (!currentWindow) {
-    return null;
-  }
-
-  const handleClose = () => {
-    closeWindow(windowId);
-  };
-
-  const handleMaximize = () => {
-    maximizeWindow(windowId);
-    if (resizeTimeoutRef.current) {
-      clearTimeout(resizeTimeoutRef.current);
-    }
-    resizeTimeoutRef.current = setTimeout(() => {
-      if (terminalRef.current?.fit) {
-        terminalRef.current.fit();
-      }
-    }, 150);
-  };
-
-  const handleFocus = () => {
-    focusWindow(windowId);
-  };
-
-  const handleResize = () => {
-    if (resizeTimeoutRef.current) {
-      clearTimeout(resizeTimeoutRef.current);
-    }
-
-    resizeTimeoutRef.current = setTimeout(() => {
-      if (terminalRef.current?.fit) {
-        terminalRef.current.fit();
-      }
-    }, 100);
-  };
-
-  const handlePromoteToTab = () => {
-    onPromoteToTab?.(initialPath);
-    closeWindow(windowId);
-  };
-
-  const terminalTitle = executeCommand
-    ? t("terminal.runTitle", { host: hostConfig.name, command: executeCommand })
-    : initialPath
-      ? t("terminal.terminalWithPath", {
-          host: hostConfig.name,
-          path: initialPath,
-        })
-      : t("terminal.terminalTitle", { host: hostConfig.name });
-
-  return (
-    <>
-      <DraggableWindow
-        title={terminalTitle}
-        initialX={initialX}
-        initialY={initialY}
-        initialWidth={800}
-        initialHeight={500}
-        minWidth={600}
-        minHeight={400}
-        onClose={handleClose}
-        onMaximize={handleMaximize}
-        onFocus={handleFocus}
-        onResize={handleResize}
-        isMaximized={currentWindow.isMaximized}
-        zIndex={currentWindow.zIndex}
-        titleActions={
-          onPromoteToTab ? (
-            <button
-              className="size-6 flex items-center justify-center rounded-none hover:bg-accent-brand/10 hover:text-accent-brand text-muted-foreground transition-colors"
-              onClick={(e) => {
-                e.stopPropagation();
-                handlePromoteToTab();
-              }}
-              title={t("common.openInNewTab")}
-            >
-              <ExternalLink className="size-3.5" />
-            </button>
-          ) : null
-        }
-      >
-        <PluginComponent
-          id="terminal.view"
-          handleRef={terminalRef}
-          hostConfig={hostConfig}
-          isVisible={!currentWindow.isMinimized}
-          initialPath={initialPath}
-          executeCommand={executeCommand}
-          onClose={handleClose}
-        />
-      </DraggableWindow>
-    </>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/components/TransferProgressBar.tsx b/plugins/file-manager/src/frontend/components/TransferProgressBar.tsx
deleted file mode 100644
index 362b3200b..000000000
--- a/plugins/file-manager/src/frontend/components/TransferProgressBar.tsx
+++ /dev/null
@@ -1,42 +0,0 @@
-import type { CSSProperties } from "react";
-
-import { cn } from "@termix/plugin-sdk/ui";
-
-export function TransferProgressBar({
-  value,
-  label,
-  stalled = false,
-}: {
-  value?: number;
-  label: string;
-  stalled?: boolean;
-}) {
-  const clamped = Math.min(100, Math.max(0, value ?? 0));
-  const indeterminate = value === undefined;
-
-  return (
-    <div
-      role="progressbar"
-      aria-label={label}
-      aria-valuemin={0}
-      aria-valuemax={100}
-      aria-valuenow={indeterminate ? undefined : clamped}
-      aria-busy={indeterminate}
-      data-stalled={stalled || undefined}
-      className="transfer-progress-track"
-    >
-      <div
-        className={cn(
-          "transfer-progress-fill",
-          indeterminate && "transfer-progress-indeterminate",
-          stalled && "transfer-progress-stalled",
-        )}
-        style={
-          indeterminate
-            ? undefined
-            : ({ "--transfer-progress": clamped / 100 } as CSSProperties)
-        }
-      />
-    </div>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/components/TransferProgressToast.tsx b/plugins/file-manager/src/frontend/components/TransferProgressToast.tsx
deleted file mode 100644
index 4a85f1b9e..000000000
--- a/plugins/file-manager/src/frontend/components/TransferProgressToast.tsx
+++ /dev/null
@@ -1,150 +0,0 @@
-import { Button } from "@termix/plugin-sdk/ui";
-import {
-  formatTransferMbPerSec,
-  getTransferProgressPercent,
-  type TransferProgressResponse,
-} from "../api/transfer-api";
-import type { TranslateFn } from "@termix/plugin-sdk/frontend";
-import {
-  Archive,
-  ArchiveRestore,
-  ArrowRight,
-  Gauge,
-  RefreshCw,
-  ShieldCheck,
-} from "lucide-react";
-import { TransferProgressBar } from "./TransferProgressBar";
-
-interface TransferProgressToastProps {
-  t: TranslateFn;
-  status: TransferProgressResponse;
-  liveMbPerSec?: number;
-  stalled?: boolean;
-  formatSize: (bytes?: number) => string;
-  onCancel?: () => void;
-  cancelling?: boolean;
-}
-
-export function TransferProgressToast({
-  t,
-  status,
-  liveMbPerSec,
-  stalled = false,
-  formatSize,
-  onCancel,
-  cancelling = false,
-}: TransferProgressToastProps) {
-  const percent = getTransferProgressPercent(status);
-
-  let title = t("transfer.progressTransferring");
-  if (status.phase === "reconnecting") {
-    title = t("transfer.progressReconnecting");
-  } else if (status.phase === "benchmarking") {
-    title = t("transfer.progressBenchmarking");
-  } else if (status.phase === "verifying") {
-    title = t("transfer.progressVerifying");
-  } else if (status.phase === "compressing") {
-    title = t("transfer.progressCompressing");
-  } else if (status.phase === "extracting") {
-    title = t("transfer.progressExtracting");
-  } else if (
-    status.method === "item_sftp" &&
-    status.totalItems !== undefined &&
-    status.itemsCompleted !== undefined
-  ) {
-    title = t("transfer.progressTransferringItems", {
-      current: status.itemsCompleted,
-      total: status.totalItems,
-    });
-  }
-
-  const hasByteProgress =
-    status.bytesTransferred !== undefined &&
-    status.totalBytes !== undefined &&
-    status.totalBytes > 0;
-
-  const detailLeft = hasByteProgress
-    ? t("transfer.progressBytes", {
-        transferred: formatSize(status.bytesTransferred),
-        total: formatSize(status.totalBytes),
-      })
-    : status.method === "item_sftp" &&
-        status.totalItems !== undefined &&
-        status.itemsCompleted !== undefined
-      ? t("transfer.progressItems", {
-          current: status.itemsCompleted,
-          total: status.totalItems,
-        })
-      : null;
-
-  const liveRate =
-    status.phase === "reconnecting"
-      ? undefined
-      : stalled
-        ? t("transfer.progressStalled")
-        : liveMbPerSec !== undefined
-          ? status.parallelSegmentCount && status.parallelSegmentCount > 1
-            ? t("transfer.progressTotalSpeed", {
-                speed: formatTransferMbPerSec(liveMbPerSec),
-                lanes: status.parallelSegmentCount,
-              })
-            : formatTransferMbPerSec(liveMbPerSec)
-          : undefined;
-
-  const showIndeterminate =
-    status.phase === "reconnecting" || percent === undefined;
-  const PhaseIcon =
-    status.phase === "compressing"
-      ? Archive
-      : status.phase === "benchmarking"
-        ? Gauge
-        : status.phase === "verifying"
-          ? ShieldCheck
-          : status.phase === "extracting"
-            ? ArchiveRestore
-            : status.phase === "reconnecting"
-              ? RefreshCw
-              : ArrowRight;
-
-  return (
-    <div className="flex w-[min(calc(100vw-5rem),288px)] max-w-full flex-col gap-2 pr-2">
-      <div className="flex items-start justify-between gap-2">
-        <p
-          key={status.phase}
-          className="motion-transfer-phase flex min-w-0 items-center gap-2 text-sm font-medium leading-tight"
-        >
-          <PhaseIcon className="size-3.5 shrink-0 text-accent-brand" />
-          <span className="truncate">{title}</span>
-        </p>
-        {onCancel && status.status === "running" && status.transferId && (
-          <Button
-            type="button"
-            variant="ghost"
-            size="sm"
-            className="h-7 shrink-0 px-2 text-xs"
-            disabled={cancelling}
-            onClick={onCancel}
-          >
-            {cancelling
-              ? t("transfer.progressCancelling")
-              : t("transfer.progressCancel")}
-          </Button>
-        )}
-      </div>
-      <TransferProgressBar
-        value={showIndeterminate ? undefined : percent}
-        label={title}
-        stalled={stalled}
-      />
-      <div className="flex items-center justify-between gap-3 pr-1 text-xs text-muted-foreground">
-        <span className="min-w-0 truncate">{detailLeft ?? ""}</span>
-        <span
-          className={`shrink-0 tabular-nums ${stalled ? "text-amber-500" : liveRate ? "font-medium text-foreground" : "invisible"}`}
-          aria-hidden={!liveRate}
-        >
-          {liveRate ?? "0 MB/s"}
-        </span>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/components/TransferToHostDialog.tsx b/plugins/file-manager/src/frontend/components/TransferToHostDialog.tsx
deleted file mode 100644
index 23fd915b8..000000000
--- a/plugins/file-manager/src/frontend/components/TransferToHostDialog.tsx
+++ /dev/null
@@ -1,1085 +0,0 @@
-import { fileManagerHostSetting } from "../host-settings";
-import React, {
-  useCallback,
-  useEffect,
-  useMemo,
-  useRef,
-  useState,
-} from "react";
-import {
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogFooter,
-  DialogHeader,
-  DialogTitle,
-  Button,
-  Input,
-  Label,
-  Select2,
-} from "@termix/plugin-sdk/ui";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { toast } from "sonner";
-import {
-  ArrowRightLeft,
-  Bookmark,
-  ChevronDown,
-  ChevronRight,
-  ChevronUp,
-  Clock,
-  Folder,
-  Trash2,
-} from "lucide-react";
-import {
-  getTransferRecent,
-  getTransferMethodPreview,
-  type TransferDestination,
-  type TransferMethodPreference,
-  type TransferMethodPreview,
-} from "../api/transfer-api";
-import { getSSHHosts } from "../api/hosts";
-import {
-  getSSHStatus,
-  browseSSHDirectory,
-  ensureSSHSessionForHost,
-  type HostConnectionState,
-} from "../api/ssh-file-operations-api";
-import {
-  getFolderShortcuts,
-  addFolderShortcut,
-  removeFolderShortcut,
-} from "../api/file-manager-data-api";
-import type { SSHHost } from "../host-types";
-
-interface FileItem {
-  name: string;
-  type: "file" | "directory" | "link";
-  path: string;
-}
-
-interface BrowseEntry {
-  name: string;
-  path: string;
-}
-
-interface FolderShortcutEntry {
-  id: number;
-  name: string;
-  path: string;
-}
-
-interface TransferToHostDialogProps {
-  open: boolean;
-  onOpenChange: (open: boolean) => void;
-  files: FileItem[];
-  move: boolean;
-  sourceHost: SSHHost;
-  sourceSessionId: string | null;
-  onConfirm: (
-    destSessionId: string,
-    destHostId: number,
-    destPath: string,
-    destPathLabel: string,
-    methodPreference: TransferMethodPreference,
-    parallelSegmentCount?: number,
-  ) => void;
-}
-
-function formatByteSize(bytes: number): string {
-  if (bytes <= 0) return "0 B";
-  const units = ["B", "KB", "MB", "GB", "TB"];
-  let size = bytes;
-  let unitIndex = 0;
-  while (size >= 1024 && unitIndex < units.length - 1) {
-    size /= 1024;
-    unitIndex++;
-  }
-  const formatted =
-    size < 10 && unitIndex > 0 ? size.toFixed(1) : Math.round(size).toString();
-  return `${formatted} ${units[unitIndex]}`;
-}
-
-function formatTruncatedDestination(hostLabel: string, path: string): string {
-  const normalized = path.replace(/\\/g, "/").replace(/\/+$/, "") || "/";
-  if (normalized === "/") {
-    return `${hostLabel}: /`;
-  }
-
-  const segments = normalized.split("/").filter(Boolean);
-  const pathPart =
-    segments.length <= 2
-      ? `/${segments.join("/")}`
-      : `.../${segments.slice(-2).join("/")}`;
-
-  return `${hostLabel}: ${pathPart}`;
-}
-
-function longestCommonPrefix(strings: string[]): string {
-  if (strings.length === 0) return "";
-  let prefix = strings[0];
-  for (let i = 1; i < strings.length; i++) {
-    while (!strings[i].startsWith(prefix)) {
-      prefix = prefix.slice(0, -1);
-      if (!prefix) return "";
-    }
-  }
-  return prefix;
-}
-
-function splitPathForCompletion(
-  fullPath: string,
-  cursorPos: number,
-): { dirPath: string; partial: string; replaceStart: number } {
-  const beforeCursor = fullPath.slice(0, cursorPos);
-  const lastSlash = beforeCursor.lastIndexOf("/");
-  if (lastSlash === -1) {
-    return { dirPath: "/", partial: beforeCursor, replaceStart: 0 };
-  }
-  const dirPath = beforeCursor.slice(0, lastSlash) || "/";
-  const partial = beforeCursor.slice(lastSlash + 1);
-  return { dirPath, partial, replaceStart: lastSlash + 1 };
-}
-
-function connectionLabel(
-  state: HostConnectionState,
-  t: (key: string) => string,
-): string {
-  switch (state) {
-    case "ready":
-      return t("transfer.hostReady");
-    case "connecting":
-      return t("transfer.hostConnecting");
-    case "auth_required":
-      return t("transfer.hostAuthRequired");
-    case "error":
-      return t("transfer.hostConnectionFailed");
-    default:
-      return t("transfer.hostDisconnected");
-  }
-}
-
-export function TransferToHostDialog({
-  open,
-  onOpenChange,
-  files,
-  move,
-  sourceHost,
-  sourceSessionId,
-  onConfirm,
-}: TransferToHostDialogProps) {
-  const { t } = useTranslation();
-
-  const [availableHosts, setAvailableHosts] = useState<SSHHost[]>([]);
-  const [loadingHosts, setLoadingHosts] = useState(false);
-  const [selectedHostId, setSelectedHostId] = useState<string>("");
-  const [connectionStates, setConnectionStates] = useState<
-    Record<number, HostConnectionState>
-  >({});
-  const [connectionErrors, setConnectionErrors] = useState<
-    Record<number, string>
-  >({});
-  const [destPath, setDestPath] = useState("");
-  const [shortcuts, setShortcuts] = useState<FolderShortcutEntry[]>([]);
-  const [recents, setRecents] = useState<TransferDestination[]>([]);
-  const [browsePath, setBrowsePath] = useState("/");
-  const [browseEntries, setBrowseEntries] = useState<BrowseEntry[]>([]);
-  const [browseLoading, setBrowseLoading] = useState(false);
-  const [browseStatus, setBrowseStatus] = useState<
-    "ok" | "not_found" | "error" | "idle"
-  >("idle");
-  const skipDestBrowseSyncRef = useRef(false);
-  const destPathDebounceRef = useRef<ReturnType<typeof setTimeout> | null>(
-    null,
-  );
-  const pendingBrowsePathRef = useRef<string | null>(null);
-  const lastBrowseHostIdRef = useRef<number | null>(null);
-  const destPathInputRef = useRef<HTMLInputElement>(null);
-  const [methodPreference, setMethodPreference] =
-    useState<TransferMethodPreference>("auto");
-  const [parallelSegmentCount, setParallelSegmentCount] = useState("auto");
-  const [methodPreview, setMethodPreview] =
-    useState<TransferMethodPreview | null>(null);
-  const [methodPreviewLoading, setMethodPreviewLoading] = useState(false);
-  const [methodPreviewError, setMethodPreviewError] = useState<string | null>(
-    null,
-  );
-  const [recentsCollapsed, setRecentsCollapsed] = useState(true);
-  const methodPreviewLockKeyRef = useRef<string | null>(null);
-  const archiveSourcePathsKey = useMemo(
-    () => files.map((f) => f.path).join("\0"),
-    [files],
-  );
-
-  const isSingleFile = files.length === 1 && files[0].type === "file";
-  const isArchiveTransfer = !isSingleFile;
-
-  const sourceLabel = useMemo(() => {
-    if (files.length === 1) {
-      return `${sourceHost.name || sourceHost.ip}:${files[0].path}`;
-    }
-    return `${sourceHost.name || sourceHost.ip}: ${t("transfer.itemsSummary", { count: files.length })}`;
-  }, [files, sourceHost, t]);
-
-  const selectedHost = availableHosts.find(
-    (h) => h.id.toString() === selectedHostId,
-  );
-
-  const selectedConnectionState = selectedHost
-    ? (connectionStates[selectedHost.id] ?? "disconnected")
-    : "disconnected";
-
-  const isHostReady = selectedConnectionState === "ready";
-
-  const loadAvailableHosts = useCallback(async () => {
-    setLoadingHosts(true);
-    try {
-      const hosts = await getSSHHosts();
-      const candidates = hosts.filter(
-        (h) =>
-          h.id !== sourceHost.id &&
-          fileManagerHostSetting(h, "enableFileManager", true) &&
-          h.connectionType !== "rdp" &&
-          h.connectionType !== "vnc",
-      );
-      setAvailableHosts(candidates);
-
-      const initialStates: Record<number, HostConnectionState> = {};
-      await Promise.all(
-        candidates.map(async (host) => {
-          try {
-            const status = await getSSHStatus(host.id.toString());
-            initialStates[host.id] = status?.connected
-              ? "ready"
-              : "disconnected";
-          } catch {
-            initialStates[host.id] = "disconnected";
-          }
-        }),
-      );
-      setConnectionStates(initialStates);
-    } catch {
-      setAvailableHosts([]);
-    } finally {
-      setLoadingHosts(false);
-    }
-  }, [sourceHost.id]);
-
-  const ensureHostConnection = useCallback(async (host: SSHHost) => {
-    setConnectionStates((prev) => ({ ...prev, [host.id]: "connecting" }));
-    setConnectionErrors((prev) => {
-      const next = { ...prev };
-      delete next[host.id];
-      return next;
-    });
-
-    const result = await ensureSSHSessionForHost(host);
-    setConnectionStates((prev) => ({ ...prev, [host.id]: result.state }));
-    if (result.error) {
-      setConnectionErrors((prev) => ({
-        ...prev,
-        [host.id]: result.error!,
-      }));
-    }
-  }, []);
-
-  const loadRecents = useCallback(async () => {
-    if (!sourceHost.id) return;
-    try {
-      const recentData = await getTransferRecent(sourceHost.id);
-      setRecents(recentData);
-    } catch {
-      setRecents([]);
-    }
-  }, [sourceHost.id]);
-
-  const loadShortcutsForHost = useCallback(async (hostId: number) => {
-    try {
-      const data = await getFolderShortcuts(hostId);
-      setShortcuts((Array.isArray(data) ? data : []) as FolderShortcutEntry[]);
-    } catch {
-      setShortcuts([]);
-    }
-  }, []);
-
-  const syncDestPathFromBrowse = useCallback((path: string) => {
-    skipDestBrowseSyncRef.current = true;
-    setDestPath(path);
-  }, []);
-
-  const loadBrowseDirectory = useCallback(
-    async (sessionId: string, path: string, syncDest = true) => {
-      setBrowseLoading(true);
-      try {
-        const result = await browseSSHDirectory(sessionId, path);
-
-        if (result.status === "ok") {
-          const dirs = result.files
-            .filter(
-              (entry) =>
-                entry.type === "directory" &&
-                entry.name !== "." &&
-                entry.name !== "..",
-            )
-            .map((entry) => {
-              const base = result.path.endsWith("/")
-                ? result.path.slice(0, -1)
-                : result.path;
-              const childPath =
-                base === "/" ? `/${entry.name}` : `${base}/${entry.name}`;
-              return { name: entry.name, path: childPath };
-            })
-            .sort((a, b) => a.name.localeCompare(b.name));
-
-          setBrowsePath(result.path);
-          setBrowseEntries(dirs);
-          setBrowseStatus("ok");
-          if (syncDest) {
-            syncDestPathFromBrowse(result.path);
-          }
-        } else if (result.status === "not_found") {
-          setBrowsePath(result.path);
-          setBrowseEntries([]);
-          setBrowseStatus("not_found");
-          if (syncDest) {
-            syncDestPathFromBrowse(result.path);
-          }
-        } else {
-          setBrowseEntries([]);
-          setBrowseStatus("error");
-        }
-      } catch {
-        setBrowseEntries([]);
-        setBrowseStatus("error");
-      } finally {
-        setBrowseLoading(false);
-      }
-    },
-    [syncDestPathFromBrowse],
-  );
-
-  useEffect(() => {
-    if (open) {
-      void loadAvailableHosts();
-      void loadRecents();
-      setSelectedHostId("");
-      setDestPath("");
-      setShortcuts([]);
-      setBrowsePath("/");
-      setBrowseEntries([]);
-      setBrowseStatus("idle");
-      setConnectionErrors({});
-      setMethodPreference("auto");
-      setParallelSegmentCount("2");
-      setMethodPreview(null);
-      setMethodPreviewError(null);
-      methodPreviewLockKeyRef.current = null;
-      setRecentsCollapsed(true);
-      pendingBrowsePathRef.current = null;
-      lastBrowseHostIdRef.current = null;
-    }
-  }, [open, loadAvailableHosts, loadRecents]);
-
-  useEffect(() => {
-    if (!open || !selectedHost?.id) {
-      setShortcuts([]);
-      return;
-    }
-    void loadShortcutsForHost(selectedHost.id);
-  }, [open, selectedHost?.id, loadShortcutsForHost]);
-
-  useEffect(() => {
-    if (!selectedHost || !isHostReady) return;
-
-    const hostId = selectedHost.id;
-    if (lastBrowseHostIdRef.current === hostId) return;
-
-    const path = pendingBrowsePathRef.current ?? (destPath.trim() || "/");
-    pendingBrowsePathRef.current = null;
-    lastBrowseHostIdRef.current = hostId;
-    void loadBrowseDirectory(hostId.toString(), path);
-  }, [selectedHost, isHostReady, destPath, loadBrowseDirectory]);
-
-  useEffect(() => {
-    if (selectedHost && selectedConnectionState === "disconnected") {
-      void ensureHostConnection(selectedHost);
-    }
-  }, [selectedHost, selectedConnectionState, ensureHostConnection]);
-
-  useEffect(() => {
-    if (!selectedHost || !isHostReady || !open) return;
-
-    if (skipDestBrowseSyncRef.current) {
-      skipDestBrowseSyncRef.current = false;
-      return;
-    }
-
-    const typed = destPath.trim();
-    if (!typed) return;
-
-    if (destPathDebounceRef.current) {
-      clearTimeout(destPathDebounceRef.current);
-    }
-
-    destPathDebounceRef.current = setTimeout(() => {
-      void loadBrowseDirectory(selectedHost.id.toString(), typed, false);
-    }, 400);
-
-    return () => {
-      if (destPathDebounceRef.current) {
-        clearTimeout(destPathDebounceRef.current);
-      }
-    };
-  }, [destPath, selectedHost, isHostReady, open, loadBrowseDirectory]);
-
-  const hostName = (hostId: number) =>
-    availableHosts.find((h) => h.id === hostId)?.name ||
-    availableHosts.find((h) => h.id === hostId)?.ip ||
-    hostId.toString();
-
-  const handleSelectDestination = (destHostId: number, path: string) => {
-    pendingBrowsePathRef.current = path;
-    setSelectedHostId(destHostId.toString());
-    setDestPath(path);
-    const host = availableHosts.find((h) => h.id === destHostId);
-    if (host && connectionStates[host.id] === "ready") {
-      lastBrowseHostIdRef.current = host.id;
-      void loadBrowseDirectory(host.id.toString(), path);
-    } else {
-      lastBrowseHostIdRef.current = null;
-    }
-  };
-
-  useEffect(() => {
-    if (!open || !isArchiveTransfer || !sourceSessionId) {
-      if (!open || !isArchiveTransfer) {
-        setMethodPreview(null);
-        setMethodPreviewError(null);
-        methodPreviewLockKeyRef.current = null;
-      }
-      return;
-    }
-
-    const lockKey = `${archiveSourcePathsKey}|${methodPreference}|${selectedHost?.id}|${destPath.trim() || browsePath}`;
-    if (methodPreviewLockKeyRef.current === lockKey) {
-      return;
-    }
-
-    if (!selectedHost || !isHostReady) {
-      return;
-    }
-
-    const sourcePaths = files.map((f) => f.path);
-    const previewPath =
-      (destPath.trim() || browsePath || "/").replace(/\/+$/, "") || "/";
-
-    let cancelled = false;
-    setMethodPreviewLoading(true);
-    setMethodPreviewError(null);
-
-    void getTransferMethodPreview(
-      sourceSessionId,
-      sourcePaths,
-      selectedHost.id.toString(),
-      previewPath,
-      methodPreference,
-    )
-      .then((preview) => {
-        if (!cancelled) {
-          setMethodPreview(preview);
-          methodPreviewLockKeyRef.current = lockKey;
-        }
-      })
-      .catch((err: { message?: string }) => {
-        if (!cancelled) {
-          setMethodPreview(null);
-          setMethodPreviewError(err.message ?? "Preview failed");
-        }
-      })
-      .finally(() => {
-        if (!cancelled) setMethodPreviewLoading(false);
-      });
-
-    return () => {
-      cancelled = true;
-    };
-  }, [
-    open,
-    isArchiveTransfer,
-    sourceSessionId,
-    selectedHost,
-    isHostReady,
-    archiveSourcePathsKey,
-    methodPreference,
-    destPath,
-    browsePath,
-    files,
-  ]);
-
-  const handleHostChange = (hostId: string) => {
-    setSelectedHostId(hostId);
-    setBrowsePath("/");
-    setDestPath("");
-    setShortcuts([]);
-    setMethodPreview(null);
-    setMethodPreviewError(null);
-    methodPreviewLockKeyRef.current = null;
-    pendingBrowsePathRef.current = null;
-    lastBrowseHostIdRef.current = null;
-  };
-
-  const handleBrowseInto = (path: string) => {
-    if (!selectedHost || !isHostReady) return;
-    void loadBrowseDirectory(selectedHost.id.toString(), path, true);
-  };
-
-  const handleBrowseUp = () => {
-    if (!selectedHost || !isHostReady || browsePath === "/") return;
-    const trimmed = browsePath.replace(/\/+$/, "");
-    const idx = trimmed.lastIndexOf("/");
-    const parent = idx <= 0 ? "/" : trimmed.substring(0, idx);
-    void loadBrowseDirectory(selectedHost.id.toString(), parent, true);
-  };
-
-  const formatBrowsePathLabel = (path: string): string => {
-    const normalized = path.replace(/\\/g, "/").replace(/\/+$/, "") || "/";
-    if (normalized === "/") return "/";
-    const segments = normalized.split("/").filter(Boolean);
-    if (segments.length <= 3) return normalized;
-    return `.../${segments.slice(-2).join("/")}`;
-  };
-
-  const handleAddShortcut = async () => {
-    if (!selectedHost || !destPath.trim()) {
-      return;
-    }
-
-    const trimmedPath = destPath.trim();
-    if (shortcuts.some((entry) => entry.path === trimmedPath)) {
-      return;
-    }
-
-    const folderName = trimmedPath.split("/").pop() || trimmedPath;
-    try {
-      await addFolderShortcut(selectedHost.id, trimmedPath, folderName);
-      await loadShortcutsForHost(selectedHost.id);
-      toast.success(
-        t("fileManager.shortcutAddedSuccessfully", { name: folderName }),
-      );
-    } catch {
-      /* toast handled by API */
-    }
-  };
-
-  const handleRemoveShortcut = async (path: string) => {
-    if (!selectedHost) return;
-    try {
-      await removeFolderShortcut(selectedHost.id, path);
-      await loadShortcutsForHost(selectedHost.id);
-      const folderName = path.split("/").pop() || path;
-      toast.success(t("fileManager.removedShortcut", { name: folderName }));
-    } catch {
-      /* toast handled by API */
-    }
-  };
-
-  const handleDestPathKeyDown = (
-    event: React.KeyboardEvent<HTMLInputElement>,
-  ) => {
-    if (
-      event.key !== "Tab" ||
-      event.shiftKey ||
-      !selectedHost ||
-      !isHostReady
-    ) {
-      return;
-    }
-
-    event.preventDefault();
-    const input = destPathInputRef.current;
-    if (!input) return;
-
-    const currentPath = input.value;
-    const cursorPos = input.selectionStart ?? currentPath.length;
-    const { dirPath, partial, replaceStart } = splitPathForCompletion(
-      currentPath,
-      cursorPos,
-    );
-    if (!partial) return;
-
-    void browseSSHDirectory(selectedHost.id.toString(), dirPath).then(
-      (result) => {
-        if (result.status !== "ok") return;
-
-        const dirNames = result.files
-          .filter(
-            (entry) =>
-              entry.type === "directory" &&
-              entry.name !== "." &&
-              entry.name !== "..",
-          )
-          .map((entry) => entry.name);
-
-        const matches = dirNames.filter((name) => name.startsWith(partial));
-        if (matches.length === 0) return;
-
-        let completedName: string;
-        let appendSlash = false;
-        if (matches.length === 1) {
-          completedName = matches[0];
-          appendSlash = true;
-        } else {
-          completedName = longestCommonPrefix(matches);
-          if (completedName.length <= partial.length) return;
-          appendSlash = matches.every((name) => name === completedName);
-        }
-
-        const suffix = currentPath.slice(cursorPos);
-        const newPath =
-          currentPath.slice(0, replaceStart) +
-          completedName +
-          (appendSlash ? "/" : "") +
-          suffix;
-        const newCursor =
-          replaceStart + completedName.length + (appendSlash ? 1 : 0);
-
-        skipDestBrowseSyncRef.current = true;
-        setDestPath(newPath);
-        requestAnimationFrame(() => {
-          input.setSelectionRange(newCursor, newCursor);
-        });
-      },
-    );
-  };
-
-  const buildDestPath = (): string => {
-    const base = destPath.replace(/\/+$/, "") || "/";
-    if (isSingleFile) {
-      return base.endsWith("/")
-        ? `${base}${files[0].name}`
-        : `${base}/${files[0].name}`;
-    }
-    return base;
-  };
-
-  const handleConfirm = () => {
-    if (!selectedHost || !destPath.trim() || !isHostReady) return;
-    const fullPath = buildDestPath();
-    onConfirm(
-      selectedHost.id.toString(),
-      selectedHost.id,
-      fullPath,
-      destPath.trim(),
-      methodPreference,
-      parallelSegmentCount === "auto"
-        ? undefined
-        : Math.max(1, Math.min(8, parseInt(parallelSegmentCount, 10))),
-    );
-    onOpenChange(false);
-  };
-
-  return (
-    <Dialog open={open} onOpenChange={onOpenChange}>
-      <DialogContent className="w-[calc(100vw-2rem)] sm:max-w-lg rounded-none border-border bg-card">
-        <DialogHeader>
-          <DialogTitle className="text-xs font-bold uppercase tracking-widest flex items-center gap-2">
-            <ArrowRightLeft className="size-4 text-accent-brand" />
-            {move
-              ? files.length > 1
-                ? t("transfer.moveItemsToHost", { count: files.length })
-                : t("transfer.moveToHost")
-              : files.length > 1
-                ? t("transfer.copyItemsToHost", { count: files.length })
-                : t("transfer.copyToHost")}
-          </DialogTitle>
-          <DialogDescription
-            className="text-[10px] font-bold uppercase tracking-tight text-muted-foreground font-mono truncate"
-            title={sourceLabel}
-          >
-            {sourceLabel}
-          </DialogDescription>
-        </DialogHeader>
-
-        <div className="flex flex-col gap-4 py-2 max-h-[min(60vh,28rem)] overflow-y-auto overflow-x-hidden">
-          {loadingHosts ? (
-            <p className="text-xs text-muted-foreground">
-              {t("fileManager.connecting")}
-            </p>
-          ) : availableHosts.length === 0 ? (
-            <div className="border border-border bg-muted/10 p-3">
-              <p className="text-xs font-semibold">
-                {t("transfer.noHostsConnected")}
-              </p>
-              <p className="mt-1 text-[10px] text-muted-foreground">
-                {t("transfer.noHostsConnectedHint")}
-              </p>
-            </div>
-          ) : (
-            <>
-              {/* Destination host */}
-              <div className="flex flex-col gap-1.5">
-                <Label className="text-xs font-bold uppercase tracking-widest text-muted-foreground">
-                  {t("transfer.selectDestinationHost")}
-                </Label>
-                <div className="relative">
-                  <Select2
-                    value={selectedHostId}
-                    onChange={(e) => handleHostChange(e.target.value)}
-                    className="w-full appearance-none px-2.5 py-1.5 text-xs bg-background border border-border text-foreground outline-none focus:ring-1 focus:ring-ring pr-7"
-                  >
-                    <option value="" disabled>
-                      {t("transfer.selectDestinationHost")}
-                    </option>
-                    {availableHosts.map((host) => (
-                      <option key={host.id} value={host.id.toString()}>
-                        {host.name || host.ip}
-                      </option>
-                    ))}
-                  </Select2>
-                  <ChevronDown className="absolute right-2 top-1/2 -translate-y-1/2 size-3 text-muted-foreground pointer-events-none" />
-                </div>
-                {selectedHost && (
-                  <p
-                    className={`text-[10px] font-bold uppercase tracking-widest ${
-                      isHostReady
-                        ? "text-green-500"
-                        : selectedConnectionState === "error"
-                          ? "text-red-400"
-                          : "text-muted-foreground"
-                    }`}
-                  >
-                    {connectionLabel(selectedConnectionState, t)}
-                    {connectionErrors[selectedHost.id]
-                      ? `: ${connectionErrors[selectedHost.id]}`
-                      : ""}
-                  </p>
-                )}
-              </div>
-
-              {/* Shortcuts */}
-              {selectedHost && shortcuts.length > 0 && (
-                <div className="flex flex-col gap-1.5">
-                  <Label className="text-xs font-bold uppercase tracking-widest text-muted-foreground flex items-center gap-1.5">
-                    <Bookmark className="size-3" />
-                    {t("fileManager.folderShortcuts")}
-                  </Label>
-                  <div className="border border-border">
-                    {shortcuts.map((entry, i) => (
-                      <div
-                        key={entry.id}
-                        className={`flex min-w-0 items-stretch ${i < shortcuts.length - 1 ? "border-b border-border" : ""}`}
-                      >
-                        <button
-                          type="button"
-                          className="min-w-0 flex-1 text-left px-3 py-2 hover:bg-accent-brand/10 hover:text-accent-brand transition-colors"
-                          onClick={() =>
-                            handleSelectDestination(selectedHost.id, entry.path)
-                          }
-                        >
-                          <span className="block truncate text-xs font-semibold">
-                            {entry.name}
-                          </span>
-                          <span
-                            className="block truncate text-[10px] text-muted-foreground font-mono"
-                            title={entry.path}
-                          >
-                            {formatTruncatedDestination(
-                              selectedHost.name || selectedHost.ip,
-                              entry.path,
-                            )}
-                          </span>
-                        </button>
-                        <button
-                          type="button"
-                          className="shrink-0 px-3 text-muted-foreground hover:text-red-400 border-l border-border transition-colors"
-                          title={t("fileManager.removeShortcut")}
-                          aria-label={t("fileManager.removeShortcut")}
-                          onClick={() => void handleRemoveShortcut(entry.path)}
-                        >
-                          <Trash2 className="size-3.5" />
-                        </button>
-                      </div>
-                    ))}
-                  </div>
-                </div>
-              )}
-
-              {/* Recent destinations */}
-              {recents.length > 0 && (
-                <div className="flex flex-col gap-1">
-                  <button
-                    type="button"
-                    className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground hover:text-foreground transition-colors"
-                    onClick={() => setRecentsCollapsed((prev) => !prev)}
-                    aria-expanded={!recentsCollapsed}
-                  >
-                    {recentsCollapsed ? (
-                      <ChevronRight className="size-3 shrink-0" />
-                    ) : (
-                      <ChevronDown className="size-3 shrink-0" />
-                    )}
-                    <Clock className="size-3 shrink-0" />
-                    {t("transfer.recentDestinations")}
-                    <span className="font-normal normal-case tracking-normal">
-                      ({recents.length})
-                    </span>
-                  </button>
-                  {!recentsCollapsed && (
-                    <div className="border border-border">
-                      {recents.map((recent, i) => (
-                        <button
-                          key={recent.id}
-                          type="button"
-                          className={`w-full min-w-0 text-left px-3 py-2 hover:bg-accent-brand/10 hover:text-accent-brand transition-colors ${i < recents.length - 1 ? "border-b border-border" : ""}`}
-                          title={`${hostName(recent.destHostId)}:${recent.destPathLabel || recent.destPath}`}
-                          onClick={() =>
-                            handleSelectDestination(
-                              recent.destHostId,
-                              recent.destPath,
-                            )
-                          }
-                        >
-                          <span className="block truncate text-xs font-semibold">
-                            {formatTruncatedDestination(
-                              hostName(recent.destHostId),
-                              recent.destPathLabel || recent.destPath,
-                            )}
-                          </span>
-                        </button>
-                      ))}
-                    </div>
-                  )}
-                </div>
-              )}
-
-              {/* Folder browser */}
-              {selectedHost && isHostReady && (
-                <div className="flex flex-col gap-1.5">
-                  <Label className="text-xs font-bold uppercase tracking-widest text-muted-foreground">
-                    {t("transfer.browseFolders")}
-                  </Label>
-                  <div className="border border-border">
-                    <div className="flex min-w-0 items-center gap-2 border-b border-border px-2 py-1.5 bg-muted/30">
-                      <button
-                        type="button"
-                        className="flex items-center gap-1 text-[10px] font-bold uppercase tracking-widest text-muted-foreground hover:text-foreground disabled:opacity-40 disabled:cursor-not-allowed transition-colors shrink-0"
-                        disabled={browsePath === "/"}
-                        onClick={handleBrowseUp}
-                      >
-                        <ChevronUp className="size-3.5" />
-                        {t("transfer.goUp")}
-                      </button>
-                      <span
-                        className="min-w-0 flex-1 truncate text-[10px] font-mono text-muted-foreground"
-                        title={browsePath}
-                      >
-                        {formatBrowsePathLabel(browsePath)}
-                      </span>
-                    </div>
-                    <div className="max-h-36 overflow-y-auto overflow-x-hidden">
-                      {browseLoading ? (
-                        <p className="text-[10px] text-muted-foreground px-3 py-2">
-                          {t("fileManager.connecting")}
-                        </p>
-                      ) : browseStatus === "not_found" ? (
-                        <p className="text-[10px] text-muted-foreground px-3 py-2">
-                          {t("transfer.browsePathWillBeCreated")}
-                        </p>
-                      ) : browseStatus === "error" ? (
-                        <p className="text-[10px] text-amber-500 px-3 py-2">
-                          {t("transfer.browsePathError")}
-                        </p>
-                      ) : browseEntries.length === 0 ? (
-                        <p className="text-[10px] text-muted-foreground px-3 py-2">
-                          {t("fileManager.emptyFolder")}
-                        </p>
-                      ) : (
-                        browseEntries.map((entry, i) => (
-                          <button
-                            key={entry.path}
-                            type="button"
-                            className={`flex w-full items-center gap-2 px-3 py-2 text-xs hover:bg-accent-brand/10 hover:text-accent-brand transition-colors ${i < browseEntries.length - 1 ? "border-b border-border" : ""}`}
-                            onClick={() => handleBrowseInto(entry.path)}
-                          >
-                            <Folder className="size-3.5 shrink-0 text-yellow-500" />
-                            <span className="truncate">{entry.name}</span>
-                          </button>
-                        ))
-                      )}
-                    </div>
-                  </div>
-                </div>
-              )}
-
-              {/* Destination path input */}
-              <div className="flex flex-col gap-1.5">
-                <Label className="text-xs font-bold uppercase tracking-widest text-muted-foreground">
-                  {t("transfer.destinationPath")}
-                </Label>
-                <Input
-                  ref={destPathInputRef}
-                  value={destPath}
-                  onChange={(e) => setDestPath(e.target.value)}
-                  onKeyDown={handleDestPathKeyDown}
-                  placeholder="/home/user"
-                  disabled={!selectedHost}
-                  className="rounded-none bg-muted/50 border-border font-mono text-xs"
-                />
-                {isArchiveTransfer && (
-                  <p className="text-[10px] text-muted-foreground">
-                    {t("transfer.destMustBeDirectory")}
-                  </p>
-                )}
-              </div>
-
-              {/* Bookmark button */}
-              {selectedHost && destPath.trim() && (
-                <button
-                  type="button"
-                  className="flex items-center gap-1.5 self-start text-[10px] font-bold uppercase tracking-widest text-muted-foreground hover:text-accent-brand transition-colors border border-border px-2.5 py-1.5 hover:border-accent-brand/40 hover:bg-accent-brand/10"
-                  onClick={() => void handleAddShortcut()}
-                >
-                  <Bookmark className="size-3" />
-                  {t("fileManager.addToShortcuts")}
-                </button>
-              )}
-
-              {/* Transfer method + parallel lanes (archive transfers only) */}
-              {isArchiveTransfer && (
-                <>
-                  <div className="flex flex-col gap-1.5">
-                    <Label className="text-xs font-bold uppercase tracking-widest text-muted-foreground">
-                      {t("transfer.methodLabel")}
-                    </Label>
-                    <div className="relative">
-                      <Select2
-                        value={methodPreference}
-                        onChange={(e) =>
-                          setMethodPreference(
-                            e.target.value as TransferMethodPreference,
-                          )
-                        }
-                        className="w-full appearance-none px-2.5 py-1.5 text-xs bg-background border border-border text-foreground outline-none focus:ring-1 focus:ring-ring pr-7"
-                      >
-                        <option value="auto">{t("transfer.methodAuto")}</option>
-                        <option value="tar">{t("transfer.methodTar")}</option>
-                        <option value="item_sftp">
-                          {t("transfer.methodItemSftp")}
-                        </option>
-                      </Select2>
-                      <ChevronDown className="absolute right-2 top-1/2 -translate-y-1/2 size-3 text-muted-foreground pointer-events-none" />
-                    </div>
-                    <p className="text-[10px] text-muted-foreground">
-                      {methodPreference === "auto"
-                        ? t("transfer.methodAutoHint")
-                        : methodPreference === "tar"
-                          ? t("transfer.methodTarHint")
-                          : t("transfer.methodItemSftpHint")}
-                    </p>
-                  </div>
-
-                  <div className="flex flex-col gap-1.5">
-                    <Label className="text-xs font-bold uppercase tracking-widest text-muted-foreground">
-                      {t("transfer.parallelSegmentsLabel")}
-                    </Label>
-                    <div className="relative">
-                      <Select2
-                        value={parallelSegmentCount}
-                        onChange={(e) =>
-                          setParallelSegmentCount(e.target.value)
-                        }
-                        className="w-full appearance-none px-2.5 py-1.5 text-xs bg-background border border-border text-foreground outline-none focus:ring-1 focus:ring-ring pr-7"
-                      >
-                        <option value="auto">{t("transfer.methodAuto")}</option>
-                        {[1, 2, 3, 4].map((n) => (
-                          <option key={n} value={n.toString()}>
-                            {t("transfer.parallelSegmentsOption", { count: n })}
-                          </option>
-                        ))}
-                      </Select2>
-                      <ChevronDown className="absolute right-2 top-1/2 -translate-y-1/2 size-3 text-muted-foreground pointer-events-none" />
-                    </div>
-                    <p className="text-[10px] text-muted-foreground">
-                      {t("transfer.parallelSegmentsHint")}
-                    </p>
-                  </div>
-
-                  {methodPreviewLoading && (
-                    <p className="text-[10px] text-muted-foreground">
-                      {t("transfer.methodPreviewLoading")}
-                    </p>
-                  )}
-                  {methodPreviewError && (
-                    <p className="text-[10px] text-amber-500">
-                      {t("transfer.methodPreviewError")}
-                    </p>
-                  )}
-                  {methodPreview && !methodPreviewLoading && (
-                    <div className="border border-border bg-muted/10 px-3 py-2 flex flex-col gap-1">
-                      <p className="text-[10px] font-bold uppercase tracking-widest">
-                        {methodPreview.resolvedMethod === "tar"
-                          ? t("transfer.methodPreviewWillUseTar")
-                          : t("transfer.methodPreviewWillUseItemSftp")}
-                      </p>
-                      <p className="text-[10px] text-muted-foreground">
-                        {t(`transfer.methodReason.${methodPreview.reasonKey}`, {
-                          fileCount: methodPreview.summary.fileCount,
-                          totalSize: formatByteSize(
-                            methodPreview.summary.totalBytes,
-                          ),
-                          largestSize: formatByteSize(
-                            methodPreview.summary.largestFileBytes,
-                          ),
-                        })}
-                      </p>
-                      <p className="text-[10px] text-muted-foreground">
-                        {t("transfer.methodPreviewScanSummary", {
-                          fileCount: methodPreview.summary.fileCount,
-                          totalSize: formatByteSize(
-                            methodPreview.summary.totalBytes,
-                          ),
-                        })}
-                      </p>
-                      {methodPreview.resolvedMethod === "item_sftp" && (
-                        <p className="text-[10px] text-muted-foreground">
-                          {t("transfer.methodItemSftpLimitation")}
-                        </p>
-                      )}
-                    </div>
-                  )}
-                </>
-              )}
-
-              <p className="text-[10px] text-muted-foreground">
-                {t("transfer.jumpHostLimitation")}
-              </p>
-            </>
-          )}
-        </div>
-
-        <DialogFooter>
-          <Button
-            variant="ghost"
-            onClick={() => onOpenChange(false)}
-            className="rounded-none text-[10px] font-bold uppercase tracking-widest"
-          >
-            {t("transfer.cancel")}
-          </Button>
-          <Button
-            variant="outline"
-            onClick={handleConfirm}
-            disabled={
-              !selectedHost ||
-              !destPath.trim() ||
-              !isHostReady ||
-              availableHosts.length === 0
-            }
-            className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 rounded-none text-[10px] font-bold uppercase tracking-widest"
-          >
-            <ArrowRightLeft className="size-3.5 mr-1" />
-            {move ? t("transfer.confirmMove") : t("transfer.confirmCopy")}
-          </Button>
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/components/WindowManager.tsx b/plugins/file-manager/src/frontend/components/WindowManager.tsx
deleted file mode 100644
index bd442400b..000000000
--- a/plugins/file-manager/src/frontend/components/WindowManager.tsx
+++ /dev/null
@@ -1,144 +0,0 @@
-/* eslint-disable react-refresh/only-export-components */
-import React, { useState, useCallback, useRef } from "react";
-
-export interface WindowInstance {
-  id: string;
-  title: string;
-  component: React.ReactNode | ((windowId: string) => React.ReactNode);
-  x: number;
-  y: number;
-  width: number;
-  height: number;
-  isMaximized: boolean;
-  isMinimized: boolean;
-  zIndex: number;
-}
-
-interface WindowManagerProps {
-  children?: React.ReactNode;
-}
-
-interface WindowManagerContextType {
-  windows: WindowInstance[];
-  openWindow: (window: Omit<WindowInstance, "id" | "zIndex">) => string;
-  closeWindow: (id: string) => void;
-  minimizeWindow: (id: string) => void;
-  maximizeWindow: (id: string) => void;
-  focusWindow: (id: string) => void;
-  updateWindow: (id: string, updates: Partial<WindowInstance>) => void;
-}
-
-const WindowManagerContext =
-  React.createContext<WindowManagerContextType | null>(null);
-
-export function WindowManager({ children }: WindowManagerProps) {
-  const [windows, setWindows] = useState<WindowInstance[]>([]);
-  const nextZIndex = useRef(1000);
-  const windowCounter = useRef(0);
-
-  const openWindow = useCallback(
-    (windowData: Omit<WindowInstance, "id" | "zIndex">) => {
-      const id = `window-${++windowCounter.current}`;
-      const zIndex = ++nextZIndex.current;
-
-      const offset = (windows.length % 5) * 20;
-      let adjustedX = windowData.x + offset;
-      let adjustedY = windowData.y + offset;
-
-      const maxX = Math.max(0, window.innerWidth - windowData.width - 20);
-      const maxY = Math.max(0, window.innerHeight - windowData.height - 20);
-
-      adjustedX = Math.max(20, Math.min(adjustedX, maxX));
-      adjustedY = Math.max(20, Math.min(adjustedY, maxY));
-
-      const newWindow: WindowInstance = {
-        ...windowData,
-        id,
-        zIndex,
-        x: adjustedX,
-        y: adjustedY,
-      };
-
-      setWindows((prev) => [...prev, newWindow]);
-      return id;
-    },
-    [windows.length],
-  );
-
-  const closeWindow = useCallback((id: string) => {
-    setWindows((prev) => prev.filter((w) => w.id !== id));
-  }, []);
-
-  const minimizeWindow = useCallback((id: string) => {
-    setWindows((prev) =>
-      prev.map((w) =>
-        w.id === id ? { ...w, isMinimized: !w.isMinimized } : w,
-      ),
-    );
-  }, []);
-
-  const maximizeWindow = useCallback((id: string) => {
-    setWindows((prev) =>
-      prev.map((w) =>
-        w.id === id ? { ...w, isMaximized: !w.isMaximized } : w,
-      ),
-    );
-  }, []);
-
-  const focusWindow = useCallback((id: string) => {
-    setWindows((prev) => {
-      const targetWindow = prev.find((w) => w.id === id);
-      if (!targetWindow) return prev;
-
-      const newZIndex = ++nextZIndex.current;
-      return prev.map((w) => (w.id === id ? { ...w, zIndex: newZIndex } : w));
-    });
-  }, []);
-
-  const updateWindow = useCallback(
-    (id: string, updates: Partial<WindowInstance>) => {
-      setWindows((prev) =>
-        prev.map((w) => (w.id === id ? { ...w, ...updates } : w)),
-      );
-    },
-    [],
-  );
-
-  const contextValue: WindowManagerContextType = {
-    windows,
-    openWindow,
-    closeWindow,
-    minimizeWindow,
-    maximizeWindow,
-    focusWindow,
-    updateWindow,
-  };
-
-  return (
-    <WindowManagerContext.Provider value={contextValue}>
-      {children}
-      <div
-        className="window-container absolute inset-0 pointer-events-none overflow-hidden"
-        style={{ zIndex: 1000 }}
-      >
-        <div className="relative w-full h-full pointer-events-none">
-          {windows.map((window) => (
-            <div key={window.id} className="pointer-events-auto">
-              {typeof window.component === "function"
-                ? window.component(window.id)
-                : window.component}
-            </div>
-          ))}
-        </div>
-      </div>
-    </WindowManagerContext.Provider>
-  );
-}
-
-export function useWindowManager() {
-  const context = React.useContext(WindowManagerContext);
-  if (!context) {
-    throw new Error("useWindowManager must be used within a WindowManager");
-  }
-  return context;
-}
diff --git a/plugins/file-manager/src/frontend/disk-info.ts b/plugins/file-manager/src/frontend/disk-info.ts
deleted file mode 100644
index 2347841ae..000000000
--- a/plugins/file-manager/src/frontend/disk-info.ts
+++ /dev/null
@@ -1,38 +0,0 @@
-/** One mounted filesystem, as the host-metrics plugin reports it. */
-export interface DiskFilesystem {
-  filesystem: string;
-  type: string;
-  mount: string;
-  percent: number | null;
-  usedHuman: string | null;
-  totalHuman: string | null;
-  availableHuman: string | null;
-  usedBytes: number | null;
-  totalBytes: number | null;
-  availableBytes: number | null;
-  label?: string;
-}
-
-export interface HostDiskInfo {
-  percent: number | null;
-  usedHuman: string | null;
-  totalHuman: string | null;
-  mount: string | null;
-  filesystems?: DiskFilesystem[];
-}
-
-/** The filesystem the path lives on: the longest mount point that holds it. */
-export function mountForPath(
-  filesystems: DiskFilesystem[],
-  path: string | null | undefined,
-): DiskFilesystem | null {
-  if (!path) return null;
-  let best: DiskFilesystem | null = null;
-  for (const fs of filesystems) {
-    const mount = fs.mount.replace(/\/+$/, "") || "/";
-    const inside =
-      mount === "/" || path === mount || path.startsWith(`${mount}/`);
-    if (inside && (!best || mount.length > best.mount.length)) best = fs;
-  }
-  return best;
-}
diff --git a/plugins/file-manager/src/frontend/file-manager-types.ts b/plugins/file-manager/src/frontend/file-manager-types.ts
deleted file mode 100644
index bec697f42..000000000
--- a/plugins/file-manager/src/frontend/file-manager-types.ts
+++ /dev/null
@@ -1,37 +0,0 @@
-import type { FileItem, SSHHost } from "./host-types";
-import type { LogEntry } from "@termix/plugin-sdk/ui";
-
-export interface FileManagerProps {
-  initialHost?: SSHHost | null;
-  initialFilePath?: string;
-  initialPath?: string;
-  onClose?: () => void;
-  onOpenTerminalTab?: (path?: string) => void;
-  /** When false, pause keepalive while the tab stays mounted in the background. */
-  isVisible?: boolean;
-}
-
-export type ConnectionLogPayload = Omit<LogEntry, "id" | "timestamp">;
-
-export type SSHConnectionError = Error & {
-  connectionLogs?: ConnectionLogPayload[];
-  requires_totp?: boolean;
-  requires_browser_sign_in?: boolean;
-  sessionId?: string;
-  prompt?: string;
-  url?: string;
-  code?: string;
-  label?: string;
-  status?: string;
-  reason?: "no_keyboard" | "auth_failed" | "timeout";
-};
-
-export interface CreateIntent {
-  id: string;
-  type: "file" | "directory";
-  defaultName: string;
-  currentName: string;
-}
-
-export type PendingSudoOperation =
-  { type: "delete"; files: FileItem[] } | { type: "navigate"; path: string };
diff --git a/plugins/file-manager/src/frontend/file-manager-utils.ts b/plugins/file-manager/src/frontend/file-manager-utils.ts
deleted file mode 100644
index 3b27a9d4e..000000000
--- a/plugins/file-manager/src/frontend/file-manager-utils.ts
+++ /dev/null
@@ -1,35 +0,0 @@
-export function formatFileSize(bytes?: number): string {
-  if (bytes === undefined || bytes === null) return "-";
-  if (bytes === 0) return "0 B";
-
-  const units = ["B", "KB", "MB", "GB", "TB"];
-  let size = bytes;
-  let unitIndex = 0;
-
-  while (size >= 1024 && unitIndex < units.length - 1) {
-    size /= 1024;
-    unitIndex++;
-  }
-
-  const formattedSize =
-    size < 10 && unitIndex > 0 ? size.toFixed(1) : Math.round(size).toString();
-  return `${formattedSize} ${units[unitIndex]}`;
-}
-
-export async function runWithConcurrency<T>(
-  items: T[],
-  limit: number,
-  task: (item: T) => Promise<void>,
-): Promise<void> {
-  let nextIndex = 0;
-  const workerCount = Math.min(Math.max(1, limit), items.length);
-
-  await Promise.all(
-    Array.from({ length: workerCount }, async () => {
-      while (nextIndex < items.length) {
-        const item = items[nextIndex++];
-        await task(item);
-      }
-    }),
-  );
-}
diff --git a/plugins/file-manager/src/frontend/file-preview-preload.ts b/plugins/file-manager/src/frontend/file-preview-preload.ts
deleted file mode 100644
index d5e0e2e48..000000000
--- a/plugins/file-manager/src/frontend/file-preview-preload.ts
+++ /dev/null
@@ -1,118 +0,0 @@
-import {
-  markAdaptiveResourceUsed,
-  runAdaptiveBackgroundTask,
-} from "@termix/plugin-sdk/ui";
-
-export type FilePreviewKind =
-  | "image"
-  | "video"
-  | "audio"
-  | "markdown"
-  | "pdf"
-  | "text"
-  | "code"
-  | "unknown";
-
-const extensions = {
-  image: new Set(["png", "jpg", "jpeg", "gif", "bmp", "svg", "webp"]),
-  video: new Set(["mp4", "avi", "mkv", "mov", "wmv", "flv", "webm"]),
-  audio: new Set(["mp3", "wav", "flac", "ogg", "aac", "m4a"]),
-  markdown: new Set(["md", "markdown", "mdown", "mkdn", "mdx"]),
-  pdf: new Set(["pdf"]),
-  text: new Set(["txt", "readme"]),
-  code: new Set([
-    "js",
-    "ts",
-    "jsx",
-    "tsx",
-    "py",
-    "java",
-    "cpp",
-    "c",
-    "cs",
-    "php",
-    "rb",
-    "go",
-    "rs",
-    "html",
-    "css",
-    "scss",
-    "less",
-    "json",
-    "xml",
-    "yaml",
-    "yml",
-    "toml",
-    "ini",
-    "conf",
-    "sh",
-    "bash",
-    "zsh",
-    "sql",
-    "vue",
-    "svelte",
-  ]),
-} satisfies Record<Exclude<FilePreviewKind, "unknown">, Set<string>>;
-
-const extensionlessCodeFiles = new Set([
-  "dockerfile",
-  "makefile",
-  "rakefile",
-  "gemfile",
-]);
-
-export function resolveFilePreviewKind(filename: string): FilePreviewKind {
-  const lowerName = filename.toLowerCase();
-  if (extensionlessCodeFiles.has(lowerName)) return "code";
-
-  const extension = lowerName.split(".").pop() || "";
-  for (const [kind, knownExtensions] of Object.entries(extensions)) {
-    if (knownExtensions.has(extension)) return kind as FilePreviewKind;
-  }
-  return "unknown";
-}
-
-export const loadCodeEditor = () =>
-  import("./components/CodeEditor.tsx").then((module) => ({
-    default: module.CodeEditor,
-  }));
-export const loadImagePreview = () =>
-  import("./components/ImagePreview.tsx").then((module) => ({
-    default: module.ImagePreview,
-  }));
-export const loadMarkdownRenderer = () =>
-  import("./components/MarkdownRenderer.tsx").then((module) => ({
-    default: module.MarkdownRenderer,
-  }));
-export const loadPdfPreview = () =>
-  import("./components/PdfPreview.tsx").then((module) => ({
-    default: module.PdfPreview,
-  }));
-export const loadAudioPreview = () =>
-  import("./components/AudioPreview.tsx").then((module) => ({
-    default: module.AudioPreview,
-  }));
-
-const previewLoaders: Partial<Record<FilePreviewKind, () => Promise<unknown>>> =
-  {
-    image: loadImagePreview,
-    audio: loadAudioPreview,
-    markdown: loadMarkdownRenderer,
-    pdf: loadPdfPreview,
-    text: loadCodeEditor,
-    code: loadCodeEditor,
-    unknown: loadCodeEditor,
-  };
-
-export function preloadFilePreview(filename: string): void {
-  const kind = resolveFilePreviewKind(filename);
-  const loader = previewLoaders[kind];
-  if (loader) runAdaptiveBackgroundTask("module", `preview:${kind}`, loader);
-}
-
-export function markFilePreviewUsed(filename: string): void {
-  markAdaptiveResourceUsed(
-    "module",
-    `preview:${resolveFilePreviewKind(filename)}`,
-  );
-}
diff --git a/plugins/file-manager/src/frontend/homepage/FileManagerWidget.tsx b/plugins/file-manager/src/frontend/homepage/FileManagerWidget.tsx
deleted file mode 100644
index b7aa8742b..000000000
--- a/plugins/file-manager/src/frontend/homepage/FileManagerWidget.tsx
+++ /dev/null
@@ -1,47 +0,0 @@
-import { FolderSearch } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { useHost } from "@termix/plugin-sdk/frontend";
-import { WidgetTitle } from "@termix/plugin-sdk/ui";
-import type {
-  FileManagerWidgetConfig,
-  WidgetComponentProps,
-} from "./homepage.js";
-import type { SSHHost } from "../host-types";
-import { FileManager } from "../FileManager";
-
-export function FileManagerWidget({
-  widget,
-  config,
-}: WidgetComponentProps<FileManagerWidgetConfig>) {
-  const { t } = useTranslation();
-  const host = useHost(config.hostId || undefined);
-
-  if (!config.hostId) {
-    return (
-      <div className="flex flex-col items-center justify-center w-full h-full gap-2 text-muted-foreground/60">
-        <FolderSearch size={20} />
-        <span className="text-xs">{t("common.noHostConfigured")}</span>
-      </div>
-    );
-  }
-
-  if (!host) {
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-muted-foreground/60">
-        {t("common.noHostConfigured")}
-      </div>
-    );
-  }
-
-  return (
-    <div className="flex flex-col w-full h-full overflow-hidden">
-      <WidgetTitle title={widget.title} icon={<FolderSearch size={11} />} />
-      <div
-        className="flex-1 overflow-hidden"
-        onMouseDown={(e) => e.stopPropagation()}
-      >
-        <FileManager initialHost={host as unknown as SSHHost} />
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/homepage/FileManagerWidgetEditForm.tsx b/plugins/file-manager/src/frontend/homepage/FileManagerWidgetEditForm.tsx
deleted file mode 100644
index c489fce5c..000000000
--- a/plugins/file-manager/src/frontend/homepage/FileManagerWidgetEditForm.tsx
+++ /dev/null
@@ -1,42 +0,0 @@
-import { fileManagerHostSetting } from "../host-settings";
-import { useHosts, useTranslation } from "@termix/plugin-sdk/frontend";
-import { Select2 } from "@termix/plugin-sdk/ui";
-import type {
-  FileManagerWidgetConfig,
-  WidgetEditFormProps,
-} from "./homepage.js";
-
-export function FileManagerWidgetEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<FileManagerWidgetConfig>) {
-  const { t } = useTranslation();
-  const { hosts } = useHosts();
-  const options = hosts.filter(
-    (host) =>
-      host.enableSsh !== false &&
-      fileManagerHostSetting(host, "enableFileManager", true),
-  );
-
-  return (
-    <div className="flex flex-col gap-1">
-      <label className="text-xs font-medium text-muted-foreground">
-        {t("common.host")}
-      </label>
-      <Select2
-        value={config.hostId || ""}
-        onChange={(e) =>
-          onChange({ ...config, hostId: Number(e.target.value) })
-        }
-        className="h-8 text-xs border border-border bg-background px-2"
-      >
-        <option value="">{t("common.selectHost")}</option>
-        {options.map((host) => (
-          <option key={host.id} value={host.id}>
-            {host.name || host.ip}
-          </option>
-        ))}
-      </Select2>
-    </div>
-  );
-}
diff --git a/plugins/file-manager/src/frontend/homepage/homepage.ts b/plugins/file-manager/src/frontend/homepage/homepage.ts
deleted file mode 100644
index cfb8fcf6a..000000000
--- a/plugins/file-manager/src/frontend/homepage/homepage.ts
+++ /dev/null
@@ -1,36 +0,0 @@
-import type { ComponentType, ReactNode } from "react";
-import type { ExtensionContribution } from "@termix/plugin-sdk/frontend";
-
-/** The homepage's grid step, in pixels. */
-export const GRID_SIZE = 30;
-
-export interface FileManagerWidgetConfig {
-  hostId: number;
-}
-
-/** What the homepage hands a widget; only the fields this plugin reads. */
-export interface WidgetComponentProps<C> {
-  widget: { title?: string | null };
-  config: C;
-}
-
-export interface WidgetEditFormProps<C> {
-  config: C;
-  onChange: (config: C) => void;
-}
-
-/** What app.registerExtension("homepage.widgets", ...) takes. */
-export interface WidgetDefinition<C> extends ExtensionContribution {
-  id: string;
-  name: string;
-  description: string;
-  category: "links" | "info" | "system" | "monitoring";
-  icon: ReactNode;
-  defaultConfig: C;
-  defaultSize: { w: number; h: number };
-  minSize: { w: number; h: number };
-  components: {
-    view: ComponentType<WidgetComponentProps<C>>;
-    editForm?: ComponentType<WidgetEditFormProps<C>>;
-  };
-}
diff --git a/plugins/file-manager/src/frontend/hooks/useDragAndDrop.ts b/plugins/file-manager/src/frontend/hooks/useDragAndDrop.ts
deleted file mode 100644
index 33b92eff8..000000000
--- a/plugins/file-manager/src/frontend/hooks/useDragAndDrop.ts
+++ /dev/null
@@ -1,178 +0,0 @@
-import { useState, useCallback } from "react";
-
-interface DragAndDropState {
-  isDragging: boolean;
-  dragCounter: number;
-  draggedFiles: File[];
-}
-
-interface UseDragAndDropProps {
-  onFilesDropped: (files: FileList) => void;
-  onItemsDropped?: (entries: FileSystemEntry[]) => void;
-  onError?: (error: string) => void;
-  maxFileSize?: number;
-  allowedTypes?: string[];
-}
-
-export function useDragAndDrop({
-  onFilesDropped,
-  onItemsDropped,
-  onError,
-  maxFileSize = 5120,
-  allowedTypes = [],
-}: UseDragAndDropProps) {
-  const [state, setState] = useState<DragAndDropState>({
-    isDragging: false,
-    dragCounter: 0,
-    draggedFiles: [],
-  });
-
-  const validateFiles = useCallback(
-    (files: FileList): string | null => {
-      const maxSizeBytes = maxFileSize * 1024 * 1024;
-
-      for (let i = 0; i < files.length; i++) {
-        const file = files[i];
-
-        if (file.size > maxSizeBytes) {
-          return `File "${file.name}" is too large. Maximum size is ${maxFileSize}MB.`;
-        }
-
-        if (allowedTypes.length > 0) {
-          const fileExt = file.name.split(".").pop()?.toLowerCase();
-          const mimeType = file.type.toLowerCase();
-
-          const isAllowed = allowedTypes.some((type) => {
-            if (type.startsWith(".")) {
-              return fileExt === type.slice(1);
-            }
-            if (type.includes("/")) {
-              return (
-                mimeType === type || mimeType.startsWith(type.replace("*", ""))
-              );
-            }
-            switch (type) {
-              case "image":
-                return mimeType.startsWith("image/");
-              case "video":
-                return mimeType.startsWith("video/");
-              case "audio":
-                return mimeType.startsWith("audio/");
-              case "text":
-                return mimeType.startsWith("text/");
-              default:
-                return false;
-            }
-          });
-
-          if (!isAllowed) {
-            return `File type "${file.type || "unknown"}" is not allowed.`;
-          }
-        }
-      }
-
-      return null;
-    },
-    [maxFileSize, allowedTypes],
-  );
-
-  const handleDragEnter = useCallback((e: React.DragEvent) => {
-    e.preventDefault();
-    e.stopPropagation();
-
-    setState((prev) => ({
-      ...prev,
-      dragCounter: prev.dragCounter + 1,
-    }));
-
-    if (e.dataTransfer.items && e.dataTransfer.items.length > 0) {
-      setState((prev) => ({
-        ...prev,
-        isDragging: true,
-      }));
-    }
-  }, []);
-
-  const handleDragLeave = useCallback((e: React.DragEvent) => {
-    e.preventDefault();
-    e.stopPropagation();
-
-    setState((prev) => {
-      const newCounter = prev.dragCounter - 1;
-      return {
-        ...prev,
-        dragCounter: newCounter,
-        isDragging: newCounter > 0,
-      };
-    });
-  }, []);
-
-  const handleDragOver = useCallback((e: React.DragEvent) => {
-    e.preventDefault();
-    e.stopPropagation();
-
-    e.dataTransfer.dropEffect = "copy";
-  }, []);
-
-  const handleDrop = useCallback(
-    (e: React.DragEvent) => {
-      e.preventDefault();
-      e.stopPropagation();
-
-      // Read the entries before touching state. Updating state flushes a render
-      // and the browser clears dataTransfer once the drop handler unwinds, so
-      // anything read later comes back empty (Firefox is strictest here).
-      const entries: FileSystemEntry[] = [];
-      if (onItemsDropped && e.dataTransfer.items?.length > 0) {
-        for (const item of Array.from(e.dataTransfer.items)) {
-          const entry = item.webkitGetAsEntry?.();
-          if (entry) entries.push(entry);
-        }
-      }
-      const files = e.dataTransfer.files;
-
-      setState({
-        isDragging: false,
-        dragCounter: 0,
-        draggedFiles: [],
-      });
-
-      if (onItemsDropped && entries.some((entry) => entry.isDirectory)) {
-        onItemsDropped(entries);
-        return;
-      }
-
-      if (files.length === 0) {
-        return;
-      }
-
-      const validationError = validateFiles(files);
-      if (validationError) {
-        onError?.(validationError);
-        return;
-      }
-
-      onFilesDropped(files);
-    },
-    [validateFiles, onFilesDropped, onItemsDropped, onError],
-  );
-
-  const resetDragState = useCallback(() => {
-    setState({
-      isDragging: false,
-      dragCounter: 0,
-      draggedFiles: [],
-    });
-  }, []);
-
-  return {
-    isDragging: state.isDragging,
-    dragHandlers: {
-      onDragEnter: handleDragEnter,
-      onDragLeave: handleDragLeave,
-      onDragOver: handleDragOver,
-      onDrop: handleDrop,
-    },
-    resetDragState,
-  };
-}
diff --git a/plugins/file-manager/src/frontend/hooks/useDragToDesktop.ts b/plugins/file-manager/src/frontend/hooks/useDragToDesktop.ts
deleted file mode 100644
index dc9a38092..000000000
--- a/plugins/file-manager/src/frontend/hooks/useDragToDesktop.ts
+++ /dev/null
@@ -1,294 +0,0 @@
-import { useState, useCallback } from "react";
-import { toast } from "sonner";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { downloadSSHFile } from "../api/ssh-file-operations-api";
-import type { FileItem, SSHHost } from "../host-types";
-
-interface DragToDesktopState {
-  isDragging: boolean;
-  isDownloading: boolean;
-  progress: number;
-  error: string | null;
-}
-
-interface UseDragToDesktopProps {
-  sshSessionId: string;
-  sshHost: SSHHost;
-}
-
-interface DragToDesktopOptions {
-  enableToast?: boolean;
-  onSuccess?: () => void;
-  onError?: (error: string) => void;
-}
-
-export function useDragToDesktop({ sshSessionId }: UseDragToDesktopProps) {
-  const { t } = useTranslation();
-  const [state, setState] = useState<DragToDesktopState>({
-    isDragging: false,
-    isDownloading: false,
-    progress: 0,
-    error: null,
-  });
-
-  const isElectron = () => {
-    return (
-      typeof window !== "undefined" &&
-      window.electronAPI &&
-      window.electronAPI.isElectron
-    );
-  };
-
-  const dragFileToDesktop = useCallback(
-    async (file: FileItem, options: DragToDesktopOptions = {}) => {
-      const { enableToast = true, onSuccess, onError } = options;
-
-      if (!isElectron()) {
-        const error =
-          "Drag to desktop feature is only available in desktop application";
-        if (enableToast) toast.error(error);
-        onError?.(error);
-        return false;
-      }
-
-      if (file.type !== "file") {
-        const error = "Only files can be dragged to desktop";
-        if (enableToast) toast.error(error);
-        onError?.(error);
-        return false;
-      }
-
-      try {
-        setState((prev) => ({
-          ...prev,
-          isDownloading: true,
-          progress: 0,
-          error: null,
-        }));
-
-        const response = await downloadSSHFile(sshSessionId, file.path);
-
-        if (!response?.content) {
-          throw new Error("Unable to get file content");
-        }
-
-        setState((prev) => ({ ...prev, progress: 50 }));
-
-        const tempResult = await window.electronAPI.createTempFile({
-          fileName: file.name,
-          content: response.content,
-          encoding: "base64",
-        });
-
-        if (!tempResult.success) {
-          throw new Error(
-            tempResult.error || "Failed to create temporary file",
-          );
-        }
-
-        setState((prev) => ({ ...prev, progress: 80, isDragging: true }));
-
-        const dragResult = await window.electronAPI.startDragToDesktop({
-          tempId: tempResult.tempId,
-          fileName: file.name,
-        });
-
-        if (!dragResult.success) {
-          throw new Error(dragResult.error || "Failed to start dragging");
-        }
-
-        setState((prev) => ({ ...prev, progress: 100 }));
-
-        if (enableToast) {
-          toast.success(t("fileManager.dragToDesktop", { name: file.name }));
-        }
-
-        onSuccess?.();
-
-        setTimeout(async () => {
-          await window.electronAPI.cleanupTempFile(tempResult.tempId);
-          setState((prev) => ({
-            ...prev,
-            isDragging: false,
-            isDownloading: false,
-            progress: 0,
-          }));
-        }, 10000);
-
-        return true;
-      } catch (error: unknown) {
-        console.error("Failed to drag to desktop:", error);
-        const err = error as { message?: string };
-        const errorMessage = err.message || "Drag failed";
-
-        setState((prev) => ({
-          ...prev,
-          isDownloading: false,
-          isDragging: false,
-          progress: 0,
-          error: errorMessage,
-        }));
-
-        if (enableToast) {
-          toast.error(
-            t("fileManager.dragFailedDetail", { error: errorMessage }),
-          );
-        }
-
-        onError?.(errorMessage);
-        return false;
-      }
-    },
-    [sshSessionId],
-  );
-
-  const dragFilesToDesktop = useCallback(
-    async (files: FileItem[], options: DragToDesktopOptions = {}) => {
-      const { enableToast = true, onSuccess, onError } = options;
-
-      if (!isElectron()) {
-        const error =
-          "Drag to desktop feature is only available in desktop application";
-        if (enableToast) toast.error(error);
-        onError?.(error);
-        return false;
-      }
-
-      const fileList = files.filter((f) => f.type === "file");
-      if (fileList.length === 0) {
-        const error = "No files available for dragging";
-        if (enableToast) toast.error(error);
-        onError?.(error);
-        return false;
-      }
-
-      if (fileList.length === 1) {
-        return dragFileToDesktop(fileList[0], options);
-      }
-
-      try {
-        setState((prev) => ({
-          ...prev,
-          isDownloading: true,
-          progress: 0,
-          error: null,
-        }));
-
-        const downloadPromises = fileList.map((file) =>
-          downloadSSHFile(sshSessionId, file.path),
-        );
-
-        const responses = await Promise.all(downloadPromises);
-        setState((prev) => ({ ...prev, progress: 40 }));
-
-        const folderName = `Files_${Date.now()}`;
-        const filesData = fileList.map((file, index) => ({
-          relativePath: file.name,
-          content: responses[index]?.content || "",
-          encoding: "base64" as const,
-        }));
-
-        const tempResult = await window.electronAPI.createTempFolder({
-          folderName,
-          files: filesData,
-        });
-
-        if (!tempResult.success) {
-          throw new Error(
-            tempResult.error || "Failed to create temporary folder",
-          );
-        }
-
-        setState((prev) => ({ ...prev, progress: 80, isDragging: true }));
-
-        const dragResult = await window.electronAPI.startDragToDesktop({
-          tempId: tempResult.tempId,
-          fileName: folderName,
-        });
-
-        if (!dragResult.success) {
-          throw new Error(dragResult.error || "Failed to start dragging");
-        }
-
-        setState((prev) => ({ ...prev, progress: 100 }));
-
-        if (enableToast) {
-          toast.success(
-            t("fileManager.dragFilesToDesktop", { count: fileList.length }),
-          );
-        }
-
-        onSuccess?.();
-
-        setTimeout(async () => {
-          await window.electronAPI.cleanupTempFile(tempResult.tempId);
-          setState((prev) => ({
-            ...prev,
-            isDragging: false,
-            isDownloading: false,
-            progress: 0,
-          }));
-        }, 15000);
-        return true;
-      } catch (error: unknown) {
-        console.error("Failed to batch drag to desktop:", error);
-        const err = error as { message?: string };
-        const errorMessage = err.message || "Batch drag failed";
-
-        setState((prev) => ({
-          ...prev,
-          isDownloading: false,
-          isDragging: false,
-          progress: 0,
-          error: errorMessage,
-        }));
-
-        if (enableToast) {
-          toast.error(
-            t("fileManager.dragFailedDetail", { error: errorMessage }),
-          );
-        }
-
-        onError?.(errorMessage);
-        return false;
-      }
-    },
-    [sshSessionId, dragFileToDesktop],
-  );
-
-  const dragFolderToDesktop = useCallback(
-    async (folder: FileItem, options: DragToDesktopOptions = {}) => {
-      const { enableToast = true, onError } = options;
-
-      if (!isElectron()) {
-        const error =
-          "Drag to desktop feature is only available in desktop application";
-        if (enableToast) toast.error(error);
-        onError?.(error);
-        return false;
-      }
-
-      if (folder.type !== "directory") {
-        const error = "Only folder types can be dragged";
-        if (enableToast) toast.error(error);
-        onError?.(error);
-        return false;
-      }
-
-      if (enableToast) {
-        toast.info(t("fileManager.folderDragUnsupported"));
-      }
-
-      return false;
-    },
-    [],
-  );
-
-  return {
-    ...state,
-    isElectron: isElectron(),
-    dragFileToDesktop,
-    dragFilesToDesktop,
-    dragFolderToDesktop,
-  };
-}
diff --git a/plugins/file-manager/src/frontend/hooks/useDragToSystemDesktop.ts b/plugins/file-manager/src/frontend/hooks/useDragToSystemDesktop.ts
deleted file mode 100644
index cc66c3f04..000000000
--- a/plugins/file-manager/src/frontend/hooks/useDragToSystemDesktop.ts
+++ /dev/null
@@ -1,304 +0,0 @@
-/* eslint-disable react-hooks/exhaustive-deps */
-import { useState, useCallback, useRef } from "react";
-import { toast } from "sonner";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { downloadSSHFile } from "../api/ssh-file-operations-api";
-import type { FileItem, SSHHost } from "../host-types";
-
-interface DragToSystemState {
-  isDragging: boolean;
-  isDownloading: boolean;
-  progress: number;
-  error: string | null;
-}
-
-interface UseDragToSystemProps {
-  sshSessionId: string;
-  sshHost: SSHHost;
-}
-
-interface DragToSystemOptions {
-  enableToast?: boolean;
-  onSuccess?: () => void;
-  onError?: (error: string) => void;
-}
-
-export function useDragToSystemDesktop({ sshSessionId }: UseDragToSystemProps) {
-  const { t } = useTranslation();
-  const [state, setState] = useState<DragToSystemState>({
-    isDragging: false,
-    isDownloading: false,
-    progress: 0,
-    error: null,
-  });
-
-  const dragDataRef = useRef<{
-    files: FileItem[];
-    options: DragToSystemOptions;
-  } | null>(null);
-
-  const saveLastDirectory = async (fileHandle: {
-    getParent?: () => Promise<unknown>;
-  }) => {
-    try {
-      if ("indexedDB" in window && fileHandle.getParent) {
-        const dirHandle = await fileHandle.getParent();
-        const request = indexedDB.open("termix-dirs", 1);
-        request.onsuccess = () => {
-          const db = request.result;
-          const transaction = db.transaction(["directories"], "readwrite");
-          const store = transaction.objectStore("directories");
-          store.put({ handle: dirHandle }, "lastSaveDir");
-        };
-      }
-    } catch (error) {
-      console.error("Drag operation failed:", error);
-    }
-  };
-
-  const isFileSystemAPISupported = () => {
-    return "showSaveFilePicker" in window;
-  };
-
-  const isDraggedOutsideWindow = (e: DragEvent) => {
-    const margin = 50;
-    return (
-      e.clientX < margin ||
-      e.clientX > window.innerWidth - margin ||
-      e.clientY < margin ||
-      e.clientY > window.innerHeight - margin
-    );
-  };
-
-  const createFileBlob = async (file: FileItem): Promise<Blob> => {
-    const response = await downloadSSHFile(sshSessionId, file.path);
-    if (!response?.content) {
-      throw new Error(`Unable to get content for file ${file.name}`);
-    }
-
-    const binaryString = atob(response.content);
-    const bytes = new Uint8Array(binaryString.length);
-    for (let i = 0; i < binaryString.length; i++) {
-      bytes[i] = binaryString.charCodeAt(i);
-    }
-
-    return new Blob([bytes]);
-  };
-
-  const createZipBlob = async (files: FileItem[]): Promise<Blob> => {
-    const JSZip = (await import("jszip")).default;
-    const zip = new JSZip();
-
-    for (const file of files) {
-      const blob = await createFileBlob(file);
-      zip.file(file.name, blob);
-    }
-
-    return await zip.generateAsync({ type: "blob" });
-  };
-
-  const fallbackDownload = (blob: Blob, fileName: string) => {
-    const url = URL.createObjectURL(blob);
-    const a = document.createElement("a");
-    a.href = url;
-    a.download = fileName;
-    document.body.appendChild(a);
-    a.click();
-    document.body.removeChild(a);
-    URL.revokeObjectURL(url);
-  };
-
-  const handleDragToSystem = useCallback(
-    async (files: FileItem[], options: DragToSystemOptions = {}) => {
-      const { enableToast = true, onSuccess, onError } = options;
-
-      if (files.length === 0) {
-        const error = "No files available for dragging";
-        if (enableToast) toast.error(error);
-        onError?.(error);
-        return false;
-      }
-
-      const fileList = files.filter((f) => f.type === "file");
-      if (fileList.length === 0) {
-        const error = "Only files can be dragged to desktop";
-        if (enableToast) toast.error(error);
-        onError?.(error);
-        return false;
-      }
-
-      try {
-        setState((prev) => ({
-          ...prev,
-          isDownloading: true,
-          progress: 0,
-          error: null,
-        }));
-
-        const fileName =
-          fileList.length === 1 ? fileList[0].name : `files_${Date.now()}.zip`;
-
-        let fileHandle: {
-          createWritable?: () => Promise<{
-            write: (data: Blob) => Promise<void>;
-            close: () => Promise<void>;
-          }>;
-          getParent?: () => Promise<unknown>;
-        } | null = null;
-        if (isFileSystemAPISupported()) {
-          try {
-            fileHandle = await (
-              window as Window & {
-                showSaveFilePicker?: (options: {
-                  suggestedName: string;
-                  startIn: string;
-                  types: Array<{
-                    description: string;
-                    accept: Record<string, string[]>;
-                  }>;
-                }) => Promise<{
-                  createWritable?: () => Promise<{
-                    write: (data: Blob) => Promise<void>;
-                    close: () => Promise<void>;
-                  }>;
-                  getParent?: () => Promise<unknown>;
-                }>;
-              }
-            ).showSaveFilePicker!({
-              suggestedName: fileName,
-              startIn: "desktop",
-              types: [
-                {
-                  description: "Files",
-                  accept: {
-                    "*/*": [
-                      ".txt",
-                      ".jpg",
-                      ".png",
-                      ".pdf",
-                      ".zip",
-                      ".tar",
-                      ".gz",
-                    ],
-                  },
-                },
-              ],
-            });
-          } catch (error: unknown) {
-            const err = error as { name?: string };
-            if (err.name === "AbortError") {
-              setState((prev) => ({
-                ...prev,
-                isDownloading: false,
-                progress: 0,
-              }));
-              return false;
-            }
-            throw error;
-          }
-        }
-
-        let blob: Blob;
-        if (fileList.length === 1) {
-          blob = await createFileBlob(fileList[0]);
-          setState((prev) => ({ ...prev, progress: 70 }));
-        } else {
-          blob = await createZipBlob(fileList);
-          setState((prev) => ({ ...prev, progress: 70 }));
-        }
-
-        setState((prev) => ({ ...prev, progress: 90 }));
-
-        if (fileHandle) {
-          await saveLastDirectory(fileHandle);
-          const writable = await fileHandle.createWritable();
-          await writable.write(blob);
-          await writable.close();
-        } else {
-          fallbackDownload(blob, fileName);
-          if (enableToast) {
-            toast.info(
-              "Due to browser limitations, file will be downloaded to default download directory",
-            );
-          }
-        }
-
-        setState((prev) => ({ ...prev, progress: 100 }));
-
-        if (enableToast) {
-          toast.success(
-            fileList.length === 1
-              ? `${fileName} saved to specified location`
-              : `${fileList.length} files packaged and saved`,
-          );
-        }
-
-        onSuccess?.();
-
-        setTimeout(() => {
-          setState((prev) => ({ ...prev, isDownloading: false, progress: 0 }));
-        }, 1000);
-
-        return true;
-      } catch (error: unknown) {
-        const err = error as { message?: string };
-        const errorMessage = err.message || "Save failed";
-
-        setState((prev) => ({
-          ...prev,
-          isDownloading: false,
-          progress: 0,
-          error: errorMessage,
-        }));
-
-        if (enableToast) {
-          toast.error(
-            t("fileManager.saveToDesktopFailed", { error: errorMessage }),
-          );
-        }
-
-        onError?.(errorMessage);
-        return false;
-      }
-    },
-    [sshSessionId],
-  );
-
-  const startDragToSystem = useCallback(
-    (files: FileItem[], options: DragToSystemOptions = {}) => {
-      dragDataRef.current = { files, options };
-      setState((prev) => ({ ...prev, isDragging: true, error: null }));
-    },
-    [],
-  );
-
-  const handleDragEnd = useCallback(
-    (e: DragEvent) => {
-      if (!dragDataRef.current) return;
-
-      const { files, options } = dragDataRef.current;
-
-      if (isDraggedOutsideWindow(e)) {
-        handleDragToSystem(files, options);
-      }
-
-      dragDataRef.current = null;
-      setState((prev) => ({ ...prev, isDragging: false }));
-    },
-    [handleDragToSystem],
-  );
-
-  const cancelDragToSystem = useCallback(() => {
-    dragDataRef.current = null;
-    setState((prev) => ({ ...prev, isDragging: false, error: null }));
-  }, []);
-
-  return {
-    ...state,
-    isFileSystemAPISupported: isFileSystemAPISupported(),
-    startDragToSystem,
-    handleDragEnd,
-    cancelDragToSystem,
-    handleDragToSystem,
-  };
-}
diff --git a/plugins/file-manager/src/frontend/hooks/useFileSelection.ts b/plugins/file-manager/src/frontend/hooks/useFileSelection.ts
deleted file mode 100644
index 0d0a81524..000000000
--- a/plugins/file-manager/src/frontend/hooks/useFileSelection.ts
+++ /dev/null
@@ -1,92 +0,0 @@
-import { useState, useCallback } from "react";
-
-interface FileItem {
-  name: string;
-  type: "file" | "directory" | "link";
-  path: string;
-  size?: number;
-  modified?: string;
-  permissions?: string;
-  owner?: string;
-  group?: string;
-}
-
-export function useFileSelection() {
-  const [selectedFiles, setSelectedFiles] = useState<FileItem[]>([]);
-
-  const selectFile = useCallback((file: FileItem, multiSelect = false) => {
-    if (multiSelect) {
-      setSelectedFiles((prev) => {
-        const isSelected = prev.some((f) => f.path === file.path);
-        if (isSelected) {
-          return prev.filter((f) => f.path !== file.path);
-        } else {
-          return [...prev, file];
-        }
-      });
-    } else {
-      setSelectedFiles([file]);
-    }
-  }, []);
-
-  const selectRange = useCallback(
-    (files: FileItem[], startFile: FileItem, endFile: FileItem) => {
-      const startIndex = files.findIndex((f) => f.path === startFile.path);
-      const endIndex = files.findIndex((f) => f.path === endFile.path);
-
-      if (startIndex !== -1 && endIndex !== -1) {
-        const start = Math.min(startIndex, endIndex);
-        const end = Math.max(startIndex, endIndex);
-        const rangeFiles = files.slice(start, end + 1);
-        setSelectedFiles(rangeFiles);
-      }
-    },
-    [],
-  );
-
-  const selectAll = useCallback((files: FileItem[]) => {
-    setSelectedFiles([...files]);
-  }, []);
-
-  const clearSelection = useCallback(() => {
-    setSelectedFiles([]);
-  }, []);
-
-  const toggleSelection = useCallback((file: FileItem) => {
-    setSelectedFiles((prev) => {
-      const isSelected = prev.some((f) => f.path === file.path);
-      if (isSelected) {
-        return prev.filter((f) => f.path !== file.path);
-      } else {
-        return [...prev, file];
-      }
-    });
-  }, []);
-
-  const isSelected = useCallback(
-    (file: FileItem) => {
-      return selectedFiles.some((f) => f.path === file.path);
-    },
-    [selectedFiles],
-  );
-
-  const getSelectedCount = useCallback(() => {
-    return selectedFiles.length;
-  }, [selectedFiles]);
-
-  const setSelection = useCallback((files: FileItem[]) => {
-    setSelectedFiles(files);
-  }, []);
-
-  return {
-    selectedFiles,
-    selectFile,
-    selectRange,
-    selectAll,
-    clearSelection,
-    toggleSelection,
-    isSelected,
-    getSelectedCount,
-    setSelection,
-  };
-}
diff --git a/plugins/file-manager/src/frontend/hooks/useLocalTransfers.ts b/plugins/file-manager/src/frontend/hooks/useLocalTransfers.ts
deleted file mode 100644
index 1ac7541c5..000000000
--- a/plugins/file-manager/src/frontend/hooks/useLocalTransfers.ts
+++ /dev/null
@@ -1,590 +0,0 @@
-import { useCallback, useEffect, useRef } from "react";
-import { createElement } from "react";
-import { toast } from "sonner";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import type { FileItem } from "../host-types";
-import type { LocalWalkResult } from "@termix/plugin-sdk/frontend";
-import { useSettings } from "@termix/plugin-sdk/frontend";
-import {
-  cancelLocalTransfer,
-  createLocalTransferId,
-  downloadSessionFileToLocal,
-  uploadLocalFileToSession,
-} from "../api/local-transfer-api";
-import { createSSHFolder, listSSHFiles } from "../api/ssh-file-operations-api";
-import {
-  ensureLocalDirectory,
-  getLocalHome,
-  localPathsExist,
-  walkLocalPaths,
-} from "../lib/local-files";
-import {
-  UnsafeLocalNameError,
-  buildLocalDestination,
-  clampTransferConcurrency,
-  DEFAULT_TRANSFER_CONCURRENCY,
-  runWithConcurrency,
-  takeLegacyTransferConcurrency,
-  joinRemotePath,
-  planRemoteDirectories,
-  remoteBaseName,
-  remoteDirForRelativePath,
-} from "../local-transfer-utils.ts";
-import {
-  LocalTransferProgressToast,
-  type LocalTransferBatchStatus,
-} from "../components/LocalTransferProgressToast.tsx";
-
-interface UseLocalTransfersOptions {
-  sshSessionId: string | null;
-  hostId?: number;
-  ensureSSHConnection: () => Promise<unknown>;
-  /** Called after uploads so the remote listing can refresh. */
-  onRemoteChanged: (remoteDir: string) => void;
-  /** Called after downloads so the local pane can refresh. */
-  onLocalChanged: (localDir: string) => void;
-}
-
-interface RemoteDownloadPlanEntry {
-  remotePath: string;
-  /** "/"-separated, includes the dragged root's own name. */
-  relativePath: string;
-  size?: number;
-}
-
-/**
- * Asks whether existing local files may be replaced. Resolves `true` only on
- * an explicit "Replace"; dismissing, auto-close and "Skip" all mean skip, so
- * the batch can never overwrite silently.
- */
-function askReplaceExisting(
-  t: ReturnType<typeof useTranslation>["t"],
-  count: number,
-): Promise<boolean> {
-  return new Promise((resolve) => {
-    let settled = false;
-    const settle = (value: boolean) => {
-      if (settled) return;
-      settled = true;
-      resolve(value);
-    };
-    toast.warning(t("fileManager.localReplaceExistingPrompt", { count }), {
-      duration: 15000,
-      action: {
-        label: t("fileManager.localReplace"),
-        onClick: () => settle(true),
-      },
-      cancel: {
-        label: t("fileManager.localSkipExisting"),
-        onClick: () => settle(false),
-      },
-      onDismiss: () => settle(false),
-      onAutoClose: () => settle(false),
-    });
-  });
-}
-
-/** One line a user can act on, taken from whatever the bridge or backend said. */
-function describeTransferError(error: unknown): string | undefined {
-  const message =
-    error instanceof Error ? error.message : String(error ?? "").trim();
-  return message ? message.slice(0, 200) : undefined;
-}
-
-class TransferCancelledError extends Error {
-  constructor() {
-    super("Transfer cancelled");
-    this.name = "TransferCancelledError";
-  }
-}
-
-function createSpeedometer() {
-  let lastBytes = 0;
-  let lastTime = Date.now();
-  let mbPerSec: number | undefined;
-  return (bytesDone: number) => {
-    const now = Date.now();
-    const deltaMs = now - lastTime;
-    if (deltaMs >= 300) {
-      const deltaBytes = bytesDone - lastBytes;
-      if (deltaBytes >= 0) {
-        mbPerSec = (deltaBytes / deltaMs / 1024 / 1024) * 1000;
-      }
-      lastBytes = bytesDone;
-      lastTime = now;
-    }
-    return mbPerSec;
-  };
-}
-
-/**
- * Orchestrates batched local<->remote transfers for the dual-pane file
- * manager: expands folders, creates directory skeletons, streams files one by
- * one through the Electron main process, and reports aggregate progress in a
- * single toast with a cancel button.
- */
-export function useLocalTransfers({
-  sshSessionId,
-  hostId,
-  ensureSSHConnection,
-  onRemoteChanged,
-  onLocalChanged,
-}: UseLocalTransfersOptions) {
-  const { t } = useTranslation();
-  const batchCounter = useRef(0);
-
-  // "Simultaneous file transfers", the transferConcurrency user setting.
-  const userSettings = useSettings("user");
-  const concurrencyRef = useRef(DEFAULT_TRANSFER_CONCURRENCY);
-  concurrencyRef.current = clampTransferConcurrency(
-    userSettings.values.transferConcurrency ?? DEFAULT_TRANSFER_CONCURRENCY,
-  );
-  const { loaded: settingsLoaded, save: saveUserSettings } = userSettings;
-  useEffect(() => {
-    if (!settingsLoaded) return;
-    // A value this browser kept before 2.9.0 fills a setting still at its default.
-    const legacy = takeLegacyTransferConcurrency();
-    if (
-      legacy !== null &&
-      legacy !== concurrencyRef.current &&
-      concurrencyRef.current === DEFAULT_TRANSFER_CONCURRENCY
-    ) {
-      concurrencyRef.current = legacy;
-      void saveUserSettings({ transferConcurrency: legacy }).catch(() => {});
-    }
-  }, [settingsLoaded, saveUserSettings]);
-
-  const runBatch = useCallback(
-    async (
-      direction: "upload" | "download",
-      totalFiles: number,
-      totalBytes: number,
-      work: (ctx: {
-        isCancelled: () => boolean;
-        /** Marks a transfer as in flight so Cancel can reach it. */
-        trackTransfer: (id: string, fileName: string) => void;
-        /** Progress of one in-flight transfer; bytes are summed across all. */
-        progress: (id: string, transferred: number) => void;
-        /** Transfer finished (success or failure); its size is now settled. */
-        settleTransfer: (id: string, size: number) => void;
-      }) => Promise<{ failed: string[]; reason?: string }>,
-    ) => {
-      batchCounter.current += 1;
-      const toastId = `local-transfer-${batchCounter.current}`;
-      let cancelled = false;
-      let cancelling = false;
-      const inFlight = new Map<
-        string,
-        { fileName: string; transferred: number }
-      >();
-      let settledBytes = 0;
-      let completedFiles = 0;
-      let lastFileName: string | undefined;
-      const speed = createSpeedometer();
-
-      const status: LocalTransferBatchStatus = {
-        direction,
-        totalFiles,
-        completedFiles: 0,
-        bytesDone: 0,
-        totalBytes,
-      };
-
-      const render = () => {
-        toast.loading(
-          createElement(LocalTransferProgressToast, {
-            t,
-            status: { ...status, cancelling },
-            onCancel: () => {
-              cancelled = true;
-              cancelling = true;
-              render();
-              for (const id of inFlight.keys()) void cancelLocalTransfer(id);
-            },
-          }),
-          { id: toastId, duration: Infinity },
-        );
-      };
-      render();
-
-      try {
-        const refresh = () => {
-          let bytesDone = settledBytes;
-          for (const entry of inFlight.values()) bytesDone += entry.transferred;
-          status.completedFiles = completedFiles;
-          status.bytesDone = bytesDone;
-          status.activeFiles = inFlight.size;
-          status.currentFileName =
-            lastFileName ?? inFlight.values().next().value?.fileName;
-          status.mbPerSec = speed(bytesDone);
-          render();
-        };
-        const { failed, reason } = await work({
-          isCancelled: () => cancelled,
-          trackTransfer: (id, fileName) => {
-            inFlight.set(id, { fileName, transferred: 0 });
-            lastFileName = fileName;
-            refresh();
-          },
-          progress: (id, transferred) => {
-            const entry = inFlight.get(id);
-            if (!entry) return;
-            entry.transferred = transferred;
-            lastFileName = entry.fileName;
-            refresh();
-          },
-          settleTransfer: (id, size) => {
-            inFlight.delete(id);
-            settledBytes += size;
-            completedFiles += 1;
-            refresh();
-          },
-        });
-
-        toast.dismiss(toastId);
-        if (cancelled) {
-          toast.info(t("fileManager.localTransferCancelled"));
-          return;
-        }
-        const key = direction === "upload" ? "Upload" : "Download";
-        if (failed.length === 0) {
-          toast.success(
-            t(`fileManager.local${key}Complete`, { count: totalFiles }),
-          );
-        } else if (failed.length === totalFiles) {
-          // Every file failed the same way more often than not (auth,
-          // permissions, a dead session); say why instead of just "failed".
-          toast.error(
-            t(`fileManager.local${key}Failed`),
-            reason ? { description: reason } : undefined,
-          );
-        } else {
-          toast.warning(
-            t(`fileManager.local${key}Partial`, {
-              done: totalFiles - failed.length,
-              failed: failed.length,
-            }),
-            reason ? { description: reason } : undefined,
-          );
-        }
-      } catch (error) {
-        toast.dismiss(toastId);
-        if (error instanceof TransferCancelledError || cancelled) {
-          toast.info(t("fileManager.localTransferCancelled"));
-          return;
-        }
-        const message =
-          error instanceof Error ? error.message : String(error ?? "");
-        toast.error(
-          direction === "upload"
-            ? t("fileManager.localUploadFailed")
-            : t("fileManager.localDownloadFailed"),
-          message ? { description: message } : undefined,
-        );
-        console.error(`Local ${direction} batch failed:`, error);
-      }
-    },
-    [t],
-  );
-
-  /** Uploads local files/folders (by absolute path) into a remote directory. */
-  const uploadLocalPaths = useCallback(
-    async (localPaths: string[], remoteDir: string) => {
-      if (!sshSessionId) {
-        toast.error(t("fileManager.noSSHConnection"));
-        return;
-      }
-      if (localPaths.length === 0) return;
-
-      let plan: LocalWalkResult;
-      try {
-        plan = await walkLocalPaths(localPaths);
-      } catch (error) {
-        toast.error(
-          t("fileManager.localUploadFailed"),
-          error instanceof Error ? { description: error.message } : undefined,
-        );
-        return;
-      }
-      if (plan.files.length === 0 && plan.emptyDirs.length === 0) {
-        toast.info(t("fileManager.localNothingToTransfer"));
-        return;
-      }
-
-      const sessionId = sshSessionId;
-      await runBatch(
-        "upload",
-        plan.files.length,
-        plan.totalBytes,
-        async ({ isCancelled, trackTransfer, progress, settleTransfer }) => {
-          await ensureSSHConnection();
-
-          const dirs = planRemoteDirectories(
-            plan.files.map((f) => f.relativePath),
-            plan.emptyDirs,
-          );
-          for (const dir of dirs) {
-            if (isCancelled()) throw new TransferCancelledError();
-            const parent = dir.includes("/")
-              ? joinRemotePath(remoteDir, dir.slice(0, dir.lastIndexOf("/")))
-              : remoteDir;
-            const name = dir.split("/").pop()!;
-            // The backend tolerates existing directories (#1442), so a
-            // failure here is real and should stop the batch up front.
-            await createSSHFolder(sessionId, parent, name, hostId);
-          }
-
-          // Files go up several at a time (see "Simultaneous File Transfers"
-          // in the profile settings); directories were created above, so
-          // order between files no longer matters.
-          const failed: string[] = [];
-          let reason: string | undefined;
-          await runWithConcurrency(
-            plan.files,
-            concurrencyRef.current,
-            async (file) => {
-              const fileName = file.relativePath.split("/").pop()!;
-              const targetDir = remoteDirForRelativePath(
-                remoteDir,
-                file.relativePath,
-              );
-              const transferId = createLocalTransferId("local-upload");
-              trackTransfer(transferId, fileName);
-              try {
-                await uploadLocalFileToSession({
-                  sessionId,
-                  remoteDir: targetDir,
-                  localPath: file.localPath,
-                  fileName,
-                  hostId,
-                  transferId,
-                  onProgress: ({ transferred }) =>
-                    progress(transferId, transferred),
-                });
-              } catch (error) {
-                if (!isCancelled()) {
-                  failed.push(file.relativePath);
-                  reason ??= describeTransferError(error);
-                  console.error(`Failed to upload ${file.localPath}:`, error);
-                }
-              } finally {
-                settleTransfer(transferId, file.size);
-              }
-            },
-            isCancelled,
-          );
-          return { failed, reason };
-        },
-      );
-
-      onRemoteChanged(remoteDir);
-    },
-    [sshSessionId, hostId, ensureSSHConnection, onRemoteChanged, runBatch, t],
-  );
-
-  /** Downloads remote files/folders into a local directory. */
-  const downloadRemoteItems = useCallback(
-    async (items: FileItem[], localDir: string) => {
-      if (!sshSessionId) {
-        toast.error(t("fileManager.noSSHConnection"));
-        return;
-      }
-      if (items.length === 0) return;
-      const sessionId = sshSessionId;
-
-      const { separator } = await getLocalHome();
-      // Every remote name is validated for the local platform and the result
-      // must stay inside `localDir`; anything else is reported and skipped.
-      const toLocalPath = (relativePath: string) =>
-        buildLocalDestination(localDir, relativePath, separator);
-
-      // Expand directories into a flat file plan first so the toast can show
-      // a real total. Listing is the only part that goes through the
-      // renderer's normal API path.
-      const plan: RemoteDownloadPlanEntry[] = [];
-      const emptyDirs: string[] = [];
-
-      const expandTaskId = `local-download-expand-${Date.now()}`;
-      toast.loading(t("fileManager.localPreparingDownload"), {
-        id: expandTaskId,
-        duration: Infinity,
-      });
-
-      try {
-        await ensureSSHConnection();
-
-        const walkRemote = async (remotePath: string, relDir: string) => {
-          const { files } = await listSSHFiles(sessionId, remotePath, {
-            force: true,
-          });
-          if (files.length === 0) {
-            emptyDirs.push(relDir);
-            return;
-          }
-          for (const child of files) {
-            const rel = `${relDir}/${child.name}`;
-            if (child.type === "directory") {
-              await walkRemote(child.path, rel);
-            } else if (child.type === "file" || child.type === "link") {
-              plan.push({
-                remotePath: child.path,
-                relativePath: rel,
-                size: child.size,
-              });
-            }
-          }
-        };
-
-        for (const item of items) {
-          const name = item.name || remoteBaseName(item.path);
-          if (item.type === "directory") {
-            await walkRemote(item.path, name);
-          } else {
-            plan.push({
-              remotePath: item.path,
-              relativePath: name,
-              size: item.size,
-            });
-          }
-        }
-      } catch (error) {
-        toast.dismiss(expandTaskId);
-        toast.error(
-          t("fileManager.localDownloadFailed"),
-          error instanceof Error ? { description: error.message } : undefined,
-        );
-        return;
-      }
-      toast.dismiss(expandTaskId);
-
-      if (plan.length === 0 && emptyDirs.length === 0) {
-        toast.info(t("fileManager.localNothingToTransfer"));
-        return;
-      }
-
-      // Drop anything whose remote name cannot become a safe local path
-      // (separators, traversal, Windows-invalid characters). These never
-      // reach the filesystem; the user is told how many were skipped.
-      const unsafe: string[] = [];
-      const safeDest = (relativePath: string): string | null => {
-        try {
-          return toLocalPath(relativePath);
-        } catch (error) {
-          if (error instanceof UnsafeLocalNameError) {
-            unsafe.push(relativePath);
-            return null;
-          }
-          throw error;
-        }
-      };
-      const plannedDirs = emptyDirs
-        .map((dir) => ({ dir, dest: safeDest(dir) }))
-        .filter((d): d is { dir: string; dest: string } => d.dest !== null);
-      const plannedFiles = plan
-        .map((entry) => ({ entry, dest: safeDest(entry.relativePath) }))
-        .filter(
-          (p): p is { entry: RemoteDownloadPlanEntry; dest: string } =>
-            p.dest !== null,
-        );
-      if (unsafe.length > 0) {
-        toast.error(
-          t("fileManager.localUnsafeNamesSkipped", { count: unsafe.length }),
-          { description: unsafe.slice(0, 3).join(", ") },
-        );
-        console.warn("Skipped remote items with unsafe local names:", unsafe);
-      }
-      if (plannedFiles.length === 0 && plannedDirs.length === 0) {
-        return;
-      }
-
-      // Collision policy: never replace silently. Find destinations that
-      // already exist and let the user choose Replace or Skip for the batch.
-      const destinations = plannedFiles.map((p) => p.dest);
-      let existing: Set<string>;
-      try {
-        existing = new Set(await localPathsExist(destinations));
-      } catch (error) {
-        toast.error(
-          t("fileManager.localDownloadFailed"),
-          error instanceof Error ? { description: error.message } : undefined,
-        );
-        return;
-      }
-      let overwriteExisting = false;
-      if (existing.size > 0) {
-        overwriteExisting = await askReplaceExisting(t, existing.size);
-      }
-      const skipped = overwriteExisting
-        ? []
-        : plannedFiles.filter(({ dest }) => existing.has(dest));
-      const work = overwriteExisting
-        ? plannedFiles
-        : plannedFiles.filter(({ dest }) => !existing.has(dest));
-      if (skipped.length > 0) {
-        toast.info(
-          t("fileManager.localSkippedExisting", { count: skipped.length }),
-        );
-      }
-      if (work.length === 0 && plannedDirs.length === 0) {
-        onLocalChanged(localDir);
-        return;
-      }
-      const workBytes = work.reduce((sum, w) => sum + (w.entry.size ?? 0), 0);
-
-      await runBatch(
-        "download",
-        work.length,
-        workBytes,
-        async ({ isCancelled, trackTransfer, progress, settleTransfer }) => {
-          for (const { dest } of plannedDirs) {
-            if (isCancelled()) throw new TransferCancelledError();
-            await ensureLocalDirectory(dest, localDir);
-          }
-
-          const failed: string[] = [];
-          let reason: string | undefined;
-          await runWithConcurrency(
-            work,
-            concurrencyRef.current,
-            async ({ entry, dest }) => {
-              const fileName = entry.relativePath.split("/").pop()!;
-              const transferId = createLocalTransferId("local-download");
-              trackTransfer(transferId, fileName);
-              try {
-                await downloadSessionFileToLocal({
-                  sessionId,
-                  remotePath: entry.remotePath,
-                  destPath: dest,
-                  rootPath: localDir,
-                  expectedSize: entry.size,
-                  overwrite: overwriteExisting && existing.has(dest),
-                  transferId,
-                  onProgress: ({ transferred }) =>
-                    progress(transferId, transferred),
-                });
-              } catch (error) {
-                if (!isCancelled()) {
-                  failed.push(entry.relativePath);
-                  reason ??= describeTransferError(error);
-                  console.error(
-                    `Failed to download ${entry.remotePath}:`,
-                    error,
-                  );
-                }
-              } finally {
-                settleTransfer(transferId, entry.size ?? 0);
-              }
-            },
-            isCancelled,
-          );
-          return { failed, reason };
-        },
-      );
-
-      onLocalChanged(localDir);
-    },
-    [sshSessionId, ensureSSHConnection, onLocalChanged, runBatch, t],
-  );
-
-  return { uploadLocalPaths, downloadRemoteItems };
-}
diff --git a/plugins/file-manager/src/frontend/hooks/usePaneWidth.ts b/plugins/file-manager/src/frontend/hooks/usePaneWidth.ts
deleted file mode 100644
index cf614a5bd..000000000
--- a/plugins/file-manager/src/frontend/hooks/usePaneWidth.ts
+++ /dev/null
@@ -1,106 +0,0 @@
-import { useCallback, useRef, useState } from "react";
-import type React from "react";
-
-interface UsePaneWidthOptions {
-  /** localStorage key the width is remembered under. */
-  storageKey: string;
-  defaultWidth: number;
-  minWidth: number;
-  /**
-   * Upper bound as a fraction of the containing row's width (measured at
-   * drag start from `containerRef`), so a pane can never swallow the layout.
-   */
-  maxFraction?: number;
-  containerRef?: React.RefObject<HTMLElement | null>;
-}
-
-function readStoredWidth(
-  storageKey: string,
-  defaultWidth: number,
-  minWidth: number,
-): number {
-  try {
-    const saved = Number(localStorage.getItem(storageKey));
-    return Number.isFinite(saved) && saved >= minWidth ? saved : defaultWidth;
-  } catch {
-    return defaultWidth;
-  }
-}
-
-/**
- * A persisted, drag-resizable pane width. `startResize` goes on the
- * mousedown of a vertical drag handle sitting on the pane's right edge;
- * `resetWidth` (e.g. on double-click) restores the default.
- */
-export function usePaneWidth({
-  storageKey,
-  defaultWidth,
-  minWidth,
-  maxFraction = 0.65,
-  containerRef,
-}: UsePaneWidthOptions) {
-  const [width, setWidth] = useState<number>(() =>
-    readStoredWidth(storageKey, defaultWidth, minWidth),
-  );
-  const [isResizing, setIsResizing] = useState(false);
-  const widthRef = useRef(width);
-  widthRef.current = width;
-
-  const persist = useCallback(
-    (value: number) => {
-      try {
-        localStorage.setItem(storageKey, String(value));
-      } catch {
-        // storage unavailable
-      }
-    },
-    [storageKey],
-  );
-
-  const startResize = useCallback(
-    (event: React.MouseEvent) => {
-      event.preventDefault();
-      event.stopPropagation();
-      const startX = event.clientX;
-      const startWidth = widthRef.current;
-      const rowWidth =
-        containerRef?.current?.getBoundingClientRect().width ?? 0;
-      const maxWidth = Math.max(
-        minWidth,
-        rowWidth ? rowWidth * maxFraction : Number.POSITIVE_INFINITY,
-      );
-      let latest = startWidth;
-      setIsResizing(true);
-
-      const onMove = (e: MouseEvent) => {
-        latest = Math.round(
-          Math.min(
-            maxWidth,
-            Math.max(minWidth, startWidth + (e.clientX - startX)),
-          ),
-        );
-        if (latest !== widthRef.current) setWidth(latest);
-      };
-      const onUp = () => {
-        document.removeEventListener("mousemove", onMove);
-        document.removeEventListener("mouseup", onUp);
-        document.body.style.cursor = "";
-        document.body.style.userSelect = "";
-        setIsResizing(false);
-        persist(latest);
-      };
-      document.body.style.cursor = "col-resize";
-      document.body.style.userSelect = "none";
-      document.addEventListener("mousemove", onMove);
-      document.addEventListener("mouseup", onUp);
-    },
-    [containerRef, maxFraction, minWidth, persist],
-  );
-
-  const resetWidth = useCallback(() => {
-    setWidth(defaultWidth);
-    persist(defaultWidth);
-  }, [defaultWidth, persist]);
-
-  return { width, isResizing, startResize, resetWidth };
-}
diff --git a/plugins/file-manager/src/frontend/hooks/useResizableColumns.ts b/plugins/file-manager/src/frontend/hooks/useResizableColumns.ts
deleted file mode 100644
index 01a38a10e..000000000
--- a/plugins/file-manager/src/frontend/hooks/useResizableColumns.ts
+++ /dev/null
@@ -1,239 +0,0 @@
-import { useCallback, useEffect, useMemo, useRef, useState } from "react";
-import type React from "react";
-
-export interface ResizableColumnSpec {
-  /** Stable key, also used for persistence. */
-  key: string;
-  /** i18n key for the column's label (used by the show/hide menu). */
-  labelKey: string;
-  defaultWidth: number;
-  minWidth?: number;
-  maxWidth?: number;
-}
-
-interface UseResizableColumnsOptions {
-  /** localStorage key; widths are remembered per pane. */
-  storageKey: string;
-  /**
-   * Columns, in visual order, that follow the file name. Saved widths are
-   * preferred maxima; metadata shrinks first when the pane is narrow.
-   */
-  columns: ResizableColumnSpec[];
-}
-
-const DEFAULT_MIN = 48;
-const DEFAULT_MAX = 600;
-
-function readStoredWidths(
-  storageKey: string,
-  columns: ResizableColumnSpec[],
-): Record<string, number> {
-  const widths: Record<string, number> = {};
-  for (const column of columns) widths[column.key] = column.defaultWidth;
-  try {
-    const raw = localStorage.getItem(storageKey);
-    if (!raw) return widths;
-    const parsed = JSON.parse(raw) as Record<string, unknown>;
-    for (const column of columns) {
-      const value = parsed?.[column.key];
-      if (typeof value === "number" && Number.isFinite(value)) {
-        widths[column.key] = clamp(value, column);
-      }
-    }
-  } catch {
-    // storage unavailable or corrupt: fall back to defaults
-  }
-  return widths;
-}
-
-function readHiddenKeys(
-  storageKey: string,
-  columns: ResizableColumnSpec[],
-): Set<string> {
-  try {
-    const raw = localStorage.getItem(`${storageKey}:hidden`);
-    if (!raw) return new Set();
-    const parsed = JSON.parse(raw);
-    if (!Array.isArray(parsed)) return new Set();
-    const known = new Set(columns.map((c) => c.key));
-    return new Set(
-      parsed.filter((k): k is string => typeof k === "string" && known.has(k)),
-    );
-  } catch {
-    return new Set();
-  }
-}
-
-function clamp(value: number, column: ResizableColumnSpec): number {
-  const min = column.minWidth ?? DEFAULT_MIN;
-  const max = column.maxWidth ?? DEFAULT_MAX;
-  return Math.round(Math.min(max, Math.max(min, value)));
-}
-
-/**
- * Column widths for a list view whose first column is flexible and whose
- * remaining columns are user-resizable by dragging the boundary at
- * the left edge of each header cell. Double-clicking a handle resets that
- * column to its default. Widths persist in localStorage.
- */
-export function useResizableColumns({
-  storageKey,
-  columns,
-}: UseResizableColumnsOptions) {
-  const [widths, setWidths] = useState<Record<string, number>>(() =>
-    readStoredWidths(storageKey, columns),
-  );
-  const [hiddenKeys, setHiddenKeys] = useState<Set<string>>(() =>
-    readHiddenKeys(storageKey, columns),
-  );
-  const [resizingKey, setResizingKey] = useState<string | null>(null);
-  const widthsRef = useRef(widths);
-  widthsRef.current = widths;
-
-  // Re-read if the pane is re-keyed (e.g. a different storage key).
-  useEffect(() => {
-    setWidths(readStoredWidths(storageKey, columns));
-    setHiddenKeys(readHiddenKeys(storageKey, columns));
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [storageKey]);
-
-  const isVisible = useCallback(
-    (key: string) => !hiddenKeys.has(key),
-    [hiddenKeys],
-  );
-
-  const visibleColumns = useMemo(
-    () => columns.filter((c) => !hiddenKeys.has(c.key)),
-    [columns, hiddenKeys],
-  );
-
-  const toggleColumn = useCallback(
-    (key: string) => {
-      setHiddenKeys((prev) => {
-        const next = new Set(prev);
-        if (next.has(key)) next.delete(key);
-        else next.add(key);
-        try {
-          localStorage.setItem(
-            `${storageKey}:hidden`,
-            JSON.stringify(Array.from(next)),
-          );
-        } catch {
-          // storage unavailable
-        }
-        return next;
-      });
-    },
-    [storageKey],
-  );
-
-  const persist = useCallback(
-    (next: Record<string, number>) => {
-      try {
-        localStorage.setItem(storageKey, JSON.stringify(next));
-      } catch {
-        // storage unavailable
-      }
-    },
-    [storageKey],
-  );
-
-  const gridTemplateColumns = useMemo(
-    () =>
-      [
-        "minmax(min(240px, 50%), 1fr)",
-        ...visibleColumns.map((c) => `minmax(0, ${widths[c.key]}px)`),
-      ].join(" "),
-    [visibleColumns, widths],
-  );
-
-  const startResize = useCallback(
-    (key: string, event: React.MouseEvent) => {
-      const column = columns.find((c) => c.key === key);
-      if (!column) return;
-      event.preventDefault();
-      event.stopPropagation();
-
-      const startX = event.clientX;
-      const startWidth = widthsRef.current[key];
-      setResizingKey(key);
-
-      const onMove = (e: MouseEvent) => {
-        // The handle sits on the column's left edge, so dragging right
-        // narrows the column and dragging left widens it.
-        const next = clamp(startWidth - (e.clientX - startX), column);
-        if (next !== widthsRef.current[key]) {
-          setWidths((prev) => ({ ...prev, [key]: next }));
-        }
-      };
-      const onUp = () => {
-        document.removeEventListener("mousemove", onMove);
-        document.removeEventListener("mouseup", onUp);
-        document.body.style.cursor = "";
-        document.body.style.userSelect = "";
-        setResizingKey(null);
-        persist(widthsRef.current);
-
-        // The browser dispatches a click to the common ancestor of the
-        // mousedown/mouseup targets, which here is the sortable header cell.
-        // Swallow that one click so finishing a drag never toggles the sort.
-        const swallow = (e: MouseEvent) => {
-          e.stopPropagation();
-          e.preventDefault();
-        };
-        document.addEventListener("click", swallow, { capture: true });
-        setTimeout(
-          () =>
-            document.removeEventListener("click", swallow, { capture: true }),
-          0,
-        );
-      };
-
-      document.body.style.cursor = "col-resize";
-      document.body.style.userSelect = "none";
-      document.addEventListener("mousemove", onMove);
-      document.addEventListener("mouseup", onUp);
-    },
-    [columns, persist],
-  );
-
-  const resetColumn = useCallback(
-    (key: string) => {
-      const column = columns.find((c) => c.key === key);
-      if (!column) return;
-      setWidths((prev) => {
-        const next = { ...prev, [key]: column.defaultWidth };
-        persist(next);
-        return next;
-      });
-    },
-    [columns, persist],
-  );
-
-  const getHandleProps = useCallback(
-    (key: string) => ({
-      onMouseDown: (event: React.MouseEvent) => startResize(key, event),
-      onDoubleClick: (event: React.MouseEvent) => {
-        event.preventDefault();
-        event.stopPropagation();
-        resetColumn(key);
-      },
-      onClick: (event: React.MouseEvent) => event.stopPropagation(),
-      "data-resizing": resizingKey === key ? "true" : undefined,
-    }),
-    [startResize, resetColumn, resizingKey],
-  );
-
-  return {
-    widths,
-    gridTemplateColumns,
-    getHandleProps,
-    resizingKey,
-    columns,
-    visibleColumns,
-    isVisible,
-    toggleColumn,
-  };
-}
-
-export type ResizableColumns = ReturnType<typeof useResizableColumns>;
diff --git a/plugins/file-manager/src/frontend/host-settings.ts b/plugins/file-manager/src/frontend/host-settings.ts
deleted file mode 100644
index 21e4819b5..000000000
--- a/plugins/file-manager/src/frontend/host-settings.ts
+++ /dev/null
@@ -1,14 +0,0 @@
-/** One of this plugin's host settings, from the host payload. */
-export function fileManagerHostSetting<T>(
-  host: object | null | undefined,
-  key: "enableFileManager" | "defaultPath" | "scpLegacy",
-  fallback: T,
-): T {
-  const settings = (
-    host as { pluginSettings?: Record<string, Record<string, unknown>> } | null
-  )?.pluginSettings;
-  const value = settings?.["file-manager"]?.[key];
-  return value === undefined || value === null || value === ""
-    ? fallback
-    : (value as T);
-}
diff --git a/plugins/file-manager/src/frontend/host-types.ts b/plugins/file-manager/src/frontend/host-types.ts
deleted file mode 100644
index a5855f05f..000000000
--- a/plugins/file-manager/src/frontend/host-types.ts
+++ /dev/null
@@ -1,59 +0,0 @@
-import type { HostSshOptions } from "@termix/plugin-sdk/frontend";
-
-/** A host as the shell hands it to the file manager. */
-export interface SSHHost {
-  id: number;
-  name: string;
-  ip: string;
-  port: number;
-  username: string;
-  folder: string;
-  tags: string[];
-  pin: boolean;
-  authType: string;
-  password?: string;
-  key?: string;
-  keyPassword?: string;
-  keyType?: string;
-  sudoPassword?: string;
-  forceKeyboardInteractive?: boolean;
-  credentialId?: number;
-  overrideCredentialUsername?: boolean;
-  userId?: string;
-  jumpHosts?: Array<{ hostId: number }>;
-  sshOptions?: HostSshOptions | null;
-  notes?: string;
-  useSocks5?: boolean;
-  socks5Host?: string;
-  socks5Port?: number;
-  socks5Username?: string;
-  socks5Password?: string;
-  socks5ProxyChain?: unknown[];
-  connectionType?: string;
-  enableSsh?: boolean;
-  syncId?: string | null;
-  createdAt: string;
-  updatedAt: string;
-  connectionOrigin?: "local" | "remote" | null;
-  instanceId?: string;
-  isShared?: boolean;
-  permissionLevel?: "connect" | "view" | "edit" | "manage";
-  /** Enabled plugins' host-scope settings, keyed by plugin id. */
-  pluginSettings?: Record<string, Record<string, unknown>>;
-}
-
-export interface FileItem {
-  name: string;
-  path: string;
-  isPinned?: boolean;
-  type: "file" | "directory" | "link";
-  sshSessionId?: string;
-  size?: number;
-  modified?: string;
-  modifiedTimestamp?: number;
-  permissions?: string;
-  owner?: string;
-  group?: string;
-  linkTarget?: string;
-  executable?: boolean;
-}
diff --git a/plugins/file-manager/src/frontend/index.tsx b/plugins/file-manager/src/frontend/index.tsx
deleted file mode 100644
index 2cc998dae..000000000
--- a/plugins/file-manager/src/frontend/index.tsx
+++ /dev/null
@@ -1,173 +0,0 @@
-import { fileManagerHostSetting } from "./host-settings";
-import type { ComponentType } from "react";
-import { FolderOpen, FolderSearch, ArrowLeftRight } from "lucide-react";
-import {
-  invokeAction,
-  type PluginHostRecord,
-  type StandaloneViewProps,
-  type TabProps,
-  type TermixApp,
-} from "@termix/plugin-sdk/frontend";
-import {
-  GRID_SIZE,
-  type FileManagerWidgetConfig,
-  type WidgetDefinition,
-} from "./homepage/homepage.js";
-import { FileManager } from "./FileManager.tsx";
-import FileManagerApp from "./FileManagerApp.tsx";
-import { SftpTransferTab } from "./SftpTransferTab.tsx";
-import { FileManagerWidget } from "./homepage/FileManagerWidget.tsx";
-import { FileManagerWidgetEditForm } from "./homepage/FileManagerWidgetEditForm.tsx";
-import { startTransferMonitor } from "./TransferMonitor.tsx";
-import { setFileManagerApp } from "./api/client";
-
-function FilesTab({ tab, host, sshHost, isVisible }: TabProps) {
-  const data = tab.data as
-    { initialFilePath?: string; initialPath?: string } | undefined;
-  return (
-    <FileManager
-      initialHost={sshHost as never}
-      initialFilePath={data?.initialFilePath}
-      initialPath={data?.initialPath}
-      isVisible={isVisible}
-      onOpenTerminalTab={
-        host
-          ? (path) => void invokeAction("terminal.open", host, { path })
-          : undefined
-      }
-    />
-  );
-}
-
-function FilesStandalone({ hostId, params }: StandaloneViewProps) {
-  return (
-    <FileManagerApp
-      hostId={hostId}
-      initialPath={params.get("path") ?? undefined}
-    />
-  );
-}
-
-function SftpTab() {
-  return <SftpTransferTab />;
-}
-
-function openHostAction(
-  app: TermixApp,
-  host: PluginHostRecord | null,
-  path: string | undefined,
-): void {
-  if (!host) return;
-  app.tabs.openTab(host, "files", { data: { initialPath: path } });
-}
-
-function openEditorAction(
-  app: TermixApp,
-  host: PluginHostRecord | null,
-  filePath: string,
-): void {
-  if (!host) return;
-  app.tabs.openTab(host, "files", { data: { initialFilePath: filePath } });
-}
-
-/** Where this plugin serves the streaming routes the desktop app calls. */
-const TRANSFER_API_PATH = "/plugin-api/file-manager";
-
-export function activate(app: TermixApp): void {
-  setFileManagerApp(app);
-  if (typeof window !== "undefined") {
-    void window.electronAPI?.localTransfer?.setApiPath?.(TRANSFER_API_PATH);
-  }
-  app.onDispose(() => setFileManagerApp(null));
-  app.registerTab("files", FilesTab as unknown as ComponentType<TabProps>, {
-    icon: FolderSearch,
-    titleKey: "nav.files",
-    requiresHost: true,
-    noHostMessageKey: "fileManager.noHostSelected",
-    persistent: true,
-    standalone: FilesStandalone,
-    // The pre-conversion `?view=file-manager` link keeps resolving.
-    standaloneViews: ["file-manager"],
-    // The activity log still records "file_manager" (matching the backend's
-    // stored string), so recent-activity entries resolve to this tab.
-    activityTypes: ["file_manager"],
-  });
-
-  app.registerTab("sftp", SftpTab as unknown as ComponentType<TabProps>, {
-    icon: ArrowLeftRight,
-    titleKey: "nav.sftp",
-    hostless: true,
-    inLayouts: false,
-  });
-
-  app.registerRailItem({
-    id: "sftp",
-    icon: ArrowLeftRight,
-    titleKey: "nav.sftp",
-    kind: "tab",
-    after: "ssh-tools",
-    permission: "use",
-  });
-
-  app.registerHostAction({
-    id: "files",
-    titleKey: "nav.files",
-    icon: FolderSearch,
-    kind: "open",
-    order: 20,
-    tabType: "files",
-    copyUrlView: "file-manager",
-    quickConnect: true,
-    when: (host) =>
-      !!host.enableSsh &&
-      fileManagerHostSetting(host, "enableFileManager", true),
-  });
-
-  app.registerExtension("homepage.widgets", {
-    id: "file_manager_widget",
-    name: "File Manager",
-    description: "Embedded SFTP file manager for a configured host",
-    category: "system",
-    icon: <FolderSearch size={14} />,
-    defaultConfig: { hostId: 0 },
-    defaultSize: { w: GRID_SIZE * 20, h: GRID_SIZE * 14 },
-    minSize: { w: GRID_SIZE * 10, h: GRID_SIZE * 8 },
-    components: {
-      view: FileManagerWidget,
-      editForm: FileManagerWidgetEditForm,
-    },
-  } satisfies WidgetDefinition<FileManagerWidgetConfig>);
-
-  const openHost = ((host: PluginHostRecord | null, path?: string) =>
-    openHostAction(app, host, path)) as never;
-  app.registerAction("files.openHost", openHost);
-  // "Open File Manager" in the tab bar's menu, for a terminal tab. The
-  // terminal answers with its working directory and opens the files tab.
-  app.registerAction("file-manager.openFromTab", ((handle: unknown) =>
-    (
-      handle as { openFileManager?: () => void } | null
-    )?.openFileManager?.()) as never);
-  app.registerSlotContribution("tab.menu", {
-    actionId: "file-manager.openFromTab",
-    titleKey: "nav.openFileManager",
-    icon: FolderOpen,
-    kind: "button",
-    when: (context) =>
-      typeof (context.handle as { openFileManager?: unknown } | null)
-        ?.openFileManager === "function",
-  });
-  app.registerAction("files.openEditor", ((
-    host: PluginHostRecord | null,
-    filePath: string,
-  ) => openEditorAction(app, host, filePath)) as never);
-
-  app.registerSlotContribution("onboarding.features", {
-    actionId: "file-manager.feature",
-    titleKey: "onboarding.feature_files",
-    descriptionKey: "onboarding.feature_files_desc",
-    icon: FolderSearch as ComponentType<{ className?: string }>,
-  });
-
-  const stopTransferMonitor = startTransferMonitor(app.t);
-  app.onDispose(stopTransferMonitor);
-}
diff --git a/plugins/file-manager/src/frontend/lib/error-message.ts b/plugins/file-manager/src/frontend/lib/error-message.ts
deleted file mode 100644
index 393de3d64..000000000
--- a/plugins/file-manager/src/frontend/lib/error-message.ts
+++ /dev/null
@@ -1,14 +0,0 @@
-/**
- * Extract a stable, human-readable message from an unknown thrown value.
- *
- * A thrown value is not guaranteed to be an `Error` — libraries may throw
- * strings or plain objects, which carry no useful `.message`. When that
- * happens the caller gets `fallback` instead, so error paths never surface a
- * raw `[object Object]` in logs or UI.
- */
-export function getErrorMessage(
-  error: unknown,
-  fallback = "Unknown error",
-): string {
-  return error instanceof Error ? error.message : fallback;
-}
diff --git a/plugins/file-manager/src/frontend/lib/file-content-request-cache.ts b/plugins/file-manager/src/frontend/lib/file-content-request-cache.ts
deleted file mode 100644
index 0937cd2d4..000000000
--- a/plugins/file-manager/src/frontend/lib/file-content-request-cache.ts
+++ /dev/null
@@ -1,38 +0,0 @@
-import type { FileItem } from "../host-types";
-import { createKeyedRequestCache } from "./keyed-request-cache";
-
-export interface FileContentResult {
-  content: string;
-  path: string;
-  encoding?: "base64" | "utf8";
-}
-
-const cache = createKeyedRequestCache<FileContentResult>(30_000, 24);
-const keyFor = (sessionId: string, path: string) => `${sessionId}\0${path}`;
-
-export function getCachedFileContent(
-  sessionId: string,
-  path: string,
-  loader: () => Promise<FileContentResult>,
-  force = false,
-): Promise<FileContentResult> {
-  return cache.get(keyFor(sessionId, path), loader, { force });
-}
-
-export function invalidateCachedFileContent(
-  sessionId: string,
-  path: string,
-): void {
-  cache.invalidate(keyFor(sessionId, path));
-}
-
-export function shouldPrefetchFileContent(
-  file: FileItem,
-  maxPrefetchBytes: number,
-): boolean {
-  return (
-    file.type === "file" &&
-    typeof file.size === "number" &&
-    file.size <= maxPrefetchBytes
-  );
-}
diff --git a/plugins/file-manager/src/frontend/lib/file-list-request-cache.ts b/plugins/file-manager/src/frontend/lib/file-list-request-cache.ts
deleted file mode 100644
index 711b832e9..000000000
--- a/plugins/file-manager/src/frontend/lib/file-list-request-cache.ts
+++ /dev/null
@@ -1,43 +0,0 @@
-import type { FileItem } from "../host-types";
-import { createKeyedRequestCache } from "./keyed-request-cache";
-
-export interface FileListResult {
-  files: FileItem[];
-  path: string;
-}
-
-const cache = createKeyedRequestCache<FileListResult>(5_000, 150);
-
-const keyFor = (sessionId: string, path: string) => `${sessionId}\0${path}`;
-
-export function getCachedFileList(
-  sessionId: string,
-  path: string,
-  loader: () => Promise<FileListResult>,
-  force = false,
-): Promise<FileListResult> {
-  return cache.get(keyFor(sessionId, path), loader, { force });
-}
-
-export function peekCachedFileList(
-  sessionId: string,
-  path: string,
-  maxAgeMs = 30_000,
-): FileListResult | null {
-  return cache.peek(keyFor(sessionId, path), maxAgeMs);
-}
-
-export function invalidateCachedFileList(
-  sessionId: string,
-  path: string,
-): void {
-  cache.invalidate(keyFor(sessionId, path));
-}
-
-export function updateCachedFileList(
-  sessionId: string,
-  path: string,
-  files: FileItem[],
-): void {
-  cache.set(keyFor(sessionId, path), { files, path });
-}
diff --git a/plugins/file-manager/src/frontend/lib/http-error.ts b/plugins/file-manager/src/frontend/lib/http-error.ts
deleted file mode 100644
index d77fe0dd4..000000000
--- a/plugins/file-manager/src/frontend/lib/http-error.ts
+++ /dev/null
@@ -1,22 +0,0 @@
-/**
- * The shape an axios rejection actually has at the call sites that inspect it.
- * A `catch` binding is `unknown`, and every one of these sites was reaching
- * into it directly; this gives them one narrowing helper instead.
- */
-export interface HttpLikeError {
-  message?: string;
-  code?: string;
-  response?: {
-    status?: number;
-    data?: {
-      error?: string;
-      message?: string;
-      code?: string;
-      fileNotFound?: boolean;
-    };
-  };
-}
-
-export function asHttpError(error: unknown): HttpLikeError {
-  return (error ?? {}) as HttpLikeError;
-}
diff --git a/plugins/file-manager/src/frontend/lib/keyed-request-cache.ts b/plugins/file-manager/src/frontend/lib/keyed-request-cache.ts
deleted file mode 100644
index 80dd2db2c..000000000
--- a/plugins/file-manager/src/frontend/lib/keyed-request-cache.ts
+++ /dev/null
@@ -1,82 +0,0 @@
-export interface KeyedRequestCache<T> {
-  get(
-    key: string,
-    loader: () => Promise<T>,
-    options?: { force?: boolean },
-  ): Promise<T>;
-  peek(key: string, maxAgeMs?: number): T | null;
-  set(key: string, value: T): void;
-  invalidate(key?: string): void;
-}
-
-/** Bounded per-key cache with in-flight request coalescing. */
-export function createKeyedRequestCache<T>(
-  ttlMs: number,
-  maxEntries = 100,
-): KeyedRequestCache<T> {
-  const values = new Map<string, { value: T; storedAt: number }>();
-  const inflight = new Map<string, Promise<T>>();
-  const versions = new Map<string, number>();
-
-  const store = (key: string, value: T) => {
-    values.delete(key);
-    values.set(key, { value, storedAt: Date.now() });
-    while (values.size > Math.max(1, maxEntries)) {
-      const oldest = values.keys().next().value;
-      if (oldest === undefined) break;
-      values.delete(oldest);
-    }
-  };
-
-  return {
-    get(key, loader, options = {}) {
-      const cached = values.get(key);
-      if (!options.force && cached && Date.now() - cached.storedAt < ttlMs) {
-        return Promise.resolve(cached.value);
-      }
-
-      const pending = inflight.get(key);
-      if (pending) return pending;
-
-      const version = versions.get(key) ?? 0;
-      const request = loader()
-        .then((value) => {
-          if ((versions.get(key) ?? 0) === version) store(key, value);
-          return value;
-        })
-        .finally(() => {
-          if (inflight.get(key) === request) inflight.delete(key);
-        });
-      inflight.set(key, request);
-      return request;
-    },
-
-    peek(key, maxAgeMs = Number.POSITIVE_INFINITY) {
-      const cached = values.get(key);
-      if (!cached || Date.now() - cached.storedAt > maxAgeMs) return null;
-      values.delete(key);
-      values.set(key, cached);
-      return cached.value;
-    },
-
-    set(key, value) {
-      versions.set(key, (versions.get(key) ?? 0) + 1);
-      inflight.delete(key);
-      store(key, value);
-    },
-
-    invalidate(key) {
-      if (key === undefined) {
-        for (const activeKey of inflight.keys()) {
-          versions.set(activeKey, (versions.get(activeKey) ?? 0) + 1);
-        }
-        values.clear();
-        inflight.clear();
-      } else {
-        versions.set(key, (versions.get(key) ?? 0) + 1);
-        values.delete(key);
-        inflight.delete(key);
-      }
-    },
-  };
-}
diff --git a/plugins/file-manager/src/frontend/lib/local-files.ts b/plugins/file-manager/src/frontend/lib/local-files.ts
deleted file mode 100644
index df639e7ad..000000000
--- a/plugins/file-manager/src/frontend/lib/local-files.ts
+++ /dev/null
@@ -1,105 +0,0 @@
-// Thin, typed access to the desktop app's local filesystem bridge
-// (electron/local-files.cjs via preload.js). Everything here resolves to
-// "unavailable" outside Electron so callers can feature-detect cheaply.
-
-import type {
-  LocalDirectoryListing,
-  LocalFsHomeInfo,
-  LocalFsResult,
-  LocalTrashResult,
-  LocalWalkResult,
-} from "@termix/plugin-sdk/frontend";
-import { isElectron } from "@termix/plugin-sdk/ui";
-
-export function isLocalFileBrowserAvailable(): boolean {
-  if (!isElectron()) return false;
-  const api = window.electronAPI;
-  return !!api?.localFs && !!api?.localTransfer;
-}
-
-function requireLocalFs() {
-  const api = window.electronAPI?.localFs;
-  if (!api) {
-    throw new Error("Local file access is only available in the desktop app");
-  }
-  return api;
-}
-
-function unwrap<T>(result: LocalFsResult<T>): T {
-  if (!result || result.success !== true) {
-    const message =
-      result && "error" in result && result.error
-        ? result.error
-        : "Local file operation failed";
-    const error = new Error(message) as Error & { code?: string };
-    if (result && "code" in result) error.code = result.code;
-    throw error;
-  }
-  return result;
-}
-
-export async function getLocalHome(): Promise<LocalFsHomeInfo> {
-  return unwrap(await requireLocalFs().home());
-}
-
-export async function listLocalDirectory(
-  dirPath: string,
-): Promise<LocalDirectoryListing> {
-  return unwrap(await requireLocalFs().list(dirPath));
-}
-
-export async function createLocalFolder(
-  parentPath: string,
-  name: string,
-): Promise<string> {
-  return unwrap(await requireLocalFs().mkdir(parentPath, name)).path;
-}
-
-export async function createLocalFile(
-  parentPath: string,
-  name: string,
-): Promise<string> {
-  return unwrap(await requireLocalFs().createFile(parentPath, name)).path;
-}
-
-export async function renameLocalEntry(
-  oldPath: string,
-  newName: string,
-): Promise<string> {
-  return unwrap(await requireLocalFs().rename(oldPath, newName)).path;
-}
-
-/** Moves entries to the OS trash; resolves with per-path failures, if any. */
-export async function trashLocalPaths(
-  paths: string[],
-): Promise<LocalTrashResult> {
-  return unwrap(await requireLocalFs().trash(paths));
-}
-
-/** Subset of `paths` that already exist on disk. */
-export async function localPathsExist(paths: string[]): Promise<string[]> {
-  if (paths.length === 0) return [];
-  return unwrap(await requireLocalFs().exists(paths)).existing;
-}
-
-/** Creates `dirPath` (and parents). With `rootPath`, refuses anything outside it. */
-export async function ensureLocalDirectory(
-  dirPath: string,
-  rootPath?: string,
-): Promise<string> {
-  return unwrap(await requireLocalFs().ensureDir(dirPath, rootPath)).path;
-}
-
-export async function walkLocalPaths(
-  paths: string[],
-): Promise<LocalWalkResult> {
-  return unwrap(await requireLocalFs().walk(paths));
-}
-
-export async function revealLocalPath(targetPath: string): Promise<void> {
-  unwrap(await requireLocalFs().reveal(targetPath));
-}
-
-export async function openLocalPath(targetPath: string): Promise<void> {
-  unwrap(await requireLocalFs().open(targetPath));
-}
diff --git a/plugins/file-manager/src/frontend/local-transfer-utils.ts b/plugins/file-manager/src/frontend/local-transfer-utils.ts
deleted file mode 100644
index 6f78a9b58..000000000
--- a/plugins/file-manager/src/frontend/local-transfer-utils.ts
+++ /dev/null
@@ -1,407 +0,0 @@
-// Pure helpers shared by the dual-pane (local <-> remote) file manager code.
-// Kept free of React/DOM so they can be unit tested directly.
-
-import type { LocalFileEntry } from "@termix/plugin-sdk/frontend";
-
-/** Custom MIME type carried by drags that originate in the local pane. */
-export const LOCAL_FILES_DRAG_MIME = "application/x-termix-local-files";
-
-/**
- * Custom MIME type the remote grid adds to its internal drags so other panes
- * can recognise them during dragenter/dragover (when payloads are unreadable).
- */
-export const REMOTE_FILES_DRAG_MIME = "application/x-termix-remote-files";
-
-export interface LocalFilesDragPayload {
-  type: "local_files";
-  paths: string[];
-}
-
-export interface InternalFilesDragPayload {
-  type: "internal_files";
-  files: string[];
-}
-
-export function serializeLocalFilesDragPayload(paths: string[]): string {
-  const payload: LocalFilesDragPayload = { type: "local_files", paths };
-  return JSON.stringify(payload);
-}
-
-export function parseLocalFilesDragPayload(
-  raw: string | null | undefined,
-): string[] | null {
-  if (!raw) return null;
-  try {
-    const parsed = JSON.parse(raw) as Partial<LocalFilesDragPayload>;
-    if (parsed?.type !== "local_files" || !Array.isArray(parsed.paths)) {
-      return null;
-    }
-    const paths = parsed.paths.filter(
-      (p): p is string => typeof p === "string" && p.length > 0,
-    );
-    return paths.length > 0 ? paths : null;
-  } catch {
-    return null;
-  }
-}
-
-/** Parses the payload the remote grid puts on `text/plain` for internal drags. */
-export function parseInternalFilesDragPayload(
-  raw: string | null | undefined,
-): string[] | null {
-  if (!raw) return null;
-  try {
-    const parsed = JSON.parse(raw) as Partial<InternalFilesDragPayload>;
-    if (parsed?.type !== "internal_files" || !Array.isArray(parsed.files)) {
-      return null;
-    }
-    const files = parsed.files.filter(
-      (p): p is string => typeof p === "string" && p.length > 0,
-    );
-    return files.length > 0 ? files : null;
-  } catch {
-    return null;
-  }
-}
-
-/** True while a drag that started in the local pane is over the element. */
-export function isLocalFilesDrag(
-  dataTransfer: Pick<DataTransfer, "types"> | null | undefined,
-): boolean {
-  if (!dataTransfer) return false;
-  return Array.from(dataTransfer.types ?? []).includes(LOCAL_FILES_DRAG_MIME);
-}
-
-/**
- * Marks a drag that starts on remote rows. Within the remote grid a drop is a
- * move; onto the local pane it is a copy (a download). The source has to
- * allow both, because Chromium refuses a drop whose dropEffect is not in
- * effectAllowed without firing any event at all -- the drop just silently
- * does nothing.
- */
-export function beginRemoteFilesDrag(
-  dataTransfer: Pick<DataTransfer, "setData" | "effectAllowed">,
-  remotePaths: string[],
-): void {
-  const payload: InternalFilesDragPayload = {
-    type: "internal_files",
-    files: remotePaths,
-  };
-  dataTransfer.setData("text/plain", JSON.stringify(payload));
-  // Lets sibling panes recognise this drag before the payload is readable.
-  dataTransfer.setData(REMOTE_FILES_DRAG_MIME, "1");
-  dataTransfer.effectAllowed = "copyMove";
-}
-
-/** True while a drag that started in the remote grid is over the element. */
-export function isRemoteFilesDrag(
-  dataTransfer: Pick<DataTransfer, "types"> | null | undefined,
-): boolean {
-  if (!dataTransfer) return false;
-  return Array.from(dataTransfer.types ?? []).includes(REMOTE_FILES_DRAG_MIME);
-}
-
-/** Joins a POSIX remote directory with one or more path segments. */
-export function joinRemotePath(base: string, ...segments: string[]): string {
-  let out = base || "/";
-  for (const segment of segments) {
-    const clean = segment.replace(/^\/+|\/+$/g, "");
-    if (!clean) continue;
-    out = out.endsWith("/") ? `${out}${clean}` : `${out}/${clean}`;
-  }
-  return out;
-}
-
-/** Joins a local directory and a file name using the platform separator. */
-export function joinLocalPath(
-  base: string,
-  name: string,
-  separator: string,
-): string {
-  const sep = separator || "/";
-  const trimmedBase = base.endsWith(sep) ? base.slice(0, -sep.length) : base;
-  // Root on POSIX is "/" which trims to ""; keep the separator in that case.
-  return `${trimmedBase}${sep}${name}`;
-}
-
-/** Thrown when a remote name cannot be used as a local path component. */
-export class UnsafeLocalNameError extends Error {
-  readonly code = "EINVAL";
-  constructor(
-    readonly name: string,
-    readonly reason: string,
-  ) {
-    super(`Unsafe file name "${name}": ${reason}`);
-  }
-}
-
-// Windows refuses these device names in any directory, with any extension.
-const WINDOWS_RESERVED_NAMES =
-  /^(con|prn|aux|nul|com[1-9]|lpt[1-9])(\.[^.]*)?$/i;
-
-/**
- * Validates one remote path component for use as a single local path
- * segment on the destination platform (`separator` "\\" means Windows).
- *
- * A POSIX file name may legally contain "\\", ":" or end in a dot, all of
- * which Windows treats as separators, drive prefixes or strips — so a remote
- * name like "..\\outside.txt" would otherwise be normalised out of the
- * selected download folder. Anything that is not a plain name is rejected;
- * traversal ("..") and separators are rejected on every platform.
- */
-export function assertSafeLocalComponent(
-  name: string,
-  separator: string,
-): string {
-  if (name === "" || name === "." || name === "..") {
-    throw new UnsafeLocalNameError(name, "empty or traversal component");
-  }
-  if (name.includes("/") || name.includes("\0")) {
-    throw new UnsafeLocalNameError(name, "contains a path separator or NUL");
-  }
-  if (separator === "\\") {
-    if (/[\\:*?"<>|]/.test(name)) {
-      throw new UnsafeLocalNameError(
-        name,
-        "contains a character Windows does not allow in file names",
-      );
-    }
-    if (/[\u0001-\u001f]/.test(name)) {
-      throw new UnsafeLocalNameError(name, "contains control characters");
-    }
-    if (/[. ]$/.test(name)) {
-      throw new UnsafeLocalNameError(
-        name,
-        "Windows strips trailing dots and spaces",
-      );
-    }
-    if (WINDOWS_RESERVED_NAMES.test(name)) {
-      throw new UnsafeLocalNameError(name, "reserved device name on Windows");
-    }
-  }
-  return name;
-}
-
-function samePathPrefix(a: string, b: string, separator: string): boolean {
-  return separator === "\\" ? a.toLowerCase() === b.toLowerCase() : a === b;
-}
-
-/**
- * Builds the local destination for a "/"-separated relative remote path
- * under `localDir`, validating every component for the destination platform
- * and asserting the result stays strictly inside `localDir`.
- */
-export function buildLocalDestination(
-  localDir: string,
-  relativePath: string,
-  separator: string,
-): string {
-  const sep = separator || "/";
-  const parts = relativePath.split("/").filter((p) => p !== "");
-  if (parts.length === 0) {
-    throw new UnsafeLocalNameError(relativePath, "empty path");
-  }
-  const dest = parts.reduce(
-    (acc, part) => joinLocalPath(acc, assertSafeLocalComponent(part, sep), sep),
-    localDir,
-  );
-  const root = localDir.endsWith(sep) ? localDir : `${localDir}${sep}`;
-  if (
-    !samePathPrefix(dest.slice(0, root.length), root, sep) ||
-    dest.length <= root.length
-  ) {
-    throw new UnsafeLocalNameError(
-      relativePath,
-      "destination escapes the selected folder",
-    );
-  }
-  return dest;
-}
-
-export function remoteBaseName(remotePath: string): string {
-  const trimmed = remotePath.replace(/\/+$/, "");
-  return trimmed.split("/").pop() || trimmed || "/";
-}
-
-/**
- * Given the "/"-separated relative paths of files being uploaded (each
- * including its top-level root name) plus any empty directories, returns the
- * set of directories that must exist on the remote, shallowest first, so each
- * parent is created before its children.
- */
-export function planRemoteDirectories(
-  fileRelativePaths: string[],
-  emptyDirs: string[] = [],
-): string[] {
-  const dirs = new Set<string>();
-
-  for (const relativePath of fileRelativePaths) {
-    const parts = relativePath.split("/").filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      dirs.add(parts.slice(0, i).join("/"));
-    }
-  }
-  for (const dir of emptyDirs) {
-    const parts = dir.split("/").filter(Boolean);
-    for (let i = 1; i <= parts.length; i++) {
-      dirs.add(parts.slice(0, i).join("/"));
-    }
-  }
-
-  return Array.from(dirs).sort(
-    (a, b) => a.split("/").length - b.split("/").length || a.localeCompare(b),
-  );
-}
-
-/** Remote directory a file with the given relative path should land in. */
-export function remoteDirForRelativePath(
-  base: string,
-  relativePath: string,
-): string {
-  const idx = relativePath.lastIndexOf("/");
-  if (idx <= 0) return base;
-  return joinRemotePath(base, relativePath.slice(0, idx));
-}
-
-/** Short "Kind" column label, in the spirit of Finder / Termius. */
-export function describeLocalKind(
-  entry: Pick<LocalFileEntry, "name" | "type">,
-): string {
-  if (entry.type === "directory") return "folder";
-  if (entry.type === "link") return "link";
-  const dot = entry.name.lastIndexOf(".");
-  if (dot > 0 && dot < entry.name.length - 1) {
-    return entry.name.slice(dot + 1).toLowerCase();
-  }
-  return "file";
-}
-
-export type LocalSortField = "name" | "modified" | "size" | "kind";
-
-export function sortLocalEntries(
-  entries: LocalFileEntry[],
-  field: LocalSortField,
-  order: "asc" | "desc",
-): LocalFileEntry[] {
-  const dir = order === "asc" ? 1 : -1;
-  const collator = new Intl.Collator(undefined, {
-    numeric: true,
-    sensitivity: "base",
-  });
-  return [...entries].sort((a, b) => {
-    // Folders always group first, matching the remote grid.
-    const aDir = a.type === "directory" ? 0 : 1;
-    const bDir = b.type === "directory" ? 0 : 1;
-    if (aDir !== bDir) return aDir - bDir;
-
-    let cmp = 0;
-    switch (field) {
-      case "modified":
-        cmp = (a.modifiedTimestamp ?? 0) - (b.modifiedTimestamp ?? 0);
-        break;
-      case "size":
-        cmp = a.size - b.size;
-        break;
-      case "kind":
-        cmp = collator.compare(describeLocalKind(a), describeLocalKind(b));
-        break;
-      default:
-        cmp = 0;
-    }
-    if (cmp === 0) cmp = collator.compare(a.name, b.name);
-    return cmp * dir;
-  });
-}
-
-const MONTH_ABBREVIATIONS = [
-  "Jan",
-  "Feb",
-  "Mar",
-  "Apr",
-  "May",
-  "Jun",
-  "Jul",
-  "Aug",
-  "Sep",
-  "Oct",
-  "Nov",
-  "Dec",
-];
-
-/**
- * Formats a local mtime the same way the backend formats remote entries
- * (`formatMtime` in src/backend/hosts/file-manager/utils.ts, i.e. `ls -l`
- * style): `Sep 11 16:25` for the last six months, `Sep 11  2025` before
- * that — so both panes read alike.
- */
-export function formatLocalModified(
-  timestamp?: number,
-  now: Date = new Date(),
-): string {
-  if (!timestamp) return "--";
-  const date = new Date(timestamp);
-  if (Number.isNaN(date.getTime())) return "--";
-  const month = MONTH_ABBREVIATIONS[date.getMonth()];
-  const day = date.getDate().toString().padStart(2, " ");
-  const sixMonthsAgo = new Date(now.getTime() - 180 * 24 * 60 * 60 * 1000);
-  if (date > sixMonthsAgo) {
-    const hours = date.getHours().toString().padStart(2, "0");
-    const minutes = date.getMinutes().toString().padStart(2, "0");
-    return `${month} ${day} ${hours}:${minutes}`;
-  }
-  return `${month} ${day}  ${date.getFullYear()}`;
-}
-
-// ---------------------------------------------------------------------------
-// Parallel transfers
-
-/** Where a browser kept the preference before it became a user setting. */
-export const TRANSFER_CONCURRENCY_STORAGE_KEY =
-  "termix:file-manager:transfer-concurrency";
-export const DEFAULT_TRANSFER_CONCURRENCY = 4;
-export const MAX_TRANSFER_CONCURRENCY = 8;
-
-export function clampTransferConcurrency(value: unknown): number {
-  const n = Math.floor(Number(value));
-  if (!Number.isFinite(n)) return DEFAULT_TRANSFER_CONCURRENCY;
-  return Math.min(MAX_TRANSFER_CONCURRENCY, Math.max(1, n));
-}
-
-/**
- * The value this browser kept before 2.9.0, removed as it is read so it only
- * moves into the transferConcurrency user setting once. Null when none.
- */
-export function takeLegacyTransferConcurrency(): number | null {
-  try {
-    const raw = localStorage.getItem(TRANSFER_CONCURRENCY_STORAGE_KEY);
-    if (raw === null) return null;
-    localStorage.removeItem(TRANSFER_CONCURRENCY_STORAGE_KEY);
-    return clampTransferConcurrency(raw);
-  } catch {
-    return null;
-  }
-}
-
-/**
- * Runs `worker` over `items` with at most `limit` in flight, preserving the
- * original order of dispatch. Stops dispatching new items once `shouldStop()`
- * returns true; items already in flight run to completion (the caller
- * cancels those through their own transfer ids). Never rejects because of a
- * single item: worker errors are the worker's business.
- */
-export async function runWithConcurrency<T>(
-  items: readonly T[],
-  limit: number,
-  worker: (item: T, index: number) => Promise<void>,
-  shouldStop: () => boolean = () => false,
-): Promise<void> {
-  const size = Math.max(1, Math.min(limit, items.length));
-  let next = 0;
-  const lanes = Array.from({ length: size }, async () => {
-    while (next < items.length && !shouldStop()) {
-      const index = next++;
-      await worker(items[index], index);
-    }
-  });
-  await Promise.all(lanes);
-}
diff --git a/plugins/file-manager/src/frontend/optimistic-file-list.ts b/plugins/file-manager/src/frontend/optimistic-file-list.ts
deleted file mode 100644
index d85a02f1b..000000000
--- a/plugins/file-manager/src/frontend/optimistic-file-list.ts
+++ /dev/null
@@ -1,53 +0,0 @@
-import type { FileItem } from "./host-types";
-
-export function childPath(parent: string, name: string): string {
-  return parent === "/" ? `/${name}` : `${parent.replace(/\/$/, "")}/${name}`;
-}
-
-export function addOptimisticItem(
-  files: FileItem[],
-  parent: string,
-  name: string,
-  type: "file" | "directory",
-  now = Date.now(),
-): FileItem[] {
-  const path = childPath(parent, name);
-  if (files.some((file) => file.path === path)) return files;
-  return [
-    ...files,
-    {
-      name,
-      path,
-      type,
-      size: type === "file" ? 0 : undefined,
-      modified: new Date(now).toISOString(),
-      modifiedTimestamp: now,
-    },
-  ];
-}
-
-export function removePaths(files: FileItem[], paths: Set<string>): FileItem[] {
-  return files.filter((file) => !paths.has(file.path));
-}
-
-export function restoreItems(
-  files: FileItem[],
-  restored: FileItem[],
-): FileItem[] {
-  const existing = new Set(files.map((file) => file.path));
-  return [...files, ...restored.filter((file) => !existing.has(file.path))];
-}
-
-export function renameOptimisticItem(
-  files: FileItem[],
-  originalPath: string,
-  newName: string,
-): FileItem[] {
-  const slash = originalPath.lastIndexOf("/");
-  const parent = slash <= 0 ? "/" : originalPath.slice(0, slash);
-  return files.map((file) =>
-    file.path === originalPath
-      ? { ...file, name: newName, path: childPath(parent, newName) }
-      : file,
-  );
-}
diff --git a/plugins/file-manager/src/frontend/sftp-transfer-utils.ts b/plugins/file-manager/src/frontend/sftp-transfer-utils.ts
deleted file mode 100644
index 6eb1d8837..000000000
--- a/plugins/file-manager/src/frontend/sftp-transfer-utils.ts
+++ /dev/null
@@ -1,26 +0,0 @@
-export function normalizeRemoteDir(remotePath: string): string {
-  const trimmed = remotePath.trim().replace(/\\/g, "/");
-  if (!trimmed) return "/";
-  const collapsed = trimmed.replace(/\/+/g, "/");
-  const absolute = collapsed.startsWith("/") ? collapsed : `/${collapsed}`;
-  if (absolute === "/") return "/";
-  return absolute.replace(/\/+$/, "");
-}
-
-export function joinRemotePath(basePath: string, childPath: string): string {
-  const base = normalizeRemoteDir(basePath);
-  const child = childPath.replace(/\\/g, "/").replace(/^\/+/, "");
-  if (!child) return base;
-  return base === "/" ? `/${child}` : `${base}/${child}`;
-}
-
-export function hasSameHostTransferConflict(
-  sourcePaths: string[],
-  destinationDir: string,
-): boolean {
-  const dest = normalizeRemoteDir(destinationDir);
-  return sourcePaths.some((sourcePath) => {
-    const source = normalizeRemoteDir(sourcePath);
-    return dest === source || dest.startsWith(`${source}/`);
-  });
-}
diff --git a/plugins/file-manager/src/frontend/transferMetricsFormat.ts b/plugins/file-manager/src/frontend/transferMetricsFormat.ts
deleted file mode 100644
index f7e054e70..000000000
--- a/plugins/file-manager/src/frontend/transferMetricsFormat.ts
+++ /dev/null
@@ -1,92 +0,0 @@
-import type { TranslateFn as TFunction } from "@termix/plugin-sdk/frontend";
-import {
-  formatDurationMs,
-  formatTransferMbPerSec,
-  type TransferTimings,
-} from "./api/transfer-api";
-
-export function createFormatTransferMetrics(t: TFunction) {
-  return (timings?: TransferTimings): string => {
-    if (!timings) return "";
-    const parts: string[] = [];
-    if (
-      timings.directBenchmarkMs !== undefined &&
-      timings.relayBenchmarkMs !== undefined
-    ) {
-      parts.push(
-        t("transfer.metricsRouteBenchmark", {
-          direct: formatDurationMs(timings.directBenchmarkMs),
-          relay: formatDurationMs(timings.relayBenchmarkMs),
-        }),
-      );
-    }
-    if (timings.prepareDestMs !== undefined) {
-      parts.push(
-        t("transfer.metricsPrepare", {
-          duration: formatDurationMs(timings.prepareDestMs),
-        }),
-      );
-    }
-    if (timings.compressMs !== undefined) {
-      parts.push(
-        t("transfer.metricsCompress", {
-          duration: formatDurationMs(timings.compressMs),
-        }),
-      );
-    }
-    for (const hop of timings.hops ?? []) {
-      const hopKey =
-        hop.id === "source_read"
-          ? "transfer.metricsHopSourceRead"
-          : hop.id === "dest_local_write"
-            ? "transfer.metricsHopDestLocalWrite"
-            : "transfer.metricsHopDestSftpWrite";
-      parts.push(
-        t(hopKey, {
-          throughput: formatTransferMbPerSec(hop.mbPerSec),
-        }),
-      );
-    }
-    if (timings.transferMs !== undefined) {
-      parts.push(
-        t("transfer.metricsTransfer", {
-          duration: formatDurationMs(timings.transferMs),
-          throughput: formatTransferMbPerSec(
-            timings.endToEndMbPerSec,
-            timings.transferBytes,
-            timings.transferMs,
-          ),
-        }),
-      );
-    }
-    if (timings.extractMs !== undefined) {
-      parts.push(
-        t("transfer.metricsExtract", {
-          duration: formatDurationMs(timings.extractMs),
-        }),
-      );
-    }
-    if (timings.verifyMs !== undefined) {
-      parts.push(
-        t("transfer.metricsVerify", {
-          duration: formatDurationMs(timings.verifyMs),
-        }),
-      );
-    }
-    if (timings.sourceDeleteMs !== undefined) {
-      parts.push(
-        t("transfer.metricsSourceDelete", {
-          duration: formatDurationMs(timings.sourceDeleteMs),
-        }),
-      );
-    }
-    if (timings.totalMs !== undefined) {
-      parts.push(
-        t("transfer.metricsTotal", {
-          duration: formatDurationMs(timings.totalMs),
-        }),
-      );
-    }
-    return parts.join(", ");
-  };
-}
diff --git a/plugins/file-manager/src/frontend/transferNotificationStore.ts b/plugins/file-manager/src/frontend/transferNotificationStore.ts
deleted file mode 100644
index 5a463bb1f..000000000
--- a/plugins/file-manager/src/frontend/transferNotificationStore.ts
+++ /dev/null
@@ -1,52 +0,0 @@
-const PENDING_KEY = "termix_pending_transfers";
-const NOTIFIED_KEY = "termix_notified_transfers";
-
-function readJsonArray(key: string): string[] {
-  try {
-    const raw = localStorage.getItem(key);
-    if (!raw) return [];
-    const parsed = JSON.parse(raw) as unknown;
-    return Array.isArray(parsed)
-      ? parsed.filter((id): id is string => typeof id === "string")
-      : [];
-  } catch {
-    return [];
-  }
-}
-
-function writeJsonArray(key: string, values: string[]): void {
-  localStorage.setItem(key, JSON.stringify(values));
-}
-
-export function registerPendingTransfer(transferId: string): void {
-  const pending = readJsonArray(PENDING_KEY);
-  if (!pending.includes(transferId)) {
-    writeJsonArray(PENDING_KEY, [...pending, transferId]);
-  }
-}
-
-export function markTransferNotified(transferId: string): void {
-  const notified = readJsonArray(NOTIFIED_KEY);
-  if (!notified.includes(transferId)) {
-    writeJsonArray(NOTIFIED_KEY, [...notified, transferId].slice(-200));
-  }
-  writeJsonArray(
-    PENDING_KEY,
-    readJsonArray(PENDING_KEY).filter((id) => id !== transferId),
-  );
-}
-
-export function isTransferNotified(transferId: string): boolean {
-  return readJsonArray(NOTIFIED_KEY).includes(transferId);
-}
-
-export function getPendingTransferIds(): string[] {
-  return readJsonArray(PENDING_KEY);
-}
-
-export function clearStalePendingTransfer(transferId: string): void {
-  writeJsonArray(
-    PENDING_KEY,
-    readJsonArray(PENDING_KEY).filter((id) => id !== transferId),
-  );
-}
diff --git a/plugins/file-manager/src/frontend/transferProgressMonitor.tsx b/plugins/file-manager/src/frontend/transferProgressMonitor.tsx
deleted file mode 100644
index 8c86f3e30..000000000
--- a/plugins/file-manager/src/frontend/transferProgressMonitor.tsx
+++ /dev/null
@@ -1,350 +0,0 @@
-import { getErrorMessage } from "./lib/error-message";
-import { toast } from "sonner";
-import type { TranslateFn as TFunction } from "@termix/plugin-sdk/frontend";
-import {
-  pollTransferUntilComplete,
-  cancelTransferToHost,
-  cleanupCancelledTransfer,
-  retryTransferToHost,
-  createTransferProgressTracker,
-  type TransferProgressResponse,
-  type TransferTimings,
-} from "./api/transfer-api";
-import { TransferProgressToast } from "./components/TransferProgressToast.tsx";
-import {
-  markTransferNotified,
-  registerPendingTransfer,
-} from "./transferNotificationStore.ts";
-
-const monitoredTransferIds = new Set<string>();
-const TOAST_CLASS = "!pr-10 !pl-4 transfer-progress-toast";
-
-function formatFileSize(bytes?: number): string {
-  if (bytes === undefined || bytes === null) return "-";
-  if (bytes === 0) return "0 B";
-
-  const units = ["B", "KB", "MB", "GB", "TB"];
-  let size = bytes;
-  let unitIndex = 0;
-
-  while (size >= 1024 && unitIndex < units.length - 1) {
-    size /= 1024;
-    unitIndex++;
-  }
-
-  const formattedSize =
-    size < 10 && unitIndex > 0 ? size.toFixed(1) : Math.round(size).toString();
-  return `${formattedSize} ${units[unitIndex]}`;
-}
-
-function renderTransferProgressToast(
-  t: TFunction,
-  toastId: string | number,
-  status: TransferProgressResponse,
-  liveMbPerSec?: number,
-  onCancel?: () => void,
-  cancelling?: boolean,
-  stalled?: boolean,
-): void {
-  toast.loading(
-    <TransferProgressToast
-      t={t}
-      status={status}
-      liveMbPerSec={liveMbPerSec}
-      stalled={stalled}
-      formatSize={formatFileSize}
-      onCancel={onCancel}
-      cancelling={cancelling}
-    />,
-    { id: toastId, duration: Infinity, className: TOAST_CLASS },
-  );
-}
-
-export function showTransferCompletionToast(
-  finalStatus: TransferProgressResponse,
-  t: TFunction,
-  toastId?: string | number,
-  formatTransferMetrics?: (timings?: TransferTimings) => string,
-): void {
-  showDefaultCompletionToast(
-    finalStatus,
-    toastId ?? `transfer-done-${finalStatus.transferId}`,
-    t,
-    formatTransferMetrics,
-  );
-  markTransferNotified(finalStatus.transferId);
-}
-
-export function isTransferBeingMonitored(transferId: string): boolean {
-  return monitoredTransferIds.has(transferId);
-}
-
-export interface TransferMonitorHandle {
-  toastId: string | number;
-  waitForCompletion: Promise<TransferProgressResponse>;
-}
-
-export interface BeginTransferMonitoringOptions {
-  resumed?: boolean;
-  initialStatus?: Partial<TransferProgressResponse>;
-  onComplete?: (
-    finalStatus: TransferProgressResponse,
-    toastId: string | number,
-  ) => void;
-  onProgress?: (status: TransferProgressResponse) => void;
-  formatTransferMetrics?: (timings?: TransferTimings) => string;
-}
-
-function showCancelledTransferToast(
-  finalStatus: TransferProgressResponse,
-  toastId: string | number,
-  t: TFunction,
-): void {
-  const hasPartialDest =
-    (finalStatus.partialDestRemaining ??
-      (finalStatus.bytesTransferred ?? 0) > 0) ||
-    (finalStatus.itemsCompleted ?? 0) > 0;
-
-  let description: string | undefined;
-  if (finalStatus.moveRequested && hasPartialDest) {
-    description = t("transfer.transferCancelledMoveHint");
-  } else if (hasPartialDest) {
-    description = t("transfer.transferCancelledCopyHint");
-  }
-
-  const showCleanupAction = hasPartialDest && !finalStatus.cleanupCompleted;
-
-  toast.info(t("transfer.transferCancelled"), {
-    id: toastId,
-    description,
-    className: TOAST_CLASS,
-    duration: showCleanupAction ? Infinity : undefined,
-    action: showCleanupAction
-      ? {
-          label: t("transfer.cleanupDestFiles"),
-          onClick: () => {
-            void cleanupCancelledTransfer(finalStatus.transferId)
-              .then((result) => {
-                toast.dismiss(toastId);
-                if (result.failedPaths.length > 0) {
-                  toast.warning(t("transfer.cleanupDestFilesPartial"));
-                } else if (result.removedPaths.length > 0) {
-                  toast.success(t("transfer.cleanupDestFilesSuccess"));
-                } else {
-                  toast.info(t("transfer.cleanupDestFilesNothing"));
-                }
-              })
-              .catch((error: unknown) => {
-                const message =
-                  error instanceof Error
-                    ? error.message
-                    : t("fileManager.unknownError");
-                toast.error(
-                  `${t("transfer.cleanupDestFilesError")}: ${message}`,
-                );
-              });
-          },
-        }
-      : undefined,
-  });
-}
-
-function showFailedTransferToast(
-  finalStatus: TransferProgressResponse,
-  toastId: string | number,
-  t: TFunction,
-  formatTransferMetrics?: (timings?: TransferTimings) => string,
-): void {
-  const hasPartial =
-    (finalStatus.partialDestRemaining ??
-      (finalStatus.bytesTransferred ?? 0) > 0) ||
-    (finalStatus.itemsCompleted ?? 0) > 0;
-
-  const descriptionParts: string[] = [];
-  if (finalStatus.message) {
-    descriptionParts.push(finalStatus.message);
-  }
-  if (finalStatus.retryable && hasPartial) {
-    descriptionParts.push(t("transfer.transferFailedRetryHint"));
-  }
-
-  const showRetry = finalStatus.retryable === true;
-
-  toast.error(t("transfer.transferError"), {
-    id: toastId,
-    description:
-      descriptionParts.length > 0 ? descriptionParts.join(" ") : undefined,
-    className: TOAST_CLASS,
-    duration: showRetry ? Infinity : undefined,
-    action: showRetry
-      ? {
-          label: t("transfer.retryTransfer"),
-          onClick: () => {
-            void retryTransferToHost(finalStatus.transferId)
-              .then(() => {
-                toast.dismiss(toastId);
-                beginTransferProgressMonitoring(finalStatus.transferId, t, {
-                  resumed: true,
-                  formatTransferMetrics,
-                });
-              })
-              .catch((error: unknown) => {
-                const message =
-                  error instanceof Error
-                    ? error.message
-                    : t("fileManager.unknownError");
-                toast.error(`${t("transfer.retryTransferError")}: ${message}`);
-              });
-          },
-        }
-      : undefined,
-  });
-}
-
-function showDefaultCompletionToast(
-  finalStatus: TransferProgressResponse,
-  toastId: string | number,
-  t: TFunction,
-  formatTransferMetrics?: (timings?: TransferTimings) => string,
-): void {
-  if (finalStatus.status === "cancelled") {
-    showCancelledTransferToast(finalStatus, toastId, t);
-    return;
-  }
-
-  if (finalStatus.status === "error") {
-    showFailedTransferToast(finalStatus, toastId, t, formatTransferMetrics);
-    return;
-  }
-
-  if (finalStatus.status === "partial") {
-    const failed = finalStatus.failedPaths?.join(", ") || "";
-    const metrics = formatTransferMetrics?.(finalStatus.timings);
-    toast.warning(
-      t("transfer.transferPartialHint", {
-        paths: failed,
-        count: finalStatus.failedPaths?.length || 0,
-      }),
-      {
-        id: toastId,
-        description: metrics || undefined,
-        className: TOAST_CLASS,
-        duration: undefined,
-      },
-    );
-    return;
-  }
-
-  const metrics = formatTransferMetrics?.(finalStatus.timings);
-  toast.success(t("transfer.transferSuccess"), {
-    id: toastId,
-    description: metrics || undefined,
-    className: TOAST_CLASS,
-    duration: undefined,
-  });
-}
-
-export function beginTransferProgressMonitoring(
-  transferId: string,
-  t: TFunction,
-  options: BeginTransferMonitoringOptions = {},
-): TransferMonitorHandle | null {
-  if (monitoredTransferIds.has(transferId)) {
-    return null;
-  }
-  monitoredTransferIds.add(transferId);
-  registerPendingTransfer(transferId);
-
-  const progressTracker = createTransferProgressTracker();
-  let cancelling = false;
-
-  const initialStatus: TransferProgressResponse = {
-    transferId,
-    status: "running",
-    phase: "transferring",
-    ...options.initialStatus,
-  };
-
-  const progressToast = toast.loading(
-    <TransferProgressToast
-      t={t}
-      status={initialStatus}
-      formatSize={formatFileSize}
-    />,
-    {
-      duration: Infinity,
-      description: options.resumed ? t("transfer.resumedHint") : undefined,
-      className: TOAST_CLASS,
-    },
-  );
-
-  const handleCancelTransfer = () => {
-    if (cancelling) return;
-    cancelling = true;
-    renderTransferProgressToast(
-      t,
-      progressToast,
-      { ...initialStatus, transferId },
-      undefined,
-      handleCancelTransfer,
-      true,
-    );
-    void cancelTransferToHost(transferId);
-  };
-
-  const waitForCompletion = pollTransferUntilComplete(
-    transferId,
-    (status) => {
-      options.onProgress?.(status);
-      const { rate, stalled } = progressTracker.update(status);
-      renderTransferProgressToast(
-        t,
-        progressToast,
-        status,
-        rate,
-        handleCancelTransfer,
-        cancelling,
-        stalled,
-      );
-    },
-    250,
-  )
-    .then((finalStatus) => {
-      markTransferNotified(transferId);
-      if (options.onComplete) {
-        options.onComplete(finalStatus, progressToast);
-      } else {
-        showDefaultCompletionToast(
-          finalStatus,
-          progressToast,
-          t,
-          options.formatTransferMetrics,
-        );
-      }
-      return finalStatus;
-    })
-    .catch((error: unknown) => {
-      const message = getErrorMessage(error, t("fileManager.unknownError"));
-      toast.error(`${t("transfer.transferError")}: ${message}`, {
-        id: progressToast,
-        className: TOAST_CLASS,
-        duration: undefined,
-      });
-      markTransferNotified(transferId);
-      throw error;
-    })
-    .finally(() => {
-      monitoredTransferIds.delete(transferId);
-    });
-
-  renderTransferProgressToast(
-    t,
-    progressToast,
-    initialStatus,
-    undefined,
-    handleCancelTransfer,
-    cancelling,
-  );
-
-  return { toastId: progressToast, waitForCompletion };
-}
diff --git a/plugins/file-manager/tests/backend/download-routes.test.ts b/plugins/file-manager/tests/backend/download-routes.test.ts
deleted file mode 100644
index dfa88555f..000000000
--- a/plugins/file-manager/tests/backend/download-routes.test.ts
+++ /dev/null
@@ -1,126 +0,0 @@
-import { once } from "node:events";
-import { PassThrough } from "node:stream";
-import type { Express, Request, Response } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { describe, expect, it, vi } from "vitest";
-import { registerFileDownloadRoutes } from "../../src/backend/download-routes.js";
-import type { SSHSession } from "../../src/backend/session.js";
-
-function setup(remote: object, owned = true) {
-  const routes = new Map<
-    string,
-    (req: Request, res: Response) => Promise<unknown>
-  >();
-  registerFileDownloadRoutes(
-    {
-      post: (path, handler) => routes.set(path, handler),
-    } as unknown as Express,
-    {
-      ctx: {
-        currentActor: () => "user",
-        log: { info: vi.fn(), warn: vi.fn(), error: vi.fn() },
-      } as unknown as PluginContext,
-      sshSessions: { s: { isConnected: true, sftp: remote } as SSHSession },
-      scheduleSessionCleanup: vi.fn(),
-      verifySessionOwnership: () => owned,
-    },
-  );
-  const headers = new Map<string, string>();
-  const res = Object.assign(new PassThrough(), {
-    headersSent: false,
-    setHeader: (name: string, value: string) => headers.set(name, value),
-    removeHeader: (name: string) => headers.delete(name),
-    status: vi.fn().mockReturnThis(),
-    json: vi.fn(),
-  });
-  const start = () =>
-    routes.get("/downloadFileStream")!(
-      { body: { sessionId: "s", path: "/file" } } as Request,
-      res as unknown as Response,
-    );
-  return { res, start, headers };
-}
-
-function source() {
-  return {
-    stat: vi.fn((_path, cb) => cb(undefined, { size: 5, isFile: () => true })),
-    open: vi.fn((_path, _flags, _mode, cb) =>
-      cb(undefined, Buffer.from("handle")),
-    ),
-    read: vi.fn((_handle, buffer, offset, _length, _position, cb) => {
-      Buffer.from("hello").copy(buffer, offset);
-      cb(undefined, 5);
-    }),
-    close: vi.fn((_handle, cb) => cb()),
-  };
-}
-
-describe("stream download route", () => {
-  it("streams the file content with its advertised length", async () => {
-    const remote = source();
-    const { res, start, headers } = setup(remote);
-    await start();
-    const chunks: Buffer[] = [];
-    for await (const chunk of res) chunks.push(chunk);
-    expect(Buffer.concat(chunks).toString()).toBe("hello");
-    expect(headers.get("Content-Length")).toBe("5");
-    expect(remote.close).toHaveBeenCalledOnce();
-  });
-
-  it("does not open a file after the HTTP client disconnected during stat", async () => {
-    const remote = source();
-    let finishStat!: () => void;
-    remote.stat.mockImplementation((_path, cb) => {
-      finishStat = () => cb(undefined, { size: 5, isFile: () => true });
-    });
-    const { res, start } = setup(remote);
-    const started = start();
-    await Promise.resolve();
-    res.destroy();
-    finishStat();
-    await started;
-    expect(remote.open).not.toHaveBeenCalled();
-  });
-
-  it("closes the SFTP handle after HTTP disconnect during a read", async () => {
-    const remote = source();
-    let finishRead!: () => void;
-    remote.read.mockImplementation(
-      (_h, buffer, offset, length, position, cb) => {
-        finishRead = () => cb(undefined, 0);
-      },
-    );
-    const { res, start } = setup(remote);
-    await start();
-    await new Promise<void>((resolve) => setImmediate(resolve));
-    res.destroy();
-    await once(res, "close");
-    finishRead();
-    await vi.waitFor(() => expect(remote.close).toHaveBeenCalledOnce());
-    expect(remote.read).toHaveBeenCalledOnce();
-  });
-
-  it("removes the file length before returning an early stream error as JSON", async () => {
-    const remote = source();
-    remote.open.mockImplementation((_p, _f, _m, cb) =>
-      cb(new Error("permission denied"), undefined),
-    );
-    const { res, start, headers } = setup(remote);
-    await start();
-    await vi.waitFor(() => expect(res.status).toHaveBeenCalledWith(500));
-    expect(headers.has("Content-Length")).toBe(false);
-    expect(res.json).toHaveBeenCalledWith({
-      error: "Download failed: permission denied",
-    });
-    res.destroy();
-  });
-
-  it("refuses another user's SSH session before reading a file", async () => {
-    const remote = source();
-    const { res, start } = setup(remote, false);
-    await start();
-    expect(res.status).toHaveBeenCalledWith(403);
-    expect(remote.stat).not.toHaveBeenCalled();
-    res.destroy();
-  });
-});
diff --git a/plugins/file-manager/tests/backend/download-stream-sftp.test.ts b/plugins/file-manager/tests/backend/download-stream-sftp.test.ts
deleted file mode 100644
index ea3b350ae..000000000
--- a/plugins/file-manager/tests/backend/download-stream-sftp.test.ts
+++ /dev/null
@@ -1,74 +0,0 @@
-import { once } from "node:events";
-import type { AddressInfo } from "node:net";
-import { Client, Server, utils, type SFTPWrapper } from "ssh2";
-import { expect, it } from "vitest";
-import { createDownloadStream } from "../../src/backend/download-stream.js";
-
-it("overlaps real SFTP reads while retaining the serial stream's byte content", async () => {
-  const data = Buffer.alloc(1024 * 1024 + 71);
-  for (let i = 0; i < data.length; i++) data[i] = (i * 7 + (i >>> 10)) % 256;
-  let pending = 0;
-  let peak = 0;
-  let closed = 0;
-  const server = new Server(
-    {
-      hostKeys: [utils.generateKeyPairSync("rsa", { bits: 2048 }).private],
-    },
-    (client) => {
-      client.on("authentication", (ctx) => ctx.accept());
-      client.on("ready", () =>
-        client.on("session", (accept) => {
-          accept().on("sftp", (acceptSftp) => {
-            const sftp = acceptSftp();
-            sftp.on("OPEN", (id) => sftp.handle(id, Buffer.from("file")));
-            sftp.on("READ", (id, _handle, offset, length) => {
-              peak = Math.max(peak, ++pending);
-              setTimeout(() => {
-                pending--;
-                if (offset >= data.length) sftp.status(id, 1);
-                else sftp.data(id, data.subarray(offset, offset + length));
-              }, 10);
-            });
-            sftp.on("CLOSE", (id) => {
-              closed++;
-              sftp.status(id, 0);
-            });
-          });
-        }),
-      );
-    },
-  );
-  const client = new Client();
-  try {
-    await new Promise<void>((resolve) =>
-      server.listen(0, "127.0.0.1", resolve),
-    );
-    client.connect({
-      host: "127.0.0.1",
-      port: (server.address() as AddressInfo).port,
-      username: "test",
-    });
-    await once(client, "ready");
-    const sftp = await new Promise<SFTPWrapper>((resolve, reject) =>
-      client.sftp((err, channel) => (err ? reject(err) : resolve(channel))),
-    );
-    const serial: Buffer[] = [];
-    for await (const chunk of sftp.createReadStream("/file"))
-      serial.push(chunk);
-    expect(Buffer.concat(serial)).toEqual(data);
-    expect(peak).toBe(1);
-    peak = 0;
-    const pipelined: Buffer[] = [];
-    for await (const chunk of createDownloadStream(sftp, "/file", data.length))
-      pipelined.push(chunk);
-    expect(Buffer.concat(pipelined)).toEqual(data);
-    expect(peak).toBeGreaterThan(1);
-    expect(peak).toBeLessThanOrEqual(8);
-    expect(closed).toBe(2);
-  } finally {
-    const closedClient = once(client, "close");
-    client.destroy();
-    await closedClient;
-    await new Promise<void>((resolve) => server.close(() => resolve()));
-  }
-}, 15000);
diff --git a/plugins/file-manager/tests/backend/download-stream.test.ts b/plugins/file-manager/tests/backend/download-stream.test.ts
deleted file mode 100644
index f44456539..000000000
--- a/plugins/file-manager/tests/backend/download-stream.test.ts
+++ /dev/null
@@ -1,137 +0,0 @@
-import { once } from "node:events";
-import { setImmediate as nextTurn } from "node:timers/promises";
-import type { SFTPWrapper } from "ssh2";
-import { describe, expect, it, vi } from "vitest";
-import { createDownloadStream } from "../../src/backend/download-stream.js";
-
-function source(
-  data: Buffer,
-  options: { shortRead?: number; failAt?: number } = {},
-) {
-  let pending = 0;
-  let peak = 0;
-  const closedWithPending: number[] = [];
-  const sftp = {
-    open: vi.fn((_path, _flags, _mode, cb) =>
-      cb(undefined, Buffer.from("handle")),
-    ),
-    close: vi.fn((_handle, cb) => {
-      closedWithPending.push(pending);
-      cb();
-    }),
-    read: vi.fn((_handle, buffer, offset, length, position, cb) => {
-      peak = Math.max(peak, ++pending);
-      // Later file offsets can finish first.
-      setTimeout(
-        () => {
-          pending--;
-          if (position === options.failAt) return cb(new Error("read failed"));
-          const bytes = Math.min(
-            length,
-            options.shortRead ?? length,
-            Math.max(0, data.length - position),
-          );
-          if (bytes > 0) data.copy(buffer, offset, position, position + bytes);
-          cb(undefined, bytes);
-        },
-        position === 0 ? 10 : 0,
-      );
-    }),
-  };
-  return {
-    sftp: sftp as unknown as SFTPWrapper,
-    close: sftp.close,
-    read: sftp.read,
-    peak: () => peak,
-    closedWithPending,
-  };
-}
-
-async function contents(stream: ReturnType<typeof createDownloadStream>) {
-  const buffers: Buffer[] = [];
-  for await (const buffer of stream) buffers.push(buffer);
-  return Buffer.concat(buffers);
-}
-
-describe("SFTP download stream", () => {
-  it("pipelines bounded reads and preserves bytes despite out-of-order replies", async () => {
-    const data = Buffer.alloc(1024 * 1024 + 123);
-    for (let i = 0; i < data.length; i++) data[i] = (i * 13 + (i >>> 8)) % 256;
-    const remote = source(data);
-    const received = await contents(
-      createDownloadStream(remote.sftp, "/file", data.length),
-    );
-    // toEqual walks a 1 MB buffer byte by byte, slow enough to time out
-    // when every plugin suite runs at once.
-    expect(received.length).toBe(data.length);
-    expect(received.equals(data)).toBe(true);
-    expect(remote.peak()).toBe(8);
-    expect(remote.closedWithPending).toEqual([0]);
-  });
-
-  it("fills short server reads without losing or repeating bytes", async () => {
-    const data = Buffer.from("short reads ".repeat(10000));
-    const remote = source(data, { shortRead: 4096 });
-    expect(
-      await contents(createDownloadStream(remote.sftp, "/file", data.length)),
-    ).toEqual(data);
-    expect(remote.closedWithPending).toEqual([0]);
-  });
-
-  it("handles empty files without issuing reads", async () => {
-    const remote = source(Buffer.alloc(0));
-    expect(
-      await contents(createDownloadStream(remote.sftp, "/empty", 0)),
-    ).toEqual(Buffer.alloc(0));
-    expect(remote.read).not.toHaveBeenCalled();
-    expect(remote.close).toHaveBeenCalledOnce();
-  });
-
-  it("fails on premature EOF instead of returning uninitialized bytes", async () => {
-    const remote = source(Buffer.from("truncated"));
-    await expect(
-      contents(createDownloadStream(remote.sftp, "/file", 100000)),
-    ).rejects.toThrow("File ended");
-    expect(remote.closedWithPending).toEqual([0]);
-  });
-
-  it("settles outstanding reads before closing on a read failure", async () => {
-    const remote = source(Buffer.alloc(1024 * 1024), { failAt: 32768 });
-    await expect(
-      contents(createDownloadStream(remote.sftp, "/file", 1024 * 1024)),
-    ).rejects.toThrow("read failed");
-    expect(remote.read).toHaveBeenCalledTimes(8);
-    expect(remote.closedWithPending).toEqual([0]);
-  });
-
-  it("stops scheduling reads and closes the handle when destroyed mid-batch", async () => {
-    const remote = source(Buffer.alloc(1024 * 1024), { shortRead: 4096 });
-    const replies: Array<() => void> = [];
-    remote.read.mockImplementation(
-      (_handle, _buffer, _offset, _length, _position, cb) => {
-        replies.push(() => cb(undefined, 4096));
-      },
-    );
-    const stream = createDownloadStream(remote.sftp, "/file", 1024 * 1024);
-    stream.resume();
-    await nextTurn();
-    const closed = once(stream, "close");
-    stream.destroy();
-    for (const reply of replies) reply();
-    await closed;
-    expect(remote.read).toHaveBeenCalledTimes(8);
-    expect(remote.closedWithPending).toEqual([0]);
-  });
-
-  it("bounds read-ahead while the consumer is paused", async () => {
-    const remote = source(Buffer.alloc(8 * 1024 * 1024));
-    const stream = createDownloadStream(remote.sftp, "/file", 8 * 1024 * 1024);
-    stream.read(0);
-    await once(stream, "readable");
-    expect(remote.read).toHaveBeenCalledTimes(8);
-    const closed = once(stream, "close");
-    stream.destroy();
-    await closed;
-    expect(remote.closedWithPending).toEqual([0]);
-  });
-});
diff --git a/plugins/file-manager/tests/backend/helpers.ts b/plugins/file-manager/tests/backend/helpers.ts
deleted file mode 100644
index e2cfc6a5d..000000000
--- a/plugins/file-manager/tests/backend/helpers.ts
+++ /dev/null
@@ -1,91 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-export const manifest = manifestJson as unknown as PluginManifest;
-
-export interface TestServer {
-  db: TestDb;
-  mock: MockPluginContext;
-  request: (
-    method: string,
-    path: string,
-    options?: { user?: string; body?: unknown },
-    // Route bodies vary per test; asserting on them is the point.
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any }>;
-  close: () => Promise<void>;
-}
-
-/**
- * The plugin activated against a real in-memory database, its router mounted
- * on an express app the way core mounts it: JSON parsed, the acting user set
- * from the request, everything else left to the plugin.
- */
-export async function startServer(
-  options: { permissions?: string[]; users?: string[] } = {},
-): Promise<TestServer> {
-  const db = await createTestDb(pluginDir);
-  for (const user of options.users ?? ["user-1", "user-2"]) {
-    db.sqlite
-      .prepare("INSERT INTO users (id, username) VALUES (?, ?)")
-      .run(user, user);
-  }
-
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    permissions: options.permissions ?? ["file-manager.use"],
-  });
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") ?? undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    db,
-    mock,
-    async request(method, path, { user = "user-1", body: given } = {}) {
-      const body = method === "GET" ? undefined : given;
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        headers: {
-          "x-test-user": user,
-          ...(body !== undefined ? { "content-type": "application/json" } : {}),
-        },
-        body: body !== undefined ? JSON.stringify(body) : undefined,
-      });
-      const text = await response.text();
-      return { status: response.status, body: text ? JSON.parse(text) : null };
-    },
-    async close() {
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-      db.close();
-    },
-  };
-}
diff --git a/plugins/file-manager/tests/backend/home-directory.test.ts b/plugins/file-manager/tests/backend/home-directory.test.ts
deleted file mode 100644
index b5afa90c5..000000000
--- a/plugins/file-manager/tests/backend/home-directory.test.ts
+++ /dev/null
@@ -1,99 +0,0 @@
-import { EventEmitter } from "node:events";
-import type { Express, Request, Response } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { beforeEach, describe, expect, it, vi } from "vitest";
-import { registerFileListingRoutes } from "../../src/backend/list-routes.js";
-import {
-  execChannel,
-  getSessionSftp,
-  type SSHSession,
-} from "../../src/backend/session.js";
-import { resolveHomeDirectory } from "../../src/backend/home-directory.js";
-
-vi.mock("../../src/backend/session.js", () => ({
-  getSessionSftp: vi.fn(),
-  execChannel: vi.fn(),
-}));
-beforeEach(() => vi.resetAllMocks());
-
-function setup(home: string, owned = true) {
-  const sftp = {
-    realpath: vi.fn((_path, done) => done(null, home)),
-    readdir: vi.fn((_path, done) => done(null, [])),
-  };
-  vi.mocked(getSessionSftp).mockResolvedValue(sftp as never);
-  let handler!: (req: Request, res: Response) => Promise<unknown>;
-  registerFileListingRoutes(
-    {
-      get: (_path, cb) => {
-        handler = cb;
-      },
-    } as Express,
-    {
-      ctx: {
-        currentActor: () => "user",
-        log: { info: vi.fn(), warn: vi.fn(), error: vi.fn() },
-      } as unknown as PluginContext,
-      sshSessions: {
-        s: { isConnected: true, activeOperations: 0 } as SSHSession,
-      },
-      activeListRequests: {},
-      verifySessionOwnership: () => owned,
-    },
-  );
-  const res = { on: vi.fn(), status: vi.fn().mockReturnThis(), json: vi.fn() };
-  return {
-    sftp,
-    res,
-    list: (path?: string) =>
-      handler(
-        { query: { sessionId: "s", path } } as unknown as Request,
-        res as unknown as Response,
-      ),
-  };
-}
-
-describe("remote login directory", () => {
-  it.each(["/root", "/srv/users/alice", "/"])(
-    "lists the actual SFTP directory %s",
-    async (home) => {
-      const { sftp, res, list } = setup(home);
-      await list(".");
-      await vi.waitFor(() =>
-        expect(res.json).toHaveBeenCalledWith({ files: [], path: home }),
-      );
-      expect(sftp.realpath).toHaveBeenCalledWith(".", expect.any(Function));
-      expect(sftp.readdir).toHaveBeenCalledWith(home, expect.any(Function));
-      expect(execChannel).not.toHaveBeenCalled();
-    },
-  );
-  it("preserves an explicit root instead of replacing it with home", async () => {
-    const { sftp, res, list } = setup("/home/alice");
-    await list("/");
-    await vi.waitFor(() =>
-      expect(res.json).toHaveBeenCalledWith({ files: [], path: "/" }),
-    );
-    expect(sftp.realpath).not.toHaveBeenCalled();
-  });
-  it("checks ownership before discovering the home directory", async () => {
-    const { res, list } = setup("/home/alice", false);
-    await list(".");
-    expect(res.status).toHaveBeenCalledWith(403);
-    expect(getSessionSftp).not.toHaveBeenCalled();
-  });
-  it("falls back to the shell login directory when SFTP is unavailable", async () => {
-    vi.mocked(getSessionSftp).mockRejectedValue(new Error("SFTP unavailable"));
-    vi.mocked(execChannel).mockImplementation((_session, command, done) => {
-      expect(command).toBe("pwd -P");
-      const stream = new EventEmitter();
-      done(undefined as never, stream as never);
-      queueMicrotask(() => {
-        stream.emit("data", Buffer.from("/srv/alice\n"));
-        stream.emit("close", 0);
-      });
-    });
-    await expect(resolveHomeDirectory({} as SSHSession)).resolves.toBe(
-      "/srv/alice",
-    );
-  });
-});
diff --git a/plugins/file-manager/tests/backend/migrations.test.ts b/plugins/file-manager/tests/backend/migrations.test.ts
deleted file mode 100644
index 6d24ddf00..000000000
--- a/plugins/file-manager/tests/backend/migrations.test.ts
+++ /dev/null
@@ -1,167 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { createTestDb, type TestDb } from "@termix/plugin-sdk/testing";
-import { pluginDir } from "./helpers.js";
-
-// file_manager_recent, file_manager_pinned, file_manager_shortcuts and
-// transfer_recent as core's SQLite bootstrap created them before 2.9.0.
-const LEGACY_DDL = `
-  CREATE TABLE file_manager_recent (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-    host_id INTEGER NOT NULL REFERENCES ssh_data(id) ON DELETE CASCADE,
-    name TEXT NOT NULL,
-    path TEXT NOT NULL,
-    last_opened TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
-  );
-  CREATE INDEX idx_file_manager_recent_user ON file_manager_recent (user_id, host_id);
-
-  CREATE TABLE file_manager_pinned (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-    host_id INTEGER NOT NULL REFERENCES ssh_data(id) ON DELETE CASCADE,
-    name TEXT NOT NULL,
-    path TEXT NOT NULL,
-    pinned_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
-  );
-  CREATE INDEX idx_file_manager_pinned_user ON file_manager_pinned (user_id, host_id);
-
-  CREATE TABLE file_manager_shortcuts (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-    host_id INTEGER NOT NULL REFERENCES ssh_data(id) ON DELETE CASCADE,
-    name TEXT NOT NULL,
-    path TEXT NOT NULL,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
-  );
-  CREATE INDEX idx_file_manager_shortcuts_user ON file_manager_shortcuts (user_id, host_id);
-
-  CREATE TABLE transfer_recent (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-    source_host_id INTEGER NOT NULL REFERENCES ssh_data(id) ON DELETE CASCADE,
-    dest_host_id INTEGER NOT NULL REFERENCES ssh_data(id) ON DELETE CASCADE,
-    dest_path TEXT NOT NULL,
-    dest_path_label TEXT NOT NULL,
-    last_used TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
-  );
-  CREATE INDEX idx_transfer_recent_user ON transfer_recent (user_id);
-`;
-
-let db: TestDb | null = null;
-
-afterEach(() => {
-  db?.close();
-  db = null;
-});
-
-const tableExists = (name: string) =>
-  !!db!.sqlite
-    .prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?")
-    .get(name);
-
-const indexOn = (table: string) =>
-  (
-    db!.sqlite
-      .prepare(
-        "SELECT name FROM sqlite_master WHERE type = 'index' AND tbl_name = ? AND name NOT LIKE 'sqlite_%'",
-      )
-      .all(table) as { name: string }[]
-  ).map((row) => row.name);
-
-describe("adopting the four file-manager tables", () => {
-  it("keeps every existing row when the legacy tables are there", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec(
-          "INSERT INTO users (id, username) VALUES ('user-1', 'user-1')",
-        );
-        sqlite.exec("INSERT INTO ssh_data (id) VALUES (1), (2)");
-        sqlite.exec(LEGACY_DDL);
-        sqlite
-          .prepare(
-            "INSERT INTO file_manager_recent (user_id, host_id, name, path) VALUES (?, ?, ?, ?)",
-          )
-          .run("user-1", 1, "notes.txt", "/home/user/notes.txt");
-        sqlite
-          .prepare(
-            "INSERT INTO file_manager_pinned (user_id, host_id, name, path) VALUES (?, ?, ?, ?)",
-          )
-          .run("user-1", 1, "logs", "/var/log");
-        sqlite
-          .prepare(
-            "INSERT INTO file_manager_shortcuts (user_id, host_id, name, path) VALUES (?, ?, ?, ?)",
-          )
-          .run("user-1", 1, "Home", "/home/user");
-        sqlite
-          .prepare(
-            "INSERT INTO transfer_recent (user_id, source_host_id, dest_host_id, dest_path, dest_path_label) VALUES (?, ?, ?, ?, ?)",
-          )
-          .run("user-1", 1, 2, "/backups", "Backups");
-      },
-    });
-
-    expect(db.applied).toEqual(["0001_adopt_file_manager_tables"]);
-
-    for (const legacy of [
-      "file_manager_recent",
-      "file_manager_pinned",
-      "file_manager_shortcuts",
-      "transfer_recent",
-    ]) {
-      expect(tableExists(legacy)).toBe(false);
-    }
-    for (const adopted of [
-      "p_file_manager_recent",
-      "p_file_manager_pinned",
-      "p_file_manager_shortcuts",
-      "p_file_manager_transfer_recent",
-    ]) {
-      expect(tableExists(adopted)).toBe(true);
-    }
-
-    expect(
-      db.sqlite.prepare("SELECT name, path FROM p_file_manager_recent").all(),
-    ).toEqual([{ name: "notes.txt", path: "/home/user/notes.txt" }]);
-    expect(
-      db.sqlite.prepare("SELECT name, path FROM p_file_manager_pinned").all(),
-    ).toEqual([{ name: "logs", path: "/var/log" }]);
-    expect(
-      db.sqlite
-        .prepare("SELECT name, path FROM p_file_manager_shortcuts")
-        .all(),
-    ).toEqual([{ name: "Home", path: "/home/user" }]);
-    expect(
-      db.sqlite
-        .prepare(
-          "SELECT dest_path, dest_path_label FROM p_file_manager_transfer_recent",
-        )
-        .all(),
-    ).toEqual([{ dest_path: "/backups", dest_path_label: "Backups" }]);
-
-    expect(indexOn("p_file_manager_recent")).toEqual([
-      "idx_file_manager_recent_user",
-    ]);
-    expect(indexOn("p_file_manager_pinned")).toEqual([
-      "idx_file_manager_pinned_user",
-    ]);
-    expect(indexOn("p_file_manager_shortcuts")).toEqual([
-      "idx_file_manager_shortcuts_user",
-    ]);
-    expect(indexOn("p_file_manager_transfer_recent")).toEqual([
-      "idx_transfer_recent_user",
-    ]);
-  });
-
-  it("creates the tables fresh when there is no legacy one", async () => {
-    db = await createTestDb(pluginDir);
-
-    expect(tableExists("file_manager_recent")).toBe(false);
-    expect(tableExists("p_file_manager_recent")).toBe(true);
-    expect(tableExists("p_file_manager_pinned")).toBe(true);
-    expect(tableExists("p_file_manager_shortcuts")).toBe(true);
-    expect(tableExists("p_file_manager_transfer_recent")).toBe(true);
-    expect(
-      db.sqlite.prepare("SELECT * FROM p_file_manager_recent").all(),
-    ).toEqual([]);
-  });
-});
diff --git a/plugins/file-manager/tests/backend/route-paths.test.ts b/plugins/file-manager/tests/backend/route-paths.test.ts
deleted file mode 100644
index df78fbba5..000000000
--- a/plugins/file-manager/tests/backend/route-paths.test.ts
+++ /dev/null
@@ -1,43 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-import { describe, expect, it } from "vitest";
-import { pluginDir } from "./helpers";
-
-function read(relative: string): string {
-  return fs.readFileSync(path.join(pluginDir, relative), "utf8");
-}
-
-/** Every "/path" the frontend's SSH client sends, without its parameters. */
-function frontendPaths(): string[] {
-  const source = read("src/frontend/api/ssh-file-operations-api.ts");
-  const paths = new Set<string>();
-  for (const match of source.matchAll(/["`](\/[A-Za-z][\w-]*(?:\/[\w-]+)*)/g)) {
-    paths.add(match[1]);
-  }
-  return [...paths];
-}
-
-/** Every route the backend's express app registers. */
-function backendPaths(): Set<string> {
-  const paths = new Set<string>();
-  const dir = path.join(pluginDir, "src/backend");
-  for (const file of fs
-    .readdirSync(dir)
-    .filter((name) => name.endsWith(".ts"))
-    .map((name) => `src/backend/${name}`)) {
-    for (const match of read(file).matchAll(
-      /app\.(?:get|post|put|delete|patch)\(\s*"(\/[^"]*)"/g,
-    )) {
-      paths.add(match[1].replace(/\/:[\w]+$/, ""));
-    }
-  }
-  return paths;
-}
-
-describe("file manager routes", () => {
-  it("serves every path the frontend's SSH client calls", () => {
-    const served = backendPaths();
-    const missing = frontendPaths().filter((p) => !served.has(p));
-    expect(missing).toEqual([]);
-  });
-});
diff --git a/plugins/file-manager/tests/backend/routes.test.ts b/plugins/file-manager/tests/backend/routes.test.ts
deleted file mode 100644
index 7ef9a49e2..000000000
--- a/plugins/file-manager/tests/backend/routes.test.ts
+++ /dev/null
@@ -1,68 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import { startServer, type TestServer } from "./helpers.js";
-
-let server: TestServer;
-
-beforeEach(async () => {
-  server = await startServer();
-});
-
-afterEach(async () => {
-  await server.close();
-});
-
-describe("recent/pinned/shortcuts", () => {
-  it("round-trips a recent file", async () => {
-    server.db.sqlite.exec("INSERT INTO ssh_data (id) VALUES (1)");
-
-    const add = await server.request("POST", "/recent", {
-      body: { hostId: 1, path: "/etc/hosts", name: "hosts" },
-    });
-    expect(add.status).toBe(200);
-
-    const list = await server.request("GET", "/recent?hostId=1");
-    expect(list.status).toBe(200);
-    expect(list.body).toEqual([
-      expect.objectContaining({ name: "hosts", path: "/etc/hosts" }),
-    ]);
-  });
-
-  it("refuses to pin the same path twice", async () => {
-    server.db.sqlite.exec("INSERT INTO ssh_data (id) VALUES (1)");
-
-    const first = await server.request("POST", "/pinned", {
-      body: { hostId: 1, path: "/var/log", name: "logs" },
-    });
-    expect(first.status).toBe(200);
-
-    const second = await server.request("POST", "/pinned", {
-      body: { hostId: 1, path: "/var/log", name: "logs" },
-    });
-    expect(second.status).toBe(409);
-  });
-});
-
-describe("file-manager.use", () => {
-  it("refuses every route without it", async () => {
-    await server.close();
-    server = await startServer({ permissions: [] });
-
-    for (const [method, path] of [
-      ["GET", "/status?sessionId=x"],
-      ["POST", "/connect"],
-      ["GET", "/recent?hostId=1"],
-      ["POST", "/recent"],
-      ["GET", "/pinned?hostId=1"],
-      ["POST", "/pinned"],
-      ["GET", "/shortcuts?hostId=1"],
-      ["POST", "/shortcuts"],
-      ["GET", "/activeTransfers"],
-    ] as const) {
-      const res = await server.request(method, path, {
-        body: { hostId: 1, path: "/tmp", name: "tmp" },
-      });
-      expect(res.status, `${method} ${path}`).toBe(403);
-      expect(res.body.required).toBe("file-manager.use");
-    }
-  });
-});
diff --git a/plugins/file-manager/tests/backend/transfer-profile-store.test.ts b/plugins/file-manager/tests/backend/transfer-profile-store.test.ts
deleted file mode 100644
index 431aa3b6e..000000000
--- a/plugins/file-manager/tests/backend/transfer-profile-store.test.ts
+++ /dev/null
@@ -1,57 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import {
-  clearTransferProfiles,
-  flushTransferProfiles,
-  getTransferProfile,
-  initializeTransferProfiles,
-  recordTransferProfile,
-  setTransferProfileStore,
-  type PersistedProfiles,
-} from "../../src/backend/transfer-tuning.js";
-
-afterEach(() => {
-  setTransferProfileStore(null);
-  clearTransferProfiles();
-});
-
-function memoryStore() {
-  let saved: PersistedProfiles | undefined;
-  return {
-    store: {
-      read: async () => saved,
-      write: async (value: PersistedProfiles) => {
-        saved = JSON.parse(JSON.stringify(value));
-      },
-    },
-    saved: () => saved,
-  };
-}
-
-describe("transfer profile store", () => {
-  it("saves learned profiles and reads them back after a restart", async () => {
-    const memory = memoryStore();
-    setTransferProfileStore(memory.store);
-    await initializeTransferProfiles();
-
-    recordTransferProfile("host-a:host-b", {
-      bytes: 50 * 1024 * 1024,
-      durationMs: 5000,
-      lanes: 4,
-      pipelineConcurrency: 8,
-      failed: false,
-      now: Date.now(),
-    });
-    await flushTransferProfiles();
-    expect(Object.keys(memory.saved()?.profiles ?? {})).toHaveLength(1);
-
-    // A fresh activation starts from what the store holds.
-    setTransferProfileStore(memory.store);
-    await initializeTransferProfiles();
-    expect(getTransferProfile("host-a:host-b")).toBeDefined();
-  });
-
-  it("works without a store", async () => {
-    await initializeTransferProfiles();
-    expect(getTransferProfile("nothing")).toBeUndefined();
-  });
-});
diff --git a/plugins/file-manager/tests/backend/trash-service.test.ts b/plugins/file-manager/tests/backend/trash-service.test.ts
deleted file mode 100644
index fcfa37bc5..000000000
--- a/plugins/file-manager/tests/backend/trash-service.test.ts
+++ /dev/null
@@ -1,95 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import type { SFTPWrapper } from "ssh2";
-import { listTrash, moveToTrash } from "../../src/backend/trash-service.js";
-
-/** An in-memory SFTP channel that counts every request. */
-function fakeSftp() {
-  const dirs = new Set(["/", "/home", "/home/me"]);
-  const files = new Map<string, Buffer>([["/home/me/a.txt", Buffer.from("a")]]);
-  const calls: string[] = [];
-  const stats = (target: string) =>
-    dirs.has(target) || files.has(target)
-      ? {
-          isDirectory: () => dirs.has(target),
-          size: files.get(target)?.length ?? 0,
-        }
-      : null;
-  const sftp = {
-    realpath: vi.fn((_p: string, done: (e?: Error, v?: string) => void) => {
-      calls.push("realpath");
-      done(undefined, "/home/me");
-    }),
-    stat: vi.fn((target: string, done: (e?: Error, v?: unknown) => void) => {
-      calls.push("stat");
-      const found = stats(target);
-      done(found ? undefined : new Error("ENOENT"), found ?? undefined);
-    }),
-    lstat: vi.fn((target: string, done: (e?: Error, v?: unknown) => void) => {
-      calls.push("lstat");
-      const found = stats(target);
-      done(found ? undefined : new Error("ENOENT"), found ?? undefined);
-    }),
-    mkdir: vi.fn((target: string, done: (e?: Error) => void) => {
-      calls.push("mkdir");
-      dirs.add(target);
-      done();
-    }),
-    rename: vi.fn((from: string, to: string, done: (e?: Error) => void) => {
-      calls.push("rename");
-      files.set(to, files.get(from)!);
-      files.delete(from);
-      done();
-    }),
-    writeFile: vi.fn(
-      (target: string, data: string, done: (e?: Error) => void) => {
-        calls.push("writeFile");
-        files.set(target, Buffer.from(data));
-        done();
-      },
-    ),
-    readdir: vi.fn((target: string, done: (e?: Error, v?: unknown) => void) => {
-      calls.push("readdir");
-      const prefix = `${target}/`;
-      done(
-        undefined,
-        [...files.keys()]
-          .filter((name) => name.startsWith(prefix))
-          .map((name) => ({ filename: name.slice(prefix.length) })),
-      );
-    }),
-    readFile: vi.fn((target: string, done: (e?: Error, v?: Buffer) => void) => {
-      calls.push("readFile");
-      done(undefined, files.get(target));
-    }),
-    unlink: vi.fn((target: string, done: (e?: Error) => void) => {
-      calls.push("unlink");
-      files.delete(target);
-      done();
-    }),
-  };
-  return { sftp: sftp as unknown as SFTPWrapper, calls, files };
-}
-
-describe("trash", () => {
-  it("finds the trash folders once per channel", async () => {
-    const { sftp, calls, files } = fakeSftp();
-    files.set("/home/me/b.txt", Buffer.from("b"));
-
-    await moveToTrash(sftp, "/home/me/a.txt");
-    const first = calls.length;
-    calls.length = 0;
-    await moveToTrash(sftp, "/home/me/b.txt");
-
-    expect(calls.filter((call) => call === "realpath")).toHaveLength(0);
-    expect(calls.filter((call) => call === "mkdir")).toHaveLength(0);
-    // lstat, rename and the metadata write.
-    expect(calls.length).toBeLessThan(first);
-    expect(calls).toEqual(["lstat", "rename", "writeFile"]);
-  });
-
-  it("lists what was moved", async () => {
-    const { sftp } = fakeSftp();
-    const item = await moveToTrash(sftp, "/home/me/a.txt");
-    expect(await listTrash(sftp, 7)).toEqual([item]);
-  });
-});
diff --git a/plugins/file-manager/tests/backend/upload-cancellation.test.ts b/plugins/file-manager/tests/backend/upload-cancellation.test.ts
deleted file mode 100644
index b04be386f..000000000
--- a/plugins/file-manager/tests/backend/upload-cancellation.test.ts
+++ /dev/null
@@ -1,141 +0,0 @@
-import { EventEmitter } from "node:events";
-import { PassThrough, Writable } from "node:stream";
-import type { Express, Request, Response } from "express";
-import { describe, expect, it, vi } from "vitest";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { registerFileContentRoutes } from "../../src/backend/content-routes";
-import type { SSHSession } from "../../src/backend/session";
-
-const { getSessionSftp } = vi.hoisted(() => ({ getSessionSftp: vi.fn() }));
-vi.mock("../../src/backend/session.js", () => ({ getSessionSftp }));
-
-function setup(route = "/uploadFileChunk") {
-  const routes = new Map<string, (req: Request, res: Response) => void>();
-  const app = {
-    get: vi.fn(),
-    post: (path: string, handler: (req: Request, res: Response) => void) =>
-      routes.set(path, handler),
-  } as unknown as Express;
-  registerFileContentRoutes(app, {
-    ctx: {
-      currentActor: () => "user-1",
-      log: { info: vi.fn(), error: vi.fn() },
-    } as unknown as PluginContext,
-    sshSessions: { s: { isConnected: true } as SSHSession },
-    verifySessionOwnership: () => true,
-  });
-  const req = Object.assign(new PassThrough(), {
-    query: {
-      sessionId: "s",
-      path: "/",
-      fileName: "upload.bin",
-      offset: "0",
-      totalSize: "4",
-    },
-    headers: { "content-type": "multipart/form-data; boundary=test-boundary" },
-    body: Buffer.from("data"),
-    complete: true,
-  });
-  const res = Object.assign(new EventEmitter(), {
-    writableFinished: false,
-    json: vi.fn(),
-    status: vi.fn().mockReturnThis(),
-  });
-  const start = () =>
-    routes.get(route)!(req as unknown as Request, res as unknown as Response);
-  return { req, res, start };
-}
-
-function sftp() {
-  // Keep the SSH write pending after HTTP has received the complete body.
-  const stream = new Writable({ write() {} });
-  return { stream, createWriteStream: vi.fn(() => stream) };
-}
-
-describe("chunk upload disconnects", () => {
-  it("stops SSH writes when the client disconnects after sending its body", async () => {
-    const remote = sftp();
-    getSessionSftp.mockResolvedValue(remote);
-    const { res, start } = setup();
-    start();
-    await Promise.resolve();
-    expect(remote.createWriteStream).toHaveBeenCalledOnce();
-    res.emit("close");
-    expect(remote.stream.destroyed).toBe(true);
-    remote.stream.emit("finish");
-    expect(res.json).not.toHaveBeenCalled();
-  });
-
-  it("does not open a remote file if cancelled while waiting for SFTP", async () => {
-    const remote = sftp();
-    let connect!: (value: typeof remote) => void;
-    getSessionSftp.mockReturnValue(
-      new Promise((resolve) => {
-        connect = resolve;
-      }),
-    );
-    const { res, start } = setup();
-    start();
-    res.emit("close");
-    connect(remote);
-    await Promise.resolve();
-    expect(remote.createWriteStream).not.toHaveBeenCalled();
-    expect(res.json).not.toHaveBeenCalled();
-    remote.stream.destroy();
-  });
-
-  it("does not cancel a successfully completed response", async () => {
-    const remote = sftp();
-    getSessionSftp.mockResolvedValue(remote);
-    const { res, start } = setup();
-    start();
-    await Promise.resolve();
-    remote.stream.emit("finish");
-    expect(res.json).toHaveBeenCalledWith(
-      expect.objectContaining({ complete: true }),
-    );
-    res.writableFinished = true;
-    res.emit("close");
-    expect(remote.stream.destroyed).toBe(false);
-    remote.stream.destroy();
-  });
-});
-
-describe("multipart upload disconnects", () => {
-  it("keeps normal request completion alive but cancels unfinished SSH writes on response disconnect", async () => {
-    const remote = {
-      ...sftp(),
-      unlink: vi.fn((_path, callback) => callback(null)),
-    };
-    getSessionSftp.mockResolvedValue(remote);
-    const { req, res, start } = setup("/uploadFileStream");
-    start();
-    req.end(
-      [
-        "--test-boundary",
-        'Content-Disposition: form-data; name="sessionId"',
-        "",
-        "s",
-        "--test-boundary",
-        'Content-Disposition: form-data; name="path"',
-        "",
-        "/",
-        "--test-boundary",
-        'Content-Disposition: form-data; name="file"; filename="a.txt"',
-        "Content-Type: text/plain",
-        "",
-        "data",
-        "--test-boundary--",
-        "",
-      ].join("\r\n"),
-    );
-    await new Promise<void>((resolve) => setImmediate(resolve));
-    expect(remote.createWriteStream).toHaveBeenCalledWith("/a.txt");
-    req.emit("close");
-    expect(remote.stream.destroyed).toBe(false);
-    res.emit("close");
-    expect(remote.stream.destroyed).toBe(true);
-    expect(remote.unlink).toHaveBeenCalledWith("/a.txt", expect.any(Function));
-    expect(res.json).not.toHaveBeenCalled();
-  });
-});
diff --git a/plugins/file-manager/tests/backend/write-content.test.ts b/plugins/file-manager/tests/backend/write-content.test.ts
deleted file mode 100644
index bfa03ac31..000000000
--- a/plugins/file-manager/tests/backend/write-content.test.ts
+++ /dev/null
@@ -1,21 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { decodeWriteContent } from "../../src/backend/content-routes.js";
-
-describe("decodeWriteContent", () => {
-  it("keeps text that happens to be valid base64", () => {
-    expect(decodeWriteContent("test").toString("utf8")).toBe("test");
-    expect(decodeWriteContent("abcd1234").toString("utf8")).toBe("abcd1234");
-  });
-
-  it("decodes base64 only when asked", () => {
-    const encoded = Buffer.from("local x = 1\n").toString("base64");
-    expect(decodeWriteContent(encoded, "base64").toString("utf8")).toBe(
-      "local x = 1\n",
-    );
-  });
-
-  it("passes buffers through", () => {
-    const buffer = Buffer.from([0, 1, 2]);
-    expect(decodeWriteContent(buffer)).toBe(buffer);
-  });
-});
diff --git a/plugins/file-manager/tests/frontend/FileManagerGrid.test.tsx b/plugins/file-manager/tests/frontend/FileManagerGrid.test.tsx
deleted file mode 100644
index 3693b40d6..000000000
--- a/plugins/file-manager/tests/frontend/FileManagerGrid.test.tsx
+++ /dev/null
@@ -1,141 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { cleanup, fireEvent, render, screen } from "@testing-library/react";
-import "@testing-library/jest-dom/vitest";
-import { FileManagerGrid } from "../../src/frontend/FileManagerGrid";
-import type { FileItem } from "../../src/frontend/host-types";
-
-vi.mock("@termix/plugin-sdk/frontend", async (importOriginal) => ({
-  ...(await importOriginal<typeof import("@termix/plugin-sdk/frontend")>()),
-  useTranslation: () => ({ t: (key: string) => key }),
-}));
-
-vi.mock("@tanstack/react-virtual", () => ({
-  useVirtualizer: ({ count }: { count: number }) => ({
-    getTotalSize: () => count * 29,
-    getVirtualItems: () =>
-      Array.from({ length: count }, (_, index) => ({
-        index,
-        key: index,
-        start: index * 29,
-        size: 29,
-      })),
-    measureElement: () => {},
-    measure: () => {},
-  }),
-}));
-
-const file: FileItem = {
-  name: "notes.txt",
-  path: "/notes.txt",
-  type: "file",
-  modified: "2026-09-01",
-  owner: "owner",
-  permissions: "-rw-r--r--",
-};
-const props = {
-  files: [file],
-  selectedFiles: [file],
-  viewMode: "list" as const,
-  onFileOpen: vi.fn(),
-  onSelectionChange: vi.fn(),
-  onRefresh: vi.fn(),
-};
-
-afterEach(() => {
-  cleanup();
-  vi.restoreAllMocks();
-  vi.unstubAllGlobals();
-});
-
-describe("remote file rename", () => {
-  it.each(["F2", "F6"])("starts rename with %s in the visible pane", (key) => {
-    vi.spyOn(HTMLElement.prototype, "offsetParent", "get").mockReturnValue(
-      document.body,
-    );
-    const onStartEdit = vi.fn();
-    render(<FileManagerGrid {...props} onStartEdit={onStartEdit} />);
-    fireEvent.keyDown(document, { key });
-    expect(onStartEdit).toHaveBeenCalledExactlyOnceWith(file);
-  });
-
-  it("does not rename files in a hidden pane", () => {
-    vi.spyOn(HTMLElement.prototype, "offsetParent", "get").mockReturnValue(
-      null,
-    );
-    const onStartEdit = vi.fn();
-    render(<FileManagerGrid {...props} onStartEdit={onStartEdit} />);
-    fireEvent.keyDown(document, { key: "F2" });
-    expect(onStartEdit).not.toHaveBeenCalled();
-  });
-
-  it("hides metadata while editing and commits the new name", () => {
-    const onRename = vi.fn();
-    const { rerender } = render(<FileManagerGrid {...props} />);
-    expect(screen.getByText(file.modified!)).toBeInTheDocument();
-    rerender(
-      <FileManagerGrid
-        {...props}
-        density="compact"
-        editingFile={file}
-        onRename={onRename}
-      />,
-    );
-    expect(screen.queryByText(file.modified!)).not.toBeInTheDocument();
-    expect(screen.queryByText(file.permissions!)).not.toBeInTheDocument();
-    const input = screen.getByRole("textbox");
-    fireEvent.change(input, { target: { value: "renamed.txt" } });
-    fireEvent.keyDown(input, { key: "Enter" });
-    expect(onRename).toHaveBeenCalledWith(file, "renamed.txt");
-    rerender(<FileManagerGrid {...props} />);
-    expect(screen.getByText(file.modified!)).toBeInTheDocument();
-  });
-});
-
-describe("external file drops", () => {
-  beforeEach(() => {
-    vi.stubGlobal(
-      "ResizeObserver",
-      class {
-        observe() {}
-        disconnect() {}
-      },
-    );
-  });
-  it.each(["list", "grid"] as const)(
-    "uploads dropped folders over a file in %s view",
-    (viewMode) => {
-      const onUploadItems = vi.fn();
-      render(
-        <FileManagerGrid
-          {...props}
-          viewMode={viewMode}
-          onUploadItems={onUploadItems}
-        />,
-      );
-      const folder = {
-        name: "logs",
-        isDirectory: true,
-        isFile: false,
-      } as FileSystemEntry;
-      fireEvent.drop(screen.getByText(file.name), {
-        dataTransfer: {
-          types: ["Files"],
-          files: [],
-          getData: () => "",
-          items: [{ webkitGetAsEntry: () => folder }],
-        },
-      });
-      expect(onUploadItems).toHaveBeenCalledExactlyOnceWith([folder]);
-    },
-  );
-
-  it("uploads a plain OS file dropped over a row", () => {
-    const onUpload = vi.fn();
-    render(<FileManagerGrid {...props} onUpload={onUpload} />);
-    const files = [new File(["log"], "app.log")];
-    fireEvent.drop(screen.getByText(file.name), {
-      dataTransfer: { types: ["Files"], files, items: [], getData: () => "" },
-    });
-    expect(onUpload).toHaveBeenCalledExactlyOnceWith(files);
-  });
-});
diff --git a/plugins/file-manager/tests/frontend/FileManagerToolbar.test.tsx b/plugins/file-manager/tests/frontend/FileManagerToolbar.test.tsx
deleted file mode 100644
index 91f87a994..000000000
--- a/plugins/file-manager/tests/frontend/FileManagerToolbar.test.tsx
+++ /dev/null
@@ -1,101 +0,0 @@
-import React from "react";
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { cleanup, fireEvent, render, screen } from "@testing-library/react";
-import "@testing-library/jest-dom/vitest";
-import { FileManagerToolbar } from "../../src/frontend/FileManagerToolbar";
-
-const props: React.ComponentProps<typeof FileManagerToolbar> = {
-  t: (key) => key,
-  currentPath: "/home/alice",
-  navIndex: 0,
-  navHistoryLength: 1,
-  isLoading: false,
-  sshSessionId: "session",
-  selectedFiles: [],
-  searchQuery: "report",
-  setSearchQuery: vi.fn(),
-  viewMode: "list",
-  setViewMode: vi.fn(),
-  density: "comfortable",
-  setDensity: vi.fn(),
-  sortBy: "name",
-  setSortBy: vi.fn(),
-  sortOrder: "asc",
-  setSortOrder: vi.fn(),
-  setMobileSidebarOpen: vi.fn(),
-  goBack: vi.fn(),
-  goForward: vi.fn(),
-  goUp: vi.fn(),
-  navigateTo: vi.fn(),
-  handleRefreshDirectory: vi.fn(),
-  handleDeleteFiles: vi.fn(),
-  handleCopyFiles: vi.fn(),
-  handleFilesDropped: vi.fn(),
-  handleCreateNewFolder: vi.fn(),
-  handleCreateNewFile: vi.fn(),
-};
-
-function toolbar(visible = true) {
-  const view = render(<FileManagerToolbar {...props} />);
-  const input = view.getByPlaceholderText(
-    "fileManager.searchFiles",
-  ) as HTMLInputElement;
-  Object.defineProperty(input, "checkVisibility", { value: () => visible });
-  return { ...view, input };
-}
-
-afterEach(cleanup);
-
-describe("file search shortcut", () => {
-  it.each([{ ctrlKey: true }, { metaKey: true }])(
-    "focuses and selects the search query with %j",
-    (modifier) => {
-      const { input } = toolbar();
-      expect(fireEvent.keyDown(document, { key: "f", ...modifier })).toBe(
-        false,
-      );
-      expect(input).toHaveFocus();
-      expect([input.selectionStart, input.selectionEnd]).toEqual([0, 6]);
-    },
-  );
-
-  it("does not handle the shortcut in a hidden tab", () => {
-    const { input } = toolbar(false);
-    expect(fireEvent.keyDown(document, { key: "f", ctrlKey: true })).toBe(true);
-    expect(input).not.toHaveFocus();
-  });
-
-  it("leaves editor and dialog shortcuts alone", () => {
-    const { input } = toolbar();
-    render(
-      <>
-        <textarea aria-label="editor" />
-        <div role="dialog">
-          <button>Dialog action</button>
-        </div>
-      </>,
-    );
-    for (const target of [
-      screen.getByLabelText("editor"),
-      screen.getByText("Dialog action"),
-    ]) {
-      target.focus();
-      expect(fireEvent.keyDown(target, { key: "f", ctrlKey: true })).toBe(true);
-      expect(target).toHaveFocus();
-      expect(input).not.toHaveFocus();
-    }
-  });
-
-  it("does not intercept unmodified or already handled keys", () => {
-    const { input } = toolbar();
-    fireEvent.keyDown(document, { key: "f" });
-    const event = new KeyboardEvent("keydown", {
-      key: "f",
-      ctrlKey: true,
-      cancelable: true,
-    });
-    event.preventDefault();
-    document.dispatchEvent(event);
-    expect(input).not.toHaveFocus();
-  });
-});
diff --git a/plugins/file-manager/tests/frontend/LocalFilePane.test.tsx b/plugins/file-manager/tests/frontend/LocalFilePane.test.tsx
deleted file mode 100644
index 971016b62..000000000
--- a/plugins/file-manager/tests/frontend/LocalFilePane.test.tsx
+++ /dev/null
@@ -1,503 +0,0 @@
-import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
-import { fireEvent, render, screen, waitFor } from "@testing-library/react";
-import "@testing-library/jest-dom/vitest";
-import { LocalFilePane } from "../../src/frontend/LocalFilePane";
-import {
-  LOCAL_FILES_DRAG_MIME,
-  REMOTE_FILES_DRAG_MIME,
-} from "../../src/frontend/local-transfer-utils";
-import type { LocalFileEntry } from "@termix/plugin-sdk/frontend";
-
-// jsdom has no layout, so render every row instead of a virtual window.
-vi.mock("@tanstack/react-virtual", () => ({
-  useVirtualizer: ({ count }: { count: number }) => ({
-    getTotalSize: () => count * 34,
-    getVirtualItems: () =>
-      Array.from({ length: count }, (_, index) => ({
-        index,
-        key: index,
-        start: index * 34,
-        size: 34,
-      })),
-    measureElement: () => {},
-  }),
-}));
-
-const sonnerToast = vi.hoisted(() => {
-  const fn = vi.fn() as ReturnType<typeof vi.fn> & Record<string, unknown>;
-  fn.success = vi.fn();
-  fn.error = vi.fn();
-  fn.info = vi.fn();
-  fn.warning = vi.fn();
-  fn.loading = vi.fn();
-  fn.dismiss = vi.fn();
-  return fn;
-});
-vi.mock("sonner", () => ({ toast: sonnerToast }));
-
-vi.mock("@termix/plugin-sdk/frontend", async (importOriginal) => ({
-  ...(await importOriginal<typeof import("@termix/plugin-sdk/frontend")>()),
-  useTranslation: () => ({
-    t: (key: string, opts?: Record<string, unknown>) =>
-      opts?.count !== undefined ? `${key}:${opts.count}` : key,
-  }),
-}));
-
-const HOME = "/Users/max";
-
-const entries: LocalFileEntry[] = [
-  {
-    name: "projects",
-    path: `${HOME}/projects`,
-    type: "directory",
-    size: 0,
-    modifiedTimestamp: 1_700_000_000_000,
-    hidden: false,
-  },
-  {
-    name: "notes.txt",
-    path: `${HOME}/notes.txt`,
-    type: "file",
-    size: 1234,
-    modifiedTimestamp: 1_700_000_000_000,
-    hidden: false,
-  },
-  {
-    name: ".zshrc",
-    path: `${HOME}/.zshrc`,
-    type: "file",
-    size: 42,
-    modifiedTimestamp: 1_700_000_000_000,
-    hidden: true,
-  },
-];
-
-function installElectronApi() {
-  const list = vi.fn(async (dirPath: string) => ({
-    success: true as const,
-    path: dirPath,
-    parent:
-      dirPath === "/" ? null : dirPath.split("/").slice(0, -1).join("/") || "/",
-    entries: dirPath === HOME ? entries : [],
-  }));
-  const api = {
-    isElectron: true,
-    localFs: {
-      home: vi.fn(async () => ({
-        success: true as const,
-        home: HOME,
-        separator: "/",
-        platform: "darwin",
-      })),
-      list,
-      mkdir: vi.fn(),
-      createFile: vi.fn(async () => ({ success: true as const, path: "" })),
-      rename: vi.fn(async () => ({ success: true as const, path: "" })),
-      trash: vi.fn(async () => ({
-        success: true as const,
-        trashed: 1,
-        failed: [],
-      })),
-      ensureDir: vi.fn(),
-      walk: vi.fn(),
-      reveal: vi.fn(),
-      open: vi.fn(),
-    },
-    localTransfer: {
-      upload: vi.fn(),
-      download: vi.fn(),
-      cancel: vi.fn(),
-      onProgress: vi.fn(() => () => {}),
-    },
-  };
-  (window as unknown as { electronAPI: unknown }).electronAPI = api;
-  (window as unknown as { IS_ELECTRON: boolean }).IS_ELECTRON = true;
-  return api;
-}
-
-function makeDataTransfer(
-  types: string[],
-  data: Record<string, string> = {},
-): DataTransfer {
-  const store: Record<string, string> = { ...data };
-  return {
-    types,
-    dropEffect: "none",
-    effectAllowed: "all",
-    files: [] as unknown as FileList,
-    items: [] as unknown as DataTransferItemList,
-    getData: (type: string) => store[type] ?? "",
-    setData: (type: string, value: string) => {
-      store[type] = value;
-      if (!types.includes(type)) types.push(type);
-    },
-    clearData: vi.fn(),
-    setDragImage: vi.fn(),
-  } as unknown as DataTransfer;
-}
-
-describe("LocalFilePane", () => {
-  beforeEach(() => {
-    localStorage.clear();
-    installElectronApi();
-  });
-
-  afterEach(() => {
-    delete (window as unknown as { electronAPI?: unknown }).electronAPI;
-  });
-
-  it("lists the home directory on mount and remembers the last path", async () => {
-    render(<LocalFilePane onRemoteItemsDropped={vi.fn()} />);
-
-    await waitFor(() =>
-      expect(screen.getByDisplayValue(HOME)).toBeInTheDocument(),
-    );
-    expect(
-      screen.getByText("fileManager.localItemCount:3"),
-    ).toBeInTheDocument();
-    expect(localStorage.getItem("termix:file-manager:local-pane:path")).toBe(
-      HOME,
-    );
-  });
-
-  it("navigates into a folder on double click", async () => {
-    const api = installElectronApi();
-    render(<LocalFilePane onRemoteItemsDropped={vi.fn()} />);
-    await waitFor(() =>
-      expect(screen.getByDisplayValue(HOME)).toBeInTheDocument(),
-    );
-
-    const row = document.querySelector(`[data-local-path="${HOME}/projects"]`);
-    expect(row).not.toBeNull();
-    fireEvent.click(row!, { detail: 2 });
-
-    await waitFor(() =>
-      expect(api.localFs.list).toHaveBeenCalledWith(`${HOME}/projects`),
-    );
-  });
-
-  it("accepts remote-grid drops and hands paths to the parent", async () => {
-    const onRemoteItemsDropped = vi.fn();
-    render(<LocalFilePane onRemoteItemsDropped={onRemoteItemsDropped} />);
-    await waitFor(() =>
-      expect(screen.getByDisplayValue(HOME)).toBeInTheDocument(),
-    );
-
-    const pane = screen.getByTestId("local-file-pane");
-    const payload = JSON.stringify({
-      type: "internal_files",
-      files: ["/srv/app/a.log", "/srv/app/dir"],
-    });
-    const dataTransfer = makeDataTransfer(
-      [REMOTE_FILES_DRAG_MIME, "text/plain"],
-      { "text/plain": payload, [REMOTE_FILES_DRAG_MIME]: "1" },
-    );
-
-    fireEvent.dragEnter(pane, { dataTransfer });
-    expect(
-      screen.getByText("fileManager.dropToDownloadHere"),
-    ).toBeInTheDocument();
-
-    fireEvent.drop(pane, { dataTransfer });
-    expect(onRemoteItemsDropped).toHaveBeenCalledWith(
-      ["/srv/app/a.log", "/srv/app/dir"],
-      HOME,
-    );
-    expect(
-      screen.queryByText("fileManager.dropToDownloadHere"),
-    ).not.toBeInTheDocument();
-  });
-
-  it("drops onto a folder row download into that folder", async () => {
-    const onRemoteItemsDropped = vi.fn();
-    render(<LocalFilePane onRemoteItemsDropped={onRemoteItemsDropped} />);
-    await waitFor(() =>
-      expect(screen.getByDisplayValue(HOME)).toBeInTheDocument(),
-    );
-
-    const folderRow = document.querySelector(
-      `[data-local-path="${HOME}/projects"]`,
-    )!;
-    const payload = JSON.stringify({
-      type: "internal_files",
-      files: ["/srv/app/a.log"],
-    });
-    const dataTransfer = makeDataTransfer(
-      [REMOTE_FILES_DRAG_MIME, "text/plain"],
-      { "text/plain": payload, [REMOTE_FILES_DRAG_MIME]: "1" },
-    );
-    fireEvent.dragOver(folderRow, { dataTransfer });
-    fireEvent.drop(folderRow, { dataTransfer });
-    expect(onRemoteItemsDropped).toHaveBeenCalledWith(
-      ["/srv/app/a.log"],
-      `${HOME}/projects`,
-    );
-  });
-
-  it("hides dotfiles when hidden files are toggled off", async () => {
-    render(<LocalFilePane onRemoteItemsDropped={vi.fn()} />);
-    await waitFor(() =>
-      expect(screen.getByDisplayValue(HOME)).toBeInTheDocument(),
-    );
-    expect(
-      document.querySelector(`[data-local-path="${HOME}/.zshrc"]`),
-    ).not.toBeNull();
-
-    fireEvent.click(screen.getByTitle("fileManager.localHideHidden"));
-    expect(
-      document.querySelector(`[data-local-path="${HOME}/.zshrc"]`),
-    ).toBeNull();
-    expect(
-      screen.getByText("fileManager.localItemCount:2"),
-    ).toBeInTheDocument();
-  });
-
-  it("opens a context menu for a row with entry actions", async () => {
-    const onUploadToRemote = vi.fn();
-    render(
-      <LocalFilePane
-        onRemoteItemsDropped={vi.fn()}
-        onUploadToRemote={onUploadToRemote}
-      />,
-    );
-    await waitFor(() =>
-      expect(screen.getByDisplayValue(HOME)).toBeInTheDocument(),
-    );
-
-    const row = document.querySelector(
-      `[data-local-path="${HOME}/notes.txt"]`,
-    )!;
-    fireEvent.contextMenu(row, { clientX: 40, clientY: 50 });
-
-    const menu = screen.getByTestId("local-file-context-menu");
-    expect(menu).toBeInTheDocument();
-    expect(screen.getByText("fileManager.localOpen")).toBeInTheDocument();
-    expect(screen.getByText("fileManager.rename")).toBeInTheDocument();
-    expect(
-      screen.getByText("fileManager.localMoveToTrash"),
-    ).toBeInTheDocument();
-    // Background-only actions are not offered for a row.
-    expect(screen.queryByText("fileManager.newFolder")).not.toBeInTheDocument();
-
-    fireEvent.click(screen.getByText("fileManager.localUploadToRemote"));
-    expect(onUploadToRemote).toHaveBeenCalledWith([`${HOME}/notes.txt`]);
-    expect(
-      screen.queryByTestId("local-file-context-menu"),
-    ).not.toBeInTheDocument();
-  });
-
-  it("acts on the whole selection when right-clicking a selected row", async () => {
-    const onUploadToRemote = vi.fn();
-    render(
-      <LocalFilePane
-        onRemoteItemsDropped={vi.fn()}
-        onUploadToRemote={onUploadToRemote}
-      />,
-    );
-    await waitFor(() =>
-      expect(screen.getByDisplayValue(HOME)).toBeInTheDocument(),
-    );
-
-    const projects = document.querySelector(
-      `[data-local-path="${HOME}/projects"]`,
-    )!;
-    const notes = document.querySelector(
-      `[data-local-path="${HOME}/notes.txt"]`,
-    )!;
-    fireEvent.click(projects);
-    fireEvent.click(notes, { metaKey: true });
-    fireEvent.contextMenu(notes, { clientX: 40, clientY: 50 });
-
-    fireEvent.click(screen.getByText("fileManager.localUploadToRemoteMany:2"));
-    expect(onUploadToRemote).toHaveBeenCalledWith(
-      expect.arrayContaining([`${HOME}/projects`, `${HOME}/notes.txt`]),
-    );
-    expect(onUploadToRemote.mock.calls[0][0]).toHaveLength(2);
-  });
-
-  it("offers folder-level actions on the background and creates a file", async () => {
-    const api = installElectronApi();
-    render(<LocalFilePane onRemoteItemsDropped={vi.fn()} />);
-    await waitFor(() =>
-      expect(screen.getByDisplayValue(HOME)).toBeInTheDocument(),
-    );
-
-    const body = screen
-      .getByText("fileManager.localItemCount:3")
-      .closest('[data-testid="local-file-pane"]')!
-      .querySelector(".thin-scrollbar")!;
-    fireEvent.contextMenu(body, { clientX: 100, clientY: 200 });
-
-    expect(screen.getByText("fileManager.newFolder")).toBeInTheDocument();
-    expect(screen.getByText("fileManager.refresh")).toBeInTheDocument();
-    expect(screen.queryByText("fileManager.rename")).not.toBeInTheDocument();
-
-    fireEvent.click(screen.getByText("fileManager.newFile"));
-    const input = screen.getByPlaceholderText("fileManager.newFile");
-    fireEvent.change(input, { target: { value: "todo.md" } });
-    fireEvent.keyDown(input, { key: "Enter" });
-
-    await waitFor(() =>
-      expect(api.localFs.createFile).toHaveBeenCalledWith(HOME, "todo.md"),
-    );
-  });
-
-  it("renames inline from the context menu", async () => {
-    const api = installElectronApi();
-    render(<LocalFilePane onRemoteItemsDropped={vi.fn()} />);
-    await waitFor(() =>
-      expect(screen.getByDisplayValue(HOME)).toBeInTheDocument(),
-    );
-
-    const row = document.querySelector(
-      `[data-local-path="${HOME}/notes.txt"]`,
-    )!;
-    fireEvent.contextMenu(row, { clientX: 40, clientY: 50 });
-    fireEvent.click(screen.getByText("fileManager.rename"));
-
-    const input = screen.getByDisplayValue("notes.txt");
-    fireEvent.change(input, { target: { value: "renamed.txt" } });
-    fireEvent.keyDown(input, { key: "Enter" });
-
-    await waitFor(() =>
-      expect(api.localFs.rename).toHaveBeenCalledWith(
-        `${HOME}/notes.txt`,
-        "renamed.txt",
-      ),
-    );
-  });
-
-  it("asks for confirmation before moving to the trash", async () => {
-    const api = installElectronApi();
-    render(<LocalFilePane onRemoteItemsDropped={vi.fn()} />);
-    await waitFor(() =>
-      expect(screen.getByDisplayValue(HOME)).toBeInTheDocument(),
-    );
-
-    const row = document.querySelector(
-      `[data-local-path="${HOME}/notes.txt"]`,
-    )!;
-    fireEvent.contextMenu(row, { clientX: 40, clientY: 50 });
-    fireEvent.click(screen.getByText("fileManager.localMoveToTrash"));
-
-    // Nothing is trashed until the toast's confirm action is clicked.
-    expect(api.localFs.trash).not.toHaveBeenCalled();
-    expect(sonnerToast).toHaveBeenCalledWith(
-      "fileManager.localTrashConfirmSingle",
-      expect.objectContaining({ action: expect.anything() }),
-    );
-    const call = sonnerToast.mock.calls.find(
-      (c) => c[0] === "fileManager.localTrashConfirmSingle",
-    )!;
-    (call[1] as { action: { onClick: () => void } }).action.onClick();
-
-    await waitFor(() =>
-      expect(api.localFs.trash).toHaveBeenCalledWith([`${HOME}/notes.txt`]),
-    );
-  });
-
-  it("shows a pinned .. entry that goes up on double click and accepts drops", async () => {
-    const api = installElectronApi();
-    const onRemoteItemsDropped = vi.fn();
-    render(<LocalFilePane onRemoteItemsDropped={onRemoteItemsDropped} />);
-    await waitFor(() =>
-      expect(screen.getByDisplayValue(HOME)).toBeInTheDocument(),
-    );
-
-    const parentRow = document.querySelector("[data-parent-entry]");
-    expect(parentRow).not.toBeNull();
-    // It is the first row, above the real entries.
-    const firstRow = screen
-      .getByTestId("local-file-pane")
-      .querySelector(".thin-scrollbar > *");
-    expect(firstRow).toBe(parentRow);
-
-    const payload = JSON.stringify({
-      type: "internal_files",
-      files: ["/srv/app/a.log"],
-    });
-    const dataTransfer = makeDataTransfer(
-      [REMOTE_FILES_DRAG_MIME, "text/plain"],
-      { "text/plain": payload, [REMOTE_FILES_DRAG_MIME]: "1" },
-    );
-    fireEvent.dragOver(parentRow!, { dataTransfer });
-    fireEvent.drop(parentRow!, { dataTransfer });
-    expect(onRemoteItemsDropped).toHaveBeenCalledWith(
-      ["/srv/app/a.log"],
-      "/Users",
-    );
-
-    fireEvent.click(parentRow!, { detail: 2 });
-    await waitFor(() =>
-      expect(api.localFs.list).toHaveBeenCalledWith("/Users"),
-    );
-  });
-
-  it("lets the header context menu hide and show columns", async () => {
-    render(<LocalFilePane onRemoteItemsDropped={vi.fn()} />);
-    await waitFor(() =>
-      expect(screen.getByDisplayValue(HOME)).toBeInTheDocument(),
-    );
-
-    const kindHeader = screen.getByText("fileManager.kind");
-    const kindCellsBefore = document.querySelectorAll(
-      `[data-local-path="${HOME}/notes.txt"] > span`,
-    ).length;
-
-    fireEvent.contextMenu(kindHeader, { clientX: 300, clientY: 60 });
-    const menu = screen.getByTestId("column-visibility-menu");
-    expect(menu).toBeInTheDocument();
-    fireEvent.click(
-      screen.getByRole("menuitemcheckbox", { name: "fileManager.kind" }),
-    );
-
-    // The sortable header button is gone; only the menu's checkbox remains.
-    expect(
-      screen.queryByRole("button", { name: "fileManager.kind" }),
-    ).toBeNull();
-    expect(
-      document.querySelectorAll(`[data-local-path="${HOME}/notes.txt"] > span`)
-        .length,
-    ).toBe(kindCellsBefore - 1);
-    expect(
-      JSON.parse(
-        localStorage.getItem("termix:file-manager:columns:local:hidden")!,
-      ),
-    ).toEqual(["kind"]);
-  });
-
-  it("ignores OS file drags (those belong to the remote grid)", async () => {
-    const onRemoteItemsDropped = vi.fn();
-    render(<LocalFilePane onRemoteItemsDropped={onRemoteItemsDropped} />);
-    await waitFor(() =>
-      expect(screen.getByDisplayValue(HOME)).toBeInTheDocument(),
-    );
-
-    const pane = screen.getByTestId("local-file-pane");
-    const dataTransfer = makeDataTransfer(["Files"]);
-    fireEvent.dragEnter(pane, { dataTransfer });
-    expect(
-      screen.queryByText("fileManager.dropToDownloadHere"),
-    ).not.toBeInTheDocument();
-    fireEvent.drop(pane, { dataTransfer });
-    expect(onRemoteItemsDropped).not.toHaveBeenCalled();
-  });
-
-  it("puts a typed payload on drags that start in the pane", async () => {
-    render(<LocalFilePane onRemoteItemsDropped={vi.fn()} />);
-    await waitFor(() =>
-      expect(screen.getByDisplayValue(HOME)).toBeInTheDocument(),
-    );
-
-    const row = document.querySelector(`[data-local-path="${HOME}/notes.txt"]`);
-    expect(row).not.toBeNull();
-
-    const dataTransfer = makeDataTransfer([]);
-    fireEvent.dragStart(row!, { dataTransfer });
-    expect(dataTransfer.types).toContain(LOCAL_FILES_DRAG_MIME);
-    expect(JSON.parse(dataTransfer.getData("text/plain"))).toEqual({
-      type: "local_files",
-      paths: [`${HOME}/notes.txt`],
-    });
-  });
-});
diff --git a/plugins/file-manager/tests/frontend/SftpTransferTab.test.tsx b/plugins/file-manager/tests/frontend/SftpTransferTab.test.tsx
deleted file mode 100644
index af83eb617..000000000
--- a/plugins/file-manager/tests/frontend/SftpTransferTab.test.tsx
+++ /dev/null
@@ -1,277 +0,0 @@
-import { fireEvent, render, screen, waitFor } from "@testing-library/react";
-import { toast } from "sonner";
-import userEvent from "@testing-library/user-event";
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-import { SftpTransferTab } from "../../src/frontend/SftpTransferTab";
-
-const api = vi.hoisted(() => ({
-  confirmBeforeTrash: undefined as boolean | undefined,
-  addTransferRecent: vi.fn(),
-  browseSSHDirectory: vi.fn(),
-  changeSSHPermissions: vi.fn(),
-  createSSHFolder: vi.fn(),
-  deleteSSHItem: vi.fn(),
-  ensureSSHSessionForHost: vi.fn(),
-  getSSHHosts: vi.fn(),
-  getTransferProgressPercent: vi.fn(() => undefined),
-  renameSSHItem: vi.fn(),
-  transferToHost: vi.fn(),
-  beginTransferProgressMonitoring: vi.fn(),
-}));
-
-vi.mock("../../src/frontend/api/transfer-api", () => ({
-  addTransferRecent: api.addTransferRecent,
-  getTransferProgressPercent: api.getTransferProgressPercent,
-  transferToHost: api.transferToHost,
-}));
-
-vi.mock("../../src/frontend/api/hosts", () => ({
-  getSSHHosts: api.getSSHHosts,
-}));
-
-vi.mock("../../src/frontend/api/ssh-file-operations-api", () => ({
-  browseSSHDirectory: api.browseSSHDirectory,
-  changeSSHPermissions: api.changeSSHPermissions,
-  createSSHFolder: api.createSSHFolder,
-  deleteSSHItem: api.deleteSSHItem,
-  ensureSSHSessionForHost: api.ensureSSHSessionForHost,
-  renameSSHItem: api.renameSSHItem,
-}));
-
-vi.mock("../../src/frontend/transferProgressMonitor", () => ({
-  beginTransferProgressMonitoring: api.beginTransferProgressMonitoring,
-}));
-
-vi.mock("../../src/frontend/transferMetricsFormat", () => ({
-  createFormatTransferMetrics: () => () => "",
-}));
-
-vi.mock("@termix/plugin-sdk/frontend", async (importOriginal) => ({
-  ...(await importOriginal<typeof import("@termix/plugin-sdk/frontend")>()),
-  useTranslation: () => ({ t: (key: string) => key, language: "en" }),
-  useSettings: () => ({
-    values: { confirmBeforeTrash: api.confirmBeforeTrash },
-  }),
-}));
-
-vi.mock("sonner", () => ({
-  toast: { success: vi.fn(), error: vi.fn() },
-}));
-
-beforeEach(() => {
-  vi.clearAllMocks();
-  api.confirmBeforeTrash = undefined;
-  api.getSSHHosts.mockResolvedValue([
-    {
-      id: 1,
-      name: "prod",
-      ip: "10.0.0.1",
-      connectionType: "ssh",
-      pluginSettings: {
-        "file-manager": { enableFileManager: true, defaultPath: "/srv" },
-      },
-    },
-    {
-      id: 2,
-      name: "backup",
-      ip: "10.0.0.2",
-      connectionType: "ssh",
-      pluginSettings: {
-        "file-manager": { enableFileManager: true, defaultPath: "/srv" },
-      },
-    },
-  ]);
-  api.ensureSSHSessionForHost.mockImplementation(async (host) => ({
-    state: "ready",
-    sessionId: String(host.id),
-  }));
-  api.browseSSHDirectory.mockImplementation(
-    async (sessionId: string, path: string) => ({
-      status: "ok",
-      path,
-      files: [
-        {
-          name: `remote-${sessionId}.txt`,
-          type: "file",
-          size: 24,
-          modified: "2026-07-18T10:30:00.000Z",
-        },
-      ],
-    }),
-  );
-  api.transferToHost.mockResolvedValue({ transferId: "transfer-1" });
-  api.beginTransferProgressMonitoring.mockReturnValue({
-    toastId: "toast-1",
-    waitForCompletion: Promise.resolve({
-      transferId: "transfer-1",
-      status: "success",
-      phase: "transferring",
-    }),
-  });
-});
-
-async function selectHosts() {
-  const selects = await screen.findAllByRole("combobox");
-  fireEvent.change(selects[0], { target: { value: "1" } });
-  fireEvent.change(selects[1], { target: { value: "2" } });
-  await screen.findByText("remote-1.txt");
-  await screen.findByText("remote-2.txt");
-}
-
-describe("SftpTransferTab", () => {
-  it("opens the server login directory when no default path is configured", async () => {
-    const hosts = await api.getSSHHosts();
-    api.getSSHHosts.mockResolvedValue(
-      hosts.map((host: object) => ({ ...host, pluginSettings: {} })),
-    );
-    api.browseSSHDirectory.mockImplementation(
-      async (sessionId: string, path: string) => ({
-        status: "ok",
-        path: path === "." ? `/srv/home-${sessionId}` : path,
-        files: [
-          {
-            name: `remote-${sessionId}.txt`,
-            type: "file",
-            path: `/srv/home-${sessionId}/remote-${sessionId}.txt`,
-            size: 1,
-          },
-        ],
-      }),
-    );
-    render(<SftpTransferTab />);
-    await selectHosts();
-    await waitFor(() => {
-      expect(api.browseSSHDirectory).toHaveBeenCalledWith("1", ".");
-      expect(api.browseSSHDirectory).toHaveBeenCalledWith("2", ".");
-    });
-    expect(await screen.findByDisplayValue("/srv/home-1")).toBeTruthy();
-    expect(await screen.findByDisplayValue("/srv/home-2")).toBeTruthy();
-  });
-
-  it("loads file manager-enabled hosts into both host pickers", async () => {
-    render(<SftpTransferTab />);
-    const selects = await screen.findAllByRole("combobox");
-    expect(selects).toHaveLength(2);
-    expect(api.getSSHHosts).toHaveBeenCalled();
-  });
-
-  it("copies a source server file to the destination server via the context menu", async () => {
-    render(<SftpTransferTab />);
-    await selectHosts();
-
-    fireEvent.contextMenu(screen.getByText("remote-1.txt"));
-    await userEvent.click(screen.getByText("sftpTransfer.copyToTarget"));
-
-    await waitFor(() => {
-      // A single file transfer sends the full destination path, filename
-      // included, rather than just the directory. See #1304: sending a file on
-      // its own used to drop it.
-      expect(api.transferToHost).toHaveBeenCalledWith(
-        "1",
-        ["/srv/remote-1.txt"],
-        "2",
-        "/srv/remote-1.txt",
-        false,
-        "auto",
-      );
-    });
-  });
-
-  it("records the destination as a transfer recent after a successful copy", async () => {
-    render(<SftpTransferTab />);
-    await selectHosts();
-
-    fireEvent.contextMenu(screen.getByText("remote-1.txt"));
-    await userEvent.click(screen.getByText("sftpTransfer.copyToTarget"));
-
-    await waitFor(() => {
-      expect(api.addTransferRecent).toHaveBeenCalledWith(1, 2, "/srv", "/srv");
-    });
-  });
-
-  it("blocks a same-host transfer where the destination is inside the source path", async () => {
-    render(<SftpTransferTab />);
-    const selects = await screen.findAllByRole("combobox");
-    fireEvent.change(selects[0], { target: { value: "1" } });
-    fireEvent.change(selects[1], { target: { value: "1" } });
-    const rows = await screen.findAllByText("remote-1.txt");
-
-    // Destination pane starts at the same "/srv" listing as the source, so
-    // browsing into the selected source file's own path (as if it were a
-    // folder) makes the destination nested inside the source selection.
-    const destPathInput = screen.getAllByDisplayValue("/srv")[1];
-    fireEvent.change(destPathInput, {
-      target: { value: "/srv/remote-1.txt" },
-    });
-    fireEvent.keyDown(destPathInput, { key: "Enter" });
-    await waitFor(() =>
-      expect(api.browseSSHDirectory).toHaveBeenCalledTimes(3),
-    );
-
-    fireEvent.contextMenu(rows[0]);
-    await userEvent.click(screen.getByText("sftpTransfer.copyToTarget"));
-
-    await waitFor(() => {
-      expect(toast.error).toHaveBeenCalledWith(
-        "sftpTransfer.destinationInsideSource",
-      );
-    });
-    expect(api.transferToHost).not.toHaveBeenCalled();
-  });
-
-  it("renames a remote file from the row context menu", async () => {
-    render(<SftpTransferTab />);
-    await selectHosts();
-
-    fireEvent.contextMenu(screen.getByText("remote-1.txt"));
-    await userEvent.click(screen.getByText("sftpTransfer.rename"));
-    const nameInput = screen.getByDisplayValue("remote-1.txt");
-    await userEvent.clear(nameInput);
-    await userEvent.type(nameInput, "renamed.txt");
-    await userEvent.click(screen.getByText("sftpTransfer.save"));
-
-    await waitFor(() => {
-      expect(api.renameSSHItem).toHaveBeenCalledWith(
-        "1",
-        "/srv/remote-1.txt",
-        "renamed.txt",
-      );
-    });
-  });
-
-  it("moves files to trash directly when confirmation is disabled", async () => {
-    api.confirmBeforeTrash = false;
-    render(<SftpTransferTab />);
-    await selectHosts();
-    fireEvent.contextMenu(screen.getByText("remote-1.txt"));
-    await userEvent.click(screen.getByText("sftpTransfer.delete"));
-    await waitFor(() =>
-      expect(api.deleteSSHItem).toHaveBeenCalledWith(
-        "1",
-        "/srv/remote-1.txt",
-        false,
-      ),
-    );
-    expect(screen.queryByText("sftpTransfer.deleteSelectedItems")).toBeNull();
-  });
-
-  it("deletes a remote file after confirming", async () => {
-    render(<SftpTransferTab />);
-    await selectHosts();
-
-    fireEvent.contextMenu(screen.getByText("remote-1.txt"));
-    await userEvent.click(screen.getByText("sftpTransfer.delete"));
-    expect(api.deleteSSHItem).not.toHaveBeenCalled();
-    const confirmButtons = await screen.findAllByText("sftpTransfer.delete");
-    await userEvent.click(confirmButtons[confirmButtons.length - 1]);
-
-    await waitFor(() => {
-      expect(api.deleteSSHItem).toHaveBeenCalledWith(
-        "1",
-        "/srv/remote-1.txt",
-        false,
-      );
-    });
-  });
-});
diff --git a/plugins/file-manager/tests/frontend/activate.test.tsx b/plugins/file-manager/tests/frontend/activate.test.tsx
deleted file mode 100644
index 049cd670a..000000000
--- a/plugins/file-manager/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,84 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-const declared = (views?: Array<{ id: string }>) =>
-  (views ?? []).map((view) => view.id).sort();
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe(`${manifest.id} activate`, () => {
-  it("activates and registers only views its manifest declares", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    const contributes = manifest.contributes as unknown as Record<
-      string,
-      Array<{ id: string }> | undefined
-    >;
-    const tabs = declared(contributes.tabs);
-    const panels = [...declared(contributes.panels), ...tabs];
-    for (const id of rendered.registered.tabs()) expect(tabs).toContain(id);
-    for (const id of rendered.registered.panels()) expect(panels).toContain(id);
-  });
-
-  it("registers the files and sftp tabs", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.tabs().sort()).toEqual(["files", "sftp"]);
-  });
-
-  it("registers the sftp rail item pointing at the sftp tab", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    const railItems = rendered.registered.railItems();
-    expect(railItems.map((item) => item.id)).toContain("sftp");
-  });
-
-  it("registers a files host action opening the files tab", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    const hostActions = rendered.registered.hostActions();
-    expect(hostActions).toContainEqual(
-      expect.objectContaining({ id: "files", tabType: "files" }),
-    );
-  });
-
-  it("leaves its host fields to the schema-driven Plugins tab", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.hostEditorSections()).toEqual([]);
-  });
-
-  it("registers its open actions and the tab menu entry", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.actions().sort()).toEqual([
-      "file-manager.openFromTab",
-      "files.openEditor",
-      "files.openHost",
-    ]);
-    expect(rendered.registered.slot("tab.menu")).toEqual([
-      "file-manager.openFromTab",
-    ]);
-  });
-
-  it("removes everything it registered on deactivate", async () => {
-    const app = await renderWithApp(plugin, { manifest, locales });
-    await app.deactivate();
-    expect(app.registered.tabs()).toEqual([]);
-    expect(app.registered.panels()).toEqual([]);
-    expect(app.registered.railItems()).toEqual([]);
-    expect(app.registered.hostActions()).toEqual([]);
-    expect(app.registered.hostEditorSections()).toEqual([]);
-    expect(app.registered.dashboardCards()).toEqual([]);
-    expect(app.registered.settingsComponents()).toEqual([]);
-    expect(app.registered.actions()).toEqual([]);
-  });
-});
diff --git a/plugins/file-manager/tests/frontend/api/ssh-file-operations-api.test.ts b/plugins/file-manager/tests/frontend/api/ssh-file-operations-api.test.ts
deleted file mode 100644
index 307e5d78d..000000000
--- a/plugins/file-manager/tests/frontend/api/ssh-file-operations-api.test.ts
+++ /dev/null
@@ -1,146 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-const fileManagerApiMock = vi.hoisted(() => ({
-  post: vi.fn(async () => ({ data: { complete: false } })),
-  postForm: vi.fn(async () => ({ data: {} })),
-}));
-
-vi.mock("../../../src/frontend/api/client", () => ({
-  fileManagerApi: () => ({ defaults: {} }),
-  getFileManagerApiForSession: () => fileManagerApiMock,
-  handleApiError: (error: unknown) => {
-    throw error;
-  },
-  setSessionOrigin: vi.fn(),
-  clearSessionOrigin: vi.fn(),
-}));
-vi.mock("@termix/plugin-sdk/ui", async (importOriginal) => ({
-  ...(await importOriginal<object>()),
-  resolveConnectionOrigin: vi.fn(),
-  createFrontendLogger: () => ({
-    info: vi.fn(),
-    success: vi.fn(),
-    warn: vi.fn(),
-    error: vi.fn(),
-  }),
-}));
-vi.mock("../../../src/frontend/lib/file-list-request-cache", () => ({
-  getCachedFileList: vi.fn(),
-}));
-vi.mock("../../../src/frontend/lib/file-content-request-cache", () => ({
-  getCachedFileContent: vi.fn(),
-  invalidateCachedFileContent: vi.fn(),
-}));
-
-import { uploadSSHFile } from "../../../src/frontend/api/ssh-file-operations-api";
-
-describe("chunked SSH file uploads", () => {
-  beforeEach(() => {
-    fileManagerApiMock.post.mockClear();
-    fileManagerApiMock.postForm.mockClear();
-  });
-
-  it("sends raw chunks with the byte offset expected by the server", async () => {
-    const fileSize = 1.5 * 1024 * 1024 * 1024 + 1;
-    const file = {
-      size: fileSize,
-      slice: vi.fn(() => new Blob(["chunk"])),
-    } as unknown as File;
-
-    await uploadSSHFile("session-1", "/uploads", "archive.img", file);
-
-    expect(fileManagerApiMock.post).toHaveBeenCalledTimes(193);
-    expect(fileManagerApiMock.post).toHaveBeenNthCalledWith(
-      1,
-      "/uploadFileChunk",
-      expect.any(Blob),
-      {
-        params: {
-          sessionId: "session-1",
-          path: "/uploads",
-          fileName: "archive.img",
-          offset: 0,
-          totalSize: fileSize,
-        },
-        headers: { "Content-Type": "application/octet-stream" },
-        timeout: 0,
-        signal: undefined,
-      },
-    );
-    expect(fileManagerApiMock.post).toHaveBeenLastCalledWith(
-      "/uploadFileChunk",
-      expect.any(Blob),
-      expect.objectContaining({
-        params: expect.objectContaining({ offset: 1.5 * 1024 * 1024 * 1024 }),
-      }),
-    );
-  });
-});
-
-describe("upload cancellation", () => {
-  it("passes the signal to multipart uploads", async () => {
-    const controller = new AbortController();
-    await uploadSSHFile(
-      "s",
-      "/",
-      "a.txt",
-      new File(["data"], "a.txt"),
-      undefined,
-      undefined,
-      undefined,
-      controller.signal,
-    );
-    expect(fileManagerApiMock.postForm).toHaveBeenLastCalledWith(
-      "/uploadFileStream",
-      expect.any(FormData),
-      expect.objectContaining({ signal: controller.signal }),
-    );
-  });
-
-  it("does not start an already cancelled upload", async () => {
-    const controller = new AbortController();
-    controller.abort();
-    fileManagerApiMock.postForm.mockClear();
-    await expect(
-      uploadSSHFile(
-        "s",
-        "/",
-        "a.txt",
-        new File(["data"], "a.txt"),
-        undefined,
-        undefined,
-        undefined,
-        controller.signal,
-      ),
-    ).rejects.toMatchObject({ name: "AbortError" });
-    expect(fileManagerApiMock.postForm).not.toHaveBeenCalled();
-  });
-
-  it("stops scheduling chunks after cancellation", async () => {
-    const controller = new AbortController();
-    fileManagerApiMock.post.mockClear();
-    const file = {
-      size: 2 * 1024 ** 3,
-      slice: vi.fn(() => new Blob(["chunk"])),
-    } as unknown as File;
-    await expect(
-      uploadSSHFile(
-        "s",
-        "/",
-        "large.bin",
-        file,
-        undefined,
-        undefined,
-        () => controller.abort(),
-        controller.signal,
-      ),
-    ).rejects.toMatchObject({ name: "AbortError" });
-    expect(fileManagerApiMock.post).toHaveBeenCalledOnce();
-    expect(fileManagerApiMock.post).toHaveBeenCalledWith(
-      "/uploadFileChunk",
-      expect.any(Blob),
-      expect.objectContaining({ signal: controller.signal }),
-    );
-    expect(file.slice).toHaveBeenCalledOnce();
-  });
-});
diff --git a/plugins/file-manager/tests/frontend/components/MarkdownRenderer.test.tsx b/plugins/file-manager/tests/frontend/components/MarkdownRenderer.test.tsx
deleted file mode 100644
index 27fefea18..000000000
--- a/plugins/file-manager/tests/frontend/components/MarkdownRenderer.test.tsx
+++ /dev/null
@@ -1,43 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { cleanup, fireEvent, render, screen } from "@testing-library/react";
-import "@testing-library/jest-dom/vitest";
-import { MarkdownRenderer } from "../../../src/frontend/components/MarkdownRenderer";
-
-afterEach(cleanup);
-
-describe("Markdown preview text copying", () => {
-  it.each([false, true])(
-    "supports copying in compact=%s previews",
-    (compact) => {
-      const fileShortcut = vi.fn();
-      document.addEventListener("keydown", fileShortcut);
-      try {
-        const { container } = render(
-          <div className="select-none">
-            <MarkdownRenderer
-              compact={compact}
-              content={"# Preview\n\nCopy this text."}
-            />
-          </div>,
-        );
-        const preview = container.querySelector<HTMLElement>(".select-text")!;
-        preview.focus();
-        expect(preview).toHaveFocus();
-        expect(
-          screen.getByRole("heading", { name: "Preview" }),
-        ).toBeInTheDocument();
-        for (const modifier of [{ ctrlKey: true }, { metaKey: true }]) {
-          expect(fireEvent.keyDown(preview, { key: "c", ...modifier })).toBe(
-            true,
-          );
-        }
-        expect(fileShortcut).not.toHaveBeenCalled();
-        fireEvent.keyDown(preview, { key: "Escape" });
-        expect(fileShortcut).toHaveBeenCalledTimes(1);
-        expect(fireEvent.contextMenu(preview)).toBe(true);
-      } finally {
-        document.removeEventListener("keydown", fileShortcut);
-      }
-    },
-  );
-});
diff --git a/plugins/file-manager/tests/frontend/components/TransferProgressBar.test.tsx b/plugins/file-manager/tests/frontend/components/TransferProgressBar.test.tsx
deleted file mode 100644
index 60dd9a366..000000000
--- a/plugins/file-manager/tests/frontend/components/TransferProgressBar.test.tsx
+++ /dev/null
@@ -1,61 +0,0 @@
-import { cleanup, render, screen } from "@testing-library/react";
-import { afterEach, describe, expect, it } from "vitest";
-
-import { TransferProgressBar } from "../../../src/frontend/components/TransferProgressBar";
-
-afterEach(cleanup);
-
-describe("TransferProgressBar", () => {
-  it("exposes determinate progress and drives the fill with a transform", () => {
-    const { container } = render(
-      <TransferProgressBar value={42} label="Uploading archive" />,
-    );
-
-    const progress = screen.getByRole("progressbar", {
-      name: "Uploading archive",
-    });
-    expect(progress.getAttribute("aria-valuenow")).toBe("42");
-    expect(progress.getAttribute("aria-busy")).toBe("false");
-    expect(
-      container
-        .querySelector<HTMLElement>(".transfer-progress-fill")
-        ?.style.getPropertyValue("--transfer-progress"),
-    ).toBe("0.42");
-  });
-
-  it("clamps invalid percentages before exposing them", () => {
-    const { rerender } = render(
-      <TransferProgressBar value={140} label="Uploading archive" />,
-    );
-
-    expect(screen.getByRole("progressbar").getAttribute("aria-valuenow")).toBe(
-      "100",
-    );
-
-    rerender(<TransferProgressBar value={-20} label="Uploading archive" />);
-    expect(screen.getByRole("progressbar").getAttribute("aria-valuenow")).toBe(
-      "0",
-    );
-  });
-
-  it("marks unknown and stalled progress without inventing a percentage", () => {
-    const { container } = render(
-      <TransferProgressBar label="Reconnecting" stalled />,
-    );
-
-    const progress = screen.getByRole("progressbar");
-    expect(progress.hasAttribute("aria-valuenow")).toBe(false);
-    expect(progress.getAttribute("aria-busy")).toBe("true");
-    expect(progress.getAttribute("data-stalled")).toBe("true");
-    expect(
-      container
-        .querySelector(".transfer-progress-fill")
-        ?.classList.contains("transfer-progress-indeterminate"),
-    ).toBe(true);
-    expect(
-      container
-        .querySelector(".transfer-progress-fill")
-        ?.classList.contains("transfer-progress-stalled"),
-    ).toBe(true);
-  });
-});
diff --git a/plugins/file-manager/tests/frontend/components/download-progress.test.tsx b/plugins/file-manager/tests/frontend/components/download-progress.test.tsx
deleted file mode 100644
index dcc443fcf..000000000
--- a/plugins/file-manager/tests/frontend/components/download-progress.test.tsx
+++ /dev/null
@@ -1,180 +0,0 @@
-import "@testing-library/jest-dom/vitest";
-import React from "react";
-import {
-  act,
-  cleanup,
-  fireEvent,
-  render,
-  screen,
-  waitFor,
-} from "@testing-library/react";
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { toast } from "sonner";
-import { FileWindow } from "../../../src/frontend/components/FileWindow";
-import { DiffViewer } from "../../../src/frontend/components/DiffViewer";
-import type { FileItem, SSHHost } from "../../../src/frontend/host-types";
-
-const api = vi.hoisted(() => ({
-  downloadSSHFileStream: vi.fn(),
-  downloadSSHFile: vi.fn(async () => ({ content: "eA==" })),
-  readSSHFile: vi.fn(async () => ({ content: "text", encoding: "utf8" })),
-  getSSHStatus: vi.fn(async () => ({ connected: true })),
-  connectSSH: vi.fn(),
-  writeSSHFile: vi.fn(),
-}));
-vi.mock("../../../src/frontend/api/ssh-file-operations-api", () => api);
-vi.mock("sonner", () => ({
-  toast: { loading: vi.fn(), success: vi.fn(), error: vi.fn() },
-}));
-vi.mock("@termix/plugin-sdk/frontend", async (importOriginal) => ({
-  ...(await importOriginal<typeof import("@termix/plugin-sdk/frontend")>()),
-  useTranslation: () => ({
-    t: (key: string, params?: { name?: string }) =>
-      params?.name ? `${key}: ${params.name}` : key,
-  }),
-}));
-vi.mock("../../../src/frontend/components/WindowManager", () => ({
-  useWindowManager: () => ({
-    windows: [{ id: "preview" }],
-    closeWindow: vi.fn(),
-    maximizeWindow: vi.fn(),
-    focusWindow: vi.fn(),
-  }),
-}));
-vi.mock("../../../src/frontend/components/DraggableWindow", () => ({
-  DraggableWindow: ({ children }: { children: React.ReactNode }) => (
-    <>{children}</>
-  ),
-}));
-vi.mock("../../../src/frontend/components/FileViewer", () => ({
-  FileViewer: ({ onDownload }: { onDownload: () => void }) => (
-    <button onClick={onDownload}>download-preview</button>
-  ),
-}));
-vi.mock("@monaco-editor/react", () => ({ DiffEditor: () => null }));
-
-const file1: FileItem = { name: "one.txt", path: "/one.txt", type: "file" };
-const file2: FileItem = { name: "two.txt", path: "/two.txt", type: "file" };
-const host = { id: 1, name: "host", ip: "127.0.0.1", port: 22 } as SSHHost;
-let transfers: Array<{
-  progress: (event: { loaded: number; total?: number }) => void;
-  resolve: () => void;
-  reject: (error: Error) => void;
-}>;
-
-beforeEach(() => {
-  vi.clearAllMocks();
-  api.connectSSH.mockReset();
-  let nextId = 0;
-  vi.mocked(toast.loading).mockImplementation(
-    (_node, options) => options?.id ?? ++nextId,
-  );
-  transfers = [];
-  api.downloadSSHFileStream.mockImplementation(
-    (_session, _path, progress) =>
-      new Promise<void>((resolve, reject) => {
-        transfers.push({ progress, resolve, reject });
-      }),
-  );
-});
-afterEach(cleanup);
-
-async function open(kind: string) {
-  if (kind === "preview") {
-    render(
-      <FileWindow
-        windowId="preview"
-        file={{ ...file1 }}
-        sshSessionId="session"
-        sshHost={host}
-      />,
-    );
-    return screen.findByRole("button", { name: "download-preview" });
-  }
-  render(
-    <DiffViewer
-      file1={file1}
-      file2={file2}
-      sshSessionId="session"
-      sshHost={host}
-    />,
-  );
-  return screen.findByRole("button", { name: file1.name });
-}
-
-describe.each(["preview", "comparison"])("%s download feedback", (kind) => {
-  it("clears the loading state if the connection check fails", async () => {
-    const button = await open(kind);
-    api.getSSHStatus.mockRejectedValueOnce(new Error("connection failed"));
-    api.connectSSH.mockRejectedValueOnce(new Error("connection failed"));
-    fireEvent.click(button);
-    await waitFor(() => expect(toast.error).toHaveBeenCalled());
-    const id = vi.mocked(toast.loading).mock.results[0].value;
-    expect(toast.error).toHaveBeenLastCalledWith(expect.any(String), {
-      id,
-      duration: undefined,
-    });
-    expect(api.downloadSSHFileStream).not.toHaveBeenCalled();
-  });
-
-  it("updates one progress toast, then replaces it on completion", async () => {
-    fireEvent.click(await open(kind));
-    await waitFor(() => expect(transfers).toHaveLength(1));
-    const id = vi.mocked(toast.loading).mock.results[0].value;
-    expect(toast.loading).toHaveBeenCalledWith(expect.anything(), {
-      duration: Infinity,
-    });
-    expect(toast.success).not.toHaveBeenCalled();
-    act(() => transfers[0].progress({ loaded: 50, total: 100 }));
-    const last = vi.mocked(toast.loading).mock.calls.at(-1)!;
-    expect(last[1]).toEqual({ id, duration: Infinity });
-    render(<>{last[0] as React.ReactNode}</>);
-    expect(screen.getByRole("progressbar")).toHaveAttribute(
-      "aria-valuenow",
-      "50",
-    );
-    await act(async () => transfers[0].resolve());
-    expect(toast.success).toHaveBeenCalledWith(expect.any(String), {
-      id,
-      duration: undefined,
-    });
-    expect(api.downloadSSHFile).not.toHaveBeenCalled();
-  });
-
-  it("replaces the loading toast with an error when the download fails", async () => {
-    fireEvent.click(await open(kind));
-    await waitFor(() => expect(transfers).toHaveLength(1));
-    const id = vi.mocked(toast.loading).mock.results[0].value;
-    await act(async () => transfers[0].reject(new Error("read failed")));
-    expect(toast.error).toHaveBeenCalledWith(
-      expect.stringContaining("read failed"),
-      { id, duration: undefined },
-    );
-    expect(toast.success).not.toHaveBeenCalled();
-  });
-});
-
-it("keeps simultaneous comparison downloads in separate toasts", async () => {
-  fireEvent.click(await open("comparison"));
-  fireEvent.click(screen.getByRole("button", { name: file2.name }));
-  await waitFor(() => expect(transfers).toHaveLength(2));
-  const ids = vi
-    .mocked(toast.loading)
-    .mock.results.map((result) => result.value);
-  expect(ids[0]).not.toBe(ids[1]);
-  act(() => transfers[0].progress({ loaded: 1 }));
-  expect(toast.loading).toHaveBeenLastCalledWith(expect.anything(), {
-    id: ids[0],
-    duration: Infinity,
-  });
-  act(() => transfers[1].progress({ loaded: 2 }));
-  expect(toast.loading).toHaveBeenLastCalledWith(expect.anything(), {
-    id: ids[1],
-    duration: Infinity,
-  });
-  await act(async () => {
-    transfers[1].resolve();
-    transfers[0].resolve();
-  });
-  expect(toast.success).toHaveBeenCalledTimes(2);
-});
diff --git a/plugins/file-manager/tests/frontend/disk-info.test.ts b/plugins/file-manager/tests/frontend/disk-info.test.ts
deleted file mode 100644
index e4ea96ece..000000000
--- a/plugins/file-manager/tests/frontend/disk-info.test.ts
+++ /dev/null
@@ -1,35 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  mountForPath,
-  type DiskFilesystem,
-} from "../../src/frontend/disk-info";
-
-function fs(mount: string): DiskFilesystem {
-  return {
-    filesystem: mount,
-    type: "ext4",
-    mount,
-    percent: 10,
-    usedHuman: "1G",
-    totalHuman: "10G",
-    availableHuman: "9G",
-    usedBytes: 1,
-    totalBytes: 10,
-    availableBytes: 9,
-  };
-}
-
-describe("mountForPath", () => {
-  const list = [fs("/"), fs("/volume1"), fs("/volume10")];
-
-  it("picks the deepest mount that holds the path", () => {
-    expect(mountForPath(list, "/volume1/share")?.mount).toBe("/volume1");
-    expect(mountForPath(list, "/volume10")?.mount).toBe("/volume10");
-    expect(mountForPath(list, "/etc")?.mount).toBe("/");
-  });
-
-  it("returns null without a path or mounts", () => {
-    expect(mountForPath(list, null)).toBeNull();
-    expect(mountForPath([], "/etc")).toBeNull();
-  });
-});
diff --git a/plugins/file-manager/tests/frontend/file-manager-utils.test.ts b/plugins/file-manager/tests/frontend/file-manager-utils.test.ts
deleted file mode 100644
index 827949d68..000000000
--- a/plugins/file-manager/tests/frontend/file-manager-utils.test.ts
+++ /dev/null
@@ -1,53 +0,0 @@
-import { describe, it, expect } from "vitest";
-import {
-  formatFileSize,
-  runWithConcurrency,
-} from "../../src/frontend/file-manager-utils.js";
-
-describe("formatFileSize", () => {
-  it("returns a dash for undefined or null", () => {
-    expect(formatFileSize(undefined)).toBe("-");
-    expect(formatFileSize(null as unknown as number)).toBe("-");
-  });
-
-  it("returns 0 B for zero", () => {
-    expect(formatFileSize(0)).toBe("0 B");
-  });
-
-  it("formats bytes without decimals", () => {
-    expect(formatFileSize(512)).toBe("512 B");
-    expect(formatFileSize(1023)).toBe("1023 B");
-  });
-
-  it("formats kilobytes with one decimal under 10", () => {
-    expect(formatFileSize(1024)).toBe("1.0 KB");
-    expect(formatFileSize(1536)).toBe("1.5 KB");
-  });
-
-  it("rounds to whole numbers at or above 10 units", () => {
-    expect(formatFileSize(10 * 1024)).toBe("10 KB");
-    expect(formatFileSize(1024 * 1024)).toBe("1.0 MB");
-  });
-
-  it("scales up to larger units", () => {
-    expect(formatFileSize(1024 * 1024 * 1024)).toBe("1.0 GB");
-    expect(formatFileSize(1024 * 1024 * 1024 * 1024)).toBe("1.0 TB");
-  });
-
-  it("limits concurrent work", async () => {
-    let active = 0;
-    let maxActive = 0;
-    const completed: number[] = [];
-
-    await runWithConcurrency([1, 2, 3, 4, 5], 2, async (item) => {
-      active += 1;
-      maxActive = Math.max(maxActive, active);
-      await new Promise((resolve) => setTimeout(resolve, 1));
-      completed.push(item);
-      active -= 1;
-    });
-
-    expect(maxActive).toBe(2);
-    expect(completed.sort()).toEqual([1, 2, 3, 4, 5]);
-  });
-});
diff --git a/plugins/file-manager/tests/frontend/file-preview-preload.test.ts b/plugins/file-manager/tests/frontend/file-preview-preload.test.ts
deleted file mode 100644
index 8cd4cd0a6..000000000
--- a/plugins/file-manager/tests/frontend/file-preview-preload.test.ts
+++ /dev/null
@@ -1,18 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { resolveFilePreviewKind } from "../../src/frontend/file-preview-preload";
-
-describe("resolveFilePreviewKind", () => {
-  it.each([
-    ["photo.webp", "image"],
-    ["movie.webm", "video"],
-    ["voice.m4a", "audio"],
-    ["README.md", "markdown"],
-    ["manual.pdf", "pdf"],
-    ["notes.txt", "text"],
-    ["app.tsx", "code"],
-    ["Dockerfile", "code"],
-    ["LICENSE", "unknown"],
-  ] as const)("classifies %s as %s", (filename, expected) => {
-    expect(resolveFilePreviewKind(filename)).toBe(expected);
-  });
-});
diff --git a/plugins/file-manager/tests/frontend/hooks/useDragAndDrop.test.ts b/plugins/file-manager/tests/frontend/hooks/useDragAndDrop.test.ts
deleted file mode 100644
index 75fe92249..000000000
--- a/plugins/file-manager/tests/frontend/hooks/useDragAndDrop.test.ts
+++ /dev/null
@@ -1,92 +0,0 @@
-import { describe, it, expect, vi } from "vitest";
-import { act, renderHook } from "@testing-library/react";
-import { useDragAndDrop } from "../../../src/frontend/hooks/useDragAndDrop.js";
-
-function makeEntry(name: string, isDirectory: boolean) {
-  return { name, isDirectory, isFile: !isDirectory } as FileSystemEntry;
-}
-
-function makeDropEvent(entries: FileSystemEntry[], files: File[] = []) {
-  const items = entries.map((entry) => ({
-    webkitGetAsEntry: () => entry,
-  }));
-
-  const dataTransfer = {
-    items,
-    files: Object.assign(files, { item: (i: number) => files[i] }),
-  };
-
-  return {
-    preventDefault: vi.fn(),
-    stopPropagation: vi.fn(),
-    dataTransfer,
-  } as unknown as React.DragEvent;
-}
-
-describe("useDragAndDrop", () => {
-  it("hands directory entries to onItemsDropped", () => {
-    const onItemsDropped = vi.fn();
-    const onFilesDropped = vi.fn();
-    const { result } = renderHook(() =>
-      useDragAndDrop({ onFilesDropped, onItemsDropped }),
-    );
-
-    const dir = makeEntry("myfolder", true);
-    act(() => result.current.dragHandlers.onDrop(makeDropEvent([dir])));
-
-    expect(onItemsDropped).toHaveBeenCalledWith([dir]);
-    expect(onFilesDropped).not.toHaveBeenCalled();
-  });
-
-  it("reads entries before state updates clear dataTransfer", () => {
-    const onItemsDropped = vi.fn();
-    const { result } = renderHook(() =>
-      useDragAndDrop({ onFilesDropped: vi.fn(), onItemsDropped }),
-    );
-
-    const dir = makeEntry("myfolder", true);
-    const event = makeDropEvent([dir]);
-
-    // Mimic the browser neutering dataTransfer once the handler unwinds.
-    act(() => {
-      result.current.dragHandlers.onDrop(event);
-      (event.dataTransfer as unknown as { items: unknown[] }).items = [];
-    });
-
-    expect(onItemsDropped).toHaveBeenCalledWith([dir]);
-  });
-
-  it("falls back to plain file upload when no directory is dropped", () => {
-    const onFilesDropped = vi.fn();
-    const onItemsDropped = vi.fn();
-    const { result } = renderHook(() =>
-      useDragAndDrop({ onFilesDropped, onItemsDropped }),
-    );
-
-    const file = new File(["hi"], "a.txt");
-    act(() =>
-      result.current.dragHandlers.onDrop(
-        makeDropEvent([makeEntry("a.txt", false)], [file]),
-      ),
-    );
-
-    expect(onItemsDropped).not.toHaveBeenCalled();
-    expect(onFilesDropped).toHaveBeenCalled();
-  });
-
-  it("rejects files over the size limit", () => {
-    const onError = vi.fn();
-    const onFilesDropped = vi.fn();
-    const { result } = renderHook(() =>
-      useDragAndDrop({ onFilesDropped, onError, maxFileSize: 1 }),
-    );
-
-    const big = new File(["x"], "big.bin");
-    Object.defineProperty(big, "size", { value: 5 * 1024 * 1024 });
-
-    act(() => result.current.dragHandlers.onDrop(makeDropEvent([], [big])));
-
-    expect(onFilesDropped).not.toHaveBeenCalled();
-    expect(onError).toHaveBeenCalled();
-  });
-});
diff --git a/plugins/file-manager/tests/frontend/hooks/useFileSelection.test.ts b/plugins/file-manager/tests/frontend/hooks/useFileSelection.test.ts
deleted file mode 100644
index 0176c1088..000000000
--- a/plugins/file-manager/tests/frontend/hooks/useFileSelection.test.ts
+++ /dev/null
@@ -1,69 +0,0 @@
-import { describe, it, expect } from "vitest";
-import { act, renderHook } from "@testing-library/react";
-import { useFileSelection } from "../../../src/frontend/hooks/useFileSelection.js";
-
-type FileItem = {
-  name: string;
-  type: "file" | "directory" | "link";
-  path: string;
-};
-
-const f = (name: string): FileItem => ({
-  name,
-  type: "file",
-  path: `/dir/${name}`,
-});
-
-describe("useFileSelection", () => {
-  it("single-selects, replacing prior selection", () => {
-    const { result } = renderHook(() => useFileSelection());
-    act(() => result.current.selectFile(f("a")));
-    act(() => result.current.selectFile(f("b")));
-    expect(result.current.selectedFiles.map((x) => x.name)).toEqual(["b"]);
-    expect(result.current.getSelectedCount()).toBe(1);
-  });
-
-  it("multi-selects and toggles off on repeat", () => {
-    const { result } = renderHook(() => useFileSelection());
-    act(() => result.current.selectFile(f("a"), true));
-    act(() => result.current.selectFile(f("b"), true));
-    expect(result.current.getSelectedCount()).toBe(2);
-    act(() => result.current.selectFile(f("a"), true));
-    expect(result.current.selectedFiles.map((x) => x.name)).toEqual(["b"]);
-  });
-
-  it("reports isSelected by path", () => {
-    const { result } = renderHook(() => useFileSelection());
-    act(() => result.current.selectFile(f("a")));
-    expect(result.current.isSelected(f("a"))).toBe(true);
-    expect(result.current.isSelected(f("z"))).toBe(false);
-  });
-
-  it("selects a contiguous range regardless of direction", () => {
-    const { result } = renderHook(() => useFileSelection());
-    const files = [f("a"), f("b"), f("c"), f("d")];
-    act(() => result.current.selectRange(files, files[3], files[1]));
-    expect(result.current.selectedFiles.map((x) => x.name)).toEqual([
-      "b",
-      "c",
-      "d",
-    ]);
-  });
-
-  it("selects all and clears", () => {
-    const { result } = renderHook(() => useFileSelection());
-    const files = [f("a"), f("b")];
-    act(() => result.current.selectAll(files));
-    expect(result.current.getSelectedCount()).toBe(2);
-    act(() => result.current.clearSelection());
-    expect(result.current.getSelectedCount()).toBe(0);
-  });
-
-  it("toggleSelection adds then removes", () => {
-    const { result } = renderHook(() => useFileSelection());
-    act(() => result.current.toggleSelection(f("a")));
-    expect(result.current.isSelected(f("a"))).toBe(true);
-    act(() => result.current.toggleSelection(f("a")));
-    expect(result.current.isSelected(f("a"))).toBe(false);
-  });
-});
diff --git a/plugins/file-manager/tests/frontend/hooks/usePaneWidth.test.ts b/plugins/file-manager/tests/frontend/hooks/usePaneWidth.test.ts
deleted file mode 100644
index 4289fc332..000000000
--- a/plugins/file-manager/tests/frontend/hooks/usePaneWidth.test.ts
+++ /dev/null
@@ -1,50 +0,0 @@
-import { describe, it, expect, beforeEach } from "vitest";
-import { act, renderHook } from "@testing-library/react";
-import { usePaneWidth } from "../../../src/frontend/hooks/usePaneWidth";
-
-const KEY = "test:pane-width";
-
-function mouse(type: string, clientX: number) {
-  document.dispatchEvent(new MouseEvent(type, { clientX, bubbles: true }));
-}
-
-const opts = { storageKey: KEY, defaultWidth: 224, minWidth: 160 };
-
-describe("usePaneWidth", () => {
-  beforeEach(() => localStorage.clear());
-
-  it("starts at the default and restores a stored width", () => {
-    expect(renderHook(() => usePaneWidth(opts)).result.current.width).toBe(224);
-    localStorage.setItem(KEY, "300");
-    expect(renderHook(() => usePaneWidth(opts)).result.current.width).toBe(300);
-    localStorage.setItem(KEY, "10"); // below min → ignored
-    expect(renderHook(() => usePaneWidth(opts)).result.current.width).toBe(224);
-  });
-
-  it("follows the drag, clamps to the minimum, and persists on release", () => {
-    const { result } = renderHook(() => usePaneWidth(opts));
-    act(() => {
-      result.current.startResize({
-        clientX: 400,
-        preventDefault() {},
-        stopPropagation() {},
-      } as unknown as React.MouseEvent);
-    });
-    expect(result.current.isResizing).toBe(true);
-    act(() => mouse("mousemove", 460));
-    expect(result.current.width).toBe(284);
-    act(() => mouse("mousemove", 100));
-    expect(result.current.width).toBe(160);
-    act(() => mouse("mouseup", 100));
-    expect(result.current.isResizing).toBe(false);
-    expect(localStorage.getItem(KEY)).toBe("160");
-  });
-
-  it("resets to the default", () => {
-    localStorage.setItem(KEY, "300");
-    const { result } = renderHook(() => usePaneWidth(opts));
-    act(() => result.current.resetWidth());
-    expect(result.current.width).toBe(224);
-    expect(localStorage.getItem(KEY)).toBe("224");
-  });
-});
diff --git a/plugins/file-manager/tests/frontend/hooks/useResizableColumns.test.ts b/plugins/file-manager/tests/frontend/hooks/useResizableColumns.test.ts
deleted file mode 100644
index 8f47ab647..000000000
--- a/plugins/file-manager/tests/frontend/hooks/useResizableColumns.test.ts
+++ /dev/null
@@ -1,103 +0,0 @@
-import { describe, it, expect, beforeEach } from "vitest";
-import { act, renderHook } from "@testing-library/react";
-import { useResizableColumns } from "../../../src/frontend/hooks/useResizableColumns";
-
-const columns = [
-  { key: "modified", labelKey: "m", defaultWidth: 120, minWidth: 70 },
-  { key: "size", labelKey: "s", defaultWidth: 80, minWidth: 56, maxWidth: 200 },
-];
-const STORAGE_KEY = "test:columns";
-
-function mouse(type: string, clientX: number) {
-  document.dispatchEvent(new MouseEvent(type, { clientX, bubbles: true }));
-}
-
-describe("useResizableColumns", () => {
-  beforeEach(() => localStorage.clear());
-
-  it("starts from defaults and builds a grid template with a flexible name column", () => {
-    const { result } = renderHook(() =>
-      useResizableColumns({ storageKey: STORAGE_KEY, columns }),
-    );
-    expect(result.current.gridTemplateColumns).toBe(
-      "minmax(min(240px, 50%), 1fr) minmax(0, 120px) minmax(0, 80px)",
-    );
-  });
-
-  it("widens a column when its left-edge handle is dragged left and persists", () => {
-    const { result } = renderHook(() =>
-      useResizableColumns({ storageKey: STORAGE_KEY, columns }),
-    );
-    const handle = result.current.getHandleProps("size");
-    act(() => {
-      handle.onMouseDown({
-        clientX: 500,
-        preventDefault() {},
-        stopPropagation() {},
-      } as unknown as React.MouseEvent);
-    });
-    expect(result.current.resizingKey).toBe("size");
-    act(() => mouse("mousemove", 460));
-    expect(result.current.widths.size).toBe(120);
-    act(() => mouse("mouseup", 460));
-    expect(result.current.resizingKey).toBeNull();
-    expect(JSON.parse(localStorage.getItem(STORAGE_KEY)!)).toEqual({
-      modified: 120,
-      size: 120,
-    });
-  });
-
-  it("clamps to min/max and restores stored widths", () => {
-    localStorage.setItem(
-      STORAGE_KEY,
-      JSON.stringify({ modified: 10, size: 9999, junk: "x" }),
-    );
-    const { result } = renderHook(() =>
-      useResizableColumns({ storageKey: STORAGE_KEY, columns }),
-    );
-    expect(result.current.widths).toEqual({ modified: 70, size: 200 });
-  });
-
-  it("hides and shows columns, dropping them from the template", () => {
-    const { result } = renderHook(() =>
-      useResizableColumns({ storageKey: STORAGE_KEY, columns }),
-    );
-    act(() => result.current.toggleColumn("size"));
-    expect(result.current.isVisible("size")).toBe(false);
-    expect(result.current.gridTemplateColumns).toBe(
-      "minmax(min(240px, 50%), 1fr) minmax(0, 120px)",
-    );
-    expect(result.current.visibleColumns.map((c) => c.key)).toEqual([
-      "modified",
-    ]);
-    expect(JSON.parse(localStorage.getItem(`${STORAGE_KEY}:hidden`)!)).toEqual([
-      "size",
-    ]);
-
-    // A fresh mount restores the hidden set; toggling again shows it.
-    const remount = renderHook(() =>
-      useResizableColumns({ storageKey: STORAGE_KEY, columns }),
-    );
-    expect(remount.result.current.isVisible("size")).toBe(false);
-    act(() => remount.result.current.toggleColumn("size"));
-    expect(remount.result.current.gridTemplateColumns).toBe(
-      "minmax(min(240px, 50%), 1fr) minmax(0, 120px) minmax(0, 80px)",
-    );
-  });
-
-  it("resets a column to its default on double click", () => {
-    localStorage.setItem(STORAGE_KEY, JSON.stringify({ modified: 150 }));
-    const { result } = renderHook(() =>
-      useResizableColumns({ storageKey: STORAGE_KEY, columns }),
-    );
-    expect(result.current.widths.modified).toBe(150);
-    act(() => {
-      result.current.getHandleProps("modified").onDoubleClick({
-        preventDefault() {},
-        stopPropagation() {},
-      } as unknown as React.MouseEvent);
-    });
-    expect(result.current.widths.modified).toBe(120);
-    expect(JSON.parse(localStorage.getItem(STORAGE_KEY)!).modified).toBe(120);
-  });
-});
diff --git a/plugins/file-manager/tests/frontend/lib/file-content-request-cache.test.ts b/plugins/file-manager/tests/frontend/lib/file-content-request-cache.test.ts
deleted file mode 100644
index f3b43c638..000000000
--- a/plugins/file-manager/tests/frontend/lib/file-content-request-cache.test.ts
+++ /dev/null
@@ -1,49 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import {
-  getCachedFileContent,
-  invalidateCachedFileContent,
-  shouldPrefetchFileContent,
-} from "../../../src/frontend/lib/file-content-request-cache";
-
-describe("file content request cache", () => {
-  it("coalesces reads and reloads after invalidation", async () => {
-    const loader = vi.fn(async () => ({ content: "hello", path: "/note" }));
-
-    await Promise.all([
-      getCachedFileContent("session", "/note", loader),
-      getCachedFileContent("session", "/note", loader),
-    ]);
-    expect(loader).toHaveBeenCalledOnce();
-
-    invalidateCachedFileContent("session", "/note");
-    await getCachedFileContent("session", "/note", loader);
-    expect(loader).toHaveBeenCalledTimes(2);
-  });
-
-  it("only prefetches known small files on an unconstrained network", () => {
-    expect(
-      shouldPrefetchFileContent(
-        { name: "note", path: "/note", type: "file", size: 512 * 1024 },
-        512 * 1024,
-      ),
-    ).toBe(true);
-    expect(
-      shouldPrefetchFileContent(
-        { name: "large", path: "/large", type: "file", size: 512 * 1024 + 1 },
-        512 * 1024,
-      ),
-    ).toBe(false);
-    expect(
-      shouldPrefetchFileContent(
-        { name: "unknown", path: "/unknown", type: "file" },
-        512 * 1024,
-      ),
-    ).toBe(false);
-    expect(
-      shouldPrefetchFileContent(
-        { name: "note", path: "/note", type: "file", size: 100 },
-        0,
-      ),
-    ).toBe(false);
-  });
-});
diff --git a/plugins/file-manager/tests/frontend/lib/keyed-request-cache.test.ts b/plugins/file-manager/tests/frontend/lib/keyed-request-cache.test.ts
deleted file mode 100644
index fc25574d5..000000000
--- a/plugins/file-manager/tests/frontend/lib/keyed-request-cache.test.ts
+++ /dev/null
@@ -1,84 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { createKeyedRequestCache } from "../../../src/frontend/lib/keyed-request-cache";
-
-afterEach(() => vi.useRealTimers());
-
-describe("createKeyedRequestCache", () => {
-  it("coalesces requests per key without mixing keys", async () => {
-    let resolve!: (value: string) => void;
-    const loader = vi.fn(() => new Promise<string>((done) => (resolve = done)));
-    const cache = createKeyedRequestCache<string>(5_000);
-
-    const first = cache.get("host:1", loader);
-    const duplicate = cache.get("host:1", loader);
-    const other = cache.get("host:2", async () => "other");
-    resolve("shared");
-
-    await expect(Promise.all([first, duplicate, other])).resolves.toEqual([
-      "shared",
-      "shared",
-      "other",
-    ]);
-    expect(loader).toHaveBeenCalledOnce();
-  });
-
-  it("can show stale data immediately while forcing one refresh", async () => {
-    vi.useFakeTimers();
-    const cache = createKeyedRequestCache<string>(1_000);
-    await cache.get("directory", async () => "old");
-    await vi.advanceTimersByTimeAsync(2_000);
-
-    expect(cache.peek("directory", 30_000)).toBe("old");
-
-    const loader = vi.fn(async () => "fresh");
-    const [a, b] = await Promise.all([
-      cache.get("directory", loader, { force: true }),
-      cache.get("directory", loader, { force: true }),
-    ]);
-    expect([a, b]).toEqual(["fresh", "fresh"]);
-    expect(loader).toHaveBeenCalledOnce();
-  });
-
-  it("evicts the least recently used entry when bounded", async () => {
-    const cache = createKeyedRequestCache<number>(10_000, 2);
-    await cache.get("a", async () => 1);
-    await cache.get("b", async () => 2);
-    expect(cache.peek("a")).toBe(1);
-    await cache.get("c", async () => 3);
-
-    expect(cache.peek("a")).toBe(1);
-    expect(cache.peek("b")).toBeNull();
-    expect(cache.peek("c")).toBe(3);
-  });
-
-  it("keeps stale data when a refresh fails", async () => {
-    const cache = createKeyedRequestCache<string>(1_000);
-    await cache.get("key", async () => "safe");
-
-    await expect(
-      cache.get(
-        "key",
-        async () => {
-          throw new Error("offline");
-        },
-        { force: true },
-      ),
-    ).rejects.toThrow("offline");
-    expect(cache.peek("key")).toBe("safe");
-  });
-
-  it("does not let an invalidated request overwrite newer data", async () => {
-    let resolveOld!: (value: string) => void;
-    const cache = createKeyedRequestCache<string>(10_000);
-    const oldRequest = cache.get(
-      "key",
-      () => new Promise<string>((resolve) => (resolveOld = resolve)),
-    );
-
-    cache.set("key", "optimistic");
-    resolveOld("old");
-    await oldRequest;
-
-    expect(cache.peek("key")).toBe("optimistic");
-  });
-});
diff --git a/plugins/file-manager/tests/frontend/local-transfer-utils.test.ts b/plugins/file-manager/tests/frontend/local-transfer-utils.test.ts
deleted file mode 100644
index 2ec2c29ad..000000000
--- a/plugins/file-manager/tests/frontend/local-transfer-utils.test.ts
+++ /dev/null
@@ -1,386 +0,0 @@
-import { beforeEach, describe, expect, it } from "vitest";
-import {
-  LOCAL_FILES_DRAG_MIME,
-  REMOTE_FILES_DRAG_MIME,
-  UnsafeLocalNameError,
-  assertSafeLocalComponent,
-  beginRemoteFilesDrag,
-  buildLocalDestination,
-  clampTransferConcurrency,
-  describeLocalKind,
-  runWithConcurrency,
-  takeLegacyTransferConcurrency,
-  DEFAULT_TRANSFER_CONCURRENCY,
-  TRANSFER_CONCURRENCY_STORAGE_KEY,
-  formatLocalModified,
-  isLocalFilesDrag,
-  isRemoteFilesDrag,
-  joinLocalPath,
-  joinRemotePath,
-  parseInternalFilesDragPayload,
-  parseLocalFilesDragPayload,
-  planRemoteDirectories,
-  remoteBaseName,
-  remoteDirForRelativePath,
-  serializeLocalFilesDragPayload,
-  sortLocalEntries,
-} from "../../src/frontend/local-transfer-utils";
-import type { LocalFileEntry } from "@termix/plugin-sdk/frontend";
-
-describe("drag payloads", () => {
-  it("round-trips local file payloads", () => {
-    const raw = serializeLocalFilesDragPayload(["/Users/max/a.txt", "/tmp/b"]);
-    expect(parseLocalFilesDragPayload(raw)).toEqual([
-      "/Users/max/a.txt",
-      "/tmp/b",
-    ]);
-  });
-
-  it("rejects foreign or malformed payloads", () => {
-    expect(parseLocalFilesDragPayload(null)).toBeNull();
-    expect(parseLocalFilesDragPayload("not json")).toBeNull();
-    expect(
-      parseLocalFilesDragPayload(
-        JSON.stringify({ type: "internal_files", files: ["/x"] }),
-      ),
-    ).toBeNull();
-    expect(
-      parseLocalFilesDragPayload(
-        JSON.stringify({ type: "local_files", paths: [] }),
-      ),
-    ).toBeNull();
-    expect(
-      parseLocalFilesDragPayload(
-        JSON.stringify({ type: "local_files", paths: [1, "", "/ok"] }),
-      ),
-    ).toEqual(["/ok"]);
-  });
-
-  it("parses the remote grid's internal payload", () => {
-    expect(
-      parseInternalFilesDragPayload(
-        JSON.stringify({ type: "internal_files", files: ["/srv/a", "/srv/b"] }),
-      ),
-    ).toEqual(["/srv/a", "/srv/b"]);
-    expect(
-      parseInternalFilesDragPayload(
-        JSON.stringify({ type: "local_files", paths: ["/x"] }),
-      ),
-    ).toBeNull();
-  });
-
-  it("recognises drag origins from dataTransfer types", () => {
-    expect(
-      isLocalFilesDrag({ types: [LOCAL_FILES_DRAG_MIME, "text/plain"] }),
-    ).toBe(true);
-    expect(isLocalFilesDrag({ types: ["Files"] })).toBe(false);
-    expect(isRemoteFilesDrag({ types: [REMOTE_FILES_DRAG_MIME] })).toBe(true);
-    expect(isRemoteFilesDrag({ types: ["text/plain"] })).toBe(false);
-    expect(isRemoteFilesDrag(null)).toBe(false);
-  });
-});
-
-describe("path helpers", () => {
-  it("joins remote paths without duplicate slashes", () => {
-    expect(joinRemotePath("/", "a", "b")).toBe("/a/b");
-    expect(joinRemotePath("/home/ubuntu/", "/proj/", "x.txt")).toBe(
-      "/home/ubuntu/proj/x.txt",
-    );
-    expect(joinRemotePath("/home", "")).toBe("/home");
-  });
-
-  it("joins local paths with the platform separator", () => {
-    expect(joinLocalPath("/Users/max", "a.txt", "/")).toBe("/Users/max/a.txt");
-    expect(joinLocalPath("/Users/max/", "a.txt", "/")).toBe("/Users/max/a.txt");
-    expect(joinLocalPath("/", "a.txt", "/")).toBe("/a.txt");
-    expect(joinLocalPath("C:\\Users\\max", "a.txt", "\\")).toBe(
-      "C:\\Users\\max\\a.txt",
-    );
-  });
-
-  it("derives base names", () => {
-    expect(remoteBaseName("/srv/app/file.log")).toBe("file.log");
-    expect(remoteBaseName("/srv/app/")).toBe("app");
-    expect(remoteBaseName("/")).toBe("/");
-  });
-
-  it("maps relative paths to their remote directory", () => {
-    expect(remoteDirForRelativePath("/dst", "file.txt")).toBe("/dst");
-    expect(remoteDirForRelativePath("/dst", "proj/src/main.rs")).toBe(
-      "/dst/proj/src",
-    );
-  });
-});
-
-describe("download destination safety", () => {
-  const WIN = "\\";
-  const POSIX = "/";
-
-  it("keeps ordinary nested folders under the selected directory (Windows)", () => {
-    expect(
-      buildLocalDestination(
-        "C:\\Downloads\\selected",
-        "docs/2026/report.pdf",
-        WIN,
-      ),
-    ).toBe("C:\\Downloads\\selected\\docs\\2026\\report.pdf");
-    expect(
-      buildLocalDestination("C:\\Downloads\\selected\\", "a.txt", WIN),
-    ).toBe("C:\\Downloads\\selected\\a.txt");
-  });
-
-  it("rejects backslash traversal in a POSIX file name on Windows", () => {
-    // The reviewer's reproduction: "..\\outside.txt" is a legal POSIX name.
-    expect(() =>
-      buildLocalDestination("C:\\Downloads\\selected", "..\\outside.txt", WIN),
-    ).toThrow(UnsafeLocalNameError);
-    expect(() =>
-      buildLocalDestination(
-        "C:\\Downloads\\selected",
-        "sub/..\\..\\x.txt",
-        WIN,
-      ),
-    ).toThrow(UnsafeLocalNameError);
-    expect(() =>
-      buildLocalDestination("C:\\Downloads\\selected", "dir\\file.txt", WIN),
-    ).toThrow(UnsafeLocalNameError);
-  });
-
-  it("rejects absolute and drive-qualified names on Windows", () => {
-    for (const name of [
-      "C:\\Windows\\evil.dll",
-      "C:evil.txt",
-      "D:",
-      "\\\\server\\share\\x",
-      "\\absolute.txt",
-    ]) {
-      expect(() =>
-        buildLocalDestination("C:\\Downloads\\selected", name, WIN),
-      ).toThrow(UnsafeLocalNameError);
-    }
-  });
-
-  it("rejects names Windows cannot store: reserved devices, trailing dots/spaces, control chars", () => {
-    for (const name of [
-      "CON",
-      "nul.txt",
-      "COM1",
-      "report.",
-      "report ",
-      "a\u0007b",
-      "q?.txt",
-      "a|b",
-    ]) {
-      expect(() => assertSafeLocalComponent(name, WIN)).toThrow(
-        UnsafeLocalNameError,
-      );
-    }
-    expect(assertSafeLocalComponent("console.log", WIN)).toBe("console.log");
-    expect(assertSafeLocalComponent("nulled.txt", WIN)).toBe("nulled.txt");
-  });
-
-  it("rejects traversal and separators on every platform, but allows POSIX-legal backslashes on POSIX", () => {
-    for (const rel of ["..", "../x", "a/../../x", "./x", "a\0b", ""]) {
-      expect(() => buildLocalDestination("/home/max/dl", rel, POSIX)).toThrow(
-        UnsafeLocalNameError,
-      );
-    }
-    // On macOS/Linux a backslash is just a character in a file name and the
-    // result is still inside the selected folder.
-    expect(
-      buildLocalDestination("/home/max/dl", "..\\outside.txt", POSIX),
-    ).toBe("/home/max/dl/..\\outside.txt");
-    expect(buildLocalDestination("/", "etc/hosts", POSIX)).toBe("/etc/hosts");
-  });
-});
-
-describe("planRemoteDirectories", () => {
-  it("lists every ancestor once, shallowest first", () => {
-    const dirs = planRemoteDirectories(
-      ["proj/src/main.rs", "proj/README.md", "proj/src/lib/mod.rs", "top.txt"],
-      ["proj/empty", "other/nested/leaf"],
-    );
-    expect(dirs).toEqual([
-      "other",
-      "proj",
-      "other/nested",
-      "proj/empty",
-      "proj/src",
-      "other/nested/leaf",
-      "proj/src/lib",
-    ]);
-  });
-
-  it("returns nothing for flat file drops", () => {
-    expect(planRemoteDirectories(["a.txt", "b.txt"])).toEqual([]);
-  });
-});
-
-describe("remote rows dragged out of the grid", () => {
-  it("allows both a move (within the grid) and a copy (download onto the local pane)", () => {
-    const store: Record<string, string> = {};
-    const dataTransfer: Pick<DataTransfer, "effectAllowed" | "setData"> = {
-      effectAllowed: "uninitialized",
-      setData: (type: string, value: string) => {
-        store[type] = value;
-      },
-    };
-    beginRemoteFilesDrag(dataTransfer, ["/srv/a.txt", "/srv/dir"]);
-    // Chromium silently drops nothing when dropEffect ("copy" on the local
-    // pane) is not part of effectAllowed, so "move" alone breaks downloads.
-    expect(dataTransfer.effectAllowed).toBe("copyMove");
-    expect(isRemoteFilesDrag({ types: Object.keys(store) })).toBe(true);
-    expect(parseInternalFilesDragPayload(store["text/plain"])).toEqual([
-      "/srv/a.txt",
-      "/srv/dir",
-    ]);
-  });
-});
-
-describe("local entry presentation", () => {
-  const entry = (
-    name: string,
-    type: LocalFileEntry["type"],
-    size = 0,
-    modifiedTimestamp = 0,
-  ): LocalFileEntry => ({
-    name,
-    path: `/x/${name}`,
-    type,
-    size,
-    modifiedTimestamp,
-    hidden: name.startsWith("."),
-  });
-
-  it("formats modified times like the remote grid (ls -l style)", () => {
-    const now = new Date(2026, 8, 12, 10, 0); // Sep 12 2026
-    expect(
-      formatLocalModified(new Date(2026, 8, 11, 16, 25).getTime(), now),
-    ).toBe("Sep 11 16:25");
-    // Single-digit days are space-padded, minutes zero-padded.
-    expect(formatLocalModified(new Date(2026, 7, 7, 9, 5).getTime(), now)).toBe(
-      "Aug  7 09:05",
-    );
-    // Older than six months: year instead of time, two spaces like ls.
-    expect(
-      formatLocalModified(new Date(2025, 11, 24, 18, 30).getTime(), now),
-    ).toBe("Dec 24  2025");
-    expect(formatLocalModified(undefined, now)).toBe("--");
-    expect(formatLocalModified(Number.NaN, now)).toBe("--");
-  });
-
-  it("describes kinds", () => {
-    expect(describeLocalKind(entry("docs", "directory"))).toBe("folder");
-    expect(describeLocalKind(entry("archive.tar.GZ", "file"))).toBe("gz");
-    expect(describeLocalKind(entry(".env", "file"))).toBe("file");
-    expect(describeLocalKind(entry("Makefile", "file"))).toBe("file");
-    expect(describeLocalKind(entry("ln", "link"))).toBe("link");
-  });
-
-  it("sorts folders first, then by the chosen field", () => {
-    const entries = [
-      entry("b.txt", "file", 20, 2),
-      entry("zeta", "directory", 0, 1),
-      entry("a.txt", "file", 10, 3),
-      entry("alpha", "directory", 0, 4),
-    ];
-    expect(sortLocalEntries(entries, "name", "asc").map((e) => e.name)).toEqual(
-      ["alpha", "zeta", "a.txt", "b.txt"],
-    );
-    expect(
-      sortLocalEntries(entries, "size", "desc").map((e) => e.name),
-    ).toEqual(["zeta", "alpha", "b.txt", "a.txt"]);
-    expect(
-      sortLocalEntries(entries, "modified", "asc").map((e) => e.name),
-    ).toEqual(["zeta", "alpha", "b.txt", "a.txt"]);
-  });
-});
-
-describe("parallel transfers", () => {
-  beforeEach(() => localStorage.clear());
-
-  it("clamps the concurrency preference", () => {
-    expect(clampTransferConcurrency(0)).toBe(1);
-    expect(clampTransferConcurrency(99)).toBe(8);
-    expect(clampTransferConcurrency("3.7")).toBe(3);
-    expect(clampTransferConcurrency("nope")).toBe(DEFAULT_TRANSFER_CONCURRENCY);
-  });
-
-  it("reads the value a browser kept before 2.9.0 once, then forgets it", () => {
-    expect(takeLegacyTransferConcurrency()).toBeNull();
-    localStorage.setItem(TRANSFER_CONCURRENCY_STORAGE_KEY, "12");
-    expect(takeLegacyTransferConcurrency()).toBe(8);
-    expect(localStorage.getItem(TRANSFER_CONCURRENCY_STORAGE_KEY)).toBeNull();
-    expect(takeLegacyTransferConcurrency()).toBeNull();
-  });
-
-  const deferred = () => {
-    let resolve!: () => void;
-    const promise = new Promise<void>((r) => (resolve = r));
-    return { promise, resolve };
-  };
-
-  it("never runs more than `limit` workers at once and processes everything", async () => {
-    const gates = Array.from({ length: 6 }, deferred);
-    const started: number[] = [];
-    let active = 0;
-    let peak = 0;
-    const run = runWithConcurrency([0, 1, 2, 3, 4, 5], 3, async (i) => {
-      started.push(i);
-      active += 1;
-      peak = Math.max(peak, active);
-      await gates[i].promise;
-      active -= 1;
-    });
-    await Promise.resolve();
-    expect(started).toEqual([0, 1, 2]); // exactly `limit` dispatched
-    gates[1].resolve();
-    await new Promise((r) => setTimeout(r, 0));
-    expect(started).toEqual([0, 1, 2, 3]); // a free lane picks up the next item
-    for (const g of gates) g.resolve();
-    await run;
-    expect(started).toEqual([0, 1, 2, 3, 4, 5]);
-    expect(peak).toBe(3);
-  });
-
-  it("stops dispatching once asked to, letting in-flight items finish", async () => {
-    let stop = false;
-    const done: number[] = [];
-    await runWithConcurrency(
-      [1, 2, 3, 4, 5],
-      2,
-      async (i) => {
-        await new Promise((r) => setTimeout(r, 1));
-        done.push(i);
-        if (i === 2) stop = true;
-      },
-      () => stop,
-    );
-    expect(done.length).toBeLessThan(5);
-    expect(done).toContain(1);
-    expect(done).toContain(2);
-  });
-
-  it("does not reject the batch when a single item fails (the worker reports it)", async () => {
-    const failed: number[] = [];
-    await runWithConcurrency([1, 2, 3], 2, async (i) => {
-      try {
-        if (i === 2) throw new Error("boom");
-      } catch {
-        failed.push(i);
-      }
-    });
-    expect(failed).toEqual([2]);
-  });
-
-  it("handles an empty list and a limit larger than the list", async () => {
-    let calls = 0;
-    await runWithConcurrency([], 4, async () => {
-      calls += 1;
-    });
-    await runWithConcurrency([1], 8, async () => {
-      calls += 1;
-    });
-    expect(calls).toBe(1);
-  });
-});
diff --git a/plugins/file-manager/tests/frontend/optimistic-file-list.test.ts b/plugins/file-manager/tests/frontend/optimistic-file-list.test.ts
deleted file mode 100644
index 0dea07313..000000000
--- a/plugins/file-manager/tests/frontend/optimistic-file-list.test.ts
+++ /dev/null
@@ -1,49 +0,0 @@
-import { describe, expect, it } from "vitest";
-import type { FileItem } from "../../src/frontend/host-types";
-import {
-  addOptimisticItem,
-  childPath,
-  removePaths,
-  renameOptimisticItem,
-  restoreItems,
-} from "../../src/frontend/optimistic-file-list";
-
-const files: FileItem[] = [
-  { name: "alpha.txt", path: "/work/alpha.txt", type: "file", size: 10 },
-  { name: "docs", path: "/work/docs", type: "directory" },
-];
-
-describe("optimistic file list updates", () => {
-  it("builds child paths without duplicate separators", () => {
-    expect(childPath("/", "file.txt")).toBe("/file.txt");
-    expect(childPath("/work/", "file.txt")).toBe("/work/file.txt");
-  });
-
-  it("adds and rolls back a provisional item", () => {
-    const added = addOptimisticItem(files, "/work", "new.txt", "file", 0);
-    expect(added.at(-1)).toMatchObject({
-      name: "new.txt",
-      path: "/work/new.txt",
-      type: "file",
-      size: 0,
-    });
-    expect(removePaths(added, new Set(["/work/new.txt"]))).toEqual(files);
-  });
-
-  it("renames immediately and can reverse the same item", () => {
-    const renamed = renameOptimisticItem(files, "/work/alpha.txt", "beta.txt");
-    expect(renamed[0]).toMatchObject({
-      name: "beta.txt",
-      path: "/work/beta.txt",
-      size: 10,
-    });
-    expect(
-      renameOptimisticItem(renamed, "/work/beta.txt", "alpha.txt"),
-    ).toEqual(files);
-  });
-
-  it("restores only failed deletions without duplicating survivors", () => {
-    const remaining = removePaths(files, new Set(["/work/docs"]));
-    expect(restoreItems(remaining, [files[1], files[0]])).toEqual(files);
-  });
-});
diff --git a/plugins/file-manager/tests/frontend/progress-toast-context.test.tsx b/plugins/file-manager/tests/frontend/progress-toast-context.test.tsx
deleted file mode 100644
index 4032b6644..000000000
--- a/plugins/file-manager/tests/frontend/progress-toast-context.test.tsx
+++ /dev/null
@@ -1,54 +0,0 @@
-import { cleanup, fireEvent, render, screen } from "@testing-library/react";
-import { afterEach, expect, it, vi } from "vitest";
-vi.mock("@termix/plugin-sdk/frontend", () => ({
-  useTranslation: () => {
-    throw Error("No plugin scope in the global toaster");
-  },
-}));
-import { DownloadProgressToast } from "../../src/frontend/components/DownloadProgressToast";
-import { TransferProgressToast } from "../../src/frontend/components/TransferProgressToast";
-import { LocalTransferProgressToast } from "../../src/frontend/components/LocalTransferProgressToast";
-afterEach(cleanup);
-const t = (key: string) => key;
-it("renders download progress outside plugin scope", () => {
-  render(
-    <DownloadProgressToast t={t} fileName="test.txt" loaded={50} total={100} />,
-  );
-  expect(screen.getByRole("progressbar").getAttribute("aria-valuenow")).toBe(
-    "50",
-  );
-});
-it("renders host transfer progress outside plugin scope", () => {
-  render(
-    <TransferProgressToast
-      t={t}
-      status={{
-        transferId: "test",
-        status: "running",
-        phase: "transferring",
-        bytesTransferred: 50,
-        totalBytes: 100,
-      }}
-      formatSize={String}
-    />,
-  );
-  expect(screen.getByRole("progressbar")).toBeTruthy();
-});
-it("preserves cancellation on local transfers outside plugin scope", () => {
-  const cancel = vi.fn();
-  render(
-    <LocalTransferProgressToast
-      t={t}
-      status={{
-        direction: "upload",
-        totalFiles: 2,
-        completedFiles: 1,
-        bytesDone: 50,
-        totalBytes: 100,
-      }}
-      onCancel={cancel}
-    />,
-  );
-  fireEvent.click(screen.getByRole("button"));
-  expect(cancel).toHaveBeenCalledOnce();
-});
diff --git a/plugins/file-manager/tests/frontend/sftp-transfer-utils.test.ts b/plugins/file-manager/tests/frontend/sftp-transfer-utils.test.ts
deleted file mode 100644
index cc7895cc0..000000000
--- a/plugins/file-manager/tests/frontend/sftp-transfer-utils.test.ts
+++ /dev/null
@@ -1,27 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  hasSameHostTransferConflict,
-  joinRemotePath,
-  normalizeRemoteDir,
-} from "../../src/frontend/sftp-transfer-utils";
-
-describe("sftp transfer utilities", () => {
-  it("normalizes and joins remote paths", () => {
-    expect(normalizeRemoteDir(" /home/user// ")).toBe("/home/user");
-    expect(joinRemotePath("/home/user/", "docs/readme.md")).toBe(
-      "/home/user/docs/readme.md",
-    );
-    expect(joinRemotePath("/", "tmp/file.txt")).toBe("/tmp/file.txt");
-    expect(joinRemotePath("home/user", "logs")).toBe("/home/user/logs");
-  });
-
-  it("detects same-host destination conflicts", () => {
-    expect(hasSameHostTransferConflict(["/opt/app"], "/opt/app")).toBe(true);
-    expect(hasSameHostTransferConflict(["/opt/app"], "/opt/app/logs")).toBe(
-      true,
-    );
-    expect(hasSameHostTransferConflict(["/opt/app"], "/opt/releases")).toBe(
-      false,
-    );
-  });
-});
diff --git a/plugins/file-manager/tests/frontend/transfer-progress-toast.test.ts b/plugins/file-manager/tests/frontend/transfer-progress-toast.test.ts
deleted file mode 100644
index f97f36639..000000000
--- a/plugins/file-manager/tests/frontend/transfer-progress-toast.test.ts
+++ /dev/null
@@ -1,40 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-const success = vi.fn();
-vi.mock("sonner", () => ({
-  toast: {
-    success: (...args: unknown[]) => success(...args),
-  },
-}));
-
-vi.mock("../../src/frontend/api/transfer-api", () => ({}));
-vi.mock("../../src/frontend/transferNotificationStore.ts", () => ({
-  markTransferNotified: vi.fn(),
-}));
-
-import { showTransferCompletionToast } from "../../src/frontend/transferProgressMonitor.tsx";
-
-describe("transfer completion toast", () => {
-  beforeEach(() => {
-    success.mockReset();
-  });
-
-  it("clears the infinite duration inherited from the progress toast", () => {
-    showTransferCompletionToast(
-      {
-        transferId: "transfer-1",
-        status: "success",
-        phase: "verifying",
-      },
-      ((key: string) => key) as never,
-      "progress-toast",
-    );
-
-    expect(success).toHaveBeenCalledWith("transfer.transferSuccess", {
-      id: "progress-toast",
-      description: undefined,
-      className: "!pr-10 !pl-4 transfer-progress-toast",
-      duration: undefined,
-    });
-  });
-});
diff --git a/plugins/file-manager/tsconfig.json b/plugins/file-manager/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/file-manager/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/file-manager/vitest.config.ts b/plugins/file-manager/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/file-manager/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/fleets/CHANGELOG.md b/plugins/fleets/CHANGELOG.md
deleted file mode 100644
index 1db7b7c57..000000000
--- a/plugins/fleets/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Groups hosts into fleets, either by hand or by tag. Run commands, package actions and file transfers on every host in a fleet at once, and see an inventory of its hosts.
diff --git a/plugins/fleets/README.md b/plugins/fleets/README.md
deleted file mode 100644
index 651814268..000000000
--- a/plugins/fleets/README.md
+++ /dev/null
@@ -1,32 +0,0 @@
-# Fleets
-
-Group hosts into fleets and run commands, package actions and file transfers on all of them at once.
-
-## Features
-
-- Group hosts into fleets by hand or by tag. Hosts with a matching tag join on their own.
-- Run a command on every host in a fleet at once and see each result.
-- Run package actions, like updates, across a fleet.
-- Transfer files to and from every host in a fleet.
-- See an inventory of the hosts in a fleet.
-- Share fleets with other users or roles.
-
-## Permissions
-
-- `fleets.view`: See fleets, their hosts and inventory. Admins and users have it by default.
-- `fleets.manage`: Create, edit, delete and share fleets. Admins and users have it by default.
-- `fleets.execute`: Run commands, package actions and file transfers on a fleet. Admins and users have it by default.
-
-## Services
-
-Provides to other plugins:
-
-- `fleets.access`: list fleets and run actions on them.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/fleets/locales/en.json b/plugins/fleets/locales/en.json
deleted file mode 100644
index 18ffb4fa6..000000000
--- a/plugins/fleets/locales/en.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "View fleets",
-      "description": "See fleets, their members and inventory."
-    },
-    "manage": {
-      "title": "Manage fleets",
-      "description": "Create, edit and delete fleets, change membership, and share fleets with other users or roles."
-    },
-    "execute": {
-      "title": "Run fleet actions",
-      "description": "Run commands and package actions across a fleet, and transfer files to and from its member hosts."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Fleets",
-        "createFleet": "Create Fleet",
-        "createFleetTitle": "Create Fleet",
-        "editFleetTitle": "Edit Fleet",
-        "createFleetDescription": "A fleet is a named group of hosts you can run actions against as a unit.",
-        "nameLabel": "Name",
-        "namePlaceholder": "e.g., Web Servers",
-        "nameRequired": "Fleet name is required",
-        "descriptionLabel": "Description",
-        "descriptionPlaceholder": "Optional description",
-        "colorLabel": "Color",
-        "tagRulesLabel": "Tag rules",
-        "tagRulesPlaceholder": "prod-web, edge",
-        "tagRulesHint": "Hosts with any of these tags are automatically included, in addition to hosts added manually.",
-        "fleetCreated": "Fleet created",
-        "fleetUpdated": "Fleet updated",
-        "fleetDeleted": "Fleet deleted",
-        "saveFailed": "Failed to save fleet",
-        "deleteFailed": "Failed to delete fleet",
-        "loadFailed": "Failed to load fleets",
-        "deleteFleetTitle": "Delete Fleet",
-        "deleteFleetDescription": "Are you sure you want to delete \"{{name}}\"? This does not delete the member hosts themselves.",
-        "searchFleets": "Search fleets...",
-        "noFleets": "No fleets yet. Create one to get started.",
-        "memberCount": "{{count}} host",
-        "memberCount_other": "{{count}} hosts",
-        "manageMembers": "Manage Members",
-        "manageMembersTitle": "Manage Fleet Members",
-        "manageMembersDescription": "Toggle hosts in or out of this fleet's static membership. Hosts matched by tag rules are always included.",
-        "searchHosts": "Search hosts...",
-        "noHostsFound": "No hosts found",
-        "noMembers": "This fleet has no members yet. Add hosts or set a tag rule.",
-        "membersLoadFailed": "Failed to load fleet members",
-        "memberUpdateFailed": "Failed to update fleet membership",
-        "tabRun": "Run Command",
-        "tabTransfer": "Transfer Files",
-        "tabInventory": "Inventory",
-        "openInventoryTab": "Open in full tab",
-        "tabPackages": "Packages",
-        "runOnFleet": "Run on Fleet",
-        "commandPlaceholder": "uptime && df -h",
-        "commandRequired": "A command is required",
-        "commandInputsLabel": "Command inputs",
-        "commandSucceeded": "Command succeeded on all hosts",
-        "commandPartialFailure": "{{failed}} of {{total}} hosts failed",
-        "commandFailed": "Failed to run command",
-        "resultSuccess": "Success",
-        "resultFailed": "Failed",
-        "push": "Push",
-        "pull": "Pull",
-        "remotePathLabel": "Remote path",
-        "remotePathRequired": "A remote path is required",
-        "fileLabel": "File",
-        "fileRequired": "A file is required",
-        "pushHint": "The selected file is written to this exact path on every host in the fleet.",
-        "pullHint": "The file at this path is read from every host and downloaded as a single zip, one folder per host.",
-        "transferComplete": "Transfer complete",
-        "transferFailed": "Transfer failed",
-        "refreshInventory": "Refresh Inventory",
-        "inventoryLoadFailed": "Failed to load inventory",
-        "inventoryRefreshed": "Inventory refreshed",
-        "inventoryRefreshFailed": "Failed to refresh inventory",
-        "inventoryNoData": "No inventory data yet - refresh to collect it.",
-        "inventoryHost": "Host",
-        "inventoryCollectedCount": "{{count}}/{{total}} collected",
-        "inventoryOs": "OS",
-        "inventoryKernel": "Kernel",
-        "inventoryArch": "Arch",
-        "inventoryUptime": "Uptime",
-        "inventoryPackageManager": "Package manager",
-        "inventoryCollectedAt": "Collected",
-        "packageActionLabel": "Action",
-        "packageInstall": "Install",
-        "packageRemove": "Remove",
-        "packageUpgradeAll": "Upgrade all packages",
-        "packageNameLabel": "Package name",
-        "packageNameRequired": "A package name is required",
-        "packageHint": "Requires manage-level access per host and elevates using the host's stored sudo password.",
-        "shareFleet": "Share Fleet",
-        "shareFleetTitle": "Share \"{{name}}\"",
-        "shareFleetDescription": "Shares this fleet's current member hosts with the selected users or roles. Hosts added to the fleet later are not shared automatically - share again to include them.",
-        "shareSelectionRequired": "Select at least one user or role",
-        "fleetSharedSuccessfully": "Shared {{shared}} of {{total}} host(s) in this fleet",
-        "failedToShareFleet": "Failed to share fleet",
-        "noMembersToShare": "This fleet has no member hosts to share yet."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Fleets"
-  },
-  "hosts": {
-    "docsLink": "View docs",
-    "sharing": {
-      "customHoursPlaceholder": "Hours until access expires",
-      "expiry": {
-        "never": "Never",
-        "oneHour": "1 hour",
-        "oneDay": "24 hours",
-        "sevenDays": "7 days",
-        "thirtyDays": "30 days",
-        "custom": "Custom"
-      },
-      "expiryLabel": "Access expiry",
-      "levels": {
-        "connect": {
-          "label": "Connect",
-          "description": "Open sessions only: terminal, remote desktop, file manager, tunnels and Docker. No access to the host configuration."
-        },
-        "view": {
-          "label": "View",
-          "description": "Connect, plus see the host configuration. Secrets are never shown."
-        },
-        "edit": {
-          "label": "Edit",
-          "description": "View, plus modify non-authentication host settings. The owner's SSH authentication stays private and owner-only."
-        },
-        "manage": {
-          "label": "Manage",
-          "description": "Edit, plus share the host with others, change permission levels and revoke access."
-        }
-      },
-      "noMatches": "No matches found",
-      "permissionLevelLabel": "Permission level",
-      "rolesTab": "Roles",
-      "searchPlaceholder": "Search users or roles...",
-      "shareButton": "Share",
-      "shareWithCount": "Share ({{count}})",
-      "usersTab": "Users"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/af_ZA.json b/plugins/fleets/locales/translated/af_ZA.json
deleted file mode 100644
index 9c3d93c32..000000000
--- a/plugins/fleets/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Bekyk vlote",
-      "description": "Sien vlote, hul lede en inventaris."
-    },
-    "manage": {
-      "title": "Bestuur vlote",
-      "description": "Skep, wysig en verwyder vlote, verander lidmaatskap en deel vlote met ander gebruikers of rolle."
-    },
-    "execute": {
-      "title": "Voer vlootaksies uit",
-      "description": "Voer bevele en pakketaksies oor 'n vloot uit, en dra lêers na en van sy lidgashere oor."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Vlote",
-        "createFleet": "Skep Vloot",
-        "createFleetTitle": "Skep Vloot",
-        "editFleetTitle": "Wysig vloot",
-        "createFleetDescription": "'n Vloot is 'n benoemde groep gashere teen wie jy as 'n eenheid aksies kan uitvoer.",
-        "nameLabel": "Naam",
-        "namePlaceholder": "bv. webbedieners",
-        "nameRequired": "Vlootnaam word vereis",
-        "descriptionLabel": "Beskrywing",
-        "descriptionPlaceholder": "Opsionele beskrywing",
-        "colorLabel": "Kleur",
-        "tagRulesLabel": "Etiketreëls",
-        "tagRulesPlaceholder": "prod-web, rand",
-        "tagRulesHint": "Gashere met enige van hierdie etikette word outomaties ingesluit, benewens gashere wat handmatig bygevoeg word.",
-        "fleetCreated": "Vloot geskep",
-        "fleetUpdated": "Vloot opgedateer",
-        "fleetDeleted": "Vloot uitgevee",
-        "saveFailed": "Kon nie vloot stoor nie",
-        "deleteFailed": "Kon nie vloot uitvee nie",
-        "loadFailed": "Kon nie vlote laai nie",
-        "deleteFleetTitle": "Vee Vloot uit",
-        "deleteFleetDescription": "Is jy seker jy wil \"{{name}}\" verwyder? Dit verwyder nie die lidgashere self nie.",
-        "searchFleets": "Soek vlote...",
-        "noFleets": "Geen vlote nog nie. Skep een om te begin.",
-        "memberCount": "{{count}} gasheer",
-        "memberCount_other": "{{count}} gashere",
-        "manageMembers": "Bestuur Lede",
-        "manageMembersTitle": "Bestuur Vlootlede",
-        "manageMembersDescription": "Wissel gashere in of uit hierdie vloot se statiese lidmaatskap. Gashere wat ooreenstem met etiketreëls word altyd ingesluit.",
-        "searchHosts": "Soek gashere...",
-        "noHostsFound": "Geen gashere gevind nie",
-        "noMembers": "Hierdie vloot het nog geen lede nie. Voeg gashere by of stel 'n etiketreël.",
-        "membersLoadFailed": "Kon nie vlootlede laai nie",
-        "memberUpdateFailed": "Kon nie vlootlidmaatskap opdateer nie",
-        "tabRun": "Voer die opdrag uit",
-        "tabTransfer": "Dra lêers oor",
-        "tabInventory": "Voorraad",
-        "openInventoryTab": "Maak oop in volle oortjie",
-        "tabPackages": "Pakkette",
-        "runOnFleet": "Hardloop op Vloot",
-        "commandPlaceholder": "optyd && df -h",
-        "commandRequired": "'n Opdrag word vereis",
-        "commandInputsLabel": "Opdraginvoere",
-        "commandSucceeded": "Opdrag het op alle gashere geslaag",
-        "commandPartialFailure": "{{failed}} van {{total}} gashere het misluk",
-        "commandFailed": "Kon nie die opdrag uitvoer nie",
-        "resultSuccess": "Sukses",
-        "resultFailed": "Misluk",
-        "push": "Stoot",
-        "pull": "Trek",
-        "remotePathLabel": "Afgeleë pad",
-        "remotePathRequired": "'n Afgeleë pad word benodig",
-        "fileLabel": "Lêer",
-        "fileRequired": "'n Lêer word vereis",
-        "pushHint": "Die gekose lêer word na hierdie presiese pad op elke gasheer in die vloot geskryf.",
-        "pullHint": "Die lêer op hierdie pad word van elke gasheer gelees en as 'n enkele zip-lêer afgelaai, een lêergids per gasheer.",
-        "transferComplete": "Oordrag voltooi",
-        "transferFailed": "Oordrag het misluk",
-        "refreshInventory": "Verfris voorraad",
-        "inventoryLoadFailed": "Kon nie voorraad laai nie",
-        "inventoryRefreshed": "Voorraad verfris",
-        "inventoryRefreshFailed": "Kon nie voorraad verfris nie",
-        "inventoryNoData": "Geen voorraaddata nog nie - verfris om dit te versamel.",
-        "inventoryHost": "Gasheer",
-        "inventoryCollectedCount": "{{count}}/{{total}} versamel",
-        "inventoryOs": "OS",
-        "inventoryKernel": "Kern",
-        "inventoryArch": "Boog",
-        "inventoryUptime": "Optyd",
-        "inventoryPackageManager": "Pakketbestuurder",
-        "inventoryCollectedAt": "Versamel",
-        "packageActionLabel": "Aksie",
-        "packageInstall": "Installeer",
-        "packageRemove": "Verwyder",
-        "packageUpgradeAll": "Gradeer alle pakkette op",
-        "packageNameLabel": "Pakketnaam",
-        "packageNameRequired": "'n Pakketnaam word vereis",
-        "packageHint": "Vereis bestuursvlaktoegang per gasheer en verhoog met behulp van die gasheer se gestoorde sudo-wagwoord.",
-        "shareFleet": "Deel Vloot",
-        "shareFleetTitle": "Deel \"{{name}}\"",
-        "shareFleetDescription": "Deel hierdie vloot se huidige lid-gashere met die gekose gebruikers of rolle. Gashere wat later by die vloot gevoeg word, word nie outomaties gedeel nie - deel weer om hulle in te sluit.",
-        "shareSelectionRequired": "Kies ten minste een gebruiker of rol",
-        "fleetSharedSuccessfully": "Gedeelde {{shared}} van {{total}} gasheer(s) in hierdie vloot",
-        "failedToShareFleet": "Kon nie vloot deel nie",
-        "noMembersToShare": "Hierdie vloot het nog geen lidgashere om te deel nie."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Vlote"
-  },
-  "hosts": {
-    "docsLink": "Bekyk dokumente",
-    "sharing": {
-      "customHoursPlaceholder": "Ure totdat toegang verval",
-      "expiry": {
-        "never": "Nooit",
-        "oneHour": "1 uur",
-        "oneDay": "24 uur",
-        "sevenDays": "7 dae",
-        "thirtyDays": "30 dae",
-        "custom": "Pasgemaak"
-      },
-      "expiryLabel": "Toegang verval",
-      "levels": {
-        "connect": {
-          "label": "Verbind",
-          "description": "Slegs oop sessies: terminaal, afstandwerkskerm, lêerbestuurder, tonnels en Docker. Geen toegang tot die gasheerkonfigurasie nie."
-        },
-        "view": {
-          "label": "Bekyk",
-          "description": "Verbind, plus sien die gasheerkonfigurasie. Geheime word nooit gewys nie."
-        },
-        "edit": {
-          "label": "Wysig",
-          "description": "Bekyk, plus wysig nie-verifikasie gasheerinstellings. Die eienaar se SSH-verifikasie bly privaat en slegs vir die eienaar."
-        },
-        "manage": {
-          "label": "Bestuur",
-          "description": "Wysig, plus deel die gasheer met ander, verander toestemmingsvlakke en herroep toegang."
-        }
-      },
-      "noMatches": "Geen ooreenstemmings gevind nie",
-      "permissionLevelLabel": "Toestemmingsvlak",
-      "rolesTab": "Rolle",
-      "searchPlaceholder": "Soek gebruikers of rolle...",
-      "shareButton": "Deel",
-      "shareWithCount": "Deel ({{count}})",
-      "usersTab": "Gebruikers"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/ar_SA.json b/plugins/fleets/locales/translated/ar_SA.json
deleted file mode 100644
index 1cc595c61..000000000
--- a/plugins/fleets/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "عرض الأساطيل",
-      "description": "اطلع على الأساطيل وأعضائها ومخزونها."
-    },
-    "manage": {
-      "title": "إدارة الأساطيل",
-      "description": "إنشاء الأساطيل وتعديلها وحذفها، وتغيير العضوية، ومشاركة الأساطيل مع مستخدمين أو أدوار أخرى."
-    },
-    "execute": {
-      "title": "نفّذ عمليات الأسطول",
-      "description": "قم بتشغيل الأوامر وإجراءات الحزم عبر مجموعة من الأجهزة، ونقل الملفات من وإلى مضيفيها الأعضاء."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "الأساطيل",
-        "createFleet": "إنشاء أسطول",
-        "createFleetTitle": "إنشاء أسطول",
-        "editFleetTitle": "تعديل الأسطول",
-        "createFleetDescription": "الأسطول عبارة عن مجموعة محددة من المضيفين يمكنك شنّ عمليات ضدهم كوحدة واحدة.",
-        "nameLabel": "الاسم",
-        "namePlaceholder": "مثال: خوادم الويب",
-        "nameRequired": "اسم الأسطول مطلوب",
-        "descriptionLabel": "الوصف",
-        "descriptionPlaceholder": "وصف اختياري",
-        "colorLabel": "اللون",
-        "tagRulesLabel": "قواعد الوسوم",
-        "tagRulesPlaceholder": "موقع الإنتاج، الحافة",
-        "tagRulesHint": "يتم تضمين المضيفين الذين يحملون أيًا من هذه العلامات تلقائيًا، بالإضافة إلى المضيفين الذين تمت إضافتهم يدويًا.",
-        "fleetCreated": "تم إنشاء الأسطول",
-        "fleetUpdated": "تحديث الأسطول",
-        "fleetDeleted": "تم حذف الأسطول",
-        "saveFailed": "فشل في إنقاذ الأسطول",
-        "deleteFailed": "فشل حذف الأسطول",
-        "loadFailed": "فشل تحميل الأساطيل",
-        "deleteFleetTitle": "حذف الأسطول",
-        "deleteFleetDescription": "هل أنت متأكد من رغبتك في حذف \"{{name}}\"؟ هذا لا يحذف المضيفين الأعضاء أنفسهم.",
-        "searchFleets": "أساطيل البحث...",
-        "noFleets": "لا توجد أساطيل حتى الآن. أنشئ أسطولاً للبدء.",
-        "memberCount": "{{count}} المضيف",
-        "memberCount_other": "{{count}} مضيفات",
-        "manageMembers": "إدارة الأعضاء",
-        "manageMembersTitle": "إدارة أعضاء الأسطول",
-        "manageMembersDescription": "قم بتفعيل أو تعطيل عضوية المضيفين في هذه المجموعة الثابتة. يتم تضمين المضيفين الذين تتطابق قواعد الوسوم معهم دائمًا.",
-        "searchHosts": "ابحث عن مضيفين...",
-        "noHostsFound": "لم يتم العثور على مضيفين",
-        "noMembers": "لا يوجد أعضاء في هذا الأسطول حتى الآن. أضف مضيفين أو حدد قاعدة للوسوم.",
-        "membersLoadFailed": "فشل تحميل أعضاء الأسطول",
-        "memberUpdateFailed": "فشل تحديث عضوية الأسطول",
-        "tabRun": "تشغيل الأمر",
-        "tabTransfer": "نقل الملفات",
-        "tabInventory": "جرد",
-        "openInventoryTab": "افتح في علامة تبويب كاملة",
-        "tabPackages": "الحزم",
-        "runOnFleet": "انطلق على الأسطول",
-        "commandPlaceholder": "وقت التشغيل && df -h",
-        "commandRequired": "يلزم إصدار أمر",
-        "commandInputsLabel": "إدخالات الأوامر",
-        "commandSucceeded": "تم تنفيذ الأمر بنجاح على جميع الأجهزة المضيفة",
-        "commandPartialFailure": "فشل {{failed}} من أصل {{total}} مضيف",
-        "commandFailed": "فشل تنفيذ الأمر",
-        "resultSuccess": "نجاح",
-        "resultFailed": "فشل",
-        "push": "يدفع",
-        "pull": "يحذب",
-        "remotePathLabel": "المسار البعيد",
-        "remotePathRequired": "يلزم وجود مسار بعيد",
-        "fileLabel": "ملف",
-        "fileRequired": "الملف مطلوب",
-        "pushHint": "يتم كتابة الملف المحدد في هذا المسار المحدد على كل مضيف في الأسطول.",
-        "pullHint": "يتم قراءة الملف الموجود في هذا المسار من كل مضيف وتنزيله كملف مضغوط واحد، مجلد واحد لكل مضيف.",
-        "transferComplete": "اكتمل النقل",
-        "transferFailed": "فشل النقل",
-        "refreshInventory": "تحديث المخزون",
-        "inventoryLoadFailed": "فشل تحميل المخزون",
-        "inventoryRefreshed": "تم تحديث المخزون",
-        "inventoryRefreshFailed": "فشل تحديث المخزون",
-        "inventoryNoData": "لا توجد بيانات جرد حتى الآن - قم بتحديث الصفحة لجمعها.",
-        "inventoryHost": "المضيف",
-        "inventoryCollectedCount": "تم جمع {{count}}/{{total}}",
-        "inventoryOs": "نظام التشغيل",
-        "inventoryKernel": "النواة",
-        "inventoryArch": "قوس",
-        "inventoryUptime": "مدة التشغيل",
-        "inventoryPackageManager": "مدير الحزم",
-        "inventoryCollectedAt": "تم جمعها",
-        "packageActionLabel": "الإجراء",
-        "packageInstall": "ثَبَّتَ",
-        "packageRemove": "إزالة",
-        "packageUpgradeAll": "قم بترقية جميع الحزم",
-        "packageNameLabel": "اسم الحزمة",
-        "packageNameRequired": "اسم الحزمة مطلوب",
-        "packageHint": "يتطلب الوصول على مستوى الإدارة لكل مضيف ويتم رفعه باستخدام كلمة مرور sudo المخزنة للمضيف.",
-        "shareFleet": "أسطول مشترك",
-        "shareFleetTitle": "شارك \"{{name}}\"",
-        "shareFleetDescription": "يُشارك هذا الأمر أجهزة الأعضاء الحالية في هذه المجموعة مع المستخدمين أو الأدوار المُحددة. لا تتم مشاركة الأجهزة التي تُضاف إلى المجموعة لاحقًا تلقائيًا - يُرجى إعادة المشاركة لإضافتها.",
-        "shareSelectionRequired": "اختر مستخدمًا واحدًا أو دورًا واحدًا على الأقل",
-        "fleetSharedSuccessfully": "مشترك {{shared}} من {{total}} مضيف (مضيفين) في هذه المجموعة",
-        "failedToShareFleet": "فشل في مشاركة الأسطول",
-        "noMembersToShare": "لا يوجد لدى هذا الأسطول مضيفون أعضاء للمشاركة حتى الآن."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "الأساطيل"
-  },
-  "hosts": {
-    "docsLink": "عرض المستندات",
-    "sharing": {
-      "customHoursPlaceholder": "عدد الساعات حتى انتهاء صلاحية الوصول",
-      "expiry": {
-        "never": "أبدًا",
-        "oneHour": "ساعة واحدة",
-        "oneDay": "24 ساعة",
-        "sevenDays": "7 أيام",
-        "thirtyDays": "30 يومًا",
-        "custom": "مخصص"
-      },
-      "expiryLabel": "انتهاء صلاحية الوصول",
-      "levels": {
-        "connect": {
-          "label": "اتصال",
-          "description": "فتح الجلسات فقط: الطرفية، سطح المكتب البعيد، مدير الملفات، الأنفاق وDocker. لا يمكن الوصول إلى إعدادات المضيف."
-        },
-        "view": {
-          "label": "عرض",
-          "description": "الاتصال، بالإضافة إلى عرض إعدادات المضيف. لا تظهر الأسرار أبدًا."
-        },
-        "edit": {
-          "label": "تعديل",
-          "description": "يمكنك عرض وتعديل إعدادات المضيف غير المتعلقة بالمصادقة. تبقى مصادقة SSH الخاصة بالمالك سرية ومخصصة له فقط."
-        },
-        "manage": {
-          "label": "إدارة",
-          "description": "التعديل، بالإضافة إلى مشاركة المضيف مع الآخرين، وتغيير مستويات الصلاحية وإلغاء الوصول."
-        }
-      },
-      "noMatches": "لا توجد نتائج مطابقة",
-      "permissionLevelLabel": "مستوى الصلاحية",
-      "rolesTab": "الأدوار",
-      "searchPlaceholder": "البحث عن مستخدمين أو أدوار...",
-      "shareButton": "مشاركة",
-      "shareWithCount": "مشاركة ({{count}})",
-      "usersTab": "المستخدمون"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/bg_BG.json b/plugins/fleets/locales/translated/bg_BG.json
deleted file mode 100644
index 3a507829a..000000000
--- a/plugins/fleets/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Преглед на автопаркове",
-      "description": "Вижте автопаркове, техните членове и инвентар."
-    },
-    "manage": {
-      "title": "Управление на автопаркове",
-      "description": "Създавайте, редактирайте и изтривайте автопаркове, променяйте членството и споделяйте автопаркове с други потребители или роли."
-    },
-    "execute": {
-      "title": "Изпълняване на действия за флотилия",
-      "description": "Изпълнявайте команди и действия за пакетиране в рамките на флотилия и прехвърляйте файлове към и от нейните хостове-членки."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Флотили",
-        "createFleet": "Създаване на флот",
-        "createFleetTitle": "Създаване на флот",
-        "editFleetTitle": "Редактиране на флота",
-        "createFleetDescription": "Флотът е именувана група от хостове, срещу които можете да изпълнявате действия като единица.",
-        "nameLabel": "Име",
-        "namePlaceholder": "напр. уеб сървъри",
-        "nameRequired": "Името на флота е задължително",
-        "descriptionLabel": "Описание",
-        "descriptionPlaceholder": "Незадължително описание",
-        "colorLabel": "Цвят",
-        "tagRulesLabel": "Правила за етикети",
-        "tagRulesPlaceholder": "prod-web, ръб",
-        "tagRulesHint": "Хостовете с някой от тези етикети се включват автоматично, в допълнение към хостовете, добавени ръчно.",
-        "fleetCreated": "Създаден флот",
-        "fleetUpdated": "Актуализиран автопарк",
-        "fleetDeleted": "Флотът е изтрит",
-        "saveFailed": "Запазването на флота не бе успешно",
-        "deleteFailed": "Изтриването на автопарка не бе успешно",
-        "loadFailed": "Зареждането на автопарковете не бе успешно",
-        "deleteFleetTitle": "Изтриване на флота",
-        "deleteFleetDescription": "Сигурни ли сте, че искате да изтриете „{{name}}“? Това не изтрива самите хостове-членове.",
-        "searchFleets": "Търсене на автопаркове...",
-        "noFleets": "Все още няма автопаркове. Създайте такъв, за да започнете.",
-        "memberCount": "{{count}} хост",
-        "memberCount_other": "{{count}} хостове",
-        "manageMembers": "Управление на членовете",
-        "manageMembersTitle": "Управление на членовете на автопарка",
-        "manageMembersDescription": "Включване/изключване на хостове от статичното членство на този флот. Хостовете, съответстващи на правилата за тагове, винаги са включени.",
-        "searchHosts": "Търсене на хостове...",
-        "noHostsFound": "Не са намерени хостове",
-        "noMembers": "Тази флотилия все още няма членове. Добавете хостове или задайте правило за етикетиране.",
-        "membersLoadFailed": "Зареждането на членовете на автопарка не бе успешно",
-        "memberUpdateFailed": "Актуализирането на членството в автопарка не бе успешно",
-        "tabRun": "Изпълнете командата",
-        "tabTransfer": "Прехвърляне на файлове",
-        "tabInventory": "Инвентар",
-        "openInventoryTab": "Отвори в цял раздел",
-        "tabPackages": "Пакети",
-        "runOnFleet": "Работи на флота",
-        "commandPlaceholder": "време на работа && df -h",
-        "commandRequired": "Изисква се команда",
-        "commandInputsLabel": "Входни команди",
-        "commandSucceeded": "Командата е успешна на всички хостове",
-        "commandPartialFailure": "{{failed}} от {{total}} хостове неуспешно",
-        "commandFailed": "Неуспешно изпълнение на командата",
-        "resultSuccess": "Успех",
-        "resultFailed": "Неуспешно",
-        "push": "Натиснете",
-        "pull": "Дръпнете",
-        "remotePathLabel": "Отдалечен път",
-        "remotePathRequired": "Изисква се отдалечен път",
-        "fileLabel": "Файл",
-        "fileRequired": "Изисква се файл",
-        "pushHint": "Избраният файл се записва точно по този път на всеки хост във флота.",
-        "pullHint": "Файлът по този път се чете от всеки хост и се изтегля като един zip архив, по една папка на хост.",
-        "transferComplete": "Прехвърлянето е завършено",
-        "transferFailed": "Прехвърлянето не бе успешно",
-        "refreshInventory": "Обновяване на инвентара",
-        "inventoryLoadFailed": "Зареждането на инвентара не бе успешно",
-        "inventoryRefreshed": "Инвентаризацията е обновена",
-        "inventoryRefreshFailed": "Неуспешно обновяване на инвентара",
-        "inventoryNoData": "Все още няма данни за инвентара - обновете страницата, за да ги съберете.",
-        "inventoryHost": "Домакин",
-        "inventoryCollectedCount": "{{count}}/{{total}} събрани",
-        "inventoryOs": "ОС",
-        "inventoryKernel": "Ядро",
-        "inventoryArch": "Арка",
-        "inventoryUptime": "Време на работа",
-        "inventoryPackageManager": "Мениджър на пакети",
-        "inventoryCollectedAt": "Събрани",
-        "packageActionLabel": "Действие",
-        "packageInstall": "Инсталиране",
-        "packageRemove": "Премахване",
-        "packageUpgradeAll": "Надстройте всички пакети",
-        "packageNameLabel": "Име на пакета",
-        "packageNameRequired": "Изисква се име на пакета",
-        "packageHint": "Изисква достъп на ниво управление за всеки хост и повишава правата, използвайки съхранената sudo парола на хоста.",
-        "shareFleet": "Споделяне на флота",
-        "shareFleetTitle": "Сподели „{{name}}“",
-        "shareFleetDescription": "Споделя текущите хостове-членове на този флот с избраните потребители или роли. Хостовете, добавени към флота по-късно, не се споделят автоматично - споделете отново, за да ги включите.",
-        "shareSelectionRequired": "Изберете поне един потребител или роля",
-        "fleetSharedSuccessfully": "Споделени {{shared}} от {{total}} хост(а) в този флот",
-        "failedToShareFleet": "Споделянето на автопарка не бе успешно",
-        "noMembersToShare": "Този флот все още няма хостове-членове за споделяне."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Флотили"
-  },
-  "hosts": {
-    "docsLink": "Преглед на документи",
-    "sharing": {
-      "customHoursPlaceholder": "Часове до изтичане на срока на достъп",
-      "expiry": {
-        "never": "Никога",
-        "oneHour": "1 час",
-        "oneDay": "24 часа",
-        "sevenDays": "7 дни",
-        "thirtyDays": "30 дни",
-        "custom": "Персонализирано"
-      },
-      "expiryLabel": "Изтичане на достъпа",
-      "levels": {
-        "connect": {
-          "label": "Свържете се",
-          "description": "Само отворени сесии: терминал, отдалечен работен плот, файлов мениджър, тунели и Docker. Няма достъп до конфигурацията на хоста."
-        },
-        "view": {
-          "label": "Преглед",
-          "description": "Свържете се, плюс вижте конфигурацията на хоста. Тайните никога не се показват."
-        },
-        "edit": {
-          "label": "Редактиране",
-          "description": "Преглеждайте и променяйте настройките на хоста без удостоверяване. SSH удостоверяването на собственика остава частно и само за собственика."
-        },
-        "manage": {
-          "label": "Управление",
-          "description": "Редактирайте, плюс споделяйте хоста с други, променяйте нивата на разрешения и отменяйте достъпа."
-        }
-      },
-      "noMatches": "Няма намерени съвпадения",
-      "permissionLevelLabel": "Ниво на разрешение",
-      "rolesTab": "Роли",
-      "searchPlaceholder": "Търсене на потребители или роли...",
-      "shareButton": "Споделяне",
-      "shareWithCount": "Споделяне ({{count}})",
-      "usersTab": "Потребители"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/bn_BD.json b/plugins/fleets/locales/translated/bn_BD.json
deleted file mode 100644
index 1cc33d3a6..000000000
--- a/plugins/fleets/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "ফ্লিটগুলি দেখুন",
-      "description": "নৌবহর, তাদের সদস্য এবং মজুদ দেখুন।"
-    },
-    "manage": {
-      "title": "ফ্লিট পরিচালনা করুন",
-      "description": "ফ্লিট তৈরি, সম্পাদনা ও মুছে ফেলুন, সদস্যপদ পরিবর্তন করুন এবং অন্যান্য ব্যবহারকারী বা ভূমিকার সাথে ফ্লিট শেয়ার করুন।"
-    },
-    "execute": {
-      "title": "ফ্লিট অ্যাকশন চালান",
-      "description": "একটি ফ্লিট জুড়ে কমান্ড ও প্যাকেজ অ্যাকশন চালান, এবং এর সদস্য হোস্টগুলোতে ফাইল আদান-প্রদান করুন।"
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "ফ্লিট",
-        "createFleet": "ফ্লিট তৈরি করুন",
-        "createFleetTitle": "ফ্লিট তৈরি করুন",
-        "editFleetTitle": "ফ্লিট সম্পাদনা করুন",
-        "createFleetDescription": "ফ্লিট হলো নামযুক্ত হোস্টদের একটি দল, যাদের বিরুদ্ধে আপনি একটি ইউনিট হিসেবে বিভিন্ন অ্যাকশন চালাতে পারেন।",
-        "nameLabel": "নাম",
-        "namePlaceholder": "যেমন, ওয়েব সার্ভার",
-        "nameRequired": "ফ্লিটের নাম প্রয়োজন",
-        "descriptionLabel": "বর্ণনা",
-        "descriptionPlaceholder": "ঐচ্ছিক বিবরণ",
-        "colorLabel": "রঙ",
-        "tagRulesLabel": "ট্যাগ নিয়ম",
-        "tagRulesPlaceholder": "প্রোড-ওয়েব, এজ",
-        "tagRulesHint": "ম্যানুয়ালি যোগ করা হোস্টগুলোর পাশাপাশি, এই ট্যাগগুলোর যেকোনো একটি থাকা হোস্টগুলো স্বয়ংক্রিয়ভাবে অন্তর্ভুক্ত হয়ে যায়।",
-        "fleetCreated": "ফ্লিট তৈরি করা হয়েছে",
-        "fleetUpdated": "ফ্লিট আপডেট করা হয়েছে",
-        "fleetDeleted": "ফ্লিট মুছে ফেলা হয়েছে",
-        "saveFailed": "বহর সংরক্ষণ করতে ব্যর্থ হয়েছে",
-        "deleteFailed": "ফ্লিট মুছে ফেলতে ব্যর্থ হয়েছে",
-        "loadFailed": "ফ্লিট লোড করতে ব্যর্থ হয়েছে",
-        "deleteFleetTitle": "ফ্লিট মুছুন",
-        "deleteFleetDescription": "আপনি কি \"{{name}}\" মুছে ফেলতে নিশ্চিত? এটি সদস্য হোস্টদেরকে মুছে ফেলে না।",
-        "searchFleets": "নৌবহর অনুসন্ধান করুন...",
-        "noFleets": "এখনো কোনো ফ্লিট নেই। শুরু করার জন্য একটি তৈরি করুন।",
-        "memberCount": "{{count}} হোস্ট",
-        "memberCount_other": "{{count}} হোস্ট",
-        "manageMembers": "সদস্যদের পরিচালনা করুন",
-        "manageMembersTitle": "ফ্লিট সদস্যদের পরিচালনা করুন",
-        "manageMembersDescription": "এই ফ্লিটের স্ট্যাটিক সদস্যপদে হোস্টদের অন্তর্ভুক্ত বা বহির্ভূত করুন। ট্যাগ নিয়ম দ্বারা মেলানো হোস্টরা সর্বদা অন্তর্ভুক্ত থাকে।",
-        "searchHosts": "হোস্ট অনুসন্ধান করুন...",
-        "noHostsFound": "কোন হোস্ট খুঁজে পাওয়া যায়নি",
-        "noMembers": "এই ফ্লিটে এখনও কোনো সদস্য নেই। হোস্ট যোগ করুন অথবা একটি ট্যাগ নিয়ম সেট করুন।",
-        "membersLoadFailed": "ফ্লিট সদস্যদের লোড করতে ব্যর্থ হয়েছে",
-        "memberUpdateFailed": "ফ্লিট সদস্যপদ আপডেট করতে ব্যর্থ হয়েছে",
-        "tabRun": "রান কমান্ড",
-        "tabTransfer": "ফাইল স্থানান্তর করুন",
-        "tabInventory": "ইনভেন্টরি",
-        "openInventoryTab": "সম্পূর্ণ ট্যাবে খুলুন",
-        "tabPackages": "প্যাকেজ",
-        "runOnFleet": "ফ্লিটে চালান",
-        "commandPlaceholder": "আপটাইম && df -h",
-        "commandRequired": "একটি কমান্ড প্রয়োজন",
-        "commandInputsLabel": "কমান্ড ইনপুট",
-        "commandSucceeded": "সকল হোস্টে কমান্ড সফল হয়েছে।",
-        "commandPartialFailure": "{{failed}} এর {{total}} হোস্ট ব্যর্থ হয়েছে",
-        "commandFailed": "কমান্ড চালাতে ব্যর্থ হয়েছে",
-        "resultSuccess": "সাফল্য",
-        "resultFailed": "ব্যর্থ",
-        "push": "ধাক্কা দিন",
-        "pull": "টান",
-        "remotePathLabel": "দূরবর্তী পথ",
-        "remotePathRequired": "একটি দূরবর্তী পথের প্রয়োজন",
-        "fileLabel": "ফাইল",
-        "fileRequired": "একটি ফাইল প্রয়োজন",
-        "pushHint": "নির্বাচিত ফাইলটি ফ্লিটের প্রতিটি হোস্টের এই নির্দিষ্ট পাথে লেখা হয়।",
-        "pullHint": "এই পাথের ফাইলটি প্রতিটি হোস্ট থেকে পড়া হয় এবং একটি একক জিপ ফাইল হিসেবে ডাউনলোড করা হয়, যা প্রতি হোস্টে একটি করে ফোল্ডারে বিভক্ত থাকে।",
-        "transferComplete": "স্থানান্তর সম্পন্ন হয়েছে",
-        "transferFailed": "স্থানান্তর ব্যর্থ হয়েছে",
-        "refreshInventory": "ইনভেন্টরি রিফ্রেশ করুন",
-        "inventoryLoadFailed": "ইনভেন্টরি লোড করতে ব্যর্থ হয়েছে",
-        "inventoryRefreshed": "ইনভেন্টরি রিফ্রেশ করা হয়েছে",
-        "inventoryRefreshFailed": "ইনভেন্টরি রিফ্রেশ করতে ব্যর্থ হয়েছে",
-        "inventoryNoData": "এখনও কোনো ইনভেন্টরি ডেটা নেই - এটি সংগ্রহ করতে রিফ্রেশ করুন।",
-        "inventoryHost": "হোস্ট",
-        "inventoryCollectedCount": "{{count}}/{{total}} সংগৃহীত",
-        "inventoryOs": "ওএস",
-        "inventoryKernel": "কার্নেল",
-        "inventoryArch": "খিলান",
-        "inventoryUptime": "আপটাইম",
-        "inventoryPackageManager": "প্যাকেজ ম্যানেজার",
-        "inventoryCollectedAt": "সংগৃহীত",
-        "packageActionLabel": "পদক্ষেপ",
-        "packageInstall": "ইনস্টল করুন",
-        "packageRemove": "অপসারণ করুন",
-        "packageUpgradeAll": "সমস্ত প্যাকেজ আপগ্রেড করুন",
-        "packageNameLabel": "প্যাকেজের নাম",
-        "packageNameRequired": "একটি প্যাকেজের নাম প্রয়োজন",
-        "packageHint": "প্রতিটি হোস্টের জন্য ম্যানেজ-লেভেল অ্যাক্সেস প্রয়োজন এবং হোস্টের সংরক্ষিত sudo পাসওয়ার্ড ব্যবহার করে অ্যাক্সেস উন্নত করা হয়।",
-        "shareFleet": "শেয়ার ফ্লিট",
-        "shareFleetTitle": "শেয়ার করুন \"{{name}}\"",
-        "shareFleetDescription": "এই ফ্লিটের বর্তমান সদস্য হোস্টগুলোকে নির্বাচিত ব্যবহারকারী বা রোলের সাথে শেয়ার করে। ফ্লিটে পরে যোগ করা হোস্টগুলো স্বয়ংক্রিয়ভাবে শেয়ার হয় না - সেগুলোকে অন্তর্ভুক্ত করতে আবার শেয়ার করুন।",
-        "shareSelectionRequired": "অন্তত একজন ব্যবহারকারী বা ভূমিকা নির্বাচন করুন",
-        "fleetSharedSuccessfully": "এই ফ্লিটে {{total}} টি {{shared}} টি শেয়ার করা হোস্ট রয়েছে।",
-        "failedToShareFleet": "ফ্লিট শেয়ার করতে ব্যর্থ হয়েছে",
-        "noMembersToShare": "এই ফ্লিটে এখনও শেয়ার করার মতো কোনো সদস্য হোস্ট নেই।"
-      }
-    }
-  },
-  "nav": {
-    "fleets": "ফ্লিট"
-  },
-  "hosts": {
-    "docsLink": "নথি দেখুন",
-    "sharing": {
-      "customHoursPlaceholder": "অ্যাক্সেসের মেয়াদ শেষ হতে বাকি ঘন্টা",
-      "expiry": {
-        "never": "কখনো না",
-        "oneHour": "১ ঘন্টা",
-        "oneDay": "২৪ ঘন্টা",
-        "sevenDays": "৭ দিন",
-        "thirtyDays": "৩০ দিন",
-        "custom": "কাস্টম"
-      },
-      "expiryLabel": "অ্যাক্সেসের মেয়াদ শেষ",
-      "levels": {
-        "connect": {
-          "label": "সংযোগ করুন",
-          "description": "শুধুমাত্র টার্মিনাল, রিমোট ডেস্কটপ, ফাইল ম্যানেজার, টানেল এবং ডকার সেশনগুলো খোলা থাকবে। হোস্ট কনফিগারেশনে কোনো অ্যাক্সেস নেই।"
-        },
-        "view": {
-          "label": "দেখুন",
-          "description": "সংযোগ করুন, এবং হোস্ট কনফিগারেশন দেখুন। গোপনীয় তথ্য কখনোই দেখানো হয় না।"
-        },
-        "edit": {
-          "label": "সম্পাদনা",
-          "description": "নন-অথেনটিকেশন হোস্ট সেটিংস দেখুন এবং পরিবর্তন করুন। মালিকের SSH অথেনটিকেশন ব্যক্তিগত এবং শুধুমাত্র মালিকের জন্যই সংরক্ষিত থাকে।"
-        },
-        "manage": {
-          "label": "পরিচালনা করুন",
-          "description": "সম্পাদনা করুন, সেইসাথে অন্যদের সাথে হোস্টটি শেয়ার করুন, অনুমতির স্তর পরিবর্তন করুন এবং অ্যাক্সেস প্রত্যাহার করুন।"
-        }
-      },
-      "noMatches": "কোনো মিল খুঁজে পাওয়া যায়নি",
-      "permissionLevelLabel": "অনুমতি স্তর",
-      "rolesTab": "ভূমিকা",
-      "searchPlaceholder": "ব্যবহারকারী বা ভূমিকা অনুসন্ধান করুন...",
-      "shareButton": "শেয়ার",
-      "shareWithCount": "শেয়ার করুন ({{count}})",
-      "usersTab": "ব্যবহারকারীরা"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/ca_ES.json b/plugins/fleets/locales/translated/ca_ES.json
deleted file mode 100644
index f458e6aba..000000000
--- a/plugins/fleets/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Veure flotes",
-      "description": "Veure flotes, els seus membres i l'inventari."
-    },
-    "manage": {
-      "title": "Gestionar flotes",
-      "description": "Crea, edita i elimina flotes, canvia la pertinença i comparteix flotes amb altres usuaris o rols."
-    },
-    "execute": {
-      "title": "Executar accions de flota",
-      "description": "Executa ordres i crea accions de paquets a través d'una flota i transfereix fitxers des de i cap als seus amfitrions membres."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Flotes",
-        "createFleet": "Crear flota",
-        "createFleetTitle": "Crear flota",
-        "editFleetTitle": "Edita la flota",
-        "createFleetDescription": "Una flota és un grup d'amfitrions amb nom contra els quals podeu executar accions com una unitat.",
-        "nameLabel": "Nom",
-        "namePlaceholder": "p. ex., servidors web",
-        "nameRequired": "El nom de la flota és obligatori",
-        "descriptionLabel": "Descripció",
-        "descriptionPlaceholder": "Descripció opcional",
-        "colorLabel": "Color",
-        "tagRulesLabel": "Regles d'etiquetes",
-        "tagRulesPlaceholder": "prod-web, vora",
-        "tagRulesHint": "Els amfitrions amb qualsevol d'aquestes etiquetes s'inclouen automàticament, a més dels amfitrions afegits manualment.",
-        "fleetCreated": "Flota creada",
-        "fleetUpdated": "Flota actualitzada",
-        "fleetDeleted": "Flota suprimida",
-        "saveFailed": "No s'ha pogut desar la flota",
-        "deleteFailed": "No s'ha pogut suprimir la flota",
-        "loadFailed": "No s'han pogut carregar les flotes",
-        "deleteFleetTitle": "Suprimeix la flota",
-        "deleteFleetDescription": "Esteu segur que voleu suprimir \"{{name}}\"? Això no suprimeix els amfitrions membres en si.",
-        "searchFleets": "Cerca flotes...",
-        "noFleets": "Encara no hi ha cap flota. Crea'n una per començar.",
-        "memberCount": "amfitrió {{count}}",
-        "memberCount_other": "amfitrions {{count}}",
-        "manageMembers": "Gestiona els membres",
-        "manageMembersTitle": "Gestionar els membres de la flota",
-        "manageMembersDescription": "Activa o desactiva la pertinença estàtica dels hosts a aquesta flota. Els hosts que coincideixen amb les regles d'etiqueta sempre s'hi inclouen.",
-        "searchHosts": "Cerca amfitrions...",
-        "noHostsFound": "No s'han trobat amfitrions",
-        "noMembers": "Aquesta flota encara no té membres. Afegeix amfitrions o defineix una regla d'etiqueta.",
-        "membersLoadFailed": "No s'han pogut carregar els membres de la flota",
-        "memberUpdateFailed": "No s'ha pogut actualitzar la pertinença a la flota",
-        "tabRun": "Executa l'ordre",
-        "tabTransfer": "Transferir fitxers",
-        "tabInventory": "Inventari",
-        "openInventoryTab": "Obre en una pestanya completa",
-        "tabPackages": "Paquets",
-        "runOnFleet": "Funciona amb Flota",
-        "commandPlaceholder": "temps de funcionament && df -h",
-        "commandRequired": "Cal una comanda",
-        "commandInputsLabel": "Entrades de comandament",
-        "commandSucceeded": "L'ordre ha tingut èxit en tots els hosts",
-        "commandPartialFailure": "Els hosts han fallat {{failed}} de {{total}}",
-        "commandFailed": "No s'ha pogut executar l'ordre",
-        "resultSuccess": "Èxit",
-        "resultFailed": "Fallat",
-        "push": "Empènyer",
-        "pull": "Estirar",
-        "remotePathLabel": "Camí remot",
-        "remotePathRequired": "Cal una ruta remota",
-        "fileLabel": "Fitxer",
-        "fileRequired": "Es requereix un fitxer",
-        "pushHint": "El fitxer seleccionat s'escriu a aquesta ruta exacta a tots els hosts de la flota.",
-        "pullHint": "El fitxer d'aquesta ruta es llegeix des de tots els hosts i es descarrega com un únic zip, una carpeta per host.",
-        "transferComplete": "Transferència completada",
-        "transferFailed": "La transferència ha fallat",
-        "refreshInventory": "Actualitza l'inventari",
-        "inventoryLoadFailed": "No s'ha pogut carregar l'inventari",
-        "inventoryRefreshed": "Inventari actualitzat",
-        "inventoryRefreshFailed": "No s'ha pogut actualitzar l'inventari",
-        "inventoryNoData": "Encara no hi ha dades d'inventari; actualitza la pàgina per recopilar-les.",
-        "inventoryHost": "Amfitrió",
-        "inventoryCollectedCount": "{{count}}/{{total}} recollit",
-        "inventoryOs": "Sistema operatiu",
-        "inventoryKernel": "Nucli",
-        "inventoryArch": "Arc",
-        "inventoryUptime": "Temps de funcionament",
-        "inventoryPackageManager": "Gestor de paquets",
-        "inventoryCollectedAt": "Recollit",
-        "packageActionLabel": "Acció",
-        "packageInstall": "Instal·la",
-        "packageRemove": "Elimina",
-        "packageUpgradeAll": "Actualitza tots els paquets",
-        "packageNameLabel": "Nom del paquet",
-        "packageNameRequired": "Cal un nom de paquet",
-        "packageHint": "Requereix accés de nivell d'administració per host i eleva els privilegis mitjançant la contrasenya sudo emmagatzemada per l'host.",
-        "shareFleet": "Comparteix flota",
-        "shareFleetTitle": "Comparteix \"{{name}}\"",
-        "shareFleetDescription": "Comparteix els amfitrions membres actuals d'aquesta flota amb els usuaris o rols seleccionats. Els amfitrions afegits a la flota més tard no es comparteixen automàticament; torneu a compartir per incloure'ls.",
-        "shareSelectionRequired": "Seleccioneu com a mínim un usuari o rol",
-        "fleetSharedSuccessfully": "S'han compartit {{shared}} de {{total}} hosts en aquesta flota",
-        "failedToShareFleet": "No s'ha pogut compartir la flota",
-        "noMembersToShare": "Aquesta flota encara no té amfitrions membres per compartir."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Flotes"
-  },
-  "hosts": {
-    "docsLink": "Veure documents",
-    "sharing": {
-      "customHoursPlaceholder": "Hores fins que caduca l'accés",
-      "expiry": {
-        "never": "Mai",
-        "oneHour": "1 hora",
-        "oneDay": "24 hores",
-        "sevenDays": "7 dies",
-        "thirtyDays": "30 dies",
-        "custom": "Personalitzat"
-      },
-      "expiryLabel": "Caducitat de l'accés",
-      "levels": {
-        "connect": {
-          "label": "Connecta",
-          "description": "Només sessions obertes: terminal, escriptori remot, gestor de fitxers, túnels i Docker. No hi ha accés a la configuració de l'amfitrió."
-        },
-        "view": {
-          "label": "Vista",
-          "description": "Connecta't i consulta la configuració de l'amfitrió. Els secrets no es mostren mai."
-        },
-        "edit": {
-          "label": "Edita",
-          "description": "Visualitza i modifica la configuració de l'amfitrió que no és d'autenticació. L'autenticació SSH del propietari es manté privada i només del propietari."
-        },
-        "manage": {
-          "label": "Gestiona",
-          "description": "Edita i comparteix l'amfitrió amb altres persones, canvia els nivells de permisos i revoca l'accés."
-        }
-      },
-      "noMatches": "No s'han trobat coincidències",
-      "permissionLevelLabel": "Nivell de permís",
-      "rolesTab": "Rols",
-      "searchPlaceholder": "Cerca usuaris o rols...",
-      "shareButton": "Comparteix",
-      "shareWithCount": "Comparteix ({{count}})",
-      "usersTab": "Usuaris"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/cs_CZ.json b/plugins/fleets/locales/translated/cs_CZ.json
deleted file mode 100644
index 77d02ce30..000000000
--- a/plugins/fleets/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Zobrazit flotily",
-      "description": "Prohlédněte si flotily, jejich členy a inventář."
-    },
-    "manage": {
-      "title": "Správa vozových parků",
-      "description": "Vytvářejte, upravujte a mazejte flotily, měňte členství a sdílejte flotily s ostatními uživateli nebo rolemi."
-    },
-    "execute": {
-      "title": "Spouštění akcí flotily",
-      "description": "Spouštět příkazy a akce balíčků napříč flotilou a přenášet soubory do a z jejích členských hostitelů."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Flotily",
-        "createFleet": "Vytvořit flotilu",
-        "createFleetTitle": "Vytvořit flotilu",
-        "editFleetTitle": "Upravit flotilu",
-        "createFleetDescription": "Flotila je pojmenovaná skupina hostitelů, proti kterým můžete jako jednotce spouštět akce.",
-        "nameLabel": "Jméno",
-        "namePlaceholder": "např. webové servery",
-        "nameRequired": "Název flotily je povinný",
-        "descriptionLabel": "Popis",
-        "descriptionPlaceholder": "Volitelný popis",
-        "colorLabel": "Barva",
-        "tagRulesLabel": "Pravidla pro tagy",
-        "tagRulesPlaceholder": "prod-web, okraj",
-        "tagRulesHint": "Hostitelé s některým z těchto tagů jsou zahrnuti automaticky, kromě hostitelů přidaných ručně.",
-        "fleetCreated": "Vytvořená flotila",
-        "fleetUpdated": "Aktualizace vozového parku",
-        "fleetDeleted": "Flotila smazána",
-        "saveFailed": "Uložení flotily se nezdařilo",
-        "deleteFailed": "Nepodařilo se smazat flotilu",
-        "loadFailed": "Načtení flotil se nezdařilo",
-        "deleteFleetTitle": "Smazat flotilu",
-        "deleteFleetDescription": "Opravdu chcete smazat „{{name}}“? Tímto se neodstraní samotní hostitelé členů.",
-        "searchFleets": "Hledat flotily...",
-        "noFleets": "Zatím žádné flotily. Vytvořte si jednu a začněte.",
-        "memberCount": "{{count}} hostitel",
-        "memberCount_other": "{{count}} hostitelé",
-        "manageMembers": "Spravovat členy",
-        "manageMembersTitle": "Správa členů vozového parku",
-        "manageMembersDescription": "Přepíná hostitele do statického členství této flotily nebo z něj. Hostitelé odpovídající pravidlům tagů jsou vždy zahrnuti.",
-        "searchHosts": "Hledat hostitele…",
-        "noHostsFound": "Nenalezeny žádné hostitele",
-        "noMembers": "Tato flotila zatím nemá žádné členy. Přidejte hostitele nebo nastavte pravidlo pro tagy.",
-        "membersLoadFailed": "Nepodařilo se načíst členy flotily",
-        "memberUpdateFailed": "Nepodařilo se aktualizovat členství ve flotile",
-        "tabRun": "Spustit příkaz",
-        "tabTransfer": "Přenos souborů",
-        "tabInventory": "Inventář",
-        "openInventoryTab": "Otevřít na celou kartu",
-        "tabPackages": "Balíčky",
-        "runOnFleet": "Běh na flotile",
-        "commandPlaceholder": "doba provozuschopnosti && df -h",
-        "commandRequired": "Je vyžadován příkaz",
-        "commandInputsLabel": "Vstupy příkazů",
-        "commandSucceeded": "Příkaz byl úspěšný na všech hostitelích",
-        "commandPartialFailure": "{{failed}} z {{total}} hostitelů selhalo",
-        "commandFailed": "Nepodařilo se spustit příkaz",
-        "resultSuccess": "Úspěch",
-        "resultFailed": "Selhalo",
-        "push": "TAM",
-        "pull": "SEM",
-        "remotePathLabel": "Vzdálená cesta",
-        "remotePathRequired": "Je vyžadována vzdálená cesta.",
-        "fileLabel": "Soubor",
-        "fileRequired": "Je vyžadován soubor",
-        "pushHint": "Vybraný soubor se zapíše do této přesné cesty na každém hostiteli ve flotile.",
-        "pullHint": "Soubor v této cestě je načten z každého hostitele a stažen jako jeden zip soubor, jedna složka na hostitele.",
-        "transferComplete": "Převod dokončen",
-        "transferFailed": "Přenos se nezdařil",
-        "refreshInventory": "Obnovit inventář",
-        "inventoryLoadFailed": "Nepodařilo se načíst inventář",
-        "inventoryRefreshed": "Obnovení zásob",
-        "inventoryRefreshFailed": "Nepodařilo se aktualizovat inventář",
-        "inventoryNoData": "Zatím nejsou k dispozici žádná data o zásobách – obnovte stránku pro jejich shromažďování.",
-        "inventoryHost": "Hostitel",
-        "inventoryCollectedCount": "{{count}}/{{total}} shromážděno",
-        "inventoryOs": "OS",
-        "inventoryKernel": "Jádro",
-        "inventoryArch": "Oblouk",
-        "inventoryUptime": "Doba provozuschopnosti",
-        "inventoryPackageManager": "Správce balíčků",
-        "inventoryCollectedAt": "Sebrané",
-        "packageActionLabel": "Akce",
-        "packageInstall": "Instalovat",
-        "packageRemove": "Odstranit",
-        "packageUpgradeAll": "Aktualizujte všechny balíčky",
-        "packageNameLabel": "Název balíčku",
-        "packageNameRequired": "Je vyžadován název balíčku.",
-        "packageHint": "Vyžaduje přístup na úrovni správy pro každého hostitele a zvyšuje oprávnění pomocí uloženého hesla sudo hostitele.",
-        "shareFleet": "Sdílení flotily",
-        "shareFleetTitle": "Sdílet „{{name}}“",
-        "shareFleetDescription": "Sdílí aktuální členské hostitele této flotily s vybranými uživateli nebo rolemi. Hostitelé přidaní do flotily později se nesdílejí automaticky – chcete-li je zahrnout, sdílejte je znovu.",
-        "shareSelectionRequired": "Vyberte alespoň jednoho uživatele nebo roli",
-        "fleetSharedSuccessfully": "Sdílený {{shared}} z {{total}} hostitel(ů) v této flotile",
-        "failedToShareFleet": "Sdílení flotily se nezdařilo",
-        "noMembersToShare": "Tato flotila zatím nemá žádné členské hostitele, o které by se dalo sdílet."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Flotily"
-  },
-  "hosts": {
-    "docsLink": "Zobrazit dokumenty",
-    "sharing": {
-      "customHoursPlaceholder": "Hodiny do vypršení přístupu",
-      "expiry": {
-        "never": "Nikdy",
-        "oneHour": "1 hodina",
-        "oneDay": "24 hodin",
-        "sevenDays": "7 dní",
-        "thirtyDays": "30 dní",
-        "custom": "Zvyk"
-      },
-      "expiryLabel": "Vypršení přístupu",
-      "levels": {
-        "connect": {
-          "label": "Připojit",
-          "description": "Pouze otevřené relace: terminál, vzdálená plocha, správce souborů, tunely a Docker. Bez přístupu ke konfiguraci hostitele."
-        },
-        "view": {
-          "label": "Pohled",
-          "description": "Připojení a zobrazení konfigurace hostitele. Tajné kódy se nikdy nezobrazují."
-        },
-        "edit": {
-          "label": "Upravit",
-          "description": "Zobrazení a úprava nastavení hostitele bez ověřování. Ověřování vlastníka přes SSH zůstává soukromé a pouze pro vlastníka."
-        },
-        "manage": {
-          "label": "Spravovat",
-          "description": "Upravovat a sdílet hostitele s ostatními, měnit úrovně oprávnění a odebírat přístup."
-        }
-      },
-      "noMatches": "Nenalezeny žádné shody",
-      "permissionLevelLabel": "Úroveň oprávnění",
-      "rolesTab": "Role",
-      "searchPlaceholder": "Hledat uživatele nebo role...",
-      "shareButton": "Podíl",
-      "shareWithCount": "Sdílet ({{count}})",
-      "usersTab": "Uživatelé"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/da_DK.json b/plugins/fleets/locales/translated/da_DK.json
deleted file mode 100644
index 54faef24e..000000000
--- a/plugins/fleets/locales/translated/da_DK.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Se flåder",
-      "description": "Se flåder, deres medlemmer og inventar."
-    },
-    "manage": {
-      "title": "Administrer flåder",
-      "description": "Opret, rediger og slet flåder, skift medlemskab og del flåder med andre brugere eller roller."
-    },
-    "execute": {
-      "title": "Kør flådehandlinger",
-      "description": "Kør kommandoer og pakkehandlinger på tværs af en flåde, og overfør filer til og fra dens medlemsværter."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Flåder",
-        "createFleet": "Opret flåde",
-        "createFleetTitle": "Opret flåde",
-        "editFleetTitle": "Rediger flåde",
-        "createFleetDescription": "En flåde er en navngiven gruppe af værter, som du kan udføre handlinger mod som en enhed.",
-        "nameLabel": "Navn",
-        "namePlaceholder": "f.eks. webservere",
-        "nameRequired": "Flådenavn er påkrævet",
-        "descriptionLabel": "Beskrivelse",
-        "descriptionPlaceholder": "Valgfri beskrivelse",
-        "colorLabel": "Farve",
-        "tagRulesLabel": "Tagregler",
-        "tagRulesPlaceholder": "prod-web, kant",
-        "tagRulesHint": "Værter med et af disse tags inkluderes automatisk, udover værter, der tilføjes manuelt.",
-        "fleetCreated": "Flåde oprettet",
-        "fleetUpdated": "Flåden er opdateret",
-        "fleetDeleted": "Flåden slettet",
-        "saveFailed": "Kunne ikke redde flåden",
-        "deleteFailed": "Kunne ikke slette flåden",
-        "loadFailed": "Kunne ikke indlæse flåder",
-        "deleteFleetTitle": "Slet flåde",
-        "deleteFleetDescription": "Er du sikker på, at du vil slette \"{{name}}\"? Dette sletter ikke selve medlemsværterne.",
-        "searchFleets": "Søg efter flåder...",
-        "noFleets": "Ingen flåder endnu. Opret en for at komme i gang.",
-        "memberCount": "{{count}} vært",
-        "memberCount_other": "{{count}} værter",
-        "manageMembers": "Administrer medlemmer",
-        "manageMembersTitle": "Administrer flådemedlemmer",
-        "manageMembersDescription": "Slå værter til eller fra af denne flådes statiske medlemskab. Værter, der matches af tagregler, er altid inkluderet.",
-        "searchHosts": "Søg efter værter...",
-        "noHostsFound": "Ingen værter fundet",
-        "noMembers": "Denne flåde har endnu ingen medlemmer. Tilføj værter eller angiv en tagregel.",
-        "membersLoadFailed": "Kunne ikke indlæse flådemedlemmer",
-        "memberUpdateFailed": "Kunne ikke opdatere flådemedlemskab",
-        "tabRun": "Kør kommando",
-        "tabTransfer": "Overfør filer",
-        "tabInventory": "Inventar",
-        "openInventoryTab": "Åbn i fuld fane",
-        "tabPackages": "Pakker",
-        "runOnFleet": "Kør på flåden",
-        "commandPlaceholder": "oppetid && df -h",
-        "commandRequired": "En kommando er påkrævet",
-        "commandInputsLabel": "Kommandoindgange",
-        "commandSucceeded": "Kommandoen lykkedes på alle værter",
-        "commandPartialFailure": "{{failed}} af {{total}} værter mislykkedes",
-        "commandFailed": "Kunne ikke køre kommandoen",
-        "resultSuccess": "Succes",
-        "resultFailed": "Mislykkedes",
-        "push": "Skubbe",
-        "pull": "Træk",
-        "remotePathLabel": "Fjernsti",
-        "remotePathRequired": "En fjernsti er påkrævet",
-        "fileLabel": "Fil",
-        "fileRequired": "En fil er påkrævet",
-        "pushHint": "Den valgte fil skrives til præcis denne sti på alle værter i flåden.",
-        "pullHint": "Filen på denne sti læses fra hver vært og downloades som en enkelt zip-fil, én mappe pr. vært.",
-        "transferComplete": "Overførsel fuldført",
-        "transferFailed": "Overførslen mislykkedes",
-        "refreshInventory": "Opdater lagerbeholdning",
-        "inventoryLoadFailed": "Kunne ikke indlæse lagerbeholdningen",
-        "inventoryRefreshed": "Opdateret lagerbeholdning",
-        "inventoryRefreshFailed": "Kunne ikke opdatere lagerbeholdningen",
-        "inventoryNoData": "Ingen lagerdata endnu - opdater for at indsamle dem.",
-        "inventoryHost": "Vært",
-        "inventoryCollectedCount": "{{count}}/{{total}} indsamlet",
-        "inventoryOs": "OS",
-        "inventoryKernel": "Kernen",
-        "inventoryArch": "Buen",
-        "inventoryUptime": "Oppetid",
-        "inventoryPackageManager": "Pakkehåndtering",
-        "inventoryCollectedAt": "Indsamlet",
-        "packageActionLabel": "Handling",
-        "packageInstall": "Installere",
-        "packageRemove": "Fjerne",
-        "packageUpgradeAll": "Opgrader alle pakker",
-        "packageNameLabel": "Pakkenavn",
-        "packageNameRequired": "Et pakkenavn er påkrævet",
-        "packageHint": "Kræver adgang på administratorniveau pr. vært og hæver ved hjælp af værtens gemte sudo-adgangskode.",
-        "shareFleet": "Del flåde",
-        "shareFleetTitle": "Del \"{{name}}\"",
-        "shareFleetDescription": "Deler denne flådes nuværende medlemsværter med de valgte brugere eller roller. Værter, der tilføjes til flåden senere, deles ikke automatisk - del igen for at inkludere dem.",
-        "shareSelectionRequired": "Vælg mindst én bruger eller rolle",
-        "fleetSharedSuccessfully": "Delt {{shared}} af {{total}} vært(er) i denne flåde",
-        "failedToShareFleet": "Kunne ikke dele flåden",
-        "noMembersToShare": "Denne flåde har endnu ingen medlemsværter at dele."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Flåder"
-  },
-  "hosts": {
-    "docsLink": "Se dokumenter",
-    "sharing": {
-      "customHoursPlaceholder": "Timer indtil adgangen udløber",
-      "expiry": {
-        "never": "Aldrig",
-        "oneHour": "1 time",
-        "oneDay": "24 timer",
-        "sevenDays": "7 dage",
-        "thirtyDays": "30 dage",
-        "custom": "Skik"
-      },
-      "expiryLabel": "Udløb af adgang",
-      "levels": {
-        "connect": {
-          "label": "Forbinde",
-          "description": "Kun åbne sessioner: terminal, fjernskrivebord, filhåndtering, tunneler og Docker. Ingen adgang til værtkonfigurationen."
-        },
-        "view": {
-          "label": "Udsigt",
-          "description": "Opret forbindelse, plus se værtkonfigurationen. Hemmeligheder vises aldrig."
-        },
-        "edit": {
-          "label": "Redigere",
-          "description": "Se og rediger ikke-godkendelseshostindstillinger. Ejerens SSH-godkendelse forbliver privat og kun for ejeren."
-        },
-        "manage": {
-          "label": "Styre",
-          "description": "Rediger, plus del værten med andre, skift tilladelsesniveauer og tilbagekald adgang."
-        }
-      },
-      "noMatches": "Ingen matches fundet",
-      "permissionLevelLabel": "Tilladelsesniveau",
-      "rolesTab": "Roller",
-      "searchPlaceholder": "Søg efter brugere eller roller...",
-      "shareButton": "Dele",
-      "shareWithCount": "Del ({{count}})",
-      "usersTab": "Brugere"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/de_DE.json b/plugins/fleets/locales/translated/de_DE.json
deleted file mode 100644
index f34bf7fe4..000000000
--- a/plugins/fleets/locales/translated/de_DE.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Flotten ansehen",
-      "description": "Flotten, ihre Mitglieder und ihren Bestand ansehen."
-    },
-    "manage": {
-      "title": "Flottenmanagement",
-      "description": "Flotten erstellen, bearbeiten und löschen, Mitgliedschaften ändern und Flotten mit anderen Benutzern oder Rollen teilen."
-    },
-    "execute": {
-      "title": "Flottenaktionen durchführen",
-      "description": "Führe Befehle und Paketaktionen über eine ganze Flotte hinweg aus und übertrage Dateien zu und von den Mitgliedshosts."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Flotten",
-        "createFleet": "Flotte erstellen",
-        "createFleetTitle": "Flotte erstellen",
-        "editFleetTitle": "Flotte bearbeiten",
-        "createFleetDescription": "Eine Flotte ist eine benannte Gruppe von Hosts, gegen die Sie als Einheit Aktionen ausführen können.",
-        "nameLabel": "Name",
-        "namePlaceholder": "z.B. Webserver",
-        "nameRequired": "Flottenname erforderlich",
-        "descriptionLabel": "Beschreibung",
-        "descriptionPlaceholder": "Optionale Beschreibung",
-        "colorLabel": "Farbe",
-        "tagRulesLabel": "Tag-Regeln",
-        "tagRulesPlaceholder": "Produktweb, Rand",
-        "tagRulesHint": "Hosts, die über eines dieser Tags verfügen, werden automatisch mit einbezogen, ebenso wie manuell hinzugefügte Hosts.",
-        "fleetCreated": "Flotte erstellt",
-        "fleetUpdated": "Flotte aktualisiert",
-        "fleetDeleted": "Flotte gelöscht",
-        "saveFailed": "Es gelang nicht, die Flotte zu retten.",
-        "deleteFailed": "Flotte konnte nicht gelöscht werden",
-        "loadFailed": "Flotten konnten nicht geladen werden",
-        "deleteFleetTitle": "Flotte löschen",
-        "deleteFleetDescription": "Möchten Sie wirklich \"{{name}}\" löschen? Dadurch werden die Mitgliedshosts selbst nicht gelöscht.",
-        "searchFleets": "Flotten durchsuchen...",
-        "noFleets": "Noch keine Flotten vorhanden. Erstellen Sie eine, um loszulegen.",
-        "memberCount": "{{count}} Host",
-        "memberCount_other": "{{count}} Hosts",
-        "manageMembers": "Mitglieder verwalten",
-        "manageMembersTitle": "Flottenmitglieder verwalten",
-        "manageMembersDescription": "Hosts können der statischen Mitgliedschaft dieser Flotte hinzugefügt oder daraus entfernt werden. Hosts, die den Tag-Regeln entsprechen, sind immer enthalten.",
-        "searchHosts": "Hosts suchen...",
-        "noHostsFound": "Keine Hosts gefunden",
-        "noMembers": "Diese Flotte hat noch keine Mitglieder. Füge Hosts hinzu oder lege eine Tag-Regel fest.",
-        "membersLoadFailed": "Flottenmitglieder konnten nicht geladen werden",
-        "memberUpdateFailed": "Aktualisierung der Flottenmitgliedschaft fehlgeschlagen",
-        "tabRun": "Befehl ausführen",
-        "tabTransfer": "Dateien übertragen",
-        "tabInventory": "Inventar",
-        "openInventoryTab": "Im vollständigen Tab öffnen",
-        "tabPackages": "Pakete",
-        "runOnFleet": "Run on Fleet",
-        "commandPlaceholder": "uptime && df -h",
-        "commandRequired": "Ein Befehl ist erforderlich",
-        "commandInputsLabel": "Befehlseingaben",
-        "commandSucceeded": "Der Befehl wurde auf allen Hosts erfolgreich ausgeführt.",
-        "commandPartialFailure": "{{failed}} von {{total}} Hosts fehlgeschlagen",
-        "commandFailed": "Befehl konnte nicht ausgeführt werden",
-        "resultSuccess": "Erfolgreich",
-        "resultFailed": "Fehlgeschlagen",
-        "push": "Drücken",
-        "pull": "Ziehen",
-        "remotePathLabel": "Remote-Pfad",
-        "remotePathRequired": "Ein Remote-Pfad ist erforderlich",
-        "fileLabel": "Datei",
-        "fileRequired": "Eine Datei wird benötigt",
-        "pushHint": "Die ausgewählte Datei wird auf jedem Host der Flotte unter genau diesem Pfad gespeichert.",
-        "pullHint": "Die Datei unter diesem Pfad wird von jedem Host gelesen und als einzelne ZIP-Datei heruntergeladen, ein Ordner pro Host.",
-        "transferComplete": "Übertragung abgeschlossen",
-        "transferFailed": "Übertragung fehlgeschlagen",
-        "refreshInventory": "Inventar aktualisieren",
-        "inventoryLoadFailed": "Fehler beim Laden des Inventars",
-        "inventoryRefreshed": "Bestand aktualisiert",
-        "inventoryRefreshFailed": "Aktualisierung des Inventars fehlgeschlagen",
-        "inventoryNoData": "Noch keine Bestandsdaten vorhanden – aktualisieren Sie die Seite, um sie abzurufen.",
-        "inventoryHost": "Host",
-        "inventoryCollectedCount": "{{count}}/{{total}} gesammelt",
-        "inventoryOs": "Betriebssystem",
-        "inventoryKernel": "Kernel",
-        "inventoryArch": "Bogen",
-        "inventoryUptime": "Betriebszeit",
-        "inventoryPackageManager": "Paketmanager",
-        "inventoryCollectedAt": "Gesammelt",
-        "packageActionLabel": "Aktion",
-        "packageInstall": "Installieren",
-        "packageRemove": "Entfernen",
-        "packageUpgradeAll": "Alle Pakete aktualisieren",
-        "packageNameLabel": "Paketname",
-        "packageNameRequired": "Ein Paketname ist erforderlich.",
-        "packageHint": "Erfordert Administratorrechte pro Host und verwendet das gespeicherte sudo-Passwort des Hosts für die Rechteerweiterung.",
-        "shareFleet": "Flotte teilen",
-        "shareFleetTitle": "Teilen \"{{name}}\"",
-        "shareFleetDescription": "Teilt die aktuellen Hosts dieser Flotte mit den ausgewählten Benutzern oder Rollen. Hosts, die später zur Flotte hinzugefügt werden, werden nicht automatisch geteilt – teilen Sie die Flotte erneut, um sie einzubeziehen.",
-        "shareSelectionRequired": "Wählen Sie mindestens einen Benutzer oder eine Rolle aus.",
-        "fleetSharedSuccessfully": "Gemeinsam genutzte {{shared}} von {{total}} Hosts in dieser Flotte",
-        "failedToShareFleet": "Flottenteilung gescheitert",
-        "noMembersToShare": "Diese Flotte hat noch keine Mitgliedshosts, die geteilt werden können."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Flotten"
-  },
-  "hosts": {
-    "docsLink": "Dokumentation anzeigen",
-    "sharing": {
-      "customHoursPlaceholder": "Stunden bis zum Zugriffsablauf",
-      "expiry": {
-        "never": "Nie",
-        "oneHour": "1 Stunde",
-        "oneDay": "24 Stunden",
-        "sevenDays": "7 Tage",
-        "thirtyDays": "30 Tage",
-        "custom": "Benutzerdefiniert"
-      },
-      "expiryLabel": "Zugriffsablauf",
-      "levels": {
-        "connect": {
-          "label": "Verbinden",
-          "description": "Nur Sitzungen öffnen: Terminal, Remotedesktop, Dateimanager, Tunnel und Docker. Kein Zugriff auf die Hostkonfiguration."
-        },
-        "view": {
-          "label": "Anzeigen",
-          "description": "Verbinden sowie Hostkonfiguration anzeigen. Geheimnisse werden nie angezeigt."
-        },
-        "edit": {
-          "label": "Bearbeiten",
-          "description": "Sie können die Einstellungen für Hosts ohne Authentifizierung anzeigen und bearbeiten. Die SSH-Authentifizierung des Besitzers bleibt privat und ist nur für den Besitzer zugänglich."
-        },
-        "manage": {
-          "label": "Verwalten",
-          "description": "Bearbeiten sowie Host für andere freigeben, Berechtigungsstufen ändern und Zugriff entziehen."
-        }
-      },
-      "noMatches": "Keine Treffer gefunden",
-      "permissionLevelLabel": "Berechtigungsstufe",
-      "rolesTab": "Rollen",
-      "searchPlaceholder": "Benutzer oder Rollen suchen...",
-      "shareButton": "Teilen",
-      "shareWithCount": "Teilen ({{count}})",
-      "usersTab": "Benutzer"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/el_GR.json b/plugins/fleets/locales/translated/el_GR.json
deleted file mode 100644
index 68f2102a0..000000000
--- a/plugins/fleets/locales/translated/el_GR.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Δείτε στόλους",
-      "description": "Δείτε τους στόλους, τα μέλη τους και το απόθεμά τους."
-    },
-    "manage": {
-      "title": "Διαχείριση στόλων",
-      "description": "Δημιουργήστε, επεξεργαστείτε και διαγράψτε στόλους, αλλάξτε μέλη και μοιραστείτε στόλους με άλλους χρήστες ή ρόλους."
-    },
-    "execute": {
-      "title": "Εκτέλεση ενεργειών στόλου",
-      "description": "Εκτελέστε εντολές και κάντε πακέτα ενεργειών σε ένα στόλο και μεταφέρετε αρχεία από και προς τους κεντρικούς υπολογιστές-μέλη του."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Στόλοι",
-        "createFleet": "Δημιουργία στόλου",
-        "createFleetTitle": "Δημιουργία στόλου",
-        "editFleetTitle": "Επεξεργασία στόλου",
-        "createFleetDescription": "Ένας στόλος είναι μια ονομαστική ομάδα οικοδεσποτών εναντίον των οποίων μπορείτε να εκτελέσετε ενέργειες ως μονάδα.",
-        "nameLabel": "Ονομα",
-        "namePlaceholder": "π.χ., Διακομιστές Ιστού",
-        "nameRequired": "Απαιτείται το όνομα του στόλου",
-        "descriptionLabel": "Περιγραφή",
-        "descriptionPlaceholder": "Προαιρετική περιγραφή",
-        "colorLabel": "Χρώμα",
-        "tagRulesLabel": "Κανόνες ετικετών",
-        "tagRulesPlaceholder": "product-web, edge",
-        "tagRulesHint": "Οι κεντρικοί υπολογιστές με οποιαδήποτε από αυτές τις ετικέτες περιλαμβάνονται αυτόματα, εκτός από τους κεντρικούς υπολογιστές που προστίθενται χειροκίνητα.",
-        "fleetCreated": "Στόλος δημιουργήθηκε",
-        "fleetUpdated": "Ενημερώθηκε ο στόλος",
-        "fleetDeleted": "Ο στόλος διαγράφηκε",
-        "saveFailed": "Αποτυχία αποθήκευσης στόλου",
-        "deleteFailed": "Η διαγραφή του στόλου απέτυχε",
-        "loadFailed": "Αποτυχία φόρτωσης στόλων",
-        "deleteFleetTitle": "Διαγραφή στόλου",
-        "deleteFleetDescription": "Είστε βέβαιοι ότι θέλετε να διαγράψετε το \"{{name}}\"; Αυτό δεν διαγράφει τους ίδιους τους κεντρικούς υπολογιστές-μέλη.",
-        "searchFleets": "Αναζήτηση στόλων...",
-        "noFleets": "Δεν υπάρχουν ακόμη στόλοι. Δημιουργήστε έναν για να ξεκινήσετε.",
-        "memberCount": "{{count}} κεντρικός υπολογιστής",
-        "memberCount_other": "{{count}} κεντρικοί υπολογιστές",
-        "manageMembers": "Διαχείριση μελών",
-        "manageMembersTitle": "Διαχείριση Μελών Στόλου",
-        "manageMembersDescription": "Εναλλαγή ή διακοπή της στατικής ιδιότητας μέλους αυτού του στόλου. Οι κεντρικοί υπολογιστές που αντιστοιχούν σε κανόνες ετικέτας περιλαμβάνονται πάντα.",
-        "searchHosts": "Αναζήτηση κεντρικών υπολογιστών...",
-        "noHostsFound": "Δεν βρέθηκαν κεντρικοί υπολογιστές",
-        "noMembers": "Αυτός ο στόλος δεν έχει ακόμη μέλη. Προσθέστε κεντρικούς υπολογιστές ή ορίστε έναν κανόνα ετικέτας.",
-        "membersLoadFailed": "Αποτυχία φόρτωσης μελών στόλου",
-        "memberUpdateFailed": "Η ενημέρωση της ιδιότητας μέλους του στόλου απέτυχε",
-        "tabRun": "Εκτέλεση εντολής",
-        "tabTransfer": "Μεταφορά αρχείων",
-        "tabInventory": "Καταγραφή εμπορευμάτων",
-        "openInventoryTab": "Άνοιγμα σε πλήρη καρτέλα",
-        "tabPackages": "Πακέτα",
-        "runOnFleet": "Εκτέλεση σε στόλο",
-        "commandPlaceholder": "χρόνος λειτουργίας && df -h",
-        "commandRequired": "Απαιτείται εντολή",
-        "commandInputsLabel": "Είσοδοι εντολών",
-        "commandSucceeded": "Η εντολή ήταν επιτυχής σε όλους τους κεντρικούς υπολογιστές",
-        "commandPartialFailure": "{{failed}} από {{total}} κεντρικούς υπολογιστές απέτυχαν",
-        "commandFailed": "Αποτυχία εκτέλεσης εντολής",
-        "resultSuccess": "Επιτυχία",
-        "resultFailed": "Αποτυχημένος",
-        "push": "Σπρώξτε",
-        "pull": "Τραβήξτε",
-        "remotePathLabel": "Απομακρυσμένη διαδρομή",
-        "remotePathRequired": "Απαιτείται μια απομακρυσμένη διαδρομή",
-        "fileLabel": "Αρχείο",
-        "fileRequired": "Απαιτείται ένα αρχείο",
-        "pushHint": "Το επιλεγμένο αρχείο εγγράφεται σε αυτήν ακριβώς τη διαδρομή σε κάθε κεντρικό υπολογιστή του στόλου.",
-        "pullHint": "Το αρχείο σε αυτήν τη διαδρομή διαβάζεται από κάθε κεντρικό υπολογιστή και λαμβάνεται ως ενιαίο αρχείο zip, ένας φάκελος ανά κεντρικό υπολογιστή.",
-        "transferComplete": "Η μεταφορά ολοκληρώθηκε",
-        "transferFailed": "Η μεταφορά απέτυχε",
-        "refreshInventory": "Ανανέωση Αποθέματος",
-        "inventoryLoadFailed": "Αποτυχία φόρτωσης αποθέματος",
-        "inventoryRefreshed": "Το απόθεμα ανανεώθηκε",
-        "inventoryRefreshFailed": "Η ανανέωση του αποθέματος απέτυχε",
-        "inventoryNoData": "Δεν υπάρχουν ακόμη δεδομένα αποθέματος - κάντε ανανέωση για να τα συλλέξετε.",
-        "inventoryHost": "Πλήθος",
-        "inventoryCollectedCount": "{{count}}/{{total}} συλλέχθηκαν",
-        "inventoryOs": "Λειτουργικό σύστημα",
-        "inventoryKernel": "Πυρήνας",
-        "inventoryArch": "Αψίδα",
-        "inventoryUptime": "Χρόνος λειτουργίας",
-        "inventoryPackageManager": "Διαχειριστής πακέτων",
-        "inventoryCollectedAt": "Συγκεντρωμένος",
-        "packageActionLabel": "Δράση",
-        "packageInstall": "Εγκαθιστώ",
-        "packageRemove": "Αφαιρώ",
-        "packageUpgradeAll": "Αναβάθμιση όλων των πακέτων",
-        "packageNameLabel": "Όνομα πακέτου",
-        "packageNameRequired": "Απαιτείται όνομα πακέτου",
-        "packageHint": "Απαιτείται πρόσβαση σε επίπεδο διαχείρισης ανά κεντρικό υπολογιστή και αναβαθμίζεται χρησιμοποιώντας τον αποθηκευμένο κωδικό πρόσβασης sudo του κεντρικού υπολογιστή.",
-        "shareFleet": "Κοινόχρηστος στόλος",
-        "shareFleetTitle": "Κοινή χρήση \"{{name}}\"",
-        "shareFleetDescription": "Κοινοποιεί τους τρέχοντες κεντρικούς υπολογιστές-μέλη αυτού του στόλου με τους επιλεγμένους χρήστες ή ρόλους. Οι κεντρικοί υπολογιστές που προστίθενται στον στόλο αργότερα δεν κοινοποιούνται αυτόματα - κοινοποιήστε τους ξανά για να τους συμπεριλάβετε.",
-        "shareSelectionRequired": "Επιλέξτε τουλάχιστον έναν χρήστη ή ρόλο",
-        "fleetSharedSuccessfully": "Κοινόχρηστο {{shared}} από {{total}} κεντρικούς υπολογιστές σε αυτόν τον στόλο",
-        "failedToShareFleet": "Αποτυχία κοινής χρήσης στόλου",
-        "noMembersToShare": "Αυτός ο στόλος δεν έχει ακόμη μέλη-οικοδεσπότες για κοινή χρήση."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Στόλοι"
-  },
-  "hosts": {
-    "docsLink": "Προβολή εγγράφων",
-    "sharing": {
-      "customHoursPlaceholder": "Ώρες μέχρι τη λήξη της πρόσβασης",
-      "expiry": {
-        "never": "Ποτέ",
-        "oneHour": "1 ώρα",
-        "oneDay": "24 ώρες",
-        "sevenDays": "7 ημέρες",
-        "thirtyDays": "30 ημέρες",
-        "custom": "Εθιμο"
-      },
-      "expiryLabel": "Λήξη πρόσβασης",
-      "levels": {
-        "connect": {
-          "label": "Συνδέω",
-          "description": "Μόνο ανοιχτές συνεδρίες: τερματικό, απομακρυσμένη επιφάνεια εργασίας, διαχειριστής αρχείων, σήραγγες και Docker. Δεν υπάρχει πρόσβαση στη διαμόρφωση του κεντρικού υπολογιστή."
-        },
-        "view": {
-          "label": "Θέα",
-          "description": "Συνδεθείτε και δείτε τη διαμόρφωση του κεντρικού υπολογιστή. Τα μυστικά δεν εμφανίζονται ποτέ."
-        },
-        "edit": {
-          "label": "Εκδίδω",
-          "description": "Προβολή και τροποποίηση ρυθμίσεων κεντρικού υπολογιστή που δεν απαιτούν έλεγχο ταυτότητας. Ο έλεγχος ταυτότητας SSH του κατόχου παραμένει ιδιωτικός και μόνο για τον κάτοχο."
-        },
-        "manage": {
-          "label": "Διαχειρίζομαι",
-          "description": "Επεξεργαστείτε και μοιραστείτε τον κεντρικό υπολογιστή με άλλους, αλλάξτε τα επίπεδα δικαιωμάτων και ανακαλέστε την πρόσβαση."
-        }
-      },
-      "noMatches": "Δεν βρέθηκαν αντιστοιχίσεις",
-      "permissionLevelLabel": "Επίπεδο δικαιωμάτων",
-      "rolesTab": "Ρόλοι",
-      "searchPlaceholder": "Αναζήτηση χρηστών ή ρόλων...",
-      "shareButton": "Μερίδιο",
-      "shareWithCount": "Κοινή χρήση ({{count}})",
-      "usersTab": "Χρήστες"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/es_ES.json b/plugins/fleets/locales/translated/es_ES.json
deleted file mode 100644
index 59c5a085d..000000000
--- a/plugins/fleets/locales/translated/es_ES.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Ver flotas",
-      "description": "Consulta las flotas, sus miembros y su inventario."
-    },
-    "manage": {
-      "title": "Gestionar flotas",
-      "description": "Crea, edita y elimina flotas, cambia la membresía y comparte flotas con otros usuarios o roles."
-    },
-    "execute": {
-      "title": "Ejecutar acciones de flota",
-      "description": "Ejecuta comandos y acciones de paquetes en toda una flota, y transfiere archivos hacia y desde sus hosts miembros."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Flotas",
-        "createFleet": "Crear flota",
-        "createFleetTitle": "Crear flota",
-        "editFleetTitle": "Editar flota",
-        "createFleetDescription": "Una flota es un grupo con nombre de anfitriones contra los que puedes ejecutar acciones como una unidad.",
-        "nameLabel": "Nombre",
-        "namePlaceholder": "p. ej., servidores web",
-        "nameRequired": "Se requiere el nombre de la flota.",
-        "descriptionLabel": "Descripción",
-        "descriptionPlaceholder": "Descripción opcional",
-        "colorLabel": "Color",
-        "tagRulesLabel": "Reglas de etiquetas",
-        "tagRulesPlaceholder": "web de producción, borde",
-        "tagRulesHint": "Los hosts que tengan cualquiera de estas etiquetas se incluyen automáticamente, además de los hosts añadidos manualmente.",
-        "fleetCreated": "Flota creada",
-        "fleetUpdated": "Flota actualizada",
-        "fleetDeleted": "Flota eliminada",
-        "saveFailed": "No se logró salvar la flota.",
-        "deleteFailed": "No se pudo eliminar la flota",
-        "loadFailed": "No se pudieron cargar las flotas.",
-        "deleteFleetTitle": "Eliminar flota",
-        "deleteFleetDescription": "¿Estás seguro de que quieres eliminar \"{{name}}\"? Esto no elimina los hosts miembros en sí.",
-        "searchFleets": "Buscar flotas...",
-        "noFleets": "Aún no hay flotas. Crea una para empezar.",
-        "memberCount": "{{count}} anfitrión",
-        "memberCount_other": "{{count}} hosts",
-        "manageMembers": "Gestionar miembros",
-        "manageMembersTitle": "Gestionar los miembros de la flota",
-        "manageMembersDescription": "Activa o desactiva la pertenencia estática de esta flota a hosts. Los hosts que coincidan con las reglas de etiquetas siempre se incluirán.",
-        "searchHosts": "Buscar hosts...",
-        "noHostsFound": "No se encontraron equipos",
-        "noMembers": "Esta flota aún no tiene miembros. Añade anfitriones o establece una regla de etiquetas.",
-        "membersLoadFailed": "No se pudo cargar a los miembros de la flota.",
-        "memberUpdateFailed": "No se pudo actualizar la membresía de la flota.",
-        "tabRun": "Ejecutar comando",
-        "tabTransfer": "Transferir archivos",
-        "tabInventory": "Inventario",
-        "openInventoryTab": "Abrir en pestaña completa",
-        "tabPackages": "Paquetes",
-        "runOnFleet": "Operar en Fleet",
-        "commandPlaceholder": "tiempo de actividad && df -h",
-        "commandRequired": "Se requiere un comando",
-        "commandInputsLabel": "Entradas de comandos",
-        "commandSucceeded": "El comando se ejecutó correctamente en todos los hosts.",
-        "commandPartialFailure": "{{failed}} de {{total}} hosts fallaron",
-        "commandFailed": "Error al ejecutar el comando",
-        "resultSuccess": "Éxito",
-        "resultFailed": "Fallido",
-        "push": "Empujar",
-        "pull": "Jalar",
-        "remotePathLabel": "Ruta remota",
-        "remotePathRequired": "Se requiere una ruta remota",
-        "fileLabel": "Archivo",
-        "fileRequired": "Se requiere un archivo",
-        "pushHint": "El archivo seleccionado se escribe en esta ruta exacta en cada host de la flota.",
-        "pullHint": "El archivo ubicado en esta ruta se lee desde cada host y se descarga como un único archivo zip, una carpeta por host.",
-        "transferComplete": "Transferencia completada",
-        "transferFailed": "Transferencia fallida",
-        "refreshInventory": "Actualizar inventario",
-        "inventoryLoadFailed": "No se pudo cargar el inventario.",
-        "inventoryRefreshed": "Inventario actualizado",
-        "inventoryRefreshFailed": "No se pudo actualizar el inventario.",
-        "inventoryNoData": "Aún no hay datos de inventario; actualice la página para recopilarlos.",
-        "inventoryHost": "Host",
-        "inventoryCollectedCount": "{{count}}/{{total}} recopilado",
-        "inventoryOs": "SO",
-        "inventoryKernel": "Kernel",
-        "inventoryArch": "Arco",
-        "inventoryUptime": "Tiempo de actividad",
-        "inventoryPackageManager": "gestor de paquetes",
-        "inventoryCollectedAt": "Coleccionado",
-        "packageActionLabel": "Acción",
-        "packageInstall": "Instalar",
-        "packageRemove": "Eliminar",
-        "packageUpgradeAll": "Actualizar todos los paquetes",
-        "packageNameLabel": "Nombre del paquete",
-        "packageNameRequired": "Se requiere un nombre de paquete.",
-        "packageHint": "Requiere acceso de nivel de administrador por host y eleva los privilegios utilizando la contraseña sudo almacenada en el host.",
-        "shareFleet": "Compartir flota",
-        "shareFleetTitle": "Compartir \"{{name}}\"",
-        "shareFleetDescription": "Comparte los hosts miembros actuales de esta flota con los usuarios o roles seleccionados. Los hosts que se agreguen a la flota posteriormente no se comparten automáticamente; vuelva a compartir para incluirlos.",
-        "shareSelectionRequired": "Seleccione al menos un usuario o rol.",
-        "fleetSharedSuccessfully": "Host(s) compartido(s) en esta flota {{shared}} de {{total}} host(s) en esta flota",
-        "failedToShareFleet": "No se compartió la flota",
-        "noMembersToShare": "Esta flota aún no tiene anfitriones miembros para compartir."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Flotas"
-  },
-  "hosts": {
-    "docsLink": "Ver documentación",
-    "sharing": {
-      "customHoursPlaceholder": "Horas hasta que caduque el acceso",
-      "expiry": {
-        "never": "Nunca",
-        "oneHour": "1 hora",
-        "oneDay": "24 horas",
-        "sevenDays": "7 días",
-        "thirtyDays": "30 días",
-        "custom": "Personalizado"
-      },
-      "expiryLabel": "Caducidad del acceso",
-      "levels": {
-        "connect": {
-          "label": "Conectar",
-          "description": "Abrir solo sesiones: terminal, escritorio remoto, gestor de archivos, túneles y Docker. Sin acceso a la configuración del host."
-        },
-        "view": {
-          "label": "Ver",
-          "description": "Conectar, además de ver la configuración del host. Los secretos nunca se muestran."
-        },
-        "edit": {
-          "label": "Editar",
-          "description": "Visualice y modifique la configuración del host que no requiere autenticación. La autenticación SSH del propietario permanece privada y solo accesible para él."
-        },
-        "manage": {
-          "label": "Gestionar",
-          "description": "Editar, además de compartir el host con otros, cambiar niveles de permiso y revocar el acceso."
-        }
-      },
-      "noMatches": "No se han encontrado coincidencias",
-      "permissionLevelLabel": "Nivel de permiso",
-      "rolesTab": "Roles",
-      "searchPlaceholder": "Buscar usuarios o roles...",
-      "shareButton": "Compartir",
-      "shareWithCount": "Compartir ({{count}})",
-      "usersTab": "Usuarios"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/fi_FI.json b/plugins/fleets/locales/translated/fi_FI.json
deleted file mode 100644
index 70c375dba..000000000
--- a/plugins/fleets/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Näytä laivastot",
-      "description": "Katso laivastot, niiden jäsenet ja varastot."
-    },
-    "manage": {
-      "title": "Hallitse ajoneuvokalustoja",
-      "description": "Luo, muokkaa ja poista ajoneuvokantoja, muuta jäsenyyksiä ja jaa ajoneuvokantoja muiden käyttäjien tai roolien kanssa."
-    },
-    "execute": {
-      "title": "Suorita laivaston toiminnot",
-      "description": "Suorita komentoja ja paketoi toimintoja koko laivastossa ja siirrä tiedostoja sen jäsenpalvelimiin ja niistä pois."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Laivastot",
-        "createFleet": "Luo laivasto",
-        "createFleetTitle": "Luo laivasto",
-        "editFleetTitle": "Muokkaa kalustoa",
-        "createFleetDescription": "Laivasto on nimetty joukko isäntäjoukkoja, joita vastaan voit suorittaa toimintoja yksikkönä.",
-        "nameLabel": "Nimi",
-        "namePlaceholder": "esim. web-palvelimet",
-        "nameRequired": "Laivaston nimi on pakollinen",
-        "descriptionLabel": "Kuvaus",
-        "descriptionPlaceholder": "Valinnainen kuvaus",
-        "colorLabel": "Väri",
-        "tagRulesLabel": "Tagisäännöt",
-        "tagRulesPlaceholder": "prod-web, reuna",
-        "tagRulesHint": "Näillä tunnisteilla varustetut isännät sisällytetään automaattisesti manuaalisesti lisättyjen isäntien lisäksi.",
-        "fleetCreated": "Laivasto luotu",
-        "fleetUpdated": "Kalustoa päivitetty",
-        "fleetDeleted": "Kalusto poistettu",
-        "saveFailed": "Laivaston tallentaminen epäonnistui",
-        "deleteFailed": "Kaluston poistaminen epäonnistui",
-        "loadFailed": "Kalustojen lataus epäonnistui",
-        "deleteFleetTitle": "Poista kalusto",
-        "deleteFleetDescription": "Oletko varma, että haluat poistaa \"{{name}}\"? Tämä ei poista itse jäsenpalvelimia.",
-        "searchFleets": "Hae laivastoja...",
-        "noFleets": "Ei vielä laivastoja. Luo yksi aloittaaksesi.",
-        "memberCount": "{{count}} isäntä",
-        "memberCount_other": "{{count}} isännät",
-        "manageMembers": "Hallinnoi jäseniä",
-        "manageMembersTitle": "Hallinnoi laivaston jäseniä",
-        "manageMembersDescription": "Lisää isännät tämän laivaston staattiseen jäsenyyteen tai poista ne siitä. Tunnistesääntöjen mukaiset isännät sisällytetään aina.",
-        "searchHosts": "Hae isäntiä...",
-        "noHostsFound": "Ei isäntiä",
-        "noMembers": "Tässä laivastossa ei ole vielä jäseniä. Lisää isäntiä tai aseta tunnistesääntö.",
-        "membersLoadFailed": "Laivaston jäsenten lataaminen epäonnistui",
-        "memberUpdateFailed": "Laivaston jäsenyyden päivittäminen epäonnistui",
-        "tabRun": "Suorita komento",
-        "tabTransfer": "Tiedostojen siirto",
-        "tabInventory": "Varasto",
-        "openInventoryTab": "Avaa koko välilehdessä",
-        "tabPackages": "Paketit",
-        "runOnFleet": "Suorita laivastolla",
-        "commandPlaceholder": "käyttöaika && df -h",
-        "commandRequired": "Komento vaaditaan",
-        "commandInputsLabel": "Komentotulot",
-        "commandSucceeded": "Komento onnistui kaikissa isännissä",
-        "commandPartialFailure": "{{failed}} / {{total}} isäntäkoneesta epäonnistui",
-        "commandFailed": "Komennon suorittaminen epäonnistui",
-        "resultSuccess": "Menestys",
-        "resultFailed": "Epäonnistui",
-        "push": "Työnnä",
-        "pull": "Vedä",
-        "remotePathLabel": "Etäpolku",
-        "remotePathRequired": "Etäpolku vaaditaan",
-        "fileLabel": "Tiedosto",
-        "fileRequired": "Tiedosto vaaditaan",
-        "pushHint": "Valittu tiedosto kirjoitetaan täsmälleen tälle polulle jokaisella laivaston isännällä.",
-        "pullHint": "Tämän polun tiedosto luetaan jokaiselta isännältä ja ladataan yhtenä zip-tiedostona, yksi kansio isäntää kohden.",
-        "transferComplete": "Siirto valmis",
-        "transferFailed": "Siirto epäonnistui",
-        "refreshInventory": "Päivitä varasto",
-        "inventoryLoadFailed": "Varaston lataaminen epäonnistui",
-        "inventoryRefreshed": "Varasto päivitetty",
-        "inventoryRefreshFailed": "Varaston päivittäminen epäonnistui",
-        "inventoryNoData": "Ei vielä varastotietoja – päivitä kerätäksesi ne.",
-        "inventoryHost": "Isäntä",
-        "inventoryCollectedCount": "{{count}}/{{total}} kerätty",
-        "inventoryOs": "Käyttöjärjestelmä",
-        "inventoryKernel": "Ydin",
-        "inventoryArch": "Kaari",
-        "inventoryUptime": "Käyttöaika",
-        "inventoryPackageManager": "Pakettien hallinta",
-        "inventoryCollectedAt": "Kerätty",
-        "packageActionLabel": "Toiminta",
-        "packageInstall": "Asentaa",
-        "packageRemove": "Poistaa",
-        "packageUpgradeAll": "Päivitä kaikki paketit",
-        "packageNameLabel": "Paketin nimi",
-        "packageNameRequired": "Paketin nimi on pakollinen",
-        "packageHint": "Vaatii hallintatason käyttöoikeudet isäntäkohtaisesti ja nostaa käyttöoikeuksia isännän tallennetulla sudo-salasanalla.",
-        "shareFleet": "Jaa laivasto",
-        "shareFleetTitle": "Jaa \"{{name}}\"",
-        "shareFleetDescription": "Jakaa tämän laivaston nykyiset jäsenisännät valittujen käyttäjien tai roolien kanssa. Myöhemmin laivastoon lisättyjä isäntiä ei jaeta automaattisesti – jaa uudelleen sisällyttääksesi ne.",
-        "shareSelectionRequired": "Valitse vähintään yksi käyttäjä tai rooli",
-        "fleetSharedSuccessfully": "Jaettu {{shared}} / {{total}} isäntäkoneesta tässä laivastossa",
-        "failedToShareFleet": "Kaluston jakaminen epäonnistui",
-        "noMembersToShare": "Tällä laivueella ei ole vielä jaettavia jäsenisäntiä."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Laivastot"
-  },
-  "hosts": {
-    "docsLink": "Näytä dokumentit",
-    "sharing": {
-      "customHoursPlaceholder": "Tuntia käyttöoikeuden vanhenemiseen",
-      "expiry": {
-        "never": "Ei koskaan",
-        "oneHour": "1 tunti",
-        "oneDay": "24 tuntia",
-        "sevenDays": "7 päivää",
-        "thirtyDays": "30 päivää",
-        "custom": "Mukautettu"
-      },
-      "expiryLabel": "Käyttöoikeuden päättyminen",
-      "levels": {
-        "connect": {
-          "label": "Yhdistä",
-          "description": "Vain avoimet istunnot: pääte, etätyöpöytä, tiedostonhallinta, tunnelit ja Docker. Ei pääsyä isäntäkokoonpanoon."
-        },
-        "view": {
-          "label": "Näytä",
-          "description": "Yhdistä ja katso isäntäkokoonpano. Salaisuuksia ei koskaan näytetä."
-        },
-        "edit": {
-          "label": "Muokata",
-          "description": "Näytä ja muokkaa ei-todennukseen perustuvia isäntäasetuksia. Omistajan SSH-todennus pysyy yksityisenä ja vain omistajalle tarkoitettuna."
-        },
-        "manage": {
-          "label": "Hallitse",
-          "description": "Muokkaa ja jaa isäntä muiden kanssa, muuta käyttöoikeustasoja ja peruuta käyttöoikeuksia."
-        }
-      },
-      "noMatches": "Ei osumia",
-      "permissionLevelLabel": "Käyttöoikeustaso",
-      "rolesTab": "Roolit",
-      "searchPlaceholder": "Hae käyttäjiä tai rooleja...",
-      "shareButton": "Jakaa",
-      "shareWithCount": "Jaa ({{count}})",
-      "usersTab": "Käyttäjät"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/fr_FR.json b/plugins/fleets/locales/translated/fr_FR.json
deleted file mode 100644
index 7b842e07f..000000000
--- a/plugins/fleets/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Consulter les flottes",
-      "description": "Consultez les flottes, leurs membres et leur inventaire."
-    },
-    "manage": {
-      "title": "Gérer les flottes",
-      "description": "Créer, modifier et supprimer des flottes, changer les membres et partager des flottes avec d'autres utilisateurs ou rôles."
-    },
-    "execute": {
-      "title": "Actions de la flotte",
-      "description": "Exécutez des commandes et des actions de paquetage sur l'ensemble d'une flotte, et transférez des fichiers vers et depuis ses hôtes membres."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Flottes",
-        "createFleet": "Créer une flotte",
-        "createFleetTitle": "Créer une flotte",
-        "editFleetTitle": "Modifier la flotte",
-        "createFleetDescription": "Une flotte est un groupe nommé d'hôtes contre lesquels vous pouvez mener des actions en tant qu'unité.",
-        "nameLabel": "Nom",
-        "namePlaceholder": "par exemple, les serveurs Web",
-        "nameRequired": "Le nom de la flotte est requis.",
-        "descriptionLabel": "Description",
-        "descriptionPlaceholder": "Description facultative",
-        "colorLabel": "Couleur",
-        "tagRulesLabel": "Règles de balisage",
-        "tagRulesPlaceholder": "prod-web, bord",
-        "tagRulesHint": "Les hôtes possédant l'une de ces étiquettes sont automatiquement inclus, en plus des hôtes ajoutés manuellement.",
-        "fleetCreated": "Flotte créée",
-        "fleetUpdated": "Flotte mise à jour",
-        "fleetDeleted": "Flotte supprimée",
-        "saveFailed": "Échec de la sauvegarde de la flotte",
-        "deleteFailed": "Échec de la suppression de la flotte",
-        "loadFailed": "Échec du chargement des flottes",
-        "deleteFleetTitle": "Supprimer la flotte",
-        "deleteFleetDescription": "Êtes-vous sûr de vouloir supprimer «{{name}}» ? Cela ne supprime pas les hôtes membres eux-mêmes.",
-        "searchFleets": "Rechercher des flottes...",
-        "noFleets": "Aucune flotte pour le moment. Créez-en une pour commencer.",
-        "memberCount": "{{count}} hôte",
-        "memberCount_other": "{{count}} hôtes",
-        "manageMembers": "Gérer les membres",
-        "manageMembersTitle": "Gérer les membres de la flotte",
-        "manageMembersDescription": "Activez ou désactivez l'appartenance statique des hôtes à cette flotte. Les hôtes correspondant aux règles de balisage sont toujours inclus.",
-        "searchHosts": "Rechercher des hôtes...",
-        "noHostsFound": "Aucun hôte trouvé",
-        "noMembers": "Cette flotte est vide pour le moment. Ajoutez des hôtes ou définissez une règle de balisage.",
-        "membersLoadFailed": "Échec du chargement des membres de la flotte",
-        "memberUpdateFailed": "Échec de la mise à jour de l'adhésion à la flotte",
-        "tabRun": "Exécuter la commande",
-        "tabTransfer": "Transférer des fichiers",
-        "tabInventory": "Inventaire",
-        "openInventoryTab": "Ouvrir dans l'onglet complet",
-        "tabPackages": "Paquets",
-        "runOnFleet": "Exécuter sur la flotte",
-        "commandPlaceholder": "disponibilité && df -h",
-        "commandRequired": "Une commande est requise",
-        "commandInputsLabel": "Entrées de commande",
-        "commandSucceeded": "La commande a réussi sur tous les hôtes.",
-        "commandPartialFailure": "{{failed}} des hôtes {{total}} ont échoué",
-        "commandFailed": "Échec de l'exécution de la commande",
-        "resultSuccess": "Succès",
-        "resultFailed": "Échec",
-        "push": "Pousser",
-        "pull": "Tirer",
-        "remotePathLabel": "Chemin distant",
-        "remotePathRequired": "Un chemin distant est nécessaire",
-        "fileLabel": "Fichier",
-        "fileRequired": "Un fichier est requis",
-        "pushHint": "Le fichier sélectionné est enregistré à cet emplacement précis sur chaque hôte du parc.",
-        "pullHint": "Le fichier situé à cet emplacement est lu depuis chaque hôte et téléchargé sous forme d'un seul fichier zip, un dossier par hôte.",
-        "transferComplete": "Transfert terminé",
-        "transferFailed": "Échec du transfert",
-        "refreshInventory": "Actualiser l'inventaire",
-        "inventoryLoadFailed": "Échec du chargement de l'inventaire",
-        "inventoryRefreshed": "Inventaire mis à jour",
-        "inventoryRefreshFailed": "Échec de la mise à jour de l'inventaire",
-        "inventoryNoData": "Aucune donnée d'inventaire pour le moment - actualisez la page pour la récupérer.",
-        "inventoryHost": "Hôte",
-        "inventoryCollectedCount": "{{count}}/{{total}} collecté",
-        "inventoryOs": "OS",
-        "inventoryKernel": "Noyau",
-        "inventoryArch": "Cambre",
-        "inventoryUptime": "Disponibilité",
-        "inventoryPackageManager": "Gestionnaire de paquets",
-        "inventoryCollectedAt": "Collecté",
-        "packageActionLabel": "Action",
-        "packageInstall": "Installer",
-        "packageRemove": "Supprimer",
-        "packageUpgradeAll": "Mettez à niveau tous les forfaits",
-        "packageNameLabel": "Nom du paquet",
-        "packageNameRequired": "Un nom de paquet est requis.",
-        "packageHint": "Nécessite un accès de niveau administrateur par hôte et élève les privilèges à l'aide du mot de passe sudo stocké sur l'hôte.",
-        "shareFleet": "Flotte partagée",
-        "shareFleetTitle": "Partager \"{{name}}\"",
-        "shareFleetDescription": "Permet de partager les hôtes membres actuels de cette flotte avec les utilisateurs ou rôles sélectionnés. Les hôtes ajoutés ultérieurement à la flotte ne sont pas partagés automatiquement ; veuillez renouveler le partage pour les inclure.",
-        "shareSelectionRequired": "Sélectionnez au moins un utilisateur ou un rôle",
-        "fleetSharedSuccessfully": "Partagé {{shared}} de {{total}} hôtes dans cette flotte",
-        "failedToShareFleet": "Échec du partage de la flotte",
-        "noMembersToShare": "Cette flotte ne compte pas encore d'hôtes membres à partager."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Flottes"
-  },
-  "hosts": {
-    "docsLink": "Voir la documentation",
-    "sharing": {
-      "customHoursPlaceholder": "Heures jusqu'à l'expiration de l'accès",
-      "expiry": {
-        "never": "Jamais",
-        "oneHour": "1 heure",
-        "oneDay": "24 heures",
-        "sevenDays": "7 jours",
-        "thirtyDays": "30 jours",
-        "custom": "Personnalisé"
-      },
-      "expiryLabel": "Expiration de l’accès",
-      "levels": {
-        "connect": {
-          "label": "Connexion",
-          "description": "Ouverture de sessions uniquement : terminal, bureau à distance, gestionnaire de fichiers, tunnels et Docker. Aucun accès à la configuration de l'hôte."
-        },
-        "view": {
-          "label": "Consultation",
-          "description": "Connexion, plus consultation de la configuration de l’hôte. Les secrets ne sont jamais affichés."
-        },
-        "edit": {
-          "label": "Modification",
-          "description": "Consultez et modifiez les paramètres de l'hôte sans authentification. L'authentification SSH du propriétaire reste privée et accessible uniquement à ce dernier."
-        },
-        "manage": {
-          "label": "Gestion",
-          "description": "Modification, plus partager l'hôte avec d'autres utilisateurs, modifier les niveaux de permission et révoquer l'accès."
-        }
-      },
-      "noMatches": "Aucun résultat trouvé",
-      "permissionLevelLabel": "Niveau de permission",
-      "rolesTab": "Rôles",
-      "searchPlaceholder": "Rechercher des utilisateurs ou des rôles…",
-      "shareButton": "Partager",
-      "shareWithCount": "Partager ({{count}})",
-      "usersTab": "Utilisateurs"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/he_IL.json b/plugins/fleets/locales/translated/he_IL.json
deleted file mode 100644
index 5780c5a41..000000000
--- a/plugins/fleets/locales/translated/he_IL.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "צפה בציי רכב",
-      "description": "ראה ציי רכב, חבריהם ומלאי."
-    },
-    "manage": {
-      "title": "ניהול ציי רכב",
-      "description": "צור, ערוך ומחק ציי רכב, שנה חברות ושתף ציי רכב עם משתמשים או תפקידים אחרים."
-    },
-    "execute": {
-      "title": "הפעל פעולות צי",
-      "description": "הפעל פקודות ופעולות חבילה ברחבי צי, והעבר קבצים אל המארחים החברים בו וממנה."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "ציי רכב",
-        "createFleet": "צור צי",
-        "createFleetTitle": "צור צי",
-        "editFleetTitle": "עריכת צי",
-        "createFleetDescription": "צי הוא קבוצה בעלת שם של מארחים שניתן להפעיל פעולות נגדם כיחידה.",
-        "nameLabel": "שֵׁם",
-        "namePlaceholder": "לדוגמה, שרתי אינטרנט",
-        "nameRequired": "נדרש שם צי",
-        "descriptionLabel": "תֵאוּר",
-        "descriptionPlaceholder": "תיאור אופציונלי",
-        "colorLabel": "צֶבַע",
-        "tagRulesLabel": "כללי תגיות",
-        "tagRulesPlaceholder": "רשת דחיפה, קצה",
-        "tagRulesHint": "מארחים עם אחד מהתגים הללו נכללים אוטומטית, בנוסף למארחים שנוספו ידנית.",
-        "fleetCreated": "צי נוצר",
-        "fleetUpdated": "הצי עודכן",
-        "fleetDeleted": "הצי נמחק",
-        "saveFailed": "נכשלה הצלת הצי",
-        "deleteFailed": "מחיקת הצי נכשלה",
-        "loadFailed": "טעינת ציי רכב נכשלה",
-        "deleteFleetTitle": "מחיקת צי",
-        "deleteFleetDescription": "האם אתה בטוח שברצונך למחוק את \"{{name}}\"? פעולה זו אינה מוחקת את המארחים החברים עצמם.",
-        "searchFleets": "חיפוש ציי רכב...",
-        "noFleets": "אין עדיין ציי רכב. צור אחד כדי להתחיל.",
-        "memberCount": "מארח {{count}}",
-        "memberCount_other": "{{count}} hosts",
-        "manageMembers": "ניהול חברים",
-        "manageMembersTitle": "ניהול חברי צי",
-        "manageMembersDescription": "פתח או הסר מארחים מהחברות הסטטית של צי זה. מארחים שתואמים לפי כללי תג תמיד כלולים.",
-        "searchHosts": "חיפוש מארחים...",
-        "noHostsFound": "לא נמצאו מארחים",
-        "noMembers": "לצי הזה עדיין אין חברים. הוסף מארחים או הגדר כלל תגיות.",
-        "membersLoadFailed": "טעינת חברי הצי נכשלה",
-        "memberUpdateFailed": "נכשל עדכון חברות הצי",
-        "tabRun": "הפעל את הפקודה",
-        "tabTransfer": "העברת קבצים",
-        "tabInventory": "מְלַאי",
-        "openInventoryTab": "פתח בכרטיסייה המלאה",
-        "tabPackages": "חבילות",
-        "runOnFleet": "רוץ על הצי",
-        "commandPlaceholder": "זמן פעולה ו-df -h",
-        "commandRequired": "נדרשת פקודה",
-        "commandInputsLabel": "קלטי פקודה",
-        "commandSucceeded": "הפקודה הצליחה בכל המארחים",
-        "commandPartialFailure": "{{failed}} מתוך {{total}} מארחים נכשלו",
-        "commandFailed": "נכשל בהפעלת הפקודה",
-        "resultSuccess": "הַצלָחָה",
-        "resultFailed": "נִכשָׁל",
-        "push": "לִדחוֹף",
-        "pull": "מְשׁוֹך",
-        "remotePathLabel": "נתיב מרוחק",
-        "remotePathRequired": "נדרש נתיב מרוחק",
-        "fileLabel": "קוֹבֶץ",
-        "fileRequired": "נדרש קובץ",
-        "pushHint": "הקובץ שנבחר נכתב בדיוק לנתיב הזה בכל מחשב מארח בצי.",
-        "pullHint": "הקובץ בנתיב זה נקרא מכל מארח ומורד כקובץ zip יחיד, תיקייה אחת לכל מארח.",
-        "transferComplete": "ההעברה הושלמה",
-        "transferFailed": "ההעברה נכשלה",
-        "refreshInventory": "רענון המלאי",
-        "inventoryLoadFailed": "טעינת המלאי נכשלה",
-        "inventoryRefreshed": "רענון המלאי",
-        "inventoryRefreshFailed": "רענון המלאי נכשל",
-        "inventoryNoData": "אין עדיין נתוני מלאי - רענן כדי לאסוף אותם.",
-        "inventoryHost": "מְאָרֵחַ",
-        "inventoryCollectedCount": "נאסף {{count}}/{{total}}",
-        "inventoryOs": "מערכת הפעלה",
-        "inventoryKernel": "גַרעִין",
-        "inventoryArch": "קֶשֶׁת",
-        "inventoryUptime": "זמן פעולה",
-        "inventoryPackageManager": "מנהל החבילות",
-        "inventoryCollectedAt": "נאסף",
-        "packageActionLabel": "פְּעוּלָה",
-        "packageInstall": "לְהַתְקִין",
-        "packageRemove": "לְהַסִיר",
-        "packageUpgradeAll": "שדרגו את כל החבילות",
-        "packageNameLabel": "שם החבילה",
-        "packageNameRequired": "נדרש שם חבילה",
-        "packageHint": "דורש גישת ניהול לכל מחשב מארח ועולה באמצעות סיסמת ה-sudo המאוחסנת של המארח.",
-        "shareFleet": "שתף צי",
-        "shareFleetTitle": "שתף \"{{name}}\"",
-        "shareFleetDescription": "משתף את המארחים החברים הנוכחיים של צי זה עם המשתמשים או התפקידים שנבחרו. מארחים שנוספו לצי מאוחר יותר לא ישותפו אוטומטית - שתף שוב כדי לכלול אותם.",
-        "shareSelectionRequired": "בחר לפחות משתמש או תפקיד אחד",
-        "fleetSharedSuccessfully": "משותף {{shared}} של {{total}} מארח(ים) בצי זה",
-        "failedToShareFleet": "שיתוף הצי נכשל",
-        "noMembersToShare": "לצי הזה עדיין אין מארחים חברים לשיתוף."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "ציי רכב"
-  },
-  "hosts": {
-    "docsLink": "הצג מסמכים",
-    "sharing": {
-      "customHoursPlaceholder": "שעות עד לפקיעת הגישה",
-      "expiry": {
-        "never": "לְעוֹלָם לֹא",
-        "oneHour": "שעה אחת",
-        "oneDay": "24 שעות",
-        "sevenDays": "7 ימים",
-        "thirtyDays": "30 ימים",
-        "custom": "מִנְהָג"
-      },
-      "expiryLabel": "פקיעת גישה",
-      "levels": {
-        "connect": {
-          "label": "לְחַבֵּר",
-          "description": "הפעלות פתוחות בלבד: טרמינל, שולחן עבודה מרוחק, מנהל קבצים, מנהרות ו-Docker. אין גישה לתצורת המארח."
-        },
-        "view": {
-          "label": "נוֹף",
-          "description": "התחבר, בנוסף ראה את תצורת המארח. סודות לעולם אינם מוצגים."
-        },
-        "edit": {
-          "label": "לַעֲרוֹך",
-          "description": "הצג ושנה הגדרות של מארח שאינו קשור לאימות. אימות ה-SSH של הבעלים נשאר פרטי ולבעלים בלבד."
-        },
-        "manage": {
-          "label": "לְנַהֵל",
-          "description": "עריכה, בנוסף לשיתוף המארח עם אחרים, שינוי רמות הרשאה וביטול גישה."
-        }
-      },
-      "noMatches": "לא נמצאו התאמות",
-      "permissionLevelLabel": "רמת הרשאה",
-      "rolesTab": "תפקידים",
-      "searchPlaceholder": "חיפוש משתמשים או תפקידים...",
-      "shareButton": "לַחֲלוֹק",
-      "shareWithCount": "שתף ({{count}})",
-      "usersTab": "משתמשים"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/hi_IN.json b/plugins/fleets/locales/translated/hi_IN.json
deleted file mode 100644
index b30adc2d9..000000000
--- a/plugins/fleets/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "बेड़े देखें",
-      "description": "बेड़े, उनके सदस्य और माल सूची देखें।"
-    },
-    "manage": {
-      "title": "बेड़े का प्रबंधन करें",
-      "description": "फ्लीट बनाएं, संपादित करें और हटाएं, सदस्यता बदलें और फ्लीट को अन्य उपयोगकर्ताओं या भूमिकाओं के साथ साझा करें।"
-    },
-    "execute": {
-      "title": "फ्लीट कार्रवाइयां चलाएं",
-      "description": "एक फ्लीट में कमांड चलाएं और पैकेज संबंधी कार्रवाइयां करें, और इसके सदस्य होस्ट से और उनके बीच फाइलें स्थानांतरित करें।"
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "बेड़े",
-        "createFleet": "बेड़ा बनाएं",
-        "createFleetTitle": "बेड़ा बनाएं",
-        "editFleetTitle": "बेड़े को संपादित करें",
-        "createFleetDescription": "फ्लीट होस्ट का एक नामित समूह है जिसके विरुद्ध आप एक इकाई के रूप में कार्रवाई कर सकते हैं।",
-        "nameLabel": "नाम",
-        "namePlaceholder": "उदाहरण के लिए, वेब सर्वर",
-        "nameRequired": "बेड़े का नाम आवश्यक है",
-        "descriptionLabel": "विवरण",
-        "descriptionPlaceholder": "वैकल्पिक विवरण",
-        "colorLabel": "रंग",
-        "tagRulesLabel": "टैग नियम",
-        "tagRulesPlaceholder": "प्रोड-वेब, एज",
-        "tagRulesHint": "मैन्युअल रूप से जोड़े गए होस्ट के अतिरिक्त, इनमें से किसी भी टैग वाले होस्ट स्वचालित रूप से शामिल हो जाते हैं।",
-        "fleetCreated": "बेड़ा बनाया गया",
-        "fleetUpdated": "बेड़े को अपडेट किया गया",
-        "fleetDeleted": "बेड़ा हटा दिया गया",
-        "saveFailed": "बेड़े को बचाने में विफल",
-        "deleteFailed": "बेड़ा हटाने में विफल",
-        "loadFailed": "फ्लीट लोड करने में विफल",
-        "deleteFleetTitle": "बेड़ा हटाएं",
-        "deleteFleetDescription": "क्या आप वाकई \"{{name}}\" को हटाना चाहते हैं? इससे सदस्य होस्ट स्वयं नहीं हटेंगे।",
-        "searchFleets": "खोज बेड़े...",
-        "noFleets": "अभी तक कोई बेड़ा नहीं है। शुरुआत करने के लिए एक बेड़ा बनाएं।",
-        "memberCount": "{{count}} होस्ट",
-        "memberCount_other": "{{count}} होस्ट",
-        "manageMembers": "सदस्यों का प्रबंधन करें",
-        "manageMembersTitle": "बेड़े के सदस्यों का प्रबंधन करें",
-        "manageMembersDescription": "इस फ्लीट की स्थायी सदस्यता में होस्ट को शामिल या बाहर करें। टैग नियमों द्वारा मेल खाने वाले होस्ट हमेशा शामिल होते हैं।",
-        "searchHosts": "होस्ट खोजें...",
-        "noHostsFound": "कोई होस्ट नहीं मिला",
-        "noMembers": "इस फ्लीट में अभी कोई सदस्य नहीं है। होस्ट जोड़ें या टैग नियम सेट करें।",
-        "membersLoadFailed": "फ्लीट सदस्यों को लोड करने में विफल",
-        "memberUpdateFailed": "फ्लीट सदस्यता को अपडेट करने में विफल",
-        "tabRun": "कमांड चलाएँ",
-        "tabTransfer": "फ़ाइलें स्थानांतरित करें",
-        "tabInventory": "भंडार",
-        "openInventoryTab": "पूरे टैब में खोलें",
-        "tabPackages": "पैकेजेस",
-        "runOnFleet": "फ्लीट पर चलाएँ",
-        "commandPlaceholder": "अपटाइम && df -h",
-        "commandRequired": "एक आदेश आवश्यक है",
-        "commandInputsLabel": "कमांड इनपुट",
-        "commandSucceeded": "सभी होस्ट पर कमांड सफलतापूर्वक संचालित हुई।",
-        "commandPartialFailure": "{{failed}} में से {{total}} होस्ट विफल हो गए",
-        "commandFailed": "कमांड चलाने में विफल",
-        "resultSuccess": "सफल",
-        "resultFailed": "असफल",
-        "push": "धकेलना",
-        "pull": "खींचो",
-        "remotePathLabel": "दूरस्थ पथ",
-        "remotePathRequired": "एक दूरस्थ मार्ग आवश्यक है",
-        "fileLabel": "फ़ाइल",
-        "fileRequired": "एक फ़ाइल आवश्यक है",
-        "pushHint": "चयनित फ़ाइल को फ्लीट में मौजूद प्रत्येक होस्ट पर ठीक इसी पथ पर लिखा जाता है।",
-        "pullHint": "इस पथ पर स्थित फ़ाइल को प्रत्येक होस्ट से पढ़ा जाता है और एक ही ज़िप फ़ाइल के रूप में डाउनलोड किया जाता है, जिसमें प्रत्येक होस्ट के लिए एक फ़ोल्डर होता है।",
-        "transferComplete": "स्थानांतरण पूर्ण",
-        "transferFailed": "स्थानांतरण विफल",
-        "refreshInventory": "इन्वेंट्री रीफ़्रेश करें",
-        "inventoryLoadFailed": "इन्वेंट्री लोड करने में विफल",
-        "inventoryRefreshed": "इन्वेंट्री रीफ़्रेश हो गई",
-        "inventoryRefreshFailed": "इन्वेंट्री को रीफ़्रेश करने में विफल",
-        "inventoryNoData": "अभी कोई इन्वेंट्री डेटा उपलब्ध नहीं है - इसे प्राप्त करने के लिए पेज को रिफ्रेश करें।",
-        "inventoryHost": "होस्ट",
-        "inventoryCollectedCount": "{{count}}/{{total}} एकत्रित",
-        "inventoryOs": "ओएस",
-        "inventoryKernel": "कर्नेल",
-        "inventoryArch": "मेहराब",
-        "inventoryUptime": "अपटाइम",
-        "inventoryPackageManager": "पैकेज प्रबंधक",
-        "inventoryCollectedAt": "एकत्र किया हुआ",
-        "packageActionLabel": "क्रिया",
-        "packageInstall": "स्थापित करना",
-        "packageRemove": "हटाएँ",
-        "packageUpgradeAll": "सभी पैकेजों को अपग्रेड करें",
-        "packageNameLabel": "पैकेज का नाम",
-        "packageNameRequired": "पैकेज का नाम आवश्यक है",
-        "packageHint": "प्रत्येक होस्ट के लिए प्रबंधन-स्तर की पहुँच आवश्यक है और होस्ट के संग्रहीत सूडो पासवर्ड का उपयोग करके पहुँच को बढ़ाया जा सकता है।",
-        "shareFleet": "शेयर फ्लीट",
-        "shareFleetTitle": "शेयर करें \"{{name}}\"",
-        "shareFleetDescription": "यह सेवा इस फ्लीट के वर्तमान सदस्य होस्ट्स को चयनित उपयोगकर्ताओं या भूमिकाओं के साथ साझा करती है। फ्लीट में बाद में जोड़े गए होस्ट्स स्वचालित रूप से साझा नहीं होते हैं - उन्हें शामिल करने के लिए पुनः साझा करें।",
-        "shareSelectionRequired": "कम से कम एक उपयोगकर्ता या भूमिका का चयन करें",
-        "fleetSharedSuccessfully": "इस बेड़े में {{total}} मेज़बान(ओं) का साझा {{shared}} है",
-        "failedToShareFleet": "बेड़ा साझा करने में विफल",
-        "noMembersToShare": "इस फ्लीट में अभी तक कोई सदस्य होस्ट नहीं है जो अपनी सेवाएं साझा कर सके।"
-      }
-    }
-  },
-  "nav": {
-    "fleets": "बेड़े"
-  },
-  "hosts": {
-    "docsLink": "दस्तावेज़ देखें",
-    "sharing": {
-      "customHoursPlaceholder": "पहुँच समाप्त होने तक के घंटे",
-      "expiry": {
-        "never": "कभी नहीं",
-        "oneHour": "1 घंटा",
-        "oneDay": "24 घंटे",
-        "sevenDays": "7 दिन",
-        "thirtyDays": "30 दिन",
-        "custom": "कस्टम"
-      },
-      "expiryLabel": "पहुँच समाप्ति",
-      "levels": {
-        "connect": {
-          "label": "कनेक्ट",
-          "description": "केवल सत्र खोलें: टर्मिनल, रिमोट डेस्कटॉप, फ़ाइल प्रबंधक, टनल और Docker। होस्ट कॉन्फ़िगरेशन तक पहुँच नहीं।"
-        },
-        "view": {
-          "label": "देखें",
-          "description": "कनेक्ट करें, साथ ही होस्ट कॉन्फ़िगरेशन देखें। सीक्रेट कभी नहीं दिखाए जाते।"
-        },
-        "edit": {
-          "label": "संपादित करें",
-          "description": "आप बिना प्रमाणीकरण वाले होस्ट की सेटिंग्स देख सकते हैं और उनमें बदलाव कर सकते हैं। मालिक का SSH प्रमाणीकरण गोपनीय रहता है और केवल मालिक के लिए ही उपलब्ध होता है।"
-        },
-        "manage": {
-          "label": "प्रबंधित करें",
-          "description": "संपादित करें, और दूसरों के साथ होस्ट साझा करें, अनुमति स्तर बदलें और पहुँच रद्द करें।"
-        }
-      },
-      "noMatches": "कोई मिलान नहीं मिला",
-      "permissionLevelLabel": "अनुमति स्तर",
-      "rolesTab": "भूमिकाएँ",
-      "searchPlaceholder": "उपयोगकर्ता या भूमिकाएँ खोजें...",
-      "shareButton": "साझा करें",
-      "shareWithCount": "साझा करें ({{count}})",
-      "usersTab": "उपयोगकर्ता"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/hu_HU.json b/plugins/fleets/locales/translated/hu_HU.json
deleted file mode 100644
index b801a95d6..000000000
--- a/plugins/fleets/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Flották megtekintése",
-      "description": "Tekintse meg a flottákat, azok tagjait és a készletet."
-    },
-    "manage": {
-      "title": "Flották kezelése",
-      "description": "Flották létrehozása, szerkesztése és törlése, tagság módosítása, valamint flották megosztása más felhasználókkal vagy szerepkörökkel."
-    },
-    "execute": {
-      "title": "Flotta műveletek futtatása",
-      "description": "Parancsok és csomagműveletek futtatása egy flottán belül, fájlok átvitele a taggépekre és a taggépekről."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Flották",
-        "createFleet": "Flotta létrehozása",
-        "createFleetTitle": "Flotta létrehozása",
-        "editFleetTitle": "Flotta szerkesztése",
-        "createFleetDescription": "A flotta egy elnevezett hosztcsoport, amely ellen egységként műveleteket lehet végrehajtani.",
-        "nameLabel": "Név",
-        "namePlaceholder": "pl. webszerverek",
-        "nameRequired": "A flotta nevének megadása kötelező",
-        "descriptionLabel": "Leírás",
-        "descriptionPlaceholder": "Opcionális leírás",
-        "colorLabel": "Szín",
-        "tagRulesLabel": "Címkeszabályok",
-        "tagRulesPlaceholder": "prod-web, él",
-        "tagRulesHint": "Az ezen címkék bármelyikével rendelkező hosztok automatikusan bele lesznek foglalva, a manuálisan hozzáadott hosztok mellett.",
-        "fleetCreated": "Flotta létrehozva",
-        "fleetUpdated": "Flotta frissítve",
-        "fleetDeleted": "Flotta törölve",
-        "saveFailed": "Nem sikerült menteni a flottát",
-        "deleteFailed": "Nem sikerült törölni a flottát",
-        "loadFailed": "Nem sikerült betölteni a flottákat",
-        "deleteFleetTitle": "Flotta törlése",
-        "deleteFleetDescription": "Biztosan törölni szeretnéd a(z) \"{{name}}\" fájlt? Ez nem törli a taghosztokat.",
-        "searchFleets": "Flották keresése...",
-        "noFleets": "Még nincsenek flották. Hozz létre egyet a kezdéshez.",
-        "memberCount": "{{count}} gazdagép",
-        "memberCount_other": "{{count}} gazdagépek",
-        "manageMembers": "Tagok kezelése",
-        "manageMembersTitle": "Flottatagok kezelése",
-        "manageMembersDescription": "Hosztok be- és kikapcsolása a flotta statikus tagságába. A címkeszabályoknak megfelelő hosztok mindig szerepelnek.",
-        "searchHosts": "Gazdagépek keresése...",
-        "noHostsFound": "Nem találhatók hostok",
-        "noMembers": "Ennek a flottának még nincsenek tagjai. Adjon hozzá hosztokat, vagy állítson be címkézési szabályt.",
-        "membersLoadFailed": "Nem sikerült betölteni a flotta tagjait",
-        "memberUpdateFailed": "Nem sikerült frissíteni a flottatagságot",
-        "tabRun": "Parancs futtatása",
-        "tabTransfer": "Fájlok átvitele",
-        "tabInventory": "Leltár",
-        "openInventoryTab": "Megnyitás teljes lapon",
-        "tabPackages": "Csomagok",
-        "runOnFleet": "Fleet Run",
-        "commandPlaceholder": "üzemidő && df -h",
-        "commandRequired": "Parancsra van szükség",
-        "commandInputsLabel": "Parancsbemenetek",
-        "commandSucceeded": "A parancs minden gépen sikeresen lefutott",
-        "commandPartialFailure": "{{failed}} / {{total}} gazdagépből {{total}} hibát jelzett",
-        "commandFailed": "Nem sikerült futtatni a parancsot",
-        "resultSuccess": "Siker",
-        "resultFailed": "Sikertelen",
-        "push": "Nyomás",
-        "pull": "Húzni",
-        "remotePathLabel": "Távoli útvonal",
-        "remotePathRequired": "Távoli elérési út szükséges",
-        "fileLabel": "Fájl",
-        "fileRequired": "Fájl megadása szükséges",
-        "pushHint": "A kiválasztott fájl pontosan erre az elérési útra kerül a flotta minden egyes gépén.",
-        "pullHint": "Az ezen az elérési úton található fájlt minden hosztról beolvassa a rendszer, és egyetlen zip fájlként tölti le, hosztonként egy mappában.",
-        "transferComplete": "Átvitel befejezve",
-        "transferFailed": "Átvitel sikertelen",
-        "refreshInventory": "Készlet frissítése",
-        "inventoryLoadFailed": "Nem sikerült betölteni a készletet",
-        "inventoryRefreshed": "Készlet frissítve",
-        "inventoryRefreshFailed": "Nem sikerült frissíteni a készletet",
-        "inventoryNoData": "Még nincsenek készletadatok – frissítse az oldalt az összegyűjtéséhez.",
-        "inventoryHost": "Házigazda",
-        "inventoryCollectedCount": "{{count}}/{{total}} begyűjtött",
-        "inventoryOs": "operációs rendszer",
-        "inventoryKernel": "Kernel",
-        "inventoryArch": "Boltív",
-        "inventoryUptime": "Üzemidő",
-        "inventoryPackageManager": "Csomagkezelő",
-        "inventoryCollectedAt": "Összegyűjtött",
-        "packageActionLabel": "Akció",
-        "packageInstall": "Telepítés",
-        "packageRemove": "Eltávolítás",
-        "packageUpgradeAll": "Az összes csomag frissítése",
-        "packageNameLabel": "Csomag neve",
-        "packageNameRequired": "Csomagnév megadása kötelező",
-        "packageHint": "Gazdagépenként felügyeleti szintű hozzáférést igényel, és a gazdagép tárolt sudo jelszavával emeli ki a jogosultságokat.",
-        "shareFleet": "Megosztási flotta",
-        "shareFleetTitle": "Megosztás \"{{name}}\"",
-        "shareFleetDescription": "Megosztja a flotta jelenlegi tag hosztjait a kiválasztott felhasználókkal vagy szerepkörökkel. A flottához később hozzáadott hosztok nem kerülnek automatikusan megosztásra – ossza meg újra, hogy belefoglalja őket.",
-        "shareSelectionRequired": "Válasszon ki legalább egy felhasználót vagy szerepkört",
-        "fleetSharedSuccessfully": "Megosztott {{shared}} a {{total}} hosztból ebben a flottában",
-        "failedToShareFleet": "Nem sikerült megosztani a flottát",
-        "noMembersToShare": "Ennek a flottának még nincsenek megosztható tag hosztjai."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Flották"
-  },
-  "hosts": {
-    "docsLink": "Dokumentumok megtekintése",
-    "sharing": {
-      "customHoursPlaceholder": "Órák a hozzáférés lejártáig",
-      "expiry": {
-        "never": "Soha",
-        "oneHour": "1 óra",
-        "oneDay": "24 óra",
-        "sevenDays": "7 nap",
-        "thirtyDays": "30 nap",
-        "custom": "Szokás"
-      },
-      "expiryLabel": "Hozzáférés lejárata",
-      "levels": {
-        "connect": {
-          "label": "Csatlakozás",
-          "description": "Csak nyitott munkamenetek: terminál, távoli asztal, fájlkezelő, alagutak és Docker. Nincs hozzáférés a gazdagép konfigurációjához."
-        },
-        "view": {
-          "label": "Kilátás",
-          "description": "Csatlakozás, valamint a gazdagép konfigurációjának megtekintése. A titkos kódok soha nem jelennek meg."
-        },
-        "edit": {
-          "label": "Szerkesztés",
-          "description": "A nem hitelesítési hosztbeállítások megtekintése és módosítása. A tulajdonos SSH-hitelesítése privát és csak a tulajdonos számára elérhető marad."
-        },
-        "manage": {
-          "label": "Kezelés",
-          "description": "Szerkeszd, és oszd meg a gazdagépet másokkal, módosítsd a jogosultsági szinteket és vond vissza a hozzáférést."
-        }
-      },
-      "noMatches": "Nincs találat",
-      "permissionLevelLabel": "Jogosultsági szint",
-      "rolesTab": "Szerepkörök",
-      "searchPlaceholder": "Felhasználók vagy szerepkörök keresése...",
-      "shareButton": "Részesedés",
-      "shareWithCount": "Megosztás ({{count}})",
-      "usersTab": "Felhasználók"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/id_ID.json b/plugins/fleets/locales/translated/id_ID.json
deleted file mode 100644
index 4ac96588a..000000000
--- a/plugins/fleets/locales/translated/id_ID.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Lihat armada",
-      "description": "Lihat armada, anggotanya, dan inventarisnya."
-    },
-    "manage": {
-      "title": "Mengelola armada",
-      "description": "Buat, edit, dan hapus armada, ubah keanggotaan, dan bagikan armada dengan pengguna atau peran lain."
-    },
-    "execute": {
-      "title": "Jalankan tindakan armada.",
-      "description": "Jalankan perintah dan tindakan paket di seluruh armada, dan transfer file ke dan dari host anggotanya."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Armada",
-        "createFleet": "Buat Armada",
-        "createFleetTitle": "Buat Armada",
-        "editFleetTitle": "Edit Armada",
-        "createFleetDescription": "Armada adalah kelompok host bernama yang dapat Anda serang sebagai satu unit.",
-        "nameLabel": "Nama",
-        "namePlaceholder": "misalnya, Server Web",
-        "nameRequired": "Nama armada wajib diisi.",
-        "descriptionLabel": "Keterangan",
-        "descriptionPlaceholder": "Deskripsi opsional",
-        "colorLabel": "Warna",
-        "tagRulesLabel": "Aturan tag",
-        "tagRulesPlaceholder": "prod-web, tepi",
-        "tagRulesHint": "Host yang memiliki salah satu tag ini akan disertakan secara otomatis, di samping host yang ditambahkan secara manual.",
-        "fleetCreated": "Armada yang dibuat",
-        "fleetUpdated": "Armada diperbarui",
-        "fleetDeleted": "Armada dihapus",
-        "saveFailed": "Gagal menyelamatkan armada.",
-        "deleteFailed": "Gagal menghapus armada",
-        "loadFailed": "Gagal memuat armada",
-        "deleteFleetTitle": "Hapus Armada",
-        "deleteFleetDescription": "Apakah Anda yakin ingin menghapus \"{{name}}\"? Ini tidak menghapus host anggota itu sendiri.",
-        "searchFleets": "Armada pencarian...",
-        "noFleets": "Belum ada armada. Buat satu untuk memulai.",
-        "memberCount": "{{count}} tuan rumah",
-        "memberCount_other": "{{count}} tuan rumah",
-        "manageMembers": "Kelola Anggota",
-        "manageMembersTitle": "Mengelola Anggota Armada",
-        "manageMembersDescription": "Aktifkan atau nonaktifkan keanggotaan statis host dalam armada ini. Host yang cocok dengan aturan tag akan selalu disertakan.",
-        "searchHosts": "Cari host...",
-        "noHostsFound": "Tidak ada host yang ditemukan.",
-        "noMembers": "Armada ini belum memiliki anggota. Tambahkan host atau tetapkan aturan tag.",
-        "membersLoadFailed": "Gagal memuat anggota armada",
-        "memberUpdateFailed": "Gagal memperbarui keanggotaan armada.",
-        "tabRun": "Jalankan Perintah",
-        "tabTransfer": "Transfer File",
-        "tabInventory": "Inventaris",
-        "openInventoryTab": "Buka di tab penuh",
-        "tabPackages": "Paket",
-        "runOnFleet": "Lari di Armada",
-        "commandPlaceholder": "waktu aktif && df -h",
-        "commandRequired": "Diperlukan sebuah perintah.",
-        "commandInputsLabel": "Masukan perintah",
-        "commandSucceeded": "Perintah berhasil dijalankan di semua host.",
-        "commandPartialFailure": "{{failed}} dari {{total}} host gagal",
-        "commandFailed": "Perintah gagal dijalankan.",
-        "resultSuccess": "Kesuksesan",
-        "resultFailed": "Gagal",
-        "push": "Dorongan",
-        "pull": "Menarik",
-        "remotePathLabel": "Jalur jarak jauh",
-        "remotePathRequired": "Diperlukan jalur jarak jauh.",
-        "fileLabel": "Mengajukan",
-        "fileRequired": "Diperlukan sebuah berkas.",
-        "pushHint": "File yang dipilih akan ditulis ke jalur persis ini di setiap host dalam armada.",
-        "pullHint": "Berkas di jalur ini dibaca dari setiap host dan diunduh sebagai satu file zip, satu folder per host.",
-        "transferComplete": "Transfer selesai",
-        "transferFailed": "Transfer gagal",
-        "refreshInventory": "Perbarui Inventaris",
-        "inventoryLoadFailed": "Gagal memuat inventaris",
-        "inventoryRefreshed": "Persediaan diperbarui",
-        "inventoryRefreshFailed": "Gagal memperbarui inventaris",
-        "inventoryNoData": "Belum ada data inventaris - segarkan halaman untuk mengumpulkannya.",
-        "inventoryHost": "Tuan rumah",
-        "inventoryCollectedCount": "{{count}}/{{total}} dikumpulkan",
-        "inventoryOs": "Sistem Operasi",
-        "inventoryKernel": "Inti",
-        "inventoryArch": "Lengkungan",
-        "inventoryUptime": "Waktu aktif",
-        "inventoryPackageManager": "Pengelola paket",
-        "inventoryCollectedAt": "Dikumpulkan",
-        "packageActionLabel": "Tindakan",
-        "packageInstall": "Memasang",
-        "packageRemove": "Menghapus",
-        "packageUpgradeAll": "Tingkatkan semua paket",
-        "packageNameLabel": "Nama paket",
-        "packageNameRequired": "Nama paket wajib diisi.",
-        "packageHint": "Membutuhkan akses tingkat pengelola per host dan ditingkatkan menggunakan kata sandi sudo yang tersimpan di host tersebut.",
-        "shareFleet": "Armada Bersama",
-        "shareFleetTitle": "Bagikan \"{{name}}\"",
-        "shareFleetDescription": "Membagikan host anggota armada saat ini kepada pengguna atau peran yang dipilih. Host yang ditambahkan ke armada kemudian tidak dibagikan secara otomatis - bagikan lagi untuk menyertakannya.",
-        "shareSelectionRequired": "Pilih setidaknya satu pengguna atau peran",
-        "fleetSharedSuccessfully": "Berbagi {{shared}} dari {{total}} host di armada ini",
-        "failedToShareFleet": "Gagal berbagi armada",
-        "noMembersToShare": "Armada ini belum memiliki anggota yang dapat dibagikan."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Armada"
-  },
-  "hosts": {
-    "docsLink": "Lihat dokumen",
-    "sharing": {
-      "customHoursPlaceholder": "Waktu hingga akses berakhir",
-      "expiry": {
-        "never": "Tidak pernah",
-        "oneHour": "1 jam",
-        "oneDay": "24 jam",
-        "sevenDays": "7 hari",
-        "thirtyDays": "30 hari",
-        "custom": "Kebiasaan"
-      },
-      "expiryLabel": "Kedaluwarsa akses",
-      "levels": {
-        "connect": {
-          "label": "Menghubungkan",
-          "description": "Hanya sesi yang diizinkan untuk dibuka: terminal, desktop jarak jauh, pengelola file, terowongan, dan Docker. Tidak ada akses ke konfigurasi host."
-        },
-        "view": {
-          "label": "Melihat",
-          "description": "Hubungkan, dan lihat konfigurasi host. Rahasia tidak akan pernah ditampilkan."
-        },
-        "edit": {
-          "label": "Edit",
-          "description": "Lihat, dan ubah pengaturan host non-autentikasi. Autentikasi SSH pemilik tetap bersifat pribadi dan hanya untuk pemilik."
-        },
-        "manage": {
-          "label": "Mengelola",
-          "description": "Edit, bagikan host dengan orang lain, ubah tingkat izin, dan cabut akses."
-        }
-      },
-      "noMatches": "Tidak ditemukan kecocokan.",
-      "permissionLevelLabel": "Tingkat izin",
-      "rolesTab": "Peran",
-      "searchPlaceholder": "Cari pengguna atau peran...",
-      "shareButton": "Membagikan",
-      "shareWithCount": "Bagikan ({{count}})",
-      "usersTab": "Pengguna"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/it_IT.json b/plugins/fleets/locales/translated/it_IT.json
deleted file mode 100644
index 1809f3edf..000000000
--- a/plugins/fleets/locales/translated/it_IT.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Visualizza le flotte",
-      "description": "Visualizza le flotte, i loro membri e l'inventario."
-    },
-    "manage": {
-      "title": "Gestire le flotte",
-      "description": "Crea, modifica ed elimina flotte, cambia i membri e condividi le flotte con altri utenti o ruoli."
-    },
-    "execute": {
-      "title": "Esegui azioni della flotta",
-      "description": "Esegui comandi e azioni sui pacchetti su un'intera flotta e trasferisci file da e verso gli host membri."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Flotte",
-        "createFleet": "Crea flotta",
-        "createFleetTitle": "Crea flotta",
-        "editFleetTitle": "Modifica flotta",
-        "createFleetDescription": "Una flotta è un gruppo denominato di host su cui è possibile eseguire azioni come un'unica unità.",
-        "nameLabel": "Nome",
-        "namePlaceholder": "ad esempio, server web",
-        "nameRequired": "Il nome della flotta è obbligatorio",
-        "descriptionLabel": "Descrizione",
-        "descriptionPlaceholder": "Descrizione opzionale",
-        "colorLabel": "Colore",
-        "tagRulesLabel": "Regole dei tag",
-        "tagRulesPlaceholder": "prod-web, edge",
-        "tagRulesHint": "Oltre agli host aggiunti manualmente, vengono inclusi automaticamente anche quelli che presentano uno qualsiasi di questi tag.",
-        "fleetCreated": "Flotta creata",
-        "fleetUpdated": "Flotta aggiornata",
-        "fleetDeleted": "Flotta eliminata",
-        "saveFailed": "Impossibile salvare la flotta",
-        "deleteFailed": "Impossibile eliminare la flotta",
-        "loadFailed": "Impossibile caricare le flotte",
-        "deleteFleetTitle": "Elimina flotta",
-        "deleteFleetDescription": "Sei sicuro di voler eliminare \"{{name}}\"? Questa operazione non elimina gli host membri stessi.",
-        "searchFleets": "Cerca flotte...",
-        "noFleets": "Nessuna flotta ancora. Creane una per iniziare.",
-        "memberCount": "{{count}} host",
-        "memberCount_other": "{{count}} host",
-        "manageMembers": "Gestisci i membri",
-        "manageMembersTitle": "Gestisci i membri della flotta",
-        "manageMembersDescription": "Attiva o disattiva l'inclusione degli host nell'elenco statico di questa flotta. Gli host corrispondenti alle regole dei tag sono sempre inclusi.",
-        "searchHosts": "Cerca host...",
-        "noHostsFound": "Nessun host trovato",
-        "noMembers": "Questa flotta non ha ancora membri. Aggiungi host o imposta una regola di tag.",
-        "membersLoadFailed": "Impossibile caricare i membri della flotta",
-        "memberUpdateFailed": "Impossibile aggiornare l'appartenenza alla flotta",
-        "tabRun": "Comando di esecuzione",
-        "tabTransfer": "Trasferimento file",
-        "tabInventory": "Inventario",
-        "openInventoryTab": "Apri in una scheda completa",
-        "tabPackages": "Pacchetti",
-        "runOnFleet": "Run on Fleet",
-        "commandPlaceholder": "uptime && df -h",
-        "commandRequired": "È richiesto un comando",
-        "commandInputsLabel": "Input di comando",
-        "commandSucceeded": "Comando eseguito correttamente su tutti gli host",
-        "commandPartialFailure": "{{failed}} di {{total}} host non sono riusciti",
-        "commandFailed": "Impossibile eseguire il comando",
-        "resultSuccess": "Successo",
-        "resultFailed": "Fallito",
-        "push": "Spingere",
-        "pull": "Tiro",
-        "remotePathLabel": "Percorso remoto",
-        "remotePathRequired": "È necessario un percorso remoto",
-        "fileLabel": "File",
-        "fileRequired": "È necessario un file",
-        "pushHint": "Il file selezionato viene scritto esattamente in questo percorso su ogni host della flotta.",
-        "pullHint": "Il file presente in questo percorso viene letto da ogni host e scaricato come un singolo file zip, una cartella per ogni host.",
-        "transferComplete": "Trasferimento completato",
-        "transferFailed": "Trasferimento non riuscito",
-        "refreshInventory": "Aggiorna l'inventario",
-        "inventoryLoadFailed": "Impossibile caricare l'inventario",
-        "inventoryRefreshed": "Inventario aggiornato",
-        "inventoryRefreshFailed": "Impossibile aggiornare l'inventario",
-        "inventoryNoData": "Nessun dato di inventario disponibile al momento: aggiorna la pagina per visualizzarlo.",
-        "inventoryHost": "Host",
-        "inventoryCollectedCount": "{{count}}/{{total}} raccolto",
-        "inventoryOs": "OS",
-        "inventoryKernel": "Kernel",
-        "inventoryArch": "Arco",
-        "inventoryUptime": "Uptime",
-        "inventoryPackageManager": "Responsabile del pacchetto",
-        "inventoryCollectedAt": "Raccolto",
-        "packageActionLabel": "Azione",
-        "packageInstall": "Installare",
-        "packageRemove": "Rimuovi",
-        "packageUpgradeAll": "Aggiorna tutti i pacchetti",
-        "packageNameLabel": "Nome del pacchetto",
-        "packageNameRequired": "È richiesto un nome per il pacchetto",
-        "packageHint": "Richiede l'accesso a livello di gestione per host ed eleva i privilegi utilizzando la password sudo memorizzata sull'host.",
-        "shareFleet": "Condividi la flotta",
-        "shareFleetTitle": "Condividi \"{{name}}\"",
-        "shareFleetDescription": "Condivide gli host attualmente membri di questa flotta con gli utenti o i ruoli selezionati. Gli host aggiunti alla flotta in un secondo momento non vengono condivisi automaticamente: è necessario ripetere la condivisione per includerli.",
-        "shareSelectionRequired": "Seleziona almeno un utente o un ruolo",
-        "fleetSharedSuccessfully": "Condiviso {{shared}} di {{total}} host(i) in questa flotta",
-        "failedToShareFleet": "Impossibile condividere la flotta",
-        "noMembersToShare": "Questa flotta non ha ancora host membri da condividere."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Flotte"
-  },
-  "hosts": {
-    "docsLink": "Visualizza documentazione",
-    "sharing": {
-      "customHoursPlaceholder": "Ore fino alla scadenza dell'accesso",
-      "expiry": {
-        "never": "Mai",
-        "oneHour": "1 ora",
-        "oneDay": "24 ore",
-        "sevenDays": "7 giorni",
-        "thirtyDays": "30 giorni",
-        "custom": "Personalizzato"
-      },
-      "expiryLabel": "Scadenza accesso",
-      "levels": {
-        "connect": {
-          "label": "Connetti",
-          "description": "Apri solo sessioni: terminale, desktop remoto, gestione file, tunnel e Docker. Nessun accesso alla configurazione dell'host."
-        },
-        "view": {
-          "label": "Visualizza",
-          "description": "Connetti, più visualizza la configurazione dell'host. I segreti non vengono mai mostrati."
-        },
-        "edit": {
-          "label": "Modifica",
-          "description": "Visualizza e modifica le impostazioni host senza autenticazione. L'autenticazione SSH del proprietario rimane privata e accessibile solo al proprietario."
-        },
-        "manage": {
-          "label": "Gestisci",
-          "description": "Modifica, più condividi l'host con altri, modifica i livelli di autorizzazione e revoca l'accesso."
-        }
-      },
-      "noMatches": "Nessuna corrispondenza trovata",
-      "permissionLevelLabel": "Livello di autorizzazione",
-      "rolesTab": "Ruoli",
-      "searchPlaceholder": "Cerca utenti o ruoli...",
-      "shareButton": "Condividi",
-      "shareWithCount": "Condividi ({{count}})",
-      "usersTab": "Utenti"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/ja_JP.json b/plugins/fleets/locales/translated/ja_JP.json
deleted file mode 100644
index aace4ec77..000000000
--- a/plugins/fleets/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "車両一覧を見る",
-      "description": "艦隊、その構成員、および保有資産をご覧ください。"
-    },
-    "manage": {
-      "title": "車両群を管理する",
-      "description": "艦隊の作成、編集、削除、メンバーシップの変更、および他のユーザーや役割との艦隊の共有が可能です。"
-    },
-    "execute": {
-      "title": "艦隊作戦を実行する",
-      "description": "フリート全体でコマンドやパッケージアクションを実行し、メンバーホストとの間でファイルを転送します。"
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "艦隊",
-        "createFleet": "艦隊を作成する",
-        "createFleetTitle": "艦隊を作成する",
-        "editFleetTitle": "艦隊を編集",
-        "createFleetDescription": "フリートとは、複数のホストをまとめてグループ化し、それらを一つの単位としてアクションを実行できるグループです。",
-        "nameLabel": "名前",
-        "namePlaceholder": "例：Webサーバー",
-        "nameRequired": "艦隊名は必須です",
-        "descriptionLabel": "説明",
-        "descriptionPlaceholder": "任意の説明",
-        "colorLabel": "色",
-        "tagRulesLabel": "タグルール",
-        "tagRulesPlaceholder": "プロダクションウェブ、エッジ",
-        "tagRulesHint": "これらのタグのいずれかが付いているホストは、手動で追加されたホストに加えて、自動的に含まれます。",
-        "fleetCreated": "艦隊が編成されました",
-        "fleetUpdated": "艦隊情報更新",
-        "fleetDeleted": "艦隊削除",
-        "saveFailed": "艦隊の救出に失敗しました",
-        "deleteFailed": "艦隊の削除に失敗しました",
-        "loadFailed": "艦隊の読み込みに失敗しました",
-        "deleteFleetTitle": "艦隊を削除",
-        "deleteFleetDescription": "「{{name}}」を削除してもよろしいですか？これはメンバーホスト自体を削除するものではありません。",
-        "searchFleets": "艦隊を検索...",
-        "noFleets": "まだ艦隊がありません。まずは艦隊を作成してください。",
-        "memberCount": "{{count}} ホスト",
-        "memberCount_other": "{{count}} ホスト",
-        "manageMembers": "メンバーの管理",
-        "manageMembersTitle": "フリートメンバーの管理",
-        "manageMembersDescription": "このフリートの静的メンバーシップにホストを追加または削除する切り替えを行います。タグルールに一致するホストは常に含まれます。",
-        "searchHosts": "ホストを検索...",
-        "noHostsFound": "ホストが見つかりません",
-        "noMembers": "この艦隊にはまだメンバーがいません。ホストを追加するか、タグルールを設定してください。",
-        "membersLoadFailed": "艦隊メンバーの読み込みに失敗しました",
-        "memberUpdateFailed": "艦隊メンバーシップの更新に失敗しました",
-        "tabRun": "コマンドを実行する",
-        "tabTransfer": "ファイルの転送",
-        "tabInventory": "在庫",
-        "openInventoryTab": "全画面表示",
-        "tabPackages": "パッケージ",
-        "runOnFleet": "ラン・オン・フリート",
-        "commandPlaceholder": "uptime && df -h",
-        "commandRequired": "コマンドが必要です",
-        "commandInputsLabel": "コマンド入力",
-        "commandSucceeded": "コマンドはすべてのホストで正常に実行されました。",
-        "commandPartialFailure": "{{failed}} の {{total}} ホストが失敗しました",
-        "commandFailed": "コマンドの実行に失敗しました",
-        "resultSuccess": "成功",
-        "resultFailed": "失敗",
-        "push": "押す",
-        "pull": "引く",
-        "remotePathLabel": "リモートパス",
-        "remotePathRequired": "遠隔経路が必要です",
-        "fileLabel": "ファイル",
-        "fileRequired": "ファイルが必要です",
-        "pushHint": "選択されたファイルは、艦隊内のすべてのホスト上のこの正確なパスに書き込まれます。",
-        "pullHint": "このパスにあるファイルは、すべてのホストから読み込まれ、ホストごとに1つのフォルダ、つまり単一のzipファイルとしてダウンロードされます。",
-        "transferComplete": "転送が完了しました",
-        "transferFailed": "転送に失敗しました",
-        "refreshInventory": "在庫を更新",
-        "inventoryLoadFailed": "在庫の読み込みに失敗しました",
-        "inventoryRefreshed": "在庫が更新されました",
-        "inventoryRefreshFailed": "在庫の更新に失敗しました",
-        "inventoryNoData": "在庫データがまだありません。更新して取得してください。",
-        "inventoryHost": "ホスト",
-        "inventoryCollectedCount": "{{count}}/{{total}} が収集されました",
-        "inventoryOs": "OS",
-        "inventoryKernel": "カーネル",
-        "inventoryArch": "アーチ",
-        "inventoryUptime": "アップタイム",
-        "inventoryPackageManager": "パッケージマネージャー",
-        "inventoryCollectedAt": "収集済み",
-        "packageActionLabel": "アクション",
-        "packageInstall": "インストール",
-        "packageRemove": "削除",
-        "packageUpgradeAll": "すべてのパッケージをアップグレードする",
-        "packageNameLabel": "パッケージ名",
-        "packageNameRequired": "パッケージ名は必須です。",
-        "packageHint": "ホストごとに管理者レベルのアクセス権限が必要で、ホストに保存されているsudoパスワードを使用して権限を昇格します。",
-        "shareFleet": "シェアフリート",
-        "shareFleetTitle": "「{{name}} を共有する」",
-        "shareFleetDescription": "このフリートの現在のメンバーホストを、選択したユーザーまたはロールと共有します。後からフリートに追加されたホストは自動的に共有されません。それらを含めるには、再度共有を実行してください。",
-        "shareSelectionRequired": "少なくとも1人のユーザーまたは役割を選択してください。",
-        "fleetSharedSuccessfully": "Shared {{shared}} of {{total}} host(s) in this fleet",
-        "failedToShareFleet": "車両共有に失敗しました",
-        "noMembersToShare": "この艦隊には、まだ共有できるメンバーホストがいません。"
-      }
-    }
-  },
-  "nav": {
-    "fleets": "艦隊"
-  },
-  "hosts": {
-    "docsLink": "ドキュメントを表示",
-    "sharing": {
-      "customHoursPlaceholder": "アクセス期限までの時間数",
-      "expiry": {
-        "never": "無期限",
-        "oneHour": "1時間",
-        "oneDay": "24時間",
-        "sevenDays": "7日間",
-        "thirtyDays": "30日間",
-        "custom": "カスタム"
-      },
-      "expiryLabel": "アクセス期限",
-      "levels": {
-        "connect": {
-          "label": "接続",
-          "description": "セッションのみ開く: ターミナル、リモートデスクトップ、ファイルマネージャー、トンネル、Docker。ホスト設定へのアクセスはありません。"
-        },
-        "view": {
-          "label": "表示",
-          "description": "接続に加え、ホスト設定を表示できます。シークレットは表示されません。"
-        },
-        "edit": {
-          "label": "編集",
-          "description": "認証不要のホスト設定を表示および変更できます。所有者のSSH認証情報は非公開で、所有者のみがアクセスできます。"
-        },
-        "manage": {
-          "label": "管理",
-          "description": "編集に加え、ホストを他者と共有し、権限レベルを変更、アクセスを取り消すことができます。"
-        }
-      },
-      "noMatches": "一致する結果がありません",
-      "permissionLevelLabel": "権限レベル",
-      "rolesTab": "ロール",
-      "searchPlaceholder": "ユーザーまたはロールを検索...",
-      "shareButton": "共有",
-      "shareWithCount": "共有 ({{count}})",
-      "usersTab": "ユーザー"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/ko_KR.json b/plugins/fleets/locales/translated/ko_KR.json
deleted file mode 100644
index 6e19ec6ca..000000000
--- a/plugins/fleets/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "함대 보기",
-      "description": "함대, 구성원 및 보유 자산을 확인하세요."
-    },
-    "manage": {
-      "title": "차량 관리",
-      "description": "함대를 생성, 편집 및 삭제하고, 구성원을 변경하고, 다른 사용자 또는 역할과 함대를 공유할 수 있습니다."
-    },
-    "execute": {
-      "title": "함대 작업 실행",
-      "description": "여러 호스트로 구성된 네트워크에서 명령을 실행하고 패키지 작업을 수행하며, 구성원 호스트 간에 파일을 전송합니다."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "함대",
-        "createFleet": "함대 생성",
-        "createFleetTitle": "함대 생성",
-        "editFleetTitle": "함대 편집",
-        "createFleetDescription": "함대는 여러 호스트를 하나의 그룹으로 묶어 작업을 수행할 수 있도록 명명된 그룹입니다.",
-        "nameLabel": "이름",
-        "namePlaceholder": "예: 웹 서버",
-        "nameRequired": "함대 이름은 필수 입력 사항입니다.",
-        "descriptionLabel": "설명",
-        "descriptionPlaceholder": "선택 사항 설명",
-        "colorLabel": "색상",
-        "tagRulesLabel": "태그 규칙",
-        "tagRulesPlaceholder": "프로드웹, 엣지",
-        "tagRulesHint": "이러한 태그 중 하나라도 있는 호스트는 수동으로 추가된 호스트 외에도 자동으로 포함됩니다.",
-        "fleetCreated": "함대 생성됨",
-        "fleetUpdated": "함대 업데이트됨",
-        "fleetDeleted": "함대 삭제됨",
-        "saveFailed": "함대를 구하는 데 실패했습니다",
-        "deleteFailed": "함대 삭제에 실패했습니다",
-        "loadFailed": "함대를 로드하는 데 실패했습니다.",
-        "deleteFleetTitle": "함대 삭제",
-        "deleteFleetDescription": "\"{{name}}\"을 삭제하시겠습니까? 삭제해도 멤버 호스트 자체는 삭제되지 않습니다.",
-        "searchFleets": "함대를 검색하세요...",
-        "noFleets": "아직 함대가 없습니다. 시작하려면 함대를 생성하세요.",
-        "memberCount": "{{count}} 호스트",
-        "memberCount_other": "호스트 {{count}}개",
-        "manageMembers": "회원 관리",
-        "manageMembersTitle": "함대 구성원 관리",
-        "manageMembersDescription": "호스트를 이 함대의 고정 멤버십에 추가하거나 제외할 수 있습니다. 태그 규칙에 따라 일치하는 호스트는 항상 포함됩니다.",
-        "searchHosts": "호스트 검색...",
-        "noHostsFound": "호스트를 찾을 수 없습니다",
-        "noMembers": "이 함대에는 아직 멤버가 없습니다. 호스트를 추가하거나 태그 규칙을 설정하세요.",
-        "membersLoadFailed": "함대 구성원을 불러오는 데 실패했습니다.",
-        "memberUpdateFailed": "함대 구성원 정보 업데이트에 실패했습니다.",
-        "tabRun": "명령 실행",
-        "tabTransfer": "파일 전송",
-        "tabInventory": "목록",
-        "openInventoryTab": "전체 화면에서 열기",
-        "tabPackages": "패키지",
-        "runOnFleet": "Fleet에서 실행",
-        "commandPlaceholder": "uptime && df -h",
-        "commandRequired": "명령어가 필요합니다",
-        "commandInputsLabel": "명령 입력",
-        "commandSucceeded": "모든 호스트에서 명령이 성공했습니다.",
-        "commandPartialFailure": "{{failed}} 의 {{total}} 호스트가 실패했습니다.",
-        "commandFailed": "명령 실행에 실패했습니다.",
-        "resultSuccess": "성공",
-        "resultFailed": "실패",
-        "push": "푸시",
-        "pull": "당기다",
-        "remotePathLabel": "원격 경로",
-        "remotePathRequired": "원격 경로가 필요합니다",
-        "fileLabel": "파일",
-        "fileRequired": "파일이 필요합니다",
-        "pushHint": "선택한 파일은 전체 호스트의 정확히 이 경로에 기록됩니다.",
-        "pullHint": "이 경로에 있는 파일은 모든 호스트에서 읽어와 호스트당 하나의 폴더로 구성된 단일 zip 파일로 다운로드됩니다.",
-        "transferComplete": "전송 완료",
-        "transferFailed": "전송 실패",
-        "refreshInventory": "재고 새로 고침",
-        "inventoryLoadFailed": "재고 불러오기에 실패했습니다",
-        "inventoryRefreshed": "재고가 갱신되었습니다",
-        "inventoryRefreshFailed": "재고 새로 고침에 실패했습니다.",
-        "inventoryNoData": "아직 재고 데이터가 없습니다. 새로 고침하여 데이터를 수집하세요.",
-        "inventoryHost": "호스트",
-        "inventoryCollectedCount": "{{count}}/{{total}} 수집됨",
-        "inventoryOs": "OS",
-        "inventoryKernel": "커널",
-        "inventoryArch": "아치",
-        "inventoryUptime": "업타임",
-        "inventoryPackageManager": "패키지 관리자",
-        "inventoryCollectedAt": "모은",
-        "packageActionLabel": "작업",
-        "packageInstall": "설치하다",
-        "packageRemove": "제거",
-        "packageUpgradeAll": "모든 패키지 업그레이드",
-        "packageNameLabel": "패키지 이름",
-        "packageNameRequired": "패키지 이름은 필수 입력 사항입니다.",
-        "packageHint": "호스트별 관리자 권한 접근이 필요하며, 호스트에 저장된 sudo 암호를 사용하여 권한을 상승시킵니다.",
-        "shareFleet": "공유 차량",
-        "shareFleetTitle": "\"{{name}} \" 공유",
-        "shareFleetDescription": "선택한 사용자 또는 역할과 이 플릿의 현재 멤버 호스트를 공유합니다. 나중에 플릿에 추가된 호스트는 자동으로 공유되지 않습니다. 포함시키려면 다시 공유해야 합니다.",
-        "shareSelectionRequired": "사용자 또는 역할을 하나 이상 선택하세요.",
-        "fleetSharedSuccessfully": "이 함대에서 {{shared}} 개의 {{total}} 호스트가 공유됩니다.",
-        "failedToShareFleet": "함대 공유에 실패했습니다",
-        "noMembersToShare": "이 함대에는 아직 공유할 호스트 회원이 없습니다."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "함대"
-  },
-  "hosts": {
-    "docsLink": "문서 보기",
-    "sharing": {
-      "customHoursPlaceholder": "액세스 만료까지 시간",
-      "expiry": {
-        "never": "안 함",
-        "oneHour": "1시간",
-        "oneDay": "24시간",
-        "sevenDays": "7일",
-        "thirtyDays": "30일",
-        "custom": "사용자 지정"
-      },
-      "expiryLabel": "액세스 만료",
-      "levels": {
-        "connect": {
-          "label": "연결",
-          "description": "세션 열기만: 터미널, 원격 데스크톱, 파일 관리자, 터널 및 Docker. 호스트 구성에 액세스할 수 없습니다."
-        },
-        "view": {
-          "label": "보기",
-          "description": "연결 및 호스트 구성 보기. 비밀 정보는 표시되지 않습니다."
-        },
-        "edit": {
-          "label": "편집",
-          "description": "인증이 필요하지 않은 호스트 설정을 보고 수정할 수 있습니다. 소유자의 SSH 인증 정보는 비공개로 유지되며 소유자만 접근할 수 있습니다."
-        },
-        "manage": {
-          "label": "관리",
-          "description": "편집, 호스트 공유, 권한 수준 변경, 액세스 해지."
-        }
-      },
-      "noMatches": "일치하는 항목이 없습니다.",
-      "permissionLevelLabel": "권한 수준",
-      "rolesTab": "역할",
-      "searchPlaceholder": "사용자 또는 역할 검색...",
-      "shareButton": "공유",
-      "shareWithCount": "공유 ({{count}})",
-      "usersTab": "사용자"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/nl_NL.json b/plugins/fleets/locales/translated/nl_NL.json
deleted file mode 100644
index 072d96434..000000000
--- a/plugins/fleets/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Bekijk vloten",
-      "description": "Bekijk de vloten, hun leden en inventaris."
-    },
-    "manage": {
-      "title": "Vlootbeheer",
-      "description": "Vloten aanmaken, bewerken en verwijderen, het lidmaatschap wijzigen en vloten delen met andere gebruikers of rollen."
-    },
-    "execute": {
-      "title": "Voer vlootacties uit",
-      "description": "Voer opdrachten en pakketacties uit op een hele vloot en breng bestanden over van en naar de hosts die lid zijn van de vloot."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Vloten",
-        "createFleet": "Vloot creëren",
-        "createFleetTitle": "Vloot creëren",
-        "editFleetTitle": "Vloot bewerken",
-        "createFleetDescription": "Een vloot is een benoemde groep hosts waartegen je als eenheid acties kunt uitvoeren.",
-        "nameLabel": "Naam",
-        "namePlaceholder": "bijvoorbeeld webservers",
-        "nameRequired": "Vlootnaam is verplicht",
-        "descriptionLabel": "Beschrijving",
-        "descriptionPlaceholder": "Optionele beschrijving",
-        "colorLabel": "Kleur",
-        "tagRulesLabel": "Tagregels",
-        "tagRulesPlaceholder": "prod-web, edge",
-        "tagRulesHint": "Hosts met een van deze tags worden automatisch opgenomen, naast hosts die handmatig zijn toegevoegd.",
-        "fleetCreated": "Vloot gecreëerd",
-        "fleetUpdated": "Vloot bijgewerkt",
-        "fleetDeleted": "Vloot verwijderd",
-        "saveFailed": "Vloot kon niet worden gered",
-        "deleteFailed": "Het verwijderen van de vloot is mislukt.",
-        "loadFailed": "Het laden van de vloot is mislukt.",
-        "deleteFleetTitle": "Vloot verwijderen",
-        "deleteFleetDescription": "Weet je zeker dat je \"{{name}}\" wilt verwijderen? Hiermee worden de lidhosts zelf niet verwijderd.",
-        "searchFleets": "Zoekvloten...",
-        "noFleets": "Nog geen vloten. Maak er een aan om te beginnen.",
-        "memberCount": "{{count}} host",
-        "memberCount_other": "{{count}} hosts",
-        "manageMembers": "Leden beheren",
-        "manageMembersTitle": "Vlootleden beheren",
-        "manageMembersDescription": "Voeg hosts toe aan of verwijder ze uit het statische lidmaatschap van deze vloot. Hosts die overeenkomen met tagregels zijn altijd inbegrepen.",
-        "searchHosts": "Hosts zoeken...",
-        "noHostsFound": "Geen hosts gevonden",
-        "noMembers": "Deze vloot heeft nog geen leden. Voeg hosts toe of stel een tagregel in.",
-        "membersLoadFailed": "Het laden van de vlootleden is mislukt.",
-        "memberUpdateFailed": "Het bijwerken van het vlootlidmaatschap is mislukt.",
-        "tabRun": "Voer het commando uit",
-        "tabTransfer": "Bestanden overdragen",
-        "tabInventory": "Inventaris",
-        "openInventoryTab": "Openen in een volledig tabblad",
-        "tabPackages": "Pakketten",
-        "runOnFleet": "Run on Fleet",
-        "commandPlaceholder": "uptime && df -h",
-        "commandRequired": "Een opdracht is vereist.",
-        "commandInputsLabel": "Commando-invoer",
-        "commandSucceeded": "De opdracht is op alle hosts succesvol uitgevoerd.",
-        "commandPartialFailure": "{{failed}} van {{total}} hosts mislukt",
-        "commandFailed": "Het uitvoeren van de opdracht is mislukt.",
-        "resultSuccess": "Succes",
-        "resultFailed": "Mislukt",
-        "push": "Duw",
-        "pull": "Trekken",
-        "remotePathLabel": "Externe route",
-        "remotePathRequired": "Een externe verbinding is vereist.",
-        "fileLabel": "Bestand",
-        "fileRequired": "Een bestand is vereist.",
-        "pushHint": "Het geselecteerde bestand wordt op elke host in de vloot naar precies dit pad geschreven.",
-        "pullHint": "Het bestand op dit pad wordt van elke host gelezen en gedownload als één zipbestand, één map per host.",
-        "transferComplete": "Overdracht voltooid",
-        "transferFailed": "Overdracht mislukt",
-        "refreshInventory": "Voorraad vernieuwen",
-        "inventoryLoadFailed": "Het laden van de inventaris is mislukt.",
-        "inventoryRefreshed": "Voorraad bijgewerkt",
-        "inventoryRefreshFailed": "Het vernieuwen van de inventaris is mislukt.",
-        "inventoryNoData": "Er zijn nog geen voorraadgegevens beschikbaar - vernieuw de pagina om ze te verzamelen.",
-        "inventoryHost": "Gastheer",
-        "inventoryCollectedCount": "{{count}}/{{total}} verzameld",
-        "inventoryOs": "OS",
-        "inventoryKernel": "Kernel",
-        "inventoryArch": "Boog",
-        "inventoryUptime": "Beschikbaarheid",
-        "inventoryPackageManager": "Pakketbeheerder",
-        "inventoryCollectedAt": "Verzameld",
-        "packageActionLabel": "Actie",
-        "packageInstall": "Installeren",
-        "packageRemove": "Verwijderen",
-        "packageUpgradeAll": "Upgrade alle pakketten",
-        "packageNameLabel": "Pakketnaam",
-        "packageNameRequired": "Een pakketnaam is vereist.",
-        "packageHint": "Vereist beheerrechten per host en verhoogt deze rechten met behulp van het opgeslagen sudo-wachtwoord van de host.",
-        "shareFleet": "Deel vloot",
-        "shareFleetTitle": "Delen \"{{name}}\"",
-        "shareFleetDescription": "Deelt de huidige hosts van deze vloot met de geselecteerde gebruikers of rollen. Hosts die later aan de vloot worden toegevoegd, worden niet automatisch gedeeld; deel ze opnieuw om ze toe te voegen.",
-        "shareSelectionRequired": "Selecteer ten minste één gebruiker of rol.",
-        "fleetSharedSuccessfully": "Gedeelde {{shared}} van {{total}} host(s) in deze vloot",
-        "failedToShareFleet": "Het delen van de vloot is mislukt.",
-        "noMembersToShare": "Deze vloot heeft nog geen leden die de diensten van andere beheerders kunnen aanbieden."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Vloten"
-  },
-  "hosts": {
-    "docsLink": "Documenten bekijken",
-    "sharing": {
-      "customHoursPlaceholder": "Aantal uren tot de toegang verloopt",
-      "expiry": {
-        "never": "Nooit",
-        "oneHour": "1 uur",
-        "oneDay": "24 uur",
-        "sevenDays": "7 dagen",
-        "thirtyDays": "30 dagen",
-        "custom": "Aangepast"
-      },
-      "expiryLabel": "Toegang verloopt",
-      "levels": {
-        "connect": {
-          "label": "Verbinden",
-          "description": "Alleen open sessies: terminal, extern bureaublad, bestandsbeheer, tunnels en Docker. Geen toegang tot de hostconfiguratie."
-        },
-        "view": {
-          "label": "Weergave",
-          "description": "Maak verbinding en bekijk de hostconfiguratie. Geheime gegevens worden nooit weergegeven."
-        },
-        "edit": {
-          "label": "Bewerking",
-          "description": "Bekijk en wijzig de instellingen van de host die geen authenticatie vereist. De SSH-authenticatie van de eigenaar blijft privé en alleen toegankelijk voor de eigenaar."
-        },
-        "manage": {
-          "label": "Beheren",
-          "description": "Bewerken, de host delen met anderen, toegangsrechten wijzigen en toegang intrekken."
-        }
-      },
-      "noMatches": "Geen overeenkomsten gevonden",
-      "permissionLevelLabel": "Toegangsniveau",
-      "rolesTab": "Rollen",
-      "searchPlaceholder": "Gebruikers of rollen zoeken...",
-      "shareButton": "Deel",
-      "shareWithCount": "Delen ({{count}})",
-      "usersTab": "Gebruikers"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/no_NO.json b/plugins/fleets/locales/translated/no_NO.json
deleted file mode 100644
index def3cc808..000000000
--- a/plugins/fleets/locales/translated/no_NO.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Se flåter",
-      "description": "Se flåter, deres medlemmer og inventar."
-    },
-    "manage": {
-      "title": "Administrer flåter",
-      "description": "Opprett, rediger og slett flåter, endre medlemskap og del flåter med andre brukere eller roller."
-    },
-    "execute": {
-      "title": "Kjør flåtehandlinger",
-      "description": "Kjør kommandoer og pakkehandlinger på tvers av en flåte, og overfør filer til og fra medlemsvertene."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Flåter",
-        "createFleet": "Opprett flåte",
-        "createFleetTitle": "Opprett flåte",
-        "editFleetTitle": "Rediger flåte",
-        "createFleetDescription": "En flåte er en navngitt gruppe verter du kan kjøre handlinger mot som en enhet.",
-        "nameLabel": "Navn",
-        "namePlaceholder": "f.eks. webservere",
-        "nameRequired": "Flåtenavn er obligatorisk",
-        "descriptionLabel": "Beskrivelse",
-        "descriptionPlaceholder": "Valgfri beskrivelse",
-        "colorLabel": "Farge",
-        "tagRulesLabel": "Taggregler",
-        "tagRulesPlaceholder": "prod-web, kant",
-        "tagRulesHint": "Verter med noen av disse taggene inkluderes automatisk, i tillegg til verter som legges til manuelt.",
-        "fleetCreated": "Flåte opprettet",
-        "fleetUpdated": "Flåten er oppdatert",
-        "fleetDeleted": "Flåten er slettet",
-        "saveFailed": "Kunne ikke lagre flåten",
-        "deleteFailed": "Kunne ikke slette flåten",
-        "loadFailed": "Kunne ikke laste inn flåter",
-        "deleteFleetTitle": "Slett flåte",
-        "deleteFleetDescription": "Er du sikker på at du vil slette «{{name}}»? Dette sletter ikke selve medlemsvertene.",
-        "searchFleets": "Søk etter flåter...",
-        "noFleets": "Ingen flåter ennå. Opprett en for å komme i gang.",
-        "memberCount": "{{count}} vert",
-        "memberCount_other": "{{count}} verter",
-        "manageMembers": "Administrer medlemmer",
-        "manageMembersTitle": "Administrer flåtemedlemmer",
-        "manageMembersDescription": "Veksle verter inn eller ut av denne flåtens statiske medlemskap. Verter som samsvarer med tagregler er alltid inkludert.",
-        "searchHosts": "Søk etter verter...",
-        "noHostsFound": "Ingen verter funnet",
-        "noMembers": "Denne flåten har ingen medlemmer ennå. Legg til verter eller angi en tagregel.",
-        "membersLoadFailed": "Kunne ikke laste inn flåtemedlemmer",
-        "memberUpdateFailed": "Kunne ikke oppdatere flåtemedlemskapet",
-        "tabRun": "Kjør kommando",
-        "tabTransfer": "Overfør filer",
-        "tabInventory": "Inventar",
-        "openInventoryTab": "Åpne i full fane",
-        "tabPackages": "Pakker",
-        "runOnFleet": "Kjør på flåten",
-        "commandPlaceholder": "oppetid og df -h",
-        "commandRequired": "En kommando er nødvendig",
-        "commandInputsLabel": "Kommandoinnganger",
-        "commandSucceeded": "Kommandoen lyktes på alle verter",
-        "commandPartialFailure": "{{failed}} av {{total}} verter mislyktes",
-        "commandFailed": "Kunne ikke kjøre kommandoen",
-        "resultSuccess": "Suksess",
-        "resultFailed": "Mislyktes",
-        "push": "Trykk",
-        "pull": "Dra",
-        "remotePathLabel": "Fjernbane",
-        "remotePathRequired": "En ekstern sti er nødvendig",
-        "fileLabel": "Fil",
-        "fileRequired": "En fil er nødvendig",
-        "pushHint": "Den valgte filen skrives til denne nøyaktige banen på alle verter i flåten.",
-        "pullHint": "Filen på denne banen leses fra hver vert og lastes ned som en enkelt zip-fil, én mappe per vert.",
-        "transferComplete": "Overføringen er fullført",
-        "transferFailed": "Overføringen mislyktes",
-        "refreshInventory": "Oppdater beholdningen",
-        "inventoryLoadFailed": "Kunne ikke laste inn beholdningen",
-        "inventoryRefreshed": "Lagerbeholdningen er oppdatert",
-        "inventoryRefreshFailed": "Kunne ikke oppdatere beholdningen",
-        "inventoryNoData": "Ingen lagerdata ennå – oppdater for å samle dem inn.",
-        "inventoryHost": "Vert",
-        "inventoryCollectedCount": "{{count}}/{{total}} samlet",
-        "inventoryOs": "OS",
-        "inventoryKernel": "Kjerne",
-        "inventoryArch": "Buen",
-        "inventoryUptime": "Oppetid",
-        "inventoryPackageManager": "Pakkebehandler",
-        "inventoryCollectedAt": "Samlet",
-        "packageActionLabel": "Handling",
-        "packageInstall": "Installer",
-        "packageRemove": "Fjern",
-        "packageUpgradeAll": "Oppgrader alle pakker",
-        "packageNameLabel": "Pakkenavn",
-        "packageNameRequired": "Et pakkenavn er obligatorisk",
-        "packageHint": "Krever tilgang på administratornivå per vert og heves ved hjelp av vertens lagrede sudo-passord.",
-        "shareFleet": "Del flåte",
-        "shareFleetTitle": "Del «{{name}}»",
-        "shareFleetDescription": "Deler denne flåtens nåværende medlemsverter med de valgte brukerne eller rollene. Verter som legges til flåten senere deles ikke automatisk – del på nytt for å inkludere dem.",
-        "shareSelectionRequired": "Velg minst én bruker eller rolle",
-        "fleetSharedSuccessfully": "Delt {{shared}} av {{total}} vert(er) i denne flåten",
-        "failedToShareFleet": "Kunne ikke dele flåten",
-        "noMembersToShare": "Denne flåten har ingen medlemsverter å dele ennå."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Flåter"
-  },
-  "hosts": {
-    "docsLink": "Vis dokumenter",
-    "sharing": {
-      "customHoursPlaceholder": "Timer til tilgangen utløper",
-      "expiry": {
-        "never": "Aldri",
-        "oneHour": "1 time",
-        "oneDay": "24 timer",
-        "sevenDays": "7 dager",
-        "thirtyDays": "30 dager",
-        "custom": "Skikk"
-      },
-      "expiryLabel": "Utløpsdato for tilgang",
-      "levels": {
-        "connect": {
-          "label": "Koble til",
-          "description": "Kun åpne økter: terminal, eksternt skrivebord, filbehandler, tunneler og Docker. Ingen tilgang til vertskonfigurasjonen."
-        },
-        "view": {
-          "label": "Utsikt",
-          "description": "Koble til, pluss se vertskonfigurasjonen. Hemmeligheter vises aldri."
-        },
-        "edit": {
-          "label": "Rediger",
-          "description": "Vis og endre innstillinger for verter uten autentisering. Eierens SSH-autentisering forblir privat og kun for eieren."
-        },
-        "manage": {
-          "label": "Administrer",
-          "description": "Rediger, pluss del verten med andre, endre tillatelsesnivåer og tilbakekall tilgang."
-        }
-      },
-      "noMatches": "Ingen treff funnet",
-      "permissionLevelLabel": "Tillatelsesnivå",
-      "rolesTab": "Roller",
-      "searchPlaceholder": "Søk etter brukere eller roller...",
-      "shareButton": "Dele",
-      "shareWithCount": "Del ({{count}})",
-      "usersTab": "Brukere"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/pl_PL.json b/plugins/fleets/locales/translated/pl_PL.json
deleted file mode 100644
index 41f2d3606..000000000
--- a/plugins/fleets/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Wyświetl floty",
-      "description": "Zobacz floty, ich członków i zapasy."
-    },
-    "manage": {
-      "title": "Zarządzaj flotami",
-      "description": "Twórz, edytuj i usuwaj floty, zmieniaj członkostwo i udostępniaj floty innym użytkownikom lub rolom."
-    },
-    "execute": {
-      "title": "Wykonaj akcje floty",
-      "description": "Uruchamiaj polecenia i pakiety działań w obrębie floty oraz przesyłaj pliki do i z jej hostów członkowskich."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Floty",
-        "createFleet": "Utwórz flotę",
-        "createFleetTitle": "Utwórz flotę",
-        "editFleetTitle": "Edytuj flotę",
-        "createFleetDescription": "Flota to nazwana grupa hostów, na której możesz wykonywać akcje jak na jednym obiekcie.",
-        "nameLabel": "Nazwa",
-        "namePlaceholder": "np. Serwery WWW",
-        "nameRequired": "Nazwa floty jest wymagana",
-        "descriptionLabel": "Opis",
-        "descriptionPlaceholder": "Opis opcjonalny",
-        "colorLabel": "Kolor",
-        "tagRulesLabel": "Reguły tagów",
-        "tagRulesPlaceholder": "prod-web, edge",
-        "tagRulesHint": "Hosty z dowolnym z tych tagów są dołączane automatycznie, obok hostów dodanych ręcznie.",
-        "fleetCreated": "Utworzono flotę",
-        "fleetUpdated": "Zaktualizowano flotę",
-        "fleetDeleted": "Usunięto flotę",
-        "saveFailed": "Nie udało się zapisać floty",
-        "deleteFailed": "Nie udało się usunąć floty",
-        "loadFailed": "Nie udało się załadować flot",
-        "deleteFleetTitle": "Usuń flotę",
-        "deleteFleetDescription": "Czy na pewno chcesz usunąć „{{name}}”? Nie spowoduje to usunięcia samych hostów należących do floty.",
-        "searchFleets": "Przeszukaj floty...",
-        "noFleets": "Brak flot. Utwórz pierwszą, aby zacząć.",
-        "memberCount": "{{count}} host",
-        "memberCount_other": "{{count}} hostów",
-        "manageMembers": "Zarządzaj członkami",
-        "manageMembersTitle": "Zarządzaj członkami floty",
-        "manageMembersDescription": "Przełączaj hosty do lub z członkostwa statycznego tej floty. Hosty dopasowane według reguł tagów są zawsze uwzględniane.",
-        "searchHosts": "Wyszukaj hosty...",
-        "noHostsFound": "Nie znaleziono żadnych hostów",
-        "noMembers": "Ta flota nie ma jeszcze członków. Dodaj hosty lub ustaw regułę tagów.",
-        "membersLoadFailed": "Nie udało się załadować członków floty",
-        "memberUpdateFailed": "Nie udało się zaktualizować członkostwa we flocie",
-        "tabRun": "Uruchom polecenie",
-        "tabTransfer": "Przesyłanie plików",
-        "tabInventory": "Inwentarz",
-        "openInventoryTab": "Otwórz w pełnej karcie",
-        "tabPackages": "Pakiety",
-        "runOnFleet": "Uruchom na flocie",
-        "commandPlaceholder": "uptime && df -h",
-        "commandRequired": "Wymagane jest polecenie",
-        "commandInputsLabel": "Dane wejściowe polecenia",
-        "commandSucceeded": "Polecenie powiodło się na wszystkich hostach",
-        "commandPartialFailure": "Na {{failed}} z {{total}} hostów wystąpił błąd",
-        "commandFailed": "Nie udało się uruchomić polecenia",
-        "resultSuccess": "Powodzenie",
-        "resultFailed": "Niepowodzenie",
-        "push": "Wyślij",
-        "pull": "Pobierz",
-        "remotePathLabel": "Ścieżka zdalna",
-        "remotePathRequired": "Wymagana jest ścieżka zdalna",
-        "fileLabel": "Plik",
-        "fileRequired": "Wymagany jest plik",
-        "pushHint": "Wybrany plik zostanie zapisany dokładnie pod tą ścieżką na każdym hoście we flocie.",
-        "pullHint": "Plik znajdujący się pod tą ścieżką jest odczytywany z każdego hosta i pobierany jako pojedynczy plik zip, jeden folder na hosta.",
-        "transferComplete": "Transfer zakończony",
-        "transferFailed": "Transfer nie powiódł się",
-        "refreshInventory": "Odśwież inwentarz",
-        "inventoryLoadFailed": "Nie udało się załadować inwentarza",
-        "inventoryRefreshed": "Odświeżono inwentarz",
-        "inventoryRefreshFailed": "Nie udało się odświeżyć inwentarza",
-        "inventoryNoData": "Brak danych inwentarza. Odśwież, aby je zebrać.",
-        "inventoryHost": "Host",
-        "inventoryCollectedCount": "{{count}}/{{total}} zebrano",
-        "inventoryOs": "System operacyjny",
-        "inventoryKernel": "Jądro",
-        "inventoryArch": "Architektura",
-        "inventoryUptime": "Czas działania",
-        "inventoryPackageManager": "Menedżer pakietów",
-        "inventoryCollectedAt": "Zebrano",
-        "packageActionLabel": "Akcja",
-        "packageInstall": "Zainstaluj",
-        "packageRemove": "Usuń",
-        "packageUpgradeAll": "Uaktualnij wszystkie pakiety",
-        "packageNameLabel": "Nazwa pakietu",
-        "packageNameRequired": "Wymagana jest nazwa pakietu",
-        "packageHint": "Wymaga dostępu na poziomie zarządzania na każdym hoście i podnosi uprawnienia zapisanym hasłem sudo hosta.",
-        "shareFleet": "Udostępnij flotę",
-        "shareFleetTitle": "Udostępnij „{{name}}”",
-        "shareFleetDescription": "Udostępnia aktualnych gospodarzy należących do tej floty wybranym użytkownikom lub rolom. Gospodarze dodani do floty później nie są udostępniani automatycznie — udostępnij ponownie, aby ich uwzględnić.",
-        "shareSelectionRequired": "Wybierz co najmniej jednego użytkownika lub rolę",
-        "fleetSharedSuccessfully": "Udostępniono {{shared}} z {{total}} hostów w tej flocie",
-        "failedToShareFleet": "Nie udało się udostępnić floty",
-        "noMembersToShare": "Ta flota nie ma jeszcze żadnych członków-gospodarzy, którymi można by się podzielić."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Floty"
-  },
-  "hosts": {
-    "docsLink": "Zobacz dokumentację",
-    "sharing": {
-      "customHoursPlaceholder": "Godziny do wygaśnięcia dostępu",
-      "expiry": {
-        "never": "Nigdy",
-        "oneHour": "1 godzina",
-        "oneDay": "24 godziny",
-        "sevenDays": "7 dni",
-        "thirtyDays": "30 dni",
-        "custom": "Niestandardowy"
-      },
-      "expiryLabel": "Wygaśnięcie dostępu",
-      "levels": {
-        "connect": {
-          "label": "Połączenie",
-          "description": "Tylko otwieranie sesji: terminal, pulpit zdalny, menedżer plików, tunele i Docker. Bez dostępu do konfiguracji hosta."
-        },
-        "view": {
-          "label": "Podgląd",
-          "description": "Jak Połączenie, plus podgląd konfiguracji hosta. Sekrety nigdy nie są pokazywane."
-        },
-        "edit": {
-          "label": "Edycja",
-          "description": "Jak Podgląd, plus zmiana ustawień hosta niezwiązanych z uwierzytelnianiem. Uwierzytelnianie SSH właściciela pozostaje prywatne i dostępne tylko dla niego."
-        },
-        "manage": {
-          "label": "Zarządzanie",
-          "description": "Jak Edycja, plus udostępnianie hosta innym, zmiana poziomów uprawnień i unieważnianie dostępu."
-        }
-      },
-      "noMatches": "Nie znaleziono wyników",
-      "permissionLevelLabel": "Poziom uprawnień",
-      "rolesTab": "Role",
-      "searchPlaceholder": "Wyszukaj użytkowników lub role...",
-      "shareButton": "Udostępnij",
-      "shareWithCount": "Udostępnij ({{count}})",
-      "usersTab": "Użytkownicy"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/pt_BR.json b/plugins/fleets/locales/translated/pt_BR.json
deleted file mode 100644
index 4252696f7..000000000
--- a/plugins/fleets/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Ver frotas",
-      "description": "Veja as frotas, seus membros e inventário."
-    },
-    "manage": {
-      "title": "Gerenciar frotas",
-      "description": "Crie, edite e exclua frotas, altere a composição da frota e compartilhe frotas com outros usuários ou funções."
-    },
-    "execute": {
-      "title": "Realizar operações de frota",
-      "description": "Execute comandos e ações de pacotes em toda a frota e transfira arquivos de e para seus hosts membros."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Frotas",
-        "createFleet": "Criar Frota",
-        "createFleetTitle": "Criar Frota",
-        "editFleetTitle": "Editar frota",
-        "createFleetDescription": "Uma frota é um grupo nomeado de hosts contra os quais você pode executar ações como uma unidade.",
-        "nameLabel": "Nome",
-        "namePlaceholder": "Por exemplo, servidores web",
-        "nameRequired": "É necessário nomear a frota.",
-        "descriptionLabel": "Descrição",
-        "descriptionPlaceholder": "Descrição opcional",
-        "colorLabel": "Cor",
-        "tagRulesLabel": "Regras de etiqueta",
-        "tagRulesPlaceholder": "prod-web, edge",
-        "tagRulesHint": "Os hosts com qualquer uma dessas tags são incluídos automaticamente, além dos hosts adicionados manualmente.",
-        "fleetCreated": "Frota criada",
-        "fleetUpdated": "Frota atualizada",
-        "fleetDeleted": "Frota excluída",
-        "saveFailed": "Não conseguiram salvar a frota.",
-        "deleteFailed": "Falha ao excluir a frota",
-        "loadFailed": "Falha ao carregar as frotas",
-        "deleteFleetTitle": "Excluir frota",
-        "deleteFleetDescription": "Tem certeza de que deseja excluir \"{{name}}\"? Isso não exclui os próprios hosts membros.",
-        "searchFleets": "Pesquisar frotas...",
-        "noFleets": "Ainda não há frotas. Crie uma para começar.",
-        "memberCount": "{{count}} anfitrião",
-        "memberCount_other": "{{count}} anfitriões",
-        "manageMembers": "Gerenciar membros",
-        "manageMembersTitle": "Gerenciar membros da frota",
-        "manageMembersDescription": "Ative ou desative a inclusão de hosts nesta frota estática. Os hosts que corresponderem às regras de tags serão sempre incluídos.",
-        "searchHosts": "Pesquisar hosts...",
-        "noHostsFound": "Nenhum host encontrado",
-        "noMembers": "Esta frota ainda não tem membros. Adicione anfitriões ou defina uma regra de etiqueta.",
-        "membersLoadFailed": "Falha ao carregar membros da frota",
-        "memberUpdateFailed": "Falha na atualização da associação à frota",
-        "tabRun": "Executar comando",
-        "tabTransfer": "Transferir arquivos",
-        "tabInventory": "Inventário",
-        "openInventoryTab": "Abrir em aba inteira",
-        "tabPackages": "Pacotes",
-        "runOnFleet": "Executar na frota",
-        "commandPlaceholder": "tempo de atividade e df -h",
-        "commandRequired": "É necessário um comando.",
-        "commandInputsLabel": "Entradas de comando",
-        "commandSucceeded": "O comando foi executado com sucesso em todos os hosts.",
-        "commandPartialFailure": "{{failed}} de {{total}} hosts falharam",
-        "commandFailed": "Falha ao executar o comando",
-        "resultSuccess": "Sucesso",
-        "resultFailed": "Fracassado",
-        "push": "Empurrar",
-        "pull": "Puxar",
-        "remotePathLabel": "Caminho remoto",
-        "remotePathRequired": "É necessário um caminho remoto.",
-        "fileLabel": "Arquivo",
-        "fileRequired": "É necessário um arquivo.",
-        "pushHint": "O arquivo selecionado é gravado exatamente nesse caminho em todos os hosts da frota.",
-        "pullHint": "O arquivo neste caminho é lido de cada host e baixado como um único arquivo zip, uma pasta por host.",
-        "transferComplete": "Transferência concluída",
-        "transferFailed": "A transferência falhou",
-        "refreshInventory": "Atualizar inventário",
-        "inventoryLoadFailed": "Falha ao carregar o inventário",
-        "inventoryRefreshed": "Inventário atualizado",
-        "inventoryRefreshFailed": "Falha ao atualizar o inventário",
-        "inventoryNoData": "Ainda não há dados de estoque - atualize a página para coletá-los.",
-        "inventoryHost": "Hospedar",
-        "inventoryCollectedCount": "{{count}}/{{total}} coletado",
-        "inventoryOs": "SO",
-        "inventoryKernel": "Kernel",
-        "inventoryArch": "Arco",
-        "inventoryUptime": "Tempo de atividade",
-        "inventoryPackageManager": "Gerenciador de pacotes",
-        "inventoryCollectedAt": "Coletado",
-        "packageActionLabel": "Ação",
-        "packageInstall": "Instalar",
-        "packageRemove": "Remover",
-        "packageUpgradeAll": "Atualize todos os pacotes",
-        "packageNameLabel": "Nome do pacote",
-        "packageNameRequired": "É necessário informar o nome do pacote.",
-        "packageHint": "Requer acesso de nível de gerenciamento por host e eleva os privilégios usando a senha sudo armazenada no host.",
-        "shareFleet": "Frota compartilhada",
-        "shareFleetTitle": "Compartilhar \"{{name}}\"",
-        "shareFleetDescription": "Compartilha os hosts membros atuais desta frota com os usuários ou funções selecionados. Hosts adicionados à frota posteriormente não são compartilhados automaticamente — compartilhe novamente para incluí-los.",
-        "shareSelectionRequired": "Selecione pelo menos um usuário ou função.",
-        "fleetSharedSuccessfully": "Compartilhado de {{shared}} de {{total}} hosts nesta frota",
-        "failedToShareFleet": "Não foi possível compartilhar a frota.",
-        "noMembersToShare": "Esta frota ainda não possui anfitriões membros para compartilhar."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Frotas"
-  },
-  "hosts": {
-    "docsLink": "Documentação",
-    "sharing": {
-      "customHoursPlaceholder": "Horas restantes até o acesso expirar",
-      "expiry": {
-        "never": "Nunca",
-        "oneHour": "1 hora",
-        "oneDay": "24 horas",
-        "sevenDays": "7 dias",
-        "thirtyDays": "30 dias",
-        "custom": "Personalizado"
-      },
-      "expiryLabel": "Expiração do acesso",
-      "levels": {
-        "connect": {
-          "label": "Conectar",
-          "description": "Somente sessões abertas: terminal, área de trabalho remota, gerenciador de arquivos, túneis e Docker. Sem acesso à configuração do host."
-        },
-        "view": {
-          "label": "Visualizar",
-          "description": "Conecte-se e veja a configuração do host. Os segredos nunca são exibidos."
-        },
-        "edit": {
-          "label": "Editar",
-          "description": "Visualize e modifique as configurações do host que não exigem autenticação. A autenticação SSH do proprietário permanece privada e restrita ao proprietário."
-        },
-        "manage": {
-          "label": "Gerenciar",
-          "description": "Edite, compartilhe o host com outras pessoas, altere os níveis de permissão e revogue o acesso."
-        }
-      },
-      "noMatches": "Nenhuma correspondência encontrada",
-      "permissionLevelLabel": "Nível de permissão",
-      "rolesTab": "Funções",
-      "searchPlaceholder": "Pesquisar usuários ou funções...",
-      "shareButton": "Compartilhar",
-      "shareWithCount": "Compartilhar ({{count}})",
-      "usersTab": "Usuários"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/pt_PT.json b/plugins/fleets/locales/translated/pt_PT.json
deleted file mode 100644
index c138323fb..000000000
--- a/plugins/fleets/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Ver frotas",
-      "description": "Veja as frotas, os seus membros e inventário."
-    },
-    "manage": {
-      "title": "Gerir frotas",
-      "description": "Crie, edite e exclua frotas, altere a composição da frota e partilhe frotas com outros utilizadores ou funções."
-    },
-    "execute": {
-      "title": "Realizar operações de frota",
-      "description": "Execute comandos e ações de pacotes em toda a frota e transfira ficheiros de e para os seus hosts membros."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Frotas",
-        "createFleet": "Criar Frota",
-        "createFleetTitle": "Criar Frota",
-        "editFleetTitle": "Editar frota",
-        "createFleetDescription": "Uma frota é um grupo nomeado de hosts contra os quais pode executar ações como uma unidade.",
-        "nameLabel": "Nome",
-        "namePlaceholder": "Por exemplo, os servidores web",
-        "nameRequired": "É necessário dar um nome à frota.",
-        "descriptionLabel": "Descrição",
-        "descriptionPlaceholder": "Descrição opcional",
-        "colorLabel": "Cor",
-        "tagRulesLabel": "Regras de etiqueta",
-        "tagRulesPlaceholder": "prod-web, edge",
-        "tagRulesHint": "Os hosts com qualquer uma destas etiquetas são incluídos automaticamente, para além dos hosts adicionados manualmente.",
-        "fleetCreated": "Frota criada",
-        "fleetUpdated": "Frota atualizada",
-        "fleetDeleted": "Frota excluída",
-        "saveFailed": "Não conseguiram salvar a frota.",
-        "deleteFailed": "Falha ao eliminar a frota",
-        "loadFailed": "Falha ao carregar as frotas",
-        "deleteFleetTitle": "Excluir frota",
-        "deleteFleetDescription": "Tem a certeza que pretende eliminar \"{{name}}\"? Isto não exclui os próprios hosts membros.",
-        "searchFleets": "Pesquisar frotas...",
-        "noFleets": "Ainda não há frotas. Crie uma para começar.",
-        "memberCount": "{{count}} anfitrião",
-        "memberCount_other": "{{count}} máquinas",
-        "manageMembers": "Gerir membros",
-        "manageMembersTitle": "Gerir membros da frota",
-        "manageMembersDescription": "Ative ou desative a inclusão de hosts nesta frota estática. Os hosts que corresponderem às regras das tags serão sempre incluídos.",
-        "searchHosts": "Pesquisar hosts...",
-        "noHostsFound": "Nenhum host encontrado",
-        "noMembers": "Esta frota ainda não tem membros. Adicione anfitriões ou defina uma regra de etiqueta.",
-        "membersLoadFailed": "Falha ao carregar membros da frota",
-        "memberUpdateFailed": "Falha na atualização da adesão à frota",
-        "tabRun": "Executar comando",
-        "tabTransfer": "Transferir ficheiros",
-        "tabInventory": "Inventário",
-        "openInventoryTab": "Abrir em separador inteiro",
-        "tabPackages": "Pacotes",
-        "runOnFleet": "Executar na frota",
-        "commandPlaceholder": "tempo de atividade e df -h",
-        "commandRequired": "É necessário um comando.",
-        "commandInputsLabel": "Entradas de comando",
-        "commandSucceeded": "O comando foi executado com sucesso em todos os hosts.",
-        "commandPartialFailure": "{{failed}} de {{total}} os hosts falharam",
-        "commandFailed": "Falha ao executar o comando",
-        "resultSuccess": "Sucesso",
-        "resultFailed": "Falhou",
-        "push": "Pressionar",
-        "pull": "Puxar",
-        "remotePathLabel": "Caminho remoto",
-        "remotePathRequired": "É necessário um caminho remoto.",
-        "fileLabel": "Ficheiro",
-        "fileRequired": "É necessário um ficheiro.",
-        "pushHint": "O ficheiro selecionado é gravado exatamente nesse caminho em todos os hosts da frota.",
-        "pullHint": "O ficheiro neste caminho é lido de cada host e descarregado como um único ficheiro zip, uma pasta por host.",
-        "transferComplete": "Transferência concluída",
-        "transferFailed": "Transferência falhou",
-        "refreshInventory": "Atualizar inventário",
-        "inventoryLoadFailed": "Falha ao carregar o inventário",
-        "inventoryRefreshed": "Inventário atualizado",
-        "inventoryRefreshFailed": "Falha ao atualizar o inventário",
-        "inventoryNoData": "Ainda não há dados de stock - atualize a página para os recolher.",
-        "inventoryHost": "Host",
-        "inventoryCollectedCount": "{{count}}/{{total}} recolhido",
-        "inventoryOs": "SO",
-        "inventoryKernel": "Kernel",
-        "inventoryArch": "Arco",
-        "inventoryUptime": "Tempo de Atividade",
-        "inventoryPackageManager": "Gestor de pacotes",
-        "inventoryCollectedAt": "Coletado",
-        "packageActionLabel": "Ação",
-        "packageInstall": "Instalar",
-        "packageRemove": "Remover",
-        "packageUpgradeAll": "Atualize todos os pacotes",
-        "packageNameLabel": "Nome do pacote",
-        "packageNameRequired": "É necessário informar o nome do pacote.",
-        "packageHint": "Requer acesso de nível de gestão por host e eleva os privilégios utilizando a palavra-passe sudo armazenada no host.",
-        "shareFleet": "Frota partilhada",
-        "shareFleetTitle": "Partilhar \"{{name}}\"",
-        "shareFleetDescription": "Partilha os hosts membros atuais desta frota com os utilizadores ou funções selecionadas. Os hosts adicionados à frota posteriormente não são partilhados automaticamente — partilhe novamente para os incluir.",
-        "shareSelectionRequired": "Selecione pelo menos um utilizador ou função.",
-        "fleetSharedSuccessfully": "Partilhado a partir de {{shared}} de {{total}} hosts nesta frota",
-        "failedToShareFleet": "Não foi possível partilhar a frota.",
-        "noMembersToShare": "Esta frota ainda não tem anfitriões membros para partilhar."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Frotas"
-  },
-  "hosts": {
-    "docsLink": "Ver documentação",
-    "sharing": {
-      "customHoursPlaceholder": "Horas até à expiração do acesso",
-      "expiry": {
-        "never": "Nunca",
-        "oneHour": "1 hora",
-        "oneDay": "24 horas",
-        "sevenDays": "7 dias",
-        "thirtyDays": "30 dias",
-        "custom": "Personalizado"
-      },
-      "expiryLabel": "Expiração do acesso",
-      "levels": {
-        "connect": {
-          "label": "Ligar",
-          "description": "Abrir apenas sessões: terminal, ambiente de trabalho remoto, gestor de ficheiros, túneis e Docker. Sem acesso à configuração do anfitrião."
-        },
-        "view": {
-          "label": "Ver",
-          "description": "Ligar e ver a configuração do anfitrião. Os segredos nunca são mostrados."
-        },
-        "edit": {
-          "label": "Editar",
-          "description": "Visualize e modifique as definições do host que não requerem autenticação. A autenticação SSH do proprietário permanece privada e restrita ao proprietário."
-        },
-        "manage": {
-          "label": "Gerir",
-          "description": "Editar, além de partilhar o anfitrião com outras pessoas, alterar os níveis de permissão e revogar o acesso."
-        }
-      },
-      "noMatches": "Nenhuma correspondência encontrada",
-      "permissionLevelLabel": "Nível de permissão",
-      "rolesTab": "Funções",
-      "searchPlaceholder": "Procurar utilizadores ou funções...",
-      "shareButton": "Partilhar",
-      "shareWithCount": "Partilhar ({{count}})",
-      "usersTab": "Utilizadores"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/ro_RO.json b/plugins/fleets/locales/translated/ro_RO.json
deleted file mode 100644
index 010c8e2bf..000000000
--- a/plugins/fleets/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Vizualizați flotele",
-      "description": "Vedeți flotele, membrii și inventarul acestora."
-    },
-    "manage": {
-      "title": "Gestionați flotele",
-      "description": "Creați, editați și ștergeți flote, modificați calitatea de membru și partajați flote cu alți utilizatori sau roluri."
-    },
-    "execute": {
-      "title": "Execută acțiuni de flotă",
-      "description": "Execută comenzi și acțiuni de pachete într-o flotă și transferă fișiere către și de la gazdele membre."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Flote",
-        "createFleet": "Creați o flotă",
-        "createFleetTitle": "Creați o flotă",
-        "editFleetTitle": "Editare flotă",
-        "createFleetDescription": "O flotă este un grup denumit de gazde împotriva cărora puteți rula acțiuni ca o unitate.",
-        "nameLabel": "Nume",
-        "namePlaceholder": "de exemplu, servere web",
-        "nameRequired": "Numele flotei este obligatoriu",
-        "descriptionLabel": "Descriere",
-        "descriptionPlaceholder": "Descriere opțională",
-        "colorLabel": "Culoare",
-        "tagRulesLabel": "Reguli de etichetare",
-        "tagRulesPlaceholder": "prod-web, margine",
-        "tagRulesHint": "Gazdele cu oricare dintre aceste etichete sunt incluse automat, pe lângă gazdele adăugate manual.",
-        "fleetCreated": "Flotă creată",
-        "fleetUpdated": "Flota actualizată",
-        "fleetDeleted": "Flota a fost ștearsă",
-        "saveFailed": "Nu s-a putut salva flota",
-        "deleteFailed": "Nu s-a putut șterge flota",
-        "loadFailed": "Nu s-au putut încărca flotele",
-        "deleteFleetTitle": "Ștergeți flota",
-        "deleteFleetDescription": "Sigur vrei să ștergi „{{name}}”? Această acțiune nu șterge gazdele membre în sine.",
-        "searchFleets": "Căutați flote...",
-        "noFleets": "Încă nu există flote. Creați una pentru a începe.",
-        "memberCount": "gazdă {{count}}",
-        "memberCount_other": "gazde {{count}}",
-        "manageMembers": "Gestionați membrii",
-        "manageMembersTitle": "Gestionați membrii flotei",
-        "manageMembersDescription": "Activează sau dezactivează includerea sau dezactivarea gazdelor în calitate de membru static al acestei flote. Gazdele care corespund regulilor de etichetare sunt întotdeauna incluse.",
-        "searchHosts": "Căutați gazde...",
-        "noHostsFound": "Nu s-au găsit gazde",
-        "noMembers": "Această flotă nu are încă membri. Adăugați gazde sau setați o regulă de etichetare.",
-        "membersLoadFailed": "Nu s-au putut încărca membrii flotei",
-        "memberUpdateFailed": "Nu s-a putut actualiza calitatea de membru al flotei",
-        "tabRun": "Comandă de rulare",
-        "tabTransfer": "Transfer fișiere",
-        "tabInventory": "Inventar",
-        "openInventoryTab": "Deschideți în fila completă",
-        "tabPackages": "Pachete",
-        "runOnFleet": "Rulați pe flotă",
-        "commandPlaceholder": "timp de funcționare && df -h",
-        "commandRequired": "Este necesară o comandă",
-        "commandInputsLabel": "Intrări de comandă",
-        "commandSucceeded": "Comanda a reușit pe toate gazdele",
-        "commandPartialFailure": "{{failed}} din {{total}} gazde au eșuat",
-        "commandFailed": "Comanda nu a putut fi executată",
-        "resultSuccess": "Succes",
-        "resultFailed": "Eșuat",
-        "push": "Apăsaţi",
-        "pull": "Trage",
-        "remotePathLabel": "Cale la distanță",
-        "remotePathRequired": "Este necesară o cale la distanță",
-        "fileLabel": "Fişier",
-        "fileRequired": "Este necesar un fișier",
-        "pushHint": "Fișierul selectat este scris exact pe această cale pe fiecare gazdă din flotă.",
-        "pullHint": "Fișierul de pe această cale este citit de pe fiecare gazdă și descărcat ca un singur fișier zip, câte un folder per gazdă.",
-        "transferComplete": "Transfer finalizat",
-        "transferFailed": "Transferul a eșuat",
-        "refreshInventory": "Reîmprospătați inventarul",
-        "inventoryLoadFailed": "Nu s-a putut încărca inventarul",
-        "inventoryRefreshed": "Inventarul a fost actualizat",
-        "inventoryRefreshFailed": "Nu s-a putut actualiza inventarul",
-        "inventoryNoData": "Nu există încă date despre inventar - actualizați pagina pentru a le colecta.",
-        "inventoryHost": "Gazdă",
-        "inventoryCollectedCount": "{{count}}/{{total}} colectate",
-        "inventoryOs": "Sistem de operare",
-        "inventoryKernel": "Nucleu",
-        "inventoryArch": "Arc",
-        "inventoryUptime": "Timp de funcționare",
-        "inventoryPackageManager": "Manager de pachete",
-        "inventoryCollectedAt": "Colectate",
-        "packageActionLabel": "Acţiune",
-        "packageInstall": "Instala",
-        "packageRemove": "Elimina",
-        "packageUpgradeAll": "Actualizați toate pachetele",
-        "packageNameLabel": "Numele pachetului",
-        "packageNameRequired": "Este necesar un nume de pachet",
-        "packageHint": "Necesită acces la nivel de administrare per gazdă și ridică privilegiile folosind parola sudo stocată a gazdei.",
-        "shareFleet": "Flotă partajată",
-        "shareFleetTitle": "Distribuie „{{name}}”",
-        "shareFleetDescription": "Partajează gazdele membre actuale ale acestei flote cu utilizatorii sau rolurile selectate. Gazdele adăugate ulterior la flotă nu sunt partajate automat - partajați din nou pentru a le include.",
-        "shareSelectionRequired": "Selectați cel puțin un utilizator sau un rol",
-        "fleetSharedSuccessfully": "Gazdă(e) {{shared}} partajată din {{total}} din această flotă",
-        "failedToShareFleet": "Nu s-a putut partaja flota",
-        "noMembersToShare": "Această flotă nu are încă gazde membre de partajat."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Flote"
-  },
-  "hosts": {
-    "docsLink": "Vizualizați documentele",
-    "sharing": {
-      "customHoursPlaceholder": "Ore până la expirarea accesului",
-      "expiry": {
-        "never": "Nu",
-        "oneHour": "1 oră",
-        "oneDay": "24 de ore",
-        "sevenDays": "7 zile",
-        "thirtyDays": "30 de zile",
-        "custom": "Personalizat"
-      },
-      "expiryLabel": "Expirarea accesului",
-      "levels": {
-        "connect": {
-          "label": "Conectează-te",
-          "description": "Deschideți doar sesiunile: terminal, desktop la distanță, manager de fișiere, tuneluri și Docker. Fără acces la configurația gazdei."
-        },
-        "view": {
-          "label": "Vedere",
-          "description": "Conectează-te și vezi configurația gazdei. Secretele nu sunt afișate niciodată."
-        },
-        "edit": {
-          "label": "Edita",
-          "description": "Vizualizați și modificați setările gazdei fără autentificare. Autentificarea SSH a proprietarului rămâne privată și exclusiv pentru proprietar."
-        },
-        "manage": {
-          "label": "Gestionează",
-          "description": "Editați, plus partajați gazda cu alții, modificați nivelurile de permisiune și revocați accesul."
-        }
-      },
-      "noMatches": "Nu s-au găsit potriviri",
-      "permissionLevelLabel": "Nivel de permisiune",
-      "rolesTab": "Roluri",
-      "searchPlaceholder": "Căutați utilizatori sau roluri...",
-      "shareButton": "Distribuie",
-      "shareWithCount": "Distribuie ({{count}})",
-      "usersTab": "Utilizatori"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/ru_RU.json b/plugins/fleets/locales/translated/ru_RU.json
deleted file mode 100644
index ff50cfb04..000000000
--- a/plugins/fleets/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Просмотреть флоты",
-      "description": "Ознакомьтесь с флотом, его членами и инвентарем."
-    },
-    "manage": {
-      "title": "Управление автопарком",
-      "description": "Создавайте, редактируйте и удаляйте парки, изменяйте состав участников и предоставляйте доступ к паркам другим пользователям или ролям."
-    },
-    "execute": {
-      "title": "Выполнение действий флота",
-      "description": "Выполняйте команды и действия с пакетами в рамках всего парка устройств, а также передавайте файлы на входящие в него хосты и обратно."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Флоты",
-        "createFleet": "Создать флот",
-        "createFleetTitle": "Создать флот",
-        "editFleetTitle": "Редактировать флот",
-        "createFleetDescription": "Флот — это именованная группа хостов, против которых можно выполнять действия как единое целое.",
-        "nameLabel": "Название",
-        "namePlaceholder": "например, веб-серверы",
-        "nameRequired": "Название флота обязательно.",
-        "descriptionLabel": "Описание",
-        "descriptionPlaceholder": "Необязательное описание",
-        "colorLabel": "Цвет",
-        "tagRulesLabel": "Правила тегирования",
-        "tagRulesPlaceholder": "прод-веб, граничный",
-        "tagRulesHint": "В дополнение к хостам, добавленным вручную, автоматически включаются хосты, имеющие любой из этих тегов.",
-        "fleetCreated": "Создан флот",
-        "fleetUpdated": "Обновление флота",
-        "fleetDeleted": "Флот уничтожен",
-        "saveFailed": "Не удалось спасти флот",
-        "deleteFailed": "Не удалось удалить флот",
-        "loadFailed": "Не удалось загрузить флот.",
-        "deleteFleetTitle": "Удалить флот",
-        "deleteFleetDescription": "Вы уверены, что хотите удалить \"{{name}}\"? Это не удалит сами хосты-участники.",
-        "searchFleets": "Поиск флотов...",
-        "noFleets": "Пока нет флотов. Создайте свой, чтобы начать.",
-        "memberCount": "{{count}} хост",
-        "memberCount_other": "{{count}} хостов",
-        "manageMembers": "Управление участниками",
-        "manageMembersTitle": "Управление членами автопарка",
-        "manageMembersDescription": "Добавляйте или исключайте хосты из статического членства в этом флоте. Хосты, соответствующие правилам тегов, всегда включаются.",
-        "searchHosts": "Поиск хостов...",
-        "noHostsFound": "Хосты не найдены",
-        "noMembers": "В этом флоте пока нет участников. Добавьте хостов или установите правило тегов.",
-        "membersLoadFailed": "Не удалось загрузить членов флота.",
-        "memberUpdateFailed": "Не удалось обновить данные о членстве в автопарке.",
-        "tabRun": "Выполнить команду",
-        "tabTransfer": "Передача файлов",
-        "tabInventory": "Инвентаризация",
-        "openInventoryTab": "Открыть в полноэкранном режиме",
-        "tabPackages": "Пакеты",
-        "runOnFleet": "Run on Fleet",
-        "commandPlaceholder": "uptime && df -h",
-        "commandRequired": "Требуется команда",
-        "commandInputsLabel": "Ввод команд",
-        "commandSucceeded": "Команда успешно выполнена на всех хостах.",
-        "commandPartialFailure": "{{failed}} из {{total}} хостов не удалось",
-        "commandFailed": "Не удалось выполнить команду.",
-        "resultSuccess": "Успех",
-        "resultFailed": "Ошибка",
-        "push": "Толкать",
-        "pull": "Тянуть",
-        "remotePathLabel": "Удаленный путь",
-        "remotePathRequired": "Требуется удаленный путь",
-        "fileLabel": "Файл",
-        "fileRequired": "Требуется файл",
-        "pushHint": "Выбранный файл записывается точно по этому пути на каждом хосте в сети.",
-        "pullHint": "Файл по этому пути считывается с каждого хоста и загружается в виде единого ZIP-архива, по одной папке на каждый хост.",
-        "transferComplete": "Передача завершена",
-        "transferFailed": "Ошибка передачи",
-        "refreshInventory": "Обновить инвентарь",
-        "inventoryLoadFailed": "Не удалось загрузить товарные запасы.",
-        "inventoryRefreshed": "Инвентарь обновлен",
-        "inventoryRefreshFailed": "Не удалось обновить данные об остатках на складе.",
-        "inventoryNoData": "Данные об остатках товара пока отсутствуют — обновите страницу, чтобы получить их.",
-        "inventoryHost": "Хост",
-        "inventoryCollectedCount": "{{count}}/{{total}} собрано",
-        "inventoryOs": "ОС",
-        "inventoryKernel": "Ядро",
-        "inventoryArch": "Арка",
-        "inventoryUptime": "Время работы",
-        "inventoryPackageManager": "Менеджер пакетов",
-        "inventoryCollectedAt": "Собрано",
-        "packageActionLabel": "Действие",
-        "packageInstall": "Установить",
-        "packageRemove": "Удалить",
-        "packageUpgradeAll": "Обновить все пакеты",
-        "packageNameLabel": "Название пакета",
-        "packageNameRequired": "Требуется указать имя пакета.",
-        "packageHint": "Для работы требуется доступ уровня администратора для каждого хоста, повышение прав осуществляется с помощью сохраненного пароля sudo для данного хоста.",
-        "shareFleet": "Совместное использование автопарка",
-        "shareFleetTitle": "Поделиться \"{{name}}\"",
-        "shareFleetDescription": "Предоставляет доступ к текущим хостам, входящим в этот парк, выбранным пользователям или ролям. Хосты, добавленные в парк позже, не предоставляются автоматически — предоставьте доступ снова, чтобы включить их.",
-        "shareSelectionRequired": "Выберите хотя бы одного пользователя или роль.",
-        "fleetSharedSuccessfully": "Общий {{shared}} хоста(ов) в этом флоте {{total}}",
-        "failedToShareFleet": "Не удалось поделиться флотом",
-        "noMembersToShare": "В этом флоте пока нет хостов-участников, которыми можно было бы поделиться."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Флоты"
-  },
-  "hosts": {
-    "docsLink": "Документация",
-    "sharing": {
-      "customHoursPlaceholder": "Часов до окончания срока доступа",
-      "expiry": {
-        "never": "Никогда",
-        "oneHour": "1 час",
-        "oneDay": "24 часа",
-        "sevenDays": "7 дней",
-        "thirtyDays": "30 дней",
-        "custom": "Настроить"
-      },
-      "expiryLabel": "Срок действия доступа",
-      "levels": {
-        "connect": {
-          "label": "Подключение",
-          "description": "Только открытие сеансов: терминал, удалённый рабочий стол, файловый менеджер, туннели и Docker. Без доступа к конфигурации хоста."
-        },
-        "view": {
-          "label": "Просмотр",
-          "description": "Подключение и просмотр конфигурации хоста. Секреты не отображаются."
-        },
-        "edit": {
-          "label": "Редактирование",
-          "description": "Просмотр и изменение настроек хоста без аутентификации. SSH-аутентификация владельца остается конфиденциальной и доступна только владельцу."
-        },
-        "manage": {
-          "label": "Управление",
-          "description": "Редактирование, а также предоставление доступа другим, изменение уровней доступа и отзыв доступа."
-        }
-      },
-      "noMatches": "Совпадений не найдено",
-      "permissionLevelLabel": "Уровень доступа",
-      "rolesTab": "Роли",
-      "searchPlaceholder": "Поиск пользователей или ролей...",
-      "shareButton": "Поделиться",
-      "shareWithCount": "Поделиться ({{count}})",
-      "usersTab": "Пользователи"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/sr_SP.json b/plugins/fleets/locales/translated/sr_SP.json
deleted file mode 100644
index 24dc5bc95..000000000
--- a/plugins/fleets/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Погледајте возне паркове",
-      "description": "Погледајте возне паркове, њихове чланове и инвентар."
-    },
-    "manage": {
-      "title": "Управљајте возним парковима",
-      "description": "Креирајте, уређујте и бришите флоте, мењајте чланство и делите флоте са другим корисницима или улогама."
-    },
-    "execute": {
-      "title": "Покрени акције флоте",
-      "description": "Покрећите команде и акције пакета широм флоте и преносите датотеке на и са њених чланских хостова."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Флоте",
-        "createFleet": "Креирај флоту",
-        "createFleetTitle": "Креирај флоту",
-        "editFleetTitle": "Уреди флоту",
-        "createFleetDescription": "Флота је именована група хостова против којих можете извршавати акције као јединицу.",
-        "nameLabel": "Име",
-        "namePlaceholder": "нпр. веб сервери",
-        "nameRequired": "Назив флоте је обавезан",
-        "descriptionLabel": "Опис",
-        "descriptionPlaceholder": "Опциони опис",
-        "colorLabel": "Боја",
-        "tagRulesLabel": "Правила за ознаке",
-        "tagRulesPlaceholder": "prod-web, edge",
-        "tagRulesHint": "Домаћини са било којом од ових ознака се аутоматски укључују, поред домаћина додатих ручно.",
-        "fleetCreated": "Флота је створена",
-        "fleetUpdated": "Ажурирана флота",
-        "fleetDeleted": "Флота је обрисана",
-        "saveFailed": "Чување флоте није успело",
-        "deleteFailed": "Брисање флоте није успело",
-        "loadFailed": "Учитавање возних паркова није успело",
-        "deleteFleetTitle": "Обриши флоту",
-        "deleteFleetDescription": "Да ли сте сигурни да желите да обришете „{{name}}“? Овим се не бришу сами чланови хостови.",
-        "searchFleets": "Претражи флоте...",
-        "noFleets": "Још нема флота. Направите једну да бисте започели.",
-        "memberCount": "{{count}} домаћин",
-        "memberCount_other": "{{count}} домаћини",
-        "manageMembers": "Управљање члановима",
-        "manageMembersTitle": "Управљајте члановима флоте",
-        "manageMembersDescription": "Укључите или искључите хостове из статичког чланства ове флоте. Хостови који се подударају са правилима ознака су увек укључени.",
-        "searchHosts": "Претражи хостове...",
-        "noHostsFound": "Нису пронађени хостови",
-        "noMembers": "Ова флота још нема чланова. Додајте хостове или поставите правило за ознаке.",
-        "membersLoadFailed": "Учитавање чланова флоте није успело",
-        "memberUpdateFailed": "Ажурирање чланства у флоти није успело",
-        "tabRun": "Покрени команду",
-        "tabTransfer": "Пренос датотека",
-        "tabInventory": "Инвентар",
-        "openInventoryTab": "Отвори у целој картици",
-        "tabPackages": "Пакети",
-        "runOnFleet": "Трчи на флоти",
-        "commandPlaceholder": "време непрекидног рада && df -h",
-        "commandRequired": "Потребна је команда",
-        "commandInputsLabel": "Уноси команди",
-        "commandSucceeded": "Команда је успела на свим хостовима",
-        "commandPartialFailure": "{{failed}} од {{total}} хостова није успело",
-        "commandFailed": "Није успело покретање команде",
-        "resultSuccess": "Успех",
-        "resultFailed": "Неуспешно",
-        "push": "Гурај",
-        "pull": "Повуци",
-        "remotePathLabel": "Удаљена путања",
-        "remotePathRequired": "Потребна је удаљена путања",
-        "fileLabel": "Датотека",
-        "fileRequired": "Потребна је датотека",
-        "pushHint": "Изабрана датотека се уписује на ову тачну путању на сваком хосту у флоти.",
-        "pullHint": "Датотека на овој путањи се чита са сваког хоста и преузима као један zip фасцикла, једна фасцикла по хосту.",
-        "transferComplete": "Пренос завршен",
-        "transferFailed": "Пренос није успео",
-        "refreshInventory": "Освежи инвентар",
-        "inventoryLoadFailed": "Учитавање инвентара није успело",
-        "inventoryRefreshed": "Инвентар освежен",
-        "inventoryRefreshFailed": "Освежавање инвентара није успело",
-        "inventoryNoData": "Још нема података о залихама - освежите да бисте их прикупили.",
-        "inventoryHost": "Домаћин",
-        "inventoryCollectedCount": "{{count}}/{{total}} сакупљено",
-        "inventoryOs": "ОС",
-        "inventoryKernel": "Језгро",
-        "inventoryArch": "Лук",
-        "inventoryUptime": "Време непрекидног рада",
-        "inventoryPackageManager": "Менаџер пакета",
-        "inventoryCollectedAt": "Сакупљено",
-        "packageActionLabel": "Акција",
-        "packageInstall": "Инсталирај",
-        "packageRemove": "Уклони",
-        "packageUpgradeAll": "Надоградите све пакете",
-        "packageNameLabel": "Назив пакета",
-        "packageNameRequired": "Потребно је име пакета",
-        "packageHint": "Захтева приступ на нивоу управљања по хосту и подиже привилегије користећи сачувану sudo лозинку хоста.",
-        "shareFleet": "Дели флоту",
-        "shareFleetTitle": "Подели „{{name}}“",
-        "shareFleetDescription": "Дели тренутне хостове чланове ове флоте са изабраним корисницима или улогама. Хостови који се касније додају флоти се не деле аутоматски - поново делите да бисте их укључили.",
-        "shareSelectionRequired": "Изаберите барем једног корисника или улогу",
-        "fleetSharedSuccessfully": "Дељено {{shared}} од {{total}} хост(ова) у овој флоти",
-        "failedToShareFleet": "Дељење флоте није успело",
-        "noMembersToShare": "Ова флота још нема домаћине чланове за дељење."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Флоте"
-  },
-  "hosts": {
-    "docsLink": "Прикажи документе",
-    "sharing": {
-      "customHoursPlaceholder": "Сати до истека приступа",
-      "expiry": {
-        "never": "Никад",
-        "oneHour": "1 сат",
-        "oneDay": "24 сата",
-        "sevenDays": "7 дана",
-        "thirtyDays": "30 дана",
-        "custom": "Прилагођено"
-      },
-      "expiryLabel": "Истек приступа",
-      "levels": {
-        "connect": {
-          "label": "Повежи се",
-          "description": "Само отворене сесије: терминал, удаљена радна површина, менаџер датотека, тунели и Докер. Нема приступа конфигурацији хоста."
-        },
-        "view": {
-          "label": "Поглед",
-          "description": "Повежите се, плус погледајте конфигурацију хоста. Тајне се никада не приказују."
-        },
-        "edit": {
-          "label": "Измени",
-          "description": "Прегледајте и мењајте подешавања хоста која не захтевају аутентификацију. SSH аутентификација власника остаје приватна и доступна само власнику."
-        },
-        "manage": {
-          "label": "Управљај",
-          "description": "Уредите, плус делите хост са другима, мењајте нивое дозвола и опозовите приступ."
-        }
-      },
-      "noMatches": "Није пронађено ниједно подударање",
-      "permissionLevelLabel": "Ниво дозволе",
-      "rolesTab": "Улоге",
-      "searchPlaceholder": "Претражите кориснике или улоге...",
-      "shareButton": "Дели",
-      "shareWithCount": "Подели ({{count}})",
-      "usersTab": "Корисници"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/sv_SE.json b/plugins/fleets/locales/translated/sv_SE.json
deleted file mode 100644
index c6cc46d70..000000000
--- a/plugins/fleets/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Visa flottor",
-      "description": "Se flottor, deras medlemmar och inventering."
-    },
-    "manage": {
-      "title": "Hantera flottor",
-      "description": "Skapa, redigera och ta bort flottor, ändra medlemskap och dela flottor med andra användare eller roller."
-    },
-    "execute": {
-      "title": "Kör flottans åtgärder",
-      "description": "Kör kommandon och paketåtgärder över en flotta och överför filer till och från dess medlemsvärdar."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Flottor",
-        "createFleet": "Skapa flotta",
-        "createFleetTitle": "Skapa flotta",
-        "editFleetTitle": "Redigera flotta",
-        "createFleetDescription": "En flotta är en namngiven grupp av värdar som du kan köra åtgärder mot som en enhet.",
-        "nameLabel": "Namn",
-        "namePlaceholder": "t.ex. webbservrar",
-        "nameRequired": "Flottans namn krävs",
-        "descriptionLabel": "Beskrivning",
-        "descriptionPlaceholder": "Valfri beskrivning",
-        "colorLabel": "Färg",
-        "tagRulesLabel": "Taggregler",
-        "tagRulesPlaceholder": "prod-web, kant",
-        "tagRulesHint": "Värdar med någon av dessa taggar inkluderas automatiskt, utöver värdar som läggs till manuellt.",
-        "fleetCreated": "Flotta skapad",
-        "fleetUpdated": "Flottan uppdaterad",
-        "fleetDeleted": "Flottan raderad",
-        "saveFailed": "Misslyckades med att spara flottan",
-        "deleteFailed": "Misslyckades med att ta bort flottan",
-        "loadFailed": "Misslyckades med att ladda flottor",
-        "deleteFleetTitle": "Ta bort flotta",
-        "deleteFleetDescription": "Är du säker på att du vill ta bort \"{{name}}\"? Detta tar inte bort själva medlemsvärdarna.",
-        "searchFleets": "Sök flottor...",
-        "noFleets": "Inga flottor ännu. Skapa en för att komma igång.",
-        "memberCount": "{{count}} värd",
-        "memberCount_other": "{{count}} värdar",
-        "manageMembers": "Hantera medlemmar",
-        "manageMembersTitle": "Hantera flottmedlemmar",
-        "manageMembersDescription": "Växla mellan att visa eller avaktivera värdar i flottans statiska medlemskap. Värdar som matchas av taggregler inkluderas alltid.",
-        "searchHosts": "Sök värdar...",
-        "noHostsFound": "Inga värdar hittades",
-        "noMembers": "Den här flottan har inga medlemmar ännu. Lägg till värdar eller ange en taggregel.",
-        "membersLoadFailed": "Misslyckades med att ladda flottmedlemmar",
-        "memberUpdateFailed": "Misslyckades med att uppdatera flottmedlemskapet",
-        "tabRun": "Kör kommando",
-        "tabTransfer": "Överför filer",
-        "tabInventory": "Lager",
-        "openInventoryTab": "Öppna i hela fliken",
-        "tabPackages": "Paket",
-        "runOnFleet": "Kör på flottan",
-        "commandPlaceholder": "drifttid && df -h",
-        "commandRequired": "Ett kommando krävs",
-        "commandInputsLabel": "Kommandoingångar",
-        "commandSucceeded": "Kommandot lyckades på alla värdar",
-        "commandPartialFailure": "{{failed}} av {{total}} värdar misslyckades",
-        "commandFailed": "Misslyckades med att köra kommandot",
-        "resultSuccess": "Framgång",
-        "resultFailed": "Misslyckades",
-        "push": "Tryck",
-        "pull": "Dra",
-        "remotePathLabel": "Fjärrväg",
-        "remotePathRequired": "En fjärrsökväg krävs",
-        "fileLabel": "Fil",
-        "fileRequired": "En fil krävs",
-        "pushHint": "Den valda filen skrivs till exakt denna sökväg på varje värd i flottan.",
-        "pullHint": "Filen på den här sökvägen läses från varje värd och laddas ner som en enda zip-fil, en mapp per värd.",
-        "transferComplete": "Överföringen är klar",
-        "transferFailed": "Överföringen misslyckades",
-        "refreshInventory": "Uppdatera lagret",
-        "inventoryLoadFailed": "Misslyckades med att ladda lagret",
-        "inventoryRefreshed": "Inventariet uppdaterat",
-        "inventoryRefreshFailed": "Misslyckades med att uppdatera lagret",
-        "inventoryNoData": "Ingen lagerdata ännu – uppdatera för att samla in den.",
-        "inventoryHost": "Värd",
-        "inventoryCollectedCount": "{{count}}/{{total}} samlade",
-        "inventoryOs": "operativsystem",
-        "inventoryKernel": "Kärna",
-        "inventoryArch": "Båge",
-        "inventoryUptime": "Drifttid",
-        "inventoryPackageManager": "Pakethanterare",
-        "inventoryCollectedAt": "Insamlad",
-        "packageActionLabel": "Handling",
-        "packageInstall": "Installera",
-        "packageRemove": "Ta bort",
-        "packageUpgradeAll": "Uppgradera alla paket",
-        "packageNameLabel": "Paketnamn",
-        "packageNameRequired": "Ett paketnamn krävs",
-        "packageHint": "Kräver åtkomst på hanteringsnivå per värd och höjs med hjälp av värdens lagrade sudo-lösenord.",
-        "shareFleet": "Dela flottan",
-        "shareFleetTitle": "Dela \"{{name}}\"",
-        "shareFleetDescription": "Delar den här flottans nuvarande medlemsvärdar med de valda användarna eller rollerna. Värdar som läggs till i flottan senare delas inte automatiskt – dela igen för att inkludera dem.",
-        "shareSelectionRequired": "Välj minst en användare eller roll",
-        "fleetSharedSuccessfully": "Delad {{shared}} av {{total}} värd(ar) i denna flotta",
-        "failedToShareFleet": "Misslyckades med att dela flottan",
-        "noMembersToShare": "Den här flottan har inga medlemsvärdar att dela ännu."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Flottor"
-  },
-  "hosts": {
-    "docsLink": "Visa dokument",
-    "sharing": {
-      "customHoursPlaceholder": "Timmar tills åtkomsten upphör",
-      "expiry": {
-        "never": "Aldrig",
-        "oneHour": "1 timme",
-        "oneDay": "24 timmar",
-        "sevenDays": "7 dagar",
-        "thirtyDays": "30 dagar",
-        "custom": "Beställnings"
-      },
-      "expiryLabel": "Åtkomstutgång",
-      "levels": {
-        "connect": {
-          "label": "Ansluta",
-          "description": "Endast öppna sessioner: terminal, fjärrskrivbord, filhanterare, tunnlar och Docker. Ingen åtkomst till värdkonfigurationen."
-        },
-        "view": {
-          "label": "Se",
-          "description": "Anslut, plus se värdkonfigurationen. Hemligheter visas aldrig."
-        },
-        "edit": {
-          "label": "Redigera",
-          "description": "Visa och ändra inställningar för icke-autentiseringsvärdar. Ägarens SSH-autentisering förblir privat och endast för ägaren."
-        },
-        "manage": {
-          "label": "Hantera",
-          "description": "Redigera, plus dela värden med andra, ändra behörighetsnivåer och återkalla åtkomst."
-        }
-      },
-      "noMatches": "Inga träffar hittades",
-      "permissionLevelLabel": "Behörighetsnivå",
-      "rolesTab": "Roller",
-      "searchPlaceholder": "Sök användare eller roller...",
-      "shareButton": "Dela",
-      "shareWithCount": "Dela ({{count}})",
-      "usersTab": "Användare"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/th_TH.json b/plugins/fleets/locales/translated/th_TH.json
deleted file mode 100644
index 83d6c0a34..000000000
--- a/plugins/fleets/locales/translated/th_TH.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "ดูฝูงบิน",
-      "description": "ดูรายละเอียดกองเรือ สมาชิก และสินค้าคงคลัง"
-    },
-    "manage": {
-      "title": "บริหารจัดการกองยานพาหนะ",
-      "description": "สร้าง แก้ไข และลบกลุ่มยานพาหนะ เปลี่ยนแปลงสมาชิก และแชร์กลุ่มยานพาหนะกับผู้ใช้หรือบทบาทอื่นๆ"
-    },
-    "execute": {
-      "title": "ดำเนินการจัดการกองเรือ",
-      "description": "เรียกใช้คำสั่งและดำเนินการแพ็กเกจต่างๆ บนกลุ่มเครื่องเซิร์ฟเวอร์ และถ่ายโอนไฟล์ระหว่างเครื่องเซิร์ฟเวอร์ที่เป็นสมาชิก"
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "กองเรือ",
-        "createFleet": "สร้างกลุ่มยานพาหนะ",
-        "createFleetTitle": "สร้างกลุ่มยานพาหนะ",
-        "editFleetTitle": "แก้ไขข้อมูลกองเรือ",
-        "createFleetDescription": "กลุ่มโฮสต์ (Fleet) คือกลุ่มของโฮสต์ที่มีชื่อ ซึ่งคุณสามารถเรียกใช้คำสั่งต่างๆ กับกลุ่มนั้นได้ในฐานะหน่วยเดียวกัน",
-        "nameLabel": "ชื่อ",
-        "namePlaceholder": "เช่น เว็บเซิร์ฟเวอร์",
-        "nameRequired": "ต้องระบุชื่อกองเรือ",
-        "descriptionLabel": "คำอธิบาย",
-        "descriptionPlaceholder": "คำอธิบายเพิ่มเติม (ไม่บังคับ)",
-        "colorLabel": "สี",
-        "tagRulesLabel": "กฎการติดแท็ก",
-        "tagRulesPlaceholder": "โปรด-เว็บ, เอดจ์",
-        "tagRulesHint": "โฮสต์ที่มีแท็กใดแท็กหนึ่งเหล่านี้จะถูกรวมไว้โดยอัตโนมัติ นอกเหนือจากโฮสต์ที่เพิ่มเข้ามาด้วยตนเอง",
-        "fleetCreated": "กองเรือสร้าง",
-        "fleetUpdated": "อัปเดตฝูงบินแล้ว",
-        "fleetDeleted": "กองเรือถูกลบ",
-        "saveFailed": "ไม่สามารถช่วยกองเรือได้",
-        "deleteFailed": "ไม่สามารถลบกลุ่มยานพาหนะได้",
-        "loadFailed": "ไม่สามารถโหลดข้อมูลยานพาหนะได้",
-        "deleteFleetTitle": "ลบกลุ่มยานพาหนะ",
-        "deleteFleetDescription": "คุณแน่ใจหรือไม่ว่าต้องการลบ \"{{name}}\"? การดำเนินการนี้ไม่ได้ลบโฮสต์สมาชิกเอง",
-        "searchFleets": "ค้นหากองเรือ...",
-        "noFleets": "ยังไม่มีกลุ่มเรือ สร้างกลุ่มเรือเพื่อเริ่มต้นใช้งานได้เลย",
-        "memberCount": "{{count}} โฮสต์",
-        "memberCount_other": "{{count}} โฮสต์",
-        "manageMembers": "จัดการสมาชิก",
-        "manageMembersTitle": "จัดการสมาชิกกลุ่มยานพาหนะ",
-        "manageMembersDescription": "สลับการเพิ่มหรือลบโฮสต์ออกจากการเป็นสมาชิกแบบคงที่ของกลุ่มโฮสต์นี้ โฮสต์ที่ตรงกับกฎแท็กจะถูกรวมอยู่เสมอ",
-        "searchHosts": "ค้นหาโฮสต์...",
-        "noHostsFound": "ไม่พบโฮสต์",
-        "noMembers": "กลุ่มเรือนี้ยังไม่มีสมาชิก เพิ่มโฮสต์หรือตั้งค่ากฎแท็ก",
-        "membersLoadFailed": "ไม่สามารถโหลดสมาชิกกองเรือได้",
-        "memberUpdateFailed": "ไม่สามารถอัปเดตข้อมูลสมาชิกกลุ่มยานพาหนะได้",
-        "tabRun": "เรียกใช้คำสั่ง",
-        "tabTransfer": "โอนไฟล์",
-        "tabInventory": "รายการสิ่งของ",
-        "openInventoryTab": "เปิดในแท็บเต็ม",
-        "tabPackages": "แพ็คเกจ",
-        "runOnFleet": "วิ่งบนกองเรือ",
-        "commandPlaceholder": "uptime && df -h",
-        "commandRequired": "จำเป็นต้องมีคำสั่ง",
-        "commandInputsLabel": "อินพุตคำสั่ง",
-        "commandSucceeded": "คำสั่งทำงานสำเร็จบนโฮสต์ทั้งหมด",
-        "commandPartialFailure": "โฮสต์ {{failed}} ล้มเหลว {{total}}",
-        "commandFailed": "ไม่สามารถเรียกใช้คำสั่งได้",
-        "resultSuccess": "ความสำเร็จ",
-        "resultFailed": "ล้มเหลว",
-        "push": "ดัน",
-        "pull": "ดึง",
-        "remotePathLabel": "เส้นทางระยะไกล",
-        "remotePathRequired": "จำเป็นต้องใช้เส้นทางระยะไกล",
-        "fileLabel": "ไฟล์",
-        "fileRequired": "จำเป็นต้องมีไฟล์",
-        "pushHint": "ไฟล์ที่เลือกจะถูกเขียนไปยังพาธที่ระบุไว้นี้บนทุกเครื่องในระบบเครือข่าย",
-        "pullHint": "ไฟล์ที่อยู่ในพาธนี้จะถูกอ่านจากทุกโฮสต์และดาวน์โหลดเป็นไฟล์ซิปเดียว โดยมีหนึ่งโฟลเดอร์ต่อหนึ่งโฮสต์",
-        "transferComplete": "การโอนเสร็จสมบูรณ์",
-        "transferFailed": "การโอนล้มเหลว",
-        "refreshInventory": "รีเฟรชสินค้าคงคลัง",
-        "inventoryLoadFailed": "ไม่สามารถโหลดสินค้าคงคลังได้",
-        "inventoryRefreshed": "อัปเดตสินค้าคงคลังแล้ว",
-        "inventoryRefreshFailed": "ไม่สามารถรีเฟรชสินค้าคงคลังได้",
-        "inventoryNoData": "ยังไม่มีข้อมูลสินค้าคงคลัง โปรดรีเฟรชหน้าเว็บเพื่อดูข้อมูล",
-        "inventoryHost": "เจ้าภาพ",
-        "inventoryCollectedCount": "{{count}}/{{total}} รวบรวมแล้ว",
-        "inventoryOs": "โอเอส",
-        "inventoryKernel": "เคอร์เนล",
-        "inventoryArch": "โค้ง",
-        "inventoryUptime": "เวลาใช้งาน",
-        "inventoryPackageManager": "ตัวจัดการแพ็กเกจ",
-        "inventoryCollectedAt": "รวบรวม",
-        "packageActionLabel": "การกระทำ",
-        "packageInstall": "ติดตั้ง",
-        "packageRemove": "ลบ",
-        "packageUpgradeAll": "อัปเกรดแพ็กเกจทั้งหมด",
-        "packageNameLabel": "ชื่อแพ็คเกจ",
-        "packageNameRequired": "จำเป็นต้องระบุชื่อแพ็กเกจ",
-        "packageHint": "ต้องมีสิทธิ์การเข้าถึงระดับจัดการต่อโฮสต์ และยกระดับสิทธิ์โดยใช้รหัสผ่าน sudo ที่บันทึกไว้ของโฮสต์",
-        "shareFleet": "แบ่งปันกองเรือ",
-        "shareFleetTitle": "แชร์ \"{{name}}\"",
-        "shareFleetDescription": "แชร์โฮสต์ที่เป็นสมาชิกปัจจุบันของกลุ่มโฮสต์นี้ให้กับผู้ใช้หรือบทบาทที่เลือกไว้ โฮสต์ที่เพิ่มเข้ามาในกลุ่มโฮสต์ในภายหลังจะไม่ถูกแชร์โดยอัตโนมัติ ต้องแชร์อีกครั้งเพื่อรวมโฮสต์เหล่านั้น",
-        "shareSelectionRequired": "เลือกผู้ใช้หรือบทบาทอย่างน้อยหนึ่งรายการ",
-        "fleetSharedSuccessfully": "โฮสต์ {{shared}} ที่ใช้ร่วมกันของ {{total}} ในกลุ่มนี้",
-        "failedToShareFleet": "ไม่สามารถแบ่งปันกองเรือได้",
-        "noMembersToShare": "กลุ่มเรือนี้ยังไม่มีสมาชิกผู้ให้บริการโฮสติ้งให้แชร์ข้อมูล"
-      }
-    }
-  },
-  "nav": {
-    "fleets": "กองเรือ"
-  },
-  "hosts": {
-    "docsLink": "ดูเอกสาร",
-    "sharing": {
-      "customHoursPlaceholder": "เหลือเวลาอีกกี่ชั่วโมงก่อนที่สิทธิ์การเข้าถึงจะหมดอายุ",
-      "expiry": {
-        "never": "ไม่เคย",
-        "oneHour": "1 ชั่วโมง",
-        "oneDay": "24 ชั่วโมง",
-        "sevenDays": "7 วัน",
-        "thirtyDays": "30 วัน",
-        "custom": "กำหนดเอง"
-      },
-      "expiryLabel": "วันหมดอายุการเข้าถึง",
-      "levels": {
-        "connect": {
-          "label": "เชื่อมต่อ",
-          "description": "อนุญาตเฉพาะเซสชันที่เปิดใช้งานเท่านั้น: เทอร์มินัล, เดสก์ท็อประยะไกล, ตัวจัดการไฟล์, อุโมงค์ และ Docker ไม่สามารถเข้าถึงการกำหนดค่าโฮสต์ได้"
-        },
-        "view": {
-          "label": "ดู",
-          "description": "เชื่อมต่อและดูการตั้งค่าโฮสต์ ข้อมูลลับจะไม่ถูกเปิดเผย"
-        },
-        "edit": {
-          "label": "แก้ไข",
-          "description": "ดูและแก้ไขการตั้งค่าโฮสต์ที่ไม่ต้องยืนยันตัวตน การยืนยันตัวตน SSH ของเจ้าของจะยังคงเป็นส่วนตัวและเข้าถึงได้เฉพาะเจ้าของเท่านั้น"
-        },
-        "manage": {
-          "label": "จัดการ",
-          "description": "แก้ไข รวมถึงแชร์โฮสต์กับผู้อื่น เปลี่ยนระดับสิทธิ์ และเพิกถอนการเข้าถึงได้"
-        }
-      },
-      "noMatches": "ไม่พบผลลัพธ์ที่ตรงกัน",
-      "permissionLevelLabel": "ระดับการอนุญาต",
-      "rolesTab": "บทบาท",
-      "searchPlaceholder": "ค้นหาผู้ใช้หรือบทบาท...",
-      "shareButton": "แบ่งปัน",
-      "shareWithCount": "แชร์ ({{count}})",
-      "usersTab": "ผู้ใช้"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/tr_TR.json b/plugins/fleets/locales/translated/tr_TR.json
deleted file mode 100644
index 6ae2989a6..000000000
--- a/plugins/fleets/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Filoları görüntüle",
-      "description": "Filoları, üyelerini ve envanterlerini görüntüleyin."
-    },
-    "manage": {
-      "title": "Filoları yönetin",
-      "description": "Filoları oluşturun, düzenleyin ve silin, üyelikleri değiştirin ve filoları diğer kullanıcılar veya rollerle paylaşın."
-    },
-    "execute": {
-      "title": "Filo işlemlerini yürütün",
-      "description": "Filo genelinde komutları çalıştırın, işlemleri paketleyin ve üye sunucular arasında dosya aktarımı yapın."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Filolar",
-        "createFleet": "Filo Oluştur",
-        "createFleetTitle": "Filo Oluştur",
-        "editFleetTitle": "Filoyu Düzenle",
-        "createFleetDescription": "Filo, birim olarak eylemler gerçekleştirebileceğiniz, adlandırılmış bir sunucu grubudur.",
-        "nameLabel": "Ad",
-        "namePlaceholder": "Örneğin, Web Sunucuları",
-        "nameRequired": "Filo adı zorunludur.",
-        "descriptionLabel": "Açıklama",
-        "descriptionPlaceholder": "İsteğe bağlı açıklama",
-        "colorLabel": "Renk",
-        "tagRulesLabel": "Etiket kuralları",
-        "tagRulesPlaceholder": "prod-web, edge",
-        "tagRulesHint": "Bu etiketlerden herhangi birine sahip sunucular, manuel olarak eklenen sunuculara ek olarak otomatik olarak dahil edilir.",
-        "fleetCreated": "Filo oluşturuldu",
-        "fleetUpdated": "Filo güncellendi",
-        "fleetDeleted": "Filo silindi",
-        "saveFailed": "Filoyu kurtaramadık",
-        "deleteFailed": "Filoyu silme işlemi başarısız oldu.",
-        "loadFailed": "Filoların yüklenmesi başarısız oldu.",
-        "deleteFleetTitle": "Filoyu Sil",
-        "deleteFleetDescription": "\"{{name}}\" öğesini silmek istediğinizden emin misiniz? Bu işlem üye sunucuların kendilerini silmez.",
-        "searchFleets": "Filoları arayın...",
-        "noFleets": "Henüz filo yok. Başlamak için bir tane oluşturun.",
-        "memberCount": "{{count}} sunucu",
-        "memberCount_other": "{{count}} ana makine",
-        "manageMembers": "Üyeleri Yönet",
-        "manageMembersTitle": "Filo Üyelerini Yönetin",
-        "manageMembersDescription": "Sunucuları bu filonun statik üyeliğine dahil edin veya çıkarın. Etiket kurallarına göre eşleşen sunucular her zaman dahil edilir.",
-        "searchHosts": "Host ara...",
-        "noHostsFound": "Hiç sunucu bulunamadı",
-        "noMembers": "Bu filonun henüz üyesi yok. Sunucu ekleyin veya etiket kuralı belirleyin.",
-        "membersLoadFailed": "Filo üyeleri yüklenemedi.",
-        "memberUpdateFailed": "Filo üyeliği güncellenemedi.",
-        "tabRun": "Komutu Çalıştır",
-        "tabTransfer": "Dosya Aktarımı",
-        "tabInventory": "Envanter",
-        "openInventoryTab": "Tam sekmede aç",
-        "tabPackages": "Paketler",
-        "runOnFleet": "Filoda Çalıştır",
-        "commandPlaceholder": "çalışma süresi && df -h",
-        "commandRequired": "Bir komut gereklidir.",
-        "commandInputsLabel": "Komut girişleri",
-        "commandSucceeded": "Komut tüm sunucularda başarıyla tamamlandı.",
-        "commandPartialFailure": "{{failed}} / {{total}} sunucu başarısız oldu",
-        "commandFailed": "Komut çalıştırma başarısız oldu.",
-        "resultSuccess": "Başarılı",
-        "resultFailed": "Başarısız",
-        "push": "İtmek",
-        "pull": "Çekmek",
-        "remotePathLabel": "Uzak yol",
-        "remotePathRequired": "Uzak bir yol gereklidir.",
-        "fileLabel": "Dosya",
-        "fileRequired": "Bir dosya gereklidir.",
-        "pushHint": "Seçilen dosya, filodaki her sunucuda tam olarak bu yola yazılır.",
-        "pullHint": "Bu yoldaki dosya her sunucudan okunur ve her sunucu için bir klasör olmak üzere tek bir zip dosyası olarak indirilir.",
-        "transferComplete": "Aktarım tamamlandı",
-        "transferFailed": "Aktarım başarısız",
-        "refreshInventory": "Envanteri Yenile",
-        "inventoryLoadFailed": "Envanter yüklenemedi.",
-        "inventoryRefreshed": "Stok güncellendi",
-        "inventoryRefreshFailed": "Envanter yenileme işlemi başarısız oldu.",
-        "inventoryNoData": "Henüz envanter verisi yok - verileri toplamak için sayfayı yenileyin.",
-        "inventoryHost": "Ana Bilgisayar",
-        "inventoryCollectedCount": "{{count}}/{{total}} toplandı",
-        "inventoryOs": "İşletim Sistemi",
-        "inventoryKernel": "Çekirdek",
-        "inventoryArch": "Kemer",
-        "inventoryUptime": "Çalışma Süresi",
-        "inventoryPackageManager": "Paket yöneticisi",
-        "inventoryCollectedAt": "Toplandı",
-        "packageActionLabel": "İşlem",
-        "packageInstall": "Düzenlemek",
-        "packageRemove": "Kaldır",
-        "packageUpgradeAll": "Tüm paketleri yükseltin",
-        "packageNameLabel": "Paket adı",
-        "packageNameRequired": "Paket adı gereklidir.",
-        "packageHint": "Her sunucu için yönetim düzeyinde erişim gerektirir ve sunucunun kayıtlı sudo şifresi kullanılarak yetki yükseltilir.",
-        "shareFleet": "Filo Paylaşımı",
-        "shareFleetTitle": "Paylaş \"{{name}}\"",
-        "shareFleetDescription": "Bu filonun mevcut üye sunucularını seçilen kullanıcılar veya rollerle paylaşır. Filoya daha sonra eklenen sunucular otomatik olarak paylaşılmaz; bunları dahil etmek için tekrar paylaşın.",
-        "shareSelectionRequired": "En az bir kullanıcı veya rol seçin.",
-        "fleetSharedSuccessfully": "Bu filodaki {{total}} ana bilgisayarın paylaşılan {{shared}} 'ı",
-        "failedToShareFleet": "Filo paylaşımı başarısız oldu.",
-        "noMembersToShare": "Bu filonun henüz paylaşabileceği üye sunucusu yok."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Filolar"
-  },
-  "hosts": {
-    "docsLink": "Dokümanları görüntüle",
-    "sharing": {
-      "customHoursPlaceholder": "Erişim süresi (saat)",
-      "expiry": {
-        "never": "Süresiz",
-        "oneHour": "1 saat",
-        "oneDay": "24 saat",
-        "sevenDays": "7 gün",
-        "thirtyDays": "30 gün",
-        "custom": "Özel"
-      },
-      "expiryLabel": "Erişim süresi sonu",
-      "levels": {
-        "connect": {
-          "label": "Bağlan",
-          "description": "Yalnızca oturum açar: terminal, uzak masaüstü, dosya yöneticisi, tüneller ve Docker. Sunucu yapılandırmasına erişim yok."
-        },
-        "view": {
-          "label": "Görüntüle",
-          "description": "Bağlan iznine ek olarak sunucu yapılandırmasını görebilir. Gizli bilgiler asla gösterilmez."
-        },
-        "edit": {
-          "label": "Düzenle",
-          "description": "Kimlik doğrulaması gerektirmeyen sunucu ayarlarını görüntüleyin ve değiştirin. Sahibin SSH kimlik doğrulaması gizli kalır ve yalnızca sahibine özeldir."
-        },
-        "manage": {
-          "label": "Yönet",
-          "description": "Düzenleme iznine ek olarak sunucuyu başkalarıyla paylaşabilir, izin düzeylerini değiştirebilir ve erişimi iptal edebilir."
-        }
-      },
-      "noMatches": "Eşleşme bulunamadı",
-      "permissionLevelLabel": "İzin düzeyi",
-      "rolesTab": "Roller",
-      "searchPlaceholder": "Kullanıcı veya rol ara...",
-      "shareButton": "Paylaş",
-      "shareWithCount": "Paylaş ({{count}})",
-      "usersTab": "Kullanıcılar"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/uk_UA.json b/plugins/fleets/locales/translated/uk_UA.json
deleted file mode 100644
index 29399defa..000000000
--- a/plugins/fleets/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Переглянути автопарки",
-      "description": "Перегляньте автопарки, їхніх членів та інвентар."
-    },
-    "manage": {
-      "title": "Керування автопарками",
-      "description": "Створюйте, редагуйте та видаляйте автопарки, змінюйте членство та діліться автопарками з іншими користувачами або ролями."
-    },
-    "execute": {
-      "title": "Виконання дій з флотом",
-      "description": "Виконуйте команди та дії з пакетування в усьому парку пристроїв, а також передайте файли на хости-члени та з них."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Флоти",
-        "createFleet": "Створити флот",
-        "createFleetTitle": "Створити флот",
-        "editFleetTitle": "Редагувати флот",
-        "createFleetDescription": "Флот — це іменована група хостів, проти яких можна виконувати дії як проти єдиного цілого.",
-        "nameLabel": "Ім'я",
-        "namePlaceholder": "наприклад, веб-сервери",
-        "nameRequired": "Потрібно вказати назву флоту",
-        "descriptionLabel": "Опис",
-        "descriptionPlaceholder": "Додатковий опис",
-        "colorLabel": "Колір",
-        "tagRulesLabel": "Правила тегів",
-        "tagRulesPlaceholder": "prod-web, край",
-        "tagRulesHint": "Хости з будь-яким із цих тегів додаються автоматично, окрім хостів, доданих вручну.",
-        "fleetCreated": "Створено флот",
-        "fleetUpdated": "Оновлено автопарк",
-        "fleetDeleted": "Флот видалено",
-        "saveFailed": "Не вдалося зберегти флот",
-        "deleteFailed": "Не вдалося видалити автопарк",
-        "loadFailed": "Не вдалося завантажити автопарки",
-        "deleteFleetTitle": "Видалити автопарк",
-        "deleteFleetDescription": "Ви впевнені, що хочете видалити \"{{name}}\"? Це не видаляє самі хости-учасники.",
-        "searchFleets": "Пошук автопарків...",
-        "noFleets": "Поки що немає автопарків. Створіть його, щоб розпочати.",
-        "memberCount": "{{count}} хост",
-        "memberCount_other": "{{count}} хости",
-        "manageMembers": "Керування учасниками",
-        "manageMembersTitle": "Керування членами автопарку",
-        "manageMembersDescription": "Вмикати або вимикати хости зі списку статичного членства цього флоту. Хости, що відповідають правилам тегів, завжди враховуються.",
-        "searchHosts": "Пошук хостів...",
-        "noHostsFound": "Хости не знайдено",
-        "noMembers": "Цей флот ще не має учасників. Додайте хостів або встановіть правило тегу.",
-        "membersLoadFailed": "Не вдалося завантажити учасників автопарку",
-        "memberUpdateFailed": "Не вдалося оновити членство в автопарку",
-        "tabRun": "Виконати команду",
-        "tabTransfer": "Передача файлів",
-        "tabInventory": "Інвентаризація",
-        "openInventoryTab": "Відкрити у повній вкладці",
-        "tabPackages": "Пакети",
-        "runOnFleet": "Запустити флот",
-        "commandPlaceholder": "час безперебійної роботи && df -h",
-        "commandRequired": "Потрібна команда",
-        "commandInputsLabel": "Вхідні команди",
-        "commandSucceeded": "Команда успішно виконана на всіх хостах",
-        "commandPartialFailure": "{{failed}} з {{total}} хостів не вдалося",
-        "commandFailed": "Не вдалося виконати команду",
-        "resultSuccess": "Успіх",
-        "resultFailed": "Не вдалося",
-        "push": "Натисніть",
-        "pull": "Тягнути",
-        "remotePathLabel": "Віддалений шлях",
-        "remotePathRequired": "Потрібен віддалений шлях",
-        "fileLabel": "Файл",
-        "fileRequired": "Потрібен файл",
-        "pushHint": "Вибраний файл записується саме за цим шляхом на кожному хості парку.",
-        "pullHint": "Файл за цим шляхом зчитується з кожного хоста та завантажується як один zip-архів, одна папка на хост.",
-        "transferComplete": "Перенесення завершено",
-        "transferFailed": "Передача не вдалася",
-        "refreshInventory": "Оновити інвентар",
-        "inventoryLoadFailed": "Не вдалося завантажити інвентар",
-        "inventoryRefreshed": "Інвентар оновлено",
-        "inventoryRefreshFailed": "Не вдалося оновити інвентар",
-        "inventoryNoData": "Даних про інвентаризацію ще немає – оновіть сторінку, щоб зібрати їх.",
-        "inventoryHost": "Хост",
-        "inventoryCollectedCount": "{{count}}/{{total}} зібрано",
-        "inventoryOs": "ОС",
-        "inventoryKernel": "Ядро",
-        "inventoryArch": "Арка",
-        "inventoryUptime": "Час безвідмовної роботи",
-        "inventoryPackageManager": "Менеджер пакетів",
-        "inventoryCollectedAt": "Зібрано",
-        "packageActionLabel": "Дія",
-        "packageInstall": "Встановити",
-        "packageRemove": "Видалити",
-        "packageUpgradeAll": "Оновіть усі пакети",
-        "packageNameLabel": "Назва пакета",
-        "packageNameRequired": "Потрібна назва пакета",
-        "packageHint": "Потрібен доступ на рівні керування для кожного хоста та підвищення прав за допомогою збереженого пароля sudo хоста.",
-        "shareFleet": "Поділитися автопарком",
-        "shareFleetTitle": "Поділитися «{{name}}»",
-        "shareFleetDescription": "Надає доступ до хостів-членів цього флоту вибраним користувачам або ролям. Хости, додані до флоту пізніше, не надаються автоматично – надішліть їх ще раз, щоб включити їх.",
-        "shareSelectionRequired": "Виберіть принаймні одного користувача або роль",
-        "fleetSharedSuccessfully": "Спільні {{shared}} з {{total}} хост(ів) у цьому флоті",
-        "failedToShareFleet": "Не вдалося поділитися автопарком",
-        "noMembersToShare": "Цей флот ще не має хостів-учасників для спільного використання."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Флоти"
-  },
-  "hosts": {
-    "docsLink": "Переглянути документи",
-    "sharing": {
-      "customHoursPlaceholder": "Години до закінчення терміну дії доступу",
-      "expiry": {
-        "never": "Ніколи",
-        "oneHour": "1 година",
-        "oneDay": "24 години",
-        "sevenDays": "7 днів",
-        "thirtyDays": "30 днів",
-        "custom": "Користувацька"
-      },
-      "expiryLabel": "Термін дії доступу",
-      "levels": {
-        "connect": {
-          "label": "Підключитися",
-          "description": "Тільки відкриті сеанси: термінал, віддалений робочий стіл, файловий менеджер, тунелі та Docker. Без доступу до конфігурації хоста."
-        },
-        "view": {
-          "label": "Переглянути",
-          "description": "Підключитися, а також переглянути конфігурацію хоста. Секрети ніколи не відображаються."
-        },
-        "edit": {
-          "label": "Редагувати",
-          "description": "Переглядайте та змінюйте налаштування хоста без автентифікації. SSH-автентифікація власника залишається приватною та доступною лише для власника."
-        },
-        "manage": {
-          "label": "Керувати",
-          "description": "Редагувати, а також ділитися хостом з іншими, змінювати рівні дозволів та скасовувати доступ."
-        }
-      },
-      "noMatches": "Збігів не знайдено",
-      "permissionLevelLabel": "Рівень дозволів",
-      "rolesTab": "Ролі",
-      "searchPlaceholder": "Пошук користувачів або ролей...",
-      "shareButton": "Поділитися",
-      "shareWithCount": "Поділитися ({{count}})",
-      "usersTab": "Користувачі"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/vi_VN.json b/plugins/fleets/locales/translated/vi_VN.json
deleted file mode 100644
index cb76e3c9d..000000000
--- a/plugins/fleets/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "Xem đội xe",
-      "description": "Xem thông tin về các đội tàu, thành viên và trang thiết bị."
-    },
-    "manage": {
-      "title": "Quản lý đội xe",
-      "description": "Tạo, chỉnh sửa và xóa đội tàu, thay đổi thành viên và chia sẻ đội tàu với người dùng hoặc vai trò khác."
-    },
-    "execute": {
-      "title": "Thực hiện các hoạt động của hạm đội",
-      "description": "Chạy các lệnh và thực hiện các hành động gói trên toàn bộ hệ thống máy chủ, cũng như truyền tải các tập tin đến và từ các máy chủ thành viên."
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "Hạm đội",
-        "createFleet": "Tạo đội tàu",
-        "createFleetTitle": "Tạo đội tàu",
-        "editFleetTitle": "Chỉnh sửa đội xe",
-        "createFleetDescription": "Hạm đội là một nhóm máy chủ được đặt tên mà bạn có thể thực hiện các hành động chống lại chúng như một đơn vị.",
-        "nameLabel": "Tên",
-        "namePlaceholder": "Ví dụ: Máy chủ web",
-        "nameRequired": "Tên đội xe là bắt buộc",
-        "descriptionLabel": "Mô tả",
-        "descriptionPlaceholder": "Mô tả tùy chọn",
-        "colorLabel": "Màu sắc",
-        "tagRulesLabel": "Quy tắc gắn thẻ",
-        "tagRulesPlaceholder": "web sản xuất, cạnh",
-        "tagRulesHint": "Các máy chủ có bất kỳ thẻ nào trong số này sẽ tự động được thêm vào, bên cạnh các máy chủ được thêm thủ công.",
-        "fleetCreated": "Hạm đội đã tạo ra",
-        "fleetUpdated": "Đội tàu được cập nhật",
-        "fleetDeleted": "Hạm đội đã bị xóa",
-        "saveFailed": "Không thể cứu hạm đội.",
-        "deleteFailed": "Không thể xóa đội tàu",
-        "loadFailed": "Không thể tải đội xe",
-        "deleteFleetTitle": "Xóa hạm đội",
-        "deleteFleetDescription": "Bạn có chắc chắn muốn xóa \"{{name}}\" không? Thao tác này không xóa các máy chủ thành viên.",
-        "searchFleets": "Các hạm đội tìm kiếm...",
-        "noFleets": "Chưa có hạm đội nào. Hãy tạo một hạm đội để bắt đầu.",
-        "memberCount": "{{count}} máy chủ",
-        "memberCount_other": "{{count}} máy chủ",
-        "manageMembers": "Quản lý thành viên",
-        "manageMembersTitle": "Quản lý thành viên đội xe",
-        "manageMembersDescription": "Cho phép thêm hoặc xóa các máy chủ khỏi tư cách thành viên cố định của nhóm này. Các máy chủ phù hợp với quy tắc gắn thẻ luôn được bao gồm.",
-        "searchHosts": "Tìm kiếm máy chủ...",
-        "noHostsFound": "Không tìm thấy máy chủ",
-        "noMembers": "Hạm đội này chưa có thành viên nào. Thêm máy chủ hoặc thiết lập quy tắc gắn thẻ.",
-        "membersLoadFailed": "Không thể tải thông tin thành viên đội xe",
-        "memberUpdateFailed": "Không thể cập nhật thông tin thành viên đội tàu",
-        "tabRun": "Chạy lệnh",
-        "tabTransfer": "Chuyển tập tin",
-        "tabInventory": "Hàng tồn kho",
-        "openInventoryTab": "Mở ở chế độ toàn màn hình",
-        "tabPackages": "Gói",
-        "runOnFleet": "Chạy trên Fleet",
-        "commandPlaceholder": "thời gian hoạt động && df -h",
-        "commandRequired": "Cần có lệnh",
-        "commandInputsLabel": "Đầu vào lệnh",
-        "commandSucceeded": "Lệnh đã được thực thi thành công trên tất cả các máy chủ.",
-        "commandPartialFailure": "{{failed}} trong số {{total}} máy chủ đã bị lỗi",
-        "commandFailed": "Không thể chạy lệnh.",
-        "resultSuccess": "Thành công",
-        "resultFailed": "Thất bại",
-        "push": "Xô",
-        "pull": "Sự lôi kéo",
-        "remotePathLabel": "Đường dẫn từ xa",
-        "remotePathRequired": "Cần có một đường dẫn từ xa.",
-        "fileLabel": "Tệp",
-        "fileRequired": "Cần có một tập tin.",
-        "pushHint": "Tệp đã chọn sẽ được ghi vào đúng đường dẫn này trên mọi máy chủ trong hệ thống.",
-        "pullHint": "Tệp tại đường dẫn này được đọc từ mọi máy chủ và tải xuống dưới dạng một tệp zip duy nhất, mỗi máy chủ một thư mục.",
-        "transferComplete": "Truyền tải hoàn tất",
-        "transferFailed": "Truyền tải thất bại",
-        "refreshInventory": "Làm mới kho hàng",
-        "inventoryLoadFailed": "Không thể tải kho hàng",
-        "inventoryRefreshed": "Hàng tồn kho được cập nhật",
-        "inventoryRefreshFailed": "Không thể làm mới kho hàng",
-        "inventoryNoData": "Chưa có dữ liệu tồn kho - hãy làm mới trang để thu thập dữ liệu.",
-        "inventoryHost": "Máy chủ",
-        "inventoryCollectedCount": "{{count}}/{{total}} đã thu thập",
-        "inventoryOs": "Hệ điều hành",
-        "inventoryKernel": "Nhân",
-        "inventoryArch": "Vòm",
-        "inventoryUptime": "Thời gian hoạt động",
-        "inventoryPackageManager": "Trình quản lý gói",
-        "inventoryCollectedAt": "Đã thu thập",
-        "packageActionLabel": "Hành động",
-        "packageInstall": "Cài đặt",
-        "packageRemove": "Xóa",
-        "packageUpgradeAll": "Nâng cấp tất cả các gói",
-        "packageNameLabel": "Tên gói",
-        "packageNameRequired": "Cần phải có tên gói.",
-        "packageHint": "Yêu cầu quyền truy cập cấp quản trị cho mỗi máy chủ và nâng quyền bằng mật khẩu sudo được lưu trữ trên máy chủ đó.",
-        "shareFleet": "Chia sẻ đội xe",
-        "shareFleetTitle": "Chia sẻ \"{{name}}\"",
-        "shareFleetDescription": "Chia sẻ các máy chủ thành viên hiện tại của nhóm này với những người dùng hoặc vai trò đã chọn. Các máy chủ được thêm vào nhóm sau này sẽ không được chia sẻ tự động - hãy chia sẻ lại để bao gồm chúng.",
-        "shareSelectionRequired": "Chọn ít nhất một người dùng hoặc vai trò",
-        "fleetSharedSuccessfully": "Chia sẻ {{shared}} trong số {{total}} máy chủ trong hạm đội này",
-        "failedToShareFleet": "Không thể chia sẻ đội xe",
-        "noMembersToShare": "Hạm đội này hiện chưa có máy chủ thành viên nào để chia sẻ."
-      }
-    }
-  },
-  "nav": {
-    "fleets": "Hạm đội"
-  },
-  "hosts": {
-    "docsLink": "Xem tài liệu",
-    "sharing": {
-      "customHoursPlaceholder": "Số giờ cho đến khi hết hạn truy cập",
-      "expiry": {
-        "never": "Không bao giờ",
-        "oneHour": "1 giờ",
-        "oneDay": "24 giờ",
-        "sevenDays": "7 ngày",
-        "thirtyDays": "30 ngày",
-        "custom": "Tùy chỉnh"
-      },
-      "expiryLabel": "Hết hạn truy cập",
-      "levels": {
-        "connect": {
-          "label": "Kết nối",
-          "description": "Chỉ mở phiên: terminal, remote desktop, trình quản lý file, tunnel và Docker. Không truy cập cấu hình máy chủ."
-        },
-        "view": {
-          "label": "Xem",
-          "description": "Kết nối, cùng xem cấu hình máy chủ. Bí mật không bao giờ được hiển thị."
-        },
-        "edit": {
-          "label": "Chỉnh sửa",
-          "description": "Xem và chỉnh sửa cài đặt máy chủ không yêu cầu xác thực. Thông tin xác thực SSH của chủ sở hữu vẫn được giữ kín và chỉ dành riêng cho chủ sở hữu."
-        },
-        "manage": {
-          "label": "Quản lý",
-          "description": "Chỉnh sửa, và chia sẻ máy chủ với người khác, thay đổi cấp độ quyền và thu hồi quyền truy cập."
-        }
-      },
-      "noMatches": "Không tìm thấy kết quả phù hợp",
-      "permissionLevelLabel": "Cấp độ quyền",
-      "rolesTab": "Vai trò",
-      "searchPlaceholder": "Tìm kiếm người dùng hoặc vai trò...",
-      "shareButton": "Chia sẻ",
-      "shareWithCount": "Chia sẻ ({{count}})",
-      "usersTab": "Người dùng"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/zh_CN.json b/plugins/fleets/locales/translated/zh_CN.json
deleted file mode 100644
index 2ccd3f2d7..000000000
--- a/plugins/fleets/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "查看舰队",
-      "description": "查看船队、其成员和库存。"
-    },
-    "manage": {
-      "title": "管理车队",
-      "description": "创建、编辑和删除舰队，更改成员资格，并与其他用户或角色共享舰队。"
-    },
-    "execute": {
-      "title": "运行舰队行动",
-      "description": "在整个集群中运行命令和打包操作，并在其成员主机之间传输文件。"
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "舰队",
-        "createFleet": "创建舰队",
-        "createFleetTitle": "创建舰队",
-        "editFleetTitle": "编辑舰队",
-        "createFleetDescription": "舰队是一个命名的主机组，你可以将其作为一个整体来执行操作。",
-        "nameLabel": "名称",
-        "namePlaceholder": "例如：Web 服务器",
-        "nameRequired": "需要填写舰队名称。",
-        "descriptionLabel": "描述",
-        "descriptionPlaceholder": "可选描述",
-        "colorLabel": "颜色",
-        "tagRulesLabel": "标签规则",
-        "tagRulesPlaceholder": "prod-web, edge",
-        "tagRulesHint": "带有这些标签的主机将自动包含在内，此外还可以手动添加主机。",
-        "fleetCreated": "舰队已创建",
-        "fleetUpdated": "舰队已更新",
-        "fleetDeleted": "舰队已删除",
-        "saveFailed": "保存舰队失败",
-        "deleteFailed": "删除舰队失败",
-        "loadFailed": "舰队加载失败",
-        "deleteFleetTitle": "删除舰队",
-        "deleteFleetDescription": "您确定要删除“{{name}}”吗？此操作不会删除成员主机本身。",
-        "searchFleets": "搜索舰队……",
-        "noFleets": "暂无舰队。创建舰队即可开始。",
-        "memberCount": "{{count}} 台主机",
-        "memberCount_other": "{{count}} 台主机",
-        "manageMembers": "管理成员",
-        "manageMembersTitle": "管理舰队成员",
-        "manageMembersDescription": "切换主机是否加入此舰队的静态成员列表。符合标签规则的主机始终包含在内。",
-        "searchHosts": "搜索主机...",
-        "noHostsFound": "未找到主机",
-        "noMembers": "此舰队目前尚无成员。请添加主机或设置标签规则。",
-        "membersLoadFailed": "加载舰队成员失败",
-        "memberUpdateFailed": "舰队成员信息更新失败",
-        "tabRun": "运行命令",
-        "tabTransfer": "传输文件",
-        "tabInventory": "清单",
-        "openInventoryTab": "在新标签页中打开",
-        "tabPackages": "软件包",
-        "runOnFleet": "在舰队上运行",
-        "commandPlaceholder": "uptime && df -h",
-        "commandRequired": "需要一条命令",
-        "commandInputsLabel": "命令输入",
-        "commandSucceeded": "命令在所有主机上均已成功执行。",
-        "commandPartialFailure": "{{total}} 台主机中有 {{failed}} 台失败",
-        "commandFailed": "命令运行失败",
-        "resultSuccess": "成功",
-        "resultFailed": "失败",
-        "push": "推送",
-        "pull": "拉取",
-        "remotePathLabel": "远程路径",
-        "remotePathRequired": "需要远程路径",
-        "fileLabel": "文件",
-        "fileRequired": "需要选择文件",
-        "pushHint": "选定的文件将被写入舰队中每台主机上的指定路径。",
-        "pullHint": "从每个主机读取此路径下的文件，并将其下载为单个 zip 文件，每个主机一个文件夹。",
-        "transferComplete": "传输完成",
-        "transferFailed": "传输失败",
-        "refreshInventory": "刷新清单",
-        "inventoryLoadFailed": "加载清单失败",
-        "inventoryRefreshed": "清单已刷新",
-        "inventoryRefreshFailed": "刷新清单失败",
-        "inventoryNoData": "暂无清单数据 - 请刷新页面以获取数据。",
-        "inventoryHost": "主机",
-        "inventoryCollectedCount": "已收集 {{count}}/{{total}}",
-        "inventoryOs": "操作系统",
-        "inventoryKernel": "内核",
-        "inventoryArch": "架构",
-        "inventoryUptime": "运行时间",
-        "inventoryPackageManager": "软件包管理器",
-        "inventoryCollectedAt": "集",
-        "packageActionLabel": "操作",
-        "packageInstall": "安装",
-        "packageRemove": "移除",
-        "packageUpgradeAll": "升级所有软件包",
-        "packageNameLabel": "软件包名称",
-        "packageNameRequired": "必须提供软件包名称。",
-        "packageHint": "需要对每台主机具有管理级别的访问权限，并使用主机存储的 sudo 密码提升权限。",
-        "shareFleet": "共享车队",
-        "shareFleetTitle": "分享“{{name}}",
-        "shareFleetDescription": "将此集群的当前成员主机与选定的用户或角色共享。之后添加到集群的主机不会自动共享，请再次共享以将其包含在内。",
-        "shareSelectionRequired": "至少选择一个用户或角色",
-        "fleetSharedSuccessfully": "此舰队中共享的 {{shared}} 个主机 {{total}}。",
-        "failedToShareFleet": "未能共享舰队",
-        "noMembersToShare": "该船队目前还没有成员主机可供共享。"
-      }
-    }
-  },
-  "nav": {
-    "fleets": "舰队"
-  },
-  "hosts": {
-    "docsLink": "查看文档",
-    "sharing": {
-      "customHoursPlaceholder": "过期前的小时数",
-      "expiry": {
-        "never": "永不过期",
-        "oneHour": "1 小时",
-        "oneDay": "24 小时",
-        "sevenDays": "7 天",
-        "thirtyDays": "30 天",
-        "custom": "自定义"
-      },
-      "expiryLabel": "访问有效期",
-      "levels": {
-        "connect": {
-          "label": "连接",
-          "description": "仅打开会话：终端、远程桌面、文件管理器、隧道和 Docker。无权访问主机配置。"
-        },
-        "view": {
-          "label": "查看",
-          "description": "连接，并查看主机配置。凭据信息从不显示。"
-        },
-        "edit": {
-          "label": "编辑",
-          "description": "查看并修改无需身份验证的主机设置。所有者的 SSH 身份验证信息将保持私密，仅限所有者本人查看。"
-        },
-        "manage": {
-          "label": "管理",
-          "description": "编辑，并与其他用户共享主机、更改权限级别及撤销访问。"
-        }
-      },
-      "noMatches": "未找到匹配项",
-      "permissionLevelLabel": "权限级别",
-      "rolesTab": "角色",
-      "searchPlaceholder": "搜索用户或角色...",
-      "shareButton": "共享",
-      "shareWithCount": "共享（{{count}}）",
-      "usersTab": "用户"
-    }
-  }
-}
diff --git a/plugins/fleets/locales/translated/zh_TW.json b/plugins/fleets/locales/translated/zh_TW.json
deleted file mode 100644
index 34488b37f..000000000
--- a/plugins/fleets/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,150 +0,0 @@
-{
-  "permissions": {
-    "view": {
-      "title": "查看艦隊",
-      "description": "查看船隊、其成員和庫存。"
-    },
-    "manage": {
-      "title": "管理車隊",
-      "description": "建立、編輯和刪除艦隊，更改成員資格，並與其他使用者或角色共用艦隊。"
-    },
-    "execute": {
-      "title": "運行艦隊行動",
-      "description": "在整個叢集中運行命令和打包操作，並在其成員主機之間傳輸檔案。"
-    }
-  },
-  "newUi": {
-    "sidebar": {
-      "fleets": {
-        "title": "艦隊",
-        "createFleet": "創建艦隊",
-        "createFleetTitle": "創建艦隊",
-        "editFleetTitle": "編輯艦隊",
-        "createFleetDescription": "艦隊是指你可以作為一個整體對一組主機執行操作的指定名稱的主機群組。",
-        "nameLabel": "名稱",
-        "namePlaceholder": "例如，Web伺服器",
-        "nameRequired": "必須填寫艦隊名稱。",
-        "descriptionLabel": "說明",
-        "descriptionPlaceholder": "選用說明",
-        "colorLabel": "顏色",
-        "tagRulesLabel": "標籤規則",
-        "tagRulesPlaceholder": "生產網絡，邊緣",
-        "tagRulesHint": "帶有這些標籤的主機將自動包含在內，此外還可以手動新增主機。",
-        "fleetCreated": "艦隊創建",
-        "fleetUpdated": "艦隊更新",
-        "fleetDeleted": "艦隊已刪除",
-        "saveFailed": "未能拯救艦隊",
-        "deleteFailed": "刪除艦隊失敗",
-        "loadFailed": "艦隊載入失敗",
-        "deleteFleetTitle": "刪除艦隊",
-        "deleteFleetDescription": "您確定要刪除「{{name}}」嗎？此操作不會刪除成員主機本身。",
-        "searchFleets": "搜索艦隊…",
-        "noFleets": "暫無艦隊。創建艦隊即可開始。",
-        "memberCount": "{{count}} 主機",
-        "memberCount_other": "{{count}} 台主機",
-        "manageMembers": "管理成員",
-        "manageMembersTitle": "管理車隊成員",
-        "manageMembersDescription": "切換主機是否加入此艦隊的靜態成員清單。符合標籤規則的主機始終包含在內。",
-        "searchHosts": "搜尋主機...",
-        "noHostsFound": "找不到主機",
-        "noMembers": "此艦隊目前尚無成員。請新增主機或設定標籤規則。",
-        "membersLoadFailed": "載入艦隊成員失敗",
-        "memberUpdateFailed": "艦隊成員資訊更新失敗",
-        "tabRun": "運行命令",
-        "tabTransfer": "傳輸檔案",
-        "tabInventory": "存貨",
-        "openInventoryTab": "在新分頁中開啟",
-        "tabPackages": "套件",
-        "runOnFleet": "艦隊運行",
-        "commandPlaceholder": "uptime && df -h",
-        "commandRequired": "需要一條命令",
-        "commandInputsLabel": "命令輸入",
-        "commandSucceeded": "指令在所有主機上均已成功執行。",
-        "commandPartialFailure": "{{failed}} 中的 {{total}} 台主機失敗",
-        "commandFailed": "命令運行失敗",
-        "resultSuccess": "成功",
-        "resultFailed": "失敗",
-        "push": "推",
-        "pull": "拉",
-        "remotePathLabel": "遠端路徑",
-        "remotePathRequired": "需要遠端路徑",
-        "fileLabel": "檔案",
-        "fileRequired": "需要提交文件",
-        "pushHint": "選定的檔案將被寫入叢集中每台主機上的指定路徑。",
-        "pullHint": "從每個主機讀取此路徑下的文件，並將其下載為單一 zip 文件，每個主機一個資料夾。",
-        "transferComplete": "傳送完成",
-        "transferFailed": "傳送失敗",
-        "refreshInventory": "刷新庫存",
-        "inventoryLoadFailed": "載入庫存失敗",
-        "inventoryRefreshed": "庫存已刷新",
-        "inventoryRefreshFailed": "刷新庫存失敗",
-        "inventoryNoData": "暫無庫存資料 - 請重新整理頁面以取得資料。",
-        "inventoryHost": "主機",
-        "inventoryCollectedCount": "{{count}}/{{total}} 收集",
-        "inventoryOs": "作業系統",
-        "inventoryKernel": "核心",
-        "inventoryArch": "拱",
-        "inventoryUptime": "運行時間",
-        "inventoryPackageManager": "軟體套件管理器",
-        "inventoryCollectedAt": "集",
-        "packageActionLabel": "動作",
-        "packageInstall": "安裝",
-        "packageRemove": "移除",
-        "packageUpgradeAll": "升級所有套餐",
-        "packageNameLabel": "軟體包名稱",
-        "packageNameRequired": "必須提供軟體包名稱。",
-        "packageHint": "需要對每台主機具有管理層級的存取權限，並使用主機儲存的 sudo 密碼提升權限。",
-        "shareFleet": "共享車隊",
-        "shareFleetTitle": "分享「{{name}}",
-        "shareFleetDescription": "將此叢集的目前成員主機與選定的使用者或角色共用。之後新增至叢集的主機不會自動共用，請再次共用以將其包含在內。",
-        "shareSelectionRequired": "至少選擇一個使用者或角色",
-        "fleetSharedSuccessfully": "此艦隊中共享的 {{shared}} 個主機 {{total}}。",
-        "failedToShareFleet": "未能共享艦隊",
-        "noMembersToShare": "該船隊目前還沒有成員主機可供共享。"
-      }
-    }
-  },
-  "nav": {
-    "fleets": "艦隊"
-  },
-  "hosts": {
-    "docsLink": "檢視文件",
-    "sharing": {
-      "customHoursPlaceholder": "存取到期前的小時數",
-      "expiry": {
-        "never": "永不",
-        "oneHour": "1 小時",
-        "oneDay": "24 小時",
-        "sevenDays": "7 天",
-        "thirtyDays": "30 天",
-        "custom": "自訂"
-      },
-      "expiryLabel": "存取期限",
-      "levels": {
-        "connect": {
-          "label": "連線",
-          "description": "僅開啟工作階段：終端機、遠端桌面、檔案管理員、通道和 Docker。無法存取主機設定。"
-        },
-        "view": {
-          "label": "檢視",
-          "description": "連線，並可查看主機設定。機密資料絕不顯示。"
-        },
-        "edit": {
-          "label": "編輯",
-          "description": "查看並修改無需身份驗證的主機設定。所有者的 SSH 身份驗證資訊將保持私密，僅限所有者本人查看。"
-        },
-        "manage": {
-          "label": "管理",
-          "description": "編輯，並可與他人分享主機、變更權限層級及撤銷存取權。"
-        }
-      },
-      "noMatches": "找不到符合項目",
-      "permissionLevelLabel": "權限層級",
-      "rolesTab": "角色",
-      "searchPlaceholder": "搜尋使用者或角色...",
-      "shareButton": "分享",
-      "shareWithCount": "分享 ({{count}})",
-      "usersTab": "使用者"
-    }
-  }
-}
diff --git a/plugins/fleets/manifest.json b/plugins/fleets/manifest.json
deleted file mode 100644
index e11eab9d8..000000000
--- a/plugins/fleets/manifest.json
+++ /dev/null
@@ -1,77 +0,0 @@
-{
-  "id": "fleets",
-  "name": "Fleets",
-  "version": "1.0.0",
-  "description": "Group hosts into fleets and run commands, package actions and file transfers on all of them at once.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Infrastructure",
-  "icon": "Boxes",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "hosts:read",
-    "hosts:write",
-    "credentials:use",
-    "credentials:read",
-    "ssh:connect",
-    "db:own",
-    "network:serve",
-    "ui:surface"
-  ],
-  "optionalDependencies": {
-    "snippets": "^1.0.0"
-  },
-  "provides": [
-    {
-      "service": "fleets.access",
-      "version": "1.0.0",
-      "permission": "fleets.view"
-    }
-  ],
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"],
-  "contributes": {
-    "tabs": [
-      {
-        "id": "fleet-inventory",
-        "titleKey": "nav.fleets",
-        "icon": "Boxes",
-        "openFrom": ["rail"]
-      }
-    ],
-    "panels": [
-      {
-        "id": "fleets",
-        "titleKey": "nav.fleets",
-        "icon": "Boxes"
-      }
-    ],
-    "permissions": [
-      {
-        "name": "view",
-        "titleKey": "permissions.view.title",
-        "descriptionKey": "permissions.view.description",
-        "defaultRoles": ["user"]
-      },
-      {
-        "name": "manage",
-        "titleKey": "permissions.manage.title",
-        "descriptionKey": "permissions.manage.description",
-        "defaultRoles": ["user"]
-      },
-      {
-        "name": "execute",
-        "titleKey": "permissions.execute.title",
-        "descriptionKey": "permissions.execute.description",
-        "defaultRoles": ["user"]
-      }
-    ],
-    "uses": ["snippets.extractInputs"]
-  }
-}
diff --git a/plugins/fleets/migrations/mysql/0001_adopt_fleets.sql b/plugins/fleets/migrations/mysql/0001_adopt_fleets.sql
deleted file mode 100644
index b4438da9a..000000000
--- a/plugins/fleets/migrations/mysql/0001_adopt_fleets.sql
+++ /dev/null
@@ -1,42 +0,0 @@
--- fleets 0001: adopt_fleets
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `fleets` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `name` text NOT NULL,
-  `description` text,
-  `color` text,
-  `icon` text,
-  `tag_rules` text,
-  `sync_id` varchar(255) UNIQUE,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `fleets` TO `p_fleets_fleets`;
-CREATE TABLE IF NOT EXISTS `fleet_members` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `fleet_id` int NOT NULL,
-  `host_id` int NOT NULL,
-  `added_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`fleet_id`) REFERENCES `p_fleets_fleets` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `fleet_members` TO `p_fleets_members`;
-CREATE TABLE IF NOT EXISTS `fleet_inventory` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `host_id` int NOT NULL,
-  `user_id` varchar(255) NOT NULL,
-  `os_pretty_name` text,
-  `kernel` text,
-  `architecture` text,
-  `hostname` text,
-  `uptime_seconds` int,
-  `ip` text,
-  `package_manager` text,
-  `collected_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `fleet_inventory` TO `p_fleets_inventory`;
diff --git a/plugins/fleets/migrations/postgres/0001_adopt_fleets.sql b/plugins/fleets/migrations/postgres/0001_adopt_fleets.sql
deleted file mode 100644
index d54bd57f9..000000000
--- a/plugins/fleets/migrations/postgres/0001_adopt_fleets.sql
+++ /dev/null
@@ -1,46 +0,0 @@
--- fleets 0001: adopt_fleets
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "fleets" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "name" text NOT NULL,
-  "description" text,
-  "color" text,
-  "icon" text,
-  "tag_rules" text,
-  "sync_id" varchar(255) UNIQUE,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "fleets" RENAME TO "p_fleets_fleets";
-CREATE TABLE IF NOT EXISTS "fleet_members" (
-  "id" serial PRIMARY KEY,
-  "fleet_id" integer NOT NULL,
-  "host_id" integer NOT NULL,
-  "added_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("fleet_id") REFERENCES "p_fleets_fleets" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_fleet_members_fleet_host" ON "fleet_members" ("fleet_id", "host_id");
-CREATE INDEX IF NOT EXISTS "idx_fleet_members_host" ON "fleet_members" ("host_id");
-ALTER TABLE "fleet_members" RENAME TO "p_fleets_members";
-CREATE TABLE IF NOT EXISTS "fleet_inventory" (
-  "id" serial PRIMARY KEY,
-  "host_id" integer NOT NULL,
-  "user_id" varchar(255) NOT NULL,
-  "os_pretty_name" text,
-  "kernel" text,
-  "architecture" text,
-  "hostname" text,
-  "uptime_seconds" integer,
-  "ip" text,
-  "package_manager" text,
-  "collected_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_fleet_inventory_host" ON "fleet_inventory" ("host_id", "user_id");
-CREATE INDEX IF NOT EXISTS "idx_fleet_inventory_user" ON "fleet_inventory" ("user_id");
-ALTER TABLE "fleet_inventory" RENAME TO "p_fleets_inventory";
diff --git a/plugins/fleets/migrations/snapshot.json b/plugins/fleets/migrations/snapshot.json
deleted file mode 100644
index d00160606..000000000
--- a/plugins/fleets/migrations/snapshot.json
+++ /dev/null
@@ -1,141 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "fleets": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "name": {
-          "type": "text",
-          "notNull": true
-        },
-        "description": {
-          "type": "text"
-        },
-        "color": {
-          "type": "text"
-        },
-        "icon": {
-          "type": "text"
-        },
-        "tagRules": {
-          "type": "text"
-        },
-        "syncId": {
-          "type": "text",
-          "unique": true
-        },
-        "createdAt": {
-          "type": "text",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "updatedAt": {
-          "type": "text",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [],
-      "adopts": "fleets"
-    },
-    "members": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "fleetId": {
-          "type": "integer",
-          "notNull": true
-        },
-        "hostId": {
-          "type": "refHost",
-          "notNull": true
-        },
-        "addedAt": {
-          "type": "text",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_fleet_members_fleet_host",
-          "columns": ["fleetId", "hostId"],
-          "unique": true
-        },
-        {
-          "name": "idx_fleet_members_host",
-          "columns": ["hostId"]
-        }
-      ],
-      "adopts": "fleet_members"
-    },
-    "inventory": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "hostId": {
-          "type": "refHost",
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "osPrettyName": {
-          "type": "text"
-        },
-        "kernel": {
-          "type": "text"
-        },
-        "architecture": {
-          "type": "text"
-        },
-        "hostname": {
-          "type": "text"
-        },
-        "uptimeSeconds": {
-          "type": "integer"
-        },
-        "ip": {
-          "type": "text"
-        },
-        "packageManager": {
-          "type": "text"
-        },
-        "collectedAt": {
-          "type": "text",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_fleet_inventory_host",
-          "columns": ["hostId", "userId"],
-          "unique": true
-        },
-        {
-          "name": "idx_fleet_inventory_user",
-          "columns": ["userId"]
-        }
-      ],
-      "adopts": "fleet_inventory"
-    }
-  }
-}
diff --git a/plugins/fleets/migrations/sqlite/0001_adopt_fleets.sql b/plugins/fleets/migrations/sqlite/0001_adopt_fleets.sql
deleted file mode 100644
index c7d6c47b3..000000000
--- a/plugins/fleets/migrations/sqlite/0001_adopt_fleets.sql
+++ /dev/null
@@ -1,46 +0,0 @@
--- fleets 0001: adopt_fleets
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "fleets" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "name" text NOT NULL,
-  "description" text,
-  "color" text,
-  "icon" text,
-  "tag_rules" text,
-  "sync_id" text UNIQUE,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "fleets" RENAME TO "p_fleets_fleets";
-CREATE TABLE IF NOT EXISTS "fleet_members" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "fleet_id" integer NOT NULL,
-  "host_id" integer NOT NULL,
-  "added_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("fleet_id") REFERENCES "p_fleets_fleets" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_fleet_members_fleet_host" ON "fleet_members" ("fleet_id", "host_id");
-CREATE INDEX IF NOT EXISTS "idx_fleet_members_host" ON "fleet_members" ("host_id");
-ALTER TABLE "fleet_members" RENAME TO "p_fleets_members";
-CREATE TABLE IF NOT EXISTS "fleet_inventory" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "host_id" integer NOT NULL,
-  "user_id" text NOT NULL,
-  "os_pretty_name" text,
-  "kernel" text,
-  "architecture" text,
-  "hostname" text,
-  "uptime_seconds" integer,
-  "ip" text,
-  "package_manager" text,
-  "collected_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_fleet_inventory_host" ON "fleet_inventory" ("host_id", "user_id");
-CREATE INDEX IF NOT EXISTS "idx_fleet_inventory_user" ON "fleet_inventory" ("user_id");
-ALTER TABLE "fleet_inventory" RENAME TO "p_fleets_inventory";
diff --git a/plugins/fleets/package.json b/plugins/fleets/package.json
deleted file mode 100644
index 32b03b5a3..000000000
--- a/plugins/fleets/package.json
+++ /dev/null
@@ -1,36 +0,0 @@
-{
-  "name": "@termix-plugin/fleets",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "clsx": "^2.1.1",
-    "jszip": "^3.10.2",
-    "lucide-react": "^1.33.0",
-    "tailwind-merge": "^3.5.0"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "multer": "^2.3.0",
-    "react": "^19.2.8",
-    "sonner": "^2.0.8",
-    "ssh2": "^1.17.0"
-  }
-}
diff --git a/plugins/fleets/src/backend/index.ts b/plugins/fleets/src/backend/index.ts
deleted file mode 100644
index 2599c2250..000000000
--- a/plugins/fleets/src/backend/index.ts
+++ /dev/null
@@ -1,87 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { fleets, fleetMembers, fleetInventory } from "./tables.js";
-import { createFleetRepository } from "./repository.js";
-import { registerFleetRoutes } from "./routes.js";
-
-/** What other plugins get from ctx.services.get("fleets.access", {userId}). */
-export interface FleetsService {
-  /** The calling user's fleets, without resolving membership. */
-  list: () => Promise<
-    Array<{ id: number; name: string; color: string | null }>
-  >;
-  /** A fleet's effective member hosts (static membership union tag matches). */
-  members: (
-    fleetId: number,
-  ) => Promise<Array<{ id: number; name: string | null; ip: string }>>;
-  /** Creates a fleet owned by the calling user. */
-  create: (input: {
-    name: string;
-    description?: string | null;
-  }) => Promise<{ id: number; name: string }>;
-  /** Adds a host the calling user owns to a fleet's static membership. */
-  addMember: (fleetId: number, hostId: number) => Promise<void>;
-}
-
-export async function activate(ctx: PluginContext) {
-  const fleetsTable = await ctx.db.define(fleets);
-  const membersTable = await ctx.db.define(fleetMembers);
-  const inventoryTable = await ctx.db.define(fleetInventory);
-
-  const repo = createFleetRepository(
-    ctx.db,
-    ctx.hosts,
-    fleetsTable,
-    membersTable,
-    inventoryTable,
-  );
-
-  registerFleetRoutes(ctx.http.router<Router>(), repo, ctx);
-
-  // The service is gated on fleets.view; changing a fleet also needs
-  // fleets.manage, as its routes do.
-  async function requireManage(): Promise<void> {
-    if (!(await ctx.rbac.has("manage"))) {
-      throw new Error("Missing permission fleets.manage");
-    }
-  }
-
-  const service: FleetsService = {
-    list: async () => {
-      const userId = ctx.currentActor();
-      if (!userId) return [];
-      const rows = await repo.listByUser(userId);
-      return rows.map((f) => ({ id: f.id, name: f.name, color: f.color }));
-    },
-    members: async (fleetId) => {
-      const userId = ctx.currentActor();
-      if (!userId) return [];
-      const members = await repo.listEffectiveMembers(userId, fleetId);
-      return members.map((m) => ({ id: m.id, name: m.name, ip: m.ip }));
-    },
-    create: async (input) => {
-      const userId = ctx.currentActor();
-      if (!userId) throw new Error("fleets.access.create needs an actor");
-      await requireManage();
-      const created = await repo.create(userId, input);
-      return { id: created.id, name: created.name };
-    },
-    addMember: async (fleetId, hostId) => {
-      const userId = ctx.currentActor();
-      if (!userId) throw new Error("fleets.access.addMember needs an actor");
-      await requireManage();
-      // A host joins a fleet only if the caller can see it.
-      if (!(await ctx.hosts.get(hostId))) throw new Error("Host not found");
-      const fleet = await repo.findById(userId, fleetId);
-      if (!fleet) throw new Error("Fleet not found");
-      await repo.addMember(fleetId, hostId);
-    },
-  };
-  ctx.services.provide("fleets.access", service);
-
-  ctx.log.info("Fleets routes mounted at /plugin-api/fleets");
-}
-
-export async function deactivate() {
-  // Everything above was registered through ctx and is disposed by core.
-}
diff --git a/plugins/fleets/src/backend/repository.ts b/plugins/fleets/src/backend/repository.ts
deleted file mode 100644
index 79cabbb63..000000000
--- a/plugins/fleets/src/backend/repository.ts
+++ /dev/null
@@ -1,370 +0,0 @@
-import { randomUUID } from "node:crypto";
-import { and, eq, inArray } from "drizzle-orm";
-import type { PluginDatabase, PluginHosts } from "@termix/plugin-sdk/backend";
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// The tables come from ctx.db.define, which the SDK hands back untyped, and
-// the drizzle handle is the server's own. Typed at this module's edge instead.
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export interface FleetRecord {
-  id: number;
-  userId: string;
-  name: string;
-  description: string | null;
-  color: string | null;
-  icon: string | null;
-  tagRules: string | null;
-  syncId: string | null;
-  createdAt: string;
-  updatedAt: string;
-}
-
-export interface FleetCreateInput {
-  name: string;
-  description?: string | null;
-  color?: string | null;
-  icon?: string | null;
-  tagRules?: string[];
-}
-
-export interface FleetUpdateInput {
-  name?: string;
-  description?: string | null;
-  color?: string | null;
-  icon?: string | null;
-  tagRules?: string[];
-}
-
-export interface FleetInventoryRecord {
-  id: number;
-  hostId: number;
-  userId: string;
-  osPrettyName: string | null;
-  kernel: string | null;
-  architecture: string | null;
-  hostname: string | null;
-  uptimeSeconds: number | null;
-  ip: string | null;
-  packageManager: string | null;
-  collectedAt: string;
-}
-
-export interface FleetInventoryInput {
-  osPrettyName: string | null;
-  kernel: string | null;
-  architecture: string | null;
-  hostname: string | null;
-  uptimeSeconds: number | null;
-  ip: string | null;
-  packageManager: string | null;
-}
-
-function parseTagRules(raw: string | null): string[] {
-  if (!raw) return [];
-  try {
-    const parsed = JSON.parse(raw);
-    return Array.isArray(parsed)
-      ? parsed.filter((t): t is string => typeof t === "string")
-      : [];
-  } catch {
-    return [];
-  }
-}
-
-export type FleetRepository = ReturnType<typeof createFleetRepository>;
-
-/**
- * Fleets, membership and inventory, written without RETURNING so it runs the
- * same on all three engines: an insert is read back by its sync id, an
- * update by its own id.
- */
-export function createFleetRepository(
-  db: PluginDatabase,
-  hosts: PluginHosts,
-  fleetsTable: Table,
-  membersTable: Table,
-  inventoryTable: Table,
-) {
-  const client = () => db.client<Drizzle>();
-
-  async function findById(
-    userId: string,
-    fleetId: number,
-  ): Promise<FleetRecord | null> {
-    const drizzle = await client();
-    const rows = await drizzle
-      .select()
-      .from(fleetsTable)
-      .where(and(eq(fleetsTable.id, fleetId), eq(fleetsTable.userId, userId)))
-      .limit(1);
-    return (rows[0] as FleetRecord) ?? null;
-  }
-
-  async function findBySyncId(syncId: string): Promise<FleetRecord> {
-    const drizzle = await client();
-    const rows = await drizzle
-      .select()
-      .from(fleetsTable)
-      .where(eq(fleetsTable.syncId, syncId))
-      .limit(1);
-    return rows[0] as FleetRecord;
-  }
-
-  async function listStaticMemberIds(fleetId: number): Promise<number[]> {
-    const drizzle = await client();
-    const rows = await drizzle
-      .select({ hostId: membersTable.hostId })
-      .from(membersTable)
-      .where(eq(membersTable.fleetId, fleetId));
-    return rows.map((r: { hostId: number }) => r.hostId);
-  }
-
-  return {
-    async listByUser(userId: string): Promise<FleetRecord[]> {
-      const drizzle = await client();
-      return drizzle
-        .select()
-        .from(fleetsTable)
-        .where(eq(fleetsTable.userId, userId));
-    },
-
-    findById,
-    listStaticMemberIds,
-
-    async create(
-      userId: string,
-      input: FleetCreateInput,
-      now = new Date().toISOString(),
-    ): Promise<FleetRecord> {
-      const syncId = randomUUID();
-      const drizzle = await client();
-      await drizzle.insert(fleetsTable).values({
-        userId,
-        name: input.name,
-        description: input.description ?? null,
-        color: input.color ?? null,
-        icon: input.icon ?? null,
-        tagRules: input.tagRules ? JSON.stringify(input.tagRules) : null,
-        syncId,
-        createdAt: now,
-        updatedAt: now,
-      });
-      await db.persist();
-      return findBySyncId(syncId);
-    },
-
-    async update(
-      userId: string,
-      fleetId: number,
-      input: FleetUpdateInput,
-      now = new Date().toISOString(),
-    ): Promise<FleetRecord | null> {
-      const existing = await findById(userId, fleetId);
-      if (!existing) return null;
-
-      const drizzle = await client();
-      await drizzle
-        .update(fleetsTable)
-        .set({
-          name: input.name ?? existing.name,
-          description:
-            input.description === undefined
-              ? existing.description
-              : input.description,
-          color: input.color === undefined ? existing.color : input.color,
-          icon: input.icon === undefined ? existing.icon : input.icon,
-          tagRules:
-            input.tagRules === undefined
-              ? existing.tagRules
-              : JSON.stringify(input.tagRules),
-          updatedAt: now,
-        })
-        .where(
-          and(eq(fleetsTable.id, fleetId), eq(fleetsTable.userId, userId)),
-        );
-      await db.persist();
-      return findById(userId, fleetId);
-    },
-
-    async delete(userId: string, fleetId: number): Promise<boolean> {
-      const existing = await findById(userId, fleetId);
-      if (!existing) return false;
-      const drizzle = await client();
-      await drizzle
-        .delete(fleetsTable)
-        .where(
-          and(eq(fleetsTable.id, fleetId), eq(fleetsTable.userId, userId)),
-        );
-      await db.persist();
-      return true;
-    },
-
-    async addMember(
-      fleetId: number,
-      hostId: number,
-      now = new Date().toISOString(),
-    ): Promise<void> {
-      const drizzle = await client();
-      const existing = await drizzle
-        .select({ id: membersTable.id })
-        .from(membersTable)
-        .where(
-          and(
-            eq(membersTable.fleetId, fleetId),
-            eq(membersTable.hostId, hostId),
-          ),
-        )
-        .limit(1);
-      if (existing.length > 0) return;
-
-      await drizzle
-        .insert(membersTable)
-        .values({ fleetId, hostId, addedAt: now });
-      await db.persist();
-    },
-
-    async removeMember(fleetId: number, hostId: number): Promise<boolean> {
-      const drizzle = await client();
-      const existing = await drizzle
-        .select({ id: membersTable.id })
-        .from(membersTable)
-        .where(
-          and(
-            eq(membersTable.fleetId, fleetId),
-            eq(membersTable.hostId, hostId),
-          ),
-        )
-        .limit(1);
-      if (existing.length === 0) return false;
-
-      await drizzle
-        .delete(membersTable)
-        .where(
-          and(
-            eq(membersTable.fleetId, fleetId),
-            eq(membersTable.hostId, hostId),
-          ),
-        );
-      await db.persist();
-      return true;
-    },
-
-    /**
-     * Effective membership = static members rows union hosts whose
-     * comma-separated tags string intersects any tag in the fleet's
-     * tagRules. Both sets are scoped to hosts the fleet owner can see
-     * (ctx.hosts.list already resolves owner-only, since a fleet only holds
-     * one user's hosts) and deduplicated by id.
-     */
-    async listEffectiveMembers(userId: string, fleetId: number) {
-      const fleet = await findById(userId, fleetId);
-      if (!fleet) return [];
-
-      const staticIds = await listStaticMemberIds(fleetId);
-      const tagRules = parseTagRules(fleet.tagRules);
-
-      const ownedHosts = (await hosts.list()).filter(
-        (host) => host.userId === userId,
-      );
-
-      const byId = new Map<number, (typeof ownedHosts)[number]>();
-      for (const host of ownedHosts) {
-        if (staticIds.includes(host.id)) {
-          byId.set(host.id, host);
-          continue;
-        }
-        if (tagRules.length === 0) continue;
-        const hostTags = (host.tags ?? "")
-          .split(",")
-          .map((t) => t.trim())
-          .filter(Boolean);
-        if (hostTags.some((tag) => tagRules.includes(tag))) {
-          byId.set(host.id, host);
-        }
-      }
-
-      return Array.from(byId.values());
-    },
-
-    async deleteByUserId(userId: string): Promise<number> {
-      const drizzle = await client();
-      const userFleets = await drizzle
-        .select({ id: fleetsTable.id })
-        .from(fleetsTable)
-        .where(eq(fleetsTable.userId, userId));
-      if (userFleets.length === 0) return 0;
-      await drizzle.delete(fleetsTable).where(eq(fleetsTable.userId, userId));
-      await db.persist();
-      return userFleets.length;
-    },
-
-    async upsertInventory(
-      userId: string,
-      hostId: number,
-      input: FleetInventoryInput,
-      now = new Date().toISOString(),
-    ): Promise<FleetInventoryRecord> {
-      const drizzle = await client();
-      const existing = await drizzle
-        .select()
-        .from(inventoryTable)
-        .where(
-          and(
-            eq(inventoryTable.hostId, hostId),
-            eq(inventoryTable.userId, userId),
-          ),
-        )
-        .limit(1);
-
-      if (existing[0]) {
-        await drizzle
-          .update(inventoryTable)
-          .set({ ...input, collectedAt: now })
-          .where(eq(inventoryTable.id, existing[0].id));
-        await db.persist();
-        const [updated] = await drizzle
-          .select()
-          .from(inventoryTable)
-          .where(eq(inventoryTable.id, existing[0].id))
-          .limit(1);
-        return updated as FleetInventoryRecord;
-      }
-
-      await drizzle
-        .insert(inventoryTable)
-        .values({ userId, hostId, ...input, collectedAt: now });
-      await db.persist();
-      const [created] = await drizzle
-        .select()
-        .from(inventoryTable)
-        .where(
-          and(
-            eq(inventoryTable.hostId, hostId),
-            eq(inventoryTable.userId, userId),
-          ),
-        )
-        .limit(1);
-      return created as FleetInventoryRecord;
-    },
-
-    async listInventoryForHosts(
-      userId: string,
-      hostIds: number[],
-    ): Promise<FleetInventoryRecord[]> {
-      if (hostIds.length === 0) return [];
-      const drizzle = await client();
-      return drizzle
-        .select()
-        .from(inventoryTable)
-        .where(
-          and(
-            eq(inventoryTable.userId, userId),
-            inArray(inventoryTable.hostId, hostIds),
-          ),
-        );
-    },
-  };
-}
diff --git a/plugins/fleets/src/backend/routes.ts b/plugins/fleets/src/backend/routes.ts
deleted file mode 100644
index 857a291ae..000000000
--- a/plugins/fleets/src/backend/routes.ts
+++ /dev/null
@@ -1,1426 +0,0 @@
-import type { Request, Response, Router } from "express";
-import multer from "multer";
-import JSZip from "jszip";
-import type { Client, SFTPWrapper } from "ssh2";
-import type {
-  PluginContext,
-  PluginHostShareLevel,
-} from "@termix/plugin-sdk/backend";
-import {
-  execCommand,
-  detectPlatform,
-  buildPackageActionCommand,
-  buildPackageRemoveCommand,
-  isValidPackageName,
-  execElevated,
-  ElevationError,
-} from "@termix/plugin-sdk/host-commands";
-import type { FleetRepository } from "./repository.js";
-
-const FLEET_TRANSFER_MAX_BYTES = 200 * 1024 * 1024;
-const upload = multer({
-  storage: multer.memoryStorage(),
-  limits: { fileSize: FLEET_TRANSFER_MAX_BYTES },
-});
-
-function isNonEmptyString(val: unknown): val is string {
-  return typeof val === "string" && val.trim().length > 0;
-}
-
-function parseFleetId(raw: unknown): number | null {
-  const id = typeof raw === "string" ? parseInt(raw, 10) : NaN;
-  return Number.isInteger(id) ? id : null;
-}
-
-const SHARE_LEVELS: PluginHostShareLevel[] = [
-  "connect",
-  "view",
-  "edit",
-  "manage",
-];
-
-function isShareLevel(value: unknown): value is PluginHostShareLevel {
-  return SHARE_LEVELS.includes(value as PluginHostShareLevel);
-}
-
-interface ShareTargetInput {
-  type: "user" | "role";
-  id: string | number;
-}
-
-function parseShareTargets(
-  body: Record<string, unknown>,
-): ShareTargetInput[] | null {
-  const rawTargets = body.targets;
-  if (!Array.isArray(rawTargets) || rawTargets.length === 0) return null;
-
-  const targets: ShareTargetInput[] = [];
-  for (const raw of rawTargets) {
-    if (!raw || typeof raw !== "object") return null;
-    const { type, id } = raw as { type?: unknown; id?: unknown };
-    if (type === "user" && isNonEmptyString(id)) {
-      targets.push({ type: "user", id });
-    } else if (
-      type === "role" &&
-      typeof id === "number" &&
-      Number.isInteger(id)
-    ) {
-      targets.push({ type: "role", id });
-    } else {
-      return null;
-    }
-  }
-  return targets;
-}
-
-interface CommandVariables {
-  resolve: (
-    content: string,
-    host: {
-      ip?: string;
-      username?: string;
-      port?: number | string;
-      name?: string;
-    } | null,
-    inputValues?: Record<string, string>,
-  ) => string;
-}
-
-/**
- * $HOST, $USER, $PORT, $NAME and $INPUT_n in an ad hoc fleet command, through
- * the snippets plugin, which owns the syntax. Without it the command runs as
- * typed.
- */
-export function resolveCommandVariables(
-  ctx: Pick<PluginContext, "registry">,
-  command: string,
-  host: Parameters<CommandVariables["resolve"]>[1],
-  inputValues: Record<string, string> = {},
-): string {
-  const variables =
-    ctx.registry.consume<CommandVariables>("snippets.variables");
-  return variables ? variables.resolve(command, host, inputValues) : command;
-}
-
-function actor(ctx: PluginContext): string {
-  return ctx.currentActor() as string;
-}
-
-function logError(
-  ctx: PluginContext,
-  message: string,
-  error: unknown,
-  operation: string,
-): void {
-  ctx.log.error(
-    `${message} (${operation})`,
-    error instanceof Error ? error : new Error(String(error)),
-  );
-}
-
-function getSftp(client: Client): Promise<SFTPWrapper> {
-  return new Promise((resolve, reject) => {
-    client.sftp((err, sftp) => {
-      if (err) reject(err);
-      else resolve(sftp);
-    });
-  });
-}
-
-function sftpWriteFile(
-  sftp: SFTPWrapper,
-  remotePath: string,
-  data: Buffer,
-): Promise<void> {
-  return new Promise((resolve, reject) => {
-    const stream = sftp.createWriteStream(remotePath);
-    stream.on("error", reject);
-    stream.on("close", resolve);
-    stream.end(data);
-  });
-}
-
-function sftpReadFile(sftp: SFTPWrapper, remotePath: string): Promise<Buffer> {
-  return new Promise((resolve, reject) => {
-    const chunks: Buffer[] = [];
-    const stream = sftp.createReadStream(remotePath);
-    stream.on("data", (chunk: Buffer) => chunks.push(chunk));
-    stream.on("error", reject);
-    stream.on("close", () => resolve(Buffer.concat(chunks)));
-  });
-}
-
-interface FleetHostResult {
-  hostId: number;
-  hostName: string;
-  success: boolean;
-  output?: string;
-  error?: string;
-}
-
-// Kernel/arch/hostname/uptime are cheap, always-available facts not covered by
-// detectPlatform's tooling probe. One combined command keeps this to a single
-// round trip per host, same "key=value per line" shape as PLATFORM_PROBE_COMMAND.
-const INVENTORY_PROBE_COMMAND = [
-  "echo kernel=$(uname -r)",
-  "echo arch=$(uname -m)",
-  "echo hostname=$(hostname)",
-  "echo uptime_seconds=$(cut -d. -f1 /proc/uptime 2>/dev/null || echo '')",
-].join("; ");
-
-export function parseInventoryProbe(output: string): {
-  kernel: string | null;
-  architecture: string | null;
-  hostname: string | null;
-  uptimeSeconds: number | null;
-} {
-  const map = new Map<string, string>();
-  for (const line of output.split("\n")) {
-    const idx = line.indexOf("=");
-    if (idx === -1) continue;
-    map.set(line.slice(0, idx).trim(), line.slice(idx + 1).trim());
-  }
-
-  const uptimeRaw = map.get("uptime_seconds");
-  const uptimeSeconds =
-    uptimeRaw && /^\d+$/.test(uptimeRaw) ? parseInt(uptimeRaw, 10) : null;
-
-  return {
-    kernel: map.get("kernel") || null,
-    architecture: map.get("arch") || null,
-    hostname: map.get("hostname") || null,
-    uptimeSeconds,
-  };
-}
-
-/**
- * Resolves a fleet's effective members, re-checks the caller's per-host
- * access at `level` through ctx.hosts (fleet membership alone is not treated
- * as authorization - a fleet-sharee can only act on member hosts they
- * individually have access to), and runs `fn` against each authorized host
- * concurrently. One host's rejection never aborts the others.
- */
-async function runAcrossFleet(
-  ctx: PluginContext,
-  repo: FleetRepository,
-  userId: string,
-  fleetId: number,
-  level: PluginHostShareLevel,
-  fn: (host: {
-    id: number;
-    name: string;
-  }) => Promise<Pick<FleetHostResult, "success" | "output" | "error">>,
-): Promise<{ results: FleetHostResult[]; fleetFound: boolean }> {
-  const fleet = await repo.findById(userId, fleetId);
-  if (!fleet) {
-    return { results: [], fleetFound: false };
-  }
-
-  const members = await repo.listEffectiveMembers(userId, fleetId);
-
-  const settled = await Promise.allSettled(
-    members.map(async (host) => {
-      const access = await ctx.hosts.checkAccess(host.id, level);
-      if (!access.hasAccess) {
-        return {
-          hostId: host.id,
-          hostName: host.name ?? String(host.id),
-          success: false,
-          error: `Access denied (requires '${level}' level)`,
-        } satisfies FleetHostResult;
-      }
-
-      try {
-        const outcome = await fn({
-          id: host.id,
-          name: host.name ?? String(host.id),
-        });
-        return {
-          hostId: host.id,
-          hostName: host.name ?? String(host.id),
-          ...outcome,
-        } satisfies FleetHostResult;
-      } catch (err) {
-        return {
-          hostId: host.id,
-          hostName: host.name ?? String(host.id),
-          success: false,
-          error: err instanceof Error ? err.message : "Unknown error",
-        } satisfies FleetHostResult;
-      }
-    }),
-  );
-
-  const results = settled.map((r) =>
-    r.status === "fulfilled"
-      ? r.value
-      : ({
-          hostId: -1,
-          hostName: "unknown",
-          success: false,
-          error: r.reason instanceof Error ? r.reason.message : "Unknown error",
-        } satisfies FleetHostResult),
-  );
-
-  return { results, fleetFound: true };
-}
-
-/**
- * Mounts the fleets routes on the plugin's router, which core serves at
- * /plugin-api/fleets/ with auth and the actor already applied.
- */
-export function registerFleetRoutes(
-  router: Router,
-  repo: FleetRepository,
-  ctx: PluginContext,
-): void {
-  /**
-   * @openapi
-   * /plugin-api/fleets:
-   *   get:
-   *     summary: List the current user's fleets
-   *     tags:
-   *       - Fleets
-   *     responses:
-   *       200:
-   *         description: List of fleets with member counts.
-   */
-  router.get(
-    "/",
-    ctx.rbac.require("view") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      try {
-        const fleetList = await repo.listByUser(userId);
-        const withCounts = await Promise.all(
-          fleetList.map(async (fleet) => {
-            const members = await repo.listEffectiveMembers(userId, fleet.id);
-            return {
-              ...fleet,
-              tagRules: fleet.tagRules ? JSON.parse(fleet.tagRules) : [],
-              memberCount: members.length,
-            };
-          }),
-        );
-        res.json(withCounts);
-      } catch (err) {
-        logError(ctx, "Failed to list fleets", err, "fleet_list_failed");
-        res.status(500).json({ error: "Failed to list fleets" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/fleets:
-   *   post:
-   *     summary: Create a fleet
-   *     tags:
-   *       - Fleets
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               name:
-   *                 type: string
-   *               description:
-   *                 type: string
-   *               color:
-   *                 type: string
-   *               icon:
-   *                 type: string
-   *               tagRules:
-   *                 type: array
-   *                 items:
-   *                   type: string
-   *     responses:
-   *       200:
-   *         description: Fleet created.
-   *       400:
-   *         description: Invalid request body.
-   */
-  router.post(
-    "/",
-    ctx.rbac.require("manage") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const { name, description, color, icon, tagRules } = req.body ?? {};
-
-      if (!isNonEmptyString(name)) {
-        return res.status(400).json({ error: "Fleet name is required" });
-      }
-      if (
-        tagRules !== undefined &&
-        (!Array.isArray(tagRules) ||
-          tagRules.some((t) => typeof t !== "string"))
-      ) {
-        return res
-          .status(400)
-          .json({ error: "tagRules must be an array of strings" });
-      }
-
-      try {
-        const fleet = await repo.create(userId, {
-          name: name.trim(),
-          description: isNonEmptyString(description)
-            ? description.trim()
-            : null,
-          color: isNonEmptyString(color) ? color : null,
-          icon: isNonEmptyString(icon) ? icon : null,
-          tagRules,
-        });
-        res.json({ ...fleet, tagRules: tagRules ?? [] });
-      } catch (err) {
-        logError(ctx, "Failed to create fleet", err, "fleet_create_failed");
-        res.status(500).json({ error: "Failed to create fleet" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/fleets/{id}:
-   *   patch:
-   *     summary: Update a fleet
-   *     tags:
-   *       - Fleets
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Fleet updated.
-   *       404:
-   *         description: Fleet not found.
-   */
-  router.patch(
-    "/:id",
-    ctx.rbac.require("manage") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const fleetId = parseFleetId(req.params.id);
-      if (fleetId === null) {
-        return res.status(400).json({ error: "Invalid fleet ID" });
-      }
-
-      const { name, description, color, icon, tagRules } = req.body ?? {};
-      if (name !== undefined && !isNonEmptyString(name)) {
-        return res.status(400).json({ error: "Fleet name cannot be empty" });
-      }
-      if (
-        tagRules !== undefined &&
-        (!Array.isArray(tagRules) ||
-          tagRules.some((t) => typeof t !== "string"))
-      ) {
-        return res
-          .status(400)
-          .json({ error: "tagRules must be an array of strings" });
-      }
-
-      try {
-        const updated = await repo.update(userId, fleetId, {
-          name: name !== undefined ? name.trim() : undefined,
-          description,
-          color,
-          icon,
-          tagRules,
-        });
-        if (!updated) {
-          return res.status(404).json({ error: "Fleet not found" });
-        }
-        res.json({
-          ...updated,
-          tagRules: updated.tagRules ? JSON.parse(updated.tagRules) : [],
-        });
-      } catch (err) {
-        logError(ctx, "Failed to update fleet", err, "fleet_update_failed");
-        res.status(500).json({ error: "Failed to update fleet" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/fleets/{id}:
-   *   delete:
-   *     summary: Delete a fleet
-   *     tags:
-   *       - Fleets
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Fleet deleted.
-   *       404:
-   *         description: Fleet not found.
-   */
-  router.delete(
-    "/:id",
-    ctx.rbac.require("manage") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const fleetId = parseFleetId(req.params.id);
-      if (fleetId === null) {
-        return res.status(400).json({ error: "Invalid fleet ID" });
-      }
-      try {
-        const deleted = await repo.delete(userId, fleetId);
-        if (!deleted) {
-          return res.status(404).json({ error: "Fleet not found" });
-        }
-        res.json({ success: true });
-      } catch (err) {
-        logError(ctx, "Failed to delete fleet", err, "fleet_delete_failed");
-        res.status(500).json({ error: "Failed to delete fleet" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/fleets/{id}/members:
-   *   get:
-   *     summary: List the resolved effective members of a fleet
-   *     description: Returns the union of statically-added hosts and hosts matched by the fleet's tag rules, each annotated with the caller's permission level on that host.
-   *     tags:
-   *       - Fleets
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Resolved member hosts.
-   *       404:
-   *         description: Fleet not found.
-   */
-  router.get(
-    "/:id/members",
-    ctx.rbac.require("view") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const fleetId = parseFleetId(req.params.id);
-      if (fleetId === null) {
-        return res.status(400).json({ error: "Invalid fleet ID" });
-      }
-
-      try {
-        const fleet = await repo.findById(userId, fleetId);
-        if (!fleet) {
-          return res.status(404).json({ error: "Fleet not found" });
-        }
-
-        const staticIds = await repo.listStaticMemberIds(fleetId);
-        const staticIdSet = new Set(staticIds);
-        const members = await repo.listEffectiveMembers(userId, fleetId);
-
-        const annotated = await Promise.all(
-          members.map(async (host) => {
-            const access = await ctx.hosts.checkAccess(host.id, "connect");
-            return {
-              id: host.id,
-              name: host.name,
-              ip: host.ip,
-              tags: host.tags ? host.tags.split(",").filter(Boolean) : [],
-              static: staticIdSet.has(host.id),
-              permissionLevel: access.isOwner
-                ? "manage"
-                : (access.permissionLevel ?? null),
-            };
-          }),
-        );
-
-        res.json(annotated);
-      } catch (err) {
-        logError(
-          ctx,
-          "Failed to list fleet members",
-          err,
-          "fleet_members_list_failed",
-        );
-        res.status(500).json({ error: "Failed to list fleet members" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/fleets/{id}/members:
-   *   post:
-   *     summary: Add a host to a fleet's static membership
-   *     tags:
-   *       - Fleets
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               hostId:
-   *                 type: number
-   *     responses:
-   *       200:
-   *         description: Host added.
-   *       404:
-   *         description: Fleet or host not found.
-   */
-  router.post(
-    "/:id/members",
-    ctx.rbac.require("manage") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const fleetId = parseFleetId(req.params.id);
-      const hostId = Number(req.body?.hostId);
-
-      if (fleetId === null || !Number.isInteger(hostId)) {
-        return res
-          .status(400)
-          .json({ error: "Valid fleetId and hostId are required" });
-      }
-
-      try {
-        const fleet = await repo.findById(userId, fleetId);
-        if (!fleet) {
-          return res.status(404).json({ error: "Fleet not found" });
-        }
-
-        const access = await ctx.hosts.checkAccess(hostId, "connect");
-        if (!access.hasAccess) {
-          return res.status(404).json({ error: "Host not found" });
-        }
-
-        await repo.addMember(fleetId, hostId);
-        res.json({ success: true });
-      } catch (err) {
-        logError(
-          ctx,
-          "Failed to add fleet member",
-          err,
-          "fleet_member_add_failed",
-        );
-        res.status(500).json({ error: "Failed to add fleet member" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/fleets/{id}/members/{hostId}:
-   *   delete:
-   *     summary: Remove a host from a fleet's static membership
-   *     description: Only removes the static membership row - a host still matched by the fleet's tag rules remains an effective member.
-   *     tags:
-   *       - Fleets
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *       - in: path
-   *         name: hostId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Host removed.
-   *       404:
-   *         description: Fleet or membership not found.
-   */
-  router.delete(
-    "/:id/members/:hostId",
-    ctx.rbac.require("manage") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const fleetId = parseFleetId(req.params.id);
-      const hostId = parseFleetId(req.params.hostId);
-
-      if (fleetId === null || hostId === null) {
-        return res.status(400).json({ error: "Invalid fleet or host ID" });
-      }
-
-      try {
-        const fleet = await repo.findById(userId, fleetId);
-        if (!fleet) {
-          return res.status(404).json({ error: "Fleet not found" });
-        }
-
-        const removed = await repo.removeMember(fleetId, hostId);
-        if (!removed) {
-          return res.status(404).json({ error: "Membership not found" });
-        }
-        res.json({ success: true });
-      } catch (err) {
-        logError(
-          ctx,
-          "Failed to remove fleet member",
-          err,
-          "fleet_member_remove_failed",
-        );
-        res.status(500).json({ error: "Failed to remove fleet member" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/fleets/{id}/share:
-   *   post:
-   *     summary: Share a fleet's current member hosts with users or roles
-   *     description: Snapshot at share time - grants host access for every current member host to each target. Hosts added to the fleet later are not automatically shared; re-run this route to extend sharing to new members.
-   *     tags:
-   *       - Fleets
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               targets:
-   *                 type: array
-   *                 items:
-   *                   type: object
-   *               permissionLevel:
-   *                 type: string
-   *               durationHours:
-   *                 type: number
-   *     responses:
-   *       200:
-   *         description: Fleet shared.
-   *       404:
-   *         description: Fleet not found.
-   */
-  router.post(
-    "/:id/share",
-    ctx.rbac.require("manage") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const fleetId = parseFleetId(req.params.id);
-      if (fleetId === null) {
-        return res.status(400).json({ error: "Invalid fleet ID" });
-      }
-
-      try {
-        const fleet = await repo.findById(userId, fleetId);
-        if (!fleet) {
-          return res.status(404).json({ error: "Fleet not found" });
-        }
-
-        const targets = parseShareTargets(req.body ?? {});
-        if (!targets) {
-          return res.status(400).json({
-            error:
-              "targets must be a non-empty array of { type: 'user'|'role', id } entries",
-          });
-        }
-
-        const { durationHours, permissionLevel = "connect" } = req.body;
-        if (!isShareLevel(permissionLevel)) {
-          return res.status(400).json({ error: "Invalid permission level" });
-        }
-
-        const members = await repo.listEffectiveMembers(userId, fleetId);
-        const hostResults: Array<{
-          hostId: number;
-          shared: boolean;
-          reason?: string;
-        }> = [];
-
-        for (const host of members) {
-          if (targets.some((t) => t.type === "user" && t.id === host.userId)) {
-            hostResults.push({
-              hostId: host.id,
-              shared: false,
-              reason: "owner",
-            });
-            continue;
-          }
-          const result = await ctx.hosts.share(
-            host.id,
-            targets,
-            permissionLevel,
-            typeof durationHours === "number" ? durationHours : undefined,
-          );
-          hostResults.push(result);
-        }
-
-        const sharedCount = hostResults.filter((r) => r.shared).length;
-        const expiresAt =
-          typeof durationHours === "number" && durationHours > 0
-            ? new Date(
-                Date.now() + durationHours * 60 * 60 * 1000,
-              ).toISOString()
-            : null;
-
-        res.json({
-          success: true,
-          permissionLevel,
-          expiresAt,
-          hostsShared: sharedCount,
-          hostsTotal: members.length,
-          hostResults,
-        });
-      } catch (err) {
-        logError(ctx, "Failed to share fleet", err, "fleet_share_failed");
-        res.status(500).json({ error: "Failed to share fleet" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/fleets/share-targets/users:
-   *   get:
-   *     summary: Users the caller may pick as a fleet share target
-   *     tags:
-   *       - Fleets
-   *     responses:
-   *       200:
-   *         description: Users list.
-   */
-  router.get(
-    "/share-targets/users",
-    ctx.rbac.require("manage") as never,
-    async (_req: Request, res: Response) => {
-      try {
-        res.json({ users: await ctx.hosts.listUsers() });
-      } catch (err) {
-        logError(
-          ctx,
-          "Failed to list share target users",
-          err,
-          "fleet_share_targets_users_failed",
-        );
-        res.status(500).json({ error: "Failed to list users" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/fleets/share-targets/roles:
-   *   get:
-   *     summary: Non-system roles the caller may pick as a fleet share target
-   *     tags:
-   *       - Fleets
-   *     responses:
-   *       200:
-   *         description: Roles list.
-   */
-  router.get(
-    "/share-targets/roles",
-    ctx.rbac.require("manage") as never,
-    async (_req: Request, res: Response) => {
-      try {
-        res.json({ roles: await ctx.hosts.listRoles() });
-      } catch (err) {
-        logError(
-          ctx,
-          "Failed to list share target roles",
-          err,
-          "fleet_share_targets_roles_failed",
-        );
-        res.status(500).json({ error: "Failed to list roles" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/fleets/{id}/execute:
-   *   post:
-   *     summary: Run a command across every host in a fleet
-   *     description: Fans out concurrently to every effective member host the caller has edit-level access to. $HOST/$USER/$PORT/$NAME/$INPUT_n substitution is applied per host, same grammar as snippet execution. One host failing does not stop the others.
-   *     tags:
-   *       - Fleets
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               command:
-   *                 type: string
-   *               inputValues:
-   *                 type: object
-   *     responses:
-   *       200:
-   *         description: Per-host execution results.
-   *       404:
-   *         description: Fleet not found.
-   */
-  router.post(
-    "/:id/execute",
-    ctx.rbac.require("execute") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const fleetId = parseFleetId(req.params.id);
-      const { command, inputValues } = req.body ?? {};
-
-      if (fleetId === null) {
-        return res.status(400).json({ error: "Invalid fleet ID" });
-      }
-      if (!isNonEmptyString(command)) {
-        return res.status(400).json({ error: "Command is required" });
-      }
-
-      try {
-        const { results, fleetFound } = await runAcrossFleet(
-          ctx,
-          repo,
-          userId,
-          fleetId,
-          "edit",
-          async (host) => {
-            const fullHost = await ctx.hosts.get(host.id);
-            if (!fullHost) {
-              return { success: false, error: "Host not found" };
-            }
-
-            const resolvedCommand = resolveCommandVariables(
-              ctx,
-              command,
-              {
-                ip: fullHost.ip,
-                username: fullHost.username,
-                port: fullHost.port,
-                name: fullHost.name ?? undefined,
-              },
-              inputValues && typeof inputValues === "object" ? inputValues : {},
-            );
-
-            const { stdout, stderr, code } = await ctx.ssh.withConnection(
-              host.id,
-              { pool: "fleet", purpose: "fleet" },
-              (client) => execCommand(client as Client, resolvedCommand, 60000),
-            );
-
-            return {
-              success: code === 0,
-              output: stdout,
-              error:
-                code !== 0 ? stderr || `Exited with code ${code}` : undefined,
-            };
-          },
-        );
-
-        if (!fleetFound) {
-          return res.status(404).json({ error: "Fleet not found" });
-        }
-
-        res.json({ results });
-      } catch (err) {
-        logError(
-          ctx,
-          "Failed to execute fleet command",
-          err,
-          "fleet_execute_failed",
-        );
-        res.status(500).json({ error: "Failed to execute fleet command" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/fleets/{id}/transfer/push:
-   *   post:
-   *     summary: Push an uploaded file to the same remote path on every host in a fleet
-   *     description: Fans out concurrently to every effective member host the caller has edit-level access to. Single file only (v1) - the file is buffered once server-side and written to each host via SFTP.
-   *     tags:
-   *       - Fleets
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         multipart/form-data:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               file:
-   *                 type: string
-   *                 format: binary
-   *               remotePath:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Per-host push results.
-   *       404:
-   *         description: Fleet not found.
-   */
-  router.post(
-    "/:id/transfer/push",
-    ctx.rbac.require("execute") as never,
-    upload.single("file"),
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const fleetId = parseFleetId(req.params.id);
-      const remotePath = req.body?.remotePath;
-      const file = (req as Request & { file?: Express.Multer.File }).file;
-
-      if (fleetId === null) {
-        return res.status(400).json({ error: "Invalid fleet ID" });
-      }
-      if (!isNonEmptyString(remotePath)) {
-        return res.status(400).json({ error: "remotePath is required" });
-      }
-      if (!file) {
-        return res.status(400).json({ error: "A file is required" });
-      }
-
-      try {
-        const { results, fleetFound } = await runAcrossFleet(
-          ctx,
-          repo,
-          userId,
-          fleetId,
-          "edit",
-          async (host) => {
-            await ctx.ssh.withConnection(
-              host.id,
-              { pool: "fleet", purpose: "fleet" },
-              async (client) => {
-                const sftp = await getSftp(client as Client);
-                await sftpWriteFile(sftp, remotePath, file.buffer);
-              },
-            );
-
-            return { success: true, output: `Written to ${remotePath}` };
-          },
-        );
-
-        if (!fleetFound) {
-          return res.status(404).json({ error: "Fleet not found" });
-        }
-
-        res.json({ results });
-      } catch (err) {
-        logError(
-          ctx,
-          "Failed to push file across fleet",
-          err,
-          "fleet_transfer_push_failed",
-        );
-        res.status(500).json({ error: "Failed to push file across fleet" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/fleets/{id}/transfer/pull:
-   *   post:
-   *     summary: Pull the same remote path from every host in a fleet
-   *     description: Fans out concurrently to every effective member host the caller has edit-level access to, reads remotePath via SFTP from each, and returns a single zip archive with one entry per successful host (<hostName>/<filename>). Single file only (v1).
-   *     tags:
-   *       - Fleets
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               remotePath:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Zip archive containing the per-host pulled files, plus an X-Fleet-Transfer-Results header with the per-host JSON result summary.
-   *       404:
-   *         description: Fleet not found.
-   */
-  router.post(
-    "/:id/transfer/pull",
-    ctx.rbac.require("execute") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const fleetId = parseFleetId(req.params.id);
-      const { remotePath } = req.body ?? {};
-
-      if (fleetId === null) {
-        return res.status(400).json({ error: "Invalid fleet ID" });
-      }
-      if (!isNonEmptyString(remotePath)) {
-        return res.status(400).json({ error: "remotePath is required" });
-      }
-
-      try {
-        const zip = new JSZip();
-        const fileName = remotePath.split("/").filter(Boolean).pop() || "file";
-
-        const { results, fleetFound } = await runAcrossFleet(
-          ctx,
-          repo,
-          userId,
-          fleetId,
-          "edit",
-          async (host) => {
-            const data = await ctx.ssh.withConnection<Buffer>(
-              host.id,
-              { pool: "fleet", purpose: "fleet" },
-              async (client) => {
-                const sftp = await getSftp(client as Client);
-                return sftpReadFile(sftp, remotePath);
-              },
-            );
-
-            zip.file(`${host.name}/${fileName}`, data);
-            return { success: true, output: `Pulled ${data.length} bytes` };
-          },
-        );
-
-        if (!fleetFound) {
-          return res.status(404).json({ error: "Fleet not found" });
-        }
-
-        const archive = await zip.generateAsync({ type: "nodebuffer" });
-        res.setHeader("Content-Type", "application/zip");
-        res.setHeader(
-          "Content-Disposition",
-          `attachment; filename="fleet-${fleetId}-${fileName}.zip"`,
-        );
-        res.setHeader(
-          "X-Fleet-Transfer-Results",
-          Buffer.from(JSON.stringify(results)).toString("base64"),
-        );
-        res.send(archive);
-      } catch (err) {
-        logError(
-          ctx,
-          "Failed to pull file across fleet",
-          err,
-          "fleet_transfer_pull_failed",
-        );
-        res.status(500).json({ error: "Failed to pull file across fleet" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/fleets/{id}/inventory:
-   *   get:
-   *     summary: Read the last-known inventory snapshot for a fleet's members
-   *     description: No live connection - reads back whatever the most recent POST refresh stored. Latest-only per host, no history.
-   *     tags:
-   *       - Fleets
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Stored inventory rows for current members.
-   *       404:
-   *         description: Fleet not found.
-   */
-  router.get(
-    "/:id/inventory",
-    ctx.rbac.require("view") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const fleetId = parseFleetId(req.params.id);
-      if (fleetId === null) {
-        return res.status(400).json({ error: "Invalid fleet ID" });
-      }
-
-      try {
-        const fleet = await repo.findById(userId, fleetId);
-        if (!fleet) {
-          return res.status(404).json({ error: "Fleet not found" });
-        }
-
-        const members = await repo.listEffectiveMembers(userId, fleetId);
-        const inventory = await repo.listInventoryForHosts(
-          userId,
-          members.map((m) => m.id),
-        );
-
-        const byHostId = new Map(inventory.map((row) => [row.hostId, row]));
-        res.json(
-          members.map((host) => ({
-            hostId: host.id,
-            hostName: host.name,
-            inventory: byHostId.get(host.id) ?? null,
-          })),
-        );
-      } catch (err) {
-        logError(
-          ctx,
-          "Failed to read fleet inventory",
-          err,
-          "fleet_inventory_read_failed",
-        );
-        res.status(500).json({ error: "Failed to read fleet inventory" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/fleets/{id}/inventory:
-   *   post:
-   *     summary: Refresh the inventory snapshot for every host in a fleet
-   *     description: Connects to every effective member host the caller has view-level access to, collects OS/kernel/arch/hostname/uptime, and overwrites the stored latest-only snapshot per host.
-   *     tags:
-   *       - Fleets
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Per-host refresh results.
-   *       404:
-   *         description: Fleet not found.
-   */
-  router.post(
-    "/:id/inventory",
-    ctx.rbac.require("execute") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const fleetId = parseFleetId(req.params.id);
-      if (fleetId === null) {
-        return res.status(400).json({ error: "Invalid fleet ID" });
-      }
-
-      try {
-        const { results, fleetFound } = await runAcrossFleet(
-          ctx,
-          repo,
-          userId,
-          fleetId,
-          "view",
-          async (host) => {
-            const fullHost = await ctx.hosts.get(host.id);
-            if (!fullHost) {
-              return { success: false, error: "Host not found" };
-            }
-
-            const record = await ctx.ssh.withConnection(
-              host.id,
-              { pool: "fleet", purpose: "fleet" },
-              async (client) => {
-                const sshClient = client as Client;
-                const platform = await detectPlatform(sshClient);
-                const { stdout } = await execCommand(
-                  sshClient,
-                  INVENTORY_PROBE_COMMAND,
-                  15000,
-                );
-                const facts = parseInventoryProbe(stdout);
-
-                return repo.upsertInventory(userId, host.id, {
-                  osPrettyName: platform.osPrettyName,
-                  kernel: facts.kernel,
-                  architecture: facts.architecture,
-                  hostname: facts.hostname,
-                  uptimeSeconds: facts.uptimeSeconds,
-                  ip: fullHost.ip,
-                  packageManager: platform.pkg,
-                });
-              },
-            );
-
-            return {
-              success: true,
-              output: JSON.stringify(record),
-            };
-          },
-        );
-
-        if (!fleetFound) {
-          return res.status(404).json({ error: "Fleet not found" });
-        }
-
-        res.json({ results });
-      } catch (err) {
-        logError(
-          ctx,
-          "Failed to refresh fleet inventory",
-          err,
-          "fleet_inventory_refresh_failed",
-        );
-        res.status(500).json({ error: "Failed to refresh fleet inventory" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/fleets/{id}/packages:
-   *   post:
-   *     summary: Run a package action across every host in a fleet
-   *     description: Auto-detects each host's package manager (apt/dnf/yum/pacman) and runs install/remove/upgrade-all, elevating with the host's stored sudo password. Requires manage-level access per host.
-   *     tags:
-   *       - Fleets
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               action:
-   *                 type: string
-   *                 enum: [install, remove, upgrade-all]
-   *               package:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Per-host package action results.
-   *       404:
-   *         description: Fleet not found.
-   */
-  router.post(
-    "/:id/packages",
-    ctx.rbac.require("manage") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const fleetId = parseFleetId(req.params.id);
-      const { action, package: packageName } = req.body ?? {};
-
-      if (fleetId === null) {
-        return res.status(400).json({ error: "Invalid fleet ID" });
-      }
-      if (
-        action !== "install" &&
-        action !== "remove" &&
-        action !== "upgrade-all"
-      ) {
-        return res.status(400).json({ error: "Invalid action" });
-      }
-      if (action !== "upgrade-all" && !isValidPackageName(packageName)) {
-        return res.status(400).json({ error: "Invalid package name" });
-      }
-
-      try {
-        const { results, fleetFound } = await runAcrossFleet(
-          ctx,
-          repo,
-          userId,
-          fleetId,
-          "manage",
-          async (host) => {
-            // Package actions need the host's sudo password. connect() hands
-            // back a redacted host, so read it through resolveHost.
-            const full = await ctx.ssh.resolveHost(host.id);
-            const connection = await ctx.ssh.connect(host.id, {
-              purpose: "fleet",
-            });
-            try {
-              const sshClient = connection.client as Client;
-              const platform = await detectPlatform(sshClient);
-              const cmd =
-                action === "remove"
-                  ? buildPackageRemoveCommand(platform.pkg, packageName)
-                  : buildPackageActionCommand(
-                      platform.pkg,
-                      action,
-                      packageName,
-                    );
-
-              if (!cmd) {
-                return {
-                  success: false,
-                  error: platform.pkg
-                    ? `Unsupported package action '${action}' for ${platform.pkg}`
-                    : "No supported package manager detected on this host",
-                };
-              }
-
-              try {
-                const result = await execElevated(
-                  sshClient,
-                  cmd,
-                  full?.sudoPassword as string | undefined,
-                  { forceSudo: true, timeoutMs: 600000 },
-                );
-                return {
-                  success: result.code === 0,
-                  output: (result.stdout || result.stderr).slice(-8000),
-                };
-              } catch (elevationError) {
-                if (elevationError instanceof ElevationError) {
-                  return { success: false, error: elevationError.message };
-                }
-                throw elevationError;
-              }
-            } finally {
-              connection.dispose();
-            }
-          },
-        );
-
-        if (!fleetFound) {
-          return res.status(404).json({ error: "Fleet not found" });
-        }
-
-        res.json({ results });
-      } catch (err) {
-        logError(
-          ctx,
-          "Failed to run fleet package action",
-          err,
-          "fleet_packages_failed",
-        );
-        res.status(500).json({ error: "Failed to run fleet package action" });
-      }
-    },
-  );
-}
diff --git a/plugins/fleets/src/backend/tables.ts b/plugins/fleets/src/backend/tables.ts
deleted file mode 100644
index 199038d9a..000000000
--- a/plugins/fleets/src/backend/tables.ts
+++ /dev/null
@@ -1,98 +0,0 @@
-import {
-  adoptLegacyTable,
-  defineTable,
-  id,
-  integer,
-  refHost,
-  refUser,
-  text,
-} from "@termix/plugin-sdk/db";
-
-/**
- * A fleet: a named group of hosts, by static membership or tag rules.
- *
- * Adopted from core's "fleets", so column and index names are the legacy
- * ones: the rename carries the existing rows across.
- */
-export const fleets = adoptLegacyTable(
-  "fleets",
-  defineTable("fleets", {
-    id: id(),
-    userId: refUser(),
-    name: text().notNull(),
-    description: text(),
-    color: text(),
-    icon: text(),
-    // JSON array of tag strings, unioned with static members at resolution
-    // time. Kept to tag-equality matching for v1.
-    tagRules: text(),
-    syncId: text().unique(),
-    createdAt: text().notNull().defaultNow(),
-    updatedAt: text().notNull().defaultNow(),
-  }),
-);
-
-/**
- * Static fleet membership. A host can also be an effective member through a
- * tag rule match, resolved in the repository rather than stored here.
- *
- * fleetId has no declared refUser/refHost FK: the SDK's referenceable targets
- * are core's users and ssh_data tables only, not another table this same
- * plugin owns. The legacy foreign key to fleets(id) is preserved by the
- * adoption migration's CREATE TABLE, which is why the migration file keeps
- * the FOREIGN KEY clause the generator does not emit for this column.
- */
-export const fleetMembers = adoptLegacyTable(
-  "fleet_members",
-  defineTable(
-    "members",
-    {
-      id: id(),
-      fleetId: integer().notNull(),
-      hostId: refHost(),
-      addedAt: text().notNull().defaultNow(),
-    },
-    {
-      // fleetId leads the unique pair, so listing a fleet's hosts is already
-      // served. Finding the fleets a host belongs to starts from hostId.
-      uniques: [
-        {
-          name: "idx_fleet_members_fleet_host",
-          columns: ["fleetId", "hostId"],
-        },
-      ],
-      indexes: [{ name: "idx_fleet_members_host", columns: ["hostId"] }],
-    },
-  ),
-);
-
-// Latest-only inventory snapshot per host, overwritten on each refresh - no
-// historical log, matching the "latest snapshot only" scope decision.
-export const fleetInventory = adoptLegacyTable(
-  "fleet_inventory",
-  defineTable(
-    "inventory",
-    {
-      id: id(),
-      hostId: refHost(),
-      userId: refUser(),
-      osPrettyName: text(),
-      kernel: text(),
-      architecture: text(),
-      hostname: text(),
-      uptimeSeconds: integer(),
-      ip: text(),
-      packageManager: text(),
-      collectedAt: text().notNull().defaultNow(),
-    },
-    {
-      // hostId leads the unique pair; a user's whole inventory reads by userId.
-      uniques: [
-        { name: "idx_fleet_inventory_host", columns: ["hostId", "userId"] },
-      ],
-      indexes: [{ name: "idx_fleet_inventory_user", columns: ["userId"] }],
-    },
-  ),
-);
-
-export const tables = [fleets, fleetMembers, fleetInventory];
diff --git a/plugins/fleets/src/frontend/FleetInventoryTab.tsx b/plugins/fleets/src/frontend/FleetInventoryTab.tsx
deleted file mode 100644
index 9e4754dab..000000000
--- a/plugins/fleets/src/frontend/FleetInventoryTab.tsx
+++ /dev/null
@@ -1,417 +0,0 @@
-import { getErrorMessage, cn } from "./helpers.js";
-import { useEffect, useMemo, useState, useCallback } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Input, Button } from "@termix/plugin-sdk/ui";
-import { toast } from "sonner";
-import {
-  ArrowDown,
-  ArrowUp,
-  ArrowUpDown,
-  Loader2,
-  RefreshCw,
-  Search,
-  Server,
-} from "lucide-react";
-import type { FleetsApi, FleetRow, FleetInventoryEntry } from "./fleets-api.js";
-
-type SortKey =
-  | "hostName"
-  | "osPrettyName"
-  | "kernel"
-  | "architecture"
-  | "uptimeSeconds"
-  | "packageManager"
-  | "collectedAt";
-type SortDirection = "asc" | "desc";
-
-function formatUptime(seconds: number | null): string {
-  if (seconds === null) return "-";
-  const d = Math.floor(seconds / 86400);
-  const h = Math.floor((seconds % 86400) / 3600);
-  const m = Math.floor((seconds % 3600) / 60);
-  if (d > 0) return `${d}d ${h}h`;
-  if (h > 0) return `${h}h ${m}m`;
-  return `${m}m`;
-}
-
-function compareValues(
-  a: string | number | null,
-  b: string | number | null,
-): number {
-  if (a === null && b === null) return 0;
-  if (a === null) return 1;
-  if (b === null) return -1;
-  if (typeof a === "number" && typeof b === "number") return a - b;
-  return String(a).localeCompare(String(b));
-}
-
-function SortHeader({
-  label,
-  column,
-  sortKey,
-  sortDirection,
-  onSort,
-}: {
-  label: string;
-  column: SortKey;
-  sortKey: SortKey;
-  sortDirection: SortDirection;
-  onSort: (column: SortKey) => void;
-}) {
-  const active = sortKey === column;
-  return (
-    <th className="px-3 py-2 text-left font-semibold">
-      <button
-        type="button"
-        onClick={() => onSort(column)}
-        className="flex items-center gap-1 hover:text-foreground"
-      >
-        {label}
-        {active ? (
-          sortDirection === "asc" ? (
-            <ArrowUp className="size-3" />
-          ) : (
-            <ArrowDown className="size-3" />
-          )
-        ) : (
-          <ArrowUpDown className="size-3 opacity-40" />
-        )}
-      </button>
-    </th>
-  );
-}
-
-export function FleetInventoryTab({
-  api,
-  fleetId,
-  isVisible = true,
-}: {
-  api: FleetsApi;
-  fleetId?: number;
-  isVisible?: boolean;
-}) {
-  const { t } = useTranslation();
-  const [fleets, setFleets] = useState<FleetRow[]>([]);
-  const [selectedFleetId, setSelectedFleetId] = useState<number | undefined>(
-    fleetId,
-  );
-  const [entries, setEntries] = useState<FleetInventoryEntry[]>([]);
-  const [loading, setLoading] = useState(true);
-  const [refreshing, setRefreshing] = useState(false);
-  const [search, setSearch] = useState("");
-  const [sortKey, setSortKey] = useState<SortKey>("hostName");
-  const [sortDirection, setSortDirection] = useState<SortDirection>("asc");
-
-  useEffect(() => {
-    if (fleetId !== undefined) setSelectedFleetId(fleetId);
-  }, [fleetId]);
-
-  useEffect(() => {
-    api
-      .list()
-      .then(setFleets)
-      .catch(() => {});
-  }, [api]);
-
-  useEffect(() => {
-    if (!fleets.length) return;
-    if (selectedFleetId === undefined) {
-      setSelectedFleetId(fleets[0].id);
-    }
-  }, [fleets, selectedFleetId]);
-
-  const loadInventory = useCallback(async () => {
-    if (selectedFleetId === undefined) return;
-    setLoading(true);
-    try {
-      const data = await api.inventory(selectedFleetId);
-      setEntries(data);
-    } catch (error) {
-      const message = getErrorMessage(error, "");
-      toast.error(message || t("newUi.sidebar.fleets.inventoryLoadFailed"));
-    } finally {
-      setLoading(false);
-    }
-  }, [api, selectedFleetId, t]);
-
-  useEffect(() => {
-    if (!isVisible) return;
-    loadInventory();
-  }, [loadInventory, isVisible]);
-
-  async function handleRefresh() {
-    if (selectedFleetId === undefined) return;
-    setRefreshing(true);
-    try {
-      const { results } = await api.refreshInventory(selectedFleetId);
-      const failed = results.filter((r) => !r.success).length;
-      if (failed > 0) {
-        toast.warning(
-          t("newUi.sidebar.fleets.commandPartialFailure", {
-            failed,
-            total: results.length,
-          }),
-        );
-      } else {
-        toast.success(t("newUi.sidebar.fleets.inventoryRefreshed"));
-      }
-      await loadInventory();
-    } catch (error) {
-      const message = getErrorMessage(error, "");
-      toast.error(message || t("newUi.sidebar.fleets.inventoryRefreshFailed"));
-    } finally {
-      setRefreshing(false);
-    }
-  }
-
-  function handleSort(column: SortKey) {
-    if (sortKey === column) {
-      setSortDirection((prev) => (prev === "asc" ? "desc" : "asc"));
-    } else {
-      setSortKey(column);
-      setSortDirection("asc");
-    }
-  }
-
-  const selectedFleet = fleets.find((f) => f.id === selectedFleetId);
-
-  const filteredSorted = useMemo(() => {
-    const q = search.trim().toLowerCase();
-    const filtered = entries.filter(
-      (e) =>
-        !q ||
-        e.hostName.toLowerCase().includes(q) ||
-        (e.inventory?.osPrettyName ?? "").toLowerCase().includes(q) ||
-        (e.inventory?.hostname ?? "").toLowerCase().includes(q),
-    );
-
-    const dir = sortDirection === "asc" ? 1 : -1;
-    return [...filtered].sort((a, b) => {
-      let cmp = 0;
-      switch (sortKey) {
-        case "hostName":
-          cmp = compareValues(a.hostName, b.hostName);
-          break;
-        case "osPrettyName":
-          cmp = compareValues(
-            a.inventory?.osPrettyName ?? null,
-            b.inventory?.osPrettyName ?? null,
-          );
-          break;
-        case "kernel":
-          cmp = compareValues(
-            a.inventory?.kernel ?? null,
-            b.inventory?.kernel ?? null,
-          );
-          break;
-        case "architecture":
-          cmp = compareValues(
-            a.inventory?.architecture ?? null,
-            b.inventory?.architecture ?? null,
-          );
-          break;
-        case "uptimeSeconds":
-          cmp = compareValues(
-            a.inventory?.uptimeSeconds ?? null,
-            b.inventory?.uptimeSeconds ?? null,
-          );
-          break;
-        case "packageManager":
-          cmp = compareValues(
-            a.inventory?.packageManager ?? null,
-            b.inventory?.packageManager ?? null,
-          );
-          break;
-        case "collectedAt":
-          cmp = compareValues(
-            a.inventory?.collectedAt ?? null,
-            b.inventory?.collectedAt ?? null,
-          );
-          break;
-      }
-      return cmp * dir;
-    });
-  }, [entries, search, sortKey, sortDirection]);
-
-  const collectedCount = entries.filter((e) => e.inventory !== null).length;
-
-  return (
-    <div className="flex flex-col flex-1 min-h-0 overflow-hidden">
-      <div className="flex shrink-0 flex-wrap items-center gap-2 border-b border-border px-3 py-2.5">
-        <Server className="size-4 text-muted-foreground" />
-        <span className="text-xs font-semibold uppercase tracking-widest text-muted-foreground">
-          {t("newUi.sidebar.fleets.tabInventory")}
-        </span>
-
-        <select
-          className="px-2 py-1 text-[10px] bg-background border border-border text-foreground outline-none"
-          value={selectedFleetId ?? ""}
-          onChange={(e) => setSelectedFleetId(Number(e.target.value))}
-        >
-          {fleets.map((fleet) => (
-            <option key={fleet.id} value={fleet.id}>
-              {fleet.name}
-            </option>
-          ))}
-        </select>
-
-        {selectedFleet && (
-          <span className="flex gap-3 text-[11px] text-muted-foreground">
-            <span>
-              {t("newUi.sidebar.fleets.memberCount", {
-                count: entries.length,
-              })}
-            </span>
-            <span>
-              {t("newUi.sidebar.fleets.inventoryCollectedCount", {
-                count: collectedCount,
-                total: entries.length,
-              })}
-            </span>
-          </span>
-        )}
-
-        <div className="ml-auto flex items-center gap-1.5">
-          <div className="relative">
-            <Search className="pointer-events-none absolute left-2 top-1/2 size-3 -translate-y-1/2 text-muted-foreground" />
-            <Input
-              value={search}
-              onChange={(e) => setSearch(e.target.value)}
-              placeholder={t("newUi.sidebar.fleets.searchHosts")}
-              className="h-7 w-48 pl-6 text-xs"
-            />
-          </div>
-          <Button
-            size="sm"
-            variant="outline"
-            onClick={handleRefresh}
-            disabled={refreshing || selectedFleetId === undefined}
-          >
-            {refreshing ? (
-              <Loader2 className="size-3.5 mr-1.5 animate-spin" />
-            ) : (
-              <RefreshCw className="size-3.5 mr-1.5" />
-            )}
-            {t("newUi.sidebar.fleets.refreshInventory")}
-          </Button>
-        </div>
-      </div>
-
-      <div className="min-h-0 flex-1 overflow-y-auto thin-scrollbar">
-        {loading ? (
-          <div className="flex h-full items-center justify-center py-16 text-muted-foreground">
-            <Loader2 className="size-5 animate-spin" />
-          </div>
-        ) : fleets.length === 0 ? (
-          <div className="flex h-full items-center justify-center py-16 text-xs text-muted-foreground">
-            {t("newUi.sidebar.fleets.noFleets")}
-          </div>
-        ) : filteredSorted.length === 0 ? (
-          <div className="flex h-full items-center justify-center py-16 text-xs text-muted-foreground">
-            {t("newUi.sidebar.fleets.noMembers")}
-          </div>
-        ) : (
-          <table className="w-full border-collapse text-xs">
-            <thead className="sticky top-0 z-10 bg-card">
-              <tr className="border-b border-border text-[10px] uppercase tracking-wider text-muted-foreground">
-                <SortHeader
-                  label={t("newUi.sidebar.fleets.inventoryHost")}
-                  column="hostName"
-                  sortKey={sortKey}
-                  sortDirection={sortDirection}
-                  onSort={handleSort}
-                />
-                <SortHeader
-                  label={t("newUi.sidebar.fleets.inventoryOs")}
-                  column="osPrettyName"
-                  sortKey={sortKey}
-                  sortDirection={sortDirection}
-                  onSort={handleSort}
-                />
-                <SortHeader
-                  label={t("newUi.sidebar.fleets.inventoryKernel")}
-                  column="kernel"
-                  sortKey={sortKey}
-                  sortDirection={sortDirection}
-                  onSort={handleSort}
-                />
-                <SortHeader
-                  label={t("newUi.sidebar.fleets.inventoryArch")}
-                  column="architecture"
-                  sortKey={sortKey}
-                  sortDirection={sortDirection}
-                  onSort={handleSort}
-                />
-                <SortHeader
-                  label={t("newUi.sidebar.fleets.inventoryUptime")}
-                  column="uptimeSeconds"
-                  sortKey={sortKey}
-                  sortDirection={sortDirection}
-                  onSort={handleSort}
-                />
-                <SortHeader
-                  label={t("newUi.sidebar.fleets.inventoryPackageManager")}
-                  column="packageManager"
-                  sortKey={sortKey}
-                  sortDirection={sortDirection}
-                  onSort={handleSort}
-                />
-                <SortHeader
-                  label={t("newUi.sidebar.fleets.inventoryCollectedAt")}
-                  column="collectedAt"
-                  sortKey={sortKey}
-                  sortDirection={sortDirection}
-                  onSort={handleSort}
-                />
-              </tr>
-            </thead>
-            <tbody className="divide-y divide-border">
-              {filteredSorted.map((entry) => (
-                <tr
-                  key={entry.hostId}
-                  className="transition-colors hover:bg-muted/40"
-                >
-                  <td className="px-3 py-2">
-                    <div className="flex items-center gap-2">
-                      <span
-                        className={cn(
-                          "size-1.5 shrink-0",
-                          entry.inventory
-                            ? "bg-green-500"
-                            : "bg-muted-foreground/50",
-                        )}
-                      />
-                      <span className="min-w-0 truncate font-semibold">
-                        {entry.hostName}
-                      </span>
-                    </div>
-                  </td>
-                  <td className="px-3 py-2 text-muted-foreground">
-                    {entry.inventory?.osPrettyName ?? "-"}
-                  </td>
-                  <td className="px-3 py-2 font-mono text-muted-foreground">
-                    {entry.inventory?.kernel ?? "-"}
-                  </td>
-                  <td className="px-3 py-2 text-muted-foreground">
-                    {entry.inventory?.architecture ?? "-"}
-                  </td>
-                  <td className="px-3 py-2 whitespace-nowrap text-muted-foreground">
-                    {formatUptime(entry.inventory?.uptimeSeconds ?? null)}
-                  </td>
-                  <td className="px-3 py-2 text-muted-foreground">
-                    {entry.inventory?.packageManager ?? "-"}
-                  </td>
-                  <td className="px-3 py-2 whitespace-nowrap text-muted-foreground">
-                    {entry.inventory?.collectedAt
-                      ? new Date(entry.inventory.collectedAt).toLocaleString()
-                      : "-"}
-                  </td>
-                </tr>
-              ))}
-            </tbody>
-          </table>
-        )}
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/fleets/src/frontend/FleetsPanel.tsx b/plugins/fleets/src/frontend/FleetsPanel.tsx
deleted file mode 100644
index 484e9eb46..000000000
--- a/plugins/fleets/src/frontend/FleetsPanel.tsx
+++ /dev/null
@@ -1,1635 +0,0 @@
-import { getErrorMessage, type SnippetInput } from "./helpers.js";
-import { useState, useEffect, useCallback, useMemo, useRef } from "react";
-import {
-  invokeAction,
-  useTranslation,
-  useHosts,
-  type PluginHostRecord,
-} from "@termix/plugin-sdk/frontend";
-import {
-  Button,
-  Input,
-  Textarea,
-  Checkbox,
-  Badge,
-  Dialog,
-  DialogContent,
-  DialogFooter,
-  DialogHeader,
-  DialogTitle,
-  DialogDescription,
-  FOLDER_COLORS,
-  Select2,
-  DropdownMenu,
-  DropdownMenuContent,
-  DropdownMenuItem,
-  DropdownMenuTrigger,
-} from "@termix/plugin-sdk/ui";
-import { toast } from "sonner";
-import {
-  Boxes,
-  Check,
-  ChevronLeft,
-  Download,
-  ExternalLink,
-  Loader2,
-  Package,
-  Play,
-  Plus,
-  RefreshCw,
-  Search,
-  Server,
-  Settings2,
-  Share2,
-  Shield,
-  Trash2,
-  Upload,
-  User,
-  X,
-} from "lucide-react";
-import type {
-  FleetsApi,
-  FleetRow,
-  FleetMemberRow,
-  FleetHostResult,
-  FleetInventoryEntry,
-  FleetPackageAction,
-  FleetShareHostResult,
-  ShareableUser,
-  ShareableRole,
-  SharePermissionLevel,
-  ShareTarget,
-} from "./fleets-api.js";
-
-const SHARE_PERMISSION_LEVELS: SharePermissionLevel[] = [
-  "connect",
-  "view",
-  "edit",
-  "manage",
-];
-
-const SHARE_EXPIRY_PRESETS = [
-  { key: "never", hours: undefined },
-  { key: "oneHour", hours: 1 },
-  { key: "oneDay", hours: 24 },
-  { key: "sevenDays", hours: 24 * 7 },
-  { key: "thirtyDays", hours: 24 * 30 },
-  { key: "custom", hours: undefined },
-] as const;
-
-type ShareExpiryPresetKey = (typeof SHARE_EXPIRY_PRESETS)[number]["key"];
-
-function formatUptime(seconds: number | null): string {
-  if (seconds === null) return "-";
-  const d = Math.floor(seconds / 86400);
-  const h = Math.floor((seconds % 86400) / 3600);
-  const m = Math.floor((seconds % 3600) / 60);
-  if (d > 0) return `${d}d ${h}h`;
-  if (h > 0) return `${h}h ${m}m`;
-  return `${m}m`;
-}
-
-function ResultsList({ results }: { results: FleetHostResult[] }) {
-  const { t } = useTranslation();
-  if (results.length === 0) return null;
-  return (
-    <div className="flex flex-col gap-2">
-      {results.map((r) => (
-        <div
-          key={r.hostId}
-          className="flex flex-col gap-1 border border-border p-2.5"
-        >
-          <div className="flex items-center gap-2">
-            <Server className="size-3 shrink-0 text-muted-foreground" />
-            <span className="text-xs font-semibold">{r.hostName}</span>
-            <span
-              className={`ml-auto text-[10px] px-1.5 py-0.5 ${
-                r.success
-                  ? "bg-green-500/10 text-green-500"
-                  : "bg-destructive/10 text-destructive"
-              }`}
-            >
-              {r.success
-                ? t("newUi.sidebar.fleets.resultSuccess")
-                : t("newUi.sidebar.fleets.resultFailed")}
-            </span>
-          </div>
-          {(r.output || r.error) && (
-            <pre className="text-xs bg-muted/30 p-2 overflow-x-auto whitespace-pre-wrap font-mono text-muted-foreground max-h-40">
-              {r.error ? r.error : r.output}
-            </pre>
-          )}
-        </div>
-      ))}
-    </div>
-  );
-}
-
-function FleetFormDialog({
-  api,
-  open,
-  onClose,
-  fleet,
-  onSaved,
-}: {
-  api: FleetsApi;
-  open: boolean;
-  onClose: () => void;
-  fleet: FleetRow | null;
-  onSaved: () => void;
-}) {
-  const { t } = useTranslation();
-  const [name, setName] = useState("");
-  const [description, setDescription] = useState("");
-  const [color, setColor] = useState<string>(FOLDER_COLORS[0]);
-  const [tagRulesText, setTagRulesText] = useState("");
-  const [saving, setSaving] = useState(false);
-
-  useEffect(() => {
-    if (!open) return;
-    setName(fleet?.name ?? "");
-    setDescription(fleet?.description ?? "");
-    setColor(fleet?.color ?? FOLDER_COLORS[0]);
-    setTagRulesText((fleet?.tagRules ?? []).join(", "));
-  }, [open, fleet]);
-
-  async function handleSave() {
-    if (!name.trim()) {
-      toast.error(t("newUi.sidebar.fleets.nameRequired"));
-      return;
-    }
-    const tagRules = tagRulesText
-      .split(",")
-      .map((tag) => tag.trim())
-      .filter(Boolean);
-
-    setSaving(true);
-    try {
-      if (fleet) {
-        await api.update(fleet.id, {
-          name: name.trim(),
-          description: description.trim() || null,
-          color,
-          tagRules,
-        });
-        toast.success(t("newUi.sidebar.fleets.fleetUpdated"));
-      } else {
-        await api.create({
-          name: name.trim(),
-          description: description.trim() || null,
-          color,
-          tagRules,
-        });
-        toast.success(t("newUi.sidebar.fleets.fleetCreated"));
-      }
-      onSaved();
-      onClose();
-    } catch (error) {
-      const message = getErrorMessage(error, "");
-      toast.error(message || t("newUi.sidebar.fleets.saveFailed"));
-    } finally {
-      setSaving(false);
-    }
-  }
-
-  return (
-    <Dialog open={open} onOpenChange={(next) => !next && onClose()}>
-      <DialogContent className="sm:max-w-md">
-        <DialogHeader>
-          <DialogTitle>
-            {fleet
-              ? t("newUi.sidebar.fleets.editFleetTitle")
-              : t("newUi.sidebar.fleets.createFleetTitle")}
-          </DialogTitle>
-          <DialogDescription>
-            {t("newUi.sidebar.fleets.createFleetDescription")}
-          </DialogDescription>
-        </DialogHeader>
-
-        <div className="flex flex-col gap-3">
-          <div className="flex flex-col gap-1.5">
-            <label className="text-xs text-muted-foreground">
-              {t("newUi.sidebar.fleets.nameLabel")}
-            </label>
-            <Input
-              value={name}
-              onChange={(e) => setName(e.target.value)}
-              placeholder={t("newUi.sidebar.fleets.namePlaceholder")}
-              autoFocus
-            />
-          </div>
-
-          <div className="flex flex-col gap-1.5">
-            <label className="text-xs text-muted-foreground">
-              {t("newUi.sidebar.fleets.descriptionLabel")}
-            </label>
-            <Textarea
-              value={description}
-              onChange={(e) => setDescription(e.target.value)}
-              placeholder={t("newUi.sidebar.fleets.descriptionPlaceholder")}
-              rows={2}
-            />
-          </div>
-
-          <div className="flex flex-col gap-1.5">
-            <label className="text-xs text-muted-foreground">
-              {t("newUi.sidebar.fleets.colorLabel")}
-            </label>
-            <div className="flex gap-1.5">
-              {FOLDER_COLORS.map((c) => (
-                <button
-                  key={c}
-                  type="button"
-                  onClick={() => setColor(c)}
-                  className={`size-6 transition-all ${
-                    color === c
-                      ? "ring-2 ring-offset-2 ring-offset-background ring-white/50"
-                      : "opacity-75 hover:opacity-100"
-                  }`}
-                  style={{ backgroundColor: c }}
-                  aria-label={c}
-                />
-              ))}
-            </div>
-          </div>
-
-          <div className="flex flex-col gap-1.5">
-            <label className="text-xs text-muted-foreground">
-              {t("newUi.sidebar.fleets.tagRulesLabel")}
-            </label>
-            <Input
-              value={tagRulesText}
-              onChange={(e) => setTagRulesText(e.target.value)}
-              placeholder={t("newUi.sidebar.fleets.tagRulesPlaceholder")}
-            />
-            <span className="text-[11px] text-muted-foreground">
-              {t("newUi.sidebar.fleets.tagRulesHint")}
-            </span>
-          </div>
-        </div>
-
-        <DialogFooter>
-          <Button variant="outline" onClick={onClose}>
-            {t("common.cancel")}
-          </Button>
-          <Button
-            variant="outline"
-            className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-            onClick={handleSave}
-            disabled={saving}
-          >
-            {saving && <Loader2 className="size-3.5 mr-2 animate-spin" />}
-            {t("common.save")}
-          </Button>
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
-  );
-}
-
-function MemberPickerDialog({
-  api,
-  open,
-  onClose,
-  fleetId,
-  allHosts,
-  memberIds,
-  onChanged,
-}: {
-  api: FleetsApi;
-  open: boolean;
-  onClose: () => void;
-  fleetId: number;
-  allHosts: PluginHostRecord[];
-  memberIds: Set<number>;
-  onChanged: () => void;
-}) {
-  const { t } = useTranslation();
-  const [search, setSearch] = useState("");
-  const [busyId, setBusyId] = useState<number | null>(null);
-
-  const visibleHosts = useMemo(
-    () =>
-      allHosts.filter((h) =>
-        h.name.toLowerCase().includes(search.trim().toLowerCase()),
-      ),
-    [allHosts, search],
-  );
-
-  async function toggleHost(host: PluginHostRecord, isMember: boolean) {
-    const hostId = Number(host.id);
-    setBusyId(hostId);
-    try {
-      if (isMember) {
-        await api.removeMember(fleetId, hostId);
-      } else {
-        await api.addMember(fleetId, hostId);
-      }
-      onChanged();
-    } catch (error) {
-      const message = getErrorMessage(error, "");
-      toast.error(message || t("newUi.sidebar.fleets.memberUpdateFailed"));
-    } finally {
-      setBusyId(null);
-    }
-  }
-
-  return (
-    <Dialog open={open} onOpenChange={(next) => !next && onClose()}>
-      <DialogContent className="sm:max-w-md flex flex-col max-h-[80dvh]">
-        <DialogHeader>
-          <DialogTitle>
-            {t("newUi.sidebar.fleets.manageMembersTitle")}
-          </DialogTitle>
-          <DialogDescription>
-            {t("newUi.sidebar.fleets.manageMembersDescription")}
-          </DialogDescription>
-        </DialogHeader>
-
-        <div className="relative shrink-0">
-          <Search className="size-3.5 absolute left-2 top-1/2 -translate-y-1/2 text-muted-foreground" />
-          <Input
-            className="pl-7 h-8 text-xs"
-            placeholder={t("newUi.sidebar.fleets.searchHosts")}
-            value={search}
-            onChange={(e) => setSearch(e.target.value)}
-          />
-        </div>
-
-        <div className="flex-1 min-h-0 overflow-y-auto flex flex-col gap-1">
-          {visibleHosts.map((host) => {
-            const hostId = Number(host.id);
-            const isMember = memberIds.has(hostId);
-            return (
-              <label
-                key={host.id}
-                className="flex items-center gap-2 text-xs cursor-pointer py-1"
-              >
-                <Checkbox
-                  checked={isMember}
-                  disabled={busyId === hostId}
-                  onCheckedChange={() => toggleHost(host, isMember)}
-                />
-                <span className="truncate flex-1">{host.name}</span>
-                <span className="text-muted-foreground text-[11px]">
-                  {host.ip}
-                </span>
-              </label>
-            );
-          })}
-          {visibleHosts.length === 0 && (
-            <div className="text-xs text-muted-foreground text-center py-4">
-              {t("newUi.sidebar.fleets.noHostsFound")}
-            </div>
-          )}
-        </div>
-
-        <DialogFooter>
-          <Button
-            variant="outline"
-            className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-            onClick={onClose}
-          >
-            {t("common.close")}
-          </Button>
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
-  );
-}
-
-function FleetShareDialog({
-  api,
-  open,
-  onClose,
-  fleet,
-}: {
-  api: FleetsApi;
-  open: boolean;
-  onClose: () => void;
-  fleet: FleetRow | null;
-}) {
-  const { t } = useTranslation();
-  const [targetTab, setTargetTab] = useState<"user" | "role">("user");
-  const [search, setSearch] = useState("");
-  const [shareUsers, setShareUsers] = useState<ShareableUser[]>([]);
-  const [shareRoles, setShareRoles] = useState<ShareableRole[]>([]);
-  const [selectedUserIds, setSelectedUserIds] = useState<Set<string>>(
-    new Set(),
-  );
-  const [selectedRoleIds, setSelectedRoleIds] = useState<Set<number>>(
-    new Set(),
-  );
-  const [permissionLevel, setPermissionLevel] =
-    useState<SharePermissionLevel>("connect");
-  const [expiryPreset, setExpiryPreset] =
-    useState<ShareExpiryPresetKey>("never");
-  const [customHours, setCustomHours] = useState("");
-  const [submitting, setSubmitting] = useState(false);
-  const [summary, setSummary] = useState<{
-    hostsShared: number;
-    hostsTotal: number;
-    hostResults: FleetShareHostResult[];
-  } | null>(null);
-
-  useEffect(() => {
-    if (!open) return;
-    setSearch("");
-    setSelectedUserIds(new Set());
-    setSelectedRoleIds(new Set());
-    setPermissionLevel("connect");
-    setExpiryPreset("never");
-    setCustomHours("");
-    setTargetTab("user");
-    setSummary(null);
-    Promise.all([
-      api.shareTargetUsers().catch(() => ({ users: [] })),
-      api.shareTargetRoles().catch(() => ({ roles: [] })),
-    ]).then(([usersRes, rolesRes]) => {
-      setShareUsers(usersRes.users ?? []);
-      setShareRoles(rolesRes.roles ?? []);
-    });
-  }, [open, api]);
-
-  const filteredUsers = useMemo(() => {
-    const q = search.trim().toLowerCase();
-    return q
-      ? shareUsers.filter((u) => u.username.toLowerCase().includes(q))
-      : shareUsers;
-  }, [shareUsers, search]);
-
-  const filteredRoles = useMemo(() => {
-    const q = search.trim().toLowerCase();
-    return q
-      ? shareRoles.filter(
-          (r) =>
-            r.name.toLowerCase().includes(q) ||
-            (r.displayName ?? "").toLowerCase().includes(q),
-        )
-      : shareRoles;
-  }, [shareRoles, search]);
-
-  const selectedCount = selectedUserIds.size + selectedRoleIds.size;
-
-  const durationHours = (() => {
-    if (expiryPreset === "never") return undefined;
-    if (expiryPreset === "custom") {
-      const hours = Number(customHours);
-      return Number.isFinite(hours) && hours > 0 ? hours : undefined;
-    }
-    return (
-      SHARE_EXPIRY_PRESETS.find((p) => p.key === expiryPreset)?.hours ??
-      undefined
-    );
-  })();
-
-  async function handleShare() {
-    if (!fleet || selectedCount === 0) return;
-    const targets: ShareTarget[] = [
-      ...[...selectedUserIds].map(
-        (id) => ({ type: "user", id }) as ShareTarget,
-      ),
-      ...[...selectedRoleIds].map(
-        (id) => ({ type: "role", id }) as ShareTarget,
-      ),
-    ];
-
-    setSubmitting(true);
-    try {
-      const result = await api.share(fleet.id, {
-        targets,
-        permissionLevel,
-        ...(durationHours ? { durationHours } : {}),
-      });
-      setSummary({
-        hostsShared: result.hostsShared,
-        hostsTotal: result.hostsTotal,
-        hostResults: result.hostResults,
-      });
-      setSelectedUserIds(new Set());
-      setSelectedRoleIds(new Set());
-      toast.success(
-        t("newUi.sidebar.fleets.fleetSharedSuccessfully", {
-          shared: result.hostsShared,
-          total: result.hostsTotal,
-        }),
-      );
-    } catch (error) {
-      const message = getErrorMessage(error, "");
-      toast.error(message || t("newUi.sidebar.fleets.failedToShareFleet"));
-    } finally {
-      setSubmitting(false);
-    }
-  }
-
-  return (
-    <Dialog open={open} onOpenChange={(next) => !next && onClose()}>
-      <DialogContent className="sm:max-w-md flex flex-col max-h-[85dvh]">
-        <DialogHeader>
-          <DialogTitle>
-            {t("newUi.sidebar.fleets.shareFleetTitle", {
-              name: fleet?.name ?? "",
-            })}
-          </DialogTitle>
-          <DialogDescription>
-            {t("newUi.sidebar.fleets.shareFleetDescription")}
-          </DialogDescription>
-        </DialogHeader>
-
-        <div className="flex-1 min-h-0 overflow-y-auto flex flex-col gap-3">
-          {fleet && fleet.memberCount === 0 ? (
-            <div className="text-xs text-muted-foreground text-center py-6">
-              {t("newUi.sidebar.fleets.noMembersToShare")}
-            </div>
-          ) : (
-            <>
-              <div className="flex gap-1.5">
-                {(["user", "role"] as const).map((tab) => (
-                  <button
-                    key={tab}
-                    type="button"
-                    onClick={() => setTargetTab(tab)}
-                    className={`flex-1 flex items-center justify-center gap-1 px-2 py-1.5 text-[10px] font-bold uppercase tracking-widest border transition-colors ${targetTab === tab ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand" : "border-border text-muted-foreground hover:text-foreground"}`}
-                  >
-                    {tab === "user" ? (
-                      <User className="size-3 shrink-0" />
-                    ) : (
-                      <Shield className="size-3 shrink-0" />
-                    )}
-                    {tab === "user"
-                      ? t("hosts.sharing.usersTab")
-                      : t("hosts.sharing.rolesTab")}
-                    {tab === "user" && selectedUserIds.size > 0 && (
-                      <span>({selectedUserIds.size})</span>
-                    )}
-                    {tab === "role" && selectedRoleIds.size > 0 && (
-                      <span>({selectedRoleIds.size})</span>
-                    )}
-                  </button>
-                ))}
-              </div>
-
-              <div className="relative shrink-0">
-                <Search className="absolute left-2.5 top-1/2 -translate-y-1/2 size-3.5 text-muted-foreground/50" />
-                <Input
-                  placeholder={t("hosts.sharing.searchPlaceholder")}
-                  value={search}
-                  onChange={(e) => setSearch(e.target.value)}
-                  className="pl-8"
-                />
-              </div>
-
-              <div className="flex flex-col border border-border h-28 overflow-y-auto shrink-0">
-                {targetTab === "user" &&
-                  (filteredUsers.length === 0 ? (
-                    <div className="px-3 py-4 text-xs text-muted-foreground/50 text-center">
-                      {t("hosts.sharing.noMatches")}
-                    </div>
-                  ) : (
-                    filteredUsers.map((user) => {
-                      const isSelected = selectedUserIds.has(user.id);
-                      return (
-                        <button
-                          key={user.id}
-                          type="button"
-                          onClick={() =>
-                            setSelectedUserIds((prev) => {
-                              const next = new Set(prev);
-                              if (next.has(user.id)) next.delete(user.id);
-                              else next.add(user.id);
-                              return next;
-                            })
-                          }
-                          className={`flex items-center gap-2 px-2.5 py-1.5 text-xs text-left border-b border-border/50 last:border-0 transition-colors shrink-0 ${isSelected ? "bg-accent-brand/10 text-accent-brand" : "hover:bg-muted/40"}`}
-                        >
-                          <div
-                            className={`size-3.5 border flex items-center justify-center shrink-0 transition-colors ${isSelected ? "border-accent-brand bg-accent-brand" : "border-border bg-background"}`}
-                          >
-                            {isSelected && (
-                              <Check className="size-2.5 text-background" />
-                            )}
-                          </div>
-                          <User className="size-3 text-muted-foreground shrink-0" />
-                          <span className="truncate">{user.username}</span>
-                        </button>
-                      );
-                    })
-                  ))}
-                {targetTab === "role" &&
-                  (filteredRoles.length === 0 ? (
-                    <div className="px-3 py-4 text-xs text-muted-foreground/50 text-center">
-                      {t("hosts.sharing.noMatches")}
-                    </div>
-                  ) : (
-                    filteredRoles.map((role) => {
-                      const isSelected = selectedRoleIds.has(role.id);
-                      return (
-                        <button
-                          key={role.id}
-                          type="button"
-                          onClick={() =>
-                            setSelectedRoleIds((prev) => {
-                              const next = new Set(prev);
-                              if (next.has(role.id)) next.delete(role.id);
-                              else next.add(role.id);
-                              return next;
-                            })
-                          }
-                          className={`flex items-center gap-2 px-2.5 py-1.5 text-xs text-left border-b border-border/50 last:border-0 transition-colors shrink-0 ${isSelected ? "bg-accent-brand/10 text-accent-brand" : "hover:bg-muted/40"}`}
-                        >
-                          <div
-                            className={`size-3.5 border flex items-center justify-center shrink-0 transition-colors ${isSelected ? "border-accent-brand bg-accent-brand" : "border-border bg-background"}`}
-                          >
-                            {isSelected && (
-                              <Check className="size-2.5 text-background" />
-                            )}
-                          </div>
-                          <Shield className="size-3 text-muted-foreground shrink-0" />
-                          <span className="truncate">
-                            {role.displayName || role.name}
-                          </span>
-                        </button>
-                      );
-                    })
-                  ))}
-              </div>
-
-              <div className="flex items-end gap-2 shrink-0">
-                <div className="flex flex-col gap-1 flex-1 min-w-0">
-                  <span className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
-                    {t("hosts.sharing.permissionLevelLabel")}
-                  </span>
-                  <Select2
-                    value={permissionLevel}
-                    onChange={(e) =>
-                      setPermissionLevel(e.target.value as SharePermissionLevel)
-                    }
-                    className="h-8 w-full px-2.5 text-xs border border-border bg-background hover:bg-muted/40 transition-colors"
-                  >
-                    {SHARE_PERMISSION_LEVELS.map((level) => (
-                      <option key={level} value={level}>
-                        {t(`hosts.sharing.levels.${level}.label`)}
-                      </option>
-                    ))}
-                  </Select2>
-                </div>
-
-                <DropdownMenu>
-                  <DropdownMenuTrigger asChild>
-                    <button
-                      type="button"
-                      className="flex flex-col gap-1 shrink-0"
-                    >
-                      <span className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground text-left">
-                        {t("hosts.sharing.expiryLabel")}
-                      </span>
-                      <span className="h-8 flex items-center justify-center px-2.5 text-xs border border-border hover:bg-muted/40 transition-colors whitespace-nowrap">
-                        {t(`hosts.sharing.expiry.${expiryPreset}`)}
-                      </span>
-                    </button>
-                  </DropdownMenuTrigger>
-                  <DropdownMenuContent align="end" className="text-xs">
-                    {SHARE_EXPIRY_PRESETS.map((preset) => (
-                      <DropdownMenuItem
-                        key={preset.key}
-                        onClick={() => setExpiryPreset(preset.key)}
-                      >
-                        {expiryPreset === preset.key ? (
-                          <Check className="size-3 mr-1.5" />
-                        ) : (
-                          <span className="size-3 mr-1.5" />
-                        )}
-                        {t(`hosts.sharing.expiry.${preset.key}`)}
-                      </DropdownMenuItem>
-                    ))}
-                  </DropdownMenuContent>
-                </DropdownMenu>
-              </div>
-
-              <p className="text-[11px] text-muted-foreground leading-snug shrink-0">
-                {t(`hosts.sharing.levels.${permissionLevel}.description`)}
-              </p>
-
-              {expiryPreset === "custom" && (
-                <Input
-                  type="number"
-                  autoFocus
-                  placeholder={t("hosts.sharing.customHoursPlaceholder")}
-                  value={customHours}
-                  onChange={(e) => setCustomHours(e.target.value)}
-                  className="shrink-0 [appearance:textfield] [&::-webkit-outer-spin-button]:appearance-none [&::-webkit-inner-spin-button]:appearance-none"
-                />
-              )}
-
-              {summary && (
-                <div className="flex flex-col gap-1 text-xs text-muted-foreground border-t border-border pt-2 shrink-0">
-                  <span>
-                    {t("newUi.sidebar.fleets.fleetSharedSuccessfully", {
-                      shared: summary.hostsShared,
-                      total: summary.hostsTotal,
-                    })}
-                  </span>
-                  {summary.hostResults.some((r) => !r.shared) && (
-                    <div className="flex flex-col gap-0.5">
-                      {summary.hostResults
-                        .filter((r) => !r.shared)
-                        .map((r) => (
-                          <span
-                            key={r.hostId}
-                            className="text-[10px] text-destructive"
-                          >
-                            {t("newUi.sidebar.fleets.resultFailed")}: #
-                            {r.hostId} ({r.reason ?? "unknown"})
-                          </span>
-                        ))}
-                    </div>
-                  )}
-                </div>
-              )}
-            </>
-          )}
-        </div>
-
-        <DialogFooter>
-          <Button variant="outline" onClick={onClose}>
-            {t("common.close")}
-          </Button>
-          {fleet && fleet.memberCount > 0 && (
-            <Button
-              variant="outline"
-              className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-              disabled={
-                selectedCount === 0 ||
-                submitting ||
-                (expiryPreset === "custom" && !durationHours)
-              }
-              onClick={handleShare}
-            >
-              {submitting ? (
-                <Loader2 className="size-3.5 mr-1.5 animate-spin" />
-              ) : (
-                <Share2 className="size-3.5 mr-1.5" />
-              )}
-              {selectedCount > 0
-                ? t("hosts.sharing.shareWithCount", { count: selectedCount })
-                : t("hosts.sharing.shareButton")}
-            </Button>
-          )}
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
-  );
-}
-
-function RunCommandTab({ api, fleetId }: { api: FleetsApi; fleetId: number }) {
-  const { t } = useTranslation();
-  const [command, setCommand] = useState("");
-  const [inputs, setInputs] = useState<SnippetInput[]>([]);
-  const [inputValues, setInputValues] = useState<Record<string, string>>({});
-  const [running, setRunning] = useState(false);
-  const [results, setResults] = useState<FleetHostResult[] | null>(null);
-
-  // The snippets plugin owns $INPUT_n parsing; without it the command
-  // runs as typed.
-  useEffect(() => {
-    let cancelled = false;
-    void invokeAction("snippets.extractInputs", command).then((found) => {
-      if (!cancelled) setInputs(Array.isArray(found) ? found : []);
-    });
-    return () => {
-      cancelled = true;
-    };
-  }, [command]);
-
-  async function handleRun() {
-    if (!command.trim()) {
-      toast.error(t("newUi.sidebar.fleets.commandRequired"));
-      return;
-    }
-    setRunning(true);
-    setResults(null);
-    try {
-      const { results: r } = await api.runCommand(
-        fleetId,
-        command,
-        inputs.length > 0 ? inputValues : undefined,
-      );
-      setResults(r);
-      const failed = r.filter((x) => !x.success).length;
-      if (failed === 0) {
-        toast.success(t("newUi.sidebar.fleets.commandSucceeded"));
-      } else {
-        toast.warning(
-          t("newUi.sidebar.fleets.commandPartialFailure", {
-            failed,
-            total: r.length,
-          }),
-        );
-      }
-    } catch (error) {
-      const message = getErrorMessage(error, "");
-      toast.error(message || t("newUi.sidebar.fleets.commandFailed"));
-    } finally {
-      setRunning(false);
-    }
-  }
-
-  return (
-    <div className="flex flex-col gap-3">
-      <Textarea
-        value={command}
-        onChange={(e) => setCommand(e.target.value)}
-        placeholder={t("newUi.sidebar.fleets.commandPlaceholder")}
-        rows={4}
-        className="font-mono text-xs"
-      />
-      {inputs.length > 0 && (
-        <div className="flex flex-col gap-2 border border-border p-2.5">
-          <span className="text-xs text-muted-foreground">
-            {t("newUi.sidebar.fleets.commandInputsLabel")}
-          </span>
-          {inputs.map((input) => (
-            <div key={input.key} className="flex flex-col gap-1">
-              <label className="text-xs">{input.label}</label>
-              <Input
-                value={inputValues[input.key] ?? ""}
-                onChange={(e) =>
-                  setInputValues((prev) => ({
-                    ...prev,
-                    [input.key]: e.target.value,
-                  }))
-                }
-              />
-            </div>
-          ))}
-        </div>
-      )}
-      <Button
-        variant="outline"
-        onClick={handleRun}
-        disabled={running}
-        className="self-start border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-      >
-        {running ? (
-          <Loader2 className="size-3.5 mr-2 animate-spin" />
-        ) : (
-          <Play className="size-3.5 mr-2" />
-        )}
-        {t("newUi.sidebar.fleets.runOnFleet")}
-      </Button>
-      {results && <ResultsList results={results} />}
-    </div>
-  );
-}
-
-function TransferTab({ api, fleetId }: { api: FleetsApi; fleetId: number }) {
-  const { t } = useTranslation();
-  const [direction, setDirection] = useState<"push" | "pull">("push");
-  const [remotePath, setRemotePath] = useState("");
-  const [file, setFile] = useState<File | null>(null);
-  const [busy, setBusy] = useState(false);
-  const [results, setResults] = useState<FleetHostResult[] | null>(null);
-
-  async function handleTransfer() {
-    if (!remotePath.trim()) {
-      toast.error(t("newUi.sidebar.fleets.remotePathRequired"));
-      return;
-    }
-    if (direction === "push" && !file) {
-      toast.error(t("newUi.sidebar.fleets.fileRequired"));
-      return;
-    }
-
-    setBusy(true);
-    setResults(null);
-    try {
-      if (direction === "push" && file) {
-        const { results: r } = await api.pushFile(fleetId, file, remotePath);
-        setResults(r);
-      } else {
-        const {
-          results: r,
-          blob,
-          fileName,
-        } = await api.pullFile(fleetId, remotePath);
-        setResults(r);
-        const url = URL.createObjectURL(blob);
-        const a = document.createElement("a");
-        a.href = url;
-        a.download = fileName;
-        document.body.appendChild(a);
-        a.click();
-        document.body.removeChild(a);
-        URL.revokeObjectURL(url);
-      }
-      toast.success(t("newUi.sidebar.fleets.transferComplete"));
-    } catch (error) {
-      const message = getErrorMessage(error, "");
-      toast.error(message || t("newUi.sidebar.fleets.transferFailed"));
-    } finally {
-      setBusy(false);
-    }
-  }
-
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex gap-1.5">
-        <Button
-          size="sm"
-          variant={direction === "push" ? "default" : "outline"}
-          onClick={() => setDirection("push")}
-        >
-          <Upload className="size-3.5 mr-1.5" />
-          {t("newUi.sidebar.fleets.push")}
-        </Button>
-        <Button
-          size="sm"
-          variant={direction === "pull" ? "default" : "outline"}
-          onClick={() => setDirection("pull")}
-        >
-          <Download className="size-3.5 mr-1.5" />
-          {t("newUi.sidebar.fleets.pull")}
-        </Button>
-      </div>
-
-      <div className="flex flex-col gap-1.5">
-        <label className="text-xs text-muted-foreground">
-          {t("newUi.sidebar.fleets.remotePathLabel")}
-        </label>
-        <Input
-          value={remotePath}
-          onChange={(e) => setRemotePath(e.target.value)}
-          placeholder="/etc/hosts"
-          className="font-mono text-xs"
-        />
-      </div>
-
-      {direction === "push" && (
-        <div className="flex flex-col gap-1.5">
-          <label className="text-xs text-muted-foreground">
-            {t("newUi.sidebar.fleets.fileLabel")}
-          </label>
-          <Input
-            type="file"
-            onChange={(e) => setFile(e.target.files?.[0] ?? null)}
-          />
-        </div>
-      )}
-
-      <span className="text-[11px] text-muted-foreground">
-        {direction === "push"
-          ? t("newUi.sidebar.fleets.pushHint")
-          : t("newUi.sidebar.fleets.pullHint")}
-      </span>
-
-      <Button
-        variant="outline"
-        onClick={handleTransfer}
-        disabled={busy}
-        className="self-start border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-      >
-        {busy && <Loader2 className="size-3.5 mr-2 animate-spin" />}
-        {direction === "push"
-          ? t("newUi.sidebar.fleets.push")
-          : t("newUi.sidebar.fleets.pull")}
-      </Button>
-
-      {results && <ResultsList results={results} />}
-    </div>
-  );
-}
-
-function InventoryTab({ api, fleetId }: { api: FleetsApi; fleetId: number }) {
-  const { t } = useTranslation();
-  const [entries, setEntries] = useState<FleetInventoryEntry[]>([]);
-  const [loading, setLoading] = useState(true);
-  const [refreshing, setRefreshing] = useState(false);
-
-  const load = useCallback(async () => {
-    setLoading(true);
-    try {
-      const data = await api.inventory(fleetId);
-      setEntries(data);
-    } catch (error) {
-      const message = getErrorMessage(error, "");
-      toast.error(message || t("newUi.sidebar.fleets.inventoryLoadFailed"));
-    } finally {
-      setLoading(false);
-    }
-  }, [api, fleetId, t]);
-
-  useEffect(() => {
-    load();
-  }, [load]);
-
-  async function handleRefresh() {
-    setRefreshing(true);
-    try {
-      const { results } = await api.refreshInventory(fleetId);
-      const failed = results.filter((r) => !r.success).length;
-      if (failed > 0) {
-        toast.warning(
-          t("newUi.sidebar.fleets.commandPartialFailure", {
-            failed,
-            total: results.length,
-          }),
-        );
-      } else {
-        toast.success(t("newUi.sidebar.fleets.inventoryRefreshed"));
-      }
-      await load();
-    } catch (error) {
-      const message = getErrorMessage(error, "");
-      toast.error(message || t("newUi.sidebar.fleets.inventoryRefreshFailed"));
-    } finally {
-      setRefreshing(false);
-    }
-  }
-
-  return (
-    <div className="flex flex-col gap-3">
-      <Button
-        variant="outline"
-        onClick={handleRefresh}
-        disabled={refreshing}
-        size="sm"
-        className="self-start border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-      >
-        {refreshing ? (
-          <Loader2 className="size-3.5 mr-2 animate-spin" />
-        ) : (
-          <RefreshCw className="size-3.5 mr-2" />
-        )}
-        {t("newUi.sidebar.fleets.refreshInventory")}
-      </Button>
-
-      {loading ? (
-        <div className="flex items-center justify-center py-8 text-muted-foreground">
-          <Loader2 className="size-4 animate-spin" />
-        </div>
-      ) : (
-        <div className="flex flex-col gap-2">
-          {entries.map((entry) => (
-            <div
-              key={entry.hostId}
-              className="flex flex-col gap-1 border border-border p-2.5"
-            >
-              <div className="flex items-center gap-2">
-                <Server className="size-3 shrink-0 text-muted-foreground" />
-                <span className="text-xs font-semibold">{entry.hostName}</span>
-              </div>
-              {entry.inventory ? (
-                <div className="grid grid-cols-2 gap-x-4 gap-y-0.5 text-[11px] text-muted-foreground pl-5">
-                  <span>
-                    {t("newUi.sidebar.fleets.inventoryOs")}:{" "}
-                    {entry.inventory.osPrettyName ?? "-"}
-                  </span>
-                  <span>
-                    {t("newUi.sidebar.fleets.inventoryKernel")}:{" "}
-                    {entry.inventory.kernel ?? "-"}
-                  </span>
-                  <span>
-                    {t("newUi.sidebar.fleets.inventoryArch")}:{" "}
-                    {entry.inventory.architecture ?? "-"}
-                  </span>
-                  <span>
-                    {t("newUi.sidebar.fleets.inventoryUptime")}:{" "}
-                    {formatUptime(entry.inventory.uptimeSeconds)}
-                  </span>
-                  <span>
-                    {t("newUi.sidebar.fleets.inventoryPackageManager")}:{" "}
-                    {entry.inventory.packageManager ?? "-"}
-                  </span>
-                  <span>
-                    {t("newUi.sidebar.fleets.inventoryCollectedAt")}:{" "}
-                    {new Date(entry.inventory.collectedAt).toLocaleString()}
-                  </span>
-                </div>
-              ) : (
-                <span className="text-[11px] text-muted-foreground pl-5">
-                  {t("newUi.sidebar.fleets.inventoryNoData")}
-                </span>
-              )}
-            </div>
-          ))}
-        </div>
-      )}
-    </div>
-  );
-}
-
-function PackagesTab({ api, fleetId }: { api: FleetsApi; fleetId: number }) {
-  const { t } = useTranslation();
-  const [action, setAction] = useState<FleetPackageAction>("install");
-  const [packageName, setPackageName] = useState("");
-  const [running, setRunning] = useState(false);
-  const [results, setResults] = useState<FleetHostResult[] | null>(null);
-
-  async function handleRun() {
-    if (action !== "upgrade-all" && !packageName.trim()) {
-      toast.error(t("newUi.sidebar.fleets.packageNameRequired"));
-      return;
-    }
-    setRunning(true);
-    setResults(null);
-    try {
-      const { results: r } = await api.runPackageAction(
-        fleetId,
-        action,
-        action === "upgrade-all" ? undefined : packageName.trim(),
-      );
-      setResults(r);
-      const failed = r.filter((x) => !x.success).length;
-      if (failed === 0) {
-        toast.success(t("newUi.sidebar.fleets.commandSucceeded"));
-      } else {
-        toast.warning(
-          t("newUi.sidebar.fleets.commandPartialFailure", {
-            failed,
-            total: r.length,
-          }),
-        );
-      }
-    } catch (error) {
-      const message = getErrorMessage(error, "");
-      toast.error(message || t("newUi.sidebar.fleets.commandFailed"));
-    } finally {
-      setRunning(false);
-    }
-  }
-
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col gap-1.5">
-        <label className="text-xs text-muted-foreground">
-          {t("newUi.sidebar.fleets.packageActionLabel")}
-        </label>
-        <select
-          className="px-2 py-1.5 text-xs bg-background border border-border text-foreground outline-none"
-          value={action}
-          onChange={(e) => setAction(e.target.value as FleetPackageAction)}
-        >
-          <option value="install">
-            {t("newUi.sidebar.fleets.packageInstall")}
-          </option>
-          <option value="remove">
-            {t("newUi.sidebar.fleets.packageRemove")}
-          </option>
-          <option value="upgrade-all">
-            {t("newUi.sidebar.fleets.packageUpgradeAll")}
-          </option>
-        </select>
-      </div>
-
-      {action !== "upgrade-all" && (
-        <div className="flex flex-col gap-1.5">
-          <label className="text-xs text-muted-foreground">
-            {t("newUi.sidebar.fleets.packageNameLabel")}
-          </label>
-          <Input
-            value={packageName}
-            onChange={(e) => setPackageName(e.target.value)}
-            placeholder="curl"
-            className="font-mono text-xs"
-          />
-        </div>
-      )}
-
-      <span className="text-[11px] text-muted-foreground">
-        {t("newUi.sidebar.fleets.packageHint")}
-      </span>
-
-      <Button
-        variant="outline"
-        onClick={handleRun}
-        disabled={running}
-        className="self-start border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-      >
-        {running ? (
-          <Loader2 className="size-3.5 mr-2 animate-spin" />
-        ) : (
-          <Package className="size-3.5 mr-2" />
-        )}
-        {t("newUi.sidebar.fleets.runOnFleet")}
-      </Button>
-
-      {results && <ResultsList results={results} />}
-    </div>
-  );
-}
-
-type FleetActionView = "run" | "transfer" | "inventory" | "packages";
-
-function FleetDetail({
-  api,
-  fleet,
-  allHosts,
-  onBack,
-  onFleetChanged,
-  onOpenFleetInventory,
-}: {
-  api: FleetsApi;
-  fleet: FleetRow;
-  allHosts: PluginHostRecord[];
-  onBack: () => void;
-  onFleetChanged: () => void;
-  onOpenFleetInventory?: (fleetId: number) => void;
-}) {
-  const { t } = useTranslation();
-  const [members, setMembers] = useState<FleetMemberRow[]>([]);
-  const [loadingMembers, setLoadingMembers] = useState(true);
-  const [pickerOpen, setPickerOpen] = useState(false);
-  const [shareOpen, setShareOpen] = useState(false);
-  const [actionView, setActionView] = useState<FleetActionView>("run");
-
-  const loadMembers = useCallback(async () => {
-    setLoadingMembers(true);
-    try {
-      const data = await api.members(fleet.id);
-      setMembers(data);
-    } catch (error) {
-      const message = getErrorMessage(error, "");
-      toast.error(message || t("newUi.sidebar.fleets.membersLoadFailed"));
-    } finally {
-      setLoadingMembers(false);
-    }
-  }, [api, fleet.id, t]);
-
-  useEffect(() => {
-    loadMembers();
-  }, [loadMembers]);
-
-  const memberIds = useMemo(() => new Set(members.map((m) => m.id)), [members]);
-
-  function handleMembersChanged() {
-    loadMembers();
-    onFleetChanged();
-  }
-
-  return (
-    <div className="flex flex-col flex-1 min-h-0">
-      <div className="flex flex-col gap-2 p-3 border-b border-border shrink-0">
-        <div className="flex min-w-0 items-center gap-2">
-          <Button
-            variant="ghost"
-            size="sm"
-            className="shrink-0"
-            onClick={onBack}
-          >
-            <ChevronLeft className="size-4" />
-          </Button>
-          <span
-            className="size-2.5 shrink-0"
-            style={{ backgroundColor: fleet.color ?? "#6b7280" }}
-          />
-          <span className="min-w-0 flex-1 truncate text-sm font-semibold">
-            {fleet.name}
-          </span>
-          <Badge variant="secondary" className="shrink-0">
-            {t("newUi.sidebar.fleets.memberCount", { count: members.length })}
-          </Badge>
-        </div>
-        <div className="flex min-w-0 gap-2">
-          <Button
-            variant="outline"
-            size="sm"
-            className="min-w-0 flex-1"
-            onClick={() => setShareOpen(true)}
-          >
-            <Share2 className="size-3.5 shrink-0" />
-            <span className="truncate">
-              {t("newUi.sidebar.fleets.shareFleet")}
-            </span>
-          </Button>
-          <Button
-            variant="outline"
-            size="sm"
-            className="min-w-0 flex-1"
-            onClick={() => setPickerOpen(true)}
-          >
-            <Settings2 className="size-3.5 shrink-0" />
-            <span className="truncate">
-              {t("newUi.sidebar.fleets.manageMembers")}
-            </span>
-          </Button>
-        </div>
-      </div>
-
-      <div className="flex-1 min-h-0 overflow-y-auto p-3">
-        {loadingMembers ? (
-          <div className="flex items-center justify-center py-8 text-muted-foreground">
-            <Loader2 className="size-4 animate-spin" />
-          </div>
-        ) : members.length === 0 ? (
-          <div className="text-xs text-muted-foreground text-center py-8">
-            {t("newUi.sidebar.fleets.noMembers")}
-          </div>
-        ) : (
-          <div className="flex flex-col gap-3">
-            <div className="flex items-center gap-2">
-              <select
-                className="min-w-0 flex-1 px-2 py-1.5 text-xs bg-background border border-border text-foreground outline-none"
-                value={actionView}
-                onChange={(e) =>
-                  setActionView(e.target.value as FleetActionView)
-                }
-              >
-                <option value="run">{t("newUi.sidebar.fleets.tabRun")}</option>
-                <option value="transfer">
-                  {t("newUi.sidebar.fleets.tabTransfer")}
-                </option>
-                <option value="inventory">
-                  {t("newUi.sidebar.fleets.tabInventory")}
-                </option>
-                <option value="packages">
-                  {t("newUi.sidebar.fleets.tabPackages")}
-                </option>
-              </select>
-              {actionView === "inventory" && onOpenFleetInventory && (
-                <Button
-                  variant="outline"
-                  size="sm"
-                  onClick={() => onOpenFleetInventory(fleet.id)}
-                  title={t("newUi.sidebar.fleets.openInventoryTab")}
-                >
-                  <ExternalLink className="size-3.5" />
-                </Button>
-              )}
-            </div>
-
-            {actionView === "run" && (
-              <RunCommandTab api={api} fleetId={fleet.id} />
-            )}
-            {actionView === "transfer" && (
-              <TransferTab api={api} fleetId={fleet.id} />
-            )}
-            {actionView === "inventory" && (
-              <InventoryTab api={api} fleetId={fleet.id} />
-            )}
-            {actionView === "packages" && (
-              <PackagesTab api={api} fleetId={fleet.id} />
-            )}
-          </div>
-        )}
-      </div>
-
-      <MemberPickerDialog
-        api={api}
-        open={pickerOpen}
-        onClose={() => setPickerOpen(false)}
-        fleetId={fleet.id}
-        allHosts={allHosts}
-        memberIds={memberIds}
-        onChanged={handleMembersChanged}
-      />
-
-      <FleetShareDialog
-        api={api}
-        open={shareOpen}
-        onClose={() => setShareOpen(false)}
-        fleet={fleet}
-      />
-    </div>
-  );
-}
-
-export function FleetsPanel({
-  api,
-  active,
-  onOpenFleetInventory,
-}: {
-  api: FleetsApi;
-  active?: boolean;
-  onOpenFleetInventory?: (fleetId: number) => void;
-}) {
-  const { t } = useTranslation();
-  const { hosts: allHosts } = useHosts();
-  const [fleets, setFleets] = useState<FleetRow[]>([]);
-  const [loading, setLoading] = useState(true);
-  const [search, setSearch] = useState("");
-  const [selectedFleet, setSelectedFleet] = useState<FleetRow | null>(null);
-  const [formOpen, setFormOpen] = useState(false);
-  const [editingFleet, setEditingFleet] = useState<FleetRow | null>(null);
-  const [deleteTarget, setDeleteTarget] = useState<FleetRow | null>(null);
-  const [shareTarget, setShareTarget] = useState<FleetRow | null>(null);
-  const hasLoadedRef = useRef(false);
-
-  const loadFleets = useCallback(async () => {
-    try {
-      const data = await api.list();
-      setFleets(data);
-      setSelectedFleet((prev) =>
-        prev ? (data.find((f) => f.id === prev.id) ?? null) : null,
-      );
-    } catch (error) {
-      const message = getErrorMessage(error, "");
-      toast.error(message || t("newUi.sidebar.fleets.loadFailed"));
-    }
-  }, [api, t]);
-
-  useEffect(() => {
-    if (!active || hasLoadedRef.current) return;
-    hasLoadedRef.current = true;
-    setLoading(true);
-    loadFleets()
-      .catch((error: unknown) => {
-        const message = getErrorMessage(error, "");
-        toast.error(message || t("newUi.sidebar.fleets.loadFailed"));
-      })
-      .finally(() => setLoading(false));
-  }, [active, hasLoadedRef, loadFleets, t]);
-
-  async function handleDelete() {
-    if (!deleteTarget) return;
-    try {
-      await api.remove(deleteTarget.id);
-      toast.success(t("newUi.sidebar.fleets.fleetDeleted"));
-      if (selectedFleet?.id === deleteTarget.id) setSelectedFleet(null);
-      setDeleteTarget(null);
-      loadFleets();
-    } catch (error) {
-      const message = getErrorMessage(error, "");
-      toast.error(message || t("newUi.sidebar.fleets.deleteFailed"));
-    }
-  }
-
-  const visibleFleets = fleets.filter((f) =>
-    f.name.toLowerCase().includes(search.trim().toLowerCase()),
-  );
-
-  if (selectedFleet) {
-    return (
-      <FleetDetail
-        api={api}
-        fleet={selectedFleet}
-        allHosts={allHosts}
-        onBack={() => setSelectedFleet(null)}
-        onFleetChanged={loadFleets}
-        onOpenFleetInventory={onOpenFleetInventory}
-      />
-    );
-  }
-
-  return (
-    <div className="flex flex-col flex-1 min-h-0">
-      <div className="flex items-center gap-2 p-3 border-b border-border shrink-0">
-        <Boxes className="size-4 text-muted-foreground" />
-        <div className="flex min-w-0 flex-1 flex-col">
-          <span className="truncate text-sm font-semibold">
-            {t("newUi.sidebar.fleets.title")}
-          </span>
-          <a
-            href="https://docs.termix.site/features/fleets/overview"
-            target="_blank"
-            rel="noreferrer"
-            className="w-fit text-[10px] text-accent-brand hover:underline"
-          >
-            {t("hosts.docsLink")}
-          </a>
-        </div>
-        <Button
-          variant="outline"
-          size="sm"
-          className="shrink-0 border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-          onClick={() => {
-            setEditingFleet(null);
-            setFormOpen(true);
-          }}
-        >
-          <Plus className="size-3.5 mr-1.5" />
-          {t("newUi.sidebar.fleets.createFleet")}
-        </Button>
-      </div>
-
-      <div className="p-3 pb-0 shrink-0">
-        <div className="relative">
-          <Search className="size-3.5 absolute left-2 top-1/2 -translate-y-1/2 text-muted-foreground" />
-          <Input
-            className="pl-7 h-8 text-xs"
-            placeholder={t("newUi.sidebar.fleets.searchFleets")}
-            value={search}
-            onChange={(e) => setSearch(e.target.value)}
-          />
-        </div>
-      </div>
-
-      <div className="flex-1 min-h-0 overflow-y-auto p-3">
-        {loading ? (
-          <div className="flex items-center justify-center py-8 text-muted-foreground">
-            <Loader2 className="size-4 animate-spin" />
-          </div>
-        ) : visibleFleets.length === 0 ? (
-          <div className="text-xs text-muted-foreground text-center py-8">
-            {t("newUi.sidebar.fleets.noFleets")}
-          </div>
-        ) : (
-          <div className="flex flex-col gap-1.5">
-            {visibleFleets.map((fleet) => (
-              <div
-                key={fleet.id}
-                className="flex items-center gap-2 border border-border p-2.5 cursor-pointer hover:bg-muted/40 group"
-                onClick={() => setSelectedFleet(fleet)}
-              >
-                <span
-                  className="size-2.5 shrink-0"
-                  style={{ backgroundColor: fleet.color ?? "#6b7280" }}
-                />
-                <div className="flex flex-col min-w-0 flex-1">
-                  <span className="text-xs font-semibold truncate">
-                    {fleet.name}
-                  </span>
-                  {fleet.description && (
-                    <span className="text-[11px] text-muted-foreground truncate">
-                      {fleet.description}
-                    </span>
-                  )}
-                </div>
-                <Badge variant="secondary" className="shrink-0">
-                  {t("newUi.sidebar.fleets.memberCount", {
-                    count: fleet.memberCount,
-                  })}
-                </Badge>
-                <Button
-                  variant="ghost"
-                  size="sm"
-                  className="shrink-0 opacity-0 group-hover:opacity-100"
-                  onClick={(e) => {
-                    e.stopPropagation();
-                    setShareTarget(fleet);
-                  }}
-                >
-                  <Share2 className="size-3.5" />
-                </Button>
-                <Button
-                  variant="ghost"
-                  size="sm"
-                  className="shrink-0 opacity-0 group-hover:opacity-100"
-                  onClick={(e) => {
-                    e.stopPropagation();
-                    setEditingFleet(fleet);
-                    setFormOpen(true);
-                  }}
-                >
-                  <Settings2 className="size-3.5" />
-                </Button>
-                <Button
-                  variant="ghost"
-                  size="sm"
-                  className="shrink-0 opacity-0 group-hover:opacity-100 hover:text-destructive"
-                  onClick={(e) => {
-                    e.stopPropagation();
-                    setDeleteTarget(fleet);
-                  }}
-                >
-                  <Trash2 className="size-3.5" />
-                </Button>
-              </div>
-            ))}
-          </div>
-        )}
-      </div>
-
-      <FleetFormDialog
-        api={api}
-        open={formOpen}
-        onClose={() => setFormOpen(false)}
-        fleet={editingFleet}
-        onSaved={loadFleets}
-      />
-
-      <FleetShareDialog
-        api={api}
-        open={!!shareTarget}
-        onClose={() => setShareTarget(null)}
-        fleet={shareTarget}
-      />
-
-      <Dialog
-        open={!!deleteTarget}
-        onOpenChange={(next) => !next && setDeleteTarget(null)}
-      >
-        <DialogContent className="sm:max-w-sm">
-          <DialogHeader>
-            <DialogTitle>
-              {t("newUi.sidebar.fleets.deleteFleetTitle")}
-            </DialogTitle>
-            <DialogDescription>
-              {t("newUi.sidebar.fleets.deleteFleetDescription", {
-                name: deleteTarget?.name,
-              })}
-            </DialogDescription>
-          </DialogHeader>
-          <DialogFooter>
-            <Button variant="outline" onClick={() => setDeleteTarget(null)}>
-              {t("common.cancel")}
-            </Button>
-            <Button variant="destructive" onClick={handleDelete}>
-              <X className="size-3.5 mr-2" />
-              {t("common.delete")}
-            </Button>
-          </DialogFooter>
-        </DialogContent>
-      </Dialog>
-    </div>
-  );
-}
diff --git a/plugins/fleets/src/frontend/fleets-api.ts b/plugins/fleets/src/frontend/fleets-api.ts
deleted file mode 100644
index 059400ec4..000000000
--- a/plugins/fleets/src/frontend/fleets-api.ts
+++ /dev/null
@@ -1,215 +0,0 @@
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-
-export type SharePermissionLevel = "connect" | "view" | "edit" | "manage";
-
-export interface ShareTarget {
-  type: "user" | "role";
-  id: string | number;
-}
-
-export interface ShareableUser {
-  id: string;
-  username: string;
-}
-
-export interface ShareableRole {
-  id: number;
-  name: string;
-  displayName: string | null;
-}
-
-export interface FleetRow {
-  id: number;
-  userId: string;
-  name: string;
-  description: string | null;
-  color: string | null;
-  icon: string | null;
-  tagRules: string[];
-  syncId: string | null;
-  createdAt: string;
-  updatedAt: string;
-  memberCount: number;
-}
-
-export interface FleetMemberRow {
-  id: number;
-  name: string;
-  ip: string;
-  tags: string[];
-  static: boolean;
-  permissionLevel: SharePermissionLevel | null;
-}
-
-export interface FleetHostResult {
-  hostId: number;
-  hostName: string;
-  success: boolean;
-  output?: string;
-  error?: string;
-}
-
-export interface FleetInventoryRecord {
-  id: number;
-  hostId: number;
-  userId: string;
-  osPrettyName: string | null;
-  kernel: string | null;
-  architecture: string | null;
-  hostname: string | null;
-  uptimeSeconds: number | null;
-  ip: string | null;
-  packageManager: string | null;
-  collectedAt: string;
-}
-
-export interface FleetInventoryEntry {
-  hostId: number;
-  hostName: string;
-  inventory: FleetInventoryRecord | null;
-}
-
-export type FleetPackageAction = "install" | "remove" | "upgrade-all";
-
-export interface FleetShareHostResult {
-  hostId: number;
-  shared: boolean;
-  reason?: string;
-}
-
-export interface FleetShareResult {
-  success: boolean;
-  permissionLevel: SharePermissionLevel;
-  expiresAt: string | null;
-  hostsShared: number;
-  hostsTotal: number;
-  hostResults: FleetShareHostResult[];
-}
-
-/**
- * The fleets routes, through the plugin's own client. Paths are relative to
- * /plugin-api/fleets/, which the client already points at.
- */
-export function createFleetsApi(api: PluginApiClient) {
-  const data = async <T>(request: Promise<{ data: T }>) => (await request).data;
-
-  return {
-    list: () => data(api.get<FleetRow[]>("/")),
-
-    create: (fleetData: {
-      name: string;
-      description?: string | null;
-      color?: string | null;
-      icon?: string | null;
-      tagRules?: string[];
-    }) => data(api.post<FleetRow>("/", fleetData)),
-
-    update: (
-      fleetId: number,
-      fleetData: {
-        name?: string;
-        description?: string | null;
-        color?: string | null;
-        icon?: string | null;
-        tagRules?: string[];
-      },
-    ) => data(api.patch<FleetRow>(`/${fleetId}`, fleetData)),
-
-    remove: (fleetId: number) =>
-      data(api.delete<{ success: boolean }>(`/${fleetId}`)),
-
-    members: (fleetId: number) =>
-      data(api.get<FleetMemberRow[]>(`/${fleetId}/members`)),
-
-    addMember: (fleetId: number, hostId: number) =>
-      data(api.post<{ success: boolean }>(`/${fleetId}/members`, { hostId })),
-
-    removeMember: (fleetId: number, hostId: number) =>
-      data(api.delete<{ success: boolean }>(`/${fleetId}/members/${hostId}`)),
-
-    runCommand: (
-      fleetId: number,
-      command: string,
-      inputValues?: Record<string, string>,
-    ) =>
-      data(
-        api.post<{ results: FleetHostResult[] }>(`/${fleetId}/execute`, {
-          command,
-          ...(inputValues ? { inputValues } : {}),
-        }),
-      ),
-
-    pushFile: async (fleetId: number, file: File, remotePath: string) => {
-      const form = new FormData();
-      form.append("file", file);
-      form.append("remotePath", remotePath);
-      return data(
-        api.post<{ results: FleetHostResult[] }>(
-          `/${fleetId}/transfer/push`,
-          form,
-          { headers: { "Content-Type": "multipart/form-data" } },
-        ),
-      );
-    },
-
-    pullFile: async (
-      fleetId: number,
-      remotePath: string,
-    ): Promise<{
-      results: FleetHostResult[];
-      blob: Blob;
-      fileName: string;
-    }> => {
-      const response = await api.post<Blob>(
-        `/${fleetId}/transfer/pull`,
-        { remotePath },
-        { responseType: "blob" },
-      );
-      const headers = (response as { headers?: Record<string, string> })
-        .headers;
-      const resultsHeader = headers?.["x-fleet-transfer-results"];
-      const results: FleetHostResult[] = resultsHeader
-        ? JSON.parse(atob(resultsHeader))
-        : [];
-      const disposition = headers?.["content-disposition"];
-      const match = disposition?.match(/filename="([^"]+)"/);
-      const fileName = match?.[1] ?? "fleet-transfer.zip";
-      return { results, blob: response.data, fileName };
-    },
-
-    inventory: (fleetId: number) =>
-      data(api.get<FleetInventoryEntry[]>(`/${fleetId}/inventory`)),
-
-    refreshInventory: (fleetId: number) =>
-      data(api.post<{ results: FleetHostResult[] }>(`/${fleetId}/inventory`)),
-
-    runPackageAction: (
-      fleetId: number,
-      action: FleetPackageAction,
-      packageName?: string,
-    ) =>
-      data(
-        api.post<{ results: FleetHostResult[] }>(`/${fleetId}/packages`, {
-          action,
-          ...(packageName ? { package: packageName } : {}),
-        }),
-      ),
-
-    share: (
-      fleetId: number,
-      shareData: {
-        targets: ShareTarget[];
-        permissionLevel: SharePermissionLevel;
-        durationHours?: number;
-      },
-    ) => data(api.post<FleetShareResult>(`/${fleetId}/share`, shareData)),
-
-    shareTargetUsers: () =>
-      data(api.get<{ users: ShareableUser[] }>("/share-targets/users")),
-
-    shareTargetRoles: () =>
-      data(api.get<{ roles: ShareableRole[] }>("/share-targets/roles")),
-  };
-}
-
-export type FleetsApi = ReturnType<typeof createFleetsApi>;
diff --git a/plugins/fleets/src/frontend/helpers.ts b/plugins/fleets/src/frontend/helpers.ts
deleted file mode 100644
index 1695f8017..000000000
--- a/plugins/fleets/src/frontend/helpers.ts
+++ /dev/null
@@ -1,23 +0,0 @@
-import { clsx, type ClassValue } from "clsx";
-import { twMerge } from "tailwind-merge";
-
-export function cn(...inputs: ClassValue[]) {
-  return twMerge(clsx(inputs));
-}
-
-/**
- * Extract a stable, human-readable message from an unknown thrown value.
- * Mirrors src/ui/lib/error-message.ts - kept as a small standalone copy
- * rather than a cross-plugin dependency for one pure function.
- */
-export function getErrorMessage(
-  error: unknown,
-  fallback = "Unknown error",
-): string {
-  return error instanceof Error ? error.message : fallback;
-}
-
-export interface SnippetInput {
-  key: string;
-  label: string;
-}
diff --git a/plugins/fleets/src/frontend/index.tsx b/plugins/fleets/src/frontend/index.tsx
deleted file mode 100644
index 7b453fde0..000000000
--- a/plugins/fleets/src/frontend/index.tsx
+++ /dev/null
@@ -1,59 +0,0 @@
-import { Boxes } from "lucide-react";
-import type {
-  PanelProps,
-  TabProps,
-  TermixApp,
-} from "@termix/plugin-sdk/frontend";
-import { FleetsPanel } from "./FleetsPanel.js";
-import { FleetInventoryTab } from "./FleetInventoryTab.js";
-import { createFleetsApi } from "./fleets-api.js";
-
-const INVENTORY_TAB = "fleet-inventory";
-
-export function activate(app: TermixApp): void {
-  const api = createFleetsApi(app.api);
-
-  function Panel({ active, shell }: PanelProps) {
-    return (
-      <FleetsPanel
-        api={api}
-        active={active}
-        onOpenFleetInventory={(fleetId) =>
-          shell.openSingletonTab(INVENTORY_TAB, { data: { fleetId } })
-        }
-      />
-    );
-  }
-
-  function InventoryTab({ tab, isVisible }: TabProps) {
-    const fleetId = tab.data?.fleetId;
-    return (
-      <FleetInventoryTab
-        api={api}
-        fleetId={typeof fleetId === "number" ? fleetId : undefined}
-        isVisible={isVisible}
-      />
-    );
-  }
-
-  app.registerRailItem({
-    id: "fleets",
-    icon: Boxes,
-    titleKey: "nav.fleets",
-    after: "macros",
-    order: 10,
-  });
-
-  // Kept mounted so a fleet being edited survives switching panels.
-  app.registerPanel("fleets", Panel, { keepMounted: true });
-
-  app.registerTab(INVENTORY_TAB, InventoryTab, {
-    icon: Boxes,
-    titleKey: "nav.fleets",
-    singleton: true,
-    hostless: true,
-  });
-
-  // Other plugins (automations' host picker) list fleets through this.
-  app.registerAction("fleets.list", () => api.list());
-}
diff --git a/plugins/fleets/tests/backend/command-variables.test.ts b/plugins/fleets/tests/backend/command-variables.test.ts
deleted file mode 100644
index eadd38b49..000000000
--- a/plugins/fleets/tests/backend/command-variables.test.ts
+++ /dev/null
@@ -1,30 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { resolveCommandVariables } from "../../src/backend/routes.js";
-
-function registry(value?: unknown) {
-  return {
-    registry: {
-      provide: () => {},
-      revoke: () => false,
-      consume: <T>() => value as T | undefined,
-    },
-  } as never;
-}
-
-describe("resolveCommandVariables", () => {
-  it("fills variables through the snippets plugin's resolver", () => {
-    const ctx = registry({
-      resolve: (content: string, host: { ip?: string } | null) =>
-        content.replace("$HOST", host?.ip ?? ""),
-    });
-    expect(resolveCommandVariables(ctx, "ping $HOST", { ip: "10.0.0.1" })).toBe(
-      "ping 10.0.0.1",
-    );
-  });
-
-  it("runs the command as typed while snippets is off", () => {
-    expect(
-      resolveCommandVariables(registry(), "ping $HOST", { ip: "10.0.0.1" }),
-    ).toBe("ping $HOST");
-  });
-});
diff --git a/plugins/fleets/tests/backend/helpers.ts b/plugins/fleets/tests/backend/helpers.ts
deleted file mode 100644
index 9cfc5a0ad..000000000
--- a/plugins/fleets/tests/backend/helpers.ts
+++ /dev/null
@@ -1,159 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-export const manifest = manifestJson as unknown as PluginManifest;
-
-export interface TestServer {
-  db: TestDb;
-  mock: MockPluginContext;
-  request: (
-    method: string,
-    path: string,
-    options?: { user?: string; body?: unknown },
-    // Route bodies vary per test; asserting on them is the point.
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any }>;
-  close: () => Promise<void>;
-}
-
-/**
- * The plugin activated against a real in-memory database, its router mounted
- * on an express app the way core mounts it: JSON parsed, the acting user set
- * from the request, everything else left to the plugin.
- */
-export async function startServer(
-  options: {
-    permissions?: string[];
-    users?: string[];
-    hosts?: Array<{
-      id: number;
-      userId: string;
-      name?: string;
-      ip?: string;
-      tags?: string | null;
-    }>;
-  } = {},
-): Promise<TestServer> {
-  const hosts = options.hosts ?? [
-    { id: 10, userId: "user-1", name: "host-a", ip: "10.0.0.1" },
-    { id: 11, userId: "user-1", name: "host-b", ip: "10.0.0.2" },
-  ];
-
-  const db = await createTestDb(pluginDir, {
-    before: (sqlite) => {
-      for (const user of options.users ?? ["user-1", "user-2"]) {
-        sqlite
-          .prepare("INSERT INTO users (id, username) VALUES (?, ?)")
-          .run(user, user);
-      }
-      // The plugin's fleet_members/fleet_inventory tables FK to ssh_data,
-      // which ctx.hosts (faked below) never touches - seed it directly so
-      // the constraint is satisfied the way it is against the real table.
-      for (const host of hosts) {
-        sqlite.prepare("INSERT INTO ssh_data (id) VALUES (?)").run(host.id);
-      }
-    },
-  });
-
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    permissions: options.permissions ?? [
-      "fleets.view",
-      "fleets.manage",
-      "fleets.execute",
-    ],
-  });
-
-  // ctx.hosts is capability-checked separately from ctx.db; seed it with the
-  // same fixture hosts a real deployment would resolve through core.
-  mock.ctx.hosts.list = async () =>
-    hosts.map((h) => ({
-      id: h.id,
-      userId: h.userId,
-      name: h.name ?? null,
-      ip: h.ip ?? "",
-      port: 22,
-      username: "root",
-      tags: h.tags ?? null,
-      folder: null,
-      authType: "password",
-    }));
-  mock.ctx.hosts.get = async (hostId) => {
-    const found = hosts.find((h) => h.id === hostId);
-    if (!found) return null;
-    return {
-      id: found.id,
-      userId: found.userId,
-      name: found.name ?? null,
-      ip: found.ip ?? "",
-      port: 22,
-      username: "root",
-      tags: found.tags ?? null,
-      folder: null,
-      authType: "password",
-    };
-  };
-  mock.ctx.hosts.checkAccess = async (hostId) => {
-    const found = hosts.find((h) => h.id === hostId);
-    if (!found) return { hasAccess: false, isOwner: false, isShared: false };
-    return {
-      hasAccess: true,
-      isOwner: true,
-      isShared: false,
-      permissionLevel: "manage",
-    };
-  };
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") ?? undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    db,
-    mock,
-    async request(method, path, { user = "user-1", body: given } = {}) {
-      const body = method === "GET" ? undefined : given;
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        headers: {
-          "x-test-user": user,
-          ...(body !== undefined ? { "content-type": "application/json" } : {}),
-        },
-        body: body !== undefined ? JSON.stringify(body) : undefined,
-      });
-      const text = await response.text();
-      return { status: response.status, body: text ? JSON.parse(text) : null };
-    },
-    async close() {
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-      db.close();
-    },
-  };
-}
diff --git a/plugins/fleets/tests/backend/migrations.test.ts b/plugins/fleets/tests/backend/migrations.test.ts
deleted file mode 100644
index 427bdaedd..000000000
--- a/plugins/fleets/tests/backend/migrations.test.ts
+++ /dev/null
@@ -1,191 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { createTestDb, type TestDb } from "@termix/plugin-sdk/testing";
-import { pluginDir } from "./helpers";
-
-// fleets/fleet_members/fleet_inventory as core's SQLite bootstrap created
-// them before 2.9.0, plus the indexes performance-indexes.ts added.
-const LEGACY_DDL = `
-  CREATE TABLE fleets (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-    name TEXT NOT NULL,
-    description TEXT,
-    color TEXT,
-    icon TEXT,
-    tag_rules TEXT,
-    sync_id TEXT UNIQUE,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
-  );
-  CREATE TABLE fleet_members (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    fleet_id INTEGER NOT NULL REFERENCES fleets(id) ON DELETE CASCADE,
-    host_id INTEGER NOT NULL REFERENCES ssh_data(id) ON DELETE CASCADE,
-    added_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
-  );
-  CREATE UNIQUE INDEX idx_fleet_members_fleet_host ON fleet_members(fleet_id, host_id);
-  CREATE INDEX idx_fleet_members_host ON fleet_members(host_id);
-  CREATE TABLE fleet_inventory (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    host_id INTEGER NOT NULL REFERENCES ssh_data(id) ON DELETE CASCADE,
-    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-    os_pretty_name TEXT,
-    kernel TEXT,
-    architecture TEXT,
-    hostname TEXT,
-    uptime_seconds INTEGER,
-    ip TEXT,
-    package_manager TEXT,
-    collected_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
-  );
-  CREATE UNIQUE INDEX idx_fleet_inventory_host ON fleet_inventory(host_id, user_id);
-  CREATE INDEX idx_fleet_inventory_user ON fleet_inventory(user_id);
-`;
-
-let db: TestDb | null = null;
-
-afterEach(() => {
-  db?.close();
-  db = null;
-});
-
-const tableExists = (name: string) =>
-  !!db!.sqlite
-    .prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?")
-    .get(name);
-
-const indexOn = (table: string) =>
-  (
-    db!.sqlite
-      .prepare(
-        "SELECT name FROM sqlite_master WHERE type = 'index' AND tbl_name = ? AND name NOT LIKE 'sqlite_%'",
-      )
-      .all(table) as { name: string }[]
-  )
-    .map((row) => row.name)
-    .sort();
-
-describe("adopting fleets, fleet_members, fleet_inventory", () => {
-  it("keeps every existing row when the legacy tables are there", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1'), ('user-2')");
-        sqlite.exec("INSERT INTO ssh_data (id) VALUES (1), (2)");
-        sqlite.exec(LEGACY_DDL);
-        sqlite
-          .prepare(
-            "INSERT INTO fleets (user_id, name, tag_rules, sync_id) VALUES (?, ?, ?, ?)",
-          )
-          .run("user-1", "Web fleet", '["prod-web"]', "sync-a");
-        sqlite
-          .prepare(
-            "INSERT INTO fleet_members (fleet_id, host_id) VALUES (1, 1)",
-          )
-          .run();
-        sqlite
-          .prepare(
-            "INSERT INTO fleet_inventory (host_id, user_id, os_pretty_name) VALUES (1, 'user-1', 'Debian')",
-          )
-          .run();
-      },
-    });
-
-    expect(db.applied).toEqual(["0001_adopt_fleets"]);
-    expect(tableExists("fleets")).toBe(false);
-    expect(tableExists("fleet_members")).toBe(false);
-    expect(tableExists("fleet_inventory")).toBe(false);
-    expect(tableExists("p_fleets_fleets")).toBe(true);
-    expect(tableExists("p_fleets_members")).toBe(true);
-    expect(tableExists("p_fleets_inventory")).toBe(true);
-
-    const fleetRows = db.sqlite
-      .prepare("SELECT user_id, name, tag_rules, sync_id FROM p_fleets_fleets")
-      .all();
-    expect(fleetRows).toEqual([
-      {
-        user_id: "user-1",
-        name: "Web fleet",
-        tag_rules: '["prod-web"]',
-        sync_id: "sync-a",
-      },
-    ]);
-
-    const memberRows = db.sqlite
-      .prepare("SELECT fleet_id, host_id FROM p_fleets_members")
-      .all();
-    expect(memberRows).toEqual([{ fleet_id: 1, host_id: 1 }]);
-
-    const inventoryRows = db.sqlite
-      .prepare(
-        "SELECT host_id, user_id, os_pretty_name FROM p_fleets_inventory",
-      )
-      .all();
-    expect(inventoryRows).toEqual([
-      { host_id: 1, user_id: "user-1", os_pretty_name: "Debian" },
-    ]);
-
-    expect(indexOn("p_fleets_members")).toEqual(
-      ["idx_fleet_members_fleet_host", "idx_fleet_members_host"].sort(),
-    );
-    expect(indexOn("p_fleets_inventory")).toEqual(
-      ["idx_fleet_inventory_host", "idx_fleet_inventory_user"].sort(),
-    );
-  });
-
-  it("creates the tables fresh when there are no legacy ones", async () => {
-    db = await createTestDb(pluginDir);
-
-    expect(tableExists("fleets")).toBe(false);
-    expect(tableExists("p_fleets_fleets")).toBe(true);
-    expect(tableExists("p_fleets_members")).toBe(true);
-    expect(tableExists("p_fleets_inventory")).toBe(true);
-    expect(db.sqlite.prepare("SELECT * FROM p_fleets_fleets").all()).toEqual(
-      [],
-    );
-  });
-
-  it("cascades a fleet delete onto its member rows via the fleet_id FK", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1')");
-        sqlite.exec("INSERT INTO ssh_data (id) VALUES (1)");
-      },
-    });
-    db.sqlite
-      .prepare(
-        "INSERT INTO p_fleets_fleets (id, user_id, name) VALUES (1, 'user-1', 'Fleet')",
-      )
-      .run();
-    db.sqlite
-      .prepare("INSERT INTO p_fleets_members (fleet_id, host_id) VALUES (1, 1)")
-      .run();
-
-    db.sqlite.exec("DELETE FROM p_fleets_fleets WHERE id = 1");
-
-    expect(db.sqlite.prepare("SELECT * FROM p_fleets_members").all()).toEqual(
-      [],
-    );
-  });
-
-  it("removes a user's fleets when the user is deleted", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1'), ('user-2')");
-      },
-    });
-    const insert = db.sqlite.prepare(
-      "INSERT INTO p_fleets_fleets (user_id, name) VALUES (?, ?)",
-    );
-    insert.run("user-1", "Mine");
-    insert.run("user-2", "Theirs");
-
-    db.sqlite.exec("DELETE FROM users WHERE id = 'user-1'");
-
-    const names = (
-      db.sqlite.prepare("SELECT name FROM p_fleets_fleets").all() as {
-        name: string;
-      }[]
-    ).map((row) => row.name);
-    expect(names).toEqual(["Theirs"]);
-  });
-});
diff --git a/plugins/fleets/tests/backend/repository.test.ts b/plugins/fleets/tests/backend/repository.test.ts
deleted file mode 100644
index cb74526fd..000000000
--- a/plugins/fleets/tests/backend/repository.test.ts
+++ /dev/null
@@ -1,209 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { createTestDb, type TestDb } from "@termix/plugin-sdk/testing";
-import type {
-  PluginHostSummary,
-  PluginHosts,
-} from "@termix/plugin-sdk/backend";
-import { pluginDir } from "./helpers";
-import {
-  fleets,
-  fleetMembers,
-  fleetInventory,
-} from "../../src/backend/tables.js";
-import { createFleetRepository } from "../../src/backend/repository.js";
-
-let db: TestDb | null = null;
-
-afterEach(() => {
-  db?.close();
-  db = null;
-});
-
-function fakeHosts(hosts: PluginHostSummary[]): PluginHosts {
-  return <PluginHosts>(<unknown>{
-    list: async () => hosts,
-    get: async (hostId) => hosts.find((h) => h.id === hostId) ?? null,
-    checkAccess: async (hostId) => {
-      const found = hosts.find((h) => h.id === hostId);
-      return found
-        ? {
-            hasAccess: true,
-            isOwner: true,
-            isShared: false,
-            permissionLevel: "manage",
-          }
-        : { hasAccess: false, isOwner: false, isShared: false };
-    },
-    share: async (hostId) => ({ hostId, shared: true }),
-    listUsers: async () => [],
-    listRoles: async () => [],
-  });
-}
-
-async function setup(hosts: PluginHostSummary[]) {
-  db = await createTestDb(pluginDir, {
-    before: (sqlite) => {
-      sqlite.exec("INSERT INTO users (id) VALUES ('user-1'), ('user-2')");
-      sqlite.exec(
-        `INSERT INTO ssh_data (id) VALUES ${hosts.map((h) => `(${h.id})`).join(", ")}`,
-      );
-    },
-  });
-
-  const fleetsTable = await db.database.define(fleets);
-  const membersTable = await db.database.define(fleetMembers);
-  const inventoryTable = await db.database.define(fleetInventory);
-  const repo = createFleetRepository(
-    db.database,
-    fakeHosts(hosts),
-    fleetsTable,
-    membersTable,
-    inventoryTable,
-  );
-  return repo;
-}
-
-function host(
-  id: number,
-  overrides: Partial<PluginHostSummary> = {},
-): PluginHostSummary {
-  return {
-    id,
-    userId: "user-1",
-    name: `host-${id}`,
-    ip: `10.0.0.${id}`,
-    port: 22,
-    username: "root",
-    tags: null,
-    folder: null,
-    authType: "password",
-    ...overrides,
-  };
-}
-
-describe("FleetRepository.listEffectiveMembers", () => {
-  it("unions static membership and tag-matched hosts, deduplicated by id", async () => {
-    const repo = await setup([
-      host(1, { tags: "prod-web,edge" }),
-      host(2, { tags: "prod-web" }),
-      host(3, { tags: "prod-db" }),
-      host(4, { tags: null }),
-      host(5, { userId: "user-2", tags: "prod-web" }),
-    ]);
-
-    const fleet = await repo.create("user-1", {
-      name: "web fleet",
-      tagRules: ["prod-web"],
-    });
-    // host 1 matches by tag AND is added statically - must appear once.
-    await repo.addMember(fleet.id, 1);
-    // host 4 has no tags - only reachable via static membership.
-    await repo.addMember(fleet.id, 4);
-
-    const members = await repo.listEffectiveMembers("user-1", fleet.id);
-    const ids = members.map((m) => m.id).sort((a, b) => a - b);
-
-    expect(ids).toEqual([1, 2, 4]);
-  });
-
-  it("never returns another user's hosts even if tags match", async () => {
-    const repo = await setup([
-      host(1, { tags: "prod-web" }),
-      host(5, { userId: "user-2", tags: "prod-web" }),
-    ]);
-
-    const fleet = await repo.create("user-1", {
-      name: "web fleet",
-      tagRules: ["prod-web"],
-    });
-
-    const members = await repo.listEffectiveMembers("user-1", fleet.id);
-    expect(members.map((m) => m.id)).not.toContain(5);
-  });
-
-  it("returns only static members when a fleet has no tag rules", async () => {
-    const repo = await setup([host(3, { tags: "prod-db" })]);
-
-    const fleet = await repo.create("user-1", { name: "static fleet" });
-    await repo.addMember(fleet.id, 3);
-
-    const members = await repo.listEffectiveMembers("user-1", fleet.id);
-    expect(members.map((m) => m.id)).toEqual([3]);
-  });
-
-  it("removeMember only drops the static row, not tag-based membership", async () => {
-    const repo = await setup([host(1, { tags: "prod-web" })]);
-
-    const fleet = await repo.create("user-1", {
-      name: "web fleet",
-      tagRules: ["prod-web"],
-    });
-    await repo.addMember(fleet.id, 1);
-
-    await expect(repo.removeMember(fleet.id, 1)).resolves.toBe(true);
-
-    // host 1 still matches the tag rule, so it remains an effective member.
-    const members = await repo.listEffectiveMembers("user-1", fleet.id);
-    expect(members.map((m) => m.id)).toContain(1);
-  });
-
-  it("returns an empty list for a fleet the caller does not own", async () => {
-    const repo = await setup([host(1)]);
-    const fleet = await repo.create("user-1", { name: "private" });
-
-    await expect(
-      repo.listEffectiveMembers("user-2", fleet.id),
-    ).resolves.toEqual([]);
-  });
-});
-
-describe("FleetRepository CRUD", () => {
-  it("creates, updates and deletes a fleet", async () => {
-    const repo = await setup([host(1)]);
-    const created = await repo.create("user-1", {
-      name: "Fleet",
-      tagRules: ["a"],
-    });
-    expect(created.name).toBe("Fleet");
-    expect(created.tagRules).toBe('["a"]');
-
-    const updated = await repo.update("user-1", created.id, {
-      name: "Renamed",
-    });
-    expect(updated?.name).toBe("Renamed");
-
-    await expect(repo.delete("user-1", created.id)).resolves.toBe(true);
-    await expect(repo.findById("user-1", created.id)).resolves.toBeNull();
-  });
-
-  it("upserts and lists inventory per host", async () => {
-    const repo = await setup([host(1)]);
-    await repo.upsertInventory("user-1", 1, {
-      osPrettyName: "Debian",
-      kernel: "6.1.0",
-      architecture: "x86_64",
-      hostname: "web-1",
-      uptimeSeconds: 100,
-      ip: "10.0.0.1",
-      packageManager: "apt",
-    });
-
-    const rows = await repo.listInventoryForHosts("user-1", [1]);
-    expect(rows).toHaveLength(1);
-    expect(rows[0]).toMatchObject({ hostId: 1, osPrettyName: "Debian" });
-
-    // Refreshing overwrites the latest-only snapshot rather than adding a row.
-    await repo.upsertInventory("user-1", 1, {
-      osPrettyName: "Ubuntu",
-      kernel: "6.2.0",
-      architecture: "x86_64",
-      hostname: "web-1",
-      uptimeSeconds: 200,
-      ip: "10.0.0.1",
-      packageManager: "apt",
-    });
-    const refreshed = await repo.listInventoryForHosts("user-1", [1]);
-    expect(refreshed).toHaveLength(1);
-    expect(refreshed[0].osPrettyName).toBe("Ubuntu");
-  });
-});
diff --git a/plugins/fleets/tests/backend/routes.test.ts b/plugins/fleets/tests/backend/routes.test.ts
deleted file mode 100644
index 7e9f8052f..000000000
--- a/plugins/fleets/tests/backend/routes.test.ts
+++ /dev/null
@@ -1,176 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import { startServer, type TestServer } from "./helpers";
-import { parseInventoryProbe } from "../../src/backend/routes.js";
-
-let server: TestServer;
-
-afterEach(async () => {
-  await server?.close();
-});
-
-async function createFleet(
-  server: TestServer,
-  body: Record<string, unknown> = { name: "Web fleet" },
-) {
-  const res = await server.request("POST", "/", { body });
-  expect(res.status).toBe(200);
-  return res.body;
-}
-
-describe("fleet CRUD routes", () => {
-  beforeEach(async () => {
-    server = await startServer();
-  });
-
-  it("creates and lists fleets with member counts", async () => {
-    const created = await createFleet(server);
-    expect(created).toMatchObject({ name: "Web fleet", tagRules: [] });
-
-    const list = await server.request("GET", "/");
-    expect(list.status).toBe(200);
-    expect(list.body).toHaveLength(1);
-    expect(list.body[0]).toMatchObject({ id: created.id, memberCount: 0 });
-  });
-
-  it("400s on a missing name", async () => {
-    const res = await server.request("POST", "/", { body: {} });
-    expect(res.status).toBe(400);
-  });
-
-  it("updates and deletes a fleet", async () => {
-    const created = await createFleet(server);
-    const updated = await server.request("PATCH", `/${created.id}`, {
-      body: { name: "Renamed" },
-    });
-    expect(updated.status).toBe(200);
-    expect(updated.body.name).toBe("Renamed");
-
-    const deleted = await server.request("DELETE", `/${created.id}`);
-    expect(deleted.status).toBe(200);
-    expect((await server.request("GET", "/")).body).toHaveLength(0);
-  });
-
-  it("404s for a fleet the caller does not own", async () => {
-    const res = await server.request("GET", "/999/members");
-    expect(res.status).toBe(404);
-  });
-
-  it("400s on a non-numeric fleet id", async () => {
-    const res = await server.request("GET", "/not-a-number/members");
-    expect(res.status).toBe(400);
-  });
-});
-
-describe("fleet membership routes", () => {
-  beforeEach(async () => {
-    server = await startServer();
-  });
-
-  it("adds and lists members, then removes one", async () => {
-    const fleet = await createFleet(server);
-    const added = await server.request("POST", `/${fleet.id}/members`, {
-      body: { hostId: 10 },
-    });
-    expect(added.status).toBe(200);
-
-    const members = await server.request("GET", `/${fleet.id}/members`);
-    expect(members.status).toBe(200);
-    expect(members.body).toHaveLength(1);
-    expect(members.body[0]).toMatchObject({ id: 10, static: true });
-
-    const removed = await server.request("DELETE", `/${fleet.id}/members/10`);
-    expect(removed.status).toBe(200);
-    expect(
-      (await server.request("GET", `/${fleet.id}/members`)).body,
-    ).toHaveLength(0);
-  });
-
-  it("404s when adding a host outside the fixture host list", async () => {
-    const fleet = await createFleet(server);
-    const res = await server.request("POST", `/${fleet.id}/members`, {
-      body: { hostId: 999 },
-    });
-    expect(res.status).toBe(404);
-  });
-});
-
-describe("permission gates", () => {
-  it("view routes 403 without fleets.view", async () => {
-    server = await startServer({
-      permissions: ["fleets.manage", "fleets.execute"],
-    });
-    const res = await server.request("GET", "/");
-    expect(res.status).toBe(403);
-  });
-
-  it("manage routes 403 without fleets.manage", async () => {
-    server = await startServer({
-      permissions: ["fleets.view", "fleets.execute"],
-    });
-    const res = await server.request("POST", "/", { body: { name: "x" } });
-    expect(res.status).toBe(403);
-  });
-
-  it("execute routes 403 without fleets.execute", async () => {
-    server = await startServer({
-      permissions: ["fleets.view", "fleets.manage"],
-    });
-    const fleet = await createFleet(server);
-    const res = await server.request("POST", `/${fleet.id}/execute`, {
-      body: { command: "uptime" },
-    });
-    expect(res.status).toBe(403);
-  });
-});
-
-describe("parseInventoryProbe", () => {
-  it("extracts kernel, arch, hostname, and uptime from key=value lines", () => {
-    const out = [
-      "kernel=6.1.0-generic",
-      "arch=x86_64",
-      "hostname=web-1",
-      "uptime_seconds=123456",
-    ].join("\n");
-
-    expect(parseInventoryProbe(out)).toEqual({
-      kernel: "6.1.0-generic",
-      architecture: "x86_64",
-      hostname: "web-1",
-      uptimeSeconds: 123456,
-    });
-  });
-
-  it("nulls out fields missing from the probe output", () => {
-    expect(parseInventoryProbe("kernel=6.1.0")).toEqual({
-      kernel: "6.1.0",
-      architecture: null,
-      hostname: null,
-      uptimeSeconds: null,
-    });
-  });
-
-  it("nulls uptimeSeconds when the value is not a bare integer", () => {
-    expect(parseInventoryProbe("uptime_seconds=").uptimeSeconds).toBeNull();
-  });
-
-  it("ignores lines with no '=' separator", () => {
-    const out = ["garbage line", "kernel=6.1.0"].join("\n");
-    expect(parseInventoryProbe(out).kernel).toBe("6.1.0");
-  });
-});
-
-describe("share target pickers", () => {
-  beforeEach(async () => {
-    server = await startServer();
-  });
-
-  it("lists users and roles through ctx.hosts", async () => {
-    const users = await server.request("GET", "/share-targets/users");
-    expect(users.status).toBe(200);
-    expect(users.body).toEqual({ users: [] });
-
-    const roles = await server.request("GET", "/share-targets/roles");
-    expect(roles.status).toBe(200);
-    expect(roles.body).toEqual({ roles: [] });
-  });
-});
diff --git a/plugins/fleets/tests/backend/service.test.ts b/plugins/fleets/tests/backend/service.test.ts
deleted file mode 100644
index 0dbe1163a..000000000
--- a/plugins/fleets/tests/backend/service.test.ts
+++ /dev/null
@@ -1,37 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { startServer, type TestServer } from "./helpers";
-
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-});
-
-interface FleetsService {
-  create: (input: { name: string }) => Promise<{ id: number; name: string }>;
-  addMember: (fleetId: number, hostId: number) => Promise<void>;
-}
-
-describe("fleets.access", () => {
-  it("needs fleets.manage to change a fleet", async () => {
-    server = await startServer({ permissions: ["fleets.view"] });
-    const service = server.mock.services.get("fleets.access") as FleetsService;
-
-    await expect(
-      server.mock.actAs("user-1", () => service.create({ name: "prod" })),
-    ).rejects.toThrow("fleets.manage");
-  });
-
-  it("adds only hosts the caller can see", async () => {
-    server = await startServer();
-    const service = server.mock.services.get("fleets.access") as FleetsService;
-    const run = <T>(fn: () => Promise<T>) => server!.mock.actAs("user-1", fn);
-
-    const fleet = await run(() => service.create({ name: "prod" }));
-    await run(() => service.addMember(fleet.id, 10));
-    await expect(run(() => service.addMember(fleet.id, 99))).rejects.toThrow(
-      "Host not found",
-    );
-  });
-});
diff --git a/plugins/fleets/tests/backend/sudo-capability.test.ts b/plugins/fleets/tests/backend/sudo-capability.test.ts
deleted file mode 100644
index ab3f3d7a1..000000000
--- a/plugins/fleets/tests/backend/sudo-capability.test.ts
+++ /dev/null
@@ -1,17 +0,0 @@
-import { describe, expect, it } from "vitest";
-import fs from "node:fs";
-import path from "node:path";
-
-// Elevated commands read the host's sudo password, which core only hands to
-// a plugin holding credentials:read.
-describe("sudo password access", () => {
-  it("declares credentials:read", () => {
-    const manifest = JSON.parse(
-      fs.readFileSync(
-        path.resolve(import.meta.dirname, "../../manifest.json"),
-        "utf8",
-      ),
-    );
-    expect(manifest.capabilities).toContain("credentials:read");
-  });
-});
diff --git a/plugins/fleets/tests/frontend/activate.test.tsx b/plugins/fleets/tests/frontend/activate.test.tsx
deleted file mode 100644
index 814097280..000000000
--- a/plugins/fleets/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,53 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-const declared = (views?: Array<{ id: string }>) =>
-  (views ?? []).map((view) => view.id).sort();
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe(`${manifest.id} activate`, () => {
-  it("activates and registers only views its manifest declares", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    const contributes = manifest.contributes as unknown as Record<
-      string,
-      Array<{ id: string }> | undefined
-    >;
-    const tabs = declared(contributes.tabs);
-    // A rail panel may reuse one of the plugin's tab ids.
-    const panels = [...declared(contributes.panels), ...tabs];
-    const cards = declared(contributes.dashboardCards);
-    for (const id of rendered.registered.tabs()) expect(tabs).toContain(id);
-    for (const id of rendered.registered.panels()) expect(panels).toContain(id);
-    for (const id of rendered.registered.dashboardCards()) {
-      expect(cards).toContain(id);
-    }
-  });
-
-  it("removes everything it registered on deactivate", async () => {
-    const app = await renderWithApp(plugin, { manifest, locales });
-    await app.deactivate();
-    expect(app.registered.tabs()).toEqual([]);
-    expect(app.registered.panels()).toEqual([]);
-    expect(app.registered.railItems()).toEqual([]);
-    expect(app.registered.hostActions()).toEqual([]);
-    expect(app.registered.hostEditorSections()).toEqual([]);
-    expect(app.registered.dashboardCards()).toEqual([]);
-    expect(app.registered.settingsComponents()).toEqual([]);
-    expect(app.registered.actions()).toEqual([]);
-  });
-});
diff --git a/plugins/fleets/tsconfig.json b/plugins/fleets/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/fleets/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/fleets/vitest.config.ts b/plugins/fleets/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/fleets/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/homepage/CHANGELOG.md b/plugins/homepage/CHANGELOG.md
deleted file mode 100644
index 6dfde6621..000000000
--- a/plugins/homepage/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Adds a custom page of widgets, like clocks, notes, host status, RSS feeds and an embedded terminal. Also adds service link buttons to the dashboard.
diff --git a/plugins/homepage/README.md b/plugins/homepage/README.md
deleted file mode 100644
index 05d5e9a95..000000000
--- a/plugins/homepage/README.md
+++ /dev/null
@@ -1,29 +0,0 @@
-# Homepage
-
-A custom widget page and service links for your servers and services.
-
-## Features
-
-- A page of widgets you can move, resize, pan and zoom. Open it from the command palette.
-- Widgets for clocks, notes, folders, host status, bookmarks, weather, RSS feeds, ping checks, calendars, countdowns, search, images, custom APIs, an embedded terminal and more.
-- Other features can add their own widgets, like Docker, Tunnels, File Manager and Host Metrics.
-- Service link buttons and a homepage preview for the dashboard.
-- Widgets and service links sync between the desktop app and a server.
-
-## Permissions
-
-- `homepage.use`: Use the homepage. Admins and users have it by default.
-
-## Services
-
-Provides to other plugins:
-
-- `homepage.items`: list a user's homepage widgets.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/homepage/locales/en.json b/plugins/homepage/locales/en.json
deleted file mode 100644
index 9835baa55..000000000
--- a/plugins/homepage/locales/en.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Homepage"
-  },
-  "dashboard": {
-    "serviceLinks": "Service Links",
-    "homepagePreview": "Homepage Preview"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Service Links",
-    "serviceLinksEmpty": "No service links yet",
-    "serviceLinksAdd": "Add",
-    "serviceLinksLabelPlaceholder": "My Service",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Enter a valid web address",
-    "serviceLinksAddFailed": "Failed to add service link"
-  },
-  "homepage": {
-    "title": "Homepage",
-    "addWidget": "Add Widget",
-    "noWidgetsInCategory": "No widgets in this category",
-    "editWidget": "Edit Widget",
-    "zoomIn": "Zoom In",
-    "zoomOut": "Zoom Out",
-    "resetView": "Reset View",
-    "lockLayout": "Lock Layout",
-    "unlockLayout": "Unlock Layout",
-    "noWidgets": "Right-click or click + to add your first widget",
-    "openFullView": "Open Full View",
-    "previewTitle": "Homepage Preview",
-    "cancel": "Cancel",
-    "save": "Save",
-    "title_label": "Title",
-    "widgetTitlePlaceholder": "Widget title (optional)",
-    "url": "URL",
-    "imageUrl": "Custom Image URL",
-    "imageUrlHint": "Leave blank to use the site favicon automatically",
-    "showImage": "Show Image",
-    "description": "Description",
-    "color": "Color",
-    "timezone": "Timezone",
-    "invalidTimezone": "Invalid timezone. Use an IANA name such as America/New_York",
-    "showSeconds": "Show seconds",
-    "format12h": "12-hour",
-    "content": "Content",
-    "backgroundColor": "Background Color",
-    "links": "Links",
-    "addLink": "Add Link",
-    "linkLabel": "Label",
-    "categoryLinks": "Links",
-    "categoryInfo": "Info",
-    "categorySystem": "System",
-    "copyLink": "Copy Link",
-    "linkCopied": "Link copied!",
-    "location": "Location",
-    "temperatureUnit": "Temperature Unit",
-    "showForecast": "Show 3-day forecast",
-    "scrolling": "Allow Scrolling",
-    "feedUrl": "Feed URL",
-    "maxItems": "Max Items",
-    "showDescription": "Show Description",
-    "widgetRssName": "RSS Feed",
-    "rssNoFeedUrl": "Configure a feed URL in widget settings",
-    "rssLoadError": "Could not load feed",
-    "rssNoItems": "No items",
-    "noHostSelected": "No host selected",
-    "displayedMetrics": "Displayed Metrics",
-    "metricCpu": "CPU",
-    "metricMemory": "Memory",
-    "metricDisk": "Disk",
-    "metricUptime": "Uptime",
-    "metricSystem": "System",
-    "metricNetwork": "Network",
-    "metricProcesses": "Processes",
-    "categoryMonitoring": "Monitoring",
-    "noPingUrls": "No URLs configured",
-    "pingLabel": "Label",
-    "addPingUrl": "Add URL",
-    "showLatency": "Show Latency",
-    "refreshInterval": "Refresh Interval",
-    "seconds": "seconds",
-    "filterActivityTypes": "Filter Types",
-    "filterTypesHint": "Leave empty to show all",
-    "showTimestamp": "Show Timestamp",
-    "uptimeUnavailable": "Uptime unavailable",
-    "uptimeLabel": "Uptime",
-    "overviewVersion": "Version",
-    "overviewUpdateLabel": "Update",
-    "overviewUpdateAvailable": "Update available",
-    "overviewDatabase": "Database",
-    "overviewUptime": "Uptime",
-    "noHosts": "No hosts configured",
-    "hostGridHosts": "Hosts",
-    "hostGridAllHint": "Leave empty to show all hosts",
-    "columns": "Columns",
-    "showIp": "Show IP Address",
-    "layout": "Layout",
-    "showStatus": "Show Status",
-    "noActivity": "No activity",
-    "widgetPingStatusName": "Ping Status",
-    "widgetRecentActivityName": "Recent Activity",
-    "sshTerminalNoHost": "No host configured",
-    "sshTerminalConnect": "Connect",
-    "sshTerminalAutoConnect": "Auto-connect on load",
-    "connectionTypes": "Connection Types",
-    "calMon": "Mo",
-    "calTue": "Tu",
-    "calWed": "We",
-    "calThu": "Th",
-    "calFri": "Fr",
-    "calSat": "Sa",
-    "calSun": "Su",
-    "startOnMonday": "Start week on Monday",
-    "countdownNoDate": "No target date set",
-    "countdownPast": "Event has passed",
-    "countdownDays": "days",
-    "countdownHours": "hrs",
-    "countdownMinutes": "min",
-    "countdownSeconds": "sec",
-    "countdownLabel": "Label",
-    "countdownLabelPlaceholder": "e.g. Launch Day",
-    "countdownShowDays": "Show Days",
-    "countdownShowHours": "Show Hours",
-    "targetDate": "Target Date",
-    "searchEngine": "Search Engine",
-    "customSearchUrl": "Custom Search URL",
-    "searchPlaceholder": "Search...",
-    "searchGo": "Go",
-    "searchPlaceholderLabel": "Placeholder Text",
-    "searchPlaceholderHint": "Text shown inside the search input",
-    "openInNewTab": "Open in New Tab",
-    "searchQueryPlaceholder": "Enter query...",
-    "noSearchShortcuts": "No shortcuts configured",
-    "addSearchShortcut": "Add Shortcut",
-    "fontSize": "Font Size",
-    "textAlign": "Text Align",
-    "fontWeight": "Font Weight",
-    "clearColor": "Clear Color",
-    "imageFit": "Image Fit",
-    "imageLinkUrl": "Link URL",
-    "noImage": "No image URL set",
-    "altText": "Alt Text",
-    "altTextPlaceholder": "Describe the image",
-    "renderMarkdown": "Render Markdown",
-    "displayMode": "Display Mode",
-    "displayField": "Display Field",
-    "jsonPath": "JSON Path",
-    "customApiLabel": "Label",
-    "customApiLabelPlaceholder": "e.g. Temperature",
-    "customApiUnit": "Unit",
-    "customApiNoUrl": "No API URL configured",
-    "customApiError": "Failed to fetch",
-    "customApiNotArray": "Response is not an array",
-    "addService": "Add Service",
-    "showLabels": "Show Labels",
-    "iconSize": "Icon Size",
-    "noDashboardLinks": "No dashboard links configured",
-    "noLimit": "No limit",
-    "sectionHeading": "Section Heading",
-    "addSection": "Add Section",
-    "compactMode": "Compact Mode",
-    "selectHosts": "Select Hosts",
-    "listLayout": "List",
-    "gridLayout": "Grid",
-    "configureUrl": "Set a URL in the widget settings",
-    "embeddedContent": "Embedded content",
-    "noBookmarks": "No bookmarks",
-    "noSections": "No sections set up",
-    "noServices": "No services set up",
-    "configureLocation": "Set a location in the widget settings",
-    "bannerTextPlaceholder": "Banner text",
-    "serviceNamePlaceholder": "My service",
-    "emptyNote": "Empty note...",
-    "weatherLoadFailed": "Could not load weather for \"{{location}}\"",
-    "feelsLike": "Feels like {{temperature}}",
-    "timezonePlaceholder": "America/New_York (leave blank for local)",
-    "notesPlaceholder": "Write your notes here...",
-    "locationPlaceholder": "New York, London, Tokyo...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Bookmarks",
-        "description": "A list of quick links"
-      },
-      "calendar": {
-        "name": "Calendar",
-        "description": "A month calendar with today highlighted"
-      },
-      "clock": {
-        "name": "Clock",
-        "description": "A live clock with configurable timezone"
-      },
-      "countdown": {
-        "name": "Countdown",
-        "description": "Counts down to a target date and time"
-      },
-      "custom_api": {
-        "name": "Custom API",
-        "description": "Fetch and display data from any JSON API"
-      },
-      "dashboard_links": {
-        "name": "Dashboard Links",
-        "description": "Shows your saved dashboard service links"
-      },
-      "folder": {
-        "name": "Folder",
-        "description": "A background card for grouping widgets visually"
-      },
-      "host_grid": {
-        "name": "Host Grid",
-        "description": "Live status overview grid for all your SSH hosts"
-      },
-      "host_status": {
-        "name": "Host Status",
-        "description": "Shows live status and metrics for an SSH host"
-      },
-      "iframe_embed": {
-        "name": "iFrame Embed",
-        "description": "Embed any URL in an iframe"
-      },
-      "image_widget": {
-        "name": "Image",
-        "description": "Display any image from a URL"
-      },
-      "link_tree": {
-        "name": "Link Tree",
-        "description": "Grouped links organized into labeled sections"
-      },
-      "markdown_notes": {
-        "name": "Markdown Notes",
-        "description": "Notes with optional Markdown rendering and inline editing"
-      },
-      "notes": {
-        "name": "Notes",
-        "description": "A text notes widget"
-      },
-      "ping_status": {
-        "name": "Ping Status",
-        "description": "Check if URLs or services are reachable"
-      },
-      "quick_connect": {
-        "name": "Quick Connect",
-        "description": "Launch terminal, files, docker, tunnels, and more for your hosts"
-      },
-      "recent_activity": {
-        "name": "Recent Activity",
-        "description": "Shows recent terminal, Docker, file, and tunnel activity"
-      },
-      "rss_feed": {
-        "name": "RSS Feed",
-        "description": "Display items from an RSS or Atom feed"
-      },
-      "search_bar": {
-        "name": "Search Bar",
-        "description": "Quick search with Google, DuckDuckGo, Bing, or a custom engine"
-      },
-      "search_links": {
-        "name": "Search Shortcuts",
-        "description": "Quick buttons to search different engines"
-      },
-      "service_grid": {
-        "name": "Service Grid",
-        "description": "A grid of service tiles with icons and links"
-      },
-      "service_link": {
-        "name": "Service Link",
-        "description": "A clickable tile linking to a service URL"
-      },
-      "ssh_terminal": {
-        "name": "SSH Terminal",
-        "description": "An inline SSH terminal connected to a configured host"
-      },
-      "system_overview": {
-        "name": "System Overview",
-        "description": "Termix version, database health, and uptime at a glance"
-      },
-      "termix_uptime": {
-        "name": "Termix Uptime",
-        "description": "Shows how long the Termix server has been running"
-      },
-      "text_banner": {
-        "name": "Text Banner",
-        "description": "A styled text label for sections and headings"
-      },
-      "weather": {
-        "name": "Weather",
-        "description": "Live weather for any location"
-      },
-      "docker_widget": {
-        "name": "Docker Manager",
-        "description": "Embedded Docker container manager for a configured host"
-      },
-      "file_manager_widget": {
-        "name": "File Manager",
-        "description": "Embedded SFTP file manager for a configured host"
-      },
-      "tunnel_widget": {
-        "name": "Tunnel Manager",
-        "description": "Embedded SSH tunnel manager for a configured host"
-      },
-      "metrics_chart": {
-        "name": "Metrics Chart",
-        "description": "Historical CPU, memory, disk, or network chart for a host"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Use the homepage",
-      "description": "View and edit the homepage canvas and dashboard service links."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Allowed private hosts",
-      "description": "Exact private or loopback hostnames/IPs for Ping Status and Custom API widgets. Separate entries with commas or newlines; omit schemes, ports and paths. Empty blocks private destinations."
-    },
-    "privateCertificateAuthority": {
-      "label": "Private certificate authority (PEM)",
-      "description": "Optional trusted CA bundle for allowlisted hosts. Certificate verification remains enabled. Leave empty to use the system trust store."
-    }
-  },
-  "plugin": {
-    "name": "Homepage"
-  }
-}
diff --git a/plugins/homepage/locales/translated/af_ZA.json b/plugins/homepage/locales/translated/af_ZA.json
deleted file mode 100644
index bcfddd291..000000000
--- a/plugins/homepage/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Tuisblad"
-  },
-  "dashboard": {
-    "serviceLinks": "Diens skakels",
-    "homepagePreview": "Tuisbladvoorskou"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Diens skakels",
-    "serviceLinksEmpty": "Geen diens skakels nog nie",
-    "serviceLinksAdd": "Voeg by",
-    "serviceLinksLabelPlaceholder": "My Diens",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Voer 'n geldige webadres in",
-    "serviceLinksAddFailed": "Kon nie diensskakel byvoeg nie"
-  },
-  "homepage": {
-    "title": "Tuisblad",
-    "addWidget": "Voeg Widget by",
-    "noWidgetsInCategory": "Geen widgets in hierdie kategorie nie",
-    "editWidget": "Wysig Widget",
-    "zoomIn": "Inzoem",
-    "zoomOut": "Uitzoom",
-    "resetView": "Herstel aansig",
-    "lockLayout": "Sluituitleg",
-    "unlockLayout": "Ontsluit uitleg",
-    "noWidgets": "Regskliek of klik + om jou eerste widget by te voeg",
-    "openFullView": "Maak volle aansig oop",
-    "previewTitle": "Tuisbladvoorskou",
-    "cancel": "Kanselleer",
-    "save": "Stoor",
-    "title_label": "Titel",
-    "widgetTitlePlaceholder": "Widgettitel (opsioneel)",
-    "url": "URL",
-    "imageUrl": "Pasgemaakte beeld-URL",
-    "imageUrlHint": "Los leeg om die webwerf se gunstelingikoon outomaties te gebruik",
-    "showImage": "Wys Beeld",
-    "description": "Beskrywing",
-    "color": "Kleur",
-    "timezone": "Tydsone",
-    "invalidTimezone": "Ongeldige tydsone. Gebruik 'n IANA-naam soos Amerika/New_York",
-    "showSeconds": "Wys sekondes",
-    "format12h": "12-uur",
-    "content": "Inhoud",
-    "backgroundColor": "Agtergrondkleur",
-    "links": "Skakels",
-    "addLink": "Voeg skakel by",
-    "linkLabel": "Etiket",
-    "categoryLinks": "Skakels",
-    "categoryInfo": "Inligting",
-    "categorySystem": "Stelsel",
-    "copyLink": "Kopieer skakel",
-    "linkCopied": "Skakel gekopieer!",
-    "location": "Ligging",
-    "temperatureUnit": "Temperatuureenheid",
-    "showForecast": "Wys 3-dae voorspelling",
-    "scrolling": "Laat blaai toe",
-    "feedUrl": "Voer-URL",
-    "maxItems": "Maksimum items",
-    "showDescription": "Wys Beskrywing",
-    "widgetRssName": "RSS-voer",
-    "rssNoFeedUrl": "Konfigureer 'n voer-URL in widget-instellings",
-    "rssLoadError": "Kon nie voer laai nie",
-    "rssNoItems": "Geen items nie",
-    "noHostSelected": "Geen gasheer gekies nie",
-    "displayedMetrics": "Vertoonde Metrieke",
-    "metricCpu": "SVE",
-    "metricMemory": "Geheue",
-    "metricDisk": "Skyf",
-    "metricUptime": "Optyd",
-    "metricSystem": "Stelsel",
-    "metricNetwork": "Netwerk",
-    "metricProcesses": "Prosesse",
-    "categoryMonitoring": "Monitering",
-    "noPingUrls": "Geen URL'e gekonfigureer nie",
-    "pingLabel": "Etiket",
-    "addPingUrl": "Voeg URL by",
-    "showLatency": "Wys Latensie",
-    "refreshInterval": "Verversingsinterval",
-    "seconds": "sekondes",
-    "filterActivityTypes": "Filtertipes",
-    "filterTypesHint": "Los leeg om alles te wys",
-    "showTimestamp": "Wys Tydstempel",
-    "uptimeUnavailable": "Beskikbaar vir bedryfstyd",
-    "uptimeLabel": "Optyd",
-    "overviewVersion": "Weergawe",
-    "overviewUpdateLabel": "Opdatering",
-    "overviewUpdateAvailable": "Opdatering beskikbaar",
-    "overviewDatabase": "Databasis",
-    "overviewUptime": "Optyd",
-    "noHosts": "Geen gashere gekonfigureer nie",
-    "hostGridHosts": "Gashere",
-    "hostGridAllHint": "Los leeg om alle gashere te wys",
-    "columns": "Kolomme",
-    "showIp": "Wys IP-adres",
-    "layout": "Uitleg",
-    "showStatus": "Wys Status",
-    "noActivity": "Geen aktiwiteit nie",
-    "widgetPingStatusName": "Ping-status",
-    "widgetRecentActivityName": "Onlangse Aktiwiteit",
-    "sshTerminalNoHost": "Geen gasheer gekonfigureer nie",
-    "sshTerminalConnect": "Verbind",
-    "sshTerminalAutoConnect": "Koppel outomaties tydens laai",
-    "connectionTypes": "Verbindingstipes",
-    "calMon": "Ma",
-    "calTue": "Di",
-    "calWed": "Ons",
-    "calThu": "Do",
-    "calFri": "Vr",
-    "calSat": "Sa",
-    "calSun": "So",
-    "startOnMonday": "Begin week op Maandag",
-    "countdownNoDate": "Geen teikendatum gestel nie",
-    "countdownPast": "Gebeurtenis het verbygegaan",
-    "countdownDays": "dae",
-    "countdownHours": "ure",
-    "countdownMinutes": "min",
-    "countdownSeconds": "sek",
-    "countdownLabel": "Etiket",
-    "countdownLabelPlaceholder": "bv. Bekendstellingsdag",
-    "countdownShowDays": "Skou Dae",
-    "countdownShowHours": "Wys Ure",
-    "targetDate": "Teikendatum",
-    "searchEngine": "Soekenjin",
-    "customSearchUrl": "Pasgemaakte soektog-URL",
-    "searchPlaceholder": "Soek...",
-    "searchGo": "Gaan",
-    "searchPlaceholderLabel": "Plekhouerteks",
-    "searchPlaceholderHint": "Teks wat binne die soekinvoer gewys word",
-    "openInNewTab": "Maak oop in Nuwe Oortjie",
-    "searchQueryPlaceholder": "Voer navraag in...",
-    "noSearchShortcuts": "Geen kortpaaie gekonfigureer nie",
-    "addSearchShortcut": "Voeg kortpad by",
-    "fontSize": "Lettergrootte",
-    "textAlign": "Teksbelyning",
-    "fontWeight": "Lettertipe Gewig",
-    "clearColor": "Duidelike Kleur",
-    "imageFit": "Beeldpassing",
-    "imageLinkUrl": "Skakel-URL",
-    "noImage": "Geen beeld-URL gestel nie",
-    "altText": "Alt-teks",
-    "altTextPlaceholder": "Beskryf die beeld",
-    "renderMarkdown": "Lewer Markdown",
-    "displayMode": "Vertoonmodus",
-    "displayField": "Vertoonveld",
-    "jsonPath": "JSON-pad",
-    "customApiLabel": "Etiket",
-    "customApiLabelPlaceholder": "bv. Temperatuur",
-    "customApiUnit": "Eenheid",
-    "customApiNoUrl": "Geen API-URL gekonfigureer nie",
-    "customApiError": "Kon nie haal nie",
-    "customApiNotArray": "Antwoord is nie 'n skikking nie",
-    "addService": "Voeg Diens by",
-    "showLabels": "Wys etikette",
-    "iconSize": "Ikoongrootte",
-    "noDashboardLinks": "Geen dashboard-skakels gekonfigureer nie",
-    "noLimit": "Geen limiet nie",
-    "sectionHeading": "Afdelingsopskrif",
-    "addSection": "Voeg Afdeling by",
-    "compactMode": "Kompakte modus",
-    "selectHosts": "Kies gashere",
-    "listLayout": "Lys",
-    "gridLayout": "Rooster",
-    "configureUrl": "Stel 'n URL in die widget-instellings",
-    "embeddedContent": "Ingeslote inhoud",
-    "noBookmarks": "Geen boekmerke nie",
-    "noSections": "Geen afdelings opgestel nie",
-    "noServices": "Geen dienste opgestel nie",
-    "configureLocation": "Stel 'n ligging in die widget-instellings",
-    "bannerTextPlaceholder": "Banier teks",
-    "serviceNamePlaceholder": "My diens",
-    "emptyNote": "Leë nota...",
-    "weatherLoadFailed": "Kon nie weer vir \"{{location}} \" laai nie",
-    "feelsLike": "Voel soos {{temperature}}",
-    "timezonePlaceholder": "Amerika/New_York (los leeg vir plaaslik)",
-    "notesPlaceholder": "Skryf jou notas hier neer...",
-    "locationPlaceholder": "New York, Londen, Tokio...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Boekmerke",
-        "description": "'n Lys van vinnige skakels"
-      },
-      "calendar": {
-        "name": "Kalender",
-        "description": "'n Maandkalender met vandag uitgelig"
-      },
-      "clock": {
-        "name": "Klok",
-        "description": "'n Regstreekse horlosie met konfigureerbare tydsone"
-      },
-      "countdown": {
-        "name": "Aftelling",
-        "description": "Tel af na 'n teikendatum en -tyd"
-      },
-      "custom_api": {
-        "name": "Pasgemaakte API",
-        "description": "Haal en vertoon data vanaf enige JSON API"
-      },
-      "dashboard_links": {
-        "name": "Skakels op die dashboard",
-        "description": "Wys jou gestoorde dashboard-diensskakels"
-      },
-      "folder": {
-        "name": "Vouer",
-        "description": "'n Agtergrondkaart vir die visuele groepering van widgets"
-      },
-      "host_grid": {
-        "name": "Gasheerrooster",
-        "description": "Oorsigrooster vir regstreekse status vir al jou SSH-gashere"
-      },
-      "host_status": {
-        "name": "Gasheerstatus",
-        "description": "Toon lewendige status en statistieke vir 'n SSH-gasheer"
-      },
-      "iframe_embed": {
-        "name": "iFrame-inbedding",
-        "description": "Voeg enige URL in 'n iframe in"
-      },
-      "image_widget": {
-        "name": "Beeld",
-        "description": "Wys enige beeld vanaf 'n URL"
-      },
-      "link_tree": {
-        "name": "Skakelboom",
-        "description": "Gegroepeerde skakels georganiseer in geëtiketteerde afdelings"
-      },
-      "markdown_notes": {
-        "name": "Notas oor afmerkings",
-        "description": "Notas met opsionele Markdown-weergawe en inlynredigering"
-      },
-      "notes": {
-        "name": "Notas",
-        "description": "'n Teksnotas-widget"
-      },
-      "ping_status": {
-        "name": "Ping-status",
-        "description": "Kontroleer of URL'e of dienste bereikbaar is"
-      },
-      "quick_connect": {
-        "name": "Vinnige verbinding",
-        "description": "Begin terminaal, lêers, docker, tonnels en meer vir jou gashere"
-      },
-      "recent_activity": {
-        "name": "Onlangse Aktiwiteit",
-        "description": "Wys onlangse terminaal-, Docker-, lêer- en tonnelaktiwiteit"
-      },
-      "rss_feed": {
-        "name": "RSS-voer",
-        "description": "Wys items vanaf 'n RSS- of Atom-voer"
-      },
-      "search_bar": {
-        "name": "Soekbalk",
-        "description": "Vinnige soektog met Google, DuckDuckGo, Bing of 'n persoonlike soekenjin"
-      },
-      "search_links": {
-        "name": "Soek Kortpaaie",
-        "description": "Vinnige knoppies om verskillende enjins te soek"
-      },
-      "service_grid": {
-        "name": "Diensnetwerk",
-        "description": "'n Rooster van diens-teëls met ikone en skakels"
-      },
-      "service_link": {
-        "name": "Diens skakel",
-        "description": "'n Klikbare teël wat na 'n diens-URL skakel"
-      },
-      "ssh_terminal": {
-        "name": "SSH-terminaal",
-        "description": "'n Inlyn SSH-terminaal gekoppel aan 'n gekonfigureerde gasheer"
-      },
-      "system_overview": {
-        "name": "Stelseloorsig",
-        "description": "Termix-weergawe, databasisgesondheid en bedryfstyd in 'n oogopslag"
-      },
-      "termix_uptime": {
-        "name": "Termix-optyd",
-        "description": "Wys hoe lank die Termix-bediener al loop"
-      },
-      "text_banner": {
-        "name": "Teksbanier",
-        "description": "'n Gestileerde teksetiket vir afdelings en opskrifte"
-      },
-      "weather": {
-        "name": "Weer",
-        "description": "Regstreekse weer vir enige plek"
-      },
-      "docker_widget": {
-        "name": "Docker Bestuurder",
-        "description": "Ingeboude Docker-houerbestuurder vir 'n gekonfigureerde gasheer"
-      },
-      "file_manager_widget": {
-        "name": "Lêerbestuurder",
-        "description": "Ingeboude SFTP-lêerbestuurder vir 'n gekonfigureerde gasheer"
-      },
-      "tunnel_widget": {
-        "name": "Tonnelbestuurder",
-        "description": "Ingeboude SSH-tonnelbestuurder vir 'n gekonfigureerde gasheer"
-      },
-      "metrics_chart": {
-        "name": "Metrieke Grafiek",
-        "description": "Historiese SVE-, geheue-, skyf- of netwerkgrafiek vir 'n gasheer"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Gebruik die tuisblad",
-      "description": "Bekyk en wysig die tuisblad-doek en dashboarddiensskakels."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Toegelate privaat gashere",
-      "description": "Presiese private of teruglus-gasheername/IP's vir Ping Status en Pasgemaakte API-widgets. Skei inskrywings met kommas of nuwe reëls; laat skemas, poorte en paaie weg. Maak private bestemmings leeg."
-    },
-    "privateCertificateAuthority": {
-      "label": "Privaat sertifikaatowerheid (PEM)",
-      "description": "Opsionele vertroude CA-bundel vir gashere op die toelaatlys. Sertifikaatverifikasie bly geaktiveer. Los leeg om die stelselvertrouensberging te gebruik."
-    }
-  },
-  "plugin": {
-    "name": "Tuisblad"
-  }
-}
diff --git a/plugins/homepage/locales/translated/ar_SA.json b/plugins/homepage/locales/translated/ar_SA.json
deleted file mode 100644
index a20ed2fe3..000000000
--- a/plugins/homepage/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "الصفحة الرئيسية"
-  },
-  "dashboard": {
-    "serviceLinks": "روابط الخدمات",
-    "homepagePreview": "معاينة الصفحة الرئيسية"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "روابط الخدمات",
-    "serviceLinksEmpty": "لا توجد روابط خدمات بعد",
-    "serviceLinksAdd": "إضافة",
-    "serviceLinksLabelPlaceholder": "خدمتي",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "أدخل عنوان ويب صالح",
-    "serviceLinksAddFailed": "فشل في إضافة رابط الخدمة"
-  },
-  "homepage": {
-    "title": "الصفحة الرئيسية",
-    "addWidget": "إضافة ويدجت",
-    "noWidgetsInCategory": "لا توجد أدوات في هذه الفئة",
-    "editWidget": "تعديل ويدجت",
-    "zoomIn": "تكبير",
-    "zoomOut": "تصغير",
-    "resetView": "إعادة تعيين العرض",
-    "lockLayout": "قفل التخطيط",
-    "unlockLayout": "إلغاء قفل التخطيط",
-    "noWidgets": "انقر بزر الماوس الأيمن أو انقر على + لإضافة أداتك الأولى",
-    "openFullView": "فتح العرض الكامل",
-    "previewTitle": "معاينة الصفحة الرئيسية",
-    "cancel": "إلغاء",
-    "save": "حفظ",
-    "title_label": "العنوان",
-    "widgetTitlePlaceholder": "عنوان الأداة (اختياري)",
-    "url": "URL",
-    "imageUrl": "URL صورة مخصصة",
-    "imageUrlHint": "اتركه فارغًا لاستخدام أيقونة الموقع تلقائيًا",
-    "showImage": "إظهار الصورة",
-    "description": "الوصف",
-    "color": "اللون",
-    "timezone": "المنطقة الزمنية",
-    "invalidTimezone": "المنطقة الزمنية غير صالحة. استخدم اسمًا من IANA مثل America/New_York",
-    "showSeconds": "عرض الثواني",
-    "format12h": "12 ساعة",
-    "content": "المحتوى",
-    "backgroundColor": "لون الخلفية",
-    "links": "روابط",
-    "addLink": "إضافة رابط",
-    "linkLabel": "التسمية",
-    "categoryLinks": "روابط",
-    "categoryInfo": "معلومات",
-    "categorySystem": "النظام",
-    "copyLink": "نسخ الرابط",
-    "linkCopied": "تم نسخ الرابط!",
-    "location": "الموقع",
-    "temperatureUnit": "وحدة درجة الحرارة",
-    "showForecast": "إظهار توقعات 3 أيام",
-    "scrolling": "السماح بالتمرير",
-    "feedUrl": "رابط التغذية",
-    "maxItems": "الحد الأقصى للعناصر",
-    "showDescription": "إظهار الوصف",
-    "widgetRssName": "تغذية RSS",
-    "rssNoFeedUrl": "قم بتكوين عنوان URL للتغذية في إعدادات الأداة",
-    "rssLoadError": "تعذر تحميل التغذية",
-    "rssNoItems": "لا يوجد منتج",
-    "noHostSelected": "لم يتم تحديد أي مضيف",
-    "displayedMetrics": "المقاييس المعروضة",
-    "metricCpu": "CPU",
-    "metricMemory": "الذاكرة",
-    "metricDisk": "القرص",
-    "metricUptime": "وقت التشغيل",
-    "metricSystem": "النظام",
-    "metricNetwork": "الشبكة",
-    "metricProcesses": "العمليات",
-    "categoryMonitoring": "المراقبة",
-    "noPingUrls": "لم يتم تكوين عناوين URL",
-    "pingLabel": "التسمية",
-    "addPingUrl": "إضافة URL",
-    "showLatency": "إظهار زمن الانتقال",
-    "refreshInterval": "فترة التحديث",
-    "seconds": "ثانية",
-    "filterActivityTypes": "أنواع التصفية",
-    "filterTypesHint": "اترك فارغاً لإظهار الكل",
-    "showTimestamp": "إظهار الطابع الزمني",
-    "uptimeUnavailable": "وقت التشغيل غير متوفر",
-    "uptimeLabel": "وقت التشغيل",
-    "overviewVersion": "الإصدار",
-    "overviewUpdateLabel": "تحديث",
-    "overviewUpdateAvailable": "تحديث متوفر",
-    "overviewDatabase": "قاعدة البيانات",
-    "overviewUptime": "وقت التشغيل",
-    "noHosts": "لا توجد مضيفات مُهيأة",
-    "hostGridHosts": "المضيفات",
-    "hostGridAllHint": "اتركه فارغًا لعرض جميع المضيفات",
-    "columns": "الأعمدة",
-    "showIp": "إظهار عنوان IP",
-    "layout": "التخطيط",
-    "showStatus": "إظهار الحالة",
-    "noActivity": "لا يوجد نشاط",
-    "widgetPingStatusName": "حالة Ping",
-    "widgetRecentActivityName": "النشاط الأخير",
-    "sshTerminalNoHost": "لم يتم إعداد مضيف",
-    "sshTerminalConnect": "اتصل",
-    "sshTerminalAutoConnect": "اتصال تلقائي عند التحميل",
-    "connectionTypes": "أنواع الاتصال",
-    "calMon": "إثنين",
-    "calTue": "ثلاثاء",
-    "calWed": "أربعاء",
-    "calThu": "خميس",
-    "calFri": "جمعة",
-    "calSat": "سبت",
-    "calSun": "أحد",
-    "startOnMonday": "بدء الأسبوع يوم الإثنين",
-    "countdownNoDate": "لم يتم تحديد تاريخ مستهدف",
-    "countdownPast": "انقضى الحدث",
-    "countdownDays": "أيام",
-    "countdownHours": "ساعات",
-    "countdownMinutes": "دقائق",
-    "countdownSeconds": "ثوانٍ",
-    "countdownLabel": "تسمية",
-    "countdownLabelPlaceholder": "مثال: يوم الإطلاق",
-    "countdownShowDays": "إظهار الأيام",
-    "countdownShowHours": "إظهار الساعات",
-    "targetDate": "التاريخ المستهدف",
-    "searchEngine": "محرك البحث",
-    "customSearchUrl": "عنوان URL بحث مخصص",
-    "searchPlaceholder": "بحث...",
-    "searchGo": "تنفيذ",
-    "searchPlaceholderLabel": "نص العنصر النائب",
-    "searchPlaceholderHint": "النص المعروض داخل حقل البحث",
-    "openInNewTab": "فتح في علامة تبويب جديدة",
-    "searchQueryPlaceholder": "أدخل الاستعلام...",
-    "noSearchShortcuts": "لا توجد اختصارات مكونة",
-    "addSearchShortcut": "إضافة اختصار",
-    "fontSize": "حجم الخط",
-    "textAlign": "محاذاة النص",
-    "fontWeight": "وزن الخط",
-    "clearColor": "مسح اللون",
-    "imageFit": "ملاءمة الصورة",
-    "imageLinkUrl": "رابط URL",
-    "noImage": "لم يتم تعيين عنوان URL للصورة",
-    "altText": "نص بديل",
-    "altTextPlaceholder": "وصف الصورة",
-    "renderMarkdown": "عرض Markdown",
-    "displayMode": "وضع العرض",
-    "displayField": "حقل العرض",
-    "jsonPath": "مسار JSON",
-    "customApiLabel": "تسمية",
-    "customApiLabelPlaceholder": "مثال: درجة الحرارة",
-    "customApiUnit": "وحدة",
-    "customApiNoUrl": "لم يتم تكوين عنوان URL API",
-    "customApiError": "فشل في الجلب",
-    "customApiNotArray": "الاستجابة ليست مصفوفة",
-    "addService": "إضافة خدمة",
-    "showLabels": "إظهار التسميات",
-    "iconSize": "حجم الأيقونة",
-    "noDashboardLinks": "لا توجد روابط لوحة تحكم مُعدة",
-    "noLimit": "غير محدود",
-    "sectionHeading": "عنوان القسم",
-    "addSection": "إضافة قسم",
-    "compactMode": "الوضع المضغوط",
-    "selectHosts": "اختيار المضيفين",
-    "listLayout": "قائمة",
-    "gridLayout": "شبكة",
-    "configureUrl": "قم بتعيين عنوان URL في إعدادات الأداة",
-    "embeddedContent": "المحتوى المضمن",
-    "noBookmarks": "لا توجد إشارات مرجعية",
-    "noSections": "لم يتم إعداد أي أقسام",
-    "noServices": "لم يتم إعداد أي خدمات",
-    "configureLocation": "حدد موقعًا في إعدادات الأداة",
-    "bannerTextPlaceholder": "نص الشعار",
-    "serviceNamePlaceholder": "خدمتي",
-    "emptyNote": "ورقة فارغة...",
-    "weatherLoadFailed": "تعذر تحميل حالة الطقس لـ \"{{location}}\"",
-    "feelsLike": "يبدو الأمر وكأنه {{temperature}}",
-    "timezonePlaceholder": "أمريكا/نيويورك (اترك هذا الحقل فارغًا للمنطقة المحلية)",
-    "notesPlaceholder": "اكتب ملاحظاتك هنا...",
-    "locationPlaceholder": "نيويورك، لندن، طوكيو...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "علامات مرجعية",
-        "description": "قائمة بالروابط السريعة"
-      },
-      "calendar": {
-        "name": "التقويم",
-        "description": "تقويم شهري مع تمييز اليوم"
-      },
-      "clock": {
-        "name": "الساعة",
-        "description": "ساعة مباشرة مع منطقة زمنية قابلة للتكوين"
-      },
-      "countdown": {
-        "name": "عداد تنازلي",
-        "description": "العد التنازلي حتى تاريخ ووقت محددين"
-      },
-      "custom_api": {
-        "name": "API مخصص",
-        "description": "جلب وعرض بيانات من أي JSON API"
-      },
-      "dashboard_links": {
-        "name": "روابط لوحة المعلومات",
-        "description": "يعرض روابط خدمات لوحة التحكم المحفوظة لديك"
-      },
-      "folder": {
-        "name": "مجلد",
-        "description": "بطاقة خلفية لتجميع الأدوات بشكل مرئي"
-      },
-      "host_grid": {
-        "name": "شبكة المضيفات",
-        "description": "شبكة عرض حالة مباشرة لجميع مضيفي SSH الخاصين بك"
-      },
-      "host_status": {
-        "name": "حالة المضيف",
-        "description": "يعرض الحالة المباشرة والمقاييس الخاصة بمضيف SSH"
-      },
-      "iframe_embed": {
-        "name": "تضمين iFrame",
-        "description": "تضمين أي رابط في إطار iFrame"
-      },
-      "image_widget": {
-        "name": "صورة",
-        "description": "عرض أي صورة من عنوان URL"
-      },
-      "link_tree": {
-        "name": "شجرة الروابط",
-        "description": "روابط مجمعة منظمة في أقسام مُصنفة"
-      },
-      "markdown_notes": {
-        "name": "ملاحظات ماركداون",
-        "description": "ملاحظات مع إمكانية عرض Markdown والتحرير المباشر"
-      },
-      "notes": {
-        "name": "ملاحظات",
-        "description": "أداة ملاحظات نصية"
-      },
-      "ping_status": {
-        "name": "حالة Ping",
-        "description": "تحقق من إمكانية الوصول إلى عناوين المواقع الإلكترونية أو الخدمات"
-      },
-      "quick_connect": {
-        "name": "اتصال سريع",
-        "description": "قم بتشغيل الطرفية والملفات وDocker والأنفاق والمزيد لأجهزتك المضيفة"
-      },
-      "recent_activity": {
-        "name": "النشاط الأخير",
-        "description": "يعرض النشاط الأخير للطرفية، وDocker، والملفات، والأنفاق"
-      },
-      "rss_feed": {
-        "name": "تغذية RSS",
-        "description": "عرض عناصر من تغذية RSS أو Atom"
-      },
-      "search_bar": {
-        "name": "شريط البحث",
-        "description": "بحث سريع باستخدام جوجل، أو دك دك جو، أو بينج، أو محرك بحث مخصص"
-      },
-      "search_links": {
-        "name": "اختصارات البحث",
-        "description": "أزرار سريعة للبحث في محركات البحث المختلفة"
-      },
-      "service_grid": {
-        "name": "شبكة الخدمات",
-        "description": "شبكة من مربعات الخدمات مع أيقونات وروابط"
-      },
-      "service_link": {
-        "name": "رابط الخدمة",
-        "description": "بلاطة قابلة للنقر تؤدي إلى رابط خدمة"
-      },
-      "ssh_terminal": {
-        "name": "طرفية SSH",
-        "description": "طرفية SSH مضمنة متصلة بمضيف مُعد"
-      },
-      "system_overview": {
-        "name": "نظرة عامة على النظام",
-        "description": "إصدار Termix، وحالة قاعدة البيانات، ووقت التشغيل في لمحة"
-      },
-      "termix_uptime": {
-        "name": "مدة تشغيل Termix",
-        "description": "يوضح هذا المدة التي ظل فيها خادم Termix قيد التشغيل"
-      },
-      "text_banner": {
-        "name": "لافتة نصية",
-        "description": "تسمية نصية منسقة للأقسام والعناوين"
-      },
-      "weather": {
-        "name": "الطقس",
-        "description": "حالة الطقس المباشرة لأي موقع"
-      },
-      "docker_widget": {
-        "name": "مدير Docker",
-        "description": "مدير حاويات Docker مدمج لمضيف مكوّن"
-      },
-      "file_manager_widget": {
-        "name": "مدير الملفات",
-        "description": "مدير ملفات SFTP مدمج لمضيف مكوّن"
-      },
-      "tunnel_widget": {
-        "name": "مدير الأنفاق",
-        "description": "مدير أنفاق SSH مدمج لمضيف مكوّن"
-      },
-      "metrics_chart": {
-        "name": "مخطط المقاييس",
-        "description": "مخطط تاريخي لوحدة المعالجة المركزية أو الذاكرة أو القرص أو الشبكة لمضيف"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "استخدم الصفحة الرئيسية",
-      "description": "عرض وتعديل روابط خدمة لوحة التحكم ولوحة الصفحة الرئيسية."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "المضيفون الخاصون المسموح بهم",
-      "description": "أدخل أسماء المضيفين/عناوين IP الخاصة أو عناوين الاسترجاع لعناصر واجهة برمجة التطبيقات (API) الخاصة بحالة الاتصال (Ping Status) وواجهة برمجة التطبيقات المخصصة (Custom API). افصل بين الإدخالات بفواصل أو أسطر جديدة؛ احذف المخططات والمنافذ والمسارات. اترك خانات فارغة للوجهات الخاصة."
-    },
-    "privateCertificateAuthority": {
-      "label": "هيئة إصدار الشهادات الخاصة (PEM)",
-      "description": "حزمة شهادات المصادقة الموثوقة اختيارية للأجهزة المضيفة المدرجة في القائمة المسموح بها. يبقى التحقق من الشهادات مُفعّلاً. اترك هذا الحقل فارغًا لاستخدام مخزن شهادات النظام الموثوقة."
-    }
-  },
-  "plugin": {
-    "name": "الصفحة الرئيسية"
-  }
-}
diff --git a/plugins/homepage/locales/translated/bg_BG.json b/plugins/homepage/locales/translated/bg_BG.json
deleted file mode 100644
index 206ab730d..000000000
--- a/plugins/homepage/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Начална страница"
-  },
-  "dashboard": {
-    "serviceLinks": "Връзки към услуги",
-    "homepagePreview": "Преглед на началната страница"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Връзки към услуги",
-    "serviceLinksEmpty": "Все още няма връзки към услуги",
-    "serviceLinksAdd": "Добавяне",
-    "serviceLinksLabelPlaceholder": "Моята услуга",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Въведете валиден уеб адрес",
-    "serviceLinksAddFailed": "Добавянето на линк към услугата не бе успешно"
-  },
-  "homepage": {
-    "title": "Начална страница",
-    "addWidget": "Добавяне на джаджа",
-    "noWidgetsInCategory": "Няма джаджи в тази категория",
-    "editWidget": "Редактиране на уиджет",
-    "zoomIn": "Увеличаване на мащаба",
-    "zoomOut": "Намаляване на мащаба",
-    "resetView": "Нулиране на изгледа",
-    "lockLayout": "Заключване на оформлението",
-    "unlockLayout": "Отключване на оформлението",
-    "noWidgets": "Щракнете с десния бутон или щракнете върху +, за да добавите първия си уиджет",
-    "openFullView": "Отваряне на пълен изглед",
-    "previewTitle": "Преглед на началната страница",
-    "cancel": "Отказ",
-    "save": "Запазване",
-    "title_label": "Заглавие",
-    "widgetTitlePlaceholder": "Заглавие на уиджета (по избор)",
-    "url": "URL адрес",
-    "imageUrl": "URL адрес на персонализирано изображение",
-    "imageUrlHint": "Оставете празно, за да използвате автоматично фавиконката на сайта",
-    "showImage": "Показване на изображение",
-    "description": "Описание",
-    "color": "Цвят",
-    "timezone": "Часова зона",
-    "invalidTimezone": "Невалидна часова зона. Използвайте име от IANA, като например America/New_York.",
-    "showSeconds": "Показване на секунди",
-    "format12h": "12-часов",
-    "content": "Съдържание",
-    "backgroundColor": "Цвят на фона",
-    "links": "Връзки",
-    "addLink": "Добавяне на връзка",
-    "linkLabel": "Етикет",
-    "categoryLinks": "Връзки",
-    "categoryInfo": "Информация",
-    "categorySystem": "Система",
-    "copyLink": "Копиране на връзката",
-    "linkCopied": "Линкът е копиран!",
-    "location": "Местоположение",
-    "temperatureUnit": "Температурна единица",
-    "showForecast": "Показване на 3-дневна прогноза",
-    "scrolling": "Разрешаване на превъртане",
-    "feedUrl": "URL адрес на емисията",
-    "maxItems": "Максимален брой елементи",
-    "showDescription": "Покажи описание",
-    "widgetRssName": "RSS емисия",
-    "rssNoFeedUrl": "Конфигурирайте URL адрес на емисията в настройките на уиджета",
-    "rssLoadError": "Не можа да се зареди емисията",
-    "rssNoItems": "Няма артикули",
-    "noHostSelected": "Няма избран хост",
-    "displayedMetrics": "Показани показатели",
-    "metricCpu": "Процесор",
-    "metricMemory": "Памет",
-    "metricDisk": "Диск",
-    "metricUptime": "Време на работа",
-    "metricSystem": "Система",
-    "metricNetwork": "Мрежа",
-    "metricProcesses": "Процеси",
-    "categoryMonitoring": "Мониторинг",
-    "noPingUrls": "Няма конфигурирани URL адреси",
-    "pingLabel": "Етикет",
-    "addPingUrl": "Добавяне на URL адрес",
-    "showLatency": "Покажи латентност",
-    "refreshInterval": "Интервал на обновяване",
-    "seconds": "секунди",
-    "filterActivityTypes": "Видове филтри",
-    "filterTypesHint": "Оставете празно, за да се покажат всички",
-    "showTimestamp": "Показване на времева маркировка",
-    "uptimeUnavailable": "Не е налично време за работа",
-    "uptimeLabel": "Време на работа",
-    "overviewVersion": "Версия",
-    "overviewUpdateLabel": "Актуализация",
-    "overviewUpdateAvailable": "Налична е актуализация",
-    "overviewDatabase": "База данни",
-    "overviewUptime": "Време на работа",
-    "noHosts": "Няма конфигурирани хостове",
-    "hostGridHosts": "Домакини",
-    "hostGridAllHint": "Оставете празно, за да се покажат всички хостове",
-    "columns": "Колони",
-    "showIp": "Показване на IP адрес",
-    "layout": "Оформление",
-    "showStatus": "Покажи състоянието",
-    "noActivity": "Няма активност",
-    "widgetPingStatusName": "Състояние на пинг",
-    "widgetRecentActivityName": "Последна активност",
-    "sshTerminalNoHost": "Няма конфигуриран хост",
-    "sshTerminalConnect": "Свържете се",
-    "sshTerminalAutoConnect": "Автоматично свързване при зареждане",
-    "connectionTypes": "Видове връзки",
-    "calMon": "Мо",
-    "calTue": "Вт",
-    "calWed": "Ние",
-    "calThu": "Четвъртък",
-    "calFri": "Пт",
-    "calSat": "Съ",
-    "calSun": "Су",
-    "startOnMonday": "Започнете седмицата в понеделник",
-    "countdownNoDate": "Няма определена целева дата",
-    "countdownPast": "Събитието е отминало",
-    "countdownDays": "дни",
-    "countdownHours": "часа",
-    "countdownMinutes": "мин.",
-    "countdownSeconds": "сек",
-    "countdownLabel": "Етикет",
-    "countdownLabelPlaceholder": "напр. Ден на стартиране",
-    "countdownShowDays": "Дни на шоуто",
-    "countdownShowHours": "Работно време на шоуто",
-    "targetDate": "Целева дата",
-    "searchEngine": "Търсачка",
-    "customSearchUrl": "URL адрес за персонализирано търсене",
-    "searchPlaceholder": "Търсене...",
-    "searchGo": "Отиди",
-    "searchPlaceholderLabel": "Текст на заместител",
-    "searchPlaceholderHint": "Текст, показан във полето за търсене",
-    "openInNewTab": "Отваряне в нов раздел",
-    "searchQueryPlaceholder": "Въведете заявка...",
-    "noSearchShortcuts": "Няма конфигурирани преки пътища",
-    "addSearchShortcut": "Добавяне на пряк път",
-    "fontSize": "Размер на шрифта",
-    "textAlign": "Подравняване на текста",
-    "fontWeight": "Тегло на шрифта",
-    "clearColor": "Ясен цвят",
-    "imageFit": "Напасване на изображението",
-    "imageLinkUrl": "URL адрес на връзката",
-    "noImage": "Няма зададен URL адрес на изображението",
-    "altText": "Алтернативен текст",
-    "altTextPlaceholder": "Опишете изображението",
-    "renderMarkdown": "Рендиране на маркиране",
-    "displayMode": "Режим на показване",
-    "displayField": "Поле за показване",
-    "jsonPath": "JSON път",
-    "customApiLabel": "Етикет",
-    "customApiLabelPlaceholder": "напр. Температура",
-    "customApiUnit": "Единица",
-    "customApiNoUrl": "Няма конфигуриран URL адрес на API",
-    "customApiError": "Неуспешно извличане",
-    "customApiNotArray": "Отговорът не е масив",
-    "addService": "Добавяне на услуга",
-    "showLabels": "Показване на етикети",
-    "iconSize": "Размер на иконата",
-    "noDashboardLinks": "Няма конфигурирани връзки към таблото за управление",
-    "noLimit": "Без ограничение",
-    "sectionHeading": "Заглавие на раздел",
-    "addSection": "Добавяне на раздел",
-    "compactMode": "Компактен режим",
-    "selectHosts": "Изберете хостове",
-    "listLayout": "Списък",
-    "gridLayout": "Решетка",
-    "configureUrl": "Задайте URL адрес в настройките на джаджата",
-    "embeddedContent": "Вградено съдържание",
-    "noBookmarks": "Няма отметки",
-    "noSections": "Няма настроени секции",
-    "noServices": "Няма настроени услуги",
-    "configureLocation": "Задайте местоположение в настройките на джаджата",
-    "bannerTextPlaceholder": "Текст на банера",
-    "serviceNamePlaceholder": "Моята услуга",
-    "emptyNote": "Празна бележка...",
-    "weatherLoadFailed": "Не можа да се зареди времето за „{{location}}“",
-    "feelsLike": "Чувства се като {{temperature}}",
-    "timezonePlaceholder": "Америка/Ню Йорк (оставете празно за местни)",
-    "notesPlaceholder": "Напишете бележките си тук...",
-    "locationPlaceholder": "Ню Йорк, Лондон, Токио...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Отметки",
-        "description": "Списък с бързи връзки"
-      },
-      "calendar": {
-        "name": "Календар",
-        "description": "Месечен календар с маркиран днешния ден"
-      },
-      "clock": {
-        "name": "Часовник",
-        "description": "Жив часовник с конфигурируема часова зона"
-      },
-      "countdown": {
-        "name": "Обратно броене",
-        "description": "Обратно броене до целева дата и час"
-      },
-      "custom_api": {
-        "name": "Персонализиран API",
-        "description": "Извличане и показване на данни от всеки JSON API"
-      },
-      "dashboard_links": {
-        "name": "Връзки към таблото за управление",
-        "description": "Показва запазените ви връзки към услуги на таблото за управление"
-      },
-      "folder": {
-        "name": "Папка",
-        "description": "Фонова карта за визуално групиране на джаджи"
-      },
-      "host_grid": {
-        "name": "Хост мрежа",
-        "description": "Таблица с общ преглед на състоянието в реално време за всички ваши SSH хостове"
-      },
-      "host_status": {
-        "name": "Състояние на хоста",
-        "description": "Показва състоянието и показателите в реално време за SSH хост"
-      },
-      "iframe_embed": {
-        "name": "Вграждане на iFrame",
-        "description": "Вграждане на произволен URL адрес във вложена рамка"
-      },
-      "image_widget": {
-        "name": "Изображение",
-        "description": "Показване на произволно изображение от URL адрес"
-      },
-      "link_tree": {
-        "name": "Дърво на връзките",
-        "description": "Групирани връзки, организирани в етикетирани секции"
-      },
-      "markdown_notes": {
-        "name": "Бележки за маркиране",
-        "description": "Бележки с опционално рендиране на Markdown и редактиране на текст"
-      },
-      "notes": {
-        "name": "Бележки",
-        "description": "Джаджа за текстови бележки"
-      },
-      "ping_status": {
-        "name": "Състояние на пинг",
-        "description": "Проверете дали URL адресите или услугите са достъпни"
-      },
-      "quick_connect": {
-        "name": "Бързо свързване",
-        "description": "Стартирайте терминал, файлове, Docker, тунели и други за вашите хостове"
-      },
-      "recent_activity": {
-        "name": "Последна активност",
-        "description": "Показва скорошна активност в терминала, Docker, файла и тунела"
-      },
-      "rss_feed": {
-        "name": "RSS емисия",
-        "description": "Показване на елементи от RSS или Atom емисия"
-      },
-      "search_bar": {
-        "name": "Лента за търсене",
-        "description": "Бързо търсене с Google, DuckDuckGo, Bing или персонализирана търсачка"
-      },
-      "search_links": {
-        "name": "Търсене на бързи клавиши",
-        "description": "Бързи бутони за търсене в различни търсачки"
-      },
-      "service_grid": {
-        "name": "Сервизна мрежа",
-        "description": "Решетка от сервизни плочки с икони и връзки"
-      },
-      "service_link": {
-        "name": "Връзка към услугата",
-        "description": "Плочка, върху която може да се кликва, препращаща към URL адрес на услуга"
-      },
-      "ssh_terminal": {
-        "name": "SSH терминал",
-        "description": "Вграден SSH терминал, свързан с конфигуриран хост"
-      },
-      "system_overview": {
-        "name": "Преглед на системата",
-        "description": "Версия на Termix, състояние на базата данни и време на работа с един поглед"
-      },
-      "termix_uptime": {
-        "name": "Време на работа на Termix",
-        "description": "Показва колко дълго работи Termix сървърът"
-      },
-      "text_banner": {
-        "name": "Текстов банер",
-        "description": "Стилизиран текстов етикет за раздели и заглавия"
-      },
-      "weather": {
-        "name": "Времето",
-        "description": "Времето на живо за всяко място"
-      },
-      "docker_widget": {
-        "name": "Докер мениджър",
-        "description": "Вграден мениджър на Docker контейнери за конфигуриран хост"
-      },
-      "file_manager_widget": {
-        "name": "Файлов мениджър",
-        "description": "Вграден SFTP файлов мениджър за конфигуриран хост"
-      },
-      "tunnel_widget": {
-        "name": "Мениджър на тунели",
-        "description": "Вграден SSH тунелен мениджър за конфигуриран хост"
-      },
-      "metrics_chart": {
-        "name": "Диаграма с показатели",
-        "description": "Историческа диаграма на процесора, паметта, диска или мрежата за хост"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Използвайте началната страница",
-      "description": "Преглеждайте и редактирайте връзките към услугите на началната страница и таблото за управление."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Разрешени частни хостове",
-      "description": "Точни частни или loopback имена/IP адреси на хостове за Ping Status и Custom API джаджи. Разделете записите със запетаи или нови редове; пропуснете схеми, портове и пътища. Празните полета блокират частни дестинации."
-    },
-    "privateCertificateAuthority": {
-      "label": "Частен сертифициращ орган (PEM)",
-      "description": "Незадължителен пакет с доверени CA за хостове от разрешения списък. Проверката на сертификата остава активирана. Оставете празно, за да използвате хранилището за доверени сертификати на системата."
-    }
-  },
-  "plugin": {
-    "name": "Начална страница"
-  }
-}
diff --git a/plugins/homepage/locales/translated/bn_BD.json b/plugins/homepage/locales/translated/bn_BD.json
deleted file mode 100644
index 3a1a1dc8d..000000000
--- a/plugins/homepage/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "হোমপেজ"
-  },
-  "dashboard": {
-    "serviceLinks": "পরিষেবা লিঙ্ক",
-    "homepagePreview": "হোমপেজ প্রিভিউ"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "পরিষেবা লিঙ্ক",
-    "serviceLinksEmpty": "এখনও কোন পরিষেবা লিঙ্ক নেই",
-    "serviceLinksAdd": "যোগ করুন",
-    "serviceLinksLabelPlaceholder": "আমার পরিষেবা",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "একটি বৈধ ওয়েব ঠিকানা লিখুন",
-    "serviceLinksAddFailed": "পরিষেবা লিঙ্ক যোগ করতে ব্যর্থ হয়েছে"
-  },
-  "homepage": {
-    "title": "হোমপেজ",
-    "addWidget": "উইজেট যোগ করুন",
-    "noWidgetsInCategory": "এই বিভাগে কোনো উইজেট নেই",
-    "editWidget": "উইজেট সম্পাদনা করুন",
-    "zoomIn": "জুম ইন",
-    "zoomOut": "জুম আউট",
-    "resetView": "দৃশ্য রিসেট করুন",
-    "lockLayout": "লক লেআউট",
-    "unlockLayout": "লেআউট আনলক করুন",
-    "noWidgets": "আপনার প্রথম উইজেট যোগ করতে ডান-ক্লিক করুন অথবা + এ ক্লিক করুন।",
-    "openFullView": "সম্পূর্ণ দৃশ্য খুলুন",
-    "previewTitle": "হোমপেজ প্রিভিউ",
-    "cancel": "বাতিল করুন",
-    "save": "সংরক্ষণ করুন",
-    "title_label": "শিরোনাম",
-    "widgetTitlePlaceholder": "উইজেটের শিরোনাম (ঐচ্ছিক)",
-    "url": "ইউআরএল",
-    "imageUrl": "কাস্টম ইমেজ ইউআরএল",
-    "imageUrlHint": "সাইটের ফেভিকন স্বয়ংক্রিয়ভাবে ব্যবহার করতে খালি রাখুন।",
-    "showImage": "ছবি দেখান",
-    "description": "বর্ণনা",
-    "color": "রঙ",
-    "timezone": "সময় অঞ্চল",
-    "invalidTimezone": "অবৈধ টাইমজোন। America/New_York-এর মতো একটি IANA নাম ব্যবহার করুন।",
-    "showSeconds": "সেকেন্ড দেখান",
-    "format12h": "১২ ঘন্টা",
-    "content": "বিষয়বস্তু",
-    "backgroundColor": "পটভূমির রঙ",
-    "links": "লিঙ্ক",
-    "addLink": "লিঙ্ক যোগ করুন",
-    "linkLabel": "লেবেল",
-    "categoryLinks": "লিঙ্ক",
-    "categoryInfo": "তথ্য",
-    "categorySystem": "সিস্টেম",
-    "copyLink": "লিঙ্ক কপি করুন",
-    "linkCopied": "লিঙ্ক কপি করা হয়েছে!",
-    "location": "অবস্থান",
-    "temperatureUnit": "তাপমাত্রা ইউনিট",
-    "showForecast": "তিন দিনের পূর্বাভাস দেখান",
-    "scrolling": "স্ক্রোল করার অনুমতি দিন",
-    "feedUrl": "ফিড ইউআরএল",
-    "maxItems": "সর্বোচ্চ আইটেম",
-    "showDescription": "বিবরণ দেখান",
-    "widgetRssName": "আরএসএস ফিড",
-    "rssNoFeedUrl": "উইজেট সেটিংসে একটি ফিড ইউআরএল কনফিগার করুন।",
-    "rssLoadError": "ফিড লোড করা যায়নি",
-    "rssNoItems": "কোন আইটেম নেই",
-    "noHostSelected": "কোন হোস্ট নির্বাচন করা হয়নি",
-    "displayedMetrics": "প্রদর্শিত মেট্রিক্স",
-    "metricCpu": "সিপিইউ",
-    "metricMemory": "স্মৃতি",
-    "metricDisk": "ডিস্ক",
-    "metricUptime": "আপটাইম",
-    "metricSystem": "সিস্টেম",
-    "metricNetwork": "নেটওয়ার্ক",
-    "metricProcesses": "প্রক্রিয়া",
-    "categoryMonitoring": "পর্যবেক্ষণ",
-    "noPingUrls": "কোন URL কনফিগার করা নেই",
-    "pingLabel": "লেবেল",
-    "addPingUrl": "URL যোগ করুন",
-    "showLatency": "লেটেন্সি দেখান",
-    "refreshInterval": "রিফ্রেশ ব্যবধান",
-    "seconds": "সেকেন্ড",
-    "filterActivityTypes": "ফিল্টারের প্রকারভেদ",
-    "filterTypesHint": "সবগুলো দেখাতে খালি রাখুন",
-    "showTimestamp": "টাইমস্ট্যাম্প দেখান",
-    "uptimeUnavailable": "আপটাইম অনুপলব্ধ",
-    "uptimeLabel": "আপটাইম",
-    "overviewVersion": "সংস্করণ",
-    "overviewUpdateLabel": "আপডেট",
-    "overviewUpdateAvailable": "আপডেট উপলব্ধ",
-    "overviewDatabase": "ডাটাবেস",
-    "overviewUptime": "আপটাইম",
-    "noHosts": "কোন হোস্ট কনফিগার করা নেই",
-    "hostGridHosts": "হোস্টরা",
-    "hostGridAllHint": "সমস্ত হোস্ট দেখানোর জন্য খালি রাখুন",
-    "columns": "কলাম",
-    "showIp": "আইপি ঠিকানা দেখান",
-    "layout": "লেআউট",
-    "showStatus": "অবস্থা দেখান",
-    "noActivity": "কোন কার্যকলাপ নেই",
-    "widgetPingStatusName": "পিং স্ট্যাটাস",
-    "widgetRecentActivityName": "সাম্প্রতিক কার্যকলাপ",
-    "sshTerminalNoHost": "কোন হোস্ট কনফিগার করা নেই",
-    "sshTerminalConnect": "সংযোগ করুন",
-    "sshTerminalAutoConnect": "লোড হলে স্বয়ংক্রিয়ভাবে সংযোগ স্থাপন",
-    "connectionTypes": "সংযোগের প্রকারভেদ",
-    "calMon": "মো",
-    "calTue": "তু",
-    "calWed": "আমরা",
-    "calThu": "থ",
-    "calFri": "ফ্র",
-    "calSat": "সা",
-    "calSun": "সু",
-    "startOnMonday": "সোমবার থেকে সপ্তাহ শুরু করুন",
-    "countdownNoDate": "কোনো নির্দিষ্ট তারিখ নির্ধারণ করা হয়নি।",
-    "countdownPast": "অনুষ্ঠানটি শেষ হয়ে গেছে।",
-    "countdownDays": "দিন",
-    "countdownHours": "ঘন্টা",
-    "countdownMinutes": "মিনিট",
-    "countdownSeconds": "সেকেন্ড",
-    "countdownLabel": "লেবেল",
-    "countdownLabelPlaceholder": "যেমন লঞ্চের দিন",
-    "countdownShowDays": "শো ডেজ",
-    "countdownShowHours": "শো আওয়ার্স",
-    "targetDate": "লক্ষ্য তারিখ",
-    "searchEngine": "সার্চ ইঞ্জিন",
-    "customSearchUrl": "কাস্টম সার্চ ইউআরএল",
-    "searchPlaceholder": "অনুসন্ধান করুন...",
-    "searchGo": "যান",
-    "searchPlaceholderLabel": "স্থানধারক পাঠ্য",
-    "searchPlaceholderHint": "সার্চ ইনপুটের ভিতরে দেখানো টেক্সট",
-    "openInNewTab": "নতুন ট্যাবে খুলুন",
-    "searchQueryPlaceholder": "প্রশ্ন লিখুন...",
-    "noSearchShortcuts": "কোন শর্টকাট কনফিগার করা নেই",
-    "addSearchShortcut": "শর্টকাট যোগ করুন",
-    "fontSize": "ফন্ট সাইজ",
-    "textAlign": "টেক্সট অ্যালাইন",
-    "fontWeight": "ফন্ট ওজন",
-    "clearColor": "পরিষ্কার রঙ",
-    "imageFit": "ইমেজ ফিট",
-    "imageLinkUrl": "লিঙ্ক ইউআরএল",
-    "noImage": "কোন ছবির ইউআরএল সেট করা হয়নি",
-    "altText": "বিকল্প পাঠ্য",
-    "altTextPlaceholder": "ছবিটি বর্ণনা করুন",
-    "renderMarkdown": "রেন্ডার মার্কডাউন",
-    "displayMode": "ডিসপ্লে মোড",
-    "displayField": "ডিসপ্লে ফিল্ড",
-    "jsonPath": "JSON পাথ",
-    "customApiLabel": "লেবেল",
-    "customApiLabelPlaceholder": "যেমন তাপমাত্রা",
-    "customApiUnit": "ইউনিট",
-    "customApiNoUrl": "কোন API URL কনফিগার করা নেই",
-    "customApiError": "আনতে ব্যর্থ হয়েছে",
-    "customApiNotArray": "প্রতিক্রিয়া একটি অ্যারে নয়",
-    "addService": "পরিষেবা যোগ করুন",
-    "showLabels": "লেবেল দেখান",
-    "iconSize": "আইকনের আকার",
-    "noDashboardLinks": "কোন ড্যাশবোর্ড লিঙ্ক কনফিগার করা নেই",
-    "noLimit": "কোনো সীমা নেই",
-    "sectionHeading": "বিভাগ শিরোনাম",
-    "addSection": "বিভাগ যোগ করুন",
-    "compactMode": "কমপ্যাক্ট মোড",
-    "selectHosts": "হোস্ট নির্বাচন করুন",
-    "listLayout": "তালিকা",
-    "gridLayout": "গ্রিড",
-    "configureUrl": "উইজেট সেটিংসে একটি URL সেট করুন।",
-    "embeddedContent": "এমবেডেড কন্টেন্ট",
-    "noBookmarks": "কোন বুকমার্ক নেই",
-    "noSections": "কোন বিভাগ তৈরি করা হয়নি",
-    "noServices": "কোন পরিষেবা সেট আপ করা হয়নি",
-    "configureLocation": "উইজেট সেটিংসে একটি অবস্থান নির্ধারণ করুন।",
-    "bannerTextPlaceholder": "ব্যানার টেক্সট",
-    "serviceNamePlaceholder": "আমার পরিষেবা",
-    "emptyNote": "খালি নোট...",
-    "weatherLoadFailed": "\"{{location}} \" এর জন্য আবহাওয়া লোড করা যায়নি",
-    "feelsLike": "{{temperature}} এর মতো লাগছে",
-    "timezonePlaceholder": "আমেরিকা/নিউ_ইয়র্ক (স্থানীয় ঠিকানার জন্য খালি রাখুন)",
-    "notesPlaceholder": "আপনার নোটগুলো এখানে লিখুন...",
-    "locationPlaceholder": "নিউ ইয়র্ক, লন্ডন, টোকিও...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "বুকমার্ক",
-        "description": "দ্রুত লিঙ্কের একটি তালিকা"
-      },
-      "calendar": {
-        "name": "ক্যালেন্ডার",
-        "description": "একটি মাসিক ক্যালেন্ডার যেখানে আজকের দিনটি চিহ্নিত করা আছে"
-      },
-      "clock": {
-        "name": "ঘড়ি",
-        "description": "পরিবর্তনযোগ্য টাইমজোন সহ একটি লাইভ ঘড়ি"
-      },
-      "countdown": {
-        "name": "কাউন্টডাউন",
-        "description": "একটি নির্দিষ্ট তারিখ ও সময়ের দিকে গণনা শুরু হয়"
-      },
-      "custom_api": {
-        "name": "কাস্টম এপিআই",
-        "description": "যেকোনো JSON API থেকে ডেটা সংগ্রহ ও প্রদর্শন করুন"
-      },
-      "dashboard_links": {
-        "name": "ড্যাশবোর্ড লিঙ্ক",
-        "description": "আপনার সংরক্ষিত ড্যাশবোর্ড পরিষেবা লিঙ্কগুলি দেখায়"
-      },
-      "folder": {
-        "name": "ফোল্ডার",
-        "description": "উইজেটগুলোকে দৃশ্যত দলবদ্ধ করার জন্য একটি ব্যাকগ্রাউন্ড কার্ড"
-      },
-      "host_grid": {
-        "name": "হোস্ট গ্রিড",
-        "description": "আপনার সমস্ত SSH হোস্টের জন্য লাইভ স্ট্যাটাস ওভারভিউ গ্রিড"
-      },
-      "host_status": {
-        "name": "হোস্ট স্ট্যাটাস",
-        "description": "একটি SSH হোস্টের লাইভ স্ট্যাটাস এবং মেট্রিক্স দেখায়।"
-      },
-      "iframe_embed": {
-        "name": "আইফ্রেম এমবেড",
-        "description": "যেকোনো URL একটি iframe-এ এমবেড করুন।"
-      },
-      "image_widget": {
-        "name": "ছবি",
-        "description": "একটি URL থেকে যেকোনো ছবি প্রদর্শন করুন"
-      },
-      "link_tree": {
-        "name": "লিঙ্ক ট্রি",
-        "description": "লেবেলযুক্ত বিভাগে সংগঠিত গ্রুপ করা লিঙ্কগুলি"
-      },
-      "markdown_notes": {
-        "name": "মার্কডাউন নোট",
-        "description": "ঐচ্ছিক মার্কডাউন রেন্ডারিং এবং ইনলাইন সম্পাদনা সহ নোট"
-      },
-      "notes": {
-        "name": "নোট",
-        "description": "একটি টেক্সট নোট উইজেট"
-      },
-      "ping_status": {
-        "name": "পিং স্ট্যাটাস",
-        "description": "ইউআরএল বা পরিষেবাগুলি অ্যাক্সেসযোগ্য কিনা তা পরীক্ষা করুন।"
-      },
-      "quick_connect": {
-        "name": "কুইক কানেক্ট",
-        "description": "আপনার হোস্টগুলির জন্য টার্মিনাল, ফাইল, ডকার, টানেল এবং আরও অনেক কিছু চালু করুন।"
-      },
-      "recent_activity": {
-        "name": "সাম্প্রতিক কার্যকলাপ",
-        "description": "সাম্প্রতিক টার্মিনাল, ডকার, ফাইল এবং টানেল কার্যকলাপ দেখায়।"
-      },
-      "rss_feed": {
-        "name": "আরএসএস ফিড",
-        "description": "আরএসএস বা অ্যাটম ফিড থেকে আইটেমগুলি প্রদর্শন করুন"
-      },
-      "search_bar": {
-        "name": "সার্চ বার",
-        "description": "গুগল, ডাকডাকগো, বিং বা নিজস্ব ইঞ্জিন দিয়ে দ্রুত অনুসন্ধান করুন"
-      },
-      "search_links": {
-        "name": "অনুসন্ধান শর্টকাট",
-        "description": "বিভিন্ন ইঞ্জিন অনুসন্ধান করার জন্য দ্রুত বাটন"
-      },
-      "service_grid": {
-        "name": "সার্ভিস গ্রিড",
-        "description": "আইকন এবং লিঙ্ক সহ পরিষেবা টাইলগুলির একটি গ্রিড"
-      },
-      "service_link": {
-        "name": "সার্ভিস লিঙ্ক",
-        "description": "একটি পরিষেবা URL-এর সাথে লিঙ্কযুক্ত একটি ক্লিকযোগ্য টাইল।"
-      },
-      "ssh_terminal": {
-        "name": "এসএসএইচ টার্মিনাল",
-        "description": "একটি কনফিগার করা হোস্টের সাথে সংযুক্ত একটি ইনলাইন SSH টার্মিনাল"
-      },
-      "system_overview": {
-        "name": "সিস্টেমের সংক্ষিপ্ত বিবরণ",
-        "description": "এক নজরে টারমিক্স সংস্করণ, ডেটাবেসের অবস্থা এবং আপটাইম"
-      },
-      "termix_uptime": {
-        "name": "টার্মিক্স আপটাইম",
-        "description": "টারমিক্স সার্ভারটি কতক্ষণ ধরে চলছে তা দেখায়।"
-      },
-      "text_banner": {
-        "name": "টেক্সট ব্যানার",
-        "description": "বিভাগ এবং শিরোনামের জন্য একটি শৈলীযুক্ত পাঠ্য লেবেল"
-      },
-      "weather": {
-        "name": "আবহাওয়া",
-        "description": "যেকোনো স্থানের সরাসরি আবহাওয়ার খবর"
-      },
-      "docker_widget": {
-        "name": "ডকার ম্যানেজার",
-        "description": "একটি কনফিগার করা হোস্টের জন্য এমবেডেড ডকার কন্টেইনার ম্যানেজার"
-      },
-      "file_manager_widget": {
-        "name": "ফাইল ম্যানেজার",
-        "description": "একটি কনফিগার করা হোস্টের জন্য এমবেডেড এসএফটিপি ফাইল ম্যানেজার"
-      },
-      "tunnel_widget": {
-        "name": "টানেল ম্যানেজার",
-        "description": "একটি কনফিগার করা হোস্টের জন্য এমবেডেড SSH টানেল ম্যানেজার"
-      },
-      "metrics_chart": {
-        "name": "মেট্রিক্স চার্ট",
-        "description": "একটি হোস্টের ঐতিহাসিক সিপিইউ, মেমরি, ডিস্ক বা নেটওয়ার্ক চার্ট"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "হোমপেজ ব্যবহার করুন",
-      "description": "হোমপেজ ক্যানভাস এবং ড্যাশবোর্ড সার্ভিস লিঙ্কগুলো দেখুন ও সম্পাদনা করুন।"
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "ব্যক্তিগত হোস্টদের অনুমতি দেওয়া হয়েছে",
-      "description": "পিং স্ট্যাটাস এবং কাস্টম এপিআই উইজেটগুলির জন্য সঠিক প্রাইভেট বা লুপব্যাক হোস্টনেম/আইপি। এন্ট্রিগুলিকে কমা বা নিউলাইন দিয়ে আলাদা করুন; স্কিম, পোর্ট এবং পাথ বাদ দিন। খালি ব্লকগুলি প্রাইভেট গন্তব্য।"
-    },
-    "privateCertificateAuthority": {
-      "label": "বেসরকারি শংসাপত্র কর্তৃপক্ষ (পিইএম)",
-      "description": "অনুমোদিত হোস্টগুলির জন্য ঐচ্ছিক বিশ্বস্ত CA বান্ডেল। সার্টিফিকেট যাচাইকরণ সক্রিয় থাকবে। সিস্টেম ট্রাস্ট স্টোর ব্যবহার করতে এটি খালি রাখুন।"
-    }
-  },
-  "plugin": {
-    "name": "হোমপেজ"
-  }
-}
diff --git a/plugins/homepage/locales/translated/ca_ES.json b/plugins/homepage/locales/translated/ca_ES.json
deleted file mode 100644
index 7fa1bbbb0..000000000
--- a/plugins/homepage/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Pàgina d'inici"
-  },
-  "dashboard": {
-    "serviceLinks": "Enllaços de servei",
-    "homepagePreview": "Vista prèvia de la pàgina d'inici"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Enllaços de servei",
-    "serviceLinksEmpty": "Encara no hi ha enllaços de servei",
-    "serviceLinksAdd": "Afegeix",
-    "serviceLinksLabelPlaceholder": "El meu servei",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Introduïu una adreça web vàlida",
-    "serviceLinksAddFailed": "No s'ha pogut afegir l'enllaç del servei"
-  },
-  "homepage": {
-    "title": "Pàgina d'inici",
-    "addWidget": "Afegeix un widget",
-    "noWidgetsInCategory": "No hi ha widgets en aquesta categoria",
-    "editWidget": "Edita el widget",
-    "zoomIn": "Ampliar zoom",
-    "zoomOut": "Allunyar",
-    "resetView": "Restableix la vista",
-    "lockLayout": "Disseny de bloqueig",
-    "unlockLayout": "Desbloqueja el disseny",
-    "noWidgets": "Feu clic amb el botó dret o feu clic a + per afegir el primer widget",
-    "openFullView": "Obre la vista completa",
-    "previewTitle": "Vista prèvia de la pàgina d'inici",
-    "cancel": "Cancel·la",
-    "save": "Desa",
-    "title_label": "Títol",
-    "widgetTitlePlaceholder": "Títol del widget (opcional)",
-    "url": "URL",
-    "imageUrl": "URL d'imatge personalitzada",
-    "imageUrlHint": "Deixeu-ho en blanc per utilitzar la icona de favorits del lloc web automàticament",
-    "showImage": "Mostra la imatge",
-    "description": "Descripció",
-    "color": "Color",
-    "timezone": "Zona horària",
-    "invalidTimezone": "Fus horari no vàlid. Feu servir un nom IANA com ara Amèrica/Nova_York.",
-    "showSeconds": "Mostra els segons",
-    "format12h": "12 hores",
-    "content": "Contingut",
-    "backgroundColor": "Color de fons",
-    "links": "Enllaços",
-    "addLink": "Afegeix un enllaç",
-    "linkLabel": "Etiqueta",
-    "categoryLinks": "Enllaços",
-    "categoryInfo": "Informació",
-    "categorySystem": "Sistema",
-    "copyLink": "Copia l'enllaç",
-    "linkCopied": "Enllaç copiat!",
-    "location": "Ubicació",
-    "temperatureUnit": "Unitat de temperatura",
-    "showForecast": "Mostra la previsió de 3 dies",
-    "scrolling": "Permet el desplaçament",
-    "feedUrl": "URL del canal",
-    "maxItems": "Màxim d'elements",
-    "showDescription": "Mostra la descripció",
-    "widgetRssName": "Canal RSS",
-    "rssNoFeedUrl": "Configura una URL de feed a la configuració del widget",
-    "rssLoadError": "No s'ha pogut carregar el feed",
-    "rssNoItems": "Sense elements",
-    "noHostSelected": "No s'ha seleccionat cap amfitrió",
-    "displayedMetrics": "Mètriques mostrades",
-    "metricCpu": "CPU",
-    "metricMemory": "Memòria",
-    "metricDisk": "Disc",
-    "metricUptime": "Temps de funcionament",
-    "metricSystem": "Sistema",
-    "metricNetwork": "Xarxa",
-    "metricProcesses": "Processos",
-    "categoryMonitoring": "Monitorització",
-    "noPingUrls": "No s'han configurat URL",
-    "pingLabel": "Etiqueta",
-    "addPingUrl": "Afegeix URL",
-    "showLatency": "Mostra la latència",
-    "refreshInterval": "Interval d'actualització",
-    "seconds": "segons",
-    "filterActivityTypes": "Tipus de filtre",
-    "filterTypesHint": "Deixeu-ho en blanc per mostrar-ho tot",
-    "showTimestamp": "Mostra la marca de temps",
-    "uptimeUnavailable": "Temps de funcionament no disponible",
-    "uptimeLabel": "Temps de funcionament",
-    "overviewVersion": "Versió",
-    "overviewUpdateLabel": "Actualització",
-    "overviewUpdateAvailable": "Actualització disponible",
-    "overviewDatabase": "Base de dades",
-    "overviewUptime": "Temps de funcionament",
-    "noHosts": "No hi ha cap amfitrió configurat",
-    "hostGridHosts": "Amfitrions",
-    "hostGridAllHint": "Deixeu-ho en blanc per mostrar tots els amfitrions",
-    "columns": "Columnes",
-    "showIp": "Mostra l'adreça IP",
-    "layout": "Disseny",
-    "showStatus": "Mostra l'estat",
-    "noActivity": "Sense activitat",
-    "widgetPingStatusName": "Estat del ping",
-    "widgetRecentActivityName": "Activitat recent",
-    "sshTerminalNoHost": "No hi ha cap amfitrió configurat",
-    "sshTerminalConnect": "Connecta",
-    "sshTerminalAutoConnect": "Connexió automàtica en càrrega",
-    "connectionTypes": "Tipus de connexió",
-    "calMon": "Mo",
-    "calTue": "Dimarts",
-    "calWed": "Nosaltres",
-    "calThu": "Dj.",
-    "calFri": "Div.",
-    "calSat": "Sa",
-    "calSun": "Dg.",
-    "startOnMonday": "Comença la setmana dilluns",
-    "countdownNoDate": "No hi ha cap data objectiu fixada",
-    "countdownPast": "L'esdeveniment ha passat",
-    "countdownDays": "dies",
-    "countdownHours": "hores",
-    "countdownMinutes": "min",
-    "countdownSeconds": "segons",
-    "countdownLabel": "Etiqueta",
-    "countdownLabelPlaceholder": "p. ex. Dia del llançament",
-    "countdownShowDays": "Dies d'espectacle",
-    "countdownShowHours": "Horari de la mostra",
-    "targetDate": "Data objectiu",
-    "searchEngine": "Motor de cerca",
-    "customSearchUrl": "URL de cerca personalitzada",
-    "searchPlaceholder": "Cerca...",
-    "searchGo": "Anar",
-    "searchPlaceholderLabel": "Text de marcador de posició",
-    "searchPlaceholderHint": "Text que es mostra dins del camp de cerca",
-    "openInNewTab": "Obre en una pestanya nova",
-    "searchQueryPlaceholder": "Introduïu la consulta...",
-    "noSearchShortcuts": "No hi ha dreceres configurades",
-    "addSearchShortcut": "Afegeix una drecera",
-    "fontSize": "Mida de la lletra",
-    "textAlign": "Alineació del text",
-    "fontWeight": "Pes de la lletra",
-    "clearColor": "Color clar",
-    "imageFit": "Ajust d'imatge",
-    "imageLinkUrl": "URL de l'enllaç",
-    "noImage": "No s'ha definit cap URL d'imatge",
-    "altText": "Text alternatiu",
-    "altTextPlaceholder": "Descriu la imatge",
-    "renderMarkdown": "Renderització Markdown",
-    "displayMode": "Mode de visualització",
-    "displayField": "Camp de visualització",
-    "jsonPath": "Camí JSON",
-    "customApiLabel": "Etiqueta",
-    "customApiLabelPlaceholder": "p. ex. Temperatura",
-    "customApiUnit": "Unitat",
-    "customApiNoUrl": "No s'ha configurat cap URL de l'API",
-    "customApiError": "No s'ha pogut obtenir",
-    "customApiNotArray": "La resposta no és una matriu",
-    "addService": "Afegeix un servei",
-    "showLabels": "Mostra les etiquetes",
-    "iconSize": "Mida de la icona",
-    "noDashboardLinks": "No hi ha cap enllaç configurat al tauler de control",
-    "noLimit": "Sense límit",
-    "sectionHeading": "Encapçalament de secció",
-    "addSection": "Afegeix secció",
-    "compactMode": "Mode compacte",
-    "selectHosts": "Selecciona els amfitrions",
-    "listLayout": "Llista",
-    "gridLayout": "Graella",
-    "configureUrl": "Defineix una URL a la configuració del widget",
-    "embeddedContent": "Contingut incrustat",
-    "noBookmarks": "Sense marcadors",
-    "noSections": "No s'han configurat seccions",
-    "noServices": "No hi ha serveis configurats",
-    "configureLocation": "Defineix una ubicació a la configuració del widget",
-    "bannerTextPlaceholder": "Text del bàner",
-    "serviceNamePlaceholder": "El meu servei",
-    "emptyNote": "Nota buida...",
-    "weatherLoadFailed": "No s'ha pogut carregar el temps per a \"{{location}}\"",
-    "feelsLike": "Se sent com {{temperature}}",
-    "timezonePlaceholder": "Amèrica/Nova_York (deixeu-ho en blanc per a locals)",
-    "notesPlaceholder": "Escriu les teves notes aquí...",
-    "locationPlaceholder": "Nova York, Londres, Tòquio...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Adreces d'interès",
-        "description": "Una llista d'enllaços ràpids"
-      },
-      "calendar": {
-        "name": "Calendari",
-        "description": "Un calendari mensual amb el dia d'avui destacat"
-      },
-      "clock": {
-        "name": "rellotge",
-        "description": "Un rellotge en directe amb zona horària configurable"
-      },
-      "countdown": {
-        "name": "Compte enrere",
-        "description": "Compta enrere fins a una data i hora objectiu"
-      },
-      "custom_api": {
-        "name": "API personalitzada",
-        "description": "Obtenir i mostrar dades de qualsevol API JSON"
-      },
-      "dashboard_links": {
-        "name": "Enllaços del tauler de control",
-        "description": "Mostra els enllaços de servei del tauler de control desats"
-      },
-      "folder": {
-        "name": "Carpeta",
-        "description": "Una targeta de fons per agrupar widgets visualment"
-      },
-      "host_grid": {
-        "name": "Graella d'amfitrió",
-        "description": "Graella de resum de l'estat en directe per a tots els vostres hosts SSH"
-      },
-      "host_status": {
-        "name": "Estat de l'amfitrió",
-        "description": "Mostra l'estat en directe i les mètriques d'un amfitrió SSH"
-      },
-      "iframe_embed": {
-        "name": "Incrustació d'iFrame",
-        "description": "Incrustar qualsevol URL en un iframe"
-      },
-      "image_widget": {
-        "name": "Imatge",
-        "description": "Mostra qualsevol imatge des d'una URL"
-      },
-      "link_tree": {
-        "name": "Arbre d'enllaços",
-        "description": "Enllaços agrupats organitzats en seccions etiquetades"
-      },
-      "markdown_notes": {
-        "name": "Notes de rebaixa",
-        "description": "Notes amb renderització opcional en Markdown i edició en línia"
-      },
-      "notes": {
-        "name": "Notes",
-        "description": "Un widget de notes de text"
-      },
-      "ping_status": {
-        "name": "Estat del ping",
-        "description": "Comprovar si es pot accedir a URL o serveis"
-      },
-      "quick_connect": {
-        "name": "Connexió ràpida",
-        "description": "Inicieu el terminal, els fitxers, el docker, els túnels i més per als vostres amfitrions"
-      },
-      "recent_activity": {
-        "name": "Activitat recent",
-        "description": "Mostra l'activitat recent del terminal, Docker, fitxer i túnel"
-      },
-      "rss_feed": {
-        "name": "Canal RSS",
-        "description": "Mostrar elements d'un canal RSS o Atom"
-      },
-      "search_bar": {
-        "name": "Barra de cerca",
-        "description": "Cerca ràpida amb Google, DuckDuckGo, Bing o un motor personalitzat"
-      },
-      "search_links": {
-        "name": "Dreceres de cerca",
-        "description": "Botons ràpids per cercar en diferents motors"
-      },
-      "service_grid": {
-        "name": "Xarxa de serveis",
-        "description": "Una quadrícula de mosaics de servei amb icones i enllaços"
-      },
-      "service_link": {
-        "name": "Enllaç de servei",
-        "description": "Una tessel·la clicable que enllaça a una URL de servei"
-      },
-      "ssh_terminal": {
-        "name": "Terminal SSH",
-        "description": "Un terminal SSH en línia connectat a un host configurat"
-      },
-      "system_overview": {
-        "name": "Visió general del sistema",
-        "description": "Versió de Termix, estat de la base de dades i temps de funcionament d'un cop d'ull"
-      },
-      "termix_uptime": {
-        "name": "Temps de funcionament de Termix",
-        "description": "Mostra quant de temps ha estat funcionant el servidor Termix"
-      },
-      "text_banner": {
-        "name": "Bàner de text",
-        "description": "Una etiqueta de text amb estil per a seccions i encapçalaments"
-      },
-      "weather": {
-        "name": "El temps",
-        "description": "El temps en directe per a qualsevol ubicació"
-      },
-      "docker_widget": {
-        "name": "Gestor de Docker",
-        "description": "Gestor de contenidors Docker integrat per a un amfitrió configurat"
-      },
-      "file_manager_widget": {
-        "name": "Gestor de fitxers",
-        "description": "Gestor de fitxers SFTP integrat per a un amfitrió configurat"
-      },
-      "tunnel_widget": {
-        "name": "Gestor de túnels",
-        "description": "Gestor de túnels SSH integrat per a un host configurat"
-      },
-      "metrics_chart": {
-        "name": "Gràfic de mètriques",
-        "description": "Gràfic històric de CPU, memòria, disc o xarxa per a un host"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilitzeu la pàgina d'inici",
-      "description": "Visualitza i edita els enllaços del servei de llenç i tauler de control de la pàgina d'inici."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Amfitrions privats permesos",
-      "description": "Noms d'amfitrió/IP privats o de bucle exactes per als widgets d'estat del ping i de l'API personalitzada. Separeu les entrades amb comes o salts de línia; ometeu esquemes, ports i camins. Els blocs buits bloquegen les destinacions privades."
-    },
-    "privateCertificateAuthority": {
-      "label": "Autoritat de certificació privada (PEM)",
-      "description": "Paquet opcional de CA de confiança per a amfitrions de la llista permesa. La verificació del certificat roman habilitada. Deixeu-ho en blanc per utilitzar el magatzem de confiança del sistema."
-    }
-  },
-  "plugin": {
-    "name": "Pàgina d'inici"
-  }
-}
diff --git a/plugins/homepage/locales/translated/cs_CZ.json b/plugins/homepage/locales/translated/cs_CZ.json
deleted file mode 100644
index 77a3aedbf..000000000
--- a/plugins/homepage/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Domovská stránka"
-  },
-  "dashboard": {
-    "serviceLinks": "Odkazy na služby",
-    "homepagePreview": "Náhled domovské stránky"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Odkazy na služby",
-    "serviceLinksEmpty": "Zatím žádné odkazy na služby",
-    "serviceLinksAdd": "Přidat",
-    "serviceLinksLabelPlaceholder": "Moje služba",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Zadejte platnou webovou adresu",
-    "serviceLinksAddFailed": "Nepodařilo se přidat odkaz na službu"
-  },
-  "homepage": {
-    "title": "Domovská stránka",
-    "addWidget": "Přidat widget",
-    "noWidgetsInCategory": "V této kategorii nejsou žádné widgety",
-    "editWidget": "Upravit widget",
-    "zoomIn": "Přiblížit",
-    "zoomOut": "Oddálit",
-    "resetView": "Obnovit zobrazení",
-    "lockLayout": "Rozložení zámku",
-    "unlockLayout": "Odemknout rozvržení",
-    "noWidgets": "Klikněte pravým tlačítkem myši nebo kliknutím na + přidejte svůj první widget",
-    "openFullView": "Otevřít celé zobrazení",
-    "previewTitle": "Náhled domovské stránky",
-    "cancel": "Zrušit",
-    "save": "Uložit",
-    "title_label": "Titul",
-    "widgetTitlePlaceholder": "Název widgetu (volitelné)",
-    "url": "URL",
-    "imageUrl": "URL vlastního obrázku",
-    "imageUrlHint": "Nechte pole prázdné, pokud chcete favicon webu používat automaticky.",
-    "showImage": "Zobrazit obrázek",
-    "description": "Popis",
-    "color": "Barva",
-    "timezone": "Časové pásmo",
-    "invalidTimezone": "Neplatné časové pásmo. Použijte název IANA, například America/New_York.",
-    "showSeconds": "Zobrazit sekundy",
-    "format12h": "12 hodin",
-    "content": "Obsah",
-    "backgroundColor": "Barva pozadí",
-    "links": "Odkazy",
-    "addLink": "Přidat odkaz",
-    "linkLabel": "Označení",
-    "categoryLinks": "Odkazy",
-    "categoryInfo": "Informace",
-    "categorySystem": "Systém",
-    "copyLink": "Kopírovat odkaz",
-    "linkCopied": "Odkaz zkopírován!",
-    "location": "Umístění",
-    "temperatureUnit": "Jednotka teploty",
-    "showForecast": "Zobrazit třídenní předpověď",
-    "scrolling": "Povolit rolování",
-    "feedUrl": "URL kanálu",
-    "maxItems": "Maximální počet položek",
-    "showDescription": "Zobrazit popis",
-    "widgetRssName": "RSS kanál",
-    "rssNoFeedUrl": "Konfigurace adresy URL kanálu v nastavení widgetu",
-    "rssLoadError": "Nepodařilo se načíst zdroj",
-    "rssNoItems": "Žádné položky",
-    "noHostSelected": "Nebyl vybrán žádný hostitel",
-    "displayedMetrics": "Zobrazené metriky",
-    "metricCpu": "Procesor",
-    "metricMemory": "Paměť",
-    "metricDisk": "Disk",
-    "metricUptime": "Doba provozuschopnosti",
-    "metricSystem": "Systém",
-    "metricNetwork": "Síť",
-    "metricProcesses": "Procesy",
-    "categoryMonitoring": "Monitorování",
-    "noPingUrls": "Žádné adresy URL nejsou nakonfigurovány",
-    "pingLabel": "Označení",
-    "addPingUrl": "Přidat URL",
-    "showLatency": "Zobrazit latenci",
-    "refreshInterval": "Interval aktualizace",
-    "seconds": "sekundy",
-    "filterActivityTypes": "Typy filtrů",
-    "filterTypesHint": "Pro zobrazení všech ponechte prázdné",
-    "showTimestamp": "Zobrazit časové razítko",
-    "uptimeUnavailable": "Dostupnost není k dispozici",
-    "uptimeLabel": "Doba provozuschopnosti",
-    "overviewVersion": "Verze",
-    "overviewUpdateLabel": "Aktualizovat",
-    "overviewUpdateAvailable": "Aktualizace k dispozici",
-    "overviewDatabase": "Databáze",
-    "overviewUptime": "Doba provozuschopnosti",
-    "noHosts": "Žádní hostitelé nakonfigurováni",
-    "hostGridHosts": "Hostitelé",
-    "hostGridAllHint": "Nechte prázdné pro zobrazení všech hostitelů",
-    "columns": "Sloupce",
-    "showIp": "Zobrazit IP adresu",
-    "layout": "Rozvržení",
-    "showStatus": "Zobrazit stav",
-    "noActivity": "Žádná aktivita",
-    "widgetPingStatusName": "Stav pingu",
-    "widgetRecentActivityName": "Nedávná aktivita",
-    "sshTerminalNoHost": "Žádný hostitel není nakonfigurován",
-    "sshTerminalConnect": "Připojit",
-    "sshTerminalAutoConnect": "Automatické připojení při načtení",
-    "connectionTypes": "Typy připojení",
-    "calMon": "Po",
-    "calTue": "Út",
-    "calWed": "My",
-    "calThu": "Čt",
-    "calFri": "Pá",
-    "calSat": "So",
-    "calSun": "Ne",
-    "startOnMonday": "Začátek týdne v pondělí",
-    "countdownNoDate": "Není stanoveno žádné cílové datum",
-    "countdownPast": "Událost proběhla",
-    "countdownDays": "dny",
-    "countdownHours": "hodin",
-    "countdownMinutes": "min.",
-    "countdownSeconds": "sekunda",
-    "countdownLabel": "Označení",
-    "countdownLabelPlaceholder": "např. den spuštění",
-    "countdownShowDays": "Dny výstav",
-    "countdownShowHours": "Otevírací doba",
-    "targetDate": "Cílové datum",
-    "searchEngine": "Vyhledávač",
-    "customSearchUrl": "URL pro vlastní vyhledávání",
-    "searchPlaceholder": "Vyhledávání...",
-    "searchGo": "Jít",
-    "searchPlaceholderLabel": "Zástupný text",
-    "searchPlaceholderHint": "Text zobrazený uvnitř vyhledávacího pole",
-    "openInNewTab": "Otevřít v nové kartě",
-    "searchQueryPlaceholder": "Zadejte dotaz...",
-    "noSearchShortcuts": "Žádné zkratky nakonfigurované",
-    "addSearchShortcut": "Přidat zkratku",
-    "fontSize": "Velikost písma",
-    "textAlign": "Zarovnání textu",
-    "fontWeight": "Tloušťka písma",
-    "clearColor": "Jasná barva",
-    "imageFit": "Přizpůsobení obrazu",
-    "imageLinkUrl": "URL odkazu",
-    "noImage": "Není nastavena adresa URL obrázku",
-    "altText": "Alternativní text",
-    "altTextPlaceholder": "Popište obrázek",
-    "renderMarkdown": "Renderování Markdownu",
-    "displayMode": "Režim zobrazení",
-    "displayField": "Pole zobrazení",
-    "jsonPath": "Cesta JSON",
-    "customApiLabel": "Označení",
-    "customApiLabelPlaceholder": "např. teplota",
-    "customApiUnit": "Jednotka",
-    "customApiNoUrl": "Není nakonfigurována žádná adresa URL API",
-    "customApiError": "Načtení se nezdařilo",
-    "customApiNotArray": "Odpověď není pole",
-    "addService": "Přidat službu",
-    "showLabels": "Zobrazit štítky",
-    "iconSize": "Velikost ikony",
-    "noDashboardLinks": "Nejsou nakonfigurovány žádné odkazy na řídicí panel",
-    "noLimit": "Bez omezení",
-    "sectionHeading": "Nadpis sekce",
-    "addSection": "Přidat sekci",
-    "compactMode": "Kompaktní režim",
-    "selectHosts": "Vyberte hostitele",
-    "listLayout": "Seznam",
-    "gridLayout": "Mřížka",
-    "configureUrl": "Nastavte URL adresu v nastavení widgetu",
-    "embeddedContent": "Vložený obsah",
-    "noBookmarks": "Žádné záložky",
-    "noSections": "Žádné sekce nejsou nastaveny",
-    "noServices": "Žádné služby nejsou nastaveny",
-    "configureLocation": "Nastavte umístění v nastavení widgetu",
-    "bannerTextPlaceholder": "Text banneru",
-    "serviceNamePlaceholder": "Moje služba",
-    "emptyNote": "Prázdná poznámka...",
-    "weatherLoadFailed": "Nepodařilo se načíst počasí pro „{{location}}“",
-    "feelsLike": "Připadá mi to jako {{temperature}}",
-    "timezonePlaceholder": "Amerika/New York (pro místní ponechte prázdné)",
-    "notesPlaceholder": "Pište si sem své poznámky...",
-    "locationPlaceholder": "New York, Londýn, Tokio...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Záložky",
-        "description": "Seznam rychlých odkazů"
-      },
-      "calendar": {
-        "name": "Kalendář",
-        "description": "Měsíční kalendář se zvýrazněným dnem"
-      },
-      "clock": {
-        "name": "Hodiny",
-        "description": "Živé hodiny s konfigurovatelným časovým pásmem"
-      },
-      "countdown": {
-        "name": "Odpočítávání",
-        "description": "Odpočítává do cílového data a času"
-      },
-      "custom_api": {
-        "name": "Vlastní API",
-        "description": "Načítání a zobrazování dat z libovolného JSON API"
-      },
-      "dashboard_links": {
-        "name": "Odkazy na řídicí panel",
-        "description": "Zobrazuje uložené odkazy na služby v dashboardu"
-      },
-      "folder": {
-        "name": "Složka",
-        "description": "Karta na pozadí pro vizuální seskupení widgetů"
-      },
-      "host_grid": {
-        "name": "Hostitelská mřížka",
-        "description": "Přehledová tabulka stavu v reálném čase pro všechny vaše SSH hostitele"
-      },
-      "host_status": {
-        "name": "Stav hostitele",
-        "description": "Zobrazuje aktuální stav a metriky pro hostitele SSH"
-      },
-      "iframe_embed": {
-        "name": "Vložení iFrame",
-        "description": "Vložte libovolnou URL do prvku iframe"
-      },
-      "image_widget": {
-        "name": "Obraz",
-        "description": "Zobrazit libovolný obrázek z URL adresy"
-      },
-      "link_tree": {
-        "name": "Strom odkazů",
-        "description": "Seskupené odkazy uspořádané do označených sekcí"
-      },
-      "markdown_notes": {
-        "name": "Poznámky k Markdownu",
-        "description": "Poznámky s volitelným vykreslováním Markdownu a inline editací"
-      },
-      "notes": {
-        "name": "Poznámky",
-        "description": "Widget textových poznámek"
-      },
-      "ping_status": {
-        "name": "Stav pingu",
-        "description": "Zkontrolujte, zda jsou adresy URL nebo služby dosažitelné"
-      },
-      "quick_connect": {
-        "name": "Rychlé připojení",
-        "description": "Spusťte terminál, soubory, Docker, tunely a další pro vaše hostitele"
-      },
-      "recent_activity": {
-        "name": "Nedávná aktivita",
-        "description": "Zobrazuje nedávnou aktivitu terminálu, Dockeru, souborů a tunelů"
-      },
-      "rss_feed": {
-        "name": "RSS kanál",
-        "description": "Zobrazení položek z RSS nebo Atom kanálu"
-      },
-      "search_bar": {
-        "name": "Vyhledávací panel",
-        "description": "Rychlé vyhledávání pomocí Google, DuckDuckGo, Bingu nebo vlastního vyhledávače"
-      },
-      "search_links": {
-        "name": "Vyhledávací zkratky",
-        "description": "Rychlá tlačítka pro vyhledávání v různých vyhledávačích"
-      },
-      "service_grid": {
-        "name": "Servisní síť",
-        "description": "Mřížka dlaždic služeb s ikonami a odkazy"
-      },
-      "service_link": {
-        "name": "Odkaz na službu",
-        "description": "Klikatelná dlaždice odkazující na URL adresu služby"
-      },
-      "ssh_terminal": {
-        "name": "SSH terminál",
-        "description": "Vložený SSH terminál připojený k nakonfigurovanému hostiteli"
-      },
-      "system_overview": {
-        "name": "Přehled systému",
-        "description": "Verze Termixu, stav databáze a dostupnost v kostce"
-      },
-      "termix_uptime": {
-        "name": "Doba provozuschopnosti Termixu",
-        "description": "Zobrazuje, jak dlouho je server Termix spuštěný."
-      },
-      "text_banner": {
-        "name": "Textový banner",
-        "description": "Stylizovaný textový popisek pro sekce a nadpisy"
-      },
-      "weather": {
-        "name": "Počasí",
-        "description": "Živé počasí pro jakékoli místo"
-      },
-      "docker_widget": {
-        "name": "Správce Dockeru",
-        "description": "Vestavěný správce kontejnerů Docker pro nakonfigurovaný hostitel"
-      },
-      "file_manager_widget": {
-        "name": "Správce souborů",
-        "description": "Vestavěný správce souborů SFTP pro nakonfigurovaný hostitel"
-      },
-      "tunnel_widget": {
-        "name": "Správce tunelu",
-        "description": "Vestavěný správce tunelů SSH pro nakonfigurovaný hostitel"
-      },
-      "metrics_chart": {
-        "name": "Graf metrik",
-        "description": "Historický graf CPU, paměti, disku nebo sítě pro hostitele"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Použijte domovskou stránku",
-      "description": "Zobrazte a upravte odkazy na služby na domovské stránce a na řídicím panelu."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Povolení soukromí hostitelé",
-      "description": "Přesné soukromé nebo zpětně smyčkové názvy hostitelů/IP adresy pro widgety Ping Status a Custom API. Oddělte položky čárkami nebo znaky nového řádku; vynechte schémata, porty a cesty. Prázdné pole blokuje soukromé cíle."
-    },
-    "privateCertificateAuthority": {
-      "label": "Soukromá certifikační autorita (PEM)",
-      "description": "Volitelný balíček důvěryhodných certifikačních autorit pro hostitele na seznamu povolených. Ověřování certifikátů zůstává povoleno. Pro použití systémového úložiště důvěryhodných certifikátů ponechte pole prázdné."
-    }
-  },
-  "plugin": {
-    "name": "Domovská stránka"
-  }
-}
diff --git a/plugins/homepage/locales/translated/da_DK.json b/plugins/homepage/locales/translated/da_DK.json
deleted file mode 100644
index d86835764..000000000
--- a/plugins/homepage/locales/translated/da_DK.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Hjemmeside"
-  },
-  "dashboard": {
-    "serviceLinks": "Servicelinks",
-    "homepagePreview": "Forhåndsvisning af hjemmeside"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Servicelinks",
-    "serviceLinksEmpty": "Ingen servicelinks endnu",
-    "serviceLinksAdd": "Tilføje",
-    "serviceLinksLabelPlaceholder": "Min tjeneste",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Indtast en gyldig webadresse",
-    "serviceLinksAddFailed": "Kunne ikke tilføje tjenestelink"
-  },
-  "homepage": {
-    "title": "Hjemmeside",
-    "addWidget": "Tilføj widget",
-    "noWidgetsInCategory": "Ingen widgets i denne kategori",
-    "editWidget": "Rediger widget",
-    "zoomIn": "Zoom ind",
-    "zoomOut": "Zoom ud",
-    "resetView": "Nulstil visning",
-    "lockLayout": "Låselayout",
-    "unlockLayout": "Lås layout op",
-    "noWidgets": "Højreklik eller klik på + for at tilføje din første widget",
-    "openFullView": "Åbn fuld visning",
-    "previewTitle": "Forhåndsvisning af hjemmeside",
-    "cancel": "Ophæve",
-    "save": "Spare",
-    "title_label": "Titel",
-    "widgetTitlePlaceholder": "Widgettitel (valgfrit)",
-    "url": "URL",
-    "imageUrl": "Brugerdefineret billed-URL",
-    "imageUrlHint": "Lad feltet stå tomt for at bruge webstedets favicon automatisk",
-    "showImage": "Vis billede",
-    "description": "Beskrivelse",
-    "color": "Farve",
-    "timezone": "Tidszone",
-    "invalidTimezone": "Ugyldig tidszone. Brug et IANA-navn, f.eks. America/New_York.",
-    "showSeconds": "Vis sekunder",
-    "format12h": "12-timers",
-    "content": "Tilfreds",
-    "backgroundColor": "Baggrundsfarve",
-    "links": "Links",
-    "addLink": "Tilføj link",
-    "linkLabel": "Mærke",
-    "categoryLinks": "Links",
-    "categoryInfo": "Info",
-    "categorySystem": "System",
-    "copyLink": "Kopiér link",
-    "linkCopied": "Link kopieret!",
-    "location": "Beliggenhed",
-    "temperatureUnit": "Temperaturenhed",
-    "showForecast": "Vis 3-dages vejrudsigt",
-    "scrolling": "Tillad rulning",
-    "feedUrl": "Feed-URL",
-    "maxItems": "Maks. antal varer",
-    "showDescription": "Vis beskrivelse",
-    "widgetRssName": "RSS-feed",
-    "rssNoFeedUrl": "Konfigurer en feed-URL i widgetindstillinger",
-    "rssLoadError": "Kunne ikke indlæse feedet",
-    "rssNoItems": "Ingen varer",
-    "noHostSelected": "Ingen vært valgt",
-    "displayedMetrics": "Viste målinger",
-    "metricCpu": "CPU",
-    "metricMemory": "Hukommelse",
-    "metricDisk": "Disk",
-    "metricUptime": "Oppetid",
-    "metricSystem": "System",
-    "metricNetwork": "Netværk",
-    "metricProcesses": "Processer",
-    "categoryMonitoring": "Overvågning",
-    "noPingUrls": "Ingen URL'er konfigureret",
-    "pingLabel": "Mærke",
-    "addPingUrl": "Tilføj URL",
-    "showLatency": "Vis latenstid",
-    "refreshInterval": "Opdateringsinterval",
-    "seconds": "sekunder",
-    "filterActivityTypes": "Filtertyper",
-    "filterTypesHint": "Lad stå tomt for at vise alle",
-    "showTimestamp": "Vis tidsstempel",
-    "uptimeUnavailable": "Oppetid utilgængelig",
-    "uptimeLabel": "Oppetid",
-    "overviewVersion": "Version",
-    "overviewUpdateLabel": "Opdatering",
-    "overviewUpdateAvailable": "Opdatering tilgængelig",
-    "overviewDatabase": "Database",
-    "overviewUptime": "Oppetid",
-    "noHosts": "Ingen værter konfigureret",
-    "hostGridHosts": "Værter",
-    "hostGridAllHint": "Lad stå tomt for at vise alle værter",
-    "columns": "Kolonner",
-    "showIp": "Vis IP-adresse",
-    "layout": "Layout",
-    "showStatus": "Vis status",
-    "noActivity": "Ingen aktivitet",
-    "widgetPingStatusName": "Ping-status",
-    "widgetRecentActivityName": "Seneste aktivitet",
-    "sshTerminalNoHost": "Ingen vært konfigureret",
-    "sshTerminalConnect": "Forbinde",
-    "sshTerminalAutoConnect": "Automatisk forbindelse ved indlæsning",
-    "connectionTypes": "Forbindelsestyper",
-    "calMon": "Må",
-    "calTue": "Ti",
-    "calWed": "Vi",
-    "calThu": "To",
-    "calFri": "Fr",
-    "calSat": "Lør",
-    "calSun": "Sø",
-    "startOnMonday": "Start ugen på mandag",
-    "countdownNoDate": "Ingen måldato fastsat",
-    "countdownPast": "Begivenheden er overstået",
-    "countdownDays": "dage",
-    "countdownHours": "timer",
-    "countdownMinutes": "min.",
-    "countdownSeconds": "sek.",
-    "countdownLabel": "Mærke",
-    "countdownLabelPlaceholder": "f.eks. lanceringsdag",
-    "countdownShowDays": "Vis dage",
-    "countdownShowHours": "Åbningstider",
-    "targetDate": "Måldato",
-    "searchEngine": "Søgemaskine",
-    "customSearchUrl": "Tilpasset søge-URL",
-    "searchPlaceholder": "Søge...",
-    "searchGo": "Gå",
-    "searchPlaceholderLabel": "Pladsholdertekst",
-    "searchPlaceholderHint": "Tekst vist i søgefeltet",
-    "openInNewTab": "Åbn i ny fane",
-    "searchQueryPlaceholder": "Indtast forespørgsel...",
-    "noSearchShortcuts": "Ingen genveje konfigureret",
-    "addSearchShortcut": "Tilføj genvej",
-    "fontSize": "Skriftstørrelse",
-    "textAlign": "Tekstjustering",
-    "fontWeight": "Skriftvægt",
-    "clearColor": "Klar farve",
-    "imageFit": "Billedtilpasning",
-    "imageLinkUrl": "Link-URL",
-    "noImage": "Ingen billed-URL angivet",
-    "altText": "Alternativ tekst",
-    "altTextPlaceholder": "Beskriv billedet",
-    "renderMarkdown": "Render Markdown",
-    "displayMode": "Visningstilstand",
-    "displayField": "Visningsfelt",
-    "jsonPath": "JSON-sti",
-    "customApiLabel": "Mærke",
-    "customApiLabelPlaceholder": "f.eks. Temperatur",
-    "customApiUnit": "Enhed",
-    "customApiNoUrl": "Ingen API-URL konfigureret",
-    "customApiError": "Kunne ikke hente",
-    "customApiNotArray": "Svaret er ikke et array",
-    "addService": "Tilføj tjeneste",
-    "showLabels": "Vis etiketter",
-    "iconSize": "Ikonstørrelse",
-    "noDashboardLinks": "Ingen dashboard-links konfigureret",
-    "noLimit": "Ingen grænse",
-    "sectionHeading": "Sektionsoverskrift",
-    "addSection": "Tilføj sektion",
-    "compactMode": "Kompakt tilstand",
-    "selectHosts": "Vælg værter",
-    "listLayout": "Liste",
-    "gridLayout": "Gitter",
-    "configureUrl": "Angiv en URL i widgetindstillingerne",
-    "embeddedContent": "Indlejret indhold",
-    "noBookmarks": "Ingen bogmærker",
-    "noSections": "Ingen sektioner er oprettet",
-    "noServices": "Ingen tjenester konfigureret",
-    "configureLocation": "Angiv en placering i widgetindstillingerne",
-    "bannerTextPlaceholder": "Bannertekst",
-    "serviceNamePlaceholder": "Min tjeneste",
-    "emptyNote": "Tom note...",
-    "weatherLoadFailed": "Kunne ikke indlæse vejret for \"{{location}}\"",
-    "feelsLike": "Føles som {{temperature}}",
-    "timezonePlaceholder": "Amerika/New_York (lad feltet stå tomt for lokalt)",
-    "notesPlaceholder": "Skriv dine noter her...",
-    "locationPlaceholder": "New York, London, Tokyo...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Bogmærker",
-        "description": "En liste over hurtige links"
-      },
-      "calendar": {
-        "name": "Kalender",
-        "description": "En månedskalender med i dag fremhævet"
-      },
-      "clock": {
-        "name": "Ur",
-        "description": "Et live-ur med konfigurerbar tidszone"
-      },
-      "countdown": {
-        "name": "Nedtælling",
-        "description": "Tæller ned til en måldato og -tidspunkt"
-      },
-      "custom_api": {
-        "name": "Brugerdefineret API",
-        "description": "Hent og vis data fra enhver JSON API"
-      },
-      "dashboard_links": {
-        "name": "Dashboard-links",
-        "description": "Viser dine gemte links til dashboardtjenester"
-      },
-      "folder": {
-        "name": "Folder",
-        "description": "Et baggrundskort til visuel gruppering af widgets"
-      },
-      "host_grid": {
-        "name": "Værtgitter",
-        "description": "Oversigtsgitter over livestatus for alle dine SSH-værter"
-      },
-      "host_status": {
-        "name": "Værtsstatus",
-        "description": "Viser livestatus og målinger for en SSH-vært"
-      },
-      "iframe_embed": {
-        "name": "iFrame-integrering",
-        "description": "Integrer en hvilken som helst URL i en iframe"
-      },
-      "image_widget": {
-        "name": "Billede",
-        "description": "Vis et hvilket som helst billede fra en URL"
-      },
-      "link_tree": {
-        "name": "Linktræ",
-        "description": "Grupperede links organiseret i mærkede sektioner"
-      },
-      "markdown_notes": {
-        "name": "Noter om nedskæringer",
-        "description": "Noter med valgfri Markdown-gengivelse og inline-redigering"
-      },
-      "notes": {
-        "name": "Noter",
-        "description": "En widget med tekstnoter"
-      },
-      "ping_status": {
-        "name": "Ping-status",
-        "description": "Tjek om URL'er eller tjenester er tilgængelige"
-      },
-      "quick_connect": {
-        "name": "Hurtig forbindelse",
-        "description": "Start terminal, filer, docker, tunneler og mere for dine værter"
-      },
-      "recent_activity": {
-        "name": "Seneste aktivitet",
-        "description": "Viser den seneste terminal-, Docker-, fil- og tunnelaktivitet"
-      },
-      "rss_feed": {
-        "name": "RSS-feed",
-        "description": "Vis elementer fra et RSS- eller Atom-feed"
-      },
-      "search_bar": {
-        "name": "Søgefelt",
-        "description": "Hurtig søgning med Google, DuckDuckGo, Bing eller en brugerdefineret søgemaskine"
-      },
-      "search_links": {
-        "name": "Søgegenveje",
-        "description": "Hurtige knapper til at søge i forskellige søgemaskiner"
-      },
-      "service_grid": {
-        "name": "Servicenet",
-        "description": "Et gitter af servicefelter med ikoner og links"
-      },
-      "service_link": {
-        "name": "Servicelink",
-        "description": "En klikbar flise, der linker til en tjeneste-URL"
-      },
-      "ssh_terminal": {
-        "name": "SSH-terminal",
-        "description": "En indbygget SSH-terminal forbundet til en konfigureret vært"
-      },
-      "system_overview": {
-        "name": "Systemoversigt",
-        "description": "Termix-version, databasetilstand og oppetid på et øjeblik"
-      },
-      "termix_uptime": {
-        "name": "Termix Oppetid",
-        "description": "Viser hvor længe Termix-serveren har kørt"
-      },
-      "text_banner": {
-        "name": "Tekstbanner",
-        "description": "En stiliseret tekstetiket til sektioner og overskrifter"
-      },
-      "weather": {
-        "name": "Vejr",
-        "description": "Live vejrudsigt for enhver lokation"
-      },
-      "docker_widget": {
-        "name": "Docker Manager",
-        "description": "Integreret Docker-containerhåndtering til en konfigureret vært"
-      },
-      "file_manager_widget": {
-        "name": "Filhåndtering",
-        "description": "Integreret SFTP-filhåndtering til en konfigureret vært"
-      },
-      "tunnel_widget": {
-        "name": "Tunnelchef",
-        "description": "Indlejret SSH-tunnelmanager til en konfigureret vært"
-      },
-      "metrics_chart": {
-        "name": "Metrikdiagram",
-        "description": "Historisk CPU-, hukommelses-, disk- eller netværksdiagram for en vært"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Brug hjemmesiden",
-      "description": "Se og rediger links til startsidens lærred og dashboardtjenester."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Tilladte private værter",
-      "description": "Præcise private eller loopback-værtsnavne/IP'er for Ping-status og brugerdefinerede API-widgets. Adskil poster med kommaer eller nye linjer; udelad skemaer, porte og stier. Tøm blokering af private destinationer."
-    },
-    "privateCertificateAuthority": {
-      "label": "Privat certifikatmyndighed (PEM)",
-      "description": "Valgfri pakke med betroede CA'er til værter på tilladelseslisten. Certifikatbekræftelse forbliver aktiveret. Lad være tomt for at bruge systemets tillidslager."
-    }
-  },
-  "plugin": {
-    "name": "Hjemmeside"
-  }
-}
diff --git a/plugins/homepage/locales/translated/de_DE.json b/plugins/homepage/locales/translated/de_DE.json
deleted file mode 100644
index 543aaa8ec..000000000
--- a/plugins/homepage/locales/translated/de_DE.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Startseite"
-  },
-  "dashboard": {
-    "serviceLinks": "Service-Links",
-    "homepagePreview": "Homepage-Vorschau"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Service-Links",
-    "serviceLinksEmpty": "Noch keine Service-Links",
-    "serviceLinksAdd": "Hinzufügen",
-    "serviceLinksLabelPlaceholder": "Mein Dienst",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Geben Sie eine gültige Webadresse ein",
-    "serviceLinksAddFailed": "Hinzufügen des Service-Links fehlgeschlagen"
-  },
-  "homepage": {
-    "title": "Startseite",
-    "addWidget": "Widget hinzufügen",
-    "noWidgetsInCategory": "Keine Widgets in dieser Kategorie",
-    "editWidget": "Widget bearbeiten",
-    "zoomIn": "Vergrößern",
-    "zoomOut": "Verkleinern",
-    "resetView": "Ansicht zurücksetzen",
-    "lockLayout": "Layout sperren",
-    "unlockLayout": "Layout entsperren",
-    "noWidgets": "Klicken Sie mit der rechten Maustaste oder auf +, um Ihr erstes Widget hinzuzufügen",
-    "openFullView": "Vollansicht öffnen",
-    "previewTitle": "Homepage-Vorschau",
-    "cancel": "Abbrechen",
-    "save": "Speichern",
-    "title_label": "Titel",
-    "widgetTitlePlaceholder": "Widget-Titel (optional)",
-    "url": "URL",
-    "imageUrl": "Benutzerdefinierte Bild-URL",
-    "imageUrlHint": "Leer lassen, um automatisch das Favicon der Website zu verwenden",
-    "showImage": "Bild anzeigen",
-    "description": "Beschreibung",
-    "color": "Farbe",
-    "timezone": "Zeitzone",
-    "invalidTimezone": "Ungültige Zeitzone. Verwenden Sie einen IANA-Namen wie z. B. America/New_York.",
-    "showSeconds": "Sekunden anzeigen",
-    "format12h": "12-Stunden",
-    "content": "Inhalt",
-    "backgroundColor": "Hintergrundfarbe",
-    "links": "Links",
-    "addLink": "Link hinzufügen",
-    "linkLabel": "Bezeichnung",
-    "categoryLinks": "Links",
-    "categoryInfo": "Info",
-    "categorySystem": "System",
-    "copyLink": "Link kopieren",
-    "linkCopied": "Link kopiert!",
-    "location": "Standort",
-    "temperatureUnit": "Temperatureinheit",
-    "showForecast": "3-Tage-Vorhersage anzeigen",
-    "scrolling": "Scrollen erlauben",
-    "feedUrl": "Feed-URL",
-    "maxItems": "Max. Einträge",
-    "showDescription": "Beschreibung anzeigen",
-    "widgetRssName": "RSS-Feed",
-    "rssNoFeedUrl": "Konfigurieren Sie eine Feed-URL in den Widget-Einstellungen.",
-    "rssLoadError": "Zuführung konnte nicht geladen werden",
-    "rssNoItems": "Keine Artikel",
-    "noHostSelected": "Kein Host ausgewählt",
-    "displayedMetrics": "Angezeigte Metriken",
-    "metricCpu": "CPU",
-    "metricMemory": "Arbeitsspeicher",
-    "metricDisk": "Festplatte",
-    "metricUptime": "Betriebszeit",
-    "metricSystem": "System",
-    "metricNetwork": "Netzwerk",
-    "metricProcesses": "Prozesse",
-    "categoryMonitoring": "Überwachung",
-    "noPingUrls": "Keine URLs konfiguriert",
-    "pingLabel": "Bezeichnung",
-    "addPingUrl": "URL hinzufügen",
-    "showLatency": "Latenz anzeigen",
-    "refreshInterval": "Aktualisierungsintervall",
-    "seconds": "Sekunden",
-    "filterActivityTypes": "Filtertypen",
-    "filterTypesHint": "Leer lassen, um alle anzuzeigen",
-    "showTimestamp": "Zeitstempel anzeigen",
-    "uptimeUnavailable": "Betriebszeit nicht verfügbar",
-    "uptimeLabel": "Betriebszeit",
-    "overviewVersion": "Version",
-    "overviewUpdateLabel": "Aktualisieren",
-    "overviewUpdateAvailable": "Update verfügbar",
-    "overviewDatabase": "Datenbank",
-    "overviewUptime": "Betriebszeit",
-    "noHosts": "Keine Hosts konfiguriert",
-    "hostGridHosts": "Hosts",
-    "hostGridAllHint": "Leer lassen, um alle Hosts anzuzeigen",
-    "columns": "Spalten",
-    "showIp": "IP-Adresse anzeigen",
-    "layout": "Layout",
-    "showStatus": "Status anzeigen",
-    "noActivity": "Keine Aktivität",
-    "widgetPingStatusName": "Ping-Status",
-    "widgetRecentActivityName": "Letzte Aktivität",
-    "sshTerminalNoHost": "Kein Host konfiguriert",
-    "sshTerminalConnect": "Verbinden",
-    "sshTerminalAutoConnect": "Beim Laden automatisch verbinden",
-    "connectionTypes": "Verbindungstypen",
-    "calMon": "Mo",
-    "calTue": "Di",
-    "calWed": "Mi",
-    "calThu": "Do",
-    "calFri": "Fr",
-    "calSat": "Sa",
-    "calSun": "So",
-    "startOnMonday": "Woche am Montag beginnen",
-    "countdownNoDate": "Kein Zieldatum festgelegt",
-    "countdownPast": "Ereignis ist vorbei",
-    "countdownDays": "Tage",
-    "countdownHours": "Std.",
-    "countdownMinutes": "Min.",
-    "countdownSeconds": "Sek.",
-    "countdownLabel": "Label",
-    "countdownLabelPlaceholder": "z.B. Starttag",
-    "countdownShowDays": "Tage anzeigen",
-    "countdownShowHours": "Stunden anzeigen",
-    "targetDate": "Zieldatum",
-    "searchEngine": "Suchmaschine",
-    "customSearchUrl": "Benutzerdefinierte Such-URL",
-    "searchPlaceholder": "Suchen...",
-    "searchGo": "Los",
-    "searchPlaceholderLabel": "Platzhaltertext",
-    "searchPlaceholderHint": "Text, der im Suchfeld angezeigt wird",
-    "openInNewTab": "In neuem Tab öffnen",
-    "searchQueryPlaceholder": "Suchbegriff eingeben...",
-    "noSearchShortcuts": "Keine Shortcuts konfiguriert",
-    "addSearchShortcut": "Shortcut hinzufügen",
-    "fontSize": "Schriftgröße",
-    "textAlign": "Textausrichtung",
-    "fontWeight": "Schriftstärke",
-    "clearColor": "Farbe löschen",
-    "imageFit": "Bildanpassung",
-    "imageLinkUrl": "Link-URL",
-    "noImage": "Keine Bild-URL festgelegt",
-    "altText": "Alternativtext",
-    "altTextPlaceholder": "Bild beschreiben",
-    "renderMarkdown": "Markdown rendern",
-    "displayMode": "Anzeigemodus",
-    "displayField": "Anzeigefeld",
-    "jsonPath": "JSON-Pfad",
-    "customApiLabel": "Bezeichnung",
-    "customApiLabelPlaceholder": "z.B. Temperatur",
-    "customApiUnit": "Einheit",
-    "customApiNoUrl": "Keine API-URL konfiguriert",
-    "customApiError": "Fehler beim Abrufen",
-    "customApiNotArray": "Antwort ist kein Array",
-    "addService": "Dienst hinzufügen",
-    "showLabels": "Beschriftungen anzeigen",
-    "iconSize": "Symbolgröße",
-    "noDashboardLinks": "Keine Dashboard-Links konfiguriert",
-    "noLimit": "Keine Begrenzung",
-    "sectionHeading": "Abschnittsüberschrift",
-    "addSection": "Abschnitt hinzufügen",
-    "compactMode": "Kompaktmodus",
-    "selectHosts": "Hosts auswählen",
-    "listLayout": "Liste",
-    "gridLayout": "Raster",
-    "configureUrl": "Legen Sie in den Widget-Einstellungen eine URL fest.",
-    "embeddedContent": "Eingebetteter Inhalt",
-    "noBookmarks": "Keine Lesezeichen",
-    "noSections": "Keine Abschnitte eingerichtet",
-    "noServices": "Keine Dienste eingerichtet",
-    "configureLocation": "Legen Sie in den Widget-Einstellungen einen Standort fest.",
-    "bannerTextPlaceholder": "Bannertext",
-    "serviceNamePlaceholder": "Mein Service",
-    "emptyNote": "Leere Notiz...",
-    "weatherLoadFailed": "Wetterdaten für \"{{location}} \" konnten nicht geladen werden.",
-    "feelsLike": "Fühlt sich an wie {{temperature}}",
-    "timezonePlaceholder": "America/New_York (für lokale Region leer lassen)",
-    "notesPlaceholder": "Schreiben Sie hier Ihre Notizen...",
-    "locationPlaceholder": "New York, London, Tokio...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Lesezeichen",
-        "description": "Eine Liste von Schnelllinks"
-      },
-      "calendar": {
-        "name": "Kalender",
-        "description": "Ein Monatskalender, in dem der heutige Tag hervorgehoben ist"
-      },
-      "clock": {
-        "name": "Uhr",
-        "description": "Eine Live-Uhr mit konfigurierbarer Zeitzone"
-      },
-      "countdown": {
-        "name": "Countdown",
-        "description": "Zählt bis zu einem Zieldatum und einer Zielzeit herunter"
-      },
-      "custom_api": {
-        "name": "Benutzerdefinierte API",
-        "description": "Daten von einer beliebigen JSON-API abrufen und anzeigen"
-      },
-      "dashboard_links": {
-        "name": "Dashboard-Links",
-        "description": "Zeigt Ihre gespeicherten Dashboard-Dienstlinks an"
-      },
-      "folder": {
-        "name": "Ordner",
-        "description": "Eine Hintergrundkarte zur visuellen Gruppierung von Widgets"
-      },
-      "host_grid": {
-        "name": "Host-Raster",
-        "description": "Live-Statusübersicht für alle Ihre SSH-Hosts"
-      },
-      "host_status": {
-        "name": "Host-Status",
-        "description": "Zeigt den Live-Status und die Metriken eines SSH-Hosts an."
-      },
-      "iframe_embed": {
-        "name": "iFrame-Einbettung",
-        "description": "Bettet eine beliebige URL in einen iFrame ein"
-      },
-      "image_widget": {
-        "name": "Bild",
-        "description": "Beliebiges Bild von einer URL anzeigen"
-      },
-      "link_tree": {
-        "name": "Link-Baum",
-        "description": "Gruppierte Links, die in beschriftete Abschnitte unterteilt sind."
-      },
-      "markdown_notes": {
-        "name": "Markdown-Notizen",
-        "description": "Notizen mit optionaler Markdown-Darstellung und Inline-Bearbeitung"
-      },
-      "notes": {
-        "name": "Notizen",
-        "description": "Ein Widget für Textnotizen"
-      },
-      "ping_status": {
-        "name": "Ping-Status",
-        "description": "Prüfen Sie, ob URLs oder Dienste erreichbar sind."
-      },
-      "quick_connect": {
-        "name": "Schnellverbindung",
-        "description": "Starten Sie Terminal, Dateien, Docker, Tunnel und mehr für Ihre Hosts."
-      },
-      "recent_activity": {
-        "name": "Letzte Aktivität",
-        "description": "Zeigt die letzten Aktivitäten im Terminal, Docker, in Dateien und im Tunnel an."
-      },
-      "rss_feed": {
-        "name": "RSS-Feed",
-        "description": "Zeigt Einträge aus einem RSS- oder Atom-Feed an"
-      },
-      "search_bar": {
-        "name": "Suchleiste",
-        "description": "Schnelle Suche mit Google, DuckDuckGo, Bing oder einer benutzerdefinierten Suchmaschine"
-      },
-      "search_links": {
-        "name": "Such-Verknüpfungen",
-        "description": "Schnellzugriffstasten zur Suche in verschiedenen Suchmaschinen"
-      },
-      "service_grid": {
-        "name": "Service-Raster",
-        "description": "Eine Übersicht von Servicekacheln mit Symbolen und Links"
-      },
-      "service_link": {
-        "name": "Service-Link",
-        "description": "Anklickbare Kachel, die auf eine Service-URL verlinkt"
-      },
-      "ssh_terminal": {
-        "name": "SSH-Terminal",
-        "description": "Ein eingebettetes SSH-Terminal, das mit einem konfigurierten Host verbunden ist"
-      },
-      "system_overview": {
-        "name": "Systemübersicht",
-        "description": "Termix-Version, Datenbankzustand und Verfügbarkeit auf einen Blick"
-      },
-      "termix_uptime": {
-        "name": "Termix-Betriebszeit",
-        "description": "Zeigt an, wie lange der Termix-Server bereits läuft."
-      },
-      "text_banner": {
-        "name": "Textbanner",
-        "description": "Eine formatierte Textbezeichnung für Abschnitte und Überschriften"
-      },
-      "weather": {
-        "name": "Wetter",
-        "description": "Live-Wetter für jeden Standort"
-      },
-      "docker_widget": {
-        "name": "Docker-Manager",
-        "description": "Eingebetteter Docker-Container-Manager für einen konfigurierten Host"
-      },
-      "file_manager_widget": {
-        "name": "Dateimanager",
-        "description": "Eingebetteter SFTP-Dateimanager für einen konfigurierten Host"
-      },
-      "tunnel_widget": {
-        "name": "Tunnel-Manager",
-        "description": "Eingebetteter SSH-Tunnel-Manager für einen konfigurierten Host"
-      },
-      "metrics_chart": {
-        "name": "Metrikdiagramm",
-        "description": "Historisches Diagramm zu CPU, Arbeitsspeicher, Festplatte oder Netzwerk für einen Host"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Nutzen Sie die Startseite",
-      "description": "Homepage-Canvas und Dashboard-Servicelinks anzeigen und bearbeiten."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Zulässige private Gastgeber",
-      "description": "Exakte private oder Loopback-Hostnamen/IPs für Ping-Status- und benutzerdefinierte API-Widgets. Einträge durch Kommas oder Zeilenumbrüche trennen; Schemas, Ports und Pfade weglassen. Leere Blöcke private Ziele."
-    },
-    "privateCertificateAuthority": {
-      "label": "Private Zertifizierungsstelle (PEM)",
-      "description": "Optionales Paket vertrauenswürdiger Zertifizierungsstellen für zugelassene Hosts. Die Zertifikatsprüfung bleibt aktiviert. Lassen Sie dieses Feld leer, um den System-Truststore zu verwenden."
-    }
-  },
-  "plugin": {
-    "name": "Startseite"
-  }
-}
diff --git a/plugins/homepage/locales/translated/el_GR.json b/plugins/homepage/locales/translated/el_GR.json
deleted file mode 100644
index ae3245193..000000000
--- a/plugins/homepage/locales/translated/el_GR.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Αρχική σελίδα"
-  },
-  "dashboard": {
-    "serviceLinks": "Σύνδεσμοι υπηρεσιών",
-    "homepagePreview": "Προεπισκόπηση αρχικής σελίδας"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Σύνδεσμοι υπηρεσιών",
-    "serviceLinksEmpty": "Δεν υπάρχουν ακόμη σύνδεσμοι υπηρεσίας",
-    "serviceLinksAdd": "Προσθέτω",
-    "serviceLinksLabelPlaceholder": "Η Υπηρεσία μου",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Εισαγάγετε μια έγκυρη διεύθυνση ιστού",
-    "serviceLinksAddFailed": "Αποτυχία προσθήκης συνδέσμου υπηρεσίας"
-  },
-  "homepage": {
-    "title": "Αρχική σελίδα",
-    "addWidget": "Προσθήκη γραφικού στοιχείου",
-    "noWidgetsInCategory": "Δεν υπάρχουν γραφικά στοιχεία σε αυτήν την κατηγορία",
-    "editWidget": "Επεξεργασία γραφικού στοιχείου",
-    "zoomIn": "Μεγέθυνση",
-    "zoomOut": "Σμίκρυνση",
-    "resetView": "Επαναφορά προβολής",
-    "lockLayout": "Διάταξη κλειδαριάς",
-    "unlockLayout": "Ξεκλείδωμα διάταξης",
-    "noWidgets": "Κάντε δεξί κλικ ή κάντε κλικ στο + για να προσθέσετε το πρώτο σας γραφικό στοιχείο",
-    "openFullView": "Άνοιγμα πλήρους προβολής",
-    "previewTitle": "Προεπισκόπηση αρχικής σελίδας",
-    "cancel": "Ματαίωση",
-    "save": "Εκτός",
-    "title_label": "Τίτλος",
-    "widgetTitlePlaceholder": "Τίτλος γραφικού στοιχείου (προαιρετικό)",
-    "url": "URL",
-    "imageUrl": "URL προσαρμοσμένης εικόνας",
-    "imageUrlHint": "Αφήστε το κενό για να χρησιμοποιήσετε αυτόματα το favicon του ιστότοπου",
-    "showImage": "Εμφάνιση εικόνας",
-    "description": "Περιγραφή",
-    "color": "Χρώμα",
-    "timezone": "Ζώνη ώρας",
-    "invalidTimezone": "Μη έγκυρη ζώνη ώρας. Χρησιμοποιήστε ένα όνομα IANA, όπως America/New_York.",
-    "showSeconds": "Εμφάνιση δευτερολέπτων",
-    "format12h": "12ωρο",
-    "content": "Περιεχόμενο",
-    "backgroundColor": "Χρώμα φόντου",
-    "links": "Εδαφος διά παιγνίδι γκολφ",
-    "addLink": "Προσθήκη συνδέσμου",
-    "linkLabel": "Επιγραφή",
-    "categoryLinks": "Εδαφος διά παιγνίδι γκολφ",
-    "categoryInfo": "Πληροφορίες",
-    "categorySystem": "Σύστημα",
-    "copyLink": "Αντιγραφή συνδέσμου",
-    "linkCopied": "Ο σύνδεσμος αντιγράφηκε!",
-    "location": "Τοποθεσία",
-    "temperatureUnit": "Μονάδα θερμοκρασίας",
-    "showForecast": "Εμφάνιση τριήμερης πρόγνωσης",
-    "scrolling": "Επιτρέπεται η κύλιση",
-    "feedUrl": "URL ροής",
-    "maxItems": "Μέγιστος αριθμός στοιχείων",
-    "showDescription": "Εμφάνιση περιγραφής",
-    "widgetRssName": "Ροή RSS",
-    "rssNoFeedUrl": "Διαμόρφωση URL ροής στις ρυθμίσεις γραφικού στοιχείου",
-    "rssLoadError": "Δεν ήταν δυνατή η φόρτωση της ροής δεδομένων",
-    "rssNoItems": "Δεν υπάρχουν στοιχεία",
-    "noHostSelected": "Δεν έχει επιλεγεί κεντρικός υπολογιστής",
-    "displayedMetrics": "Εμφανιζόμενες μετρήσεις",
-    "metricCpu": "ΚΜΕ",
-    "metricMemory": "Μνήμη",
-    "metricDisk": "Δίσκος",
-    "metricUptime": "Χρόνος λειτουργίας",
-    "metricSystem": "Σύστημα",
-    "metricNetwork": "Δίκτυο",
-    "metricProcesses": "Διαδικασίες",
-    "categoryMonitoring": "Παρακολούθηση",
-    "noPingUrls": "Δεν έχουν ρυθμιστεί διευθύνσεις URL",
-    "pingLabel": "Επιγραφή",
-    "addPingUrl": "Προσθήκη διεύθυνσης URL",
-    "showLatency": "Εμφάνιση καθυστέρησης",
-    "refreshInterval": "Διάστημα ανανέωσης",
-    "seconds": "δευτερόλεπτα",
-    "filterActivityTypes": "Τύποι φίλτρων",
-    "filterTypesHint": "Αφήστε κενό για να εμφανιστούν όλα",
-    "showTimestamp": "Εμφάνιση χρονικής σήμανσης",
-    "uptimeUnavailable": "Ο χρόνος λειτουργίας δεν είναι διαθέσιμος",
-    "uptimeLabel": "Χρόνος λειτουργίας",
-    "overviewVersion": "Εκδοχή",
-    "overviewUpdateLabel": "Εκσυγχρονίζω",
-    "overviewUpdateAvailable": "Διαθέσιμη ενημέρωση",
-    "overviewDatabase": "Βάση δεδομένων",
-    "overviewUptime": "Χρόνος λειτουργίας",
-    "noHosts": "Δεν έχουν ρυθμιστεί κεντρικοί υπολογιστές",
-    "hostGridHosts": "Οικοδεσπότες",
-    "hostGridAllHint": "Αφήστε κενό για να εμφανιστούν όλοι οι κεντρικοί υπολογιστές",
-    "columns": "Στήλες",
-    "showIp": "Εμφάνιση διεύθυνσης IP",
-    "layout": "Σχέδιο",
-    "showStatus": "Εμφάνιση κατάστασης",
-    "noActivity": "Καμία δραστηριότητα",
-    "widgetPingStatusName": "Κατάσταση Ping",
-    "widgetRecentActivityName": "Πρόσφατη δραστηριότητα",
-    "sshTerminalNoHost": "Δεν έχει ρυθμιστεί κεντρικός υπολογιστής",
-    "sshTerminalConnect": "Συνδέω",
-    "sshTerminalAutoConnect": "Αυτόματη σύνδεση κατά τη φόρτωση",
-    "connectionTypes": "Τύποι σύνδεσης",
-    "calMon": "Μο",
-    "calTue": "Τρ",
-    "calWed": "Εμείς",
-    "calThu": "Πέμ",
-    "calFri": "Πατέρας",
-    "calSat": "Σάβ",
-    "calSun": "Κυρ",
-    "startOnMonday": "Έναρξη εβδομάδας τη Δευτέρα",
-    "countdownNoDate": "Δεν έχει οριστεί ημερομηνία-στόχος",
-    "countdownPast": "Η εκδήλωση πέρασε",
-    "countdownDays": "ημέρες",
-    "countdownHours": "ώρες",
-    "countdownMinutes": "λεπτά",
-    "countdownSeconds": "δευτ.",
-    "countdownLabel": "Επιγραφή",
-    "countdownLabelPlaceholder": "π.χ. Ημέρα Εκκίνησης",
-    "countdownShowDays": "Ημέρες προβολής",
-    "countdownShowHours": "Ώρες προβολής",
-    "targetDate": "Ημερομηνία-στόχος",
-    "searchEngine": "Μηχανή αναζήτησης",
-    "customSearchUrl": "URL προσαρμοσμένης αναζήτησης",
-    "searchPlaceholder": "Ερευνα...",
-    "searchGo": "Πάω",
-    "searchPlaceholderLabel": "Κείμενο κράτησης θέσης",
-    "searchPlaceholderHint": "Κείμενο που εμφανίζεται μέσα στην εισαγωγή αναζήτησης",
-    "openInNewTab": "Άνοιγμα σε νέα καρτέλα",
-    "searchQueryPlaceholder": "Εισαγωγή ερωτήματος...",
-    "noSearchShortcuts": "Δεν έχουν ρυθμιστεί συντομεύσεις",
-    "addSearchShortcut": "Προσθήκη συντόμευσης",
-    "fontSize": "Μέγεθος γραμματοσειράς",
-    "textAlign": "Στοίχιση κειμένου",
-    "fontWeight": "Πάχος γραμματοσειράς",
-    "clearColor": "Διαυγές χρώμα",
-    "imageFit": "Προσαρμογή εικόνας",
-    "imageLinkUrl": "URL συνδέσμου",
-    "noImage": "Δεν έχει οριστεί URL εικόνας",
-    "altText": "Εναλλακτικό κείμενο",
-    "altTextPlaceholder": "Περιγράψτε την εικόνα",
-    "renderMarkdown": "Απόδοση Markdown",
-    "displayMode": "Λειτουργία εμφάνισης",
-    "displayField": "Πεδίο εμφάνισης",
-    "jsonPath": "Διαδρομή JSON",
-    "customApiLabel": "Επιγραφή",
-    "customApiLabelPlaceholder": "π.χ. Θερμοκρασία",
-    "customApiUnit": "Μονάδα",
-    "customApiNoUrl": "Δεν έχει ρυθμιστεί URL API",
-    "customApiError": "Η ανάκτηση απέτυχε",
-    "customApiNotArray": "Η απάντηση δεν είναι πίνακας",
-    "addService": "Προσθήκη υπηρεσίας",
-    "showLabels": "Εμφάνιση ετικετών",
-    "iconSize": "Μέγεθος εικονιδίου",
-    "noDashboardLinks": "Δεν έχουν ρυθμιστεί σύνδεσμοι πίνακα ελέγχου",
-    "noLimit": "Χωρίς όριο",
-    "sectionHeading": "Επικεφαλίδα Ενότητας",
-    "addSection": "Προσθήκη ενότητας",
-    "compactMode": "Συμπαγής λειτουργία",
-    "selectHosts": "Επιλέξτε κεντρικούς υπολογιστές",
-    "listLayout": "Λίστα",
-    "gridLayout": "Πλέγμα",
-    "configureUrl": "Ορίστε μια διεύθυνση URL στις ρυθμίσεις του γραφικού στοιχείου",
-    "embeddedContent": "Ενσωματωμένο περιεχόμενο",
-    "noBookmarks": "Δεν υπάρχουν σελιδοδείκτες",
-    "noSections": "Δεν έχουν ρυθμιστεί τμήματα",
-    "noServices": "Δεν έχουν ρυθμιστεί υπηρεσίες",
-    "configureLocation": "Ορίστε μια τοποθεσία στις ρυθμίσεις του γραφικού στοιχείου",
-    "bannerTextPlaceholder": "Κείμενο banner",
-    "serviceNamePlaceholder": "Η υπηρεσία μου",
-    "emptyNote": "Κενή σημείωση...",
-    "weatherLoadFailed": "Δεν ήταν δυνατή η φόρτωση του καιρού για το \"{{location}}\"",
-    "feelsLike": "Αισθάνομαι σαν {{temperature}}",
-    "timezonePlaceholder": "Αμερική/Νέα_Υόρκη (αφήστε κενό για τοπικό)",
-    "notesPlaceholder": "Γράψτε τις σημειώσεις σας εδώ...",
-    "locationPlaceholder": "Νέα Υόρκη, Λονδίνο, Τόκιο...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Σελιδοδείκτες",
-        "description": "Μια λίστα με γρήγορους συνδέσμους"
-      },
-      "calendar": {
-        "name": "Ημερολόγιο",
-        "description": "Ένα μηνιαίο ημερολόγιο με επισημασμένη τη σημερινή ημέρα"
-      },
-      "clock": {
-        "name": "Ρολόι",
-        "description": "Ένα ζωντανό ρολόι με ρυθμιζόμενη ζώνη ώρας"
-      },
-      "countdown": {
-        "name": "Αντίστροφη μέτρηση",
-        "description": "Μετράει αντίστροφα μέχρι μια ημερομηνία και ώρα-στόχο"
-      },
-      "custom_api": {
-        "name": "Προσαρμοσμένο API",
-        "description": "Ανάκτηση και εμφάνιση δεδομένων από οποιοδήποτε JSON API"
-      },
-      "dashboard_links": {
-        "name": "Σύνδεσμοι πίνακα ελέγχου",
-        "description": "Εμφανίζει τους αποθηκευμένους συνδέσμους υπηρεσιών του πίνακα ελέγχου σας"
-      },
-      "folder": {
-        "name": "Ντοσιέ",
-        "description": "Μια κάρτα φόντου για την οπτική ομαδοποίηση γραφικών στοιχείων"
-      },
-      "host_grid": {
-        "name": "Πλέγμα κεντρικού υπολογιστή",
-        "description": "Πλέγμα επισκόπησης ζωντανής κατάστασης για όλους τους κεντρικούς υπολογιστές SSH σας"
-      },
-      "host_status": {
-        "name": "Κατάσταση οικοδεσπότη",
-        "description": "Εμφανίζει την τρέχουσα κατάσταση και τις μετρήσεις για έναν κεντρικό υπολογιστή SSH"
-      },
-      "iframe_embed": {
-        "name": "Ενσωμάτωση iFrame",
-        "description": "Ενσωματώστε οποιαδήποτε διεύθυνση URL σε ένα iframe"
-      },
-      "image_widget": {
-        "name": "Εικών",
-        "description": "Εμφάνιση οποιασδήποτε εικόνας από μια διεύθυνση URL"
-      },
-      "link_tree": {
-        "name": "Δέντρο συνδέσμων",
-        "description": "Ομαδοποιημένοι σύνδεσμοι οργανωμένοι σε ενότητες με ετικέτες"
-      },
-      "markdown_notes": {
-        "name": "Σημειώσεις Markdown",
-        "description": "Σημειώσεις με προαιρετική απόδοση Markdown και ενσωματωμένη επεξεργασία"
-      },
-      "notes": {
-        "name": "Σημειώσεις",
-        "description": "Ένα γραφικό στοιχείο σημειώσεων κειμένου"
-      },
-      "ping_status": {
-        "name": "Κατάσταση Ping",
-        "description": "Ελέγξτε εάν οι διευθύνσεις URL ή οι υπηρεσίες είναι προσβάσιμες"
-      },
-      "quick_connect": {
-        "name": "Γρήγορη σύνδεση",
-        "description": "Εκκίνηση τερματικού, αρχείων, docker, σηράγγων και άλλων για τους κεντρικούς υπολογιστές σας"
-      },
-      "recent_activity": {
-        "name": "Πρόσφατη δραστηριότητα",
-        "description": "Εμφανίζει την πρόσφατη δραστηριότητα τερματικού, Docker, αρχείων και σήραγγας"
-      },
-      "rss_feed": {
-        "name": "Ροή RSS",
-        "description": "Εμφάνιση στοιχείων από μια ροή RSS ή Atom"
-      },
-      "search_bar": {
-        "name": "Γραμμή αναζήτησης",
-        "description": "Γρήγορη αναζήτηση με Google, DuckDuckGo, Bing ή μια προσαρμοσμένη μηχανή αναζήτησης"
-      },
-      "search_links": {
-        "name": "Συντομεύσεις αναζήτησης",
-        "description": "Γρήγορα κουμπιά για αναζήτηση σε διαφορετικές μηχανές"
-      },
-      "service_grid": {
-        "name": "Πλέγμα υπηρεσιών",
-        "description": "Ένα πλέγμα πλακιδίων υπηρεσιών με εικονίδια και συνδέσμους"
-      },
-      "service_link": {
-        "name": "Σύνδεσμος υπηρεσίας",
-        "description": "Ένα πλακίδιο με δυνατότητα κλικ που συνδέεται με μια διεύθυνση URL υπηρεσίας"
-      },
-      "ssh_terminal": {
-        "name": "Τερματικό SSH",
-        "description": "Ένα ενσωματωμένο τερματικό SSH συνδεδεμένο σε έναν διαμορφωμένο κεντρικό υπολογιστή"
-      },
-      "system_overview": {
-        "name": "Επισκόπηση συστήματος",
-        "description": "Έκδοση Termix, εύρυθμη λειτουργία βάσης δεδομένων και χρόνος λειτουργίας με μια ματιά"
-      },
-      "termix_uptime": {
-        "name": "Χρόνος λειτουργίας Termix",
-        "description": "Δείχνει πόσο καιρό λειτουργεί ο διακομιστής Termix"
-      },
-      "text_banner": {
-        "name": "Κείμενο Banner",
-        "description": "Μια ετικέτα κειμένου με στυλ για ενότητες και επικεφαλίδες"
-      },
-      "weather": {
-        "name": "Καιρός",
-        "description": "Ζωντανός καιρός για οποιαδήποτε τοποθεσία"
-      },
-      "docker_widget": {
-        "name": "Διαχειριστής Docker",
-        "description": "Ενσωματωμένος διαχειριστής κοντέινερ Docker για έναν διαμορφωμένο κεντρικό υπολογιστή"
-      },
-      "file_manager_widget": {
-        "name": "Διαχειριστής αρχείων",
-        "description": "Ενσωματωμένος διαχειριστής αρχείων SFTP για έναν διαμορφωμένο κεντρικό υπολογιστή"
-      },
-      "tunnel_widget": {
-        "name": "Διαχειριστής σήραγγας",
-        "description": "Ενσωματωμένος διαχειριστής σήραγγας SSH για έναν διαμορφωμένο κεντρικό υπολογιστή"
-      },
-      "metrics_chart": {
-        "name": "Γράφημα μετρήσεων",
-        "description": "Ιστορικό διάγραμμα CPU, μνήμης, δίσκου ή δικτύου για έναν κεντρικό υπολογιστή"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Χρησιμοποιήστε την αρχική σελίδα",
-      "description": "Προβολή και επεξεργασία των συνδέσμων υπηρεσίας καμβά αρχικής σελίδας και πίνακα ελέγχου."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Επιτρεπόμενοι ιδιωτικοί οικοδεσπότες",
-      "description": "Ακριβή ιδιωτικά ή loopback ονόματα κεντρικών υπολογιστών/IP για τα γραφικά στοιχεία Ping Status και Custom API. Διαχωρίστε τις καταχωρήσεις με κόμματα ή νέες γραμμές. Παραλείψτε σχήματα, θύρες και διαδρομές. Κενά μπλοκ ιδιωτικών προορισμών."
-    },
-    "privateCertificateAuthority": {
-      "label": "Ιδιωτική αρχή έκδοσης πιστοποιητικών (PEM)",
-      "description": "Προαιρετικό πακέτο αξιόπιστης έκδοσης πιστοποιητικών (CA) για κεντρικούς υπολογιστές που έχουν καταχωρηθεί στη λίστα επιτρεπόμενων. Η επαλήθευση πιστοποιητικών παραμένει ενεργοποιημένη. Αφήστε το κενό για να χρησιμοποιήσετε το χώρο αποθήκευσης αξιοπιστίας του συστήματος."
-    }
-  },
-  "plugin": {
-    "name": "Αρχική σελίδα"
-  }
-}
diff --git a/plugins/homepage/locales/translated/es_ES.json b/plugins/homepage/locales/translated/es_ES.json
deleted file mode 100644
index 674a006c9..000000000
--- a/plugins/homepage/locales/translated/es_ES.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Inicio"
-  },
-  "dashboard": {
-    "serviceLinks": "Enlaces de servicio",
-    "homepagePreview": "Vista previa de la página de inicio"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Enlaces de servicio",
-    "serviceLinksEmpty": "Aún no hay enlaces de servicio",
-    "serviceLinksAdd": "Añadir",
-    "serviceLinksLabelPlaceholder": "Mi servicio",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Introduce una dirección web válida",
-    "serviceLinksAddFailed": "Error al añadir el enlace de servicio"
-  },
-  "homepage": {
-    "title": "Inicio",
-    "addWidget": "Añadir widget",
-    "noWidgetsInCategory": "No hay widgets en esta categoría.",
-    "editWidget": "Editar widget",
-    "zoomIn": "Acercar",
-    "zoomOut": "Alejar",
-    "resetView": "Restablecer vista",
-    "lockLayout": "Bloquear diseño",
-    "unlockLayout": "Desbloquear diseño",
-    "noWidgets": "Haz clic derecho o pulsa + para añadir tu primer widget",
-    "openFullView": "Abrir vista completa",
-    "previewTitle": "Vista previa de la página de inicio",
-    "cancel": "Cancelar",
-    "save": "Guardar",
-    "title_label": "Título",
-    "widgetTitlePlaceholder": "Título del widget (opcional)",
-    "url": "URL",
-    "imageUrl": "URL de imagen personalizada",
-    "imageUrlHint": "Déjalo en blanco para usar el favicon del sitio automáticamente",
-    "showImage": "Mostrar imagen",
-    "description": "Descripción",
-    "color": "Color",
-    "timezone": "Zona horaria",
-    "invalidTimezone": "Zona horaria no válida. Utilice un nombre IANA como America/New_York.",
-    "showSeconds": "Mostrar segundos",
-    "format12h": "12 horas",
-    "content": "Contenido",
-    "backgroundColor": "Color de fondo",
-    "links": "Enlaces",
-    "addLink": "Añadir enlace",
-    "linkLabel": "Etiqueta",
-    "categoryLinks": "Enlaces",
-    "categoryInfo": "Información",
-    "categorySystem": "Sistema",
-    "copyLink": "Copiar enlace",
-    "linkCopied": "¡Enlace copiado!",
-    "location": "Ubicación",
-    "temperatureUnit": "Unidad de temperatura",
-    "showForecast": "Mostrar pronóstico de 3 días",
-    "scrolling": "Permitir desplazamiento",
-    "feedUrl": "URL del feed",
-    "maxItems": "Máx. de elementos",
-    "showDescription": "Mostrar descripción",
-    "widgetRssName": "Fuente RSS",
-    "rssNoFeedUrl": "Configure una URL de feed en la configuración del widget.",
-    "rssLoadError": "No se pudo cargar la fuente",
-    "rssNoItems": "No hay artículos",
-    "noHostSelected": "Ningún host seleccionado",
-    "displayedMetrics": "Métricas mostradas",
-    "metricCpu": "CPU",
-    "metricMemory": "Memoria",
-    "metricDisk": "Disco",
-    "metricUptime": "Tiempo de actividad",
-    "metricSystem": "Sistema",
-    "metricNetwork": "Red",
-    "metricProcesses": "Procesos",
-    "categoryMonitoring": "Monitorización",
-    "noPingUrls": "No hay URLs configuradas",
-    "pingLabel": "Etiqueta",
-    "addPingUrl": "Añadir URL",
-    "showLatency": "Mostrar latencia",
-    "refreshInterval": "Intervalo de actualización",
-    "seconds": "segundos",
-    "filterActivityTypes": "Filtrar tipos",
-    "filterTypesHint": "Dejar vacío para mostrar todo",
-    "showTimestamp": "Mostrar marca de tiempo",
-    "uptimeUnavailable": "Tiempo de actividad no disponible",
-    "uptimeLabel": "Tiempo de actividad",
-    "overviewVersion": "Versión",
-    "overviewUpdateLabel": "Actualizar",
-    "overviewUpdateAvailable": "Actualización disponible",
-    "overviewDatabase": "Base de datos",
-    "overviewUptime": "Tiempo de actividad",
-    "noHosts": "Sin hosts configurados",
-    "hostGridHosts": "Hosts",
-    "hostGridAllHint": "Dejar vacío para mostrar todos los hosts",
-    "columns": "Columnas",
-    "showIp": "Mostrar dirección IP",
-    "layout": "Diseño",
-    "showStatus": "Mostrar estado",
-    "noActivity": "Sin actividad",
-    "widgetPingStatusName": "Estado de ping",
-    "widgetRecentActivityName": "Actividad reciente",
-    "sshTerminalNoHost": "Sin host configurado",
-    "sshTerminalConnect": "Conectar",
-    "sshTerminalAutoConnect": "Conectar automáticamente al cargar",
-    "connectionTypes": "Tipos de conexión",
-    "calMon": "Lu",
-    "calTue": "Ma",
-    "calWed": "Mi",
-    "calThu": "Ju",
-    "calFri": "Vi",
-    "calSat": "Sa",
-    "calSun": "Do",
-    "startOnMonday": "Comenzar la semana el lunes",
-    "countdownNoDate": "No se ha fijado una fecha objetivo",
-    "countdownPast": "El evento ya ha pasado",
-    "countdownDays": "días",
-    "countdownHours": "h",
-    "countdownMinutes": "min",
-    "countdownSeconds": "s",
-    "countdownLabel": "Etiqueta",
-    "countdownLabelPlaceholder": "p. ej. Día de lanzamiento",
-    "countdownShowDays": "Mostrar días",
-    "countdownShowHours": "Mostrar horas",
-    "targetDate": "Fecha objetivo",
-    "searchEngine": "Motor de búsqueda",
-    "customSearchUrl": "URL de búsqueda personalizada",
-    "searchPlaceholder": "Buscar...",
-    "searchGo": "Ir",
-    "searchPlaceholderLabel": "Texto del marcador de posición",
-    "searchPlaceholderHint": "Texto mostrado dentro del campo de búsqueda",
-    "openInNewTab": "Abrir en nueva pestaña",
-    "searchQueryPlaceholder": "Introducir consulta...",
-    "noSearchShortcuts": "No hay accesos directos configurados",
-    "addSearchShortcut": "Añadir acceso directo",
-    "fontSize": "Tamaño de fuente",
-    "textAlign": "Alineación del texto",
-    "fontWeight": "Grosor de la fuente",
-    "clearColor": "Limpiar color",
-    "imageFit": "Ajuste de imagen",
-    "imageLinkUrl": "URL del enlace",
-    "noImage": "No se ha establecido una URL de imagen",
-    "altText": "Texto alternativo",
-    "altTextPlaceholder": "Describir la imagen",
-    "renderMarkdown": "Procesar Markdown",
-    "displayMode": "Modo de visualización",
-    "displayField": "Campo de visualización",
-    "jsonPath": "Ruta JSON",
-    "customApiLabel": "Etiqueta",
-    "customApiLabelPlaceholder": "p. ej. Temperatura",
-    "customApiUnit": "Unidad",
-    "customApiNoUrl": "No se ha configurado ninguna URL de API",
-    "customApiError": "Error al obtener",
-    "customApiNotArray": "La respuesta no es un array",
-    "addService": "Añadir servicio",
-    "showLabels": "Mostrar etiquetas",
-    "iconSize": "Tamaño del icono",
-    "noDashboardLinks": "Sin enlaces de panel configurados",
-    "noLimit": "Sin límite",
-    "sectionHeading": "Encabezado de sección",
-    "addSection": "Añadir sección",
-    "compactMode": "Modo compacto",
-    "selectHosts": "Seleccionar hosts",
-    "listLayout": "Lista",
-    "gridLayout": "Cuadrícula",
-    "configureUrl": "Establezca una URL en la configuración del widget.",
-    "embeddedContent": "Contenido incrustado",
-    "noBookmarks": "Sin marcadores",
-    "noSections": "No hay secciones configuradas",
-    "noServices": "No hay servicios configurados",
-    "configureLocation": "Establezca una ubicación en la configuración del widget.",
-    "bannerTextPlaceholder": "Texto del banner",
-    "serviceNamePlaceholder": "Mi servicio",
-    "emptyNote": "Nota vacía...",
-    "weatherLoadFailed": "No se pudo cargar el clima para \"{{location}}\"",
-    "feelsLike": "Se siente como {{temperature}}",
-    "timezonePlaceholder": "América/Nueva_York (dejar en blanco para información local)",
-    "notesPlaceholder": "Escribe tus notas aquí...",
-    "locationPlaceholder": "Nueva York, Londres, Tokio...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Marcadores",
-        "description": "Una lista de enlaces rápidos"
-      },
-      "calendar": {
-        "name": "Calendario",
-        "description": "Un calendario mensual con el día de hoy resaltado."
-      },
-      "clock": {
-        "name": "Reloj",
-        "description": "Un reloj en vivo con zona horaria configurable"
-      },
-      "countdown": {
-        "name": "Cuenta atrás",
-        "description": "Cuenta regresiva hasta una fecha y hora objetivo."
-      },
-      "custom_api": {
-        "name": "API personalizada",
-        "description": "Obtener y mostrar datos desde cualquier API JSON"
-      },
-      "dashboard_links": {
-        "name": "Enlaces del panel",
-        "description": "Muestra los enlaces de servicio del panel de control guardados."
-      },
-      "folder": {
-        "name": "Carpeta",
-        "description": "Una tarjeta de fondo para agrupar widgets visualmente"
-      },
-      "host_grid": {
-        "name": "Cuadrícula de hosts",
-        "description": "Cuadrícula resumen del estado en tiempo real para todos sus hosts SSH"
-      },
-      "host_status": {
-        "name": "Estado del host",
-        "description": "Muestra el estado y las métricas en tiempo real de un host SSH."
-      },
-      "iframe_embed": {
-        "name": "Incrustar iFrame",
-        "description": "Incrusta cualquier URL en un iframe"
-      },
-      "image_widget": {
-        "name": "Imagen",
-        "description": "Mostrar cualquier imagen desde una URL"
-      },
-      "link_tree": {
-        "name": "Árbol de enlaces",
-        "description": "Enlaces agrupados organizados en secciones etiquetadas"
-      },
-      "markdown_notes": {
-        "name": "Notas Markdown",
-        "description": "Notas con renderizado Markdown opcional y edición en línea."
-      },
-      "notes": {
-        "name": "Notas",
-        "description": "Un widget de notas de texto"
-      },
-      "ping_status": {
-        "name": "Estado de ping",
-        "description": "Comprueba si las URL o los servicios son accesibles."
-      },
-      "quick_connect": {
-        "name": "Conexión rápida",
-        "description": "Inicia la terminal, archivos, Docker, túneles y más para tus hosts."
-      },
-      "recent_activity": {
-        "name": "Actividad reciente",
-        "description": "Muestra la actividad reciente de la terminal, Docker, archivos y túneles."
-      },
-      "rss_feed": {
-        "name": "Fuente RSS",
-        "description": "Muestra elementos de una fuente RSS o Atom"
-      },
-      "search_bar": {
-        "name": "Barra de búsqueda",
-        "description": "Búsqueda rápida con Google, DuckDuckGo, Bing o un motor de búsqueda personalizado."
-      },
-      "search_links": {
-        "name": "Atajos de búsqueda",
-        "description": "Botones rápidos para buscar en diferentes motores de búsqueda."
-      },
-      "service_grid": {
-        "name": "Cuadrícula de servicios",
-        "description": "Una cuadrícula de mosaicos de servicio con iconos y enlaces."
-      },
-      "service_link": {
-        "name": "Enlace de servicio",
-        "description": "Un mosaico interactivo que enlaza a una URL de servicio"
-      },
-      "ssh_terminal": {
-        "name": "Terminal SSH",
-        "description": "Un terminal SSH integrado conectado a un host configurado"
-      },
-      "system_overview": {
-        "name": "Resumen del sistema",
-        "description": "Versión de Termix, estado de la base de datos y tiempo de actividad de un vistazo"
-      },
-      "termix_uptime": {
-        "name": "Tiempo de actividad de Termix",
-        "description": "Muestra cuánto tiempo lleva funcionando el servidor Termix."
-      },
-      "text_banner": {
-        "name": "Banner de texto",
-        "description": "Una etiqueta de texto con formato para secciones y encabezados."
-      },
-      "weather": {
-        "name": "Tiempo",
-        "description": "El tiempo en vivo para cualquier ubicación"
-      },
-      "docker_widget": {
-        "name": "Administrador de Docker",
-        "description": "Gestor de contenedores Docker integrado para un host configurado"
-      },
-      "file_manager_widget": {
-        "name": "Gestor de archivos",
-        "description": "Gestor de archivos SFTP integrado para un host configurado"
-      },
-      "tunnel_widget": {
-        "name": "Gestor de túneles",
-        "description": "Gestor de túneles SSH integrado para un host configurado"
-      },
-      "metrics_chart": {
-        "name": "Gráfico de métricas",
-        "description": "Gráfico histórico de CPU, memoria, disco o red para un host"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilice la página de inicio",
-      "description": "Visualiza y edita el lienzo de la página de inicio y los enlaces de servicio del panel de control."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Anfitriones privados permitidos",
-      "description": "Nombres de host/direcciones IP privadas o de bucle invertido exactas para los widgets de estado de ping y API personalizadas. Separe las entradas con comas o saltos de línea; omita esquemas, puertos y rutas. Los bloques vacíos representan destinos privados."
-    },
-    "privateCertificateAuthority": {
-      "label": "Autoridad de certificación privada (PEM)",
-      "description": "Paquete de certificados CA de confianza opcional para los hosts permitidos. La verificación de certificados permanece habilitada. Déjelo en blanco para usar el almacén de certificados de confianza del sistema."
-    }
-  },
-  "plugin": {
-    "name": "Inicio"
-  }
-}
diff --git a/plugins/homepage/locales/translated/fi_FI.json b/plugins/homepage/locales/translated/fi_FI.json
deleted file mode 100644
index 14ae8cd63..000000000
--- a/plugins/homepage/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Etusivu"
-  },
-  "dashboard": {
-    "serviceLinks": "Palvelulinkit",
-    "homepagePreview": "Etusivun esikatselu"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Palvelulinkit",
-    "serviceLinksEmpty": "Ei vielä palvelulinkkejä",
-    "serviceLinksAdd": "Lisätä",
-    "serviceLinksLabelPlaceholder": "Palveluni",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Anna kelvollinen verkko-osoite",
-    "serviceLinksAddFailed": "Palvelulinkin lisääminen epäonnistui"
-  },
-  "homepage": {
-    "title": "Etusivu",
-    "addWidget": "Lisää widget",
-    "noWidgetsInCategory": "Ei widgettejä tässä kategoriassa",
-    "editWidget": "Muokkaa widgetiä",
-    "zoomIn": "Lähennä",
-    "zoomOut": "Loitonna",
-    "resetView": "Palauta näkymä",
-    "lockLayout": "Lukituksen asettelu",
-    "unlockLayout": "Avaa asettelu",
-    "noWidgets": "Lisää ensimmäinen widget napsauttamalla hiiren kakkospainikkeella tai napsauttamalla +",
-    "openFullView": "Avaa koko näkymä",
-    "previewTitle": "Etusivun esikatselu",
-    "cancel": "Peruuttaa",
-    "save": "Tallentaa",
-    "title_label": "Otsikko",
-    "widgetTitlePlaceholder": "Widgetin otsikko (valinnainen)",
-    "url": "URL-osoite",
-    "imageUrl": "Mukautetun kuvan URL-osoite",
-    "imageUrlHint": "Jätä tyhjäksi, jos haluat käyttää sivuston suosikkikuvaketta automaattisesti",
-    "showImage": "Näytä kuva",
-    "description": "Kuvaus",
-    "color": "Väri",
-    "timezone": "Aikavyöhyke",
-    "invalidTimezone": "Virheellinen aikavyöhyke. Käytä IANA-nimeä, kuten Amerikka/New_York",
-    "showSeconds": "Näytä sekunnit",
-    "format12h": "12 tunnin",
-    "content": "Sisältö",
-    "backgroundColor": "Taustaväri",
-    "links": "Linkit",
-    "addLink": "Lisää linkki",
-    "linkLabel": "Tarra",
-    "categoryLinks": "Linkit",
-    "categoryInfo": "Tiedot",
-    "categorySystem": "Järjestelmä",
-    "copyLink": "Kopioi linkki",
-    "linkCopied": "Linkki kopioitu!",
-    "location": "Sijainti",
-    "temperatureUnit": "Lämpötilayksikkö",
-    "showForecast": "Näytä 3 päivän ennuste",
-    "scrolling": "Salli vieritys",
-    "feedUrl": "Syötteen URL-osoite",
-    "maxItems": "Kohteiden enimmäismäärä",
-    "showDescription": "Näytä kuvaus",
-    "widgetRssName": "RSS-syöte",
-    "rssNoFeedUrl": "Syötteen URL-osoitteen määrittäminen widgetin asetuksissa",
-    "rssLoadError": "Syötettä ei voitu ladata",
-    "rssNoItems": "Ei kohteita",
-    "noHostSelected": "Ei valittua isäntää",
-    "displayedMetrics": "Näytetyt mittarit",
-    "metricCpu": "Suoritin",
-    "metricMemory": "Muisti",
-    "metricDisk": "Levy",
-    "metricUptime": "Käyttöaika",
-    "metricSystem": "Järjestelmä",
-    "metricNetwork": "Verkko",
-    "metricProcesses": "Prosessit",
-    "categoryMonitoring": "Seuranta",
-    "noPingUrls": "Ei määritettyjä URL-osoitteita",
-    "pingLabel": "Tarra",
-    "addPingUrl": "Lisää URL-osoite",
-    "showLatency": "Näytä latenssi",
-    "refreshInterval": "Päivitysväli",
-    "seconds": "sekuntia",
-    "filterActivityTypes": "Suodatintyypit",
-    "filterTypesHint": "Jätä tyhjäksi näyttääksesi kaikki",
-    "showTimestamp": "Näytä aikaleima",
-    "uptimeUnavailable": "Käyttöaika ei saatavilla",
-    "uptimeLabel": "Käyttöaika",
-    "overviewVersion": "Versio",
-    "overviewUpdateLabel": "Päivittää",
-    "overviewUpdateAvailable": "Päivitys saatavilla",
-    "overviewDatabase": "Tietokanta",
-    "overviewUptime": "Käyttöaika",
-    "noHosts": "Ei määritettyjä isäntiä",
-    "hostGridHosts": "Isännät",
-    "hostGridAllHint": "Jätä tyhjäksi, jos haluat näyttää kaikki isännät",
-    "columns": "Sarakkeet",
-    "showIp": "Näytä IP-osoite",
-    "layout": "Layout",
-    "showStatus": "Näytä tila",
-    "noActivity": "Ei toimintaa",
-    "widgetPingStatusName": "Ping-tila",
-    "widgetRecentActivityName": "Viimeaikaiset toiminnot",
-    "sshTerminalNoHost": "Ei määritettyä isäntää",
-    "sshTerminalConnect": "Yhdistä",
-    "sshTerminalAutoConnect": "Automaattinen yhteys kuormituksen yhteydessä",
-    "connectionTypes": "Yhteystyypit",
-    "calMon": "Mo",
-    "calTue": "Ti",
-    "calWed": "Me",
-    "calThu": "To",
-    "calFri": "Pe",
-    "calSat": "La",
-    "calSun": "Su",
-    "startOnMonday": "Viikko alkaa maanantaina",
-    "countdownNoDate": "Ei asetettua tavoitepäivämäärää",
-    "countdownPast": "Tapahtuma on ohi",
-    "countdownDays": "päivää",
-    "countdownHours": "tuntia",
-    "countdownMinutes": "min",
-    "countdownSeconds": "sek",
-    "countdownLabel": "Tarra",
-    "countdownLabelPlaceholder": "esim. julkaisupäivä",
-    "countdownShowDays": "Näyttelypäivät",
-    "countdownShowHours": "Näytä aukioloajat",
-    "targetDate": "Tavoitepäivämäärä",
-    "searchEngine": "Hakukone",
-    "customSearchUrl": "Mukautetun haun URL-osoite",
-    "searchPlaceholder": "Haku...",
-    "searchGo": "Mennä",
-    "searchPlaceholderLabel": "Paikkamerkkiteksti",
-    "searchPlaceholderHint": "Hakusyötteen sisällä näkyvä teksti",
-    "openInNewTab": "Avaa uudessa välilehdessä",
-    "searchQueryPlaceholder": "Syötä kysely...",
-    "noSearchShortcuts": "Ei määritettyjä pikanäppäimiä",
-    "addSearchShortcut": "Lisää pikakuvake",
-    "fontSize": "Fonttikoko",
-    "textAlign": "Tekstin tasaus",
-    "fontWeight": "Fontin paino",
-    "clearColor": "Kirkas väri",
-    "imageFit": "Kuvan sovitus",
-    "imageLinkUrl": "Linkin URL-osoite",
-    "noImage": "Kuvan URL-osoitetta ei ole asetettu",
-    "altText": "Vaihtoehtoinen teksti",
-    "altTextPlaceholder": "Kuvaile kuvaa",
-    "renderMarkdown": "Renderöi Markdown",
-    "displayMode": "Näyttötila",
-    "displayField": "Näyttökenttä",
-    "jsonPath": "JSON-polku",
-    "customApiLabel": "Tarra",
-    "customApiLabelPlaceholder": "esim. Lämpötila",
-    "customApiUnit": "Yksikkö",
-    "customApiNoUrl": "API-URL-osoitetta ei ole määritetty",
-    "customApiError": "Nouto epäonnistui",
-    "customApiNotArray": "Vastaus ei ole taulukko",
-    "addService": "Lisää palvelu",
-    "showLabels": "Näytä otsikot",
-    "iconSize": "Kuvakkeen koko",
-    "noDashboardLinks": "Ei määritettyjä kojelaudan linkkejä",
-    "noLimit": "Ei rajaa",
-    "sectionHeading": "Osion otsikko",
-    "addSection": "Lisää osio",
-    "compactMode": "Kompakti tila",
-    "selectHosts": "Valitse isännät",
-    "listLayout": "Lista",
-    "gridLayout": "Ruudukko",
-    "configureUrl": "Aseta URL-osoite widgetin asetuksissa",
-    "embeddedContent": "Upotettu sisältö",
-    "noBookmarks": "Ei kirjanmerkkejä",
-    "noSections": "Ei osioita määritettynä",
-    "noServices": "Ei palveluita määritettynä",
-    "configureLocation": "Aseta sijainti widgetin asetuksissa",
-    "bannerTextPlaceholder": "Banneriteksti",
-    "serviceNamePlaceholder": "Palveluni",
-    "emptyNote": "Tyhjä muistiinpano...",
-    "weatherLoadFailed": "Sään lataaminen kohteelle \"{{location}} \" ei onnistunut",
-    "feelsLike": "Tuntuu kuin {{temperature}}",
-    "timezonePlaceholder": "Amerikka/New_York (jätä tyhjäksi, jos haluat paikallisen)",
-    "notesPlaceholder": "Kirjoita muistiinpanosi tähän...",
-    "locationPlaceholder": "New York, Lontoo, Tokio...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Kirjanmerkit",
-        "description": "Pikalinkkien luettelo"
-      },
-      "calendar": {
-        "name": "Kalenteri",
-        "description": "Kuukausikalenteri, jossa tämä päivä on korostettuna"
-      },
-      "clock": {
-        "name": "Kello",
-        "description": "Live-kello, jossa on konfiguroitava aikavyöhyke"
-      },
-      "countdown": {
-        "name": "Lähtölaskenta",
-        "description": "Laskee taaksepäin tavoitepäivämäärään ja -kellonaikaan"
-      },
-      "custom_api": {
-        "name": "Mukautettu API",
-        "description": "Hae ja näytä tietoja mistä tahansa JSON-rajapinnasta"
-      },
-      "dashboard_links": {
-        "name": "Kojelaudan linkit",
-        "description": "Näyttää tallennetut kojelaudan palvelulinkkisi"
-      },
-      "folder": {
-        "name": "Kansio",
-        "description": "Taustakortti widgetien visuaaliseen ryhmittelyyn"
-      },
-      "host_grid": {
-        "name": "Isäntäverkko",
-        "description": "Kaikkien SSH-isäntäsi reaaliaikaisen tilan yleiskatsausruudukko"
-      },
-      "host_status": {
-        "name": "Isännän tila",
-        "description": "Näyttää SSH-isännän reaaliaikaisen tilan ja mittarit"
-      },
-      "iframe_embed": {
-        "name": "iFrame-upotus",
-        "description": "Upota mikä tahansa URL-osoite iframe-kehykseen"
-      },
-      "image_widget": {
-        "name": "Kuva",
-        "description": "Näytä mikä tahansa kuva URL-osoitteesta"
-      },
-      "link_tree": {
-        "name": "Linkkipuu",
-        "description": "Ryhmitellyt linkit järjestettynä merkittyihin osioihin"
-      },
-      "markdown_notes": {
-        "name": "Markdown-muistiinpanot",
-        "description": "Muistiinpanot valinnaisella Markdown-renderöinnillä ja rivikohtaisella muokkauksella"
-      },
-      "notes": {
-        "name": "Muistiinpanoja",
-        "description": "Tekstimuistiinpanojen widget"
-      },
-      "ping_status": {
-        "name": "Ping-tila",
-        "description": "Tarkista, ovatko URL-osoitteet tai palvelut saavutettavissa"
-      },
-      "quick_connect": {
-        "name": "Pikayhteys",
-        "description": "Käynnistä terminaali, tiedostot, Docker, tunnelit ja paljon muuta isännöillesi"
-      },
-      "recent_activity": {
-        "name": "Viimeaikaiset toiminnot",
-        "description": "Näyttää viimeisimmän terminaali-, Docker-, tiedosto- ja tunnelitoiminnan"
-      },
-      "rss_feed": {
-        "name": "RSS-syöte",
-        "description": "Näytä RSS- tai Atom-syötteen kohteita"
-      },
-      "search_bar": {
-        "name": "Hakupalkki",
-        "description": "Pikahaku Googlella, DuckDuckGolla, Bingillä tai mukautetulla hakukoneella"
-      },
-      "search_links": {
-        "name": "Hakupikavalinnat",
-        "description": "Pikapainikkeet eri hakukoneiden hakemiseen"
-      },
-      "service_grid": {
-        "name": "Palveluverkko",
-        "description": "Palveluruutujen ruudukko kuvakkeineen ja linkkeineen"
-      },
-      "service_link": {
-        "name": "Palvelulinkki",
-        "description": "Klikattava laatta, joka linkittää palvelun URL-osoitteeseen"
-      },
-      "ssh_terminal": {
-        "name": "SSH-terminaali",
-        "description": "Sisäänrakennettu SSH-pääte, joka on yhdistetty konfiguroituun isäntään"
-      },
-      "system_overview": {
-        "name": "Järjestelmän yleiskatsaus",
-        "description": "Termix-versio, tietokannan kunto ja käyttöaika yhdellä silmäyksellä"
-      },
-      "termix_uptime": {
-        "name": "Termixin käyttöaika",
-        "description": "Näyttää kuinka kauan Termix-palvelin on ollut käynnissä"
-      },
-      "text_banner": {
-        "name": "Tekstibanneri",
-        "description": "Tyylitelty tekstitunniste osioille ja otsikoille"
-      },
-      "weather": {
-        "name": "Sää",
-        "description": "Live-sää missä tahansa paikassa"
-      },
-      "docker_widget": {
-        "name": "Docker-hallinta",
-        "description": "Sulautettu Docker-konttien hallintaohjelma konfiguroidulle isännälle"
-      },
-      "file_manager_widget": {
-        "name": "Tiedostonhallinta",
-        "description": "Upotettu SFTP-tiedostonhallinta konfiguroidulle isännälle"
-      },
-      "tunnel_widget": {
-        "name": "Tunnelin hallinta",
-        "description": "Sulautettu SSH-tunnelinhallinta konfiguroidulle isännälle"
-      },
-      "metrics_chart": {
-        "name": "Mittarikaavio",
-        "description": "Isännän historiallinen suorittimen, muistin, levyn tai verkon kaavio"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Käytä kotisivua",
-      "description": "Tarkastele ja muokkaa kotisivun kanvasta ja kojelaudan palvelulinkkejä."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Sallitut yksityiset isännät",
-      "description": "Tarkat yksityiset tai loopback-isäntänimet/IP-osoitteet Ping Status- ja Custom API -widgeteille. Erota merkinnät pilkuilla tai rivinvaihdoilla; jätä pois skeema, portit ja polut. Tyhjät lohkot yksityisiä kohteita."
-    },
-    "privateCertificateAuthority": {
-      "label": "Yksityinen varmentaja (PEM)",
-      "description": "Valinnainen luotettujen varmenteiden paketti sallittujen isäntien luettelosta. Varmenteiden vahvistus pysyy käytössä. Jätä tyhjäksi käyttääksesi järjestelmän luotettujen varmenteiden säilöä."
-    }
-  },
-  "plugin": {
-    "name": "Etusivu"
-  }
-}
diff --git a/plugins/homepage/locales/translated/fr_FR.json b/plugins/homepage/locales/translated/fr_FR.json
deleted file mode 100644
index bbc152999..000000000
--- a/plugins/homepage/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Accueil"
-  },
-  "dashboard": {
-    "serviceLinks": "Liens de service",
-    "homepagePreview": "Aperçu de la page d'accueil"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Liens de service",
-    "serviceLinksEmpty": "Aucun lien de service pour l’instant",
-    "serviceLinksAdd": "Ajouter",
-    "serviceLinksLabelPlaceholder": "Mon service",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Saisissez une adresse Web valide",
-    "serviceLinksAddFailed": "Échec de l’ajout du lien de service"
-  },
-  "homepage": {
-    "title": "Accueil",
-    "addWidget": "Ajouter un widget",
-    "noWidgetsInCategory": "Aucun widget dans cette catégorie",
-    "editWidget": "Modifier le widget",
-    "zoomIn": "Zoom avant",
-    "zoomOut": "Zoom arrière",
-    "resetView": "Réinitialiser la vue",
-    "lockLayout": "Verrouiller la disposition",
-    "unlockLayout": "Déverrouiller la disposition",
-    "noWidgets": "Faites un clic droit ou cliquez sur + pour ajouter votre premier widget",
-    "openFullView": "Ouvrir la vue complète",
-    "previewTitle": "Aperçu de la page d'accueil",
-    "cancel": "Annuler",
-    "save": "Enregistrer",
-    "title_label": "Titre",
-    "widgetTitlePlaceholder": "Titre du widget (facultatif)",
-    "url": "URL",
-    "imageUrl": "URL d'image personnalisée",
-    "imageUrlHint": "Laissez vide pour utiliser automatiquement le favicon du site",
-    "showImage": "Afficher l'image",
-    "description": "Description",
-    "color": "Couleur",
-    "timezone": "Fuseau horaire",
-    "invalidTimezone": "Fuseau horaire invalide. Veuillez utiliser un nom IANA tel que America/New_York.",
-    "showSeconds": "Afficher les secondes",
-    "format12h": "Format 12 heures",
-    "content": "Contenu",
-    "backgroundColor": "Couleur d'arrière-plan",
-    "links": "Liens",
-    "addLink": "Ajouter un lien",
-    "linkLabel": "Libellé",
-    "categoryLinks": "Liens",
-    "categoryInfo": "Info",
-    "categorySystem": "Système",
-    "copyLink": "Copier le lien",
-    "linkCopied": "Lien copié !",
-    "location": "Localisation",
-    "temperatureUnit": "Unité de température",
-    "showForecast": "Afficher les prévisions sur 3 jours",
-    "scrolling": "Autoriser le défilement",
-    "feedUrl": "URL du flux",
-    "maxItems": "Nombre max d'éléments",
-    "showDescription": "Afficher la description",
-    "widgetRssName": "Flux RSS",
-    "rssNoFeedUrl": "Configurez l'URL du flux dans les paramètres du widget.",
-    "rssLoadError": "Impossible de charger le flux",
-    "rssNoItems": "Aucun article",
-    "noHostSelected": "Aucun hôte sélectionné",
-    "displayedMetrics": "Métriques affichées",
-    "metricCpu": "CPU",
-    "metricMemory": "Mémoire",
-    "metricDisk": "Disque",
-    "metricUptime": "Uptime",
-    "metricSystem": "Système",
-    "metricNetwork": "Réseau",
-    "metricProcesses": "Processus",
-    "categoryMonitoring": "Surveillance",
-    "noPingUrls": "Aucune URL configurée",
-    "pingLabel": "Libellé",
-    "addPingUrl": "Ajouter une URL",
-    "showLatency": "Afficher la latence",
-    "refreshInterval": "Intervalle de rafraîchissement",
-    "seconds": "secondes",
-    "filterActivityTypes": "Filtrer les types",
-    "filterTypesHint": "Laisser vide pour tout afficher",
-    "showTimestamp": "Afficher l’horodatage",
-    "uptimeUnavailable": "Uptime non disponible",
-    "uptimeLabel": "Uptime",
-    "overviewVersion": "Version",
-    "overviewUpdateLabel": "Mettre à jour",
-    "overviewUpdateAvailable": "Mise à jour disponible",
-    "overviewDatabase": "Base de données",
-    "overviewUptime": "Uptime",
-    "noHosts": "Aucun hôte configuré",
-    "hostGridHosts": "Hôtes",
-    "hostGridAllHint": "Laissez vide pour afficher tous les hôtes",
-    "columns": "Colonnes",
-    "showIp": "Afficher l'adresse IP",
-    "layout": "Disposition",
-    "showStatus": "Afficher le statut",
-    "noActivity": "Aucune activité",
-    "widgetPingStatusName": "Statut du ping",
-    "widgetRecentActivityName": "Activité récente",
-    "sshTerminalNoHost": "Aucun hôte configuré",
-    "sshTerminalConnect": "Connecter",
-    "sshTerminalAutoConnect": "Connexion automatique au chargement",
-    "connectionTypes": "Types de connexion",
-    "calMon": "Lu",
-    "calTue": "Ma",
-    "calWed": "Me",
-    "calThu": "Je",
-    "calFri": "Ve",
-    "calSat": "Sa",
-    "calSun": "Di",
-    "startOnMonday": "Commencer la semaine le lundi",
-    "countdownNoDate": "Aucune date cible définie",
-    "countdownPast": "L'événement est passé",
-    "countdownDays": "jours",
-    "countdownHours": "h",
-    "countdownMinutes": "min",
-    "countdownSeconds": "s",
-    "countdownLabel": "Libellé",
-    "countdownLabelPlaceholder": "ex. : Jour de lancement",
-    "countdownShowDays": "Afficher les jours",
-    "countdownShowHours": "Afficher les heures",
-    "targetDate": "Date cible",
-    "searchEngine": "Moteur de recherche",
-    "customSearchUrl": "URL de recherche personnalisée",
-    "searchPlaceholder": "Rechercher...",
-    "searchGo": "OK",
-    "searchPlaceholderLabel": "Texte indicatif",
-    "searchPlaceholderHint": "Texte affiché dans le champ de recherche",
-    "openInNewTab": "Ouvrir dans un nouvel onglet",
-    "searchQueryPlaceholder": "Saisir une requête...",
-    "noSearchShortcuts": "Aucun raccourci configuré",
-    "addSearchShortcut": "Ajouter un raccourci",
-    "fontSize": "Taille de la police",
-    "textAlign": "Alignement du texte",
-    "fontWeight": "Graisse de la police",
-    "clearColor": "Effacer la couleur",
-    "imageFit": "Ajustement de l'image",
-    "imageLinkUrl": "URL du lien",
-    "noImage": "Aucune URL d'image définie",
-    "altText": "Texte alternatif",
-    "altTextPlaceholder": "Décrire l'image",
-    "renderMarkdown": "Rendu Markdown",
-    "displayMode": "Mode d'affichage",
-    "displayField": "Champ d'affichage",
-    "jsonPath": "Chemin JSON",
-    "customApiLabel": "Étiquette",
-    "customApiLabelPlaceholder": "ex. : Température",
-    "customApiUnit": "Unité",
-    "customApiNoUrl": "Aucune URL d'API configurée",
-    "customApiError": "Échec de la récupération",
-    "customApiNotArray": "La réponse n'est pas un tableau",
-    "addService": "Ajouter un service",
-    "showLabels": "Afficher les étiquettes",
-    "iconSize": "Taille des icônes",
-    "noDashboardLinks": "Aucun lien de tableau de bord configuré",
-    "noLimit": "Aucune limite",
-    "sectionHeading": "Titre de la section",
-    "addSection": "Ajouter une section",
-    "compactMode": "Mode compact",
-    "selectHosts": "Sélectionner les hôtes",
-    "listLayout": "Liste",
-    "gridLayout": "Grille",
-    "configureUrl": "Définissez une URL dans les paramètres du widget",
-    "embeddedContent": "Contenu intégré",
-    "noBookmarks": "Aucun signet",
-    "noSections": "Aucune section n'est configurée.",
-    "noServices": "Aucun service configuré",
-    "configureLocation": "Définissez un emplacement dans les paramètres du widget",
-    "bannerTextPlaceholder": "Texte de la bannière",
-    "serviceNamePlaceholder": "Mon service",
-    "emptyNote": "Note vide...",
-    "weatherLoadFailed": "Impossible de charger les données météorologiques pour «{{location}}»",
-    "feelsLike": "On dirait {{temperature}}",
-    "timezonePlaceholder": "Amérique/New_York (laisser vide pour la région)",
-    "notesPlaceholder": "Écrivez vos notes ici...",
-    "locationPlaceholder": "New York, Londres, Tokyo...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Favoris",
-        "description": "Une liste de liens rapides"
-      },
-      "calendar": {
-        "name": "Calendrier",
-        "description": "Un calendrier mensuel avec la date du jour mise en évidence. Un calendrier mensuel avec la date du jour mise en évidence. Un calendrier mensuel avec la date du jour en surbrillance. Le jour de la semaine est mis en évidence. Un calendrier mensuel avec la date du jour mise ..."
-      },
-      "clock": {
-        "name": "Horloge",
-        "description": "Une horloge en temps réel avec fuseau horaire configurable"
-      },
-      "countdown": {
-        "name": "Compte à rebours",
-        "description": "Compte à rebours jusqu'à une date et une heure cibles"
-      },
-      "custom_api": {
-        "name": "API personnalisée",
-        "description": "Récupérer et afficher des données depuis n'importe quelle API JSON"
-      },
-      "dashboard_links": {
-        "name": "Liens du tableau de bord",
-        "description": "Affiche les liens vers les services enregistrés de votre tableau de bord"
-      },
-      "folder": {
-        "name": "Dossier",
-        "description": "Une carte de fond pour regrouper visuellement les widgets"
-      },
-      "host_grid": {
-        "name": "Grille d'hôtes",
-        "description": "Tableau récapitulatif en temps réel de l'état de tous vos hôtes SSH"
-      },
-      "host_status": {
-        "name": "État de l'hôte",
-        "description": "Affiche l'état et les indicateurs en direct d'un hôte SSH"
-      },
-      "iframe_embed": {
-        "name": "Intégration iFrame",
-        "description": "Intègre n'importe quelle URL dans une iframe"
-      },
-      "image_widget": {
-        "name": "Image",
-        "description": "Afficher n'importe quelle image à partir d'une URL"
-      },
-      "link_tree": {
-        "name": "Arborescence de liens",
-        "description": "Liens regroupés et organisés en sections étiquetées"
-      },
-      "markdown_notes": {
-        "name": "Notes Markdown",
-        "description": "Notes avec rendu Markdown optionnel et édition en ligne"
-      },
-      "notes": {
-        "name": "Notes",
-        "description": "Un widget de notes textuelles"
-      },
-      "ping_status": {
-        "name": "Statut du ping",
-        "description": "Vérifier si les URL ou les services sont accessibles"
-      },
-      "quick_connect": {
-        "name": "Connexion rapide",
-        "description": "Lancez des terminaux, des fichiers, des conteneurs Docker, des tunnels et bien plus encore pour vos hôtes."
-      },
-      "recent_activity": {
-        "name": "Activité récente",
-        "description": "Affiche l'activité récente du terminal, de Docker, des fichiers et des tunnels"
-      },
-      "rss_feed": {
-        "name": "Flux RSS",
-        "description": "Affiche les éléments d'un flux RSS ou Atom"
-      },
-      "search_bar": {
-        "name": "Barre de recherche",
-        "description": "Recherche rapide avec Google, DuckDuckGo, Bing ou un moteur de recherche personnalisé"
-      },
-      "search_links": {
-        "name": "Raccourcis de recherche",
-        "description": "Boutons d'accès rapide pour rechercher différents moteurs"
-      },
-      "service_grid": {
-        "name": "Grille de services",
-        "description": "Une grille de vignettes de service avec icônes et liens"
-      },
-      "service_link": {
-        "name": "Lien de service",
-        "description": "Une tuile cliquable renvoyant vers une URL de service"
-      },
-      "ssh_terminal": {
-        "name": "Terminal SSH",
-        "description": "Un terminal SSH intégré connecté à un hôte configuré"
-      },
-      "system_overview": {
-        "name": "Vue d'ensemble du système",
-        "description": "Aperçu de la version de Termix, de l'état de la base de données et de la disponibilité"
-      },
-      "termix_uptime": {
-        "name": "Temps de disponibilité de Termix",
-        "description": "Indique la durée de fonctionnement du serveur Termix."
-      },
-      "text_banner": {
-        "name": "Bannière de texte",
-        "description": "Étiquette de texte stylisée pour les sections et les titres"
-      },
-      "weather": {
-        "name": "Météo",
-        "description": "Météo en direct pour n'importe quel lieu"
-      },
-      "docker_widget": {
-        "name": "Gestionnaire Docker",
-        "description": "Gestionnaire de conteneurs Docker intégré pour un hôte configuré"
-      },
-      "file_manager_widget": {
-        "name": "Gestionnaire de fichiers",
-        "description": "Gestionnaire de fichiers SFTP intégré pour un hôte configuré"
-      },
-      "tunnel_widget": {
-        "name": "Gestionnaire de tunnels",
-        "description": "Gestionnaire de tunnels SSH intégré pour un hôte configuré"
-      },
-      "metrics_chart": {
-        "name": "Graphique de métriques",
-        "description": "Graphique historique du processeur, de la mémoire, du disque ou du réseau pour un hôte"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilisez la page d'accueil",
-      "description": "Afficher et modifier les liens vers le canevas de la page d'accueil et le tableau de bord."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Hôtes privés autorisés",
-      "description": "Noms d'hôtes/adresses IP privés ou de bouclage exacts pour les widgets d'état Ping et d'API personnalisée. Séparez les entrées par des virgules ou des sauts de ligne ; omettez les schémas, les ports et les chemins. Laissez des blocs vides pour les destinations privées."
-    },
-    "privateCertificateAuthority": {
-      "label": "Autorité de certification privée (PEM)",
-      "description": "Ensemble d'autorités de certification de confiance optionnel pour les hôtes autorisés. La vérification des certificats reste activée. Laissez ce champ vide pour utiliser le magasin de certificats système."
-    }
-  },
-  "plugin": {
-    "name": "Accueil"
-  }
-}
diff --git a/plugins/homepage/locales/translated/he_IL.json b/plugins/homepage/locales/translated/he_IL.json
deleted file mode 100644
index bdc7ab37a..000000000
--- a/plugins/homepage/locales/translated/he_IL.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "דף הבית"
-  },
-  "dashboard": {
-    "serviceLinks": "קישורי שירות",
-    "homepagePreview": "תצוגה מקדימה של דף הבית"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "קישורי שירות",
-    "serviceLinksEmpty": "אין עדיין קישורים לשירותים",
-    "serviceLinksAdd": "לְהוֹסִיף",
-    "serviceLinksLabelPlaceholder": "השירות שלי",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "הזן כתובת אינטרנט חוקית",
-    "serviceLinksAddFailed": "נכשל הוספת קישור לשירות"
-  },
-  "homepage": {
-    "title": "דף הבית",
-    "addWidget": "הוסף ווידג'ט",
-    "noWidgetsInCategory": "אין ווידג'טים בקטגוריה זו",
-    "editWidget": "עריכת ווידג'ט",
-    "zoomIn": "לְהִתְמַקֵד",
-    "zoomOut": "התקרבות",
-    "resetView": "איפוס תצוגה",
-    "lockLayout": "פריסת נעילה",
-    "unlockLayout": "נעילת פריסה",
-    "noWidgets": "לחץ לחיצה ימנית או לחץ על + כדי להוסיף את הווידג'ט הראשון שלך",
-    "openFullView": "פתח תצוגה מלאה",
-    "previewTitle": "תצוגה מקדימה של דף הבית",
-    "cancel": "לְבַטֵל",
-    "save": "לְהַצִיל",
-    "title_label": "כּוֹתֶרֶת",
-    "widgetTitlePlaceholder": "כותרת הווידג'ט (אופציונלי)",
-    "url": "כתובת אתר",
-    "imageUrl": "כתובת אתר של תמונה מותאמת אישית",
-    "imageUrlHint": "השאר ריק כדי להשתמש בסמל האתר באופן אוטומטי",
-    "showImage": "הצג תמונה",
-    "description": "תֵאוּר",
-    "color": "צֶבַע",
-    "timezone": "אזור זמן",
-    "invalidTimezone": "אזור זמן לא חוקי. השתמש בשם IANA כגון America/New_York",
-    "showSeconds": "הצג שניות",
-    "format12h": "12 שעות",
-    "content": "תוֹכֶן",
-    "backgroundColor": "צבע רקע",
-    "links": "קישורים",
-    "addLink": "הוסף קישור",
-    "linkLabel": "מַדבֵּקָה",
-    "categoryLinks": "קישורים",
-    "categoryInfo": "מידע",
-    "categorySystem": "מַעֲרֶכֶת",
-    "copyLink": "העתק קישור",
-    "linkCopied": "קישור הועתק!",
-    "location": "מִקוּם",
-    "temperatureUnit": "יחידת טמפרטורה",
-    "showForecast": "הצג תחזית ל-3 ימים",
-    "scrolling": "אפשר גלילה",
-    "feedUrl": "כתובת אתר של הפיד",
-    "maxItems": "מקסימום פריטים",
-    "showDescription": "הצג תיאור",
-    "widgetRssName": "עדכון RSS",
-    "rssNoFeedUrl": "הגדרת כתובת URL של פיד בהגדרות הווידג'ט",
-    "rssLoadError": "לא ניתן היה לטעון את הפיד",
-    "rssNoItems": "אין פריטים",
-    "noHostSelected": "לא נבחר מארח",
-    "displayedMetrics": "מדדים מוצגים",
-    "metricCpu": "מעבד",
-    "metricMemory": "זֵכֶר",
-    "metricDisk": "דִיסק",
-    "metricUptime": "זמן פעולה",
-    "metricSystem": "מַעֲרֶכֶת",
-    "metricNetwork": "רֶשֶׁת",
-    "metricProcesses": "תהליכים",
-    "categoryMonitoring": "ניטור",
-    "noPingUrls": "לא הוגדרו כתובות URL",
-    "pingLabel": "מַדבֵּקָה",
-    "addPingUrl": "הוסף כתובת URL",
-    "showLatency": "הצג זמן השהייה",
-    "refreshInterval": "מרווח רענון",
-    "seconds": "שניות",
-    "filterActivityTypes": "סוגי סינון",
-    "filterTypesHint": "השאר ריק כדי להציג הכל",
-    "showTimestamp": "הצג חותמת זמן",
-    "uptimeUnavailable": "זמן פעולה לא זמין",
-    "uptimeLabel": "זמן פעולה",
-    "overviewVersion": "גִרְסָה",
-    "overviewUpdateLabel": "לְעַדְכֵּן",
-    "overviewUpdateAvailable": "עדכון זמין",
-    "overviewDatabase": "מסד נתונים",
-    "overviewUptime": "זמן פעולה",
-    "noHosts": "לא הוגדרו מארחים",
-    "hostGridHosts": "מארחים",
-    "hostGridAllHint": "השאר ריק כדי להציג את כל המארחים",
-    "columns": "עמודות",
-    "showIp": "הצג כתובת IP",
-    "layout": "מַעֲרָך",
-    "showStatus": "הצג סטטוס",
-    "noActivity": "אין פעילות",
-    "widgetPingStatusName": "סטטוס פינג",
-    "widgetRecentActivityName": "פעילות אחרונה",
-    "sshTerminalNoHost": "לא הוגדר מארח",
-    "sshTerminalConnect": "לְחַבֵּר",
-    "sshTerminalAutoConnect": "חיבור אוטומטי בעת טעינה",
-    "connectionTypes": "סוגי חיבור",
-    "calMon": "מו",
-    "calTue": "טו",
-    "calWed": "אָנוּ",
-    "calThu": "ה'",
-    "calFri": "פר",
-    "calSat": "סא",
-    "calSun": "סו",
-    "startOnMonday": "תחילת השבוע ביום שני",
-    "countdownNoDate": "לא נקבע תאריך יעד",
-    "countdownPast": "האירוע עבר",
-    "countdownDays": "ימים",
-    "countdownHours": "שעות",
-    "countdownMinutes": "דקות",
-    "countdownSeconds": "שניות",
-    "countdownLabel": "מַדבֵּקָה",
-    "countdownLabelPlaceholder": "למשל יום ההשקה",
-    "countdownShowDays": "ימי המופע",
-    "countdownShowHours": "שעות המופע",
-    "targetDate": "תאריך יעד",
-    "searchEngine": "מנוע חיפוש",
-    "customSearchUrl": "כתובת אתר לחיפוש מותאמת אישית",
-    "searchPlaceholder": "לְחַפֵּשׂ...",
-    "searchGo": "לָלֶכֶת",
-    "searchPlaceholderLabel": "טקסט מציין מיקום",
-    "searchPlaceholderHint": "טקסט המוצג בתוך קלט החיפוש",
-    "openInNewTab": "פתח בכרטיסייה חדשה",
-    "searchQueryPlaceholder": "הזן שאילתה...",
-    "noSearchShortcuts": "לא הוגדרו קיצורי דרך",
-    "addSearchShortcut": "הוסף קיצור דרך",
-    "fontSize": "גודל גופן",
-    "textAlign": "יישור טקסט",
-    "fontWeight": "משקל גופן",
-    "clearColor": "צבע שקוף",
-    "imageFit": "התאמת תמונה",
-    "imageLinkUrl": "כתובת אתר של קישור",
-    "noImage": "לא הוגדרה כתובת URL של תמונה",
-    "altText": "טקסט חלופי",
-    "altTextPlaceholder": "תאר את התמונה",
-    "renderMarkdown": "רינדור סימון למטה",
-    "displayMode": "מצב תצוגה",
-    "displayField": "שדה תצוגה",
-    "jsonPath": "נתיב JSON",
-    "customApiLabel": "מַדבֵּקָה",
-    "customApiLabelPlaceholder": "לדוגמה טמפרטורה",
-    "customApiUnit": "יְחִידָה",
-    "customApiNoUrl": "לא הוגדרה כתובת URL של API",
-    "customApiError": "נכשלה האחזור",
-    "customApiNotArray": "התגובה אינה מערך",
-    "addService": "הוסף שירות",
-    "showLabels": "הצג תוויות",
-    "iconSize": "גודל סמל",
-    "noDashboardLinks": "לא הוגדרו קישורי לוח מחוונים",
-    "noLimit": "אין הגבלה",
-    "sectionHeading": "כותרת סעיף",
-    "addSection": "הוסף מדור",
-    "compactMode": "מצב קומפקטי",
-    "selectHosts": "בחר מארחים",
-    "listLayout": "רְשִׁימָה",
-    "gridLayout": "רֶשֶׁת",
-    "configureUrl": "הגדר כתובת URL בהגדרות הווידג'ט",
-    "embeddedContent": "תוכן מוטמע",
-    "noBookmarks": "אין סימניות",
-    "noSections": "לא הוגדרו מדורים",
-    "noServices": "לא הוגדרו שירותים",
-    "configureLocation": "הגדרת מיקום בהגדרות הווידג'ט",
-    "bannerTextPlaceholder": "טקסט באנר",
-    "serviceNamePlaceholder": "השירות שלי",
-    "emptyNote": "פתק ריק...",
-    "weatherLoadFailed": "לא ניתן היה לטעון את מזג האוויר עבור \"{{location}}\"",
-    "feelsLike": "מרגיש כמו {{temperature}}",
-    "timezonePlaceholder": "אמריקה/ניו יורק (השאירו ריק עבור מקומי)",
-    "notesPlaceholder": "כתבו כאן את ההערות שלכם...",
-    "locationPlaceholder": "ניו יורק, לונדון, טוקיו...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "סימניות",
-        "description": "רשימה של קישורים מהירים"
-      },
-      "calendar": {
-        "name": "לוּחַ שָׁנָה",
-        "description": "לוח שנה חודשי עם היום המודגש"
-      },
-      "clock": {
-        "name": "שָׁעוֹן",
-        "description": "שעון חי עם אזור זמן הניתן להגדרה"
-      },
-      "countdown": {
-        "name": "סְפִירָה לְאָחוֹר",
-        "description": "סופר לאחור עד לתאריך ושעה יעד"
-      },
-      "custom_api": {
-        "name": "ממשק API מותאם אישית",
-        "description": "אחזור והצגת נתונים מכל API של JSON"
-      },
-      "dashboard_links": {
-        "name": "קישורי לוח המחוונים",
-        "description": "מציג את קישורי שירותי לוח המחוונים השמורים שלך"
-      },
-      "folder": {
-        "name": "תיקייה",
-        "description": "כרטיס רקע לקיבוץ ויזואלי של ווידג'טים"
-      },
-      "host_grid": {
-        "name": "רשת מארחים",
-        "description": "רשת סקירת סטטוס בזמן אמת עבור כל מארחי ה-SSH שלך"
-      },
-      "host_status": {
-        "name": "סטטוס מארח",
-        "description": "מציג סטטוס ומדדים בזמן אמת עבור מארח SSH"
-      },
-      "iframe_embed": {
-        "name": "הטמעת iFrame",
-        "description": "הטמע כל כתובת URL ב-iframe"
-      },
-      "image_widget": {
-        "name": "תְמוּנָה",
-        "description": "הצג כל תמונה מכתובת URL"
-      },
-      "link_tree": {
-        "name": "עץ קישורים",
-        "description": "קישורים מקובצים מאורגנים לפי מקטעים מתויגים"
-      },
-      "markdown_notes": {
-        "name": "הערות הנחה",
-        "description": "הערות עם עיבוד Markdown אופציונלי ועריכה מוטבעת"
-      },
-      "notes": {
-        "name": "הערות",
-        "description": "ווידג'ט של הערות טקסט"
-      },
-      "ping_status": {
-        "name": "סטטוס פינג",
-        "description": "בדוק אם כתובות URL או שירותים נגישים"
-      },
-      "quick_connect": {
-        "name": "חיבור מהיר",
-        "description": "הפעלת טרמינל, קבצים, docker, tunnels ועוד עבור המארחים שלך"
-      },
-      "recent_activity": {
-        "name": "פעילות אחרונה",
-        "description": "מציג פעילות אחרונה בטרמינל, ב-Docker, בקבצים ובמנהרות"
-      },
-      "rss_feed": {
-        "name": "עדכון RSS",
-        "description": "הצגת פריטים מפיד RSS או Atom"
-      },
-      "search_bar": {
-        "name": "סרגל חיפוש",
-        "description": "חיפוש מהיר עם גוגל, DuckDuckGo, Bing או מנוע חיפוש מותאם אישית"
-      },
-      "search_links": {
-        "name": "קיצורי דרך לחיפוש",
-        "description": "כפתורים מהירים לחיפוש מנועי חיפוש שונים"
-      },
-      "service_grid": {
-        "name": "רשת שירותים",
-        "description": "רשת של אריחי שירות עם סמלים וקישורים"
-      },
-      "service_link": {
-        "name": "קישור שירות",
-        "description": "אריח הניתן ללחיצה המקשר לכתובת URL של שירות"
-      },
-      "ssh_terminal": {
-        "name": "מסוף SSH",
-        "description": "מסוף SSH מובנה המחובר למארח מוגדר"
-      },
-      "system_overview": {
-        "name": "סקירת מערכת",
-        "description": "גרסת Termix, תקינות מסד הנתונים וזמן הפעילות במבט חטוף"
-      },
-      "termix_uptime": {
-        "name": "זמן פעילות של טרמיקס",
-        "description": "מראה כמה זמן שרת ה-Termix פועל"
-      },
-      "text_banner": {
-        "name": "באנר טקסט",
-        "description": "תווית טקסט מעוצבת עבור מקטעים וכותרות"
-      },
-      "weather": {
-        "name": "מֶזֶג אֲוִיר",
-        "description": "מזג אוויר חי לכל מקום"
-      },
-      "docker_widget": {
-        "name": "מנהל דוקר",
-        "description": "מנהל מכולות Docker מוטמע עבור מארח מוגדר"
-      },
-      "file_manager_widget": {
-        "name": "מנהל הקבצים",
-        "description": "מנהל קבצי SFTP מוטמע עבור מארח מוגדר"
-      },
-      "tunnel_widget": {
-        "name": "מנהל המנהרה",
-        "description": "מנהל מנהרות SSH מוטמע עבור מארח מוגדר"
-      },
-      "metrics_chart": {
-        "name": "תרשים מדדים",
-        "description": "תרשים היסטורי של מעבד, זיכרון, דיסק או רשת עבור מחשב מארח"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "השתמש בדף הבית",
-      "description": "הצג וערוך את הקישורים של בד הציור של דף הבית ושירות לוח המחוונים."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "מארחים פרטיים מורשים",
-      "description": "שמות מארחים/כתובות IP פרטיות או לולאה חוזרת מדויקות עבור סטטוס פינג ווידג'טים של API מותאם אישית. הפרד ערכים באמצעות פסיקים או שורות חדשות; השמט סכמות, יציאות ונתיבים. ריקון חסימות יעדים פרטיים."
-    },
-    "privateCertificateAuthority": {
-      "label": "רשות אישורים פרטית (PEM)",
-      "description": "חבילת CA מהימנה אופציונלית עבור מארחים ברשימת היתרים. אימות אישורים נשאר מופעל. השאר ריק כדי להשתמש במאגר האמון של המערכת."
-    }
-  },
-  "plugin": {
-    "name": "דף הבית"
-  }
-}
diff --git a/plugins/homepage/locales/translated/hi_IN.json b/plugins/homepage/locales/translated/hi_IN.json
deleted file mode 100644
index db38a20bb..000000000
--- a/plugins/homepage/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "होमपेज"
-  },
-  "dashboard": {
-    "serviceLinks": "सेवा लिंक",
-    "homepagePreview": "मुखपृष्ठ पूर्वावलोकन"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "सर्विस लिंक्स",
-    "serviceLinksEmpty": "अभी तक कोई सर्विस लिंक नहीं",
-    "serviceLinksAdd": "जोड़ें",
-    "serviceLinksLabelPlaceholder": "मेरी सर्विस",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "एक मान्य वेब पता दर्ज करें",
-    "serviceLinksAddFailed": "सर्विस लिंक जोड़ने में विफल"
-  },
-  "homepage": {
-    "title": "होमपेज",
-    "addWidget": "विजेट जोड़ें",
-    "noWidgetsInCategory": "इस श्रेणी में कोई विजेट नहीं हैं",
-    "editWidget": "विजेट संपादित करें",
-    "zoomIn": "ज़ूम इन",
-    "zoomOut": "ज़ूम आउट",
-    "resetView": "दृश्य रीसेट करें",
-    "lockLayout": "लेआउट लॉक करें",
-    "unlockLayout": "लेआउट अनलॉक करें",
-    "noWidgets": "अपना पहला विजेट जोड़ने के लिए राइट-क्लिक करें या + पर क्लिक करें",
-    "openFullView": "पूर्ण दृश्य खोलें",
-    "previewTitle": "होमपेज पूर्वावलोकन",
-    "cancel": "रद्द करें",
-    "save": "सहेजें",
-    "title_label": "शीर्षक",
-    "widgetTitlePlaceholder": "विजेट शीर्षक (वैकल्पिक)",
-    "url": "URL",
-    "imageUrl": "कस्टम इमेज URL",
-    "imageUrlHint": "साइट फ़ेविकॉन का स्वचालित रूप से उपयोग करने के लिए खाली छोड़ें",
-    "showImage": "इमेज दिखाएँ",
-    "description": "विवरण",
-    "color": "रंग",
-    "timezone": "समय क्षेत्र",
-    "invalidTimezone": "समय क्षेत्र अमान्य है। कृपया IANA नाम का उपयोग करें, जैसे कि America/New_York",
-    "showSeconds": "सेकंड दिखाएँ",
-    "format12h": "12-घंटे",
-    "content": "सामग्री",
-    "backgroundColor": "पृष्ठभूमि रंग",
-    "links": "लिंक",
-    "addLink": "लिंक जोड़ें",
-    "linkLabel": "लेबल",
-    "categoryLinks": "लिंक",
-    "categoryInfo": "जानकारी",
-    "categorySystem": "सिस्टम",
-    "copyLink": "लिंक कॉपी करें",
-    "linkCopied": "लिंक कॉपी हो गया!",
-    "location": "स्थान",
-    "temperatureUnit": "तापमान इकाई",
-    "showForecast": "3-दिन का पूर्वानुमान दिखाएं",
-    "scrolling": "स्क्रॉलिंग की अनुमति दें",
-    "feedUrl": "फ़ीड URL",
-    "maxItems": "अधिकतम आइटम",
-    "showDescription": "विवरण दिखाएं",
-    "widgetRssName": "RSS फ़ीड",
-    "rssNoFeedUrl": "विजेट सेटिंग में फ़ीड URL कॉन्फ़िगर करें",
-    "rssLoadError": "फ़ीड लोड नहीं हो सका",
-    "rssNoItems": "कोई आइटम नहीं",
-    "noHostSelected": "कोई होस्ट चयनित नहीं",
-    "displayedMetrics": "प्रदर्शित मेट्रिक्स",
-    "metricCpu": "CPU",
-    "metricMemory": "मेमोरी",
-    "metricDisk": "डिस्क",
-    "metricUptime": "अपटाइम",
-    "metricSystem": "सिस्टम",
-    "metricNetwork": "नेटवर्क",
-    "metricProcesses": "प्रोसेस",
-    "categoryMonitoring": "निगरानी",
-    "noPingUrls": "कोई URL कॉन्फ़िगर नहीं किया गया",
-    "pingLabel": "लेबल",
-    "addPingUrl": "URL जोड़ें",
-    "showLatency": "लेटेंसी दिखाएं",
-    "refreshInterval": "रीफ़्रेश अंतराल",
-    "seconds": "सेकंड",
-    "filterActivityTypes": "प्रकार फ़िल्टर करें",
-    "filterTypesHint": "सभी दिखाने के लिए खाली छोड़ें",
-    "showTimestamp": "टाइमस्टैम्प दिखाएं",
-    "uptimeUnavailable": "अपटाइम अनुपलब्ध",
-    "uptimeLabel": "अपटाइम",
-    "overviewVersion": "संस्करण",
-    "overviewUpdateLabel": "अपडेट करें",
-    "overviewUpdateAvailable": "अपडेट उपलब्ध है",
-    "overviewDatabase": "डेटाबेस",
-    "overviewUptime": "अपटाइम",
-    "noHosts": "कोई होस्ट कॉन्फ़िगर नहीं किए गए",
-    "hostGridHosts": "होस्ट",
-    "hostGridAllHint": "सभी होस्ट दिखाने के लिए खाली छोड़ें",
-    "columns": "कॉलम",
-    "showIp": "IP पता दिखाएं",
-    "layout": "लेआउट",
-    "showStatus": "स्थिति दिखाएं",
-    "noActivity": "कोई गतिविधि नहीं",
-    "widgetPingStatusName": "पिंग स्थिति",
-    "widgetRecentActivityName": "हाल की गतिविधि",
-    "sshTerminalNoHost": "कोई होस्ट कॉन्फ़िगर नहीं किया गया",
-    "sshTerminalConnect": "कनेक्ट करें",
-    "sshTerminalAutoConnect": "लोड पर स्वतः कनेक्ट",
-    "connectionTypes": "कनेक्शन प्रकार",
-    "calMon": "सोम",
-    "calTue": "मंगल",
-    "calWed": "बुध",
-    "calThu": "गुरु",
-    "calFri": "शुक्र",
-    "calSat": "शनि",
-    "calSun": "रवि",
-    "startOnMonday": "सप्ताह सोमवार से शुरू करें",
-    "countdownNoDate": "कोई लक्ष्य तिथि निर्धारित नहीं",
-    "countdownPast": "ईवेंट बीत चुका है",
-    "countdownDays": "दिन",
-    "countdownHours": "घंटे",
-    "countdownMinutes": "मिनट",
-    "countdownSeconds": "सेकंड",
-    "countdownLabel": "लेबल",
-    "countdownLabelPlaceholder": "उदा. लॉन्च दिवस",
-    "countdownShowDays": "दिन दिखाएं",
-    "countdownShowHours": "घंटे दिखाएं",
-    "targetDate": "लक्ष्य तिथि",
-    "searchEngine": "खोज इंजन",
-    "customSearchUrl": "कस्टम खोज URL",
-    "searchPlaceholder": "खोजें...",
-    "searchGo": "जाएं",
-    "searchPlaceholderLabel": "प्लेसहोल्डर टेक्स्ट",
-    "searchPlaceholderHint": "खोज इनपुट के अंदर दिखाया जाने वाला पाठ",
-    "openInNewTab": "नए टैब में खोलें",
-    "searchQueryPlaceholder": "क्वेरी दर्ज करें...",
-    "noSearchShortcuts": "कोई शॉर्टकट कॉन्फ़िगर नहीं है",
-    "addSearchShortcut": "शॉर्टकट जोड़ें",
-    "fontSize": "फ़ॉन्ट आकार",
-    "textAlign": "पाठ संरेखण",
-    "fontWeight": "फ़ॉन्ट मोटाई",
-    "clearColor": "रंग साफ़ करें",
-    "imageFit": "छवि फ़िट",
-    "imageLinkUrl": "लिंक URL",
-    "noImage": "कोई छवि URL सेट नहीं है",
-    "altText": "Alt टेक्स्ट",
-    "altTextPlaceholder": "छवि का विवरण दें",
-    "renderMarkdown": "मार्कडाउन रेंडर करें",
-    "displayMode": "प्रदर्शन मोड",
-    "displayField": "प्रदर्शन फ़ील्ड",
-    "jsonPath": "JSON पथ",
-    "customApiLabel": "लेबल",
-    "customApiLabelPlaceholder": "उदा. तापमान",
-    "customApiUnit": "इकाई",
-    "customApiNoUrl": "कोई API URL कॉन्फ़िगर नहीं है",
-    "customApiError": "फ़ेच करने में विफल",
-    "customApiNotArray": "प्रतिक्रिया एक ऐरे नहीं है",
-    "addService": "सेवा जोड़ें",
-    "showLabels": "लेबल दिखाएं",
-    "iconSize": "आइकन का आकार",
-    "noDashboardLinks": "कोई डैशबोर्ड लिंक कॉन्फ़िगर नहीं किया गया",
-    "noLimit": "कोई सीमा नहीं",
-    "sectionHeading": "अनुभाग शीर्षक",
-    "addSection": "अनुभाग जोड़ें",
-    "compactMode": "संक्षिप्त मोड",
-    "selectHosts": "होस्ट चुनें",
-    "listLayout": "सूची",
-    "gridLayout": "ग्रिड",
-    "configureUrl": "विजेट सेटिंग में एक URL सेट करें",
-    "embeddedContent": "अंतर्निहित सामग्री",
-    "noBookmarks": "कोई बुकमार्क नहीं",
-    "noSections": "कोई अनुभाग स्थापित नहीं किया गया है",
-    "noServices": "कोई सेवा स्थापित नहीं की गई",
-    "configureLocation": "विजेट सेटिंग में स्थान निर्धारित करें",
-    "bannerTextPlaceholder": "बैनर पाठ",
-    "serviceNamePlaceholder": "मेरी सेवा",
-    "emptyNote": "खाली नोट...",
-    "weatherLoadFailed": "\"{{location}} \" के लिए मौसम लोड नहीं हो सका",
-    "feelsLike": "ऐसा लगता है {{temperature}}",
-    "timezonePlaceholder": "America/New_York (स्थानीय उपयोग के लिए खाली छोड़ दें)",
-    "notesPlaceholder": "अपने नोट्स यहाँ लिखें...",
-    "locationPlaceholder": "न्यूयॉर्क, लंदन, टोक्यो...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "बुकमार्क",
-        "description": "त्वरित लिंक की सूची"
-      },
-      "calendar": {
-        "name": "कैलेंडर",
-        "description": "आज को हाइलाइट करते हुए एक महीने का कैलेंडर"
-      },
-      "clock": {
-        "name": "घड़ी",
-        "description": "कॉन्फ़िगर करने योग्य समय क्षेत्र वाली लाइव घड़ी"
-      },
-      "countdown": {
-        "name": "काउंटडाउन",
-        "description": "यह लक्षित तिथि और समय तक उलटी गिनती करता है।"
-      },
-      "custom_api": {
-        "name": "कस्टम API",
-        "description": "किसी भी JSON API से डेटा प्राप्त करें और प्रदर्शित करें"
-      },
-      "dashboard_links": {
-        "name": "डैशबोर्ड लिंक",
-        "description": "आपके सहेजे गए डैशबोर्ड सेवा लिंक दिखाता है"
-      },
-      "folder": {
-        "name": "फ़ोल्डर",
-        "description": "विजेट्स को दृश्य रूप से समूहित करने के लिए एक पृष्ठभूमि कार्ड"
-      },
-      "host_grid": {
-        "name": "होस्ट ग्रिड",
-        "description": "आपके सभी SSH होस्ट के लिए लाइव स्टेटस ओवरव्यू ग्रिड"
-      },
-      "host_status": {
-        "name": "होस्ट स्थिति",
-        "description": "यह SSH होस्ट के लिए लाइव स्थिति और मेट्रिक्स दिखाता है।"
-      },
-      "iframe_embed": {
-        "name": "iFrame एम्बेड",
-        "description": "किसी भी URL को आइफ्रेम में एम्बेड करें"
-      },
-      "image_widget": {
-        "name": "इमेज",
-        "description": "किसी URL से कोई भी छवि प्रदर्शित करें"
-      },
-      "link_tree": {
-        "name": "लिंक ट्री",
-        "description": "समूहीकृत लिंकों को लेबल वाले अनुभागों में व्यवस्थित किया गया है।"
-      },
-      "markdown_notes": {
-        "name": "मार्कडाउन नोट्स",
-        "description": "वैकल्पिक मार्कडाउन रेंडरिंग और इनलाइन संपादन के साथ नोट्स"
-      },
-      "notes": {
-        "name": "नोट्स",
-        "description": "एक टेक्स्ट नोट्स विजेट"
-      },
-      "ping_status": {
-        "name": "पिंग स्थिति",
-        "description": "जांचें कि यूआरएल या सेवाएं पहुंच योग्य हैं या नहीं।"
-      },
-      "quick_connect": {
-        "name": "त्वरित कनेक्ट",
-        "description": "अपने होस्ट के लिए टर्मिनल, फाइलें, डॉकर, टनल और बहुत कुछ लॉन्च करें"
-      },
-      "recent_activity": {
-        "name": "हाल की गतिविधि",
-        "description": "हाल ही में हुई टर्मिनल, डॉकर, फ़ाइल और टनल गतिविधि को दर्शाता है"
-      },
-      "rss_feed": {
-        "name": "RSS फ़ीड",
-        "description": "RSS या एटम फ़ीड से आइटम प्रदर्शित करें"
-      },
-      "search_bar": {
-        "name": "खोज पट्टी",
-        "description": "Google, DuckDuckGo, Bing या किसी कस्टम सर्च इंजन के साथ त्वरित खोज"
-      },
-      "search_links": {
-        "name": "खोज शॉर्टकट",
-        "description": "विभिन्न खोज इंजनों के लिए त्वरित बटन"
-      },
-      "service_grid": {
-        "name": "सेवा ग्रिड",
-        "description": "आइकन और लिंक के साथ सेवा टाइलों का एक ग्रिड"
-      },
-      "service_link": {
-        "name": "सेवा लिंक",
-        "description": "एक क्लिक करने योग्य टाइल जो सेवा URL से जुड़ता है"
-      },
-      "ssh_terminal": {
-        "name": "SSH टर्मिनल",
-        "description": "कॉन्फ़िगर किए गए होस्ट से जुड़ा एक इनलाइन SSH टर्मिनल"
-      },
-      "system_overview": {
-        "name": "सिस्टम अवलोकन",
-        "description": "टर्मिक्स संस्करण, डेटाबेस की स्थिति और अपटाइम की संक्षिप्त जानकारी"
-      },
-      "termix_uptime": {
-        "name": "Termix अपटाइम",
-        "description": "यह दर्शाता है कि टर्मिक्स सर्वर कितने समय से चल रहा है।"
-      },
-      "text_banner": {
-        "name": "टेक्स्ट बैनर",
-        "description": "अनुभागों और शीर्षकों के लिए एक शैलीबद्ध पाठ लेबल"
-      },
-      "weather": {
-        "name": "मौसम",
-        "description": "किसी भी स्थान का लाइव मौसम"
-      },
-      "docker_widget": {
-        "name": "Docker प्रबंधक",
-        "description": "कॉन्फ़िगर किए गए होस्ट के लिए एम्बेडेड Docker कंटेनर प्रबंधक"
-      },
-      "file_manager_widget": {
-        "name": "फ़ाइल प्रबंधक",
-        "description": "कॉन्फ़िगर किए गए होस्ट के लिए एम्बेडेड SFTP फ़ाइल प्रबंधक"
-      },
-      "tunnel_widget": {
-        "name": "टनल प्रबंधक",
-        "description": "कॉन्फ़िगर किए गए होस्ट के लिए एम्बेडेड SSH टनल प्रबंधक"
-      },
-      "metrics_chart": {
-        "name": "मीट्रिक चार्ट",
-        "description": "किसी होस्ट के लिए ऐतिहासिक CPU, मेमोरी, डिस्क या नेटवर्क चार्ट"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "होमपेज का उपयोग करें",
-      "description": "होमपेज कैनवास और डैशबोर्ड सेवा लिंक देखें और संपादित करें।"
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "निजी होस्ट की अनुमति है",
-      "description": "पिंग स्टेटस और कस्टम API विजेट के लिए सटीक निजी या लूपबैक होस्टनाम/IP पते। प्रविष्टियों को अल्पविराम या नई लाइन से अलग करें; स्कीम, पोर्ट और पथ को छोड़ दें। खाली ब्लॉक निजी गंतव्यों के लिए हैं।"
-    },
-    "privateCertificateAuthority": {
-      "label": "निजी प्रमाणपत्र प्राधिकरण (पीईएम)",
-      "description": "अनुमत होस्टों के लिए वैकल्पिक विश्वसनीय CA बंडल। प्रमाणपत्र सत्यापन सक्षम रहता है। सिस्टम ट्रस्ट स्टोर का उपयोग करने के लिए इसे खाली छोड़ दें।"
-    }
-  },
-  "plugin": {
-    "name": "होमपेज"
-  }
-}
diff --git a/plugins/homepage/locales/translated/hu_HU.json b/plugins/homepage/locales/translated/hu_HU.json
deleted file mode 100644
index d491674e1..000000000
--- a/plugins/homepage/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Kezdőlap"
-  },
-  "dashboard": {
-    "serviceLinks": "Szolgáltatási linkek",
-    "homepagePreview": "Kezdőlap előnézete"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Szolgáltatási linkek",
-    "serviceLinksEmpty": "Még nincsenek szolgáltatáslinkek",
-    "serviceLinksAdd": "Hozzáadás",
-    "serviceLinksLabelPlaceholder": "Szolgáltatásom",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Adjon meg egy érvényes webcímet",
-    "serviceLinksAddFailed": "Nem sikerült hozzáadni a szolgáltatás linkjét"
-  },
-  "homepage": {
-    "title": "Kezdőlap",
-    "addWidget": "Widget hozzáadása",
-    "noWidgetsInCategory": "Nincsenek widgetek ebben a kategóriában",
-    "editWidget": "Widget szerkesztése",
-    "zoomIn": "Nagyítás",
-    "zoomOut": "Kicsinyítés",
-    "resetView": "Nézet visszaállítása",
-    "lockLayout": "Zár elrendezése",
-    "unlockLayout": "Elrendezés feloldása",
-    "noWidgets": "Kattintson jobb gombbal, vagy kattintson a + ikonra az első widget hozzáadásához",
-    "openFullView": "Teljes nézet megnyitása",
-    "previewTitle": "Kezdőlap előnézete",
-    "cancel": "Mégsem",
-    "save": "Megtakarítás",
-    "title_label": "Cím",
-    "widgetTitlePlaceholder": "Widget címe (opcionális)",
-    "url": "URL-cím",
-    "imageUrl": "Egyéni kép URL-címe",
-    "imageUrlHint": "Hagyja üresen a webhely faviconjának automatikus használatához",
-    "showImage": "Kép megjelenítése",
-    "description": "Leírás",
-    "color": "Szín",
-    "timezone": "Időzóna",
-    "invalidTimezone": "Érvénytelen időzóna. Használjon IANA nevet, például Amerika/New_York",
-    "showSeconds": "Másodpercek megjelenítése",
-    "format12h": "12 órás",
-    "content": "Tartalom",
-    "backgroundColor": "Háttérszín",
-    "links": "Linkek",
-    "addLink": "Link hozzáadása",
-    "linkLabel": "Címke",
-    "categoryLinks": "Linkek",
-    "categoryInfo": "Információ",
-    "categorySystem": "Rendszer",
-    "copyLink": "Link másolása",
-    "linkCopied": "Link másolva!",
-    "location": "Elhelyezkedés",
-    "temperatureUnit": "Hőmérséklet egység",
-    "showForecast": "3 napos előrejelzés megjelenítése",
-    "scrolling": "Görgetés engedélyezése",
-    "feedUrl": "Hírcsatorna URL-címe",
-    "maxItems": "Max. tételek",
-    "showDescription": "Leírás megjelenítése",
-    "widgetRssName": "RSS-hírcsatorna",
-    "rssNoFeedUrl": "Hírcsatorna URL-címének konfigurálása a widget beállításaiban",
-    "rssLoadError": "Nem sikerült betölteni a hírcsatornát",
-    "rssNoItems": "Nincsenek elemek",
-    "noHostSelected": "Nincs kiválasztva gazdagép",
-    "displayedMetrics": "Megjelenített mutatók",
-    "metricCpu": "CPU",
-    "metricMemory": "Memória",
-    "metricDisk": "Korong",
-    "metricUptime": "Üzemidő",
-    "metricSystem": "Rendszer",
-    "metricNetwork": "Hálózat",
-    "metricProcesses": "Folyamatok",
-    "categoryMonitoring": "Monitoring",
-    "noPingUrls": "Nincsenek konfigurált URL-ek",
-    "pingLabel": "Címke",
-    "addPingUrl": "URL hozzáadása",
-    "showLatency": "Késleltetés megjelenítése",
-    "refreshInterval": "Frissítési intervallum",
-    "seconds": "másodperc",
-    "filterActivityTypes": "Szűrőtípusok",
-    "filterTypesHint": "Hagyja üresen az összes megjelenítéséhez",
-    "showTimestamp": "Időbélyeg megjelenítése",
-    "uptimeUnavailable": "Üzemidő nem elérhető",
-    "uptimeLabel": "Üzemidő",
-    "overviewVersion": "Változat",
-    "overviewUpdateLabel": "Frissítés",
-    "overviewUpdateAvailable": "Frissítés elérhető",
-    "overviewDatabase": "Adatbázis",
-    "overviewUptime": "Üzemidő",
-    "noHosts": "Nincsenek konfigurált gazdagépek",
-    "hostGridHosts": "Házigazdák",
-    "hostGridAllHint": "Hagyja üresen az összes hoszt megjelenítéséhez",
-    "columns": "Oszlopok",
-    "showIp": "IP-cím megjelenítése",
-    "layout": "Elrendezés",
-    "showStatus": "Állapot megjelenítése",
-    "noActivity": "Nincs aktivitás",
-    "widgetPingStatusName": "Ping állapot",
-    "widgetRecentActivityName": "Legutóbbi tevékenységek",
-    "sshTerminalNoHost": "Nincs konfigurálva gazdagép",
-    "sshTerminalConnect": "Csatlakozás",
-    "sshTerminalAutoConnect": "Automatikus csatlakozás terheléskor",
-    "connectionTypes": "Kapcsolattípusok",
-    "calMon": "Mo",
-    "calTue": "Kedd",
-    "calWed": "Mi",
-    "calThu": "Cs",
-    "calFri": "Péntek",
-    "calSat": "Sa",
-    "calSun": "Su",
-    "startOnMonday": "Hétfőn kezdjük a hetet",
-    "countdownNoDate": "Nincs kitűzött céldátum",
-    "countdownPast": "Az esemény elmúlt",
-    "countdownDays": "napok",
-    "countdownHours": "óra",
-    "countdownMinutes": "perc",
-    "countdownSeconds": "másodperc",
-    "countdownLabel": "Címke",
-    "countdownLabelPlaceholder": "pl. Indítási nap",
-    "countdownShowDays": "Kiállítási napok",
-    "countdownShowHours": "Nyitvatartási idő megjelenítése",
-    "targetDate": "Céldátum",
-    "searchEngine": "Keresőmotor",
-    "customSearchUrl": "Egyéni keresési URL",
-    "searchPlaceholder": "Keresés...",
-    "searchGo": "Megy",
-    "searchPlaceholderLabel": "Helyőrző szöveg",
-    "searchPlaceholderHint": "A keresési mezőben megjelenített szöveg",
-    "openInNewTab": "Megnyitás új lapon",
-    "searchQueryPlaceholder": "Írja be a lekérdezést...",
-    "noSearchShortcuts": "Nincsenek konfigurált gyorsbillentyűk",
-    "addSearchShortcut": "Parancsikon hozzáadása",
-    "fontSize": "Betűméret",
-    "textAlign": "Szöveg igazítása",
-    "fontWeight": "Betűvastagság",
-    "clearColor": "Tiszta szín",
-    "imageFit": "Kép illesztése",
-    "imageLinkUrl": "Link URL-címe",
-    "noImage": "Nincs beállítva kép URL-címe",
-    "altText": "Alt szöveg",
-    "altTextPlaceholder": "Írd le a képet",
-    "renderMarkdown": "Markdown renderelés",
-    "displayMode": "Kijelző mód",
-    "displayField": "Kijelző mező",
-    "jsonPath": "JSON-útvonal",
-    "customApiLabel": "Címke",
-    "customApiLabelPlaceholder": "pl. hőmérséklet",
-    "customApiUnit": "Egység",
-    "customApiNoUrl": "Nincs konfigurálva API URL",
-    "customApiError": "Nem sikerült lekérni",
-    "customApiNotArray": "A válasz nem tömb",
-    "addService": "Szolgáltatás hozzáadása",
-    "showLabels": "Címkék megjelenítése",
-    "iconSize": "Ikonméret",
-    "noDashboardLinks": "Nincsenek konfigurált irányítópult-hivatkozások",
-    "noLimit": "Nincs korlát",
-    "sectionHeading": "Szakasz címsora",
-    "addSection": "Szakasz hozzáadása",
-    "compactMode": "Kompakt mód",
-    "selectHosts": "Válasszon hosztokat",
-    "listLayout": "Lista",
-    "gridLayout": "Rács",
-    "configureUrl": "URL-cím beállítása a widget beállításaiban",
-    "embeddedContent": "Beágyazott tartalom",
-    "noBookmarks": "Nincsenek könyvjelzők",
-    "noSections": "Nincsenek beállított szakaszok",
-    "noServices": "Nincsenek szolgáltatások beállítva",
-    "configureLocation": "Helyszín beállítása a widget beállításaiban",
-    "bannerTextPlaceholder": "Banner szöveg",
-    "serviceNamePlaceholder": "A szolgáltatásom",
-    "emptyNote": "Üres jegyzet...",
-    "weatherLoadFailed": "Nem sikerült betölteni az időjárást ehhez: \"{{location}}\"",
-    "feelsLike": "Olyan érzés, mint {{temperature}}",
-    "timezonePlaceholder": "Amerika/New_York (helyi cím esetén hagyja üresen)",
-    "notesPlaceholder": "Írd ide a jegyzeteidet...",
-    "locationPlaceholder": "New York, London, Tokió...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Könyvjelzők",
-        "description": "Gyorslinkek listája"
-      },
-      "calendar": {
-        "name": "Naptár",
-        "description": "Egy havi naptár, amelyben a mai nap kiemelve látható"
-      },
-      "clock": {
-        "name": "Óra",
-        "description": "Élő óra konfigurálható időzónával"
-      },
-      "countdown": {
-        "name": "Visszaszámlálás",
-        "description": "Visszaszámol egy céldátumig és időpontig"
-      },
-      "custom_api": {
-        "name": "Egyéni API",
-        "description": "Adatok lekérése és megjelenítése bármely JSON API-ból"
-      },
-      "dashboard_links": {
-        "name": "Irányítópult linkek",
-        "description": "Megjeleníti a mentett irányítópult-szolgáltatások linkjeit"
-      },
-      "folder": {
-        "name": "Mappa",
-        "description": "Háttérkártya a widgetek vizuális csoportosításához"
-      },
-      "host_grid": {
-        "name": "Host Grid",
-        "description": "Élő állapotáttekintő rács az összes SSH-hoszthoz"
-      },
-      "host_status": {
-        "name": "Gazdagép állapota",
-        "description": "Élő állapotot és metrikák megjelenítése egy SSH-gazdagéphez"
-      },
-      "iframe_embed": {
-        "name": "iFrame beágyazás",
-        "description": "Bármely URL beágyazása iframe-be"
-      },
-      "image_widget": {
-        "name": "Kép",
-        "description": "Bármely kép megjelenítése egy URL-ből"
-      },
-      "link_tree": {
-        "name": "Linkfa",
-        "description": "Csoportosított linkek címkézett szakaszokba rendezve"
-      },
-      "markdown_notes": {
-        "name": "Markdown-jegyzetek",
-        "description": "Jegyzetek opcionális Markdown rendereléssel és beágyazott szerkesztéssel"
-      },
-      "notes": {
-        "name": "Megjegyzések",
-        "description": "Szöveges jegyzetek widgetje"
-      },
-      "ping_status": {
-        "name": "Ping állapota",
-        "description": "URL-ek vagy szolgáltatások elérhetőségének ellenőrzése"
-      },
-      "quick_connect": {
-        "name": "Gyors csatlakozás",
-        "description": "Terminál, fájlok, docker, alagutak és egyebek indítása a hosztok számára"
-      },
-      "recent_activity": {
-        "name": "Legutóbbi tevékenységek",
-        "description": "Megjeleníti a legutóbbi terminál-, Docker-, fájl- és bújtatási tevékenységeket"
-      },
-      "rss_feed": {
-        "name": "RSS-hírcsatorna",
-        "description": "RSS- vagy Atom-hírcsatorna elemeinek megjelenítése"
-      },
-      "search_bar": {
-        "name": "Keresősáv",
-        "description": "Gyorskeresés a Google, a DuckDuckGo, a Bing vagy egy egyéni keresőmotor segítségével"
-      },
-      "search_links": {
-        "name": "Keresési parancsok",
-        "description": "Gyorsgombok különböző keresőmotorok kereséséhez"
-      },
-      "service_grid": {
-        "name": "Szolgáltatási hálózat",
-        "description": "Szolgáltatáscsempék rácsa ikonokkal és hivatkozásokkal"
-      },
-      "service_link": {
-        "name": "Szolgáltatási link",
-        "description": "Egy kattintható csempe, amely egy szolgáltatás URL-címére mutat"
-      },
-      "ssh_terminal": {
-        "name": "SSH terminál",
-        "description": "Egy beágyazott SSH terminál, amely egy konfigurált gazdagéphez csatlakozik"
-      },
-      "system_overview": {
-        "name": "Rendszeráttekintés",
-        "description": "Termix verzió, adatbázis állapota és üzemidő egy pillantásra"
-      },
-      "termix_uptime": {
-        "name": "Termix üzemidő",
-        "description": "Megmutatja, hogy mennyi ideje fut a Termix szerver"
-      },
-      "text_banner": {
-        "name": "Szöveges banner",
-        "description": "Stílusos szövegcímke szakaszokhoz és címsorokhoz"
-      },
-      "weather": {
-        "name": "Időjárás",
-        "description": "Élő időjárás bármely helyszínre"
-      },
-      "docker_widget": {
-        "name": "Docker-kezelő",
-        "description": "Beágyazott Docker konténerkezelő egy konfigurált gazdagéphez"
-      },
-      "file_manager_widget": {
-        "name": "Fájlkezelő",
-        "description": "Beágyazott SFTP fájlkezelő egy konfigurált gazdagéphez"
-      },
-      "tunnel_widget": {
-        "name": "Alagútkezelő",
-        "description": "Beágyazott SSH alagútkezelő egy konfigurált gazdagéphez"
-      },
-      "metrics_chart": {
-        "name": "Metrikadiagram",
-        "description": "Egy gazdagép korábbi CPU-, memória-, lemez- vagy hálózati diagramja"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Használja a kezdőlapot",
-      "description": "A kezdőlap vásznának és az irányítópult szolgáltatáshivatkozásainak megtekintése és szerkesztése."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Engedélyezett privát tárhelyszolgáltatók",
-      "description": "Pontos privát vagy loopback hostnevek/IP-címek a Ping Status és az Egyéni API widgetekhez. A bejegyzéseket vesszővel vagy új sorral válassza el; hagyja ki a sémákat, portokat és elérési utakat. Üres blokkok a privát célállomások."
-    },
-    "privateCertificateAuthority": {
-      "label": "Magán hitelesítésszolgáltató (PEM)",
-      "description": "Opcionális megbízható CA csomag az engedélyezőlistán szereplő gazdagépekhez. A tanúsítvány-ellenőrzés továbbra is engedélyezve marad. Hagyja üresen a rendszer megbízható tárolójának használatához."
-    }
-  },
-  "plugin": {
-    "name": "Kezdőlap"
-  }
-}
diff --git a/plugins/homepage/locales/translated/id_ID.json b/plugins/homepage/locales/translated/id_ID.json
deleted file mode 100644
index 0d0604cae..000000000
--- a/plugins/homepage/locales/translated/id_ID.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Beranda"
-  },
-  "dashboard": {
-    "serviceLinks": "Tautan Layanan",
-    "homepagePreview": "Pratinjau Halaman Utama"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Tautan Layanan",
-    "serviceLinksEmpty": "Belum ada tautan layanan.",
-    "serviceLinksAdd": "Menambahkan",
-    "serviceLinksLabelPlaceholder": "Layanan Saya",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Masukkan alamat web yang valid",
-    "serviceLinksAddFailed": "Gagal menambahkan tautan layanan"
-  },
-  "homepage": {
-    "title": "Beranda",
-    "addWidget": "Tambahkan Widget",
-    "noWidgetsInCategory": "Tidak ada widget dalam kategori ini",
-    "editWidget": "Edit Widget",
-    "zoomIn": "Perbesar",
-    "zoomOut": "Perkecil tampilan",
-    "resetView": "Atur Ulang Tampilan",
-    "lockLayout": "Tata Letak Kunci",
-    "unlockLayout": "Buka Tata Letak",
-    "noWidgets": "Klik kanan atau klik + untuk menambahkan widget pertama Anda.",
-    "openFullView": "Buka Tampilan Penuh",
-    "previewTitle": "Pratinjau Halaman Utama",
-    "cancel": "Membatalkan",
-    "save": "Menyimpan",
-    "title_label": "Judul",
-    "widgetTitlePlaceholder": "Judul widget (opsional)",
-    "url": "URL",
-    "imageUrl": "URL Gambar Kustom",
-    "imageUrlHint": "Biarkan kosong untuk menggunakan favicon situs secara otomatis.",
-    "showImage": "Tampilkan Gambar",
-    "description": "Keterangan",
-    "color": "Warna",
-    "timezone": "Zona waktu",
-    "invalidTimezone": "Zona waktu tidak valid. Gunakan nama IANA seperti America/New_York.",
-    "showSeconds": "Tampilkan detik",
-    "format12h": "12 jam",
-    "content": "Isi",
-    "backgroundColor": "Warna Latar Belakang",
-    "links": "Tautan",
-    "addLink": "Tambahkan Tautan",
-    "linkLabel": "Label",
-    "categoryLinks": "Tautan",
-    "categoryInfo": "Informasi",
-    "categorySystem": "Sistem",
-    "copyLink": "Salin Tautan",
-    "linkCopied": "Tautan berhasil disalin!",
-    "location": "Lokasi",
-    "temperatureUnit": "Satuan Suhu",
-    "showForecast": "Tampilkan ramalan cuaca 3 hari ke depan",
-    "scrolling": "Izinkan Pengguliran",
-    "feedUrl": "URL Umpan",
-    "maxItems": "Jumlah Item Maksimum",
-    "showDescription": "Tampilkan Deskripsi",
-    "widgetRssName": "Umpan RSS",
-    "rssNoFeedUrl": "Konfigurasikan URL feed di pengaturan widget.",
-    "rssLoadError": "Tidak dapat memuat umpan",
-    "rssNoItems": "Tidak ada barang",
-    "noHostSelected": "Tidak ada pembawa acara yang dipilih.",
-    "displayedMetrics": "Metrik yang Ditampilkan",
-    "metricCpu": "CPU",
-    "metricMemory": "Ingatan",
-    "metricDisk": "Disk",
-    "metricUptime": "Waktu aktif",
-    "metricSystem": "Sistem",
-    "metricNetwork": "Jaringan",
-    "metricProcesses": "Proses",
-    "categoryMonitoring": "Pemantauan",
-    "noPingUrls": "Tidak ada URL yang dikonfigurasi",
-    "pingLabel": "Label",
-    "addPingUrl": "Tambahkan URL",
-    "showLatency": "Tampilkan Latensi",
-    "refreshInterval": "Interval Penyegaran",
-    "seconds": "detik",
-    "filterActivityTypes": "Jenis Filter",
-    "filterTypesHint": "Biarkan kosong untuk menampilkan semua",
-    "showTimestamp": "Tampilkan Cap Waktu",
-    "uptimeUnavailable": "Waktu aktif tidak tersedia",
-    "uptimeLabel": "Waktu aktif",
-    "overviewVersion": "Versi",
-    "overviewUpdateLabel": "Memperbarui",
-    "overviewUpdateAvailable": "Pembaruan tersedia",
-    "overviewDatabase": "Basis data",
-    "overviewUptime": "Waktu aktif",
-    "noHosts": "Tidak ada host yang dikonfigurasi.",
-    "hostGridHosts": "Tuan rumah",
-    "hostGridAllHint": "Biarkan kosong untuk menampilkan semua host",
-    "columns": "Kolom",
-    "showIp": "Tampilkan Alamat IP",
-    "layout": "Tata Letak",
-    "showStatus": "Tampilkan Status",
-    "noActivity": "Tidak ada kegiatan",
-    "widgetPingStatusName": "Status Ping",
-    "widgetRecentActivityName": "Aktivitas Terkini",
-    "sshTerminalNoHost": "Tidak ada host yang dikonfigurasi.",
-    "sshTerminalConnect": "Menghubungkan",
-    "sshTerminalAutoConnect": "Terhubung otomatis saat dimuat",
-    "connectionTypes": "Jenis Koneksi",
-    "calMon": "Mo",
-    "calTue": "Tu",
-    "calWed": "Kami",
-    "calThu": "Th",
-    "calFri": "Fr",
-    "calSat": "Sa",
-    "calSun": "Su",
-    "startOnMonday": "Minggu dimulai pada hari Senin.",
-    "countdownNoDate": "Tidak ada tanggal target yang ditetapkan.",
-    "countdownPast": "Acara telah berlalu",
-    "countdownDays": "hari",
-    "countdownHours": "jam",
-    "countdownMinutes": "menit",
-    "countdownSeconds": "detik",
-    "countdownLabel": "Label",
-    "countdownLabelPlaceholder": "misalnya Hari Peluncuran",
-    "countdownShowDays": "Hari Pertunjukan",
-    "countdownShowHours": "Jam Pertunjukan",
-    "targetDate": "Tanggal Target",
-    "searchEngine": "Mesin Pencari",
-    "customSearchUrl": "URL Pencarian Kustom",
-    "searchPlaceholder": "Mencari...",
-    "searchGo": "Pergi",
-    "searchPlaceholderLabel": "Teks Placeholder",
-    "searchPlaceholderHint": "Teks yang ditampilkan di dalam kolom pencarian",
-    "openInNewTab": "Buka di Tab Baru",
-    "searchQueryPlaceholder": "Masukkan pertanyaan...",
-    "noSearchShortcuts": "Tidak ada pintasan yang dikonfigurasi.",
-    "addSearchShortcut": "Tambahkan Pintasan",
-    "fontSize": "Ukuran Huruf",
-    "textAlign": "Perataan Teks",
-    "fontWeight": "Ketebalan Huruf",
-    "clearColor": "Warna Bening",
-    "imageFit": "Pencocokan Gambar",
-    "imageLinkUrl": "Tautan URL",
-    "noImage": "Tidak ada URL gambar yang ditetapkan.",
-    "altText": "Teks Alternatif",
-    "altTextPlaceholder": "Jelaskan gambar tersebut",
-    "renderMarkdown": "Render Markdown",
-    "displayMode": "Mode Tampilan",
-    "displayField": "Bidang Tampilan",
-    "jsonPath": "Jalur JSON",
-    "customApiLabel": "Label",
-    "customApiLabelPlaceholder": "misalnya Suhu",
-    "customApiUnit": "Satuan",
-    "customApiNoUrl": "Tidak ada URL API yang dikonfigurasi.",
-    "customApiError": "Gagal mengambil",
-    "customApiNotArray": "Respons bukanlah sebuah array.",
-    "addService": "Tambahkan Layanan",
-    "showLabels": "Tampilkan Label",
-    "iconSize": "Ukuran Ikon",
-    "noDashboardLinks": "Tidak ada tautan dasbor yang dikonfigurasi.",
-    "noLimit": "Tidak ada batasan",
-    "sectionHeading": "Judul Bagian",
-    "addSection": "Tambahkan Bagian",
-    "compactMode": "Mode Ringkas",
-    "selectHosts": "Pilih Host",
-    "listLayout": "Daftar",
-    "gridLayout": "Jaringan",
-    "configureUrl": "Tetapkan URL di pengaturan widget.",
-    "embeddedContent": "Konten tersemat",
-    "noBookmarks": "Tidak ada bookmark",
-    "noSections": "Tidak ada bagian yang disiapkan",
-    "noServices": "Tidak ada layanan yang disiapkan.",
-    "configureLocation": "Tetapkan lokasi di pengaturan widget.",
-    "bannerTextPlaceholder": "Teks spanduk",
-    "serviceNamePlaceholder": "Layanan saya",
-    "emptyNote": "Catatan kosong...",
-    "weatherLoadFailed": "Tidak dapat memuat cuaca untuk \"{{location}}\"",
-    "feelsLike": "Rasanya seperti {{temperature}}",
-    "timezonePlaceholder": "Amerika/New_York (kosongkan untuk lokasi lokal)",
-    "notesPlaceholder": "Tulis catatanmu di sini...",
-    "locationPlaceholder": "New York, London, Tokyo...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Penanda buku",
-        "description": "Daftar tautan cepat"
-      },
-      "calendar": {
-        "name": "Kalender",
-        "description": "Kalender bulanan dengan hari ini disorot"
-      },
-      "clock": {
-        "name": "Jam",
-        "description": "Jam digital dengan zona waktu yang dapat dikonfigurasi."
-      },
-      "countdown": {
-        "name": "Hitung Mundur",
-        "description": "Menghitung mundur menuju tanggal dan waktu target."
-      },
-      "custom_api": {
-        "name": "API Kustom",
-        "description": "Mengambil dan menampilkan data dari API JSON apa pun."
-      },
-      "dashboard_links": {
-        "name": "Tautan Dasbor",
-        "description": "Menampilkan tautan layanan dasbor yang Anda simpan"
-      },
-      "folder": {
-        "name": "Map",
-        "description": "Kartu latar belakang untuk mengelompokkan widget secara visual."
-      },
-      "host_grid": {
-        "name": "Jaringan Host",
-        "description": "Gambaran umum status langsung untuk semua host SSH Anda."
-      },
-      "host_status": {
-        "name": "Status Host",
-        "description": "Menampilkan status dan metrik langsung untuk host SSH."
-      },
-      "iframe_embed": {
-        "name": "Penyematan iFrame",
-        "description": "Sematkan URL apa pun di dalam iframe."
-      },
-      "image_widget": {
-        "name": "Gambar",
-        "description": "Tampilkan gambar apa pun dari URL"
-      },
-      "link_tree": {
-        "name": "Pohon Tautan",
-        "description": "Tautan yang dikelompokkan diorganisir ke dalam bagian-bagian yang diberi label."
-      },
-      "markdown_notes": {
-        "name": "Catatan Markdown",
-        "description": "Catatan dengan opsi rendering Markdown dan pengeditan langsung."
-      },
-      "notes": {
-        "name": "Catatan",
-        "description": "Widget catatan teks"
-      },
-      "ping_status": {
-        "name": "Status Ping",
-        "description": "Periksa apakah URL atau layanan dapat diakses."
-      },
-      "quick_connect": {
-        "name": "Koneksi Cepat",
-        "description": "Luncurkan terminal, file, docker, tunnel, dan lainnya untuk host Anda."
-      },
-      "recent_activity": {
-        "name": "Aktivitas Terkini",
-        "description": "Menampilkan aktivitas terminal, Docker, file, dan tunnel terbaru."
-      },
-      "rss_feed": {
-        "name": "Umpan RSS",
-        "description": "Menampilkan item dari feed RSS atau Atom."
-      },
-      "search_bar": {
-        "name": "Bilah Pencarian",
-        "description": "Pencarian cepat dengan Google, DuckDuckGo, Bing, atau mesin pencari khusus."
-      },
-      "search_links": {
-        "name": "Pintasan Pencarian",
-        "description": "Tombol cepat untuk mencari di berbagai mesin pencari"
-      },
-      "service_grid": {
-        "name": "Jaringan Layanan",
-        "description": "Kisi-kisi ubin layanan dengan ikon dan tautan."
-      },
-      "service_link": {
-        "name": "Tautan Layanan",
-        "description": "Ubin yang dapat diklik yang mengarah ke URL layanan."
-      },
-      "ssh_terminal": {
-        "name": "Terminal SSH",
-        "description": "Terminal SSH inline yang terhubung ke host yang telah dikonfigurasi."
-      },
-      "system_overview": {
-        "name": "Gambaran Umum Sistem",
-        "description": "Sekilas tentang versi Termix, kesehatan basis data, dan waktu aktif."
-      },
-      "termix_uptime": {
-        "name": "Waktu Operasional Termix",
-        "description": "Menunjukkan berapa lama server Termix telah berjalan."
-      },
-      "text_banner": {
-        "name": "Spanduk Teks",
-        "description": "Label teks bergaya untuk bagian dan judul"
-      },
-      "weather": {
-        "name": "Cuaca",
-        "description": "Informasi cuaca terkini untuk lokasi mana pun."
-      },
-      "docker_widget": {
-        "name": "Manajer Docker",
-        "description": "Manajer kontainer Docker terintegrasi untuk host yang telah dikonfigurasi."
-      },
-      "file_manager_widget": {
-        "name": "Pengelola File",
-        "description": "Pengelola file SFTP terintegrasi untuk host yang telah dikonfigurasi."
-      },
-      "tunnel_widget": {
-        "name": "Manajer Terowongan",
-        "description": "Pengelola terowongan SSH terintegrasi untuk host yang telah dikonfigurasi."
-      },
-      "metrics_chart": {
-        "name": "Bagan Metrik",
-        "description": "Grafik historis CPU, memori, disk, atau jaringan untuk sebuah host."
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Gunakan halaman beranda",
-      "description": "Lihat dan edit kanvas halaman beranda dan tautan layanan dasbor."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Host pribadi yang diizinkan",
-      "description": "Nama host/IP privat atau loopback yang tepat untuk widget Status Ping dan API Kustom. Pisahkan entri dengan koma atau baris baru; hilangkan skema, port, dan jalur. Blok kosong untuk tujuan privat."
-    },
-    "privateCertificateAuthority": {
-      "label": "Lembaga sertifikasi swasta (PEM)",
-      "description": "Bundel CA tepercaya opsional untuk host yang diizinkan. Verifikasi sertifikat tetap diaktifkan. Biarkan kosong untuk menggunakan penyimpanan tepercaya sistem."
-    }
-  },
-  "plugin": {
-    "name": "Beranda"
-  }
-}
diff --git a/plugins/homepage/locales/translated/it_IT.json b/plugins/homepage/locales/translated/it_IT.json
deleted file mode 100644
index 0f1f7d25f..000000000
--- a/plugins/homepage/locales/translated/it_IT.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Homepage"
-  },
-  "dashboard": {
-    "serviceLinks": "Link ai servizi",
-    "homepagePreview": "Anteprima home page"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Collegamenti ai servizi",
-    "serviceLinksEmpty": "Nessun collegamento ai servizi",
-    "serviceLinksAdd": "Aggiungi",
-    "serviceLinksLabelPlaceholder": "Il mio servizio",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Inserisci un indirizzo web valido",
-    "serviceLinksAddFailed": "Impossibile aggiungere il collegamento al servizio"
-  },
-  "homepage": {
-    "title": "Pagina iniziale",
-    "addWidget": "Aggiungi widget",
-    "noWidgetsInCategory": "Nessun widget in questa categoria",
-    "editWidget": "Modifica widget",
-    "zoomIn": "Ingrandisci",
-    "zoomOut": "Rimpicciolisci",
-    "resetView": "Reimposta vista",
-    "lockLayout": "Blocca layout",
-    "unlockLayout": "Sblocca layout",
-    "noWidgets": "Fai clic con il tasto destro o clicca su + per aggiungere il tuo primo widget",
-    "openFullView": "Apri vista completa",
-    "previewTitle": "Anteprima homepage",
-    "cancel": "Annulla",
-    "save": "Salva",
-    "title_label": "Titolo",
-    "widgetTitlePlaceholder": "Titolo widget (opzionale)",
-    "url": "URL",
-    "imageUrl": "URL immagine personalizzata",
-    "imageUrlHint": "Lascia vuoto per utilizzare automaticamente la favicon del sito",
-    "showImage": "Mostra immagine",
-    "description": "Descrizione",
-    "color": "Colore",
-    "timezone": "Fuso orario",
-    "invalidTimezone": "Fuso orario non valido. Utilizzare un nome IANA come America/New_York",
-    "showSeconds": "Mostra secondi",
-    "format12h": "12 ore",
-    "content": "Contenuto",
-    "backgroundColor": "Colore sfondo",
-    "links": "Collegamenti",
-    "addLink": "Aggiungi Collegamento",
-    "linkLabel": "Etichetta",
-    "categoryLinks": "Collegamenti",
-    "categoryInfo": "Info",
-    "categorySystem": "Sistema",
-    "copyLink": "Copia Collegamento",
-    "linkCopied": "Collegamento copiato!",
-    "location": "Località",
-    "temperatureUnit": "Unità di temperatura",
-    "showForecast": "Mostra previsioni a 3 giorni",
-    "scrolling": "Consenti scorrimento",
-    "feedUrl": "URL del feed",
-    "maxItems": "Numero massimo di elementi",
-    "showDescription": "Mostra descrizione",
-    "widgetRssName": "Feed RSS",
-    "rssNoFeedUrl": "Configura l'URL del feed nelle impostazioni del widget.",
-    "rssLoadError": "Impossibile caricare il feed",
-    "rssNoItems": "Nessun articolo",
-    "noHostSelected": "Nessun host selezionato",
-    "displayedMetrics": "Metriche visualizzate",
-    "metricCpu": "CPU",
-    "metricMemory": "Memoria",
-    "metricDisk": "Disco",
-    "metricUptime": "Uptime",
-    "metricSystem": "Sistema",
-    "metricNetwork": "Rete",
-    "metricProcesses": "Processi",
-    "categoryMonitoring": "Monitoraggio",
-    "noPingUrls": "Nessun URL configurato",
-    "pingLabel": "Etichetta",
-    "addPingUrl": "Aggiungi URL",
-    "showLatency": "Mostra latenza",
-    "refreshInterval": "Intervallo di aggiornamento",
-    "seconds": "secondi",
-    "filterActivityTypes": "Filtra tipi",
-    "filterTypesHint": "Lascia vuoto per mostrare tutto",
-    "showTimestamp": "Mostra timestamp",
-    "uptimeUnavailable": "Uptime non disponibile",
-    "uptimeLabel": "Uptime",
-    "overviewVersion": "Versione",
-    "overviewUpdateLabel": "Aggiorna",
-    "overviewUpdateAvailable": "Aggiornamento disponibile",
-    "overviewDatabase": "Database",
-    "overviewUptime": "Uptime",
-    "noHosts": "Nessun host configurato",
-    "hostGridHosts": "Host",
-    "hostGridAllHint": "Lascia vuoto per mostrare tutti gli host",
-    "columns": "Colonne",
-    "showIp": "Mostra indirizzo IP",
-    "layout": "Layout",
-    "showStatus": "Mostra stato",
-    "noActivity": "Nessuna attività",
-    "widgetPingStatusName": "Stato ping",
-    "widgetRecentActivityName": "Attività recente",
-    "sshTerminalNoHost": "Nessun host configurato",
-    "sshTerminalConnect": "Connetti",
-    "sshTerminalAutoConnect": "Connessione automatica al caricamento",
-    "connectionTypes": "Tipi di connessione",
-    "calMon": "Lu",
-    "calTue": "Ma",
-    "calWed": "Me",
-    "calThu": "Gi",
-    "calFri": "Ve",
-    "calSat": "Sa",
-    "calSun": "Do",
-    "startOnMonday": "Inizia la settimana il lunedì",
-    "countdownNoDate": "Nessuna data obiettivo impostata",
-    "countdownPast": "Evento passato",
-    "countdownDays": "giorni",
-    "countdownHours": "ore",
-    "countdownMinutes": "min",
-    "countdownSeconds": "sec",
-    "countdownLabel": "Etichetta",
-    "countdownLabelPlaceholder": "es. Giorno di lancio",
-    "countdownShowDays": "Mostra giorni",
-    "countdownShowHours": "Mostra ore",
-    "targetDate": "Data obiettivo",
-    "searchEngine": "Motore di ricerca",
-    "customSearchUrl": "URL di ricerca personalizzato",
-    "searchPlaceholder": "Cerca...",
-    "searchGo": "Vai",
-    "searchPlaceholderLabel": "Testo segnaposto",
-    "searchPlaceholderHint": "Testo mostrato nel campo di ricerca",
-    "openInNewTab": "Apri in nuova scheda",
-    "searchQueryPlaceholder": "Inserisci query...",
-    "noSearchShortcuts": "Nessuna scorciatoia configurata",
-    "addSearchShortcut": "Aggiungi scorciatoia",
-    "fontSize": "Dimensione carattere",
-    "textAlign": "Allineamento testo",
-    "fontWeight": "Spessore carattere",
-    "clearColor": "Rimuovi colore",
-    "imageFit": "Adatta immagine",
-    "imageLinkUrl": "URL collegamento",
-    "noImage": "Nessun URL immagine impostato",
-    "altText": "Testo alternativo",
-    "altTextPlaceholder": "Descrivi l'immagine",
-    "renderMarkdown": "Visualizza Markdown",
-    "displayMode": "Modalità visualizzazione",
-    "displayField": "Campo visualizzazione",
-    "jsonPath": "Percorso JSON",
-    "customApiLabel": "Etichetta",
-    "customApiLabelPlaceholder": "es. Temperatura",
-    "customApiUnit": "Unità",
-    "customApiNoUrl": "Nessun URL API configurato",
-    "customApiError": "Recupero fallito",
-    "customApiNotArray": "La risposta non è un array",
-    "addService": "Aggiungi servizio",
-    "showLabels": "Mostra etichette",
-    "iconSize": "Dimensioni icone",
-    "noDashboardLinks": "Nessun collegamento dashboard configurato",
-    "noLimit": "Nessun limite",
-    "sectionHeading": "Intestazione sezione",
-    "addSection": "Aggiungi sezione",
-    "compactMode": "Modalità compatta",
-    "selectHosts": "Seleziona host",
-    "listLayout": "Elenco",
-    "gridLayout": "Griglia",
-    "configureUrl": "Imposta un URL nelle impostazioni del widget",
-    "embeddedContent": "Contenuto incorporato",
-    "noBookmarks": "Nessun segnalibro",
-    "noSections": "Nessuna sezione impostata",
-    "noServices": "Nessun servizio configurato",
-    "configureLocation": "Imposta una posizione nelle impostazioni del widget",
-    "bannerTextPlaceholder": "Testo del banner",
-    "serviceNamePlaceholder": "Il mio servizio",
-    "emptyNote": "Nota vuota...",
-    "weatherLoadFailed": "Impossibile caricare le previsioni meteo per \"{{location}}\"",
-    "feelsLike": "Sembra {{temperature}}",
-    "timezonePlaceholder": "America/New_York (lasciare vuoto per la località)",
-    "notesPlaceholder": "Scrivi qui i tuoi appunti...",
-    "locationPlaceholder": "New York, Londra, Tokyo...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Segnalibri",
-        "description": "Un elenco di collegamenti rapidi"
-      },
-      "calendar": {
-        "name": "Calendario",
-        "description": "Un calendario mensile con la data odierna evidenziata."
-      },
-      "clock": {
-        "name": "Orologio",
-        "description": "Un orologio in tempo reale con fuso orario configurabile"
-      },
-      "countdown": {
-        "name": "Conto alla rovescia",
-        "description": "Conto alla rovescia fino a una data e ora obiettivo"
-      },
-      "custom_api": {
-        "name": "API personalizzata",
-        "description": "Recupera e visualizza dati da qualsiasi API JSON"
-      },
-      "dashboard_links": {
-        "name": "Collegamenti dashboard",
-        "description": "Mostra i collegamenti di servizio del dashboard salvati"
-      },
-      "folder": {
-        "name": "Cartella",
-        "description": "Una scheda di sfondo per raggruppare visivamente i widget"
-      },
-      "host_grid": {
-        "name": "Griglia host",
-        "description": "Griglia di riepilogo dello stato in tempo reale per tutti i tuoi host SSH"
-      },
-      "host_status": {
-        "name": "Stato host",
-        "description": "Mostra lo stato in tempo reale e le metriche per un host SSH"
-      },
-      "iframe_embed": {
-        "name": "Incorporamento iFrame",
-        "description": "Incorpora qualsiasi URL in un iframe"
-      },
-      "image_widget": {
-        "name": "Immagine",
-        "description": "Visualizzare qualsiasi immagine da un URL"
-      },
-      "link_tree": {
-        "name": "Albero dei collegamenti",
-        "description": "Collegamenti raggruppati e organizzati in sezioni etichettate"
-      },
-      "markdown_notes": {
-        "name": "Note in Markdown",
-        "description": "Note con rendering Markdown opzionale e modifica in linea"
-      },
-      "notes": {
-        "name": "Note",
-        "description": "Un widget per le note di testo"
-      },
-      "ping_status": {
-        "name": "Stato ping",
-        "description": "Verifica se gli URL o i servizi sono raggiungibili"
-      },
-      "quick_connect": {
-        "name": "Connessione rapida",
-        "description": "Avvia terminale, file, Docker, tunnel e altro ancora per i tuoi host"
-      },
-      "recent_activity": {
-        "name": "Attività recente",
-        "description": "Mostra le attività recenti del terminale, di Docker, dei file e dei tunnel."
-      },
-      "rss_feed": {
-        "name": "Feed RSS",
-        "description": "Visualizza elementi da un feed RSS o Atom"
-      },
-      "search_bar": {
-        "name": "Barra di ricerca",
-        "description": "Ricerca rapida con Google, DuckDuckGo, Bing o un motore di ricerca personalizzato"
-      },
-      "search_links": {
-        "name": "Scorciatoie di ricerca",
-        "description": "Tasti rapidi per cercare in diversi motori di ricerca"
-      },
-      "service_grid": {
-        "name": "Griglia dei servizi",
-        "description": "Una griglia di riquadri di servizio con icone e collegamenti"
-      },
-      "service_link": {
-        "name": "Collegamento servizio",
-        "description": "Un riquadro cliccabile che collega a un URL di servizio"
-      },
-      "ssh_terminal": {
-        "name": "Terminale SSH",
-        "description": "Un terminale SSH inline connesso a un host configurato"
-      },
-      "system_overview": {
-        "name": "Panoramica del sistema",
-        "description": "Versione di Termix, stato del database e tempo di attività a colpo d'occhio"
-      },
-      "termix_uptime": {
-        "name": "Uptime di Termix",
-        "description": "Mostra da quanto tempo è in esecuzione il server Termix"
-      },
-      "text_banner": {
-        "name": "Banner di testo",
-        "description": "Un'etichetta di testo stilizzata per sezioni e intestazioni"
-      },
-      "weather": {
-        "name": "Meteo",
-        "description": "Meteo in tempo reale per qualsiasi località"
-      },
-      "docker_widget": {
-        "name": "Gestore Docker",
-        "description": "Gestore di container Docker integrato per un host configurato"
-      },
-      "file_manager_widget": {
-        "name": "Gestore file",
-        "description": "Gestore file SFTP integrato per un host configurato"
-      },
-      "tunnel_widget": {
-        "name": "Gestore Tunnel",
-        "description": "Gestore di tunnel SSH integrato per un host configurato"
-      },
-      "metrics_chart": {
-        "name": "Grafico metriche",
-        "description": "Grafico storico di CPU, memoria, disco o rete per un host"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilizzare la homepage",
-      "description": "Visualizza e modifica i collegamenti ai servizi della pagina iniziale e della dashboard."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Host privati autorizzati",
-      "description": "Nomi host/IP privati o di loopback esatti per i widget Ping Status e API personalizzate. Separare le voci con virgole o interruzioni di riga; omettere schemi, porte e percorsi. I blocchi vuoti devono essere dedicati a destinazioni private."
-    },
-    "privateCertificateAuthority": {
-      "label": "Autorità di certificazione privata (PEM)",
-      "description": "Pacchetto CA attendibile opzionale per gli host consentiti. La verifica del certificato rimane abilitata. Lasciare vuoto per utilizzare l'archivio di certificati attendibili del sistema."
-    }
-  },
-  "plugin": {
-    "name": "Homepage"
-  }
-}
diff --git a/plugins/homepage/locales/translated/ja_JP.json b/plugins/homepage/locales/translated/ja_JP.json
deleted file mode 100644
index 151bdfe2a..000000000
--- a/plugins/homepage/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "ホームページ"
-  },
-  "dashboard": {
-    "serviceLinks": "サービスリンク",
-    "homepagePreview": "ホームページプレビュー"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "サービスリンク",
-    "serviceLinksEmpty": "サービスリンクはまだありません",
-    "serviceLinksAdd": "追加",
-    "serviceLinksLabelPlaceholder": "マイサービス",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "有効なWebアドレスを入力してください",
-    "serviceLinksAddFailed": "サービスリンクの追加に失敗しました"
-  },
-  "homepage": {
-    "title": "ホームページ",
-    "addWidget": "ウィジェットを追加",
-    "noWidgetsInCategory": "このカテゴリにはウィジェットがありません",
-    "editWidget": "ウィジェットを編集",
-    "zoomIn": "拡大",
-    "zoomOut": "縮小",
-    "resetView": "表示をリセット",
-    "lockLayout": "レイアウトをロック",
-    "unlockLayout": "レイアウトのロックを解除",
-    "noWidgets": "右クリックまたは「+」をクリックして最初のウィジェットを追加してください",
-    "openFullView": "全画面表示を開く",
-    "previewTitle": "ホームページプレビュー",
-    "cancel": "キャンセル",
-    "save": "保存",
-    "title_label": "タイトル",
-    "widgetTitlePlaceholder": "ウィジェットのタイトル（任意）",
-    "url": "URL",
-    "imageUrl": "カスタム画像URL",
-    "imageUrlHint": "空白のままにすると、サイトのファビコンが自動的に使用されます",
-    "showImage": "画像を表示",
-    "description": "説明",
-    "color": "色",
-    "timezone": "タイムゾーン",
-    "invalidTimezone": "無効なタイムゾーンです。IANA名（例：America/New_York）を使用してください。",
-    "showSeconds": "秒を表示",
-    "format12h": "12時間表示",
-    "content": "内容",
-    "backgroundColor": "背景色",
-    "links": "リンク",
-    "addLink": "リンクを追加",
-    "linkLabel": "ラベル",
-    "categoryLinks": "リンク",
-    "categoryInfo": "情報",
-    "categorySystem": "システム",
-    "copyLink": "リンクをコピー",
-    "linkCopied": "リンクがコピーされました！",
-    "location": "場所",
-    "temperatureUnit": "温度単位",
-    "showForecast": "3日間の予報を表示",
-    "scrolling": "スクロール許可",
-    "feedUrl": "フィードURL",
-    "maxItems": "最大アイテム数",
-    "showDescription": "説明を表示",
-    "widgetRssName": "RSSフィード",
-    "rssNoFeedUrl": "ウィジェット設定でフィードURLを設定する",
-    "rssLoadError": "フィードを読み込むことができませんでした",
-    "rssNoItems": "商品なし",
-    "noHostSelected": "ホストが選択されていません",
-    "displayedMetrics": "表示メトリクス",
-    "metricCpu": "CPU",
-    "metricMemory": "メモリ",
-    "metricDisk": "ディスク",
-    "metricUptime": "稼働時間",
-    "metricSystem": "システム",
-    "metricNetwork": "ネットワーク",
-    "metricProcesses": "プロセス",
-    "categoryMonitoring": "モニタリング",
-    "noPingUrls": "URLが設定されていません",
-    "pingLabel": "ラベル",
-    "addPingUrl": "URLを追加",
-    "showLatency": "レイテンシを表示",
-    "refreshInterval": "更新間隔",
-    "seconds": "秒",
-    "filterActivityTypes": "アクティビティタイプフィルター",
-    "filterTypesHint": "すべてを表示するには空のままにします",
-    "showTimestamp": "タイムスタンプを表示",
-    "uptimeUnavailable": "稼働時間は利用できません",
-    "uptimeLabel": "稼働時間",
-    "overviewVersion": "バージョン",
-    "overviewUpdateLabel": "更新",
-    "overviewUpdateAvailable": "アップデートあり",
-    "overviewDatabase": "データベース",
-    "overviewUptime": "稼働時間",
-    "noHosts": "ホストが設定されていません",
-    "hostGridHosts": "ホスト",
-    "hostGridAllHint": "空のままにするとすべてのホストを表示します",
-    "columns": "列",
-    "showIp": "IPアドレスを表示",
-    "layout": "レイアウト",
-    "showStatus": "ステータスを表示",
-    "noActivity": "アクティビティはありません",
-    "widgetPingStatusName": "Pingステータス",
-    "widgetRecentActivityName": "最近のアクティビティ",
-    "sshTerminalNoHost": "ホストが設定されていません",
-    "sshTerminalConnect": "接続",
-    "sshTerminalAutoConnect": "読み込み時に自動接続",
-    "connectionTypes": "接続タイプ",
-    "calMon": "月",
-    "calTue": "火",
-    "calWed": "水",
-    "calThu": "木",
-    "calFri": "金",
-    "calSat": "土",
-    "calSun": "日",
-    "startOnMonday": "週の始まりを月曜に",
-    "countdownNoDate": "目標日が設定されていません",
-    "countdownPast": "イベントは終了しました",
-    "countdownDays": "日",
-    "countdownHours": "時間",
-    "countdownMinutes": "分",
-    "countdownSeconds": "秒",
-    "countdownLabel": "ラベル",
-    "countdownLabelPlaceholder": "例: リリース日",
-    "countdownShowDays": "日数を表示",
-    "countdownShowHours": "時間を表示",
-    "targetDate": "目標日",
-    "searchEngine": "検索エンジン",
-    "customSearchUrl": "カスタム検索URL",
-    "searchPlaceholder": "検索...",
-    "searchGo": "検索",
-    "searchPlaceholderLabel": "プレースホルダーテキスト",
-    "searchPlaceholderHint": "検索入力欄に表示されるテキスト",
-    "openInNewTab": "新しいタブで開く",
-    "searchQueryPlaceholder": "クエリを入力...",
-    "noSearchShortcuts": "設定済みのショートカットはありません",
-    "addSearchShortcut": "ショートカットを追加",
-    "fontSize": "フォントサイズ",
-    "textAlign": "テキスト配置",
-    "fontWeight": "フォントの太さ",
-    "clearColor": "色をクリア",
-    "imageFit": "画像フィット",
-    "imageLinkUrl": "リンクURL",
-    "noImage": "画像URLが設定されていません",
-    "altText": "代替テキスト",
-    "altTextPlaceholder": "画像の説明を入力",
-    "renderMarkdown": "Markdownをレンダリング",
-    "displayMode": "表示モード",
-    "displayField": "表示フィールド",
-    "jsonPath": "JSONパス",
-    "customApiLabel": "ラベル",
-    "customApiLabelPlaceholder": "例: 温度",
-    "customApiUnit": "単位",
-    "customApiNoUrl": "API URLが設定されていません",
-    "customApiError": "取得に失敗しました",
-    "customApiNotArray": "レスポンスが配列ではありません",
-    "addService": "サービスを追加",
-    "showLabels": "ラベルを表示",
-    "iconSize": "アイコンサイズ",
-    "noDashboardLinks": "ダッシュボードリンクが設定されていません",
-    "noLimit": "制限なし",
-    "sectionHeading": "セクション見出し",
-    "addSection": "セクションを追加",
-    "compactMode": "コンパクトモード",
-    "selectHosts": "ホストを選択",
-    "listLayout": "リスト",
-    "gridLayout": "グリッド",
-    "configureUrl": "ウィジェット設定でURLを設定してください",
-    "embeddedContent": "埋め込みコンテンツ",
-    "noBookmarks": "ブックマークなし",
-    "noSections": "セクションは設定されていません",
-    "noServices": "サービスが設定されていません",
-    "configureLocation": "ウィジェットの設定で場所を設定してください",
-    "bannerTextPlaceholder": "バナーテキスト",
-    "serviceNamePlaceholder": "私のサービス",
-    "emptyNote": "空欄のメモ…",
-    "weatherLoadFailed": "「{{location}}」の天気情報を読み込めませんでした。",
-    "feelsLike": "{{temperature}} のような感じ",
-    "timezonePlaceholder": "アメリカ/ニューヨーク（ローカルの場合は空欄のままにしてください）",
-    "notesPlaceholder": "ここにメモを書いてください…",
-    "locationPlaceholder": "ニューヨーク、ロンドン、東京…",
-    "widgets": {
-      "bookmark_list": {
-        "name": "ブックマーク",
-        "description": "クイックリンクのリスト"
-      },
-      "calendar": {
-        "name": "カレンダー",
-        "description": "今日がハイライト表示された月間カレンダー"
-      },
-      "clock": {
-        "name": "時計",
-        "description": "設定可能なタイムゾーンを備えた現在時刻の時計"
-      },
-      "countdown": {
-        "name": "カウントダウン",
-        "description": "目標の日時までのカウントダウン"
-      },
-      "custom_api": {
-        "name": "カスタムAPI",
-        "description": "任意のJSON APIからデータを取得して表示"
-      },
-      "dashboard_links": {
-        "name": "ダッシュボードリンク",
-        "description": "保存済みのダッシュボードサービスリンクを表示します"
-      },
-      "folder": {
-        "name": "フォルダ",
-        "description": "ウィジェットを視覚的にグループ化するための背景カード"
-      },
-      "host_grid": {
-        "name": "ホストグリッド",
-        "description": "すべてのSSHホストのリアルタイムステータス概要グリッド"
-      },
-      "host_status": {
-        "name": "ホストステータス",
-        "description": "SSHホストのリアルタイムステータスとメトリクスを表示します"
-      },
-      "iframe_embed": {
-        "name": "iFrame埋め込み",
-        "description": "任意のURLをiFrameで埋め込み"
-      },
-      "image_widget": {
-        "name": "イメージ",
-        "description": "URLから任意の画像を表示する"
-      },
-      "link_tree": {
-        "name": "リンクツリー",
-        "description": "ラベル付きセクションに整理されたリンクのグループ分け"
-      },
-      "markdown_notes": {
-        "name": "Markdownノート",
-        "description": "オプションでMarkdownレンダリングとインライン編集が可能なノート"
-      },
-      "notes": {
-        "name": "メモ",
-        "description": "テキストメモウィジェット"
-      },
-      "ping_status": {
-        "name": "Pingステータス",
-        "description": "URLやサービスにアクセスできるかどうかを確認してください。"
-      },
-      "quick_connect": {
-        "name": "クイック接続",
-        "description": "ホスト上でターミナル、ファイル、Docker、トンネルなどを起動します。"
-      },
-      "recent_activity": {
-        "name": "最近のアクティビティ",
-        "description": "最近のターミナル、Docker、ファイル、およびトンネルのアクティビティを表示します。"
-      },
-      "rss_feed": {
-        "name": "RSSフィード",
-        "description": "RSSまたはAtomフィードのアイテムを表示"
-      },
-      "search_bar": {
-        "name": "検索バー",
-        "description": "Google、DuckDuckGo、Bing、またはカスタムエンジンによるクイック検索"
-      },
-      "search_links": {
-        "name": "検索ショートカット",
-        "description": "さまざまな検索エンジンを検索するためのクイックボタン"
-      },
-      "service_grid": {
-        "name": "サービスグリッド",
-        "description": "アイコンとリンクを含むサービスタイルのグリッド"
-      },
-      "service_link": {
-        "name": "サービスリンク",
-        "description": "サービスURLへリンクするクリック可能なタイル"
-      },
-      "ssh_terminal": {
-        "name": "SSHターミナル",
-        "description": "設定済みホストに接続するインラインSSHターミナル"
-      },
-      "system_overview": {
-        "name": "システム概要",
-        "description": "Termixのバージョン、データベースの状態、稼働状況が一目でわかります"
-      },
-      "termix_uptime": {
-        "name": "Termixアップタイム",
-        "description": "Termixサーバーの稼働時間を表示します。"
-      },
-      "text_banner": {
-        "name": "テキストバナー",
-        "description": "セクションと見出し用のスタイル付きテキストラベル"
-      },
-      "weather": {
-        "name": "天気",
-        "description": "任意の場所の現在の天気"
-      },
-      "docker_widget": {
-        "name": "Docker マネージャー",
-        "description": "設定済みホスト用の組み込みDockerコンテナマネージャー"
-      },
-      "file_manager_widget": {
-        "name": "ファイルマネージャー",
-        "description": "設定済みホスト用の組み込みSFTPファイルマネージャー"
-      },
-      "tunnel_widget": {
-        "name": "トンネルマネージャー",
-        "description": "設定済みホスト用の組み込みSSHトンネルマネージャー"
-      },
-      "metrics_chart": {
-        "name": "メトリックチャート",
-        "description": "ホストのCPU、メモリ、ディスク、またはネットワークの履歴チャート"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "ホームページを使用する",
-      "description": "ホームページのキャンバスとダッシュボードのサービスリンクを表示および編集します。"
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "プライベートホストを許可",
-      "description": "PingステータスおよびカスタムAPIウィジェットに使用する、正確なプライベートホスト名またはループバックホスト名/IPアドレス。エントリはカンマまたは改行で区切り、スキーム、ポート、パスは省略してください。空欄はプライベート宛先を示します。"
-    },
-    "privateCertificateAuthority": {
-      "label": "民間認証局（PEM）",
-      "description": "許可リストに登録されたホスト用のオプションの信頼できる認証局（CA）バンドル。証明書の検証は引き続き有効です。システムトラストストアを使用する場合は、空欄のままにしてください。"
-    }
-  },
-  "plugin": {
-    "name": "ホームページ"
-  }
-}
diff --git a/plugins/homepage/locales/translated/ko_KR.json b/plugins/homepage/locales/translated/ko_KR.json
deleted file mode 100644
index 7e69c2cce..000000000
--- a/plugins/homepage/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "홈페이지"
-  },
-  "dashboard": {
-    "serviceLinks": "서비스 링크",
-    "homepagePreview": "홈페이지 미리보기"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "서비스 링크",
-    "serviceLinksEmpty": "아직 서비스 링크 없음",
-    "serviceLinksAdd": "추가",
-    "serviceLinksLabelPlaceholder": "내 서비스",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "올바른 웹 주소를 입력하세요",
-    "serviceLinksAddFailed": "서비스 링크 추가 실패"
-  },
-  "homepage": {
-    "title": "홈페이지",
-    "addWidget": "위젯 추가",
-    "noWidgetsInCategory": "이 카테고리에는 위젯이 없습니다.",
-    "editWidget": "위젯 편집",
-    "zoomIn": "확대",
-    "zoomOut": "축소",
-    "resetView": "보기 초기화",
-    "lockLayout": "레이아웃 잠금",
-    "unlockLayout": "레이아웃 잠금 해제",
-    "noWidgets": "마우스 오른쪽 클릭 또는 +를 클릭하여 첫 위젯을 추가하세요.",
-    "openFullView": "전체 보기 열기",
-    "previewTitle": "홈페이지 미리보기",
-    "cancel": "취소",
-    "save": "저장",
-    "title_label": "제목",
-    "widgetTitlePlaceholder": "위젯 제목 (선택 사항)",
-    "url": "URL",
-    "imageUrl": "사용자 지정 이미지 URL",
-    "imageUrlHint": "비워 두면 사이트 파비콘이 자동으로 사용됩니다.",
-    "showImage": "이미지 표시",
-    "description": "설명",
-    "color": "색상",
-    "timezone": "시간대",
-    "invalidTimezone": "잘못된 시간대입니다. America/New_York와 같은 IANA 이름을 사용하십시오.",
-    "showSeconds": "초 표시",
-    "format12h": "12시간",
-    "content": "내용",
-    "backgroundColor": "배경색",
-    "links": "링크",
-    "addLink": "링크 추가",
-    "linkLabel": "레이블",
-    "categoryLinks": "링크",
-    "categoryInfo": "정보",
-    "categorySystem": "시스템",
-    "copyLink": "링크 복사",
-    "linkCopied": "링크가 복사되었습니다!",
-    "location": "위치",
-    "temperatureUnit": "온도 단위",
-    "showForecast": "3일 예보 표시",
-    "scrolling": "스크롤 허용",
-    "feedUrl": "피드 URL",
-    "maxItems": "최대 항목 수",
-    "showDescription": "설명 표시",
-    "widgetRssName": "RSS 피드",
-    "rssNoFeedUrl": "위젯 설정에서 피드 URL을 구성하세요",
-    "rssLoadError": "피드를 로드할 수 없습니다.",
-    "rssNoItems": "품목 없음",
-    "noHostSelected": "선택된 호스트 없음",
-    "displayedMetrics": "표시된 메트릭",
-    "metricCpu": "CPU",
-    "metricMemory": "메모리",
-    "metricDisk": "디스크",
-    "metricUptime": "업타임",
-    "metricSystem": "시스템",
-    "metricNetwork": "네트워크",
-    "metricProcesses": "프로세스",
-    "categoryMonitoring": "모니터링",
-    "noPingUrls": "구성된 URL 없음",
-    "pingLabel": "레이블",
-    "addPingUrl": "URL 추가",
-    "showLatency": "지연 시간 표시",
-    "refreshInterval": "새로 고침 간격",
-    "seconds": "초",
-    "filterActivityTypes": "유형 필터",
-    "filterTypesHint": "모두 보려면 비워 두세요",
-    "showTimestamp": "타임스탬프 표시",
-    "uptimeUnavailable": "업타임 없음",
-    "uptimeLabel": "업타임",
-    "overviewVersion": "버전",
-    "overviewUpdateLabel": "업데이트",
-    "overviewUpdateAvailable": "업데이트 있음",
-    "overviewDatabase": "데이터베이스",
-    "overviewUptime": "업타임",
-    "noHosts": "호스트 구성 없음",
-    "hostGridHosts": "호스트",
-    "hostGridAllHint": "비워 두면 모든 호스트 표시",
-    "columns": "열",
-    "showIp": "IP 주소 표시",
-    "layout": "레이아웃",
-    "showStatus": "상태 표시",
-    "noActivity": "활동 없음",
-    "widgetPingStatusName": "Ping 상태",
-    "widgetRecentActivityName": "최근 활동",
-    "sshTerminalNoHost": "호스트가 구성되지 않음",
-    "sshTerminalConnect": "연결",
-    "sshTerminalAutoConnect": "로드 시 자동 연결",
-    "connectionTypes": "연결 유형",
-    "calMon": "월",
-    "calTue": "화",
-    "calWed": "수",
-    "calThu": "목",
-    "calFri": "금",
-    "calSat": "토",
-    "calSun": "일",
-    "startOnMonday": "주 시작을 월요일로",
-    "countdownNoDate": "목표 날짜가 설정되지 않음",
-    "countdownPast": "이벤트가 지났습니다",
-    "countdownDays": "일",
-    "countdownHours": "시간",
-    "countdownMinutes": "분",
-    "countdownSeconds": "초",
-    "countdownLabel": "레이블",
-    "countdownLabelPlaceholder": "예: 출시일",
-    "countdownShowDays": "일 표시",
-    "countdownShowHours": "시간 표시",
-    "targetDate": "목표 날짜",
-    "searchEngine": "검색 엔진",
-    "customSearchUrl": "사용자 지정 검색 URL",
-    "searchPlaceholder": "검색...",
-    "searchGo": "이동",
-    "searchPlaceholderLabel": "플레이스홀더 텍스트",
-    "searchPlaceholderHint": "검색 입력란에 표시되는 텍스트",
-    "openInNewTab": "새 탭에서 열기",
-    "searchQueryPlaceholder": "검색어 입력...",
-    "noSearchShortcuts": "바로가기가 구성되지 않음",
-    "addSearchShortcut": "바로가기 추가",
-    "fontSize": "글꼴 크기",
-    "textAlign": "텍스트 정렬",
-    "fontWeight": "글꼴 두께",
-    "clearColor": "색상 지우기",
-    "imageFit": "이미지 맞춤",
-    "imageLinkUrl": "링크 URL",
-    "noImage": "이미지 URL이 설정되지 않음",
-    "altText": "대체 텍스트",
-    "altTextPlaceholder": "이미지 설명 입력",
-    "renderMarkdown": "마크다운 렌더링",
-    "displayMode": "표시 모드",
-    "displayField": "표시 필드",
-    "jsonPath": "JSON 경로",
-    "customApiLabel": "레이블",
-    "customApiLabelPlaceholder": "예: 온도",
-    "customApiUnit": "단위",
-    "customApiNoUrl": "API URL이 구성되지 않음",
-    "customApiError": "가져오기 실패",
-    "customApiNotArray": "응답이 배열이 아닙니다",
-    "addService": "서비스 추가",
-    "showLabels": "레이블 표시",
-    "iconSize": "아이콘 크기",
-    "noDashboardLinks": "대시보드 링크가 구성되지 않음",
-    "noLimit": "제한 없음",
-    "sectionHeading": "섹션 제목",
-    "addSection": "섹션 추가",
-    "compactMode": "간결 모드",
-    "selectHosts": "호스트 선택",
-    "listLayout": "목록",
-    "gridLayout": "그리드",
-    "configureUrl": "위젯 설정에서 URL을 설정하세요",
-    "embeddedContent": "삽입된 콘텐츠",
-    "noBookmarks": "책갈피 없음",
-    "noSections": "섹션이 설정되어 있지 않습니다.",
-    "noServices": "설정된 서비스가 없습니다",
-    "configureLocation": "위젯 설정에서 위치를 지정하세요",
-    "bannerTextPlaceholder": "배너 텍스트",
-    "serviceNamePlaceholder": "내 서비스",
-    "emptyNote": "빈 메모...",
-    "weatherLoadFailed": "\"{{location}} \"에 대한 날씨 정보를 불러올 수 없습니다.",
-    "feelsLike": "{{temperature}} 같은 느낌이야",
-    "timezonePlaceholder": "America/New_York (현지 주소를 입력하려면 비워 두세요)",
-    "notesPlaceholder": "여기에 메모를 적어주세요...",
-    "locationPlaceholder": "뉴욕, 런던, 도쿄...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "즐겨찾기",
-        "description": "빠른 링크 목록"
-      },
-      "calendar": {
-        "name": "달력",
-        "description": "오늘 날짜가 표시된 월별 달력"
-      },
-      "clock": {
-        "name": "시계",
-        "description": "시간대 설정이 가능한 실시간 시계"
-      },
-      "countdown": {
-        "name": "카운트다운",
-        "description": "목표 날짜와 시간까지 카운트다운합니다."
-      },
-      "custom_api": {
-        "name": "사용자 정의 API",
-        "description": "모든 JSON API에서 데이터를 가져와 표시"
-      },
-      "dashboard_links": {
-        "name": "대시보드 링크",
-        "description": "저장된 대시보드 서비스 링크를 보여줍니다."
-      },
-      "folder": {
-        "name": "폴더",
-        "description": "위젯들을 시각적으로 그룹화하기 위한 배경 카드"
-      },
-      "host_grid": {
-        "name": "호스트 그리드",
-        "description": "모든 SSH 호스트의 실시간 상태 개요 그리드"
-      },
-      "host_status": {
-        "name": "호스트 상태",
-        "description": "SSH 호스트의 실시간 상태 및 지표를 표시합니다."
-      },
-      "iframe_embed": {
-        "name": "iFrame 임베드",
-        "description": "URL을 iframe으로 임베드"
-      },
-      "image_widget": {
-        "name": "이미지",
-        "description": "URL에 있는 이미지를 표시합니다."
-      },
-      "link_tree": {
-        "name": "링크 트리",
-        "description": "레이블이 지정된 섹션으로 그룹화된 링크"
-      },
-      "markdown_notes": {
-        "name": "마크다운 노트",
-        "description": "마크다운 렌더링 및 인라인 편집이 가능한 메모"
-      },
-      "notes": {
-        "name": "메모",
-        "description": "텍스트 메모 위젯"
-      },
-      "ping_status": {
-        "name": "Ping 상태",
-        "description": "URL 또는 서비스에 접속 가능한지 확인하십시오."
-      },
-      "quick_connect": {
-        "name": "빠른 연결",
-        "description": "호스트에서 터미널, 파일, Docker, 터널 등을 실행합니다."
-      },
-      "recent_activity": {
-        "name": "최근 활동",
-        "description": "최근 터미널, Docker, 파일 및 터널 활동을 표시합니다."
-      },
-      "rss_feed": {
-        "name": "RSS 피드",
-        "description": "RSS 또는 Atom 피드의 항목 표시"
-      },
-      "search_bar": {
-        "name": "검색창",
-        "description": "Google, DuckDuckGo, Bing 또는 사용자 지정 검색 엔진을 이용한 빠른 검색"
-      },
-      "search_links": {
-        "name": "검색 바로가기",
-        "description": "다양한 검색 엔진으로 바로 이동할 수 있는 버튼"
-      },
-      "service_grid": {
-        "name": "서비스 그리드",
-        "description": "아이콘과 링크가 포함된 서비스 타일 그리드"
-      },
-      "service_link": {
-        "name": "서비스 링크",
-        "description": "서비스 URL로 연결되는 클릭 가능한 타일"
-      },
-      "ssh_terminal": {
-        "name": "SSH 터미널",
-        "description": "구성된 호스트에 연결된 인라인 SSH 터미널"
-      },
-      "system_overview": {
-        "name": "시스템 개요",
-        "description": "Termix 버전, 데이터베이스 상태 및 가동 시간을 한눈에 확인하세요"
-      },
-      "termix_uptime": {
-        "name": "Termix 가동 시간",
-        "description": "Termix 서버가 실행된 시간을 보여줍니다."
-      },
-      "text_banner": {
-        "name": "텍스트 배너",
-        "description": "섹션 및 제목에 사용할 스타일이 적용된 텍스트 레이블"
-      },
-      "weather": {
-        "name": "날씨",
-        "description": "모든 지역의 실시간 날씨"
-      },
-      "docker_widget": {
-        "name": "Docker 관리자",
-        "description": "설정된 호스트를 위한 내장 Docker 컨테이너 관리자"
-      },
-      "file_manager_widget": {
-        "name": "파일 관리자",
-        "description": "설정된 호스트를 위한 내장 SFTP 파일 관리자"
-      },
-      "tunnel_widget": {
-        "name": "터널 관리자",
-        "description": "설정된 호스트를 위한 내장 SSH 터널 관리자"
-      },
-      "metrics_chart": {
-        "name": "메트릭 차트",
-        "description": "호스트의 CPU, 메모리, 디스크 또는 네트워크 사용량 기록도"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "홈페이지를 이용하세요",
-      "description": "홈페이지 캔버스와 대시보드 서비스 링크를 보고 편집할 수 있습니다."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "허용된 개인 호스트",
-      "description": "핑 상태 및 사용자 지정 API 위젯에 사용할 정확한 개인 또는 루프백 호스트 이름/IP 주소를 입력하십시오. 항목은 쉼표 또는 줄 바꿈으로 구분하고, 스키마, 포트 및 경로는 생략하십시오. 빈 칸은 개인 대상 주소입니다."
-    },
-    "privateCertificateAuthority": {
-      "label": "민간 인증 기관(PEM)",
-      "description": "허용 목록에 있는 호스트에 대한 선택적 신뢰 CA 번들입니다. 인증서 검증은 계속 활성화됩니다. 시스템 신뢰 저장소를 사용하려면 비워 두십시오."
-    }
-  },
-  "plugin": {
-    "name": "홈페이지"
-  }
-}
diff --git a/plugins/homepage/locales/translated/nl_NL.json b/plugins/homepage/locales/translated/nl_NL.json
deleted file mode 100644
index 8a0d2b14a..000000000
--- a/plugins/homepage/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Startpagina"
-  },
-  "dashboard": {
-    "serviceLinks": "Servicelinks",
-    "homepagePreview": "Startpagina-voorbeeld"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Servicelinks",
-    "serviceLinksEmpty": "Er zijn nog geen servicelinks beschikbaar.",
-    "serviceLinksAdd": "Toevoegen",
-    "serviceLinksLabelPlaceholder": "Mijn Service",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Voer een geldig webadres in.",
-    "serviceLinksAddFailed": "Het toevoegen van de servicelink is mislukt."
-  },
-  "homepage": {
-    "title": "Startpagina",
-    "addWidget": "Widget toevoegen",
-    "noWidgetsInCategory": "Geen widgets in deze categorie",
-    "editWidget": "Widget bewerken",
-    "zoomIn": "Inzoomen",
-    "zoomOut": "Uitzoomen",
-    "resetView": "Weergave opnieuw instellen",
-    "lockLayout": "Slotindeling",
-    "unlockLayout": "Lay-out ontgrendelen",
-    "noWidgets": "Klik met de rechtermuisknop of klik op + om je eerste widget toe te voegen.",
-    "openFullView": "Volledige weergave openen",
-    "previewTitle": "Startpagina-voorbeeld",
-    "cancel": "Annuleren",
-    "save": "Redden",
-    "title_label": "Titel",
-    "widgetTitlePlaceholder": "Widgettitel (optioneel)",
-    "url": "URL",
-    "imageUrl": "Aangepaste afbeeldings-URL",
-    "imageUrlHint": "Laat dit veld leeg om automatisch het site-favicon te gebruiken.",
-    "showImage": "Afbeelding weergeven",
-    "description": "Beschrijving",
-    "color": "Kleur",
-    "timezone": "Tijdzone",
-    "invalidTimezone": "Ongeldige tijdzone. Gebruik een IANA-naam zoals America/New_York.",
-    "showSeconds": "Toon seconden",
-    "format12h": "12 uur",
-    "content": "Inhoud",
-    "backgroundColor": "Achtergrondkleur",
-    "links": "Links",
-    "addLink": "Link toevoegen",
-    "linkLabel": "Label",
-    "categoryLinks": "Links",
-    "categoryInfo": "Informatie",
-    "categorySystem": "Systeem",
-    "copyLink": "Link kopiëren",
-    "linkCopied": "Link gekopieerd!",
-    "location": "Locatie",
-    "temperatureUnit": "Temperatuureenheid",
-    "showForecast": "Toon de 3-daagse weersvoorspelling",
-    "scrolling": "Scrollen toestaan",
-    "feedUrl": "Feed-URL",
-    "maxItems": "Max. aantal items",
-    "showDescription": "Beschrijving weergeven",
-    "widgetRssName": "RSS-feed",
-    "rssNoFeedUrl": "Configureer een feed-URL in de widgetinstellingen.",
-    "rssLoadError": "De feed kon niet worden geladen.",
-    "rssNoItems": "Geen artikelen",
-    "noHostSelected": "Geen host geselecteerd",
-    "displayedMetrics": "Weergegeven statistieken",
-    "metricCpu": "CPU",
-    "metricMemory": "Geheugen",
-    "metricDisk": "Schijf",
-    "metricUptime": "Beschikbaarheid",
-    "metricSystem": "Systeem",
-    "metricNetwork": "Netwerk",
-    "metricProcesses": "Processen",
-    "categoryMonitoring": "Monitoring",
-    "noPingUrls": "Geen URL's geconfigureerd",
-    "pingLabel": "Label",
-    "addPingUrl": "URL toevoegen",
-    "showLatency": "Toon latentie",
-    "refreshInterval": "Vernieuwingsinterval",
-    "seconds": "seconden",
-    "filterActivityTypes": "Filtertypen",
-    "filterTypesHint": "Laat dit veld leeg om alles weer te geven.",
-    "showTimestamp": "Toon tijdstempel",
-    "uptimeUnavailable": "Beschikbaarheid niet beschikbaar",
-    "uptimeLabel": "Beschikbaarheid",
-    "overviewVersion": "Versie",
-    "overviewUpdateLabel": "Update",
-    "overviewUpdateAvailable": "Update beschikbaar",
-    "overviewDatabase": "Database",
-    "overviewUptime": "Beschikbaarheid",
-    "noHosts": "Geen hosts geconfigureerd",
-    "hostGridHosts": "Gastheren",
-    "hostGridAllHint": "Laat dit veld leeg om alle hosts weer te geven.",
-    "columns": "Kolommen",
-    "showIp": "IP-adres weergeven",
-    "layout": "Indeling",
-    "showStatus": "Status weergeven",
-    "noActivity": "Geen activiteit",
-    "widgetPingStatusName": "Pingstatus",
-    "widgetRecentActivityName": "Recente activiteit",
-    "sshTerminalNoHost": "Geen host geconfigureerd",
-    "sshTerminalConnect": "Verbinden",
-    "sshTerminalAutoConnect": "Automatisch aansluiten bij belasting",
-    "connectionTypes": "Verbindingstypen",
-    "calMon": "Mo",
-    "calTue": "Tu",
-    "calWed": "Wij",
-    "calThu": "E",
-    "calFri": "Fr",
-    "calSat": "Sa",
-    "calSun": "Zo",
-    "startOnMonday": "De week begint op maandag.",
-    "countdownNoDate": "Geen streefdatum vastgesteld",
-    "countdownPast": "Het evenement heeft plaatsgevonden.",
-    "countdownDays": "dagen",
-    "countdownHours": "uren",
-    "countdownMinutes": "min",
-    "countdownSeconds": "sec",
-    "countdownLabel": "Label",
-    "countdownLabelPlaceholder": "bijvoorbeeld Lanceringsdag",
-    "countdownShowDays": "Showdagen",
-    "countdownShowHours": "Openingstijden",
-    "targetDate": "Streefdatum",
-    "searchEngine": "Zoekmachine",
-    "customSearchUrl": "Aangepaste zoek-URL",
-    "searchPlaceholder": "Zoekopdracht...",
-    "searchGo": "Gaan",
-    "searchPlaceholderLabel": "Plaatsvervangende tekst",
-    "searchPlaceholderHint": "Tekst die wordt weergegeven in het zoekveld",
-    "openInNewTab": "Openen in een nieuw tabblad",
-    "searchQueryPlaceholder": "Voer uw zoekopdracht in...",
-    "noSearchShortcuts": "Er zijn geen snelkoppelingen geconfigureerd.",
-    "addSearchShortcut": "Snelkoppeling toevoegen",
-    "fontSize": "Lettergrootte",
-    "textAlign": "Tekst uitlijnen",
-    "fontWeight": "Lettertypegewicht",
-    "clearColor": "Transparante kleur",
-    "imageFit": "Afbeelding passend maken",
-    "imageLinkUrl": "Link-URL",
-    "noImage": "Geen afbeeldings-URL ingesteld",
-    "altText": "Alternatieve tekst",
-    "altTextPlaceholder": "Beschrijf de afbeelding",
-    "renderMarkdown": "Markdown weergeven",
-    "displayMode": "Weergavemodus",
-    "displayField": "Weergaveveld",
-    "jsonPath": "JSON-pad",
-    "customApiLabel": "Label",
-    "customApiLabelPlaceholder": "bijv. Temperatuur",
-    "customApiUnit": "Eenheid",
-    "customApiNoUrl": "Geen API-URL geconfigureerd",
-    "customApiError": "Het ophalen is mislukt.",
-    "customApiNotArray": "Het antwoord is geen array.",
-    "addService": "Voeg een service toe",
-    "showLabels": "Labels weergeven",
-    "iconSize": "Pictogramgrootte",
-    "noDashboardLinks": "Er zijn geen dashboardlinks geconfigureerd.",
-    "noLimit": "Geen limiet",
-    "sectionHeading": "Sectiekop",
-    "addSection": "Sectie toevoegen",
-    "compactMode": "Compacte modus",
-    "selectHosts": "Selecteer hosts",
-    "listLayout": "Lijst",
-    "gridLayout": "Rooster",
-    "configureUrl": "Stel een URL in in de widgetinstellingen.",
-    "embeddedContent": "Ingesloten inhoud",
-    "noBookmarks": "Geen bladwijzers",
-    "noSections": "Geen secties ingesteld",
-    "noServices": "Geen services ingesteld",
-    "configureLocation": "Stel een locatie in in de widgetinstellingen.",
-    "bannerTextPlaceholder": "Bannertekst",
-    "serviceNamePlaceholder": "Mijn service",
-    "emptyNote": "Leeg briefje...",
-    "weatherLoadFailed": "Kon de weersinformatie voor \"{{location}} \" niet laden.",
-    "feelsLike": "Voelt als {{temperature}}",
-    "timezonePlaceholder": "Amerika/New_York (laat leeg voor lokale locatie)",
-    "notesPlaceholder": "Schrijf hier je aantekeningen...",
-    "locationPlaceholder": "New York, Londen, Tokio...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Bladwijzers",
-        "description": "Een lijst met snelle links"
-      },
-      "calendar": {
-        "name": "Kalender",
-        "description": "Een maandkalender waarop de dag van vandaag is gemarkeerd."
-      },
-      "clock": {
-        "name": "Klok",
-        "description": "Een live klok met instelbare tijdzone."
-      },
-      "countdown": {
-        "name": "Aftellen",
-        "description": "Telt af naar een streefdatum en -tijd."
-      },
-      "custom_api": {
-        "name": "Aangepaste API",
-        "description": "Haal gegevens op uit en toon ze via elke JSON API."
-      },
-      "dashboard_links": {
-        "name": "Dashboardlinks",
-        "description": "Toont uw opgeslagen dashboard-servicelinks"
-      },
-      "folder": {
-        "name": "Map",
-        "description": "Een achtergrondkaart voor het visueel groeperen van widgets."
-      },
-      "host_grid": {
-        "name": "Host Grid",
-        "description": "Live statusoverzicht voor al uw SSH-hosts"
-      },
-      "host_status": {
-        "name": "Hoststatus",
-        "description": "Toont de live status en statistieken voor een SSH-host."
-      },
-      "iframe_embed": {
-        "name": "iFrame-insluiting",
-        "description": "Sluit elke URL in een iframe in."
-      },
-      "image_widget": {
-        "name": "Afbeelding",
-        "description": "Toon elke afbeelding vanaf een URL."
-      },
-      "link_tree": {
-        "name": "Linkboom",
-        "description": "Gegroepeerde links georganiseerd in secties met labels."
-      },
-      "markdown_notes": {
-        "name": "Markdown-notities",
-        "description": "Notities met optionele Markdown-weergave en inline bewerking"
-      },
-      "notes": {
-        "name": "Notities",
-        "description": "Een widget voor tekstnotities"
-      },
-      "ping_status": {
-        "name": "Pingstatus",
-        "description": "Controleer of URL's of services bereikbaar zijn."
-      },
-      "quick_connect": {
-        "name": "Snel verbinden",
-        "description": "Start de terminal, bestanden, Docker, tunnels en meer voor je hosts."
-      },
-      "recent_activity": {
-        "name": "Recente activiteit",
-        "description": "Toont recente activiteit in de terminal, Docker, bestanden en tunnels."
-      },
-      "rss_feed": {
-        "name": "RSS-feed",
-        "description": "Items weergeven uit een RSS- of Atom-feed."
-      },
-      "search_bar": {
-        "name": "Zoekbalk",
-        "description": "Snel zoeken met Google, DuckDuckGo, Bing of een eigen zoekmachine."
-      },
-      "search_links": {
-        "name": "Snelkoppelingen zoeken",
-        "description": "Sneltoetsen om verschillende zoekmachines te doorzoeken"
-      },
-      "service_grid": {
-        "name": "Servicenetwerk",
-        "description": "Een raster van servicetegels met pictogrammen en links."
-      },
-      "service_link": {
-        "name": "Servicelink",
-        "description": "Een aanklikbare tegel die linkt naar een service-URL."
-      },
-      "ssh_terminal": {
-        "name": "SSH-terminal",
-        "description": "Een inline SSH-terminal verbonden met een geconfigureerde host."
-      },
-      "system_overview": {
-        "name": "Systeemoverzicht",
-        "description": "Termix-versie, databasestatus en uptime in één oogopslag"
-      },
-      "termix_uptime": {
-        "name": "Termix-uptime",
-        "description": "Geeft aan hoe lang de Termix-server al draait."
-      },
-      "text_banner": {
-        "name": "Tekstbanner",
-        "description": "Een opgemaakt tekstlabel voor secties en kopjes."
-      },
-      "weather": {
-        "name": "Weer",
-        "description": "Live weerbericht voor elke locatie"
-      },
-      "docker_widget": {
-        "name": "Docker Manager",
-        "description": "Ingebouwde Docker-containermanager voor een geconfigureerde host"
-      },
-      "file_manager_widget": {
-        "name": "Bestandsbeheerder",
-        "description": "Ingebouwde SFTP-bestandsbeheerder voor een geconfigureerde host"
-      },
-      "tunnel_widget": {
-        "name": "Tunnelbeheerder",
-        "description": "Ingebouwde SSH-tunnelmanager voor een geconfigureerde host"
-      },
-      "metrics_chart": {
-        "name": "Statistiekengrafiek",
-        "description": "Historisch overzicht van CPU-, geheugen-, schijf- of netwerkgegevens voor een host."
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Gebruik de homepage",
-      "description": "Bekijk en bewerk de links naar de homepage-canvas en dashboardservices."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Toegestane particuliere hosts",
-      "description": "Gebruik de exacte privé- of loopback-hostnamen/IP-adressen voor de widgets Pingstatus en Aangepaste API. Scheid de gegevens met komma's of nieuwe regels; laat schema's, poorten en paden weg. Lege blokken geven privébestemmingen aan."
-    },
-    "privateCertificateAuthority": {
-      "label": "Particuliere certificeringsinstantie (PEM)",
-      "description": "Optioneel pakket met vertrouwde CA's voor hosts op de whitelist. Certificaatverificatie blijft ingeschakeld. Laat dit veld leeg om de systeemvertrouwensarchief te gebruiken."
-    }
-  },
-  "plugin": {
-    "name": "Startpagina"
-  }
-}
diff --git a/plugins/homepage/locales/translated/no_NO.json b/plugins/homepage/locales/translated/no_NO.json
deleted file mode 100644
index 28b2c1337..000000000
--- a/plugins/homepage/locales/translated/no_NO.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Hjemmeside"
-  },
-  "dashboard": {
-    "serviceLinks": "Tjenestelenker",
-    "homepagePreview": "Forhåndsvisning av hjemmeside"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Tjenestelenker",
-    "serviceLinksEmpty": "Ingen tjenestelenker ennå",
-    "serviceLinksAdd": "Legg til",
-    "serviceLinksLabelPlaceholder": "Min tjeneste",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Skriv inn en gyldig nettadresse",
-    "serviceLinksAddFailed": "Kunne ikke legge til tjenestelenke"
-  },
-  "homepage": {
-    "title": "Hjemmeside",
-    "addWidget": "Legg til widget",
-    "noWidgetsInCategory": "Ingen widgeter i denne kategorien",
-    "editWidget": "Rediger widget",
-    "zoomIn": "Zoom inn",
-    "zoomOut": "Zoom ut",
-    "resetView": "Tilbakestill visning",
-    "lockLayout": "Låseoppsett",
-    "unlockLayout": "Lås opp oppsett",
-    "noWidgets": "Høyreklikk eller klikk på + for å legge til din første widget",
-    "openFullView": "Åpne full visning",
-    "previewTitle": "Forhåndsvisning av hjemmeside",
-    "cancel": "Avbryt",
-    "save": "Lagre",
-    "title_label": "Tittel",
-    "widgetTitlePlaceholder": "Widgettittel (valgfritt)",
-    "url": "URL-adresse",
-    "imageUrl": "Tilpasset bilde-URL",
-    "imageUrlHint": "La feltet stå tomt for å bruke nettstedets favicon automatisk",
-    "showImage": "Vis bilde",
-    "description": "Beskrivelse",
-    "color": "Farge",
-    "timezone": "Tidssone",
-    "invalidTimezone": "Ugyldig tidssone. Bruk et IANA-navn, for eksempel America/New_York.",
-    "showSeconds": "Vis sekunder",
-    "format12h": "12-timers",
-    "content": "Innhold",
-    "backgroundColor": "Bakgrunnsfarge",
-    "links": "Lenker",
-    "addLink": "Legg til lenke",
-    "linkLabel": "Merkelapp",
-    "categoryLinks": "Lenker",
-    "categoryInfo": "Info",
-    "categorySystem": "System",
-    "copyLink": "Kopier lenke",
-    "linkCopied": "Lenken er kopiert!",
-    "location": "Sted",
-    "temperatureUnit": "Temperaturenhet",
-    "showForecast": "Vis 3-dagers værmelding",
-    "scrolling": "Tillat rulling",
-    "feedUrl": "Nettadresse for feeden",
-    "maxItems": "Maksimalt antall varer",
-    "showDescription": "Vis beskrivelse",
-    "widgetRssName": "RSS-feed",
-    "rssNoFeedUrl": "Konfigurer en feed-URL i widget-innstillingene",
-    "rssLoadError": "Kunne ikke laste inn feeden",
-    "rssNoItems": "Ingen varer",
-    "noHostSelected": "Ingen vert valgt",
-    "displayedMetrics": "Viste målinger",
-    "metricCpu": "CPU",
-    "metricMemory": "Minne",
-    "metricDisk": "Disk",
-    "metricUptime": "Oppetid",
-    "metricSystem": "System",
-    "metricNetwork": "Nettverk",
-    "metricProcesses": "Prosesser",
-    "categoryMonitoring": "Overvåking",
-    "noPingUrls": "Ingen nettadresser konfigurert",
-    "pingLabel": "Merkelapp",
-    "addPingUrl": "Legg til nettadresse",
-    "showLatency": "Vis latens",
-    "refreshInterval": "Oppdateringsintervall",
-    "seconds": "sekunder",
-    "filterActivityTypes": "Filtertyper",
-    "filterTypesHint": "La stå tomt for å vise alle",
-    "showTimestamp": "Vis tidsstempel",
-    "uptimeUnavailable": "Oppetid utilgjengelig",
-    "uptimeLabel": "Oppetid",
-    "overviewVersion": "Versjon",
-    "overviewUpdateLabel": "Oppdatering",
-    "overviewUpdateAvailable": "Oppdatering tilgjengelig",
-    "overviewDatabase": "Database",
-    "overviewUptime": "Oppetid",
-    "noHosts": "Ingen verter konfigurert",
-    "hostGridHosts": "Verter",
-    "hostGridAllHint": "La stå tomt for å vise alle verter",
-    "columns": "Kolonner",
-    "showIp": "Vis IP-adresse",
-    "layout": "Oppsett",
-    "showStatus": "Vis status",
-    "noActivity": "Ingen aktivitet",
-    "widgetPingStatusName": "Ping-status",
-    "widgetRecentActivityName": "Nylig aktivitet",
-    "sshTerminalNoHost": "Ingen vert konfigurert",
-    "sshTerminalConnect": "Koble til",
-    "sshTerminalAutoConnect": "Automatisk tilkobling ved lasting",
-    "connectionTypes": "Tilkoblingstyper",
-    "calMon": "Mo",
-    "calTue": "Ti",
-    "calWed": "Vi",
-    "calThu": "To",
-    "calFri": "Fr",
-    "calSat": "Lø",
-    "calSun": "Søn",
-    "startOnMonday": "Start uken på mandag",
-    "countdownNoDate": "Ingen måldato angitt",
-    "countdownPast": "Arrangementet har gått",
-    "countdownDays": "dager",
-    "countdownHours": "timer",
-    "countdownMinutes": "min",
-    "countdownSeconds": "sek",
-    "countdownLabel": "Merkelapp",
-    "countdownLabelPlaceholder": "f.eks. lanseringsdag",
-    "countdownShowDays": "Vis dager",
-    "countdownShowHours": "Åpningstider",
-    "targetDate": "Måldato",
-    "searchEngine": "Søkemotor",
-    "customSearchUrl": "Tilpasset søke-URL",
-    "searchPlaceholder": "Søk...",
-    "searchGo": "Gå",
-    "searchPlaceholderLabel": "Plassholdertekst",
-    "searchPlaceholderHint": "Tekst vist i søkefeltet",
-    "openInNewTab": "Åpne i ny fane",
-    "searchQueryPlaceholder": "Skriv inn spørring...",
-    "noSearchShortcuts": "Ingen snarveier konfigurert",
-    "addSearchShortcut": "Legg til snarvei",
-    "fontSize": "Skriftstørrelse",
-    "textAlign": "Tekstjustering",
-    "fontWeight": "Skriftvekt",
-    "clearColor": "Klar farge",
-    "imageFit": "Bildetilpasning",
-    "imageLinkUrl": "Lenke-URL",
-    "noImage": "Ingen bilde-URL angitt",
-    "altText": "Alternativ tekst",
-    "altTextPlaceholder": "Beskriv bildet",
-    "renderMarkdown": "Gjengivelsesmarkering",
-    "displayMode": "Visningsmodus",
-    "displayField": "Visningsfelt",
-    "jsonPath": "JSON-sti",
-    "customApiLabel": "Merkelapp",
-    "customApiLabelPlaceholder": "f.eks. Temperatur",
-    "customApiUnit": "Enhet",
-    "customApiNoUrl": "Ingen API-URL konfigurert",
-    "customApiError": "Kunne ikke hente",
-    "customApiNotArray": "Responsen er ikke en matrise",
-    "addService": "Legg til tjeneste",
-    "showLabels": "Vis etiketter",
-    "iconSize": "Ikonstørrelse",
-    "noDashboardLinks": "Ingen dashbordlenker konfigurert",
-    "noLimit": "Ingen grense",
-    "sectionHeading": "Seksjonsoverskrift",
-    "addSection": "Legg til seksjon",
-    "compactMode": "Kompakt modus",
-    "selectHosts": "Velg verter",
-    "listLayout": "Liste",
-    "gridLayout": "Rutenett",
-    "configureUrl": "Angi en URL i widgetinnstillingene",
-    "embeddedContent": "Innebygd innhold",
-    "noBookmarks": "Ingen bokmerker",
-    "noSections": "Ingen seksjoner er satt opp",
-    "noServices": "Ingen tjenester konfigurert",
-    "configureLocation": "Angi en plassering i widgetinnstillingene",
-    "bannerTextPlaceholder": "Bannertekst",
-    "serviceNamePlaceholder": "Min tjeneste",
-    "emptyNote": "Tomt notat...",
-    "weatherLoadFailed": "Kunne ikke laste inn været for «{{location}}»",
-    "feelsLike": "Føles som {{temperature}}",
-    "timezonePlaceholder": "Amerika/New York (la stå tomt for lokalt)",
-    "notesPlaceholder": "Skriv notatene dine her ...",
-    "locationPlaceholder": "New York, London, Tokyo...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Bokmerker",
-        "description": "En liste over hurtiglenker"
-      },
-      "calendar": {
-        "name": "Kalender",
-        "description": "En månedskalender med dagens dato uthevet"
-      },
-      "clock": {
-        "name": "Klokke",
-        "description": "En live-klokke med konfigurerbar tidssone"
-      },
-      "countdown": {
-        "name": "Nedtelling",
-        "description": "Teller ned til en måldato og -klokkeslett"
-      },
-      "custom_api": {
-        "name": "Tilpasset API",
-        "description": "Hent og vis data fra et hvilket som helst JSON API"
-      },
-      "dashboard_links": {
-        "name": "Dashbordlenker",
-        "description": "Viser dine lagrede lenker til dashbordtjenester"
-      },
-      "folder": {
-        "name": "Mappe",
-        "description": "Et bakgrunnskort for å gruppere widgeter visuelt"
-      },
-      "host_grid": {
-        "name": "Vertsnett",
-        "description": "Oversiktsrutenett for live-status for alle SSH-vertene dine"
-      },
-      "host_status": {
-        "name": "Vertsstatus",
-        "description": "Viser livestatus og målinger for en SSH-vert"
-      },
-      "iframe_embed": {
-        "name": "iFrame-innbygging",
-        "description": "Legg inn en hvilken som helst URL i en iframe"
-      },
-      "image_widget": {
-        "name": "Bilde",
-        "description": "Vis et hvilket som helst bilde fra en URL"
-      },
-      "link_tree": {
-        "name": "Lenketre",
-        "description": "Grupperte lenker organisert i merkede seksjoner"
-      },
-      "markdown_notes": {
-        "name": "Merknader om nedskrivning",
-        "description": "Notater med valgfri Markdown-gjengivelse og innebygd redigering"
-      },
-      "notes": {
-        "name": "Notater",
-        "description": "En tekstnotat-widget"
-      },
-      "ping_status": {
-        "name": "Ping-status",
-        "description": "Sjekk om URL-er eller tjenester er tilgjengelige"
-      },
-      "quick_connect": {
-        "name": "Hurtigtilkobling",
-        "description": "Start terminal, filer, docker, tunneler og mer for vertene dine"
-      },
-      "recent_activity": {
-        "name": "Nylig aktivitet",
-        "description": "Viser nylig terminal-, Docker-, fil- og tunnelaktivitet"
-      },
-      "rss_feed": {
-        "name": "RSS-feed",
-        "description": "Vis elementer fra en RSS- eller Atom-feed"
-      },
-      "search_bar": {
-        "name": "Søkefelt",
-        "description": "Hurtigsøk med Google, DuckDuckGo, Bing eller en tilpasset søkemotor"
-      },
-      "search_links": {
-        "name": "Søkesnarveier",
-        "description": "Hurtigknapper for å søke i forskjellige søkemotorer"
-      },
-      "service_grid": {
-        "name": "Servicenett",
-        "description": "Et rutenett med servicefliser med ikoner og lenker"
-      },
-      "service_link": {
-        "name": "Tjenestekobling",
-        "description": "En klikkbar flis som lenker til en tjeneste-URL"
-      },
-      "ssh_terminal": {
-        "name": "SSH-terminal",
-        "description": "En innebygd SSH-terminal koblet til en konfigurert vert"
-      },
-      "system_overview": {
-        "name": "Systemoversikt",
-        "description": "Termix-versjon, databasetilstand og oppetid på et øyeblikk"
-      },
-      "termix_uptime": {
-        "name": "Termix Oppetid",
-        "description": "Viser hvor lenge Termix-serveren har kjørt"
-      },
-      "text_banner": {
-        "name": "Tekstbanner",
-        "description": "En stilisert tekstetikett for seksjoner og overskrifter"
-      },
-      "weather": {
-        "name": "Vær",
-        "description": "Live vær for alle steder"
-      },
-      "docker_widget": {
-        "name": "Docker Manager",
-        "description": "Innebygd Docker-containerbehandling for en konfigurert vert"
-      },
-      "file_manager_widget": {
-        "name": "Filbehandler",
-        "description": "Innebygd SFTP-filbehandler for en konfigurert vert"
-      },
-      "tunnel_widget": {
-        "name": "Tunnelsjef",
-        "description": "Innebygd SSH-tunnelbehandler for en konfigurert vert"
-      },
-      "metrics_chart": {
-        "name": "Målinger Diagram",
-        "description": "Historisk CPU-, minne-, disk- eller nettverksdiagram for en vert"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Bruk hjemmesiden",
-      "description": "Vis og rediger lenkene til startsidens lerret og dashbordtjenesten."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Tillatte private verter",
-      "description": "Nøyaktige private eller loopback-vertsnavn/IP-adresser for Ping-status og tilpassede API-widgeter. Skill oppføringer med komma eller linjeskift; utelat skjemaer, porter og stier. Tøm blokkering av private destinasjoner."
-    },
-    "privateCertificateAuthority": {
-      "label": "Privat sertifikatmyndighet (PEM)",
-      "description": "Valgfri pakke med klarert CA for verter på tillatelseslisten. Sertifikatverifisering forblir aktivert. La stå tomt for å bruke systemets klareringslager."
-    }
-  },
-  "plugin": {
-    "name": "Hjemmeside"
-  }
-}
diff --git a/plugins/homepage/locales/translated/pl_PL.json b/plugins/homepage/locales/translated/pl_PL.json
deleted file mode 100644
index 44d105959..000000000
--- a/plugins/homepage/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Strona główna"
-  },
-  "dashboard": {
-    "serviceLinks": "Linki do usług",
-    "homepagePreview": "Podgląd strony głównej"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Linki do usług",
-    "serviceLinksEmpty": "Brak linków do usług",
-    "serviceLinksAdd": "Dodaj",
-    "serviceLinksLabelPlaceholder": "Moja usługa",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Wprowadź prawidłowy adres internetowy",
-    "serviceLinksAddFailed": "Nie udało się dodać linku do usługi"
-  },
-  "homepage": {
-    "title": "Strona główna",
-    "addWidget": "Dodaj widżet",
-    "noWidgetsInCategory": "Brak widgetów w tej kategorii",
-    "editWidget": "Edytuj widżet",
-    "zoomIn": "Powiększ",
-    "zoomOut": "Oddal",
-    "resetView": "Resetuj widok",
-    "lockLayout": "Zablokuj układ",
-    "unlockLayout": "Odblokuj układ",
-    "noWidgets": "Kliknij prawym przyciskiem myszy lub kliknij +, aby dodać pierwszy widżet",
-    "openFullView": "Otwórz pełny widok",
-    "previewTitle": "Podgląd strony głównej",
-    "cancel": "Anuluj",
-    "save": "Zapisz",
-    "title_label": "Tytuł",
-    "widgetTitlePlaceholder": "Tytuł widżetu (opcjonalnie)",
-    "url": "Adres URL",
-    "imageUrl": "Niestandardowy adres URL obrazu",
-    "imageUrlHint": "Pozostaw puste, aby automatycznie użyć ikony witryny",
-    "showImage": "Pokaż obraz",
-    "description": "Opis",
-    "color": "Kolor",
-    "timezone": "Strefa czasowa",
-    "invalidTimezone": "Nieprawidłowa strefa czasowa. Użyj nazwy IANA, takiej jak America/New_York",
-    "showSeconds": "Pokaż sekundy",
-    "format12h": "12-godzinny",
-    "content": "Treść",
-    "backgroundColor": "Kolor tła",
-    "links": "Linki",
-    "addLink": "Dodaj link",
-    "linkLabel": "Etykieta",
-    "categoryLinks": "Linki",
-    "categoryInfo": "Informacje",
-    "categorySystem": "System",
-    "copyLink": "Kopiuj link",
-    "linkCopied": "Link skopiowany!",
-    "location": "Lokalizacja",
-    "temperatureUnit": "Jednostka temperatury",
-    "showForecast": "Pokaż prognozę 3-dniową",
-    "scrolling": "Zezwól na przewijanie",
-    "feedUrl": "Adres URL kanału",
-    "maxItems": "Maksymalna liczba elementów",
-    "showDescription": "Pokaż opis",
-    "widgetRssName": "Kanał RSS",
-    "rssNoFeedUrl": "Skonfiguruj adres URL kanału w ustawieniach widżetu",
-    "rssLoadError": "Nie można załadować kanału",
-    "rssNoItems": "Brak pozycji",
-    "noHostSelected": "Nie wybrano hosta",
-    "displayedMetrics": "Wyświetlane metryki",
-    "metricCpu": "Procesor",
-    "metricMemory": "Pamięć",
-    "metricDisk": "Dysk",
-    "metricUptime": "Czas działania",
-    "metricSystem": "System",
-    "metricNetwork": "Sieć",
-    "metricProcesses": "Procesy",
-    "categoryMonitoring": "Monitorowanie",
-    "noPingUrls": "Brak skonfigurowanych adresów URL",
-    "pingLabel": "Etykieta",
-    "addPingUrl": "Dodaj adres URL",
-    "showLatency": "Pokaż opóźnienie",
-    "refreshInterval": "Interwał odświeżania",
-    "seconds": "sekundy",
-    "filterActivityTypes": "Filtruj typy",
-    "filterTypesHint": "Pozostaw puste, aby wyświetlić wszystkie",
-    "showTimestamp": "Pokaż znacznik czasu",
-    "uptimeUnavailable": "Czas działania niedostępny",
-    "uptimeLabel": "Czas działania",
-    "overviewVersion": "Wersja",
-    "overviewUpdateLabel": "Aktualizacja",
-    "overviewUpdateAvailable": "Dostępna aktualizacja",
-    "overviewDatabase": "Baza danych",
-    "overviewUptime": "Czas działania",
-    "noHosts": "Brak skonfigurowanych hostów",
-    "hostGridHosts": "Hosty",
-    "hostGridAllHint": "Pozostaw puste, aby wyświetlić wszystkie hosty",
-    "columns": "Kolumny",
-    "showIp": "Pokaż adres IP",
-    "layout": "Układ",
-    "showStatus": "Pokaż status",
-    "noActivity": "Brak aktywności",
-    "widgetPingStatusName": "Status pingu",
-    "widgetRecentActivityName": "Ostatnia aktywność",
-    "sshTerminalNoHost": "Brak skonfigurowanego hosta",
-    "sshTerminalConnect": "Połącz",
-    "sshTerminalAutoConnect": "Automatyczne łączenie po załadowaniu",
-    "connectionTypes": "Typy połączeń",
-    "calMon": "Pn",
-    "calTue": "Wt",
-    "calWed": "Śr",
-    "calThu": "Cz",
-    "calFri": "Pt",
-    "calSat": "So",
-    "calSun": "Nd",
-    "startOnMonday": "Zacznij tydzień w poniedziałek",
-    "countdownNoDate": "Nie ustalono daty docelowej",
-    "countdownPast": "Wydarzenie minęło",
-    "countdownDays": "dni",
-    "countdownHours": "godz.",
-    "countdownMinutes": "min",
-    "countdownSeconds": "sek",
-    "countdownLabel": "Etykieta",
-    "countdownLabelPlaceholder": "np. Dzień premiery",
-    "countdownShowDays": "Pokaż dni",
-    "countdownShowHours": "Pokaż godziny",
-    "targetDate": "Data docelowa",
-    "searchEngine": "Wyszukiwarka",
-    "customSearchUrl": "Niestandardowy adres URL wyszukiwania",
-    "searchPlaceholder": "Szukaj...",
-    "searchGo": "Szukaj",
-    "searchPlaceholderLabel": "Tekst zastępczy",
-    "searchPlaceholderHint": "Tekst wyświetlany w polu wyszukiwania",
-    "openInNewTab": "Otwórz w nowej karcie",
-    "searchQueryPlaceholder": "Wprowadź zapytanie...",
-    "noSearchShortcuts": "Brak skonfigurowanych skrótów",
-    "addSearchShortcut": "Dodaj skrót",
-    "fontSize": "Rozmiar czcionki",
-    "textAlign": "Wyrównanie tekstu",
-    "fontWeight": "Grubość czcionki",
-    "clearColor": "Wyczyść kolor",
-    "imageFit": "Dopasowanie obrazu",
-    "imageLinkUrl": "Adres URL łącza",
-    "noImage": "Nie ustawiono adresu URL obrazu",
-    "altText": "Tekst alternatywny",
-    "altTextPlaceholder": "Opisz obraz",
-    "renderMarkdown": "Renderuj Markdown",
-    "displayMode": "Tryb wyświetlania",
-    "displayField": "Pole wyświetlania",
-    "jsonPath": "Ścieżka JSON",
-    "customApiLabel": "Etykieta",
-    "customApiLabelPlaceholder": "np. Temperatura",
-    "customApiUnit": "Jednostka",
-    "customApiNoUrl": "Brak skonfigurowanego adresu URL API",
-    "customApiError": "Nie udało się pobrać",
-    "customApiNotArray": "Odpowiedź nie jest tablicą",
-    "addService": "Dodaj usługę",
-    "showLabels": "Pokaż etykiety",
-    "iconSize": "Rozmiar ikony",
-    "noDashboardLinks": "Brak skonfigurowanych linków pulpitu",
-    "noLimit": "Bez limitu",
-    "sectionHeading": "Nagłówek sekcji",
-    "addSection": "Dodaj sekcję",
-    "compactMode": "Tryb kompaktowy",
-    "selectHosts": "Wybierz hosty",
-    "listLayout": "Lista",
-    "gridLayout": "Siatka",
-    "configureUrl": "Ustaw adres URL w ustawieniach widżetu",
-    "embeddedContent": "Osadzona treść",
-    "noBookmarks": "Brak zakładek",
-    "noSections": "Nie utworzono żadnych sekcji",
-    "noServices": "Brak skonfigurowanych usług",
-    "configureLocation": "Ustaw lokalizację w ustawieniach widżetu",
-    "bannerTextPlaceholder": "Tekst banera",
-    "serviceNamePlaceholder": "Moja usługa",
-    "emptyNote": "Pusta notatka...",
-    "weatherLoadFailed": "Nie można załadować pogody dla „{{location}}”",
-    "feelsLike": "Czuję się jak {{temperature}}",
-    "timezonePlaceholder": "America/New_York (pozostaw puste dla adresu lokalnego)",
-    "notesPlaceholder": "Zapisz tutaj swoje notatki...",
-    "locationPlaceholder": "Nowy Jork, Londyn, Tokio...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Zakładki",
-        "description": "Lista szybkich linków"
-      },
-      "calendar": {
-        "name": "Kalendarz",
-        "description": "Miesięczny kalendarz z wyróżnionym dniem dzisiejszym"
-      },
-      "clock": {
-        "name": "Zegar",
-        "description": "Zegar na żywo z konfigurowalną strefą czasową"
-      },
-      "countdown": {
-        "name": "Odliczanie",
-        "description": "Odlicza do określonej daty i godziny"
-      },
-      "custom_api": {
-        "name": "Niestandardowe API",
-        "description": "Pobieranie i wyświetlanie danych z dowolnego interfejsu API JSON"
-      },
-      "dashboard_links": {
-        "name": "Linki z pulpitu",
-        "description": "Wyświetla zapisane łącza do usług na pulpicie nawigacyjnym"
-      },
-      "folder": {
-        "name": "Folder",
-        "description": "Karta tła służąca do wizualnego grupowania widżetów"
-      },
-      "host_grid": {
-        "name": "Siatka hostów",
-        "description": "Siatka podglądu stanu na żywo dla wszystkich Twoich hostów SSH"
-      },
-      "host_status": {
-        "name": "Status hosta",
-        "description": "Pokazuje aktualny stan i metryki hosta SSH"
-      },
-      "iframe_embed": {
-        "name": "Osadzenie iFrame",
-        "description": "Osadź dowolny adres URL w ramce iframe"
-      },
-      "image_widget": {
-        "name": "Obraz",
-        "description": "Wyświetl dowolny obraz z adresu URL"
-      },
-      "link_tree": {
-        "name": "Drzewo linków",
-        "description": "Zgrupowane linki zorganizowane w sekcjach oznaczonych etykietami"
-      },
-      "markdown_notes": {
-        "name": "Notatki Markdown",
-        "description": "Notatki z opcjonalnym renderowaniem Markdown i edycją w tekście"
-      },
-      "notes": {
-        "name": "Notatki",
-        "description": "Widżet notatek tekstowych"
-      },
-      "ping_status": {
-        "name": "Status pingu",
-        "description": "Sprawdź, czy adresy URL lub usługi są dostępne"
-      },
-      "quick_connect": {
-        "name": "Szybkie połączenie",
-        "description": "Uruchom terminal, pliki, doker, tunele i wiele więcej dla swoich hostów"
-      },
-      "recent_activity": {
-        "name": "Ostatnia aktywność",
-        "description": "Pokazuje ostatnią aktywność terminala, Dockera, plików i tunelu"
-      },
-      "rss_feed": {
-        "name": "Kanał RSS",
-        "description": "Wyświetlaj elementy z kanału RSS lub Atom"
-      },
-      "search_bar": {
-        "name": "Pasek wyszukiwania",
-        "description": "Szybkie wyszukiwanie za pomocą Google, DuckDuckGo, Bing lub własnej wyszukiwarki"
-      },
-      "search_links": {
-        "name": "Skróty wyszukiwania",
-        "description": "Szybkie przyciski do wyszukiwania w różnych wyszukiwarkach"
-      },
-      "service_grid": {
-        "name": "Siatka usług",
-        "description": "Siatka kafelków usług z ikonami i linkami"
-      },
-      "service_link": {
-        "name": "Link do usługi",
-        "description": "Klikalny kafelek łączący się z adresem URL usługi"
-      },
-      "ssh_terminal": {
-        "name": "Terminal SSH",
-        "description": "Osadzony terminal SSH połączony ze skonfigurowanym hostem"
-      },
-      "system_overview": {
-        "name": "Przegląd systemu",
-        "description": "Wersja Termix, stan bazy danych i czas sprawności w skrócie"
-      },
-      "termix_uptime": {
-        "name": "Czas działania Termixa",
-        "description": "Pokazuje, jak długo działa serwer Termix"
-      },
-      "text_banner": {
-        "name": "Baner tekstowy",
-        "description": "Stylizowana etykieta tekstowa dla sekcji i nagłówków"
-      },
-      "weather": {
-        "name": "Pogoda",
-        "description": "Pogoda na żywo dla dowolnej lokalizacji"
-      },
-      "docker_widget": {
-        "name": "Menedżer Dockera",
-        "description": "Wbudowany menedżer kontenerów Docker dla skonfigurowanego hosta"
-      },
-      "file_manager_widget": {
-        "name": "Menedżer plików",
-        "description": "Wbudowany menedżer plików SFTP dla skonfigurowanego hosta"
-      },
-      "tunnel_widget": {
-        "name": "Menedżer tuneli",
-        "description": "Wbudowany menedżer tuneli SSH dla skonfigurowanego hosta"
-      },
-      "metrics_chart": {
-        "name": "Wykres metryk",
-        "description": "Historyczny wykres procesora, pamięci, dysku lub sieci dla hosta"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Użyj strony głównej",
-      "description": "Przeglądaj i edytuj płótno strony głównej oraz łącza do usług pulpitu nawigacyjnego."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Dozwolone prywatne hosty",
-      "description": "Dokładne prywatne lub pętli zwrotnej nazwy hostów/adresy IP dla statusu pingowania i widżetów niestandardowego API. Oddziel wpisy przecinkami lub znakami nowej linii; pomiń schematy, porty i ścieżki. Puste bloki prywatnych miejsc docelowych."
-    },
-    "privateCertificateAuthority": {
-      "label": "Prywatny urząd certyfikacji (PEM)",
-      "description": "Opcjonalny pakiet zaufanego urzędu certyfikacji dla hostów z listy dozwolonych. Weryfikacja certyfikatu pozostaje włączona. Pozostaw puste, aby korzystać z systemowego magazynu zaufanych certyfikatów."
-    }
-  },
-  "plugin": {
-    "name": "Strona główna"
-  }
-}
diff --git a/plugins/homepage/locales/translated/pt_BR.json b/plugins/homepage/locales/translated/pt_BR.json
deleted file mode 100644
index a717b41a4..000000000
--- a/plugins/homepage/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Página inicial"
-  },
-  "dashboard": {
-    "serviceLinks": "Links de serviço",
-    "homepagePreview": "Pré-visualização da página inicial"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Links de serviço",
-    "serviceLinksEmpty": "Ainda não há links de serviço.",
-    "serviceLinksAdd": "Adicionar",
-    "serviceLinksLabelPlaceholder": "Meu Serviço",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Insira um endereço web válido.",
-    "serviceLinksAddFailed": "Falha ao adicionar o link de serviço"
-  },
-  "homepage": {
-    "title": "Página inicial",
-    "addWidget": "Adicionar widget",
-    "noWidgetsInCategory": "Não há widgets nesta categoria.",
-    "editWidget": "Widget de edição",
-    "zoomIn": "Ampliar",
-    "zoomOut": "Diminuir o zoom",
-    "resetView": "Redefinir visualização",
-    "lockLayout": "Configuração de fechadura",
-    "unlockLayout": "Desbloquear layout",
-    "noWidgets": "Clique com o botão direito do mouse ou clique em + para adicionar seu primeiro widget.",
-    "openFullView": "Abrir visualização completa",
-    "previewTitle": "Pré-visualização da página inicial",
-    "cancel": "Cancelar",
-    "save": "Salvar",
-    "title_label": "Título",
-    "widgetTitlePlaceholder": "Título do widget (opcional)",
-    "url": "URL",
-    "imageUrl": "URL da imagem personalizada",
-    "imageUrlHint": "Deixe em branco para usar o favicon do site automaticamente.",
-    "showImage": "Mostrar imagem",
-    "description": "Descrição",
-    "color": "Cor",
-    "timezone": "Fuso horário",
-    "invalidTimezone": "Fuso horário inválido. Use um nome IANA, como America/New_York.",
-    "showSeconds": "Mostrar segundos",
-    "format12h": "12 horas",
-    "content": "Contente",
-    "backgroundColor": "Cor de fundo",
-    "links": "Links",
-    "addLink": "Adicionar link",
-    "linkLabel": "Rótulo",
-    "categoryLinks": "Links",
-    "categoryInfo": "Informações",
-    "categorySystem": "Sistema",
-    "copyLink": "Copiar link",
-    "linkCopied": "Link copiado!",
-    "location": "Localização",
-    "temperatureUnit": "Unidade de temperatura",
-    "showForecast": "Mostrar previsão para 3 dias",
-    "scrolling": "Permitir rolagem",
-    "feedUrl": "URL do feed",
-    "maxItems": "Número máximo de itens",
-    "showDescription": "Descrição do programa",
-    "widgetRssName": "Feed RSS",
-    "rssNoFeedUrl": "Configure um URL de feed nas configurações do widget.",
-    "rssLoadError": "Não foi possível carregar o feed.",
-    "rssNoItems": "Nenhum item",
-    "noHostSelected": "Nenhum host selecionado",
-    "displayedMetrics": "Métricas exibidas",
-    "metricCpu": "CPU",
-    "metricMemory": "Memória",
-    "metricDisk": "Disco",
-    "metricUptime": "Tempo de atividade",
-    "metricSystem": "Sistema",
-    "metricNetwork": "Rede",
-    "metricProcesses": "Processos",
-    "categoryMonitoring": "Monitoramento",
-    "noPingUrls": "Nenhuma URL configurada",
-    "pingLabel": "Rótulo",
-    "addPingUrl": "Adicionar URL",
-    "showLatency": "Mostrar latência",
-    "refreshInterval": "Intervalo de atualização",
-    "seconds": "segundos",
-    "filterActivityTypes": "Tipos de filtro",
-    "filterTypesHint": "Deixe em branco para mostrar tudo",
-    "showTimestamp": "Mostrar carimbo de data/hora",
-    "uptimeUnavailable": "Tempo de atividade indisponível",
-    "uptimeLabel": "Tempo de atividade",
-    "overviewVersion": "Versão",
-    "overviewUpdateLabel": "Atualizar",
-    "overviewUpdateAvailable": "Atualização disponível",
-    "overviewDatabase": "Banco de dados",
-    "overviewUptime": "Tempo de atividade",
-    "noHosts": "Nenhum host configurado",
-    "hostGridHosts": "Hosts",
-    "hostGridAllHint": "Deixe em branco para mostrar todos os hosts.",
-    "columns": "Colunas",
-    "showIp": "Mostrar endereço IP",
-    "layout": "Layout",
-    "showStatus": "Mostrar status",
-    "noActivity": "Nenhuma atividade",
-    "widgetPingStatusName": "Status do ping",
-    "widgetRecentActivityName": "Atividade recente",
-    "sshTerminalNoHost": "Nenhum host configurado",
-    "sshTerminalConnect": "Conectar",
-    "sshTerminalAutoConnect": "Conexão automática sob carga",
-    "connectionTypes": "Tipos de conexão",
-    "calMon": "Mo",
-    "calTue": "Tu",
-    "calWed": "Nós",
-    "calThu": "O",
-    "calFri": "Padre",
-    "calSat": "Sa",
-    "calSun": "Su",
-    "startOnMonday": "Comece a semana na segunda-feira",
-    "countdownNoDate": "Nenhuma data-alvo definida.",
-    "countdownPast": "O evento já aconteceu.",
-    "countdownDays": "dias",
-    "countdownHours": "horas",
-    "countdownMinutes": "min",
-    "countdownSeconds": "seg",
-    "countdownLabel": "Rótulo",
-    "countdownLabelPlaceholder": "Exemplo: Dia do Lançamento",
-    "countdownShowDays": "Dias de exibição",
-    "countdownShowHours": "Horário de funcionamento",
-    "targetDate": "Data alvo",
-    "searchEngine": "Mecanismo de busca",
-    "customSearchUrl": "URL de pesquisa personalizada",
-    "searchPlaceholder": "Procurar...",
-    "searchGo": "Ir",
-    "searchPlaceholderLabel": "Texto de espaço reservado",
-    "searchPlaceholderHint": "Texto exibido dentro do campo de pesquisa",
-    "openInNewTab": "Abrir em Nova Aba",
-    "searchQueryPlaceholder": "Digite a consulta...",
-    "noSearchShortcuts": "Nenhum atalho configurado",
-    "addSearchShortcut": "Adicionar atalho",
-    "fontSize": "Tamanho da Fonte",
-    "textAlign": "Alinhamento de texto",
-    "fontWeight": "Peso da fonte",
-    "clearColor": "Cor transparente",
-    "imageFit": "Ajuste de imagem",
-    "imageLinkUrl": "URL do link",
-    "noImage": "Nenhuma URL de imagem definida.",
-    "altText": "Texto alternativo",
-    "altTextPlaceholder": "Descreva a imagem",
-    "renderMarkdown": "Renderizar Markdown",
-    "displayMode": "Modo de exibição",
-    "displayField": "Campo de exibição",
-    "jsonPath": "Caminho JSON",
-    "customApiLabel": "Rótulo",
-    "customApiLabelPlaceholder": "Exemplo: Temperatura",
-    "customApiUnit": "Unidade",
-    "customApiNoUrl": "Nenhuma URL de API configurada",
-    "customApiError": "Falha ao buscar",
-    "customApiNotArray": "A resposta não é uma matriz.",
-    "addService": "Adicionar serviço",
-    "showLabels": "Mostrar rótulos",
-    "iconSize": "Tamanho do ícone",
-    "noDashboardLinks": "Nenhum link para o painel de controle configurado",
-    "noLimit": "Sem limite",
-    "sectionHeading": "Título da seção",
-    "addSection": "Adicionar seção",
-    "compactMode": "Modo compacto",
-    "selectHosts": "Selecionar anfitriões",
-    "listLayout": "Lista",
-    "gridLayout": "Grade",
-    "configureUrl": "Defina um URL nas configurações do widget.",
-    "embeddedContent": "Conteúdo incorporado",
-    "noBookmarks": "Sem favoritos",
-    "noSections": "Nenhuma seção configurada",
-    "noServices": "Nenhum serviço configurado",
-    "configureLocation": "Defina uma localização nas configurações do widget.",
-    "bannerTextPlaceholder": "Texto do banner",
-    "serviceNamePlaceholder": "Meu serviço",
-    "emptyNote": "Nota vazia...",
-    "weatherLoadFailed": "Não foi possível carregar a previsão do tempo para \"{{location}}\"",
-    "feelsLike": "Parece {{temperature}}",
-    "timezonePlaceholder": "América/Nova_York (deixe em branco para local)",
-    "notesPlaceholder": "Anote aqui...",
-    "locationPlaceholder": "Nova Iorque, Londres, Tóquio...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Favoritos",
-        "description": "Lista de links rápidos"
-      },
-      "calendar": {
-        "name": "Calendário",
-        "description": "Um calendário mensal com o dia de hoje destacado."
-      },
-      "clock": {
-        "name": "Relógio",
-        "description": "Um relógio em tempo real com fuso horário configurável."
-      },
-      "countdown": {
-        "name": "Contagem regressiva",
-        "description": "Contagem regressiva para uma data e hora específicas."
-      },
-      "custom_api": {
-        "name": "API personalizada",
-        "description": "Obtenha e exiba dados de qualquer API JSON."
-      },
-      "dashboard_links": {
-        "name": "Links do painel de controle",
-        "description": "Exibe os links de serviço salvos no painel de controle."
-      },
-      "folder": {
-        "name": "Pasta",
-        "description": "Um cartão de fundo para agrupar widgets visualmente."
-      },
-      "host_grid": {
-        "name": "Grade de anfitriões",
-        "description": "Visão geral em tempo real do status de todos os seus hosts SSH."
-      },
-      "host_status": {
-        "name": "Status do host",
-        "description": "Exibe o status e as métricas em tempo real de um host SSH."
-      },
-      "iframe_embed": {
-        "name": "Incorporação de iFrame",
-        "description": "Incorpore qualquer URL em um iframe."
-      },
-      "image_widget": {
-        "name": "Imagem",
-        "description": "Exibir qualquer imagem a partir de um URL"
-      },
-      "link_tree": {
-        "name": "Link Tree",
-        "description": "Links agrupados organizados em seções rotuladas"
-      },
-      "markdown_notes": {
-        "name": "Anotações em Markdown",
-        "description": "Notas com renderização Markdown opcional e edição em linha."
-      },
-      "notes": {
-        "name": "Notas",
-        "description": "Um widget de notas de texto"
-      },
-      "ping_status": {
-        "name": "Status do ping",
-        "description": "Verifique se os URLs ou serviços estão acessíveis."
-      },
-      "quick_connect": {
-        "name": "Conexão Rápida",
-        "description": "Inicie o terminal, arquivos, Docker, túneis e muito mais para seus hosts."
-      },
-      "recent_activity": {
-        "name": "Atividade recente",
-        "description": "Exibe atividades recentes de terminal, Docker, arquivos e túneis."
-      },
-      "rss_feed": {
-        "name": "Feed RSS",
-        "description": "Exibir itens de um feed RSS ou Atom"
-      },
-      "search_bar": {
-        "name": "Barra de pesquisa",
-        "description": "Pesquisa rápida com o Google, DuckDuckGo, Bing ou um mecanismo de busca personalizado."
-      },
-      "search_links": {
-        "name": "Atalhos de pesquisa",
-        "description": "Botões rápidos para pesquisar em diferentes mecanismos de busca."
-      },
-      "service_grid": {
-        "name": "Grade de serviço",
-        "description": "Uma grade de blocos de serviços com ícones e links."
-      },
-      "service_link": {
-        "name": "Link de serviço",
-        "description": "Um bloco clicável que direciona para um URL de serviço."
-      },
-      "ssh_terminal": {
-        "name": "Terminal SSH",
-        "description": "Um terminal SSH embutido conectado a um host configurado."
-      },
-      "system_overview": {
-        "name": "Visão geral do sistema",
-        "description": "Visão geral da versão do Termix, integridade do banco de dados e tempo de atividade."
-      },
-      "termix_uptime": {
-        "name": "Tempo de atividade do Termix",
-        "description": "Mostra há quanto tempo o servidor Termix está em execução."
-      },
-      "text_banner": {
-        "name": "Banner de texto",
-        "description": "Um rótulo de texto estilizado para seções e títulos."
-      },
-      "weather": {
-        "name": "Clima",
-        "description": "Previsão do tempo ao vivo para qualquer local."
-      },
-      "docker_widget": {
-        "name": "Gerenciador de Docker",
-        "description": "Gerenciador de contêineres Docker integrado para um host configurado"
-      },
-      "file_manager_widget": {
-        "name": "Gerenciador de Arquivos",
-        "description": "Gerenciador de arquivos SFTP integrado para um host configurado."
-      },
-      "tunnel_widget": {
-        "name": "Gerente do Túnel",
-        "description": "Gerenciador de túnel SSH integrado para um host configurado"
-      },
-      "metrics_chart": {
-        "name": "Gráfico de métricas",
-        "description": "Gráfico histórico de CPU, memória, disco ou rede para um host"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Use a página inicial",
-      "description": "Visualize e edite os links de serviço da página inicial e do painel de controle."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Hosts privados permitidos",
-      "description": "Insira os nomes de host/IPs exatos, privados ou de loopback, para os widgets de Status de Ping e API Personalizada. Separe as entradas com vírgulas ou novas linhas; omita esquemas, portas e caminhos. Deixe os blocos vazios para destinos privados."
-    },
-    "privateCertificateAuthority": {
-      "label": "Autoridade de certificação privada (PEM)",
-      "description": "Pacote opcional de CAs confiáveis para hosts na lista de permissões. A verificação de certificados permanece ativada. Deixe em branco para usar o repositório de certificados confiáveis do sistema."
-    }
-  },
-  "plugin": {
-    "name": "Página inicial"
-  }
-}
diff --git a/plugins/homepage/locales/translated/pt_PT.json b/plugins/homepage/locales/translated/pt_PT.json
deleted file mode 100644
index b39316327..000000000
--- a/plugins/homepage/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Página inicial"
-  },
-  "dashboard": {
-    "serviceLinks": "Links de Serviço",
-    "homepagePreview": "Pré-visualização da Página Inicial"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Links de Serviço",
-    "serviceLinksEmpty": "Ainda sem links de serviço",
-    "serviceLinksAdd": "Adicionar",
-    "serviceLinksLabelPlaceholder": "O Meu Serviço",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Insira um endereço web válido",
-    "serviceLinksAddFailed": "Falha ao adicionar link de serviço"
-  },
-  "homepage": {
-    "title": "Página Inicial",
-    "addWidget": "Adicionar widget",
-    "noWidgetsInCategory": "Não existem widgets nesta categoria.",
-    "editWidget": "Editar widget",
-    "zoomIn": "Ampliar",
-    "zoomOut": "Reduzir",
-    "resetView": "Repor Vista",
-    "lockLayout": "Bloquear Disposição",
-    "unlockLayout": "Desbloquear Disposição",
-    "noWidgets": "Clique com o botão direito ou em + para adicionar o seu primeiro widget",
-    "openFullView": "Abrir Vista Completa",
-    "previewTitle": "Pré-visualização da Página Inicial",
-    "cancel": "Cancelar",
-    "save": "Guardar",
-    "title_label": "Título",
-    "widgetTitlePlaceholder": "Título do widget (opcional)",
-    "url": "URL",
-    "imageUrl": "URL de Imagem Personalizada",
-    "imageUrlHint": "Deixe em branco para usar automaticamente o favicon do site",
-    "showImage": "Mostrar Imagem",
-    "description": "Descrição",
-    "color": "Cor",
-    "timezone": "Fuso Horário",
-    "invalidTimezone": "Fuso horário inválido. Utilize um nome IANA, como America/New_York.",
-    "showSeconds": "Mostrar segundos",
-    "format12h": "12 horas",
-    "content": "Conteúdo",
-    "backgroundColor": "Cor de Fundo",
-    "links": "Hiperligações",
-    "addLink": "Adicionar ligação",
-    "linkLabel": "Etiqueta",
-    "categoryLinks": "Hiperligações",
-    "categoryInfo": "Info",
-    "categorySystem": "Sistema",
-    "copyLink": "Copiar ligação",
-    "linkCopied": "Ligação copiada!",
-    "location": "Localização",
-    "temperatureUnit": "Unidade de temperatura",
-    "showForecast": "Mostrar previsão de 3 dias",
-    "scrolling": "Permitir deslocamento",
-    "feedUrl": "URL do feed",
-    "maxItems": "Itens máx.",
-    "showDescription": "Mostrar descrição",
-    "widgetRssName": "Feed RSS",
-    "rssNoFeedUrl": "Configure um URL de feed nas definições do widget.",
-    "rssLoadError": "Não foi possível carregar o feed.",
-    "rssNoItems": "Nenhum item",
-    "noHostSelected": "Nenhum anfitrião selecionado",
-    "displayedMetrics": "Métricas Exibidas",
-    "metricCpu": "CPU",
-    "metricMemory": "Memória",
-    "metricDisk": "Disco",
-    "metricUptime": "Tempo de atividade",
-    "metricSystem": "Sistema",
-    "metricNetwork": "Rede",
-    "metricProcesses": "Processos",
-    "categoryMonitoring": "Monitorização",
-    "noPingUrls": "Nenhum URL configurado",
-    "pingLabel": "Etiqueta",
-    "addPingUrl": "Adicionar URL",
-    "showLatency": "Mostrar latência",
-    "refreshInterval": "Intervalo de atualização",
-    "seconds": "segundos",
-    "filterActivityTypes": "Filtrar tipos",
-    "filterTypesHint": "Deixar vazio para mostrar todos",
-    "showTimestamp": "Mostrar timestamp",
-    "uptimeUnavailable": "Tempo de atividade indisponível",
-    "uptimeLabel": "Tempo de atividade",
-    "overviewVersion": "Versão",
-    "overviewUpdateLabel": "Atualizar",
-    "overviewUpdateAvailable": "Atualização disponível",
-    "overviewDatabase": "Base de dados",
-    "overviewUptime": "Tempo de atividade",
-    "noHosts": "Sem hosts configurados",
-    "hostGridHosts": "Hosts",
-    "hostGridAllHint": "Deixar em branco para mostrar todos os hosts",
-    "columns": "Colunas",
-    "showIp": "Mostrar endereço IP",
-    "layout": "Layout",
-    "showStatus": "Mostrar estado",
-    "noActivity": "Sem atividade",
-    "widgetPingStatusName": "Estado do ping",
-    "widgetRecentActivityName": "Atividade recente",
-    "sshTerminalNoHost": "Nenhum host configurado",
-    "sshTerminalConnect": "Ligar",
-    "sshTerminalAutoConnect": "Ligação automática ao carregar",
-    "connectionTypes": "Tipos de Ligação",
-    "calMon": "Seg",
-    "calTue": "Ter",
-    "calWed": "Qua",
-    "calThu": "Qui",
-    "calFri": "Sex",
-    "calSat": "Sáb",
-    "calSun": "Dom",
-    "startOnMonday": "Começar a semana na segunda-feira",
-    "countdownNoDate": "Nenhuma data alvo definida",
-    "countdownPast": "O evento já passou",
-    "countdownDays": "dias",
-    "countdownHours": "horas",
-    "countdownMinutes": "min",
-    "countdownSeconds": "seg",
-    "countdownLabel": "Rótulo",
-    "countdownLabelPlaceholder": "p. ex. Dia de Lançamento",
-    "countdownShowDays": "Mostrar Dias",
-    "countdownShowHours": "Mostrar Horas",
-    "targetDate": "Data Alvo",
-    "searchEngine": "Motor de Pesquisa",
-    "customSearchUrl": "URL de Pesquisa Personalizada",
-    "searchPlaceholder": "Pesquisar...",
-    "searchGo": "Ir",
-    "searchPlaceholderLabel": "Texto do Placeholder",
-    "searchPlaceholderHint": "Texto apresentado no campo de pesquisa",
-    "openInNewTab": "Abrir num Novo Separador",
-    "searchQueryPlaceholder": "Introduzir consulta...",
-    "noSearchShortcuts": "Nenhum atalho configurado",
-    "addSearchShortcut": "Adicionar Atalho",
-    "fontSize": "Tamanho da Letra",
-    "textAlign": "Alinhamento do Texto",
-    "fontWeight": "Peso da Fonte",
-    "clearColor": "Limpar Cor",
-    "imageFit": "Ajuste da Imagem",
-    "imageLinkUrl": "URL do Link",
-    "noImage": "Nenhum URL de imagem definido",
-    "altText": "Texto Alternativo",
-    "altTextPlaceholder": "Descreva a imagem",
-    "renderMarkdown": "Renderizar Markdown",
-    "displayMode": "Modo de Exibição",
-    "displayField": "Campo de Exibição",
-    "jsonPath": "Caminho JSON",
-    "customApiLabel": "Etiqueta",
-    "customApiLabelPlaceholder": "p. ex. Temperatura",
-    "customApiUnit": "Unidade",
-    "customApiNoUrl": "Nenhum URL de API configurado",
-    "customApiError": "Falha ao obter",
-    "customApiNotArray": "A resposta não é um array",
-    "addService": "Adicionar Serviço",
-    "showLabels": "Mostrar Etiquetas",
-    "iconSize": "Tamanho do Ícone",
-    "noDashboardLinks": "Nenhuma ligação do painel configurada",
-    "noLimit": "Sem limite",
-    "sectionHeading": "Cabeçalho da Secção",
-    "addSection": "Adicionar Secção",
-    "compactMode": "Modo Compacto",
-    "selectHosts": "Selecionar Hosts",
-    "listLayout": "Lista",
-    "gridLayout": "Grelha",
-    "configureUrl": "Defina um URL nas definições do widget.",
-    "embeddedContent": "Conteúdo incorporado",
-    "noBookmarks": "Sem favoritos",
-    "noSections": "Nenhuma secção configurada",
-    "noServices": "Nenhum serviço configurado",
-    "configureLocation": "Defina uma localização nas definições do widget.",
-    "bannerTextPlaceholder": "Texto do banner",
-    "serviceNamePlaceholder": "O meu serviço",
-    "emptyNote": "Nota vazia...",
-    "weatherLoadFailed": "Não foi possível carregar a previsão meteorológica para \"{{location}}\"",
-    "feelsLike": "Parece {{temperature}}",
-    "timezonePlaceholder": "América/Nova_Iorque (deixar em branco para local)",
-    "notesPlaceholder": "Anote aqui...",
-    "locationPlaceholder": "Nova Iorque, Londres, Tóquio...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Marcadores",
-        "description": "Uma lista de hiperligações rápidas"
-      },
-      "calendar": {
-        "name": "Calendário",
-        "description": "Um calendário mensal com o dia de hoje em destaque."
-      },
-      "clock": {
-        "name": "Relógio",
-        "description": "Um relógio em tempo real com fuso horário configurável"
-      },
-      "countdown": {
-        "name": "Contagem Decrescente",
-        "description": "Contagem decrescente para uma data e hora específicas."
-      },
-      "custom_api": {
-        "name": "API Personalizada",
-        "description": "Obter e exibir dados de qualquer API JSON"
-      },
-      "dashboard_links": {
-        "name": "Links do Painel",
-        "description": "Apresenta os links de serviço guardados no painel de controlo."
-      },
-      "folder": {
-        "name": "Pasta",
-        "description": "Um cartão de fundo para agrupar widgets visualmente."
-      },
-      "host_grid": {
-        "name": "Grelha de hosts",
-        "description": "Visão geral em tempo real do estado de todos os seus hosts SSH."
-      },
-      "host_status": {
-        "name": "Estado do Host",
-        "description": "Apresenta o estado e as métricas em tempo real de um host SSH."
-      },
-      "iframe_embed": {
-        "name": "Incorporação iFrame",
-        "description": "Incorpora qualquer URL num iframe"
-      },
-      "image_widget": {
-        "name": "Imagem",
-        "description": "Exibir qualquer imagem a partir de um URL"
-      },
-      "link_tree": {
-        "name": "Árvore de Links",
-        "description": "Links agrupados organizados em secções rotuladas"
-      },
-      "markdown_notes": {
-        "name": "Notas Markdown",
-        "description": "Notas com renderização Markdown opcional e edição em linha."
-      },
-      "notes": {
-        "name": "Notas",
-        "description": "Um widget de notas de texto"
-      },
-      "ping_status": {
-        "name": "Estado do ping",
-        "description": "Verifique se os URLs ou serviços estão acessíveis."
-      },
-      "quick_connect": {
-        "name": "Ligação Rápida",
-        "description": "Inicie o terminal, ficheiros, Docker, túneis e muito mais para os seus hosts."
-      },
-      "recent_activity": {
-        "name": "Atividade Recente",
-        "description": "Apresenta as atividades recentes de terminal, Docker, ficheiros e túneis."
-      },
-      "rss_feed": {
-        "name": "Feed RSS",
-        "description": "Mostra itens de um feed RSS ou Atom"
-      },
-      "search_bar": {
-        "name": "Barra de Pesquisa",
-        "description": "Pesquisa rápida com o Google, DuckDuckGo, Bing ou um motor de busca personalizado."
-      },
-      "search_links": {
-        "name": "Atalhos de Pesquisa",
-        "description": "Botões rápidos para pesquisar em diferentes motores de busca."
-      },
-      "service_grid": {
-        "name": "Grelha de Serviços",
-        "description": "Uma grelha de blocos de serviços com ícones e ligações."
-      },
-      "service_link": {
-        "name": "Link de Serviço",
-        "description": "Um mosaico clicável que liga a um URL de serviço"
-      },
-      "ssh_terminal": {
-        "name": "Terminal SSH",
-        "description": "Um terminal SSH integrado ligado a um host configurado"
-      },
-      "system_overview": {
-        "name": "Visão geral do sistema",
-        "description": "Visão geral da versão do Termix, integridade da base de dados e tempo de atividade."
-      },
-      "termix_uptime": {
-        "name": "Tempo de atividade do Termix",
-        "description": "Mostra há quanto tempo o servidor Termix está em execução."
-      },
-      "text_banner": {
-        "name": "Banner de Texto",
-        "description": "Um rótulo de texto estilizado para secções e títulos."
-      },
-      "weather": {
-        "name": "Tempo",
-        "description": "Tempo em direto para qualquer localização"
-      },
-      "docker_widget": {
-        "name": "Gestor Docker",
-        "description": "Gestor de contentores Docker integrado para um host configurado"
-      },
-      "file_manager_widget": {
-        "name": "Gestor de Ficheiros",
-        "description": "Gestor de ficheiros SFTP integrado para um host configurado"
-      },
-      "tunnel_widget": {
-        "name": "Gestor de Túneis",
-        "description": "Gestor de túneis SSH integrado para um host configurado"
-      },
-      "metrics_chart": {
-        "name": "Gráfico de métricas",
-        "description": "Gráfico histórico de CPU, memória, disco ou rede para um host"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilize a página inicial",
-      "description": "Visualize e edite os links de serviço da página inicial e do painel de controlo."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Hosts privados permitidos",
-      "description": "Introduza os nomes de host/IPs exatos, privados ou de loopback, para os widgets Ping Status e Custom API. Separe as entradas com vírgulas ou novas linhas; omita esquemas, portas e caminhos. Deixe os blocos vazios para destinos privados."
-    },
-    "privateCertificateAuthority": {
-      "label": "Autoridade de certificação privada (PEM)",
-      "description": "Pacote opcional de CAs fidedignas para hosts na lista de permissões. A verificação de certificados permanece ativada. Deixe em branco para utilizar o repositório de certificados fidedignos do sistema."
-    }
-  },
-  "plugin": {
-    "name": "Página inicial"
-  }
-}
diff --git a/plugins/homepage/locales/translated/ro_RO.json b/plugins/homepage/locales/translated/ro_RO.json
deleted file mode 100644
index 34adb3641..000000000
--- a/plugins/homepage/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Pagina principală"
-  },
-  "dashboard": {
-    "serviceLinks": "Linkuri de servicii",
-    "homepagePreview": "Previzualizare pagină principală"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Linkuri de servicii",
-    "serviceLinksEmpty": "Încă nu există linkuri de servicii",
-    "serviceLinksAdd": "Adăuga",
-    "serviceLinksLabelPlaceholder": "Serviciul meu",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Introduceți o adresă web validă",
-    "serviceLinksAddFailed": "Nu s-a putut adăuga linkul de serviciu"
-  },
-  "homepage": {
-    "title": "Pagina principală",
-    "addWidget": "Adăugați widget",
-    "noWidgetsInCategory": "Niciun widget în această categorie",
-    "editWidget": "Editare widget",
-    "zoomIn": "Mărire",
-    "zoomOut": "Micșorare",
-    "resetView": "Resetare vizualizare",
-    "lockLayout": "Aspectul blocării",
-    "unlockLayout": "Deblocare aspect",
-    "noWidgets": "Faceți clic dreapta sau faceți clic pe + pentru a adăuga primul widget",
-    "openFullView": "Deschideți Vizualizarea Completă",
-    "previewTitle": "Previzualizare pagină principală",
-    "cancel": "Anula",
-    "save": "Salva",
-    "title_label": "Titlu",
-    "widgetTitlePlaceholder": "Titlul widgetului (opțional)",
-    "url": "URL-ul",
-    "imageUrl": "URL-ul imaginii personalizate",
-    "imageUrlHint": "Lăsați necompletat pentru a utiliza automat favicon-ul site-ului",
-    "showImage": "Afișați imaginea",
-    "description": "Descriere",
-    "color": "Culoare",
-    "timezone": "Fus orar",
-    "invalidTimezone": "Fus orar nevalid. Folosiți un nume IANA, cum ar fi America/New_York.",
-    "showSeconds": "Afișează secundele",
-    "format12h": "12 ore",
-    "content": "Conţinut",
-    "backgroundColor": "Culoare de fundal",
-    "links": "Linkuri",
-    "addLink": "Adăugați link",
-    "linkLabel": "Eticheta",
-    "categoryLinks": "Linkuri",
-    "categoryInfo": "Informații",
-    "categorySystem": "Sistem",
-    "copyLink": "Copiază linkul",
-    "linkCopied": "Link copiat!",
-    "location": "Locaţie",
-    "temperatureUnit": "Unitate de temperatură",
-    "showForecast": "Afișați prognoza meteo pe 3 zile",
-    "scrolling": "Permiteți derularea",
-    "feedUrl": "URL-ul fluxului",
-    "maxItems": "Articole maxime",
-    "showDescription": "Afișați descrierea",
-    "widgetRssName": "Flux RSS",
-    "rssNoFeedUrl": "Configurați o adresă URL de flux în setările widgetului",
-    "rssLoadError": "Nu s-a putut încărca feedul",
-    "rssNoItems": "Niciun articol",
-    "noHostSelected": "Nicio gazdă selectată",
-    "displayedMetrics": "Metrici afișate",
-    "metricCpu": "CPU",
-    "metricMemory": "Memorie",
-    "metricDisk": "Disc",
-    "metricUptime": "Timp de funcționare",
-    "metricSystem": "Sistem",
-    "metricNetwork": "Reţea",
-    "metricProcesses": "Procese",
-    "categoryMonitoring": "Monitorizare",
-    "noPingUrls": "Nicio adresă URL configurată",
-    "pingLabel": "Eticheta",
-    "addPingUrl": "Adăugați adresa URL",
-    "showLatency": "Afișați latența",
-    "refreshInterval": "Interval de actualizare",
-    "seconds": "secunde",
-    "filterActivityTypes": "Tipuri de filtre",
-    "filterTypesHint": "Lăsați gol pentru a afișa toate",
-    "showTimestamp": "Afișați marcajul temporal",
-    "uptimeUnavailable": "Timp de funcționare indisponibil",
-    "uptimeLabel": "Timp de funcționare",
-    "overviewVersion": "Versiune",
-    "overviewUpdateLabel": "Actualizare",
-    "overviewUpdateAvailable": "Actualizare disponibilă",
-    "overviewDatabase": "Bază de date",
-    "overviewUptime": "Timp de funcționare",
-    "noHosts": "Nicio gazdă configurată",
-    "hostGridHosts": "Gazde",
-    "hostGridAllHint": "Lăsați gol pentru a afișa toate gazdele",
-    "columns": "Coloane",
-    "showIp": "Afișați adresa IP",
-    "layout": "Aspect",
-    "showStatus": "Afișați starea",
-    "noActivity": "Nicio activitate",
-    "widgetPingStatusName": "Starea ping-ului",
-    "widgetRecentActivityName": "Activitate recentă",
-    "sshTerminalNoHost": "Nicio gazdă configurată",
-    "sshTerminalConnect": "Conectează-te",
-    "sshTerminalAutoConnect": "Conectare automată la sarcină",
-    "connectionTypes": "Tipuri de conexiune",
-    "calMon": "Luni",
-    "calTue": "Marți",
-    "calWed": "Noi",
-    "calThu": "Joi",
-    "calFri": "Fr.",
-    "calSat": "Sâmbătă",
-    "calSun": "Su",
-    "startOnMonday": "Începeți săptămâna luni",
-    "countdownNoDate": "Nu a fost stabilită o dată țintă",
-    "countdownPast": "Evenimentul a trecut",
-    "countdownDays": "zile",
-    "countdownHours": "ore",
-    "countdownMinutes": "min",
-    "countdownSeconds": "sec",
-    "countdownLabel": "Eticheta",
-    "countdownLabelPlaceholder": "de exemplu, ziua lansării",
-    "countdownShowDays": "Zile de spectacol",
-    "countdownShowHours": "Programul de lucru",
-    "targetDate": "Data țintă",
-    "searchEngine": "Motor de căutare",
-    "customSearchUrl": "URL de căutare personalizată",
-    "searchPlaceholder": "Căutare...",
-    "searchGo": "Merge",
-    "searchPlaceholderLabel": "Text substituent",
-    "searchPlaceholderHint": "Text afișat în câmpul de căutare",
-    "openInNewTab": "Deschide într-o filă nouă",
-    "searchQueryPlaceholder": "Introduceți interogarea...",
-    "noSearchShortcuts": "Nu sunt configurate comenzi rapide",
-    "addSearchShortcut": "Adăugați o comandă rapidă",
-    "fontSize": "Dimensiunea fontului",
-    "textAlign": "Aliniere text",
-    "fontWeight": "Grosimea fontului",
-    "clearColor": "Culoare clară",
-    "imageFit": "Potrivire imagine",
-    "imageLinkUrl": "URL-ul linkului",
-    "noImage": "Nu a fost setată nicio adresă URL a imaginii",
-    "altText": "Text alternativ",
-    "altTextPlaceholder": "Descrieți imaginea",
-    "renderMarkdown": "Reducere de randare",
-    "displayMode": "Mod de afișare",
-    "displayField": "Câmp de afișare",
-    "jsonPath": "Calea JSON",
-    "customApiLabel": "Eticheta",
-    "customApiLabelPlaceholder": "de exemplu, temperatura",
-    "customApiUnit": "Unitate",
-    "customApiNoUrl": "Nicio adresă URL API configurată",
-    "customApiError": "Preluarea nu a reușit",
-    "customApiNotArray": "Răspunsul nu este o matrice",
-    "addService": "Adăugați serviciu",
-    "showLabels": "Afișați etichetele",
-    "iconSize": "Dimensiunea pictogramei",
-    "noDashboardLinks": "Nu sunt configurate linkuri la tabloul de bord",
-    "noLimit": "Fără limită",
-    "sectionHeading": "Titlu secțiune",
-    "addSection": "Adăugați secțiune",
-    "compactMode": "Mod compact",
-    "selectHosts": "Selectați gazdele",
-    "listLayout": "Listă",
-    "gridLayout": "Grilă",
-    "configureUrl": "Setați o adresă URL în setările widgetului",
-    "embeddedContent": "Conținut încorporat",
-    "noBookmarks": "Fără marcaje",
-    "noSections": "Nicio secțiune configurată",
-    "noServices": "Niciun serviciu configurat",
-    "configureLocation": "Setați o locație în setările widgetului",
-    "bannerTextPlaceholder": "Textul bannerului",
-    "serviceNamePlaceholder": "Serviciul meu",
-    "emptyNote": "Notă goală...",
-    "weatherLoadFailed": "Nu s-a putut încărca vremea pentru „{{location}}”",
-    "feelsLike": "Se simte ca {{temperature}}",
-    "timezonePlaceholder": "America/New_York (lăsați necompletat pentru local)",
-    "notesPlaceholder": "Scrieți notițele aici...",
-    "locationPlaceholder": "New York, Londra, Tokyo...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Semne de carte",
-        "description": "O listă de linkuri rapide"
-      },
-      "calendar": {
-        "name": "Calendaristic",
-        "description": "Un calendar lunar cu ziua de azi evidențiată"
-      },
-      "clock": {
-        "name": "Ceas",
-        "description": "Un ceas live cu fus orar configurabil"
-      },
-      "countdown": {
-        "name": "Numărătoare inversă",
-        "description": "Numără invers până la o dată și o oră țintă"
-      },
-      "custom_api": {
-        "name": "API personalizat",
-        "description": "Preluarea și afișarea datelor din orice API JSON"
-      },
-      "dashboard_links": {
-        "name": "Linkuri către tabloul de bord",
-        "description": "Afișează linkurile către serviciile de pe tabloul de bord salvate"
-      },
-      "folder": {
-        "name": "Pliant",
-        "description": "O fișă de fundal pentru gruparea vizuală a widget-urilor"
-      },
-      "host_grid": {
-        "name": "Grilă gazdă",
-        "description": "Grilă de prezentare generală a stării în timp real pentru toate gazdele SSH"
-      },
-      "host_status": {
-        "name": "Starea gazdei",
-        "description": "Afișează starea în timp real și valorile pentru o gazdă SSH"
-      },
-      "iframe_embed": {
-        "name": "Încorporare iFrame",
-        "description": "Încorporează orice adresă URL într-un iframe"
-      },
-      "image_widget": {
-        "name": "Imagine",
-        "description": "Afișează orice imagine dintr-o adresă URL"
-      },
-      "link_tree": {
-        "name": "Arbore de legături",
-        "description": "Linkuri grupate organizate în secțiuni etichetate"
-      },
-      "markdown_notes": {
-        "name": "Note de reducere",
-        "description": "Note cu randare opțională Markdown și editare inline"
-      },
-      "notes": {
-        "name": "Note",
-        "description": "Un widget pentru note text"
-      },
-      "ping_status": {
-        "name": "Starea ping-ului",
-        "description": "Verificați dacă adresele URL sau serviciile sunt accesibile"
-      },
-      "quick_connect": {
-        "name": "Conectare rapidă",
-        "description": "Lansează terminalul, fișierele, docker-ul, tunelurile și multe altele pentru gazdele tale"
-      },
-      "recent_activity": {
-        "name": "Activitate recentă",
-        "description": "Afișează activitatea recentă a terminalului, Docker-ului, fișierelor și tunelurilor"
-      },
-      "rss_feed": {
-        "name": "Flux RSS",
-        "description": "Afișează elemente dintr-un flux RSS sau Atom"
-      },
-      "search_bar": {
-        "name": "Bara de căutare",
-        "description": "Căutare rapidă cu Google, DuckDuckGo, Bing sau un motor de căutare personalizat"
-      },
-      "search_links": {
-        "name": "Comenzi rapide de căutare",
-        "description": "Butoane rapide pentru căutare în diferite motoare de căutare"
-      },
-      "service_grid": {
-        "name": "Grilă de servicii",
-        "description": "O grilă de plăci de servicii cu pictograme și linkuri"
-      },
-      "service_link": {
-        "name": "Legătură de serviciu",
-        "description": "O dală pe care se poate da clic și care trimite la adresa URL a unui serviciu"
-      },
-      "ssh_terminal": {
-        "name": "Terminal SSH",
-        "description": "Un terminal SSH inline conectat la o gazdă configurată"
-      },
-      "system_overview": {
-        "name": "Prezentare generală a sistemului",
-        "description": "Versiunea Termix, starea bazei de date și timpul de funcționare dintr-o privire"
-      },
-      "termix_uptime": {
-        "name": "Timpul de funcționare Termix",
-        "description": "Arată de cât timp funcționează serverul Termix"
-      },
-      "text_banner": {
-        "name": "Banner text",
-        "description": "O etichetă de text stilizată pentru secțiuni și titluri"
-      },
-      "weather": {
-        "name": "Vreme",
-        "description": "Vremea în timp real pentru orice locație"
-      },
-      "docker_widget": {
-        "name": "Manager Docker",
-        "description": "Manager de containere Docker încorporat pentru o gazdă configurată"
-      },
-      "file_manager_widget": {
-        "name": "Manager de fișiere",
-        "description": "Manager de fișiere SFTP încorporat pentru o gazdă configurată"
-      },
-      "tunnel_widget": {
-        "name": "Manager de tunel",
-        "description": "Manager de tunel SSH încorporat pentru o gazdă configurată"
-      },
-      "metrics_chart": {
-        "name": "Diagrama metricilor",
-        "description": "Diagramă istorică a procesorului, memoriei, discului sau rețelei pentru o gazdă"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Folosește pagina principală",
-      "description": "Vizualizați și editați linkurile către serviciul canvas și tabloul de bord al paginii principale."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Gazde private permise",
-      "description": "Nume de gazdă/IP-uri private sau loopback exacte pentru widget-urile Ping Status și Custom API. Separați intrările cu virgule sau linii noi; omiteți schemele, porturile și căile. Spațiile goale blochează destinațiile private."
-    },
-    "privateCertificateAuthority": {
-      "label": "Autoritate de certificare privată (PEM)",
-      "description": "Pachet CA opțional de încredere pentru gazdele din lista permisă. Verificarea certificatelor rămâne activată. Lăsați câmpul gol pentru a utiliza depozitul de încredere al sistemului."
-    }
-  },
-  "plugin": {
-    "name": "Pagina principală"
-  }
-}
diff --git a/plugins/homepage/locales/translated/ru_RU.json b/plugins/homepage/locales/translated/ru_RU.json
deleted file mode 100644
index a4b4707d4..000000000
--- a/plugins/homepage/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Главная"
-  },
-  "dashboard": {
-    "serviceLinks": "Ссылки на сервисы",
-    "homepagePreview": "Предпросмотр главной страницы"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Сервисные ссылки",
-    "serviceLinksEmpty": "Пока нет сервисных ссылок",
-    "serviceLinksAdd": "Добавить",
-    "serviceLinksLabelPlaceholder": "Мой сервис",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Введите действительный веб-адрес",
-    "serviceLinksAddFailed": "Не удалось добавить сервисную ссылку"
-  },
-  "homepage": {
-    "title": "Главная страница",
-    "addWidget": "Добавить виджет",
-    "noWidgetsInCategory": "В этой категории нет виджетов.",
-    "editWidget": "Изменить виджет",
-    "zoomIn": "Приблизить",
-    "zoomOut": "Отдалить",
-    "resetView": "Сбросить вид",
-    "lockLayout": "Заблокировать макет",
-    "unlockLayout": "Разблокировать макет",
-    "noWidgets": "Нажмите правой кнопкой мыши или на +, чтобы добавить первый виджет",
-    "openFullView": "Открыть полный вид",
-    "previewTitle": "Предпросмотр домашней страницы",
-    "cancel": "Отмена",
-    "save": "Сохранить",
-    "title_label": "Название",
-    "widgetTitlePlaceholder": "Название виджета (необязательно)",
-    "url": "URL",
-    "imageUrl": "Пользовательский URL изображения",
-    "imageUrlHint": "Оставьте пустым, чтобы автоматически использовать favicon сайта",
-    "showImage": "Показывать изображение",
-    "description": "Описание",
-    "color": "Цвет",
-    "timezone": "Часовой пояс",
-    "invalidTimezone": "Неверный часовой пояс. Используйте название IANA, например, America/New_York.",
-    "showSeconds": "Показывать секунды",
-    "format12h": "12-часовой",
-    "content": "Содержимое",
-    "backgroundColor": "Цвет фона",
-    "links": "Ссылки",
-    "addLink": "Добавить ссылку",
-    "linkLabel": "Название",
-    "categoryLinks": "Ссылки",
-    "categoryInfo": "Информация",
-    "categorySystem": "Система",
-    "copyLink": "Копировать ссылку",
-    "linkCopied": "Ссылка скопирована!",
-    "location": "Местоположение",
-    "temperatureUnit": "Единица температуры",
-    "showForecast": "Показывать прогноз на 3 дня",
-    "scrolling": "Разрешить прокрутку",
-    "feedUrl": "URL ленты",
-    "maxItems": "Макс. элементов",
-    "showDescription": "Показывать описание",
-    "widgetRssName": "RSS-лента",
-    "rssNoFeedUrl": "Настройте URL-адрес ленты в параметрах виджета.",
-    "rssLoadError": "Не удалось загрузить подачу.",
-    "rssNoItems": "Нет товаров",
-    "noHostSelected": "Хост не выбран",
-    "displayedMetrics": "Отображаемые метрики",
-    "metricCpu": "ЦП",
-    "metricMemory": "Память",
-    "metricDisk": "Диск",
-    "metricUptime": "Время работы",
-    "metricSystem": "Система",
-    "metricNetwork": "Сеть",
-    "metricProcesses": "Процессы",
-    "categoryMonitoring": "Мониторинг",
-    "noPingUrls": "URL-адреса не настроены",
-    "pingLabel": "Метка",
-    "addPingUrl": "Добавить URL",
-    "showLatency": "Показать задержку",
-    "refreshInterval": "Интервал обновления",
-    "seconds": "секунд",
-    "filterActivityTypes": "Типы фильтрации",
-    "filterTypesHint": "Оставьте пустым, чтобы показать все",
-    "showTimestamp": "Показывать метку времени",
-    "uptimeUnavailable": "Время работы недоступно",
-    "uptimeLabel": "Время работы",
-    "overviewVersion": "Версия",
-    "overviewUpdateLabel": "Обновить",
-    "overviewUpdateAvailable": "Доступно обновление",
-    "overviewDatabase": "База данных",
-    "overviewUptime": "Время работы",
-    "noHosts": "Нет настроенных хостов",
-    "hostGridHosts": "Хосты",
-    "hostGridAllHint": "Оставьте пустым, чтобы показать все хосты",
-    "columns": "Колонки",
-    "showIp": "Показать IP-адрес",
-    "layout": "Макет",
-    "showStatus": "Показать статус",
-    "noActivity": "Нет активности",
-    "widgetPingStatusName": "Статус ping",
-    "widgetRecentActivityName": "Недавняя активность",
-    "sshTerminalNoHost": "Хост не настроен",
-    "sshTerminalConnect": "Подключиться",
-    "sshTerminalAutoConnect": "Автоподключение при загрузке",
-    "connectionTypes": "Типы подключений",
-    "calMon": "Пн",
-    "calTue": "Вт",
-    "calWed": "Ср",
-    "calThu": "Чт",
-    "calFri": "Пт",
-    "calSat": "Сб",
-    "calSun": "Вс",
-    "startOnMonday": "Начинать неделю с понедельника",
-    "countdownNoDate": "Целевая дата не задана",
-    "countdownPast": "Событие прошло",
-    "countdownDays": "дн.",
-    "countdownHours": "ч",
-    "countdownMinutes": "мин",
-    "countdownSeconds": "с",
-    "countdownLabel": "Название",
-    "countdownLabelPlaceholder": "например, День запуска",
-    "countdownShowDays": "Показать дни",
-    "countdownShowHours": "Показать часы",
-    "targetDate": "Целевая дата",
-    "searchEngine": "Поисковая система",
-    "customSearchUrl": "Пользовательский URL поиска",
-    "searchPlaceholder": "Поиск...",
-    "searchGo": "Искать",
-    "searchPlaceholderLabel": "Текст подсказки",
-    "searchPlaceholderHint": "Текст внутри поля поиска",
-    "openInNewTab": "Открывать в новой вкладке",
-    "searchQueryPlaceholder": "Введите запрос...",
-    "noSearchShortcuts": "Нет ярлыков поиска",
-    "addSearchShortcut": "Добавить ярлык",
-    "fontSize": "Размер шрифта",
-    "textAlign": "Выравнивание текста",
-    "fontWeight": "Жирность шрифта",
-    "clearColor": "Очистить цвет",
-    "imageFit": "Вписывание изображения",
-    "imageLinkUrl": "URL ссылки",
-    "noImage": "URL изображения не задан",
-    "altText": "Альтернативный текст",
-    "altTextPlaceholder": "Опишите изображение",
-    "renderMarkdown": "Отображать Markdown",
-    "displayMode": "Режим отображения",
-    "displayField": "Отображаемое поле",
-    "jsonPath": "Путь JSON",
-    "customApiLabel": "Название",
-    "customApiLabelPlaceholder": "например, Температура",
-    "customApiUnit": "Единица измерения",
-    "customApiNoUrl": "URL API не настроен",
-    "customApiError": "Не удалось загрузить данные",
-    "customApiNotArray": "Ответ не является массивом",
-    "addService": "Добавить сервис",
-    "showLabels": "Показывать метки",
-    "iconSize": "Размер иконок",
-    "noDashboardLinks": "Нет настроенных ссылок на панель",
-    "noLimit": "Без лимита",
-    "sectionHeading": "Заголовок раздела",
-    "addSection": "Добавить раздел",
-    "compactMode": "Компактный режим",
-    "selectHosts": "Выбрать хосты",
-    "listLayout": "Список",
-    "gridLayout": "Сетка",
-    "configureUrl": "Укажите URL-адрес в настройках виджета.",
-    "embeddedContent": "Встроенный контент",
-    "noBookmarks": "Закладок нет",
-    "noSections": "Разделы не настроены",
-    "noServices": "Сервисы не настроены",
-    "configureLocation": "Укажите местоположение в настройках виджета.",
-    "bannerTextPlaceholder": "Текст баннера",
-    "serviceNamePlaceholder": "Моя услуга",
-    "emptyNote": "Пустая записка...",
-    "weatherLoadFailed": "Не удалось загрузить погоду для \"{{location}}\"",
-    "feelsLike": "Ощущение, будто {{temperature}}",
-    "timezonePlaceholder": "America/New_York (оставьте поле пустым для местного адреса)",
-    "notesPlaceholder": "Запишите свои заметки здесь...",
-    "locationPlaceholder": "Нью-Йорк, Лондон, Токио...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Закладки",
-        "description": "Список быстрых ссылок"
-      },
-      "calendar": {
-        "name": "Календарь",
-        "description": "Календарь на месяц с выделенным сегодняшним днем."
-      },
-      "clock": {
-        "name": "Часы",
-        "description": "Часы с настраиваемым часовым поясом"
-      },
-      "countdown": {
-        "name": "Обратный отсчёт",
-        "description": "Обратный отсчет до целевой даты и времени."
-      },
-      "custom_api": {
-        "name": "Пользовательский API",
-        "description": "Получать и отображать данные из любого JSON API"
-      },
-      "dashboard_links": {
-        "name": "Ссылки панели управления",
-        "description": "Отображает сохраненные ссылки на сервисы панели управления."
-      },
-      "folder": {
-        "name": "Папка",
-        "description": "Фоновая карточка для визуальной группировки виджетов."
-      },
-      "host_grid": {
-        "name": "Сетка хостов",
-        "description": "Сетка с обзором текущего состояния всех ваших SSH-хостов."
-      },
-      "host_status": {
-        "name": "Статус хоста",
-        "description": "Отображает текущий статус и метрики SSH-хоста."
-      },
-      "iframe_embed": {
-        "name": "Встраивание iFrame",
-        "description": "Встраивает любой URL в iframe"
-      },
-      "image_widget": {
-        "name": "Образ",
-        "description": "Отобразить любое изображение по URL-адресу"
-      },
-      "link_tree": {
-        "name": "Дерево ссылок",
-        "description": "Сгруппированные ссылки, организованные по разделам с соответствующими метками."
-      },
-      "markdown_notes": {
-        "name": "Заметки Markdown",
-        "description": "Примечания с возможностью отображения в формате Markdown и редактирования непосредственно в тексте."
-      },
-      "notes": {
-        "name": "Заметки",
-        "description": "Виджет для текстовых заметок"
-      },
-      "ping_status": {
-        "name": "Статус ping",
-        "description": "Проверьте, доступны ли URL-адреса или сервисы."
-      },
-      "quick_connect": {
-        "name": "Быстрое подключение",
-        "description": "Запускайте терминал, файлы, Docker, туннели и многое другое для ваших хостов."
-      },
-      "recent_activity": {
-        "name": "Недавняя активность",
-        "description": "Отображает недавнюю активность в терминале, Docker, файлах и туннелях."
-      },
-      "rss_feed": {
-        "name": "RSS-лента",
-        "description": "Отображает элементы из ленты RSS или Atom"
-      },
-      "search_bar": {
-        "name": "Строка поиска",
-        "description": "Быстрый поиск с помощью Google, DuckDuckGo, Bing или собственной поисковой системы."
-      },
-      "search_links": {
-        "name": "Поисковые ярлыки",
-        "description": "Кнопки быстрого доступа для поиска в различных поисковых системах."
-      },
-      "service_grid": {
-        "name": "Сетка сервисов",
-        "description": "Сетка сервисных плиток с иконками и ссылками."
-      },
-      "service_link": {
-        "name": "Ссылка на сервис",
-        "description": "Кликабельная плитка, ведущая на URL сервиса"
-      },
-      "ssh_terminal": {
-        "name": "SSH Терминал",
-        "description": "Встроенный SSH-терминал, подключённый к настроенному хосту"
-      },
-      "system_overview": {
-        "name": "Обзор системы",
-        "description": "Краткий обзор версии Termix, состояния базы данных и времени безотказной работы."
-      },
-      "termix_uptime": {
-        "name": "Время работы Termix",
-        "description": "Показывает, как долго работает сервер Termix."
-      },
-      "text_banner": {
-        "name": "Текстовый баннер",
-        "description": "Стильная текстовая метка для разделов и заголовков."
-      },
-      "weather": {
-        "name": "Погода",
-        "description": "Актуальная погода для любого местоположения"
-      },
-      "docker_widget": {
-        "name": "Менеджер Docker",
-        "description": "Встроенный менеджер контейнеров Docker для настроенного хоста"
-      },
-      "file_manager_widget": {
-        "name": "Файловый менеджер",
-        "description": "Встроенный файловый менеджер по SFTP для настроенного хоста"
-      },
-      "tunnel_widget": {
-        "name": "Менеджер туннелей",
-        "description": "Встроенный менеджер SSH-туннелей для настроенного хоста"
-      },
-      "metrics_chart": {
-        "name": "График метрик",
-        "description": "Историческая диаграмма использования ЦП, памяти, диска или сети для хоста."
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Воспользуйтесь главной страницей",
-      "description": "Просматривайте и редактируйте ссылки на холст главной страницы и панель управления."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Разрешены частные хосты",
-      "description": "Точные частные или зацикленные имена хостов/IP-адреса для виджетов Ping Status и Custom API. Разделяйте записи запятыми или символами новой строки; схемы, порты и пути опускайте. Пустые блоки указывают частные адреса назначения."
-    },
-    "privateCertificateAuthority": {
-      "label": "Частный центр сертификации (PEM)",
-      "description": "Дополнительный пакет доверенных центров сертификации для хостов из списка разрешенных. Проверка сертификатов остается включенной. Оставьте поле пустым, чтобы использовать системное хранилище доверенных сертификатов."
-    }
-  },
-  "plugin": {
-    "name": "Главная"
-  }
-}
diff --git a/plugins/homepage/locales/translated/sr_SP.json b/plugins/homepage/locales/translated/sr_SP.json
deleted file mode 100644
index a24ecbbb1..000000000
--- a/plugins/homepage/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Почетна страница"
-  },
-  "dashboard": {
-    "serviceLinks": "Линкови услуга",
-    "homepagePreview": "Преглед почетне странице"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Линкови услуга",
-    "serviceLinksEmpty": "Још нема линкова за услуге",
-    "serviceLinksAdd": "Додај",
-    "serviceLinksLabelPlaceholder": "Моја услуга",
-    "serviceLinksUrlPlaceholder": "хттп://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Унесите важећу веб адресу",
-    "serviceLinksAddFailed": "Додавање линка услуге није успело"
-  },
-  "homepage": {
-    "title": "Почетна страница",
-    "addWidget": "Додај виџет",
-    "noWidgetsInCategory": "Нема виџета у овој категорији",
-    "editWidget": "Измени виџет",
-    "zoomIn": "Увећај",
-    "zoomOut": "Умањи",
-    "resetView": "Ресетуј приказ",
-    "lockLayout": "Закључај распоред",
-    "unlockLayout": "Откључај распоред",
-    "noWidgets": "Кликните десним тастером миша или кликните на + да бисте додали свој први виџет",
-    "openFullView": "Отвори цео приказ",
-    "previewTitle": "Преглед почетне странице",
-    "cancel": "Откажи",
-    "save": "Сачувај",
-    "title_label": "Наслов",
-    "widgetTitlePlaceholder": "Наслов виџета (опционо)",
-    "url": "URL",
-    "imageUrl": "Прилагођени URL слике",
-    "imageUrlHint": "Оставите празно да бисте аутоматски користили фавикон сајта",
-    "showImage": "Прикажи слику",
-    "description": "Опис",
-    "color": "Боја",
-    "timezone": "Временска зона",
-    "invalidTimezone": "Неважећа временска зона. Користите IANA назив као што је Америка/Њујорк",
-    "showSeconds": "Прикажи секунде",
-    "format12h": "12 сати",
-    "content": "Садржај",
-    "backgroundColor": "Боја позадине",
-    "links": "Линкови",
-    "addLink": "Додај линк",
-    "linkLabel": "Ознака",
-    "categoryLinks": "Линкови",
-    "categoryInfo": "Информације",
-    "categorySystem": "Систем",
-    "copyLink": "Копирај линк",
-    "linkCopied": "Линк копиран!",
-    "location": "Локација",
-    "temperatureUnit": "Јединица за температуру",
-    "showForecast": "Прикажи тродневну прогнозу",
-    "scrolling": "Дозволи скроловање",
-    "feedUrl": "URL фида",
-    "maxItems": "Максималан број ставки",
-    "showDescription": "Прикажи опис",
-    "widgetRssName": "RSS фид",
-    "rssNoFeedUrl": "Конфигуришите URL фида у подешавањима виџета",
-    "rssLoadError": "Није могуће учитати фид",
-    "rssNoItems": "Нема артикала",
-    "noHostSelected": "Није изабран домаћин",
-    "displayedMetrics": "Приказане метрике",
-    "metricCpu": "Процесор",
-    "metricMemory": "Памћење",
-    "metricDisk": "Диск",
-    "metricUptime": "Време непрекидног рада",
-    "metricSystem": "Систем",
-    "metricNetwork": "Мрежа",
-    "metricProcesses": "Процеси",
-    "categoryMonitoring": "Праћење",
-    "noPingUrls": "Није конфигурисан ниједан URL",
-    "pingLabel": "Ознака",
-    "addPingUrl": "Додај URL",
-    "showLatency": "Прикажи латенцију",
-    "refreshInterval": "Интервал освежавања",
-    "seconds": "секунде",
-    "filterActivityTypes": "Типови филтера",
-    "filterTypesHint": "Оставите празно да бисте видели све",
-    "showTimestamp": "Прикажи временску ознаку",
-    "uptimeUnavailable": "Време непрекидног рада није доступно",
-    "uptimeLabel": "Време непрекидног рада",
-    "overviewVersion": "Верзија",
-    "overviewUpdateLabel": "Ажурирање",
-    "overviewUpdateAvailable": "Ажурирање је доступно",
-    "overviewDatabase": "База података",
-    "overviewUptime": "Време непрекидног рада",
-    "noHosts": "Ниједан хост није конфигурисан",
-    "hostGridHosts": "Домаћини",
-    "hostGridAllHint": "Оставите празно да бисте приказали све хостове",
-    "columns": "Колоне",
-    "showIp": "Прикажи ИП адресу",
-    "layout": "Распоред",
-    "showStatus": "Прикажи статус",
-    "noActivity": "Нема активности",
-    "widgetPingStatusName": "Статус пинга",
-    "widgetRecentActivityName": "Недавне активности",
-    "sshTerminalNoHost": "Није конфигурисан хост",
-    "sshTerminalConnect": "Повежи се",
-    "sshTerminalAutoConnect": "Аутоматско повезивање при учитавању",
-    "connectionTypes": "Типови повезивања",
-    "calMon": "Мо",
-    "calTue": "Уто",
-    "calWed": "Ми",
-    "calThu": "Чет",
-    "calFri": "Пет",
-    "calSat": "Са",
-    "calSun": "Су",
-    "startOnMonday": "Почетак недеље у понедељак",
-    "countdownNoDate": "Није одређен циљни датум",
-    "countdownPast": "Догађај је прошао",
-    "countdownDays": "дана",
-    "countdownHours": "сати",
-    "countdownMinutes": "мин",
-    "countdownSeconds": "сек",
-    "countdownLabel": "Ознака",
-    "countdownLabelPlaceholder": "нпр. Дан лансирања",
-    "countdownShowDays": "Дани емисије",
-    "countdownShowHours": "Радно време емисије",
-    "targetDate": "Циљни датум",
-    "searchEngine": "Претраживач",
-    "customSearchUrl": "URL прилагођене претраге",
-    "searchPlaceholder": "Претрага...",
-    "searchGo": "Иди",
-    "searchPlaceholderLabel": "Текст резервисаног места",
-    "searchPlaceholderHint": "Текст приказан унутар поља за претрагу",
-    "openInNewTab": "Отвори у новој картици",
-    "searchQueryPlaceholder": "Унесите упит...",
-    "noSearchShortcuts": "Ниједна пречица није конфигурисана",
-    "addSearchShortcut": "Додај пречицу",
-    "fontSize": "Величина фонта",
-    "textAlign": "Поравнање текста",
-    "fontWeight": "Дебљина фонта",
-    "clearColor": "Чиста боја",
-    "imageFit": "Уклапање слике",
-    "imageLinkUrl": "URL линка",
-    "noImage": "Није подешен URL слике",
-    "altText": "Алтернативни текст",
-    "altTextPlaceholder": "Опишите слику",
-    "renderMarkdown": "Рендеровање маркдауна",
-    "displayMode": "Режим приказа",
-    "displayField": "Поље за приказ",
-    "jsonPath": "JSON путања",
-    "customApiLabel": "Ознака",
-    "customApiLabelPlaceholder": "нпр. Температура",
-    "customApiUnit": "Јединица",
-    "customApiNoUrl": "Није конфигурисан API URL",
-    "customApiError": "Преузимање није успело",
-    "customApiNotArray": "Одговор није низ",
-    "addService": "Додај услугу",
-    "showLabels": "Прикажи ознаке",
-    "iconSize": "Величина иконе",
-    "noDashboardLinks": "Није конфигурисан ниједан линк до контролне табле",
-    "noLimit": "Без ограничења",
-    "sectionHeading": "Наслов одељка",
-    "addSection": "Додај одељак",
-    "compactMode": "Компактни режим",
-    "selectHosts": "Изаберите хостове",
-    "listLayout": "Листа",
-    "gridLayout": "Мрежа",
-    "configureUrl": "Подесите URL у подешавањима виџета",
-    "embeddedContent": "Уграђени садржај",
-    "noBookmarks": "Нема обележивача",
-    "noSections": "Није подешен ниједан одељак",
-    "noServices": "Није подешена ниједна услуга",
-    "configureLocation": "Подесите локацију у подешавањима виџета",
-    "bannerTextPlaceholder": "Текст банера",
-    "serviceNamePlaceholder": "Моја услуга",
-    "emptyNote": "Празна белешка...",
-    "weatherLoadFailed": "Није могуће учитати временску прогнозу за „{{location}}“",
-    "feelsLike": "Осећа се као {{temperature}}",
-    "timezonePlaceholder": "Америка/Њујорк (оставите празно за локално)",
-    "notesPlaceholder": "Овде напишите своје белешке...",
-    "locationPlaceholder": "Њујорк, Лондон, Токио...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Обележивачи",
-        "description": "Листа брзих линкова"
-      },
-      "calendar": {
-        "name": "Календар",
-        "description": "Месечни календар са истакнутим данашњим даном"
-      },
-      "clock": {
-        "name": "Сат",
-        "description": "Сат уживо са подесивом временском зоном"
-      },
-      "countdown": {
-        "name": "Одбројавање",
-        "description": "Одбројава до циљног датума и времена"
-      },
-      "custom_api": {
-        "name": "Прилагођени API",
-        "description": "Преузмите и прикажите податке из било ког JSON API-ја"
-      },
-      "dashboard_links": {
-        "name": "Линкови на контролној табли",
-        "description": "Приказује ваше сачуване линкове услуга на контролној табли"
-      },
-      "folder": {
-        "name": "Фасцикла",
-        "description": "Позадинска картица за визуелно груписање виџета"
-      },
-      "host_grid": {
-        "name": "Хост мрежа",
-        "description": "Прегледна мрежа статуса уживо за све ваше SSH хостове"
-      },
-      "host_status": {
-        "name": "Статус домаћина",
-        "description": "Приказује статус уживо и метрике за SSH хост"
-      },
-      "iframe_embed": {
-        "name": "Уграђивање iFrame-а",
-        "description": "Уградите било који URL у iframe"
-      },
-      "image_widget": {
-        "name": "Слика",
-        "description": "Прикажите било коју слику са URL-а"
-      },
-      "link_tree": {
-        "name": "Стабло веза",
-        "description": "Груписане везе организоване у означене одељке"
-      },
-      "markdown_notes": {
-        "name": "Белешке о маркдауну",
-        "description": "Белешке са опционим рендеровањем у Markdown формату и уређивањем у тексту"
-      },
-      "notes": {
-        "name": "Белешке",
-        "description": "Виџет за текстуалне белешке"
-      },
-      "ping_status": {
-        "name": "Статус пинга",
-        "description": "Проверите да ли су URL-ови или сервиси доступни"
-      },
-      "quick_connect": {
-        "name": "Брзо повезивање",
-        "description": "Покрените терминал, датотеке, докер, тунеле и још много тога за ваше хостове"
-      },
-      "recent_activity": {
-        "name": "Недавне активности",
-        "description": "Приказује недавне активности терминала, Докера, датотека и тунела"
-      },
-      "rss_feed": {
-        "name": "RSS фид",
-        "description": "Приказ ставке из RSS или Atom фида"
-      },
-      "search_bar": {
-        "name": "Трака за претрагу",
-        "description": "Брза претрага помоћу Google-а, DuckDuckGo-а, Bing-а или прилагођеног претраживача"
-      },
-      "search_links": {
-        "name": "Пречице за претрагу",
-        "description": "Брза дугмад за претрагу различитих претраживача"
-      },
-      "service_grid": {
-        "name": "Сервисна мрежа",
-        "description": "Мрежа плочица услуга са иконама и линковима"
-      },
-      "service_link": {
-        "name": "Веза са услугом",
-        "description": "Плочица на коју се може кликнути и која води до URL-а услуге"
-      },
-      "ssh_terminal": {
-        "name": "SSH терминал",
-        "description": "Уграђени SSH терминал повезан са конфигурисаним хостом"
-      },
-      "system_overview": {
-        "name": "Преглед система",
-        "description": "Верзија Termix-а, стање базе података и време рада на први поглед"
-      },
-      "termix_uptime": {
-        "name": "Време непрекидног рада Термикса",
-        "description": "Приказује колико дуго је Термикс сервер покренут"
-      },
-      "text_banner": {
-        "name": "Текстуални банер",
-        "description": "Стилизована текстуална ознака за одељке и наслове"
-      },
-      "weather": {
-        "name": "Време",
-        "description": "Време уживо за било коју локацију"
-      },
-      "docker_widget": {
-        "name": "Докер менаџер",
-        "description": "Уграђени Docker менаџер контејнера за конфигурисани хост"
-      },
-      "file_manager_widget": {
-        "name": "Менаџер датотека",
-        "description": "Уграђени SFTP менаџер датотека за конфигурисани хост"
-      },
-      "tunnel_widget": {
-        "name": "Управник тунела",
-        "description": "Уграђени SSH менаџер тунела за конфигурисани хост"
-      },
-      "metrics_chart": {
-        "name": "Графикон метрика",
-        "description": "Историјски графикон процесора, меморије, диска или мреже за хост"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Користите почетну страницу",
-      "description": "Прегледајте и уредите линкове за услуге на почетној страници и контролној табли."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Дозвољени приватни хостови",
-      "description": "Тачна приватна или повратна имена/ИП адресе хостова за Ping Status и Custom API виџете. Одвојите уносе зарезима или новим редовима; изоставите шеме, портове и путање. Празно блокира приватне дестинације."
-    },
-    "privateCertificateAuthority": {
-      "label": "Приватни ауторитет за сертификате (PEM)",
-      "description": "Опциони пакет поузданих CA сертификата за хостове са дозвољене листе. Верификација сертификата остаје омогућена. Оставите празно да бисте користили складиште поузданих сертификата система."
-    }
-  },
-  "plugin": {
-    "name": "Почетна страница"
-  }
-}
diff --git a/plugins/homepage/locales/translated/sv_SE.json b/plugins/homepage/locales/translated/sv_SE.json
deleted file mode 100644
index 7a0cd8595..000000000
--- a/plugins/homepage/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Hemsida"
-  },
-  "dashboard": {
-    "serviceLinks": "Servicelänkar",
-    "homepagePreview": "Förhandsvisning av startsidan"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Servicelänkar",
-    "serviceLinksEmpty": "Inga tjänstelänkar ännu",
-    "serviceLinksAdd": "Tillägga",
-    "serviceLinksLabelPlaceholder": "Min tjänst",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Ange en giltig webbadress",
-    "serviceLinksAddFailed": "Misslyckades med att lägga till tjänstelänk"
-  },
-  "homepage": {
-    "title": "Hemsida",
-    "addWidget": "Lägg till widget",
-    "noWidgetsInCategory": "Inga widgetar i den här kategorin",
-    "editWidget": "Redigera widget",
-    "zoomIn": "Zooma in",
-    "zoomOut": "Zooma ut",
-    "resetView": "Återställ vy",
-    "lockLayout": "Låslayout",
-    "unlockLayout": "Lås upp layouten",
-    "noWidgets": "Högerklicka eller klicka på + för att lägga till din första widget",
-    "openFullView": "Öppna helvy",
-    "previewTitle": "Förhandsvisning av startsidan",
-    "cancel": "Avboka",
-    "save": "Spara",
-    "title_label": "Titel",
-    "widgetTitlePlaceholder": "Widgettitel (valfritt)",
-    "url": "URL",
-    "imageUrl": "Anpassad bild-URL",
-    "imageUrlHint": "Lämna tomt för att använda webbplatsens favicon automatiskt",
-    "showImage": "Visa bild",
-    "description": "Beskrivning",
-    "color": "Färg",
-    "timezone": "Tidszon",
-    "invalidTimezone": "Ogiltig tidszon. Använd ett IANA-namn som America/New_York",
-    "showSeconds": "Visa sekunder",
-    "format12h": "12-timmars",
-    "content": "Innehåll",
-    "backgroundColor": "Bakgrundsfärg",
-    "links": "Länkar",
-    "addLink": "Lägg till länk",
-    "linkLabel": "Märka",
-    "categoryLinks": "Länkar",
-    "categoryInfo": "Info",
-    "categorySystem": "System",
-    "copyLink": "Kopiera länk",
-    "linkCopied": "Länk kopierad!",
-    "location": "Plats",
-    "temperatureUnit": "Temperaturenhet",
-    "showForecast": "Visa 3-dagarsprognos",
-    "scrolling": "Tillåt rullning",
-    "feedUrl": "Flödes-URL",
-    "maxItems": "Max antal artiklar",
-    "showDescription": "Visa beskrivning",
-    "widgetRssName": "RSS-flöde",
-    "rssNoFeedUrl": "Konfigurera en flödes-URL i widgetinställningarna",
-    "rssLoadError": "Kunde inte läsa in flödet",
-    "rssNoItems": "Inga artiklar",
-    "noHostSelected": "Ingen värd vald",
-    "displayedMetrics": "Visade mätvärden",
-    "metricCpu": "CPU",
-    "metricMemory": "Minne",
-    "metricDisk": "Disk",
-    "metricUptime": "Drifttid",
-    "metricSystem": "System",
-    "metricNetwork": "Nätverk",
-    "metricProcesses": "Processer",
-    "categoryMonitoring": "Övervakning",
-    "noPingUrls": "Inga webbadresser konfigurerade",
-    "pingLabel": "Märka",
-    "addPingUrl": "Lägg till URL",
-    "showLatency": "Visa latens",
-    "refreshInterval": "Uppdateringsintervall",
-    "seconds": "sekunder",
-    "filterActivityTypes": "Filtertyper",
-    "filterTypesHint": "Lämna tomt för att visa alla",
-    "showTimestamp": "Visa tidsstämpel",
-    "uptimeUnavailable": "Drifttid otillgänglig",
-    "uptimeLabel": "Drifttid",
-    "overviewVersion": "Version",
-    "overviewUpdateLabel": "Uppdatera",
-    "overviewUpdateAvailable": "Uppdatering tillgänglig",
-    "overviewDatabase": "Databas",
-    "overviewUptime": "Drifttid",
-    "noHosts": "Inga värdar konfigurerade",
-    "hostGridHosts": "Värdar",
-    "hostGridAllHint": "Lämna tomt för att visa alla värdar",
-    "columns": "Kolumner",
-    "showIp": "Visa IP-adress",
-    "layout": "Layout",
-    "showStatus": "Visa status",
-    "noActivity": "Ingen aktivitet",
-    "widgetPingStatusName": "Pingstatus",
-    "widgetRecentActivityName": "Senaste aktivitet",
-    "sshTerminalNoHost": "Ingen värd konfigurerad",
-    "sshTerminalConnect": "Ansluta",
-    "sshTerminalAutoConnect": "Automatisk anslutning vid laddning",
-    "connectionTypes": "Anslutningstyper",
-    "calMon": "Må",
-    "calTue": "Tis",
-    "calWed": "Vi",
-    "calThu": "To",
-    "calFri": "Fr",
-    "calSat": "Lör",
-    "calSun": "Sö",
-    "startOnMonday": "Börja veckan på måndag",
-    "countdownNoDate": "Inget måldatum angivet",
-    "countdownPast": "Händelsen har passerat",
-    "countdownDays": "dagar",
-    "countdownHours": "timmar",
-    "countdownMinutes": "min",
-    "countdownSeconds": "sek",
-    "countdownLabel": "Märka",
-    "countdownLabelPlaceholder": "t.ex. lanseringsdagen",
-    "countdownShowDays": "Visa dagar",
-    "countdownShowHours": "Visa öppettider",
-    "targetDate": "Måldatum",
-    "searchEngine": "Sökmotor",
-    "customSearchUrl": "Anpassad sök-URL",
-    "searchPlaceholder": "Söka...",
-    "searchGo": "Gå",
-    "searchPlaceholderLabel": "Platshållartext",
-    "searchPlaceholderHint": "Text som visas inuti sökinmatningen",
-    "openInNewTab": "Öppna i ny flik",
-    "searchQueryPlaceholder": "Ange fråga...",
-    "noSearchShortcuts": "Inga genvägar konfigurerade",
-    "addSearchShortcut": "Lägg till genväg",
-    "fontSize": "Fontstorlek",
-    "textAlign": "Textjustering",
-    "fontWeight": "Teckensnittsvikt",
-    "clearColor": "Klar färg",
-    "imageFit": "Bildanpassning",
-    "imageLinkUrl": "Länk-URL",
-    "noImage": "Ingen bild-URL angiven",
-    "altText": "Alternativtext",
-    "altTextPlaceholder": "Beskriv bilden",
-    "renderMarkdown": "Rendera Markdown",
-    "displayMode": "Visningsläge",
-    "displayField": "Visningsfält",
-    "jsonPath": "JSON-sökväg",
-    "customApiLabel": "Märka",
-    "customApiLabelPlaceholder": "t.ex. temperatur",
-    "customApiUnit": "Enhet",
-    "customApiNoUrl": "Ingen API-URL konfigurerad",
-    "customApiError": "Misslyckades med att hämta",
-    "customApiNotArray": "Svaret är inte en array",
-    "addService": "Lägg till tjänst",
-    "showLabels": "Visa etiketter",
-    "iconSize": "Ikonstorlek",
-    "noDashboardLinks": "Inga länkar till instrumentpanelen konfigurerade",
-    "noLimit": "Ingen gräns",
-    "sectionHeading": "Avsnittsrubrik",
-    "addSection": "Lägg till avsnitt",
-    "compactMode": "Kompaktläge",
-    "selectHosts": "Välj värdar",
-    "listLayout": "Lista",
-    "gridLayout": "Rutnät",
-    "configureUrl": "Ange en URL i widgetinställningarna",
-    "embeddedContent": "Inbäddat innehåll",
-    "noBookmarks": "Inga bokmärken",
-    "noSections": "Inga sektioner har konfigurerats",
-    "noServices": "Inga tjänster konfigurerade",
-    "configureLocation": "Ange en plats i widgetinställningarna",
-    "bannerTextPlaceholder": "Bannertext",
-    "serviceNamePlaceholder": "Min tjänst",
-    "emptyNote": "Tom anteckning...",
-    "weatherLoadFailed": "Kunde inte ladda väder för \"{{location}}\"",
-    "feelsLike": "Känns som {{temperature}}",
-    "timezonePlaceholder": "Amerika/New_York (lämna tomt för lokalt)",
-    "notesPlaceholder": "Skriv dina anteckningar här...",
-    "locationPlaceholder": "New York, London, Tokyo...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Bokmärken",
-        "description": "En lista med snabblänkar"
-      },
-      "calendar": {
-        "name": "Kalender",
-        "description": "En månadskalender med idag markerad"
-      },
-      "clock": {
-        "name": "Klocka",
-        "description": "En liveklocka med konfigurerbar tidszon"
-      },
-      "countdown": {
-        "name": "Nedräkning",
-        "description": "Räknar ner till ett måldatum och en måltid"
-      },
-      "custom_api": {
-        "name": "Anpassat API",
-        "description": "Hämta och visa data från valfritt JSON API"
-      },
-      "dashboard_links": {
-        "name": "Länkar till instrumentpanelen",
-        "description": "Visar dina sparade länkar till instrumentpanelens tjänster"
-      },
-      "folder": {
-        "name": "Mapp",
-        "description": "Ett bakgrundskort för att gruppera widgetar visuellt"
-      },
-      "host_grid": {
-        "name": "Värdnät",
-        "description": "Översiktsruta för livestatus för alla dina SSH-värdar"
-      },
-      "host_status": {
-        "name": "Värdstatus",
-        "description": "Visar livestatus och mätvärden för en SSH-värd"
-      },
-      "iframe_embed": {
-        "name": "iFrame-bäddning",
-        "description": "Bädda in valfri URL i en iframe"
-      },
-      "image_widget": {
-        "name": "Bild",
-        "description": "Visa valfri bild från en URL"
-      },
-      "link_tree": {
-        "name": "Länkträd",
-        "description": "Grupperade länkar organiserade i märkta avsnitt"
-      },
-      "markdown_notes": {
-        "name": "Nedskrivningsanteckningar",
-        "description": "Anteckningar med valfri Markdown-rendering och inline-redigering"
-      },
-      "notes": {
-        "name": "Anteckningar",
-        "description": "En widget för textanteckningar"
-      },
-      "ping_status": {
-        "name": "Pingstatus",
-        "description": "Kontrollera om webbadresser eller tjänster är nåbara"
-      },
-      "quick_connect": {
-        "name": "Snabbanslutning",
-        "description": "Starta terminal, filer, docker, tunnlar och mer för dina värdar"
-      },
-      "recent_activity": {
-        "name": "Senaste aktivitet",
-        "description": "Visar den senaste terminal-, Docker-, fil- och tunnelaktiviteten"
-      },
-      "rss_feed": {
-        "name": "RSS-flöde",
-        "description": "Visa objekt från ett RSS- eller Atom-flöde"
-      },
-      "search_bar": {
-        "name": "Sökfält",
-        "description": "Snabbsökning med Google, DuckDuckGo, Bing eller en anpassad sökmotor"
-      },
-      "search_links": {
-        "name": "Sökgenvägar",
-        "description": "Snabbknappar för att söka i olika motorer"
-      },
-      "service_grid": {
-        "name": "Servicenät",
-        "description": "Ett rutnät med servicerutor med ikoner och länkar"
-      },
-      "service_link": {
-        "name": "Servicelänk",
-        "description": "En klickbar panel som länkar till en tjänst-URL"
-      },
-      "ssh_terminal": {
-        "name": "SSH-terminal",
-        "description": "En inline SSH-terminal ansluten till en konfigurerad värd"
-      },
-      "system_overview": {
-        "name": "Systemöversikt",
-        "description": "Termix-version, databasstatus och drifttid i korthet"
-      },
-      "termix_uptime": {
-        "name": "Termix drifttid",
-        "description": "Visar hur länge Termix-servern har varit igång"
-      },
-      "text_banner": {
-        "name": "Textbanner",
-        "description": "En stiliserad textetikett för avsnitt och rubriker"
-      },
-      "weather": {
-        "name": "Väder",
-        "description": "Liveväder för alla platser"
-      },
-      "docker_widget": {
-        "name": "Docker Manager",
-        "description": "Inbäddad Docker-containerhanterare för en konfigurerad värd"
-      },
-      "file_manager_widget": {
-        "name": "Filhanteraren",
-        "description": "Inbäddad SFTP-filhanterare för en konfigurerad värd"
-      },
-      "tunnel_widget": {
-        "name": "Tunnelchef",
-        "description": "Inbäddad SSH-tunnelhanterare för en konfigurerad värd"
-      },
-      "metrics_chart": {
-        "name": "Mätvärdena Diagram",
-        "description": "Historiskt diagram över CPU, minne, disk eller nätverk för en värd"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Använd startsidan",
-      "description": "Visa och redigera länkarna till startsidans arbetsyta och instrumentpanelstjänsten."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Tillåtna privata värdar",
-      "description": "Exakta privata eller loopback-värdnamn/IP-adresser för Pingstatus och anpassade API-widgetar. Separera poster med kommatecken eller radbrytning; uteslut scheman, portar och sökvägar. Tomma block för privata destinationer."
-    },
-    "privateCertificateAuthority": {
-      "label": "Privat certifikatutfärdare (PEM)",
-      "description": "Valfritt paket med betrodda certifikatutfärdare för godkända värdar. Certifikatverifiering förblir aktiverad. Lämna tomt för att använda systemets förtroendearkiv."
-    }
-  },
-  "plugin": {
-    "name": "Hemsida"
-  }
-}
diff --git a/plugins/homepage/locales/translated/th_TH.json b/plugins/homepage/locales/translated/th_TH.json
deleted file mode 100644
index bfce1efc3..000000000
--- a/plugins/homepage/locales/translated/th_TH.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "หน้าแรก"
-  },
-  "dashboard": {
-    "serviceLinks": "ลิงก์บริการ",
-    "homepagePreview": "ตัวอย่างหน้าแรก"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "ลิงก์บริการ",
-    "serviceLinksEmpty": "ยังไม่มีลิงก์บริการ",
-    "serviceLinksAdd": "เพิ่ม",
-    "serviceLinksLabelPlaceholder": "บริการของฉัน",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "ป้อนที่อยู่เว็บที่ถูกต้อง",
-    "serviceLinksAddFailed": "ไม่สามารถเพิ่มลิงก์บริการได้"
-  },
-  "homepage": {
-    "title": "หน้าแรก",
-    "addWidget": "เพิ่มวิดเจ็ต",
-    "noWidgetsInCategory": "ไม่มีวิดเจ็ตในหมวดหมู่นี้",
-    "editWidget": "แก้ไขวิดเจ็ต",
-    "zoomIn": "ซูมเข้า",
-    "zoomOut": "ซูมออก",
-    "resetView": "รีเซ็ตมุมมอง",
-    "lockLayout": "การจัดวางล็อค",
-    "unlockLayout": "ปลดล็อกเค้าโครง",
-    "noWidgets": "คลิกขวาหรือคลิก + เพื่อเพิ่มวิดเจ็ตแรกของคุณ",
-    "openFullView": "เปิดดูแบบเต็มหน้าจอ",
-    "previewTitle": "ตัวอย่างหน้าแรก",
-    "cancel": "ยกเลิก",
-    "save": "บันทึก",
-    "title_label": "ชื่อ",
-    "widgetTitlePlaceholder": "ชื่อวิดเจ็ต (ไม่บังคับ)",
-    "url": "URL",
-    "imageUrl": "URL รูปภาพแบบกำหนดเอง",
-    "imageUrlHint": "เว้นว่างไว้เพื่อใช้ไอคอนเว็บไซต์โดยอัตโนมัติ",
-    "showImage": "แสดงภาพ",
-    "description": "คำอธิบาย",
-    "color": "สี",
-    "timezone": "เขตเวลา",
-    "invalidTimezone": "เขตเวลาไม่ถูกต้อง กรุณาใช้ชื่อ IANA เช่น America/New_York",
-    "showSeconds": "แสดงวินาที",
-    "format12h": "12 ชั่วโมง",
-    "content": "เนื้อหา",
-    "backgroundColor": "สีพื้นหลัง",
-    "links": "ลิงก์",
-    "addLink": "เพิ่มลิงก์",
-    "linkLabel": "ฉลาก",
-    "categoryLinks": "ลิงก์",
-    "categoryInfo": "ข้อมูล",
-    "categorySystem": "ระบบ",
-    "copyLink": "คัดลอกลิงก์",
-    "linkCopied": "คัดลอกลิงก์เรียบร้อยแล้ว!",
-    "location": "ที่ตั้ง",
-    "temperatureUnit": "หน่วยอุณหภูมิ",
-    "showForecast": "แสดงพยากรณ์อากาศ 3 วัน",
-    "scrolling": "อนุญาตให้เลื่อน",
-    "feedUrl": "URL ฟีด",
-    "maxItems": "ไอเทมสูงสุด",
-    "showDescription": "แสดงคำอธิบาย",
-    "widgetRssName": "ฟีด RSS",
-    "rssNoFeedUrl": "กำหนดค่า URL ของฟีดในการตั้งค่าวิดเจ็ต",
-    "rssLoadError": "ไม่สามารถโหลดฟีดได้",
-    "rssNoItems": "ไม่มีรายการ",
-    "noHostSelected": "ไม่ได้เลือกโฮสต์",
-    "displayedMetrics": "ตัวชี้วัดที่แสดงผล",
-    "metricCpu": "ซีพียู",
-    "metricMemory": "หน่วยความจำ",
-    "metricDisk": "ดิสก์",
-    "metricUptime": "เวลาใช้งาน",
-    "metricSystem": "ระบบ",
-    "metricNetwork": "เครือข่าย",
-    "metricProcesses": "กระบวนการ",
-    "categoryMonitoring": "การตรวจสอบ",
-    "noPingUrls": "ไม่มีการกำหนดค่า URL",
-    "pingLabel": "ฉลาก",
-    "addPingUrl": "เพิ่ม URL",
-    "showLatency": "แสดงค่าความหน่วง",
-    "refreshInterval": "ช่วงเวลาการรีเฟรช",
-    "seconds": "วินาที",
-    "filterActivityTypes": "ประเภทตัวกรอง",
-    "filterTypesHint": "เว้นว่างไว้เพื่อแสดงทั้งหมด",
-    "showTimestamp": "แสดงเวลา",
-    "uptimeUnavailable": "ไม่สามารถระบุเวลาใช้งานได้",
-    "uptimeLabel": "เวลาใช้งาน",
-    "overviewVersion": "เวอร์ชั่น",
-    "overviewUpdateLabel": "อัปเดต",
-    "overviewUpdateAvailable": "มีการอัปเดตแล้ว",
-    "overviewDatabase": "ฐานข้อมูล",
-    "overviewUptime": "เวลาใช้งาน",
-    "noHosts": "ไม่มีการกำหนดค่าโฮสต์",
-    "hostGridHosts": "โฮสต์",
-    "hostGridAllHint": "เว้นว่างไว้เพื่อแสดงโฮสต์ทั้งหมด",
-    "columns": "คอลัมน์",
-    "showIp": "แสดงที่อยู่ IP",
-    "layout": "เค้าโครง",
-    "showStatus": "แสดงสถานะ",
-    "noActivity": "ไม่มีกิจกรรม",
-    "widgetPingStatusName": "สถานะการปิง",
-    "widgetRecentActivityName": "กิจกรรมล่าสุด",
-    "sshTerminalNoHost": "ไม่มีการกำหนดค่าโฮสต์",
-    "sshTerminalConnect": "เชื่อมต่อ",
-    "sshTerminalAutoConnect": "เชื่อมต่ออัตโนมัติเมื่อโหลดเสร็จ",
-    "connectionTypes": "ประเภทการเชื่อมต่อ",
-    "calMon": "โม",
-    "calTue": "ตู",
-    "calWed": "เรา",
-    "calThu": "ไทย",
-    "calFri": "ฟร",
-    "calSat": "ซา",
-    "calSun": "ซู",
-    "startOnMonday": "เริ่มต้นสัปดาห์ในวันจันทร์",
-    "countdownNoDate": "ยังไม่ได้กำหนดวันเป้าหมาย",
-    "countdownPast": "กิจกรรมได้จบลงแล้ว",
-    "countdownDays": "วัน",
-    "countdownHours": "ชั่วโมง",
-    "countdownMinutes": "นาที",
-    "countdownSeconds": "วินาที",
-    "countdownLabel": "ฉลาก",
-    "countdownLabelPlaceholder": "เช่น วันเปิดตัว",
-    "countdownShowDays": "วันแสดง",
-    "countdownShowHours": "เวลาทำการ",
-    "targetDate": "วันที่เป้าหมาย",
-    "searchEngine": "เครื่องมือค้นหา",
-    "customSearchUrl": "URL ค้นหาแบบกำหนดเอง",
-    "searchPlaceholder": "ค้นหา...",
-    "searchGo": "ไป",
-    "searchPlaceholderLabel": "ข้อความตัวอย่าง",
-    "searchPlaceholderHint": "ข้อความที่แสดงอยู่ภายในช่องค้นหา",
-    "openInNewTab": "เปิดในแท็บใหม่",
-    "searchQueryPlaceholder": "ป้อนคำค้นหา...",
-    "noSearchShortcuts": "ไม่ได้ตั้งค่าทางลัดใดๆ",
-    "addSearchShortcut": "เพิ่มทางลัด",
-    "fontSize": "ขนาดตัวอักษร",
-    "textAlign": "จัดแนวข้อความ",
-    "fontWeight": "น้ำหนักตัวอักษร",
-    "clearColor": "สีใส",
-    "imageFit": "เหมาะสมกับรูปภาพ",
-    "imageLinkUrl": "ลิงก์ URL",
-    "noImage": "ไม่ได้ตั้งค่า URL รูปภาพ",
-    "altText": "ข้อความแสดงแทน (Alt Text)",
-    "altTextPlaceholder": "อธิบายภาพ",
-    "renderMarkdown": "แสดงผลมาร์คดาวน์",
-    "displayMode": "โหมดการแสดงผล",
-    "displayField": "ช่องแสดงผล",
-    "jsonPath": "เส้นทาง JSON",
-    "customApiLabel": "ฉลาก",
-    "customApiLabelPlaceholder": "เช่น อุณหภูมิ",
-    "customApiUnit": "หน่วย",
-    "customApiNoUrl": "ไม่ได้กำหนดค่า URL API ไว้",
-    "customApiError": "ไม่สามารถดึงข้อมูลได้",
-    "customApiNotArray": "คำตอบไม่ใช่อาร์เรย์",
-    "addService": "เพิ่มบริการ",
-    "showLabels": "แสดงป้ายกำกับ",
-    "iconSize": "ขนาดไอคอน",
-    "noDashboardLinks": "ไม่มีการกำหนดค่าลิงก์แดชบอร์ด",
-    "noLimit": "ไม่มีขีดจำกัด",
-    "sectionHeading": "หัวข้อส่วน",
-    "addSection": "เพิ่มส่วน",
-    "compactMode": "โหมดกะทัดรัด",
-    "selectHosts": "เลือกโฮสต์",
-    "listLayout": "รายการ",
-    "gridLayout": "ตาราง",
-    "configureUrl": "ตั้งค่า URL ในการตั้งค่าวิดเจ็ต",
-    "embeddedContent": "เนื้อหาที่ฝังอยู่",
-    "noBookmarks": "ไม่มีบุ๊กมาร์ก",
-    "noSections": "ไม่มีการตั้งค่าส่วนใด ๆ",
-    "noServices": "ไม่มีการตั้งค่าบริการใดๆ",
-    "configureLocation": "ตั้งค่าตำแหน่งที่ตั้งในการตั้งค่าวิดเจ็ต",
-    "bannerTextPlaceholder": "ข้อความแบนเนอร์",
-    "serviceNamePlaceholder": "บริการของฉัน",
-    "emptyNote": "จดหมายเปล่า...",
-    "weatherLoadFailed": "ไม่สามารถโหลดข้อมูลสภาพอากาศสำหรับ \"{{location}}\"",
-    "feelsLike": "รู้สึกเหมือน {{temperature}}",
-    "timezonePlaceholder": "อเมริกา/นิวยอร์ก (เว้นว่างไว้สำหรับรหัสพื้นที่)",
-    "notesPlaceholder": "เขียนบันทึกของคุณที่นี่...",
-    "locationPlaceholder": "นิวยอร์ก ลอนดอน โตเกียว...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "ที่คั่นหนังสือ",
-        "description": "รายการลิงก์ด่วน"
-      },
-      "calendar": {
-        "name": "ปฏิทิน",
-        "description": "ปฏิทินรายเดือนที่ไฮไลต์วันนี้ไว้"
-      },
-      "clock": {
-        "name": "นาฬิกา",
-        "description": "นาฬิกาแบบเรียลไทม์พร้อมโซนเวลาที่สามารถตั้งค่าได้"
-      },
-      "countdown": {
-        "name": "นับถอยหลัง",
-        "description": "นับถอยหลังสู่วันและเวลาเป้าหมาย"
-      },
-      "custom_api": {
-        "name": "API แบบกำหนดเอง",
-        "description": "ดึงและแสดงข้อมูลจาก JSON API ใดๆ ก็ได้"
-      },
-      "dashboard_links": {
-        "name": "ลิงก์แดชบอร์ด",
-        "description": "แสดงลิงก์บริการแดชบอร์ดที่คุณบันทึกไว้"
-      },
-      "folder": {
-        "name": "โฟลเดอร์",
-        "description": "การ์ดพื้นหลังสำหรับจัดกลุ่มวิดเจ็ตให้ดูสวยงาม"
-      },
-      "host_grid": {
-        "name": "โฮสต์กริด",
-        "description": "ตารางแสดงสถานะแบบเรียลไทม์สำหรับโฮสต์ SSH ทั้งหมดของคุณ"
-      },
-      "host_status": {
-        "name": "สถานะโฮสต์",
-        "description": "แสดงสถานะและข้อมูลเมตริกแบบเรียลไทม์สำหรับโฮสต์ SSH"
-      },
-      "iframe_embed": {
-        "name": "การฝัง iFrame",
-        "description": "ฝัง URL ใดๆ ลงใน iframe"
-      },
-      "image_widget": {
-        "name": "ภาพ",
-        "description": "แสดงภาพใดก็ได้จาก URL"
-      },
-      "link_tree": {
-        "name": "ลิงก์ทรี",
-        "description": "ลิงก์ที่จัดกลุ่มไว้จะถูกจัดเรียงเป็นส่วนๆ โดยมีป้ายกำกับกำกับไว้"
-      },
-      "markdown_notes": {
-        "name": "บันทึกมาร์คดาวน์",
-        "description": "บันทึกพร้อมตัวเลือกการแสดงผล Markdown และการแก้ไขแบบอินไลน์"
-      },
-      "notes": {
-        "name": "หมายเหตุ",
-        "description": "วิดเจ็ตบันทึกข้อความ"
-      },
-      "ping_status": {
-        "name": "สถานะการปิง",
-        "description": "ตรวจสอบว่าสามารถเข้าถึง URL หรือบริการต่างๆ ได้หรือไม่"
-      },
-      "quick_connect": {
-        "name": "การเชื่อมต่อด่วน",
-        "description": "เปิดใช้งานเทอร์มินัล ไฟล์ Docker อุโมงค์ และอื่นๆ สำหรับโฮสต์ของคุณ"
-      },
-      "recent_activity": {
-        "name": "กิจกรรมล่าสุด",
-        "description": "แสดงกิจกรรมล่าสุดของเทอร์มินัล, Docker, ไฟล์ และอุโมงค์"
-      },
-      "rss_feed": {
-        "name": "ฟีด RSS",
-        "description": "แสดงรายการจากฟีด RSS หรือ Atom"
-      },
-      "search_bar": {
-        "name": "แถบค้นหา",
-        "description": "ค้นหาอย่างรวดเร็วด้วย Google, DuckDuckGo, Bing หรือเครื่องมือค้นหาที่กำหนดเอง"
-      },
-      "search_links": {
-        "name": "ทางลัดการค้นหา",
-        "description": "ปุ่มลัดสำหรับค้นหาในเครื่องมือค้นหาต่างๆ"
-      },
-      "service_grid": {
-        "name": "ตารางบริการ",
-        "description": "ตารางแสดงข้อมูลบริการพร้อมไอคอนและลิงก์"
-      },
-      "service_link": {
-        "name": "ลิงก์บริการ",
-        "description": "ช่องที่สามารถคลิกได้ ซึ่งเชื่อมโยงไปยัง URL ของบริการ"
-      },
-      "ssh_terminal": {
-        "name": "เทอร์มินัล SSH",
-        "description": "เทอร์มินัล SSH แบบอินไลน์ที่เชื่อมต่อกับโฮสต์ที่กำหนดค่าไว้"
-      },
-      "system_overview": {
-        "name": "ภาพรวมระบบ",
-        "description": "ตรวจสอบเวอร์ชัน Termix, สถานะฐานข้อมูล และระยะเวลาการทำงานได้อย่างรวดเร็ว"
-      },
-      "termix_uptime": {
-        "name": "เวลาทำงานของเทอร์มิกซ์",
-        "description": "แสดงระยะเวลาที่เซิร์ฟเวอร์ Termix ทำงานอยู่"
-      },
-      "text_banner": {
-        "name": "แบนเนอร์ข้อความ",
-        "description": "ป้ายข้อความที่มีรูปแบบเฉพาะสำหรับส่วนต่างๆ และหัวข้อ"
-      },
-      "weather": {
-        "name": "สภาพอากาศ",
-        "description": "พยากรณ์อากาศแบบเรียลไทม์สำหรับทุกสถานที่"
-      },
-      "docker_widget": {
-        "name": "ตัวจัดการ Docker",
-        "description": "ตัวจัดการคอนเทนเนอร์ Docker แบบฝังตัวสำหรับโฮสต์ที่กำหนดค่าไว้"
-      },
-      "file_manager_widget": {
-        "name": "ตัวจัดการไฟล์",
-        "description": "ตัวจัดการไฟล์ SFTP แบบฝังตัวสำหรับโฮสต์ที่กำหนดค่าไว้"
-      },
-      "tunnel_widget": {
-        "name": "ผู้จัดการอุโมงค์",
-        "description": "ตัวจัดการอุโมงค์ SSH แบบฝังตัวสำหรับโฮสต์ที่กำหนดค่าไว้"
-      },
-      "metrics_chart": {
-        "name": "แผนภูมิตัวชี้วัด",
-        "description": "แผนภูมิแสดงประวัติการใช้งาน CPU, หน่วยความจำ, ดิสก์ หรือเครือข่ายสำหรับโฮสต์"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "ใช้หน้าแรก",
-      "description": "ดูและแก้ไขลิงก์บริการบนหน้าแรกและแดชบอร์ด"
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "อนุญาตให้โฮสต์ส่วนตัวใช้งานได้",
-      "description": "ระบุชื่อโฮสต์/IP ส่วนตัวหรือแบบ loopback ที่แน่นอนสำหรับวิดเจ็ต Ping Status และ Custom API คั่นรายการด้วยเครื่องหมายจุลภาคหรือขึ้นบรรทัดใหม่ ไม่ต้องระบุ schemes, ports และ paths เว้นช่องว่างสำหรับปลายทางส่วนตัว"
-    },
-    "privateCertificateAuthority": {
-      "label": "หน่วยงานออกใบรับรองเอกชน (PEM)",
-      "description": "ชุดใบรับรอง CA ที่เชื่อถือได้สำหรับโฮสต์ที่อนุญาต (ไม่บังคับ) การตรวจสอบใบรับรองยังคงเปิดใช้งานอยู่ เว้นว่างไว้เพื่อใช้ที่เก็บใบรับรองที่เชื่อถือได้ของระบบ"
-    }
-  },
-  "plugin": {
-    "name": "หน้าแรก"
-  }
-}
diff --git a/plugins/homepage/locales/translated/tr_TR.json b/plugins/homepage/locales/translated/tr_TR.json
deleted file mode 100644
index 830687a11..000000000
--- a/plugins/homepage/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Ana Sayfa"
-  },
-  "dashboard": {
-    "serviceLinks": "Hizmet Bağlantıları",
-    "homepagePreview": "Ana Sayfa Önizlemesi"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Servis Bağlantıları",
-    "serviceLinksEmpty": "Henüz servis bağlantısı yok",
-    "serviceLinksAdd": "Ekle",
-    "serviceLinksLabelPlaceholder": "Hizmetim",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Geçerli bir web adresi girin",
-    "serviceLinksAddFailed": "Servis bağlantısı eklenemedi"
-  },
-  "homepage": {
-    "title": "Ana Sayfa",
-    "addWidget": "Bileşen Ekle",
-    "noWidgetsInCategory": "Bu kategoride hiçbir widget yok.",
-    "editWidget": "Bileşeni Düzenle",
-    "zoomIn": "Yakınlaştır",
-    "zoomOut": "Uzaklaştır",
-    "resetView": "Görünümü Sıfırla",
-    "lockLayout": "Düzeni Kilitle",
-    "unlockLayout": "Düzen Kilidini Aç",
-    "noWidgets": "İlk widget'ınızı eklemek için sağ tıklayın veya + simgesine tıklayın",
-    "openFullView": "Tam Görünümü Aç",
-    "previewTitle": "Ana Sayfa Önizlemesi",
-    "cancel": "İptal",
-    "save": "Kaydet",
-    "title_label": "Başlık",
-    "widgetTitlePlaceholder": "Widget başlığı (isteğe bağlı)",
-    "url": "URL",
-    "imageUrl": "Özel Resim URL'si",
-    "imageUrlHint": "Site favicon'unu otomatik olarak kullanmak için boş bırakın",
-    "showImage": "Resmi Göster",
-    "description": "Açıklama",
-    "color": "Renk",
-    "timezone": "Zaman Dilimi",
-    "invalidTimezone": "Geçersiz saat dilimi. Lütfen America/New_York gibi bir IANA adı kullanın.",
-    "showSeconds": "Saniyeleri göster",
-    "format12h": "12 saatlik",
-    "content": "İçerik",
-    "backgroundColor": "Arka Plan Rengi",
-    "links": "Bağlantılar",
-    "addLink": "Bağlantı Ekle",
-    "linkLabel": "Etiket",
-    "categoryLinks": "Bağlantılar",
-    "categoryInfo": "Bilgi",
-    "categorySystem": "Sistem",
-    "copyLink": "Bağlantıyı Kopyala",
-    "linkCopied": "Bağlantı kopyalandı!",
-    "location": "Konum",
-    "temperatureUnit": "Sıcaklık Birimi",
-    "showForecast": "3 günlük tahmini göster",
-    "scrolling": "Kaydırmaya İzin Ver",
-    "feedUrl": "Akış URL'si",
-    "maxItems": "Maksimum Öğe Sayısı",
-    "showDescription": "Açıklamayı Göster",
-    "widgetRssName": "RSS Akışı",
-    "rssNoFeedUrl": "Widget ayarlarında bir besleme URL'si yapılandırın.",
-    "rssLoadError": "Besleme yüklenemedi.",
-    "rssNoItems": "Hiçbir ürün yok",
-    "noHostSelected": "Sunucu seçilmedi",
-    "displayedMetrics": "Gösterilen Metrikler",
-    "metricCpu": "CPU",
-    "metricMemory": "Bellek",
-    "metricDisk": "Disk",
-    "metricUptime": "Çalışma Süresi",
-    "metricSystem": "Sistem",
-    "metricNetwork": "Ağ",
-    "metricProcesses": "İşlemler",
-    "categoryMonitoring": "İzleme",
-    "noPingUrls": "Hiçbir URL yapılandırılmamış",
-    "pingLabel": "Etiket",
-    "addPingUrl": "URL Ekle",
-    "showLatency": "Gecikmeyi Göster",
-    "refreshInterval": "Yenileme Aralığı",
-    "seconds": "saniye",
-    "filterActivityTypes": "Filtre Türleri",
-    "filterTypesHint": "Tümünü göstermek için boş bırakın",
-    "showTimestamp": "Zaman Damgasını Göster",
-    "uptimeUnavailable": "Çalışma süresi kullanılamıyor",
-    "uptimeLabel": "Çalışma Süresi",
-    "overviewVersion": "Sürüm",
-    "overviewUpdateLabel": "Güncelle",
-    "overviewUpdateAvailable": "Güncelleme mevcut",
-    "overviewDatabase": "Veritabanı",
-    "overviewUptime": "Çalışma Süresi",
-    "noHosts": "Hiçbir sunucu yapılandırılmamış",
-    "hostGridHosts": "Sunucular",
-    "hostGridAllHint": "Tüm sunucuları göstermek için boş bırakın",
-    "columns": "Sütunlar",
-    "showIp": "IP Adresini Göster",
-    "layout": "Düzen",
-    "showStatus": "Durumu Göster",
-    "noActivity": "Etkinlik yok",
-    "widgetPingStatusName": "Ping Durumu",
-    "widgetRecentActivityName": "Son Etkinlikler",
-    "sshTerminalNoHost": "Hiçbir sunucu yapılandırılmamış",
-    "sshTerminalConnect": "Bağlan",
-    "sshTerminalAutoConnect": "Yüklendiğinde otomatik bağlan",
-    "connectionTypes": "Bağlantı Türleri",
-    "calMon": "Pzt",
-    "calTue": "Sal",
-    "calWed": "Çar",
-    "calThu": "Per",
-    "calFri": "Cum",
-    "calSat": "Cmt",
-    "calSun": "Paz",
-    "startOnMonday": "Haftayı Pazartesi başlat",
-    "countdownNoDate": "Hedef tarih ayarlanmadı",
-    "countdownPast": "Etkinlik geçmişte kaldı",
-    "countdownDays": "gün",
-    "countdownHours": "sa",
-    "countdownMinutes": "dk",
-    "countdownSeconds": "sn",
-    "countdownLabel": "Etiket",
-    "countdownLabelPlaceholder": "Örn. Lansman Günü",
-    "countdownShowDays": "Günleri Göster",
-    "countdownShowHours": "Saatleri Göster",
-    "targetDate": "Hedef Tarih",
-    "searchEngine": "Arama Motoru",
-    "customSearchUrl": "Özel Arama URL'si",
-    "searchPlaceholder": "Ara...",
-    "searchGo": "Git",
-    "searchPlaceholderLabel": "Yer Tutucu Metin",
-    "searchPlaceholderHint": "Arama girişinde gösterilen metin",
-    "openInNewTab": "Yeni Sekmede Aç",
-    "searchQueryPlaceholder": "Sorgu girin...",
-    "noSearchShortcuts": "Hiç kısayol yapılandırılmadı",
-    "addSearchShortcut": "Kısayol Ekle",
-    "fontSize": "Yazı Tipi Boyutu",
-    "textAlign": "Metin Hizalama",
-    "fontWeight": "Yazı Tipi Kalınlığı",
-    "clearColor": "Rengi Temizle",
-    "imageFit": "Görüntü Sığdırma",
-    "imageLinkUrl": "Bağlantı URL'si",
-    "noImage": "Görüntü URL'si ayarlanmadı",
-    "altText": "Alternatif Metin",
-    "altTextPlaceholder": "Görüntüyü tanımlayın",
-    "renderMarkdown": "Markdown'ı Görüntüle",
-    "displayMode": "Görüntüleme Modu",
-    "displayField": "Görüntüleme Alanı",
-    "jsonPath": "JSON Yolu",
-    "customApiLabel": "Etiket",
-    "customApiLabelPlaceholder": "Örn. Sıcaklık",
-    "customApiUnit": "Birim",
-    "customApiNoUrl": "API URL'si yapılandırılmadı",
-    "customApiError": "Getirme başarısız",
-    "customApiNotArray": "Yanıt bir dizi değil",
-    "addService": "Servis Ekle",
-    "showLabels": "Etiketleri Göster",
-    "iconSize": "Simge Boyutu",
-    "noDashboardLinks": "Hiçbir pano bağlantısı yapılandırılmamış",
-    "noLimit": "Sınır yok",
-    "sectionHeading": "Bölüm Başlığı",
-    "addSection": "Bölüm Ekle",
-    "compactMode": "Kompakt Mod",
-    "selectHosts": "Sunucuları Seç",
-    "listLayout": "Liste",
-    "gridLayout": "Izgara",
-    "configureUrl": "Widget ayarlarında bir URL belirleyin.",
-    "embeddedContent": "Gömülü içerik",
-    "noBookmarks": "Yer imi yok",
-    "noSections": "Hiçbir bölüm oluşturulmadı.",
-    "noServices": "Hiçbir hizmet kurulmadı.",
-    "configureLocation": "Widget ayarlarında bir konum belirleyin.",
-    "bannerTextPlaceholder": "Afiş metni",
-    "serviceNamePlaceholder": "Hizmetim",
-    "emptyNote": "Boş not...",
-    "weatherLoadFailed": "\"{{location}} \" için hava durumu yüklenemedi.",
-    "feelsLike": "{{temperature}} gibi hissettiriyor.",
-    "timezonePlaceholder": "Amerika/New_York (yerel bölge için boş bırakın)",
-    "notesPlaceholder": "Notlarınızı buraya yazın...",
-    "locationPlaceholder": "New York, Londra, Tokyo...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Yer İmleri",
-        "description": "Hızlı bağlantıların bir listesi"
-      },
-      "calendar": {
-        "name": "Takvim",
-        "description": "Bugünün işaretlendiği bir aylık takvim."
-      },
-      "clock": {
-        "name": "Saat",
-        "description": "Yapılandırılabilir saat dilimine sahip canlı bir saat"
-      },
-      "countdown": {
-        "name": "Geri Sayım",
-        "description": "Hedef tarih ve saate doğru geri sayım yapar."
-      },
-      "custom_api": {
-        "name": "Özel API",
-        "description": "Herhangi bir JSON API'den veri al ve göster"
-      },
-      "dashboard_links": {
-        "name": "Pano Bağlantıları",
-        "description": "Kaydedilmiş kontrol paneli hizmet bağlantılarınızı gösterir."
-      },
-      "folder": {
-        "name": "Klasör",
-        "description": "Widget'ları görsel olarak gruplandırmak için arka plan kartı."
-      },
-      "host_grid": {
-        "name": "Sunucu Izgarası",
-        "description": "Tüm SSH sunucularınız için canlı durum özet tablosu."
-      },
-      "host_status": {
-        "name": "Sunucu Durumu",
-        "description": "Bir SSH sunucusunun canlı durumunu ve ölçümlerini gösterir."
-      },
-      "iframe_embed": {
-        "name": "iFrame Yerleştirme",
-        "description": "Herhangi bir URL'yi iframe içine göm"
-      },
-      "image_widget": {
-        "name": "İmaj",
-        "description": "Bir URL'den herhangi bir resmi görüntüle"
-      },
-      "link_tree": {
-        "name": "Bağlantı Ağacı",
-        "description": "Etiketlenmiş bölümler halinde düzenlenmiş gruplandırılmış bağlantılar"
-      },
-      "markdown_notes": {
-        "name": "Markdown Notları",
-        "description": "İsteğe bağlı Markdown oluşturma ve satır içi düzenleme özellikli notlar"
-      },
-      "notes": {
-        "name": "Notlar",
-        "description": "Bir metin notları widget'ı"
-      },
-      "ping_status": {
-        "name": "Ping Durumu",
-        "description": "URL'lerin veya hizmetlerin erişilebilir olup olmadığını kontrol edin."
-      },
-      "quick_connect": {
-        "name": "Hızlı Bağlantı",
-        "description": "Sunucularınız için terminali, dosyaları, Docker'ı, tünelleri ve daha fazlasını başlatın."
-      },
-      "recent_activity": {
-        "name": "Son Etkinlikler",
-        "description": "Terminal, Docker, dosya ve tünel ile ilgili son etkinlikleri gösterir."
-      },
-      "rss_feed": {
-        "name": "RSS Akışı",
-        "description": "RSS veya Atom akışından öğeleri görüntüle"
-      },
-      "search_bar": {
-        "name": "Arama Çubuğu",
-        "description": "Google, DuckDuckGo, Bing veya özel bir arama motoruyla hızlı arama"
-      },
-      "search_links": {
-        "name": "Arama Kısayolları",
-        "description": "Farklı arama motorlarında arama yapmak için hızlı düğmeler"
-      },
-      "service_grid": {
-        "name": "Servis Izgarası",
-        "description": "Simgeler ve bağlantılar içeren hizmet kutucuklarından oluşan bir tablo."
-      },
-      "service_link": {
-        "name": "Servis Bağlantısı",
-        "description": "Bir servis URL'sine bağlanan tıklanabilir bir döşeme"
-      },
-      "ssh_terminal": {
-        "name": "SSH Terminali",
-        "description": "Yapılandırılmış bir sunucuya bağlı satır içi SSH terminali"
-      },
-      "system_overview": {
-        "name": "Sistem Özeti",
-        "description": "Termix sürümü, veritabanı durumu ve çalışma süresi hakkında genel bilgiler"
-      },
-      "termix_uptime": {
-        "name": "Termix Çalışma Süresi",
-        "description": "Termix sunucusunun ne kadar süredir çalıştığını gösterir."
-      },
-      "text_banner": {
-        "name": "Metin Başlığı",
-        "description": "Bölümler ve başlıklar için biçimlendirilmiş metin etiketi."
-      },
-      "weather": {
-        "name": "Hava Durumu",
-        "description": "Herhangi bir konum için canlı hava durumu"
-      },
-      "docker_widget": {
-        "name": "Docker Yöneticisi",
-        "description": "Yapılandırılmış bir sunucu için gömülü Docker konteyner yöneticisi"
-      },
-      "file_manager_widget": {
-        "name": "Dosya Yöneticisi",
-        "description": "Yapılandırılmış bir sunucu için gömülü SFTP dosya yöneticisi"
-      },
-      "tunnel_widget": {
-        "name": "Tünel Yöneticisi",
-        "description": "Yapılandırılmış bir sunucu için gömülü SSH tünel yöneticisi"
-      },
-      "metrics_chart": {
-        "name": "Metrik Grafiği",
-        "description": "Bir sunucuya ait geçmişe dönük CPU, bellek, disk veya ağ grafiği."
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Ana sayfayı kullanın",
-      "description": "Ana sayfa tuvalini ve kontrol paneli hizmet bağlantılarını görüntüleyin ve düzenleyin."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Özel ev sahiplerine izin verilir.",
-      "description": "Ping Durumu ve Özel API widget'ları için tam özel veya geri döngü ana bilgisayar adları/IP adresleri. Girişleri virgül veya yeni satırlarla ayırın; şemaları, bağlantı noktalarını ve yolları atlayın. Boş bloklar özel hedefleri belirtir."
-    },
-    "privateCertificateAuthority": {
-      "label": "Özel sertifika yetkilisi (PEM)",
-      "description": "İzin verilen sunucular için isteğe bağlı güvenilir CA paketi. Sertifika doğrulaması etkin kalır. Sistem güven deposunu kullanmak için boş bırakın."
-    }
-  },
-  "plugin": {
-    "name": "Ana Sayfa"
-  }
-}
diff --git a/plugins/homepage/locales/translated/uk_UA.json b/plugins/homepage/locales/translated/uk_UA.json
deleted file mode 100644
index b69e6d507..000000000
--- a/plugins/homepage/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Домашня сторінка"
-  },
-  "dashboard": {
-    "serviceLinks": "Посилання на сервіси",
-    "homepagePreview": "Попередній перегляд головної сторінки"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Посилання на сервіси",
-    "serviceLinksEmpty": "Поки що немає посилань на сервіси",
-    "serviceLinksAdd": "Додати",
-    "serviceLinksLabelPlaceholder": "Моя послуга",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Введіть дійсну веб-адресу",
-    "serviceLinksAddFailed": "Не вдалося додати посилання на послугу"
-  },
-  "homepage": {
-    "title": "Домашня сторінка",
-    "addWidget": "Додати віджет",
-    "noWidgetsInCategory": "У цій категорії немає віджетів",
-    "editWidget": "Редагувати віджет",
-    "zoomIn": "Збільшити масштаб",
-    "zoomOut": "Зменшити масштаб",
-    "resetView": "Скинути вигляд",
-    "lockLayout": "Макет замка",
-    "unlockLayout": "Розблокувати макет",
-    "noWidgets": "Клацніть правою кнопкою миші або натисніть кнопку +, щоб додати свій перший віджет",
-    "openFullView": "Відкрити повний перегляд",
-    "previewTitle": "Попередній перегляд головної сторінки",
-    "cancel": "Скасувати",
-    "save": "Зберегти",
-    "title_label": "Назва",
-    "widgetTitlePlaceholder": "Назва віджета (необов'язково)",
-    "url": "URL-адреса",
-    "imageUrl": "URL-адреса користувацького зображення",
-    "imageUrlHint": "Залиште поле порожнім, щоб автоматично використовувати фавіконку сайту",
-    "showImage": "Показати зображення",
-    "description": "Опис",
-    "color": "Колір",
-    "timezone": "Часовий пояс",
-    "invalidTimezone": "Недійсний часовий пояс. Використайте назву IANA, наприклад, America/New_York.",
-    "showSeconds": "Показати секунди",
-    "format12h": "12-годинний",
-    "content": "Зміст",
-    "backgroundColor": "Колір фону",
-    "links": "Посилання",
-    "addLink": "Додати посилання",
-    "linkLabel": "Мітка",
-    "categoryLinks": "Посилання",
-    "categoryInfo": "Інформація",
-    "categorySystem": "Система",
-    "copyLink": "Копіювати посилання",
-    "linkCopied": "Посилання скопійовано!",
-    "location": "Розташування",
-    "temperatureUnit": "Одиниця вимірювання температури",
-    "showForecast": "Показати 3-денний прогноз",
-    "scrolling": "Дозволити прокручування",
-    "feedUrl": "URL-адреса стрічки",
-    "maxItems": "Макс. кількість елементів",
-    "showDescription": "Показати опис",
-    "widgetRssName": "RSS-канал",
-    "rssNoFeedUrl": "Налаштуйте URL-адресу стрічки в налаштуваннях віджета",
-    "rssLoadError": "Не вдалося завантажити стрічку",
-    "rssNoItems": "Немає товарів",
-    "noHostSelected": "Хост не вибрано",
-    "displayedMetrics": "Відображені показники",
-    "metricCpu": "Процесор",
-    "metricMemory": "Пам'ять",
-    "metricDisk": "Диск",
-    "metricUptime": "Час безвідмовної роботи",
-    "metricSystem": "Система",
-    "metricNetwork": "Мережа",
-    "metricProcesses": "Процеси",
-    "categoryMonitoring": "Моніторинг",
-    "noPingUrls": "URL-адреси не налаштовано",
-    "pingLabel": "Мітка",
-    "addPingUrl": "Додати URL-адресу",
-    "showLatency": "Показати затримку",
-    "refreshInterval": "Інтервал оновлення",
-    "seconds": "секунди",
-    "filterActivityTypes": "Типи фільтрів",
-    "filterTypesHint": "Залиште порожнім, щоб показати всі",
-    "showTimestamp": "Показати позначку часу",
-    "uptimeUnavailable": "Час безперебійної роботи недоступний",
-    "uptimeLabel": "Час безвідмовної роботи",
-    "overviewVersion": "Версія",
-    "overviewUpdateLabel": "Оновлення",
-    "overviewUpdateAvailable": "Доступне оновлення",
-    "overviewDatabase": "База даних",
-    "overviewUptime": "Час безвідмовної роботи",
-    "noHosts": "Немає налаштованих хостів",
-    "hostGridHosts": "Хости",
-    "hostGridAllHint": "Залиште порожнім, щоб показати всіх хостів",
-    "columns": "Колонки",
-    "showIp": "Показати IP-адресу",
-    "layout": "Макет",
-    "showStatus": "Показати статус",
-    "noActivity": "Немає активності",
-    "widgetPingStatusName": "Стан пінгу",
-    "widgetRecentActivityName": "Нещодавня активність",
-    "sshTerminalNoHost": "Хост не налаштовано",
-    "sshTerminalConnect": "Підключитися",
-    "sshTerminalAutoConnect": "Автоматичне підключення під час завантаження",
-    "connectionTypes": "Типи з'єднань",
-    "calMon": "Мо",
-    "calTue": "Вт",
-    "calWed": "Ми",
-    "calThu": "Чт",
-    "calFri": "Пт",
-    "calSat": "Сб",
-    "calSun": "Су",
-    "startOnMonday": "Початок тижня в понеділок",
-    "countdownNoDate": "Цільова дата не встановлена",
-    "countdownPast": "Подія пройшла",
-    "countdownDays": "дні",
-    "countdownHours": "год.",
-    "countdownMinutes": "хв",
-    "countdownSeconds": "сек",
-    "countdownLabel": "Мітка",
-    "countdownLabelPlaceholder": "наприклад, день запуску",
-    "countdownShowDays": "Дні показу",
-    "countdownShowHours": "Години роботи шоу",
-    "targetDate": "Цільова дата",
-    "searchEngine": "Пошукова система",
-    "customSearchUrl": "URL-адреса користувацького пошуку",
-    "searchPlaceholder": "Пошук...",
-    "searchGo": "Іти",
-    "searchPlaceholderLabel": "Текст-заповнювач",
-    "searchPlaceholderHint": "Текст, що відображається всередині пошукового поля",
-    "openInNewTab": "Відкрити в новій вкладці",
-    "searchQueryPlaceholder": "Введіть запит...",
-    "noSearchShortcuts": "Немає налаштованих комбінацій клавіш",
-    "addSearchShortcut": "Додати ярлик",
-    "fontSize": "Розмір шрифту",
-    "textAlign": "Вирівнювання тексту",
-    "fontWeight": "Вага шрифту",
-    "clearColor": "Чіткий колір",
-    "imageFit": "Розмір зображення",
-    "imageLinkUrl": "URL-адреса посилання",
-    "noImage": "URL-адреса зображення не встановлена",
-    "altText": "Альтернативний текст",
-    "altTextPlaceholder": "Опишіть зображення",
-    "renderMarkdown": "Рендеринг Markdown",
-    "displayMode": "Режим відображення",
-    "displayField": "Поле відображення",
-    "jsonPath": "Шлях JSON",
-    "customApiLabel": "Мітка",
-    "customApiLabelPlaceholder": "наприклад, температура",
-    "customApiUnit": "Одиниця",
-    "customApiNoUrl": "URL-адреса API не налаштована",
-    "customApiError": "Не вдалося отримати",
-    "customApiNotArray": "Відповідь не є масивом",
-    "addService": "Додати послугу",
-    "showLabels": "Показати мітки",
-    "iconSize": "Розмір значка",
-    "noDashboardLinks": "Посилання на інформаційну панель не налаштовано",
-    "noLimit": "Без обмежень",
-    "sectionHeading": "Заголовок розділу",
-    "addSection": "Додати розділ",
-    "compactMode": "Компактний режим",
-    "selectHosts": "Виберіть хости",
-    "listLayout": "Список",
-    "gridLayout": "Сітка",
-    "configureUrl": "Встановіть URL-адресу в налаштуваннях віджета",
-    "embeddedContent": "Вбудований контент",
-    "noBookmarks": "Без закладок",
-    "noSections": "Розділи не налаштовано",
-    "noServices": "Жодних послуг не налаштовано",
-    "configureLocation": "Встановіть місцезнаходження в налаштуваннях віджета",
-    "bannerTextPlaceholder": "Текст банера",
-    "serviceNamePlaceholder": "Моя послуга",
-    "emptyNote": "Порожня нотатка...",
-    "weatherLoadFailed": "Не вдалося завантажити погоду для \"{{location}}\"",
-    "feelsLike": "Відчувається як {{temperature}}",
-    "timezonePlaceholder": "Америка/Нью-Йорк (залиште поле порожнім для місцевого)",
-    "notesPlaceholder": "Пишіть свої нотатки тут...",
-    "locationPlaceholder": "Нью-Йорк, Лондон, Токіо...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Закладки",
-        "description": "Список швидких посилань"
-      },
-      "calendar": {
-        "name": "Календар",
-        "description": "Місячний календар із виділеним сьогоднішнім днем"
-      },
-      "clock": {
-        "name": "Годинник",
-        "description": "Живий годинник із налаштовуваним часовим поясом"
-      },
-      "countdown": {
-        "name": "Зворотний відлік",
-        "description": "Веде зворотний відлік до цільової дати та часу"
-      },
-      "custom_api": {
-        "name": "Користувацький API",
-        "description": "Отримання та відображення даних з будь-якого JSON API"
-      },
-      "dashboard_links": {
-        "name": "Посилання на інформаційну панель",
-        "description": "Показує збережені посилання на сервіси на інформаційній панелі"
-      },
-      "folder": {
-        "name": "Папка",
-        "description": "Фонова картка для візуального групування віджетів"
-      },
-      "host_grid": {
-        "name": "Сітка хоста",
-        "description": "Таблиця огляду статусу в реальному часі для всіх ваших SSH-хостів"
-      },
-      "host_status": {
-        "name": "Стан хоста",
-        "description": "Показує статус та метрики SSH-хоста в режимі реального часу"
-      },
-      "iframe_embed": {
-        "name": "Вбудувати iFrame",
-        "description": "Вбудувати будь-яку URL-адресу в iframe"
-      },
-      "image_widget": {
-        "name": "Зображення",
-        "description": "Відображення будь-якого зображення з URL-адреси"
-      },
-      "link_tree": {
-        "name": "Дерево посилань",
-        "description": "Згруповані посилання, організовані в позначені розділи"
-      },
-      "markdown_notes": {
-        "name": "Нотатки Markdown",
-        "description": "Нотатки з додатковим рендерингом Markdown та вбудованим редагуванням"
-      },
-      "notes": {
-        "name": "Нотатки",
-        "description": "Віджет текстових нотаток"
-      },
-      "ping_status": {
-        "name": "Стан пінгу",
-        "description": "Перевірте, чи доступні URL-адреси або сервіси"
-      },
-      "quick_connect": {
-        "name": "Швидке підключення",
-        "description": "Запустіть термінал, файли, Docker, тунелі та багато іншого для ваших хостів"
-      },
-      "recent_activity": {
-        "name": "Нещодавня активність",
-        "description": "Показує останню активність терміналу, Docker, файлів та тунелів"
-      },
-      "rss_feed": {
-        "name": "RSS-канал",
-        "description": "Відображення елементів зі стрічки RSS або Atom"
-      },
-      "search_bar": {
-        "name": "Рядок пошуку",
-        "description": "Швидкий пошук за допомогою Google, DuckDuckGo, Bing або спеціального пошукового механізму"
-      },
-      "search_links": {
-        "name": "Пошукові скорочення",
-        "description": "Швидкі кнопки для пошуку в різних пошукових системах"
-      },
-      "service_grid": {
-        "name": "Сервісна мережа",
-        "description": "Сітка плиток послуг з іконками та посиланнями"
-      },
-      "service_link": {
-        "name": "Посилання на сервіс",
-        "description": "Клікувальна плитка, що посилається на URL-адресу сервісу"
-      },
-      "ssh_terminal": {
-        "name": "SSH-термінал",
-        "description": "Вбудований SSH-термінал, підключений до налаштованого хоста"
-      },
-      "system_overview": {
-        "name": "Огляд системи",
-        "description": "Огляд версії Termix, стану бази даних та часу безвідмовної роботи"
-      },
-      "termix_uptime": {
-        "name": "Час безперебійної роботи Termix",
-        "description": "Показує, як довго працює сервер Termix"
-      },
-      "text_banner": {
-        "name": "Текстовий банер",
-        "description": "Стилізований текстовий підпис для розділів і заголовків"
-      },
-      "weather": {
-        "name": "Погода",
-        "description": "Погода в реальному часі для будь-якого місця"
-      },
-      "docker_widget": {
-        "name": "Менеджер Докера",
-        "description": "Вбудований менеджер контейнерів Docker для налаштованого хоста"
-      },
-      "file_manager_widget": {
-        "name": "Файловий менеджер",
-        "description": "Вбудований файловий менеджер SFTP для налаштованого хоста"
-      },
-      "tunnel_widget": {
-        "name": "Менеджер тунелю",
-        "description": "Вбудований менеджер тунелів SSH для налаштованого хоста"
-      },
-      "metrics_chart": {
-        "name": "Діаграма показників",
-        "description": "Історична діаграма процесора, пам'яті, диска або мережі для хоста"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Використовуйте головну сторінку",
-      "description": "Переглядайте та редагуйте посилання на сервіси на головній сторінці та панелі інструментів."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Дозволені приватні хости",
-      "description": "Точні приватні або зворотні імена хостів/IP-адреси для віджетів Ping Status та Custom API. Розділяйте записи комами або символами нового рядка; пропускайте схеми, порти та шляхи. Порожні блоки блокують приватні пункти призначення."
-    },
-    "privateCertificateAuthority": {
-      "label": "Приватний центр сертифікації (PEM)",
-      "description": "Додатковий пакет довірених ЦС для хостів із білого списку. Перевірка сертифікатів залишається ввімкненою. Залиште поле порожнім, щоб використовувати системне сховище довірених сертифікатів."
-    }
-  },
-  "plugin": {
-    "name": "Домашня сторінка"
-  }
-}
diff --git a/plugins/homepage/locales/translated/vi_VN.json b/plugins/homepage/locales/translated/vi_VN.json
deleted file mode 100644
index 8c01e1552..000000000
--- a/plugins/homepage/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "Trang chủ"
-  },
-  "dashboard": {
-    "serviceLinks": "Liên kết Dịch vụ",
-    "homepagePreview": "Xem trước Trang chủ"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "Liên kết dịch vụ",
-    "serviceLinksEmpty": "Chưa có liên kết dịch vụ nào",
-    "serviceLinksAdd": "Thêm",
-    "serviceLinksLabelPlaceholder": "Dịch vụ của tôi",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "Nhập địa chỉ web hợp lệ",
-    "serviceLinksAddFailed": "Thêm liên kết dịch vụ thất bại"
-  },
-  "homepage": {
-    "title": "Trang chủ",
-    "addWidget": "Thêm widget",
-    "noWidgetsInCategory": "Không có tiện ích nào trong danh mục này.",
-    "editWidget": "Sửa widget",
-    "zoomIn": "Phóng to",
-    "zoomOut": "Thu nhỏ",
-    "resetView": "Đặt lại chế độ xem",
-    "lockLayout": "Khóa bố cục",
-    "unlockLayout": "Mở khóa bố cục",
-    "noWidgets": "Nhấp chuột phải hoặc nhấn + để thêm widget đầu tiên",
-    "openFullView": "Mở toàn màn hình",
-    "previewTitle": "Xem trước trang chủ",
-    "cancel": "Hủy",
-    "save": "Lưu",
-    "title_label": "Tiêu đề",
-    "widgetTitlePlaceholder": "Tiêu đề widget (tùy chọn)",
-    "url": "URL",
-    "imageUrl": "URL hình ảnh tùy chỉnh",
-    "imageUrlHint": "Để trống để tự động dùng favicon của trang",
-    "showImage": "Hiển thị hình ảnh",
-    "description": "Mô tả",
-    "color": "Màu sắc",
-    "timezone": "Múi giờ",
-    "invalidTimezone": "Múi giờ không hợp lệ. Hãy sử dụng tên IANA như America/New_York.",
-    "showSeconds": "Hiển thị giây",
-    "format12h": "12 giờ",
-    "content": "Nội dung",
-    "backgroundColor": "Màu nền",
-    "links": "Liên kết",
-    "addLink": "Thêm liên kết",
-    "linkLabel": "Nhãn",
-    "categoryLinks": "Liên kết",
-    "categoryInfo": "Thông tin",
-    "categorySystem": "Hệ thống",
-    "copyLink": "Sao chép liên kết",
-    "linkCopied": "Đã sao chép liên kết!",
-    "location": "Vị trí",
-    "temperatureUnit": "Đơn vị nhiệt độ",
-    "showForecast": "Hiển thị dự báo 3 ngày",
-    "scrolling": "Cho phép cuộn",
-    "feedUrl": "URL nguồn cấp",
-    "maxItems": "Số mục tối đa",
-    "showDescription": "Hiển thị mô tả",
-    "widgetRssName": "Nguồn RSS",
-    "rssNoFeedUrl": "Cấu hình URL nguồn cấp dữ liệu trong cài đặt tiện ích.",
-    "rssLoadError": "Không thể tải nguồn cấp dữ liệu",
-    "rssNoItems": "Không có mặt hàng nào",
-    "noHostSelected": "Chưa chọn máy chủ",
-    "displayedMetrics": "Chỉ số hiển thị",
-    "metricCpu": "CPU",
-    "metricMemory": "Bộ nhớ",
-    "metricDisk": "Đĩa",
-    "metricUptime": "Thời gian hoạt động",
-    "metricSystem": "Hệ thống",
-    "metricNetwork": "Mạng",
-    "metricProcesses": "Tiến trình",
-    "categoryMonitoring": "Giám sát",
-    "noPingUrls": "Chưa cấu hình URL",
-    "pingLabel": "Nhãn",
-    "addPingUrl": "Thêm URL",
-    "showLatency": "Hiển thị độ trễ",
-    "refreshInterval": "Chu kỳ làm mới",
-    "seconds": "giây",
-    "filterActivityTypes": "Loại hoạt động",
-    "filterTypesHint": "Để trống để hiển thị tất cả",
-    "showTimestamp": "Hiển thị dấu thời gian",
-    "uptimeUnavailable": "Không có thời gian hoạt động",
-    "uptimeLabel": "Thời gian hoạt động",
-    "overviewVersion": "Phiên bản",
-    "overviewUpdateLabel": "Cập nhật",
-    "overviewUpdateAvailable": "Có bản cập nhật",
-    "overviewDatabase": "Cơ sở dữ liệu",
-    "overviewUptime": "Thời gian hoạt động",
-    "noHosts": "Chưa cấu hình máy chủ nào",
-    "hostGridHosts": "Máy chủ",
-    "hostGridAllHint": "Để trống để hiển thị tất cả máy chủ",
-    "columns": "Cột",
-    "showIp": "Hiển thị địa chỉ IP",
-    "layout": "Bố cục",
-    "showStatus": "Hiển thị trạng thái",
-    "noActivity": "Không có hoạt động",
-    "widgetPingStatusName": "Trạng thái ping",
-    "widgetRecentActivityName": "Hoạt động gần đây",
-    "sshTerminalNoHost": "Chưa cấu hình máy chủ",
-    "sshTerminalConnect": "Kết nối",
-    "sshTerminalAutoConnect": "Tự động kết nối khi tải",
-    "connectionTypes": "Loại kết nối",
-    "calMon": "T2",
-    "calTue": "T3",
-    "calWed": "T4",
-    "calThu": "T5",
-    "calFri": "T6",
-    "calSat": "T7",
-    "calSun": "CN",
-    "startOnMonday": "Bắt đầu tuần từ Thứ 2",
-    "countdownNoDate": "Chưa đặt ngày mục tiêu",
-    "countdownPast": "Sự kiện đã qua",
-    "countdownDays": "ngày",
-    "countdownHours": "giờ",
-    "countdownMinutes": "phút",
-    "countdownSeconds": "giây",
-    "countdownLabel": "Nhãn",
-    "countdownLabelPlaceholder": "Ví dụ: Ngày ra mắt",
-    "countdownShowDays": "Hiển thị ngày",
-    "countdownShowHours": "Hiển thị giờ",
-    "targetDate": "Ngày mục tiêu",
-    "searchEngine": "Công cụ tìm kiếm",
-    "customSearchUrl": "URL tìm kiếm tùy chỉnh",
-    "searchPlaceholder": "Tìm kiếm...",
-    "searchGo": "Tìm",
-    "searchPlaceholderLabel": "Văn bản gợi ý",
-    "searchPlaceholderHint": "Văn bản hiển thị trong ô tìm kiếm",
-    "openInNewTab": "Mở trong tab mới",
-    "searchQueryPlaceholder": "Nhập truy vấn...",
-    "noSearchShortcuts": "Chưa có phím tắt nào được cấu hình",
-    "addSearchShortcut": "Thêm phím tắt",
-    "fontSize": "Cỡ chữ",
-    "textAlign": "Căn chỉnh văn bản",
-    "fontWeight": "Độ đậm chữ",
-    "clearColor": "Xóa màu",
-    "imageFit": "Kiểu vừa ảnh",
-    "imageLinkUrl": "URL liên kết",
-    "noImage": "Chưa đặt URL hình ảnh",
-    "altText": "Văn bản thay thế",
-    "altTextPlaceholder": "Mô tả hình ảnh",
-    "renderMarkdown": "Kết xuất Markdown",
-    "displayMode": "Chế độ hiển thị",
-    "displayField": "Trường hiển thị",
-    "jsonPath": "Đường dẫn JSON",
-    "customApiLabel": "Nhãn",
-    "customApiLabelPlaceholder": "Ví dụ: Nhiệt độ",
-    "customApiUnit": "Đơn vị",
-    "customApiNoUrl": "Chưa cấu hình URL API",
-    "customApiError": "Không tải được",
-    "customApiNotArray": "Phản hồi không phải là một mảng",
-    "addService": "Thêm dịch vụ",
-    "showLabels": "Hiển thị nhãn",
-    "iconSize": "Kích thước biểu tượng",
-    "noDashboardLinks": "Chưa có liên kết bảng điều khiển",
-    "noLimit": "Không giới hạn",
-    "sectionHeading": "Tiêu đề phần",
-    "addSection": "Thêm phần",
-    "compactMode": "Chế độ thu gọn",
-    "selectHosts": "Chọn máy chủ",
-    "listLayout": "Danh sách",
-    "gridLayout": "Lưới",
-    "configureUrl": "Đặt URL trong cài đặt tiện ích.",
-    "embeddedContent": "Nội dung nhúng",
-    "noBookmarks": "Không có dấu trang",
-    "noSections": "Chưa có phần nào được thiết lập.",
-    "noServices": "Chưa có dịch vụ nào được thiết lập.",
-    "configureLocation": "Chọn vị trí trong cài đặt tiện ích.",
-    "bannerTextPlaceholder": "Văn bản biểu ngữ",
-    "serviceNamePlaceholder": "Dịch vụ của tôi",
-    "emptyNote": "Ghi chú trống...",
-    "weatherLoadFailed": "Không thể tải thông tin thời tiết cho \"{{location}}\"",
-    "feelsLike": "Cảm giác như {{temperature}}",
-    "timezonePlaceholder": "Mỹ/New_York (để trống nếu muốn chọn múi giờ địa phương)",
-    "notesPlaceholder": "Hãy ghi chú ở đây...",
-    "locationPlaceholder": "New York, London, Tokyo...",
-    "widgets": {
-      "bookmark_list": {
-        "name": "Dấu trang",
-        "description": "Danh sách liên kết nhanh"
-      },
-      "calendar": {
-        "name": "Lịch",
-        "description": "Lịch tháng với ngày hôm nay được đánh dấu."
-      },
-      "clock": {
-        "name": "Đồng hồ",
-        "description": "Đồng hồ trực tiếp với múi giờ tùy chỉnh"
-      },
-      "countdown": {
-        "name": "Đếm ngược",
-        "description": "Đếm ngược đến ngày và giờ mục tiêu."
-      },
-      "custom_api": {
-        "name": "API Tùy chỉnh",
-        "description": "Lấy và hiển thị dữ liệu từ bất kỳ API JSON nào"
-      },
-      "dashboard_links": {
-        "name": "Liên kết Bảng điều khiển",
-        "description": "Hiển thị các liên kết dịch vụ bảng điều khiển đã lưu của bạn."
-      },
-      "folder": {
-        "name": "Thư mục",
-        "description": "Một thẻ nền để nhóm các tiện ích lại với nhau một cách trực quan."
-      },
-      "host_grid": {
-        "name": "Lưới máy chủ",
-        "description": "Bảng tổng quan trạng thái trực tiếp cho tất cả các máy chủ SSH của bạn"
-      },
-      "host_status": {
-        "name": "Trạng thái Máy chủ",
-        "description": "Hiển thị trạng thái và số liệu trực tiếp của máy chủ SSH."
-      },
-      "iframe_embed": {
-        "name": "Nhúng iFrame",
-        "description": "Nhúng bất kỳ URL nào vào iframe"
-      },
-      "image_widget": {
-        "name": "Image",
-        "description": "Hiển thị bất kỳ hình ảnh nào từ URL."
-      },
-      "link_tree": {
-        "name": "Cây Liên kết",
-        "description": "Các liên kết được nhóm lại và sắp xếp thành các phần có nhãn."
-      },
-      "markdown_notes": {
-        "name": "Ghi chú Markdown",
-        "description": "Ghi chú với tùy chọn hiển thị Markdown và chỉnh sửa trực tiếp"
-      },
-      "notes": {
-        "name": "Ghi chú",
-        "description": "Tiện ích ghi chú văn bản"
-      },
-      "ping_status": {
-        "name": "Trạng thái ping",
-        "description": "Kiểm tra xem URL hoặc dịch vụ có thể truy cập được hay không."
-      },
-      "quick_connect": {
-        "name": "Kết nối nhanh",
-        "description": "Khởi chạy terminal, tập tin, Docker, đường hầm và nhiều hơn nữa cho máy chủ của bạn."
-      },
-      "recent_activity": {
-        "name": "Hoạt động gần đây",
-        "description": "Hiển thị hoạt động gần đây của terminal, Docker, tập tin và đường hầm."
-      },
-      "rss_feed": {
-        "name": "Nguồn RSS",
-        "description": "Hiển thị các mục từ nguồn RSS hoặc Atom"
-      },
-      "search_bar": {
-        "name": "Thanh tìm kiếm",
-        "description": "Tìm kiếm nhanh bằng Google, DuckDuckGo, Bing hoặc công cụ tìm kiếm tùy chỉnh."
-      },
-      "search_links": {
-        "name": "Lối tắt tìm kiếm",
-        "description": "Các nút nhanh để tìm kiếm trên các công cụ tìm kiếm khác nhau"
-      },
-      "service_grid": {
-        "name": "Lưới Dịch vụ",
-        "description": "Một lưới các ô dịch vụ với các biểu tượng và liên kết."
-      },
-      "service_link": {
-        "name": "Liên kết dịch vụ",
-        "description": "Ô nhấp được để liên kết đến URL dịch vụ"
-      },
-      "ssh_terminal": {
-        "name": "SSH Terminal",
-        "description": "Một terminal SSH nội tuyến kết nối tới máy chủ đã cấu hình"
-      },
-      "system_overview": {
-        "name": "Tổng quan hệ thống",
-        "description": "Tổng quan về phiên bản Termix, tình trạng cơ sở dữ liệu và thời gian hoạt động."
-      },
-      "termix_uptime": {
-        "name": "Thời gian hoạt động Termix",
-        "description": "Hiển thị thời gian máy chủ Termix đã hoạt động."
-      },
-      "text_banner": {
-        "name": "Biểu ngữ văn bản",
-        "description": "Nhãn văn bản được định dạng cho các phần và tiêu đề."
-      },
-      "weather": {
-        "name": "Thời tiết",
-        "description": "Thời tiết trực tiếp cho mọi vị trí"
-      },
-      "docker_widget": {
-        "name": "Quản lý Docker",
-        "description": "Trình quản lý container Docker tích hợp cho máy chủ đã cấu hình"
-      },
-      "file_manager_widget": {
-        "name": "Trình quản lý file",
-        "description": "Trình quản lý tệp SFTP tích hợp cho máy chủ đã cấu hình"
-      },
-      "tunnel_widget": {
-        "name": "Quản lý Đường hầm",
-        "description": "Trình quản lý đường hầm SSH tích hợp cho máy chủ đã cấu hình"
-      },
-      "metrics_chart": {
-        "name": "Biểu đồ chỉ số",
-        "description": "Biểu đồ lịch sử về CPU, bộ nhớ, ổ đĩa hoặc mạng của máy chủ."
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Sử dụng trang chủ",
-      "description": "Xem và chỉnh sửa giao diện trang chủ và các liên kết dịch vụ trên bảng điều khiển."
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "Cho phép chủ nhà riêng",
-      "description": "Nhập chính xác tên máy chủ/địa chỉ IP riêng hoặc loopback cho tiện ích Ping Status và Custom API. Phân tách các mục bằng dấu phẩy hoặc xuống dòng; bỏ qua lược đồ, cổng và đường dẫn. Để trống các mục đích riêng tư."
-    },
-    "privateCertificateAuthority": {
-      "label": "Cơ quan cấp chứng chỉ tư nhân (PEM)",
-      "description": "Gói CA đáng tin cậy tùy chọn cho các máy chủ được phép. Quá trình xác minh chứng chỉ vẫn được bật. Để trống để sử dụng kho lưu trữ chứng chỉ tin cậy của hệ thống."
-    }
-  },
-  "plugin": {
-    "name": "Trang chủ"
-  }
-}
diff --git a/plugins/homepage/locales/translated/zh_CN.json b/plugins/homepage/locales/translated/zh_CN.json
deleted file mode 100644
index 35cca60e8..000000000
--- a/plugins/homepage/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "首页"
-  },
-  "dashboard": {
-    "serviceLinks": "服务链接",
-    "homepagePreview": "主页预览"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "服务链接",
-    "serviceLinksEmpty": "暂无服务链接",
-    "serviceLinksAdd": "添加",
-    "serviceLinksLabelPlaceholder": "我的服务",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "输入有效的网址",
-    "serviceLinksAddFailed": "添加服务链接失败"
-  },
-  "homepage": {
-    "title": "主页",
-    "addWidget": "添加小部件",
-    "noWidgetsInCategory": "此类别中没有小部件",
-    "editWidget": "编辑小部件",
-    "zoomIn": "放大",
-    "zoomOut": "缩小",
-    "resetView": "重置视图",
-    "lockLayout": "锁定布局",
-    "unlockLayout": "解锁布局",
-    "noWidgets": "右键单击或点击 + 来添加第一个小部件",
-    "openFullView": "打开完整视图",
-    "previewTitle": "首页预览",
-    "cancel": "取消",
-    "save": "保存",
-    "title_label": "标题",
-    "widgetTitlePlaceholder": "小组件标题（可选）",
-    "url": "URL",
-    "imageUrl": "自定义图片 URL",
-    "imageUrlHint": "留空将自动使用网站图标",
-    "showImage": "显示图片",
-    "description": "描述",
-    "color": "颜色",
-    "timezone": "时区",
-    "invalidTimezone": "时区无效。请使用 IANA 名称，例如 America/New_York。",
-    "showSeconds": "显示秒",
-    "format12h": "12 小时制",
-    "content": "内容",
-    "backgroundColor": "背景颜色",
-    "links": "链接",
-    "addLink": "添加链接",
-    "linkLabel": "标签",
-    "categoryLinks": "链接",
-    "categoryInfo": "信息",
-    "categorySystem": "系统",
-    "copyLink": "复制链接",
-    "linkCopied": "链接已复制！",
-    "location": "位置",
-    "temperatureUnit": "温度单位",
-    "showForecast": "显示三日天气预报",
-    "scrolling": "允许滚动",
-    "feedUrl": "订阅源 URL",
-    "maxItems": "最大条目数",
-    "showDescription": "显示描述",
-    "widgetRssName": "RSS 订阅源",
-    "rssNoFeedUrl": "在小部件设置中配置信息源 URL",
-    "rssLoadError": "无法加载饲料",
-    "rssNoItems": "无商品",
-    "noHostSelected": "未选择主机",
-    "displayedMetrics": "显示指标",
-    "metricCpu": "CPU",
-    "metricMemory": "内存",
-    "metricDisk": "磁盘",
-    "metricUptime": "运行时间",
-    "metricSystem": "系统",
-    "metricNetwork": "网络",
-    "metricProcesses": "进程",
-    "categoryMonitoring": "监控",
-    "noPingUrls": "未配置 URL",
-    "pingLabel": "标签",
-    "addPingUrl": "添加 URL",
-    "showLatency": "显示延迟",
-    "refreshInterval": "刷新间隔",
-    "seconds": "秒",
-    "filterActivityTypes": "过滤类型",
-    "filterTypesHint": "留空显示全部",
-    "showTimestamp": "显示时间戳",
-    "uptimeUnavailable": "运行时间不可用",
-    "uptimeLabel": "运行时间",
-    "overviewVersion": "版本",
-    "overviewUpdateLabel": "更新",
-    "overviewUpdateAvailable": "有可用更新",
-    "overviewDatabase": "数据库",
-    "overviewUptime": "运行时间",
-    "noHosts": "未配置主机",
-    "hostGridHosts": "主机",
-    "hostGridAllHint": "留空显示所有主机",
-    "columns": "列",
-    "showIp": "显示 IP 地址",
-    "layout": "布局",
-    "showStatus": "显示状态",
-    "noActivity": "无活动",
-    "widgetPingStatusName": "Ping 状态",
-    "widgetRecentActivityName": "近期活动",
-    "sshTerminalNoHost": "未配置主机",
-    "sshTerminalConnect": "连接",
-    "sshTerminalAutoConnect": "加载时自动连接",
-    "connectionTypes": "连接类型",
-    "calMon": "一",
-    "calTue": "二",
-    "calWed": "三",
-    "calThu": "四",
-    "calFri": "五",
-    "calSat": "六",
-    "calSun": "日",
-    "startOnMonday": "从周一开始",
-    "countdownNoDate": "未设置目标日期",
-    "countdownPast": "事件已过",
-    "countdownDays": "天",
-    "countdownHours": "小时",
-    "countdownMinutes": "分钟",
-    "countdownSeconds": "秒",
-    "countdownLabel": "标签",
-    "countdownLabelPlaceholder": "例如：发布日",
-    "countdownShowDays": "显示天数",
-    "countdownShowHours": "显示小时",
-    "targetDate": "目标日期",
-    "searchEngine": "搜索引擎",
-    "customSearchUrl": "自定义搜索 URL",
-    "searchPlaceholder": "搜索...",
-    "searchGo": "搜索",
-    "searchPlaceholderLabel": "占位符文本",
-    "searchPlaceholderHint": "搜索输入框中显示的文本",
-    "openInNewTab": "在新标签页中打开",
-    "searchQueryPlaceholder": "输入查询...",
-    "noSearchShortcuts": "未配置快捷方式",
-    "addSearchShortcut": "添加快捷方式",
-    "fontSize": "字体大小",
-    "textAlign": "文本对齐",
-    "fontWeight": "字体粗细",
-    "clearColor": "清除颜色",
-    "imageFit": "图片适应",
-    "imageLinkUrl": "链接 URL",
-    "noImage": "未设置图片 URL",
-    "altText": "替代文本",
-    "altTextPlaceholder": "描述图片",
-    "renderMarkdown": "渲染 Markdown",
-    "displayMode": "显示模式",
-    "displayField": "显示字段",
-    "jsonPath": "JSON 路径",
-    "customApiLabel": "标签",
-    "customApiLabelPlaceholder": "例如：温度",
-    "customApiUnit": "单位",
-    "customApiNoUrl": "未配置 API URL",
-    "customApiError": "获取失败",
-    "customApiNotArray": "响应不是数组",
-    "addService": "添加服务",
-    "showLabels": "显示标签",
-    "iconSize": "图标大小",
-    "noDashboardLinks": "未配置仪表板链接",
-    "noLimit": "无限制",
-    "sectionHeading": "分区标题",
-    "addSection": "添加分区",
-    "compactMode": "紧凑模式",
-    "selectHosts": "选择主机",
-    "listLayout": "列表",
-    "gridLayout": "网格",
-    "configureUrl": "在小部件设置中设置 URL",
-    "embeddedContent": "嵌入式内容",
-    "noBookmarks": "没有书签",
-    "noSections": "未设置任何部分。",
-    "noServices": "未设置任何服务。",
-    "configureLocation": "在小部件设置中设置位置",
-    "bannerTextPlaceholder": "横幅文字",
-    "serviceNamePlaceholder": "我的服务",
-    "emptyNote": "空纸条……",
-    "weatherLoadFailed": "无法加载“{{location}}”的天气",
-    "feelsLike": "感觉像 {{temperature}}",
-    "timezonePlaceholder": "美国/纽约（留空为本地）",
-    "notesPlaceholder": "请在此处写下您的笔记……",
-    "locationPlaceholder": "纽约、伦敦、东京……",
-    "widgets": {
-      "bookmark_list": {
-        "name": "书签",
-        "description": "快速链接列表"
-      },
-      "calendar": {
-        "name": "日历",
-        "description": "一张月历，今天已高亮显示。"
-      },
-      "clock": {
-        "name": "时钟",
-        "description": "带有可配置时区的实时时钟"
-      },
-      "countdown": {
-        "name": "倒计时",
-        "description": "倒计时至目标日期和时间"
-      },
-      "custom_api": {
-        "name": "自定义 API",
-        "description": "从任何 JSON API 获取并显示数据"
-      },
-      "dashboard_links": {
-        "name": "仪表板链接",
-        "description": "显示您保存的仪表板服务链接"
-      },
-      "folder": {
-        "name": "文件夹",
-        "description": "用于以可视方式对控件进行分组的背景卡片"
-      },
-      "host_grid": {
-        "name": "主机网格",
-        "description": "实时状态概览网格，显示所有 SSH 主机"
-      },
-      "host_status": {
-        "name": "主机状态",
-        "description": "显示 SSH 主机的实时状态和指标"
-      },
-      "iframe_embed": {
-        "name": "iFrame 嵌入",
-        "description": "在 iframe 中嵌入任意 URL"
-      },
-      "image_widget": {
-        "name": "图像",
-        "description": "显示来自 URL 的任何图像"
-      },
-      "link_tree": {
-        "name": "链接树",
-        "description": "分组链接按标签分类"
-      },
-      "markdown_notes": {
-        "name": "Markdown 笔记",
-        "description": "带有可选 Markdown 渲染和内联编辑功能的笔记"
-      },
-      "notes": {
-        "name": "笔记",
-        "description": "文本备注小部件"
-      },
-      "ping_status": {
-        "name": "Ping 状态",
-        "description": "检查 URL 或服务是否可访问"
-      },
-      "quick_connect": {
-        "name": "快速连接",
-        "description": "为您的主机启动终端、文件、Docker、隧道等。"
-      },
-      "recent_activity": {
-        "name": "最近活动",
-        "description": "显示最近的终端、Docker、文件和隧道活动"
-      },
-      "rss_feed": {
-        "name": "RSS 订阅源",
-        "description": "显示 RSS 或 Atom 订阅源中的条目"
-      },
-      "search_bar": {
-        "name": "搜索栏",
-        "description": "使用 Google、DuckDuckGo、Bing 或自定义引擎快速搜索"
-      },
-      "search_links": {
-        "name": "搜索快捷方式",
-        "description": "快速按钮，可搜索不同的搜索引擎"
-      },
-      "service_grid": {
-        "name": "服务网格",
-        "description": "包含图标和链接的服务图块网格"
-      },
-      "service_link": {
-        "name": "服务链接",
-        "description": "可点击的磁贴，链接到服务 URL"
-      },
-      "ssh_terminal": {
-        "name": "SSH 终端",
-        "description": "连接到已配置主机的内联 SSH 终端"
-      },
-      "system_overview": {
-        "name": "系统概览",
-        "description": "Termix 版本、数据库健康状况和正常运行时间一览"
-      },
-      "termix_uptime": {
-        "name": "Termix 运行时间",
-        "description": "显示 Termix 服务器已运行多长时间"
-      },
-      "text_banner": {
-        "name": "文本横幅",
-        "description": "用于章节和标题的样式化文本标签"
-      },
-      "weather": {
-        "name": "天气",
-        "description": "实时天气信息"
-      },
-      "docker_widget": {
-        "name": "Docker 管理器",
-        "description": "用于已配置主机的嵌入式 Docker 容器管理器"
-      },
-      "file_manager_widget": {
-        "name": "文件管理器",
-        "description": "用于已配置主机的嵌入式 SFTP 文件管理器"
-      },
-      "tunnel_widget": {
-        "name": "隧道管理器",
-        "description": "用于已配置主机的嵌入式 SSH 隧道管理器"
-      },
-      "metrics_chart": {
-        "name": "指标图表",
-        "description": "主机的历史 CPU、内存、磁盘或网络图表"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "使用主页",
-      "description": "查看和编辑首页画布和仪表盘服务链接。"
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "允许私人主机",
-      "description": "用于 Ping 状态和自定义 API 小部件的精确私有或环回主机名/IP 地址。条目之间用逗号或换行符分隔；省略协议、端口和路径。空值会阻止私有目标地址。"
-    },
-    "privateCertificateAuthority": {
-      "label": "私有证书颁发机构（PEM）",
-      "description": "可选的受信任 CA 证书包，适用于已列入允许列表的主机。证书验证功能仍然启用。留空则使用系统信任存储。"
-    }
-  },
-  "plugin": {
-    "name": "首页"
-  }
-}
diff --git a/plugins/homepage/locales/translated/zh_TW.json b/plugins/homepage/locales/translated/zh_TW.json
deleted file mode 100644
index 6443d4df3..000000000
--- a/plugins/homepage/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,325 +0,0 @@
-{
-  "nav": {
-    "homepage": "首頁"
-  },
-  "dashboard": {
-    "serviceLinks": "服務連結",
-    "homepagePreview": "首頁預覽"
-  },
-  "dashboardTab": {
-    "serviceLinksTitle": "服務連結",
-    "serviceLinksEmpty": "尚無服務連結",
-    "serviceLinksAdd": "新增",
-    "serviceLinksLabelPlaceholder": "我的服務",
-    "serviceLinksUrlPlaceholder": "http://192.168.1.10:8080",
-    "serviceLinksInvalidUrl": "輸入有效的網址",
-    "serviceLinksAddFailed": "新增服務連結失敗"
-  },
-  "homepage": {
-    "title": "首頁",
-    "addWidget": "新增小工具",
-    "noWidgetsInCategory": "此類別中沒有小工具",
-    "editWidget": "編輯小工具",
-    "zoomIn": "放大",
-    "zoomOut": "縮小",
-    "resetView": "重設檢視",
-    "lockLayout": "鎖定佈局",
-    "unlockLayout": "解鎖佈局",
-    "noWidgets": "按右鍵或點擊 + 來新增您的第一個小工具",
-    "openFullView": "開啟完整檢視",
-    "previewTitle": "首頁預覽",
-    "cancel": "取消",
-    "save": "儲存",
-    "title_label": "標題",
-    "widgetTitlePlaceholder": "小工具標題（選填）",
-    "url": "URL",
-    "imageUrl": "自訂圖片 URL",
-    "imageUrlHint": "留空以自動使用網站圖標",
-    "showImage": "顯示圖片",
-    "description": "描述",
-    "color": "顏色",
-    "timezone": "時區",
-    "invalidTimezone": "時區無效。請使用 IANA 名稱，例如 America/New_York。",
-    "showSeconds": "顯示秒數",
-    "format12h": "12 小時制",
-    "content": "內容",
-    "backgroundColor": "背景顏色",
-    "links": "連結",
-    "addLink": "新增連結",
-    "linkLabel": "標籤",
-    "categoryLinks": "連結",
-    "categoryInfo": "資訊",
-    "categorySystem": "系統",
-    "copyLink": "複製連結",
-    "linkCopied": "連結已複製！",
-    "location": "位置",
-    "temperatureUnit": "溫度單位",
-    "showForecast": "顯示 3 天天氣預報",
-    "scrolling": "允許捲動",
-    "feedUrl": "摘要來源 URL",
-    "maxItems": "最大項目數",
-    "showDescription": "顯示描述",
-    "widgetRssName": "RSS 摘要",
-    "rssNoFeedUrl": "在小工具設定中設定資訊來源 URL",
-    "rssLoadError": "無法載飼料",
-    "rssNoItems": "無商品",
-    "noHostSelected": "未選取主機",
-    "displayedMetrics": "顯示的指標",
-    "metricCpu": "CPU",
-    "metricMemory": "記憶體",
-    "metricDisk": "磁碟",
-    "metricUptime": "運作時間",
-    "metricSystem": "系統",
-    "metricNetwork": "網路",
-    "metricProcesses": "程序",
-    "categoryMonitoring": "監控",
-    "noPingUrls": "未設定 URL",
-    "pingLabel": "標籤",
-    "addPingUrl": "新增 URL",
-    "showLatency": "顯示延遲",
-    "refreshInterval": "重新整理間隔",
-    "seconds": "秒",
-    "filterActivityTypes": "篩選類型",
-    "filterTypesHint": "留空以顯示全部",
-    "showTimestamp": "顯示時間戳記",
-    "uptimeUnavailable": "運作時間無法取得",
-    "uptimeLabel": "運作時間",
-    "overviewVersion": "版本",
-    "overviewUpdateLabel": "更新",
-    "overviewUpdateAvailable": "有可用更新",
-    "overviewDatabase": "資料庫",
-    "overviewUptime": "運作時間",
-    "noHosts": "未設定任何主機",
-    "hostGridHosts": "主機",
-    "hostGridAllHint": "留空以顯示所有主機",
-    "columns": "欄",
-    "showIp": "顯示 IP 位址",
-    "layout": "版面配置",
-    "showStatus": "顯示狀態",
-    "noActivity": "無活動",
-    "widgetPingStatusName": "Ping 狀態",
-    "widgetRecentActivityName": "近期活動",
-    "sshTerminalNoHost": "未設定主機",
-    "sshTerminalConnect": "連線",
-    "sshTerminalAutoConnect": "載入時自動連線",
-    "connectionTypes": "連線類型",
-    "calMon": "週一",
-    "calTue": "週二",
-    "calWed": "週三",
-    "calThu": "週四",
-    "calFri": "週五",
-    "calSat": "週六",
-    "calSun": "週日",
-    "startOnMonday": "從週一開始",
-    "countdownNoDate": "未設定目標日期",
-    "countdownPast": "目標日期已過",
-    "countdownDays": "天",
-    "countdownHours": "小時",
-    "countdownMinutes": "分鐘",
-    "countdownSeconds": "秒",
-    "countdownLabel": "標籤",
-    "countdownLabelPlaceholder": "例如：發佈日",
-    "countdownShowDays": "顯示天數",
-    "countdownShowHours": "顯示小時",
-    "targetDate": "目標日期",
-    "searchEngine": "搜尋引擎",
-    "customSearchUrl": "自訂搜尋 URL",
-    "searchPlaceholder": "搜尋...",
-    "searchGo": "搜尋",
-    "searchPlaceholderLabel": "佔位文字",
-    "searchPlaceholderHint": "顯示在搜尋輸入框內的文字",
-    "openInNewTab": "在新分頁中開啟",
-    "searchQueryPlaceholder": "輸入查詢...",
-    "noSearchShortcuts": "尚未設定捷徑",
-    "addSearchShortcut": "新增捷徑",
-    "fontSize": "字型大小",
-    "textAlign": "文字對齊",
-    "fontWeight": "字型粗細",
-    "clearColor": "清除顏色",
-    "imageFit": "圖片填滿方式",
-    "imageLinkUrl": "連結 URL",
-    "noImage": "未設定圖片 URL",
-    "altText": "替代文字",
-    "altTextPlaceholder": "描述圖片",
-    "renderMarkdown": "轉譯 Markdown",
-    "displayMode": "顯示模式",
-    "displayField": "顯示欄位",
-    "jsonPath": "JSON 路徑",
-    "customApiLabel": "標籤",
-    "customApiLabelPlaceholder": "例如：溫度",
-    "customApiUnit": "單位",
-    "customApiNoUrl": "未設定 API URL",
-    "customApiError": "擷取失敗",
-    "customApiNotArray": "回應非陣列",
-    "addService": "新增服務",
-    "showLabels": "顯示標籤",
-    "iconSize": "圖示大小",
-    "noDashboardLinks": "未設定儀表板連結",
-    "noLimit": "無限制",
-    "sectionHeading": "區段標題",
-    "addSection": "新增區段",
-    "compactMode": "精簡模式",
-    "selectHosts": "選取主機",
-    "listLayout": "清單",
-    "gridLayout": "格線",
-    "configureUrl": "在小工具設定中設定 URL",
-    "embeddedContent": "嵌入式內容",
-    "noBookmarks": "沒有書籤",
-    "noSections": "未設定任何部分。",
-    "noServices": "未設定任何服務。",
-    "configureLocation": "在小部件設定中設定位置",
-    "bannerTextPlaceholder": "橫幅文字",
-    "serviceNamePlaceholder": "我的服務",
-    "emptyNote": "空紙條…",
-    "weatherLoadFailed": "無法載入「{{location}}」的天氣",
-    "feelsLike": "感覺像 {{temperature}}",
-    "timezonePlaceholder": "美國/紐約（留空為本地）",
-    "notesPlaceholder": "請在此寫下您的筆記…",
-    "locationPlaceholder": "紐約、倫敦、東京…",
-    "widgets": {
-      "bookmark_list": {
-        "name": "書籤",
-        "description": "快速連結清單"
-      },
-      "calendar": {
-        "name": "行事曆",
-        "description": "一張月曆，今天已高亮顯示。"
-      },
-      "clock": {
-        "name": "時鐘",
-        "description": "具有可設定時區的即時時鐘"
-      },
-      "countdown": {
-        "name": "倒數計時",
-        "description": "倒數計時至目標日期和時間"
-      },
-      "custom_api": {
-        "name": "自訂 API",
-        "description": "從任何 JSON API 擷取並顯示資料"
-      },
-      "dashboard_links": {
-        "name": "儀表板連結",
-        "description": "顯示您儲存的儀表板服務鏈接"
-      },
-      "folder": {
-        "name": "資料夾",
-        "description": "用於以視覺方式對控制項進行分組的背景卡片"
-      },
-      "host_grid": {
-        "name": "主機方格",
-        "description": "即時狀態概覽網格，顯示所有 SSH 主機"
-      },
-      "host_status": {
-        "name": "主機狀態",
-        "description": "顯示 SSH 主機的即時狀態和指標"
-      },
-      "iframe_embed": {
-        "name": "iFrame 嵌入",
-        "description": "在 iframe 中嵌入任何 URL 的內容"
-      },
-      "image_widget": {
-        "name": "映像",
-        "description": "顯示來自 URL 的任何圖像"
-      },
-      "link_tree": {
-        "name": "連結樹",
-        "description": "分組連結按標籤分類"
-      },
-      "markdown_notes": {
-        "name": "Markdown 筆記",
-        "description": "帶有可選 Markdown 渲染和內聯編輯功能的筆記"
-      },
-      "notes": {
-        "name": "筆記",
-        "description": "文字備註小工具"
-      },
-      "ping_status": {
-        "name": "Ping 狀態",
-        "description": "檢查 URL 或服務是否可存取"
-      },
-      "quick_connect": {
-        "name": "快速連線",
-        "description": "為您的主機啟動終端、檔案、Docker、隧道等。"
-      },
-      "recent_activity": {
-        "name": "近期活動",
-        "description": "顯示最近的終端、Docker、文件和隧道活動"
-      },
-      "rss_feed": {
-        "name": "RSS 摘要",
-        "description": "顯示來自 RSS 或 Atom 摘要的項目"
-      },
-      "search_bar": {
-        "name": "搜尋列",
-        "description": "使用 Google、DuckDuckGo、Bing 或自訂引擎快速搜尋"
-      },
-      "search_links": {
-        "name": "搜尋捷徑",
-        "description": "快速按鈕，可搜尋不同的搜尋引擎"
-      },
-      "service_grid": {
-        "name": "服務網格",
-        "description": "包含圖示和連結的服務圖塊網格"
-      },
-      "service_link": {
-        "name": "服務連結",
-        "description": "可點擊的方塊，連結至服務 URL"
-      },
-      "ssh_terminal": {
-        "name": "SSH 終端機",
-        "description": "連線至已設定主機的內嵌 SSH 終端機"
-      },
-      "system_overview": {
-        "name": "系統概覽",
-        "description": "Termix 版本、資料庫健康狀況和正常運作時間一覽"
-      },
-      "termix_uptime": {
-        "name": "Termix 運作時間",
-        "description": "顯示 Termix 伺服器已運行多長時間"
-      },
-      "text_banner": {
-        "name": "文字橫幅",
-        "description": "用於章節和標題的樣式化文字標籤"
-      },
-      "weather": {
-        "name": "天氣",
-        "description": "任何地點的即時天氣"
-      },
-      "docker_widget": {
-        "name": "Docker 管理",
-        "description": "用於已設定主機的內嵌 Docker 容器管理員"
-      },
-      "file_manager_widget": {
-        "name": "檔案管理員",
-        "description": "用於已設定主機的內嵌 SFTP 檔案管理員"
-      },
-      "tunnel_widget": {
-        "name": "通道管理員",
-        "description": "用於已設定主機的內嵌 SSH 通道管理員"
-      },
-      "metrics_chart": {
-        "name": "指標圖表",
-        "description": "主機的歷史 CPU、記憶體、磁碟或網路圖表"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "使用主頁",
-      "description": "查看和編輯首頁畫布和儀錶板服務連結。"
-    }
-  },
-  "settings": {
-    "privateEndpoints": {
-      "label": "允許的私人主機",
-      "description": "用於 Ping 狀態和自訂 API 小工具的精確私有或環回主機名稱/IP 位址。條目之間以逗號或換行符號分隔；省略協定、連接埠和路徑。空值會封鎖私有目標位址。"
-    },
-    "privateCertificateAuthority": {
-      "label": "私有憑證授權單位（PEM）",
-      "description": "可選的受信任 CA 憑證包，適用於已列入允許清單的主機。憑證驗證功能仍然啟用。留空則使用系統信任儲存。"
-    }
-  },
-  "plugin": {
-    "name": "首頁"
-  }
-}
diff --git a/plugins/homepage/manifest.json b/plugins/homepage/manifest.json
deleted file mode 100644
index d1130f13a..000000000
--- a/plugins/homepage/manifest.json
+++ /dev/null
@@ -1,84 +0,0 @@
-{
-  "id": "homepage",
-  "name": "Homepage",
-  "version": "1.0.0",
-  "description": "A custom widget page and service links for your servers and services.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Productivity",
-  "icon": "LayoutGrid",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": ["db:own", "network:serve", "network:outbound", "ui:surface"],
-  "provides": [
-    {
-      "service": "homepage.items",
-      "version": "1.0.0",
-      "permission": "homepage.use"
-    }
-  ],
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"],
-  "contributes": {
-    "tabs": [
-      {
-        "id": "homepage",
-        "titleKey": "nav.homepage",
-        "icon": "LayoutGrid",
-        "openFrom": ["palette"]
-      }
-    ],
-    "dashboardCards": [
-      {
-        "id": "service_links",
-        "titleKey": "dashboard.serviceLinks"
-      },
-      {
-        "id": "homepage_preview",
-        "titleKey": "dashboard.homepagePreview"
-      }
-    ],
-    "permissions": [
-      {
-        "name": "use",
-        "titleKey": "permissions.use.title",
-        "descriptionKey": "permissions.use.description",
-        "defaultRoles": ["admin", "user"]
-      }
-    ],
-    "actionSlots": [
-      {
-        "id": "dashboard.secondaryView",
-        "accepts": ["component"]
-      }
-    ],
-    "syncEntities": [
-      "dashboardServiceLinks",
-      "homepageItems",
-      "homepageLayouts"
-    ],
-    "settings": {
-      "admin": [
-        {
-          "key": "privateEndpoints",
-          "type": "textarea",
-          "labelKey": "settings.privateEndpoints.label",
-          "descriptionKey": "settings.privateEndpoints.description",
-          "default": ""
-        },
-        {
-          "key": "privateCertificateAuthority",
-          "type": "textarea",
-          "labelKey": "settings.privateCertificateAuthority.label",
-          "descriptionKey": "settings.privateCertificateAuthority.description",
-          "default": ""
-        }
-      ]
-    }
-  }
-}
diff --git a/plugins/homepage/migrations/mysql/0001_adopt_homepage_tables.sql b/plugins/homepage/migrations/mysql/0001_adopt_homepage_tables.sql
deleted file mode 100644
index 98e3b51cf..000000000
--- a/plugins/homepage/migrations/mysql/0001_adopt_homepage_tables.sql
+++ /dev/null
@@ -1,36 +0,0 @@
--- homepage 0001: adopt_homepage_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `homepage_items` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `type_id` text NOT NULL,
-  `title` text,
-  `config` text NOT NULL DEFAULT ('{}'),
-  `folder_id` int,
-  `sync_id` varchar(255) UNIQUE,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `homepage_items` TO `p_homepage_homepage_items`;
-CREATE TABLE IF NOT EXISTS `homepage_layouts` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL UNIQUE,
-  `layout` text NOT NULL DEFAULT ('{}'),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `homepage_layouts` TO `p_homepage_homepage_layouts`;
-CREATE TABLE IF NOT EXISTS `dashboard_service_links` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `label` text NOT NULL,
-  `url` text NOT NULL,
-  `order` int NOT NULL DEFAULT 0,
-  `sync_id` varchar(255) UNIQUE,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `dashboard_service_links` TO `p_homepage_dashboard_service_links`;
diff --git a/plugins/homepage/migrations/postgres/0001_adopt_homepage_tables.sql b/plugins/homepage/migrations/postgres/0001_adopt_homepage_tables.sql
deleted file mode 100644
index da37879b2..000000000
--- a/plugins/homepage/migrations/postgres/0001_adopt_homepage_tables.sql
+++ /dev/null
@@ -1,38 +0,0 @@
--- homepage 0001: adopt_homepage_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "homepage_items" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "type_id" text NOT NULL,
-  "title" text,
-  "config" text NOT NULL DEFAULT '{}',
-  "folder_id" integer,
-  "sync_id" varchar(255) UNIQUE,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_homepage_items_user_id" ON "homepage_items" ("user_id");
-ALTER TABLE "homepage_items" RENAME TO "p_homepage_homepage_items";
-CREATE TABLE IF NOT EXISTS "homepage_layouts" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL UNIQUE,
-  "layout" text NOT NULL DEFAULT '{}',
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "homepage_layouts" RENAME TO "p_homepage_homepage_layouts";
-CREATE TABLE IF NOT EXISTS "dashboard_service_links" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "label" text NOT NULL,
-  "url" text NOT NULL,
-  "order" integer NOT NULL DEFAULT 0,
-  "sync_id" varchar(255) UNIQUE,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_dashboard_service_links_user_id" ON "dashboard_service_links" ("user_id");
-ALTER TABLE "dashboard_service_links" RENAME TO "p_homepage_dashboard_service_links";
diff --git a/plugins/homepage/migrations/snapshot.json b/plugins/homepage/migrations/snapshot.json
deleted file mode 100644
index eecf2f8ae..000000000
--- a/plugins/homepage/migrations/snapshot.json
+++ /dev/null
@@ -1,132 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "homepage_items": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "typeId": {
-          "type": "text",
-          "notNull": true
-        },
-        "title": {
-          "type": "text"
-        },
-        "config": {
-          "type": "text",
-          "notNull": true,
-          "defaultValue": "{}"
-        },
-        "folderId": {
-          "type": "integer"
-        },
-        "syncId": {
-          "type": "varchar",
-          "length": 255,
-          "unique": true
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "updatedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_homepage_items_user_id",
-          "columns": ["userId"]
-        }
-      ],
-      "adopts": "homepage_items"
-    },
-    "homepage_layouts": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true,
-          "unique": true
-        },
-        "layout": {
-          "type": "text",
-          "notNull": true,
-          "defaultValue": "{}"
-        },
-        "updatedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [],
-      "adopts": "homepage_layouts"
-    },
-    "dashboard_service_links": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "label": {
-          "type": "text",
-          "notNull": true
-        },
-        "url": {
-          "type": "text",
-          "notNull": true
-        },
-        "order": {
-          "type": "integer",
-          "notNull": true,
-          "defaultValue": 0
-        },
-        "syncId": {
-          "type": "varchar",
-          "length": 255,
-          "unique": true
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "updatedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_dashboard_service_links_user_id",
-          "columns": ["userId"]
-        }
-      ],
-      "adopts": "dashboard_service_links"
-    }
-  }
-}
diff --git a/plugins/homepage/migrations/sqlite/0001_adopt_homepage_tables.sql b/plugins/homepage/migrations/sqlite/0001_adopt_homepage_tables.sql
deleted file mode 100644
index 5c469d2c9..000000000
--- a/plugins/homepage/migrations/sqlite/0001_adopt_homepage_tables.sql
+++ /dev/null
@@ -1,38 +0,0 @@
--- homepage 0001: adopt_homepage_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "homepage_items" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "type_id" text NOT NULL,
-  "title" text,
-  "config" text NOT NULL DEFAULT '{}',
-  "folder_id" integer,
-  "sync_id" text UNIQUE,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_homepage_items_user_id" ON "homepage_items" ("user_id");
-ALTER TABLE "homepage_items" RENAME TO "p_homepage_homepage_items";
-CREATE TABLE IF NOT EXISTS "homepage_layouts" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL UNIQUE,
-  "layout" text NOT NULL DEFAULT '{}',
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "homepage_layouts" RENAME TO "p_homepage_homepage_layouts";
-CREATE TABLE IF NOT EXISTS "dashboard_service_links" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "label" text NOT NULL,
-  "url" text NOT NULL,
-  "order" integer NOT NULL DEFAULT 0,
-  "sync_id" text UNIQUE,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_dashboard_service_links_user_id" ON "dashboard_service_links" ("user_id");
-ALTER TABLE "dashboard_service_links" RENAME TO "p_homepage_dashboard_service_links";
diff --git a/plugins/homepage/package.json b/plugins/homepage/package.json
deleted file mode 100644
index 5df858d22..000000000
--- a/plugins/homepage/package.json
+++ /dev/null
@@ -1,32 +0,0 @@
-{
-  "name": "@termix-plugin/homepage",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "lucide-react": "^1.33.0"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "react": "^19.2.8"
-  }
-}
diff --git a/plugins/homepage/src/backend/index.ts b/plugins/homepage/src/backend/index.ts
deleted file mode 100644
index d8dd15725..000000000
--- a/plugins/homepage/src/backend/index.ts
+++ /dev/null
@@ -1,77 +0,0 @@
-import { mapLayoutItemIds } from "./layout-item-ids.js";
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import {
-  homepageItems,
-  homepageLayouts,
-  dashboardServiceLinks,
-} from "./tables.js";
-import { createHomepageRepository } from "./repository.js";
-import { registerHomepageRoutes } from "./routes.js";
-import { registerOutboundRoutes } from "./outbound-routes.js";
-import { createHomepageItemsService } from "./services.js";
-
-export type { HomepageItemsV1 } from "./services.js";
-
-export async function activate(ctx: PluginContext) {
-  const items = await ctx.db.define(homepageItems);
-  const layouts = await ctx.db.define(homepageLayouts);
-  const serviceLinks = await ctx.db.define(dashboardServiceLinks);
-  const repo = createHomepageRepository(ctx.db, {
-    items,
-    layouts,
-    serviceLinks,
-  });
-
-  const router = ctx.http.router<Router>();
-  registerHomepageRoutes(router, repo, ctx);
-  registerOutboundRoutes(router, ctx);
-
-  ctx.sync.registerEntity({
-    type: "homepageItems",
-    table: items,
-    order: 80,
-    // A tile inside a folder points at the folder's row.
-    references: [
-      {
-        field: "folderId",
-        syncField: "folderSyncId",
-        entityType: "homepageItems",
-      },
-    ],
-  });
-  ctx.sync.registerEntity({
-    type: "dashboardServiceLinks",
-    table: serviceLinks,
-    order: 70,
-  });
-
-  ctx.sync.registerEntity({
-    type: "homepageLayouts",
-    table: layouts,
-    order: 81,
-    singleton: true,
-    serialize: async (row, resolveSyncId) => ({
-      ...row,
-      layout: await mapLayoutItemIds(row.layout as string, async (id) =>
-        typeof id === "number" && Number.isInteger(id)
-          ? resolveSyncId("homepageItems", id)
-          : null,
-      ),
-    }),
-    deserialize: async (row, resolveId) => ({
-      ...row,
-      layout: await mapLayoutItemIds(row.layout as string, async (id) =>
-        typeof id === "string" ? resolveId("homepageItems", id) : null,
-      ),
-    }),
-  });
-
-  ctx.services.provide("homepage.items", createHomepageItemsService(ctx, repo));
-
-  ctx.log.info("Homepage routes mounted at /plugin-api/homepage");
-}
-
-export async function deactivate() {
-  // Everything above was registered through ctx and is disposed by core.
-}
diff --git a/plugins/homepage/src/backend/layout-item-ids.ts b/plugins/homepage/src/backend/layout-item-ids.ts
deleted file mode 100644
index f39d1002e..000000000
--- a/plugins/homepage/src/backend/layout-item-ids.ts
+++ /dev/null
@@ -1,22 +0,0 @@
-/** Canvas positions refer to local widget ids; only sync ids can cross devices. */
-export async function mapLayoutItemIds(
-  layoutJson: string,
-  mapId: (id: string | number) => Promise<string | number | null>,
-): Promise<string> {
-  const layout = JSON.parse(layoutJson);
-  if (!layout || typeof layout !== "object" || Array.isArray(layout)) {
-    throw new Error("Invalid homepage layout");
-  }
-  if (layout.entries === undefined) return layoutJson;
-  if (!Array.isArray(layout.entries))
-    throw new Error("Invalid homepage layout entries");
-  const entries = [];
-  for (const entry of layout.entries) {
-    if (!entry || typeof entry !== "object") continue;
-    const id = entry.itemId;
-    if (typeof id !== "string" && typeof id !== "number") continue;
-    const itemId = await mapId(id);
-    if (itemId !== null) entries.push({ ...entry, itemId });
-  }
-  return JSON.stringify({ ...layout, entries });
-}
diff --git a/plugins/homepage/src/backend/outbound-routes.ts b/plugins/homepage/src/backend/outbound-routes.ts
deleted file mode 100644
index 7a2a5c048..000000000
--- a/plugins/homepage/src/backend/outbound-routes.ts
+++ /dev/null
@@ -1,462 +0,0 @@
-import type { Request, Response, Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-
-const FETCH_TIMEOUT_MS = 8000;
-const MAX_FAVICON_BYTES = 512 * 1024;
-const MAX_RESPONSE_BYTES = 5 * 1024 * 1024;
-const MAX_CACHE_TTL_SECONDS = 24 * 60 * 60;
-
-interface RssItem {
-  title: string;
-  link: string;
-  pubDate: string | null;
-  description: string | null;
-}
-
-async function readBufferLimited(
-  response: globalThis.Response,
-  maxBytes: number,
-): Promise<Buffer> {
-  const declaredLength = Number(response.headers.get("content-length"));
-  if (Number.isFinite(declaredLength) && declaredLength > maxBytes) {
-    await response.body?.cancel().catch(() => {});
-    throw new Error(`Response exceeds ${maxBytes} bytes`);
-  }
-  if (!response.body) return Buffer.alloc(0);
-  const reader = response.body.getReader();
-  const chunks: Uint8Array[] = [];
-  let total = 0;
-  while (true) {
-    const { done, value } = await reader.read();
-    if (done) break;
-    total += value.byteLength;
-    if (total > maxBytes) {
-      await reader.cancel().catch(() => {});
-      throw new Error(`Response exceeds ${maxBytes} bytes`);
-    }
-    chunks.push(value);
-  }
-  return Buffer.concat(chunks, total);
-}
-
-async function readTextLimited(
-  response: globalThis.Response,
-  maxBytes: number,
-): Promise<string> {
-  const buffer = await readBufferLimited(response, maxBytes);
-  return buffer.toString("utf8");
-}
-
-function parseRss(xml: string): RssItem[] {
-  const items: RssItem[] = [];
-  const itemRegex = /<item[\s>]([\s\S]*?)<\/item>/gi;
-  let match: RegExpExecArray | null;
-
-  const getText = (tag: string, src: string): string | null => {
-    const m = new RegExp(
-      `<${tag}[^>]*><!\\[CDATA\\[([\\s\\S]*?)\\]\\]><\\/${tag}>|<${tag}[^>]*>([\\s\\S]*?)<\\/${tag}>`,
-      "i",
-    ).exec(src);
-    if (!m) return null;
-    return (m[1] ?? m[2]).trim();
-  };
-
-  const getLink = (src: string): string => {
-    // Self-closing <link rel="alternate" href="..." /> (BBC style)
-    const selfClose = /<link[^>]+href="([^"]+)"[^>]*\/?>/i.exec(src);
-    if (selfClose) return selfClose[1];
-    // Plain text <link>url</link>
-    return getText("link", src) ?? "";
-  };
-
-  while ((match = itemRegex.exec(xml)) !== null) {
-    const src = match[1];
-    items.push({
-      title: getText("title", src) ?? "(no title)",
-      link: getLink(src),
-      pubDate: getText("pubDate", src) ?? getText("updated", src),
-      description: getText("description", src) ?? getText("summary", src),
-    });
-    if (items.length >= 50) break;
-  }
-
-  // Atom feed fallback
-  if (items.length === 0) {
-    const entryRegex = /<entry[\s>]([\s\S]*?)<\/entry>/gi;
-    while ((match = entryRegex.exec(xml)) !== null) {
-      const src = match[1];
-      const linkMatch = /<link[^>]+href="([^"]+)"/.exec(src);
-      items.push({
-        title: getText("title", src) ?? "(no title)",
-        link: linkMatch?.[1] ?? "",
-        pubDate: getText("published", src) ?? getText("updated", src),
-        description: getText("summary", src) ?? getText("content", src),
-      });
-      if (items.length >= 50) break;
-    }
-  }
-
-  return items;
-}
-
-/**
- * The favicon, RSS, ping and proxy routes all make outbound requests. Every
- * one goes through ctx.fetch, which keeps the existing safe-outbound rules
- * (http/https only, no embedded credentials, DNS pinned, private and
- * loopback addresses refused).
- */
-export function registerOutboundRoutes(
-  router: Router,
-  ctx: PluginContext,
-): void {
-  const faviconCache = new Map<
-    string,
-    { data: Buffer; contentType: string; expires: number }
-  >();
-  const FAVICON_CACHE_SIZE = 100;
-  const FAVICON_CACHE_TTL_MS = 1000 * 60 * 60 * 24;
-
-  const rssCache = new Map<string, { data: RssItem[]; expires: number }>();
-  const RSS_CACHE_SIZE = 50;
-  const RSS_CACHE_TTL_MS = 1000 * 60 * 15;
-
-  interface PingCacheEntry {
-    ok: boolean;
-    statusCode: number | null;
-    latencyMs: number;
-    expires: number;
-  }
-  const pingCache = new Map<string, PingCacheEntry>();
-
-  const privateRequestOptions = async (url: string) => {
-    const settings = await ctx.settings.getAll("admin");
-    const raw = settings.privateEndpoints;
-    const allowPrivateHosts =
-      typeof raw === "string"
-        ? [
-            ...new Set(
-              raw
-                .split(/[\r\n,]+/)
-                .map((host) => host.trim().toLowerCase())
-                .filter((host) => /^[a-z0-9._:-]+$/.test(host)),
-            ),
-          ]
-        : [];
-    const hostname = new URL(url).hostname
-      .replace(/^\[|\]$/g, "")
-      .toLowerCase();
-    const ca = settings.privateCertificateAuthority;
-    return {
-      allowPrivateHosts,
-      ...(allowPrivateHosts.includes(hostname) &&
-      typeof ca === "string" &&
-      ca.trim()
-        ? { tls: { ca: ca.trim() } }
-        : {}),
-    };
-  };
-
-  const PING_CACHE_SIZE = 200;
-
-  const proxyCache = new Map<string, { data: unknown; expires: number }>();
-  const PROXY_CACHE_SIZE = 50;
-
-  /**
-   * @openapi
-   * /plugin-api/homepage/favicon:
-   *   get:
-   *     summary: Proxy favicon fetch
-   *     description: Fetches and caches a site favicon server-side to avoid CORS issues.
-   *     tags:
-   *       - Homepage
-   *     parameters:
-   *       - in: query
-   *         name: url
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: Favicon image.
-   *       400:
-   *         description: Invalid URL.
-   *       500:
-   *         description: Failed to fetch favicon.
-   */
-  router.get("/favicon", async (req: Request, res: Response) => {
-    const rawUrl = req.query.url as string;
-    if (!rawUrl) return res.status(400).json({ error: "url is required" });
-
-    let domain: string;
-    try {
-      domain = new URL(rawUrl).hostname;
-    } catch {
-      return res.status(400).json({ error: "Invalid URL" });
-    }
-
-    const cached = faviconCache.get(domain);
-    if (cached && cached.expires > Date.now()) {
-      res.setHeader("Content-Type", cached.contentType);
-      res.setHeader("Cache-Control", "public, max-age=86400");
-      return res.send(cached.data);
-    }
-
-    const faviconUrl = `https://www.google.com/s2/favicons?sz=64&domain_url=${encodeURIComponent(domain)}`;
-
-    try {
-      const response = await ctx.fetch(faviconUrl, {
-        timeoutMs: FETCH_TIMEOUT_MS,
-      });
-      if (!response.ok)
-        throw new Error(`Favicon fetch failed: ${response.status}`);
-      const data = await readBufferLimited(response, MAX_FAVICON_BYTES);
-      const contentType =
-        response.headers.get("content-type") || "image/x-icon";
-
-      if (faviconCache.size >= FAVICON_CACHE_SIZE) {
-        const oldest = faviconCache.keys().next().value;
-        if (oldest) faviconCache.delete(oldest);
-      }
-      faviconCache.set(domain, {
-        data,
-        contentType,
-        expires: Date.now() + FAVICON_CACHE_TTL_MS,
-      });
-      res.setHeader("Content-Type", contentType);
-      res.setHeader("Cache-Control", "public, max-age=86400");
-      res.send(data);
-    } catch {
-      ctx.log.warn(`Failed to fetch favicon for ${domain}`);
-      res.status(500).json({ error: "Failed to fetch favicon" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/homepage/rss:
-   *   get:
-   *     summary: Proxy and parse an RSS/Atom feed
-   *     tags:
-   *       - Homepage
-   *     parameters:
-   *       - in: query
-   *         name: url
-   *         required: true
-   *         schema:
-   *           type: string
-   *       - in: query
-   *         name: max
-   *         schema:
-   *           type: integer
-   *           default: 10
-   *     responses:
-   *       200:
-   *         description: Array of feed items.
-   *       400:
-   *         description: Invalid or missing URL.
-   *       500:
-   *         description: Failed to fetch or parse the feed.
-   */
-  router.get("/rss", async (req: Request, res: Response) => {
-    const feedUrl = req.query.url as string;
-    const max = Math.min(50, Math.max(1, Number(req.query.max) || 10));
-
-    if (!feedUrl) return res.status(400).json({ error: "url is required" });
-    try {
-      new URL(feedUrl);
-    } catch {
-      return res.status(400).json({ error: "Invalid URL" });
-    }
-
-    const cached = rssCache.get(feedUrl);
-    if (cached && cached.expires > Date.now()) {
-      return res.json(cached.data.slice(0, max));
-    }
-
-    try {
-      const response = await ctx.fetch(feedUrl, {
-        timeoutMs: FETCH_TIMEOUT_MS,
-      });
-      if (!response.ok) throw new Error(`RSS fetch failed: ${response.status}`);
-      const xml = await readTextLimited(response, MAX_RESPONSE_BYTES);
-      const items = parseRss(xml);
-
-      if (rssCache.size >= RSS_CACHE_SIZE) {
-        const oldest = rssCache.keys().next().value;
-        if (oldest) rssCache.delete(oldest);
-      }
-      rssCache.set(feedUrl, {
-        data: items,
-        expires: Date.now() + RSS_CACHE_TTL_MS,
-      });
-
-      res.json(items.slice(0, max));
-    } catch {
-      ctx.log.warn(`Failed to fetch RSS feed ${feedUrl}`);
-      res.status(500).json({ error: "Failed to fetch feed" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/homepage/ping:
-   *   get:
-   *     summary: Check the HTTP reachability and latency of a URL
-   *     tags:
-   *       - Homepage
-   *     parameters:
-   *       - in: query
-   *         name: url
-   *         required: true
-   *         schema:
-   *           type: string
-   *       - in: query
-   *         name: ttl
-   *         schema:
-   *           type: integer
-   *           description: Cache TTL in seconds (min 10)
-   *     responses:
-   *       200:
-   *         description: Ping result with ok, statusCode and latencyMs.
-   *       400:
-   *         description: Invalid or missing URL.
-   */
-  router.get("/ping", async (req: Request, res: Response) => {
-    let targetUrl = req.query.url as string;
-    const ttl = Math.max(10, Number(req.query.ttl) || 30) * 1000;
-
-    if (!targetUrl) return res.status(400).json({ error: "url is required" });
-    if (!/^https?:\/\//i.test(targetUrl)) targetUrl = `https://${targetUrl}`;
-    try {
-      new URL(targetUrl);
-    } catch {
-      return res.status(400).json({ error: "Invalid URL" });
-    }
-
-    const requestOptions = await privateRequestOptions(targetUrl);
-    const cacheKey = JSON.stringify([targetUrl, requestOptions]);
-    const cached = pingCache.get(cacheKey);
-    if (cached && cached.expires > Date.now()) {
-      return res.json({
-        ok: cached.ok,
-        statusCode: cached.statusCode,
-        latencyMs: cached.latencyMs,
-      });
-    }
-
-    const requestStatus = async (
-      url: string,
-      method: "HEAD" | "GET",
-    ): Promise<number | null> => {
-      const response = await ctx.fetch(url, {
-        ...requestOptions,
-        method,
-        redirect: "manual",
-        timeoutMs: FETCH_TIMEOUT_MS,
-      });
-      await response.body?.cancel().catch(() => {});
-      return response.status ?? null;
-    };
-
-    const start = performance.now();
-    try {
-      let code = await requestStatus(targetUrl, "HEAD");
-      if (code === 405) {
-        code = await requestStatus(targetUrl, "GET");
-      }
-      const result = {
-        ok: code !== null && (code < 400 || code === 401 || code === 403),
-        statusCode: code,
-        latencyMs: Math.round(performance.now() - start),
-      };
-      if (pingCache.size >= PING_CACHE_SIZE) {
-        const oldest = pingCache.keys().next().value;
-        if (oldest) pingCache.delete(oldest);
-      }
-      pingCache.set(cacheKey, { ...result, expires: Date.now() + ttl });
-      res.json(result);
-    } catch (err) {
-      ctx.log.warn(`Ping failed for ${targetUrl}: ${String(err)}`);
-      res.status(500).json({ error: "Ping failed" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/homepage/proxy:
-   *   get:
-   *     summary: Proxy a JSON API URL and return the parsed response
-   *     tags:
-   *       - Homepage
-   *     parameters:
-   *       - in: query
-   *         name: url
-   *         required: true
-   *         schema:
-   *           type: string
-   *       - in: query
-   *         name: ttl
-   *         schema:
-   *           type: integer
-   *           description: Cache TTL in seconds (min 10, default 60)
-   *     responses:
-   *       200:
-   *         description: The JSON body returned by the target URL.
-   *       400:
-   *         description: Invalid or missing URL, or non-JSON response.
-   *       500:
-   *         description: Failed to fetch the target URL.
-   */
-  router.get("/proxy", async (req: Request, res: Response) => {
-    const targetUrl = req.query.url as string;
-    const ttl =
-      Math.min(
-        MAX_CACHE_TTL_SECONDS,
-        Math.max(10, Number(req.query.ttl) || 60),
-      ) * 1000;
-
-    if (!targetUrl) return res.status(400).json({ error: "url is required" });
-    try {
-      new URL(targetUrl);
-    } catch {
-      return res.status(400).json({ error: "Invalid URL" });
-    }
-
-    const requestOptions = await privateRequestOptions(targetUrl);
-    const cacheKey = JSON.stringify([targetUrl, requestOptions]);
-    const cached = proxyCache.get(cacheKey);
-    if (cached && cached.expires > Date.now()) {
-      return res.json(cached.data);
-    }
-
-    try {
-      const response = await ctx.fetch(targetUrl, {
-        ...requestOptions,
-        timeoutMs: FETCH_TIMEOUT_MS,
-      });
-      if (!response.ok)
-        throw new Error(`Proxy fetch failed: ${response.status}`);
-      const text = await readTextLimited(response, MAX_RESPONSE_BYTES);
-      let data: unknown;
-      try {
-        data = JSON.parse(text);
-      } catch {
-        throw new Error("Response is not valid JSON");
-      }
-
-      if (proxyCache.size >= PROXY_CACHE_SIZE) {
-        const oldest = proxyCache.keys().next().value;
-        if (oldest) proxyCache.delete(oldest);
-      }
-      proxyCache.set(cacheKey, { data, expires: Date.now() + ttl });
-      res.json(data);
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
-      ctx.log.warn(`Proxy fetch failed for ${targetUrl}: ${msg}`);
-      if (msg.includes("not valid JSON")) {
-        return res.status(400).json({ error: "Response is not valid JSON" });
-      }
-      res.status(500).json({ error: "Failed to fetch URL" });
-    }
-  });
-}
diff --git a/plugins/homepage/src/backend/repository.ts b/plugins/homepage/src/backend/repository.ts
deleted file mode 100644
index 8c830e169..000000000
--- a/plugins/homepage/src/backend/repository.ts
+++ /dev/null
@@ -1,288 +0,0 @@
-import { randomUUID } from "node:crypto";
-import { and, asc, eq } from "drizzle-orm";
-import type { PluginDatabase } from "@termix/plugin-sdk/backend";
-
-export interface HomepageItemRecord {
-  id: number;
-  userId: string;
-  typeId: string;
-  title: string | null;
-  config: string;
-  folderId: number | null;
-  syncId: string | null;
-  createdAt: string;
-  updatedAt: string;
-}
-
-export interface HomepageLayoutRecord {
-  id: number;
-  userId: string;
-  layout: string;
-  updatedAt: string;
-}
-
-export interface ServiceLinkRecord {
-  id: number;
-  userId: string;
-  label: string;
-  url: string;
-  order: number;
-  syncId: string | null;
-  createdAt: string;
-  updatedAt: string;
-}
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// Tables come from ctx.db.define, which the SDK hands back untyped, and the
-// drizzle handle is the server's own. Typed at this module's edge instead.
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export type HomepageRepository = ReturnType<typeof createHomepageRepository>;
-
-export function createHomepageRepository(
-  db: PluginDatabase,
-  tables: { items: Table; layouts: Table; serviceLinks: Table },
-) {
-  const client = () => db.client<Drizzle>();
-
-  async function findItemById(
-    userId: string,
-    id: number,
-  ): Promise<HomepageItemRecord | null> {
-    const drizzle = await client();
-    const rows = await drizzle
-      .select()
-      .from(tables.items)
-      .where(and(eq(tables.items.id, id), eq(tables.items.userId, userId)))
-      .limit(1);
-    return (rows[0] as HomepageItemRecord) ?? null;
-  }
-
-  async function findItemBySyncId(syncId: string): Promise<HomepageItemRecord> {
-    const drizzle = await client();
-    const rows = await drizzle
-      .select()
-      .from(tables.items)
-      .where(eq(tables.items.syncId, syncId))
-      .limit(1);
-    return rows[0] as HomepageItemRecord;
-  }
-
-  async function findServiceLinkById(
-    userId: string,
-    id: number,
-  ): Promise<ServiceLinkRecord | null> {
-    const drizzle = await client();
-    const rows = await drizzle
-      .select()
-      .from(tables.serviceLinks)
-      .where(
-        and(
-          eq(tables.serviceLinks.id, id),
-          eq(tables.serviceLinks.userId, userId),
-        ),
-      )
-      .limit(1);
-    return (rows[0] as ServiceLinkRecord) ?? null;
-  }
-
-  async function findServiceLinkBySyncId(
-    syncId: string,
-  ): Promise<ServiceLinkRecord> {
-    const drizzle = await client();
-    const rows = await drizzle
-      .select()
-      .from(tables.serviceLinks)
-      .where(eq(tables.serviceLinks.syncId, syncId))
-      .limit(1);
-    return rows[0] as ServiceLinkRecord;
-  }
-
-  return {
-    findItemById,
-
-    async listItemsByUser(userId: string): Promise<HomepageItemRecord[]> {
-      const drizzle = await client();
-      return drizzle
-        .select()
-        .from(tables.items)
-        .where(eq(tables.items.userId, userId));
-    },
-
-    async createItem(
-      userId: string,
-      input: { typeId: string; title: string | null; config: string },
-    ): Promise<HomepageItemRecord> {
-      const syncId = randomUUID();
-      const now = new Date().toISOString();
-      const drizzle = await client();
-      await drizzle.insert(tables.items).values({
-        userId,
-        typeId: input.typeId,
-        title: input.title,
-        config: input.config,
-        syncId,
-        createdAt: now,
-        updatedAt: now,
-      });
-      await db.persist();
-      return findItemBySyncId(syncId);
-    },
-
-    async updateItem(
-      userId: string,
-      id: number,
-      updates: { title?: string | null; config?: string },
-    ): Promise<HomepageItemRecord | null> {
-      const existing = await findItemById(userId, id);
-      if (!existing) return null;
-      const drizzle = await client();
-      await drizzle
-        .update(tables.items)
-        .set({ ...updates, updatedAt: new Date().toISOString() })
-        .where(and(eq(tables.items.id, id), eq(tables.items.userId, userId)));
-      await db.persist();
-      return findItemById(userId, id);
-    },
-
-    async deleteItem(
-      userId: string,
-      id: number,
-    ): Promise<HomepageItemRecord | null> {
-      const existing = await findItemById(userId, id);
-      if (!existing) return null;
-      const drizzle = await client();
-      await drizzle
-        .delete(tables.items)
-        .where(and(eq(tables.items.id, id), eq(tables.items.userId, userId)));
-      await db.persist();
-      return existing;
-    },
-
-    async findLayoutByUser(
-      userId: string,
-    ): Promise<HomepageLayoutRecord | null> {
-      const drizzle = await client();
-      const rows = await drizzle
-        .select()
-        .from(tables.layouts)
-        .where(eq(tables.layouts.userId, userId))
-        .limit(1);
-      return (rows[0] as HomepageLayoutRecord) ?? null;
-    },
-
-    async upsertLayout(
-      userId: string,
-      layout: string,
-      now: string,
-    ): Promise<HomepageLayoutRecord> {
-      const drizzle = await client();
-      const existing = await drizzle
-        .select()
-        .from(tables.layouts)
-        .where(eq(tables.layouts.userId, userId))
-        .limit(1);
-
-      if (existing[0]) {
-        await drizzle
-          .update(tables.layouts)
-          .set({ layout, updatedAt: now })
-          .where(eq(tables.layouts.userId, userId));
-      } else {
-        await drizzle.insert(tables.layouts).values({
-          userId,
-          layout,
-          updatedAt: now,
-        });
-      }
-      await db.persist();
-      const rows = await drizzle
-        .select()
-        .from(tables.layouts)
-        .where(eq(tables.layouts.userId, userId))
-        .limit(1);
-      return rows[0] as HomepageLayoutRecord;
-    },
-
-    findServiceLinkById,
-
-    async listServiceLinksByUser(userId: string): Promise<ServiceLinkRecord[]> {
-      const drizzle = await client();
-      return drizzle
-        .select()
-        .from(tables.serviceLinks)
-        .where(eq(tables.serviceLinks.userId, userId))
-        .orderBy(asc(tables.serviceLinks.order), asc(tables.serviceLinks.id));
-    },
-
-    async createServiceLink(
-      userId: string,
-      input: { label: string; url: string },
-    ): Promise<ServiceLinkRecord> {
-      const drizzle = await client();
-      const existing = await drizzle
-        .select({ order: tables.serviceLinks.order })
-        .from(tables.serviceLinks)
-        .where(eq(tables.serviceLinks.userId, userId))
-        .orderBy(asc(tables.serviceLinks.order));
-      const nextOrder =
-        existing.length > 0 ? existing[existing.length - 1].order + 1 : 0;
-
-      const syncId = randomUUID();
-      const now = new Date().toISOString();
-      await drizzle.insert(tables.serviceLinks).values({
-        userId,
-        label: input.label,
-        url: input.url,
-        order: nextOrder,
-        syncId,
-        createdAt: now,
-        updatedAt: now,
-      });
-      await db.persist();
-      return findServiceLinkBySyncId(syncId);
-    },
-
-    async updateServiceLink(
-      userId: string,
-      id: number,
-      updates: { label?: string; url?: string },
-    ): Promise<ServiceLinkRecord | null> {
-      const existing = await findServiceLinkById(userId, id);
-      if (!existing) return null;
-      const drizzle = await client();
-      await drizzle
-        .update(tables.serviceLinks)
-        .set({ ...updates, updatedAt: new Date().toISOString() })
-        .where(
-          and(
-            eq(tables.serviceLinks.id, id),
-            eq(tables.serviceLinks.userId, userId),
-          ),
-        );
-      await db.persist();
-      return findServiceLinkById(userId, id);
-    },
-
-    async deleteServiceLink(
-      userId: string,
-      id: number,
-    ): Promise<ServiceLinkRecord | null> {
-      const existing = await findServiceLinkById(userId, id);
-      if (!existing) return null;
-      const drizzle = await client();
-      await drizzle
-        .delete(tables.serviceLinks)
-        .where(
-          and(
-            eq(tables.serviceLinks.id, id),
-            eq(tables.serviceLinks.userId, userId),
-          ),
-        );
-      await db.persist();
-      return existing;
-    },
-  };
-}
diff --git a/plugins/homepage/src/backend/routes.ts b/plugins/homepage/src/backend/routes.ts
deleted file mode 100644
index a6f89db3e..000000000
--- a/plugins/homepage/src/backend/routes.ts
+++ /dev/null
@@ -1,519 +0,0 @@
-import type { Request, Response, Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { HomepageRepository } from "./repository.js";
-import { isValidServiceLinkUrl, normalizeServiceLinkUrl } from "./url.js";
-
-function actor(ctx: PluginContext): string {
-  // Core's plugin router authenticates every request and runs it as that user.
-  return ctx.currentActor() as string;
-}
-
-function parseId(raw: unknown): number | null {
-  const id = typeof raw === "string" ? parseInt(raw, 10) : NaN;
-  return Number.isInteger(id) ? id : null;
-}
-
-function isNonEmptyString(val: unknown): val is string {
-  return typeof val === "string" && val.trim().length > 0;
-}
-
-function logError(
-  ctx: PluginContext,
-  message: string,
-  error: unknown,
-  operation: string,
-): void {
-  ctx.log.error(
-    `${message} (${operation})`,
-    error instanceof Error ? error : new Error(String(error)),
-  );
-}
-
-/**
- * Mounts the homepage routes on the plugin's router, served at
- * /plugin-api/homepage with core auth in front.
- */
-export function registerHomepageRoutes(
-  router: Router,
-  repo: HomepageRepository,
-  ctx: PluginContext,
-): void {
-  router.use(ctx.rbac.require("use") as never);
-
-  /**
-   * @openapi
-   * /plugin-api/homepage/items:
-   *   get:
-   *     summary: Get homepage items
-   *     description: Returns all homepage widget items for the authenticated user.
-   *     tags:
-   *       - Homepage
-   *     responses:
-   *       200:
-   *         description: List of homepage items.
-   *       500:
-   *         description: Failed to fetch homepage items.
-   */
-  router.get("/items", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    try {
-      const items = await repo.listItemsByUser(userId);
-      res.json(items);
-    } catch (err) {
-      logError(
-        ctx,
-        "Failed to fetch homepage items",
-        err,
-        "homepage_items_list_failed",
-      );
-      res.status(500).json({ error: "Failed to fetch homepage items" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/homepage/items:
-   *   post:
-   *     summary: Create homepage item
-   *     description: Creates a new homepage widget item for the authenticated user.
-   *     tags:
-   *       - Homepage
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required:
-   *               - typeId
-   *             properties:
-   *               typeId:
-   *                 type: string
-   *               title:
-   *                 type: string
-   *               config:
-   *                 type: object
-   *     responses:
-   *       201:
-   *         description: Homepage item created.
-   *       400:
-   *         description: Invalid data.
-   *       500:
-   *         description: Failed to create homepage item.
-   */
-  router.post("/items", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const { typeId, title, config } = req.body ?? {};
-
-    if (!isNonEmptyString(typeId)) {
-      return res.status(400).json({ error: "typeId is required" });
-    }
-
-    try {
-      const created = await repo.createItem(userId, {
-        typeId,
-        title: title ?? null,
-        config: config ? JSON.stringify(config) : "{}",
-      });
-      res.status(201).json(created);
-    } catch (err) {
-      logError(
-        ctx,
-        "Failed to create homepage item",
-        err,
-        "homepage_item_create_failed",
-      );
-      res.status(500).json({ error: "Failed to create homepage item" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/homepage/items/{id}:
-   *   put:
-   *     summary: Update homepage item
-   *     description: Updates a homepage widget item's title or config.
-   *     tags:
-   *       - Homepage
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               title:
-   *                 type: string
-   *               config:
-   *                 type: object
-   *     responses:
-   *       200:
-   *         description: Homepage item updated.
-   *       400:
-   *         description: Invalid id.
-   *       404:
-   *         description: Not found.
-   *       500:
-   *         description: Failed to update homepage item.
-   */
-  router.put("/items/:id", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const id = parseId(req.params.id);
-    if (id === null) return res.status(400).json({ error: "Invalid id" });
-
-    const { title, config } = req.body ?? {};
-    const updates: { title?: string | null; config?: string } = {};
-    if (title !== undefined) updates.title = title;
-    if (config !== undefined) updates.config = JSON.stringify(config);
-
-    try {
-      const updated = await repo.updateItem(userId, id, updates);
-      if (!updated) return res.status(404).json({ error: "Not found" });
-      res.json(updated);
-    } catch (err) {
-      logError(
-        ctx,
-        "Failed to update homepage item",
-        err,
-        "homepage_item_update_failed",
-      );
-      res.status(500).json({ error: "Failed to update homepage item" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/homepage/items/{id}:
-   *   delete:
-   *     summary: Delete homepage item
-   *     description: Deletes a homepage widget item.
-   *     tags:
-   *       - Homepage
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Homepage item deleted.
-   *       400:
-   *         description: Invalid id.
-   *       404:
-   *         description: Not found.
-   *       500:
-   *         description: Failed to delete homepage item.
-   */
-  router.delete("/items/:id", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const id = parseId(req.params.id);
-    if (id === null) return res.status(400).json({ error: "Invalid id" });
-
-    try {
-      const deleted = await repo.deleteItem(userId, id);
-      if (!deleted) return res.status(404).json({ error: "Not found" });
-      res.json({ message: "Homepage item deleted" });
-    } catch (err) {
-      logError(
-        ctx,
-        "Failed to delete homepage item",
-        err,
-        "homepage_item_delete_failed",
-      );
-      res.status(500).json({ error: "Failed to delete homepage item" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/homepage/layout:
-   *   get:
-   *     summary: Get homepage layout
-   *     description: Returns the homepage canvas layout (widget positions, pan, zoom) for the authenticated user.
-   *     tags:
-   *       - Homepage
-   *     responses:
-   *       200:
-   *         description: Layout data or null.
-   *       500:
-   *         description: Failed to fetch homepage layout.
-   */
-  router.get("/layout", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    try {
-      const row = await repo.findLayoutByUser(userId);
-      if (!row) return res.json(null);
-      const parsed = JSON.parse(row.layout || "{}");
-      res.json({ ...row, layout: parsed });
-    } catch (err) {
-      logError(
-        ctx,
-        "Failed to fetch homepage layout",
-        err,
-        "homepage_layout_get_failed",
-      );
-      res.status(500).json({ error: "Failed to fetch homepage layout" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/homepage/layout:
-   *   put:
-   *     summary: Save homepage layout
-   *     description: Saves or updates the homepage canvas layout for the authenticated user.
-   *     tags:
-   *       - Homepage
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               entries:
-   *                 type: array
-   *               pan:
-   *                 type: object
-   *               zoom:
-   *                 type: number
-   *     responses:
-   *       200:
-   *         description: Layout saved.
-   *       500:
-   *         description: Failed to save homepage layout.
-   */
-  router.put("/layout", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    try {
-      const layoutJson = JSON.stringify(req.body ?? {});
-      const now = new Date().toISOString();
-      const updated = await repo.upsertLayout(userId, layoutJson, now);
-      const parsed = JSON.parse(updated.layout);
-      res.json({ ...updated, layout: parsed });
-    } catch (err) {
-      logError(
-        ctx,
-        "Failed to save homepage layout",
-        err,
-        "homepage_layout_save_failed",
-      );
-      res.status(500).json({ error: "Failed to save homepage layout" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/homepage/service-links:
-   *   get:
-   *     summary: Get service links
-   *     description: Returns all dashboard service links for the authenticated user.
-   *     tags:
-   *       - Homepage
-   *     responses:
-   *       200:
-   *         description: List of service links.
-   *       500:
-   *         description: Failed to fetch service links.
-   */
-  router.get("/service-links", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    try {
-      const links = await repo.listServiceLinksByUser(userId);
-      res.json(links);
-    } catch (err) {
-      logError(
-        ctx,
-        "Failed to fetch service links",
-        err,
-        "service_links_list_failed",
-      );
-      res.status(500).json({ error: "Failed to fetch service links" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/homepage/service-links:
-   *   post:
-   *     summary: Create service link
-   *     description: Creates a new dashboard service link for the authenticated user.
-   *     tags:
-   *       - Homepage
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required:
-   *               - label
-   *               - url
-   *             properties:
-   *               label:
-   *                 type: string
-   *               url:
-   *                 type: string
-   *     responses:
-   *       201:
-   *         description: Service link created.
-   *       400:
-   *         description: Invalid data.
-   *       500:
-   *         description: Failed to create service link.
-   */
-  router.post("/service-links", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const { label, url } = req.body ?? {};
-
-    if (!isNonEmptyString(label) || !isNonEmptyString(url)) {
-      return res.status(400).json({ error: "label and url are required" });
-    }
-    const normalizedUrl = normalizeServiceLinkUrl(url);
-    if (!isValidServiceLinkUrl(normalizedUrl)) {
-      return res
-        .status(400)
-        .json({ error: "url must be a valid http or https URL" });
-    }
-
-    try {
-      const created = await repo.createServiceLink(userId, {
-        label: label.trim(),
-        url: normalizedUrl,
-      });
-      res.status(201).json(created);
-    } catch (err) {
-      logError(
-        ctx,
-        "Failed to create service link",
-        err,
-        "service_link_create_failed",
-      );
-      res.status(500).json({ error: "Failed to create service link" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/homepage/service-links/{id}:
-   *   put:
-   *     summary: Update service link
-   *     description: Updates label or url of a dashboard service link.
-   *     tags:
-   *       - Homepage
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               label:
-   *                 type: string
-   *               url:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Service link updated.
-   *       400:
-   *         description: Invalid data.
-   *       404:
-   *         description: Not found.
-   *       500:
-   *         description: Failed to update service link.
-   */
-  router.put("/service-links/:id", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const id = parseId(req.params.id);
-    if (id === null) return res.status(400).json({ error: "Invalid id" });
-
-    const { label, url } = req.body ?? {};
-    if (
-      url !== undefined &&
-      !isValidServiceLinkUrl(normalizeServiceLinkUrl(url))
-    ) {
-      return res
-        .status(400)
-        .json({ error: "url must be a valid http or https URL" });
-    }
-
-    const updates: { label?: string; url?: string } = {};
-    if (isNonEmptyString(label)) updates.label = label.trim();
-    if (isNonEmptyString(url)) updates.url = normalizeServiceLinkUrl(url);
-
-    if (Object.keys(updates).length === 0) {
-      return res.status(400).json({ error: "Nothing to update" });
-    }
-
-    try {
-      const updated = await repo.updateServiceLink(userId, id, updates);
-      if (!updated) return res.status(404).json({ error: "Not found" });
-      res.json(updated);
-    } catch (err) {
-      logError(
-        ctx,
-        "Failed to update service link",
-        err,
-        "service_link_update_failed",
-      );
-      res.status(500).json({ error: "Failed to update service link" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/homepage/service-links/{id}:
-   *   delete:
-   *     summary: Delete service link
-   *     description: Deletes a dashboard service link by id.
-   *     tags:
-   *       - Homepage
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Service link deleted.
-   *       400:
-   *         description: Invalid id.
-   *       404:
-   *         description: Not found.
-   *       500:
-   *         description: Failed to delete service link.
-   */
-  router.delete("/service-links/:id", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const id = parseId(req.params.id);
-    if (id === null) return res.status(400).json({ error: "Invalid id" });
-
-    try {
-      const deleted = await repo.deleteServiceLink(userId, id);
-      if (!deleted) return res.status(404).json({ error: "Not found" });
-      res.json({ message: "Service link deleted" });
-    } catch (err) {
-      logError(
-        ctx,
-        "Failed to delete service link",
-        err,
-        "service_link_delete_failed",
-      );
-      res.status(500).json({ error: "Failed to delete service link" });
-    }
-  });
-}
diff --git a/plugins/homepage/src/backend/services.ts b/plugins/homepage/src/backend/services.ts
deleted file mode 100644
index 15b237b60..000000000
--- a/plugins/homepage/src/backend/services.ts
+++ /dev/null
@@ -1,27 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { HomepageRepository } from "./repository.js";
-
-/** The "homepage.items" service, version 1. Runs as the caller's user. */
-export interface HomepageItemsV1 {
-  list: () => Promise<
-    Array<{ id: number; typeId: string; title: string | null }>
-  >;
-}
-
-export function createHomepageItemsService(
-  ctx: PluginContext,
-  repo: HomepageRepository,
-): HomepageItemsV1 {
-  return {
-    list: async () => {
-      const userId = ctx.currentActor();
-      if (!userId) return [];
-      const rows = await repo.listItemsByUser(userId);
-      return rows.map((row) => ({
-        id: row.id,
-        typeId: row.typeId,
-        title: row.title,
-      }));
-    },
-  };
-}
diff --git a/plugins/homepage/src/backend/tables.ts b/plugins/homepage/src/backend/tables.ts
deleted file mode 100644
index ed5399a68..000000000
--- a/plugins/homepage/src/backend/tables.ts
+++ /dev/null
@@ -1,68 +0,0 @@
-import {
-  adoptLegacyTable,
-  defineTable,
-  id,
-  integer,
-  refUser,
-  text,
-  timestamp,
-  varchar,
-} from "@termix/plugin-sdk/db";
-
-/** One homepage widget tile. folderId points at another row when it sits in a folder. */
-export const homepageItems = adoptLegacyTable(
-  "homepage_items",
-  defineTable(
-    "homepage_items",
-    {
-      id: id(),
-      userId: refUser(),
-      typeId: text().notNull(),
-      title: text(),
-      config: text().notNull().default("{}"),
-      folderId: integer(),
-      syncId: varchar().unique(),
-      createdAt: timestamp().notNull().defaultNow(),
-      updatedAt: timestamp().notNull().defaultNow(),
-    },
-    {
-      indexes: [{ name: "idx_homepage_items_user_id", columns: ["userId"] }],
-    },
-  ),
-);
-
-/** One canvas layout (widget positions, pan, zoom) per user. */
-export const homepageLayouts = adoptLegacyTable(
-  "homepage_layouts",
-  defineTable("homepage_layouts", {
-    id: id(),
-    userId: refUser().unique(),
-    layout: text().notNull().default("{}"),
-    updatedAt: timestamp().notNull().defaultNow(),
-  }),
-);
-
-/** Clickable dashboard service link buttons. */
-export const dashboardServiceLinks = adoptLegacyTable(
-  "dashboard_service_links",
-  defineTable(
-    "dashboard_service_links",
-    {
-      id: id(),
-      userId: refUser(),
-      label: text().notNull(),
-      url: text().notNull(),
-      order: integer().notNull().default(0),
-      syncId: varchar().unique(),
-      createdAt: timestamp().notNull().defaultNow(),
-      updatedAt: timestamp().notNull().defaultNow(),
-    },
-    {
-      indexes: [
-        { name: "idx_dashboard_service_links_user_id", columns: ["userId"] },
-      ],
-    },
-  ),
-);
-
-export const tables = [homepageItems, homepageLayouts, dashboardServiceLinks];
diff --git a/plugins/homepage/src/backend/url.ts b/plugins/homepage/src/backend/url.ts
deleted file mode 100644
index cb493ae2a..000000000
--- a/plugins/homepage/src/backend/url.ts
+++ /dev/null
@@ -1,16 +0,0 @@
-export function normalizeServiceLinkUrl(value: string): string {
-  const trimmed = value.trim();
-  if (!trimmed) return "";
-  return /^[a-z][a-z0-9+.-]*:\/\//i.test(trimmed)
-    ? trimmed
-    : `http://${trimmed}`;
-}
-
-export function isValidServiceLinkUrl(value: string): boolean {
-  try {
-    const parsed = new URL(normalizeServiceLinkUrl(value));
-    return parsed.protocol === "http:" || parsed.protocol === "https:";
-  } catch {
-    return false;
-  }
-}
diff --git a/plugins/homepage/src/frontend/DashboardHomepageView.tsx b/plugins/homepage/src/frontend/DashboardHomepageView.tsx
deleted file mode 100644
index 78ccf90f4..000000000
--- a/plugins/homepage/src/frontend/DashboardHomepageView.tsx
+++ /dev/null
@@ -1,62 +0,0 @@
-import { useState } from "react";
-import { Check, ExternalLink, Link } from "lucide-react";
-import { useTranslation, type ShellApi } from "@termix/plugin-sdk/frontend";
-import { HomepageCanvas } from "./HomepageCanvas.js";
-
-/** The homepage plugin's contribution to the dashboard's "dashboard.secondaryView" slot. */
-export function DashboardHomepageView({
-  onOpenSingletonTab,
-}: {
-  onOpenSingletonTab: ShellApi["openSingletonTab"];
-}) {
-  const { t } = useTranslation();
-  const [linkCopied, setLinkCopied] = useState(false);
-
-  const handleCopyLink = () => {
-    navigator.clipboard
-      .writeText(`${window.location.origin}?view=homepage`)
-      .catch(() => {});
-    setLinkCopied(true);
-    setTimeout(() => setLinkCopied(false), 1500);
-  };
-
-  return (
-    <>
-      <div className="flex items-center justify-between px-3 py-1.5 border-b border-border shrink-0 bg-muted/20">
-        <span className="text-[10px] text-muted-foreground/50 uppercase tracking-widest font-semibold">
-          {t("nav.homepage")}
-        </span>
-        <div className="flex items-center gap-3">
-          <button
-            className="text-[10px] text-muted-foreground hover:text-foreground transition-colors flex items-center gap-1"
-            onClick={handleCopyLink}
-          >
-            {linkCopied ? (
-              <>
-                <Check size={10} className="text-accent-brand" />
-                <span className="text-accent-brand">
-                  {t("homepage.linkCopied")}
-                </span>
-              </>
-            ) : (
-              <>
-                <Link size={10} />
-                {t("homepage.copyLink")}
-              </>
-            )}
-          </button>
-          <button
-            className="text-[10px] text-muted-foreground hover:text-foreground transition-colors flex items-center gap-1"
-            onClick={() => onOpenSingletonTab("homepage")}
-          >
-            <ExternalLink size={10} />
-            {t("homepage.openFullView")}
-          </button>
-        </div>
-      </div>
-      <div className="flex-1 min-h-0 overflow-hidden">
-        <HomepageCanvas />
-      </div>
-    </>
-  );
-}
diff --git a/plugins/homepage/src/frontend/HomepageCanvas.tsx b/plugins/homepage/src/frontend/HomepageCanvas.tsx
deleted file mode 100644
index 5638f57b6..000000000
--- a/plugins/homepage/src/frontend/HomepageCanvas.tsx
+++ /dev/null
@@ -1,568 +0,0 @@
-import { useState, useEffect, useCallback, useRef } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { LayoutGrid } from "lucide-react";
-import type { CanvasWidget, ContextMenuState, WidgetTypeId } from "./types.js";
-import { GRID_SIZE, MIN_ZOOM, MAX_ZOOM } from "./types.js";
-import {
-  getHomepageItems,
-  getHomepageLayout,
-  createHomepageItem,
-  updateHomepageItem,
-  deleteHomepageItem,
-  saveHomepageLayout,
-} from "./api.js";
-import { snapToGrid } from "./canvas/snapToGrid";
-import { screenToCanvas } from "./canvas/canvasGeometry";
-import { useCanvasInput } from "./canvas/useCanvasInput";
-import { useBoxDrag } from "./canvas/useBoxDrag";
-import { useBoxResize } from "./canvas/useBoxResize";
-import { CanvasDotBackground } from "./canvas/CanvasDotBackground";
-import { WidgetShell } from "./widgets/WidgetShell";
-import { AddWidgetMenu } from "./dialogs/AddWidgetMenu";
-import { WidgetEditDialog } from "./dialogs/WidgetEditDialog";
-import { HomepageToolbar } from "./toolbar/HomepageToolbar";
-import { getWidgetType } from "./widgets/WidgetRegistry";
-
-// Side-effect imports so widgets register themselves
-import "./widgets/ServiceLinkWidget";
-import "./widgets/ClockWidget";
-import "./widgets/NotesWidget";
-import "./widgets/BookmarkListWidget";
-import "./widgets/HostStatusWidget";
-import "./widgets/FolderWidget";
-import "./widgets/WeatherWidget";
-import "./widgets/IframeWidget";
-import "./widgets/RssFeedWidget";
-import "./widgets/HostGridWidget";
-import "./widgets/PingStatusWidget";
-import "./widgets/RecentActivityWidget";
-import "./widgets/TermixUptimeWidget";
-import "./widgets/SystemOverviewWidget";
-import "./widgets/SshTerminalWidget";
-import "./widgets/QuickConnectWidget";
-import "./widgets/CalendarWidget";
-import "./widgets/CountdownWidget";
-import "./widgets/SearchBarWidget";
-import "./widgets/TextBannerWidget";
-import "./widgets/ImageWidget";
-import "./widgets/MarkdownNotesWidget";
-import "./widgets/CustomApiWidget";
-import "./widgets/ServiceGridWidget";
-import "./widgets/DashboardLinksWidget";
-import "./widgets/SearchLinksWidget";
-import "./widgets/LinkTreeWidget";
-
-const CANVAS_SIZE = 100_000;
-const DEFAULT_PAN = { x: CANVAS_SIZE / 2 - 600, y: CANVAS_SIZE / 2 - 400 };
-const DEFAULT_ZOOM = 1.0;
-
-interface HomepageCanvasProps {
-  isReadOnly?: boolean;
-  fitOnLoad?: boolean;
-  onOpenFullscreen?: () => void;
-}
-
-function nextZOrder(widgets: CanvasWidget[]): number {
-  const nonFolders = widgets.filter((w) => w.typeId !== "folder");
-  return nonFolders.length === 0
-    ? 1
-    : Math.max(...nonFolders.map((w) => w.zOrder)) + 1;
-}
-
-export function HomepageCanvas({
-  isReadOnly,
-  fitOnLoad,
-  onOpenFullscreen,
-}: HomepageCanvasProps) {
-  const { t } = useTranslation();
-  const containerRef = useRef<HTMLDivElement>(null);
-  const [widgets, setWidgets] = useState<CanvasWidget[]>([]);
-  const [pan, setPan] = useState(DEFAULT_PAN);
-  const [zoom, setZoom] = useState(DEFAULT_ZOOM);
-  const [isLocked, setIsLocked] = useState(
-    () => localStorage.getItem("homepage.locked") === "true",
-  );
-  const [draggingId, setDraggingId] = useState<number | null>(null);
-  const [resizingId, setResizingId] = useState<number | null>(null);
-  const [editingWidget, setEditingWidget] = useState<CanvasWidget | null>(null);
-  const [dialogKey, setDialogKey] = useState(0);
-  const [contextMenu, setContextMenu] = useState<ContextMenuState>({
-    visible: false,
-    screenX: 0,
-    screenY: 0,
-    canvasX: 0,
-    canvasY: 0,
-  });
-  const [containerSize, setContainerSize] = useState({ w: 800, h: 600 });
-  const [loading, setLoading] = useState(true);
-  const saveTimerRef = useRef<ReturnType<typeof setTimeout> | null>(null);
-
-  const panRef = useRef(pan);
-  const zoomRef = useRef(zoom);
-  const widgetsRef = useRef(widgets);
-  panRef.current = pan;
-  zoomRef.current = zoom;
-  widgetsRef.current = widgets;
-
-  const hasFitRef = useRef(false);
-
-  useEffect(() => {
-    const el = containerRef.current;
-    if (!el) return;
-    const ro = new ResizeObserver(() => {
-      setContainerSize({ w: el.offsetWidth, h: el.offsetHeight });
-    });
-    ro.observe(el);
-    return () => ro.disconnect();
-  }, []);
-
-  useEffect(() => {
-    let cancelled = false;
-    Promise.all([getHomepageItems(), getHomepageLayout()])
-      .then(([items, layoutRow]) => {
-        if (cancelled) return;
-        const layoutEntries = layoutRow?.layout?.entries ?? [];
-        const merged: CanvasWidget[] = items.map((item) => {
-          const entry = layoutEntries.find((e) => e.itemId === item.id);
-          const typeDef = getWidgetType(item.typeId as WidgetTypeId);
-          return {
-            id: item.id,
-            typeId: item.typeId as WidgetTypeId,
-            title: item.title,
-            config: JSON.parse(item.config || "{}"),
-            x: entry?.x ?? snapToGrid(Math.random() * 600 + 100),
-            y: entry?.y ?? snapToGrid(Math.random() * 400 + 100),
-            w: entry?.w ?? typeDef?.defaultSize.w ?? GRID_SIZE * 8,
-            h: entry?.h ?? typeDef?.defaultSize.h ?? GRID_SIZE * 6,
-            zOrder: entry?.zOrder ?? 0,
-          };
-        });
-        setWidgets(merged);
-        if (layoutRow?.layout?.pan) setPan(layoutRow.layout.pan);
-        if (layoutRow?.layout?.zoom) setZoom(layoutRow.layout.zoom);
-      })
-      .catch(() => {})
-      .finally(() => {
-        if (!cancelled) setLoading(false);
-      });
-    return () => {
-      cancelled = true;
-    };
-  }, []);
-
-  const scheduleSave = useCallback(
-    (newWidgets?: CanvasWidget[], newPan?: typeof pan, newZoom?: number) => {
-      if (saveTimerRef.current) clearTimeout(saveTimerRef.current);
-      saveTimerRef.current = setTimeout(() => {
-        const ws = newWidgets ?? widgetsRef.current;
-        const p = newPan ?? panRef.current;
-        const z = newZoom ?? zoomRef.current;
-        saveHomepageLayout({
-          entries: ws.map((w) => ({
-            itemId: w.id,
-            x: w.x,
-            y: w.y,
-            w: w.w,
-            h: w.h,
-            zOrder: w.zOrder,
-          })),
-          pan: p,
-          zoom: z,
-        }).catch(() => {});
-      }, 500);
-    },
-    [],
-  );
-
-  useEffect(() => {
-    if (!fitOnLoad || loading || widgets.length === 0 || hasFitRef.current)
-      return;
-    const el = containerRef.current;
-    if (!el || el.offsetWidth === 0 || el.offsetHeight === 0) return;
-    hasFitRef.current = true;
-    const vw = el.offsetWidth;
-    const vh = el.offsetHeight;
-    const minX = Math.min(...widgets.map((w) => w.x));
-    const minY = Math.min(...widgets.map((w) => w.y));
-    const maxX = Math.max(...widgets.map((w) => w.x + w.w));
-    const maxY = Math.max(...widgets.map((w) => w.y + w.h));
-    const contentW = maxX - minX;
-    const contentH = maxY - minY;
-    const PADDING = 48;
-    const fz = Math.min(
-      MAX_ZOOM,
-      Math.max(
-        MIN_ZOOM,
-        Math.min((vw - PADDING * 2) / contentW, (vh - PADDING * 2) / contentH),
-      ),
-    );
-    setPan({
-      x: (vw - contentW * fz) / 2 - minX * fz,
-      y: (vh - contentH * fz) / 2 - minY * fz,
-    });
-    setZoom(fz);
-  }, [fitOnLoad, loading, widgets, containerSize]);
-
-  const handlePanChange = useCallback(
-    (newPan: typeof pan) => {
-      setPan(newPan);
-      scheduleSave(undefined, newPan, undefined);
-    },
-    [scheduleSave],
-  );
-
-  const handleZoomChange = useCallback(
-    (newZoom: number, newPan: typeof pan) => {
-      setZoom(newZoom);
-      setPan(newPan);
-      scheduleSave(undefined, newPan, newZoom);
-    },
-    [scheduleSave],
-  );
-
-  const canvasInput = useCanvasInput({
-    isDraggingWidget: draggingId !== null,
-    isResizing: resizingId !== null,
-    isContextMenuVisible: contextMenu.visible,
-    onPanChange: handlePanChange,
-    onZoomChange: handleZoomChange,
-    getPan: () => panRef.current,
-    getZoom: () => zoomRef.current,
-    containerRef,
-  });
-
-  const handleWidgetMove = useCallback(
-    (id: number, x: number, y: number) => {
-      setWidgets((prev) => {
-        const next = prev.map((w) => (w.id === id ? { ...w, x, y } : w));
-        scheduleSave(next);
-        return next;
-      });
-    },
-    [scheduleSave],
-  );
-
-  const handleWidgetResize = useCallback(
-    (id: number, w: number, h: number) => {
-      setWidgets((prev) => {
-        const next = prev.map((widget) =>
-          widget.id === id ? { ...widget, w, h } : widget,
-        );
-        scheduleSave(next);
-        return next;
-      });
-    },
-    [scheduleSave],
-  );
-
-  const handleDragStart = useCallback(
-    (id: number) => {
-      setDraggingId(id);
-      setWidgets((prev) => {
-        const widget = prev.find((w) => w.id === id);
-        if (!widget || widget.typeId === "folder") return prev;
-        const top = nextZOrder(prev);
-        const next = prev.map((w) => (w.id === id ? { ...w, zOrder: top } : w));
-        scheduleSave(next);
-        return next;
-      });
-    },
-    [scheduleSave],
-  );
-
-  const { startDrag } = useBoxDrag({
-    widgets,
-    zoom,
-    getZoom: () => zoomRef.current,
-    onWidgetMove: handleWidgetMove,
-    onDragStart: handleDragStart,
-    onDragEnd: () => setDraggingId(null),
-  });
-
-  const { startResize } = useBoxResize({
-    widgets,
-    getZoom: () => zoomRef.current,
-    onWidgetResize: handleWidgetResize,
-    onResizeStart: setResizingId,
-    onResizeEnd: () => setResizingId(null),
-  });
-
-  const handleContextMenu = useCallback(
-    (e: React.MouseEvent) => {
-      if (isLocked || isReadOnly) return;
-      if ((e.target as HTMLElement).closest("[data-widget]")) return;
-      e.preventDefault();
-      const rect = containerRef.current!.getBoundingClientRect();
-      const sx = e.clientX - rect.left;
-      const sy = e.clientY - rect.top;
-      const { x, y } = screenToCanvas(sx, sy, panRef.current, zoomRef.current);
-      setContextMenu({
-        visible: true,
-        screenX: e.clientX,
-        screenY: e.clientY,
-        canvasX: snapToGrid(x),
-        canvasY: snapToGrid(y),
-      });
-    },
-    [isLocked, isReadOnly],
-  );
-
-  const handleAddWidget = useCallback(
-    async (typeId: WidgetTypeId, canvasX: number, canvasY: number) => {
-      const typeDef = getWidgetType(typeId);
-      if (!typeDef) return;
-      try {
-        const item = await createHomepageItem({
-          typeId,
-          config: typeDef.defaultConfig as Record<string, unknown>,
-        });
-        setWidgets((prev) => {
-          const zOrder = typeId === "folder" ? 0 : nextZOrder(prev);
-          const newWidget: CanvasWidget = {
-            id: item.id,
-            typeId,
-            title: item.title,
-            config: typeDef.defaultConfig as Record<string, unknown>,
-            x: canvasX,
-            y: canvasY,
-            w: typeDef.defaultSize.w,
-            h: typeDef.defaultSize.h,
-            zOrder,
-          };
-          const next = [...prev, newWidget];
-          scheduleSave(next);
-          return next;
-        });
-      } catch {
-        // A bad layout write is dropped; the canvas keeps what it shows.
-      }
-    },
-    [scheduleSave],
-  );
-
-  const handleOpenAddMenu = useCallback(
-    (anchorRect: {
-      top: number;
-      bottom: number;
-      left: number;
-      right: number;
-      width: number;
-      height: number;
-    }) => {
-      const w = containerSize.w;
-      const h = containerSize.h;
-      const { x, y } = screenToCanvas(
-        w / 2,
-        h / 2,
-        panRef.current,
-        zoomRef.current,
-      );
-      setContextMenu({
-        visible: true,
-        screenX: anchorRect.left,
-        screenY: anchorRect.top,
-        canvasX: snapToGrid(x),
-        canvasY: snapToGrid(y),
-        anchorRect,
-      });
-    },
-    [containerSize],
-  );
-
-  const handleDelete = useCallback(
-    async (id: number) => {
-      try {
-        await deleteHomepageItem(id);
-        setWidgets((prev) => {
-          const next = prev.filter((w) => w.id !== id);
-          scheduleSave(next);
-          return next;
-        });
-      } catch {
-        // A bad layout write is dropped; the canvas keeps what it shows.
-      }
-    },
-    [scheduleSave],
-  );
-
-  const handleEdit = useCallback(
-    (id: number) => {
-      const w = widgets.find((x) => x.id === id);
-      if (w) {
-        setEditingWidget(w);
-        setDialogKey((k) => k + 1);
-      }
-    },
-    [widgets],
-  );
-
-  const handleSaveEdit = useCallback(
-    async (
-      id: number,
-      title: string | null,
-      config: Record<string, unknown>,
-    ) => {
-      try {
-        await updateHomepageItem(id, { title, config });
-        setWidgets((prev) =>
-          prev.map((w) => (w.id === id ? { ...w, title, config } : w)),
-        );
-      } catch {
-        // A bad layout write is dropped; the canvas keeps what it shows.
-      }
-    },
-    [],
-  );
-
-  const resetView = useCallback(() => {
-    const ws = widgetsRef.current;
-    const el = containerRef.current;
-    const vw = el?.offsetWidth ?? 800;
-    const vh = el?.offsetHeight ?? 600;
-
-    if (ws.length === 0) {
-      setPan(DEFAULT_PAN);
-      setZoom(DEFAULT_ZOOM);
-      return;
-    }
-
-    const minX = Math.min(...ws.map((w) => w.x));
-    const minY = Math.min(...ws.map((w) => w.y));
-    const maxX = Math.max(...ws.map((w) => w.x + w.w));
-    const maxY = Math.max(...ws.map((w) => w.y + w.h));
-    const contentW = maxX - minX;
-    const contentH = maxY - minY;
-
-    const PADDING = 48;
-    const fitZoom = Math.min(
-      MAX_ZOOM,
-      Math.max(
-        MIN_ZOOM,
-        Math.min((vw - PADDING * 2) / contentW, (vh - PADDING * 2) / contentH),
-      ),
-    );
-
-    // Place the content bbox center at the viewport center
-    const newPan = {
-      x: (vw - contentW * fitZoom) / 2 - minX * fitZoom,
-      y: (vh - contentH * fitZoom) / 2 - minY * fitZoom,
-    };
-
-    setZoom(fitZoom);
-    setPan(newPan);
-    scheduleSave(undefined, newPan, fitZoom);
-  }, [scheduleSave]);
-
-  // Folders always render first (lowest z), non-folders sorted by zOrder ascending
-  const sortedWidgets = [...widgets].sort((a, b) => {
-    const aFolder = a.typeId === "folder";
-    const bFolder = b.typeId === "folder";
-    if (aFolder && !bFolder) return -1;
-    if (!aFolder && bFolder) return 1;
-    return a.zOrder - b.zOrder;
-  });
-
-  if (loading) {
-    return (
-      <div className="flex items-center justify-center w-full h-full text-muted-foreground text-sm">
-        {t("common.loading")}
-      </div>
-    );
-  }
-
-  return (
-    <div
-      ref={containerRef}
-      className="relative w-full h-full overflow-hidden bg-background"
-      onMouseDown={editingWidget ? undefined : canvasInput.handleMouseDown}
-      onMouseMove={canvasInput.handleMouseMove}
-      onMouseUp={canvasInput.handleMouseUp}
-      onMouseLeave={canvasInput.handleMouseUp}
-      onWheel={canvasInput.handleWheel}
-      onContextMenu={handleContextMenu}
-      style={{ cursor: draggingId ? "grabbing" : "default" }}
-    >
-      <CanvasDotBackground pan={pan} zoom={zoom} />
-
-      <div
-        className="absolute origin-top-left"
-        style={{
-          width: CANVAS_SIZE,
-          height: CANVAS_SIZE,
-          transform: `translate(${pan.x}px, ${pan.y}px) scale(${zoom})`,
-          willChange: "transform",
-        }}
-      >
-        {sortedWidgets.map((widget) => (
-          <WidgetShell
-            key={widget.id}
-            widget={widget}
-            isLocked={isLocked}
-            isReadOnly={isReadOnly}
-            isDragging={draggingId === widget.id}
-            isResizing={resizingId === widget.id}
-            onStartDrag={startDrag}
-            onStartResize={startResize}
-            onDelete={handleDelete}
-            onEdit={handleEdit}
-            onConfigUpdate={(config) =>
-              handleSaveEdit(widget.id, widget.title, config)
-            }
-          />
-        ))}
-      </div>
-
-      {widgets.length === 0 && !isReadOnly && (
-        <div className="absolute inset-0 flex items-center justify-center pointer-events-none select-none">
-          <div className="flex items-center gap-2 bg-card border border-border px-3 py-2 shadow-sm">
-            <LayoutGrid className="size-3.5 text-muted-foreground/50 shrink-0" />
-            <span className="text-xs text-muted-foreground/70">
-              {t("homepage.noWidgets")}
-            </span>
-          </div>
-        </div>
-      )}
-
-      {isReadOnly && onOpenFullscreen && (
-        <button
-          className="absolute top-2 right-2 z-20 text-xs text-muted-foreground hover:text-foreground bg-card/80 border border-border px-2 py-1"
-          onClick={onOpenFullscreen}
-        >
-          {t("homepage.openFullView")}
-        </button>
-      )}
-
-      {!isReadOnly && (
-        <HomepageToolbar
-          zoom={zoom}
-          isLocked={isLocked}
-          pan={pan}
-          containerSize={containerSize}
-          onZoomChange={handleZoomChange}
-          onLockToggle={() =>
-            setIsLocked((v) => {
-              const next = !v;
-              localStorage.setItem("homepage.locked", String(next));
-              return next;
-            })
-          }
-          onResetView={resetView}
-          onAddWidget={handleOpenAddMenu}
-        />
-      )}
-
-      <AddWidgetMenu
-        state={contextMenu}
-        onAdd={handleAddWidget}
-        onClose={() => setContextMenu((s) => ({ ...s, visible: false }))}
-      />
-
-      <WidgetEditDialog
-        key={dialogKey}
-        widget={editingWidget}
-        onSave={handleSaveEdit}
-        onClose={() => setEditingWidget(null)}
-      />
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/HomepagePreviewCard.tsx b/plugins/homepage/src/frontend/HomepagePreviewCard.tsx
deleted file mode 100644
index 0f41ff243..000000000
--- a/plugins/homepage/src/frontend/HomepagePreviewCard.tsx
+++ /dev/null
@@ -1,31 +0,0 @@
-import { LayoutGrid } from "lucide-react";
-import {
-  useTranslation,
-  type DashboardCardProps,
-} from "@termix/plugin-sdk/frontend";
-import { Card } from "@termix/plugin-sdk/ui";
-import { HomepageCanvas } from "./HomepageCanvas.js";
-
-export function HomepagePreviewCard({ shell }: DashboardCardProps) {
-  const { t } = useTranslation();
-  return (
-    <Card className="relative overflow-hidden w-full h-full flex flex-col p-0 gap-0">
-      <div className="flex items-center gap-2 px-3 py-2 shrink-0 border-b border-border">
-        <LayoutGrid className="size-3.5 text-muted-foreground" />
-        <span className="text-xs font-semibold text-muted-foreground uppercase tracking-widest">
-          {t("homepage.previewTitle")}
-        </span>
-        <button
-          className="ml-auto text-[10px] text-muted-foreground hover:text-foreground transition-colors"
-          onClick={() => shell.openSingletonTab("homepage")}
-        >
-          {t("homepage.openFullView")}
-        </button>
-      </div>
-
-      <div className="flex-1 relative overflow-hidden">
-        <HomepageCanvas isReadOnly={true} fitOnLoad={true} />
-      </div>
-    </Card>
-  );
-}
diff --git a/plugins/homepage/src/frontend/ServiceLinksCard.tsx b/plugins/homepage/src/frontend/ServiceLinksCard.tsx
deleted file mode 100644
index d70693b13..000000000
--- a/plugins/homepage/src/frontend/ServiceLinksCard.tsx
+++ /dev/null
@@ -1,146 +0,0 @@
-import { useEffect, useState } from "react";
-import { ExternalLink, Link, Trash2 } from "lucide-react";
-import {
-  usePluginApi,
-  useTranslation,
-  type DashboardCardProps,
-} from "@termix/plugin-sdk/frontend";
-import { Button, Card } from "@termix/plugin-sdk/ui";
-import type { ServiceLinkRecord } from "./types.js";
-import { isValidServiceLinkUrl, normalizeServiceLinkUrl } from "./url.js";
-
-export function ServiceLinksCard({ isVisible }: DashboardCardProps) {
-  const { t } = useTranslation();
-  const api = usePluginApi();
-  const [links, setLinks] = useState<ServiceLinkRecord[]>([]);
-  const [label, setLabel] = useState("");
-  const [url, setUrl] = useState("");
-  const [urlError, setUrlError] = useState(false);
-  const [addError, setAddError] = useState("");
-  const [adding, setAdding] = useState(false);
-
-  useEffect(() => {
-    if (!isVisible) return;
-    api
-      .get<ServiceLinkRecord[]>("/service-links")
-      .then((res) => setLinks(res.data))
-      .catch(() => {});
-  }, [isVisible]);
-
-  const handleAdd = async () => {
-    const normalizedUrl = normalizeServiceLinkUrl(url);
-    if (!isValidServiceLinkUrl(normalizedUrl)) {
-      setUrlError(true);
-      setAddError("");
-      return;
-    }
-    setUrlError(false);
-    setAddError("");
-    setAdding(true);
-    try {
-      const res = await api.post<ServiceLinkRecord>("/service-links", {
-        label: label.trim(),
-        url: normalizedUrl,
-      });
-      setLinks((prev) => [...prev, res.data]);
-      setLabel("");
-      setUrl("");
-    } catch (error) {
-      setAddError(
-        error instanceof Error
-          ? error.message
-          : t("dashboardTab.serviceLinksAddFailed"),
-      );
-    } finally {
-      setAdding(false);
-    }
-  };
-
-  const handleDelete = async (id: number) => {
-    await api.delete(`/service-links/${id}`);
-    setLinks((prev) => prev.filter((l) => l.id !== id));
-  };
-
-  return (
-    <Card className="flex flex-col overflow-hidden w-full h-full py-0 gap-0">
-      <div className="flex items-center gap-2 px-4 py-2.5 border-b border-border shrink-0">
-        <Link className="size-3.5 text-muted-foreground" />
-        <span className="text-xs text-muted-foreground uppercase tracking-widest font-semibold">
-          {t("dashboardTab.serviceLinksTitle")}
-        </span>
-      </div>
-      <div className="flex flex-col overflow-auto flex-1">
-        {links.length === 0 && (
-          <div className="flex-1 flex items-center justify-center text-xs text-muted-foreground/40 py-4">
-            {t("dashboardTab.serviceLinksEmpty")}
-          </div>
-        )}
-        {links.map((link) => (
-          <div
-            key={link.id}
-            className="flex items-center justify-between px-4 py-2 border-b border-border last:border-0 group/link"
-          >
-            <a
-              href={link.url}
-              target="_blank"
-              rel="noreferrer noopener"
-              className="flex items-center gap-2 min-w-0 flex-1 hover:text-accent-brand transition-colors"
-            >
-              <ExternalLink className="size-3 text-muted-foreground shrink-0" />
-              <span className="text-xs font-semibold truncate">
-                {link.label}
-              </span>
-              <span className="text-[10px] text-muted-foreground truncate">
-                {link.url}
-              </span>
-            </a>
-            <button
-              onClick={() => handleDelete(link.id)}
-              className="ml-2 opacity-0 group-hover/link:opacity-100 transition-opacity size-5 flex items-center justify-center hover:text-destructive"
-            >
-              <Trash2 className="size-3" />
-            </button>
-          </div>
-        ))}
-      </div>
-      <div className="flex items-center gap-2 px-4 py-2 border-t border-border shrink-0">
-        <input
-          type="text"
-          value={label}
-          onChange={(e) => setLabel(e.target.value)}
-          placeholder={t("dashboardTab.serviceLinksLabelPlaceholder")}
-          className="flex-1 min-w-0 text-xs bg-transparent border border-border px-2 py-1 focus:outline-none focus:border-accent-brand/60"
-        />
-        <input
-          type="text"
-          value={url}
-          onChange={(e) => {
-            setUrl(e.target.value);
-            setUrlError(false);
-            setAddError("");
-          }}
-          placeholder={t("dashboardTab.serviceLinksUrlPlaceholder")}
-          className={`flex-[2] min-w-0 text-xs bg-transparent border px-2 py-1 focus:outline-none ${urlError ? "border-destructive" : "border-border focus:border-accent-brand/60"}`}
-        />
-        <Button
-          size="sm"
-          className="text-xs bg-accent-brand hover:bg-accent-brand/90 text-white h-6 px-2 shrink-0"
-          onClick={handleAdd}
-          disabled={!label.trim() || !url.trim() || adding}
-        >
-          {t("dashboardTab.serviceLinksAdd")}
-        </Button>
-      </div>
-      {urlError && (
-        <div className="px-4 pb-2 text-[10px] text-destructive shrink-0">
-          {t("dashboardTab.serviceLinksInvalidUrl")}
-        </div>
-      )}
-      {addError && (
-        <div className="px-4 pb-2 text-[10px] text-destructive shrink-0">
-          {addError}
-        </div>
-      )}
-    </Card>
-  );
-}
diff --git a/plugins/homepage/src/frontend/api.ts b/plugins/homepage/src/frontend/api.ts
deleted file mode 100644
index 4306781a1..000000000
--- a/plugins/homepage/src/frontend/api.ts
+++ /dev/null
@@ -1,57 +0,0 @@
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import type {
-  HomepageItemRow,
-  HomepageLayoutData,
-  HomepageLayoutRow,
-  WidgetTypeId,
-} from "./types.js";
-
-let api: PluginApiClient | null = null;
-
-/** Set once from activate(app); the widget canvas calls the functions below. */
-export function setHomepageApi(client: PluginApiClient | null): void {
-  api = client;
-}
-
-function client(): PluginApiClient {
-  if (!api) throw new Error("Homepage plugin API is not ready");
-  return api;
-}
-
-export async function getHomepageItems(): Promise<HomepageItemRow[]> {
-  const res = await client().get<HomepageItemRow[]>("/items");
-  return res.data;
-}
-
-export async function createHomepageItem(data: {
-  typeId: WidgetTypeId;
-  title?: string | null;
-  config?: Record<string, unknown>;
-}): Promise<HomepageItemRow> {
-  const res = await client().post<HomepageItemRow>("/items", data);
-  return res.data;
-}
-
-export async function updateHomepageItem(
-  id: number,
-  data: { title?: string | null; config?: Record<string, unknown> },
-): Promise<HomepageItemRow> {
-  const res = await client().put<HomepageItemRow>(`/items/${id}`, data);
-  return res.data;
-}
-
-export async function deleteHomepageItem(id: number): Promise<void> {
-  await client().delete(`/items/${id}`);
-}
-
-export async function getHomepageLayout(): Promise<HomepageLayoutRow | null> {
-  const res = await client().get<HomepageLayoutRow | null>("/layout");
-  return res.data;
-}
-
-export async function saveHomepageLayout(
-  layout: HomepageLayoutData,
-): Promise<HomepageLayoutRow> {
-  const res = await client().put<HomepageLayoutRow>("/layout", layout);
-  return res.data;
-}
diff --git a/plugins/homepage/src/frontend/canvas/CanvasDotBackground.tsx b/plugins/homepage/src/frontend/canvas/CanvasDotBackground.tsx
deleted file mode 100644
index 632091867..000000000
--- a/plugins/homepage/src/frontend/canvas/CanvasDotBackground.tsx
+++ /dev/null
@@ -1,63 +0,0 @@
-import { useEffect, useRef } from "react";
-
-interface Props {
-  pan: { x: number; y: number };
-  zoom: number;
-}
-
-export function CanvasDotBackground({ pan, zoom }: Props) {
-  const canvasRef = useRef<HTMLCanvasElement>(null);
-
-  useEffect(() => {
-    const canvas = canvasRef.current;
-    if (!canvas) return;
-    const ctx = canvas.getContext("2d");
-    if (!ctx) return;
-
-    const dpr = window.devicePixelRatio || 1;
-    const w = canvas.offsetWidth;
-    const h = canvas.offsetHeight;
-    canvas.width = w * dpr;
-    canvas.height = h * dpr;
-    ctx.scale(dpr, dpr);
-
-    ctx.clearRect(0, 0, w, h);
-
-    // Read dot color from CSS variable for theme support
-    const dotColor =
-      getComputedStyle(document.documentElement)
-        .getPropertyValue("--color-muted-foreground")
-        .trim() || "#6b7280";
-
-    // Effective grid spacing in screen pixels
-    const spacing = 30 * zoom;
-
-    // Skip rendering dots that are too close together or too far apart
-    if (spacing < 8 || spacing > 200) return;
-
-    // Offset so dots align with the canvas pan position
-    const offsetX = ((pan.x % spacing) + spacing) % spacing;
-    const offsetY = ((pan.y % spacing) + spacing) % spacing;
-
-    const dotRadius = Math.max(0.8, Math.min(1.5, zoom * 1.2));
-
-    ctx.fillStyle = dotColor;
-    ctx.globalAlpha = 0.35;
-
-    for (let x = offsetX; x < w; x += spacing) {
-      for (let y = offsetY; y < h; y += spacing) {
-        ctx.beginPath();
-        ctx.arc(x, y, dotRadius, 0, Math.PI * 2);
-        ctx.fill();
-      }
-    }
-  }, [pan, zoom]);
-
-  return (
-    <canvas
-      ref={canvasRef}
-      className="absolute inset-0 w-full h-full pointer-events-none"
-      style={{ zIndex: 0 }}
-    />
-  );
-}
diff --git a/plugins/homepage/src/frontend/canvas/canvasGeometry.ts b/plugins/homepage/src/frontend/canvas/canvasGeometry.ts
deleted file mode 100644
index b6a807ec5..000000000
--- a/plugins/homepage/src/frontend/canvas/canvasGeometry.ts
+++ /dev/null
@@ -1,39 +0,0 @@
-export function screenToCanvas(
-  screenX: number,
-  screenY: number,
-  pan: { x: number; y: number },
-  zoom: number,
-): { x: number; y: number } {
-  return {
-    x: (screenX - pan.x) / zoom,
-    y: (screenY - pan.y) / zoom,
-  };
-}
-
-export function canvasToScreen(
-  canvasX: number,
-  canvasY: number,
-  pan: { x: number; y: number },
-  zoom: number,
-): { x: number; y: number } {
-  return {
-    x: canvasX * zoom + pan.x,
-    y: canvasY * zoom + pan.y,
-  };
-}
-
-/** Pan value that keeps the canvas point (gridX, gridY) under (mouseX, mouseY) after zoom changes. */
-export function zoomAroundPoint(
-  mouseX: number,
-  mouseY: number,
-  pan: { x: number; y: number },
-  oldZoom: number,
-  newZoom: number,
-): { x: number; y: number } {
-  const gridX = (mouseX - pan.x) / oldZoom;
-  const gridY = (mouseY - pan.y) / oldZoom;
-  return {
-    x: mouseX - gridX * newZoom,
-    y: mouseY - gridY * newZoom,
-  };
-}
diff --git a/plugins/homepage/src/frontend/canvas/snapToGrid.ts b/plugins/homepage/src/frontend/canvas/snapToGrid.ts
deleted file mode 100644
index b533317e3..000000000
--- a/plugins/homepage/src/frontend/canvas/snapToGrid.ts
+++ /dev/null
@@ -1,9 +0,0 @@
-import { GRID_SIZE } from "../types.js";
-
-export function snapToGrid(value: number): number {
-  return Math.round(value / GRID_SIZE) * GRID_SIZE;
-}
-
-export function snapToGridFloor(value: number): number {
-  return Math.floor(value / GRID_SIZE) * GRID_SIZE;
-}
diff --git a/plugins/homepage/src/frontend/canvas/useBoxDrag.ts b/plugins/homepage/src/frontend/canvas/useBoxDrag.ts
deleted file mode 100644
index fd1870e08..000000000
--- a/plugins/homepage/src/frontend/canvas/useBoxDrag.ts
+++ /dev/null
@@ -1,66 +0,0 @@
-import { useCallback, useRef } from "react";
-import type { CanvasWidget, DragState } from "../types.js";
-import { snapToGrid } from "./snapToGrid";
-
-interface UseBoxDragOptions {
-  widgets: CanvasWidget[];
-  zoom: number;
-  getZoom: () => number;
-  onWidgetMove: (id: number, x: number, y: number) => void;
-  onDragStart: (id: number) => void;
-  onDragEnd: () => void;
-}
-
-export function useBoxDrag({
-  widgets,
-  getZoom,
-  onWidgetMove,
-  onDragStart,
-  onDragEnd,
-}: UseBoxDragOptions) {
-  const dragRef = useRef<DragState | null>(null);
-
-  const startDrag = useCallback(
-    (e: React.MouseEvent, widget: CanvasWidget) => {
-      e.stopPropagation();
-      e.preventDefault();
-      dragRef.current = {
-        widgetId: widget.id,
-        startMouseX: e.clientX,
-        startMouseY: e.clientY,
-        startWidgetX: widget.x,
-        startWidgetY: widget.y,
-      };
-      onDragStart(widget.id);
-
-      const handleMove = (ev: MouseEvent) => {
-        if (!dragRef.current) return;
-        const zoom = getZoom();
-        const dx = (ev.clientX - dragRef.current.startMouseX) / zoom;
-        const dy = (ev.clientY - dragRef.current.startMouseY) / zoom;
-        const newX = snapToGrid(dragRef.current.startWidgetX + dx);
-        const newY = snapToGrid(dragRef.current.startWidgetY + dy);
-
-        const moving = widgets.find((w) => w.id === dragRef.current!.widgetId);
-        if (!moving) return;
-
-        if (newX !== moving.x || newY !== moving.y) {
-          onWidgetMove(moving.id, newX, newY);
-        }
-      };
-
-      const handleUp = () => {
-        dragRef.current = null;
-        onDragEnd();
-        window.removeEventListener("mousemove", handleMove);
-        window.removeEventListener("mouseup", handleUp);
-      };
-
-      window.addEventListener("mousemove", handleMove);
-      window.addEventListener("mouseup", handleUp);
-    },
-    [widgets, getZoom, onWidgetMove, onDragStart, onDragEnd],
-  );
-
-  return { startDrag };
-}
diff --git a/plugins/homepage/src/frontend/canvas/useBoxResize.ts b/plugins/homepage/src/frontend/canvas/useBoxResize.ts
deleted file mode 100644
index 43c62a9e5..000000000
--- a/plugins/homepage/src/frontend/canvas/useBoxResize.ts
+++ /dev/null
@@ -1,81 +0,0 @@
-import { useCallback, useRef } from "react";
-import { GRID_SIZE, type CanvasWidget, type ResizeState } from "../types.js";
-import { snapToGrid } from "./snapToGrid";
-import { getWidgetType } from "../widgets/WidgetRegistry";
-
-interface UseBoxResizeOptions {
-  widgets: CanvasWidget[];
-  getZoom: () => number;
-  onWidgetResize: (id: number, w: number, h: number) => void;
-  onResizeStart: (id: number) => void;
-  onResizeEnd: () => void;
-}
-
-export function useBoxResize({
-  widgets,
-  getZoom,
-  onWidgetResize,
-  onResizeStart,
-  onResizeEnd,
-}: UseBoxResizeOptions) {
-  const resizeRef = useRef<ResizeState | null>(null);
-
-  const startResize = useCallback(
-    (e: React.MouseEvent, widget: CanvasWidget) => {
-      e.stopPropagation();
-      e.preventDefault();
-      resizeRef.current = {
-        widgetId: widget.id,
-        startMouseX: e.clientX,
-        startMouseY: e.clientY,
-        startW: widget.w,
-        startH: widget.h,
-      };
-      onResizeStart(widget.id);
-
-      const handleMove = (ev: MouseEvent) => {
-        if (!resizeRef.current) return;
-        const zoom = getZoom();
-        const dx = (ev.clientX - resizeRef.current.startMouseX) / zoom;
-        const dy = (ev.clientY - resizeRef.current.startMouseY) / zoom;
-        const newW = Math.max(
-          GRID_SIZE * 2,
-          snapToGrid(resizeRef.current.startW + dx),
-        );
-        const newH = Math.max(
-          GRID_SIZE * 2,
-          snapToGrid(resizeRef.current.startH + dy),
-        );
-
-        const moving = widgets.find(
-          (w) => w.id === resizeRef.current!.widgetId,
-        );
-        if (!moving) return;
-
-        const typeDef = getWidgetType(moving.typeId);
-        const minW = typeDef?.minSize.w ?? GRID_SIZE * 4;
-        const minH = typeDef?.minSize.h ?? GRID_SIZE * 4;
-        const clampedW = Math.max(minW, newW);
-        const clampedH = Math.max(minH, newH);
-
-        if (clampedW !== moving.w || clampedH !== moving.h) {
-          onWidgetResize(moving.id, clampedW, clampedH);
-        }
-      };
-
-      const handleUp = () => {
-        resizeRef.current = null;
-        onResizeEnd();
-        window.removeEventListener("mousemove", handleMove);
-        window.removeEventListener("mouseup", handleUp);
-      };
-
-      window.addEventListener("mousemove", handleMove);
-      window.removeEventListener("mouseup", handleUp);
-      window.addEventListener("mouseup", handleUp);
-    },
-    [widgets, getZoom, onWidgetResize, onResizeStart, onResizeEnd],
-  );
-
-  return { startResize };
-}
diff --git a/plugins/homepage/src/frontend/canvas/useCanvasInput.ts b/plugins/homepage/src/frontend/canvas/useCanvasInput.ts
deleted file mode 100644
index 8fe77ca54..000000000
--- a/plugins/homepage/src/frontend/canvas/useCanvasInput.ts
+++ /dev/null
@@ -1,85 +0,0 @@
-import { useCallback, useRef } from "react";
-import { MIN_ZOOM, MAX_ZOOM } from "../types.js";
-import { zoomAroundPoint } from "./canvasGeometry";
-
-interface UseCanvasInputOptions {
-  isDraggingWidget: boolean;
-  isResizing: boolean;
-  isContextMenuVisible: boolean;
-  onPanChange: (pan: { x: number; y: number }) => void;
-  onZoomChange: (zoom: number, pan: { x: number; y: number }) => void;
-  getPan: () => { x: number; y: number };
-  getZoom: () => number;
-  containerRef: React.RefObject<HTMLDivElement | null>;
-}
-
-export function useCanvasInput({
-  isDraggingWidget,
-  isResizing,
-  isContextMenuVisible,
-  onPanChange,
-  onZoomChange,
-  getPan,
-  getZoom,
-  containerRef,
-}: UseCanvasInputOptions) {
-  const isPanningRef = useRef(false);
-  const lastMouseRef = useRef({ x: 0, y: 0 });
-
-  const handleMouseDown = useCallback(
-    (e: React.MouseEvent) => {
-      // Only pan on the background (not on widgets), left button
-      if (e.button !== 0) return;
-      if ((e.target as HTMLElement).closest("[data-widget]")) return;
-      if (isDraggingWidget || isResizing || isContextMenuVisible) return;
-
-      isPanningRef.current = true;
-      lastMouseRef.current = { x: e.clientX, y: e.clientY };
-      e.preventDefault();
-    },
-    [isDraggingWidget, isResizing, isContextMenuVisible],
-  );
-
-  const handleMouseMove = useCallback(
-    (e: React.MouseEvent) => {
-      if (!isPanningRef.current) return;
-      const dx = e.clientX - lastMouseRef.current.x;
-      const dy = e.clientY - lastMouseRef.current.y;
-      lastMouseRef.current = { x: e.clientX, y: e.clientY };
-      const pan = getPan();
-      onPanChange({ x: pan.x + dx, y: pan.y + dy });
-    },
-    [getPan, onPanChange],
-  );
-
-  const handleMouseUp = useCallback(() => {
-    isPanningRef.current = false;
-  }, []);
-
-  const handleWheel = useCallback(
-    (e: React.WheelEvent) => {
-      e.preventDefault();
-      const zoom = getZoom();
-      const pan = getPan();
-
-      const container = containerRef.current;
-      if (!container) return;
-      const rect = container.getBoundingClientRect();
-      const mouseX = e.clientX - rect.left;
-      const mouseY = e.clientY - rect.top;
-
-      // Multiplicative zoom so each step is proportional regardless of current zoom level.
-      // Normalize deltaY to avoid trackpad sending huge values.
-      const rawDelta = Math.sign(e.deltaY) * Math.min(Math.abs(e.deltaY), 100);
-      const factor = 1 - rawDelta * 0.001;
-      const newZoom = Math.min(MAX_ZOOM, Math.max(MIN_ZOOM, zoom * factor));
-      if (newZoom === zoom) return;
-
-      const newPan = zoomAroundPoint(mouseX, mouseY, pan, zoom, newZoom);
-      onZoomChange(newZoom, newPan);
-    },
-    [getZoom, getPan, containerRef, onZoomChange],
-  );
-
-  return { handleMouseDown, handleMouseMove, handleMouseUp, handleWheel };
-}
diff --git a/plugins/homepage/src/frontend/clock-timezone.ts b/plugins/homepage/src/frontend/clock-timezone.ts
deleted file mode 100644
index b839e8f4e..000000000
--- a/plugins/homepage/src/frontend/clock-timezone.ts
+++ /dev/null
@@ -1,28 +0,0 @@
-/** IANA zone names use underscores, but people type and paste spaces. */
-export function normalizeTimezone(timezone: string): string {
-  return timezone.trim().replace(/\s+/g, "_");
-}
-
-export function isValidTimezone(timezone: string): boolean {
-  try {
-    new Intl.DateTimeFormat("en-US", { timeZone: timezone });
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-/**
- * Normalizes the timezone a user typed and reports whether it is usable.
- * A blank field is valid: it means "use local time".
- */
-export function validateClockTimezone(timezone: unknown): {
-  timezone?: string;
-  valid: boolean;
-} {
-  if (typeof timezone !== "string" || timezone.trim() === "") {
-    return { timezone: undefined, valid: true };
-  }
-  const normalized = normalizeTimezone(timezone);
-  return { timezone: normalized, valid: isValidTimezone(normalized) };
-}
diff --git a/plugins/homepage/src/frontend/dialogs/AddWidgetMenu.tsx b/plugins/homepage/src/frontend/dialogs/AddWidgetMenu.tsx
deleted file mode 100644
index 8a3763674..000000000
--- a/plugins/homepage/src/frontend/dialogs/AddWidgetMenu.tsx
+++ /dev/null
@@ -1,164 +0,0 @@
-import { useEffect, useLayoutEffect, useRef, useState } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { useWidgetTypes } from "../widgets/WidgetRegistry";
-import type { ContextMenuState, WidgetTypeId } from "../types.js";
-
-interface AddWidgetMenuProps {
-  state: ContextMenuState;
-  onAdd: (typeId: WidgetTypeId, canvasX: number, canvasY: number) => void;
-  onClose: () => void;
-}
-
-const CATEGORY_ORDER = ["links", "info", "system", "monitoring"] as const;
-
-const MARGIN = 8;
-
-export function AddWidgetMenu({ state, onAdd, onClose }: AddWidgetMenuProps) {
-  const { t } = useTranslation();
-  const menuRef = useRef<HTMLDivElement>(null);
-  const allTypes = useWidgetTypes();
-  const [pos, setPos] = useState({ left: state.screenX, top: state.screenY });
-  const [selectedCat, setSelectedCat] = useState<
-    (typeof CATEGORY_ORDER)[number]
-  >(CATEGORY_ORDER[0]);
-  const categoryLabels: Record<(typeof CATEGORY_ORDER)[number], string> = {
-    links: t("homepage.categoryLinks"),
-    info: t("homepage.categoryInfo"),
-    system: t("homepage.categorySystem"),
-    monitoring: t("homepage.categoryMonitoring"),
-  };
-
-  useLayoutEffect(() => {
-    if (!state.visible || !menuRef.current) return;
-    const rect = menuRef.current.getBoundingClientRect();
-    const vw = window.innerWidth;
-    const vh = window.innerHeight;
-
-    let left = state.screenX;
-    let top = state.screenY;
-
-    if (state.anchorRect) {
-      left = state.anchorRect.right - rect.width;
-      top = state.anchorRect.top - rect.height - MARGIN;
-    }
-
-    if (left + rect.width > vw - MARGIN) left = vw - rect.width - MARGIN;
-    if (left < MARGIN) left = MARGIN;
-
-    if (top < MARGIN) {
-      top = state.anchorRect
-        ? state.anchorRect.bottom + MARGIN
-        : state.screenY + MARGIN;
-    }
-    if (top + rect.height > vh - MARGIN) top = vh - rect.height - MARGIN;
-    if (top < MARGIN) top = MARGIN;
-
-    setPos({ left, top });
-  }, [state.visible, state.screenX, state.screenY, state.anchorRect]);
-
-  useEffect(() => {
-    const handler = (e: MouseEvent) => {
-      if (menuRef.current && !menuRef.current.contains(e.target as Node)) {
-        onClose();
-      }
-    };
-    document.addEventListener("mousedown", handler);
-    return () => document.removeEventListener("mousedown", handler);
-  }, [onClose]);
-
-  useEffect(() => {
-    const handler = (e: KeyboardEvent) => {
-      if (e.key === "Escape") onClose();
-    };
-    document.addEventListener("keydown", handler);
-    return () => document.removeEventListener("keydown", handler);
-  }, [onClose]);
-
-  const visibleCategories = CATEGORY_ORDER.filter((cat) =>
-    allTypes.some((type) => type.category === cat),
-  );
-
-  const selectedTypes = allTypes.filter(
-    (type) => type.category === selectedCat,
-  );
-
-  return (
-    <div
-      ref={menuRef}
-      className="fixed z-50 bg-card border border-border shadow-xl min-w-[220px] flex flex-col"
-      style={{
-        left: pos.left,
-        top: pos.top,
-        visibility: state.visible ? "visible" : "hidden",
-      }}
-      onMouseDown={(e) => e.stopPropagation()}
-      onWheel={(e) => e.stopPropagation()}
-    >
-      {/* Header */}
-      <div className="px-3 py-2 border-b border-border shrink-0">
-        <span className="text-[10px] font-bold uppercase tracking-widest text-accent-brand">
-          {t("homepage.addWidget")}
-        </span>
-      </div>
-
-      {/* Category tabs */}
-      <div className="flex items-center gap-0.5 px-2 pt-2 pb-1 shrink-0">
-        {visibleCategories.map((cat) => (
-          <button
-            key={cat}
-            onClick={() => setSelectedCat(cat)}
-            className={`px-2.5 py-1 text-[10px] font-semibold uppercase tracking-wider transition-colors ${
-              selectedCat === cat
-                ? "bg-accent-brand text-white"
-                : "text-muted-foreground hover:text-foreground hover:bg-muted/60"
-            }`}
-          >
-            {categoryLabels[cat]}
-          </button>
-        ))}
-      </div>
-
-      {/* Widget list */}
-      <div className="overflow-y-auto" style={{ maxHeight: "240px" }}>
-        {selectedTypes.length === 0 ? (
-          <div className="px-3 py-4 text-center text-xs text-muted-foreground/60">
-            {t("homepage.noWidgetsInCategory")}
-          </div>
-        ) : (
-          selectedTypes.map((type) => (
-            <button
-              key={type.id}
-              className="w-full flex items-center gap-2.5 px-3 py-2 text-left text-xs text-foreground hover:bg-muted/60 transition-colors"
-              onClick={() => {
-                onAdd(type.id, state.canvasX, state.canvasY);
-                onClose();
-              }}
-            >
-              <span className="text-accent-brand shrink-0">{type.icon}</span>
-              <div className="flex flex-col min-w-0">
-                <span className="font-medium truncate">
-                  {type.labelComponent ? (
-                    <type.labelComponent part="name" />
-                  ) : (
-                    t(`homepage.widgets.${type.id}.name`, {
-                      defaultValue: type.name,
-                    })
-                  )}
-                </span>
-                <span className="text-[10px] text-muted-foreground truncate">
-                  {type.labelComponent ? (
-                    <type.labelComponent part="description" />
-                  ) : (
-                    t(`homepage.widgets.${type.id}.description`, {
-                      defaultValue: type.description,
-                    })
-                  )}
-                </span>
-              </div>
-            </button>
-          ))
-        )}
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/BookmarkListEditForm.tsx b/plugins/homepage/src/frontend/dialogs/BookmarkListEditForm.tsx
deleted file mode 100644
index 2a63674d7..000000000
--- a/plugins/homepage/src/frontend/dialogs/BookmarkListEditForm.tsx
+++ /dev/null
@@ -1,65 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Input, Button } from "@termix/plugin-sdk/ui";
-
-import { Trash2, Plus } from "lucide-react";
-import type {
-  BookmarkListConfig,
-  BookmarkLink,
-  WidgetEditFormProps,
-} from "../types.js";
-
-export function BookmarkListEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<BookmarkListConfig>) {
-  const { t } = useTranslation();
-  const { links } = config;
-
-  const updateLink = (i: number, patch: Partial<BookmarkLink>) => {
-    const next = links.map((l, idx) => (idx === i ? { ...l, ...patch } : l));
-    onChange({ ...config, links: next });
-  };
-
-  const removeLink = (i: number) => {
-    onChange({ ...config, links: links.filter((_, idx) => idx !== i) });
-  };
-
-  const addLink = () => {
-    onChange({ ...config, links: [...links, { label: "", url: "" }] });
-  };
-
-  return (
-    <div className="flex flex-col gap-2 max-h-60 overflow-y-auto pr-1">
-      {links.map((link, i) => (
-        <div key={i} className="flex items-center gap-1.5">
-          <Input
-            value={link.label}
-            onChange={(e) => updateLink(i, { label: e.target.value })}
-            placeholder={t("homepage.linkLabel")}
-            className="h-7 text-xs flex-1"
-          />
-          <Input
-            value={link.url}
-            onChange={(e) => updateLink(i, { url: e.target.value })}
-            placeholder="https://..."
-            className="h-7 text-xs flex-1"
-          />
-          <button
-            onClick={() => removeLink(i)}
-            className="p-1 hover:bg-destructive/10 text-muted-foreground hover:text-destructive"
-          >
-            <Trash2 size={12} />
-          </button>
-        </div>
-      ))}
-      <Button
-        variant="outline"
-        size="sm"
-        onClick={addLink}
-        className="mt-1 h-7 text-xs gap-1"
-      >
-        <Plus size={11} /> {t("homepage.addLink")}
-      </Button>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/CalendarEditForm.tsx b/plugins/homepage/src/frontend/dialogs/CalendarEditForm.tsx
deleted file mode 100644
index 6b8ba84e4..000000000
--- a/plugins/homepage/src/frontend/dialogs/CalendarEditForm.tsx
+++ /dev/null
@@ -1,38 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Input } from "@termix/plugin-sdk/ui";
-import type { CalendarConfig, WidgetEditFormProps } from "../types.js";
-
-export function CalendarEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<CalendarConfig>) {
-  const { t } = useTranslation();
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.timezone")}
-        </label>
-        <Input
-          value={config.timezone ?? ""}
-          onChange={(e) =>
-            onChange({ ...config, timezone: e.target.value || undefined })
-          }
-          placeholder="UTC"
-          className="h-8 text-xs"
-        />
-      </div>
-      <label className="flex items-center gap-2 text-xs text-muted-foreground cursor-pointer">
-        <input
-          type="checkbox"
-          checked={config.startOnMonday}
-          onChange={(e) =>
-            onChange({ ...config, startOnMonday: e.target.checked })
-          }
-          className="accent-accent-brand"
-        />
-        {t("homepage.startOnMonday")}
-      </label>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/ClockEditForm.tsx b/plugins/homepage/src/frontend/dialogs/ClockEditForm.tsx
deleted file mode 100644
index 5d306fb47..000000000
--- a/plugins/homepage/src/frontend/dialogs/ClockEditForm.tsx
+++ /dev/null
@@ -1,60 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Input, Switch } from "@termix/plugin-sdk/ui";
-
-import type { ClockConfig, WidgetEditFormProps } from "../types.js";
-import { validateClockTimezone } from "../clock-timezone";
-
-export function ClockEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<ClockConfig>) {
-  const { t } = useTranslation();
-
-  const invalidTimezone = !validateClockTimezone(config.timezone).valid;
-
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.timezone")}
-        </label>
-        <Input
-          value={config.timezone ?? ""}
-          onChange={(e) =>
-            onChange({ ...config, timezone: e.target.value || undefined })
-          }
-          placeholder={t("homepage.timezonePlaceholder")}
-          aria-invalid={invalidTimezone}
-          className={
-            invalidTimezone ? "h-8 text-sm border-destructive" : "h-8 text-sm"
-          }
-        />
-        {invalidTimezone && (
-          <p className="text-[10px] text-destructive">
-            {t("homepage.invalidTimezone")}
-          </p>
-        )}
-      </div>
-      <div className="flex items-center justify-between">
-        <label className="text-xs font-medium text-foreground">
-          {t("homepage.showSeconds")}
-        </label>
-        <Switch
-          checked={config.showSeconds}
-          onCheckedChange={(v) => onChange({ ...config, showSeconds: v })}
-        />
-      </div>
-      <div className="flex items-center justify-between">
-        <label className="text-xs font-medium text-foreground">
-          {t("homepage.format12h")}
-        </label>
-        <Switch
-          checked={config.format === "12h"}
-          onCheckedChange={(v) =>
-            onChange({ ...config, format: v ? "12h" : "24h" })
-          }
-        />
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/CountdownEditForm.tsx b/plugins/homepage/src/frontend/dialogs/CountdownEditForm.tsx
deleted file mode 100644
index 6bf4fbdd1..000000000
--- a/plugins/homepage/src/frontend/dialogs/CountdownEditForm.tsx
+++ /dev/null
@@ -1,54 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Input } from "@termix/plugin-sdk/ui";
-import type { CountdownConfig, WidgetEditFormProps } from "../types.js";
-
-export function CountdownEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<CountdownConfig>) {
-  const { t } = useTranslation();
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.countdownLabel")}
-        </label>
-        <Input
-          value={config.label}
-          onChange={(e) => onChange({ ...config, label: e.target.value })}
-          placeholder={t("homepage.countdownLabelPlaceholder")}
-          className="h-8 text-xs"
-        />
-      </div>
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.targetDate")}
-        </label>
-        <Input
-          type="datetime-local"
-          value={config.targetDate}
-          onChange={(e) => onChange({ ...config, targetDate: e.target.value })}
-          className="h-8 text-xs"
-        />
-      </div>
-      <label className="flex items-center gap-2 text-xs text-muted-foreground cursor-pointer">
-        <input
-          type="checkbox"
-          checked={config.showDays}
-          onChange={(e) => onChange({ ...config, showDays: e.target.checked })}
-          className="accent-accent-brand"
-        />
-        {t("homepage.countdownShowDays")}
-      </label>
-      <label className="flex items-center gap-2 text-xs text-muted-foreground cursor-pointer">
-        <input
-          type="checkbox"
-          checked={config.showHours}
-          onChange={(e) => onChange({ ...config, showHours: e.target.checked })}
-          className="accent-accent-brand"
-        />
-        {t("homepage.countdownShowHours")}
-      </label>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/CustomApiEditForm.tsx b/plugins/homepage/src/frontend/dialogs/CustomApiEditForm.tsx
deleted file mode 100644
index 50d121351..000000000
--- a/plugins/homepage/src/frontend/dialogs/CustomApiEditForm.tsx
+++ /dev/null
@@ -1,137 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Input } from "@termix/plugin-sdk/ui";
-import type {
-  CustomApiConfig,
-  CustomApiDisplayMode,
-  WidgetEditFormProps,
-} from "../types.js";
-
-const MODES: { id: CustomApiDisplayMode; label: string }[] = [
-  { id: "value", label: "Value" },
-  { id: "json", label: "JSON" },
-  { id: "table", label: "Table" },
-];
-
-export function CustomApiEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<CustomApiConfig>) {
-  const { t } = useTranslation();
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.url")}
-        </label>
-        <Input
-          value={config.url}
-          onChange={(e) => onChange({ ...config, url: e.target.value })}
-          placeholder="https://api.example.com/data"
-          className="h-8 text-xs"
-        />
-      </div>
-
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.displayMode")}
-        </label>
-        <div className="flex gap-1">
-          {MODES.map((m) => (
-            <button
-              key={m.id}
-              type="button"
-              onClick={() => onChange({ ...config, displayMode: m.id })}
-              className={`px-2 py-0.5 text-[10px] border transition-colors ${config.displayMode === m.id ? "bg-accent-brand border-accent-brand text-white" : "border-border text-muted-foreground"}`}
-            >
-              {m.label}
-            </button>
-          ))}
-        </div>
-      </div>
-
-      {config.displayMode === "value" && (
-        <>
-          <div className="flex flex-col gap-1">
-            <label className="text-xs font-medium text-muted-foreground">
-              {t("homepage.displayField")}
-            </label>
-            <Input
-              value={config.displayField ?? ""}
-              onChange={(e) =>
-                onChange({
-                  ...config,
-                  displayField: e.target.value || undefined,
-                })
-              }
-              placeholder="data.temperature"
-              className="h-8 text-xs"
-            />
-          </div>
-          <div className="flex gap-2">
-            <div className="flex flex-col gap-1 flex-1">
-              <label className="text-xs font-medium text-muted-foreground">
-                {t("homepage.customApiLabel")}
-              </label>
-              <Input
-                value={config.label ?? ""}
-                onChange={(e) =>
-                  onChange({ ...config, label: e.target.value || undefined })
-                }
-                placeholder={t("homepage.customApiLabelPlaceholder")}
-                className="h-8 text-xs"
-              />
-            </div>
-            <div className="flex flex-col gap-1 w-20">
-              <label className="text-xs font-medium text-muted-foreground">
-                {t("homepage.customApiUnit")}
-              </label>
-              <Input
-                value={config.unit ?? ""}
-                onChange={(e) =>
-                  onChange({ ...config, unit: e.target.value || undefined })
-                }
-                placeholder="°C"
-                className="h-8 text-xs"
-              />
-            </div>
-          </div>
-        </>
-      )}
-
-      {config.displayMode === "table" && (
-        <div className="flex flex-col gap-1">
-          <label className="text-xs font-medium text-muted-foreground">
-            {t("homepage.jsonPath")}
-          </label>
-          <Input
-            value={config.jsonPath ?? ""}
-            onChange={(e) =>
-              onChange({ ...config, jsonPath: e.target.value || undefined })
-            }
-            placeholder="data.items"
-            className="h-8 text-xs"
-          />
-        </div>
-      )}
-
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.refreshInterval")} ({t("homepage.seconds")})
-        </label>
-        <Input
-          type="number"
-          min={10}
-          max={86400}
-          value={config.refreshInterval}
-          onChange={(e) =>
-            onChange({
-              ...config,
-              refreshInterval: Math.max(10, Number(e.target.value)),
-            })
-          }
-          className="h-8 text-xs"
-        />
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/DashboardLinksEditForm.tsx b/plugins/homepage/src/frontend/dialogs/DashboardLinksEditForm.tsx
deleted file mode 100644
index 8fdac46a4..000000000
--- a/plugins/homepage/src/frontend/dialogs/DashboardLinksEditForm.tsx
+++ /dev/null
@@ -1,61 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Input } from "@termix/plugin-sdk/ui";
-import type { DashboardLinksConfig, WidgetEditFormProps } from "../types.js";
-
-export function DashboardLinksEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<DashboardLinksConfig>) {
-  const { t } = useTranslation();
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.columns")}
-        </label>
-        <div className="flex gap-1">
-          {([1, 2, 3] as const).map((c) => (
-            <button
-              key={c}
-              type="button"
-              onClick={() => onChange({ ...config, columns: c })}
-              className={`px-3 py-0.5 text-[10px] border transition-colors ${config.columns === c ? "bg-accent-brand border-accent-brand text-white" : "border-border text-muted-foreground"}`}
-            >
-              {c}
-            </button>
-          ))}
-        </div>
-      </div>
-
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.maxItems")}
-        </label>
-        <Input
-          type="number"
-          min={1}
-          max={100}
-          value={config.maxItems ?? ""}
-          onChange={(e) =>
-            onChange({
-              ...config,
-              maxItems: e.target.value ? Number(e.target.value) : undefined,
-            })
-          }
-          placeholder={t("homepage.noLimit")}
-          className="h-8 text-xs"
-        />
-      </div>
-
-      <label className="flex items-center gap-2 text-xs text-muted-foreground cursor-pointer">
-        <input
-          type="checkbox"
-          checked={config.showIcons}
-          onChange={(e) => onChange({ ...config, showIcons: e.target.checked })}
-          className="accent-accent-brand"
-        />
-        {t("homepage.showImage")}
-      </label>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/FolderEditForm.tsx b/plugins/homepage/src/frontend/dialogs/FolderEditForm.tsx
deleted file mode 100644
index 45bb8ad40..000000000
--- a/plugins/homepage/src/frontend/dialogs/FolderEditForm.tsx
+++ /dev/null
@@ -1,44 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Input } from "@termix/plugin-sdk/ui";
-import type { FolderConfig, WidgetEditFormProps } from "../types.js";
-
-function getAccentColor(): string {
-  return (
-    getComputedStyle(document.documentElement)
-      .getPropertyValue("--accent-brand")
-      .trim() || "#f59145"
-  );
-}
-
-export function FolderEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<FolderConfig>) {
-  const { t } = useTranslation();
-  const accent = getAccentColor();
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.color")}
-        </label>
-        <div className="flex items-center gap-2">
-          <input
-            type="color"
-            value={config.color || accent}
-            onChange={(e) => onChange({ ...config, color: e.target.value })}
-            className="w-8 h-8 border border-border cursor-pointer"
-          />
-          <Input
-            value={config.color ?? ""}
-            onChange={(e) =>
-              onChange({ ...config, color: e.target.value || undefined })
-            }
-            placeholder={accent}
-            className="h-8 text-sm flex-1"
-          />
-        </div>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/HostGridEditForm.tsx b/plugins/homepage/src/frontend/dialogs/HostGridEditForm.tsx
deleted file mode 100644
index 0e10ad42b..000000000
--- a/plugins/homepage/src/frontend/dialogs/HostGridEditForm.tsx
+++ /dev/null
@@ -1,82 +0,0 @@
-import { useHosts, useTranslation } from "@termix/plugin-sdk/frontend";
-import type { HostGridConfig, WidgetEditFormProps } from "../types.js";
-
-export function HostGridEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<HostGridConfig>) {
-  const { t } = useTranslation();
-  const { hosts } = useHosts();
-
-  const toggleHost = (id: number) => {
-    const next = config.hostIds.includes(id)
-      ? config.hostIds.filter((x) => x !== id)
-      : [...config.hostIds, id];
-    onChange({ ...config, hostIds: next });
-  };
-
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.hostGridHosts")}
-        </label>
-        <div className="flex flex-col gap-0.5 max-h-40 overflow-y-auto border border-border/40 p-1">
-          {hosts.length === 0 && (
-            <span className="text-[10px] text-muted-foreground p-1">
-              {t("homepage.noHosts")}
-            </span>
-          )}
-          {hosts.map((h) => {
-            const id = Number(h.id);
-            return (
-              <label
-                key={h.id}
-                className="flex items-center gap-2 text-[10px] cursor-pointer px-1 py-0.5 hover:bg-muted/40"
-              >
-                <input
-                  type="checkbox"
-                  checked={config.hostIds.includes(id)}
-                  onChange={() => toggleHost(id)}
-                  className="accent-accent-brand"
-                />
-                {h.name}
-              </label>
-            );
-          })}
-        </div>
-        <span className="text-[9px] text-muted-foreground">
-          {t("homepage.hostGridAllHint")}
-        </span>
-      </div>
-
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.columns")}
-        </label>
-        <div className="flex gap-1">
-          {([2, 3, 4] as const).map((c) => (
-            <button
-              key={c}
-              type="button"
-              onClick={() => onChange({ ...config, columns: c })}
-              className={`px-3 py-0.5 text-[10px] font-medium border transition-colors ${config.columns === c ? "bg-accent-brand border-accent-brand text-white" : "border-border text-muted-foreground"}`}
-            >
-              {c}
-            </button>
-          ))}
-        </div>
-      </div>
-
-      <label className="flex items-center gap-2 text-xs text-muted-foreground cursor-pointer">
-        <input
-          type="checkbox"
-          checked={config.showIp}
-          onChange={(e) => onChange({ ...config, showIp: e.target.checked })}
-          className="accent-accent-brand"
-        />
-        {t("homepage.showIp")}
-      </label>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/HostStatusEditForm.tsx b/plugins/homepage/src/frontend/dialogs/HostStatusEditForm.tsx
deleted file mode 100644
index 5d6acae4a..000000000
--- a/plugins/homepage/src/frontend/dialogs/HostStatusEditForm.tsx
+++ /dev/null
@@ -1,85 +0,0 @@
-import { useHosts, useTranslation } from "@termix/plugin-sdk/frontend";
-import type {
-  HostMetricKey,
-  HostStatusConfig,
-  WidgetEditFormProps,
-} from "../types.js";
-import { Select2 } from "@termix/plugin-sdk/ui";
-
-const METRIC_OPTIONS: { key: HostMetricKey; labelKey: string }[] = [
-  { key: "cpu", labelKey: "homepage.metricCpu" },
-  { key: "memory", labelKey: "homepage.metricMemory" },
-  { key: "disk", labelKey: "homepage.metricDisk" },
-  { key: "uptime", labelKey: "homepage.metricUptime" },
-  { key: "system", labelKey: "homepage.metricSystem" },
-  { key: "network", labelKey: "homepage.metricNetwork" },
-  { key: "processes", labelKey: "homepage.metricProcesses" },
-];
-
-export function HostStatusEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<HostStatusConfig>) {
-  const { t } = useTranslation();
-  const { hosts: allHosts } = useHosts();
-  const hosts = allHosts.filter((h) => h.statusCheckEnabled !== false);
-
-  const shownMetrics: HostMetricKey[] = config.shownMetrics?.length
-    ? config.shownMetrics
-    : config.showMetrics !== false
-      ? ["cpu", "memory", ...(config.showDisk ? ["disk" as HostMetricKey] : [])]
-      : [];
-
-  function toggleMetric(key: HostMetricKey) {
-    const next = shownMetrics.includes(key)
-      ? shownMetrics.filter((k) => k !== key)
-      : [...shownMetrics, key];
-    onChange({ ...config, shownMetrics: next });
-  }
-
-  return (
-    <div className="flex flex-col gap-4">
-      <div className="flex flex-col gap-1.5">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("common.host")}
-        </label>
-        <Select2
-          className="h-8 border border-border bg-background text-sm px-2"
-          value={config.hostId || ""}
-          onChange={(e) =>
-            onChange({ ...config, hostId: parseInt(e.target.value) || 0 })
-          }
-        >
-          <option value="">{t("common.selectHost")}</option>
-          {hosts.map((h) => (
-            <option key={h.id} value={h.id}>
-              {h.name}
-            </option>
-          ))}
-        </Select2>
-      </div>
-
-      <div className="flex flex-col gap-1.5">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.displayedMetrics")}
-        </label>
-        <div className="flex flex-col gap-1">
-          {METRIC_OPTIONS.map(({ key, labelKey }) => (
-            <label
-              key={key}
-              className="flex items-center gap-2 cursor-pointer select-none"
-            >
-              <input
-                type="checkbox"
-                checked={shownMetrics.includes(key)}
-                onChange={() => toggleMetric(key)}
-                className="w-3.5 h-3.5 accent-primary"
-              />
-              <span className="text-xs text-foreground">{t(labelKey)}</span>
-            </label>
-          ))}
-        </div>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/IframeEditForm.tsx b/plugins/homepage/src/frontend/dialogs/IframeEditForm.tsx
deleted file mode 100644
index 18f69f6b0..000000000
--- a/plugins/homepage/src/frontend/dialogs/IframeEditForm.tsx
+++ /dev/null
@@ -1,35 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Input, Switch } from "@termix/plugin-sdk/ui";
-
-import type { IframeConfig, WidgetEditFormProps } from "../types.js";
-
-export function IframeEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<IframeConfig>) {
-  const { t } = useTranslation();
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.url")}
-        </label>
-        <Input
-          value={config.url}
-          onChange={(e) => onChange({ ...config, url: e.target.value })}
-          placeholder="https://example.com"
-          className="h-8 text-sm"
-        />
-      </div>
-      <div className="flex items-center justify-between">
-        <label className="text-xs font-medium text-foreground">
-          {t("homepage.scrolling")}
-        </label>
-        <Switch
-          checked={config.scrolling}
-          onCheckedChange={(v) => onChange({ ...config, scrolling: v })}
-        />
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/ImageWidgetEditForm.tsx b/plugins/homepage/src/frontend/dialogs/ImageWidgetEditForm.tsx
deleted file mode 100644
index 2063fe4b4..000000000
--- a/plugins/homepage/src/frontend/dialogs/ImageWidgetEditForm.tsx
+++ /dev/null
@@ -1,68 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Input } from "@termix/plugin-sdk/ui";
-import type { ImageWidgetConfig, WidgetEditFormProps } from "../types.js";
-
-export function ImageWidgetEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<ImageWidgetConfig>) {
-  const { t } = useTranslation();
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.imageUrl")}
-        </label>
-        <Input
-          value={config.imageUrl}
-          onChange={(e) => onChange({ ...config, imageUrl: e.target.value })}
-          placeholder="https://example.com/image.png"
-          className="h-8 text-xs"
-        />
-      </div>
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.imageLinkUrl")}
-        </label>
-        <Input
-          value={config.linkUrl ?? ""}
-          onChange={(e) =>
-            onChange({ ...config, linkUrl: e.target.value || undefined })
-          }
-          placeholder="https://example.com"
-          className="h-8 text-xs"
-        />
-      </div>
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.imageFit")}
-        </label>
-        <div className="flex gap-1">
-          {(["contain", "cover", "fill"] as const).map((f) => (
-            <button
-              key={f}
-              type="button"
-              onClick={() => onChange({ ...config, fit: f })}
-              className={`px-2 py-0.5 text-[10px] border transition-colors capitalize ${config.fit === f ? "bg-accent-brand border-accent-brand text-white" : "border-border text-muted-foreground"}`}
-            >
-              {f}
-            </button>
-          ))}
-        </div>
-      </div>
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.altText")}
-        </label>
-        <Input
-          value={config.alt ?? ""}
-          onChange={(e) =>
-            onChange({ ...config, alt: e.target.value || undefined })
-          }
-          placeholder={t("homepage.altTextPlaceholder")}
-          className="h-8 text-xs"
-        />
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/LinkTreeEditForm.tsx b/plugins/homepage/src/frontend/dialogs/LinkTreeEditForm.tsx
deleted file mode 100644
index 7fe33f10c..000000000
--- a/plugins/homepage/src/frontend/dialogs/LinkTreeEditForm.tsx
+++ /dev/null
@@ -1,134 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Trash2, Plus } from "lucide-react";
-import { Input, Button } from "@termix/plugin-sdk/ui";
-
-import type {
-  LinkTreeConfig,
-  LinkTreeSection,
-  LinkTreeLink,
-  WidgetEditFormProps,
-} from "../types.js";
-
-export function LinkTreeEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<LinkTreeConfig>) {
-  const { t } = useTranslation();
-  const { sections, compact } = config;
-
-  const updateSection = (si: number, patch: Partial<LinkTreeSection>) => {
-    onChange({
-      ...config,
-      sections: sections.map((s, i) => (i === si ? { ...s, ...patch } : s)),
-    });
-  };
-  const removeSection = (si: number) =>
-    onChange({ ...config, sections: sections.filter((_, i) => i !== si) });
-  const addSection = () =>
-    onChange({
-      ...config,
-      sections: [...sections, { heading: "", links: [] }],
-    });
-
-  const updateLink = (si: number, li: number, patch: Partial<LinkTreeLink>) => {
-    const newSections = sections.map((s, i) => {
-      if (i !== si) return s;
-      return {
-        ...s,
-        links: s.links.map((l, j) => (j === li ? { ...l, ...patch } : l)),
-      };
-    });
-    onChange({ ...config, sections: newSections });
-  };
-  const removeLink = (si: number, li: number) => {
-    const newSections = sections.map((s, i) =>
-      i !== si ? s : { ...s, links: s.links.filter((_, j) => j !== li) },
-    );
-    onChange({ ...config, sections: newSections });
-  };
-  const addLink = (si: number) => {
-    const newSections = sections.map((s, i) =>
-      i !== si ? s : { ...s, links: [...s.links, { label: "", url: "" }] },
-    );
-    onChange({ ...config, sections: newSections });
-  };
-
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col gap-2 max-h-64 overflow-y-auto pr-1">
-        {sections.map((section, si) => (
-          <div
-            key={si}
-            className="flex flex-col gap-1 border border-border/40 p-2"
-          >
-            <div className="flex items-center gap-1.5">
-              <Input
-                value={section.heading}
-                onChange={(e) => updateSection(si, { heading: e.target.value })}
-                placeholder={t("homepage.sectionHeading")}
-                className="h-6 text-xs flex-1 font-semibold"
-              />
-              <button
-                onClick={() => removeSection(si)}
-                className="p-1 hover:bg-destructive/10 text-muted-foreground hover:text-destructive"
-              >
-                <Trash2 size={12} />
-              </button>
-            </div>
-            <div className="flex flex-col gap-0.5 pl-2">
-              {section.links.map((link, li) => (
-                <div key={li} className="flex items-center gap-1">
-                  <Input
-                    value={link.label}
-                    onChange={(e) =>
-                      updateLink(si, li, { label: e.target.value })
-                    }
-                    placeholder={t("homepage.linkLabel")}
-                    className="h-6 text-[10px] flex-1"
-                  />
-                  <Input
-                    value={link.url}
-                    onChange={(e) =>
-                      updateLink(si, li, { url: e.target.value })
-                    }
-                    placeholder="https://..."
-                    className="h-6 text-[10px] flex-1"
-                  />
-                  <button
-                    onClick={() => removeLink(si, li)}
-                    className="p-0.5 hover:bg-destructive/10 text-muted-foreground hover:text-destructive"
-                  >
-                    <Trash2 size={10} />
-                  </button>
-                </div>
-              ))}
-              <button
-                onClick={() => addLink(si)}
-                className="flex items-center gap-0.5 text-[9px] text-accent-brand hover:opacity-80 mt-0.5 self-start"
-              >
-                <Plus size={9} /> {t("homepage.addLink")}
-              </button>
-            </div>
-          </div>
-        ))}
-        <Button
-          variant="outline"
-          size="sm"
-          onClick={addSection}
-          className="mt-1 h-7 text-xs gap-1"
-        >
-          <Plus size={11} /> {t("homepage.addSection")}
-        </Button>
-      </div>
-      <label className="flex items-center gap-2 text-xs text-muted-foreground cursor-pointer">
-        <input
-          type="checkbox"
-          checked={compact}
-          onChange={(e) => onChange({ ...config, compact: e.target.checked })}
-          className="accent-accent-brand"
-        />
-        {t("homepage.compactMode")}
-      </label>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/MarkdownNotesEditForm.tsx b/plugins/homepage/src/frontend/dialogs/MarkdownNotesEditForm.tsx
deleted file mode 100644
index 60255621b..000000000
--- a/plugins/homepage/src/frontend/dialogs/MarkdownNotesEditForm.tsx
+++ /dev/null
@@ -1,73 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Input, Textarea } from "@termix/plugin-sdk/ui";
-
-import type { MarkdownNotesConfig, WidgetEditFormProps } from "../types.js";
-
-export function MarkdownNotesEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<MarkdownNotesConfig>) {
-  const { t } = useTranslation();
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.content")}
-        </label>
-        <Textarea
-          value={config.content}
-          onChange={(e) => onChange({ ...config, content: e.target.value })}
-          className="text-sm min-h-[120px] resize-none rounded-none font-mono"
-        />
-      </div>
-      <label className="flex items-center gap-2 text-xs text-muted-foreground cursor-pointer">
-        <input
-          type="checkbox"
-          checked={config.renderMarkdown}
-          onChange={(e) =>
-            onChange({ ...config, renderMarkdown: e.target.checked })
-          }
-          className="accent-accent-brand"
-        />
-        {t("homepage.renderMarkdown")}
-      </label>
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.backgroundColor")}
-        </label>
-        <div className="flex items-center gap-2">
-          <input
-            type="color"
-            value={config.backgroundColor ?? "#1e1e2e"}
-            onChange={(e) =>
-              onChange({ ...config, backgroundColor: e.target.value })
-            }
-            className="w-8 h-8 border border-border cursor-pointer"
-          />
-          <Input
-            value={config.backgroundColor ?? ""}
-            onChange={(e) =>
-              onChange({
-                ...config,
-                backgroundColor: e.target.value || undefined,
-              })
-            }
-            placeholder="#1e1e2e"
-            className="h-8 text-sm flex-1"
-          />
-          {config.backgroundColor && (
-            <button
-              type="button"
-              onClick={() =>
-                onChange({ ...config, backgroundColor: undefined })
-              }
-              className="text-[10px] text-muted-foreground hover:text-foreground shrink-0"
-            >
-              {t("homepage.clearColor")}
-            </button>
-          )}
-        </div>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/NotesEditForm.tsx b/plugins/homepage/src/frontend/dialogs/NotesEditForm.tsx
deleted file mode 100644
index 61195b04a..000000000
--- a/plugins/homepage/src/frontend/dialogs/NotesEditForm.tsx
+++ /dev/null
@@ -1,25 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Textarea } from "@termix/plugin-sdk/ui";
-import type { NotesConfig, WidgetEditFormProps } from "../types.js";
-
-export function NotesEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<NotesConfig>) {
-  const { t } = useTranslation();
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.content")}
-        </label>
-        <Textarea
-          value={config.content}
-          onChange={(e) => onChange({ ...config, content: e.target.value })}
-          placeholder={t("homepage.notesPlaceholder")}
-          className="text-sm min-h-[120px] resize-none rounded-none"
-        />
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/PingStatusEditForm.tsx b/plugins/homepage/src/frontend/dialogs/PingStatusEditForm.tsx
deleted file mode 100644
index d361c11b4..000000000
--- a/plugins/homepage/src/frontend/dialogs/PingStatusEditForm.tsx
+++ /dev/null
@@ -1,96 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Trash2, Plus } from "lucide-react";
-import { Input, Button } from "@termix/plugin-sdk/ui";
-
-import type {
-  PingStatusConfig,
-  PingUrl,
-  WidgetEditFormProps,
-} from "../types.js";
-
-export function PingStatusEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<PingStatusConfig>) {
-  const { t } = useTranslation();
-  const { urls, refreshInterval, showLatency } = config;
-
-  const updateUrl = (i: number, patch: Partial<PingUrl>) => {
-    onChange({
-      ...config,
-      urls: urls.map((u, idx) => (idx === i ? { ...u, ...patch } : u)),
-    });
-  };
-  const removeUrl = (i: number) =>
-    onChange({ ...config, urls: urls.filter((_, idx) => idx !== i) });
-  const addUrl = () =>
-    onChange({ ...config, urls: [...urls, { label: "", url: "" }] });
-
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col gap-2 max-h-48 overflow-y-auto pr-1">
-        {urls.map((u, i) => (
-          <div key={i} className="flex items-center gap-1.5">
-            <Input
-              value={u.label}
-              onChange={(e) => updateUrl(i, { label: e.target.value })}
-              placeholder={t("homepage.pingLabel")}
-              className="h-7 text-xs flex-1"
-            />
-            <Input
-              value={u.url}
-              onChange={(e) => updateUrl(i, { url: e.target.value })}
-              placeholder="https://..."
-              className="h-7 text-xs flex-1"
-            />
-            <button
-              onClick={() => removeUrl(i)}
-              className="p-1 hover:bg-destructive/10 text-muted-foreground hover:text-destructive"
-            >
-              <Trash2 size={12} />
-            </button>
-          </div>
-        ))}
-        <Button
-          variant="outline"
-          size="sm"
-          onClick={addUrl}
-          className="mt-1 h-7 text-xs gap-1"
-        >
-          <Plus size={11} /> {t("homepage.addPingUrl")}
-        </Button>
-      </div>
-
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.refreshInterval")} ({t("homepage.seconds")})
-        </label>
-        <Input
-          type="number"
-          min={10}
-          max={3600}
-          value={refreshInterval}
-          onChange={(e) =>
-            onChange({
-              ...config,
-              refreshInterval: Math.max(10, Number(e.target.value)),
-            })
-          }
-          className="h-8 text-xs"
-        />
-      </div>
-
-      <label className="flex items-center gap-2 text-xs text-muted-foreground cursor-pointer">
-        <input
-          type="checkbox"
-          checked={showLatency}
-          onChange={(e) =>
-            onChange({ ...config, showLatency: e.target.checked })
-          }
-          className="accent-accent-brand"
-        />
-        {t("homepage.showLatency")}
-      </label>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/QuickConnectEditForm.tsx b/plugins/homepage/src/frontend/dialogs/QuickConnectEditForm.tsx
deleted file mode 100644
index 65b4a7b0a..000000000
--- a/plugins/homepage/src/frontend/dialogs/QuickConnectEditForm.tsx
+++ /dev/null
@@ -1,132 +0,0 @@
-import {
-  useHostActions,
-  useHosts,
-  useTranslation,
-} from "@termix/plugin-sdk/frontend";
-import type {
-  QuickConnectConfig,
-  QuickConnectType,
-  WidgetEditFormProps,
-} from "../types.js";
-import { quickConnectTargets } from "../quick-connect-targets.js";
-
-export function QuickConnectEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<QuickConnectConfig>) {
-  const { t } = useTranslation();
-  const { hosts } = useHosts();
-  const targets = quickConnectTargets(useHostActions());
-
-  const toggleHost = (id: number) => {
-    const current = config.hostIds;
-    const ids = current.includes(id)
-      ? current.filter((x) => x !== id)
-      : [...current, id];
-    onChange({ ...config, hostIds: ids });
-  };
-
-  const toggleType = (type: QuickConnectType) => {
-    const types = config.connectionTypes.includes(type)
-      ? config.connectionTypes.filter((x) => x !== type)
-      : [...config.connectionTypes, type];
-    onChange({ ...config, connectionTypes: types });
-  };
-
-  return (
-    <div className="flex flex-col gap-4">
-      <div className="flex flex-col gap-1.5">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.selectHosts")}
-        </label>
-        <div className="flex flex-col gap-1 max-h-36 overflow-y-auto border border-border/30 p-2">
-          {hosts.length === 0 && (
-            <span className="text-xs text-muted-foreground/60">
-              {t("homepage.noHosts")}
-            </span>
-          )}
-          {hosts.map((h) => {
-            const id = Number(h.id);
-            return (
-              <label
-                key={h.id}
-                className="flex items-center gap-2 text-xs cursor-pointer"
-              >
-                <input
-                  type="checkbox"
-                  checked={config.hostIds.includes(id)}
-                  onChange={() => toggleHost(id)}
-                  className="accent-accent-brand"
-                />
-                <span className="truncate">{h.name || h.ip}</span>
-              </label>
-            );
-          })}
-        </div>
-        <p className="text-[10px] text-muted-foreground/60">
-          {t("homepage.hostGridAllHint")}
-        </p>
-      </div>
-
-      <div className="flex flex-col gap-1.5">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.connectionTypes")}
-        </label>
-        <div className="grid grid-cols-2 gap-1">
-          {targets.map(({ type, labelKey }) => (
-            <label
-              key={type}
-              className="flex items-center gap-2 text-xs cursor-pointer"
-            >
-              <input
-                type="checkbox"
-                checked={config.connectionTypes.includes(type)}
-                onChange={() => toggleType(type)}
-                className="accent-accent-brand"
-              />
-              {t(labelKey, type)}
-            </label>
-          ))}
-        </div>
-      </div>
-
-      <div className="flex flex-col gap-1.5">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.layout")}
-        </label>
-        <div className="flex gap-3">
-          {(["list", "grid"] as const).map((l) => (
-            <label
-              key={l}
-              className="flex items-center gap-1.5 text-xs cursor-pointer"
-            >
-              <input
-                type="radio"
-                name="layout"
-                value={l}
-                checked={config.layout === l}
-                onChange={() => onChange({ ...config, layout: l })}
-                className="accent-accent-brand"
-              />
-              {l === "list"
-                ? t("homepage.listLayout")
-                : t("homepage.gridLayout")}
-            </label>
-          ))}
-        </div>
-      </div>
-
-      <label className="flex items-center gap-2 text-xs text-muted-foreground cursor-pointer">
-        <input
-          type="checkbox"
-          checked={config.showStatus}
-          onChange={(e) =>
-            onChange({ ...config, showStatus: e.target.checked })
-          }
-          className="accent-accent-brand"
-        />
-        {t("homepage.showStatus")}
-      </label>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/RecentActivityEditForm.tsx b/plugins/homepage/src/frontend/dialogs/RecentActivityEditForm.tsx
deleted file mode 100644
index 2ddf55ad2..000000000
--- a/plugins/homepage/src/frontend/dialogs/RecentActivityEditForm.tsx
+++ /dev/null
@@ -1,83 +0,0 @@
-import { useActivityTypes, useTranslation } from "@termix/plugin-sdk/frontend";
-import { Input } from "@termix/plugin-sdk/ui";
-import type {
-  RecentActivityConfig,
-  ActivityType,
-  WidgetEditFormProps,
-} from "../types.js";
-
-export function RecentActivityEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<RecentActivityConfig>) {
-  const { t } = useTranslation();
-  const activityTypes = useActivityTypes();
-
-  const toggleType = (type: ActivityType) => {
-    const next = config.filterTypes.includes(type)
-      ? config.filterTypes.filter((x) => x !== type)
-      : [...config.filterTypes, type];
-    onChange({ ...config, filterTypes: next });
-  };
-
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.maxItems")}
-        </label>
-        <Input
-          type="number"
-          min={1}
-          max={50}
-          value={config.maxItems}
-          onChange={(e) =>
-            onChange({
-              ...config,
-              maxItems: Math.max(1, Number(e.target.value)),
-            })
-          }
-          className="h-8 text-xs"
-        />
-      </div>
-
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.filterActivityTypes")}
-        </label>
-        <div className="flex flex-wrap gap-1">
-          {activityTypes.map((type) => (
-            <button
-              key={type}
-              type="button"
-              onClick={() => toggleType(type)}
-              className={`px-2 py-0.5 text-[10px] border transition-colors ${
-                config.filterTypes.includes(type) ||
-                config.filterTypes.length === 0
-                  ? "bg-accent-brand border-accent-brand text-white"
-                  : "border-border text-muted-foreground"
-              }`}
-            >
-              {type.replace("_", " ")}
-            </button>
-          ))}
-        </div>
-        <span className="text-[9px] text-muted-foreground">
-          {t("homepage.filterTypesHint")}
-        </span>
-      </div>
-
-      <label className="flex items-center gap-2 text-xs text-muted-foreground cursor-pointer">
-        <input
-          type="checkbox"
-          checked={config.showTimestamp}
-          onChange={(e) =>
-            onChange({ ...config, showTimestamp: e.target.checked })
-          }
-          className="accent-accent-brand"
-        />
-        {t("homepage.showTimestamp")}
-      </label>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/RssFeedEditForm.tsx b/plugins/homepage/src/frontend/dialogs/RssFeedEditForm.tsx
deleted file mode 100644
index 890102e94..000000000
--- a/plugins/homepage/src/frontend/dialogs/RssFeedEditForm.tsx
+++ /dev/null
@@ -1,53 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Input, Switch } from "@termix/plugin-sdk/ui";
-
-import type { RssFeedConfig, WidgetEditFormProps } from "../types.js";
-
-export function RssFeedEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<RssFeedConfig>) {
-  const { t } = useTranslation();
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.feedUrl")}
-        </label>
-        <Input
-          value={config.feedUrl}
-          onChange={(e) => onChange({ ...config, feedUrl: e.target.value })}
-          placeholder="https://example.com/feed.xml"
-          className="h-8 text-sm"
-        />
-      </div>
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.maxItems")}
-        </label>
-        <Input
-          type="number"
-          min={1}
-          max={50}
-          value={config.maxItems}
-          onChange={(e) =>
-            onChange({
-              ...config,
-              maxItems: Math.max(1, Math.min(50, Number(e.target.value))),
-            })
-          }
-          className="h-8 text-sm"
-        />
-      </div>
-      <div className="flex items-center justify-between">
-        <label className="text-xs font-medium text-foreground">
-          {t("homepage.showDescription")}
-        </label>
-        <Switch
-          checked={config.showDescription}
-          onCheckedChange={(v) => onChange({ ...config, showDescription: v })}
-        />
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/SearchBarEditForm.tsx b/plugins/homepage/src/frontend/dialogs/SearchBarEditForm.tsx
deleted file mode 100644
index 99b4df61b..000000000
--- a/plugins/homepage/src/frontend/dialogs/SearchBarEditForm.tsx
+++ /dev/null
@@ -1,82 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Input } from "@termix/plugin-sdk/ui";
-import type {
-  SearchBarConfig,
-  SearchEngine,
-  WidgetEditFormProps,
-} from "../types.js";
-
-const ENGINES: { id: SearchEngine; label: string }[] = [
-  { id: "google", label: "Google" },
-  { id: "duckduckgo", label: "DuckDuckGo" },
-  { id: "bing", label: "Bing" },
-  { id: "custom", label: "Custom" },
-];
-
-export function SearchBarEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<SearchBarConfig>) {
-  const { t } = useTranslation();
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.searchEngine")}
-        </label>
-        <div className="flex flex-wrap gap-1">
-          {ENGINES.map((e) => (
-            <button
-              key={e.id}
-              type="button"
-              onClick={() => onChange({ ...config, engine: e.id })}
-              className={`px-2 py-0.5 text-[10px] border transition-colors ${config.engine === e.id ? "bg-accent-brand border-accent-brand text-white" : "border-border text-muted-foreground"}`}
-            >
-              {e.label}
-            </button>
-          ))}
-        </div>
-      </div>
-
-      {config.engine === "custom" && (
-        <div className="flex flex-col gap-1">
-          <label className="text-xs font-medium text-muted-foreground">
-            {t("homepage.customSearchUrl")}
-          </label>
-          <Input
-            value={config.customUrl ?? ""}
-            onChange={(e) => onChange({ ...config, customUrl: e.target.value })}
-            placeholder="https://example.com/search?q={q}"
-            className="h-8 text-xs"
-          />
-        </div>
-      )}
-
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.searchPlaceholderLabel")}
-        </label>
-        <Input
-          value={config.placeholder ?? ""}
-          onChange={(e) =>
-            onChange({ ...config, placeholder: e.target.value || undefined })
-          }
-          placeholder={t("homepage.searchPlaceholderHint")}
-          className="h-8 text-xs"
-        />
-      </div>
-
-      <label className="flex items-center gap-2 text-xs text-muted-foreground cursor-pointer">
-        <input
-          type="checkbox"
-          checked={config.openInNewTab}
-          onChange={(e) =>
-            onChange({ ...config, openInNewTab: e.target.checked })
-          }
-          className="accent-accent-brand"
-        />
-        {t("homepage.openInNewTab")}
-      </label>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/SearchLinksEditForm.tsx b/plugins/homepage/src/frontend/dialogs/SearchLinksEditForm.tsx
deleted file mode 100644
index c935cc040..000000000
--- a/plugins/homepage/src/frontend/dialogs/SearchLinksEditForm.tsx
+++ /dev/null
@@ -1,83 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Trash2, Plus } from "lucide-react";
-import { Input, Button } from "@termix/plugin-sdk/ui";
-
-import type {
-  SearchLinksConfig,
-  SearchLinkShortcut,
-  WidgetEditFormProps,
-} from "../types.js";
-
-export function SearchLinksEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<SearchLinksConfig>) {
-  const { t } = useTranslation();
-  const { shortcuts } = config;
-
-  const update = (i: number, patch: Partial<SearchLinkShortcut>) => {
-    onChange({
-      ...config,
-      shortcuts: shortcuts.map((s, idx) =>
-        idx === i ? { ...s, ...patch } : s,
-      ),
-    });
-  };
-  const remove = (i: number) =>
-    onChange({ ...config, shortcuts: shortcuts.filter((_, idx) => idx !== i) });
-  const add = () =>
-    onChange({
-      ...config,
-      shortcuts: [...shortcuts, { label: "", queryTemplate: "" }],
-    });
-
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col gap-2 max-h-56 overflow-y-auto pr-1">
-        {shortcuts.map((s, i) => (
-          <div
-            key={i}
-            className="flex flex-col gap-1 border border-border/40 p-2"
-          >
-            <div className="flex items-center gap-1.5">
-              <Input
-                value={s.icon ?? ""}
-                onChange={(e) =>
-                  update(i, { icon: e.target.value || undefined })
-                }
-                placeholder="🔍"
-                className="h-6 text-xs w-10 text-center"
-              />
-              <Input
-                value={s.label}
-                onChange={(e) => update(i, { label: e.target.value })}
-                placeholder={t("homepage.linkLabel")}
-                className="h-6 text-xs flex-1"
-              />
-              <button
-                onClick={() => remove(i)}
-                className="p-1 hover:bg-destructive/10 text-muted-foreground hover:text-destructive"
-              >
-                <Trash2 size={12} />
-              </button>
-            </div>
-            <Input
-              value={s.queryTemplate}
-              onChange={(e) => update(i, { queryTemplate: e.target.value })}
-              placeholder="https://example.com/search?q={q}"
-              className="h-6 text-xs"
-            />
-          </div>
-        ))}
-        <Button
-          variant="outline"
-          size="sm"
-          onClick={add}
-          className="mt-1 h-7 text-xs gap-1"
-        >
-          <Plus size={11} /> {t("homepage.addSearchShortcut")}
-        </Button>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/ServiceGridEditForm.tsx b/plugins/homepage/src/frontend/dialogs/ServiceGridEditForm.tsx
deleted file mode 100644
index e4b23eb87..000000000
--- a/plugins/homepage/src/frontend/dialogs/ServiceGridEditForm.tsx
+++ /dev/null
@@ -1,114 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Trash2, Plus } from "lucide-react";
-import { Input, Button } from "@termix/plugin-sdk/ui";
-
-import type {
-  ServiceGridConfig,
-  ServiceGridItem,
-  WidgetEditFormProps,
-} from "../types.js";
-
-export function ServiceGridEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<ServiceGridConfig>) {
-  const { t } = useTranslation();
-  const { services, columns, showLabels, iconSize } = config;
-
-  const updateItem = (i: number, patch: Partial<ServiceGridItem>) => {
-    onChange({
-      ...config,
-      services: services.map((s, idx) => (idx === i ? { ...s, ...patch } : s)),
-    });
-  };
-  const removeItem = (i: number) =>
-    onChange({ ...config, services: services.filter((_, idx) => idx !== i) });
-  const addItem = () =>
-    onChange({ ...config, services: [...services, { label: "", url: "" }] });
-
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col gap-1.5 max-h-48 overflow-y-auto pr-1">
-        {services.map((s, i) => (
-          <div key={i} className="flex items-center gap-1.5">
-            <Input
-              value={s.label}
-              onChange={(e) => updateItem(i, { label: e.target.value })}
-              placeholder={t("homepage.linkLabel")}
-              className="h-7 text-xs flex-1"
-            />
-            <Input
-              value={s.url}
-              onChange={(e) => updateItem(i, { url: e.target.value })}
-              placeholder="https://..."
-              className="h-7 text-xs flex-1"
-            />
-            <button
-              onClick={() => removeItem(i)}
-              className="p-1 hover:bg-destructive/10 text-muted-foreground hover:text-destructive"
-            >
-              <Trash2 size={12} />
-            </button>
-          </div>
-        ))}
-        <Button
-          variant="outline"
-          size="sm"
-          onClick={addItem}
-          className="mt-1 h-7 text-xs gap-1"
-        >
-          <Plus size={11} /> {t("homepage.addService")}
-        </Button>
-      </div>
-
-      <div className="flex gap-3">
-        <div className="flex flex-col gap-1">
-          <label className="text-xs font-medium text-muted-foreground">
-            {t("homepage.columns")}
-          </label>
-          <div className="flex gap-1">
-            {([2, 3, 4] as const).map((c) => (
-              <button
-                key={c}
-                type="button"
-                onClick={() => onChange({ ...config, columns: c })}
-                className={`px-3 py-0.5 text-[10px] border transition-colors ${columns === c ? "bg-accent-brand border-accent-brand text-white" : "border-border text-muted-foreground"}`}
-              >
-                {c}
-              </button>
-            ))}
-          </div>
-        </div>
-        <div className="flex flex-col gap-1">
-          <label className="text-xs font-medium text-muted-foreground">
-            {t("homepage.iconSize")}
-          </label>
-          <div className="flex gap-1">
-            {(["sm", "md", "lg"] as const).map((s) => (
-              <button
-                key={s}
-                type="button"
-                onClick={() => onChange({ ...config, iconSize: s })}
-                className={`px-2 py-0.5 text-[10px] border transition-colors uppercase ${iconSize === s ? "bg-accent-brand border-accent-brand text-white" : "border-border text-muted-foreground"}`}
-              >
-                {s}
-              </button>
-            ))}
-          </div>
-        </div>
-      </div>
-
-      <label className="flex items-center gap-2 text-xs text-muted-foreground cursor-pointer">
-        <input
-          type="checkbox"
-          checked={showLabels}
-          onChange={(e) =>
-            onChange({ ...config, showLabels: e.target.checked })
-          }
-          className="accent-accent-brand"
-        />
-        {t("homepage.showLabels")}
-      </label>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/ServiceLinkEditForm.tsx b/plugins/homepage/src/frontend/dialogs/ServiceLinkEditForm.tsx
deleted file mode 100644
index 86bb4ab68..000000000
--- a/plugins/homepage/src/frontend/dialogs/ServiceLinkEditForm.tsx
+++ /dev/null
@@ -1,98 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Input, Switch } from "@termix/plugin-sdk/ui";
-
-import type { ServiceLinkConfig, WidgetEditFormProps } from "../types.js";
-
-function getAccentColor(): string {
-  return (
-    getComputedStyle(document.documentElement)
-      .getPropertyValue("--accent-brand")
-      .trim() || "#f59145"
-  );
-}
-
-export function ServiceLinkEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<ServiceLinkConfig>) {
-  const { t } = useTranslation();
-  const accent = getAccentColor();
-  const showImage = config.showImage ?? true;
-
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.url")}
-        </label>
-        <Input
-          value={config.url}
-          onChange={(e) => onChange({ ...config, url: e.target.value })}
-          placeholder="https://example.com"
-          className="h-8 text-sm"
-        />
-      </div>
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.description")}
-        </label>
-        <Input
-          value={config.description ?? ""}
-          onChange={(e) => onChange({ ...config, description: e.target.value })}
-          placeholder={t("homepage.serviceNamePlaceholder")}
-          className="h-8 text-sm"
-        />
-      </div>
-      <div className="flex items-center justify-between">
-        <label className="text-xs font-medium text-foreground">
-          {t("homepage.showImage")}
-        </label>
-        <Switch
-          checked={showImage}
-          onCheckedChange={(v) => onChange({ ...config, showImage: v })}
-        />
-      </div>
-      {showImage && (
-        <div className="flex flex-col gap-1">
-          <label className="text-xs font-medium text-muted-foreground">
-            {t("homepage.imageUrl")}
-          </label>
-          <Input
-            value={config.imageUrl ?? ""}
-            onChange={(e) =>
-              onChange({ ...config, imageUrl: e.target.value || undefined })
-            }
-            placeholder="https://example.com/logo.png"
-            className="h-8 text-sm"
-          />
-          <span className="text-[10px] text-muted-foreground/60">
-            {t("homepage.imageUrlHint")}
-          </span>
-        </div>
-      )}
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.color")}
-        </label>
-        <div className="flex items-center gap-2">
-          <input
-            type="color"
-            value={config.accentColor || accent}
-            onChange={(e) =>
-              onChange({ ...config, accentColor: e.target.value })
-            }
-            className="w-8 h-8 border border-border cursor-pointer"
-          />
-          <Input
-            value={config.accentColor ?? ""}
-            onChange={(e) =>
-              onChange({ ...config, accentColor: e.target.value || undefined })
-            }
-            placeholder={accent}
-            className="h-8 text-sm flex-1"
-          />
-        </div>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/SingleHostEditForm.tsx b/plugins/homepage/src/frontend/dialogs/SingleHostEditForm.tsx
deleted file mode 100644
index 84bc0847a..000000000
--- a/plugins/homepage/src/frontend/dialogs/SingleHostEditForm.tsx
+++ /dev/null
@@ -1,42 +0,0 @@
-import {
-  useTranslation,
-  useHosts,
-  type PluginHostRecord,
-} from "@termix/plugin-sdk/frontend";
-import { Select2 } from "@termix/plugin-sdk/ui";
-
-interface SingleHostEditFormProps {
-  hostId: number;
-  onChange: (hostId: number) => void;
-  filter?: (host: PluginHostRecord) => boolean;
-}
-
-export function SingleHostEditForm({
-  hostId,
-  onChange,
-  filter,
-}: SingleHostEditFormProps) {
-  const { t } = useTranslation();
-  const { hosts: allHosts } = useHosts();
-  const hosts = filter ? allHosts.filter(filter) : allHosts;
-
-  return (
-    <div className="flex flex-col gap-1">
-      <label className="text-xs font-medium text-muted-foreground">
-        {t("common.host")}
-      </label>
-      <Select2
-        value={hostId || ""}
-        onChange={(e) => onChange(Number(e.target.value))}
-        className="h-8 text-xs border border-border bg-background px-2"
-      >
-        <option value="">{t("common.selectHost")}</option>
-        {hosts.map((h) => (
-          <option key={h.id} value={h.id}>
-            {h.name || h.ip}
-          </option>
-        ))}
-      </Select2>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/SshTerminalEditForm.tsx b/plugins/homepage/src/frontend/dialogs/SshTerminalEditForm.tsx
deleted file mode 100644
index 9568f29b9..000000000
--- a/plugins/homepage/src/frontend/dialogs/SshTerminalEditForm.tsx
+++ /dev/null
@@ -1,30 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import type { SshTerminalConfig, WidgetEditFormProps } from "../types.js";
-import { SingleHostEditForm } from "./SingleHostEditForm";
-
-export function SshTerminalEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<SshTerminalConfig>) {
-  const { t } = useTranslation();
-  return (
-    <div className="flex flex-col gap-3">
-      <SingleHostEditForm
-        hostId={config.hostId}
-        onChange={(hostId) => onChange({ ...config, hostId })}
-        filter={(h) => !!h.enableSsh}
-      />
-      <label className="flex items-center gap-2 text-xs text-muted-foreground cursor-pointer">
-        <input
-          type="checkbox"
-          checked={config.autoConnect}
-          onChange={(e) =>
-            onChange({ ...config, autoConnect: e.target.checked })
-          }
-          className="accent-accent-brand"
-        />
-        {t("homepage.sshTerminalAutoConnect")}
-      </label>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/SystemOverviewEditForm.tsx b/plugins/homepage/src/frontend/dialogs/SystemOverviewEditForm.tsx
deleted file mode 100644
index d593a1d28..000000000
--- a/plugins/homepage/src/frontend/dialogs/SystemOverviewEditForm.tsx
+++ /dev/null
@@ -1,46 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import type { SystemOverviewConfig, WidgetEditFormProps } from "../types.js";
-
-export function SystemOverviewEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<SystemOverviewConfig>) {
-  const { t } = useTranslation();
-  return (
-    <div className="flex flex-col gap-2">
-      <label className="flex items-center gap-2 text-xs text-muted-foreground cursor-pointer">
-        <input
-          type="checkbox"
-          checked={config.showVersion}
-          onChange={(e) =>
-            onChange({ ...config, showVersion: e.target.checked })
-          }
-          className="accent-accent-brand"
-        />
-        {t("homepage.overviewVersion")}
-      </label>
-      <label className="flex items-center gap-2 text-xs text-muted-foreground cursor-pointer">
-        <input
-          type="checkbox"
-          checked={config.showDbHealth}
-          onChange={(e) =>
-            onChange({ ...config, showDbHealth: e.target.checked })
-          }
-          className="accent-accent-brand"
-        />
-        {t("homepage.overviewDatabase")}
-      </label>
-      <label className="flex items-center gap-2 text-xs text-muted-foreground cursor-pointer">
-        <input
-          type="checkbox"
-          checked={config.showUptime}
-          onChange={(e) =>
-            onChange({ ...config, showUptime: e.target.checked })
-          }
-          className="accent-accent-brand"
-        />
-        {t("homepage.overviewUptime")}
-      </label>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/TermixUptimeEditForm.tsx b/plugins/homepage/src/frontend/dialogs/TermixUptimeEditForm.tsx
deleted file mode 100644
index fc10e848c..000000000
--- a/plugins/homepage/src/frontend/dialogs/TermixUptimeEditForm.tsx
+++ /dev/null
@@ -1,24 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import type { TermixUptimeConfig, WidgetEditFormProps } from "../types.js";
-
-export function TermixUptimeEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<TermixUptimeConfig>) {
-  const { t } = useTranslation();
-  return (
-    <div className="flex flex-col gap-2">
-      <label className="flex items-center gap-2 text-xs text-muted-foreground cursor-pointer">
-        <input
-          type="checkbox"
-          checked={config.showDetailed}
-          onChange={(e) =>
-            onChange({ ...config, showDetailed: e.target.checked })
-          }
-          className="accent-accent-brand"
-        />
-        {t("homepage.showSeconds")}
-      </label>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/TextBannerEditForm.tsx b/plugins/homepage/src/frontend/dialogs/TextBannerEditForm.tsx
deleted file mode 100644
index e06f54a34..000000000
--- a/plugins/homepage/src/frontend/dialogs/TextBannerEditForm.tsx
+++ /dev/null
@@ -1,142 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Input, Textarea } from "@termix/plugin-sdk/ui";
-
-import type {
-  TextBannerConfig,
-  TextBannerFontSize,
-  TextBannerAlign,
-  TextBannerWeight,
-  WidgetEditFormProps,
-} from "../types.js";
-
-const SIZES: { id: TextBannerFontSize; label: string }[] = [
-  { id: "sm", label: "SM" },
-  { id: "md", label: "MD" },
-  { id: "lg", label: "LG" },
-  { id: "xl", label: "XL" },
-];
-
-const ALIGNS: { id: TextBannerAlign; label: string }[] = [
-  { id: "left", label: "Left" },
-  { id: "center", label: "Center" },
-  { id: "right", label: "Right" },
-];
-
-const WEIGHTS: { id: TextBannerWeight; label: string }[] = [
-  { id: "normal", label: "Normal" },
-  { id: "semibold", label: "Semibold" },
-  { id: "bold", label: "Bold" },
-];
-
-export function TextBannerEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<TextBannerConfig>) {
-  const { t } = useTranslation();
-
-  const ButtonGroup = <T extends string>({
-    opts,
-    value,
-    onSelect,
-  }: {
-    opts: { id: T; label: string }[];
-    value: T;
-    onSelect: (v: T) => void;
-  }) => (
-    <div className="flex gap-1">
-      {opts.map((o) => (
-        <button
-          key={o.id}
-          type="button"
-          onClick={() => onSelect(o.id)}
-          className={`px-2 py-0.5 text-[10px] border transition-colors ${value === o.id ? "bg-accent-brand border-accent-brand text-white" : "border-border text-muted-foreground"}`}
-        >
-          {o.label}
-        </button>
-      ))}
-    </div>
-  );
-
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.content")}
-        </label>
-        <Textarea
-          value={config.text}
-          onChange={(e) => onChange({ ...config, text: e.target.value })}
-          rows={2}
-          className="text-sm min-h-[60px] resize-none rounded-none"
-        />
-      </div>
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.fontSize")}
-        </label>
-        <ButtonGroup
-          opts={SIZES}
-          value={config.fontSize}
-          onSelect={(v) => onChange({ ...config, fontSize: v })}
-        />
-      </div>
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.textAlign")}
-        </label>
-        <ButtonGroup
-          opts={ALIGNS}
-          value={config.textAlign}
-          onSelect={(v) => onChange({ ...config, textAlign: v })}
-        />
-      </div>
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.fontWeight")}
-        </label>
-        <ButtonGroup
-          opts={WEIGHTS}
-          value={config.fontWeight}
-          onSelect={(v) => onChange({ ...config, fontWeight: v })}
-        />
-      </div>
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.backgroundColor")}
-        </label>
-        <div className="flex items-center gap-2">
-          <input
-            type="color"
-            value={config.backgroundColor ?? "#1e1e2e"}
-            onChange={(e) =>
-              onChange({ ...config, backgroundColor: e.target.value })
-            }
-            className="w-8 h-8 border border-border cursor-pointer"
-          />
-          <Input
-            value={config.backgroundColor ?? ""}
-            onChange={(e) =>
-              onChange({
-                ...config,
-                backgroundColor: e.target.value || undefined,
-              })
-            }
-            placeholder="#1e1e2e"
-            className="h-8 text-sm flex-1"
-          />
-          {config.backgroundColor && (
-            <button
-              type="button"
-              onClick={() =>
-                onChange({ ...config, backgroundColor: undefined })
-              }
-              className="text-[10px] text-muted-foreground hover:text-foreground shrink-0"
-            >
-              {t("homepage.clearColor")}
-            </button>
-          )}
-        </div>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/WeatherEditForm.tsx b/plugins/homepage/src/frontend/dialogs/WeatherEditForm.tsx
deleted file mode 100644
index c5d8635da..000000000
--- a/plugins/homepage/src/frontend/dialogs/WeatherEditForm.tsx
+++ /dev/null
@@ -1,56 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Input, Switch } from "@termix/plugin-sdk/ui";
-
-import type { WeatherConfig, WidgetEditFormProps } from "../types.js";
-
-export function WeatherEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<WeatherConfig>) {
-  const { t } = useTranslation();
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.location")}
-        </label>
-        <Input
-          value={config.location}
-          onChange={(e) => onChange({ ...config, location: e.target.value })}
-          placeholder={t("homepage.locationPlaceholder")}
-          className="h-8 text-sm"
-        />
-      </div>
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.temperatureUnit")}
-        </label>
-        <div className="flex gap-0 border border-border">
-          {(["C", "F"] as const).map((u) => (
-            <button
-              key={u}
-              type="button"
-              onClick={() => onChange({ ...config, unit: u })}
-              className={`flex-1 h-8 text-sm transition-colors ${
-                config.unit === u
-                  ? "bg-accent-brand text-white"
-                  : "text-muted-foreground hover:text-foreground hover:bg-muted/60"
-              }`}
-            >
-              °{u}
-            </button>
-          ))}
-        </div>
-      </div>
-      <div className="flex items-center justify-between">
-        <label className="text-xs font-medium text-foreground">
-          {t("homepage.showForecast")}
-        </label>
-        <Switch
-          checked={config.showForecast}
-          onCheckedChange={(v) => onChange({ ...config, showForecast: v })}
-        />
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/dialogs/WidgetEditDialog.tsx b/plugins/homepage/src/frontend/dialogs/WidgetEditDialog.tsx
deleted file mode 100644
index 27aebaf7b..000000000
--- a/plugins/homepage/src/frontend/dialogs/WidgetEditDialog.tsx
+++ /dev/null
@@ -1,353 +0,0 @@
-import { useState } from "react";
-import { getWidgetType } from "../widgets/WidgetRegistry";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import {
-  Button,
-  Dialog,
-  DialogContent,
-  DialogHeader,
-  DialogTitle,
-  DialogFooter,
-  Input,
-} from "@termix/plugin-sdk/ui";
-
-import type {
-  CanvasWidget,
-  ServiceLinkConfig,
-  FolderConfig,
-  NotesConfig,
-  BookmarkListConfig,
-  ClockConfig,
-  HostStatusConfig,
-  WeatherConfig,
-  IframeConfig,
-  RssFeedConfig,
-  HostGridConfig,
-  PingStatusConfig,
-  RecentActivityConfig,
-  TermixUptimeConfig,
-  SystemOverviewConfig,
-  SshTerminalConfig,
-  QuickConnectConfig,
-  CalendarConfig,
-  CountdownConfig,
-  SearchBarConfig,
-  TextBannerConfig,
-  ImageWidgetConfig,
-  MarkdownNotesConfig,
-  CustomApiConfig,
-  ServiceGridConfig,
-  DashboardLinksConfig,
-  SearchLinksConfig,
-  LinkTreeConfig,
-} from "../types.js";
-import { ServiceLinkEditForm } from "./ServiceLinkEditForm";
-import { FolderEditForm } from "./FolderEditForm";
-import { NotesEditForm } from "./NotesEditForm";
-import { BookmarkListEditForm } from "./BookmarkListEditForm";
-import { ClockEditForm } from "./ClockEditForm";
-import { HostStatusEditForm } from "./HostStatusEditForm";
-import { WeatherEditForm } from "./WeatherEditForm";
-import { IframeEditForm } from "./IframeEditForm";
-import { RssFeedEditForm } from "./RssFeedEditForm";
-import { HostGridEditForm } from "./HostGridEditForm";
-import { PingStatusEditForm } from "./PingStatusEditForm";
-import { RecentActivityEditForm } from "./RecentActivityEditForm";
-import { TermixUptimeEditForm } from "./TermixUptimeEditForm";
-import { SystemOverviewEditForm } from "./SystemOverviewEditForm";
-import { SshTerminalEditForm } from "./SshTerminalEditForm";
-import { QuickConnectEditForm } from "./QuickConnectEditForm";
-import { CalendarEditForm } from "./CalendarEditForm";
-import { CountdownEditForm } from "./CountdownEditForm";
-import { SearchBarEditForm } from "./SearchBarEditForm";
-import { TextBannerEditForm } from "./TextBannerEditForm";
-import { ImageWidgetEditForm } from "./ImageWidgetEditForm";
-import { MarkdownNotesEditForm } from "./MarkdownNotesEditForm";
-import { CustomApiEditForm } from "./CustomApiEditForm";
-import { ServiceGridEditForm } from "./ServiceGridEditForm";
-import { DashboardLinksEditForm } from "./DashboardLinksEditForm";
-import { SearchLinksEditForm } from "./SearchLinksEditForm";
-import { LinkTreeEditForm } from "./LinkTreeEditForm";
-import { validateClockTimezone } from "../clock-timezone";
-
-interface WidgetEditDialogProps {
-  widget: CanvasWidget | null;
-  onSave: (
-    id: number,
-    title: string | null,
-    config: Record<string, unknown>,
-  ) => void;
-  onClose: () => void;
-}
-
-export function WidgetEditDialog({
-  widget,
-  onSave,
-  onClose,
-}: WidgetEditDialogProps) {
-  const { t } = useTranslation();
-  const [title, setTitle] = useState(widget?.title ?? "");
-  const [config, setConfig] = useState<Record<string, unknown>>(
-    widget?.config ?? {},
-  );
-
-  if (!widget) return null;
-
-  // Configs that need checking before they can be stored. The clock keeps the
-  // normalized zone rather than the raw input, so "America/New York" is filed
-  // as "America/New_York"; the form flags an unusable one and Save stays off.
-  const clockTimezone =
-    widget.typeId === "clock" ? validateClockTimezone(config.timezone) : null;
-  const configInvalid = clockTimezone ? !clockTimezone.valid : false;
-
-  const handleSave = () => {
-    if (configInvalid) return;
-    onSave(
-      widget.id,
-      title || null,
-      clockTimezone ? { ...config, timezone: clockTimezone.timezone } : config,
-    );
-    onClose();
-  };
-
-  const renderForm = () => {
-    switch (widget.typeId) {
-      case "service_link":
-        return (
-          <ServiceLinkEditForm
-            config={config as unknown as ServiceLinkConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "folder":
-        return (
-          <FolderEditForm
-            config={config as unknown as FolderConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "notes":
-        return (
-          <NotesEditForm
-            config={config as unknown as NotesConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "bookmark_list":
-        return (
-          <BookmarkListEditForm
-            config={config as unknown as BookmarkListConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "clock":
-        return (
-          <ClockEditForm
-            config={config as unknown as ClockConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "host_status":
-        return (
-          <HostStatusEditForm
-            config={config as unknown as HostStatusConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "weather":
-        return (
-          <WeatherEditForm
-            config={config as unknown as WeatherConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "iframe_embed":
-        return (
-          <IframeEditForm
-            config={config as unknown as IframeConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "rss_feed":
-        return (
-          <RssFeedEditForm
-            config={config as unknown as RssFeedConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "host_grid":
-        return (
-          <HostGridEditForm
-            config={config as unknown as HostGridConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "ping_status":
-        return (
-          <PingStatusEditForm
-            config={config as unknown as PingStatusConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "recent_activity":
-        return (
-          <RecentActivityEditForm
-            config={config as unknown as RecentActivityConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "termix_uptime":
-        return (
-          <TermixUptimeEditForm
-            config={config as unknown as TermixUptimeConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "system_overview":
-        return (
-          <SystemOverviewEditForm
-            config={config as unknown as SystemOverviewConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "ssh_terminal":
-        return (
-          <SshTerminalEditForm
-            config={config as unknown as SshTerminalConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "quick_connect":
-        return (
-          <QuickConnectEditForm
-            config={config as unknown as QuickConnectConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "calendar":
-        return (
-          <CalendarEditForm
-            config={config as unknown as CalendarConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "countdown":
-        return (
-          <CountdownEditForm
-            config={config as unknown as CountdownConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "search_bar":
-        return (
-          <SearchBarEditForm
-            config={config as unknown as SearchBarConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "text_banner":
-        return (
-          <TextBannerEditForm
-            config={config as unknown as TextBannerConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "image_widget":
-        return (
-          <ImageWidgetEditForm
-            config={config as unknown as ImageWidgetConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "markdown_notes":
-        return (
-          <MarkdownNotesEditForm
-            config={config as unknown as MarkdownNotesConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "custom_api":
-        return (
-          <CustomApiEditForm
-            config={config as unknown as CustomApiConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "service_grid":
-        return (
-          <ServiceGridEditForm
-            config={config as unknown as ServiceGridConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "dashboard_links":
-        return (
-          <DashboardLinksEditForm
-            config={config as unknown as DashboardLinksConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "search_links":
-        return (
-          <SearchLinksEditForm
-            config={config as unknown as SearchLinksConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      case "link_tree":
-        return (
-          <LinkTreeEditForm
-            config={config as unknown as LinkTreeConfig}
-            onChange={(c) => setConfig(c as unknown as Record<string, unknown>)}
-          />
-        );
-      default: {
-        // Plugin widgets bring their own form.
-        const EditForm = getWidgetType(widget.typeId)?.editFormComponent;
-        return EditForm ? (
-          <EditForm config={config} onChange={setConfig} />
-        ) : null;
-      }
-    }
-  };
-
-  return (
-    <Dialog
-      open={!!widget}
-      onOpenChange={(open) => {
-        if (!open) onClose();
-      }}
-    >
-      <DialogContent
-        className="max-w-sm"
-        onMouseDown={(e) => e.stopPropagation()}
-      >
-        <DialogHeader>
-          <DialogTitle>{t("homepage.editWidget")}</DialogTitle>
-        </DialogHeader>
-        <div className="flex flex-col gap-4">
-          <div className="flex flex-col gap-1">
-            <label className="text-xs font-medium text-muted-foreground">
-              {t("homepage.title_label")}
-            </label>
-            <Input
-              value={title}
-              onChange={(e) => setTitle(e.target.value)}
-              placeholder={t("homepage.widgetTitlePlaceholder")}
-              className="h-8 text-sm"
-            />
-          </div>
-          {renderForm()}
-        </div>
-        <DialogFooter>
-          <Button variant="outline" size="sm" onClick={onClose}>
-            {t("homepage.cancel")}
-          </Button>
-          <Button size="sm" onClick={handleSave} disabled={configInvalid}>
-            {t("homepage.save")}
-          </Button>
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
-  );
-}
diff --git a/plugins/homepage/src/frontend/index.tsx b/plugins/homepage/src/frontend/index.tsx
deleted file mode 100644
index cc9fd5db5..000000000
--- a/plugins/homepage/src/frontend/index.tsx
+++ /dev/null
@@ -1,106 +0,0 @@
-import { LayoutGrid } from "lucide-react";
-import type { ComponentType } from "react";
-import type {
-  StandaloneViewProps,
-  TabProps,
-  TermixApp,
-} from "@termix/plugin-sdk/frontend";
-import { HomepageCanvas } from "./HomepageCanvas.js";
-import { HomepagePreviewCard } from "./HomepagePreviewCard.js";
-import { ServiceLinksCard } from "./ServiceLinksCard.js";
-import { DashboardHomepageView } from "./DashboardHomepageView.js";
-import { setHomepageApi } from "./api.js";
-import {
-  WIDGET_POINT,
-  drainQueuedWidgets,
-  toExtension,
-} from "./widgets/WidgetRegistry.js";
-
-// Side-effect imports so widgets register themselves.
-import "./widgets/ServiceLinkWidget";
-import "./widgets/ClockWidget";
-import "./widgets/NotesWidget";
-import "./widgets/BookmarkListWidget";
-import "./widgets/HostStatusWidget";
-import "./widgets/FolderWidget";
-import "./widgets/WeatherWidget";
-import "./widgets/IframeWidget";
-import "./widgets/RssFeedWidget";
-import "./widgets/HostGridWidget";
-import "./widgets/PingStatusWidget";
-import "./widgets/RecentActivityWidget";
-import "./widgets/TermixUptimeWidget";
-import "./widgets/SystemOverviewWidget";
-import "./widgets/SshTerminalWidget";
-import "./widgets/QuickConnectWidget";
-import "./widgets/CalendarWidget";
-import "./widgets/CountdownWidget";
-import "./widgets/SearchBarWidget";
-import "./widgets/TextBannerWidget";
-import "./widgets/ImageWidget";
-import "./widgets/MarkdownNotesWidget";
-import "./widgets/CustomApiWidget";
-import "./widgets/ServiceGridWidget";
-import "./widgets/DashboardLinksWidget";
-import "./widgets/SearchLinksWidget";
-import "./widgets/LinkTreeWidget";
-
-function HomepageTab(_props: TabProps) {
-  return <HomepageCanvas />;
-}
-
-function HomepageStandalone(_props: StandaloneViewProps) {
-  return <HomepageCanvas fitOnLoad={true} />;
-}
-
-export function activate(app: TermixApp): void {
-  setHomepageApi(app.api);
-  app.onDispose(() => setHomepageApi(null));
-
-  for (const widget of drainQueuedWidgets()) {
-    app.registerExtension(WIDGET_POINT, toExtension(widget));
-  }
-
-  app.registerTab("homepage", HomepageTab as ComponentType<TabProps>, {
-    icon: LayoutGrid,
-    titleKey: "nav.homepage",
-    singleton: true,
-    hostless: true,
-    standalone: HomepageStandalone,
-  });
-
-  app.registerPaletteEntry({
-    id: "homepage.open",
-    titleKey: "nav.homepage",
-    icon: LayoutGrid,
-    keywords: ["homepage", "widgets", "canvas"],
-    scope: "global",
-    run: (shell) => shell.openSingletonTab("homepage"),
-  });
-
-  app.registerDashboardCard({
-    id: "service_links",
-    titleKey: "dashboard.serviceLinks",
-    defaultHeight: 200,
-    defaultPanel: "side",
-    component: ServiceLinksCard,
-  });
-
-  app.registerDashboardCard({
-    id: "homepage_preview",
-    titleKey: "dashboard.homepagePreview",
-    defaultHeight: 320,
-    component: HomepagePreviewCard,
-  });
-
-  app.registerSlotContribution("dashboard.secondaryView", {
-    actionId: "homepage",
-    titleKey: "nav.homepage",
-    kind: "component",
-    component: DashboardHomepageView as ComponentType<Record<string, unknown>>,
-  });
-}
-
-export function deactivate(): void {
-  // Everything above was registered through app and is disposed by core.
-}
diff --git a/plugins/homepage/src/frontend/quick-connect-targets.ts b/plugins/homepage/src/frontend/quick-connect-targets.ts
deleted file mode 100644
index 85acab341..000000000
--- a/plugins/homepage/src/frontend/quick-connect-targets.ts
+++ /dev/null
@@ -1,39 +0,0 @@
-import type { ComponentType } from "react";
-import type {
-  HostActionContribution,
-  PluginHostRecord,
-} from "@termix/plugin-sdk/frontend";
-
-export interface QuickConnectTarget {
-  /** Tab type, and the value stored in a widget's config. */
-  type: string;
-  icon: ComponentType<{ size?: number | string; className?: string }>;
-  /** i18n key, or a literal label from a plugin action. */
-  labelKey: string;
-  enabled: (host: PluginHostRecord) => boolean;
-}
-
-/** What a quick connect widget can open: the tools plugins registered. */
-export function quickConnectTargets(
-  actions: HostActionContribution[],
-): QuickConnectTarget[] {
-  const seen = new Set<string>();
-  const fromPlugins: QuickConnectTarget[] = [];
-  for (const action of actions) {
-    if (!action.tabType || seen.has(action.tabType)) continue;
-    seen.add(action.tabType);
-    fromPlugins.push({
-      type: action.tabType,
-      icon: action.icon,
-      labelKey: action.titleKey,
-      enabled: (h) => {
-        try {
-          return action.when(h);
-        } catch {
-          return false;
-        }
-      },
-    });
-  }
-  return fromPlugins;
-}
diff --git a/plugins/homepage/src/frontend/toolbar/HomepageToolbar.tsx b/plugins/homepage/src/frontend/toolbar/HomepageToolbar.tsx
deleted file mode 100644
index 5b25e8a41..000000000
--- a/plugins/homepage/src/frontend/toolbar/HomepageToolbar.tsx
+++ /dev/null
@@ -1,127 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import {
-  Lock,
-  LockOpen,
-  Minus,
-  Plus,
-  RotateCcw,
-  PlusCircle,
-} from "lucide-react";
-import { MIN_ZOOM, MAX_ZOOM, ZOOM_STEP } from "../types.js";
-import { zoomAroundPoint } from "../canvas/canvasGeometry";
-
-interface HomepageToolbarProps {
-  zoom: number;
-  isLocked: boolean;
-  pan: { x: number; y: number };
-  containerSize: { w: number; h: number };
-  onZoomChange: (zoom: number, pan: { x: number; y: number }) => void;
-  onLockToggle: () => void;
-  onResetView: () => void;
-  onAddWidget: (anchorRect: {
-    top: number;
-    bottom: number;
-    left: number;
-    right: number;
-    width: number;
-    height: number;
-  }) => void;
-}
-
-function ToolButton({
-  onClick,
-  title,
-  disabled,
-  children,
-}: {
-  onClick: (e: React.MouseEvent<HTMLButtonElement>) => void;
-  title: string;
-  disabled?: boolean;
-  children: React.ReactNode;
-}) {
-  return (
-    <button
-      onClick={onClick}
-      title={title}
-      disabled={disabled}
-      className="p-1.5 text-muted-foreground hover:text-foreground hover:bg-muted/60 disabled:opacity-40 disabled:cursor-not-allowed transition-colors"
-    >
-      {children}
-    </button>
-  );
-}
-
-export function HomepageToolbar({
-  zoom,
-  isLocked,
-  pan,
-  containerSize,
-  onZoomChange,
-  onLockToggle,
-  onResetView,
-  onAddWidget,
-}: HomepageToolbarProps) {
-  const { t } = useTranslation();
-  const cx = containerSize.w / 2;
-  const cy = containerSize.h / 2;
-
-  const zoomIn = () => {
-    const next = Math.min(MAX_ZOOM, parseFloat((zoom + ZOOM_STEP).toFixed(1)));
-    onZoomChange(next, zoomAroundPoint(cx, cy, pan, zoom, next));
-  };
-  const zoomOut = () => {
-    const next = Math.max(MIN_ZOOM, parseFloat((zoom - ZOOM_STEP).toFixed(1)));
-    onZoomChange(next, zoomAroundPoint(cx, cy, pan, zoom, next));
-  };
-
-  return (
-    <div className="absolute bottom-4 right-4 z-30 flex items-center gap-0 bg-card border border-border shadow-lg">
-      <ToolButton
-        onClick={(e) => onAddWidget(e.currentTarget.getBoundingClientRect())}
-        title={t("homepage.addWidget")}
-        disabled={isLocked}
-      >
-        <PlusCircle size={15} className={isLocked ? "" : "text-accent-brand"} />
-      </ToolButton>
-
-      <div className="w-px h-5 bg-border" />
-
-      <ToolButton
-        onClick={zoomOut}
-        title={t("homepage.zoomOut")}
-        disabled={zoom <= MIN_ZOOM}
-      >
-        <Minus size={13} />
-      </ToolButton>
-
-      <span className="text-[11px] font-mono text-foreground tabular-nums w-10 text-center select-none">
-        {Math.round(zoom * 100)}%
-      </span>
-
-      <ToolButton
-        onClick={zoomIn}
-        title={t("homepage.zoomIn")}
-        disabled={zoom >= MAX_ZOOM}
-      >
-        <Plus size={13} />
-      </ToolButton>
-
-      <div className="w-px h-5 bg-border" />
-
-      <ToolButton onClick={onResetView} title={t("homepage.resetView")}>
-        <RotateCcw size={13} />
-      </ToolButton>
-
-      <ToolButton
-        onClick={onLockToggle}
-        title={isLocked ? t("homepage.unlockLayout") : t("homepage.lockLayout")}
-      >
-        {isLocked ? (
-          <Lock size={13} className="text-accent-brand" />
-        ) : (
-          <LockOpen size={13} />
-        )}
-      </ToolButton>
-    </div>
-  );
-}
diff --git a/plugins/homepage/src/frontend/types.ts b/plugins/homepage/src/frontend/types.ts
deleted file mode 100644
index 77cc6dd43..000000000
--- a/plugins/homepage/src/frontend/types.ts
+++ /dev/null
@@ -1,404 +0,0 @@
-export const GRID_SIZE = 30;
-export const MIN_ZOOM = 0.4;
-export const MAX_ZOOM = 2.0;
-export const ZOOM_STEP = 0.1;
-
-export type WidgetTypeId =
-  | "service_link"
-  | "folder"
-  | "clock"
-  | "notes"
-  | "host_status"
-  | "bookmark_list"
-  | "weather"
-  | "iframe_embed"
-  | "rss_feed"
-  | "metrics_chart"
-  | "host_grid"
-  | "ping_status"
-  | "recent_activity"
-  | "termix_uptime"
-  | "system_overview"
-  | "ssh_terminal"
-  | "quick_connect"
-  | "file_manager_widget"
-  | "tunnel_widget"
-  | "calendar"
-  | "countdown"
-  | "search_bar"
-  | "text_banner"
-  | "image_widget"
-  | "markdown_notes"
-  | "custom_api"
-  | "service_grid"
-  | "dashboard_links"
-  | "search_links"
-  | "link_tree"
-  | "ssh_quick_connect"
-  | (string & {});
-
-export interface HomepageItemRow {
-  id: number;
-  userId: string;
-  typeId: WidgetTypeId;
-  title: string | null;
-  config: string;
-  createdAt: string;
-  updatedAt: string;
-}
-
-export interface HomepageLayoutEntry {
-  itemId: number;
-  x: number;
-  y: number;
-  w: number;
-  h: number;
-  zOrder?: number;
-}
-
-export interface HomepageLayoutData {
-  entries: HomepageLayoutEntry[];
-  pan: { x: number; y: number };
-  zoom: number;
-}
-
-export interface HomepageLayoutRow {
-  id: number;
-  userId: string;
-  layout: HomepageLayoutData;
-  updatedAt: string;
-}
-
-export interface ServiceLinkRecord {
-  id: number;
-  userId: string;
-  label: string;
-  url: string;
-  order: number;
-  createdAt: string;
-}
-
-export interface CanvasWidget {
-  id: number;
-  typeId: WidgetTypeId;
-  title: string | null;
-  config: Record<string, unknown>;
-  x: number;
-  y: number;
-  w: number;
-  h: number;
-  zOrder: number;
-}
-
-// ---- Per-widget config shapes ----
-
-export interface ServiceLinkConfig {
-  url: string;
-  description?: string;
-  accentColor?: string;
-  imageUrl?: string;
-  showImage?: boolean;
-}
-
-export interface FolderConfig {
-  color?: string;
-  isExpanded: boolean;
-}
-
-export interface ClockConfig {
-  timezone?: string;
-  showSeconds: boolean;
-  format: "12h" | "24h";
-}
-
-export interface NotesConfig {
-  content: string;
-  backgroundColor?: string;
-}
-
-export type HostMetricKey =
-  "cpu" | "memory" | "disk" | "uptime" | "network" | "system" | "processes";
-
-export interface HostStatusConfig {
-  hostId: number;
-  /** @deprecated use shownMetrics instead */
-  showMetrics?: boolean;
-  /** @deprecated use shownMetrics instead */
-  showDisk?: boolean;
-  shownMetrics: HostMetricKey[];
-  showSparkline?: boolean;
-}
-
-export interface BookmarkLink {
-  label: string;
-  url: string;
-}
-
-export interface BookmarkListConfig {
-  links: BookmarkLink[];
-}
-
-export interface WeatherConfig {
-  location: string;
-  unit: "C" | "F";
-  showForecast: boolean;
-}
-
-export interface IframeConfig {
-  url: string;
-  scrolling: boolean;
-}
-
-export interface RssFeedConfig {
-  feedUrl: string;
-  maxItems: number;
-  showDescription: boolean;
-}
-
-// ---- New widget configs ----
-
-export type MetricsChartMetric =
-  "cpu" | "memory" | "disk" | "net_rx" | "net_tx";
-export type MetricsChartRange = "15m" | "1h" | "6h" | "24h";
-
-export interface MetricsChartConfig {
-  hostId: number;
-  metric: MetricsChartMetric;
-  range: MetricsChartRange;
-  showCurrentValue: boolean;
-}
-
-export interface HostGridConfig {
-  hostIds: number[];
-  showIp: boolean;
-  columns: 2 | 3 | 4;
-}
-
-export interface PingUrl {
-  label: string;
-  url: string;
-}
-
-export interface PingStatusConfig {
-  urls: PingUrl[];
-  refreshInterval: number;
-  showLatency: boolean;
-}
-
-/** Core activity types; plugin tabs record their own. */
-export type ActivityType = "file_manager" | "tunnel" | (string & {});
-
-export interface RecentActivityConfig {
-  maxItems: number;
-  filterTypes: ActivityType[];
-  showTimestamp: boolean;
-}
-
-export interface DockerActivityConfig {
-  maxItems: number;
-  showHostName: boolean;
-}
-
-export interface SshQuickConnectConfig {
-  hostIds: number[];
-  connectionType: QuickConnectType;
-  showStatus: boolean;
-  layout: "grid" | "list";
-}
-
-export interface TermixUptimeConfig {
-  showDetailed: boolean;
-}
-
-export interface SystemOverviewConfig {
-  showVersion: boolean;
-  showDbHealth: boolean;
-  showUptime: boolean;
-}
-
-export interface FileManagerWidgetConfig {
-  hostId: number;
-}
-
-export interface SshTerminalConfig {
-  hostId: number;
-  autoConnect: boolean;
-}
-
-/** Tab types a quick connect widget opens: core tools or plugin actions. */
-export type QuickConnectType = "files" | "tunnel" | (string & {});
-
-export interface QuickConnectConfig {
-  hostIds: number[];
-  connectionTypes: QuickConnectType[];
-  showStatus: boolean;
-  layout: "grid" | "list";
-}
-
-export interface CalendarConfig {
-  timezone?: string;
-  startOnMonday: boolean;
-}
-
-export interface CountdownConfig {
-  targetDate: string;
-  label: string;
-  showDays: boolean;
-  showHours: boolean;
-}
-
-export type SearchEngine = "google" | "duckduckgo" | "bing" | "custom";
-
-export interface SearchBarConfig {
-  engine: SearchEngine;
-  customUrl?: string;
-  placeholder?: string;
-  openInNewTab: boolean;
-}
-
-export type TextBannerFontSize = "sm" | "md" | "lg" | "xl";
-export type TextBannerAlign = "left" | "center" | "right";
-export type TextBannerWeight = "normal" | "semibold" | "bold";
-
-export interface TextBannerConfig {
-  text: string;
-  fontSize: TextBannerFontSize;
-  textAlign: TextBannerAlign;
-  fontWeight: TextBannerWeight;
-  backgroundColor?: string;
-}
-
-export interface ImageWidgetConfig {
-  imageUrl: string;
-  fit: "contain" | "cover" | "fill";
-  alt?: string;
-  linkUrl?: string;
-}
-
-export interface MarkdownNotesConfig {
-  content: string;
-  backgroundColor?: string;
-  renderMarkdown: boolean;
-}
-
-export type CustomApiDisplayMode = "value" | "json" | "table";
-
-export interface CustomApiConfig {
-  url: string;
-  displayField?: string;
-  label?: string;
-  unit?: string;
-  refreshInterval: number;
-  displayMode: CustomApiDisplayMode;
-  jsonPath?: string;
-}
-
-export interface ServiceGridItem {
-  label: string;
-  url: string;
-  imageUrl?: string;
-  accentColor?: string;
-}
-
-export interface ServiceGridConfig {
-  services: ServiceGridItem[];
-  columns: 2 | 3 | 4;
-  showLabels: boolean;
-  iconSize: "sm" | "md" | "lg";
-}
-
-export interface DashboardLinksConfig {
-  showIcons: boolean;
-  columns: 1 | 2 | 3;
-  maxItems?: number;
-}
-
-export interface SearchLinkShortcut {
-  label: string;
-  queryTemplate: string;
-  icon?: string;
-  accentColor?: string;
-}
-
-export interface SearchLinksConfig {
-  shortcuts: SearchLinkShortcut[];
-}
-
-export interface LinkTreeLink {
-  label: string;
-  url: string;
-  description?: string;
-}
-
-export interface LinkTreeSection {
-  heading: string;
-  links: LinkTreeLink[];
-}
-
-export interface LinkTreeConfig {
-  sections: LinkTreeSection[];
-  compact: boolean;
-}
-
-// ---- Widget registry types ----
-
-export interface WidgetComponentProps<C = Record<string, unknown>> {
-  widget: CanvasWidget;
-  config: C;
-  isReadOnly?: boolean;
-  onConfigUpdate?: (config: Record<string, unknown>) => void;
-}
-
-export interface WidgetEditFormProps<C = Record<string, unknown>> {
-  config: C;
-  onChange: (config: C) => void;
-}
-
-export interface WidgetTypeDefinition<C = Record<string, unknown>> {
-  id: WidgetTypeId;
-  name: string;
-  description: string;
-  category: "links" | "info" | "system" | "monitoring";
-  icon: React.ReactNode;
-  defaultConfig: C;
-  defaultSize: { w: number; h: number };
-  minSize: { w: number; h: number };
-  component: React.ComponentType<WidgetComponentProps<C>>;
-  editFormComponent?: React.ComponentType<WidgetEditFormProps<C>>;
-  /** Renders the translated name or description in the add menu. */
-  labelComponent?: React.ComponentType<{ part: "name" | "description" }>;
-}
-
-export interface DragState {
-  widgetId: number;
-  startMouseX: number;
-  startMouseY: number;
-  startWidgetX: number;
-  startWidgetY: number;
-}
-
-export interface ResizeState {
-  widgetId: number;
-  startMouseX: number;
-  startMouseY: number;
-  startW: number;
-  startH: number;
-}
-
-export interface ContextMenuAnchor {
-  top: number;
-  bottom: number;
-  left: number;
-  right: number;
-  width: number;
-  height: number;
-}
-
-export interface ContextMenuState {
-  visible: boolean;
-  screenX: number;
-  screenY: number;
-  canvasX: number;
-  canvasY: number;
-  anchorRect?: ContextMenuAnchor;
-}
diff --git a/plugins/homepage/src/frontend/url.ts b/plugins/homepage/src/frontend/url.ts
deleted file mode 100644
index cb493ae2a..000000000
--- a/plugins/homepage/src/frontend/url.ts
+++ /dev/null
@@ -1,16 +0,0 @@
-export function normalizeServiceLinkUrl(value: string): string {
-  const trimmed = value.trim();
-  if (!trimmed) return "";
-  return /^[a-z][a-z0-9+.-]*:\/\//i.test(trimmed)
-    ? trimmed
-    : `http://${trimmed}`;
-}
-
-export function isValidServiceLinkUrl(value: string): boolean {
-  try {
-    const parsed = new URL(normalizeServiceLinkUrl(value));
-    return parsed.protocol === "http:" || parsed.protocol === "https:";
-  } catch {
-    return false;
-  }
-}
diff --git a/plugins/homepage/src/frontend/use-page-visible-interval.ts b/plugins/homepage/src/frontend/use-page-visible-interval.ts
deleted file mode 100644
index c01a64657..000000000
--- a/plugins/homepage/src/frontend/use-page-visible-interval.ts
+++ /dev/null
@@ -1,67 +0,0 @@
-import { useEffect, useRef } from "react";
-
-function isDocumentVisible(): boolean {
-  if (typeof document === "undefined") return true;
-  return document.visibilityState !== "hidden";
-}
-
-type Options = {
-  /** Run callback once when the effect mounts (if visible). Default true. */
-  runOnMount?: boolean;
-};
-
-/**
- * Runs `callback` on `intervalMs` while the page is visible.
- * Pauses when the tab is backgrounded; fires once on resume.
- */
-export function usePageVisibleInterval(
-  callback: () => void,
-  intervalMs: number,
-  enabled = true,
-  options: Options = {},
-): void {
-  const { runOnMount = true } = options;
-  const callbackRef = useRef(callback);
-  callbackRef.current = callback;
-
-  useEffect(() => {
-    if (!enabled || intervalMs <= 0) return;
-
-    let intervalId: ReturnType<typeof setInterval> | null = null;
-
-    const tick = () => {
-      callbackRef.current();
-    };
-
-    const start = () => {
-      if (intervalId !== null) return;
-      intervalId = setInterval(tick, intervalMs);
-    };
-
-    const stop = () => {
-      if (intervalId === null) return;
-      clearInterval(intervalId);
-      intervalId = null;
-    };
-
-    const onVisibility = () => {
-      if (isDocumentVisible()) {
-        tick();
-        start();
-      } else {
-        stop();
-      }
-    };
-
-    if (isDocumentVisible()) {
-      if (runOnMount) tick();
-      start();
-    }
-
-    document.addEventListener("visibilitychange", onVisibility);
-    return () => {
-      stop();
-      document.removeEventListener("visibilitychange", onVisibility);
-    };
-  }, [intervalMs, enabled, runOnMount]);
-}
diff --git a/plugins/homepage/src/frontend/widgets/BookmarkListWidget.tsx b/plugins/homepage/src/frontend/widgets/BookmarkListWidget.tsx
deleted file mode 100644
index 2d8212876..000000000
--- a/plugins/homepage/src/frontend/widgets/BookmarkListWidget.tsx
+++ /dev/null
@@ -1,74 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Bookmark, ExternalLink } from "lucide-react";
-import { registerWidget } from "./WidgetRegistry";
-import type { BookmarkListConfig, WidgetComponentProps } from "../types.js";
-import { GRID_SIZE } from "../types.js";
-
-function BookmarkListWidget({
-  config,
-  widget,
-  isReadOnly,
-}: WidgetComponentProps<BookmarkListConfig>) {
-  const { t } = useTranslation();
-  const { links } = config;
-
-  return (
-    <div className="w-full h-full flex flex-col overflow-hidden">
-      {widget.title && (
-        <div className="flex items-center gap-1.5 px-3 py-2 border-b border-border shrink-0">
-          <Bookmark size={11} className="text-accent-brand shrink-0" />
-          <span className="text-[10px] font-semibold text-muted-foreground uppercase tracking-wider truncate">
-            {widget.title}
-          </span>
-        </div>
-      )}
-      <div className="flex-1 overflow-auto p-3 gap-1 flex flex-col">
-        {links.length === 0 && (
-          <span className="text-xs text-muted-foreground italic">
-            {t("homepage.noBookmarks")}
-          </span>
-        )}
-        {links.map((link, i) =>
-          isReadOnly ? (
-            <div
-              key={i}
-              className="flex items-center gap-2 text-xs text-foreground py-1"
-            >
-              <Bookmark size={10} className="text-muted-foreground shrink-0" />
-              <span className="truncate">{link.label || link.url}</span>
-            </div>
-          ) : (
-            <a
-              key={i}
-              href={link.url}
-              target="_blank"
-              rel="noopener noreferrer"
-              className="flex items-center gap-2 text-xs text-foreground hover:text-primary py-1 no-underline group"
-            >
-              <Bookmark size={10} className="text-muted-foreground shrink-0" />
-              <span className="truncate flex-1">{link.label || link.url}</span>
-              <ExternalLink
-                size={8}
-                className="text-muted-foreground/0 group-hover:text-muted-foreground/60 shrink-0"
-              />
-            </a>
-          ),
-        )}
-      </div>
-    </div>
-  );
-}
-
-registerWidget<BookmarkListConfig>({
-  id: "bookmark_list",
-  name: "Bookmarks",
-  description: "A list of quick links",
-  category: "links",
-  icon: <Bookmark size={14} />,
-  defaultConfig: { links: [] },
-  defaultSize: { w: GRID_SIZE * 9, h: GRID_SIZE * 10 },
-  minSize: { w: GRID_SIZE * 2, h: GRID_SIZE * 2 },
-  component: BookmarkListWidget,
-});
-
-export { BookmarkListWidget };
diff --git a/plugins/homepage/src/frontend/widgets/CalendarWidget.tsx b/plugins/homepage/src/frontend/widgets/CalendarWidget.tsx
deleted file mode 100644
index 19b4c4d76..000000000
--- a/plugins/homepage/src/frontend/widgets/CalendarWidget.tsx
+++ /dev/null
@@ -1,161 +0,0 @@
-import { useState, useEffect } from "react";
-import { CalendarDays, ChevronLeft, ChevronRight } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { registerWidget } from "./WidgetRegistry";
-import type { CalendarConfig, WidgetComponentProps } from "../types.js";
-import { GRID_SIZE } from "../types.js";
-
-import { WidgetTitle, runVisibleInterval } from "@termix/plugin-sdk/ui";
-
-function getMonthData(year: number, month: number, startOnMonday: boolean) {
-  const firstDay = new Date(year, month, 1).getDay();
-  const daysInMonth = new Date(year, month + 1, 0).getDate();
-  const offset = startOnMonday ? (firstDay === 0 ? 6 : firstDay - 1) : firstDay;
-  return { daysInMonth, offset };
-}
-
-function CalendarWidget({
-  widget,
-  config,
-}: WidgetComponentProps<CalendarConfig>) {
-  const { t } = useTranslation();
-  const { startOnMonday } = config;
-  const [now, setNow] = useState(new Date());
-  const [viewYear, setViewYear] = useState(now.getFullYear());
-  const [viewMonth, setViewMonth] = useState(now.getMonth());
-
-  useEffect(() => {
-    return runVisibleInterval(() => setNow(new Date()), 60_000);
-  }, []);
-
-  const { daysInMonth, offset } = getMonthData(
-    viewYear,
-    viewMonth,
-    startOnMonday,
-  );
-  const today = now;
-  const isCurrentMonth =
-    viewYear === today.getFullYear() && viewMonth === today.getMonth();
-
-  const dayNames = startOnMonday
-    ? [
-        t("homepage.calMon"),
-        t("homepage.calTue"),
-        t("homepage.calWed"),
-        t("homepage.calThu"),
-        t("homepage.calFri"),
-        t("homepage.calSat"),
-        t("homepage.calSun"),
-      ]
-    : [
-        t("homepage.calSun"),
-        t("homepage.calMon"),
-        t("homepage.calTue"),
-        t("homepage.calWed"),
-        t("homepage.calThu"),
-        t("homepage.calFri"),
-        t("homepage.calSat"),
-      ];
-
-  const monthLabel = new Intl.DateTimeFormat("en-US", {
-    month: "long",
-    year: "numeric",
-  }).format(new Date(viewYear, viewMonth, 1));
-
-  const cells: (number | null)[] = [
-    ...Array(offset).fill(null),
-    ...Array.from({ length: daysInMonth }, (_, i) => i + 1),
-  ];
-
-  const prevMonth = () => {
-    if (viewMonth === 0) {
-      setViewMonth(11);
-      setViewYear((y) => y - 1);
-    } else setViewMonth((m) => m - 1);
-  };
-  const nextMonth = () => {
-    if (viewMonth === 11) {
-      setViewMonth(0);
-      setViewYear((y) => y + 1);
-    } else setViewMonth((m) => m + 1);
-  };
-
-  const accent =
-    getComputedStyle(document.documentElement)
-      .getPropertyValue("--accent-brand")
-      .trim() || "#f59145";
-
-  return (
-    <div className="flex flex-col w-full h-full overflow-hidden select-none">
-      <WidgetTitle title={widget.title} icon={<CalendarDays size={11} />} />
-      <div className="flex flex-col flex-1 p-2 gap-1 overflow-hidden">
-        <div className="flex items-center justify-between shrink-0">
-          <button
-            onClick={prevMonth}
-            className="p-0.5 text-muted-foreground hover:text-foreground transition-colors"
-          >
-            <ChevronLeft size={12} />
-          </button>
-          <span className="text-[10px] font-semibold text-foreground">
-            {monthLabel}
-          </span>
-          <button
-            onClick={nextMonth}
-            className="p-0.5 text-muted-foreground hover:text-foreground transition-colors"
-          >
-            <ChevronRight size={12} />
-          </button>
-        </div>
-
-        <div className="grid grid-cols-7 gap-0 shrink-0">
-          {dayNames.map((d) => (
-            <div
-              key={d}
-              className="text-center text-[8px] font-semibold text-muted-foreground/70 uppercase py-0.5"
-            >
-              {d}
-            </div>
-          ))}
-        </div>
-
-        <div className="grid grid-cols-7 gap-0 flex-1 content-start">
-          {cells.map((day, i) => {
-            if (day === null) return <div key={`e-${i}`} />;
-            const isToday = isCurrentMonth && day === today.getDate();
-            return (
-              <div
-                key={`d-${day}`}
-                className="flex items-center justify-center aspect-square"
-              >
-                <span
-                  className="text-[9px] font-medium w-5 h-5 flex items-center justify-center rounded-full"
-                  style={
-                    isToday
-                      ? { background: accent, color: "#fff" }
-                      : { color: "var(--text-primary, currentColor)" }
-                  }
-                >
-                  {day}
-                </span>
-              </div>
-            );
-          })}
-        </div>
-      </div>
-    </div>
-  );
-}
-
-registerWidget<CalendarConfig>({
-  id: "calendar",
-  name: "Calendar",
-  description: "A month calendar with today highlighted",
-  category: "info",
-  icon: <CalendarDays size={14} />,
-  defaultConfig: { startOnMonday: true },
-  defaultSize: { w: GRID_SIZE * 10, h: GRID_SIZE * 9 },
-  minSize: { w: GRID_SIZE * 7, h: GRID_SIZE * 7 },
-  component: CalendarWidget,
-});
-
-export { CalendarWidget };
diff --git a/plugins/homepage/src/frontend/widgets/ClockWidget.tsx b/plugins/homepage/src/frontend/widgets/ClockWidget.tsx
deleted file mode 100644
index e0d1fd8f2..000000000
--- a/plugins/homepage/src/frontend/widgets/ClockWidget.tsx
+++ /dev/null
@@ -1,78 +0,0 @@
-import { useState } from "react";
-import { Clock } from "lucide-react";
-import { registerWidget } from "./WidgetRegistry";
-import {
-  GRID_SIZE,
-  type ClockConfig,
-  type WidgetComponentProps,
-} from "../types.js";
-
-import { usePageVisibleInterval } from "../use-page-visible-interval.js";
-import { isValidTimezone } from "../clock-timezone";
-import { WidgetTitle } from "@termix/plugin-sdk/ui";
-
-function ClockWidget({ widget, config }: WidgetComponentProps<ClockConfig>) {
-  const { showSeconds, format } = config;
-  // Configs saved before the edit dialog validated timezones can still hold an
-  // unusable one (e.g. "America/New York"), which makes toLocaleTimeString throw.
-  const timezone =
-    config.timezone && isValidTimezone(config.timezone)
-      ? config.timezone
-      : undefined;
-  const [now, setNow] = useState(new Date());
-
-  // Minute-level is enough without seconds; pause when the tab is backgrounded.
-  usePageVisibleInterval(
-    () => setNow(new Date()),
-    showSeconds ? 1_000 : 30_000,
-  );
-
-  const opts: Intl.DateTimeFormatOptions = {
-    hour: "2-digit",
-    minute: "2-digit",
-    ...(showSeconds ? { second: "2-digit" } : {}),
-    hour12: format === "12h",
-    ...(timezone ? { timeZone: timezone } : {}),
-  };
-
-  const dateOpts: Intl.DateTimeFormatOptions = {
-    weekday: "long",
-    month: "short",
-    day: "numeric",
-    ...(timezone ? { timeZone: timezone } : {}),
-  };
-
-  const timeStr = now.toLocaleTimeString(undefined, opts);
-  const dateStr = now.toLocaleDateString(undefined, dateOpts);
-
-  return (
-    <div className="flex flex-col w-full h-full overflow-hidden select-none">
-      <WidgetTitle title={widget.title} icon={<Clock size={11} />} />
-      <div className="flex flex-col items-center justify-center flex-1 gap-1 p-3 overflow-auto">
-        <span className="text-2xl font-bold tabular-nums text-accent-brand">
-          {timeStr}
-        </span>
-        <span className="text-xs text-muted-foreground">{dateStr}</span>
-        {timezone && (
-          <span className="text-[10px] text-muted-foreground/60">
-            {timezone}
-          </span>
-        )}
-      </div>
-    </div>
-  );
-}
-
-registerWidget<ClockConfig>({
-  id: "clock",
-  name: "Clock",
-  description: "A live clock with configurable timezone",
-  category: "info",
-  icon: <Clock size={14} />,
-  defaultConfig: { showSeconds: true, format: "24h" },
-  defaultSize: { w: GRID_SIZE * 8, h: GRID_SIZE * 5 },
-  minSize: { w: GRID_SIZE * 2, h: GRID_SIZE * 2 },
-  component: ClockWidget,
-});
-
-export { ClockWidget };
diff --git a/plugins/homepage/src/frontend/widgets/CountdownWidget.tsx b/plugins/homepage/src/frontend/widgets/CountdownWidget.tsx
deleted file mode 100644
index 5865fd8e2..000000000
--- a/plugins/homepage/src/frontend/widgets/CountdownWidget.tsx
+++ /dev/null
@@ -1,169 +0,0 @@
-import { useEffect, useState } from "react";
-import { Timer } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { registerWidget } from "./WidgetRegistry";
-import type { CountdownConfig, WidgetComponentProps } from "../types.js";
-import { GRID_SIZE } from "../types.js";
-import { WidgetTitle } from "@termix/plugin-sdk/ui";
-
-function getAccentColor(): string {
-  return (
-    getComputedStyle(document.documentElement)
-      .getPropertyValue("--accent-brand")
-      .trim() || "#f59145"
-  );
-}
-
-function decompose(ms: number): {
-  days: number;
-  hours: number;
-  minutes: number;
-  seconds: number;
-} {
-  const total = Math.max(0, Math.floor(ms / 1000));
-  const days = Math.floor(total / 86400);
-  const hours = Math.floor((total % 86400) / 3600);
-  const minutes = Math.floor((total % 3600) / 60);
-  const seconds = total % 60;
-  return { days, hours, minutes, seconds };
-}
-
-function UnitBlock({ value, label }: { value: number; label: string }) {
-  const accent = getAccentColor();
-  return (
-    <div className="flex flex-col items-center gap-0.5">
-      <span
-        className="text-2xl font-bold tabular-nums leading-none"
-        style={{ color: accent }}
-      >
-        {String(value).padStart(2, "0")}
-      </span>
-      <span className="text-[9px] text-muted-foreground uppercase tracking-wider">
-        {label}
-      </span>
-    </div>
-  );
-}
-
-function CountdownWidget({
-  widget,
-  config,
-}: WidgetComponentProps<CountdownConfig>) {
-  const { t } = useTranslation();
-  const { targetDate, label, showDays, showHours } = config;
-  const [remaining, setRemaining] = useState(0);
-  const [past, setPast] = useState(false);
-
-  useEffect(() => {
-    const update = () => {
-      const diff = new Date(targetDate).getTime() - Date.now();
-      if (diff <= 0) {
-        setRemaining(0);
-        setPast(true);
-      } else {
-        setRemaining(diff);
-        setPast(false);
-      }
-    };
-    update();
-
-    let intervalId: ReturnType<typeof setInterval> | null = null;
-    const start = () => {
-      if (intervalId !== null) return;
-      intervalId = setInterval(update, 1000);
-    };
-    const stop = () => {
-      if (intervalId === null) return;
-      clearInterval(intervalId);
-      intervalId = null;
-    };
-    const onVisibility = () => {
-      if (document.visibilityState === "hidden") {
-        stop();
-        return;
-      }
-      update();
-      start();
-    };
-
-    if (document.visibilityState !== "hidden") start();
-    document.addEventListener("visibilitychange", onVisibility);
-    return () => {
-      stop();
-      document.removeEventListener("visibilitychange", onVisibility);
-    };
-  }, [targetDate]);
-
-  const titleBar = (
-    <WidgetTitle title={widget.title} icon={<Timer size={11} />} />
-  );
-
-  if (!targetDate) {
-    return (
-      <div className="flex flex-col w-full h-full overflow-hidden">
-        {titleBar}
-        <div className="flex items-center justify-center flex-1 text-xs text-muted-foreground">
-          {t("homepage.countdownNoDate")}
-        </div>
-      </div>
-    );
-  }
-
-  if (past) {
-    return (
-      <div className="flex flex-col w-full h-full overflow-hidden">
-        {titleBar}
-        <div className="flex flex-col items-center justify-center flex-1 gap-1">
-          <Timer size={16} className="text-muted-foreground" />
-          <span className="text-xs text-muted-foreground">
-            {t("homepage.countdownPast")}
-          </span>
-          {label && (
-            <span className="text-[10px] text-muted-foreground/60">
-              {label}
-            </span>
-          )}
-        </div>
-      </div>
-    );
-  }
-
-  const { days, hours, minutes, seconds } = decompose(remaining);
-
-  return (
-    <div className="flex flex-col w-full h-full overflow-hidden">
-      {titleBar}
-      <div className="flex flex-col items-center justify-center flex-1 gap-2 p-2">
-        {label && (
-          <span className="text-[10px] font-semibold text-muted-foreground uppercase tracking-wider">
-            {label}
-          </span>
-        )}
-        <div className="flex items-center gap-3 flex-wrap justify-center">
-          {showDays && (
-            <UnitBlock value={days} label={t("homepage.countdownDays")} />
-          )}
-          {showHours && (
-            <UnitBlock value={hours} label={t("homepage.countdownHours")} />
-          )}
-          <UnitBlock value={minutes} label={t("homepage.countdownMinutes")} />
-          <UnitBlock value={seconds} label={t("homepage.countdownSeconds")} />
-        </div>
-      </div>
-    </div>
-  );
-}
-
-registerWidget<CountdownConfig>({
-  id: "countdown",
-  name: "Countdown",
-  description: "Counts down to a target date and time",
-  category: "info",
-  icon: <Timer size={14} />,
-  defaultConfig: { targetDate: "", label: "", showDays: true, showHours: true },
-  defaultSize: { w: GRID_SIZE * 8, h: GRID_SIZE * 5 },
-  minSize: { w: GRID_SIZE * 4, h: GRID_SIZE * 3 },
-  component: CountdownWidget,
-});
-
-export { CountdownWidget };
diff --git a/plugins/homepage/src/frontend/widgets/CustomApiWidget.tsx b/plugins/homepage/src/frontend/widgets/CustomApiWidget.tsx
deleted file mode 100644
index 5060d55d8..000000000
--- a/plugins/homepage/src/frontend/widgets/CustomApiWidget.tsx
+++ /dev/null
@@ -1,200 +0,0 @@
-import { useEffect, useState } from "react";
-import { Braces } from "lucide-react";
-import { usePluginApi, useTranslation } from "@termix/plugin-sdk/frontend";
-import { registerWidget } from "./WidgetRegistry";
-import type { CustomApiConfig, WidgetComponentProps } from "../types.js";
-import { GRID_SIZE } from "../types.js";
-import { WidgetTitle, runVisibleInterval } from "@termix/plugin-sdk/ui";
-
-function resolvePath(obj: unknown, path: string): unknown {
-  return path.split(".").reduce((acc: unknown, key) => {
-    if (acc && typeof acc === "object")
-      return (acc as Record<string, unknown>)[key];
-    return undefined;
-  }, obj);
-}
-
-function resolveArray(
-  obj: unknown,
-  path: string | undefined,
-): unknown[] | null {
-  if (!path) {
-    if (Array.isArray(obj)) return obj as unknown[];
-    return null;
-  }
-  const val = resolvePath(obj, path);
-  return Array.isArray(val) ? (val as unknown[]) : null;
-}
-
-function CustomApiWidget({
-  widget,
-  config,
-}: WidgetComponentProps<CustomApiConfig>) {
-  const { t } = useTranslation();
-  const api = usePluginApi();
-  const {
-    url,
-    displayField,
-    label,
-    unit,
-    refreshInterval,
-    displayMode,
-    jsonPath,
-  } = config;
-  const [data, setData] = useState<unknown>(null);
-  const [error, setError] = useState(false);
-  const [loading, setLoading] = useState(true);
-
-  const interval = Math.max(10, refreshInterval || 60);
-
-  const fetchData = async () => {
-    if (!url) return;
-    try {
-      const res = await api.get("/proxy", { params: { url, ttl: interval } });
-      setData(res.data);
-      setError(false);
-    } catch {
-      setError(true);
-    } finally {
-      setLoading(false);
-    }
-  };
-
-  useEffect(() => {
-    fetchData();
-    return runVisibleInterval(() => {
-      void fetchData();
-    }, interval * 1000);
-  }, [url, interval]);
-
-  const accent =
-    getComputedStyle(document.documentElement)
-      .getPropertyValue("--accent-brand")
-      .trim() || "#f59145";
-
-  if (!url) {
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-muted-foreground">
-        {t("homepage.customApiNoUrl")}
-      </div>
-    );
-  }
-  if (loading) {
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-muted-foreground">
-        {t("common.loading")}
-      </div>
-    );
-  }
-  if (error) {
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-red-400">
-        {t("homepage.customApiError")}
-      </div>
-    );
-  }
-
-  const titleBar = (
-    <WidgetTitle title={widget.title} icon={<Braces size={11} />} />
-  );
-
-  if (displayMode === "value") {
-    const val = displayField ? resolvePath(data, displayField) : data;
-    const display =
-      typeof val === "object" ? JSON.stringify(val) : String(val ?? "—");
-    return (
-      <div className="flex flex-col w-full h-full overflow-hidden">
-        {titleBar}
-        <div className="flex flex-col items-center justify-center flex-1 gap-1 p-2">
-          {label && (
-            <span className="text-[10px] text-muted-foreground uppercase tracking-wider">
-              {label}
-            </span>
-          )}
-          <span
-            className="text-2xl font-bold tabular-nums"
-            style={{ color: accent }}
-          >
-            {display}
-          </span>
-          {unit && (
-            <span className="text-[10px] text-muted-foreground">{unit}</span>
-          )}
-        </div>
-      </div>
-    );
-  }
-
-  if (displayMode === "table") {
-    const arr = resolveArray(data, jsonPath);
-    if (!arr) {
-      return (
-        <div className="flex items-center justify-center w-full h-full text-xs text-muted-foreground">
-          {t("homepage.customApiNotArray")}
-        </div>
-      );
-    }
-    return (
-      <div className="flex flex-col w-full h-full overflow-hidden">
-        {titleBar}
-        <div className="flex-1 overflow-auto p-2">
-          <table className="w-full text-[9px]">
-            <tbody>
-              {arr.slice(0, 50).map((row, i) => {
-                if (typeof row !== "object" || row === null) {
-                  return (
-                    <tr key={i}>
-                      <td className="py-0.5 pr-2 text-foreground">
-                        {String(row)}
-                      </td>
-                    </tr>
-                  );
-                }
-                return (
-                  <tr key={i} className="border-b border-border/30">
-                    {Object.entries(row as Record<string, unknown>)
-                      .slice(0, 4)
-                      .map(([k, v]) => (
-                        <td key={k} className="py-0.5 pr-2">
-                          <span className="text-muted-foreground">{k}: </span>
-                          <span className="text-foreground">
-                            {String(v ?? "")}
-                          </span>
-                        </td>
-                      ))}
-                  </tr>
-                );
-              })}
-            </tbody>
-          </table>
-        </div>
-      </div>
-    );
-  }
-
-  // json mode
-  return (
-    <div className="flex flex-col w-full h-full overflow-hidden">
-      {titleBar}
-      <div className="flex-1 overflow-auto p-2">
-        <pre className="text-[9px] text-foreground whitespace-pre-wrap break-all leading-relaxed font-mono">
-          {JSON.stringify(data, null, 2)}
-        </pre>
-      </div>
-    </div>
-  );
-}
-
-registerWidget<CustomApiConfig>({
-  id: "custom_api",
-  name: "Custom API",
-  description: "Fetch and display data from any JSON API",
-  category: "info",
-  icon: <Braces size={14} />,
-  defaultConfig: { url: "", refreshInterval: 60, displayMode: "value" },
-  defaultSize: { w: GRID_SIZE * 10, h: GRID_SIZE * 7 },
-  minSize: { w: GRID_SIZE * 4, h: GRID_SIZE * 3 },
-  component: CustomApiWidget,
-});
-
-export { CustomApiWidget };
diff --git a/plugins/homepage/src/frontend/widgets/DashboardLinksWidget.tsx b/plugins/homepage/src/frontend/widgets/DashboardLinksWidget.tsx
deleted file mode 100644
index d7bb59fb4..000000000
--- a/plugins/homepage/src/frontend/widgets/DashboardLinksWidget.tsx
+++ /dev/null
@@ -1,151 +0,0 @@
-import { useEffect, useState, useRef } from "react";
-import { Link, ExternalLink } from "lucide-react";
-import { usePluginApi, useTranslation } from "@termix/plugin-sdk/frontend";
-import { registerWidget } from "./WidgetRegistry";
-import type {
-  DashboardLinksConfig,
-  ServiceLinkRecord,
-  WidgetComponentProps,
-} from "../types.js";
-import { GRID_SIZE } from "../types.js";
-import { WidgetTitle } from "@termix/plugin-sdk/ui";
-
-function getFaviconUrl(url: string): string {
-  try {
-    const domain = new URL(url).hostname;
-    return `https://www.google.com/s2/favicons?sz=32&domain_url=${encodeURIComponent(domain)}`;
-  } catch {
-    return "";
-  }
-}
-
-function LinkTile({
-  link,
-  showIcons,
-  isReadOnly,
-}: {
-  link: ServiceLinkRecord;
-  showIcons: boolean;
-  isReadOnly?: boolean;
-}) {
-  const [imgFailed, setImgFailed] = useState(false);
-  const mouseDownRef = useRef<{ x: number; y: number } | null>(null);
-  const faviconUrl = showIcons ? getFaviconUrl(link.url) : null;
-
-  const content = (
-    <div className="group flex items-center gap-2 px-2 py-1.5 hover:bg-muted/40 transition-colors overflow-hidden border-b border-border/30">
-      {showIcons &&
-        (faviconUrl && !imgFailed ? (
-          <img
-            src={faviconUrl}
-            alt=""
-            className="w-4 h-4 shrink-0 object-contain"
-            onError={() => setImgFailed(true)}
-          />
-        ) : (
-          <ExternalLink size={12} className="shrink-0 text-muted-foreground" />
-        ))}
-      <span className="text-[10px] font-medium text-foreground truncate flex-1">
-        {link.label}
-      </span>
-    </div>
-  );
-
-  if (isReadOnly || !link.url) return content;
-
-  return (
-    <a
-      href={link.url}
-      target="_blank"
-      rel="noopener noreferrer"
-      className="block no-underline"
-      onMouseDown={(e) => {
-        mouseDownRef.current = { x: e.clientX, y: e.clientY };
-      }}
-      onClick={(e) => {
-        const s = mouseDownRef.current;
-        if (
-          s &&
-          (Math.abs(e.clientX - s.x) > 4 || Math.abs(e.clientY - s.y) > 4)
-        )
-          e.preventDefault();
-        mouseDownRef.current = null;
-      }}
-    >
-      {content}
-    </a>
-  );
-}
-
-function DashboardLinksWidget({
-  widget,
-  config,
-  isReadOnly,
-}: WidgetComponentProps<DashboardLinksConfig>) {
-  const { t } = useTranslation();
-  const api = usePluginApi();
-  const { showIcons, columns, maxItems } = config;
-  const [links, setLinks] = useState<ServiceLinkRecord[]>([]);
-  const [loading, setLoading] = useState(true);
-
-  useEffect(() => {
-    api
-      .get("/service-links")
-      .then((res) => {
-        const data = res.data as ServiceLinkRecord[];
-        setLinks(maxItems ? data.slice(0, maxItems) : data);
-      })
-      .catch(() => {})
-      .finally(() => setLoading(false));
-  }, [maxItems]);
-
-  if (loading)
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-muted-foreground">
-        {t("common.loading")}
-      </div>
-    );
-  if (links.length === 0)
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-muted-foreground">
-        {t("homepage.noDashboardLinks")}
-      </div>
-    );
-
-  const colClass =
-    columns === 1
-      ? "grid-cols-1"
-      : columns === 2
-        ? "grid-cols-2"
-        : "grid-cols-3";
-
-  return (
-    <div className="flex flex-col w-full h-full overflow-hidden">
-      <WidgetTitle title={widget.title} icon={<Link size={11} />} />
-      <div className={`grid ${colClass} flex-1 overflow-auto content-start`}>
-        {links.map((link) => (
-          <LinkTile
-            key={link.id}
-            link={link}
-            showIcons={showIcons}
-            isReadOnly={isReadOnly}
-          />
-        ))}
-      </div>
-    </div>
-  );
-}
-
-registerWidget<DashboardLinksConfig>({
-  id: "dashboard_links",
-  name: "Dashboard Links",
-  description: "Shows your saved dashboard service links",
-  category: "links",
-  icon: <Link size={14} />,
-  defaultConfig: { showIcons: true, columns: 1 },
-  defaultSize: { w: GRID_SIZE * 10, h: GRID_SIZE * 8 },
-  minSize: { w: GRID_SIZE * 4, h: GRID_SIZE * 3 },
-  component: DashboardLinksWidget,
-});
-
-export { DashboardLinksWidget };
diff --git a/plugins/homepage/src/frontend/widgets/FolderWidget.tsx b/plugins/homepage/src/frontend/widgets/FolderWidget.tsx
deleted file mode 100644
index 4cbf168ca..000000000
--- a/plugins/homepage/src/frontend/widgets/FolderWidget.tsx
+++ /dev/null
@@ -1,46 +0,0 @@
-import { Folder } from "lucide-react";
-import { registerWidget } from "./WidgetRegistry";
-import type { FolderConfig, WidgetComponentProps } from "../types.js";
-import { GRID_SIZE } from "../types.js";
-
-function FolderWidget({ widget, config }: WidgetComponentProps<FolderConfig>) {
-  const accentColor =
-    config.color ||
-    getComputedStyle(document.documentElement)
-      .getPropertyValue("--accent-brand")
-      .trim() ||
-    "#f59145";
-
-  return (
-    <div
-      className="w-full h-full flex flex-col"
-      style={{
-        background: `${accentColor}10`,
-        borderTop: `2px solid ${accentColor}60`,
-      }}
-    >
-      <div className="flex items-center gap-1.5 px-2 py-1.5 select-none">
-        <Folder size={11} style={{ color: accentColor }} className="shrink-0" />
-        <span className="text-xs font-semibold text-foreground truncate">
-          {widget.title || "Folder"}
-        </span>
-      </div>
-    </div>
-  );
-}
-
-registerWidget<FolderConfig>({
-  id: "folder",
-  name: "Folder",
-  description: "A background card for grouping widgets visually",
-  category: "links",
-  icon: <Folder size={14} />,
-  defaultConfig: { isExpanded: true },
-  defaultSize: { w: GRID_SIZE * 14, h: GRID_SIZE * 12 },
-  minSize: { w: GRID_SIZE * 2, h: GRID_SIZE * 2 },
-  component: FolderWidget as unknown as React.ComponentType<
-    WidgetComponentProps<FolderConfig>
-  >,
-});
-
-export { FolderWidget };
diff --git a/plugins/homepage/src/frontend/widgets/HostGridWidget.tsx b/plugins/homepage/src/frontend/widgets/HostGridWidget.tsx
deleted file mode 100644
index 4fb82b65b..000000000
--- a/plugins/homepage/src/frontend/widgets/HostGridWidget.tsx
+++ /dev/null
@@ -1,123 +0,0 @@
-import { LayoutGrid } from "lucide-react";
-import {
-  useTranslation,
-  useHostStatus,
-  useHosts,
-  type PluginHostRecord,
-} from "@termix/plugin-sdk/frontend";
-
-import { registerWidget } from "./WidgetRegistry";
-import type { HostGridConfig, WidgetComponentProps } from "../types.js";
-import { GRID_SIZE } from "../types.js";
-import { WidgetTitle } from "@termix/plugin-sdk/ui";
-
-function getAccentColor(): string {
-  return (
-    getComputedStyle(document.documentElement)
-      .getPropertyValue("--accent-brand")
-      .trim() || "#f59145"
-  );
-}
-
-function StatusDot({ status }: { status: string }) {
-  const color =
-    status === "online"
-      ? getAccentColor()
-      : status === "offline"
-        ? "#ef4444"
-        : "#6b7280";
-  return (
-    <span
-      className="w-1.5 h-1.5 rounded-full shrink-0 inline-block"
-      style={{ background: color }}
-    />
-  );
-}
-
-function HostGridRow({
-  host,
-  showIp,
-}: {
-  host: PluginHostRecord;
-  showIp: boolean;
-}) {
-  const status = useHostStatus(Number(host.id));
-  return (
-    <div className="flex items-center gap-1.5 p-1.5 bg-muted/30 border border-border/40 overflow-hidden">
-      <StatusDot status={status?.status ?? "unknown"} />
-      <div className="flex flex-col min-w-0">
-        <span className="text-[10px] font-medium text-foreground truncate">
-          {host.name}
-        </span>
-        {showIp && (
-          <span className="text-[9px] text-muted-foreground truncate">
-            {host.ip}
-          </span>
-        )}
-      </div>
-    </div>
-  );
-}
-
-function HostGridWidget({
-  widget,
-  config,
-}: WidgetComponentProps<HostGridConfig>) {
-  const { t } = useTranslation();
-  const { hostIds, showIp, columns } = config;
-  const { hosts: allHosts, loaded } = useHosts();
-  const hosts =
-    hostIds.length > 0
-      ? allHosts.filter((h) => hostIds.includes(Number(h.id)))
-      : allHosts;
-
-  if (!loaded) {
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-muted-foreground">
-        {t("common.loading")}
-      </div>
-    );
-  }
-
-  if (hosts.length === 0) {
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-muted-foreground">
-        {t("homepage.noHosts")}
-      </div>
-    );
-  }
-
-  const gridCols =
-    columns === 2
-      ? "grid-cols-2"
-      : columns === 3
-        ? "grid-cols-3"
-        : "grid-cols-4";
-
-  return (
-    <div className="flex flex-col w-full h-full overflow-hidden">
-      <WidgetTitle title={widget.title} icon={<LayoutGrid size={11} />} />
-      <div
-        className={`grid ${gridCols} gap-1.5 p-2 flex-1 content-start overflow-auto`}
-      >
-        {hosts.map((host) => (
-          <HostGridRow key={String(host.id)} host={host} showIp={showIp} />
-        ))}
-      </div>
-    </div>
-  );
-}
-
-registerWidget<HostGridConfig>({
-  id: "host_grid",
-  name: "Host Grid",
-  description: "Live status overview grid for all your SSH hosts",
-  category: "monitoring",
-  icon: <LayoutGrid size={14} />,
-  defaultConfig: { hostIds: [], showIp: false, columns: 3 },
-  defaultSize: { w: GRID_SIZE * 12, h: GRID_SIZE * 8 },
-  minSize: { w: GRID_SIZE * 4, h: GRID_SIZE * 3 },
-  component: HostGridWidget,
-});
-
-export { HostGridWidget };
diff --git a/plugins/homepage/src/frontend/widgets/HostStatusWidget.tsx b/plugins/homepage/src/frontend/widgets/HostStatusWidget.tsx
deleted file mode 100644
index f1e6fd9a7..000000000
--- a/plugins/homepage/src/frontend/widgets/HostStatusWidget.tsx
+++ /dev/null
@@ -1,119 +0,0 @@
-import { Server } from "lucide-react";
-import {
-  useTranslation,
-  useHost,
-  useHostStatus,
-} from "@termix/plugin-sdk/frontend";
-
-import { ComponentSlot, WidgetTitle } from "@termix/plugin-sdk/ui";
-import { registerWidget } from "./WidgetRegistry";
-import type {
-  HostStatusConfig,
-  HostMetricKey,
-  WidgetComponentProps,
-} from "../types.js";
-import { GRID_SIZE } from "../types.js";
-
-function getAccentColor(): string {
-  return (
-    getComputedStyle(document.documentElement)
-      .getPropertyValue("--accent-brand")
-      .trim() || "#f59145"
-  );
-}
-
-const DEFAULT_METRICS: HostMetricKey[] = ["cpu", "memory"];
-
-function migrateConfig(config: HostStatusConfig): HostMetricKey[] {
-  if (config.shownMetrics?.length) return config.shownMetrics;
-  if (config.showMetrics === false) return [];
-  const metrics: HostMetricKey[] = ["cpu", "memory"];
-  if (config.showDisk) metrics.push("disk");
-  return metrics;
-}
-
-function HostStatusWidget({
-  widget,
-  config,
-}: WidgetComponentProps<HostStatusConfig>) {
-  const { t } = useTranslation();
-  const shownMetrics = migrateConfig(config);
-  const { hostId } = config;
-  const host = useHost(hostId || undefined);
-  const statusInfo = useHostStatus(hostId || undefined);
-
-  const needsMetrics = shownMetrics.length > 0;
-
-  if (!hostId) {
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-muted-foreground">
-        {t("homepage.noHostSelected")}
-      </div>
-    );
-  }
-
-  const status = statusInfo?.status;
-  const online = status === "online";
-  const known = online || status === "offline";
-
-  const onlineColor = !known
-    ? "#6b7280"
-    : online
-      ? getAccentColor()
-      : "#ef4444";
-  const onlineLabel = !known
-    ? t("common.unknown")
-    : online
-      ? t("common.online")
-      : t("common.offline");
-
-  return (
-    <div className="flex flex-col w-full h-full overflow-hidden">
-      <WidgetTitle title={widget.title} icon={<Server size={11} />} />
-      <div
-        className={`flex flex-col gap-2.5 p-3 flex-1 overflow-auto ${!needsMetrics ? "justify-center" : ""}`}
-      >
-        <div className="flex items-center gap-2 min-w-0">
-          <Server size={14} className="text-muted-foreground shrink-0" />
-          <span className="text-xs font-semibold text-foreground truncate flex-1">
-            {host?.name ?? `Host #${hostId}`}
-          </span>
-          <span className="flex items-center gap-1 shrink-0">
-            <span
-              className="w-1.5 h-1.5 shrink-0 rounded-full"
-              style={{ background: onlineColor }}
-            />
-            <span
-              className="text-[10px] font-medium"
-              style={{ color: onlineColor }}
-            >
-              {onlineLabel}
-            </span>
-          </span>
-        </div>
-
-        {/* Plugins such as host metrics fill in the live numbers. */}
-        {needsMetrics && (
-          <ComponentSlot
-            slotId="homepage.hostMetrics"
-            props={{ hostId, shownMetrics, online }}
-          />
-        )}
-      </div>
-    </div>
-  );
-}
-
-registerWidget<HostStatusConfig>({
-  id: "host_status",
-  name: "Host Status",
-  description: "Shows live status and metrics for an SSH host",
-  category: "system",
-  icon: <Server size={14} />,
-  defaultConfig: { hostId: 0, shownMetrics: DEFAULT_METRICS },
-  defaultSize: { w: GRID_SIZE * 9, h: GRID_SIZE * 6 },
-  minSize: { w: GRID_SIZE * 2, h: GRID_SIZE * 2 },
-  component: HostStatusWidget,
-});
-
-export { HostStatusWidget };
diff --git a/plugins/homepage/src/frontend/widgets/IframeWidget.tsx b/plugins/homepage/src/frontend/widgets/IframeWidget.tsx
deleted file mode 100644
index 9b8cd8f72..000000000
--- a/plugins/homepage/src/frontend/widgets/IframeWidget.tsx
+++ /dev/null
@@ -1,55 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Globe } from "lucide-react";
-import { registerWidget } from "./WidgetRegistry";
-import type { IframeConfig, WidgetComponentProps } from "../types.js";
-import { GRID_SIZE } from "../types.js";
-import { WidgetTitle } from "@termix/plugin-sdk/ui";
-
-function IframeWidget({
-  widget,
-  config,
-  isReadOnly,
-}: WidgetComponentProps<IframeConfig>) {
-  const { t } = useTranslation();
-  const { url, scrolling } = config;
-
-  if (!url) {
-    return (
-      <div className="flex flex-col items-center justify-center w-full h-full gap-2 text-muted-foreground/50">
-        <Globe size={24} />
-        <span className="text-xs">{t("homepage.configureUrl")}</span>
-      </div>
-    );
-  }
-
-  return (
-    <div className="flex flex-col w-full h-full overflow-hidden">
-      <WidgetTitle title={widget.title} icon={<Globe size={11} />} />
-      <div className="relative flex-1">
-        <iframe
-          src={url}
-          sandbox="allow-scripts allow-same-origin allow-forms allow-popups"
-          scrolling={scrolling ? "yes" : "no"}
-          className="w-full h-full border-0"
-          title={t("homepage.embeddedContent")}
-        />
-        {/* Block interaction in read-only mode so the canvas can still pan */}
-        {isReadOnly && <div className="absolute inset-0 pointer-events-none" />}
-      </div>
-    </div>
-  );
-}
-
-registerWidget<IframeConfig>({
-  id: "iframe_embed",
-  name: "iFrame Embed",
-  description: "Embed any URL in an iframe",
-  category: "info",
-  icon: <Globe size={14} />,
-  defaultConfig: { url: "", scrolling: true },
-  defaultSize: { w: GRID_SIZE * 14, h: GRID_SIZE * 12 },
-  minSize: { w: GRID_SIZE * 2, h: GRID_SIZE * 2 },
-  component: IframeWidget,
-});
-
-export { IframeWidget };
diff --git a/plugins/homepage/src/frontend/widgets/ImageWidget.tsx b/plugins/homepage/src/frontend/widgets/ImageWidget.tsx
deleted file mode 100644
index 8651e8980..000000000
--- a/plugins/homepage/src/frontend/widgets/ImageWidget.tsx
+++ /dev/null
@@ -1,88 +0,0 @@
-import { useState, useRef } from "react";
-import { ImageIcon } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { registerWidget } from "./WidgetRegistry";
-import type { ImageWidgetConfig, WidgetComponentProps } from "../types.js";
-import { GRID_SIZE } from "../types.js";
-import { WidgetTitle } from "@termix/plugin-sdk/ui";
-
-const FIT_MAP = {
-  contain: "object-contain",
-  cover: "object-cover",
-  fill: "object-fill",
-};
-
-function ImageWidget({
-  widget,
-  config,
-  isReadOnly,
-}: WidgetComponentProps<ImageWidgetConfig>) {
-  const { t } = useTranslation();
-  const { imageUrl, fit, alt, linkUrl } = config;
-  const [failed, setFailed] = useState(false);
-  const mouseDownRef = useRef<{ x: number; y: number } | null>(null);
-
-  const titleBar = widget.title ? (
-    <WidgetTitle title={widget.title} icon={<ImageIcon size={11} />} />
-  ) : null;
-
-  const content = (
-    <div className="flex flex-col w-full h-full overflow-hidden">
-      {titleBar}
-      <div className="flex-1 flex items-center justify-center overflow-hidden">
-        {imageUrl && !failed ? (
-          <img
-            src={imageUrl}
-            alt={alt ?? ""}
-            className={`w-full h-full ${FIT_MAP[fit]}`}
-            onError={() => setFailed(true)}
-          />
-        ) : (
-          <div className="flex flex-col items-center gap-1 text-muted-foreground/40">
-            <ImageIcon size={24} />
-            <span className="text-[10px]">{t("homepage.noImage")}</span>
-          </div>
-        )}
-      </div>
-    </div>
-  );
-
-  if (isReadOnly || !linkUrl) return content;
-
-  return (
-    <a
-      href={linkUrl}
-      target="_blank"
-      rel="noopener noreferrer"
-      className="block w-full h-full"
-      onMouseDown={(e) => {
-        mouseDownRef.current = { x: e.clientX, y: e.clientY };
-      }}
-      onClick={(e) => {
-        const s = mouseDownRef.current;
-        if (
-          s &&
-          (Math.abs(e.clientX - s.x) > 4 || Math.abs(e.clientY - s.y) > 4)
-        )
-          e.preventDefault();
-        mouseDownRef.current = null;
-      }}
-    >
-      {content}
-    </a>
-  );
-}
-
-registerWidget<ImageWidgetConfig>({
-  id: "image_widget",
-  name: "Image",
-  description: "Display any image from a URL",
-  category: "info",
-  icon: <ImageIcon size={14} />,
-  defaultConfig: { imageUrl: "", fit: "contain" },
-  defaultSize: { w: GRID_SIZE * 10, h: GRID_SIZE * 8 },
-  minSize: { w: GRID_SIZE * 2, h: GRID_SIZE * 2 },
-  component: ImageWidget,
-});
-
-export { ImageWidget };
diff --git a/plugins/homepage/src/frontend/widgets/LinkTreeWidget.tsx b/plugins/homepage/src/frontend/widgets/LinkTreeWidget.tsx
deleted file mode 100644
index e53a33be1..000000000
--- a/plugins/homepage/src/frontend/widgets/LinkTreeWidget.tsx
+++ /dev/null
@@ -1,127 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { useRef } from "react";
-import { List, ExternalLink } from "lucide-react";
-import { registerWidget } from "./WidgetRegistry";
-import type {
-  LinkTreeConfig,
-  LinkTreeLink,
-  WidgetComponentProps,
-} from "../types.js";
-import { GRID_SIZE } from "../types.js";
-import { WidgetTitle } from "@termix/plugin-sdk/ui";
-
-function TreeLink({
-  link,
-  compact,
-  isReadOnly,
-}: {
-  link: LinkTreeLink;
-  compact: boolean;
-  isReadOnly?: boolean;
-}) {
-  const mouseDownRef = useRef<{ x: number; y: number } | null>(null);
-
-  const content = (
-    <div
-      className={`group flex items-center gap-1.5 ${compact ? "py-0.5" : "py-1"} pl-2 pr-1 hover:bg-muted/40 transition-colors overflow-hidden`}
-    >
-      <ExternalLink
-        size={9}
-        className="shrink-0 text-muted-foreground group-hover:text-accent-brand transition-colors"
-      />
-      <div className="flex flex-col min-w-0">
-        <span className="text-[10px] font-medium text-foreground truncate">
-          {link.label}
-        </span>
-        {!compact && link.description && (
-          <span className="text-[9px] text-muted-foreground truncate">
-            {link.description}
-          </span>
-        )}
-      </div>
-    </div>
-  );
-
-  if (isReadOnly || !link.url) return content;
-
-  return (
-    <a
-      href={link.url}
-      target="_blank"
-      rel="noopener noreferrer"
-      className="block no-underline"
-      onMouseDown={(e) => {
-        mouseDownRef.current = { x: e.clientX, y: e.clientY };
-      }}
-      onClick={(e) => {
-        const s = mouseDownRef.current;
-        if (
-          s &&
-          (Math.abs(e.clientX - s.x) > 4 || Math.abs(e.clientY - s.y) > 4)
-        )
-          e.preventDefault();
-        mouseDownRef.current = null;
-      }}
-    >
-      {content}
-    </a>
-  );
-}
-
-function LinkTreeWidget({
-  widget,
-  config,
-  isReadOnly,
-}: WidgetComponentProps<LinkTreeConfig>) {
-  const { t } = useTranslation();
-  const { sections, compact } = config;
-
-  if (sections.length === 0) {
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-muted-foreground">
-        {t("homepage.noSections")}
-      </div>
-    );
-  }
-
-  return (
-    <div className="flex flex-col w-full h-full overflow-hidden">
-      <WidgetTitle title={widget.title} icon={<List size={11} />} />
-      <div className="flex-1 overflow-auto">
-        {sections.map((section, si) => (
-          <div key={si}>
-            {section.heading && (
-              <div className="flex items-center gap-1.5 px-2 pt-2 pb-0.5 border-b border-border/30">
-                <span className="text-[10px] font-semibold text-muted-foreground uppercase tracking-wider truncate">
-                  {section.heading}
-                </span>
-              </div>
-            )}
-            {section.links.map((link, li) => (
-              <TreeLink
-                key={li}
-                link={link}
-                compact={compact}
-                isReadOnly={isReadOnly}
-              />
-            ))}
-          </div>
-        ))}
-      </div>
-    </div>
-  );
-}
-
-registerWidget<LinkTreeConfig>({
-  id: "link_tree",
-  name: "Link Tree",
-  description: "Grouped links organized into labeled sections",
-  category: "links",
-  icon: <List size={14} />,
-  defaultConfig: { sections: [], compact: false },
-  defaultSize: { w: GRID_SIZE * 10, h: GRID_SIZE * 12 },
-  minSize: { w: GRID_SIZE * 4, h: GRID_SIZE * 4 },
-  component: LinkTreeWidget,
-});
-
-export { LinkTreeWidget };
diff --git a/plugins/homepage/src/frontend/widgets/MarkdownNotesWidget.tsx b/plugins/homepage/src/frontend/widgets/MarkdownNotesWidget.tsx
deleted file mode 100644
index 030684240..000000000
--- a/plugins/homepage/src/frontend/widgets/MarkdownNotesWidget.tsx
+++ /dev/null
@@ -1,124 +0,0 @@
-import { useState, useCallback } from "react";
-import { FileText } from "lucide-react";
-import { registerWidget } from "./WidgetRegistry";
-import type { MarkdownNotesConfig, WidgetComponentProps } from "../types.js";
-import { GRID_SIZE } from "../types.js";
-import { updateHomepageItem } from "../api.js";
-import { WidgetTitle } from "@termix/plugin-sdk/ui";
-
-function renderMarkdown(src: string): string {
-  return src
-    .split("\n")
-    .map((line) => {
-      if (/^### /.test(line))
-        return `<h3 class="text-[11px] font-bold mt-2 mb-0.5 text-foreground">${esc(line.slice(4))}</h3>`;
-      if (/^## /.test(line))
-        return `<h2 class="text-xs font-bold mt-2 mb-0.5 text-foreground">${esc(line.slice(3))}</h2>`;
-      if (/^# /.test(line))
-        return `<h1 class="text-sm font-bold mt-2 mb-0.5 text-foreground">${esc(line.slice(2))}</h1>`;
-      if (/^- /.test(line))
-        return `<li class="text-[10px] ml-3 list-disc text-foreground">${inlineFormat(line.slice(2))}</li>`;
-      if (/^\d+\. /.test(line))
-        return `<li class="text-[10px] ml-3 list-decimal text-foreground">${inlineFormat(line.replace(/^\d+\. /, ""))}</li>`;
-      if (line.trim() === "") return "<br/>";
-      return `<p class="text-[10px] text-foreground leading-relaxed">${inlineFormat(line)}</p>`;
-    })
-    .join("");
-}
-
-function esc(s: string): string {
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
-}
-
-function inlineFormat(s: string): string {
-  return esc(s)
-    .replace(/\*\*(.+?)\*\*/g, "<strong>$1</strong>")
-    .replace(/\*(.+?)\*/g, "<em>$1</em>")
-    .replace(
-      /`(.+?)`/g,
-      '<code class="bg-muted px-0.5 font-mono text-[9px]">$1</code>',
-    );
-}
-
-function MarkdownNotesWidget({
-  widget,
-  config,
-  isReadOnly,
-  onConfigUpdate,
-}: WidgetComponentProps<MarkdownNotesConfig>) {
-  const { content, backgroundColor, renderMarkdown: doRender } = config;
-  const [editing, setEditing] = useState(false);
-  const [draft, setDraft] = useState(content);
-
-  const commitEdit = useCallback(async () => {
-    setEditing(false);
-    if (draft === content) return;
-    try {
-      await updateHomepageItem(widget.id, {
-        config: { ...config, content: draft } as unknown as Record<
-          string,
-          unknown
-        >,
-      });
-      onConfigUpdate?.({ ...config, content: draft } as unknown as Record<
-        string,
-        unknown
-      >);
-    } catch {
-      /* ignore */
-    }
-  }, [draft, content, widget.id, config, onConfigUpdate]);
-
-  return (
-    <div
-      className="flex flex-col w-full h-full overflow-hidden"
-      style={backgroundColor ? { background: backgroundColor } : undefined}
-    >
-      <WidgetTitle title={widget.title} icon={<FileText size={11} />} />
-      <div className="flex-1 overflow-auto p-2 relative">
-        {editing ? (
-          <textarea
-            autoFocus
-            value={draft}
-            onChange={(e) => setDraft(e.target.value)}
-            onBlur={commitEdit}
-            onMouseDown={(e) => e.stopPropagation()}
-            className="w-full h-full bg-transparent text-[10px] text-foreground resize-none outline-none border-none leading-relaxed"
-            style={{ minHeight: "100%" }}
-          />
-        ) : doRender ? (
-          <div
-            className="text-[10px] leading-relaxed cursor-text"
-            onDoubleClick={() => {
-              if (!isReadOnly) setEditing(true);
-            }}
-            dangerouslySetInnerHTML={{ __html: renderMarkdown(content || "") }}
-          />
-        ) : (
-          <pre
-            className="text-[10px] text-foreground leading-relaxed whitespace-pre-wrap break-words font-sans cursor-text"
-            onDoubleClick={() => {
-              if (!isReadOnly) setEditing(true);
-            }}
-          >
-            {content}
-          </pre>
-        )}
-      </div>
-    </div>
-  );
-}
-
-registerWidget<MarkdownNotesConfig>({
-  id: "markdown_notes",
-  name: "Markdown Notes",
-  description: "Notes with optional Markdown rendering and inline editing",
-  category: "info",
-  icon: <FileText size={14} />,
-  defaultConfig: { content: "", renderMarkdown: true },
-  defaultSize: { w: GRID_SIZE * 10, h: GRID_SIZE * 8 },
-  minSize: { w: GRID_SIZE * 3, h: GRID_SIZE * 3 },
-  component: MarkdownNotesWidget,
-});
-
-export { MarkdownNotesWidget };
diff --git a/plugins/homepage/src/frontend/widgets/NotesWidget.tsx b/plugins/homepage/src/frontend/widgets/NotesWidget.tsx
deleted file mode 100644
index e053d69e1..000000000
--- a/plugins/homepage/src/frontend/widgets/NotesWidget.tsx
+++ /dev/null
@@ -1,46 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { StickyNote } from "lucide-react";
-import { registerWidget } from "./WidgetRegistry";
-import {
-  GRID_SIZE,
-  type NotesConfig,
-  type WidgetComponentProps,
-} from "../types.js";
-import { WidgetTitle } from "@termix/plugin-sdk/ui";
-
-function NotesWidget({ widget, config }: WidgetComponentProps<NotesConfig>) {
-  const { t } = useTranslation();
-  const { content, backgroundColor } = config;
-
-  return (
-    <div
-      className="flex flex-col w-full h-full overflow-hidden"
-      style={{ background: backgroundColor || undefined }}
-    >
-      <WidgetTitle title={widget.title} icon={<StickyNote size={11} />} />
-      <div className="flex-1 overflow-auto p-3">
-        <pre className="text-xs text-foreground whitespace-pre-wrap break-words font-sans leading-relaxed select-text w-full">
-          {content || (
-            <span className="text-muted-foreground italic">
-              {t("homepage.emptyNote")}
-            </span>
-          )}
-        </pre>
-      </div>
-    </div>
-  );
-}
-
-registerWidget<NotesConfig>({
-  id: "notes",
-  name: "Notes",
-  description: "A text notes widget",
-  category: "info",
-  icon: <StickyNote size={14} />,
-  defaultConfig: { content: "" },
-  defaultSize: { w: GRID_SIZE * 10, h: GRID_SIZE * 8 },
-  minSize: { w: GRID_SIZE * 2, h: GRID_SIZE * 2 },
-  component: NotesWidget,
-});
-
-export { NotesWidget };
diff --git a/plugins/homepage/src/frontend/widgets/PingStatusWidget.tsx b/plugins/homepage/src/frontend/widgets/PingStatusWidget.tsx
deleted file mode 100644
index 7563b0740..000000000
--- a/plugins/homepage/src/frontend/widgets/PingStatusWidget.tsx
+++ /dev/null
@@ -1,132 +0,0 @@
-import { useEffect, useState } from "react";
-import { Wifi } from "lucide-react";
-import { usePluginApi, useTranslation } from "@termix/plugin-sdk/frontend";
-import { registerWidget } from "./WidgetRegistry";
-import type { PingStatusConfig, WidgetComponentProps } from "../types.js";
-import { GRID_SIZE } from "../types.js";
-import { WidgetTitle, runVisibleInterval } from "@termix/plugin-sdk/ui";
-
-interface PingResult {
-  ok: boolean;
-  statusCode: number | null;
-  latencyMs: number;
-}
-
-function StatusDot({ ok, pending }: { ok: boolean | null; pending: boolean }) {
-  if (pending)
-    return (
-      <span className="w-2 h-2 rounded-full bg-muted-foreground/40 shrink-0 inline-block" />
-    );
-  return (
-    <span
-      className="w-2 h-2 rounded-full shrink-0 inline-block"
-      style={{ background: ok ? "var(--accent-brand, #f59145)" : "#ef4444" }}
-    />
-  );
-}
-
-function PingStatusWidget({
-  widget,
-  config,
-}: WidgetComponentProps<PingStatusConfig>) {
-  const { t } = useTranslation();
-  const api = usePluginApi();
-  const { urls, refreshInterval, showLatency } = config;
-  const [results, setResults] = useState<Record<string, PingResult | null>>({});
-  const [pending, setPending] = useState<Record<string, boolean>>({});
-
-  const fetchAll = async () => {
-    if (urls.length === 0) return;
-    const newPending: Record<string, boolean> = {};
-    urls.forEach((u) => {
-      newPending[u.url] = true;
-    });
-    setPending(newPending);
-
-    await Promise.all(
-      urls.map(async (u) => {
-        try {
-          const res = await api.get("/ping", { params: { url: u.url } });
-          const r = res.data as PingResult;
-          setResults((prev) => ({ ...prev, [u.url]: r }));
-        } catch {
-          setResults((prev) => ({
-            ...prev,
-            [u.url]: { ok: false, statusCode: null, latencyMs: 0 },
-          }));
-        } finally {
-          setPending((prev) => ({ ...prev, [u.url]: false }));
-        }
-      }),
-    );
-  };
-
-  const interval = Math.max(10, refreshInterval || 30);
-
-  useEffect(() => {
-    fetchAll();
-    return runVisibleInterval(() => {
-      void fetchAll();
-    }, interval * 1000);
-  }, [JSON.stringify(urls), interval]);
-
-  if (urls.length === 0) {
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-muted-foreground">
-        {t("homepage.noPingUrls")}
-      </div>
-    );
-  }
-
-  return (
-    <div className="flex flex-col w-full h-full overflow-hidden">
-      <WidgetTitle
-        title={widget.title || t("homepage.widgetPingStatusName")}
-        icon={<Wifi size={11} />}
-      />
-      <div className="flex-1 overflow-auto">
-        {urls.map((u) => {
-          const r = results[u.url];
-          const isPending = pending[u.url] ?? false;
-          return (
-            <div
-              key={u.url}
-              className="flex items-center gap-2 px-2 py-1.5 border-b border-border/30"
-            >
-              <StatusDot ok={r?.ok ?? null} pending={isPending} />
-              <div className="flex flex-col min-w-0 flex-1">
-                <span className="text-[10px] font-medium text-foreground truncate">
-                  {u.label || u.url}
-                </span>
-                {r && (
-                  <span className="text-[9px] text-muted-foreground">
-                    {r.statusCode ?? (r.ok ? "OK" : "ERR")}
-                  </span>
-                )}
-              </div>
-              {showLatency && r && r.latencyMs > 0 && (
-                <span className="text-[9px] text-muted-foreground shrink-0 tabular-nums">
-                  {r.latencyMs}ms
-                </span>
-              )}
-            </div>
-          );
-        })}
-      </div>
-    </div>
-  );
-}
-
-registerWidget<PingStatusConfig>({
-  id: "ping_status",
-  name: "Ping Status",
-  description: "Check if URLs or services are reachable",
-  category: "monitoring",
-  icon: <Wifi size={14} />,
-  defaultConfig: { urls: [], refreshInterval: 30, showLatency: true },
-  defaultSize: { w: GRID_SIZE * 9, h: GRID_SIZE * 7 },
-  minSize: { w: GRID_SIZE * 3, h: GRID_SIZE * 2 },
-  component: PingStatusWidget,
-});
-
-export { PingStatusWidget };
diff --git a/plugins/homepage/src/frontend/widgets/QuickConnectWidget.tsx b/plugins/homepage/src/frontend/widgets/QuickConnectWidget.tsx
deleted file mode 100644
index 45f7d53eb..000000000
--- a/plugins/homepage/src/frontend/widgets/QuickConnectWidget.tsx
+++ /dev/null
@@ -1,132 +0,0 @@
-import { Zap } from "lucide-react";
-import {
-  useTranslation,
-  useHostActions,
-  useHostStatus,
-  useHosts,
-  useTabs,
-} from "@termix/plugin-sdk/frontend";
-
-import { registerWidget } from "./WidgetRegistry";
-import type {
-  QuickConnectConfig,
-  QuickConnectType,
-  WidgetComponentProps,
-} from "../types.js";
-import { GRID_SIZE } from "../types.js";
-
-import { quickConnectTargets } from "../quick-connect-targets.js";
-import { WidgetTitle } from "@termix/plugin-sdk/ui";
-
-function StatusDot({ hostId }: { hostId: number }) {
-  const status = useHostStatus(hostId);
-  const cls =
-    status?.status === "online"
-      ? "bg-green-500"
-      : status?.status === "offline"
-        ? "bg-red-500"
-        : "bg-muted-foreground/30";
-  return <span className={`size-1.5 rounded-full shrink-0 ${cls}`} />;
-}
-
-function QuickConnectWidget({
-  widget,
-  config,
-}: WidgetComponentProps<QuickConnectConfig>) {
-  const { t } = useTranslation();
-  const { hosts: allHosts, loaded } = useHosts();
-  const tabs = useTabs();
-  const targets = quickConnectTargets(useHostActions());
-
-  const hosts =
-    config.hostIds.length > 0
-      ? allHosts.filter((h) => config.hostIds.includes(Number(h.id)))
-      : allHosts;
-
-  // An empty list means the first tools plugins offer, in their order.
-  const types =
-    config.connectionTypes.length > 0
-      ? config.connectionTypes
-      : (targets
-          .slice(0, 2)
-          .map((target) => target.type) as QuickConnectType[]);
-
-  if (!loaded) {
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-muted-foreground/60">
-        {t("common.loading")}
-      </div>
-    );
-  }
-
-  if (hosts.length === 0) {
-    return (
-      <div className="flex flex-col items-center justify-center w-full h-full gap-2 text-muted-foreground/60">
-        <Zap size={18} />
-        <span className="text-xs">{t("homepage.noHosts")}</span>
-      </div>
-    );
-  }
-
-  return (
-    <div className="flex flex-col w-full h-full overflow-hidden">
-      <WidgetTitle title={widget.title} icon={<Zap size={11} />} />
-      <div className="flex-1 overflow-y-auto p-2 flex flex-col gap-1">
-        {hosts.map((host) => {
-          const availableTypes = types.flatMap((type) => {
-            const target = targets.find((item) => item.type === type);
-            return target && target.enabled(host) ? [target] : [];
-          });
-          if (availableTypes.length === 0) return null;
-          return (
-            <div
-              key={String(host.id)}
-              className={`flex items-center gap-2 py-1.5 border-b border-border/20 last:border-0 ${config.layout === "grid" ? "flex-col items-start" : ""}`}
-            >
-              <div className="flex items-center gap-1.5 flex-1 min-w-0">
-                {config.showStatus && <StatusDot hostId={Number(host.id)} />}
-                <span className="text-xs font-medium text-foreground truncate">
-                  {host.name || host.ip}
-                </span>
-              </div>
-              <div className="flex items-center gap-1 shrink-0 flex-wrap">
-                {availableTypes.map((target) => (
-                  <button
-                    key={target.type}
-                    title={t(target.labelKey, target.type)}
-                    onMouseDown={(e) => e.stopPropagation()}
-                    onClick={(e) => {
-                      e.stopPropagation();
-                      tabs.connectHost(host, target.type);
-                    }}
-                    className="p-1.5 text-muted-foreground hover:text-accent-brand hover:bg-accent-brand/10 transition-colors border border-transparent hover:border-accent-brand/20"
-                  >
-                    <target.icon size={12} />
-                  </button>
-                ))}
-              </div>
-            </div>
-          );
-        })}
-      </div>
-    </div>
-  );
-}
-
-registerWidget<QuickConnectConfig>({
-  id: "quick_connect",
-  name: "Quick Connect",
-  description:
-    "Launch terminal, files, docker, tunnels, and more for your hosts",
-  category: "system",
-  icon: <Zap size={14} />,
-  defaultConfig: {
-    hostIds: [],
-    connectionTypes: [],
-    showStatus: true,
-    layout: "list",
-  },
-  defaultSize: { w: GRID_SIZE * 10, h: GRID_SIZE * 8 },
-  minSize: { w: GRID_SIZE * 4, h: GRID_SIZE * 3 },
-  component: QuickConnectWidget,
-});
diff --git a/plugins/homepage/src/frontend/widgets/RecentActivityWidget.tsx b/plugins/homepage/src/frontend/widgets/RecentActivityWidget.tsx
deleted file mode 100644
index c5980205f..000000000
--- a/plugins/homepage/src/frontend/widgets/RecentActivityWidget.tsx
+++ /dev/null
@@ -1,126 +0,0 @@
-import { useEffect, useState } from "react";
-import { Activity } from "lucide-react";
-import { useTranslation, activityTarget } from "@termix/plugin-sdk/frontend";
-
-import {
-  WidgetTitle,
-  getRecentActivity,
-  runVisibleInterval,
-  type RecentActivityItem,
-} from "@termix/plugin-sdk/ui";
-import { registerWidget } from "./WidgetRegistry";
-import type {
-  RecentActivityConfig,
-  ActivityType,
-  WidgetComponentProps,
-} from "../types.js";
-import { GRID_SIZE } from "../types.js";
-
-function relativeTime(ts: string): string {
-  const diff = Date.now() - new Date(ts).getTime();
-  const m = Math.floor(diff / 60_000);
-  if (m < 1) return "just now";
-  if (m < 60) return `${m}m ago`;
-  const h = Math.floor(m / 60);
-  if (h < 24) return `${h}h ago`;
-  return `${Math.floor(h / 24)}d ago`;
-}
-
-function ActivityIcon({ type }: { type: string }) {
-  const Icon = activityTarget(type)?.icon ?? Activity;
-  return <Icon className="size-2.5 shrink-0 text-accent-brand" />;
-}
-
-function RecentActivityWidget({
-  widget,
-  config,
-}: WidgetComponentProps<RecentActivityConfig>) {
-  const { t } = useTranslation();
-  const { maxItems, filterTypes, showTimestamp } = config;
-  const [items, setItems] = useState<RecentActivityItem[]>([]);
-  const [loading, setLoading] = useState(true);
-
-  const fetchData = async () => {
-    try {
-      const data = await getRecentActivity(maxItems * 3);
-      const filtered =
-        filterTypes.length > 0
-          ? data.filter((i) => filterTypes.includes(i.type as ActivityType))
-          : data;
-      setItems(filtered.slice(0, maxItems));
-    } catch {
-      /* ignore */
-    } finally {
-      setLoading(false);
-    }
-  };
-
-  useEffect(() => {
-    fetchData();
-    return runVisibleInterval(() => {
-      void fetchData();
-    }, 60_000);
-  }, [maxItems, filterTypes.join(",")]);
-
-  if (loading) {
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-muted-foreground">
-        {t("common.loading")}
-      </div>
-    );
-  }
-
-  if (items.length === 0) {
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-muted-foreground">
-        {t("homepage.noActivity")}
-      </div>
-    );
-  }
-
-  return (
-    <div className="flex flex-col w-full h-full overflow-hidden">
-      <WidgetTitle
-        title={widget.title || t("homepage.widgetRecentActivityName")}
-        icon={<Activity size={11} />}
-      />
-      <div className="flex-1 overflow-auto">
-        {items.map((item) => (
-          <div
-            key={item.id}
-            className="flex items-center gap-2 px-2 py-1.5 border-b border-border/30"
-          >
-            <ActivityIcon type={item.type} />
-            <div className="flex flex-col min-w-0 flex-1">
-              <span className="text-[10px] font-medium text-foreground truncate">
-                {item.hostName}
-              </span>
-              <span className="text-[9px] text-muted-foreground capitalize">
-                {item.type.replace("_", " ")}
-              </span>
-            </div>
-            {showTimestamp && (
-              <span className="text-[9px] text-muted-foreground shrink-0">
-                {relativeTime(item.timestamp)}
-              </span>
-            )}
-          </div>
-        ))}
-      </div>
-    </div>
-  );
-}
-
-registerWidget<RecentActivityConfig>({
-  id: "recent_activity",
-  name: "Recent Activity",
-  description: "Shows recent terminal, Docker, file, and tunnel activity",
-  category: "system",
-  icon: <Activity size={14} />,
-  defaultConfig: { maxItems: 10, filterTypes: [], showTimestamp: true },
-  defaultSize: { w: GRID_SIZE * 10, h: GRID_SIZE * 9 },
-  minSize: { w: GRID_SIZE * 4, h: GRID_SIZE * 3 },
-  component: RecentActivityWidget,
-});
-
-export { RecentActivityWidget };
diff --git a/plugins/homepage/src/frontend/widgets/RssFeedWidget.tsx b/plugins/homepage/src/frontend/widgets/RssFeedWidget.tsx
deleted file mode 100644
index 074f1345f..000000000
--- a/plugins/homepage/src/frontend/widgets/RssFeedWidget.tsx
+++ /dev/null
@@ -1,154 +0,0 @@
-import { useEffect, useState } from "react";
-import { Rss, ExternalLink } from "lucide-react";
-import { usePluginApi, useTranslation } from "@termix/plugin-sdk/frontend";
-import { registerWidget } from "./WidgetRegistry";
-import type { RssFeedConfig, WidgetComponentProps } from "../types.js";
-import { GRID_SIZE } from "../types.js";
-import { WidgetTitle } from "@termix/plugin-sdk/ui";
-
-interface RssItem {
-  title: string;
-  link: string;
-  pubDate: string | null;
-  description: string | null;
-}
-
-function formatDate(dateStr: string | null): string {
-  if (!dateStr) return "";
-  try {
-    const d = new Date(dateStr);
-    const diffMs = Date.now() - d.getTime();
-    const diffH = Math.floor(diffMs / 3_600_000);
-    if (diffH < 1) return "just now";
-    if (diffH < 24) return `${diffH}h ago`;
-    const diffD = Math.floor(diffH / 24);
-    if (diffD < 7) return `${diffD}d ago`;
-    return d.toLocaleDateString(undefined, { month: "short", day: "numeric" });
-  } catch {
-    return "";
-  }
-}
-
-function RssFeedWidget({
-  widget,
-  config,
-  isReadOnly,
-}: WidgetComponentProps<RssFeedConfig>) {
-  const { t } = useTranslation();
-  const api = usePluginApi();
-  const { feedUrl, maxItems, showDescription } = config;
-  const [items, setItems] = useState<RssItem[]>([]);
-  const [error, setError] = useState(false);
-  const [loading, setLoading] = useState(false);
-
-  useEffect(() => {
-    if (!feedUrl) return;
-    let cancelled = false;
-    const fetchFeed = async () => {
-      try {
-        setLoading(true);
-        setError(false);
-        const res = await api.get<RssItem[]>("/rss", {
-          params: { url: feedUrl, max: maxItems ?? 10 },
-        });
-        if (!cancelled) setItems(res.data);
-      } catch {
-        if (!cancelled) setError(true);
-      } finally {
-        if (!cancelled) setLoading(false);
-      }
-    };
-    fetchFeed();
-    return () => {
-      cancelled = true;
-    };
-  }, [feedUrl, maxItems]);
-
-  if (!feedUrl) {
-    return (
-      <div className="flex flex-col items-center justify-center w-full h-full gap-2 text-muted-foreground/50">
-        <Rss size={24} />
-        <span className="text-xs">{t("homepage.rssNoFeedUrl")}</span>
-      </div>
-    );
-  }
-
-  if (loading && items.length === 0) {
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-muted-foreground/50">
-        {t("common.loading")}
-      </div>
-    );
-  }
-
-  if (error) {
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-destructive/70 p-3 text-center">
-        {t("homepage.rssLoadError")}
-      </div>
-    );
-  }
-
-  return (
-    <div className="flex flex-col w-full h-full overflow-hidden">
-      <WidgetTitle
-        title={widget.title || t("homepage.widgetRssName")}
-        icon={<Rss size={11} />}
-      />
-
-      {/* Items */}
-      <div className="flex-1 overflow-y-auto">
-        {items.length === 0 ? (
-          <div className="flex items-center justify-center h-full text-xs text-muted-foreground/50">
-            {t("homepage.rssNoItems")}
-          </div>
-        ) : (
-          items.map((item, i) => (
-            <div key={i} className="border-b border-border/60 last:border-0">
-              <a
-                href={item.link}
-                target="_blank"
-                rel="noopener noreferrer"
-                className={`flex flex-col px-3 py-2 gap-0.5 hover:bg-muted/40 transition-colors no-underline ${isReadOnly ? "pointer-events-none" : ""}`}
-              >
-                <div className="flex items-start justify-between gap-2">
-                  <span className="text-xs font-medium text-foreground line-clamp-2 leading-snug flex-1">
-                    {item.title}
-                  </span>
-                  <ExternalLink
-                    size={9}
-                    className="text-muted-foreground/40 shrink-0 mt-0.5"
-                  />
-                </div>
-                {showDescription && item.description && (
-                  <span className="text-[10px] text-muted-foreground/70 line-clamp-2">
-                    {item.description.replace(/<[^>]+>/g, "")}
-                  </span>
-                )}
-                {item.pubDate && (
-                  <span className="text-[9px] text-muted-foreground/50">
-                    {formatDate(item.pubDate)}
-                  </span>
-                )}
-              </a>
-            </div>
-          ))
-        )}
-      </div>
-    </div>
-  );
-}
-
-registerWidget<RssFeedConfig>({
-  id: "rss_feed",
-  name: "RSS Feed",
-  description: "Display items from an RSS or Atom feed",
-  category: "links",
-  icon: <Rss size={14} />,
-  defaultConfig: { feedUrl: "", maxItems: 10, showDescription: false },
-  defaultSize: { w: GRID_SIZE * 10, h: GRID_SIZE * 10 },
-  minSize: { w: GRID_SIZE * 2, h: GRID_SIZE * 2 },
-  component: RssFeedWidget,
-});
-
-export { RssFeedWidget };
diff --git a/plugins/homepage/src/frontend/widgets/SearchBarWidget.tsx b/plugins/homepage/src/frontend/widgets/SearchBarWidget.tsx
deleted file mode 100644
index 39427ef96..000000000
--- a/plugins/homepage/src/frontend/widgets/SearchBarWidget.tsx
+++ /dev/null
@@ -1,103 +0,0 @@
-import { useRef, useState } from "react";
-import { Search } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { registerWidget } from "./WidgetRegistry";
-import type {
-  SearchBarConfig,
-  SearchEngine,
-  WidgetComponentProps,
-} from "../types.js";
-import { GRID_SIZE } from "../types.js";
-import { WidgetTitle } from "@termix/plugin-sdk/ui";
-
-const ENGINE_URLS: Record<SearchEngine, string> = {
-  google: "https://www.google.com/search?q={q}",
-  duckduckgo: "https://duckduckgo.com/?q={q}",
-  bing: "https://www.bing.com/search?q={q}",
-  custom: "",
-};
-
-const ENGINE_LABELS: Record<SearchEngine, string> = {
-  google: "Google",
-  duckduckgo: "DuckDuckGo",
-  bing: "Bing",
-  custom: "Custom",
-};
-
-function buildUrl(
-  engine: SearchEngine,
-  customUrl: string | undefined,
-  query: string,
-): string {
-  const template =
-    engine === "custom" ? (customUrl ?? "") : ENGINE_URLS[engine];
-  return template.replace("{q}", encodeURIComponent(query));
-}
-
-function SearchBarWidget({
-  widget,
-  config,
-  isReadOnly,
-}: WidgetComponentProps<SearchBarConfig>) {
-  const { t } = useTranslation();
-  const { engine, customUrl, placeholder, openInNewTab } = config;
-  const [query, setQuery] = useState("");
-  const inputRef = useRef<HTMLInputElement>(null);
-
-  const handleSubmit = (e: React.FormEvent) => {
-    e.preventDefault();
-    if (!query.trim()) return;
-    const url = buildUrl(engine, customUrl, query.trim());
-    if (!url) return;
-    if (openInNewTab) window.open(url, "_blank", "noopener,noreferrer");
-    else window.location.href = url;
-    setQuery("");
-  };
-
-  return (
-    <div className="flex flex-col w-full h-full overflow-hidden">
-      <WidgetTitle title={widget.title} icon={<Search size={11} />} />
-      <form
-        onSubmit={handleSubmit}
-        className="flex items-center gap-1.5 flex-1 px-2"
-        onMouseDown={(e) => e.stopPropagation()}
-      >
-        <Search size={12} className="text-muted-foreground shrink-0" />
-        <input
-          ref={inputRef}
-          type="search"
-          value={query}
-          onChange={(e) => setQuery(e.target.value)}
-          placeholder={
-            placeholder ||
-            `${t("homepage.searchPlaceholder")} ${ENGINE_LABELS[engine]}...`
-          }
-          disabled={isReadOnly}
-          className="flex-1 bg-transparent text-xs text-foreground placeholder:text-muted-foreground/60 outline-none border-none min-w-0"
-        />
-        {query.trim() && (
-          <button
-            type="submit"
-            className="shrink-0 text-[10px] font-medium text-accent-brand hover:opacity-80 transition-opacity"
-          >
-            {t("homepage.searchGo")}
-          </button>
-        )}
-      </form>
-    </div>
-  );
-}
-
-registerWidget<SearchBarConfig>({
-  id: "search_bar",
-  name: "Search Bar",
-  description: "Quick search with Google, DuckDuckGo, Bing, or a custom engine",
-  category: "info",
-  icon: <Search size={14} />,
-  defaultConfig: { engine: "google", openInNewTab: true },
-  defaultSize: { w: GRID_SIZE * 12, h: GRID_SIZE * 3 },
-  minSize: { w: GRID_SIZE * 6, h: GRID_SIZE * 2 },
-  component: SearchBarWidget,
-});
-
-export { SearchBarWidget };
diff --git a/plugins/homepage/src/frontend/widgets/SearchLinksWidget.tsx b/plugins/homepage/src/frontend/widgets/SearchLinksWidget.tsx
deleted file mode 100644
index 8fc026ea1..000000000
--- a/plugins/homepage/src/frontend/widgets/SearchLinksWidget.tsx
+++ /dev/null
@@ -1,129 +0,0 @@
-import { useState } from "react";
-import { SearchCode } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { registerWidget } from "./WidgetRegistry";
-import type {
-  SearchLinksConfig,
-  SearchLinkShortcut,
-  WidgetComponentProps,
-} from "../types.js";
-import { GRID_SIZE } from "../types.js";
-import { WidgetTitle } from "@termix/plugin-sdk/ui";
-
-function SearchLinksWidget({
-  widget,
-  config,
-  isReadOnly,
-}: WidgetComponentProps<SearchLinksConfig>) {
-  const { t } = useTranslation();
-  const { shortcuts } = config;
-  const [activeIdx, setActiveIdx] = useState<number | null>(null);
-  const [query, setQuery] = useState("");
-
-  const handleOpen = (shortcut: SearchLinkShortcut) => {
-    if (!query.trim()) return;
-    const url = shortcut.queryTemplate.replace(
-      "{q}",
-      encodeURIComponent(query.trim()),
-    );
-    window.open(url, "_blank", "noopener,noreferrer");
-    setQuery("");
-    setActiveIdx(null);
-  };
-
-  const handleButtonClick = (i: number) => {
-    if (isReadOnly) return;
-    if (activeIdx === i) {
-      setActiveIdx(null);
-      setQuery("");
-    } else {
-      setActiveIdx(i);
-      setQuery("");
-    }
-  };
-
-  if (shortcuts.length === 0) {
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-muted-foreground">
-        {t("homepage.noSearchShortcuts")}
-      </div>
-    );
-  }
-
-  return (
-    <div className="flex flex-col w-full h-full overflow-hidden">
-      <WidgetTitle title={widget.title} icon={<SearchCode size={11} />} />
-      <div className="flex flex-col flex-1 p-2 gap-1.5 overflow-auto">
-        <div className="flex flex-wrap gap-1.5">
-          {shortcuts.map((s, i) => {
-            const accent =
-              s.accentColor ||
-              getComputedStyle(document.documentElement)
-                .getPropertyValue("--accent-brand")
-                .trim() ||
-              "#f59145";
-            const isActive = activeIdx === i;
-            return (
-              <button
-                key={i}
-                onClick={() => handleButtonClick(i)}
-                className="flex items-center gap-1 px-2 py-1 text-[10px] font-medium border transition-colors"
-                style={
-                  isActive
-                    ? { background: accent, borderColor: accent, color: "#fff" }
-                    : {
-                        borderColor: `${accent}50`,
-                        color: "var(--text-primary, currentColor)",
-                      }
-                }
-              >
-                {s.icon && <span className="text-xs">{s.icon}</span>}
-                {s.label}
-              </button>
-            );
-          })}
-        </div>
-
-        {activeIdx !== null && (
-          <form
-            onSubmit={(e) => {
-              e.preventDefault();
-              handleOpen(shortcuts[activeIdx]);
-            }}
-            className="flex items-center gap-1.5 border border-border/60 px-2 py-1"
-            onMouseDown={(e) => e.stopPropagation()}
-          >
-            <input
-              autoFocus
-              type="text"
-              value={query}
-              onChange={(e) => setQuery(e.target.value)}
-              placeholder={t("homepage.searchQueryPlaceholder")}
-              className="flex-1 bg-transparent text-[10px] text-foreground placeholder:text-muted-foreground/60 outline-none border-none"
-            />
-            <button
-              type="submit"
-              className="text-[9px] font-medium text-accent-brand hover:opacity-80"
-            >
-              {t("homepage.searchGo")}
-            </button>
-          </form>
-        )}
-      </div>
-    </div>
-  );
-}
-
-registerWidget<SearchLinksConfig>({
-  id: "search_links",
-  name: "Search Shortcuts",
-  description: "Quick buttons to search different engines",
-  category: "links",
-  icon: <SearchCode size={14} />,
-  defaultConfig: { shortcuts: [] },
-  defaultSize: { w: GRID_SIZE * 10, h: GRID_SIZE * 7 },
-  minSize: { w: GRID_SIZE * 4, h: GRID_SIZE * 3 },
-  component: SearchLinksWidget,
-});
-
-export { SearchLinksWidget };
diff --git a/plugins/homepage/src/frontend/widgets/ServiceGridWidget.tsx b/plugins/homepage/src/frontend/widgets/ServiceGridWidget.tsx
deleted file mode 100644
index af3e2f512..000000000
--- a/plugins/homepage/src/frontend/widgets/ServiceGridWidget.tsx
+++ /dev/null
@@ -1,162 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { useRef, useState, useEffect } from "react";
-import { Grid3x3, ExternalLink } from "lucide-react";
-import { registerWidget } from "./WidgetRegistry";
-import type {
-  ServiceGridConfig,
-  ServiceGridItem,
-  WidgetComponentProps,
-} from "../types.js";
-import { GRID_SIZE } from "../types.js";
-import { WidgetTitle } from "@termix/plugin-sdk/ui";
-
-function getAccentColor(): string {
-  return (
-    getComputedStyle(document.documentElement)
-      .getPropertyValue("--accent-brand")
-      .trim() || "#f59145"
-  );
-}
-
-function getFaviconUrl(url: string): string {
-  try {
-    const domain = new URL(url).hostname;
-    return `https://www.google.com/s2/favicons?sz=64&domain_url=${encodeURIComponent(domain)}`;
-  } catch {
-    return "";
-  }
-}
-
-const ICON_SIZE_MAP = { sm: 16, md: 24, lg: 32 };
-
-function ServiceTile({
-  item,
-  iconSize,
-  showLabels,
-  isReadOnly,
-}: {
-  item: ServiceGridItem;
-  iconSize: number;
-  showLabels: boolean;
-  isReadOnly?: boolean;
-}) {
-  const [imgFailed, setImgFailed] = useState(false);
-  const mouseDownRef = useRef<{ x: number; y: number } | null>(null);
-
-  useEffect(() => {
-    setImgFailed(false);
-  }, [item.imageUrl, item.url]);
-
-  const accent = item.accentColor || getAccentColor();
-  const imageUrl = item.imageUrl || (item.url ? getFaviconUrl(item.url) : null);
-
-  const content = (
-    <div
-      className="group flex flex-col items-center justify-center gap-1 p-1.5 w-full h-full border border-border/40 border-t-2 hover:bg-muted/40 transition-colors overflow-hidden"
-      style={{ borderTopColor: `${accent}60`, background: "var(--color-card)" }}
-    >
-      {imageUrl && !imgFailed ? (
-        <img
-          src={imageUrl}
-          alt=""
-          style={{ width: iconSize, height: iconSize }}
-          className="object-contain shrink-0"
-          onError={() => setImgFailed(true)}
-        />
-      ) : (
-        <ExternalLink
-          size={iconSize * 0.6}
-          className="text-accent-brand shrink-0"
-        />
-      )}
-      {showLabels && (
-        <span className="text-[9px] font-medium text-foreground text-center truncate w-full leading-tight">
-          {item.label || item.url}
-        </span>
-      )}
-    </div>
-  );
-
-  if (isReadOnly || !item.url) return content;
-
-  return (
-    <a
-      href={item.url}
-      target="_blank"
-      rel="noopener noreferrer"
-      className="block w-full h-full no-underline"
-      onMouseDown={(e) => {
-        mouseDownRef.current = { x: e.clientX, y: e.clientY };
-      }}
-      onClick={(e) => {
-        const s = mouseDownRef.current;
-        if (
-          s &&
-          (Math.abs(e.clientX - s.x) > 4 || Math.abs(e.clientY - s.y) > 4)
-        )
-          e.preventDefault();
-        mouseDownRef.current = null;
-      }}
-    >
-      {content}
-    </a>
-  );
-}
-
-function ServiceGridWidget({
-  widget,
-  config,
-  isReadOnly,
-}: WidgetComponentProps<ServiceGridConfig>) {
-  const { t } = useTranslation();
-  const { services, columns, showLabels, iconSize } = config;
-
-  if (services.length === 0) {
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-muted-foreground">
-        {t("homepage.noServices")}
-      </div>
-    );
-  }
-
-  const gridCols =
-    columns === 2
-      ? "grid-cols-2"
-      : columns === 3
-        ? "grid-cols-3"
-        : "grid-cols-4";
-  const size = ICON_SIZE_MAP[iconSize];
-
-  return (
-    <div className="flex flex-col w-full h-full overflow-hidden">
-      <WidgetTitle title={widget.title} icon={<Grid3x3 size={11} />} />
-      <div
-        className={`grid ${gridCols} gap-1.5 p-1.5 flex-1 overflow-auto content-start`}
-      >
-        {services.map((s, i) => (
-          <ServiceTile
-            key={i}
-            item={s}
-            iconSize={size}
-            showLabels={showLabels}
-            isReadOnly={isReadOnly}
-          />
-        ))}
-      </div>
-    </div>
-  );
-}
-
-registerWidget<ServiceGridConfig>({
-  id: "service_grid",
-  name: "Service Grid",
-  description: "A grid of service tiles with icons and links",
-  category: "links",
-  icon: <Grid3x3 size={14} />,
-  defaultConfig: { services: [], columns: 3, showLabels: true, iconSize: "md" },
-  defaultSize: { w: GRID_SIZE * 14, h: GRID_SIZE * 10 },
-  minSize: { w: GRID_SIZE * 4, h: GRID_SIZE * 4 },
-  component: ServiceGridWidget,
-});
-
-export { ServiceGridWidget };
diff --git a/plugins/homepage/src/frontend/widgets/ServiceLinkWidget.tsx b/plugins/homepage/src/frontend/widgets/ServiceLinkWidget.tsx
deleted file mode 100644
index 672e65909..000000000
--- a/plugins/homepage/src/frontend/widgets/ServiceLinkWidget.tsx
+++ /dev/null
@@ -1,128 +0,0 @@
-import { useRef, useState, useEffect } from "react";
-import { ExternalLink } from "lucide-react";
-import { registerWidget } from "./WidgetRegistry";
-import type { ServiceLinkConfig, WidgetComponentProps } from "../types.js";
-import { GRID_SIZE } from "../types.js";
-
-function getAccentColor(): string {
-  return (
-    getComputedStyle(document.documentElement)
-      .getPropertyValue("--accent-brand")
-      .trim() || "#f59145"
-  );
-}
-
-function getFaviconUrl(url: string): string {
-  try {
-    const domain = new URL(url).hostname;
-    return `https://www.google.com/s2/favicons?sz=64&domain_url=${encodeURIComponent(domain)}`;
-  } catch {
-    return "";
-  }
-}
-
-function ServiceLinkWidget({
-  widget,
-  config,
-  isReadOnly,
-}: WidgetComponentProps<ServiceLinkConfig>) {
-  const { url, description, accentColor, imageUrl, showImage = true } = config;
-  const resolvedImageUrl = showImage
-    ? imageUrl || (url ? getFaviconUrl(url) : null)
-    : null;
-  const mouseDownPosRef = useRef<{ x: number; y: number } | null>(null);
-  const [imgFailed, setImgFailed] = useState(false);
-
-  useEffect(() => {
-    setImgFailed(false);
-  }, [resolvedImageUrl]);
-
-  let displayLabel = widget.title;
-  if (!displayLabel && url) {
-    try {
-      displayLabel = new URL(url).hostname;
-    } catch {
-      displayLabel = url;
-    }
-  }
-
-  const accentBorder = accentColor || getAccentColor();
-  const imgSize = Math.min(48, widget.h * 0.3);
-
-  const content = (
-    <div
-      className="group flex flex-col items-center justify-center gap-1.5 w-full h-full p-2 select-none border-t-2 relative overflow-hidden"
-      style={{ borderTopColor: `${accentBorder}80` }}
-    >
-      {resolvedImageUrl && !imgFailed ? (
-        <img
-          src={resolvedImageUrl}
-          alt=""
-          className="shrink-0 transition-transform duration-150 group-hover:scale-110 object-contain"
-          style={{ width: imgSize, height: imgSize }}
-          onError={() => setImgFailed(true)}
-        />
-      ) : showImage ? (
-        <ExternalLink
-          className="shrink-0 text-accent-brand transition-transform duration-150 group-hover:scale-110"
-          style={{ width: imgSize * 0.75, height: imgSize * 0.75 }}
-        />
-      ) : null}
-      <span className="text-xs font-semibold text-foreground text-center leading-tight w-full truncate px-1">
-        {displayLabel}
-      </span>
-      {description && (
-        <span className="text-[10px] text-muted-foreground text-center w-full truncate px-1">
-          {description}
-        </span>
-      )}
-      {!isReadOnly && url && (
-        <ExternalLink
-          size={10}
-          className="absolute top-1.5 right-1.5 text-muted-foreground/0 group-hover:text-muted-foreground/60 transition-colors duration-150"
-        />
-      )}
-    </div>
-  );
-
-  if (isReadOnly || !url) return content;
-
-  return (
-    <a
-      href={url}
-      target="_blank"
-      rel="noopener noreferrer"
-      className="block w-full h-full no-underline"
-      onMouseDown={(e) => {
-        mouseDownPosRef.current = { x: e.clientX, y: e.clientY };
-      }}
-      onClick={(e) => {
-        const start = mouseDownPosRef.current;
-        if (
-          start &&
-          (Math.abs(e.clientX - start.x) > 4 ||
-            Math.abs(e.clientY - start.y) > 4)
-        ) {
-          e.preventDefault();
-        }
-        mouseDownPosRef.current = null;
-      }}
-    >
-      {content}
-    </a>
-  );
-}
-
-registerWidget<ServiceLinkConfig>({
-  id: "service_link",
-  name: "Service Link",
-  description: "A clickable tile linking to a service URL",
-  category: "links",
-  icon: <ExternalLink size={14} />,
-  defaultConfig: { url: "", description: "", showImage: true },
-  defaultSize: { w: GRID_SIZE * 8, h: GRID_SIZE * 6 },
-  minSize: { w: GRID_SIZE * 2, h: GRID_SIZE * 2 },
-  component: ServiceLinkWidget,
-});
-
-export { ServiceLinkWidget };
diff --git a/plugins/homepage/src/frontend/widgets/SshTerminalWidget.tsx b/plugins/homepage/src/frontend/widgets/SshTerminalWidget.tsx
deleted file mode 100644
index 9f7bbcba3..000000000
--- a/plugins/homepage/src/frontend/widgets/SshTerminalWidget.tsx
+++ /dev/null
@@ -1,141 +0,0 @@
-import { useState, useRef, useEffect } from "react";
-import { Terminal as TerminalIcon, Play } from "lucide-react";
-import {
-  useTranslation,
-  useHost,
-  type TabHandle as TerminalHandle,
-} from "@termix/plugin-sdk/frontend";
-
-import { PluginComponent, WidgetTitle } from "@termix/plugin-sdk/ui";
-import { registerWidget } from "./WidgetRegistry";
-import type { SshTerminalConfig, WidgetComponentProps } from "../types.js";
-import { GRID_SIZE } from "../types.js";
-
-function SshTerminalWidget({
-  widget,
-  config,
-}: WidgetComponentProps<SshTerminalConfig>) {
-  const { t } = useTranslation();
-  const host = useHost(config.hostId || undefined);
-  const [started, setStarted] = useState(false);
-  const terminalRef = useRef<TerminalHandle>(null);
-  const terminalWrapRef = useRef<HTMLDivElement>(null);
-
-  useEffect(() => {
-    const el = terminalWrapRef.current;
-    if (!el || !started) return;
-    const stopWheel = (e: WheelEvent) => e.stopPropagation();
-    el.addEventListener("wheel", stopWheel, { capture: true, passive: true });
-    return () => el.removeEventListener("wheel", stopWheel, { capture: true });
-  }, [started]);
-
-  useEffect(() => {
-    if (!started) return;
-    const blurOnOutsideClick = (e: MouseEvent) => {
-      if (!terminalWrapRef.current?.contains(e.target as Node)) {
-        const textarea = terminalWrapRef.current?.querySelector("textarea");
-        textarea?.blur();
-      }
-    };
-    document.addEventListener("mousedown", blurOnOutsideClick, {
-      capture: true,
-    });
-    return () =>
-      document.removeEventListener("mousedown", blurOnOutsideClick, {
-        capture: true,
-      });
-  }, [started]);
-
-  // auto-connect after the host loads if configured
-  useEffect(() => {
-    if (host && config.autoConnect) setStarted(true);
-  }, [host, config.autoConnect]);
-
-  if (!config.hostId) {
-    return (
-      <div className="flex flex-col items-center justify-center w-full h-full gap-2 text-muted-foreground/60">
-        <TerminalIcon size={20} />
-        <span className="text-xs">{t("homepage.sshTerminalNoHost")}</span>
-      </div>
-    );
-  }
-
-  if (!host) {
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-muted-foreground/60">
-        {t("homepage.sshTerminalNoHost")}
-      </div>
-    );
-  }
-
-  const hostConfig = {
-    id: Number(host.id),
-    ip: host.ip,
-    port: (host.sshPort as number | undefined) ?? host.port ?? 22,
-    username: host.username,
-    authType: host.authType,
-  };
-
-  if (!started) {
-    return (
-      <div
-        className="flex flex-col items-center justify-center w-full h-full gap-3"
-        onMouseDown={(e) => e.stopPropagation()}
-      >
-        <div className="flex flex-col items-center gap-1">
-          <TerminalIcon size={16} className="text-muted-foreground/60" />
-          <span className="text-xs font-medium text-foreground">
-            {host.name || host.ip}
-          </span>
-          <span className="text-[10px] text-muted-foreground/50">
-            {host.username}@{host.ip}
-          </span>
-        </div>
-        <button
-          className="flex items-center gap-1.5 px-3 py-1.5 bg-accent-brand text-white text-xs font-medium hover:opacity-90 transition-opacity"
-          onClick={() => setStarted(true)}
-        >
-          <Play size={11} />
-          {t("homepage.sshTerminalConnect")}
-        </button>
-      </div>
-    );
-  }
-
-  return (
-    <div
-      ref={terminalWrapRef}
-      className="flex flex-col w-full h-full overflow-hidden"
-      onMouseDown={(e) => e.stopPropagation()}
-    >
-      <WidgetTitle title={widget.title} icon={<TerminalIcon size={11} />} />
-      <div className="flex-1 overflow-hidden">
-        <PluginComponent
-          id="terminal.view"
-          handleRef={terminalRef}
-          hostConfig={hostConfig}
-          isVisible={true}
-          showTitle={false}
-          splitScreen={false}
-          disableAutoFocus={true}
-          onClose={() => setStarted(false)}
-        />
-      </div>
-    </div>
-  );
-}
-
-registerWidget<SshTerminalConfig>({
-  id: "ssh_terminal",
-  name: "SSH Terminal",
-  description: "An inline SSH terminal connected to a configured host",
-  category: "system",
-  icon: <TerminalIcon size={14} />,
-  defaultConfig: {
-    hostId: 0,
-    autoConnect: false,
-  },
-  defaultSize: { w: GRID_SIZE * 16, h: GRID_SIZE * 12 },
-  minSize: { w: GRID_SIZE * 8, h: GRID_SIZE * 6 },
-  component: SshTerminalWidget,
-});
diff --git a/plugins/homepage/src/frontend/widgets/SystemOverviewWidget.tsx b/plugins/homepage/src/frontend/widgets/SystemOverviewWidget.tsx
deleted file mode 100644
index cdd97e6d1..000000000
--- a/plugins/homepage/src/frontend/widgets/SystemOverviewWidget.tsx
+++ /dev/null
@@ -1,142 +0,0 @@
-import { useEffect, useState } from "react";
-import { Server } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { registerWidget } from "./WidgetRegistry";
-import type { SystemOverviewConfig, WidgetComponentProps } from "../types.js";
-import { GRID_SIZE } from "../types.js";
-import {
-  WidgetTitle,
-  getDatabaseHealth,
-  getUptime,
-  getVersionInfo,
-  runVisibleInterval,
-} from "@termix/plugin-sdk/ui";
-
-interface InfoRowProps {
-  label: string;
-  value: string | null | undefined;
-  valueColor?: string;
-}
-
-function InfoRow({ label, value, valueColor }: InfoRowProps) {
-  if (!value) return null;
-  return (
-    <div className="flex justify-between text-[10px] gap-2">
-      <span className="text-muted-foreground shrink-0">{label}</span>
-      <span
-        className="text-foreground truncate text-right font-medium"
-        style={valueColor ? { color: valueColor } : undefined}
-      >
-        {value}
-      </span>
-    </div>
-  );
-}
-
-function SystemOverviewWidget({
-  widget,
-  config,
-}: WidgetComponentProps<SystemOverviewConfig>) {
-  const { t } = useTranslation();
-  const { showVersion, showDbHealth, showUptime } = config;
-  const [version, setVersion] = useState<string | null>(null);
-  const [updateAvailable, setUpdateAvailable] = useState(false);
-  const [dbStatus, setDbStatus] = useState<string | null>(null);
-  const [uptimeFormatted, setUptimeFormatted] = useState<string | null>(null);
-
-  const fetchData = async () => {
-    try {
-      if (showVersion) {
-        // `checkRemote=false` makes /version return early with just
-        // {localVersion, status: "update_check_disabled"}, and the response has
-        // no `updateAvailable` field in either mode -- so the previous read was
-        // false twice over. `status` is what the endpoint actually answers with,
-        // and what the dashboard and profile badges already read.
-        const info = await getVersionInfo();
-        setVersion((info?.localVersion as string) ?? null);
-        setUpdateAvailable(info?.status === "requires_update");
-      }
-      if (showDbHealth) {
-        const health = await getDatabaseHealth();
-        setDbStatus((health?.status as string) ?? "unknown");
-      }
-      if (showUptime) {
-        const up = await getUptime();
-        setUptimeFormatted(up.formatted);
-      }
-    } catch {
-      /* ignore */
-    }
-  };
-
-  useEffect(() => {
-    fetchData();
-    return runVisibleInterval(() => {
-      void fetchData();
-    }, 300_000);
-  }, [showVersion, showDbHealth, showUptime]);
-
-  const accent =
-    getComputedStyle(document.documentElement)
-      .getPropertyValue("--accent-brand")
-      .trim() || "#f59145";
-
-  return (
-    <div className="flex flex-col w-full h-full overflow-hidden">
-      <WidgetTitle
-        title={widget.title}
-        icon={<Server size={11} />}
-        fallback="Termix"
-      />
-      <div className="flex flex-col gap-1.5 p-3 flex-1 overflow-auto">
-        {showVersion && (
-          <InfoRow
-            label={t("homepage.overviewVersion")}
-            value={version ?? t("common.loading")}
-            valueColor={updateAvailable ? "#f97316" : undefined}
-          />
-        )}
-        {showVersion && updateAvailable && (
-          <InfoRow
-            label={t("homepage.overviewUpdateLabel")}
-            value={t("homepage.overviewUpdateAvailable")}
-            valueColor="#f97316"
-          />
-        )}
-        {showDbHealth && (
-          <InfoRow
-            label={t("homepage.overviewDatabase")}
-            value={dbStatus ? dbStatus.toUpperCase() : t("common.loading")}
-            valueColor={
-              dbStatus === "ok" || dbStatus === "healthy"
-                ? accent
-                : dbStatus
-                  ? "#ef4444"
-                  : undefined
-            }
-          />
-        )}
-        {showUptime && (
-          <InfoRow
-            label={t("homepage.overviewUptime")}
-            value={uptimeFormatted ?? t("common.loading")}
-          />
-        )}
-      </div>
-    </div>
-  );
-}
-
-registerWidget<SystemOverviewConfig>({
-  id: "system_overview",
-  name: "System Overview",
-  description: "Termix version, database health, and uptime at a glance",
-  category: "system",
-  icon: <Server size={14} />,
-  defaultConfig: { showVersion: true, showDbHealth: true, showUptime: true },
-  defaultSize: { w: GRID_SIZE * 10, h: GRID_SIZE * 6 },
-  minSize: { w: GRID_SIZE * 4, h: GRID_SIZE * 3 },
-  component: SystemOverviewWidget,
-});
-
-export { SystemOverviewWidget };
diff --git a/plugins/homepage/src/frontend/widgets/TermixUptimeWidget.tsx b/plugins/homepage/src/frontend/widgets/TermixUptimeWidget.tsx
deleted file mode 100644
index 0a88793db..000000000
--- a/plugins/homepage/src/frontend/widgets/TermixUptimeWidget.tsx
+++ /dev/null
@@ -1,143 +0,0 @@
-import { useEffect, useState, useRef } from "react";
-import { Clock4 } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { registerWidget } from "./WidgetRegistry";
-import type { TermixUptimeConfig, WidgetComponentProps } from "../types.js";
-import { GRID_SIZE } from "../types.js";
-import {
-  WidgetTitle,
-  getUptime,
-  runVisibleInterval,
-} from "@termix/plugin-sdk/ui";
-
-function formatUptime(seconds: number): {
-  days: number;
-  hours: number;
-  minutes: number;
-  secs: number;
-} {
-  const days = Math.floor(seconds / 86400);
-  const hours = Math.floor((seconds % 86400) / 3600);
-  const minutes = Math.floor((seconds % 3600) / 60);
-  const secs = Math.floor(seconds % 60);
-  return { days, hours, minutes, secs };
-}
-
-function TermixUptimeWidget({
-  widget,
-  config,
-}: WidgetComponentProps<TermixUptimeConfig>) {
-  const { t } = useTranslation();
-  const { showDetailed } = config;
-  const [seconds, setSeconds] = useState<number | null>(null);
-  const [error, setError] = useState(false);
-  const baseRef = useRef<number | null>(null);
-  const startRef = useRef<number>(Date.now());
-
-  useEffect(() => {
-    getUptime()
-      .then((info) => {
-        baseRef.current = info.uptimeSeconds;
-        startRef.current = Date.now();
-        setSeconds(info.uptimeSeconds);
-      })
-      .catch(() => setError(true));
-
-    return runVisibleInterval(() => {
-      if (baseRef.current !== null) {
-        const elapsed = (Date.now() - startRef.current) / 1000;
-        setSeconds(Math.floor(baseRef.current + elapsed));
-      }
-    }, 1000);
-  }, []);
-
-  if (error) {
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-muted-foreground">
-        {t("homepage.uptimeUnavailable")}
-      </div>
-    );
-  }
-
-  if (seconds === null) {
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-muted-foreground">
-        {t("common.loading")}
-      </div>
-    );
-  }
-
-  const { days, hours, minutes, secs } = formatUptime(seconds);
-  const accent =
-    getComputedStyle(document.documentElement)
-      .getPropertyValue("--accent-brand")
-      .trim() || "#f59145";
-
-  return (
-    <div className="flex flex-col w-full h-full overflow-hidden">
-      <WidgetTitle title={widget.title} icon={<Clock4 size={11} />} />
-      <div className="flex flex-col items-center justify-center flex-1 gap-1 p-2">
-        <Clock4 size={14} className="text-muted-foreground" />
-        <div className="flex items-baseline gap-1 flex-wrap justify-center">
-          {days > 0 && (
-            <span
-              className="text-xl font-bold tabular-nums"
-              style={{ color: accent }}
-            >
-              {days}
-              <span className="text-xs font-normal text-muted-foreground ml-0.5">
-                d
-              </span>
-            </span>
-          )}
-          <span
-            className="text-xl font-bold tabular-nums"
-            style={{ color: accent }}
-          >
-            {String(hours).padStart(2, "0")}
-            <span className="text-xs font-normal text-muted-foreground ml-0.5">
-              h
-            </span>
-          </span>
-          <span
-            className="text-xl font-bold tabular-nums"
-            style={{ color: accent }}
-          >
-            {String(minutes).padStart(2, "0")}
-            <span className="text-xs font-normal text-muted-foreground ml-0.5">
-              m
-            </span>
-          </span>
-          {showDetailed && (
-            <span
-              className="text-xl font-bold tabular-nums"
-              style={{ color: accent }}
-            >
-              {String(secs).padStart(2, "0")}
-              <span className="text-xs font-normal text-muted-foreground ml-0.5">
-                s
-              </span>
-            </span>
-          )}
-        </div>
-        <span className="text-[10px] text-muted-foreground">
-          {t("homepage.uptimeLabel")}
-        </span>
-      </div>
-    </div>
-  );
-}
-
-registerWidget<TermixUptimeConfig>({
-  id: "termix_uptime",
-  name: "Termix Uptime",
-  description: "Shows how long the Termix server has been running",
-  category: "system",
-  icon: <Clock4 size={14} />,
-  defaultConfig: { showDetailed: false },
-  defaultSize: { w: GRID_SIZE * 8, h: GRID_SIZE * 4 },
-  minSize: { w: GRID_SIZE * 3, h: GRID_SIZE * 2 },
-  component: TermixUptimeWidget,
-});
-
-export { TermixUptimeWidget };
diff --git a/plugins/homepage/src/frontend/widgets/TextBannerWidget.tsx b/plugins/homepage/src/frontend/widgets/TextBannerWidget.tsx
deleted file mode 100644
index b3bfb80d0..000000000
--- a/plugins/homepage/src/frontend/widgets/TextBannerWidget.tsx
+++ /dev/null
@@ -1,59 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Type } from "lucide-react";
-import { registerWidget } from "./WidgetRegistry";
-import type { TextBannerConfig, WidgetComponentProps } from "../types.js";
-import { GRID_SIZE } from "../types.js";
-
-const FONT_SIZE_MAP = {
-  sm: "text-xs",
-  md: "text-sm",
-  lg: "text-base",
-  xl: "text-xl",
-};
-
-const FONT_WEIGHT_MAP = {
-  normal: "font-normal",
-  semibold: "font-semibold",
-  bold: "font-bold",
-};
-
-const TEXT_ALIGN_MAP = {
-  left: "text-left",
-  center: "text-center",
-  right: "text-right",
-};
-
-function TextBannerWidget({ config }: WidgetComponentProps<TextBannerConfig>) {
-  const { t } = useTranslation();
-  const { text, fontSize, textAlign, fontWeight, backgroundColor } = config;
-
-  return (
-    <div
-      className={`flex items-center w-full h-full px-3 py-2 overflow-hidden ${FONT_SIZE_MAP[fontSize]} ${FONT_WEIGHT_MAP[fontWeight]} ${TEXT_ALIGN_MAP[textAlign]}`}
-      style={backgroundColor ? { background: backgroundColor } : undefined}
-    >
-      <span className="whitespace-pre-wrap break-words w-full text-foreground leading-tight">
-        {text || t("homepage.bannerTextPlaceholder")}
-      </span>
-    </div>
-  );
-}
-
-registerWidget<TextBannerConfig>({
-  id: "text_banner",
-  name: "Text Banner",
-  description: "A styled text label for sections and headings",
-  category: "info",
-  icon: <Type size={14} />,
-  defaultConfig: {
-    text: "",
-    fontSize: "lg",
-    textAlign: "center",
-    fontWeight: "semibold",
-  },
-  defaultSize: { w: GRID_SIZE * 14, h: GRID_SIZE * 3 },
-  minSize: { w: GRID_SIZE * 3, h: GRID_SIZE * 2 },
-  component: TextBannerWidget,
-});
-
-export { TextBannerWidget };
diff --git a/plugins/homepage/src/frontend/widgets/WeatherWidget.tsx b/plugins/homepage/src/frontend/widgets/WeatherWidget.tsx
deleted file mode 100644
index 740e92aee..000000000
--- a/plugins/homepage/src/frontend/widgets/WeatherWidget.tsx
+++ /dev/null
@@ -1,200 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { useEffect, useState } from "react";
-import {
-  Cloud,
-  CloudRain,
-  Sun,
-  CloudSnow,
-  Wind,
-  Thermometer,
-} from "lucide-react";
-import { registerWidget } from "./WidgetRegistry";
-import type { WeatherConfig, WidgetComponentProps } from "../types.js";
-import { GRID_SIZE } from "../types.js";
-
-import { WidgetTitle, runVisibleInterval } from "@termix/plugin-sdk/ui";
-
-interface WttrCurrent {
-  temp_C: string;
-  FeelsLikeC: string;
-  weatherDesc: { value: string }[];
-  weatherCode: string;
-}
-
-interface WttrDay {
-  mintempC: string;
-  maxtempC: string;
-  hourly: { weatherDesc: { value: string }[]; weatherCode: string }[];
-}
-
-interface WttrResponse {
-  nearest_area: {
-    areaName: { value: string }[];
-    country: { value: string }[];
-  }[];
-  current_condition: WttrCurrent[];
-  weather: WttrDay[];
-}
-
-function weatherIcon(code: string, size = 20) {
-  const n = Number(code);
-  if (n === 113) return <Sun size={size} className="text-yellow-400" />;
-  if (n <= 119) return <Cloud size={size} className="text-gray-400" />;
-  if (n <= 143) return <Cloud size={size} className="text-gray-400" />;
-  if (n <= 266) return <CloudRain size={size} className="text-blue-400" />;
-  if (n <= 335) return <CloudSnow size={size} className="text-blue-200" />;
-  if (n <= 389) return <CloudRain size={size} className="text-blue-500" />;
-  return <Wind size={size} className="text-muted-foreground" />;
-}
-
-function celsiusToF(c: number) {
-  return Math.round((c * 9) / 5 + 32);
-}
-
-function WeatherWidget({
-  widget,
-  config,
-}: WidgetComponentProps<WeatherConfig>) {
-  const { t } = useTranslation();
-  const { location, unit, showForecast } = config;
-  const [data, setData] = useState<WttrResponse | null>(null);
-  const [error, setError] = useState(false);
-
-  useEffect(() => {
-    if (!location) return;
-    let cancelled = false;
-    const fetchWeather = async () => {
-      try {
-        setError(false);
-        const res = await fetch(
-          `https://wttr.in/${encodeURIComponent(location)}?format=j1`,
-        );
-        if (!res.ok) throw new Error("bad response");
-        const json: WttrResponse = await res.json();
-        if (!cancelled) setData(json);
-      } catch {
-        if (!cancelled) setError(true);
-      }
-    };
-    fetchWeather();
-    const stop = runVisibleInterval(
-      () => {
-        void fetchWeather();
-      },
-      10 * 60 * 1000,
-    );
-    return () => {
-      cancelled = true;
-      stop();
-    };
-  }, [location]);
-
-  if (!location) {
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-muted-foreground/60 p-3 text-center">
-        {t("homepage.configureLocation")}
-      </div>
-    );
-  }
-
-  if (error) {
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-destructive/70 p-3 text-center">
-        {t("homepage.weatherLoadFailed", { location })}
-      </div>
-    );
-  }
-
-  if (!data) {
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-muted-foreground/50">
-        {t("common.loading")}
-      </div>
-    );
-  }
-
-  const current = data.current_condition[0];
-  const area = data.nearest_area[0];
-  const cityName = area?.areaName[0]?.value ?? location;
-  const tempC = Number(current.temp_C);
-  const feelsC = Number(current.FeelsLikeC);
-  const displayTemp = unit === "F" ? `${celsiusToF(tempC)}°F` : `${tempC}°C`;
-  const displayFeels = unit === "F" ? `${celsiusToF(feelsC)}°F` : `${feelsC}°C`;
-  const desc = current.weatherDesc[0]?.value ?? "";
-  const code = current.weatherCode;
-
-  return (
-    <div className="flex flex-col w-full h-full overflow-hidden">
-      <WidgetTitle title={widget.title} icon={<Sun size={11} />} />
-      <div className="flex flex-col flex-1 p-3 gap-2 overflow-auto">
-        {/* Current conditions */}
-        <div className="flex items-center gap-3 flex-1 min-h-0">
-          <div className="shrink-0">{weatherIcon(code, 32)}</div>
-          <div className="flex flex-col min-w-0">
-            <span className="text-2xl font-bold text-foreground leading-none">
-              {displayTemp}
-            </span>
-            <span className="text-[10px] text-muted-foreground truncate">
-              {desc}
-            </span>
-            <span className="text-[10px] text-muted-foreground/70">
-              {t("homepage.feelsLike", { temperature: displayFeels })}
-            </span>
-          </div>
-        </div>
-        <div className="flex items-center gap-1">
-          <Thermometer
-            size={10}
-            className="text-muted-foreground/60 shrink-0"
-          />
-          <span className="text-[11px] font-semibold text-foreground truncate">
-            {cityName}
-          </span>
-        </div>
-
-        {/* 3-day forecast */}
-        {showForecast && data.weather.length >= 3 && (
-          <div className="flex gap-1 border-t border-border pt-2 mt-auto shrink-0">
-            {data.weather.slice(0, 3).map((day, i) => {
-              const hourly = day.hourly[4] ?? day.hourly[0];
-              const minC = Number(day.mintempC);
-              const maxC = Number(day.maxtempC);
-              const lo = unit === "F" ? `${celsiusToF(minC)}°` : `${minC}°`;
-              const hi = unit === "F" ? `${celsiusToF(maxC)}°` : `${maxC}°`;
-              const dayLabel = i === 0 ? "Today" : i === 1 ? "Tmrw" : "+2";
-              return (
-                <div
-                  key={i}
-                  className="flex-1 flex flex-col items-center gap-0.5"
-                >
-                  <span className="text-[9px] text-muted-foreground/70">
-                    {dayLabel}
-                  </span>
-                  {weatherIcon(hourly?.weatherCode ?? "113", 12)}
-                  <span className="text-[9px] text-foreground">{hi}</span>
-                  <span className="text-[9px] text-muted-foreground/60">
-                    {lo}
-                  </span>
-                </div>
-              );
-            })}
-          </div>
-        )}
-      </div>
-    </div>
-  );
-}
-
-registerWidget<WeatherConfig>({
-  id: "weather",
-  name: "Weather",
-  description: "Live weather for any location",
-  category: "info",
-  icon: <Sun size={14} />,
-  defaultConfig: { location: "", unit: "C", showForecast: true },
-  defaultSize: { w: GRID_SIZE * 10, h: GRID_SIZE * 7 },
-  minSize: { w: GRID_SIZE * 2, h: GRID_SIZE * 2 },
-  component: WeatherWidget,
-});
-
-export { WeatherWidget };
diff --git a/plugins/homepage/src/frontend/widgets/WidgetRegistry.ts b/plugins/homepage/src/frontend/widgets/WidgetRegistry.ts
deleted file mode 100644
index 92f5f3e73..000000000
--- a/plugins/homepage/src/frontend/widgets/WidgetRegistry.ts
+++ /dev/null
@@ -1,71 +0,0 @@
-import {
-  getExtension,
-  useExtensions,
-  type ExtensionContribution,
-} from "@termix/plugin-sdk/frontend";
-import { useMemo } from "react";
-import type { WidgetTypeDefinition, WidgetTypeId } from "../types.js";
-
-/**
- * Other plugins add widgets with app.registerExtension(WIDGET_POINT, ...),
- * putting the widget under components.view and its edit form under
- * components.editForm. Core only stores the list, so a plugin's widgets
- * stay registered while this plugin is off.
- */
-export const WIDGET_POINT = "homepage.widgets";
-
-/**
- * Each widget module calls this at import time (before activate(app) runs),
- * so the definitions are queued here and registered from activate.
- */
-const queued: WidgetTypeDefinition[] = [];
-
-export function registerWidget<C>(def: WidgetTypeDefinition<C>): void {
-  queued.push(def as unknown as WidgetTypeDefinition);
-}
-
-/** Called once from activate(app); drains the queue. */
-export function drainQueuedWidgets(): WidgetTypeDefinition[] {
-  return queued.splice(0, queued.length);
-}
-
-export function toExtension(def: WidgetTypeDefinition): ExtensionContribution {
-  const { component, editFormComponent, ...rest } = def;
-  return {
-    ...rest,
-    components: editFormComponent
-      ? { view: component, editForm: editFormComponent }
-      : { view: component },
-  };
-}
-
-function toDefinition(
-  extension: ExtensionContribution | undefined,
-): WidgetTypeDefinition | undefined {
-  const view = extension?.components?.view;
-  if (!extension || !view) return undefined;
-  const { components, ...rest } = extension;
-  return {
-    ...(rest as unknown as WidgetTypeDefinition),
-    component: view,
-    editFormComponent: components?.editForm,
-    labelComponent: components?.label,
-  };
-}
-
-export function getWidgetType(
-  id: WidgetTypeId,
-): WidgetTypeDefinition | undefined {
-  return toDefinition(getExtension(WIDGET_POINT, id));
-}
-
-export function useWidgetTypes(): WidgetTypeDefinition[] {
-  const extensions = useExtensions(WIDGET_POINT);
-  return useMemo(
-    () =>
-      extensions
-        .map(toDefinition)
-        .filter((def): def is WidgetTypeDefinition => !!def),
-    [extensions],
-  );
-}
diff --git a/plugins/homepage/src/frontend/widgets/WidgetShell.tsx b/plugins/homepage/src/frontend/widgets/WidgetShell.tsx
deleted file mode 100644
index 3e93e1806..000000000
--- a/plugins/homepage/src/frontend/widgets/WidgetShell.tsx
+++ /dev/null
@@ -1,169 +0,0 @@
-import { useState } from "react";
-import { Pencil, Trash2, GripVertical } from "lucide-react";
-import type { CanvasWidget } from "../types.js";
-import { getWidgetType, useWidgetTypes } from "./WidgetRegistry";
-import { PluginViewPlaceholder } from "@termix/plugin-sdk/ui";
-
-interface WidgetShellProps {
-  widget: CanvasWidget;
-  isLocked?: boolean;
-  isReadOnly?: boolean;
-  isDragging?: boolean;
-  isResizing?: boolean;
-  onStartDrag?: (e: React.MouseEvent, widget: CanvasWidget) => void;
-  onStartResize?: (e: React.MouseEvent, widget: CanvasWidget) => void;
-  onDelete?: (id: number) => void;
-  onEdit?: (id: number) => void;
-  onConfigUpdate?: (config: Record<string, unknown>) => void;
-  children?: React.ReactNode;
-}
-
-export function WidgetShell({
-  widget,
-  isLocked,
-  isReadOnly,
-  isDragging,
-  isResizing,
-  onStartDrag,
-  onStartResize,
-  onDelete,
-  onEdit,
-  onConfigUpdate,
-  children,
-}: WidgetShellProps) {
-  const [hovered, setHovered] = useState(false);
-  // A plugin widget appears once its plugin starts.
-  useWidgetTypes();
-  const typeDef = getWidgetType(widget.typeId);
-  const showControls =
-    hovered && !isLocked && !isReadOnly && !isDragging && !isResizing;
-
-  const WidgetComponent = typeDef?.component;
-
-  return (
-    <div
-      data-widget={widget.id}
-      className={`absolute overflow-hidden select-none transition-shadow duration-150 ${
-        hovered && !isLocked && !isReadOnly
-          ? "ring-1 ring-accent-brand/30 shadow-md"
-          : "ring-1 ring-border/60"
-      }`}
-      style={{
-        left: widget.x,
-        top: widget.y,
-        width: widget.w,
-        height: widget.h,
-        background: "var(--color-card)",
-        opacity: isDragging ? 0.85 : 1,
-        transform: isDragging ? "scale(1.02)" : undefined,
-        boxShadow:
-          isDragging || isResizing ? "0 8px 32px rgba(0,0,0,0.25)" : undefined,
-        cursor:
-          isLocked || isReadOnly ? "default" : isDragging ? "grabbing" : "grab",
-      }}
-      onWheel={(e) => {
-        // Find the nearest scrollable ancestor within this widget
-        let el = e.target as HTMLElement | null;
-        while (el && el !== e.currentTarget) {
-          const canScrollY = el.scrollHeight > el.clientHeight;
-          const canScrollX = el.scrollWidth > el.clientWidth;
-          if (canScrollY || canScrollX) {
-            e.stopPropagation();
-            break;
-          }
-          el = el.parentElement;
-        }
-      }}
-      onMouseEnter={() => setHovered(true)}
-      onMouseLeave={() => setHovered(false)}
-      onMouseDown={
-        !isLocked && !isReadOnly ? (e) => onStartDrag?.(e, widget) : undefined
-      }
-    >
-      {/* Widget content */}
-      {children ??
-        (WidgetComponent ? (
-          <WidgetComponent
-            widget={widget}
-            config={widget.config as Record<string, unknown>}
-            isReadOnly={isReadOnly}
-            onConfigUpdate={onConfigUpdate}
-          />
-        ) : (
-          <PluginViewPlaceholder kind="card" viewId={widget.typeId} compact />
-        ))}
-
-      {/* Hover controls */}
-      {showControls && (
-        <>
-          {/* Top-right action bar */}
-          <div
-            className="absolute top-1 right-1 flex items-center gap-0.5 z-10"
-            style={{ opacity: hovered ? 1 : 0, transition: "opacity 0.1s" }}
-          >
-            <div className="p-1 text-muted-foreground/40 cursor-grab">
-              <GripVertical size={10} />
-            </div>
-            <button
-              className="p-1 bg-background/90 hover:bg-background border border-border text-muted-foreground hover:text-foreground transition-colors"
-              onMouseDown={(e) => e.stopPropagation()}
-              onClick={(e) => {
-                e.stopPropagation();
-                onEdit?.(widget.id);
-              }}
-              title="Edit"
-            >
-              <Pencil size={10} />
-            </button>
-            <button
-              className="p-1 bg-background/90 hover:bg-destructive border border-border text-muted-foreground hover:text-destructive-foreground transition-colors"
-              onMouseDown={(e) => e.stopPropagation()}
-              onClick={(e) => {
-                e.stopPropagation();
-                onDelete?.(widget.id);
-              }}
-              title="Delete"
-            >
-              <Trash2 size={10} />
-            </button>
-          </div>
-
-          {/* Resize handle — bottom right */}
-          <div
-            className="absolute bottom-0 right-0 w-5 h-5 cursor-se-resize z-10 flex items-end justify-end pb-0.5 pr-0.5"
-            onMouseDown={(e) => {
-              e.stopPropagation();
-              onStartResize?.(e, widget);
-            }}
-          >
-            <svg
-              width="10"
-              height="10"
-              viewBox="0 0 10 10"
-              className="text-muted-foreground/50"
-            >
-              <line
-                x1="2"
-                y1="10"
-                x2="10"
-                y2="2"
-                stroke="currentColor"
-                strokeWidth="1.5"
-                strokeLinecap="round"
-              />
-              <line
-                x1="6"
-                y1="10"
-                x2="10"
-                y2="6"
-                stroke="currentColor"
-                strokeWidth="1.5"
-                strokeLinecap="round"
-              />
-            </svg>
-          </div>
-        </>
-      )}
-    </div>
-  );
-}
diff --git a/plugins/homepage/tests/backend/helpers.ts b/plugins/homepage/tests/backend/helpers.ts
deleted file mode 100644
index 9ef16edc1..000000000
--- a/plugins/homepage/tests/backend/helpers.ts
+++ /dev/null
@@ -1,101 +0,0 @@
-import http from "node:http";
-import type { PluginFetchInit } from "@termix/plugin-sdk/backend";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-export const manifest = manifestJson as unknown as PluginManifest;
-
-export interface TestServer {
-  db: TestDb;
-  mock: MockPluginContext;
-  request: (
-    method: string,
-    path: string,
-    options?: { user?: string; body?: unknown },
-    // Route bodies vary per test; asserting on them is the point.
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any }>;
-  close: () => Promise<void>;
-}
-
-/**
- * The plugin activated against a real in-memory database, its router mounted
- * on an express app the way core mounts it: JSON parsed, the acting user set
- * from the request, everything else left to the plugin.
- */
-export async function startServer(
-  options: {
-    permissions?: string[];
-    users?: string[];
-    fetch?: (url: string, init?: PluginFetchInit) => Promise<Response>;
-  } = {},
-): Promise<TestServer> {
-  const db = await createTestDb(pluginDir);
-  for (const user of options.users ?? ["user-1", "user-2"]) {
-    db.sqlite
-      .prepare("INSERT INTO users (id, username) VALUES (?, ?)")
-      .run(user, user);
-  }
-
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    permissions: options.permissions ?? ["homepage.use"],
-    fetch: options.fetch,
-  });
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") ?? undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    db,
-    mock,
-    async request(method, path, { user = "user-1", body: given } = {}) {
-      const body = method === "GET" ? undefined : given;
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        headers: {
-          "x-test-user": user,
-          ...(body !== undefined ? { "content-type": "application/json" } : {}),
-        },
-        body: body !== undefined ? JSON.stringify(body) : undefined,
-      });
-      const contentType = response.headers.get("content-type") ?? "";
-      if (!contentType.includes("json")) {
-        return { status: response.status, body: await response.text() };
-      }
-      const text = await response.text();
-      return { status: response.status, body: text ? JSON.parse(text) : null };
-    },
-    async close() {
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-      db.close();
-    },
-  };
-}
diff --git a/plugins/homepage/tests/backend/layout-sync.test.ts b/plugins/homepage/tests/backend/layout-sync.test.ts
deleted file mode 100644
index 7660c8e94..000000000
--- a/plugins/homepage/tests/backend/layout-sync.test.ts
+++ /dev/null
@@ -1,84 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { startServer, type TestServer } from "./helpers.js";
-
-let server: TestServer | undefined;
-afterEach(async () => {
-  await server?.close();
-  server = undefined;
-});
-
-describe("homepage layout sync", () => {
-  it("maps widget ids across devices and keeps canvas geometry", async () => {
-    server = await startServer();
-    const items = server.mock.syncEntities.find(
-      (entry) => entry.type === "homepageItems",
-    )!;
-    const entity = server.mock.syncEntities.find(
-      (entry) => entry.type === "homepageLayouts",
-    )!;
-    expect(entity.singleton).toBe(true);
-    expect(entity.order).toBeGreaterThan(items.order!);
-    const layout = {
-      entries: [{ itemId: 7, x: 10, y: 20, w: 300, h: 200, zOrder: 2 }],
-      pan: { x: 5, y: -3 },
-      zoom: 0.75,
-    };
-    const exported = await entity.serialize!(
-      { layout: JSON.stringify(layout) },
-      async (type, id) =>
-        type === "homepageItems" && id === 7 ? "widget-sync-id" : null,
-    );
-    expect(JSON.parse(exported.layout as string).entries[0].itemId).toBe(
-      "widget-sync-id",
-    );
-    const imported = await entity.deserialize!(exported, async (type, id) =>
-      type === "homepageItems" && id === "widget-sync-id" ? 91 : null,
-    );
-    expect(JSON.parse(imported.layout as string)).toEqual({
-      ...layout,
-      entries: [{ ...layout.entries[0], itemId: 91 }],
-    });
-  });
-
-  it("drops unavailable widgets and refuses numeric wire ids", async () => {
-    server = await startServer();
-    const entity = server.mock.syncEntities.find(
-      (entry) => entry.type === "homepageLayouts",
-    )!;
-    const resolveId = vi.fn(async () => null);
-    const result = await entity.deserialize!(
-      {
-        layout: JSON.stringify({
-          entries: [
-            { itemId: "deleted", x: 1 },
-            { itemId: 7, x: 2 },
-          ],
-          zoom: 1,
-        }),
-      },
-      resolveId,
-    );
-    expect(JSON.parse(result.layout as string)).toEqual({
-      entries: [],
-      zoom: 1,
-    });
-    expect(resolveId).toHaveBeenCalledExactlyOnceWith(
-      "homepageItems",
-      "deleted",
-    );
-  });
-
-  it("keeps an empty layout and rejects malformed JSON instead of copying local ids", async () => {
-    server = await startServer();
-    const entity = server.mock.syncEntities.find(
-      (entry) => entry.type === "homepageLayouts",
-    )!;
-    const resolve = vi.fn(async () => null);
-    await expect(entity.serialize!({ layout: "{}" }, resolve)).resolves.toEqual(
-      { layout: "{}" },
-    );
-    await expect(
-      entity.serialize!({ layout: "broken" }, resolve),
-    ).rejects.toThrow();
-  });
-});
diff --git a/plugins/homepage/tests/backend/migrations.test.ts b/plugins/homepage/tests/backend/migrations.test.ts
deleted file mode 100644
index 8c16cae9d..000000000
--- a/plugins/homepage/tests/backend/migrations.test.ts
+++ /dev/null
@@ -1,176 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { createTestDb, type TestDb } from "@termix/plugin-sdk/testing";
-import { pluginDir } from "./helpers";
-
-// The three tables as core's SQLite bootstrap created them before 2.9.0,
-// plus the homepage_items index performance-indexes.ts added.
-const LEGACY_DDL = `
-  CREATE TABLE homepage_items (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-    type_id TEXT NOT NULL,
-    title TEXT,
-    config TEXT NOT NULL DEFAULT '{}',
-    folder_id INTEGER,
-    sync_id TEXT UNIQUE,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
-  );
-  CREATE INDEX idx_homepage_items_user_id ON homepage_items (user_id);
-
-  CREATE TABLE homepage_layouts (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL UNIQUE REFERENCES users(id) ON DELETE CASCADE,
-    layout TEXT NOT NULL DEFAULT '{}',
-    updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
-  );
-
-  CREATE TABLE dashboard_service_links (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-    label TEXT NOT NULL,
-    url TEXT NOT NULL,
-    "order" INTEGER NOT NULL DEFAULT 0,
-    sync_id TEXT UNIQUE,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
-  );
-`;
-
-let db: TestDb | null = null;
-
-afterEach(() => {
-  db?.close();
-  db = null;
-});
-
-const tableExists = (name: string) =>
-  !!db!.sqlite
-    .prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?")
-    .get(name);
-
-const indexOn = (table: string) =>
-  (
-    db!.sqlite
-      .prepare(
-        "SELECT name FROM sqlite_master WHERE type = 'index' AND tbl_name = ? AND name NOT LIKE 'sqlite_%'",
-      )
-      .all(table) as { name: string }[]
-  ).map((row) => row.name);
-
-describe("adopting the homepage tables", () => {
-  it("keeps every existing row when the legacy tables are there", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1'), ('user-2')");
-        sqlite.exec(LEGACY_DDL);
-        sqlite
-          .prepare(
-            "INSERT INTO homepage_items (user_id, type_id, title, config, sync_id) VALUES (?, ?, ?, ?, ?)",
-          )
-          .run("user-1", "clock", "My Clock", '{"format":"24h"}', "sync-item");
-        sqlite
-          .prepare(
-            "INSERT INTO homepage_layouts (user_id, layout) VALUES (?, ?)",
-          )
-          .run("user-1", '{"entries":[],"pan":{"x":0,"y":0},"zoom":1}');
-        sqlite
-          .prepare(
-            "INSERT INTO dashboard_service_links (user_id, label, url, sync_id) VALUES (?, ?, ?, ?)",
-          )
-          .run("user-1", "Grafana", "https://grafana.local", "sync-link");
-      },
-    });
-
-    expect(db.applied).toEqual(["0001_adopt_homepage_tables"]);
-    expect(tableExists("homepage_items")).toBe(false);
-    expect(tableExists("homepage_layouts")).toBe(false);
-    expect(tableExists("dashboard_service_links")).toBe(false);
-    expect(tableExists("p_homepage_homepage_items")).toBe(true);
-    expect(tableExists("p_homepage_homepage_layouts")).toBe(true);
-    expect(tableExists("p_homepage_dashboard_service_links")).toBe(true);
-
-    const items = db.sqlite
-      .prepare(
-        "SELECT user_id, type_id, title, sync_id FROM p_homepage_homepage_items",
-      )
-      .all();
-    expect(items).toEqual([
-      {
-        user_id: "user-1",
-        type_id: "clock",
-        title: "My Clock",
-        sync_id: "sync-item",
-      },
-    ]);
-
-    const layouts = db.sqlite
-      .prepare("SELECT user_id, layout FROM p_homepage_homepage_layouts")
-      .all();
-    expect(layouts).toEqual([
-      {
-        user_id: "user-1",
-        layout: '{"entries":[],"pan":{"x":0,"y":0},"zoom":1}',
-      },
-    ]);
-
-    const links = db.sqlite
-      .prepare(
-        "SELECT user_id, label, url, sync_id FROM p_homepage_dashboard_service_links",
-      )
-      .all();
-    expect(links).toEqual([
-      {
-        user_id: "user-1",
-        label: "Grafana",
-        url: "https://grafana.local",
-        sync_id: "sync-link",
-      },
-    ]);
-
-    expect(indexOn("p_homepage_homepage_items")).toEqual([
-      "idx_homepage_items_user_id",
-    ]);
-    expect(indexOn("p_homepage_dashboard_service_links")).toEqual([
-      "idx_dashboard_service_links_user_id",
-    ]);
-  });
-
-  it("creates the tables fresh when there are no legacy ones", async () => {
-    db = await createTestDb(pluginDir);
-
-    expect(tableExists("p_homepage_homepage_items")).toBe(true);
-    expect(tableExists("p_homepage_homepage_layouts")).toBe(true);
-    expect(tableExists("p_homepage_dashboard_service_links")).toBe(true);
-    expect(
-      db.sqlite.prepare("SELECT * FROM p_homepage_homepage_items").all(),
-    ).toEqual([]);
-  });
-
-  it("removes a user's rows when the user is deleted", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1'), ('user-2')");
-      },
-    });
-    db.sqlite
-      .prepare(
-        "INSERT INTO p_homepage_homepage_items (user_id, type_id) VALUES (?, ?)",
-      )
-      .run("user-1", "clock");
-    db.sqlite
-      .prepare(
-        "INSERT INTO p_homepage_homepage_items (user_id, type_id) VALUES (?, ?)",
-      )
-      .run("user-2", "clock");
-
-    db.sqlite.exec("DELETE FROM users WHERE id = 'user-1'");
-
-    const remaining = (
-      db.sqlite
-        .prepare("SELECT user_id FROM p_homepage_homepage_items")
-        .all() as { user_id: string }[]
-    ).map((row) => row.user_id);
-    expect(remaining).toEqual(["user-2"]);
-  });
-});
diff --git a/plugins/homepage/tests/backend/outbound-routes.test.ts b/plugins/homepage/tests/backend/outbound-routes.test.ts
deleted file mode 100644
index 53521404e..000000000
--- a/plugins/homepage/tests/backend/outbound-routes.test.ts
+++ /dev/null
@@ -1,195 +0,0 @@
-import type { PluginFetch } from "@termix/plugin-sdk/backend";
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { startServer, type TestServer } from "./helpers";
-
-let server: TestServer;
-
-afterEach(async () => {
-  await server.close();
-});
-
-function jsonResponse(body: unknown, init: ResponseInit = {}): Response {
-  return new Response(JSON.stringify(body), {
-    status: 200,
-    headers: { "content-type": "application/json" },
-    ...init,
-  });
-}
-
-describe("outbound routes go through ctx.fetch", () => {
-  it("proxy: returns the parsed JSON body from ctx.fetch", async () => {
-    server = await startServer({
-      fetch: async () => jsonResponse({ hello: "world" }),
-    });
-    const res = await server.request(
-      "GET",
-      "/proxy?url=https://example.com/api",
-    );
-    expect(res.status).toBe(200);
-    expect(res.body).toEqual({ hello: "world" });
-  });
-
-  it("proxy: every request to a private address is refused by the SSRF guard, never reaching ctx.fetch's caller", async () => {
-    // The route never gets to call the stub for a rejected URL because
-    // safeOutboundFetch (behind ctx.fetch) throws before any response comes
-    // back; simulate that by having the stub itself reject, matching what
-    // the real safeOutboundFetch does for a blocked host.
-    server = await startServer({
-      fetch: async () => {
-        throw new Error("Private destinations are not allowed");
-      },
-    });
-    const res = await server.request(
-      "GET",
-      "/proxy?url=http://127.0.0.1:9999/secret",
-    );
-    expect(res.status).toBe(500);
-  });
-
-  it("proxy: rejects a non-JSON response", async () => {
-    server = await startServer({
-      fetch: async () =>
-        new Response("<html></html>", {
-          status: 200,
-          headers: { "content-type": "text/html" },
-        }),
-    });
-    const res = await server.request("GET", "/proxy?url=https://example.com");
-    expect(res.status).toBe(400);
-  });
-
-  it("ping: reports ok for a 2xx response", async () => {
-    server = await startServer({
-      fetch: async () => new Response(null, { status: 200 }),
-    });
-    const res = await server.request("GET", "/ping?url=https://example.com");
-    expect(res.status).toBe(200);
-    expect(res.body.ok).toBe(true);
-  });
-
-  it("rss: parses items from the feed ctx.fetch returned", async () => {
-    const xml = `<?xml version="1.0"?><rss><channel>
-      <item><title>Hello</title><link>https://example.com/1</link></item>
-    </channel></rss>`;
-    server = await startServer({
-      fetch: async () =>
-        new Response(xml, {
-          status: 200,
-          headers: { "content-type": "application/xml" },
-        }),
-    });
-    const res = await server.request(
-      "GET",
-      "/rss?url=https://example.com/feed",
-    );
-    expect(res.status).toBe(200);
-    expect(res.body).toHaveLength(1);
-    expect(res.body[0].title).toBe("Hello");
-  });
-
-  it("rejects a request with no url", async () => {
-    server = await startServer();
-    expect((await server.request("GET", "/ping")).status).toBe(400);
-    expect((await server.request("GET", "/rss")).status).toBe(400);
-    expect((await server.request("GET", "/proxy")).status).toBe(400);
-    expect((await server.request("GET", "/favicon")).status).toBe(400);
-  });
-});
-
-describe("ping reachability policy", () => {
-  it.each([200, 302, 307, 401, 403, 404, 503])(
-    "classifies HTTP %s without following redirects",
-    async (status) => {
-      const fetch = vi.fn<PluginFetch>(
-        async () => new Response(null, { status }),
-      );
-      server = await startServer({ fetch });
-      const result = await server.request(
-        "GET",
-        "/ping?url=https://example.com",
-      );
-      expect(result.body).toMatchObject({
-        ok: status < 400 || status === 401 || status === 403,
-        statusCode: status,
-      });
-      expect(fetch).toHaveBeenCalledWith(
-        "https://example.com",
-        expect.objectContaining({ redirect: "manual", allowPrivateHosts: [] }),
-      );
-    },
-  );
-
-  it("retries HEAD-not-supported as GET with the same policy", async () => {
-    const fetch = vi
-      .fn()
-      .mockResolvedValueOnce(new Response(null, { status: 405 }))
-      .mockResolvedValueOnce(new Response(null, { status: 401 }));
-    server = await startServer({ fetch });
-    const result = await server.request("GET", "/ping?url=https://example.com");
-    expect(result.body.ok).toBe(true);
-    expect(fetch.mock.calls.map((call) => call[1].method)).toEqual([
-      "HEAD",
-      "GET",
-    ]);
-    expect(
-      fetch.mock.calls.every((call) => call[1].redirect === "manual"),
-    ).toBe(true);
-  });
-
-  it.each(["ping", "proxy"])(
-    "%s uses only the admin allowlist and invalidates cached results on revocation",
-    async (route) => {
-      const fetch = vi.fn<PluginFetch>(async () =>
-        jsonResponse({ alive: true }),
-      );
-      server = await startServer({ fetch });
-      await server.mock.ctx.settings.set(
-        "privateEndpoints",
-        "SERVICE.LAN,127.0.0.1\nservice.lan\nhttps://invalid.example",
-      );
-      const path = `/${route}?url=http://service.lan`;
-      await server.request("GET", path);
-      expect(fetch).toHaveBeenLastCalledWith(
-        "http://service.lan",
-        expect.objectContaining({
-          allowPrivateHosts: ["service.lan", "127.0.0.1"],
-        }),
-      );
-      await server.request("GET", path);
-      expect(fetch).toHaveBeenCalledTimes(1);
-      await server.mock.ctx.settings.set("privateEndpoints", "");
-      await server.request("GET", path);
-      expect(fetch).toHaveBeenCalledTimes(2);
-      expect(fetch).toHaveBeenLastCalledWith(
-        "http://service.lan",
-        expect.objectContaining({ allowPrivateHosts: [] }),
-      );
-    },
-  );
-
-  it("uses custom CA trust only for allowlisted hosts and refreshes cached results on CA change", async () => {
-    const fetch = vi.fn<PluginFetch>(async () => jsonResponse({ alive: true }));
-    server = await startServer({ fetch });
-    await server.mock.ctx.settings.set("privateEndpoints", "service.lan");
-    await server.mock.ctx.settings.set(
-      "privateCertificateAuthority",
-      "PEM ONE",
-    );
-    await server.request("GET", "/ping?url=https://service.lan");
-    expect(fetch).toHaveBeenLastCalledWith(
-      "https://service.lan",
-      expect.objectContaining({ tls: { ca: "PEM ONE" } }),
-    );
-    await server.mock.ctx.settings.set(
-      "privateCertificateAuthority",
-      "PEM TWO",
-    );
-    await server.request("GET", "/ping?url=https://service.lan");
-    expect(fetch).toHaveBeenLastCalledWith(
-      "https://service.lan",
-      expect.objectContaining({ tls: { ca: "PEM TWO" } }),
-    );
-    await server.request("GET", "/ping?url=https://example.com");
-    expect(fetch.mock.calls.at(-1)?.[1]).not.toHaveProperty("tls");
-  });
-});
diff --git a/plugins/homepage/tests/backend/routes.test.ts b/plugins/homepage/tests/backend/routes.test.ts
deleted file mode 100644
index cf404cce0..000000000
--- a/plugins/homepage/tests/backend/routes.test.ts
+++ /dev/null
@@ -1,124 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import { startServer, type TestServer } from "./helpers";
-
-let server: TestServer;
-
-afterEach(async () => {
-  await server.close();
-});
-
-describe("homepage item routes", () => {
-  beforeEach(async () => {
-    server = await startServer();
-  });
-
-  it("creates, lists, updates and deletes an item", async () => {
-    const created = await server.request("POST", "/items", {
-      body: { typeId: "clock", title: "My Clock", config: { format: "24h" } },
-    });
-    expect(created.status).toBe(201);
-    expect(created.body).toMatchObject({ typeId: "clock", title: "My Clock" });
-    expect(created.body.syncId).toEqual(expect.any(String));
-
-    const list = await server.request("GET", "/items");
-    expect(list.body).toHaveLength(1);
-
-    const updated = await server.request("PUT", `/items/${created.body.id}`, {
-      body: { title: "Renamed" },
-    });
-    expect(updated.status).toBe(200);
-    expect(updated.body.title).toBe("Renamed");
-
-    const deleted = await server.request("DELETE", `/items/${created.body.id}`);
-    expect(deleted.status).toBe(200);
-    expect((await server.request("GET", "/items")).body).toHaveLength(0);
-  });
-
-  it("rejects a missing typeId", async () => {
-    const res = await server.request("POST", "/items", { body: {} });
-    expect(res.status).toBe(400);
-  });
-
-  it("404s updating or deleting another user's item", async () => {
-    const created = await server.request("POST", "/items", {
-      body: { typeId: "clock" },
-    });
-    const res = await server.request("DELETE", `/items/${created.body.id}`, {
-      user: "user-2",
-    });
-    expect(res.status).toBe(404);
-  });
-});
-
-describe("homepage layout routes", () => {
-  beforeEach(async () => {
-    server = await startServer();
-  });
-
-  it("returns null before any layout is saved, then round-trips one", async () => {
-    expect((await server.request("GET", "/layout")).body).toBeNull();
-
-    const saved = await server.request("PUT", "/layout", {
-      body: { entries: [], pan: { x: 0, y: 0 }, zoom: 1 },
-    });
-    expect(saved.status).toBe(200);
-    expect(saved.body.layout).toEqual({
-      entries: [],
-      pan: { x: 0, y: 0 },
-      zoom: 1,
-    });
-
-    const fetched = await server.request("GET", "/layout");
-    expect(fetched.body.layout.zoom).toBe(1);
-  });
-});
-
-describe("service link routes", () => {
-  beforeEach(async () => {
-    server = await startServer();
-  });
-
-  it("creates, lists, updates and deletes a service link", async () => {
-    const created = await server.request("POST", "/service-links", {
-      body: { label: "Grafana", url: "grafana.local" },
-    });
-    expect(created.status).toBe(201);
-    // A bare host gets normalized to http://.
-    expect(created.body.url).toBe("http://grafana.local");
-
-    const list = await server.request("GET", "/service-links");
-    expect(list.body).toHaveLength(1);
-
-    const updated = await server.request(
-      "PUT",
-      `/service-links/${created.body.id}`,
-      { body: { label: "Grafana Dashboard" } },
-    );
-    expect(updated.body.label).toBe("Grafana Dashboard");
-
-    const deleted = await server.request(
-      "DELETE",
-      `/service-links/${created.body.id}`,
-    );
-    expect(deleted.status).toBe(200);
-    expect((await server.request("GET", "/service-links")).body).toHaveLength(
-      0,
-    );
-  });
-
-  it("rejects an invalid url", async () => {
-    const res = await server.request("POST", "/service-links", {
-      body: { label: "Bad", url: "javascript:alert(1)" },
-    });
-    expect(res.status).toBe(400);
-  });
-});
-
-describe("permission denial", () => {
-  it("answers 403 for every route without homepage.use", async () => {
-    server = await startServer({ permissions: [] });
-    expect((await server.request("GET", "/items")).status).toBe(403);
-    expect((await server.request("GET", "/layout")).status).toBe(403);
-    expect((await server.request("GET", "/service-links")).status).toBe(403);
-  });
-});
diff --git a/plugins/homepage/tests/backend/services.test.ts b/plugins/homepage/tests/backend/services.test.ts
deleted file mode 100644
index b6abd7259..000000000
--- a/plugins/homepage/tests/backend/services.test.ts
+++ /dev/null
@@ -1,40 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import { startServer, type TestServer } from "./helpers";
-
-let server: TestServer;
-
-beforeEach(async () => {
-  server = await startServer();
-});
-
-afterEach(async () => {
-  await server.close();
-});
-
-describe("homepage.items service", () => {
-  it("lists the acting user's items", async () => {
-    await server.request("POST", "/items", {
-      body: { typeId: "clock", title: "My Clock" },
-    });
-    await server.request("POST", "/items", {
-      body: { typeId: "notes" },
-      user: "user-2",
-    });
-
-    server.mock.setActor("user-1");
-    const service = server.mock.services.get("homepage.items") as
-      | { list: () => Promise<Array<{ typeId: string; title: string | null }>> }
-      | undefined;
-    const items = await service!.list();
-    expect(items).toEqual([
-      { id: expect.any(Number), typeId: "clock", title: "My Clock" },
-    ]);
-  });
-
-  it("returns an empty list with no acting user", async () => {
-    server.mock.setActor(undefined);
-    const service = server.mock.services.get("homepage.items") as
-      { list: () => Promise<unknown[]> } | undefined;
-    expect(await service!.list()).toEqual([]);
-  });
-});
diff --git a/plugins/homepage/tests/backend/url.test.ts b/plugins/homepage/tests/backend/url.test.ts
deleted file mode 100644
index 7cac75152..000000000
--- a/plugins/homepage/tests/backend/url.test.ts
+++ /dev/null
@@ -1,28 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  isValidServiceLinkUrl,
-  normalizeServiceLinkUrl,
-} from "../../src/backend/url.js";
-
-describe("service link URL handling", () => {
-  it("keeps explicit http and https URLs", () => {
-    expect(normalizeServiceLinkUrl("https://example.com")).toBe(
-      "https://example.com",
-    );
-    expect(normalizeServiceLinkUrl("http://192.168.1.10:8080")).toBe(
-      "http://192.168.1.10:8080",
-    );
-  });
-
-  it("adds http to bare service addresses", () => {
-    expect(normalizeServiceLinkUrl("192.168.1.10:8080")).toBe(
-      "http://192.168.1.10:8080",
-    );
-    expect(normalizeServiceLinkUrl("termix.local")).toBe("http://termix.local");
-  });
-
-  it("rejects unsupported schemes", () => {
-    expect(isValidServiceLinkUrl("ssh://example.com")).toBe(false);
-    expect(isValidServiceLinkUrl("javascript:alert(1)")).toBe(false);
-  });
-});
diff --git a/plugins/homepage/tests/frontend/ClockTimezone.test.tsx b/plugins/homepage/tests/frontend/ClockTimezone.test.tsx
deleted file mode 100644
index 92b080584..000000000
--- a/plugins/homepage/tests/frontend/ClockTimezone.test.tsx
+++ /dev/null
@@ -1,186 +0,0 @@
-import { describe, it, expect, vi, afterEach } from "vitest";
-import { render, screen, cleanup, fireEvent } from "@testing-library/react";
-
-vi.mock("@termix/plugin-sdk/frontend", async (importOriginal) => ({
-  ...(await importOriginal<Record<string, unknown>>()),
-  useTranslation: () => ({ t: (key: string) => key, language: "en" }),
-}));
-
-import { ClockWidget } from "../../src/frontend/widgets/ClockWidget.js";
-import { ClockEditForm } from "../../src/frontend/dialogs/ClockEditForm.js";
-import {
-  normalizeTimezone,
-  validateClockTimezone,
-} from "../../src/frontend/clock-timezone.js";
-import type { CanvasWidget, ClockConfig } from "../../src/frontend/types.js";
-
-const widget: CanvasWidget = {
-  id: 1,
-  typeId: "clock",
-  title: "Clock",
-  config: {},
-  x: 0,
-  y: 0,
-  w: 8,
-  h: 5,
-  zOrder: 0,
-};
-
-function renderClock(config: Partial<ClockConfig> = {}) {
-  return render(
-    <ClockWidget
-      widget={widget}
-      config={{ showSeconds: false, format: "24h", ...config }}
-    />,
-  );
-}
-
-function renderForm(config: Partial<ClockConfig> = {}) {
-  const onChange = vi.fn();
-  render(
-    <ClockEditForm
-      config={{ showSeconds: false, format: "24h", ...config }}
-      onChange={onChange}
-    />,
-  );
-  return {
-    onChange,
-    input: screen.getByPlaceholderText(
-      "homepage.timezonePlaceholder",
-    ) as HTMLInputElement,
-  };
-}
-
-afterEach(cleanup);
-
-describe("ClockWidget timezone handling", () => {
-  it("renders instead of throwing when a saved config holds an invalid timezone", () => {
-    // Regression: "America/New York" (space, not underscore) made
-    // toLocaleTimeString throw a RangeError and took down the whole canvas.
-    expect(() => renderClock({ timezone: "America/New York" })).not.toThrow();
-    expect(screen.queryByText("America/New York")).toBeNull();
-  });
-
-  it("falls back to local time formatting for an invalid timezone", () => {
-    renderClock({ timezone: "Not/AZone" });
-    const local = new Date().toLocaleTimeString(undefined, {
-      hour: "2-digit",
-      minute: "2-digit",
-      hour12: false,
-    });
-    expect(screen.getByText(local)).toBeTruthy();
-  });
-
-  it("keeps and displays a valid timezone", () => {
-    renderClock({ timezone: "America/New_York" });
-    expect(screen.getByText("America/New_York")).toBeTruthy();
-  });
-
-  it("shows no timezone label when none is configured", () => {
-    const { container } = renderClock();
-    expect(
-      container.querySelector('[class*="text-muted-foreground/60"]'),
-    ).toBeNull();
-  });
-
-  it("formats in the configured timezone, not the host timezone", () => {
-    renderClock({ timezone: "Asia/Tokyo" });
-    const tokyo = new Date().toLocaleTimeString(undefined, {
-      hour: "2-digit",
-      minute: "2-digit",
-      hour12: false,
-      timeZone: "Asia/Tokyo",
-    });
-    expect(screen.getByText(tokyo)).toBeTruthy();
-  });
-});
-
-describe("validateClockTimezone", () => {
-  it("turns spaces into underscores", () => {
-    expect(validateClockTimezone("America/New York")).toEqual({
-      timezone: "America/New_York",
-      valid: true,
-    });
-  });
-
-  it("trims surrounding whitespace", () => {
-    expect(validateClockTimezone("  Europe/Paris  ")).toEqual({
-      timezone: "Europe/Paris",
-      valid: true,
-    });
-  });
-
-  it("reports an unusable zone as invalid but still returns it normalized", () => {
-    expect(validateClockTimezone("Not/AZone")).toEqual({
-      timezone: "Not/AZone",
-      valid: false,
-    });
-  });
-
-  it("treats blank input as clearing the timezone", () => {
-    expect(validateClockTimezone("   ")).toEqual({
-      timezone: undefined,
-      valid: true,
-    });
-    expect(validateClockTimezone(undefined)).toEqual({
-      timezone: undefined,
-      valid: true,
-    });
-  });
-
-  it("normalizes every run of whitespace", () => {
-    expect(normalizeTimezone("America/Argentina/Buenos  Aires")).toBe(
-      "America/Argentina/Buenos_Aires",
-    );
-  });
-});
-
-describe("ClockEditForm", () => {
-  it("stores what the user typed without rewriting it mid-edit", () => {
-    const { onChange, input } = renderForm();
-    fireEvent.change(input, { target: { value: "America/Los Angeles" } });
-    expect(onChange).toHaveBeenCalledWith(
-      expect.objectContaining({ timezone: "America/Los Angeles" }),
-    );
-  });
-
-  it("flags an unusable zone the same way FolderMetadataDialog flags a duplicate name", () => {
-    const { input } = renderForm({ timezone: "Not/AZone" });
-    expect(input.getAttribute("aria-invalid")).toBe("true");
-    expect(input.className).toContain("border-destructive");
-    expect(screen.getByText("homepage.invalidTimezone")).toBeTruthy();
-  });
-
-  it("accepts a zone typed with a space, since it is normalized before checking", () => {
-    const { input } = renderForm({ timezone: "America/New York" });
-    expect(input.getAttribute("aria-invalid")).toBe("false");
-    expect(screen.queryByText("homepage.invalidTimezone")).toBeNull();
-  });
-
-  it("says nothing about an empty field", () => {
-    const { input } = renderForm();
-    expect(input.getAttribute("aria-invalid")).toBe("false");
-    expect(screen.queryByText("homepage.invalidTimezone")).toBeNull();
-  });
-
-  it("clears the timezone when the field is emptied", () => {
-    const { onChange, input } = renderForm({ timezone: "Europe/Paris" });
-    fireEvent.change(input, { target: { value: "" } });
-    expect(onChange).toHaveBeenCalledWith(
-      expect.objectContaining({ timezone: undefined }),
-    );
-  });
-
-  it("preserves the other clock settings when the timezone changes", () => {
-    const { onChange, input } = renderForm({
-      showSeconds: true,
-      format: "12h",
-    });
-    fireEvent.change(input, { target: { value: "UTC" } });
-    expect(onChange).toHaveBeenCalledWith({
-      timezone: "UTC",
-      showSeconds: true,
-      format: "12h",
-    });
-  });
-});
diff --git a/plugins/homepage/tests/frontend/SystemOverviewWidget.test.tsx b/plugins/homepage/tests/frontend/SystemOverviewWidget.test.tsx
deleted file mode 100644
index ed944d1f2..000000000
--- a/plugins/homepage/tests/frontend/SystemOverviewWidget.test.tsx
+++ /dev/null
@@ -1,125 +0,0 @@
-import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
-import { render, screen, cleanup, waitFor } from "@testing-library/react";
-
-vi.mock("@termix/plugin-sdk/frontend", async (importOriginal) => ({
-  ...(await importOriginal<Record<string, unknown>>()),
-  useTranslation: () => ({ t: (key: string) => key, language: "en" }),
-}));
-
-const getVersionInfo = vi.fn();
-const getDatabaseHealth = vi.fn(async () => ({ status: "ok" }));
-const getUptime = vi.fn(async () => ({ formatted: "1d 2h" }));
-
-vi.mock("@termix/plugin-sdk/ui", async (importOriginal) => ({
-  ...(await importOriginal<Record<string, unknown>>()),
-  getVersionInfo: (...args: unknown[]) => getVersionInfo(...args),
-  getDatabaseHealth: () => getDatabaseHealth(),
-  getUptime: () => getUptime(),
-  // The real one installs an interval and a visibilitychange listener; the
-  // component's first fetch happens outside it, which is all these tests need.
-  runVisibleInterval: () => () => {},
-}));
-
-import { SystemOverviewWidget } from "../../src/frontend/widgets/SystemOverviewWidget.js";
-import type { CanvasWidget } from "../../src/frontend/types.js";
-
-const widget: CanvasWidget = {
-  id: 1,
-  typeId: "system_overview",
-  title: "Termix",
-  config: {},
-  x: 0,
-  y: 0,
-  w: 10,
-  h: 6,
-  zOrder: 0,
-};
-
-function renderWidget() {
-  render(
-    <SystemOverviewWidget
-      widget={widget}
-      config={{ showVersion: true, showDbHealth: false, showUptime: false }}
-    />,
-  );
-}
-
-beforeEach(() => {
-  getVersionInfo.mockReset();
-});
-
-afterEach(cleanup);
-
-describe("SystemOverviewWidget update indicator", () => {
-  it("asks /version to actually check the remote release", async () => {
-    // Regression: it used to pass checkRemote=false, which makes the endpoint
-    // return early without ever comparing against the latest release.
-    getVersionInfo.mockResolvedValue({
-      status: "up_to_date",
-      localVersion: "2.6.1",
-    });
-
-    renderWidget();
-
-    await waitFor(() => expect(getVersionInfo).toHaveBeenCalledTimes(1));
-    expect(getVersionInfo).toHaveBeenCalledWith();
-  });
-
-  it("flags an available update from the status the endpoint returns", async () => {
-    // Regression: it used to read `updateAvailable`, a field /version does not
-    // return in either mode, so the row could never appear.
-    getVersionInfo.mockResolvedValue({
-      status: "requires_update",
-      localVersion: "2.6.0",
-      remoteVersion: "2.6.1",
-    });
-
-    renderWidget();
-
-    await waitFor(() =>
-      expect(screen.getByText("homepage.overviewUpdateAvailable")).toBeTruthy(),
-    );
-  });
-
-  it("labels that row 'Update' rather than 'Up to date'", async () => {
-    // homepage.overviewUpdate is the string "Up to date", which read as the
-    // label of an update-available row said "Up to date  Update available".
-    getVersionInfo.mockResolvedValue({
-      status: "requires_update",
-      localVersion: "2.6.0",
-    });
-
-    renderWidget();
-
-    await waitFor(() =>
-      expect(screen.getByText("homepage.overviewUpdateLabel")).toBeTruthy(),
-    );
-    expect(screen.queryByText("homepage.overviewUpdate")).toBeNull();
-  });
-
-  it("shows no update row when the server is current", async () => {
-    getVersionInfo.mockResolvedValue({
-      status: "up_to_date",
-      localVersion: "2.6.1",
-    });
-
-    renderWidget();
-
-    await waitFor(() => expect(screen.getByText("2.6.1")).toBeTruthy());
-    expect(screen.queryByText("homepage.overviewUpdateAvailable")).toBeNull();
-    expect(screen.queryByText("homepage.overviewUpdateLabel")).toBeNull();
-  });
-
-  it("shows no update row on a beta build, which is ahead rather than behind", async () => {
-    getVersionInfo.mockResolvedValue({
-      status: "beta",
-      localVersion: "2.7.0",
-      remoteVersion: "2.6.1",
-    });
-
-    renderWidget();
-
-    await waitFor(() => expect(screen.getByText("2.7.0")).toBeTruthy());
-    expect(screen.queryByText("homepage.overviewUpdateAvailable")).toBeNull();
-  });
-});
diff --git a/plugins/homepage/tests/frontend/WidgetEditDialogClock.test.tsx b/plugins/homepage/tests/frontend/WidgetEditDialogClock.test.tsx
deleted file mode 100644
index 32a5acb03..000000000
--- a/plugins/homepage/tests/frontend/WidgetEditDialogClock.test.tsx
+++ /dev/null
@@ -1,107 +0,0 @@
-import { describe, it, expect, vi, afterEach } from "vitest";
-import { render, screen, cleanup, fireEvent } from "@testing-library/react";
-
-vi.mock("@termix/plugin-sdk/frontend", async (importOriginal) => ({
-  ...(await importOriginal<Record<string, unknown>>()),
-  useTranslation: () => ({ t: (key: string) => key, language: "en" }),
-}));
-
-import { WidgetEditDialog } from "../../src/frontend/dialogs/WidgetEditDialog.js";
-import type { CanvasWidget } from "../../src/frontend/types.js";
-
-function clockWidget(timezone?: string): CanvasWidget {
-  return {
-    id: 7,
-    typeId: "clock",
-    title: "Clock",
-    config: { timezone, showSeconds: true, format: "24h" },
-    x: 0,
-    y: 0,
-    w: 8,
-    h: 5,
-    zOrder: 0,
-  };
-}
-
-function open(timezone?: string) {
-  const onSave = vi.fn();
-  const onClose = vi.fn();
-  render(
-    <WidgetEditDialog
-      widget={clockWidget(timezone)}
-      onSave={onSave}
-      onClose={onClose}
-    />,
-  );
-  return {
-    onSave,
-    onClose,
-    input: screen.getByPlaceholderText(
-      "homepage.timezonePlaceholder",
-    ) as HTMLInputElement,
-    save: screen
-      .getByText("homepage.save")
-      .closest("button") as HTMLButtonElement,
-  };
-}
-
-afterEach(cleanup);
-
-describe("WidgetEditDialog clock timezone validation", () => {
-  it("stores the normalized zone when the user typed a space", () => {
-    const { onSave, onClose, input, save } = open();
-    fireEvent.change(input, { target: { value: "America/New York" } });
-    expect(screen.queryByText("homepage.invalidTimezone")).toBeNull();
-    expect(save.disabled).toBe(false);
-
-    fireEvent.click(save);
-
-    expect(onSave).toHaveBeenCalledWith(
-      7,
-      "Clock",
-      expect.objectContaining({ timezone: "America/New_York" }),
-    );
-    expect(onClose).toHaveBeenCalled();
-  });
-
-  it("disables Save while the zone is unusable", () => {
-    const { onSave, onClose, input, save } = open();
-    fireEvent.change(input, { target: { value: "Not/AZone" } });
-
-    expect(save.disabled).toBe(true);
-    expect(screen.getByText("homepage.invalidTimezone")).toBeTruthy();
-
-    fireEvent.click(save);
-    expect(onSave).not.toHaveBeenCalled();
-    expect(onClose).not.toHaveBeenCalled();
-  });
-
-  it("re-enables Save once the zone becomes usable", () => {
-    const { onSave, input, save } = open();
-    fireEvent.change(input, { target: { value: "Not/AZone" } });
-    expect(save.disabled).toBe(true);
-
-    fireEvent.change(input, { target: { value: "Asia/Tokyo" } });
-    expect(save.disabled).toBe(false);
-    expect(screen.queryByText("homepage.invalidTimezone")).toBeNull();
-
-    fireEvent.click(save);
-    expect(onSave).toHaveBeenCalledWith(
-      7,
-      "Clock",
-      expect.objectContaining({ timezone: "Asia/Tokyo" }),
-    );
-  });
-
-  it("saves a blank field as no timezone", () => {
-    const { onSave, input, save } = open("Europe/Paris");
-    fireEvent.change(input, { target: { value: "  " } });
-    fireEvent.click(save);
-
-    expect(onSave).toHaveBeenCalledWith(
-      7,
-      "Clock",
-      expect.objectContaining({ timezone: undefined }),
-    );
-  });
-});
diff --git a/plugins/homepage/tests/frontend/activate.test.tsx b/plugins/homepage/tests/frontend/activate.test.tsx
deleted file mode 100644
index 5bd61cf05..000000000
--- a/plugins/homepage/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,66 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-const declared = (views?: Array<{ id: string }>) =>
-  (views ?? []).map((view) => view.id).sort();
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe(`${manifest.id} activate`, () => {
-  it("activates and registers only views its manifest declares", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    const contributes = manifest.contributes as unknown as Record<
-      string,
-      Array<{ id: string }> | undefined
-    >;
-    const tabs = declared(contributes.tabs);
-    const cards = declared(contributes.dashboardCards);
-    for (const id of rendered.registered.tabs()) expect(tabs).toContain(id);
-    for (const id of rendered.registered.dashboardCards()) {
-      expect(cards).toContain(id);
-    }
-  });
-
-  it("registers the homepage tab as a singleton", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.tabs()).toContain("homepage");
-  });
-
-  it("registers both dashboard cards", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.dashboardCards().sort()).toEqual([
-      "homepage_preview",
-      "service_links",
-    ]);
-  });
-
-  it("contributes to the dashboard.secondaryView slot", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.slot("dashboard.secondaryView")).toEqual([
-      "homepage",
-    ]);
-  });
-
-  it("removes everything it registered on deactivate", async () => {
-    const app = await renderWithApp(plugin, { manifest, locales });
-    await app.deactivate();
-    expect(app.registered.tabs()).toEqual([]);
-    expect(app.registered.dashboardCards()).toEqual([]);
-    expect(app.registered.slot("dashboard.secondaryView")).toEqual([]);
-    expect(app.registered.actions()).toEqual([]);
-  });
-});
diff --git a/plugins/homepage/tests/frontend/canvas/canvasGeometry.test.ts b/plugins/homepage/tests/frontend/canvas/canvasGeometry.test.ts
deleted file mode 100644
index 2849232e4..000000000
--- a/plugins/homepage/tests/frontend/canvas/canvasGeometry.test.ts
+++ /dev/null
@@ -1,80 +0,0 @@
-import { describe, it, expect } from "vitest";
-import {
-  screenToCanvas,
-  canvasToScreen,
-  zoomAroundPoint,
-} from "../../../src/frontend/canvas/canvasGeometry.js";
-
-const PAN = { x: 100, y: 200 };
-const ZOOM = 2;
-
-describe("screenToCanvas", () => {
-  it("inverts canvasToScreen", () => {
-    const canvas = { x: 50, y: 75 };
-    const screen = canvasToScreen(canvas.x, canvas.y, PAN, ZOOM);
-    const back = screenToCanvas(screen.x, screen.y, PAN, ZOOM);
-    expect(back.x).toBeCloseTo(canvas.x);
-    expect(back.y).toBeCloseTo(canvas.y);
-  });
-
-  it("accounts for pan offset", () => {
-    const result = screenToCanvas(100, 200, PAN, 1);
-    expect(result.x).toBe(0);
-    expect(result.y).toBe(0);
-  });
-
-  it("accounts for zoom", () => {
-    const result = screenToCanvas(300, 400, PAN, ZOOM);
-    expect(result.x).toBe((300 - 100) / 2);
-    expect(result.y).toBe((400 - 200) / 2);
-  });
-});
-
-describe("canvasToScreen", () => {
-  it("maps origin with pan offset", () => {
-    const result = canvasToScreen(0, 0, PAN, ZOOM);
-    expect(result.x).toBe(100);
-    expect(result.y).toBe(200);
-  });
-
-  it("scales by zoom", () => {
-    const result = canvasToScreen(10, 20, PAN, ZOOM);
-    expect(result.x).toBe(120);
-    expect(result.y).toBe(240);
-  });
-});
-
-describe("zoomAroundPoint", () => {
-  it("keeps the mouse point on the same canvas coordinate", () => {
-    const mouseX = 400;
-    const mouseY = 300;
-    const pan = { x: 0, y: 0 };
-    const oldZoom = 1;
-    const newZoom = 2;
-
-    const newPan = zoomAroundPoint(mouseX, mouseY, pan, oldZoom, newZoom);
-
-    // Canvas coordinate under mouse before zoom
-    const canvasBefore = screenToCanvas(mouseX, mouseY, pan, oldZoom);
-    // Canvas coordinate under mouse after zoom with newPan
-    const canvasAfter = screenToCanvas(mouseX, mouseY, newPan, newZoom);
-
-    expect(canvasAfter.x).toBeCloseTo(canvasBefore.x);
-    expect(canvasAfter.y).toBeCloseTo(canvasBefore.y);
-  });
-
-  it("returns correct pan for zoom-out", () => {
-    const mouseX = 200;
-    const mouseY = 150;
-    const pan = { x: 50, y: 50 };
-    const oldZoom = 2;
-    const newZoom = 1;
-
-    const newPan = zoomAroundPoint(mouseX, mouseY, pan, oldZoom, newZoom);
-    const canvasBefore = screenToCanvas(mouseX, mouseY, pan, oldZoom);
-    const canvasAfter = screenToCanvas(mouseX, mouseY, newPan, newZoom);
-
-    expect(canvasAfter.x).toBeCloseTo(canvasBefore.x);
-    expect(canvasAfter.y).toBeCloseTo(canvasBefore.y);
-  });
-});
diff --git a/plugins/homepage/tests/frontend/canvas/snapToGrid.test.ts b/plugins/homepage/tests/frontend/canvas/snapToGrid.test.ts
deleted file mode 100644
index 7a1b43234..000000000
--- a/plugins/homepage/tests/frontend/canvas/snapToGrid.test.ts
+++ /dev/null
@@ -1,42 +0,0 @@
-import { describe, it, expect } from "vitest";
-import {
-  snapToGrid,
-  snapToGridFloor,
-} from "../../../src/frontend/canvas/snapToGrid.js";
-import { GRID_SIZE } from "../../../src/frontend/types.js";
-
-describe("snapToGrid", () => {
-  it("snaps to nearest grid multiple", () => {
-    expect(snapToGrid(0)).toBe(0);
-    expect(snapToGrid(GRID_SIZE)).toBe(GRID_SIZE);
-    expect(snapToGrid(GRID_SIZE * 2)).toBe(GRID_SIZE * 2);
-  });
-
-  it("rounds to nearest (up when exactly halfway)", () => {
-    expect(snapToGrid(GRID_SIZE / 2)).toBe(GRID_SIZE);
-    expect(snapToGrid(GRID_SIZE * 1.5)).toBe(GRID_SIZE * 2);
-  });
-
-  it("rounds down when below halfway", () => {
-    expect(snapToGrid(GRID_SIZE * 0.4)).toBe(0);
-    expect(snapToGrid(GRID_SIZE * 1.4)).toBe(GRID_SIZE);
-  });
-
-  it("works with negative values", () => {
-    expect(snapToGrid(-GRID_SIZE)).toBe(-GRID_SIZE);
-    expect(snapToGrid(-GRID_SIZE * 0.4)).toBeCloseTo(0);
-  });
-});
-
-describe("snapToGridFloor", () => {
-  it("always rounds down to floor multiple", () => {
-    expect(snapToGridFloor(GRID_SIZE - 1)).toBe(0);
-    expect(snapToGridFloor(GRID_SIZE)).toBe(GRID_SIZE);
-    expect(snapToGridFloor(GRID_SIZE + 1)).toBe(GRID_SIZE);
-    expect(snapToGridFloor(GRID_SIZE * 2 - 1)).toBe(GRID_SIZE);
-  });
-
-  it("handles zero", () => {
-    expect(snapToGridFloor(0)).toBe(0);
-  });
-});
diff --git a/plugins/homepage/tsconfig.json b/plugins/homepage/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/homepage/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/homepage/vitest.config.ts b/plugins/homepage/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/homepage/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/host-metrics/CHANGELOG.md b/plugins/host-metrics/CHANGELOG.md
deleted file mode 100644
index 096c84fa3..000000000
--- a/plugins/host-metrics/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Shows live CPU, memory, disk, network and process stats for your hosts, with history charts. Also adds tools to manage services, packages, firewall rules, cron jobs, users, SSL certificates, logs and WireGuard.
diff --git a/plugins/host-metrics/README.md b/plugins/host-metrics/README.md
deleted file mode 100644
index 0d40ede3c..000000000
--- a/plugins/host-metrics/README.md
+++ /dev/null
@@ -1,52 +0,0 @@
-# Host Metrics
-
-Live CPU, memory, disk, network and process stats, plus tools to manage services, packages, firewall rules, cron jobs, users and more.
-
-## Features
-
-- Live CPU, memory, disk, network, temperature and process stats.
-- History charts for each host.
-- Tools to manage services, packages, firewall rules, cron jobs, users, SSL certificates, logs and WireGuard.
-- A drag and drop layout you can change per host.
-- Other features can add their own tools. Tailscale does.
-
-## Setup
-
-The online dot in the host list comes from Termix itself, not this plugin. A working metrics login is what marks a reachable host as online.
-
-## Settings
-
-### Admin
-
-- Metrics interval (seconds): how often a host is checked while someone views it.
-- History retention (days): how long history is kept.
-- Metrics on for new hosts: whether new hosts start with metrics turned on.
-
-### User
-
-- Temperature unit: Celsius or Fahrenheit.
-
-### Host
-
-- Collect metrics: turn metrics on for this host.
-- Metrics interval (seconds): override the admin interval.
-- Enabled widgets: which widgets to show.
-- Excluded mounts and Monitored paths: which disks to hide or watch.
-
-## Permissions
-
-- `host-metrics.use`: View metrics and use the host tools. Admins and users have it by default.
-
-## Services
-
-Provides to other plugins:
-
-- `host-metrics.viewers`: read a host's current metrics.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/host-metrics/locales/en.json b/plugins/host-metrics/locales/en.json
deleted file mode 100644
index 109dd6665..000000000
--- a/plugins/host-metrics/locales/en.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Host Metrics"
-  },
-  "hostMetrics": {
-    "cpu": "CPU",
-    "memory": "Memory",
-    "disk": "Disk",
-    "network": "Network",
-    "uptime": "Uptime",
-    "processes": "Processes",
-    "available": "Available",
-    "free": "Free",
-    "connecting": "Connecting...",
-    "connectionFailed": "Failed to connect to server",
-    "naCpus": "N/A CPU(s)",
-    "cpuCores_one": "{{count}} Core",
-    "cpuCores_other": "{{count}} Cores",
-    "cpuUsage": "CPU Usage",
-    "memoryUsage": "Memory Usage",
-    "diskUsage": "Disk Usage",
-    "selectFilesystem": "Select filesystem",
-    "temperature": "Temperature",
-    "highestTemperature": "Highest temperature",
-    "primaryTemperatureSensor": "Primary sensor",
-    "gpu": {
-      "title": "GPU",
-      "noDevice": "No NVIDIA GPU detected. Install the NVIDIA driver (it provides nvidia-smi) to see GPU metrics.",
-      "driver": "Driver {{version}}",
-      "utilization": "Utilization",
-      "memory": "VRAM",
-      "temperature": "Temp",
-      "power": "Power",
-      "fan": "Fan",
-      "processes": "GPU processes",
-      "noProcesses": "No processes are using the GPU"
-    },
-    "failedToFetchHostConfig": "Failed to fetch host configuration",
-    "serverOffline": "Server Offline",
-    "cannotFetchMetrics": "Cannot fetch metrics from offline server",
-    "totpFailed": "TOTP verification failed",
-    "noneAuthNotSupported": "Host Metrics does not support 'none' authentication type.",
-    "noHostSelected": "No host selected",
-    "load": "Load",
-    "systemInfo": "System Information",
-    "hostname": "Hostname",
-    "operatingSystem": "Operating System",
-    "kernel": "Kernel",
-    "seconds": "seconds",
-    "networkInterfaces": "Network Interfaces",
-    "noInterfacesFound": "No network interfaces found",
-    "noProcessesFound": "No processes found",
-    "processesTotal": "total",
-    "processesRunning": "running",
-    "loginStats": "SSH Login Statistics",
-    "noRecentLoginData": "No recent login data",
-    "ports": {
-      "title": "Listening Ports",
-      "protocol": "Protocol",
-      "port": "Port",
-      "address": "Address",
-      "process": "Process",
-      "search": "Search ports...",
-      "allProtocols": "All",
-      "noData": "No listening ports data"
-    },
-    "firewall": {
-      "title": "Firewall",
-      "inactive": "Inactive",
-      "policy": "Policy",
-      "rules": "rules",
-      "noRules": "No rules in this chain",
-      "noData": "No firewall data available",
-      "action": "Action",
-      "protocol": "Proto",
-      "port": "Port",
-      "source": "Source",
-      "anywhere": "Anywhere",
-      "chains": "chains"
-    },
-    "loadAvg": "Load Avg",
-    "swap": "Swap",
-    "architecture": "Architecture",
-    "refresh": "Refresh",
-    "retry": "Retry",
-    "customize": "Customize layout",
-    "reset": "Reset",
-    "tabLive": "Live",
-    "editModeInstructions": "Drag cards to rearrange, drag the bottom edge to resize, and use the width button to change a card's span. Add or remove cards below.",
-    "managers": {
-      "services": "Services",
-      "processInspector": "Process Inspector",
-      "logViewer": "Log Viewer",
-      "cron": "Cron Jobs",
-      "packages": "Packages",
-      "ssl": "SSL Certificates",
-      "firewall": "Firewall",
-      "users": "Users & Permissions",
-      "healthCheck": "Health Checks",
-      "diskBreakdown": "Disk Breakdown",
-      "systemdTimers": "Timers",
-      "topMemory": "Top by Memory",
-      "noData": "No data",
-      "sudoHint": "Set a sudo password for this host in the host editor to enable privileged actions.",
-      "filter": "Filter...",
-      "start": "Start",
-      "stop": "Stop",
-      "restart": "Restart",
-      "actionDone": "{{name}} updated",
-      "actionFailed": "Action failed",
-      "signalSent": "Signal sent to PID {{pid}}",
-      "killHint": "Click: terminate (SIGTERM). Right-click: force kill (SIGKILL).",
-      "working": "Working...",
-      "update": "Update",
-      "upgradeAll": "Upgrade all",
-      "allUpToDate": "Everything is up to date",
-      "save": "Save",
-      "command": "Command",
-      "enabled": "Enabled",
-      "cronSaved": "Crontab updated",
-      "clients": "Clients",
-      "dryRun": "Dry run",
-      "renew": "Renew",
-      "noAcmeClient": "No ACME client (certbot or acme.sh) found on this host.",
-      "addInputRule": "Add INPUT rule",
-      "firewallWarning": "Changes are runtime-only until persisted. Be careful not to lock yourself out.",
-      "ruleApplied": "Rule applied",
-      "invalidPort": "Enter a valid port (1-65535)",
-      "newUsername": "New username",
-      "addUser": "Add",
-      "deleteUser": "Delete user",
-      "noHealthChecks": "No health checks configured yet.",
-      "follow": "Follow",
-      "noLogData": "No log output.",
-      "tree": "Tree",
-      "enableDisable": "Enable / disable at boot",
-      "grantSudo": "Grant sudo",
-      "revokeSudo": "Revoke sudo",
-      "sslIssueCert": "Issue certificate",
-      "sslExpired": "Expired",
-      "sslInDays": "in {{days}}d",
-      "sslNeedDomain": "Enter at least one domain",
-      "sslIssued": "Certificate issued",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (standalone)",
-      "sslHttpWebroot": "HTTP (webroot)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "DNS provider (e.g. cloudflare)",
-      "sslIssueHint": "DNS provider credentials must already be configured on the host.",
-      "sslRevoke": "Revoke certificate",
-      "sslRevoked": "Certificate revoked",
-      "sslRevokeConfirm": "Revoke and remove the certificate \"{{name}}\"? This cannot be undone.",
-      "healthRun": "Run",
-      "healthName": "Name",
-      "healthTarget": "Host / address",
-      "healthAddCheck": "Add check",
-      "healthSaved": "Health checks saved",
-      "healthMissingFields": "Each check needs a name and target",
-      "logFile": "File",
-      "logUnit": "Unit",
-      "logCustomPath": "Custom path under /var/log (optional)",
-      "logGrep": "Filter lines...",
-      "firewallPersist": "Persist rules",
-      "firewallPersisted": "Firewall rules persisted",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "WireGuard is not installed on this host",
-      "wgNoInterfaces": "No WireGuard interfaces configured",
-      "wgInterfaceUp": "Bring up",
-      "wgInterfaceDown": "Bring down",
-      "wgBringingUp": "Bringing {{name}} up...",
-      "wgBringingDown": "Bringing {{name}} down...",
-      "wgInterfaceUpDone": "{{name}} is up",
-      "wgInterfaceDownDone": "{{name}} is down",
-      "wgListenPort": "Port",
-      "wgPublicKey": "Public key",
-      "wgEndpoint": "Endpoint",
-      "wgAllowedIPs": "Allowed IPs",
-      "wgLastHandshake": "Last handshake",
-      "wgHandshakeNever": "Never",
-      "wgTransfer": "Transfer",
-      "wgNoPeers": "No peers"
-    }
-  },
-  "metricsHistory": {
-    "title": "Metrics History",
-    "historySuffix": "History",
-    "cpuMemoryDisk": "CPU / Memory / Disk",
-    "network": "Network",
-    "download": "RX",
-    "upload": "TX",
-    "noData": "No history data available for this time range.",
-    "custom": "Custom",
-    "to": "to",
-    "apply": "Apply",
-    "viewHistory": "View History"
-  },
-  "hosts": {
-    "tabHostMetrics": "Host Metrics",
-    "metricsCollectionLabel": "Metrics Collection",
-    "enableMetricsLabel": "Enable Metrics",
-    "enableMetricsDesc": "Collect CPU, RAM, disk, and other metrics from this host",
-    "useGlobalMetrics": "Use Global Interval",
-    "useGlobalMetricsDesc": "Override with the server-wide metrics interval",
-    "metricsIntervalS": "Metrics Interval (s)",
-    "metricsIntervalDesc2": "Seconds between metric snapshots",
-    "excludedMountsLabel": "Excluded Mounts",
-    "monitoredMountsLabel": "Custom monitored paths",
-    "monitoredMountsDesc": "Add paths that are not exposed as separate mounts, including bind-mounted Home Assistant paths such as /config.",
-    "monitoredMountPathPlaceholder": "Path (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Label (optional)",
-    "addMonitoredMount": "Add path",
-    "excludedMountsDesc": "Hide specific mount points or filesystem types (e.g. nfs, cifs) from disk usage and alerts for this host.",
-    "excludedMountsPlaceholder": "Mount path (/mnt/nas) or filesystem type (nfs, cifs)",
-    "excludedMountsEmpty": "No mounts excluded. All detected filesystems are shown.",
-    "addExcludedMount": "Add",
-    "visibleWidgets": "Visible Widgets",
-    "widgetsMovedToHostMetrics": "Cards are now added, arranged, and resized directly in the Host Metrics tab. Open Host Metrics for this host and use Customize to choose which cards are shown.",
-    "hostNotFound": "Host not found",
-    "loadingHost": "Loading host..."
-  },
-  "onboarding": {
-    "feature_metrics": "Metrics and alerts",
-    "feature_metrics_desc": "Track CPU, memory and disk over time, and get alerted when they go bad."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Metrics History Retention",
-    "metricsHistoryRetentionRange": "1 to 90 days",
-    "days": "days"
-  },
-  "homepage": {
-    "noData": "No data available",
-    "showCurrentValue": "Show Current Value",
-    "chartMetric": "Metric",
-    "metricRange": "Range",
-    "host": "Host",
-    "loading": "Loading...",
-    "metricCpu": "CPU",
-    "metricDisk": "Disk",
-    "metricHostname": "Hostname",
-    "metricKernel": "Kernel",
-    "metricMemory": "Memory",
-    "metricNetwork": "Network",
-    "metricOs": "OS",
-    "metricProcesses": "Processes",
-    "metricProcessesRunning": "running",
-    "metricProcessesTotal": "total",
-    "metricUptime": "Uptime",
-    "metricsNotAvailable": "Metrics not available",
-    "noHostSelected": "No host selected",
-    "selectHost": "Select a host..."
-  },
-  "terminalStatus": {
-    "unavailable": "Live stats unavailable"
-  },
-  "dashboard": {
-    "cpu": "CPU",
-    "ram": "RAM"
-  },
-  "dashboardTab": {
-    "disk": "Disk"
-  },
-  "terminal": {
-    "connected": "Connected"
-  },
-  "permissions": {
-    "use": {
-      "title": "Use Host Metrics",
-      "description": "View host metrics and use the host managers (services, packages, firewall and more) on hosts you can reach."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Metrics interval (seconds)",
-        "description": "How often a host being viewed is sampled, unless the host sets its own interval."
-      },
-      "historyRetentionDays": {
-        "label": "History retention (days)",
-        "description": "How long metrics samples are kept for the history charts."
-      },
-      "enabledForNewHosts": {
-        "label": "Metrics on for new hosts",
-        "description": "Whether new hosts start with metrics collection turned on."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Temperature unit",
-        "description": "How temperatures are shown in Host Metrics.",
-        "celsius": "Celsius",
-        "fahrenheit": "Fahrenheit"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Collect metrics"
-      },
-      "metricsInterval": {
-        "label": "Metrics interval (seconds)"
-      },
-      "enabledWidgets": {
-        "label": "Enabled widgets"
-      },
-      "excludedMounts": {
-        "label": "Excluded mounts"
-      },
-      "monitoredMounts": {
-        "label": "Monitored paths"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Host Metrics"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/af_ZA.json b/plugins/host-metrics/locales/translated/af_ZA.json
deleted file mode 100644
index 2b0c4c1e0..000000000
--- a/plugins/host-metrics/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Gasheermetrieke"
-  },
-  "hostMetrics": {
-    "cpu": "SVE",
-    "memory": "Geheue",
-    "disk": "Skyf",
-    "network": "Netwerk",
-    "uptime": "Optyd",
-    "processes": "Prosesse",
-    "available": "Beskikbaar",
-    "free": "Gratis",
-    "connecting": "Verbind...",
-    "connectionFailed": "Kon nie aan bediener koppel nie",
-    "naCpus": "N/A SVE(s)",
-    "cpuCores_one": "{{count}} Kern",
-    "cpuCores_other": "{{count}} Kerne",
-    "cpuUsage": "SVE-gebruik",
-    "memoryUsage": "Geheuegebruik",
-    "diskUsage": "Skyfgebruik",
-    "selectFilesystem": "Kies lêerstelsel",
-    "temperature": "Temperatuur",
-    "highestTemperature": "Hoogste temperatuur",
-    "primaryTemperatureSensor": "Primêre sensor",
-    "gpu": {
-      "title": "GPU",
-      "noDevice": "Geen NVIDIA GPU bespeur nie. Installeer die NVIDIA-drywer (dit verskaf nvidia-smi) om GPU-metrieke te sien.",
-      "driver": "Bestuurder {{version}}",
-      "utilization": "Benutting",
-      "memory": "VRAM",
-      "temperature": "Temperatuur",
-      "power": "Krag",
-      "fan": "Waaier",
-      "processes": "GPU-prosesse",
-      "noProcesses": "Geen prosesse gebruik die GPU nie"
-    },
-    "failedToFetchHostConfig": "Kon nie gasheerkonfigurasie haal nie",
-    "serverOffline": "Bediener vanlyn",
-    "cannotFetchMetrics": "Kan nie statistieke van vanlyn bediener haal nie",
-    "totpFailed": "TOTP-verifikasie het misluk",
-    "noneAuthNotSupported": "Host Metrics ondersteun nie die 'geen'-verifikasietipe nie.",
-    "noHostSelected": "Geen gasheer gekies nie",
-    "load": "Laai",
-    "systemInfo": "Stelselinligting",
-    "hostname": "Gasheernaam",
-    "operatingSystem": "Bedryfstelsel",
-    "kernel": "Kern",
-    "seconds": "sekondes",
-    "networkInterfaces": "Netwerkkoppelvlakke",
-    "noInterfacesFound": "Geen netwerkkoppelvlakke gevind nie",
-    "noProcessesFound": "Geen prosesse gevind nie",
-    "processesTotal": "totaal",
-    "processesRunning": "hardloop",
-    "loginStats": "SSH-aanmeldingstatistieke",
-    "noRecentLoginData": "Geen onlangse aanmelddata nie",
-    "ports": {
-      "title": "Luisterpoorte",
-      "protocol": "Protokol",
-      "port": "Hawe",
-      "address": "Adres",
-      "process": "Proses",
-      "search": "Soek poorte...",
-      "allProtocols": "Alles",
-      "noData": "Geen luisterpoorte data nie"
-    },
-    "firewall": {
-      "title": "Firewall",
-      "inactive": "Onaktief",
-      "policy": "Beleid",
-      "rules": "reëls",
-      "noRules": "Geen reëls in hierdie ketting nie",
-      "noData": "Geen firewalldata beskikbaar nie",
-      "action": "Aksie",
-      "protocol": "Proto",
-      "port": "Hawe",
-      "source": "Bron",
-      "anywhere": "Enige plek",
-      "chains": "kettings"
-    },
-    "loadAvg": "Laai Gem.",
-    "swap": "Ruil",
-    "architecture": "Argitektuur",
-    "refresh": "Verfris",
-    "retry": "Probeer weer",
-    "customize": "Pasmaak uitleg",
-    "reset": "Herstel",
-    "tabLive": "Lewendig",
-    "editModeInstructions": "Sleep kaarte om te herrangskik, sleep die onderste rand om die grootte te verander, en gebruik die breedteknoppie om 'n kaart se omvang te verander. Voeg kaarte hieronder by of verwyder hulle.",
-    "managers": {
-      "services": "Dienste",
-      "processInspector": "Prosesinspekteur",
-      "logViewer": "Logkyker",
-      "cron": "Cron-werk",
-      "packages": "Pakkette",
-      "ssl": "SSL-sertifikate",
-      "firewall": "Firewall",
-      "users": "Gebruikers en Toestemmings",
-      "healthCheck": "Gesondheidstoetse",
-      "diskBreakdown": "Skyfverdeling",
-      "systemdTimers": "Tydtellers",
-      "topMemory": "Top volgens geheue",
-      "noData": "Geen data nie",
-      "sudoHint": "Stel 'n sudo-wagwoord vir hierdie gasheer in die gasheerredigeerder om bevoorregte aksies moontlik te maak.",
-      "filter": "Filter...",
-      "start": "Begin",
-      "stop": "Stop",
-      "restart": "Herbegin",
-      "actionDone": "{{name}} opgedateer",
-      "actionFailed": "Aksie het misluk",
-      "signalSent": "Sein gestuur na PID {{pid}}",
-      "killHint": "Klik: beëindig (SIGTERM). Regskliek: forseer doodmaak (SIGKILL).",
-      "working": "Werk...",
-      "update": "Opdatering",
-      "upgradeAll": "Gradeer alles op",
-      "allUpToDate": "Alles is op datum",
-      "save": "Stoor",
-      "command": "Bevel",
-      "enabled": "Geaktiveer",
-      "cronSaved": "Crontab opgedateer",
-      "clients": "Kliënte",
-      "dryRun": "Droë lopie",
-      "renew": "Hernu",
-      "noAcmeClient": "Geen ACME-kliënt (certbot of acme.sh) op hierdie gasheer gevind nie.",
-      "addInputRule": "Voeg INPUT-reël by",
-      "firewallWarning": "Veranderinge is slegs looptyd totdat dit voortduur. Wees versigtig om jouself nie uit te sluit nie.",
-      "ruleApplied": "Reël toegepas",
-      "invalidPort": "Voer 'n geldige poort in (1-65535)",
-      "newUsername": "Nuwe gebruikersnaam",
-      "addUser": "Voeg by",
-      "deleteUser": "Vee gebruiker uit",
-      "noHealthChecks": "Geen gesondheidskontroles is nog opgestel nie.",
-      "follow": "Volg",
-      "noLogData": "Geen loguitvoer nie.",
-      "tree": "Boom",
-      "enableDisable": "Aktiveer/deaktiveer tydens opstart",
-      "grantSudo": "Gee sudo toe",
-      "revokeSudo": "Herroep sudo",
-      "sslIssueCert": "Uitgawesertifikaat",
-      "sslExpired": "Verstryk",
-      "sslInDays": "in {{days}}d",
-      "sslNeedDomain": "Voer ten minste een domein in",
-      "sslIssued": "Sertifikaat uitgereik",
-      "sslDomainsPlaceholder": "voorbeeld.com, www.voorbeeld.com",
-      "sslHttpStandalone": "HTTP (losstaande)",
-      "sslHttpWebroot": "HTTP (webwortel)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "DNS-verskaffer (bv. cloudflare)",
-      "sslIssueHint": "DNS-verskaffer se geloofsbriewe moet reeds op die gasheer gekonfigureer wees.",
-      "sslRevoke": "Herroep sertifikaat",
-      "sslRevoked": "Sertifikaat herroep",
-      "sslRevokeConfirm": "Herroep en verwyder die sertifikaat \"{{name}}\"? Dit kan nie ongedaan gemaak word nie.",
-      "healthRun": "Hardloop",
-      "healthName": "Naam",
-      "healthTarget": "Gasheer / adres",
-      "healthAddCheck": "Voeg tjek by",
-      "healthSaved": "Gesondheidskontroles gestoor",
-      "healthMissingFields": "Elke tjek benodig 'n naam en teiken",
-      "logFile": "Lêer",
-      "logUnit": "Eenheid",
-      "logCustomPath": "Pasgemaakte pad onder /var/log (opsioneel)",
-      "logGrep": "Filterlyne...",
-      "firewallPersist": "Behou reëls",
-      "firewallPersisted": "Firewall-reëls het voortgeduur",
-      "wireguard": "Draadbeskerming",
-      "wgNotInstalled": "WireGuard is nie op hierdie gasheer geïnstalleer nie",
-      "wgNoInterfaces": "Geen WireGuard-koppelvlakke gekonfigureer nie",
-      "wgInterfaceUp": "Bring op",
-      "wgInterfaceDown": "Bring af",
-      "wgBringingUp": "Bring {{name}} op...",
-      "wgBringingDown": "Bring {{name}} af...",
-      "wgInterfaceUpDone": "{{name}} is op",
-      "wgInterfaceDownDone": "{{name}} is af",
-      "wgListenPort": "Hawe",
-      "wgPublicKey": "Publieke sleutel",
-      "wgEndpoint": "Eindpunt",
-      "wgAllowedIPs": "Toegelate IP's",
-      "wgLastHandshake": "Laaste handdruk",
-      "wgHandshakeNever": "Nooit",
-      "wgTransfer": "Oordrag",
-      "wgNoPeers": "Geen eweknieë nie"
-    }
-  },
-  "metricsHistory": {
-    "title": "Metrieke Geskiedenis",
-    "historySuffix": "Geskiedenis",
-    "cpuMemoryDisk": "SVE / Geheue / Skyf",
-    "network": "Netwerk",
-    "download": "RX",
-    "upload": "TX",
-    "noData": "Geen geskiedenisdata beskikbaar vir hierdie tydperk nie.",
-    "custom": "Pasgemaak",
-    "to": "om",
-    "apply": "Dien toe",
-    "viewHistory": "Bekyk Geskiedenis"
-  },
-  "hosts": {
-    "tabHostMetrics": "Gasheermetrieke",
-    "metricsCollectionLabel": "Metrieke-versameling",
-    "enableMetricsLabel": "Aktiveer Metrieke",
-    "enableMetricsDesc": "Versamel SVE-, RAM-, skyf- en ander statistieke van hierdie gasheer",
-    "useGlobalMetrics": "Gebruik globale interval",
-    "useGlobalMetricsDesc": "Oorskryf met die bedienerwye metrieke-interval",
-    "metricsIntervalS": "Metrieke Interval (s)",
-    "metricsIntervalDesc2": "Sekondes tussen metrieke momentopnames",
-    "excludedMountsLabel": "Uitgesluite Monterings",
-    "monitoredMountsLabel": "Pasgemaakte gemonitorde paaie",
-    "monitoredMountsDesc": "Voeg paaie by wat nie as aparte monterings blootgestel word nie, insluitend bind-gemonteerde Home Assistant-paaie soos /config.",
-    "monitoredMountPathPlaceholder": "Pad (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Etiket (opsioneel)",
-    "addMonitoredMount": "Voeg pad by",
-    "excludedMountsDesc": "Versteek spesifieke koppelpunte of lêerstelseltipes (bv. nfs, cifs) van skyfgebruik en waarskuwings vir hierdie gasheer.",
-    "excludedMountsPlaceholder": "Monteerpad (/mnt/nas) of lêerstelseltipe (nfs, cifs)",
-    "excludedMountsEmpty": "Geen koppelstukke uitgesluit nie. Alle opgespoorde lêerstelsels word getoon.",
-    "addExcludedMount": "Voeg by",
-    "visibleWidgets": "Sigbare Widgets",
-    "widgetsMovedToHostMetrics": "Kaarte word nou direk in die Gasheermetrieke-oortjie bygevoeg, gerangskik en herskaal. Maak Gasheermetrieke vir hierdie gasheer oop en gebruik Pasmaak om te kies watter kaarte gewys word.",
-    "hostNotFound": "Gasheer nie gevind nie",
-    "loadingHost": "Laai gasheer..."
-  },
-  "onboarding": {
-    "feature_metrics": "Metrieke en waarskuwings",
-    "feature_metrics_desc": "Volg die SVE, geheue en skyf oor tyd en word gewaarsku wanneer hulle sleg word."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Metrieke Geskiedenis Behoud",
-    "metricsHistoryRetentionRange": "1 tot 90 dae",
-    "days": "dae"
-  },
-  "homepage": {
-    "noData": "Geen data beskikbaar nie",
-    "showCurrentValue": "Wys huidige waarde",
-    "chartMetric": "Metrieke",
-    "metricRange": "Reikwydte",
-    "host": "Gasheer",
-    "loading": "Laai tans...",
-    "metricCpu": "SVE",
-    "metricDisk": "Skyf",
-    "metricHostname": "Gasheernaam",
-    "metricKernel": "Kern",
-    "metricMemory": "Geheue",
-    "metricNetwork": "Netwerk",
-    "metricOs": "OS",
-    "metricProcesses": "Prosesse",
-    "metricProcessesRunning": "hardloop",
-    "metricProcessesTotal": "totaal",
-    "metricUptime": "Optyd",
-    "metricsNotAvailable": "Metrieke nie beskikbaar nie",
-    "noHostSelected": "Geen gasheer gekies nie",
-    "selectHost": "Kies 'n gasheer..."
-  },
-  "terminalStatus": {
-    "unavailable": "Regstreekse statistieke is nie beskikbaar nie"
-  },
-  "dashboard": {
-    "cpu": "SVE",
-    "ram": "RAM"
-  },
-  "dashboardTab": {
-    "disk": "Skyf"
-  },
-  "terminal": {
-    "connected": "Verbonde"
-  },
-  "permissions": {
-    "use": {
-      "title": "Gebruik gasheermetrieke",
-      "description": "Bekyk gasheerstatistieke en gebruik die gasheerbestuurders (dienste, pakkette, firewall en meer) op gashere wat jy kan bereik."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Metrieke-interval (sekondes)",
-        "description": "Hoe gereeld 'n gasheer wat besigtig word, gemonster word, tensy die gasheer sy eie interval stel."
-      },
-      "historyRetentionDays": {
-        "label": "Geskiedenisbewaring (dae)",
-        "description": "Hoe lank word metrieke-monsters vir die geskiedenisgrafieke gehou."
-      },
-      "enabledForNewHosts": {
-        "label": "Metrieke aan vir nuwe gashere",
-        "description": "Of nuwe gashere begin met metrieke-insameling aangeskakel."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Temperatuureenheid",
-        "description": "Hoe temperature in Host Metrics getoon word.",
-        "celsius": "Celsius",
-        "fahrenheit": "Fahrenheit"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Versamel statistieke"
-      },
-      "metricsInterval": {
-        "label": "Metrieke-interval (sekondes)"
-      },
-      "enabledWidgets": {
-        "label": "Geaktiveerde widgets"
-      },
-      "excludedMounts": {
-        "label": "Uitgesluite monterings"
-      },
-      "monitoredMounts": {
-        "label": "Gemonitorde paaie"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Gasheermetrieke"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/ar_SA.json b/plugins/host-metrics/locales/translated/ar_SA.json
deleted file mode 100644
index 252862f27..000000000
--- a/plugins/host-metrics/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "مقاييس المضيف"
-  },
-  "hostMetrics": {
-    "cpu": "المعالج",
-    "memory": "الذاكرة",
-    "disk": "القرص",
-    "network": "الشبكة",
-    "uptime": "مدة التشغيل",
-    "processes": "العمليات",
-    "available": "المتاح",
-    "free": "الخالي",
-    "connecting": "جارٍ الاتصال...",
-    "connectionFailed": "فشل الاتصال بالخادم",
-    "naCpus": "غير متوفر",
-    "cpuCores_one": "{{count}} نواة",
-    "cpuCores_other": "{{count}} نوى",
-    "cpuUsage": "استخدام المعالج",
-    "memoryUsage": "استخدام الذاكرة",
-    "diskUsage": "استخدام القرص",
-    "selectFilesystem": "حدد نظام الملفات",
-    "temperature": "درجة الحرارة",
-    "highestTemperature": "أعلى درجة حرارة",
-    "primaryTemperatureSensor": "المستشعر الأساسي",
-    "gpu": {
-      "title": "وحدة معالجة الرسومات",
-      "noDevice": "لم يتم الكشف عن وحدة معالجة رسومات NVIDIA. قم بتثبيت برنامج تشغيل NVIDIA (يوفر nvidia-smi) لعرض مقاييس وحدة معالجة الرسومات.",
-      "driver": "السائق {{version}}",
-      "utilization": "استخدام",
-      "memory": "ذاكرة الوصول العشوائي للفيديو",
-      "temperature": "درجة حرارة",
-      "power": "قوة",
-      "fan": "معجب",
-      "processes": "عمليات وحدة معالجة الرسومات",
-      "noProcesses": "لا توجد عمليات تستخدم وحدة معالجة الرسومات (GPU)."
-    },
-    "failedToFetchHostConfig": "فشل جلب تكوين المضيف",
-    "serverOffline": "الخادم غير متصل",
-    "cannotFetchMetrics": "لا يمكن جلب المؤشرات من خادم غير متصل",
-    "totpFailed": "فشل التحقق من TOTP",
-    "noneAuthNotSupported": "مقاييس المضيف لا تدعم نوع المصادقة 'none'.",
-    "noHostSelected": "لم يتم تحديد مضيف",
-    "load": "الحمل",
-    "systemInfo": "معلومات النظام",
-    "hostname": "اسم المضيف",
-    "operatingSystem": "نظام التشغيل",
-    "kernel": "النواة",
-    "seconds": "ثوانٍ",
-    "networkInterfaces": "واجهات الشبكة",
-    "noInterfacesFound": "لم يتم العثور على واجهات شبكة",
-    "noProcessesFound": "لم يتم العثور على عمليات",
-    "processesTotal": "الإجمالي",
-    "processesRunning": "قيد التشغيل",
-    "loginStats": "إحصائيات تسجيل الدخول عبر SSH",
-    "noRecentLoginData": "لا توجد بيانات تسجيل دخول حديثة",
-    "ports": {
-      "title": "المنافذ المستمعة",
-      "protocol": "البروتوكول",
-      "port": "المنفذ",
-      "address": "العنوان",
-      "process": "العملية",
-      "search": "بحث في المنافذ...",
-      "allProtocols": "الكل",
-      "noData": "لا توجد بيانات للمنافذ المستمعة"
-    },
-    "firewall": {
-      "title": "جدار الحماية",
-      "inactive": "غير نشط",
-      "policy": "السياسة",
-      "rules": "قواعد",
-      "noRules": "لا توجد قواعد في هذه السلسلة",
-      "noData": "لا توجد بيانات لجدار الحماية",
-      "action": "الإجراء",
-      "protocol": "البروتوكول",
-      "port": "المنفذ",
-      "source": "المصدر",
-      "anywhere": "أي مكان",
-      "chains": "السلاسل"
-    },
-    "loadAvg": "متوسط التحميل",
-    "swap": "التبديل",
-    "architecture": "المعمارية",
-    "refresh": "تحديث",
-    "retry": "إعادة المحاولة",
-    "customize": "تخصيص التخطيط",
-    "reset": "إعادة تعيين",
-    "tabLive": "مباشر",
-    "editModeInstructions": "اسحب البطاقات لإعادة ترتيبها، واسحب الحافة السفلية لتغيير حجمها، واستخدم زر العرض لتغيير امتداد البطاقة. أضف البطاقات أو أزلها أدناه.",
-    "managers": {
-      "services": "الخدمات",
-      "processInspector": "مفتش العمليات",
-      "logViewer": "عارض السجلات",
-      "cron": "مهام كرون",
-      "packages": "الحزم",
-      "ssl": "شهادات SSL",
-      "firewall": "جدار الحماية",
-      "users": "المستخدمون والأذونات",
-      "healthCheck": "فحوصات الصحة",
-      "diskBreakdown": "تفصيل القرص",
-      "systemdTimers": "المؤقتات",
-      "topMemory": "الأعلى استهلاكًا للذاكرة",
-      "noData": "لا توجد بيانات",
-      "sudoHint": "قم بتعيين كلمة مرور sudo لهذا المضيف في محرر المضيف لتمكين الإجراءات المميزة.",
-      "filter": "تصفية...",
-      "start": "بدء",
-      "stop": "إيقاف",
-      "restart": "إعادة تشغيل",
-      "actionDone": "تم تحديث {{name}}",
-      "actionFailed": "فشل الإجراء",
-      "signalSent": "تم إرسال إشارة إلى PID {{pid}}",
-      "killHint": "نقرة: إنهاء (SIGTERM). نقرة بزر الماوس الأيمن: إنهاء إجباري (SIGKILL).",
-      "working": "جارٍ العمل...",
-      "update": "تحديث",
-      "upgradeAll": "ترقية الكل",
-      "allUpToDate": "كل شيء محدث",
-      "save": "حفظ",
-      "command": "أمر",
-      "enabled": "مفعل",
-      "cronSaved": "تم تحديث crontab",
-      "clients": "العملاء",
-      "dryRun": "تشغيل تجريبي",
-      "renew": "تجديد",
-      "noAcmeClient": "لم يتم العثور على عميل ACME (certbot أو acme.sh) على هذا المضيف.",
-      "addInputRule": "إضافة قاعدة INPUT",
-      "firewallWarning": "التغييرات مؤقتة حتى يتم حفظها. احذر من قفل وصولك.",
-      "ruleApplied": "تم تطبيق القاعدة",
-      "invalidPort": "أدخل منفذًا صالحًا (1-65535)",
-      "newUsername": "اسم مستخدم جديد",
-      "addUser": "إضافة",
-      "deleteUser": "حذف المستخدم",
-      "noHealthChecks": "لم يتم تكوين فحوصات الصحة بعد.",
-      "follow": "متابعة",
-      "noLogData": "لا توجد مخرجات سجل.",
-      "tree": "شجري",
-      "enableDisable": "تفعيل / تعطيل عند الإقلاع",
-      "grantSudo": "منح sudo",
-      "revokeSudo": "سحب sudo",
-      "sslIssueCert": "إصدار شهادة",
-      "sslExpired": "منتهية الصلاحية",
-      "sslInDays": "خلال {{days}} يومًا",
-      "sslNeedDomain": "أدخل نطاقًا واحدًا على الأقل",
-      "sslIssued": "تم إصدار الشهادة",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (مستقل)",
-      "sslHttpWebroot": "HTTP (webroot)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "مزود DNS (مثل cloudflare)",
-      "sslIssueHint": "يجب أن تكون بيانات اعتماد مزود DNS قد تم تكوينها مسبقًا على المضيف.",
-      "sslRevoke": "إلغاء الشهادة",
-      "sslRevoked": "تم إلغاء الشهادة",
-      "sslRevokeConfirm": "هل تريد إلغاء الشهادة \"{{name}}\" وإزالتها؟ لا يمكن التراجع عن هذا الإجراء.",
-      "healthRun": "تشغيل",
-      "healthName": "الاسم",
-      "healthTarget": "المضيف / العنوان",
-      "healthAddCheck": "إضافة فحص",
-      "healthSaved": "تم حفظ فحوصات الصحة",
-      "healthMissingFields": "يتطلب كل فحص اسمًا وهدفًا",
-      "logFile": "ملف",
-      "logUnit": "وحدة",
-      "logCustomPath": "مسار مخصص تحت /var/log (اختياري)",
-      "logGrep": "تصفية السطور...",
-      "firewallPersist": "حفظ القواعد",
-      "firewallPersisted": "تم حفظ قواعد جدار الحماية",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "WireGuard غير مثبت على هذا المضيف",
-      "wgNoInterfaces": "لا توجد واجهات WireGuard مُعدّة",
-      "wgInterfaceUp": "رفع",
-      "wgInterfaceDown": "إنزال",
-      "wgBringingUp": "جارٍ رفع {{name}}...",
-      "wgBringingDown": "جارٍ إنزال {{name}}...",
-      "wgInterfaceUpDone": "{{name}} مرفوع",
-      "wgInterfaceDownDone": "{{name}} منزّل",
-      "wgListenPort": "المنفذ",
-      "wgPublicKey": "المفتاح العام",
-      "wgEndpoint": "نقطة النهاية",
-      "wgAllowedIPs": "عناوين IP المسموح بها",
-      "wgLastHandshake": "آخر مصافحة",
-      "wgHandshakeNever": "أبدًا",
-      "wgTransfer": "نقل",
-      "wgNoPeers": "لا يوجد نظراء"
-    }
-  },
-  "metricsHistory": {
-    "title": "سجل المقاييس",
-    "historySuffix": "السجل",
-    "cpuMemoryDisk": "وحدة المعالجة المركزية / الذاكرة / القرص",
-    "network": "الشبكة",
-    "download": "استقبال",
-    "upload": "إرسال",
-    "noData": "لا توجد بيانات تاريخية متاحة لهذا النطاق الزمني.",
-    "custom": "مخصص",
-    "to": "إلى",
-    "apply": "تطبيق",
-    "viewHistory": "عرض السجل"
-  },
-  "hosts": {
-    "tabHostMetrics": "مقاييس المضيف",
-    "metricsCollectionLabel": "تجميع المقاييس",
-    "enableMetricsLabel": "تمكين المقاييس",
-    "enableMetricsDesc": "تجميع مقاييس وحدة المعالجة المركزية والذاكرة والقرص وغيرها من هذا المضيف",
-    "useGlobalMetrics": "استخدام الفاصل الزمني العام",
-    "useGlobalMetricsDesc": "تجاوز باستخدام فترة المقاييس على مستوى الخادم",
-    "metricsIntervalS": "فترة المقاييس (ثانية)",
-    "metricsIntervalDesc2": "الثواني بين لقطات المقاييس",
-    "excludedMountsLabel": "التركيبات المستثناة",
-    "monitoredMountsLabel": "مسارات مراقبة مخصصة",
-    "monitoredMountsDesc": "أضف المسارات التي لا يتم عرضها كعمليات ربط منفصلة، بما في ذلك مسارات Home Assistant المرتبطة مثل /config.",
-    "monitoredMountPathPlaceholder": "المسار (/config، /mnt/data)",
-    "monitoredMountLabelPlaceholder": "وسم (اختياري)",
-    "addMonitoredMount": "إضافة مسار",
-    "excludedMountsDesc": "إخفاء نقاط التحميل المحددة أو أنواع أنظمة الملفات (مثل nfs و cifs) من استخدام القرص والتنبيهات لهذا المضيف.",
-    "excludedMountsPlaceholder": "مسار التثبيت (/mnt/nas) أو نوع نظام الملفات (nfs، cifs)",
-    "excludedMountsEmpty": "لم يتم استبعاد أي وحدات تخزين. يتم عرض جميع أنظمة الملفات المكتشفة.",
-    "addExcludedMount": "إضافة",
-    "visibleWidgets": "الأدوات المرئية",
-    "widgetsMovedToHostMetrics": "تتم الآن إضافة البطاقات وترتيبها وتغيير حجمها مباشرةً في علامة تبويب مقاييس المضيف. افتح مقاييس المضيف لهذا المضيف واستخدم تخصيص لاختيار البطاقات التي ستظهر.",
-    "hostNotFound": "المضيف غير موجود",
-    "loadingHost": "جارٍ تحميل المضيف..."
-  },
-  "onboarding": {
-    "feature_metrics": "المقاييس والتنبيهات",
-    "feature_metrics_desc": "تتبع أداء وحدة المعالجة المركزية والذاكرة والقرص بمرور الوقت، واحصل على تنبيهات عند حدوث مشاكل فيها."
-  },
-  "admin": {
-    "metricsHistoryRetention": "الاحتفاظ بسجل المقاييس",
-    "metricsHistoryRetentionRange": "من 1 إلى 90 يومًا",
-    "days": "أيام"
-  },
-  "homepage": {
-    "noData": "لا توجد بيانات",
-    "showCurrentValue": "إظهار القيمة الحالية",
-    "chartMetric": "المقياس",
-    "metricRange": "النطاق",
-    "host": "المضيف",
-    "loading": "جار التحميل...",
-    "metricCpu": "CPU",
-    "metricDisk": "القرص",
-    "metricHostname": "اسم المضيف",
-    "metricKernel": "النواة",
-    "metricMemory": "الذاكرة",
-    "metricNetwork": "الشبكة",
-    "metricOs": "نظام التشغيل",
-    "metricProcesses": "العمليات",
-    "metricProcessesRunning": "قيد التشغيل",
-    "metricProcessesTotal": "إجمالي",
-    "metricUptime": "وقت التشغيل",
-    "metricsNotAvailable": "المقاييس غير متوفرة",
-    "noHostSelected": "لم يتم تحديد أي مضيف",
-    "selectHost": "اختيار مضيف..."
-  },
-  "terminalStatus": {
-    "unavailable": "الإحصائيات المباشرة غير متوفرة"
-  },
-  "dashboard": {
-    "cpu": "المعالج",
-    "ram": "الذاكرة"
-  },
-  "dashboardTab": {
-    "disk": "القرص"
-  },
-  "terminal": {
-    "connected": "متصل"
-  },
-  "permissions": {
-    "use": {
-      "title": "استخدام مقاييس المضيف",
-      "description": "يمكنك عرض مقاييس المضيف واستخدام مديري المضيف (الخدمات والحزم وجدار الحماية والمزيد) على المضيفين الذين يمكنك الوصول إليهم."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "فاصل القياسات (بالثواني)",
-        "description": "عدد مرات أخذ عينات من المضيف الذي تتم مشاهدته، ما لم يحدد المضيف الفاصل الزمني الخاص به."
-      },
-      "historyRetentionDays": {
-        "label": "مدة الاحتفاظ بالسجل (بالأيام)",
-        "description": "مدة الاحتفاظ بعينات المقاييس في مخططات التاريخ."
-      },
-      "enabledForNewHosts": {
-        "label": "تم تفعيل المقاييس للمضيفين الجدد",
-        "description": "ما إذا كانت الأجهزة المضيفة الجديدة تبدأ بتفعيل خاصية جمع البيانات الإحصائية."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "وحدة قياس درجة الحرارة",
-        "description": "كيفية عرض درجات الحرارة في مقاييس المضيف.",
-        "celsius": "درجة مئوية",
-        "fahrenheit": "فهرنهايت"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "جمع المقاييس"
-      },
-      "metricsInterval": {
-        "label": "فاصل القياسات (بالثواني)"
-      },
-      "enabledWidgets": {
-        "label": "الأدوات المُفعّلة"
-      },
-      "excludedMounts": {
-        "label": "التركيبات المستثناة"
-      },
-      "monitoredMounts": {
-        "label": "المسارات المراقبة"
-      }
-    }
-  },
-  "plugin": {
-    "name": "مقاييس المضيف"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/bg_BG.json b/plugins/host-metrics/locales/translated/bg_BG.json
deleted file mode 100644
index f94003b2b..000000000
--- a/plugins/host-metrics/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Метрики на хоста"
-  },
-  "hostMetrics": {
-    "cpu": "Процесор",
-    "memory": "Памет",
-    "disk": "Диск",
-    "network": "Мрежа",
-    "uptime": "Време на работа",
-    "processes": "Процеси",
-    "available": "Налично",
-    "free": "Безплатно",
-    "connecting": "Свързване...",
-    "connectionFailed": "Неуспешно свързване със сървъра",
-    "naCpus": "Няма процесор(и)",
-    "cpuCores_one": "{{count}} Ядро",
-    "cpuCores_other": "{{count}} Ядра",
-    "cpuUsage": "Използване на процесора",
-    "memoryUsage": "Използване на паметта",
-    "diskUsage": "Използване на диска",
-    "selectFilesystem": "Изберете файлова система",
-    "temperature": "Температура",
-    "highestTemperature": "Най-висока температура",
-    "primaryTemperatureSensor": "Първичен сензор",
-    "gpu": {
-      "title": "Графичен процесор",
-      "noDevice": "Не е открит графичен процесор NVIDIA. Инсталирайте драйвера на NVIDIA (той предоставя nvidia-smi), за да видите показателите на графичния процесор.",
-      "driver": "Шофьор {{version}}",
-      "utilization": "Употреба",
-      "memory": "Видео памет (VRAM)",
-      "temperature": "Температура",
-      "power": "Мощност",
-      "fan": "Вентилатор",
-      "processes": "Процеси на графичния процесор",
-      "noProcesses": "Няма процеси, които да използват графичния процесор"
-    },
-    "failedToFetchHostConfig": "Неуспешно извличане на конфигурацията на хоста",
-    "serverOffline": "Сървърът е офлайн",
-    "cannotFetchMetrics": "Не могат да се извлекат показатели от офлайн сървър",
-    "totpFailed": "Проверката на TOTP не бе успешна",
-    "noneAuthNotSupported": "Метриките на хоста не поддържат тип удостоверяване „няма“.",
-    "noHostSelected": "Няма избран хост",
-    "load": "Зареждане",
-    "systemInfo": "Системна информация",
-    "hostname": "Име на хост",
-    "operatingSystem": "Операционна система",
-    "kernel": "Ядро",
-    "seconds": "секунди",
-    "networkInterfaces": "Мрежови интерфейси",
-    "noInterfacesFound": "Не са намерени мрежови интерфейси",
-    "noProcessesFound": "Не са намерени процеси",
-    "processesTotal": "общо",
-    "processesRunning": "бягане",
-    "loginStats": "Статистика за SSH вход",
-    "noRecentLoginData": "Няма скорошни данни за вход",
-    "ports": {
-      "title": "Портове за слушане",
-      "protocol": "Протокол",
-      "port": "Порт",
-      "address": "Адрес",
-      "process": "Процес",
-      "search": "Търсене на портове...",
-      "allProtocols": "Всички",
-      "noData": "Няма данни за портове за слушане"
-    },
-    "firewall": {
-      "title": "Защитна стена",
-      "inactive": "Неактивен",
-      "policy": "Политика",
-      "rules": "правила",
-      "noRules": "Няма правила в тази верига",
-      "noData": "Няма налични данни за защитната стена",
-      "action": "Действие",
-      "protocol": "Прото",
-      "port": "Порт",
-      "source": "Източник",
-      "anywhere": "Навсякъде",
-      "chains": "вериги"
-    },
-    "loadAvg": "Зареждане на средно",
-    "swap": "Размяна",
-    "architecture": "Архитектура",
-    "refresh": "Обновяване",
-    "retry": "Опитай отново",
-    "customize": "Персонализиране на оформлението",
-    "reset": "Нулиране",
-    "tabLive": "На живо",
-    "editModeInstructions": "Плъзнете картите, за да ги пренаредите, плъзнете долния ръб, за да промените размера им, и използвайте бутона за ширина, за да промените обхвата на картата. Добавете или премахнете карти по-долу.",
-    "managers": {
-      "services": "Услуги",
-      "processInspector": "Инспектор на процеси",
-      "logViewer": "Преглед на лог файлове",
-      "cron": "Cron задачи",
-      "packages": "Пакети",
-      "ssl": "SSL сертификати",
-      "firewall": "Защитна стена",
-      "users": "Потребители и разрешения",
-      "healthCheck": "Проверки на състоянието",
-      "diskBreakdown": "Разбивка на диска",
-      "systemdTimers": "Таймери",
-      "topMemory": "Най-горе по памет",
-      "noData": "Няма данни",
-      "sudoHint": "Задайте парола за sudo за този хост в редактора на хостове, за да активирате привилегировани действия.",
-      "filter": "Филтър...",
-      "start": "Старт",
-      "stop": "Спри",
-      "restart": "Рестартиране",
-      "actionDone": "{{name}} актуализирано",
-      "actionFailed": "Действието е неуспешно",
-      "signalSent": "Сигнал, изпратен към PID {{pid}}",
-      "killHint": "Щракване: прекратяване (SIGTERM). Щракване с десен бутон: принудително прекъсване (SIGKILL).",
-      "working": "Работа...",
-      "update": "Актуализация",
-      "upgradeAll": "Надстройте всички",
-      "allUpToDate": "Всичко е актуално",
-      "save": "Запазване",
-      "command": "Команда",
-      "enabled": "Активирано",
-      "cronSaved": "Crontab е актуализиран",
-      "clients": "Клиенти",
-      "dryRun": "Сухо изпълнение",
-      "renew": "Подновяване",
-      "noAcmeClient": "Не е намерен ACME клиент (certbot или acme.sh) на този хост.",
-      "addInputRule": "Добавяне на правило INPUT",
-      "firewallWarning": "Промените са само по време на изпълнение, докато не бъдат запазени. Внимавайте да не се заключите.",
-      "ruleApplied": "Правилото е приложено",
-      "invalidPort": "Въведете валиден порт (1-65535)",
-      "newUsername": "Ново потребителско име",
-      "addUser": "Добавяне",
-      "deleteUser": "Изтриване на потребител",
-      "noHealthChecks": "Все още няма конфигурирани проверки за състоянието.",
-      "follow": "Следвай",
-      "noLogData": "Няма изходен лог.",
-      "tree": "Дърво",
-      "enableDisable": "Активиране/деактивиране при зареждане",
-      "grantSudo": "Грант sudo",
-      "revokeSudo": "Отмяна на sudo",
-      "sslIssueCert": "Издаване на сертификат",
-      "sslExpired": "Изтекъл",
-      "sslInDays": "в {{days}}дни",
-      "sslNeedDomain": "Въведете поне един домейн",
-      "sslIssued": "Издаден сертификат",
-      "sslDomainsPlaceholder": "пример.com, www.example.com",
-      "sslHttpStandalone": "HTTP (самостоятелен)",
-      "sslHttpWebroot": "HTTP (уебкорен)",
-      "sslDns": "ДНС",
-      "sslDnsProvider": "DNS доставчик (напр. cloudflare)",
-      "sslIssueHint": "Идентификационните данни на DNS доставчика трябва вече да са конфигурирани на хоста.",
-      "sslRevoke": "Анулиране на сертификат",
-      "sslRevoked": "Сертификатът е отменен",
-      "sslRevokeConfirm": "Да се отмени и премахне сертификатът „{{name}}“? Това не може да бъде отменено.",
-      "healthRun": "Бягане",
-      "healthName": "Име",
-      "healthTarget": "Хост / адрес",
-      "healthAddCheck": "Добавяне на чек",
-      "healthSaved": "Запазени са здравни проверки",
-      "healthMissingFields": "Всяка проверка се нуждае от име и цел",
-      "logFile": "Файл",
-      "logUnit": "Единица",
-      "logCustomPath": "Персонализиран път в /var/log (по избор)",
-      "logGrep": "Филтърни линии...",
-      "firewallPersist": "Запазване на правилата",
-      "firewallPersisted": "Правилата на защитната стена се запазиха",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "WireGuard не е инсталиран на този хост",
-      "wgNoInterfaces": "Няма конфигурирани WireGuard интерфейси",
-      "wgInterfaceUp": "Доведете",
-      "wgInterfaceDown": "Свалете",
-      "wgBringingUp": "Извеждане на {{name}} нагоре...",
-      "wgBringingDown": "Сваляне на {{name}}...",
-      "wgInterfaceUpDone": "{{name}} е нагоре",
-      "wgInterfaceDownDone": "{{name}} не работи",
-      "wgListenPort": "Порт",
-      "wgPublicKey": "Публичен ключ",
-      "wgEndpoint": "Крайна точка",
-      "wgAllowedIPs": "Разрешени IP адреси",
-      "wgLastHandshake": "Последно ръкостискане",
-      "wgHandshakeNever": "Никога",
-      "wgTransfer": "Трансфер",
-      "wgNoPeers": "Няма връстници"
-    }
-  },
-  "metricsHistory": {
-    "title": "История на показателите",
-    "historySuffix": "История",
-    "cpuMemoryDisk": "Процесор / Памет / Диск",
-    "network": "Мрежа",
-    "download": "Рецепта",
-    "upload": "Тексас",
-    "noData": "Няма налични исторически данни за този период от време.",
-    "custom": "Персонализирано",
-    "to": "до",
-    "apply": "Приложи",
-    "viewHistory": "Преглед на историята"
-  },
-  "hosts": {
-    "tabHostMetrics": "Метрики на хоста",
-    "metricsCollectionLabel": "Колекция от показатели",
-    "enableMetricsLabel": "Активиране на показатели",
-    "enableMetricsDesc": "Събиране на данни за процесора, RAM, диска и други показатели от този хост",
-    "useGlobalMetrics": "Използване на глобален интервал",
-    "useGlobalMetricsDesc": "Замяна с интервала на показателите за целия сървър",
-    "metricsIntervalS": "Интервал(и) на показателите",
-    "metricsIntervalDesc2": "Секунди между моментните снимки на показателите",
-    "excludedMountsLabel": "Изключени монтировки",
-    "monitoredMountsLabel": "Персонализирани наблюдавани пътища",
-    "monitoredMountsDesc": "Добавете пътища, които не са изложени като отделни монтирания, включително пътища за монтиран Home Assistant чрез свързване, като например /config.",
-    "monitoredMountPathPlaceholder": "Път (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Етикет (по избор)",
-    "addMonitoredMount": "Добавяне на път",
-    "excludedMountsDesc": "Скриване на специфични точки на монтиране или типове файлови системи (напр. nfs, cifs) от използването на диска и предупрежденията за този хост.",
-    "excludedMountsPlaceholder": "Път за монтиране (/mnt/nas) или тип файлова система (nfs, cifs)",
-    "excludedMountsEmpty": "Няма изключени монтирания. Показват се всички открити файлови системи.",
-    "addExcludedMount": "Добавяне",
-    "visibleWidgets": "Видими джаджи",
-    "widgetsMovedToHostMetrics": "Картите вече се добавят, подреждат и преоразмеряват директно в раздела „Показатели за хоста“. Отворете „Показатели за хоста“ за този хост и използвайте „Персонализиране“, за да изберете кои карти да се показват.",
-    "hostNotFound": "Хостът не е намерен",
-    "loadingHost": "Зареждане на хоста..."
-  },
-  "onboarding": {
-    "feature_metrics": "Показатели и сигнали",
-    "feature_metrics_desc": "Проследявайте процесора, паметта и диска с течение на времето и получавайте известия, когато се повредят."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Запазване на историята на показателите",
-    "metricsHistoryRetentionRange": "от 1 до 90 дни",
-    "days": "дни"
-  },
-  "homepage": {
-    "noData": "Няма налични данни",
-    "showCurrentValue": "Показване на текущата стойност",
-    "chartMetric": "Метричен",
-    "metricRange": "Диапазон",
-    "host": "Домакин",
-    "loading": "Зареждане...",
-    "metricCpu": "Процесор",
-    "metricDisk": "Диск",
-    "metricHostname": "Име на хост",
-    "metricKernel": "Ядро",
-    "metricMemory": "Памет",
-    "metricNetwork": "Мрежа",
-    "metricOs": "ОС",
-    "metricProcesses": "Процеси",
-    "metricProcessesRunning": "бягане",
-    "metricProcessesTotal": "общо",
-    "metricUptime": "Време на работа",
-    "metricsNotAvailable": "Показателите не са налични",
-    "noHostSelected": "Няма избран хост",
-    "selectHost": "Изберете хост..."
-  },
-  "terminalStatus": {
-    "unavailable": "Статистически данни в реално време не са налични"
-  },
-  "dashboard": {
-    "cpu": "Процесор",
-    "ram": "RAM памет"
-  },
-  "dashboardTab": {
-    "disk": "Диск"
-  },
-  "terminal": {
-    "connected": "Свързан"
-  },
-  "permissions": {
-    "use": {
-      "title": "Използвайте показатели за хоста",
-      "description": "Преглеждайте показателите на хоста и използвайте мениджърите на хостове (услуги, пакети, защитна стена и други) на хостовете, до които можете да достигнете."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Интервал на показателите (секунди)",
-        "description": "Колко често се семплира даден хост, освен ако хостът не зададе свой собствен интервал."
-      },
-      "historyRetentionDays": {
-        "label": "Запазване на историята (дни)",
-        "description": "Колко дълго се съхраняват извадки от показатели за историческите графики."
-      },
-      "enabledForNewHosts": {
-        "label": "Метрики за нови хостове",
-        "description": "Дали новите хостове започват с включено събиране на показатели."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Температурна единица",
-        "description": "Как се показват температурите в Host Metrics.",
-        "celsius": "Целзий",
-        "fahrenheit": "Фаренхайт"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Събиране на показатели"
-      },
-      "metricsInterval": {
-        "label": "Интервал на показателите (секунди)"
-      },
-      "enabledWidgets": {
-        "label": "Активирани джаджи"
-      },
-      "excludedMounts": {
-        "label": "Изключени монтировки"
-      },
-      "monitoredMounts": {
-        "label": "Мониторирани пътища"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Метрики на хоста"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/bn_BD.json b/plugins/host-metrics/locales/translated/bn_BD.json
deleted file mode 100644
index 66b0b78da..000000000
--- a/plugins/host-metrics/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "হোস্ট মেট্রিক্স"
-  },
-  "hostMetrics": {
-    "cpu": "সিপিইউ",
-    "memory": "স্মৃতি",
-    "disk": "ডিস্ক",
-    "network": "নেটওয়ার্ক",
-    "uptime": "আপটাইম",
-    "processes": "প্রক্রিয়া",
-    "available": "উপলব্ধ",
-    "free": "বিনামূল্যে",
-    "connecting": "সংযোগ স্থাপন...",
-    "connectionFailed": "সার্ভারের সাথে সংযোগ করতে ব্যর্থ হয়েছে",
-    "naCpus": "প্রযোজ্য নয় সিপিইউ(গুলি)",
-    "cpuCores_one": "{{count}} কোর",
-    "cpuCores_other": "{{count}} কোর",
-    "cpuUsage": "সিপিইউ ব্যবহার",
-    "memoryUsage": "মেমরি ব্যবহার",
-    "diskUsage": "ডিস্ক ব্যবহার",
-    "selectFilesystem": "ফাইলসিস্টেম নির্বাচন করুন",
-    "temperature": "তাপমাত্রা",
-    "highestTemperature": "সর্বোচ্চ তাপমাত্রা",
-    "primaryTemperatureSensor": "প্রাথমিক সেন্সর",
-    "gpu": {
-      "title": "জিপিইউ",
-      "noDevice": "কোন NVIDIA GPU সনাক্ত করা যায়নি। GPU মেট্রিক্স দেখতে NVIDIA ড্রাইভারটি (যা nvidia-smi প্রদান করে) ইনস্টল করুন।",
-      "driver": "চালক {{version}}",
-      "utilization": "ব্যবহার",
-      "memory": "VRAM",
-      "temperature": "তাপমাত্রা",
-      "power": "শক্তি",
-      "fan": "ভক্ত",
-      "processes": "জিপিইউ প্রক্রিয়া",
-      "noProcesses": "কোনো প্রসেসই GPU ব্যবহার করছে না।"
-    },
-    "failedToFetchHostConfig": "হোস্ট কনফিগারেশন আনতে ব্যর্থ হয়েছে",
-    "serverOffline": "সার্ভার অফলাইন",
-    "cannotFetchMetrics": "অফলাইন সার্ভার থেকে মেট্রিক্স সংগ্রহ করা যাচ্ছে না",
-    "totpFailed": "TOTP যাচাইকরণ ব্যর্থ হয়েছে",
-    "noneAuthNotSupported": "হোস্ট মেট্রিক্স 'none' অথেনটিকেশন টাইপ সমর্থন করে না।",
-    "noHostSelected": "কোন হোস্ট নির্বাচন করা হয়নি",
-    "load": "লোড",
-    "systemInfo": "সিস্টেমের তথ্য",
-    "hostname": "হোস্টনাম",
-    "operatingSystem": "অপারেটিং সিস্টেম",
-    "kernel": "কার্নেল",
-    "seconds": "সেকেন্ড",
-    "networkInterfaces": "নেটওয়ার্ক ইন্টারফেস",
-    "noInterfacesFound": "কোন নেটওয়ার্ক ইন্টারফেস খুঁজে পাওয়া যায়নি",
-    "noProcessesFound": "কোন প্রক্রিয়া খুঁজে পাওয়া যায়নি",
-    "processesTotal": "মোট",
-    "processesRunning": "দৌড়ানো",
-    "loginStats": "SSH লগইন পরিসংখ্যান",
-    "noRecentLoginData": "সাম্প্রতিক কোনো লগইন ডেটা নেই",
-    "ports": {
-      "title": "লিসেনিং পোর্ট",
-      "protocol": "প্রোটোকল",
-      "port": "বন্দর",
-      "address": "ঠিকানা",
-      "process": "প্রক্রিয়া",
-      "search": "পোর্ট অনুসন্ধান করুন...",
-      "allProtocols": "সব",
-      "noData": "কোন লিসেনিং পোর্ট ডেটা নেই"
-    },
-    "firewall": {
-      "title": "ফায়ারওয়াল",
-      "inactive": "নিষ্ক্রিয়",
-      "policy": "নীতি",
-      "rules": "নিয়ম",
-      "noRules": "এই শৃঙ্খলে কোনো নিয়ম নেই",
-      "noData": "কোন ফায়ারওয়াল ডেটা উপলব্ধ নেই",
-      "action": "পদক্ষেপ",
-      "protocol": "প্রোটো",
-      "port": "বন্দর",
-      "source": "উৎস",
-      "anywhere": "যেকোনো জায়গায়",
-      "chains": "শৃঙ্খল"
-    },
-    "loadAvg": "গড় লোড",
-    "swap": "অদলবদল",
-    "architecture": "স্থাপত্য",
-    "refresh": "রিফ্রেশ",
-    "retry": "পুনরায় চেষ্টা করুন",
-    "customize": "লেআউট কাস্টমাইজ করুন",
-    "reset": "রিসেট",
-    "tabLive": "সরাসরি",
-    "editModeInstructions": "কার্ডগুলো পুনর্বিন্যাস করতে টেনে আনুন, আকার পরিবর্তন করতে নিচের কিনারা টেনে আনুন এবং কার্ডের বিস্তার বদলাতে প্রস্থ বোতামটি ব্যবহার করুন। নিচে কার্ড যোগ বা অপসারণ করুন।",
-    "managers": {
-      "services": "পরিষেবা",
-      "processInspector": "প্রক্রিয়া পরিদর্শক",
-      "logViewer": "লগ ভিউয়ার",
-      "cron": "ক্রন জবস",
-      "packages": "প্যাকেজ",
-      "ssl": "SSL সার্টিফিকেট",
-      "firewall": "ফায়ারওয়াল",
-      "users": "ব্যবহারকারী ও অনুমতি",
-      "healthCheck": "স্বাস্থ্য পরীক্ষা",
-      "diskBreakdown": "ডিস্ক ব্রেকডাউন",
-      "systemdTimers": "টাইমার",
-      "topMemory": "স্মৃতি দ্বারা শীর্ষে",
-      "noData": "কোন ডেটা নেই",
-      "sudoHint": "বিশেষাধিকারপ্রাপ্ত কাজগুলো সক্ষম করতে হোস্ট এডিটরে এই হোস্টের জন্য একটি sudo পাসওয়ার্ড সেট করুন।",
-      "filter": "ফিল্টার...",
-      "start": "শুরু করুন",
-      "stop": "থামুন",
-      "restart": "পুনরায় চালু করুন",
-      "actionDone": "{{name}} আপডেট করা হয়েছে",
-      "actionFailed": "পদক্ষেপ ব্যর্থ হয়েছে",
-      "signalSent": "PID {{pid}}-তে সংকেত পাঠানো হয়েছে",
-      "killHint": "ক্লিক: বন্ধ করুন (SIGTERM)। ডান-ক্লিক: জোরপূর্বক বন্ধ করুন (SIGKILL)।",
-      "working": "কাজ চলছে...",
-      "update": "আপডেট",
-      "upgradeAll": "সব আপগ্রেড করুন",
-      "allUpToDate": "সবকিছু হালনাগাদ আছে",
-      "save": "সংরক্ষণ করুন",
-      "command": "আদেশ",
-      "enabled": "সক্ষম করা হয়েছে",
-      "cronSaved": "ক্রনট্যাব আপডেট করা হয়েছে",
-      "clients": "ক্লায়েন্টরা",
-      "dryRun": "ড্রাই রান",
-      "renew": "পুনর্নবীকরণ করুন",
-      "noAcmeClient": "এই হোস্টে কোনো ACME ক্লায়েন্ট (certbot বা acme.sh) খুঁজে পাওয়া যায়নি।",
-      "addInputRule": "ইনপুট নিয়ম যোগ করুন",
-      "firewallWarning": "স্থায়ী না হওয়া পর্যন্ত পরিবর্তনগুলো শুধুমাত্র রানটাইমে কার্যকর থাকে। সতর্ক থাকুন, যাতে আপনি নিজে লক আউট না হয়ে যান।",
-      "ruleApplied": "নিয়ম প্রয়োগ করা হয়েছে",
-      "invalidPort": "একটি বৈধ পোর্ট প্রবেশ করান (1-65535)",
-      "newUsername": "নতুন ব্যবহারকারীর নাম",
-      "addUser": "যোগ করুন",
-      "deleteUser": "ব্যবহারকারীকে মুছে ফেলুন",
-      "noHealthChecks": "এখনো কোনো স্বাস্থ্য পরীক্ষা কনফিগার করা হয়নি।",
-      "follow": "অনুসরণ করুন",
-      "noLogData": "কোনো লগ আউটপুট নেই।",
-      "tree": "গাছ",
-      "enableDisable": "বুট করার সময় সক্ষম / অক্ষম করুন",
-      "grantSudo": "Grant sudo",
-      "revokeSudo": "sudo প্রত্যাহার করুন",
-      "sslIssueCert": "সার্টিফিকেট প্রদান করুন",
-      "sslExpired": "মেয়াদোত্তীর্ণ",
-      "sslInDays": "{{days}}d-তে",
-      "sslNeedDomain": "অন্তত একটি ডোমেইন প্রবেশ করান",
-      "sslIssued": "সার্টিফিকেট ইস্যু করা হয়েছে",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (স্বতন্ত্র)",
-      "sslHttpWebroot": "HTTP (ওয়েবরুট)",
-      "sslDns": "ডিএনএস",
-      "sslDnsProvider": "ডিএনএস প্রদানকারী (যেমন ক্লাউডফ্লেয়ার)",
-      "sslIssueHint": "হোস্টে ডিএনএস প্রদানকারীর ক্রেডেনশিয়াল অবশ্যই আগে থেকে কনফিগার করা থাকতে হবে।",
-      "sslRevoke": "সার্টিফিকেট বাতিল করুন",
-      "sslRevoked": "সার্টিফিকেট বাতিল করা হয়েছে",
-      "sslRevokeConfirm": "সার্টিফিকেট \"{{name}}\" বাতিল এবং অপসারণ করবেন? এটি পূর্বাবস্থায় ফেরানো যাবে না।",
-      "healthRun": "দৌড়",
-      "healthName": "নাম",
-      "healthTarget": "হোস্ট / ঠিকানা",
-      "healthAddCheck": "চেক যোগ করুন",
-      "healthSaved": "স্বাস্থ্য পরীক্ষা সংরক্ষিত",
-      "healthMissingFields": "প্রতিটি চেকের একটি নাম এবং লক্ষ্য থাকা প্রয়োজন।",
-      "logFile": "ফাইল",
-      "logUnit": "ইউনিট",
-      "logCustomPath": "/var/log-এর অধীনে নিজস্ব পথ (ঐচ্ছিক)",
-      "logGrep": "ফিল্টার লাইন...",
-      "firewallPersist": "অধ্যবসায় নিয়ম",
-      "firewallPersisted": "ফায়ারওয়াল নিয়মগুলি অব্যাহত ছিল",
-      "wireguard": "ওয়্যারগার্ড",
-      "wgNotInstalled": "এই হোস্টে WireGuard ইনস্টল করা নেই",
-      "wgNoInterfaces": "কোন WireGuard ইন্টারফেস কনফিগার করা নেই",
-      "wgInterfaceUp": "উত্থাপন করুন",
-      "wgInterfaceDown": "নামিয়ে আনুন",
-      "wgBringingUp": "{{name}} উপরে তুলে আনা...",
-      "wgBringingDown": "{{name}} কে নিচে নামিয়ে আনা হচ্ছে...",
-      "wgInterfaceUpDone": "{{name}} উপরে আছে",
-      "wgInterfaceDownDone": "{{name}} নিচে আছে",
-      "wgListenPort": "বন্দর",
-      "wgPublicKey": "পাবলিক কী",
-      "wgEndpoint": "এন্ডপয়েন্ট",
-      "wgAllowedIPs": "অনুমোদিত আইপি",
-      "wgLastHandshake": "শেষ করমর্দন",
-      "wgHandshakeNever": "কখনো না",
-      "wgTransfer": "স্থানান্তর",
-      "wgNoPeers": "কোনো সমকক্ষ নেই"
-    }
-  },
-  "metricsHistory": {
-    "title": "মেট্রিক্সের ইতিহাস",
-    "historySuffix": "ইতিহাস",
-    "cpuMemoryDisk": "সিপিইউ / মেমরি / ডিস্ক",
-    "network": "নেটওয়ার্ক",
-    "download": "আরএক্স",
-    "upload": "টেক্সাস",
-    "noData": "এই সময়সীমার জন্য কোনো ঐতিহাসিক তথ্য উপলব্ধ নেই।",
-    "custom": "কাস্টম",
-    "to": "থেকে",
-    "apply": "আবেদন করুন",
-    "viewHistory": "ইতিহাস দেখুন"
-  },
-  "hosts": {
-    "tabHostMetrics": "হোস্ট মেট্রিক্স",
-    "metricsCollectionLabel": "মেট্রিক্স সংগ্রহ",
-    "enableMetricsLabel": "মেট্রিক্স সক্ষম করুন",
-    "enableMetricsDesc": "এই হোস্ট থেকে সিপিইউ, র‍্যাম, ডিস্ক এবং অন্যান্য মেট্রিক সংগ্রহ করুন।",
-    "useGlobalMetrics": "গ্লোবাল ইন্টারভাল ব্যবহার করুন",
-    "useGlobalMetricsDesc": "সার্ভার-ব্যাপী মেট্রিক্স ব্যবধান দিয়ে ওভাররাইড করুন",
-    "metricsIntervalS": "মেট্রিক্স ব্যবধান (সেকেন্ড)",
-    "metricsIntervalDesc2": "মেট্রিক স্ন্যাপশটগুলির মধ্যে সেকেন্ডের ব্যবধান",
-    "excludedMountsLabel": "বাদ দেওয়া মাউন্টগুলি",
-    "monitoredMountsLabel": "কাস্টম পর্যবেক্ষণ করা পথ",
-    "monitoredMountsDesc": "এমন পাথ যোগ করুন যা আলাদা মাউন্ট হিসাবে উন্মুক্ত নয়, যার মধ্যে /config-এর মতো বাইন্ড-মাউন্টেড Home Assistant পাথও অন্তর্ভুক্ত।",
-    "monitoredMountPathPlaceholder": "পাথ (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "লেবেল (ঐচ্ছিক)",
-    "addMonitoredMount": "পথ যোগ করুন",
-    "excludedMountsDesc": "এই হোস্টের জন্য ডিস্ক ব্যবহার এবং সতর্কতা থেকে নির্দিষ্ট মাউন্ট পয়েন্ট বা ফাইলসিস্টেমের ধরণ (যেমন nfs, cifs) লুকান।",
-    "excludedMountsPlaceholder": "মাউন্ট পাথ (/mnt/nas) অথবা ফাইলসিস্টেমের ধরণ (nfs, cifs)",
-    "excludedMountsEmpty": "কোনো মাউন্ট বাদ দেওয়া হয়নি। শনাক্তকৃত সকল ফাইলসিস্টেম দেখানো হয়েছে।",
-    "addExcludedMount": "যোগ করুন",
-    "visibleWidgets": "দৃশ্যমান উইজেট",
-    "widgetsMovedToHostMetrics": "এখন কার্ডগুলি সরাসরি হোস্ট মেট্রিক্স ট্যাবে যোগ, সাজানো এবং আকার পরিবর্তন করা যায়। এই হোস্টের জন্য হোস্ট মেট্রিক্স খুলুন এবং কোন কার্ডগুলি দেখানো হবে তা বেছে নিতে কাস্টমাইজ ব্যবহার করুন।",
-    "hostNotFound": "হোস্ট খুঁজে পাওয়া যায়নি",
-    "loadingHost": "হোস্ট লোড হচ্ছে..."
-  },
-  "onboarding": {
-    "feature_metrics": "মেট্রিক্স এবং সতর্কতা",
-    "feature_metrics_desc": "সময়ের সাথে সাথে সিপিইউ, মেমরি এবং ডিস্কের অবস্থা পর্যবেক্ষণ করুন এবং সেগুলি বিকল হয়ে গেলে সতর্কবার্তা পান।"
-  },
-  "admin": {
-    "metricsHistoryRetention": "মেট্রিক্সের ইতিহাস সংরক্ষণ",
-    "metricsHistoryRetentionRange": "১ থেকে ৯০ দিন",
-    "days": "দিন"
-  },
-  "homepage": {
-    "noData": "কোন ডেটা উপলব্ধ নেই",
-    "showCurrentValue": "বর্তমান মান দেখান",
-    "chartMetric": "মেট্রিক",
-    "metricRange": "পরিসর",
-    "host": "হোস্ট",
-    "loading": "লোড হচ্ছে...",
-    "metricCpu": "সিপিইউ",
-    "metricDisk": "ডিস্ক",
-    "metricHostname": "হোস্টনাম",
-    "metricKernel": "কার্নেল",
-    "metricMemory": "স্মৃতি",
-    "metricNetwork": "নেটওয়ার্ক",
-    "metricOs": "ওএস",
-    "metricProcesses": "প্রক্রিয়া",
-    "metricProcessesRunning": "দৌড়ানো",
-    "metricProcessesTotal": "মোট",
-    "metricUptime": "আপটাইম",
-    "metricsNotAvailable": "মেট্রিক্স উপলব্ধ নেই",
-    "noHostSelected": "কোন হোস্ট নির্বাচন করা হয়নি",
-    "selectHost": "একজন হোস্ট নির্বাচন করুন..."
-  },
-  "terminalStatus": {
-    "unavailable": "সরাসরি পরিসংখ্যান অনুপলব্ধ"
-  },
-  "dashboard": {
-    "cpu": "সিপিইউ",
-    "ram": "রাম"
-  },
-  "dashboardTab": {
-    "disk": "ডিস্ক"
-  },
-  "terminal": {
-    "connected": "সংযুক্ত"
-  },
-  "permissions": {
-    "use": {
-      "title": "হোস্ট মেট্রিক্স ব্যবহার করুন",
-      "description": "আপনার নাগালের মধ্যে থাকা হোস্টগুলোর মেট্রিক্স দেখুন এবং হোস্ট ম্যানেজার (সার্ভিস, প্যাকেজ, ফায়ারওয়াল এবং আরও অনেক কিছু) ব্যবহার করুন।"
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "মেট্রিক্স ব্যবধান (সেকেন্ড)",
-        "description": "যদি না হোস্ট তার নিজস্ব ব্যবধান নির্ধারণ করে, তবে দেখা হচ্ছে এমন হোস্টকে কত ঘন ঘন নমুনা হিসেবে নেওয়া হবে।"
-      },
-      "historyRetentionDays": {
-        "label": "ইতিহাস সংরক্ষণ (দিন)",
-        "description": "হিস্ট্রি চার্টের জন্য মেট্রিক্স স্যাম্পলগুলো কত সময় ধরে রাখা হয়।"
-      },
-      "enabledForNewHosts": {
-        "label": "নতুন হোস্টদের জন্য মেট্রিক্স চালু আছে",
-        "description": "নতুন হোস্টগুলো মেট্রিক্স সংগ্রহ চালু থাকা অবস্থায় শুরু হয় কিনা।"
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "তাপমাত্রা ইউনিট",
-        "description": "হোস্ট মেট্রিক্সে তাপমাত্রা কীভাবে দেখানো হয়",
-        "celsius": "সেলসিয়াস",
-        "fahrenheit": "ফারেনহাইট"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "মেট্রিক সংগ্রহ করুন"
-      },
-      "metricsInterval": {
-        "label": "মেট্রিক্স ব্যবধান (সেকেন্ড)"
-      },
-      "enabledWidgets": {
-        "label": "সক্রিয় উইজেট"
-      },
-      "excludedMounts": {
-        "label": "বাদ দেওয়া মাউন্টগুলি"
-      },
-      "monitoredMounts": {
-        "label": "পর্যবেক্ষণ করা পথ"
-      }
-    }
-  },
-  "plugin": {
-    "name": "হোস্ট মেট্রিক্স"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/ca_ES.json b/plugins/host-metrics/locales/translated/ca_ES.json
deleted file mode 100644
index e9a1e7fc6..000000000
--- a/plugins/host-metrics/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Mètriques de l'amfitrió"
-  },
-  "hostMetrics": {
-    "cpu": "CPU",
-    "memory": "Memòria",
-    "disk": "Disc",
-    "network": "Xarxa",
-    "uptime": "Temps de funcionament",
-    "processes": "Processos",
-    "available": "Disponible",
-    "free": "Gratuït",
-    "connecting": "Connectant...",
-    "connectionFailed": "No s'ha pogut connectar al servidor",
-    "naCpus": "CPU(s) N/A",
-    "cpuCores_one": "{{count}} Nucli",
-    "cpuCores_other": "{{count}} Nuclis",
-    "cpuUsage": "Ús de la CPU",
-    "memoryUsage": "Ús de memòria",
-    "diskUsage": "Ús del disc",
-    "selectFilesystem": "Selecciona el sistema de fitxers",
-    "temperature": "Temperatura",
-    "highestTemperature": "Temperatura més alta",
-    "primaryTemperatureSensor": "Sensor principal",
-    "gpu": {
-      "title": "GPU",
-      "noDevice": "No s'ha detectat cap GPU NVIDIA. Instal·leu el controlador NVIDIA (proporciona nvidia-smi) per veure les mètriques de la GPU.",
-      "driver": "Conductor {{version}}",
-      "utilization": "Utilització",
-      "memory": "VRAM",
-      "temperature": "Temperatura",
-      "power": "Poder",
-      "fan": "Ventilador",
-      "processes": "Processos de la GPU",
-      "noProcesses": "Cap procés utilitza la GPU"
-    },
-    "failedToFetchHostConfig": "No s'ha pogut obtenir la configuració de l'amfitrió",
-    "serverOffline": "Servidor fora de línia",
-    "cannotFetchMetrics": "No es poden obtenir mètriques del servidor fora de línia",
-    "totpFailed": "La verificació TOTP ha fallat",
-    "noneAuthNotSupported": "Les mètriques de l'amfitrió no admeten el tipus d'autenticació \"cap\".",
-    "noHostSelected": "No s'ha seleccionat cap amfitrió",
-    "load": "Carrega",
-    "systemInfo": "Informació del sistema",
-    "hostname": "Nom d'amfitrió",
-    "operatingSystem": "Sistema operatiu",
-    "kernel": "Nucli",
-    "seconds": "segons",
-    "networkInterfaces": "Interfícies de xarxa",
-    "noInterfacesFound": "No s'han trobat interfícies de xarxa",
-    "noProcessesFound": "No s'han trobat processos",
-    "processesTotal": "total",
-    "processesRunning": "corrent",
-    "loginStats": "Estadístiques d'inici de sessió SSH",
-    "noRecentLoginData": "Sense dades d'inici de sessió recents",
-    "ports": {
-      "title": "Ports d'escolta",
-      "protocol": "Protocol",
-      "port": "Port",
-      "address": "Adreça",
-      "process": "Procés",
-      "search": "Cerca ports...",
-      "allProtocols": "Tot",
-      "noData": "No hi ha dades de ports d'escolta"
-    },
-    "firewall": {
-      "title": "Tallafocs",
-      "inactive": "Inactiu",
-      "policy": "Política",
-      "rules": "regles",
-      "noRules": "No hi ha regles en aquesta cadena",
-      "noData": "No hi ha dades de tallafocs disponibles",
-      "action": "Acció",
-      "protocol": "Proto",
-      "port": "Port",
-      "source": "Font",
-      "anywhere": "A qualsevol lloc",
-      "chains": "cadenes"
-    },
-    "loadAvg": "Mitjana de càrrega",
-    "swap": "Intercanvi",
-    "architecture": "Arquitectura",
-    "refresh": "Actualitza",
-    "retry": "Torna-ho a intentar",
-    "customize": "Personalitza el disseny",
-    "reset": "Restablir",
-    "tabLive": "En directe",
-    "editModeInstructions": "Arrossega les cartes per reorganitzar-les, arrossega la vora inferior per canviar-ne la mida i utilitza el botó d'amplada per canviar l'extensió d'una carta. Afegeix o elimina cartes a continuació.",
-    "managers": {
-      "services": "Serveis",
-      "processInspector": "Inspector de processos",
-      "logViewer": "Visualitzador de registre",
-      "cron": "Treballs cron",
-      "packages": "Paquets",
-      "ssl": "Certificats SSL",
-      "firewall": "Tallafocs",
-      "users": "Usuaris i permisos",
-      "healthCheck": "Controls de salut",
-      "diskBreakdown": "Avaria del disc",
-      "systemdTimers": "Temporitzadors",
-      "topMemory": "Top per memòria",
-      "noData": "Sense dades",
-      "sudoHint": "Establiu una contrasenya sudo per a aquest host a l'editor d'hosts per habilitar accions privilegiades.",
-      "filter": "Filtra...",
-      "start": "Inici",
-      "stop": "Atura",
-      "restart": "Reinicia",
-      "actionDone": "{{name}} actualitzat",
-      "actionFailed": "L'acció ha fallat",
-      "signalSent": "Senyal enviat al PID {{pid}}",
-      "killHint": "Clic: finalitzar (SIGTERM). Clic amb el botó dret: forçar la mort (SIGKILL).",
-      "working": "Treballant...",
-      "update": "Actualització",
-      "upgradeAll": "Actualitza-ho tot",
-      "allUpToDate": "Tot està actualitzat",
-      "save": "Desa",
-      "command": "Comandament",
-      "enabled": "Activat",
-      "cronSaved": "Crontab actualitzat",
-      "clients": "Clients",
-      "dryRun": "Sessió en sec",
-      "renew": "Renovar",
-      "noAcmeClient": "No s'ha trobat cap client ACME (certbot o acme.sh) en aquest amfitrió.",
-      "addInputRule": "Afegeix una regla INPUT",
-      "firewallWarning": "Els canvis només són en temps d'execució fins que persisteixen. Aneu amb compte de no bloquejar-vos l'accés.",
-      "ruleApplied": "Regla aplicada",
-      "invalidPort": "Introduïu un port vàlid (1-65535)",
-      "newUsername": "Nou nom d'usuari",
-      "addUser": "Afegeix",
-      "deleteUser": "Suprimeix l'usuari",
-      "noHealthChecks": "Encara no s'ha configurat cap comprovació d'estat.",
-      "follow": "Segueix",
-      "noLogData": "No hi ha sortida de registre.",
-      "tree": "Arbre",
-      "enableDisable": "Activa / desactiva a l'arrencada",
-      "grantSudo": "Concedir sudo",
-      "revokeSudo": "Revoca sudo",
-      "sslIssueCert": "Emetre certificat",
-      "sslExpired": "Caducat",
-      "sslInDays": "en {{days}}d",
-      "sslNeedDomain": "Introduïu com a mínim un domini",
-      "sslIssued": "Certificat emès",
-      "sslDomainsPlaceholder": "exemple.com, www.exemple.com",
-      "sslHttpStandalone": "HTTP (autònom)",
-      "sslHttpWebroot": "HTTP (arrel web)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "Proveïdor de DNS (per exemple, Cloudflare)",
-      "sslIssueHint": "Les credencials del proveïdor DNS ja han d'estar configurades a l'amfitrió.",
-      "sslRevoke": "Revoca el certificat",
-      "sslRevoked": "Certificat revocat",
-      "sslRevokeConfirm": "Voleu revocar i eliminar el certificat \"{{name}}\"? Això no es pot desfer.",
-      "healthRun": "Corre",
-      "healthName": "Nom",
-      "healthTarget": "Host / adreça",
-      "healthAddCheck": "Afegeix un xec",
-      "healthSaved": "S'han desat les comprovacions d'estat",
-      "healthMissingFields": "Cada comprovació necessita un nom i un objectiu",
-      "logFile": "Fitxer",
-      "logUnit": "Unitat",
-      "logCustomPath": "Ruta personalitzada a /var/log (opcional)",
-      "logGrep": "Línies de filtre...",
-      "firewallPersist": "Regles de persistència",
-      "firewallPersisted": "Les regles del tallafocs van persistir",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "WireGuard no està instal·lat en aquest host.",
-      "wgNoInterfaces": "No hi ha cap interfície de WireGuard configurada",
-      "wgInterfaceUp": "Porta a col·lació",
-      "wgInterfaceDown": "Baixar",
-      "wgBringingUp": "S'està mostrant {{name}}...",
-      "wgBringingDown": "Baixant {{name}}...",
-      "wgInterfaceUpDone": "{{name}} està activat",
-      "wgInterfaceDownDone": "{{name}} està inactiu",
-      "wgListenPort": "Port",
-      "wgPublicKey": "Clau pública",
-      "wgEndpoint": "Punt final",
-      "wgAllowedIPs": "IP permeses",
-      "wgLastHandshake": "Última encaixada de mans",
-      "wgHandshakeNever": "Mai",
-      "wgTransfer": "Transferència",
-      "wgNoPeers": "Sense iguals"
-    }
-  },
-  "metricsHistory": {
-    "title": "Historial de mètriques",
-    "historySuffix": "Història",
-    "cpuMemoryDisk": "CPU / Memòria / Disc",
-    "network": "Xarxa",
-    "download": "RX",
-    "upload": "TX",
-    "noData": "No hi ha dades històriques disponibles per a aquest interval de temps.",
-    "custom": "Personalitzat",
-    "to": "a",
-    "apply": "Aplica",
-    "viewHistory": "Veure l'historial"
-  },
-  "hosts": {
-    "tabHostMetrics": "Mètriques de l'amfitrió",
-    "metricsCollectionLabel": "Col·lecció de mètriques",
-    "enableMetricsLabel": "Activa les mètriques",
-    "enableMetricsDesc": "Recopila mètriques de CPU, RAM, disc i altres d'aquest amfitrió",
-    "useGlobalMetrics": "Utilitza l'interval global",
-    "useGlobalMetricsDesc": "Substitueix amb l'interval de mètriques de tot el servidor",
-    "metricsIntervalS": "Interval de mètriques (s)",
-    "metricsIntervalDesc2": "Segons entre instantànies de mètriques",
-    "excludedMountsLabel": "Muntatges exclosos",
-    "monitoredMountsLabel": "Rutes monitoritzades personalitzades",
-    "monitoredMountsDesc": "Afegiu camins que no estiguin exposats com a muntatges separats, inclosos els camins de l'Assistent d'inici muntats per vinculació, com ara /config.",
-    "monitoredMountPathPlaceholder": "Camí (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Etiqueta (opcional)",
-    "addMonitoredMount": "Afegeix un camí",
-    "excludedMountsDesc": "Amaga punts de muntatge o tipus de sistemes de fitxers específics (per exemple, nfs, cifs) de l'ús del disc i de les alertes per a aquest amfitrió.",
-    "excludedMountsPlaceholder": "Ruta de muntatge (/mnt/nas) o tipus de sistema de fitxers (nfs, cifs)",
-    "excludedMountsEmpty": "No s'han exclòs muntatges. Es mostren tots els sistemes de fitxers detectats.",
-    "addExcludedMount": "Afegeix",
-    "visibleWidgets": "Widgets visibles",
-    "widgetsMovedToHostMetrics": "Ara les targetes s'afegeixen, s'organitzen i es canvien de mida directament a la pestanya Mètriques de l'amfitrió. Obriu Mètriques de l'amfitrió per a aquest amfitrió i utilitzeu Personalitza per triar quines targetes es mostren.",
-    "hostNotFound": "No s'ha trobat l'amfitrió",
-    "loadingHost": "S'està carregant l'amfitrió..."
-  },
-  "onboarding": {
-    "feature_metrics": "Mètriques i alertes",
-    "feature_metrics_desc": "Fes un seguiment de la CPU, la memòria i el disc al llarg del temps i rep alertes quan es facin malbé."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Retenció de l'historial de mètriques",
-    "metricsHistoryRetentionRange": "D'1 a 90 dies",
-    "days": "dies"
-  },
-  "homepage": {
-    "noData": "No hi ha dades disponibles",
-    "showCurrentValue": "Mostra el valor actual",
-    "chartMetric": "Mètrica",
-    "metricRange": "Rang",
-    "host": "Amfitrió",
-    "loading": "S'està carregant...",
-    "metricCpu": "CPU",
-    "metricDisk": "Disc",
-    "metricHostname": "Nom d'amfitrió",
-    "metricKernel": "Nucli",
-    "metricMemory": "Memòria",
-    "metricNetwork": "Xarxa",
-    "metricOs": "Sistema operatiu",
-    "metricProcesses": "Processos",
-    "metricProcessesRunning": "corrent",
-    "metricProcessesTotal": "total",
-    "metricUptime": "Temps de funcionament",
-    "metricsNotAvailable": "Mètriques no disponibles",
-    "noHostSelected": "No s'ha seleccionat cap amfitrió",
-    "selectHost": "Seleccioneu un amfitrió..."
-  },
-  "terminalStatus": {
-    "unavailable": "Estadístiques en directe no disponibles"
-  },
-  "dashboard": {
-    "cpu": "CPU",
-    "ram": "RAM"
-  },
-  "dashboardTab": {
-    "disk": "Disc"
-  },
-  "terminal": {
-    "connected": "Connectat"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilitza les mètriques de l'amfitrió",
-      "description": "Visualitza les mètriques de l'amfitrió i utilitza els gestors d'amfitrió (serveis, paquets, tallafocs i més) als amfitrions als quals pots accedir."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Interval de mètriques (segons)",
-        "description": "Amb quina freqüència es mostreja un amfitrió que es visualitza, tret que l'amfitrió estableixi el seu propi interval."
-      },
-      "historyRetentionDays": {
-        "label": "Retenció de l'historial (dies)",
-        "description": "Quant de temps es conserven les mostres de mètriques per als gràfics d'historial."
-      },
-      "enabledForNewHosts": {
-        "label": "Mètriques activades per a nous amfitrions",
-        "description": "Si els nous amfitrions comencen amb la recopilació de mètriques activada."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Unitat de temperatura",
-        "description": "Com es mostren les temperatures a les mètriques de l'amfitrió.",
-        "celsius": "Celsius",
-        "fahrenheit": "Fahrenheit"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Recopilar mètriques"
-      },
-      "metricsInterval": {
-        "label": "Interval de mètriques (segons)"
-      },
-      "enabledWidgets": {
-        "label": "Widgets activats"
-      },
-      "excludedMounts": {
-        "label": "Muntatges exclosos"
-      },
-      "monitoredMounts": {
-        "label": "Camins monitoritzats"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Mètriques de l'amfitrió"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/cs_CZ.json b/plugins/host-metrics/locales/translated/cs_CZ.json
deleted file mode 100644
index eaeda18c7..000000000
--- a/plugins/host-metrics/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Metriky hostitele"
-  },
-  "hostMetrics": {
-    "cpu": "Procesor",
-    "memory": "Paměť",
-    "disk": "Disk",
-    "network": "Síť",
-    "uptime": "Doba provozuschopnosti",
-    "processes": "Procesy",
-    "available": "K dispozici",
-    "free": "Uvolnit",
-    "connecting": "Spojovací...",
-    "connectionFailed": "Nepodařilo se připojit k serveru",
-    "naCpus": "CPU (procesory)",
-    "cpuCores_one": "{{count}} Jádro",
-    "cpuCores_other": "{{count}} Jádra",
-    "cpuUsage": "Využití CPU",
-    "memoryUsage": "Využití paměti",
-    "diskUsage": "Využití disku",
-    "selectFilesystem": "Vyberte souborový systém",
-    "temperature": "Teplota",
-    "highestTemperature": "Nejvyšší teplota",
-    "primaryTemperatureSensor": "Primární senzor",
-    "gpu": {
-      "title": "Grafický procesor",
-      "noDevice": "Nebyla detekována žádná grafická karta NVIDIA. Nainstalujte ovladač NVIDIA (obsahuje nvidia-smi) pro zobrazení metrik grafické karty.",
-      "driver": "Řidič {{version}}",
-      "utilization": "Využití",
-      "memory": "VRAM",
-      "temperature": "Dočasné",
-      "power": "Moc",
-      "fan": "Větrák",
-      "processes": "Procesy GPU",
-      "noProcesses": "Žádné procesy nepoužívají GPU"
-    },
-    "failedToFetchHostConfig": "Nepodařilo se načíst konfiguraci hostitele",
-    "serverOffline": "Server offline",
-    "cannotFetchMetrics": "Nelze načíst metriky z offline serveru",
-    "totpFailed": "Ověření TOTP se nezdařilo",
-    "noneAuthNotSupported": "Metriky hostitele nepodporují typ ověřování „žádné“.",
-    "noHostSelected": "Nebyl vybrán žádný hostitel",
-    "load": "Zatížení",
-    "systemInfo": "Informace o systému",
-    "hostname": "Název hostitele",
-    "operatingSystem": "Operační systém",
-    "kernel": "Jádro",
-    "seconds": "sekundy",
-    "networkInterfaces": "Síťová rozhraní",
-    "noInterfacesFound": "Nenalezena žádná síťová rozhraní",
-    "noProcessesFound": "Nenalezeny žádné procesy",
-    "processesTotal": "celkový",
-    "processesRunning": "běh",
-    "loginStats": "Statistiky přihlášení SSH",
-    "noRecentLoginData": "Žádné nedávné přihlašovací údaje",
-    "ports": {
-      "title": "Naslouchající porty",
-      "protocol": "Protokol",
-      "port": "Port",
-      "address": "Adresa",
-      "process": "Proces",
-      "search": "Hledat porty...",
-      "allProtocols": "Vše",
-      "noData": "Žádná data naslouchajících portů"
-    },
-    "firewall": {
-      "title": "Firewall",
-      "inactive": "Neaktivní",
-      "policy": "Politika",
-      "rules": "pravidla",
-      "noRules": "V tomto řetězci nejsou žádná pravidla",
-      "noData": "Nejsou k dispozici žádná data firewallu",
-      "action": "Akce",
-      "protocol": "Proto",
-      "port": "Port",
-      "source": "Zdroj",
-      "anywhere": "Kdekoli",
-      "chains": "řetězy"
-    },
-    "loadAvg": "Průměrné zatížení",
-    "swap": "Výměna",
-    "architecture": "Architektura",
-    "refresh": "Obnovit",
-    "retry": "Zkusit znovu",
-    "customize": "Přizpůsobit rozvržení",
-    "reset": "Obnovit",
-    "tabLive": "Žít",
-    "editModeInstructions": "Přetažením karet změníte jejich uspořádání, přetažením spodního okraje změníte jejich velikost a pomocí tlačítka šířky změníte jejich rozpětí. Karty můžete přidávat nebo odebírat níže.",
-    "managers": {
-      "services": "Služby",
-      "processInspector": "Inspektor procesů",
-      "logViewer": "Prohlížeč protokolů",
-      "cron": "Cron úlohy",
-      "packages": "Balíčky",
-      "ssl": "SSL certifikáty",
-      "firewall": "Firewall",
-      "users": "Uživatelé a oprávnění",
-      "healthCheck": "Kontroly stavu",
-      "diskBreakdown": "Rozpad disku",
-      "systemdTimers": "Časovače",
-      "topMemory": "Nejlépe podle paměti",
-      "noData": "Žádná data",
-      "sudoHint": "V editoru hostitelů nastavte pro tento hostitel heslo sudo, abyste povolili privilegované akce.",
-      "filter": "Filtr...",
-      "start": "Start",
-      "stop": "Zastávka",
-      "restart": "Restartovat",
-      "actionDone": "{{name}} aktualizováno",
-      "actionFailed": "Akce se nezdařila",
-      "signalSent": "Signál odeslaný do PID {{pid}}",
-      "killHint": "Kliknutí: ukončení (SIGTERM). Kliknutí pravým tlačítkem: vynucené ukončení (SIGKILL).",
-      "working": "Pracovní...",
-      "update": "Aktualizovat",
-      "upgradeAll": "Upgradovat vše",
-      "allUpToDate": "Všechno je aktuální",
-      "save": "Uložit",
-      "command": "Příkaz",
-      "enabled": "Povoleno",
-      "cronSaved": "Crontab aktualizován",
-      "clients": "Klienti",
-      "dryRun": "Zkušební provoz",
-      "renew": "Obnovit",
-      "noAcmeClient": "Na tomto hostiteli nebyl nalezen žádný klient ACME (certbot ani acme.sh).",
-      "addInputRule": "Přidat pravidlo INPUT",
-      "firewallWarning": "Změny jsou platné pouze za běhu, dokud nejsou trvalé. Dávejte pozor, abyste se k nim nezablokovali.",
-      "ruleApplied": "Pravidlo bylo použito",
-      "invalidPort": "Zadejte platný port (1-65535)",
-      "newUsername": "Nové uživatelské jméno",
-      "addUser": "Přidat",
-      "deleteUser": "Smazat uživatele",
-      "noHealthChecks": "Zatím nejsou nakonfigurovány žádné kontroly stavu.",
-      "follow": "Následovat",
-      "noLogData": "Žádný výstup protokolu.",
-      "tree": "Strom",
-      "enableDisable": "Povolit/zakázat při spuštění",
-      "grantSudo": "Udělit sudo",
-      "revokeSudo": "Zrušit sudo",
-      "sslIssueCert": "Vydat certifikát",
-      "sslExpired": "Platnost vypršela",
-      "sslInDays": "v {{days}}d",
-      "sslNeedDomain": "Zadejte alespoň jednu doménu",
-      "sslIssued": "Vydaný certifikát",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (samostatný)",
-      "sslHttpWebroot": "HTTP (webroot)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "Poskytovatel DNS (např. cloudflare)",
-      "sslIssueHint": "Přihlašovací údaje poskytovatele DNS musí být již na hostiteli nakonfigurovány.",
-      "sslRevoke": "Zrušit certifikát",
-      "sslRevoked": "Certifikát zrušen",
-      "sslRevokeConfirm": "Zrušit a odstranit certifikát „{{name}}“? Tuto akci nelze vrátit zpět.",
-      "healthRun": "Běh",
-      "healthName": "Jméno",
-      "healthTarget": "Hostitel / adresa",
-      "healthAddCheck": "Přidat šek",
-      "healthSaved": "Kontroly stavu uloženy",
-      "healthMissingFields": "Každá kontrola potřebuje název a cíl.",
-      "logFile": "Soubor",
-      "logUnit": "Jednotka",
-      "logCustomPath": "Vlastní cesta v /var/log (volitelné)",
-      "logGrep": "Filtrační potrubí...",
-      "firewallPersist": "Pravidla pro trvalé uložení",
-      "firewallPersisted": "Pravidla firewallu přetrvávala",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "WireGuard není na tomto hostiteli nainstalován",
-      "wgNoInterfaces": "Žádná nakonfigurovaná rozhraní WireGuard",
-      "wgInterfaceUp": "Vychovat",
-      "wgInterfaceDown": "Snížit",
-      "wgBringingUp": "Vyvolávám {{name}}...",
-      "wgBringingDown": "Snižování {{name}}...",
-      "wgInterfaceUpDone": "{{name}} je aktivní",
-      "wgInterfaceDownDone": "{{name}} je nefunkční",
-      "wgListenPort": "Port",
-      "wgPublicKey": "Veřejný klíč",
-      "wgEndpoint": "Koncový bod",
-      "wgAllowedIPs": "Povolené IP adresy",
-      "wgLastHandshake": "Poslední podání ruky",
-      "wgHandshakeNever": "Nikdy",
-      "wgTransfer": "Převod",
-      "wgNoPeers": "Žádní vrstevníci"
-    }
-  },
-  "metricsHistory": {
-    "title": "Historie metrik",
-    "historySuffix": "Dějiny",
-    "cpuMemoryDisk": "CPU / Paměť / Disk",
-    "network": "Síť",
-    "download": "RX",
-    "upload": "Texas",
-    "noData": "Pro toto časové období nejsou k dispozici žádná historická data.",
-    "custom": "Zvyk",
-    "to": "na",
-    "apply": "Použít",
-    "viewHistory": "Zobrazit historii"
-  },
-  "hosts": {
-    "tabHostMetrics": "Metriky hostitele",
-    "metricsCollectionLabel": "Sbírka metrik",
-    "enableMetricsLabel": "Povolit metriky",
-    "enableMetricsDesc": "Shromažďujte metriky CPU, RAM, disku a další z tohoto hostitele",
-    "useGlobalMetrics": "Použít globální interval",
-    "useGlobalMetricsDesc": "Přepsat intervalem metrik na úrovni celého serveru",
-    "metricsIntervalS": "Interval metrik (y)",
-    "metricsIntervalDesc2": "Sekundy mezi snímky metrik",
-    "excludedMountsLabel": "Vyloučené držáky",
-    "monitoredMountsLabel": "Vlastní monitorované cesty",
-    "monitoredMountsDesc": "Přidejte cesty, které nejsou zobrazeny jako samostatné připojení, včetně cest připojených k Home Assistant, jako je /config.",
-    "monitoredMountPathPlaceholder": "Cesta (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Štítek (volitelné)",
-    "addMonitoredMount": "Přidat cestu",
-    "excludedMountsDesc": "Skrýt konkrétní body připojení nebo typy souborových systémů (např. nfs, cifs) před využitím disku a upozorněními pro tento hostitel.",
-    "excludedMountsPlaceholder": "Cesta připojení (/mnt/nas) nebo typ souborového systému (nfs, cifs)",
-    "excludedMountsEmpty": "Žádné připojení nejsou vyloučena. Zobrazí se všechny detekované souborové systémy.",
-    "addExcludedMount": "Přidat",
-    "visibleWidgets": "Viditelné widgety",
-    "widgetsMovedToHostMetrics": "Karty se nyní přidávají, uspořádávají a mění jejich velikost přímo na kartě Metriky hostitele. Otevřete Metriky hostitele pro tohoto hostitele a pomocí možnosti Přizpůsobit vyberte, které karty se zobrazí.",
-    "hostNotFound": "Hostitel nenalezen",
-    "loadingHost": "Načítání hostitele..."
-  },
-  "onboarding": {
-    "feature_metrics": "Metriky a upozornění",
-    "feature_metrics_desc": "Sledujte CPU, paměť a disk v průběhu času a nechte se upozornit, když se pokazí."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Uchovávání historie metrik",
-    "metricsHistoryRetentionRange": "1 až 90 dní",
-    "days": "dny"
-  },
-  "homepage": {
-    "noData": "Nejsou k dispozici žádná data",
-    "showCurrentValue": "Zobrazit aktuální hodnotu",
-    "chartMetric": "Metrický",
-    "metricRange": "Rozsah",
-    "host": "Hostitel",
-    "loading": "Načítání...",
-    "metricCpu": "Procesor",
-    "metricDisk": "Disk",
-    "metricHostname": "Název hostitele",
-    "metricKernel": "Jádro",
-    "metricMemory": "Paměť",
-    "metricNetwork": "Síť",
-    "metricOs": "OS",
-    "metricProcesses": "Procesy",
-    "metricProcessesRunning": "běh",
-    "metricProcessesTotal": "celkový",
-    "metricUptime": "Doba provozuschopnosti",
-    "metricsNotAvailable": "Metriky nejsou k dispozici",
-    "noHostSelected": "Nebyl vybrán žádný hostitel",
-    "selectHost": "Vyberte hostitele..."
-  },
-  "terminalStatus": {
-    "unavailable": "Živé statistiky nejsou k dispozici"
-  },
-  "dashboard": {
-    "cpu": "Procesor",
-    "ram": "BERAN"
-  },
-  "dashboardTab": {
-    "disk": "Disk"
-  },
-  "terminal": {
-    "connected": "Připojeno"
-  },
-  "permissions": {
-    "use": {
-      "title": "Používejte metriky hostitele",
-      "description": "Zobrazte si metriky hostitelů a používejte správce hostitelů (služby, balíčky, firewall a další) na hostitelích, ke kterým máte přístup."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Interval metrik (sekundy)",
-        "description": "Jak často je vzorkován zobrazený hostitel, pokud si hostitel nenastaví vlastní interval."
-      },
-      "historyRetentionDays": {
-        "label": "Uchování historie (dny)",
-        "description": "Jak dlouho se uchovávají vzorky metrik pro historické grafy."
-      },
-      "enabledForNewHosts": {
-        "label": "Metriky pro nové hostitele",
-        "description": "Zda noví hostitelé začínají se zapnutým sběrem metrik."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Jednotka teploty",
-        "description": "Jak se teploty zobrazují v metrikách hostitele.",
-        "celsius": "Celsia",
-        "fahrenheit": "Fahrenheita"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Shromažďování metrik"
-      },
-      "metricsInterval": {
-        "label": "Interval metrik (sekundy)"
-      },
-      "enabledWidgets": {
-        "label": "Povolené widgety"
-      },
-      "excludedMounts": {
-        "label": "Vyloučené držáky"
-      },
-      "monitoredMounts": {
-        "label": "Sledované cesty"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Metriky hostitele"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/da_DK.json b/plugins/host-metrics/locales/translated/da_DK.json
deleted file mode 100644
index b529c971f..000000000
--- a/plugins/host-metrics/locales/translated/da_DK.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Værtsmålinger"
-  },
-  "hostMetrics": {
-    "cpu": "CPU",
-    "memory": "Hukommelse",
-    "disk": "Disk",
-    "network": "Netværk",
-    "uptime": "Oppetid",
-    "processes": "Processer",
-    "available": "Tilgængelig",
-    "free": "Gratis",
-    "connecting": "Forbinder...",
-    "connectionFailed": "Kunne ikke oprette forbindelse til serveren",
-    "naCpus": "Ikke tilgængelig CPU(er)",
-    "cpuCores_one": "{{count}} Kerne",
-    "cpuCores_other": "{{count}} Kerner",
-    "cpuUsage": "CPU-forbrug",
-    "memoryUsage": "Hukommelsesforbrug",
-    "diskUsage": "Diskforbrug",
-    "selectFilesystem": "Vælg filsystem",
-    "temperature": "Temperatur",
-    "highestTemperature": "Højeste temperatur",
-    "primaryTemperatureSensor": "Primær sensor",
-    "gpu": {
-      "title": "GPU",
-      "noDevice": "Ingen NVIDIA GPU fundet. Installer NVIDIA-driveren (den leverer nvidia-smi) for at se GPU-målinger.",
-      "driver": "Chauffør {{version}}",
-      "utilization": "Udnyttelse",
-      "memory": "VRAM",
-      "temperature": "Temp.",
-      "power": "Magt",
-      "fan": "Ventilator",
-      "processes": "GPU-processer",
-      "noProcesses": "Ingen processer bruger GPU'en"
-    },
-    "failedToFetchHostConfig": "Kunne ikke hente værtkonfigurationen",
-    "serverOffline": "Server offline",
-    "cannotFetchMetrics": "Kan ikke hente målinger fra offlineserveren",
-    "totpFailed": "TOTP-bekræftelse mislykkedes",
-    "noneAuthNotSupported": "Host Metrics understøtter ikke godkendelsestypen 'ingen'.",
-    "noHostSelected": "Ingen vært valgt",
-    "load": "Indlæs",
-    "systemInfo": "Systemoplysninger",
-    "hostname": "Værtsnavn",
-    "operatingSystem": "Operativsystem",
-    "kernel": "Kernen",
-    "seconds": "sekunder",
-    "networkInterfaces": "Netværksgrænseflader",
-    "noInterfacesFound": "Ingen netværksgrænseflader fundet",
-    "noProcessesFound": "Ingen processer fundet",
-    "processesTotal": "total",
-    "processesRunning": "løb",
-    "loginStats": "SSH-loginstatistik",
-    "noRecentLoginData": "Ingen nylige logindata",
-    "ports": {
-      "title": "Lytteporte",
-      "protocol": "Protokol",
-      "port": "Havn",
-      "address": "Adresse",
-      "process": "Behandle",
-      "search": "Søg efter porte...",
-      "allProtocols": "Alle",
-      "noData": "Ingen data om lytteporte"
-    },
-    "firewall": {
-      "title": "Firewall",
-      "inactive": "Inaktiv",
-      "policy": "Politik",
-      "rules": "regler",
-      "noRules": "Ingen regler i denne kæde",
-      "noData": "Ingen firewalldata tilgængelige",
-      "action": "Handling",
-      "protocol": "Proto",
-      "port": "Havn",
-      "source": "Kilde",
-      "anywhere": "Hvor som helst",
-      "chains": "kæder"
-    },
-    "loadAvg": "Indlæs gennemsnit",
-    "swap": "Byt",
-    "architecture": "Arkitektur",
-    "refresh": "Opfriske",
-    "retry": "Prøv igen",
-    "customize": "Tilpas layout",
-    "reset": "Nulstil",
-    "tabLive": "Levende",
-    "editModeInstructions": "Træk kort for at omarrangere, træk i den nederste kant for at ændre størrelsen, og brug breddeknappen til at ændre et korts spændvidde. Tilføj eller fjern kort nedenfor.",
-    "managers": {
-      "services": "Tjenester",
-      "processInspector": "Procesinspektør",
-      "logViewer": "Logfremviser",
-      "cron": "Cron-job",
-      "packages": "Pakker",
-      "ssl": "SSL-certifikater",
-      "firewall": "Firewall",
-      "users": "Brugere og tilladelser",
-      "healthCheck": "Sundhedstjek",
-      "diskBreakdown": "Disknedbrydning",
-      "systemdTimers": "Timere",
-      "topMemory": "Top efter hukommelse",
-      "noData": "Ingen data",
-      "sudoHint": "Angiv en sudo-adgangskode til denne vært i værtseditoren for at aktivere privilegerede handlinger.",
-      "filter": "Filter...",
-      "start": "Starte",
-      "stop": "Stop",
-      "restart": "Genstart",
-      "actionDone": "{{name}} opdateret",
-      "actionFailed": "Handlingen mislykkedes",
-      "signalSent": "Signal sendt til PID {{pid}}",
-      "killHint": "Klik: afslut (SIGTERM). Højreklik: tvungen afbrydelse (SIGKILL).",
-      "working": "Arbejder...",
-      "update": "Opdatering",
-      "upgradeAll": "Opgrader alle",
-      "allUpToDate": "Alt er opdateret",
-      "save": "Spare",
-      "command": "Kommando",
-      "enabled": "Aktiveret",
-      "cronSaved": "Crontab opdateret",
-      "clients": "Klienter",
-      "dryRun": "Tørløb",
-      "renew": "Forny",
-      "noAcmeClient": "Ingen ACME-klient (certbot eller acme.sh) fundet på denne vært.",
-      "addInputRule": "Tilføj INPUT-regel",
-      "firewallWarning": "Ændringer gælder kun for kørsel, indtil de bevares. Pas på ikke at låse dig selv ude.",
-      "ruleApplied": "Regel anvendt",
-      "invalidPort": "Indtast en gyldig port (1-65535)",
-      "newUsername": "Nyt brugernavn",
-      "addUser": "Tilføje",
-      "deleteUser": "Slet bruger",
-      "noHealthChecks": "Ingen sundhedstjek konfigureret endnu.",
-      "follow": "Følge",
-      "noLogData": "Ingen log-output.",
-      "tree": "Træ",
-      "enableDisable": "Aktivér/deaktiver ved opstart",
-      "grantSudo": "Giv sudo",
-      "revokeSudo": "Tilbagekald sudo",
-      "sslIssueCert": "Udstedelsescertifikat",
-      "sslExpired": "Udløbet",
-      "sslInDays": "i {{days}}d",
-      "sslNeedDomain": "Angiv mindst ét domæne",
-      "sslIssued": "Certifikat udstedt",
-      "sslDomainsPlaceholder": "eksempel.com, www.eksempel.com",
-      "sslHttpStandalone": "HTTP (selvstændig)",
-      "sslHttpWebroot": "HTTP (webroot)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "DNS-udbyder (f.eks. Cloudflare)",
-      "sslIssueHint": "DNS-udbyderens legitimationsoplysninger skal allerede være konfigureret på værten.",
-      "sslRevoke": "Tilbagekald certifikat",
-      "sslRevoked": "Certifikat tilbagekaldt",
-      "sslRevokeConfirm": "Tilbagekald og fjern certifikatet \"{{name}}\"? Dette kan ikke fortrydes.",
-      "healthRun": "Løbe",
-      "healthName": "Navn",
-      "healthTarget": "Vært / adresse",
-      "healthAddCheck": "Tilføj check",
-      "healthSaved": "Sundhedstjek gemt",
-      "healthMissingFields": "Hver check skal have et navn og et mål",
-      "logFile": "Fil",
-      "logUnit": "Enhed",
-      "logCustomPath": "Brugerdefineret sti under /var/log (valgfrit)",
-      "logGrep": "Filtrer linjer...",
-      "firewallPersist": "Vedvarende regler",
-      "firewallPersisted": "Firewallregler bevares",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "WireGuard er ikke installeret på denne vært",
-      "wgNoInterfaces": "Ingen WireGuard-grænseflader konfigureret",
-      "wgInterfaceUp": "Bring op",
-      "wgInterfaceDown": "Bring ned",
-      "wgBringingUp": "Bringer {{name}} op...",
-      "wgBringingDown": "Bringer {{name}} ned...",
-      "wgInterfaceUpDone": "{{name}} er oppe",
-      "wgInterfaceDownDone": "{{name}} er nede",
-      "wgListenPort": "Havn",
-      "wgPublicKey": "Offentlig nøgle",
-      "wgEndpoint": "Endepunkt",
-      "wgAllowedIPs": "Tilladte IP-adresser",
-      "wgLastHandshake": "Sidste håndtryk",
-      "wgHandshakeNever": "Aldrig",
-      "wgTransfer": "Overførsel",
-      "wgNoPeers": "Ingen ligemænd"
-    }
-  },
-  "metricsHistory": {
-    "title": "Metrikhistorik",
-    "historySuffix": "Historie",
-    "cpuMemoryDisk": "CPU / Hukommelse / Disk",
-    "network": "Netværk",
-    "download": "RX",
-    "upload": "TX",
-    "noData": "Der er ingen historiske data tilgængelige for dette tidsinterval.",
-    "custom": "Skik",
-    "to": "til",
-    "apply": "Anvende",
-    "viewHistory": "Vis historik"
-  },
-  "hosts": {
-    "tabHostMetrics": "Værtsmålinger",
-    "metricsCollectionLabel": "Metriksamling",
-    "enableMetricsLabel": "Aktivér metrikker",
-    "enableMetricsDesc": "Indsaml CPU-, RAM-, disk- og andre målinger fra denne vært",
-    "useGlobalMetrics": "Brug globalt interval",
-    "useGlobalMetricsDesc": "Tilsidesæt med det serveromfattende metrikinterval",
-    "metricsIntervalS": "Målinger Interval (s)",
-    "metricsIntervalDesc2": "Sekunder mellem metriske snapshots",
-    "excludedMountsLabel": "Ekskluderede monteringer",
-    "monitoredMountsLabel": "Brugerdefinerede overvågede stier",
-    "monitoredMountsDesc": "Tilføj stier, der ikke er eksponeret som separate monteringer, herunder bind-monterede Home Assistant-stier såsom /config.",
-    "monitoredMountPathPlaceholder": "Sti (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Etiket (valgfrit)",
-    "addMonitoredMount": "Tilføj sti",
-    "excludedMountsDesc": "Skjul specifikke monteringspunkter eller filsystemtyper (f.eks. nfs, cifs) fra diskbrug og advarsler for denne vært.",
-    "excludedMountsPlaceholder": "Monteringssti (/mnt/nas) eller filsystemtype (nfs, cifs)",
-    "excludedMountsEmpty": "Ingen monteringer er udelukket. Alle detekterede filsystemer vises.",
-    "addExcludedMount": "Tilføje",
-    "visibleWidgets": "Synlige widgets",
-    "widgetsMovedToHostMetrics": "Kort tilføjes, arrangeres og skaleres nu direkte i fanen Værtsmål. Åbn Værtsmål for denne vært, og brug Tilpas til at vælge, hvilke kort der vises.",
-    "hostNotFound": "Værten blev ikke fundet",
-    "loadingHost": "Indlæser vært..."
-  },
-  "onboarding": {
-    "feature_metrics": "Målinger og advarsler",
-    "feature_metrics_desc": "Spor CPU, hukommelse og disk over tid, og få en advarsel, når de bliver dårlige."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Opbevaring af metrikhistorik",
-    "metricsHistoryRetentionRange": "1 til 90 dage",
-    "days": "dage"
-  },
-  "homepage": {
-    "noData": "Ingen data tilgængelige",
-    "showCurrentValue": "Vis aktuel værdi",
-    "chartMetric": "Metrisk",
-    "metricRange": "Rækkevidde",
-    "host": "Vært",
-    "loading": "Indlæser...",
-    "metricCpu": "CPU",
-    "metricDisk": "Disk",
-    "metricHostname": "Værtsnavn",
-    "metricKernel": "Kernen",
-    "metricMemory": "Hukommelse",
-    "metricNetwork": "Netværk",
-    "metricOs": "OS",
-    "metricProcesses": "Processer",
-    "metricProcessesRunning": "løb",
-    "metricProcessesTotal": "total",
-    "metricUptime": "Oppetid",
-    "metricsNotAvailable": "Målinger er ikke tilgængelige",
-    "noHostSelected": "Ingen vært valgt",
-    "selectHost": "Vælg en vært..."
-  },
-  "terminalStatus": {
-    "unavailable": "Livestatistik ikke tilgængelig"
-  },
-  "dashboard": {
-    "cpu": "CPU",
-    "ram": "VÆDDER"
-  },
-  "dashboardTab": {
-    "disk": "Disk"
-  },
-  "terminal": {
-    "connected": "Forbundet"
-  },
-  "permissions": {
-    "use": {
-      "title": "Brug værtsmålinger",
-      "description": "Se værtsmålinger og brug værtsadministratorerne (tjenester, pakker, firewall og mere) på værter, du kan nå."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Måleinterval (sekunder)",
-        "description": "Hvor ofte en vært, der vises, samples, medmindre værten angiver sit eget interval."
-      },
-      "historyRetentionDays": {
-        "label": "Historikopbevaring (dage)",
-        "description": "Hvor længe metrikker gemmes til historikdiagrammerne."
-      },
-      "enabledForNewHosts": {
-        "label": "Målinger aktiveret for nye værter",
-        "description": "Om nye værter starter med indsamling af metrics aktiveret."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Temperaturenhed",
-        "description": "Hvordan temperaturer vises i Host Metrics.",
-        "celsius": "Celsius",
-        "fahrenheit": "Fahrenheit"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Indsaml målinger"
-      },
-      "metricsInterval": {
-        "label": "Måleinterval (sekunder)"
-      },
-      "enabledWidgets": {
-        "label": "Aktiverede widgets"
-      },
-      "excludedMounts": {
-        "label": "Ekskluderede monteringer"
-      },
-      "monitoredMounts": {
-        "label": "Overvågede stier"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Værtsmålinger"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/de_DE.json b/plugins/host-metrics/locales/translated/de_DE.json
deleted file mode 100644
index 565026020..000000000
--- a/plugins/host-metrics/locales/translated/de_DE.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Host-Metriken"
-  },
-  "hostMetrics": {
-    "cpu": "CPU",
-    "memory": "Arbeitsspeicher",
-    "disk": "Festplatte",
-    "network": "Netzwerk",
-    "uptime": "Betriebszeit",
-    "processes": "Prozesse",
-    "available": "Verfügbar",
-    "free": "Frei",
-    "connecting": "Verbinden...",
-    "connectionFailed": "Verbindung zum Server fehlgeschlagen",
-    "naCpus": "N/A CPU(s)",
-    "cpuCores_one": "{{count}} Kern",
-    "cpuCores_other": "{{count}} Kerne",
-    "cpuUsage": "CPU-Auslastung",
-    "memoryUsage": "Arbeitsspeicherauslastung",
-    "diskUsage": "Festplattenauslastung",
-    "selectFilesystem": "Dateisystem auswählen",
-    "temperature": "Temperatur",
-    "highestTemperature": "Höchste Temperatur",
-    "primaryTemperatureSensor": "Primärsensor",
-    "gpu": {
-      "title": "GPU",
-      "noDevice": "Es wurde keine NVIDIA-GPU erkannt. Installieren Sie den NVIDIA-Treiber (dieser stellt nvidia-smi bereit), um die GPU-Metriken anzuzeigen.",
-      "driver": "Fahrer {{version}}",
-      "utilization": "Verwendung",
-      "memory": "VRAM",
-      "temperature": "Temp",
-      "power": "Leistung",
-      "fan": "Lüfter",
-      "processes": "GPU-Prozesse",
-      "noProcesses": "Es werden keine Prozesse die GPU nutzen."
-    },
-    "failedToFetchHostConfig": "Fehler beim Abrufen der Host-Konfiguration",
-    "serverOffline": "Server offline",
-    "cannotFetchMetrics": "Metriken können nicht vom Offline-Server abgerufen werden",
-    "totpFailed": "TOTP-Überprüfung fehlgeschlagen",
-    "noneAuthNotSupported": "Host Metrics unterstützt den Authentifizierungstyp 'none' nicht.",
-    "noHostSelected": "Kein Host ausgewählt",
-    "load": "Auslastung",
-    "systemInfo": "Systeminformationen",
-    "hostname": "Hostname",
-    "operatingSystem": "Betriebssystem",
-    "kernel": "Kernel",
-    "seconds": "Sekunden",
-    "networkInterfaces": "Netzwerkschnittstellen",
-    "noInterfacesFound": "Keine Netzwerkschnittstellen gefunden",
-    "noProcessesFound": "Keine Prozesse gefunden",
-    "processesTotal": "gesamt",
-    "processesRunning": "laufend",
-    "loginStats": "SSH-Anmeldestatistiken",
-    "noRecentLoginData": "Keine aktuellen Anmeldedaten",
-    "ports": {
-      "title": "Lauschende Ports",
-      "protocol": "Protokoll",
-      "port": "Port",
-      "address": "Adresse",
-      "process": "Prozess",
-      "search": "Ports durchsuchen...",
-      "allProtocols": "Alle",
-      "noData": "Keine Daten zu lauschenden Ports"
-    },
-    "firewall": {
-      "title": "Firewall",
-      "inactive": "Inaktiv",
-      "policy": "Richtlinie",
-      "rules": "Regeln",
-      "noRules": "Keine Regeln in dieser Kette",
-      "noData": "Keine Firewall-Daten verfügbar",
-      "action": "Aktion",
-      "protocol": "Proto",
-      "port": "Port",
-      "source": "Quelle",
-      "anywhere": "Überall",
-      "chains": "Ketten"
-    },
-    "loadAvg": "Lastdurchschnitt",
-    "swap": "Swap",
-    "architecture": "Architektur",
-    "refresh": "Aktualisieren",
-    "retry": "Wiederholen",
-    "customize": "Layout anpassen",
-    "reset": "Zurücksetzen",
-    "tabLive": "Live",
-    "editModeInstructions": "Ziehen Sie Karten, um sie neu anzuordnen, ziehen Sie die untere Kante, um die Größe zu ändern, und verwenden Sie die Breitenschaltfläche, um die Breite einer Karte anzupassen. Fügen Sie Karten unten hinzu oder entfernen Sie sie.",
-    "managers": {
-      "services": "Dienste",
-      "processInspector": "Prozessinspektor",
-      "logViewer": "Protokollbetrachter",
-      "cron": "Cron-Jobs",
-      "packages": "Pakete",
-      "ssl": "SSL-Zertifikate",
-      "firewall": "Firewall",
-      "users": "Benutzer & Berechtigungen",
-      "healthCheck": "Gesundheitsprüfungen",
-      "diskBreakdown": "Datenträgeraufschlüsselung",
-      "systemdTimers": "Timer",
-      "topMemory": "Top nach Speicher",
-      "noData": "Keine Daten",
-      "sudoHint": "Legen Sie im Host-Editor ein sudo-Passwort für diesen Host fest, um privilegierte Aktionen zu ermöglichen.",
-      "filter": "Filtern...",
-      "start": "Starten",
-      "stop": "Stoppen",
-      "restart": "Neustarten",
-      "actionDone": "{{name}} aktualisiert",
-      "actionFailed": "Aktion fehlgeschlagen",
-      "signalSent": "Signal an PID {{pid}} gesendet",
-      "killHint": "Klicken: Beenden (SIGTERM). Rechtsklick: Erzwungenes Beenden (SIGKILL).",
-      "working": "In Bearbeitung...",
-      "update": "Aktualisieren",
-      "upgradeAll": "Alle upgraden",
-      "allUpToDate": "Alles ist auf dem neuesten Stand",
-      "save": "Speichern",
-      "command": "Befehl",
-      "enabled": "Aktiviert",
-      "cronSaved": "Crontab aktualisiert",
-      "clients": "Clients",
-      "dryRun": "Trockenlauf",
-      "renew": "Erneuern",
-      "noAcmeClient": "Kein ACME-Client (certbot oder acme.sh) auf diesem Host gefunden.",
-      "addInputRule": "INPUT-Regel hinzufügen",
-      "firewallWarning": "Änderungen sind nur zur Laufzeit wirksam, bis sie gespeichert werden. Achten Sie darauf, sich nicht auszusperren.",
-      "ruleApplied": "Regel angewendet",
-      "invalidPort": "Gültigen Port eingeben (1–65535)",
-      "newUsername": "Neuer Benutzername",
-      "addUser": "Hinzufügen",
-      "deleteUser": "Benutzer löschen",
-      "noHealthChecks": "Noch keine Zustandsprüfungen konfiguriert.",
-      "follow": "Folgen",
-      "noLogData": "Keine Protokollausgabe.",
-      "tree": "Baum",
-      "enableDisable": "Beim Start aktivieren / deaktivieren",
-      "grantSudo": "sudo gewähren",
-      "revokeSudo": "sudo entziehen",
-      "sslIssueCert": "Zertifikat ausstellen",
-      "sslExpired": "Abgelaufen",
-      "sslInDays": "in {{days}} T",
-      "sslNeedDomain": "Geben Sie mindestens eine Domain ein",
-      "sslIssued": "Zertifikat ausgestellt",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (Standalone)",
-      "sslHttpWebroot": "HTTP (Webroot)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "DNS-Anbieter (z. B. cloudflare)",
-      "sslIssueHint": "Anmeldedaten des DNS-Anbieters müssen bereits auf dem Host konfiguriert sein.",
-      "sslRevoke": "Zertifikat widerrufen",
-      "sslRevoked": "Zertifikat wurde widerrufen",
-      "sslRevokeConfirm": "Zertifikat \"{{name}}\" widerrufen und entfernen? Dies kann nicht rückgängig gemacht werden.",
-      "healthRun": "Ausführen",
-      "healthName": "Name",
-      "healthTarget": "Host / Adresse",
-      "healthAddCheck": "Prüfung hinzufügen",
-      "healthSaved": "Statusprüfungen gespeichert",
-      "healthMissingFields": "Jede Prüfung benötigt einen Namen und ein Ziel",
-      "logFile": "Datei",
-      "logUnit": "Unit",
-      "logCustomPath": "Benutzerdefinierter Pfad unter /var/log (optional)",
-      "logGrep": "Zeilen filtern...",
-      "firewallPersist": "Regeln dauerhaft speichern",
-      "firewallPersisted": "Firewall-Regeln dauerhaft gespeichert",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "WireGuard ist auf diesem Host nicht installiert",
-      "wgNoInterfaces": "Keine WireGuard-Schnittstellen konfiguriert",
-      "wgInterfaceUp": "Aktivieren",
-      "wgInterfaceDown": "Deaktivieren",
-      "wgBringingUp": "{{name}} wird aktiviert...",
-      "wgBringingDown": "{{name}} wird deaktiviert...",
-      "wgInterfaceUpDone": "{{name}} ist aktiv",
-      "wgInterfaceDownDone": "{{name}} ist deaktiviert",
-      "wgListenPort": "Port",
-      "wgPublicKey": "Öffentlicher Schlüssel",
-      "wgEndpoint": "Endpunkt",
-      "wgAllowedIPs": "Erlaubte IPs",
-      "wgLastHandshake": "Letzter Handshake",
-      "wgHandshakeNever": "Nie",
-      "wgTransfer": "Übertragung",
-      "wgNoPeers": "Keine Konkurrenten"
-    }
-  },
-  "metricsHistory": {
-    "title": "Metrikenverlauf",
-    "historySuffix": "Verlauf",
-    "cpuMemoryDisk": "CPU / RAM / Festplatte",
-    "network": "Netzwerk",
-    "download": "RX",
-    "upload": "TX",
-    "noData": "Keine Verlaufsdaten für diesen Zeitraum verfügbar.",
-    "custom": "Benutzerdefiniert",
-    "to": "bis",
-    "apply": "Anwenden",
-    "viewHistory": "Verlauf anzeigen"
-  },
-  "hosts": {
-    "tabHostMetrics": "Host-Metriken",
-    "metricsCollectionLabel": "Metrikerfassung",
-    "enableMetricsLabel": "Metriken aktivieren",
-    "enableMetricsDesc": "CPU, RAM, Festplatten und andere Metriken von diesem Host erfassen",
-    "useGlobalMetrics": "Globales Intervall verwenden",
-    "useGlobalMetricsDesc": "Mit dem serverweiten Metrikintervall überschreiben",
-    "metricsIntervalS": "Metrikintervall (s)",
-    "metricsIntervalDesc2": "Sekunden zwischen Metrik-Momentaufnahmen",
-    "excludedMountsLabel": "Ausgeschlossene Halterungen",
-    "monitoredMountsLabel": "Benutzerdefinierte überwachte Pfade",
-    "monitoredMountsDesc": "Fügen Sie Pfade hinzu, die nicht als separate Mounts verfügbar sind, einschließlich bind-gebundener Home Assistant-Pfade wie /config.",
-    "monitoredMountPathPlaceholder": "Pfad (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Bezeichnung (optional)",
-    "addMonitoredMount": "Pfad hinzufügen",
-    "excludedMountsDesc": "Bestimmte Mountpunkte oder Dateisystemtypen (z. B. nfs, cifs) können von der Festplattennutzung und Warnmeldungen für diesen Host ausgeblendet werden.",
-    "excludedMountsPlaceholder": "Mount-Pfad (/mnt/nas) oder Dateisystemtyp (nfs, cifs)",
-    "excludedMountsEmpty": "Keine Mounts ausgeschlossen. Alle erkannten Dateisysteme werden angezeigt.",
-    "addExcludedMount": "Hinzufügen",
-    "visibleWidgets": "Sichtbare Widgets",
-    "widgetsMovedToHostMetrics": "Karten werden jetzt direkt im Tab „Host-Metriken“ hinzugefügt, angeordnet und in der Größe verändert. Öffnen Sie die Host-Metriken für diesen Host und verwenden Sie „Anpassen“, um auszuwählen, welche Karten angezeigt werden.",
-    "hostNotFound": "Host nicht gefunden",
-    "loadingHost": "Host wird geladen..."
-  },
-  "onboarding": {
-    "feature_metrics": "Kennzahlen und Warnmeldungen",
-    "feature_metrics_desc": "Verfolgen Sie CPU, Arbeitsspeicher und Festplatte im Zeitverlauf und lassen Sie sich benachrichtigen, wenn diese Werte sinken."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Aufbewahrungsdauer der Metriken",
-    "metricsHistoryRetentionRange": "1 bis 90 Tage",
-    "days": "Tage"
-  },
-  "homepage": {
-    "noData": "Keine Daten verfügbar",
-    "showCurrentValue": "Aktuellen Wert anzeigen",
-    "chartMetric": "Metrik",
-    "metricRange": "Bereich",
-    "host": "Host",
-    "loading": "Wird geladen...",
-    "metricCpu": "CPU",
-    "metricDisk": "Festplatte",
-    "metricHostname": "Hostname",
-    "metricKernel": "Kernel",
-    "metricMemory": "Arbeitsspeicher",
-    "metricNetwork": "Netzwerk",
-    "metricOs": "Betriebssystem",
-    "metricProcesses": "Prozesse",
-    "metricProcessesRunning": "laufend",
-    "metricProcessesTotal": "gesamt",
-    "metricUptime": "Betriebszeit",
-    "metricsNotAvailable": "Metriken nicht verfügbar",
-    "noHostSelected": "Kein Host ausgewählt",
-    "selectHost": "Host auswählen..."
-  },
-  "terminalStatus": {
-    "unavailable": "Live-Statistiken nicht verfügbar"
-  },
-  "dashboard": {
-    "cpu": "CPU",
-    "ram": "RAM"
-  },
-  "dashboardTab": {
-    "disk": "Datenträger"
-  },
-  "terminal": {
-    "connected": "Verbunden"
-  },
-  "permissions": {
-    "use": {
-      "title": "Hostmetriken verwenden",
-      "description": "Sehen Sie sich Host-Metriken an und nutzen Sie die Host-Manager (Dienste, Pakete, Firewall und mehr) auf Hosts, die Sie erreichen können."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Metrikintervall (Sekunden)",
-        "description": "Wie oft ein angezeigter Host abgetastet wird, es sei denn, der Host legt sein eigenes Intervall fest."
-      },
-      "historyRetentionDays": {
-        "label": "Aufbewahrungsdauer (Tage)",
-        "description": "Wie lange die Messwertbeispiele für die Verlaufsdiagramme aufbewahrt werden."
-      },
-      "enabledForNewHosts": {
-        "label": "Metriken für neue Hosts aktiviert",
-        "description": "Ob neue Hosts mit aktivierter Metrikenerfassung starten."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Temperatureinheit",
-        "description": "Wie Temperaturen in Host Metrics angezeigt werden.",
-        "celsius": "Celsius",
-        "fahrenheit": "Fahrenheit"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Kennzahlen erfassen"
-      },
-      "metricsInterval": {
-        "label": "Metrikintervall (Sekunden)"
-      },
-      "enabledWidgets": {
-        "label": "Aktivierte Widgets"
-      },
-      "excludedMounts": {
-        "label": "Ausgeschlossene Halterungen"
-      },
-      "monitoredMounts": {
-        "label": "Überwachte Pfade"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Host-Metriken"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/el_GR.json b/plugins/host-metrics/locales/translated/el_GR.json
deleted file mode 100644
index 64db3de3b..000000000
--- a/plugins/host-metrics/locales/translated/el_GR.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Μετρήσεις κεντρικού υπολογιστή"
-  },
-  "hostMetrics": {
-    "cpu": "ΚΜΕ",
-    "memory": "Μνήμη",
-    "disk": "Δίσκος",
-    "network": "Δίκτυο",
-    "uptime": "Χρόνος λειτουργίας",
-    "processes": "Διαδικασίες",
-    "available": "Διαθέσιμος",
-    "free": "Δωρεάν",
-    "connecting": "Συνδετικός...",
-    "connectionFailed": "Αποτυχία σύνδεσης με τον διακομιστή",
-    "naCpus": "Δ/Υ CPU(s)",
-    "cpuCores_one": "{{count}} Πυρήνας",
-    "cpuCores_other": "{{count}} Πυρήνες",
-    "cpuUsage": "Χρήση CPU",
-    "memoryUsage": "Χρήση μνήμης",
-    "diskUsage": "Χρήση δίσκου",
-    "selectFilesystem": "Επιλογή συστήματος αρχείων",
-    "temperature": "Θερμοκρασία",
-    "highestTemperature": "Υψηλότερη θερμοκρασία",
-    "primaryTemperatureSensor": "Κύριος αισθητήρας",
-    "gpu": {
-      "title": "GPU",
-      "noDevice": "Δεν εντοπίστηκε GPU NVIDIA. Εγκαταστήστε το πρόγραμμα οδήγησης NVIDIA (παρέχει nvidia-smi) για να δείτε τις μετρήσεις GPU.",
-      "driver": "Οδηγός {{version}}",
-      "utilization": "Χρησιμοποίηση",
-      "memory": "VRAM",
-      "temperature": "Θερμοκρασία",
-      "power": "Εξουσία",
-      "fan": "Ανεμιστήρας",
-      "processes": "Διαδικασίες GPU",
-      "noProcesses": "Δεν υπάρχουν διεργασίες που να χρησιμοποιούν την GPU"
-    },
-    "failedToFetchHostConfig": "Αποτυχία ανάκτησης διαμόρφωσης κεντρικού υπολογιστή",
-    "serverOffline": "Διακομιστής εκτός σύνδεσης",
-    "cannotFetchMetrics": "Δεν είναι δυνατή η ανάκτηση μετρήσεων από διακομιστή εκτός σύνδεσης",
-    "totpFailed": "Η επαλήθευση TOTP απέτυχε.",
-    "noneAuthNotSupported": "Το Host Metrics δεν υποστηρίζει τον τύπο ελέγχου ταυτότητας 'κανένας'.",
-    "noHostSelected": "Δεν έχει επιλεγεί κεντρικός υπολογιστής",
-    "load": "Φορτίο",
-    "systemInfo": "Πληροφορίες συστήματος",
-    "hostname": "Όνομα κεντρικού υπολογιστή",
-    "operatingSystem": "Λειτουργικό σύστημα",
-    "kernel": "Πυρήνας",
-    "seconds": "δευτερόλεπτα",
-    "networkInterfaces": "Διεπαφές δικτύου",
-    "noInterfacesFound": "Δεν βρέθηκαν διεπαφές δικτύου",
-    "noProcessesFound": "Δεν βρέθηκαν διεργασίες",
-    "processesTotal": "σύνολο",
-    "processesRunning": "τρέξιμο",
-    "loginStats": "Στατιστικά στοιχεία σύνδεσης SSH",
-    "noRecentLoginData": "Δεν υπάρχουν πρόσφατα δεδομένα σύνδεσης",
-    "ports": {
-      "title": "Θύρες ακρόασης",
-      "protocol": "Πρωτόκολλο",
-      "port": "Λιμάνι",
-      "address": "Διεύθυνση",
-      "process": "Διαδικασία",
-      "search": "Αναζήτηση θυρών...",
-      "allProtocols": "Ολοι",
-      "noData": "Δεν υπάρχουν δεδομένα θυρών ακρόασης"
-    },
-    "firewall": {
-      "title": "Τείχος προστασίας",
-      "inactive": "Αδρανής",
-      "policy": "Πολιτική",
-      "rules": "κανόνες",
-      "noRules": "Δεν υπάρχουν κανόνες σε αυτήν την αλυσίδα",
-      "noData": "Δεν υπάρχουν διαθέσιμα δεδομένα τείχους προστασίας",
-      "action": "Δράση",
-      "protocol": "Πρωτό",
-      "port": "Λιμάνι",
-      "source": "Πηγή",
-      "anywhere": "Οπουδήποτε",
-      "chains": "αλυσίδες"
-    },
-    "loadAvg": "Μέσος όρος φορτίου",
-    "swap": "Ανταλαγή",
-    "architecture": "Αρχιτεκτονική",
-    "refresh": "Φρεσκάρω",
-    "retry": "Δοκιμάζω πάλι",
-    "customize": "Προσαρμογή διάταξης",
-    "reset": "Επαναφορά",
-    "tabLive": "Ζω",
-    "editModeInstructions": "Σύρετε τις κάρτες για αναδιάταξη, σύρετε την κάτω άκρη για αλλαγή μεγέθους και χρησιμοποιήστε το κουμπί πλάτους για να αλλάξετε το εύρος μιας κάρτας. Προσθέστε ή αφαιρέστε κάρτες παρακάτω.",
-    "managers": {
-      "services": "Υπηρεσίες",
-      "processInspector": "Επιθεωρητής Διαδικασίας",
-      "logViewer": "Πρόγραμμα προβολής αρχείων καταγραφής",
-      "cron": "Cron Jobs",
-      "packages": "Πακέτα",
-      "ssl": "Πιστοποιητικά SSL",
-      "firewall": "Τείχος προστασίας",
-      "users": "Χρήστες και Δικαιώματα",
-      "healthCheck": "Έλεγχοι υγείας",
-      "diskBreakdown": "Ανάλυση δίσκου",
-      "systemdTimers": "Χρονόμετρα",
-      "topMemory": "Κορυφαία κατά Μνήμη",
-      "noData": "Δεν υπάρχουν δεδομένα",
-      "sudoHint": "Ορίστε έναν κωδικό πρόσβασης sudo για αυτόν τον κεντρικό υπολογιστή στον επεξεργαστή κεντρικού υπολογιστή για να ενεργοποιήσετε τις προνομιακές ενέργειες.",
-      "filter": "Φίλτρο...",
-      "start": "Αρχή",
-      "stop": "Στάση",
-      "restart": "Επανεκκίνηση",
-      "actionDone": "{{name}} ενημερώθηκε",
-      "actionFailed": "Η ενέργεια απέτυχε",
-      "signalSent": "Σήμα που αποστέλλεται στο PID {{pid}}",
-      "killHint": "Κάντε κλικ: τερματισμός (SIGTERM). Δεξί κλικ: αναγκαστική τερματισμός (SIGKILL).",
-      "working": "Εργαζόμενος...",
-      "update": "Εκσυγχρονίζω",
-      "upgradeAll": "Αναβάθμιση όλων",
-      "allUpToDate": "Όλα είναι ενημερωμένα",
-      "save": "Εκτός",
-      "command": "Εντολή",
-      "enabled": "Ενεργοποιημένο",
-      "cronSaved": "Το Crontab ενημερώθηκε",
-      "clients": "Πελάτες",
-      "dryRun": "Ξηρή λειτουργία",
-      "renew": "Ανανεώνω",
-      "noAcmeClient": "Δεν βρέθηκε πρόγραμμα-πελάτης ACME (certbot ή acme.sh) σε αυτόν τον κεντρικό υπολογιστή.",
-      "addInputRule": "Προσθήκη κανόνα INPUT",
-      "firewallWarning": "Οι αλλαγές ισχύουν μόνο κατά τον χρόνο εκτέλεσης μέχρι να διατηρηθούν. Προσέξτε να μην κλειδωθείτε έξω.",
-      "ruleApplied": "Εφαρμόστηκε κανόνας",
-      "invalidPort": "Εισαγάγετε μια έγκυρη θύρα (1-65535)",
-      "newUsername": "Νέο όνομα χρήστη",
-      "addUser": "Προσθέτω",
-      "deleteUser": "Διαγραφή χρήστη",
-      "noHealthChecks": "Δεν έχουν ρυθμιστεί ακόμη έλεγχοι εύρυθμης λειτουργίας.",
-      "follow": "Ακολουθώ",
-      "noLogData": "Δεν υπάρχει έξοδος αρχείου καταγραφής.",
-      "tree": "Δέντρο",
-      "enableDisable": "Ενεργοποίηση/απενεργοποίηση κατά την εκκίνηση",
-      "grantSudo": "Grant sudo",
-      "revokeSudo": "Ανάκληση sudo",
-      "sslIssueCert": "Έκδοση πιστοποιητικού",
-      "sslExpired": "Λήξη",
-      "sslInDays": "σε {{days}}δ",
-      "sslNeedDomain": "Εισαγάγετε τουλάχιστον έναν τομέα",
-      "sslIssued": "Πιστοποιητικό που εκδόθηκε",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (αυτόνομο)",
-      "sslHttpWebroot": "HTTP (weberroot)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "Πάροχος DNS (π.χ. cloudflare)",
-      "sslIssueHint": "Τα διαπιστευτήρια του παρόχου DNS πρέπει να έχουν ήδη διαμορφωθεί στον κεντρικό υπολογιστή.",
-      "sslRevoke": "Ανάκληση πιστοποιητικού",
-      "sslRevoked": "Το πιστοποιητικό ανακλήθηκε",
-      "sslRevokeConfirm": "Ανάκληση και κατάργηση του πιστοποιητικού \"{{name}}\"; Αυτή η ενέργεια δεν μπορεί να αναιρεθεί.",
-      "healthRun": "Τρέξιμο",
-      "healthName": "Ονομα",
-      "healthTarget": "Υποδοχή / διεύθυνση",
-      "healthAddCheck": "Προσθήκη επιταγής",
-      "healthSaved": "Οι έλεγχοι υγείας αποθηκεύτηκαν",
-      "healthMissingFields": "Κάθε έλεγχος χρειάζεται ένα όνομα και έναν στόχο",
-      "logFile": "Αρχείο",
-      "logUnit": "Μονάδα",
-      "logCustomPath": "Προσαρμοσμένη διαδρομή στο /var/log (προαιρετικό)",
-      "logGrep": "Γραμμές φίλτρου...",
-      "firewallPersist": "Επιμονή στους κανόνες",
-      "firewallPersisted": "Οι κανόνες του τείχους προστασίας παρέμειναν",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "Το WireGuard δεν είναι εγκατεστημένο σε αυτόν τον κεντρικό υπολογιστή",
-      "wgNoInterfaces": "Δεν έχουν ρυθμιστεί διεπαφές WireGuard",
-      "wgInterfaceUp": "Ανατρέφω",
-      "wgInterfaceDown": "Ρίχνω",
-      "wgBringingUp": "Εμφάνιση του {{name}}...",
-      "wgBringingDown": "Κατεβάζοντας το {{name}}...",
-      "wgInterfaceUpDone": "Το {{name}} είναι ενεργό",
-      "wgInterfaceDownDone": "Το {{name}} δεν λειτουργεί",
-      "wgListenPort": "Λιμάνι",
-      "wgPublicKey": "Δημόσιο κλειδί",
-      "wgEndpoint": "Τελικό σημείο",
-      "wgAllowedIPs": "Επιτρεπόμενες IP",
-      "wgLastHandshake": "Τελευταία χειραψία",
-      "wgHandshakeNever": "Ποτέ",
-      "wgTransfer": "Μεταφορά",
-      "wgNoPeers": "Δεν υπάρχουν ομότιμοι"
-    }
-  },
-  "metricsHistory": {
-    "title": "Ιστορικό μετρήσεων",
-    "historySuffix": "Ιστορία",
-    "cpuMemoryDisk": "CPU / Μνήμη / Δίσκος",
-    "network": "Δίκτυο",
-    "download": "Συνάντηση",
-    "upload": "Τέξας",
-    "noData": "Δεν υπάρχουν διαθέσιμα δεδομένα ιστορικού για αυτό το χρονικό εύρος.",
-    "custom": "Εθιμο",
-    "to": "να",
-    "apply": "Εφαρμόζω",
-    "viewHistory": "Προβολή ιστορικού"
-  },
-  "hosts": {
-    "tabHostMetrics": "Μετρήσεις κεντρικού υπολογιστή",
-    "metricsCollectionLabel": "Συλλογή μετρήσεων",
-    "enableMetricsLabel": "Ενεργοποίηση μετρήσεων",
-    "enableMetricsDesc": "Συλλογή μετρήσεων CPU, RAM, δίσκου και άλλων από αυτόν τον κεντρικό υπολογιστή",
-    "useGlobalMetrics": "Χρήση καθολικού διαστήματος",
-    "useGlobalMetricsDesc": "Παράκαμψη με το διάστημα μετρήσεων σε ολόκληρο τον διακομιστή",
-    "metricsIntervalS": "Διάστημα μετρήσεων (s)",
-    "metricsIntervalDesc2": "Δευτερόλεπτα μεταξύ στιγμιότυπων μετρήσεων",
-    "excludedMountsLabel": "Εξαιρούμενες βάσεις",
-    "monitoredMountsLabel": "Προσαρμοσμένες παρακολουθούμενες διαδρομές",
-    "monitoredMountsDesc": "Προσθέστε διαδρομές που δεν εκτίθενται ως ξεχωριστές προσαρτήσεις, συμπεριλαμβανομένων των διαδρομών του Home Assistant που είναι προσαρτημένες στο bind, όπως το /config.",
-    "monitoredMountPathPlaceholder": "Διαδρομή (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Ετικέτα (προαιρετικά)",
-    "addMonitoredMount": "Προσθήκη διαδρομής",
-    "excludedMountsDesc": "Απόκρυψη συγκεκριμένων σημείων προσάρτησης ή τύπων συστημάτων αρχείων (π.χ. nfs, cifs) από τη χρήση δίσκου και τις ειδοποιήσεις για αυτόν τον κεντρικό υπολογιστή.",
-    "excludedMountsPlaceholder": "Διαδρομή προσάρτησης (/mnt/nas) ή τύπος συστήματος αρχείων (nfs, cifs)",
-    "excludedMountsEmpty": "Δεν εξαιρούνται προσαρτήσεις. Εμφανίζονται όλα τα εντοπισμένα συστήματα αρχείων.",
-    "addExcludedMount": "Προσθέτω",
-    "visibleWidgets": "Ορατά γραφικά στοιχεία",
-    "widgetsMovedToHostMetrics": "Οι κάρτες προστίθενται, ταξινομούνται και αλλάζουν μέγεθος απευθείας στην καρτέλα Μετρήσεις κεντρικού υπολογιστή. Ανοίξτε τις Μετρήσεις κεντρικού υπολογιστή για αυτόν τον κεντρικό υπολογιστή και χρησιμοποιήστε την Προσαρμογή για να επιλέξετε ποιες κάρτες θα εμφανίζονται.",
-    "hostNotFound": "Δεν βρέθηκε κεντρικός υπολογιστής",
-    "loadingHost": "Φόρτωση κεντρικού υπολογιστή..."
-  },
-  "onboarding": {
-    "feature_metrics": "Μετρήσεις και ειδοποιήσεις",
-    "feature_metrics_desc": "Παρακολουθήστε την CPU, τη μνήμη και τον δίσκο με την πάροδο του χρόνου και λάβετε ειδοποίηση όταν παρουσιάσουν προβλήματα."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Διατήρηση ιστορικού μετρήσεων",
-    "metricsHistoryRetentionRange": "1 έως 90 ημέρες",
-    "days": "ημέρες"
-  },
-  "homepage": {
-    "noData": "Δεν υπάρχουν διαθέσιμα δεδομένα",
-    "showCurrentValue": "Εμφάνιση τρέχουσας τιμής",
-    "chartMetric": "Μετρικός",
-    "metricRange": "Σειρά",
-    "host": "Πλήθος",
-    "loading": "Φόρτωση...",
-    "metricCpu": "ΚΜΕ",
-    "metricDisk": "Δίσκος",
-    "metricHostname": "Όνομα κεντρικού υπολογιστή",
-    "metricKernel": "Πυρήνας",
-    "metricMemory": "Μνήμη",
-    "metricNetwork": "Δίκτυο",
-    "metricOs": "Λειτουργικό σύστημα",
-    "metricProcesses": "Διαδικασίες",
-    "metricProcessesRunning": "τρέξιμο",
-    "metricProcessesTotal": "σύνολο",
-    "metricUptime": "Χρόνος λειτουργίας",
-    "metricsNotAvailable": "Οι μετρήσεις δεν είναι διαθέσιμες",
-    "noHostSelected": "Δεν έχει επιλεγεί κεντρικός υπολογιστής",
-    "selectHost": "Επιλέξτε έναν οικοδεσπότη..."
-  },
-  "terminalStatus": {
-    "unavailable": "Δεν είναι διαθέσιμα ζωντανά στατιστικά στοιχεία"
-  },
-  "dashboard": {
-    "cpu": "ΚΜΕ",
-    "ram": "ΕΜΒΟΛΟ"
-  },
-  "dashboardTab": {
-    "disk": "Δίσκος"
-  },
-  "terminal": {
-    "connected": "Συνδεδεμένος"
-  },
-  "permissions": {
-    "use": {
-      "title": "Χρήση μετρήσεων κεντρικού υπολογιστή",
-      "description": "Δείτε μετρήσεις κεντρικού υπολογιστή και χρησιμοποιήστε τους διαχειριστές κεντρικού υπολογιστή (υπηρεσίες, πακέτα, τείχος προστασίας και άλλα) σε κεντρικούς υπολογιστές που μπορείτε να προσεγγίσετε."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Διάστημα μετρήσεων (δευτερόλεπτα)",
-        "description": "Πόσο συχνά δειγματοληπτείται ένας κεντρικός υπολογιστής που προβάλλεται, εκτός εάν ο κεντρικός υπολογιστής ορίσει το δικό του διάστημα."
-      },
-      "historyRetentionDays": {
-        "label": "Διατήρηση ιστορικού (ημέρες)",
-        "description": "Για πόσο χρονικό διάστημα διατηρούνται τα δείγματα μετρήσεων για τα γραφήματα ιστορικού."
-      },
-      "enabledForNewHosts": {
-        "label": "Ενεργοποιημένες μετρήσεις για νέους οικοδεσπότες",
-        "description": "Εάν οι νέοι οικοδεσπότες ξεκινούν με ενεργοποιημένη τη συλλογή μετρήσεων."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Μονάδα θερμοκρασίας",
-        "description": "Πώς εμφανίζονται οι θερμοκρασίες στις Μετρήσεις Host.",
-        "celsius": "Κελσίου",
-        "fahrenheit": "θερμόμετρο Φαρενάιτ"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Συλλογή μετρήσεων"
-      },
-      "metricsInterval": {
-        "label": "Διάστημα μετρήσεων (δευτερόλεπτα)"
-      },
-      "enabledWidgets": {
-        "label": "Ενεργοποιημένα γραφικά στοιχεία"
-      },
-      "excludedMounts": {
-        "label": "Εξαιρούμενες βάσεις"
-      },
-      "monitoredMounts": {
-        "label": "Παρακολουθούμενες διαδρομές"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Μετρήσεις κεντρικού υπολογιστή"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/es_ES.json b/plugins/host-metrics/locales/translated/es_ES.json
deleted file mode 100644
index d25caee4a..000000000
--- a/plugins/host-metrics/locales/translated/es_ES.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Métricas del host"
-  },
-  "hostMetrics": {
-    "cpu": "CPU",
-    "memory": "Memoria",
-    "disk": "Disco",
-    "network": "Red",
-    "uptime": "Tiempo de actividad",
-    "processes": "Procesos",
-    "available": "Disponible",
-    "free": "Libre",
-    "connecting": "Conectando...",
-    "connectionFailed": "Error al conectar con el servidor",
-    "naCpus": "CPU(s) N/D",
-    "cpuCores_one": "{{count}} núcleo",
-    "cpuCores_other": "{{count}} núcleos",
-    "cpuUsage": "Uso de CPU",
-    "memoryUsage": "Uso de memoria",
-    "diskUsage": "Uso del disco",
-    "selectFilesystem": "Seleccionar sistema de archivos",
-    "temperature": "Temperatura",
-    "highestTemperature": "Temperatura más alta",
-    "primaryTemperatureSensor": "Sensor primario",
-    "gpu": {
-      "title": "GPU",
-      "noDevice": "No se ha detectado ninguna GPU NVIDIA. Instale el controlador NVIDIA (que incluye nvidia-smi) para ver las métricas de la GPU.",
-      "driver": "Conductor {{version}}",
-      "utilization": "Utilización",
-      "memory": "VRAM",
-      "temperature": "Temperatura",
-      "power": "Fuerza",
-      "fan": "Admirador",
-      "processes": "procesos de GPU",
-      "noProcesses": "Ningún proceso está utilizando la GPU."
-    },
-    "failedToFetchHostConfig": "Error al obtener la configuración del host",
-    "serverOffline": "Servidor fuera de línea",
-    "cannotFetchMetrics": "No se pueden obtener métricas de un servidor fuera de línea",
-    "totpFailed": "Error en la verificación TOTP",
-    "noneAuthNotSupported": "Host Metrics no admite el tipo de autenticación 'none'.",
-    "noHostSelected": "Ningún host seleccionado",
-    "load": "Carga",
-    "systemInfo": "Información del sistema",
-    "hostname": "Nombre de host",
-    "operatingSystem": "Sistema operativo",
-    "kernel": "Kernel",
-    "seconds": "segundos",
-    "networkInterfaces": "Interfaces de red",
-    "noInterfacesFound": "No se encontraron interfaces de red",
-    "noProcessesFound": "No se encontraron procesos",
-    "processesTotal": "total",
-    "processesRunning": "en ejecución",
-    "loginStats": "Estadísticas de inicio de sesión SSH",
-    "noRecentLoginData": "No hay datos de inicio de sesión recientes",
-    "ports": {
-      "title": "Puertos en escucha",
-      "protocol": "Protocolo",
-      "port": "Puerto",
-      "address": "Dirección",
-      "process": "Proceso",
-      "search": "Buscar puertos...",
-      "allProtocols": "Todos",
-      "noData": "No hay datos de puertos en escucha"
-    },
-    "firewall": {
-      "title": "Cortafuegos",
-      "inactive": "Inactivo",
-      "policy": "Política",
-      "rules": "reglas",
-      "noRules": "No hay reglas en esta cadena",
-      "noData": "No hay datos del cortafuegos disponibles",
-      "action": "Acción",
-      "protocol": "Proto",
-      "port": "Puerto",
-      "source": "Origen",
-      "anywhere": "Cualquier origen",
-      "chains": "cadenas"
-    },
-    "loadAvg": "Carga Promedio",
-    "swap": "Swap",
-    "architecture": "Arquitectura",
-    "refresh": "Refrescar",
-    "retry": "Reintentar",
-    "customize": "Personalizar diseño",
-    "reset": "Restablecer",
-    "tabLive": "En vivo",
-    "editModeInstructions": "Arrastre las tarjetas para reorganizarlas, arrastre el borde inferior para redimensionarlas, y use el botón de ancho para cambiar el ancho de una tarjeta. Añada o elimine tarjetas a continuación.",
-    "managers": {
-      "services": "Servicios",
-      "processInspector": "Inspector de procesos",
-      "logViewer": "Visor de registros",
-      "cron": "Tareas Cron",
-      "packages": "Paquetes",
-      "ssl": "Certificados SSL",
-      "firewall": "Firewall",
-      "users": "Usuarios y permisos",
-      "healthCheck": "Comprobaciones de estado",
-      "diskBreakdown": "Desglose de disco",
-      "systemdTimers": "Temporizadores",
-      "topMemory": "Top por memoria",
-      "noData": "Sin datos",
-      "sudoHint": "Establezca una contraseña de sudo para este host en el editor del host para habilitar acciones privilegiadas.",
-      "filter": "Filtrar...",
-      "start": "Iniciar",
-      "stop": "Detener",
-      "restart": "Reiniciar",
-      "actionDone": "{{name}} actualizado",
-      "actionFailed": "Acción fallida",
-      "signalSent": "Señal enviada a PID {{pid}}",
-      "killHint": "Clic: terminar (SIGTERM). Clic derecho: forzar cierre (SIGKILL).",
-      "working": "Trabajando...",
-      "update": "Actualizar",
-      "upgradeAll": "Actualizar todo",
-      "allUpToDate": "Todo está actualizado",
-      "save": "Guardar",
-      "command": "Comando",
-      "enabled": "Activado",
-      "cronSaved": "Crontab actualizado",
-      "clients": "Clientes",
-      "dryRun": "Simulación",
-      "renew": "Renovar",
-      "noAcmeClient": "No se encontró ningún cliente ACME (certbot o acme.sh) en este host.",
-      "addInputRule": "Añadir regla INPUT",
-      "firewallWarning": "Los cambios son solo en tiempo de ejecución hasta que se persisten. Tenga cuidado de no quedarse bloqueado fuera.",
-      "ruleApplied": "Regla aplicada",
-      "invalidPort": "Introduzca un puerto válido (1-65535)",
-      "newUsername": "Nuevo nombre de usuario",
-      "addUser": "Añadir",
-      "deleteUser": "Eliminar usuario",
-      "noHealthChecks": "Aún no se han configurado comprobaciones de estado.",
-      "follow": "Seguir",
-      "noLogData": "Sin salida de registro.",
-      "tree": "Árbol",
-      "enableDisable": "Activar / desactivar al arrancar",
-      "grantSudo": "Conceder sudo",
-      "revokeSudo": "Revocar sudo",
-      "sslIssueCert": "Emitir certificado",
-      "sslExpired": "Caducado",
-      "sslInDays": "en {{days}}d",
-      "sslNeedDomain": "Introduzca al menos un dominio",
-      "sslIssued": "Certificado emitido",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (standalone)",
-      "sslHttpWebroot": "HTTP (webroot)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "Proveedor DNS (p. ej. cloudflare)",
-      "sslIssueHint": "Las credenciales del proveedor DNS ya deben estar configuradas en el host.",
-      "sslRevoke": "Revocar certificado",
-      "sslRevoked": "Certificado revocado",
-      "sslRevokeConfirm": "¿Revocar y eliminar el certificado \"{{name}}\"? Esta acción no se puede deshacer.",
-      "healthRun": "Ejecutar",
-      "healthName": "Nombre",
-      "healthTarget": "Host / dirección",
-      "healthAddCheck": "Añadir verificación",
-      "healthSaved": "Verificaciones de estado guardadas",
-      "healthMissingFields": "Cada verificación necesita un nombre y un destino",
-      "logFile": "Archivo",
-      "logUnit": "Unidad",
-      "logCustomPath": "Ruta personalizada bajo /var/log (opcional)",
-      "logGrep": "Filtrar líneas...",
-      "firewallPersist": "Persistir reglas",
-      "firewallPersisted": "Reglas del firewall persistidas",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "WireGuard no está instalado en este host",
-      "wgNoInterfaces": "No hay interfaces WireGuard configuradas",
-      "wgInterfaceUp": "Activar",
-      "wgInterfaceDown": "Desactivar",
-      "wgBringingUp": "Activando {{name}}...",
-      "wgBringingDown": "Desactivando {{name}}...",
-      "wgInterfaceUpDone": "{{name}} está activado",
-      "wgInterfaceDownDone": "{{name}} está desactivado",
-      "wgListenPort": "Puerto",
-      "wgPublicKey": "Clave pública",
-      "wgEndpoint": "Endpoint",
-      "wgAllowedIPs": "IPs permitidas",
-      "wgLastHandshake": "Último handshake",
-      "wgHandshakeNever": "Nunca",
-      "wgTransfer": "Transferencia",
-      "wgNoPeers": "Sin pares"
-    }
-  },
-  "metricsHistory": {
-    "title": "Historial de Métricas",
-    "historySuffix": "Historial",
-    "cpuMemoryDisk": "CPU / Memoria / Disco",
-    "network": "Red",
-    "download": "RX",
-    "upload": "TX",
-    "noData": "No hay datos de historial disponibles para este rango de tiempo.",
-    "custom": "Personalizado",
-    "to": "a",
-    "apply": "Aplicar",
-    "viewHistory": "Ver Historial"
-  },
-  "hosts": {
-    "tabHostMetrics": "Métricas del host",
-    "metricsCollectionLabel": "Recopilación de métricas",
-    "enableMetricsLabel": "Habilitar métricas",
-    "enableMetricsDesc": "Recopilar CPU, RAM, disco y otras métricas de este host.",
-    "useGlobalMetrics": "Usar intervalo global",
-    "useGlobalMetricsDesc": "Sobrescribir con el intervalo de métricas global del servidor.",
-    "metricsIntervalS": "Intervalo de métricas (s)",
-    "metricsIntervalDesc2": "Segundos entre instantáneas de métricas.",
-    "excludedMountsLabel": "Monturas excluidas",
-    "monitoredMountsLabel": "Rutas personalizadas monitorizadas",
-    "monitoredMountsDesc": "Agregue rutas que no estén expuestas como montajes separados, incluidas las rutas de Home Assistant montadas mediante enlace, como /config.",
-    "monitoredMountPathPlaceholder": "Ruta (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Etiqueta (opcional)",
-    "addMonitoredMount": "Agregar ruta",
-    "excludedMountsDesc": "Oculta puntos de montaje o tipos de sistema de archivos específicos (por ejemplo, nfs, cifs) del uso del disco y las alertas para este host.",
-    "excludedMountsPlaceholder": "Ruta de montaje (/mnt/nas) o tipo de sistema de archivos (nfs, cifs)",
-    "excludedMountsEmpty": "No se excluye ningún punto de montaje. Se muestran todos los sistemas de archivos detectados.",
-    "addExcludedMount": "Añadir",
-    "visibleWidgets": "Widgets visibles",
-    "widgetsMovedToHostMetrics": "Ahora las tarjetas se añaden, organizan y redimensionan directamente en la pestaña Métricas del host. Abre Métricas del host para este host y usa Personalizar para elegir qué tarjetas se muestran.",
-    "hostNotFound": "Host no encontrado",
-    "loadingHost": "Cargando host..."
-  },
-  "onboarding": {
-    "feature_metrics": "Métricas y alertas",
-    "feature_metrics_desc": "Realiza un seguimiento del rendimiento de la CPU, la memoria y el disco duro a lo largo del tiempo, y recibe alertas cuando alguno falle."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Retención del historial de métricas",
-    "metricsHistoryRetentionRange": "De 1 a 90 días",
-    "days": "días"
-  },
-  "homepage": {
-    "noData": "Sin datos disponibles",
-    "showCurrentValue": "Mostrar valor actual",
-    "chartMetric": "Métrica",
-    "metricRange": "Rango",
-    "host": "Host",
-    "loading": "Cargando...",
-    "metricCpu": "CPU",
-    "metricDisk": "Disco",
-    "metricHostname": "Nombre de host",
-    "metricKernel": "Kernel",
-    "metricMemory": "Memoria",
-    "metricNetwork": "Red",
-    "metricOs": "SO",
-    "metricProcesses": "Procesos",
-    "metricProcessesRunning": "en ejecución",
-    "metricProcessesTotal": "total",
-    "metricUptime": "Tiempo de actividad",
-    "metricsNotAvailable": "Métricas no disponibles",
-    "noHostSelected": "Ningún host seleccionado",
-    "selectHost": "Seleccionar un host..."
-  },
-  "terminalStatus": {
-    "unavailable": "Estadísticas en directo no disponibles"
-  },
-  "dashboard": {
-    "cpu": "CPU",
-    "ram": "RAM"
-  },
-  "dashboardTab": {
-    "disk": "Disco"
-  },
-  "terminal": {
-    "connected": "Conectado"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilizar métricas de host",
-      "description": "Consulta las métricas del host y utiliza los administradores de host (servicios, paquetes, cortafuegos y más) en los hosts a los que puedas acceder."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Intervalo de métricas (segundos)",
-        "description": "Con qué frecuencia se muestrea el host que se está visualizando, a menos que el host establezca su propio intervalo."
-      },
-      "historyRetentionDays": {
-        "label": "Retención del historial (días)",
-        "description": "¿Cuánto tiempo se conservan las muestras de métricas para los gráficos históricos?"
-      },
-      "enabledForNewHosts": {
-        "label": "Métricas activadas para nuevos anfitriones",
-        "description": "Si los nuevos hosts comienzan con la recopilación de métricas activada."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Unidad de temperatura",
-        "description": "Cómo se muestran las temperaturas en las métricas del host.",
-        "celsius": "Celsius",
-        "fahrenheit": "Fahrenheit"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Recopilar métricas"
-      },
-      "metricsInterval": {
-        "label": "Intervalo de métricas (segundos)"
-      },
-      "enabledWidgets": {
-        "label": "Widgets habilitados"
-      },
-      "excludedMounts": {
-        "label": "Monturas excluidas"
-      },
-      "monitoredMounts": {
-        "label": "Senderos vigilados"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Métricas del host"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/fi_FI.json b/plugins/host-metrics/locales/translated/fi_FI.json
deleted file mode 100644
index 6ca3cbf8e..000000000
--- a/plugins/host-metrics/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Isännän mittarit"
-  },
-  "hostMetrics": {
-    "cpu": "Suoritin",
-    "memory": "Muisti",
-    "disk": "Levy",
-    "network": "Verkko",
-    "uptime": "Käyttöaika",
-    "processes": "Prosessit",
-    "available": "Saatavilla",
-    "free": "Ilmainen",
-    "connecting": "Yhdistetään...",
-    "connectionFailed": "Palvelimeen ei saatu yhteyttä",
-    "naCpus": "Ei saatavilla olevaa suoritinta",
-    "cpuCores_one": "{{count}} Ydin",
-    "cpuCores_other": "{{count}} Ytimet",
-    "cpuUsage": "Suorittimen käyttö",
-    "memoryUsage": "Muistin käyttö",
-    "diskUsage": "Levyn käyttö",
-    "selectFilesystem": "Valitse tiedostojärjestelmä",
-    "temperature": "Lämpötila",
-    "highestTemperature": "Korkein lämpötila",
-    "primaryTemperatureSensor": "Ensisijainen anturi",
-    "gpu": {
-      "title": "Näytönohjain",
-      "noDevice": "NVIDIA-näytönohjainta ei havaittu. Asenna NVIDIA-ajuri (se tarjoaa nvidia-smi-ajurin) nähdäksesi näytönohjaimen tiedot.",
-      "driver": "Kuljettaja {{version}}",
-      "utilization": "Käyttö",
-      "memory": "VRAM-muisti",
-      "temperature": "Lämpötila",
-      "power": "Voima",
-      "fan": "Tuuletin",
-      "processes": "GPU-prosessit",
-      "noProcesses": "Mikään prosessi ei käytä grafiikkasuoritinta"
-    },
-    "failedToFetchHostConfig": "Isännän määritysten nouto epäonnistui",
-    "serverOffline": "Palvelin offline-tilassa",
-    "cannotFetchMetrics": "Mittarien nouto offline-palvelimelta ei onnistu",
-    "totpFailed": "TOTP-vahvistus epäonnistui",
-    "noneAuthNotSupported": "Isäntämittarit eivät tue 'none'-todennustyyppiä.",
-    "noHostSelected": "Ei valittua isäntää",
-    "load": "Ladata",
-    "systemInfo": "Järjestelmätiedot",
-    "hostname": "Isäntänimi",
-    "operatingSystem": "Käyttöjärjestelmä",
-    "kernel": "Ydin",
-    "seconds": "sekuntia",
-    "networkInterfaces": "Verkkoliitännät",
-    "noInterfacesFound": "Verkkoliitäntöjä ei löytynyt",
-    "noProcessesFound": "Ei prosesseja",
-    "processesTotal": "kokonais-",
-    "processesRunning": "juokseminen",
-    "loginStats": "SSH-kirjautumistilastot",
-    "noRecentLoginData": "Ei viimeaikaisia kirjautumistietoja",
-    "ports": {
-      "title": "Kuunteluportit",
-      "protocol": "Protokolla",
-      "port": "Portti",
-      "address": "Osoite",
-      "process": "Käsitellä",
-      "search": "Hakusatamat...",
-      "allProtocols": "Kaikki",
-      "noData": "Ei kuunteluporttien tietoja"
-    },
-    "firewall": {
-      "title": "Palomuuri",
-      "inactive": "Passiivinen",
-      "policy": "Käytäntö",
-      "rules": "säännöt",
-      "noRules": "Ei sääntöjä tässä ketjussa",
-      "noData": "Palomuuritietoja ei ole saatavilla",
-      "action": "Toiminta",
-      "protocol": "Proto",
-      "port": "Portti",
-      "source": "Lähde",
-      "anywhere": "Missä tahansa",
-      "chains": "ketjut"
-    },
-    "loadAvg": "Keskimääräinen lataus",
-    "swap": "Vaihtaa",
-    "architecture": "Arkkitehtuuri",
-    "refresh": "Päivitä",
-    "retry": "Yritä uudelleen",
-    "customize": "Mukauta asettelua",
-    "reset": "Nollaa",
-    "tabLive": "Elää",
-    "editModeInstructions": "Vedä kortteja järjestelläksesi niitä uudelleen, vedä alareunaa muuttaaksesi kokoa ja käytä leveyspainiketta muuttaaksesi kortin väliä. Lisää tai poista kortteja alla.",
-    "managers": {
-      "services": "Palvelut",
-      "processInspector": "Prosessitarkastaja",
-      "logViewer": "Lokikatseluohjelma",
-      "cron": "Cron-työt",
-      "packages": "Paketit",
-      "ssl": "SSL-varmenteet",
-      "firewall": "Palomuuri",
-      "users": "Käyttäjät ja käyttöoikeudet",
-      "healthCheck": "Terveystarkastukset",
-      "diskBreakdown": "Levyn erittely",
-      "systemdTimers": "Ajastimet",
-      "topMemory": "Muistin mukaan huippu",
-      "noData": "Ei tietoja",
-      "sudoHint": "Aseta tälle isännälle sudo-salasana isäntäeditorissa ottaaksesi käyttöön etuoikeutetut toiminnot.",
-      "filter": "Suodattaa...",
-      "start": "Aloita",
-      "stop": "Stop",
-      "restart": "Käynnistä uudelleen",
-      "actionDone": "{{name}} päivitetty",
-      "actionFailed": "Toiminto epäonnistui",
-      "signalSent": "Signaali lähetetään PID:lle {{pid}}",
-      "killHint": "Napsauta: lopeta (SIGTERM). Napsauta hiiren kakkospainikkeella: pakota lopettaminen (SIGKILL).",
-      "working": "Työskentely...",
-      "update": "Päivittää",
-      "upgradeAll": "Päivitä kaikki",
-      "allUpToDate": "Kaikki on ajan tasalla",
-      "save": "Tallentaa",
-      "command": "Komento",
-      "enabled": "Käytössä",
-      "cronSaved": "Crontab päivitetty",
-      "clients": "Asiakkaat",
-      "dryRun": "Kuiva ajo",
-      "renew": "Uudista",
-      "noAcmeClient": "Tältä isännältä ei löytynyt ACME-asiakasohjelmaa (certbot tai acme.sh).",
-      "addInputRule": "Lisää SYÖTTÖSääntö",
-      "firewallWarning": "Muutokset ovat vain ajonaikaisia, kunnes ne pysyvät voimassa. Varo lukitsemasta itseäsi ulos.",
-      "ruleApplied": "Sääntö sovellettu",
-      "invalidPort": "Anna kelvollinen portti (1-65535)",
-      "newUsername": "Uusi käyttäjätunnus",
-      "addUser": "Lisätä",
-      "deleteUser": "Poista käyttäjä",
-      "noHealthChecks": "Ei vielä määritettyjä kuntotarkastuksia.",
-      "follow": "Seuraa",
-      "noLogData": "Ei lokitulostetta.",
-      "tree": "Puu",
-      "enableDisable": "Ota käyttöön / poista käytöstä käynnistyksen yhteydessä",
-      "grantSudo": "Myönnä sudo",
-      "revokeSudo": "Peruuta sudo",
-      "sslIssueCert": "Myöntötodistus",
-      "sslExpired": "Vanhentunut",
-      "sslInDays": "{{days}}d:ssä",
-      "sslNeedDomain": "Anna vähintään yksi verkkotunnus",
-      "sslIssued": "Todistus myönnetty",
-      "sslDomainsPlaceholder": "esimerkki.com, www.esimerkki.com",
-      "sslHttpStandalone": "HTTP (erillinen)",
-      "sslHttpWebroot": "HTTP (verkkojuuri)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "DNS-palveluntarjoaja (esim. cloudflare)",
-      "sslIssueHint": "DNS-palveluntarjoajan tunnistetietojen on oltava jo määritettyinä isännälle.",
-      "sslRevoke": "Peruuta varmenne",
-      "sslRevoked": "Varmenne peruutettu",
-      "sslRevokeConfirm": "Peruuttaa ja poistaa varmenne \"{{name}}\"? Tätä ei voi perua.",
-      "healthRun": "Juokse",
-      "healthName": "Nimi",
-      "healthTarget": "Isäntä / osoite",
-      "healthAddCheck": "Lisää shekki",
-      "healthSaved": "Terveystarkastukset tallennettu",
-      "healthMissingFields": "Jokaisella tarkastuksella on oltava nimi ja kohde",
-      "logFile": "Tiedosto",
-      "logUnit": "Yksikkö",
-      "logCustomPath": "Mukautettu polku /var/log-hakemistossa (valinnainen)",
-      "logGrep": "Suodata viivat...",
-      "firewallPersist": "Säilytä säännöt",
-      "firewallPersisted": "Palomuurisäännöt säilyivät",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "WireGuardia ei ole asennettu tälle koneelle",
-      "wgNoInterfaces": "Ei WireGuard-liitäntöjä määritettynä",
-      "wgInterfaceUp": "Tuo esiin",
-      "wgInterfaceDown": "Alentaa",
-      "wgBringingUp": "Tuodaan {{name}} esiin...",
-      "wgBringingDown": "Lasketaan {{name}} alas...",
-      "wgInterfaceUpDone": "{{name}} on ylhäällä",
-      "wgInterfaceDownDone": "{{name}} on alhaalla",
-      "wgListenPort": "Portti",
-      "wgPublicKey": "Julkinen avain",
-      "wgEndpoint": "Päätepiste",
-      "wgAllowedIPs": "Sallitut IP-osoitteet",
-      "wgLastHandshake": "Viimeinen kädenpuristus",
-      "wgHandshakeNever": "Ei koskaan",
-      "wgTransfer": "Siirtää",
-      "wgNoPeers": "Ei vertaisia"
-    }
-  },
-  "metricsHistory": {
-    "title": "Mittarihistoria",
-    "historySuffix": "Historia",
-    "cpuMemoryDisk": "CPU / Muisti / Levy",
-    "network": "Verkko",
-    "download": "Vastaanottaja",
-    "upload": "Teksas",
-    "noData": "Tältä aikaväliltä ei ole saatavilla historiatietoja.",
-    "custom": "Mukautettu",
-    "to": "että",
-    "apply": "Käytä",
-    "viewHistory": "Näytä historia"
-  },
-  "hosts": {
-    "tabHostMetrics": "Isännän mittarit",
-    "metricsCollectionLabel": "Mittarikokoelma",
-    "enableMetricsLabel": "Ota mittarit käyttöön",
-    "enableMetricsDesc": "Kerää prosessorin, RAMin, levyn ja muita mittareita tältä isännältä",
-    "useGlobalMetrics": "Käytä globaalia intervallia",
-    "useGlobalMetricsDesc": "Ohita palvelimen laajuisella mittarivälillä",
-    "metricsIntervalS": "Mittariväli (s)",
-    "metricsIntervalDesc2": "Sekunteja mittareiden tilannevedosten välillä",
-    "excludedMountsLabel": "Poissuljetut kiinnikkeet",
-    "monitoredMountsLabel": "Mukautetut valvotut polut",
-    "monitoredMountsDesc": "Lisää polut, joita ei näytetä erillisinä liitoskohtina, mukaan lukien sidotut Home Assistant -polut, kuten /config.",
-    "monitoredMountPathPlaceholder": "Polku (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Tarra (valinnainen)",
-    "addMonitoredMount": "Lisää polku",
-    "excludedMountsDesc": "Piilota tietyt liitoskohdat tai tiedostojärjestelmätyypit (esim. nfs, cifs) levyn käytöstä ja hälytyksistä tälle isännälle.",
-    "excludedMountsPlaceholder": "Liitospolku (/mnt/nas) tai tiedostojärjestelmän tyyppi (nfs, cifs)",
-    "excludedMountsEmpty": "Ei poissuljettuja liitäntöjä. Kaikki havaitut tiedostojärjestelmät näytetään.",
-    "addExcludedMount": "Lisätä",
-    "visibleWidgets": "Näkyvät widgetit",
-    "widgetsMovedToHostMetrics": "Kortteja lisätään, järjestetään ja niiden kokoa muutetaan nyt suoraan Isännän mittarit -välilehdellä. Avaa tämän isännän Isännän mittarit ja valitse näytettävät kortit Mukauta-toiminnolla.",
-    "hostNotFound": "Isäntää ei löydy",
-    "loadingHost": "Ladataan isäntää..."
-  },
-  "onboarding": {
-    "feature_metrics": "Mittarit ja hälytykset",
-    "feature_metrics_desc": "Seuraa suorittimen, muistin ja levyn toimintaa ajan kuluessa ja saat ilmoituksen, kun ne vikaantuvat."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Mittarihistorian säilytys",
-    "metricsHistoryRetentionRange": "1–90 päivää",
-    "days": "päivää"
-  },
-  "homepage": {
-    "noData": "Ei tietoja saatavilla",
-    "showCurrentValue": "Näytä nykyinen arvo",
-    "chartMetric": "Metrinen",
-    "metricRange": "Alue",
-    "host": "Isäntä",
-    "loading": "Ladataan...",
-    "metricCpu": "Suoritin",
-    "metricDisk": "Levy",
-    "metricHostname": "Isäntänimi",
-    "metricKernel": "Ydin",
-    "metricMemory": "Muisti",
-    "metricNetwork": "Verkko",
-    "metricOs": "Käyttöjärjestelmä",
-    "metricProcesses": "Prosessit",
-    "metricProcessesRunning": "juokseminen",
-    "metricProcessesTotal": "kokonais-",
-    "metricUptime": "Käyttöaika",
-    "metricsNotAvailable": "Mittareita ei ole saatavilla",
-    "noHostSelected": "Ei valittua isäntää",
-    "selectHost": "Valitse isäntä..."
-  },
-  "terminalStatus": {
-    "unavailable": "Live-tilastot eivät ole saatavilla"
-  },
-  "dashboard": {
-    "cpu": "Suoritin",
-    "ram": "RAM-muistia"
-  },
-  "dashboardTab": {
-    "disk": "Levy"
-  },
-  "terminal": {
-    "connected": "Yhdistetty"
-  },
-  "permissions": {
-    "use": {
-      "title": "Käytä isäntämittareita",
-      "description": "Tarkastele isäntätietokoneen mittareita ja käytä isäntätietokoneiden hallintaohjelmia (palvelut, paketit, palomuuri ja paljon muuta) tavoitettavilla isännillä."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Mittariväli (sekunteina)",
-        "description": "Kuinka usein tarkasteltavasta isännästä otetaan näytteitä, ellei isäntä aseta omaa aikaväliä."
-      },
-      "historyRetentionDays": {
-        "label": "Historian säilytys (päivää)",
-        "description": "Kuinka kauan historiakaavioiden mittareiden näytteitä säilytetään."
-      },
-      "enabledForNewHosts": {
-        "label": "Mittarit käytössä uusille isännille",
-        "description": "Aloittavatko uudet isännät mittaustietojen kerääminen käytössä."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Lämpötilayksikkö",
-        "description": "Miten lämpötilat näytetään isäntämetriikoissa.",
-        "celsius": "Celsius",
-        "fahrenheit": "Fahrenheit"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Kerää mittareita"
-      },
-      "metricsInterval": {
-        "label": "Mittariväli (sekunteina)"
-      },
-      "enabledWidgets": {
-        "label": "Käytössä olevat widgetit"
-      },
-      "excludedMounts": {
-        "label": "Poissuljetut kiinnikkeet"
-      },
-      "monitoredMounts": {
-        "label": "Valvotut polut"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Isännän mittarit"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/fr_FR.json b/plugins/host-metrics/locales/translated/fr_FR.json
deleted file mode 100644
index f74e658b9..000000000
--- a/plugins/host-metrics/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Métriques de l'hôte"
-  },
-  "hostMetrics": {
-    "cpu": "CPU",
-    "memory": "Mémoire",
-    "disk": "Disque",
-    "network": "Réseau",
-    "uptime": "Uptime",
-    "processes": "Processus",
-    "available": "Disponible",
-    "free": "Libre",
-    "connecting": "Connexion en cours…",
-    "connectionFailed": "Échec de la connexion au serveur",
-    "naCpus": "CPU(s) N/A",
-    "cpuCores_one": "{{count}} cœur",
-    "cpuCores_other": "{{count}} cœurs",
-    "cpuUsage": "Utilisation CPU",
-    "memoryUsage": "Utilisation mémoire",
-    "diskUsage": "Utilisation disque",
-    "selectFilesystem": "Sélectionner le système de fichiers",
-    "temperature": "Température",
-    "highestTemperature": "Température maximale",
-    "primaryTemperatureSensor": "Capteur principal",
-    "gpu": {
-      "title": "GPU",
-      "noDevice": "Aucune carte graphique NVIDIA n'a été détectée. Installez le pilote NVIDIA (qui fournit nvidia-smi) pour consulter les métriques du GPU.",
-      "driver": "Conducteur {{version}}",
-      "utilization": "Utilisation",
-      "memory": "VRAM",
-      "temperature": "Temp",
-      "power": "Pouvoir",
-      "fan": "Ventilateur",
-      "processes": "Processus GPU",
-      "noProcesses": "Aucun processus n'utilise le GPU."
-    },
-    "failedToFetchHostConfig": "Échec de la récupération de la configuration de l'hôte",
-    "serverOffline": "Serveur hors ligne",
-    "cannotFetchMetrics": "Impossible de récupérer les métriques du serveur hors ligne",
-    "totpFailed": "Échec de la vérification TOTP",
-    "noneAuthNotSupported": "Les métriques de l'hôte ne prennent pas en charge le type d'authentification 'none'.",
-    "noHostSelected": "Aucun hôte sélectionné",
-    "load": "Charge",
-    "systemInfo": "Informations système",
-    "hostname": "Nom d'hôte",
-    "operatingSystem": "Système d'exploitation",
-    "kernel": "Noyau",
-    "seconds": "secondes",
-    "networkInterfaces": "Interfaces réseau",
-    "noInterfacesFound": "Aucune interface réseau trouvée",
-    "noProcessesFound": "Aucun processus trouvé",
-    "processesTotal": "total",
-    "processesRunning": "en cours",
-    "loginStats": "Statistiques de connexion SSH",
-    "noRecentLoginData": "Aucune donnée de connexion récente",
-    "ports": {
-      "title": "Ports en écoute",
-      "protocol": "Protocole",
-      "port": "Port",
-      "address": "Adresse",
-      "process": "Processus",
-      "search": "Rechercher des ports...",
-      "allProtocols": "Tous",
-      "noData": "Aucune donnée de ports en écoute"
-    },
-    "firewall": {
-      "title": "Pare-feu",
-      "inactive": "Inactif",
-      "policy": "Politique",
-      "rules": "règles",
-      "noRules": "Aucune règle dans cette chaîne",
-      "noData": "Aucune donnée de pare-feu disponible",
-      "action": "Action",
-      "protocol": "Proto",
-      "port": "Port",
-      "source": "Source",
-      "anywhere": "Partout",
-      "chains": "chaînes"
-    },
-    "loadAvg": "Charge moyenne",
-    "swap": "Swap",
-    "architecture": "Architecture",
-    "refresh": "Actualiser",
-    "retry": "Réessayer",
-    "customize": "Personnaliser la disposition",
-    "reset": "Réinitialiser",
-    "tabLive": "En direct",
-    "editModeInstructions": "Faites glisser les cartes pour les réorganiser, faites glisser le bord inférieur pour les redimensionner, et utilisez le bouton de largeur pour modifier l'étendue d'une carte. Ajoutez ou retirez des cartes ci-dessous.",
-    "managers": {
-      "services": "Services",
-      "processInspector": "Inspecteur de processus",
-      "logViewer": "Visualiseur de logs",
-      "cron": "Tâches Cron",
-      "packages": "Paquets",
-      "ssl": "Certificats SSL",
-      "firewall": "Pare-feu",
-      "users": "Utilisateurs et permissions",
-      "healthCheck": "Contrôles de santé",
-      "diskBreakdown": "Ventilation du disque",
-      "systemdTimers": "Timers",
-      "topMemory": "Top mémoire",
-      "noData": "Aucune donnée",
-      "sudoHint": "Définissez un mot de passe sudo pour cet hôte dans l'éditeur d'hôte pour activer les actions privilégiées.",
-      "filter": "Filtrer...",
-      "start": "Démarrer",
-      "stop": "Arrêter",
-      "restart": "Redémarrer",
-      "actionDone": "{{name}} mis à jour",
-      "actionFailed": "Action échouée",
-      "signalSent": "Signal envoyé au PID {{pid}}",
-      "killHint": "Clic : terminer (SIGTERM). Clic droit : forcer l'arrêt (SIGKILL).",
-      "working": "En cours...",
-      "update": "Mettre à jour",
-      "upgradeAll": "Tout mettre à niveau",
-      "allUpToDate": "Tout est à jour",
-      "save": "Enregistrer",
-      "command": "Commande",
-      "enabled": "Activé",
-      "cronSaved": "Crontab mis à jour",
-      "clients": "Clients",
-      "dryRun": "Simulation",
-      "renew": "Renouveler",
-      "noAcmeClient": "Aucun client ACME (certbot ou acme.sh) trouvé sur cet hôte.",
-      "addInputRule": "Ajouter une règle INPUT",
-      "firewallWarning": "Les modifications sont appliquées uniquement en mémoire jusqu'à leur persistance. Veillez à ne pas vous bloquer l'accès.",
-      "ruleApplied": "Règle appliquée",
-      "invalidPort": "Saisissez un port valide (1-65535)",
-      "newUsername": "Nouveau nom d'utilisateur",
-      "addUser": "Ajouter",
-      "deleteUser": "Supprimer l'utilisateur",
-      "noHealthChecks": "Aucune vérification d'état configurée pour le moment.",
-      "follow": "Suivre",
-      "noLogData": "Aucun journal disponible.",
-      "tree": "Arborescence",
-      "enableDisable": "Activer / désactiver au démarrage",
-      "grantSudo": "Accorder sudo",
-      "revokeSudo": "Révoquer sudo",
-      "sslIssueCert": "Émettre le certificat",
-      "sslExpired": "Expiré",
-      "sslInDays": "dans {{days}} j",
-      "sslNeedDomain": "Saisissez au moins un domaine",
-      "sslIssued": "Certificat émis",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (autonome)",
-      "sslHttpWebroot": "HTTP (webroot)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "Fournisseur DNS (ex. cloudflare)",
-      "sslIssueHint": "Les identifiants du fournisseur DNS doivent déjà être configurés sur l’hôte.",
-      "sslRevoke": "Révoquer le certificat",
-      "sslRevoked": "Certificat révoqué",
-      "sslRevokeConfirm": "Révoquer et supprimer le certificat « {{name}} » ? Cette action est irréversible.",
-      "healthRun": "Exécuter",
-      "healthName": "Nom",
-      "healthTarget": "Hôte / adresse",
-      "healthAddCheck": "Ajouter une vérification",
-      "healthSaved": "Vérifications de santé enregistrées",
-      "healthMissingFields": "Chaque vérification nécessite un nom et une cible",
-      "logFile": "Fichier",
-      "logUnit": "Unité",
-      "logCustomPath": "Chemin personnalisé sous /var/log (optionnel)",
-      "logGrep": "Filtrer les lignes...",
-      "firewallPersist": "Persister les règles",
-      "firewallPersisted": "Règles du pare-feu rendues persistantes",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "WireGuard n’est pas installé sur cet hôte",
-      "wgNoInterfaces": "Aucune interface WireGuard configurée",
-      "wgInterfaceUp": "Activer",
-      "wgInterfaceDown": "Désactiver",
-      "wgBringingUp": "Activation de {{name}}...",
-      "wgBringingDown": "Désactivation de {{name}}...",
-      "wgInterfaceUpDone": "{{name}} est activé",
-      "wgInterfaceDownDone": "{{name}} est désactivé",
-      "wgListenPort": "Port",
-      "wgPublicKey": "Clé publique",
-      "wgEndpoint": "Point de terminaison",
-      "wgAllowedIPs": "IP autorisées",
-      "wgLastHandshake": "Dernière poignée de main",
-      "wgHandshakeNever": "Jamais",
-      "wgTransfer": "Transfert",
-      "wgNoPeers": "Aucun pair"
-    }
-  },
-  "metricsHistory": {
-    "title": "Historique des métriques",
-    "historySuffix": "Historique",
-    "cpuMemoryDisk": "CPU / Mémoire / Disque",
-    "network": "Réseau",
-    "download": "RX",
-    "upload": "TX",
-    "noData": "Aucune donnée d'historique disponible pour cette plage de temps.",
-    "custom": "Personnalisé",
-    "to": "à",
-    "apply": "Appliquer",
-    "viewHistory": "Voir l'historique"
-  },
-  "hosts": {
-    "tabHostMetrics": "Métriques de l'hôte",
-    "metricsCollectionLabel": "Collecte de métriques",
-    "enableMetricsLabel": "Activer les métriques",
-    "enableMetricsDesc": "Collecter les métriques CPU, RAM, disque et autres de cet hôte",
-    "useGlobalMetrics": "Utiliser l'intervalle global",
-    "useGlobalMetricsDesc": "Remplacer par l'intervalle de métriques défini à l'échelle du serveur",
-    "metricsIntervalS": "Intervalle de métriques (s)",
-    "metricsIntervalDesc2": "Secondes entre les instantanés de métriques",
-    "excludedMountsLabel": "Supports exclus",
-    "monitoredMountsLabel": "Chemins surveillés personnalisés",
-    "monitoredMountsDesc": "Ajoutez les chemins qui ne sont pas exposés en tant que points de montage séparés, y compris les chemins Home Assistant montés par liaison tels que /config.",
-    "monitoredMountPathPlaceholder": "Chemin (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Libellé (facultatif)",
-    "addMonitoredMount": "Ajouter un chemin",
-    "excludedMountsDesc": "Masquer certains points de montage ou types de systèmes de fichiers (par exemple nfs, cifs) des données d'utilisation du disque et des alertes pour cet hôte.",
-    "excludedMountsPlaceholder": "Chemin de montage (/mnt/nas) ou type de système de fichiers (nfs, cifs)",
-    "excludedMountsEmpty": "Aucun point de montage n'est exclu. Tous les systèmes de fichiers détectés sont affichés.",
-    "addExcludedMount": "Ajouter",
-    "visibleWidgets": "Widgets visibles",
-    "widgetsMovedToHostMetrics": "Les cartes sont désormais ajoutées, organisées et redimensionnées directement dans l'onglet Métriques de l'hôte. Ouvrez les métriques de cet hôte et utilisez Personnaliser pour choisir les cartes à afficher.",
-    "hostNotFound": "Hôte introuvable",
-    "loadingHost": "Chargement de l'hôte..."
-  },
-  "onboarding": {
-    "feature_metrics": "Métriques et alertes",
-    "feature_metrics_desc": "Surveillez l'évolution du processeur, de la mémoire et du disque au fil du temps et recevez une alerte en cas de défaillance."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Rétention de l'historique des métriques",
-    "metricsHistoryRetentionRange": "1 à 90 jours",
-    "days": "jours"
-  },
-  "homepage": {
-    "noData": "Aucune donnée disponible",
-    "showCurrentValue": "Afficher la valeur actuelle",
-    "chartMetric": "Métrique",
-    "metricRange": "Plage",
-    "host": "Hôte",
-    "loading": "Chargement…",
-    "metricCpu": "CPU",
-    "metricDisk": "Disque",
-    "metricHostname": "Nom d’hôte",
-    "metricKernel": "Noyau",
-    "metricMemory": "Mémoire",
-    "metricNetwork": "Réseau",
-    "metricOs": "OS",
-    "metricProcesses": "Processus",
-    "metricProcessesRunning": "en cours",
-    "metricProcessesTotal": "total",
-    "metricUptime": "Uptime",
-    "metricsNotAvailable": "Métriques non disponibles",
-    "noHostSelected": "Aucun hôte sélectionné",
-    "selectHost": "Sélectionner un hôte…"
-  },
-  "terminalStatus": {
-    "unavailable": "Statistiques en direct indisponibles"
-  },
-  "dashboard": {
-    "cpu": "CPU",
-    "ram": "RAM"
-  },
-  "dashboardTab": {
-    "disk": "Disque"
-  },
-  "terminal": {
-    "connected": "Connecté"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utiliser les métriques de l'hôte",
-      "description": "Consultez les indicateurs de performance des hôtes et utilisez les gestionnaires d'hôtes (services, paquets, pare-feu, etc.) sur les hôtes auxquels vous pouvez accéder."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Intervalle des métriques (secondes)",
-        "description": "La fréquence d'échantillonnage d'un hôte visualisé est déterminée, sauf si l'hôte définit son propre intervalle."
-      },
-      "historyRetentionDays": {
-        "label": "Conservation de l'historique (jours)",
-        "description": "Durée de conservation des échantillons de métriques pour les graphiques d'historique."
-      },
-      "enabledForNewHosts": {
-        "label": "Indicateurs activés pour les nouveaux hôtes",
-        "description": "Indique si les nouveaux hôtes démarrent avec la collecte de métriques activée."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Unité de température",
-        "description": "Affichage des températures dans Host Metrics.",
-        "celsius": "Celsius",
-        "fahrenheit": "Fahrenheit"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Collecte de données"
-      },
-      "metricsInterval": {
-        "label": "Intervalle des métriques (secondes)"
-      },
-      "enabledWidgets": {
-        "label": "Widgets activés"
-      },
-      "excludedMounts": {
-        "label": "Supports exclus"
-      },
-      "monitoredMounts": {
-        "label": "Chemins surveillés"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Métriques de l’hôte"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/he_IL.json b/plugins/host-metrics/locales/translated/he_IL.json
deleted file mode 100644
index 8ce6ff126..000000000
--- a/plugins/host-metrics/locales/translated/he_IL.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "מדדי מארח"
-  },
-  "hostMetrics": {
-    "cpu": "מעבד",
-    "memory": "זֵכֶר",
-    "disk": "דִיסק",
-    "network": "רֶשֶׁת",
-    "uptime": "זמן פעולה",
-    "processes": "תהליכים",
-    "available": "זָמִין",
-    "free": "לְשַׁחְרֵר",
-    "connecting": "מְקַשֵׁר...",
-    "connectionFailed": "נכשלה ההתחברות לשרת",
-    "naCpus": "מעבדים לא רלוונטיים",
-    "cpuCores_one": "{{count}} ליבה",
-    "cpuCores_other": "{{count}} ליבות",
-    "cpuUsage": "שימוש במעבד",
-    "memoryUsage": "שימוש בזיכרון",
-    "diskUsage": "שימוש בדיסק",
-    "selectFilesystem": "בחירת מערכת קבצים",
-    "temperature": "טֶמפֶּרָטוּרָה",
-    "highestTemperature": "הטמפרטורה הגבוהה ביותר",
-    "primaryTemperatureSensor": "חיישן ראשי",
-    "gpu": {
-      "title": "כרטיס מסך",
-      "noDevice": "לא זוהה כרטיס מסך של NVIDIA. התקן את מנהל ההתקן של NVIDIA (הוא מספק nvidia-smi) כדי לראות את מדדי הכרטיס המסך.",
-      "driver": "נהג {{version}}",
-      "utilization": "ניצול",
-      "memory": "זיכרון RAM",
-      "temperature": "טמפ'",
-      "power": "כּוֹחַ",
-      "fan": "מְנִיפָה",
-      "processes": "תהליכי GPU",
-      "noProcesses": "אף תהליכים לא משתמשים ב-GPU"
-    },
-    "failedToFetchHostConfig": "נכשל באחזור תצורת המארח",
-    "serverOffline": "שרת לא מקוון",
-    "cannotFetchMetrics": "לא ניתן לאחזר מדדים משרת לא מקוון",
-    "totpFailed": "אימות TOTP נכשל",
-    "noneAuthNotSupported": "Host Metrics אינו תומך בסוג אימות 'ללא'.",
-    "noHostSelected": "לא נבחר מארח",
-    "load": "לִטעוֹן",
-    "systemInfo": "מידע מערכת",
-    "hostname": "שם מארח",
-    "operatingSystem": "מַעֲרֶכֶת הַפעָלָה",
-    "kernel": "גַרעִין",
-    "seconds": "שניות",
-    "networkInterfaces": "ממשקי רשת",
-    "noInterfacesFound": "לא נמצאו ממשקי רשת",
-    "noProcessesFound": "לא נמצאו תהליכים",
-    "processesTotal": "סַך הַכֹּל",
-    "processesRunning": "רִיצָה",
-    "loginStats": "סטטיסטיקות כניסה ל-SSH",
-    "noRecentLoginData": "אין נתוני התחברות אחרונים",
-    "ports": {
-      "title": "יציאות האזנה",
-      "protocol": "פּרוֹטוֹקוֹל",
-      "port": "נָמָל",
-      "address": "כְּתוֹבֶת",
-      "process": "תַהֲלִיך",
-      "search": "חיפוש פורטים...",
-      "allProtocols": "כֹּל",
-      "noData": "אין נתוני יציאות האזנה"
-    },
-    "firewall": {
-      "title": "חומת אש",
-      "inactive": "לֹא פָּעִיל",
-      "policy": "מְדִינִיוּת",
-      "rules": "כללים",
-      "noRules": "אין חוקים בשרשרת הזו",
-      "noData": "אין נתוני חומת אש זמינים",
-      "action": "פְּעוּלָה",
-      "protocol": "פרוטו",
-      "port": "נָמָל",
-      "source": "מָקוֹר",
-      "anywhere": "בְּכָל מָקוֹם",
-      "chains": "שרשראות"
-    },
-    "loadAvg": "טען ממוצע",
-    "swap": "לְהַחלִיף",
-    "architecture": "אַדְרִיכָלוּת",
-    "refresh": "לְרַעֲנֵן",
-    "retry": "נסה שוב",
-    "customize": "התאמה אישית של הפריסה",
-    "reset": "אִתחוּל",
-    "tabLive": "לִחיוֹת",
-    "editModeInstructions": "גרור כרטיסים כדי לסדר מחדש, גרור את הקצה התחתון כדי לשנות את הגודל, והשתמש בלחצן הרוחב כדי לשנות את טווח הכרטיס. הוסף או הסר כרטיסים למטה.",
-    "managers": {
-      "services": "שירותים",
-      "processInspector": "מפקח תהליכים",
-      "logViewer": "מציג יומנים",
-      "cron": "עבודות קרון",
-      "packages": "חבילות",
-      "ssl": "תעודות SSL",
-      "firewall": "חומת אש",
-      "users": "משתמשים והרשאות",
-      "healthCheck": "בדיקות בריאות",
-      "diskBreakdown": "פירוט דיסק",
-      "systemdTimers": "טיימרים",
-      "topMemory": "מובילים לפי זיכרון",
-      "noData": "אין נתונים",
-      "sudoHint": "הגדר סיסמת sudo עבור מארח זה בעורך המארחים כדי לאפשר פעולות הרשאות.",
-      "filter": "לְסַנֵן...",
-      "start": "הַתחָלָה",
-      "stop": "לְהַפְסִיק",
-      "restart": "הפעלה מחדש",
-      "actionDone": "{{name}} updated",
-      "actionFailed": "הפעולה נכשלה",
-      "signalSent": "אות שנשלח ל-PID {{pid}}",
-      "killHint": "לחיצה: סיום (SIGTERM). לחיצה ימנית: כיבוי בכוח (SIGKILL).",
-      "working": "עובד...",
-      "update": "לְעַדְכֵּן",
-      "upgradeAll": "שדרגו הכל",
-      "allUpToDate": "הכל מעודכן",
-      "save": "לְהַצִיל",
-      "command": "פְּקוּדָה",
-      "enabled": "מופעל",
-      "cronSaved": "קרונטאב עודכן",
-      "clients": "לקוחות",
-      "dryRun": "ריצה יבשה",
-      "renew": "לְחַדֵשׁ",
-      "noAcmeClient": "לא נמצא לקוח ACME ‏(certbot או acme.sh) בשרת זה.",
-      "addInputRule": "הוסף כלל INPUT",
-      "firewallWarning": "שינויים הם בזמן ריצה בלבד עד שהם מתמשכים. היזהרו לא לנעול את עצמכם מחוץ למערכת.",
-      "ruleApplied": "כלל שהוחל",
-      "invalidPort": "הזן פורט תקין (1-65535)",
-      "newUsername": "שם משתמש חדש",
-      "addUser": "לְהוֹסִיף",
-      "deleteUser": "מחיקת משתמש",
-      "noHealthChecks": "עדיין לא הוגדרו בדיקות תקינות.",
-      "follow": "לַעֲקוֹב",
-      "noLogData": "אין פלט יומן.",
-      "tree": "עֵץ",
-      "enableDisable": "הפעלה/השבתה בעת האתחול",
-      "grantSudo": "גרנט סודו",
-      "revokeSudo": "בטל את הסודו",
-      "sslIssueCert": "הנפקת תעודה",
-      "sslExpired": "פג תוקף",
-      "sslInDays": "ב- {{days}}ד'",
-      "sslNeedDomain": "הזן לפחות דומיין אחד",
-      "sslIssued": "תעודה שהונפקה",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (עצמאי)",
-      "sslHttpWebroot": "HTTP (שורש רשת)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "ספק DNS (למשל cloudflare)",
-      "sslIssueHint": "יש להגדיר את פרטי הגישה של ספק ה-DNS כבר במארח.",
-      "sslRevoke": "בטל את האישור",
-      "sslRevoked": "התעודה בוטלה",
-      "sslRevokeConfirm": "לבטל ולהסיר את האישור \"{{name}}\"? לא ניתן לבטל פעולה זו.",
-      "healthRun": "לָרוּץ",
-      "healthName": "שֵׁם",
-      "healthTarget": "מארח / כתובת",
-      "healthAddCheck": "הוסף צ'ק",
-      "healthSaved": "בדיקות הבריאות נשמרו",
-      "healthMissingFields": "כל צ'ק צריך שם ומטרה",
-      "logFile": "קוֹבֶץ",
-      "logUnit": "יְחִידָה",
-      "logCustomPath": "נתיב מותאם אישית תחת /var/log (אופציונלי)",
-      "logGrep": "קווי סינון...",
-      "firewallPersist": "כללים קבועים",
-      "firewallPersisted": "כללי חומת האש נשמרו",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "WireGuard אינו מותקן על מחשב זה",
-      "wgNoInterfaces": "לא הוגדרו ממשקי WireGuard",
-      "wgInterfaceUp": "לְהַעֲלוֹת",
-      "wgInterfaceDown": "לְהַפִּיל",
-      "wgBringingUp": "מעלה {{name}}...",
-      "wgBringingDown": "מוריד את {{name}}...",
-      "wgInterfaceUpDone": "{{name}} פעיל",
-      "wgInterfaceDownDone": "{{name}} מושבת",
-      "wgListenPort": "נָמָל",
-      "wgPublicKey": "מפתח ציבורי",
-      "wgEndpoint": "נקודת קצה",
-      "wgAllowedIPs": "כתובות IP מותרות",
-      "wgLastHandshake": "לחיצת יד אחרונה",
-      "wgHandshakeNever": "לְעוֹלָם לֹא",
-      "wgTransfer": "לְהַעֲבִיר",
-      "wgNoPeers": "אין עמיתים"
-    }
-  },
-  "metricsHistory": {
-    "title": "היסטוריית מדדים",
-    "historySuffix": "הִיסטוֹרִיָה",
-    "cpuMemoryDisk": "מעבד / זיכרון / דיסק",
-    "network": "רֶשֶׁת",
-    "download": "מרשם",
-    "upload": "טקסס",
-    "noData": "אין נתוני היסטוריה זמינים עבור טווח זמן זה.",
-    "custom": "מִנְהָג",
-    "to": "אֶל",
-    "apply": "לִפְנוֹת",
-    "viewHistory": "הצג היסטוריה"
-  },
-  "hosts": {
-    "tabHostMetrics": "מדדי מארח",
-    "metricsCollectionLabel": "אוסף מדדים",
-    "enableMetricsLabel": "הפעל מדדים",
-    "enableMetricsDesc": "איסוף מדדים של מעבד, זיכרון RAM, דיסק ומדדים אחרים ממארח זה",
-    "useGlobalMetrics": "השתמש במרווח גלובלי",
-    "useGlobalMetricsDesc": "עקיפה עם מרווח המדדים הכולל של השרת",
-    "metricsIntervalS": "מרווח מדדים (ים)",
-    "metricsIntervalDesc2": "שניות בין תמונות מצב של מדדים",
-    "excludedMountsLabel": "תושבות לא כלולות",
-    "monitoredMountsLabel": "נתיבים מנוטרים בהתאמה אישית",
-    "monitoredMountsDesc": "הוסף נתיבים שאינם חשופים כחיבורים נפרדים, כולל נתיבי Home Assistant המותקנים באמצעות binding כגון /config.",
-    "monitoredMountPathPlaceholder": "נתיב (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "תווית (אופציונלי)",
-    "addMonitoredMount": "הוסף נתיב",
-    "excludedMountsDesc": "הסתר נקודות הרכבה או סוגי מערכת קבצים ספציפיים (למשל nfs, cifs) משימוש בדיסק והתראות עבור מארח זה.",
-    "excludedMountsPlaceholder": "נתיב הרכבה (/mnt/nas) או סוג מערכת קבצים (nfs, cifs)",
-    "excludedMountsEmpty": "לא נכללו רכיבי טעינה. כל מערכות הקבצים שזוהו מוצגות.",
-    "addExcludedMount": "לְהוֹסִיף",
-    "visibleWidgets": "ווידג'טים גלויים",
-    "widgetsMovedToHostMetrics": "כעת ניתן להוסיף, לסידור ולשנות את גודל הכרטיסים ישירות בכרטיסייה 'מדדי מארח'. פתחו את 'מדדי מארח' עבור מארח זה והשתמשו באפשרות 'התאמה אישית' כדי לבחור אילו כרטיסים יוצגו.",
-    "hostNotFound": "המארח לא נמצא",
-    "loadingHost": "טוען מארח..."
-  },
-  "onboarding": {
-    "feature_metrics": "מדדים והתראות",
-    "feature_metrics_desc": "עקוב אחר המעבד, הזיכרון והדיסק לאורך זמן, וקבל התראות כאשר הם מתקלקלים."
-  },
-  "admin": {
-    "metricsHistoryRetention": "שמירת היסטוריית מדדים",
-    "metricsHistoryRetentionRange": "יום אחד עד 90 ימים",
-    "days": "ימים"
-  },
-  "homepage": {
-    "noData": "אין נתונים זמינים",
-    "showCurrentValue": "הצג ערך נוכחי",
-    "chartMetric": "מֶטרִי",
-    "metricRange": "לָנוּעַ",
-    "host": "מְאָרֵחַ",
-    "loading": "טְעִינָה...",
-    "metricCpu": "מעבד",
-    "metricDisk": "דִיסק",
-    "metricHostname": "שם מארח",
-    "metricKernel": "גַרעִין",
-    "metricMemory": "זֵכֶר",
-    "metricNetwork": "רֶשֶׁת",
-    "metricOs": "מערכת הפעלה",
-    "metricProcesses": "תהליכים",
-    "metricProcessesRunning": "רִיצָה",
-    "metricProcessesTotal": "סַך הַכֹּל",
-    "metricUptime": "זמן פעולה",
-    "metricsNotAvailable": "מדדים אינם זמינים",
-    "noHostSelected": "לא נבחר מארח",
-    "selectHost": "בחר מארח..."
-  },
-  "terminalStatus": {
-    "unavailable": "סטטיסטיקות חיות לא זמינות"
-  },
-  "dashboard": {
-    "cpu": "מעבד",
-    "ram": "אַיִל"
-  },
-  "dashboardTab": {
-    "disk": "דִיסק"
-  },
-  "terminal": {
-    "connected": "מְחוּבָּר"
-  },
-  "permissions": {
-    "use": {
-      "title": "השתמש במדדי מארח",
-      "description": "צפה במדדי אירוח והשתמש במנהלי אירוח (שירותים, חבילות, חומת אש ועוד) עבור אירוחים שאתה יכול להגיע אליהם."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "מרווח מדדים (שניות)",
-        "description": "באיזו תדירות נדגם מארח שנצפה, אלא אם כן המארח קובע מרווח זמן משלו."
-      },
-      "historyRetentionDays": {
-        "label": "שמירת היסטוריה (ימים)",
-        "description": "כמה זמן נשמרות דגימות מדדים עבור תרשימי ההיסטוריה."
-      },
-      "enabledForNewHosts": {
-        "label": "מדדים מופעלים עבור מארחים חדשים",
-        "description": "האם מארחים חדשים מתחילים עם איסוף מדדים מופעל."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "יחידת טמפרטורה",
-        "description": "כיצד מוצגות טמפרטורות ב- Host Metrics.",
-        "celsius": "צֶלסִיוּס",
-        "fahrenheit": "פרנהייט"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "איסוף מדדים"
-      },
-      "metricsInterval": {
-        "label": "מרווח מדדים (שניות)"
-      },
-      "enabledWidgets": {
-        "label": "ווידג'טים מופעלים"
-      },
-      "excludedMounts": {
-        "label": "הרכבות לא כלולות"
-      },
-      "monitoredMounts": {
-        "label": "נתיבים מנוטרים"
-      }
-    }
-  },
-  "plugin": {
-    "name": "מדדי מארח"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/hi_IN.json b/plugins/host-metrics/locales/translated/hi_IN.json
deleted file mode 100644
index 31af3ed86..000000000
--- a/plugins/host-metrics/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "होस्ट मेट्रिक्स"
-  },
-  "hostMetrics": {
-    "cpu": "CPU",
-    "memory": "मेमोरी",
-    "disk": "डिस्क",
-    "network": "नेटवर्क",
-    "uptime": "अपटाइम",
-    "processes": "प्रोसेसेस",
-    "available": "उपलब्ध",
-    "free": "फ्री",
-    "connecting": "कनेक्ट हो रहा है...",
-    "connectionFailed": "सर्वर से कनेक्ट करने में विफल",
-    "naCpus": "N/A CPU(s)",
-    "cpuCores_one": "{{count}} कोर",
-    "cpuCores_other": "{{count}} कोर",
-    "cpuUsage": "CPU उपयोग",
-    "memoryUsage": "मेमोरी उपयोग",
-    "diskUsage": "डिस्क उपयोग",
-    "selectFilesystem": "फ़ाइल सिस्टम का चयन करें",
-    "temperature": "तापमान",
-    "highestTemperature": "उच्चतम तापमान",
-    "primaryTemperatureSensor": "प्राथमिक सेंसर",
-    "gpu": {
-      "title": "जीपीयू",
-      "noDevice": "कोई NVIDIA GPU नहीं मिला। GPU मेट्रिक्स देखने के लिए NVIDIA ड्राइवर (जो nvidia-smi प्रदान करता है) इंस्टॉल करें।",
-      "driver": "ड्राइवर {{version}}",
-      "utilization": "उपयोग",
-      "memory": "वीआरएएम",
-      "temperature": "अस्थायी",
-      "power": "शक्ति",
-      "fan": "पंखा",
-      "processes": "जीपीयू प्रक्रियाएँ",
-      "noProcesses": "कोई भी प्रक्रिया जीपीयू का उपयोग नहीं कर रही है।"
-    },
-    "failedToFetchHostConfig": "होस्ट कॉन्फ़िगरेशन प्राप्त करने में विफल",
-    "serverOffline": "सर्वर ऑफ़लाइन",
-    "cannotFetchMetrics": "ऑफ़लाइन सर्वर से मीट्रिक्स प्राप्त नहीं कर सकते",
-    "totpFailed": "TOTP सत्यापन विफल",
-    "noneAuthNotSupported": "होस्ट मेट्रिक्स 'none' प्रमाणीकरण प्रकार का समर्थन नहीं करता।",
-    "noHostSelected": "कोई होस्ट चयनित नहीं",
-    "load": "लोड",
-    "systemInfo": "सिस्टम जानकारी",
-    "hostname": "होस्टनाम",
-    "operatingSystem": "ऑपरेटिंग सिस्टम",
-    "kernel": "कर्नेल",
-    "seconds": "सेकंड",
-    "networkInterfaces": "नेटवर्क इंटरफ़ेस",
-    "noInterfacesFound": "कोई नेटवर्क इंटरफ़ेस नहीं मिला",
-    "noProcessesFound": "कोई प्रोसेस नहीं मिला",
-    "processesTotal": "कुल",
-    "processesRunning": "चल रहे",
-    "loginStats": "SSH लॉगिन आँकड़े",
-    "noRecentLoginData": "कोई हालिया लॉगिन डेटा नहीं",
-    "ports": {
-      "title": "लिसनिंग पोर्ट",
-      "protocol": "प्रोटोकॉल",
-      "port": "पोर्ट",
-      "address": "पता",
-      "process": "प्रोसेस",
-      "search": "पोर्ट खोजें...",
-      "allProtocols": "सभी",
-      "noData": "कोई लिसनिंग पोर्ट डेटा नहीं"
-    },
-    "firewall": {
-      "title": "फ़ायरवॉल",
-      "inactive": "निष्क्रिय",
-      "policy": "नीति",
-      "rules": "नियम",
-      "noRules": "इस चेन में कोई नियम नहीं",
-      "noData": "कोई फ़ायरवॉल डेटा उपलब्ध नहीं",
-      "action": "कार्रवाई",
-      "protocol": "प्रोटो",
-      "port": "पोर्ट",
-      "source": "स्रोत",
-      "anywhere": "कहीं भी",
-      "chains": "चेन्स"
-    },
-    "loadAvg": "लोड औसत",
-    "swap": "स्वैप",
-    "architecture": "आर्किटेक्चर",
-    "refresh": "रीफ़्रेश",
-    "retry": "पुनः प्रयास करें",
-    "customize": "लेआउट अनुकूलित करें",
-    "reset": "रीसेट",
-    "tabLive": "लाइव",
-    "editModeInstructions": "कार्ड को पुनर्व्यवस्थित करने के लिए खींचें, आकार बदलने के लिए निचले किनारे को खींचें, और कार्ड की चौड़ाई बदलने के लिए चौड़ाई बटन का उपयोग करें। नीचे कार्ड जोड़ें या हटाएं।",
-    "managers": {
-      "services": "सेवाएँ",
-      "processInspector": "प्रोसेस इंस्पेक्टर",
-      "logViewer": "लॉग व्यूअर",
-      "cron": "क्रॉन जॉब्स",
-      "packages": "पैकेजेस",
-      "ssl": "SSL प्रमाणपत्र",
-      "firewall": "फ़ायरवॉल",
-      "users": "उपयोगकर्ता और अनुमतियाँ",
-      "healthCheck": "स्वास्थ्य जांच",
-      "diskBreakdown": "डिस्क ब्रेकडाउन",
-      "systemdTimers": "टाइमर",
-      "topMemory": "मेमोरी के अनुसार शीर्ष",
-      "noData": "कोई डेटा नहीं",
-      "sudoHint": "विशेषाधिकार क्रियाओं को सक्षम करने के लिए होस्ट संपादक में इस होस्ट के लिए एक sudo पासवर्ड सेट करें।",
-      "filter": "फ़िल्टर...",
-      "start": "प्रारंभ",
-      "stop": "रोकें",
-      "restart": "पुनरारंभ",
-      "actionDone": "{{name}} अद्यतित",
-      "actionFailed": "कार्रवाई विफल",
-      "signalSent": "PID {{pid}} को सिग्नल भेजा गया",
-      "killHint": "क्लिक: समाप्त करें (SIGTERM)। राइट-क्लिक: बलपूर्वक समाप्त करें (SIGKILL)।",
-      "working": "काम कर रहा है...",
-      "update": "अपडेट करें",
-      "upgradeAll": "सभी अपग्रेड करें",
-      "allUpToDate": "सब कुछ अप टू डेट है",
-      "save": "सहेजें",
-      "command": "कमांड",
-      "enabled": "सक्षम",
-      "cronSaved": "क्रॉनटैब अपडेट किया गया",
-      "clients": "क्लाइंट",
-      "dryRun": "ड्राई रन",
-      "renew": "रीन्यू करें",
-      "noAcmeClient": "इस होस्ट पर कोई ACME क्लाइंट (certbot या acme.sh) नहीं मिला।",
-      "addInputRule": "INPUT नियम जोड़ें",
-      "firewallWarning": "परिवर्तन केवल रनटाइम के लिए हैं जब तक स्थायी न हों। स्वयं को लॉक आउट करने से सावधान रहें।",
-      "ruleApplied": "नियम लागू किया गया",
-      "invalidPort": "एक वैध पोर्ट दर्ज करें (1-65535)",
-      "newUsername": "नया उपयोगकर्ता नाम",
-      "addUser": "जोड़ें",
-      "deleteUser": "उपयोगकर्ता हटाएं",
-      "noHealthChecks": "अभी तक कोई हेल्थ चेक कॉन्फ़िगर नहीं किया गया है।",
-      "follow": "अनुसरण करें",
-      "noLogData": "कोई लॉग आउटपुट नहीं।",
-      "tree": "ट्री",
-      "enableDisable": "बूट पर सक्षम / अक्षम करें",
-      "grantSudo": "sudo दें",
-      "revokeSudo": "sudo वापस लें",
-      "sslIssueCert": "प्रमाणपत्र जारी करें",
-      "sslExpired": "समाप्त",
-      "sslInDays": "{{days}} दिनों में",
-      "sslNeedDomain": "कम से कम एक डोमेन दर्ज करें",
-      "sslIssued": "प्रमाणपत्र जारी किया गया",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (स्टैंडअलोन)",
-      "sslHttpWebroot": "HTTP (वेबरूट)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "DNS प्रदाता (उदा. cloudflare)",
-      "sslIssueHint": "DNS प्रदाता क्रेडेंशियल पहले से होस्ट पर कॉन्फ़िगर किए गए होने चाहिए।",
-      "sslRevoke": "प्रमाणपत्र निरस्त करें",
-      "sslRevoked": "प्रमाणपत्र निरस्त किया गया",
-      "sslRevokeConfirm": "प्रमाणपत्र \"{{name}}\" निरस्त करें और हटाएं? यह पूर्ववत नहीं किया जा सकता।",
-      "healthRun": "चलाएं",
-      "healthName": "नाम",
-      "healthTarget": "होस्ट / पता",
-      "healthAddCheck": "जांच जोड़ें",
-      "healthSaved": "स्वास्थ्य जांच सहेजी गईं",
-      "healthMissingFields": "प्रत्येक जांच के लिए एक नाम और लक्ष्य आवश्यक है",
-      "logFile": "फ़ाइल",
-      "logUnit": "यूनिट",
-      "logCustomPath": "/var/log के अंतर्गत कस्टम पथ (वैकल्पिक)",
-      "logGrep": "लाइनें फ़िल्टर करें...",
-      "firewallPersist": "नियम स्थायी करें",
-      "firewallPersisted": "फ़ायरवॉल नियम स्थायी किए गए",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "WireGuard इस होस्ट पर स्थापित नहीं है",
-      "wgNoInterfaces": "कोई WireGuard इंटरफ़ेस कॉन्फ़िगर्ड नहीं हैं",
-      "wgInterfaceUp": "चालू करें",
-      "wgInterfaceDown": "बंद करें",
-      "wgBringingUp": "{{name}} चालू किया जा रहा है...",
-      "wgBringingDown": "{{name}} बंद किया जा रहा है...",
-      "wgInterfaceUpDone": "{{name}} चालू है",
-      "wgInterfaceDownDone": "{{name}} बंद है",
-      "wgListenPort": "पोर्ट",
-      "wgPublicKey": "सार्वजनिक कुंजी",
-      "wgEndpoint": "एंडपॉइंट",
-      "wgAllowedIPs": "अनुमत IPs",
-      "wgLastHandshake": "अंतिम हैंडशेक",
-      "wgHandshakeNever": "कभी नहीं",
-      "wgTransfer": "ट्रांसफर",
-      "wgNoPeers": "कोई समकक्ष नहीं"
-    }
-  },
-  "metricsHistory": {
-    "title": "मेट्रिक्स इतिहास",
-    "historySuffix": "इतिहास",
-    "cpuMemoryDisk": "CPU / मेमोरी / डिस्क",
-    "network": "नेटवर्क",
-    "download": "RX",
-    "upload": "TX",
-    "noData": "इस समय सीमा के लिए कोई इतिहास डेटा उपलब्ध नहीं है।",
-    "custom": "कस्टम",
-    "to": "तक",
-    "apply": "लागू करें",
-    "viewHistory": "इतिहास देखें"
-  },
-  "hosts": {
-    "tabHostMetrics": "होस्ट मेट्रिक्स",
-    "metricsCollectionLabel": "मेट्रिक्स संग्रह",
-    "enableMetricsLabel": "मेट्रिक्स सक्षम करें",
-    "enableMetricsDesc": "इस होस्ट से CPU, RAM, डिस्क और अन्य मेट्रिक्स एकत्र करें",
-    "useGlobalMetrics": "वैश्विक अंतराल का उपयोग करें",
-    "useGlobalMetricsDesc": "सर्वर-व्यापी मेट्रिक्स अंतराल से ओवरराइड करें",
-    "metricsIntervalS": "मेट्रिक्स अंतराल (सेकंड)",
-    "metricsIntervalDesc2": "मेट्रिक स्नैपशॉट के बीच सेकंड",
-    "excludedMountsLabel": "बहिष्कृत पर्वत",
-    "monitoredMountsLabel": "कस्टम मॉनिटर किए गए पथ",
-    "monitoredMountsDesc": "उन पथों को जोड़ें जो अलग-अलग माउंट के रूप में उजागर नहीं होते हैं, जिनमें बाइंड-माउंटेड होम असिस्टेंट पथ जैसे कि /config शामिल हैं।",
-    "monitoredMountPathPlaceholder": "पथ (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "लेबल (वैकल्पिक)",
-    "addMonitoredMount": "पथ जोड़ें",
-    "excludedMountsDesc": "इस होस्ट के लिए डिस्क उपयोग और अलर्ट से विशिष्ट माउंट पॉइंट या फ़ाइल सिस्टम प्रकार (जैसे nfs, cifs) को छिपाएँ।",
-    "excludedMountsPlaceholder": "माउंट पथ (/mnt/nas) या फ़ाइल सिस्टम प्रकार (nfs, cifs)",
-    "excludedMountsEmpty": "कोई भी माउंट बाहर नहीं रखा गया है। सभी पहचाने गए फ़ाइल सिस्टम दिखाए गए हैं।",
-    "addExcludedMount": "जोड़ें",
-    "visibleWidgets": "दृश्यमान विजेट्स",
-    "widgetsMovedToHostMetrics": "कार्ड अब सीधे होस्ट मेट्रिक्स टैब में जोड़े, व्यवस्थित और आकार बदले जा सकते हैं। इस होस्ट के लिए होस्ट मेट्रिक्स खोलें और यह चुनने के लिए कस्टमाइज़ का उपयोग करें कि कौन से कार्ड दिखाए जाएँ।",
-    "hostNotFound": "होस्ट नहीं मिला",
-    "loadingHost": "होस्ट लोड हो रहा है..."
-  },
-  "onboarding": {
-    "feature_metrics": "मैट्रिक्स और अलर्ट",
-    "feature_metrics_desc": "समय के साथ सीपीयू, मेमोरी और डिस्क की स्थिति पर नज़र रखें और उनके खराब होने पर अलर्ट प्राप्त करें।"
-  },
-  "admin": {
-    "metricsHistoryRetention": "मेट्रिक्स इतिहास प्रतिधारण",
-    "metricsHistoryRetentionRange": "1 से 90 दिन",
-    "days": "दिन"
-  },
-  "homepage": {
-    "noData": "कोई डेटा उपलब्ध नहीं",
-    "showCurrentValue": "वर्तमान मान दिखाएं",
-    "chartMetric": "मीट्रिक",
-    "metricRange": "सीमा",
-    "host": "होस्ट",
-    "loading": "लोड हो रहा है...",
-    "metricCpu": "CPU",
-    "metricDisk": "डिस्क",
-    "metricHostname": "होस्टनेम",
-    "metricKernel": "कर्नेल",
-    "metricMemory": "मेमोरी",
-    "metricNetwork": "नेटवर्क",
-    "metricOs": "ओएस",
-    "metricProcesses": "प्रोसेस",
-    "metricProcessesRunning": "चालू",
-    "metricProcessesTotal": "कुल",
-    "metricUptime": "अपटाइम",
-    "metricsNotAvailable": "मेट्रिक्स उपलब्ध नहीं",
-    "noHostSelected": "कोई होस्ट चयनित नहीं",
-    "selectHost": "होस्ट चुनें..."
-  },
-  "terminalStatus": {
-    "unavailable": "लाइव आंकड़े उपलब्ध नहीं हैं"
-  },
-  "dashboard": {
-    "cpu": "CPU",
-    "ram": "RAM"
-  },
-  "dashboardTab": {
-    "disk": "डिस्क"
-  },
-  "terminal": {
-    "connected": "कनेक्टेड"
-  },
-  "permissions": {
-    "use": {
-      "title": "होस्ट मेट्रिक्स का उपयोग करें",
-      "description": "आप जिन होस्ट तक पहुंच सकते हैं, उन पर होस्ट मेट्रिक्स देखें और होस्ट मैनेजर (सेवाएं, पैकेज, फ़ायरवॉल आदि) का उपयोग करें।"
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "मैट्रिक्स अंतराल (सेकंड)",
-        "description": "किसी होस्ट को कितनी बार देखा जा रहा है, इसकी गणना की जाती है, जब तक कि होस्ट स्वयं अपना अंतराल निर्धारित न कर ले।"
-      },
-      "historyRetentionDays": {
-        "label": "इतिहास प्रतिधारण (दिनों में)",
-        "description": "हिस्ट्री चार्ट के लिए मैट्रिक्स सैंपल कितने समय तक रखे जाते हैं?"
-      },
-      "enabledForNewHosts": {
-        "label": "नए होस्ट के लिए मेट्रिक्स चालू हैं",
-        "description": "क्या नए होस्ट मेट्रिक्स संग्रह चालू होने के साथ शुरू होते हैं?"
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "तापमान इकाई",
-        "description": "होस्ट मेट्रिक्स में तापमान कैसे प्रदर्शित किया जाता है।",
-        "celsius": "सेल्सीयस",
-        "fahrenheit": "फ़ारेनहाइट"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "मैट्रिक्स एकत्र करें"
-      },
-      "metricsInterval": {
-        "label": "मैट्रिक्स अंतराल (सेकंड)"
-      },
-      "enabledWidgets": {
-        "label": "सक्षम विजेट"
-      },
-      "excludedMounts": {
-        "label": "वर्जित माउंट"
-      },
-      "monitoredMounts": {
-        "label": "निगरानी किए गए पथ"
-      }
-    }
-  },
-  "plugin": {
-    "name": "होस्ट मेट्रिक्स"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/hu_HU.json b/plugins/host-metrics/locales/translated/hu_HU.json
deleted file mode 100644
index 6a8ddc6d7..000000000
--- a/plugins/host-metrics/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Gazdagép-metrikák"
-  },
-  "hostMetrics": {
-    "cpu": "CPU",
-    "memory": "Memória",
-    "disk": "Korong",
-    "network": "Hálózat",
-    "uptime": "Üzemidő",
-    "processes": "Folyamatok",
-    "available": "Elérhető",
-    "free": "Ingyenes",
-    "connecting": "Kapcsolódás...",
-    "connectionFailed": "Nem sikerült csatlakozni a szerverhez",
-    "naCpus": "Nincs CPU",
-    "cpuCores_one": "{{count}} Mag",
-    "cpuCores_other": "{{count}} Magok",
-    "cpuUsage": "CPU-használat",
-    "memoryUsage": "Memóriahasználat",
-    "diskUsage": "Lemezhasználat",
-    "selectFilesystem": "Fájlrendszer kiválasztása",
-    "temperature": "Hőmérséklet",
-    "highestTemperature": "Legmagasabb hőmérséklet",
-    "primaryTemperatureSensor": "Elsődleges érzékelő",
-    "gpu": {
-      "title": "GPU",
-      "noDevice": "Nem észlelhető NVIDIA GPU. Telepítse az NVIDIA illesztőprogramot (ez biztosítja az nvidia-smi-t) a GPU-metrikák megtekintéséhez.",
-      "driver": "Sofőr {{version}}",
-      "utilization": "Hasznosítás",
-      "memory": "VRAM",
-      "temperature": "Hőmérséklet",
-      "power": "Hatalom",
-      "fan": "Ventilátor",
-      "processes": "GPU-folyamatok",
-      "noProcesses": "Egyik folyamat sem használja a GPU-t"
-    },
-    "failedToFetchHostConfig": "Nem sikerült lekérni a gazdagép konfigurációját",
-    "serverOffline": "Szerver offline állapotban",
-    "cannotFetchMetrics": "Nem lehet metrikákat lekérni az offline szerverről",
-    "totpFailed": "TOTP-ellenőrzés sikertelen",
-    "noneAuthNotSupported": "A Host Metrics nem támogatja a „nincs” hitelesítési típust.",
-    "noHostSelected": "Nincs kiválasztva gazdagép",
-    "load": "Terhelés",
-    "systemInfo": "Rendszerinformációk",
-    "hostname": "Gazdagépnév",
-    "operatingSystem": "Operációs rendszer",
-    "kernel": "Kernel",
-    "seconds": "másodperc",
-    "networkInterfaces": "Hálózati interfészek",
-    "noInterfacesFound": "Nem találhatók hálózati interfészek",
-    "noProcessesFound": "Nem találhatók folyamatok",
-    "processesTotal": "teljes",
-    "processesRunning": "futás",
-    "loginStats": "SSH bejelentkezési statisztikák",
-    "noRecentLoginData": "Nincsenek friss bejelentkezési adatok",
-    "ports": {
-      "title": "Figyelő portok",
-      "protocol": "Jegyzőkönyv",
-      "port": "Kikötő",
-      "address": "Cím",
-      "process": "Folyamat",
-      "search": "Keresési portok...",
-      "allProtocols": "Minden",
-      "noData": "Nincsenek figyelőport-adatok"
-    },
-    "firewall": {
-      "title": "Tűzfal",
-      "inactive": "Inaktív",
-      "policy": "Politika",
-      "rules": "szabályok",
-      "noRules": "Nincsenek szabályok ebben a láncban",
-      "noData": "Nincsenek elérhető tűzfaladatok",
-      "action": "Akció",
-      "protocol": "Proto",
-      "port": "Kikötő",
-      "source": "Forrás",
-      "anywhere": "Bárhol",
-      "chains": "láncok"
-    },
-    "loadAvg": "Átlagos betöltés",
-    "swap": "Csere",
-    "architecture": "Építészet",
-    "refresh": "Frissítés",
-    "retry": "Újrapróbálkozás",
-    "customize": "Elrendezés testreszabása",
-    "reset": "Visszaállítás",
-    "tabLive": "Élő",
-    "editModeInstructions": "Húzd a kártyákat az átrendezéshez, húzd az alsó szélüket az átméretezéshez, és használd a szélesség gombot a kártya szélességének módosításához. Alább adj hozzá vagy távolíts el kártyákat.",
-    "managers": {
-      "services": "Szolgáltatások",
-      "processInspector": "Folyamatfelügyelő",
-      "logViewer": "Naplómegjelenítő",
-      "cron": "Cron-feladatok",
-      "packages": "Csomagok",
-      "ssl": "SSL tanúsítványok",
-      "firewall": "Tűzfal",
-      "users": "Felhasználók és engedélyek",
-      "healthCheck": "Egészségügyi ellenőrzések",
-      "diskBreakdown": "Lemezbontás",
-      "systemdTimers": "Időzítők",
-      "topMemory": "Top by Memory",
-      "noData": "Nincsenek adatok",
-      "sudoHint": "Állítson be egy sudo jelszót ehhez a gazdagéphez a gazdagép-szerkesztőben a privilegizált műveletek engedélyezéséhez.",
-      "filter": "Szűrő...",
-      "start": "Indul",
-      "stop": "Stop",
-      "restart": "Újraindítás",
-      "actionDone": "{{name}} frissítve",
-      "actionFailed": "Sikertelen művelet",
-      "signalSent": "PID {{pid}}-ra küldött jel",
-      "killHint": "Kattintás: leállítás (SIGTERM). Jobb klikk: kényszerített leállítás (SIGKILL).",
-      "working": "Dolgozó...",
-      "update": "Frissítés",
-      "upgradeAll": "Összes frissítése",
-      "allUpToDate": "Minden naprakész",
-      "save": "Megtakarítás",
-      "command": "Parancs",
-      "enabled": "Engedélyezve",
-      "cronSaved": "Crontab frissítve",
-      "clients": "Ügyfelek",
-      "dryRun": "Száraz futás",
-      "renew": "Megújítás",
-      "noAcmeClient": "Nem található ACME kliens (certbot vagy acme.sh) ezen a gazdagépen.",
-      "addInputRule": "INPUT szabály hozzáadása",
-      "firewallWarning": "A változtatások csak futásidejűek, amíg meg nem őrizve nem lesznek. Ügyeljen arra, hogy ne zárja ki magát.",
-      "ruleApplied": "Szabály alkalmazva",
-      "invalidPort": "Adjon meg egy érvényes portszámot (1-65535)",
-      "newUsername": "Új felhasználónév",
-      "addUser": "Hozzáadás",
-      "deleteUser": "Felhasználó törlése",
-      "noHealthChecks": "Még nincsenek konfigurálva állapotfelmérések.",
-      "follow": "Követés",
-      "noLogData": "Nincs naplókimenet.",
-      "tree": "Fa",
-      "enableDisable": "Engedélyezés / letiltás rendszerindításkor",
-      "grantSudo": "Sudo engedélyezése",
-      "revokeSudo": "Sudo visszavonása",
-      "sslIssueCert": "Kibocsátási tanúsítvány",
-      "sslExpired": "Lejárt",
-      "sslInDays": "{{days}}d-ben",
-      "sslNeedDomain": "Adjon meg legalább egy domaint",
-      "sslIssued": "Kiállított tanúsítvány",
-      "sslDomainsPlaceholder": "példa.com, www.példa.com",
-      "sslHttpStandalone": "HTTP (önálló)",
-      "sslHttpWebroot": "HTTP (webroot)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "DNS-szolgáltató (pl. cloudflare)",
-      "sslIssueHint": "A DNS-szolgáltató hitelesítő adatait már konfigurálni kell a gazdagépen.",
-      "sslRevoke": "Tanúsítvány visszavonása",
-      "sslRevoked": "Tanúsítvány visszavonva",
-      "sslRevokeConfirm": "Visszavonja és eltávolítja a(z) \"{{name}}\" tanúsítványt? Ez nem vonható vissza.",
-      "healthRun": "Fut",
-      "healthName": "Név",
-      "healthTarget": "Gazdagép / cím",
-      "healthAddCheck": "Csekk hozzáadása",
-      "healthSaved": "Egészségügyi ellenőrzések mentve",
-      "healthMissingFields": "Minden ellenőrzéshez kell egy név és egy cél.",
-      "logFile": "Fájl",
-      "logUnit": "Egység",
-      "logCustomPath": "Egyéni elérési út a /var/log könyvtárban (opcionális)",
-      "logGrep": "Szűrővonalak...",
-      "firewallPersist": "Szabályok megőrzése",
-      "firewallPersisted": "A tűzfalszabályok megmaradtak",
-      "wireguard": "Drótvédő",
-      "wgNotInstalled": "A WireGuard nincs telepítve erre a gépre",
-      "wgNoInterfaces": "Nincsenek konfigurált WireGuard interfészek",
-      "wgInterfaceUp": "Felnevel",
-      "wgInterfaceDown": "Lehoz",
-      "wgBringingUp": "{{name}} felhozása...",
-      "wgBringingDown": "{{name}} lehozása...",
-      "wgInterfaceUpDone": "{{name}} fent van",
-      "wgInterfaceDownDone": "{{name}} nem működik",
-      "wgListenPort": "Kikötő",
-      "wgPublicKey": "Nyilvános kulcs",
-      "wgEndpoint": "Végpont",
-      "wgAllowedIPs": "Engedélyezett IP-címek",
-      "wgLastHandshake": "Utolsó kézfogás",
-      "wgHandshakeNever": "Soha",
-      "wgTransfer": "Átruházás",
-      "wgNoPeers": "Nincsenek társaik"
-    }
-  },
-  "metricsHistory": {
-    "title": "Metrikák előzményei",
-    "historySuffix": "Történelem",
-    "cpuMemoryDisk": "CPU / Memória / Lemez",
-    "network": "Hálózat",
-    "download": "Vétel",
-    "upload": "Texas",
-    "noData": "Ehhez az időtartományhoz nem állnak rendelkezésre előzményadatok.",
-    "custom": "Szokás",
-    "to": "hogy",
-    "apply": "Jelentkezés",
-    "viewHistory": "Előzmények megtekintése"
-  },
-  "hosts": {
-    "tabHostMetrics": "Gazdagép-metrikák",
-    "metricsCollectionLabel": "Metrikagyűjtemény",
-    "enableMetricsLabel": "Metrikák engedélyezése",
-    "enableMetricsDesc": "CPU, RAM, lemez és egyéb mérőszámok gyűjtése erről a gazdagépről",
-    "useGlobalMetrics": "Globális intervallum használata",
-    "useGlobalMetricsDesc": "Felülbírálás a szerverszintű metrika intervallummal",
-    "metricsIntervalS": "Mérési intervallum (s)",
-    "metricsIntervalDesc2": "Metrika pillanatképek között eltelt másodpercek",
-    "excludedMountsLabel": "Kizárt tartók",
-    "monitoredMountsLabel": "Egyéni figyelt útvonalak",
-    "monitoredMountsDesc": "Adjon hozzá olyan elérési utakat, amelyek nincsenek különálló csatolásként közzétéve, beleértve a kötésként csatolt Home Assistant elérési utakat, például a /config-ot.",
-    "monitoredMountPathPlaceholder": "Útvonal (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Címke (opcionális)",
-    "addMonitoredMount": "Útvonal hozzáadása",
-    "excludedMountsDesc": "Rejtsd el az adott csatolási pontokat vagy fájlrendszertípusokat (pl. nfs, cifs) a lemezhasználat és a riasztások elől ennél a gazdagépnél.",
-    "excludedMountsPlaceholder": "Csatlakoztatási útvonal (/mnt/nas) vagy fájlrendszer típusa (nfs, cifs)",
-    "excludedMountsEmpty": "Nincsenek kizárva csatolások. Minden észlelt fájlrendszer látható.",
-    "addExcludedMount": "Hozzáadás",
-    "visibleWidgets": "Látható widgetek",
-    "widgetsMovedToHostMetrics": "A kártyák mostantól közvetlenül a Gazdagép metrikái lapon adhatók hozzá, rendezhetők el és méretezhetők át. Nyissa meg a Gazdagép metrikái oldalt ehhez a gazdagéphez, és a Testreszabás gombbal válassza ki, hogy mely kártyák jelenjenek meg.",
-    "hostNotFound": "Nem található gazdagép",
-    "loadingHost": "Gazdagép betöltése..."
-  },
-  "onboarding": {
-    "feature_metrics": "Metrikák és riasztások",
-    "feature_metrics_desc": "Kövesse nyomon a CPU, a memória és a lemez teljesítményét az idő múlásával, és kapjon értesítést, ha meghibásodnak."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Metrikák előzményeinek megőrzése",
-    "metricsHistoryRetentionRange": "1-90 nap",
-    "days": "napok"
-  },
-  "homepage": {
-    "noData": "Nincsenek elérhető adatok",
-    "showCurrentValue": "Aktuális érték megjelenítése",
-    "chartMetric": "Metrika",
-    "metricRange": "Hatótávolság",
-    "host": "Házigazda",
-    "loading": "Terhelés...",
-    "metricCpu": "CPU",
-    "metricDisk": "Korong",
-    "metricHostname": "Gazdagépnév",
-    "metricKernel": "Kernel",
-    "metricMemory": "Memória",
-    "metricNetwork": "Hálózat",
-    "metricOs": "operációs rendszer",
-    "metricProcesses": "Folyamatok",
-    "metricProcessesRunning": "futás",
-    "metricProcessesTotal": "teljes",
-    "metricUptime": "Üzemidő",
-    "metricsNotAvailable": "Mutatók nem állnak rendelkezésre",
-    "noHostSelected": "Nincs kiválasztva gazdagép",
-    "selectHost": "Válasszon egy hosztot..."
-  },
-  "terminalStatus": {
-    "unavailable": "Élő statisztikák nem elérhetők"
-  },
-  "dashboard": {
-    "cpu": "CPU",
-    "ram": "RAM"
-  },
-  "dashboardTab": {
-    "disk": "Korong"
-  },
-  "terminal": {
-    "connected": "Csatlakoztatva"
-  },
-  "permissions": {
-    "use": {
-      "title": "Gazdagép-metrikák használata",
-      "description": "Tekintse meg a hoszt metrikáit, és használja a hosztkezelőket (szolgáltatásokat, csomagokat, tűzfalat és egyebeket) az elérhető hosztokon."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Metrika intervallum (másodperc)",
-        "description": "Azt adja meg, hogy egy megtekintett gazdagépből milyen gyakran történik mintavételezés, kivéve, ha a gazdagép beállítja a saját intervallumát."
-      },
-      "historyRetentionDays": {
-        "label": "Előzménymegőrzés (nap)",
-        "description": "Mennyi ideig tárolják a metrika mintákat az előzménydiagramokhoz."
-      },
-      "enabledForNewHosts": {
-        "label": "Metrikák bekapcsolva az új házigazdák számára",
-        "description": "Az új hosztok bekapcsolt metrikák gyűjtésével indulnak-e."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Hőmérséklet mértékegysége",
-        "description": "Hogyan jelennek meg a hőmérsékletek a Host Metrics-ben?",
-        "celsius": "Celsius",
-        "fahrenheit": "Fahrenheit"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Metrikák gyűjtése"
-      },
-      "metricsInterval": {
-        "label": "Metrika intervallum (másodperc)"
-      },
-      "enabledWidgets": {
-        "label": "Engedélyezett widgetek"
-      },
-      "excludedMounts": {
-        "label": "Kizárt tartók"
-      },
-      "monitoredMounts": {
-        "label": "Megfigyelt útvonalak"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Gazdagép-metrikák"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/id_ID.json b/plugins/host-metrics/locales/translated/id_ID.json
deleted file mode 100644
index ad956a012..000000000
--- a/plugins/host-metrics/locales/translated/id_ID.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Metrik Host"
-  },
-  "hostMetrics": {
-    "cpu": "CPU",
-    "memory": "Ingatan",
-    "disk": "Disk",
-    "network": "Jaringan",
-    "uptime": "Waktu aktif",
-    "processes": "Proses",
-    "available": "Tersedia",
-    "free": "Bebas",
-    "connecting": "Menghubungkan...",
-    "connectionFailed": "Gagal terhubung ke server",
-    "naCpus": "CPU tidak tersedia",
-    "cpuCores_one": "{{count}} Inti",
-    "cpuCores_other": "{{count}} Inti",
-    "cpuUsage": "Penggunaan CPU",
-    "memoryUsage": "Penggunaan Memori",
-    "diskUsage": "Penggunaan Disk",
-    "selectFilesystem": "Pilih sistem file",
-    "temperature": "Suhu",
-    "highestTemperature": "Suhu tertinggi",
-    "primaryTemperatureSensor": "Sensor utama",
-    "gpu": {
-      "title": "GPU",
-      "noDevice": "GPU NVIDIA tidak terdeteksi. Instal driver NVIDIA (yang menyediakan nvidia-smi) untuk melihat metrik GPU.",
-      "driver": "Pengemudi {{version}}",
-      "utilization": "Pemanfaatan",
-      "memory": "VRAM",
-      "temperature": "Suhu",
-      "power": "Kekuatan",
-      "fan": "Penggemar",
-      "processes": "Proses GPU",
-      "noProcesses": "Tidak ada proses yang menggunakan GPU."
-    },
-    "failedToFetchHostConfig": "Gagal mengambil konfigurasi host",
-    "serverOffline": "Server Offline",
-    "cannotFetchMetrics": "Tidak dapat mengambil metrik dari server offline.",
-    "totpFailed": "Verifikasi TOTP gagal",
-    "noneAuthNotSupported": "Host Metrics tidak mendukung tipe otentikasi 'none'.",
-    "noHostSelected": "Tidak ada pembawa acara yang dipilih.",
-    "load": "Memuat",
-    "systemInfo": "Informasi Sistem",
-    "hostname": "Nama host",
-    "operatingSystem": "Sistem Operasi",
-    "kernel": "Inti",
-    "seconds": "detik",
-    "networkInterfaces": "Antarmuka Jaringan",
-    "noInterfacesFound": "Tidak ditemukan antarmuka jaringan.",
-    "noProcessesFound": "Tidak ada proses yang ditemukan.",
-    "processesTotal": "total",
-    "processesRunning": "berlari",
-    "loginStats": "Statistik Login SSH",
-    "noRecentLoginData": "Tidak ada data login terbaru.",
-    "ports": {
-      "title": "Port Pendengaran",
-      "protocol": "Protokol",
-      "port": "Pelabuhan",
-      "address": "Alamat",
-      "process": "Proses",
-      "search": "Cari pelabuhan...",
-      "allProtocols": "Semua",
-      "noData": "Tidak ada data port yang mendengarkan."
-    },
-    "firewall": {
-      "title": "Firewall",
-      "inactive": "Tidak aktif",
-      "policy": "Kebijakan",
-      "rules": "aturan",
-      "noRules": "Tidak ada aturan dalam rantai ini",
-      "noData": "Tidak ada data firewall yang tersedia.",
-      "action": "Tindakan",
-      "protocol": "Proto",
-      "port": "Pelabuhan",
-      "source": "Sumber",
-      "anywhere": "Di mana saja",
-      "chains": "rantai"
-    },
-    "loadAvg": "Beban Rata-rata",
-    "swap": "Menukar",
-    "architecture": "Arsitektur",
-    "refresh": "Menyegarkan",
-    "retry": "Mencoba kembali",
-    "customize": "Sesuaikan tata letak",
-    "reset": "Mengatur ulang",
-    "tabLive": "Hidup",
-    "editModeInstructions": "Seret kartu untuk mengatur ulang, seret tepi bawah untuk mengubah ukurannya, dan gunakan tombol lebar untuk mengubah rentang kartu. Tambahkan atau hapus kartu di bawah ini.",
-    "managers": {
-      "services": "Layanan",
-      "processInspector": "Inspektur Proses",
-      "logViewer": "Penampil Log",
-      "cron": "Tugas Cron",
-      "packages": "Paket",
-      "ssl": "Sertifikat SSL",
-      "firewall": "Firewall",
-      "users": "Pengguna & Izin",
-      "healthCheck": "Pemeriksaan Kesehatan",
-      "diskBreakdown": "Kerusakan Disk",
-      "systemdTimers": "Pengatur waktu",
-      "topMemory": "Atas oleh Memory",
-      "noData": "Tidak ada data",
-      "sudoHint": "Tetapkan kata sandi sudo untuk host ini di editor host untuk mengaktifkan tindakan istimewa.",
-      "filter": "Menyaring...",
-      "start": "Awal",
-      "stop": "Berhenti",
-      "restart": "Mulai ulang",
-      "actionDone": "{{name}} diperbarui",
-      "actionFailed": "Tindakan gagal",
-      "signalSent": "Sinyal dikirim ke PID {{pid}}",
-      "killHint": "Klik: akhiri (SIGTERM). Klik kanan: paksa matikan (SIGKILL).",
-      "working": "Bekerja...",
-      "update": "Memperbarui",
-      "upgradeAll": "Tingkatkan semuanya",
-      "allUpToDate": "Semuanya sudah diperbarui",
-      "save": "Menyimpan",
-      "command": "Memerintah",
-      "enabled": "Diaktifkan",
-      "cronSaved": "Crontab diperbarui",
-      "clients": "Klien",
-      "dryRun": "Simulasi",
-      "renew": "Memperbarui",
-      "noAcmeClient": "Tidak ditemukan klien ACME (certbot atau acme.sh) pada host ini.",
-      "addInputRule": "Tambahkan aturan INPUT",
-      "firewallWarning": "Perubahan hanya berlaku saat runtime hingga disimpan. Berhati-hatilah agar tidak mengunci akses Anda sendiri.",
-      "ruleApplied": "Aturan diterapkan",
-      "invalidPort": "Masukkan port yang valid (1-65535)",
-      "newUsername": "Nama pengguna baru",
-      "addUser": "Menambahkan",
-      "deleteUser": "Hapus pengguna",
-      "noHealthChecks": "Belum ada pemeriksaan kesehatan yang dikonfigurasi.",
-      "follow": "Mengikuti",
-      "noLogData": "Tidak ada output log.",
-      "tree": "Pohon",
-      "enableDisable": "Aktifkan/nonaktifkan saat booting",
-      "grantSudo": "Berikan sudo",
-      "revokeSudo": "Cabut sudo",
-      "sslIssueCert": "Menerbitkan sertifikat",
-      "sslExpired": "Kedaluwarsa",
-      "sslInDays": "di {{days}}d",
-      "sslNeedDomain": "Masukkan setidaknya satu domain",
-      "sslIssued": "Sertifikat diterbitkan",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (mandiri)",
-      "sslHttpWebroot": "HTTP (webroot)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "Penyedia DNS (misalnya Cloudflare)",
-      "sslIssueHint": "Kredensial penyedia DNS harus sudah dikonfigurasi pada host.",
-      "sslRevoke": "Cabut sertifikat",
-      "sslRevoked": "Sertifikat dicabut",
-      "sslRevokeConfirm": "Cabut dan hapus sertifikat \"{{name}}\"? Ini tidak dapat dibatalkan.",
-      "healthRun": "Berlari",
-      "healthName": "Nama",
-      "healthTarget": "Host / alamat",
-      "healthAddCheck": "Tambahkan pemeriksaan",
-      "healthSaved": "Pemeriksaan kesehatan tersimpan",
-      "healthMissingFields": "Setiap cek memerlukan nama dan target.",
-      "logFile": "Mengajukan",
-      "logUnit": "Satuan",
-      "logCustomPath": "Jalur khusus di bawah /var/log (opsional)",
-      "logGrep": "Garis filter...",
-      "firewallPersist": "Pertahankan aturan",
-      "firewallPersisted": "Aturan firewall tetap berlaku.",
-      "wireguard": "Pelindung Kawat",
-      "wgNotInstalled": "WireGuard tidak terpasang pada host ini.",
-      "wgNoInterfaces": "Tidak ada antarmuka WireGuard yang dikonfigurasi.",
-      "wgInterfaceUp": "Membesarkan",
-      "wgInterfaceDown": "Menurunkan",
-      "wgBringingUp": "Membawa {{name}} ke atas...",
-      "wgBringingDown": "Menurunkan {{name}}...",
-      "wgInterfaceUpDone": "{{name}} sudah aktif",
-      "wgInterfaceDownDone": "{{name}} sedang down",
-      "wgListenPort": "Pelabuhan",
-      "wgPublicKey": "Kunci publik",
-      "wgEndpoint": "Titik akhir",
-      "wgAllowedIPs": "IP yang Diizinkan",
-      "wgLastHandshake": "Jabat tangan terakhir",
-      "wgHandshakeNever": "Tidak pernah",
-      "wgTransfer": "Transfer",
-      "wgNoPeers": "Tidak ada tandingan"
-    }
-  },
-  "metricsHistory": {
-    "title": "Riwayat Metrik",
-    "historySuffix": "Sejarah",
-    "cpuMemoryDisk": "CPU / Memori / Disk",
-    "network": "Jaringan",
-    "download": "RX",
-    "upload": "TX",
-    "noData": "Tidak ada data riwayat yang tersedia untuk rentang waktu ini.",
-    "custom": "Kebiasaan",
-    "to": "ke",
-    "apply": "Menerapkan",
-    "viewHistory": "Lihat Riwayat"
-  },
-  "hosts": {
-    "tabHostMetrics": "Metrik Host",
-    "metricsCollectionLabel": "Pengumpulan Metrik",
-    "enableMetricsLabel": "Aktifkan Metrik",
-    "enableMetricsDesc": "Kumpulkan data CPU, RAM, disk, dan metrik lainnya dari host ini.",
-    "useGlobalMetrics": "Gunakan Interval Global",
-    "useGlobalMetricsDesc": "Ganti dengan interval metrik di seluruh server.",
-    "metricsIntervalS": "Interval Metrik (detik)",
-    "metricsIntervalDesc2": "Detik antara pengambilan snapshot metrik",
-    "excludedMountsLabel": "Dudukan yang Dikecualikan",
-    "monitoredMountsLabel": "Jalur yang dipantau secara khusus",
-    "monitoredMountsDesc": "Tambahkan jalur yang tidak terekspos sebagai mount terpisah, termasuk jalur Home Assistant yang dipasang secara bind-mount seperti /config.",
-    "monitoredMountPathPlaceholder": "Jalur (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Label (opsional)",
-    "addMonitoredMount": "Tambahkan jalur",
-    "excludedMountsDesc": "Sembunyikan titik pemasangan atau jenis sistem file tertentu (misalnya nfs, cifs) dari penggunaan disk dan peringatan untuk host ini.",
-    "excludedMountsPlaceholder": "Jalur pemasangan (/mnt/nas) atau tipe sistem file (nfs, cifs)",
-    "excludedMountsEmpty": "Tidak ada mount yang dikecualikan. Semua sistem file yang terdeteksi ditampilkan.",
-    "addExcludedMount": "Menambahkan",
-    "visibleWidgets": "Widget yang Terlihat",
-    "widgetsMovedToHostMetrics": "Kartu sekarang ditambahkan, diatur, dan diubah ukurannya langsung di tab Metrik Host. Buka Metrik Host untuk host ini dan gunakan Sesuaikan untuk memilih kartu mana yang akan ditampilkan.",
-    "hostNotFound": "Host tidak ditemukan",
-    "loadingHost": "Memuat host..."
-  },
-  "onboarding": {
-    "feature_metrics": "Metrik dan peringatan",
-    "feature_metrics_desc": "Pantau CPU, memori, dan disk dari waktu ke waktu, dan dapatkan peringatan saat terjadi kerusakan."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Retensi Riwayat Metrik",
-    "metricsHistoryRetentionRange": "1 hingga 90 hari",
-    "days": "hari"
-  },
-  "homepage": {
-    "noData": "Tidak ada data yang tersedia",
-    "showCurrentValue": "Tampilkan Nilai Saat Ini",
-    "chartMetric": "Metrik",
-    "metricRange": "Jangkauan",
-    "host": "Tuan rumah",
-    "loading": "Memuat...",
-    "metricCpu": "CPU",
-    "metricDisk": "Disk",
-    "metricHostname": "Nama host",
-    "metricKernel": "Inti",
-    "metricMemory": "Ingatan",
-    "metricNetwork": "Jaringan",
-    "metricOs": "Sistem Operasi",
-    "metricProcesses": "Proses",
-    "metricProcessesRunning": "berlari",
-    "metricProcessesTotal": "total",
-    "metricUptime": "Waktu aktif",
-    "metricsNotAvailable": "Metrik tidak tersedia",
-    "noHostSelected": "Tidak ada pembawa acara yang dipilih.",
-    "selectHost": "Pilih tuan rumah..."
-  },
-  "terminalStatus": {
-    "unavailable": "Statistik langsung tidak tersedia"
-  },
-  "dashboard": {
-    "cpu": "CPU",
-    "ram": "RAM"
-  },
-  "dashboardTab": {
-    "disk": "Disk"
-  },
-  "terminal": {
-    "connected": "Terhubung"
-  },
-  "permissions": {
-    "use": {
-      "title": "Gunakan Metrik Host",
-      "description": "Lihat metrik host dan gunakan pengelola host (layanan, paket, firewall, dan lainnya) pada host yang dapat Anda jangkau."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Interval metrik (detik)",
-        "description": "Seberapa sering sebuah host yang sedang dilihat diambil sampelnya, kecuali jika host tersebut menetapkan intervalnya sendiri."
-      },
-      "historyRetentionDays": {
-        "label": "Retensi riwayat (hari)",
-        "description": "Berapa lama sampel metrik disimpan untuk grafik riwayat."
-      },
-      "enabledForNewHosts": {
-        "label": "Metrik diaktifkan untuk host baru.",
-        "description": "Apakah host baru memulai dengan pengumpulan metrik yang diaktifkan."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Satuan suhu",
-        "description": "Bagaimana suhu ditampilkan di Host Metrics.",
-        "celsius": "Celsius",
-        "fahrenheit": "Fahrenheit"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Kumpulkan metrik"
-      },
-      "metricsInterval": {
-        "label": "Interval metrik (detik)"
-      },
-      "enabledWidgets": {
-        "label": "Widget yang diaktifkan"
-      },
-      "excludedMounts": {
-        "label": "Dudukan yang dikecualikan"
-      },
-      "monitoredMounts": {
-        "label": "Jalur yang dipantau"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Metrik Host"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/it_IT.json b/plugins/host-metrics/locales/translated/it_IT.json
deleted file mode 100644
index 174e19589..000000000
--- a/plugins/host-metrics/locales/translated/it_IT.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Metriche host"
-  },
-  "hostMetrics": {
-    "cpu": "CPU",
-    "memory": "Memoria",
-    "disk": "Disco",
-    "network": "Rete",
-    "uptime": "Tempo di attività",
-    "processes": "Processi",
-    "available": "Disponibile",
-    "free": "Libero",
-    "connecting": "Connessione in corso...",
-    "connectionFailed": "Connessione al server non riuscita",
-    "naCpus": "CPU N/D",
-    "cpuCores_one": "{{count}} Core",
-    "cpuCores_other": "{{count}} Core",
-    "cpuUsage": "Utilizzo CPU",
-    "memoryUsage": "Utilizzo memoria",
-    "diskUsage": "Utilizzo disco",
-    "selectFilesystem": "Seleziona il filesystem",
-    "temperature": "Temperatura",
-    "highestTemperature": "Temperatura massima",
-    "primaryTemperatureSensor": "Sensore primario",
-    "gpu": {
-      "title": "GPU",
-      "noDevice": "Nessuna GPU NVIDIA rilevata. Installa il driver NVIDIA (che fornisce nvidia-smi) per visualizzare le metriche della GPU.",
-      "driver": "Autista {{version}}",
-      "utilization": "Utilizzo",
-      "memory": "VRAM",
-      "temperature": "Temp",
-      "power": "Energia",
-      "fan": "Fan",
-      "processes": "Elaborazione GPU",
-      "noProcesses": "Nessun processo sta utilizzando la GPU"
-    },
-    "failedToFetchHostConfig": "Recupero configurazione host non riuscito",
-    "serverOffline": "Server offline",
-    "cannotFetchMetrics": "Impossibile recuperare le metriche dal server offline",
-    "totpFailed": "Verifica TOTP non riuscita",
-    "noneAuthNotSupported": "Host Metrics non supporta il tipo di autenticazione 'none'.",
-    "noHostSelected": "Nessun host selezionato",
-    "load": "Carico",
-    "systemInfo": "Informazioni di sistema",
-    "hostname": "Nome host",
-    "operatingSystem": "Sistema operativo",
-    "kernel": "Kernel",
-    "seconds": "secondi",
-    "networkInterfaces": "Interfacce di rete",
-    "noInterfacesFound": "Nessuna interfaccia di rete trovata",
-    "noProcessesFound": "Nessun processo trovato",
-    "processesTotal": "totale",
-    "processesRunning": "in esecuzione",
-    "loginStats": "Statistiche di accesso SSH",
-    "noRecentLoginData": "Nessun dato di accesso recente",
-    "ports": {
-      "title": "Porte in ascolto",
-      "protocol": "Protocollo",
-      "port": "Porta",
-      "address": "Indirizzo",
-      "process": "Processo",
-      "search": "Cerca porte...",
-      "allProtocols": "Tutti",
-      "noData": "Nessun dato sulle porte in ascolto"
-    },
-    "firewall": {
-      "title": "Firewall",
-      "inactive": "Inattivo",
-      "policy": "Politica",
-      "rules": "regole",
-      "noRules": "Nessuna regola in questa catena",
-      "noData": "Nessun dato sul firewall disponibile",
-      "action": "Azione",
-      "protocol": "Proto",
-      "port": "Porta",
-      "source": "Sorgente",
-      "anywhere": "Ovunque",
-      "chains": "Catene"
-    },
-    "loadAvg": "Carico medio",
-    "swap": "Swap",
-    "architecture": "Architettura",
-    "refresh": "Aggiorna",
-    "retry": "Riprova",
-    "customize": "Personalizza layout",
-    "reset": "Reimposta",
-    "tabLive": "Live",
-    "editModeInstructions": "Trascina le schede per riordinarle, trascina il bordo inferiore per ridimensionarle e usa il pulsante della larghezza per modificare l'estensione della scheda. Aggiungi o rimuovi schede qui sotto.",
-    "managers": {
-      "services": "Servizi",
-      "processInspector": "Ispettore dei processi",
-      "logViewer": "Visualizzatore di log",
-      "cron": "Cron",
-      "packages": "Pacchetti",
-      "ssl": "Certificati SSL",
-      "firewall": "Firewall",
-      "users": "Utenti e permessi",
-      "healthCheck": "Controlli di integrità",
-      "diskBreakdown": "Analisi del disco",
-      "systemdTimers": "Timer",
-      "topMemory": "Principali per memoria",
-      "noData": "Nessun dato",
-      "sudoHint": "Imposta una password sudo per questo host nell'editor host per abilitare azioni privilegiate.",
-      "filter": "Filtra...",
-      "start": "Avvia",
-      "stop": "Ferma",
-      "restart": "Riavvia",
-      "actionDone": "{{name}} aggiornato",
-      "actionFailed": "Azione non riuscita",
-      "signalSent": "Segnale inviato al PID {{pid}}",
-      "killHint": "Clic: termina (SIGTERM). Clic destro: terminazione forzata (SIGKILL).",
-      "working": "In corso...",
-      "update": "Aggiorna",
-      "upgradeAll": "Aggiorna tutto",
-      "allUpToDate": "Tutto aggiornato",
-      "save": "Salva",
-      "command": "Comando",
-      "enabled": "Abilitato",
-      "cronSaved": "Crontab aggiornato",
-      "clients": "Client",
-      "dryRun": "Prova",
-      "renew": "Rinnova",
-      "noAcmeClient": "Nessun client ACME (certbot o acme.sh) trovato su questo host.",
-      "addInputRule": "Aggiungi regola INPUT",
-      "firewallWarning": "Le modifiche sono solo runtime finché non vengono rese permanenti. Fai attenzione a non rimanere bloccato fuori.",
-      "ruleApplied": "Regola applicata",
-      "invalidPort": "Inserisci una porta valida (1-65535)",
-      "newUsername": "Nuovo nome utente",
-      "addUser": "Aggiungi",
-      "deleteUser": "Elimina utente",
-      "noHealthChecks": "Nessun health check configurato al momento.",
-      "follow": "Segui",
-      "noLogData": "Nessun output di log.",
-      "tree": "Albero",
-      "enableDisable": "Abilita / disabilita all'avvio",
-      "grantSudo": "Concedi sudo",
-      "revokeSudo": "Revoca sudo",
-      "sslIssueCert": "Emetti certificato",
-      "sslExpired": "Scaduto",
-      "sslInDays": "in {{days}}d",
-      "sslNeedDomain": "Inserisci almeno un dominio",
-      "sslIssued": "Certificato emesso",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (standalone)",
-      "sslHttpWebroot": "HTTP (webroot)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "Provider DNS (es. cloudflare)",
-      "sslIssueHint": "Le credenziali del provider DNS devono essere già configurate sull'host.",
-      "sslRevoke": "Revoca certificato",
-      "sslRevoked": "Certificato revocato",
-      "sslRevokeConfirm": "Revocare e rimuovere il certificato \"{{name}}\"? Questa azione non può essere annullata.",
-      "healthRun": "Esegui",
-      "healthName": "Nome",
-      "healthTarget": "Host / indirizzo",
-      "healthAddCheck": "Aggiungi controllo",
-      "healthSaved": "Controlli di integrità salvati",
-      "healthMissingFields": "Ogni controllo richiede un nome e un obiettivo",
-      "logFile": "File",
-      "logUnit": "Unità",
-      "logCustomPath": "Percorso personalizzato in /var/log (opzionale)",
-      "logGrep": "Filtra righe...",
-      "firewallPersist": "Rendi permanenti le regole",
-      "firewallPersisted": "Regole del firewall rese permanenti",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "WireGuard non è installato su questo host",
-      "wgNoInterfaces": "Nessuna interfaccia WireGuard configurata",
-      "wgInterfaceUp": "Attiva",
-      "wgInterfaceDown": "Disattiva",
-      "wgBringingUp": "Attivazione di {{name}} in corso...",
-      "wgBringingDown": "Disattivazione di {{name}} in corso...",
-      "wgInterfaceUpDone": "{{name}} è attivo",
-      "wgInterfaceDownDone": "{{name}} è disattivo",
-      "wgListenPort": "Porta",
-      "wgPublicKey": "Chiave pubblica",
-      "wgEndpoint": "Endpoint",
-      "wgAllowedIPs": "IP consentiti",
-      "wgLastHandshake": "Ultimo handshake",
-      "wgHandshakeNever": "Mai",
-      "wgTransfer": "Trasferimento",
-      "wgNoPeers": "Senza eguali"
-    }
-  },
-  "metricsHistory": {
-    "title": "Cronologia metriche",
-    "historySuffix": "Cronologia",
-    "cpuMemoryDisk": "CPU / Memoria / Disco",
-    "network": "Rete",
-    "download": "RX",
-    "upload": "TX",
-    "noData": "Nessun dato storico disponibile per questo intervallo di tempo.",
-    "custom": "Personalizzato",
-    "to": "a",
-    "apply": "Applica",
-    "viewHistory": "Visualizza cronologia"
-  },
-  "hosts": {
-    "tabHostMetrics": "Metriche host",
-    "metricsCollectionLabel": "Raccolta metriche",
-    "enableMetricsLabel": "Abilita metriche",
-    "enableMetricsDesc": "Raccogli CPU, RAM, disco e altre metriche da questo host",
-    "useGlobalMetrics": "Usa intervallo globale",
-    "useGlobalMetricsDesc": "Sovrascrivi con l'intervallo delle metriche del server",
-    "metricsIntervalS": "Intervallo metriche (s)",
-    "metricsIntervalDesc2": "Secondi tra uno snapshot delle metriche e l'altro",
-    "excludedMountsLabel": "Montature escluse",
-    "monitoredMountsLabel": "Percorsi monitorati personalizzati",
-    "monitoredMountsDesc": "Aggiungi i percorsi che non sono esposti come mount separati, inclusi i percorsi di Home Assistant montati tramite bind, come /config.",
-    "monitoredMountPathPlaceholder": "Percorso (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Etichetta (facoltativa)",
-    "addMonitoredMount": "Aggiungi percorso",
-    "excludedMountsDesc": "Nascondi specifici punti di montaggio o tipi di filesystem (ad esempio nfs, cifs) dall'utilizzo del disco e dagli avvisi per questo host.",
-    "excludedMountsPlaceholder": "Percorso di montaggio (/mnt/nas) o tipo di filesystem (nfs, cifs)",
-    "excludedMountsEmpty": "Nessun mount escluso. Vengono mostrati tutti i filesystem rilevati.",
-    "addExcludedMount": "Aggiungi",
-    "visibleWidgets": "Widget visibili",
-    "widgetsMovedToHostMetrics": "Le schede ora vengono aggiunte, disposte e ridimensionate direttamente nella scheda Metriche host. Apri Metriche host per questo host e usa Personalizza per scegliere quali schede mostrare.",
-    "hostNotFound": "Host non trovato",
-    "loadingHost": "Caricamento host..."
-  },
-  "onboarding": {
-    "feature_metrics": "Metriche e avvisi",
-    "feature_metrics_desc": "Monitora l'utilizzo di CPU, memoria e disco nel tempo e ricevi avvisi in caso di malfunzionamenti."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Conservazione cronologia metriche",
-    "metricsHistoryRetentionRange": "Da 1 a 90 giorni",
-    "days": "giorni"
-  },
-  "homepage": {
-    "noData": "Nessun dato disponibile",
-    "showCurrentValue": "Mostra valore corrente",
-    "chartMetric": "Metrica",
-    "metricRange": "Intervallo",
-    "host": "Host",
-    "loading": "Caricamento...",
-    "metricCpu": "CPU",
-    "metricDisk": "Disco",
-    "metricHostname": "Nome host",
-    "metricKernel": "Kernel",
-    "metricMemory": "Memoria",
-    "metricNetwork": "Rete",
-    "metricOs": "OS",
-    "metricProcesses": "Processi",
-    "metricProcessesRunning": "in esecuzione",
-    "metricProcessesTotal": "totale",
-    "metricUptime": "Uptime",
-    "metricsNotAvailable": "Metriche non disponibili",
-    "noHostSelected": "Nessun host selezionato",
-    "selectHost": "Seleziona un host..."
-  },
-  "terminalStatus": {
-    "unavailable": "Statistiche in tempo reale non disponibili"
-  },
-  "dashboard": {
-    "cpu": "CPU",
-    "ram": "RAM"
-  },
-  "dashboardTab": {
-    "disk": "Disco"
-  },
-  "terminal": {
-    "connected": "Connesso"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilizzare le metriche dell'host",
-      "description": "Visualizza le metriche dell'host e utilizza i gestori host (servizi, pacchetti, firewall e altro) sugli host raggiungibili."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Intervallo delle metriche (secondi)",
-        "description": "Con quale frequenza viene campionato un host visualizzato, a meno che l'host non imposti un intervallo personalizzato."
-      },
-      "historyRetentionDays": {
-        "label": "Conservazione della cronologia (giorni)",
-        "description": "Per quanto tempo vengono conservati i campioni delle metriche per i grafici storici."
-      },
-      "enabledForNewHosts": {
-        "label": "Metriche attivate per i nuovi host",
-        "description": "Se i nuovi host iniziano con la raccolta di metriche attivata."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Unità di temperatura",
-        "description": "Come vengono visualizzate le temperature nelle metriche dell'host.",
-        "celsius": "Centigrado",
-        "fahrenheit": "Fahrenheit"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Raccogliere metriche"
-      },
-      "metricsInterval": {
-        "label": "Intervallo delle metriche (secondi)"
-      },
-      "enabledWidgets": {
-        "label": "Widget abilitati"
-      },
-      "excludedMounts": {
-        "label": "Montature escluse"
-      },
-      "monitoredMounts": {
-        "label": "Percorsi monitorati"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Metriche host"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/ja_JP.json b/plugins/host-metrics/locales/translated/ja_JP.json
deleted file mode 100644
index 26a9edac1..000000000
--- a/plugins/host-metrics/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "ホストメトリクス"
-  },
-  "hostMetrics": {
-    "cpu": "CPU",
-    "memory": "メモリ",
-    "disk": "ディスク",
-    "network": "ネットワーク",
-    "uptime": "稼働時間",
-    "processes": "プロセス",
-    "available": "利用可能",
-    "free": "空き",
-    "connecting": "接続中...",
-    "connectionFailed": "サーバーへの接続に失敗しました",
-    "naCpus": "N/A CPU",
-    "cpuCores_one": "{{count}} コア",
-    "cpuCores_other": "{{count}} コア",
-    "cpuUsage": "CPU使用率",
-    "memoryUsage": "メモリ使用率",
-    "diskUsage": "ディスク使用率",
-    "selectFilesystem": "ファイルシステムを選択",
-    "temperature": "温度",
-    "highestTemperature": "最高温度",
-    "primaryTemperatureSensor": "プライマリーセンサー",
-    "gpu": {
-      "title": "GPU",
-      "noDevice": "NVIDIA GPUが検出されませんでした。GPUのメトリックを表示するには、NVIDIAドライバーをインストールしてください（ドライバーにはnvidia-smiが含まれています）。",
-      "driver": "ドライバー {{version}}",
-      "utilization": "利用",
-      "memory": "VRAM",
-      "temperature": "温度",
-      "power": "力",
-      "fan": "ファン",
-      "processes": "GPUプロセス",
-      "noProcesses": "GPUを使用しているプロセスはありません"
-    },
-    "failedToFetchHostConfig": "ホスト設定の取得に失敗しました",
-    "serverOffline": "サーバーオフライン",
-    "cannotFetchMetrics": "オフラインのサーバーからメトリクスを取得できません。",
-    "totpFailed": "TOTP検証に失敗しました",
-    "noneAuthNotSupported": "ホストメトリクスは「none」認証タイプをサポートしていません。",
-    "noHostSelected": "ホストが選択されていません",
-    "load": "負荷",
-    "systemInfo": "システム情報",
-    "hostname": "ホスト名",
-    "operatingSystem": "オペレーティングシステム",
-    "kernel": "カーネル",
-    "seconds": "秒",
-    "networkInterfaces": "ネットワークインターフェース",
-    "noInterfacesFound": "ネットワークインターフェースが見つかりません",
-    "noProcessesFound": "プロセスが見つかりません",
-    "processesTotal": "合計",
-    "processesRunning": "実行中",
-    "loginStats": "SSHログイン統計",
-    "noRecentLoginData": "最近のログインデータがありません",
-    "ports": {
-      "title": "リスニングポート",
-      "protocol": "プロトコル",
-      "port": "ポート",
-      "address": "アドレス",
-      "process": "プロセス",
-      "search": "ポートを検索...",
-      "allProtocols": "すべて",
-      "noData": "リスニングポートのデータがありません"
-    },
-    "firewall": {
-      "title": "ファイアウォール",
-      "inactive": "非アクティブ",
-      "policy": "ポリシー",
-      "rules": "ルール",
-      "noRules": "このチェーンにルールはありません",
-      "noData": "利用可能なファイアウォールデータがありません",
-      "action": "アクション",
-      "protocol": "プロトコル",
-      "port": "ポート",
-      "source": "ソース",
-      "anywhere": "任意",
-      "chains": "チェーン"
-    },
-    "loadAvg": "ロードアベレージ",
-    "swap": "スワップ",
-    "architecture": "アーキテクチャ",
-    "refresh": "更新",
-    "retry": "再試行",
-    "customize": "レイアウトをカスタマイズ",
-    "reset": "リセット",
-    "tabLive": "ライブ",
-    "editModeInstructions": "カードをドラッグして並べ替え、下辺をドラッグしてサイズを変更し、幅ボタンでカードのスパンを変更します。下のボタンでカードを追加または削除してください。",
-    "managers": {
-      "services": "サービス",
-      "processInspector": "プロセスインスペクタ",
-      "logViewer": "ログビューア",
-      "cron": "Cronジョブ",
-      "packages": "パッケージ",
-      "ssl": "SSL証明書",
-      "firewall": "ファイアウォール",
-      "users": "ユーザーと権限",
-      "healthCheck": "ヘルスチェック",
-      "diskBreakdown": "ディスク内訳",
-      "systemdTimers": "タイマー",
-      "topMemory": "メモリ使用量トップ",
-      "noData": "データなし",
-      "sudoHint": "特権アクションを有効にするには、ホストエディタでこのホストのsudoパスワードを設定してください。",
-      "filter": "フィルター...",
-      "start": "起動",
-      "stop": "停止",
-      "restart": "再起動",
-      "actionDone": "{{name}} が更新されました",
-      "actionFailed": "アクションに失敗しました",
-      "signalSent": "PID {{pid}} にシグナルが送信されました",
-      "killHint": "クリック: 終了 (SIGTERM)。右クリック: 強制終了 (SIGKILL)。",
-      "working": "処理中...",
-      "update": "更新",
-      "upgradeAll": "すべてアップグレード",
-      "allUpToDate": "すべて最新です",
-      "save": "保存",
-      "command": "コマンド",
-      "enabled": "有効",
-      "cronSaved": "crontab を更新しました",
-      "clients": "クライアント",
-      "dryRun": "ドライラン",
-      "renew": "更新",
-      "noAcmeClient": "このホストに ACME クライアント (certbot または acme.sh) が見つかりません。",
-      "addInputRule": "INPUT ルールを追加",
-      "firewallWarning": "変更は永続化されるまで実行中のみ有効です。自分をロックアウトしないよう注意してください。",
-      "ruleApplied": "ルールを適用しました",
-      "invalidPort": "有効なポート番号 (1-65535) を入力してください",
-      "newUsername": "新しいユーザー名",
-      "addUser": "追加",
-      "deleteUser": "ユーザーを削除",
-      "noHealthChecks": "ヘルスチェックはまだ設定されていません。",
-      "follow": "フォロー",
-      "noLogData": "ログ出力がありません。",
-      "tree": "ツリー",
-      "enableDisable": "起動時に有効/無効",
-      "grantSudo": "sudo 権限を付与",
-      "revokeSudo": "sudo 権限を剥奪",
-      "sslIssueCert": "証明書を発行",
-      "sslExpired": "期限切れ",
-      "sslInDays": "あと {{days}} 日",
-      "sslNeedDomain": "少なくとも1つのドメインを入力してください",
-      "sslIssued": "証明書が発行されました",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (スタンドアロン)",
-      "sslHttpWebroot": "HTTP (webroot)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "DNSプロバイダ(例: cloudflare)",
-      "sslIssueHint": "DNSプロバイダの認証情報はホストに設定済みである必要があります。",
-      "sslRevoke": "証明書を失効",
-      "sslRevoked": "証明書が失効しました",
-      "sslRevokeConfirm": "証明書 \"{{name}}\"を失効して削除しますか？この操作は取り消せません。",
-      "healthRun": "実行",
-      "healthName": "名前",
-      "healthTarget": "ホスト / アドレス",
-      "healthAddCheck": "チェックを追加",
-      "healthSaved": "ヘルスチェックが保存されました",
-      "healthMissingFields": "各チェックには名前とターゲットが必要です",
-      "logFile": "ファイル",
-      "logUnit": "ユニット",
-      "logCustomPath": "/var/log 以下のカスタムパス (任意)",
-      "logGrep": "行をフィルタ...",
-      "firewallPersist": "ルールを永続化",
-      "firewallPersisted": "ファイアウォールルールが永続化されました",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "このホストにWireGuardがインストールされていません",
-      "wgNoInterfaces": "WireGuardインターフェースが設定されていません",
-      "wgInterfaceUp": "起動",
-      "wgInterfaceDown": "停止",
-      "wgBringingUp": "{{name}}を起動中...",
-      "wgBringingDown": "{{name}}を停止中...",
-      "wgInterfaceUpDone": "{{name}}が起動しました",
-      "wgInterfaceDownDone": "{{name}}が停止しました",
-      "wgListenPort": "ポート",
-      "wgPublicKey": "公開鍵",
-      "wgEndpoint": "エンドポイント",
-      "wgAllowedIPs": "許可されたIP",
-      "wgLastHandshake": "最終ハンドシェイク",
-      "wgHandshakeNever": "なし",
-      "wgTransfer": "転送量",
-      "wgNoPeers": "同業他社なし"
-    }
-  },
-  "metricsHistory": {
-    "title": "メトリクス履歴",
-    "historySuffix": "履歴",
-    "cpuMemoryDisk": "CPU / メモリ / ディスク",
-    "network": "ネットワーク",
-    "download": "受信",
-    "upload": "送信",
-    "noData": "この期間の履歴データはありません。",
-    "custom": "カスタム",
-    "to": "～",
-    "apply": "適用",
-    "viewHistory": "履歴を表示"
-  },
-  "hosts": {
-    "tabHostMetrics": "ホストメトリクス",
-    "metricsCollectionLabel": "メトリクス収集",
-    "enableMetricsLabel": "メトリクスを有効にする",
-    "enableMetricsDesc": "このホストから CPU、RAM、ディスクなどのメトリクスを収集します",
-    "useGlobalMetrics": "グローバル間隔を使用する",
-    "useGlobalMetricsDesc": "サーバー全体のメトリクス収集間隔で上書きします",
-    "metricsIntervalS": "メトリクス間隔 (秒)",
-    "metricsIntervalDesc2": "メトリクススナップショットの間隔 (秒)",
-    "excludedMountsLabel": "除外されるマウント",
-    "monitoredMountsLabel": "カスタム監視パス",
-    "monitoredMountsDesc": "/config などのバインドマウントされた Home Assistant パスを含め、個別のマウントとして公開されていないパスを追加します。",
-    "monitoredMountPathPlaceholder": "パス（/config、/mnt/data）",
-    "monitoredMountLabelPlaceholder": "ラベル（任意）",
-    "addMonitoredMount": "パスを追加",
-    "excludedMountsDesc": "このホストのディスク使用量とアラートから、特定のマウントポイントまたはファイルシステムの種類（例：NFS、CIFS）を非表示にします。",
-    "excludedMountsPlaceholder": "マウントパス（/mnt/nas）またはファイルシステムの種類（nfs、cifs）",
-    "excludedMountsEmpty": "マウントポイントは除外されません。検出されたすべてのファイルシステムが表示されます。",
-    "addExcludedMount": "追加",
-    "visibleWidgets": "表示するウィジェット",
-    "widgetsMovedToHostMetrics": "カードは、ホストメトリクスタブで直接追加、配置、サイズ変更できるようになりました。このホストのホストメトリクスを開き、カスタマイズを使用して表示するカードを選択してください。",
-    "hostNotFound": "ホストが見つかりません",
-    "loadingHost": "ホストを読み込み中..."
-  },
-  "onboarding": {
-    "feature_metrics": "指標とアラート",
-    "feature_metrics_desc": "CPU、メモリ、ディスクの使用状況を長期的に監視し、異常が発生した際にアラートを受け取ることができます。"
-  },
-  "admin": {
-    "metricsHistoryRetention": "メトリクス履歴保持期間",
-    "metricsHistoryRetentionRange": "1〜90日",
-    "days": "日"
-  },
-  "homepage": {
-    "noData": "利用可能なデータはありません",
-    "showCurrentValue": "現在の値を表示",
-    "chartMetric": "メトリック",
-    "metricRange": "範囲",
-    "host": "ホスト",
-    "loading": "読み込み中...",
-    "metricCpu": "CPU",
-    "metricDisk": "ディスク",
-    "metricHostname": "ホスト名",
-    "metricKernel": "カーネル",
-    "metricMemory": "メモリ",
-    "metricNetwork": "ネットワーク",
-    "metricOs": "OS",
-    "metricProcesses": "プロセス",
-    "metricProcessesRunning": "実行中",
-    "metricProcessesTotal": "合計",
-    "metricUptime": "稼働時間",
-    "metricsNotAvailable": "メトリクスは利用できません",
-    "noHostSelected": "ホストが選択されていません",
-    "selectHost": "ホストを選択..."
-  },
-  "terminalStatus": {
-    "unavailable": "ライブ統計は利用できません"
-  },
-  "dashboard": {
-    "cpu": "CPU",
-    "ram": "RAM"
-  },
-  "dashboardTab": {
-    "disk": "ディスク"
-  },
-  "terminal": {
-    "connected": "接続中"
-  },
-  "permissions": {
-    "use": {
-      "title": "ホストメトリクスを使用する",
-      "description": "アクセス可能なホストに対して、ホストのメトリクスを表示したり、ホストマネージャ（サービス、パッケージ、ファイアウォールなど）を使用したりできます。"
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "測定間隔（秒）",
-        "description": "ホストが独自の間隔を設定しない限り、閲覧対象のホストがサンプリングされる頻度。"
-      },
-      "historyRetentionDays": {
-        "label": "履歴保持期間（日数）",
-        "description": "履歴チャートのメトリクスサンプルはどのくらいの期間保持されますか。"
-      },
-      "enabledForNewHosts": {
-        "label": "新規ホスト向けのメトリクスが有効になっています",
-        "description": "新しいホストがメトリクス収集を有効にした状態で起動するかどうか。"
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "温度単位",
-        "description": "ホストメトリクスにおける温度の表示方法。",
-        "celsius": "摂氏",
-        "fahrenheit": "華氏"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "指標を収集する"
-      },
-      "metricsInterval": {
-        "label": "測定間隔（秒）"
-      },
-      "enabledWidgets": {
-        "label": "有効なウィジェット"
-      },
-      "excludedMounts": {
-        "label": "除外されたマウント"
-      },
-      "monitoredMounts": {
-        "label": "監視対象経路"
-      }
-    }
-  },
-  "plugin": {
-    "name": "ホストメトリクス"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/ko_KR.json b/plugins/host-metrics/locales/translated/ko_KR.json
deleted file mode 100644
index edaf4a551..000000000
--- a/plugins/host-metrics/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "호스트 메트릭"
-  },
-  "hostMetrics": {
-    "cpu": "CPU",
-    "memory": "메모리",
-    "disk": "디스크",
-    "network": "네트워크",
-    "uptime": "업타임",
-    "processes": "프로세스",
-    "available": "사용 가능",
-    "free": "여유",
-    "connecting": "연결 중...",
-    "connectionFailed": "서버 연결 실패",
-    "naCpus": "N/A CPU",
-    "cpuCores_one": "{{count}} 코어",
-    "cpuCores_other": "{{count}} 코어",
-    "cpuUsage": "CPU 사용률",
-    "memoryUsage": "메모리 사용률",
-    "diskUsage": "디스크 사용률",
-    "selectFilesystem": "파일 시스템을 선택하세요",
-    "temperature": "온도",
-    "highestTemperature": "최고 온도",
-    "primaryTemperatureSensor": "1차 센서",
-    "gpu": {
-      "title": "GPU",
-      "noDevice": "NVIDIA GPU가 감지되지 않았습니다. NVIDIA 드라이버를 설치하세요(드라이버에는 nvidia-smi가 포함되어 있습니다). 그러면 GPU 메트릭을 확인할 수 있습니다.",
-      "driver": "드라이버 {{version}}",
-      "utilization": "이용",
-      "memory": "VRAM",
-      "temperature": "임시",
-      "power": "힘",
-      "fan": "팬",
-      "processes": "GPU 프로세스",
-      "noProcesses": "GPU를 사용하는 프로세스가 없습니다."
-    },
-    "failedToFetchHostConfig": "호스트 구성 가져오기 실패",
-    "serverOffline": "서버 오프라인",
-    "cannotFetchMetrics": "오프라인 서버에서 메트릭 가져오기 불가",
-    "totpFailed": "TOTP 인증 실패",
-    "noneAuthNotSupported": "호스트 메트릭에서 'none' 인증 유형을 지원하지 않습니다.",
-    "noHostSelected": "호스트가 선택되지 않았습니다.",
-    "load": "부하",
-    "systemInfo": "시스템 정보",
-    "hostname": "호스트 이름",
-    "operatingSystem": "운영 체제",
-    "kernel": "커널",
-    "seconds": "초",
-    "networkInterfaces": "네트워크 인터페이스",
-    "noInterfacesFound": "네트워크 인터페이스를 찾을 수 없습니다.",
-    "noProcessesFound": "프로세스를 찾을 수 없습니다.",
-    "processesTotal": "전체",
-    "processesRunning": "실행 중",
-    "loginStats": "SSH 로그인 통계",
-    "noRecentLoginData": "최근 로그인 데이터가 없습니다.",
-    "ports": {
-      "title": "수신 대기 포트",
-      "protocol": "프로토콜",
-      "port": "포트",
-      "address": "주소",
-      "process": "프로세스",
-      "search": "포트 검색...",
-      "allProtocols": "전체",
-      "noData": "수신 대기 포트 데이터가 없습니다."
-    },
-    "firewall": {
-      "title": "방화벽",
-      "inactive": "비활성",
-      "policy": "정책",
-      "rules": "규칙",
-      "noRules": "이 체인에 규칙이 없습니다.",
-      "noData": "방화벽 데이터를 사용할 수 없습니다.",
-      "action": "동작",
-      "protocol": "프로토콜",
-      "port": "포트",
-      "source": "소스",
-      "anywhere": "모든 곳",
-      "chains": "체인"
-    },
-    "loadAvg": "로드 평균",
-    "swap": "스왑",
-    "architecture": "아키텍처",
-    "refresh": "새로 고침",
-    "retry": "재시도",
-    "customize": "레이아웃 사용자 정의",
-    "reset": "초기화",
-    "tabLive": "실시간",
-    "editModeInstructions": "카드를 드래그하여 재배열하고, 아래쪽 가장자리를 드래그하여 크기를 조정하며, 너비 버튼을 사용해 카드의 가로 폭을 변경하세요. 아래에서 카드를 추가하거나 제거할 수 있습니다.",
-    "managers": {
-      "services": "서비스",
-      "processInspector": "프로세스 검사기",
-      "logViewer": "로그 뷰어",
-      "cron": "크론 작업",
-      "packages": "패키지",
-      "ssl": "SSL 인증서",
-      "firewall": "방화벽",
-      "users": "사용자 및 권한",
-      "healthCheck": "상태 검사",
-      "diskBreakdown": "디스크 분석",
-      "systemdTimers": "타이머",
-      "topMemory": "메모리 사용량 상위",
-      "noData": "데이터 없음",
-      "sudoHint": "호스트 편집기에서 이 호스트의 sudo 암호를 설정하여 권한이 필요한 작업을 활성화하세요.",
-      "filter": "필터...",
-      "start": "시작",
-      "stop": "중지",
-      "restart": "재시작",
-      "actionDone": "{{name}} 업데이트됨",
-      "actionFailed": "작업 실패",
-      "signalSent": "PID {{pid}}에 시그널 전송됨",
-      "killHint": "클릭: 종료 (SIGTERM). 마우스 오른쪽 클릭: 강제 종료 (SIGKILL).",
-      "working": "작업 중...",
-      "update": "업데이트",
-      "upgradeAll": "모두 업그레이드",
-      "allUpToDate": "모든 항목이 최신 상태입니다",
-      "save": "저장",
-      "command": "명령",
-      "enabled": "활성화됨",
-      "cronSaved": "Crontab이 업데이트되었습니다",
-      "clients": "클라이언트",
-      "dryRun": "테스트 실행",
-      "renew": "갱신",
-      "noAcmeClient": "이 호스트에 ACME 클라이언트(certbot 또는 acme.sh)가 없습니다.",
-      "addInputRule": "INPUT 규칙 추가",
-      "firewallWarning": "변경 사항은 저장하기 전까지 런타임에만 적용됩니다. 접근이 차단되지 않도록 주의하세요.",
-      "ruleApplied": "규칙이 적용되었습니다",
-      "invalidPort": "유효한 포트(1-65535)를 입력하세요",
-      "newUsername": "새 사용자 이름",
-      "addUser": "추가",
-      "deleteUser": "사용자 삭제",
-      "noHealthChecks": "아직 상태 점검이 구성되지 않았습니다.",
-      "follow": "따라가기",
-      "noLogData": "로그 출력이 없습니다.",
-      "tree": "트리",
-      "enableDisable": "부팅 시 활성화/비활성화",
-      "grantSudo": "sudo 권한 부여",
-      "revokeSudo": "sudo 권한 회수",
-      "sslIssueCert": "인증서 발급",
-      "sslExpired": "만료됨",
-      "sslInDays": "{{days}}일 후",
-      "sslNeedDomain": "최소 하나의 도메인을 입력하세요",
-      "sslIssued": "인증서가 발급되었습니다",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (독립형)",
-      "sslHttpWebroot": "HTTP (웹루트)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "DNS 공급자 (예: cloudflare)",
-      "sslIssueHint": "DNS 공급자 자격 증명이 호스트에 이미 구성되어 있어야 합니다.",
-      "sslRevoke": "인증서 폐기",
-      "sslRevoked": "인증서가 폐기되었습니다",
-      "sslRevokeConfirm": "인증서 \"{{name}}\"을(를) 폐기하고 제거하시겠습니까? 이 작업은 취소할 수 없습니다.",
-      "healthRun": "실행",
-      "healthName": "이름",
-      "healthTarget": "호스트 / 주소",
-      "healthAddCheck": "검사 추가",
-      "healthSaved": "상태 검사가 저장되었습니다",
-      "healthMissingFields": "각 검사에는 이름과 대상이 필요합니다",
-      "logFile": "파일",
-      "logUnit": "유닛",
-      "logCustomPath": "/var/log 아래의 사용자 지정 경로 (선택 사항)",
-      "logGrep": "줄 필터...",
-      "firewallPersist": "규칙 영구 저장",
-      "firewallPersisted": "방화벽 규칙이 영구 저장되었습니다",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "이 호스트에 WireGuard가 설치되어 있지 않습니다",
-      "wgNoInterfaces": "구성된 WireGuard 인터페이스가 없습니다",
-      "wgInterfaceUp": "올리기",
-      "wgInterfaceDown": "내리기",
-      "wgBringingUp": "{{name}} 올리는 중...",
-      "wgBringingDown": "{{name}} 내리는 중...",
-      "wgInterfaceUpDone": "{{name}}이(가) 올라왔습니다",
-      "wgInterfaceDownDone": "{{name}}이(가) 내려갔습니다",
-      "wgListenPort": "포트",
-      "wgPublicKey": "공개 키",
-      "wgEndpoint": "엔드포인트",
-      "wgAllowedIPs": "허용된 IP",
-      "wgLastHandshake": "마지막 핸드셰이크",
-      "wgHandshakeNever": "없음",
-      "wgTransfer": "전송",
-      "wgNoPeers": "동료 없음"
-    }
-  },
-  "metricsHistory": {
-    "title": "메트릭 기록",
-    "historySuffix": "기록",
-    "cpuMemoryDisk": "CPU / 메모리 / 디스크",
-    "network": "네트워크",
-    "download": "RX",
-    "upload": "TX",
-    "noData": "이 시간 범위에 대한 기록 데이터가 없습니다.",
-    "custom": "사용자 지정",
-    "to": "~",
-    "apply": "적용",
-    "viewHistory": "기록 보기"
-  },
-  "hosts": {
-    "tabHostMetrics": "호스트 메트릭",
-    "metricsCollectionLabel": "메트릭 수집",
-    "enableMetricsLabel": "메트릭 활성화",
-    "enableMetricsDesc": "이 호스트에서 CPU, RAM, 디스크 및 기타 메트릭을 수집합니다.",
-    "useGlobalMetrics": "전역 간격 사용",
-    "useGlobalMetricsDesc": "서버 전체 메트릭 간격으로 재정의합니다.",
-    "metricsIntervalS": "메트릭 간격(초)",
-    "metricsIntervalDesc2": "메트릭 스냅샷 간격(초)",
-    "excludedMountsLabel": "제외된 마운트",
-    "monitoredMountsLabel": "사용자 지정 모니터링 경로",
-    "monitoredMountsDesc": "/config와 같이 바인드 마운트된 Home Assistant 경로를 포함하여 별도의 마운트로 노출되지 않는 경로를 추가합니다.",
-    "monitoredMountPathPlaceholder": "경로(/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "레이블 (선택 사항)",
-    "addMonitoredMount": "경로를 추가합니다",
-    "excludedMountsDesc": "이 호스트의 디스크 사용량 및 알림에서 특정 마운트 지점 또는 파일 시스템 유형(예: NFS, CIFS)을 숨깁니다.",
-    "excludedMountsPlaceholder": "마운트 경로(/mnt/nas) 또는 파일 시스템 유형(nfs, cifs)",
-    "excludedMountsEmpty": "마운트된 항목을 제외하지 않습니다. 감지된 모든 파일 시스템이 표시됩니다.",
-    "addExcludedMount": "추가",
-    "visibleWidgets": "표시 위젯",
-    "widgetsMovedToHostMetrics": "카드는 이제 호스트 메트릭 탭에서 직접 추가, 정렬 및 크기 조정됩니다. 이 호스트의 호스트 메트릭을 열고 사용자 정의를 사용하여 표시할 카드를 선택하세요.",
-    "hostNotFound": "호스트를 찾을 수 없습니다",
-    "loadingHost": "호스트 로드 중..."
-  },
-  "onboarding": {
-    "feature_metrics": "지표 및 알림",
-    "feature_metrics_desc": "CPU, 메모리 및 디스크 사용량을 시간 경과에 따라 추적하고, 문제가 발생하면 알림을 받으세요."
-  },
-  "admin": {
-    "metricsHistoryRetention": "메트릭 이력 보존 기간",
-    "metricsHistoryRetentionRange": "1~90일",
-    "days": "일"
-  },
-  "homepage": {
-    "noData": "데이터 없음",
-    "showCurrentValue": "현재 값 표시",
-    "chartMetric": "메트릭",
-    "metricRange": "범위",
-    "host": "호스트",
-    "loading": "로딩 중...",
-    "metricCpu": "CPU",
-    "metricDisk": "디스크",
-    "metricHostname": "호스트명",
-    "metricKernel": "커널",
-    "metricMemory": "메모리",
-    "metricNetwork": "네트워크",
-    "metricOs": "OS",
-    "metricProcesses": "프로세스",
-    "metricProcessesRunning": "실행 중",
-    "metricProcessesTotal": "전체",
-    "metricUptime": "업타임",
-    "metricsNotAvailable": "메트릭을 사용할 수 없습니다",
-    "noHostSelected": "선택된 호스트 없음",
-    "selectHost": "호스트 선택..."
-  },
-  "terminalStatus": {
-    "unavailable": "실시간 통계를 사용할 수 없습니다."
-  },
-  "dashboard": {
-    "cpu": "CPU",
-    "ram": "RAM"
-  },
-  "dashboardTab": {
-    "disk": "디스크"
-  },
-  "terminal": {
-    "connected": "연결됨"
-  },
-  "permissions": {
-    "use": {
-      "title": "호스트 메트릭 사용",
-      "description": "접속 가능한 호스트에서 호스트 지표를 확인하고 호스트 관리자(서비스, 패키지, 방화벽 등)를 사용하세요."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "측정 간격(초)",
-        "description": "호스트가 자체 간격을 설정하지 않는 한, 보고 있는 호스트를 샘플링하는 빈도입니다."
-      },
-      "historyRetentionDays": {
-        "label": "기록 보존 기간(일)",
-        "description": "기록 차트를 위해 측정값 샘플을 보관하는 기간은 얼마나 되나요?"
-      },
-      "enabledForNewHosts": {
-        "label": "새 호스트에 대한 메트릭 활성화",
-        "description": "새 호스트가 메트릭 수집 기능을 켠 상태로 시작하는지 여부."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "온도 단위",
-        "description": "호스트 메트릭스에서 온도가 표시되는 방식입니다.",
-        "celsius": "섭씨",
-        "fahrenheit": "화씨"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "측정 지표 수집"
-      },
-      "metricsInterval": {
-        "label": "측정 간격(초)"
-      },
-      "enabledWidgets": {
-        "label": "활성화된 위젯"
-      },
-      "excludedMounts": {
-        "label": "제외된 마운트"
-      },
-      "monitoredMounts": {
-        "label": "모니터링되는 경로"
-      }
-    }
-  },
-  "plugin": {
-    "name": "호스트 메트릭"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/nl_NL.json b/plugins/host-metrics/locales/translated/nl_NL.json
deleted file mode 100644
index 278b886ff..000000000
--- a/plugins/host-metrics/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Hoststatistieken"
-  },
-  "hostMetrics": {
-    "cpu": "CPU",
-    "memory": "Geheugen",
-    "disk": "Schijf",
-    "network": "Netwerk",
-    "uptime": "Beschikbaarheid",
-    "processes": "Processen",
-    "available": "Beschikbaar",
-    "free": "Vrij",
-    "connecting": "Verbinden...",
-    "connectionFailed": "Verbinding met de server mislukt.",
-    "naCpus": "Niet van toepassing CPU('s)",
-    "cpuCores_one": "{{count}} Kern",
-    "cpuCores_other": "{{count}} Kernen",
-    "cpuUsage": "CPU-gebruik",
-    "memoryUsage": "Geheugengebruik",
-    "diskUsage": "Schijfgebruik",
-    "selectFilesystem": "Selecteer bestandssysteem",
-    "temperature": "Temperatuur",
-    "highestTemperature": "Hoogste temperatuur",
-    "primaryTemperatureSensor": "Primaire sensor",
-    "gpu": {
-      "title": "GPU",
-      "noDevice": "Geen NVIDIA GPU gedetecteerd. Installeer het NVIDIA-stuurprogramma (dit levert nvidia-smi) om GPU-statistieken te bekijken.",
-      "driver": "Bestuurder {{version}}",
-      "utilization": "Gebruik",
-      "memory": "VRAM",
-      "temperature": "Temp",
-      "power": "Stroom",
-      "fan": "Fan",
-      "processes": "GPU-processen",
-      "noProcesses": "Er zijn geen processen die de GPU gebruiken."
-    },
-    "failedToFetchHostConfig": "Het ophalen van de hostconfiguratie is mislukt.",
-    "serverOffline": "Server offline",
-    "cannotFetchMetrics": "Het is niet mogelijk om meetgegevens op te halen van een offline server.",
-    "totpFailed": "TOTP-verificatie mislukt",
-    "noneAuthNotSupported": "Host Metrics ondersteunt geen authenticatietype 'none'.",
-    "noHostSelected": "Geen host geselecteerd",
-    "load": "Laden",
-    "systemInfo": "Systeeminformatie",
-    "hostname": "Hostnaam",
-    "operatingSystem": "Besturingssysteem",
-    "kernel": "Kernel",
-    "seconds": "seconden",
-    "networkInterfaces": "Netwerkinterfaces",
-    "noInterfacesFound": "Geen netwerkinterfaces gevonden",
-    "noProcessesFound": "Geen processen gevonden",
-    "processesTotal": "totaal",
-    "processesRunning": "rennen",
-    "loginStats": "SSH-aanmeldingsstatistieken",
-    "noRecentLoginData": "Geen recente inloggegevens",
-    "ports": {
-      "title": "Luisterpoorten",
-      "protocol": "Protocol",
-      "port": "Haven",
-      "address": "Adres",
-      "process": "Proces",
-      "search": "Poorten doorzoeken...",
-      "allProtocols": "Alle",
-      "noData": "Geen gegevens over luisterpoorten"
-    },
-    "firewall": {
-      "title": "Firewall",
-      "inactive": "Inactief",
-      "policy": "Beleid",
-      "rules": "regels",
-      "noRules": "Er zijn geen regels in deze keten.",
-      "noData": "Geen firewallgegevens beschikbaar",
-      "action": "Actie",
-      "protocol": "Proto",
-      "port": "Haven",
-      "source": "Bron",
-      "anywhere": "Overal",
-      "chains": "kettingen"
-    },
-    "loadAvg": "Gemiddelde belasting",
-    "swap": "Ruil",
-    "architecture": "Architectuur",
-    "refresh": "Vernieuwen",
-    "retry": "Opnieuw proberen",
-    "customize": "Lay-out aanpassen",
-    "reset": "Reset",
-    "tabLive": "Live",
-    "editModeInstructions": "Sleep kaarten om ze te herschikken, sleep de onderrand om het formaat aan te passen en gebruik de breedteknop om de afmetingen van een kaart te wijzigen. Voeg hieronder kaarten toe of verwijder ze.",
-    "managers": {
-      "services": "Diensten",
-      "processInspector": "Procesinspecteur",
-      "logViewer": "Logboekviewer",
-      "cron": "Cron Jobs",
-      "packages": "Pakketten",
-      "ssl": "SSL-certificaten",
-      "firewall": "Firewall",
-      "users": "Gebruikers en machtigingen",
-      "healthCheck": "Gezondheidscontroles",
-      "diskBreakdown": "Schijfdefect",
-      "systemdTimers": "Timers",
-      "topMemory": "Top op geheugen",
-      "noData": "Geen gegevens",
-      "sudoHint": "Stel een sudo-wachtwoord in voor deze host in de hosteditor om acties met verhoogde bevoegdheden mogelijk te maken.",
-      "filter": "Filter...",
-      "start": "Begin",
-      "stop": "Stop",
-      "restart": "Opnieuw opstarten",
-      "actionDone": "{{name}} bijgewerkt",
-      "actionFailed": "Actie mislukt",
-      "signalSent": "Signaal verzonden naar PID {{pid}}",
-      "killHint": "Klikken: beëindigen (SIGTERM). Rechtsklikken: geforceerd afsluiten (SIGKILL).",
-      "working": "Bezig met verwerken...",
-      "update": "Update",
-      "upgradeAll": "Upgrade alles",
-      "allUpToDate": "Alles is actueel.",
-      "save": "Redden",
-      "command": "Commando",
-      "enabled": "Ingeschakeld",
-      "cronSaved": "Crontab bijgewerkt",
-      "clients": "Klanten",
-      "dryRun": "Proefloop",
-      "renew": "Vernieuwen",
-      "noAcmeClient": "Er is geen ACME-client (certbot of acme.sh) gevonden op deze host.",
-      "addInputRule": "Voeg een INPUT-regel toe",
-      "firewallWarning": "Wijzigingen zijn alleen tijdens de uitvoering van het programma geldig totdat ze zijn opgeslagen. Pas op dat u uzelf niet buitensluit.",
-      "ruleApplied": "Toegepaste regel",
-      "invalidPort": "Voer een geldig poortnummer in (1-65535)",
-      "newUsername": "Nieuwe gebruikersnaam",
-      "addUser": "Toevoegen",
-      "deleteUser": "Gebruiker verwijderen",
-      "noHealthChecks": "Er zijn nog geen gezondheidscontroles geconfigureerd.",
-      "follow": "Volgen",
-      "noLogData": "Geen loguitvoer.",
-      "tree": "Boom",
-      "enableDisable": "In-/uitschakelen bij het opstarten",
-      "grantSudo": "Verleen sudo",
-      "revokeSudo": "Sudo intrekken",
-      "sslIssueCert": "Certificaat uitreiken",
-      "sslExpired": "Verlopen",
-      "sslInDays": "in {{days}}d",
-      "sslNeedDomain": "Voer ten minste één domein in",
-      "sslIssued": "Certificaat afgegeven",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (zelfstandig)",
-      "sslHttpWebroot": "HTTP (webroot)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "DNS-provider (bijv. Cloudflare)",
-      "sslIssueHint": "De inloggegevens van de DNS-provider moeten al op de host geconfigureerd zijn.",
-      "sslRevoke": "Certificaat intrekken",
-      "sslRevoked": "Certificaat ingetrokken",
-      "sslRevokeConfirm": "Het certificaat \"{{name}}\" intrekken en verwijderen? Dit kan niet ongedaan gemaakt worden.",
-      "healthRun": "Loop",
-      "healthName": "Naam",
-      "healthTarget": "Host / adres",
-      "healthAddCheck": "Voeg een controle toe",
-      "healthSaved": "Gezondheidscontroles opgeslagen",
-      "healthMissingFields": "Elke controle heeft een naam en een doel nodig.",
-      "logFile": "Bestand",
-      "logUnit": "Eenheid",
-      "logCustomPath": "Aangepast pad onder /var/log (optioneel)",
-      "logGrep": "Filterlijnen...",
-      "firewallPersist": "Persist-regels",
-      "firewallPersisted": "De firewallregels bleven van kracht.",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "WireGuard is niet geïnstalleerd op deze host.",
-      "wgNoInterfaces": "Er zijn geen WireGuard-interfaces geconfigureerd.",
-      "wgInterfaceUp": "Breng ter sprake",
-      "wgInterfaceDown": "Neerhalen",
-      "wgBringingUp": "{{name}} wordt geladen...",
-      "wgBringingDown": "{{name}} naar beneden halen...",
-      "wgInterfaceUpDone": "{{name}} is up",
-      "wgInterfaceDownDone": "{{name}} is omlaag",
-      "wgListenPort": "Haven",
-      "wgPublicKey": "Openbare sleutel",
-      "wgEndpoint": "Eindpunt",
-      "wgAllowedIPs": "Toegestane IP-adressen",
-      "wgLastHandshake": "Laatste handdruk",
-      "wgHandshakeNever": "Nooit",
-      "wgTransfer": "Overdracht",
-      "wgNoPeers": "Geen gelijken"
-    }
-  },
-  "metricsHistory": {
-    "title": "Statistiekengeschiedenis",
-    "historySuffix": "Geschiedenis",
-    "cpuMemoryDisk": "CPU / Geheugen / Schijf",
-    "network": "Netwerk",
-    "download": "RX",
-    "upload": "TX",
-    "noData": "Er zijn geen historische gegevens beschikbaar voor deze periode.",
-    "custom": "Aangepast",
-    "to": "naar",
-    "apply": "Toepassen",
-    "viewHistory": "Geschiedenis bekijken"
-  },
-  "hosts": {
-    "tabHostMetrics": "Hoststatistieken",
-    "metricsCollectionLabel": "Gegevensverzameling",
-    "enableMetricsLabel": "Statistieken inschakelen",
-    "enableMetricsDesc": "Verzamel gegevens over CPU, RAM, schijfgebruik en andere parameters van deze host.",
-    "useGlobalMetrics": "Gebruik globaal interval",
-    "useGlobalMetricsDesc": "Overschrijf dit met het serverbrede metrische interval.",
-    "metricsIntervalS": "Metriekinterval (s)",
-    "metricsIntervalDesc2": "Seconden tussen momentopnamen van de meetwaarden",
-    "excludedMountsLabel": "Uitgesloten montagesystemen",
-    "monitoredMountsLabel": "Aangepaste bewaakte paden",
-    "monitoredMountsDesc": "Voeg paden toe die niet als aparte mounts worden weergegeven, inclusief bind-mounted Home Assistant-paden zoals /config.",
-    "monitoredMountPathPlaceholder": "Pad (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Label (optioneel)",
-    "addMonitoredMount": "Pad toevoegen",
-    "excludedMountsDesc": "Verberg specifieke koppelpunten of bestandssysteemtypen (bijv. nfs, cifs) voor schijfgebruik en waarschuwingen voor deze host.",
-    "excludedMountsPlaceholder": "Mountpad (/mnt/nas) of bestandssysteemtype (nfs, cifs)",
-    "excludedMountsEmpty": "Geen mounts uitgesloten. Alle gedetecteerde bestandssystemen worden weergegeven.",
-    "addExcludedMount": "Toevoegen",
-    "visibleWidgets": "Zichtbare widgets",
-    "widgetsMovedToHostMetrics": "Kaarten kunnen nu rechtstreeks in het tabblad Hoststatistieken worden toegevoegd, gerangschikt en van formaat worden veranderd. Open Hoststatistieken voor deze host en gebruik Aanpassen om te kiezen welke kaarten worden weergegeven.",
-    "hostNotFound": "Host niet gevonden",
-    "loadingHost": "Host wordt geladen..."
-  },
-  "onboarding": {
-    "feature_metrics": "Statistieken en waarschuwingen",
-    "feature_metrics_desc": "Volg de CPU, het geheugen en de schijf gedurende een bepaalde tijd en ontvang een melding wanneer ze defect raken."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Historische statistieken bewaren",
-    "metricsHistoryRetentionRange": "1 tot 90 dagen",
-    "days": "dagen"
-  },
-  "homepage": {
-    "noData": "Geen gegevens beschikbaar",
-    "showCurrentValue": "Toon huidige waarde",
-    "chartMetric": "Metrisch",
-    "metricRange": "Bereik",
-    "host": "Gastheer",
-    "loading": "Laden...",
-    "metricCpu": "CPU",
-    "metricDisk": "Schijf",
-    "metricHostname": "Hostnaam",
-    "metricKernel": "Kernel",
-    "metricMemory": "Geheugen",
-    "metricNetwork": "Netwerk",
-    "metricOs": "OS",
-    "metricProcesses": "Processen",
-    "metricProcessesRunning": "rennen",
-    "metricProcessesTotal": "totaal",
-    "metricUptime": "Beschikbaarheid",
-    "metricsNotAvailable": "Gegevens niet beschikbaar",
-    "noHostSelected": "Geen host geselecteerd",
-    "selectHost": "Selecteer een host..."
-  },
-  "terminalStatus": {
-    "unavailable": "Live statistieken niet beschikbaar"
-  },
-  "dashboard": {
-    "cpu": "CPU",
-    "ram": "RAM"
-  },
-  "dashboardTab": {
-    "disk": "Schijf"
-  },
-  "terminal": {
-    "connected": "Aangesloten"
-  },
-  "permissions": {
-    "use": {
-      "title": "Gebruik hoststatistieken",
-      "description": "Bekijk hoststatistieken en gebruik de hostmanagers (services, pakketten, firewall en meer) op hosts die u kunt bereiken."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Metingen interval (seconden)",
-        "description": "De frequentie waarmee een bekeken host wordt bemonsterd, tenzij de host zelf een interval instelt."
-      },
-      "historyRetentionDays": {
-        "label": "Bewaartermijn van de gegevens (dagen)",
-        "description": "Hoe lang worden meetwaarden bewaard voor de historische grafieken?"
-      },
-      "enabledForNewHosts": {
-        "label": "Statistieken ingeschakeld voor nieuwe hosts",
-        "description": "Of nieuwe hosts starten met ingeschakelde metrische gegevensverzameling."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Temperatuureenheid",
-        "description": "Hoe temperaturen worden weergegeven in Host Metrics.",
-        "celsius": "Celsius",
-        "fahrenheit": "Fahrenheit"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Verzamel meetgegevens"
-      },
-      "metricsInterval": {
-        "label": "Metingen interval (seconden)"
-      },
-      "enabledWidgets": {
-        "label": "Ingeschakelde widgets"
-      },
-      "excludedMounts": {
-        "label": "Uitgesloten montagepunten"
-      },
-      "monitoredMounts": {
-        "label": "Bewaakte paden"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Hoststatistieken"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/no_NO.json b/plugins/host-metrics/locales/translated/no_NO.json
deleted file mode 100644
index 70bf887b4..000000000
--- a/plugins/host-metrics/locales/translated/no_NO.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Vertsmålinger"
-  },
-  "hostMetrics": {
-    "cpu": "CPU",
-    "memory": "Minne",
-    "disk": "Disk",
-    "network": "Nettverk",
-    "uptime": "Oppetid",
-    "processes": "Prosesser",
-    "available": "Tilgjengelig",
-    "free": "Ledig",
-    "connecting": "Kobler til...",
-    "connectionFailed": "Kunne ikke koble til serveren",
-    "naCpus": "N/A CPU(er)",
-    "cpuCores_one": "{{count}} Kjerne",
-    "cpuCores_other": "{{count}} Kjerner",
-    "cpuUsage": "CPU-bruk",
-    "memoryUsage": "Minnebruk",
-    "diskUsage": "Diskbruk",
-    "selectFilesystem": "Velg filsystem",
-    "temperature": "Temperatur",
-    "highestTemperature": "Høyeste temperatur",
-    "primaryTemperatureSensor": "Primærsensor",
-    "gpu": {
-      "title": "GPU",
-      "noDevice": "Ingen NVIDIA GPU funnet. Installer NVIDIA-driveren (den inneholder nvidia-smi) for å se GPU-målinger.",
-      "driver": "Sjåfør {{version}}",
-      "utilization": "Utnyttelse",
-      "memory": "VRAM",
-      "temperature": "Temp.",
-      "power": "Makt",
-      "fan": "Fan",
-      "processes": "GPU-prosesser",
-      "noProcesses": "Ingen prosesser bruker GPU-en"
-    },
-    "failedToFetchHostConfig": "Kunne ikke hente vertskonfigurasjon",
-    "serverOffline": "Server frakoblet",
-    "cannotFetchMetrics": "Kan ikke hente målinger fra frakoblet server",
-    "totpFailed": "TOTP-verifisering mislyktes",
-    "noneAuthNotSupported": "Host Metrics støtter ikke autentiseringstypen «ingen».",
-    "noHostSelected": "Ingen vert valgt",
-    "load": "Last",
-    "systemInfo": "Systeminformasjon",
-    "hostname": "Vertsnavn",
-    "operatingSystem": "Operativsystem",
-    "kernel": "Kjerne",
-    "seconds": "sekunder",
-    "networkInterfaces": "Nettverksgrensesnitt",
-    "noInterfacesFound": "Fant ingen nettverksgrensesnitt",
-    "noProcessesFound": "Fant ingen prosesser",
-    "processesTotal": "totalt",
-    "processesRunning": "kjører",
-    "loginStats": "SSH-påloggingsstatistikk",
-    "noRecentLoginData": "Ingen nylige påloggingsdata",
-    "ports": {
-      "title": "Lytteporter",
-      "protocol": "Protokoll",
-      "port": "Havn",
-      "address": "Adresse",
-      "process": "Behandle",
-      "search": "Søk etter porter...",
-      "allProtocols": "Alle",
-      "noData": "Ingen data om lytteporter"
-    },
-    "firewall": {
-      "title": "Brannmur",
-      "inactive": "Inaktiv",
-      "policy": "Politikk",
-      "rules": "regler",
-      "noRules": "Ingen regler i denne kjeden",
-      "noData": "Ingen brannmurdata tilgjengelig",
-      "action": "Handling",
-      "protocol": "Proto",
-      "port": "Havn",
-      "source": "Kilde",
-      "anywhere": "Hvor som helst",
-      "chains": "kjeder"
-    },
-    "loadAvg": "Last inn gjennomsnitt",
-    "swap": "Bytte",
-    "architecture": "Arkitektur",
-    "refresh": "Oppdater",
-    "retry": "Prøv igjen",
-    "customize": "Tilpass oppsettet",
-    "reset": "Tilbakestill",
-    "tabLive": "Bo",
-    "editModeInstructions": "Dra kort for å omorganisere, dra i den nederste kanten for å endre størrelsen, og bruk breddeknappen for å endre kortets rekkevidde. Legg til eller fjern kort nedenfor.",
-    "managers": {
-      "services": "Tjenester",
-      "processInspector": "Prosessinspektør",
-      "logViewer": "Loggviser",
-      "cron": "Cron-jobber",
-      "packages": "Pakker",
-      "ssl": "SSL-sertifikater",
-      "firewall": "Brannmur",
-      "users": "Brukere og tillatelser",
-      "healthCheck": "Helsesjekker",
-      "diskBreakdown": "Disknedbrytning",
-      "systemdTimers": "Tidtakere",
-      "topMemory": "Topp etter minne",
-      "noData": "Ingen data",
-      "sudoHint": "Angi et sudo-passord for denne verten i vertredigeringsprogrammet for å aktivere privilegerte handlinger.",
-      "filter": "Filter...",
-      "start": "Start",
-      "stop": "Stopp",
-      "restart": "Start på nytt",
-      "actionDone": "{{name}} oppdatert",
-      "actionFailed": "Handlingen mislyktes",
-      "signalSent": "Signal sendt til PID {{pid}}",
-      "killHint": "Klikk: avslutt (SIGTERM). Høyreklikk: tvungen avslutning (SIGKILL).",
-      "working": "Arbeider...",
-      "update": "Oppdatering",
-      "upgradeAll": "Oppgrader alle",
-      "allUpToDate": "Alt er oppdatert",
-      "save": "Lagre",
-      "command": "Kommando",
-      "enabled": "Aktivert",
-      "cronSaved": "Crontab oppdatert",
-      "clients": "Klienter",
-      "dryRun": "Tørrløp",
-      "renew": "Fornye",
-      "noAcmeClient": "Ingen ACME-klient (certbot eller acme.sh) funnet på denne verten.",
-      "addInputRule": "Legg til INPUT-regel",
-      "firewallWarning": "Endringene gjelder kun for kjøring inntil de lagres. Vær forsiktig så du ikke låser deg ute.",
-      "ruleApplied": "Regel brukt",
-      "invalidPort": "Skriv inn en gyldig port (1-65535)",
-      "newUsername": "Nytt brukernavn",
-      "addUser": "Legg til",
-      "deleteUser": "Slett bruker",
-      "noHealthChecks": "Ingen helsesjekker er konfigurert ennå.",
-      "follow": "Følge",
-      "noLogData": "Ingen loggutgang.",
-      "tree": "Tre",
-      "enableDisable": "Aktiver/deaktiver ved oppstart",
-      "grantSudo": "Gi sudo",
-      "revokeSudo": "Tilbakekalle sudo",
-      "sslIssueCert": "Utsted sertifikat",
-      "sslExpired": "Utløpt",
-      "sslInDays": "i {{days}}d",
-      "sslNeedDomain": "Angi minst ett domene",
-      "sslIssued": "Sertifikat utstedt",
-      "sslDomainsPlaceholder": "eksempel.com, www.eksempel.com",
-      "sslHttpStandalone": "HTTP (frittstående)",
-      "sslHttpWebroot": "HTTP (nettrot)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "DNS-leverandør (f.eks. Cloudflare)",
-      "sslIssueHint": "DNS-leverandørens påloggingsinformasjon må allerede være konfigurert på verten.",
-      "sslRevoke": "Tilbakekalle sertifikat",
-      "sslRevoked": "Sertifikatet er tilbakekalt",
-      "sslRevokeConfirm": "Tilbakekalle og fjerne sertifikatet «{{name}}»? Dette kan ikke angres.",
-      "healthRun": "Kjør",
-      "healthName": "Navn",
-      "healthTarget": "Vert / adresse",
-      "healthAddCheck": "Legg til sjekk",
-      "healthSaved": "Helsesjekker lagret",
-      "healthMissingFields": "Hver sjekk trenger et navn og et mål",
-      "logFile": "Fil",
-      "logUnit": "Enhet",
-      "logCustomPath": "Tilpasset sti under /var/log (valgfritt)",
-      "logGrep": "Filtrer linjer...",
-      "firewallPersist": "Vedvarende regler",
-      "firewallPersisted": "Brannmurregler beholdt",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "WireGuard er ikke installert på denne verten",
-      "wgNoInterfaces": "Ingen WireGuard-grensesnitt konfigurert",
-      "wgInterfaceUp": "Ta opp",
-      "wgInterfaceDown": "Ta ned",
-      "wgBringingUp": "Tar opp {{name}}...",
-      "wgBringingDown": "Å bringe {{name}} ned...",
-      "wgInterfaceUpDone": "{{name}} er oppe",
-      "wgInterfaceDownDone": "{{name}} er nede",
-      "wgListenPort": "Havn",
-      "wgPublicKey": "Offentlig nøkkel",
-      "wgEndpoint": "Endepunkt",
-      "wgAllowedIPs": "Tillatte IP-adresser",
-      "wgLastHandshake": "Siste håndtrykk",
-      "wgHandshakeNever": "Aldri",
-      "wgTransfer": "Overføre",
-      "wgNoPeers": "Ingen jevnaldrende"
-    }
-  },
-  "metricsHistory": {
-    "title": "Metrikkhistorikk",
-    "historySuffix": "Historikk",
-    "cpuMemoryDisk": "CPU / Minne / Disk",
-    "network": "Nettverk",
-    "download": "RX",
-    "upload": "TX",
-    "noData": "Ingen historikkdata tilgjengelig for denne tidsperioden.",
-    "custom": "Skikk",
-    "to": "til",
-    "apply": "Søke",
-    "viewHistory": "Vis historikk"
-  },
-  "hosts": {
-    "tabHostMetrics": "Vertsmålinger",
-    "metricsCollectionLabel": "Metrikksamling",
-    "enableMetricsLabel": "Aktiver målinger",
-    "enableMetricsDesc": "Samle inn CPU-, RAM-, disk- og andre målinger fra denne verten",
-    "useGlobalMetrics": "Bruk globalt intervall",
-    "useGlobalMetricsDesc": "Overstyr med det serveromfattende måleintervallet",
-    "metricsIntervalS": "Måleintervall (s)",
-    "metricsIntervalDesc2": "Sekunder mellom målebilder",
-    "excludedMountsLabel": "Ekskluderte fester",
-    "monitoredMountsLabel": "Tilpassede overvåkede stier",
-    "monitoredMountsDesc": "Legg til stier som ikke er eksponert som separate monteringer, inkludert bindingsmonterte Home Assistant-stier som /config.",
-    "monitoredMountPathPlaceholder": "Sti (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Etikett (valgfritt)",
-    "addMonitoredMount": "Legg til sti",
-    "excludedMountsDesc": "Skjul spesifikke monteringspunkter eller filsystemtyper (f.eks. nfs, cifs) fra diskbruk og varsler for denne verten.",
-    "excludedMountsPlaceholder": "Monteringssti (/mnt/nas) eller filsystemtype (nfs, cifs)",
-    "excludedMountsEmpty": "Ingen monteringer er utelukket. Alle oppdagede filsystemer vises.",
-    "addExcludedMount": "Legg til",
-    "visibleWidgets": "Synlige widgeter",
-    "widgetsMovedToHostMetrics": "Kort legges nå til, arrangeres og endres i størrelse direkte i fanen Vertsmålinger. Åpne Vertsmålinger for denne verten og bruk Tilpass for å velge hvilke kort som vises.",
-    "hostNotFound": "Verten ble ikke funnet",
-    "loadingHost": "Laster inn vert ..."
-  },
-  "onboarding": {
-    "feature_metrics": "Målinger og varsler",
-    "feature_metrics_desc": "Spor CPU, minne og disk over tid, og bli varslet når de blir dårlige."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Oppbevaring av metrikkhistorikk",
-    "metricsHistoryRetentionRange": "1 til 90 dager",
-    "days": "dager"
-  },
-  "homepage": {
-    "noData": "Ingen data tilgjengelig",
-    "showCurrentValue": "Vis gjeldende verdi",
-    "chartMetric": "Metrisk",
-    "metricRange": "Spekter",
-    "host": "Vert",
-    "loading": "Laster...",
-    "metricCpu": "CPU",
-    "metricDisk": "Disk",
-    "metricHostname": "Vertsnavn",
-    "metricKernel": "Kjerne",
-    "metricMemory": "Minne",
-    "metricNetwork": "Nettverk",
-    "metricOs": "OS",
-    "metricProcesses": "Prosesser",
-    "metricProcessesRunning": "kjører",
-    "metricProcessesTotal": "totalt",
-    "metricUptime": "Oppetid",
-    "metricsNotAvailable": "Målinger er ikke tilgjengelige",
-    "noHostSelected": "Ingen vert valgt",
-    "selectHost": "Velg en vert..."
-  },
-  "terminalStatus": {
-    "unavailable": "Livestatistikk er ikke tilgjengelig"
-  },
-  "dashboard": {
-    "cpu": "CPU",
-    "ram": "VÆR"
-  },
-  "dashboardTab": {
-    "disk": "Disk"
-  },
-  "terminal": {
-    "connected": "Tilkoblet"
-  },
-  "permissions": {
-    "use": {
-      "title": "Bruk vertsmålinger",
-      "description": "Se vertsmålinger og bruk vertsadministratorene (tjenester, pakker, brannmur og mer) på verter du kan nå."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Måleintervall (sekunder)",
-        "description": "Hvor ofte en vert som vises samples, med mindre verten angir sitt eget intervall."
-      },
-      "historyRetentionDays": {
-        "label": "Historikklagring (dager)",
-        "description": "Hvor lenge metrikkprøver oppbevares for historikkdiagrammene."
-      },
-      "enabledForNewHosts": {
-        "label": "Målinger på for nye verter",
-        "description": "Om nye verter starter med innsamling av metrikk aktivert."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Temperaturenhet",
-        "description": "Hvordan temperaturer vises i Host Metrics.",
-        "celsius": "Celsius",
-        "fahrenheit": "Fahrenheit"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Samle inn målinger"
-      },
-      "metricsInterval": {
-        "label": "Måleintervall (sekunder)"
-      },
-      "enabledWidgets": {
-        "label": "Aktiverte widgeter"
-      },
-      "excludedMounts": {
-        "label": "Ekskluderte fester"
-      },
-      "monitoredMounts": {
-        "label": "Overvåkede stier"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Vertsmålinger"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/pl_PL.json b/plugins/host-metrics/locales/translated/pl_PL.json
deleted file mode 100644
index 102abb576..000000000
--- a/plugins/host-metrics/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Metryki hosta"
-  },
-  "hostMetrics": {
-    "cpu": "Procesor",
-    "memory": "Pamięć",
-    "disk": "Dysk",
-    "network": "Sieć",
-    "uptime": "Czas działania",
-    "processes": "Procesy",
-    "available": "Dostępne",
-    "free": "Wolne",
-    "connecting": "Łączenie...",
-    "connectionFailed": "Nie udało się połączyć z serwerem",
-    "naCpus": "Brak danych o CPU",
-    "cpuCores_one": "{{count}} rdzeń",
-    "cpuCores_other": "{{count}} rdzeni",
-    "cpuUsage": "Wykorzystanie procesora",
-    "memoryUsage": "Wykorzystanie pamięci",
-    "diskUsage": "Wykorzystanie dysku",
-    "selectFilesystem": "Wybierz system plików",
-    "temperature": "Temperatura",
-    "highestTemperature": "Najwyższa temperatura",
-    "primaryTemperatureSensor": "Główny czujnik",
-    "gpu": {
-      "title": "Procesor graficzny",
-      "noDevice": "Nie wykryto procesora graficznego NVIDIA. Zainstaluj sterownik NVIDIA (zawiera on nvidia-smi), aby wyświetlić dane dotyczące procesora graficznego.",
-      "driver": "Kierowca {{version}}",
-      "utilization": "Wykorzystanie",
-      "memory": "Pamięć VRAM",
-      "temperature": "Temp",
-      "power": "Moc",
-      "fan": "Wentylator",
-      "processes": "Procesy GPU",
-      "noProcesses": "Żaden proces nie wykorzystuje procesora GPU"
-    },
-    "failedToFetchHostConfig": "Nie udało się pobrać konfiguracji hosta",
-    "serverOffline": "Serwer offline",
-    "cannotFetchMetrics": "Nie można pobrać metryk z serwera offline",
-    "totpFailed": "Weryfikacja TOTP nie powiodła się",
-    "noneAuthNotSupported": "Metryki hosta nie obsługują typu uwierzytelniania „none”.",
-    "noHostSelected": "Nie wybrano hosta",
-    "load": "Obciążenie",
-    "systemInfo": "Informacje o systemie",
-    "hostname": "Nazwa hosta",
-    "operatingSystem": "System operacyjny",
-    "kernel": "Jądro",
-    "seconds": "sekundy",
-    "networkInterfaces": "Interfejsy sieciowe",
-    "noInterfacesFound": "Nie znaleziono interfejsów sieciowych",
-    "noProcessesFound": "Nie znaleziono procesów",
-    "processesTotal": "łącznie",
-    "processesRunning": "działa",
-    "loginStats": "Statystyki logowania SSH",
-    "noRecentLoginData": "Brak ostatnich danych logowania",
-    "ports": {
-      "title": "Porty nasłuchujące",
-      "protocol": "Protokół",
-      "port": "Port",
-      "address": "Adres",
-      "process": "Proces",
-      "search": "Przeszukaj porty...",
-      "allProtocols": "Wszystkie",
-      "noData": "Brak danych portów nasłuchujących"
-    },
-    "firewall": {
-      "title": "Zapora sieciowa",
-      "inactive": "Nieaktywna",
-      "policy": "Polityka",
-      "rules": "reguł",
-      "noRules": "Brak reguł w tym łańcuchu",
-      "noData": "Brak dostępnych danych zapory sieciowej",
-      "action": "Akcja",
-      "protocol": "Proto",
-      "port": "Port",
-      "source": "Źródło",
-      "anywhere": "Gdziekolwiek",
-      "chains": "łańcuchy"
-    },
-    "loadAvg": "Obciążenie średnie",
-    "swap": "Swap",
-    "architecture": "Architektura",
-    "refresh": "Odśwież",
-    "retry": "Ponów",
-    "customize": "Dostosuj układ",
-    "reset": "Resetuj",
-    "tabLive": "Na żywo",
-    "editModeInstructions": "Przeciągnij karty, aby zmienić kolejność, przeciągnij dolną krawędź, aby zmienić wysokość, a przyciskiem szerokości zmień szerokość karty. Dodawaj lub usuwaj karty poniżej.",
-    "managers": {
-      "services": "Usługi",
-      "processInspector": "Inspektor procesów",
-      "logViewer": "Przeglądarka logów",
-      "cron": "Zadania cron",
-      "packages": "Pakiety",
-      "ssl": "Certyfikaty SSL",
-      "firewall": "Zapora sieciowa",
-      "users": "Użytkownicy i uprawnienia",
-      "healthCheck": "Kontrole stanu",
-      "diskBreakdown": "Podział dysku",
-      "systemdTimers": "Timery",
-      "topMemory": "Wg pamięci",
-      "noData": "Brak danych",
-      "sudoHint": "Ustaw hasło sudo dla tego hosta w edytorze hosta, aby włączyć akcje uprzywilejowane.",
-      "filter": "Filtr...",
-      "start": "Start",
-      "stop": "Zatrzymaj",
-      "restart": "Uruchom ponownie",
-      "actionDone": "Zaktualizowano {{name}}",
-      "actionFailed": "Akcja nie powiodła się",
-      "signalSent": "Sygnał wysłany do PID {{pid}}",
-      "killHint": "Kliknięcie: zakończ (SIGTERM). Kliknięcie prawym przyciskiem myszy: wymuś zakończenie (SIGKILL).",
-      "working": "Przetwarzanie...",
-      "update": "Aktualizuj",
-      "upgradeAll": "Uaktualnij wszystko",
-      "allUpToDate": "Wszystko jest aktualne",
-      "save": "Zapisz",
-      "command": "Polecenie",
-      "enabled": "Włączone",
-      "cronSaved": "Zaktualizowano crontab",
-      "clients": "Klienci",
-      "dryRun": "Symulacja",
-      "renew": "Odnów",
-      "noAcmeClient": "Nie znaleziono klienta ACME (certbot lub acme.sh) na tym hoście.",
-      "addInputRule": "Dodaj regułę INPUT",
-      "firewallWarning": "Zmiany działają tylko do restartu, dopóki nie zostaną utrwalone. Uważaj, aby nie odciąć sobie dostępu.",
-      "ruleApplied": "Zastosowano regułę",
-      "invalidPort": "Wprowadź prawidłowy port (1-65535)",
-      "newUsername": "Nowa nazwa użytkownika",
-      "addUser": "Dodaj",
-      "deleteUser": "Usuń użytkownika",
-      "noHealthChecks": "Nie skonfigurowano jeszcze żadnych kontroli stanu.",
-      "follow": "Śledź",
-      "noLogData": "Brak wyjścia logu.",
-      "tree": "Drzewo",
-      "enableDisable": "Włącz/wyłącz przy starcie systemu",
-      "grantSudo": "Przyznaj sudo",
-      "revokeSudo": "Odwołaj sudo",
-      "sslIssueCert": "Wystaw certyfikat",
-      "sslExpired": "Wygasły",
-      "sslInDays": "za {{days}} dni",
-      "sslNeedDomain": "Wprowadź co najmniej jedną domenę",
-      "sslIssued": "Wystawiono certyfikat",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (samodzielny)",
-      "sslHttpWebroot": "HTTP (webroot)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "Dostawca DNS (np. Cloudflare)",
-      "sslIssueHint": "Poświadczenia dostawcy DNS muszą być już skonfigurowane na hoście.",
-      "sslRevoke": "Unieważnij certyfikat",
-      "sslRevoked": "Unieważniono certyfikat",
-      "sslRevokeConfirm": "Unieważnić i usunąć certyfikat „{{name}}”? Tego nie można cofnąć.",
-      "healthRun": "Uruchom",
-      "healthName": "Nazwa",
-      "healthTarget": "Host / adres",
-      "healthAddCheck": "Dodaj kontrolę",
-      "healthSaved": "Zapisano kontrole stanu",
-      "healthMissingFields": "Każda kontrola wymaga nazwy i celu",
-      "logFile": "Plik",
-      "logUnit": "Unit",
-      "logCustomPath": "Ścieżka niestandardowa w /var/log (opcjonalnie)",
-      "logGrep": "Filtruj wiersze...",
-      "firewallPersist": "Utrwal reguły",
-      "firewallPersisted": "Utrwalono reguły zapory",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "WireGuard nie jest zainstalowany na tym hoście",
-      "wgNoInterfaces": "Brak skonfigurowanych interfejsów WireGuard",
-      "wgInterfaceUp": "Podnieś",
-      "wgInterfaceDown": "Wyłącz",
-      "wgBringingUp": "Podnoszenie {{name}}...",
-      "wgBringingDown": "Wyłączanie {{name}}...",
-      "wgInterfaceUpDone": "{{name}} jest podniesiony",
-      "wgInterfaceDownDone": "{{name}} jest wyłączony",
-      "wgListenPort": "Port",
-      "wgPublicKey": "Klucz publiczny",
-      "wgEndpoint": "Punkt końcowy",
-      "wgAllowedIPs": "Dozwolone adresy IP",
-      "wgLastHandshake": "Ostatni handshake",
-      "wgHandshakeNever": "Nigdy",
-      "wgTransfer": "Transfer",
-      "wgNoPeers": "Brak rówieśników"
-    }
-  },
-  "metricsHistory": {
-    "title": "Historia metryk",
-    "historySuffix": "Historia",
-    "cpuMemoryDisk": "Procesor / Pamięć / Dysk",
-    "network": "Sieć",
-    "download": "RX",
-    "upload": "TX",
-    "noData": "Brak dostępnych danych historycznych dla tego przedziału czasu.",
-    "custom": "Niestandardowy",
-    "to": "do",
-    "apply": "Zastosuj",
-    "viewHistory": "Wyświetl historię"
-  },
-  "hosts": {
-    "tabHostMetrics": "Metryki hosta",
-    "metricsCollectionLabel": "Zbieranie metryk",
-    "enableMetricsLabel": "Włącz metryki",
-    "enableMetricsDesc": "Zbieraj dane o procesorze, pamięci RAM, dysku i inne metryki z tego hosta",
-    "useGlobalMetrics": "Użyj interwału globalnego",
-    "useGlobalMetricsDesc": "Użyj globalnego interwału zbierania metryk",
-    "metricsIntervalS": "Interwał metryk (s)",
-    "metricsIntervalDesc2": "Sekundy między migawkami metryk",
-    "excludedMountsLabel": "Wykluczone montowania",
-    "monitoredMountsLabel": "Niestandardowe monitorowane ścieżki",
-    "monitoredMountsDesc": "Dodaj ścieżki, które nie są udostępniane jako osobne montowania, w tym ścieżki Home Assistant montowane przez bind, takie jak /config.",
-    "monitoredMountPathPlaceholder": "Ścieżka (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Etykieta (opcjonalnie)",
-    "addMonitoredMount": "Dodaj ścieżkę",
-    "excludedMountsDesc": "Ukryj określone punkty montowania lub typy systemów plików (np. nfs, cifs) w informacjach o wykorzystaniu dysku i alertach dla tego hosta.",
-    "excludedMountsPlaceholder": "Ścieżka montowania (/mnt/nas) lub typ systemu plików (nfs, cifs)",
-    "excludedMountsEmpty": "Brak wykluczonych montowań. Wyświetlane są wszystkie wykryte systemy plików.",
-    "addExcludedMount": "Dodaj",
-    "visibleWidgets": "Widoczne widżety",
-    "widgetsMovedToHostMetrics": "Karty dodaje się, układa i skaluje bezpośrednio na karcie „Metryki hosta”. Otwórz Metryki hosta dla tego hosta i użyj opcji „Dostosuj”, aby wybrać wyświetlane karty.",
-    "hostNotFound": "Nie znaleziono hosta",
-    "loadingHost": "Ładowanie hosta..."
-  },
-  "onboarding": {
-    "feature_metrics": "Metryki i alerty",
-    "feature_metrics_desc": "Śledź procesor, pamięć i dysk w czasie i otrzymuj alerty, gdy przekroczą próg."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Przechowywanie historii metryk",
-    "metricsHistoryRetentionRange": "od 1 do 90 dni",
-    "days": "dni"
-  },
-  "homepage": {
-    "noData": "Brak dostępnych danych",
-    "showCurrentValue": "Pokaż wartość bieżącą",
-    "chartMetric": "Metryka",
-    "metricRange": "Zakres",
-    "host": "Host",
-    "loading": "Ładowanie...",
-    "metricCpu": "Procesor",
-    "metricDisk": "Dysk",
-    "metricHostname": "Nazwa hosta",
-    "metricKernel": "Jądro",
-    "metricMemory": "Pamięć",
-    "metricNetwork": "Sieć",
-    "metricOs": "System operacyjny",
-    "metricProcesses": "Procesy",
-    "metricProcessesRunning": "działa",
-    "metricProcessesTotal": "łącznie",
-    "metricUptime": "Czas działania",
-    "metricsNotAvailable": "Metryki niedostępne",
-    "noHostSelected": "Nie wybrano hosta",
-    "selectHost": "Wybierz hosta..."
-  },
-  "terminalStatus": {
-    "unavailable": "Statystyki na żywo niedostępne"
-  },
-  "dashboard": {
-    "cpu": "Procesor",
-    "ram": "RAM"
-  },
-  "dashboardTab": {
-    "disk": "Dysk"
-  },
-  "terminal": {
-    "connected": "Połączono"
-  },
-  "permissions": {
-    "use": {
-      "title": "Użyj metryk hosta",
-      "description": "Przeglądaj metryki hosta i korzystaj z menedżerów hosta (usług, pakietów, zapory sieciowej i innych) na hostach, do których masz dostęp."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Interwał metryk (sekundy)",
-        "description": "Częstotliwość próbkowania oglądanego hosta, chyba że host ustawi własny interwał."
-      },
-      "historyRetentionDays": {
-        "label": "Retencja historii (dni)",
-        "description": "Jak długo przechowywane są próbki metryk na potrzeby wykresów historycznych."
-      },
-      "enabledForNewHosts": {
-        "label": "Metryki dla nowych hostów",
-        "description": "Czy nowi gospodarze rozpoczynają pracę z włączonym zbieraniem danych metrycznych."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Jednostka temperatury",
-        "description": "W jaki sposób temperatury są wyświetlane w Host Metrics.",
-        "celsius": "Celsjusz",
-        "fahrenheit": "Fahrenheita"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Zbieraj dane metryczne"
-      },
-      "metricsInterval": {
-        "label": "Interwał metryk (sekundy)"
-      },
-      "enabledWidgets": {
-        "label": "Włączone widżety"
-      },
-      "excludedMounts": {
-        "label": "Wykluczone wierzchowce"
-      },
-      "monitoredMounts": {
-        "label": "Monitorowane ścieżki"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Metryki hosta"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/pt_BR.json b/plugins/host-metrics/locales/translated/pt_BR.json
deleted file mode 100644
index a8a90c8d9..000000000
--- a/plugins/host-metrics/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Métricas do Host"
-  },
-  "hostMetrics": {
-    "cpu": "CPU",
-    "memory": "Memória",
-    "disk": "Disco",
-    "network": "Rede",
-    "uptime": "Tempo de atividade",
-    "processes": "Processos",
-    "available": "Disponível",
-    "free": "Livre",
-    "connecting": "Conectando...",
-    "connectionFailed": "Falha ao conectar-se ao servidor",
-    "naCpus": "N/A CPU(s)",
-    "cpuCores_one": "{{count}} Núcleo",
-    "cpuCores_other": "{{count}} Núcleos",
-    "cpuUsage": "Utilização da CPU",
-    "memoryUsage": "Uso de memória",
-    "diskUsage": "Utilização do disco",
-    "selectFilesystem": "Selecione o sistema de arquivos",
-    "temperature": "Temperatura",
-    "highestTemperature": "Temperatura mais alta",
-    "primaryTemperatureSensor": "Sensor primário",
-    "gpu": {
-      "title": "GPU",
-      "noDevice": "Nenhuma GPU NVIDIA detectada. Instale o driver da NVIDIA (que fornece o nvidia-smi) para visualizar as métricas da GPU.",
-      "driver": "Motorista {{version}}",
-      "utilization": "Utilização",
-      "memory": "VRAM",
-      "temperature": "Temp",
-      "power": "Poder",
-      "fan": "Fã",
-      "processes": "processos da GPU",
-      "noProcesses": "Nenhum processo está utilizando a GPU."
-    },
-    "failedToFetchHostConfig": "Falha ao obter a configuração do host",
-    "serverOffline": "Servidor offline",
-    "cannotFetchMetrics": "Não foi possível obter métricas do servidor offline.",
-    "totpFailed": "A verificação TOTP falhou.",
-    "noneAuthNotSupported": "O Host Metrics não suporta o tipo de autenticação 'nenhum'.",
-    "noHostSelected": "Nenhum host selecionado",
-    "load": "Carregar",
-    "systemInfo": "Informações do sistema",
-    "hostname": "Nome do host",
-    "operatingSystem": "Sistema operacional",
-    "kernel": "Kernel",
-    "seconds": "segundos",
-    "networkInterfaces": "Interfaces de rede",
-    "noInterfacesFound": "Nenhuma interface de rede encontrada",
-    "noProcessesFound": "Nenhum processo encontrado",
-    "processesTotal": "total",
-    "processesRunning": "correndo",
-    "loginStats": "Estatísticas de login SSH",
-    "noRecentLoginData": "Nenhum dado de login recente",
-    "ports": {
-      "title": "Portas de escuta",
-      "protocol": "Protocolo",
-      "port": "Porta",
-      "address": "Endereço",
-      "process": "Processo",
-      "search": "Portas de pesquisa...",
-      "allProtocols": "Todos",
-      "noData": "Sem dados de portas de escuta"
-    },
-    "firewall": {
-      "title": "Firewall",
-      "inactive": "Inativo",
-      "policy": "Política",
-      "rules": "regras",
-      "noRules": "Não há regras nesta corrente.",
-      "noData": "Não há dados de firewall disponíveis.",
-      "action": "Ação",
-      "protocol": "Proto",
-      "port": "Porta",
-      "source": "Fonte",
-      "anywhere": "Em qualquer lugar",
-      "chains": "correntes"
-    },
-    "loadAvg": "Carga média",
-    "swap": "Trocar",
-    "architecture": "Arquitetura",
-    "refresh": "Atualizar",
-    "retry": "Tentar novamente",
-    "customize": "Personalizar layout",
-    "reset": "Reiniciar",
-    "tabLive": "Ao vivo",
-    "editModeInstructions": "Arraste os cartões para reorganizá-los, arraste a borda inferior para redimensioná-los e use o botão de largura para alterar a extensão de um cartão. Adicione ou remova cartões abaixo.",
-    "managers": {
-      "services": "Serviços",
-      "processInspector": "Inspetor de Processos",
-      "logViewer": "Visualizador de Logs",
-      "cron": "Tarefas agendadas",
-      "packages": "Pacotes",
-      "ssl": "Certificados SSL",
-      "firewall": "Firewall",
-      "users": "Usuários e permissões",
-      "healthCheck": "Exames de saúde",
-      "diskBreakdown": "Avaria do disco",
-      "systemdTimers": "Temporizadores",
-      "topMemory": "Melhor por memória",
-      "noData": "Sem dados",
-      "sudoHint": "Defina uma senha sudo para este host no editor de hosts para habilitar ações privilegiadas.",
-      "filter": "Filtro...",
-      "start": "Iniciar",
-      "stop": "Parar",
-      "restart": "Reiniciar",
-      "actionDone": "{{name}} atualizado",
-      "actionFailed": "A ação falhou",
-      "signalSent": "Sinal enviado para PID {{pid}}",
-      "killHint": "Clique: encerrar (SIGTERM). Clique com o botão direito: forçar o encerramento (SIGKILL).",
-      "working": "Trabalhando...",
-      "update": "Atualizar",
-      "upgradeAll": "Atualizar tudo",
-      "allUpToDate": "Tudo está atualizado.",
-      "save": "Salvar",
-      "command": "Comando",
-      "enabled": "Habilitado",
-      "cronSaved": "Crontab atualizado",
-      "clients": "Clientes",
-      "dryRun": "Ensaio geral",
-      "renew": "Renovar",
-      "noAcmeClient": "Nenhum cliente ACME (certbot ou acme.sh) foi encontrado neste host.",
-      "addInputRule": "Adicionar regra de ENTRADA",
-      "firewallWarning": "As alterações são válidas apenas em tempo de execução até serem persistidas. Tenha cuidado para não bloquear o seu próprio acesso.",
-      "ruleApplied": "Regra aplicada",
-      "invalidPort": "Digite uma porta válida (1-65535)",
-      "newUsername": "Novo nome de usuário",
-      "addUser": "Adicionar",
-      "deleteUser": "Excluir usuário",
-      "noHealthChecks": "Nenhuma verificação de integridade configurada ainda.",
-      "follow": "Seguir",
-      "noLogData": "Nenhuma saída de log.",
-      "tree": "Árvore",
-      "enableDisable": "Ativar/desativar na inicialização",
-      "grantSudo": "Conceder sudo",
-      "revokeSudo": "Revogar sudo",
-      "sslIssueCert": "Emitir certificado",
-      "sslExpired": "Expirado",
-      "sslInDays": "em {{days}}d",
-      "sslNeedDomain": "Insira pelo menos um domínio.",
-      "sslIssued": "Certificado emitido",
-      "sslDomainsPlaceholder": "exemplo.com, www.exemplo.com",
-      "sslHttpStandalone": "HTTP (autônomo)",
-      "sslHttpWebroot": "HTTP (raiz da web)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "provedor de DNS (ex: Cloudflare)",
-      "sslIssueHint": "As credenciais do provedor de DNS já devem estar configuradas no host.",
-      "sslRevoke": "Revogar certificado",
-      "sslRevoked": "Certificado revogado",
-      "sslRevokeConfirm": "Revogar e remover o certificado \"{{name}}\"? Isso não pode ser desfeito.",
-      "healthRun": "Correr",
-      "healthName": "Nome",
-      "healthTarget": "Endereço do host",
-      "healthAddCheck": "Adicionar verificação",
-      "healthSaved": "Exames de saúde salvos",
-      "healthMissingFields": "Cada verificação precisa de um nome e um alvo.",
-      "logFile": "Arquivo",
-      "logUnit": "Unidade",
-      "logCustomPath": "Caminho personalizado em /var/log (opcional)",
-      "logGrep": "Linhas de filtro...",
-      "firewallPersist": "Regras persistentes",
-      "firewallPersisted": "As regras do firewall persistiram.",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "O WireGuard não está instalado neste host.",
-      "wgNoInterfaces": "Nenhuma interface WireGuard configurada",
-      "wgInterfaceUp": "Levantar a questão",
-      "wgInterfaceDown": "Derrubem",
-      "wgBringingUp": "Trazendo {{name}} para cima...",
-      "wgBringingDown": "Derrubando {{name}}...",
-      "wgInterfaceUpDone": "{{name}} está ativo",
-      "wgInterfaceDownDone": "{{name}} está inativo",
-      "wgListenPort": "Porta",
-      "wgPublicKey": "Chave pública",
-      "wgEndpoint": "Ponto final",
-      "wgAllowedIPs": "IPs permitidos",
-      "wgLastHandshake": "Último aperto de mãos",
-      "wgHandshakeNever": "Nunca",
-      "wgTransfer": "Transferir",
-      "wgNoPeers": "Sem pares"
-    }
-  },
-  "metricsHistory": {
-    "title": "Histórico de métricas",
-    "historySuffix": "Histórico",
-    "cpuMemoryDisk": "CPU / Memória / Disco",
-    "network": "Rede",
-    "download": "RX",
-    "upload": "TX",
-    "noData": "Não há dados históricos disponíveis para este período.",
-    "custom": "Personalizado",
-    "to": "para",
-    "apply": "Aplicar",
-    "viewHistory": "Ver histórico"
-  },
-  "hosts": {
-    "tabHostMetrics": "Métricas do Host",
-    "metricsCollectionLabel": "Coleção de Métricas",
-    "enableMetricsLabel": "Habilitar Métricas",
-    "enableMetricsDesc": "Coletar métricas de CPU, RAM, disco e outras deste host.",
-    "useGlobalMetrics": "Usar intervalo global",
-    "useGlobalMetricsDesc": "Substituir pelo intervalo de métricas de todo o servidor",
-    "metricsIntervalS": "Intervalo de métricas (s)",
-    "metricsIntervalDesc2": "Segundos entre instantâneos de métricas",
-    "excludedMountsLabel": "Suportes excluídos",
-    "monitoredMountsLabel": "Caminhos monitorados personalizados",
-    "monitoredMountsDesc": "Adicione caminhos que não estejam expostos como montagens separadas, incluindo caminhos do Home Assistant montados via bind, como /config.",
-    "monitoredMountPathPlaceholder": "Caminho (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Rótulo (opcional)",
-    "addMonitoredMount": "Adicionar caminho",
-    "excludedMountsDesc": "Oculte pontos de montagem ou tipos de sistema de arquivos específicos (por exemplo, NFS, CIFS) do uso de disco e dos alertas para este host.",
-    "excludedMountsPlaceholder": "Caminho de montagem (/mnt/nas) ou tipo de sistema de arquivos (nfs, cifs)",
-    "excludedMountsEmpty": "Nenhuma montagem excluída. Todos os sistemas de arquivos detectados são exibidos.",
-    "addExcludedMount": "Adicionar",
-    "visibleWidgets": "Widgets visíveis",
-    "widgetsMovedToHostMetrics": "Agora, os cartões podem ser adicionados, organizados e redimensionados diretamente na guia Métricas do Host. Abra as Métricas do Host para este host e use a opção Personalizar para escolher quais cartões serão exibidos.",
-    "hostNotFound": "Host não encontrado",
-    "loadingHost": "Carregando host..."
-  },
-  "onboarding": {
-    "feature_metrics": "Métricas e alertas",
-    "feature_metrics_desc": "Monitore o uso de CPU, memória e disco ao longo do tempo e receba alertas quando apresentarem problemas."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Retenção do histórico de métricas",
-    "metricsHistoryRetentionRange": "1 a 90 dias",
-    "days": "dias"
-  },
-  "homepage": {
-    "noData": "Não há dados disponíveis.",
-    "showCurrentValue": "Mostrar valor atual",
-    "chartMetric": "Métrica",
-    "metricRange": "Faixa",
-    "host": "Hospedar",
-    "loading": "Carregando...",
-    "metricCpu": "CPU",
-    "metricDisk": "Disco",
-    "metricHostname": "Nome do host",
-    "metricKernel": "Kernel",
-    "metricMemory": "Memória",
-    "metricNetwork": "Rede",
-    "metricOs": "SO",
-    "metricProcesses": "Processos",
-    "metricProcessesRunning": "correndo",
-    "metricProcessesTotal": "total",
-    "metricUptime": "Tempo de atividade",
-    "metricsNotAvailable": "Métricas não disponíveis",
-    "noHostSelected": "Nenhum host selecionado",
-    "selectHost": "Selecione um host..."
-  },
-  "terminalStatus": {
-    "unavailable": "Estatísticas ao vivo indisponíveis"
-  },
-  "dashboard": {
-    "cpu": "CPU",
-    "ram": "BATER"
-  },
-  "dashboardTab": {
-    "disk": "Disco"
-  },
-  "terminal": {
-    "connected": "Conectado"
-  },
-  "permissions": {
-    "use": {
-      "title": "Usar métricas de host",
-      "description": "Visualize as métricas do host e utilize os gerenciadores de host (serviços, pacotes, firewall e muito mais) nos hosts aos quais você tem acesso."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Intervalo de métricas (segundos)",
-        "description": "Com que frequência um host que está sendo visualizado é amostrado, a menos que o host defina seu próprio intervalo."
-      },
-      "historyRetentionDays": {
-        "label": "Retenção do histórico (dias)",
-        "description": "Por quanto tempo as amostras de métricas são mantidas nos gráficos de histórico?"
-      },
-      "enabledForNewHosts": {
-        "label": "Métricas ativadas para novos hosts",
-        "description": "Se os novos hosts forem iniciados com a coleta de métricas ativada."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Unidade de temperatura",
-        "description": "Como as temperaturas são exibidas nas Métricas do Host.",
-        "celsius": "Celsius",
-        "fahrenheit": "Fahrenheit"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Coletar métricas"
-      },
-      "metricsInterval": {
-        "label": "Intervalo de métricas (segundos)"
-      },
-      "enabledWidgets": {
-        "label": "Widgets ativados"
-      },
-      "excludedMounts": {
-        "label": "Suportes excluídos"
-      },
-      "monitoredMounts": {
-        "label": "Caminhos monitorados"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Métricas do Host"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/pt_PT.json b/plugins/host-metrics/locales/translated/pt_PT.json
deleted file mode 100644
index 90b3e9d48..000000000
--- a/plugins/host-metrics/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Métricas do Servidor"
-  },
-  "hostMetrics": {
-    "cpu": "CPU",
-    "memory": "Memória",
-    "disk": "Disco",
-    "network": "Rede",
-    "uptime": "Tempo de atividade",
-    "processes": "Processos",
-    "available": "Disponível",
-    "free": "Livre",
-    "connecting": "A ligar...",
-    "connectionFailed": "Falha ao ligar ao servidor",
-    "naCpus": "N/D CPU(s)",
-    "cpuCores_one": "{{count}} Núcleo",
-    "cpuCores_other": "{{count}} Núcleos",
-    "cpuUsage": "Utilização da CPU",
-    "memoryUsage": "Utilização da memória",
-    "diskUsage": "Utilização do disco",
-    "selectFilesystem": "Selecione o sistema de ficheiros",
-    "temperature": "Temperatura",
-    "highestTemperature": "Temperatura máxima",
-    "primaryTemperatureSensor": "Sensor primário",
-    "gpu": {
-      "title": "GPU",
-      "noDevice": "Nenhuma GPU NVIDIA detetada. Instale o controlador da NVIDIA (que fornece o nvidia-smi) para visualizar as métricas da GPU.",
-      "driver": "Motorista {{version}}",
-      "utilization": "Utilização",
-      "memory": "VRAM",
-      "temperature": "Temp",
-      "power": "Poder",
-      "fan": "Fã",
-      "processes": "processos da GPU",
-      "noProcesses": "Nenhum processo está a utilizar a GPU."
-    },
-    "failedToFetchHostConfig": "Falha ao obter a configuração do servidor",
-    "serverOffline": "Servidor offline",
-    "cannotFetchMetrics": "Não é possível obter métricas do servidor offline",
-    "totpFailed": "Falha na verificação TOTP",
-    "noneAuthNotSupported": "Host Metrics não suporta o tipo de autenticação 'none'.",
-    "noHostSelected": "Nenhum host selecionado",
-    "load": "Carga",
-    "systemInfo": "Informação do Sistema",
-    "hostname": "Nome do host",
-    "operatingSystem": "Sistema Operativo",
-    "kernel": "Kernel",
-    "seconds": "segundos",
-    "networkInterfaces": "Interfaces de Rede",
-    "noInterfacesFound": "Nenhuma interface de rede encontrada",
-    "noProcessesFound": "Nenhum processo encontrado",
-    "processesTotal": "total",
-    "processesRunning": "em execução",
-    "loginStats": "Estatísticas de início de sessão SSH",
-    "noRecentLoginData": "Sem dados de início de sessão recentes",
-    "ports": {
-      "title": "Portas em escuta",
-      "protocol": "Protocolo",
-      "port": "Porta",
-      "address": "Endereço",
-      "process": "Processo",
-      "search": "Pesquisar portas...",
-      "allProtocols": "Todos",
-      "noData": "Sem dados de portas em escuta"
-    },
-    "firewall": {
-      "title": "Firewall",
-      "inactive": "Inativo",
-      "policy": "Política",
-      "rules": "regras",
-      "noRules": "Sem regras nesta cadeia",
-      "noData": "Sem dados de firewall disponíveis",
-      "action": "Ação",
-      "protocol": "Proto",
-      "port": "Porta",
-      "source": "Origem",
-      "anywhere": "Qualquer lugar",
-      "chains": "cadeias"
-    },
-    "loadAvg": "Carga Média",
-    "swap": "Swap",
-    "architecture": "Arquitetura",
-    "refresh": "Atualizar",
-    "retry": "Tentar novamente",
-    "customize": "Personalizar layout",
-    "reset": "Redefinir",
-    "tabLive": "Ao Vivo",
-    "editModeInstructions": "Arraste os cartões para reorganizar, arraste a borda inferior para redimensionar e use o botão de largura para alterar a largura do cartão. Adicione ou remova cartões abaixo.",
-    "managers": {
-      "services": "Serviços",
-      "processInspector": "Inspetor de Processos",
-      "logViewer": "Visualizador de Registos",
-      "cron": "Tarefas Cron",
-      "packages": "Pacotes",
-      "ssl": "Certificados SSL",
-      "firewall": "Firewall",
-      "users": "Utilizadores e Permissões",
-      "healthCheck": "Verificações de Estado",
-      "diskBreakdown": "Análise de Disco",
-      "systemdTimers": "Temporizadores",
-      "topMemory": "Top por Memória",
-      "noData": "Sem dados",
-      "sudoHint": "Defina uma palavra-passe sudo para este host no editor de hosts para ativar ações privilegiadas.",
-      "filter": "Filtrar...",
-      "start": "Iniciar",
-      "stop": "Parar",
-      "restart": "Reiniciar",
-      "actionDone": "{{name}} atualizado",
-      "actionFailed": "A ação falhou",
-      "signalSent": "Sinal enviado para o PID {{pid}}",
-      "killHint": "Clique: terminar (SIGTERM). Clique direito: forçar encerramento (SIGKILL).",
-      "working": "A trabalhar...",
-      "update": "Atualizar",
-      "upgradeAll": "Atualizar tudo",
-      "allUpToDate": "Tudo está atualizado",
-      "save": "Guardar",
-      "command": "Comando",
-      "enabled": "Ativado",
-      "cronSaved": "Crontab atualizado",
-      "clients": "Clientes",
-      "dryRun": "Simulação",
-      "renew": "Renovar",
-      "noAcmeClient": "Nenhum cliente ACME (certbot ou acme.sh) encontrado neste servidor.",
-      "addInputRule": "Adicionar regra INPUT",
-      "firewallWarning": "As alterações são efetuadas apenas em execução até serem guardadas. Tenha cuidado para não ficar bloqueado.",
-      "ruleApplied": "Regra aplicada",
-      "invalidPort": "Introduza uma porta válida (1-65535)",
-      "newUsername": "Novo nome de utilizador",
-      "addUser": "Adicionar",
-      "deleteUser": "Eliminar utilizador",
-      "noHealthChecks": "Nenhuma verificação de estado configurada ainda.",
-      "follow": "Seguir",
-      "noLogData": "Sem saída de registo.",
-      "tree": "Árvore",
-      "enableDisable": "Ativar / desativar no arranque",
-      "grantSudo": "Conceder sudo",
-      "revokeSudo": "Revogar sudo",
-      "sslIssueCert": "Emitir certificado",
-      "sslExpired": "Expirado",
-      "sslInDays": "em {{days}}d",
-      "sslNeedDomain": "Introduza pelo menos um domínio",
-      "sslIssued": "Certificado emitido",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (autónomo)",
-      "sslHttpWebroot": "HTTP (webroot)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "Fornecedor DNS (ex. cloudflare)",
-      "sslIssueHint": "As credenciais do fornecedor DNS já devem estar configuradas no host.",
-      "sslRevoke": "Revogar certificado",
-      "sslRevoked": "Certificado revogado",
-      "sslRevokeConfirm": "Revogar e remover o certificado \"{{name}}\"? Esta ação não pode ser anulada.",
-      "healthRun": "Executar",
-      "healthName": "Nome",
-      "healthTarget": "Host / endereço",
-      "healthAddCheck": "Adicionar verificação",
-      "healthSaved": "Verificações de saúde guardadas",
-      "healthMissingFields": "Cada verificação necessita de um nome e um destino",
-      "logFile": "Ficheiro",
-      "logUnit": "Unidade",
-      "logCustomPath": "Caminho personalizado em /var/log (opcional)",
-      "logGrep": "Filtrar linhas...",
-      "firewallPersist": "Persistir regras",
-      "firewallPersisted": "Regras de firewall persistidas",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "O WireGuard não está instalado neste host",
-      "wgNoInterfaces": "Nenhuma interface WireGuard configurada",
-      "wgInterfaceUp": "Ativar",
-      "wgInterfaceDown": "Desativar",
-      "wgBringingUp": "A ativar {{name}}...",
-      "wgBringingDown": "A desativar {{name}}...",
-      "wgInterfaceUpDone": "{{name}} está ativada",
-      "wgInterfaceDownDone": "{{name}} está desativada",
-      "wgListenPort": "Porta",
-      "wgPublicKey": "Chave pública",
-      "wgEndpoint": "Endpoint",
-      "wgAllowedIPs": "IPs permitidos",
-      "wgLastHandshake": "Último handshake",
-      "wgHandshakeNever": "Nunca",
-      "wgTransfer": "Transferência",
-      "wgNoPeers": "Sem pares"
-    }
-  },
-  "metricsHistory": {
-    "title": "Histórico de Métricas",
-    "historySuffix": "Histórico",
-    "cpuMemoryDisk": "CPU / Memória / Disco",
-    "network": "Rede",
-    "download": "RX",
-    "upload": "TX",
-    "noData": "Sem dados de histórico disponíveis para este intervalo de tempo.",
-    "custom": "Personalizado",
-    "to": "a",
-    "apply": "Aplicar",
-    "viewHistory": "Ver Histórico"
-  },
-  "hosts": {
-    "tabHostMetrics": "Métricas do Host",
-    "metricsCollectionLabel": "Recolha de Métricas",
-    "enableMetricsLabel": "Ativar Métricas",
-    "enableMetricsDesc": "Recolher métricas de CPU, RAM, disco e outras deste host",
-    "useGlobalMetrics": "Usar Intervalo Global",
-    "useGlobalMetricsDesc": "Substituir pelo intervalo de métricas global do servidor",
-    "metricsIntervalS": "Intervalo de Métricas (s)",
-    "metricsIntervalDesc2": "Segundos entre cada registo de métricas",
-    "excludedMountsLabel": "Suportes excluídos",
-    "monitoredMountsLabel": "Caminhos monitorizados personalizados",
-    "monitoredMountsDesc": "Adicione caminhos que não estejam expostos como montagens separadas, incluindo caminhos do Home Assistant montados através de bind, como /config.",
-    "monitoredMountPathPlaceholder": "Caminho (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Etiqueta (opcional)",
-    "addMonitoredMount": "Adicionar caminho",
-    "excludedMountsDesc": "Ocultar pontos de montagem ou tipos de sistema de ficheiros específicos (por exemplo, NFS, CIFS) da utilização do disco e dos alertas para este host.",
-    "excludedMountsPlaceholder": "Caminho de montagem (/mnt/nas) ou tipo de sistema de ficheiros (nfs, cifs)",
-    "excludedMountsEmpty": "Nenhuma montagem excluída. Todos os sistemas de ficheiros detetados são apresentados.",
-    "addExcludedMount": "Adicionar",
-    "visibleWidgets": "Widgets Visíveis",
-    "widgetsMovedToHostMetrics": "Os cartões são agora adicionados, organizados e redimensionados diretamente no separador Métricas do Host. Abra as Métricas do Host para este host e use Personalizar para escolher quais os cartões a mostrar.",
-    "hostNotFound": "Host não encontrado",
-    "loadingHost": "A carregar o host..."
-  },
-  "onboarding": {
-    "feature_metrics": "Métricas e alertas",
-    "feature_metrics_desc": "Monitorize a utilização de CPU, memória e disco ao longo do tempo e receba alertas quando apresentam problemas."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Retenção do histórico de métricas",
-    "metricsHistoryRetentionRange": "1 a 90 dias",
-    "days": "dias"
-  },
-  "homepage": {
-    "noData": "Sem dados disponíveis",
-    "showCurrentValue": "Mostrar valor atual",
-    "chartMetric": "Métrica",
-    "metricRange": "Intervalo",
-    "host": "Host",
-    "loading": "A carregar...",
-    "metricCpu": "CPU",
-    "metricDisk": "Disco",
-    "metricHostname": "Nome do host",
-    "metricKernel": "Kernel",
-    "metricMemory": "Memória",
-    "metricNetwork": "Rede",
-    "metricOs": "SO",
-    "metricProcesses": "Processos",
-    "metricProcessesRunning": "em execução",
-    "metricProcessesTotal": "total",
-    "metricUptime": "Tempo de atividade",
-    "metricsNotAvailable": "Métricas não disponíveis",
-    "noHostSelected": "Nenhum anfitrião selecionado",
-    "selectHost": "Selecionar um host..."
-  },
-  "terminalStatus": {
-    "unavailable": "Estatísticas ao vivo indisponíveis"
-  },
-  "dashboard": {
-    "cpu": "CPU",
-    "ram": "RAM"
-  },
-  "dashboardTab": {
-    "disk": "Disco"
-  },
-  "terminal": {
-    "connected": "Ligado"
-  },
-  "permissions": {
-    "use": {
-      "title": "Usar métricas de host",
-      "description": "Visualize as métricas do host e utilize os gestores de host (serviços, pacotes, firewall e muito mais) nos hosts aos quais tem acesso."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Intervalo de métricas (segundos)",
-        "description": "Com que frequência um host que está a ser visualizado é amostrado, a menos que o host defina o seu próprio intervalo."
-      },
-      "historyRetentionDays": {
-        "label": "Retenção do histórico (dias)",
-        "description": "Durante quanto tempo são mantidas as amostras de métricas nos gráficos de histórico?"
-      },
-      "enabledForNewHosts": {
-        "label": "Métricas ativadas para novos hosts",
-        "description": "Se os novos hosts forem iniciados com a recolha de métricas ativada."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Unidade de temperatura",
-        "description": "Como as temperaturas são apresentadas nas Métricas do Host.",
-        "celsius": "Celsius",
-        "fahrenheit": "Fahrenheit"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Recolher métricas"
-      },
-      "metricsInterval": {
-        "label": "Intervalo de métricas (segundos)"
-      },
-      "enabledWidgets": {
-        "label": "Widgets ativados"
-      },
-      "excludedMounts": {
-        "label": "Suportes excluídos"
-      },
-      "monitoredMounts": {
-        "label": "Caminhos monitorizados"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Métricas do host"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/ro_RO.json b/plugins/host-metrics/locales/translated/ro_RO.json
deleted file mode 100644
index 2f1f689e9..000000000
--- a/plugins/host-metrics/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Metrici ale gazdei"
-  },
-  "hostMetrics": {
-    "cpu": "CPU",
-    "memory": "Memorie",
-    "disk": "Disc",
-    "network": "Reţea",
-    "uptime": "Timp de funcționare",
-    "processes": "Procese",
-    "available": "Disponibil",
-    "free": "Gratuit",
-    "connecting": "Se conectează...",
-    "connectionFailed": "Conectarea la server a eșuat",
-    "naCpus": "N/A CPU(uri)",
-    "cpuCores_one": "{{count}} Nucleu",
-    "cpuCores_other": "{{count}} Nuclee",
-    "cpuUsage": "Utilizarea procesorului",
-    "memoryUsage": "Utilizarea memoriei",
-    "diskUsage": "Utilizarea discului",
-    "selectFilesystem": "Selectați sistemul de fișiere",
-    "temperature": "Temperatură",
-    "highestTemperature": "Cea mai ridicată temperatură",
-    "primaryTemperatureSensor": "Senzor principal",
-    "gpu": {
-      "title": "GPU",
-      "noDevice": "Nu a fost detectată nicio placă grafică NVIDIA. Instalați driverul NVIDIA (acesta oferă nvidia-smi) pentru a vedea valorile GPU.",
-      "driver": "Șofer {{version}}",
-      "utilization": "Utilizare",
-      "memory": "VRAM",
-      "temperature": "Temperatura",
-      "power": "Putere",
-      "fan": "Ventilator",
-      "processes": "Procese GPU",
-      "noProcesses": "Niciun proces nu folosește GPU-ul"
-    },
-    "failedToFetchHostConfig": "Nu s-a putut prelua configurația gazdei",
-    "serverOffline": "Serverul este offline",
-    "cannotFetchMetrics": "Nu se pot prelua valori de pe serverul offline",
-    "totpFailed": "Verificarea TOTP a eșuat",
-    "noneAuthNotSupported": "Metricile gazdei nu acceptă tipul de autentificare „none”.",
-    "noHostSelected": "Nicio gazdă selectată",
-    "load": "Încărca",
-    "systemInfo": "Informații despre sistem",
-    "hostname": "Nume gazdă",
-    "operatingSystem": "Sistem de operare",
-    "kernel": "Nucleu",
-    "seconds": "secunde",
-    "networkInterfaces": "Interfețe de rețea",
-    "noInterfacesFound": "Nu s-au găsit interfețe de rețea",
-    "noProcessesFound": "Nu s-au găsit procese",
-    "processesTotal": "total",
-    "processesRunning": "funcţionare",
-    "loginStats": "Statistici de conectare SSH",
-    "noRecentLoginData": "Nu există date de conectare recente",
-    "ports": {
-      "title": "Porturi de ascultare",
-      "protocol": "Protocol",
-      "port": "Port",
-      "address": "Adresa",
-      "process": "Proces",
-      "search": "Căutați porturi...",
-      "allProtocols": "Toate",
-      "noData": "Nu există date despre porturile de ascultare"
-    },
-    "firewall": {
-      "title": "Firewall",
-      "inactive": "Inactiv",
-      "policy": "Politică",
-      "rules": "reguli",
-      "noRules": "Nicio regulă în acest lanț",
-      "noData": "Nu sunt disponibile date despre firewall",
-      "action": "Acţiune",
-      "protocol": "Proto",
-      "port": "Port",
-      "source": "Sursă",
-      "anywhere": "Oriunde",
-      "chains": "lanţuri"
-    },
-    "loadAvg": "Încărcare medie",
-    "swap": "Schimb",
-    "architecture": "Arhitectură",
-    "refresh": "Reîmprospăta",
-    "retry": "Reîncercați",
-    "customize": "Personalizați aspectul",
-    "reset": "Resetare",
-    "tabLive": "Trăi",
-    "editModeInstructions": "Trageți cărțile pentru a le rearanja, trageți marginea de jos pentru a o redimensiona și folosiți butonul de lățime pentru a modifica întinderea unei cărți. Adăugați sau eliminați cărți mai jos.",
-    "managers": {
-      "services": "Servicii",
-      "processInspector": "Inspector de procese",
-      "logViewer": "Vizualizator de jurnal",
-      "cron": "Lucrări cron",
-      "packages": "Pachete",
-      "ssl": "Certificate SSL",
-      "firewall": "Firewall",
-      "users": "Utilizatori și permisiuni",
-      "healthCheck": "Verificări medicale",
-      "diskBreakdown": "Defalcarea discului",
-      "systemdTimers": "Cronometre",
-      "topMemory": "Top după memorie",
-      "noData": "Fără date",
-      "sudoHint": "Setați o parolă sudo pentru această gazdă în editorul de gazde pentru a activa acțiuni privilegiate.",
-      "filter": "Filtra...",
-      "start": "Început",
-      "stop": "Stop",
-      "restart": "Repornire",
-      "actionDone": "{{name}} actualizat",
-      "actionFailed": "Acțiunea a eșuat",
-      "signalSent": "Semnal trimis către PID {{pid}}",
-      "killHint": "Clic: terminare (SIGTERM). Clic dreapta: închidere forțată (SIGKILL).",
-      "working": "Lucru...",
-      "update": "Actualizare",
-      "upgradeAll": "Actualizați toate",
-      "allUpToDate": "Totul este la zi",
-      "save": "Salva",
-      "command": "Comanda",
-      "enabled": "Activat",
-      "cronSaved": "Crontab actualizat",
-      "clients": "Clienți",
-      "dryRun": "Sesizare de uzură",
-      "renew": "Reînnoi",
-      "noAcmeClient": "Nu a fost găsit niciun client ACME (certbot sau acme.sh) pe această gazdă.",
-      "addInputRule": "Adăugați regula INPUT",
-      "firewallWarning": "Modificările sunt disponibile doar în timpul execuției până când sunt persistente. Aveți grijă să nu vă blocați accesul.",
-      "ruleApplied": "Regula aplicată",
-      "invalidPort": "Introduceți un port valid (1-65535)",
-      "newUsername": "Nume de utilizator nou",
-      "addUser": "Adăuga",
-      "deleteUser": "Șterge utilizatorul",
-      "noHealthChecks": "Nu au fost configurate încă verificări de stare.",
-      "follow": "Urmărește",
-      "noLogData": "Nicio ieșire de jurnal.",
-      "tree": "Copac",
-      "enableDisable": "Activare / dezactivare la pornire",
-      "grantSudo": "Acordă sudo",
-      "revokeSudo": "Revocați comanda sudo",
-      "sslIssueCert": "Emite certificat",
-      "sslExpired": "Expirat",
-      "sslInDays": "în {{days}}d",
-      "sslNeedDomain": "Introduceți cel puțin un domeniu",
-      "sslIssued": "Certificat emis",
-      "sslDomainsPlaceholder": "exemplu.com, www.exemplu.com",
-      "sslHttpStandalone": "HTTP (independent)",
-      "sslHttpWebroot": "HTTP (webroot)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "Furnizor DNS (de exemplu, Cloudflare)",
-      "sslIssueHint": "Acreditările furnizorului DNS trebuie să fie deja configurate pe gazdă.",
-      "sslRevoke": "Revocați certificatul",
-      "sslRevoked": "Certificat revocat",
-      "sslRevokeConfirm": "Revocați și eliminați certificatul „{{name}}”? Această acțiune nu poate fi anulată.",
-      "healthRun": "Aleargă",
-      "healthName": "Nume",
-      "healthTarget": "Gazdă / adresă",
-      "healthAddCheck": "Adăugați cec",
-      "healthSaved": "Verificările de sănătate salvate",
-      "healthMissingFields": "Fiecare verificare necesită un nume și o țintă",
-      "logFile": "Fişier",
-      "logUnit": "Unitate",
-      "logCustomPath": "Cale personalizată sub /var/log (opțional)",
-      "logGrep": "Linii de filtrare...",
-      "firewallPersist": "Reguli persistente",
-      "firewallPersisted": "Regulile firewall-ului au persistat",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "WireGuard nu este instalat pe această gazdă",
-      "wgNoInterfaces": "Nicio interfață WireGuard configurată",
-      "wgInterfaceUp": "A menționa",
-      "wgInterfaceDown": "Doborâți",
-      "wgBringingUp": "Se afișează {{name}}...",
-      "wgBringingDown": "Se coboară {{name}}...",
-      "wgInterfaceUpDone": "{{name}} este activ",
-      "wgInterfaceDownDone": "{{name}} este nefuncțional",
-      "wgListenPort": "Port",
-      "wgPublicKey": "Cheie publică",
-      "wgEndpoint": "Punct final",
-      "wgAllowedIPs": "IP-uri permise",
-      "wgLastHandshake": "Ultima strângere de mână",
-      "wgHandshakeNever": "Nu",
-      "wgTransfer": "Transfer",
-      "wgNoPeers": "Fără colegi"
-    }
-  },
-  "metricsHistory": {
-    "title": "Istoricul metricilor",
-    "historySuffix": "Istorie",
-    "cpuMemoryDisk": "CPU / Memorie / Disc",
-    "network": "Reţea",
-    "download": "RX",
-    "upload": "TX",
-    "noData": "Nu sunt disponibile date istorice pentru acest interval de timp.",
-    "custom": "Personalizat",
-    "to": "la",
-    "apply": "Aplică",
-    "viewHistory": "Vizualizați istoricul"
-  },
-  "hosts": {
-    "tabHostMetrics": "Metrici ale gazdei",
-    "metricsCollectionLabel": "Colecție de metrici",
-    "enableMetricsLabel": "Activați metricile",
-    "enableMetricsDesc": "Colectați valori pentru CPU, RAM, disc și alte valori de la această gazdă",
-    "useGlobalMetrics": "Utilizați intervalul global",
-    "useGlobalMetricsDesc": "Suprascriere cu intervalul de metrici la nivel de server",
-    "metricsIntervalS": "Interval (s) de metrică",
-    "metricsIntervalDesc2": "Secunde între instantaneele metricelor",
-    "excludedMountsLabel": "Monturi excluse",
-    "monitoredMountsLabel": "Căi monitorizate personalizate",
-    "monitoredMountsDesc": "Adăugați căi care nu sunt expuse ca monturi separate, inclusiv căi Home Assistant montate prin bind, cum ar fi /config.",
-    "monitoredMountPathPlaceholder": "Cale (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Etichetă (opțional)",
-    "addMonitoredMount": "Adăugați o cale",
-    "excludedMountsDesc": "Ascunde anumite puncte de montare sau tipuri de sisteme de fișiere (de exemplu, nfs, cifs) de utilizarea discului și de alertele pentru această gazdă.",
-    "excludedMountsPlaceholder": "Calea de montare (/mnt/nas) sau tipul sistemului de fișiere (nfs, cifs)",
-    "excludedMountsEmpty": "Nicio montare exclusă. Sunt afișate toate sistemele de fișiere detectate.",
-    "addExcludedMount": "Adăuga",
-    "visibleWidgets": "Widgeturi vizibile",
-    "widgetsMovedToHostMetrics": "Cardurile sunt acum adăugate, aranjate și redimensionate direct în fila Indicatori gazdă. Deschideți Indicatori gazdă pentru această gazdă și utilizați Personalizare pentru a alege ce carduri sunt afișate.",
-    "hostNotFound": "Gazdă negăsită",
-    "loadingHost": "Se încarcă gazda..."
-  },
-  "onboarding": {
-    "feature_metrics": "Metrici și alerte",
-    "feature_metrics_desc": "Urmărește procesorul, memoria și discul în timp și primește alerte când acestea se defectează."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Păstrarea istoricului metricilor",
-    "metricsHistoryRetentionRange": "1 până la 90 de zile",
-    "days": "zile"
-  },
-  "homepage": {
-    "noData": "Nu sunt disponibile date",
-    "showCurrentValue": "Afișează valoarea curentă",
-    "chartMetric": "Metric",
-    "metricRange": "Gamă",
-    "host": "Gazdă",
-    "loading": "Încărcare...",
-    "metricCpu": "CPU",
-    "metricDisk": "Disc",
-    "metricHostname": "Nume gazdă",
-    "metricKernel": "Nucleu",
-    "metricMemory": "Memorie",
-    "metricNetwork": "Reţea",
-    "metricOs": "Sistem de operare",
-    "metricProcesses": "Procese",
-    "metricProcessesRunning": "funcţionare",
-    "metricProcessesTotal": "total",
-    "metricUptime": "Timp de funcționare",
-    "metricsNotAvailable": "Indicatorii nu sunt disponibili",
-    "noHostSelected": "Nicio gazdă selectată",
-    "selectHost": "Selectați o gazdă..."
-  },
-  "terminalStatus": {
-    "unavailable": "Statistici live indisponibile"
-  },
-  "dashboard": {
-    "cpu": "CPU",
-    "ram": "RAM"
-  },
-  "dashboardTab": {
-    "disk": "Disc"
-  },
-  "terminal": {
-    "connected": "Conectat"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilizați metricile gazdei",
-      "description": "Vizualizați metricile gazdei și utilizați managerii de gazdă (servicii, pachete, firewall și altele) pe gazdele pe care le puteți accesa."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Interval de metrici (secunde)",
-        "description": "Cât de des este eșantionată o gazdă vizualizată, cu excepția cazului în care gazda își stabilește propriul interval."
-      },
-      "historyRetentionDays": {
-        "label": "Păstrarea istoricului (zile)",
-        "description": "Cât timp sunt păstrate mostrele de metrici pentru graficele istorice."
-      },
-      "enabledForNewHosts": {
-        "label": "Metrici activate pentru gazdele noi",
-        "description": "Dacă noile gazde încep cu colectarea de metrici activată."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Unitate de temperatură",
-        "description": "Cum sunt afișate temperaturile în Metricile gazdei.",
-        "celsius": "Celsius",
-        "fahrenheit": "Fahrenheit"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Colectați valori metrice"
-      },
-      "metricsInterval": {
-        "label": "Interval de metrici (secunde)"
-      },
-      "enabledWidgets": {
-        "label": "Widgeturi activate"
-      },
-      "excludedMounts": {
-        "label": "Monturi excluse"
-      },
-      "monitoredMounts": {
-        "label": "Căi monitorizate"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Metrici ale gazdei"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/ru_RU.json b/plugins/host-metrics/locales/translated/ru_RU.json
deleted file mode 100644
index 5ea1c0bd2..000000000
--- a/plugins/host-metrics/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Метрики хоста"
-  },
-  "hostMetrics": {
-    "cpu": "ЦП",
-    "memory": "Память",
-    "disk": "Диск",
-    "network": "Сеть",
-    "uptime": "Время работы",
-    "processes": "Процессы",
-    "available": "Доступно",
-    "free": "Свободно",
-    "connecting": "Подключение...",
-    "connectionFailed": "Не удалось подключиться к серверу",
-    "naCpus": "Н/Д ЦП",
-    "cpuCores_one": "{{count}} ядро",
-    "cpuCores_other": "{{count}} ядер",
-    "cpuUsage": "Использование ЦП",
-    "memoryUsage": "Использование памяти",
-    "diskUsage": "Использование диска",
-    "selectFilesystem": "Выберите файловую систему",
-    "temperature": "Температура",
-    "highestTemperature": "Максимальная температура",
-    "primaryTemperatureSensor": "Основной датчик",
-    "gpu": {
-      "title": "GPU",
-      "noDevice": "Графический процессор NVIDIA не обнаружен. Установите драйвер NVIDIA (он включает nvidia-smi), чтобы увидеть показатели графического процессора.",
-      "driver": "Водитель {{version}}",
-      "utilization": "Использование",
-      "memory": "ВПМ",
-      "temperature": "Температура",
-      "power": "Власть",
-      "fan": "Вентилятор",
-      "processes": "процессы графического процессора",
-      "noProcesses": "Никакие процессы не используют графический процессор."
-    },
-    "failedToFetchHostConfig": "Не удалось получить конфигурацию хоста",
-    "serverOffline": "Сервер недоступен",
-    "cannotFetchMetrics": "Не удалось загрузить метрики с недоступного сервера",
-    "totpFailed": "Проверка TOTP не пройдена",
-    "noneAuthNotSupported": "Host Metrics не поддерживает тип аутентификации 'none'.",
-    "noHostSelected": "Хост не выбран",
-    "load": "Нагрузка",
-    "systemInfo": "Информация о системе",
-    "hostname": "Имя хоста",
-    "operatingSystem": "Операционная система",
-    "kernel": "Ядро",
-    "seconds": "секунды",
-    "networkInterfaces": "Сетевые интерфейсы",
-    "noInterfacesFound": "Сетевые интерфейсы не найдены",
-    "noProcessesFound": "Процессы не найдены",
-    "processesTotal": "всего",
-    "processesRunning": "выполняется",
-    "loginStats": "Статистика входов SSH",
-    "noRecentLoginData": "Нет данных о недавних входах",
-    "ports": {
-      "title": "Прослушиваемые порты",
-      "protocol": "Протокол",
-      "port": "Порт",
-      "address": "Адрес",
-      "process": "Процесс",
-      "search": "Поиск портов...",
-      "allProtocols": "Все",
-      "noData": "Нет данных о прослушиваемых портах"
-    },
-    "firewall": {
-      "title": "Брандмауэр",
-      "inactive": "Неактивен",
-      "policy": "Политика",
-      "rules": "правила",
-      "noRules": "Нет правил в этой цепочке",
-      "noData": "Нет данных о брандмауэре",
-      "action": "Действие",
-      "protocol": "Протокол",
-      "port": "Порт",
-      "source": "Источник",
-      "anywhere": "Любое",
-      "chains": "цепочки"
-    },
-    "loadAvg": "Средняя нагрузка",
-    "swap": "Своп",
-    "architecture": "Архитектура",
-    "refresh": "Обновить",
-    "retry": "Повторить",
-    "customize": "Настроить макет",
-    "reset": "Сбросить",
-    "tabLive": "Онлайн",
-    "editModeInstructions": "Перетаскивайте карточки для изменения порядка, перетаскивайте нижний край для изменения размера и используйте кнопку ширины, чтобы изменить занимаемое пространство. Добавляйте или удаляйте карточки ниже.",
-    "managers": {
-      "services": "Службы",
-      "processInspector": "Инспектор процессов",
-      "logViewer": "Просмотр журналов",
-      "cron": "Задания Cron",
-      "packages": "Пакеты",
-      "ssl": "SSL-сертификаты",
-      "firewall": "Брандмауэр",
-      "users": "Пользователи и разрешения",
-      "healthCheck": "Проверки состояния",
-      "diskBreakdown": "Разбивка дисков",
-      "systemdTimers": "Таймеры",
-      "topMemory": "Топ по памяти",
-      "noData": "Нет данных",
-      "sudoHint": "Установите пароль sudo для этого хоста в редакторе хостов, чтобы включить привилегированные действия.",
-      "filter": "Фильтр...",
-      "start": "Запустить",
-      "stop": "Остановить",
-      "restart": "Перезапустить",
-      "actionDone": "{{name}} обновлено",
-      "actionFailed": "Действие не удалось",
-      "signalSent": "Сигнал отправлен PID {{pid}}",
-      "killHint": "Нажмите: завершить (SIGTERM). Правый клик: принудительно завершить (SIGKILL).",
-      "working": "Выполняется...",
-      "update": "Обновить",
-      "upgradeAll": "Обновить всё",
-      "allUpToDate": "Всё актуально",
-      "save": "Сохранить",
-      "command": "Команда",
-      "enabled": "Включено",
-      "cronSaved": "Crontab обновлён",
-      "clients": "Клиенты",
-      "dryRun": "Пробный запуск",
-      "renew": "Продлить",
-      "noAcmeClient": "На этом хосте не найден ACME-клиент (certbot или acme.sh).",
-      "addInputRule": "Добавить правило INPUT",
-      "firewallWarning": "Изменения действуют только до перезагрузки, пока не сохранены. Будьте осторожны, чтобы не заблокировать себе доступ.",
-      "ruleApplied": "Правило применено",
-      "invalidPort": "Введите допустимый порт (1–65535)",
-      "newUsername": "Новое имя пользователя",
-      "addUser": "Добавить",
-      "deleteUser": "Удалить пользователя",
-      "noHealthChecks": "Проверки работоспособности ещё не настроены.",
-      "follow": "Следить",
-      "noLogData": "Нет данных журнала.",
-      "tree": "Дерево",
-      "enableDisable": "Включить/отключить при загрузке",
-      "grantSudo": "Предоставить sudo",
-      "revokeSudo": "Отозвать sudo",
-      "sslIssueCert": "Выпустить сертификат",
-      "sslExpired": "Истёк",
-      "sslInDays": "через {{days}}д",
-      "sslNeedDomain": "Введите хотя бы один домен",
-      "sslIssued": "Сертификат выпущен",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (автономный)",
-      "sslHttpWebroot": "HTTP (webroot)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "DNS-провайдер (например, cloudflare)",
-      "sslIssueHint": "Учетные данные DNS-провайдера должны быть уже настроены на хосте.",
-      "sslRevoke": "Отозвать сертификат",
-      "sslRevoked": "Сертификат отозван",
-      "sslRevokeConfirm": "Отозвать и удалить сертификат \"{{name}}\"? Это действие нельзя отменить.",
-      "healthRun": "Запустить",
-      "healthName": "Название",
-      "healthTarget": "Хост / адрес",
-      "healthAddCheck": "Добавить проверку",
-      "healthSaved": "Проверки работоспособности сохранены",
-      "healthMissingFields": "Для каждой проверки нужны название и цель",
-      "logFile": "Файл",
-      "logUnit": "Юнит",
-      "logCustomPath": "Произвольный путь в /var/log (необязательно)",
-      "logGrep": "Фильтр строк...",
-      "firewallPersist": "Сохранить правила",
-      "firewallPersisted": "Правила брандмауэра сохранены",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "WireGuard не установлен на этом хосте",
-      "wgNoInterfaces": "Не настроено ни одного интерфейса WireGuard",
-      "wgInterfaceUp": "Поднять",
-      "wgInterfaceDown": "Отключить",
-      "wgBringingUp": "Поднимается {{name}}...",
-      "wgBringingDown": "Отключается {{name}}...",
-      "wgInterfaceUpDone": "{{name}} поднят",
-      "wgInterfaceDownDone": "{{name}} отключен",
-      "wgListenPort": "Порт",
-      "wgPublicKey": "Открытый ключ",
-      "wgEndpoint": "Конечная точка",
-      "wgAllowedIPs": "Разрешенные IP-адреса",
-      "wgLastHandshake": "Последнее рукопожатие",
-      "wgHandshakeNever": "Никогда",
-      "wgTransfer": "Передано",
-      "wgNoPeers": "Нет равных"
-    }
-  },
-  "metricsHistory": {
-    "title": "История метрик",
-    "historySuffix": "История",
-    "cpuMemoryDisk": "ЦП / Память / Диск",
-    "network": "Сеть",
-    "download": "RX",
-    "upload": "TX",
-    "noData": "Нет исторических данных за этот период.",
-    "custom": "Пользовательский",
-    "to": "по",
-    "apply": "Применить",
-    "viewHistory": "Просмотреть историю"
-  },
-  "hosts": {
-    "tabHostMetrics": "Метрики хоста",
-    "metricsCollectionLabel": "Сбор метрик",
-    "enableMetricsLabel": "Включить метрики",
-    "enableMetricsDesc": "Собирать метрики ЦП, ОЗУ, диска и другие с этого хоста",
-    "useGlobalMetrics": "Использовать глобальный интервал",
-    "useGlobalMetricsDesc": "Переопределить глобальным интервалом сбора метрик сервера",
-    "metricsIntervalS": "Интервал сбора метрик (с)",
-    "metricsIntervalDesc2": "Секунд между снимками метрик",
-    "excludedMountsLabel": "Исключенные крепления",
-    "monitoredMountsLabel": "Пользовательские контролируемые пути",
-    "monitoredMountsDesc": "Добавьте пути, которые не отображаются как отдельные точки монтирования, включая пути Home Assistant, смонтированные с помощью bind-mount, например, /config.",
-    "monitoredMountPathPlaceholder": "Путь (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Метка (необязательно)",
-    "addMonitoredMount": "Добавить путь",
-    "excludedMountsDesc": "Скрыть определенные точки монтирования или типы файловых систем (например, nfs, cifs) от информации об использовании диска и оповещений для этого хоста.",
-    "excludedMountsPlaceholder": "Путь монтирования (/mnt/nas) или тип файловой системы (nfs, cifs)",
-    "excludedMountsEmpty": "Исключены все точки монтирования. Отображаются все обнаруженные файловые системы.",
-    "addExcludedMount": "Добавить",
-    "visibleWidgets": "Видимые виджеты",
-    "widgetsMovedToHostMetrics": "Карточки теперь добавляются, упорядочиваются и изменяются в размере непосредственно на вкладке «Метрики хоста». Откройте метрики для этого хоста и используйте «Настроить», чтобы выбрать отображаемые карточки.",
-    "hostNotFound": "Хост не найден",
-    "loadingHost": "Загрузка хоста..."
-  },
-  "onboarding": {
-    "feature_metrics": "Метрики и оповещения",
-    "feature_metrics_desc": "Отслеживайте состояние процессора, памяти и диска с течением времени и получайте оповещения при возникновении неполадок."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Срок хранения метрик",
-    "metricsHistoryRetentionRange": "от 1 до 90 дней",
-    "days": "дней"
-  },
-  "homepage": {
-    "noData": "Нет данных",
-    "showCurrentValue": "Показать текущее значение",
-    "chartMetric": "Метрика",
-    "metricRange": "Диапазон",
-    "host": "Хост",
-    "loading": "Загрузка...",
-    "metricCpu": "ЦП",
-    "metricDisk": "Диск",
-    "metricHostname": "Имя хоста",
-    "metricKernel": "Ядро",
-    "metricMemory": "Память",
-    "metricNetwork": "Сеть",
-    "metricOs": "ОС",
-    "metricProcesses": "Процессы",
-    "metricProcessesRunning": "запущено",
-    "metricProcessesTotal": "всего",
-    "metricUptime": "Время работы",
-    "metricsNotAvailable": "Метрики недоступны",
-    "noHostSelected": "Хост не выбран",
-    "selectHost": "Выберите хост..."
-  },
-  "terminalStatus": {
-    "unavailable": "Статистика в режиме реального времени недоступна"
-  },
-  "dashboard": {
-    "cpu": "CPU",
-    "ram": "RAM"
-  },
-  "dashboardTab": {
-    "disk": "Диск"
-  },
-  "terminal": {
-    "connected": "Подключено"
-  },
-  "permissions": {
-    "use": {
-      "title": "Используйте метрики хоста",
-      "description": "Просматривайте метрики хоста и используйте менеджеры хостов (службы, пакеты, брандмауэр и многое другое) на доступных вам хостах."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Интервал метрик (секунды)",
-        "description": "Как часто производится выборка данных с просматриваемого хоста, если только хост не устанавливает собственный интервал."
-      },
-      "historyRetentionDays": {
-        "label": "Срок хранения истории болезни (дни)",
-        "description": "Как долго хранятся выборки метрик для построения исторических графиков?"
-      },
-      "enabledForNewHosts": {
-        "label": "Для новых хостов включена функция отслеживания метрик.",
-        "description": "Будет ли сбор метрик включен при запуске новых хостов."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Единица измерения температуры",
-        "description": "Как отображается температура в метриках хоста.",
-        "celsius": "Цельсия",
-        "fahrenheit": "Фаренгейт"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Собирайте метрики"
-      },
-      "metricsInterval": {
-        "label": "Интервал метрик (секунды)"
-      },
-      "enabledWidgets": {
-        "label": "Включенные виджеты"
-      },
-      "excludedMounts": {
-        "label": "Крепления не включены"
-      },
-      "monitoredMounts": {
-        "label": "Контролируемые пути"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Метрики хоста"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/sr_SP.json b/plugins/host-metrics/locales/translated/sr_SP.json
deleted file mode 100644
index 9a08df2b8..000000000
--- a/plugins/host-metrics/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Метрике хоста"
-  },
-  "hostMetrics": {
-    "cpu": "Процесор",
-    "memory": "Памћење",
-    "disk": "Диск",
-    "network": "Мрежа",
-    "uptime": "Време непрекидног рада",
-    "processes": "Процеси",
-    "available": "Доступно",
-    "free": "Бесплатно",
-    "connecting": "Повезивање...",
-    "connectionFailed": "Повезивање са сервером није успело",
-    "naCpus": "Н/Д процесор(и)",
-    "cpuCores_one": "{{count}} Језгро",
-    "cpuCores_other": "{{count}} Језгра",
-    "cpuUsage": "Искоришћеност процесора",
-    "memoryUsage": "Коришћење меморије",
-    "diskUsage": "Искоришћеност диска",
-    "selectFilesystem": "Изаберите фајл систем",
-    "temperature": "Температура",
-    "highestTemperature": "Највиша температура",
-    "primaryTemperatureSensor": "Примарни сензор",
-    "gpu": {
-      "title": "ГПУ",
-      "noDevice": "Није детектована NVIDIA GPU. Инсталирајте NVIDIA драјвер (пружа nvidia-smi) да бисте видели метрике GPU-а.",
-      "driver": "Возач {{version}}",
-      "utilization": "Коришћење",
-      "memory": "Видео меморија",
-      "temperature": "Температура",
-      "power": "Моћ",
-      "fan": "Вентилатор",
-      "processes": "Процеси графичког процесора (GPU)",
-      "noProcesses": "Ниједан процес не користи ГПУ"
-    },
-    "failedToFetchHostConfig": "Није успело преузимање конфигурације хоста",
-    "serverOffline": "Сервер ван мреже",
-    "cannotFetchMetrics": "Није могуће преузети метрике са офлајн сервера",
-    "totpFailed": "Верификација TOTP-а није успела",
-    "noneAuthNotSupported": "Метрике хоста не подржавају тип аутентификације „ниједан“.",
-    "noHostSelected": "Није изабран домаћин",
-    "load": "Учитај",
-    "systemInfo": "Системске информације",
-    "hostname": "Име хоста",
-    "operatingSystem": "Оперативни систем",
-    "kernel": "Језгро",
-    "seconds": "секунде",
-    "networkInterfaces": "Мрежни интерфејси",
-    "noInterfacesFound": "Није пронађен ниједан мрежни интерфејс",
-    "noProcessesFound": "Није пронађен ниједан процес",
-    "processesTotal": "укупно",
-    "processesRunning": "трчање",
-    "loginStats": "Статистика SSH пријава",
-    "noRecentLoginData": "Нема скорашњих података за пријављивање",
-    "ports": {
-      "title": "Портови за слушање",
-      "protocol": "Протокол",
-      "port": "Лука",
-      "address": "Адреса",
-      "process": "Процес",
-      "search": "Претражи портове...",
-      "allProtocols": "Сви",
-      "noData": "Нема података о портовима за слушање"
-    },
-    "firewall": {
-      "title": "Заштитни зид (фајервол)",
-      "inactive": "Неактивно",
-      "policy": "Политика",
-      "rules": "правила",
-      "noRules": "Нема правила у овом ланцу",
-      "noData": "Нема доступних података о заштитном зиду",
-      "action": "Акција",
-      "protocol": "Прото",
-      "port": "Лука",
-      "source": "Извор",
-      "anywhere": "Било где",
-      "chains": "ланци"
-    },
-    "loadAvg": "Учитај просек",
-    "swap": "Замена",
-    "architecture": "Архитектура",
-    "refresh": "Освежи",
-    "retry": "Покушај поново",
-    "customize": "Прилагоди распоред",
-    "reset": "Ресетуј",
-    "tabLive": "Уживо",
-    "editModeInstructions": "Превуците картице да бисте преуредили, превуците доњу ивицу да бисте променили величину и користите дугме за ширину да бисте променили распон картице. Додајте или уклоните картице испод.",
-    "managers": {
-      "services": "Услуге",
-      "processInspector": "Инспектор процеса",
-      "logViewer": "Прегледач дневника",
-      "cron": "Cron послови",
-      "packages": "Пакети",
-      "ssl": "SSL сертификати",
-      "firewall": "Заштитни зид (фајервол)",
-      "users": "Корисници и дозволе",
-      "healthCheck": "Здравствени прегледи",
-      "diskBreakdown": "Распад диска",
-      "systemdTimers": "Тајмери",
-      "topMemory": "Најбоље по сећању",
-      "noData": "Нема података",
-      "sudoHint": "Поставите sudo лозинку за овај хост у уређивачу хостова да бисте омогућили привилеговане акције.",
-      "filter": "Филтер...",
-      "start": "Почетак",
-      "stop": "Заустави",
-      "restart": "Поново покрени",
-      "actionDone": "{{name}} ажурирано",
-      "actionFailed": "Акција није успела",
-      "signalSent": "Сигнал послат на ПИД {{pid}}",
-      "killHint": "Кликните: прекините (SIGTERM). Кликните десним тастером миша: присилно зауставите (SIGKILL).",
-      "working": "Ради се...",
-      "update": "Ажурирање",
-      "upgradeAll": "Надогради све",
-      "allUpToDate": "Све је ажурирано",
-      "save": "Сачувај",
-      "command": "Команда",
-      "enabled": "Омогућено",
-      "cronSaved": "Кронтаб је ажуриран",
-      "clients": "Клијенти",
-      "dryRun": "Пробни рад",
-      "renew": "Обнови",
-      "noAcmeClient": "Није пронађен ACME клијент (certbot или acme.sh) на овом хосту.",
-      "addInputRule": "Додај INPUT правило",
-      "firewallWarning": "Промене су само за време извршавања док се не сачувају. Пазите да се не закључате.",
-      "ruleApplied": "Правило је примењено",
-      "invalidPort": "Унесите важећи порт (1-65535)",
-      "newUsername": "Ново корисничко име",
-      "addUser": "Додај",
-      "deleteUser": "Обриши корисника",
-      "noHealthChecks": "Још увек нису конфигурисане провере исправности.",
-      "follow": "Прати",
-      "noLogData": "Нема излаза лог-а.",
-      "tree": "Дрво",
-      "enableDisable": "Омогући/онемогући при покретању",
-      "grantSudo": "Додели судо",
-      "revokeSudo": "Поништи sudo",
-      "sslIssueCert": "Издај сертификат",
-      "sslExpired": "Истекло",
-      "sslInDays": "у {{days}}д",
-      "sslNeedDomain": "Унесите барем један домен",
-      "sslIssued": "Издат сертификат",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (самостални)",
-      "sslHttpWebroot": "HTTP (вебрут)",
-      "sslDns": "ДНС",
-      "sslDnsProvider": "DNS провајдер (нпр. cloudflare)",
-      "sslIssueHint": "Акредитиви DNS провајдера морају већ бити конфигурисани на хосту.",
-      "sslRevoke": "Поништи сертификат",
-      "sslRevoked": "Сертификат опозван",
-      "sslRevokeConfirm": "Поништити и уклонити сертификат „{{name}}“? Ово се не може поништити.",
-      "healthRun": "Трчи",
-      "healthName": "Име",
-      "healthTarget": "Домаћин / адреса",
-      "healthAddCheck": "Додај чек",
-      "healthSaved": "Провере здравственог стања сачуване",
-      "healthMissingFields": "Свака провера захтева име и циљ",
-      "logFile": "Датотека",
-      "logUnit": "Јединица",
-      "logCustomPath": "Прилагођена путања у /var/log (опционо)",
-      "logGrep": "Филтерске линије...",
-      "firewallPersist": "Правила трајања",
-      "firewallPersisted": "Правила заштитног зида су опстала",
-      "wireguard": "ВајерГард",
-      "wgNotInstalled": "WireGuard није инсталиран на овом хосту",
-      "wgNoInterfaces": "Није конфигурисан ниједан WireGuard интерфејс",
-      "wgInterfaceUp": "Поведи",
-      "wgInterfaceDown": "Срушити",
-      "wgBringingUp": "Доводи се {{name}} горе...",
-      "wgBringingDown": "Спуштање {{name}}...",
-      "wgInterfaceUpDone": "{{name}} је горе",
-      "wgInterfaceDownDone": "{{name}} је неактиван",
-      "wgListenPort": "Лука",
-      "wgPublicKey": "Јавни кључ",
-      "wgEndpoint": "Крајња тачка",
-      "wgAllowedIPs": "Дозвољене IP адресе",
-      "wgLastHandshake": "Последње руковање",
-      "wgHandshakeNever": "Никад",
-      "wgTransfer": "Пренос",
-      "wgNoPeers": "Нема вршњака"
-    }
-  },
-  "metricsHistory": {
-    "title": "Историја метрика",
-    "historySuffix": "Историја",
-    "cpuMemoryDisk": "Процесор / Меморија / Диск",
-    "network": "Мрежа",
-    "download": "Рецепт",
-    "upload": "Тексас",
-    "noData": "Нема доступних историјских података за овај временски опсег.",
-    "custom": "Прилагођено",
-    "to": "до",
-    "apply": "Примени",
-    "viewHistory": "Прикажи историју"
-  },
-  "hosts": {
-    "tabHostMetrics": "Метрике хоста",
-    "metricsCollectionLabel": "Колекција метрика",
-    "enableMetricsLabel": "Омогући метрике",
-    "enableMetricsDesc": "Прикупљајте метрику процесора, RAM-а, диска и друге показатеље са овог хоста",
-    "useGlobalMetrics": "Користи глобални интервал",
-    "useGlobalMetricsDesc": "Замени интервалом метрика на нивоу сервера",
-    "metricsIntervalS": "Интервал(и) метрика",
-    "metricsIntervalDesc2": "Секунде између снимака метрика",
-    "excludedMountsLabel": "Искључени носачи",
-    "monitoredMountsLabel": "Прилагођене праћене путање",
-    "monitoredMountsDesc": "Додајте путање које нису изложене као засебне монтиране верзије, укључујући путање за Home Assistant монтиране помоћу повезивања, као што је /config.",
-    "monitoredMountPathPlaceholder": "Путања (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Ознака (опционо)",
-    "addMonitoredMount": "Додај путању",
-    "excludedMountsDesc": "Сакријте одређене тачке монтирања или типове фајл система (нпр. nfs, cifs) од коришћења диска и упозорења за овај хост.",
-    "excludedMountsPlaceholder": "Путања монтирања (/mnt/nas) или тип фајл система (nfs, cifs)",
-    "excludedMountsEmpty": "Није искључено ниједно монтирање. Приказани су сви откривени фајл системи.",
-    "addExcludedMount": "Додај",
-    "visibleWidgets": "Видљиви виџети",
-    "widgetsMovedToHostMetrics": "Картице се сада додају, распоређују и мењају им се величина директно на картици „Host Metrics“. Отворите „Host Metrics“ за овог хоста и користите „Customize“ да бисте изабрали које ће картице бити приказане.",
-    "hostNotFound": "Хост није пронађен",
-    "loadingHost": "Учитавање хоста..."
-  },
-  "onboarding": {
-    "feature_metrics": "Метрике и упозорења",
-    "feature_metrics_desc": "Пратите процесор, меморију и диск током времена и добијајте обавештења када дође до квара."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Чување историје метрика",
-    "metricsHistoryRetentionRange": "Од 1 до 90 дана",
-    "days": "дана"
-  },
-  "homepage": {
-    "noData": "Нема доступних података",
-    "showCurrentValue": "Прикажи тренутну вредност",
-    "chartMetric": "Метрика",
-    "metricRange": "Домет",
-    "host": "Домаћин",
-    "loading": "Учитавање...",
-    "metricCpu": "Процесор",
-    "metricDisk": "Диск",
-    "metricHostname": "Име хоста",
-    "metricKernel": "Језгро",
-    "metricMemory": "Памћење",
-    "metricNetwork": "Мрежа",
-    "metricOs": "ОС",
-    "metricProcesses": "Процеси",
-    "metricProcessesRunning": "трчање",
-    "metricProcessesTotal": "укупно",
-    "metricUptime": "Време непрекидног рада",
-    "metricsNotAvailable": "Метрике нису доступне",
-    "noHostSelected": "Није изабран домаћин",
-    "selectHost": "Изаберите хост..."
-  },
-  "terminalStatus": {
-    "unavailable": "Статистика уживо није доступна"
-  },
-  "dashboard": {
-    "cpu": "Процесор",
-    "ram": "РАМ меморија"
-  },
-  "dashboardTab": {
-    "disk": "Диск"
-  },
-  "terminal": {
-    "connected": "Повезано"
-  },
-  "permissions": {
-    "use": {
-      "title": "Користите метрике хоста",
-      "description": "Погледајте метрике хоста и користите менаџере хоста (сервисе, пакете, заштитни зид и још много тога) на хостовима којима можете приступити."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Интервал метрика (секунде)",
-        "description": "Колико често се узоркује прегледани хост, осим ако хост не подеси сопствени интервал."
-      },
-      "historyRetentionDays": {
-        "label": "Чување историје (дани)",
-        "description": "Колико дуго се чувају узорци метрика за графиконе историје."
-      },
-      "enabledForNewHosts": {
-        "label": "Метрике су укључене за нове хостове",
-        "description": "Да ли нови хостови почињу са укљученим прикупљањем метрика."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Јединица температуре",
-        "description": "Како се температуре приказују у метрикама хоста.",
-        "celsius": "Целзијус",
-        "fahrenheit": "Фаренхајт"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Прикупљајте метрике"
-      },
-      "metricsInterval": {
-        "label": "Интервал метрика (секунде)"
-      },
-      "enabledWidgets": {
-        "label": "Омогућени виџети"
-      },
-      "excludedMounts": {
-        "label": "Искључени носачи"
-      },
-      "monitoredMounts": {
-        "label": "Праћене путање"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Метрике хоста"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/sv_SE.json b/plugins/host-metrics/locales/translated/sv_SE.json
deleted file mode 100644
index 94077161c..000000000
--- a/plugins/host-metrics/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Värdstatistik"
-  },
-  "hostMetrics": {
-    "cpu": "CPU",
-    "memory": "Minne",
-    "disk": "Disk",
-    "network": "Nätverk",
-    "uptime": "Drifttid",
-    "processes": "Processer",
-    "available": "Tillgänglig",
-    "free": "Gratis",
-    "connecting": "Ansluter...",
-    "connectionFailed": "Misslyckades med att ansluta till servern",
-    "naCpus": "Ej tillämpligt CPU(er)",
-    "cpuCores_one": "{{count}} Kärna",
-    "cpuCores_other": "{{count}} Kärnor",
-    "cpuUsage": "CPU-användning",
-    "memoryUsage": "Minnesanvändning",
-    "diskUsage": "Diskanvändning",
-    "selectFilesystem": "Välj filsystem",
-    "temperature": "Temperatur",
-    "highestTemperature": "Högsta temperatur",
-    "primaryTemperatureSensor": "Primär sensor",
-    "gpu": {
-      "title": "GPU",
-      "noDevice": "Ingen NVIDIA GPU hittades. Installera NVIDIA-drivrutinen (den tillhandahåller nvidia-smi) för att se GPU-statistik.",
-      "driver": "Förare {{version}}",
-      "utilization": "Utnyttjande",
-      "memory": "VRAM",
-      "temperature": "Temp",
-      "power": "Driva",
-      "fan": "Fläkt",
-      "processes": "GPU-processer",
-      "noProcesses": "Inga processer använder GPU:n"
-    },
-    "failedToFetchHostConfig": "Misslyckades med att hämta värdkonfigurationen",
-    "serverOffline": "Servern är offline",
-    "cannotFetchMetrics": "Kan inte hämta mätvärden från offlineservern",
-    "totpFailed": "TOTP-verifiering misslyckades",
-    "noneAuthNotSupported": "Host Metrics stöder inte autentiseringstypen 'ingen'.",
-    "noHostSelected": "Ingen värd vald",
-    "load": "Ladda",
-    "systemInfo": "Systeminformation",
-    "hostname": "Värdnamn",
-    "operatingSystem": "Operativsystem",
-    "kernel": "Kärna",
-    "seconds": "sekunder",
-    "networkInterfaces": "Nätverksgränssnitt",
-    "noInterfacesFound": "Inga nätverksgränssnitt hittades",
-    "noProcessesFound": "Inga processer hittades",
-    "processesTotal": "total",
-    "processesRunning": "spring",
-    "loginStats": "SSH-inloggningsstatistik",
-    "noRecentLoginData": "Inga aktuella inloggningsuppgifter",
-    "ports": {
-      "title": "Lyssningsportar",
-      "protocol": "Protokoll",
-      "port": "Hamn",
-      "address": "Adress",
-      "process": "Behandla",
-      "search": "Sök portar...",
-      "allProtocols": "Alla",
-      "noData": "Inga lyssningsportdata"
-    },
-    "firewall": {
-      "title": "Brandvägg",
-      "inactive": "Inaktiv",
-      "policy": "Politik",
-      "rules": "regler",
-      "noRules": "Inga regler i den här kedjan",
-      "noData": "Ingen brandväggsdata tillgänglig",
-      "action": "Handling",
-      "protocol": "Proto",
-      "port": "Hamn",
-      "source": "Källa",
-      "anywhere": "Någonstans",
-      "chains": "kedjor"
-    },
-    "loadAvg": "Ladda genomsnitt",
-    "swap": "Byta",
-    "architecture": "Arkitektur",
-    "refresh": "Uppdatera",
-    "retry": "Försöka igen",
-    "customize": "Anpassa layouten",
-    "reset": "Återställa",
-    "tabLive": "Bo",
-    "editModeInstructions": "Dra kort för att ordna om, dra i den nedre kanten för att ändra storlek och använd breddknappen för att ändra ett korts längd. Lägg till eller ta bort kort nedan.",
-    "managers": {
-      "services": "Tjänster",
-      "processInspector": "Processinspektör",
-      "logViewer": "Loggvisare",
-      "cron": "Cron-jobb",
-      "packages": "Paket",
-      "ssl": "SSL-certifikat",
-      "firewall": "Brandvägg",
-      "users": "Användare och behörigheter",
-      "healthCheck": "Hälsokontroller",
-      "diskBreakdown": "Diskuppdelning",
-      "systemdTimers": "Timers",
-      "topMemory": "Topp av Memory",
-      "noData": "Inga uppgifter",
-      "sudoHint": "Ange ett sudo-lösenord för den här värden i värdredigeraren för att aktivera privilegierade åtgärder.",
-      "filter": "Filtrera...",
-      "start": "Start",
-      "stop": "Stopp",
-      "restart": "Starta om",
-      "actionDone": "{{name}} uppdaterad",
-      "actionFailed": "Åtgärden misslyckades",
-      "signalSent": "Signal skickad till PID {{pid}}",
-      "killHint": "Klicka: avsluta (SIGTERM). Högerklicka: tvinga bort (SIGKILL).",
-      "working": "Arbetssätt...",
-      "update": "Uppdatera",
-      "upgradeAll": "Uppgradera alla",
-      "allUpToDate": "Allt är uppdaterat",
-      "save": "Spara",
-      "command": "Kommando",
-      "enabled": "Aktiverad",
-      "cronSaved": "Crontab uppdaterad",
-      "clients": "klienter",
-      "dryRun": "Torrkörning",
-      "renew": "Förnya",
-      "noAcmeClient": "Ingen ACME-klient (certbot eller acme.sh) hittades på den här värden.",
-      "addInputRule": "Lägg till INPUT-regel",
-      "firewallWarning": "Ändringarna gäller endast under körning tills de sparas. Var försiktig så att du inte låser dig ute.",
-      "ruleApplied": "Regel tillämpad",
-      "invalidPort": "Ange en giltig port (1-65535)",
-      "newUsername": "Nytt användarnamn",
-      "addUser": "Tillägga",
-      "deleteUser": "Ta bort användare",
-      "noHealthChecks": "Inga hälsokontroller har konfigurerats ännu.",
-      "follow": "Följa",
-      "noLogData": "Ingen loggutgång.",
-      "tree": "Träd",
-      "enableDisable": "Aktivera/avaktivera vid start",
-      "grantSudo": "Bevilja sudo",
-      "revokeSudo": "Återkalla sudo",
-      "sslIssueCert": "Utfärdande av certifikat",
-      "sslExpired": "Utgången",
-      "sslInDays": "i {{days}}d",
-      "sslNeedDomain": "Ange minst en domän",
-      "sslIssued": "Certifikat utfärdat",
-      "sslDomainsPlaceholder": "exempel.com, www.example.com",
-      "sslHttpStandalone": "HTTP (fristående)",
-      "sslHttpWebroot": "HTTP (webbrot)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "DNS-leverantör (t.ex. Cloudflare)",
-      "sslIssueHint": "DNS-leverantörens inloggningsuppgifter måste redan vara konfigurerade på värden.",
-      "sslRevoke": "Återkalla certifikat",
-      "sslRevoked": "Certifikat återkallat",
-      "sslRevokeConfirm": "Återkalla och ta bort certifikatet \"{{name}}\"? Detta kan inte ångras.",
-      "healthRun": "Sikt",
-      "healthName": "Namn",
-      "healthTarget": "Värd / adress",
-      "healthAddCheck": "Lägg till check",
-      "healthSaved": "Hälsokontroller sparade",
-      "healthMissingFields": "Varje kontroll behöver ett namn och ett mål",
-      "logFile": "Fil",
-      "logUnit": "Enhet",
-      "logCustomPath": "Anpassad sökväg under /var/log (valfritt)",
-      "logGrep": "Filtrera rader...",
-      "firewallPersist": "Bevara regler",
-      "firewallPersisted": "Brandväggsreglerna bibehölls",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "WireGuard är inte installerat på den här värddatorn",
-      "wgNoInterfaces": "Inga WireGuard-gränssnitt konfigurerade",
-      "wgInterfaceUp": "Få upp",
-      "wgInterfaceDown": "Sänka",
-      "wgBringingUp": "Tar upp {{name}}...",
-      "wgBringingDown": "Att fälla {{name}}...",
-      "wgInterfaceUpDone": "{{name}} är uppe",
-      "wgInterfaceDownDone": "{{name}} är nere",
-      "wgListenPort": "Hamn",
-      "wgPublicKey": "Offentlig nyckel",
-      "wgEndpoint": "Slutpunkt",
-      "wgAllowedIPs": "Tillåtna IP-adresser",
-      "wgLastHandshake": "Sista handskakningen",
-      "wgHandshakeNever": "Aldrig",
-      "wgTransfer": "Överföra",
-      "wgNoPeers": "Inga jämnåriga"
-    }
-  },
-  "metricsHistory": {
-    "title": "Statistikhistorik",
-    "historySuffix": "Historia",
-    "cpuMemoryDisk": "CPU / Minne / Disk",
-    "network": "Nätverk",
-    "download": "RX",
-    "upload": "TX",
-    "noData": "Ingen historikdata tillgänglig för detta tidsintervall.",
-    "custom": "Beställnings",
-    "to": "till",
-    "apply": "Tillämpas",
-    "viewHistory": "Visa historik"
-  },
-  "hosts": {
-    "tabHostMetrics": "Värdstatistik",
-    "metricsCollectionLabel": "Metriksamling",
-    "enableMetricsLabel": "Aktivera mätvärden",
-    "enableMetricsDesc": "Samla in CPU, RAM, disk och andra mätvärden från den här värden",
-    "useGlobalMetrics": "Använd globalt intervall",
-    "useGlobalMetricsDesc": "Åsidosätt med det serveromfattande mätintervallet",
-    "metricsIntervalS": "Mätintervall (s)",
-    "metricsIntervalDesc2": "Sekunder mellan mätvärdesbilder",
-    "excludedMountsLabel": "Undantagna fästen",
-    "monitoredMountsLabel": "Anpassade övervakade sökvägar",
-    "monitoredMountsDesc": "Lägg till sökvägar som inte exponeras som separata monteringar, inklusive bindningsmonterade Home Assistant-sökvägar som /config.",
-    "monitoredMountPathPlaceholder": "Sökväg (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Etikett (valfritt)",
-    "addMonitoredMount": "Lägg till sökväg",
-    "excludedMountsDesc": "Dölj specifika monteringspunkter eller filsystemtyper (t.ex. nfs, cifs) från diskanvändning och aviseringar för den här värden.",
-    "excludedMountsPlaceholder": "Monteringssökväg (/mnt/nas) eller filsystemtyp (nfs, cifs)",
-    "excludedMountsEmpty": "Inga monteringar är undantagna. Alla upptäckta filsystem visas.",
-    "addExcludedMount": "Tillägga",
-    "visibleWidgets": "Synliga widgetar",
-    "widgetsMovedToHostMetrics": "Kort läggs nu till, ordnas och ändras i storlek direkt på fliken Värdstatistik. Öppna Värdstatistik för den här värden och använd Anpassa för att välja vilka kort som visas.",
-    "hostNotFound": "Värden hittades inte",
-    "loadingHost": "Laddar värd..."
-  },
-  "onboarding": {
-    "feature_metrics": "Mätvärden och varningar",
-    "feature_metrics_desc": "Spåra CPU, minne och disk över tid och få en avisering när de blir dåliga."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Bevarande av mätvärdenas historik",
-    "metricsHistoryRetentionRange": "1 till 90 dagar",
-    "days": "dagar"
-  },
-  "homepage": {
-    "noData": "Inga data tillgängliga",
-    "showCurrentValue": "Visa aktuellt värde",
-    "chartMetric": "Metrisk",
-    "metricRange": "Räckvidd",
-    "host": "Värd",
-    "loading": "Belastning...",
-    "metricCpu": "CPU",
-    "metricDisk": "Disk",
-    "metricHostname": "Värdnamn",
-    "metricKernel": "Kärna",
-    "metricMemory": "Minne",
-    "metricNetwork": "Nätverk",
-    "metricOs": "operativsystem",
-    "metricProcesses": "Processer",
-    "metricProcessesRunning": "spring",
-    "metricProcessesTotal": "total",
-    "metricUptime": "Drifttid",
-    "metricsNotAvailable": "Mätvärden är inte tillgängliga",
-    "noHostSelected": "Ingen värd vald",
-    "selectHost": "Välj en värd..."
-  },
-  "terminalStatus": {
-    "unavailable": "Livestatistik är inte tillgänglig"
-  },
-  "dashboard": {
-    "cpu": "CPU",
-    "ram": "RAM-minne"
-  },
-  "dashboardTab": {
-    "disk": "Disk"
-  },
-  "terminal": {
-    "connected": "Ansluten"
-  },
-  "permissions": {
-    "use": {
-      "title": "Använd värdmätvärden",
-      "description": "Visa värdstatistik och använd värdhanterare (tjänster, paket, brandvägg med mera) på värdar du kan nå."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Mätintervall (sekunder)",
-        "description": "Hur ofta en värd som visas samplas, såvida inte värden anger sitt eget intervall."
-      },
-      "historyRetentionDays": {
-        "label": "Historiklagring (dagar)",
-        "description": "Hur länge mätvärden sparas för historikdiagrammen."
-      },
-      "enabledForNewHosts": {
-        "label": "Mätvärden aktiverade för nya värdar",
-        "description": "Om nya värdar börjar med att mätvärdesinsamling är aktiverad."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Temperaturenhet",
-        "description": "Hur temperaturer visas i Host Metrics.",
-        "celsius": "Celsius",
-        "fahrenheit": "Fahrenheit"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Samla in mätvärden"
-      },
-      "metricsInterval": {
-        "label": "Mätintervall (sekunder)"
-      },
-      "enabledWidgets": {
-        "label": "Aktiverade widgetar"
-      },
-      "excludedMounts": {
-        "label": "Undantagna fästen"
-      },
-      "monitoredMounts": {
-        "label": "Övervakade vägar"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Värdstatistik"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/th_TH.json b/plugins/host-metrics/locales/translated/th_TH.json
deleted file mode 100644
index 095c76b39..000000000
--- a/plugins/host-metrics/locales/translated/th_TH.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "เมตริกโฮสต์"
-  },
-  "hostMetrics": {
-    "cpu": "ซีพียู",
-    "memory": "หน่วยความจำ",
-    "disk": "ดิสก์",
-    "network": "เครือข่าย",
-    "uptime": "เวลาใช้งาน",
-    "processes": "กระบวนการ",
-    "available": "มีอยู่",
-    "free": "ฟรี",
-    "connecting": "กำลังเชื่อมต่อ...",
-    "connectionFailed": "ไม่สามารถเชื่อมต่อกับเซิร์ฟเวอร์ได้",
-    "naCpus": "ไม่มีข้อมูล CPU",
-    "cpuCores_one": "{{count}} แกนหลัก",
-    "cpuCores_other": "{{count}} คอร์",
-    "cpuUsage": "การใช้งาน CPU",
-    "memoryUsage": "การใช้งานหน่วยความจำ",
-    "diskUsage": "การใช้งานดิสก์",
-    "selectFilesystem": "เลือกไฟล์ระบบ",
-    "temperature": "อุณหภูมิ",
-    "highestTemperature": "อุณหภูมิสูงสุด",
-    "primaryTemperatureSensor": "เซ็นเซอร์หลัก",
-    "gpu": {
-      "title": "จีพี",
-      "noDevice": "ไม่พบการ์ดจอ NVIDIA โปรดติดตั้งไดรเวอร์ NVIDIA (ซึ่งมีโปรแกรม nvidia-smi ให้ใช้งาน) เพื่อดูข้อมูลการทำงานของ GPU",
-      "driver": "คนขับ {{version}}",
-      "utilization": "การใช้ประโยชน์",
-      "memory": "วีแรม",
-      "temperature": "อุณหภูมิ",
-      "power": "พลัง",
-      "fan": "พัดลม",
-      "processes": "การประมวลผล GPU",
-      "noProcesses": "ไม่มีกระบวนการใดกำลังใช้งาน GPU อยู่"
-    },
-    "failedToFetchHostConfig": "ไม่สามารถดึงข้อมูลการกำหนดค่าโฮสต์ได้",
-    "serverOffline": "เซิร์ฟเวอร์ออฟไลน์",
-    "cannotFetchMetrics": "ไม่สามารถดึงข้อมูลเมตริกจากเซิร์ฟเวอร์ออฟไลน์ได้",
-    "totpFailed": "การตรวจสอบ TOTP ล้มเหลว",
-    "noneAuthNotSupported": "Host Metrics ไม่รองรับประเภทการตรวจสอบสิทธิ์แบบ 'none'",
-    "noHostSelected": "ไม่ได้เลือกโฮสต์",
-    "load": "โหลด",
-    "systemInfo": "ข้อมูลระบบ",
-    "hostname": "ชื่อโฮสต์",
-    "operatingSystem": "ระบบปฏิบัติการ",
-    "kernel": "เคอร์เนล",
-    "seconds": "วินาที",
-    "networkInterfaces": "อินเทอร์เฟซเครือข่าย",
-    "noInterfacesFound": "ไม่พบอินเทอร์เฟซเครือข่าย",
-    "noProcessesFound": "ไม่พบกระบวนการใดๆ",
-    "processesTotal": "ทั้งหมด",
-    "processesRunning": "วิ่ง",
-    "loginStats": "สถิติการเข้าสู่ระบบ SSH",
-    "noRecentLoginData": "ไม่มีข้อมูลการเข้าสู่ระบบล่าสุด",
-    "ports": {
-      "title": "พอร์ตรับฟัง",
-      "protocol": "โปรโตคอล",
-      "port": "ท่าเรือ",
-      "address": "ที่อยู่",
-      "process": "กระบวนการ",
-      "search": "ค้นหาพอร์ต...",
-      "allProtocols": "ทั้งหมด",
-      "noData": "ไม่มีข้อมูลพอร์ตการฟัง"
-    },
-    "firewall": {
-      "title": "ไฟร์วอลล์",
-      "inactive": "ไม่ใช้งาน",
-      "policy": "นโยบาย",
-      "rules": "กฎ",
-      "noRules": "ไม่มีกฎเกณฑ์ใดๆ ในห่วงโซ่นี้",
-      "noData": "ไม่มีข้อมูลไฟร์วอลล์ให้ใช้งาน",
-      "action": "การกระทำ",
-      "protocol": "โปรโต",
-      "port": "ท่าเรือ",
-      "source": "แหล่งที่มา",
-      "anywhere": "ทุกที่",
-      "chains": "โซ่"
-    },
-    "loadAvg": "โหลดเฉลี่ย",
-    "swap": "แลกเปลี่ยน",
-    "architecture": "สถาปัตยกรรม",
-    "refresh": "รีเฟรช",
-    "retry": "ลองใหม่อีกครั้ง",
-    "customize": "ปรับแต่งเค้าโครง",
-    "reset": "รีเซ็ต",
-    "tabLive": "สด",
-    "editModeInstructions": "ลากการ์ดเพื่อจัดเรียงใหม่ ลากขอบด้านล่างเพื่อปรับขนาด และใช้ปุ่มความกว้างเพื่อเปลี่ยนความกว้างของการ์ด เพิ่มหรือลบการ์ดด้านล่าง",
-    "managers": {
-      "services": "บริการ",
-      "processInspector": "ผู้ตรวจสอบกระบวนการ",
-      "logViewer": "โปรแกรมดูบันทึก",
-      "cron": "งานครอน",
-      "packages": "แพ็คเกจ",
-      "ssl": "ใบรับรอง SSL",
-      "firewall": "ไฟร์วอลล์",
-      "users": "ผู้ใช้และสิทธิ์การเข้าถึง",
-      "healthCheck": "การตรวจสุขภาพ",
-      "diskBreakdown": "การแยกดิสก์",
-      "systemdTimers": "ตัวจับเวลา",
-      "topMemory": "อันดับแรกโดย Memory",
-      "noData": "ไม่มีข้อมูล",
-      "sudoHint": "ตั้งรหัสผ่าน sudo สำหรับโฮสต์นี้ในโปรแกรมแก้ไขโฮสต์เพื่อเปิดใช้งานการดำเนินการที่มีสิทธิ์พิเศษ",
-      "filter": "กรอง...",
-      "start": "เริ่ม",
-      "stop": "หยุด",
-      "restart": "เริ่มใหม่",
-      "actionDone": "{{name}} อัปเดตแล้ว",
-      "actionFailed": "การดำเนินการล้มเหลว",
-      "signalSent": "ส่งสัญญาณไปยัง PID {{pid}}",
-      "killHint": "คลิก: ยุติการทำงาน (SIGTERM) คลิกขวา: บังคับปิดการทำงาน (SIGKILL)",
-      "working": "การทำงาน...",
-      "update": "อัปเดต",
-      "upgradeAll": "อัปเกรดทั้งหมด",
-      "allUpToDate": "ทุกอย่างอัปเดตแล้ว",
-      "save": "บันทึก",
-      "command": "สั่งการ",
-      "enabled": "เปิดใช้งาน",
-      "cronSaved": "อัปเดต Crontab แล้ว",
-      "clients": "ลูกค้า",
-      "dryRun": "การทดลองซ้อม",
-      "renew": "ต่ออายุ",
-      "noAcmeClient": "ไม่พบไคลเอ็นต์ ACME (certbot หรือ acme.sh) บนโฮสต์นี้",
-      "addInputRule": "เพิ่มกฎ INPUT",
-      "firewallWarning": "การเปลี่ยนแปลงจะมีผลเฉพาะขณะรันไทม์จนกว่าจะบันทึกเสร็จสมบูรณ์ โปรดระวังอย่าล็อกตัวเองออกจากระบบ",
-      "ruleApplied": "กฎที่ใช้",
-      "invalidPort": "ป้อนหมายเลขพอร์ตที่ถูกต้อง (1-65535)",
-      "newUsername": "ชื่อผู้ใช้ใหม่",
-      "addUser": "เพิ่ม",
-      "deleteUser": "ลบผู้ใช้",
-      "noHealthChecks": "ยังไม่ได้ตั้งค่าการตรวจสอบสุขภาพใดๆ",
-      "follow": "ติดตาม",
-      "noLogData": "ไม่มีการแสดงผลบันทึกใดๆ",
-      "tree": "ต้นไม้",
-      "enableDisable": "เปิดใช้งาน/ปิดใช้งานเมื่อบูตเครื่อง",
-      "grantSudo": "ให้สิทธิ์ sudo",
-      "revokeSudo": "ยกเลิกสิทธิ์ sudo",
-      "sslIssueCert": "ออกใบรับรอง",
-      "sslExpired": "หมดอายุ",
-      "sslInDays": "ใน {{days}}d",
-      "sslNeedDomain": "ป้อนโดเมนอย่างน้อยหนึ่งโดเมน",
-      "sslIssued": "ออกใบรับรองแล้ว",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (แบบสแตนด์อโลน)",
-      "sslHttpWebroot": "HTTP (webroot)",
-      "sslDns": "เอ็นเอสดี",
-      "sslDnsProvider": "ผู้ให้บริการ DNS (เช่น Cloudflare)",
-      "sslIssueHint": "ต้องตั้งค่าข้อมูลประจำตัวของผู้ให้บริการ DNS บนโฮสต์ไว้แล้ว",
-      "sslRevoke": "เพิกถอนใบรับรอง",
-      "sslRevoked": "ใบรับรองถูกเพิกถอน",
-      "sslRevokeConfirm": "เพิกถอนและลบใบรับรอง \"{{name}}\"? การดำเนินการนี้ไม่สามารถย้อนกลับได้",
-      "healthRun": "วิ่ง",
-      "healthName": "ชื่อ",
-      "healthTarget": "โฮสต์ / ที่อยู่",
-      "healthAddCheck": "เพิ่มเช็ค",
-      "healthSaved": "บันทึกการตรวจสุขภาพ",
-      "healthMissingFields": "เช็คแต่ละใบต้องมีชื่อและเป้าหมาย",
-      "logFile": "ไฟล์",
-      "logUnit": "หน่วย",
-      "logCustomPath": "เส้นทางที่กำหนดเองภายใต้ /var/log (ไม่บังคับ)",
-      "logGrep": "กรองบรรทัด...",
-      "firewallPersist": "กฎการคงอยู่",
-      "firewallPersisted": "กฎไฟร์วอลล์ยังคงอยู่",
-      "wireguard": "ไวร์การ์ด",
-      "wgNotInstalled": "WireGuard ไม่ได้ติดตั้งอยู่ในเครื่องนี้",
-      "wgNoInterfaces": "ไม่มีการกำหนดค่าอินเทอร์เฟซ WireGuard",
-      "wgInterfaceUp": "นำมา",
-      "wgInterfaceDown": "นำมาลง",
-      "wgBringingUp": "กำลังนำ {{name}} ขึ้นมา...",
-      "wgBringingDown": "ล้มล้าง {{name}}...",
-      "wgInterfaceUpDone": "{{name}} พร้อมใช้งานแล้ว",
-      "wgInterfaceDownDone": "{{name}} ใช้งานไม่ได้แล้ว",
-      "wgListenPort": "ท่าเรือ",
-      "wgPublicKey": "กุญแจสาธารณะ",
-      "wgEndpoint": "จุดสิ้นสุด",
-      "wgAllowedIPs": "ที่อยู่ IP ที่อนุญาต",
-      "wgLastHandshake": "การจับมือครั้งสุดท้าย",
-      "wgHandshakeNever": "ไม่เคย",
-      "wgTransfer": "โอนย้าย",
-      "wgNoPeers": "ไม่มีเพื่อนร่วมงาน"
-    }
-  },
-  "metricsHistory": {
-    "title": "ประวัติการวัดผล",
-    "historySuffix": "ประวัติศาสตร์",
-    "cpuMemoryDisk": "ซีพียู / หน่วยความจำ / ดิสก์",
-    "network": "เครือข่าย",
-    "download": "อาร์ซี",
-    "upload": "เท็กซัส",
-    "noData": "ไม่มีข้อมูลประวัติสำหรับช่วงเวลานี้",
-    "custom": "กำหนดเอง",
-    "to": "ถึง",
-    "apply": "นำมาใช้",
-    "viewHistory": "ประวัติการดู"
-  },
-  "hosts": {
-    "tabHostMetrics": "เมตริกโฮสต์",
-    "metricsCollectionLabel": "การรวบรวมเมตริก",
-    "enableMetricsLabel": "เปิดใช้งานเมตริก",
-    "enableMetricsDesc": "รวบรวมข้อมูลการใช้งาน CPU, RAM, ดิสก์ และข้อมูลอื่นๆ จากโฮสต์นี้",
-    "useGlobalMetrics": "ใช้ช่วงเวลาทั่วโลก",
-    "useGlobalMetricsDesc": "แทนที่ด้วยช่วงเวลาการวัดเมตริกทั่วทั้งเซิร์ฟเวอร์",
-    "metricsIntervalS": "ช่วงเวลาการวัด (วินาที)",
-    "metricsIntervalDesc2": "จำนวนวินาทีระหว่างการบันทึกภาพเมตริก",
-    "excludedMountsLabel": "การติดตั้งที่ไม่รวมอยู่ในเงื่อนไข",
-    "monitoredMountsLabel": "เส้นทางการตรวจสอบแบบกำหนดเอง",
-    "monitoredMountsDesc": "เพิ่มพาธที่ไม่ถูกเปิดเผยเป็นเมานต์แยกต่างหาก รวมถึงพาธ Home Assistant ที่เชื่อมต่อแบบ bind-mount เช่น /config",
-    "monitoredMountPathPlaceholder": "เส้นทาง (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "ป้ายกำกับ (ไม่บังคับ)",
-    "addMonitoredMount": "เพิ่มเส้นทาง",
-    "excludedMountsDesc": "ซ่อนจุดเชื่อมต่อหรือประเภทระบบไฟล์เฉพาะ (เช่น nfs, cifs) จากการใช้งานดิสก์และการแจ้งเตือนสำหรับโฮสต์นี้",
-    "excludedMountsPlaceholder": "เส้นทางการเชื่อมต่อ (/mnt/nas) หรือประเภทระบบไฟล์ (nfs, cifs)",
-    "excludedMountsEmpty": "ไม่มีการยกเว้นการเมานต์ใดๆ ระบบไฟล์ที่ตรวจพบทั้งหมดจะแสดงขึ้น",
-    "addExcludedMount": "เพิ่ม",
-    "visibleWidgets": "วิดเจ็ตที่มองเห็นได้",
-    "widgetsMovedToHostMetrics": "ขณะนี้สามารถเพิ่ม จัดเรียง และปรับขนาดการ์ดได้โดยตรงในแท็บเมตริกโฮสต์ เปิดเมตริกโฮสต์สำหรับโฮสต์นี้แล้วใช้ ปรับแต่ง เพื่อเลือกการ์ดที่จะแสดง",
-    "hostNotFound": "ไม่พบโฮสต์",
-    "loadingHost": "กำลังโหลดโฮสต์..."
-  },
-  "onboarding": {
-    "feature_metrics": "ตัวชี้วัดและการแจ้งเตือน",
-    "feature_metrics_desc": "ติดตามการทำงานของ CPU หน่วยความจำ และดิสก์อย่างต่อเนื่อง และรับการแจ้งเตือนเมื่ออุปกรณ์เหล่านั้นเริ่มมีปัญหา"
-  },
-  "admin": {
-    "metricsHistoryRetention": "การเก็บรักษาประวัติเมตริก",
-    "metricsHistoryRetentionRange": "1 ถึง 90 วัน",
-    "days": "วัน"
-  },
-  "homepage": {
-    "noData": "ไม่มีข้อมูล",
-    "showCurrentValue": "แสดงมูลค่าปัจจุบัน",
-    "chartMetric": "เมตริก",
-    "metricRange": "พิสัย",
-    "host": "เจ้าภาพ",
-    "loading": "กำลังโหลด...",
-    "metricCpu": "ซีพียู",
-    "metricDisk": "ดิสก์",
-    "metricHostname": "ชื่อโฮสต์",
-    "metricKernel": "เคอร์เนล",
-    "metricMemory": "หน่วยความจำ",
-    "metricNetwork": "เครือข่าย",
-    "metricOs": "โอเอส",
-    "metricProcesses": "กระบวนการ",
-    "metricProcessesRunning": "วิ่ง",
-    "metricProcessesTotal": "ทั้งหมด",
-    "metricUptime": "เวลาใช้งาน",
-    "metricsNotAvailable": "ข้อมูลตัวชี้วัดไม่พร้อมใช้งาน",
-    "noHostSelected": "ไม่ได้เลือกโฮสต์",
-    "selectHost": "เลือกโฮสต์..."
-  },
-  "terminalStatus": {
-    "unavailable": "ไม่สามารถดูสถิติแบบเรียลไทม์ได้"
-  },
-  "dashboard": {
-    "cpu": "ซีพียู",
-    "ram": "แรม"
-  },
-  "dashboardTab": {
-    "disk": "ดิสก์"
-  },
-  "terminal": {
-    "connected": "เชื่อมต่อแล้ว"
-  },
-  "permissions": {
-    "use": {
-      "title": "ใช้เมตริกโฮสต์",
-      "description": "ดูข้อมูลเมตริกของโฮสต์และใช้ตัวจัดการโฮสต์ (บริการ แพ็กเกจ ไฟร์วอลล์ และอื่นๆ) บนโฮสต์ที่คุณสามารถเข้าถึงได้"
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "ช่วงเวลาการวัด (วินาที)",
-        "description": "ความถี่ในการสุ่มตัวอย่างโฮสต์ที่กำลังถูกดู เว้นแต่ว่าโฮสต์จะกำหนดช่วงเวลาเอง"
-      },
-      "historyRetentionDays": {
-        "label": "ระยะเวลาการเก็บรักษาประวัติ (วัน)",
-        "description": "ข้อมูลตัวอย่างจะถูกเก็บไว้นานแค่ไหนสำหรับแผนภูมิประวัติ"
-      },
-      "enabledForNewHosts": {
-        "label": "เปิดใช้งานเมตริกสำหรับโฮสต์ใหม่",
-        "description": "ไม่ว่าโฮสต์ใหม่จะเริ่มต้นด้วยการเปิดใช้งานการรวบรวมข้อมูลเมตริกหรือไม่"
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "หน่วยอุณหภูมิ",
-        "description": "วิธีการแสดงอุณหภูมิใน Host Metrics",
-        "celsius": "เซลเซียส",
-        "fahrenheit": "ฟาเรนไฮต์"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "รวบรวมข้อมูลตัวชี้วัด"
-      },
-      "metricsInterval": {
-        "label": "ช่วงเวลาการวัด (วินาที)"
-      },
-      "enabledWidgets": {
-        "label": "วิดเจ็ตที่เปิดใช้งาน"
-      },
-      "excludedMounts": {
-        "label": "การติดตั้งที่ไม่รวมอยู่ด้วย"
-      },
-      "monitoredMounts": {
-        "label": "เส้นทางที่ได้รับการตรวจสอบ"
-      }
-    }
-  },
-  "plugin": {
-    "name": "เมตริกโฮสต์"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/tr_TR.json b/plugins/host-metrics/locales/translated/tr_TR.json
deleted file mode 100644
index 63682e887..000000000
--- a/plugins/host-metrics/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Sunucu Metrikleri"
-  },
-  "hostMetrics": {
-    "cpu": "CPU",
-    "memory": "Bellek",
-    "disk": "Disk",
-    "network": "Ağ",
-    "uptime": "Çalışma Süresi",
-    "processes": "İşlemler",
-    "available": "Kullanılabilir",
-    "free": "Boş",
-    "connecting": "Bağlanıyor...",
-    "connectionFailed": "Sunucuya bağlanılamadı",
-    "naCpus": "CPU yok",
-    "cpuCores_one": "{{count}} Çekirdek",
-    "cpuCores_other": "{{count}} Çekirdek",
-    "cpuUsage": "CPU Kullanımı",
-    "memoryUsage": "Bellek Kullanımı",
-    "diskUsage": "Disk Kullanımı",
-    "selectFilesystem": "Dosya sistemini seçin",
-    "temperature": "Sıcaklık",
-    "highestTemperature": "En yüksek sıcaklık",
-    "primaryTemperatureSensor": "Birincil sensör",
-    "gpu": {
-      "title": "GPU",
-      "noDevice": "NVIDIA GPU algılanmadı. GPU ölçümlerini görmek için NVIDIA sürücüsünü (nvidia-smi içerir) yükleyin.",
-      "driver": "Sürücü {{version}}",
-      "utilization": "Kullanım",
-      "memory": "VRAM",
-      "temperature": "Geçici",
-      "power": "Güç",
-      "fan": "Fan",
-      "processes": "GPU işlemleri",
-      "noProcesses": "GPU'yu kullanan hiçbir işlem yok."
-    },
-    "failedToFetchHostConfig": "Host yapılandırması alınamadı",
-    "serverOffline": "Sunucu Çevrimdışı",
-    "cannotFetchMetrics": "Çevrimdışı sunucudan ölçümler alınamaz",
-    "totpFailed": "TOTP doğrulaması başarısız",
-    "noneAuthNotSupported": "Sunucu Metrikleri 'none' kimlik doğrulama türünü desteklemiyor.",
-    "noHostSelected": "Sunucu seçilmedi",
-    "load": "Yük",
-    "systemInfo": "Sistem Bilgisi",
-    "hostname": "Sunucu Adı",
-    "operatingSystem": "İşletim Sistemi",
-    "kernel": "Çekirdek",
-    "seconds": "saniye",
-    "networkInterfaces": "Ağ Arayüzleri",
-    "noInterfacesFound": "Ağ arayüzleri bulunamadı",
-    "noProcessesFound": "Hiç işlem bulunamadı",
-    "processesTotal": "toplam",
-    "processesRunning": "çalışan",
-    "loginStats": "SSH Giriş İstatistikleri",
-    "noRecentLoginData": "Son giriş verisi yok",
-    "ports": {
-      "title": "Dinlenen Portlar",
-      "protocol": "Protokol",
-      "port": "Port",
-      "address": "Adres",
-      "process": "İşlem",
-      "search": "Portları ara...",
-      "allProtocols": "Tümü",
-      "noData": "Dinlenen port verisi yok"
-    },
-    "firewall": {
-      "title": "Güvenlik Duvarı",
-      "inactive": "Etkin Değil",
-      "policy": "Politika",
-      "rules": "kurallar",
-      "noRules": "Bu zincirde kural yok",
-      "noData": "Güvenlik duvarı verisi bulunamadı",
-      "action": "Eylem",
-      "protocol": "Protokol",
-      "port": "Port",
-      "source": "Kaynak",
-      "anywhere": "Her yer",
-      "chains": "zincirler"
-    },
-    "loadAvg": "Ortalama Yük",
-    "swap": "Takas",
-    "architecture": "Mimari",
-    "refresh": "Yenile",
-    "retry": "Yeniden dene",
-    "customize": "Düzeni özelleştir",
-    "reset": "Sıfırla",
-    "tabLive": "Canlı",
-    "editModeInstructions": "Kartları yeniden düzenlemek için sürükleyin, yeniden boyutlandırmak için alt kenarı sürükleyin ve bir kartın genişliğini değiştirmek için genişlik düğmesini kullanın. Aşağıdan kart ekleyin veya kaldırın.",
-    "managers": {
-      "services": "Hizmetler",
-      "processInspector": "İşlem Denetçisi",
-      "logViewer": "Günlük Görüntüleyici",
-      "cron": "Cron Görevleri",
-      "packages": "Paketler",
-      "ssl": "SSL Sertifikaları",
-      "firewall": "Güvenlik Duvarı",
-      "users": "Kullanıcılar ve İzinler",
-      "healthCheck": "Sağlık Kontrolleri",
-      "diskBreakdown": "Disk Dağılımı",
-      "systemdTimers": "Zamanlayıcılar",
-      "topMemory": "Bellek Sıralaması",
-      "noData": "Veri yok",
-      "sudoHint": "Ayrıcalıklı eylemleri etkinleştirmek için host düzenleyicisinde bu host için bir sudo parolası belirleyin.",
-      "filter": "Filtrele...",
-      "start": "Başlat",
-      "stop": "Durdur",
-      "restart": "Yeniden Başlat",
-      "actionDone": "{{name}} güncellendi",
-      "actionFailed": "Eylem başarısız oldu",
-      "signalSent": "PID {{pid}}'e sinyal gönderildi",
-      "killHint": "Tıklama: sonlandır (SIGTERM). Sağ tıklama: zorla sonlandır (SIGKILL).",
-      "working": "Çalışıyor...",
-      "update": "Güncelle",
-      "upgradeAll": "Tümünü yükselt",
-      "allUpToDate": "Her şey güncel",
-      "save": "Kaydet",
-      "command": "Komut",
-      "enabled": "Etkin",
-      "cronSaved": "Crontab güncellendi",
-      "clients": "İstemciler",
-      "dryRun": "Deneme çalıştırması",
-      "renew": "Yenile",
-      "noAcmeClient": "Bu sunucuda ACME istemcisi (certbot veya acme.sh) bulunamadı.",
-      "addInputRule": "INPUT kuralı ekle",
-      "firewallWarning": "Değişiklikler, kalıcı hale getirilene kadar yalnızca çalışma zamanında geçerlidir. Kendinizi kilitlememeye dikkat edin.",
-      "ruleApplied": "Kural uygulandı",
-      "invalidPort": "Geçerli bir bağlantı noktası girin (1-65535)",
-      "newUsername": "Yeni kullanıcı adı",
-      "addUser": "Ekle",
-      "deleteUser": "Kullanıcıyı sil",
-      "noHealthChecks": "Henüz yapılandırılmış bir sağlık denetimi yok.",
-      "follow": "Takip et",
-      "noLogData": "Günlük çıktısı yok.",
-      "tree": "Ağaç",
-      "enableDisable": "Önyüklemede etkinleştir / devre dışı bırak",
-      "grantSudo": "Sudo yetkisi ver",
-      "revokeSudo": "Sudo yetkisini kaldır",
-      "sslIssueCert": "Sertifika oluştur",
-      "sslExpired": "Süresi dolmuş",
-      "sslInDays": "{{days}} gün içinde",
-      "sslNeedDomain": "En az bir alan adı girin",
-      "sslIssued": "Sertifika oluşturuldu",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (bağımsız)",
-      "sslHttpWebroot": "HTTP (webroot)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "DNS sağlayıcısı (örn. cloudflare)",
-      "sslIssueHint": "DNS sağlayıcı kimlik bilgileri sunucuda zaten yapılandırılmış olmalıdır.",
-      "sslRevoke": "Sertifikayı iptal et",
-      "sslRevoked": "Sertifika iptal edildi",
-      "sslRevokeConfirm": "\"{{name}}\" sertifikası iptal edilip kaldırılsın mı? Bu işlem geri alınamaz.",
-      "healthRun": "Çalıştır",
-      "healthName": "Ad",
-      "healthTarget": "Sunucu / adres",
-      "healthAddCheck": "Kontrol ekle",
-      "healthSaved": "Sağlık kontrolleri kaydedildi",
-      "healthMissingFields": "Her kontrol bir ad ve hedef gerektirir",
-      "logFile": "Dosya",
-      "logUnit": "Birim",
-      "logCustomPath": "/var/log altında özel yol (isteğe bağlı)",
-      "logGrep": "Satırları filtrele...",
-      "firewallPersist": "Kuralları kalıcı yap",
-      "firewallPersisted": "Güvenlik duvarı kuralları kalıcı hale getirildi",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "Bu sunucuda WireGuard yüklü değil",
-      "wgNoInterfaces": "Yapılandırılmış WireGuard arayüzü yok",
-      "wgInterfaceUp": "Başlat",
-      "wgInterfaceDown": "Durdur",
-      "wgBringingUp": "{{name}} başlatılıyor...",
-      "wgBringingDown": "{{name}} durduruluyor...",
-      "wgInterfaceUpDone": "{{name}} çalışıyor",
-      "wgInterfaceDownDone": "{{name}} çalışmıyor",
-      "wgListenPort": "Port",
-      "wgPublicKey": "Açık anahtar",
-      "wgEndpoint": "Uç nokta",
-      "wgAllowedIPs": "İzin verilen IP'ler",
-      "wgLastHandshake": "Son el sıkışma",
-      "wgHandshakeNever": "Hiçbir zaman",
-      "wgTransfer": "Transfer",
-      "wgNoPeers": "Eşi benzeri yok"
-    }
-  },
-  "metricsHistory": {
-    "title": "Metrik Geçmişi",
-    "historySuffix": "Geçmiş",
-    "cpuMemoryDisk": "CPU / Bellek / Disk",
-    "network": "Ağ",
-    "download": "RX",
-    "upload": "TX",
-    "noData": "Bu zaman aralığı için geçmiş verisi yok.",
-    "custom": "Özel",
-    "to": "ile",
-    "apply": "Uygula",
-    "viewHistory": "Geçmişi Görüntüle"
-  },
-  "hosts": {
-    "tabHostMetrics": "Sunucu Metrikleri",
-    "metricsCollectionLabel": "Metrik Toplama",
-    "enableMetricsLabel": "Metrikleri Etkinleştir",
-    "enableMetricsDesc": "Bu sunucudan CPU, RAM, disk ve diğer metrikleri topla",
-    "useGlobalMetrics": "Genel Aralığı Kullan",
-    "useGlobalMetricsDesc": "Sunucu geneli metrik aralığını geçersiz kıl",
-    "metricsIntervalS": "Metrik Aralığı (sn)",
-    "metricsIntervalDesc2": "Metrik anlık görüntüleri arasındaki saniye",
-    "excludedMountsLabel": "Hariç Tutulan Montajlar",
-    "monitoredMountsLabel": "Özel olarak izlenen yollar",
-    "monitoredMountsDesc": "/config gibi Home Assistant'a bağlanan yollar da dahil olmak üzere, ayrı bağlama noktaları olarak gösterilmeyen yolları ekleyin.",
-    "monitoredMountPathPlaceholder": "Yol (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Etiket (isteğe bağlı)",
-    "addMonitoredMount": "Yol ekle",
-    "excludedMountsDesc": "Bu sunucu için disk kullanımı ve uyarılarından belirli bağlama noktalarını veya dosya sistemi türlerini (örneğin nfs, cifs) gizleyin.",
-    "excludedMountsPlaceholder": "Bağlama yolu (/mnt/nas) veya dosya sistemi türü (nfs, cifs)",
-    "excludedMountsEmpty": "Hiçbir bağlama noktası hariç tutulmadı. Tespit edilen tüm dosya sistemleri gösteriliyor.",
-    "addExcludedMount": "Ekle",
-    "visibleWidgets": "Görünür Widget'lar",
-    "widgetsMovedToHostMetrics": "Kartlar artık doğrudan Sunucu Metrikleri sekmesinde eklenir, düzenlenir ve yeniden boyutlandırılır. Bu sunucu için Sunucu Metrikleri'ni açın ve hangi kartların gösterileceğini seçmek için Özelleştir'i kullanın.",
-    "hostNotFound": "Host bulunamadı",
-    "loadingHost": "Host yükleniyor..."
-  },
-  "onboarding": {
-    "feature_metrics": "Ölçümler ve uyarılar",
-    "feature_metrics_desc": "İşlemci, bellek ve disk performansını zaman içinde takip edin ve arızalandıklarında uyarı alın."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Metrik Geçmişi Saklama",
-    "metricsHistoryRetentionRange": "1 ila 90 gün",
-    "days": "gün"
-  },
-  "homepage": {
-    "noData": "Veri yok",
-    "showCurrentValue": "Geçerli Değeri Göster",
-    "chartMetric": "Metrik",
-    "metricRange": "Aralık",
-    "host": "Sunucu",
-    "loading": "Yükleniyor...",
-    "metricCpu": "CPU",
-    "metricDisk": "Disk",
-    "metricHostname": "Ana Bilgisayar Adı",
-    "metricKernel": "Çekirdek",
-    "metricMemory": "Bellek",
-    "metricNetwork": "Ağ",
-    "metricOs": "İşletim Sistemi",
-    "metricProcesses": "İşlemler",
-    "metricProcessesRunning": "çalışan",
-    "metricProcessesTotal": "toplam",
-    "metricUptime": "Çalışma Süresi",
-    "metricsNotAvailable": "Metrikler kullanılamıyor",
-    "noHostSelected": "Sunucu seçilmedi",
-    "selectHost": "Bir sunucu seçin..."
-  },
-  "terminalStatus": {
-    "unavailable": "Canlı istatistikler mevcut değil."
-  },
-  "dashboard": {
-    "cpu": "CPU",
-    "ram": "RAM"
-  },
-  "dashboardTab": {
-    "disk": "Disk"
-  },
-  "terminal": {
-    "connected": "Bağlandı"
-  },
-  "permissions": {
-    "use": {
-      "title": "Ana Bilgisayar Metriklerini Kullanın",
-      "description": "Erişebildiğiniz sunuculardaki sunucu ölçümlerini görüntüleyin ve sunucu yöneticilerini (hizmetler, paketler, güvenlik duvarı ve daha fazlası) kullanın."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Ölçüm aralığı (saniye)",
-        "description": "Bir sunucunun ne sıklıkla görüntülendiği, sunucu kendi aralığını belirlemediği sürece bu şekilde gösterilir."
-      },
-      "historyRetentionDays": {
-        "label": "Geçmiş verilerin saklanma süresi (gün)",
-        "description": "Geçmiş grafikler için metrik örneklerinin ne kadar süreyle saklandığı."
-      },
-      "enabledForNewHosts": {
-        "label": "Yeni sunucular için ölçümler açık.",
-        "description": "Yeni sunucuların ölçüm toplama özelliği açık olarak başlatılıp başlatılmadığı."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Sıcaklık birimi",
-        "description": "Host Metrics'te sıcaklıklar nasıl gösterilir?",
-        "celsius": "Santigrat",
-        "fahrenheit": "Fahrenheit"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Ölçümleri toplayın"
-      },
-      "metricsInterval": {
-        "label": "Ölçüm aralığı (saniye)"
-      },
-      "enabledWidgets": {
-        "label": "Etkinleştirilmiş widget'lar"
-      },
-      "excludedMounts": {
-        "label": "Hariç tutulan montajlar"
-      },
-      "monitoredMounts": {
-        "label": "İzlenen yollar"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Ana Bilgisayar Ölçümleri"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/uk_UA.json b/plugins/host-metrics/locales/translated/uk_UA.json
deleted file mode 100644
index 42678dd6e..000000000
--- a/plugins/host-metrics/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Метрики хоста"
-  },
-  "hostMetrics": {
-    "cpu": "Процесор",
-    "memory": "Пам'ять",
-    "disk": "Диск",
-    "network": "Мережа",
-    "uptime": "Час безвідмовної роботи",
-    "processes": "Процеси",
-    "available": "Доступно",
-    "free": "Безкоштовно",
-    "connecting": "Підключення...",
-    "connectionFailed": "Не вдалося підключитися до сервера",
-    "naCpus": "Процесор(и) Немає даних",
-    "cpuCores_one": "{{count}} Ядро",
-    "cpuCores_other": "{{count}} Ядра",
-    "cpuUsage": "Використання процесора",
-    "memoryUsage": "Використання пам'яті",
-    "diskUsage": "Використання диска",
-    "selectFilesystem": "Виберіть файлову систему",
-    "temperature": "Температура",
-    "highestTemperature": "Найвища температура",
-    "primaryTemperatureSensor": "Первинний датчик",
-    "gpu": {
-      "title": "Графічний процесор",
-      "noDevice": "Графічний процесор NVIDIA не виявлено. Встановіть драйвер NVIDIA (він надає nvidia-smi), щоб переглянути показники графічного процесора.",
-      "driver": "Водій {{version}}",
-      "utilization": "Використання",
-      "memory": "відеопам'ять",
-      "temperature": "Темп",
-      "power": "Потужність",
-      "fan": "Вентилятор",
-      "processes": "Процеси графічного процесора",
-      "noProcesses": "Жоден процес не використовує графічний процесор"
-    },
-    "failedToFetchHostConfig": "Не вдалося отримати конфігурацію хоста",
-    "serverOffline": "Сервер офлайн",
-    "cannotFetchMetrics": "Не вдається отримати показники з офлайн-сервера",
-    "totpFailed": "Не вдалося перевірити TOTP",
-    "noneAuthNotSupported": "Метрики хоста не підтримують тип автентифікації «немає».",
-    "noHostSelected": "Хост не вибрано",
-    "load": "Навантаження",
-    "systemInfo": "Інформація про систему",
-    "hostname": "Ім'я хоста",
-    "operatingSystem": "Операційна система",
-    "kernel": "Ядро",
-    "seconds": "секунди",
-    "networkInterfaces": "Мережеві інтерфейси",
-    "noInterfacesFound": "Мережевих інтерфейсів не знайдено",
-    "noProcessesFound": "Процесів не знайдено",
-    "processesTotal": "загальна сума",
-    "processesRunning": "біг",
-    "loginStats": "Статистика входу SSH",
-    "noRecentLoginData": "Немає останніх даних для входу",
-    "ports": {
-      "title": "Порти прослуховування",
-      "protocol": "Протокол",
-      "port": "Порт",
-      "address": "Адреса",
-      "process": "Процес",
-      "search": "Пошук портів...",
-      "allProtocols": "Усі",
-      "noData": "Немає даних про порти прослуховування"
-    },
-    "firewall": {
-      "title": "Брандмауер",
-      "inactive": "Неактивний",
-      "policy": "Політика",
-      "rules": "правила",
-      "noRules": "У цьому ланцюжку немає правил",
-      "noData": "Дані брандмауера недоступні",
-      "action": "Дія",
-      "protocol": "Прото",
-      "port": "Порт",
-      "source": "Джерело",
-      "anywhere": "Будь-де",
-      "chains": "ланцюги"
-    },
-    "loadAvg": "Середнє навантаження",
-    "swap": "Обмін",
-    "architecture": "Архітектура",
-    "refresh": "Оновити",
-    "retry": "Повторити спробу",
-    "customize": "Налаштувати макет",
-    "reset": "Скинути",
-    "tabLive": "Живий",
-    "editModeInstructions": "Перетягуйте картки, щоб змінити порядок, перетягуйте нижній край, щоб змінити розмір, і скористайтеся кнопкою ширини, щоб змінити ширину картки. Додавайте або видаляйте картки нижче.",
-    "managers": {
-      "services": "Послуги",
-      "processInspector": "Інспектор процесів",
-      "logViewer": "Переглядач журналів",
-      "cron": "Cron-завдання",
-      "packages": "Пакети",
-      "ssl": "SSL-сертифікати",
-      "firewall": "Брандмауер",
-      "users": "Користувачі та дозволи",
-      "healthCheck": "Перевірки здоров'я",
-      "diskBreakdown": "Поломка диска",
-      "systemdTimers": "Таймери",
-      "topMemory": "Найкраще за пам'яттю",
-      "noData": "Немає даних",
-      "sudoHint": "Встановіть пароль sudo для цього хоста в редакторі хостів, щоб увімкнути привілейовані дії.",
-      "filter": "Фільтр...",
-      "start": "Початок",
-      "stop": "СТІЙ",
-      "restart": "Перезавантажити",
-      "actionDone": "{{name}} оновлено",
-      "actionFailed": "Дія не вдалася",
-      "signalSent": "Сигнал, що надсилається до ПІД-регулятора {{pid}}",
-      "killHint": "Клацніть: завершити (SIGTERM). Клацніть правою кнопкою миші: примусово завершити (SIGKILL).",
-      "working": "Працюємо...",
-      "update": "Оновлення",
-      "upgradeAll": "Оновити все",
-      "allUpToDate": "Все актуально",
-      "save": "Зберегти",
-      "command": "Команда",
-      "enabled": "Увімкнено",
-      "cronSaved": "Кронтаб оновлено",
-      "clients": "Клієнти",
-      "dryRun": "Сухий пробіг",
-      "renew": "Поновити",
-      "noAcmeClient": "На цьому хості не знайдено клієнта ACME (certbot або acme.sh).",
-      "addInputRule": "Додати правило INPUT",
-      "firewallWarning": "Зміни дійсні лише під час виконання, доки не будуть збережені. Будьте обережні, щоб не заблокувати себе.",
-      "ruleApplied": "Правило застосовано",
-      "invalidPort": "Введіть дійсний порт (1-65535)",
-      "newUsername": "Нове ім'я користувача",
-      "addUser": "Додати",
-      "deleteUser": "Видалити користувача",
-      "noHealthChecks": "Перевірки справності ще не налаштовано.",
-      "follow": "Стежити",
-      "noLogData": "Немає виводу журналу.",
-      "tree": "Дерево",
-      "enableDisable": "Увімкнути/вимкнути під час завантаження",
-      "grantSudo": "Грант sudo",
-      "revokeSudo": "Скасувати sudo",
-      "sslIssueCert": "Випуск сертифіката",
-      "sslExpired": "Термін дії минув",
-      "sslInDays": "у {{days}}днях",
-      "sslNeedDomain": "Введіть принаймні один домен",
-      "sslIssued": "Сертифікат видано",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (автономний)",
-      "sslHttpWebroot": "HTTP (корінь веб-сайту)",
-      "sslDns": "ДНС",
-      "sslDnsProvider": "DNS-провайдер (наприклад, cloudflare)",
-      "sslIssueHint": "Облікові дані постачальника DNS вже мають бути налаштовані на хості.",
-      "sslRevoke": "Скасувати сертифікат",
-      "sslRevoked": "Сертифікат анульовано",
-      "sslRevokeConfirm": "Скасувати та видалити сертифікат \"{{name}}\"? Цю дію неможливо скасувати.",
-      "healthRun": "Бігти",
-      "healthName": "Ім'я",
-      "healthTarget": "Хост / адреса",
-      "healthAddCheck": "Додати чек",
-      "healthSaved": "Перевірки стану збережено",
-      "healthMissingFields": "Кожній перевірці потрібні ім'я та ціль",
-      "logFile": "Файл",
-      "logUnit": "Одиниця",
-      "logCustomPath": "Власний шлях до /var/log (необов'язково)",
-      "logGrep": "Фільтрувальні лінії...",
-      "firewallPersist": "Зберегти правила",
-      "firewallPersisted": "Правила брандмауера збереглися",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "WireGuard не встановлено на цьому хості",
-      "wgNoInterfaces": "Немає налаштованих інтерфейсів WireGuard",
-      "wgInterfaceUp": "Підніміть",
-      "wgInterfaceDown": "Збити",
-      "wgBringingUp": "Викликаємо {{name}}...",
-      "wgBringingDown": "Зниження {{name}}...",
-      "wgInterfaceUpDone": "{{name}} активовано",
-      "wgInterfaceDownDone": "{{name}} не працює",
-      "wgListenPort": "Порт",
-      "wgPublicKey": "Відкритий ключ",
-      "wgEndpoint": "Кінцева точка",
-      "wgAllowedIPs": "Дозволені IP-адреси",
-      "wgLastHandshake": "Останнє рукостискання",
-      "wgHandshakeNever": "Ніколи",
-      "wgTransfer": "Передача",
-      "wgNoPeers": "Немає однолітків"
-    }
-  },
-  "metricsHistory": {
-    "title": "Історія показників",
-    "historySuffix": "Історія",
-    "cpuMemoryDisk": "Процесор / Пам'ять / Диск",
-    "network": "Мережа",
-    "download": "Рецепт",
-    "upload": "Техас",
-    "noData": "Для цього періоду часу немає історичних даних.",
-    "custom": "Користувацька",
-    "to": "до",
-    "apply": "Застосувати",
-    "viewHistory": "Переглянути історію"
-  },
-  "hosts": {
-    "tabHostMetrics": "Метрики хоста",
-    "metricsCollectionLabel": "Колекція показників",
-    "enableMetricsLabel": "Увімкнути метрики",
-    "enableMetricsDesc": "Збирати показники процесора, оперативної пам'яті, дискового простору та інші показники з цього хоста",
-    "useGlobalMetrics": "Використовувати глобальний інтервал",
-    "useGlobalMetricsDesc": "Перевизначити інтервалом показників на рівні сервера",
-    "metricsIntervalS": "Інтервал показників (и)",
-    "metricsIntervalDesc2": "Секунди між знімками показників",
-    "excludedMountsLabel": "Виключені маунти",
-    "monitoredMountsLabel": "Користувацькі контрольовані шляхи",
-    "monitoredMountsDesc": "Додайте шляхи, які не відображаються як окремі монтування, включаючи шляхи Home Assistant, змонтовані за допомогою прив’язки, такі як /config.",
-    "monitoredMountPathPlaceholder": "Шлях (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Мітка (необов'язково)",
-    "addMonitoredMount": "Додати шлях",
-    "excludedMountsDesc": "Приховати певні точки монтування або типи файлових систем (наприклад, nfs, cifs) від використання диска та сповіщень для цього хоста.",
-    "excludedMountsPlaceholder": "Шлях монтування (/mnt/nas) або тип файлової системи (nfs, cifs)",
-    "excludedMountsEmpty": "Монтування не виключено. Відображаються всі виявлені файлові системи.",
-    "addExcludedMount": "Додати",
-    "visibleWidgets": "Видимі віджети",
-    "widgetsMovedToHostMetrics": "Тепер картки додаються, упорядковуються та змінюються за розміром безпосередньо на вкладці «Метрики хоста». Відкрийте «Метрики хоста» для цього хоста та скористайтеся функцією «Налаштувати», щоб вибрати, які картки відображатимуться.",
-    "hostNotFound": "Хост не знайдено",
-    "loadingHost": "Завантаження хоста..."
-  },
-  "onboarding": {
-    "feature_metrics": "Метрики та сповіщення",
-    "feature_metrics_desc": "Відстежуйте роботу процесора, пам'яті та диска з плином часу та отримуйте сповіщення, коли вони виходять з ладу."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Збереження історії показників",
-    "metricsHistoryRetentionRange": "Від 1 до 90 днів",
-    "days": "дні"
-  },
-  "homepage": {
-    "noData": "Дані недоступні",
-    "showCurrentValue": "Показати поточне значення",
-    "chartMetric": "Метрика",
-    "metricRange": "Діапазон",
-    "host": "Хост",
-    "loading": "Завантаження...",
-    "metricCpu": "Процесор",
-    "metricDisk": "Диск",
-    "metricHostname": "Ім'я хоста",
-    "metricKernel": "Ядро",
-    "metricMemory": "Пам'ять",
-    "metricNetwork": "Мережа",
-    "metricOs": "ОС",
-    "metricProcesses": "Процеси",
-    "metricProcessesRunning": "біг",
-    "metricProcessesTotal": "загальна сума",
-    "metricUptime": "Час безвідмовної роботи",
-    "metricsNotAvailable": "Метрики недоступні",
-    "noHostSelected": "Хост не вибрано",
-    "selectHost": "Виберіть хоста..."
-  },
-  "terminalStatus": {
-    "unavailable": "Статистика в реальному часі недоступна"
-  },
-  "dashboard": {
-    "cpu": "Процесор",
-    "ram": "Оперативна пам'ять"
-  },
-  "dashboardTab": {
-    "disk": "Диск"
-  },
-  "terminal": {
-    "connected": "Підключено"
-  },
-  "permissions": {
-    "use": {
-      "title": "Використовуйте метрики хоста",
-      "description": "Переглядайте показники хоста та використовуйте менеджери хоста (служби, пакети, брандмауер тощо) на хостах, до яких ви маєте доступ."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Інтервал показників (секунди)",
-        "description": "Як часто переглядається вибірка хоста, якщо хост не встановлює власний інтервал."
-      },
-      "historyRetentionDays": {
-        "label": "Збереження історії (дні)",
-        "description": "Як довго зберігаються зразки показників для історичних діаграм."
-      },
-      "enabledForNewHosts": {
-        "label": "Метрики для нових хостів",
-        "description": "Чи нові хости починають роботу з увімкненим збором метрик."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Одиниця вимірювання температури",
-        "description": "Як відображаються температури в Host Metrics.",
-        "celsius": "Цельсій",
-        "fahrenheit": "Фаренгейт"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Збирати показники"
-      },
-      "metricsInterval": {
-        "label": "Інтервал показників (секунди)"
-      },
-      "enabledWidgets": {
-        "label": "Увімкнені віджети"
-      },
-      "excludedMounts": {
-        "label": "Виключені кріплення"
-      },
-      "monitoredMounts": {
-        "label": "Контрольовані шляхи"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Метрики хоста"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/vi_VN.json b/plugins/host-metrics/locales/translated/vi_VN.json
deleted file mode 100644
index 77f30f912..000000000
--- a/plugins/host-metrics/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "Chỉ số máy chủ"
-  },
-  "hostMetrics": {
-    "cpu": "CPU",
-    "memory": "Bộ nhớ",
-    "disk": "Ổ đĩa",
-    "network": "Mạng",
-    "uptime": "Thời gian hoạt động",
-    "processes": "Tiến trình",
-    "available": "Khả dụng",
-    "free": "Trống",
-    "connecting": "Đang kết nối...",
-    "connectionFailed": "Kết nối máy chủ thất bại",
-    "naCpus": "N/A CPU",
-    "cpuCores_one": "{{count}} Lõi",
-    "cpuCores_other": "{{count}} Lõi",
-    "cpuUsage": "Mức sử dụng CPU",
-    "memoryUsage": "Mức sử dụng bộ nhớ",
-    "diskUsage": "Mức sử dụng ổ đĩa",
-    "selectFilesystem": "Chọn hệ thống tệp",
-    "temperature": "Nhiệt độ",
-    "highestTemperature": "Nhiệt độ cao nhất",
-    "primaryTemperatureSensor": "Cảm biến chính",
-    "gpu": {
-      "title": "GPU",
-      "noDevice": "Không phát hiện thấy GPU NVIDIA. Hãy cài đặt trình điều khiển NVIDIA (nó cung cấp lệnh nvidia-smi) để xem các thông số GPU.",
-      "driver": "Tài xế {{version}}",
-      "utilization": "Sử dụng",
-      "memory": "VRAM",
-      "temperature": "Nhiệt độ",
-      "power": "Quyền lực",
-      "fan": "Cái quạt",
-      "processes": "Các quy trình GPU",
-      "noProcesses": "Hiện không có tiến trình nào đang sử dụng GPU."
-    },
-    "failedToFetchHostConfig": "Không tải được cấu hình máy chủ",
-    "serverOffline": "Máy chủ ngoại tuyến",
-    "cannotFetchMetrics": "Không thể tải số liệu từ máy chủ ngoại tuyến",
-    "totpFailed": "Xác minh TOTP thất bại",
-    "noneAuthNotSupported": "Host Metrics không hỗ trợ kiểu xác thực 'none'.",
-    "noHostSelected": "Chưa chọn máy chủ",
-    "load": "Tải",
-    "systemInfo": "Thông tin hệ thống",
-    "hostname": "Tên máy chủ",
-    "operatingSystem": "Hệ điều hành",
-    "kernel": "Nhân",
-    "seconds": "giây",
-    "networkInterfaces": "Giao diện mạng",
-    "noInterfacesFound": "Không tìm thấy giao diện mạng nào",
-    "noProcessesFound": "Không tìm thấy tiến trình nào",
-    "processesTotal": "Tổng",
-    "processesRunning": "đang chạy",
-    "loginStats": "Thống kê đăng nhập SSH",
-    "noRecentLoginData": "Không có dữ liệu đăng nhập gần đây",
-    "ports": {
-      "title": "Cổng đang lắng nghe",
-      "protocol": "Giao thức",
-      "port": "Cổng",
-      "address": "Địa chỉ",
-      "process": "Tiến trình",
-      "search": "Tìm kiếm cổng...",
-      "allProtocols": "Tất cả",
-      "noData": "Không có dữ liệu cổng đang lắng nghe"
-    },
-    "firewall": {
-      "title": "Tường lửa",
-      "inactive": "Không hoạt động",
-      "policy": "Chính sách",
-      "rules": "quy tắc",
-      "noRules": "Không có quy tắc nào trong chuỗi này",
-      "noData": "Không có dữ liệu tường lửa",
-      "action": "Hành động",
-      "protocol": "Giao thức",
-      "port": "Cổng",
-      "source": "Nguồn",
-      "anywhere": "Mọi nơi",
-      "chains": "chuỗi"
-    },
-    "loadAvg": "Tải trung bình",
-    "swap": "Swap",
-    "architecture": "Kiến trúc",
-    "refresh": "Làm mới",
-    "retry": "Thử lại",
-    "customize": "Tùy chỉnh bố cục",
-    "reset": "Đặt lại",
-    "tabLive": "Trực tiếp",
-    "editModeInstructions": "Kéo thẻ để sắp xếp lại, kéo cạnh dưới để thay đổi kích thước, và dùng nút chiều rộng để thay đổi độ rộng thẻ. Thêm hoặc xóa thẻ bên dưới.",
-    "managers": {
-      "services": "Dịch vụ",
-      "processInspector": "Trình kiểm tra tiến trình",
-      "logViewer": "Trình xem nhật ký",
-      "cron": "Cron Jobs",
-      "packages": "Gói",
-      "ssl": "Chứng chỉ SSL",
-      "firewall": "Tường lửa",
-      "users": "Người dùng & Quyền",
-      "healthCheck": "Kiểm tra sức khỏe",
-      "diskBreakdown": "Phân tích ổ đĩa",
-      "systemdTimers": "Bộ hẹn giờ",
-      "topMemory": "Top theo bộ nhớ",
-      "noData": "Không có dữ liệu",
-      "sudoHint": "Đặt mật khẩu sudo cho máy chủ này trong trình chỉnh sửa máy chủ để kích hoạt các hành động đặc quyền.",
-      "filter": "Lọc...",
-      "start": "Khởi động",
-      "stop": "Dừng",
-      "restart": "Khởi động lại",
-      "actionDone": "{{name}} được cập nhật",
-      "actionFailed": "Hành động thất bại",
-      "signalSent": "Đã gửi tín hiệu đến PID {{pid}}",
-      "killHint": "Nhấp: kết thúc (SIGTERM). Nhấp chuột phải: buộc kết thúc (SIGKILL).",
-      "working": "Đang làm việc...",
-      "update": "Cập nhật",
-      "upgradeAll": "Nâng cấp tất cả",
-      "allUpToDate": "Tất cả đều mới nhất",
-      "save": "Lưu",
-      "command": "Lệnh",
-      "enabled": "Đã bật",
-      "cronSaved": "Đã cập nhật crontab",
-      "clients": "Máy khách",
-      "dryRun": "Chạy thử",
-      "renew": "Gia hạn",
-      "noAcmeClient": "Không tìm thấy máy khách ACME (certbot hoặc acme.sh) trên máy này.",
-      "addInputRule": "Thêm quy tắc INPUT",
-      "firewallWarning": "Thay đổi chỉ tạm thời, chưa được lưu vĩnh viễn. Cẩn thận kẻo tự khóa mình ra ngoài.",
-      "ruleApplied": "Quy tắc đã được áp dụng",
-      "invalidPort": "Nhập cổng hợp lệ (1-65535)",
-      "newUsername": "Tên người dùng mới",
-      "addUser": "Thêm",
-      "deleteUser": "Xóa người dùng",
-      "noHealthChecks": "Chưa có kiểm tra trạng thái nào được cấu hình.",
-      "follow": "Theo dõi",
-      "noLogData": "Không có dữ liệu nhật ký.",
-      "tree": "Dạng cây",
-      "enableDisable": "Bật / tắt khi khởi động",
-      "grantSudo": "Cấp quyền sudo",
-      "revokeSudo": "Thu hồi quyền sudo",
-      "sslIssueCert": "Cấp chứng chỉ",
-      "sslExpired": "Đã hết hạn",
-      "sslInDays": "trong {{days}}d",
-      "sslNeedDomain": "Nhập ít nhất một tên miền",
-      "sslIssued": "Đã cấp chứng chỉ",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (độc lập)",
-      "sslHttpWebroot": "HTTP (webroot)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "Nhà cung cấp DNS (ví dụ: cloudflare)",
-      "sslIssueHint": "Thông tin xác thực nhà cung cấp DNS phải được cấu hình trên máy chủ.",
-      "sslRevoke": "Thu hồi chứng chỉ",
-      "sslRevoked": "Chứng chỉ đã bị thu hồi",
-      "sslRevokeConfirm": "Thu hồi và xóa chứng chỉ \"{{name}}\"? Hành động này không thể hoàn tác.",
-      "healthRun": "Chạy",
-      "healthName": "Tên",
-      "healthTarget": "Máy chủ / địa chỉ",
-      "healthAddCheck": "Thêm kiểm tra",
-      "healthSaved": "Đã lưu kiểm tra sức khỏe",
-      "healthMissingFields": "Mỗi kiểm tra cần có tên và mục tiêu",
-      "logFile": "Tệp",
-      "logUnit": "Đơn vị",
-      "logCustomPath": "Đường dẫn tùy chỉnh trong /var/log (tùy chọn)",
-      "logGrep": "Lọc dòng...",
-      "firewallPersist": "Lưu quy tắc",
-      "firewallPersisted": "Đã lưu quy tắc tường lửa",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "WireGuard chưa được cài đặt trên máy chủ này",
-      "wgNoInterfaces": "Chưa cấu hình giao diện WireGuard nào",
-      "wgInterfaceUp": "Khởi động",
-      "wgInterfaceDown": "Dừng",
-      "wgBringingUp": "Đang khởi động {{name}}...",
-      "wgBringingDown": "Đang dừng {{name}}...",
-      "wgInterfaceUpDone": "{{name}} đã hoạt động",
-      "wgInterfaceDownDone": "{{name}} đã dừng",
-      "wgListenPort": "Cổng",
-      "wgPublicKey": "Khóa công khai",
-      "wgEndpoint": "Điểm cuối",
-      "wgAllowedIPs": "IP được phép",
-      "wgLastHandshake": "Lần bắt tay cuối",
-      "wgHandshakeNever": "Chưa bao giờ",
-      "wgTransfer": "Truyền tải",
-      "wgNoPeers": "Không có đồng nghiệp"
-    }
-  },
-  "metricsHistory": {
-    "title": "Lịch sử chỉ số",
-    "historySuffix": "Lịch sử",
-    "cpuMemoryDisk": "CPU / Bộ nhớ / Ổ đĩa",
-    "network": "Mạng",
-    "download": "RX",
-    "upload": "TX",
-    "noData": "Không có dữ liệu lịch sử cho khoảng thời gian này.",
-    "custom": "Tùy chỉnh",
-    "to": "đến",
-    "apply": "Áp dụng",
-    "viewHistory": "Xem lịch sử"
-  },
-  "hosts": {
-    "tabHostMetrics": "Số liệu máy chủ",
-    "metricsCollectionLabel": "Thu thập số liệu",
-    "enableMetricsLabel": "Bật thu thập số liệu",
-    "enableMetricsDesc": "Thu thập CPU, RAM, đĩa và các số liệu khác từ máy này",
-    "useGlobalMetrics": "Dùng khoảng thời gian toàn cục",
-    "useGlobalMetricsDesc": "Ghi đè bằng khoảng thời gian thu thập số liệu toàn máy chủ",
-    "metricsIntervalS": "Khoảng thu thập số liệu (giây)",
-    "metricsIntervalDesc2": "Số giây giữa các lần chụp số liệu",
-    "excludedMountsLabel": "Giá đỡ bị loại trừ",
-    "monitoredMountsLabel": "Đường dẫn được giám sát tùy chỉnh",
-    "monitoredMountsDesc": "Thêm các đường dẫn không được hiển thị dưới dạng các điểm gắn kết riêng biệt, bao gồm cả các đường dẫn Home Assistant được gắn kết bằng bind, chẳng hạn như /config.",
-    "monitoredMountPathPlaceholder": "Đường dẫn (/config, /mnt/data)",
-    "monitoredMountLabelPlaceholder": "Nhãn (tùy chọn)",
-    "addMonitoredMount": "Thêm đường dẫn",
-    "excludedMountsDesc": "Ẩn các điểm gắn kết hoặc loại hệ thống tập tin cụ thể (ví dụ: nfs, cifs) khỏi thông tin sử dụng ổ đĩa và cảnh báo cho máy chủ này.",
-    "excludedMountsPlaceholder": "Đường dẫn gắn kết (/mnt/nas) hoặc loại hệ thống tệp (nfs, cifs)",
-    "excludedMountsEmpty": "Không có điểm gắn kết nào bị loại trừ. Tất cả các hệ thống tập tin được phát hiện đều được hiển thị.",
-    "addExcludedMount": "Thêm",
-    "visibleWidgets": "Widget hiển thị",
-    "widgetsMovedToHostMetrics": "Các thẻ hiện được thêm, sắp xếp và thay đổi kích thước trực tiếp trong tab Số liệu máy. Mở Số liệu máy cho máy này và dùng Tùy chỉnh để chọn thẻ hiển thị.",
-    "hostNotFound": "Không tìm thấy máy chủ",
-    "loadingHost": "Đang tải máy chủ..."
-  },
-  "onboarding": {
-    "feature_metrics": "Số liệu và cảnh báo",
-    "feature_metrics_desc": "Theo dõi hiệu năng CPU, bộ nhớ và ổ đĩa theo thời gian, và nhận cảnh báo khi chúng gặp sự cố."
-  },
-  "admin": {
-    "metricsHistoryRetention": "Thời gian lưu trữ lịch sử số liệu",
-    "metricsHistoryRetentionRange": "1 đến 90 ngày",
-    "days": "ngày"
-  },
-  "homepage": {
-    "noData": "Không có dữ liệu",
-    "showCurrentValue": "Hiển thị giá trị hiện tại",
-    "chartMetric": "Chỉ số",
-    "metricRange": "Phạm vi",
-    "host": "Máy chủ",
-    "loading": "Đang tải...",
-    "metricCpu": "CPU",
-    "metricDisk": "Đĩa",
-    "metricHostname": "Tên máy chủ",
-    "metricKernel": "Nhân",
-    "metricMemory": "Bộ nhớ",
-    "metricNetwork": "Mạng",
-    "metricOs": "Hệ điều hành",
-    "metricProcesses": "Tiến trình",
-    "metricProcessesRunning": "đang chạy",
-    "metricProcessesTotal": "tổng",
-    "metricUptime": "Thời gian hoạt động",
-    "metricsNotAvailable": "Chỉ số không khả dụng",
-    "noHostSelected": "Chưa chọn máy chủ",
-    "selectHost": "Chọn máy chủ..."
-  },
-  "terminalStatus": {
-    "unavailable": "Số liệu thống kê trực tiếp không khả dụng"
-  },
-  "dashboard": {
-    "cpu": "CPU",
-    "ram": "RAM"
-  },
-  "dashboardTab": {
-    "disk": "Ổ đĩa"
-  },
-  "terminal": {
-    "connected": "Đã kết nối"
-  },
-  "permissions": {
-    "use": {
-      "title": "Sử dụng số liệu máy chủ",
-      "description": "Xem số liệu thống kê của máy chủ và sử dụng trình quản lý máy chủ (dịch vụ, gói phần mềm, tường lửa, v.v.) trên các máy chủ mà bạn có thể truy cập."
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "Khoảng thời gian đo (giây)",
-        "description": "Tần suất lấy mẫu của một máy chủ đang được xem, trừ khi máy chủ đó tự thiết lập khoảng thời gian lấy mẫu riêng."
-      },
-      "historyRetentionDays": {
-        "label": "Thời gian lưu trữ lịch sử (ngày)",
-        "description": "Thời gian lưu giữ mẫu số liệu cho biểu đồ lịch sử là bao lâu?"
-      },
-      "enabledForNewHosts": {
-        "label": "Số liệu thống kê dành cho máy chủ mới",
-        "description": "Liệu các máy chủ mới có bắt đầu với tính năng thu thập số liệu được bật hay không."
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "Đơn vị nhiệt độ",
-        "description": "Cách hiển thị nhiệt độ trong Host Metrics.",
-        "celsius": "Độ C",
-        "fahrenheit": "Độ Fahrenheit"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "Thu thập số liệu"
-      },
-      "metricsInterval": {
-        "label": "Khoảng thời gian đo (giây)"
-      },
-      "enabledWidgets": {
-        "label": "Các tiện ích đã được bật"
-      },
-      "excludedMounts": {
-        "label": "Các giá đỡ bị loại trừ"
-      },
-      "monitoredMounts": {
-        "label": "Các tuyến đường được giám sát"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Số liệu máy chủ"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/zh_CN.json b/plugins/host-metrics/locales/translated/zh_CN.json
deleted file mode 100644
index e8998c520..000000000
--- a/plugins/host-metrics/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "主机指标"
-  },
-  "hostMetrics": {
-    "cpu": "CPU",
-    "memory": "内存",
-    "disk": "磁盘",
-    "network": "网络",
-    "uptime": "运行时间",
-    "processes": "进程",
-    "available": "可用",
-    "free": "空闲",
-    "connecting": "连接中...",
-    "connectionFailed": "连接服务器失败",
-    "naCpus": "N/A CPU",
-    "cpuCores_one": "{{count}} 核心",
-    "cpuCores_other": "{{count}} 核心",
-    "cpuUsage": "CPU 使用率",
-    "memoryUsage": "内存使用率",
-    "diskUsage": "磁盘使用率",
-    "selectFilesystem": "选择文件系统",
-    "temperature": "温度",
-    "highestTemperature": "最高温度",
-    "primaryTemperatureSensor": "主传感器",
-    "gpu": {
-      "title": "GPU",
-      "noDevice": "未检测到NVIDIA GPU。请安装NVIDIA驱动程序（它提供nvidia-smi）以查看GPU指标。",
-      "driver": "司机 {{version}}",
-      "utilization": "利用率",
-      "memory": "显存",
-      "temperature": "温度",
-      "power": "力量",
-      "fan": "扇子",
-      "processes": "GPU 进程",
-      "noProcesses": "没有进程正在使用 GPU"
-    },
-    "failedToFetchHostConfig": "获取主机配置失败",
-    "serverOffline": "服务器离线",
-    "cannotFetchMetrics": "无法从离线服务器获取指标",
-    "totpFailed": "TOTP 验证失败",
-    "noneAuthNotSupported": "主机指标不支持 'none' 认证类型。",
-    "noHostSelected": "未选择主机",
-    "load": "负载",
-    "systemInfo": "系统信息",
-    "hostname": "主机名",
-    "operatingSystem": "操作系统",
-    "kernel": "内核",
-    "seconds": "秒",
-    "networkInterfaces": "网络接口",
-    "noInterfacesFound": "未找到网络接口",
-    "noProcessesFound": "未找到进程",
-    "processesTotal": "总计",
-    "processesRunning": "运行中",
-    "loginStats": "SSH 登录统计",
-    "noRecentLoginData": "无最近登录数据",
-    "ports": {
-      "title": "监听端口",
-      "protocol": "协议",
-      "port": "端口",
-      "address": "地址",
-      "process": "进程",
-      "search": "搜索端口...",
-      "allProtocols": "全部",
-      "noData": "无监听端口数据"
-    },
-    "firewall": {
-      "title": "防火墙",
-      "inactive": "未激活",
-      "policy": "策略",
-      "rules": "规则",
-      "noRules": "该链中无规则",
-      "noData": "无可用防火墙数据",
-      "action": "操作",
-      "protocol": "协议",
-      "port": "端口",
-      "source": "来源",
-      "anywhere": "任意",
-      "chains": "链"
-    },
-    "loadAvg": "平均负载",
-    "swap": "交换空间",
-    "architecture": "架构",
-    "refresh": "刷新",
-    "retry": "重试",
-    "customize": "自定义布局",
-    "reset": "重置",
-    "tabLive": "实时",
-    "editModeInstructions": "拖动卡片可重新排序，拖动底部边缘可调整大小，使用宽度按钮可更改卡片的跨度。在下方添加或移除卡片。",
-    "managers": {
-      "services": "服务",
-      "processInspector": "进程查看器",
-      "logViewer": "日志查看器",
-      "cron": "定时任务",
-      "packages": "软件包",
-      "ssl": "SSL证书",
-      "firewall": "防火墙",
-      "users": "用户与权限",
-      "healthCheck": "健康检查",
-      "diskBreakdown": "磁盘详情",
-      "systemdTimers": "计时器",
-      "topMemory": "按内存占用排行",
-      "noData": "无数据",
-      "sudoHint": "在主机编辑器中为此主机设置 sudo 密码以启用特权操作。",
-      "filter": "筛选...",
-      "start": "启动",
-      "stop": "停止",
-      "restart": "重启",
-      "actionDone": "{{name}} 已更新",
-      "actionFailed": "操作失败",
-      "signalSent": "信号已发送至 PID {{pid}}",
-      "killHint": "单击：终止 (SIGTERM)。右键单击：强制终止 (SIGKILL)。",
-      "working": "处理中...",
-      "update": "更新",
-      "upgradeAll": "全部升级",
-      "allUpToDate": "所有内容均为最新",
-      "save": "保存",
-      "command": "命令",
-      "enabled": "已启用",
-      "cronSaved": "定时任务已更新",
-      "clients": "客户端",
-      "dryRun": "试运行",
-      "renew": "续期",
-      "noAcmeClient": "此主机上未找到 ACME 客户端 (certbot 或 acme.sh)。",
-      "addInputRule": "添加 INPUT 规则",
-      "firewallWarning": "更改仅在运行时有效，需持久化保存。小心不要将自己锁定在外。",
-      "ruleApplied": "规则已应用",
-      "invalidPort": "请输入有效端口 (1-65535)",
-      "newUsername": "新用户名",
-      "addUser": "添加",
-      "deleteUser": "删除用户",
-      "noHealthChecks": "尚未配置健康检查。",
-      "follow": "跟踪",
-      "noLogData": "无日志输出。",
-      "tree": "树形",
-      "enableDisable": "启用/禁用开机自启",
-      "grantSudo": "授予 sudo",
-      "revokeSudo": "撤销 sudo",
-      "sslIssueCert": "签发证书",
-      "sslExpired": "已过期",
-      "sslInDays": "{{days}} 天后",
-      "sslNeedDomain": "至少输入一个域名",
-      "sslIssued": "证书已签发",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (独立模式)",
-      "sslHttpWebroot": "HTTP (webroot)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "DNS 提供商 (如 cloudflare)",
-      "sslIssueHint": "DNS 提供商凭据必须已在主机上配置。",
-      "sslRevoke": "吊销证书",
-      "sslRevoked": "证书已吊销",
-      "sslRevokeConfirm": "吊销并删除证书 \"{{name}}\"？此操作无法撤销。",
-      "healthRun": "运行",
-      "healthName": "名称",
-      "healthTarget": "主机 / 地址",
-      "healthAddCheck": "添加检查",
-      "healthSaved": "健康检查已保存",
-      "healthMissingFields": "每个检查都需要名称和目标",
-      "logFile": "文件",
-      "logUnit": "单元",
-      "logCustomPath": "自定义路径 (位于 /var/log 下，可选)",
-      "logGrep": "过滤行...",
-      "firewallPersist": "持久化规则",
-      "firewallPersisted": "防火墙规则已持久化",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "此主机未安装 WireGuard",
-      "wgNoInterfaces": "未配置 WireGuard 接口",
-      "wgInterfaceUp": "启用",
-      "wgInterfaceDown": "停用",
-      "wgBringingUp": "正在启用 {{name}}...",
-      "wgBringingDown": "正在停用 {{name}}...",
-      "wgInterfaceUpDone": "{{name}} 已启用",
-      "wgInterfaceDownDone": "{{name}} 已停用",
-      "wgListenPort": "端口",
-      "wgPublicKey": "公钥",
-      "wgEndpoint": "对端",
-      "wgAllowedIPs": "允许的 IP",
-      "wgLastHandshake": "上次握手",
-      "wgHandshakeNever": "从未",
-      "wgTransfer": "传输",
-      "wgNoPeers": "没有对手"
-    }
-  },
-  "metricsHistory": {
-    "title": "指标历史",
-    "historySuffix": "历史",
-    "cpuMemoryDisk": "CPU / 内存 / 磁盘",
-    "network": "网络",
-    "download": "RX",
-    "upload": "TX",
-    "noData": "此时间范围内没有可用的历史数据。",
-    "custom": "自定义",
-    "to": "至",
-    "apply": "应用",
-    "viewHistory": "查看历史"
-  },
-  "hosts": {
-    "tabHostMetrics": "主机指标",
-    "metricsCollectionLabel": "指标收集",
-    "enableMetricsLabel": "启用指标",
-    "enableMetricsDesc": "从此主机收集 CPU、RAM、磁盘和其他指标",
-    "useGlobalMetrics": "使用全局间隔",
-    "useGlobalMetricsDesc": "使用服务器范围的指标间隔覆盖",
-    "metricsIntervalS": "指标间隔（秒）",
-    "metricsIntervalDesc2": "指标快照之间的秒数",
-    "excludedMountsLabel": "排除的挂载点",
-    "monitoredMountsLabel": "自定义监控路径",
-    "monitoredMountsDesc": "添加未作为单独挂载点公开的路径，包括绑定挂载的 Home Assistant 路径，例如 /config。",
-    "monitoredMountPathPlaceholder": "路径（/config，/mnt/data）",
-    "monitoredMountLabelPlaceholder": "标签（可选）",
-    "addMonitoredMount": "添加路径",
-    "excludedMountsDesc": "隐藏此主机磁盘使用情况和警报中的特定挂载点或文件系统类型（例如 nfs、cifs）。",
-    "excludedMountsPlaceholder": "挂载路径（/mnt/nas）或文件系统类型（nfs、cifs）",
-    "excludedMountsEmpty": "未排除任何挂载点。显示所有检测到的文件系统。",
-    "addExcludedMount": "添加",
-    "visibleWidgets": "可见小部件",
-    "widgetsMovedToHostMetrics": "卡片现在可在“主机指标”选项卡中直接添加、排列和调整大小。打开此主机的“主机指标”，使用“自定义”选择要显示的卡片。",
-    "hostNotFound": "未找到主机",
-    "loadingHost": "正在加载主机..."
-  },
-  "onboarding": {
-    "feature_metrics": "指标与告警",
-    "feature_metrics_desc": "跟踪 CPU、内存和磁盘的运行情况，并在它们出现故障时发出告警。"
-  },
-  "admin": {
-    "metricsHistoryRetention": "指标历史保留",
-    "metricsHistoryRetentionRange": "1 到 90 天",
-    "days": "天"
-  },
-  "homepage": {
-    "noData": "暂无数据",
-    "showCurrentValue": "显示当前值",
-    "chartMetric": "指标",
-    "metricRange": "范围",
-    "host": "主机",
-    "loading": "加载中...",
-    "metricCpu": "CPU",
-    "metricDisk": "磁盘",
-    "metricHostname": "主机名",
-    "metricKernel": "内核",
-    "metricMemory": "内存",
-    "metricNetwork": "网络",
-    "metricOs": "操作系统",
-    "metricProcesses": "进程",
-    "metricProcessesRunning": "运行中",
-    "metricProcessesTotal": "总数",
-    "metricUptime": "运行时间",
-    "metricsNotAvailable": "指标不可用",
-    "noHostSelected": "未选择主机",
-    "selectHost": "选择主机..."
-  },
-  "terminalStatus": {
-    "unavailable": "实时统计数据不可用"
-  },
-  "dashboard": {
-    "cpu": "CPU",
-    "ram": "内存"
-  },
-  "dashboardTab": {
-    "disk": "磁盘"
-  },
-  "terminal": {
-    "connected": "已连接"
-  },
-  "permissions": {
-    "use": {
-      "title": "使用主机指标",
-      "description": "查看主机指标并使用您可以访问的主机上的主机管理器（服务、软件包、防火墙等）。"
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "指标间隔（秒）",
-        "description": "除非主机自行设置间隔，否则将对正在查看的主机进行采样的频率。"
-      },
-      "historyRetentionDays": {
-        "label": "历史数据保留时间（天）",
-        "description": "历史图表中的指标样本保留多长时间？"
-      },
-      "enabledForNewHosts": {
-        "label": "新主机指标",
-        "description": "新主机是否默认开启指标收集功能。"
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "温度单位",
-        "description": "主机指标中如何显示温度。",
-        "celsius": "摄氏度",
-        "fahrenheit": "华氏度"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "收集指标"
-      },
-      "metricsInterval": {
-        "label": "指标间隔（秒）"
-      },
-      "enabledWidgets": {
-        "label": "已启用的小部件"
-      },
-      "excludedMounts": {
-        "label": "排除的安装点"
-      },
-      "monitoredMounts": {
-        "label": "监控路径"
-      }
-    }
-  },
-  "plugin": {
-    "name": "主机指标"
-  }
-}
diff --git a/plugins/host-metrics/locales/translated/zh_TW.json b/plugins/host-metrics/locales/translated/zh_TW.json
deleted file mode 100644
index f8e5a529c..000000000
--- a/plugins/host-metrics/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,315 +0,0 @@
-{
-  "nav": {
-    "hostMetrics": "主機指標"
-  },
-  "hostMetrics": {
-    "cpu": "CPU",
-    "memory": "記憶體",
-    "disk": "磁碟",
-    "network": "網路",
-    "uptime": "運作時間",
-    "processes": "程序",
-    "available": "可用",
-    "free": "可用",
-    "connecting": "連線中...",
-    "connectionFailed": "無法連線至伺服器",
-    "naCpus": "N/A CPU",
-    "cpuCores_one": "{{count}} 核心",
-    "cpuCores_other": "{{count}} 核心",
-    "cpuUsage": "CPU 使用率",
-    "memoryUsage": "記憶體使用率",
-    "diskUsage": "磁碟使用率",
-    "selectFilesystem": "選擇檔案系統",
-    "temperature": "溫度",
-    "highestTemperature": "最高溫度",
-    "primaryTemperatureSensor": "主感應器",
-    "gpu": {
-      "title": "GPU",
-      "noDevice": "未偵測到NVIDIA GPU。請安裝NVIDIA驅動程式（它提供nvidia-smi）以查看GPU指標。",
-      "driver": "司機 {{version}}",
-      "utilization": "使用率",
-      "memory": "顯存",
-      "temperature": "溫度",
-      "power": "力量",
-      "fan": "扇子",
-      "processes": "GPU 行程",
-      "noProcesses": "沒有進程正在使用 GPU"
-    },
-    "failedToFetchHostConfig": "無法取得主機設定",
-    "serverOffline": "伺服器離線",
-    "cannotFetchMetrics": "無法從離線伺服器取得指標",
-    "totpFailed": "TOTP 驗證失敗",
-    "noneAuthNotSupported": "主機指標不支援 'none' 驗證類型。",
-    "noHostSelected": "未選擇主機",
-    "load": "負載",
-    "systemInfo": "系統資訊",
-    "hostname": "主機名稱",
-    "operatingSystem": "作業系統",
-    "kernel": "核心",
-    "seconds": "秒",
-    "networkInterfaces": "網路介面",
-    "noInterfacesFound": "找不到網路介面",
-    "noProcessesFound": "找不到程序",
-    "processesTotal": "總計",
-    "processesRunning": "執行中",
-    "loginStats": "SSH 登入統計資訊",
-    "noRecentLoginData": "沒有最近的登入資料",
-    "ports": {
-      "title": "監聽中的連接埠",
-      "protocol": "通訊協定",
-      "port": "連接埠",
-      "address": "位址",
-      "process": "程序",
-      "search": "搜尋連接埠...",
-      "allProtocols": "全部",
-      "noData": "無監聽連接埠資料"
-    },
-    "firewall": {
-      "title": "防火牆",
-      "inactive": "未啟用",
-      "policy": "原則",
-      "rules": "規則",
-      "noRules": "此鏈中無規則",
-      "noData": "無防火牆資料可用",
-      "action": "動作",
-      "protocol": "通訊協定",
-      "port": "連接埠",
-      "source": "來源",
-      "anywhere": "任意位置",
-      "chains": "鏈"
-    },
-    "loadAvg": "平均負載",
-    "swap": "交換空間",
-    "architecture": "架構",
-    "refresh": "重新整理",
-    "retry": "重試",
-    "customize": "自訂版面配置",
-    "reset": "重設",
-    "tabLive": "即時",
-    "editModeInstructions": "拖曳卡片以重新排列，拖曳底部邊緣以調整大小，並使用寬度按鈕變更卡片跨度。於下方新增或移除卡片。",
-    "managers": {
-      "services": "服務",
-      "processInspector": "程序檢查器",
-      "logViewer": "日誌檢視器",
-      "cron": "Cron 工作",
-      "packages": "套件",
-      "ssl": "SSL 憑證",
-      "firewall": "防火牆",
-      "users": "使用者與權限",
-      "healthCheck": "健康檢查",
-      "diskBreakdown": "磁碟明細",
-      "systemdTimers": "計時器",
-      "topMemory": "記憶體用量排行",
-      "noData": "無資料",
-      "sudoHint": "在主機編輯器中為此主機設定 sudo 密碼，以啟用特權操作。",
-      "filter": "篩選...",
-      "start": "啟動",
-      "stop": "停止",
-      "restart": "重新啟動",
-      "actionDone": "{{name}} 已更新",
-      "actionFailed": "操作失敗",
-      "signalSent": "訊號已傳送至 PID {{pid}}",
-      "killHint": "按一下：終止 (SIGTERM)。按右鍵：強制終止 (SIGKILL)。",
-      "working": "處理中...",
-      "update": "更新",
-      "upgradeAll": "全部升級",
-      "allUpToDate": "所有項目皆為最新",
-      "save": "儲存",
-      "command": "指令",
-      "enabled": "已啟用",
-      "cronSaved": "Crontab 已更新",
-      "clients": "客戶端",
-      "dryRun": "試執行",
-      "renew": "續期",
-      "noAcmeClient": "此主機上找不到 ACME 用戶端 (certbot 或 acme.sh)。",
-      "addInputRule": "新增 INPUT 規則",
-      "firewallWarning": "變更僅在執行階段有效，儲存後才會永久生效。小心切勿將自己鎖定在外。",
-      "ruleApplied": "規則已套用",
-      "invalidPort": "輸入有效的連接埠 (1-65535)",
-      "newUsername": "新使用者名稱",
-      "addUser": "新增",
-      "deleteUser": "刪除使用者",
-      "noHealthChecks": "尚未設定健康檢查。",
-      "follow": "追蹤",
-      "noLogData": "無日誌輸出。",
-      "tree": "樹狀",
-      "enableDisable": "開機時啟用 / 停用",
-      "grantSudo": "授予 sudo 權限",
-      "revokeSudo": "撤銷 sudo 權限",
-      "sslIssueCert": "頒發憑證",
-      "sslExpired": "已過期",
-      "sslInDays": "{{days}} 天內",
-      "sslNeedDomain": "至少輸入一個網域",
-      "sslIssued": "憑證已頒發",
-      "sslDomainsPlaceholder": "example.com, www.example.com",
-      "sslHttpStandalone": "HTTP (獨立模式)",
-      "sslHttpWebroot": "HTTP (webroot)",
-      "sslDns": "DNS",
-      "sslDnsProvider": "DNS 提供者 (例如 cloudflare)",
-      "sslIssueHint": "DNS 提供者的憑證必須已在主機上設定。",
-      "sslRevoke": "撤銷憑證",
-      "sslRevoked": "憑證已撤銷",
-      "sslRevokeConfirm": "撤銷並移除憑證「{{name}}」？此操作無法復原。",
-      "healthRun": "執行",
-      "healthName": "名稱",
-      "healthTarget": "主機 / 位址",
-      "healthAddCheck": "新增檢查",
-      "healthSaved": "健康檢查已儲存",
-      "healthMissingFields": "每個檢查都需要名稱和目標",
-      "logFile": "檔案",
-      "logUnit": "單元",
-      "logCustomPath": "/var/log 下的自訂路徑 (選用)",
-      "logGrep": "篩選行...",
-      "firewallPersist": "永久儲存規則",
-      "firewallPersisted": "防火牆規則已永久儲存",
-      "wireguard": "WireGuard",
-      "wgNotInstalled": "此主機上未安裝 WireGuard",
-      "wgNoInterfaces": "未設定任何 WireGuard 介面",
-      "wgInterfaceUp": "啟用",
-      "wgInterfaceDown": "停用",
-      "wgBringingUp": "正在啟用 {{name}}...",
-      "wgBringingDown": "正在停用 {{name}}...",
-      "wgInterfaceUpDone": "{{name}} 已啟用",
-      "wgInterfaceDownDone": "{{name}} 已停用",
-      "wgListenPort": "連接埠",
-      "wgPublicKey": "公開金鑰",
-      "wgEndpoint": "端點",
-      "wgAllowedIPs": "允許的 IP",
-      "wgLastHandshake": "上次交握",
-      "wgHandshakeNever": "從未",
-      "wgTransfer": "傳輸",
-      "wgNoPeers": "沒有對手"
-    }
-  },
-  "metricsHistory": {
-    "title": "指標歷史記錄",
-    "historySuffix": "歷史記錄",
-    "cpuMemoryDisk": "CPU / 記憶體 / 磁碟",
-    "network": "網路",
-    "download": "RX",
-    "upload": "TX",
-    "noData": "此時間範圍內沒有可用的歷史資料。",
-    "custom": "自訂",
-    "to": "至",
-    "apply": "套用",
-    "viewHistory": "檢視歷史記錄"
-  },
-  "hosts": {
-    "tabHostMetrics": "主機指標",
-    "metricsCollectionLabel": "指標收集",
-    "enableMetricsLabel": "啟用指標",
-    "enableMetricsDesc": "從此主機收集 CPU、記憶體、磁碟和其他指標",
-    "useGlobalMetrics": "使用全域間隔",
-    "useGlobalMetricsDesc": "以伺服器範圍的指標間隔覆寫",
-    "metricsIntervalS": "指標間隔（秒）",
-    "metricsIntervalDesc2": "每次指標快照之間的秒數",
-    "excludedMountsLabel": "排除的安裝",
-    "monitoredMountsLabel": "自訂監控路徑",
-    "monitoredMountsDesc": "新增未以單獨掛載點公開的路徑，包括綁定掛載的 Home Assistant 路徑，例如 /config。",
-    "monitoredMountPathPlaceholder": "路徑（/config，/mnt/data）",
-    "monitoredMountLabelPlaceholder": "標籤（選填）",
-    "addMonitoredMount": "新增路徑",
-    "excludedMountsDesc": "隱藏此主機磁碟使用情況和警報中的特定掛載點或檔案系統類型（例如 nfs、cifs）。",
-    "excludedMountsPlaceholder": "掛載路徑（/mnt/nas）或檔案系統類型（nfs、cifs）",
-    "excludedMountsEmpty": "未排除任何掛載點。顯示所有偵測到的檔案系統。",
-    "addExcludedMount": "新增",
-    "visibleWidgets": "可見的小工具",
-    "widgetsMovedToHostMetrics": "現在卡片可直接在主機指標分頁中新增、排列和調整大小。開啟此主機的主機指標，然後使用自訂功能選擇要顯示的卡片。",
-    "hostNotFound": "找不到主機",
-    "loadingHost": "正在載入主機..."
-  },
-  "onboarding": {
-    "feature_metrics": "指標和警報",
-    "feature_metrics_desc": "追蹤 CPU、記憶體和磁碟的運作情況，並在它們出現故障時發出警報。"
-  },
-  "admin": {
-    "metricsHistoryRetention": "指標歷史保留",
-    "metricsHistoryRetentionRange": "1 至 90 天",
-    "days": "天"
-  },
-  "homepage": {
-    "noData": "無可用資料",
-    "showCurrentValue": "顯示目前值",
-    "chartMetric": "指標",
-    "metricRange": "範圍",
-    "host": "主機",
-    "loading": "載入中...",
-    "metricCpu": "CPU",
-    "metricDisk": "磁碟",
-    "metricHostname": "主機名稱",
-    "metricKernel": "核心",
-    "metricMemory": "記憶體",
-    "metricNetwork": "網路",
-    "metricOs": "作業系統",
-    "metricProcesses": "程序",
-    "metricProcessesRunning": "執行中",
-    "metricProcessesTotal": "總數",
-    "metricUptime": "運作時間",
-    "metricsNotAvailable": "效能指標無法使用",
-    "noHostSelected": "未選取主機",
-    "selectHost": "選擇主機..."
-  },
-  "terminalStatus": {
-    "unavailable": "即時統計數據不可用"
-  },
-  "dashboard": {
-    "cpu": "CPU",
-    "ram": "RAM"
-  },
-  "dashboardTab": {
-    "disk": "磁碟"
-  },
-  "terminal": {
-    "connected": "已連線"
-  },
-  "permissions": {
-    "use": {
-      "title": "使用主機指標",
-      "description": "查看主機指標並使用您可以存取的主機上的主機管理器（服務、軟體包、防火牆等）。"
-    }
-  },
-  "settings": {
-    "admin": {
-      "metricsInterval": {
-        "label": "指標間隔（秒）",
-        "description": "除非主機自行設定間隔，否則將對正在查看的主機進行取樣的頻率。"
-      },
-      "historyRetentionDays": {
-        "label": "歷史資料保留時間（天）",
-        "description": "歷史圖表中的指標樣本保留多久？"
-      },
-      "enabledForNewHosts": {
-        "label": "新主機指標",
-        "description": "新主機是否預設開啟指標收集功能。"
-      }
-    },
-    "user": {
-      "temperatureUnit": {
-        "label": "溫度單位",
-        "description": "主機指標中如何顯示溫度。",
-        "celsius": "攝氏度",
-        "fahrenheit": "華氏度"
-      }
-    },
-    "host": {
-      "metricsEnabled": {
-        "label": "收集指標"
-      },
-      "metricsInterval": {
-        "label": "指標間隔（秒）"
-      },
-      "enabledWidgets": {
-        "label": "已啟用的小工具"
-      },
-      "excludedMounts": {
-        "label": "排除的安裝點"
-      },
-      "monitoredMounts": {
-        "label": "監控路徑"
-      }
-    }
-  },
-  "plugin": {
-    "name": "主機指標"
-  }
-}
diff --git a/plugins/host-metrics/manifest.json b/plugins/host-metrics/manifest.json
deleted file mode 100644
index 2e1592d36..000000000
--- a/plugins/host-metrics/manifest.json
+++ /dev/null
@@ -1,166 +0,0 @@
-{
-  "id": "host-metrics",
-  "name": "Host Metrics",
-  "version": "1.0.0",
-  "description": "Live CPU, memory, disk, network and process stats, plus tools to manage services, packages, firewall rules, cron jobs, users and more.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Monitoring",
-  "icon": "Activity",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "hosts:read",
-    "credentials:use",
-    "credentials:read",
-    "ssh:connect",
-    "db:own",
-    "network:serve",
-    "ui:surface",
-    "events:core",
-    "users:impersonate"
-  ],
-  "provides": [
-    {
-      "service": "host-metrics.viewers",
-      "version": "1.0.0",
-      "permission": "host-metrics.use"
-    }
-  ],
-  "contributes": {
-    "tabs": [
-      {
-        "id": "host-metrics",
-        "titleKey": "nav.hostMetrics",
-        "icon": "Activity",
-        "openFrom": ["host-context-menu", "palette"]
-      }
-    ],
-    "permissions": [
-      {
-        "name": "use",
-        "titleKey": "permissions.use.title",
-        "descriptionKey": "permissions.use.description",
-        "defaultRoles": ["admin", "user"]
-      }
-    ],
-    "settings": {
-      "admin": [
-        {
-          "key": "metricsInterval",
-          "type": "number",
-          "labelKey": "settings.admin.metricsInterval.label",
-          "descriptionKey": "settings.admin.metricsInterval.description",
-          "default": 30,
-          "min": 5,
-          "max": 3600
-        },
-        {
-          "key": "historyRetentionDays",
-          "type": "number",
-          "labelKey": "settings.admin.historyRetentionDays.label",
-          "descriptionKey": "settings.admin.historyRetentionDays.description",
-          "default": 7,
-          "min": 1,
-          "max": 90
-        },
-        {
-          "key": "enabledForNewHosts",
-          "type": "boolean",
-          "labelKey": "settings.admin.enabledForNewHosts.label",
-          "descriptionKey": "settings.admin.enabledForNewHosts.description",
-          "default": true
-        }
-      ],
-      "user": [
-        {
-          "key": "temperatureUnit",
-          "type": "select",
-          "labelKey": "settings.user.temperatureUnit.label",
-          "descriptionKey": "settings.user.temperatureUnit.description",
-          "default": "celsius",
-          "options": [
-            {
-              "value": "celsius",
-              "labelKey": "settings.user.temperatureUnit.celsius"
-            },
-            {
-              "value": "fahrenheit",
-              "labelKey": "settings.user.temperatureUnit.fahrenheit"
-            }
-          ]
-        }
-      ],
-      "host": {
-        "fields": [
-          {
-            "key": "metricsEnabled",
-            "type": "boolean",
-            "labelKey": "settings.host.metricsEnabled.label",
-            "default": true,
-            "hidden": true
-          },
-          {
-            "key": "metricsInterval",
-            "type": "number",
-            "labelKey": "settings.host.metricsInterval.label",
-            "min": 5,
-            "max": 3600,
-            "hidden": true
-          },
-          {
-            "key": "enabledWidgets",
-            "type": "json",
-            "labelKey": "settings.host.enabledWidgets.label",
-            "hidden": true
-          },
-          {
-            "key": "excludedMounts",
-            "type": "json",
-            "labelKey": "settings.host.excludedMounts.label",
-            "hidden": true
-          },
-          {
-            "key": "monitoredMounts",
-            "type": "json",
-            "labelKey": "settings.host.monitoredMounts.label",
-            "hidden": true
-          }
-        ]
-      }
-    },
-    "actionSlots": [
-      {
-        "id": "host-metrics.managers",
-        "accepts": ["component"]
-      },
-      {
-        "id": "host-metrics.toolbar",
-        "accepts": ["component"]
-      }
-    ],
-    "uiPresets": {
-      "simple": {
-        "columns": 1
-      },
-      "balanced": {
-        "columns": 3
-      },
-      "advanced": {
-        "columns": 4
-      }
-    },
-    "uses": [
-      "homepage.hostMetrics",
-      "homepage.widgets",
-      "terminal.toolbarStatus"
-    ]
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"]
-}
diff --git a/plugins/host-metrics/migrations/mysql/0001_adopt_host_metrics_tables.sql b/plugins/host-metrics/migrations/mysql/0001_adopt_host_metrics_tables.sql
deleted file mode 100644
index 14067a1a6..000000000
--- a/plugins/host-metrics/migrations/mysql/0001_adopt_host_metrics_tables.sql
+++ /dev/null
@@ -1,51 +0,0 @@
--- host-metrics 0001: adopt_host_metrics_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `host_metrics_preferences` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `host_id` int NOT NULL,
-  `layout` text NOT NULL,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `host_metrics_preferences` TO `p_host_metrics_host_metrics_preferences`;
-CREATE TABLE IF NOT EXISTS `host_health_checks` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `host_id` int NOT NULL,
-  `checks` text NOT NULL,
-  `interval_seconds` int NOT NULL DEFAULT 300,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `host_health_checks` TO `p_host_metrics_host_health_checks`;
-CREATE TABLE IF NOT EXISTS `host_health_history` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `host_id` int NOT NULL,
-  `check_id` varchar(255) NOT NULL,
-  `ts` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `ok` boolean NOT NULL,
-  `latency_ms` int,
-  `detail` text,
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `host_health_history` TO `p_host_metrics_host_health_history`;
-CREATE TABLE IF NOT EXISTS `host_metrics_history` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `host_id` int NOT NULL,
-  `ts` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `cpu_percent` double,
-  `mem_percent` double,
-  `disk_percent` double,
-  `net_rx_bytes` int,
-  `net_tx_bytes` int,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `host_metrics_history` TO `p_host_metrics_host_metrics_history`;
diff --git a/plugins/host-metrics/migrations/postgres/0001_adopt_host_metrics_tables.sql b/plugins/host-metrics/migrations/postgres/0001_adopt_host_metrics_tables.sql
deleted file mode 100644
index 5db00cd1c..000000000
--- a/plugins/host-metrics/migrations/postgres/0001_adopt_host_metrics_tables.sql
+++ /dev/null
@@ -1,55 +0,0 @@
--- host-metrics 0001: adopt_host_metrics_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "host_metrics_preferences" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "host_id" integer NOT NULL,
-  "layout" text NOT NULL,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_host_metrics_prefs_user_host" ON "host_metrics_preferences" ("user_id", "host_id");
-ALTER TABLE "host_metrics_preferences" RENAME TO "p_host_metrics_host_metrics_preferences";
-CREATE TABLE IF NOT EXISTS "host_health_checks" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "host_id" integer NOT NULL,
-  "checks" text NOT NULL,
-  "interval_seconds" integer NOT NULL DEFAULT 300,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_host_health_checks_user_host" ON "host_health_checks" ("user_id", "host_id");
-ALTER TABLE "host_health_checks" RENAME TO "p_host_metrics_host_health_checks";
-CREATE TABLE IF NOT EXISTS "host_health_history" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "host_id" integer NOT NULL,
-  "check_id" varchar(255) NOT NULL,
-  "ts" varchar(255) NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "ok" boolean NOT NULL,
-  "latency_ms" integer,
-  "detail" text,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_host_health_history_lookup" ON "host_health_history" ("user_id", "host_id", "check_id", "ts");
-ALTER TABLE "host_health_history" RENAME TO "p_host_metrics_host_health_history";
-CREATE TABLE IF NOT EXISTS "host_metrics_history" (
-  "id" serial PRIMARY KEY,
-  "host_id" integer NOT NULL,
-  "ts" varchar(255) NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "cpu_percent" double precision,
-  "mem_percent" double precision,
-  "disk_percent" double precision,
-  "net_rx_bytes" integer,
-  "net_tx_bytes" integer,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_host_metrics_history_host_ts" ON "host_metrics_history" ("host_id", "ts");
-ALTER TABLE "host_metrics_history" RENAME TO "p_host_metrics_host_metrics_history";
diff --git a/plugins/host-metrics/migrations/snapshot.json b/plugins/host-metrics/migrations/snapshot.json
deleted file mode 100644
index 1fa3f380a..000000000
--- a/plugins/host-metrics/migrations/snapshot.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "host_metrics_preferences": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "hostId": {
-          "type": "refHost",
-          "notNull": true
-        },
-        "layout": {
-          "type": "text",
-          "notNull": true
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "updatedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_host_metrics_prefs_user_host",
-          "columns": ["userId", "hostId"],
-          "unique": true
-        }
-      ],
-      "adopts": "host_metrics_preferences"
-    },
-    "host_health_checks": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "hostId": {
-          "type": "refHost",
-          "notNull": true
-        },
-        "checks": {
-          "type": "text",
-          "notNull": true
-        },
-        "intervalSeconds": {
-          "type": "integer",
-          "notNull": true,
-          "defaultValue": 300
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "updatedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_host_health_checks_user_host",
-          "columns": ["userId", "hostId"],
-          "unique": true
-        }
-      ],
-      "adopts": "host_health_checks"
-    },
-    "host_health_history": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "hostId": {
-          "type": "refHost",
-          "notNull": true
-        },
-        "checkId": {
-          "type": "varchar",
-          "length": 255,
-          "notNull": true
-        },
-        "ts": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "ok": {
-          "type": "boolean",
-          "notNull": true
-        },
-        "latencyMs": {
-          "type": "integer"
-        },
-        "detail": {
-          "type": "text"
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_host_health_history_lookup",
-          "columns": ["userId", "hostId", "checkId", "ts"]
-        }
-      ],
-      "adopts": "host_health_history"
-    },
-    "host_metrics_history": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "hostId": {
-          "type": "refHost",
-          "notNull": true
-        },
-        "ts": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "cpuPercent": {
-          "type": "real"
-        },
-        "memPercent": {
-          "type": "real"
-        },
-        "diskPercent": {
-          "type": "real"
-        },
-        "netRxBytes": {
-          "type": "integer"
-        },
-        "netTxBytes": {
-          "type": "integer"
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_host_metrics_history_host_ts",
-          "columns": ["hostId", "ts"]
-        }
-      ],
-      "adopts": "host_metrics_history"
-    }
-  }
-}
diff --git a/plugins/host-metrics/migrations/sqlite/0001_adopt_host_metrics_tables.sql b/plugins/host-metrics/migrations/sqlite/0001_adopt_host_metrics_tables.sql
deleted file mode 100644
index 7c015f02c..000000000
--- a/plugins/host-metrics/migrations/sqlite/0001_adopt_host_metrics_tables.sql
+++ /dev/null
@@ -1,55 +0,0 @@
--- host-metrics 0001: adopt_host_metrics_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "host_metrics_preferences" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "host_id" integer NOT NULL,
-  "layout" text NOT NULL,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_host_metrics_prefs_user_host" ON "host_metrics_preferences" ("user_id", "host_id");
-ALTER TABLE "host_metrics_preferences" RENAME TO "p_host_metrics_host_metrics_preferences";
-CREATE TABLE IF NOT EXISTS "host_health_checks" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "host_id" integer NOT NULL,
-  "checks" text NOT NULL,
-  "interval_seconds" integer NOT NULL DEFAULT 300,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_host_health_checks_user_host" ON "host_health_checks" ("user_id", "host_id");
-ALTER TABLE "host_health_checks" RENAME TO "p_host_metrics_host_health_checks";
-CREATE TABLE IF NOT EXISTS "host_health_history" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "host_id" integer NOT NULL,
-  "check_id" text NOT NULL,
-  "ts" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "ok" integer NOT NULL,
-  "latency_ms" integer,
-  "detail" text,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_host_health_history_lookup" ON "host_health_history" ("user_id", "host_id", "check_id", "ts");
-ALTER TABLE "host_health_history" RENAME TO "p_host_metrics_host_health_history";
-CREATE TABLE IF NOT EXISTS "host_metrics_history" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "host_id" integer NOT NULL,
-  "ts" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "cpu_percent" real,
-  "mem_percent" real,
-  "disk_percent" real,
-  "net_rx_bytes" integer,
-  "net_tx_bytes" integer,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_host_metrics_history_host_ts" ON "host_metrics_history" ("host_id", "ts");
-ALTER TABLE "host_metrics_history" RENAME TO "p_host_metrics_host_metrics_history";
diff --git a/plugins/host-metrics/package.json b/plugins/host-metrics/package.json
deleted file mode 100644
index b14dba5d4..000000000
--- a/plugins/host-metrics/package.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "name": "@termix-plugin/host-metrics",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "lucide-react": "^1.33.0"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/jest-dom": "^7.0.1",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "react": "^19.2.8",
-    "sonner": "^2.0.8",
-    "ssh2": "^1.17.0"
-  }
-}
diff --git a/plugins/host-metrics/src/backend/collect.ts b/plugins/host-metrics/src/backend/collect.ts
deleted file mode 100644
index dc83f900e..000000000
--- a/plugins/host-metrics/src/backend/collect.ts
+++ /dev/null
@@ -1,206 +0,0 @@
-import type { Client } from "ssh2";
-import type { PluginSsh } from "@termix/plugin-sdk/backend";
-import { detectHostPlatform } from "@termix/plugin-sdk/host-commands";
-import { collectCpuMetrics } from "./widgets/cpu-collector.js";
-import { collectMemoryMetrics } from "./widgets/memory-collector.js";
-import { collectDiskMetrics } from "./widgets/disk-collector.js";
-import { collectNetworkMetrics } from "./widgets/network-collector.js";
-import { collectUptimeMetrics } from "./widgets/uptime-collector.js";
-import { collectProcessesMetrics } from "./widgets/processes-collector.js";
-import { collectSystemMetrics } from "./widgets/system-collector.js";
-import { collectLoginStats } from "./widgets/login-stats-collector.js";
-import { collectPortsMetrics } from "./widgets/ports-collector.js";
-import { collectFirewallMetrics } from "./widgets/firewall-collector.js";
-import { collectTemperatureMetrics } from "./widgets/temperature-collector.js";
-import { collectGpuMetrics, type GpuMetrics } from "./widgets/gpu-collector.js";
-import type { FirewallMetrics, PortsMetrics } from "../shared/stats-widgets.js";
-import { supportsMetrics, type MetricsHost } from "./helpers.js";
-import { sessionKey, type MetricsSessions } from "./sessions.js";
-import type { MetricsState } from "./state.js";
-import type { CollectorRegistry } from "./collectors.js";
-
-export function isHostKeyVerificationError(error: unknown): boolean {
-  return (
-    error instanceof Error &&
-    (error.message.includes("Host denied (verification failed)") ||
-      error.message.includes("Host key changed"))
-  );
-}
-
-export type CollectedMetrics = {
-  cpu: Awaited<ReturnType<typeof collectCpuMetrics>>;
-  memory: Awaited<ReturnType<typeof collectMemoryMetrics>>;
-  disk: Awaited<ReturnType<typeof collectDiskMetrics>>;
-  network: Awaited<ReturnType<typeof collectNetworkMetrics>>;
-  uptime: Awaited<ReturnType<typeof collectUptimeMetrics>>;
-  processes: Awaited<ReturnType<typeof collectProcessesMetrics>>;
-  system: Awaited<ReturnType<typeof collectSystemMetrics>>;
-  login_stats: Awaited<ReturnType<typeof collectLoginStats>>;
-  ports: PortsMetrics;
-  firewall: FirewallMetrics;
-  temperature: Awaited<ReturnType<typeof collectTemperatureMetrics>>;
-  gpu: GpuMetrics;
-  /** Results from other plugins' collectors, by collector id. */
-  extra?: Record<string, unknown>;
-};
-
-export interface CollectDeps {
-  ssh: PluginSsh;
-  state: MetricsState;
-  sessions: MetricsSessions;
-  collectors: CollectorRegistry;
-}
-
-async function optional<T>(collect: () => Promise<T>, fallback: T) {
-  try {
-    return await collect();
-  } catch {
-    return fallback;
-  }
-}
-
-/**
- * One sample. Reuses a connection the person opened from the tab when there
- * is one, otherwise borrows the "stats" pool, which answers password prompts
- * only and fails fast on anything that needs a person.
- */
-export async function collectMetrics(
-  deps: CollectDeps,
-  host: MetricsHost,
-  mounts: {
-    excludedMounts: string[];
-    monitoredMounts: Array<{ path: string; label?: string }>;
-  },
-  onAuthenticated?: () => void,
-): Promise<CollectedMetrics> {
-  const { ssh, state, sessions, collectors } = deps;
-  if (!supportsMetrics(host, ssh)) {
-    throw new Error("Metrics collection only supported for SSH hosts");
-  }
-
-  if (state.authFailures.shouldSkip(host.id)) {
-    const reason = state.authFailures.getSkipReason(host.id);
-    throw new Error(reason || "Authentication failed");
-  }
-
-  const cached = state.metricsCache.get(host.id) as CollectedMetrics | null;
-  if (cached) {
-    onAuthenticated?.();
-    return cached;
-  }
-
-  return state.requestQueue.queueRequest(host.id, async () => {
-    const key = sessionKey(host.id, host.userId);
-    const existing = sessions.get(key);
-
-    try {
-      const collect = async (client: Client): Promise<CollectedMetrics> => {
-        onAuthenticated?.();
-        const platform = await detectHostPlatform(client);
-        const result: CollectedMetrics = {
-          cpu: await collectCpuMetrics(
-            client,
-            platform,
-            host.id,
-            state.rateSamples.cpu,
-          ),
-          memory: await collectMemoryMetrics(client, platform),
-          disk: await collectDiskMetrics(
-            client,
-            mounts.excludedMounts,
-            mounts.monitoredMounts,
-            platform,
-          ),
-          network: await collectNetworkMetrics(
-            client,
-            platform,
-            host.id,
-            state.rateSamples.network,
-          ),
-          uptime: await collectUptimeMetrics(client, platform),
-          processes: await collectProcessesMetrics(client),
-          system: await collectSystemMetrics(client, platform),
-          login_stats: await optional(() => collectLoginStats(client), {
-            recentLogins: [],
-            failedLogins: [],
-            totalLogins: 0,
-            uniqueIPs: 0,
-          }),
-          ports: await optional(() => collectPortsMetrics(client), {
-            source: "none",
-            ports: [],
-          }),
-          firewall: await optional(() => collectFirewallMetrics(client), {
-            type: "none",
-            status: "unknown",
-            chains: [],
-          }),
-          temperature: await optional(() => collectTemperatureMetrics(client), {
-            source: "none",
-            highestCelsius: null,
-            sensors: [],
-          }),
-          gpu: await optional(() => collectGpuMetrics(client), {
-            source: "none",
-            gpus: [],
-            processes: [],
-          }),
-        };
-
-        const extra = await collectors.run(client, host.id, host.userId);
-        if (Object.keys(extra).length > 0) result.extra = extra;
-
-        state.metricsCache.set(host.id, result);
-        return result;
-      };
-
-      if (existing?.isConnected) {
-        existing.activeOperations++;
-        try {
-          const result = await collect(existing.client);
-          sessions.touch(key);
-          return result;
-        } finally {
-          existing.activeOperations--;
-        }
-      }
-
-      return await ssh.withConnection<CollectedMetrics, Client>(
-        host,
-        {
-          pool: "stats",
-          purpose: "metrics",
-          overrides: { readyTimeout: 60000 },
-        },
-        collect,
-      );
-    } catch (error) {
-      if (error instanceof Error) {
-        if (error.message.includes("TOTP authentication required")) {
-          throw error;
-        } else if (
-          error.message.includes("No password available") ||
-          error.message.includes("Unsupported authentication type") ||
-          error.message.includes("No SSH key available") ||
-          error.message.includes("Invalid SSH key format")
-        ) {
-          state.authFailures.recordFailure(host.id, "AUTH", true);
-        } else if (isHostKeyVerificationError(error)) {
-          state.authFailures.recordFailure(host.id, "HOST_KEY", true);
-        } else if (
-          error.message.includes("authentication") ||
-          error.message.includes("Permission denied") ||
-          error.message.includes("All configured authentication methods failed")
-        ) {
-          state.authFailures.recordFailure(host.id, "AUTH");
-        } else if (
-          error.message.includes("timeout") ||
-          error.message.includes("ETIMEDOUT")
-        ) {
-          state.authFailures.recordFailure(host.id, "TIMEOUT");
-        }
-      }
-      throw error;
-    }
-  });
-}
diff --git a/plugins/host-metrics/src/backend/collectors.ts b/plugins/host-metrics/src/backend/collectors.ts
deleted file mode 100644
index 148c3c609..000000000
--- a/plugins/host-metrics/src/backend/collectors.ts
+++ /dev/null
@@ -1,48 +0,0 @@
-import type { Client } from "ssh2";
-import type { PluginServices } from "@termix/plugin-sdk/backend";
-import type { MetricsLogger } from "./log.js";
-
-export const COLLECTORS_SERVICE = "host-metrics.collectors";
-
-/**
- * The "host-metrics.collectors" service, version 1. Another plugin provides
- * it under its own provider name (manifest `provides[].names`) to add data
- * to every sample. It runs on the sample's SSH connection, as the host's
- * owner, and its result lands in the snapshot under `extra[<name>]`. A
- * collector that throws is skipped for that sample.
- */
-export interface MetricsCollectorV1 {
-  collect: (client: Client, hostId: number) => Promise<unknown>;
-}
-
-export class CollectorRegistry {
-  constructor(
-    private readonly services: PluginServices,
-    private readonly log: MetricsLogger,
-  ) {}
-
-  async run(
-    client: Client,
-    hostId: number,
-    ownerUserId: string,
-  ): Promise<Record<string, unknown>> {
-    const results: Record<string, unknown> = {};
-    for (const provider of this.services.providers(COLLECTORS_SERVICE)) {
-      if (!provider) continue;
-      try {
-        const collector = this.services.get<Partial<MetricsCollectorV1>>(
-          COLLECTORS_SERVICE,
-          { provider, userId: ownerUserId },
-        );
-        if (typeof collector.collect !== "function") continue;
-        results[provider] = await collector.collect(client, hostId);
-      } catch (error) {
-        this.log.debug(`Metrics collector ${provider} failed`, {
-          hostId,
-          error: error instanceof Error ? error.message : String(error),
-        });
-      }
-    }
-    return results;
-  }
-}
diff --git a/plugins/host-metrics/src/backend/helpers.ts b/plugins/host-metrics/src/backend/helpers.ts
deleted file mode 100644
index 565782084..000000000
--- a/plugins/host-metrics/src/backend/helpers.ts
+++ /dev/null
@@ -1,50 +0,0 @@
-import type { PluginSsh, PluginSshHost } from "@termix/plugin-sdk/backend";
-
-/** A host as ctx.ssh.resolveHost returns it, with the fields polling reads. */
-export type MetricsHost = PluginSshHost & {
-  userId: string;
-  name?: string | null;
-  connectionType?: string | null;
-  enableSsh?: boolean | null;
-  password?: string | null;
-  sudoPassword?: string | null;
-  enableDocker?: boolean | null;
-  jumpHosts?: Array<{ hostId: number }> | null;
-};
-
-/** Metrics run over SSH, unattended, so the auth type has to allow that. */
-export function supportsMetrics(
-  host: Pick<MetricsHost, "connectionType" | "enableSsh" | "authType">,
-  ssh: Pick<PluginSsh, "supportsBackground">,
-): boolean {
-  const connectionType = host.connectionType || "ssh";
-  if (connectionType !== "ssh" && host.enableSsh !== true) return false;
-  return ssh.supportsBackground(host.authType || "none");
-}
-
-export function sudoPasswordOf(host: MetricsHost): string | undefined {
-  return host.sudoPassword || undefined;
-}
-
-export type ConnectionLogType = "info" | "success" | "warning" | "error";
-
-export interface ConnectionLog {
-  type: ConnectionLogType;
-  stage: string;
-  message: string;
-  details?: Record<string, unknown>;
-}
-
-/** The entry shape the connection log panel reads. */
-export function connectionLog(
-  type: ConnectionLogType,
-  stage: string,
-  message: string,
-  details?: Record<string, unknown>,
-): ConnectionLog {
-  return { type, stage, message, ...(details ? { details } : {}) };
-}
-
-export function newSessionId(prefix: string): string {
-  return `${prefix}-${Date.now()}-${Math.random().toString(36).slice(2, 11)}`;
-}
diff --git a/plugins/host-metrics/src/backend/host-import.ts b/plugins/host-metrics/src/backend/host-import.ts
deleted file mode 100644
index ea75fd6d1..000000000
--- a/plugins/host-metrics/src/backend/host-import.ts
+++ /dev/null
@@ -1,61 +0,0 @@
-import { readHostMetricsSettings } from "../shared/stats-widgets.js";
-
-/**
- * Registered as ctx.registry.provide("host-metrics.hostImportNormalizer", ...)
- * for core's bulk host import. A Termix export carries these settings under
- * pluginSettings["host-metrics"]; exports from before 2.9.0 carried them in
- * statsConfig, where the host's own interval only counted when
- * useGlobalMetricsInterval was false.
- */
-export function hostImportNormalizer(
-  raw: Record<string, unknown>,
-): Record<string, unknown> | null {
-  const bag = raw.pluginSettings as
-    Record<string, Record<string, unknown>> | undefined;
-  const own = bag?.["host-metrics"];
-  if (own && typeof own === "object") {
-    const settings = readHostMetricsSettings(own);
-    return { ...settings };
-  }
-
-  const legacy =
-    raw.statsConfig && typeof raw.statsConfig === "object"
-      ? (raw.statsConfig as Record<string, unknown>)
-      : null;
-  if (!legacy) return null;
-  const settings = readHostMetricsSettings({
-    ...legacy,
-    metricsInterval:
-      legacy.useGlobalMetricsInterval === false ? legacy.metricsInterval : null,
-  });
-  return { ...settings };
-}
-
-/**
- * Registered as "host-metrics.hostPayloadLegacy": the 2.8 statsConfig shape
- * Termix-Mobile still reads. Remove once the mobile app reads
- * pluginSettings["host-metrics"] and GET /host/status.
- */
-export function hostPayloadLegacy(
-  values: Record<string, unknown>,
-  host: Record<string, unknown>,
-): Record<string, unknown> {
-  const settings = readHostMetricsSettings(values);
-  const statusInterval =
-    typeof host.statusCheckInterval === "number"
-      ? host.statusCheckInterval
-      : null;
-  return {
-    statsConfig: {
-      enabledWidgets: settings.enabledWidgets,
-      statusCheckEnabled: host.statusCheckEnabled !== false,
-      statusCheckInterval: statusInterval ?? 30,
-      useGlobalStatusInterval: statusInterval === null,
-      metricsEnabled: settings.metricsEnabled,
-      metricsInterval: settings.metricsInterval ?? 30,
-      useGlobalMetricsInterval: settings.metricsInterval == null,
-      excludedMounts: settings.excludedMounts,
-      monitoredMounts: settings.monitoredMounts,
-    },
-  };
-}
diff --git a/plugins/host-metrics/src/backend/index.ts b/plugins/host-metrics/src/backend/index.ts
deleted file mode 100644
index 463f46a3a..000000000
--- a/plugins/host-metrics/src/backend/index.ts
+++ /dev/null
@@ -1,123 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { createLogger } from "./log.js";
-import { createHostMetricsRepository } from "./repository.js";
-import { createMetricsState } from "./state.js";
-import { MetricsSessions } from "./sessions.js";
-import { CollectorRegistry } from "./collectors.js";
-import { MetricsPoller, TOPIC_HEALTH_CHECK } from "./poller.js";
-import { registerRoutes } from "./routes.js";
-import { hostImportNormalizer, hostPayloadLegacy } from "./host-import.js";
-import { newSessionId, supportsMetrics } from "./helpers.js";
-
-export type { MetricsCollectorV1 } from "./collectors.js";
-export type { CollectionStatusPayload, SnapshotPayload } from "./poller.js";
-
-/** The "host-metrics.viewers" service, version 1. Runs as the caller's user. */
-export interface MetricsViewersV1 {
-  register: (
-    hostId: number,
-  ) => Promise<{ viewerSessionId: string } | { skipped: true; reason: string }>;
-  heartbeat: (viewerSessionId: string) => boolean;
-  unregister: (hostId: number, viewerSessionId: string) => void;
-}
-
-const RETIME_DEBOUNCE_MS = 1000;
-
-export async function activate(ctx: PluginContext) {
-  const log = createLogger(ctx.log);
-  const repository = await createHostMetricsRepository(ctx.db);
-  const state = createMetricsState();
-  const sessions = new MetricsSessions(ctx.schedule, log);
-  const collectors = new CollectorRegistry(ctx.services, log);
-  const poller = new MetricsPoller({
-    ctx,
-    log,
-    repository,
-    ssh: ctx.ssh,
-    state,
-    sessions,
-    collectors,
-  });
-  ctx.disposables.add(() => {
-    poller.dispose();
-    sessions.dispose();
-  });
-
-  registerRoutes(ctx.http.router<Router>(), {
-    ctx,
-    log,
-    poller,
-    sessions,
-    repository,
-    onHealthCheck: (event) => ctx.events.emit(TOPIC_HEALTH_CHECK, event),
-  });
-
-  ctx.schedule.every(60_000, () => poller.cleanupInactiveViewers());
-  ctx.schedule.every(10 * 60_000, () => {
-    state.authFailures.cleanup();
-    state.backoff.cleanup();
-  });
-
-  ctx.events.on("host.updated", (payload) => {
-    const { hostId } = payload as { hostId?: number };
-    if (hostId) void poller.hostUpdated(hostId);
-  });
-  ctx.events.on("host.deleted", (payload) => {
-    const { hostId } = payload as { hostId?: number };
-    if (hostId) poller.hostDeleted(hostId);
-  });
-  ctx.events.on("host.status", (payload) => {
-    const { hostId, status } = payload as { hostId?: number; status?: string };
-    if (hostId && status) poller.hostStatusChanged(hostId, status);
-  });
-  ctx.events.on("host.key.updated", (payload) => {
-    const { hostId } = payload as { hostId?: number };
-    if (hostId) poller.hostKeyAccepted(hostId);
-  });
-  // An import writes this once per host, and each write restarted every
-  // polled host. One retime after the writes settle covers them all.
-  let retime: ReturnType<typeof setTimeout> | null = null;
-  ctx.settings.onChange("metricsInterval", () => {
-    if (retime) clearTimeout(retime);
-    retime = setTimeout(() => {
-      retime = null;
-      void poller.retimeAll();
-    }, RETIME_DEBOUNCE_MS);
-  });
-  ctx.disposables.add(() => {
-    if (retime) clearTimeout(retime);
-  });
-
-  ctx.services.provide<MetricsViewersV1>("host-metrics.viewers", {
-    register: async (hostId) => {
-      const userId = ctx.currentActor();
-      if (!userId) return { skipped: true, reason: "no_user" };
-      const host = await poller.resolve(hostId, userId);
-      if (!host) return { skipped: true, reason: "host_not_found" };
-      if (!supportsMetrics(host, ctx.ssh)) {
-        return { skipped: true, reason: "metrics_unsupported" };
-      }
-      if (!(await poller.settingsFor(hostId)).metricsEnabled) {
-        return { skipped: true, reason: "metrics_disabled" };
-      }
-      const viewerSessionId = newSessionId("service");
-      poller.registerViewer(hostId, viewerSessionId, userId);
-      return { viewerSessionId };
-    },
-    heartbeat: (viewerSessionId) =>
-      poller.updateHeartbeat(viewerSessionId, ctx.currentActor()),
-    unregister: (hostId, viewerSessionId) =>
-      poller.unregisterViewer(hostId, viewerSessionId, ctx.currentActor()),
-  });
-
-  ctx.registry.provide(
-    "host-metrics.hostImportNormalizer",
-    hostImportNormalizer,
-  );
-  ctx.registry.provide("host-metrics.hostPayloadLegacy", hostPayloadLegacy);
-
-  ctx.log.info("Host Metrics mounted at /plugin-api/host-metrics");
-}
-
-export async function deactivate() {}
diff --git a/plugins/host-metrics/src/backend/interactive.ts b/plugins/host-metrics/src/backend/interactive.ts
deleted file mode 100644
index c2acef205..000000000
--- a/plugins/host-metrics/src/backend/interactive.ts
+++ /dev/null
@@ -1,412 +0,0 @@
-import { Client, type ConnectConfig } from "ssh2";
-import type {
-  PluginSsh,
-  PluginSshPromptChannel,
-} from "@termix/plugin-sdk/backend";
-import {
-  connectionLog,
-  newSessionId,
-  type ConnectionLog,
-  type MetricsHost,
-} from "./helpers.js";
-import type { MetricsLogger } from "./log.js";
-import { sessionKey, type MetricsSessions } from "./sessions.js";
-
-const CONNECT_TIMEOUT_MS = 60_000;
-const TOTP_TTL_MS = 180_000;
-const MAX_TOTP_ATTEMPTS = 3;
-
-export type StartResult =
-  | { status: 200; body: Record<string, unknown> }
-  | { status: 400 | 401 | 500; body: Record<string, unknown> };
-
-export interface InteractiveDeps {
-  ssh: PluginSsh;
-  sessions: MetricsSessions;
-  log: MetricsLogger;
-  registerViewer: (hostId: number, sessionId: string, userId: string) => void;
-}
-
-function stageForError(message: string): [string, string] {
-  if (message.includes("ENOTFOUND") || message.includes("getaddrinfo")) {
-    return ["dns", `DNS resolution failed: ${message}`];
-  }
-  if (message.includes("ECONNREFUSED") || message.includes("ETIMEDOUT")) {
-    return ["tcp", `TCP connection failed: ${message}`];
-  }
-  if (message.includes("handshake") || message.includes("key exchange")) {
-    return ["handshake", `SSH handshake failed: ${message}`];
-  }
-  if (/authentication/i.test(message)) {
-    return ["auth", `Authentication failed: ${message}`];
-  }
-  if (message.includes("verification failed")) {
-    return [
-      "handshake",
-      "SSH host key has changed. For security, please open a Terminal connection to this host first to verify and accept the new key fingerprint.",
-    ];
-  }
-  return ["error", `SSH connection failed: ${message}`];
-}
-
-/**
- * Opens a connection from the tab, where a person can answer a TOTP prompt,
- * and keeps it for polling. Resolves with the HTTP answer.
- */
-export async function startInteractive(
-  deps: InteractiveDeps,
-  host: MetricsHost,
-  userId: string,
-): Promise<StartResult> {
-  const { ssh, sessions, log } = deps;
-  const logs: ConnectionLog[] = [
-    connectionLog("info", "stats_connecting", "Starting metrics collection"),
-    connectionLog("info", "dns", `Resolving DNS for ${host.ip}`),
-    connectionLog("info", "tcp", `Connecting to ${host.ip}:${host.port}`),
-    connectionLog("info", "handshake", "Initiating SSH handshake"),
-  ];
-  if (host.authType === "password") {
-    logs.push(connectionLog("info", "auth", "Authenticating with password"));
-  } else if (host.authType === "key") {
-    logs.push(connectionLog("info", "auth", "Authenticating with SSH key"));
-  }
-
-  const key = sessionKey(host.id, userId);
-  if (sessions.get(key)?.isConnected) {
-    logs.push(
-      connectionLog(
-        "success",
-        "stats_polling",
-        "Using existing metrics session",
-      ),
-    );
-    return { status: 200, body: { success: true, connectionLogs: logs } };
-  }
-
-  const client = new Client();
-  const prepared = await ssh.prepare(host, {
-    purpose: "metrics",
-    client,
-    log: (level, message) => logs.push(connectionLog(level, "auth", message)),
-  });
-  const config = prepared.config as ConnectConfig;
-  config.readyTimeout = CONNECT_TIMEOUT_MS;
-  if (prepared.outcome.status !== "ready") {
-    const outcome = prepared.outcome;
-    logs.push(connectionLog("error", "auth", outcome.message));
-    if (outcome.status === "interaction-required") {
-      return {
-        status: 401,
-        body: {
-          error: outcome.message,
-          requiresAuthInteraction: outcome.interaction,
-          ...(outcome.flag ? { [outcome.flag]: true } : {}),
-          connectionLogs: logs,
-        },
-      };
-    }
-    return {
-      status: 400,
-      body: { error: outcome.message, connectionLogs: logs },
-    };
-  }
-
-  try {
-    const result = await new Promise<Record<string, unknown>>(
-      (resolve, reject) => {
-        let settled = false;
-        const settle = (fn: () => void) => {
-          if (settled) return;
-          settled = true;
-          clearTimeout(timeout);
-          fn();
-        };
-        const timeout = setTimeout(
-          () =>
-            settle(() => {
-              client.end();
-              reject(new Error("Connection timeout"));
-            }),
-          CONNECT_TIMEOUT_MS,
-        );
-
-        client.on(
-          "keyboard-interactive",
-          (name, instructions, _lang, prompts, finish) => {
-            const decision = ssh.classifyKeyboardInteractive(
-              { name, instructions, prompts },
-              host,
-            );
-            if (decision.kind !== "totp") {
-              finish(ssh.autoResponses(prompts, host.password));
-              return;
-            }
-            const sessionId = newSessionId("totp");
-            sessions.addPending({
-              client,
-              finish,
-              config,
-              createdAt: Date.now(),
-              sessionId,
-              hostId: host.id,
-              userId,
-              prompts: prompts.map((p) => ({
-                prompt: p.prompt,
-                echo: p.echo ?? false,
-              })),
-              totpPromptIndex: decision.promptIndex,
-              resolvedPassword: host.password ?? undefined,
-              totpAttempts: 0,
-            });
-            logs.push(
-              connectionLog("info", "stats_totp", "TOTP verification required"),
-            );
-            settle(() =>
-              resolve({
-                success: false,
-                requires_totp: true,
-                sessionId,
-                prompt: prompts[decision.promptIndex].prompt,
-              }),
-            );
-          },
-        );
-
-        client.on("ready", () =>
-          settle(() => {
-            logs.push(
-              connectionLog(
-                "success",
-                "connected",
-                "SSH connection established successfully",
-              ),
-              connectionLog(
-                "success",
-                "stats_polling",
-                "Metrics session established",
-              ),
-            );
-            sessions.open(key, {
-              client,
-              isConnected: true,
-              lastActive: Date.now(),
-              activeOperations: 0,
-              hostId: host.id,
-              userId,
-            });
-            const viewerSessionId = newSessionId("viewer");
-            deps.registerViewer(host.id, viewerSessionId, userId);
-            resolve({ success: true, viewerSessionId });
-          }),
-        );
-
-        client.on("error", (error) =>
-          settle(() => {
-            const message =
-              error instanceof Error ? error.message : String(error);
-            const [stage, text] = stageForError(message);
-            logs.push(connectionLog("error", stage, text));
-            log.error("SSH connection error in metrics/start", {
-              operation: "metrics_start_ssh_error",
-              hostId: host.id,
-              error: message,
-            });
-            reject(error);
-          }),
-        );
-
-        if (Array.isArray(host.jumpHosts) && host.jumpHosts.length > 0) {
-          logs.push(
-            connectionLog("info", "proxy", "Connecting via jump host chain"),
-          );
-        }
-        const jumpHostPrompt: PluginSshPromptChannel = {
-          ask: (request) =>
-            new Promise((answer) => {
-              if (request.kind !== "totp" || settled) {
-                answer(null);
-                return;
-              }
-              const sessionId = newSessionId("totp");
-              sessions.addPending({
-                client,
-                finish: (responses) => answer(responses[0] ?? null),
-                config,
-                createdAt: Date.now(),
-                sessionId,
-                hostId: host.id,
-                userId,
-                prompts: [{ prompt: request.prompt, echo: false }],
-                totpPromptIndex: 0,
-                resolvedPassword: host.password ?? undefined,
-                totpAttempts: 0,
-              });
-              logs.push(
-                connectionLog(
-                  "info",
-                  "stats_totp",
-                  "Jump host TOTP verification required",
-                ),
-              );
-              settle(() =>
-                resolve({
-                  success: false,
-                  requires_totp: true,
-                  sessionId,
-                  prompt: request.prompt,
-                }),
-              );
-            }),
-        };
-        ssh
-          .openTransport(host, config as Record<string, unknown>, {
-            prompt: jumpHostPrompt,
-          })
-          .then((transport) => {
-            if (transport.jumpClient) {
-              const jumpClient = transport.jumpClient as Client;
-              client.on("close", () => jumpClient.end());
-            }
-            client.connect(config);
-          })
-          .catch((error) => {
-            // Already answered with a jump host prompt: fail the pending submit.
-            if (settled) client.emit("error", error);
-            settle(() => {
-              logs.push(
-                connectionLog(
-                  "error",
-                  "proxy",
-                  `Connection setup failed: ${error instanceof Error ? error.message : String(error)}`,
-                ),
-              );
-              reject(error);
-            });
-          });
-      },
-    );
-    return { status: 200, body: { ...result, connectionLogs: logs } };
-  } catch (error) {
-    const message = error instanceof Error ? error.message : String(error);
-    logs.push(
-      connectionLog(
-        "error",
-        "stats_connecting",
-        `Failed to start metrics: ${message}`,
-      ),
-    );
-    return {
-      status: 500,
-      body: {
-        error: message || "Failed to start metrics collection",
-        connectionLogs: logs,
-      },
-    };
-  }
-}
-
-export type TotpResult = { status: number; body: Record<string, unknown> };
-
-/** Sends the TOTP code a person typed and keeps the connection on success. */
-export async function submitTotp(
-  deps: InteractiveDeps,
-  userId: string,
-  sessionId: string,
-  totpCode: string,
-): Promise<TotpResult> {
-  const { sessions, log } = deps;
-  const session = sessions.getPending(sessionId);
-  if (!session) {
-    return {
-      status: 404,
-      body: { error: "TOTP session not found or expired" },
-    };
-  }
-  if (Date.now() - session.createdAt > TOTP_TTL_MS) {
-    sessions.dropPending(sessionId, true);
-    return { status: 408, body: { error: "TOTP session timeout" } };
-  }
-  if (session.userId !== userId) {
-    return { status: 403, body: { error: "Unauthorized" } };
-  }
-
-  session.totpAttempts++;
-  if (session.totpAttempts > MAX_TOTP_ATTEMPTS) {
-    sessions.dropPending(sessionId, true);
-    return { status: 429, body: { error: "Too many TOTP attempts" } };
-  }
-
-  const passwordFor = (prompt: string) =>
-    /password/i.test(prompt) && session.resolvedPassword
-      ? session.resolvedPassword
-      : "";
-
-  try {
-    const responses = (session.prompts || []).map((p, index) =>
-      index === session.totpPromptIndex
-        ? totpCode.trim()
-        : passwordFor(p.prompt),
-    );
-
-    const ready = new Promise<void>((resolve, reject) => {
-      const timeout = setTimeout(
-        () => reject(new Error("TOTP verification timeout")),
-        30_000,
-      );
-      session.client.once(
-        "keyboard-interactive",
-        (_name, _instructions, _lang, prompts, finish) => {
-          log.warn("Second keyboard-interactive received after TOTP", {
-            operation: "totp_second_keyboard_interactive",
-            hostId: session.hostId,
-          });
-          finish(prompts.map((p) => passwordFor(p.prompt)));
-        },
-      );
-      session.client.once("ready", () => {
-        clearTimeout(timeout);
-        resolve();
-      });
-      session.client.once("error", (error) => {
-        clearTimeout(timeout);
-        reject(error);
-      });
-    });
-
-    session.finish(responses);
-    await ready;
-
-    sessions.open(sessionKey(session.hostId, userId), {
-      client: session.client,
-      isConnected: true,
-      lastActive: Date.now(),
-      activeOperations: 0,
-      hostId: session.hostId,
-      userId,
-    });
-    sessions.dropPending(sessionId);
-
-    const viewerSessionId = newSessionId("viewer");
-    deps.registerViewer(session.hostId, viewerSessionId, userId);
-    return { status: 200, body: { success: true, viewerSessionId } };
-  } catch (error) {
-    log.error("TOTP verification failed", {
-      operation: "totp_verification_failed",
-      hostId: session.hostId,
-      error: error instanceof Error ? error.message : String(error),
-    });
-    if (session.totpAttempts >= MAX_TOTP_ATTEMPTS) {
-      sessions.dropPending(sessionId, true);
-    }
-    return {
-      status: 401,
-      body: {
-        error: "TOTP verification failed",
-        attemptsRemaining: Math.max(
-          0,
-          MAX_TOTP_ATTEMPTS - session.totpAttempts,
-        ),
-      },
-    };
-  }
-}
diff --git a/plugins/host-metrics/src/backend/log.ts b/plugins/host-metrics/src/backend/log.ts
deleted file mode 100644
index e8ce18356..000000000
--- a/plugins/host-metrics/src/backend/log.ts
+++ /dev/null
@@ -1,38 +0,0 @@
-import type { PluginLogger } from "@termix/plugin-sdk/backend";
-
-export type Meta = Record<string, unknown>;
-
-export interface MetricsLogger {
-  debug: (message: string, meta?: Meta) => void;
-  info: (message: string, meta?: Meta) => void;
-  warn: (message: string, meta?: Meta) => void;
-  /** An error, or structured context, or both. */
-  error: (message: string, errorOrMeta?: unknown, meta?: Meta) => void;
-}
-
-function withMeta(message: string, meta?: Meta): string {
-  return meta && Object.keys(meta).length > 0
-    ? `${message} ${JSON.stringify(meta)}`
-    : message;
-}
-
-/** ctx.log with the structured context the old stats logger carried. */
-export function createLogger(log: PluginLogger): MetricsLogger {
-  return {
-    debug: (message, meta) => log.debug(withMeta(message, meta)),
-    info: (message, meta) => log.info(withMeta(message, meta)),
-    warn: (message, meta) => log.warn(withMeta(message, meta)),
-    error: (message, errorOrMeta, meta) => {
-      if (errorOrMeta instanceof Error) {
-        log.error(withMeta(message, meta), errorOrMeta);
-        return;
-      }
-      log.error(
-        withMeta(message, {
-          ...((errorOrMeta as Meta | undefined) ?? {}),
-          ...meta,
-        }),
-      );
-    },
-  };
-}
diff --git a/plugins/host-metrics/src/backend/managers/cron.ts b/plugins/host-metrics/src/backend/managers/cron.ts
deleted file mode 100644
index 48124bbad..000000000
--- a/plugins/host-metrics/src/backend/managers/cron.ts
+++ /dev/null
@@ -1,170 +0,0 @@
-import {
-  execCommand,
-  shellSingleQuote,
-} from "@termix/plugin-sdk/host-commands";
-import type { Router } from "express";
-import { managerHandler, ManagerInputError } from "./route-helpers.js";
-import type { ManagerRoutesDeps } from "./types.js";
-
-export interface CronEntry {
-  raw: string;
-  enabled: boolean;
-  schedule: string;
-  command: string;
-}
-
-const READ_CRONTAB_CMD = "crontab -l 2>/dev/null";
-
-/** Parse a crontab into entries (comments/blank lines are dropped except as toggles). */
-export function parseCrontab(output: string): CronEntry[] {
-  const entries: CronEntry[] = [];
-  for (const raw of output.split("\n")) {
-    const line = raw.replace(/\s+$/, "");
-    if (!line.trim()) continue;
-    // A commented-out job: "# <schedule> <command>" (our toggle convention).
-    const disabled = line.match(
-      /^#\s*((?:@\w+|\S+\s+\S+\s+\S+\s+\S+\s+\S+)\s+.+)$/,
-    );
-    if (disabled) {
-      const { schedule, command } = splitScheduleCommand(disabled[1]);
-      if (command) {
-        entries.push({ raw: line, enabled: false, schedule, command });
-        continue;
-      }
-    }
-    // Skip pure comments / env assignments.
-    if (line.trimStart().startsWith("#")) continue;
-    if (/^\s*[A-Z_]+=/.test(line)) continue;
-    const { schedule, command } = splitScheduleCommand(line.trim());
-    if (!command) continue;
-    entries.push({ raw: line, enabled: true, schedule, command });
-  }
-  return entries;
-}
-
-function splitScheduleCommand(line: string): {
-  schedule: string;
-  command: string;
-} {
-  if (line.startsWith("@")) {
-    const [sched, ...rest] = line.split(/\s+/);
-    return { schedule: sched, command: rest.join(" ") };
-  }
-  const parts = line.split(/\s+/);
-  if (parts.length < 6) return { schedule: "", command: "" };
-  return {
-    schedule: parts.slice(0, 5).join(" "),
-    command: parts.slice(5).join(" "),
-  };
-}
-
-const CRON_SCHEDULE_RE =
-  /^(@(reboot|yearly|annually|monthly|weekly|daily|midnight|hourly)|[\d*/,-]+\s+[\d*/,-]+\s+[\d*/,-]+\s+[\d*/,A-Za-z-]+\s+[\d*/,A-Za-z-]+)$/;
-
-export function isValidCronSchedule(schedule: string): boolean {
-  return CRON_SCHEDULE_RE.test(schedule.trim());
-}
-
-/** Serialize entries into a full crontab body (toggled entries are commented). */
-export function serializeCrontab(entries: CronEntry[]): string {
-  const lines = entries.map((e) => {
-    const body = `${e.schedule} ${e.command}`.trim();
-    return e.enabled ? body : `# ${body}`;
-  });
-  return lines.join("\n") + (lines.length ? "\n" : "");
-}
-
-/** Build a command that atomically replaces the user crontab from the given body. */
-export function buildApplyCrontabCommand(body: string): string {
-  // printf the exact bytes into `crontab -` (reads new crontab from stdin).
-  return `printf '%s' ${shellSingleQuote(body)} | crontab -`;
-}
-
-export function registerCronRoutes(app: Router, deps: ManagerRoutesDeps): void {
-  const { validateHostId } = deps;
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/managers/cron/{id}:
-   *   get:
-   *     summary: List the SSH user's crontab entries
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *     responses:
-   *       200: { description: The parsed crontab entries. }
-   *       400: { description: Invalid input. }
-   *       403: { description: No access to the host, or elevation denied. }
-   *       500: { description: The command failed on the host. }
-   */
-  app.get(
-    "/host-metrics/managers/cron/:id",
-    validateHostId,
-    managerHandler(deps, "connect", "cron_list", async (client) => {
-      const { stdout } = await execCommand(client, READ_CRONTAB_CMD, 15000);
-      return { entries: parseCrontab(stdout) };
-    }),
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/managers/cron/{id}:
-   *   post:
-   *     summary: Replace the SSH user's crontab
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required: [entries]
-   *             properties:
-   *               entries: { type: array, items: { type: object, properties: { schedule: { type: string }, command: { type: string }, enabled: { type: boolean } } } }
-   *     responses:
-   *       200: { description: The crontab was written. }
-   *       400: { description: Invalid input. }
-   *       403: { description: No access to the host, or elevation denied. }
-   *       500: { description: The command failed on the host. }
-   */
-  app.post(
-    "/host-metrics/managers/cron/:id",
-    validateHostId,
-    managerHandler(
-      deps,
-      "connect",
-      "cron_replace",
-      async (client, _host, req) => {
-        const { entries } = req.body as { entries?: CronEntry[] };
-        if (!Array.isArray(entries)) {
-          throw new ManagerInputError("entries must be an array");
-        }
-        for (const e of entries) {
-          if (typeof e?.command !== "string" || !e.command.trim()) {
-            throw new ManagerInputError("Each entry needs a command");
-          }
-          if (e.command.includes("\n")) {
-            throw new ManagerInputError("Commands cannot contain newlines");
-          }
-          if (!isValidCronSchedule(String(e.schedule))) {
-            throw new ManagerInputError(`Invalid schedule: ${e.schedule}`);
-          }
-        }
-        const body = serializeCrontab(entries);
-        const { stdout, stderr, code } = await execCommand(
-          client,
-          buildApplyCrontabCommand(body),
-          15000,
-        );
-        return { success: code === 0, output: stdout || stderr };
-      },
-    ),
-  );
-}
diff --git a/plugins/host-metrics/src/backend/managers/firewall.ts b/plugins/host-metrics/src/backend/managers/firewall.ts
deleted file mode 100644
index f9d368658..000000000
--- a/plugins/host-metrics/src/backend/managers/firewall.ts
+++ /dev/null
@@ -1,192 +0,0 @@
-import { execElevated, detectPlatform } from "@termix/plugin-sdk/host-commands";
-import {
-  isValidPort,
-  isValidIpProtocol,
-  isValidFirewallTarget,
-  type IpProtocol,
-  type FirewallTarget,
-} from "./validation.js";
-import type { Router } from "express";
-import { collectFirewallMetrics } from "../widgets/firewall-collector.js";
-import { managerHandler, ManagerInputError } from "./route-helpers.js";
-import type { ManagerRoutesDeps } from "./types.js";
-
-export interface FirewallRuleSpec {
-  protocol: IpProtocol;
-  port: number;
-  target: FirewallTarget;
-}
-
-/**
- * Build an iptables add/delete for an INPUT rule. We only ever touch INPUT for a
- * specific dport with an explicit target, and never the chain policy, so an
- * existing ESTABLISHED/SSH rule is left intact.
- */
-export function buildIptablesRuleCommand(
-  op: "add" | "delete",
-  spec: FirewallRuleSpec,
-): string {
-  const flag = op === "add" ? "-A" : "-D";
-  return `iptables ${flag} INPUT -p ${spec.protocol} --dport ${spec.port} -j ${spec.target}`;
-}
-
-export function buildNftRuleCommand(
-  op: "add" | "delete",
-  spec: FirewallRuleSpec,
-): string {
-  // nftables uses the inet filter table's input chain by convention.
-  const verb = op === "add" ? "add" : "delete";
-  const action =
-    spec.target.toLowerCase() === "reject"
-      ? "reject"
-      : spec.target.toLowerCase();
-  return `nft ${verb} rule inet filter input ${spec.protocol} dport ${spec.port} ${action}`;
-}
-
-export function registerFirewallRoutes(
-  app: Router,
-  deps: ManagerRoutesDeps,
-): void {
-  const { validateHostId } = deps;
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/managers/firewall/{id}:
-   *   get:
-   *     summary: Read the host firewall (iptables, nftables or ufw)
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *     responses:
-   *       200: { description: The firewall type, status and rules. }
-   *       400: { description: Invalid input. }
-   *       403: { description: No access to the host, or elevation denied. }
-   *       500: { description: The command failed on the host. }
-   */
-  app.get(
-    "/host-metrics/managers/firewall/:id",
-    validateHostId,
-    managerHandler(deps, "connect", "firewall_read", async (client) => {
-      return await collectFirewallMetrics(client);
-    }),
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/managers/firewall/{id}/rule:
-   *   post:
-   *     summary: Add or delete an input rule
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required: [op, protocol, port, target]
-   *             properties:
-   *               op: { type: string, enum: [add, delete] }
-   *               protocol: { type: string, enum: [tcp, udp] }
-   *               port: { type: integer }
-   *               target: { type: string, description: ACCEPT, DROP or REJECT }
-   *     responses:
-   *       200: { description: The command result and firewall backend used. }
-   *       400: { description: Invalid input. }
-   *       403: { description: No access to the host, or elevation denied. }
-   *       500: { description: The command failed on the host. }
-   */
-  app.post(
-    "/host-metrics/managers/firewall/:id/rule",
-    validateHostId,
-    managerHandler(
-      deps,
-      "connect",
-      "firewall_rule",
-      async (client, host, req) => {
-        const { op, protocol, port, target } = req.body as {
-          op?: "add" | "delete";
-          protocol?: string;
-          port?: number;
-          target?: string;
-        };
-        if (op !== "add" && op !== "delete") {
-          throw new ManagerInputError("Invalid op");
-        }
-        if (!isValidIpProtocol(protocol))
-          throw new ManagerInputError("Invalid protocol");
-        if (!isValidPort(port)) throw new ManagerInputError("Invalid port");
-        if (!isValidFirewallTarget(target))
-          throw new ManagerInputError("Invalid target");
-
-        const spec: FirewallRuleSpec = {
-          protocol,
-          port: Number(port),
-          target,
-        };
-        const fw = await collectFirewallMetrics(client);
-        const cmd =
-          fw.type === "nftables"
-            ? buildNftRuleCommand(op, spec)
-            : buildIptablesRuleCommand(op, spec);
-        const result = await execElevated(client, cmd, host.sudoPassword, {
-          forceSudo: true,
-        });
-        return {
-          success: result.code === 0,
-          output: result.stdout || result.stderr,
-          backend: fw.type,
-        };
-      },
-    ),
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/managers/firewall/{id}/persist:
-   *   post:
-   *     summary: Save the current firewall rules so they survive a reboot
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *     responses:
-   *       200: { description: The save result. }
-   *       400: { description: Invalid input. }
-   *       403: { description: No access to the host, or elevation denied. }
-   *       500: { description: The command failed on the host. }
-   */
-  app.post(
-    "/host-metrics/managers/firewall/:id/persist",
-    validateHostId,
-    managerHandler(
-      deps,
-      "connect",
-      "firewall_persist",
-      async (client, host) => {
-        const platform = await detectPlatform(client);
-        // Best-effort persistence across common tools.
-        const cmd =
-          "(command -v netfilter-persistent >/dev/null 2>&1 && netfilter-persistent save) || " +
-          "(command -v service >/dev/null 2>&1 && service iptables save) || " +
-          "(command -v nft >/dev/null 2>&1 && nft list ruleset > /etc/nftables.conf) || true";
-        const result = await execElevated(client, cmd, host.sudoPassword, {
-          forceSudo: true,
-        });
-        return {
-          success: result.code === 0,
-          output: result.stdout || result.stderr,
-          pkg: platform.pkg,
-        };
-      },
-    ),
-  );
-}
diff --git a/plugins/host-metrics/src/backend/managers/health.ts b/plugins/host-metrics/src/backend/managers/health.ts
deleted file mode 100644
index 3e6509d83..000000000
--- a/plugins/host-metrics/src/backend/managers/health.ts
+++ /dev/null
@@ -1,269 +0,0 @@
-import {
-  execCommand,
-  shellSingleQuote,
-} from "@termix/plugin-sdk/host-commands";
-import { isValidPort } from "./validation.js";
-import type { Router } from "express";
-import type { Client } from "ssh2";
-import { managerHandler, ManagerInputError } from "./route-helpers.js";
-import type { ManagerRoutesDeps } from "./types.js";
-import type { HostMetricsRepository } from "../repository.js";
-
-export interface HealthCheck {
-  id: string;
-  name: string;
-  type: "tcp" | "http";
-  target: string;
-  port?: number;
-  path?: string;
-}
-
-export interface HealthResult {
-  checkId: string;
-  ok: boolean;
-  latencyMs: number | null;
-  detail: string;
-}
-
-const TARGET_RE = /^[A-Za-z0-9.\-_:]+$/;
-const PATH_RE = /^\/[A-Za-z0-9._~!$&'()*+,;=:@/%-]*$/;
-
-export function isValidHealthCheck(c: unknown): c is HealthCheck {
-  if (!c || typeof c !== "object") return false;
-  const o = c as Record<string, unknown>;
-  if (typeof o.id !== "string" || !o.id) return false;
-  if (typeof o.name !== "string") return false;
-  if (o.type !== "tcp" && o.type !== "http") return false;
-  if (typeof o.target !== "string" || !TARGET_RE.test(o.target)) return false;
-  if (o.type === "tcp" && !isValidPort(o.port)) return false;
-  if (
-    o.path !== undefined &&
-    (typeof o.path !== "string" || !PATH_RE.test(o.path))
-  )
-    return false;
-  return true;
-}
-
-/** Build a command that runs the check from the host and prints "ok latency". */
-export function buildHealthCheckCommand(check: HealthCheck): string {
-  if (check.type === "tcp") {
-    const host = shellSingleQuote(check.target);
-    const port = check.port;
-    // Prefer bash /dev/tcp; time it with date in ms.
-    return `start=$(date +%s%3N); if timeout 3 bash -c '</dev/tcp/'${host}'/'${port} 2>/dev/null; then echo "ok $(( $(date +%s%3N) - start ))"; else echo "fail $(( $(date +%s%3N) - start ))"; fi`;
-  }
-  // http
-  const scheme = check.target.includes("://") ? "" : "http://";
-  const url = shellSingleQuote(`${scheme}${check.target}${check.path ?? ""}`);
-  return `curl -s -o /dev/null -m 5 -w '%{http_code} %{time_total}' ${url} || echo '000 0'`;
-}
-
-export function parseHealthResult(
-  check: HealthCheck,
-  output: string,
-): HealthResult {
-  const line = output.trim().split("\n").pop() ?? "";
-  if (check.type === "tcp") {
-    const [status, ms] = line.split(/\s+/);
-    return {
-      checkId: check.id,
-      ok: status === "ok",
-      latencyMs: Number(ms) || null,
-      detail: status === "ok" ? "open" : "closed/timeout",
-    };
-  }
-  const m = line.match(/^(\d{3})\s+([\d.]+)/);
-  if (!m)
-    return { checkId: check.id, ok: false, latencyMs: null, detail: line };
-  const code = Number(m[1]);
-  return {
-    checkId: check.id,
-    ok: code >= 200 && code < 400,
-    latencyMs: Math.round(Number(m[2]) * 1000),
-    detail: `HTTP ${code}`,
-  };
-}
-
-async function runChecks(
-  client: Client,
-  checks: HealthCheck[],
-): Promise<HealthResult[]> {
-  return Promise.all(
-    checks.map(async (check) => {
-      try {
-        const { stdout } = await execCommand(
-          client,
-          buildHealthCheckCommand(check),
-          8000,
-        );
-        return parseHealthResult(check, stdout);
-      } catch {
-        return {
-          checkId: check.id,
-          ok: false,
-          latencyMs: null,
-          detail: "error",
-        };
-      }
-    }),
-  );
-}
-
-const HISTORY_KEEP = 500;
-
-async function loadChecks(
-  repository: HostMetricsRepository,
-  userId: string,
-  hostId: number,
-): Promise<HealthCheck[]> {
-  const row = await repository.findChecks(userId, hostId);
-  if (!row?.checks) return [];
-  try {
-    const parsed = JSON.parse(row.checks);
-    return Array.isArray(parsed) ? parsed.filter(isValidHealthCheck) : [];
-  } catch {
-    return [];
-  }
-}
-
-export function registerHealthRoutes(
-  app: Router,
-  deps: ManagerRoutesDeps,
-): void {
-  const { validateHostId, repository } = deps;
-
-  const record = async (
-    userId: string,
-    hostId: number,
-    results: HealthResult[],
-  ) => {
-    if (!results.length) return;
-    await repository.recordHealth(userId, hostId, results, HISTORY_KEEP);
-    for (const result of results) {
-      deps.onHealthCheck({
-        hostId,
-        userId,
-        checkId: result.checkId,
-        ok: result.ok,
-        detail: result.detail ?? undefined,
-      });
-    }
-  };
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/managers/health/{id}:
-   *   get:
-   *     summary: Get the host's health checks and their last results
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *     responses:
-   *       200: { description: The configured checks and results. }
-   *       400: { description: Invalid input. }
-   *       403: { description: No access to the host, or elevation denied. }
-   *       500: { description: The command failed on the host. }
-   */
-  app.get(
-    "/host-metrics/managers/health/:id",
-    validateHostId,
-    managerHandler(deps, "connect", "health_get", async (client, host) => {
-      const userId = host.actorId;
-      const checks = await loadChecks(repository, userId, host.id);
-      const results = checks.length ? await runChecks(client, checks) : [];
-      await record(userId, host.id, results);
-      const history = await repository.listHealth(userId, host.id, 200);
-      return { checks, results, history };
-    }),
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/managers/health/{id}/config:
-   *   post:
-   *     summary: Save the host's health checks
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required: [checks]
-   *             properties:
-   *               checks: { type: array, items: { type: object, properties: { id: { type: string }, name: { type: string }, type: { type: string }, target: { type: string }, port: { type: integer }, path: { type: string } } } }
-   *               intervalSeconds: { type: integer }
-   *     responses:
-   *       200: { description: The saved checks. }
-   *       400: { description: Invalid input. }
-   *       403: { description: No access to the host, or elevation denied. }
-   *       500: { description: The command failed on the host. }
-   */
-  app.post(
-    "/host-metrics/managers/health/:id/config",
-    validateHostId,
-    managerHandler(
-      deps,
-      "connect",
-      "health_config",
-      async (_client, host, req) => {
-        const userId = host.actorId;
-        const { checks, intervalSeconds } = req.body as {
-          checks?: unknown;
-          intervalSeconds?: number;
-        };
-        if (!Array.isArray(checks) || !checks.every(isValidHealthCheck)) {
-          throw new ManagerInputError("Invalid checks");
-        }
-        const interval =
-          typeof intervalSeconds === "number" &&
-          intervalSeconds >= 30 &&
-          intervalSeconds <= 86400
-            ? Math.round(intervalSeconds)
-            : 300;
-        await repository.saveChecks(
-          userId,
-          host.id,
-          JSON.stringify(checks),
-          interval,
-        );
-        return { success: true };
-      },
-    ),
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/managers/health/{id}/run:
-   *   post:
-   *     summary: Run the host's health checks now
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *     responses:
-   *       200: { description: The result of each check. }
-   *       400: { description: Invalid input. }
-   *       403: { description: No access to the host, or elevation denied. }
-   *       500: { description: The command failed on the host. }
-   */
-  app.post(
-    "/host-metrics/managers/health/:id/run",
-    validateHostId,
-    managerHandler(deps, "connect", "health_run", async (client, host) => {
-      const checks = await loadChecks(repository, host.actorId, host.id);
-      const results = await runChecks(client, checks);
-      await record(host.actorId, host.id, results);
-      return { results };
-    }),
-  );
-}
diff --git a/plugins/host-metrics/src/backend/managers/index.ts b/plugins/host-metrics/src/backend/managers/index.ts
deleted file mode 100644
index a0d287f1d..000000000
--- a/plugins/host-metrics/src/backend/managers/index.ts
+++ /dev/null
@@ -1,63 +0,0 @@
-import { detectPlatform } from "@termix/plugin-sdk/host-commands";
-import type { Router } from "express";
-import { managerHandler } from "./route-helpers.js";
-import type { ManagerRoutesDeps } from "./types.js";
-import { registerServiceRoutes } from "./services.js";
-import { registerProcessRoutes } from "./processes.js";
-import { registerSimpleReadRoutes } from "./simple-reads.js";
-import { registerCronRoutes } from "./cron.js";
-import { registerPackageRoutes } from "./packages.js";
-import { registerSslRoutes } from "./ssl.js";
-import { registerFirewallRoutes } from "./firewall.js";
-import { registerUserRoutes } from "./users.js";
-import { registerHealthRoutes } from "./health.js";
-import { registerLogRoutes } from "./logs.js";
-import { registerWireGuardRoutes } from "./wireguard.js";
-
-/**
- * Registers every Host Metrics manager route under the `/host-metrics/managers`
- * prefix on the stats app. All routes are on-demand (not polled).
- */
-export function registerManagerRoutes(
-  app: Router,
-  deps: ManagerRoutesDeps,
-): void {
-  const { validateHostId } = deps;
-
-  /**
-   * @openapi
-   * /host-metrics/platform/{id}:
-   *   get:
-   *     summary: Detect available management tooling on a host
-   *     tags:
-   *       - Host Metrics
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Platform capabilities (systemd, package manager, certbot, docker).
-   */
-  app.get(
-    "/host-metrics/platform/:id",
-    validateHostId,
-    managerHandler(deps, "connect", "platform_detect", (client) =>
-      detectPlatform(client),
-    ),
-  );
-
-  registerServiceRoutes(app, deps);
-  registerProcessRoutes(app, deps);
-  registerSimpleReadRoutes(app, deps);
-  registerCronRoutes(app, deps);
-  registerPackageRoutes(app, deps);
-  registerSslRoutes(app, deps);
-  registerFirewallRoutes(app, deps);
-  registerUserRoutes(app, deps);
-  registerHealthRoutes(app, deps);
-  registerLogRoutes(app, deps);
-  registerWireGuardRoutes(app, deps);
-}
diff --git a/plugins/host-metrics/src/backend/managers/logs.ts b/plugins/host-metrics/src/backend/managers/logs.ts
deleted file mode 100644
index 8448f4e1a..000000000
--- a/plugins/host-metrics/src/backend/managers/logs.ts
+++ /dev/null
@@ -1,132 +0,0 @@
-import {
-  execCommand,
-  execElevated,
-  shellSingleQuote,
-} from "@termix/plugin-sdk/host-commands";
-import { isAllowedPath, isValidSystemdUnit } from "./validation.js";
-import type { Router } from "express";
-import { managerHandler, ManagerInputError } from "./route-helpers.js";
-import type { ManagerRoutesDeps } from "./types.js";
-
-/** Directories from which arbitrary log files may be tailed. */
-export const LOG_PATH_ALLOWLIST = ["/var/log"];
-
-const COMMON_LOGS = [
-  "/var/log/syslog",
-  "/var/log/messages",
-  "/var/log/auth.log",
-  "/var/log/secure",
-  "/var/log/kern.log",
-  "/var/log/dpkg.log",
-  "/var/log/nginx/access.log",
-  "/var/log/nginx/error.log",
-];
-
-const LIST_LOGS_CMD = `ls -1 ${LOG_PATH_ALLOWLIST.map(shellSingleQuote).join(" ")} 2>/dev/null`;
-
-export function clampLines(n: unknown): number {
-  const v = typeof n === "string" ? Number(n) : n;
-  if (typeof v !== "number" || !Number.isFinite(v)) return 200;
-  return Math.min(2000, Math.max(1, Math.round(v)));
-}
-
-export function buildTailCommand(path: string, lines: number): string {
-  // Keep stderr intact so execElevated can detect a permission error and
-  // escalate; suppressing it (2>/dev/null) would hide the denial and return an
-  // empty log with no chance to retry under sudo.
-  return `tail -n ${lines} ${shellSingleQuote(path)}`;
-}
-
-export function buildJournalCommand(unit: string, lines: number): string {
-  return `journalctl -u ${shellSingleQuote(unit)} -n ${lines} --no-pager`;
-}
-
-export function registerLogRoutes(app: Router, deps: ManagerRoutesDeps): void {
-  const { validateHostId } = deps;
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/managers/logs/{id}/files:
-   *   get:
-   *     summary: List readable log files under /var/log
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *     responses:
-   *       200: { description: Common logs and the files found. }
-   *       400: { description: Invalid input. }
-   *       403: { description: No access to the host, or elevation denied. }
-   *       500: { description: The command failed on the host. }
-   */
-  app.get(
-    "/host-metrics/managers/logs/:id/files",
-    validateHostId,
-    managerHandler(deps, "connect", "logs_list", async (client) => {
-      const { stdout } = await execCommand(client, LIST_LOGS_CMD, 10000);
-      const found = stdout
-        .split("\n")
-        .map((l) => l.trim())
-        .filter(Boolean)
-        .map((name) => `/var/log/${name}`);
-      return { common: COMMON_LOGS, files: found };
-    }),
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/managers/logs/{id}:
-   *   get:
-   *     summary: Tail a log file or a systemd unit's journal
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *       - in: query
-   *         name: path
-   *         schema: { type: string }
-   *         description: A log file under an allowed directory.
-   *       - in: query
-   *         name: unit
-   *         schema: { type: string }
-   *         description: A systemd unit. Used instead of path when given.
-   *       - in: query
-   *         name: lines
-   *         schema: { type: integer }
-   *     responses:
-   *       200: { description: The last lines of the log. }
-   *       400: { description: Invalid input. }
-   *       403: { description: No access to the host, or elevation denied. }
-   *       500: { description: The command failed on the host. }
-   */
-  app.get(
-    "/host-metrics/managers/logs/:id",
-    validateHostId,
-    managerHandler(deps, "connect", "logs_tail", async (client, host, req) => {
-      const path = req.query.path as string | undefined;
-      const unit = req.query.unit as string | undefined;
-      const lines = clampLines(req.query.lines);
-
-      let cmd: string;
-      if (unit) {
-        if (!isValidSystemdUnit(unit))
-          throw new ManagerInputError("Invalid unit");
-        cmd = buildJournalCommand(unit, lines);
-      } else if (path) {
-        if (!isAllowedPath(path, LOG_PATH_ALLOWLIST)) {
-          throw new ManagerInputError("Path not allowed");
-        }
-        cmd = buildTailCommand(path, lines);
-      } else {
-        throw new ManagerInputError("Provide a path or unit");
-      }
-
-      // Try unprivileged; many logs need root (auth.log, etc.).
-      const result = await execElevated(client, cmd, host.sudoPassword);
-      return { content: result.stdout, lines };
-    }),
-  );
-}
diff --git a/plugins/host-metrics/src/backend/managers/packages.ts b/plugins/host-metrics/src/backend/managers/packages.ts
deleted file mode 100644
index 169970f41..000000000
--- a/plugins/host-metrics/src/backend/managers/packages.ts
+++ /dev/null
@@ -1,116 +0,0 @@
-import {
-  execCommand,
-  execElevated,
-  detectPlatform,
-  buildListUpgradableCommand,
-  buildPackageActionCommand,
-  parseUpgradable,
-  type PackageAction,
-} from "@termix/plugin-sdk/host-commands";
-import { isValidPackageName } from "./validation.js";
-import type { Router } from "express";
-import { managerHandler, ManagerInputError } from "./route-helpers.js";
-import type { ManagerRoutesDeps } from "./types.js";
-
-export function registerPackageRoutes(
-  app: Router,
-  deps: ManagerRoutesDeps,
-): void {
-  const { validateHostId } = deps;
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/managers/packages/{id}:
-   *   get:
-   *     summary: List upgradable packages and the package manager
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *     responses:
-   *       200: { description: The package manager and upgradable packages. }
-   *       400: { description: Invalid input. }
-   *       403: { description: No access to the host, or elevation denied. }
-   *       500: { description: The command failed on the host. }
-   */
-  app.get(
-    "/host-metrics/managers/packages/:id",
-    validateHostId,
-    managerHandler(deps, "connect", "packages_list", async (client) => {
-      const platform = await detectPlatform(client);
-      const cmd = buildListUpgradableCommand(platform.pkg);
-      if (!cmd) return { pkg: platform.pkg, upgradable: [] };
-      const { stdout } = await execCommand(client, cmd, 60000);
-      return {
-        pkg: platform.pkg,
-        upgradable: parseUpgradable(platform.pkg, stdout),
-      };
-    }),
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/managers/packages/{id}/action:
-   *   post:
-   *     summary: Install or upgrade a package, or upgrade everything
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required: [action]
-   *             properties:
-   *               action: { type: string, enum: [install, upgrade, upgrade-all] }
-   *               pkg: { type: string, description: The package name. Not needed for upgrade-all. }
-   *     responses:
-   *       200: { description: The command output. }
-   *       400: { description: Invalid input. }
-   *       403: { description: No access to the host, or elevation denied. }
-   *       500: { description: The command failed on the host. }
-   */
-  app.post(
-    "/host-metrics/managers/packages/:id/action",
-    validateHostId,
-    managerHandler(
-      deps,
-      "connect",
-      "packages_action",
-      async (client, host, req) => {
-        const { action, pkg: name } = req.body as {
-          action?: PackageAction;
-          pkg?: string;
-        };
-        if (
-          action !== "upgrade-all" &&
-          action !== "install" &&
-          action !== "upgrade"
-        ) {
-          throw new ManagerInputError("Invalid action");
-        }
-        if (action !== "upgrade-all" && !isValidPackageName(name)) {
-          throw new ManagerInputError("Invalid package name");
-        }
-        const platform = await detectPlatform(client);
-        const cmd = buildPackageActionCommand(platform.pkg, action, name);
-        if (!cmd) throw new ManagerInputError("No supported package manager");
-        // Package operations can be slow; allow up to 10 minutes.
-        const result = await execElevated(client, cmd, host.sudoPassword, {
-          forceSudo: true,
-          timeoutMs: 600000,
-        });
-        return {
-          success: result.code === 0,
-          output: (result.stdout || result.stderr).slice(-8000),
-        };
-      },
-    ),
-  );
-}
diff --git a/plugins/host-metrics/src/backend/managers/processes.ts b/plugins/host-metrics/src/backend/managers/processes.ts
deleted file mode 100644
index f3eb67611..000000000
--- a/plugins/host-metrics/src/backend/managers/processes.ts
+++ /dev/null
@@ -1,130 +0,0 @@
-import { execCommand, execElevated } from "@termix/plugin-sdk/host-commands";
-import { isValidPid, isValidSignal, type Signal } from "./validation.js";
-import type { Router } from "express";
-import { managerHandler, ManagerInputError } from "./route-helpers.js";
-import type { ManagerRoutesDeps } from "./types.js";
-
-export interface ProcessRow {
-  pid: number;
-  ppid: number;
-  user: string;
-  cpu: number;
-  mem: number;
-  rss: number;
-  stat: string;
-  command: string;
-  args: string;
-}
-
-const LIST_PROCESSES_CMD =
-  "ps -eo pid,ppid,user:20,pcpu,pmem,rss,stat,comm,args --sort=-pcpu --no-headers 2>/dev/null | head -n 300";
-
-/** Parse `ps -eo pid,ppid,user,pcpu,pmem,rss,stat,comm,args` output. */
-export function parseProcessList(output: string): ProcessRow[] {
-  const rows: ProcessRow[] = [];
-  for (const raw of output.split("\n")) {
-    const line = raw.trim();
-    if (!line) continue;
-    const m = line.match(
-      /^(\d+)\s+(\d+)\s+(\S+)\s+([\d.]+)\s+([\d.]+)\s+(\d+)\s+(\S+)\s+(\S+)\s+(.*)$/,
-    );
-    if (!m) continue;
-    rows.push({
-      pid: Number(m[1]),
-      ppid: Number(m[2]),
-      user: m[3],
-      cpu: Number(m[4]),
-      mem: Number(m[5]),
-      rss: Number(m[6]),
-      stat: m[7],
-      command: m[8],
-      args: m[9],
-    });
-  }
-  return rows;
-}
-
-export function buildKillCommand(pid: number, signal: Signal): string {
-  return `kill -${signal} ${pid}`;
-}
-
-export function registerProcessRoutes(
-  app: Router,
-  deps: ManagerRoutesDeps,
-): void {
-  const { validateHostId } = deps;
-  /**
-   * @openapi
-   * /host-metrics/managers/processes/{id}:
-   *   get:
-   *     summary: List processes (rich, sortable, filterable client-side)
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *     responses:
-   *       200: { description: Process list. }
-   */
-  app.get(
-    "/host-metrics/managers/processes/:id",
-    validateHostId,
-    managerHandler(deps, "connect", "processes_list", async (client) => {
-      const { stdout } = await execCommand(client, LIST_PROCESSES_CMD, 20000);
-      return { processes: parseProcessList(stdout) };
-    }),
-  );
-
-  /**
-   * @openapi
-   * /host-metrics/managers/processes/{id}/signal:
-   *   post:
-   *     summary: Send a signal to a process (TERM/KILL/HUP/INT)
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               pid: { type: integer }
-   *               signal: { type: string }
-   *     responses:
-   *       200: { description: Signal result. }
-   *       400: { description: Invalid pid or signal. }
-   *       403: { description: Elevation required or denied. }
-   */
-  app.post(
-    "/host-metrics/managers/processes/:id/signal",
-    validateHostId,
-    managerHandler(
-      deps,
-      "connect",
-      "processes_signal",
-      async (client, host, req) => {
-        const { pid, signal } = req.body as {
-          pid?: number;
-          signal?: string;
-        };
-        if (!isValidPid(pid)) throw new ManagerInputError("Invalid pid");
-        if (!isValidSignal(signal))
-          throw new ManagerInputError("Invalid signal");
-        const cmd = buildKillCommand(Number(pid), signal);
-        // Try unprivileged first; elevate only if the process isn't owned.
-        const result = await execElevated(client, cmd, host.sudoPassword);
-        return {
-          success: result.code === 0,
-          output: result.stdout || result.stderr,
-          usedSudo: result.usedSudo,
-        };
-      },
-    ),
-  );
-}
diff --git a/plugins/host-metrics/src/backend/managers/route-helpers.ts b/plugins/host-metrics/src/backend/managers/route-helpers.ts
deleted file mode 100644
index 29fad7bb7..000000000
--- a/plugins/host-metrics/src/backend/managers/route-helpers.ts
+++ /dev/null
@@ -1,60 +0,0 @@
-import { ElevationError } from "@termix/plugin-sdk/host-commands";
-import type { Request, Response } from "express";
-import type { Client } from "ssh2";
-import type { PluginHostShareLevel } from "@termix/plugin-sdk/backend";
-import { errorMessage } from "../util.js";
-import type { MetricsLogger } from "../log.js";
-import type { ManagerHost, RunOnHost } from "./types.js";
-
-export class AccessDeniedError extends Error {
-  constructor(message = "No access to this host") {
-    super(message);
-    this.name = "AccessDeniedError";
-  }
-}
-
-export class ManagerInputError extends Error {
-  constructor(message: string) {
-    super(message);
-    this.name = "ManagerInputError";
-  }
-}
-
-/**
- * Wrap a manager handler: parses hostId, runs `fn` on a pooled connection at the
- * given access level, and maps known errors to clean HTTP responses.
- */
-export function managerHandler(
-  { runOnHost, log }: { runOnHost: RunOnHost; log: MetricsLogger },
-  level: PluginHostShareLevel,
-  operation: string,
-  fn: (client: Client, host: ManagerHost, req: Request) => Promise<unknown>,
-) {
-  return async (req: Request, res: Response) => {
-    const hostId = parseInt(String(req.params.id), 10);
-    try {
-      const result = await runOnHost(hostId, level, (client, host) =>
-        fn(client, host, req),
-      );
-      return res.json(result);
-    } catch (error) {
-      if (error instanceof ManagerInputError) {
-        return res.status(400).json({ error: error.message });
-      }
-      if (error instanceof AccessDeniedError) {
-        return res.status(403).json({ error: error.message });
-      }
-      if (error instanceof ElevationError) {
-        return res.status(403).json({ error: error.message, code: error.code });
-      }
-      log.error(`Manager operation failed: ${operation}`, {
-        operation,
-        hostId,
-        error: error instanceof Error ? error.message : String(error),
-      });
-      return res.status(500).json({
-        error: errorMessage(error, "Operation failed"),
-      });
-    }
-  };
-}
diff --git a/plugins/host-metrics/src/backend/managers/services.ts b/plugins/host-metrics/src/backend/managers/services.ts
deleted file mode 100644
index dc1ec27b7..000000000
--- a/plugins/host-metrics/src/backend/managers/services.ts
+++ /dev/null
@@ -1,135 +0,0 @@
-import { execCommand, execElevated } from "@termix/plugin-sdk/host-commands";
-import {
-  isValidSystemdUnit,
-  isValidServiceAction,
-  type ServiceAction,
-} from "./validation.js";
-import type { Router } from "express";
-import { managerHandler, ManagerInputError } from "./route-helpers.js";
-import type { ManagerRoutesDeps } from "./types.js";
-
-export interface SystemdService {
-  unit: string;
-  load: string;
-  active: string;
-  sub: string;
-  description: string;
-}
-
-const LIST_SERVICES_CMD =
-  "systemctl list-units --type=service --all --no-legend --no-pager --plain 2>/dev/null";
-
-/** Parse `systemctl list-units --plain` output into structured rows. */
-export function parseServiceList(output: string): SystemdService[] {
-  const services: SystemdService[] = [];
-  for (const raw of output.split("\n")) {
-    const line = raw.trim();
-    if (!line) continue;
-    // Columns: UNIT LOAD ACTIVE SUB DESCRIPTION (description may contain spaces)
-    const parts = line.split(/\s+/);
-    if (parts.length < 4) continue;
-    const [unit, load, active, sub, ...rest] = parts;
-    if (!unit.endsWith(".service")) continue;
-    services.push({
-      unit,
-      load,
-      active,
-      sub,
-      description: rest.join(" "),
-    });
-  }
-  return services;
-}
-
-export function buildServiceActionCommand(
-  unit: string,
-  action: ServiceAction,
-): string {
-  return `systemctl ${action} ${unit}`;
-}
-
-export function registerServiceRoutes(
-  app: Router,
-  deps: ManagerRoutesDeps,
-): void {
-  const { validateHostId } = deps;
-  /**
-   * @openapi
-   * /host-metrics/managers/services/{id}:
-   *   get:
-   *     summary: List systemd services
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *     responses:
-   *       200: { description: List of services. }
-   */
-  app.get(
-    "/host-metrics/managers/services/:id",
-    validateHostId,
-    managerHandler(deps, "connect", "services_list", async (client) => {
-      const { stdout } = await execCommand(client, LIST_SERVICES_CMD, 20000);
-      return { services: parseServiceList(stdout) };
-    }),
-  );
-
-  /**
-   * @openapi
-   * /host-metrics/managers/services/{id}/action:
-   *   post:
-   *     summary: Start/stop/restart/enable/disable a systemd service
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               unit: { type: string }
-   *               action: { type: string }
-   *     responses:
-   *       200: { description: Action result. }
-   *       400: { description: Invalid unit or action. }
-   *       403: { description: Elevation required or denied. }
-   */
-  app.post(
-    "/host-metrics/managers/services/:id/action",
-    validateHostId,
-    managerHandler(
-      deps,
-      "connect",
-      "services_action",
-      async (client, host, req) => {
-        const { unit, action } = req.body as {
-          unit?: string;
-          action?: string;
-        };
-        if (!isValidSystemdUnit(unit)) {
-          throw new ManagerInputError("Invalid unit name");
-        }
-        if (!isValidServiceAction(action)) {
-          throw new ManagerInputError("Invalid action");
-        }
-        const result = await execElevated(
-          client,
-          buildServiceActionCommand(unit, action),
-          host.sudoPassword,
-          { forceSudo: true, timeoutMs: 30000 },
-        );
-        return {
-          success: result.code === 0,
-          output: result.stdout || result.stderr,
-        };
-      },
-    ),
-  );
-}
diff --git a/plugins/host-metrics/src/backend/managers/simple-reads.ts b/plugins/host-metrics/src/backend/managers/simple-reads.ts
deleted file mode 100644
index 09ac68c24..000000000
--- a/plugins/host-metrics/src/backend/managers/simple-reads.ts
+++ /dev/null
@@ -1,190 +0,0 @@
-import { execCommand } from "@termix/plugin-sdk/host-commands";
-import type { Router } from "express";
-import { managerHandler } from "./route-helpers.js";
-import type { ManagerRoutesDeps } from "./types.js";
-
-// ─── Top by memory ──────────────────────────────────────────────────────────
-
-export interface MemProcessRow {
-  pid: number;
-  user: string;
-  mem: number;
-  rss: number;
-  command: string;
-}
-
-const TOP_MEM_CMD =
-  "ps -eo pid,user:20,pmem,rss,comm --sort=-pmem --no-headers 2>/dev/null | head -n 20";
-
-export function parseTopMemory(output: string): MemProcessRow[] {
-  const rows: MemProcessRow[] = [];
-  for (const raw of output.split("\n")) {
-    const line = raw.trim();
-    if (!line) continue;
-    const m = line.match(/^(\d+)\s+(\S+)\s+([\d.]+)\s+(\d+)\s+(.*)$/);
-    if (!m) continue;
-    rows.push({
-      pid: Number(m[1]),
-      user: m[2],
-      mem: Number(m[3]),
-      rss: Number(m[4]),
-      command: m[5],
-    });
-  }
-  return rows;
-}
-
-// ─── Systemd timers ─────────────────────────────────────────────────────────
-
-export interface TimerRow {
-  next: string;
-  left: string;
-  last: string;
-  unit: string;
-  activates: string;
-}
-
-const TIMERS_CMD =
-  "systemctl list-timers --all --no-legend --no-pager 2>/dev/null";
-
-export function parseTimers(output: string): TimerRow[] {
-  const rows: TimerRow[] = [];
-  for (const raw of output.split("\n")) {
-    const line = raw.trim();
-    if (!line || line.startsWith("NEXT")) continue;
-    // NEXT(3) LEFT(2) LAST(3) PASSED(2) UNIT ACTIVATES  -> columns vary; grab
-    // the trailing UNIT + ACTIVATES which always end the line.
-    const parts = line.split(/\s+/);
-    if (parts.length < 2) continue;
-    const activates = parts[parts.length - 1];
-    const unit = parts[parts.length - 2];
-    if (!unit.endsWith(".timer")) continue;
-    rows.push({
-      next: parts.slice(0, 3).join(" "),
-      left: "",
-      last: "",
-      unit,
-      activates,
-    });
-  }
-  return rows;
-}
-
-// ─── Disk breakdown (per-mount) ─────────────────────────────────────────────
-
-export interface MountUsage {
-  filesystem: string;
-  sizeKb: number;
-  usedKb: number;
-  availKb: number;
-  usePct: number;
-  mount: string;
-}
-
-const DF_CMD = "df -Pk 2>/dev/null | tail -n +2";
-
-export function parseDfMounts(output: string): MountUsage[] {
-  const mounts: MountUsage[] = [];
-  for (const raw of output.split("\n")) {
-    const line = raw.trim();
-    if (!line) continue;
-    const m = line.match(/^(\S+)\s+(\d+)\s+(\d+)\s+(\d+)\s+(\d+)%\s+(.+)$/);
-    if (!m) continue;
-    const fs = m[1];
-    // Skip pseudo/virtual filesystems that clutter the view.
-    if (/^(tmpfs|devtmpfs|overlay|udev|none|shm)$/.test(fs)) continue;
-    mounts.push({
-      filesystem: fs,
-      sizeKb: Number(m[2]),
-      usedKb: Number(m[3]),
-      availKb: Number(m[4]),
-      usePct: Number(m[5]),
-      mount: m[6],
-    });
-  }
-  return mounts;
-}
-
-export function registerSimpleReadRoutes(
-  app: Router,
-  deps: ManagerRoutesDeps,
-): void {
-  const { validateHostId } = deps;
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/managers/top-memory/{id}:
-   *   get:
-   *     summary: List the processes using the most memory
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *     responses:
-   *       200: { description: The top processes by memory. }
-   *       400: { description: Invalid input. }
-   *       403: { description: No access to the host, or elevation denied. }
-   *       500: { description: The command failed on the host. }
-   */
-  app.get(
-    "/host-metrics/managers/top-memory/:id",
-    validateHostId,
-    managerHandler(deps, "connect", "top_memory", async (client) => {
-      const { stdout } = await execCommand(client, TOP_MEM_CMD, 15000);
-      return { processes: parseTopMemory(stdout) };
-    }),
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/managers/timers/{id}:
-   *   get:
-   *     summary: List systemd timers
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *     responses:
-   *       200: { description: The timers with their next and last runs. }
-   *       400: { description: Invalid input. }
-   *       403: { description: No access to the host, or elevation denied. }
-   *       500: { description: The command failed on the host. }
-   */
-  app.get(
-    "/host-metrics/managers/timers/:id",
-    validateHostId,
-    managerHandler(deps, "connect", "systemd_timers", async (client) => {
-      const { stdout } = await execCommand(client, TIMERS_CMD, 15000);
-      return { timers: parseTimers(stdout) };
-    }),
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/managers/disk-breakdown/{id}:
-   *   get:
-   *     summary: List mounted filesystems and their usage
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *     responses:
-   *       200: { description: Size, used and free space per mount. }
-   *       400: { description: Invalid input. }
-   *       403: { description: No access to the host, or elevation denied. }
-   *       500: { description: The command failed on the host. }
-   */
-  app.get(
-    "/host-metrics/managers/disk-breakdown/:id",
-    validateHostId,
-    managerHandler(deps, "connect", "disk_breakdown", async (client) => {
-      const { stdout } = await execCommand(client, DF_CMD, 15000);
-      return { mounts: parseDfMounts(stdout) };
-    }),
-  );
-}
diff --git a/plugins/host-metrics/src/backend/managers/ssl.ts b/plugins/host-metrics/src/backend/managers/ssl.ts
deleted file mode 100644
index 2f3e12307..000000000
--- a/plugins/host-metrics/src/backend/managers/ssl.ts
+++ /dev/null
@@ -1,377 +0,0 @@
-import {
-  execCommand,
-  execElevated,
-  shellSingleQuote,
-  detectPlatform,
-} from "@termix/plugin-sdk/host-commands";
-import {
-  isValidDomain,
-  isValidDnsProvider,
-  isAllowedPath,
-} from "./validation.js";
-import type { Router } from "express";
-import { managerHandler, ManagerInputError } from "./route-helpers.js";
-import type { ManagerRoutesDeps } from "./types.js";
-
-export type AcmeClient = "certbot" | "acme.sh";
-export type ChallengeType = "http-standalone" | "http-webroot" | "dns";
-
-export interface CertInfo {
-  client: AcmeClient | "other";
-  name: string;
-  domains: string[];
-  expiry: string | null;
-  path?: string;
-}
-
-const CERTBOT_LIST_CMD = "certbot certificates 2>/dev/null";
-const ACMESH_BIN = '"$(command -v acme.sh || echo "$HOME/.acme.sh/acme.sh")"';
-const ACMESH_LIST_CMD = `${ACMESH_BIN} --list 2>/dev/null`;
-
-/** Parse `certbot certificates` output. */
-export function parseCertbotCertificates(output: string): CertInfo[] {
-  const certs: CertInfo[] = [];
-  let current: CertInfo | null = null;
-  for (const raw of output.split("\n")) {
-    const line = raw.trim();
-    const nameM = line.match(/^Certificate Name:\s+(.+)$/);
-    if (nameM) {
-      if (current) certs.push(current);
-      current = {
-        client: "certbot",
-        name: nameM[1],
-        domains: [],
-        expiry: null,
-      };
-      continue;
-    }
-    if (!current) continue;
-    const domM = line.match(/^Domains:\s+(.+)$/);
-    if (domM) current.domains = domM[1].split(/\s+/).filter(Boolean);
-    const expM = line.match(/^Expiry Date:\s+(\S+\s+\S+)/);
-    if (expM) current.expiry = expM[1];
-    const pathM = line.match(/^Certificate Path:\s+(.+)$/);
-    if (pathM) current.path = pathM[1];
-  }
-  if (current) certs.push(current);
-  return certs;
-}
-
-/** Parse `acme.sh --list` (tab/space separated columns with a header). */
-export function parseAcmeShList(output: string): CertInfo[] {
-  const certs: CertInfo[] = [];
-  const lines = output.split("\n").filter((l) => l.trim());
-  if (lines.length < 2) return certs;
-  for (const line of lines.slice(1)) {
-    const cols = line
-      .split(/\s{2,}|\t/)
-      .map((c) => c.trim())
-      .filter(Boolean);
-    if (cols.length < 1) continue;
-    certs.push({
-      client: "acme.sh",
-      name: cols[0],
-      domains: [cols[0]],
-      expiry: cols[cols.length - 1] || null,
-    });
-  }
-  return certs;
-}
-
-/**
- * A certbot cert name or acme.sh primary domain. Allows letters, digits, dots,
- * hyphens, underscores and the wildcard `*` (acme.sh), but no shell metachars.
- */
-const CERT_NAME_RE = /^[A-Za-z0-9._*-]+$/;
-export function isValidCertName(name: unknown): name is string {
-  return typeof name === "string" && name.length > 0 && CERT_NAME_RE.test(name);
-}
-
-export interface IssueRequest {
-  client: AcmeClient;
-  domains: string[];
-  challenge: ChallengeType;
-  webroot?: string;
-  dnsProvider?: string;
-}
-
-/**
- * Build the certificate issuance command for the chosen client/challenge.
- * DNS-01 provider credentials are expected to already be present in the
- * environment / provider config file; we never put secrets in argv.
- */
-export function buildIssueCommand(req: IssueRequest): string {
-  const domains = req.domains;
-  if (req.client === "certbot") {
-    const dFlags = domains.map((d) => `-d ${shellSingleQuote(d)}`).join(" ");
-    if (req.challenge === "dns") {
-      return `certbot certonly --non-interactive --agree-tos --dns-${req.dnsProvider} ${dFlags}`;
-    }
-    if (req.challenge === "http-webroot") {
-      return `certbot certonly --non-interactive --agree-tos --webroot -w ${shellSingleQuote(
-        req.webroot as string,
-      )} ${dFlags}`;
-    }
-    return `certbot certonly --non-interactive --agree-tos --standalone ${dFlags}`;
-  }
-  // acme.sh
-  const dFlags = domains.map((d) => `-d ${shellSingleQuote(d)}`).join(" ");
-  if (req.challenge === "dns") {
-    return `${ACMESH_BIN} --issue --dns dns_${req.dnsProvider} ${dFlags}`;
-  }
-  if (req.challenge === "http-webroot") {
-    return `${ACMESH_BIN} --issue -w ${shellSingleQuote(
-      req.webroot as string,
-    )} ${dFlags}`;
-  }
-  return `${ACMESH_BIN} --issue --standalone ${dFlags}`;
-}
-
-export function buildRenewCommand(client: AcmeClient, dryRun: boolean): string {
-  if (client === "certbot") {
-    return `certbot renew${dryRun ? " --dry-run" : ""}`;
-  }
-  return `${ACMESH_BIN} --renew-all${dryRun ? " --staging" : ""}`;
-}
-
-/**
- * Revoke (and remove) a certificate. certbot revokes by its certificate name and
- * deletes the lineage afterwards; acme.sh revokes by primary domain then removes
- * it from management. `name` is the certbot cert name or the acme.sh domain.
- */
-export function buildRevokeCommand(client: AcmeClient, name: string): string {
-  if (client === "certbot") {
-    return `certbot revoke --non-interactive --cert-name ${shellSingleQuote(
-      name,
-    )} --delete-after-revoke`;
-  }
-  const d = shellSingleQuote(name);
-  return `${ACMESH_BIN} --revoke -d ${d} && ${ACMESH_BIN} --remove -d ${d}`;
-}
-
-export function registerSslRoutes(app: Router, deps: ManagerRoutesDeps): void {
-  const { validateHostId } = deps;
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/managers/ssl/{id}:
-   *   get:
-   *     summary: List certificates from certbot and acme.sh
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *     responses:
-   *       200: { description: The installed ACME clients and certificates. }
-   *       400: { description: Invalid input. }
-   *       403: { description: No access to the host, or elevation denied. }
-   *       500: { description: The command failed on the host. }
-   */
-  app.get(
-    "/host-metrics/managers/ssl/:id",
-    validateHostId,
-    managerHandler(deps, "connect", "ssl_list", async (client, host) => {
-      const platform = await detectPlatform(client);
-      const certs: CertInfo[] = [];
-      if (platform.hasCertbot) {
-        const r = await execElevated(
-          client,
-          CERTBOT_LIST_CMD,
-          host.sudoPassword,
-        ).catch(() => null);
-        if (r) certs.push(...parseCertbotCertificates(r.stdout));
-      }
-      if (platform.hasAcmeSh) {
-        const { stdout } = await execCommand(
-          client,
-          ACMESH_LIST_CMD,
-          15000,
-        ).catch(() => ({ stdout: "" }) as { stdout: string });
-        certs.push(...parseAcmeShList(stdout));
-      }
-      return {
-        clients: {
-          certbot: platform.hasCertbot,
-          acmeSh: platform.hasAcmeSh,
-        },
-        certs,
-      };
-    }),
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/managers/ssl/{id}/issue:
-   *   post:
-   *     summary: Issue a certificate with certbot or acme.sh
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required: [client, domains, challenge]
-   *             properties:
-   *               client: { type: string, enum: [certbot, acme.sh] }
-   *               domains: { type: array, items: { type: string } }
-   *               challenge: { type: string, enum: [http-standalone, http-webroot, dns] }
-   *               webroot: { type: string }
-   *               dnsProvider: { type: string }
-   *     responses:
-   *       200: { description: The issue result. }
-   *       400: { description: Invalid input. }
-   *       403: { description: No access to the host, or elevation denied. }
-   *       500: { description: The command failed on the host. }
-   */
-  app.post(
-    "/host-metrics/managers/ssl/:id/issue",
-    validateHostId,
-    managerHandler(deps, "connect", "ssl_issue", async (client, host, req) => {
-      const body = req.body as Partial<IssueRequest>;
-      if (body.client !== "certbot" && body.client !== "acme.sh") {
-        throw new ManagerInputError("Invalid ACME client");
-      }
-      if (!Array.isArray(body.domains) || body.domains.length === 0) {
-        throw new ManagerInputError("At least one domain is required");
-      }
-      for (const d of body.domains) {
-        if (!isValidDomain(d))
-          throw new ManagerInputError(`Invalid domain: ${d}`);
-      }
-      const challenge = body.challenge;
-      if (
-        challenge !== "http-standalone" &&
-        challenge !== "http-webroot" &&
-        challenge !== "dns"
-      ) {
-        throw new ManagerInputError("Invalid challenge type");
-      }
-      if (challenge === "dns" && !isValidDnsProvider(body.dnsProvider)) {
-        throw new ManagerInputError("Invalid DNS provider");
-      }
-      if (
-        challenge === "http-webroot" &&
-        !isAllowedPath(body.webroot, ["/var/www", "/srv", "/usr/share/nginx"])
-      ) {
-        throw new ManagerInputError("Invalid or disallowed webroot path");
-      }
-      const cmd = buildIssueCommand(body as IssueRequest);
-      const result = await execElevated(client, cmd, host.sudoPassword, {
-        forceSudo: true,
-        timeoutMs: 300000,
-      });
-      return {
-        success: result.code === 0,
-        output: (result.stdout || result.stderr).slice(-8000),
-      };
-    }),
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/managers/ssl/{id}/renew:
-   *   post:
-   *     summary: Renew certificates
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required: [client]
-   *             properties:
-   *               client: { type: string, enum: [certbot, acme.sh] }
-   *               dryRun: { type: boolean }
-   *     responses:
-   *       200: { description: The renew result. }
-   *       400: { description: Invalid input. }
-   *       403: { description: No access to the host, or elevation denied. }
-   *       500: { description: The command failed on the host. }
-   */
-  app.post(
-    "/host-metrics/managers/ssl/:id/renew",
-    validateHostId,
-    managerHandler(deps, "connect", "ssl_renew", async (client, host, req) => {
-      const { client: acmeClient, dryRun } = req.body as {
-        client?: AcmeClient;
-        dryRun?: boolean;
-      };
-      if (acmeClient !== "certbot" && acmeClient !== "acme.sh") {
-        throw new ManagerInputError("Invalid ACME client");
-      }
-      const cmd = buildRenewCommand(acmeClient, !!dryRun);
-      const result = await execElevated(client, cmd, host.sudoPassword, {
-        forceSudo: true,
-        timeoutMs: 300000,
-      });
-      return {
-        success: result.code === 0,
-        output: (result.stdout || result.stderr).slice(-8000),
-      };
-    }),
-  );
-
-  /**
-   * @openapi
-   * /host-metrics/managers/ssl/{id}/revoke:
-   *   post:
-   *     summary: Revoke and remove an issued certificate (certbot or acme.sh)
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               client: { type: string, enum: [certbot, acme.sh] }
-   *               name: { type: string, description: certbot cert name or acme.sh domain }
-   *     responses:
-   *       200: { description: Revoke result. }
-   *       400: { description: Invalid client or certificate name. }
-   *       403: { description: Elevation required or denied. }
-   */
-  app.post(
-    "/host-metrics/managers/ssl/:id/revoke",
-    validateHostId,
-    managerHandler(deps, "connect", "ssl_revoke", async (client, host, req) => {
-      const { client: acmeClient, name } = req.body as {
-        client?: AcmeClient;
-        name?: string;
-      };
-      if (acmeClient !== "certbot" && acmeClient !== "acme.sh") {
-        throw new ManagerInputError("Invalid ACME client");
-      }
-      if (!isValidCertName(name)) {
-        throw new ManagerInputError("Invalid certificate name");
-      }
-      const cmd = buildRevokeCommand(acmeClient, name);
-      const result = await execElevated(client, cmd, host.sudoPassword, {
-        forceSudo: true,
-        timeoutMs: 120000,
-      });
-      return {
-        success: result.code === 0,
-        output: (result.stdout || result.stderr).slice(-8000),
-      };
-    }),
-  );
-}
diff --git a/plugins/host-metrics/src/backend/managers/types.ts b/plugins/host-metrics/src/backend/managers/types.ts
deleted file mode 100644
index ede71aa9a..000000000
--- a/plugins/host-metrics/src/backend/managers/types.ts
+++ /dev/null
@@ -1,43 +0,0 @@
-import type { Client } from "ssh2";
-import type { RequestHandler } from "express";
-import type { PluginHostShareLevel } from "@termix/plugin-sdk/backend";
-import type { HostMetricsRepository } from "../repository.js";
-import type { MetricsLogger } from "../log.js";
-
-/** Minimal host shape managers need (includes the decrypted sudo password). */
-export interface ManagerHost {
-  id: number;
-  userId: string;
-  /** The user making the request, who may not own the host. */
-  actorId: string;
-  sudoPassword?: string;
-  enableDocker?: boolean;
-}
-
-/**
- * Runs `fn` against a pooled SSH connection for the host, after verifying the
- * acting user has at least `level` access. Resolves the host (with
- * sudoPassword) so managers can elevate. Rejects with an access error if not
- * permitted.
- */
-export type RunOnHost = <T>(
-  hostId: number,
-  level: PluginHostShareLevel,
-  fn: (client: Client, host: ManagerHost) => Promise<T>,
-) => Promise<T>;
-
-export interface HealthCheckEvent {
-  hostId: number;
-  userId: string;
-  checkId: string;
-  ok: boolean;
-  detail?: string;
-}
-
-export interface ManagerRoutesDeps {
-  validateHostId: RequestHandler;
-  runOnHost: RunOnHost;
-  log: MetricsLogger;
-  repository: HostMetricsRepository;
-  onHealthCheck: (event: HealthCheckEvent) => void;
-}
diff --git a/plugins/host-metrics/src/backend/managers/users.ts b/plugins/host-metrics/src/backend/managers/users.ts
deleted file mode 100644
index 176fb0499..000000000
--- a/plugins/host-metrics/src/backend/managers/users.ts
+++ /dev/null
@@ -1,193 +0,0 @@
-import { execCommand, execElevated } from "@termix/plugin-sdk/host-commands";
-import { isValidUsername, isValidGroupName } from "./validation.js";
-import type { Router } from "express";
-import { managerHandler, ManagerInputError } from "./route-helpers.js";
-import type { ManagerRoutesDeps } from "./types.js";
-
-export interface SystemUser {
-  name: string;
-  uid: number;
-  gid: number;
-  home: string;
-  shell: string;
-}
-
-export interface SystemGroup {
-  name: string;
-  gid: number;
-  members: string[];
-}
-
-// Human users only (uid >= 1000, excluding nobody at 65534).
-const READ_USERS_CMD = "getent passwd 2>/dev/null";
-const READ_GROUPS_CMD = "getent group 2>/dev/null";
-const READ_SUDOERS_CMD = "getent group sudo wheel 2>/dev/null";
-
-export function parsePasswd(output: string): SystemUser[] {
-  const users: SystemUser[] = [];
-  for (const line of output.split("\n")) {
-    const parts = line.split(":");
-    if (parts.length < 7) continue;
-    const uid = Number(parts[2]);
-    if (!Number.isFinite(uid)) continue;
-    if (uid < 1000 || uid === 65534) continue;
-    users.push({
-      name: parts[0],
-      uid,
-      gid: Number(parts[3]),
-      home: parts[5],
-      shell: parts[6],
-    });
-  }
-  return users;
-}
-
-export function parseGroups(output: string): SystemGroup[] {
-  const groups: SystemGroup[] = [];
-  for (const line of output.split("\n")) {
-    const parts = line.split(":");
-    if (parts.length < 4) continue;
-    groups.push({
-      name: parts[0],
-      gid: Number(parts[2]),
-      members: parts[3].split(",").filter(Boolean),
-    });
-  }
-  return groups;
-}
-
-export function parseSudoers(output: string): string[] {
-  const members = new Set<string>();
-  for (const line of output.split("\n")) {
-    const parts = line.split(":");
-    if (parts.length < 4) continue;
-    parts[3]
-      .split(",")
-      .filter(Boolean)
-      .forEach((m) => members.add(m));
-  }
-  return [...members];
-}
-
-export type UserAction = "create" | "delete" | "addToGroup" | "removeFromGroup";
-
-export function registerUserRoutes(app: Router, deps: ManagerRoutesDeps): void {
-  const { validateHostId } = deps;
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/managers/users/{id}:
-   *   get:
-   *     summary: List local users and groups
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *     responses:
-   *       200: { description: The users and groups. }
-   *       400: { description: Invalid input. }
-   *       403: { description: No access to the host, or elevation denied. }
-   *       500: { description: The command failed on the host. }
-   */
-  app.get(
-    "/host-metrics/managers/users/:id",
-    validateHostId,
-    managerHandler(deps, "connect", "users_list", async (client) => {
-      const [passwd, groups, sudoers] = await Promise.all([
-        execCommand(client, READ_USERS_CMD, 15000),
-        execCommand(client, READ_GROUPS_CMD, 15000),
-        execCommand(client, READ_SUDOERS_CMD, 15000),
-      ]);
-      return {
-        users: parsePasswd(passwd.stdout),
-        groups: parseGroups(groups.stdout),
-        sudoers: parseSudoers(sudoers.stdout),
-      };
-    }),
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/managers/users/{id}/action:
-   *   post:
-   *     summary: Create or delete a user, or change a user's groups
-   *     tags: [Host Metrics]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema: { type: integer }
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required: [action, username]
-   *             properties:
-   *               action: { type: string, enum: [create, delete, addToGroup, removeFromGroup] }
-   *               username: { type: string }
-   *               group: { type: string, description: Needed for the group actions. }
-   *     responses:
-   *       200: { description: The command result. }
-   *       400: { description: Invalid input. }
-   *       403: { description: No access to the host, or elevation denied. }
-   *       500: { description: The command failed on the host. }
-   */
-  app.post(
-    "/host-metrics/managers/users/:id/action",
-    validateHostId,
-    managerHandler(
-      deps,
-      "connect",
-      "users_action",
-      async (client, host, req) => {
-        const { action, username, group } = req.body as {
-          action?: UserAction;
-          username?: string;
-          group?: string;
-        };
-        if (!isValidUsername(username))
-          throw new ManagerInputError("Invalid username");
-
-        // Never modify/delete the user we're connected as, or root.
-        const who = (await execCommand(client, "id -un", 8000)).stdout.trim();
-        if (username === who || username === "root") {
-          throw new ManagerInputError(
-            "Refusing to modify the connected user or root",
-          );
-        }
-
-        let cmd: string;
-        switch (action) {
-          case "create":
-            cmd = `useradd -m ${username}`;
-            break;
-          case "delete":
-            cmd = `userdel -r ${username}`;
-            break;
-          case "addToGroup":
-          case "removeFromGroup":
-            if (!isValidGroupName(group))
-              throw new ManagerInputError("Invalid group");
-            cmd =
-              action === "addToGroup"
-                ? `usermod -aG ${group} ${username}`
-                : `gpasswd -d ${username} ${group}`;
-            break;
-          default:
-            throw new ManagerInputError("Invalid action");
-        }
-
-        const result = await execElevated(client, cmd, host.sudoPassword, {
-          forceSudo: true,
-        });
-        return {
-          success: result.code === 0,
-          output: result.stdout || result.stderr,
-        };
-      },
-    ),
-  );
-}
diff --git a/plugins/host-metrics/src/backend/managers/validation.ts b/plugins/host-metrics/src/backend/managers/validation.ts
deleted file mode 100644
index 7f42cb76a..000000000
--- a/plugins/host-metrics/src/backend/managers/validation.ts
+++ /dev/null
@@ -1,127 +0,0 @@
-/**
- * Strict allowlist validators for every dynamic value that reaches a shell
- * command. Managers MUST validate inputs through these before interpolation;
- * never pass raw user text to the shell.
- */
-
-const SYSTEMD_UNIT_RE =
-  /^[A-Za-z0-9@._:\\-]+\.(service|socket|timer|target|path|mount)$/;
-const PACKAGE_RE = /^[A-Za-z0-9][A-Za-z0-9.+_-]*$/;
-const USERNAME_RE = /^[a-z_][a-z0-9_-]*\$?$/;
-const GROUP_RE = /^[a-z_][a-z0-9_-]*$/;
-const DOMAIN_RE =
-  /^(\*\.)?(?!-)[A-Za-z0-9-]{1,63}(?<!-)(\.(?!-)[A-Za-z0-9-]{1,63}(?<!-))*$/;
-const PROVIDER_RE = /^[a-z0-9_]+$/;
-
-export function isValidSystemdUnit(unit: unknown): unit is string {
-  return (
-    typeof unit === "string" && unit.length <= 256 && SYSTEMD_UNIT_RE.test(unit)
-  );
-}
-
-export function isValidPid(pid: unknown): pid is number {
-  const n = typeof pid === "string" ? Number(pid) : pid;
-  return typeof n === "number" && Number.isInteger(n) && n > 0 && n < 2 ** 31;
-}
-
-export function isValidPort(port: unknown): port is number {
-  const n = typeof port === "string" ? Number(port) : port;
-  return typeof n === "number" && Number.isInteger(n) && n >= 1 && n <= 65535;
-}
-
-export function isValidPackageName(pkg: unknown): pkg is string {
-  return typeof pkg === "string" && pkg.length <= 128 && PACKAGE_RE.test(pkg);
-}
-
-export function isValidUsername(name: unknown): name is string {
-  return (
-    typeof name === "string" && name.length <= 32 && USERNAME_RE.test(name)
-  );
-}
-
-export function isValidGroupName(name: unknown): name is string {
-  return typeof name === "string" && name.length <= 32 && GROUP_RE.test(name);
-}
-
-export function isValidDomain(domain: unknown): domain is string {
-  return (
-    typeof domain === "string" && domain.length <= 253 && DOMAIN_RE.test(domain)
-  );
-}
-
-export function isValidDnsProvider(provider: unknown): provider is string {
-  return (
-    typeof provider === "string" &&
-    provider.length <= 64 &&
-    PROVIDER_RE.test(provider)
-  );
-}
-
-export type Signal = "TERM" | "KILL" | "HUP" | "INT";
-const SIGNALS: Signal[] = ["TERM", "KILL", "HUP", "INT"];
-export function isValidSignal(sig: unknown): sig is Signal {
-  return typeof sig === "string" && (SIGNALS as string[]).includes(sig);
-}
-
-export type ServiceAction =
-  "start" | "stop" | "restart" | "reload" | "enable" | "disable";
-const SERVICE_ACTIONS: ServiceAction[] = [
-  "start",
-  "stop",
-  "restart",
-  "reload",
-  "enable",
-  "disable",
-];
-export function isValidServiceAction(a: unknown): a is ServiceAction {
-  return typeof a === "string" && (SERVICE_ACTIONS as string[]).includes(a);
-}
-
-export type IpProtocol = "tcp" | "udp";
-export function isValidIpProtocol(p: unknown): p is IpProtocol {
-  return p === "tcp" || p === "udp";
-}
-
-export type FirewallTarget = "ACCEPT" | "DROP" | "REJECT";
-const FW_TARGETS: FirewallTarget[] = ["ACCEPT", "DROP", "REJECT"];
-export function isValidFirewallTarget(t: unknown): t is FirewallTarget {
-  return typeof t === "string" && (FW_TARGETS as string[]).includes(t);
-}
-
-const WG_IFACE_RE = /^[A-Za-z0-9_-]{1,15}$/;
-export function isValidWireGuardInterface(name: unknown): name is string {
-  return typeof name === "string" && WG_IFACE_RE.test(name);
-}
-
-export type WireGuardAction = "up" | "down";
-const WG_ACTIONS: WireGuardAction[] = ["up", "down"];
-export function isValidWireGuardAction(a: unknown): a is WireGuardAction {
-  return typeof a === "string" && (WG_ACTIONS as string[]).includes(a);
-}
-
-export type TailscaleAction = "up" | "down";
-const TAILSCALE_ACTIONS: TailscaleAction[] = ["up", "down"];
-export function isValidTailscaleAction(a: unknown): a is TailscaleAction {
-  return typeof a === "string" && (TAILSCALE_ACTIONS as string[]).includes(a);
-}
-
-/**
- * Validate an absolute file path against an allowlist of permitted prefixes and
- * reject traversal. Used by the log viewer (e.g. only under /var/log).
- */
-export function isAllowedPath(
-  path: unknown,
-  allowedPrefixes: string[],
-): path is string {
-  if (typeof path !== "string" || path.length === 0 || path.length > 4096) {
-    return false;
-  }
-  if (!path.startsWith("/")) return false;
-  if (path.includes("\0")) return false;
-  if (path.split("/").some((seg) => seg === "..")) return false;
-  return allowedPrefixes.some(
-    (prefix) =>
-      path === prefix ||
-      path.startsWith(prefix.endsWith("/") ? prefix : `${prefix}/`),
-  );
-}
diff --git a/plugins/host-metrics/src/backend/managers/wireguard.ts b/plugins/host-metrics/src/backend/managers/wireguard.ts
deleted file mode 100644
index 649f48589..000000000
--- a/plugins/host-metrics/src/backend/managers/wireguard.ts
+++ /dev/null
@@ -1,213 +0,0 @@
-import { execElevated } from "@termix/plugin-sdk/host-commands";
-import {
-  isValidWireGuardInterface,
-  isValidWireGuardAction,
-} from "./validation.js";
-import type { Router } from "express";
-import { managerHandler, ManagerInputError } from "./route-helpers.js";
-import type { ManagerRoutesDeps } from "./types.js";
-
-export interface WireGuardPeer {
-  publicKey: string;
-  endpoint: string | null;
-  allowedIPs: string[];
-  latestHandshake: number | null;
-  rxBytes: number;
-  txBytes: number;
-}
-
-export interface WireGuardInterface {
-  name: string;
-  publicKey: string | null;
-  listenPort: number | null;
-  up: boolean;
-  peers: WireGuardPeer[];
-}
-
-export interface WireGuardData {
-  installed: boolean;
-  interfaces: WireGuardInterface[];
-}
-
-const PROBE_CMD = [
-  "command -v wg >/dev/null 2>&1 && echo wg_installed=1 || echo wg_installed=0",
-  "ip link show type wireguard 2>/dev/null",
-  "echo __DUMP__",
-  "wg show all dump 2>/dev/null",
-].join("; ");
-
-export function parseWireGuardData(output: string): WireGuardData {
-  if (output.includes("wg_installed=0")) {
-    return { installed: false, interfaces: [] };
-  }
-
-  const dumpIdx = output.indexOf("__DUMP__");
-  const ipLinkPart = dumpIdx >= 0 ? output.slice(0, dumpIdx) : "";
-  const dumpPart =
-    dumpIdx >= 0 ? output.slice(dumpIdx + "__DUMP__".length) : "";
-
-  // Collect up interface names from `ip link show type wireguard`
-  const upSet = new Set<string>();
-  for (const line of ipLinkPart.split("\n")) {
-    const m = line.match(/^\d+:\s+([A-Za-z0-9_-]+):/);
-    if (m) upSet.add(m[1]);
-  }
-
-  const ifaceMap = new Map<string, WireGuardInterface>();
-
-  for (const raw of dumpPart.split("\n")) {
-    const line = raw.trim();
-    if (!line) continue;
-    const cols = line.split("\t");
-
-    if (cols.length === 5) {
-      // Interface row: iface private_key public_key listen_port fwmark
-      const [name, , publicKey, listenPortStr] = cols;
-      if (!name) continue;
-      ifaceMap.set(name, {
-        name,
-        publicKey: publicKey && publicKey !== "(none)" ? publicKey : null,
-        listenPort:
-          listenPortStr && listenPortStr !== "(none)"
-            ? Number(listenPortStr)
-            : null,
-        up: upSet.has(name),
-        peers: [],
-      });
-    } else if (cols.length === 9) {
-      // Peer row: iface public_key preshared_key endpoint allowed_ips latest_handshake rx_bytes tx_bytes persistent_keepalive
-      const [
-        name,
-        publicKey,
-        ,
-        endpoint,
-        allowedIPsStr,
-        handshakeStr,
-        rxStr,
-        txStr,
-      ] = cols;
-      if (!name) continue;
-
-      if (!ifaceMap.has(name)) {
-        ifaceMap.set(name, {
-          name,
-          publicKey: null,
-          listenPort: null,
-          up: upSet.has(name),
-          peers: [],
-        });
-      }
-
-      const handshake = Number(handshakeStr);
-      ifaceMap.get(name)!.peers.push({
-        publicKey: publicKey ?? "",
-        endpoint: endpoint && endpoint !== "(none)" ? endpoint : null,
-        allowedIPs:
-          allowedIPsStr && allowedIPsStr !== "(none)"
-            ? allowedIPsStr.split(",").map((s) => s.trim())
-            : [],
-        latestHandshake: handshake > 0 ? handshake : null,
-        rxBytes: Number(rxStr) || 0,
-        txBytes: Number(txStr) || 0,
-      });
-    }
-  }
-
-  return { installed: true, interfaces: Array.from(ifaceMap.values()) };
-}
-
-export function registerWireGuardRoutes(
-  app: Router,
-  deps: ManagerRoutesDeps,
-): void {
-  const { validateHostId } = deps;
-  /**
-   * @openapi
-   * /host-metrics/managers/wireguard/{id}:
-   *   get:
-   *     summary: Get WireGuard interfaces and peers
-   *     tags:
-   *       - Host Metrics
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: WireGuard installation status, interfaces, and peer details.
-   */
-  app.get(
-    "/host-metrics/managers/wireguard/:id",
-    validateHostId,
-    managerHandler(deps, "connect", "wireguard_read", async (client, host) => {
-      const result = await execElevated(client, PROBE_CMD, host.sudoPassword, {
-        forceSudo: false,
-        timeoutMs: 15000,
-      });
-      return parseWireGuardData(result.stdout);
-    }),
-  );
-
-  /**
-   * @openapi
-   * /host-metrics/managers/wireguard/{id}/action:
-   *   post:
-   *     summary: Bring a WireGuard interface up or down
-   *     tags:
-   *       - Host Metrics
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               interface:
-   *                 type: string
-   *               action:
-   *                 type: string
-   *                 enum: [up, down]
-   *     responses:
-   *       200:
-   *         description: Action result.
-   */
-  app.post(
-    "/host-metrics/managers/wireguard/:id/action",
-    validateHostId,
-    managerHandler(
-      deps,
-      "connect",
-      "wireguard_action",
-      async (client, host, req) => {
-        const { interface: iface, action } = req.body as {
-          interface: unknown;
-          action: unknown;
-        };
-        if (!isValidWireGuardInterface(iface)) {
-          throw new ManagerInputError("Invalid WireGuard interface name");
-        }
-        if (!isValidWireGuardAction(action)) {
-          throw new ManagerInputError("Invalid action, must be 'up' or 'down'");
-        }
-        const result = await execElevated(
-          client,
-          `wg-quick ${action} ${iface}`,
-          host.sudoPassword,
-          { forceSudo: true, timeoutMs: 30000 },
-        );
-        return {
-          success: result.code === 0,
-          output: (result.stdout + result.stderr).trim(),
-        };
-      },
-    ),
-  );
-}
diff --git a/plugins/host-metrics/src/backend/poller.ts b/plugins/host-metrics/src/backend/poller.ts
deleted file mode 100644
index 0abdbf56b..000000000
--- a/plugins/host-metrics/src/backend/poller.ts
+++ /dev/null
@@ -1,454 +0,0 @@
-import type {
-  PluginContext,
-  PluginHostStatusEntry,
-} from "@termix/plugin-sdk/backend";
-import { readHostMetricsSettings } from "../shared/stats-widgets.js";
-import {
-  collectMetrics,
-  isHostKeyVerificationError,
-  type CollectDeps,
-  type CollectedMetrics,
-} from "./collect.js";
-import { supportsMetrics, type MetricsHost } from "./helpers.js";
-import type { MetricsLogger } from "./log.js";
-import type { HostMetricsRepository } from "./repository.js";
-import type { MetricsViewer } from "./sessions.js";
-import {
-  canStartInitialMetrics,
-  metricsConcurrencyFor,
-  type MetricsState,
-} from "./state.js";
-
-export const DEFAULT_METRICS_INTERVAL = 30;
-export const DEFAULT_RETENTION_DAYS = 7;
-/** Viewers that stop sending heartbeats are dropped after this long. */
-const VIEWER_TIMEOUT_MS = 120_000;
-
-export const TOPIC_SNAPSHOT = "plugin.host-metrics.snapshot";
-export const TOPIC_STATUS = "plugin.host-metrics.status";
-export const TOPIC_HEALTH_CHECK = "plugin.host-metrics.health-check";
-
-/** Where collection stands for a host, sent when it changes. */
-export type CollectionState =
-  "collecting" | "auth_failed" | "host_key_changed" | "unreachable";
-
-export interface SnapshotPayload {
-  hostId: number;
-  ownerUserId: string;
-  metrics: CollectedMetrics;
-}
-
-export interface CollectionStatusPayload {
-  hostId: number;
-  ownerUserId: string;
-  state: CollectionState;
-  previous: CollectionState | null;
-}
-
-interface Polled {
-  host: MetricsHost;
-  viewerUserId: string;
-  stop: () => void;
-}
-
-export interface PollerDeps extends CollectDeps {
-  ctx: PluginContext;
-  log: MetricsLogger;
-  repository: HostMetricsRepository;
-}
-
-/**
- * Heavy SSH metrics for hosts somebody is looking at. Polling starts with the
- * first viewer and stops with the last one; a viewer is a tab, a dashboard
- * card, or another plugin through the "host-metrics.viewers" service.
- */
-export class MetricsPoller {
-  private readonly polled = new Map<number, Polled>();
-  private readonly metrics = new Map<
-    number,
-    { data: CollectedMetrics; timestamp: number }
-  >();
-  private readonly viewers = new Map<number, Set<string>>();
-  private readonly viewerDetails = new Map<string, MetricsViewer>();
-  private readonly inFlight = new Set<number>();
-  private readonly initialRequested = new Set<number>();
-  private readonly collectionState = new Map<number, CollectionState>();
-
-  constructor(private readonly deps: PollerDeps) {}
-
-  private get ctx() {
-    return this.deps.ctx;
-  }
-
-  private get state(): MetricsState {
-    return this.deps.state;
-  }
-
-  getMetrics(hostId: number) {
-    return this.metrics.get(hostId);
-  }
-
-  isPolling(hostId: number): boolean {
-    return this.polled.has(hostId);
-  }
-
-  hasViewers(hostId: number): boolean {
-    return (this.viewers.get(hostId)?.size ?? 0) > 0;
-  }
-
-  registerViewer(hostId: number, sessionId: string, userId: string): void {
-    let set = this.viewers.get(hostId);
-    if (!set) {
-      set = new Set();
-      this.viewers.set(hostId, set);
-    }
-    set.add(sessionId);
-    this.viewerDetails.set(sessionId, {
-      sessionId,
-      userId,
-      hostId,
-      lastHeartbeat: Date.now(),
-    });
-
-    if (set.size === 1) {
-      // Never let a failed start reach the request that registered it.
-      void this.start(hostId, userId).catch((error) => {
-        this.deps.log.warn("Could not start metrics polling", {
-          operation: "start_metrics_unhandled",
-          hostId,
-          error: error instanceof Error ? error.message : String(error),
-        });
-      });
-    }
-  }
-
-  /** False when the viewer is gone, so the caller registers again. */
-  updateHeartbeat(sessionId: string, userId?: string): boolean {
-    const viewer = this.viewerDetails.get(sessionId);
-    if (!viewer || (userId && viewer.userId !== userId)) return false;
-    viewer.lastHeartbeat = Date.now();
-    return true;
-  }
-
-  unregisterViewer(hostId: number, sessionId: string, userId?: string): void {
-    const viewer = this.viewerDetails.get(sessionId);
-    if (viewer && userId && viewer.userId !== userId) return;
-    const set = this.viewers.get(hostId);
-    if (set) {
-      set.delete(sessionId);
-      if (set.size === 0) {
-        this.viewers.delete(hostId);
-        this.stop(hostId, false);
-      }
-    }
-    this.viewerDetails.delete(sessionId);
-  }
-
-  /** Stops a host's polling without dropping its viewers. */
-  pause(hostId: number): void {
-    this.stop(hostId, false);
-  }
-
-  cleanupInactiveViewers(now = Date.now()): void {
-    for (const [sessionId, viewer] of [...this.viewerDetails.entries()]) {
-      if (now - viewer.lastHeartbeat > VIEWER_TIMEOUT_MS) {
-        this.unregisterViewer(viewer.hostId, sessionId);
-      }
-    }
-  }
-
-  /** A host's details changed: drop what was cached and start over. */
-  async hostUpdated(hostId: number): Promise<void> {
-    this.state.hostCache.invalidate(hostId);
-    this.state.metricsCache.clear(hostId);
-    this.ctx.ssh.dropPooled("stats", hostId);
-    const polled = this.polled.get(hostId);
-    if (polled) await this.start(hostId, polled.viewerUserId);
-  }
-
-  hostDeleted(hostId: number): void {
-    this.stop(hostId, true);
-    for (const sessionId of this.viewers.get(hostId) ?? []) {
-      this.viewerDetails.delete(sessionId);
-    }
-    this.viewers.delete(hostId);
-    this.collectionState.delete(hostId);
-    this.state.authFailures.reset(hostId);
-    this.state.backoff.reset(hostId);
-  }
-
-  /** Core's status check says the host answers again. */
-  hostStatusChanged(hostId: number, status: string): void {
-    if (status === "offline") return;
-    const polled = this.polled.get(hostId);
-    if (polled) this.scheduleInitialPoll(polled.host);
-  }
-
-  hostKeyAccepted(hostId: number): void {
-    this.state.authFailures.resetHostKeyFailure(hostId);
-  }
-
-  /** Re-times every running host, after the admin interval changed. */
-  async retimeAll(): Promise<void> {
-    for (const [hostId, polled] of [...this.polled.entries()]) {
-      await this.start(hostId, polled.viewerUserId);
-    }
-  }
-
-  dispose(): void {
-    for (const hostId of [...this.polled.keys()]) this.stop(hostId, true);
-    this.viewers.clear();
-    this.viewerDetails.clear();
-    this.state.rateSamples.clear();
-  }
-
-  /** The host as `userId` may reach it, cached for a few minutes. */
-  async resolve(hostId: number, userId: string): Promise<MetricsHost | null> {
-    const cached = this.state.hostCache.get(
-      hostId,
-      userId,
-    ) as MetricsHost | null;
-    if (cached) return cached;
-    const host = (await this.ctx.asUser(userId, () =>
-      this.ctx.ssh.resolveHost(hostId),
-    )) as MetricsHost | null;
-    if (!host) return null;
-    this.state.hostCache.set(hostId, userId, host);
-    return host;
-  }
-
-  async settingsFor(hostId: number) {
-    const settings = readHostMetricsSettings(
-      await this.ctx.settings.getAll("host", hostId),
-    );
-    const adminInterval = Number(
-      await this.ctx.settings.get<number>("metricsInterval"),
-    );
-    return {
-      ...settings,
-      intervalSeconds:
-        settings.metricsInterval ??
-        (Number.isInteger(adminInterval) && adminInterval >= 5
-          ? adminInterval
-          : DEFAULT_METRICS_INTERVAL),
-    };
-  }
-
-  private async start(hostId: number, userId: string): Promise<void> {
-    const host = await this.resolve(hostId, userId);
-    this.stop(hostId, false);
-    if (!host || !supportsMetrics(host, this.ctx.ssh)) return;
-
-    const settings = await this.settingsFor(hostId);
-    if (!settings.metricsEnabled) {
-      this.metrics.delete(hostId);
-      return;
-    }
-
-    const intervalMs = settings.intervalSeconds * 1000;
-    const stop = this.ctx.schedule.every(
-      intervalMs,
-      () => {
-        const latest = this.polled.get(hostId);
-        if (latest) this.schedulePoll(latest.host);
-      },
-      // Spread timers so a fleet does not fire on the same second.
-      { jitterMs: Math.min(intervalMs * 0.2, 15_000) },
-    );
-    this.polled.set(hostId, { host, viewerUserId: userId, stop });
-    this.syncConcurrency();
-    this.scheduleInitialPoll(host);
-  }
-
-  private stop(hostId: number, clearData: boolean): void {
-    const polled = this.polled.get(hostId);
-    if (polled) {
-      polled.stop();
-      this.polled.delete(hostId);
-      this.syncConcurrency();
-    }
-    this.inFlight.delete(hostId);
-    if (clearData) {
-      this.metrics.delete(hostId);
-      this.state.hostCache.invalidate(hostId);
-      this.state.rateSamples.clear(hostId);
-    }
-  }
-
-  /** Keeps poll concurrency matched to how many hosts are being polled. */
-  private syncConcurrency(): void {
-    const target = metricsConcurrencyFor(this.polled.size);
-    const limiter = this.state.metricsLimiter;
-    if (target === limiter.limit) return;
-    const previous = limiter.limit;
-    limiter.setLimit(target);
-    this.deps.log.info(
-      `Metrics poll concurrency ${previous} -> ${target} for ${this.polled.size} host(s)`,
-      { operation: "metrics_concurrency_resize" },
-    );
-  }
-
-  /**
-   * The first heavy sample waits for core's cheap status check to say the
-   * host answers, so a whole fleet registering at once does not open a
-   * burst of SSH connections to hosts that are down.
-   */
-  private scheduleInitialPoll(host: MetricsHost): void {
-    if (this.metrics.has(host.id) || this.initialRequested.has(host.id)) {
-      return;
-    }
-    this.initialRequested.add(host.id);
-    void this.state.initialLimiter
-      .run(async () => {
-        let status: PluginHostStatusEntry | null =
-          await this.ctx.hosts.status.get(host.id);
-        if (!status) status = await this.ctx.hosts.status.check(host.id);
-        if (!canStartInitialMetrics(status?.status, this.hasViewers(host.id))) {
-          return;
-        }
-        if (this.inFlight.has(host.id)) return;
-        this.inFlight.add(host.id);
-        try {
-          await this.state.metricsLimiter.run(() => this.poll(host));
-        } finally {
-          this.inFlight.delete(host.id);
-        }
-      })
-      .catch((error) => {
-        this.deps.log.error("Initial metrics polling failed", error, {
-          operation: "initial_metrics_poll_unhandled",
-          hostId: host.id,
-        });
-      })
-      .finally(() => this.initialRequested.delete(host.id));
-  }
-
-  private schedulePoll(host: MetricsHost): void {
-    if (this.inFlight.has(host.id)) return;
-    this.inFlight.add(host.id);
-    void this.state.metricsLimiter
-      .run(() => this.poll(host))
-      .catch((error) => {
-        this.deps.log.error("Metrics polling failed", error, {
-          operation: "metrics_poll_unhandled",
-          hostId: host.id,
-        });
-      })
-      .finally(() => this.inFlight.delete(host.id));
-  }
-
-  /** One sample for one host. Public for tests. */
-  async poll(host: MetricsHost): Promise<void> {
-    const { state, log } = this.deps;
-    if (!this.polled.has(host.id)) return;
-    if (state.authFailures.shouldSkip(host.id)) return;
-    if (state.backoff.shouldSkip(host.id)) return;
-
-    const settings = await this.settingsFor(host.id);
-    if (!settings.metricsEnabled) return;
-
-    try {
-      const metrics = await collectMetrics(this.deps, host, settings);
-      this.metrics.set(host.id, { data: metrics, timestamp: Date.now() });
-      this.ctx.hosts.status.reportLogin(host.id, { ok: true });
-      this.setCollectionState(host, "collecting");
-      await this.recordSample(host.id, metrics);
-      this.ctx.events.emit(TOPIC_SNAPSHOT, {
-        hostId: host.id,
-        ownerUserId: host.userId,
-        metrics,
-      } satisfies SnapshotPayload);
-      state.backoff.reset(host.id);
-      state.authFailures.reset(host.id);
-    } catch (error) {
-      const hostKeyChanged = isHostKeyVerificationError(error);
-      const message = error instanceof Error ? error.message : "";
-      const isAuthError = /authentication|permission denied/i.test(message);
-      this.setCollectionState(
-        host,
-        hostKeyChanged
-          ? "host_key_changed"
-          : isAuthError
-            ? "auth_failed"
-            : "unreachable",
-      );
-
-      if (isAuthError) {
-        // collectMetrics already recorded it; log the first occurrence only.
-        if (!state.authFailures.shouldSkip(host.id)) {
-          log.error("Stats collector connection failed", error, {
-            operation: "stats_connect_failed",
-            hostId: host.id,
-          });
-        }
-        return;
-      }
-
-      if (hostKeyChanged) {
-        state.authFailures.recordFailure(host.id, "HOST_KEY", true);
-        log.error("Stats collector host key verification failed", error, {
-          operation: "stats_host_key_verification_failed",
-          hostId: host.id,
-        });
-        return;
-      }
-
-      state.backoff.recordFailure(host.id);
-      // Only log when a new retry window opens, not on every skipped poll.
-      const backoff = state.backoff.getBackoffInfo(host.id);
-      if (backoff !== null && !backoff.includes("polling suspended")) {
-        log.error("Stats collector connection failed", error, {
-          operation: "stats_connect_failed",
-          hostId: host.id,
-        });
-      }
-    }
-  }
-
-  private setCollectionState(host: MetricsHost, next: CollectionState): void {
-    const previous = this.collectionState.get(host.id) ?? null;
-    if (previous === next) return;
-    this.collectionState.set(host.id, next);
-    this.ctx.events.emit(TOPIC_STATUS, {
-      hostId: host.id,
-      ownerUserId: host.userId,
-      state: next,
-      previous,
-    } satisfies CollectionStatusPayload);
-  }
-
-  private async recordSample(
-    hostId: number,
-    metrics: CollectedMetrics,
-  ): Promise<void> {
-    try {
-      const iface = metrics.network?.interfaces?.[0];
-      const bytes = (value: string | null | undefined) => {
-        const parsed = value ? parseInt(value, 10) : NaN;
-        return Number.isNaN(parsed) ? null : parsed;
-      };
-      const retention = Number(
-        await this.ctx.settings.get<number>("historyRetentionDays"),
-      );
-      await this.deps.repository.recordSample(
-        {
-          hostId,
-          cpuPercent: metrics.cpu?.percent ?? null,
-          memPercent: metrics.memory?.percent ?? null,
-          diskPercent: metrics.disk?.percent ?? null,
-          netRxBytes: bytes(iface?.rxBytes),
-          netTxBytes: bytes(iface?.txBytes),
-        },
-        Number.isInteger(retention) && retention >= 1
-          ? Math.min(retention, 90)
-          : DEFAULT_RETENTION_DAYS,
-      );
-    } catch (error) {
-      this.deps.log.warn("Failed to write metrics history", {
-        operation: "insert_metrics_history",
-        hostId,
-        error: error instanceof Error ? error.message : String(error),
-      });
-    }
-  }
-}
diff --git a/plugins/host-metrics/src/backend/repository.ts b/plugins/host-metrics/src/backend/repository.ts
deleted file mode 100644
index e835a6278..000000000
--- a/plugins/host-metrics/src/backend/repository.ts
+++ /dev/null
@@ -1,233 +0,0 @@
-import { and, asc, desc, eq, gte, lt, lte, notInArray } from "drizzle-orm";
-import type { PluginDatabase } from "@termix/plugin-sdk/backend";
-import {
-  hostHealthChecks,
-  hostHealthHistory,
-  hostMetricsHistory,
-  hostMetricsPreferences,
-} from "./tables.js";
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// ctx.db.define hands tables back untyped, and the drizzle handle is the
-// server's own. Typed at this module's edge instead.
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export interface HealthResultInput {
-  checkId: string;
-  ok: boolean;
-  latencyMs: number | null;
-  detail: string;
-}
-
-export interface HealthHistoryRow {
-  checkId: string;
-  ts: string;
-  ok: boolean;
-  latencyMs: number | null;
-  detail: string | null;
-}
-
-export interface MetricsHistoryInput {
-  hostId: number;
-  cpuPercent: number | null;
-  memPercent: number | null;
-  diskPercent: number | null;
-  netRxBytes: number | null;
-  netTxBytes: number | null;
-}
-
-export interface MetricsHistoryRow {
-  ts: string;
-  cpuPercent: number | null;
-  memPercent: number | null;
-  diskPercent: number | null;
-  netRxBytes: number | null;
-  netTxBytes: number | null;
-}
-
-/** Timestamps are text in `YYYY-MM-DD HH:MM:SS` UTC, which sorts in time order. */
-export function sqlTimestamp(date: Date): string {
-  return date.toISOString().slice(0, 19).replace("T", " ");
-}
-
-export type HostMetricsRepository = Awaited<
-  ReturnType<typeof createHostMetricsRepository>
->;
-
-/**
- * Written without RETURNING so it runs the same on all three engines: an
- * upsert reads the row by its unique (user, host) pair first.
- */
-export async function createHostMetricsRepository(db: PluginDatabase) {
-  const preferences: Table = await db.define(hostMetricsPreferences);
-  const checks: Table = await db.define(hostHealthChecks);
-  const health: Table = await db.define(hostHealthHistory);
-  const history: Table = await db.define(hostMetricsHistory);
-  const client = () => db.client<Drizzle>();
-
-  async function findOne(table: Table, userId: string, hostId: number) {
-    const drizzle = await client();
-    const rows = await drizzle
-      .select()
-      .from(table)
-      .where(and(eq(table.userId, userId), eq(table.hostId, hostId)))
-      .limit(1);
-    return rows[0] ?? null;
-  }
-
-  async function upsert(
-    table: Table,
-    userId: string,
-    hostId: number,
-    values: Record<string, unknown>,
-  ) {
-    const drizzle = await client();
-    const now = sqlTimestamp(new Date());
-    const existing = await findOne(table, userId, hostId);
-    if (existing) {
-      await drizzle
-        .update(table)
-        .set({ ...values, updatedAt: now })
-        .where(eq(table.id, existing.id));
-    } else {
-      await drizzle.insert(table).values({
-        ...values,
-        userId,
-        hostId,
-        createdAt: now,
-        updatedAt: now,
-      });
-    }
-    await db.persist();
-  }
-
-  return {
-    async findLayout(userId: string, hostId: number): Promise<string | null> {
-      return (await findOne(preferences, userId, hostId))?.layout ?? null;
-    },
-
-    saveLayout(userId: string, hostId: number, layout: string) {
-      return upsert(preferences, userId, hostId, { layout });
-    },
-
-    async findChecks(
-      userId: string,
-      hostId: number,
-    ): Promise<{ checks: string; intervalSeconds: number } | null> {
-      return findOne(checks, userId, hostId);
-    },
-
-    saveChecks(
-      userId: string,
-      hostId: number,
-      json: string,
-      intervalSeconds: number,
-    ) {
-      return upsert(checks, userId, hostId, { checks: json, intervalSeconds });
-    },
-
-    /** Adds results and keeps only the newest `keep` rows for the host. */
-    async recordHealth(
-      userId: string,
-      hostId: number,
-      results: HealthResultInput[],
-      keep: number,
-    ): Promise<void> {
-      if (results.length === 0) return;
-      const drizzle = await client();
-      const ts = sqlTimestamp(new Date());
-      await drizzle
-        .insert(health)
-        .values(results.map((result) => ({ ...result, userId, hostId, ts })));
-      const scope = and(eq(health.userId, userId), eq(health.hostId, hostId));
-      const retained = await drizzle
-        .select({ id: health.id })
-        .from(health)
-        .where(scope)
-        .orderBy(desc(health.ts), desc(health.id))
-        .limit(keep);
-      await drizzle.delete(health).where(
-        retained.length
-          ? and(
-              scope,
-              notInArray(
-                health.id,
-                retained.map((row: { id: number }) => row.id),
-              ),
-            )
-          : scope,
-      );
-      await db.persist({ lazy: true });
-    },
-
-    async listHealth(
-      userId: string,
-      hostId: number,
-      limit: number,
-    ): Promise<HealthHistoryRow[]> {
-      const drizzle = await client();
-      const rows = await drizzle
-        .select()
-        .from(health)
-        .where(and(eq(health.userId, userId), eq(health.hostId, hostId)))
-        .orderBy(desc(health.ts), desc(health.id))
-        .limit(limit);
-      return rows.map((row: Record<string, unknown>) => ({
-        checkId: row.checkId as string,
-        ts: row.ts as string,
-        ok: row.ok === true || row.ok === 1,
-        latencyMs: (row.latencyMs as number | null) ?? null,
-        detail: (row.detail as string | null) ?? null,
-      }));
-    },
-
-    /** One sample, then drops the host's samples older than the retention. */
-    async recordSample(
-      input: MetricsHistoryInput,
-      retentionDays: number,
-    ): Promise<void> {
-      const drizzle = await client();
-      const now = new Date();
-      await drizzle.insert(history).values({ ...input, ts: sqlTimestamp(now) });
-      const cutoff = new Date(now.getTime() - retentionDays * 86_400_000);
-      await drizzle
-        .delete(history)
-        .where(
-          and(
-            eq(history.hostId, input.hostId),
-            lt(history.ts, sqlTimestamp(cutoff)),
-          ),
-        );
-      // A sample every few seconds per host: let the debounced save pick it up.
-      await db.persist({ lazy: true });
-    },
-
-    async listSamples(
-      hostId: number,
-      fromTs: string,
-      toTs: string,
-    ): Promise<MetricsHistoryRow[]> {
-      const drizzle = await client();
-      return drizzle
-        .select({
-          ts: history.ts,
-          cpuPercent: history.cpuPercent,
-          memPercent: history.memPercent,
-          diskPercent: history.diskPercent,
-          netRxBytes: history.netRxBytes,
-          netTxBytes: history.netTxBytes,
-        })
-        .from(history)
-        .where(
-          and(
-            eq(history.hostId, hostId),
-            gte(history.ts, fromTs),
-            lte(history.ts, toTs),
-          ),
-        )
-        .orderBy(asc(history.ts));
-    },
-  };
-}
diff --git a/plugins/host-metrics/src/backend/routes.ts b/plugins/host-metrics/src/backend/routes.ts
deleted file mode 100644
index b3fa5b3d0..000000000
--- a/plugins/host-metrics/src/backend/routes.ts
+++ /dev/null
@@ -1,686 +0,0 @@
-import type {
-  NextFunction,
-  Request,
-  RequestHandler,
-  Response,
-  Router,
-} from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import {
-  defaultLayoutFromWidgets,
-  deriveEnabledWidgets,
-  type HostMetricsLayout,
-} from "../shared/host-metrics.js";
-import { newSessionId, supportsMetrics } from "./helpers.js";
-import {
-  startInteractive,
-  submitTotp,
-  type InteractiveDeps,
-} from "./interactive.js";
-import type { MetricsLogger } from "./log.js";
-import { registerManagerRoutes } from "./managers/index.js";
-import { AccessDeniedError } from "./managers/route-helpers.js";
-import type { HealthCheckEvent } from "./managers/types.js";
-import type { MetricsPoller } from "./poller.js";
-import { sqlTimestamp, type HostMetricsRepository } from "./repository.js";
-import { sessionKey, type MetricsSessions } from "./sessions.js";
-import { sudoPasswordOf } from "./helpers.js";
-
-export interface RouteDeps {
-  ctx: PluginContext;
-  log: MetricsLogger;
-  poller: MetricsPoller;
-  sessions: MetricsSessions;
-  repository: HostMetricsRepository;
-  onHealthCheck: (event: HealthCheckEvent) => void;
-}
-
-const RANGE_OFFSETS: Record<string, number> = {
-  "1h": 60 * 60 * 1000,
-  "6h": 6 * 60 * 60 * 1000,
-  "24h": 24 * 60 * 60 * 1000,
-  "7d": 7 * 24 * 60 * 60 * 1000,
-  "30d": 30 * 24 * 60 * 60 * 1000,
-};
-
-function validateHostId(req: Request, res: Response, next: NextFunction) {
-  const id = Number(req.params.id);
-  if (!id || !Number.isInteger(id) || id <= 0) {
-    return res.status(400).json({ error: "Invalid host ID" });
-  }
-  next();
-}
-
-export function sanitizeLayout(input: unknown): HostMetricsLayout | null {
-  if (!input || typeof input !== "object") return null;
-  const obj = input as Record<string, unknown>;
-  if (!Array.isArray(obj.slots)) return null;
-  const columns =
-    typeof obj.columns === "number" && obj.columns >= 1 && obj.columns <= 4
-      ? Math.round(obj.columns)
-      : 3;
-  const slots = obj.slots
-    .filter((s): s is Record<string, unknown> => !!s && typeof s === "object")
-    .map((s, i) => ({
-      id: String(s.id),
-      order: typeof s.order === "number" ? s.order : i,
-      colSpan:
-        s.colSpan === 1 || s.colSpan === 2 || s.colSpan === 3 ? s.colSpan : 1,
-      height:
-        typeof s.height === "number" && s.height > 0
-          ? Math.round(s.height)
-          : null,
-    }))
-    .filter((s) => s.id && s.id !== "undefined");
-  return { slots, columns } as HostMetricsLayout;
-}
-
-/** Everything under /plugin-api/host-metrics. Core authenticates first. */
-export function registerRoutes(router: Router, deps: RouteDeps): void {
-  const { ctx, log, poller, sessions, repository } = deps;
-
-  router.use(ctx.rbac.require("use") as unknown as RequestHandler);
-  router.use((_req, res, next) => {
-    res.setHeader("Cache-Control", "no-store");
-    next();
-  });
-
-  const actor = (res: Response): string | null => {
-    const userId = ctx.currentActor();
-    if (!userId) res.status(401).json({ error: "Authentication required" });
-    return userId ?? null;
-  };
-
-  const canConnect = async (hostId: number) =>
-    (await ctx.hosts.checkAccess(hostId, "connect")).hasAccess;
-
-  const interactive: InteractiveDeps = {
-    ssh: ctx.ssh,
-    sessions,
-    log,
-    registerViewer: (hostId, sessionId, userId) =>
-      poller.registerViewer(hostId, sessionId, userId),
-  };
-
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/metrics/{id}:
-   *   get:
-   *     summary: Get host metrics
-   *     description: Returns the latest sample for a host, including CPU, memory, disk, network, processes and system information.
-   *     tags:
-   *       - Host Metrics
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Host metrics data.
-   *       403:
-   *         description: No access to this host.
-   *       404:
-   *         description: Metrics not available.
-   */
-  router.get("/metrics/:id", validateHostId, async (req, res) => {
-    const id = Number(req.params.id);
-    if (!actor(res)) return;
-    if (!(await canConnect(id))) {
-      return res.status(403).json({ error: "No access to this host" });
-    }
-    const sample = poller.getMetrics(id);
-    if (!sample) {
-      return res.status(404).json({
-        error: "Metrics not available",
-        cpu: { percent: null, cores: null, load: null },
-        memory: { percent: null, usedGiB: null, totalGiB: null },
-        disk: {
-          percent: null,
-          usedHuman: null,
-          totalHuman: null,
-          availableHuman: null,
-          mount: null,
-          filesystems: [],
-        },
-        network: { interfaces: [] },
-        uptime: { seconds: null, formatted: null },
-        processes: { total: null, running: null, top: [] },
-        system: { hostname: null, kernel: null, os: null },
-        lastChecked: new Date().toISOString(),
-      });
-    }
-    res.json({
-      ...sample.data,
-      lastChecked: new Date(sample.timestamp).toISOString(),
-    });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/metrics/start/{id}:
-   *   post:
-   *     summary: Start metrics collection
-   *     description: Opens an SSH connection from the tab, where a TOTP prompt can be answered, and starts collecting metrics for the host.
-   *     tags:
-   *       - Host Metrics
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Metrics collection started, or a TOTP code is required.
-   *       401:
-   *         description: The host needs a sign-in step first.
-   *       404:
-   *         description: Host not found.
-   *       500:
-   *         description: Failed to start metrics collection.
-   */
-  router.post("/metrics/start/:id", validateHostId, async (req, res) => {
-    const id = Number(req.params.id);
-    const userId = actor(res);
-    if (!userId) return;
-    try {
-      const host = await poller.resolve(id, userId);
-      if (!host) {
-        return res.status(404).json({
-          error: "Host not found",
-          connectionLogs: [
-            {
-              type: "error",
-              stage: "stats_connecting",
-              message: "Host not found",
-            },
-          ],
-        });
-      }
-      const result = await startInteractive(interactive, host, userId);
-      res.status(result.status).json(result.body);
-    } catch (error) {
-      log.error("Failed to start metrics collection", error, {
-        operation: "metrics_start_error",
-        hostId: id,
-      });
-      res.status(500).json({ error: "Failed to start metrics collection" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/metrics/stop/{id}:
-   *   post:
-   *     summary: Stop metrics collection
-   *     description: Closes the tab's connection and drops its viewer, which stops polling when it was the last one.
-   *     tags:
-   *       - Host Metrics
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               viewerSessionId:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Metrics collection stopped.
-   */
-  router.post("/metrics/stop/:id", validateHostId, async (req, res) => {
-    const id = Number(req.params.id);
-    const userId = actor(res);
-    if (!userId) return;
-    sessions.close(sessionKey(id, userId));
-    const { viewerSessionId } = (req.body ?? {}) as {
-      viewerSessionId?: unknown;
-    };
-    if (typeof viewerSessionId === "string" && viewerSessionId) {
-      poller.unregisterViewer(id, viewerSessionId, userId);
-    } else if (await canConnect(id)) {
-      poller.pause(id);
-    }
-    res.json({ success: true });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/metrics/connect-totp:
-   *   post:
-   *     summary: Submit a TOTP code
-   *     description: Answers the TOTP prompt a metrics connection is waiting on.
-   *     tags:
-   *       - Host Metrics
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               sessionId:
-   *                 type: string
-   *               totpCode:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Connected.
-   *       400:
-   *         description: Missing sessionId or totpCode.
-   *       401:
-   *         description: TOTP verification failed.
-   *       404:
-   *         description: TOTP session not found or expired.
-   *       429:
-   *         description: Too many TOTP attempts.
-   */
-  router.post("/metrics/connect-totp", async (req, res) => {
-    const userId = actor(res);
-    if (!userId) return;
-    const { sessionId, totpCode } = (req.body ?? {}) as {
-      sessionId?: unknown;
-      totpCode?: unknown;
-    };
-    if (typeof sessionId !== "string" || typeof totpCode !== "string") {
-      return res.status(400).json({ error: "Missing sessionId or totpCode" });
-    }
-    const result = await submitTotp(interactive, userId, sessionId, totpCode);
-    res.status(result.status).json(result.body);
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/metrics/heartbeat:
-   *   post:
-   *     summary: Keep a metrics viewer alive
-   *     description: A viewer without a heartbeat for two minutes is dropped.
-   *     tags:
-   *       - Host Metrics
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               viewerSessionId:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Heartbeat updated.
-   *       400:
-   *         description: Invalid viewerSessionId.
-   *       404:
-   *         description: Viewer session not found.
-   */
-  router.post("/metrics/heartbeat", (req, res) => {
-    const userId = actor(res);
-    if (!userId) return;
-    const { viewerSessionId } = (req.body ?? {}) as {
-      viewerSessionId?: unknown;
-    };
-    if (typeof viewerSessionId !== "string" || !viewerSessionId) {
-      return res.status(400).json({ error: "Invalid viewerSessionId" });
-    }
-    if (poller.updateHeartbeat(viewerSessionId, userId)) {
-      return res.json({ success: true });
-    }
-    res.status(404).json({ error: "Viewer session not found" });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/metrics/register-viewer:
-   *   post:
-   *     summary: Register a metrics viewer
-   *     description: Starts polling a host while something shows its metrics. Answers skipped instead of failing when the host has no metrics.
-   *     tags:
-   *       - Host Metrics
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               hostId:
-   *                 type: integer
-   *     responses:
-   *       200:
-   *         description: Viewer registered, or skipped with a reason.
-   *       400:
-   *         description: Invalid hostId.
-   */
-  router.post("/metrics/register-viewer", async (req, res) => {
-    const userId = actor(res);
-    if (!userId) return;
-    const { hostId } = (req.body ?? {}) as { hostId?: unknown };
-    if (
-      typeof hostId !== "number" ||
-      !Number.isInteger(hostId) ||
-      hostId <= 0
-    ) {
-      return res.status(400).json({ error: "Invalid hostId" });
-    }
-    const skipped = (reason: string) =>
-      res.json({ success: true, skipped: true, reason });
-    try {
-      const host = await poller.resolve(hostId, userId);
-      if (!host) return skipped("host_not_found");
-      if (!supportsMetrics(host, ctx.ssh))
-        return skipped("metrics_unsupported");
-      if (!(await poller.settingsFor(hostId)).metricsEnabled) {
-        return skipped("metrics_disabled");
-      }
-      const viewerSessionId = newSessionId("viewer");
-      poller.registerViewer(hostId, viewerSessionId, userId);
-      res.json({ success: true, viewerSessionId });
-    } catch (error) {
-      log.warn("Failed to register viewer", {
-        operation: "register_viewer_error",
-        hostId,
-        error: error instanceof Error ? error.message : String(error),
-      });
-      res.json({ success: false, skipped: true, reason: "internal_error" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/metrics/unregister-viewer:
-   *   post:
-   *     summary: Unregister a metrics viewer
-   *     description: Drops a viewer. Polling stops with the last one.
-   *     tags:
-   *       - Host Metrics
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               hostId:
-   *                 type: integer
-   *               viewerSessionId:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Viewer unregistered.
-   *       400:
-   *         description: Invalid hostId or viewerSessionId.
-   */
-  router.post("/metrics/unregister-viewer", (req, res) => {
-    const userId = actor(res);
-    if (!userId) return;
-    const { hostId, viewerSessionId } = (req.body ?? {}) as {
-      hostId?: unknown;
-      viewerSessionId?: unknown;
-    };
-    if (typeof hostId !== "number" || !hostId) {
-      return res.status(400).json({ error: "Invalid hostId" });
-    }
-    if (typeof viewerSessionId !== "string" || !viewerSessionId) {
-      return res.status(400).json({ error: "Invalid viewerSessionId" });
-    }
-    poller.unregisterViewer(hostId, viewerSessionId, userId);
-    res.json({ success: true });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/metrics/history/{id}:
-   *   get:
-   *     summary: Get metrics history
-   *     description: Returns stored CPU, memory, disk and network samples for a host over a range.
-   *     tags:
-   *       - Host Metrics
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *       - in: query
-   *         name: range
-   *         schema:
-   *           type: string
-   *           enum: [1h, 6h, 24h, 7d, 30d]
-   *       - in: query
-   *         name: from
-   *         schema:
-   *           type: string
-   *       - in: query
-   *         name: to
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: The samples in the range.
-   *       400:
-   *         description: Invalid range or dates.
-   *       403:
-   *         description: No access to this host.
-   */
-  router.get("/metrics/history/:id", validateHostId, async (req, res) => {
-    const hostId = Number(req.params.id);
-    if (!actor(res)) return;
-    try {
-      if (!(await canConnect(hostId))) {
-        return res.status(403).json({ error: "Access denied" });
-      }
-      const { range, from, to } = req.query as Record<
-        string,
-        string | undefined
-      >;
-      let fromDate: Date;
-      let toDate = new Date();
-      if (range) {
-        const offsetMs = RANGE_OFFSETS[range];
-        if (!offsetMs) {
-          return res
-            .status(400)
-            .json({ error: "Invalid range. Use 1h, 6h, 24h, 7d, or 30d" });
-        }
-        fromDate = new Date(Date.now() - offsetMs);
-      } else if (from && to) {
-        fromDate = new Date(from);
-        toDate = new Date(to);
-        if (isNaN(fromDate.getTime()) || isNaN(toDate.getTime())) {
-          return res.status(400).json({ error: "Invalid from/to date format" });
-        }
-      } else {
-        fromDate = new Date(Date.now() - 24 * 60 * 60 * 1000);
-      }
-
-      const rows = (
-        await repository.listSamples(
-          hostId,
-          sqlTimestamp(fromDate),
-          sqlTimestamp(toDate),
-        )
-      ).map((row) => ({
-        ts: row.ts,
-        cpu_percent: row.cpuPercent,
-        mem_percent: row.memPercent,
-        disk_percent: row.diskPercent,
-        net_rx_bytes: row.netRxBytes,
-        net_tx_bytes: row.netTxBytes,
-      }));
-      res.json({
-        rows,
-        fromTs: fromDate.toISOString(),
-        toTs: toDate.toISOString(),
-      });
-    } catch (error) {
-      log.error("Failed to fetch metrics history", error, {
-        operation: "metrics_history_fetch_error",
-        hostId,
-      });
-      res.status(500).json({ error: "Failed to fetch metrics history" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/host-metrics/preferences/{id}:
-   *   get:
-   *     summary: Get the Host Metrics layout for a host
-   *     description: Returns the current user's saved card layout for the host, or a default layout from the host's enabled widgets when none is saved.
-   *     tags:
-   *       - Host Metrics
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: The layout for this host.
-   *       403:
-   *         description: No access to this host.
-   */
-  router.get(
-    "/host-metrics/preferences/:id",
-    validateHostId,
-    async (req, res) => {
-      const userId = actor(res);
-      if (!userId) return;
-      const hostId = Number(req.params.id);
-      try {
-        if (!(await canConnect(hostId))) {
-          return res.status(403).json({ error: "No access to this host" });
-        }
-        const saved = await repository.findLayout(userId, hostId);
-        if (saved) {
-          try {
-            const parsed = sanitizeLayout(JSON.parse(saved));
-            if (parsed) return res.json({ layout: parsed });
-          } catch {
-            // fall through to the default
-          }
-        }
-        const settings = await poller.settingsFor(hostId);
-        res.json({ layout: defaultLayoutFromWidgets(settings.enabledWidgets) });
-      } catch (error) {
-        log.error("Failed to fetch host metrics preferences", error, {
-          operation: "host_metrics_prefs_fetch_error",
-          hostId,
-        });
-        res
-          .status(500)
-          .json({ error: "Failed to fetch host metrics preferences" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/host-metrics/host-metrics/preferences/{id}:
-   *   post:
-   *     summary: Save the Host Metrics layout for a host
-   *     description: Saves the current user's card layout for the host. For the host's owner it also updates the host's enabled widgets.
-   *     tags:
-   *       - Host Metrics
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               slots:
-   *                 type: array
-   *               columns:
-   *                 type: integer
-   *     responses:
-   *       200:
-   *         description: Layout saved.
-   *       400:
-   *         description: Invalid layout.
-   *       403:
-   *         description: No access to this host.
-   */
-  router.post(
-    "/host-metrics/preferences/:id",
-    validateHostId,
-    async (req, res) => {
-      const userId = actor(res);
-      if (!userId) return;
-      const hostId = Number(req.params.id);
-      try {
-        const access = await ctx.hosts.checkAccess(hostId, "connect");
-        if (!access.hasAccess) {
-          return res.status(403).json({ error: "No access to this host" });
-        }
-        const layout = sanitizeLayout(req.body);
-        if (!layout) return res.status(400).json({ error: "Invalid layout" });
-
-        await repository.saveLayout(userId, hostId, JSON.stringify(layout));
-        if (access.isOwner) {
-          await ctx.settings.setHost(
-            hostId,
-            "enabledWidgets",
-            deriveEnabledWidgets(layout.slots),
-          );
-        }
-        res.json({ success: true });
-      } catch (error) {
-        log.error("Failed to save host metrics preferences", error, {
-          operation: "host_metrics_prefs_save_error",
-          hostId,
-        });
-        res
-          .status(500)
-          .json({ error: "Failed to save host metrics preferences" });
-      }
-    },
-  );
-
-  registerManagerRoutes(router, {
-    validateHostId,
-    log,
-    repository,
-    onHealthCheck: deps.onHealthCheck,
-    runOnHost: async (hostId, level, fn) => {
-      const userId = ctx.currentActor();
-      if (!userId) throw new AccessDeniedError("Authentication required");
-      const access = await ctx.hosts.checkAccess(hostId, level);
-      if (!access.hasAccess) throw new AccessDeniedError();
-      const host = await poller.resolve(hostId, userId);
-      if (!host) throw new AccessDeniedError("Host not found");
-      return ctx.ssh.withConnection(
-        host,
-        {
-          pool: "stats",
-          purpose: "metrics",
-          overrides: { readyTimeout: 60000 },
-        },
-        (client) =>
-          fn(client as never, {
-            id: host.id,
-            userId: host.userId,
-            actorId: userId,
-            sudoPassword: sudoPasswordOf(host),
-            enableDocker: !!host.enableDocker,
-          }),
-      );
-    },
-  });
-}
diff --git a/plugins/host-metrics/src/backend/sessions.ts b/plugins/host-metrics/src/backend/sessions.ts
deleted file mode 100644
index 048416300..000000000
--- a/plugins/host-metrics/src/backend/sessions.ts
+++ /dev/null
@@ -1,140 +0,0 @@
-import type { Client, ConnectConfig } from "ssh2";
-import type { PluginSchedule } from "@termix/plugin-sdk/backend";
-import type { MetricsLogger } from "./log.js";
-
-/** A connection a person opened from the tab, reused by polling. */
-export interface MetricsSession {
-  client: Client;
-  isConnected: boolean;
-  lastActive: number;
-  activeOperations: number;
-  hostId: number;
-  userId: string;
-  cancelCleanup?: () => void;
-}
-
-/** A connection waiting for the TOTP code the person is typing. */
-export interface PendingTOTPSession {
-  client: Client;
-  finish: (responses: string[]) => void;
-  config: ConnectConfig;
-  createdAt: number;
-  sessionId: string;
-  hostId: number;
-  userId: string;
-  prompts?: Array<{ prompt: string; echo: boolean }>;
-  totpPromptIndex?: number;
-  resolvedPassword?: string;
-  totpAttempts: number;
-}
-
-export interface MetricsViewer {
-  sessionId: string;
-  userId: string;
-  hostId: number;
-  lastHeartbeat: number;
-}
-
-const IDLE_MS = 30 * 60 * 1000;
-
-export function sessionKey(hostId: number, userId: string): string {
-  return `${userId}:${hostId}`;
-}
-
-function endQuietly(client: Client): void {
-  try {
-    client.end();
-  } catch {
-    // expected
-  }
-}
-
-/** Interactive connections, owned by one activation of the plugin. */
-export class MetricsSessions {
-  private readonly sessions = new Map<string, MetricsSession>();
-  private readonly pending = new Map<string, PendingTOTPSession>();
-
-  constructor(
-    private readonly schedule: PluginSchedule,
-    private readonly log: MetricsLogger,
-  ) {}
-
-  get(key: string): MetricsSession | undefined {
-    return this.sessions.get(key);
-  }
-
-  /** Stores a ready connection and closes it after 30 idle minutes. */
-  open(key: string, session: Omit<MetricsSession, "cancelCleanup">): void {
-    const existing = this.sessions.get(key);
-    if (existing && existing.client !== session.client) this.close(key);
-    this.sessions.set(key, { ...session });
-    this.scheduleCleanup(key);
-    session.client.once("close", () => {
-      const current = this.sessions.get(key);
-      if (current?.client === session.client) {
-        current.isConnected = false;
-        current.cancelCleanup?.();
-        this.sessions.delete(key);
-      }
-    });
-  }
-
-  touch(key: string): void {
-    const session = this.sessions.get(key);
-    if (!session) return;
-    session.lastActive = Date.now();
-    this.scheduleCleanup(key);
-  }
-
-  /** Closes a session, or waits for the operations still using it. */
-  close(key: string): void {
-    const session = this.sessions.get(key);
-    if (!session) return;
-    if (session.activeOperations > 0) {
-      this.log.warn(
-        `Deferring metrics session cleanup - ${session.activeOperations} active operations`,
-        { operation: "cleanup_deferred", sessionKey: key },
-      );
-      this.scheduleCleanup(key);
-      return;
-    }
-    session.cancelCleanup?.();
-    this.sessions.delete(key);
-    endQuietly(session.client);
-  }
-
-  addPending(session: PendingTOTPSession): void {
-    this.pending.set(session.sessionId, session);
-  }
-
-  getPending(sessionId: string): PendingTOTPSession | undefined {
-    return this.pending.get(sessionId);
-  }
-
-  dropPending(sessionId: string, endClient = false): void {
-    const session = this.pending.get(sessionId);
-    this.pending.delete(sessionId);
-    if (session && endClient) endQuietly(session.client);
-  }
-
-  dispose(): void {
-    for (const key of [...this.sessions.keys()]) {
-      const session = this.sessions.get(key)!;
-      session.cancelCleanup?.();
-      endQuietly(session.client);
-    }
-    this.sessions.clear();
-    for (const session of this.pending.values()) endQuietly(session.client);
-    this.pending.clear();
-  }
-
-  private scheduleCleanup(key: string): void {
-    const session = this.sessions.get(key);
-    if (!session) return;
-    session.cancelCleanup?.();
-    session.cancelCleanup = this.schedule.after(IDLE_MS, () => {
-      session.cancelCleanup = undefined;
-      this.close(key);
-    });
-  }
-}
diff --git a/plugins/host-metrics/src/backend/state.ts b/plugins/host-metrics/src/backend/state.ts
deleted file mode 100644
index 9e6d6a144..000000000
--- a/plugins/host-metrics/src/backend/state.ts
+++ /dev/null
@@ -1,463 +0,0 @@
-import type { PluginHostStatus } from "@termix/plugin-sdk/backend";
-import type { CpuSamples } from "./widgets/cpu-collector.js";
-import { createNetworkSamples } from "./widgets/network-collector.js";
-
-export class RequestQueue {
-  private queues = new Map<number, Array<() => Promise<unknown>>>();
-  private processing = new Set<number>();
-  private requestTimeout = 60000;
-
-  async queueRequest<T>(hostId: number, request: () => Promise<T>): Promise<T> {
-    return new Promise<T>((resolve, reject) => {
-      const wrappedRequest = async () => {
-        try {
-          const result = await Promise.race<T>([
-            request(),
-            new Promise<never>((_, rej) =>
-              setTimeout(
-                () =>
-                  rej(
-                    new Error(
-                      `Request timeout after ${this.requestTimeout}ms for host ${hostId}`,
-                    ),
-                  ),
-                this.requestTimeout,
-              ),
-            ),
-          ]);
-          resolve(result);
-        } catch (error) {
-          reject(error);
-        }
-      };
-
-      const queue = this.queues.get(hostId) || [];
-      queue.push(wrappedRequest);
-      this.queues.set(hostId, queue);
-      this.processQueue(hostId);
-    });
-  }
-
-  private async processQueue(hostId: number): Promise<void> {
-    if (this.processing.has(hostId)) return;
-
-    this.processing.add(hostId);
-    const queue = this.queues.get(hostId) || [];
-
-    while (queue.length > 0) {
-      const request = queue.shift();
-      if (request) {
-        try {
-          await request();
-        } catch {
-          // expected
-        }
-      }
-    }
-
-    this.processing.delete(hostId);
-    const currentQueue = this.queues.get(hostId);
-    if (currentQueue && currentQueue.length > 0) {
-      this.processQueue(hostId);
-    }
-  }
-}
-
-interface CachedMetrics {
-  data: unknown;
-  timestamp: number;
-  hostId: number;
-}
-
-export class MetricsCache {
-  private cache = new Map<number, CachedMetrics>();
-  private ttl = 30000;
-
-  get(hostId: number): unknown | null {
-    const cached = this.cache.get(hostId);
-    if (cached && Date.now() - cached.timestamp < this.ttl) {
-      return cached.data;
-    }
-    return null;
-  }
-
-  set(hostId: number, data: unknown): void {
-    this.cache.set(hostId, {
-      data,
-      timestamp: Date.now(),
-      hostId,
-    });
-  }
-
-  clear(hostId?: number): void {
-    if (hostId) {
-      this.cache.delete(hostId);
-    } else {
-      this.cache.clear();
-    }
-  }
-}
-
-interface AuthFailureRecord {
-  count: number;
-  lastFailure: number;
-  reason: "TOTP" | "AUTH" | "TIMEOUT" | "HOST_KEY";
-  permanent: boolean;
-}
-
-export class AuthFailureTracker {
-  private failures = new Map<number, AuthFailureRecord>();
-  private maxRetries = 3;
-  private backoffBase = 5000;
-
-  recordFailure(
-    hostId: number,
-    reason: "TOTP" | "AUTH" | "TIMEOUT" | "HOST_KEY",
-    permanent = false,
-  ): void {
-    const existing = this.failures.get(hostId);
-    if (existing) {
-      existing.count++;
-      existing.lastFailure = Date.now();
-      existing.reason = reason;
-      if (permanent) existing.permanent = true;
-    } else {
-      this.failures.set(hostId, {
-        count: 1,
-        lastFailure: Date.now(),
-        reason,
-        permanent,
-      });
-    }
-  }
-
-  shouldSkip(hostId: number): boolean {
-    const record = this.failures.get(hostId);
-    if (!record) return false;
-
-    if (record.reason === "TOTP" || record.permanent) {
-      return true;
-    }
-
-    if (record.count >= this.maxRetries) {
-      return true;
-    }
-
-    const backoffTime = this.backoffBase * Math.pow(2, record.count - 1);
-    const timeSinceFailure = Date.now() - record.lastFailure;
-
-    return timeSinceFailure < backoffTime;
-  }
-
-  getSkipReason(hostId: number): string | null {
-    const record = this.failures.get(hostId);
-    if (!record) return null;
-
-    if (record.reason === "TOTP") {
-      return "TOTP authentication required (metrics unavailable)";
-    }
-
-    if (record.reason === "HOST_KEY") {
-      return "SSH host key changed (verification required)";
-    }
-
-    if (record.permanent) {
-      return "Authentication permanently failed";
-    }
-
-    if (record.count >= this.maxRetries) {
-      return `Too many authentication failures (${record.count} attempts)`;
-    }
-
-    const backoffTime = this.backoffBase * Math.pow(2, record.count - 1);
-    const timeSinceFailure = Date.now() - record.lastFailure;
-    const remainingTime = Math.ceil((backoffTime - timeSinceFailure) / 1000);
-
-    if (timeSinceFailure < backoffTime) {
-      return `Retry in ${remainingTime}s (attempt ${record.count}/${this.maxRetries})`;
-    }
-
-    return null;
-  }
-
-  resetHostKeyFailure(hostId: number): void {
-    if (this.failures.get(hostId)?.reason === "HOST_KEY") this.reset(hostId);
-  }
-
-  reset(hostId: number): void {
-    this.failures.delete(hostId);
-  }
-
-  cleanup(): void {
-    const maxAge = 60 * 60 * 1000;
-    const now = Date.now();
-
-    for (const [hostId, record] of this.failures.entries()) {
-      if (!record.permanent && now - record.lastFailure > maxAge) {
-        this.failures.delete(hostId);
-      }
-    }
-  }
-}
-
-export class PollingBackoff {
-  private failures = new Map<number, { count: number; nextRetry: number }>();
-  private baseDelay = 30000;
-  private maxDelay = 600000;
-  private maxRetries = 5;
-
-  recordFailure(hostId: number): void {
-    const existing = this.failures.get(hostId) || { count: 0, nextRetry: 0 };
-    const delay = Math.min(
-      this.baseDelay * Math.pow(2, existing.count),
-      this.maxDelay,
-    );
-    this.failures.set(hostId, {
-      count: existing.count + 1,
-      nextRetry: Date.now() + delay,
-    });
-  }
-
-  shouldSkip(hostId: number): boolean {
-    const backoff = this.failures.get(hostId);
-    if (!backoff) return false;
-
-    if (backoff.count >= this.maxRetries) {
-      return true;
-    }
-
-    return Date.now() < backoff.nextRetry;
-  }
-
-  getBackoffInfo(hostId: number): string | null {
-    const backoff = this.failures.get(hostId);
-    if (!backoff) return null;
-
-    if (backoff.count >= this.maxRetries) {
-      return `Max retries exceeded (${backoff.count} failures) - polling suspended`;
-    }
-
-    const remainingMs = backoff.nextRetry - Date.now();
-    if (remainingMs > 0) {
-      const remainingSec = Math.ceil(remainingMs / 1000);
-      return `Retry in ${remainingSec}s (attempt ${backoff.count}/${this.maxRetries})`;
-    }
-
-    return null;
-  }
-
-  reset(hostId: number): void {
-    this.failures.delete(hostId);
-  }
-
-  cleanup(): void {
-    const maxAge = 60 * 60 * 1000;
-    const now = Date.now();
-
-    for (const [hostId, backoff] of this.failures.entries()) {
-      if (backoff.count < this.maxRetries && now - backoff.nextRetry > maxAge) {
-        this.failures.delete(hostId);
-      }
-    }
-  }
-}
-
-/**
- * Limits how many async jobs run at once. Extra callers wait in FIFO order.
- * Used to stop metrics polls from stampeding under load.
- */
-export class ConcurrentLimiter {
-  private active = 0;
-  private readonly waiters: Array<() => void> = [];
-
-  constructor(private maxConcurrent: number) {
-    if (maxConcurrent < 1) {
-      throw new Error("maxConcurrent must be >= 1");
-    }
-  }
-
-  get activeCount(): number {
-    return this.active;
-  }
-
-  get pendingCount(): number {
-    return this.waiters.length;
-  }
-
-  get limit(): number {
-    return this.maxConcurrent;
-  }
-
-  /**
-   * Changes the ceiling at runtime.
-   *
-   * Raising it wakes the waiters the new headroom allows, so a queue that built
-   * up under the old limit drains at once instead of one job at a time as
-   * running work finishes. Lowering it never interrupts work already running;
-   * the new limit simply applies from the next release onward.
-   */
-  setLimit(maxConcurrent: number): void {
-    if (maxConcurrent < 1) {
-      throw new Error("maxConcurrent must be >= 1");
-    }
-    this.maxConcurrent = maxConcurrent;
-    this.releaseWaiters();
-  }
-
-  /**
-   * Wakes as many queued callers as there is now room for.
-   *
-   * `woken` counts callers that have been resumed but have not yet reached the
-   * `active += 1` on the far side of their await. Without it the occupancy
-   * looks lower than it really is for a microtask, and the loop would release
-   * past the ceiling.
-   */
-  private releaseWaiters(): void {
-    while (
-      this.active + this.woken < this.maxConcurrent &&
-      this.waiters.length > 0
-    ) {
-      this.woken += 1;
-      this.waiters.shift()!();
-    }
-  }
-
-  private woken = 0;
-
-  async run<T>(fn: () => Promise<T>): Promise<T> {
-    // Queue behind anything already woken, so a caller arriving mid-handoff
-    // cannot jump the queue and push occupancy past the ceiling.
-    if (this.active + this.woken >= this.maxConcurrent) {
-      await new Promise<void>((resolve) => {
-        this.waiters.push(resolve);
-      });
-      // Resumed by a slot handoff; that reservation is now consumed.
-      this.woken = Math.max(0, this.woken - 1);
-    }
-
-    this.active += 1;
-    try {
-      return await fn();
-    } finally {
-      this.active -= 1;
-      this.releaseWaiters();
-    }
-  }
-}
-
-/**
- * How many metrics polls may run at once for a given number of polled hosts.
- *
- * A metrics poll is an SSH exec, so this cannot simply be unbounded — but the
- * old fixed ceiling of 5 meant a sweep of 500 hosts took ~40s against a 30s
- * interval, so polling fell permanently behind and a host could wait over a
- * minute for a "30 second" metric. Scaling with the fleet keeps a sweep inside
- * its interval; the cap keeps file descriptors and CPU bounded.
- */
-export const METRICS_CONCURRENCY_ENV = "METRICS_POLL_CONCURRENCY";
-const MIN_METRICS_CONCURRENCY = 5;
-const MAX_METRICS_CONCURRENCY = 50;
-/** Aim to spend about a twentieth of the interval per sweep wave. */
-const HOSTS_PER_WORKER = 20;
-
-export function metricsConcurrencyFor(
-  hostCount: number,
-  env: NodeJS.ProcessEnv = process.env,
-): number {
-  const override = Number(env[METRICS_CONCURRENCY_ENV]);
-  if (Number.isFinite(override) && override >= 1) {
-    return Math.min(Math.floor(override), MAX_METRICS_CONCURRENCY);
-  }
-
-  const scaled = Math.ceil(Math.max(0, hostCount) / HOSTS_PER_WORKER);
-  return Math.min(
-    Math.max(scaled, MIN_METRICS_CONCURRENCY),
-    MAX_METRICS_CONCURRENCY,
-  );
-}
-
-/** Short-lived host snapshots for polling — avoids decrypting host rows every tick. */
-export class HostPollCache<THost extends { id: number } = { id: number }> {
-  private cache = new Map<
-    number,
-    { host: THost; userId: string; expiresAt: number }
-  >();
-
-  constructor(private readonly ttlMs = 30_000) {}
-
-  get(hostId: number, userId: string): THost | null {
-    const entry = this.cache.get(hostId);
-    if (!entry) return null;
-    if (entry.userId !== userId || Date.now() >= entry.expiresAt) {
-      this.cache.delete(hostId);
-      return null;
-    }
-    return entry.host;
-  }
-
-  set(hostId: number, userId: string, host: THost): void {
-    this.cache.set(hostId, {
-      host,
-      userId,
-      expiresAt: Date.now() + this.ttlMs,
-    });
-  }
-
-  invalidate(hostId?: number): void {
-    if (hostId === undefined) {
-      this.cache.clear();
-      return;
-    }
-    this.cache.delete(hostId);
-  }
-}
-
-/**
- * The first heavy SSH sample waits until core's cheap status check says the
- * host answers. A host core does not check (status checks off) is tried.
- */
-export function canStartInitialMetrics(
-  status: PluginHostStatus | null | undefined,
-  hasViewers: boolean,
-): boolean {
-  return hasViewers && status !== "offline";
-}
-
-/** Everything one activation of the plugin polls with. */
-/** The last CPU and network sample per host, for rates between polls. */
-export function createRateSamples() {
-  const cpu: CpuSamples = new Map();
-  const network = createNetworkSamples();
-  return {
-    cpu,
-    network,
-    clear(hostId?: number) {
-      if (hostId === undefined) {
-        cpu.clear();
-        network.counters.clear();
-        network.windows.clear();
-        return;
-      }
-      cpu.delete(hostId);
-      network.counters.delete(hostId);
-      network.windows.delete(hostId);
-    },
-  };
-}
-
-export function createMetricsState() {
-  return {
-    rateSamples: createRateSamples(),
-    /** SSH metrics execs are expensive; resized with the fleet. */
-    metricsLimiter: new ConcurrentLimiter(5),
-    /** Viewer registration is bursty; admit only two first samples at a time. */
-    initialLimiter: new ConcurrentLimiter(2),
-    hostCache: new HostPollCache(30_000),
-    requestQueue: new RequestQueue(),
-    metricsCache: new MetricsCache(),
-    authFailures: new AuthFailureTracker(),
-    backoff: new PollingBackoff(),
-  };
-}
-
-export type MetricsState = ReturnType<typeof createMetricsState>;
diff --git a/plugins/host-metrics/src/backend/tables.ts b/plugins/host-metrics/src/backend/tables.ts
deleted file mode 100644
index 9623438db..000000000
--- a/plugins/host-metrics/src/backend/tables.ts
+++ /dev/null
@@ -1,120 +0,0 @@
-import {
-  adoptLegacyTable,
-  boolean,
-  defineTable,
-  id,
-  integer,
-  real,
-  refHost,
-  refUser,
-  text,
-  timestamp,
-  varchar,
-} from "@termix/plugin-sdk/db";
-
-/** One card layout per user per host, as JSON. */
-export const hostMetricsPreferences = adoptLegacyTable(
-  "host_metrics_preferences",
-  defineTable(
-    "host_metrics_preferences",
-    {
-      id: id(),
-      userId: refUser(),
-      hostId: refHost(),
-      layout: text().notNull(),
-      createdAt: timestamp().notNull().defaultNow(),
-      updatedAt: timestamp().notNull().defaultNow(),
-    },
-    {
-      uniques: [
-        {
-          name: "idx_host_metrics_prefs_user_host",
-          columns: ["userId", "hostId"],
-        },
-      ],
-    },
-  ),
-);
-
-/** A user's health checks for a host, as a JSON array. */
-export const hostHealthChecks = adoptLegacyTable(
-  "host_health_checks",
-  defineTable(
-    "host_health_checks",
-    {
-      id: id(),
-      userId: refUser(),
-      hostId: refHost(),
-      checks: text().notNull(),
-      intervalSeconds: integer().notNull().default(300),
-      createdAt: timestamp().notNull().defaultNow(),
-      updatedAt: timestamp().notNull().defaultNow(),
-    },
-    {
-      uniques: [
-        {
-          name: "idx_host_health_checks_user_host",
-          columns: ["userId", "hostId"],
-        },
-      ],
-    },
-  ),
-);
-
-export const hostHealthHistory = adoptLegacyTable(
-  "host_health_history",
-  defineTable(
-    "host_health_history",
-    {
-      id: id(),
-      userId: refUser(),
-      hostId: refHost(),
-      checkId: varchar().notNull(),
-      ts: timestamp().notNull().defaultNow(),
-      ok: boolean().notNull(),
-      latencyMs: integer(),
-      detail: text(),
-    },
-    {
-      indexes: [
-        {
-          name: "idx_host_health_history_lookup",
-          columns: ["userId", "hostId", "checkId", "ts"],
-        },
-      ],
-    },
-  ),
-);
-
-/** One row per metrics sample, pruned to the retention setting. */
-export const hostMetricsHistory = adoptLegacyTable(
-  "host_metrics_history",
-  defineTable(
-    "host_metrics_history",
-    {
-      id: id(),
-      hostId: refHost(),
-      ts: timestamp().notNull().defaultNow(),
-      cpuPercent: real(),
-      memPercent: real(),
-      diskPercent: real(),
-      netRxBytes: integer(),
-      netTxBytes: integer(),
-    },
-    {
-      indexes: [
-        {
-          name: "idx_host_metrics_history_host_ts",
-          columns: ["hostId", "ts"],
-        },
-      ],
-    },
-  ),
-);
-
-export const tables = [
-  hostMetricsPreferences,
-  hostHealthChecks,
-  hostHealthHistory,
-  hostMetricsHistory,
-];
diff --git a/plugins/host-metrics/src/backend/util.ts b/plugins/host-metrics/src/backend/util.ts
deleted file mode 100644
index 1a0fb6a48..000000000
--- a/plugins/host-metrics/src/backend/util.ts
+++ /dev/null
@@ -1,17 +0,0 @@
-export function toFixedNum(
-  n: number | null | undefined,
-  digits = 2,
-): number | null {
-  if (typeof n !== "number" || !Number.isFinite(n)) return null;
-  return Number(n.toFixed(digits));
-}
-
-export function kibToGiB(kib: number): number {
-  return kib / (1024 * 1024);
-}
-
-export function errorMessage(error: unknown, fallback = "Unknown error") {
-  if (error instanceof Error && error.message) return error.message;
-  if (typeof error === "string" && error) return error;
-  return fallback;
-}
diff --git a/plugins/host-metrics/src/backend/widgets/cpu-collector.ts b/plugins/host-metrics/src/backend/widgets/cpu-collector.ts
deleted file mode 100644
index e6ae7c93b..000000000
--- a/plugins/host-metrics/src/backend/widgets/cpu-collector.ts
+++ /dev/null
@@ -1,223 +0,0 @@
-import {
-  execCommand,
-  execPowerShell,
-  type HostPlatform,
-} from "@termix/plugin-sdk/host-commands";
-import { toFixedNum } from "../util.js";
-import type { Client } from "ssh2";
-
-/**
- * CPU percent is derived from the delta against the previous poll's
- * /proc/stat sample rather than a same-poll double-read, so a poll no longer
- * has to block for a fixed settle window. Keyed by host, and owned by the
- * poller so it goes away with the plugin.
- */
-export type CpuSamples = Map<
-  number,
-  { total: number; idle: number; timestamp: number }
->;
-
-export function parseCpuLine(
-  cpuLine: string,
-): { total: number; idle: number } | undefined {
-  const parts = cpuLine.trim().split(/\s+/);
-  if (parts[0] !== "cpu") return undefined;
-  const nums = parts
-    .slice(1)
-    .map((n) => Number(n))
-    .filter((n) => Number.isFinite(n));
-  if (nums.length < 4) return undefined;
-  const idle = (nums[3] ?? 0) + (nums[4] ?? 0);
-  const total = nums.reduce((a, b) => a + b, 0);
-  return { total, idle };
-}
-
-// Parses macOS `top -l 1 -n 0` output, e.g.
-// "CPU usage: 12.34% user, 5.67% sys, 81.99% idle"
-export function parseDarwinCpuUsageLine(
-  line: string,
-): { percent: number } | undefined {
-  const match = line.match(
-    /([\d.]+)%\s*user,\s*([\d.]+)%\s*sys,\s*([\d.]+)%\s*idle/i,
-  );
-  if (!match) return undefined;
-  const user = Number(match[1]);
-  const sys = Number(match[2]);
-  if (!Number.isFinite(user) || !Number.isFinite(sys)) return undefined;
-  return { percent: Math.max(0, Math.min(100, user + sys)) };
-}
-
-async function collectDarwinCpuMetrics(client: Client): Promise<{
-  percent: number | null;
-  cores: number | null;
-  load: [number, number, number] | null;
-}> {
-  let cpuPercent: number | null = null;
-  let cores: number | null = null;
-  let loadTriplet: [number, number, number] | null = null;
-
-  try {
-    const [topOut, coresOut, loadOut] = await Promise.race([
-      Promise.all([
-        execCommand(client, "top -l 1 -n 0"),
-        execCommand(client, "sysctl -n hw.ncpu"),
-        execCommand(client, "sysctl -n vm.loadavg"),
-      ]),
-      new Promise<never>((_, reject) =>
-        setTimeout(
-          () => reject(new Error("CPU metrics collection timeout")),
-          25000,
-        ),
-      ),
-    ]);
-
-    const usageLine = topOut.stdout
-      .split("\n")
-      .find((l) => l.includes("CPU usage:"));
-    const parsed = usageLine ? parseDarwinCpuUsageLine(usageLine) : undefined;
-    if (parsed) cpuPercent = parsed.percent;
-
-    const coresNum = Number((coresOut.stdout || "").trim());
-    cores = Number.isFinite(coresNum) && coresNum > 0 ? coresNum : null;
-
-    // sysctl -n vm.loadavg -> "{ 1.23 1.45 1.67 }"
-    const loadMatch = loadOut.stdout.match(/([\d.]+)\s+([\d.]+)\s+([\d.]+)/);
-    if (loadMatch) {
-      loadTriplet = [
-        Number(loadMatch[1]),
-        Number(loadMatch[2]),
-        Number(loadMatch[3]),
-      ].map((v) => (Number.isFinite(v) ? Number(v) : 0)) as [
-        number,
-        number,
-        number,
-      ];
-    }
-  } catch {
-    cpuPercent = null;
-    loadTriplet = null;
-  }
-
-  return {
-    percent: toFixedNum(cpuPercent, 0),
-    cores,
-    load: loadTriplet,
-  };
-}
-
-// No POSIX-style load average exists on Windows, so `load` always stays null.
-async function collectWindowsCpuMetrics(client: Client): Promise<{
-  percent: number | null;
-  cores: number | null;
-  load: [number, number, number] | null;
-}> {
-  let cpuPercent: number | null = null;
-  let cores: number | null = null;
-
-  try {
-    const { stdout } = await execPowerShell(
-      client,
-      "$cpu=(Get-CimInstance Win32_Processor | Measure-Object -Property LoadPercentage -Average).Average; $cores=(Get-CimInstance Win32_ComputerSystem).NumberOfLogicalProcessors; [PSCustomObject]@{cpu=$cpu; cores=$cores} | ConvertTo-Json -Compress",
-      25000,
-    );
-    const parsed = JSON.parse(stdout.trim());
-    const cpuNum = Number(parsed?.cpu);
-    const coresNum = Number(parsed?.cores);
-    cpuPercent = Number.isFinite(cpuNum)
-      ? Math.max(0, Math.min(100, cpuNum))
-      : null;
-    cores = Number.isFinite(coresNum) && coresNum > 0 ? coresNum : null;
-  } catch {
-    cpuPercent = null;
-  }
-
-  return {
-    percent: toFixedNum(cpuPercent, 0),
-    cores,
-    load: null,
-  };
-}
-
-export async function collectCpuMetrics(
-  client: Client,
-  platform?: HostPlatform,
-  hostId?: number,
-  previousStat: CpuSamples = new Map(),
-): Promise<{
-  percent: number | null;
-  cores: number | null;
-  load: [number, number, number] | null;
-}> {
-  if (platform === "darwin") {
-    return collectDarwinCpuMetrics(client);
-  }
-  if (platform === "windows") {
-    return collectWindowsCpuMetrics(client);
-  }
-
-  let cpuPercent: number | null = null;
-  let cores: number | null = null;
-  let loadTriplet: [number, number, number] | null = null;
-
-  try {
-    const readAt = Date.now();
-    const [statOut, loadAvgOut, coresOut] = await Promise.race([
-      Promise.all([
-        execCommand(client, "cat /proc/stat"),
-        execCommand(client, "cat /proc/loadavg"),
-        execCommand(
-          client,
-          "nproc 2>/dev/null || grep -c ^processor /proc/cpuinfo",
-        ),
-      ]),
-      new Promise<never>((_, reject) =>
-        setTimeout(
-          () => reject(new Error("CPU metrics collection timeout")),
-          25000,
-        ),
-      ),
-    ]);
-
-    const cpuLine = (
-      statOut.stdout.split("\n").find((l) => l.startsWith("cpu ")) || ""
-    ).trim();
-    const current = parseCpuLine(cpuLine);
-    const previous =
-      hostId !== undefined ? previousStat.get(hostId) : undefined;
-    if (current && previous) {
-      const totalDiff = current.total - previous.total;
-      const idleDiff = current.idle - previous.idle;
-      const used = totalDiff - idleDiff;
-      if (totalDiff > 0)
-        cpuPercent = Math.max(0, Math.min(100, (used / totalDiff) * 100));
-    }
-    if (current && hostId !== undefined) {
-      previousStat.set(hostId, { ...current, timestamp: readAt });
-    }
-
-    const laParts = loadAvgOut.stdout.trim().split(/\s+/);
-    if (laParts.length >= 3) {
-      loadTriplet = [
-        Number(laParts[0]),
-        Number(laParts[1]),
-        Number(laParts[2]),
-      ].map((v) => (Number.isFinite(v) ? Number(v) : 0)) as [
-        number,
-        number,
-        number,
-      ];
-    }
-
-    const coresNum = Number((coresOut.stdout || "").trim());
-    cores = Number.isFinite(coresNum) && coresNum > 0 ? coresNum : null;
-  } catch {
-    cpuPercent = null;
-    loadTriplet = null;
-  }
-
-  return {
-    percent: toFixedNum(cpuPercent, 0),
-    cores,
-    load: loadTriplet,
-  };
-}
diff --git a/plugins/host-metrics/src/backend/widgets/disk-collector.ts b/plugins/host-metrics/src/backend/widgets/disk-collector.ts
deleted file mode 100644
index af6cae196..000000000
--- a/plugins/host-metrics/src/backend/widgets/disk-collector.ts
+++ /dev/null
@@ -1,531 +0,0 @@
-import {
-  execCommand,
-  execPowerShell,
-  type HostPlatform,
-} from "@termix/plugin-sdk/host-commands";
-import { toFixedNum } from "../util.js";
-import type { Client } from "ssh2";
-
-const PSEUDO_FS_RE =
-  /^(tmpfs|devtmpfs|overlay|udev|none|shm|squashfs|efivarfs)$/;
-
-export interface DfRow {
-  filesystem: string;
-  type: string;
-  mount: string;
-  parts: string[];
-}
-
-export interface DiskFilesystem {
-  filesystem: string;
-  type: string;
-  mount: string;
-  percent: number | null;
-  usedHuman: string | null;
-  totalHuman: string | null;
-  availableHuman: string | null;
-  usedBytes: number | null;
-  totalBytes: number | null;
-  availableBytes: number | null;
-  label?: string;
-}
-
-export interface MonitoredMount {
-  path: string;
-  label?: string;
-}
-
-function shellQuote(value: string): string {
-  return `'${value.replace(/'/g, `'\\''`)}'`;
-}
-
-// Parses `df -T -P`-style output: Filesystem, Type, then the size columns,
-// with Mounted-on last. The Type column (e.g. ext4, nfs4, cifs) is what lets
-// callers filter network shares out by filesystem type rather than guessing
-// from the source path.
-export function parseDfLines(output: string): DfRow[] {
-  return output
-    .split("\n")
-    .map((l) => l.trim())
-    .filter(Boolean)
-    .map((line) => {
-      const parts = line.split(/\s+/);
-      return {
-        filesystem: parts[0] || "",
-        type: parts[1] || "",
-        mount: parts[6] || "",
-        parts,
-      };
-    })
-    .filter((row) => row.parts.length >= 7 && !PSEUDO_FS_RE.test(row.type));
-}
-
-// Finds the index of the most-utilized real filesystem in a GNU `df -TkP`-style
-// row set (parts[2] = total KB, parts[3] = used KB), so a nearly-full
-// secondary mount (e.g. /data) isn't hidden behind a healthy root filesystem.
-export function findWorstMountIndex(bytesRows: DfRow[]): {
-  index: number;
-  usedBytes: number;
-  totalBytes: number;
-} {
-  let worstIndex = -1;
-  let worstUsedBytes = -1;
-  let worstTotalBytes = 0;
-
-  bytesRows.forEach((row, index) => {
-    const totalBytes = Number(row.parts[2]);
-    const usedBytes = Number(row.parts[3]);
-    if (
-      !Number.isFinite(totalBytes) ||
-      !Number.isFinite(usedBytes) ||
-      totalBytes <= 0
-    ) {
-      return;
-    }
-    const usedRatio = usedBytes / totalBytes;
-    const worstRatio =
-      worstTotalBytes > 0 ? worstUsedBytes / worstTotalBytes : -1;
-    if (usedRatio > worstRatio) {
-      worstIndex = index;
-      worstUsedBytes = usedBytes;
-      worstTotalBytes = totalBytes;
-    }
-  });
-
-  return {
-    index: worstIndex,
-    usedBytes: worstUsedBytes,
-    totalBytes: worstTotalBytes,
-  };
-}
-
-// Merges a GNU `df -TkP` size-row set (parts[2..4] in `blockSizeBytes` units)
-// and a `df -hT -P` human-row set into one filesystem list. Byte rows drive
-// the maths; human rows only supply the display strings, matched by mount
-// point so a mismatched row count can't shift the columns.
-export function buildFilesystemList(
-  bytesRows: DfRow[],
-  humanRows: DfRow[],
-  blockSizeBytes = 1,
-): DiskFilesystem[] {
-  const aligned = humanRows.length === bytesRows.length;
-
-  return bytesRows
-    .map((row, index) => {
-      const totalBytes = Number(row.parts[2]) * blockSizeBytes;
-      const usedBytes = Number(row.parts[3]) * blockSizeBytes;
-      const availableBytes = Number(row.parts[4]) * blockSizeBytes;
-      if (!Number.isFinite(totalBytes) || totalBytes <= 0) return null;
-
-      const humanRow = aligned
-        ? humanRows[index]
-        : humanRows.find((h) => h.mount === row.mount);
-
-      const percent = Number.isFinite(usedBytes)
-        ? Math.max(0, Math.min(100, (usedBytes / totalBytes) * 100))
-        : null;
-
-      return {
-        filesystem: row.filesystem,
-        type: row.type,
-        mount: row.mount,
-        percent: toFixedNum(percent, 0),
-        usedHuman: humanRow?.parts[3] || null,
-        totalHuman: humanRow?.parts[2] || null,
-        availableHuman: humanRow?.parts[4] || null,
-        usedBytes: Number.isFinite(usedBytes) ? usedBytes : null,
-        totalBytes,
-        availableBytes: Number.isFinite(availableBytes) ? availableBytes : null,
-      };
-    })
-    .filter((fs): fs is DiskFilesystem => fs !== null);
-}
-
-// The headline disk figure should be the root filesystem - that is what users
-// mean by "the server's disk". Only when there is no root mount (containers,
-// chroots) do we fall back to the most-utilized mount.
-export function selectPrimaryFilesystem(
-  filesystems: DiskFilesystem[],
-): DiskFilesystem | null {
-  if (filesystems.length === 0) return null;
-
-  const root = filesystems.find((fs) => fs.mount === "/");
-  if (root) return root;
-
-  let best = filesystems[0];
-  for (const fs of filesystems) {
-    const ratio = (fs.usedBytes ?? 0) / (fs.totalBytes || 1);
-    const bestRatio = (best.usedBytes ?? 0) / (best.totalBytes || 1);
-    if (ratio > bestRatio) best = fs;
-  }
-  return best;
-}
-
-// Excluded mounts are user-configured per host: an exact mount-path match
-// (e.g. "/mnt/nas") or a filesystem-type substring match (e.g. "nfs" matches
-// nfs/nfs4, "cifs" matches cifs/smb3), so network shares can be dropped from
-// the headline percent and the filesystem list without hiding local disks.
-export function filterExcludedFilesystems(
-  filesystems: DiskFilesystem[],
-  excludedMounts?: string[] | null,
-): DiskFilesystem[] {
-  if (!excludedMounts || excludedMounts.length === 0) return filesystems;
-
-  const normalized = excludedMounts
-    .map((entry) => entry.trim().toLowerCase())
-    .filter(Boolean);
-  if (normalized.length === 0) return filesystems;
-
-  return filesystems.filter((fs) => {
-    const mount = fs.mount.toLowerCase();
-    const type = fs.type.toLowerCase();
-    return !normalized.some(
-      (entry) => mount === entry || (type && type.includes(entry)),
-    );
-  });
-}
-
-export function mergeMonitoredFilesystems(
-  filesystems: DiskFilesystem[],
-  monitored: MonitoredMount[],
-  customFilesystems: Array<DiskFilesystem | null>,
-): DiskFilesystem[] {
-  const result = [...filesystems];
-  monitored.forEach((entry, index) => {
-    const path = entry.path.trim();
-    const custom = customFilesystems[index];
-    if (!path || !custom) return;
-
-    const existing = result.find((fs) => fs.mount === path);
-    if (existing) {
-      existing.label = entry.label?.trim() || undefined;
-      return;
-    }
-    result.push({
-      ...custom,
-      mount: path,
-      label: entry.label?.trim() || undefined,
-    });
-  });
-  return result;
-}
-
-function humanizeBytes(bytes: number): string {
-  const units = ["B", "K", "M", "G", "T", "P"];
-  let value = Math.max(0, bytes);
-  let unitIndex = 0;
-  while (value >= 1024 && unitIndex < units.length - 1) {
-    value /= 1024;
-    unitIndex++;
-  }
-  const rounded =
-    unitIndex > 0 && value < 10 ? value.toFixed(1) : Math.round(value);
-  return `${rounded}${units[unitIndex]}`;
-}
-
-// BSD/macOS `df -T` takes a filesystem-type argument to *filter* by, unlike
-// GNU `df -T` which *prints* a type column - so macOS needs its own command
-// (`df -Pk`, no type column) and gets the type separately from `mount`.
-const DARWIN_SKIP_MOUNT_RE =
-  /^\/System\/Volumes\/(VM|Preboot|Update|xarts|iSCPreboot|Hardware)(\/|$)/;
-const DARWIN_SKIP_TYPE_RE = /^(devfs|autofs)$/;
-
-export function parseDarwinMountTypes(output: string): Map<string, string> {
-  const map = new Map<string, string>();
-  for (const line of output.split("\n")) {
-    // Device names can contain spaces (e.g. autofs's "map auto_home"), so
-    // match the literal " on " / " (" separators rather than a single token.
-    const match = line.match(/^.+? on (.+?) \(([^,)]+)/);
-    if (match) map.set(match[1], match[2].trim());
-  }
-  return map;
-}
-
-export function parseDarwinDfRows(
-  output: string,
-  typeByMount: Map<string, string>,
-): DiskFilesystem[] {
-  return output
-    .split("\n")
-    .map((l) => l.trim())
-    .filter(Boolean)
-    .map((line) => {
-      const parts = line.split(/\s+/);
-      if (parts.length < 6) return null;
-
-      const filesystem = parts[0];
-      const totalKb = Number(parts[1]);
-      const usedKb = Number(parts[2]);
-      const availableKb = Number(parts[3]);
-      const mount = parts.slice(5).join(" ");
-      if (!Number.isFinite(totalKb) || totalKb <= 0) return null;
-      if (DARWIN_SKIP_MOUNT_RE.test(mount)) return null;
-
-      const type = typeByMount.get(mount) || "";
-      if (DARWIN_SKIP_TYPE_RE.test(type)) return null;
-
-      const totalBytes = totalKb * 1024;
-      const usedBytes = Number.isFinite(usedKb) ? usedKb * 1024 : null;
-      const availableBytes = Number.isFinite(availableKb)
-        ? availableKb * 1024
-        : null;
-      const percent =
-        usedBytes !== null
-          ? Math.max(0, Math.min(100, (usedBytes / totalBytes) * 100))
-          : null;
-
-      return {
-        filesystem,
-        type,
-        mount,
-        percent: toFixedNum(percent, 0),
-        usedHuman: usedBytes !== null ? humanizeBytes(usedBytes) : null,
-        totalHuman: humanizeBytes(totalBytes),
-        availableHuman:
-          availableBytes !== null ? humanizeBytes(availableBytes) : null,
-        usedBytes,
-        totalBytes,
-        availableBytes,
-      };
-    })
-    .filter((fs): fs is DiskFilesystem => fs !== null);
-}
-
-async function collectDarwinDiskMetrics(
-  client: Client,
-  excludedMounts?: string[] | null,
-  monitoredMounts?: MonitoredMount[] | null,
-): Promise<{
-  percent: number | null;
-  usedHuman: string | null;
-  totalHuman: string | null;
-  availableHuman: string | null;
-  mount: string | null;
-  filesystems: DiskFilesystem[];
-}> {
-  try {
-    const [dfOut, mountOut] = await Promise.all([
-      execCommand(client, "df -Pk | tail -n +2"),
-      execCommand(client, "mount"),
-    ]);
-
-    const typeByMount = parseDarwinMountTypes(mountOut.stdout);
-    let detected = parseDarwinDfRows(dfOut.stdout, typeByMount);
-
-    const monitored = (monitoredMounts ?? []).filter((entry) =>
-      Boolean(entry.path.trim()),
-    );
-    if (monitored.length > 0) {
-      const customFilesystems = await Promise.all(
-        monitored.map(async (entry) => {
-          const path = shellQuote(entry.path.trim());
-          try {
-            const custom = await execCommand(
-              client,
-              `df -Pk -- ${path} | tail -n +2`,
-            );
-            return parseDarwinDfRows(custom.stdout, typeByMount)[0] ?? null;
-          } catch {
-            return null;
-          }
-        }),
-      );
-      detected = mergeMonitoredFilesystems(
-        detected,
-        monitored,
-        customFilesystems,
-      );
-    }
-
-    const filesystems = filterExcludedFilesystems(detected, excludedMounts);
-    const primary = selectPrimaryFilesystem(filesystems);
-
-    return {
-      percent: primary?.percent ?? null,
-      usedHuman: primary?.usedHuman ?? null,
-      totalHuman: primary?.totalHuman ?? null,
-      availableHuman: primary?.availableHuman ?? null,
-      mount: primary?.mount ?? null,
-      filesystems,
-    };
-  } catch {
-    return {
-      percent: null,
-      usedHuman: null,
-      totalHuman: null,
-      availableHuman: null,
-      mount: null,
-      filesystems: [],
-    };
-  }
-}
-
-interface WindowsDiskRow {
-  drive: string;
-  total: number;
-  free: number;
-}
-
-const WINDOWS_DISK_SCRIPT =
-  'Get-CimInstance Win32_LogicalDisk -Filter "DriveType=3" | ForEach-Object {' +
-  " [PSCustomObject]@{drive=$_.DeviceID; total=$_.Size; free=$_.FreeSpace}" +
-  " } | ConvertTo-Json -Compress";
-
-export function parseWindowsDiskJson(output: string): WindowsDiskRow[] {
-  const trimmed = output.trim();
-  if (!trimmed) return [];
-  try {
-    const parsed = JSON.parse(trimmed);
-    const rows = Array.isArray(parsed) ? parsed : [parsed];
-    return rows
-      .filter((row): row is Record<string, unknown> => Boolean(row?.drive))
-      .map((row) => ({
-        drive: String(row.drive),
-        total: Number(row.total),
-        free: Number(row.free),
-      }))
-      .filter((row) => Number.isFinite(row.total) && row.total > 0);
-  } catch {
-    return [];
-  }
-}
-
-async function collectWindowsDiskMetrics(
-  client: Client,
-  excludedMounts?: string[] | null,
-): Promise<{
-  percent: number | null;
-  usedHuman: string | null;
-  totalHuman: string | null;
-  availableHuman: string | null;
-  mount: string | null;
-  filesystems: DiskFilesystem[];
-}> {
-  try {
-    const { stdout } = await execPowerShell(client, WINDOWS_DISK_SCRIPT);
-    const rows = parseWindowsDiskJson(stdout);
-
-    const filesystems: DiskFilesystem[] = rows.map((row) => {
-      const usedBytes = row.total - row.free;
-      const percent = Math.max(0, Math.min(100, (usedBytes / row.total) * 100));
-      return {
-        filesystem: row.drive,
-        type: "NTFS",
-        mount: row.drive,
-        percent: toFixedNum(percent, 0),
-        usedHuman: humanizeBytes(usedBytes),
-        totalHuman: humanizeBytes(row.total),
-        availableHuman: humanizeBytes(row.free),
-        usedBytes,
-        totalBytes: row.total,
-        availableBytes: row.free,
-      };
-    });
-
-    const filtered = filterExcludedFilesystems(filesystems, excludedMounts);
-    const primary =
-      filtered.find((fs) => fs.mount.toUpperCase().startsWith("C")) ??
-      filtered[0] ??
-      null;
-
-    return {
-      percent: primary?.percent ?? null,
-      usedHuman: primary?.usedHuman ?? null,
-      totalHuman: primary?.totalHuman ?? null,
-      availableHuman: primary?.availableHuman ?? null,
-      mount: primary?.mount ?? null,
-      filesystems: filtered,
-    };
-  } catch {
-    return {
-      percent: null,
-      usedHuman: null,
-      totalHuman: null,
-      availableHuman: null,
-      mount: null,
-      filesystems: [],
-    };
-  }
-}
-
-export async function collectDiskMetrics(
-  client: Client,
-  excludedMounts?: string[] | null,
-  monitoredMounts?: MonitoredMount[] | null,
-  platform?: HostPlatform,
-): Promise<{
-  percent: number | null;
-  usedHuman: string | null;
-  totalHuman: string | null;
-  availableHuman: string | null;
-  mount: string | null;
-  filesystems: DiskFilesystem[];
-}> {
-  if (platform === "windows") {
-    return collectWindowsDiskMetrics(client, excludedMounts);
-  }
-  if (platform === "darwin") {
-    return collectDarwinDiskMetrics(client, excludedMounts, monitoredMounts);
-  }
-
-  try {
-    const [diskOutHuman, diskOutBytes] = await Promise.all([
-      execCommand(client, "df -hT -P | tail -n +2"),
-      execCommand(client, "df -TkP | tail -n +2"),
-    ]);
-
-    const humanRows = parseDfLines(diskOutHuman.stdout);
-    const bytesRows = parseDfLines(diskOutBytes.stdout);
-    let detected = buildFilesystemList(bytesRows, humanRows, 1024);
-    const monitored = (monitoredMounts ?? []).filter((entry) =>
-      Boolean(entry.path.trim()),
-    );
-    if (monitored.length > 0) {
-      const customFilesystems = await Promise.all(
-        monitored.map(async (entry) => {
-          const path = shellQuote(entry.path.trim());
-          try {
-            const [customHuman, customBytes] = await Promise.all([
-              execCommand(client, `df -hT -P -- ${path} | tail -n +2`),
-              execCommand(client, `df -TkP -- ${path} | tail -n +2`),
-            ]);
-            return (
-              buildFilesystemList(
-                parseDfLines(customBytes.stdout),
-                parseDfLines(customHuman.stdout),
-                1024,
-              )[0] ?? null
-            );
-          } catch {
-            return null;
-          }
-        }),
-      );
-      detected = mergeMonitoredFilesystems(
-        detected,
-        monitored,
-        customFilesystems,
-      );
-    }
-    const filesystems = filterExcludedFilesystems(detected, excludedMounts);
-    const primary = selectPrimaryFilesystem(filesystems);
-
-    return {
-      percent: primary?.percent ?? null,
-      usedHuman: primary?.usedHuman ?? null,
-      totalHuman: primary?.totalHuman ?? null,
-      availableHuman: primary?.availableHuman ?? null,
-      mount: primary?.mount ?? null,
-      filesystems,
-    };
-  } catch {
-    return {
-      percent: null,
-      usedHuman: null,
-      totalHuman: null,
-      availableHuman: null,
-      mount: null,
-      filesystems: [],
-    };
-  }
-}
diff --git a/plugins/host-metrics/src/backend/widgets/firewall-collector.ts b/plugins/host-metrics/src/backend/widgets/firewall-collector.ts
deleted file mode 100644
index 7c5ebb14d..000000000
--- a/plugins/host-metrics/src/backend/widgets/firewall-collector.ts
+++ /dev/null
@@ -1,254 +0,0 @@
-import { execCommand } from "@termix/plugin-sdk/host-commands";
-import type { Client } from "ssh2";
-import type {
-  FirewallMetrics,
-  FirewallChain,
-  FirewallRule,
-} from "../../shared/stats-widgets.js";
-
-function parseIptablesRule(line: string): FirewallRule | null {
-  if (!line.startsWith("-A ")) return null;
-
-  const rule: FirewallRule = {
-    chain: "",
-    target: "",
-    protocol: "all",
-    source: "0.0.0.0/0",
-    destination: "0.0.0.0/0",
-  };
-
-  const chainMatch = line.match(/^-A\s+(\S+)/);
-  if (chainMatch) {
-    rule.chain = chainMatch[1];
-  }
-
-  const targetMatch = line.match(/-j\s+(\S+)/);
-  if (targetMatch) {
-    rule.target = targetMatch[1];
-  }
-
-  const protocolMatch = line.match(/-p\s+(\S+)/);
-  if (protocolMatch) {
-    rule.protocol = protocolMatch[1];
-  }
-
-  const sourceMatch = line.match(/-s\s+(\S+)/);
-  if (sourceMatch) {
-    rule.source = sourceMatch[1];
-  }
-
-  const destMatch = line.match(/-d\s+(\S+)/);
-  if (destMatch) {
-    rule.destination = destMatch[1];
-  }
-
-  const dportMatch = line.match(/--dport\s+(\S+)/);
-  if (dportMatch) {
-    rule.dport = dportMatch[1];
-  }
-
-  const sportMatch = line.match(/--sport\s+(\S+)/);
-  if (sportMatch) {
-    rule.sport = sportMatch[1];
-  }
-
-  const stateMatch = line.match(/--state\s+(\S+)/);
-  if (stateMatch) {
-    rule.state = stateMatch[1];
-  }
-
-  const interfaceMatch = line.match(/-i\s+(\S+)/);
-  if (interfaceMatch) {
-    rule.interface = interfaceMatch[1];
-  }
-
-  return rule;
-}
-
-function parseIptablesOutput(output: string): FirewallChain[] {
-  const chains: Map<string, FirewallChain> = new Map();
-  const lines = output.split("\n");
-
-  for (const line of lines) {
-    const trimmed = line.trim();
-
-    const policyMatch = trimmed.match(/^:(\S+)\s+(\S+)/);
-    if (policyMatch) {
-      const [, chainName, policy] = policyMatch;
-      chains.set(chainName, {
-        name: chainName,
-        policy: policy,
-        rules: [],
-      });
-      continue;
-    }
-
-    const rule = parseIptablesRule(trimmed);
-    if (rule) {
-      let chain = chains.get(rule.chain);
-      if (!chain) {
-        chain = {
-          name: rule.chain,
-          policy: "ACCEPT",
-          rules: [],
-        };
-        chains.set(rule.chain, chain);
-      }
-      chain.rules.push(rule);
-    }
-  }
-
-  return Array.from(chains.values());
-}
-
-function parseNftablesOutput(output: string): FirewallChain[] {
-  const chains: FirewallChain[] = [];
-  let currentChain: FirewallChain | null = null;
-
-  const lines = output.split("\n");
-
-  for (const line of lines) {
-    const trimmed = line.trim();
-
-    const chainMatch = trimmed.match(
-      /chain\s+(\S+)\s*\{?\s*(?:type\s+\S+\s+hook\s+(\S+))?/,
-    );
-    if (chainMatch) {
-      if (currentChain) {
-        chains.push(currentChain);
-      }
-      currentChain = {
-        name: chainMatch[1].toUpperCase(),
-        policy: "ACCEPT",
-        rules: [],
-      };
-      continue;
-    }
-
-    if (currentChain && trimmed.startsWith("policy ")) {
-      const policyMatch = trimmed.match(/policy\s+(\S+)/);
-      if (policyMatch) {
-        currentChain.policy = policyMatch[1].toUpperCase();
-      }
-      continue;
-    }
-
-    if (currentChain && trimmed && !trimmed.startsWith("}")) {
-      const rule: FirewallRule = {
-        chain: currentChain.name,
-        target: "",
-        protocol: "all",
-        source: "0.0.0.0/0",
-        destination: "0.0.0.0/0",
-      };
-
-      if (trimmed.includes("accept")) rule.target = "ACCEPT";
-      else if (trimmed.includes("drop")) rule.target = "DROP";
-      else if (trimmed.includes("reject")) rule.target = "REJECT";
-
-      const tcpMatch = trimmed.match(/tcp\s+dport\s+(\S+)/);
-      if (tcpMatch) {
-        rule.protocol = "tcp";
-        rule.dport = tcpMatch[1];
-      }
-
-      const udpMatch = trimmed.match(/udp\s+dport\s+(\S+)/);
-      if (udpMatch) {
-        rule.protocol = "udp";
-        rule.dport = udpMatch[1];
-      }
-
-      const saddrMatch = trimmed.match(/saddr\s+(\S+)/);
-      if (saddrMatch) {
-        rule.source = saddrMatch[1];
-      }
-
-      const daddrMatch = trimmed.match(/daddr\s+(\S+)/);
-      if (daddrMatch) {
-        rule.destination = daddrMatch[1];
-      }
-
-      const iifMatch = trimmed.match(/iif\s+"?(\S+)"?/);
-      if (iifMatch) {
-        rule.interface = iifMatch[1].replace(/"/g, "");
-      }
-
-      const ctStateMatch = trimmed.match(/ct\s+state\s+(\S+)/);
-      if (ctStateMatch) {
-        rule.state = ctStateMatch[1].toUpperCase();
-      }
-
-      if (rule.target) {
-        currentChain.rules.push(rule);
-      }
-    }
-
-    if (trimmed === "}") {
-      if (currentChain) {
-        chains.push(currentChain);
-        currentChain = null;
-      }
-    }
-  }
-
-  if (currentChain) {
-    chains.push(currentChain);
-  }
-
-  return chains;
-}
-
-export async function collectFirewallMetrics(
-  client: Client,
-): Promise<FirewallMetrics> {
-  try {
-    const iptablesResult = await execCommand(
-      client,
-      "iptables-save 2>/dev/null",
-      15000,
-    );
-
-    if (iptablesResult.stdout && iptablesResult.stdout.includes("*filter")) {
-      const chains = parseIptablesOutput(iptablesResult.stdout);
-      const hasRules = chains.some((c) => c.rules.length > 0);
-
-      return {
-        type: "iptables",
-        status: hasRules ? "active" : "inactive",
-        chains: chains.filter(
-          (c) =>
-            c.name === "INPUT" || c.name === "OUTPUT" || c.name === "FORWARD",
-        ),
-      };
-    }
-
-    const nftResult = await execCommand(
-      client,
-      "nft list ruleset 2>/dev/null",
-      15000,
-    );
-
-    if (nftResult.stdout && nftResult.stdout.trim()) {
-      const chains = parseNftablesOutput(nftResult.stdout);
-      const hasRules = chains.some((c) => c.rules.length > 0);
-
-      return {
-        type: "nftables",
-        status: hasRules ? "active" : "inactive",
-        chains,
-      };
-    }
-
-    return {
-      type: "none",
-      status: "unknown",
-      chains: [],
-    };
-  } catch {
-    return {
-      type: "none",
-      status: "unknown",
-      chains: [],
-    };
-  }
-}
diff --git a/plugins/host-metrics/src/backend/widgets/gpu-collector.ts b/plugins/host-metrics/src/backend/widgets/gpu-collector.ts
deleted file mode 100644
index 14b2a899c..000000000
--- a/plugins/host-metrics/src/backend/widgets/gpu-collector.ts
+++ /dev/null
@@ -1,187 +0,0 @@
-import { execCommand } from "@termix/plugin-sdk/host-commands";
-import { toFixedNum } from "../util.js";
-import type { Client } from "ssh2";
-
-export interface GpuDevice {
-  index: number;
-  uuid: string;
-  name: string;
-  driverVersion: string | null;
-  utilizationPercent: number | null;
-  memoryUsedMiB: number | null;
-  memoryTotalMiB: number | null;
-  memoryPercent: number | null;
-  temperatureCelsius: number | null;
-  powerDrawWatts: number | null;
-  powerLimitWatts: number | null;
-  fanPercent: number | null;
-}
-
-export interface GpuProcess {
-  /** Null when nvidia-smi reports a uuid that matches none of the listed GPUs. */
-  gpuIndex: number | null;
-  pid: number;
-  name: string;
-  memoryUsedMiB: number | null;
-}
-
-export interface GpuMetrics {
-  source: "nvidia-smi" | "none";
-  gpus: GpuDevice[];
-  processes: GpuProcess[];
-}
-
-const SECTION_SEPARATOR = "---";
-
-// The free-text name is queried last so commas inside it cannot shift the
-// numeric columns; the parsers rejoin everything past the fixed fields.
-const GPU_QUERY_FIELDS = [
-  "index",
-  "uuid",
-  "driver_version",
-  "utilization.gpu",
-  "memory.used",
-  "memory.total",
-  "temperature.gpu",
-  "power.draw",
-  "power.limit",
-  "fan.speed",
-  "name",
-];
-const APPS_QUERY_FIELDS = ["gpu_uuid", "pid", "used_memory", "process_name"];
-
-const NVIDIA_SMI_COMMAND = [
-  "command -v nvidia-smi >/dev/null 2>&1 || exit 0;",
-  `nvidia-smi --query-gpu=${GPU_QUERY_FIELDS.join(",")} --format=csv,noheader,nounits 2>/dev/null;`,
-  `echo ${SECTION_SEPARATOR};`,
-  `nvidia-smi --query-compute-apps=${APPS_QUERY_FIELDS.join(",")} --format=csv,noheader,nounits 2>/dev/null`,
-].join(" ");
-
-const NO_GPU: GpuMetrics = { source: "none", gpus: [], processes: [] };
-
-/** Reads a numeric field; nvidia-smi writes "[N/A]", "[Not Supported]" etc. for missing ones. */
-function parseReading(raw: string | undefined, digits = 1): number | null {
-  const value = raw?.trim();
-  if (!value || value.startsWith("[")) return null;
-  return toFixedNum(Number(value), digits);
-}
-
-function parseInteger(raw: string | undefined): number | null {
-  const value = raw?.trim();
-  return value && /^\d+$/.test(value) ? Number(value) : null;
-}
-
-function splitCsvRow(line: string, fixedFields: number): string[] | null {
-  const parts = line.split(",").map((part) => part.trim());
-  if (parts.length <= fixedFields) return null;
-  return [...parts.slice(0, fixedFields), parts.slice(fixedFields).join(", ")];
-}
-
-export function parseNvidiaSmiGpus(output: string): GpuDevice[] {
-  const fixedFields = GPU_QUERY_FIELDS.length - 1;
-  const gpus: GpuDevice[] = [];
-
-  for (const line of output.split("\n")) {
-    const row = splitCsvRow(line, fixedFields);
-    if (!row) continue;
-
-    const [
-      rawIndex,
-      uuid,
-      driverVersion,
-      utilization,
-      memoryUsed,
-      memoryTotal,
-      temperature,
-      powerDraw,
-      powerLimit,
-      fan,
-      name,
-    ] = row;
-    const index = parseInteger(rawIndex);
-    if (index === null || !uuid) continue;
-
-    const memoryUsedMiB = parseReading(memoryUsed, 0);
-    const memoryTotalMiB = parseReading(memoryTotal, 0);
-
-    gpus.push({
-      index,
-      uuid,
-      name,
-      driverVersion:
-        driverVersion && !driverVersion.startsWith("[") ? driverVersion : null,
-      utilizationPercent: parseReading(utilization),
-      memoryUsedMiB,
-      memoryTotalMiB,
-      memoryPercent:
-        memoryUsedMiB !== null &&
-        memoryTotalMiB !== null &&
-        memoryTotalMiB !== 0
-          ? toFixedNum((memoryUsedMiB / memoryTotalMiB) * 100, 1)
-          : null,
-      temperatureCelsius: parseReading(temperature),
-      powerDrawWatts: parseReading(powerDraw),
-      powerLimitWatts: parseReading(powerLimit),
-      fanPercent: parseReading(fan),
-    });
-  }
-
-  return gpus;
-}
-
-export function parseNvidiaSmiProcesses(
-  output: string,
-  gpus: GpuDevice[],
-): GpuProcess[] {
-  const indexByUuid = new Map(gpus.map((gpu) => [gpu.uuid, gpu.index]));
-  const processes: GpuProcess[] = [];
-
-  for (const line of output.split("\n")) {
-    const row = splitCsvRow(line, APPS_QUERY_FIELDS.length - 1);
-    if (!row) continue;
-
-    const [uuid, rawPid, memoryUsed, name] = row;
-    const pid = parseInteger(rawPid);
-    if (pid === null) continue;
-
-    processes.push({
-      gpuIndex: indexByUuid.get(uuid) ?? null,
-      pid,
-      name,
-      memoryUsedMiB: parseReading(memoryUsed, 0),
-    });
-  }
-
-  return processes;
-}
-
-export function parseNvidiaSmiOutput(stdout: string): GpuMetrics {
-  const lines = stdout.split("\n");
-  const separator = lines.findIndex(
-    (line) => line.trim() === SECTION_SEPARATOR,
-  );
-  const gpuSection =
-    separator === -1 ? stdout : lines.slice(0, separator).join("\n");
-  const appsSection =
-    separator === -1 ? "" : lines.slice(separator + 1).join("\n");
-
-  const gpus = parseNvidiaSmiGpus(gpuSection);
-  if (gpus.length === 0) return NO_GPU;
-
-  return {
-    source: "nvidia-smi",
-    gpus,
-    processes: parseNvidiaSmiProcesses(appsSection, gpus),
-  };
-}
-
-export async function collectGpuMetrics(client: Client): Promise<GpuMetrics> {
-  try {
-    // nvidia-smi can take a few seconds on hosts without persistence mode.
-    const result = await execCommand(client, NVIDIA_SMI_COMMAND, 15000);
-    return parseNvidiaSmiOutput(result.stdout);
-  } catch {
-    // expected when the host has no NVIDIA driver or the query times out
-    return NO_GPU;
-  }
-}
diff --git a/plugins/host-metrics/src/backend/widgets/login-stats-collector.ts b/plugins/host-metrics/src/backend/widgets/login-stats-collector.ts
deleted file mode 100644
index 7850f9421..000000000
--- a/plugins/host-metrics/src/backend/widgets/login-stats-collector.ts
+++ /dev/null
@@ -1,149 +0,0 @@
-import { execCommand } from "@termix/plugin-sdk/host-commands";
-import type { Client } from "ssh2";
-
-export interface LoginRecord {
-  user: string;
-  ip: string;
-  time: string;
-  status: "success" | "failed";
-}
-
-export interface LoginStats {
-  recentLogins: LoginRecord[];
-  failedLogins: LoginRecord[];
-  totalLogins: number;
-  uniqueIPs: number;
-}
-
-export async function collectLoginStats(client: Client): Promise<LoginStats> {
-  const recentLogins: LoginRecord[] = [];
-  const failedLogins: LoginRecord[] = [];
-  const ipSet = new Set<string>();
-
-  try {
-    const lastOut = await execCommand(
-      client,
-      "last -n 20 -F -w | grep -v 'reboot' | grep -v 'wtmp' | head -20",
-    );
-
-    const lastLines = lastOut.stdout
-      .split("\n")
-      .map((l) => l.trim())
-      .filter(Boolean);
-
-    for (const line of lastLines) {
-      const parts = line.split(/\s+/);
-      if (parts.length >= 10) {
-        const user = parts[0];
-        const tty = parts[1];
-        const ip =
-          parts[2] === ":" || parts[2].startsWith(":") ? "local" : parts[2];
-
-        const timeStart = parts.indexOf(
-          parts.find((p) => /^(Mon|Tue|Wed|Thu|Fri|Sat|Sun)/.test(p)) || "",
-        );
-        if (timeStart > 0 && parts.length > timeStart + 4) {
-          const timeStr = parts.slice(timeStart, timeStart + 5).join(" ");
-
-          if (user && user !== "wtmp" && tty !== "system") {
-            let parsedTime: string;
-            try {
-              const date = new Date(timeStr);
-              parsedTime = isNaN(date.getTime())
-                ? timeStr || "unknown"
-                : date.toISOString();
-            } catch {
-              parsedTime = timeStr || "unknown";
-            }
-
-            recentLogins.push({
-              user,
-              ip,
-              time: parsedTime,
-              status: "success",
-            });
-            if (ip !== "local") {
-              ipSet.add(ip);
-            }
-          }
-        }
-      }
-    }
-  } catch {
-    // expected
-  }
-
-  try {
-    const failedOut = await execCommand(
-      client,
-      "grep 'Failed password' /var/log/auth.log 2>/dev/null | tail -10 || grep 'authentication failure' /var/log/secure 2>/dev/null | tail -10 || echo ''",
-    );
-
-    const failedLines = failedOut.stdout
-      .split("\n")
-      .map((l) => l.trim())
-      .filter(Boolean);
-
-    for (const line of failedLines) {
-      let user = "unknown";
-      let ip = "unknown";
-      let timeStr = "";
-
-      const userMatch = line.match(/for (?:invalid user )?(\S+)/);
-      if (userMatch) {
-        user = userMatch[1];
-      }
-
-      const ipMatch = line.match(/from (\d+\.\d+\.\d+\.\d+)/);
-      if (ipMatch) {
-        ip = ipMatch[1];
-      }
-
-      const dateMatch = line.match(/^(\w+)\s+(\d+)\s+(\d+:\d+:\d+)/);
-      if (dateMatch) {
-        const [, month, day, time] = dateMatch;
-        const now = new Date();
-        const currentYear = now.getFullYear();
-        const candidate = new Date(`${month} ${day}, ${currentYear} ${time}`);
-        if (!isNaN(candidate.getTime()) && candidate > now) {
-          // If parsed date is in the future, it's from last year
-          timeStr = `${month} ${day}, ${currentYear - 1} ${time}`;
-        } else {
-          timeStr = `${month} ${day}, ${currentYear} ${time}`;
-        }
-      }
-
-      if (user && ip) {
-        let parsedTime: string;
-        try {
-          const date = timeStr ? new Date(timeStr) : null;
-          parsedTime =
-            date && !isNaN(date.getTime())
-              ? date.toISOString()
-              : timeStr || "unknown";
-        } catch {
-          parsedTime = timeStr || "unknown";
-        }
-
-        failedLogins.push({
-          user,
-          ip,
-          time: parsedTime,
-          status: "failed",
-        });
-        if (ip !== "unknown") {
-          ipSet.add(ip);
-        }
-      }
-    }
-  } catch {
-    // expected
-  }
-
-  return {
-    recentLogins: recentLogins.slice(0, 10),
-    failedLogins: failedLogins.slice(0, 10),
-    totalLogins: recentLogins.length,
-    uniqueIPs: ipSet.size,
-  };
-}
diff --git a/plugins/host-metrics/src/backend/widgets/memory-collector.ts b/plugins/host-metrics/src/backend/widgets/memory-collector.ts
deleted file mode 100644
index 59fb96da3..000000000
--- a/plugins/host-metrics/src/backend/widgets/memory-collector.ts
+++ /dev/null
@@ -1,150 +0,0 @@
-import {
-  execCommand,
-  execPowerShell,
-  type HostPlatform,
-} from "@termix/plugin-sdk/host-commands";
-import { toFixedNum, kibToGiB } from "../util.js";
-import type { Client } from "ssh2";
-
-async function collectDarwinMemoryMetrics(client: Client): Promise<{
-  percent: number | null;
-  usedGiB: number | null;
-  totalGiB: number | null;
-}> {
-  let memPercent: number | null = null;
-  let usedGiB: number | null = null;
-  let totalGiB: number | null = null;
-
-  try {
-    const [vmStatOut, memSizeOut] = await Promise.all([
-      execCommand(client, "vm_stat"),
-      execCommand(client, "sysctl -n hw.memsize"),
-    ]);
-
-    const totalBytes = Number((memSizeOut.stdout || "").trim());
-    const pageSizeMatch = vmStatOut.stdout.match(/page size of (\d+) bytes/);
-    const pageSize = pageSizeMatch ? Number(pageSizeMatch[1]) : 4096;
-
-    const getPages = (key: string): number | null => {
-      const line = vmStatOut.stdout
-        .split("\n")
-        .find((l) => l.trim().startsWith(key));
-      if (!line) return null;
-      const m = line.match(/(\d+)\./);
-      return m ? Number(m[1]) : null;
-    };
-
-    const active = getPages("Pages active");
-    const wired = getPages("Pages wired down");
-    const compressed = getPages("Pages occupied by compressor");
-
-    if (
-      Number.isFinite(totalBytes) &&
-      totalBytes > 0 &&
-      active !== null &&
-      wired !== null
-    ) {
-      const usedPages = active + wired + (compressed ?? 0);
-      const usedBytes = usedPages * pageSize;
-      memPercent = Math.max(0, Math.min(100, (usedBytes / totalBytes) * 100));
-      usedGiB = kibToGiB(usedBytes / 1024);
-      totalGiB = kibToGiB(totalBytes / 1024);
-    }
-  } catch {
-    memPercent = null;
-    usedGiB = null;
-    totalGiB = null;
-  }
-
-  return {
-    percent: toFixedNum(memPercent, 0),
-    usedGiB: usedGiB ? toFixedNum(usedGiB, 2) : null,
-    totalGiB: totalGiB ? toFixedNum(totalGiB, 2) : null,
-  };
-}
-
-// Win32_OperatingSystem reports TotalVisibleMemorySize/FreePhysicalMemory in KB.
-async function collectWindowsMemoryMetrics(client: Client): Promise<{
-  percent: number | null;
-  usedGiB: number | null;
-  totalGiB: number | null;
-}> {
-  let memPercent: number | null = null;
-  let usedGiB: number | null = null;
-  let totalGiB: number | null = null;
-
-  try {
-    const { stdout } = await execPowerShell(
-      client,
-      "$os=Get-CimInstance Win32_OperatingSystem; [PSCustomObject]@{total=$os.TotalVisibleMemorySize; free=$os.FreePhysicalMemory} | ConvertTo-Json -Compress",
-    );
-    const parsed = JSON.parse(stdout.trim());
-    const totalKb = Number(parsed?.total);
-    const freeKb = Number(parsed?.free);
-    if (Number.isFinite(totalKb) && Number.isFinite(freeKb) && totalKb > 0) {
-      const usedKb = totalKb - freeKb;
-      memPercent = Math.max(0, Math.min(100, (usedKb / totalKb) * 100));
-      usedGiB = kibToGiB(usedKb);
-      totalGiB = kibToGiB(totalKb);
-    }
-  } catch {
-    memPercent = null;
-    usedGiB = null;
-    totalGiB = null;
-  }
-
-  return {
-    percent: toFixedNum(memPercent, 0),
-    usedGiB: usedGiB ? toFixedNum(usedGiB, 2) : null,
-    totalGiB: totalGiB ? toFixedNum(totalGiB, 2) : null,
-  };
-}
-
-export async function collectMemoryMetrics(
-  client: Client,
-  platform?: HostPlatform,
-): Promise<{
-  percent: number | null;
-  usedGiB: number | null;
-  totalGiB: number | null;
-}> {
-  if (platform === "darwin") {
-    return collectDarwinMemoryMetrics(client);
-  }
-  if (platform === "windows") {
-    return collectWindowsMemoryMetrics(client);
-  }
-
-  let memPercent: number | null = null;
-  let usedGiB: number | null = null;
-  let totalGiB: number | null = null;
-
-  try {
-    const memInfo = await execCommand(client, "cat /proc/meminfo");
-    const lines = memInfo.stdout.split("\n");
-    const getVal = (key: string) => {
-      const line = lines.find((l) => l.startsWith(key));
-      if (!line) return null;
-      const m = line.match(/\d+/);
-      return m ? Number(m[0]) : null;
-    };
-    const totalKb = getVal("MemTotal:");
-    const availKb = getVal("MemAvailable:");
-    if (totalKb && availKb && totalKb > 0) {
-      const usedKb = totalKb - availKb;
-      memPercent = Math.max(0, Math.min(100, (usedKb / totalKb) * 100));
-      usedGiB = kibToGiB(usedKb);
-      totalGiB = kibToGiB(totalKb);
-    }
-  } catch {
-    memPercent = null;
-    usedGiB = null;
-    totalGiB = null;
-  }
-
-  return {
-    percent: toFixedNum(memPercent, 0),
-    usedGiB: usedGiB ? toFixedNum(usedGiB, 2) : null,
-    totalGiB: totalGiB ? toFixedNum(totalGiB, 2) : null,
-  };
-}
diff --git a/plugins/host-metrics/src/backend/widgets/network-collector.ts b/plugins/host-metrics/src/backend/widgets/network-collector.ts
deleted file mode 100644
index f9d89b3f3..000000000
--- a/plugins/host-metrics/src/backend/widgets/network-collector.ts
+++ /dev/null
@@ -1,416 +0,0 @@
-import {
-  execCommand,
-  execPowerShell,
-  type HostPlatform,
-} from "@termix/plugin-sdk/host-commands";
-import type { Client } from "ssh2";
-
-export interface NetworkCounters {
-  rx: string;
-  tx: string;
-}
-
-export function parseNetworkCounters(
-  output: string,
-): Map<string, NetworkCounters> {
-  const counters = new Map<string, NetworkCounters>();
-  for (const line of output.split("\n").slice(2)) {
-    const parts = line.trim().split(/\s+/);
-    if (parts.length >= 10) {
-      counters.set(parts[0].replace(":", ""), {
-        rx: parts[1],
-        tx: parts[9],
-      });
-    }
-  }
-  return counters;
-}
-
-export function counterRate(
-  before: string | undefined,
-  after: string | undefined,
-  elapsedSeconds: number,
-): number | null {
-  const first = Number(before);
-  const second = Number(after);
-  if (
-    !Number.isFinite(first) ||
-    !Number.isFinite(second) ||
-    second < first ||
-    elapsedSeconds <= 0
-  ) {
-    return null;
-  }
-  return Math.round((second - first) / elapsedSeconds);
-}
-
-/**
- * Rate is derived from the previous poll's counters rather than a same-poll
- * double-sample, so a poll no longer has to block for a fixed settle window.
- * Keyed by host, since counters from one host are meaningless against another.
- */
-export interface NetworkSamples {
-  counters: Map<
-    number,
-    { counters: Map<string, NetworkCounters>; timestamp: number }
-  >;
-  windows: Map<number, { rows: WindowsAdapterRow[]; timestamp: number }>;
-}
-
-export function createNetworkSamples(): NetworkSamples {
-  return { counters: new Map(), windows: new Map() };
-}
-
-export function parseDarwinIfconfig(
-  output: string,
-): Map<string, { ip: string; state: string }> {
-  const map = new Map<string, { ip: string; state: string }>();
-  let current: string | null = null;
-  for (const rawLine of output.split("\n")) {
-    const ifaceMatch = rawLine.match(/^(\S+):\s*flags=\d+<([^>]*)>/);
-    if (ifaceMatch) {
-      current = ifaceMatch[1] === "lo0" ? null : ifaceMatch[1];
-      if (current) {
-        const state = ifaceMatch[2].includes("UP") ? "UP" : "DOWN";
-        map.set(current, { ip: "", state });
-      }
-      continue;
-    }
-    if (!current) continue;
-    const inetMatch = rawLine.match(/^\s+inet\s+(\d+\.\d+\.\d+\.\d+)/);
-    if (inetMatch) {
-      const existing = map.get(current);
-      if (existing && !existing.ip) existing.ip = inetMatch[1];
-    }
-  }
-  return map;
-}
-
-export function parseDarwinNetstat(
-  output: string,
-): Map<string, NetworkCounters> {
-  const counters = new Map<string, NetworkCounters>();
-  for (const line of output.split("\n").slice(1)) {
-    const parts = line.trim().split(/\s+/);
-    if (parts.length < 10) continue;
-    const name = parts[0];
-    if (name === "lo0" || !parts[2]?.startsWith("<Link")) continue;
-    if (!counters.has(name)) {
-      counters.set(name, { rx: parts[6], tx: parts[9] });
-    }
-  }
-  return counters;
-}
-
-async function collectDarwinNetworkMetrics(
-  client: Client,
-  hostId: number | undefined,
-  samples: NetworkSamples,
-): Promise<{
-  interfaces: Array<{
-    name: string;
-    ip: string;
-    state: string;
-    rxBytes: string | null;
-    txBytes: string | null;
-    rxRateBps: number | null;
-    txRateBps: number | null;
-  }>;
-}> {
-  const interfaces: Array<{
-    name: string;
-    ip: string;
-    state: string;
-    rxBytes: string | null;
-    txBytes: string | null;
-    rxRateBps: number | null;
-    txRateBps: number | null;
-  }> = [];
-
-  try {
-    const ifconfigOut = await execCommand(client, "ifconfig -a 2>/dev/null");
-    const ifMap = parseDarwinIfconfig(ifconfigOut.stdout);
-
-    try {
-      const readAt = Date.now();
-      const netstatOut = await execCommand(client, "netstat -ib 2>/dev/null");
-      const current = parseDarwinNetstat(netstatOut.stdout);
-      const previous =
-        hostId !== undefined ? samples.counters.get(hostId) : undefined;
-      const elapsedSeconds = previous
-        ? (readAt - previous.timestamp) / 1000
-        : 0;
-      if (ifMap.size === 0) {
-        for (const name of current.keys()) {
-          ifMap.set(name, { ip: "", state: "UNKNOWN" });
-        }
-      }
-      for (const [name, data] of ifMap.entries()) {
-        const c = current.get(name);
-        const p = previous?.counters.get(name);
-        interfaces.push({
-          name,
-          ip: data.ip,
-          state: data.state,
-          rxBytes: c?.rx ?? null,
-          txBytes: c?.tx ?? null,
-          rxRateBps: p ? counterRate(p.rx, c?.rx, elapsedSeconds) : null,
-          txRateBps: p ? counterRate(p.tx, c?.tx, elapsedSeconds) : null,
-        });
-      }
-      if (hostId !== undefined) {
-        samples.counters.set(hostId, { counters: current, timestamp: readAt });
-      }
-    } catch {
-      for (const [name, data] of ifMap.entries()) {
-        interfaces.push({
-          name,
-          ip: data.ip,
-          state: data.state,
-          rxBytes: null,
-          txBytes: null,
-          rxRateBps: null,
-          txRateBps: null,
-        });
-      }
-    }
-  } catch {
-    // expected
-  }
-
-  return { interfaces };
-}
-
-interface WindowsAdapterRow {
-  name: string;
-  ip: string;
-  state: string;
-  rx: string;
-  tx: string;
-}
-
-const WINDOWS_ADAPTER_SCRIPT =
-  "Get-NetAdapter | Where-Object {$_.Status -eq 'Up'} | ForEach-Object {" +
-  " $stats = Get-NetAdapterStatistics -Name $_.Name -ErrorAction SilentlyContinue;" +
-  " $addr = (Get-NetIPAddress -InterfaceIndex $_.ifIndex -AddressFamily IPv4 -ErrorAction SilentlyContinue | Select-Object -First 1).IPAddress;" +
-  " [PSCustomObject]@{name=$_.Name; ip=$addr; state='UP'; rx=$stats.ReceivedBytes; tx=$stats.SentBytes}" +
-  " } | ConvertTo-Json -Compress";
-
-export function parseWindowsAdapterJson(output: string): WindowsAdapterRow[] {
-  const trimmed = output.trim();
-  if (!trimmed) return [];
-  try {
-    const parsed = JSON.parse(trimmed);
-    const rows = Array.isArray(parsed) ? parsed : [parsed];
-    return rows
-      .filter((row): row is Record<string, unknown> => Boolean(row?.name))
-      .map((row) => ({
-        name: String(row.name),
-        ip: row.ip ? String(row.ip) : "",
-        state: String(row.state ?? "UNKNOWN"),
-        rx: String(row.rx ?? ""),
-        tx: String(row.tx ?? ""),
-      }));
-  } catch {
-    return [];
-  }
-}
-
-async function collectWindowsNetworkMetrics(
-  client: Client,
-  hostId: number | undefined,
-  samples: NetworkSamples,
-): Promise<{
-  interfaces: Array<{
-    name: string;
-    ip: string;
-    state: string;
-    rxBytes: string | null;
-    txBytes: string | null;
-    rxRateBps: number | null;
-    txRateBps: number | null;
-  }>;
-}> {
-  const interfaces: Array<{
-    name: string;
-    ip: string;
-    state: string;
-    rxBytes: string | null;
-    txBytes: string | null;
-    rxRateBps: number | null;
-    txRateBps: number | null;
-  }> = [];
-
-  try {
-    const readAt = Date.now();
-    const result = await execPowerShell(client, WINDOWS_ADAPTER_SCRIPT);
-    const currentRows = parseWindowsAdapterJson(result.stdout);
-    const previous =
-      hostId !== undefined ? samples.windows.get(hostId) : undefined;
-    const elapsedSeconds = previous ? (readAt - previous.timestamp) / 1000 : 0;
-    const previousMap = new Map(
-      (previous?.rows ?? []).map((row) => [row.name, row]),
-    );
-
-    for (const row of currentRows) {
-      const previousRow = previousMap.get(row.name);
-      interfaces.push({
-        name: row.name,
-        ip: row.ip,
-        state: row.state,
-        rxBytes: row.rx || null,
-        txBytes: row.tx || null,
-        rxRateBps: previousRow
-          ? counterRate(previousRow.rx, row.rx, elapsedSeconds)
-          : null,
-        txRateBps: previousRow
-          ? counterRate(previousRow.tx, row.tx, elapsedSeconds)
-          : null,
-      });
-    }
-
-    if (hostId !== undefined) {
-      samples.windows.set(hostId, {
-        rows: currentRows,
-        timestamp: readAt,
-      });
-    }
-  } catch {
-    // expected
-  }
-
-  return { interfaces };
-}
-
-export async function collectNetworkMetrics(
-  client: Client,
-  platform?: HostPlatform,
-  hostId?: number,
-  samples: NetworkSamples = createNetworkSamples(),
-): Promise<{
-  interfaces: Array<{
-    name: string;
-    ip: string;
-    state: string;
-    rxBytes: string | null;
-    txBytes: string | null;
-    rxRateBps: number | null;
-    txRateBps: number | null;
-  }>;
-}> {
-  if (platform === "darwin") {
-    return collectDarwinNetworkMetrics(client, hostId, samples);
-  }
-  if (platform === "windows") {
-    return collectWindowsNetworkMetrics(client, hostId, samples);
-  }
-
-  const interfaces: Array<{
-    name: string;
-    ip: string;
-    state: string;
-    rxBytes: string | null;
-    txBytes: string | null;
-    rxRateBps: number | null;
-    txRateBps: number | null;
-  }> = [];
-
-  try {
-    const ifconfigOut = await execCommand(
-      client,
-      "ip -o addr show 2>/dev/null | awk '{print $2,$4}' | grep -v '^lo' || true",
-    );
-    const netStatOut = await execCommand(
-      client,
-      "ip -o link show 2>/dev/null | awk '{gsub(/:/, \"\", $2); print $2,$9}' || true",
-    );
-
-    const addrs = ifconfigOut.stdout
-      .split("\n")
-      .map((l) => l.trim())
-      .filter(Boolean);
-    const states = netStatOut.stdout
-      .split("\n")
-      .map((l) => l.trim())
-      .filter(Boolean);
-
-    const ifMap = new Map<string, { ip: string; state: string }>();
-    for (const line of addrs) {
-      const parts = line.split(/\s+/);
-      if (parts.length >= 2) {
-        const name = parts[0];
-        const ip = parts[1].split("/")[0];
-        if (!ifMap.has(name)) ifMap.set(name, { ip, state: "UNKNOWN" });
-      }
-    }
-    for (const line of states) {
-      const parts = line.split(/\s+/);
-      if (parts.length >= 2) {
-        const name = parts[0];
-        if (name === "lo") continue;
-        const state = parts[1];
-        const existing = ifMap.get(name);
-        if (existing) {
-          existing.state = state;
-        } else {
-          ifMap.set(name, { ip: "", state });
-        }
-      }
-    }
-
-    try {
-      const readAt = Date.now();
-      const procNet = await execCommand(client, "cat /proc/net/dev");
-      const rxTxMap = parseNetworkCounters(procNet.stdout);
-      const previous =
-        hostId !== undefined ? samples.counters.get(hostId) : undefined;
-      const elapsedSeconds = previous
-        ? (readAt - previous.timestamp) / 1000
-        : 0;
-      if (ifMap.size === 0) {
-        for (const name of rxTxMap.keys()) {
-          if (name !== "lo") ifMap.set(name, { ip: "", state: "UNKNOWN" });
-        }
-      }
-      for (const [name, data] of ifMap.entries()) {
-        const rxTx = rxTxMap.get(name);
-        const previousCounters = previous?.counters.get(name);
-        interfaces.push({
-          name,
-          ip: data.ip,
-          state: data.state,
-          rxBytes: rxTx?.rx ?? null,
-          txBytes: rxTx?.tx ?? null,
-          rxRateBps: previousCounters
-            ? counterRate(previousCounters.rx, rxTx?.rx, elapsedSeconds)
-            : null,
-          txRateBps: previousCounters
-            ? counterRate(previousCounters.tx, rxTx?.tx, elapsedSeconds)
-            : null,
-        });
-      }
-      if (hostId !== undefined) {
-        samples.counters.set(hostId, {
-          counters: rxTxMap,
-          timestamp: readAt,
-        });
-      }
-    } catch {
-      for (const [name, data] of ifMap.entries()) {
-        interfaces.push({
-          name,
-          ip: data.ip,
-          state: data.state,
-          rxBytes: null,
-          txBytes: null,
-          rxRateBps: null,
-          txRateBps: null,
-        });
-      }
-    }
-  } catch {
-    // expected
-  }
-
-  return { interfaces };
-}
diff --git a/plugins/host-metrics/src/backend/widgets/ports-collector.ts b/plugins/host-metrics/src/backend/widgets/ports-collector.ts
deleted file mode 100644
index c137fa774..000000000
--- a/plugins/host-metrics/src/backend/widgets/ports-collector.ts
+++ /dev/null
@@ -1,154 +0,0 @@
-import { execCommand } from "@termix/plugin-sdk/host-commands";
-import type { Client } from "ssh2";
-import type {
-  PortsMetrics,
-  ListeningPort,
-} from "../../shared/stats-widgets.js";
-
-function parseSsOutput(output: string): ListeningPort[] {
-  const ports: ListeningPort[] = [];
-  const lines = output.split("\n").slice(1);
-
-  for (const line of lines) {
-    const trimmed = line.trim();
-    if (!trimmed) continue;
-
-    const parts = trimmed.split(/\s+/);
-    if (parts.length < 5) continue;
-
-    const protocol = parts[0]?.toLowerCase();
-    if (protocol !== "tcp" && protocol !== "udp") continue;
-
-    const state = parts[1];
-    const localAddr = parts[4];
-
-    if (!localAddr) continue;
-
-    const lastColon = localAddr.lastIndexOf(":");
-    if (lastColon === -1) continue;
-
-    const address = localAddr.substring(0, lastColon);
-    const portStr = localAddr.substring(lastColon + 1);
-    const port = parseInt(portStr, 10);
-
-    if (isNaN(port)) continue;
-
-    const portEntry: ListeningPort = {
-      protocol: protocol as "tcp" | "udp",
-      localAddress: address.replace(/^\[|\]$/g, ""),
-      localPort: port,
-      state: protocol === "tcp" ? state : undefined,
-    };
-
-    const processInfo = parts[6];
-    if (processInfo && processInfo.startsWith("users:")) {
-      const pidMatch = processInfo.match(/pid=(\d+)/);
-      const nameMatch = processInfo.match(/\("([^"]+)"/);
-      if (pidMatch) portEntry.pid = parseInt(pidMatch[1], 10);
-      if (nameMatch) portEntry.process = nameMatch[1];
-    }
-
-    ports.push(portEntry);
-  }
-
-  return ports;
-}
-
-function parseNetstatOutput(output: string): ListeningPort[] {
-  const ports: ListeningPort[] = [];
-  const lines = output.split("\n");
-
-  for (const line of lines) {
-    const trimmed = line.trim();
-    if (!trimmed) continue;
-
-    const parts = trimmed.split(/\s+/);
-    if (parts.length < 4) continue;
-
-    const proto = parts[0]?.toLowerCase();
-    if (!proto) continue;
-
-    let protocol: "tcp" | "udp";
-    if (proto.startsWith("tcp")) {
-      protocol = "tcp";
-    } else if (proto.startsWith("udp")) {
-      protocol = "udp";
-    } else {
-      continue;
-    }
-
-    const localAddr = parts[3];
-    if (!localAddr) continue;
-
-    const lastColon = localAddr.lastIndexOf(":");
-    if (lastColon === -1) continue;
-
-    const address = localAddr.substring(0, lastColon);
-    const portStr = localAddr.substring(lastColon + 1);
-    const port = parseInt(portStr, 10);
-
-    if (isNaN(port)) continue;
-
-    const portEntry: ListeningPort = {
-      protocol,
-      localAddress: address,
-      localPort: port,
-    };
-
-    if (protocol === "tcp" && parts.length >= 6) {
-      portEntry.state = parts[5];
-    }
-
-    const pidProgram = parts[parts.length - 1];
-    if (pidProgram && pidProgram.includes("/")) {
-      const [pidStr, process] = pidProgram.split("/");
-      const pid = parseInt(pidStr, 10);
-      if (!isNaN(pid)) portEntry.pid = pid;
-      if (process) portEntry.process = process;
-    }
-
-    ports.push(portEntry);
-  }
-
-  return ports;
-}
-
-export async function collectPortsMetrics(
-  client: Client,
-): Promise<PortsMetrics> {
-  try {
-    const ssResult = await execCommand(client, "ss -tulnp 2>/dev/null", 15000);
-
-    if (ssResult.stdout && ssResult.stdout.includes("Local")) {
-      const ports = parseSsOutput(ssResult.stdout);
-      return {
-        source: "ss",
-        ports: ports.sort((a, b) => a.localPort - b.localPort),
-      };
-    }
-
-    const netstatResult = await execCommand(
-      client,
-      "netstat -tulnp 2>/dev/null",
-      15000,
-    );
-
-    if (netstatResult.stdout && netstatResult.stdout.includes("Local")) {
-      const ports = parseNetstatOutput(netstatResult.stdout);
-      return {
-        source: "netstat",
-        ports: ports.sort((a, b) => a.localPort - b.localPort),
-      };
-    }
-
-    return {
-      source: "none",
-      ports: [],
-    };
-  } catch {
-    return {
-      source: "none",
-      ports: [],
-    };
-  }
-}
diff --git a/plugins/host-metrics/src/backend/widgets/processes-collector.ts b/plugins/host-metrics/src/backend/widgets/processes-collector.ts
deleted file mode 100644
index 4699b7df1..000000000
--- a/plugins/host-metrics/src/backend/widgets/processes-collector.ts
+++ /dev/null
@@ -1,68 +0,0 @@
-import { execCommand } from "@termix/plugin-sdk/host-commands";
-import type { Client } from "ssh2";
-
-export async function collectProcessesMetrics(client: Client): Promise<{
-  total: number | null;
-  running: number | null;
-  top: Array<{
-    pid: string;
-    user: string;
-    cpu: string;
-    mem: string;
-    command: string;
-  }>;
-}> {
-  let totalProcesses: number | null = null;
-  let runningProcesses: number | null = null;
-  const topProcesses: Array<{
-    pid: string;
-    user: string;
-    cpu: string;
-    mem: string;
-    command: string;
-  }> = [];
-
-  try {
-    const psOut = await execCommand(
-      client,
-      "(ps aux --sort=-%cpu 2>/dev/null || ps aux) | head -n 11",
-    );
-    const psLines = psOut.stdout
-      .split("\n")
-      .map((l) => l.trim())
-      .filter(Boolean);
-    if (psLines.length > 1) {
-      for (let i = 1; i < Math.min(psLines.length, 11); i++) {
-        const parts = psLines[i].split(/\s+/);
-        if (parts.length >= 11) {
-          const cpuVal = Number(parts[2]);
-          const memVal = Number(parts[3]);
-          topProcesses.push({
-            pid: parts[1],
-            user: parts[0],
-            cpu: Number.isFinite(cpuVal) ? cpuVal.toString() : "0",
-            mem: Number.isFinite(memVal) ? memVal.toString() : "0",
-            command: parts.slice(10).join(" ").substring(0, 50),
-          });
-        }
-      }
-    }
-
-    const procCount = await execCommand(client, "ps aux | wc -l");
-    const runningCount = await execCommand(client, "ps aux | grep -c ' R '");
-
-    const totalCount = Number(procCount.stdout.trim()) - 1;
-    totalProcesses = Number.isFinite(totalCount) ? totalCount : null;
-
-    const runningCount2 = Number(runningCount.stdout.trim());
-    runningProcesses = Number.isFinite(runningCount2) ? runningCount2 : null;
-  } catch {
-    // expected
-  }
-
-  return {
-    total: totalProcesses,
-    running: runningProcesses,
-    top: topProcesses,
-  };
-}
diff --git a/plugins/host-metrics/src/backend/widgets/system-collector.ts b/plugins/host-metrics/src/backend/widgets/system-collector.ts
deleted file mode 100644
index c3d04fe38..000000000
--- a/plugins/host-metrics/src/backend/widgets/system-collector.ts
+++ /dev/null
@@ -1,69 +0,0 @@
-import {
-  execCommand,
-  execPowerShell,
-  type HostPlatform,
-} from "@termix/plugin-sdk/host-commands";
-import type { Client } from "ssh2";
-
-async function collectWindowsSystemMetrics(client: Client): Promise<{
-  hostname: string | null;
-  kernel: string | null;
-  os: string | null;
-}> {
-  let hostname: string | null = null;
-  let kernel: string | null = null;
-  let os: string | null = null;
-
-  try {
-    const { stdout } = await execPowerShell(
-      client,
-      "$os=Get-CimInstance Win32_OperatingSystem; [PSCustomObject]@{hostname=$env:COMPUTERNAME; kernel=[System.Environment]::OSVersion.Version.ToString(); os=$os.Caption} | ConvertTo-Json -Compress",
-    );
-    const parsed = JSON.parse(stdout.trim());
-    hostname = parsed?.hostname ? String(parsed.hostname) : null;
-    kernel = parsed?.kernel ? String(parsed.kernel) : null;
-    os = parsed?.os ? String(parsed.os).trim() : null;
-  } catch {
-    // expected
-  }
-
-  return { hostname, kernel, os };
-}
-
-export async function collectSystemMetrics(
-  client: Client,
-  platform?: HostPlatform,
-): Promise<{
-  hostname: string | null;
-  kernel: string | null;
-  os: string | null;
-}> {
-  if (platform === "windows") {
-    return collectWindowsSystemMetrics(client);
-  }
-
-  let hostname: string | null = null;
-  let kernel: string | null = null;
-  let os: string | null = null;
-
-  try {
-    const hostnameOut = await execCommand(client, "hostname");
-    const kernelOut = await execCommand(client, "uname -r");
-    const osOut = await execCommand(
-      client,
-      "command -v sw_vers >/dev/null 2>&1 && echo \"$(sw_vers -productName) $(sw_vers -productVersion)\" || (cat /etc/os-release 2>/dev/null | grep '^PRETTY_NAME=' | cut -d'\"' -f2)",
-    );
-
-    hostname = hostnameOut.stdout.trim() || null;
-    kernel = kernelOut.stdout.trim() || null;
-    os = osOut.stdout.trim() || null;
-  } catch {
-    // expected
-  }
-
-  return {
-    hostname,
-    kernel,
-    os,
-  };
-}
diff --git a/plugins/host-metrics/src/backend/widgets/temperature-collector.ts b/plugins/host-metrics/src/backend/widgets/temperature-collector.ts
deleted file mode 100644
index c595373a8..000000000
--- a/plugins/host-metrics/src/backend/widgets/temperature-collector.ts
+++ /dev/null
@@ -1,125 +0,0 @@
-import { execCommand } from "@termix/plugin-sdk/host-commands";
-import { toFixedNum } from "../util.js";
-import type { Client } from "ssh2";
-
-export interface TemperatureSensor {
-  label: string;
-  celsius: number;
-}
-
-export interface TemperatureMetrics {
-  source: "sysfs" | "sensors" | "none";
-  highestCelsius: number | null;
-  sensors: TemperatureSensor[];
-}
-
-function normalizeSensor(
-  label: string,
-  celsius: number,
-): TemperatureSensor | null {
-  const cleanLabel = label.trim().replace(/\s+/g, " ");
-  if (!cleanLabel || !Number.isFinite(celsius)) return null;
-  return {
-    label: cleanLabel,
-    celsius: toFixedNum(celsius, 1) ?? celsius,
-  };
-}
-
-function summarizeSensors(
-  source: TemperatureMetrics["source"],
-  sensors: TemperatureSensor[],
-): TemperatureMetrics {
-  const highest = sensors.reduce<number | null>(
-    (max, sensor) =>
-      max === null ? sensor.celsius : Math.max(max, sensor.celsius),
-    null,
-  );
-
-  return {
-    source: sensors.length > 0 ? source : "none",
-    highestCelsius:
-      highest === null ? null : (toFixedNum(highest, 1) ?? highest),
-    sensors,
-  };
-}
-
-export function parseSysfsThermalOutput(output: string): TemperatureSensor[] {
-  return output
-    .split("\n")
-    .map((line) => {
-      const [label, rawValue] = line.split("\t");
-      const value = Number(rawValue);
-      if (!label || !Number.isFinite(value)) return null;
-      const celsius = Math.abs(value) >= 1000 ? value / 1000 : value;
-      return normalizeSensor(label, celsius);
-    })
-    .filter((sensor): sensor is TemperatureSensor => sensor !== null);
-}
-
-export function parseSensorsOutput(output: string): TemperatureSensor[] {
-  const seen = new Set<string>();
-  const sensors: TemperatureSensor[] = [];
-  let device = "";
-
-  for (const line of output.split("\n")) {
-    const trimmed = line.trim();
-    if (trimmed && !line.startsWith(" ") && !trimmed.includes(":")) {
-      device = trimmed;
-      continue;
-    }
-    const match = line.match(/^\s*([^:]+):\s*([+-]?\d+(?:\.\d+)?)\s*°?C\b/i);
-    if (!match) continue;
-
-    const label = device ? `${device}: ${match[1]}` : match[1];
-    const sensor = normalizeSensor(label, Number(match[2]));
-    if (!sensor) continue;
-
-    const key = `${sensor.label.toLowerCase()}:${sensor.celsius}`;
-    if (seen.has(key)) continue;
-    seen.add(key);
-    sensors.push(sensor);
-  }
-
-  return sensors;
-}
-
-export async function collectTemperatureMetrics(
-  client: Client,
-): Promise<TemperatureMetrics> {
-  try {
-    const sysfs = await execCommand(
-      client,
-      [
-        "for zone in /sys/class/thermal/thermal_zone*; do",
-        '[ -r "$zone/temp" ] || continue;',
-        'label="$(cat "$zone/type" 2>/dev/null || basename "$zone")";',
-        'value="$(cat "$zone/temp" 2>/dev/null || true)";',
-        '[ -n "$value" ] && printf "%s\\t%s\\n" "$label" "$value";',
-        "done",
-      ].join(" "),
-      10000,
-    );
-    const sensors = parseSysfsThermalOutput(sysfs.stdout);
-    if (sensors.length > 0) {
-      return summarizeSensors("sysfs", sensors);
-    }
-  } catch {
-    // expected on systems without readable thermal zones
-  }
-
-  try {
-    const lmSensors = await execCommand(client, "sensors 2>/dev/null", 10000);
-    const sensors = parseSensorsOutput(lmSensors.stdout);
-    if (sensors.length > 0) {
-      return summarizeSensors("sensors", sensors);
-    }
-  } catch {
-    // expected when lm-sensors is not installed
-  }
-
-  return {
-    source: "none",
-    highestCelsius: null,
-    sensors: [],
-  };
-}
diff --git a/plugins/host-metrics/src/backend/widgets/uptime-collector.ts b/plugins/host-metrics/src/backend/widgets/uptime-collector.ts
deleted file mode 100644
index e289ae5d1..000000000
--- a/plugins/host-metrics/src/backend/widgets/uptime-collector.ts
+++ /dev/null
@@ -1,105 +0,0 @@
-import {
-  execCommand,
-  execPowerShell,
-  type HostPlatform,
-} from "@termix/plugin-sdk/host-commands";
-import type { Client } from "ssh2";
-
-function formatUptime(uptimeSeconds: number): string {
-  const days = Math.floor(uptimeSeconds / 86400);
-  const hours = Math.floor((uptimeSeconds % 86400) / 3600);
-  const minutes = Math.floor((uptimeSeconds % 3600) / 60);
-  return `${days}d ${hours}h ${minutes}m`;
-}
-
-async function collectDarwinUptimeMetrics(client: Client): Promise<{
-  seconds: number | null;
-  formatted: string | null;
-}> {
-  let uptimeSeconds: number | null = null;
-  let uptimeFormatted: string | null = null;
-
-  try {
-    const bootTimeOut = await execCommand(client, "sysctl -n kern.boottime");
-    // "{ sec = 1700000000, usec = 123456 } Thu Nov 16 ..."
-    const match = bootTimeOut.stdout.match(/sec\s*=\s*(\d+)/);
-    if (match) {
-      const bootSeconds = Number(match[1]);
-      if (Number.isFinite(bootSeconds)) {
-        uptimeSeconds = Math.max(0, Date.now() / 1000 - bootSeconds);
-        uptimeFormatted = formatUptime(uptimeSeconds);
-      }
-    }
-  } catch {
-    // expected
-  }
-
-  return {
-    seconds: uptimeSeconds,
-    formatted: uptimeFormatted,
-  };
-}
-
-async function collectWindowsUptimeMetrics(client: Client): Promise<{
-  seconds: number | null;
-  formatted: string | null;
-}> {
-  let uptimeSeconds: number | null = null;
-  let uptimeFormatted: string | null = null;
-
-  try {
-    const { stdout } = await execPowerShell(
-      client,
-      "$os=Get-CimInstance Win32_OperatingSystem; [PSCustomObject]@{seconds=((Get-Date) - $os.LastBootUpTime).TotalSeconds} | ConvertTo-Json -Compress",
-    );
-    const parsed = JSON.parse(stdout.trim());
-    const seconds = Number(parsed?.seconds);
-    if (Number.isFinite(seconds)) {
-      uptimeSeconds = Math.max(0, seconds);
-      uptimeFormatted = formatUptime(uptimeSeconds);
-    }
-  } catch {
-    // expected
-  }
-
-  return {
-    seconds: uptimeSeconds,
-    formatted: uptimeFormatted,
-  };
-}
-
-export async function collectUptimeMetrics(
-  client: Client,
-  platform?: HostPlatform,
-): Promise<{
-  seconds: number | null;
-  formatted: string | null;
-}> {
-  if (platform === "darwin") {
-    return collectDarwinUptimeMetrics(client);
-  }
-  if (platform === "windows") {
-    return collectWindowsUptimeMetrics(client);
-  }
-
-  let uptimeSeconds: number | null = null;
-  let uptimeFormatted: string | null = null;
-
-  try {
-    const uptimeOut = await execCommand(client, "cat /proc/uptime");
-    const uptimeParts = uptimeOut.stdout.trim().split(/\s+/);
-    if (uptimeParts.length >= 1) {
-      uptimeSeconds = Number(uptimeParts[0]);
-      if (Number.isFinite(uptimeSeconds)) {
-        uptimeFormatted = formatUptime(uptimeSeconds);
-      }
-    }
-  } catch {
-    // expected
-  }
-
-  return {
-    seconds: uptimeSeconds,
-    formatted: uptimeFormatted,
-  };
-}
diff --git a/plugins/host-metrics/src/frontend/HostEditorStatsTab.tsx b/plugins/host-metrics/src/frontend/HostEditorStatsTab.tsx
deleted file mode 100644
index ccbe6af51..000000000
--- a/plugins/host-metrics/src/frontend/HostEditorStatsTab.tsx
+++ /dev/null
@@ -1,266 +0,0 @@
-import {
-  Button,
-  HostDefaultBadge,
-  Input,
-  SectionCard,
-  SettingRow,
-  FakeSwitch,
-  useIsDefaultsEditor,
-} from "@termix/plugin-sdk/ui";
-import { useState } from "react";
-import {
-  useTranslation,
-  type HostEditorSectionProps,
-} from "@termix/plugin-sdk/frontend";
-import { HardDrive, LayoutDashboard, Plus, Server, Trash2 } from "lucide-react";
-
-import { readHostMetricsSettings } from "../shared/stats-widgets.js";
-
-const PLUGIN_ID = "host-metrics";
-
-type PluginSettingsBag = Record<string, Record<string, unknown>>;
-
-/**
- * The Host Metrics section of the host editor. Its values are this plugin's
- * host settings, carried on form.pluginSettings and saved by the editor after
- * the host itself.
- */
-export function HostStatsTab({ form, updateForm }: HostEditorSectionProps) {
-  const { t } = useTranslation();
-  const [newMount, setNewMount] = useState("");
-  const [newMonitoredPath, setNewMonitoredPath] = useState("");
-  const [newMonitoredLabel, setNewMonitoredLabel] = useState("");
-  const bag = (form.pluginSettings as PluginSettingsBag | undefined)?.[
-    PLUGIN_ID
-  ];
-  const settings = readHostMetricsSettings(bag);
-  const { excludedMounts, monitoredMounts } = settings;
-  const defaultsEditor = useIsDefaultsEditor();
-
-  const patch = (values: Record<string, unknown>) =>
-    updateForm((current) => {
-      const all =
-        (current.pluginSettings as PluginSettingsBag | undefined) ?? {};
-      return {
-        pluginSettings: {
-          ...all,
-          [PLUGIN_ID]: { ...(all[PLUGIN_ID] ?? {}), ...values },
-        },
-      };
-    });
-
-  const addExcludedMount = () => {
-    const value = newMount.trim();
-    if (!value || excludedMounts.includes(value)) {
-      setNewMount("");
-      return;
-    }
-    patch({ excludedMounts: [...excludedMounts, value] });
-    setNewMount("");
-  };
-
-  const addMonitoredMount = () => {
-    const path = newMonitoredPath.trim();
-    if (!path || monitoredMounts.some((entry) => entry.path === path)) return;
-    patch({
-      monitoredMounts: [
-        ...monitoredMounts,
-        { path, label: newMonitoredLabel.trim() || undefined },
-      ],
-    });
-    setNewMonitoredPath("");
-    setNewMonitoredLabel("");
-  };
-
-  return (
-    <>
-      <SectionCard
-        title={t("hosts.metricsCollectionLabel")}
-        icon={<Server className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-0 py-1">
-          <SettingRow
-            label={t("hosts.enableMetricsLabel")}
-            description={t("hosts.enableMetricsDesc")}
-            defaultKey="metricsEnabled"
-          >
-            <FakeSwitch
-              checked={settings.metricsEnabled}
-              onChange={(v) => patch({ metricsEnabled: v })}
-            />
-          </SettingRow>
-          {settings.metricsEnabled && (
-            <SettingRow
-              label={t("hosts.useGlobalMetrics")}
-              description={t("hosts.useGlobalMetricsDesc")}
-              defaultKey="metricsInterval"
-            >
-              <FakeSwitch
-                checked={settings.metricsInterval === null}
-                onChange={(v) => patch({ metricsInterval: v ? null : 30 })}
-              />
-            </SettingRow>
-          )}
-          {settings.metricsEnabled && settings.metricsInterval !== null && (
-            <SettingRow
-              label={t("hosts.metricsIntervalS")}
-              description={t("hosts.metricsIntervalDesc2")}
-            >
-              <Input
-                type="number"
-                value={settings.metricsInterval ?? 30}
-                onChange={(e) =>
-                  patch({ metricsInterval: Number(e.target.value) })
-                }
-                className="w-20 h-7 text-xs text-right [appearance:textfield] [&::-webkit-outer-spin-button]:appearance-none [&::-webkit-inner-spin-button]:appearance-none"
-              />
-            </SettingRow>
-          )}
-        </div>
-      </SectionCard>
-      <SectionCard
-        title={t("hosts.monitoredMountsLabel")}
-        icon={<HardDrive className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-3 py-3">
-          <p className="flex items-center gap-1.5 text-xs text-muted-foreground">
-            {t("hosts.monitoredMountsDesc")}
-            <HostDefaultBadge settingKey="monitoredMounts" />
-          </p>
-          <div className="grid grid-cols-[1fr_0.7fr_auto] gap-2">
-            <Input
-              className="h-7 text-xs"
-              placeholder={t("hosts.monitoredMountPathPlaceholder")}
-              value={newMonitoredPath}
-              onChange={(e) => setNewMonitoredPath(e.target.value)}
-              onKeyDown={(e) => {
-                if (e.key === "Enter") {
-                  e.preventDefault();
-                  addMonitoredMount();
-                }
-              }}
-            />
-            <Input
-              className="h-7 text-xs"
-              placeholder={t("hosts.monitoredMountLabelPlaceholder")}
-              value={newMonitoredLabel}
-              onChange={(e) => setNewMonitoredLabel(e.target.value)}
-              onKeyDown={(e) => {
-                if (e.key === "Enter") {
-                  e.preventDefault();
-                  addMonitoredMount();
-                }
-              }}
-            />
-            <Button
-              variant="outline"
-              size="sm"
-              className="h-7 px-2 text-[10px]"
-              onClick={addMonitoredMount}
-            >
-              <Plus className="mr-1 size-3" /> {t("hosts.addMonitoredMount")}
-            </Button>
-          </div>
-          {monitoredMounts.map((entry) => (
-            <div
-              key={entry.path}
-              className="flex items-center gap-2 border border-border bg-muted/20 p-2 group"
-            >
-              <span className="min-w-0 flex-1 truncate font-mono text-xs">
-                {entry.path}
-              </span>
-              {entry.label && (
-                <span className="truncate text-xs text-muted-foreground">
-                  {entry.label}
-                </span>
-              )}
-              <button
-                className="text-muted-foreground opacity-0 transition-opacity hover:text-destructive group-hover:opacity-100"
-                onClick={() =>
-                  patch({
-                    monitoredMounts: monitoredMounts.filter(
-                      (mount) => mount.path !== entry.path,
-                    ),
-                  })
-                }
-              >
-                <Trash2 className="size-3.5" />
-              </button>
-            </div>
-          ))}
-        </div>
-      </SectionCard>
-      <SectionCard
-        title={t("hosts.excludedMountsLabel")}
-        icon={<HardDrive className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-3 py-3">
-          <p className="flex items-center gap-1.5 text-xs text-muted-foreground">
-            {t("hosts.excludedMountsDesc")}
-            <HostDefaultBadge settingKey="excludedMounts" />
-          </p>
-          <div className="flex items-center gap-2">
-            <Input
-              className="h-7 text-xs flex-1"
-              placeholder={t("hosts.excludedMountsPlaceholder")}
-              value={newMount}
-              onChange={(e) => setNewMount(e.target.value)}
-              onKeyDown={(e) => {
-                if (e.key === "Enter") {
-                  e.preventDefault();
-                  addExcludedMount();
-                }
-              }}
-            />
-            <Button
-              variant="outline"
-              size="sm"
-              className="h-7 text-[10px] px-2 border-accent-brand/40 text-accent-brand"
-              onClick={addExcludedMount}
-            >
-              <Plus className="size-3 mr-1" /> {t("hosts.addExcludedMount")}
-            </Button>
-          </div>
-          {excludedMounts.length === 0 && (
-            <div className="flex flex-col items-center justify-center py-4 text-muted-foreground/40 gap-1.5">
-              <HardDrive className="size-6" />
-              <span className="text-xs">{t("hosts.excludedMountsEmpty")}</span>
-            </div>
-          )}
-          {excludedMounts.map((mount, i) => (
-            <div
-              key={`${mount}-${i}`}
-              className="flex items-center gap-2 p-2 bg-muted/20 border border-border group"
-            >
-              <span className="text-xs flex-1 font-mono truncate">{mount}</span>
-              <button
-                className="text-muted-foreground hover:text-destructive opacity-0 group-hover:opacity-100 transition-opacity"
-                onClick={() =>
-                  patch({
-                    excludedMounts: excludedMounts.filter(
-                      (_, idx) => idx !== i,
-                    ),
-                  })
-                }
-              >
-                <Trash2 className="size-3.5" />
-              </button>
-            </div>
-          ))}
-        </div>
-      </SectionCard>
-      {!defaultsEditor && (
-        <SectionCard
-          title={t("hosts.visibleWidgets")}
-          icon={<LayoutDashboard className="size-3.5" />}
-        >
-          <div className="flex flex-col gap-2 py-3">
-            <p className="text-xs text-muted-foreground">
-              {t("hosts.widgetsMovedToHostMetrics")}
-            </p>
-          </div>
-        </SectionCard>
-      )}
-    </>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/HostMetricsApp.tsx b/plugins/host-metrics/src/frontend/HostMetricsApp.tsx
deleted file mode 100644
index 56d1a2fed..000000000
--- a/plugins/host-metrics/src/frontend/HostMetricsApp.tsx
+++ /dev/null
@@ -1,51 +0,0 @@
-import { FullScreenAppWrapper, ConnectionScreen } from "@termix/plugin-sdk/ui";
-import React from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { HostMetricsTab } from "./HostMetricsTab.tsx";
-
-interface HostMetricsAppProps {
-  hostId?: string;
-}
-
-const HostMetricsApp: React.FC<HostMetricsAppProps> = ({ hostId }) => {
-  const { t } = useTranslation();
-  return (
-    <FullScreenAppWrapper hostId={hostId}>
-      {(hostConfig, phase) => {
-        if (phase === "loading") {
-          return (
-            <div className="relative h-full w-full">
-              <ConnectionScreen
-                status="connecting"
-                message={t("hosts.loadingHost")}
-              />
-            </div>
-          );
-        }
-
-        if (!hostConfig) {
-          return (
-            <div className="relative h-full w-full">
-              <ConnectionScreen
-                status="disconnected"
-                message={t("hosts.hostNotFound")}
-              />
-            </div>
-          );
-        }
-
-        return (
-          <HostMetricsTab
-            hostConfig={hostConfig}
-            title={hostConfig.name || `${hostConfig.username}@${hostConfig.ip}`}
-            isVisible={true}
-            isTopbarOpen={false}
-            embedded={true}
-          />
-        );
-      }}
-    </FullScreenAppWrapper>
-  );
-};
-
-export default HostMetricsApp;
diff --git a/plugins/host-metrics/src/frontend/HostMetricsTab.tsx b/plugins/host-metrics/src/frontend/HostMetricsTab.tsx
deleted file mode 100644
index 9ac059f98..000000000
--- a/plugins/host-metrics/src/frontend/HostMetricsTab.tsx
+++ /dev/null
@@ -1,655 +0,0 @@
-import {
-  Button,
-  ComponentSlot,
-  TOTPDialog,
-  useTabsSafe,
-  ConnectionLogProvider,
-  useConnectionLog,
-  ConnectionScreen,
-  runAdaptivePolling,
-  CardGridCanvas,
-  ColumnCountStepper,
-  type GridCardCatalogEntry,
-} from "@termix/plugin-sdk/ui";
-import { readHostMetricsSettings } from "../shared/stats-widgets.js";
-import {
-  defaultLayoutFromWidgets,
-  type HostMetricsLayout,
-} from "../shared/host-metrics.js";
-import type { ServerMetrics } from "../shared/metrics.js";
-/* eslint-disable react-hooks/exhaustive-deps */
-import React from "react";
-import { useHostMetricsApi } from "./host-metrics-api";
-
-import {
-  useTranslation,
-  useSlotContributions,
-  useConnectionRetry,
-  useHost,
-  useHostStatus,
-  logActivity,
-  usePluginUiPreferences,
-} from "@termix/plugin-sdk/frontend";
-import { toast } from "sonner";
-import { RefreshCw, Server, LayoutDashboard } from "lucide-react";
-import { useHostMetricsPreferences } from "./hooks/useHostMetricsPreferences.ts";
-import {
-  CARD_DEFINITIONS,
-  IMPLEMENTED_CARD_IDS,
-  getCardDefinition,
-  definitionsFromSlot,
-  defaultColSpanFor,
-  defaultHeightFor,
-  type MetricCardHistories,
-} from "./cards";
-import { appendGpuHistories } from "./cards/gpu-history";
-import { metricsChangeKey } from "./metrics-change-key";
-
-const HISTORY_LEN = 30;
-
-type ConnectionLogPayload = Parameters<
-  ReturnType<typeof useConnectionLog>["addLog"]
->[0];
-type ConnectionLogError = Error & {
-  connectionLogs?: ConnectionLogPayload[];
-};
-
-interface HostConfig {
-  id: number;
-  name: string;
-  ip: string;
-  username: string;
-  statusCheckEnabled?: boolean;
-  pluginSettings?: Record<string, Record<string, unknown>>;
-  authType?: string;
-  port?: number;
-  [key: string]: unknown;
-}
-
-interface HostMetricsProps {
-  hostConfig?: HostConfig;
-  title?: string;
-  isVisible?: boolean;
-  isTopbarOpen?: boolean;
-  embedded?: boolean;
-}
-
-function HostMetricsInner({
-  hostConfig,
-  title,
-  isVisible = true,
-  isTopbarOpen = true,
-  embedded = false,
-}: HostMetricsProps): React.ReactElement {
-  const { t } = useTranslation();
-  const metricsApi = useHostMetricsApi();
-  const { addLog, clearLogs } = useConnectionLog();
-  const { currentTab, removeTab } = useTabsSafe();
-
-  const [serverStatus, setServerStatus] = React.useState<"online" | "offline">(
-    "offline",
-  );
-  const [metrics, setMetrics] = React.useState<ServerMetrics | null>(null);
-  const [histories, setHistories] = React.useState<MetricCardHistories>({
-    cpu: [],
-    memory: [],
-    disk: [],
-    gpu: {},
-  });
-  const [currentHostConfig, setCurrentHostConfig] = React.useState(hostConfig);
-  const [isRefreshing, setIsRefreshing] = React.useState(false);
-  const [totpRequired, setTotpRequired] = React.useState(false);
-  const [totpSessionId, setTotpSessionId] = React.useState<string | null>(null);
-  const [totpPrompt, setTotpPrompt] = React.useState<string>("");
-  const [isPageVisible, setIsPageVisible] = React.useState(!document.hidden);
-  const [totpVerified, setTotpVerified] = React.useState(false);
-  const [viewerSessionId, setViewerSessionId] = React.useState<string | null>(
-    null,
-  );
-  const [editMode, setEditMode] = React.useState(false);
-
-  const activityLoggedRef = React.useRef(false);
-  const activityLoggingRef = React.useRef(false);
-
-  const statsConfig = React.useMemo(() => {
-    const settings = readHostMetricsSettings(
-      currentHostConfig?.pluginSettings?.["host-metrics"],
-    );
-    return { ...settings, metricsInterval: settings.metricsInterval ?? 30 };
-  }, [currentHostConfig?.pluginSettings]);
-  const metricsEnabled = statsConfig.metricsEnabled !== false;
-  const statusCheckEnabled = currentHostConfig?.statusCheckEnabled !== false;
-
-  const hostId = currentHostConfig?.id ?? null;
-  const { layout, setLayout } = useHostMetricsPreferences(hostId);
-
-  const { values: metricsPrefs } = usePluginUiPreferences<{
-    columns: number;
-  }>();
-
-  const effectiveLayout: HostMetricsLayout = React.useMemo(() => {
-    // A saved layout is user-authored, so the preset never rewrites it -- it
-    // only decides the shape of the first layout a host gets.
-    if (layout) return layout;
-    return defaultLayoutFromWidgets(
-      statsConfig.enabledWidgets ?? [],
-      metricsPrefs.columns,
-    );
-  }, [layout, statsConfig.enabledWidgets, metricsPrefs.columns]);
-
-  // Manager cards other plugins contribute (tailscale's, say), merged in next
-  // to the ones this plugin ships. A contribution for a slot that never
-  // arrives (its plugin is off) just never appears here.
-  const managerContributions = useSlotContributions("host-metrics.managers");
-  const pluginManagerDefs = React.useMemo(
-    () => definitionsFromSlot(managerContributions),
-    [managerContributions],
-  );
-
-  // Only render/keep cards that are implemented (metric cards in Phase A).
-  const visibleSlots = React.useMemo(
-    () =>
-      effectiveLayout.slots.filter((s) =>
-        getCardDefinition(s.id, pluginManagerDefs),
-      ),
-    [effectiveLayout.slots, pluginManagerDefs],
-  );
-
-  const cardCatalog: GridCardCatalogEntry[] = React.useMemo(
-    () => [
-      ...IMPLEMENTED_CARD_IDS.map((id) => ({
-        id,
-        label: t(CARD_DEFINITIONS[id].labelKey),
-        defaultColSpan: defaultColSpanFor(id),
-        defaultHeight: defaultHeightFor(id),
-      })),
-      ...Object.values(pluginManagerDefs).map((def) => ({
-        id: def.id,
-        label: t(def.labelKey),
-        defaultColSpan: defaultColSpanFor(def.id),
-        defaultHeight: defaultHeightFor(def.id),
-      })),
-    ],
-    [t, pluginManagerDefs],
-  );
-
-  const cardLabel = React.useCallback(
-    (id: string) => {
-      const def = getCardDefinition(id, pluginManagerDefs);
-      return def ? t(def.labelKey) : id;
-    },
-    [t, pluginManagerDefs],
-  );
-
-  const renderCard = React.useCallback(
-    (id: string) => {
-      const def = getCardDefinition(id, pluginManagerDefs);
-      if (!def) return null;
-      return def.render({ metrics, histories, hostId });
-    },
-    [metrics, histories, hostId, pluginManagerDefs],
-  );
-
-  React.useEffect(() => {
-    const onVis = () => setIsPageVisible(!document.hidden);
-    document.addEventListener("visibilitychange", onVis);
-    return () => document.removeEventListener("visibilitychange", onVis);
-  }, []);
-
-  const isActuallyVisible = isVisible && isPageVisible;
-
-  React.useEffect(() => {
-    if (!viewerSessionId || !isActuallyVisible) return;
-    const interval = setInterval(() => {
-      metricsApi.heartbeat(viewerSessionId).catch(() => {});
-    }, 30000);
-    return () => clearInterval(interval);
-  }, [viewerSessionId, isActuallyVisible]);
-
-  React.useEffect(() => {
-    if (hostConfig?.id !== currentHostConfig?.id) {
-      setServerStatus("offline");
-      setMetrics(null);
-      setHistories({ cpu: [], memory: [], disk: [], gpu: {} });
-    }
-    setCurrentHostConfig(hostConfig);
-  }, [hostConfig?.id]);
-
-  const logServerActivity = async () => {
-    if (
-      !currentHostConfig?.id ||
-      activityLoggedRef.current ||
-      activityLoggingRef.current
-    ) {
-      return;
-    }
-    activityLoggingRef.current = true;
-    activityLoggedRef.current = true;
-    try {
-      const hostName =
-        currentHostConfig.name ||
-        `${currentHostConfig.username}@${currentHostConfig.ip}`;
-      await logActivity("server_stats", currentHostConfig.id, hostName);
-    } catch {
-      activityLoggedRef.current = false;
-    } finally {
-      activityLoggingRef.current = false;
-    }
-  };
-
-  const pushHistory = React.useCallback((data: ServerMetrics) => {
-    setHistories((prev) => {
-      const add = (arr: number[], v: number | null | undefined) =>
-        [...arr, v ?? 0].slice(-HISTORY_LEN);
-      return {
-        cpu: add(prev.cpu, data.cpu?.percent),
-        memory: add(prev.memory, data.memory?.percent),
-        disk: add(prev.disk, data.disk?.percent),
-        gpu: appendGpuHistories(prev.gpu, data.gpu?.gpus, HISTORY_LEN),
-      };
-    });
-  }, []);
-
-  const handleTOTPSubmit = async (totpCode: string) => {
-    if (!totpSessionId || !currentHostConfig) return;
-    try {
-      const result = await metricsApi.submitTotp(totpSessionId, totpCode);
-      if (result.success) {
-        setTotpRequired(false);
-        setTotpSessionId(null);
-        setTotpVerified(true);
-        if (result.viewerSessionId) setViewerSessionId(result.viewerSessionId);
-      } else {
-        toast.error(t("hostMetrics.totpFailed"));
-      }
-    } catch {
-      toast.error(t("hostMetrics.totpFailed"));
-    }
-  };
-
-  const handleTOTPCancel = async () => {
-    setTotpRequired(false);
-    if (currentHostConfig?.id) {
-      await metricsApi.stopMetrics(currentHostConfig.id).catch(() => {});
-    }
-    if (currentTab !== null) removeTab(currentTab);
-  };
-
-  // The shell keeps the host list current, including plugin settings.
-  const latestHost = useHost(hostConfig?.id);
-  React.useEffect(() => {
-    if (latestHost) {
-      setCurrentHostConfig({
-        ...(latestHost as unknown as HostConfig),
-        id: Number(latestHost.id),
-      });
-    }
-  }, [latestHost]);
-
-  // Core's status check, the same one behind the host list's dot.
-  const hostStatus = useHostStatus(hostId ?? undefined);
-  React.useEffect(() => {
-    if (!statusCheckEnabled) {
-      setServerStatus("offline");
-      return;
-    }
-    if (hostStatus) {
-      setServerStatus(hostStatus.status === "online" ? "online" : "offline");
-    }
-  }, [hostStatus?.status, statusCheckEnabled]);
-
-  const stopMetricsPollingRef = React.useRef<(() => void) | null>(null);
-
-  const fetchMetrics = React.useCallback(async (): Promise<void> => {
-    if (!currentHostConfig?.id) return;
-    if (currentHostConfig.authType === "none") {
-      toast.error(t("hostMetrics.noneAuthNotSupported"));
-      if (currentTab !== null) removeTab(currentTab);
-      throw new Error(t("hostMetrics.noneAuthNotSupported"));
-    }
-
-    if (!totpVerified) {
-      addLog({
-        type: "info",
-        stage: "stats_connecting",
-        message: `Connecting to ${currentHostConfig.username}@${currentHostConfig.ip}:${currentHostConfig.port}`,
-      });
-      const result = await metricsApi.startMetrics(currentHostConfig.id);
-      result?.connectionLogs?.forEach((log) =>
-        addLog(log as ConnectionLogPayload),
-      );
-      if (result.requires_totp) {
-        setTotpRequired(true);
-        setTotpSessionId(result.sessionId || null);
-        setTotpPrompt(result.prompt || "Verification code");
-        // The TOTP dialog gates further progress; retry loop pauses via `enabled`.
-        return;
-      }
-      if (result.viewerSessionId) setViewerSessionId(result.viewerSessionId);
-    }
-
-    // The connect above only opens the SSH session; the first real sample is
-    // collected asynchronously on the backend (status check, then metrics
-    // exec), so it isn't ready the instant the connection succeeds. Give it
-    // a few short retries before treating the initial fetch as a failure.
-    let data = await metricsApi.getMetrics(currentHostConfig.id);
-    for (let i = 0; !data && i < 5; i++) {
-      await new Promise((resolve) => setTimeout(resolve, 1500));
-      data = await metricsApi.getMetrics(currentHostConfig.id);
-    }
-    if (!data) {
-      throw new Error(t("hostMetrics.connectionFailed"));
-    }
-
-    setMetrics(data);
-    pushHistory(data);
-    setServerStatus("online");
-    logServerActivity();
-    addLog({
-      type: "success",
-      stage: "connected",
-      message: t("terminal.connected"),
-    });
-
-    let signature = metricsChangeKey(data);
-    const minIntervalMs = statsConfig.metricsInterval * 1000;
-    stopMetricsPollingRef.current?.();
-    stopMetricsPollingRef.current = runAdaptivePolling(
-      async () => {
-        const next = await metricsApi.getMetrics(currentHostConfig.id);
-        if (!next) throw new Error(t("hostMetrics.connectionFailed"));
-        const nextSignature = metricsChangeKey(next);
-        const changed = nextSignature !== signature;
-        signature = nextSignature;
-        setMetrics(next);
-        pushHistory(next);
-        return changed;
-      },
-      {
-        minIntervalMs,
-        maxIntervalMs: Math.min(120_000, minIntervalMs * 6),
-        stablePollsPerStep: 3,
-      },
-      { runImmediately: false },
-    );
-  }, [
-    currentHostConfig,
-    totpVerified,
-    statsConfig.metricsInterval,
-    addLog,
-    t,
-    currentTab,
-    removeTab,
-    pushHistory,
-    metricsApi,
-  ]);
-
-  const metricsRetry = useConnectionRetry({
-    connect: async () => {
-      try {
-        await fetchMetrics();
-        if (!totpRequired) metricsRetry.markConnected();
-      } catch (error: unknown) {
-        const logError = error as ConnectionLogError;
-        if (logError.connectionLogs) {
-          logError.connectionLogs.forEach((log) => addLog(log));
-        } else {
-          addLog({
-            type: "error",
-            stage: "connection",
-            message:
-              error instanceof Error
-                ? error.message
-                : t("hostMetrics.connectionFailed"),
-          });
-        }
-        metricsRetry.markFailed();
-      }
-    },
-    enabled:
-      isPageVisible &&
-      metricsEnabled &&
-      !totpRequired &&
-      !!currentHostConfig?.id,
-    autoStart: false,
-  });
-
-  const metricsRetryRef = React.useRef(metricsRetry);
-  metricsRetryRef.current = metricsRetry;
-
-  // Connects once per host and stays connected while this tab exists, even
-  // when the user switches to another tab and back. Only the browser tab
-  // going into the background (isPageVisible) pauses/resumes it -- switching
-  // between Termix tabs must not tear down and reconnect the session.
-  React.useEffect(() => {
-    if (!metricsEnabled || !currentHostConfig?.id) return;
-
-    let cancelled = false;
-
-    const stopMetrics = async () => {
-      stopMetricsPollingRef.current?.();
-      stopMetricsPollingRef.current = null;
-      if (currentHostConfig?.id) {
-        await metricsApi
-          .stopMetrics(currentHostConfig.id, viewerSessionId || undefined)
-          .catch(() => {});
-      }
-    };
-
-    const debounce = setTimeout(() => {
-      if (cancelled) return;
-      if (isPageVisible) {
-        clearLogs();
-        metricsRetryRef.current.reset();
-        metricsRetryRef.current.retryNow();
-      } else {
-        stopMetrics();
-      }
-    }, 500);
-
-    return () => {
-      cancelled = true;
-      clearTimeout(debounce);
-      stopMetricsPollingRef.current?.();
-      stopMetricsPollingRef.current = null;
-      if (currentHostConfig?.id) {
-        metricsApi.stopMetrics(currentHostConfig.id).catch(() => {});
-      }
-    };
-  }, [currentHostConfig?.id, isPageVisible, metricsEnabled]);
-
-  // After a successful TOTP submit, resume the connect flow immediately.
-  React.useEffect(() => {
-    if (totpVerified && !totpRequired) {
-      metricsRetryRef.current.reset();
-      metricsRetryRef.current.retryNow();
-    }
-  }, [totpVerified, totpRequired]);
-
-  const wrapperStyle: React.CSSProperties = embedded
-    ? { opacity: isVisible ? 1 : 0, height: "100%", width: "100%" }
-    : {
-        opacity: isVisible ? 1 : 0,
-        margin: isTopbarOpen ? "74px 17px 8px 8px" : "16px 17px 8px 8px",
-        height: isTopbarOpen ? "calc(100vh - 82px)" : "calc(100vh - 24px)",
-      };
-
-  const handleRefresh = async () => {
-    if (!currentHostConfig?.id) return;
-    if (metricsRetry.status !== "connected") {
-      metricsRetry.retryNow();
-      return;
-    }
-    try {
-      setIsRefreshing(true);
-      const data = await metricsApi.getMetrics(currentHostConfig.id);
-      if (data) {
-        setMetrics(data);
-        pushHistory(data);
-      }
-    } catch {
-      setServerStatus("offline");
-    } finally {
-      setIsRefreshing(false);
-    }
-  };
-
-  const showCards =
-    metricsEnabled && metricsRetry.status === "connected" && metrics;
-  const showOffline =
-    metricsEnabled &&
-    metricsRetry.status !== "connecting" &&
-    !metrics &&
-    serverStatus === "offline";
-
-  return (
-    <div
-      style={wrapperStyle}
-      className="relative flex flex-col overflow-hidden"
-    >
-      <div className="flex min-h-0 flex-1 flex-col overflow-hidden">
-        <div className="flex flex-1 flex-col overflow-x-hidden overflow-y-auto">
-          {!totpRequired &&
-            (metricsRetry.status === "connected" || showOffline) && (
-              <div className="mx-3 mt-3 flex shrink-0 items-center justify-between border border-border bg-card px-3 py-3">
-                <div className="flex items-center gap-3">
-                  <div className="flex size-10 shrink-0 items-center justify-center border border-border bg-muted">
-                    <Server className="size-5 text-accent-brand" />
-                  </div>
-                  <h1 className="text-lg font-bold md:text-2xl">{title}</h1>
-                </div>
-                <div className="flex items-center gap-0">
-                  <ComponentSlot
-                    slotId="host-metrics.toolbar"
-                    props={{
-                      hostId: currentHostConfig?.id,
-                      host: currentHostConfig,
-                    }}
-                  />
-                  {editMode && (
-                    <>
-                      <ColumnCountStepper
-                        columns={effectiveLayout.columns}
-                        onChange={(columns) =>
-                          setLayout({ ...effectiveLayout, columns })
-                        }
-                      />
-                      <Button
-                        variant="ghost"
-                        size="sm"
-                        className="ml-2 text-xs text-muted-foreground"
-                        onClick={() =>
-                          setLayout(
-                            defaultLayoutFromWidgets(
-                              statsConfig.enabledWidgets ?? [],
-                            ),
-                          )
-                        }
-                      >
-                        {t("hostMetrics.reset")}
-                      </Button>
-                    </>
-                  )}
-                  <Button
-                    variant={editMode ? "default" : "ghost"}
-                    size="icon"
-                    className="ml-1"
-                    title={t("hostMetrics.customize")}
-                    onClick={() => setEditMode((v) => !v)}
-                  >
-                    <LayoutDashboard className="size-4" />
-                  </Button>
-                  <Button
-                    variant="outline"
-                    size="default"
-                    onClick={handleRefresh}
-                    disabled={isRefreshing}
-                    className="ml-1 gap-2 font-semibold"
-                  >
-                    <RefreshCw
-                      className={`size-3.5 ${isRefreshing ? "animate-spin" : ""}`}
-                    />
-                    {t("hostMetrics.refresh")}
-                  </Button>
-                </div>
-              </div>
-            )}
-
-          {editMode && (
-            <div className="mx-3 mt-3 flex shrink-0 items-center gap-2 border border-dashed border-accent-brand/40 bg-accent-brand/5 px-4 py-2">
-              <LayoutDashboard className="size-3.5 shrink-0 text-accent-brand" />
-              <span className="text-xs font-semibold text-accent-brand">
-                {t("hostMetrics.editModeInstructions")}
-              </span>
-            </div>
-          )}
-
-          {showCards && (
-            <div className="px-3 pt-3 pb-3">
-              <CardGridCanvas
-                slots={visibleSlots}
-                columns={effectiveLayout.columns}
-                editMode={editMode}
-                renderCard={renderCard}
-                cardCatalog={cardCatalog}
-                cardLabel={cardLabel}
-                onChange={(slots, columns) =>
-                  setLayout({
-                    slots: slots as HostMetricsLayout["slots"],
-                    columns,
-                  })
-                }
-              />
-            </div>
-          )}
-        </div>
-
-        {metricsEnabled && !totpRequired && (
-          <ConnectionScreen
-            status={showOffline ? "connected" : metricsRetry.status}
-            message={t("hostMetrics.connecting")}
-            attempt={metricsRetry.attempt}
-            maxAttempts={metricsRetry.maxAttempts}
-            nextRetryInMs={metricsRetry.nextRetryInMs}
-            onManualRetry={metricsRetry.retryNow}
-            logPosition={
-              metricsRetry.status === "error" ||
-              metricsRetry.status === "disconnected"
-                ? "top"
-                : "bottom"
-            }
-            emptyState={
-              showOffline ? (
-                <div className="text-center opacity-40">
-                  <Server className="mx-auto mb-4 size-16" />
-                  <p className="text-xl font-bold uppercase tracking-widest">
-                    {t("hostMetrics.serverOffline")}
-                  </p>
-                  <p className="text-sm font-semibold">
-                    {t("hostMetrics.cannotFetchMetrics")}
-                  </p>
-                </div>
-              ) : undefined
-            }
-          />
-        )}
-      </div>
-
-      <TOTPDialog
-        isOpen={totpRequired}
-        prompt={totpPrompt}
-        onSubmit={handleTOTPSubmit}
-        onCancel={handleTOTPCancel}
-        backgroundColor="var(--bg-canvas)"
-      />
-    </div>
-  );
-}
-
-export function HostMetricsTab(props: HostMetricsProps): React.ReactElement {
-  return (
-    <ConnectionLogProvider>
-      <HostMetricsInner {...props} />
-    </ConnectionLogProvider>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/MetricsChartEditForm.tsx b/plugins/host-metrics/src/frontend/MetricsChartEditForm.tsx
deleted file mode 100644
index 3c2b14e11..000000000
--- a/plugins/host-metrics/src/frontend/MetricsChartEditForm.tsx
+++ /dev/null
@@ -1,107 +0,0 @@
-import { Select2 } from "@termix/plugin-sdk/ui";
-import { useHosts, useTranslation } from "@termix/plugin-sdk/frontend";
-import type {
-  MetricsChartConfig,
-  MetricsChartMetric,
-  MetricsChartRange,
-  WidgetEditFormProps,
-} from "../shared/homepage.js";
-
-const METRICS: { id: MetricsChartMetric; label: string }[] = [
-  { id: "cpu", label: "CPU" },
-  { id: "memory", label: "Memory" },
-  { id: "disk", label: "Disk" },
-  { id: "net_rx", label: "RX MB/s" },
-  { id: "net_tx", label: "TX MB/s" },
-];
-
-const RANGES: { id: MetricsChartRange; label: string }[] = [
-  { id: "15m", label: "15m" },
-  { id: "1h", label: "1h" },
-  { id: "6h", label: "6h" },
-  { id: "24h", label: "24h" },
-];
-
-export function MetricsChartEditForm({
-  config,
-  onChange,
-}: WidgetEditFormProps<MetricsChartConfig>) {
-  const { t } = useTranslation();
-  const { hosts: records } = useHosts();
-  const hosts = records.map((host) => ({
-    id: Number(host.id),
-    name: host.name,
-  }));
-
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.host")}
-        </label>
-        <Select2
-          value={config.hostId}
-          onChange={(e) =>
-            onChange({ ...config, hostId: Number(e.target.value) })
-          }
-          className="h-8 text-xs bg-background border border-border px-2 text-foreground"
-        >
-          <option value={0}>{t("homepage.selectHost")}</option>
-          {hosts.map((h) => (
-            <option key={h.id} value={h.id}>
-              {h.name}
-            </option>
-          ))}
-        </Select2>
-      </div>
-
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.chartMetric")}
-        </label>
-        <div className="flex flex-wrap gap-1">
-          {METRICS.map((m) => (
-            <button
-              key={m.id}
-              type="button"
-              onClick={() => onChange({ ...config, metric: m.id })}
-              className={`px-2 py-0.5 text-[10px] font-medium border transition-colors ${config.metric === m.id ? "bg-accent-brand border-accent-brand text-white" : "border-border text-muted-foreground hover:border-accent-brand/50"}`}
-            >
-              {m.label}
-            </button>
-          ))}
-        </div>
-      </div>
-
-      <div className="flex flex-col gap-1">
-        <label className="text-xs font-medium text-muted-foreground">
-          {t("homepage.metricRange")}
-        </label>
-        <div className="flex gap-1">
-          {RANGES.map((r) => (
-            <button
-              key={r.id}
-              type="button"
-              onClick={() => onChange({ ...config, range: r.id })}
-              className={`px-2 py-0.5 text-[10px] font-medium border transition-colors ${config.range === r.id ? "bg-accent-brand border-accent-brand text-white" : "border-border text-muted-foreground hover:border-accent-brand/50"}`}
-            >
-              {r.label}
-            </button>
-          ))}
-        </div>
-      </div>
-
-      <label className="flex items-center gap-2 text-xs text-muted-foreground cursor-pointer">
-        <input
-          type="checkbox"
-          checked={config.showCurrentValue}
-          onChange={(e) =>
-            onChange({ ...config, showCurrentValue: e.target.checked })
-          }
-          className="accent-accent-brand"
-        />
-        {t("homepage.showCurrentValue")}
-      </label>
-    </div>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/MetricsChartWidget.tsx b/plugins/host-metrics/src/frontend/MetricsChartWidget.tsx
deleted file mode 100644
index 91beedfa5..000000000
--- a/plugins/host-metrics/src/frontend/MetricsChartWidget.tsx
+++ /dev/null
@@ -1,243 +0,0 @@
-import { WidgetTitle, runVisibleInterval } from "@termix/plugin-sdk/ui";
-import { useEffect, useState, useRef } from "react";
-import { TrendingUp } from "lucide-react";
-import { useHost, useTranslation } from "@termix/plugin-sdk/frontend";
-import { MetricsChartEditForm } from "./MetricsChartEditForm";
-import {
-  GRID_SIZE,
-  type MetricsChartConfig,
-  type MetricsChartMetric,
-  type WidgetComponentProps,
-  type WidgetDefinition,
-} from "../shared/homepage.js";
-import { type MetricsHistoryRow, useHostMetricsApi } from "./host-metrics-api";
-
-function getAccentColor(): string {
-  return (
-    getComputedStyle(document.documentElement)
-      .getPropertyValue("--accent-brand")
-      .trim() || "#f59145"
-  );
-}
-
-function getMetricValue(
-  row: MetricsHistoryRow,
-  metric: MetricsChartMetric,
-): number | null {
-  switch (metric) {
-    case "cpu":
-      return row.cpu_percent;
-    case "memory":
-      return row.mem_percent;
-    case "disk":
-      return row.disk_percent;
-    case "net_rx":
-      return row.net_rx_bytes != null ? row.net_rx_bytes / 1_000_000 : null;
-    case "net_tx":
-      return row.net_tx_bytes != null ? row.net_tx_bytes / 1_000_000 : null;
-  }
-}
-
-function getMetricLabel(
-  metric: MetricsChartMetric,
-  t: (k: string) => string,
-): string {
-  switch (metric) {
-    case "cpu":
-      return t("homepage.metricCpu");
-    case "memory":
-      return t("homepage.metricMemory");
-    case "disk":
-      return t("homepage.metricDisk");
-    case "net_rx":
-      return "RX MB/s";
-    case "net_tx":
-      return "TX MB/s";
-  }
-}
-
-function getMetricUnit(metric: MetricsChartMetric): string {
-  if (metric === "net_rx" || metric === "net_tx") return " MB/s";
-  return "%";
-}
-
-interface SparklineProps {
-  values: number[];
-  width: number;
-  height: number;
-  color: string;
-}
-
-function Sparkline({ values, width, height, color }: SparklineProps) {
-  if (values.length < 2) return null;
-  const max = Math.max(...values, 1);
-  const min = 0;
-  const range = max - min;
-  const pts = values.map((v, i) => {
-    const x = (i / (values.length - 1)) * width;
-    const y = height - ((v - min) / range) * height;
-    return `${x.toFixed(1)},${y.toFixed(1)}`;
-  });
-  const polyPts = [`0,${height}`, ...pts, `${width},${height}`].join(" ");
-
-  return (
-    <svg
-      width={width}
-      height={height}
-      viewBox={`0 0 ${width} ${height}`}
-      preserveAspectRatio="none"
-      className="overflow-visible"
-    >
-      <defs>
-        <linearGradient
-          id={`mg-${color.replace("#", "")}`}
-          x1="0"
-          y1="0"
-          x2="0"
-          y2="1"
-        >
-          <stop offset="0%" stopColor={color} stopOpacity="0.3" />
-          <stop offset="100%" stopColor={color} stopOpacity="0.02" />
-        </linearGradient>
-      </defs>
-      <polygon points={polyPts} fill={`url(#mg-${color.replace("#", "")})`} />
-      <polyline
-        points={pts.join(" ")}
-        fill="none"
-        stroke={color}
-        strokeWidth="1.5"
-        strokeLinecap="round"
-        strokeLinejoin="round"
-      />
-    </svg>
-  );
-}
-
-function MetricsChartWidget({
-  widget,
-  config,
-}: WidgetComponentProps<MetricsChartConfig>) {
-  const { getMetricsHistory } = useHostMetricsApi();
-  const { t } = useTranslation();
-  const { hostId, metric, range, showCurrentValue } = config;
-  const hostName = useHost(hostId || undefined)?.name ?? null;
-  const [values, setValues] = useState<number[]>([]);
-  const [loading, setLoading] = useState(true);
-  const containerRef = useRef<HTMLDivElement>(null);
-  const [dims, setDims] = useState({ w: 0, h: 0 });
-
-  useEffect(() => {
-    if (!containerRef.current) return;
-    const obs = new ResizeObserver((entries) => {
-      const e = entries[0]?.contentRect;
-      if (e) setDims({ w: Math.floor(e.width), h: Math.floor(e.height) });
-    });
-    obs.observe(containerRef.current);
-    return () => obs.disconnect();
-  }, []);
-
-  const fetchData = () => {
-    if (!hostId) return;
-    getMetricsHistory(hostId, { range })
-      .then((res) => {
-        const vals = res.rows
-          .map((r) => getMetricValue(r, metric))
-          .filter((v): v is number => v != null);
-        setValues(vals);
-        setLoading(false);
-      })
-      .catch(() => setLoading(false));
-  };
-
-  useEffect(() => {
-    fetchData();
-    return runVisibleInterval(() => {
-      void fetchData();
-    }, 60_000);
-  }, [hostId, metric, range]);
-
-  const accent = getAccentColor();
-  const current = values.length > 0 ? values[values.length - 1] : null;
-  const unit = getMetricUnit(metric);
-  const label = getMetricLabel(metric, t);
-
-  if (!hostId) {
-    return (
-      <div className="flex items-center justify-center w-full h-full text-xs text-muted-foreground">
-        {t("homepage.noHostSelected")}
-      </div>
-    );
-  }
-
-  return (
-    <div className="flex flex-col w-full h-full overflow-hidden">
-      <WidgetTitle title={widget.title} icon={<TrendingUp size={11} />} />
-      <div className="flex flex-col flex-1 p-2 gap-1 overflow-hidden">
-        <div className="flex items-center justify-between gap-1 shrink-0">
-          <div className="flex flex-col min-w-0">
-            <span className="text-[10px] font-semibold text-foreground truncate">
-              {hostName ?? `Host #${hostId}`}
-            </span>
-            <span className="flex gap-2 text-[9px] text-muted-foreground">
-              <span className="truncate">{label}</span>
-              <span className="shrink-0">{range}</span>
-            </span>
-          </div>
-          {showCurrentValue && current != null && (
-            <span
-              className="text-sm font-bold tabular-nums shrink-0"
-              style={{ color: accent }}
-            >
-              {metric === "net_rx" || metric === "net_tx"
-                ? current.toFixed(2)
-                : Math.round(current)}
-              {unit}
-            </span>
-          )}
-        </div>
-
-        <div ref={containerRef} className="flex-1 min-h-0 relative">
-          {loading ? (
-            <div className="absolute inset-0 flex items-center justify-center text-[10px] text-muted-foreground/60">
-              {t("homepage.loading")}
-            </div>
-          ) : values.length < 2 ? (
-            <div className="absolute inset-0 flex items-center justify-center text-[10px] text-muted-foreground/60">
-              {t("homepage.noData")}
-            </div>
-          ) : (
-            dims.w > 0 &&
-            dims.h > 0 && (
-              <Sparkline
-                values={values}
-                width={dims.w}
-                height={dims.h}
-                color={accent}
-              />
-            )
-          )}
-        </div>
-      </div>
-    </div>
-  );
-}
-
-/** Registered by the plugin while it runs. */
-export const metricsChartWidget: WidgetDefinition<MetricsChartConfig> = {
-  id: "metrics_chart",
-  name: "Metrics Chart",
-  description: "Historical CPU, memory, disk, or network chart for a host",
-  category: "monitoring",
-  icon: <TrendingUp size={14} />,
-  defaultConfig: {
-    hostId: 0,
-    metric: "cpu",
-    range: "1h",
-    showCurrentValue: true,
-  },
-  defaultSize: { w: GRID_SIZE * 12, h: GRID_SIZE * 6 },
-  minSize: { w: GRID_SIZE * 6, h: GRID_SIZE * 4 },
-  components: { view: MetricsChartWidget, editForm: MetricsChartEditForm },
-};
-
-export { MetricsChartWidget };
diff --git a/plugins/host-metrics/src/frontend/SummaryViews.tsx b/plugins/host-metrics/src/frontend/SummaryViews.tsx
deleted file mode 100644
index cc017f5d6..000000000
--- a/plugins/host-metrics/src/frontend/SummaryViews.tsx
+++ /dev/null
@@ -1,269 +0,0 @@
-import { usePermission, useTranslation } from "@termix/plugin-sdk/frontend";
-import type { MetricsSummaryStore } from "./summary-store";
-import { useMetricsSummary } from "./summary-store";
-
-type MetricKey =
-  "cpu" | "memory" | "disk" | "uptime" | "system" | "network" | "processes";
-
-function RowBar({ label, value }: { label: string; value: number }) {
-  const tone =
-    value >= 90
-      ? ["bg-red-500", "text-red-400"]
-      : value >= 70
-        ? ["bg-yellow-500", "text-yellow-400"]
-        : ["bg-accent-brand", "text-accent-brand"];
-  return (
-    <div className="flex flex-col gap-0.5 w-16">
-      <div className="flex items-center justify-between">
-        <span className="text-[10px] text-muted-foreground">{label}</span>
-        <span className={`text-[10px] font-bold ${tone[1]}`}>
-          {value.toFixed(0)}%
-        </span>
-      </div>
-      <div className="h-0.5 bg-muted w-full">
-        <div className={`h-full ${tone[0]}`} style={{ width: `${value}%` }} />
-      </div>
-    </div>
-  );
-}
-
-/** CPU, RAM and disk bars in a dashboard host row ("dashboard.hostRow"). */
-export function createDashboardHostMetrics(store: MetricsSummaryStore) {
-  return function DashboardHostMetrics(props: Record<string, unknown>) {
-    const { t } = useTranslation();
-    const allowed = usePermission("use");
-    const hostId = Number(props.hostId) || null;
-    const online = props.online === true;
-    const metrics = useMetricsSummary(store, allowed && online ? hostId : null);
-
-    const cpu = metrics?.cpu?.percent ?? null;
-    const ram = metrics?.memory?.percent ?? null;
-    const disk = metrics?.disk?.percent ?? null;
-    if (!allowed) return null;
-    if (!online || (cpu === null && ram === null && disk === null)) {
-      return (
-        <div className="flex items-center gap-3">
-          {[0, 1, 2].map((slot) => (
-            <span
-              key={slot}
-              className="text-[10px] text-muted-foreground w-16 text-center"
-            >
-              -
-            </span>
-          ))}
-        </div>
-      );
-    }
-    return (
-      <div className="flex items-center gap-3">
-        {cpu !== null && <RowBar label={t("dashboard.cpu")} value={cpu} />}
-        {ram !== null && <RowBar label={t("dashboard.ram")} value={ram} />}
-        {disk !== null && (
-          <RowBar label={t("dashboardTab.disk")} value={disk} />
-        )}
-      </div>
-    );
-  };
-}
-
-function accentColor(): string {
-  return (
-    getComputedStyle(document.documentElement)
-      .getPropertyValue("--accent-brand")
-      .trim() || "#f59145"
-  );
-}
-
-function WidgetBar({
-  label,
-  value,
-  sublabel,
-}: {
-  label: string;
-  value: number | null;
-  sublabel?: string;
-}) {
-  const pct = value ?? 0;
-  const color = pct > 90 ? "#ef4444" : pct > 70 ? "#f97316" : accentColor();
-  return (
-    <div className="flex flex-col gap-0.5">
-      <div className="flex justify-between text-[10px] text-muted-foreground">
-        <span>{label}</span>
-        <span className="text-right">
-          {value != null ? `${Math.round(pct)}%` : "N/A"}
-          {sublabel && <span className="ml-1 opacity-60">{sublabel}</span>}
-        </span>
-      </div>
-      <div className="h-1 bg-muted overflow-hidden">
-        <div
-          className="h-full transition-all"
-          style={{ width: `${pct}%`, background: color }}
-        />
-      </div>
-    </div>
-  );
-}
-
-function InfoRow({
-  label,
-  value,
-}: {
-  label: string;
-  value: string | null | undefined;
-}) {
-  if (!value) return null;
-  return (
-    <div className="flex justify-between text-[10px] gap-2">
-      <span className="text-muted-foreground shrink-0">{label}</span>
-      <span className="text-foreground truncate text-right">{value}</span>
-    </div>
-  );
-}
-
-function formatBytes(n: number): string {
-  if (n >= 1073741824) return `${(n / 1073741824).toFixed(1)} GB`;
-  if (n >= 1048576) return `${(n / 1048576).toFixed(1)} MB`;
-  if (n >= 1024) return `${(n / 1024).toFixed(1)} KB`;
-  return `${n} B`;
-}
-
-/** The numbers under core's homepage host status widget ("homepage.hostMetrics"). */
-export function createHomepageHostMetrics(store: MetricsSummaryStore) {
-  return function HomepageHostMetrics(props: Record<string, unknown>) {
-    const { t } = useTranslation();
-    const allowed = usePermission("use");
-    const hostId = Number(props.hostId) || null;
-    const shown = (
-      Array.isArray(props.shownMetrics) ? props.shownMetrics : []
-    ) as MetricKey[];
-    const online = props.online === true;
-    const metrics = useMetricsSummary(store, allowed ? hostId : null);
-    if (!allowed || shown.length === 0) return null;
-
-    const interfaces = metrics?.network?.interfaces ?? [];
-    const sum = (pick: (iface: (typeof interfaces)[number]) => unknown) =>
-      interfaces.reduce((total, iface) => {
-        const raw = pick(iface);
-        return raw ? total + parseFloat(String(raw)) : total;
-      }, 0);
-    const totalRx = sum((iface) => iface.rxBytes);
-    const totalTx = sum((iface) => iface.txBytes);
-
-    return (
-      <div className="flex flex-col gap-2">
-        {shown.includes("cpu") && (
-          <WidgetBar
-            label={t("homepage.metricCpu")}
-            value={metrics?.cpu?.percent ?? null}
-            sublabel={metrics?.cpu?.cores ? `${metrics.cpu.cores}c` : undefined}
-          />
-        )}
-        {shown.includes("memory") && (
-          <WidgetBar
-            label={t("homepage.metricMemory")}
-            value={metrics?.memory?.percent ?? null}
-            sublabel={
-              metrics?.memory?.usedGiB != null &&
-              metrics?.memory?.totalGiB != null
-                ? `${metrics.memory.usedGiB.toFixed(1)}/${metrics.memory.totalGiB.toFixed(1)} GiB`
-                : undefined
-            }
-          />
-        )}
-        {shown.includes("disk") && (
-          <WidgetBar
-            label={t("homepage.metricDisk")}
-            value={metrics?.disk?.percent ?? null}
-            sublabel={
-              metrics?.disk?.usedHuman && metrics?.disk?.totalHuman
-                ? `${metrics.disk.usedHuman}/${metrics.disk.totalHuman}`
-                : undefined
-            }
-          />
-        )}
-        {shown.includes("uptime") && (
-          <InfoRow
-            label={t("homepage.metricUptime")}
-            value={metrics?.uptime?.formatted ?? null}
-          />
-        )}
-        {shown.includes("system") && metrics?.system && (
-          <div className="flex flex-col gap-0.5 border-t border-border/40 pt-1.5 mt-0.5">
-            <InfoRow
-              label={t("homepage.metricOs")}
-              value={metrics.system.os ?? null}
-            />
-            <InfoRow
-              label={t("homepage.metricKernel")}
-              value={metrics.system.kernel ?? null}
-            />
-            <InfoRow
-              label={t("homepage.metricHostname")}
-              value={metrics.system.hostname ?? null}
-            />
-          </div>
-        )}
-        {shown.includes("network") && interfaces.length > 0 && (
-          <div className="flex flex-col gap-0.5 border-t border-border/40 pt-1.5 mt-0.5">
-            <div className="text-[10px] font-medium text-muted-foreground mb-0.5">
-              {t("homepage.metricNetwork")}
-            </div>
-            {interfaces.slice(0, 3).map((iface) => (
-              <div
-                key={iface.name}
-                className="flex justify-between text-[10px] gap-2"
-              >
-                <span className="text-muted-foreground shrink-0 truncate max-w-[60px]">
-                  {iface.name}
-                </span>
-                <span className="text-foreground">
-                  {iface.ip || iface.state}
-                </span>
-              </div>
-            ))}
-            {(totalRx > 0 || totalTx > 0) && (
-              <div className="flex justify-between text-[10px] gap-2 mt-0.5">
-                <span className="text-muted-foreground">RX/TX</span>
-                <span className="text-foreground">
-                  {formatBytes(totalRx)} / {formatBytes(totalTx)}
-                </span>
-              </div>
-            )}
-          </div>
-        )}
-        {shown.includes("processes") && metrics?.processes && (
-          <div className="flex flex-col gap-0.5 border-t border-border/40 pt-1.5 mt-0.5">
-            <div className="flex justify-between text-[10px]">
-              <span className="text-muted-foreground">
-                {t("homepage.metricProcesses")}
-              </span>
-              <span className="text-foreground">
-                {metrics.processes.total ?? "?"}{" "}
-                {t("homepage.metricProcessesTotal")}
-                {metrics.processes.running != null
-                  ? `, ${metrics.processes.running} ${t("homepage.metricProcessesRunning")}`
-                  : ""}
-              </span>
-            </div>
-            {metrics.processes.top?.slice(0, 3).map((proc) => (
-              <div
-                key={proc.pid}
-                className="flex justify-between text-[10px] gap-2"
-              >
-                <span className="text-muted-foreground truncate max-w-[80px]">
-                  {proc.command}
-                </span>
-                <span className="text-foreground shrink-0">{proc.cpu}%</span>
-              </div>
-            ))}
-          </div>
-        )}
-        {!metrics && online && (
-          <span className="text-[10px] text-muted-foreground/60 italic">
-            {t("homepage.metricsNotAvailable")}
-          </span>
-        )}
-      </div>
-    );
-  };
-}
diff --git a/plugins/host-metrics/src/frontend/TerminalMetricsStatus.tsx b/plugins/host-metrics/src/frontend/TerminalMetricsStatus.tsx
deleted file mode 100644
index ef1dd6ee4..000000000
--- a/plugins/host-metrics/src/frontend/TerminalMetricsStatus.tsx
+++ /dev/null
@@ -1,198 +0,0 @@
-import { useEffect, useState } from "react";
-import {
-  usePluginApi,
-  usePluginApiFor,
-  useTranslation,
-} from "@termix/plugin-sdk/frontend";
-import {
-  cn,
-  getPollingEnvironmentMultiplier,
-  resolveConnectionOrigin,
-  resolveRemoteHostId,
-  runAdaptivePolling,
-} from "@termix/plugin-sdk/ui";
-
-/** What the ssh-terminal plugin hands a "terminal.toolbarStatus" component. */
-interface TerminalToolbarStatusProps {
-  host: {
-    id: number | string;
-    connectionOrigin?: "local" | "remote" | null;
-    syncId?: string | null;
-  };
-  isConnected: boolean;
-  /** Visible on a desktop viewport and connected: poll only while true. */
-  active: boolean;
-}
-
-interface Sample {
-  cpu: number | null;
-  memory: number | null;
-  disk: number | null;
-}
-
-function StatBar({
-  label,
-  percent,
-}: {
-  label: string;
-  percent: number | null;
-}) {
-  const value = percent == null ? null : Math.max(0, Math.min(100, percent));
-  return (
-    <div className="flex items-center gap-1.5 px-1.5">
-      <span className="w-12 shrink-0 text-[10px] font-semibold uppercase tracking-wider text-muted-foreground">
-        {label}
-      </span>
-      <div className="h-1.5 w-12 shrink-0 overflow-hidden rounded-full bg-muted">
-        {value != null && (
-          <div
-            className={cn(
-              "h-full rounded-full transition-all",
-              value >= 90
-                ? "bg-red-500"
-                : value >= 70
-                  ? "bg-yellow-500"
-                  : "bg-accent-brand",
-            )}
-            style={{ width: `${value}%` }}
-          />
-        )}
-      </div>
-      <span className="w-7 shrink-0 text-right text-[10px] tabular-nums text-muted-foreground">
-        {value == null ? "--" : `${Math.round(value)}%`}
-      </span>
-    </div>
-  );
-}
-
-/** CPU, memory and disk bars in the terminal toolbar's expanded view. */
-export function TerminalMetricsStatus(props: Record<string, unknown>) {
-  const { host, active } = props as unknown as TerminalToolbarStatusProps;
-  const { t } = useTranslation();
-  const localApi = usePluginApi();
-  const remoteApi = usePluginApiFor("remote");
-  const [metrics, setMetrics] = useState<Sample | null>(null);
-  const [available, setAvailable] = useState(true);
-  const hostId = host?.id ? Number(host.id) : null;
-
-  useEffect(() => {
-    if (!active || !hostId) {
-      setMetrics(null);
-      return;
-    }
-    let cancelled = false;
-    let stopPolling: (() => void) | undefined;
-    let viewerSessionId: string | undefined;
-    let previous: Sample | null = null;
-    // A host on the desktop app's remote server has its own id there.
-    let api = localApi;
-    let targetId: number = hostId;
-    setAvailable(true);
-
-    const poll = async () => {
-      try {
-        const response = await api.get<{
-          cpu?: { percent?: number };
-          memory?: { percent?: number };
-          disk?: { percent?: number };
-        } | null>(`/metrics/${targetId}`, {
-          validateStatus: (status: number) => status === 200 || status === 404,
-        });
-        const data = response.data;
-        if (cancelled || !data) return;
-        const next: Sample = {
-          cpu: data.cpu?.percent ?? null,
-          memory: data.memory?.percent ?? null,
-          disk: data.disk?.percent ?? null,
-        };
-        const changed =
-          !previous ||
-          (["cpu", "memory", "disk"] as const).some((key) => {
-            const before = previous?.[key];
-            const now = next[key];
-            return before == null || now == null || Math.abs(now - before) >= 2;
-          });
-        previous = next;
-        setMetrics(next);
-        return changed;
-      } catch {
-        // Keep the previous sample after a transient polling error.
-        return false;
-      }
-    };
-
-    const start = async () => {
-      try {
-        if ((await resolveConnectionOrigin(host)) === "remote") {
-          const remoteId = await resolveRemoteHostId(host.syncId);
-          if (cancelled) return;
-          if (remoteId === null) {
-            setAvailable(false);
-            return;
-          }
-          api = remoteApi;
-          targetId = remoteId;
-        }
-        const { data } = await api.post<{
-          requires_totp?: boolean;
-          viewerSessionId?: string;
-        }>(`/metrics/start/${targetId}`);
-        if (cancelled) {
-          if (data.viewerSessionId) {
-            void api
-              .post(`/metrics/stop/${targetId}`, {
-                viewerSessionId: data.viewerSessionId,
-              })
-              .catch(() => {});
-          }
-          return;
-        }
-        if (data.requires_totp) {
-          setAvailable(false);
-          return;
-        }
-        viewerSessionId = data.viewerSessionId;
-        stopPolling = runAdaptivePolling(
-          poll,
-          {
-            minIntervalMs: 5_000,
-            maxIntervalMs: 20_000,
-            stablePollsPerStep: 2,
-            maxRequestDutyCycle: 0.2,
-          },
-          { intervalMultiplier: getPollingEnvironmentMultiplier },
-        );
-      } catch {
-        if (!cancelled) setAvailable(false);
-      }
-    };
-    void start();
-
-    return () => {
-      cancelled = true;
-      stopPolling?.();
-      void api
-        .post(`/metrics/stop/${targetId}`, { viewerSessionId })
-        .catch(() => {});
-    };
-  }, [active, hostId, localApi, remoteApi]); // eslint-disable-line react-hooks/exhaustive-deps
-
-  if (!available) {
-    return (
-      <span role="status" className="px-2 py-1 text-xs text-muted-foreground">
-        {t("terminalStatus.unavailable")}
-      </span>
-    );
-  }
-
-  return (
-    <>
-      <StatBar label={t("hostMetrics.cpu")} percent={metrics?.cpu ?? null} />
-      <StatBar
-        label={t("hostMetrics.memory")}
-        percent={metrics?.memory ?? null}
-      />
-      <StatBar label={t("hostMetrics.disk")} percent={metrics?.disk ?? null} />
-    </>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/CardTimeTabs.tsx b/plugins/host-metrics/src/frontend/cards/CardTimeTabs.tsx
deleted file mode 100644
index 0b5691d68..000000000
--- a/plugins/host-metrics/src/frontend/cards/CardTimeTabs.tsx
+++ /dev/null
@@ -1,34 +0,0 @@
-import { cn } from "@termix/plugin-sdk/ui";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-export type HistoryTab = "live" | "1h" | "6h" | "24h" | "7d";
-
-const TABS: HistoryTab[] = ["live", "1h", "6h", "24h", "7d"];
-
-export function CardTimeTabs({
-  value,
-  onChange,
-}: {
-  value: HistoryTab;
-  onChange: (tab: HistoryTab) => void;
-}) {
-  const { t } = useTranslation();
-  return (
-    <div className="flex items-center gap-0.5">
-      {TABS.map((tab) => (
-        <button
-          key={tab}
-          onClick={() => onChange(tab)}
-          className={cn(
-            "px-2 py-0.5 text-[10px] font-semibold uppercase tracking-widest transition-colors border",
-            value === tab
-              ? "border-accent-brand bg-accent-brand/10 text-accent-brand"
-              : "border-transparent text-muted-foreground hover:text-foreground",
-          )}
-        >
-          {tab === "live" ? t("hostMetrics.tabLive") : tab}
-        </button>
-      ))}
-    </div>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/CpuCard.tsx b/plugins/host-metrics/src/frontend/cards/CpuCard.tsx
deleted file mode 100644
index 4eaf8fe5d..000000000
--- a/plugins/host-metrics/src/frontend/cards/CpuCard.tsx
+++ /dev/null
@@ -1,128 +0,0 @@
-import {
-  RadialGauge,
-  Sparkline,
-  MiniStat,
-  MetricCard,
-  LineChart,
-  type LineChartSeries,
-} from "@termix/plugin-sdk/ui";
-import { type ServerMetrics } from "../../shared/metrics.js";
-import { useState, useEffect } from "react";
-import { Cpu } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { type MetricsHistoryRow, useHostMetricsApi } from "../host-metrics-api";
-import { CardTimeTabs, type HistoryTab } from "./CardTimeTabs";
-
-export function CpuCard({
-  metrics,
-  history,
-  hostId,
-}: {
-  metrics: ServerMetrics | null;
-  history: number[];
-  hostId: number | null;
-}) {
-  const { getMetricsHistory } = useHostMetricsApi();
-  const { t } = useTranslation();
-  const [activeTab, setActiveTab] = useState<HistoryTab>("live");
-  const [rows, setRows] = useState<MetricsHistoryRow[] | null>(null);
-  const [loading, setLoading] = useState(false);
-
-  useEffect(() => {
-    if (activeTab === "live" || hostId == null) return;
-    let cancelled = false;
-    setLoading(true);
-    setRows(null);
-    getMetricsHistory(hostId, { range: activeTab })
-      .then((res) => {
-        if (!cancelled) {
-          setRows(res.rows);
-          setLoading(false);
-        }
-      })
-      .catch(() => {
-        if (!cancelled) setLoading(false);
-      });
-    return () => {
-      cancelled = true;
-    };
-  }, [activeTab, hostId]);
-
-  const percent = metrics?.cpu?.percent ?? null;
-  const cores = metrics?.cpu?.cores ?? null;
-  const load = metrics?.cpu?.load ?? null;
-
-  const series: LineChartSeries[] = [
-    {
-      key: "cpu",
-      label: t("hostMetrics.cpuUsage"),
-      color: "var(--accent-brand)",
-      data: rows?.map((r) => r.cpu_percent) ?? [],
-    },
-  ];
-  const timestamps = rows?.map((r) => r.ts) ?? [];
-
-  return (
-    <MetricCard
-      title={t("hostMetrics.cpuUsage")}
-      icon={<Cpu className="size-3.5" />}
-      action={
-        hostId != null ? (
-          <CardTimeTabs value={activeTab} onChange={setActiveTab} />
-        ) : undefined
-      }
-    >
-      <div className="flex flex-col gap-3">
-        {activeTab === "live" && (
-          <div className="flex items-center gap-4">
-            <RadialGauge
-              value={percent}
-              caption={
-                cores !== null
-                  ? t("hostMetrics.cpuCores", { count: cores })
-                  : undefined
-              }
-            />
-            <div className="flex min-w-0 flex-1 flex-col gap-2">
-              {load && (
-                <div className="grid grid-cols-3 gap-2">
-                  <MiniStat caption="1m" value={load[0].toFixed(2)} />
-                  <MiniStat caption="5m" value={load[1].toFixed(2)} />
-                  <MiniStat caption="15m" value={load[2].toFixed(2)} />
-                </div>
-              )}
-              <Sparkline
-                data={[...history, percent ?? 0]}
-                domain={[0, 100]}
-                height={48}
-              />
-            </div>
-          </div>
-        )}
-        {activeTab !== "live" && (
-          <>
-            {loading && (
-              <div className="flex h-36 items-center justify-center text-xs text-muted-foreground">
-                {t("common.loading")}
-              </div>
-            )}
-            {!loading && rows !== null && rows.length === 0 && (
-              <div className="flex h-36 items-center justify-center text-xs text-muted-foreground">
-                {t("metricsHistory.noData")}
-              </div>
-            )}
-            {!loading && rows !== null && rows.length > 0 && (
-              <LineChart
-                series={series}
-                timestamps={timestamps}
-                domain={[0, 100]}
-                yFormatter={(v) => `${v.toFixed(0)}%`}
-                height={160}
-              />
-            )}
-          </>
-        )}
-      </div>
-    </MetricCard>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/DiskCard.tsx b/plugins/host-metrics/src/frontend/cards/DiskCard.tsx
deleted file mode 100644
index 68dd25367..000000000
--- a/plugins/host-metrics/src/frontend/cards/DiskCard.tsx
+++ /dev/null
@@ -1,170 +0,0 @@
-import {
-  RadialGauge,
-  Sparkline,
-  MiniStat,
-  MetricCard,
-  LineChart,
-  type LineChartSeries,
-} from "@termix/plugin-sdk/ui";
-import { type ServerMetrics } from "../../shared/metrics.js";
-import { useState, useEffect, useMemo } from "react";
-import { HardDrive } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { FilesystemPicker } from "./FilesystemPicker";
-import { type MetricsHistoryRow, useHostMetricsApi } from "../host-metrics-api";
-import { CardTimeTabs, type HistoryTab } from "./CardTimeTabs";
-
-export function DiskCard({
-  metrics,
-  history,
-  hostId,
-}: {
-  metrics: ServerMetrics | null;
-  history: number[];
-  hostId: number | null;
-}) {
-  const { getMetricsHistory } = useHostMetricsApi();
-  const { t } = useTranslation();
-  const [activeTab, setActiveTab] = useState<HistoryTab>("live");
-  const [rows, setRows] = useState<MetricsHistoryRow[] | null>(null);
-  const [loading, setLoading] = useState(false);
-
-  useEffect(() => {
-    if (activeTab === "live" || hostId == null) return;
-    let cancelled = false;
-    setLoading(true);
-    setRows(null);
-    getMetricsHistory(hostId, { range: activeTab })
-      .then((res) => {
-        if (!cancelled) {
-          setRows(res.rows);
-          setLoading(false);
-        }
-      })
-      .catch(() => {
-        if (!cancelled) setLoading(false);
-      });
-    return () => {
-      cancelled = true;
-    };
-  }, [activeTab, hostId]);
-
-  const filesystems = useMemo(
-    () => metrics?.disk?.filesystems ?? [],
-    [metrics?.disk?.filesystems],
-  );
-  const defaultMount = metrics?.disk?.mount ?? null;
-  const [selectedMount, setSelectedMount] = useState<string | null>(null);
-
-  // Drop a stale selection if the mount disappears between polls, so the card
-  // falls back to the primary filesystem instead of rendering nothing.
-  useEffect(() => {
-    if (
-      selectedMount !== null &&
-      filesystems.length > 0 &&
-      !filesystems.some((fs) => fs.mount === selectedMount)
-    ) {
-      setSelectedMount(null);
-    }
-  }, [filesystems, selectedMount]);
-
-  const activeMount = selectedMount ?? defaultMount;
-  const activeFs = filesystems.find((fs) => fs.mount === activeMount) ?? null;
-  const isCustomMount = selectedMount !== null && activeFs !== null;
-
-  const percent = isCustomMount
-    ? activeFs.percent
-    : (metrics?.disk?.percent ?? null);
-  const usedHuman = isCustomMount
-    ? activeFs.usedHuman
-    : (metrics?.disk?.usedHuman ?? null);
-  const totalHuman = isCustomMount
-    ? activeFs.totalHuman
-    : (metrics?.disk?.totalHuman ?? null);
-  const availableHuman = isCustomMount
-    ? activeFs.availableHuman
-    : (metrics?.disk?.availableHuman ?? null);
-
-  const series: LineChartSeries[] = [
-    {
-      key: "disk",
-      label: t("hostMetrics.diskUsage"),
-      color: "var(--chart-4)",
-      data: rows?.map((r) => r.disk_percent) ?? [],
-    },
-  ];
-  const timestamps = rows?.map((r) => r.ts) ?? [];
-
-  return (
-    <MetricCard
-      title={t("hostMetrics.diskUsage")}
-      icon={<HardDrive className="size-3.5" />}
-      action={
-        <div className="flex items-center gap-1.5">
-          {activeTab === "live" && (
-            <FilesystemPicker
-              filesystems={filesystems}
-              value={activeMount}
-              onChange={setSelectedMount}
-            />
-          )}
-          {hostId != null && (
-            <CardTimeTabs value={activeTab} onChange={setActiveTab} />
-          )}
-        </div>
-      }
-    >
-      <div className="flex flex-col gap-3">
-        {activeTab === "live" && (
-          <div className="flex items-center gap-4">
-            <RadialGauge value={percent} />
-            <div className="flex min-w-0 flex-1 flex-col gap-2">
-              <div className="grid grid-cols-2 gap-2">
-                <MiniStat
-                  caption={activeMount ?? t("hostMetrics.disk")}
-                  value={
-                    usedHuman && totalHuman
-                      ? `${usedHuman}/${totalHuman}`
-                      : "N/A"
-                  }
-                />
-                <MiniStat
-                  caption={t("hostMetrics.available")}
-                  value={availableHuman ?? "N/A"}
-                />
-              </div>
-              <Sparkline
-                data={[...history, percent ?? 0]}
-                domain={[0, 100]}
-                height={48}
-              />
-            </div>
-          </div>
-        )}
-        {activeTab !== "live" && (
-          <>
-            {loading && (
-              <div className="flex h-36 items-center justify-center text-xs text-muted-foreground">
-                {t("common.loading")}
-              </div>
-            )}
-            {!loading && rows !== null && rows.length === 0 && (
-              <div className="flex h-36 items-center justify-center text-xs text-muted-foreground">
-                {t("metricsHistory.noData")}
-              </div>
-            )}
-            {!loading && rows !== null && rows.length > 0 && (
-              <LineChart
-                series={series}
-                timestamps={timestamps}
-                domain={[0, 100]}
-                yFormatter={(v) => `${v.toFixed(0)}%`}
-                height={160}
-              />
-            )}
-          </>
-        )}
-      </div>
-    </MetricCard>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/FilesystemPicker.tsx b/plugins/host-metrics/src/frontend/cards/FilesystemPicker.tsx
deleted file mode 100644
index ccd2b3174..000000000
--- a/plugins/host-metrics/src/frontend/cards/FilesystemPicker.tsx
+++ /dev/null
@@ -1,82 +0,0 @@
-import {
-  cn,
-  DropdownMenu,
-  DropdownMenuTrigger,
-  DropdownMenuContent,
-  DropdownMenuItem,
-} from "@termix/plugin-sdk/ui";
-import { type DiskFilesystem } from "../../shared/metrics.js";
-import { ChevronDown, Check } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-export function FilesystemPicker({
-  filesystems,
-  value,
-  onChange,
-  align = "end",
-  className,
-}: {
-  filesystems: DiskFilesystem[];
-  value: string | null;
-  onChange: (mount: string) => void;
-  align?: "start" | "end";
-  className?: string;
-}) {
-  const { t } = useTranslation();
-
-  if (filesystems.length <= 1) return null;
-
-  const selected = filesystems.find((fs) => fs.mount === value);
-
-  return (
-    <DropdownMenu>
-      <DropdownMenuTrigger
-        className={cn(
-          "flex max-w-[160px] items-center gap-1 border border-border px-2 py-0.5 text-[10px] font-semibold uppercase tracking-widest text-muted-foreground transition-colors hover:text-foreground",
-          className,
-        )}
-        title={t("hostMetrics.selectFilesystem")}
-      >
-        <span className="truncate">
-          {selected?.label || selected?.mount || value || "-"}
-        </span>
-        <ChevronDown className="size-3 shrink-0" />
-      </DropdownMenuTrigger>
-      <DropdownMenuContent
-        align={align}
-        className="w-auto min-w-[220px] max-w-[min(360px,calc(100vw-2rem))]"
-      >
-        {filesystems.map((fs) => (
-          <DropdownMenuItem
-            key={fs.mount}
-            onSelect={() => onChange(fs.mount)}
-            className="gap-3"
-          >
-            <Check
-              className={cn(
-                "size-3 shrink-0",
-                fs.mount === value ? "opacity-100" : "opacity-0",
-              )}
-            />
-            <span className="min-w-0 flex-1 truncate font-medium">
-              {fs.label || fs.mount}
-            </span>
-            {fs.label && (
-              <span className="max-w-24 truncate font-mono text-[10px] text-muted-foreground">
-                {fs.mount}
-              </span>
-            )}
-            <span className="ml-auto flex shrink-0 gap-2 whitespace-nowrap text-[10px] tabular-nums text-muted-foreground">
-              <span>
-                {fs.usedHuman && fs.totalHuman
-                  ? `${fs.usedHuman}/${fs.totalHuman}`
-                  : "N/A"}
-              </span>
-              {fs.percent != null && <span>{fs.percent}%</span>}
-            </span>
-          </DropdownMenuItem>
-        ))}
-      </DropdownMenuContent>
-    </DropdownMenu>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/FirewallCard.tsx b/plugins/host-metrics/src/frontend/cards/FirewallCard.tsx
deleted file mode 100644
index 75a87faf2..000000000
--- a/plugins/host-metrics/src/frontend/cards/FirewallCard.tsx
+++ /dev/null
@@ -1,56 +0,0 @@
-import { MetricCard } from "@termix/plugin-sdk/ui";
-import { type ServerMetrics } from "../../shared/metrics.js";
-import { ShieldCheck } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-export function FirewallCard({ metrics }: { metrics: ServerMetrics | null }) {
-  const { t } = useTranslation();
-  const fw = metrics?.firewall;
-
-  const totalRules =
-    fw?.chains?.reduce((sum, c) => sum + (c.rules?.length ?? 0), 0) ?? 0;
-
-  return (
-    <MetricCard
-      title={t("hostMetrics.firewall.title")}
-      icon={<ShieldCheck className="size-3.5" />}
-    >
-      {!fw || fw.type === "none" ? (
-        <span className="text-xs text-muted-foreground">
-          {t("hostMetrics.firewall.noData")}
-        </span>
-      ) : (
-        <div className="flex flex-col gap-2">
-          <div className="flex items-center gap-2">
-            <span
-              className={`text-xs font-semibold uppercase tracking-wide ${
-                fw.status === "active"
-                  ? "text-accent-brand"
-                  : "text-muted-foreground"
-              }`}
-            >
-              {fw.status === "inactive"
-                ? t("hostMetrics.firewall.inactive")
-                : fw.status}
-            </span>
-            <span className="font-mono text-xs text-muted-foreground">
-              {fw.type}
-            </span>
-          </div>
-          <div className="flex items-center gap-4 text-xs text-muted-foreground">
-            <span>
-              <span className="font-bold text-foreground">
-                {fw.chains?.length ?? 0}
-              </span>{" "}
-              {t("hostMetrics.firewall.chains")}
-            </span>
-            <span>
-              <span className="font-bold text-foreground">{totalRules}</span>{" "}
-              {t("hostMetrics.firewall.rules")}
-            </span>
-          </div>
-        </div>
-      )}
-    </MetricCard>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/GpuCard.tsx b/plugins/host-metrics/src/frontend/cards/GpuCard.tsx
deleted file mode 100644
index 1531365c2..000000000
--- a/plugins/host-metrics/src/frontend/cards/GpuCard.tsx
+++ /dev/null
@@ -1,210 +0,0 @@
-import {
-  MiniStat,
-  RadialGauge,
-  Sparkline,
-  StatRow,
-  MetricCard,
-} from "@termix/plugin-sdk/ui";
-import { type ServerMetrics } from "../../shared/metrics.js";
-import { type GpuDevice, type GpuProcess } from "../../shared/stats-widgets.js";
-import { useId } from "react";
-import { Gpu } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import type { GpuHistories, GpuHistory } from "./gpu-history";
-
-const NA = "N/A";
-const EMPTY_HISTORY: GpuHistory = { utilization: [], memory: [] };
-
-function formatGiB(mib: number | null): string {
-  return mib === null ? NA : (mib / 1024).toFixed(1);
-}
-
-function formatVram(gpu: GpuDevice): string {
-  return gpu.memoryUsedMiB === null || gpu.memoryTotalMiB === null
-    ? NA
-    : `${formatGiB(gpu.memoryUsedMiB)}/${formatGiB(gpu.memoryTotalMiB)}G`;
-}
-
-function formatWhole(value: number | null, unit: string): string {
-  return value === null ? NA : `${Math.round(value)}${unit}`;
-}
-
-function formatPower(gpu: GpuDevice): string {
-  if (gpu.powerDrawWatts === null && gpu.powerLimitWatts === null) return NA;
-  return `${formatWhole(gpu.powerDrawWatts, "")}/${formatWhole(gpu.powerLimitWatts, "")}W`;
-}
-
-function processVram(process: GpuProcess): string {
-  const vram =
-    process.memoryUsedMiB === null
-      ? NA
-      : `${formatGiB(process.memoryUsedMiB)}G`;
-  return process.gpuIndex === null ? vram : `${vram} (GPU ${process.gpuIndex})`;
-}
-
-function executableName(path: string): string {
-  return path.split(/[\\/]/).pop() || path;
-}
-
-/** A captioned 0-100% sparkline, so the two trends under each GPU are told apart. */
-function TrendSparkline({
-  caption,
-  data,
-  colorClassName,
-}: {
-  caption: string;
-  data: number[];
-  colorClassName?: string;
-}) {
-  const captionId = useId();
-
-  return (
-    <figure aria-labelledby={captionId} className="flex min-w-0 flex-col gap-1">
-      <figcaption
-        id={captionId}
-        className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground"
-      >
-        {caption}
-      </figcaption>
-      <Sparkline
-        data={data}
-        domain={[0, 100]}
-        height={36}
-        colorClassName={colorClassName}
-      />
-    </figure>
-  );
-}
-
-function GpuDeviceRow({
-  gpu,
-  history,
-}: {
-  gpu: GpuDevice;
-  history: GpuHistory;
-}) {
-  const { t } = useTranslation();
-
-  return (
-    <div className="flex flex-col gap-2">
-      <div className="flex min-w-0 items-baseline gap-1.5 text-xs">
-        <span className="font-mono text-muted-foreground">#{gpu.index}</span>
-        <span className="truncate font-semibold">{gpu.name}</span>
-      </div>
-      <div className="flex items-center gap-4">
-        <RadialGauge
-          value={gpu.utilizationPercent}
-          size={96}
-          caption={t("hostMetrics.gpu.utilization")}
-        />
-        <div className="flex min-w-0 flex-1 flex-col gap-2">
-          <div className="grid grid-cols-2 gap-2 sm:grid-cols-4">
-            <MiniStat
-              caption={t("hostMetrics.gpu.memory")}
-              value={formatVram(gpu)}
-            />
-            <MiniStat
-              caption={t("hostMetrics.gpu.temperature")}
-              value={formatWhole(gpu.temperatureCelsius, "°C")}
-            />
-            <MiniStat
-              caption={t("hostMetrics.gpu.power")}
-              value={formatPower(gpu)}
-            />
-            <MiniStat
-              caption={t("hostMetrics.gpu.fan")}
-              value={formatWhole(gpu.fanPercent, "%")}
-            />
-          </div>
-          <div className="grid grid-cols-2 gap-2">
-            <TrendSparkline
-              caption={t("hostMetrics.gpu.utilization")}
-              data={[...history.utilization, gpu.utilizationPercent ?? 0]}
-            />
-            <TrendSparkline
-              caption={t("hostMetrics.gpu.memory")}
-              data={[...history.memory, gpu.memoryPercent ?? 0]}
-              colorClassName="text-muted-foreground"
-            />
-          </div>
-        </div>
-      </div>
-    </div>
-  );
-}
-
-export function GpuCard({
-  metrics,
-  gpuHistories,
-}: {
-  metrics: ServerMetrics | null;
-  gpuHistories: GpuHistories;
-}) {
-  const { t } = useTranslation();
-  const gpus = metrics?.gpu?.gpus ?? [];
-  const processes = metrics?.gpu?.processes ?? [];
-  const driverVersion = gpus[0]?.driverVersion;
-
-  return (
-    <MetricCard
-      title={t("hostMetrics.gpu.title")}
-      icon={<Gpu className="size-3.5" />}
-      action={
-        driverVersion ? (
-          <span className="font-mono text-[10px] text-muted-foreground">
-            {t("hostMetrics.gpu.driver", { version: driverVersion })}
-          </span>
-        ) : undefined
-      }
-      scroll={gpus.length > 2 || processes.length > 6}
-      scrollMax={520}
-    >
-      {gpus.length === 0 ? (
-        <span className="text-xs text-muted-foreground">
-          {t("hostMetrics.gpu.noDevice")}
-        </span>
-      ) : (
-        <div className="flex flex-col gap-4">
-          {gpus.map((gpu) => (
-            <GpuDeviceRow
-              key={gpu.index}
-              gpu={gpu}
-              history={gpuHistories[gpu.index] ?? EMPTY_HISTORY}
-            />
-          ))}
-
-          <div className="flex flex-col">
-            <span className="mb-1 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hostMetrics.gpu.processes")}
-            </span>
-            {processes.length === 0 ? (
-              <span className="text-xs text-muted-foreground">
-                {t("hostMetrics.gpu.noProcesses")}
-              </span>
-            ) : (
-              <div className="flex flex-col divide-y divide-border">
-                {processes.map((process) => (
-                  <StatRow
-                    key={`${process.gpuIndex}-${process.pid}`}
-                    label={
-                      <span className="flex items-baseline gap-1.5">
-                        <span title={process.name} className="text-foreground">
-                          {executableName(process.name)}
-                        </span>
-                        <span className="font-mono text-[10px]">
-                          {process.pid}
-                        </span>
-                      </span>
-                    }
-                    value={processVram(process)}
-                    mono
-                  />
-                ))}
-              </div>
-            )}
-          </div>
-        </div>
-      )}
-    </MetricCard>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/LoginStatsCard.tsx b/plugins/host-metrics/src/frontend/cards/LoginStatsCard.tsx
deleted file mode 100644
index 5e0017eec..000000000
--- a/plugins/host-metrics/src/frontend/cards/LoginStatsCard.tsx
+++ /dev/null
@@ -1,62 +0,0 @@
-import { MetricCard } from "@termix/plugin-sdk/ui";
-import { type ServerMetrics } from "../../shared/metrics.js";
-import { UserCheck, UserX } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-export function LoginStatsCard({ metrics }: { metrics: ServerMetrics | null }) {
-  const { t } = useTranslation();
-  const loginStats = metrics?.login_stats;
-  const recentLogins = loginStats?.recentLogins ?? [];
-  const failedLogins = loginStats?.failedLogins ?? [];
-
-  const allLogins = [
-    ...recentLogins.map((l) => ({ ...l, status: "success" as const })),
-    ...failedLogins.map((l) => ({ ...l, status: "failed" as const })),
-  ]
-    .sort((a, b) => new Date(b.time).getTime() - new Date(a.time).getTime())
-    .slice(0, 10);
-
-  return (
-    <MetricCard
-      title={t("hostMetrics.loginStats")}
-      icon={<UserCheck className="size-3.5" />}
-      scroll
-    >
-      {allLogins.length === 0 ? (
-        <span className="py-2 text-xs italic text-muted-foreground">
-          {t("hostMetrics.noRecentLoginData")}
-        </span>
-      ) : (
-        <div className="flex flex-col gap-2">
-          {allLogins.map((login, i) => (
-            <div
-              key={i}
-              className={`flex items-center justify-between border p-2 ${login.status === "success" ? "border-border bg-muted/30" : "border-destructive/30 bg-destructive/5"}`}
-            >
-              <div className="flex min-w-0 flex-col">
-                <div className="flex items-center gap-1.5">
-                  {login.status === "failed" ? (
-                    <UserX className="size-3 shrink-0 text-destructive" />
-                  ) : (
-                    <UserCheck className="size-3 shrink-0 text-accent-brand" />
-                  )}
-                  <span
-                    className={`truncate text-xs font-bold ${login.status === "failed" ? "text-destructive" : ""}`}
-                  >
-                    {login.user}
-                  </span>
-                </div>
-                <span className="truncate font-mono text-[10px] text-muted-foreground">
-                  {login.ip}
-                </span>
-              </div>
-              <span className="shrink-0 text-[10px] text-muted-foreground">
-                {new Date(login.time).toLocaleTimeString()}
-              </span>
-            </div>
-          ))}
-        </div>
-      )}
-    </MetricCard>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/MemoryCard.tsx b/plugins/host-metrics/src/frontend/cards/MemoryCard.tsx
deleted file mode 100644
index 18386e3f2..000000000
--- a/plugins/host-metrics/src/frontend/cards/MemoryCard.tsx
+++ /dev/null
@@ -1,130 +0,0 @@
-import {
-  RadialGauge,
-  Sparkline,
-  MiniStat,
-  MetricCard,
-  LineChart,
-  type LineChartSeries,
-} from "@termix/plugin-sdk/ui";
-import { type ServerMetrics } from "../../shared/metrics.js";
-import { useState, useEffect } from "react";
-import { MemoryStick } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { type MetricsHistoryRow, useHostMetricsApi } from "../host-metrics-api";
-import { CardTimeTabs, type HistoryTab } from "./CardTimeTabs";
-
-export function MemoryCard({
-  metrics,
-  history,
-  hostId,
-}: {
-  metrics: ServerMetrics | null;
-  history: number[];
-  hostId: number | null;
-}) {
-  const { getMetricsHistory } = useHostMetricsApi();
-  const { t } = useTranslation();
-  const [activeTab, setActiveTab] = useState<HistoryTab>("live");
-  const [rows, setRows] = useState<MetricsHistoryRow[] | null>(null);
-  const [loading, setLoading] = useState(false);
-
-  useEffect(() => {
-    if (activeTab === "live" || hostId == null) return;
-    let cancelled = false;
-    setLoading(true);
-    setRows(null);
-    getMetricsHistory(hostId, { range: activeTab })
-      .then((res) => {
-        if (!cancelled) {
-          setRows(res.rows);
-          setLoading(false);
-        }
-      })
-      .catch(() => {
-        if (!cancelled) setLoading(false);
-      });
-    return () => {
-      cancelled = true;
-    };
-  }, [activeTab, hostId]);
-
-  const percent = metrics?.memory?.percent ?? null;
-  const usedGiB = metrics?.memory?.usedGiB ?? null;
-  const totalGiB = metrics?.memory?.totalGiB ?? null;
-  const freeGiB =
-    usedGiB !== null && totalGiB !== null ? totalGiB - usedGiB : null;
-
-  const series: LineChartSeries[] = [
-    {
-      key: "mem",
-      label: t("hostMetrics.memoryUsage"),
-      color: "var(--chart-3)",
-      data: rows?.map((r) => r.mem_percent) ?? [],
-    },
-  ];
-  const timestamps = rows?.map((r) => r.ts) ?? [];
-
-  return (
-    <MetricCard
-      title={t("hostMetrics.memoryUsage")}
-      icon={<MemoryStick className="size-3.5" />}
-      action={
-        hostId != null ? (
-          <CardTimeTabs value={activeTab} onChange={setActiveTab} />
-        ) : undefined
-      }
-    >
-      <div className="flex flex-col gap-3">
-        {activeTab === "live" && (
-          <div className="flex items-center gap-4">
-            <RadialGauge value={percent} />
-            <div className="flex min-w-0 flex-1 flex-col gap-2">
-              <div className="grid grid-cols-2 gap-2">
-                <MiniStat
-                  caption={t("hostMetrics.memory")}
-                  value={
-                    usedGiB !== null && totalGiB !== null
-                      ? `${usedGiB.toFixed(1)}/${totalGiB.toFixed(1)}G`
-                      : "N/A"
-                  }
-                />
-                <MiniStat
-                  caption={t("hostMetrics.free")}
-                  value={freeGiB !== null ? `${freeGiB.toFixed(1)}G` : "N/A"}
-                />
-              </div>
-              <Sparkline
-                data={[...history, percent ?? 0]}
-                domain={[0, 100]}
-                height={48}
-              />
-            </div>
-          </div>
-        )}
-        {activeTab !== "live" && (
-          <>
-            {loading && (
-              <div className="flex h-36 items-center justify-center text-xs text-muted-foreground">
-                {t("common.loading")}
-              </div>
-            )}
-            {!loading && rows !== null && rows.length === 0 && (
-              <div className="flex h-36 items-center justify-center text-xs text-muted-foreground">
-                {t("metricsHistory.noData")}
-              </div>
-            )}
-            {!loading && rows !== null && rows.length > 0 && (
-              <LineChart
-                series={series}
-                timestamps={timestamps}
-                domain={[0, 100]}
-                yFormatter={(v) => `${v.toFixed(0)}%`}
-                height={160}
-              />
-            )}
-          </>
-        )}
-      </div>
-    </MetricCard>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/NetworkCard.tsx b/plugins/host-metrics/src/frontend/cards/NetworkCard.tsx
deleted file mode 100644
index 3c0c2bdf2..000000000
--- a/plugins/host-metrics/src/frontend/cards/NetworkCard.tsx
+++ /dev/null
@@ -1,207 +0,0 @@
-import {
-  MetricCard,
-  LineChart,
-  type LineChartSeries,
-} from "@termix/plugin-sdk/ui";
-import { type ServerMetrics } from "../../shared/metrics.js";
-import { useState, useEffect } from "react";
-import { Cable, Container, Network, Wifi, WifiOff } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { type MetricsHistoryRow, useHostMetricsApi } from "../host-metrics-api";
-import { CardTimeTabs, type HistoryTab } from "./CardTimeTabs";
-
-function ifaceIcon(name: string) {
-  if (/^(wl|wlan|wifi|ath)/.test(name))
-    return <Wifi className="size-3 text-muted-foreground/60" />;
-  if (/^(eth|en|enp|eno|ens)/.test(name))
-    return <Cable className="size-3 text-muted-foreground/60" />;
-  if (/^(docker|br-|veth|virbr|vlan|bond|tun|tap|wg|lo)/.test(name))
-    return <Container className="size-3 text-muted-foreground/60" />;
-  return <Network className="size-3 text-muted-foreground/60" />;
-}
-
-function computeNetRates(rows: MetricsHistoryRow[]): {
-  rxRates: Array<number | null>;
-  txRates: Array<number | null>;
-} {
-  const rxRates: Array<number | null> = [];
-  const txRates: Array<number | null> = [];
-  for (let i = 0; i < rows.length; i++) {
-    if (i === 0) {
-      rxRates.push(null);
-      txRates.push(null);
-      continue;
-    }
-    const prev = rows[i - 1];
-    const curr = rows[i];
-    const dtSec =
-      (new Date(curr.ts).getTime() - new Date(prev.ts).getTime()) / 1000;
-    if (
-      dtSec < 0.5 ||
-      prev.net_rx_bytes == null ||
-      curr.net_rx_bytes == null ||
-      prev.net_tx_bytes == null ||
-      curr.net_tx_bytes == null
-    ) {
-      rxRates.push(null);
-      txRates.push(null);
-      continue;
-    }
-    const rxDelta = curr.net_rx_bytes - prev.net_rx_bytes;
-    const txDelta = curr.net_tx_bytes - prev.net_tx_bytes;
-    rxRates.push(rxDelta < 0 ? null : rxDelta / dtSec);
-    txRates.push(txDelta < 0 ? null : txDelta / dtSec);
-  }
-  return { rxRates, txRates };
-}
-
-function formatBytes(bps: number): string {
-  if (bps >= 1024 * 1024) return `${(bps / 1024 / 1024).toFixed(1)} MB/s`;
-  if (bps >= 1024) return `${(bps / 1024).toFixed(1)} KB/s`;
-  return `${Math.round(bps)} B/s`;
-}
-
-export function NetworkCard({
-  metrics,
-  hostId,
-}: {
-  metrics: ServerMetrics | null;
-  hostId: number | null;
-}) {
-  const { getMetricsHistory } = useHostMetricsApi();
-  const { t } = useTranslation();
-  const [activeTab, setActiveTab] = useState<HistoryTab>("live");
-  const [rows, setRows] = useState<MetricsHistoryRow[] | null>(null);
-  const [loading, setLoading] = useState(false);
-
-  useEffect(() => {
-    if (activeTab === "live" || hostId == null) return;
-    let cancelled = false;
-    setLoading(true);
-    setRows(null);
-    getMetricsHistory(hostId, { range: activeTab })
-      .then((res) => {
-        if (!cancelled) {
-          setRows(res.rows);
-          setLoading(false);
-        }
-      })
-      .catch(() => {
-        if (!cancelled) setLoading(false);
-      });
-    return () => {
-      cancelled = true;
-    };
-  }, [activeTab, hostId]);
-
-  const interfaces = metrics?.network?.interfaces ?? [];
-
-  const { rxRates, txRates } = rows
-    ? computeNetRates(rows)
-    : { rxRates: [], txRates: [] };
-  const netMax = Math.max(
-    rxRates.reduce<number>((m, v) => (v != null && v > m ? v : m), 0),
-    txRates.reduce<number>((m, v) => (v != null && v > m ? v : m), 0),
-    1024,
-  );
-  const timestamps = rows?.map((r) => r.ts) ?? [];
-  const hasNetData = rxRates.some((v) => v !== null);
-
-  const rxSeries: LineChartSeries = {
-    key: "rx",
-    label: t("metricsHistory.download"),
-    color: "var(--chart-2)",
-    data: rxRates,
-  };
-  const txSeries: LineChartSeries = {
-    key: "tx",
-    label: t("metricsHistory.upload"),
-    color: "var(--chart-5)",
-    data: txRates,
-  };
-
-  return (
-    <MetricCard
-      title={t("hostMetrics.networkInterfaces")}
-      icon={<Network className="size-3.5" />}
-      scroll={activeTab === "live"}
-      action={
-        hostId != null ? (
-          <CardTimeTabs value={activeTab} onChange={setActiveTab} />
-        ) : undefined
-      }
-    >
-      {activeTab === "live" &&
-        (interfaces.length === 0 ? (
-          <div className="flex flex-col items-center justify-center gap-2 py-6 text-muted-foreground">
-            <WifiOff className="size-6 opacity-40" />
-            <span className="text-xs">
-              {t("hostMetrics.noInterfacesFound")}
-            </span>
-          </div>
-        ) : (
-          <div className="flex flex-col gap-2">
-            {interfaces.map((iface, i) => (
-              <div
-                key={`${iface.name}-${i}`}
-                className="flex flex-col gap-1 border border-border bg-muted/30 p-2"
-              >
-                <div className="flex items-center justify-between">
-                  <div className="flex items-center gap-2">
-                    {ifaceIcon(iface.name)}
-                    <span
-                      className={`size-1.5 rounded-full ${iface.state === "UP" ? "bg-accent-brand" : "bg-muted-foreground/50"}`}
-                    />
-                    <span className="font-mono text-sm font-bold">
-                      {iface.name}
-                    </span>
-                  </div>
-                  <span className="border border-border px-1.5 py-px text-[10px] font-semibold uppercase text-muted-foreground">
-                    {iface.state}
-                  </span>
-                </div>
-                <div className="flex justify-between font-mono text-[10px] text-muted-foreground">
-                  <span className="truncate">{iface.ip}</span>
-                  {(iface.rxRateBps != null || iface.txRateBps != null) && (
-                    <span className="shrink-0">
-                      &#8595;{" "}
-                      {iface.rxRateBps == null
-                        ? "—"
-                        : formatBytes(iface.rxRateBps)}{" "}
-                      / &#8593;{" "}
-                      {iface.txRateBps == null
-                        ? "—"
-                        : formatBytes(iface.txRateBps)}
-                    </span>
-                  )}
-                </div>
-              </div>
-            ))}
-          </div>
-        ))}
-      {activeTab !== "live" && (
-        <>
-          {loading && (
-            <div className="flex h-36 items-center justify-center text-xs text-muted-foreground">
-              {t("common.loading")}
-            </div>
-          )}
-          {!loading && rows !== null && !hasNetData && (
-            <div className="flex h-36 items-center justify-center text-xs text-muted-foreground">
-              {t("metricsHistory.noData")}
-            </div>
-          )}
-          {!loading && hasNetData && (
-            <LineChart
-              series={[rxSeries, txSeries]}
-              timestamps={timestamps}
-              domain={[0, netMax]}
-              yFormatter={formatBytes}
-              height={160}
-            />
-          )}
-        </>
-      )}
-    </MetricCard>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/PortsCard.tsx b/plugins/host-metrics/src/frontend/cards/PortsCard.tsx
deleted file mode 100644
index ded9f962a..000000000
--- a/plugins/host-metrics/src/frontend/cards/PortsCard.tsx
+++ /dev/null
@@ -1,104 +0,0 @@
-import { MetricCard, Select2 } from "@termix/plugin-sdk/ui";
-import {
-  type ServerMetrics,
-  type ListeningPort,
-} from "../../shared/metrics.js";
-import { useMemo, useState } from "react";
-import { Unplug, Search } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-function formatAddress(addr: string) {
-  return addr === "0.0.0.0" || addr === "*" || addr === "::" ? "*" : addr;
-}
-
-function PortRow({ port }: { port: ListeningPort }) {
-  return (
-    <div className="grid grid-cols-[3.5rem_3rem_1fr_4rem] gap-2 overflow-hidden border-b border-border/50 py-1 font-mono text-xs last:border-0">
-      <span className="truncate font-bold text-accent-brand">
-        {port.localPort}
-      </span>
-      <span className="truncate text-muted-foreground">
-        {port.protocol.toUpperCase()}
-      </span>
-      <span className="truncate font-semibold">
-        {port.process ?? (port.pid ? `PID:${port.pid}` : "—")}
-      </span>
-      <span className="truncate text-right text-muted-foreground">
-        {formatAddress(port.localAddress)}
-      </span>
-    </div>
-  );
-}
-
-export function PortsCard({ metrics }: { metrics: ServerMetrics | null }) {
-  const { t } = useTranslation();
-  const [query, setQuery] = useState("");
-  const [proto, setProto] = useState<"all" | "tcp" | "udp">("all");
-  const ports = useMemo(() => metrics?.ports?.ports ?? [], [metrics]);
-
-  const filtered = useMemo(() => {
-    const q = query.toLowerCase();
-    return ports.filter((p) => {
-      if (proto !== "all" && p.protocol.toLowerCase() !== proto) return false;
-      if (!q) return true;
-      return (
-        String(p.localPort).includes(q) ||
-        (p.process ?? "").toLowerCase().includes(q) ||
-        String(p.pid ?? "").includes(q) ||
-        p.localAddress.toLowerCase().includes(q)
-      );
-    });
-  }, [ports, query, proto]);
-
-  return (
-    <MetricCard
-      title={t("hostMetrics.ports.title")}
-      icon={<Unplug className="size-3.5" />}
-      scroll
-    >
-      <div className="mb-2 flex items-center gap-1.5">
-        <div className="relative flex-1">
-          <Search className="pointer-events-none absolute left-2 top-1/2 size-3 -translate-y-1/2 text-muted-foreground/60" />
-          <input
-            value={query}
-            onChange={(e) => setQuery(e.target.value)}
-            placeholder={t("hostMetrics.ports.search")}
-            className="h-7 w-full border border-border bg-background pl-7 pr-2 text-xs outline-none focus:ring-1 focus:ring-ring"
-          />
-        </div>
-        <Select2
-          value={proto}
-          onChange={(e) => setProto(e.target.value as "all" | "tcp" | "udp")}
-          className="h-7 border border-border bg-background px-1 text-xs"
-        >
-          <option value="all">{t("hostMetrics.ports.allProtocols")}</option>
-          <option value="tcp">TCP</option>
-          <option value="udp">UDP</option>
-        </Select2>
-        <span className="shrink-0 text-[10px] tabular-nums text-muted-foreground">
-          {filtered.length}
-        </span>
-      </div>
-      <div className="flex flex-col">
-        <div className="grid grid-cols-[3.5rem_3rem_1fr_4rem] gap-2 border-b border-border pb-1 text-[10px] font-bold uppercase text-muted-foreground">
-          <span>{t("hostMetrics.ports.port")}</span>
-          <span>{t("hostMetrics.ports.protocol")}</span>
-          <span>{t("hostMetrics.ports.process")}</span>
-          <span className="text-right">{t("hostMetrics.ports.address")}</span>
-        </div>
-        {filtered.length === 0 ? (
-          <span className="py-2 text-xs italic text-muted-foreground">
-            {t("hostMetrics.ports.noData")}
-          </span>
-        ) : (
-          filtered.map((port, i) => (
-            <PortRow
-              key={`${port.protocol}-${port.localPort}-${i}`}
-              port={port}
-            />
-          ))
-        )}
-      </div>
-    </MetricCard>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/ProcessesCard.tsx b/plugins/host-metrics/src/frontend/cards/ProcessesCard.tsx
deleted file mode 100644
index 2d622cf4e..000000000
--- a/plugins/host-metrics/src/frontend/cards/ProcessesCard.tsx
+++ /dev/null
@@ -1,53 +0,0 @@
-import { StatRow, MetricCard } from "@termix/plugin-sdk/ui";
-import { type ServerMetrics } from "../../shared/metrics.js";
-import { Cpu } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-export function ProcessesCard({ metrics }: { metrics: ServerMetrics | null }) {
-  const { t } = useTranslation();
-  const procs = metrics?.processes;
-  const top = procs?.top ?? [];
-
-  return (
-    <MetricCard
-      title={t("hostMetrics.processes")}
-      icon={<Cpu className="size-3.5" />}
-      scroll
-    >
-      <div className="mb-2 flex items-center gap-4 text-xs">
-        {procs?.total != null && (
-          <span>
-            <span className="font-bold text-foreground">{procs.total}</span>{" "}
-            <span className="text-muted-foreground">
-              {t("hostMetrics.processesTotal")}
-            </span>
-          </span>
-        )}
-        {procs?.running != null && (
-          <span>
-            <span className="font-bold text-accent-brand">{procs.running}</span>{" "}
-            <span className="text-muted-foreground">
-              {t("hostMetrics.processesRunning")}
-            </span>
-          </span>
-        )}
-      </div>
-      {top.length === 0 ? (
-        <span className="text-xs text-muted-foreground">
-          {t("hostMetrics.noProcessesFound")}
-        </span>
-      ) : (
-        <div className="flex flex-col divide-y divide-border">
-          {top.slice(0, 10).map((p) => (
-            <StatRow
-              key={p.pid}
-              label={p.command}
-              value={`${p.cpu}% cpu, ${p.mem}% mem`}
-              mono
-            />
-          ))}
-        </div>
-      )}
-    </MetricCard>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/SystemCard.tsx b/plugins/host-metrics/src/frontend/cards/SystemCard.tsx
deleted file mode 100644
index fd87b7a8c..000000000
--- a/plugins/host-metrics/src/frontend/cards/SystemCard.tsx
+++ /dev/null
@@ -1,36 +0,0 @@
-import { StatRow, MetricCard } from "@termix/plugin-sdk/ui";
-import { type ServerMetrics } from "../../shared/metrics.js";
-import { Server } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-export function SystemCard({ metrics }: { metrics: ServerMetrics | null }) {
-  const { t } = useTranslation();
-  const system = metrics?.system;
-  const uptime = metrics?.uptime;
-
-  const rows = [
-    { label: t("hostMetrics.hostname"), value: system?.hostname },
-    { label: t("hostMetrics.operatingSystem"), value: system?.os },
-    { label: t("hostMetrics.kernel"), value: system?.kernel },
-    { label: t("hostMetrics.architecture"), value: system?.arch },
-    { label: t("hostMetrics.uptime"), value: uptime?.formatted },
-  ].filter((r) => r.value);
-
-  return (
-    <MetricCard
-      title={t("hostMetrics.systemInfo")}
-      icon={<Server className="size-3.5" />}
-      scroll
-    >
-      {rows.length === 0 ? (
-        <span className="text-xs text-muted-foreground">N/A</span>
-      ) : (
-        <div className="flex flex-col divide-y divide-border">
-          {rows.map(({ label, value }) => (
-            <StatRow key={label} label={label} value={value} mono />
-          ))}
-        </div>
-      )}
-    </MetricCard>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/TemperatureCard.tsx b/plugins/host-metrics/src/frontend/cards/TemperatureCard.tsx
deleted file mode 100644
index ef0b4ec40..000000000
--- a/plugins/host-metrics/src/frontend/cards/TemperatureCard.tsx
+++ /dev/null
@@ -1,100 +0,0 @@
-import { StatRow, MetricCard } from "@termix/plugin-sdk/ui";
-import { type ServerMetrics } from "../../shared/metrics.js";
-import { Thermometer } from "lucide-react";
-import { useSettings, useTranslation } from "@termix/plugin-sdk/frontend";
-import { useEffect, useState } from "react";
-import {
-  formatTemperature,
-  selectTemperatureSensor,
-  temperaturePreferenceKey,
-  temperatureUnitOf,
-} from "../temperature-preference";
-
-export function TemperatureCard({
-  metrics,
-  hostId,
-}: {
-  metrics: ServerMetrics | null;
-  hostId: number | null;
-}) {
-  const { t } = useTranslation();
-  const unit = temperatureUnitOf(useSettings("user").values.temperatureUnit);
-  const temperature = metrics?.temperature;
-  const sensors = temperature?.sensors ?? [];
-  const [preferredLabel, setPreferredLabel] = useState("");
-
-  useEffect(() => {
-    setPreferredLabel(
-      hostId === null
-        ? ""
-        : (localStorage.getItem(temperaturePreferenceKey(hostId)) ?? ""),
-    );
-  }, [hostId]);
-
-  const preferredSensor = selectTemperatureSensor(sensors, preferredLabel);
-  const displayedTemperature =
-    preferredSensor?.celsius ?? temperature?.highestCelsius;
-  const displayedLabel =
-    preferredSensor?.label ?? t("hostMetrics.highestTemperature");
-
-  const chooseSensor = (label: string) => {
-    setPreferredLabel(label);
-    if (hostId === null) return;
-    const key = temperaturePreferenceKey(hostId);
-    if (label) localStorage.setItem(key, label);
-    else localStorage.removeItem(key);
-  };
-
-  return (
-    <MetricCard
-      title={t("hostMetrics.temperature")}
-      icon={<Thermometer className="size-3.5" />}
-      scroll={sensors.length > 4}
-      scrollMax={220}
-    >
-      <div className="flex flex-col gap-3">
-        <div>
-          <div className="text-3xl font-semibold tabular-nums">
-            {formatTemperature(displayedTemperature, unit)}
-          </div>
-          <div className="mt-1 text-xs text-muted-foreground">
-            {displayedLabel}
-          </div>
-        </div>
-
-        {sensors.length > 1 && (
-          <label className="flex flex-col gap-1 text-xs text-muted-foreground">
-            <span>{t("hostMetrics.primaryTemperatureSensor")}</span>
-            <select
-              value={preferredSensor?.label ?? ""}
-              onChange={(event) => chooseSensor(event.target.value)}
-              className="h-8 border border-border bg-background px-2 text-xs text-foreground outline-none focus:ring-1 focus:ring-ring"
-            >
-              <option value="">{t("hostMetrics.highestTemperature")}</option>
-              {sensors.map((sensor) => (
-                <option key={sensor.label} value={sensor.label}>
-                  {sensor.label}
-                </option>
-              ))}
-            </select>
-          </label>
-        )}
-
-        {sensors.length === 0 ? (
-          <span className="text-xs text-muted-foreground">N/A</span>
-        ) : (
-          <div className="flex flex-col divide-y divide-border">
-            {sensors.map((sensor) => (
-              <StatRow
-                key={`${sensor.label}-${sensor.celsius}`}
-                label={sensor.label}
-                value={formatTemperature(sensor.celsius, unit)}
-                mono
-              />
-            ))}
-          </div>
-        )}
-      </div>
-    </MetricCard>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/UptimeCard.tsx b/plugins/host-metrics/src/frontend/cards/UptimeCard.tsx
deleted file mode 100644
index 467159452..000000000
--- a/plugins/host-metrics/src/frontend/cards/UptimeCard.tsx
+++ /dev/null
@@ -1,28 +0,0 @@
-import { MetricCard } from "@termix/plugin-sdk/ui";
-import { type ServerMetrics } from "../../shared/metrics.js";
-import { Clock } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-export function UptimeCard({ metrics }: { metrics: ServerMetrics | null }) {
-  const { t } = useTranslation();
-  const uptime = metrics?.uptime;
-
-  return (
-    <MetricCard
-      title={t("hostMetrics.uptime")}
-      icon={<Clock className="size-3.5" />}
-    >
-      <div className="flex h-full flex-col justify-center gap-2">
-        <span className="text-2xl font-bold leading-none text-accent-brand md:text-3xl">
-          {uptime?.formatted ?? "N/A"}
-        </span>
-        {uptime?.seconds != null && (
-          <span className="font-mono text-xs text-muted-foreground">
-            {Math.floor(uptime.seconds).toLocaleString()}{" "}
-            {t("hostMetrics.seconds")}
-          </span>
-        )}
-      </div>
-    </MetricCard>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/gpu-history.ts b/plugins/host-metrics/src/frontend/cards/gpu-history.ts
deleted file mode 100644
index 970241bda..000000000
--- a/plugins/host-metrics/src/frontend/cards/gpu-history.ts
+++ /dev/null
@@ -1,30 +0,0 @@
-export interface GpuHistory {
-  utilization: number[];
-  memory: number[];
-}
-
-/** Live sparkline series keyed by GPU index. */
-export type GpuHistories = Record<number, GpuHistory>;
-
-/**
- * Appends one poll's readings to each GPU's series. GPUs missing from the poll
- * lose their series so a re-enumerated device never inherits stale samples.
- */
-export function appendGpuHistories(
-  prev: GpuHistories,
-  gpus: GpuDevice[] | undefined,
-  maxLength: number,
-): GpuHistories {
-  const add = (arr: number[] | undefined, v: number | null) =>
-    [...(arr ?? []), v ?? 0].slice(-maxLength);
-
-  const next: GpuHistories = {};
-  for (const gpu of gpus ?? []) {
-    next[gpu.index] = {
-      utilization: add(prev[gpu.index]?.utilization, gpu.utilizationPercent),
-      memory: add(prev[gpu.index]?.memory, gpu.memoryPercent),
-    };
-  }
-  return next;
-}
-import { type GpuDevice } from "../../shared/stats-widgets.js";
diff --git a/plugins/host-metrics/src/frontend/cards/index.tsx b/plugins/host-metrics/src/frontend/cards/index.tsx
deleted file mode 100644
index 6bc7ca9f4..000000000
--- a/plugins/host-metrics/src/frontend/cards/index.tsx
+++ /dev/null
@@ -1,252 +0,0 @@
-import { type ServerMetrics } from "../../shared/metrics.js";
-import {
-  defaultColSpanFor,
-  defaultHeightFor,
-  type HostMetricsCardId,
-} from "../../shared/host-metrics.js";
-import type { ComponentType, ReactNode } from "react";
-import { CpuCard } from "./CpuCard";
-import { MemoryCard } from "./MemoryCard";
-import { DiskCard } from "./DiskCard";
-import { NetworkCard } from "./NetworkCard";
-import { UptimeCard } from "./UptimeCard";
-import { SystemCard } from "./SystemCard";
-import { LoginStatsCard } from "./LoginStatsCard";
-import { PortsCard } from "./PortsCard";
-import { ProcessesCard } from "./ProcessesCard";
-import { FirewallCard } from "./FirewallCard";
-import { TemperatureCard } from "./TemperatureCard";
-import { GpuCard } from "./GpuCard";
-import type { GpuHistories } from "./gpu-history";
-import { ServiceManagerCard } from "./managers/ServiceManagerCard";
-import { ProcessInspectorCard } from "./managers/ProcessInspectorCard";
-import { PackageManagerCard } from "./managers/PackageManagerCard";
-import { CronManagerCard } from "./managers/CronManagerCard";
-import { SslManagerCard } from "./managers/SslManagerCard";
-import { FirewallManagerCard } from "./managers/FirewallManagerCard";
-import { UserManagerCard } from "./managers/UserManagerCard";
-import { HealthCheckCard } from "./managers/HealthCheckCard";
-import { LogViewerCard } from "./managers/LogViewerCard";
-import {
-  TopMemoryCard,
-  SystemdTimersCard,
-  DiskBreakdownCard,
-} from "./managers/SimpleManagerCards";
-import { WireGuardManagerCard } from "./managers/WireGuardManagerCard";
-
-export interface MetricCardHistories {
-  cpu: number[];
-  memory: number[];
-  disk: number[];
-  gpu: GpuHistories;
-}
-
-export interface CardRenderContext {
-  metrics: ServerMetrics | null;
-  histories: MetricCardHistories;
-  hostId: number | null;
-}
-
-export interface CardDefinition {
-  id: HostMetricsCardId;
-  /** i18n key for the card's display label. */
-  labelKey: string;
-  kind: "metric" | "manager";
-  render: (ctx: CardRenderContext) => ReactNode;
-}
-
-type SimpleMetricCard = ComponentType<{
-  metrics: ServerMetrics | null;
-  hostId: number | null;
-}>;
-type HistoryMetricCard = ComponentType<{
-  metrics: ServerMetrics | null;
-  history: number[];
-  hostId: number | null;
-}>;
-
-function metricCard(
-  id: HostMetricsCardId,
-  labelKey: string,
-  Comp: SimpleMetricCard,
-): CardDefinition {
-  return {
-    id,
-    labelKey,
-    kind: "metric",
-    render: ({ metrics, hostId }) => <Comp metrics={metrics} hostId={hostId} />,
-  };
-}
-
-function historyCard(
-  id: HostMetricsCardId,
-  labelKey: string,
-  Comp: HistoryMetricCard,
-  series: "cpu" | "memory" | "disk",
-): CardDefinition {
-  return {
-    id,
-    labelKey,
-    kind: "metric",
-    render: ({ metrics, histories, hostId }) => (
-      <Comp metrics={metrics} history={histories[series]} hostId={hostId} />
-    ),
-  };
-}
-
-type ManagerCardComp = ComponentType<{ hostId: number | null }>;
-
-function managerCard(
-  id: HostMetricsCardId,
-  labelKey: string,
-  Comp: ManagerCardComp,
-): CardDefinition {
-  return {
-    id,
-    labelKey,
-    kind: "manager",
-    render: ({ hostId }) => <Comp hostId={hostId} />,
-  };
-}
-
-export const CARD_DEFINITIONS: Record<string, CardDefinition> = {
-  cpu: historyCard("cpu", "hostMetrics.cpuUsage", CpuCard, "cpu"),
-  memory: historyCard(
-    "memory",
-    "hostMetrics.memoryUsage",
-    MemoryCard,
-    "memory",
-  ),
-  disk: historyCard("disk", "hostMetrics.diskUsage", DiskCard, "disk"),
-  network: metricCard("network", "hostMetrics.networkInterfaces", NetworkCard),
-  uptime: metricCard("uptime", "hostMetrics.uptime", UptimeCard),
-  system: metricCard("system", "hostMetrics.systemInfo", SystemCard),
-  login_stats: metricCard(
-    "login_stats",
-    "hostMetrics.loginStats",
-    LoginStatsCard,
-  ),
-  ports: metricCard("ports", "hostMetrics.ports.title", PortsCard),
-  processes: metricCard("processes", "hostMetrics.processes", ProcessesCard),
-  firewall: metricCard("firewall", "hostMetrics.firewall.title", FirewallCard),
-  temperature: metricCard(
-    "temperature",
-    "hostMetrics.temperature",
-    TemperatureCard,
-  ),
-  gpu: {
-    id: "gpu",
-    labelKey: "hostMetrics.gpu.title",
-    kind: "metric",
-    render: ({ metrics, histories }) => (
-      <GpuCard metrics={metrics} gpuHistories={histories.gpu} />
-    ),
-  },
-  service_manager: managerCard(
-    "service_manager",
-    "hostMetrics.managers.services",
-    ServiceManagerCard,
-  ),
-  process_inspector: managerCard(
-    "process_inspector",
-    "hostMetrics.managers.processInspector",
-    ProcessInspectorCard,
-  ),
-  log_viewer: managerCard(
-    "log_viewer",
-    "hostMetrics.managers.logViewer",
-    LogViewerCard,
-  ),
-  cron_manager: managerCard(
-    "cron_manager",
-    "hostMetrics.managers.cron",
-    CronManagerCard,
-  ),
-  package_manager: managerCard(
-    "package_manager",
-    "hostMetrics.managers.packages",
-    PackageManagerCard,
-  ),
-  ssl_manager: managerCard(
-    "ssl_manager",
-    "hostMetrics.managers.ssl",
-    SslManagerCard,
-  ),
-  firewall_manager: managerCard(
-    "firewall_manager",
-    "hostMetrics.managers.firewall",
-    FirewallManagerCard,
-  ),
-  user_manager: managerCard(
-    "user_manager",
-    "hostMetrics.managers.users",
-    UserManagerCard,
-  ),
-  health_check: managerCard(
-    "health_check",
-    "hostMetrics.managers.healthCheck",
-    HealthCheckCard,
-  ),
-  disk_breakdown: managerCard(
-    "disk_breakdown",
-    "hostMetrics.managers.diskBreakdown",
-    DiskBreakdownCard,
-  ),
-  systemd_timers: managerCard(
-    "systemd_timers",
-    "hostMetrics.managers.systemdTimers",
-    SystemdTimersCard,
-  ),
-  top_memory: managerCard(
-    "top_memory",
-    "hostMetrics.managers.topMemory",
-    TopMemoryCard,
-  ),
-  wireguard_manager: managerCard(
-    "wireguard_manager",
-    "hostMetrics.managers.wireguard",
-    WireGuardManagerCard,
-  ),
-};
-
-/**
- * Manager cards other plugins contribute to "host-metrics.managers" (a
- * component slot), keyed by contribution actionId. Built once per render from
- * useSlotContributions and merged with CARD_DEFINITIONS below, so a plugin
- * like tailscale can add its own manager card without host-metrics knowing it
- * exists.
- */
-export function definitionsFromSlot(
-  contributions: Array<{
-    actionId: string;
-    titleKey: string;
-    component?: ComponentType<Record<string, unknown>>;
-  }>,
-): Record<string, CardDefinition> {
-  const out: Record<string, CardDefinition> = {};
-  for (const contribution of contributions) {
-    if (!contribution.component) continue;
-    const Comp = contribution.component;
-    out[contribution.actionId] = {
-      id: contribution.actionId as HostMetricsCardId,
-      labelKey: contribution.titleKey,
-      kind: "manager",
-      render: ({ hostId }) => <Comp hostId={hostId} />,
-    };
-  }
-  return out;
-}
-
-/** All card ids built into this plugin and available in the Add tray. */
-export const IMPLEMENTED_CARD_IDS = Object.keys(
-  CARD_DEFINITIONS,
-) as HostMetricsCardId[];
-
-export function getCardDefinition(
-  id: string,
-  extra?: Record<string, CardDefinition>,
-): CardDefinition | undefined {
-  return CARD_DEFINITIONS[id] ?? extra?.[id];
-}
-
-export { defaultColSpanFor, defaultHeightFor };
diff --git a/plugins/host-metrics/src/frontend/cards/managers/CronManagerCard.tsx b/plugins/host-metrics/src/frontend/cards/managers/CronManagerCard.tsx
deleted file mode 100644
index 0faf4f76d..000000000
--- a/plugins/host-metrics/src/frontend/cards/managers/CronManagerCard.tsx
+++ /dev/null
@@ -1,163 +0,0 @@
-import { Button } from "@termix/plugin-sdk/ui";
-import { useEffect, useMemo, useState } from "react";
-import { Clock4, Plus, Trash2, Save } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { toast } from "sonner";
-import { useHostMetricsApi } from "../../host-metrics-api";
-import { useManagerData, extractError } from "./useManagerData";
-import { ManagerCardShell } from "@termix/plugin-sdk/ui";
-import { ManagerSearch } from "@termix/plugin-sdk/ui";
-
-interface CronEntry {
-  raw: string;
-  enabled: boolean;
-  schedule: string;
-  command: string;
-}
-
-export function CronManagerCard({ hostId }: { hostId: number | null }) {
-  const { managerPost } = useHostMetricsApi();
-  const { t } = useTranslation();
-  const { data, loading, error, refresh } = useManagerData<{
-    entries: CronEntry[];
-  }>(hostId, "cron");
-  const [entries, setEntries] = useState<CronEntry[]>([]);
-  const [dirty, setDirty] = useState(false);
-  const [saving, setSaving] = useState(false);
-  const [query, setQuery] = useState("");
-
-  // Keep the real array index so edits/removes target the right entry even when
-  // the list is filtered by the search box.
-  const visible = useMemo(() => {
-    const q = query.toLowerCase();
-    return entries
-      .map((entry, index) => ({ entry, index }))
-      .filter(
-        ({ entry }) =>
-          !q ||
-          entry.schedule.toLowerCase().includes(q) ||
-          entry.command.toLowerCase().includes(q),
-      );
-  }, [entries, query]);
-
-  useEffect(() => {
-    if (data?.entries) {
-      setEntries(data.entries);
-      setDirty(false);
-    }
-  }, [data]);
-
-  const update = (i: number, patch: Partial<CronEntry>) => {
-    setEntries((prev) =>
-      prev.map((e, idx) => (idx === i ? { ...e, ...patch } : e)),
-    );
-    setDirty(true);
-  };
-  const remove = (i: number) => {
-    setEntries((prev) => prev.filter((_, idx) => idx !== i));
-    setDirty(true);
-  };
-  const add = () => {
-    setEntries((prev) => [
-      ...prev,
-      { raw: "", enabled: true, schedule: "0 * * * *", command: "" },
-    ]);
-    setDirty(true);
-  };
-
-  const save = async () => {
-    if (hostId == null) return;
-    setSaving(true);
-    try {
-      const res = await managerPost<{ success: boolean; output: string }>(
-        hostId,
-        "cron",
-        { entries },
-      );
-      if (res.success) {
-        toast.success(t("hostMetrics.managers.cronSaved"));
-        setDirty(false);
-        refresh();
-      } else {
-        toast.error(res.output || t("hostMetrics.managers.actionFailed"));
-      }
-    } catch (e) {
-      toast.error(extractError(e).message);
-    } finally {
-      setSaving(false);
-    }
-  };
-
-  return (
-    <ManagerCardShell
-      title={t("hostMetrics.managers.cron")}
-      icon={<Clock4 className="size-3.5" />}
-      loading={loading}
-      error={error}
-      onRefresh={refresh}
-      headerExtra={
-        <>
-          <Button variant="ghost" size="xs" onClick={add}>
-            <Plus className="size-3" />
-          </Button>
-          {dirty && (
-            <Button
-              variant="outline"
-              size="xs"
-              disabled={saving}
-              onClick={save}
-            >
-              <Save className="size-3" />
-              {t("hostMetrics.managers.save")}
-            </Button>
-          )}
-        </>
-      }
-      empty={!loading && entries.length === 0}
-    >
-      {entries.length > 5 && (
-        <ManagerSearch
-          value={query}
-          onChange={setQuery}
-          count={visible.length}
-        />
-      )}
-      <div className="flex flex-col gap-2">
-        {visible.map(({ entry: e, index: i }) => (
-          <div
-            key={i}
-            className="flex flex-col gap-1 border border-border bg-muted/20 p-2"
-          >
-            <div className="flex items-center gap-2">
-              <input
-                type="checkbox"
-                checked={e.enabled}
-                onChange={(ev) => update(i, { enabled: ev.target.checked })}
-                className="accent-accent-brand"
-                title={t("hostMetrics.managers.enabled")}
-              />
-              <input
-                value={e.schedule}
-                onChange={(ev) => update(i, { schedule: ev.target.value })}
-                placeholder="0 * * * *"
-                className="h-6 w-28 border border-border bg-background px-1.5 font-mono text-[11px] outline-none focus:ring-1 focus:ring-ring"
-              />
-              <button
-                onClick={() => remove(i)}
-                className="ml-auto text-muted-foreground hover:text-destructive"
-              >
-                <Trash2 className="size-3.5" />
-              </button>
-            </div>
-            <input
-              value={e.command}
-              onChange={(ev) => update(i, { command: ev.target.value })}
-              placeholder={t("hostMetrics.managers.command")}
-              className="h-6 w-full border border-border bg-background px-1.5 font-mono text-[11px] outline-none focus:ring-1 focus:ring-ring"
-            />
-          </div>
-        ))}
-      </div>
-    </ManagerCardShell>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/managers/FirewallManagerCard.tsx b/plugins/host-metrics/src/frontend/cards/managers/FirewallManagerCard.tsx
deleted file mode 100644
index c3f831fee..000000000
--- a/plugins/host-metrics/src/frontend/cards/managers/FirewallManagerCard.tsx
+++ /dev/null
@@ -1,231 +0,0 @@
-import { Button, Select2 } from "@termix/plugin-sdk/ui";
-import { type FirewallChain } from "../../../shared/metrics.js";
-import { useMemo, useState } from "react";
-import { ShieldCheck, Plus, Trash2, Save } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { toast } from "sonner";
-import { useHostMetricsApi } from "../../host-metrics-api";
-import { useManagerData, extractError } from "./useManagerData";
-import { ManagerCardShell } from "@termix/plugin-sdk/ui";
-import { ManagerSearch } from "@termix/plugin-sdk/ui";
-
-interface FirewallData {
-  type: "iptables" | "nftables" | "none";
-  status: string;
-  chains: FirewallChain[];
-}
-
-export function FirewallManagerCard({ hostId }: { hostId: number | null }) {
-  const { managerPost } = useHostMetricsApi();
-  const { t } = useTranslation();
-  const { data, loading, error, refresh } = useManagerData<FirewallData>(
-    hostId,
-    "firewall",
-  );
-  const [proto, setProto] = useState<"tcp" | "udp">("tcp");
-  const [port, setPort] = useState("");
-  const [target, setTarget] = useState<"ACCEPT" | "DROP" | "REJECT">("ACCEPT");
-  const [busy, setBusy] = useState(false);
-  const [query, setQuery] = useState("");
-
-  const rule = async (op: "add" | "delete") => {
-    if (hostId == null) return;
-    const portNum = Number(port);
-    if (!Number.isInteger(portNum) || portNum < 1 || portNum > 65535) {
-      toast.error(t("hostMetrics.managers.invalidPort"));
-      return;
-    }
-    setBusy(true);
-    try {
-      const res = await managerPost<{ success: boolean; output: string }>(
-        hostId,
-        "firewall",
-        { op, protocol: proto, port: portNum, target },
-        "rule",
-      );
-      if (res.success) {
-        toast.success(t("hostMetrics.managers.ruleApplied"));
-        refresh();
-      } else {
-        toast.error(res.output || t("hostMetrics.managers.actionFailed"));
-      }
-    } catch (e) {
-      toast.error(extractError(e).message);
-    } finally {
-      setBusy(false);
-    }
-  };
-
-  const persist = async () => {
-    if (hostId == null) return;
-    setBusy(true);
-    toast.loading(t("hostMetrics.managers.working"), { id: "fw-persist" });
-    try {
-      const res = await managerPost<{ success: boolean; output: string }>(
-        hostId,
-        "firewall",
-        {},
-        "persist",
-      );
-      toast[res.success ? "success" : "error"](
-        res.success
-          ? t("hostMetrics.managers.firewallPersisted")
-          : t("hostMetrics.managers.actionFailed"),
-        { id: "fw-persist", description: res.output?.slice(-200) },
-      );
-    } catch (e) {
-      toast.error(extractError(e).message, { id: "fw-persist" });
-    } finally {
-      setBusy(false);
-    }
-  };
-
-  const chains = useMemo(() => {
-    const q = query.toLowerCase();
-    return (data?.chains ?? [])
-      .map((c) => ({
-        ...c,
-        rules: c.rules.filter(
-          (r) =>
-            !q ||
-            r.target.toLowerCase().includes(q) ||
-            (r.dport ?? "").includes(q) ||
-            r.protocol.toLowerCase().includes(q) ||
-            r.source.toLowerCase().includes(q),
-        ),
-      }))
-      .filter((c) => c.rules.length > 0 || !q);
-  }, [data?.chains, query]);
-
-  return (
-    <ManagerCardShell
-      title={t("hostMetrics.managers.firewall")}
-      icon={<ShieldCheck className="size-3.5" />}
-      loading={loading}
-      error={error}
-      onRefresh={refresh}
-      headerExtra={
-        <>
-          <span className="text-[10px] uppercase tracking-widest text-muted-foreground">
-            {data?.type ?? ""}
-          </span>
-          <Button
-            variant="ghost"
-            size="xs"
-            disabled={busy || data?.type === "none"}
-            onClick={persist}
-            title={t("hostMetrics.managers.firewallPersist")}
-          >
-            <Save className="size-3" />
-          </Button>
-        </>
-      }
-    >
-      <div className="mb-3 flex flex-col gap-2 border border-dashed border-border p-2">
-        <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-          {t("hostMetrics.managers.addInputRule")}
-        </span>
-        <div className="flex items-center gap-1.5">
-          <Select2
-            value={proto}
-            onChange={(e) => setProto(e.target.value as "tcp" | "udp")}
-            className="h-7 border border-border bg-background px-1 text-xs"
-          >
-            <option value="tcp">tcp</option>
-            <option value="udp">udp</option>
-          </Select2>
-          <input
-            value={port}
-            onChange={(e) => setPort(e.target.value)}
-            placeholder={t("hostMetrics.ports.port")}
-            className="h-7 w-16 border border-border bg-background px-1.5 text-xs outline-none focus:ring-1 focus:ring-ring"
-          />
-          <Select2
-            value={target}
-            onChange={(e) =>
-              setTarget(e.target.value as "ACCEPT" | "DROP" | "REJECT")
-            }
-            className="h-7 border border-border bg-background px-1 text-xs"
-          >
-            <option>ACCEPT</option>
-            <option>DROP</option>
-            <option>REJECT</option>
-          </Select2>
-          <Button
-            variant="outline"
-            size="xs"
-            disabled={busy}
-            onClick={() => rule("add")}
-          >
-            <Plus className="size-3" />
-          </Button>
-          <Button
-            variant="ghost"
-            size="xs"
-            disabled={busy}
-            onClick={() => rule("delete")}
-          >
-            <Trash2 className="size-3" />
-          </Button>
-        </div>
-        <span className="text-[10px] text-yellow-500">
-          {t("hostMetrics.managers.firewallWarning")}
-        </span>
-      </div>
-
-      <ManagerSearch value={query} onChange={setQuery} />
-
-      {chains.length === 0 ? (
-        <span className="text-xs text-muted-foreground">
-          {t("hostMetrics.firewall.noData")}
-        </span>
-      ) : (
-        <div className="flex flex-col gap-3">
-          {chains.map((chain) => (
-            <div key={chain.name} className="flex flex-col">
-              <div className="mb-1 flex items-center justify-between">
-                <span className="text-[10px] font-bold uppercase tracking-widest text-foreground">
-                  {chain.name}
-                </span>
-                {chain.policy && (
-                  <span className="text-[10px] text-muted-foreground">
-                    {t("hostMetrics.firewall.policy")}: {chain.policy}
-                  </span>
-                )}
-              </div>
-              {chain.rules.length === 0 ? (
-                <span className="text-[10px] italic text-muted-foreground/60">
-                  {t("hostMetrics.firewall.noRules")}
-                </span>
-              ) : (
-                <>
-                  <div className="grid grid-cols-4 gap-2 border-b border-border pb-1 text-[10px] font-bold uppercase text-muted-foreground">
-                    <span>{t("hostMetrics.firewall.action")}</span>
-                    <span>{t("hostMetrics.firewall.protocol")}</span>
-                    <span>{t("hostMetrics.firewall.port")}</span>
-                    <span>{t("hostMetrics.firewall.source")}</span>
-                  </div>
-                  {chain.rules.map((r, i) => (
-                    <div
-                      key={i}
-                      className="grid grid-cols-4 gap-2 border-b border-border/50 py-1 font-mono text-xs last:border-0"
-                    >
-                      <span className="font-bold">{r.target}</span>
-                      <span className="text-muted-foreground">
-                        {r.protocol.toUpperCase()}
-                      </span>
-                      <span>{r.dport ?? "—"}</span>
-                      <span className="truncate text-muted-foreground">
-                        {r.source}
-                      </span>
-                    </div>
-                  ))}
-                </>
-              )}
-            </div>
-          ))}
-        </div>
-      )}
-    </ManagerCardShell>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/managers/HealthCheckCard.tsx b/plugins/host-metrics/src/frontend/cards/managers/HealthCheckCard.tsx
deleted file mode 100644
index 450d012ec..000000000
--- a/plugins/host-metrics/src/frontend/cards/managers/HealthCheckCard.tsx
+++ /dev/null
@@ -1,314 +0,0 @@
-import { Button, Sparkline, Select2 } from "@termix/plugin-sdk/ui";
-import { useEffect, useMemo, useState } from "react";
-import {
-  HeartPulse,
-  CheckCircle2,
-  XCircle,
-  Plus,
-  Trash2,
-  Play,
-  Pencil,
-} from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { toast } from "sonner";
-import { useHostMetricsApi } from "../../host-metrics-api";
-import { useManagerData, extractError } from "./useManagerData";
-import { ManagerCardShell } from "@termix/plugin-sdk/ui";
-
-interface HealthCheck {
-  id: string;
-  name: string;
-  type: "tcp" | "http";
-  target: string;
-  port?: number;
-  path?: string;
-}
-interface HealthResult {
-  checkId: string;
-  ok: boolean;
-  latencyMs: number | null;
-  detail: string;
-}
-interface HistoryRow {
-  checkId: string;
-  ts: string;
-  ok: boolean;
-  latencyMs: number | null;
-}
-interface HealthData {
-  checks: HealthCheck[];
-  results: HealthResult[];
-  history: HistoryRow[];
-}
-
-function newCheck(): HealthCheck {
-  return {
-    id: `c_${Math.random().toString(36).slice(2, 9)}`,
-    name: "",
-    type: "tcp",
-    target: "",
-    port: 80,
-  };
-}
-
-export function HealthCheckCard({ hostId }: { hostId: number | null }) {
-  const { managerPost } = useHostMetricsApi();
-  const { t } = useTranslation();
-  const { data, loading, error, refresh } = useManagerData<HealthData>(
-    hostId,
-    "health",
-  );
-  const [editing, setEditing] = useState(false);
-  const [draft, setDraft] = useState<HealthCheck[]>([]);
-  const [saving, setSaving] = useState(false);
-  const [running, setRunning] = useState(false);
-
-  useEffect(() => {
-    if (data?.checks && !editing) setDraft(data.checks);
-  }, [data?.checks, editing]);
-
-  const byCheck = useMemo(() => {
-    const map = new Map<string, HistoryRow[]>();
-    for (const h of data?.history ?? []) {
-      const arr = map.get(h.checkId) ?? [];
-      arr.push(h);
-      map.set(h.checkId, arr);
-    }
-    return map;
-  }, [data?.history]);
-
-  const save = async () => {
-    if (hostId == null) return;
-    for (const c of draft) {
-      if (!c.name.trim() || !c.target.trim()) {
-        toast.error(t("hostMetrics.managers.healthMissingFields"));
-        return;
-      }
-    }
-    setSaving(true);
-    try {
-      const res = await managerPost<{ success: boolean }>(
-        hostId,
-        "health",
-        { checks: draft },
-        "config",
-      );
-      if (res.success) {
-        toast.success(t("hostMetrics.managers.healthSaved"));
-        setEditing(false);
-        refresh();
-      } else {
-        toast.error(t("hostMetrics.managers.actionFailed"));
-      }
-    } catch (e) {
-      toast.error(extractError(e).message);
-    } finally {
-      setSaving(false);
-    }
-  };
-
-  const runNow = async () => {
-    if (hostId == null) return;
-    setRunning(true);
-    try {
-      await managerPost(hostId, "health", {}, "run");
-      refresh();
-    } catch (e) {
-      toast.error(extractError(e).message);
-    } finally {
-      setRunning(false);
-    }
-  };
-
-  const updateDraft = (id: string, patch: Partial<HealthCheck>) =>
-    setDraft((d) => d.map((c) => (c.id === id ? { ...c, ...patch } : c)));
-
-  return (
-    <ManagerCardShell
-      title={t("hostMetrics.managers.healthCheck")}
-      icon={<HeartPulse className="size-3.5" />}
-      loading={loading}
-      error={error}
-      onRefresh={refresh}
-      headerExtra={
-        editing ? (
-          <>
-            <Button
-              variant="ghost"
-              size="xs"
-              onClick={() => {
-                setEditing(false);
-                setDraft(data?.checks ?? []);
-              }}
-            >
-              {t("common.cancel")}
-            </Button>
-            <Button
-              variant="outline"
-              size="xs"
-              disabled={saving}
-              onClick={save}
-            >
-              {t("common.save")}
-            </Button>
-          </>
-        ) : (
-          <>
-            <Button
-              variant="ghost"
-              size="xs"
-              disabled={running || (data?.checks?.length ?? 0) === 0}
-              onClick={runNow}
-            >
-              <Play className="size-3" />
-              {t("hostMetrics.managers.healthRun")}
-            </Button>
-            <Button variant="ghost" size="xs" onClick={() => setEditing(true)}>
-              <Pencil className="size-3" />
-              {t("common.edit")}
-            </Button>
-          </>
-        )
-      }
-    >
-      {editing ? (
-        <div className="flex flex-col gap-2">
-          {draft.map((c) => (
-            <div
-              key={c.id}
-              className="flex flex-col gap-1.5 border border-border bg-muted/20 p-2"
-            >
-              <div className="flex items-center gap-1.5">
-                <input
-                  value={c.name}
-                  onChange={(e) => updateDraft(c.id, { name: e.target.value })}
-                  placeholder={t("hostMetrics.managers.healthName")}
-                  className="h-7 flex-1 border border-border bg-background px-2 text-xs outline-none focus:ring-1 focus:ring-ring"
-                />
-                <Select2
-                  value={c.type}
-                  onChange={(e) =>
-                    updateDraft(c.id, {
-                      type: e.target.value as "tcp" | "http",
-                    })
-                  }
-                  className="h-7 border border-border bg-background px-1 text-xs"
-                >
-                  <option value="tcp">TCP</option>
-                  <option value="http">HTTP</option>
-                </Select2>
-                <button
-                  onClick={() =>
-                    setDraft((d) => d.filter((x) => x.id !== c.id))
-                  }
-                  className="flex size-7 items-center justify-center text-muted-foreground hover:text-destructive"
-                >
-                  <Trash2 className="size-3.5" />
-                </button>
-              </div>
-              <div className="flex items-center gap-1.5">
-                <input
-                  value={c.target}
-                  onChange={(e) =>
-                    updateDraft(c.id, { target: e.target.value })
-                  }
-                  placeholder={t("hostMetrics.managers.healthTarget")}
-                  className="h-7 flex-1 border border-border bg-background px-2 font-mono text-xs outline-none focus:ring-1 focus:ring-ring"
-                />
-                {c.type === "tcp" ? (
-                  <input
-                    type="number"
-                    value={c.port ?? ""}
-                    onChange={(e) =>
-                      updateDraft(c.id, { port: Number(e.target.value) })
-                    }
-                    placeholder={t("hostMetrics.ports.port")}
-                    className="h-7 w-16 border border-border bg-background px-1.5 text-xs outline-none focus:ring-1 focus:ring-ring"
-                  />
-                ) : (
-                  <input
-                    value={c.path ?? ""}
-                    onChange={(e) =>
-                      updateDraft(c.id, { path: e.target.value })
-                    }
-                    placeholder="/health"
-                    className="h-7 w-24 border border-border bg-background px-1.5 font-mono text-xs outline-none focus:ring-1 focus:ring-ring"
-                  />
-                )}
-              </div>
-            </div>
-          ))}
-          <Button
-            variant="ghost"
-            size="sm"
-            className="self-start"
-            onClick={() => setDraft((d) => [...d, newCheck()])}
-          >
-            <Plus className="size-3" />
-            {t("hostMetrics.managers.healthAddCheck")}
-          </Button>
-        </div>
-      ) : (data?.checks?.length ?? 0) === 0 ? (
-        <div className="flex flex-col items-center gap-2 py-6 text-center">
-          <span className="text-xs text-muted-foreground/60">
-            {t("hostMetrics.managers.noHealthChecks")}
-          </span>
-          <Button variant="outline" size="sm" onClick={() => setEditing(true)}>
-            <Plus className="size-3" />
-            {t("hostMetrics.managers.healthAddCheck")}
-          </Button>
-        </div>
-      ) : (
-        <div className="flex flex-col gap-3">
-          {(data?.checks ?? []).map((check) => {
-            const result = data?.results?.find((r) => r.checkId === check.id);
-            const hist = (byCheck.get(check.id) ?? []).slice().reverse();
-            const upPct =
-              hist.length > 0
-                ? Math.round(
-                    (hist.filter((h) => h.ok).length / hist.length) * 100,
-                  )
-                : null;
-            return (
-              <div
-                key={check.id}
-                className="flex flex-col gap-1 border border-border bg-muted/20 p-2"
-              >
-                <div className="flex items-center justify-between">
-                  <div className="flex items-center gap-2">
-                    {result?.ok ? (
-                      <CheckCircle2 className="size-3.5 text-accent-brand" />
-                    ) : (
-                      <XCircle className="size-3.5 text-destructive" />
-                    )}
-                    <span className="text-xs font-semibold">{check.name}</span>
-                    <span className="font-mono text-[10px] text-muted-foreground/60">
-                      {check.type === "tcp"
-                        ? `${check.target}:${check.port}`
-                        : check.target}
-                    </span>
-                  </div>
-                  <span className="flex gap-2 font-mono text-[10px] text-muted-foreground">
-                    <span>
-                      {result?.latencyMs != null
-                        ? `${result.latencyMs}ms`
-                        : "-"}
-                    </span>
-                    {upPct != null && <span>{upPct}%</span>}
-                  </span>
-                </div>
-                {hist.length > 1 && (
-                  <Sparkline
-                    data={hist.map((h) => h.latencyMs ?? 0)}
-                    height={28}
-                    showLastDot={false}
-                  />
-                )}
-              </div>
-            );
-          })}
-        </div>
-      )}
-    </ManagerCardShell>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/managers/LogViewerCard.tsx b/plugins/host-metrics/src/frontend/cards/managers/LogViewerCard.tsx
deleted file mode 100644
index bafc1b1c7..000000000
--- a/plugins/host-metrics/src/frontend/cards/managers/LogViewerCard.tsx
+++ /dev/null
@@ -1,199 +0,0 @@
-import { useAdaptivePolling, Select2 } from "@termix/plugin-sdk/ui";
-import { useCallback, useEffect, useMemo, useRef, useState } from "react";
-import { ScrollText } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { useHostMetricsApi } from "../../host-metrics-api";
-import { extractError } from "./useManagerData";
-import { ManagerCardShell } from "@termix/plugin-sdk/ui";
-
-interface LogFiles {
-  common: string[];
-  files: string[];
-}
-
-type Mode = "file" | "unit";
-
-export function LogViewerCard({ hostId }: { hostId: number | null }) {
-  const { managerGet, managerGetSub } = useHostMetricsApi();
-  const { t } = useTranslation();
-  const [mode, setMode] = useState<Mode>("file");
-  const [path, setPath] = useState<string>("/var/log/syslog");
-  const [unit, setUnit] = useState<string>("");
-  const [customPath, setCustomPath] = useState("");
-  const [lines, setLines] = useState(300);
-  const [content, setContent] = useState("");
-  const [grep, setGrep] = useState("");
-  const [follow, setFollow] = useState(false);
-  const [loading, setLoading] = useState(false);
-  const [error, setError] = useState<string | null>(null);
-  const [files, setFiles] = useState<string[]>([]);
-  const bodyRef = useRef<HTMLPreElement | null>(null);
-  const contentRef = useRef(content);
-  contentRef.current = content;
-
-  // Load the host's actual log files once.
-  useEffect(() => {
-    if (hostId == null) return;
-    managerGetSub<LogFiles>(hostId, "logs", "files")
-      .then((res) => {
-        const merged = Array.from(
-          new Set([...(res.common ?? []), ...(res.files ?? [])]),
-        );
-        setFiles(merged);
-        if (merged.length && !merged.includes(path)) setPath(merged[0]);
-      })
-      .catch(() => {});
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [hostId]);
-
-  const fetchLog = useCallback(async () => {
-    if (hostId == null) return false;
-    const params: Record<string, string | number> = { lines };
-    if (mode === "unit") {
-      if (!unit.trim()) return false;
-      params.unit = unit.trim();
-    } else {
-      const p = customPath.trim() || path;
-      if (!p) return false;
-      params.path = p;
-    }
-    setLoading(true);
-    setError(null);
-    try {
-      const res = await managerGet<{ content: string }>(hostId, "logs", params);
-      const next = res.content || "";
-      const changed = next !== contentRef.current;
-      if (changed) {
-        contentRef.current = next;
-        setContent(next);
-        requestAnimationFrame(() => {
-          if (bodyRef.current)
-            bodyRef.current.scrollTop = bodyRef.current.scrollHeight;
-        });
-      }
-      return changed;
-    } catch (e) {
-      setError(extractError(e).message);
-    } finally {
-      setLoading(false);
-    }
-  }, [customPath, hostId, lines, mode, path, unit]);
-
-  useEffect(() => {
-    void fetchLog();
-    // Custom paths are applied on blur/manual refresh, not on every keystroke.
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [hostId, mode, path, unit, lines]);
-
-  useAdaptivePolling(
-    fetchLog,
-    {
-      minIntervalMs: 3_000,
-      maxIntervalMs: 18_000,
-      stablePollsPerStep: 2,
-      maxRequestDutyCycle: 0.2,
-    },
-    follow,
-    { runImmediately: false },
-  );
-
-  const shown = useMemo(() => {
-    if (!grep) return content;
-    const needle = grep.toLowerCase();
-    return content
-      .split("\n")
-      .filter((l) => l.toLowerCase().includes(needle))
-      .join("\n");
-  }, [content, grep]);
-
-  return (
-    <ManagerCardShell
-      title={t("hostMetrics.managers.logViewer")}
-      icon={<ScrollText className="size-3.5" />}
-      loading={loading}
-      error={error ? { message: error } : null}
-      onRefresh={fetchLog}
-      headerExtra={
-        <label className="flex items-center gap-1 text-[10px] text-muted-foreground">
-          <input
-            type="checkbox"
-            checked={follow}
-            onChange={(e) => setFollow(e.target.checked)}
-            className="accent-accent-brand"
-          />
-          {t("hostMetrics.managers.follow")}
-        </label>
-      }
-    >
-      <div className="mb-2 flex items-center gap-1.5">
-        <Select2
-          value={mode}
-          onChange={(e) => setMode(e.target.value as Mode)}
-          className="h-7 border border-border bg-background px-1 text-[11px]"
-        >
-          <option value="file">{t("hostMetrics.managers.logFile")}</option>
-          <option value="unit">{t("hostMetrics.managers.logUnit")}</option>
-        </Select2>
-        {mode === "file" ? (
-          <Select2
-            value={customPath ? "" : path}
-            onChange={(e) => {
-              setCustomPath("");
-              setPath(e.target.value);
-            }}
-            className="h-7 flex-1 border border-border bg-background px-2 font-mono text-[11px] outline-none focus:ring-1 focus:ring-ring"
-          >
-            {files.map((f) => (
-              <option key={f} value={f}>
-                {f}
-              </option>
-            ))}
-          </Select2>
-        ) : (
-          <input
-            value={unit}
-            onChange={(e) => setUnit(e.target.value)}
-            onBlur={fetchLog}
-            placeholder="nginx.service"
-            className="h-7 flex-1 border border-border bg-background px-2 font-mono text-[11px] outline-none focus:ring-1 focus:ring-ring"
-          />
-        )}
-        <Select2
-          value={lines}
-          onChange={(e) => setLines(Number(e.target.value))}
-          className="h-7 border border-border bg-background px-1 text-[11px]"
-        >
-          {[100, 300, 500, 1000, 2000].map((n) => (
-            <option key={n} value={n}>
-              {n}
-            </option>
-          ))}
-        </Select2>
-      </div>
-
-      {mode === "file" && (
-        <input
-          value={customPath}
-          onChange={(e) => setCustomPath(e.target.value)}
-          onBlur={() => customPath && fetchLog()}
-          placeholder={t("hostMetrics.managers.logCustomPath")}
-          className="mb-2 h-7 w-full border border-border bg-background px-2 font-mono text-[11px] outline-none focus:ring-1 focus:ring-ring"
-        />
-      )}
-
-      <input
-        value={grep}
-        onChange={(e) => setGrep(e.target.value)}
-        placeholder={t("hostMetrics.managers.logGrep")}
-        className="mb-2 h-7 w-full border border-border bg-background px-2 text-[11px] outline-none focus:ring-1 focus:ring-ring"
-      />
-
-      <pre
-        ref={bodyRef}
-        className="max-h-[320px] overflow-auto whitespace-pre-wrap break-all border border-border/50 bg-muted/20 p-2 font-mono text-[10px] leading-relaxed"
-      >
-        {shown || t("hostMetrics.managers.noLogData")}
-      </pre>
-    </ManagerCardShell>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/managers/PackageManagerCard.tsx b/plugins/host-metrics/src/frontend/cards/managers/PackageManagerCard.tsx
deleted file mode 100644
index 5e2a710c9..000000000
--- a/plugins/host-metrics/src/frontend/cards/managers/PackageManagerCard.tsx
+++ /dev/null
@@ -1,116 +0,0 @@
-import { Button } from "@termix/plugin-sdk/ui";
-import { useMemo, useState } from "react";
-import { Package, ArrowUpCircle } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { toast } from "sonner";
-import { useHostMetricsApi } from "../../host-metrics-api";
-import { useManagerData, extractError } from "./useManagerData";
-import { ManagerCardShell } from "@termix/plugin-sdk/ui";
-import { ManagerSearch } from "@termix/plugin-sdk/ui";
-
-interface UpgradablePackage {
-  name: string;
-  currentVersion?: string;
-  newVersion?: string;
-}
-
-export function PackageManagerCard({ hostId }: { hostId: number | null }) {
-  const { managerPost } = useHostMetricsApi();
-  const { t } = useTranslation();
-  const { data, loading, error, refresh } = useManagerData<{
-    pkg: string | null;
-    upgradable: UpgradablePackage[];
-  }>(hostId, "packages");
-  const [busy, setBusy] = useState<string | null>(null);
-  const [filter, setFilter] = useState("");
-  const all = useMemo(() => data?.upgradable ?? [], [data?.upgradable]);
-  const pkgs = useMemo(
-    () =>
-      all.filter(
-        (p) => !filter || p.name.toLowerCase().includes(filter.toLowerCase()),
-      ),
-    [all, filter],
-  );
-
-  const run = async (action: string, pkg?: string) => {
-    if (hostId == null) return;
-    setBusy(pkg ?? action);
-    toast.loading(t("hostMetrics.managers.working"), { id: "pkg-op" });
-    try {
-      const res = await managerPost<{ success: boolean; output: string }>(
-        hostId,
-        "packages",
-        { action, pkg },
-        "action",
-      );
-      toast[res.success ? "success" : "error"](
-        res.success
-          ? t("hostMetrics.managers.actionDone", { name: pkg ?? "upgrade" })
-          : t("hostMetrics.managers.actionFailed"),
-        { id: "pkg-op", description: res.output?.slice(-200) },
-      );
-      if (res.success) refresh();
-    } catch (e) {
-      toast.error(extractError(e).message, { id: "pkg-op" });
-    } finally {
-      setBusy(null);
-    }
-  };
-
-  return (
-    <ManagerCardShell
-      title={t("hostMetrics.managers.packages")}
-      icon={<Package className="size-3.5" />}
-      loading={loading}
-      error={error}
-      onRefresh={refresh}
-      empty={!loading && all.length === 0}
-      emptyMessage={t("hostMetrics.managers.allUpToDate")}
-      headerExtra={
-        all.length > 0 ? (
-          <Button
-            variant="outline"
-            size="xs"
-            disabled={!!busy}
-            onClick={() => run("upgrade-all")}
-          >
-            <ArrowUpCircle className="size-3" />
-            {t("hostMetrics.managers.upgradeAll")}
-          </Button>
-        ) : undefined
-      }
-    >
-      {all.length > 5 && (
-        <ManagerSearch
-          value={filter}
-          onChange={setFilter}
-          count={pkgs.length}
-        />
-      )}
-      <div className="flex flex-col">
-        {pkgs.map((p) => (
-          <div
-            key={p.name}
-            className="flex items-center justify-between gap-2 border-b border-border/50 py-1.5 last:border-0"
-          >
-            <div className="flex min-w-0 flex-col">
-              <span className="truncate text-xs font-semibold">{p.name}</span>
-              <span className="truncate font-mono text-[10px] text-muted-foreground">
-                {p.currentVersion ? `${p.currentVersion} → ` : ""}
-                {p.newVersion ?? ""}
-              </span>
-            </div>
-            <Button
-              variant="ghost"
-              size="xs"
-              disabled={busy === p.name}
-              onClick={() => run("install", p.name)}
-            >
-              {t("hostMetrics.managers.update")}
-            </Button>
-          </div>
-        ))}
-      </div>
-    </ManagerCardShell>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/managers/ProcessInspectorCard.tsx b/plugins/host-metrics/src/frontend/cards/managers/ProcessInspectorCard.tsx
deleted file mode 100644
index c99f3718a..000000000
--- a/plugins/host-metrics/src/frontend/cards/managers/ProcessInspectorCard.tsx
+++ /dev/null
@@ -1,195 +0,0 @@
-import { Select2 } from "@termix/plugin-sdk/ui";
-import { useMemo, useState } from "react";
-import { ListTree, X, Skull } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { toast } from "sonner";
-import { useHostMetricsApi } from "../../host-metrics-api";
-import { useManagerData, extractError } from "./useManagerData";
-import { ManagerCardShell } from "@termix/plugin-sdk/ui";
-import { ManagerSearch } from "@termix/plugin-sdk/ui";
-
-interface ProcessRow {
-  pid: number;
-  ppid: number;
-  user: string;
-  cpu: number;
-  mem: number;
-  command: string;
-  args: string;
-}
-
-type SortKey = "cpu" | "mem" | "pid";
-type Signal = "TERM" | "KILL";
-
-export function ProcessInspectorCard({ hostId }: { hostId: number | null }) {
-  const { managerPost } = useHostMetricsApi();
-  const { t } = useTranslation();
-  const { data, loading, error, refresh } = useManagerData<{
-    processes: ProcessRow[];
-  }>(hostId, "processes");
-  const [filter, setFilter] = useState("");
-  const [sort, setSort] = useState<SortKey>("cpu");
-  const [tree, setTree] = useState(false);
-  const [busy, setBusy] = useState<number | null>(null);
-
-  const all = useMemo(() => data?.processes ?? [], [data?.processes]);
-
-  const filtered = useMemo(() => {
-    const q = filter.toLowerCase();
-    const list = all.filter(
-      (p) =>
-        !q ||
-        p.args.toLowerCase().includes(q) ||
-        p.command.toLowerCase().includes(q) ||
-        String(p.pid).includes(q) ||
-        p.user.toLowerCase().includes(q),
-    );
-    return [...list].sort((a, b) => {
-      if (sort === "pid") return a.pid - b.pid;
-      return b[sort] - a[sort];
-    });
-  }, [all, filter, sort]);
-
-  // Build a depth map for the tree view from ppid links (only among visible).
-  const treeRows = useMemo(() => {
-    if (!tree) return null;
-    const byId = new Map(filtered.map((p) => [p.pid, p]));
-    const children = new Map<number, ProcessRow[]>();
-    const roots: ProcessRow[] = [];
-    for (const p of filtered) {
-      if (p.ppid && byId.has(p.ppid)) {
-        const arr = children.get(p.ppid) ?? [];
-        arr.push(p);
-        children.set(p.ppid, arr);
-      } else {
-        roots.push(p);
-      }
-    }
-    const out: Array<{ proc: ProcessRow; depth: number }> = [];
-    const walk = (p: ProcessRow, depth: number) => {
-      out.push({ proc: p, depth });
-      for (const c of children.get(p.pid) ?? []) walk(c, depth + 1);
-    };
-    roots.forEach((r) => walk(r, 0));
-    return out;
-  }, [tree, filtered]);
-
-  const kill = async (pid: number, signal: Signal) => {
-    if (hostId == null) return;
-    setBusy(pid);
-    try {
-      const res = await managerPost<{ success: boolean; output: string }>(
-        hostId,
-        "processes",
-        { pid, signal },
-        "signal",
-      );
-      if (res.success) {
-        toast.success(t("hostMetrics.managers.signalSent", { pid }));
-        refresh();
-      } else {
-        toast.error(res.output || t("hostMetrics.managers.actionFailed"));
-      }
-    } catch (e) {
-      toast.error(extractError(e).message);
-    } finally {
-      setBusy(null);
-    }
-  };
-
-  const rows = treeRows
-    ? treeRows.slice(0, 200)
-    : filtered.slice(0, 200).map((proc) => ({ proc, depth: 0 }));
-
-  return (
-    <ManagerCardShell
-      title={t("hostMetrics.managers.processInspector")}
-      icon={<ListTree className="size-3.5" />}
-      loading={loading}
-      error={error}
-      onRefresh={refresh}
-      empty={!loading && filtered.length === 0}
-      headerExtra={
-        <>
-          <button
-            onClick={() => setTree((v) => !v)}
-            className={`flex h-6 items-center gap-1 border px-1.5 text-[10px] transition-colors ${
-              tree
-                ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand"
-                : "border-border text-muted-foreground hover:text-foreground"
-            }`}
-          >
-            <ListTree className="size-3" />
-            {t("hostMetrics.managers.tree")}
-          </button>
-          <Select2
-            value={sort}
-            onChange={(e) => setSort(e.target.value as SortKey)}
-            disabled={tree}
-            className="h-6 border border-border bg-background px-1 text-[10px] disabled:opacity-40"
-          >
-            <option value="cpu">CPU</option>
-            <option value="mem">MEM</option>
-            <option value="pid">PID</option>
-          </Select2>
-        </>
-      }
-    >
-      <ManagerSearch
-        value={filter}
-        onChange={setFilter}
-        count={filtered.length}
-      />
-      <div className="flex flex-col">
-        <div className="grid grid-cols-[3rem_2.5rem_2.5rem_1fr_1.5rem] gap-2 border-b border-border pb-1 text-[10px] font-bold uppercase text-muted-foreground">
-          <span>PID</span>
-          <span>CPU</span>
-          <span>MEM</span>
-          <span>CMD</span>
-          <span />
-        </div>
-        {rows.map(({ proc: p, depth }) => (
-          <div
-            key={p.pid}
-            className="relative grid grid-cols-[3rem_2.5rem_2.5rem_1fr_1.5rem] items-center gap-2 border-b border-border/50 py-1 font-mono text-xs last:border-0"
-          >
-            <span className="text-muted-foreground">{p.pid}</span>
-            <span className="font-bold text-accent-brand">
-              {p.cpu.toFixed(0)}%
-            </span>
-            <span>{p.mem.toFixed(0)}%</span>
-            <span
-              className="truncate"
-              title={`${p.user}\n${p.args}`}
-              style={
-                depth ? { paddingLeft: `${(depth * 12) / 14}rem` } : undefined
-              }
-            >
-              {depth > 0 && (
-                <span className="text-muted-foreground/40">└ </span>
-              )}
-              {/* `comm` is capped at 15 chars by the kernel; the full command line is in args. */}
-              {p.args || p.command}
-            </span>
-            <button
-              onClick={() => kill(p.pid, "TERM")}
-              onContextMenu={(e) => {
-                e.preventDefault();
-                kill(p.pid, "KILL");
-              }}
-              disabled={busy === p.pid}
-              title={t("hostMetrics.managers.killHint")}
-              className="flex size-5 items-center justify-center text-muted-foreground transition-colors hover:bg-destructive/10 hover:text-destructive disabled:opacity-40"
-            >
-              {busy === p.pid ? (
-                <Skull className="size-3" />
-              ) : (
-                <X className="size-3" />
-              )}
-            </button>
-          </div>
-        ))}
-      </div>
-    </ManagerCardShell>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/managers/ServiceManagerCard.tsx b/plugins/host-metrics/src/frontend/cards/managers/ServiceManagerCard.tsx
deleted file mode 100644
index a1794ef1a..000000000
--- a/plugins/host-metrics/src/frontend/cards/managers/ServiceManagerCard.tsx
+++ /dev/null
@@ -1,155 +0,0 @@
-import { useMemo, useState } from "react";
-import { Cog, Play, Square, RotateCw, Power } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { toast } from "sonner";
-import { useHostMetricsApi } from "../../host-metrics-api";
-import { useManagerData, extractError } from "./useManagerData";
-import { ManagerCardShell } from "@termix/plugin-sdk/ui";
-import { ManagerSearch } from "@termix/plugin-sdk/ui";
-
-interface SystemdService {
-  unit: string;
-  active: string;
-  sub: string;
-  description: string;
-}
-
-export function ServiceManagerCard({ hostId }: { hostId: number | null }) {
-  const { managerPost } = useHostMetricsApi();
-  const { t } = useTranslation();
-  const { data, loading, error, refresh } = useManagerData<{
-    services: SystemdService[];
-  }>(hostId, "services");
-  const [filter, setFilter] = useState("");
-  const [busy, setBusy] = useState<string | null>(null);
-
-  const services = useMemo(
-    () =>
-      (data?.services ?? []).filter(
-        (s) =>
-          !filter ||
-          s.unit.toLowerCase().includes(filter.toLowerCase()) ||
-          s.description.toLowerCase().includes(filter.toLowerCase()),
-      ),
-    [data?.services, filter],
-  );
-
-  const act = async (unit: string, action: string) => {
-    if (hostId == null) return;
-    setBusy(`${unit}:${action}`);
-    try {
-      const res = await managerPost<{ success: boolean; output: string }>(
-        hostId,
-        "services",
-        { unit, action },
-        "action",
-      );
-      if (res.success) {
-        toast.success(t("hostMetrics.managers.actionDone", { name: unit }));
-        refresh();
-      } else {
-        toast.error(res.output || t("hostMetrics.managers.actionFailed"));
-      }
-    } catch (e) {
-      toast.error(extractError(e).message);
-    } finally {
-      setBusy(null);
-    }
-  };
-
-  return (
-    <ManagerCardShell
-      title={t("hostMetrics.managers.services")}
-      icon={<Cog className="size-3.5" />}
-      loading={loading}
-      error={error}
-      onRefresh={refresh}
-      empty={!loading && services.length === 0}
-    >
-      <ManagerSearch
-        value={filter}
-        onChange={setFilter}
-        count={services.length}
-      />
-      <div className="flex flex-col">
-        {services.map((s) => (
-          <div
-            key={s.unit}
-            className="flex items-center justify-between gap-2 border-b border-border/50 py-1.5 last:border-0"
-          >
-            <div className="flex min-w-0 items-center gap-2">
-              <span
-                className={`size-1.5 shrink-0 rounded-full ${s.active === "active" ? "bg-accent-brand" : "bg-muted-foreground/40"}`}
-              />
-              <div className="flex min-w-0 flex-col">
-                <span className="truncate text-xs font-semibold" title={s.unit}>
-                  {s.unit.replace(/\.service$/, "")}
-                </span>
-                <span className="truncate text-[10px] text-muted-foreground">
-                  {s.sub}
-                </span>
-              </div>
-            </div>
-            <div className="flex shrink-0 items-center gap-0.5">
-              <ActionBtn
-                onClick={() => act(s.unit, "start")}
-                busy={busy === `${s.unit}:start`}
-                title={t("hostMetrics.managers.start")}
-              >
-                <Play className="size-3" />
-              </ActionBtn>
-              <ActionBtn
-                onClick={() => act(s.unit, "restart")}
-                busy={busy === `${s.unit}:restart`}
-                title={t("hostMetrics.managers.restart")}
-              >
-                <RotateCw className="size-3" />
-              </ActionBtn>
-              <ActionBtn
-                onClick={() => act(s.unit, "stop")}
-                busy={busy === `${s.unit}:stop`}
-                title={t("hostMetrics.managers.stop")}
-              >
-                <Square className="size-3" />
-              </ActionBtn>
-              <ActionBtn
-                onClick={() =>
-                  act(s.unit, s.sub === "running" ? "disable" : "enable")
-                }
-                busy={
-                  busy === `${s.unit}:enable` || busy === `${s.unit}:disable`
-                }
-                title={t("hostMetrics.managers.enableDisable")}
-              >
-                <Power className="size-3" />
-              </ActionBtn>
-            </div>
-          </div>
-        ))}
-      </div>
-    </ManagerCardShell>
-  );
-}
-
-function ActionBtn({
-  onClick,
-  busy,
-  title,
-  children,
-}: {
-  onClick: () => void;
-  busy: boolean;
-  title: string;
-  children: React.ReactNode;
-}) {
-  return (
-    <button
-      onClick={onClick}
-      disabled={busy}
-      title={title}
-      className="flex size-6 items-center justify-center text-muted-foreground transition-colors hover:bg-muted hover:text-foreground disabled:opacity-40"
-    >
-      {children}
-    </button>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/managers/SimpleManagerCards.tsx b/plugins/host-metrics/src/frontend/cards/managers/SimpleManagerCards.tsx
deleted file mode 100644
index 6838d4a09..000000000
--- a/plugins/host-metrics/src/frontend/cards/managers/SimpleManagerCards.tsx
+++ /dev/null
@@ -1,165 +0,0 @@
-import { BarSeries, StatRow } from "@termix/plugin-sdk/ui";
-import { useMemo, useState } from "react";
-import { MemoryStick, Timer, HardDrive } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { useManagerData } from "./useManagerData";
-import { ManagerCardShell } from "@termix/plugin-sdk/ui";
-import { ManagerSearch } from "@termix/plugin-sdk/ui";
-
-interface MemProc {
-  pid: number;
-  user: string;
-  mem: number;
-  rss: number;
-  command: string;
-}
-interface TimerRow {
-  unit: string;
-  activates: string;
-  next: string;
-}
-interface MountUsage {
-  filesystem: string;
-  usePct: number;
-  usedKb: number;
-  sizeKb: number;
-  mount: string;
-}
-
-function fmtGiB(kb: number): string {
-  return `${(kb / 1024 / 1024).toFixed(1)}G`;
-}
-
-export function TopMemoryCard({ hostId }: { hostId: number | null }) {
-  const { t } = useTranslation();
-  const { data, loading, error, refresh } = useManagerData<{
-    processes: MemProc[];
-  }>(hostId, "top-memory");
-  const [query, setQuery] = useState("");
-  const all = useMemo(() => data?.processes ?? [], [data?.processes]);
-  const procs = useMemo(() => {
-    const q = query.toLowerCase();
-    return all.filter(
-      (p) =>
-        !q ||
-        p.command.toLowerCase().includes(q) ||
-        String(p.pid).includes(q) ||
-        p.user.toLowerCase().includes(q),
-    );
-  }, [all, query]);
-
-  return (
-    <ManagerCardShell
-      title={t("hostMetrics.managers.topMemory")}
-      icon={<MemoryStick className="size-3.5" />}
-      loading={loading}
-      error={error}
-      onRefresh={refresh}
-      empty={!loading && all.length === 0}
-    >
-      {all.length > 5 && (
-        <ManagerSearch value={query} onChange={setQuery} count={procs.length} />
-      )}
-      <BarSeries
-        items={procs.map((p) => ({
-          label: `${p.command} (${p.pid})`,
-          value: p.mem,
-          valueLabel: `${p.mem.toFixed(1)}%`,
-        }))}
-        max={Math.max(1, ...procs.map((p) => p.mem))}
-      />
-    </ManagerCardShell>
-  );
-}
-
-export function SystemdTimersCard({ hostId }: { hostId: number | null }) {
-  const { t } = useTranslation();
-  const { data, loading, error, refresh } = useManagerData<{
-    timers: TimerRow[];
-  }>(hostId, "timers");
-  const [query, setQuery] = useState("");
-  const all = useMemo(() => data?.timers ?? [], [data?.timers]);
-  const timers = useMemo(() => {
-    const q = query.toLowerCase();
-    return all.filter(
-      (tm) =>
-        !q ||
-        tm.unit.toLowerCase().includes(q) ||
-        tm.activates.toLowerCase().includes(q),
-    );
-  }, [all, query]);
-
-  return (
-    <ManagerCardShell
-      title={t("hostMetrics.managers.systemdTimers")}
-      icon={<Timer className="size-3.5" />}
-      loading={loading}
-      error={error}
-      onRefresh={refresh}
-      empty={!loading && all.length === 0}
-    >
-      {all.length > 5 && (
-        <ManagerSearch
-          value={query}
-          onChange={setQuery}
-          count={timers.length}
-        />
-      )}
-      <div className="flex flex-col divide-y divide-border">
-        {timers.map((tm) => (
-          <StatRow
-            key={tm.unit}
-            label={tm.unit.replace(/\.timer$/, "")}
-            value={tm.activates}
-            mono
-          />
-        ))}
-      </div>
-    </ManagerCardShell>
-  );
-}
-
-export function DiskBreakdownCard({ hostId }: { hostId: number | null }) {
-  const { t } = useTranslation();
-  const { data, loading, error, refresh } = useManagerData<{
-    mounts: MountUsage[];
-  }>(hostId, "disk-breakdown");
-  const [query, setQuery] = useState("");
-  const all = useMemo(() => data?.mounts ?? [], [data?.mounts]);
-  const mounts = useMemo(() => {
-    const q = query.toLowerCase();
-    return all.filter(
-      (m) =>
-        !q ||
-        m.mount.toLowerCase().includes(q) ||
-        m.filesystem.toLowerCase().includes(q),
-    );
-  }, [all, query]);
-
-  return (
-    <ManagerCardShell
-      title={t("hostMetrics.managers.diskBreakdown")}
-      icon={<HardDrive className="size-3.5" />}
-      loading={loading}
-      error={error}
-      onRefresh={refresh}
-      empty={!loading && all.length === 0}
-    >
-      {all.length > 5 && (
-        <ManagerSearch
-          value={query}
-          onChange={setQuery}
-          count={mounts.length}
-        />
-      )}
-      <BarSeries
-        items={mounts.map((m) => ({
-          label: `${m.mount} (${fmtGiB(m.usedKb)}/${fmtGiB(m.sizeKb)})`,
-          value: m.usePct,
-          valueLabel: `${m.usePct}%`,
-        }))}
-        max={100}
-      />
-    </ManagerCardShell>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/managers/SslManagerCard.tsx b/plugins/host-metrics/src/frontend/cards/managers/SslManagerCard.tsx
deleted file mode 100644
index 7d88c2929..000000000
--- a/plugins/host-metrics/src/frontend/cards/managers/SslManagerCard.tsx
+++ /dev/null
@@ -1,302 +0,0 @@
-import { Button, Select2 } from "@termix/plugin-sdk/ui";
-import { useMemo, useState } from "react";
-import { ShieldCheck, RefreshCw, Plus, X, Trash2 } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { useHostMetricsApi } from "../../host-metrics-api";
-import {
-  useManagerData,
-  useManagerAction,
-  extractError,
-} from "./useManagerData";
-import { ManagerCardShell } from "@termix/plugin-sdk/ui";
-
-interface CertInfo {
-  client: string;
-  name: string;
-  domains: string[];
-  expiry: string | null;
-}
-interface SslData {
-  clients: { certbot: boolean; acmeSh: boolean };
-  certs: CertInfo[];
-}
-
-type Challenge = "http-standalone" | "http-webroot" | "dns";
-
-/** Days until the given expiry string, or null if unparseable. */
-function daysUntil(expiry: string | null): number | null {
-  if (!expiry) return null;
-  const ts = Date.parse(expiry);
-  if (Number.isNaN(ts)) return null;
-  return Math.round((ts - Date.now()) / 86400000);
-}
-
-function ExpiryBadge({ expiry }: { expiry: string | null }) {
-  const { t } = useTranslation();
-  const days = daysUntil(expiry);
-  if (days == null)
-    return <span className="text-muted-foreground">{expiry ?? "—"}</span>;
-  const tone =
-    days < 0
-      ? "text-destructive"
-      : days < 14
-        ? "text-yellow-500"
-        : "text-accent-brand";
-  return (
-    <span className={tone} title={expiry ?? undefined}>
-      {days < 0
-        ? t("hostMetrics.managers.sslExpired")
-        : t("hostMetrics.managers.sslInDays", { days })}
-    </span>
-  );
-}
-
-export function SslManagerCard({ hostId }: { hostId: number | null }) {
-  const { managerPost } = useHostMetricsApi();
-  const { t } = useTranslation();
-  const { data, loading, error, refresh } = useManagerData<SslData>(
-    hostId,
-    "ssl",
-  );
-  const { busy, run } = useManagerAction(hostId);
-  const [showIssue, setShowIssue] = useState(false);
-  const [domains, setDomains] = useState("");
-  const [challenge, setChallenge] = useState<Challenge>("http-standalone");
-  const [webroot, setWebroot] = useState("");
-  const [dnsProvider, setDnsProvider] = useState("");
-  const [issuing, setIssuing] = useState(false);
-
-  const clients = data?.clients;
-  const activeClient: "certbot" | "acme.sh" | null = clients?.certbot
-    ? "certbot"
-    : clients?.acmeSh
-      ? "acme.sh"
-      : null;
-
-  const certs = useMemo(() => data?.certs ?? [], [data?.certs]);
-
-  const renew = (dryRun: boolean) => {
-    if (!activeClient) return;
-    run(
-      "ssl",
-      { client: activeClient, dryRun },
-      {
-        action: "renew",
-        toastId: "ssl-op",
-        loadingMsg: t("hostMetrics.managers.working"),
-        successMsg: t("hostMetrics.managers.actionDone", { name: "renew" }),
-        failMsg: t("hostMetrics.managers.actionFailed"),
-        onDone: refresh,
-      },
-    );
-  };
-
-  const revoke = (cert: CertInfo) => {
-    if (cert.client !== "certbot" && cert.client !== "acme.sh") return;
-    if (
-      !window.confirm(
-        t("hostMetrics.managers.sslRevokeConfirm", { name: cert.name }),
-      )
-    )
-      return;
-    run(
-      "ssl",
-      { client: cert.client, name: cert.name },
-      {
-        action: "revoke",
-        toastId: "ssl-op",
-        loadingMsg: t("hostMetrics.managers.working"),
-        successMsg: t("hostMetrics.managers.sslRevoked"),
-        failMsg: t("hostMetrics.managers.actionFailed"),
-        onDone: refresh,
-      },
-    );
-  };
-
-  const issue = async () => {
-    if (hostId == null || !activeClient) return;
-    const list = domains
-      .split(/[\s,]+/)
-      .map((d) => d.trim())
-      .filter(Boolean);
-    if (list.length === 0) {
-      const { toast } = await import("sonner");
-      toast.error(t("hostMetrics.managers.sslNeedDomain"));
-      return;
-    }
-    setIssuing(true);
-    const { toast } = await import("sonner");
-    toast.loading(t("hostMetrics.managers.working"), { id: "ssl-issue" });
-    try {
-      const res = await managerPost<{ success: boolean; output: string }>(
-        hostId,
-        "ssl",
-        {
-          client: activeClient,
-          domains: list,
-          challenge,
-          webroot: challenge === "http-webroot" ? webroot : undefined,
-          dnsProvider: challenge === "dns" ? dnsProvider : undefined,
-        },
-        "issue",
-      );
-      toast[res.success ? "success" : "error"](
-        res.success
-          ? t("hostMetrics.managers.sslIssued")
-          : t("hostMetrics.managers.actionFailed"),
-        { id: "ssl-issue", description: res.output?.slice(-200) },
-      );
-      if (res.success) {
-        setShowIssue(false);
-        setDomains("");
-        refresh();
-      }
-    } catch (e) {
-      toast.error(extractError(e).message, { id: "ssl-issue" });
-    } finally {
-      setIssuing(false);
-    }
-  };
-
-  return (
-    <ManagerCardShell
-      title={t("hostMetrics.managers.ssl")}
-      icon={<ShieldCheck className="size-3.5" />}
-      loading={loading}
-      error={error}
-      onRefresh={refresh}
-      empty={!loading && certs.length === 0 && !activeClient}
-      emptyMessage={t("hostMetrics.managers.noAcmeClient")}
-      headerExtra={
-        activeClient ? (
-          <>
-            <Button
-              variant="ghost"
-              size="xs"
-              disabled={busy}
-              onClick={() => renew(true)}
-            >
-              {t("hostMetrics.managers.dryRun")}
-            </Button>
-            <Button
-              variant="outline"
-              size="xs"
-              disabled={busy}
-              onClick={() => renew(false)}
-            >
-              <RefreshCw className="size-3" />
-              {t("hostMetrics.managers.renew")}
-            </Button>
-          </>
-        ) : undefined
-      }
-    >
-      <div className="mb-2 flex items-center justify-between text-[10px] uppercase tracking-widest text-muted-foreground">
-        <div className="flex items-center gap-2">
-          <span>{t("hostMetrics.managers.clients")}:</span>
-          <span className={clients?.certbot ? "text-accent-brand" : ""}>
-            certbot
-          </span>
-          <span className={clients?.acmeSh ? "text-accent-brand" : ""}>
-            acme.sh
-          </span>
-        </div>
-        {activeClient && (
-          <Button
-            variant="ghost"
-            size="xs"
-            onClick={() => setShowIssue((v) => !v)}
-          >
-            {showIssue ? <X className="size-3" /> : <Plus className="size-3" />}
-            {t("hostMetrics.managers.sslIssueCert")}
-          </Button>
-        )}
-      </div>
-
-      {showIssue && activeClient && (
-        <div className="mb-3 flex flex-col gap-2 border border-dashed border-border p-2">
-          <input
-            value={domains}
-            onChange={(e) => setDomains(e.target.value)}
-            placeholder={t("hostMetrics.managers.sslDomainsPlaceholder")}
-            className="h-7 w-full border border-border bg-background px-2 text-xs outline-none focus:ring-1 focus:ring-ring"
-          />
-          <div className="flex items-center gap-1.5">
-            <Select2
-              value={challenge}
-              onChange={(e) => setChallenge(e.target.value as Challenge)}
-              className="h-7 flex-1 border border-border bg-background px-1 text-xs"
-            >
-              <option value="http-standalone">
-                {t("hostMetrics.managers.sslHttpStandalone")}
-              </option>
-              <option value="http-webroot">
-                {t("hostMetrics.managers.sslHttpWebroot")}
-              </option>
-              <option value="dns">{t("hostMetrics.managers.sslDns")}</option>
-            </Select2>
-          </div>
-          {challenge === "http-webroot" && (
-            <input
-              value={webroot}
-              onChange={(e) => setWebroot(e.target.value)}
-              placeholder="/var/www/html"
-              className="h-7 w-full border border-border bg-background px-2 font-mono text-xs outline-none focus:ring-1 focus:ring-ring"
-            />
-          )}
-          {challenge === "dns" && (
-            <input
-              value={dnsProvider}
-              onChange={(e) => setDnsProvider(e.target.value)}
-              placeholder={t("hostMetrics.managers.sslDnsProvider")}
-              className="h-7 w-full border border-border bg-background px-2 text-xs outline-none focus:ring-1 focus:ring-ring"
-            />
-          )}
-          <Button
-            variant="outline"
-            size="sm"
-            disabled={issuing}
-            onClick={issue}
-            className="self-start"
-          >
-            {t("hostMetrics.managers.sslIssueCert")}
-          </Button>
-          <span className="text-[10px] text-muted-foreground/70">
-            {t("hostMetrics.managers.sslIssueHint")}
-          </span>
-        </div>
-      )}
-
-      <div className="flex flex-col divide-y divide-border">
-        {certs.map((c) => (
-          <div
-            key={`${c.client}-${c.name}`}
-            className="flex items-center justify-between gap-2 py-1.5 text-xs"
-          >
-            <span
-              className="truncate font-semibold"
-              title={c.domains.join(", ")}
-            >
-              {c.name}
-            </span>
-            <div className="flex shrink-0 items-center gap-2">
-              <span className="font-mono text-[11px]">
-                <ExpiryBadge expiry={c.expiry} />
-              </span>
-              {(c.client === "certbot" || c.client === "acme.sh") && (
-                <button
-                  onClick={() => revoke(c)}
-                  disabled={busy}
-                  title={t("hostMetrics.managers.sslRevoke")}
-                  className="text-muted-foreground transition-colors hover:text-destructive disabled:opacity-40"
-                >
-                  <Trash2 className="size-3.5" />
-                </button>
-              )}
-            </div>
-          </div>
-        ))}
-      </div>
-    </ManagerCardShell>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/managers/UserManagerCard.tsx b/plugins/host-metrics/src/frontend/cards/managers/UserManagerCard.tsx
deleted file mode 100644
index 4b089dc88..000000000
--- a/plugins/host-metrics/src/frontend/cards/managers/UserManagerCard.tsx
+++ /dev/null
@@ -1,146 +0,0 @@
-import { Button } from "@termix/plugin-sdk/ui";
-import { useMemo, useState } from "react";
-import { Users, Plus, Trash2, ShieldCheck, Shield } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { toast } from "sonner";
-import { useHostMetricsApi } from "../../host-metrics-api";
-import { useManagerData, extractError } from "./useManagerData";
-import { ManagerCardShell } from "@termix/plugin-sdk/ui";
-import { ManagerSearch } from "@termix/plugin-sdk/ui";
-
-interface SystemUser {
-  name: string;
-  uid: number;
-  shell: string;
-}
-interface UsersData {
-  users: SystemUser[];
-  sudoers: string[];
-}
-
-export function UserManagerCard({ hostId }: { hostId: number | null }) {
-  const { managerPost } = useHostMetricsApi();
-  const { t } = useTranslation();
-  const { data, loading, error, refresh } = useManagerData<UsersData>(
-    hostId,
-    "users",
-  );
-  const [newUser, setNewUser] = useState("");
-  const [filter, setFilter] = useState("");
-  const [busy, setBusy] = useState<string | null>(null);
-  const sudoers = new Set(data?.sudoers ?? []);
-
-  const users = useMemo(
-    () =>
-      (data?.users ?? []).filter(
-        (u) => !filter || u.name.toLowerCase().includes(filter.toLowerCase()),
-      ),
-    [data?.users, filter],
-  );
-
-  const action = async (act: string, username: string, group?: string) => {
-    if (hostId == null) return;
-    setBusy(username);
-    try {
-      const res = await managerPost<{ success: boolean; output: string }>(
-        hostId,
-        "users",
-        { action: act, username, group },
-        "action",
-      );
-      if (res.success) {
-        toast.success(t("hostMetrics.managers.actionDone", { name: username }));
-        if (act === "create") setNewUser("");
-        refresh();
-      } else {
-        toast.error(res.output || t("hostMetrics.managers.actionFailed"));
-      }
-    } catch (e) {
-      toast.error(extractError(e).message);
-    } finally {
-      setBusy(null);
-    }
-  };
-
-  return (
-    <ManagerCardShell
-      title={t("hostMetrics.managers.users")}
-      icon={<Users className="size-3.5" />}
-      loading={loading}
-      error={error}
-      onRefresh={refresh}
-    >
-      <div className="mb-2 flex items-center gap-1.5">
-        <input
-          value={newUser}
-          onChange={(e) => setNewUser(e.target.value)}
-          placeholder={t("hostMetrics.managers.newUsername")}
-          className="h-7 flex-1 border border-border bg-background px-2 text-xs outline-none focus:ring-1 focus:ring-ring"
-        />
-        <Button
-          variant="outline"
-          size="xs"
-          disabled={!newUser || busy === newUser}
-          onClick={() => action("create", newUser)}
-        >
-          <Plus className="size-3" />
-          {t("hostMetrics.managers.addUser")}
-        </Button>
-      </div>
-      <ManagerSearch value={filter} onChange={setFilter} count={users.length} />
-      <div className="flex flex-col">
-        {users.map((u) => {
-          const isSudoer = sudoers.has(u.name);
-          return (
-            <div
-              key={u.name}
-              className="flex items-center justify-between gap-2 border-b border-border/50 py-1.5 last:border-0"
-            >
-              <div className="flex min-w-0 items-center gap-2">
-                <span className="truncate text-xs font-semibold">{u.name}</span>
-                {isSudoer && (
-                  <ShieldCheck className="size-3 shrink-0 text-accent-brand" />
-                )}
-                <span className="truncate font-mono text-[10px] text-muted-foreground">
-                  {u.uid}
-                </span>
-              </div>
-              <div className="flex shrink-0 items-center gap-1">
-                <button
-                  onClick={() =>
-                    action(
-                      isSudoer ? "removeFromGroup" : "addToGroup",
-                      u.name,
-                      "sudo",
-                    )
-                  }
-                  disabled={busy === u.name}
-                  title={
-                    isSudoer
-                      ? t("hostMetrics.managers.revokeSudo")
-                      : t("hostMetrics.managers.grantSudo")
-                  }
-                  className={`disabled:opacity-40 ${
-                    isSudoer
-                      ? "text-accent-brand hover:text-muted-foreground"
-                      : "text-muted-foreground hover:text-accent-brand"
-                  }`}
-                >
-                  <Shield className="size-3.5" />
-                </button>
-                <button
-                  onClick={() => action("delete", u.name)}
-                  disabled={busy === u.name}
-                  title={t("hostMetrics.managers.deleteUser")}
-                  className="text-muted-foreground hover:text-destructive disabled:opacity-40"
-                >
-                  <Trash2 className="size-3.5" />
-                </button>
-              </div>
-            </div>
-          );
-        })}
-      </div>
-    </ManagerCardShell>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/managers/WireGuardManagerCard.tsx b/plugins/host-metrics/src/frontend/cards/managers/WireGuardManagerCard.tsx
deleted file mode 100644
index f48e4c5d7..000000000
--- a/plugins/host-metrics/src/frontend/cards/managers/WireGuardManagerCard.tsx
+++ /dev/null
@@ -1,211 +0,0 @@
-import { useState } from "react";
-import {
-  ChevronDown,
-  ChevronRight,
-  Network,
-  ArrowUp,
-  ArrowDown,
-} from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { useManagerData, useManagerAction } from "./useManagerData";
-import { ManagerCardShell } from "@termix/plugin-sdk/ui";
-
-interface WireGuardPeer {
-  publicKey: string;
-  endpoint: string | null;
-  allowedIPs: string[];
-  latestHandshake: number | null;
-  rxBytes: number;
-  txBytes: number;
-}
-
-interface WireGuardInterface {
-  name: string;
-  publicKey: string | null;
-  listenPort: number | null;
-  up: boolean;
-  peers: WireGuardPeer[];
-}
-
-interface WireGuardData {
-  installed: boolean;
-  interfaces: WireGuardInterface[];
-}
-
-function fmtBytes(n: number): string {
-  if (n >= 1024 * 1024 * 1024)
-    return `${(n / 1024 / 1024 / 1024).toFixed(1)}GB`;
-  if (n >= 1024 * 1024) return `${(n / 1024 / 1024).toFixed(1)}MB`;
-  if (n >= 1024) return `${(n / 1024).toFixed(1)}KB`;
-  return `${n}B`;
-}
-
-function fmtHandshake(ts: number | null): string {
-  if (!ts) return "";
-  const diff = Math.floor(Date.now() / 1000) - ts;
-  if (diff < 60) return `${diff}s ago`;
-  if (diff < 3600) return `${Math.floor(diff / 60)}m ago`;
-  if (diff < 86400) return `${Math.floor(diff / 3600)}h ago`;
-  return `${Math.floor(diff / 86400)}d ago`;
-}
-
-function truncKey(key: string): string {
-  return key.length > 12 ? `${key.slice(0, 12)}...` : key;
-}
-
-export function WireGuardManagerCard({ hostId }: { hostId: number | null }) {
-  const { t } = useTranslation();
-  const { data, loading, error, refresh } = useManagerData<WireGuardData>(
-    hostId,
-    "wireguard",
-  );
-  const { busy, run } = useManagerAction(hostId);
-  const [expanded, setExpanded] = useState<Set<string>>(new Set());
-
-  const toggleExpand = (name: string) => {
-    setExpanded((prev) => {
-      const next = new Set(prev);
-      if (next.has(name)) next.delete(name);
-      else next.add(name);
-      return next;
-    });
-  };
-
-  const handleAction = async (iface: WireGuardInterface) => {
-    const action = iface.up ? "down" : "up";
-    await run(
-      "wireguard",
-      { interface: iface.name, action },
-      {
-        action: "action",
-        loadingMsg:
-          action === "up"
-            ? t("hostMetrics.managers.wgBringingUp", { name: iface.name })
-            : t("hostMetrics.managers.wgBringingDown", { name: iface.name }),
-        successMsg:
-          action === "up"
-            ? t("hostMetrics.managers.wgInterfaceUpDone", { name: iface.name })
-            : t("hostMetrics.managers.wgInterfaceDownDone", {
-                name: iface.name,
-              }),
-        onDone: refresh,
-      },
-    );
-  };
-
-  const isNotInstalled = data && !data.installed;
-  const isEmpty = data?.installed && data.interfaces.length === 0;
-
-  return (
-    <ManagerCardShell
-      title={t("hostMetrics.managers.wireguard")}
-      icon={<Network className="size-3.5" />}
-      loading={loading}
-      error={error}
-      onRefresh={refresh}
-      empty={isNotInstalled || isEmpty}
-      emptyMessage={
-        isNotInstalled
-          ? t("hostMetrics.managers.wgNotInstalled")
-          : t("hostMetrics.managers.wgNoInterfaces")
-      }
-    >
-      <div className="flex flex-col">
-        {data?.interfaces.map((iface) => (
-          <div
-            key={iface.name}
-            className="border-b border-border/50 last:border-0"
-          >
-            <div className="flex items-center justify-between gap-2 py-1.5">
-              <button
-                className="flex min-w-0 flex-1 items-center gap-2 text-left"
-                onClick={() => toggleExpand(iface.name)}
-              >
-                {expanded.has(iface.name) ? (
-                  <ChevronDown className="size-3 shrink-0 text-muted-foreground" />
-                ) : (
-                  <ChevronRight className="size-3 shrink-0 text-muted-foreground" />
-                )}
-                <span
-                  className={`size-1.5 shrink-0 rounded-full ${iface.up ? "bg-accent-brand" : "bg-muted-foreground/40"}`}
-                />
-                <div className="flex min-w-0 flex-col">
-                  <span className="text-xs font-semibold font-mono">
-                    {iface.name}
-                  </span>
-                  <span className="flex gap-2 text-[10px] text-muted-foreground">
-                    <span>{iface.up ? "up" : "down"}</span>
-                    {iface.listenPort ? <span>:{iface.listenPort}</span> : null}
-                    {iface.peers.length > 0 && (
-                      <span>{iface.peers.length}p</span>
-                    )}
-                  </span>
-                </div>
-              </button>
-              <button
-                onClick={() => handleAction(iface)}
-                disabled={busy}
-                title={
-                  iface.up
-                    ? t("hostMetrics.managers.wgInterfaceDown")
-                    : t("hostMetrics.managers.wgInterfaceUp")
-                }
-                className="flex size-6 shrink-0 items-center justify-center text-muted-foreground transition-colors hover:bg-muted hover:text-foreground disabled:opacity-40"
-              >
-                {iface.up ? (
-                  <ArrowDown className="size-3" />
-                ) : (
-                  <ArrowUp className="size-3" />
-                )}
-              </button>
-            </div>
-
-            {expanded.has(iface.name) && (
-              <div className="mb-1 ml-5 flex flex-col border-l border-border/50">
-                {iface.peers.length === 0 ? (
-                  <span className="px-3 py-1 text-[10px] text-muted-foreground/50">
-                    {t("hostMetrics.managers.wgNoPeers")}
-                  </span>
-                ) : (
-                  iface.peers.map((peer) => (
-                    <div
-                      key={peer.publicKey}
-                      className="flex flex-col gap-0.5 border-b border-border/30 px-3 py-1.5 last:border-0"
-                    >
-                      <div className="flex items-center justify-between gap-2">
-                        <span className="font-mono text-[10px] text-muted-foreground">
-                          {truncKey(peer.publicKey)}
-                        </span>
-                        {peer.endpoint && (
-                          <span className="font-mono text-[10px] text-muted-foreground/60">
-                            {peer.endpoint}
-                          </span>
-                        )}
-                      </div>
-                      {peer.allowedIPs.length > 0 && (
-                        <span className="text-[10px] text-muted-foreground/70">
-                          {peer.allowedIPs.join(", ")}
-                        </span>
-                      )}
-                      <div className="flex items-center gap-3 text-[10px] text-muted-foreground/50">
-                        <span>
-                          {t("hostMetrics.managers.wgLastHandshake")}:{" "}
-                          {peer.latestHandshake
-                            ? fmtHandshake(peer.latestHandshake)
-                            : t("hostMetrics.managers.wgHandshakeNever")}
-                        </span>
-                        <span>
-                          {fmtBytes(peer.rxBytes)} / {fmtBytes(peer.txBytes)}
-                        </span>
-                      </div>
-                    </div>
-                  ))
-                )}
-              </div>
-            )}
-          </div>
-        ))}
-      </div>
-    </ManagerCardShell>
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/cards/managers/useManagerData.ts b/plugins/host-metrics/src/frontend/cards/managers/useManagerData.ts
deleted file mode 100644
index 6e2de7b87..000000000
--- a/plugins/host-metrics/src/frontend/cards/managers/useManagerData.ts
+++ /dev/null
@@ -1,121 +0,0 @@
-import { useCallback, useEffect, useState } from "react";
-import { toast } from "sonner";
-import { useHostMetricsApi } from "../../host-metrics-api";
-
-interface ManagerError {
-  message: string;
-  code?: string;
-}
-
-function extractError(err: unknown): ManagerError {
-  const e = err as {
-    response?: { data?: { error?: string; code?: string } };
-    message?: string;
-  };
-  return {
-    message: e?.response?.data?.error || e?.message || "Request failed",
-    code: e?.response?.data?.code,
-  };
-}
-
-/**
- * Fetch a manager read resource on mount + manual refresh, with loading/error
- * state. `hostId` null disables fetching.
- */
-export function useManagerData<T>(
-  hostId: number | null,
-  resource: string,
-  params?: Record<string, string | number>,
-) {
-  const { managerGet } = useHostMetricsApi();
-  const [data, setData] = useState<T | null>(null);
-  const [loading, setLoading] = useState(false);
-  const [error, setError] = useState<ManagerError | null>(null);
-
-  const paramsKey = params ? JSON.stringify(params) : "";
-
-  const refresh = useCallback(async () => {
-    if (hostId == null) return;
-    setLoading(true);
-    setError(null);
-    try {
-      const res = await managerGet<T>(hostId, resource, params);
-      setData(res);
-    } catch (err) {
-      setError(extractError(err));
-    } finally {
-      setLoading(false);
-    }
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [hostId, resource, paramsKey]);
-
-  useEffect(() => {
-    refresh();
-  }, [refresh]);
-
-  return { data, loading, error, refresh, setData };
-}
-
-interface ActionResult {
-  success: boolean;
-  output?: string;
-}
-
-/**
- * Run a manager POST action with consistent toast feedback (loading -> success
- * /error) and a busy flag. On success the optional `onDone` callback runs (e.g.
- * to refresh the card). Returns the result so callers can branch further.
- */
-export function useManagerAction(hostId: number | null) {
-  const { managerPost } = useHostMetricsApi();
-  const [busy, setBusy] = useState(false);
-
-  const run = useCallback(
-    async <T extends ActionResult>(
-      resource: string,
-      body: unknown,
-      opts: {
-        action?: string;
-        toastId?: string;
-        loadingMsg?: string;
-        successMsg?: string;
-        failMsg?: string;
-        onDone?: () => void;
-      } = {},
-    ): Promise<T | null> => {
-      if (hostId == null) return null;
-      const id = opts.toastId ?? `${resource}-action`;
-      setBusy(true);
-      if (opts.loadingMsg) toast.loading(opts.loadingMsg, { id });
-      try {
-        const res = await managerPost<T>(hostId, resource, body, opts.action);
-        if (res.success) {
-          if (opts.successMsg)
-            toast.success(opts.successMsg, {
-              id,
-              description: res.output?.slice(-200),
-            });
-          else toast.dismiss(id);
-          opts.onDone?.();
-        } else {
-          toast.error(opts.failMsg ?? res.output ?? "Action failed", {
-            id,
-            description: res.output?.slice(-200),
-          });
-        }
-        return res;
-      } catch (err) {
-        toast.error(extractError(err).message, { id });
-        return null;
-      } finally {
-        setBusy(false);
-      }
-    },
-    [hostId],
-  );
-
-  return { busy, run };
-}
-
-export { extractError };
-export type { ManagerError };
diff --git a/plugins/host-metrics/src/frontend/hooks/useHostMetricsPreferences.ts b/plugins/host-metrics/src/frontend/hooks/useHostMetricsPreferences.ts
deleted file mode 100644
index 08baa2490..000000000
--- a/plugins/host-metrics/src/frontend/hooks/useHostMetricsPreferences.ts
+++ /dev/null
@@ -1,92 +0,0 @@
-import { type HostMetricsLayout } from "../../shared/host-metrics.js";
-import { useCallback, useEffect, useRef, useState } from "react";
-import { useHostMetricsApi } from "../host-metrics-api";
-
-const SAVE_DEBOUNCE_MS = 800;
-
-function lsKey(hostId: number) {
-  return `hostMetricsLayout:${hostId}`;
-}
-
-function readCache(hostId: number): HostMetricsLayout | null {
-  try {
-    const raw = localStorage.getItem(lsKey(hostId));
-    if (!raw) return null;
-    const parsed = JSON.parse(raw);
-    if (parsed && Array.isArray(parsed.slots))
-      return parsed as HostMetricsLayout;
-  } catch {
-    /* ignore */
-  }
-  return null;
-}
-
-function writeCache(hostId: number, layout: HostMetricsLayout) {
-  try {
-    localStorage.setItem(lsKey(hostId), JSON.stringify(layout));
-  } catch {
-    /* ignore */
-  }
-}
-
-/**
- * Per-host Host Metrics layout, cached in localStorage for instant paint and
- * synced to the backend (so it follows the user across devices). Saves are
- * debounced. Returns null layout until the first load resolves.
- */
-export function useHostMetricsPreferences(hostId: number | null) {
-  const { getHostMetricsLayout, saveHostMetricsLayout } = useHostMetricsApi();
-  const [layout, setLayout] = useState<HostMetricsLayout | null>(() =>
-    hostId != null ? readCache(hostId) : null,
-  );
-  const [loaded, setLoaded] = useState(false);
-  const saveTimer = useRef<ReturnType<typeof setTimeout> | null>(null);
-
-  useEffect(() => {
-    if (hostId == null) return;
-    let cancelled = false;
-    setLoaded(false);
-    const cached = readCache(hostId);
-    if (cached) setLayout(cached);
-
-    getHostMetricsLayout(hostId)
-      .then((remote) => {
-        if (cancelled || !remote) return;
-        setLayout(remote);
-        writeCache(hostId, remote);
-      })
-      .catch(() => {
-        /* keep cache/default */
-      })
-      .finally(() => {
-        if (!cancelled) setLoaded(true);
-      });
-
-    return () => {
-      cancelled = true;
-    };
-  }, [hostId]);
-
-  const save = useCallback(
-    (next: HostMetricsLayout) => {
-      if (hostId == null) return;
-      setLayout(next);
-      writeCache(hostId, next);
-      if (saveTimer.current) clearTimeout(saveTimer.current);
-      saveTimer.current = setTimeout(() => {
-        saveHostMetricsLayout(hostId, next).catch(() => {
-          /* best-effort; cache already holds it */
-        });
-      }, SAVE_DEBOUNCE_MS);
-    },
-    [hostId],
-  );
-
-  useEffect(() => {
-    return () => {
-      if (saveTimer.current) clearTimeout(saveTimer.current);
-    };
-  }, []);
-
-  return { layout, setLayout: save, loaded };
-}
diff --git a/plugins/host-metrics/src/frontend/host-metrics-api.ts b/plugins/host-metrics/src/frontend/host-metrics-api.ts
deleted file mode 100644
index ad216c65e..000000000
--- a/plugins/host-metrics/src/frontend/host-metrics-api.ts
+++ /dev/null
@@ -1,226 +0,0 @@
-import { useMemo } from "react";
-import {
-  usePluginApi,
-  type PluginApiClient,
-} from "@termix/plugin-sdk/frontend";
-import type { HostMetricsLayout } from "../shared/host-metrics.js";
-import type { ServerMetrics } from "../shared/metrics.js";
-
-// Every call is keyed by a host's numeric database id, and the receiving
-// backend must own that host in its own database: a synced host has a
-// different numeric id on each side. They always target this backend.
-
-export interface MetricsHistoryRow {
-  ts: string;
-  cpu_percent: number | null;
-  mem_percent: number | null;
-  disk_percent: number | null;
-  net_rx_bytes: number | null;
-  net_tx_bytes: number | null;
-}
-
-export interface MetricsHistoryResponse {
-  rows: MetricsHistoryRow[];
-  fromTs: string;
-  toTs: string;
-}
-
-export interface PlatformInfo {
-  hasSystemd: boolean;
-  pkg: "apt" | "dnf" | "yum" | "pacman" | null;
-  hasCertbot: boolean;
-  hasAcmeSh: boolean;
-  hasDocker: boolean;
-  osPrettyName: string | null;
-}
-
-export interface ConnectionLogEntry {
-  type: "info" | "success" | "warning" | "error";
-  stage: string;
-  message: string;
-  details?: Record<string, unknown>;
-}
-
-export interface StartMetricsResult {
-  success: boolean;
-  requires_totp?: boolean;
-  sessionId?: string;
-  prompt?: string;
-  viewerSessionId?: string;
-  connectionLogs?: ConnectionLogEntry[];
-}
-
-function statusOf(error: unknown): number | undefined {
-  return (error as { response?: { status?: number } })?.response?.status;
-}
-
-function bodyOf(error: unknown): Record<string, unknown> | undefined {
-  return (error as { response?: { data?: Record<string, unknown> } })?.response
-    ?.data;
-}
-
-/** The plugin's routes, relative to /plugin-api/host-metrics/. */
-export function createHostMetricsApi(api: PluginApiClient) {
-  return {
-    async getMetrics(hostId: number): Promise<ServerMetrics | null> {
-      try {
-        return (await api.get<ServerMetrics>(`/metrics/${hostId}`)).data;
-      } catch (error) {
-        // No sample yet, or metrics are off for the host.
-        if (statusOf(error) === 404) return null;
-        throw error;
-      }
-    },
-
-    /** Throws an Error carrying the server's connectionLogs on failure. */
-    async startMetrics(hostId: number): Promise<StartMetricsResult> {
-      try {
-        return (await api.post<StartMetricsResult>(`/metrics/start/${hostId}`))
-          .data;
-      } catch (error) {
-        const body = bodyOf(error);
-        if (body?.connectionLogs) {
-          const wrapped = new Error(
-            String(body.error || body.message || "Failed to start metrics"),
-          );
-          Object.assign(wrapped, { connectionLogs: body.connectionLogs });
-          throw wrapped;
-        }
-        throw error;
-      }
-    },
-
-    async stopMetrics(hostId: number, viewerSessionId?: string) {
-      await api.post(`/metrics/stop/${hostId}`, { viewerSessionId });
-    },
-
-    async submitTotp(
-      sessionId: string,
-      totpCode: string,
-    ): Promise<{ success: boolean; viewerSessionId?: string }> {
-      return (
-        await api.post<{ success: boolean; viewerSessionId?: string }>(
-          "/metrics/connect-totp",
-          { sessionId, totpCode },
-        )
-      ).data;
-    },
-
-    /** False when the server no longer knows the viewer. */
-    async heartbeat(viewerSessionId: string): Promise<boolean> {
-      try {
-        await api.post("/metrics/heartbeat", { viewerSessionId });
-        return true;
-      } catch (error) {
-        if (statusOf(error) === 404) return false;
-        throw error;
-      }
-    },
-
-    async registerViewer(hostId: number): Promise<{
-      success: boolean;
-      viewerSessionId?: string;
-      skipped?: boolean;
-      reason?: string;
-    }> {
-      return (await api.post("/metrics/register-viewer", { hostId })).data as {
-        success: boolean;
-        viewerSessionId?: string;
-        skipped?: boolean;
-        reason?: string;
-      };
-    },
-
-    async unregisterViewer(hostId: number, viewerSessionId: string) {
-      await api.post("/metrics/unregister-viewer", {
-        hostId,
-        viewerSessionId,
-      });
-    },
-
-    async getMetricsHistory(
-      hostId: number,
-      opts: { range?: string; from?: string; to?: string },
-    ): Promise<MetricsHistoryResponse> {
-      return (
-        await api.get<MetricsHistoryResponse>(`/metrics/history/${hostId}`, {
-          params: opts,
-        })
-      ).data;
-    },
-
-    async getHostMetricsLayout(
-      hostId: number,
-    ): Promise<HostMetricsLayout | null> {
-      try {
-        const res = await api.get<{ layout?: HostMetricsLayout }>(
-          `/host-metrics/preferences/${hostId}`,
-        );
-        return res.data?.layout ?? null;
-      } catch (error) {
-        if (statusOf(error) === 404) return null;
-        throw error;
-      }
-    },
-
-    async saveHostMetricsLayout(hostId: number, layout: HostMetricsLayout) {
-      await api.post(`/host-metrics/preferences/${hostId}`, layout);
-    },
-
-    async getHostPlatform(hostId: number): Promise<PlatformInfo> {
-      return (await api.get<PlatformInfo>(`/host-metrics/platform/${hostId}`))
-        .data;
-    },
-
-    /** GET a manager resource (read). */
-    async managerGet<T>(
-      hostId: number,
-      resource: string,
-      params?: Record<string, string | number>,
-    ): Promise<T> {
-      return (
-        await api.get<T>(`/host-metrics/managers/${resource}/${hostId}`, {
-          params,
-        })
-      ).data;
-    },
-
-    /** GET where the host id sits mid-path: /managers/logs/{id}/files. */
-    async managerGetSub<T>(
-      hostId: number,
-      resource: string,
-      sub: string,
-      params?: Record<string, string | number>,
-    ): Promise<T> {
-      return (
-        await api.get<T>(
-          `/host-metrics/managers/${resource}/${hostId}/${sub}`,
-          { params },
-        )
-      ).data;
-    },
-
-    /** POST a manager action: /managers/{resource}/{id}[/{action}]. */
-    async managerPost<T>(
-      hostId: number,
-      resource: string,
-      body: unknown,
-      action?: string,
-    ): Promise<T> {
-      const suffix = action ? `/${action}` : "";
-      return (
-        await api.post<T>(
-          `/host-metrics/managers/${resource}/${hostId}${suffix}`,
-          body,
-        )
-      ).data;
-    },
-  };
-}
-
-export type HostMetricsApi = ReturnType<typeof createHostMetricsApi>;
-
-export function useHostMetricsApi(): HostMetricsApi {
-  const api = usePluginApi();
-  return useMemo(() => createHostMetricsApi(api), [api]);
-}
diff --git a/plugins/host-metrics/src/frontend/index.tsx b/plugins/host-metrics/src/frontend/index.tsx
deleted file mode 100644
index 681391d90..000000000
--- a/plugins/host-metrics/src/frontend/index.tsx
+++ /dev/null
@@ -1,147 +0,0 @@
-import type { ComponentType } from "react";
-import { Activity, Server } from "lucide-react";
-import type {
-  HostEditorSectionProps,
-  PluginHostRecord,
-  StandaloneViewProps,
-  TabProps,
-  TermixApp,
-} from "@termix/plugin-sdk/frontend";
-import { HostMetricsTab } from "./HostMetricsTab";
-import HostMetricsApp from "./HostMetricsApp";
-import { HostStatsTab } from "./HostEditorStatsTab";
-import { metricsChartWidget } from "./MetricsChartWidget";
-import { TerminalMetricsStatus } from "./TerminalMetricsStatus";
-import { createHostMetricsApi } from "./host-metrics-api";
-import { createMetricsSummaryStore } from "./summary-store";
-import {
-  createDashboardHostMetrics,
-  createHomepageHostMetrics,
-} from "./SummaryViews";
-
-type HostMetricsTabConfig = Parameters<typeof HostMetricsTab>[0]["hostConfig"];
-
-/** This plugin's metricsEnabled host setting; on unless turned off. */
-function metricsEnabledFor(host: unknown): boolean {
-  const bag = (
-    host as { pluginSettings?: Record<string, Record<string, unknown>> }
-  )?.pluginSettings;
-  return bag?.["host-metrics"]?.metricsEnabled !== false;
-}
-
-function MetricsTab({ sshHost, label, isVisible }: TabProps) {
-  return (
-    <HostMetricsTab
-      hostConfig={sshHost as unknown as HostMetricsTabConfig}
-      title={label}
-      isVisible={isVisible}
-      isTopbarOpen={false}
-      embedded={true}
-    />
-  );
-}
-
-function MetricsStandalone({ hostId }: StandaloneViewProps) {
-  return <HostMetricsApp hostId={hostId} />;
-}
-
-function MetricsHostSection(props: HostEditorSectionProps) {
-  return <HostStatsTab {...props} />;
-}
-
-export async function activate(app: TermixApp): Promise<void> {
-  const allowed = await app.hasPermission("use");
-  const metricsApi = createHostMetricsApi(app.api);
-  const summaries = createMetricsSummaryStore(metricsApi);
-  app.onDispose(() => summaries.dispose());
-
-  // The latest disk sample, for the file manager's usage bar.
-  app.registerAction(
-    "host-metrics.disk",
-    (async (hostId: number) =>
-      (await metricsApi.getMetrics(hostId).catch(() => null))?.disk ??
-      null) as never,
-    { permission: "use" },
-  );
-
-  app.registerTab("host-metrics", MetricsTab, {
-    icon: Server,
-    titleKey: "nav.hostMetrics",
-    requiresHost: true,
-    noHostMessageKey: "hostMetrics.noHostSelected",
-    persistent: true,
-    activityTypes: ["server_stats"],
-    standalone: MetricsStandalone,
-    // Links copied before the rename still open.
-    standaloneViews: ["server-stats"],
-    preload: () => import("./HostMetricsTab"),
-  });
-
-  app.registerHostAction({
-    id: "host-metrics",
-    titleKey: "nav.hostMetrics",
-    icon: Server,
-    kind: "open",
-    order: 50,
-    tabType: "host-metrics",
-    copyUrlView: "host-metrics",
-    overview: true,
-    when: (host: PluginHostRecord) =>
-      allowed && !!host.enableSsh && metricsEnabledFor(host),
-  });
-
-  app.registerHostEditorSection({
-    id: "host-metrics",
-    group: "ssh",
-    titleKey: "hosts.tabHostMetrics",
-    icon: Activity,
-    order: 70,
-    defaults: true,
-    component: MetricsHostSection,
-  });
-
-  app.registerExtension("homepage.widgets", metricsChartWidget);
-
-  // Live CPU, memory and disk bars in the terminal toolbar's expanded view.
-  app.registerSlotContribution("terminal.toolbarStatus", {
-    actionId: "host-metrics.terminalStatus",
-    titleKey: "nav.hostMetrics",
-    kind: "component",
-    component: TerminalMetricsStatus,
-    when: (context) => allowed && metricsEnabledFor(context.host),
-  });
-
-  // The usage bars in the dashboard's host status card.
-  app.registerSlotContribution("dashboard.hostRow", {
-    actionId: "host-metrics.dashboardHost",
-    titleKey: "nav.hostMetrics",
-    kind: "component",
-    component: createDashboardHostMetrics(summaries),
-  });
-
-  // The numbers in the homepage's host status widget.
-  app.registerSlotContribution("homepage.hostMetrics", {
-    actionId: "host-metrics.homepageHost",
-    titleKey: "nav.hostMetrics",
-    kind: "component",
-    component: createHomepageHostMetrics(summaries),
-  });
-
-  app.registerSlotContribution("onboarding.features", {
-    actionId: "host-metrics.feature",
-    titleKey: "onboarding.feature_metrics",
-    descriptionKey: "onboarding.feature_metrics_desc",
-    icon: Activity as ComponentType<{ className?: string }>,
-  });
-
-  app.declareActionSlot({
-    id: "host-metrics.managers",
-    accepts: ["component"],
-  });
-  // Buttons before the toolbar's own controls, drawn with { hostId, host }.
-  // The snippets plugin puts a host's quick actions here.
-  app.declareActionSlot({
-    id: "host-metrics.toolbar",
-    accepts: ["component"],
-  });
-}
diff --git a/plugins/host-metrics/src/frontend/metrics-change-key.ts b/plugins/host-metrics/src/frontend/metrics-change-key.ts
deleted file mode 100644
index 75ae09d75..000000000
--- a/plugins/host-metrics/src/frontend/metrics-change-key.ts
+++ /dev/null
@@ -1,23 +0,0 @@
-/**
- * Coarse fingerprint of a metrics poll. Adaptive polling backs off while it
- * stays the same, so it must move whenever something a card shows changes.
- */
-export function metricsChangeKey(data: ServerMetrics): string {
-  const bucket = (value: number | null | undefined) =>
-    value == null ? null : Math.round(value / 5) * 5;
-  return JSON.stringify({
-    cpu: bucket(data.cpu.percent),
-    memory: bucket(data.memory.percent),
-    disk: bucket(data.disk.percent),
-    running: data.processes?.running ?? null,
-    ports: data.ports?.ports?.length ?? 0,
-    firewall: data.firewall?.status ?? null,
-    gpus:
-      data.gpu?.gpus?.map((gpu) => [
-        bucket(gpu.utilizationPercent),
-        bucket(gpu.memoryPercent),
-      ]) ?? [],
-    gpuProcesses: data.gpu?.processes?.length ?? 0,
-  });
-}
-import { type ServerMetrics } from "../shared/metrics.js";
diff --git a/plugins/host-metrics/src/frontend/summary-store.ts b/plugins/host-metrics/src/frontend/summary-store.ts
deleted file mode 100644
index d9217ba1a..000000000
--- a/plugins/host-metrics/src/frontend/summary-store.ts
+++ /dev/null
@@ -1,115 +0,0 @@
-import { useCallback, useSyncExternalStore } from "react";
-import type { ServerMetrics } from "../shared/metrics.js";
-import type { HostMetricsApi } from "./host-metrics-api";
-
-const REFRESH_MS = 30_000;
-
-interface Entry {
-  refs: number;
-  viewerSessionId?: string;
-  data: ServerMetrics | null;
-  listeners: Set<() => void>;
-}
-
-/**
- * Latest metrics for hosts shown outside the tab (dashboard rows, homepage
- * widgets). Each watched host holds one viewer, so polling runs while
- * something shows it and stops with the last one.
- */
-export function createMetricsSummaryStore(api: HostMetricsApi) {
-  const entries = new Map<number, Entry>();
-  let timer: ReturnType<typeof setInterval> | null = null;
-
-  const notify = (entry: Entry) => {
-    for (const listener of entry.listeners) listener();
-  };
-
-  async function refresh(hostId: number): Promise<void> {
-    const entry = entries.get(hostId);
-    if (!entry) return;
-    try {
-      if (
-        entry.viewerSessionId &&
-        !(await api.heartbeat(entry.viewerSessionId))
-      ) {
-        entry.viewerSessionId = undefined;
-      }
-      if (!entry.viewerSessionId) {
-        const registered = await api.registerViewer(hostId);
-        if (registered.viewerSessionId) {
-          entry.viewerSessionId = registered.viewerSessionId;
-        }
-      }
-      entry.data = await api.getMetrics(hostId);
-    } catch {
-      // Keep the last value; the next tick tries again.
-    }
-    if (entries.get(hostId) === entry) notify(entry);
-  }
-
-  function tick() {
-    if (typeof document !== "undefined" && document.hidden) return;
-    for (const hostId of entries.keys()) void refresh(hostId);
-  }
-
-  function release(hostId: number, entry: Entry) {
-    entries.delete(hostId);
-    if (entry.viewerSessionId) {
-      void api.unregisterViewer(hostId, entry.viewerSessionId).catch(() => {});
-    }
-    if (entries.size === 0 && timer) {
-      clearInterval(timer);
-      timer = null;
-    }
-  }
-
-  return {
-    watch(hostId: number, listener: () => void): () => void {
-      let entry = entries.get(hostId);
-      if (!entry) {
-        entry = { refs: 0, data: null, listeners: new Set() };
-        entries.set(hostId, entry);
-        void refresh(hostId);
-      }
-      entry.refs++;
-      entry.listeners.add(listener);
-      if (!timer) timer = setInterval(tick, REFRESH_MS);
-      const held = entry;
-      return () => {
-        held.listeners.delete(listener);
-        held.refs--;
-        if (held.refs <= 0) release(hostId, held);
-      };
-    },
-
-    get(hostId: number): ServerMetrics | null {
-      return entries.get(hostId)?.data ?? null;
-    },
-
-    dispose() {
-      for (const [hostId, entry] of [...entries.entries()]) {
-        release(hostId, entry);
-      }
-    },
-  };
-}
-
-export type MetricsSummaryStore = ReturnType<typeof createMetricsSummaryStore>;
-
-/** The host's latest sample, polled while the calling component is shown. */
-export function useMetricsSummary(
-  store: MetricsSummaryStore,
-  hostId: number | null | undefined,
-): ServerMetrics | null {
-  // Stable per host, or every render would drop and re-add the viewer.
-  const subscribe = useCallback(
-    (onChange: () => void) =>
-      hostId ? store.watch(hostId, onChange) : () => {},
-    [store, hostId],
-  );
-  return useSyncExternalStore(
-    subscribe,
-    () => (hostId ? store.get(hostId) : null),
-    () => null,
-  );
-}
diff --git a/plugins/host-metrics/src/frontend/temperature-preference.ts b/plugins/host-metrics/src/frontend/temperature-preference.ts
deleted file mode 100644
index f1963f81f..000000000
--- a/plugins/host-metrics/src/frontend/temperature-preference.ts
+++ /dev/null
@@ -1,30 +0,0 @@
-import type { TemperatureSensor } from "../shared/stats-widgets.js";
-
-export type TemperatureUnit = "celsius" | "fahrenheit";
-
-export function selectTemperatureSensor(
-  sensors: TemperatureSensor[],
-  preferredLabel: string,
-) {
-  return sensors.find((sensor) => sensor.label === preferredLabel) ?? null;
-}
-
-/** The sensor a person picked is remembered per browser. */
-export function temperaturePreferenceKey(hostId: number) {
-  return `termix-host-metrics:${hostId}:temperature-sensor`;
-}
-
-/** The temperatureUnit user setting, celsius for anything else. */
-export function temperatureUnitOf(value: unknown): TemperatureUnit {
-  return value === "fahrenheit" ? "fahrenheit" : "celsius";
-}
-
-export function formatTemperature(
-  celsius: number | null | undefined,
-  unit: TemperatureUnit = "celsius",
-): string {
-  if (typeof celsius !== "number" || !Number.isFinite(celsius)) return "N/A";
-  return unit === "fahrenheit"
-    ? `${((celsius * 9) / 5 + 32).toFixed(1)}°F`
-    : `${celsius.toFixed(1)}°C`;
-}
diff --git a/plugins/host-metrics/src/shared/homepage.ts b/plugins/host-metrics/src/shared/homepage.ts
deleted file mode 100644
index 4a60ea77d..000000000
--- a/plugins/host-metrics/src/shared/homepage.ts
+++ /dev/null
@@ -1,43 +0,0 @@
-import type { ComponentType, ReactNode } from "react";
-import type { ExtensionContribution } from "@termix/plugin-sdk/frontend";
-
-/** The homepage's grid step, in pixels. */
-export const GRID_SIZE = 30;
-
-export type MetricsChartMetric =
-  "cpu" | "memory" | "disk" | "net_rx" | "net_tx";
-export type MetricsChartRange = "15m" | "1h" | "6h" | "24h";
-
-export interface MetricsChartConfig {
-  hostId: number;
-  metric: MetricsChartMetric;
-  range: MetricsChartRange;
-  showCurrentValue: boolean;
-}
-
-/** What the homepage hands a widget; only the fields this plugin reads. */
-export interface WidgetComponentProps<C> {
-  widget: { title?: string | null };
-  config: C;
-}
-
-export interface WidgetEditFormProps<C> {
-  config: C;
-  onChange: (config: C) => void;
-}
-
-/** What app.registerExtension("homepage.widgets", ...) takes. */
-export interface WidgetDefinition<C> extends ExtensionContribution {
-  id: string;
-  name: string;
-  description: string;
-  category: "links" | "info" | "system" | "monitoring";
-  icon: ReactNode;
-  defaultConfig: C;
-  defaultSize: { w: number; h: number };
-  minSize: { w: number; h: number };
-  components: {
-    view: ComponentType<WidgetComponentProps<C>>;
-    editForm?: ComponentType<WidgetEditFormProps<C>>;
-  };
-}
diff --git a/plugins/host-metrics/src/shared/host-metrics.ts b/plugins/host-metrics/src/shared/host-metrics.ts
deleted file mode 100644
index 1ec2901f1..000000000
--- a/plugins/host-metrics/src/shared/host-metrics.ts
+++ /dev/null
@@ -1,145 +0,0 @@
-import type { WidgetType } from "./stats-widgets.js";
-
-/**
- * Host Metrics layout model. Shared by the frontend tab and the backend
- * preferences endpoint. Metric card ids reuse the existing `WidgetType` values
- * verbatim (so `enabledWidgets` stays valid for the mobile app); manager card
- * ids are new and never enter the `enabledWidgets` host setting.
- */
-
-export type HostMetricCardId = WidgetType;
-
-export type HostMetricManagerId =
-  | "service_manager"
-  | "process_inspector"
-  | "log_viewer"
-  | "cron_manager"
-  | "package_manager"
-  | "ssl_manager"
-  | "firewall_manager"
-  | "user_manager"
-  | "health_check"
-  | "disk_breakdown"
-  | "systemd_timers"
-  | "top_memory"
-  | "wireguard_manager"
-  | "tailscale_manager";
-
-export type HostMetricsCardId = HostMetricCardId | HostMetricManagerId;
-
-export type HostMetricsColSpan = 1 | 2 | 3;
-
-export interface HostMetricsSlot {
-  id: HostMetricsCardId;
-  order: number;
-  colSpan: HostMetricsColSpan;
-  height: number | null;
-}
-
-export interface HostMetricsLayout {
-  slots: HostMetricsSlot[];
-  columns: number;
-}
-
-/** Canonical order of metric cards (also the canonical `enabledWidgets` order). */
-export const METRIC_CARD_IDS: HostMetricCardId[] = [
-  "cpu",
-  "memory",
-  "disk",
-  "network",
-  "uptime",
-  "system",
-  "login_stats",
-  "processes",
-  "ports",
-  "firewall",
-  "temperature",
-  "gpu",
-];
-
-export const MANAGER_CARD_IDS: HostMetricManagerId[] = [
-  "service_manager",
-  "process_inspector",
-  "log_viewer",
-  "cron_manager",
-  "package_manager",
-  "ssl_manager",
-  "firewall_manager",
-  "user_manager",
-  "health_check",
-  "disk_breakdown",
-  "systemd_timers",
-  "top_memory",
-  "wireguard_manager",
-  "tailscale_manager",
-];
-
-export function isMetricCardId(id: string): id is HostMetricCardId {
-  return (METRIC_CARD_IDS as string[]).includes(id);
-}
-
-export function isManagerCardId(id: string): id is HostMetricManagerId {
-  return (MANAGER_CARD_IDS as string[]).includes(id);
-}
-
-/**
- * Derive the flat `enabledWidgets` array (canonical order, deduped, metric ids
- * only) from a set of layout slots. This is the single source of truth keeping
- * the `enabledWidgets` host setting valid for the mobile app.
- */
-export function deriveEnabledWidgets(
-  slots: Array<{ id: string }>,
-): WidgetType[] {
-  const present = new Set(slots.map((s) => s.id));
-  return METRIC_CARD_IDS.filter((id) => present.has(id));
-}
-
-const DEFAULT_COLSPAN: Partial<Record<HostMetricsCardId, HostMetricsColSpan>> =
-  {
-    cpu: 1,
-    memory: 1,
-    disk: 1,
-    uptime: 1,
-    system: 1,
-    network: 1,
-    temperature: 1,
-    processes: 2,
-    ports: 2,
-    firewall: 2,
-    login_stats: 2,
-    gpu: 2,
-  };
-
-// All cards default to content/auto height (null); the masonry packs them
-// tetris-style and scrollable cards cap their own body height. Users can still
-// pin an explicit height by dragging a card's resize handle.
-const DEFAULT_HEIGHT: Partial<Record<HostMetricsCardId, number | null>> = {};
-
-/**
- * Build a default layout from a list of enabled metric-card ids (e.g. the host's
- * current the `enabledWidgets` host setting), preserving canonical order. Manager
- * cards are not added by default.
- */
-export function defaultLayoutFromWidgets(
-  enabledWidgets: string[],
-  columns = 3,
-): HostMetricsLayout {
-  const enabled = new Set(enabledWidgets);
-  const ids = METRIC_CARD_IDS.filter((id) => enabled.has(id));
-  const slots: HostMetricsSlot[] = ids.map((id, i) => ({
-    id,
-    order: i,
-    colSpan: DEFAULT_COLSPAN[id] ?? 1,
-    height: DEFAULT_HEIGHT[id] ?? null,
-  }));
-  return { slots, columns };
-}
-
-export function defaultColSpanFor(id: HostMetricsCardId): HostMetricsColSpan {
-  return DEFAULT_COLSPAN[id] ?? (isManagerCardId(id) ? 2 : 1);
-}
-
-export function defaultHeightFor(id: HostMetricsCardId): number | null {
-  if (id in DEFAULT_HEIGHT) return DEFAULT_HEIGHT[id] ?? null;
-  return null;
-}
diff --git a/plugins/host-metrics/src/shared/metrics.ts b/plugins/host-metrics/src/shared/metrics.ts
deleted file mode 100644
index e261a973c..000000000
--- a/plugins/host-metrics/src/shared/metrics.ts
+++ /dev/null
@@ -1,136 +0,0 @@
-import type { GpuMetrics } from "./stats-widgets.js";
-
-/** What GET /metrics/:id answers. */
-export interface CpuMetrics {
-  percent: number | null;
-  cores: number | null;
-  load: [number, number, number] | null;
-}
-
-export interface MemoryMetrics {
-  percent: number | null;
-  usedGiB: number | null;
-  totalGiB: number | null;
-}
-
-export interface DiskFilesystem {
-  filesystem: string;
-  type: string;
-  mount: string;
-  percent: number | null;
-  usedHuman: string | null;
-  totalHuman: string | null;
-  availableHuman: string | null;
-  usedBytes: number | null;
-  totalBytes: number | null;
-  availableBytes: number | null;
-  label?: string;
-}
-
-interface DiskMetrics {
-  percent: number | null;
-  usedHuman: string | null;
-  totalHuman: string | null;
-  availableHuman?: string | null;
-  mount?: string | null;
-  filesystems?: DiskFilesystem[];
-}
-
-export interface NetworkInterface {
-  name: string;
-  ip: string;
-  state: string;
-  rx?: string | null;
-  tx?: string | null;
-  rxBytes?: string | null;
-  txBytes?: string | null;
-  rxRateBps?: number | null;
-  txRateBps?: number | null;
-}
-
-export interface ProcessInfo {
-  pid: string;
-  user: string;
-  cpu: string;
-  mem: string;
-  command: string;
-}
-
-export interface LoginRecord {
-  user: string;
-  ip: string;
-  time: string;
-  status: "success" | "failed";
-}
-
-export interface ListeningPort {
-  protocol: "tcp" | "udp";
-  localAddress: string;
-  localPort: number;
-  state?: string;
-  pid?: number;
-  process?: string;
-}
-
-export interface FirewallRule {
-  chain: string;
-  target: string;
-  protocol: string;
-  source: string;
-  destination: string;
-  dport?: string;
-  sport?: string;
-  state?: string;
-  interface?: string;
-  extra?: string;
-}
-
-export interface FirewallChain {
-  name: string;
-  policy: string;
-  rules: FirewallRule[];
-}
-
-export type ServerMetrics = {
-  cpu: CpuMetrics;
-  memory: MemoryMetrics;
-  disk: DiskMetrics;
-  network?: { interfaces?: NetworkInterface[] };
-  uptime?: { seconds?: number | null; formatted?: string | null };
-  system?: {
-    hostname?: string | null;
-    os?: string | null;
-    kernel?: string | null;
-    arch?: string | null;
-  };
-  processes?: {
-    total?: number | null;
-    running?: number | null;
-    top?: ProcessInfo[];
-  };
-  login_stats?: {
-    recentLogins?: LoginRecord[];
-    failedLogins?: LoginRecord[];
-    totalLogins?: number;
-    uniqueIPs?: number;
-  };
-  ports?: {
-    source?: "ss" | "netstat" | "none";
-    ports?: ListeningPort[];
-  };
-  firewall?: {
-    type?: "iptables" | "nftables" | "none";
-    status?: "active" | "inactive" | "unknown";
-    chains?: FirewallChain[];
-  };
-  temperature?: {
-    source?: "sysfs" | "sensors" | "none";
-    highestCelsius?: number | null;
-    sensors?: Array<{
-      label: string;
-      celsius: number;
-    }>;
-  };
-  gpu?: GpuMetrics;
-  lastChecked: string;
-};
diff --git a/plugins/host-metrics/src/shared/stats-widgets.ts b/plugins/host-metrics/src/shared/stats-widgets.ts
deleted file mode 100644
index aec7b6631..000000000
--- a/plugins/host-metrics/src/shared/stats-widgets.ts
+++ /dev/null
@@ -1,161 +0,0 @@
-export type WidgetType =
-  | "cpu"
-  | "memory"
-  | "disk"
-  | "network"
-  | "uptime"
-  | "processes"
-  | "system"
-  | "login_stats"
-  | "ports"
-  | "firewall"
-  | "temperature"
-  | "gpu";
-
-export interface ListeningPort {
-  protocol: "tcp" | "udp";
-  localAddress: string;
-  localPort: number;
-  state?: string;
-  pid?: number;
-  process?: string;
-}
-
-export interface PortsMetrics {
-  source: "ss" | "netstat" | "none";
-  ports: ListeningPort[];
-}
-
-export interface FirewallRule {
-  chain: string;
-  target: string;
-  protocol: string;
-  source: string;
-  destination: string;
-  dport?: string;
-  sport?: string;
-  state?: string;
-  interface?: string;
-  extra?: string;
-}
-
-export interface FirewallChain {
-  name: string;
-  policy: string;
-  rules: FirewallRule[];
-}
-
-export interface FirewallMetrics {
-  type: "iptables" | "nftables" | "none";
-  status: "active" | "inactive" | "unknown";
-  chains: FirewallChain[];
-}
-
-export interface TemperatureSensor {
-  label: string;
-  celsius: number;
-}
-
-export interface TemperatureMetrics {
-  source: "sysfs" | "sensors" | "none";
-  highestCelsius: number | null;
-  sensors: TemperatureSensor[];
-}
-
-export interface GpuDevice {
-  index: number;
-  uuid: string;
-  name: string;
-  driverVersion: string | null;
-  utilizationPercent: number | null;
-  memoryUsedMiB: number | null;
-  memoryTotalMiB: number | null;
-  memoryPercent: number | null;
-  temperatureCelsius: number | null;
-  powerDrawWatts: number | null;
-  powerLimitWatts: number | null;
-  fanPercent: number | null;
-}
-
-export interface GpuProcess {
-  gpuIndex: number | null;
-  pid: number;
-  name: string;
-  memoryUsedMiB: number | null;
-}
-
-export interface GpuMetrics {
-  source: "nvidia-smi" | "none";
-  gpus: GpuDevice[];
-  processes: GpuProcess[];
-}
-
-/** This plugin's host settings, as core stores them in plugin_settings. */
-export interface HostMetricsSettings {
-  metricsEnabled: boolean;
-  /** Seconds between samples; null follows the admin setting. */
-  metricsInterval: number | null;
-  enabledWidgets: WidgetType[];
-  /** Filesystem mount points to leave out of the disk widget. */
-  excludedMounts: string[];
-  /** Extra paths to monitor, including paths inside bind-mounted containers. */
-  monitoredMounts: Array<{ path: string; label?: string }>;
-}
-
-export const DEFAULT_ENABLED_WIDGETS: WidgetType[] = [
-  "cpu",
-  "memory",
-  "disk",
-  "network",
-  "uptime",
-  "system",
-  "login_stats",
-  "processes",
-  "ports",
-  "firewall",
-  "temperature",
-];
-
-export const DEFAULT_HOST_METRICS_SETTINGS: HostMetricsSettings = {
-  metricsEnabled: true,
-  metricsInterval: null,
-  enabledWidgets: DEFAULT_ENABLED_WIDGETS,
-  excludedMounts: [],
-  monitoredMounts: [],
-};
-
-/** Host settings with defaults filled in and bad values dropped. */
-export function readHostMetricsSettings(
-  values: Record<string, unknown> | null | undefined,
-): HostMetricsSettings {
-  const bag = values ?? {};
-  const interval = Number(bag.metricsInterval);
-  return {
-    metricsEnabled: bag.metricsEnabled !== false,
-    metricsInterval:
-      bag.metricsInterval != null &&
-      Number.isInteger(interval) &&
-      interval >= 5 &&
-      interval <= 3600
-        ? interval
-        : null,
-    enabledWidgets: Array.isArray(bag.enabledWidgets)
-      ? (bag.enabledWidgets.filter(
-          (widget) => typeof widget === "string",
-        ) as WidgetType[])
-      : DEFAULT_ENABLED_WIDGETS,
-    excludedMounts: Array.isArray(bag.excludedMounts)
-      ? bag.excludedMounts.filter(
-          (mount): mount is string => typeof mount === "string",
-        )
-      : [],
-    monitoredMounts: Array.isArray(bag.monitoredMounts)
-      ? (bag.monitoredMounts as unknown[]).filter(
-          (mount): mount is { path: string; label?: string } =>
-            !!mount &&
-            typeof mount === "object" &&
-            typeof (mount as { path?: unknown }).path === "string",
-        )
-      : [],
-  };
-}
diff --git a/plugins/host-metrics/tests/backend/activate.test.ts b/plugins/host-metrics/tests/backend/activate.test.ts
deleted file mode 100644
index 0623843a7..000000000
--- a/plugins/host-metrics/tests/backend/activate.test.ts
+++ /dev/null
@@ -1,140 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import express from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import { PluginCapabilityError } from "@termix/plugin-sdk/backend";
-import { activate } from "../../src/backend/index.js";
-import type { MetricsViewersV1 } from "../../src/backend/index.js";
-import { hostImportNormalizer } from "../../src/backend/host-import.js";
-import { MetricsPoller } from "../../src/backend/poller.js";
-import { manifest, pluginDir, startServer, type TestServer } from "./server";
-
-let db: TestDb | null = null;
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  db?.close();
-  db = null;
-  await server?.close();
-  server = null;
-});
-
-describe("host-metrics activate", () => {
-  it.each(["db:own", "network:serve"])(
-    "fails closed without %s",
-    async (missing) => {
-      db = await createTestDb(pluginDir);
-      const mock = createMockCtx({
-        pluginId: manifest.id,
-        manifest,
-        capabilities: manifest.capabilities.filter((cap) => cap !== missing),
-        db: db.database,
-        router: () => express.Router(),
-      });
-      await expect(activate(mock.ctx)).rejects.toBeInstanceOf(
-        PluginCapabilityError,
-      );
-    },
-  );
-
-  it("offers viewers as a service that runs as the caller", async () => {
-    server = await startServer();
-    const viewers = server.mock.services.get(
-      "host-metrics.viewers",
-    ) as MetricsViewersV1;
-
-    const registered = await server.mock.ctx.asUser("user-1", () =>
-      viewers.register(7),
-    );
-    expect(registered).toEqual({ viewerSessionId: expect.any(String) });
-    const id = (registered as { viewerSessionId: string }).viewerSessionId;
-
-    expect(
-      await server.mock.ctx.asUser("user-1", async () => viewers.heartbeat(id)),
-    ).toBe(true);
-    expect(
-      await server.mock.ctx.asUser("user-2", async () => viewers.heartbeat(id)),
-    ).toBe(false);
-
-    expect(
-      await server.mock.ctx.asUser("user-1", () => viewers.register(99)),
-    ).toEqual({ skipped: true, reason: "host_not_found" });
-  });
-
-  it("stops every timer when the plugin is disabled", async () => {
-    server = await startServer();
-    const jobs = server.mock.scheduled;
-    expect(jobs.length).toBeGreaterThan(0);
-    for (const dispose of server.mock.disposals) await dispose();
-    expect(jobs.every((job) => job.stopped)).toBe(true);
-  });
-
-  it("registers its host import normalizer", async () => {
-    server = await startServer();
-    expect(
-      server.mock.ctx.registry.consume("host-metrics.hostImportNormalizer"),
-    ).toBe(hostImportNormalizer);
-  });
-});
-
-describe("hostImportNormalizer", () => {
-  it("reads this plugin's settings from a Termix export", () => {
-    expect(
-      hostImportNormalizer({
-        pluginSettings: {
-          "host-metrics": { metricsEnabled: false, enabledWidgets: ["cpu"] },
-        },
-      }),
-    ).toMatchObject({ metricsEnabled: false, enabledWidgets: ["cpu"] });
-  });
-
-  it("reads the metrics half of an export from before 2.9.0", () => {
-    expect(
-      hostImportNormalizer({
-        statsConfig: {
-          statusCheckEnabled: false,
-          metricsEnabled: true,
-          metricsInterval: 45,
-          useGlobalMetricsInterval: false,
-          excludedMounts: ["/snap"],
-        },
-      }),
-    ).toMatchObject({
-      metricsEnabled: true,
-      metricsInterval: 45,
-      excludedMounts: ["/snap"],
-    });
-  });
-
-  it("ignores the old interval while the global one was in use", () => {
-    expect(
-      hostImportNormalizer({ statsConfig: { metricsInterval: 45 } }),
-    ).toMatchObject({ metricsInterval: null });
-  });
-
-  it("writes nothing for a row without metrics settings", () => {
-    expect(hostImportNormalizer({ name: "x" })).toBeNull();
-  });
-
-  it("retimes once after a burst of interval writes", async () => {
-    server = await startServer();
-    const retime = vi
-      .spyOn(MetricsPoller.prototype, "retimeAll")
-      .mockResolvedValue();
-    vi.useFakeTimers();
-    try {
-      for (let hostId = 1; hostId <= 20; hostId++) {
-        await server.mock.ctx.settings.setHost(hostId, "metricsInterval", 30);
-      }
-      expect(retime).not.toHaveBeenCalled();
-      await vi.advanceTimersByTimeAsync(1500);
-      expect(retime).toHaveBeenCalledTimes(1);
-    } finally {
-      vi.useRealTimers();
-      retime.mockRestore();
-    }
-  });
-});
diff --git a/plugins/host-metrics/tests/backend/helpers.test.ts b/plugins/host-metrics/tests/backend/helpers.test.ts
deleted file mode 100644
index 774dc2b2b..000000000
--- a/plugins/host-metrics/tests/backend/helpers.test.ts
+++ /dev/null
@@ -1,79 +0,0 @@
-import { describe, it, expect } from "vitest";
-import {
-  connectionLog,
-  sudoPasswordOf,
-  supportsMetrics,
-  type MetricsHost,
-} from "../../src/backend/helpers.js";
-import { createFakeContext } from "@termix/plugin-sdk/testing";
-
-const ssh = createFakeContext().ctx.ssh;
-
-describe("supportsMetrics", () => {
-  it("supports plain ssh hosts", () => {
-    expect(
-      supportsMetrics({ connectionType: "ssh", authType: "password" }, ssh),
-    ).toBe(true);
-  });
-
-  it("defaults missing connectionType to ssh", () => {
-    expect(supportsMetrics({ authType: "key" }, ssh)).toBe(true);
-  });
-
-  it("rejects remote desktop only hosts", () => {
-    expect(supportsMetrics({ connectionType: "rdp" }, ssh)).toBe(false);
-    expect(supportsMetrics({ connectionType: "vnc" }, ssh)).toBe(false);
-    expect(supportsMetrics({ connectionType: "telnet" }, ssh)).toBe(false);
-  });
-
-  it("accepts a remote desktop host that also has ssh on", () => {
-    expect(
-      supportsMetrics(
-        { connectionType: "rdp", enableSsh: true, authType: "password" },
-        ssh,
-      ),
-    ).toBe(true);
-  });
-
-  it("rejects ssh hosts that cannot connect unattended", () => {
-    expect(
-      supportsMetrics({ connectionType: "ssh", authType: "none" }, ssh),
-    ).toBe(false);
-    expect(
-      supportsMetrics({ connectionType: "ssh", authType: "opkssh" }, ssh),
-    ).toBe(false);
-  });
-});
-
-describe("connectionLog", () => {
-  it("builds a log entry without id or timestamp", () => {
-    const entry = connectionLog("info", "connection", "Connecting", {
-      hostId: 1,
-    });
-    expect(entry).toEqual({
-      type: "info",
-      stage: "connection",
-      message: "Connecting",
-      details: { hostId: 1 },
-    });
-  });
-});
-
-describe("sudoPasswordOf", () => {
-  const host = (extra: Partial<MetricsHost>) =>
-    ({
-      id: 1,
-      ip: "h",
-      port: 22,
-      username: "u",
-      userId: "o",
-      ...extra,
-    }) as MetricsHost;
-
-  it("reads the sudo password core resolved for the host", () => {
-    // Core's resolver already folds a 2.8 terminal_config copy into it.
-    expect(sudoPasswordOf(host({ sudoPassword: "a" }))).toBe("a");
-    expect(sudoPasswordOf(host({ sudoPassword: "" }))).toBeUndefined();
-    expect(sudoPasswordOf(host({}))).toBeUndefined();
-  });
-});
diff --git a/plugins/host-metrics/tests/backend/host-metrics-preferences.test.ts b/plugins/host-metrics/tests/backend/host-metrics-preferences.test.ts
deleted file mode 100644
index dac0f24e9..000000000
--- a/plugins/host-metrics/tests/backend/host-metrics-preferences.test.ts
+++ /dev/null
@@ -1,94 +0,0 @@
-import { describe, it, expect } from "vitest";
-import {
-  deriveEnabledWidgets,
-  defaultLayoutFromWidgets,
-  isMetricCardId,
-  isManagerCardId,
-  METRIC_CARD_IDS,
-} from "../../src/shared/host-metrics.js";
-
-describe("deriveEnabledWidgets", () => {
-  it("returns only metric ids, in canonical order, deduped", () => {
-    const slots = [
-      { id: "firewall" },
-      { id: "cpu" },
-      { id: "cpu" },
-      { id: "memory" },
-    ];
-    expect(deriveEnabledWidgets(slots)).toEqual(["cpu", "memory", "firewall"]);
-  });
-
-  it("excludes manager card ids (mobile contract: never leak managers)", () => {
-    const slots = [
-      { id: "cpu" },
-      { id: "service_manager" },
-      { id: "log_viewer" },
-      { id: "disk" },
-    ];
-    const out = deriveEnabledWidgets(slots);
-    expect(out).toEqual(["cpu", "disk"]);
-    for (const id of out) expect(isMetricCardId(id)).toBe(true);
-  });
-
-  it("output is always a subset of the 10 known WidgetTypes", () => {
-    const slots = METRIC_CARD_IDS.map((id) => ({ id })).concat([
-      { id: "user_manager" } as unknown as {
-        id: (typeof METRIC_CARD_IDS)[number];
-      },
-      { id: "bogus" } as unknown as { id: (typeof METRIC_CARD_IDS)[number] },
-    ]);
-    const out = deriveEnabledWidgets(slots);
-    expect(out).toEqual(METRIC_CARD_IDS);
-    expect(out.length).toBe(METRIC_CARD_IDS.length);
-  });
-
-  it("empty slots -> empty widgets", () => {
-    expect(deriveEnabledWidgets([])).toEqual([]);
-  });
-});
-
-describe("defaultLayoutFromWidgets", () => {
-  it("builds slots in canonical order with dense ordering", () => {
-    const layout = defaultLayoutFromWidgets(["disk", "cpu", "memory"]);
-    expect(layout.slots.map((s) => s.id)).toEqual(["cpu", "memory", "disk"]);
-    expect(layout.slots.map((s) => s.order)).toEqual([0, 1, 2]);
-    expect(layout.columns).toBe(3);
-  });
-
-  it("ignores unknown widget ids", () => {
-    const layout = defaultLayoutFromWidgets(["cpu", "nope", "service_manager"]);
-    expect(layout.slots.map((s) => s.id)).toEqual(["cpu"]);
-  });
-
-  it("assigns valid colSpans (1..3)", () => {
-    const layout = defaultLayoutFromWidgets([...METRIC_CARD_IDS]);
-    for (const s of layout.slots) {
-      expect([1, 2, 3]).toContain(s.colSpan);
-    }
-  });
-
-  it("keeps the opt-in gpu card when deriving enabledWidgets", () => {
-    expect(deriveEnabledWidgets([{ id: "gpu" }, { id: "cpu" }])).toEqual([
-      "cpu",
-      "gpu",
-    ]);
-  });
-
-  it("round-trips: deriveEnabledWidgets(defaultLayout) === input order", () => {
-    const layout = defaultLayoutFromWidgets(["ports", "cpu", "firewall"]);
-    expect(deriveEnabledWidgets(layout.slots)).toEqual([
-      "cpu",
-      "ports",
-      "firewall",
-    ]);
-  });
-});
-
-describe("card id guards", () => {
-  it("classifies metric vs manager ids", () => {
-    expect(isMetricCardId("cpu")).toBe(true);
-    expect(isMetricCardId("service_manager")).toBe(false);
-    expect(isManagerCardId("service_manager")).toBe(true);
-    expect(isManagerCardId("cpu")).toBe(false);
-  });
-});
diff --git a/plugins/host-metrics/tests/backend/host-payload-legacy.test.ts b/plugins/host-metrics/tests/backend/host-payload-legacy.test.ts
deleted file mode 100644
index 82509fc0d..000000000
--- a/plugins/host-metrics/tests/backend/host-payload-legacy.test.ts
+++ /dev/null
@@ -1,32 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { hostPayloadLegacy } from "../../src/backend/host-import.js";
-
-describe("hostPayloadLegacy", () => {
-  it("rebuilds the 2.8 statsConfig Termix-Mobile reads", () => {
-    const { statsConfig } = hostPayloadLegacy(
-      { metricsEnabled: false, metricsInterval: 45, enabledWidgets: ["cpu"] },
-      { statusCheckEnabled: true, statusCheckInterval: null },
-    ) as { statsConfig: Record<string, unknown> };
-
-    expect(statsConfig).toMatchObject({
-      enabledWidgets: ["cpu"],
-      statusCheckEnabled: true,
-      useGlobalStatusInterval: true,
-      metricsEnabled: false,
-      metricsInterval: 45,
-      useGlobalMetricsInterval: false,
-    });
-  });
-
-  it("carries a host's own status interval", () => {
-    const { statsConfig } = hostPayloadLegacy(
-      {},
-      { statusCheckEnabled: false, statusCheckInterval: 120 },
-    ) as { statsConfig: Record<string, unknown> };
-    expect(statsConfig).toMatchObject({
-      statusCheckEnabled: false,
-      statusCheckInterval: 120,
-      useGlobalStatusInterval: false,
-    });
-  });
-});
diff --git a/plugins/host-metrics/tests/backend/interactive-jump-totp.test.ts b/plugins/host-metrics/tests/backend/interactive-jump-totp.test.ts
deleted file mode 100644
index 2de87a25c..000000000
--- a/plugins/host-metrics/tests/backend/interactive-jump-totp.test.ts
+++ /dev/null
@@ -1,60 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import type { PluginSsh } from "@termix/plugin-sdk/backend";
-import { startInteractive } from "../../src/backend/interactive.js";
-import type { MetricsHost } from "../../src/backend/helpers.js";
-
-describe("startInteractive through a jump host", () => {
-  it("returns requires_totp when a jump host asks for a code", async () => {
-    let answer: Promise<string | null> | null = null;
-    const ssh = {
-      prepare: vi.fn(async () => ({
-        config: {},
-        outcome: { status: "ready" },
-      })),
-      openTransport: vi.fn(
-        (
-          _host: unknown,
-          _config: unknown,
-          options?: {
-            prompt?: { ask: (r: unknown) => Promise<string | null> };
-          },
-        ) => {
-          answer = options!.prompt!.ask({
-            kind: "totp",
-            prompt: "Verification code:",
-            retry: false,
-          });
-          return new Promise(() => {});
-        },
-      ),
-    } as unknown as PluginSsh;
-    const pending: Array<{ finish: (r: string[]) => void }> = [];
-    const sessions = {
-      get: () => undefined,
-      addPending: (session: { finish: (r: string[]) => void }) =>
-        pending.push(session),
-    };
-    const result = await startInteractive(
-      {
-        ssh,
-        sessions: sessions as never,
-        log: { info: vi.fn(), warn: vi.fn(), error: vi.fn() } as never,
-        registerViewer: vi.fn(),
-      },
-      {
-        id: 7,
-        ip: "10.0.0.1",
-        port: 22,
-        jumpHosts: [{ hostId: 2 }],
-      } as MetricsHost,
-      "u1",
-    );
-
-    expect(result.body).toMatchObject({
-      requires_totp: true,
-      prompt: "Verification code:",
-    });
-    pending[0].finish(["123456"]);
-    await expect(answer).resolves.toBe("123456");
-  });
-});
diff --git a/plugins/host-metrics/tests/backend/managers/managers.test.ts b/plugins/host-metrics/tests/backend/managers/managers.test.ts
deleted file mode 100644
index 9e0d10bfa..000000000
--- a/plugins/host-metrics/tests/backend/managers/managers.test.ts
+++ /dev/null
@@ -1,438 +0,0 @@
-import { describe, it, expect } from "vitest";
-import {
-  buildSudoCommand,
-  shellSingleQuote,
-  parsePlatformProbe,
-  buildPackageActionCommand,
-  parseUpgradable,
-  buildListUpgradableCommand,
-} from "@termix/plugin-sdk/host-commands";
-import {
-  isValidSystemdUnit,
-  isValidPid,
-  isValidPort,
-  isValidPackageName,
-  isValidUsername,
-  isValidDomain,
-  isValidDnsProvider,
-  isValidSignal,
-  isValidServiceAction,
-  isAllowedPath,
-} from "../../../src/backend/managers/validation.js";
-import {
-  parseServiceList,
-  buildServiceActionCommand,
-} from "../../../src/backend/managers/services.js";
-import {
-  parseProcessList,
-  buildKillCommand,
-} from "../../../src/backend/managers/processes.js";
-import {
-  parseDfMounts,
-  parseTopMemory,
-} from "../../../src/backend/managers/simple-reads.js";
-import {
-  parseCrontab,
-  serializeCrontab,
-  isValidCronSchedule,
-  buildApplyCrontabCommand,
-} from "../../../src/backend/managers/cron.js";
-import {
-  buildIssueCommand,
-  buildRenewCommand,
-  buildRevokeCommand,
-  isValidCertName,
-  parseCertbotCertificates,
-} from "../../../src/backend/managers/ssl.js";
-import {
-  buildIptablesRuleCommand,
-  buildNftRuleCommand,
-} from "../../../src/backend/managers/firewall.js";
-import {
-  parsePasswd,
-  parseSudoers,
-} from "../../../src/backend/managers/users.js";
-import {
-  buildHealthCheckCommand,
-  parseHealthResult,
-} from "../../../src/backend/managers/health.js";
-import {
-  buildTailCommand,
-  clampLines,
-} from "../../../src/backend/managers/logs.js";
-
-describe("exec-elevated", () => {
-  it("single-quotes and escapes for the shell", () => {
-    expect(shellSingleQuote("abc")).toBe("'abc'");
-    expect(shellSingleQuote("a'b")).toBe(`'a'"'"'b'`);
-  });
-  it("builds the sudo -S pipeline wrapping the command in sh -c with a success marker", () => {
-    expect(buildSudoCommand("systemctl restart nginx", "pw")).toBe(
-      `echo 'pw' | sudo -S -p '' sh -c 'echo __TX_SUDO_OK__; systemctl restart nginx'`,
-    );
-  });
-  it("does not merge stderr into stdout (no 2>&1)", () => {
-    expect(buildSudoCommand("id", "pw")).not.toContain("2>&1");
-  });
-  it("escapes a password containing a quote", () => {
-    expect(buildSudoCommand("id", "p'w")).toContain(`echo 'p'"'"'w'`);
-  });
-});
-
-describe("platform probe parsing", () => {
-  it("parses capabilities and prefers dnf over yum", () => {
-    const out = [
-      "systemd=1",
-      "apt=0",
-      "dnf=1",
-      "yum=1",
-      "pacman=0",
-      "certbot=1",
-      "acmesh=0",
-      "docker=1",
-      "os=Fedora Linux 40",
-    ].join("\n");
-    const p = parsePlatformProbe(out);
-    expect(p.hasSystemd).toBe(true);
-    expect(p.pkg).toBe("dnf");
-    expect(p.hasCertbot).toBe(true);
-    expect(p.hasAcmeSh).toBe(false);
-    expect(p.hasDocker).toBe(true);
-    expect(p.osPrettyName).toBe("Fedora Linux 40");
-  });
-  it("picks apt when present", () => {
-    expect(parsePlatformProbe("apt=1\ndnf=1").pkg).toBe("apt");
-  });
-});
-
-describe("validation (injection defense)", () => {
-  it("systemd units", () => {
-    expect(isValidSystemdUnit("nginx.service")).toBe(true);
-    expect(isValidSystemdUnit("ssh.socket")).toBe(true);
-    expect(isValidSystemdUnit("nginx.service; rm -rf /")).toBe(false);
-    expect(isValidSystemdUnit("nginx")).toBe(false);
-  });
-  it("pids", () => {
-    expect(isValidPid(123)).toBe(true);
-    expect(isValidPid("123")).toBe(true);
-    expect(isValidPid(0)).toBe(false);
-    expect(isValidPid("1; reboot")).toBe(false);
-    expect(isValidPid(-5)).toBe(false);
-  });
-  it("ports", () => {
-    expect(isValidPort(443)).toBe(true);
-    expect(isValidPort(0)).toBe(false);
-    expect(isValidPort(70000)).toBe(false);
-  });
-  it("package names", () => {
-    expect(isValidPackageName("nginx")).toBe(true);
-    expect(isValidPackageName("lib-foo.bar+1")).toBe(true);
-    expect(isValidPackageName("nginx && curl evil")).toBe(false);
-    expect(isValidPackageName("-rf")).toBe(false);
-  });
-  it("usernames and domains", () => {
-    expect(isValidUsername("deploy")).toBe(true);
-    expect(isValidUsername("root; rm")).toBe(false);
-    expect(isValidDomain("example.com")).toBe(true);
-    expect(isValidDomain("*.example.com")).toBe(true);
-    expect(isValidDomain("ex ample.com")).toBe(false);
-    expect(isValidDomain("a;b.com")).toBe(false);
-  });
-  it("dns providers, signals, service actions", () => {
-    expect(isValidDnsProvider("cloudflare")).toBe(true);
-    expect(isValidDnsProvider("cf; rm")).toBe(false);
-    expect(isValidSignal("KILL")).toBe(true);
-    expect(isValidSignal("BOOM")).toBe(false);
-    expect(isValidServiceAction("restart")).toBe(true);
-    expect(isValidServiceAction("destroy")).toBe(false);
-  });
-  it("path allowlist rejects traversal and out-of-allowlist", () => {
-    expect(isAllowedPath("/var/log/syslog", ["/var/log"])).toBe(true);
-    expect(isAllowedPath("/var/log/../../etc/passwd", ["/var/log"])).toBe(
-      false,
-    );
-    expect(isAllowedPath("/etc/passwd", ["/var/log"])).toBe(false);
-    expect(isAllowedPath("relative/path", ["/var/log"])).toBe(false);
-  });
-});
-
-describe("services", () => {
-  it("parses list-units --plain", () => {
-    const out =
-      "nginx.service loaded active running A high performance web server\n" +
-      "ssh.service loaded active running OpenBSD Secure Shell server\n" +
-      "cron.service loaded inactive dead Regular background program";
-    const rows = parseServiceList(out);
-    expect(rows).toHaveLength(3);
-    expect(rows[0]).toMatchObject({ unit: "nginx.service", active: "active" });
-    expect(rows[2].active).toBe("inactive");
-  });
-  it("builds action command", () => {
-    expect(buildServiceActionCommand("nginx.service", "restart")).toBe(
-      "systemctl restart nginx.service",
-    );
-  });
-});
-
-describe("processes", () => {
-  it("parses ps output", () => {
-    const out =
-      "1234 1 root 12.5 3.2 45000 S /usr/bin/node node server.js\n" +
-      "5678 1234 deploy 0.0 1.1 12000 Sl bash -bash";
-    const rows = parseProcessList(out);
-    expect(rows[0]).toMatchObject({
-      pid: 1234,
-      user: "root",
-      cpu: 12.5,
-      command: "/usr/bin/node",
-    });
-    expect(rows[1].pid).toBe(5678);
-  });
-  it("builds kill command", () => {
-    expect(buildKillCommand(42, "TERM")).toBe("kill -TERM 42");
-  });
-});
-
-describe("simple reads", () => {
-  it("parses df -Pk and skips tmpfs", () => {
-    const out =
-      "/dev/sda1 100000 40000 60000 40% /\n" +
-      "tmpfs 8000 0 8000 0% /dev/shm\n" +
-      "/dev/sdb1 200000 100000 100000 50% /data";
-    const mounts = parseDfMounts(out);
-    expect(mounts).toHaveLength(2);
-    expect(mounts[0].mount).toBe("/");
-    expect(mounts[1].usePct).toBe(50);
-  });
-  it("parses top by memory", () => {
-    const rows = parseTopMemory("1234 root 5.5 50000 node");
-    expect(rows[0]).toMatchObject({ pid: 1234, mem: 5.5, command: "node" });
-  });
-});
-
-describe("cron", () => {
-  it("parses enabled and toggled entries", () => {
-    const out = "0 2 * * * /backup.sh\n# 30 4 * * * /old.sh\nPATH=/usr/bin";
-    const entries = parseCrontab(out);
-    expect(entries).toHaveLength(2);
-    expect(entries[0]).toMatchObject({ enabled: true, schedule: "0 2 * * *" });
-    expect(entries[1].enabled).toBe(false);
-  });
-  it("validates schedules", () => {
-    expect(isValidCronSchedule("0 2 * * *")).toBe(true);
-    expect(isValidCronSchedule("@daily")).toBe(true);
-    expect(isValidCronSchedule("not a schedule")).toBe(false);
-  });
-  it("serializes (commenting disabled entries) and round-trips", () => {
-    const body = serializeCrontab([
-      { raw: "", enabled: true, schedule: "0 2 * * *", command: "/a.sh" },
-      { raw: "", enabled: false, schedule: "@daily", command: "/b.sh" },
-    ]);
-    expect(body).toBe("0 2 * * * /a.sh\n# @daily /b.sh\n");
-    const reparsed = parseCrontab(body);
-    expect(reparsed[0].enabled).toBe(true);
-    expect(reparsed[1].enabled).toBe(false);
-  });
-  it("builds apply command piping into crontab -", () => {
-    expect(buildApplyCrontabCommand("x\n")).toBe(
-      `printf '%s' 'x\n' | crontab -`,
-    );
-  });
-});
-
-describe("packages", () => {
-  it("builds per-distro commands", () => {
-    expect(buildPackageActionCommand("apt", "install", "nginx")).toContain(
-      "apt-get -y install nginx",
-    );
-    expect(buildPackageActionCommand("pacman", "upgrade-all")).toBe(
-      "pacman -Syu --noconfirm",
-    );
-    expect(buildPackageActionCommand(null, "install", "x")).toBeNull();
-  });
-  it("lists per distro", () => {
-    expect(buildListUpgradableCommand("apt")).toContain(
-      "apt list --upgradable",
-    );
-    expect(buildListUpgradableCommand(null)).toBeNull();
-  });
-  it("parses apt upgradable", () => {
-    const out =
-      "nginx/focal-updates 1.18.0-2 amd64 [upgradable from: 1.18.0-1]";
-    const pkgs = parseUpgradable("apt", out);
-    expect(pkgs[0]).toMatchObject({
-      name: "nginx",
-      newVersion: "1.18.0-2",
-      currentVersion: "1.18.0-1",
-    });
-  });
-  it("parses pacman upgradable", () => {
-    const pkgs = parseUpgradable("pacman", "linux 6.1 -> 6.2");
-    expect(pkgs[0]).toMatchObject({ name: "linux", newVersion: "6.2" });
-  });
-});
-
-describe("ssl (dual client)", () => {
-  it("builds certbot issue for http + dns", () => {
-    expect(
-      buildIssueCommand({
-        client: "certbot",
-        domains: ["a.com"],
-        challenge: "http-standalone",
-      }),
-    ).toContain(
-      "certbot certonly --non-interactive --agree-tos --standalone -d 'a.com'",
-    );
-    expect(
-      buildIssueCommand({
-        client: "certbot",
-        domains: ["a.com"],
-        challenge: "dns",
-        dnsProvider: "cloudflare",
-      }),
-    ).toContain("--dns-cloudflare");
-  });
-  it("builds acme.sh issue", () => {
-    const cmd = buildIssueCommand({
-      client: "acme.sh",
-      domains: ["a.com", "b.com"],
-      challenge: "dns",
-      dnsProvider: "cf",
-    });
-    expect(cmd).toContain("--issue --dns dns_cf");
-    expect(cmd).toContain("-d 'a.com'");
-    expect(cmd).toContain("-d 'b.com'");
-  });
-  it("builds renew per client", () => {
-    expect(buildRenewCommand("certbot", true)).toBe("certbot renew --dry-run");
-    expect(buildRenewCommand("acme.sh", false)).toContain("--renew-all");
-  });
-  it("builds revoke per client", () => {
-    expect(buildRevokeCommand("certbot", "example.com")).toBe(
-      "certbot revoke --non-interactive --cert-name 'example.com' --delete-after-revoke",
-    );
-    const acme = buildRevokeCommand("acme.sh", "example.com");
-    expect(acme).toContain("--revoke -d 'example.com'");
-    expect(acme).toContain("--remove -d 'example.com'");
-  });
-  it("validates certificate names (rejects shell metachars)", () => {
-    expect(isValidCertName("example.com")).toBe(true);
-    expect(isValidCertName("example.com-0001")).toBe(true);
-    expect(isValidCertName("*.example.com")).toBe(true);
-    expect(isValidCertName("a.com; rm -rf /")).toBe(false);
-    expect(isValidCertName("")).toBe(false);
-    expect(isValidCertName(undefined)).toBe(false);
-  });
-  it("parses certbot certificates", () => {
-    const out = [
-      "Found the following certs:",
-      "  Certificate Name: example.com",
-      "    Domains: example.com www.example.com",
-      "    Expiry Date: 2026-09-01 12:00:00+00:00 (VALID: 80 days)",
-      "    Certificate Path: /etc/letsencrypt/live/example.com/fullchain.pem",
-    ].join("\n");
-    const certs = parseCertbotCertificates(out);
-    expect(certs[0]).toMatchObject({
-      name: "example.com",
-      client: "certbot",
-    });
-    expect(certs[0].domains).toContain("www.example.com");
-  });
-});
-
-describe("firewall", () => {
-  it("builds iptables add/delete on INPUT only", () => {
-    expect(
-      buildIptablesRuleCommand("add", {
-        protocol: "tcp",
-        port: 443,
-        target: "ACCEPT",
-      }),
-    ).toBe("iptables -A INPUT -p tcp --dport 443 -j ACCEPT");
-    expect(
-      buildIptablesRuleCommand("delete", {
-        protocol: "udp",
-        port: 53,
-        target: "DROP",
-      }),
-    ).toBe("iptables -D INPUT -p udp --dport 53 -j DROP");
-  });
-  it("builds nft rules", () => {
-    expect(
-      buildNftRuleCommand("add", {
-        protocol: "tcp",
-        port: 22,
-        target: "ACCEPT",
-      }),
-    ).toContain("add rule inet filter input tcp dport 22 accept");
-  });
-});
-
-describe("users", () => {
-  it("parses passwd for human users only", () => {
-    const out =
-      "root:x:0:0:root:/root:/bin/bash\n" +
-      "deploy:x:1000:1000:Deploy:/home/deploy:/bin/bash\n" +
-      "nobody:x:65534:65534:nobody:/:/usr/sbin/nologin";
-    const users = parsePasswd(out);
-    expect(users).toHaveLength(1);
-    expect(users[0].name).toBe("deploy");
-  });
-  it("parses sudoers membership", () => {
-    const out = "sudo:x:27:deploy,alice\nwheel:x:10:bob";
-    expect(parseSudoers(out).sort()).toEqual(["alice", "bob", "deploy"]);
-  });
-});
-
-describe("health checks", () => {
-  it("builds tcp and http commands", () => {
-    const tcp = buildHealthCheckCommand({
-      id: "1",
-      name: "ssh",
-      type: "tcp",
-      target: "localhost",
-      port: 22,
-    });
-    expect(tcp).toContain("/dev/tcp/");
-    const http = buildHealthCheckCommand({
-      id: "2",
-      name: "web",
-      type: "http",
-      target: "example.com",
-      path: "/health",
-    });
-    expect(http).toContain("curl -s -o /dev/null");
-    expect(http).toContain("http://example.com/health");
-  });
-  it("parses tcp and http results", () => {
-    const tcp = parseHealthResult(
-      { id: "1", name: "ssh", type: "tcp", target: "h", port: 22 },
-      "ok 12",
-    );
-    expect(tcp).toMatchObject({ ok: true, latencyMs: 12 });
-    const http = parseHealthResult(
-      { id: "2", name: "web", type: "http", target: "h" },
-      "200 0.045",
-    );
-    expect(http).toMatchObject({ ok: true, latencyMs: 45 });
-    const bad = parseHealthResult(
-      { id: "3", name: "web", type: "http", target: "h" },
-      "500 0.01",
-    );
-    expect(bad.ok).toBe(false);
-  });
-});
-
-describe("logs", () => {
-  it("clamps line counts", () => {
-    expect(clampLines(50)).toBe(50);
-    expect(clampLines(99999)).toBe(2000);
-    expect(clampLines("abc")).toBe(200);
-    expect(clampLines(0)).toBe(1);
-  });
-  it("builds a quoted tail command without suppressing stderr", () => {
-    expect(buildTailCommand("/var/log/syslog", 100)).toBe(
-      "tail -n 100 '/var/log/syslog'",
-    );
-  });
-});
diff --git a/plugins/host-metrics/tests/backend/migrations.test.ts b/plugins/host-metrics/tests/backend/migrations.test.ts
deleted file mode 100644
index a1b65c675..000000000
--- a/plugins/host-metrics/tests/backend/migrations.test.ts
+++ /dev/null
@@ -1,193 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { createTestDb, type TestDb } from "@termix/plugin-sdk/testing";
-import { pluginDir } from "./server";
-
-// The four tables as core's SQLite bootstrap created them before 2.9.0.
-const LEGACY_DDL = `
-  CREATE TABLE host_metrics_preferences (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL,
-    host_id INTEGER NOT NULL,
-    layout TEXT NOT NULL,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE,
-    FOREIGN KEY (host_id) REFERENCES ssh_data (id) ON DELETE CASCADE
-  );
-  CREATE UNIQUE INDEX idx_host_metrics_prefs_user_host
-    ON host_metrics_preferences (user_id, host_id);
-
-  CREATE TABLE host_health_checks (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL,
-    host_id INTEGER NOT NULL,
-    checks TEXT NOT NULL,
-    interval_seconds INTEGER NOT NULL DEFAULT 300,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE,
-    FOREIGN KEY (host_id) REFERENCES ssh_data (id) ON DELETE CASCADE
-  );
-  CREATE UNIQUE INDEX idx_host_health_checks_user_host
-    ON host_health_checks (user_id, host_id);
-
-  CREATE TABLE host_health_history (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL,
-    host_id INTEGER NOT NULL,
-    check_id TEXT NOT NULL,
-    ts TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    ok INTEGER NOT NULL,
-    latency_ms INTEGER,
-    detail TEXT,
-    FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE,
-    FOREIGN KEY (host_id) REFERENCES ssh_data (id) ON DELETE CASCADE
-  );
-  CREATE INDEX idx_host_health_history_lookup
-    ON host_health_history (user_id, host_id, check_id, ts);
-
-  CREATE TABLE host_metrics_history (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    host_id INTEGER NOT NULL REFERENCES ssh_data(id) ON DELETE CASCADE,
-    ts TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    cpu_percent REAL,
-    mem_percent REAL,
-    disk_percent REAL,
-    net_rx_bytes INTEGER,
-    net_tx_bytes INTEGER
-  );
-  CREATE INDEX idx_host_metrics_history_host_ts
-    ON host_metrics_history (host_id, ts DESC);
-`;
-
-const LEGACY = [
-  "host_metrics_preferences",
-  "host_health_checks",
-  "host_health_history",
-  "host_metrics_history",
-];
-
-let db: TestDb | null = null;
-
-afterEach(() => {
-  db?.close();
-  db = null;
-});
-
-const tableExists = (name: string) =>
-  !!db!.sqlite
-    .prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?")
-    .get(name);
-
-const indexNames = (table: string) =>
-  (
-    db!.sqlite
-      .prepare(
-        "SELECT name FROM sqlite_master WHERE type = 'index' AND tbl_name = ? AND name NOT LIKE 'sqlite_%'",
-      )
-      .all(table) as Array<{ name: string }>
-  )
-    .map((row) => row.name)
-    .sort();
-
-const seedLegacy = (sqlite: TestDb["sqlite"]) => {
-  sqlite.exec("INSERT INTO users (id) VALUES ('user-1')");
-  sqlite.exec("INSERT INTO ssh_data (id) VALUES (7)");
-  sqlite.exec(LEGACY_DDL);
-  sqlite.exec(`
-    INSERT INTO host_metrics_preferences (user_id, host_id, layout)
-      VALUES ('user-1', 7, '{"slots":[],"columns":3}');
-    INSERT INTO host_health_checks (user_id, host_id, checks, interval_seconds)
-      VALUES ('user-1', 7, '[]', 600);
-    INSERT INTO host_health_history (user_id, host_id, check_id, ts, ok, latency_ms, detail)
-      VALUES ('user-1', 7, 'web', '2026-09-01 10:00:00', 1, 12, 'HTTP 200');
-    INSERT INTO host_metrics_history (host_id, ts, cpu_percent, mem_percent, disk_percent, net_rx_bytes, net_tx_bytes)
-      VALUES (7, '2026-09-01 10:00:00', 12.5, 40, 70, 100, 200);
-  `);
-};
-
-describe("adopting the host metrics tables", () => {
-  it("keeps every row and index when the legacy tables are there", async () => {
-    db = await createTestDb(pluginDir, { before: seedLegacy });
-
-    expect(db.applied).toEqual(["0001_adopt_host_metrics_tables"]);
-    for (const table of LEGACY) {
-      expect(tableExists(table)).toBe(false);
-      expect(tableExists(`p_host_metrics_${table}`)).toBe(true);
-    }
-
-    expect(
-      db.sqlite
-        .prepare(
-          "SELECT user_id, host_id, layout FROM p_host_metrics_host_metrics_preferences",
-        )
-        .all(),
-    ).toEqual([
-      { user_id: "user-1", host_id: 7, layout: '{"slots":[],"columns":3}' },
-    ]);
-    expect(
-      db.sqlite
-        .prepare(
-          "SELECT checks, interval_seconds FROM p_host_metrics_host_health_checks",
-        )
-        .all(),
-    ).toEqual([{ checks: "[]", interval_seconds: 600 }]);
-    expect(
-      db.sqlite
-        .prepare(
-          "SELECT check_id, ok, latency_ms, detail FROM p_host_metrics_host_health_history",
-        )
-        .all(),
-    ).toEqual([{ check_id: "web", ok: 1, latency_ms: 12, detail: "HTTP 200" }]);
-    expect(
-      db.sqlite
-        .prepare(
-          "SELECT ts, cpu_percent, net_tx_bytes FROM p_host_metrics_host_metrics_history",
-        )
-        .all(),
-    ).toEqual([
-      { ts: "2026-09-01 10:00:00", cpu_percent: 12.5, net_tx_bytes: 200 },
-    ]);
-
-    expect(indexNames("p_host_metrics_host_metrics_preferences")).toEqual([
-      "idx_host_metrics_prefs_user_host",
-    ]);
-    expect(indexNames("p_host_metrics_host_health_checks")).toEqual([
-      "idx_host_health_checks_user_host",
-    ]);
-    expect(indexNames("p_host_metrics_host_health_history")).toEqual([
-      "idx_host_health_history_lookup",
-    ]);
-    expect(indexNames("p_host_metrics_host_metrics_history")).toEqual([
-      "idx_host_metrics_history_host_ts",
-    ]);
-  });
-
-  it("creates the tables fresh when there are no legacy ones", async () => {
-    db = await createTestDb(pluginDir);
-    for (const table of LEGACY) {
-      expect(tableExists(table)).toBe(false);
-      expect(
-        db.sqlite.prepare(`SELECT * FROM p_host_metrics_${table}`).all(),
-      ).toEqual([]);
-    }
-  });
-
-  it("cascades every table on host delete, and the user tables on user delete", async () => {
-    db = await createTestDb(pluginDir, { before: seedLegacy });
-
-    db.sqlite.exec("DELETE FROM users WHERE id = 'user-1'");
-    for (const table of LEGACY.slice(0, 3)) {
-      expect(
-        db.sqlite.prepare(`SELECT * FROM p_host_metrics_${table}`).all(),
-      ).toEqual([]);
-    }
-
-    db.sqlite.exec("DELETE FROM ssh_data WHERE id = 7");
-    expect(
-      db.sqlite
-        .prepare("SELECT * FROM p_host_metrics_host_metrics_history")
-        .all(),
-    ).toEqual([]);
-  });
-});
diff --git a/plugins/host-metrics/tests/backend/poller.test.ts b/plugins/host-metrics/tests/backend/poller.test.ts
deleted file mode 100644
index a0de9543d..000000000
--- a/plugins/host-metrics/tests/backend/poller.test.ts
+++ /dev/null
@@ -1,252 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { createFakeContext } from "@termix/plugin-sdk/testing";
-import type { MetricsHost } from "../../src/backend/helpers.js";
-
-const collectMetrics = vi.fn();
-vi.mock("../../src/backend/collect.js", async (importOriginal) => ({
-  ...(await importOriginal<object>()),
-  collectMetrics: (...args: unknown[]) => collectMetrics(...args),
-}));
-
-const { MetricsPoller, TOPIC_SNAPSHOT, TOPIC_STATUS } =
-  await import("../../src/backend/poller.js");
-const { createMetricsState } = await import("../../src/backend/state.js");
-const { createLogger } = await import("../../src/backend/log.js");
-
-const sample = {
-  cpu: { percent: 10, cores: 2, load: null },
-  memory: { percent: 20, usedGiB: 1, totalGiB: 4 },
-  disk: { percent: 30, filesystems: [] },
-  network: { interfaces: [{ rxBytes: "100", txBytes: "200" }] },
-};
-
-function host(id: number): MetricsHost {
-  return {
-    id,
-    userId: "user-1",
-    ip: `10.0.0.${id}`,
-    port: 22,
-    username: "root",
-    authType: "password",
-    connectionType: "ssh",
-  } as MetricsHost;
-}
-
-function setup(hostIds = [7]) {
-  const fake = createFakeContext({
-    pluginId: "host-metrics",
-    actor: "user-1",
-    sshHosts: hostIds.map(host),
-    hostStatuses: Object.fromEntries(
-      hostIds.map((id) => [
-        id,
-        { status: "online" as const, lastChecked: "now" },
-      ]),
-    ),
-  });
-  const samples: unknown[] = [];
-  const state = createMetricsState();
-  const poller = new MetricsPoller({
-    ctx: fake.ctx,
-    log: createLogger(fake.ctx.log),
-    repository: {
-      recordSample: async (input: unknown) => {
-        samples.push(input);
-      },
-    } as never,
-    ssh: fake.ctx.ssh,
-    state,
-    sessions: {} as never,
-    collectors: {} as never,
-  });
-  return { fake, poller, state, samples };
-}
-
-const flush = () => new Promise((resolve) => setTimeout(resolve, 10));
-
-beforeEach(() => {
-  collectMetrics.mockReset();
-});
-
-afterEach(() => {
-  vi.useRealTimers();
-});
-
-describe("MetricsPoller", () => {
-  it("polls from the first viewer and reports a working login", async () => {
-    collectMetrics.mockImplementation(async (_deps, _host, _mounts, onAuth) => {
-      onAuth?.();
-      return sample;
-    });
-    const { fake, poller, samples } = setup();
-
-    poller.registerViewer(7, "viewer-a", "user-1");
-    await flush();
-
-    expect(collectMetrics).toHaveBeenCalledOnce();
-    expect(poller.getMetrics(7)?.data).toEqual(sample);
-    expect(fake.statusReports).toEqual([{ hostId: 7, ok: true }]);
-    expect(samples).toEqual([
-      expect.objectContaining({
-        hostId: 7,
-        cpuPercent: 10,
-        netRxBytes: 100,
-        netTxBytes: 200,
-      }),
-    ]);
-    expect(fake.emitted.map((event) => event.topic)).toEqual([
-      TOPIC_STATUS,
-      TOPIC_SNAPSHOT,
-    ]);
-    expect(fake.emitted[0].payload).toMatchObject({
-      hostId: 7,
-      state: "collecting",
-      previous: null,
-    });
-    const job = fake.scheduled.find((entry) => entry.kind === "every");
-    expect(job?.ms).toBe(30_000);
-  });
-
-  it("uses the host's own interval over the admin one", async () => {
-    collectMetrics.mockResolvedValue(sample);
-    const { fake, poller } = setup();
-    await fake.ctx.settings.set("metricsInterval", 60);
-    await fake.ctx.settings.setHost(7, "metricsInterval", 15);
-
-    poller.registerViewer(7, "viewer-a", "user-1");
-    await flush();
-
-    expect(fake.scheduled.find((entry) => entry.kind === "every")?.ms).toBe(
-      15_000,
-    );
-  });
-
-  it("waits for a host core sees as offline", async () => {
-    collectMetrics.mockResolvedValue(sample);
-    const { fake, poller } = setup();
-    fake.hostStatuses.set(7, { status: "offline", lastChecked: "now" });
-
-    poller.registerViewer(7, "viewer-a", "user-1");
-    await flush();
-    expect(collectMetrics).not.toHaveBeenCalled();
-
-    // Core's check comes back: the first sample runs.
-    fake.hostStatuses.set(7, { status: "online", lastChecked: "now" });
-    poller.hostStatusChanged(7, "online");
-    await flush();
-    expect(collectMetrics).toHaveBeenCalledOnce();
-  });
-
-  it("says why collection stopped without touching the status", async () => {
-    collectMetrics.mockRejectedValue(
-      new Error("All configured authentication methods failed"),
-    );
-    const { fake, poller } = setup();
-
-    poller.registerViewer(7, "viewer-a", "user-1");
-    await flush();
-
-    expect(fake.statusReports).toEqual([]);
-    expect(fake.emitted.at(-1)?.payload).toMatchObject({
-      state: "auth_failed",
-    });
-  });
-
-  it("does not report a login for a connection that timed out", async () => {
-    collectMetrics.mockRejectedValue(new Error("Timed out while waiting"));
-    const { fake, poller } = setup();
-
-    poller.registerViewer(7, "viewer-a", "user-1");
-    await flush();
-
-    expect(fake.statusReports).toEqual([]);
-    expect(fake.emitted.at(-1)?.payload).toMatchObject({
-      state: "unreachable",
-    });
-  });
-
-  it("marks a changed host key", async () => {
-    collectMetrics.mockRejectedValue(new Error("Host key changed"));
-    const { fake, poller, state } = setup();
-
-    poller.registerViewer(7, "viewer-a", "user-1");
-    await flush();
-
-    expect(fake.statusReports).toEqual([]);
-    expect(state.authFailures.shouldSkip(7)).toBe(true);
-    poller.hostKeyAccepted(7);
-    expect(state.authFailures.shouldSkip(7)).toBe(false);
-  });
-
-  it("stops with the last viewer", async () => {
-    collectMetrics.mockResolvedValue(sample);
-    const { fake, poller } = setup();
-
-    poller.registerViewer(7, "a", "user-1");
-    poller.registerViewer(7, "b", "user-1");
-    await flush();
-    const job = fake.scheduled.find((entry) => entry.kind === "every")!;
-
-    poller.unregisterViewer(7, "a");
-    expect(job.stopped).toBe(false);
-    poller.unregisterViewer(7, "b");
-    expect(job.stopped).toBe(true);
-    expect(poller.isPolling(7)).toBe(false);
-  });
-
-  it("drops viewers that stop sending heartbeats", async () => {
-    collectMetrics.mockResolvedValue(sample);
-    const { poller } = setup();
-    poller.registerViewer(7, "a", "user-1");
-    await flush();
-
-    poller.cleanupInactiveViewers(Date.now() + 121_000);
-    expect(poller.hasViewers(7)).toBe(false);
-  });
-
-  it("skips a host with metrics turned off", async () => {
-    const { fake, poller } = setup();
-    await fake.ctx.settings.setHost(7, "metricsEnabled", false);
-
-    poller.registerViewer(7, "a", "user-1");
-    await flush();
-
-    expect(poller.isPolling(7)).toBe(false);
-    expect(collectMetrics).not.toHaveBeenCalled();
-  });
-
-  it("grows poll concurrency with the number of polled hosts", async () => {
-    collectMetrics.mockResolvedValue(sample);
-    const ids = Array.from({ length: 200 }, (_, index) => index + 1);
-    const { poller, state } = setup(ids);
-    expect(state.metricsLimiter.limit).toBe(5);
-
-    for (const id of ids) poller.registerViewer(id, `v${id}`, "user-1");
-    await flush();
-
-    expect(state.metricsLimiter.limit).toBe(10);
-  });
-
-  it("drops a pooled connection when a host changes", async () => {
-    collectMetrics.mockResolvedValue(sample);
-    const { fake, poller } = setup();
-    poller.registerViewer(7, "a", "user-1");
-    await flush();
-
-    await poller.hostUpdated(7);
-    expect(fake.droppedPools).toEqual([{ pool: "stats", hostId: 7 }]);
-    expect(poller.isPolling(7)).toBe(true);
-  });
-
-  it("forgets a deleted host", async () => {
-    collectMetrics.mockResolvedValue(sample);
-    const { poller } = setup();
-    poller.registerViewer(7, "a", "user-1");
-    await flush();
-
-    poller.hostDeleted(7);
-    expect(poller.isPolling(7)).toBe(false);
-    expect(poller.getMetrics(7)).toBeUndefined();
-    expect(poller.hasViewers(7)).toBe(false);
-  });
-});
diff --git a/plugins/host-metrics/tests/backend/routes.test.ts b/plugins/host-metrics/tests/backend/routes.test.ts
deleted file mode 100644
index 4c7b82ea2..000000000
--- a/plugins/host-metrics/tests/backend/routes.test.ts
+++ /dev/null
@@ -1,229 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { startServer, type TestServer } from "./server";
-
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-});
-
-const ROUTES: Array<[string, string, unknown?]> = [
-  ["GET", "/defaults"],
-  ["GET", "/metrics/7"],
-  ["POST", "/metrics/start/7"],
-  ["POST", "/metrics/stop/7", {}],
-  ["POST", "/metrics/connect-totp", { sessionId: "x", totpCode: "1" }],
-  ["POST", "/metrics/heartbeat", { viewerSessionId: "x" }],
-  ["POST", "/metrics/register-viewer", { hostId: 7 }],
-  ["POST", "/metrics/unregister-viewer", { hostId: 7, viewerSessionId: "x" }],
-  ["GET", "/metrics/history/7"],
-  ["GET", "/host-metrics/preferences/7"],
-  ["POST", "/host-metrics/preferences/7", { slots: [], columns: 3 }],
-  ["GET", "/host-metrics/platform/7"],
-  ["POST", "/host-metrics/managers/health/7/config", { checks: [] }],
-];
-
-describe("permissions", () => {
-  it.each(ROUTES)(
-    "%s %s answers 403 without host-metrics.use",
-    async (method, path, body) => {
-      server = await startServer({ permissions: [] });
-      const response = await server.request(method, path, { body });
-      expect(response.status).toBe(403);
-    },
-  );
-});
-
-describe("metrics", () => {
-  it("answers 404 until a sample exists", async () => {
-    server = await startServer();
-    const response = await server.request("GET", "/metrics/7");
-    expect(response.status).toBe(404);
-    expect(response.body.error).toBe("Metrics not available");
-  });
-
-  it("refuses a host the user cannot see", async () => {
-    server = await startServer();
-    const response = await server.request("GET", "/metrics/99");
-    expect(response.status).toBe(403);
-  });
-
-  it("rejects a bad host id", async () => {
-    server = await startServer();
-    expect((await server.request("GET", "/metrics/abc")).status).toBe(400);
-  });
-});
-
-describe("viewers", () => {
-  it("registers, heartbeats and unregisters a viewer", async () => {
-    server = await startServer();
-    const registered = await server.request(
-      "POST",
-      "/metrics/register-viewer",
-      {
-        body: { hostId: 7 },
-      },
-    );
-    expect(registered.status).toBe(200);
-    const viewerSessionId = registered.body.viewerSessionId as string;
-    expect(viewerSessionId).toMatch(/^viewer-/);
-
-    expect(
-      (
-        await server.request("POST", "/metrics/heartbeat", {
-          body: { viewerSessionId },
-        })
-      ).status,
-    ).toBe(200);
-    // Another user cannot keep or drop someone else's viewer.
-    expect(
-      (
-        await server.request("POST", "/metrics/heartbeat", {
-          user: "user-2",
-          body: { viewerSessionId },
-        })
-      ).status,
-    ).toBe(404);
-
-    await server.request("POST", "/metrics/unregister-viewer", {
-      body: { hostId: 7, viewerSessionId },
-    });
-    expect(
-      (
-        await server.request("POST", "/metrics/heartbeat", {
-          body: { viewerSessionId },
-        })
-      ).status,
-    ).toBe(404);
-  });
-
-  it("skips a host with metrics turned off", async () => {
-    server = await startServer();
-    await server.mock.ctx.settings.setHost(7, "metricsEnabled", false);
-    const response = await server.request("POST", "/metrics/register-viewer", {
-      body: { hostId: 7 },
-    });
-    expect(response.body).toEqual({
-      success: true,
-      skipped: true,
-      reason: "metrics_disabled",
-    });
-  });
-
-  it("skips a host it cannot find", async () => {
-    server = await startServer();
-    const response = await server.request("POST", "/metrics/register-viewer", {
-      body: { hostId: 99 },
-    });
-    expect(response.body.reason).toBe("host_not_found");
-  });
-});
-
-describe("history", () => {
-  it("returns stored samples in the range", async () => {
-    server = await startServer();
-    const now = new Date();
-    const ts = now.toISOString().slice(0, 19).replace("T", " ");
-    server.db.sqlite
-      .prepare(
-        "INSERT INTO p_host_metrics_host_metrics_history (host_id, ts, cpu_percent) VALUES (?, ?, ?)",
-      )
-      .run(7, ts, 42);
-
-    const response = await server.request("GET", "/metrics/history/7?range=1h");
-    expect(response.status).toBe(200);
-    expect(response.body.rows).toEqual([
-      expect.objectContaining({ ts, cpu_percent: 42 }),
-    ]);
-  });
-
-  it("rejects an unknown range", async () => {
-    server = await startServer();
-    const response = await server.request("GET", "/metrics/history/7?range=2y");
-    expect(response.status).toBe(400);
-  });
-});
-
-describe("layout preferences", () => {
-  it("defaults from the host's enabled widgets", async () => {
-    server = await startServer();
-    await server.mock.ctx.settings.setHost(7, "enabledWidgets", ["cpu"]);
-    const response = await server.request("GET", "/host-metrics/preferences/7");
-    expect(response.body.layout.slots.map((s: { id: string }) => s.id)).toEqual(
-      ["cpu"],
-    );
-  });
-
-  it("saves a layout and keeps the owner's enabled widgets in step", async () => {
-    server = await startServer();
-    const layout = {
-      columns: 2,
-      slots: [
-        { id: "memory", order: 0, colSpan: 1, height: null },
-        { id: "service_manager", order: 1, colSpan: 2, height: null },
-      ],
-    };
-    expect(
-      (
-        await server.request("POST", "/host-metrics/preferences/7", {
-          body: layout,
-        })
-      ).status,
-    ).toBe(200);
-
-    const read = await server.request("GET", "/host-metrics/preferences/7");
-    expect(read.body.layout).toEqual(layout);
-    expect(await server.mock.ctx.settings.getHost(7, "enabledWidgets")).toEqual(
-      ["memory"],
-    );
-  });
-
-  it("rejects a malformed layout", async () => {
-    server = await startServer();
-    const response = await server.request(
-      "POST",
-      "/host-metrics/preferences/7",
-      { body: { columns: 2 } },
-    );
-    expect(response.status).toBe(400);
-  });
-});
-
-describe("health checks", () => {
-  it("saves a user's checks for a host", async () => {
-    server = await startServer();
-    const checks = [
-      { id: "web", name: "Web", type: "tcp", target: "x", port: 80 },
-    ];
-    const response = await server.request(
-      "POST",
-      "/host-metrics/managers/health/7/config",
-      { body: { checks, intervalSeconds: 120 } },
-    );
-    expect(response.status).toBe(200);
-    expect(
-      server.db.sqlite
-        .prepare(
-          "SELECT user_id, checks, interval_seconds FROM p_host_metrics_host_health_checks",
-        )
-        .all(),
-    ).toEqual([
-      {
-        user_id: "user-1",
-        checks: JSON.stringify(checks),
-        interval_seconds: 120,
-      },
-    ]);
-  });
-
-  it("rejects invalid checks", async () => {
-    server = await startServer();
-    const response = await server.request(
-      "POST",
-      "/host-metrics/managers/health/7/config",
-      { body: { checks: [{ id: "x" }] } },
-    );
-    expect(response.status).toBe(400);
-  });
-});
diff --git a/plugins/host-metrics/tests/backend/server.ts b/plugins/host-metrics/tests/backend/server.ts
deleted file mode 100644
index a963be12f..000000000
--- a/plugins/host-metrics/tests/backend/server.ts
+++ /dev/null
@@ -1,132 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockContextOptions,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-export const manifest = manifestJson as unknown as PluginManifest;
-
-export interface TestServer {
-  db: TestDb;
-  mock: MockPluginContext;
-  request: (
-    method: string,
-    path: string,
-    options?: { user?: string; body?: unknown },
-    // Route bodies vary per test; asserting on them is the point.
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any }>;
-  close: () => Promise<void>;
-}
-
-/** A host owned by user-1, as ctx.hosts and ctx.ssh.resolveHost see it. */
-export function testHost(id: number, extra: Record<string, unknown> = {}) {
-  return {
-    summary: {
-      id,
-      userId: "user-1",
-      name: `host-${id}`,
-      ip: `10.0.0.${id}`,
-      port: 22,
-      username: "root",
-      tags: null,
-      folder: null,
-      authType: "password",
-    },
-    ssh: {
-      id,
-      userId: "user-1",
-      ip: `10.0.0.${id}`,
-      port: 22,
-      username: "root",
-      authType: "password",
-      connectionType: "ssh",
-      enableSsh: true,
-      password: "pw",
-      ...extra,
-    },
-  };
-}
-
-/**
- * The plugin activated against a real in-memory database, its router mounted
- * the way core mounts it: JSON parsed and the acting user set per request.
- */
-export async function startServer(
-  options: {
-    permissions?: string[];
-    hosts?: number[];
-    mock?: Partial<MockContextOptions>;
-  } = {},
-): Promise<TestServer> {
-  const db = await createTestDb(pluginDir);
-  for (const user of ["user-1", "user-2"]) {
-    db.sqlite
-      .prepare("INSERT INTO users (id, username) VALUES (?, ?)")
-      .run(user, user);
-  }
-  const hosts = (options.hosts ?? [7]).map((id) => testHost(id));
-  for (const host of hosts) {
-    db.sqlite.prepare("INSERT INTO ssh_data (id) VALUES (?)").run(host.ssh.id);
-  }
-
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    permissions: options.permissions ?? ["host-metrics.use"],
-    hosts: hosts.map((host) => host.summary),
-    sshHosts: hosts.map((host) => host.ssh),
-    ...options.mock,
-  });
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") ?? undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    db,
-    mock,
-    async request(method, path, { user = "user-1", body: given } = {}) {
-      const body = method === "GET" ? undefined : given;
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        headers: {
-          "x-test-user": user,
-          ...(body !== undefined ? { "content-type": "application/json" } : {}),
-        },
-        body: body !== undefined ? JSON.stringify(body) : undefined,
-      });
-      const text = await response.text();
-      return { status: response.status, body: text ? JSON.parse(text) : null };
-    },
-    async close() {
-      for (const dispose of mock.disposals.reverse()) await dispose();
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-      db.close();
-    },
-  };
-}
diff --git a/plugins/host-metrics/tests/backend/state.test.ts b/plugins/host-metrics/tests/backend/state.test.ts
deleted file mode 100644
index 246f778e8..000000000
--- a/plugins/host-metrics/tests/backend/state.test.ts
+++ /dev/null
@@ -1,279 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import {
-  AuthFailureTracker,
-  canStartInitialMetrics,
-  ConcurrentLimiter,
-  createMetricsState,
-  HostPollCache,
-  metricsConcurrencyFor,
-} from "../../src/backend/state.js";
-
-const authFailureTracker = new AuthFailureTracker();
-
-describe("auth failure tracking", () => {
-  it("permanently pauses polling after a host key mismatch", () => {
-    const hostId = 991266;
-    authFailureTracker.recordFailure(hostId, "HOST_KEY", true);
-
-    expect(authFailureTracker.shouldSkip(hostId)).toBe(true);
-    expect(authFailureTracker.getSkipReason(hostId)).toContain(
-      "host key changed",
-    );
-
-    authFailureTracker.reset(hostId);
-  });
-});
-
-describe("initial metrics admission", () => {
-  it("needs a viewer and a host core does not see as offline", () => {
-    expect(canStartInitialMetrics("online", true)).toBe(true);
-    expect(canStartInitialMetrics("offline", true)).toBe(false);
-    expect(canStartInitialMetrics("online", false)).toBe(false);
-    // Status checks off: core has no status, so the sample is tried.
-    expect(canStartInitialMetrics(null, true)).toBe(true);
-  });
-});
-
-describe("createMetricsState", () => {
-  it("gives every activation its own trackers", () => {
-    const first = createMetricsState();
-    const second = createMetricsState();
-    first.authFailures.recordFailure(1, "AUTH", true);
-    expect(first.authFailures.shouldSkip(1)).toBe(true);
-    expect(second.authFailures.shouldSkip(1)).toBe(false);
-  });
-});
-
-describe("ConcurrentLimiter", () => {
-  it("never exceeds max concurrent runners", async () => {
-    const limiter = new ConcurrentLimiter(2);
-    let peak = 0;
-    let current = 0;
-
-    const job = async () => {
-      current += 1;
-      peak = Math.max(peak, current);
-      await new Promise((r) => setTimeout(r, 30));
-      current -= 1;
-    };
-
-    await Promise.all([
-      limiter.run(job),
-      limiter.run(job),
-      limiter.run(job),
-      limiter.run(job),
-    ]);
-
-    expect(peak).toBeLessThanOrEqual(2);
-    expect(limiter.activeCount).toBe(0);
-    expect(limiter.pendingCount).toBe(0);
-  });
-
-  it("runs waiters in FIFO order after a slot frees", async () => {
-    const limiter = new ConcurrentLimiter(1);
-    const order: number[] = [];
-
-    const first = limiter.run(async () => {
-      order.push(1);
-      await new Promise((r) => setTimeout(r, 20));
-    });
-    const second = limiter.run(async () => {
-      order.push(2);
-    });
-    const third = limiter.run(async () => {
-      order.push(3);
-    });
-
-    await Promise.all([first, second, third]);
-    expect(order).toEqual([1, 2, 3]);
-  });
-
-  it("rejects invalid maxConcurrent", () => {
-    expect(() => new ConcurrentLimiter(0)).toThrow(/maxConcurrent/);
-  });
-
-  describe("setLimit", () => {
-    it("releases queued waiters as soon as the ceiling is raised", async () => {
-      const limiter = new ConcurrentLimiter(1);
-      let running = 0;
-      let peak = 0;
-      const release: Array<() => void> = [];
-
-      const job = () =>
-        limiter.run(async () => {
-          running += 1;
-          peak = Math.max(peak, running);
-          await new Promise<void>((r) => release.push(r));
-          running -= 1;
-        });
-
-      const jobs = [job(), job(), job(), job()];
-      await new Promise((r) => setTimeout(r, 10));
-      expect(peak).toBe(1);
-      expect(limiter.pendingCount).toBe(3);
-
-      // Widening must drain the backlog without waiting for the running job.
-      limiter.setLimit(4);
-      await new Promise((r) => setTimeout(r, 10));
-      expect(peak).toBe(4);
-      expect(limiter.pendingCount).toBe(0);
-
-      release.forEach((fn) => fn());
-      await Promise.all(jobs);
-      expect(limiter.activeCount).toBe(0);
-    });
-
-    it("does not over-release beyond the new ceiling", async () => {
-      const limiter = new ConcurrentLimiter(1);
-      let running = 0;
-      let peak = 0;
-      const release: Array<() => void> = [];
-      // Later waves of woken jobs enqueue their own resolvers, so draining has
-      // to keep going until nothing is left rather than flushing a snapshot.
-      const drain = async () => {
-        while (release.length > 0) {
-          release.splice(0).forEach((fn) => fn());
-          await new Promise((r) => setTimeout(r, 5));
-        }
-      };
-
-      const job = () =>
-        limiter.run(async () => {
-          running += 1;
-          peak = Math.max(peak, running);
-          await new Promise<void>((r) => release.push(r));
-          running -= 1;
-        });
-
-      const jobs = [job(), job(), job(), job(), job()];
-      await new Promise((r) => setTimeout(r, 10));
-
-      limiter.setLimit(3);
-      await new Promise((r) => setTimeout(r, 10));
-      expect(peak).toBe(3);
-      expect(limiter.pendingCount).toBe(2);
-
-      await drain();
-      await Promise.all(jobs);
-      expect(limiter.activeCount).toBe(0);
-      expect(limiter.pendingCount).toBe(0);
-    });
-
-    it("lets running work finish when the ceiling shrinks", async () => {
-      const limiter = new ConcurrentLimiter(4);
-      let running = 0;
-      let peak = 0;
-      const release: Array<() => void> = [];
-      const drain = async () => {
-        while (release.length > 0) {
-          release.splice(0).forEach((fn) => fn());
-          await new Promise((r) => setTimeout(r, 5));
-        }
-      };
-
-      const job = () =>
-        limiter.run(async () => {
-          running += 1;
-          peak = Math.max(peak, running);
-          await new Promise<void>((r) => release.push(r));
-          running -= 1;
-        });
-
-      const jobs = [job(), job(), job(), job(), job(), job()];
-      await new Promise((r) => setTimeout(r, 10));
-      expect(peak).toBe(4);
-
-      // Shrinking never kills in-flight work; it applies to later releases.
-      limiter.setLimit(2);
-      expect(limiter.activeCount).toBe(4);
-
-      await drain();
-      await Promise.all(jobs);
-      expect(limiter.activeCount).toBe(0);
-      expect(limiter.pendingCount).toBe(0);
-      // The two queued jobs ran only after the shrink, so they never pushed
-      // occupancy back up to the old width.
-      expect(peak).toBe(4);
-    });
-
-    it("rejects an invalid new limit", () => {
-      const limiter = new ConcurrentLimiter(2);
-      expect(() => limiter.setLimit(0)).toThrow(/maxConcurrent/);
-      expect(limiter.limit).toBe(2);
-    });
-  });
-});
-
-describe("metricsConcurrencyFor", () => {
-  it("keeps a floor for small installs", () => {
-    expect(metricsConcurrencyFor(0, {})).toBe(5);
-    expect(metricsConcurrencyFor(1, {})).toBe(5);
-    expect(metricsConcurrencyFor(60, {})).toBe(5);
-  });
-
-  it("scales up with the fleet", () => {
-    expect(metricsConcurrencyFor(200, {})).toBe(10);
-    expect(metricsConcurrencyFor(500, {})).toBe(25);
-  });
-
-  it("caps so a huge fleet cannot exhaust the host", () => {
-    expect(metricsConcurrencyFor(100000, {})).toBe(50);
-  });
-
-  it("lets an operator override the sizing", () => {
-    expect(metricsConcurrencyFor(1000, { METRICS_POLL_CONCURRENCY: "8" })).toBe(
-      8,
-    );
-  });
-
-  it("still caps an oversized override", () => {
-    expect(
-      metricsConcurrencyFor(10, { METRICS_POLL_CONCURRENCY: "9999" }),
-    ).toBe(50);
-  });
-
-  it("ignores a nonsense override", () => {
-    expect(
-      metricsConcurrencyFor(500, { METRICS_POLL_CONCURRENCY: "abc" }),
-    ).toBe(25);
-  });
-
-  it("sweeps 500 hosts inside a 30s interval, which the old fixed 5 could not", () => {
-    const POLL_MS = 400;
-    const hosts = 500;
-    const sweepAt = (c: number) => Math.ceil(hosts / c) * POLL_MS;
-
-    expect(sweepAt(5)).toBeGreaterThan(30_000);
-    expect(sweepAt(metricsConcurrencyFor(hosts, {}))).toBeLessThan(30_000);
-  });
-});
-
-describe("HostPollCache", () => {
-  it("returns cached host within TTL for the same user", () => {
-    const cache = new HostPollCache<{ id: number; name: string }>(60_000);
-    cache.set(1, "user-a", { id: 1, name: "alpha" });
-    expect(cache.get(1, "user-a")).toEqual({ id: 1, name: "alpha" });
-    expect(cache.get(1, "user-b")).toBeNull();
-  });
-
-  it("expires entries after TTL", () => {
-    vi.useFakeTimers();
-    const cache = new HostPollCache<{ id: number }>(1_000);
-    cache.set(7, "u", { id: 7 });
-    expect(cache.get(7, "u")).toEqual({ id: 7 });
-    vi.advanceTimersByTime(1_001);
-    expect(cache.get(7, "u")).toBeNull();
-    vi.useRealTimers();
-  });
-
-  it("invalidate drops a host or the whole cache", () => {
-    const cache = new HostPollCache<{ id: number }>(60_000);
-    cache.set(1, "u", { id: 1 });
-    cache.set(2, "u", { id: 2 });
-    cache.invalidate(1);
-    expect(cache.get(1, "u")).toBeNull();
-    expect(cache.get(2, "u")).toEqual({ id: 2 });
-    cache.invalidate();
-    expect(cache.get(2, "u")).toBeNull();
-  });
-});
diff --git a/plugins/host-metrics/tests/backend/widgets/cpu-collector.test.ts b/plugins/host-metrics/tests/backend/widgets/cpu-collector.test.ts
deleted file mode 100644
index f6d16dc6f..000000000
--- a/plugins/host-metrics/tests/backend/widgets/cpu-collector.test.ts
+++ /dev/null
@@ -1,45 +0,0 @@
-import { describe, it, expect } from "vitest";
-import {
-  parseCpuLine,
-  parseDarwinCpuUsageLine,
-} from "../../../src/backend/widgets/cpu-collector.js";
-
-describe("parseCpuLine", () => {
-  it("parses a standard /proc/stat cpu line", () => {
-    // user nice system idle iowait irq softirq
-    const result = parseCpuLine("cpu  100 0 50 800 30 0 20");
-    expect(result).toBeDefined();
-    // idle = idle(800) + iowait(30)
-    expect(result?.idle).toBe(830);
-    // total = sum of all fields
-    expect(result?.total).toBe(100 + 0 + 50 + 800 + 30 + 0 + 20);
-  });
-
-  it("tolerates leading/trailing whitespace", () => {
-    const result = parseCpuLine("  cpu 1 2 3 4  ");
-    expect(result?.total).toBe(10);
-    expect(result?.idle).toBe(4);
-  });
-
-  it("returns undefined for non-cpu lines", () => {
-    expect(parseCpuLine("cpu0 1 2 3 4")).toBeUndefined();
-    expect(parseCpuLine("intr 12345")).toBeUndefined();
-  });
-
-  it("returns undefined when there are fewer than 4 numeric fields", () => {
-    expect(parseCpuLine("cpu 1 2 3")).toBeUndefined();
-  });
-});
-
-describe("parseDarwinCpuUsageLine", () => {
-  it("parses macOS `top -l 1` CPU usage line", () => {
-    const result = parseDarwinCpuUsageLine(
-      "CPU usage: 12.34% user, 5.66% sys, 82.00% idle",
-    );
-    expect(result?.percent).toBeCloseTo(18.0, 5);
-  });
-
-  it("returns undefined for unrelated lines", () => {
-    expect(parseDarwinCpuUsageLine("Processes: 400 total")).toBeUndefined();
-  });
-});
diff --git a/plugins/host-metrics/tests/backend/widgets/disk-collector.test.ts b/plugins/host-metrics/tests/backend/widgets/disk-collector.test.ts
deleted file mode 100644
index aa6d0ddd5..000000000
--- a/plugins/host-metrics/tests/backend/widgets/disk-collector.test.ts
+++ /dev/null
@@ -1,348 +0,0 @@
-import { describe, it, expect } from "vitest";
-import {
-  parseDfLines,
-  findWorstMountIndex,
-  buildFilesystemList,
-  selectPrimaryFilesystem,
-  filterExcludedFilesystems,
-  mergeMonitoredFilesystems,
-  parseWindowsDiskJson,
-  parseDarwinMountTypes,
-  parseDarwinDfRows,
-} from "../../../src/backend/widgets/disk-collector.js";
-
-describe("parseDfLines", () => {
-  it("parses df -T -P output into rows", () => {
-    const output =
-      "/dev/nvme0n1p2 ext4 3848290697216 1046898851840 2606516101120  29% /\n" +
-      "/dev/nvme1n1p1 ext4 15393162788864 15239230844928 153931922841  99% /data\n";
-    const rows = parseDfLines(output);
-    expect(rows).toHaveLength(2);
-    expect(rows[0].mount).toBe("/");
-    expect(rows[0].type).toBe("ext4");
-    expect(rows[1].mount).toBe("/data");
-  });
-
-  it("filters out pseudo filesystems", () => {
-    const output =
-      "tmpfs tmpfs 8000 0 8000 0% /dev/shm\n" +
-      "overlay overlay 100 50 50 50% /\n" +
-      "/dev/sda1 ext4 100 50 50 50% /mnt/data\n";
-    const rows = parseDfLines(output);
-    expect(rows).toHaveLength(1);
-    expect(rows[0].mount).toBe("/mnt/data");
-  });
-
-  it("captures the filesystem type for network shares", () => {
-    const output =
-      "nas.local:/export nfs4 2000 1900 100 95% /mnt/nas\n" +
-      "//server/share cifs 2000 1000 1000 50% /mnt/smb\n";
-    const rows = parseDfLines(output);
-    expect(rows[0].type).toBe("nfs4");
-    expect(rows[1].type).toBe("cifs");
-  });
-
-  it("keeps full image and firmware mounts out of disk usage", () => {
-    const rows = parseDfLines(
-      "/dev/loop0 squashfs 100 100 0 100% /snap/core/1\n" +
-        "efivarfs efivarfs 100 89 11 89% /sys/firmware/efi/efivars\n" +
-        "/dev/sda1 ext4 1000 400 600 40% /\n",
-    );
-    expect(rows.map((row) => row.mount)).toEqual(["/"]);
-    expect(findWorstMountIndex(rows)).toEqual({
-      index: 0,
-      usedBytes: 400,
-      totalBytes: 1000,
-    });
-  });
-
-  it("retains real storage without requiring a /dev source", () => {
-    const rows = parseDfLines(
-      "/dev/sda1 btrfs 1000 400 600 40% /\n" +
-        "tank/data zfs 2000 1000 1000 50% /data\n" +
-        "nas:/export nfs4 2000 1900 100 95% /mnt/nas\n" +
-        "//server/share cifs 2000 1000 1000 50% /mnt/smb\n",
-    );
-    expect(rows.map((row) => row.type)).toEqual([
-      "btrfs",
-      "zfs",
-      "nfs4",
-      "cifs",
-    ]);
-  });
-});
-
-describe("findWorstMountIndex", () => {
-  it("picks the most-utilized mount, not just the first row", () => {
-    const rows = parseDfLines(
-      "/dev/nvme0n1p2 ext4 3848290697216 1046898851840 2606516101120  29% /\n" +
-        "/dev/nvme1n1p1 ext4 15393162788864 15239230844928 153931922841  99% /data\n",
-    );
-    const worst = findWorstMountIndex(rows);
-    expect(worst.index).toBe(1);
-    expect(worst.totalBytes).toBe(15393162788864);
-    expect(worst.usedBytes).toBe(15239230844928);
-  });
-
-  it("falls back to the only mount available", () => {
-    const rows = parseDfLines("/dev/sda1 ext4 100 30 70 30% /\n");
-    const worst = findWorstMountIndex(rows);
-    expect(worst.index).toBe(0);
-  });
-
-  it("skips rows with invalid or zero totals", () => {
-    const rows = parseDfLines(
-      "/dev/sda1 ext4 0 0 0 0% /broken\n" +
-        "/dev/sda2 ext4 100 40 60 40% /ok\n",
-    );
-    const worst = findWorstMountIndex(rows);
-    expect(worst.index).toBe(1);
-  });
-
-  it("returns index -1 when there are no usable rows", () => {
-    const worst = findWorstMountIndex([]);
-    expect(worst.index).toBe(-1);
-    expect(worst.totalBytes).toBe(0);
-  });
-});
-
-const BYTES_OUTPUT =
-  "/dev/nvme0n1p2 ext4 1000 400 600 40% /\n" +
-  "/dev/nvme1n1p1 ext4 2000 1900 100 95% /data\n";
-const HUMAN_OUTPUT =
-  "/dev/nvme0n1p2 ext4 1.0K 400 600 40% /\n" +
-  "/dev/nvme1n1p1 ext4 2.0K 1.9K 100 95% /data\n";
-
-describe("buildFilesystemList", () => {
-  it("returns every real filesystem with byte maths and human strings", () => {
-    const list = buildFilesystemList(
-      parseDfLines(BYTES_OUTPUT),
-      parseDfLines(HUMAN_OUTPUT),
-    );
-    expect(list).toHaveLength(2);
-    expect(list[0]).toMatchObject({
-      mount: "/",
-      type: "ext4",
-      percent: 40,
-      usedHuman: "400",
-      totalHuman: "1.0K",
-      availableHuman: "600",
-      usedBytes: 400,
-      totalBytes: 1000,
-    });
-    expect(list[1]).toMatchObject({ mount: "/data", percent: 95 });
-  });
-
-  it("matches human rows by mount when the row counts differ", () => {
-    const list = buildFilesystemList(
-      parseDfLines(BYTES_OUTPUT),
-      parseDfLines("/dev/nvme1n1p1 ext4 2.0K 1.9K 100 95% /data\n"),
-    );
-    expect(list[0].totalHuman).toBeNull();
-    expect(list[1].totalHuman).toBe("2.0K");
-  });
-
-  it("drops filesystems with a zero or invalid total", () => {
-    const list = buildFilesystemList(
-      parseDfLines(
-        "/dev/sda1 ext4 0 0 0 0% /broken\n/dev/sda2 ext4 100 40 60 40% /ok\n",
-      ),
-      [],
-    );
-    expect(list).toHaveLength(1);
-    expect(list[0].mount).toBe("/ok");
-  });
-});
-
-describe("selectPrimaryFilesystem", () => {
-  it("prefers root over a fuller secondary mount", () => {
-    const list = buildFilesystemList(
-      parseDfLines(BYTES_OUTPUT),
-      parseDfLines(HUMAN_OUTPUT),
-    );
-    expect(selectPrimaryFilesystem(list)?.mount).toBe("/");
-  });
-
-  it("falls back to the most-utilized mount when there is no root", () => {
-    const list = buildFilesystemList(
-      parseDfLines(
-        "/dev/sda1 ext4 1000 100 900 10% /mnt/a\n" +
-          "/dev/sda2 ext4 1000 800 200 80% /mnt/b\n",
-      ),
-      [],
-    );
-    expect(selectPrimaryFilesystem(list)?.mount).toBe("/mnt/b");
-  });
-
-  it("returns null for an empty list", () => {
-    expect(selectPrimaryFilesystem([])).toBeNull();
-  });
-});
-
-describe("filterExcludedFilesystems", () => {
-  const list = buildFilesystemList(
-    parseDfLines(
-      "/dev/sda1 ext4 1000 400 600 40% /\n" +
-        "nas.local:/export nfs4 2000 1900 100 95% /mnt/nas\n" +
-        "//server/share cifs 2000 1000 1000 50% /mnt/smb\n",
-    ),
-    [],
-  );
-
-  it("returns the same list when no mounts are excluded", () => {
-    expect(filterExcludedFilesystems(list)).toHaveLength(3);
-    expect(filterExcludedFilesystems(list, [])).toHaveLength(3);
-  });
-
-  it("excludes an exact mount path match", () => {
-    const filtered = filterExcludedFilesystems(list, ["/mnt/nas"]);
-    expect(filtered.map((fs) => fs.mount)).toEqual(["/", "/mnt/smb"]);
-  });
-
-  it("excludes by filesystem type substring, case-insensitively", () => {
-    const filtered = filterExcludedFilesystems(list, ["NFS"]);
-    expect(filtered.map((fs) => fs.mount)).toEqual(["/", "/mnt/smb"]);
-  });
-
-  it("supports excluding multiple network filesystem types at once", () => {
-    const filtered = filterExcludedFilesystems(list, ["nfs", "cifs"]);
-    expect(filtered.map((fs) => fs.mount)).toEqual(["/"]);
-  });
-
-  it("ignores blank/whitespace-only entries", () => {
-    const filtered = filterExcludedFilesystems(list, ["  ", ""]);
-    expect(filtered).toHaveLength(3);
-  });
-});
-
-describe("mergeMonitoredFilesystems", () => {
-  it("adds an arbitrary path with a user label", () => {
-    const detected = buildFilesystemList(
-      parseDfLines("/dev/sda1 ext4 1000 400 600 40% /\n"),
-      [],
-    );
-    const custom = buildFilesystemList(
-      parseDfLines("/dev/sda1 ext4 1000 400 600 40% /\n"),
-      [],
-    );
-    const result = mergeMonitoredFilesystems(
-      detected,
-      [{ path: "/config", label: "Home Assistant" }],
-      custom,
-    );
-
-    expect(result).toHaveLength(2);
-    expect(result[1]).toMatchObject({
-      mount: "/config",
-      label: "Home Assistant",
-      totalBytes: 1000,
-    });
-  });
-
-  it("labels a path that is already a detected mount", () => {
-    const detected = buildFilesystemList(
-      parseDfLines("/dev/sda1 ext4 1000 400 600 40% /data\n"),
-      [],
-    );
-    const result = mergeMonitoredFilesystems(
-      detected,
-      [{ path: "/data", label: "Media" }],
-      detected,
-    );
-
-    expect(result).toHaveLength(1);
-    expect(result[0].label).toBe("Media");
-  });
-});
-
-// Representative output shape from `df -Pk` and `mount` on a modern macOS
-// (Sonoma/Sequoia, Apple Silicon) system, where the APFS root volume group
-// surfaces as several synthetic system volumes alongside the real "/" and
-// "/System/Volumes/Data" mounts.
-const DARWIN_DF_OUTPUT =
-  "Filesystem   1024-blocks      Used Available Capacity Mounted on\n" +
-  "/dev/disk3s1s1  971350180  10904432 723545416    2%    /\n" +
-  "devfs                 205       205         0  100%    /dev\n" +
-  "/dev/disk3s6    971350180   8437248 723545416    2%    /System/Volumes/VM\n" +
-  "/dev/disk3s2    971350180   6067864 723545416    1%    /System/Volumes/Preboot\n" +
-  "/dev/disk3s4    971350180     16612 723545416    1%    /System/Volumes/Update\n" +
-  "/dev/disk1s2         500098      6104    479950    2%    /System/Volumes/xarts\n" +
-  "/dev/disk1s1         500098      5388    479950    2%    /System/Volumes/iSCPreboot\n" +
-  "/dev/disk1s3         500098        36    479950    1%    /System/Volumes/Hardware\n" +
-  "/dev/disk3s5    971350180 235925064 723545416   25%    /System/Volumes/Data\n" +
-  "map auto_home             0         0         0  100%    /System/Volumes/Data/home\n";
-
-const DARWIN_MOUNT_OUTPUT =
-  "/dev/disk3s1s1 on / (apfs, sealed, local, read-only, journaled)\n" +
-  "devfs on /dev (devfs, local, nobrowse)\n" +
-  "/dev/disk3s6 on /System/Volumes/VM (apfs, local, noexec, journaled, noatime, nobrowse)\n" +
-  "/dev/disk3s2 on /System/Volumes/Preboot (apfs, local, journaled, nobrowse)\n" +
-  "/dev/disk3s4 on /System/Volumes/Update (apfs, local, journaled, nobrowse)\n" +
-  "/dev/disk1s2 on /System/Volumes/xarts (apfs, local, noexec, journaled, noatime, nobrowse)\n" +
-  "/dev/disk1s1 on /System/Volumes/iSCPreboot (apfs, local, journaled, nobrowse)\n" +
-  "/dev/disk1s3 on /System/Volumes/Hardware (apfs, local, journaled, nobrowse)\n" +
-  "/dev/disk3s5 on /System/Volumes/Data (apfs, local, journaled, nobrowse)\n" +
-  "map auto_home on /System/Volumes/Data/home (autofs, automounted, nobrowse)\n";
-
-describe("parseDarwinMountTypes", () => {
-  it("maps each mount point to its filesystem type", () => {
-    const map = parseDarwinMountTypes(DARWIN_MOUNT_OUTPUT);
-    expect(map.get("/")).toBe("apfs");
-    expect(map.get("/dev")).toBe("devfs");
-    expect(map.get("/System/Volumes/Data/home")).toBe("autofs");
-  });
-});
-
-describe("parseDarwinDfRows", () => {
-  it("parses real `df -Pk` rows and drops devfs/autofs and synthetic system volumes", () => {
-    const typeByMount = parseDarwinMountTypes(DARWIN_MOUNT_OUTPUT);
-    const rows = parseDarwinDfRows(DARWIN_DF_OUTPUT, typeByMount);
-
-    expect(rows.map((r) => r.mount)).toEqual(["/", "/System/Volumes/Data"]);
-
-    const root = rows[0];
-    expect(root.type).toBe("apfs");
-    expect(root.totalBytes).toBe(971350180 * 1024);
-    expect(root.usedBytes).toBe(10904432 * 1024);
-    expect(root.availableBytes).toBe(723545416 * 1024);
-    // Our percent is used/total (matches the Linux/Windows collectors), which
-    // differs slightly from df's own Capacity% (used/(used+available)).
-    expect(root.percent).toBe(1);
-    expect(root.usedHuman).toBeTruthy();
-    expect(root.totalHuman).toBeTruthy();
-  });
-
-  it("returns an empty list for blank output", () => {
-    expect(parseDarwinDfRows("", new Map())).toEqual([]);
-  });
-});
-
-describe("parseWindowsDiskJson", () => {
-  it("handles ConvertTo-Json collapsing a single result to an object", () => {
-    const rows = parseWindowsDiskJson(
-      '{"drive":"C:","total":1000000000,"free":400000000}',
-    );
-    expect(rows).toEqual([{ drive: "C:", total: 1000000000, free: 400000000 }]);
-  });
-
-  it("parses an array of drives", () => {
-    const rows = parseWindowsDiskJson(
-      '[{"drive":"C:","total":1000,"free":400},{"drive":"D:","total":2000,"free":1900}]',
-    );
-    expect(rows).toHaveLength(2);
-    expect(rows[1]).toEqual({ drive: "D:", total: 2000, free: 1900 });
-  });
-
-  it("drops drives with a zero or missing total", () => {
-    const rows = parseWindowsDiskJson(
-      '[{"drive":"C:","total":0,"free":0},{"drive":"D:","total":100,"free":50}]',
-    );
-    expect(rows).toHaveLength(1);
-    expect(rows[0].drive).toBe("D:");
-  });
-
-  it("returns an empty array for blank or invalid output", () => {
-    expect(parseWindowsDiskJson("")).toEqual([]);
-    expect(parseWindowsDiskJson("not json")).toEqual([]);
-  });
-});
diff --git a/plugins/host-metrics/tests/backend/widgets/gpu-collector.test.ts b/plugins/host-metrics/tests/backend/widgets/gpu-collector.test.ts
deleted file mode 100644
index 72e665793..000000000
--- a/plugins/host-metrics/tests/backend/widgets/gpu-collector.test.ts
+++ /dev/null
@@ -1,179 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  parseNvidiaSmiGpus,
-  parseNvidiaSmiOutput,
-  parseNvidiaSmiProcesses,
-} from "../../../src/backend/widgets/gpu-collector.js";
-
-const RTX_UUID = "GPU-3b8f2c1a-5d4e-7f60-8a9b-0c1d2e3f4a5b";
-const H100_UUID = "GPU-9a8b7c6d-5e4f-3a2b-1c0d-e9f8a7b6c5d4";
-
-// index, uuid, driver_version, utilization.gpu, memory.used, memory.total,
-// temperature.gpu, power.draw, power.limit, fan.speed, name
-const GPU_QUERY_OUTPUT = [
-  `0, ${RTX_UUID}, 550.54.14, 37, 8123, 24564, 61, 182.47, 450.00, 45, NVIDIA GeForce RTX 4090`,
-  `1, ${H100_UUID}, 550.54.14, 0, 1, 81559, 34, 62.10, 700.00, [N/A], NVIDIA H100 80GB HBM3`,
-  "",
-].join("\n");
-
-// gpu_uuid, pid, used_memory, process_name
-const APPS_QUERY_OUTPUT = [
-  `${RTX_UUID}, 12345, 7890, /usr/bin/python3`,
-  `${H100_UUID}, 23456, [N/A], /opt/app/worker, gpu, v2`,
-  "",
-].join("\n");
-
-const DRIVER_FAILURE =
-  "NVIDIA-SMI has failed because it couldn't communicate with the NVIDIA driver. Make sure that the latest NVIDIA driver is installed and running.\n";
-
-const RTX = {
-  index: 0,
-  uuid: RTX_UUID,
-  name: "NVIDIA GeForce RTX 4090",
-  driverVersion: "550.54.14",
-  utilizationPercent: 37,
-  memoryUsedMiB: 8123,
-  memoryTotalMiB: 24564,
-  memoryPercent: 33.1,
-  temperatureCelsius: 61,
-  powerDrawWatts: 182.5,
-  powerLimitWatts: 450,
-  fanPercent: 45,
-};
-
-const H100 = {
-  index: 1,
-  uuid: H100_UUID,
-  name: "NVIDIA H100 80GB HBM3",
-  driverVersion: "550.54.14",
-  utilizationPercent: 0,
-  memoryUsedMiB: 1,
-  memoryTotalMiB: 81559,
-  memoryPercent: 0,
-  temperatureCelsius: 34,
-  powerDrawWatts: 62.1,
-  powerLimitWatts: 700,
-  fanPercent: null,
-};
-
-describe("gpu collector", () => {
-  describe("parseNvidiaSmiGpus", () => {
-    it("parses one device per row of --query-gpu output", () => {
-      expect(parseNvidiaSmiGpus(GPU_QUERY_OUTPUT)).toEqual([RTX, H100]);
-    });
-
-    it("maps unsupported and unavailable readings to null", () => {
-      const [gpu] = parseNvidiaSmiGpus(
-        "0, GPU-aaaa, 470.182.03, [N/A], 512, [N/A], [Not Supported], [Not Supported], [N/A], [Unknown Error], Tesla K80\n",
-      );
-
-      expect(gpu).toEqual({
-        index: 0,
-        uuid: "GPU-aaaa",
-        name: "Tesla K80",
-        driverVersion: "470.182.03",
-        utilizationPercent: null,
-        memoryUsedMiB: 512,
-        memoryTotalMiB: null,
-        memoryPercent: null,
-        temperatureCelsius: null,
-        powerDrawWatts: null,
-        powerLimitWatts: null,
-        fanPercent: null,
-      });
-    });
-
-    it("keeps a device name that contains commas intact", () => {
-      const [gpu] = parseNvidiaSmiGpus(
-        "0, GPU-bbbb, 535.0, 5, 10, 100, 40, 20, 70, 30, Quadro RTX, Mobile, Max-Q\n",
-      );
-
-      expect(gpu.name).toBe("Quadro RTX, Mobile, Max-Q");
-      expect(gpu.fanPercent).toBe(30);
-    });
-
-    it("ignores driver error text printed to stdout", () => {
-      expect(parseNvidiaSmiGpus(DRIVER_FAILURE)).toEqual([]);
-      expect(parseNvidiaSmiGpus("No devices were found\n")).toEqual([]);
-    });
-
-    it("skips a csv header row", () => {
-      const header =
-        "index, uuid, driver_version, utilization.gpu [%], memory.used [MiB], memory.total [MiB], temperature.gpu, power.draw [W], power.limit [W], fan.speed [%], name\n";
-
-      expect(parseNvidiaSmiGpus(header + GPU_QUERY_OUTPUT)).toEqual([
-        RTX,
-        H100,
-      ]);
-    });
-  });
-
-  describe("parseNvidiaSmiProcesses", () => {
-    it("attaches each process to the GPU with the matching uuid", () => {
-      expect(parseNvidiaSmiProcesses(APPS_QUERY_OUTPUT, [RTX, H100])).toEqual([
-        {
-          gpuIndex: 0,
-          pid: 12345,
-          name: "/usr/bin/python3",
-          memoryUsedMiB: 7890,
-        },
-        {
-          gpuIndex: 1,
-          pid: 23456,
-          name: "/opt/app/worker, gpu, v2",
-          memoryUsedMiB: null,
-        },
-      ]);
-    });
-
-    it("keeps processes whose uuid matches no listed GPU", () => {
-      expect(
-        parseNvidiaSmiProcesses("GPU-unknown, 77, 100, /bin/app\n", [RTX]),
-      ).toEqual([
-        { gpuIndex: null, pid: 77, name: "/bin/app", memoryUsedMiB: 100 },
-      ]);
-    });
-
-    it("ignores driver error text printed to stdout", () => {
-      expect(parseNvidiaSmiProcesses(DRIVER_FAILURE, [RTX])).toEqual([]);
-    });
-
-    it("skips a csv header row", () => {
-      expect(
-        parseNvidiaSmiProcesses(
-          "gpu_uuid, pid, used_gpu_memory [MiB], process_name\n",
-          [RTX],
-        ),
-      ).toEqual([]);
-    });
-  });
-
-  describe("parseNvidiaSmiOutput", () => {
-    it("splits the combined command output into devices and processes", () => {
-      const result = parseNvidiaSmiOutput(
-        `${GPU_QUERY_OUTPUT}---\n${APPS_QUERY_OUTPUT}`,
-      );
-
-      expect(result.source).toBe("nvidia-smi");
-      expect(result.gpus).toEqual([RTX, H100]);
-      expect(result.processes.map((p) => [p.gpuIndex, p.pid])).toEqual([
-        [0, 12345],
-        [1, 23456],
-      ]);
-    });
-
-    it("reports no source when nvidia-smi is not installed", () => {
-      expect(parseNvidiaSmiOutput("")).toEqual({
-        source: "none",
-        gpus: [],
-        processes: [],
-      });
-    });
-
-    it("reports no source when the driver cannot be reached", () => {
-      expect(
-        parseNvidiaSmiOutput(`${DRIVER_FAILURE}---\n${DRIVER_FAILURE}`),
-      ).toEqual({ source: "none", gpus: [], processes: [] });
-    });
-  });
-});
diff --git a/plugins/host-metrics/tests/backend/widgets/network-collector.test.ts b/plugins/host-metrics/tests/backend/widgets/network-collector.test.ts
deleted file mode 100644
index 6699eed22..000000000
--- a/plugins/host-metrics/tests/backend/widgets/network-collector.test.ts
+++ /dev/null
@@ -1,92 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  counterRate,
-  parseNetworkCounters,
-  parseDarwinIfconfig,
-  parseDarwinNetstat,
-  parseWindowsAdapterJson,
-} from "../../../src/backend/widgets/network-collector.js";
-
-const PROC_NET = `Inter-|   Receive                                                |  Transmit
- face |bytes packets errs drop fifo frame compressed multicast|bytes packets errs drop fifo colls carrier compressed
-  eth0: 1024 1 0 0 0 0 0 0 2048 2 0 0 0 0 0 0
-    lo: 4096 4 0 0 0 0 0 0 4096 4 0 0 0 0 0 0`;
-
-describe("network counters", () => {
-  it("parses Linux proc counters", () => {
-    expect(parseNetworkCounters(PROC_NET).get("eth0")).toEqual({
-      rx: "1024",
-      tx: "2048",
-    });
-  });
-
-  it("calculates bytes per second and rejects counter resets", () => {
-    expect(counterRate("1000", "2500", 0.5)).toBe(3000);
-    expect(counterRate("2500", "1000", 0.5)).toBeNull();
-  });
-});
-
-const DARWIN_IFCONFIG = `lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
-	inet 127.0.0.1 netmask 0xff000000
-en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
-	ether ac:de:48:00:11:22
-	inet 192.168.1.5 netmask 0xffffff00 broadcast 192.168.1.255
-	status: active
-en1: flags=8822<BROADCAST,SMART,SIMPLEX,MULTICAST> mtu 1500
-	ether ac:de:48:00:11:23
-	status: inactive`;
-
-const DARWIN_NETSTAT = `Name  Mtu   Network       Address            Ipkts Ierrs     Ibytes    Opkts Oerrs     Obytes  Coll
-lo0   16384 <Link#1>                        466472     0   62511610   466472     0   62511610     0
-lo0   16384 127           127.0.0.1          466472     -   62511610   466472     -   62511610     -
-en0   1500  <Link#4>    ac:de:48:00:11:22   123456     0  987654321    65432     0  123456789     0
-en0   1500  192.168.1     192.168.1.5        123456     -  987654321    65432     -  123456789     -`;
-
-describe("darwin network parsing", () => {
-  it("parses interface addresses and up/down state from ifconfig", () => {
-    const map = parseDarwinIfconfig(DARWIN_IFCONFIG);
-    expect(map.has("lo0")).toBe(false);
-    expect(map.get("en0")).toEqual({ ip: "192.168.1.5", state: "UP" });
-    expect(map.get("en1")).toEqual({ ip: "", state: "DOWN" });
-  });
-
-  it("parses byte counters from the Link-layer netstat -ib row", () => {
-    const counters = parseDarwinNetstat(DARWIN_NETSTAT);
-    expect(counters.has("lo0")).toBe(false);
-    expect(counters.get("en0")).toEqual({
-      rx: "987654321",
-      tx: "123456789",
-    });
-  });
-});
-
-describe("parseWindowsAdapterJson", () => {
-  it("handles ConvertTo-Json collapsing a single result to an object", () => {
-    const rows = parseWindowsAdapterJson(
-      '{"name":"Ethernet","ip":"10.0.0.5","state":"UP","rx":1000,"tx":2000}',
-    );
-    expect(rows).toEqual([
-      { name: "Ethernet", ip: "10.0.0.5", state: "UP", rx: "1000", tx: "2000" },
-    ]);
-  });
-
-  it("parses an array of adapters", () => {
-    const rows = parseWindowsAdapterJson(
-      '[{"name":"Ethernet","ip":"10.0.0.5","state":"UP","rx":1000,"tx":2000},' +
-        '{"name":"Wi-Fi","ip":null,"state":"UP","rx":500,"tx":700}]',
-    );
-    expect(rows).toHaveLength(2);
-    expect(rows[1]).toEqual({
-      name: "Wi-Fi",
-      ip: "",
-      state: "UP",
-      rx: "500",
-      tx: "700",
-    });
-  });
-
-  it("returns an empty array for blank or invalid output", () => {
-    expect(parseWindowsAdapterJson("")).toEqual([]);
-    expect(parseWindowsAdapterJson("not json")).toEqual([]);
-  });
-});
diff --git a/plugins/host-metrics/tests/backend/widgets/temperature-collector.test.ts b/plugins/host-metrics/tests/backend/widgets/temperature-collector.test.ts
deleted file mode 100644
index cf2589ae2..000000000
--- a/plugins/host-metrics/tests/backend/widgets/temperature-collector.test.ts
+++ /dev/null
@@ -1,47 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  parseSensorsOutput,
-  parseSysfsThermalOutput,
-} from "../../../src/backend/widgets/temperature-collector.js";
-
-describe("temperature collectors", () => {
-  it("parses sysfs thermal zone output", () => {
-    const result = parseSysfsThermalOutput(
-      "x86_pkg_temp\t51000\nacpitz\t42\nbad\tnope\n",
-    );
-
-    expect(result).toEqual([
-      { label: "x86_pkg_temp", celsius: 51 },
-      { label: "acpitz", celsius: 42 },
-    ]);
-  });
-
-  it("parses lm-sensors temperature lines", () => {
-    const result = parseSensorsOutput(`
-coretemp-isa-0000
-Adapter: ISA adapter
-Package id 0:  +52.0°C  (high = +80.0°C, crit = +100.0°C)
-Core 0:        +48.5°C
-fan1:          1200 RPM
-`);
-
-    expect(result).toEqual([
-      { label: "coretemp-isa-0000: Package id 0", celsius: 52 },
-      { label: "coretemp-isa-0000: Core 0", celsius: 48.5 },
-    ]);
-  });
-
-  it("keeps duplicate sensor names distinct across devices", () => {
-    const result = parseSensorsOutput(`
-nvme-pci-0100
-Composite: +41.0°C
-nvme-pci-0200
-Composite: +52.0°C
-`);
-
-    expect(result).toEqual([
-      { label: "nvme-pci-0100: Composite", celsius: 41 },
-      { label: "nvme-pci-0200: Composite", celsius: 52 },
-    ]);
-  });
-});
diff --git a/plugins/host-metrics/tests/frontend/HostEditorStatsTab.test.tsx b/plugins/host-metrics/tests/frontend/HostEditorStatsTab.test.tsx
deleted file mode 100644
index fb2c7c4a8..000000000
--- a/plugins/host-metrics/tests/frontend/HostEditorStatsTab.test.tsx
+++ /dev/null
@@ -1,47 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { cleanup, fireEvent, render, screen } from "@testing-library/react";
-import "@testing-library/jest-dom/vitest";
-import { HostStatsTab } from "../../src/frontend/HostEditorStatsTab";
-
-afterEach(cleanup);
-
-function renderSection(pluginSettings: Record<string, unknown> = {}) {
-  let form: Record<string, unknown> = {
-    pluginSettings: { "host-metrics": pluginSettings, other: { keep: 1 } },
-  };
-  const updateForm = vi.fn(
-    (patch: (current: Record<string, unknown>) => Record<string, unknown>) => {
-      form = { ...form, ...patch(form) };
-    },
-  );
-  render(
-    <HostStatsTab
-      form={form}
-      setField={vi.fn()}
-      updateForm={updateForm as never}
-      host={{ id: "7", name: "h", ip: "10.0.0.7", port: 22 }}
-      protocols={{ ssh: true }}
-    />,
-  );
-  return { updateForm, form: () => form };
-}
-
-describe("HostStatsTab", () => {
-  it("writes the plugin's host settings and leaves other plugins alone", () => {
-    const { form } = renderSection({ metricsEnabled: true });
-    fireEvent.change(
-      screen.getByPlaceholderText("hosts.excludedMountsPlaceholder"),
-      { target: { value: "/snap" } },
-    );
-    fireEvent.click(screen.getByText(/hosts.addExcludedMount/));
-    expect(form().pluginSettings).toEqual({
-      "host-metrics": { metricsEnabled: true, excludedMounts: ["/snap"] },
-      other: { keep: 1 },
-    });
-  });
-
-  it("has no status check options, which are core's", () => {
-    renderSection();
-    expect(screen.queryByText("hosts.statusChecksLabel")).toBeNull();
-  });
-});
diff --git a/plugins/host-metrics/tests/frontend/HostMetricsTab.test.tsx b/plugins/host-metrics/tests/frontend/HostMetricsTab.test.tsx
deleted file mode 100644
index fc9946165..000000000
--- a/plugins/host-metrics/tests/frontend/HostMetricsTab.test.tsx
+++ /dev/null
@@ -1,113 +0,0 @@
-import { afterEach, beforeAll, describe, expect, it, vi } from "vitest";
-import { cleanup, render, screen } from "@testing-library/react";
-import "@testing-library/jest-dom/vitest";
-import type { ServerMetrics } from "../../src/shared/metrics.js";
-
-vi.mock("react-i18next", () => ({
-  useTranslation: () => ({ t: (key: string) => key }),
-  initReactI18next: { type: "3rdParty", init: () => {} },
-}));
-
-const SAMPLE = {
-  cpu: { percent: 12, cores: 8, load: [0.5, 0.4, 0.3] },
-  memory: { percent: 40, usedGiB: 12.8, totalGiB: 32 },
-  disk: { percent: 55 },
-  gpu: {
-    source: "nvidia-smi",
-    gpus: [
-      {
-        index: 0,
-        uuid: "GPU-0",
-        name: "NVIDIA GeForce RTX 2070 SUPER",
-        driverVersion: "580.173.02",
-        utilizationPercent: 0,
-        memoryUsedMiB: 5689,
-        memoryTotalMiB: 8192,
-        memoryPercent: 69.4,
-        temperatureCelsius: 35,
-        powerDrawWatts: 24,
-        powerLimitWatts: 215,
-        fanPercent: 0,
-      },
-    ],
-    processes: [],
-  },
-  lastChecked: "2026-09-18T07:00:00.000Z",
-} as ServerMetrics;
-
-vi.mock("../../src/frontend/host-metrics-api", async (importOriginal) => {
-  const api = {
-    getMetrics: vi.fn(async () => SAMPLE),
-    startMetrics: vi.fn(async () => ({
-      success: true,
-      viewerSessionId: "viewer-1",
-    })),
-    stopMetrics: vi.fn(async () => undefined),
-    heartbeat: vi.fn(async () => true),
-    submitTotp: vi.fn(),
-  };
-  return {
-    ...(await importOriginal<object>()),
-    useHostMetricsApi: () => api,
-  };
-});
-
-vi.mock("@termix/plugin-sdk/ui", async (importOriginal) => ({
-  ...(await importOriginal<object>()),
-  useConfirmation: () => ({ confirmWithToast: vi.fn() }),
-  logActivity: vi.fn(async () => undefined),
-}));
-
-vi.mock("../../src/frontend/hooks/useHostMetricsPreferences.ts", () => ({
-  useHostMetricsPreferences: () => ({
-    layout: {
-      slots: [{ id: "gpu", order: 0, colSpan: 2, height: null }],
-      columns: 3,
-    },
-    setLayout: vi.fn(),
-    loaded: true,
-  }),
-}));
-
-import { HostMetricsTab } from "../../src/frontend/HostMetricsTab";
-
-beforeAll(() => {
-  globalThis.ResizeObserver ??= class {
-    observe() {}
-    unobserve() {}
-    disconnect() {}
-  } as unknown as typeof ResizeObserver;
-});
-
-afterEach(cleanup);
-
-describe("HostMetricsTab", () => {
-  it("draws the trend lines from the first metrics sample, before the next poll", async () => {
-    render(
-      <HostMetricsTab
-        hostConfig={{
-          id: 1,
-          name: "gpu-box",
-          ip: "10.0.0.5",
-          username: "admin",
-          port: 22,
-          authType: "password",
-          pluginSettings: {
-            "host-metrics": {
-              metricsEnabled: true,
-              metricsInterval: 30,
-              enabledWidgets: ["gpu"],
-            },
-          },
-        }}
-      />,
-    );
-
-    const trend = await screen.findByRole(
-      "figure",
-      { name: "hostMetrics.gpu.memory" },
-      { timeout: 5000 },
-    );
-    expect(trend.querySelector("svg")).not.toBeNull();
-  });
-});
diff --git a/plugins/host-metrics/tests/frontend/TerminalMetricsStatus.test.tsx b/plugins/host-metrics/tests/frontend/TerminalMetricsStatus.test.tsx
deleted file mode 100644
index 7c9db0074..000000000
--- a/plugins/host-metrics/tests/frontend/TerminalMetricsStatus.test.tsx
+++ /dev/null
@@ -1,108 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { cleanup, render, screen, waitFor } from "@testing-library/react";
-import "@testing-library/jest-dom/vitest";
-
-const api = vi.hoisted(() => ({
-  get: vi.fn(),
-  post: vi.fn(),
-}));
-const remote = vi.hoisted(() => ({
-  api: { get: vi.fn(), post: vi.fn() },
-  origin: "local" as "local" | "remote",
-  remoteId: 70 as number | null,
-}));
-
-vi.mock("@termix/plugin-sdk/frontend", async (importOriginal) => ({
-  ...(await importOriginal<Record<string, unknown>>()),
-  usePluginApi: () => api,
-  usePluginApiFor: () => remote.api,
-  useTranslation: () => ({ t: (key: string) => key, language: "en" }),
-}));
-
-vi.mock("@termix/plugin-sdk/ui", () => ({
-  cn: (...classes: unknown[]) => classes.filter(Boolean).join(" "),
-  getPollingEnvironmentMultiplier: () => 1,
-  resolveConnectionOrigin: async () => remote.origin,
-  resolveRemoteHostId: async () => remote.remoteId,
-  runAdaptivePolling: (poll: () => Promise<unknown>) => {
-    void poll();
-    return () => {};
-  },
-}));
-
-import { TerminalMetricsStatus } from "../../src/frontend/TerminalMetricsStatus";
-
-afterEach(() => {
-  cleanup();
-  vi.clearAllMocks();
-  remote.origin = "local";
-  remote.remoteId = 70;
-});
-
-describe("TerminalMetricsStatus", () => {
-  it("polls the host's metrics while active and shows the bars", async () => {
-    api.post.mockResolvedValue({ data: { viewerSessionId: "viewer-1" } });
-    api.get.mockResolvedValue({
-      data: {
-        cpu: { percent: 12 },
-        memory: { percent: 40 },
-        disk: { percent: 91 },
-      },
-    });
-
-    render(<TerminalMetricsStatus host={{ id: 7 }} isConnected active />);
-
-    await waitFor(() => expect(screen.getByText("91%")).toBeInTheDocument());
-    expect(api.post).toHaveBeenCalledWith("/metrics/start/7");
-    expect(screen.getByText("12%")).toBeInTheDocument();
-    expect(screen.getByText("hostMetrics.cpu")).toBeInTheDocument();
-  });
-
-  it("does not poll while inactive", () => {
-    render(
-      <TerminalMetricsStatus host={{ id: 7 }} isConnected active={false} />,
-    );
-    expect(api.post).not.toHaveBeenCalled();
-  });
-
-  it("says stats are unavailable when the host needs a second factor", async () => {
-    api.post.mockResolvedValue({ data: { requires_totp: true } });
-    render(<TerminalMetricsStatus host={{ id: 7 }} isConnected active />);
-    await waitFor(() =>
-      expect(
-        screen.getByText("terminalStatus.unavailable"),
-      ).toBeInTheDocument(),
-    );
-  });
-
-  it("stops its viewer on unmount", async () => {
-    api.post.mockResolvedValue({ data: { viewerSessionId: "viewer-2" } });
-    api.get.mockResolvedValue({ data: null });
-    const view = render(
-      <TerminalMetricsStatus host={{ id: 7 }} isConnected active />,
-    );
-    await waitFor(() => expect(api.get).toHaveBeenCalled());
-    view.unmount();
-    expect(api.post).toHaveBeenLastCalledWith("/metrics/stop/7", {
-      viewerSessionId: "viewer-2",
-    });
-  });
-
-  it("polls a remote server's host by its id there", async () => {
-    remote.origin = "remote";
-    remote.api.post.mockResolvedValue({ data: { viewerSessionId: "v" } });
-    remote.api.get.mockResolvedValue({ data: { cpu: { percent: 33 } } });
-
-    render(
-      <TerminalMetricsStatus
-        host={{ id: 7, connectionOrigin: "remote", syncId: "s-1" }}
-        isConnected
-        active
-      />,
-    );
-
-    await waitFor(() => expect(screen.getByText("33%")).toBeInTheDocument());
-    expect(remote.api.post).toHaveBeenCalledWith("/metrics/start/70");
-    expect(api.post).not.toHaveBeenCalled();
-  });
-});
diff --git a/plugins/host-metrics/tests/frontend/activate.test.tsx b/plugins/host-metrics/tests/frontend/activate.test.tsx
deleted file mode 100644
index c8ffa9049..000000000
--- a/plugins/host-metrics/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,65 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-const declared = (views?: Array<{ id: string }>) =>
-  (views ?? []).map((view) => view.id).sort();
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe(`${manifest.id} activate`, () => {
-  it("activates and registers only views its manifest declares", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    const contributes = manifest.contributes as unknown as Record<
-      string,
-      Array<{ id: string }> | undefined
-    >;
-    const tabs = declared(contributes.tabs);
-    // A rail panel may reuse one of the plugin's tab ids.
-    const panels = [...declared(contributes.panels), ...tabs];
-    const cards = declared(contributes.dashboardCards);
-    for (const id of rendered.registered.tabs()) expect(tabs).toContain(id);
-    for (const id of rendered.registered.panels()) expect(panels).toContain(id);
-    for (const id of rendered.registered.dashboardCards()) {
-      expect(cards).toContain(id);
-    }
-  });
-
-  it("fills core's metric slots and offers disk usage to other plugins", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.slot("dashboard.hostRow")).toEqual([
-      "host-metrics.dashboardHost",
-    ]);
-    expect(rendered.registered.slot("homepage.hostMetrics")).toEqual([
-      "host-metrics.homepageHost",
-    ]);
-    expect(rendered.registered.actions()).toContain("host-metrics.disk");
-    expect(rendered.registered.hostEditorSections()).toEqual(["host-metrics"]);
-  });
-
-  it("removes everything it registered on deactivate", async () => {
-    const app = await renderWithApp(plugin, { manifest, locales });
-    await app.deactivate();
-    expect(app.registered.tabs()).toEqual([]);
-    expect(app.registered.panels()).toEqual([]);
-    expect(app.registered.railItems()).toEqual([]);
-    expect(app.registered.hostActions()).toEqual([]);
-    expect(app.registered.hostEditorSections()).toEqual([]);
-    expect(app.registered.dashboardCards()).toEqual([]);
-    expect(app.registered.settingsComponents()).toEqual([]);
-    expect(app.registered.actions()).toEqual([]);
-  });
-});
diff --git a/plugins/host-metrics/tests/frontend/cards/GpuCard.test.tsx b/plugins/host-metrics/tests/frontend/cards/GpuCard.test.tsx
deleted file mode 100644
index 40d0b22f4..000000000
--- a/plugins/host-metrics/tests/frontend/cards/GpuCard.test.tsx
+++ /dev/null
@@ -1,120 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { cleanup, render, screen } from "@testing-library/react";
-import "@testing-library/jest-dom/vitest";
-import type { ServerMetrics } from "../../../src/shared/metrics.js";
-import type { GpuMetrics } from "../../../src/shared/stats-widgets.js";
-
-vi.mock("react-i18next", () => ({
-  useTranslation: () => ({ t: (key: string) => key }),
-  initReactI18next: { type: "3rdParty", init: () => {} },
-}));
-
-import { GpuCard } from "../../../src/frontend/cards/GpuCard";
-
-const GPU_METRICS: GpuMetrics = {
-  source: "nvidia-smi",
-  gpus: [
-    {
-      index: 0,
-      uuid: "GPU-rtx",
-      name: "NVIDIA GeForce RTX 4090",
-      driverVersion: "550.54.14",
-      utilizationPercent: 37,
-      memoryUsedMiB: 8123,
-      memoryTotalMiB: 24564,
-      memoryPercent: 33.1,
-      temperatureCelsius: 61,
-      powerDrawWatts: 182.4,
-      powerLimitWatts: 450,
-      fanPercent: 45,
-    },
-    {
-      index: 1,
-      uuid: "GPU-h100",
-      name: "NVIDIA H100 80GB HBM3",
-      driverVersion: "550.54.14",
-      utilizationPercent: 0,
-      memoryUsedMiB: 1,
-      memoryTotalMiB: 81559,
-      memoryPercent: 0,
-      temperatureCelsius: 34,
-      powerDrawWatts: null,
-      powerLimitWatts: 700,
-      fanPercent: null,
-    },
-  ],
-  processes: [
-    {
-      gpuIndex: 0,
-      pid: 12345,
-      name: "/usr/bin/python3",
-      memoryUsedMiB: 7890,
-    },
-    { gpuIndex: 1, pid: 23456, name: "worker", memoryUsedMiB: null },
-  ],
-};
-
-function renderCard(gpu: GpuMetrics | undefined, gpuHistories = {}) {
-  const metrics = { gpu } as ServerMetrics;
-  render(<GpuCard metrics={metrics} gpuHistories={gpuHistories} />);
-}
-
-afterEach(cleanup);
-
-describe("GpuCard", () => {
-  it("explains that no NVIDIA GPU was found", () => {
-    renderCard({ source: "none", gpus: [], processes: [] });
-
-    expect(screen.getByText("hostMetrics.gpu.noDevice")).toBeInTheDocument();
-  });
-
-  it("treats metrics from a backend without gpu support as no GPU", () => {
-    renderCard(undefined);
-
-    expect(screen.getByText("hostMetrics.gpu.noDevice")).toBeInTheDocument();
-  });
-
-  it("shows the readings of every GPU", () => {
-    renderCard(GPU_METRICS);
-
-    expect(screen.getByText("NVIDIA GeForce RTX 4090")).toBeInTheDocument();
-    expect(screen.getByText("NVIDIA H100 80GB HBM3")).toBeInTheDocument();
-    expect(screen.getByText("7.9/24.0G")).toBeInTheDocument();
-    expect(screen.getByText("0.0/79.6G")).toBeInTheDocument();
-    expect(screen.getByText("61°C")).toBeInTheDocument();
-    expect(screen.getByText("182/450W")).toBeInTheDocument();
-    expect(screen.getByText("N/A/700W")).toBeInTheDocument();
-    expect(screen.getByText("45%")).toBeInTheDocument();
-    expect(screen.queryByText("hostMetrics.gpu.noDevice")).toBeNull();
-  });
-
-  it("draws each GPU's history as labelled utilization and VRAM trends", () => {
-    renderCard(
-      { ...GPU_METRICS, gpus: [GPU_METRICS.gpus[0]] },
-      { 0: { utilization: [10, 20], memory: [30, 31] } },
-    );
-
-    for (const name of [
-      "hostMetrics.gpu.utilization",
-      "hostMetrics.gpu.memory",
-    ]) {
-      const trend = screen.getByRole("figure", { name });
-      expect(trend.querySelector("svg")).not.toBeNull();
-    }
-  });
-
-  it("lists GPU processes by executable name with the GPU and VRAM they hold", () => {
-    renderCard(GPU_METRICS);
-
-    const python = screen.getByText("python3");
-    expect(python).toHaveAttribute("title", "/usr/bin/python3");
-    expect(screen.getByText("7.7G (GPU 0)")).toBeInTheDocument();
-    expect(screen.getByText("N/A (GPU 1)")).toBeInTheDocument();
-  });
-
-  it("says so when no process is using a GPU", () => {
-    renderCard({ ...GPU_METRICS, processes: [] });
-
-    expect(screen.getByText("hostMetrics.gpu.noProcesses")).toBeInTheDocument();
-  });
-});
diff --git a/plugins/host-metrics/tests/frontend/cards/gpu-history.test.ts b/plugins/host-metrics/tests/frontend/cards/gpu-history.test.ts
deleted file mode 100644
index 0df8dc22a..000000000
--- a/plugins/host-metrics/tests/frontend/cards/gpu-history.test.ts
+++ /dev/null
@@ -1,66 +0,0 @@
-import { describe, expect, it } from "vitest";
-import type { GpuDevice } from "../../../src/shared/stats-widgets.js";
-import { appendGpuHistories } from "../../../src/frontend/cards/gpu-history";
-
-function gpu(
-  index: number,
-  utilizationPercent: number | null,
-  memoryPercent: number | null,
-): GpuDevice {
-  return {
-    index,
-    uuid: `GPU-${index}`,
-    name: `GPU ${index}`,
-    driverVersion: "550.54.14",
-    utilizationPercent,
-    memoryUsedMiB: null,
-    memoryTotalMiB: null,
-    memoryPercent,
-    temperatureCelsius: null,
-    powerDrawWatts: null,
-    powerLimitWatts: null,
-    fanPercent: null,
-  };
-}
-
-describe("appendGpuHistories", () => {
-  it("records utilization and memory in a separate series per GPU", () => {
-    const first = appendGpuHistories({}, [gpu(0, 10, 20), gpu(1, 90, 5)], 30);
-    const second = appendGpuHistories(
-      first,
-      [gpu(0, 15, 25), gpu(1, 80, 6)],
-      30,
-    );
-
-    expect(second).toEqual({
-      0: { utilization: [10, 15], memory: [20, 25] },
-      1: { utilization: [90, 80], memory: [5, 6] },
-    });
-  });
-
-  it("keeps only the newest samples once the series is full", () => {
-    let histories = {};
-    for (const value of [1, 2, 3, 4]) {
-      histories = appendGpuHistories(histories, [gpu(0, value, value)], 3);
-    }
-
-    expect(histories).toEqual({
-      0: { utilization: [2, 3, 4], memory: [2, 3, 4] },
-    });
-  });
-
-  it("records an unavailable reading as zero", () => {
-    expect(appendGpuHistories({}, [gpu(0, null, null)], 30)).toEqual({
-      0: { utilization: [0], memory: [0] },
-    });
-  });
-
-  it("drops the series of a GPU that is no longer reported", () => {
-    const before = appendGpuHistories({}, [gpu(0, 10, 10), gpu(1, 20, 20)], 30);
-
-    expect(appendGpuHistories(before, [gpu(0, 11, 11)], 30)).toEqual({
-      0: { utilization: [10, 11], memory: [10, 11] },
-    });
-    expect(appendGpuHistories(before, undefined, 30)).toEqual({});
-  });
-});
diff --git a/plugins/host-metrics/tests/frontend/host-metrics-api.test.ts b/plugins/host-metrics/tests/frontend/host-metrics-api.test.ts
deleted file mode 100644
index a97efd0ac..000000000
--- a/plugins/host-metrics/tests/frontend/host-metrics-api.test.ts
+++ /dev/null
@@ -1,73 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import { createHostMetricsApi } from "../../src/frontend/host-metrics-api";
-
-function client() {
-  return {
-    get: vi.fn(),
-    post: vi.fn(),
-    put: vi.fn(),
-    patch: vi.fn(),
-    delete: vi.fn(),
-  };
-}
-
-const notFound = () =>
-  Object.assign(new Error("Not found"), { response: { status: 404 } });
-
-describe("host metrics api", () => {
-  it("answers null while a host has no sample", async () => {
-    const api = client();
-    api.get.mockRejectedValue(notFound());
-    await expect(createHostMetricsApi(api).getMetrics(7)).resolves.toBeNull();
-    expect(api.get).toHaveBeenCalledWith("/metrics/7");
-  });
-
-  it("reports a swept viewer instead of throwing", async () => {
-    const api = client();
-    api.post.mockRejectedValueOnce(notFound());
-    await expect(
-      createHostMetricsApi(api).heartbeat("expired-viewer"),
-    ).resolves.toBe(false);
-    expect(api.post).toHaveBeenCalledWith("/metrics/heartbeat", {
-      viewerSessionId: "expired-viewer",
-    });
-
-    api.post.mockResolvedValueOnce({ data: { success: true } });
-    await expect(createHostMetricsApi(api).heartbeat("live")).resolves.toBe(
-      true,
-    );
-  });
-
-  it("carries the server's connection logs on a failed start", async () => {
-    const api = client();
-    api.post.mockRejectedValue(
-      Object.assign(new Error("boom"), {
-        response: {
-          status: 500,
-          data: { error: "No route", connectionLogs: [{ message: "x" }] },
-        },
-      }),
-    );
-    await expect(
-      createHostMetricsApi(api).startMetrics(7),
-    ).rejects.toMatchObject({
-      message: "No route",
-      connectionLogs: [{ message: "x" }],
-    });
-  });
-
-  it("puts the host id between a manager and its action", async () => {
-    const api = client();
-    api.post.mockResolvedValue({ data: { success: true } });
-    await createHostMetricsApi(api).managerPost(
-      7,
-      "services",
-      { a: 1 },
-      "action",
-    );
-    expect(api.post).toHaveBeenCalledWith(
-      "/host-metrics/managers/services/7/action",
-      { a: 1 },
-    );
-  });
-});
diff --git a/plugins/host-metrics/tests/frontend/metrics-change-key.test.ts b/plugins/host-metrics/tests/frontend/metrics-change-key.test.ts
deleted file mode 100644
index 6fb71d92f..000000000
--- a/plugins/host-metrics/tests/frontend/metrics-change-key.test.ts
+++ /dev/null
@@ -1,69 +0,0 @@
-import { describe, expect, it } from "vitest";
-import type { ServerMetrics } from "../../src/shared/metrics.js";
-import type { GpuMetrics } from "../../src/shared/stats-widgets.js";
-import { metricsChangeKey } from "../../src/frontend/metrics-change-key";
-
-function poll(gpu: GpuMetrics): ServerMetrics {
-  return {
-    cpu: { percent: 3, cores: 8, load: [0.1, 0.1, 0.1] },
-    memory: { percent: 40, usedGiB: 12, totalGiB: 32 },
-    disk: { percent: 55 },
-    gpu,
-    lastChecked: "2026-09-18T00:00:00.000Z",
-  } as ServerMetrics;
-}
-
-function gpuAt(utilizationPercent: number, memoryPercent: number): GpuMetrics {
-  return {
-    source: "nvidia-smi",
-    gpus: [
-      {
-        index: 0,
-        uuid: "GPU-0",
-        name: "NVIDIA GeForce RTX 4090",
-        driverVersion: "550.54.14",
-        utilizationPercent,
-        memoryUsedMiB: 1000,
-        memoryTotalMiB: 24564,
-        memoryPercent,
-        temperatureCelsius: 50,
-        powerDrawWatts: 30,
-        powerLimitWatts: 450,
-        fanPercent: 30,
-      },
-    ],
-    processes: [],
-  };
-}
-
-describe("metricsChangeKey", () => {
-  it("changes when only GPU utilization moves", () => {
-    expect(metricsChangeKey(poll(gpuAt(0, 4)))).not.toBe(
-      metricsChangeKey(poll(gpuAt(95, 4))),
-    );
-  });
-
-  it("changes when only GPU memory moves", () => {
-    expect(metricsChangeKey(poll(gpuAt(0, 4)))).not.toBe(
-      metricsChangeKey(poll(gpuAt(0, 80))),
-    );
-  });
-
-  it("changes when a GPU process starts", () => {
-    const idle = gpuAt(0, 4);
-    const busy: GpuMetrics = {
-      ...idle,
-      processes: [
-        { gpuIndex: 0, pid: 4242, name: "python3", memoryUsedMiB: 900 },
-      ],
-    };
-
-    expect(metricsChangeKey(poll(idle))).not.toBe(metricsChangeKey(poll(busy)));
-  });
-
-  it("ignores GPU jitter inside the same 5% bucket", () => {
-    expect(metricsChangeKey(poll(gpuAt(41, 20)))).toBe(
-      metricsChangeKey(poll(gpuAt(42, 21))),
-    );
-  });
-});
diff --git a/plugins/host-metrics/tests/frontend/summary-store.test.ts b/plugins/host-metrics/tests/frontend/summary-store.test.ts
deleted file mode 100644
index 5a7d1a4e1..000000000
--- a/plugins/host-metrics/tests/frontend/summary-store.test.ts
+++ /dev/null
@@ -1,56 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { createMetricsSummaryStore } from "../../src/frontend/summary-store";
-import type { HostMetricsApi } from "../../src/frontend/host-metrics-api";
-
-afterEach(() => {
-  vi.useRealTimers();
-});
-
-function fakeApi() {
-  return {
-    registerViewer: vi.fn(async () => ({
-      success: true,
-      viewerSessionId: "v1",
-    })),
-    unregisterViewer: vi.fn(async () => undefined),
-    heartbeat: vi.fn(async () => true),
-    getMetrics: vi.fn(async () => ({ cpu: { percent: 5 } })),
-  };
-}
-
-const flush = () => new Promise((resolve) => setTimeout(resolve, 0));
-
-describe("metrics summary store", () => {
-  it("holds one viewer per host while anything watches it", async () => {
-    const api = fakeApi();
-    const store = createMetricsSummaryStore(api as unknown as HostMetricsApi);
-    const listener = vi.fn();
-
-    const first = store.watch(7, listener);
-    const second = store.watch(7, vi.fn());
-    await flush();
-
-    expect(api.registerViewer).toHaveBeenCalledOnce();
-    expect(store.get(7)).toEqual({ cpu: { percent: 5 } });
-    expect(listener).toHaveBeenCalled();
-
-    first();
-    expect(api.unregisterViewer).not.toHaveBeenCalled();
-    second();
-    expect(api.unregisterViewer).toHaveBeenCalledWith(7, "v1");
-    expect(store.get(7)).toBeNull();
-  });
-
-  it("registers again when the server dropped the viewer", async () => {
-    vi.useFakeTimers();
-    const api = fakeApi();
-    const store = createMetricsSummaryStore(api as unknown as HostMetricsApi);
-    store.watch(7, vi.fn());
-    await vi.advanceTimersByTimeAsync(0);
-
-    api.heartbeat.mockResolvedValueOnce(false);
-    await vi.advanceTimersByTimeAsync(30_000);
-    expect(api.registerViewer).toHaveBeenCalledTimes(2);
-    store.dispose();
-  });
-});
diff --git a/plugins/host-metrics/tests/frontend/temperature-preference.test.ts b/plugins/host-metrics/tests/frontend/temperature-preference.test.ts
deleted file mode 100644
index 7b0040660..000000000
--- a/plugins/host-metrics/tests/frontend/temperature-preference.test.ts
+++ /dev/null
@@ -1,28 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  selectTemperatureSensor,
-  temperaturePreferenceKey,
-} from "../../src/frontend/temperature-preference";
-
-const sensors = [
-  { label: "k10temp: Tctl", celsius: 55 },
-  { label: "nvme-pci-0100: Composite", celsius: 70 },
-];
-
-describe("temperature sensor preference", () => {
-  it("selects the configured sensor by its complete label", () => {
-    expect(selectTemperatureSensor(sensors, "k10temp: Tctl")).toEqual(
-      sensors[0],
-    );
-  });
-
-  it("falls back when a sensor disappears", () => {
-    expect(selectTemperatureSensor(sensors, "missing")).toBeNull();
-  });
-
-  it("scopes the preference to a host", () => {
-    expect(temperaturePreferenceKey(42)).toBe(
-      "termix-host-metrics:42:temperature-sensor",
-    );
-  });
-});
diff --git a/plugins/host-metrics/tsconfig.json b/plugins/host-metrics/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/host-metrics/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/host-metrics/vitest.config.ts b/plugins/host-metrics/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/host-metrics/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/ldap/CHANGELOG.md b/plugins/ldap/CHANGELOG.md
deleted file mode 100644
index eb8e5ac51..000000000
--- a/plugins/ldap/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Lets users sign in with a username and password checked against an LDAP or Active Directory server. Members of an admin group can be made admins.
diff --git a/plugins/ldap/README.md b/plugins/ldap/README.md
deleted file mode 100644
index aad1b98eb..000000000
--- a/plugins/ldap/README.md
+++ /dev/null
@@ -1,27 +0,0 @@
-# LDAP
-
-Sign in with a username and password checked against an LDAP or Active Directory server.
-
-## Features
-
-- Sign in with a username and password checked against an LDAP or Active Directory server.
-- Add more than one directory. Each gets its own option on the login screen.
-- Make members of an admin group Termix admins.
-
-## Settings
-
-### Admin
-
-- Directories: the LDAP servers, search bases and admin group for each directory.
-
-## Permissions
-
-- `ldap.manage`: Add, edit and remove LDAP directories. Only admins have it by default.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/ldap/locales/en.json b/plugins/ldap/locales/en.json
deleted file mode 100644
index 8dc7329e0..000000000
--- a/plugins/ldap/locales/en.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Sign in with LDAP",
-  "loginWithProvider": "Login with {{name}}",
-  "loading": "Loading...",
-  "requiredField": "This field is required",
-  "username": "LDAP Username",
-  "password": "LDAP Password",
-  "signIn": "Sign In",
-  "permissions": {
-    "manage": {
-      "title": "Manage LDAP directories",
-      "description": "Add, change and remove the LDAP directories people can sign in with."
-    }
-  },
-  "providers": {
-    "docsLink": "View docs",
-    "none": "No LDAP directories configured.",
-    "add": "Add Directory",
-    "edit": "Edit Directory",
-    "delete": "Delete Directory",
-    "deleteConfirm": "Delete this directory? Users who sign in with it will not be able to log in.",
-    "name": "Display Name",
-    "namePlaceholder": "Company directory",
-    "nameRequired": "A display name is required",
-    "enabled": "Enabled",
-    "enabledDesc": "Let users sign in with this directory.",
-    "dialogDesc": "Connect an LDAP or Active Directory server so users can sign in with it.",
-    "sectionGeneral": "General",
-    "sectionConnection": "Connection",
-    "sectionUsers": "User Lookup",
-    "sectionAccess": "Access",
-    "save": "Save Directory",
-    "saving": "Saving...",
-    "saved": "Saved",
-    "saveFailed": "Failed to save",
-    "deleted": "Deleted",
-    "deleteFailed": "Failed to delete",
-    "loadFailed": "Failed to load LDAP directories",
-    "cancel": "Cancel"
-  },
-  "fields": {
-    "host": "LDAP Host",
-    "port": "Port",
-    "useTls": "Use TLS (LDAPS)",
-    "useTlsDesc": "Connect over an encrypted LDAPS connection.",
-    "bindDn": "Bind DN",
-    "bindPassword": "Bind Password",
-    "secretKeep": "A password is saved. Leave this empty to keep it.",
-    "userSearchBase": "User Search Base",
-    "userSearchFilter": "User Search Filter",
-    "usernameAttr": "Username Attribute",
-    "displayNameAttr": "Display Name Attribute",
-    "groupSearchBase": "Group Search Base",
-    "adminGroup": "Admin Group",
-    "allowedUsers": "Allowed Users"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/af_ZA.json b/plugins/ldap/locales/translated/af_ZA.json
deleted file mode 100644
index eb4116e4f..000000000
--- a/plugins/ldap/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Teken aan met LDAP",
-  "loginWithProvider": "Teken aan met {{name}}",
-  "loading": "Laai tans...",
-  "requiredField": "Hierdie veld is verpligtend",
-  "username": "LDAP-gebruikersnaam",
-  "password": "LDAP-wagwoord",
-  "signIn": "Aanmeld",
-  "permissions": {
-    "manage": {
-      "title": "Bestuur LDAP-gidse",
-      "description": "Voeg die LDAP-gidse by, verander en verwyder dit waarmee mense kan aanmeld."
-    }
-  },
-  "providers": {
-    "docsLink": "Bekyk dokumente",
-    "none": "Geen LDAP-gidse gekonfigureer nie.",
-    "add": "Voeg gids by",
-    "edit": "Wysig gids",
-    "delete": "Vee gids uit",
-    "deleteConfirm": "Vee hierdie gids uit? Gebruikers wat daarmee aanmeld, sal nie kan aanmeld nie.",
-    "name": "Vertoonnaam",
-    "namePlaceholder": "Maatskappygids",
-    "nameRequired": "'n Vertoonnaam word vereis",
-    "enabled": "Geaktiveer",
-    "enabledDesc": "Laat gebruikers met hierdie gids aanmeld.",
-    "dialogDesc": "Koppel 'n LDAP- of Active Directory-bediener sodat gebruikers daarmee kan aanmeld.",
-    "sectionGeneral": "Algemeen",
-    "sectionConnection": "Verbinding",
-    "sectionUsers": "Gebruikersopsoek",
-    "sectionAccess": "Toegang",
-    "save": "Stoor gids",
-    "saving": "Stoor...",
-    "saved": "Gestoor",
-    "saveFailed": "Kon nie stoor nie",
-    "deleted": "Verwyder",
-    "deleteFailed": "Kon nie verwyder nie",
-    "loadFailed": "Kon nie LDAP-gidse laai nie",
-    "cancel": "Kanselleer"
-  },
-  "fields": {
-    "host": "LDAP-gasheer",
-    "port": "Hawe",
-    "useTls": "Gebruik TLS (LDAPS)",
-    "useTlsDesc": "Koppel via 'n geïnkripteerde LDAPS-verbinding.",
-    "bindDn": "Bind DN",
-    "bindPassword": "Bind Wagwoord",
-    "secretKeep": "'n Wagwoord is gestoor. Los dit leeg om dit te behou.",
-    "userSearchBase": "Gebruikersoekbasis",
-    "userSearchFilter": "Gebruikersoekfilter",
-    "usernameAttr": "Gebruikersnaam-kenmerk",
-    "displayNameAttr": "Vertoonnaam-kenmerk",
-    "groupSearchBase": "Groepsoekbasis",
-    "adminGroup": "Admingroep",
-    "allowedUsers": "Toegelate Gebruikers"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/ar_SA.json b/plugins/ldap/locales/translated/ar_SA.json
deleted file mode 100644
index 768396b7c..000000000
--- a/plugins/ldap/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "تسجيل الدخول باستخدام LDAP",
-  "loginWithProvider": "تسجيل الدخول باستخدام {{name}}",
-  "loading": "جارٍ التحميل...",
-  "requiredField": "هذا الحقل مطلوب",
-  "username": "اسم مستخدم LDAP",
-  "password": "كلمة مرور LDAP",
-  "signIn": "تسجيل الدخول",
-  "permissions": {
-    "manage": {
-      "title": "إدارة أدلة LDAP",
-      "description": "أضف، غيّر، واحذف أدلة LDAP التي يمكن للأشخاص تسجيل الدخول بها."
-    }
-  },
-  "providers": {
-    "docsLink": "عرض المستندات",
-    "none": "لم يتم تكوين أي أدلة LDAP.",
-    "add": "إضافة دليل",
-    "edit": "تحرير الدليل",
-    "delete": "حذف الدليل",
-    "deleteConfirm": "هل تريد حذف هذا المجلد؟ لن يتمكن المستخدمون الذين يسجلون الدخول من خلاله من تسجيل الدخول.",
-    "name": "اسم العرض",
-    "namePlaceholder": "دليل الشركات",
-    "nameRequired": "اسم العرض مطلوب",
-    "enabled": "مُمكّن",
-    "enabledDesc": "اسمح للمستخدمين بتسجيل الدخول باستخدام هذا الدليل.",
-    "dialogDesc": "قم بتوصيل خادم LDAP أو Active Directory حتى يتمكن المستخدمون من تسجيل الدخول من خلاله.",
-    "sectionGeneral": "عام",
-    "sectionConnection": "اتصال",
-    "sectionUsers": "البحث عن المستخدمين",
-    "sectionAccess": "وصول",
-    "save": "حفظ الدليل",
-    "saving": "جارٍ الحفظ...",
-    "saved": "محفوظ",
-    "saveFailed": "فشل في الحفظ",
-    "deleted": "محذوف",
-    "deleteFailed": "فشل في الحذف",
-    "loadFailed": "فشل تحميل أدلة LDAP",
-    "cancel": "إلغاء"
-  },
-  "fields": {
-    "host": "مضيف LDAP",
-    "port": "منفذ",
-    "useTls": "استخدام TLS (LDAPS)",
-    "useTlsDesc": "الاتصال عبر اتصال LDAPS مشفر.",
-    "bindDn": "اسم مميز للربط",
-    "bindPassword": "كلمة مرور الارتباط",
-    "secretKeep": "تم حفظ كلمة المرور. اترك هذا الحقل فارغًا للاحتفاظ بها.",
-    "userSearchBase": "قاعدة بحث المستخدمين",
-    "userSearchFilter": "مرشح بحث المستخدمين",
-    "usernameAttr": "سمة اسم المستخدم",
-    "displayNameAttr": "سمة اسم العرض",
-    "groupSearchBase": "قاعدة بحث المجموعات",
-    "adminGroup": "مجموعة المسؤولين",
-    "allowedUsers": "المستخدمون المسموح لهم"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/bg_BG.json b/plugins/ldap/locales/translated/bg_BG.json
deleted file mode 100644
index 167370073..000000000
--- a/plugins/ldap/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Влизане с LDAP",
-  "loginWithProvider": "Влезте с {{name}}",
-  "loading": "Зареждане...",
-  "requiredField": "Това поле е задължително",
-  "username": "Потребителско име на LDAP",
-  "password": "LDAP парола",
-  "signIn": "Вход",
-  "permissions": {
-    "manage": {
-      "title": "Управление на LDAP директории",
-      "description": "Добавяне, промяна и премахване на LDAP директории, с които хората могат да влизат."
-    }
-  },
-  "providers": {
-    "docsLink": "Преглед на документи",
-    "none": "Няма конфигурирани LDAP директории.",
-    "add": "Добавяне на директория",
-    "edit": "Редактиране на директория",
-    "delete": "Изтриване на директория",
-    "deleteConfirm": "Да се изтрие ли тази директория? Потребителите, които влязат с нея, няма да могат да влязат.",
-    "name": "Показвано име",
-    "namePlaceholder": "Фирмен указател",
-    "nameRequired": "Изисква се показвано име",
-    "enabled": "Активирано",
-    "enabledDesc": "Позволете на потребителите да влизат с тази директория.",
-    "dialogDesc": "Свържете LDAP или Active Directory сървър, за да могат потребителите да влизат с него.",
-    "sectionGeneral": "Общи",
-    "sectionConnection": "Връзка",
-    "sectionUsers": "Търсене на потребител",
-    "sectionAccess": "Достъп",
-    "save": "Запазване на директорията",
-    "saving": "Запазване...",
-    "saved": "Запазено",
-    "saveFailed": "Запазването не бе успешно",
-    "deleted": "Изтрито",
-    "deleteFailed": "Изтриването не бе успешно",
-    "loadFailed": "Неуспешно зареждане на LDAP директории",
-    "cancel": "Отказ"
-  },
-  "fields": {
-    "host": "LDAP хост",
-    "port": "Порт",
-    "useTls": "Използвайте TLS (LDAPS)",
-    "useTlsDesc": "Свържете се чрез криптирана LDAPS връзка.",
-    "bindDn": "Обвързване DN",
-    "bindPassword": "Свързване на парола",
-    "secretKeep": "Паролата е запазена. Оставете това празно, за да я запазите.",
-    "userSearchBase": "База за търсене на потребители",
-    "userSearchFilter": "Филтър за търсене на потребители",
-    "usernameAttr": "Атрибут на потребителското име",
-    "displayNameAttr": "Атрибут за показвано име",
-    "groupSearchBase": "База за групово търсене",
-    "adminGroup": "Административна група",
-    "allowedUsers": "Разрешени потребители"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/bn_BD.json b/plugins/ldap/locales/translated/bn_BD.json
deleted file mode 100644
index 61b619a23..000000000
--- a/plugins/ldap/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "LDAP দিয়ে সাইন ইন করুন",
-  "loginWithProvider": "{{name}} দিয়ে লগইন করুন",
-  "loading": "লোড হচ্ছে...",
-  "requiredField": "এই ক্ষেত্রটি আবশ্যক",
-  "username": "LDAP ব্যবহারকারীর নাম",
-  "password": "এলডিএপি পাসওয়ার্ড",
-  "signIn": "সাইন ইন করুন",
-  "permissions": {
-    "manage": {
-      "title": "LDAP ডিরেক্টরিগুলি পরিচালনা করুন",
-      "description": "ব্যবহারকারীরা যে LDAP ডিরেক্টরিগুলো দিয়ে সাইন ইন করতে পারবেন, সেগুলো যোগ করুন, পরিবর্তন করুন এবং মুছে ফেলুন।"
-    }
-  },
-  "providers": {
-    "docsLink": "নথি দেখুন",
-    "none": "কোনো LDAP ডিরেক্টরি কনফিগার করা নেই।",
-    "add": "ডিরেক্টরি যোগ করুন",
-    "edit": "ডিরেক্টরি সম্পাদনা করুন",
-    "delete": "ডিরেক্টরি মুছুন",
-    "deleteConfirm": "এই ডিরেক্টরিটি মুছে ফেললে, যারা এটি দিয়ে সাইন ইন করবেন তারা আর লগ ইন করতে পারবেন না।",
-    "name": "প্রদর্শনের নাম",
-    "namePlaceholder": "কোম্পানির ডিরেক্টরি",
-    "nameRequired": "একটি প্রদর্শনের নাম প্রয়োজন",
-    "enabled": "সক্ষম করা হয়েছে",
-    "enabledDesc": "ব্যবহারকারীদের এই ডিরেক্টরি দিয়ে সাইন ইন করতে দিন।",
-    "dialogDesc": "একটি LDAP বা Active Directory সার্ভার সংযুক্ত করুন যাতে ব্যবহারকারীরা এর মাধ্যমে সাইন ইন করতে পারেন।",
-    "sectionGeneral": "সাধারণ",
-    "sectionConnection": "সংযোগ",
-    "sectionUsers": "ব্যবহারকারী অনুসন্ধান",
-    "sectionAccess": "অ্যাক্সেস",
-    "save": "ডিরেক্টরি সংরক্ষণ করুন",
-    "saving": "সঞ্চয়...",
-    "saved": "সংরক্ষিত",
-    "saveFailed": "সংরক্ষণ করতে ব্যর্থ হয়েছে",
-    "deleted": "মুছে ফেলা হয়েছে",
-    "deleteFailed": "মুছে ফেলতে ব্যর্থ হয়েছে",
-    "loadFailed": "LDAP ডিরেক্টরি লোড করতে ব্যর্থ হয়েছে",
-    "cancel": "বাতিল করুন"
-  },
-  "fields": {
-    "host": "এলডিএপি হোস্ট",
-    "port": "বন্দর",
-    "useTls": "TLS (LDAPS) ব্যবহার করুন",
-    "useTlsDesc": "একটি এনক্রিপ্টেড LDAPS সংযোগের মাধ্যমে সংযুক্ত হন।",
-    "bindDn": "ডিএনকে আবদ্ধ করুন",
-    "bindPassword": "পাসওয়ার্ড সংযুক্ত করুন",
-    "secretKeep": "একটি পাসওয়ার্ড সংরক্ষিত হয়েছে। এটি রাখতে চাইলে এই স্থানটি খালি রাখুন।",
-    "userSearchBase": "ব্যবহারকারী অনুসন্ধান ভিত্তি",
-    "userSearchFilter": "ব্যবহারকারী অনুসন্ধান ফিল্টার",
-    "usernameAttr": "ব্যবহারকারীর নাম অ্যাট্রিবিউট",
-    "displayNameAttr": "ডিসপ্লে নেম অ্যাট্রিবিউট",
-    "groupSearchBase": "গ্রুপ অনুসন্ধান ভিত্তি",
-    "adminGroup": "অ্যাডমিন গ্রুপ",
-    "allowedUsers": "অনুমোদিত ব্যবহারকারী"
-  },
-  "plugin": {
-    "name": "এলডিএপি"
-  }
-}
diff --git a/plugins/ldap/locales/translated/ca_ES.json b/plugins/ldap/locales/translated/ca_ES.json
deleted file mode 100644
index 89a2bc57b..000000000
--- a/plugins/ldap/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Inicia la sessió amb LDAP",
-  "loginWithProvider": "Inicia la sessió amb {{name}}",
-  "loading": "S'està carregant...",
-  "requiredField": "Aquest camp és obligatori",
-  "username": "Nom d'usuari LDAP",
-  "password": "Contrasenya LDAP",
-  "signIn": "Inicia la sessió",
-  "permissions": {
-    "manage": {
-      "title": "Gestiona els directoris LDAP",
-      "description": "Afegiu, canvieu i elimineu els directoris LDAP amb què les persones poden iniciar sessió."
-    }
-  },
-  "providers": {
-    "docsLink": "Veure documents",
-    "none": "No hi ha cap directori LDAP configurat.",
-    "add": "Afegeix un directori",
-    "edit": "Edita el directori",
-    "delete": "Suprimeix el directori",
-    "deleteConfirm": "Voleu suprimir aquest directori? Els usuaris que hi iniciïn la sessió no podran iniciar la sessió.",
-    "name": "Nom de visualització",
-    "namePlaceholder": "Directori d'empreses",
-    "nameRequired": "Cal un nom de visualització",
-    "enabled": "Activat",
-    "enabledDesc": "Permet que els usuaris iniciïn la sessió amb aquest directori.",
-    "dialogDesc": "Connecteu un servidor LDAP o Active Directory perquè els usuaris puguin iniciar la sessió.",
-    "sectionGeneral": "General",
-    "sectionConnection": "Connexió",
-    "sectionUsers": "Cerca d'usuaris",
-    "sectionAccess": "Accés",
-    "save": "Desa el directori",
-    "saving": "Desant...",
-    "saved": "Desat",
-    "saveFailed": "No s'ha pogut desar",
-    "deleted": "Suprimit",
-    "deleteFailed": "No s'ha pogut suprimir",
-    "loadFailed": "No s'han pogut carregar els directoris LDAP",
-    "cancel": "Cancel·la"
-  },
-  "fields": {
-    "host": "Amfitrió LDAP",
-    "port": "Port",
-    "useTls": "Utilitza TLS (LDAPS)",
-    "useTlsDesc": "Connecteu-vos a través d'una connexió LDAPS xifrada.",
-    "bindDn": "Vinculació de nom de domini",
-    "bindPassword": "Contrasenya de vinculació",
-    "secretKeep": "S'ha desat una contrasenya. Deixeu-ho en blanc per conservar-la.",
-    "userSearchBase": "Base de cerca d'usuaris",
-    "userSearchFilter": "Filtre de cerca d'usuaris",
-    "usernameAttr": "Atribut de nom d'usuari",
-    "displayNameAttr": "Atribut del nom de visualització",
-    "groupSearchBase": "Base de cerca de grups",
-    "adminGroup": "Grup d'administradors",
-    "allowedUsers": "Usuaris permesos"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/cs_CZ.json b/plugins/ldap/locales/translated/cs_CZ.json
deleted file mode 100644
index 99a1476f1..000000000
--- a/plugins/ldap/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Přihlášení pomocí LDAP",
-  "loginWithProvider": "Přihlaste se pomocí {{name}}",
-  "loading": "Načítání...",
-  "requiredField": "Toto pole je povinné",
-  "username": "Uživatelské jméno LDAP",
-  "password": "Heslo LDAP",
-  "signIn": "Přihlásit se",
-  "permissions": {
-    "manage": {
-      "title": "Správa adresářů LDAP",
-      "description": "Přidávat, měnit a odebírat adresáře LDAP, pomocí kterých se lidé mohou přihlašovat."
-    }
-  },
-  "providers": {
-    "docsLink": "Zobrazit dokumenty",
-    "none": "Nejsou nakonfigurovány žádné adresáře LDAP.",
-    "add": "Přidat adresář",
-    "edit": "Upravit adresář",
-    "delete": "Smazat adresář",
-    "deleteConfirm": "Smazat tento adresář? Uživatelé, kteří se pomocí něj přihlásí, se nebudou moci přihlásit.",
-    "name": "Zobrazovaný název",
-    "namePlaceholder": "Adresář firem",
-    "nameRequired": "Je vyžadováno zobrazované jméno",
-    "enabled": "Povoleno",
-    "enabledDesc": "Umožnit uživatelům přihlašovat se pomocí tohoto adresáře.",
-    "dialogDesc": "Připojte server LDAP nebo Active Directory, aby se přes něj uživatelé mohli přihlašovat.",
-    "sectionGeneral": "Obecné",
-    "sectionConnection": "Spojení",
-    "sectionUsers": "Vyhledávání uživatelů",
-    "sectionAccess": "Přístup",
-    "save": "Uložit adresář",
-    "saving": "Ukládání…",
-    "saved": "Uloženo",
-    "saveFailed": "Uložení se nezdařilo",
-    "deleted": "Smazáno",
-    "deleteFailed": "Smazání se nezdařilo",
-    "loadFailed": "Nepodařilo se načíst adresáře LDAP",
-    "cancel": "Zrušit"
-  },
-  "fields": {
-    "host": "Hostitel LDAP",
-    "port": "Port",
-    "useTls": "Používejte TLS (LDAPS)",
-    "useTlsDesc": "Připojte se přes šifrované připojení LDAPS.",
-    "bindDn": "Vázat DN",
-    "bindPassword": "Vázat heslo",
-    "secretKeep": "Heslo je uloženo. Pro jeho zachování nechte toto pole prázdné.",
-    "userSearchBase": "Vyhledávací báze uživatelů",
-    "userSearchFilter": "Filtr vyhledávání uživatelů",
-    "usernameAttr": "Atribut uživatelského jména",
-    "displayNameAttr": "Atribut zobrazovaného názvu",
-    "groupSearchBase": "Základna pro vyhledávání skupin",
-    "adminGroup": "Skupina administrátorů",
-    "allowedUsers": "Povolení uživatelé"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/da_DK.json b/plugins/ldap/locales/translated/da_DK.json
deleted file mode 100644
index a401bb6ff..000000000
--- a/plugins/ldap/locales/translated/da_DK.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Log ind med LDAP",
-  "loginWithProvider": "Log ind med {{name}}",
-  "loading": "Indlæser...",
-  "requiredField": "Dette felt er påkrævet",
-  "username": "LDAP-brugernavn",
-  "password": "LDAP-adgangskode",
-  "signIn": "Log ind",
-  "permissions": {
-    "manage": {
-      "title": "Administrer LDAP-mapper",
-      "description": "Tilføj, rediger og fjern de LDAP-mapper, som folk kan logge ind med."
-    }
-  },
-  "providers": {
-    "docsLink": "Se dokumenter",
-    "none": "Ingen LDAP-mapper konfigureret.",
-    "add": "Tilføj mappe",
-    "edit": "Rediger mappe",
-    "delete": "Slet mappe",
-    "deleteConfirm": "Vil du slette denne mappe? Brugere, der logger ind med den, vil ikke kunne logge ind.",
-    "name": "Vist navn",
-    "namePlaceholder": "Firmaregister",
-    "nameRequired": "Et visningsnavn er påkrævet",
-    "enabled": "Aktiveret",
-    "enabledDesc": "Lad brugerne logge ind med denne mappe.",
-    "dialogDesc": "Tilslut en LDAP- eller Active Directory-server, så brugerne kan logge ind med den.",
-    "sectionGeneral": "Generel",
-    "sectionConnection": "Forbindelse",
-    "sectionUsers": "Brugeropslag",
-    "sectionAccess": "Adgang",
-    "save": "Gem mappe",
-    "saving": "Gemmer...",
-    "saved": "Gemt",
-    "saveFailed": "Kunne ikke gemme",
-    "deleted": "Slettet",
-    "deleteFailed": "Kunne ikke slette",
-    "loadFailed": "Kunne ikke indlæse LDAP-mapper",
-    "cancel": "Ophæve"
-  },
-  "fields": {
-    "host": "LDAP-vært",
-    "port": "Havn",
-    "useTls": "Brug TLS (LDAPS)",
-    "useTlsDesc": "Opret forbindelse via en krypteret LDAPS-forbindelse.",
-    "bindDn": "Bind DN",
-    "bindPassword": "Bind adgangskode",
-    "secretKeep": "En adgangskode er gemt. Lad dette felt være tomt for at beholde den.",
-    "userSearchBase": "Brugersøgningsbase",
-    "userSearchFilter": "Brugersøgningsfilter",
-    "usernameAttr": "Brugernavnsattribut",
-    "displayNameAttr": "Visningsnavnattribut",
-    "groupSearchBase": "Gruppesøgningsbase",
-    "adminGroup": "Admingruppe",
-    "allowedUsers": "Tilladte brugere"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/de_DE.json b/plugins/ldap/locales/translated/de_DE.json
deleted file mode 100644
index afacd170e..000000000
--- a/plugins/ldap/locales/translated/de_DE.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Anmeldung mit LDAP",
-  "loginWithProvider": "Anmeldung mit {{name}}",
-  "loading": "Laden...",
-  "requiredField": "Dieses Feld ist erforderlich",
-  "username": "LDAP-Benutzername",
-  "password": "LDAP-Passwort",
-  "signIn": "Anmelden",
-  "permissions": {
-    "manage": {
-      "title": "LDAP-Verzeichnisse verwalten",
-      "description": "LDAP-Verzeichnisse hinzufügen, ändern und entfernen, mit denen sich Benutzer anmelden können."
-    }
-  },
-  "providers": {
-    "docsLink": "Dokumentation ansehen",
-    "none": "Es sind keine LDAP-Verzeichnisse konfiguriert.",
-    "add": "Verzeichnis hinzufügen",
-    "edit": "Verzeichnis bearbeiten",
-    "delete": "Verzeichnis löschen",
-    "deleteConfirm": "Soll dieses Verzeichnis gelöscht werden? Benutzer, die sich damit anmelden, können sich dann nicht mehr anmelden.",
-    "name": "Anzeigename",
-    "namePlaceholder": "Firmenverzeichnis",
-    "nameRequired": "Ein Anzeigename ist erforderlich.",
-    "enabled": "Aktiviert",
-    "enabledDesc": "Ermöglichen Sie Benutzern, sich mit diesem Verzeichnis anzumelden.",
-    "dialogDesc": "Verbinden Sie einen LDAP- oder Active Directory-Server, damit sich Benutzer damit anmelden können.",
-    "sectionGeneral": "Allgemein",
-    "sectionConnection": "Verbindung",
-    "sectionUsers": "Benutzersuche",
-    "sectionAccess": "Zugang",
-    "save": "Speicherverzeichnis",
-    "saving": "Wird gespeichert …",
-    "saved": "Gespeichert",
-    "saveFailed": "Speichern fehlgeschlagen",
-    "deleted": "Gelöscht",
-    "deleteFailed": "Löschen fehlgeschlagen",
-    "loadFailed": "LDAP-Verzeichnisse konnten nicht geladen werden",
-    "cancel": "Abbrechen"
-  },
-  "fields": {
-    "host": "LDAP-Host",
-    "port": "Port",
-    "useTls": "TLS verwenden (LDAPS)",
-    "useTlsDesc": "Stellen Sie die Verbindung über eine verschlüsselte LDAPS-Verbindung her.",
-    "bindDn": "Bind-DN",
-    "bindPassword": "Bind-Passwort",
-    "secretKeep": "Ein Passwort wurde gespeichert. Lassen Sie dieses Feld leer, um es zu behalten.",
-    "userSearchBase": "Benutzer-Suchbasis",
-    "userSearchFilter": "Benutzersuchfilter",
-    "usernameAttr": "Benutzernamen-Attribut",
-    "displayNameAttr": "Anzeigename-Attribut",
-    "groupSearchBase": "Gruppen-Suchbasis",
-    "adminGroup": "Admin-Gruppe",
-    "allowedUsers": "Zugelassene Benutzer"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/el_GR.json b/plugins/ldap/locales/translated/el_GR.json
deleted file mode 100644
index f2c027544..000000000
--- a/plugins/ldap/locales/translated/el_GR.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Σύνδεση με LDAP",
-  "loginWithProvider": "Σύνδεση με {{name}}",
-  "loading": "Φόρτωση...",
-  "requiredField": "Αυτό το πεδίο είναι υποχρεωτικό",
-  "username": "Όνομα χρήστη LDAP",
-  "password": "Κωδικός πρόσβασης LDAP",
-  "signIn": "Σύνδεση",
-  "permissions": {
-    "manage": {
-      "title": "Διαχείριση καταλόγων LDAP",
-      "description": "Προσθήκη, αλλαγή και κατάργηση των καταλόγων LDAP με τους οποίους μπορούν να συνδεθούν οι χρήστες."
-    }
-  },
-  "providers": {
-    "docsLink": "Προβολή εγγράφων",
-    "none": "Δεν έχουν ρυθμιστεί κατάλογοι LDAP.",
-    "add": "Προσθήκη καταλόγου",
-    "edit": "Επεξεργασία καταλόγου",
-    "delete": "Διαγραφή καταλόγου",
-    "deleteConfirm": "Διαγραφή αυτού του καταλόγου; Οι χρήστες που συνδέονται με αυτόν δεν θα μπορούν να συνδεθούν.",
-    "name": "Εμφανιζόμενο όνομα",
-    "namePlaceholder": "Κατάλογος εταιρείας",
-    "nameRequired": "Απαιτείται εμφανιζόμενο όνομα",
-    "enabled": "Ενεργοποιημένο",
-    "enabledDesc": "Επιτρέψτε στους χρήστες να συνδέονται με αυτόν τον κατάλογο.",
-    "dialogDesc": "Συνδέστε έναν διακομιστή LDAP ή Active Directory, ώστε οι χρήστες να μπορούν να συνδέονται με αυτόν.",
-    "sectionGeneral": "Γενικός",
-    "sectionConnection": "Σύνδεση",
-    "sectionUsers": "Αναζήτηση χρήστη",
-    "sectionAccess": "Πρόσβαση",
-    "save": "Αποθήκευση καταλόγου",
-    "saving": "Οικονομία...",
-    "saved": "Αποθηκεύτηκε",
-    "saveFailed": "Η αποθήκευση απέτυχε",
-    "deleted": "Διαγράφηκε",
-    "deleteFailed": "Η διαγραφή απέτυχε",
-    "loadFailed": "Αποτυχία φόρτωσης καταλόγων LDAP",
-    "cancel": "Ματαίωση"
-  },
-  "fields": {
-    "host": "Κεντρικός υπολογιστής LDAP",
-    "port": "Λιμάνι",
-    "useTls": "Χρήση TLS (LDAPS)",
-    "useTlsDesc": "Σύνδεση μέσω κρυπτογραφημένης σύνδεσης LDAPS.",
-    "bindDn": "Σύνδεση DN",
-    "bindPassword": "Σύνδεση κωδικού πρόσβασης",
-    "secretKeep": "Ένας κωδικός πρόσβασης αποθηκεύτηκε. Αφήστε το κενό για να τον διατηρήσετε.",
-    "userSearchBase": "Βάση αναζήτησης χρηστών",
-    "userSearchFilter": "Φίλτρο αναζήτησης χρήστη",
-    "usernameAttr": "Χαρακτηριστικό ονόματος χρήστη",
-    "displayNameAttr": "Χαρακτηριστικό ονόματος εμφάνισης",
-    "groupSearchBase": "Βάση αναζήτησης ομάδας",
-    "adminGroup": "Ομάδα Διαχειριστών",
-    "allowedUsers": "Επιτρεπόμενοι χρήστες"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/es_ES.json b/plugins/ldap/locales/translated/es_ES.json
deleted file mode 100644
index e6982026a..000000000
--- a/plugins/ldap/locales/translated/es_ES.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Iniciar sesión con LDAP",
-  "loginWithProvider": "Iniciar sesión con {{name}}",
-  "loading": "Cargando...",
-  "requiredField": "Este campo es obligatorio",
-  "username": "Nombre de usuario LDAP",
-  "password": "Contraseña LDAP",
-  "signIn": "Iniciar sesión",
-  "permissions": {
-    "manage": {
-      "title": "Administrar directorios LDAP",
-      "description": "Agregar, modificar y eliminar los directorios LDAP con los que los usuarios pueden iniciar sesión."
-    }
-  },
-  "providers": {
-    "docsLink": "Ver documentación",
-    "none": "No hay directorios LDAP configurados.",
-    "add": "Agregar directorio",
-    "edit": "Editar directorio",
-    "delete": "Eliminar directorio",
-    "deleteConfirm": "¿Eliminar este directorio? Los usuarios que inicien sesión con él no podrán acceder.",
-    "name": "Nombre para mostrar",
-    "namePlaceholder": "Directorio de empresas",
-    "nameRequired": "Se requiere un nombre para mostrar.",
-    "enabled": "Activado",
-    "enabledDesc": "Permitir que los usuarios inicien sesión con este directorio.",
-    "dialogDesc": "Conecta un servidor LDAP o Active Directory para que los usuarios puedan iniciar sesión con él.",
-    "sectionGeneral": "General",
-    "sectionConnection": "Conexión",
-    "sectionUsers": "Búsqueda de usuarios",
-    "sectionAccess": "Acceso",
-    "save": "Guardar directorio",
-    "saving": "Guardando...",
-    "saved": "Guardado",
-    "saveFailed": "Error al guardar",
-    "deleted": "Eliminado",
-    "deleteFailed": "Error al eliminar",
-    "loadFailed": "No se pudieron cargar los directorios LDAP.",
-    "cancel": "Cancelar"
-  },
-  "fields": {
-    "host": "Host LDAP",
-    "port": "Puerto",
-    "useTls": "Usar TLS (LDAPS)",
-    "useTlsDesc": "Conéctese a través de una conexión LDAPS cifrada.",
-    "bindDn": "DN de enlace",
-    "bindPassword": "Contraseña de enlace",
-    "secretKeep": "Se ha guardado una contraseña. Déjelo en blanco para conservarla.",
-    "userSearchBase": "Base de búsqueda de usuarios",
-    "userSearchFilter": "Filtro de búsqueda de usuarios",
-    "usernameAttr": "Atributo de nombre de usuario",
-    "displayNameAttr": "Atributo de nombre visible",
-    "groupSearchBase": "Base de búsqueda de grupos",
-    "adminGroup": "Grupo de administradores",
-    "allowedUsers": "Usuarios permitidos"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/fi_FI.json b/plugins/ldap/locales/translated/fi_FI.json
deleted file mode 100644
index 7371b87b1..000000000
--- a/plugins/ldap/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Kirjaudu sisään LDAP-tunnuksella",
-  "loginWithProvider": "Kirjaudu sisään tunnuksella {{name}}",
-  "loading": "Ladataan...",
-  "requiredField": "Tämä kenttä on pakollinen",
-  "username": "LDAP-käyttäjätunnus",
-  "password": "LDAP-salasana",
-  "signIn": "Kirjaudu sisään",
-  "permissions": {
-    "manage": {
-      "title": "Hallitse LDAP-hakemistoja",
-      "description": "Lisää, muuta ja poista LDAP-hakemistoja, joilla käyttäjät voivat kirjautua sisään."
-    }
-  },
-  "providers": {
-    "docsLink": "Näytä dokumentit",
-    "none": "LDAP-hakemistoja ei ole määritetty.",
-    "add": "Lisää hakemisto",
-    "edit": "Muokkaa hakemistoa",
-    "delete": "Poista hakemisto",
-    "deleteConfirm": "Poistetaanko tämä hakemisto? Käyttäjät, jotka kirjautuvat sisään sillä, eivät voi kirjautua sisään.",
-    "name": "Näyttönimi",
-    "namePlaceholder": "Yrityshakemisto",
-    "nameRequired": "Näyttönimi on pakollinen",
-    "enabled": "Käytössä",
-    "enabledDesc": "Salli käyttäjien kirjautua sisään tällä hakemistolla.",
-    "dialogDesc": "Yhdistä LDAP- tai Active Directory -palvelin, jotta käyttäjät voivat kirjautua sisään sillä.",
-    "sectionGeneral": "Yleistä",
-    "sectionConnection": "Yhteys",
-    "sectionUsers": "Käyttäjähaku",
-    "sectionAccess": "Pääsy",
-    "save": "Tallenna hakemisto",
-    "saving": "Tallennetaan...",
-    "saved": "Tallennettu",
-    "saveFailed": "Tallennus epäonnistui",
-    "deleted": "Poistettu",
-    "deleteFailed": "Poistaminen epäonnistui",
-    "loadFailed": "LDAP-hakemistojen lataaminen epäonnistui",
-    "cancel": "Peruuttaa"
-  },
-  "fields": {
-    "host": "LDAP-isäntä",
-    "port": "Portti",
-    "useTls": "Käytä TLS:ää (LDAPS)",
-    "useTlsDesc": "Yhdistä salatun LDAPS-yhteyden kautta.",
-    "bindDn": "Sido DN",
-    "bindPassword": "Sido salasana",
-    "secretKeep": "Salasana on tallennettu. Jätä tämä tyhjäksi, jos haluat säilyttää sen.",
-    "userSearchBase": "Käyttäjähakupohja",
-    "userSearchFilter": "Käyttäjän hakusuodatin",
-    "usernameAttr": "Käyttäjätunnusattribuutti",
-    "displayNameAttr": "Näyttönimen attribuutti",
-    "groupSearchBase": "Ryhmän hakukanta",
-    "adminGroup": "Hallintaryhmä",
-    "allowedUsers": "Sallitut käyttäjät"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/fr_FR.json b/plugins/ldap/locales/translated/fr_FR.json
deleted file mode 100644
index eafab61f0..000000000
--- a/plugins/ldap/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Connexion via LDAP",
-  "loginWithProvider": "Se connecter avec {{name}}",
-  "loading": "Chargement...",
-  "requiredField": "Ce champ est obligatoire",
-  "username": "Nom d'utilisateur LDAP",
-  "password": "Mot de passe LDAP",
-  "signIn": "Se connecter",
-  "permissions": {
-    "manage": {
-      "title": "Gérer les annuaires LDAP",
-      "description": "Ajouter, modifier et supprimer les annuaires LDAP permettant aux utilisateurs de se connecter."
-    }
-  },
-  "providers": {
-    "docsLink": "Documentation",
-    "none": "Aucun annuaire LDAP configuré.",
-    "add": "Ajouter un répertoire",
-    "edit": "Modifier le répertoire",
-    "delete": "Supprimer le répertoire",
-    "deleteConfirm": "Supprimer ce répertoire ? Les utilisateurs qui s’y connectent ne pourront plus accéder à leur compte.",
-    "name": "Nom affiché",
-    "namePlaceholder": "Annuaire des entreprises",
-    "nameRequired": "Un nom d'affichage est requis.",
-    "enabled": "Activé",
-    "enabledDesc": "Autoriser les utilisateurs à se connecter avec ce répertoire.",
-    "dialogDesc": "Connectez un serveur LDAP ou Active Directory pour que les utilisateurs puissent s'y connecter.",
-    "sectionGeneral": "Général",
-    "sectionConnection": "Connexion",
-    "sectionUsers": "Recherche d'utilisateur",
-    "sectionAccess": "Accéder",
-    "save": "Répertoire de sauvegarde",
-    "saving": "Enregistrement…",
-    "saved": "Enregistré",
-    "saveFailed": "Échec de l'enregistrement",
-    "deleted": "Supprimé",
-    "deleteFailed": "Échec de la suppression",
-    "loadFailed": "Échec du chargement des répertoires LDAP",
-    "cancel": "Annuler"
-  },
-  "fields": {
-    "host": "Hôte LDAP",
-    "port": "Port",
-    "useTls": "Utiliser TLS (LDAPS)",
-    "useTlsDesc": "Se connecter via une connexion LDAPS chiffrée.",
-    "bindDn": "DN de liaison",
-    "bindPassword": "Mot de passe de liaison",
-    "secretKeep": "Un mot de passe est enregistré. Laissez ce champ vide pour le conserver.",
-    "userSearchBase": "Base de recherche utilisateur",
-    "userSearchFilter": "Filtre de recherche utilisateur",
-    "usernameAttr": "Attribut de nom d’utilisateur",
-    "displayNameAttr": "Attribut de nom d’affichage",
-    "groupSearchBase": "Base de recherche de groupe",
-    "adminGroup": "Groupe administrateur",
-    "allowedUsers": "Utilisateurs autorisés"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/he_IL.json b/plugins/ldap/locales/translated/he_IL.json
deleted file mode 100644
index 73cc187b2..000000000
--- a/plugins/ldap/locales/translated/he_IL.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "כניסה עם LDAP",
-  "loginWithProvider": "התחברות באמצעות {{name}}",
-  "loading": "טְעִינָה...",
-  "requiredField": "שדה זה נדרש",
-  "username": "שם משתמש LDAP",
-  "password": "סיסמת LDAP",
-  "signIn": "כניסה",
-  "permissions": {
-    "manage": {
-      "title": "ניהול ספריות LDAP",
-      "description": "הוספה, שינוי והסרה של ספריות LDAP שדרכן אנשים יכולים להתחבר."
-    }
-  },
-  "providers": {
-    "docsLink": "הצג מסמכים",
-    "none": "לא הוגדרו ספריות LDAP.",
-    "add": "הוסף ספרייה",
-    "edit": "עריכת ספרייה",
-    "delete": "מחיקת ספרייה",
-    "deleteConfirm": "למחוק את הספרייה הזו? משתמשים שיתחברו דרכה לא יוכלו להתחבר.",
-    "name": "שם תצוגה",
-    "namePlaceholder": "מדריך חברות",
-    "nameRequired": "נדרש שם תצוגה",
-    "enabled": "מופעל",
-    "enabledDesc": "אפשר למשתמשים להתחבר באמצעות ספרייה זו.",
-    "dialogDesc": "חבר שרת LDAP או Active Directory כדי שמשתמשים יוכלו להתחבר דרכו.",
-    "sectionGeneral": "כְּלָלִי",
-    "sectionConnection": "קֶשֶׁר",
-    "sectionUsers": "חיפוש משתמשים",
-    "sectionAccess": "גִישָׁה",
-    "save": "שמור ספרייה",
-    "saving": "חִסָכוֹן...",
-    "saved": "נשמר",
-    "saveFailed": "השמירה נכשלה",
-    "deleted": "נמחק",
-    "deleteFailed": "המחיקה נכשלה",
-    "loadFailed": "טעינת ספריות LDAP נכשלה",
-    "cancel": "לְבַטֵל"
-  },
-  "fields": {
-    "host": "מארח LDAP",
-    "port": "נָמָל",
-    "useTls": "השתמש ב-TLS (LDAPS)",
-    "useTlsDesc": "התחבר דרך חיבור LDAPS מוצפן.",
-    "bindDn": "קשר DN",
-    "bindPassword": "קשירת סיסמה",
-    "secretKeep": "סיסמה נשמרה. השאר שדה זה ריק כדי לשמור אותה.",
-    "userSearchBase": "בסיס חיפוש משתמשים",
-    "userSearchFilter": "מסנן חיפוש משתמשים",
-    "usernameAttr": "מאפיין שם משתמש",
-    "displayNameAttr": "מאפיין שם תצוגה",
-    "groupSearchBase": "בסיס חיפוש קבוצתי",
-    "adminGroup": "קבוצת ניהול",
-    "allowedUsers": "משתמשים מורשים"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/hi_IN.json b/plugins/ldap/locales/translated/hi_IN.json
deleted file mode 100644
index f91ff01ab..000000000
--- a/plugins/ldap/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "LDAP के साथ साइन इन करें",
-  "loginWithProvider": "{{name}} से लॉगिन करें",
-  "loading": "लोड हो रहा है...",
-  "requiredField": "यह फ़ील्ड आवश्यक है",
-  "username": "LDAP उपयोगकर्ता नाम",
-  "password": "LDAP पासवर्ड",
-  "signIn": "साइन इन करें",
-  "permissions": {
-    "manage": {
-      "title": "LDAP निर्देशिकाओं का प्रबंधन करें",
-      "description": "उन LDAP डायरेक्टरी को जोड़ें, बदलें और हटाएं जिनका उपयोग लोग साइन इन करने के लिए कर सकते हैं।"
-    }
-  },
-  "providers": {
-    "docsLink": "दस्तावेज़ देखें",
-    "none": "कोई LDAP डायरेक्टरी कॉन्फ़िगर नहीं की गई है।",
-    "add": "निर्देशिका जोड़ें",
-    "edit": "निर्देशिका संपादित करें",
-    "delete": "निर्देशिका हटाएं",
-    "deleteConfirm": "क्या इस डायरेक्टरी को हटा दें? इसके माध्यम से साइन इन करने वाले उपयोगकर्ता लॉग इन नहीं कर पाएंगे।",
-    "name": "प्रदर्शन नाम",
-    "namePlaceholder": "कंपनी निर्देशिका",
-    "nameRequired": "एक डिस्प्ले नाम आवश्यक है",
-    "enabled": "सक्षम",
-    "enabledDesc": "उपयोगकर्ताओं को इस निर्देशिका का उपयोग करके साइन इन करने दें।",
-    "dialogDesc": "एक LDAP या Active Directory सर्वर को कनेक्ट करें ताकि उपयोगकर्ता इसके माध्यम से साइन इन कर सकें।",
-    "sectionGeneral": "सामान्य",
-    "sectionConnection": "कनेक्शन",
-    "sectionUsers": "उपयोगकर्ता खोज",
-    "sectionAccess": "पहुँच",
-    "save": "निर्देशिका सहेजें",
-    "saving": "सहेजा जा रहा है...",
-    "saved": "सहेजा गया",
-    "saveFailed": "सहेजने में विफल",
-    "deleted": "हटाया गया",
-    "deleteFailed": "हटाने में विफल",
-    "loadFailed": "LDAP निर्देशिकाओं को लोड करने में विफल",
-    "cancel": "रद्द करें"
-  },
-  "fields": {
-    "host": "LDAP होस्ट",
-    "port": "पोर्ट",
-    "useTls": "TLS (LDAPS) का उपयोग करें",
-    "useTlsDesc": "एन्क्रिप्टेड एलडीएपीएस कनेक्शन के माध्यम से कनेक्ट करें।",
-    "bindDn": "Bind DN",
-    "bindPassword": "Bind पासवर्ड",
-    "secretKeep": "पासवर्ड सेव हो गया है। इसे सेव रखने के लिए इसे खाली छोड़ दें।",
-    "userSearchBase": "उपयोगकर्ता खोज आधार",
-    "userSearchFilter": "उपयोगकर्ता खोज फ़िल्टर",
-    "usernameAttr": "उपयोगकर्ता नाम विशेषता",
-    "displayNameAttr": "प्रदर्शन नाम विशेषता",
-    "groupSearchBase": "समूह खोज आधार",
-    "adminGroup": "व्यवस्थापक समूह",
-    "allowedUsers": "अनुमत उपयोगकर्ता"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/hu_HU.json b/plugins/ldap/locales/translated/hu_HU.json
deleted file mode 100644
index 499060f03..000000000
--- a/plugins/ldap/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Bejelentkezés LDAP-pal",
-  "loginWithProvider": "Bejelentkezés {{name}} használatával",
-  "loading": "Terhelés...",
-  "requiredField": "Ez a mező kötelező",
-  "username": "LDAP felhasználónév",
-  "password": "LDAP jelszó",
-  "signIn": "Bejelentkezés",
-  "permissions": {
-    "manage": {
-      "title": "LDAP-címtárak kezelése",
-      "description": "LDAP-könyvtárak hozzáadása, módosítása és eltávolítása, amelyekkel a felhasználók bejelentkezhetnek."
-    }
-  },
-  "providers": {
-    "docsLink": "Dokumentumok megtekintése",
-    "none": "Nincsenek LDAP könyvtárak konfigurálva.",
-    "add": "Könyvtár hozzáadása",
-    "edit": "Könyvtár szerkesztése",
-    "delete": "Könyvtár törlése",
-    "deleteConfirm": "Törli ezt a könyvtárat? Az ezzel bejelentkező felhasználók nem fognak tudni bejelentkezni.",
-    "name": "Megjelenített név",
-    "namePlaceholder": "Cégjegyzék",
-    "nameRequired": "Megjelenített név megadása kötelező",
-    "enabled": "Engedélyezve",
-    "enabledDesc": "A felhasználók ezzel a könyvtárral jelentkezhetnek be.",
-    "dialogDesc": "Csatlakoztasson egy LDAP vagy Active Directory szervert, hogy a felhasználók bejelentkezhessenek vele.",
-    "sectionGeneral": "Általános",
-    "sectionConnection": "Kapcsolat",
-    "sectionUsers": "Felhasználói keresés",
-    "sectionAccess": "Hozzáférés",
-    "save": "Könyvtár mentése",
-    "saving": "Megtakarítás...",
-    "saved": "Mentett",
-    "saveFailed": "Nem sikerült menteni",
-    "deleted": "Törölt",
-    "deleteFailed": "Nem sikerült törölni",
-    "loadFailed": "Nem sikerült betölteni az LDAP könyvtárakat",
-    "cancel": "Mégsem"
-  },
-  "fields": {
-    "host": "LDAP-gazdagép",
-    "port": "Kikötő",
-    "useTls": "TLS (LDAPS) használata",
-    "useTlsDesc": "Csatlakozzon titkosított LDAPS kapcsolaton keresztül.",
-    "bindDn": "Kötési DN",
-    "bindPassword": "Jelszó kötése",
-    "secretKeep": "A jelszó mentésre került. Hagyja ezt üresen a megőrzéshez.",
-    "userSearchBase": "Felhasználói keresési bázis",
-    "userSearchFilter": "Felhasználói keresési szűrő",
-    "usernameAttr": "Felhasználónév attribútum",
-    "displayNameAttr": "Megjelenített név attribútum",
-    "groupSearchBase": "Csoportkeresési bázis",
-    "adminGroup": "Adminisztrátori csoport",
-    "allowedUsers": "Engedélyezett felhasználók"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/id_ID.json b/plugins/ldap/locales/translated/id_ID.json
deleted file mode 100644
index 0ea1fb4d8..000000000
--- a/plugins/ldap/locales/translated/id_ID.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Masuk menggunakan LDAP",
-  "loginWithProvider": "Masuk dengan {{name}}",
-  "loading": "Memuat...",
-  "requiredField": "Kolom ini wajib diisi.",
-  "username": "Nama Pengguna LDAP",
-  "password": "Kata Sandi LDAP",
-  "signIn": "Masuk",
-  "permissions": {
-    "manage": {
-      "title": "Kelola direktori LDAP",
-      "description": "Menambah, mengubah, dan menghapus direktori LDAP yang dapat digunakan orang untuk masuk."
-    }
-  },
-  "providers": {
-    "docsLink": "Lihat dokumen",
-    "none": "Tidak ada direktori LDAP yang dikonfigurasi.",
-    "add": "Tambahkan Direktori",
-    "edit": "Edit Direktori",
-    "delete": "Hapus Direktori",
-    "deleteConfirm": "Hapus direktori ini? Pengguna yang masuk melalui direktori ini tidak akan dapat masuk.",
-    "name": "Nama Tampilan",
-    "namePlaceholder": "Direktori perusahaan",
-    "nameRequired": "Nama tampilan wajib diisi.",
-    "enabled": "Diaktifkan",
-    "enabledDesc": "Izinkan pengguna untuk masuk melalui direktori ini.",
-    "dialogDesc": "Hubungkan server LDAP atau Active Directory agar pengguna dapat masuk melalui server tersebut.",
-    "sectionGeneral": "Umum",
-    "sectionConnection": "Koneksi",
-    "sectionUsers": "Pencarian Pengguna",
-    "sectionAccess": "Mengakses",
-    "save": "Simpan Direktori",
-    "saving": "Penghematan...",
-    "saved": "Tersimpan",
-    "saveFailed": "Gagal menyimpan",
-    "deleted": "Dihapus",
-    "deleteFailed": "Gagal menghapus",
-    "loadFailed": "Gagal memuat direktori LDAP",
-    "cancel": "Membatalkan"
-  },
-  "fields": {
-    "host": "Host LDAP",
-    "port": "Pelabuhan",
-    "useTls": "Gunakan TLS (LDAPS)",
-    "useTlsDesc": "Terhubung melalui koneksi LDAPS terenkripsi.",
-    "bindDn": "Ikat DN",
-    "bindPassword": "Kata Sandi Terikat",
-    "secretKeep": "Kata sandi telah tersimpan. Biarkan kosong untuk menyimpannya.",
-    "userSearchBase": "Basis Pencarian Pengguna",
-    "userSearchFilter": "Filter Pencarian Pengguna",
-    "usernameAttr": "Atribut Nama Pengguna",
-    "displayNameAttr": "Atribut Nama Tampilan",
-    "groupSearchBase": "Basis Pencarian Grup",
-    "adminGroup": "Grup Admin",
-    "allowedUsers": "Pengguna yang Diizinkan"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/it_IT.json b/plugins/ldap/locales/translated/it_IT.json
deleted file mode 100644
index 632da813b..000000000
--- a/plugins/ldap/locales/translated/it_IT.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Accedi con LDAP",
-  "loginWithProvider": "Accedi con {{name}}",
-  "loading": "Caricamento in corso...",
-  "requiredField": "Questo campo è obbligatorio",
-  "username": "Nome utente LDAP",
-  "password": "Password LDAP",
-  "signIn": "Accedi",
-  "permissions": {
-    "manage": {
-      "title": "Gestire le directory LDAP",
-      "description": "Aggiungere, modificare e rimuovere le directory LDAP con cui gli utenti possono accedere."
-    }
-  },
-  "providers": {
-    "docsLink": "Vedi documenti",
-    "none": "Nessuna directory LDAP configurata.",
-    "add": "Aggiungi directory",
-    "edit": "Modifica directory",
-    "delete": "Elimina la directory",
-    "deleteConfirm": "Eliminare questa directory? Gli utenti che accedono tramite questa directory non potranno più effettuare il login.",
-    "name": "Nome visualizzato",
-    "namePlaceholder": "Elenco delle aziende",
-    "nameRequired": "È richiesto un nome visualizzato",
-    "enabled": "Abilitato",
-    "enabledDesc": "Consenti agli utenti di accedere con questa directory.",
-    "dialogDesc": "Collega un server LDAP o Active Directory in modo che gli utenti possano accedere tramite esso.",
-    "sectionGeneral": "Generale",
-    "sectionConnection": "Connessione",
-    "sectionUsers": "Ricerca utente",
-    "sectionAccess": "Accesso",
-    "save": "Salva directory",
-    "saving": "Salvando...",
-    "saved": "Salvato",
-    "saveFailed": "Salvataggio non riuscito",
-    "deleted": "Eliminato",
-    "deleteFailed": "Eliminazione non riuscita",
-    "loadFailed": "Impossibile caricare le directory LDAP",
-    "cancel": "Annulla"
-  },
-  "fields": {
-    "host": "Host LDAP",
-    "port": "Porta",
-    "useTls": "Usa TLS (LDAPS)",
-    "useTlsDesc": "Connettiti tramite una connessione LDAPS crittografata.",
-    "bindDn": "Bind DN",
-    "bindPassword": "Password di bind",
-    "secretKeep": "È stata salvata una password. Lascia questo campo vuoto per mantenerla.",
-    "userSearchBase": "Base di ricerca utenti",
-    "userSearchFilter": "Filtro di ricerca utenti",
-    "usernameAttr": "Attributo nome utente",
-    "displayNameAttr": "Attributo nome visualizzato",
-    "groupSearchBase": "Base di ricerca gruppi",
-    "adminGroup": "Gruppo amministratori",
-    "allowedUsers": "Utenti consentiti"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/ja_JP.json b/plugins/ldap/locales/translated/ja_JP.json
deleted file mode 100644
index 96bbab938..000000000
--- a/plugins/ldap/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "LDAPでサインイン",
-  "loginWithProvider": "{{name}}でログイン",
-  "loading": "読み込み中...",
-  "requiredField": "この項目は必須です",
-  "username": "LDAPユーザー名",
-  "password": "LDAPパスワード",
-  "signIn": "サインイン",
-  "permissions": {
-    "manage": {
-      "title": "LDAPディレクトリを管理する",
-      "description": "ユーザーがログインに使用できるLDAPディレクトリを追加、変更、削除します。"
-    }
-  },
-  "providers": {
-    "docsLink": "ドキュメントを見る",
-    "none": "LDAPディレクトリは設定されていません。",
-    "add": "ディレクトリを追加",
-    "edit": "ディレクトリを編集",
-    "delete": "ディレクトリを削除",
-    "deleteConfirm": "このディレクトリを削除しますか？このディレクトリを使用してログインしているユーザーはログインできなくなります。",
-    "name": "表示名",
-    "namePlaceholder": "企業名簿",
-    "nameRequired": "表示名は必須です",
-    "enabled": "有効",
-    "enabledDesc": "ユーザーがこのディレクトリを使ってログインできるようにします。",
-    "dialogDesc": "ユーザーがLDAPまたはActive Directoryサーバーを使用してサインインできるように接続します。",
-    "sectionGeneral": "全般",
-    "sectionConnection": "接続",
-    "sectionUsers": "ユーザー検索",
-    "sectionAccess": "アクセス",
-    "save": "保存先ディレクトリ",
-    "saving": "保存中...",
-    "saved": "保存しました",
-    "saveFailed": "保存に失敗しました",
-    "deleted": "削除しました",
-    "deleteFailed": "削除に失敗しました",
-    "loadFailed": "LDAPディレクトリの読み込みに失敗しました",
-    "cancel": "キャンセル"
-  },
-  "fields": {
-    "host": "LDAPホスト",
-    "port": "ポート",
-    "useTls": "TLS (LDAPS) を使用",
-    "useTlsDesc": "暗号化されたLDAPS接続を介して接続します。",
-    "bindDn": "バインドDN",
-    "bindPassword": "バインドパスワード",
-    "secretKeep": "パスワードが保存されます。パスワードを保持するには、この欄を空欄のままにしてください。",
-    "userSearchBase": "ユーザー検索ベース",
-    "userSearchFilter": "ユーザー検索フィルター",
-    "usernameAttr": "ユーザー名属性",
-    "displayNameAttr": "表示名属性",
-    "groupSearchBase": "グループ検索ベース",
-    "adminGroup": "管理者グループ",
-    "allowedUsers": "許可ユーザー"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/ko_KR.json b/plugins/ldap/locales/translated/ko_KR.json
deleted file mode 100644
index 092e2e464..000000000
--- a/plugins/ldap/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "LDAP으로 로그인",
-  "loginWithProvider": "{{name}}으로 로그인",
-  "loading": "로딩 중...",
-  "requiredField": "필수 입력란입니다",
-  "username": "LDAP 사용자 이름",
-  "password": "LDAP 비밀번호",
-  "signIn": "로그인",
-  "permissions": {
-    "manage": {
-      "title": "LDAP 디렉터리 관리",
-      "description": "사용자가 로그인할 수 있는 LDAP 디렉터리를 추가, 변경 및 삭제할 수 있습니다."
-    }
-  },
-  "providers": {
-    "docsLink": "문서 보기",
-    "none": "LDAP 디렉터리가 구성되지 않았습니다.",
-    "add": "디렉토리 추가",
-    "edit": "디렉토리 편집",
-    "delete": "디렉토리 삭제",
-    "deleteConfirm": "이 디렉토리를 삭제하시겠습니까? 그러면 이 디렉토리로 로그인하는 사용자는 더 이상 로그인할 수 없게 됩니다.",
-    "name": "표시 이름",
-    "namePlaceholder": "회사 디렉토리",
-    "nameRequired": "표시 이름은 필수입니다.",
-    "enabled": "사용",
-    "enabledDesc": "사용자가 이 디렉터리를 사용하여 로그인할 수 있도록 하세요.",
-    "dialogDesc": "사용자들이 로그인할 수 있도록 LDAP 또는 Active Directory 서버를 연결하세요.",
-    "sectionGeneral": "일반",
-    "sectionConnection": "연결",
-    "sectionUsers": "사용자 조회",
-    "sectionAccess": "입장",
-    "save": "디렉토리 저장",
-    "saving": "저장 중...",
-    "saved": "저장됨",
-    "saveFailed": "저장 실패",
-    "deleted": "삭제됨",
-    "deleteFailed": "삭제 실패",
-    "loadFailed": "LDAP 디렉터리를 로드하는 데 실패했습니다.",
-    "cancel": "취소"
-  },
-  "fields": {
-    "host": "LDAP 호스트",
-    "port": "포트",
-    "useTls": "TLS 사용 (LDAPS)",
-    "useTlsDesc": "암호화된 LDAPS 연결을 통해 연결하세요.",
-    "bindDn": "바인딩 DN",
-    "bindPassword": "바인딩 암호",
-    "secretKeep": "비밀번호가 저장됩니다. 비밀번호를 유지하려면 이 필드를 비워 두세요.",
-    "userSearchBase": "사용자 검색 기준",
-    "userSearchFilter": "사용자 검색 필터",
-    "usernameAttr": "사용자 이름 속성",
-    "displayNameAttr": "표시 이름 속성",
-    "groupSearchBase": "그룹 검색 기준",
-    "adminGroup": "관리자 그룹",
-    "allowedUsers": "허용 사용자"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/nl_NL.json b/plugins/ldap/locales/translated/nl_NL.json
deleted file mode 100644
index 2b60ea5ee..000000000
--- a/plugins/ldap/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Aanmelden met LDAP",
-  "loginWithProvider": "Inloggen met {{name}}",
-  "loading": "Laden...",
-  "requiredField": "Dit veld is verplicht.",
-  "username": "LDAP-gebruikersnaam",
-  "password": "LDAP-wachtwoord",
-  "signIn": "Inloggen",
-  "permissions": {
-    "manage": {
-      "title": "LDAP-directory's beheren",
-      "description": "Voeg LDAP-directory's toe waarmee mensen kunnen inloggen, wijzig ze en verwijder ze."
-    }
-  },
-  "providers": {
-    "docsLink": "Documenten bekijken",
-    "none": "Er zijn geen LDAP-directory's geconfigureerd.",
-    "add": "Map toevoegen",
-    "edit": "Map bewerken",
-    "delete": "Map verwijderen",
-    "deleteConfirm": "Als u deze map verwijdert, kunnen gebruikers die zich hiermee aanmelden niet meer inloggen.",
-    "name": "Weergavenaam",
-    "namePlaceholder": "Bedrijfsdirectory",
-    "nameRequired": "Een weergavenaam is verplicht.",
-    "enabled": "Ingeschakeld",
-    "enabledDesc": "Laat gebruikers inloggen met deze directory.",
-    "dialogDesc": "Verbind een LDAP- of Active Directory-server zodat gebruikers zich daarmee kunnen aanmelden.",
-    "sectionGeneral": "Algemeen",
-    "sectionConnection": "Verbinding",
-    "sectionUsers": "Gebruikers opzoeken",
-    "sectionAccess": "Toegang",
-    "save": "Map opslaan",
-    "saving": "Besparing...",
-    "saved": "Opgeslagen",
-    "saveFailed": "Opslaan mislukt",
-    "deleted": "Verwijderd",
-    "deleteFailed": "Verwijderen mislukt",
-    "loadFailed": "Het laden van de LDAP-directory's is mislukt.",
-    "cancel": "Annuleren"
-  },
-  "fields": {
-    "host": "LDAP-host",
-    "port": "Haven",
-    "useTls": "Gebruik TLS (LDAPS)",
-    "useTlsDesc": "Maak verbinding via een versleutelde LDAPS-verbinding.",
-    "bindDn": "Bind DN",
-    "bindPassword": "Bind wachtwoord",
-    "secretKeep": "Er wordt een wachtwoord opgeslagen. Laat dit veld leeg om het wachtwoord te behouden.",
-    "userSearchBase": "Gebruikerszoekbasis",
-    "userSearchFilter": "Gebruikerszoekfilter",
-    "usernameAttr": "Gebruikersnaamkenmerk",
-    "displayNameAttr": "Weergavenaamkenmerk",
-    "groupSearchBase": "Groepszoekbasis",
-    "adminGroup": "Beheerdersgroep",
-    "allowedUsers": "Toegestane gebruikers"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/no_NO.json b/plugins/ldap/locales/translated/no_NO.json
deleted file mode 100644
index 695c678c8..000000000
--- a/plugins/ldap/locales/translated/no_NO.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Logg inn med LDAP",
-  "loginWithProvider": "Logg inn med {{name}}",
-  "loading": "Laster...",
-  "requiredField": "Dette feltet er obligatorisk",
-  "username": "LDAP-brukernavn",
-  "password": "LDAP-passord",
-  "signIn": "Logg inn",
-  "permissions": {
-    "manage": {
-      "title": "Administrer LDAP-kataloger",
-      "description": "Legg til, endre og fjern LDAP-katalogene som folk kan logge på med."
-    }
-  },
-  "providers": {
-    "docsLink": "Vis dokumenter",
-    "none": "Ingen LDAP-kataloger er konfigurert.",
-    "add": "Legg til katalog",
-    "edit": "Rediger katalog",
-    "delete": "Slett katalog",
-    "deleteConfirm": "Vil du slette denne katalogen? Brukere som logger på med den, vil ikke kunne logge på.",
-    "name": "Visningsnavn",
-    "namePlaceholder": "Firmakatalog",
-    "nameRequired": "Et visningsnavn er obligatorisk",
-    "enabled": "Aktivert",
-    "enabledDesc": "La brukere logge på med denne katalogen.",
-    "dialogDesc": "Koble til en LDAP- eller Active Directory-server slik at brukere kan logge på med den.",
-    "sectionGeneral": "Generelt",
-    "sectionConnection": "Tilkobling",
-    "sectionUsers": "Brukeroppslag",
-    "sectionAccess": "Adgang",
-    "save": "Lagre katalog",
-    "saving": "Lagrer...",
-    "saved": "Lagret",
-    "saveFailed": "Kunne ikke lagre",
-    "deleted": "Slettet",
-    "deleteFailed": "Kunne ikke slette",
-    "loadFailed": "Kunne ikke laste inn LDAP-kataloger",
-    "cancel": "Avbryt"
-  },
-  "fields": {
-    "host": "LDAP-vert",
-    "port": "Havn",
-    "useTls": "Bruk TLS (LDAPS)",
-    "useTlsDesc": "Koble til via en kryptert LDAPS-tilkobling.",
-    "bindDn": "Bind DN",
-    "bindPassword": "Bind passord",
-    "secretKeep": "Et passord er lagret. La dette feltet stå tomt for å beholde det.",
-    "userSearchBase": "Brukersøkbase",
-    "userSearchFilter": "Brukersøkfilter",
-    "usernameAttr": "Brukernavnattributt",
-    "displayNameAttr": "Visningsnavnattributt",
-    "groupSearchBase": "Gruppesøkbase",
-    "adminGroup": "Admingruppe",
-    "allowedUsers": "Tillatte brukere"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/pl_PL.json b/plugins/ldap/locales/translated/pl_PL.json
deleted file mode 100644
index 47f105448..000000000
--- a/plugins/ldap/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Zaloguj się za pomocą LDAP",
-  "loginWithProvider": "Zaloguj się za pomocą {{name}}",
-  "loading": "Ładowanie...",
-  "requiredField": "To pole jest wymagane",
-  "username": "Nazwa użytkownika LDAP",
-  "password": "Hasło LDAP",
-  "signIn": "Zaloguj się",
-  "permissions": {
-    "manage": {
-      "title": "Zarządzaj katalogami LDAP",
-      "description": "Dodawaj, zmieniaj i usuwaj katalogi LDAP, do których użytkownicy mogą się logować."
-    }
-  },
-  "providers": {
-    "docsLink": "Zobacz dokumentację",
-    "none": "Nie skonfigurowano żadnych katalogów LDAP.",
-    "add": "Dodaj katalog",
-    "edit": "Edytuj katalog",
-    "delete": "Usuń katalog",
-    "deleteConfirm": "Usunąć ten katalog? Użytkownicy, którzy się do niego zalogują, nie będą mogli się zalogować.",
-    "name": "Nazwa wyświetlana",
-    "namePlaceholder": "Katalog firm",
-    "nameRequired": "Wymagana jest nazwa wyświetlana",
-    "enabled": "Włączona",
-    "enabledDesc": "Zezwól użytkownikom na logowanie się przy użyciu tego katalogu.",
-    "dialogDesc": "Podłącz serwer LDAP lub Active Directory, aby użytkownicy mogli się do niego logować.",
-    "sectionGeneral": "Ogólne",
-    "sectionConnection": "Połączenie",
-    "sectionUsers": "Wyszukiwanie użytkownika",
-    "sectionAccess": "Dostęp",
-    "save": "Zapisz katalog",
-    "saving": "Zapisywanie...",
-    "saved": "Zapisano",
-    "saveFailed": "Nie udało się zapisać",
-    "deleted": "Usunięto",
-    "deleteFailed": "Nie udało się usunąć",
-    "loadFailed": "Nie udało się załadować katalogów LDAP",
-    "cancel": "Anuluj"
-  },
-  "fields": {
-    "host": "Host LDAP",
-    "port": "Port",
-    "useTls": "Użyj TLS (LDAPS)",
-    "useTlsDesc": "Połącz się przez szyfrowane połączenie LDAPS.",
-    "bindDn": "Bind DN",
-    "bindPassword": "Hasło Bind",
-    "secretKeep": "Hasło zostało zapisane. Pozostaw to pole puste, aby je zachować.",
-    "userSearchBase": "Baza wyszukiwania użytkowników",
-    "userSearchFilter": "Filtr wyszukiwania użytkownika",
-    "usernameAttr": "Atrybut nazwy użytkownika",
-    "displayNameAttr": "Atrybut nazwy wyświetlanej",
-    "groupSearchBase": "Baza wyszukiwania grup",
-    "adminGroup": "Grupa administratorów",
-    "allowedUsers": "Dozwoleni użytkownicy"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/pt_BR.json b/plugins/ldap/locales/translated/pt_BR.json
deleted file mode 100644
index 7fa2264b9..000000000
--- a/plugins/ldap/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Entrar com LDAP",
-  "loginWithProvider": "Faça login com {{name}}",
-  "loading": "Carregando...",
-  "requiredField": "Este campo é obrigatório",
-  "username": "Nome de usuário LDAP",
-  "password": "Senha LDAP",
-  "signIn": "Entrar",
-  "permissions": {
-    "manage": {
-      "title": "Gerenciar diretórios LDAP",
-      "description": "Adicione, altere e remova os diretórios LDAP com os quais as pessoas podem fazer login."
-    }
-  },
-  "providers": {
-    "docsLink": "Documentação",
-    "none": "Nenhum diretório LDAP configurado.",
-    "add": "Adicionar diretório",
-    "edit": "Editar diretório",
-    "delete": "Excluir diretório",
-    "deleteConfirm": "Excluir este diretório? Os usuários que fizerem login com ele não poderão mais acessar sua conta.",
-    "name": "Nome de exibição",
-    "namePlaceholder": "Diretório de empresas",
-    "nameRequired": "É necessário um nome de exibição.",
-    "enabled": "Habilitado",
-    "enabledDesc": "Permita que os usuários façam login com este diretório.",
-    "dialogDesc": "Conecte um servidor LDAP ou Active Directory para que os usuários possam fazer login com ele.",
-    "sectionGeneral": "Geral",
-    "sectionConnection": "Conexão",
-    "sectionUsers": "Pesquisa de usuário",
-    "sectionAccess": "Acesso",
-    "save": "Salvar diretório",
-    "saving": "Salvando...",
-    "saved": "Salvo",
-    "saveFailed": "Falha ao salvar",
-    "deleted": "Apagado",
-    "deleteFailed": "Falha ao apagar",
-    "loadFailed": "Falha ao carregar os diretórios LDAP.",
-    "cancel": "Cancelar"
-  },
-  "fields": {
-    "host": "Host LDAP",
-    "port": "Porta",
-    "useTls": "Usar TLS (LDAPS)",
-    "useTlsDesc": "Conecte-se através de uma conexão LDAPS criptografada.",
-    "bindDn": "Vincular DN",
-    "bindPassword": "Senha de vinculação",
-    "secretKeep": "Uma senha foi salva. Deixe este campo em branco para mantê-la.",
-    "userSearchBase": "Base de pesquisa de usuários",
-    "userSearchFilter": "Filtro de pesquisa do usuário",
-    "usernameAttr": "Atributo de nome de usuário",
-    "displayNameAttr": "Atributo de nome de exibição",
-    "groupSearchBase": "Base de pesquisa de grupo",
-    "adminGroup": "Grupo de Administração",
-    "allowedUsers": "Usuários autorizados"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/pt_PT.json b/plugins/ldap/locales/translated/pt_PT.json
deleted file mode 100644
index b7eba513c..000000000
--- a/plugins/ldap/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Entrar com LDAP",
-  "loginWithProvider": "Iniciar sessão com {{name}}",
-  "loading": "A carregar...",
-  "requiredField": "Este campo é obrigatório",
-  "username": "Nome de utilizador LDAP",
-  "password": "Palavra-passe LDAP",
-  "signIn": "Iniciar sessão",
-  "permissions": {
-    "manage": {
-      "title": "Gerir diretórios LDAP",
-      "description": "Adicione, altere e remova os diretórios LDAP com os quais as pessoas podem iniciar sessão."
-    }
-  },
-  "providers": {
-    "docsLink": "Ver docs",
-    "none": "Nenhum diretório LDAP configurado.",
-    "add": "Adicionar diretório",
-    "edit": "Editar diretório",
-    "delete": "Apagar diretório",
-    "deleteConfirm": "Apagar este diretório? Os utilizadores que fizerem login com ele já não poderão aceder à sua conta.",
-    "name": "Nome de exibição",
-    "namePlaceholder": "Diretório de empresas",
-    "nameRequired": "É necessário um nome de utilizador.",
-    "enabled": "Ativado",
-    "enabledDesc": "Permita que os utilizadores iniciem sessão com este diretório.",
-    "dialogDesc": "Ligue um servidor LDAP ou Active Directory para que os utilizadores possam iniciar sessão com ele.",
-    "sectionGeneral": "Geral",
-    "sectionConnection": "Ligação",
-    "sectionUsers": "Pesquisa de utilizador",
-    "sectionAccess": "Acesso",
-    "save": "Guardar diretório",
-    "saving": "A guardar...",
-    "saved": "Guardado",
-    "saveFailed": "Falha ao guardar",
-    "deleted": "Eliminado",
-    "deleteFailed": "Falha ao eliminar",
-    "loadFailed": "Falha ao carregar os diretórios LDAP.",
-    "cancel": "Cancelar"
-  },
-  "fields": {
-    "host": "Servidor LDAP",
-    "port": "Porta",
-    "useTls": "Usar TLS (LDAPS)",
-    "useTlsDesc": "Ligue-se através de uma ligação LDAPS encriptada.",
-    "bindDn": "Bind DN",
-    "bindPassword": "Palavra-passe de Bind",
-    "secretKeep": "Uma palavra-passe foi guardada. Deixe este campo em branco para a manter.",
-    "userSearchBase": "Base de pesquisa de utilizadores",
-    "userSearchFilter": "Filtro de pesquisa de utilizadores",
-    "usernameAttr": "Atributo de nome de utilizador",
-    "displayNameAttr": "Atributo de nome de apresentação",
-    "groupSearchBase": "Base de pesquisa de grupos",
-    "adminGroup": "Grupo de administração",
-    "allowedUsers": "Utilizadores permitidos"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/ro_RO.json b/plugins/ldap/locales/translated/ro_RO.json
deleted file mode 100644
index bb0839228..000000000
--- a/plugins/ldap/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Conectați-vă cu LDAP",
-  "loginWithProvider": "Autentificare cu {{name}}",
-  "loading": "Încărcare...",
-  "requiredField": "Acest câmp este obligatoriu",
-  "username": "Nume de utilizator LDAP",
-  "password": "Parolă LDAP",
-  "signIn": "Conectare",
-  "permissions": {
-    "manage": {
-      "title": "Gestionarea directoarelor LDAP",
-      "description": "Adăugați, modificați și eliminați directoarele LDAP cu care utilizatorii se pot conecta."
-    }
-  },
-  "providers": {
-    "docsLink": "Vizualizați documentele",
-    "none": "Nu sunt configurate directoare LDAP.",
-    "add": "Adăugați directorul",
-    "edit": "Editați directorul",
-    "delete": "Ștergeți directorul",
-    "deleteConfirm": "Ștergeți acest director? Utilizatorii care se conectează cu acesta nu se vor putea conecta.",
-    "name": "Numele de afișare",
-    "namePlaceholder": "Directorul companiilor",
-    "nameRequired": "Este obligatoriu un nume afișat",
-    "enabled": "Activat",
-    "enabledDesc": "Permiteți utilizatorilor să se conecteze cu acest director.",
-    "dialogDesc": "Conectați un server LDAP sau Active Directory pentru ca utilizatorii să se poată conecta cu acesta.",
-    "sectionGeneral": "General",
-    "sectionConnection": "Conexiune",
-    "sectionUsers": "Căutare utilizator",
-    "sectionAccess": "Acces",
-    "save": "Salvați directorul",
-    "saving": "Economisire...",
-    "saved": "Salvat",
-    "saveFailed": "Salvarea nu a reușit",
-    "deleted": "Șters",
-    "deleteFailed": "Ștergerea nu a reușit",
-    "loadFailed": "Nu s-au putut încărca directoarele LDAP",
-    "cancel": "Anula"
-  },
-  "fields": {
-    "host": "Gazdă LDAP",
-    "port": "Port",
-    "useTls": "Utilizați TLS (LDAPS)",
-    "useTlsDesc": "Conectați-vă printr-o conexiune LDAPS criptată.",
-    "bindDn": "Legați DN-ul",
-    "bindPassword": "Parolă de legare",
-    "secretKeep": "O parolă este salvată. Lăsați acest câmp gol pentru a o păstra.",
-    "userSearchBase": "Baza de căutare a utilizatorilor",
-    "userSearchFilter": "Filtru de căutare utilizator",
-    "usernameAttr": "Atribut nume utilizator",
-    "displayNameAttr": "Atributul numelui afișat",
-    "groupSearchBase": "Baza de căutare a grupului",
-    "adminGroup": "Grup de administratori",
-    "allowedUsers": "Utilizatori permiși"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/ru_RU.json b/plugins/ldap/locales/translated/ru_RU.json
deleted file mode 100644
index b63ee4ef7..000000000
--- a/plugins/ldap/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Вход через LDAP",
-  "loginWithProvider": "Войти через {{name}}",
-  "loading": "Загрузка...",
-  "requiredField": "Обязательное поле",
-  "username": "Имя пользователя LDAP",
-  "password": "Пароль LDAP",
-  "signIn": "Войти",
-  "permissions": {
-    "manage": {
-      "title": "Управление каталогами LDAP",
-      "description": "Добавляйте, изменяйте и удаляйте каталоги LDAP, через которые пользователи могут входить в систему."
-    }
-  },
-  "providers": {
-    "docsLink": "Документация",
-    "none": "Каталоги LDAP не настроены.",
-    "add": "Добавить каталог",
-    "edit": "Редактировать каталог",
-    "delete": "Удалить каталог",
-    "deleteConfirm": "Удалить этот каталог? Пользователи, которые войдут в систему с его помощью, не смогут авторизоваться.",
-    "name": "Отображаемое имя",
-    "namePlaceholder": "Справочник компаний",
-    "nameRequired": "Необходимо указать отображаемое имя.",
-    "enabled": "Включено",
-    "enabledDesc": "Разрешите пользователям входить в систему, используя этот каталог.",
-    "dialogDesc": "Подключите сервер LDAP или Active Directory, чтобы пользователи могли входить в систему с его помощью.",
-    "sectionGeneral": "Общие",
-    "sectionConnection": "Подключение",
-    "sectionUsers": "Поиск пользователя",
-    "sectionAccess": "Доступ",
-    "save": "Сохранить каталог",
-    "saving": "Сохранение…",
-    "saved": "Сохранено",
-    "saveFailed": "Не удалось сохранить",
-    "deleted": "Удалено",
-    "deleteFailed": "Не удалось удалить",
-    "loadFailed": "Не удалось загрузить каталоги LDAP.",
-    "cancel": "Отмена"
-  },
-  "fields": {
-    "host": "LDAP-сервер",
-    "port": "Порт",
-    "useTls": "Использовать TLS (LDAPS)",
-    "useTlsDesc": "Подключайтесь через зашифрованное LDAPS-соединение.",
-    "bindDn": "Bind DN",
-    "bindPassword": "Пароль привязки",
-    "secretKeep": "Пароль сохранен. Оставьте это поле пустым, чтобы сохранить его.",
-    "userSearchBase": "База поиска пользователей",
-    "userSearchFilter": "Фильтр поиска пользователей",
-    "usernameAttr": "Атрибут имени пользователя",
-    "displayNameAttr": "Атрибут отображаемого имени",
-    "groupSearchBase": "База поиска групп",
-    "adminGroup": "Группа администраторов",
-    "allowedUsers": "Разрешенные пользователи"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/sr_SP.json b/plugins/ldap/locales/translated/sr_SP.json
deleted file mode 100644
index d703c4b3f..000000000
--- a/plugins/ldap/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Пријавите се помоћу LDAP-а",
-  "loginWithProvider": "Пријавите се са {{name}}",
-  "loading": "Учитавање...",
-  "requiredField": "Ово поље је обавезно",
-  "username": "LDAP корисничко име",
-  "password": "LDAP лозинка",
-  "signIn": "Пријавите се",
-  "permissions": {
-    "manage": {
-      "title": "Управљање LDAP директоријумима",
-      "description": "Додајте, промените и уклоните LDAP директоријуме помоћу којих се људи могу пријавити."
-    }
-  },
-  "providers": {
-    "docsLink": "Прикажи документе",
-    "none": "Није конфигурисан ниједан LDAP директоријум.",
-    "add": "Додај директоријум",
-    "edit": "Уреди директоријум",
-    "delete": "Обриши директоријум",
-    "deleteConfirm": "Да ли желите да обришете овај директоријум? Корисници који се пријаве помоћу њега неће моћи да се пријаве.",
-    "name": "Приказано име",
-    "namePlaceholder": "Именик компанија",
-    "nameRequired": "Потребно је приказано име",
-    "enabled": "Омогућено",
-    "enabledDesc": "Дозволите корисницима да се пријаве помоћу овог директоријума.",
-    "dialogDesc": "Повежите LDAP или Active Directory сервер како би се корисници могли пријавити помоћу њега.",
-    "sectionGeneral": "Опште",
-    "sectionConnection": "Веза",
-    "sectionUsers": "Претрага корисника",
-    "sectionAccess": "Приступ",
-    "save": "Сачувај директоријум",
-    "saving": "Чување...",
-    "saved": "Сачувано",
-    "saveFailed": "Чување није успело",
-    "deleted": "Избрисано",
-    "deleteFailed": "Брисање није успело",
-    "loadFailed": "Учитавање LDAP директоријума није успело",
-    "cancel": "Откажи"
-  },
-  "fields": {
-    "host": "LDAP хост",
-    "port": "Лука",
-    "useTls": "Користите TLS (LDAPS)",
-    "useTlsDesc": "Повежите се преко шифроване LDAPS везе.",
-    "bindDn": "Повезивање DN-а",
-    "bindPassword": "Повезивање лозинке",
-    "secretKeep": "Лозинка је сачувана. Оставите ово празно да бисте је задржали.",
-    "userSearchBase": "База претраге корисника",
-    "userSearchFilter": "Филтер за претрагу корисника",
-    "usernameAttr": "Атрибут корисничког имена",
-    "displayNameAttr": "Атрибут приказаног имена",
-    "groupSearchBase": "База групне претраге",
-    "adminGroup": "Администраторска група",
-    "allowedUsers": "Дозвољени корисници"
-  },
-  "plugin": {
-    "name": "ЛДАП"
-  }
-}
diff --git a/plugins/ldap/locales/translated/sv_SE.json b/plugins/ldap/locales/translated/sv_SE.json
deleted file mode 100644
index 7f6f02ede..000000000
--- a/plugins/ldap/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Logga in med LDAP",
-  "loginWithProvider": "Logga in med {{name}}",
-  "loading": "Belastning...",
-  "requiredField": "Detta fält är obligatoriskt",
-  "username": "LDAP-användarnamn",
-  "password": "LDAP-lösenord",
-  "signIn": "Logga in",
-  "permissions": {
-    "manage": {
-      "title": "Hantera LDAP-kataloger",
-      "description": "Lägg till, ändra och ta bort LDAP-kataloger som personer kan logga in med."
-    }
-  },
-  "providers": {
-    "docsLink": "Visa dokument",
-    "none": "Inga LDAP-kataloger har konfigurerats.",
-    "add": "Lägg till katalog",
-    "edit": "Redigera katalog",
-    "delete": "Ta bort katalog",
-    "deleteConfirm": "Vill du ta bort den här katalogen? Användare som loggar in med den kommer inte att kunna logga in.",
-    "name": "Visningsnamn",
-    "namePlaceholder": "Företagskatalog",
-    "nameRequired": "Ett visningsnamn krävs",
-    "enabled": "Aktiverad",
-    "enabledDesc": "Låt användare logga in med den här katalogen.",
-    "dialogDesc": "Anslut en LDAP- eller Active Directory-server så att användare kan logga in med den.",
-    "sectionGeneral": "Allmän",
-    "sectionConnection": "Förbindelse",
-    "sectionUsers": "Användarsökning",
-    "sectionAccess": "Tillträde",
-    "save": "Spara katalog",
-    "saving": "Sparande...",
-    "saved": "Sparad",
-    "saveFailed": "Misslyckades med att spara",
-    "deleted": "Borttagen",
-    "deleteFailed": "Misslyckades med att radera",
-    "loadFailed": "Misslyckades med att läsa in LDAP-kataloger",
-    "cancel": "Avboka"
-  },
-  "fields": {
-    "host": "LDAP-värd",
-    "port": "Hamn",
-    "useTls": "Använd TLS (LDAPS)",
-    "useTlsDesc": "Anslut via en krypterad LDAPS-anslutning.",
-    "bindDn": "Bind DN",
-    "bindPassword": "Bind lösenord",
-    "secretKeep": "Ett lösenord har sparats. Lämna detta tomt för att behålla det.",
-    "userSearchBase": "Användarsökningsbas",
-    "userSearchFilter": "Användarsökningsfilter",
-    "usernameAttr": "Användarnamnsattribut",
-    "displayNameAttr": "Attribut för visningsnamn",
-    "groupSearchBase": "Gruppsökningsbas",
-    "adminGroup": "Administratörsgrupp",
-    "allowedUsers": "Tillåtna användare"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/th_TH.json b/plugins/ldap/locales/translated/th_TH.json
deleted file mode 100644
index aef02cd47..000000000
--- a/plugins/ldap/locales/translated/th_TH.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "ลงชื่อเข้าใช้ด้วย LDAP",
-  "loginWithProvider": "เข้าสู่ระบบด้วย {{name}}",
-  "loading": "กำลังโหลด...",
-  "requiredField": "ช่องนี้จำเป็นต้องกรอก",
-  "username": "ชื่อผู้ใช้ LDAP",
-  "password": "รหัสผ่าน LDAP",
-  "signIn": "เข้าสู่ระบบ",
-  "permissions": {
-    "manage": {
-      "title": "จัดการไดเร็กทอรี LDAP",
-      "description": "เพิ่ม เปลี่ยนแปลง และลบไดเร็กทอรี LDAP ที่ผู้ใช้สามารถลงชื่อเข้าใช้ได้"
-    }
-  },
-  "providers": {
-    "docsLink": "ดูเอกสาร",
-    "none": "ไม่มีการกำหนดค่าไดเร็กทอรี LDAP ไว้",
-    "add": "เพิ่มไดเร็กทอรี",
-    "edit": "แก้ไขไดเร็กทอรี",
-    "delete": "ลบไดเร็กทอรี",
-    "deleteConfirm": "ลบไดเร็กทอรีนี้หรือไม่? ผู้ใช้ที่ลงชื่อเข้าใช้ด้วยไดเร็กทอรีนี้จะไม่สามารถเข้าสู่ระบบได้",
-    "name": "ชื่อที่แสดง",
-    "namePlaceholder": "รายชื่อบริษัท",
-    "nameRequired": "จำเป็นต้องระบุชื่อที่แสดง",
-    "enabled": "เปิดใช้งาน",
-    "enabledDesc": "อนุญาตให้ผู้ใช้ลงชื่อเข้าใช้ด้วยไดเร็กทอรีนี้",
-    "dialogDesc": "เชื่อมต่อเซิร์ฟเวอร์ LDAP หรือ Active Directory เพื่อให้ผู้ใช้สามารถลงชื่อเข้าใช้ได้",
-    "sectionGeneral": "ทั่วไป",
-    "sectionConnection": "การเชื่อมต่อ",
-    "sectionUsers": "การค้นหาผู้ใช้",
-    "sectionAccess": "เข้าถึง",
-    "save": "บันทึกไดเร็กทอรี",
-    "saving": "ประหยัด...",
-    "saved": "บันทึกแล้ว",
-    "saveFailed": "บันทึกไม่สำเร็จ",
-    "deleted": "ลบแล้ว",
-    "deleteFailed": "ลบไม่สำเร็จ",
-    "loadFailed": "ไม่สามารถโหลดไดเร็กทอรี LDAP ได้",
-    "cancel": "ยกเลิก"
-  },
-  "fields": {
-    "host": "โฮสต์ LDAP",
-    "port": "ท่าเรือ",
-    "useTls": "ใช้ TLS (LDAPS)",
-    "useTlsDesc": "เชื่อมต่อผ่านการเชื่อมต่อ LDAPS ที่เข้ารหัสลับ",
-    "bindDn": "ผูก DN",
-    "bindPassword": "รหัสผ่านผูกมัด",
-    "secretKeep": "รหัสผ่านถูกบันทึกไว้แล้ว หากต้องการบันทึกรหัสผ่าน ให้เว้นช่องนี้ว่างไว้",
-    "userSearchBase": "ฐานการค้นหาผู้ใช้",
-    "userSearchFilter": "ตัวกรองการค้นหาผู้ใช้",
-    "usernameAttr": "คุณลักษณะชื่อผู้ใช้",
-    "displayNameAttr": "คุณลักษณะชื่อที่แสดง",
-    "groupSearchBase": "ฐานการค้นหากลุ่ม",
-    "adminGroup": "กลุ่มผู้ดูแลระบบ",
-    "allowedUsers": "ผู้ใช้ที่ได้รับอนุญาต"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/tr_TR.json b/plugins/ldap/locales/translated/tr_TR.json
deleted file mode 100644
index 411c3d12d..000000000
--- a/plugins/ldap/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "LDAP ile giriş yap",
-  "loginWithProvider": "{{name}} ile giriş yap",
-  "loading": "Yükleniyor...",
-  "requiredField": "Bu alan zorunludur",
-  "username": "LDAP Kullanıcı Adı",
-  "password": "LDAP Parolası",
-  "signIn": "Oturum Aç",
-  "permissions": {
-    "manage": {
-      "title": "LDAP dizinlerini yönetin",
-      "description": "Kullanıcıların oturum açabileceği LDAP dizinlerini ekleyin, değiştirin ve kaldırın."
-    }
-  },
-  "providers": {
-    "docsLink": "Belgelere bak",
-    "none": "Hiçbir LDAP dizini yapılandırılmamış.",
-    "add": "Dizin Ekle",
-    "edit": "Dizin Düzenle",
-    "delete": "Dizini Sil",
-    "deleteConfirm": "Bu dizini silmek ister misiniz? Bu dizinle giriş yapan kullanıcılar artık giriş yapamayacaklar.",
-    "name": "Görünen Ad",
-    "namePlaceholder": "Şirket dizini",
-    "nameRequired": "Görünen ad gereklidir.",
-    "enabled": "Etkin",
-    "enabledDesc": "Kullanıcıların bu dizinle giriş yapmalarına izin verin.",
-    "dialogDesc": "Kullanıcıların oturum açabilmesi için bir LDAP veya Active Directory sunucusu bağlayın.",
-    "sectionGeneral": "Genel",
-    "sectionConnection": "Bağlantı",
-    "sectionUsers": "Kullanıcı Arama",
-    "sectionAccess": "Erişim",
-    "save": "Kaydet",
-    "saving": "Kaydediliyor...",
-    "saved": "Kaydedildi",
-    "saveFailed": "Kaydedilemedi",
-    "deleted": "Silindi",
-    "deleteFailed": "Silinemedi",
-    "loadFailed": "LDAP dizinleri yüklenemedi.",
-    "cancel": "İptal"
-  },
-  "fields": {
-    "host": "LDAP Sunucusu",
-    "port": "Port",
-    "useTls": "TLS Kullan (LDAPS)",
-    "useTlsDesc": "Şifrelenmiş bir LDAPS bağlantısı üzerinden bağlanın.",
-    "bindDn": "Bind DN",
-    "bindPassword": "Bind Parolası",
-    "secretKeep": "Parola kaydedildi. Parolayı saklamak için bu alanı boş bırakın.",
-    "userSearchBase": "Kullanıcı Arama Tabanı",
-    "userSearchFilter": "Kullanıcı Arama Süzgeci",
-    "usernameAttr": "Kullanıcı Adı Özniteliği",
-    "displayNameAttr": "Görünen Ad Özniteliği",
-    "groupSearchBase": "Grup Arama Tabanı",
-    "adminGroup": "Yönetici Grubu",
-    "allowedUsers": "İzin Verilen Kullanıcılar"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/uk_UA.json b/plugins/ldap/locales/translated/uk_UA.json
deleted file mode 100644
index 86c1c33c0..000000000
--- a/plugins/ldap/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Увійти за допомогою LDAP",
-  "loginWithProvider": "Увійти за допомогою {{name}}",
-  "loading": "Завантаження...",
-  "requiredField": "Це поле обов'язкове",
-  "username": "Ім'я користувача LDAP",
-  "password": "Пароль LDAP",
-  "signIn": "Увійти",
-  "permissions": {
-    "manage": {
-      "title": "Керування каталогами LDAP",
-      "description": "Додавайте, змінюйте та видаляйте каталоги LDAP, за допомогою яких користувачі можуть входити в систему."
-    }
-  },
-  "providers": {
-    "docsLink": "Переглянути документи",
-    "none": "Не налаштовано жодних каталогів LDAP.",
-    "add": "Додати каталог",
-    "edit": "Редагувати каталог",
-    "delete": "Видалити каталог",
-    "deleteConfirm": "Видалити цей каталог? Користувачі, які ввійдуть за його допомогою, не зможуть увійти.",
-    "name": "Відображуване ім'я",
-    "namePlaceholder": "Довідник компаній",
-    "nameRequired": "Потрібне відображуване ім'я",
-    "enabled": "Увімкнено",
-    "enabledDesc": "Дозволити користувачам входити за допомогою цього каталогу.",
-    "dialogDesc": "Підключіть сервер LDAP або Active Directory, щоб користувачі могли входити через нього.",
-    "sectionGeneral": "Загальне",
-    "sectionConnection": "З'єднання",
-    "sectionUsers": "Пошук користувача",
-    "sectionAccess": "Доступ",
-    "save": "Зберегти каталог",
-    "saving": "Збереження...",
-    "saved": "Збережено",
-    "saveFailed": "Не вдалося зберегти",
-    "deleted": "Видалено",
-    "deleteFailed": "Не вдалося видалити",
-    "loadFailed": "Не вдалося завантажити каталоги LDAP",
-    "cancel": "Скасувати"
-  },
-  "fields": {
-    "host": "Хост LDAP",
-    "port": "Порт",
-    "useTls": "Використовувати TLS (LDAPS)",
-    "useTlsDesc": "Підключіться через зашифроване з’єднання LDAPS.",
-    "bindDn": "Прив'язане DN",
-    "bindPassword": "Прив’язати пароль",
-    "secretKeep": "Пароль збережено. Залиште це поле порожнім, щоб зберегти його.",
-    "userSearchBase": "База пошуку користувачів",
-    "userSearchFilter": "Фільтр пошуку користувачів",
-    "usernameAttr": "Атрибут імені користувача",
-    "displayNameAttr": "Атрибут відображуваного імені",
-    "groupSearchBase": "База групового пошуку",
-    "adminGroup": "Група адміністраторів",
-    "allowedUsers": "Дозволені користувачі"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/vi_VN.json b/plugins/ldap/locales/translated/vi_VN.json
deleted file mode 100644
index 9727ad20e..000000000
--- a/plugins/ldap/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "Đăng nhập bằng LDAP",
-  "loginWithProvider": "Đăng nhập bằng {{name}}",
-  "loading": "Đang tải...",
-  "requiredField": "Trường này là bắt buộc",
-  "username": "Tên người dùng LDAP",
-  "password": "Mật khẩu LDAP",
-  "signIn": "Đăng nhập",
-  "permissions": {
-    "manage": {
-      "title": "Quản lý thư mục LDAP",
-      "description": "Thêm, thay đổi và xóa các thư mục LDAP mà người dùng có thể sử dụng để đăng nhập."
-    }
-  },
-  "providers": {
-    "docsLink": "Xem tài liệu",
-    "none": "Chưa có thư mục LDAP nào được cấu hình.",
-    "add": "Thêm thư mục",
-    "edit": "Chỉnh sửa thư mục",
-    "delete": "Xóa thư mục",
-    "deleteConfirm": "Xóa thư mục này? Người dùng đăng nhập bằng thư mục này sẽ không thể đăng nhập được nữa.",
-    "name": "Tên hiển thị",
-    "namePlaceholder": "Danh bạ công ty",
-    "nameRequired": "Tên hiển thị là bắt buộc",
-    "enabled": "Đã bật",
-    "enabledDesc": "Cho phép người dùng đăng nhập bằng thư mục này.",
-    "dialogDesc": "Kết nối với máy chủ LDAP hoặc Active Directory để người dùng có thể đăng nhập bằng máy chủ đó.",
-    "sectionGeneral": "Chung",
-    "sectionConnection": "Kết nối",
-    "sectionUsers": "Tra cứu người dùng",
-    "sectionAccess": "Truy cập",
-    "save": "Lưu thư mục",
-    "saving": "Đang lưu...",
-    "saved": "Đã lưu",
-    "saveFailed": "Không thể lưu",
-    "deleted": "Đã xóa",
-    "deleteFailed": "Không thể xóa",
-    "loadFailed": "Không thể tải thư mục LDAP.",
-    "cancel": "Hủy"
-  },
-  "fields": {
-    "host": "Máy chủ LDAP",
-    "port": "Cổng",
-    "useTls": "Dùng TLS (LDAPS)",
-    "useTlsDesc": "Kết nối thông qua đường truyền LDAPS được mã hóa.",
-    "bindDn": "Bind DN",
-    "bindPassword": "Mật khẩu Bind",
-    "secretKeep": "Mật khẩu đã được lưu. Hãy để trống phần này để giữ nguyên.",
-    "userSearchBase": "Cơ sở tìm kiếm người dùng",
-    "userSearchFilter": "Bộ lọc tìm kiếm người dùng",
-    "usernameAttr": "Thuộc tính tên người dùng",
-    "displayNameAttr": "Thuộc tính tên hiển thị",
-    "groupSearchBase": "Cơ sở tìm kiếm nhóm",
-    "adminGroup": "Nhóm Admin",
-    "allowedUsers": "Người dùng được phép"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/zh_CN.json b/plugins/ldap/locales/translated/zh_CN.json
deleted file mode 100644
index c305cfac6..000000000
--- a/plugins/ldap/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "使用 LDAP 登录",
-  "loginWithProvider": "使用{{name}}登录",
-  "loading": "加载中...",
-  "requiredField": "此字段为必填项",
-  "username": "LDAP 用户名",
-  "password": "LDAP 密码",
-  "signIn": "登录",
-  "permissions": {
-    "manage": {
-      "title": "管理 LDAP 目录",
-      "description": "添加、更改和删除用户可用于登录的 LDAP 目录。"
-    }
-  },
-  "providers": {
-    "docsLink": "查看文档",
-    "none": "未配置 LDAP 目录。",
-    "add": "添加目录",
-    "edit": "编辑目录",
-    "delete": "删除目录",
-    "deleteConfirm": "删除此目录？使用此目录登录的用户将无法登录。",
-    "name": "显示名称",
-    "namePlaceholder": "公司名录",
-    "nameRequired": "必须填写显示名称。",
-    "enabled": "已启用",
-    "enabledDesc": "允许用户使用此目录登录。",
-    "dialogDesc": "连接 LDAP 或 Active Directory 服务器，以便用户可以通过它登录。",
-    "sectionGeneral": "常规",
-    "sectionConnection": "连接",
-    "sectionUsers": "用户查找",
-    "sectionAccess": "使用权",
-    "save": "保存目录",
-    "saving": "保存中...",
-    "saved": "已保存",
-    "saveFailed": "保存失败",
-    "deleted": "已删除",
-    "deleteFailed": "删除失败",
-    "loadFailed": "LDAP 目录加载失败",
-    "cancel": "取消"
-  },
-  "fields": {
-    "host": "LDAP 主机",
-    "port": "端口",
-    "useTls": "使用 TLS (LDAPS)",
-    "useTlsDesc": "通过加密的 LDAPS 连接进行连接。",
-    "bindDn": "绑定 DN",
-    "bindPassword": "绑定密码",
-    "secretKeep": "密码已保存。留空则不保存。",
-    "userSearchBase": "用户搜索基准",
-    "userSearchFilter": "用户搜索过滤器",
-    "usernameAttr": "用户名属性",
-    "displayNameAttr": "显示名称属性",
-    "groupSearchBase": "群组搜索基准",
-    "adminGroup": "管理员组",
-    "allowedUsers": "允许的用户"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/locales/translated/zh_TW.json b/plugins/ldap/locales/translated/zh_TW.json
deleted file mode 100644
index 54ba749b8..000000000
--- a/plugins/ldap/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "loginWithLdap": "使用 LDAP 登入",
-  "loginWithProvider": "使用 {{name}} 登入",
-  "loading": "載入中...",
-  "requiredField": "此欄位為必填",
-  "username": "LDAP 使用者名稱",
-  "password": "LDAP 密碼",
-  "signIn": "登入",
-  "permissions": {
-    "manage": {
-      "title": "管理 LDAP 目錄",
-      "description": "新增、變更和刪除使用者可用於登入的 LDAP 目錄。"
-    }
-  },
-  "providers": {
-    "docsLink": "檢視文件",
-    "none": "未配置 LDAP 目錄。",
-    "add": "新增目錄",
-    "edit": "編輯目錄",
-    "delete": "刪除目錄",
-    "deleteConfirm": "刪除此目錄？使用此目錄登入的使用者將無法登入。",
-    "name": "顯示名稱",
-    "namePlaceholder": "公司名錄",
-    "nameRequired": "必須填寫顯示名稱。",
-    "enabled": "已啟用",
-    "enabledDesc": "允許使用者使用此目錄登入。",
-    "dialogDesc": "連接 LDAP 或 Active Directory 伺服器，以便使用者可以透過它登入。",
-    "sectionGeneral": "一般",
-    "sectionConnection": "連線",
-    "sectionUsers": "用戶尋找",
-    "sectionAccess": "使用權",
-    "save": "儲存目錄",
-    "saving": "儲存中…",
-    "saved": "已儲存",
-    "saveFailed": "儲存失敗",
-    "deleted": "已刪除",
-    "deleteFailed": "刪除失敗",
-    "loadFailed": "LDAP 目錄載入失敗",
-    "cancel": "取消"
-  },
-  "fields": {
-    "host": "LDAP 主機",
-    "port": "連接埠",
-    "useTls": "使用 TLS (LDAPS)",
-    "useTlsDesc": "透過加密的 LDAPS 連線進行連線。",
-    "bindDn": "綁定 DN",
-    "bindPassword": "綁定密碼",
-    "secretKeep": "密碼已儲存。留空則不保存。",
-    "userSearchBase": "使用者搜尋基底",
-    "userSearchFilter": "使用者搜尋篩選器",
-    "usernameAttr": "使用者名稱屬性",
-    "displayNameAttr": "顯示名稱屬性",
-    "groupSearchBase": "群組搜尋基底",
-    "adminGroup": "管理員群組",
-    "allowedUsers": "允許的使用者"
-  },
-  "plugin": {
-    "name": "LDAP"
-  }
-}
diff --git a/plugins/ldap/manifest.json b/plugins/ldap/manifest.json
deleted file mode 100644
index 0c32c1e1a..000000000
--- a/plugins/ldap/manifest.json
+++ /dev/null
@@ -1,50 +0,0 @@
-{
-  "id": "ldap",
-  "name": "LDAP",
-  "version": "1.0.0",
-  "description": "Sign in with a username and password checked against an LDAP or Active Directory server.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Access & Security",
-  "icon": "Server",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "db:own",
-    "secrets:own",
-    "network:serve",
-    "auth:provide",
-    "ui:surface"
-  ],
-  "contributes": {
-    "auth": {
-      "loginMethods": ["ldap"]
-    },
-    "permissions": [
-      {
-        "name": "manage",
-        "titleKey": "permissions.manage.title",
-        "descriptionKey": "permissions.manage.description",
-        "defaultRoles": ["admin"]
-      }
-    ],
-    "settings": {
-      "admin": [
-        {
-          "key": "providers",
-          "type": "custom",
-          "component": "providers",
-          "permission": "manage"
-        }
-      ]
-    }
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"],
-  "desktop": "server"
-}
diff --git a/plugins/ldap/migrations/mysql/0001_create_providers.sql b/plugins/ldap/migrations/mysql/0001_create_providers.sql
deleted file mode 100644
index 0acd44d45..000000000
--- a/plugins/ldap/migrations/mysql/0001_create_providers.sql
+++ /dev/null
@@ -1,12 +0,0 @@
--- ldap 0001: create_providers
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `p_ldap_providers` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `name` text NOT NULL,
-  `enabled` boolean NOT NULL DEFAULT true,
-  `display_order` int NOT NULL DEFAULT 0,
-  `config` text NOT NULL,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP)
-);
diff --git a/plugins/ldap/migrations/postgres/0001_create_providers.sql b/plugins/ldap/migrations/postgres/0001_create_providers.sql
deleted file mode 100644
index d27cd1e10..000000000
--- a/plugins/ldap/migrations/postgres/0001_create_providers.sql
+++ /dev/null
@@ -1,12 +0,0 @@
--- ldap 0001: create_providers
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "p_ldap_providers" (
-  "id" serial PRIMARY KEY,
-  "name" text NOT NULL,
-  "enabled" boolean NOT NULL DEFAULT true,
-  "display_order" integer NOT NULL DEFAULT 0,
-  "config" text NOT NULL,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP
-);
diff --git a/plugins/ldap/migrations/snapshot.json b/plugins/ldap/migrations/snapshot.json
deleted file mode 100644
index 362b04235..000000000
--- a/plugins/ldap/migrations/snapshot.json
+++ /dev/null
@@ -1,43 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "providers": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "name": {
-          "type": "text",
-          "notNull": true
-        },
-        "enabled": {
-          "type": "boolean",
-          "notNull": true,
-          "defaultValue": true
-        },
-        "displayOrder": {
-          "type": "integer",
-          "notNull": true,
-          "defaultValue": 0
-        },
-        "config": {
-          "type": "text",
-          "notNull": true
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "updatedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": []
-    }
-  }
-}
diff --git a/plugins/ldap/migrations/sqlite/0001_create_providers.sql b/plugins/ldap/migrations/sqlite/0001_create_providers.sql
deleted file mode 100644
index ae68f949f..000000000
--- a/plugins/ldap/migrations/sqlite/0001_create_providers.sql
+++ /dev/null
@@ -1,12 +0,0 @@
--- ldap 0001: create_providers
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "p_ldap_providers" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "name" text NOT NULL,
-  "enabled" integer NOT NULL DEFAULT 1,
-  "display_order" integer NOT NULL DEFAULT 0,
-  "config" text NOT NULL,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP
-);
diff --git a/plugins/ldap/package.json b/plugins/ldap/package.json
deleted file mode 100644
index 70fda63d3..000000000
--- a/plugins/ldap/package.json
+++ /dev/null
@@ -1,34 +0,0 @@
-{
-  "name": "@termix-plugin/ldap",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "ldapjs": "^3.0.7",
-    "lucide-react": "^1.33.0"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "react": "^19.2.8",
-    "sonner": "^2.0.8"
-  }
-}
diff --git a/plugins/ldap/src/backend/index.ts b/plugins/ldap/src/backend/index.ts
deleted file mode 100644
index 3d3293d5e..000000000
--- a/plugins/ldap/src/backend/index.ts
+++ /dev/null
@@ -1,34 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { providers } from "./tables.js";
-import { createProviderStore } from "./providers.js";
-import { createLdapLogin, METHOD_ID } from "./ldap.js";
-import { registerLdapRoutes } from "./routes.js";
-
-export async function activate(ctx: PluginContext) {
-  const table = await ctx.db.define(providers);
-  const store = createProviderStore(ctx, table);
-
-  // One form per enabled directory.
-  ctx.auth.registerLoginMethod({
-    id: METHOD_ID,
-    labelKey: "loginWithLdap",
-    icon: "server",
-    kind: "form",
-    external: true,
-    describe: async () =>
-      (await store.listRows()).map((row) => ({
-        id: String(row.id),
-        label: row.name,
-        enabled: !!row.enabled,
-        type: "ldap",
-      })),
-    verify: createLdapLogin(ctx, store),
-  });
-
-  registerLdapRoutes(ctx.http.router<Router>(), ctx, store);
-}
-
-export async function deactivate() {
-  // Everything above was registered through ctx and is disposed by core.
-}
diff --git a/plugins/ldap/src/backend/ldap.ts b/plugins/ldap/src/backend/ldap.ts
deleted file mode 100644
index 227b3ea60..000000000
--- a/plugins/ldap/src/backend/ldap.ts
+++ /dev/null
@@ -1,208 +0,0 @@
-/**
- * LDAP sign-in as a form login method: a service bind to find the user, a
- * bind as the user to check the password, then an optional admin group
- * lookup. Core finds or provisions the user and issues the session.
- */
-
-import ldap from "ldapjs";
-import {
-  LoginMethodError,
-  type PluginContext,
-  type PluginLoginRequest,
-  type PluginVerifiedIdentity,
-} from "@termix/plugin-sdk/backend";
-import type { ProviderStore } from "./providers.js";
-import type { LdapConfig } from "./types.js";
-
-export const METHOD_ID = "ldap";
-
-export function ldapEscapeFilter(value: string): string {
-  return value.replace(
-    /[\\*()\x00]/g,
-    (c) => `\\${c.charCodeAt(0).toString(16).padStart(2, "0")}`,
-  );
-}
-
-/** The provider id identities from this directory are stored under. */
-export function identityProvider(providerId: number): string {
-  return `ldap:${providerId}`;
-}
-
-function createClient(config: LdapConfig): ldap.Client {
-  const useTLS = !!config.useTLS;
-  const url = `${useTLS ? "ldaps" : "ldap"}://${config.host}:${config.port || 389}`;
-  return ldap.createClient({
-    url,
-    tlsOptions: useTLS ? { rejectUnauthorized: false } : undefined,
-  });
-}
-
-function bind(client: ldap.Client, dn: string, password: string) {
-  return new Promise<void>((resolve, reject) => {
-    client.bind(dn, password, (err) => (err ? reject(err) : resolve()));
-  });
-}
-
-function search(
-  client: ldap.Client,
-  base: string,
-  filter: string,
-  attributes: string[],
-): Promise<ldap.SearchEntry[]> {
-  return new Promise((resolve, reject) => {
-    const entries: ldap.SearchEntry[] = [];
-    client.search(base, { filter, attributes, scope: "sub" }, (err, res) => {
-      if (err) return reject(err);
-      res.on("searchEntry", (entry) => entries.push(entry));
-      res.on("error", reject);
-      res.on("end", () => resolve(entries));
-    });
-  });
-}
-
-function unbind(client: ldap.Client): void {
-  try {
-    client.unbind();
-  } catch {
-    // best effort
-  }
-}
-
-function firstValue(entry: ldap.SearchEntry, key: string): string {
-  const attr = entry.attributes.find((a) => a.type === key);
-  if (!attr) return "";
-  return Array.isArray(attr.values) ? attr.values[0] : String(attr.values);
-}
-
-export function createLdapLogin(ctx: PluginContext, store: ProviderStore) {
-  return async function verify(
-    request: PluginLoginRequest,
-    instanceId: string | null,
-  ): Promise<PluginVerifiedIdentity> {
-    const body = request.body ?? {};
-    const providerId = Number(instanceId ?? body.providerId);
-    const username = typeof body.username === "string" ? body.username : "";
-    const password = typeof body.password === "string" ? body.password : "";
-
-    if (!Number.isInteger(providerId) || !username || !password) {
-      throw new LoginMethodError(
-        "providerId, username, and password are required",
-        400,
-      );
-    }
-
-    // Same limits as password login: an LDAP bind is a password guess.
-    const clientIp = request.ip || "unknown";
-    const rateLimitKey = `${providerId}:${username}`;
-    const lock = await ctx.auth.loginRateLimit.isLocked(clientIp, rateLimitKey);
-    if (lock.locked) {
-      const error = new LoginMethodError(
-        "Too many login attempts. Please try again later.",
-        429,
-      );
-      Object.assign(error, { remainingTime: lock.remainingTime });
-      throw error;
-    }
-
-    const provider = await store.find(providerId);
-    if (!provider || !provider.enabled) {
-      throw new LoginMethodError("LDAP provider not found", 404);
-    }
-    const config = provider.config;
-    if (
-      !config.host ||
-      !config.bindDN ||
-      !config.userSearchBase ||
-      !config.userSearchFilter
-    ) {
-      throw new LoginMethodError("LDAP provider is misconfigured", 500);
-    }
-
-    const refuse = async (reason: string) => {
-      await ctx.auth.loginRateLimit.recordFailure(clientIp, rateLimitKey);
-      ctx.log.warn(`LDAP login refused for ${username}: ${reason}`);
-      return new LoginMethodError("Invalid username or password", 401);
-    };
-
-    const serviceClient = createClient(config);
-    try {
-      await bind(serviceClient, config.bindDN, config.bindPassword);
-
-      const filter = config.userSearchFilter.replace(
-        /\{\{username\}\}/g,
-        ldapEscapeFilter(username),
-      );
-      const entries = await search(
-        serviceClient,
-        config.userSearchBase,
-        filter,
-        [
-          config.usernameAttribute || "uid",
-          config.displayNameAttribute || "cn",
-          "mail",
-          "email",
-          "distinguishedName",
-        ],
-      );
-      if (entries.length === 0) throw await refuse("user not found");
-
-      const userEntry = entries[0];
-      // AD supplies its DN as an attribute; avoid re-serializing it through ldapjs.
-      const userDN =
-        firstValue(userEntry, "distinguishedName") || userEntry.dn.toString();
-      const uid =
-        firstValue(userEntry, config.usernameAttribute || "uid") || username;
-      const displayName =
-        firstValue(userEntry, config.displayNameAttribute || "cn") || username;
-      const email =
-        firstValue(userEntry, "mail") || firstValue(userEntry, "email") || "";
-
-      const userClient = createClient(config);
-      try {
-        await bind(userClient, userDN, password);
-      } catch {
-        throw await refuse("wrong password");
-      } finally {
-        unbind(userClient);
-      }
-
-      let isAdmin: boolean | undefined;
-      if (config.adminGroup && config.groupSearchBase) {
-        isAdmin = false;
-        try {
-          const groups = await search(
-            serviceClient,
-            config.groupSearchBase,
-            `(member=${ldapEscapeFilter(userDN)})`,
-            ["cn", "dn"],
-          );
-          isAdmin = groups.some(
-            (group) =>
-              firstValue(group, "cn") === config.adminGroup ||
-              group.dn.toString() === config.adminGroup,
-          );
-        } catch (error) {
-          ctx.log.warn(`LDAP group check failed: ${String(error)}`);
-        }
-      }
-
-      return {
-        kind: "external",
-        provider: identityProvider(providerId),
-        subject: uid,
-        email: email || null,
-        name: displayName,
-        isAdmin,
-        allowedUsers: config.allowedUsers ?? null,
-        legacy: {
-          identifier: `ldap:${providerId}:${uid}`,
-          providerRowId: providerId,
-        },
-        rememberMe: !!body.rememberMe,
-        rateLimitKey,
-      };
-    } finally {
-      unbind(serviceClient);
-    }
-  };
-}
diff --git a/plugins/ldap/src/backend/providers.ts b/plugins/ldap/src/backend/providers.ts
deleted file mode 100644
index 1210c5bee..000000000
--- a/plugins/ldap/src/backend/providers.ts
+++ /dev/null
@@ -1,141 +0,0 @@
-import { and, asc, desc, eq } from "drizzle-orm";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { LdapConfig, ProviderRow } from "./types.js";
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// ctx.db.define hands the table back untyped and the drizzle handle is the
-// server's own, so both are typed at this module's edge.
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-const LEGACY_PREFIXES = ["encoded:", "encrypted:"];
-
-export type ProviderStore = ReturnType<typeof createProviderStore>;
-
-export function createProviderStore(ctx: PluginContext, table: Table) {
-  const client = () => ctx.db.client<Drizzle>();
-
-  /** Opens the bind password: sealed, or the 2.8 base64 forms. */
-  async function openSecret(value: string): Promise<string> {
-    const prefix = LEGACY_PREFIXES.find((p) => value.startsWith(p));
-    if (prefix) {
-      return Buffer.from(value.slice(prefix.length), "base64").toString("utf8");
-    }
-    return (await ctx.secrets.unseal(value)) ?? value;
-  }
-
-  async function parseConfig(raw: string): Promise<LdapConfig> {
-    let config: Record<string, unknown>;
-    try {
-      config = JSON.parse(raw);
-    } catch {
-      config = {};
-    }
-    if (typeof config.bindPassword === "string" && config.bindPassword) {
-      config.bindPassword = await openSecret(config.bindPassword);
-    }
-    return config as unknown as LdapConfig;
-  }
-
-  async function sealConfig(config: Record<string, unknown>): Promise<string> {
-    const out = { ...config };
-    if (typeof out.bindPassword === "string" && out.bindPassword) {
-      out.bindPassword = await ctx.secrets.seal(out.bindPassword);
-    }
-    return JSON.stringify(out);
-  }
-
-  async function findRow(id: number): Promise<ProviderRow | null> {
-    const drizzle = await client();
-    const rows = (await drizzle
-      .select()
-      .from(table)
-      .where(eq(table.id, id))
-      .limit(1)) as ProviderRow[];
-    return rows[0] ?? null;
-  }
-
-  return {
-    parseConfig,
-    findRow,
-
-    async listRows(): Promise<ProviderRow[]> {
-      const drizzle = await client();
-      return (await drizzle
-        .select()
-        .from(table)
-        .orderBy(asc(table.displayOrder), asc(table.id))) as ProviderRow[];
-    },
-
-    async find(id: number): Promise<{
-      row: ProviderRow;
-      enabled: boolean;
-      config: LdapConfig;
-    } | null> {
-      const row = await findRow(id);
-      if (!row) return null;
-      return {
-        row,
-        enabled: !!row.enabled,
-        config: await parseConfig(row.config),
-      };
-    },
-
-    async create(input: {
-      name: string;
-      enabled: boolean;
-      displayOrder: number;
-      config: Record<string, unknown>;
-    }): Promise<ProviderRow> {
-      const drizzle = await client();
-      const now = new Date().toISOString();
-      await drizzle.insert(table).values({
-        name: input.name,
-        enabled: input.enabled,
-        displayOrder: input.displayOrder,
-        config: await sealConfig(input.config),
-        createdAt: now,
-        updatedAt: now,
-      });
-      await ctx.db.persist();
-      // No returning() on every engine: find the row by what was written.
-      const rows = (await drizzle
-        .select()
-        .from(table)
-        .where(and(eq(table.name, input.name), eq(table.createdAt, now)))
-        .orderBy(desc(table.id))
-        .limit(1)) as ProviderRow[];
-      return rows[0];
-    },
-
-    async update(
-      id: number,
-      values: Partial<{
-        name: string;
-        enabled: boolean;
-        displayOrder: number;
-        config: Record<string, unknown>;
-      }>,
-    ): Promise<ProviderRow | null> {
-      const drizzle = await client();
-      const { config, ...rest } = values;
-      await drizzle
-        .update(table)
-        .set({
-          ...rest,
-          ...(config ? { config: await sealConfig(config) } : {}),
-          updatedAt: new Date().toISOString(),
-        })
-        .where(eq(table.id, id));
-      await ctx.db.persist();
-      return findRow(id);
-    },
-
-    async remove(id: number): Promise<void> {
-      const drizzle = await client();
-      await drizzle.delete(table).where(eq(table.id, id));
-      await ctx.db.persist();
-    },
-  };
-}
diff --git a/plugins/ldap/src/backend/routes.ts b/plugins/ldap/src/backend/routes.ts
deleted file mode 100644
index 2b67570c8..000000000
--- a/plugins/ldap/src/backend/routes.ts
+++ /dev/null
@@ -1,265 +0,0 @@
-import type { Request, Response, Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { identityProvider } from "./ldap.js";
-import type { ProviderStore } from "./providers.js";
-import { REQUIRED_FIELDS, type ProviderRow } from "./types.js";
-
-function fail(
-  ctx: PluginContext,
-  res: Response,
-  message: string,
-  error: unknown,
-) {
-  ctx.log.error(
-    message,
-    error instanceof Error ? error : new Error(String(error)),
-  );
-  res.status(500).json({ error: message });
-}
-
-function missingFields(config: Record<string, unknown>): string[] {
-  return REQUIRED_FIELDS.filter((field) => !config[field]);
-}
-
-export function registerLdapRoutes(
-  router: Router,
-  ctx: PluginContext,
-  store: ProviderStore,
-): void {
-  router.use(ctx.rbac.require("manage") as never);
-
-  async function present(row: ProviderRow) {
-    const { bindPassword, ...config } = (await store.parseConfig(
-      row.config,
-    )) as unknown as Record<string, unknown>;
-    return {
-      id: row.id,
-      name: row.name,
-      enabled: !!row.enabled,
-      displayOrder: row.displayOrder,
-      config,
-      hasBindPassword: typeof bindPassword === "string" && !!bindPassword,
-    };
-  }
-
-  /**
-   * @openapi
-   * /plugin-api/ldap/providers:
-   *   get:
-   *     summary: List LDAP directories
-   *     description: Every configured LDAP directory. The bind password is never sent, only whether one is set. Needs ldap.manage.
-   *     tags:
-   *       - LDAP
-   *     responses:
-   *       200:
-   *         description: Directories.
-   *       403:
-   *         description: Missing permission.
-   */
-  router.get("/providers", async (_req: Request, res: Response) => {
-    try {
-      const rows = await store.listRows();
-      res.json({ providers: await Promise.all(rows.map(present)) });
-    } catch (error) {
-      fail(ctx, res, "Failed to list LDAP providers", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/ldap/providers:
-   *   post:
-   *     summary: Add an LDAP directory
-   *     description: Needs ldap.manage.
-   *     tags:
-   *       - LDAP
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               name:
-   *                 type: string
-   *               enabled:
-   *                 type: boolean
-   *               config:
-   *                 type: object
-   *     responses:
-   *       201:
-   *         description: Directory added.
-   *       400:
-   *         description: Missing fields.
-   *       403:
-   *         description: Missing permission.
-   */
-  router.post("/providers", async (req: Request, res: Response) => {
-    try {
-      const {
-        name,
-        enabled = true,
-        displayOrder = 0,
-        config = {},
-      } = req.body ?? {};
-      if (typeof name !== "string" || !name.trim()) {
-        res.status(400).json({ error: "Provider name is required" });
-        return;
-      }
-      const missing = missingFields(config);
-      if (missing.length > 0) {
-        res.status(400).json({
-          error: `Missing required LDAP fields: ${missing.join(", ")}`,
-        });
-        return;
-      }
-      const row = await store.create({
-        name: name.trim(),
-        enabled: !!enabled,
-        displayOrder: Number(displayOrder) || 0,
-        config: { ...(config as Record<string, unknown>) },
-      });
-      await ctx.audit.record({
-        action: "ldap_provider_create",
-        resourceType: "ldap_provider",
-        resourceId: String(row.id),
-        resourceName: row.name,
-        success: true,
-      });
-      res.status(201).json(await present(row));
-    } catch (error) {
-      fail(ctx, res, "Failed to create LDAP provider", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/ldap/providers/{id}:
-   *   put:
-   *     summary: Update an LDAP directory
-   *     description: Config fields are merged over the stored ones; an empty bind password keeps the stored one. Needs ldap.manage.
-   *     tags:
-   *       - LDAP
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Directory updated.
-   *       400:
-   *         description: Missing fields.
-   *       403:
-   *         description: Missing permission.
-   *       404:
-   *         description: Directory not found.
-   */
-  router.put("/providers/:id", async (req: Request, res: Response) => {
-    try {
-      const id = Number.parseInt(String(req.params.id), 10);
-      const row = Number.isInteger(id) ? await store.findRow(id) : null;
-      if (!row) {
-        res.status(404).json({ error: "Provider not found" });
-        return;
-      }
-      const { name, enabled, displayOrder, config } = req.body ?? {};
-      const values: Parameters<ProviderStore["update"]>[1] = {};
-      if (name !== undefined) {
-        if (typeof name !== "string" || !name.trim()) {
-          res.status(400).json({ error: "Provider name is required" });
-          return;
-        }
-        values.name = name.trim();
-      }
-      if (enabled !== undefined) values.enabled = !!enabled;
-      if (displayOrder !== undefined) {
-        values.displayOrder = Number(displayOrder) || 0;
-      }
-      if (config && typeof config === "object") {
-        const incoming = { ...(config as Record<string, unknown>) };
-        if (!incoming.bindPassword) delete incoming.bindPassword;
-        const merged = {
-          ...((await store.parseConfig(row.config)) as unknown as Record<
-            string,
-            unknown
-          >),
-          ...incoming,
-        };
-        const missing = missingFields(merged);
-        if (missing.length > 0) {
-          res.status(400).json({
-            error: `Missing required LDAP fields: ${missing.join(", ")}`,
-          });
-          return;
-        }
-        values.config = merged;
-      }
-      const updated = await store.update(id, values);
-      await ctx.audit.record({
-        action: "ldap_provider_update",
-        resourceType: "ldap_provider",
-        resourceId: String(id),
-        resourceName: updated?.name ?? row.name,
-        success: true,
-      });
-      res.json(await present(updated ?? row));
-    } catch (error) {
-      fail(ctx, res, "Failed to update LDAP provider", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/ldap/providers/{id}:
-   *   delete:
-   *     summary: Delete an LDAP directory
-   *     description: Refused while users still sign in with it. Needs ldap.manage.
-   *     tags:
-   *       - LDAP
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Directory deleted.
-   *       403:
-   *         description: Missing permission.
-   *       404:
-   *         description: Directory not found.
-   *       409:
-   *         description: Users are still linked to it.
-   */
-  router.delete("/providers/:id", async (req: Request, res: Response) => {
-    try {
-      const id = Number.parseInt(String(req.params.id), 10);
-      const row = Number.isInteger(id) ? await store.findRow(id) : null;
-      if (!row) {
-        res.status(404).json({ error: "Provider not found" });
-        return;
-      }
-      if ((await ctx.auth.countLinkedUsers(identityProvider(id))) > 0) {
-        res.status(409).json({
-          error:
-            "Users still sign in with this directory. Disable it instead, or remove those users first.",
-        });
-        return;
-      }
-      await store.remove(id);
-      await ctx.audit.record({
-        action: "ldap_provider_delete",
-        resourceType: "ldap_provider",
-        resourceId: String(id),
-        resourceName: row.name,
-        success: true,
-      });
-      res.json({ message: "LDAP provider deleted" });
-    } catch (error) {
-      fail(ctx, res, "Failed to delete LDAP provider", error);
-    }
-  });
-}
diff --git a/plugins/ldap/src/backend/tables.ts b/plugins/ldap/src/backend/tables.ts
deleted file mode 100644
index de2293d19..000000000
--- a/plugins/ldap/src/backend/tables.ts
+++ /dev/null
@@ -1,24 +0,0 @@
-import {
-  boolean,
-  defineTable,
-  id,
-  integer,
-  text,
-  timestamp,
-} from "@termix/plugin-sdk/db";
-
-/**
- * LDAP directories. Rows from 2.8 are copied in from sso_providers by core's
- * boot migration, keeping their ids, because identities point at them.
- */
-export const providers = defineTable("providers", {
-  id: id(),
-  name: text().notNull(),
-  enabled: boolean().notNull().default(true),
-  displayOrder: integer().notNull().default(0),
-  config: text().notNull(),
-  createdAt: timestamp().notNull().defaultNow(),
-  updatedAt: timestamp().notNull().defaultNow(),
-});
-
-export const tables = [providers];
diff --git a/plugins/ldap/src/backend/types.ts b/plugins/ldap/src/backend/types.ts
deleted file mode 100644
index 337fa4c2a..000000000
--- a/plugins/ldap/src/backend/types.ts
+++ /dev/null
@@ -1,34 +0,0 @@
-export interface LdapConfig {
-  host: string;
-  port: number;
-  useTLS: boolean;
-  bindDN: string;
-  bindPassword: string;
-  userSearchBase: string;
-  userSearchFilter: string;
-  usernameAttribute: string;
-  displayNameAttribute: string;
-  groupSearchBase?: string;
-  adminGroup?: string;
-  allowedUsers?: string;
-}
-
-export interface ProviderRow {
-  id: number;
-  name: string;
-  enabled: boolean;
-  displayOrder: number;
-  config: string;
-  createdAt: string;
-  updatedAt: string;
-}
-
-export const REQUIRED_FIELDS = [
-  "host",
-  "port",
-  "bindDN",
-  "bindPassword",
-  "userSearchBase",
-  "userSearchFilter",
-  "usernameAttribute",
-] as const;
diff --git a/plugins/ldap/src/frontend/LdapLoginForms.tsx b/plugins/ldap/src/frontend/LdapLoginForms.tsx
deleted file mode 100644
index 4811971c4..000000000
--- a/plugins/ldap/src/frontend/LdapLoginForms.tsx
+++ /dev/null
@@ -1,101 +0,0 @@
-import { useEffect, useState } from "react";
-import { ChevronDown, ChevronUp } from "lucide-react";
-import { toast } from "sonner";
-import { Button, Input } from "@termix/plugin-sdk/ui";
-import {
-  useTranslation,
-  type LoginMethodUIProps,
-} from "@termix/plugin-sdk/frontend";
-
-const labelClass =
-  "text-[10px] font-bold uppercase tracking-widest text-muted-foreground";
-
-/** A collapsible username and password form per enabled directory. */
-export function LdapLoginForms({
-  instances,
-  disabled,
-  submit,
-}: LoginMethodUIProps) {
-  const { t } = useTranslation();
-  const [expandedId, setExpandedId] = useState<string | null>(null);
-  const [username, setUsername] = useState("");
-  const [password, setPassword] = useState("");
-  const [loading, setLoading] = useState(false);
-
-  useEffect(() => {
-    setUsername("");
-    setPassword("");
-  }, [expandedId]);
-
-  return (
-    <>
-      {instances.map((instance) => {
-        const expanded = expandedId === instance.id;
-        return (
-          <div key={instance.id} className="flex flex-col border border-border">
-            <button
-              type="button"
-              onClick={() => setExpandedId(expanded ? null : instance.id)}
-              className="flex items-center justify-between w-full px-3 py-2.5 text-xs font-bold uppercase tracking-widest text-muted-foreground hover:text-foreground hover:bg-muted transition-colors"
-            >
-              <span>{t("loginWithProvider", { name: instance.label })}</span>
-              {expanded ? (
-                <ChevronUp className="size-3.5" />
-              ) : (
-                <ChevronDown className="size-3.5" />
-              )}
-            </button>
-            {expanded && (
-              <form
-                onSubmit={async (event) => {
-                  event.preventDefault();
-                  if (!username.trim() || !password) {
-                    toast.error(t("requiredField"));
-                    return;
-                  }
-                  setLoading(true);
-                  try {
-                    await submit(
-                      { username: username.trim(), password },
-                      instance.id,
-                    );
-                  } finally {
-                    setLoading(false);
-                  }
-                }}
-                className="flex flex-col gap-3 p-3 border-t border-border"
-              >
-                <label className="flex flex-col gap-1.5">
-                  <span className={labelClass}>{t("username")}</span>
-                  <Input
-                    value={username}
-                    onChange={(e) => setUsername(e.target.value)}
-                    disabled={disabled || loading}
-                    autoFocus
-                  />
-                </label>
-                <label className="flex flex-col gap-1.5">
-                  <span className={labelClass}>{t("password")}</span>
-                  <Input
-                    type="password"
-                    value={password}
-                    onChange={(e) => setPassword(e.target.value)}
-                    disabled={disabled || loading}
-                    className="font-mono"
-                  />
-                </label>
-                <Button
-                  type="submit"
-                  className="w-full bg-accent-brand hover:bg-accent-brand/90 text-background font-bold"
-                  disabled={disabled || loading}
-                >
-                  {loading ? t("loading") : t("signIn")}
-                </Button>
-              </form>
-            )}
-          </div>
-        );
-      })}
-    </>
-  );
-}
diff --git a/plugins/ldap/src/frontend/ProvidersSetting.tsx b/plugins/ldap/src/frontend/ProvidersSetting.tsx
deleted file mode 100644
index 5889eb004..000000000
--- a/plugins/ldap/src/frontend/ProvidersSetting.tsx
+++ /dev/null
@@ -1,432 +0,0 @@
-import { useCallback, useEffect, useState, type ReactNode } from "react";
-import { Pencil, Plus, Trash2 } from "lucide-react";
-import { toast } from "sonner";
-import {
-  Button,
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogHeader,
-  DialogTitle,
-  FakeSwitch,
-  Input,
-  PasswordInput,
-  SettingRow,
-} from "@termix/plugin-sdk/ui";
-import { usePluginApi, useTranslation } from "@termix/plugin-sdk/frontend";
-import { createLdapApi, type LdapProvider } from "./ldap-api";
-
-type Fields = {
-  host: string;
-  port: string;
-  useTLS: boolean;
-  bindDN: string;
-  bindPassword: string;
-  userSearchBase: string;
-  userSearchFilter: string;
-  usernameAttribute: string;
-  displayNameAttribute: string;
-  groupSearchBase: string;
-  adminGroup: string;
-  allowedUsers: string;
-};
-
-const EMPTY_FIELDS: Fields = {
-  host: "",
-  port: "389",
-  useTLS: false,
-  bindDN: "",
-  bindPassword: "",
-  userSearchBase: "",
-  userSearchFilter: "(uid={{username}})",
-  usernameAttribute: "uid",
-  displayNameAttribute: "cn",
-  groupSearchBase: "",
-  adminGroup: "",
-  allowedUsers: "",
-};
-
-function errorMessage(error: unknown, fallback: string): string {
-  const err = error as {
-    response?: { data?: { error?: string } };
-    message?: string;
-  };
-  return err.response?.data?.error || err.message || fallback;
-}
-
-function Field({
-  label,
-  required,
-  hint,
-  children,
-}: {
-  label: string;
-  required?: boolean;
-  hint?: string;
-  children: ReactNode;
-}) {
-  return (
-    <div className="flex flex-col gap-1.5 min-w-0">
-      <label className="text-xs font-semibold">
-        {label}
-        {required && <span className="text-accent-brand ml-1">*</span>}
-      </label>
-      {children}
-      {hint && (
-        <p className="text-[10px] text-muted-foreground leading-snug">{hint}</p>
-      )}
-    </div>
-  );
-}
-
-function Section({ title, children }: { title: string; children: ReactNode }) {
-  return (
-    <div className="flex flex-col gap-3">
-      <span className="text-[10px] font-semibold text-muted-foreground uppercase tracking-widest">
-        {title}
-      </span>
-      {children}
-    </div>
-  );
-}
-
-function ProviderDialog({
-  open,
-  onOpenChange,
-  provider,
-  onSaved,
-}: {
-  open: boolean;
-  onOpenChange: (open: boolean) => void;
-  provider: LdapProvider | null;
-  onSaved: () => void;
-}) {
-  const { t } = useTranslation();
-  const api = createLdapApi(usePluginApi());
-  const [name, setName] = useState("");
-  const [enabled, setEnabled] = useState(true);
-  const [fields, setFields] = useState<Fields>(EMPTY_FIELDS);
-  const [saving, setSaving] = useState(false);
-
-  useEffect(() => {
-    if (!open) return;
-    setName(provider?.name ?? "");
-    setEnabled(provider?.enabled ?? true);
-    const config = provider?.config ?? {};
-    const next = { ...EMPTY_FIELDS };
-    for (const key of Object.keys(next) as Array<keyof Fields>) {
-      const value = config[key];
-      if (key === "useTLS") next.useTLS = value === true;
-      else if (key === "port" && value !== undefined) next.port = String(value);
-      else if (typeof value === "string") next[key] = value as never;
-    }
-    next.bindPassword = "";
-    setFields(next);
-  }, [open, provider]);
-
-  const set = (key: Exclude<keyof Fields, "useTLS">) => (value: string) =>
-    setFields((prev) => ({ ...prev, [key]: value }));
-
-  async function save() {
-    if (!name.trim()) {
-      toast.error(t("providers.nameRequired"));
-      return;
-    }
-    const config: Record<string, unknown> = {
-      host: fields.host.trim(),
-      port: Number.parseInt(fields.port, 10) || 389,
-      useTLS: fields.useTLS,
-      bindDN: fields.bindDN.trim(),
-      userSearchBase: fields.userSearchBase.trim(),
-      userSearchFilter: fields.userSearchFilter.trim(),
-      usernameAttribute: fields.usernameAttribute.trim() || "uid",
-      displayNameAttribute: fields.displayNameAttribute.trim() || "cn",
-      groupSearchBase: fields.groupSearchBase.trim() || undefined,
-      adminGroup: fields.adminGroup.trim() || undefined,
-      allowedUsers: fields.allowedUsers.trim() || undefined,
-    };
-    if (fields.bindPassword) config.bindPassword = fields.bindPassword;
-    setSaving(true);
-    try {
-      const input = { name: name.trim(), enabled, config };
-      if (provider) await api.update(provider.id, input);
-      else await api.create(input);
-      toast.success(t("providers.saved"));
-      onSaved();
-      onOpenChange(false);
-    } catch (error) {
-      toast.error(errorMessage(error, t("providers.saveFailed")));
-    } finally {
-      setSaving(false);
-    }
-  }
-
-  const text = (
-    key: Exclude<keyof Fields, "useTLS" | "bindPassword">,
-    label: string,
-    placeholder: string,
-    required = false,
-  ) => (
-    <Field label={label} required={required}>
-      <Input
-        value={fields[key]}
-        onChange={(e) => set(key)(e.target.value)}
-        placeholder={placeholder}
-      />
-    </Field>
-  );
-
-  return (
-    <Dialog open={open} onOpenChange={onOpenChange}>
-      <DialogContent className="flex flex-col gap-0 p-0 overflow-hidden w-[calc(100vw-2rem)] sm:max-w-xl max-h-[calc(100dvh-2rem)]">
-        <DialogHeader className="px-4 pt-4 pb-3 pr-10 border-b border-border shrink-0">
-          <DialogTitle className="text-lg font-bold">
-            {provider ? t("providers.edit") : t("providers.add")}
-          </DialogTitle>
-          <DialogDescription className="text-xs text-muted-foreground">
-            {t("providers.dialogDesc")}{" "}
-            <a
-              href="https://docs.termix.site/features/authentication/ldap"
-              target="_blank"
-              rel="noreferrer"
-              className="text-accent-brand hover:underline"
-            >
-              {t("providers.docsLink")}
-            </a>
-          </DialogDescription>
-        </DialogHeader>
-
-        <div className="flex-1 min-h-0 overflow-y-auto px-4 py-4 flex flex-col gap-6">
-          <Section title={t("providers.sectionGeneral")}>
-            <Field label={t("providers.name")} required>
-              <Input
-                value={name}
-                onChange={(e) => setName(e.target.value)}
-                placeholder={t("providers.namePlaceholder")}
-              />
-            </Field>
-            <div className="border border-border px-3">
-              <SettingRow
-                label={t("providers.enabled")}
-                description={t("providers.enabledDesc")}
-              >
-                <FakeSwitch checked={enabled} onChange={setEnabled} />
-              </SettingRow>
-            </div>
-          </Section>
-
-          <Section title={t("providers.sectionConnection")}>
-            <div className="grid grid-cols-1 sm:grid-cols-[1fr_8rem] gap-3">
-              {text("host", t("fields.host"), "ldap.example.com", true)}
-              {text("port", t("fields.port"), "389", true)}
-            </div>
-            <div className="border border-border px-3">
-              <SettingRow
-                label={t("fields.useTls")}
-                description={t("fields.useTlsDesc")}
-              >
-                <FakeSwitch
-                  checked={fields.useTLS}
-                  onChange={(useTLS) =>
-                    setFields((prev) => ({ ...prev, useTLS }))
-                  }
-                />
-              </SettingRow>
-            </div>
-            <div className="grid grid-cols-1 sm:grid-cols-2 gap-3">
-              {text(
-                "bindDN",
-                t("fields.bindDn"),
-                "cn=admin,dc=example,dc=com",
-                true,
-              )}
-              <Field
-                label={t("fields.bindPassword")}
-                required={!provider?.hasBindPassword}
-                hint={
-                  provider?.hasBindPassword ? t("fields.secretKeep") : undefined
-                }
-              >
-                <PasswordInput
-                  value={fields.bindPassword}
-                  onChange={(e) => set("bindPassword")(e.target.value)}
-                />
-              </Field>
-            </div>
-          </Section>
-
-          <Section title={t("providers.sectionUsers")}>
-            {text(
-              "userSearchBase",
-              t("fields.userSearchBase"),
-              "ou=users,dc=example,dc=com",
-              true,
-            )}
-            {text(
-              "userSearchFilter",
-              t("fields.userSearchFilter"),
-              "(uid={{username}})",
-              true,
-            )}
-            <div className="grid grid-cols-1 sm:grid-cols-2 gap-3">
-              {text("usernameAttribute", t("fields.usernameAttr"), "uid", true)}
-              {text(
-                "displayNameAttribute",
-                t("fields.displayNameAttr"),
-                "cn",
-                true,
-              )}
-            </div>
-          </Section>
-
-          <Section title={t("providers.sectionAccess")}>
-            {text(
-              "groupSearchBase",
-              t("fields.groupSearchBase"),
-              "ou=groups,dc=example,dc=com",
-            )}
-            {text(
-              "adminGroup",
-              t("fields.adminGroup"),
-              "cn=admins,ou=groups,dc=example,dc=com",
-            )}
-            {text(
-              "allowedUsers",
-              t("fields.allowedUsers"),
-              "user1,user2,@domain.com",
-            )}
-          </Section>
-        </div>
-
-        <div className="flex items-center justify-end gap-2 px-4 py-3 border-t border-border shrink-0">
-          <Button variant="ghost" onClick={() => onOpenChange(false)}>
-            {t("providers.cancel")}
-          </Button>
-          <Button
-            variant="outline"
-            className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-            onClick={save}
-            disabled={saving}
-          >
-            {saving ? t("providers.saving") : t("providers.save")}
-          </Button>
-        </div>
-      </DialogContent>
-    </Dialog>
-  );
-}
-
-/**
- * The "providers" custom field on the plugin's admin settings page: the
- * directory list with an editor.
- */
-export function ProvidersSetting() {
-  const { t } = useTranslation();
-  const api = createLdapApi(usePluginApi());
-  const [providers, setProviders] = useState<LdapProvider[] | null>(null);
-  const [dialogOpen, setDialogOpen] = useState(false);
-  const [editing, setEditing] = useState<LdapProvider | null>(null);
-
-  const load = useCallback(async () => {
-    try {
-      setProviders(await api.list());
-    } catch (error) {
-      setProviders([]);
-      toast.error(errorMessage(error, t("providers.loadFailed")));
-    }
-    // api is rebuilt each render from the same client.
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, []);
-
-  useEffect(() => {
-    void load();
-  }, [load]);
-
-  async function toggleEnabled(provider: LdapProvider) {
-    try {
-      await api.update(provider.id, { enabled: !provider.enabled });
-      await load();
-    } catch (error) {
-      toast.error(errorMessage(error, t("providers.saveFailed")));
-    }
-  }
-
-  async function remove(provider: LdapProvider) {
-    if (!window.confirm(t("providers.deleteConfirm"))) return;
-    try {
-      await api.remove(provider.id);
-      toast.success(t("providers.deleted"));
-      await load();
-    } catch (error) {
-      toast.error(errorMessage(error, t("providers.deleteFailed")));
-    }
-  }
-
-  if (providers === null) return null;
-
-  return (
-    <div className="flex flex-col gap-3 py-3 border-b border-border last:border-0">
-      {providers.length === 0 ? (
-        <span className="text-xs text-muted-foreground">
-          {t("providers.none")}
-        </span>
-      ) : (
-        <div className="flex flex-col gap-2">
-          {providers.map((provider) => (
-            <div
-              key={provider.id}
-              className="flex items-center gap-2 p-3 border border-border bg-background"
-            >
-              <span className="flex-1 min-w-0 text-sm font-medium truncate">
-                {provider.name}
-              </span>
-              <FakeSwitch
-                checked={provider.enabled}
-                onChange={() => void toggleEnabled(provider)}
-              />
-              <Button
-                variant="ghost"
-                size="sm"
-                className="h-7 w-7 p-0 text-muted-foreground hover:text-foreground"
-                onClick={() => {
-                  setEditing(provider);
-                  setDialogOpen(true);
-                }}
-                title={t("providers.edit")}
-              >
-                <Pencil className="size-3" />
-              </Button>
-              <Button
-                variant="ghost"
-                size="sm"
-                className="h-7 w-7 p-0 text-muted-foreground hover:text-destructive"
-                onClick={() => void remove(provider)}
-                title={t("providers.delete")}
-              >
-                <Trash2 className="size-3" />
-              </Button>
-            </div>
-          ))}
-        </div>
-      )}
-      <Button
-        variant="outline"
-        size="sm"
-        className="self-start text-xs border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-        onClick={() => {
-          setEditing(null);
-          setDialogOpen(true);
-        }}
-      >
-        <Plus className="size-3" />
-        {t("providers.add")}
-      </Button>
-      <ProviderDialog
-        open={dialogOpen}
-        onOpenChange={setDialogOpen}
-        provider={editing}
-        onSaved={() => void load()}
-      />
-    </div>
-  );
-}
diff --git a/plugins/ldap/src/frontend/index.tsx b/plugins/ldap/src/frontend/index.tsx
deleted file mode 100644
index 2ab503901..000000000
--- a/plugins/ldap/src/frontend/index.tsx
+++ /dev/null
@@ -1,12 +0,0 @@
-import type { TermixApp } from "@termix/plugin-sdk/frontend";
-import { LdapLoginForms } from "./LdapLoginForms";
-import { ProvidersSetting } from "./ProvidersSetting";
-
-export function activate(app: TermixApp): void {
-  app.registerLoginMethod({
-    id: "ldap",
-    titleKey: "loginWithLdap",
-    component: LdapLoginForms,
-  });
-  app.registerSettingsComponent("providers", ProvidersSetting);
-}
diff --git a/plugins/ldap/src/frontend/ldap-api.ts b/plugins/ldap/src/frontend/ldap-api.ts
deleted file mode 100644
index 16db12a6d..000000000
--- a/plugins/ldap/src/frontend/ldap-api.ts
+++ /dev/null
@@ -1,35 +0,0 @@
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-
-export interface LdapProvider {
-  id: number;
-  name: string;
-  enabled: boolean;
-  displayOrder: number;
-  config: Record<string, unknown>;
-  hasBindPassword: boolean;
-}
-
-export interface LdapProviderInput {
-  name?: string;
-  enabled?: boolean;
-  config?: Record<string, unknown>;
-}
-
-/** Paths are relative to /plugin-api/ldap/. */
-export function createLdapApi(api: PluginApiClient) {
-  return {
-    async list() {
-      return (await api.get<{ providers: LdapProvider[] }>("/providers")).data
-        .providers;
-    },
-    async create(input: LdapProviderInput) {
-      return (await api.post<LdapProvider>("/providers", input)).data;
-    },
-    async update(id: number, input: LdapProviderInput) {
-      return (await api.put<LdapProvider>(`/providers/${id}`, input)).data;
-    },
-    async remove(id: number) {
-      await api.delete(`/providers/${id}`);
-    },
-  };
-}
diff --git a/plugins/ldap/tests/backend/helpers.ts b/plugins/ldap/tests/backend/helpers.ts
deleted file mode 100644
index 1511d2be1..000000000
--- a/plugins/ldap/tests/backend/helpers.ts
+++ /dev/null
@@ -1,125 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-export const manifest = manifestJson as unknown as PluginManifest;
-
-export interface TestServer {
-  db: TestDb;
-  mock: MockPluginContext;
-  request: (
-    method: string,
-    path: string,
-    options?: {
-      user?: string;
-      body?: unknown;
-      form?: Record<string, string>;
-      headers?: Record<string, string>;
-    },
-    // Route bodies vary per test; asserting on them is the point.
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any; location: string | null }>;
-  close: () => Promise<void>;
-}
-
-const realFetch = globalThis.fetch;
-
-export async function startServer(
-  options: {
-    capabilities?: string[];
-    permissions?: string[];
-    linkedUsers?: Record<string, number>;
-    loginAttemptLimit?: number;
-    before?: (sqlite: TestDb["sqlite"]) => void;
-  } = {},
-): Promise<TestServer> {
-  const db = await createTestDb(pluginDir, { before: options.before });
-  db.sqlite
-    .prepare("INSERT INTO users (id, username, is_admin) VALUES (?, ?, 1)")
-    .run("admin", "admin");
-
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: options.capabilities ?? manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    permissions: options.permissions,
-    linkedUsers: options.linkedUsers,
-    loginAttemptLimit: options.loginAttemptLimit,
-  });
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use(express.json());
-  app.use(express.urlencoded({ extended: false }));
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") || undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    db,
-    mock,
-    async request(
-      method,
-      path,
-      { user = "admin", body, form, headers = {} } = {},
-    ) {
-      const payload =
-        form !== undefined
-          ? new URLSearchParams(form).toString()
-          : body !== undefined && method !== "GET"
-            ? JSON.stringify(body)
-            : undefined;
-      const response = await realFetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        redirect: "manual",
-        headers: {
-          "x-test-user": user,
-          ...(form !== undefined
-            ? { "content-type": "application/x-www-form-urlencoded" }
-            : payload !== undefined
-              ? { "content-type": "application/json" }
-              : {}),
-          ...headers,
-        },
-        body: payload,
-      });
-      const text = await response.text();
-      let parsed: unknown = null;
-      try {
-        parsed = text ? JSON.parse(text) : null;
-      } catch {
-        parsed = text;
-      }
-      return {
-        status: response.status,
-        body: parsed,
-        location: response.headers.get("location"),
-      };
-    },
-    async close() {
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-      db.close();
-    },
-  };
-}
diff --git a/plugins/ldap/tests/backend/ldap.test.ts b/plugins/ldap/tests/backend/ldap.test.ts
deleted file mode 100644
index 0e7b8cd95..000000000
--- a/plugins/ldap/tests/backend/ldap.test.ts
+++ /dev/null
@@ -1,330 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { startServer, type TestServer } from "./helpers.js";
-
-const directory = vi.hoisted(() => ({
-  users: {} as Record<
-    string,
-    { dn: string; password: string; attrs: Record<string, string> }
-  >,
-  adminDns: [] as string[],
-  servicePassword: "svc",
-  binds: [] as string[],
-}));
-
-vi.mock("ldapjs", async () => {
-  const { default: ldap } =
-    await vi.importActual<typeof import("ldapjs")>("ldapjs");
-  function createClient() {
-    return {
-      bind: (dn: string, password: string, cb: (err?: Error) => void) => {
-        directory.binds.push(dn);
-        if (dn === "cn=service" && password === directory.servicePassword) {
-          return cb();
-        }
-        const user = Object.values(directory.users).find((u) => u.dn === dn);
-        if (user && user.password === password) return cb();
-        cb(new Error("invalid credentials"));
-      },
-      search: (
-        base: string,
-        options: { filter: string; attributes: string[] },
-        cb: (err: Error | null, res: unknown) => void,
-      ) => {
-        const listeners: Record<string, (value?: unknown) => void> = {};
-        cb(null, {
-          on: (event: string, fn: (value?: unknown) => void) => {
-            listeners[event] = fn;
-          },
-        });
-        queueMicrotask(() => {
-          if (base === "ou=groups") {
-            for (const dn of directory.adminDns) {
-              if (options.filter.includes(dn)) {
-                listeners.searchEntry?.({
-                  dn: { toString: () => "cn=admins,ou=groups" },
-                  attributes: [{ type: "cn", values: ["admins"] }],
-                });
-              }
-            }
-          } else {
-            const match = /uid=([^)]+)/.exec(options.filter);
-            const user = match ? directory.users[match[1]] : undefined;
-            if (user) {
-              listeners.searchEntry?.({
-                dn: ldap.parseDN(user.dn),
-                attributes: Object.entries(user.attrs)
-                  .filter(([type]) => options.attributes.includes(type))
-                  .map(([type, value]) => ({
-                    type,
-                    values: [value],
-                  })),
-              });
-            }
-          }
-          listeners.end?.();
-        });
-      },
-      unbind: () => {},
-    };
-  }
-  return { default: { createClient }, createClient };
-});
-
-const CONFIG = {
-  host: "ldap.example",
-  port: 389,
-  bindDN: "cn=service",
-  bindPassword: "svc",
-  userSearchBase: "ou=people",
-  userSearchFilter: "(uid={{username}})",
-  usernameAttribute: "uid",
-  displayNameAttribute: "cn",
-  groupSearchBase: "ou=groups",
-  adminGroup: "admins",
-  allowedUsers: "@example.com",
-};
-
-let server: TestServer | null = null;
-
-beforeEach(() => {
-  directory.users = {
-    bob: {
-      dn: "uid=bob,ou=people",
-      password: "hunter2",
-      attrs: { uid: "bob", cn: "Bob Builder", mail: "bob@example.com" },
-    },
-  };
-  directory.adminDns = [];
-  directory.binds = [];
-});
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-});
-
-async function withDirectory(options: Parameters<typeof startServer>[0] = {}) {
-  server = await startServer(options);
-  const created = await server.request("POST", "/providers", {
-    body: { name: "Corp LDAP", config: CONFIG },
-  });
-  expect(created.status).toBe(201);
-  return { s: server, id: created.body.id as number };
-}
-
-function verify(
-  s: TestServer,
-  instance: string,
-  body: Record<string, unknown>,
-) {
-  const method = s.mock.auth.loginMethods[0];
-  return method.verify!(
-    { body, query: {}, headers: {}, ip: "10.0.0.1" },
-    instance,
-  );
-}
-
-describe("LDAP sign-in", () => {
-  it.each([
-    "CN=Bob,OU=Первый Департамент,DC=example,DC=com",
-    String.raw`CN=Bob\, Builder,OU=Первый Департамент,DC=example,DC=com`,
-    String.raw`CN=Bob\5cBuilder,OU=People,DC=example,DC=com`,
-  ])(
-    "binds with the directory's original distinguishedName: %s",
-    async (dn) => {
-      const { s, id } = await withDirectory();
-      directory.users.bob.dn = dn;
-      directory.users.bob.attrs.distinguishedName = dn;
-      const identity = await verify(s, String(id), {
-        username: "bob",
-        password: "hunter2",
-      });
-      expect(identity).toMatchObject({ subject: "bob" });
-      expect(directory.binds).toEqual(["cn=service", dn]);
-      await expect(
-        verify(s, String(id), { username: "bob", password: "wrong" }),
-      ).rejects.toMatchObject({ status: 401 });
-    },
-  );
-
-  it("binds as the service, then as the user, and returns the identity", async () => {
-    const { s, id } = await withDirectory();
-    directory.adminDns = ["uid=bob,ou=people"];
-    const identity = await verify(s, String(id), {
-      username: "bob",
-      password: "hunter2",
-      rememberMe: true,
-    });
-    expect(identity).toEqual({
-      kind: "external",
-      provider: `ldap:${id}`,
-      subject: "bob",
-      email: "bob@example.com",
-      name: "Bob Builder",
-      isAdmin: true,
-      allowedUsers: "@example.com",
-      legacy: { identifier: `ldap:${id}:bob`, providerRowId: id },
-      rememberMe: true,
-      rateLimitKey: `${id}:bob`,
-    });
-    expect(directory.binds).toEqual(["cn=service", "uid=bob,ou=people"]);
-  });
-
-  it("is not an admin when the directory says so", async () => {
-    const { s, id } = await withDirectory();
-    const identity = await verify(s, String(id), {
-      username: "bob",
-      password: "hunter2",
-    });
-    expect(identity).toMatchObject({ isAdmin: false });
-  });
-
-  it("refuses a wrong password and an unknown user the same way", async () => {
-    const { s, id } = await withDirectory();
-    await expect(
-      verify(s, String(id), { username: "bob", password: "nope" }),
-    ).rejects.toMatchObject({
-      status: 401,
-      message: "Invalid username or password",
-    });
-    await expect(
-      verify(s, String(id), { username: "mallory", password: "x" }),
-    ).rejects.toMatchObject({
-      status: 401,
-      message: "Invalid username or password",
-    });
-    expect(s.mock.auth.loginFailures.get(`10.0.0.1|${id}:bob`)).toBe(1);
-  });
-
-  it("locks out after too many failures, like password login", async () => {
-    const { s, id } = await withDirectory({ loginAttemptLimit: 2 });
-    for (let i = 0; i < 2; i++) {
-      await expect(
-        verify(s, String(id), { username: "bob", password: "nope" }),
-      ).rejects.toMatchObject({ status: 401 });
-    }
-    await expect(
-      verify(s, String(id), { username: "bob", password: "hunter2" }),
-    ).rejects.toMatchObject({ status: 429 });
-  });
-
-  it("escapes the username in the search filter", async () => {
-    const { s, id } = await withDirectory();
-    await expect(
-      verify(s, String(id), { username: "bob)(uid=*", password: "hunter2" }),
-    ).rejects.toMatchObject({ status: 401 });
-  });
-
-  it("refuses a disabled or unknown directory", async () => {
-    const { s, id } = await withDirectory();
-    await s.request("PUT", `/providers/${id}`, { body: { enabled: false } });
-    await expect(
-      verify(s, String(id), { username: "bob", password: "hunter2" }),
-    ).rejects.toMatchObject({ status: 404 });
-    await expect(
-      verify(s, "999", { username: "bob", password: "hunter2" }),
-    ).rejects.toMatchObject({ status: 404 });
-    expect(await s.mock.auth.loginMethods[0].describe!()).toEqual([
-      { id: String(id), label: "Corp LDAP", enabled: false, type: "ldap" },
-    ]);
-  });
-
-  it("needs a directory, a username and a password", async () => {
-    const { s } = await withDirectory();
-    await expect(
-      verify(s, null as never, { username: "bob" }),
-    ).rejects.toMatchObject({ status: 400 });
-  });
-});
-
-describe("directory admin routes", () => {
-  it("seal the bind password and never send it back", async () => {
-    const { s, id } = await withDirectory();
-    const stored = s.db.sqlite
-      .prepare("SELECT config FROM p_ldap_providers WHERE id = ?")
-      .get(id) as { config: string };
-    expect(JSON.parse(stored.config).bindPassword).toMatch(/^sealed:/);
-
-    const listed = await s.request("GET", "/providers");
-    expect(listed.body.providers[0]).toMatchObject({
-      name: "Corp LDAP",
-      hasBindPassword: true,
-    });
-    expect(listed.body.providers[0].config.bindPassword).toBeUndefined();
-  });
-
-  it("keep the bind password when an edit leaves it empty", async () => {
-    const { s, id } = await withDirectory();
-    const updated = await s.request("PUT", `/providers/${id}`, {
-      body: { config: { host: "ldap2.example", bindPassword: "" } },
-    });
-    expect(updated.body).toMatchObject({
-      hasBindPassword: true,
-      config: { host: "ldap2.example" },
-    });
-    await expect(
-      verify(s, String(id), { username: "bob", password: "hunter2" }),
-    ).resolves.toMatchObject({ subject: "bob" });
-  });
-
-  it("reject a directory with missing fields", async () => {
-    server = await startServer();
-    const response = await server.request("POST", "/providers", {
-      body: { name: "X", config: { host: "a" } },
-    });
-    expect(response.status).toBe(400);
-  });
-
-  it("will not delete a directory people still sign in with", async () => {
-    const { s, id } = await withDirectory({
-      linkedUsers: { "ldap:1": 1 },
-    });
-    expect(id).toBe(1);
-    expect((await s.request("DELETE", `/providers/${id}`)).status).toBe(409);
-  });
-
-  it("delete a directory nobody uses", async () => {
-    const { s, id } = await withDirectory();
-    expect((await s.request("DELETE", `/providers/${id}`)).status).toBe(200);
-    expect(await s.mock.auth.loginMethods[0].describe!()).toEqual([]);
-  });
-
-  it("need ldap.manage", async () => {
-    server = await startServer({ permissions: [] });
-    for (const [method, path] of [
-      ["GET", "/providers"],
-      ["POST", "/providers"],
-      ["PUT", "/providers/1"],
-      ["DELETE", "/providers/1"],
-    ]) {
-      expect((await server.request(method, path, { body: {} })).status).toBe(
-        403,
-      );
-    }
-  });
-});
-
-describe("capabilities", () => {
-  it.each(["db:own", "auth:provide", "network:serve"])(
-    "activate fails closed without %s",
-    async (capability) => {
-      const { manifest } = await import("./helpers.js");
-      await expect(
-        startServer({
-          capabilities: manifest.capabilities.filter((c) => c !== capability),
-        }),
-      ).rejects.toThrow();
-    },
-  );
-
-  it("cannot read a bind password without secrets:own", async () => {
-    const { manifest } = await import("./helpers.js");
-    server = await startServer({
-      capabilities: manifest.capabilities.filter((c) => c !== "secrets:own"),
-    });
-    const response = await server.request("POST", "/providers", {
-      body: { name: "Corp LDAP", config: CONFIG },
-    });
-    expect(response.status).toBe(500);
-  });
-});
diff --git a/plugins/ldap/tests/frontend/activate.test.tsx b/plugins/ldap/tests/frontend/activate.test.tsx
deleted file mode 100644
index 0e26f4ef9..000000000
--- a/plugins/ldap/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,93 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { fireEvent, screen, waitFor } from "@testing-library/react";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe(`${manifest.id} activate`, () => {
-  it("registers the login form and the directory settings", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.loginMethods()).toEqual(["ldap"]);
-    expect(rendered.registered.settingsComponents()).toEqual(["providers"]);
-  });
-
-  it("submits the username and password for the chosen directory", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    const submit = vi.fn(async () => {});
-    rendered.renderLoginMethod("ldap", {
-      instances: [{ id: "4", label: "Corp" }],
-      submit,
-    });
-    fireEvent.click(screen.getByText("Login with Corp"));
-    fireEvent.change(screen.getByLabelText(locales.username), {
-      target: { value: " bob " },
-    });
-    fireEvent.change(screen.getByLabelText(locales.password), {
-      target: { value: "hunter2" },
-    });
-    fireEvent.click(screen.getByText(locales.signIn));
-    await waitFor(() =>
-      expect(submit).toHaveBeenCalledWith(
-        { username: "bob", password: "hunter2" },
-        "4",
-      ),
-    );
-  });
-
-  it("does not submit an empty form", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    const submit = vi.fn(async () => {});
-    rendered.renderLoginMethod("ldap", {
-      instances: [{ id: "4", label: "Corp" }],
-      submit,
-    });
-    fireEvent.click(screen.getByText("Login with Corp"));
-    fireEvent.click(screen.getByText(locales.signIn));
-    expect(submit).not.toHaveBeenCalled();
-  });
-
-  it("lists directories without their bind password", async () => {
-    const get = vi.fn(async () => ({
-      data: {
-        providers: [
-          {
-            id: 4,
-            name: "Corp LDAP",
-            enabled: true,
-            displayOrder: 0,
-            config: { host: "ldap.example" },
-            hasBindPassword: true,
-          },
-        ],
-      },
-    }));
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: { get } as never,
-    });
-    rendered.renderSettingsComponent("providers");
-    expect(await screen.findByText("Corp LDAP")).toBeTruthy();
-    expect(get).toHaveBeenCalledWith("/providers");
-  });
-
-  it("removes everything on deactivate", async () => {
-    const app = await renderWithApp(plugin, { manifest, locales });
-    await app.deactivate();
-    expect(app.registered.loginMethods()).toEqual([]);
-  });
-});
diff --git a/plugins/ldap/tsconfig.json b/plugins/ldap/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/ldap/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/ldap/vitest.config.ts b/plugins/ldap/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/ldap/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/network-topology/CHANGELOG.md b/plugins/network-topology/CHANGELOG.md
deleted file mode 100644
index 2d661ff55..000000000
--- a/plugins/network-topology/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Shows your hosts and how they connect as an interactive graph. Hosts can be grouped, and each user's graph is saved.
diff --git a/plugins/network-topology/README.md b/plugins/network-topology/README.md
deleted file mode 100644
index 0e80064ee..000000000
--- a/plugins/network-topology/README.md
+++ /dev/null
@@ -1,29 +0,0 @@
-# Network Topology
-
-Show your hosts and how they connect as an interactive graph.
-
-## Features
-
-- Show your hosts and the links between them as an interactive graph.
-- Put hosts into groups, and groups inside other groups.
-- Import and export the graph as JSON.
-- Add the graph to the dashboard as a card.
-- Each user's graph is saved and syncs between the desktop app and a server.
-
-## Permissions
-
-- `network-topology.use`: Use the network graph. Admins and users have it by default.
-
-## Services
-
-Provides to other plugins:
-
-- `network-topology.graph`: read a user's graph.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/network-topology/locales/en.json b/plugins/network-topology/locales/en.json
deleted file mode 100644
index a27badca9..000000000
--- a/plugins/network-topology/locales/en.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Add Host",
-    "addGroup": "Add Group",
-    "addLink": "Add Link",
-    "zoomIn": "Zoom In",
-    "zoomOut": "Zoom Out",
-    "resetView": "Reset View",
-    "selectHost": "Select Host",
-    "chooseHost": "Choose a host...",
-    "parentGroup": "Parent Group",
-    "noGroup": "No Group",
-    "groupName": "Group Name",
-    "color": "Color",
-    "source": "Source",
-    "target": "Target",
-    "moveToGroup": "Move to Group",
-    "selectGroup": "Select group...",
-    "addConnection": "Add Connection",
-    "hostDetails": "Host Details",
-    "removeFromGroup": "Remove from Group",
-    "addHostHere": "Add Host Here",
-    "editGroup": "Edit Group",
-    "delete": "Delete",
-    "add": "Add",
-    "create": "Create",
-    "move": "Move",
-    "connect": "Connect",
-    "createGroup": "Create Group",
-    "selectSourcePlaceholder": "Select Source...",
-    "selectTargetPlaceholder": "Select Target...",
-    "invalidFile": "Invalid File",
-    "hostAlreadyExists": "Host is already in the topology",
-    "connectionExists": "Connection already exists",
-    "unknown": "Unknown",
-    "name": "Name",
-    "ip": "IP",
-    "status": "Status",
-    "failedToAddNode": "Failed to add node",
-    "sourceDifferentFromTarget": "Source and target must be different",
-    "exportJSON": "Export JSON",
-    "importJSON": "Import JSON",
-    "serverStats": "Host Metrics",
-    "noNodes": "No nodes yet"
-  },
-  "nav": {
-    "networkGraph": "Network Graph"
-  },
-  "dashboard": {
-    "networkGraph": "Network Graph"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} nodes"
-  },
-  "permissions": {
-    "use": {
-      "title": "Use network graph",
-      "description": "View and edit the network topology graph."
-    }
-  },
-  "hosts": {
-    "docsLink": "View docs"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/af_ZA.json b/plugins/network-topology/locales/translated/af_ZA.json
deleted file mode 100644
index bb1cdf169..000000000
--- a/plugins/network-topology/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Voeg gasheer by",
-    "addGroup": "Voeg Groep by",
-    "addLink": "Voeg skakel by",
-    "zoomIn": "Inzoem",
-    "zoomOut": "Uitzoom",
-    "resetView": "Herstel aansig",
-    "selectHost": "Kies gasheer",
-    "chooseHost": "Kies 'n gasheer...",
-    "parentGroup": "Ouergroep",
-    "noGroup": "Geen Groep",
-    "groupName": "Groepnaam",
-    "color": "Kleur",
-    "source": "Bron",
-    "target": "Teiken",
-    "moveToGroup": "Skuif na Groep",
-    "selectGroup": "Kies groep...",
-    "addConnection": "Voeg verbinding by",
-    "hostDetails": "Gasheerbesonderhede",
-    "removeFromGroup": "Verwyder uit Groep",
-    "addHostHere": "Voeg gasheer hier by",
-    "editGroup": "Wysig Groep",
-    "delete": "Vee uit",
-    "add": "Voeg by",
-    "create": "Skep",
-    "move": "Beweeg",
-    "connect": "Verbind",
-    "createGroup": "Skep Groep",
-    "selectSourcePlaceholder": "Kies Bron...",
-    "selectTargetPlaceholder": "Kies Teiken...",
-    "invalidFile": "Ongeldige lêer",
-    "hostAlreadyExists": "Gasheer is reeds in die topologie",
-    "connectionExists": "Verbinding bestaan reeds",
-    "unknown": "Onbekend",
-    "name": "Naam",
-    "ip": "IP-adres",
-    "status": "Status",
-    "failedToAddNode": "Kon nie nodus byvoeg nie",
-    "sourceDifferentFromTarget": "Bron en teiken moet verskillend wees",
-    "exportJSON": "Voer JSON uit",
-    "importJSON": "Voer JSON in",
-    "serverStats": "Gasheermetrieke",
-    "noNodes": "Geen nodusse nog nie"
-  },
-  "nav": {
-    "networkGraph": "Netwerkgrafiek"
-  },
-  "dashboard": {
-    "networkGraph": "Netwerkgrafiek"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} nodusse"
-  },
-  "permissions": {
-    "use": {
-      "title": "Gebruik netwerkgrafiek",
-      "description": "Bekyk en wysig die netwerktopologiegrafiek."
-    }
-  },
-  "hosts": {
-    "docsLink": "Bekyk dokumente"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/ar_SA.json b/plugins/network-topology/locales/translated/ar_SA.json
deleted file mode 100644
index 399e4dc6e..000000000
--- a/plugins/network-topology/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "إضافة مضيف",
-    "addGroup": "إضافة مجموعة",
-    "addLink": "إضافة رابط",
-    "zoomIn": "تكبير",
-    "zoomOut": "تصغير",
-    "resetView": "إعادة ضبط العرض",
-    "selectHost": "تحديد مضيف",
-    "chooseHost": "اختر مضيفًا...",
-    "parentGroup": "المجموعة الأم",
-    "noGroup": "بدون مجموعة",
-    "groupName": "اسم المجموعة",
-    "color": "اللون",
-    "source": "المصدر",
-    "target": "الهدف",
-    "moveToGroup": "نقل إلى مجموعة",
-    "selectGroup": "تحديد مجموعة...",
-    "addConnection": "إضافة اتصال",
-    "hostDetails": "تفاصيل المضيف",
-    "removeFromGroup": "إزالة من المجموعة",
-    "addHostHere": "إضافة مضيف هنا",
-    "editGroup": "تعديل المجموعة",
-    "delete": "حذف",
-    "add": "إضافة",
-    "create": "إنشاء",
-    "move": "نقل",
-    "connect": "اتصل",
-    "createGroup": "إنشاء مجموعة",
-    "selectSourcePlaceholder": "تحديد المصدر...",
-    "selectTargetPlaceholder": "تحديد الهدف...",
-    "invalidFile": "ملف غير صالح",
-    "hostAlreadyExists": "المضيف موجود بالفعل في الطوبولوجيا",
-    "connectionExists": "الاتصال موجود بالفعل",
-    "unknown": "غير معروف",
-    "name": "الاسم",
-    "ip": "IP",
-    "status": "الحالة",
-    "failedToAddNode": "فشل في إضافة العقدة",
-    "sourceDifferentFromTarget": "يجب أن يكون المصدر والهدف مختلفين",
-    "exportJSON": "تصدير JSON",
-    "importJSON": "استيراد JSON",
-    "serverStats": "مقاييس المضيف",
-    "noNodes": "لا توجد عُقد بعد"
-  },
-  "nav": {
-    "networkGraph": "رسم بياني للشبكة"
-  },
-  "dashboard": {
-    "networkGraph": "الرسم البياني للشبكة"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} عقدة"
-  },
-  "permissions": {
-    "use": {
-      "title": "استخدم الرسم البياني للشبكة",
-      "description": "عرض وتعديل مخطط طوبولوجيا الشبكة."
-    }
-  },
-  "hosts": {
-    "docsLink": "عرض المستندات"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/bg_BG.json b/plugins/network-topology/locales/translated/bg_BG.json
deleted file mode 100644
index 4dc962f74..000000000
--- a/plugins/network-topology/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Добавяне на хост",
-    "addGroup": "Добавяне на група",
-    "addLink": "Добавяне на връзка",
-    "zoomIn": "Увеличаване на мащаба",
-    "zoomOut": "Намаляване на мащаба",
-    "resetView": "Нулиране на изгледа",
-    "selectHost": "Изберете хост",
-    "chooseHost": "Изберете хост...",
-    "parentGroup": "Родителска група",
-    "noGroup": "Няма група",
-    "groupName": "Име на групата",
-    "color": "Цвят",
-    "source": "Източник",
-    "target": "Цел",
-    "moveToGroup": "Преместване в група",
-    "selectGroup": "Изберете група...",
-    "addConnection": "Добавяне на връзка",
-    "hostDetails": "Детайли за хоста",
-    "removeFromGroup": "Премахване от групата",
-    "addHostHere": "Добавете хост тук",
-    "editGroup": "Редактиране на група",
-    "delete": "Изтриване",
-    "add": "Добавяне",
-    "create": "Създаване",
-    "move": "Преместване",
-    "connect": "Свържете се",
-    "createGroup": "Създаване на група",
-    "selectSourcePlaceholder": "Изберете източник...",
-    "selectTargetPlaceholder": "Изберете цел...",
-    "invalidFile": "Невалиден файл",
-    "hostAlreadyExists": "Хостът вече е в топологията",
-    "connectionExists": "Връзката вече съществува",
-    "unknown": "Неизвестен",
-    "name": "Име",
-    "ip": "ИП",
-    "status": "Статус",
-    "failedToAddNode": "Добавянето на възел не бе успешно",
-    "sourceDifferentFromTarget": "Източникът и целта трябва да са различни",
-    "exportJSON": "Експортиране на JSON",
-    "importJSON": "Импортиране на JSON",
-    "serverStats": "Метрики на хоста",
-    "noNodes": "Все още няма възли"
-  },
-  "nav": {
-    "networkGraph": "Мрежова графика"
-  },
-  "dashboard": {
-    "networkGraph": "Мрежова графика"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} възли"
-  },
-  "permissions": {
-    "use": {
-      "title": "Използвайте мрежова графика",
-      "description": "Преглед и редактиране на графиката на мрежовата топология."
-    }
-  },
-  "hosts": {
-    "docsLink": "Преглед на документи"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/bn_BD.json b/plugins/network-topology/locales/translated/bn_BD.json
deleted file mode 100644
index b7310d59a..000000000
--- a/plugins/network-topology/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "হোস্ট যোগ করুন",
-    "addGroup": "গ্রুপ যোগ করুন",
-    "addLink": "লিঙ্ক যোগ করুন",
-    "zoomIn": "জুম ইন",
-    "zoomOut": "জুম আউট",
-    "resetView": "দৃশ্য রিসেট করুন",
-    "selectHost": "হোস্ট নির্বাচন করুন",
-    "chooseHost": "একজন হোস্ট বেছে নিন...",
-    "parentGroup": "অভিভাবক গোষ্ঠী",
-    "noGroup": "কোন গ্রুপ নেই",
-    "groupName": "গ্রুপের নাম",
-    "color": "রঙ",
-    "source": "উৎস",
-    "target": "লক্ষ্য",
-    "moveToGroup": "গ্রুপে যান",
-    "selectGroup": "দল নির্বাচন করুন...",
-    "addConnection": "সংযোগ যোগ করুন",
-    "hostDetails": "হোস্টের বিবরণ",
-    "removeFromGroup": "গ্রুপ থেকে অপসারণ করুন",
-    "addHostHere": "এখানে হোস্ট যোগ করুন",
-    "editGroup": "সম্পাদনা গ্রুপ",
-    "delete": "মুছে ফেলুন",
-    "add": "যোগ করুন",
-    "create": "তৈরি করুন",
-    "move": "স্থানান্তর",
-    "connect": "সংযোগ করুন",
-    "createGroup": "গ্রুপ তৈরি করুন",
-    "selectSourcePlaceholder": "উৎস নির্বাচন করুন...",
-    "selectTargetPlaceholder": "লক্ষ্য নির্বাচন করুন...",
-    "invalidFile": "অবৈধ ফাইল",
-    "hostAlreadyExists": "হোস্ট ইতিমধ্যে টপোলজিতে আছে",
-    "connectionExists": "সংযোগটি ইতিমধ্যেই বিদ্যমান আছে",
-    "unknown": "অজানা",
-    "name": "নাম",
-    "ip": "আইপি",
-    "status": "অবস্থা",
-    "failedToAddNode": "নোড যোগ করতে ব্যর্থ হয়েছে",
-    "sourceDifferentFromTarget": "উৎস এবং লক্ষ্য অবশ্যই ভিন্ন হতে হবে",
-    "exportJSON": "JSON রপ্তানি করুন",
-    "importJSON": "JSON আমদানি করুন",
-    "serverStats": "হোস্ট মেট্রিক্স",
-    "noNodes": "এখনো কোনো নোড নেই"
-  },
-  "nav": {
-    "networkGraph": "নেটওয়ার্ক গ্রাফ"
-  },
-  "dashboard": {
-    "networkGraph": "নেটওয়ার্ক গ্রাফ"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} নোড"
-  },
-  "permissions": {
-    "use": {
-      "title": "নেটওয়ার্ক গ্রাফ ব্যবহার করুন",
-      "description": "নেটওয়ার্ক টপোলজি গ্রাফটি দেখুন এবং সম্পাদনা করুন।"
-    }
-  },
-  "hosts": {
-    "docsLink": "নথি দেখুন"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/ca_ES.json b/plugins/network-topology/locales/translated/ca_ES.json
deleted file mode 100644
index 2eaecfc6b..000000000
--- a/plugins/network-topology/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Afegeix amfitrió",
-    "addGroup": "Afegeix un grup",
-    "addLink": "Afegeix un enllaç",
-    "zoomIn": "Ampliar zoom",
-    "zoomOut": "Allunyar",
-    "resetView": "Restableix la vista",
-    "selectHost": "Selecciona l'amfitrió",
-    "chooseHost": "Trieu un amfitrió...",
-    "parentGroup": "Grup de pares",
-    "noGroup": "Sense grup",
-    "groupName": "Nom del grup",
-    "color": "Color",
-    "source": "Font",
-    "target": "Objectiu",
-    "moveToGroup": "Moure al grup",
-    "selectGroup": "Selecciona el grup...",
-    "addConnection": "Afegeix una connexió",
-    "hostDetails": "Detalls de l'amfitrió",
-    "removeFromGroup": "Elimina del grup",
-    "addHostHere": "Afegeix l'amfitrió aquí",
-    "editGroup": "Edita el grup",
-    "delete": "Suprimeix",
-    "add": "Afegeix",
-    "create": "Crea",
-    "move": "Moure",
-    "connect": "Connecta",
-    "createGroup": "Crea un grup",
-    "selectSourcePlaceholder": "Selecciona la font...",
-    "selectTargetPlaceholder": "Selecciona l'objectiu...",
-    "invalidFile": "Fitxer no vàlid",
-    "hostAlreadyExists": "L'amfitrió ja és a la topologia",
-    "connectionExists": "La connexió ja existeix",
-    "unknown": "Desconegut",
-    "name": "Nom",
-    "ip": "IP",
-    "status": "Estat",
-    "failedToAddNode": "No s'ha pogut afegir el node",
-    "sourceDifferentFromTarget": "La font i la destinació han de ser diferents",
-    "exportJSON": "Exporta JSON",
-    "importJSON": "Importa JSON",
-    "serverStats": "Mètriques de l'amfitrió",
-    "noNodes": "Encara no hi ha nodes"
-  },
-  "nav": {
-    "networkGraph": "Gràfic de xarxa"
-  },
-  "dashboard": {
-    "networkGraph": "Gràfic de xarxa"
-  },
-  "dashboardTab": {
-    "nodes": "nodes {{count}}"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilitza el gràfic de xarxa",
-      "description": "Visualitza i edita el gràfic de topologia de xarxa."
-    }
-  },
-  "hosts": {
-    "docsLink": "Veure documents"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/cs_CZ.json b/plugins/network-topology/locales/translated/cs_CZ.json
deleted file mode 100644
index 8a555fa2f..000000000
--- a/plugins/network-topology/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Přidat hostitele",
-    "addGroup": "Přidat skupinu",
-    "addLink": "Přidat odkaz",
-    "zoomIn": "Přiblížit",
-    "zoomOut": "Oddálit",
-    "resetView": "Obnovit zobrazení",
-    "selectHost": "Vyberte hostitele",
-    "chooseHost": "Vyberte si hostitele...",
-    "parentGroup": "Nadřazená skupina",
-    "noGroup": "Žádná skupina",
-    "groupName": "Název skupiny",
-    "color": "Barva",
-    "source": "Zdroj",
-    "target": "Cíl",
-    "moveToGroup": "Přesunout do skupiny",
-    "selectGroup": "Vyberte skupinu...",
-    "addConnection": "Přidat připojení",
-    "hostDetails": "Podrobnosti o hostiteli",
-    "removeFromGroup": "Odebrat ze skupiny",
-    "addHostHere": "Přidat hostitele zde",
-    "editGroup": "Upravit skupinu",
-    "delete": "Vymazat",
-    "add": "Přidat",
-    "create": "Vytvořit",
-    "move": "Pohyb",
-    "connect": "Připojit",
-    "createGroup": "Vytvořit skupinu",
-    "selectSourcePlaceholder": "Vyberte zdroj...",
-    "selectTargetPlaceholder": "Vyberte cíl...",
-    "invalidFile": "Neplatný soubor",
-    "hostAlreadyExists": "Hostitel je již v topologii",
-    "connectionExists": "Připojení již existuje",
-    "unknown": "Neznámý",
-    "name": "Jméno",
-    "ip": "IP adresa",
-    "status": "Postavení",
-    "failedToAddNode": "Nepodařilo se přidat uzel",
-    "sourceDifferentFromTarget": "Zdroj a cíl se musí lišit",
-    "exportJSON": "Exportovat JSON",
-    "importJSON": "Importovat JSON",
-    "serverStats": "Metriky hostitele",
-    "noNodes": "Zatím žádné uzly"
-  },
-  "nav": {
-    "networkGraph": "Síťový graf"
-  },
-  "dashboard": {
-    "networkGraph": "Síťový graf"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} uzlů"
-  },
-  "permissions": {
-    "use": {
-      "title": "Použít síťový graf",
-      "description": "Zobrazte a upravte graf topologie sítě."
-    }
-  },
-  "hosts": {
-    "docsLink": "Zobrazit dokumenty"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/da_DK.json b/plugins/network-topology/locales/translated/da_DK.json
deleted file mode 100644
index 57fd62e08..000000000
--- a/plugins/network-topology/locales/translated/da_DK.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Tilføj vært",
-    "addGroup": "Tilføj gruppe",
-    "addLink": "Tilføj link",
-    "zoomIn": "Zoom ind",
-    "zoomOut": "Zoom ud",
-    "resetView": "Nulstil visning",
-    "selectHost": "Vælg vært",
-    "chooseHost": "Vælg en vært...",
-    "parentGroup": "Forældregruppe",
-    "noGroup": "Ingen gruppe",
-    "groupName": "Gruppenavn",
-    "color": "Farve",
-    "source": "Kilde",
-    "target": "Mål",
-    "moveToGroup": "Flyt til gruppe",
-    "selectGroup": "Vælg gruppe...",
-    "addConnection": "Tilføj forbindelse",
-    "hostDetails": "Værtsoplysninger",
-    "removeFromGroup": "Fjern fra gruppe",
-    "addHostHere": "Tilføj vært her",
-    "editGroup": "Rediger gruppe",
-    "delete": "Slet",
-    "add": "Tilføje",
-    "create": "Skabe",
-    "move": "Flytte",
-    "connect": "Forbinde",
-    "createGroup": "Opret gruppe",
-    "selectSourcePlaceholder": "Vælg kilde...",
-    "selectTargetPlaceholder": "Vælg mål...",
-    "invalidFile": "Ugyldig fil",
-    "hostAlreadyExists": "Værten er allerede i topologien",
-    "connectionExists": "Forbindelsen findes allerede",
-    "unknown": "Ukendt",
-    "name": "Navn",
-    "ip": "IP-adresse",
-    "status": "Status",
-    "failedToAddNode": "Kunne ikke tilføje node",
-    "sourceDifferentFromTarget": "Kilde og mål skal være forskellige",
-    "exportJSON": "Eksportér JSON",
-    "importJSON": "Importér JSON",
-    "serverStats": "Værtsmålinger",
-    "noNodes": "Ingen noder endnu"
-  },
-  "nav": {
-    "networkGraph": "Netværksgraf"
-  },
-  "dashboard": {
-    "networkGraph": "Netværksgraf"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} noder"
-  },
-  "permissions": {
-    "use": {
-      "title": "Brug netværksgraf",
-      "description": "Se og rediger netværkstopologigrafen."
-    }
-  },
-  "hosts": {
-    "docsLink": "Se dokumenter"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/de_DE.json b/plugins/network-topology/locales/translated/de_DE.json
deleted file mode 100644
index 2b7f19b5a..000000000
--- a/plugins/network-topology/locales/translated/de_DE.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Host hinzufügen",
-    "addGroup": "Gruppe hinzufügen",
-    "addLink": "Link hinzufügen",
-    "zoomIn": "Vergrößern",
-    "zoomOut": "Verkleinern",
-    "resetView": "Ansicht zurücksetzen",
-    "selectHost": "Host auswählen",
-    "chooseHost": "Host auswählen...",
-    "parentGroup": "Übergeordnete Gruppe",
-    "noGroup": "Keine Gruppe",
-    "groupName": "Gruppenname",
-    "color": "Farbe",
-    "source": "Quelle",
-    "target": "Ziel",
-    "moveToGroup": "In Gruppe verschieben",
-    "selectGroup": "Gruppe auswählen...",
-    "addConnection": "Verbindung hinzufügen",
-    "hostDetails": "Host-Details",
-    "removeFromGroup": "Aus Gruppe entfernen",
-    "addHostHere": "Host hier hinzufügen",
-    "editGroup": "Gruppe bearbeiten",
-    "delete": "Löschen",
-    "add": "Hinzufügen",
-    "create": "Erstellen",
-    "move": "Verschieben",
-    "connect": "Verbinden",
-    "createGroup": "Gruppe erstellen",
-    "selectSourcePlaceholder": "Quelle auswählen...",
-    "selectTargetPlaceholder": "Ziel auswählen...",
-    "invalidFile": "Ungültige Datei",
-    "hostAlreadyExists": "Host ist bereits in der Topologie",
-    "connectionExists": "Verbindung ist bereits vorhanden",
-    "unknown": "Unbekannt",
-    "name": "Name",
-    "ip": "IP",
-    "status": "Status",
-    "failedToAddNode": "Knoten konnte nicht hinzugefügt werden",
-    "sourceDifferentFromTarget": "Quelle und Ziel müssen unterschiedlich sein",
-    "exportJSON": "JSON exportieren",
-    "importJSON": "JSON importieren",
-    "serverStats": "Host-Metriken",
-    "noNodes": "Noch keine Knoten"
-  },
-  "nav": {
-    "networkGraph": "Netzwerkdiagramm"
-  },
-  "dashboard": {
-    "networkGraph": "Netzwerkdiagramm"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} Knoten"
-  },
-  "permissions": {
-    "use": {
-      "title": "Netzwerkdiagramm verwenden",
-      "description": "Netzwerktopologiediagramm anzeigen und bearbeiten."
-    }
-  },
-  "hosts": {
-    "docsLink": "Dokumentation anzeigen"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/el_GR.json b/plugins/network-topology/locales/translated/el_GR.json
deleted file mode 100644
index 40c4c7b1b..000000000
--- a/plugins/network-topology/locales/translated/el_GR.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Προσθήκη κεντρικού υπολογιστή",
-    "addGroup": "Προσθήκη ομάδας",
-    "addLink": "Προσθήκη συνδέσμου",
-    "zoomIn": "Μεγέθυνση",
-    "zoomOut": "Σμίκρυνση",
-    "resetView": "Επαναφορά προβολής",
-    "selectHost": "Επιλέξτε κεντρικό υπολογιστή",
-    "chooseHost": "Επιλέξτε έναν οικοδεσπότη...",
-    "parentGroup": "Γονική ομάδα",
-    "noGroup": "Καμία ομάδα",
-    "groupName": "Όνομα ομάδας",
-    "color": "Χρώμα",
-    "source": "Πηγή",
-    "target": "Στόχος",
-    "moveToGroup": "Μετακίνηση σε ομάδα",
-    "selectGroup": "Επιλογή ομάδας...",
-    "addConnection": "Προσθήκη σύνδεσης",
-    "hostDetails": "Στοιχεία κεντρικού υπολογιστή",
-    "removeFromGroup": "Αφαίρεση από την ομάδα",
-    "addHostHere": "Προσθήκη κεντρικού υπολογιστή εδώ",
-    "editGroup": "Επεξεργασία ομάδας",
-    "delete": "Διαγράφω",
-    "add": "Προσθέτω",
-    "create": "Δημιουργώ",
-    "move": "Κίνηση",
-    "connect": "Συνδέω",
-    "createGroup": "Δημιουργία ομάδας",
-    "selectSourcePlaceholder": "Επιλογή Πηγής...",
-    "selectTargetPlaceholder": "Επιλογή Στόχου...",
-    "invalidFile": "Μη έγκυρο αρχείο",
-    "hostAlreadyExists": "Ο κεντρικός υπολογιστής βρίσκεται ήδη στην τοπολογία",
-    "connectionExists": "Η σύνδεση υπάρχει ήδη",
-    "unknown": "Αγνωστος",
-    "name": "Ονομα",
-    "ip": "Πνευματική Ιδιοκτησία",
-    "status": "Κατάσταση",
-    "failedToAddNode": "Αποτυχία προσθήκης κόμβου",
-    "sourceDifferentFromTarget": "Η πηγή και ο στόχος πρέπει να είναι διαφορετικοί",
-    "exportJSON": "Εξαγωγή JSON",
-    "importJSON": "Εισαγωγή JSON",
-    "serverStats": "Μετρήσεις κεντρικού υπολογιστή",
-    "noNodes": "Δεν υπάρχουν ακόμη κόμβοι"
-  },
-  "nav": {
-    "networkGraph": "Γράφημα δικτύου"
-  },
-  "dashboard": {
-    "networkGraph": "Γράφημα δικτύου"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} κόμβοι"
-  },
-  "permissions": {
-    "use": {
-      "title": "Χρήση γραφήματος δικτύου",
-      "description": "Προβολή και επεξεργασία του γραφήματος τοπολογίας δικτύου."
-    }
-  },
-  "hosts": {
-    "docsLink": "Προβολή εγγράφων"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/es_ES.json b/plugins/network-topology/locales/translated/es_ES.json
deleted file mode 100644
index 1725382da..000000000
--- a/plugins/network-topology/locales/translated/es_ES.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Añadir host",
-    "addGroup": "Añadir grupo",
-    "addLink": "Añadir enlace",
-    "zoomIn": "Acercar",
-    "zoomOut": "Alejar",
-    "resetView": "Restablecer vista",
-    "selectHost": "Seleccionar host",
-    "chooseHost": "Elegir un host...",
-    "parentGroup": "Grupo padre",
-    "noGroup": "Sin grupo",
-    "groupName": "Nombre del grupo",
-    "color": "Color",
-    "source": "Origen",
-    "target": "Destino",
-    "moveToGroup": "Mover al grupo",
-    "selectGroup": "Seleccionar grupo...",
-    "addConnection": "Añadir conexión",
-    "hostDetails": "Detalles del host",
-    "removeFromGroup": "Quitar del grupo",
-    "addHostHere": "Añadir host aquí",
-    "editGroup": "Editar grupo",
-    "delete": "Eliminar",
-    "add": "Añadir",
-    "create": "Crear",
-    "move": "Mover",
-    "connect": "Conectar",
-    "createGroup": "Crear grupo",
-    "selectSourcePlaceholder": "Seleccionar origen...",
-    "selectTargetPlaceholder": "Seleccionar destino...",
-    "invalidFile": "Archivo no válido",
-    "hostAlreadyExists": "El host ya está en la topología",
-    "connectionExists": "La conexión ya existe",
-    "unknown": "Desconocido",
-    "name": "Nombre",
-    "ip": "IP",
-    "status": "Estado",
-    "failedToAddNode": "Error al añadir nodo",
-    "sourceDifferentFromTarget": "El origen y el destino deben ser diferentes",
-    "exportJSON": "Exportar JSON",
-    "importJSON": "Importar JSON",
-    "serverStats": "Métricas del host",
-    "noNodes": "Aún no hay nodos"
-  },
-  "nav": {
-    "networkGraph": "Gráfico de red"
-  },
-  "dashboard": {
-    "networkGraph": "Gráfico de red"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} nodos"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilice un gráfico de red.",
-      "description": "Visualice y edite el gráfico de topología de red."
-    }
-  },
-  "hosts": {
-    "docsLink": "Ver documentación"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/fi_FI.json b/plugins/network-topology/locales/translated/fi_FI.json
deleted file mode 100644
index 6b153efbc..000000000
--- a/plugins/network-topology/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Lisää isäntä",
-    "addGroup": "Lisää ryhmä",
-    "addLink": "Lisää linkki",
-    "zoomIn": "Lähennä",
-    "zoomOut": "Loitonna",
-    "resetView": "Palauta näkymä",
-    "selectHost": "Valitse isäntä",
-    "chooseHost": "Valitse isäntä...",
-    "parentGroup": "Yläryhmä",
-    "noGroup": "Ei ryhmää",
-    "groupName": "Ryhmän nimi",
-    "color": "Väri",
-    "source": "Lähde",
-    "target": "Kohde",
-    "moveToGroup": "Siirrä ryhmään",
-    "selectGroup": "Valitse ryhmä...",
-    "addConnection": "Lisää yhteys",
-    "hostDetails": "Isännän tiedot",
-    "removeFromGroup": "Poista ryhmästä",
-    "addHostHere": "Lisää isäntä tähän",
-    "editGroup": "Muokkaa ryhmää",
-    "delete": "Poistaa",
-    "add": "Lisätä",
-    "create": "Luoda",
-    "move": "Liikkua",
-    "connect": "Yhdistä",
-    "createGroup": "Luo ryhmä",
-    "selectSourcePlaceholder": "Valitse lähde...",
-    "selectTargetPlaceholder": "Valitse kohde...",
-    "invalidFile": "Virheellinen tiedosto",
-    "hostAlreadyExists": "Isäntä on jo topologiassa",
-    "connectionExists": "Yhteys on jo olemassa",
-    "unknown": "Tuntematon",
-    "name": "Nimi",
-    "ip": "IP-osoite",
-    "status": "Status",
-    "failedToAddNode": "Solmun lisääminen epäonnistui",
-    "sourceDifferentFromTarget": "Lähteen ja kohteen on oltava eri",
-    "exportJSON": "Vie JSON",
-    "importJSON": "Tuo JSON",
-    "serverStats": "Isännän mittarit",
-    "noNodes": "Ei vielä solmuja"
-  },
-  "nav": {
-    "networkGraph": "Verkkokaavio"
-  },
-  "dashboard": {
-    "networkGraph": "Verkkokaavio"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} solmut"
-  },
-  "permissions": {
-    "use": {
-      "title": "Käytä verkkokaaviota",
-      "description": "Tarkastele ja muokkaa verkon topologiakaaviota."
-    }
-  },
-  "hosts": {
-    "docsLink": "Näytä dokumentit"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/fr_FR.json b/plugins/network-topology/locales/translated/fr_FR.json
deleted file mode 100644
index a27105a93..000000000
--- a/plugins/network-topology/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Ajouter un hôte",
-    "addGroup": "Ajouter un groupe",
-    "addLink": "Ajouter un lien",
-    "zoomIn": "Zoom avant",
-    "zoomOut": "Zoom arrière",
-    "resetView": "Réinitialiser la vue",
-    "selectHost": "Sélectionner l'hôte",
-    "chooseHost": "Choisir un hôte...",
-    "parentGroup": "Groupe parent",
-    "noGroup": "Aucun groupe",
-    "groupName": "Nom du groupe",
-    "color": "Couleur",
-    "source": "Source",
-    "target": "Cible",
-    "moveToGroup": "Déplacer vers le groupe",
-    "selectGroup": "Sélectionner un groupe...",
-    "addConnection": "Ajouter une connexion",
-    "hostDetails": "Détails de l'hôte",
-    "removeFromGroup": "Retirer du groupe",
-    "addHostHere": "Ajouter un hôte ici",
-    "editGroup": "Modifier le groupe",
-    "delete": "Supprimer",
-    "add": "Ajouter",
-    "create": "Créer",
-    "move": "Déplacer",
-    "connect": "Connecter",
-    "createGroup": "Créer un groupe",
-    "selectSourcePlaceholder": "Sélectionner la source...",
-    "selectTargetPlaceholder": "Sélectionner la cible...",
-    "invalidFile": "Fichier non valide",
-    "hostAlreadyExists": "L'hôte est déjà dans la topologie",
-    "connectionExists": "La connexion existe déjà",
-    "unknown": "Inconnu",
-    "name": "Nom",
-    "ip": "IP",
-    "status": "Statut",
-    "failedToAddNode": "Échec de l'ajout du nœud",
-    "sourceDifferentFromTarget": "La source et la cible doivent être différentes",
-    "exportJSON": "Exporter JSON",
-    "importJSON": "Importer JSON",
-    "serverStats": "Métriques de l'hôte",
-    "noNodes": "Aucun nœud pour l'instant"
-  },
-  "nav": {
-    "networkGraph": "Graphique réseau"
-  },
-  "dashboard": {
-    "networkGraph": "Graphique réseau"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} nœuds"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utiliser un graphe de réseau",
-      "description": "Afficher et modifier le graphique de topologie du réseau."
-    }
-  },
-  "hosts": {
-    "docsLink": "Voir la documentation"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/he_IL.json b/plugins/network-topology/locales/translated/he_IL.json
deleted file mode 100644
index 97aa5d83e..000000000
--- a/plugins/network-topology/locales/translated/he_IL.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "הוסף מארח",
-    "addGroup": "הוסף קבוצה",
-    "addLink": "הוסף קישור",
-    "zoomIn": "לְהִתְמַקֵד",
-    "zoomOut": "התקרבות",
-    "resetView": "איפוס תצוגה",
-    "selectHost": "בחר מארח",
-    "chooseHost": "בחר מארח...",
-    "parentGroup": "קבוצת הורים",
-    "noGroup": "אין קבוצה",
-    "groupName": "שם הקבוצה",
-    "color": "צֶבַע",
-    "source": "מָקוֹר",
-    "target": "יַעַד",
-    "moveToGroup": "העבר לקבוצה",
-    "selectGroup": "בחירת קבוצה...",
-    "addConnection": "הוסף חיבור",
-    "hostDetails": "פרטי המארח",
-    "removeFromGroup": "הסר מהקבוצה",
-    "addHostHere": "הוסף מארח כאן",
-    "editGroup": "עריכת קבוצה",
-    "delete": "לִמְחוֹק",
-    "add": "לְהוֹסִיף",
-    "create": "לִיצוֹר",
-    "move": "מַהֲלָך",
-    "connect": "לְחַבֵּר",
-    "createGroup": "צור קבוצה",
-    "selectSourcePlaceholder": "בחר מקור...",
-    "selectTargetPlaceholder": "בחר יעד...",
-    "invalidFile": "קובץ לא חוקי",
-    "hostAlreadyExists": "המארח כבר נמצא בטופולוגיה",
-    "connectionExists": "החיבור כבר קיים",
-    "unknown": "לֹא יְדוּעַ",
-    "name": "שֵׁם",
-    "ip": "IP",
-    "status": "סטָטוּס",
-    "failedToAddNode": "נכשל בהוספת הצומת",
-    "sourceDifferentFromTarget": "המקור והיעד חייבים להיות שונים",
-    "exportJSON": "ייצוא JSON",
-    "importJSON": "ייבוא JSON",
-    "serverStats": "מדדי מארח",
-    "noNodes": "עדיין אין צמתים"
-  },
-  "nav": {
-    "networkGraph": "גרף הרשת"
-  },
-  "dashboard": {
-    "networkGraph": "גרף הרשת"
-  },
-  "dashboardTab": {
-    "nodes": "צמתים {{count}}"
-  },
-  "permissions": {
-    "use": {
-      "title": "השתמש בגרף הרשת",
-      "description": "הצג וערוך את גרף טופולוגיית הרשת."
-    }
-  },
-  "hosts": {
-    "docsLink": "הצג מסמכים"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/hi_IN.json b/plugins/network-topology/locales/translated/hi_IN.json
deleted file mode 100644
index 96735ea3c..000000000
--- a/plugins/network-topology/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "होस्ट जोड़ें",
-    "addGroup": "समूह जोड़ें",
-    "addLink": "लिंक जोड़ें",
-    "zoomIn": "ज़ूम इन",
-    "zoomOut": "ज़ूम आउट",
-    "resetView": "रीसेट करें",
-    "selectHost": "होस्ट चुनें",
-    "chooseHost": "कोई होस्ट चुनें...",
-    "parentGroup": "मूल समूह",
-    "noGroup": "कोई समूह नहीं",
-    "groupName": "समूह का नाम",
-    "color": "रंग",
-    "source": "स्रोत",
-    "target": "लक्ष्य",
-    "moveToGroup": "समूह में ले जाएँ",
-    "selectGroup": "समूह चुनें...",
-    "addConnection": "कनेक्शन जोड़ें",
-    "hostDetails": "होस्ट विवरण",
-    "removeFromGroup": "समूह से निकालें",
-    "addHostHere": "यहाँ होस्ट जोड़ें",
-    "editGroup": "समूह संपादित करें",
-    "delete": "हटाएँ",
-    "add": "जोड़ें",
-    "create": "बनाएँ",
-    "move": "ले जाएँ",
-    "connect": "कनेक्ट करें",
-    "createGroup": "समूह बनाएँ",
-    "selectSourcePlaceholder": "स्रोत चुनें...",
-    "selectTargetPlaceholder": "लक्ष्य चुनें...",
-    "invalidFile": "अमान्य फ़ाइल",
-    "hostAlreadyExists": "होस्ट पहले से टोपोलॉजी में मौजूद है",
-    "connectionExists": "कनेक्शन पहले से मौजूद है",
-    "unknown": "अज्ञात",
-    "name": "नाम",
-    "ip": "IP",
-    "status": "स्थिति",
-    "failedToAddNode": "नोड जोड़ने में विफल",
-    "sourceDifferentFromTarget": "स्रोत और लक्ष्य भिन्न होने चाहिए",
-    "exportJSON": "JSON निर्यात करें",
-    "importJSON": "JSON आयात करें",
-    "serverStats": "होस्ट मेट्रिक्स",
-    "noNodes": "अभी तक कोई नोड नहीं"
-  },
-  "nav": {
-    "networkGraph": "नेटवर्क ग्राफ़"
-  },
-  "dashboard": {
-    "networkGraph": "नेटवर्क ग्राफ़"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} नोड्स"
-  },
-  "permissions": {
-    "use": {
-      "title": "नेटवर्क ग्राफ़ का उपयोग करें",
-      "description": "नेटवर्क टोपोलॉजी ग्राफ को देखें और संपादित करें।"
-    }
-  },
-  "hosts": {
-    "docsLink": "दस्तावेज़ देखें"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/hu_HU.json b/plugins/network-topology/locales/translated/hu_HU.json
deleted file mode 100644
index 2b381459e..000000000
--- a/plugins/network-topology/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Gazdagép hozzáadása",
-    "addGroup": "Csoport hozzáadása",
-    "addLink": "Link hozzáadása",
-    "zoomIn": "Nagyítás",
-    "zoomOut": "Kicsinyítés",
-    "resetView": "Nézet visszaállítása",
-    "selectHost": "Válasszon gazdagépet",
-    "chooseHost": "Válassz egy tárhelyszolgáltatót...",
-    "parentGroup": "Szülőcsoport",
-    "noGroup": "Nincs csoport",
-    "groupName": "Csoport neve",
-    "color": "Szín",
-    "source": "Forrás",
-    "target": "Cél",
-    "moveToGroup": "Áthelyezés csoportba",
-    "selectGroup": "Csoport kiválasztása...",
-    "addConnection": "Kapcsolat hozzáadása",
-    "hostDetails": "Gazdagép adatai",
-    "removeFromGroup": "Eltávolítás a csoportból",
-    "addHostHere": "Gazdagép hozzáadása ide",
-    "editGroup": "Csoport szerkesztése",
-    "delete": "Töröl",
-    "add": "Hozzáadás",
-    "create": "Teremt",
-    "move": "Mozog",
-    "connect": "Csatlakozás",
-    "createGroup": "Csoport létrehozása",
-    "selectSourcePlaceholder": "Forrás kiválasztása...",
-    "selectTargetPlaceholder": "Cél kiválasztása...",
-    "invalidFile": "Érvénytelen fájl",
-    "hostAlreadyExists": "A gazdagép már szerepel a topológiában",
-    "connectionExists": "A kapcsolat már létezik",
-    "unknown": "Ismeretlen",
-    "name": "Név",
-    "ip": "IP-cím",
-    "status": "Állapot",
-    "failedToAddNode": "Nem sikerült hozzáadni a csomópontot",
-    "sourceDifferentFromTarget": "A forrásnak és a célnak eltérőnek kell lennie",
-    "exportJSON": "JSON exportálása",
-    "importJSON": "JSON importálása",
-    "serverStats": "Gazdagép-metrikák",
-    "noNodes": "Még nincsenek csomópontok"
-  },
-  "nav": {
-    "networkGraph": "Hálózati gráf"
-  },
-  "dashboard": {
-    "networkGraph": "Hálózati gráf"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} csomópontok"
-  },
-  "permissions": {
-    "use": {
-      "title": "Hálózati gráf használata",
-      "description": "A hálózati topológia grafikonjának megtekintése és szerkesztése."
-    }
-  },
-  "hosts": {
-    "docsLink": "Dokumentumok megtekintése"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/id_ID.json b/plugins/network-topology/locales/translated/id_ID.json
deleted file mode 100644
index 9fbeb332c..000000000
--- a/plugins/network-topology/locales/translated/id_ID.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Tambahkan Host",
-    "addGroup": "Tambahkan Grup",
-    "addLink": "Tambahkan Tautan",
-    "zoomIn": "Perbesar",
-    "zoomOut": "Perkecil tampilan",
-    "resetView": "Atur Ulang Tampilan",
-    "selectHost": "Pilih Host",
-    "chooseHost": "Pilih tuan rumah...",
-    "parentGroup": "Kelompok Orang Tua",
-    "noGroup": "Tidak Ada Grup",
-    "groupName": "Nama Grup",
-    "color": "Warna",
-    "source": "Sumber",
-    "target": "Target",
-    "moveToGroup": "Pindah ke Grup",
-    "selectGroup": "Pilih grup...",
-    "addConnection": "Tambahkan Koneksi",
-    "hostDetails": "Detail Tuan Rumah",
-    "removeFromGroup": "Hapus dari Grup",
-    "addHostHere": "Tambahkan Host di Sini",
-    "editGroup": "Grup Pengeditan",
-    "delete": "Menghapus",
-    "add": "Menambahkan",
-    "create": "Membuat",
-    "move": "Bergerak",
-    "connect": "Menghubungkan",
-    "createGroup": "Buat Grup",
-    "selectSourcePlaceholder": "Pilih Sumber...",
-    "selectTargetPlaceholder": "Pilih Target...",
-    "invalidFile": "Berkas tidak valid",
-    "hostAlreadyExists": "Host sudah ada dalam topologi.",
-    "connectionExists": "Koneksi sudah ada.",
-    "unknown": "Tidak dikenal",
-    "name": "Nama",
-    "ip": "AKU P",
-    "status": "Status",
-    "failedToAddNode": "Gagal menambahkan node",
-    "sourceDifferentFromTarget": "Sumber dan target harus berbeda.",
-    "exportJSON": "Ekspor JSON",
-    "importJSON": "Impor JSON",
-    "serverStats": "Metrik Host",
-    "noNodes": "Belum ada node"
-  },
-  "nav": {
-    "networkGraph": "Grafik Jaringan"
-  },
-  "dashboard": {
-    "networkGraph": "Grafik Jaringan"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} node"
-  },
-  "permissions": {
-    "use": {
-      "title": "Gunakan grafik jaringan.",
-      "description": "Lihat dan edit grafik topologi jaringan."
-    }
-  },
-  "hosts": {
-    "docsLink": "Lihat dokumen"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/it_IT.json b/plugins/network-topology/locales/translated/it_IT.json
deleted file mode 100644
index a62d5df22..000000000
--- a/plugins/network-topology/locales/translated/it_IT.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Aggiungi host",
-    "addGroup": "Aggiungi gruppo",
-    "addLink": "Aggiungi collegamento",
-    "zoomIn": "Ingrandisci",
-    "zoomOut": "Riduci",
-    "resetView": "Reimposta vista",
-    "selectHost": "Seleziona host",
-    "chooseHost": "Scegli un host...",
-    "parentGroup": "Gruppo padre",
-    "noGroup": "Nessun gruppo",
-    "groupName": "Nome gruppo",
-    "color": "Colore",
-    "source": "Origine",
-    "target": "Destinazione",
-    "moveToGroup": "Sposta nel gruppo",
-    "selectGroup": "Seleziona gruppo...",
-    "addConnection": "Aggiungi connessione",
-    "hostDetails": "Dettagli host",
-    "removeFromGroup": "Rimuovi dal gruppo",
-    "addHostHere": "Aggiungi host qui",
-    "editGroup": "Modifica gruppo",
-    "delete": "Elimina",
-    "add": "Aggiungi",
-    "create": "Crea",
-    "move": "Sposta",
-    "connect": "Connetti",
-    "createGroup": "Crea gruppo",
-    "selectSourcePlaceholder": "Seleziona origine...",
-    "selectTargetPlaceholder": "Seleziona destinazione...",
-    "invalidFile": "File non valido",
-    "hostAlreadyExists": "L'host è già presente nella topologia",
-    "connectionExists": "La connessione esiste già",
-    "unknown": "Sconosciuto",
-    "name": "Nome",
-    "ip": "IP",
-    "status": "Stato",
-    "failedToAddNode": "Impossibile aggiungere il nodo",
-    "sourceDifferentFromTarget": "Origine e destinazione devono essere diverse",
-    "exportJSON": "Esporta JSON",
-    "importJSON": "Importa JSON",
-    "serverStats": "Metriche host",
-    "noNodes": "Nessun nodo al momento"
-  },
-  "nav": {
-    "networkGraph": "Grafico di rete"
-  },
-  "dashboard": {
-    "networkGraph": "Grafico di rete"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} nodi"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilizzare un grafico di rete",
-      "description": "Visualizza e modifica il grafico della topologia di rete."
-    }
-  },
-  "hosts": {
-    "docsLink": "Visualizza documentazione"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/ja_JP.json b/plugins/network-topology/locales/translated/ja_JP.json
deleted file mode 100644
index bc6c7d359..000000000
--- a/plugins/network-topology/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "ホストを追加",
-    "addGroup": "グループを追加",
-    "addLink": "リンクを追加",
-    "zoomIn": "拡大",
-    "zoomOut": "縮小",
-    "resetView": "表示をリセット",
-    "selectHost": "ホストを選択",
-    "chooseHost": "ホストを選択...",
-    "parentGroup": "親グループ",
-    "noGroup": "グループなし",
-    "groupName": "グループ名",
-    "color": "色",
-    "source": "ソース",
-    "target": "ターゲット",
-    "moveToGroup": "グループに移動",
-    "selectGroup": "グループを選択...",
-    "addConnection": "接続を追加",
-    "hostDetails": "ホスト詳細",
-    "removeFromGroup": "グループから削除",
-    "addHostHere": "ここにホストを追加",
-    "editGroup": "グループを編集",
-    "delete": "削除",
-    "add": "追加",
-    "create": "作成",
-    "move": "移動",
-    "connect": "接続",
-    "createGroup": "グループを作成",
-    "selectSourcePlaceholder": "ソースを選択...",
-    "selectTargetPlaceholder": "ターゲットを選択...",
-    "invalidFile": "無効なファイル",
-    "hostAlreadyExists": "ホストはトポロジーに既に存在します",
-    "connectionExists": "接続は既に存在しています",
-    "unknown": "不明",
-    "name": "名前",
-    "ip": "IP",
-    "status": "ステータス",
-    "failedToAddNode": "ノードの追加に失敗しました",
-    "sourceDifferentFromTarget": "ソースとターゲットは異なる必要があります",
-    "exportJSON": "JSON エクスポート",
-    "importJSON": "JSON インポート",
-    "serverStats": "ホストメトリクス",
-    "noNodes": "ノードはまだありません"
-  },
-  "nav": {
-    "networkGraph": "ネットワークグラフ"
-  },
-  "dashboard": {
-    "networkGraph": "ネットワークグラフ"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} ノード"
-  },
-  "permissions": {
-    "use": {
-      "title": "ネットワークグラフを使用する",
-      "description": "ネットワークトポロジーグラフを表示および編集します。"
-    }
-  },
-  "hosts": {
-    "docsLink": "ドキュメントを表示"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/ko_KR.json b/plugins/network-topology/locales/translated/ko_KR.json
deleted file mode 100644
index 476f113d2..000000000
--- a/plugins/network-topology/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "호스트 추가",
-    "addGroup": "그룹 추가",
-    "addLink": "링크 추가",
-    "zoomIn": "확대",
-    "zoomOut": "축소",
-    "resetView": "보기 초기화",
-    "selectHost": "호스트 선택",
-    "chooseHost": "호스트 선택...",
-    "parentGroup": "상위 그룹",
-    "noGroup": "그룹 없음",
-    "groupName": "그룹 이름",
-    "color": "색상",
-    "source": "소스",
-    "target": "대상",
-    "moveToGroup": "그룹으로 이동",
-    "selectGroup": "그룹 선택...",
-    "addConnection": "연결 추가",
-    "hostDetails": "호스트 세부 정보",
-    "removeFromGroup": "그룹에서 제거",
-    "addHostHere": "여기에 호스트 추가",
-    "editGroup": "그룹 편집",
-    "delete": "삭제",
-    "add": "추가",
-    "create": "생성",
-    "move": "이동",
-    "connect": "연결",
-    "createGroup": "그룹 생성",
-    "selectSourcePlaceholder": "소스 선택...",
-    "selectTargetPlaceholder": "대상 선택...",
-    "invalidFile": "잘못된 파일",
-    "hostAlreadyExists": "호스트가 이미 토폴로지에 있습니다.",
-    "connectionExists": "연결이 이미 존재합니다.",
-    "unknown": "알 수 없음",
-    "name": "이름",
-    "ip": "IP",
-    "status": "상태",
-    "failedToAddNode": "노드를 추가하지 못했습니다.",
-    "sourceDifferentFromTarget": "소스와 대상은 달라야 합니다.",
-    "exportJSON": "JSON 내보내기",
-    "importJSON": "JSON 가져오기",
-    "serverStats": "호스트 메트릭",
-    "noNodes": "아직 노드 없음"
-  },
-  "nav": {
-    "networkGraph": "네트워크 그래프"
-  },
-  "dashboard": {
-    "networkGraph": "네트워크 그래프"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}}개 노드"
-  },
-  "permissions": {
-    "use": {
-      "title": "네트워크 그래프를 사용하세요",
-      "description": "네트워크 토폴로지 그래프를 보고 편집할 수 있습니다."
-    }
-  },
-  "hosts": {
-    "docsLink": "문서 보기"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/nl_NL.json b/plugins/network-topology/locales/translated/nl_NL.json
deleted file mode 100644
index fddc4edae..000000000
--- a/plugins/network-topology/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Voeg een host toe",
-    "addGroup": "Groep toevoegen",
-    "addLink": "Link toevoegen",
-    "zoomIn": "Inzoomen",
-    "zoomOut": "Uitzoomen",
-    "resetView": "Weergave opnieuw instellen",
-    "selectHost": "Selecteer host",
-    "chooseHost": "Kies een host...",
-    "parentGroup": "Oudergroep",
-    "noGroup": "Geen groep",
-    "groupName": "Groepsnaam",
-    "color": "Kleur",
-    "source": "Bron",
-    "target": "Doel",
-    "moveToGroup": "Verplaatsen naar groep",
-    "selectGroup": "Selecteer groep...",
-    "addConnection": "Verbinding toevoegen",
-    "hostDetails": "Gegevens van de gastheer",
-    "removeFromGroup": "Verwijderen uit groep",
-    "addHostHere": "Voeg hier de host toe",
-    "editGroup": "Groep bewerken",
-    "delete": "Verwijderen",
-    "add": "Toevoegen",
-    "create": "Creëren",
-    "move": "Beweging",
-    "connect": "Verbinden",
-    "createGroup": "Groep aanmaken",
-    "selectSourcePlaceholder": "Selecteer bron...",
-    "selectTargetPlaceholder": "Doel selecteren...",
-    "invalidFile": "Ongeldig bestand",
-    "hostAlreadyExists": "De host bevindt zich al in de topologie.",
-    "connectionExists": "De verbinding bestaat al",
-    "unknown": "Onbekend",
-    "name": "Naam",
-    "ip": "IP",
-    "status": "Status",
-    "failedToAddNode": "Het toevoegen van het knooppunt is mislukt.",
-    "sourceDifferentFromTarget": "Bron en doel moeten verschillend zijn.",
-    "exportJSON": "Exporteer JSON",
-    "importJSON": "JSON importeren",
-    "serverStats": "Hoststatistieken",
-    "noNodes": "Nog geen knooppunten"
-  },
-  "nav": {
-    "networkGraph": "Netwerkgrafiek"
-  },
-  "dashboard": {
-    "networkGraph": "Netwerkgrafiek"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} knooppunten"
-  },
-  "permissions": {
-    "use": {
-      "title": "Gebruik een netwerkgrafiek",
-      "description": "Bekijk en bewerk de netwerktopologiegrafiek."
-    }
-  },
-  "hosts": {
-    "docsLink": "Documenten bekijken"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/no_NO.json b/plugins/network-topology/locales/translated/no_NO.json
deleted file mode 100644
index f61368d1c..000000000
--- a/plugins/network-topology/locales/translated/no_NO.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Legg til vert",
-    "addGroup": "Legg til gruppe",
-    "addLink": "Legg til lenke",
-    "zoomIn": "Zoom inn",
-    "zoomOut": "Zoom ut",
-    "resetView": "Tilbakestill visning",
-    "selectHost": "Velg vert",
-    "chooseHost": "Velg en vert...",
-    "parentGroup": "Foreldregruppe",
-    "noGroup": "Ingen gruppe",
-    "groupName": "Gruppenavn",
-    "color": "Farge",
-    "source": "Kilde",
-    "target": "Mål",
-    "moveToGroup": "Flytt til gruppe",
-    "selectGroup": "Velg gruppe...",
-    "addConnection": "Legg til tilkobling",
-    "hostDetails": "Vertsdetaljer",
-    "removeFromGroup": "Fjern fra gruppen",
-    "addHostHere": "Legg til vert her",
-    "editGroup": "Rediger gruppe",
-    "delete": "Slett",
-    "add": "Legg til",
-    "create": "Skape",
-    "move": "Flytt",
-    "connect": "Koble til",
-    "createGroup": "Opprett gruppe",
-    "selectSourcePlaceholder": "Velg kilde...",
-    "selectTargetPlaceholder": "Velg mål...",
-    "invalidFile": "Ugyldig fil",
-    "hostAlreadyExists": "Verten er allerede i topologien",
-    "connectionExists": "Tilkoblingen finnes allerede",
-    "unknown": "Ukjent",
-    "name": "Navn",
-    "ip": "IP-adresse",
-    "status": "Status",
-    "failedToAddNode": "Kunne ikke legge til node",
-    "sourceDifferentFromTarget": "Kilde og mål må være forskjellige",
-    "exportJSON": "Eksporter JSON",
-    "importJSON": "Importer JSON",
-    "serverStats": "Vertsmålinger",
-    "noNodes": "Ingen noder ennå"
-  },
-  "nav": {
-    "networkGraph": "Nettverksgraf"
-  },
-  "dashboard": {
-    "networkGraph": "Nettverksgraf"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} noder"
-  },
-  "permissions": {
-    "use": {
-      "title": "Bruk nettverksgrafen",
-      "description": "Vis og rediger nettverkstopologigrafen."
-    }
-  },
-  "hosts": {
-    "docsLink": "Vis dokumenter"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/pl_PL.json b/plugins/network-topology/locales/translated/pl_PL.json
deleted file mode 100644
index 1bc589f61..000000000
--- a/plugins/network-topology/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Dodaj hosta",
-    "addGroup": "Dodaj grupę",
-    "addLink": "Dodaj link",
-    "zoomIn": "Powiększ",
-    "zoomOut": "Oddal",
-    "resetView": "Resetuj widok",
-    "selectHost": "Wybierz hosta",
-    "chooseHost": "Wybierz hosta...",
-    "parentGroup": "Grupa nadrzędna",
-    "noGroup": "Brak grupy",
-    "groupName": "Nazwa grupy",
-    "color": "Kolor",
-    "source": "Źródło",
-    "target": "Cel",
-    "moveToGroup": "Przenieś do grupy",
-    "selectGroup": "Wybierz grupę...",
-    "addConnection": "Dodaj połączenie",
-    "hostDetails": "Szczegóły hosta",
-    "removeFromGroup": "Usuń z grupy",
-    "addHostHere": "Dodaj hosta tutaj",
-    "editGroup": "Edytuj grupę",
-    "delete": "Usuń",
-    "add": "Dodaj",
-    "create": "Utwórz",
-    "move": "Przenieś",
-    "connect": "Połącz",
-    "createGroup": "Utwórz grupę",
-    "selectSourcePlaceholder": "Wybierz źródło...",
-    "selectTargetPlaceholder": "Wybierz cel...",
-    "invalidFile": "Nieprawidłowy plik",
-    "hostAlreadyExists": "Host jest już w topologii",
-    "connectionExists": "Połączenie już istnieje",
-    "unknown": "Nieznany",
-    "name": "Nazwa",
-    "ip": "IP",
-    "status": "Status",
-    "failedToAddNode": "Nie udało się dodać węzła",
-    "sourceDifferentFromTarget": "Źródło i cel muszą być różne",
-    "exportJSON": "Eksportuj JSON",
-    "importJSON": "Importuj JSON",
-    "serverStats": "Metryki hosta",
-    "noNodes": "Brak węzłów"
-  },
-  "nav": {
-    "networkGraph": "Graf sieci"
-  },
-  "dashboard": {
-    "networkGraph": "Graf sieci"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} węzłów"
-  },
-  "permissions": {
-    "use": {
-      "title": "Użyj grafu sieciowego",
-      "description": "Przeglądaj i edytuj wykres topologii sieci."
-    }
-  },
-  "hosts": {
-    "docsLink": "Zobacz dokumentację"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/pt_BR.json b/plugins/network-topology/locales/translated/pt_BR.json
deleted file mode 100644
index 901385a26..000000000
--- a/plugins/network-topology/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Adicionar host",
-    "addGroup": "Adicionar grupo",
-    "addLink": "Adicionar link",
-    "zoomIn": "Ampliar",
-    "zoomOut": "Diminuir o zoom",
-    "resetView": "Redefinir visualização",
-    "selectHost": "Selecione o host",
-    "chooseHost": "Escolha um anfitrião...",
-    "parentGroup": "Grupo de Pais",
-    "noGroup": "Nenhum grupo",
-    "groupName": "Nome do grupo",
-    "color": "Cor",
-    "source": "Fonte",
-    "target": "Alvo",
-    "moveToGroup": "Mover para o grupo",
-    "selectGroup": "Selecione o grupo...",
-    "addConnection": "Adicionar conexão",
-    "hostDetails": "Detalhes do anfitrião",
-    "removeFromGroup": "Remover do grupo",
-    "addHostHere": "Adicione o host aqui",
-    "editGroup": "Editar grupo",
-    "delete": "Apagar",
-    "add": "Adicionar",
-    "create": "Criar",
-    "move": "Mover",
-    "connect": "Conectar",
-    "createGroup": "Criar grupo",
-    "selectSourcePlaceholder": "Selecione a fonte...",
-    "selectTargetPlaceholder": "Selecione o alvo...",
-    "invalidFile": "Arquivo inválido",
-    "hostAlreadyExists": "O host já está na topologia.",
-    "connectionExists": "A conexão já existe.",
-    "unknown": "Desconhecido",
-    "name": "Nome",
-    "ip": "IP",
-    "status": "Status",
-    "failedToAddNode": "Falha ao adicionar nó",
-    "sourceDifferentFromTarget": "A origem e o destino devem ser diferentes.",
-    "exportJSON": "Exportar JSON",
-    "importJSON": "Importar JSON",
-    "serverStats": "Métricas do Host",
-    "noNodes": "Ainda não há nós."
-  },
-  "nav": {
-    "networkGraph": "Gráfico da Rede"
-  },
-  "dashboard": {
-    "networkGraph": "Gráfico da Rede"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} nós"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilize o gráfico de rede.",
-      "description": "Visualize e edite o gráfico da topologia da rede."
-    }
-  },
-  "hosts": {
-    "docsLink": "Documentação"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/pt_PT.json b/plugins/network-topology/locales/translated/pt_PT.json
deleted file mode 100644
index fc6065c68..000000000
--- a/plugins/network-topology/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Adicionar Host",
-    "addGroup": "Adicionar Grupo",
-    "addLink": "Adicionar Ligação",
-    "zoomIn": "Ampliar",
-    "zoomOut": "Reduzir",
-    "resetView": "Repor Vista",
-    "selectHost": "Selecionar Host",
-    "chooseHost": "Escolher um host...",
-    "parentGroup": "Grupo Pai",
-    "noGroup": "Nenhum grupo",
-    "groupName": "Nome do Grupo",
-    "color": "Cor",
-    "source": "Origem",
-    "target": "Destino",
-    "moveToGroup": "Mover para Grupo",
-    "selectGroup": "Selecionar grupo...",
-    "addConnection": "Adicionar Ligação",
-    "hostDetails": "Detalhes do Host",
-    "removeFromGroup": "Remover do Grupo",
-    "addHostHere": "Adicionar Host Aqui",
-    "editGroup": "Editar Grupo",
-    "delete": "Eliminar",
-    "add": "Adicionar",
-    "create": "Criar",
-    "move": "Mover",
-    "connect": "Ligar",
-    "createGroup": "Criar Grupo",
-    "selectSourcePlaceholder": "Selecionar Origem...",
-    "selectTargetPlaceholder": "Selecionar Destino...",
-    "invalidFile": "Ficheiro Inválido",
-    "hostAlreadyExists": "O host já está na topologia.",
-    "connectionExists": "A ligação já existe",
-    "unknown": "Desconhecido",
-    "name": "Nome",
-    "ip": "IP",
-    "status": "Estado",
-    "failedToAddNode": "Falha ao adicionar nó",
-    "sourceDifferentFromTarget": "A origem e o destino devem ser diferentes",
-    "exportJSON": "Exportar JSON",
-    "importJSON": "Importar JSON",
-    "serverStats": "Métricas do host",
-    "noNodes": "Ainda sem nós"
-  },
-  "nav": {
-    "networkGraph": "Gráfico de rede"
-  },
-  "dashboard": {
-    "networkGraph": "Gráfico de Rede"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} nós"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilize o gráfico de rede.",
-      "description": "Visualize e edite o gráfico da topologia da rede."
-    }
-  },
-  "hosts": {
-    "docsLink": "Ver documentação"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/ro_RO.json b/plugins/network-topology/locales/translated/ro_RO.json
deleted file mode 100644
index 1387c69cf..000000000
--- a/plugins/network-topology/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Adăugați gazdă",
-    "addGroup": "Adăugați un grup",
-    "addLink": "Adăugați link",
-    "zoomIn": "Mărire",
-    "zoomOut": "Micșorare",
-    "resetView": "Resetare vizualizare",
-    "selectHost": "Selectați gazda",
-    "chooseHost": "Alege o gazdă...",
-    "parentGroup": "Grupul de părinți",
-    "noGroup": "Fără grup",
-    "groupName": "Numele grupului",
-    "color": "Culoare",
-    "source": "Sursă",
-    "target": "Ţintă",
-    "moveToGroup": "Mutare în grup",
-    "selectGroup": "Selectați grupul...",
-    "addConnection": "Adăugați o conexiune",
-    "hostDetails": "Detalii gazdă",
-    "removeFromGroup": "Eliminare din grup",
-    "addHostHere": "Adăugați gazda aici",
-    "editGroup": "Editați grupul",
-    "delete": "Şterge",
-    "add": "Adăuga",
-    "create": "Crea",
-    "move": "Mişcare",
-    "connect": "Conectează-te",
-    "createGroup": "Creare grup",
-    "selectSourcePlaceholder": "Selectați sursa...",
-    "selectTargetPlaceholder": "Selectați țintă...",
-    "invalidFile": "Fișier nevalid",
-    "hostAlreadyExists": "Gazda se află deja în topologie",
-    "connectionExists": "Conexiunea există deja",
-    "unknown": "Necunoscut",
-    "name": "Nume",
-    "ip": "IP-ul",
-    "status": "Stare",
-    "failedToAddNode": "Nu s-a putut adăuga nodul",
-    "sourceDifferentFromTarget": "Sursa și ținta trebuie să fie diferite",
-    "exportJSON": "Export JSON",
-    "importJSON": "Import JSON",
-    "serverStats": "Metrici ale gazdei",
-    "noNodes": "Încă nu există noduri"
-  },
-  "nav": {
-    "networkGraph": "Grafic de rețea"
-  },
-  "dashboard": {
-    "networkGraph": "Grafic de rețea"
-  },
-  "dashboardTab": {
-    "nodes": "noduri {{count}}"
-  },
-  "permissions": {
-    "use": {
-      "title": "Folosește graficul de rețea",
-      "description": "Vizualizați și editați graficul topologiei rețelei."
-    }
-  },
-  "hosts": {
-    "docsLink": "Vizualizați documentele"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/ru_RU.json b/plugins/network-topology/locales/translated/ru_RU.json
deleted file mode 100644
index 20b040c27..000000000
--- a/plugins/network-topology/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Добавить хост",
-    "addGroup": "Добавить группу",
-    "addLink": "Добавить связь",
-    "zoomIn": "Приблизить",
-    "zoomOut": "Отдалить",
-    "resetView": "Сбросить вид",
-    "selectHost": "Выбрать хост",
-    "chooseHost": "Выберите хост...",
-    "parentGroup": "Родительская группа",
-    "noGroup": "Без группы",
-    "groupName": "Имя группы",
-    "color": "Цвет",
-    "source": "Источник",
-    "target": "Цель",
-    "moveToGroup": "Переместить в группу",
-    "selectGroup": "Выберите группу...",
-    "addConnection": "Добавить соединение",
-    "hostDetails": "Сведения о хосте",
-    "removeFromGroup": "Удалить из группы",
-    "addHostHere": "Добавить хост сюда",
-    "editGroup": "Редактировать группу",
-    "delete": "Удалить",
-    "add": "Добавить",
-    "create": "Создать",
-    "move": "Переместить",
-    "connect": "Соединить",
-    "createGroup": "Создать группу",
-    "selectSourcePlaceholder": "Выберите источник...",
-    "selectTargetPlaceholder": "Выберите цель...",
-    "invalidFile": "Неверный файл",
-    "hostAlreadyExists": "Хост уже присутствует в топологии",
-    "connectionExists": "Соединение уже существует",
-    "unknown": "Неизвестно",
-    "name": "Имя",
-    "ip": "IP",
-    "status": "Статус",
-    "failedToAddNode": "Не удалось добавить узел",
-    "sourceDifferentFromTarget": "Источник и цель должны различаться",
-    "exportJSON": "Экспорт JSON",
-    "importJSON": "Импорт JSON",
-    "serverStats": "Метрики хоста",
-    "noNodes": "Пока нет узлов"
-  },
-  "nav": {
-    "networkGraph": "Сетевой график"
-  },
-  "dashboard": {
-    "networkGraph": "Сетевой график"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} узлов"
-  },
-  "permissions": {
-    "use": {
-      "title": "Используйте сетевой граф",
-      "description": "Просмотр и редактирование графа топологии сети."
-    }
-  },
-  "hosts": {
-    "docsLink": "Документация"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/sr_SP.json b/plugins/network-topology/locales/translated/sr_SP.json
deleted file mode 100644
index 8599d450a..000000000
--- a/plugins/network-topology/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Додај хоста",
-    "addGroup": "Додај групу",
-    "addLink": "Додај линк",
-    "zoomIn": "Увећај",
-    "zoomOut": "Умањи",
-    "resetView": "Ресетуј приказ",
-    "selectHost": "Изаберите хост",
-    "chooseHost": "Изаберите домаћина...",
-    "parentGroup": "Матична група",
-    "noGroup": "Нема групе",
-    "groupName": "Назив групе",
-    "color": "Боја",
-    "source": "Извор",
-    "target": "Циљ",
-    "moveToGroup": "Премести у групу",
-    "selectGroup": "Изаберите групу...",
-    "addConnection": "Додај везу",
-    "hostDetails": "Детаљи домаћина",
-    "removeFromGroup": "Уклони из групе",
-    "addHostHere": "Додај хост овде",
-    "editGroup": "Уреди групу",
-    "delete": "Обриши",
-    "add": "Додај",
-    "create": "Креирај",
-    "move": "Помери",
-    "connect": "Повежи се",
-    "createGroup": "Направи групу",
-    "selectSourcePlaceholder": "Изаберите извор...",
-    "selectTargetPlaceholder": "Изаберите циљ...",
-    "invalidFile": "Неважећа датотека",
-    "hostAlreadyExists": "Хост је већ у топологији",
-    "connectionExists": "Веза већ постоји",
-    "unknown": "Непознато",
-    "name": "Име",
-    "ip": "ИП",
-    "status": "Статус",
-    "failedToAddNode": "Додавање чвора није успело",
-    "sourceDifferentFromTarget": "Извор и циљ морају бити различити",
-    "exportJSON": "Извези JSON",
-    "importJSON": "Увези JSON",
-    "serverStats": "Метрике хоста",
-    "noNodes": "Још нема чворова"
-  },
-  "nav": {
-    "networkGraph": "Мрежни графикон"
-  },
-  "dashboard": {
-    "networkGraph": "Мрежни графикон"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} чворова"
-  },
-  "permissions": {
-    "use": {
-      "title": "Користите мрежни графикон",
-      "description": "Прегледајте и уредите графикон топологије мреже."
-    }
-  },
-  "hosts": {
-    "docsLink": "Прикажи документе"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/sv_SE.json b/plugins/network-topology/locales/translated/sv_SE.json
deleted file mode 100644
index 072efe105..000000000
--- a/plugins/network-topology/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Lägg till värd",
-    "addGroup": "Lägg till grupp",
-    "addLink": "Lägg till länk",
-    "zoomIn": "Zooma in",
-    "zoomOut": "Zooma ut",
-    "resetView": "Återställ vy",
-    "selectHost": "Välj värd",
-    "chooseHost": "Välj en värd...",
-    "parentGroup": "Föräldragrupp",
-    "noGroup": "Ingen grupp",
-    "groupName": "Gruppnamn",
-    "color": "Färg",
-    "source": "Källa",
-    "target": "Mål",
-    "moveToGroup": "Flytta till grupp",
-    "selectGroup": "Välj grupp...",
-    "addConnection": "Lägg till anslutning",
-    "hostDetails": "Värduppgifter",
-    "removeFromGroup": "Ta bort från gruppen",
-    "addHostHere": "Lägg till värd här",
-    "editGroup": "Redigera grupp",
-    "delete": "Radera",
-    "add": "Tillägga",
-    "create": "Skapa",
-    "move": "Flytta",
-    "connect": "Ansluta",
-    "createGroup": "Skapa grupp",
-    "selectSourcePlaceholder": "Välj källa...",
-    "selectTargetPlaceholder": "Välj mål...",
-    "invalidFile": "Ogiltig fil",
-    "hostAlreadyExists": "Värden finns redan i topologin",
-    "connectionExists": "Anslutningen finns redan",
-    "unknown": "Okänd",
-    "name": "Namn",
-    "ip": "IP-adress",
-    "status": "Status",
-    "failedToAddNode": "Misslyckades med att lägga till nod",
-    "sourceDifferentFromTarget": "Källa och mål måste vara olika",
-    "exportJSON": "Exportera JSON",
-    "importJSON": "Importera JSON",
-    "serverStats": "Värdstatistik",
-    "noNodes": "Inga noder ännu"
-  },
-  "nav": {
-    "networkGraph": "Nätverksgraf"
-  },
-  "dashboard": {
-    "networkGraph": "Nätverksgraf"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} noder"
-  },
-  "permissions": {
-    "use": {
-      "title": "Använd nätverksgraf",
-      "description": "Visa och redigera nätverkstopologigrafen."
-    }
-  },
-  "hosts": {
-    "docsLink": "Visa dokument"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/th_TH.json b/plugins/network-topology/locales/translated/th_TH.json
deleted file mode 100644
index 7950f67d4..000000000
--- a/plugins/network-topology/locales/translated/th_TH.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "เพิ่มโฮสต์",
-    "addGroup": "เพิ่มกลุ่ม",
-    "addLink": "เพิ่มลิงก์",
-    "zoomIn": "ซูมเข้า",
-    "zoomOut": "ซูมออก",
-    "resetView": "รีเซ็ตมุมมอง",
-    "selectHost": "เลือกโฮสต์",
-    "chooseHost": "เลือกเจ้าภาพ...",
-    "parentGroup": "กลุ่มผู้ปกครอง",
-    "noGroup": "ไม่มีกลุ่ม",
-    "groupName": "ชื่อกลุ่ม",
-    "color": "สี",
-    "source": "แหล่งที่มา",
-    "target": "เป้า",
-    "moveToGroup": "ย้ายไปยังกลุ่ม",
-    "selectGroup": "เลือกกลุ่ม...",
-    "addConnection": "เพิ่มการเชื่อมต่อ",
-    "hostDetails": "รายละเอียดโฮสต์",
-    "removeFromGroup": "ลบออกจากกลุ่ม",
-    "addHostHere": "เพิ่มโฮสต์ที่นี่",
-    "editGroup": "แก้ไขกลุ่ม",
-    "delete": "ลบ",
-    "add": "เพิ่ม",
-    "create": "สร้าง",
-    "move": "เคลื่อนไหว",
-    "connect": "เชื่อมต่อ",
-    "createGroup": "สร้างกลุ่ม",
-    "selectSourcePlaceholder": "เลือกแหล่งที่มา...",
-    "selectTargetPlaceholder": "เลือกเป้าหมาย...",
-    "invalidFile": "ไฟล์ไม่ถูกต้อง",
-    "hostAlreadyExists": "โฮสต์อยู่ในโทโพโลยีแล้ว",
-    "connectionExists": "การเชื่อมต่อมีอยู่แล้ว",
-    "unknown": "ไม่ทราบ",
-    "name": "ชื่อ",
-    "ip": "ไอพี",
-    "status": "สถานะ",
-    "failedToAddNode": "ไม่สามารถเพิ่มโหนดได้",
-    "sourceDifferentFromTarget": "แหล่งที่มาและเป้าหมายต้องแตกต่างกัน",
-    "exportJSON": "ส่งออก JSON",
-    "importJSON": "นำเข้า JSON",
-    "serverStats": "เมตริกโฮสต์",
-    "noNodes": "ยังไม่มีโหนด"
-  },
-  "nav": {
-    "networkGraph": "กราฟเครือข่าย"
-  },
-  "dashboard": {
-    "networkGraph": "กราฟเครือข่าย"
-  },
-  "dashboardTab": {
-    "nodes": "โหนด {{count}}"
-  },
-  "permissions": {
-    "use": {
-      "title": "ใช้กราฟเครือข่าย",
-      "description": "ดูและแก้ไขแผนผังโครงสร้างเครือข่าย"
-    }
-  },
-  "hosts": {
-    "docsLink": "ดูเอกสาร"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/tr_TR.json b/plugins/network-topology/locales/translated/tr_TR.json
deleted file mode 100644
index e4c9fe86c..000000000
--- a/plugins/network-topology/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Sunucu Ekle",
-    "addGroup": "Grup Ekle",
-    "addLink": "Bağlantı Ekle",
-    "zoomIn": "Yakınlaştır",
-    "zoomOut": "Uzaklaştır",
-    "resetView": "Görünümü Sıfırla",
-    "selectHost": "Sunucu Seç",
-    "chooseHost": "Bir sunucu seçin...",
-    "parentGroup": "Üst Grup",
-    "noGroup": "Grup Yok",
-    "groupName": "Grup Adı",
-    "color": "Renk",
-    "source": "Kaynak",
-    "target": "Hedef",
-    "moveToGroup": "Gruba Taşı",
-    "selectGroup": "Grup seçin...",
-    "addConnection": "Bağlantı Ekle",
-    "hostDetails": "Sunucu Detayları",
-    "removeFromGroup": "Gruptan Kaldır",
-    "addHostHere": "Buraya Sunucu Ekle",
-    "editGroup": "Grubu Düzenle",
-    "delete": "Sil",
-    "add": "Ekle",
-    "create": "Oluştur",
-    "move": "Taşı",
-    "connect": "Bağlan",
-    "createGroup": "Grup Oluştur",
-    "selectSourcePlaceholder": "Kaynak Seçin...",
-    "selectTargetPlaceholder": "Hedef Seçin...",
-    "invalidFile": "Geçersiz Dosya",
-    "hostAlreadyExists": "Sunucu zaten topolojide var",
-    "connectionExists": "Bağlantı zaten var",
-    "unknown": "Bilinmiyor",
-    "name": "Ad",
-    "ip": "IP",
-    "status": "Durum",
-    "failedToAddNode": "Düğüm eklenemedi",
-    "sourceDifferentFromTarget": "Kaynak ve hedef farklı olmalıdır",
-    "exportJSON": "JSON Dışa Aktar",
-    "importJSON": "JSON İçe Aktar",
-    "serverStats": "Sunucu Metrikleri",
-    "noNodes": "Henüz düğüm yok"
-  },
-  "nav": {
-    "networkGraph": "Ağ Grafiği"
-  },
-  "dashboard": {
-    "networkGraph": "Ağ Grafiği"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} düğüm"
-  },
-  "permissions": {
-    "use": {
-      "title": "Ağ grafiği kullanın.",
-      "description": "Ağ topolojisi grafiğini görüntüleyin ve düzenleyin."
-    }
-  },
-  "hosts": {
-    "docsLink": "Dokümanları görüntüle"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/uk_UA.json b/plugins/network-topology/locales/translated/uk_UA.json
deleted file mode 100644
index 4d429f71a..000000000
--- a/plugins/network-topology/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Додати хоста",
-    "addGroup": "Додати групу",
-    "addLink": "Додати посилання",
-    "zoomIn": "Збільшити масштаб",
-    "zoomOut": "Зменшити масштаб",
-    "resetView": "Скинути вигляд",
-    "selectHost": "Виберіть хоста",
-    "chooseHost": "Виберіть хоста...",
-    "parentGroup": "Батьківська група",
-    "noGroup": "Без групи",
-    "groupName": "Назва групи",
-    "color": "Колір",
-    "source": "Джерело",
-    "target": "Ціль",
-    "moveToGroup": "Перемістити до групи",
-    "selectGroup": "Виберіть групу...",
-    "addConnection": "Додати підключення",
-    "hostDetails": "Деталі хоста",
-    "removeFromGroup": "Видалити з групи",
-    "addHostHere": "Додати хост тут",
-    "editGroup": "Редагувати групу",
-    "delete": "Видалити",
-    "add": "Додати",
-    "create": "Створити",
-    "move": "Перемістити",
-    "connect": "Підключитися",
-    "createGroup": "Створити групу",
-    "selectSourcePlaceholder": "Виберіть джерело...",
-    "selectTargetPlaceholder": "Виберіть ціль...",
-    "invalidFile": "Недійсний файл",
-    "hostAlreadyExists": "Хост вже є в топології",
-    "connectionExists": "З'єднання вже існує",
-    "unknown": "Невідомо",
-    "name": "Ім'я",
-    "ip": "ІП",
-    "status": "Статус",
-    "failedToAddNode": "Не вдалося додати вузол",
-    "sourceDifferentFromTarget": "Джерело та ціль мають бути різними",
-    "exportJSON": "Експорт JSON",
-    "importJSON": "Імпорт JSON",
-    "serverStats": "Метрики хоста",
-    "noNodes": "Поки що немає вузлів"
-  },
-  "nav": {
-    "networkGraph": "Мережевий графік"
-  },
-  "dashboard": {
-    "networkGraph": "Мережевий графік"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} вузлів"
-  },
-  "permissions": {
-    "use": {
-      "title": "Використовуйте мережевий графік",
-      "description": "Перегляд та редагування графа топології мережі."
-    }
-  },
-  "hosts": {
-    "docsLink": "Переглянути документи"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/vi_VN.json b/plugins/network-topology/locales/translated/vi_VN.json
deleted file mode 100644
index a5820af16..000000000
--- a/plugins/network-topology/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "Thêm máy chủ",
-    "addGroup": "Thêm nhóm",
-    "addLink": "Thêm liên kết",
-    "zoomIn": "Phóng to",
-    "zoomOut": "Thu nhỏ",
-    "resetView": "Đặt lại khung nhìn",
-    "selectHost": "Chọn máy chủ",
-    "chooseHost": "Chọn một máy chủ...",
-    "parentGroup": "Nhóm cha",
-    "noGroup": "Không nhóm",
-    "groupName": "Tên nhóm",
-    "color": "Màu sắc",
-    "source": "Nguồn",
-    "target": "Đích",
-    "moveToGroup": "Di chuyển vào nhóm",
-    "selectGroup": "Chọn nhóm...",
-    "addConnection": "Thêm kết nối",
-    "hostDetails": "Chi tiết máy chủ",
-    "removeFromGroup": "Xóa khỏi nhóm",
-    "addHostHere": "Thêm máy chủ tại đây",
-    "editGroup": "Sửa nhóm",
-    "delete": "Xóa",
-    "add": "Thêm",
-    "create": "Tạo",
-    "move": "Di chuyển",
-    "connect": "Kết nối",
-    "createGroup": "Tạo nhóm",
-    "selectSourcePlaceholder": "Chọn nguồn...",
-    "selectTargetPlaceholder": "Chọn đích...",
-    "invalidFile": "Tệp không hợp lệ",
-    "hostAlreadyExists": "Máy chủ đã có trong cấu trúc liên kết",
-    "connectionExists": "Kết nối đã tồn tại",
-    "unknown": "Không xác định",
-    "name": "Tên",
-    "ip": "IP",
-    "status": "Trạng thái",
-    "failedToAddNode": "Không thể thêm nút",
-    "sourceDifferentFromTarget": "Nguồn và đích phải khác nhau",
-    "exportJSON": "Xuất JSON",
-    "importJSON": "Nhập JSON",
-    "serverStats": "Số liệu máy chủ",
-    "noNodes": "Chưa có nút nào"
-  },
-  "nav": {
-    "networkGraph": "Biểu đồ mạng"
-  },
-  "dashboard": {
-    "networkGraph": "Biểu đồ Mạng"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} node"
-  },
-  "permissions": {
-    "use": {
-      "title": "Sử dụng đồ thị mạng",
-      "description": "Xem và chỉnh sửa đồ thị cấu trúc mạng."
-    }
-  },
-  "hosts": {
-    "docsLink": "Xem tài liệu"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/zh_CN.json b/plugins/network-topology/locales/translated/zh_CN.json
deleted file mode 100644
index 01306482c..000000000
--- a/plugins/network-topology/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "添加主机",
-    "addGroup": "添加分组",
-    "addLink": "添加链接",
-    "zoomIn": "放大",
-    "zoomOut": "缩小",
-    "resetView": "重置视图",
-    "selectHost": "选择主机",
-    "chooseHost": "选择主机...",
-    "parentGroup": "父分组",
-    "noGroup": "无分组",
-    "groupName": "分组名称",
-    "color": "颜色",
-    "source": "源",
-    "target": "目标",
-    "moveToGroup": "移至分组",
-    "selectGroup": "选择分组...",
-    "addConnection": "添加连接",
-    "hostDetails": "主机详情",
-    "removeFromGroup": "移出群组",
-    "addHostHere": "在此添加主机",
-    "editGroup": "编辑群组",
-    "delete": "删除",
-    "add": "添加",
-    "create": "创建",
-    "move": "移动",
-    "connect": "连接",
-    "createGroup": "创建群组",
-    "selectSourcePlaceholder": "选择源...",
-    "selectTargetPlaceholder": "选择目标...",
-    "invalidFile": "无效文件",
-    "hostAlreadyExists": "主机已在拓扑中",
-    "connectionExists": "连接已存在",
-    "unknown": "未知",
-    "name": "名称",
-    "ip": "IP",
-    "status": "状态",
-    "failedToAddNode": "添加节点失败",
-    "sourceDifferentFromTarget": "源和目标必须不同",
-    "exportJSON": "导出 JSON",
-    "importJSON": "导入 JSON",
-    "serverStats": "主机指标",
-    "noNodes": "尚无节点"
-  },
-  "nav": {
-    "networkGraph": "网络拓扑图"
-  },
-  "dashboard": {
-    "networkGraph": "网络图表"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} 个节点"
-  },
-  "permissions": {
-    "use": {
-      "title": "使用网络图",
-      "description": "查看和编辑网络拓扑图。"
-    }
-  },
-  "hosts": {
-    "docsLink": "查看文档"
-  }
-}
diff --git a/plugins/network-topology/locales/translated/zh_TW.json b/plugins/network-topology/locales/translated/zh_TW.json
deleted file mode 100644
index fdf13aff9..000000000
--- a/plugins/network-topology/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "networkGraph": {
-    "addHost": "新增主機",
-    "addGroup": "新增群組",
-    "addLink": "新增連結",
-    "zoomIn": "放大",
-    "zoomOut": "縮小",
-    "resetView": "重置檢視",
-    "selectHost": "選取主機",
-    "chooseHost": "選擇主機...",
-    "parentGroup": "父群組",
-    "noGroup": "無群組",
-    "groupName": "群組名稱",
-    "color": "顏色",
-    "source": "來源",
-    "target": "目標",
-    "moveToGroup": "移至群組",
-    "selectGroup": "選取群組...",
-    "addConnection": "新增連線",
-    "hostDetails": "主機詳細資料",
-    "removeFromGroup": "從群組中移除",
-    "addHostHere": "在此新增主機",
-    "editGroup": "編輯群組",
-    "delete": "刪除",
-    "add": "新增",
-    "create": "建立",
-    "move": "移動",
-    "connect": "連線",
-    "createGroup": "建立群組",
-    "selectSourcePlaceholder": "選取來源...",
-    "selectTargetPlaceholder": "選取目標...",
-    "invalidFile": "無效的檔案",
-    "hostAlreadyExists": "主機已存在於拓撲中",
-    "connectionExists": "連線已存在",
-    "unknown": "未知",
-    "name": "名稱",
-    "ip": "IP",
-    "status": "狀態",
-    "failedToAddNode": "無法新增節點",
-    "sourceDifferentFromTarget": "來源與目標必須不同",
-    "exportJSON": "匯出 JSON",
-    "importJSON": "匯入 JSON",
-    "serverStats": "主機指標",
-    "noNodes": "尚無節點"
-  },
-  "nav": {
-    "networkGraph": "網路圖表"
-  },
-  "dashboard": {
-    "networkGraph": "網路圖表"
-  },
-  "dashboardTab": {
-    "nodes": "{{count}} 個節點"
-  },
-  "permissions": {
-    "use": {
-      "title": "使用網路圖",
-      "description": "查看和編輯網路拓撲圖。"
-    }
-  },
-  "hosts": {
-    "docsLink": "檢視文件"
-  }
-}
diff --git a/plugins/network-topology/manifest.json b/plugins/network-topology/manifest.json
deleted file mode 100644
index 69e2e8403..000000000
--- a/plugins/network-topology/manifest.json
+++ /dev/null
@@ -1,53 +0,0 @@
-{
-  "id": "network-topology",
-  "name": "Network Topology",
-  "version": "1.0.0",
-  "description": "Show your hosts and how they connect as an interactive graph.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Infrastructure",
-  "icon": "Network",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": ["db:own", "network:serve", "ui:surface"],
-  "provides": [
-    {
-      "service": "network-topology.graph",
-      "version": "1.0.0",
-      "permission": "network-topology.use"
-    }
-  ],
-  "contributes": {
-    "tabs": [
-      {
-        "id": "network_graph",
-        "titleKey": "nav.networkGraph",
-        "icon": "Network",
-        "openFrom": ["rail", "palette"]
-      }
-    ],
-    "dashboardCards": [
-      {
-        "id": "network_graph",
-        "titleKey": "dashboard.networkGraph",
-        "icon": "Network"
-      }
-    ],
-    "permissions": [
-      {
-        "name": "use",
-        "titleKey": "permissions.use.title",
-        "descriptionKey": "permissions.use.description",
-        "defaultRoles": ["admin", "user"]
-      }
-    ],
-    "syncEntities": ["networkTopology"]
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"]
-}
diff --git a/plugins/network-topology/migrations/mysql/0001_adopt_network_topology.sql b/plugins/network-topology/migrations/mysql/0001_adopt_network_topology.sql
deleted file mode 100644
index 60a74ff95..000000000
--- a/plugins/network-topology/migrations/mysql/0001_adopt_network_topology.sql
+++ /dev/null
@@ -1,12 +0,0 @@
--- network-topology 0001: adopt_network_topology
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `network_topology` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `topology` text,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `network_topology` TO `p_network_topology_graphs`;
diff --git a/plugins/network-topology/migrations/postgres/0001_adopt_network_topology.sql b/plugins/network-topology/migrations/postgres/0001_adopt_network_topology.sql
deleted file mode 100644
index 77cb9e244..000000000
--- a/plugins/network-topology/migrations/postgres/0001_adopt_network_topology.sql
+++ /dev/null
@@ -1,12 +0,0 @@
--- network-topology 0001: adopt_network_topology
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "network_topology" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "topology" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "network_topology" RENAME TO "p_network_topology_graphs";
diff --git a/plugins/network-topology/migrations/snapshot.json b/plugins/network-topology/migrations/snapshot.json
deleted file mode 100644
index 3bbbe3bd2..000000000
--- a/plugins/network-topology/migrations/snapshot.json
+++ /dev/null
@@ -1,34 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "graphs": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "topology": {
-          "type": "text"
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "updatedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [],
-      "adopts": "network_topology"
-    }
-  }
-}
diff --git a/plugins/network-topology/migrations/sqlite/0001_adopt_network_topology.sql b/plugins/network-topology/migrations/sqlite/0001_adopt_network_topology.sql
deleted file mode 100644
index d4f3d1554..000000000
--- a/plugins/network-topology/migrations/sqlite/0001_adopt_network_topology.sql
+++ /dev/null
@@ -1,12 +0,0 @@
--- network-topology 0001: adopt_network_topology
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "network_topology" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "topology" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "network_topology" RENAME TO "p_network_topology_graphs";
diff --git a/plugins/network-topology/package.json b/plugins/network-topology/package.json
deleted file mode 100644
index 7b582db90..000000000
--- a/plugins/network-topology/package.json
+++ /dev/null
@@ -1,32 +0,0 @@
-{
-  "name": "@termix-plugin/network-topology",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "cytoscape": "^3.34.3",
-    "lucide-react": "^1.33.0",
-    "react-cytoscapejs": "^2.0.0"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "react": "^19.2.8"
-  }
-}
diff --git a/plugins/network-topology/src/backend/index.ts b/plugins/network-topology/src/backend/index.ts
deleted file mode 100644
index daa3dcbef..000000000
--- a/plugins/network-topology/src/backend/index.ts
+++ /dev/null
@@ -1,72 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { graphs } from "./tables.js";
-import { createGraphRepository } from "./repository.js";
-import { registerGraphRoutes } from "./routes.js";
-import { mapTopologyHostIds } from "./topology-host-ids.js";
-
-/** What other plugins get from ctx.services.get("network-topology.graph"). */
-export interface NetworkTopologyService {
-  /** The calling user's saved topology, or null if they have none. */
-  get: () => Promise<unknown | null>;
-}
-
-export async function activate(ctx: PluginContext) {
-  const table = await ctx.db.define(graphs);
-  const repo = createGraphRepository(ctx.db, table);
-
-  registerGraphRoutes(ctx.http.router<Router>(), repo, ctx);
-
-  ctx.sync.registerEntity({
-    type: "networkTopology",
-    table,
-    order: 100,
-    singleton: true,
-    // Host ids live inside the topology JSON rather than in a column, so the
-    // generic reference machinery cannot reach them.
-    serialize: async (row, resolveSyncId) => ({
-      ...row,
-      topology: await mapTopologyHostIds(
-        row.topology as string | null | undefined,
-        async (id) => {
-          const numericId = Number(id);
-          if (!Number.isInteger(numericId)) return null;
-          return resolveSyncId("hosts", numericId);
-        },
-      ),
-    }),
-    deserialize: async (row, resolveId) => ({
-      ...row,
-      topology: await mapTopologyHostIds(
-        row.topology as string | null | undefined,
-        async (syncId) => {
-          const id = await resolveId("hosts", syncId);
-          return id === null ? null : String(id);
-        },
-      ),
-    }),
-  });
-
-  const service: NetworkTopologyService = {
-    get: async () => {
-      const userId = ctx.currentActor();
-      if (!userId) return null;
-      const record = await repo.findByUserId(userId);
-      if (!record?.topology) return null;
-      try {
-        return JSON.parse(record.topology);
-      } catch {
-        return null;
-      }
-    },
-  };
-  ctx.services.provide("network-topology.graph", service);
-
-  ctx.log.info(
-    "Network Topology routes mounted at /plugin-api/network-topology",
-  );
-}
-
-export async function deactivate() {
-  // Everything above was registered through ctx and is disposed by core.
-}
diff --git a/plugins/network-topology/src/backend/repository.ts b/plugins/network-topology/src/backend/repository.ts
deleted file mode 100644
index e10762b5f..000000000
--- a/plugins/network-topology/src/backend/repository.ts
+++ /dev/null
@@ -1,58 +0,0 @@
-import { eq } from "drizzle-orm";
-import type { PluginDatabase } from "@termix/plugin-sdk/backend";
-
-export interface GraphRecord {
-  id: number;
-  userId: string;
-  topology: string | null;
-  createdAt: string;
-  updatedAt: string;
-}
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// The table comes from ctx.db.define, which the SDK hands back untyped, and
-// the drizzle handle is the server's own. Typed at this module's edge instead.
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export type GraphRepository = ReturnType<typeof createGraphRepository>;
-
-/** Per-user network topology storage, one row per user. */
-export function createGraphRepository(db: PluginDatabase, table: Table) {
-  const client = () => db.client<Drizzle>();
-
-  return {
-    async findByUserId(userId: string): Promise<GraphRecord | null> {
-      const drizzle = await client();
-      const rows = await drizzle
-        .select()
-        .from(table)
-        .where(eq(table.userId, userId))
-        .limit(1);
-      return (rows[0] as GraphRecord) ?? null;
-    },
-
-    async upsertForUser(userId: string, topology: string): Promise<void> {
-      const drizzle = await client();
-      const now = new Date().toISOString();
-      const rows = await drizzle
-        .select()
-        .from(table)
-        .where(eq(table.userId, userId))
-        .limit(1);
-
-      if (rows[0]) {
-        await drizzle
-          .update(table)
-          .set({ topology, updatedAt: now })
-          .where(eq(table.userId, userId));
-      } else {
-        await drizzle
-          .insert(table)
-          .values({ userId, topology, createdAt: now, updatedAt: now });
-      }
-      await db.persist();
-    },
-  };
-}
diff --git a/plugins/network-topology/src/backend/routes.ts b/plugins/network-topology/src/backend/routes.ts
deleted file mode 100644
index 98e03270b..000000000
--- a/plugins/network-topology/src/backend/routes.ts
+++ /dev/null
@@ -1,106 +0,0 @@
-import type { Request, Response, Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { GraphRepository } from "./repository.js";
-
-function actor(ctx: PluginContext): string {
-  // Core's plugin router authenticates every request and runs it as that user.
-  return ctx.currentActor() as string;
-}
-
-/**
- * Mounts the graph routes on the plugin's router, which core serves at
- * /plugin-api/network-topology with auth in front.
- */
-export function registerGraphRoutes(
-  router: Router,
-  repo: GraphRepository,
-  ctx: PluginContext,
-): void {
-  router.use(ctx.rbac.require("use") as never);
-
-  /**
-   * @openapi
-   * /plugin-api/network-topology:
-   *   get:
-   *     summary: Get network topology for authenticated user
-   *     description: Retrieves the saved network topology graph (nodes and edges) for the current user. Returns null if no topology exists.
-   *     tags:
-   *       - Network Topology
-   *     responses:
-   *       200:
-   *         description: Network topology retrieved successfully
-   *         content:
-   *           application/json:
-   *             schema:
-   *               type: object
-   *               nullable: true
-   *               properties:
-   *                 nodes:
-   *                   type: array
-   *                   description: Array of graph nodes (hosts and groups)
-   *                 edges:
-   *                   type: array
-   *                   description: Array of graph edges (connections)
-   */
-  router.get("/", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    try {
-      const record = await repo.findByUserId(userId);
-      const topology = record?.topology ? JSON.parse(record.topology) : null;
-      res.json(topology);
-    } catch (err) {
-      ctx.log.error(
-        "Failed to fetch network topology",
-        err instanceof Error ? err : new Error(String(err)),
-      );
-      res.status(500).json({ error: "Failed to fetch network topology" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/network-topology:
-   *   post:
-   *     summary: Save network topology for authenticated user
-   *     description: Saves or updates the network topology graph. Uses upsert logic - creates new record if none exists, updates existing record otherwise.
-   *     tags:
-   *       - Network Topology
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required:
-   *               - topology
-   *             properties:
-   *               topology:
-   *                 type: object
-   *                 description: Network topology data containing nodes and edges
-   *     responses:
-   *       200:
-   *         description: Topology saved successfully
-   *       400:
-   *         description: Invalid topology data
-   */
-  router.post("/", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const { topology } = req.body ?? {};
-    if (!topology) {
-      return res.status(400).json({ error: "Topology data is required" });
-    }
-
-    try {
-      const topologyStr =
-        typeof topology === "string" ? topology : JSON.stringify(topology);
-      await repo.upsertForUser(userId, topologyStr);
-      res.json({ success: true });
-    } catch (err) {
-      ctx.log.error(
-        "Failed to save network topology",
-        err instanceof Error ? err : new Error(String(err)),
-      );
-      res.status(500).json({ error: "Failed to save network topology" });
-    }
-  });
-}
diff --git a/plugins/network-topology/src/backend/tables.ts b/plugins/network-topology/src/backend/tables.ts
deleted file mode 100644
index f97c526e3..000000000
--- a/plugins/network-topology/src/backend/tables.ts
+++ /dev/null
@@ -1,27 +0,0 @@
-import {
-  adoptLegacyTable,
-  defineTable,
-  id,
-  refUser,
-  text,
-  timestamp,
-} from "@termix/plugin-sdk/db";
-
-/**
- * One row per user, holding their saved graph as a JSON blob.
- *
- * Adopted from core's network_topology, so the column names are the legacy
- * ones: the rename carries the existing rows across.
- */
-export const graphs = adoptLegacyTable(
-  "network_topology",
-  defineTable("graphs", {
-    id: id(),
-    userId: refUser(),
-    topology: text(),
-    createdAt: timestamp().notNull().defaultNow(),
-    updatedAt: timestamp().notNull().defaultNow(),
-  }),
-);
-
-export const tables = [graphs];
diff --git a/plugins/network-topology/src/backend/topology-host-ids.ts b/plugins/network-topology/src/backend/topology-host-ids.ts
deleted file mode 100644
index 029271fac..000000000
--- a/plugins/network-topology/src/backend/topology-host-ids.ts
+++ /dev/null
@@ -1,72 +0,0 @@
-interface TopologyNode {
-  data?: { id?: string; [key: string]: unknown };
-  [key: string]: unknown;
-}
-
-interface TopologyEdge {
-  data?: { source?: string; target?: string; [key: string]: unknown };
-  [key: string]: unknown;
-}
-
-interface Topology {
-  nodes?: TopologyNode[];
-  edges?: TopologyEdge[];
-  [key: string]: unknown;
-}
-
-/**
- * Node/edge ids in a topology are either a host's local numeric id (as a
- * string) or a client-generated group-<timestamp> id. Only the former is
- * meaningful across sides, so translate just those through the mapper and
- * leave group ids untouched. Nodes/edges that fail to resolve (host deleted,
- * or not synced to this side yet) are dropped rather than left dangling.
- */
-export async function mapTopologyHostIds(
-  topologyJson: string | null | undefined,
-  mapId: (id: string) => Promise<string | null>,
-): Promise<string | null> {
-  if (!topologyJson) return topologyJson ?? null;
-
-  let topology: Topology;
-  try {
-    topology = JSON.parse(topologyJson);
-  } catch {
-    return topologyJson;
-  }
-
-  const isGroupId = (id: string) => id.startsWith("group-");
-  const idMap = new Map<string, string | null>();
-
-  const resolve = async (id: string): Promise<string | null> => {
-    if (isGroupId(id)) return id;
-    if (!idMap.has(id)) idMap.set(id, await mapId(id));
-    return idMap.get(id) ?? null;
-  };
-
-  const nodes: TopologyNode[] = [];
-  for (const node of topology.nodes ?? []) {
-    const id = node.data?.id;
-    if (typeof id !== "string") continue;
-    const mapped = await resolve(id);
-    if (mapped === null) continue;
-    nodes.push({ ...node, data: { ...node.data, id: mapped } });
-  }
-
-  const nodeIds = new Set(nodes.map((n) => n.data?.id));
-  const edges: TopologyEdge[] = [];
-  for (const edge of topology.edges ?? []) {
-    const source = edge.data?.source;
-    const target = edge.data?.target;
-    if (typeof source !== "string" || typeof target !== "string") continue;
-    const mappedSource = await resolve(source);
-    const mappedTarget = await resolve(target);
-    if (mappedSource === null || mappedTarget === null) continue;
-    if (!nodeIds.has(mappedSource) || !nodeIds.has(mappedTarget)) continue;
-    edges.push({
-      ...edge,
-      data: { ...edge.data, source: mappedSource, target: mappedTarget },
-    });
-  }
-
-  return JSON.stringify({ ...topology, nodes, edges });
-}
diff --git a/plugins/network-topology/src/frontend/NetworkGraphCard.tsx b/plugins/network-topology/src/frontend/NetworkGraphCard.tsx
deleted file mode 100644
index f08a719e7..000000000
--- a/plugins/network-topology/src/frontend/NetworkGraphCard.tsx
+++ /dev/null
@@ -1,1424 +0,0 @@
-/* eslint-disable react-hooks/exhaustive-deps */
-import React, {
-  useEffect,
-  useState,
-  useRef,
-  useCallback,
-  useMemo,
-  useReducer,
-} from "react";
-import CytoscapeComponent from "react-cytoscapejs";
-import cytoscape from "cytoscape";
-import {
-  Card,
-  Button,
-  Badge,
-  AlertDialog,
-  AlertDialogContent,
-  AlertDialogDescription,
-  AlertDialogAction,
-  Dialog,
-  DialogContent,
-  DialogHeader,
-  DialogTitle,
-  DialogFooter,
-  Input,
-  Label,
-  Select2,
-  useTabsSafe,
-} from "@termix/plugin-sdk/ui";
-import {
-  useTranslation,
-  usePluginApi,
-  useHosts,
-  useTabs,
-  getHostStatusColorScheme,
-  useHostActions,
-  type PluginHostRecord,
-} from "@termix/plugin-sdk/frontend";
-import {
-  Plus,
-  Trash2,
-  ZoomIn,
-  ZoomOut,
-  RotateCw,
-  AlertCircle,
-  Download,
-  ExternalLink,
-  Upload,
-  Link2,
-  FolderPlus,
-  Edit,
-  FolderInput,
-  FolderMinus,
-  ArrowUp,
-  Network,
-  Loader2,
-} from "lucide-react";
-import {
-  createNetworkTopologyApi,
-  type NetworkTopologyData,
-  type NetworkTopologyNode,
-  type NetworkTopologyEdge,
-} from "./network-topology-api";
-
-const AVAILABLE_COLORS = [
-  { value: "#ef4444", label: "Red" },
-  { value: "#f97316", label: "Orange" },
-  { value: "#eab308", label: "Yellow" },
-  { value: "#22c55e", label: "Green" },
-  { value: "#3b82f6", label: "Blue" },
-  { value: "#a855f7", label: "Purple" },
-  { value: "#ec4899", label: "Pink" },
-  { value: "#6b7280", label: "Gray" },
-];
-
-type HostStatus = "online" | "offline" | "unknown";
-
-interface HostWithStatus extends PluginHostRecord {
-  status?: HostStatus;
-}
-
-interface HostMap {
-  [key: string]: HostWithStatus;
-}
-
-interface ContextMenuState {
-  visible: boolean;
-  x: number;
-  y: number;
-  targetId: string;
-  type: "node" | "group" | "edge" | null;
-}
-
-interface NetworkGraphCardProps {
-  isTopbarOpen?: boolean;
-  rightSidebarOpen?: boolean;
-  rightSidebarWidth?: number;
-  embedded?: boolean;
-  onOpenInNewTab?: () => void;
-  /** When false, pause status refresh while the surface stays mounted. */
-  isVisible?: boolean;
-}
-
-type NetworkElement = NetworkTopologyNode | NetworkTopologyEdge;
-
-// Resolving a CSS var forces a style recalc, and node SVGs are costly to
-// rebuild, so both are cached until the theme changes.
-const cssVarCache = new Map<string, string>();
-const nodeSvgCache = new Map<string, string>();
-
-function clearThemeCaches(): void {
-  cssVarCache.clear();
-  nodeSvgCache.clear();
-}
-
-function resolveCssVar(varName: string, fallback: string): string {
-  const key = varName + "|" + fallback;
-  let value = cssVarCache.get(key);
-  if (value === undefined) {
-    value = readCssVar(varName, fallback);
-    cssVarCache.set(key, value);
-  }
-  return value;
-}
-
-function readCssVar(varName: string, fallback: string): string {
-  const raw = getComputedStyle(document.documentElement)
-    .getPropertyValue(varName)
-    .trim();
-  if (!raw) return fallback;
-  const tmp = document.createElement("div");
-  tmp.style.position = "absolute";
-  tmp.style.visibility = "hidden";
-  tmp.style.backgroundColor = `var(${varName})`;
-  document.body.appendChild(tmp);
-  const resolved = getComputedStyle(tmp).backgroundColor;
-  document.body.removeChild(tmp);
-  if (
-    !resolved ||
-    resolved === "rgba(0, 0, 0, 0)" ||
-    resolved.includes("oklch")
-  )
-    return fallback;
-  return resolved;
-}
-
-const NODE_W = 220;
-const NODE_H = 88;
-
-function buildNodeSvg(
-  name: string,
-  ip: string,
-  tags: string[],
-  status: string,
-): string {
-  const key = JSON.stringify([
-    name,
-    ip,
-    tags,
-    status,
-    getHostStatusColorScheme(),
-    window.devicePixelRatio,
-  ]);
-  let svg = nodeSvgCache.get(key);
-  if (svg === undefined) {
-    if (nodeSvgCache.size > 1000) nodeSvgCache.clear();
-    svg = renderNodeSvg(name, ip, tags, status);
-    nodeSvgCache.set(key, svg);
-  }
-  return svg;
-}
-
-function renderNodeSvg(
-  name: string,
-  ip: string,
-  tags: string[],
-  status: string,
-): string {
-  const isOnline = status === "online";
-  const isOffline = status === "offline";
-  const useRealColors = getHostStatusColorScheme() === "status";
-  let statusColor: string;
-  if (isOnline) {
-    statusColor = useRealColors
-      ? "rgb(16,185,129)"
-      : resolveCssVar("--accent-brand", "rgb(16,185,129)");
-  } else if (isOffline) {
-    statusColor = useRealColors ? "rgb(239,68,68)" : "rgba(16,185,129,0.2)";
-  } else {
-    statusColor = "rgb(100,116,139)";
-  }
-
-  const bg = resolveCssVar("--card", "#1e1e20");
-  const border = resolveCssVar("--border", "#2a2a2c");
-  const textPrimary = resolveCssVar("--card-foreground", "#f1f5f9");
-  const textSecondary = resolveCssVar("--muted-foreground", "#94a3b8");
-
-  const dpr = Math.min(window.devicePixelRatio || 1, 3);
-  const W = NODE_W * dpr;
-  const H = NODE_H * dpr;
-  const s = dpr;
-
-  const esc = (str: string) =>
-    str.replace(
-      /[<>&"]/g,
-      (c) =>
-        ({ "<": "&lt;", ">": "&gt;", "&": "&amp;", '"': "&quot;" })[c] ?? c,
-    );
-
-  const tagsHtml = tags
-    .slice(0, 3)
-    .map(
-      (tag) =>
-        `<span style="background:${statusColor};color:#fff;padding:${1 * s}px ${5 * s}px;border-radius:${2 * s}px;font-size:${8 * s}px;font-weight:700;margin:0 ${1 * s}px;white-space:nowrap;">${esc(tag)}</span>`,
-    )
-    .join("");
-
-  const serverIcon = `<path d="M${2 * s} ${2 * s} h${14 * s} a${1 * s} ${1 * s} 0 0 1 ${1 * s} ${1 * s} v${5 * s} a${1 * s} ${1 * s} 0 0 1 -${1 * s} ${1 * s} h-${14 * s} a${1 * s} ${1 * s} 0 0 1 -${1 * s} -${1 * s} v-${5 * s} a${1 * s} ${1 * s} 0 0 1 ${1 * s} -${1 * s}z" fill="none" stroke="${textSecondary}" stroke-width="${0.8 * s}" opacity="0.4"/>
-<circle cx="${14 * s}" cy="${5.5 * s}" r="${1.5 * s}" fill="${statusColor}" opacity="0.8"/>`;
-
-  return (
-    "data:image/svg+xml;utf8," +
-    encodeURIComponent(
-      `<svg xmlns="http://www.w3.org/2000/svg" width="${W}" height="${H}" viewBox="0 0 ${W} ${H}">
-  <defs>
-    <filter id="shadow" x="-10%" y="-10%" width="120%" height="130%">
-      <feDropShadow dx="0" dy="${1 * s}" stdDeviation="${2 * s}" flood-color="#000" flood-opacity="0.25"/>
-    </filter>
-    <clipPath id="nameClip">
-      <rect x="${14 * s}" y="${10 * s}" width="${175 * s}" height="${20 * s}"/>
-    </clipPath>
-  </defs>
-  <rect x="0" y="0" width="${W}" height="${H}" rx="${3 * s}" fill="${bg}" stroke="${border}" stroke-width="${s}" filter="url(#shadow)"/>
-  <rect x="0" y="0" width="${5 * s}" height="${H}" rx="${3 * s}" fill="${statusColor}"/>
-  <rect x="0" y="0" width="${5 * s}" height="${H}" fill="${statusColor}"/>
-  <g transform="translate(${W - 20 * s} ${3 * s})">${serverIcon}</g>
-  <text x="${14 * s}" y="${28 * s}" font-family="-apple-system,BlinkMacSystemFont,system-ui,sans-serif" font-size="${13 * s}" font-weight="700" fill="${textPrimary}" xml:space="preserve" clip-path="url(#nameClip)">${esc(name)}</text>
-  <text x="${14 * s}" y="${46 * s}" font-family="ui-monospace,monospace,sans-serif" font-size="${11 * s}" fill="${textSecondary}" xml:space="preserve">${esc(ip)}</text>
-  ${tagsHtml ? `<foreignObject x="${12 * s}" y="${56 * s}" width="${196 * s}" height="${24 * s}"><div xmlns="http://www.w3.org/1999/xhtml" style="display:flex;gap:${2 * s}px;flex-wrap:nowrap;overflow:hidden;">${tagsHtml}</div></foreignObject>` : ""}
-</svg>`,
-    )
-  );
-}
-
-export const NetworkGraphCard = React.memo(function NetworkGraphCard({
-  embedded = true,
-  onOpenInNewTab,
-  isVisible = true,
-}: NetworkGraphCardProps): React.ReactElement {
-  const { t } = useTranslation();
-  const hostActions = useHostActions();
-  const { addTab } = useTabsSafe();
-  const pluginApi = usePluginApi();
-  const api = useMemo(() => createNetworkTopologyApi(pluginApi), [pluginApi]);
-  const { hosts: liveHosts } = useHosts();
-
-  // Gate Cytoscape mounting on the container actually having non-zero dimensions.
-  // This avoids the "bb is undefined" crash when the card is hidden via display:none.
-  const [containerReady, setContainerReady] = useState(false);
-
-  // What cytoscape is seeded with on load. Edits go straight to cytoscape, and
-  // graphVersion tells the lists below to re-read it.
-  const [elements, setElements] = useState<NetworkElement[]>([]);
-  const [graphVersion, bumpGraphVersion] = useReducer((x: number) => x + 1, 0);
-  const [hostMap, setHostMap] = useState<HostMap>({});
-
-  const [loading, setLoading] = useState(true);
-  const [error, setError] = useState<string | null>(null);
-  const [selectedNodeId, setSelectedNodeId] = useState<string | null>(null);
-  const [selectedEdgeId, setSelectedEdgeId] = useState<string | null>(null);
-
-  const [showAddNodeDialog, setShowAddNodeDialog] = useState(false);
-  const [showAddEdgeDialog, setShowAddEdgeDialog] = useState(false);
-  const [showAddGroupDialog, setShowAddGroupDialog] = useState(false);
-  const [showEditGroupDialog, setShowEditGroupDialog] = useState(false);
-  const [showNodeDetail, setShowNodeDetail] = useState(false);
-  const [showMoveNodeDialog, setShowMoveNodeDialog] = useState(false);
-
-  const [selectedHostForAddNode, setSelectedHostForAddNode] = useState("");
-  const [selectedGroupForAddNode, setSelectedGroupForAddNode] =
-    useState("ROOT");
-  const [newGroupName, setNewGroupName] = useState("");
-  const [newGroupColor, setNewGroupColor] = useState("#3b82f6");
-  const [editingGroupId, setEditingGroupId] = useState<string | null>(null);
-  const [selectedGroupForMove, setSelectedGroupForMove] = useState("ROOT");
-  const [selectedHostForEdge, setSelectedHostForEdge] = useState("");
-  const [targetHostForEdge, setTargetHostForEdge] = useState("");
-  const [selectedNodeForDetail, setSelectedNodeForDetail] =
-    useState<HostWithStatus | null>(null);
-
-  const [contextMenu, setContextMenu] = useState<ContextMenuState>({
-    visible: false,
-    x: 0,
-    y: 0,
-    targetId: "",
-    type: null,
-  });
-
-  useEffect(() => {
-    if (containerReady) return;
-    const el = cyContainerRef.current;
-    if (!el) return;
-    const ro = new ResizeObserver((entries) => {
-      const { width, height } = entries[0].contentRect;
-      if (width > 0 && height > 0) {
-        setContainerReady(true);
-        ro.disconnect();
-      }
-    });
-    ro.observe(el);
-    return () => ro.disconnect();
-  }, [containerReady]);
-
-  const cyRef = useRef<cytoscape.Core | null>(null);
-  const contextMenuRef = useRef<HTMLDivElement>(null);
-  const fileInputRef = useRef<HTMLInputElement>(null);
-  const cyContainerRef = useRef<HTMLDivElement>(null);
-
-  // hostMap tracks the live host list, so status/tags update without polling.
-  useEffect(() => {
-    const newMap: HostMap = {};
-    (liveHosts as HostWithStatus[]).forEach((h) => (newMap[String(h.id)] = h));
-    setHostMap(newMap);
-
-    const cy = cyRef.current;
-    if (!cy) return;
-    cy.batch(() => {
-      cy.nodes().forEach((node) => {
-        if (node.isParent()) return;
-        const h = newMap[node.data("id")];
-        if (!h) return;
-        const status = h.status ?? "unknown";
-        const tags = h.tags ?? [];
-        if (node.data("status") !== status) node.data("status", status);
-        if (JSON.stringify(node.data("tags") ?? []) !== JSON.stringify(tags))
-          node.data("tags", tags);
-      });
-    });
-  }, [liveHosts]);
-
-  useEffect(() => {
-    if (!isVisible) return;
-    const onClickOutside = (e: MouseEvent) => {
-      if (
-        contextMenuRef.current &&
-        !contextMenuRef.current.contains(e.target as Node)
-      )
-        setContextMenu((p) => (p.visible ? { ...p, visible: false } : p));
-    };
-    document.addEventListener("mousedown", onClickOutside, true);
-
-    const themeObserver = new MutationObserver(() => {
-      clearThemeCaches();
-      if (cyRef.current) applyStyle(cyRef.current);
-    });
-    themeObserver.observe(document.documentElement, {
-      attributes: true,
-      attributeFilter: ["class", "data-theme"],
-    });
-
-    return () => {
-      document.removeEventListener("mousedown", onClickOutside, true);
-      themeObserver.disconnect();
-    };
-  }, [isVisible]);
-
-  const loadData = useCallback(async () => {
-    setLoading(true);
-    setError(null);
-    try {
-      const newMap: HostMap = {};
-      (liveHosts as HostWithStatus[]).forEach(
-        (h) => (newMap[String(h.id)] = h),
-      );
-      setHostMap(newMap);
-
-      let nodes: NetworkTopologyNode[] = [];
-      let edges: NetworkTopologyEdge[] = [];
-      try {
-        const topo = await api.get();
-        if (topo?.nodes && Array.isArray(topo.nodes)) {
-          nodes = topo.nodes.map((node) => {
-            const h = newMap[node.data.id];
-            return {
-              data: {
-                id: node.data.id,
-                label: h?.name || node.data.label || "Unknown",
-                ip: h ? `${h.ip}:${h.port}` : node.data.ip || "",
-                status: h?.status || "unknown",
-                tags: h?.tags || [],
-                parent: node.data.parent,
-                color: node.data.color,
-              },
-              position: node.position || { x: 0, y: 0 },
-            };
-          });
-          edges = topo.edges || [];
-        }
-      } catch {
-        /* start with empty topology */
-      }
-
-      const nodeIds = new Set(nodes.map((n) => n.data.id));
-      const validEdges = edges.filter(
-        (e) => nodeIds.has(e.data.source) && nodeIds.has(e.data.target),
-      );
-      setElements([...nodes, ...validEdges]);
-    } catch {
-      /* ignore */
-    } finally {
-      setLoading(false);
-    }
-  }, [api, liveHosts]);
-
-  useEffect(() => {
-    if (!isVisible) return;
-    void loadData();
-    // Only the initial load per visibility change; hostMap stays live via the
-    // liveHosts effect above.
-  }, [isVisible]);
-
-  const saveTimeoutRef = useRef<ReturnType<typeof setTimeout> | null>(null);
-
-  const saveCurrentLayout = useCallback(async () => {
-    if (!cyRef.current) return;
-    try {
-      const nodes = cyRef.current.nodes().map((n) => ({
-        data: {
-          id: n.data("id"),
-          label: n.data("label"),
-          ip: n.data("ip"),
-          status: n.data("status"),
-          tags: n.data("tags") || [],
-          parent: n.data("parent"),
-          color: n.data("color"),
-        },
-        position: n.position(),
-      }));
-      const edges = cyRef.current.edges().map((e) => ({
-        data: {
-          id: e.data("id"),
-          source: e.data("source"),
-          target: e.data("target"),
-        },
-      }));
-      await api.save({ nodes, edges } as NetworkTopologyData);
-    } catch {
-      /* ignore */
-    }
-  }, [api]);
-
-  const debouncedSave = useCallback(() => {
-    if (saveTimeoutRef.current) clearTimeout(saveTimeoutRef.current);
-    saveTimeoutRef.current = setTimeout(() => void saveCurrentLayout(), 1000);
-  }, [saveCurrentLayout]);
-
-  useEffect(() => {
-    if (!cyRef.current || loading || elements.length === 0) return;
-    const hasPositions = elements.some(
-      (el) =>
-        "position" in el &&
-        el.position &&
-        (el.position.x !== 0 || el.position.y !== 0),
-    );
-    if (!hasPositions) {
-      cyRef.current
-        .layout({
-          name: "cose",
-          animate: false,
-          randomize: true,
-          componentSpacing: 100,
-          nodeOverlap: 20,
-        })
-        .run();
-    } else {
-      cyRef.current.fit();
-    }
-  }, [loading]);
-
-  const applyStyle = useCallback((cy: cytoscape.Core) => {
-    const edgeColor = resolveCssVar("--border", "#4a4a4e");
-    const foreground = resolveCssVar("--foreground", "#f1f5f9");
-    cy.style()
-      .selector("node")
-      .style({
-        label: "",
-        width: `${NODE_W}px`,
-        height: `${NODE_H}px`,
-        shape: "rectangle",
-        "border-width": "0px",
-        "background-opacity": 0,
-        "background-image": (ele) =>
-          buildNodeSvg(
-            ele.data("label") || "",
-            ele.data("ip") || "",
-            ele.data("tags") || [],
-            ele.data("status") || "unknown",
-          ),
-        "background-fit": "contain",
-      })
-      .selector("node:parent")
-      .style({
-        "background-image": "none",
-        "background-color": (ele) => ele.data("color") || "#1e3a8a",
-        "background-opacity": 0.08,
-        "border-color": (ele) => ele.data("color") || "#3b82f6",
-        "border-width": "1.5px",
-        "border-style": "dashed",
-        label: "data(label)",
-        "text-valign": "top",
-        "text-halign": "center",
-        "text-margin-y": -6,
-        color: foreground,
-        "font-size": "13px",
-        "font-weight": "bold",
-        shape: "rectangle",
-        padding: "20px",
-      })
-      .selector("edge")
-      .style({
-        width: "1.5px",
-        "line-color": edgeColor,
-        "curve-style": "bezier",
-        "target-arrow-shape": "none",
-      })
-      .selector("edge:selected")
-      .style({ "line-color": "#f59145", width: "2.5px" })
-      .selector("node:selected")
-      .style({
-        "overlay-color": "#f59145",
-        "overlay-opacity": 0.06,
-        "overlay-padding": "6px",
-      })
-      .update();
-  }, []);
-
-  // react-cytoscapejs calls this after every render, so set up each instance once.
-  const initializedCyRef = useRef<cytoscape.Core | null>(null);
-  const handleNodeInit = useCallback(
-    (cy: cytoscape.Core) => {
-      cyRef.current = cy;
-      if (initializedCyRef.current === cy) return;
-      initializedCyRef.current = cy;
-      if (embedded) {
-        cy.nodes().forEach((n) => {
-          n.ungrabify();
-        });
-      } else {
-        cy.nodes().forEach((n) => {
-          n.grabify();
-        });
-      }
-      applyStyle(cy);
-
-      cy.on("tap", "node", (evt) => {
-        setContextMenu((p) => (p.visible ? { ...p, visible: false } : p));
-        setSelectedEdgeId(null);
-        setSelectedNodeId(evt.target.id());
-      });
-      cy.on("tap", "edge", (evt) => {
-        evt.stopPropagation();
-        setSelectedEdgeId(evt.target.id());
-        setSelectedNodeId(null);
-      });
-      cy.on("tap", (evt) => {
-        if (evt.target === cy) {
-          setContextMenu((p) => (p.visible ? { ...p, visible: false } : p));
-          setSelectedNodeId(null);
-          setSelectedEdgeId(null);
-        }
-      });
-      cy.on("cxttap", "node", (evt) => {
-        evt.preventDefault();
-        evt.stopPropagation();
-        const node = evt.target;
-        const nodeId = node.id();
-        const isGroup = node.isParent() || String(nodeId).startsWith("group-");
-        if (isGroup && embedded) return;
-        setContextMenu({
-          visible: true,
-          x: evt.originalEvent.clientX,
-          y: evt.originalEvent.clientY,
-          targetId: nodeId,
-          type: isGroup ? "group" : "node",
-        });
-      });
-      cy.on("zoom pan", () =>
-        setContextMenu((p) => (p.visible ? { ...p, visible: false } : p)),
-      );
-      cy.on("free", "node", () => !embedded && debouncedSave());
-      cy.on("add remove", () => bumpGraphVersion());
-      cy.on("data", "node", (evt) => {
-        if (evt.target.isParent()) bumpGraphVersion();
-      });
-      cy.on("boxselect", "node", () => {
-        const sel = cy.$("node:selected");
-        if (sel.length === 1) setSelectedNodeId(sel[0].id());
-      });
-    },
-    [applyStyle, debouncedSave, embedded],
-  );
-
-  // Zoom centered on the viewport midpoint, no panning
-  const zoomIn = useCallback(() => {
-    const cy = cyRef.current;
-    if (!cy || !cyContainerRef.current) return;
-    const rect = cyContainerRef.current.getBoundingClientRect();
-    cy.zoom({
-      level: cy.zoom() * 1.25,
-      renderedPosition: { x: rect.width / 2, y: rect.height / 2 },
-    });
-  }, []);
-
-  const zoomOut = useCallback(() => {
-    const cy = cyRef.current;
-    if (!cy || !cyContainerRef.current) return;
-    const rect = cyContainerRef.current.getBoundingClientRect();
-    cy.zoom({
-      level: cy.zoom() / 1.25,
-      renderedPosition: { x: rect.width / 2, y: rect.height / 2 },
-    });
-  }, []);
-
-  const hideMenu = () => setContextMenu((p) => ({ ...p, visible: false }));
-
-  const shellTabs = useTabs();
-  const fireOpen = (hostId: string, type?: string) => {
-    const host = liveHosts.find((candidate) => String(candidate.id) === hostId);
-    if (host) shellTabs.connectHost(host, type);
-  };
-
-  const handleContextAction = (action: string) => {
-    hideMenu();
-    const targetId = contextMenu.targetId;
-    if (!cyRef.current) return;
-    if (action === "details") {
-      const h = hostMap[targetId];
-      if (h) {
-        setSelectedNodeForDetail(h);
-        setShowNodeDetail(true);
-      }
-    } else if (action === "connect") {
-      fireOpen(targetId);
-    } else if (action === "move") {
-      setSelectedNodeId(targetId);
-      const node = cyRef.current.$id(targetId);
-      setSelectedGroupForMove(node.data("parent") || "ROOT");
-      setShowMoveNodeDialog(true);
-    } else if (action === "removeFromGroup") {
-      cyRef.current.$id(targetId).move({ parent: null });
-      debouncedSave();
-    } else if (action === "editGroup") {
-      const node = cyRef.current.$id(targetId);
-      setEditingGroupId(targetId);
-      setNewGroupName(node.data("label"));
-      setNewGroupColor(node.data("color") || "#3b82f6");
-      setShowEditGroupDialog(true);
-    } else if (action === "addHostToGroup") {
-      setSelectedGroupForAddNode(targetId);
-      setSelectedHostForAddNode("");
-      setShowAddNodeDialog(true);
-    } else if (action === "delete") {
-      cyRef.current.$id(targetId).remove();
-      debouncedSave();
-    }
-  };
-
-  const handleConnectAction = (appType: string) => {
-    hideMenu();
-    fireOpen(contextMenu.targetId, appType);
-  };
-
-  const handleConfirmAddNode = async () => {
-    if (!cyRef.current || !selectedHostForAddNode) return;
-    try {
-      if (cyRef.current.$id(selectedHostForAddNode).length > 0) {
-        setError(t("networkGraph.hostAlreadyExists"));
-        return;
-      }
-      const h = hostMap[selectedHostForAddNode];
-      const parent =
-        selectedGroupForAddNode === "ROOT"
-          ? undefined
-          : selectedGroupForAddNode;
-      cyRef.current.add({
-        data: {
-          id: selectedHostForAddNode,
-          label: h?.name || h?.ip || selectedHostForAddNode,
-          ip: h ? `${h.ip}:${h.port}` : "",
-          status: h?.status || "unknown",
-          tags: h?.tags || [],
-          parent,
-        },
-        position: {
-          x: 100 + Math.random() * 200,
-          y: 100 + Math.random() * 200,
-        },
-      });
-      setShowAddNodeDialog(false);
-      await saveCurrentLayout();
-    } catch {
-      setError(t("networkGraph.failedToAddNode"));
-    }
-  };
-
-  const handleAddGroup = async () => {
-    if (!cyRef.current || !newGroupName) return;
-    const groupId = `group-${Date.now()}`;
-    cyRef.current.add({
-      data: { id: groupId, label: newGroupName, color: newGroupColor },
-    });
-    setShowAddGroupDialog(false);
-    setNewGroupName("");
-    await saveCurrentLayout();
-  };
-
-  const handleUpdateGroup = async () => {
-    if (!cyRef.current || !editingGroupId || !newGroupName) return;
-    const g = cyRef.current.$id(editingGroupId);
-    g.data("label", newGroupName);
-    g.data("color", newGroupColor);
-    await saveCurrentLayout();
-    setShowEditGroupDialog(false);
-    setEditingGroupId(null);
-  };
-
-  const handleMoveNodeToGroup = async () => {
-    if (!cyRef.current || !selectedNodeId) return;
-    cyRef.current.$id(selectedNodeId).move({
-      parent: selectedGroupForMove === "ROOT" ? null : selectedGroupForMove,
-    });
-    await saveCurrentLayout();
-    setShowMoveNodeDialog(false);
-  };
-
-  const handleAddEdge = async () => {
-    if (!cyRef.current || !selectedHostForEdge || !targetHostForEdge) return;
-    if (selectedHostForEdge === targetHostForEdge)
-      return setError(t("networkGraph.sourceDifferentFromTarget"));
-    const edgeId = `${selectedHostForEdge}-${targetHostForEdge}`;
-    if (cyRef.current.$id(edgeId).length > 0)
-      return setError(t("networkGraph.connectionExists"));
-    cyRef.current.add({
-      data: {
-        id: edgeId,
-        source: selectedHostForEdge,
-        target: targetHostForEdge,
-      },
-    });
-    await saveCurrentLayout();
-    setShowAddEdgeDialog(false);
-  };
-
-  const handleRemoveSelected = () => {
-    if (!cyRef.current) return;
-    if (selectedNodeId) {
-      cyRef.current.$id(selectedNodeId).remove();
-      setSelectedNodeId(null);
-    } else if (selectedEdgeId) {
-      cyRef.current.$id(selectedEdgeId).remove();
-      setSelectedEdgeId(null);
-    }
-    debouncedSave();
-  };
-
-  const handleExport = () => {
-    if (!cyRef.current) return;
-    const json = JSON.stringify(cyRef.current.json().elements, null, 2);
-    const a = document.createElement("a");
-    a.href = URL.createObjectURL(
-      new Blob([json], { type: "application/json" }),
-    );
-    a.download = "network.json";
-    a.click();
-  };
-
-  const handleOpenInNewTab = () => {
-    if (onOpenInNewTab) {
-      onOpenInNewTab();
-    } else {
-      addTab({
-        type: "network_graph",
-        title: t("dashboard.networkGraph"),
-      });
-    }
-  };
-
-  // The live graph, re-read whenever cytoscape adds or removes something.
-  const graphElements = useMemo<NetworkElement[]>(() => {
-    const cy = cyRef.current;
-    if (!cy) return elements;
-    return cy.elements().map((el) => ({ data: el.data() })) as NetworkElement[];
-  }, [elements, graphVersion]);
-
-  const availableGroups = useMemo(
-    () =>
-      graphElements
-        .filter(
-          (el) =>
-            !el.data.source && !el.data.target && !el.data.ip && el.data.id,
-        )
-        .map((el) => ({
-          id: el.data.id!,
-          label: el.data.label || el.data.id!,
-        })),
-    [graphElements],
-  );
-
-  const availableNodesForConnection = useMemo(
-    () =>
-      graphElements
-        .filter((el) => !el.data.source && !el.data.target)
-        .map((el) => ({
-          id: el.data.id!,
-          label: el.data.label || el.data.id!,
-        })),
-    [graphElements],
-  );
-
-  const availableHostsForAdd = useMemo(() => {
-    const hostList = liveHosts as HostWithStatus[];
-    if (!cyRef.current) return hostList;
-    const existing = new Set(graphElements.map((e) => e.data.id));
-    return hostList.filter((h) => !existing.has(String(h.id)));
-  }, [liveHosts, graphElements]);
-
-  const btnCls =
-    "h-7 w-7 p-0 rounded-sm border-0 hover:bg-muted/60 transition-colors flex items-center justify-center text-muted-foreground hover:text-foreground";
-
-  const contextMenuEl = contextMenu.visible ? (
-    <div
-      ref={contextMenuRef}
-      className="fixed z-[300] min-w-[170px] shadow-2xl rounded-none bg-card border border-border"
-      style={{ top: contextMenu.y, left: contextMenu.x }}
-    >
-      {contextMenu.type === "node" && (
-        <>
-          {hostActions
-            .filter((action) => !!action.tabType && !action.items)
-            .filter((action) => {
-              const host = hostMap[contextMenu.targetId];
-              return !!host && action.when(host);
-            })
-            .map((action) => {
-              const Icon = action.icon;
-              return (
-                <button
-                  key={action.id}
-                  onClick={() => handleConnectAction(action.tabType!)}
-                  className="flex items-center gap-2 px-3 py-2 text-xs w-full text-left hover:bg-muted transition-colors"
-                >
-                  <Icon className="size-3 shrink-0" />
-                  {t(action.titleKey)}
-                </button>
-              );
-            })}
-          {!embedded && (
-            <>
-              <div className="h-px bg-border mx-2 my-0.5" />
-              <button
-                onClick={() => handleContextAction("move")}
-                className="flex items-center gap-2 px-3 py-2 text-xs w-full text-left hover:bg-muted transition-colors"
-              >
-                <FolderInput className="size-3 shrink-0" />
-                {t("networkGraph.moveToGroup")}
-              </button>
-              {cyRef.current?.$id(contextMenu.targetId).parent().length ? (
-                <button
-                  onClick={() => handleContextAction("removeFromGroup")}
-                  className="flex items-center gap-2 px-3 py-2 text-xs w-full text-left hover:bg-muted transition-colors"
-                >
-                  <FolderMinus className="size-3 shrink-0" />
-                  {t("networkGraph.removeFromGroup")}
-                </button>
-              ) : null}
-              <div className="h-px bg-border mx-2 my-0.5" />
-              <button
-                onClick={() => handleContextAction("delete")}
-                className="flex items-center gap-2 px-3 py-2 text-xs w-full text-left hover:bg-destructive/10 text-destructive transition-colors"
-              >
-                <Trash2 className="size-3 shrink-0" />
-                {t("networkGraph.delete")}
-              </button>
-            </>
-          )}
-        </>
-      )}
-      {contextMenu.type === "group" && !embedded && (
-        <>
-          <button
-            onClick={() => handleContextAction("addHostToGroup")}
-            className="flex items-center gap-2 px-3 py-2 text-xs w-full text-left hover:bg-muted transition-colors"
-          >
-            <FolderPlus className="size-3 shrink-0" />
-            {t("networkGraph.addHostHere")}
-          </button>
-          <button
-            onClick={() => handleContextAction("editGroup")}
-            className="flex items-center gap-2 px-3 py-2 text-xs w-full text-left hover:bg-muted transition-colors"
-          >
-            <Edit className="size-3 shrink-0" />
-            {t("networkGraph.editGroup")}
-          </button>
-          <div className="h-px bg-border mx-2 my-0.5" />
-          <button
-            onClick={() => handleContextAction("delete")}
-            className="flex items-center gap-2 px-3 py-2 text-xs w-full text-left hover:bg-destructive/10 text-destructive transition-colors"
-          >
-            <Trash2 className="size-3 shrink-0" />
-            {t("networkGraph.delete")}
-          </button>
-        </>
-      )}
-    </div>
-  ) : null;
-
-  const cytoscapeEl = (
-    <div
-      ref={cyContainerRef}
-      className="relative flex-1 min-h-0 w-full overflow-hidden bg-background"
-      onContextMenu={(e) => e.preventDefault()}
-    >
-      {loading && (
-        <div className="absolute inset-0 z-10 flex items-center justify-center bg-background/80">
-          <Loader2 className="size-5 animate-spin text-muted-foreground" />
-        </div>
-      )}
-      {contextMenuEl}
-      {containerReady && (
-        <CytoscapeComponent
-          elements={elements}
-          style={{ width: "100%", height: "100%", background: "transparent" }}
-          layout={{ name: "preset" }}
-          cy={handleNodeInit}
-          wheelSensitivity={1.5}
-          minZoom={0.2}
-          maxZoom={3}
-        />
-      )}
-      {!loading && graphElements.length === 0 && (
-        <div className="absolute inset-0 flex flex-col items-center justify-center gap-3 pointer-events-none">
-          <Network className="size-8 text-muted-foreground/30" />
-          <p className="text-xs text-muted-foreground/50">
-            {t("networkGraph.noNodes")}
-          </p>
-        </div>
-      )}
-    </div>
-  );
-
-  const dialogs = (
-    <>
-      <AlertDialog open={!!error} onOpenChange={() => setError(null)}>
-        <AlertDialogContent className="bg-card border border-border">
-          <div className="flex items-start gap-3">
-            <AlertCircle className="h-5 w-5 text-destructive shrink-0 mt-0.5" />
-            <AlertDialogDescription className="text-foreground flex-1">
-              {error}
-            </AlertDialogDescription>
-          </div>
-          <div className="flex justify-end">
-            <AlertDialogAction onClick={() => setError(null)}>
-              OK
-            </AlertDialogAction>
-          </div>
-        </AlertDialogContent>
-      </AlertDialog>
-
-      {/* Add Host dialog */}
-      <Dialog open={showAddNodeDialog} onOpenChange={setShowAddNodeDialog}>
-        <DialogContent className="bg-card border border-border">
-          <DialogHeader>
-            <DialogTitle>{t("networkGraph.addHost")}</DialogTitle>
-          </DialogHeader>
-          <div className="grid gap-4 py-4">
-            <div className="grid gap-2">
-              <Label>{t("networkGraph.selectHost")}</Label>
-              <Select2
-                className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-                value={selectedHostForAddNode}
-                onChange={(e) => setSelectedHostForAddNode(e.target.value)}
-              >
-                <option value="">{t("networkGraph.chooseHost")}</option>
-                {availableHostsForAdd.map((h) => (
-                  <option key={h.id} value={String(h.id)}>
-                    {h.name || h.ip}
-                  </option>
-                ))}
-              </Select2>
-            </div>
-            <div className="grid gap-2">
-              <Label>{t("networkGraph.parentGroup")}</Label>
-              <Select2
-                className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-                value={selectedGroupForAddNode}
-                onChange={(e) => setSelectedGroupForAddNode(e.target.value)}
-              >
-                <option value="ROOT">{t("networkGraph.noGroup")}</option>
-                {availableGroups.map((g) => (
-                  <option key={g.id} value={g.id}>
-                    {g.label}
-                  </option>
-                ))}
-              </Select2>
-            </div>
-          </div>
-          <DialogFooter>
-            <Button
-              variant="outline"
-              onClick={() => setShowAddNodeDialog(false)}
-            >
-              {t("common.cancel")}
-            </Button>
-            <Button
-              onClick={handleConfirmAddNode}
-              disabled={!selectedHostForAddNode}
-            >
-              {t("common.add")}
-            </Button>
-          </DialogFooter>
-        </DialogContent>
-      </Dialog>
-
-      {/* Add / Edit Group dialog */}
-      <Dialog
-        open={showAddGroupDialog || showEditGroupDialog}
-        onOpenChange={(o) => {
-          if (!o) {
-            setShowAddGroupDialog(false);
-            setShowEditGroupDialog(false);
-          }
-        }}
-      >
-        <DialogContent className="bg-card border border-border">
-          <DialogHeader>
-            <DialogTitle>
-              {showEditGroupDialog
-                ? t("networkGraph.editGroup")
-                : t("networkGraph.createGroup")}
-            </DialogTitle>
-          </DialogHeader>
-          <div className="grid gap-4 py-4">
-            <div className="grid gap-2">
-              <Label>{t("networkGraph.groupName")}</Label>
-              <Input
-                value={newGroupName}
-                onChange={(e) => setNewGroupName(e.target.value)}
-                placeholder={t("networkGraph.groupName")}
-              />
-            </div>
-            <div className="grid gap-2">
-              <Label>{t("networkGraph.color")}</Label>
-              <div className="grid grid-cols-4 gap-2">
-                {AVAILABLE_COLORS.map((c) => (
-                  <button
-                    key={c.value}
-                    type="button"
-                    onClick={() => setNewGroupColor(c.value)}
-                    className={`h-9 rounded border-2 transition-all ${
-                      newGroupColor === c.value
-                        ? "border-accent-brand ring-1 ring-accent-brand"
-                        : "border-border hover:border-muted-foreground"
-                    }`}
-                    style={{ backgroundColor: c.value }}
-                    title={c.label}
-                  />
-                ))}
-              </div>
-            </div>
-          </div>
-          <DialogFooter>
-            <Button
-              variant="outline"
-              onClick={() => {
-                setShowAddGroupDialog(false);
-                setShowEditGroupDialog(false);
-              }}
-            >
-              {t("common.cancel")}
-            </Button>
-            <Button
-              onClick={showEditGroupDialog ? handleUpdateGroup : handleAddGroup}
-              disabled={!newGroupName}
-            >
-              {showEditGroupDialog ? t("common.update") : t("common.create")}
-            </Button>
-          </DialogFooter>
-        </DialogContent>
-      </Dialog>
-
-      {/* Move to Group dialog */}
-      <Dialog open={showMoveNodeDialog} onOpenChange={setShowMoveNodeDialog}>
-        <DialogContent className="bg-card border border-border">
-          <DialogHeader>
-            <DialogTitle>{t("networkGraph.moveToGroup")}</DialogTitle>
-          </DialogHeader>
-          <div className="grid gap-4 py-4">
-            <div className="grid gap-2">
-              <Label>{t("networkGraph.selectGroup")}</Label>
-              <Select2
-                className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-                value={selectedGroupForMove}
-                onChange={(e) => setSelectedGroupForMove(e.target.value)}
-              >
-                <option value="ROOT">{t("networkGraph.noGroup")}</option>
-                {availableGroups
-                  .filter((g) => g.id !== selectedNodeId)
-                  .map((g) => (
-                    <option key={g.id} value={g.id}>
-                      {g.label}
-                    </option>
-                  ))}
-              </Select2>
-            </div>
-          </div>
-          <DialogFooter>
-            <Button
-              variant="outline"
-              onClick={() => setShowMoveNodeDialog(false)}
-            >
-              {t("common.cancel")}
-            </Button>
-            <Button onClick={handleMoveNodeToGroup}>
-              {t("networkGraph.move")}
-            </Button>
-          </DialogFooter>
-        </DialogContent>
-      </Dialog>
-
-      {/* Add Edge dialog */}
-      <Dialog open={showAddEdgeDialog} onOpenChange={setShowAddEdgeDialog}>
-        <DialogContent className="bg-card border border-border">
-          <DialogHeader>
-            <DialogTitle>{t("networkGraph.addConnection")}</DialogTitle>
-          </DialogHeader>
-          <div className="grid gap-4 py-4">
-            <div className="grid gap-2">
-              <Label>{t("networkGraph.source")}</Label>
-              <Select2
-                className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-                value={selectedHostForEdge}
-                onChange={(e) => setSelectedHostForEdge(e.target.value)}
-              >
-                <option value="">
-                  {t("networkGraph.selectSourcePlaceholder")}
-                </option>
-                {availableNodesForConnection.map((el) => (
-                  <option key={el.id} value={el.id}>
-                    {el.label}
-                  </option>
-                ))}
-              </Select2>
-            </div>
-            <div className="grid gap-2">
-              <Label>{t("networkGraph.target")}</Label>
-              <Select2
-                className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-                value={targetHostForEdge}
-                onChange={(e) => setTargetHostForEdge(e.target.value)}
-              >
-                <option value="">
-                  {t("networkGraph.selectTargetPlaceholder")}
-                </option>
-                {availableNodesForConnection.map((el) => (
-                  <option key={el.id} value={el.id}>
-                    {el.label}
-                  </option>
-                ))}
-              </Select2>
-            </div>
-          </div>
-          <DialogFooter>
-            <Button
-              variant="outline"
-              onClick={() => setShowAddEdgeDialog(false)}
-            >
-              {t("common.cancel")}
-            </Button>
-            <Button onClick={handleAddEdge}>{t("networkGraph.connect")}</Button>
-          </DialogFooter>
-        </DialogContent>
-      </Dialog>
-
-      {/* Node Detail dialog */}
-      <Dialog open={showNodeDetail} onOpenChange={setShowNodeDetail}>
-        <DialogContent className="bg-card border border-border">
-          <DialogHeader>
-            <DialogTitle>{t("networkGraph.hostDetails")}</DialogTitle>
-          </DialogHeader>
-          {selectedNodeForDetail && (
-            <div className="space-y-4">
-              <div className="grid grid-cols-2 gap-2 text-sm">
-                <span className="font-semibold text-muted-foreground">
-                  {t("networkGraph.name")}
-                </span>
-                <span>{selectedNodeForDetail.name}</span>
-                <span className="font-semibold text-muted-foreground">
-                  {t("networkGraph.ip")}
-                </span>
-                <span>{selectedNodeForDetail.ip}</span>
-                <span className="font-semibold text-muted-foreground">
-                  {t("networkGraph.status")}
-                </span>
-                <span className="capitalize">
-                  {selectedNodeForDetail.status || t("networkGraph.unknown")}
-                </span>
-              </div>
-              {selectedNodeForDetail.tags &&
-                selectedNodeForDetail.tags.length > 0 && (
-                  <div className="flex gap-1 flex-wrap">
-                    {selectedNodeForDetail.tags.map((tag) => (
-                      <Badge key={tag} variant="outline" className="text-xs">
-                        {tag}
-                      </Badge>
-                    ))}
-                  </div>
-                )}
-            </div>
-          )}
-          <DialogFooter>
-            <Button variant="outline" onClick={() => setShowNodeDetail(false)}>
-              {t("common.close")}
-            </Button>
-          </DialogFooter>
-        </DialogContent>
-      </Dialog>
-
-      <input
-        ref={fileInputRef}
-        type="file"
-        accept=".json"
-        className="hidden"
-        onChange={async (e) => {
-          const file = e.target.files?.[0];
-          if (!file) return;
-          const reader = new FileReader();
-          reader.onload = async (evt) => {
-            try {
-              const json = JSON.parse(evt.target?.result as string);
-              await api.save({
-                nodes: json.nodes,
-                edges: json.edges,
-              });
-              await loadData();
-              if (fileInputRef.current) fileInputRef.current.value = "";
-            } catch {
-              setError(t("networkGraph.invalidFile"));
-            }
-          };
-          reader.readAsText(file);
-        }}
-      />
-    </>
-  );
-
-  if (!embedded) {
-    return (
-      <div className="h-full w-full flex flex-col bg-background">
-        <div className="flex items-center gap-1 px-4 py-2 border-b border-border shrink-0 flex-wrap">
-          <div className="flex items-center gap-0.5">
-            <Button
-              variant="ghost"
-              size="sm"
-              onClick={() => {
-                setSelectedHostForAddNode("");
-                setSelectedGroupForAddNode("ROOT");
-                setShowAddNodeDialog(true);
-              }}
-              className="h-7 px-2 text-xs gap-1.5"
-            >
-              <Plus className="size-3" />
-              {t("networkGraph.addHost")}
-            </Button>
-            <Button
-              variant="ghost"
-              size="sm"
-              onClick={() => {
-                setNewGroupName("");
-                setNewGroupColor("#3b82f6");
-                setShowAddGroupDialog(true);
-              }}
-              className="h-7 px-2 text-xs gap-1.5"
-            >
-              <FolderPlus className="size-3" />
-              {t("networkGraph.addGroup")}
-            </Button>
-            <Button
-              variant="ghost"
-              size="sm"
-              onClick={() => setShowAddEdgeDialog(true)}
-              className="h-7 px-2 text-xs gap-1.5"
-            >
-              <Link2 className="size-3" />
-              {t("networkGraph.addLink")}
-            </Button>
-            <Button
-              variant="ghost"
-              size="sm"
-              onClick={handleRemoveSelected}
-              disabled={!selectedNodeId && !selectedEdgeId}
-              className="h-7 px-2 text-xs gap-1.5 text-destructive hover:text-destructive disabled:opacity-30"
-            >
-              <Trash2 className="size-3" />
-            </Button>
-          </div>
-          <div className="w-px h-5 bg-border mx-1" />
-          <div className="flex items-center gap-0.5">
-            <button
-              onClick={zoomIn}
-              title={t("networkGraph.zoomIn")}
-              className={btnCls}
-            >
-              <ZoomIn className="size-3.5" />
-            </button>
-            <button
-              onClick={zoomOut}
-              title={t("networkGraph.zoomOut")}
-              className={btnCls}
-            >
-              <ZoomOut className="size-3.5" />
-            </button>
-            <button
-              onClick={() => cyRef.current?.fit()}
-              title={t("networkGraph.resetView")}
-              className={btnCls}
-            >
-              <RotateCw className="size-3.5" />
-            </button>
-          </div>
-          <div className="w-px h-5 bg-border mx-1" />
-          <div className="flex items-center gap-0.5">
-            <button
-              onClick={handleExport}
-              title={t("networkGraph.exportJSON")}
-              className={btnCls}
-            >
-              <Download className="size-3.5" />
-            </button>
-            <button
-              onClick={() => fileInputRef.current?.click()}
-              title={t("networkGraph.importJSON")}
-              className={btnCls}
-            >
-              <Upload className="size-3.5" />
-            </button>
-          </div>
-          <div className="w-px h-5 bg-border mx-1" />
-          <a
-            href="https://docs.termix.site/features/dashboard/network-graph"
-            target="_blank"
-            rel="noreferrer"
-            title={t("hosts.docsLink")}
-            className={btnCls}
-          >
-            <ExternalLink className="size-3.5" />
-          </a>
-        </div>
-        {cytoscapeEl}
-        {dialogs}
-      </div>
-    );
-  }
-
-  /* embedded card */
-  const nodeCount = graphElements.filter((e) => !e.data.source).length;
-  return (
-    <Card className="flex flex-col overflow-hidden w-full h-full py-0 gap-0 min-h-0">
-      <div className="flex items-center justify-between px-4 py-3 border-b border-border shrink-0">
-        <div className="flex items-center gap-2">
-          <Network className="size-3.5 text-muted-foreground" />
-          <span className="text-xs text-muted-foreground uppercase tracking-widest font-semibold">
-            {t("dashboard.networkGraph")}
-          </span>
-          {!loading && (
-            <span className="text-[10px] text-muted-foreground/60">
-              {t("dashboardTab.nodes", { count: nodeCount })}
-            </span>
-          )}
-        </div>
-        <div className="flex items-center gap-0.5">
-          <button
-            onClick={zoomIn}
-            title={t("networkGraph.zoomIn")}
-            className={btnCls}
-          >
-            <ZoomIn className="size-3" />
-          </button>
-          <button
-            onClick={zoomOut}
-            title={t("networkGraph.zoomOut")}
-            className={btnCls}
-          >
-            <ZoomOut className="size-3" />
-          </button>
-          <button
-            onClick={() => cyRef.current?.fit()}
-            title={t("networkGraph.resetView")}
-            className={btnCls}
-          >
-            <RotateCw className="size-3" />
-          </button>
-          <button
-            onClick={handleOpenInNewTab}
-            title={t("common.openInNewTab")}
-            className={btnCls}
-          >
-            <ArrowUp className="size-3" />
-          </button>
-          <a
-            href="https://docs.termix.site/features/dashboard/network-graph"
-            target="_blank"
-            rel="noreferrer"
-            title={t("hosts.docsLink")}
-            className={btnCls}
-          >
-            <ExternalLink className="size-3" />
-          </a>
-        </div>
-      </div>
-      {cytoscapeEl}
-      {dialogs}
-    </Card>
-  );
-});
diff --git a/plugins/network-topology/src/frontend/index.tsx b/plugins/network-topology/src/frontend/index.tsx
deleted file mode 100644
index 42a80f120..000000000
--- a/plugins/network-topology/src/frontend/index.tsx
+++ /dev/null
@@ -1,58 +0,0 @@
-import { useCallback, useEffect, useRef } from "react";
-import { Network } from "lucide-react";
-import type {
-  DashboardCardProps,
-  TabProps,
-  TermixApp,
-} from "@termix/plugin-sdk/frontend";
-import { NetworkGraphCard } from "./NetworkGraphCard";
-
-const VIEW_ID = "network_graph";
-
-function GraphTab({ isVisible }: TabProps) {
-  return <NetworkGraphCard embedded={false} isVisible={isVisible} />;
-}
-
-function GraphCard({ isVisible, shell }: DashboardCardProps) {
-  // A stable callback lets the memoized graph skip dashboard re-renders.
-  const shellRef = useRef(shell);
-  useEffect(() => {
-    shellRef.current = shell;
-  });
-  const openInNewTab = useCallback(
-    () => shellRef.current.openSingletonTab(VIEW_ID),
-    [],
-  );
-  return (
-    <NetworkGraphCard
-      embedded={true}
-      isVisible={isVisible}
-      onOpenInNewTab={openInNewTab}
-    />
-  );
-}
-
-export function activate(app: TermixApp): void {
-  app.registerTab(VIEW_ID, GraphTab, {
-    icon: Network,
-    titleKey: "nav.networkGraph",
-    singleton: true,
-    hostless: true,
-  });
-
-  app.registerRailItem({
-    id: VIEW_ID,
-    icon: Network,
-    titleKey: "nav.networkGraph",
-    kind: "tab",
-    after: "local-terminal",
-    permission: "use",
-  });
-
-  app.registerDashboardCard({
-    id: VIEW_ID,
-    titleKey: "dashboard.networkGraph",
-    defaultHeight: 350,
-    component: GraphCard,
-  });
-}
diff --git a/plugins/network-topology/src/frontend/network-topology-api.ts b/plugins/network-topology/src/frontend/network-topology-api.ts
deleted file mode 100644
index 48944cace..000000000
--- a/plugins/network-topology/src/frontend/network-topology-api.ts
+++ /dev/null
@@ -1,55 +0,0 @@
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-
-export interface NetworkTopologyNode {
-  data: {
-    id: string;
-    label?: string;
-    ip?: string;
-    status?: string;
-    tags?: string[];
-    parent?: string;
-    color?: string;
-    /** Absent on nodes; callers tell nodes from edges by testing these. */
-    source?: undefined;
-    target?: undefined;
-  };
-  position?: { x: number; y: number };
-}
-
-export interface NetworkTopologyEdge {
-  data: {
-    id?: string;
-    source: string;
-    target: string;
-    label?: undefined;
-    ip?: undefined;
-  };
-}
-
-export interface NetworkTopologyData {
-  nodes: NetworkTopologyNode[];
-  edges: NetworkTopologyEdge[];
-}
-
-/**
- * The topology routes, through the plugin's own client. Paths are relative
- * to /plugin-api/network-topology/, which the client already points at.
- */
-export function createNetworkTopologyApi(api: PluginApiClient) {
-  return {
-    get: async (): Promise<NetworkTopologyData | null> => {
-      const response = await api.get<NetworkTopologyData | null>("/");
-      return response.data;
-    },
-    save: async (
-      topology: NetworkTopologyData,
-    ): Promise<{ success: boolean }> => {
-      const response = await api.post<{ success: boolean }>("/", {
-        topology,
-      });
-      return response.data;
-    },
-  };
-}
-
-export type NetworkTopologyApi = ReturnType<typeof createNetworkTopologyApi>;
diff --git a/plugins/network-topology/tests/backend/activate.test.ts b/plugins/network-topology/tests/backend/activate.test.ts
deleted file mode 100644
index 4dedc8c51..000000000
--- a/plugins/network-topology/tests/backend/activate.test.ts
+++ /dev/null
@@ -1,81 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import express from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import { PluginCapabilityError } from "@termix/plugin-sdk/backend";
-import { activate } from "../../src/backend/index.js";
-import { manifest, pluginDir, startServer, type TestServer } from "./helpers";
-
-let db: TestDb | null = null;
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  db?.close();
-  db = null;
-  await server?.close();
-  server = null;
-});
-
-describe("network-topology activate", () => {
-  it("registers a singleton sync entity with the JSON blob serializer", async () => {
-    server = await startServer();
-    const [entity] = server.mock.syncEntities;
-    expect(entity.type).toBe("networkTopology");
-    expect(entity.singleton).toBe(true);
-    expect(entity.serialize).toBeTypeOf("function");
-    expect(entity.deserialize).toBeTypeOf("function");
-  });
-
-  it("offers the user's saved graph as a service", async () => {
-    server = await startServer();
-    await server.request("POST", "/", {
-      body: { topology: { nodes: [{ data: { id: "1" } }], edges: [] } },
-    });
-
-    const service = server.mock.services.get("network-topology.graph") as {
-      get: () => Promise<unknown>;
-    };
-    const result = await server.mock.actAs("user-1", () => service.get());
-    expect(result).toEqual({ nodes: [{ data: { id: "1" } }], edges: [] });
-  });
-
-  it("returns null from the service when the user has no saved graph", async () => {
-    server = await startServer();
-    const service = server.mock.services.get("network-topology.graph") as {
-      get: () => Promise<unknown>;
-    };
-    const result = await server.mock.actAs("user-1", () => service.get());
-    expect(result).toBeNull();
-  });
-
-  it("fails closed without db:own", async () => {
-    db = await createTestDb(pluginDir);
-    const mock = createMockCtx({
-      pluginId: manifest.id,
-      manifest,
-      capabilities: ["network:serve", "ui:surface"],
-      db: db.database,
-      router: () => express.Router(),
-    });
-    await expect(activate(mock.ctx)).rejects.toBeInstanceOf(
-      PluginCapabilityError,
-    );
-  });
-
-  it("fails closed without network:serve", async () => {
-    db = await createTestDb(pluginDir);
-    const mock = createMockCtx({
-      pluginId: manifest.id,
-      manifest,
-      capabilities: ["db:own", "ui:surface"],
-      db: db.database,
-      router: () => express.Router(),
-    });
-    await expect(activate(mock.ctx)).rejects.toBeInstanceOf(
-      PluginCapabilityError,
-    );
-  });
-});
diff --git a/plugins/network-topology/tests/backend/helpers.ts b/plugins/network-topology/tests/backend/helpers.ts
deleted file mode 100644
index 82f93c3c6..000000000
--- a/plugins/network-topology/tests/backend/helpers.ts
+++ /dev/null
@@ -1,91 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-export const manifest = manifestJson as unknown as PluginManifest;
-
-export interface TestServer {
-  db: TestDb;
-  mock: MockPluginContext;
-  request: (
-    method: string,
-    path: string,
-    options?: { user?: string; body?: unknown },
-    // Route bodies vary per test; asserting on them is the point.
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any }>;
-  close: () => Promise<void>;
-}
-
-/**
- * The plugin activated against a real in-memory database, its router mounted
- * on an express app the way core mounts it: JSON parsed, the acting user set
- * from the request, everything else left to the plugin.
- */
-export async function startServer(
-  options: { permissions?: string[]; users?: string[] } = {},
-): Promise<TestServer> {
-  const db = await createTestDb(pluginDir);
-  for (const user of options.users ?? ["user-1", "user-2"]) {
-    db.sqlite
-      .prepare("INSERT INTO users (id, username) VALUES (?, ?)")
-      .run(user, user);
-  }
-
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    permissions: options.permissions ?? ["network-topology.use"],
-  });
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") ?? undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    db,
-    mock,
-    async request(method, path, { user = "user-1", body: given } = {}) {
-      const body = method === "GET" ? undefined : given;
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        headers: {
-          "x-test-user": user,
-          ...(body !== undefined ? { "content-type": "application/json" } : {}),
-        },
-        body: body !== undefined ? JSON.stringify(body) : undefined,
-      });
-      const text = await response.text();
-      return { status: response.status, body: text ? JSON.parse(text) : null };
-    },
-    async close() {
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-      db.close();
-    },
-  };
-}
diff --git a/plugins/network-topology/tests/backend/migrations.test.ts b/plugins/network-topology/tests/backend/migrations.test.ts
deleted file mode 100644
index f28ab243f..000000000
--- a/plugins/network-topology/tests/backend/migrations.test.ts
+++ /dev/null
@@ -1,95 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { createTestDb, type TestDb } from "@termix/plugin-sdk/testing";
-import { pluginDir } from "./helpers";
-
-// network_topology as core's SQLite bootstrap created it before 2.9.0.
-const LEGACY_DDL = `
-  CREATE TABLE network_topology (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-    topology TEXT,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
-  );
-`;
-
-let db: TestDb | null = null;
-
-afterEach(() => {
-  db?.close();
-  db = null;
-});
-
-const tableExists = (name: string) =>
-  !!db!.sqlite
-    .prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?")
-    .get(name);
-
-describe("adopting network_topology", () => {
-  it("keeps every existing row when the legacy table is there", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1'), ('user-2')");
-        sqlite.exec(LEGACY_DDL);
-        sqlite
-          .prepare(
-            "INSERT INTO network_topology (user_id, topology, updated_at) VALUES (?, ?, ?)",
-          )
-          .run(
-            "user-1",
-            '{"nodes":[{"data":{"id":"1"}}],"edges":[]}',
-            "2026-01-01T00:00:00.000Z",
-          );
-      },
-    });
-
-    expect(db.applied).toEqual(["0001_adopt_network_topology"]);
-    expect(tableExists("network_topology")).toBe(false);
-    expect(tableExists("p_network_topology_graphs")).toBe(true);
-
-    const rows = db.sqlite
-      .prepare(
-        "SELECT user_id, topology, updated_at FROM p_network_topology_graphs ORDER BY id",
-      )
-      .all();
-    expect(rows).toEqual([
-      {
-        user_id: "user-1",
-        topology: '{"nodes":[{"data":{"id":"1"}}],"edges":[]}',
-        updated_at: "2026-01-01T00:00:00.000Z",
-      },
-    ]);
-  });
-
-  it("creates the table fresh when there is no legacy one", async () => {
-    db = await createTestDb(pluginDir);
-
-    expect(tableExists("network_topology")).toBe(false);
-    expect(tableExists("p_network_topology_graphs")).toBe(true);
-    expect(
-      db.sqlite.prepare("SELECT * FROM p_network_topology_graphs").all(),
-    ).toEqual([]);
-  });
-
-  it("removes a user's topology when the user is deleted", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1'), ('user-2')");
-      },
-    });
-    const insert = db.sqlite.prepare(
-      "INSERT INTO p_network_topology_graphs (user_id, topology) VALUES (?, ?)",
-    );
-    insert.run("user-1", "{}");
-    insert.run("user-2", "{}");
-
-    db.sqlite.exec("DELETE FROM users WHERE id = 'user-1'");
-
-    const remaining = (
-      db.sqlite
-        .prepare("SELECT user_id FROM p_network_topology_graphs")
-        .all() as { user_id: string }[]
-    ).map((row) => row.user_id);
-    expect(remaining).toEqual(["user-2"]);
-  });
-});
diff --git a/plugins/network-topology/tests/backend/repository.test.ts b/plugins/network-topology/tests/backend/repository.test.ts
deleted file mode 100644
index a8e5b6e34..000000000
--- a/plugins/network-topology/tests/backend/repository.test.ts
+++ /dev/null
@@ -1,55 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import { createTestDb, type TestDb } from "@termix/plugin-sdk/testing";
-import { graphs } from "../../src/backend/tables.js";
-import {
-  createGraphRepository,
-  type GraphRepository,
-} from "../../src/backend/repository.js";
-import { pluginDir } from "./helpers";
-
-let db: TestDb;
-let repo: GraphRepository;
-
-beforeEach(async () => {
-  db = await createTestDb(pluginDir, {
-    before: (sqlite) =>
-      sqlite.exec("INSERT INTO users (id) VALUES ('user-1'), ('user-2')"),
-  });
-  repo = createGraphRepository(db.database, await db.database.define(graphs));
-});
-
-afterEach(() => db.close());
-
-describe("graph repository", () => {
-  it("finds, creates, and updates topology by user id", async () => {
-    expect(await repo.findByUserId("user-1")).toBeNull();
-
-    await repo.upsertForUser(
-      "user-1",
-      JSON.stringify({ nodes: [{ id: "host-1" }], edges: [] }),
-    );
-    expect(await repo.findByUserId("user-1")).toMatchObject({
-      userId: "user-1",
-      topology: '{"nodes":[{"id":"host-1"}],"edges":[]}',
-    });
-
-    await repo.upsertForUser(
-      "user-1",
-      JSON.stringify({ nodes: [], edges: [{ id: "edge-1" }] }),
-    );
-    expect(await repo.findByUserId("user-1")).toMatchObject({
-      userId: "user-1",
-      topology: '{"nodes":[],"edges":[{"id":"edge-1"}]}',
-    });
-  });
-
-  it("keeps rows for different users separate", async () => {
-    await repo.upsertForUser("user-1", '{"nodes":[]}');
-    await repo.upsertForUser("user-2", '{"nodes":["a"]}');
-
-    expect((await repo.findByUserId("user-1"))?.topology).toBe('{"nodes":[]}');
-    expect((await repo.findByUserId("user-2"))?.topology).toBe(
-      '{"nodes":["a"]}',
-    );
-  });
-});
diff --git a/plugins/network-topology/tests/backend/routes.test.ts b/plugins/network-topology/tests/backend/routes.test.ts
deleted file mode 100644
index af1d94e54..000000000
--- a/plugins/network-topology/tests/backend/routes.test.ts
+++ /dev/null
@@ -1,81 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import { startServer, type TestServer } from "./helpers";
-
-let server: TestServer;
-
-beforeEach(async () => {
-  server = await startServer();
-});
-
-afterEach(async () => {
-  await server.close();
-});
-
-describe("GET /", () => {
-  it("returns null when the user has no saved topology", async () => {
-    const res = await server.request("GET", "/");
-    expect(res.status).toBe(200);
-    expect(res.body).toBeNull();
-  });
-
-  it("returns the saved topology", async () => {
-    await server.request("POST", "/", {
-      body: { topology: { nodes: [{ data: { id: "host-1" } }], edges: [] } },
-    });
-
-    const res = await server.request("GET", "/");
-    expect(res.body).toEqual({
-      nodes: [{ data: { id: "host-1" } }],
-      edges: [],
-    });
-  });
-
-  it("keeps each user's topology separate", async () => {
-    await server.request("POST", "/", {
-      user: "user-1",
-      body: { topology: { nodes: [{ data: { id: "a" } }], edges: [] } },
-    });
-
-    const res = await server.request("GET", "/", { user: "user-2" });
-    expect(res.body).toBeNull();
-  });
-});
-
-describe("POST /", () => {
-  it("saves and overwrites the topology", async () => {
-    const first = await server.request("POST", "/", {
-      body: { topology: { nodes: [], edges: [] } },
-    });
-    expect(first.body).toEqual({ success: true });
-
-    await server.request("POST", "/", {
-      body: { topology: { nodes: [{ data: { id: "a" } }], edges: [] } },
-    });
-
-    const res = await server.request("GET", "/");
-    expect(res.body).toEqual({ nodes: [{ data: { id: "a" } }], edges: [] });
-  });
-
-  it("rejects a request with no topology", async () => {
-    const res = await server.request("POST", "/", { body: {} });
-    expect(res.status).toBe(400);
-  });
-});
-
-describe("permissions", () => {
-  it("refuses every route without network-topology.use", async () => {
-    const denied = await startServer({ permissions: [] });
-    try {
-      expect((await denied.request("GET", "/")).status).toBe(403);
-      expect(
-        (
-          await denied.request("POST", "/", {
-            body: { topology: { nodes: [], edges: [] } },
-          })
-        ).status,
-      ).toBe(403);
-    } finally {
-      await denied.close();
-    }
-  });
-});
diff --git a/plugins/network-topology/tests/frontend/activate.test.tsx b/plugins/network-topology/tests/frontend/activate.test.tsx
deleted file mode 100644
index 814097280..000000000
--- a/plugins/network-topology/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,53 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-const declared = (views?: Array<{ id: string }>) =>
-  (views ?? []).map((view) => view.id).sort();
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe(`${manifest.id} activate`, () => {
-  it("activates and registers only views its manifest declares", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    const contributes = manifest.contributes as unknown as Record<
-      string,
-      Array<{ id: string }> | undefined
-    >;
-    const tabs = declared(contributes.tabs);
-    // A rail panel may reuse one of the plugin's tab ids.
-    const panels = [...declared(contributes.panels), ...tabs];
-    const cards = declared(contributes.dashboardCards);
-    for (const id of rendered.registered.tabs()) expect(tabs).toContain(id);
-    for (const id of rendered.registered.panels()) expect(panels).toContain(id);
-    for (const id of rendered.registered.dashboardCards()) {
-      expect(cards).toContain(id);
-    }
-  });
-
-  it("removes everything it registered on deactivate", async () => {
-    const app = await renderWithApp(plugin, { manifest, locales });
-    await app.deactivate();
-    expect(app.registered.tabs()).toEqual([]);
-    expect(app.registered.panels()).toEqual([]);
-    expect(app.registered.railItems()).toEqual([]);
-    expect(app.registered.hostActions()).toEqual([]);
-    expect(app.registered.hostEditorSections()).toEqual([]);
-    expect(app.registered.dashboardCards()).toEqual([]);
-    expect(app.registered.settingsComponents()).toEqual([]);
-    expect(app.registered.actions()).toEqual([]);
-  });
-});
diff --git a/plugins/network-topology/tsconfig.json b/plugins/network-topology/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/network-topology/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/network-topology/vitest.config.ts b/plugins/network-topology/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/network-topology/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/opkssh/CHANGELOG.md b/plugins/opkssh/CHANGELOG.md
deleted file mode 100644
index 5c818c00c..000000000
--- a/plugins/opkssh/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Adds the OPKSSH login type. Termix signs you in with your identity provider in the browser and gets a short-lived SSH certificate from OpenPubkey SSH.
diff --git a/plugins/opkssh/README.md b/plugins/opkssh/README.md
deleted file mode 100644
index 2403cc451..000000000
--- a/plugins/opkssh/README.md
+++ /dev/null
@@ -1,40 +0,0 @@
-# OPKSSH
-
-Connect to hosts with short-lived SSH certificates from OpenPubkey SSH, after signing in with your identity provider.
-
-## Features
-
-- Adds the OPKSSH login type to the host editor.
-- Signs you in with your identity provider in the browser and gets a short-lived SSH certificate from [OpenPubkey SSH](https://github.com/openpubkey/opkssh).
-- Keeps the certificate for 24 hours.
-
-## Setup
-
-The config file lives at `<DATA_DIR>/plugins/opkssh/config.yml` and uses the OPKSSH config format. A template is written there the first time someone signs in without one. Installs upgraded from 2.8 have their old `<DATA_DIR>/.opk/config.yml` copied here.
-
-`redirect_uris` in that file is the local listener OPKSSH opens on the Termix server. It must be localhost or left out. Register the public callback shown in the admin settings with your identity provider instead.
-
-### Binary
-
-The plugin runs one pinned release of `opkssh` and checks its SHA-256. It looks for the binary in this order:
-
-1. `OPKSSH_BUNDLED_DIR/<asset>`, which defaults to `<cwd>/opkssh-bundled`. The Docker image ships it at `/app/opkssh-bundled`, so offline installs never download it.
-2. `<DATA_DIR>/plugins/opkssh/bin/<asset>`, a copy downloaded earlier.
-3. A download from the GitHub release.
-
-A copy with the wrong checksum is ignored. Set `OPKSSH_VERSION` to use another release, and `OPKSSH_SHA256` to its checksum.
-
-## Settings
-
-### Admin
-
-- Redirect URI: register `<base URL>/plugin-api/opkssh/callback` with your identity provider.
-- Use the old redirect URI: keep sending the 2.8 URI `<base URL>/host/opkssh-callback`. Upgraded installs keep this on until you turn it off.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/opkssh/locales/en.json b/plugins/opkssh/locales/en.json
deleted file mode 100644
index 9f91af85b..000000000
--- a/plugins/opkssh/locales/en.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "Sign in to this host using your identity provider instead of a password or key. Requires OPKSSH set up on the server.",
-    "docs": "View docs"
-  },
-  "dialog": {
-    "title": "OPKSSH Authentication Required",
-    "description": "Complete authentication in your browser to continue. This session will remain valid for 24 hours.",
-    "openBrowser": "Open Browser to Authenticate",
-    "waiting": "Waiting for authentication in browser...",
-    "authenticating": "Processing authentication...",
-    "signInWith": "Sign in with {{provider}}"
-  },
-  "errors": {
-    "authFailed": "Authentication failed. Please check your credentials and try again.",
-    "timeout": "Authentication timed out. Please try again."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "Redirect URI",
-      "description": "Register this URL as an allowed redirect URI with every identity provider in your OPKSSH config."
-    },
-    "legacyCallback": {
-      "label": "Use the old redirect URI",
-      "description": "Keep sending /host/opkssh-callback, the redirect URI used before 2.9. Turn this off once your identity providers allow the new one."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/af_ZA.json b/plugins/opkssh/locales/translated/af_ZA.json
deleted file mode 100644
index 675480ea4..000000000
--- a/plugins/opkssh/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "Meld aan by hierdie gasheer met jou identiteitsverskaffer in plaas van 'n wagwoord of sleutel. Vereis dat OPKSSH op die bediener opgestel is.",
-    "docs": "Bekyk dokumente"
-  },
-  "dialog": {
-    "title": "OPKSSH-verifikasie vereis",
-    "description": "Voltooi verifikasie in jou blaaier om voort te gaan. Hierdie sessie sal vir 24 uur geldig bly.",
-    "openBrowser": "Maak blaaier oop om te verifieer",
-    "waiting": "Wag vir verifikasie in blaaier...",
-    "authenticating": "Verwerk verifikasie...",
-    "signInWith": "Teken aan met {{provider}}"
-  },
-  "errors": {
-    "authFailed": "Verifikasie het misluk. Kontroleer asseblief jou geloofsbriewe en probeer weer.",
-    "timeout": "Verifikasie het verstryk. Probeer asseblief weer."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "Herlei URI",
-      "description": "Registreer hierdie URL as 'n toegelate herleidings-URI by elke identiteitsverskaffer in jou OPKSSH-konfigurasie."
-    },
-    "legacyCallback": {
-      "label": "Gebruik die ou aanstuur-URI",
-      "description": "Hou aan om /host/opkssh-callback te stuur, die aanstuur-URI wat voor 2.9 gebruik is. Skakel dit af sodra jou identiteitsverskaffers die nuwe een toelaat."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/ar_SA.json b/plugins/opkssh/locales/translated/ar_SA.json
deleted file mode 100644
index 335c21d11..000000000
--- a/plugins/opkssh/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "تسجيل الدخول إلى هذا المضيف باستخدام مزود الهوية بدلاً من كلمة المرور أو المفتاح. يتطلب إعداد OPKSSH على الخادم.",
-    "docs": "عرض المستندات"
-  },
-  "dialog": {
-    "title": "مطلوب مصادقة OPKSSH",
-    "description": "أكمل المصادقة في المتصفح للمتابعة. تبقى هذه الجلسة صالحة لمدة 24 ساعة.",
-    "openBrowser": "افتح المتصفح للمصادقة",
-    "waiting": "في انتظار المصادقة في المتصفح...",
-    "authenticating": "جارٍ معالجة المصادقة...",
-    "signInWith": "تسجيل الدخول باستخدام {{provider}}"
-  },
-  "errors": {
-    "authFailed": "فشلت المصادقة. يرجى التحقق من بيانات الاعتماد والمحاولة مرة أخرى.",
-    "timeout": "انتهت مهلة المصادقة. يرجى المحاولة مرة أخرى."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "عنوان إعادة التوجيه",
-      "description": "قم بتسجيل عنوان URL هذا كعنوان URI مسموح بإعادة التوجيه مع كل موفر هوية في تكوين OPKSSH الخاص بك."
-    },
-    "legacyCallback": {
-      "label": "استخدم عنوان URI القديم لإعادة التوجيه",
-      "description": "استمر في إرسال /host/opkssh-callback، وهو عنوان إعادة التوجيه المستخدم قبل الإصدار 2.9. قم بإيقاف تشغيل هذا بمجرد أن يسمح موفرو الهوية لديك بالعنوان الجديد."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/bg_BG.json b/plugins/opkssh/locales/translated/bg_BG.json
deleted file mode 100644
index 12797020e..000000000
--- a/plugins/opkssh/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "ОПКСШ",
-    "description": "Влезте в този хост, използвайки вашия доставчик на самоличност вместо парола или ключ. Изисква се OPKSSH, настроен на сървъра.",
-    "docs": "Преглед на документи"
-  },
-  "dialog": {
-    "title": "Изисква се удостоверяване на OPKSSH",
-    "description": "За да продължите, завършете удостоверяването в браузъра си. Тази сесия ще остане валидна 24 часа.",
-    "openBrowser": "Отворете браузъра за удостоверяване",
-    "waiting": "Чака се удостоверяване в браузъра...",
-    "authenticating": "Обработва се удостоверяване...",
-    "signInWith": "Влезте с {{provider}}"
-  },
-  "errors": {
-    "authFailed": "Удостоверяването не бе успешно. Моля, проверете идентификационните си данни и опитайте отново.",
-    "timeout": "Времето за изчакване на удостоверяването изтече. Моля, опитайте отново."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI адрес за пренасочване",
-      "description": "Регистрирайте този URL адрес като разрешен URI адрес за пренасочване с всеки доставчик на самоличност във вашата конфигурация на OPKSSH."
-    },
-    "legacyCallback": {
-      "label": "Използвайте стария URI адрес за пренасочване",
-      "description": "Продължавайте да изпращате /host/opkssh-callback, URI адресът за пренасочване, използван преди версия 2.9. Изключете това, след като доставчиците ви на идентичност разрешат новия."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "ОПКСШ"
-  },
-  "plugin": {
-    "name": "ОПКСШ"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/bn_BD.json b/plugins/opkssh/locales/translated/bn_BD.json
deleted file mode 100644
index 94a5b2363..000000000
--- a/plugins/opkssh/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "পাসওয়ার্ড বা কী-এর পরিবর্তে আপনার আইডেন্টিটি প্রোভাইডার ব্যবহার করে এই হোস্টে সাইন ইন করুন। এর জন্য সার্ভারে OPKSSH সেট আপ করা আবশ্যক।",
-    "docs": "নথি দেখুন"
-  },
-  "dialog": {
-    "title": "OPKSSH প্রমাণীকরণ আবশ্যক",
-    "description": "চালিয়ে যাওয়ার জন্য আপনার ব্রাউজারে প্রমাণীকরণ সম্পন্ন করুন। এই সেশনটি ২৪ ঘণ্টার জন্য বৈধ থাকবে।",
-    "openBrowser": "প্রমাণীকরণের জন্য ব্রাউজার খুলুন",
-    "waiting": "ব্রাউজারে প্রমাণীকরণের জন্য অপেক্ষা করা হচ্ছে...",
-    "authenticating": "প্রমাণীকরণ প্রক্রিয়া চলছে...",
-    "signInWith": "{{provider}} দিয়ে সাইন ইন করুন"
-  },
-  "errors": {
-    "authFailed": "প্রমাণীকরণ ব্যর্থ হয়েছে। অনুগ্রহ করে আপনার পরিচয়পত্র যাচাই করে আবার চেষ্টা করুন।",
-    "timeout": "প্রমাণীকরণের সময়সীমা শেষ হয়ে গেছে। অনুগ্রহ করে আবার চেষ্টা করুন।"
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "পুনঃনির্দেশ URI",
-      "description": "আপনার OPKSSH কনফিগে প্রতিটি আইডেন্টিটি প্রোভাইডারের কাছে এই URL-টিকে একটি অনুমোদিত রিডাইরেক্ট URI হিসেবে নিবন্ধন করুন।"
-    },
-    "legacyCallback": {
-      "label": "পুরানো রিডাইরেক্ট ইউআরআই ব্যবহার করুন",
-      "description": "/host/opkssh-callback পাঠানো চালিয়ে যান, যেটি ২.৯ এর আগে ব্যবহৃত রিডাইরেক্ট ইউআরআই ছিল। আপনার আইডেন্টিটি প্রোভাইডাররা নতুনটি অনুমোদন করলে এটি বন্ধ করে দিন।"
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/ca_ES.json b/plugins/opkssh/locales/translated/ca_ES.json
deleted file mode 100644
index 01c00a851..000000000
--- a/plugins/opkssh/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "Inicieu la sessió en aquest amfitrió amb el vostre proveïdor d'identitat en comptes d'una contrasenya o clau. Requereix que OPKSSH estigui configurat al servidor.",
-    "docs": "Veure documents"
-  },
-  "dialog": {
-    "title": "Cal autenticació OPKSSH",
-    "description": "Completeu l'autenticació al navegador per continuar. Aquesta sessió serà vàlida durant 24 hores.",
-    "openBrowser": "Obre el navegador per autenticar-te",
-    "waiting": "Esperant l'autenticació al navegador...",
-    "authenticating": "Processant l'autenticació...",
-    "signInWith": "Inicia la sessió amb {{provider}}"
-  },
-  "errors": {
-    "authFailed": "L'autenticació ha fallat. Si us plau, comproveu les vostres credencials i torneu-ho a intentar.",
-    "timeout": "S'ha esgotat el temps d'autenticació. Torna-ho a provar."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI de redirecció",
-      "description": "Registra aquesta URL com a URI de redirecció permesa amb tots els proveïdors d'identitat de la configuració d'OPKSSH."
-    },
-    "legacyCallback": {
-      "label": "Utilitza l'URI de redirecció antiga",
-      "description": "Continua enviant /host/opkssh-callback, l'URI de redirecció utilitzat abans de la versió 2.9. Desactiva-ho un cop els proveïdors d'identitat permetin el nou."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/cs_CZ.json b/plugins/opkssh/locales/translated/cs_CZ.json
deleted file mode 100644
index a6ceabe2c..000000000
--- a/plugins/opkssh/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "Přihlaste se k tomuto hostiteli pomocí svého poskytovatele identity namísto hesla nebo klíče. Vyžaduje nastavení OPKSSH na serveru.",
-    "docs": "Zobrazit dokumenty"
-  },
-  "dialog": {
-    "title": "Vyžadováno ověřování OPKSSH",
-    "description": "Pro pokračování dokončete ověření ve vašem prohlížeči. Tato relace bude platná 24 hodin.",
-    "openBrowser": "Otevřít prohlížeč pro ověření",
-    "waiting": "Čekání na ověření v prohlížeči...",
-    "authenticating": "Zpracování ověřování...",
-    "signInWith": "Přihlásit se pomocí {{provider}}"
-  },
-  "errors": {
-    "authFailed": "Ověření se nezdařilo. Zkontrolujte prosím své přihlašovací údaje a zkuste to znovu.",
-    "timeout": "Časový limit ověření vypršel. Zkuste to prosím znovu."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI přesměrování",
-      "description": "Zaregistrujte tuto URL jako povolený URI pro přesměrování u každého poskytovatele identity ve vaší konfiguraci OPKSSH."
-    },
-    "legacyCallback": {
-      "label": "Použít starý identifikátor URI pro přesměrování",
-      "description": "Pokračujte v odesílání /host/opkssh-callback, což je URI pro přesměrování používané před verzí 2.9. Jakmile vaši poskytovatelé identity povolí nový URI, vypněte ho."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/da_DK.json b/plugins/opkssh/locales/translated/da_DK.json
deleted file mode 100644
index 6d6d303e9..000000000
--- a/plugins/opkssh/locales/translated/da_DK.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "Log ind på denne vært med din identitetsudbyder i stedet for en adgangskode eller nøgle. Kræver OPKSSH-opsætning på serveren.",
-    "docs": "Se dokumenter"
-  },
-  "dialog": {
-    "title": "OPKSSH-godkendelse påkrævet",
-    "description": "Fuldfør godkendelsen i din browser for at fortsætte. Denne session forbliver gyldig i 24 timer.",
-    "openBrowser": "Åbn browseren for at godkende",
-    "waiting": "Venter på godkendelse i browseren...",
-    "authenticating": "Behandler godkendelse...",
-    "signInWith": "Log ind med {{provider}}"
-  },
-  "errors": {
-    "authFailed": "Godkendelse mislykkedes. Tjek dine loginoplysninger, og prøv igen.",
-    "timeout": "Godkendelsen udløb. Prøv igen."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "Omdirigerings-URI",
-      "description": "Registrer denne URL som en tilladt omdirigerings-URI hos alle identitetsudbydere i din OPKSSH-konfiguration."
-    },
-    "legacyCallback": {
-      "label": "Brug den gamle omdirigerings-URI",
-      "description": "Fortsæt med at sende /host/opkssh-callback, den omdirigerings-URI, der blev brugt før 2.9. Slå dette fra, når dine identitetsudbydere tillader den nye."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/de_DE.json b/plugins/opkssh/locales/translated/de_DE.json
deleted file mode 100644
index ecbad10fd..000000000
--- a/plugins/opkssh/locales/translated/de_DE.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "Melden Sie sich mit Ihrem Identitätsanbieter an diesem Host an, anstatt mit einem Passwort oder Schlüssel. Erfordert, dass OPKSSH auf dem Server eingerichtet ist.",
-    "docs": "Dokumentation ansehen"
-  },
-  "dialog": {
-    "title": "OPKSSH-Authentifizierung erforderlich",
-    "description": "Schließen Sie die Authentifizierung in Ihrem Browser ab, um fortzufahren. Diese Sitzung bleibt 24 Stunden lang gültig.",
-    "openBrowser": "Browser zum Authentifizieren öffnen",
-    "waiting": "Warten auf Authentifizierung im Browser...",
-    "authenticating": "Authentifizierung wird verarbeitet...",
-    "signInWith": "Anmelden mit {{provider}}"
-  },
-  "errors": {
-    "authFailed": "Authentifizierung fehlgeschlagen. Bitte überprüfen Sie Ihre Anmeldeinformationen und versuchen Sie es erneut.",
-    "timeout": "Authentifizierung abgelaufen. Bitte versuchen Sie es erneut."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "Umleitungs-URI",
-      "description": "Registrieren Sie diese URL als zulässige Umleitungs-URI bei jedem Identitätsanbieter in Ihrer OPKSSH-Konfiguration."
-    },
-    "legacyCallback": {
-      "label": "Verwenden Sie die alte Umleitungs-URI.",
-      "description": "Senden Sie weiterhin /host/opkssh-callback, die Umleitungs-URI, die vor Version 2.9 verwendet wurde. Deaktivieren Sie diese Funktion, sobald Ihre Identitätsanbieter die neue URI zulassen."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/el_GR.json b/plugins/opkssh/locales/translated/el_GR.json
deleted file mode 100644
index f273171c3..000000000
--- a/plugins/opkssh/locales/translated/el_GR.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "Συνδεθείτε σε αυτόν τον κεντρικό υπολογιστή χρησιμοποιώντας την υπηρεσία παροχής ταυτότητας αντί για κωδικό πρόσβασης ή κλειδί. Απαιτείται η ρύθμιση του OPKSSH στον διακομιστή.",
-    "docs": "Προβολή εγγράφων"
-  },
-  "dialog": {
-    "title": "Απαιτείται έλεγχος ταυτότητας OPKSSH",
-    "description": "Ολοκληρώστε τον έλεγχο ταυτότητας στο πρόγραμμα περιήγησής σας για να συνεχίσετε. Αυτή η περίοδος σύνδεσης θα παραμείνει έγκυρη για 24 ώρες.",
-    "openBrowser": "Άνοιγμα προγράμματος περιήγησης για έλεγχο ταυτότητας",
-    "waiting": "Αναμονή για έλεγχο ταυτότητας στο πρόγραμμα περιήγησης...",
-    "authenticating": "Επεξεργασία ελέγχου ταυτότητας...",
-    "signInWith": "Συνδεθείτε με {{provider}}"
-  },
-  "errors": {
-    "authFailed": "Ο έλεγχος ταυτότητας απέτυχε. Ελέγξτε τα διαπιστευτήριά σας και προσπαθήστε ξανά.",
-    "timeout": "Το χρονικό όριο ελέγχου ταυτότητας έληξε. Δοκιμάστε ξανά."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI ανακατεύθυνσης",
-      "description": "Καταχωρίστε αυτήν τη διεύθυνση URL ως επιτρεπόμενο URI ανακατεύθυνσης με κάθε πάροχο ταυτότητας στη διαμόρφωση OPKSSH."
-    },
-    "legacyCallback": {
-      "label": "Χρησιμοποιήστε το παλιό URI ανακατεύθυνσης",
-      "description": "Συνεχίστε να στέλνετε το /host/opkssh-callback, το URI ανακατεύθυνσης που χρησιμοποιήθηκε πριν από την έκδοση 2.9. Απενεργοποιήστε αυτήν τη λειτουργία μόλις οι πάροχοι ταυτοτήτων σας επιτρέψουν το νέο."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/es_ES.json b/plugins/opkssh/locales/translated/es_ES.json
deleted file mode 100644
index 199dc15e4..000000000
--- a/plugins/opkssh/locales/translated/es_ES.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "Inicie sesión en este host usando su proveedor de identidad en lugar de una contraseña o clave. Requiere OPKSSH configurado en el servidor.",
-    "docs": "Ver documentación"
-  },
-  "dialog": {
-    "title": "Autenticación OPKSSH requerida",
-    "description": "Completa la autenticación en tu navegador para continuar. Esta sesión seguirá siendo válida durante 24 horas.",
-    "openBrowser": "Abrir navegador para autenticarse",
-    "waiting": "Esperando autenticación en el navegador...",
-    "authenticating": "Procesando autenticación...",
-    "signInWith": "Iniciar sesión con {{provider}}"
-  },
-  "errors": {
-    "authFailed": "La autenticación falló. Revisa tus credenciales e inténtalo de nuevo.",
-    "timeout": "La autenticación expiró. Inténtalo de nuevo."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI de redirección",
-      "description": "Registra esta URL como una URI de redireccionamiento permitida con cada proveedor de identidad en tu configuración de OPKSSH."
-    },
-    "legacyCallback": {
-      "label": "Utilice la URI de redireccionamiento antigua",
-      "description": "Sigue enviando /host/opkssh-callback, la URI de redireccionamiento que se usaba antes de la versión 2.9. Desactívala una vez que tus proveedores de identidad permitan la nueva."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/fi_FI.json b/plugins/opkssh/locales/translated/fi_FI.json
deleted file mode 100644
index 5115bc6b8..000000000
--- a/plugins/opkssh/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "Kirjaudu tähän isäntään käyttämällä identiteetintarjoajaasi salasanan tai avaimen sijaan. Edellyttää OPKSSH:n määrittämistä palvelimelle.",
-    "docs": "Näytä dokumentit"
-  },
-  "dialog": {
-    "title": "OPKSSH-todennus vaaditaan",
-    "description": "Suorita todennus selaimessasi jatkaaksesi. Tämä istunto on voimassa 24 tuntia.",
-    "openBrowser": "Avaa selain todennusta varten",
-    "waiting": "Odotetaan selaimen todennusta...",
-    "authenticating": "Todennusta käsitellään...",
-    "signInWith": "Kirjaudu sisään tunnuksella {{provider}}"
-  },
-  "errors": {
-    "authFailed": "Todennus epäonnistui. Tarkista tunnistetietosi ja yritä uudelleen.",
-    "timeout": "Todennus aikakatkaistiin. Yritä uudelleen."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "Uudelleenohjauksen URI",
-      "description": "Rekisteröi tämä URL-osoite sallituksi uudelleenohjaus-URI:ksi jokaiselle OPKSSH-kokoonpanosi identiteetintarjoajalle."
-    },
-    "legacyCallback": {
-      "label": "Käytä vanhaa uudelleenohjaus-URI:ta",
-      "description": "Lähetä edelleen /host/opkssh-callback, ennen versiota 2.9 käytetty uudelleenohjaus-URI. Poista tämä käytöstä, kun identiteetintarjoajasi sallivat uuden."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/fr_FR.json b/plugins/opkssh/locales/translated/fr_FR.json
deleted file mode 100644
index 31bc87467..000000000
--- a/plugins/opkssh/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "Connectez-vous à cet hôte en utilisant votre fournisseur d'identité au lieu d'un mot de passe ou d'une clé. Nécessite OPKSSH configuré sur le serveur.",
-    "docs": "Voir la documentation"
-  },
-  "dialog": {
-    "title": "Authentification OPKSSH requise",
-    "description": "Terminez l'authentification dans votre navigateur pour continuer. Cette session restera valide pendant 24 heures.",
-    "openBrowser": "Ouvrir le navigateur pour s'authentifier",
-    "waiting": "En attente de l'authentification dans le navigateur...",
-    "authenticating": "Traitement de l'authentification...",
-    "signInWith": "Se connecter avec {{provider}}"
-  },
-  "errors": {
-    "authFailed": "Échec de l'authentification. Veuillez vérifier vos identifiants et réessayer.",
-    "timeout": "L'authentification a expiré. Veuillez réessayer."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI de redirection",
-      "description": "Enregistrez cette URL comme URI de redirection autorisée auprès de chaque fournisseur d'identité dans votre configuration OPKSSH."
-    },
-    "legacyCallback": {
-      "label": "Utilisez l'ancienne URI de redirection",
-      "description": "Continuez à envoyer /host/opkssh-callback, l'URI de redirection utilisée avant la version 2.9. Désactivez-la une fois que vos fournisseurs d'identité autoriseront la nouvelle."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/he_IL.json b/plugins/opkssh/locales/translated/he_IL.json
deleted file mode 100644
index 308204739..000000000
--- a/plugins/opkssh/locales/translated/he_IL.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "אופקש",
-    "description": "היכנס למארח זה באמצעות ספק הזהות שלך במקום סיסמה או מפתח. נדרשת הגדרת OPKSSH בשרת.",
-    "docs": "הצג מסמכים"
-  },
-  "dialog": {
-    "title": "נדרש אימות OPKSSH",
-    "description": "השלם את האימות בדפדפן שלך כדי להמשיך. סשן זה יישאר תקף למשך 24 שעות.",
-    "openBrowser": "פתח את הדפדפן כדי לאמת",
-    "waiting": "ממתין לאימות בדפדפן...",
-    "authenticating": "מעבד אימות...",
-    "signInWith": "התחבר באמצעות {{provider}}"
-  },
-  "errors": {
-    "authFailed": "האימות נכשל. אנא בדוק את פרטי הגישה שלך ונסה שוב.",
-    "timeout": "הזמן שהוקצב לאימות הסתיים. אנא נסה שוב."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "כתובת URL להפניה מחדש",
-      "description": "רשום כתובת URL זו כ-URI להפניה מחדש מותרת עם כל ספק זהויות בתצורת OPKSSH שלך."
-    },
-    "legacyCallback": {
-      "label": "השתמש ב-URI להפניה הישן",
-      "description": "המשך לשלוח את /host/opkssh-callback, URI ההפניה שהיה בשימוש לפני גרסה 2.9. כבה אפשרות זו לאחר שספקי הזהויות שלך יאפשרו את ה-URI החדש."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "אופקש"
-  },
-  "plugin": {
-    "name": "אופקש"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/hi_IN.json b/plugins/opkssh/locales/translated/hi_IN.json
deleted file mode 100644
index 04909c216..000000000
--- a/plugins/opkssh/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "इस होस्ट में पासवर्ड या कुंजी के बजाय अपने पहचान प्रदाता का उपयोग करके साइन इन करें। सर्वर पर OPKSSH सेटअप आवश्यक है।",
-    "docs": "दस्तावेज़ देखें"
-  },
-  "dialog": {
-    "title": "OPKSSH प्रमाणीकरण आवश्यक है",
-    "description": "जारी रखने के लिए अपने ब्राउज़र में प्रमाणीकरण पूरा करें। यह सत्र 24 घंटे के लिए मान्य रहेगा।",
-    "openBrowser": "प्रमाणीकरण के लिए ब्राउज़र खोलें",
-    "waiting": "ब्राउज़र में प्रमाणीकरण की प्रतीक्षा हो रही है...",
-    "authenticating": "प्रमाणीकरण प्रक्रिया में है...",
-    "signInWith": "{{provider}} से साइन इन करें"
-  },
-  "errors": {
-    "authFailed": "प्रमाणीकरण विफल। कृपया अपने क्रेडेंशियल जाँचें और पुनः प्रयास करें।",
-    "timeout": "प्रमाणीकरण का समय समाप्त हो गया। कृपया पुनः प्रयास करें।"
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "रीडायरेक्ट यूआरआई",
-      "description": "इस URL को अपने OPKSSH कॉन्फ़िगरेशन में प्रत्येक पहचान प्रदाता के साथ एक अनुमत रीडायरेक्ट URI के रूप में पंजीकृत करें।"
-    },
-    "legacyCallback": {
-      "label": "पुराने रीडायरेक्ट यूआरआई का उपयोग करें",
-      "description": "पहले 2.9 से पहले इस्तेमाल होने वाली रीडायरेक्ट यूआरआई /host/opkssh-callback भेजते रहें। जब आपके आइडेंटिटी प्रोवाइडर नई यूआरआई की अनुमति दे दें, तो इसे बंद कर दें।"
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/hu_HU.json b/plugins/opkssh/locales/translated/hu_HU.json
deleted file mode 100644
index 04e7f92a2..000000000
--- a/plugins/opkssh/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "Jelentkezzen be erre a gazdagépre az identitásszolgáltatójával jelszó vagy kulcs helyett. OPKSSH beállítását igényli a szerveren.",
-    "docs": "Dokumentumok megtekintése"
-  },
-  "dialog": {
-    "title": "OPKSSH hitelesítés szükséges",
-    "description": "A folytatáshoz végezze el a hitelesítést a böngészőjében. Ez a munkamenet 24 órán át érvényes marad.",
-    "openBrowser": "Böngésző megnyitása a hitelesítéshez",
-    "waiting": "Várakozás a böngésző hitelesítésére...",
-    "authenticating": "Hitelesítés feldolgozása...",
-    "signInWith": "Bejelentkezés {{provider}} felhasználónévvel"
-  },
-  "errors": {
-    "authFailed": "Sikertelen hitelesítés. Kérjük, ellenőrizze a hitelesítő adatait, és próbálja újra.",
-    "timeout": "A hitelesítés időtúllépést okozott. Kérjük, próbálja újra."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "Átirányítási URI",
-      "description": "Regisztrálja ezt az URL-t engedélyezett átirányítási URI-ként az OPKSSH konfigurációjában található összes identitásszolgáltatónál."
-    },
-    "legacyCallback": {
-      "label": "Használja a régi átirányítási URI-t",
-      "description": "Továbbra is küldd a /host/opkssh-callback címet, a 2.9 előtt használt átirányítási URI-t. Kapcsold ki ezt, amint az identitásszolgáltatóid engedélyezik az újat."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/id_ID.json b/plugins/opkssh/locales/translated/id_ID.json
deleted file mode 100644
index 92c5cd812..000000000
--- a/plugins/opkssh/locales/translated/id_ID.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "Masuk ke host ini menggunakan penyedia identitas Anda, bukan kata sandi atau kunci. Membutuhkan OPKSSH yang terpasang di server.",
-    "docs": "Lihat dokumen"
-  },
-  "dialog": {
-    "title": "Otentikasi OPKSSH Diperlukan",
-    "description": "Lakukan otentikasi di browser Anda untuk melanjutkan. Sesi ini akan tetap berlaku selama 24 jam.",
-    "openBrowser": "Buka Browser untuk Melakukan Otentikasi",
-    "waiting": "Menunggu otentikasi di browser...",
-    "authenticating": "Memproses otentikasi...",
-    "signInWith": "Masuk dengan {{provider}}"
-  },
-  "errors": {
-    "authFailed": "Autentikasi gagal. Silakan periksa kredensial Anda dan coba lagi.",
-    "timeout": "Autentikasi habis waktu. Silakan coba lagi."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI Pengalihan",
-      "description": "Daftarkan URL ini sebagai URI pengalihan yang diizinkan dengan setiap penyedia identitas di konfigurasi OPKSSH Anda."
-    },
-    "legacyCallback": {
-      "label": "Gunakan URI pengalihan lama.",
-      "description": "Tetap kirimkan /host/opkssh-callback, URI pengalihan yang digunakan sebelum versi 2.9. Matikan ini setelah penyedia identitas Anda mengizinkan yang baru."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/it_IT.json b/plugins/opkssh/locales/translated/it_IT.json
deleted file mode 100644
index ae07ae265..000000000
--- a/plugins/opkssh/locales/translated/it_IT.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "Accedi a questo host usando il tuo provider di identità invece di una password o chiave. Richiede OPKSSH configurato sul server.",
-    "docs": "Vedi documenti"
-  },
-  "dialog": {
-    "title": "Autenticazione OPKSSH richiesta",
-    "description": "Completa l'autenticazione nel browser per continuare. Questa sessione rimarrà valida per 24 ore.",
-    "openBrowser": "Apri il browser per autenticarti",
-    "waiting": "In attesa dell'autenticazione nel browser...",
-    "authenticating": "Autenticazione in corso...",
-    "signInWith": "Accedi con {{provider}}"
-  },
-  "errors": {
-    "authFailed": "Autenticazione fallita. Controlla le credenziali e riprova.",
-    "timeout": "Autenticazione scaduta. Riprova."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI di reindirizzamento",
-      "description": "Registra questo URL come URI di reindirizzamento consentito presso ogni provider di identità nella tua configurazione OPKSSH."
-    },
-    "legacyCallback": {
-      "label": "Utilizzare il vecchio URI di reindirizzamento",
-      "description": "Continua a inviare /host/opkssh-callback, l'URI di reindirizzamento utilizzato prima della versione 2.9. Disattivalo non appena i tuoi provider di identità consentiranno il nuovo URI."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/ja_JP.json b/plugins/opkssh/locales/translated/ja_JP.json
deleted file mode 100644
index ab44ed96f..000000000
--- a/plugins/opkssh/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "パスワードや鍵の代わりに、IDプロバイダーを使用してこのホストにサインインします。サーバーにOPKSSHのセットアップが必要です。",
-    "docs": "ドキュメントを見る"
-  },
-  "dialog": {
-    "title": "OPKSSH認証が必要です",
-    "description": "ブラウザで認証を完了して続行してください。このセッションは24時間有効です。",
-    "openBrowser": "ブラウザを開いて認証",
-    "waiting": "ブラウザでの認証を待機中...",
-    "authenticating": "認証を処理中...",
-    "signInWith": "{{provider}} でサインイン"
-  },
-  "errors": {
-    "authFailed": "認証に失敗しました。資格情報を確認して再試行してください。",
-    "timeout": "認証がタイムアウトしました。もう一度お試しください。"
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "リダイレクトURI",
-      "description": "OPKSSHの設定で、このURLを許可されたリダイレクトURIとしてすべてのIDプロバイダーに登録してください。"
-    },
-    "legacyCallback": {
-      "label": "古いリダイレクトURIを使用する",
-      "description": "バージョン2.9以前に使用されていたリダイレクトURIである/host/opkssh-callbackを送信し続けてください。IDプロバイダーが新しいURIを許可したら、この設定を無効にしてください。"
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/ko_KR.json b/plugins/opkssh/locales/translated/ko_KR.json
deleted file mode 100644
index 1d188b1ce..000000000
--- a/plugins/opkssh/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "비밀번호나 키 대신 ID 공급자로 이 호스트에 로그인합니다. 서버에 OPKSSH가 설정되어 있어야 합니다.",
-    "docs": "문서 보기"
-  },
-  "dialog": {
-    "title": "OPKSSH 인증 필요",
-    "description": "브라우저에서 인증을 완료하여 계속 진행하세요. 이 세션은 24시간 동안 유지됩니다.",
-    "openBrowser": "브라우저로 인증하기",
-    "waiting": "브라우저에서 인증 대기 중...",
-    "authenticating": "인증 처리 중...",
-    "signInWith": "{{provider}}로 로그인"
-  },
-  "errors": {
-    "authFailed": "인증에 실패했습니다. 자격 증명을 확인하고 다시 시도하세요.",
-    "timeout": "인증 시간이 초과되었습니다. 다시 시도하세요."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "리디렉션 URI",
-      "description": "OPKSSH 설정에서 모든 ID 공급자에게 이 URL을 허용된 리디렉션 URI로 등록하십시오."
-    },
-    "legacyCallback": {
-      "label": "이전 리디렉션 URI를 사용하세요",
-      "description": "2.9 이전 버전에서 사용했던 리디렉션 URI인 /host/opkssh-callback을 계속 전송하세요. ID 공급자가 새 URI를 허용하면 이 기능을 끄세요."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/nl_NL.json b/plugins/opkssh/locales/translated/nl_NL.json
deleted file mode 100644
index 0803f10fb..000000000
--- a/plugins/opkssh/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "Meld u aan bij deze host met uw identiteitsprovider in plaats van een wachtwoord of sleutel. Hiervoor moet OPKSSH op de server geconfigureerd zijn.",
-    "docs": "Documenten bekijken"
-  },
-  "dialog": {
-    "title": "OPKSSH-authenticatie vereist",
-    "description": "Voltooi de authenticatie in uw browser om verder te gaan. Deze sessie blijft 24 uur geldig.",
-    "openBrowser": "Open de browser om te authenticeren.",
-    "waiting": "Wachten op authenticatie in de browser...",
-    "authenticating": "Authenticatie wordt verwerkt...",
-    "signInWith": "Aanmelden met {{provider}}"
-  },
-  "errors": {
-    "authFailed": "Authenticatie mislukt. Controleer uw inloggegevens en probeer het opnieuw.",
-    "timeout": "De authenticatie is mislukt vanwege een time-out. Probeer het opnieuw."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "Omleidings-URI",
-      "description": "Registreer deze URL als een toegestane omleidings-URI bij elke identiteitsprovider in uw OPKSSH-configuratie."
-    },
-    "legacyCallback": {
-      "label": "Gebruik de oude omleidings-URI",
-      "description": "Blijf /host/opkssh-callback verzenden, de omleidings-URI die vóór versie 2.9 werd gebruikt. Schakel dit uit zodra uw identiteitsproviders de nieuwe URI toestaan."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/no_NO.json b/plugins/opkssh/locales/translated/no_NO.json
deleted file mode 100644
index 1acfd4aa8..000000000
--- a/plugins/opkssh/locales/translated/no_NO.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "Logg på denne verten med identitetsleverandøren din i stedet for et passord eller en nøkkel. Krever at OPKSSH er konfigurert på serveren.",
-    "docs": "Vis dokumenter"
-  },
-  "dialog": {
-    "title": "OPKSSH-autentisering kreves",
-    "description": "Fullfør autentiseringen i nettleseren din for å fortsette. Denne økten vil være gyldig i 24 timer.",
-    "openBrowser": "Åpne nettleseren for å autentisere",
-    "waiting": "Venter på autentisering i nettleseren...",
-    "authenticating": "Behandler autentisering ...",
-    "signInWith": "Logg inn med {{provider}}"
-  },
-  "errors": {
-    "authFailed": "Autentiseringen mislyktes. Sjekk legitimasjonen din og prøv på nytt.",
-    "timeout": "Autentiseringen ble tidsavbrutt. Prøv på nytt."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "Omdirigerings-URI",
-      "description": "Registrer denne URL-en som en tillatt omdirigerings-URI hos alle identitetsleverandører i OPKSSH-konfigurasjonen din."
-    },
-    "legacyCallback": {
-      "label": "Bruk den gamle omdirigerings-URI-en",
-      "description": "Fortsett å sende /host/opkssh-callback, omdirigerings-URI-en som ble brukt før 2.9. Slå av dette når identitetsleverandørene dine tillater den nye."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/pl_PL.json b/plugins/opkssh/locales/translated/pl_PL.json
deleted file mode 100644
index 745feb470..000000000
--- a/plugins/opkssh/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "Zaloguj się do tego hosta, używając swojego dostawcy tożsamości, a nie hasła lub klucza. Wymagane jest skonfigurowanie OPKSSH na serwerze.",
-    "docs": "Zobacz dokumentację"
-  },
-  "dialog": {
-    "title": "Wymagane uwierzytelnienie OPKSSH",
-    "description": "Aby kontynuować, dokończ uwierzytelnianie w przeglądarce. Ta sesja będzie ważna przez 24 godziny.",
-    "openBrowser": "Otwórz przeglądarkę, aby uwierzytelnić",
-    "waiting": "Oczekiwanie na uwierzytelnienie w przeglądarce...",
-    "authenticating": "Przetwarzanie uwierzytelniania...",
-    "signInWith": "Zaloguj się za pomocą {{provider}}"
-  },
-  "errors": {
-    "authFailed": "Uwierzytelnienie nie powiodło się. Sprawdź poświadczenia i spróbuj ponownie.",
-    "timeout": "Upłynął limit czasu uwierzytelniania. Spróbuj ponownie."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "Przekieruj URI",
-      "description": "Zarejestruj ten adres URL jako dozwolony adres przekierowania URI u każdego dostawcy tożsamości w konfiguracji OPKSSH."
-    },
-    "legacyCallback": {
-      "label": "Użyj starego adresu URI przekierowania",
-      "description": "Nadal wysyłaj /host/opkssh-callback, czyli przekierowanie URI używane przed wersją 2.9. Wyłącz tę opcję, gdy Twoi dostawcy tożsamości zezwolą na nową."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/pt_BR.json b/plugins/opkssh/locales/translated/pt_BR.json
deleted file mode 100644
index d13d95a84..000000000
--- a/plugins/opkssh/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "Acesse este host usando seu provedor de identidade em vez de uma senha ou chave. Requer que o OPKSSH esteja configurado no servidor.",
-    "docs": "Documentação"
-  },
-  "dialog": {
-    "title": "Autenticação OPKSSH necessária",
-    "description": "Para continuar, complete a autenticação no seu navegador. Esta sessão permanecerá válida por 24 horas.",
-    "openBrowser": "Abra o navegador para autenticar.",
-    "waiting": "Aguardando autenticação no navegador...",
-    "authenticating": "Processando autenticação...",
-    "signInWith": "Faça login com {{provider}}"
-  },
-  "errors": {
-    "authFailed": "A autenticação falhou. Verifique suas credenciais e tente novamente.",
-    "timeout": "A autenticação expirou. Tente novamente."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI de redirecionamento",
-      "description": "Registre este URL como um URI de redirecionamento permitido com cada provedor de identidade em sua configuração OPKSSH."
-    },
-    "legacyCallback": {
-      "label": "Use o URI de redirecionamento antigo",
-      "description": "Continue enviando /host/opkssh-callback, o URI de redirecionamento usado antes da versão 2.9. Desative-o assim que seus provedores de identidade permitirem o novo URI."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/pt_PT.json b/plugins/opkssh/locales/translated/pt_PT.json
deleted file mode 100644
index 7390b1726..000000000
--- a/plugins/opkssh/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "Inicie sessão neste anfitrião usando o seu fornecedor de identidade em vez de uma palavra-passe ou chave. Requer que o OPKSSH esteja configurado no servidor.",
-    "docs": "Ver docs"
-  },
-  "dialog": {
-    "title": "Autenticação OPKSSH necessária",
-    "description": "Conclua a autenticação no seu navegador para continuar. Esta sessão permanecerá válida por 24 horas.",
-    "openBrowser": "Abrir navegador para autenticar",
-    "waiting": "A aguardar autenticação no navegador...",
-    "authenticating": "A processar autenticação...",
-    "signInWith": "Iniciar sessão com {{provider}}"
-  },
-  "errors": {
-    "authFailed": "A autenticação falhou. Verifique as suas credenciais e tente novamente.",
-    "timeout": "A autenticação expirou. Tente novamente."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI de redireccionamento",
-      "description": "Registe este URL como um URI de redireccionamento permitido com cada fornecedor de identidade na sua configuração OPKSSH."
-    },
-    "legacyCallback": {
-      "label": "Utilize o URI de redirecionamento antigo",
-      "description": "Continue a enviar /host/opkssh-callback, o URI de redireccionamento utilizado antes da versão 2.9. Desative-o assim que os seus fornecedores de identidade permitirem o novo URI."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/ro_RO.json b/plugins/opkssh/locales/translated/ro_RO.json
deleted file mode 100644
index 5543e2905..000000000
--- a/plugins/opkssh/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "Conectați-vă la această gazdă folosind furnizorul de identitate în loc de o parolă sau o cheie. Necesită configurarea OPKSSH pe server.",
-    "docs": "Vizualizați documentele"
-  },
-  "dialog": {
-    "title": "Autentificare OPKSSH necesară",
-    "description": "Finalizați autentificarea în browser pentru a continua. Această sesiune va rămâne valabilă timp de 24 de ore.",
-    "openBrowser": "Deschideți browserul pentru autentificare",
-    "waiting": "Se așteaptă autentificarea în browser...",
-    "authenticating": "Se procesează autentificarea...",
-    "signInWith": "Conectați-vă cu {{provider}}"
-  },
-  "errors": {
-    "authFailed": "Autentificarea a eșuat. Verificați acreditările și încercați din nou.",
-    "timeout": "Autentificarea a expirat. Vă rugăm să încercați din nou."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI de redirecționare",
-      "description": "Înregistrați această adresă URL ca URI de redirecționare permisă cu fiecare furnizor de identitate din configurația OPKSSH."
-    },
-    "legacyCallback": {
-      "label": "Folosește vechiul URI de redirecționare",
-      "description": "Continuă să trimiți /host/opkssh-callback, URI-ul de redirecționare folosit înainte de versiunea 2.9. Dezactivează această opțiune odată ce furnizorii de identitate îl permit pe cel nou."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/ru_RU.json b/plugins/opkssh/locales/translated/ru_RU.json
deleted file mode 100644
index c82e0387f..000000000
--- a/plugins/opkssh/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "Входите на этот хост через своего провайдера идентификации вместо пароля или ключа. Требуется настроенный OPKSSH на сервере.",
-    "docs": "Документация"
-  },
-  "dialog": {
-    "title": "Требуется аутентификация OPKSSH",
-    "description": "Завершите аутентификацию в браузере, чтобы продолжить. Сеанс будет действителен в течение 24 часов.",
-    "openBrowser": "Открыть браузер для аутентификации",
-    "waiting": "Ожидание аутентификации в браузере...",
-    "authenticating": "Обработка аутентификации...",
-    "signInWith": "Войти через {{provider}}"
-  },
-  "errors": {
-    "authFailed": "Аутентификация не удалась. Проверьте учётные данные и попробуйте снова.",
-    "timeout": "Время аутентификации истекло. Попробуйте снова."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI перенаправления",
-      "description": "Зарегистрируйте этот URL-адрес в качестве разрешенного URI перенаправления у каждого поставщика идентификации в конфигурации OPKSSH."
-    },
-    "legacyCallback": {
-      "label": "Используйте старый URI перенаправления.",
-      "description": "Продолжайте отправлять /host/opkssh-callback, URI перенаправления, использовавшийся до версии 2.9. Отключите эту функцию, как только ваши поставщики идентификации разрешат использовать новый URI."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/sr_SP.json b/plugins/opkssh/locales/translated/sr_SP.json
deleted file mode 100644
index 0caccdf07..000000000
--- a/plugins/opkssh/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "ОПКШ",
-    "description": "Пријавите се на овај хост користећи свог добављача идентитета уместо лозинке или кључа. Потребно је подешавање OPKSSH-а на серверу.",
-    "docs": "Прикажи документе"
-  },
-  "dialog": {
-    "title": "Потребна је аутентификација OPKSSH",
-    "description": "Завршите аутентификацију у прегледачу да бисте наставили. Ова сесија ће остати важећа 24 сата.",
-    "openBrowser": "Отворите прегледач за аутентификацију",
-    "waiting": "Чекање аутентификације у прегледачу...",
-    "authenticating": "Обрада аутентификације...",
-    "signInWith": "Пријавите се са {{provider}}"
-  },
-  "errors": {
-    "authFailed": "Аутентификација није успела. Проверите своје акредитиве и покушајте поново.",
-    "timeout": "Временско ограничење за аутентификацију је истекло. Молимо покушајте поново."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI за преусмеравање",
-      "description": "Региструјте овај URL као дозвољени URI за преусмеравање код сваког добављача идентитета у вашој OPKSSH конфигурацији."
-    },
-    "legacyCallback": {
-      "label": "Користите стари URI за преусмеравање",
-      "description": "Наставите да шаљете /host/opkssh-callback, URI за преусмеравање који је коришћен пре верзије 2.9. Искључите ово када ваши добављачи идентитета дозволе нови."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "ОПКШ"
-  },
-  "plugin": {
-    "name": "ОПКШ"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/sv_SE.json b/plugins/opkssh/locales/translated/sv_SE.json
deleted file mode 100644
index f69438c22..000000000
--- a/plugins/opkssh/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "Logga in på den här värden med din identitetsleverantör istället för ett lösenord eller en nyckel. Kräver att OPKSSH är konfigurerat på servern.",
-    "docs": "Visa dokument"
-  },
-  "dialog": {
-    "title": "OPKSSH-autentisering krävs",
-    "description": "Slutför autentiseringen i din webbläsare för att fortsätta. Denna session kommer att vara giltig i 24 timmar.",
-    "openBrowser": "Öppna webbläsaren för att autentisera",
-    "waiting": "Väntar på autentisering i webbläsaren...",
-    "authenticating": "Bearbetar autentisering...",
-    "signInWith": "Logga in med {{provider}}"
-  },
-  "errors": {
-    "authFailed": "Autentiseringen misslyckades. Kontrollera dina inloggningsuppgifter och försök igen.",
-    "timeout": "Autentiseringen har gått ut. Försök igen."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "Omdirigerings-URI",
-      "description": "Registrera denna URL som en tillåten omdirigerings-URI hos varje identitetsleverantör i din OPKSSH-konfiguration."
-    },
-    "legacyCallback": {
-      "label": "Använd den gamla omdirigerings-URI:n",
-      "description": "Fortsätt skicka /host/opkssh-callback, den omdirigerings-URI som användes före version 2.9. Stäng av detta när dina identitetsleverantörer tillåter den nya."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/th_TH.json b/plugins/opkssh/locales/translated/th_TH.json
deleted file mode 100644
index 6149af958..000000000
--- a/plugins/opkssh/locales/translated/th_TH.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "โอพีเคเอสเอช",
-    "description": "เข้าสู่ระบบโฮสต์นี้โดยใช้ผู้ให้บริการยืนยันตัวตนของคุณแทนรหัสผ่านหรือคีย์ จำเป็นต้องตั้งค่า OPKSSH บนเซิร์ฟเวอร์ก่อน",
-    "docs": "ดูเอกสาร"
-  },
-  "dialog": {
-    "title": "ต้องใช้การตรวจสอบสิทธิ์ OPKSSH",
-    "description": "โปรดยืนยันตัวตนในเบราว์เซอร์ของคุณเพื่อดำเนินการต่อ เซสชันนี้จะมีอายุใช้งาน 24 ชั่วโมง",
-    "openBrowser": "เปิดเบราว์เซอร์เพื่อยืนยันตัวตน",
-    "waiting": "กำลังรอการยืนยันตัวตนในเบราว์เซอร์...",
-    "authenticating": "กำลังตรวจสอบสิทธิ์...",
-    "signInWith": "ลงชื่อเข้าใช้ด้วย {{provider}}"
-  },
-  "errors": {
-    "authFailed": "การตรวจสอบสิทธิ์ล้มเหลว โปรดตรวจสอบข้อมูลประจำตัวของคุณและลองอีกครั้ง",
-    "timeout": "การตรวจสอบสิทธิ์หมดเวลา โปรดลองอีกครั้ง"
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI การเปลี่ยนเส้นทาง",
-      "description": "ลงทะเบียน URL นี้เป็น URI ที่อนุญาตให้เปลี่ยนเส้นทางได้กับผู้ให้บริการยืนยันตัวตนทุกรายในไฟล์การกำหนดค่า OPKSSH ของคุณ"
-    },
-    "legacyCallback": {
-      "label": "ใช้ URI การเปลี่ยนเส้นทางแบบเดิม",
-      "description": "ส่ง /host/opkssh-callback ต่อไป ซึ่งเป็น URI สำหรับการเปลี่ยนเส้นทางที่ใช้ก่อนเวอร์ชัน 2.9 ปิดใช้งานเมื่อผู้ให้บริการยืนยันตัวตนของคุณอนุญาตให้ใช้ URI ใหม่แล้ว"
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "โอพีเคเอสเอช"
-  },
-  "plugin": {
-    "name": "โอพีเคเอสเอช"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/tr_TR.json b/plugins/opkssh/locales/translated/tr_TR.json
deleted file mode 100644
index f70748db2..000000000
--- a/plugins/opkssh/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "Parola veya anahtar yerine kimlik sağlayıcınızı kullanarak bu sunucuda oturum açın. Sunucuda OPKSSH kurulumu gerektirir.",
-    "docs": "Belgelere bak"
-  },
-  "dialog": {
-    "title": "OPKSSH Kimlik Doğrulaması Gerekli",
-    "description": "Devam etmek için tarayıcıda kimlik doğrulamasını tamamlayın. Bu oturum 24 saat geçerli olacak.",
-    "openBrowser": "Kimlik Doğrulaması için Tarayıcı Aç",
-    "waiting": "Tarayıcıda kimlik doğrulaması bekleniyor...",
-    "authenticating": "Kimlik doğrulaması işleniyor...",
-    "signInWith": "{{provider}} ile oturum aç"
-  },
-  "errors": {
-    "authFailed": "Kimlik doğrulaması başarısız oldu. Lütfen kimlik bilgilerinizi kontrol edip tekrar deneyin.",
-    "timeout": "Kimlik doğrulaması zaman aşımına uğradı. Lütfen tekrar deneyin."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "Yönlendirme URI'si",
-      "description": "OPKSSH yapılandırmanızda bu URL'yi her kimlik sağlayıcısında izin verilen yönlendirme URI'si olarak kaydedin."
-    },
-    "legacyCallback": {
-      "label": "Eski yönlendirme URI'sini kullanın.",
-      "description": "2.9 öncesinde kullanılan yönlendirme URI'si olan /host/opkssh-callback'i göndermeye devam edin. Kimlik sağlayıcılarınız yenisine izin verdiğinde bunu kapatın."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/uk_UA.json b/plugins/opkssh/locales/translated/uk_UA.json
deleted file mode 100644
index ba27747f8..000000000
--- a/plugins/opkssh/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "ОПКШ",
-    "description": "Увійдіть на цей хост, використовуючи свого постачальника ідентифікаційних даних замість пароля чи ключа. Потрібно налаштувати OPKSSH на сервері.",
-    "docs": "Переглянути документи"
-  },
-  "dialog": {
-    "title": "Потрібна автентифікація OPKSSH",
-    "description": "Щоб продовжити, завершіть автентифікацію у вашому браузері. Цей сеанс залишатиметься дійсним протягом 24 годин.",
-    "openBrowser": "Відкрийте браузер для автентифікації",
-    "waiting": "Очікування автентифікації у браузері...",
-    "authenticating": "Обробка автентифікації...",
-    "signInWith": "Увійти за допомогою {{provider}}"
-  },
-  "errors": {
-    "authFailed": "Помилка автентифікації. Перевірте свої облікові дані та спробуйте ще раз.",
-    "timeout": "Час очікування автентифікації минув. Спробуйте ще раз."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI перенаправлення",
-      "description": "Зареєструйте цю URL-адресу як дозволений URI перенаправлення у кожного постачальника ідентифікаційних даних у вашій конфігурації OPKSSH."
-    },
-    "legacyCallback": {
-      "label": "Використовувати старий URI перенаправлення",
-      "description": "Продовжуйте надсилати /host/opkssh-callback, URI перенаправлення, який використовувався до версії 2.9. Вимкніть цю функцію, щойно ваші постачальники ідентифікації дозволять новий."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "ОПКШ"
-  },
-  "plugin": {
-    "name": "ОПКШ"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/vi_VN.json b/plugins/opkssh/locales/translated/vi_VN.json
deleted file mode 100644
index 817923e66..000000000
--- a/plugins/opkssh/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "Đăng nhập vào máy chủ này bằng nhà cung cấp danh tính thay vì mật khẩu hoặc khóa. Yêu cầu OPKSSH được thiết lập trên máy chủ.",
-    "docs": "Xem tài liệu"
-  },
-  "dialog": {
-    "title": "Yêu cầu xác thực OPKSSH",
-    "description": "Hoàn tất xác thực trên trình duyệt để tiếp tục. Phiên làm việc này sẽ có hiệu lực trong 24 giờ.",
-    "openBrowser": "Mở trình duyệt để xác thực",
-    "waiting": "Đang chờ xác thực trên trình duyệt...",
-    "authenticating": "Đang xử lý xác thực...",
-    "signInWith": "Đăng nhập bằng {{provider}}"
-  },
-  "errors": {
-    "authFailed": "Xác thực thất bại. Vui lòng kiểm tra thông tin đăng nhập và thử lại.",
-    "timeout": "Xác thực đã hết thời gian chờ. Vui lòng thử lại."
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI chuyển hướng",
-      "description": "Hãy đăng ký URL này như một URI chuyển hướng được cho phép với mọi nhà cung cấp danh tính trong cấu hình OPKSSH của bạn."
-    },
-    "legacyCallback": {
-      "label": "Sử dụng URI chuyển hướng cũ.",
-      "description": "Tiếp tục gửi /host/opkssh-callback, URI chuyển hướng được sử dụng trước phiên bản 2.9. Tắt chức năng này khi nhà cung cấp danh tính của bạn cho phép sử dụng URI mới."
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/zh_CN.json b/plugins/opkssh/locales/translated/zh_CN.json
deleted file mode 100644
index 49d2ccde6..000000000
--- a/plugins/opkssh/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "使用身份提供商登录此主机，而非密码或密钥。需要在服务器上设置 OPKSSH。",
-    "docs": "查看文档"
-  },
-  "dialog": {
-    "title": "需要 OPKSSH 认证",
-    "description": "在浏览器中完成认证以继续。此会话将在 24 小时内有效。",
-    "openBrowser": "打开浏览器进行认证",
-    "waiting": "等待浏览器认证...",
-    "authenticating": "正在处理认证...",
-    "signInWith": "使用 {{provider}} 登录"
-  },
-  "errors": {
-    "authFailed": "认证失败，请检查凭据并重试。",
-    "timeout": "认证超时，请重试。"
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "重定向 URI",
-      "description": "将此 URL 注册为 OPKSSH 配置中每个身份提供程序允许的重定向 URI。"
-    },
-    "legacyCallback": {
-      "label": "使用旧的重定向 URI",
-      "description": "继续发送 /host/opkssh-callback，这是 2.9 版本之前使用的重定向 URI。一旦您的身份提供商允许使用新的重定向 URI，就关闭此功能。"
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/locales/translated/zh_TW.json b/plugins/opkssh/locales/translated/zh_TW.json
deleted file mode 100644
index f9707a869..000000000
--- a/plugins/opkssh/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "editor": {
-    "label": "OPKSSH",
-    "description": "使用您的識別提供者而非密碼或金鑰來登入此主機。需要在伺服器上設定 OPKSSH。",
-    "docs": "檢視文件"
-  },
-  "dialog": {
-    "title": "需要 OPKSSH 驗證",
-    "description": "請在瀏覽器中完成驗證以繼續。此工作階段將持續有效 24 小時。",
-    "openBrowser": "開啟瀏覽器以進行驗證",
-    "waiting": "正在等待瀏覽器中的驗證…",
-    "authenticating": "正在處理驗證…",
-    "signInWith": "使用 {{provider}} 登入"
-  },
-  "errors": {
-    "authFailed": "驗證失敗。請檢查您的憑證並再試一次。",
-    "timeout": "驗證逾時。請再試一次。"
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "重定向 URI",
-      "description": "將此 URL 註冊為 OPKSSH 組態中每個身分識別提供者允許的重定向 URI。"
-    },
-    "legacyCallback": {
-      "label": "使用舊的重定向 URI",
-      "description": "繼續發送 /host/opkssh-callback，這是 2.9 版本之前使用的重定向 URI。一旦您的身分提供者允許使用新的重定向 URI，就關閉此功能。"
-    }
-  },
-  "hosts": {
-    "filterAuthOpkssh": "OPKSSH"
-  },
-  "plugin": {
-    "name": "OPKSSH"
-  }
-}
diff --git a/plugins/opkssh/manifest.json b/plugins/opkssh/manifest.json
deleted file mode 100644
index f5c1c076b..000000000
--- a/plugins/opkssh/manifest.json
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  "id": "opkssh",
-  "name": "OPKSSH",
-  "version": "1.0.0",
-  "description": "Connect to hosts with short-lived SSH certificates from OpenPubkey SSH, after signing in with your identity provider.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Access & Security",
-  "icon": "ShieldCheck",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "db:own",
-    "files:own",
-    "secrets:own",
-    "hosts:read",
-    "process:spawn",
-    "network:outbound",
-    "network:serve",
-    "auth:provide",
-    "ui:surface"
-  ],
-  "contributes": {
-    "auth": {
-      "sshAuthTypes": ["opkssh"]
-    },
-    "settings": {
-      "admin": [
-        {
-          "key": "redirectUri",
-          "type": "custom",
-          "component": "redirectUri"
-        },
-        {
-          "key": "legacyCallback",
-          "type": "boolean",
-          "labelKey": "settings.legacyCallback.label",
-          "descriptionKey": "settings.legacyCallback.description",
-          "default": false
-        }
-      ]
-    },
-    "http": {
-      "legacyRedirects": [
-        {
-          "from": "/host/opkssh-callback",
-          "to": "/callback"
-        }
-      ]
-    },
-    "uses": ["terminal.overlay"]
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"]
-}
diff --git a/plugins/opkssh/migrations/mysql/0001_adopt_opkssh_tokens.sql b/plugins/opkssh/migrations/mysql/0001_adopt_opkssh_tokens.sql
deleted file mode 100644
index 64ee26671..000000000
--- a/plugins/opkssh/migrations/mysql/0001_adopt_opkssh_tokens.sql
+++ /dev/null
@@ -1,20 +0,0 @@
--- opkssh 0001: adopt_opkssh_tokens
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `opkssh_tokens` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `host_id` int NOT NULL,
-  `ssh_cert` text NOT NULL,
-  `private_key` text NOT NULL,
-  `email` text,
-  `sub` text,
-  `issuer` text,
-  `audience` text,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `expires_at` varchar(255) NOT NULL,
-  `last_used` text,
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `opkssh_tokens` TO `p_opkssh_tokens`;
diff --git a/plugins/opkssh/migrations/postgres/0001_adopt_opkssh_tokens.sql b/plugins/opkssh/migrations/postgres/0001_adopt_opkssh_tokens.sql
deleted file mode 100644
index 8c8a02df6..000000000
--- a/plugins/opkssh/migrations/postgres/0001_adopt_opkssh_tokens.sql
+++ /dev/null
@@ -1,21 +0,0 @@
--- opkssh 0001: adopt_opkssh_tokens
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "opkssh_tokens" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "host_id" integer NOT NULL,
-  "ssh_cert" text NOT NULL,
-  "private_key" text NOT NULL,
-  "email" text,
-  "sub" text,
-  "issuer" text,
-  "audience" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "expires_at" varchar(255) NOT NULL,
-  "last_used" text,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_opkssh_tokens_user_host" ON "opkssh_tokens" ("user_id", "host_id");
-ALTER TABLE "opkssh_tokens" RENAME TO "p_opkssh_tokens";
diff --git a/plugins/opkssh/migrations/snapshot.json b/plugins/opkssh/migrations/snapshot.json
deleted file mode 100644
index 5372b563a..000000000
--- a/plugins/opkssh/migrations/snapshot.json
+++ /dev/null
@@ -1,64 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "tokens": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "hostId": {
-          "type": "refHost",
-          "notNull": true
-        },
-        "sshCert": {
-          "type": "text",
-          "notNull": true
-        },
-        "privateKey": {
-          "type": "text",
-          "notNull": true
-        },
-        "email": {
-          "type": "text"
-        },
-        "sub": {
-          "type": "text"
-        },
-        "issuer": {
-          "type": "text"
-        },
-        "audience": {
-          "type": "text"
-        },
-        "createdAt": {
-          "type": "text",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "expiresAt": {
-          "type": "varchar",
-          "length": 255,
-          "notNull": true
-        },
-        "lastUsed": {
-          "type": "text"
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_opkssh_tokens_user_host",
-          "columns": ["userId", "hostId"],
-          "unique": true
-        }
-      ],
-      "adopts": "opkssh_tokens"
-    }
-  }
-}
diff --git a/plugins/opkssh/migrations/sqlite/0001_adopt_opkssh_tokens.sql b/plugins/opkssh/migrations/sqlite/0001_adopt_opkssh_tokens.sql
deleted file mode 100644
index 65e8e3794..000000000
--- a/plugins/opkssh/migrations/sqlite/0001_adopt_opkssh_tokens.sql
+++ /dev/null
@@ -1,21 +0,0 @@
--- opkssh 0001: adopt_opkssh_tokens
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "opkssh_tokens" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "host_id" integer NOT NULL,
-  "ssh_cert" text NOT NULL,
-  "private_key" text NOT NULL,
-  "email" text,
-  "sub" text,
-  "issuer" text,
-  "audience" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "expires_at" text NOT NULL,
-  "last_used" text,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_opkssh_tokens_user_host" ON "opkssh_tokens" ("user_id", "host_id");
-ALTER TABLE "opkssh_tokens" RENAME TO "p_opkssh_tokens";
diff --git a/plugins/opkssh/package.json b/plugins/opkssh/package.json
deleted file mode 100644
index d9f4a65f7..000000000
--- a/plugins/opkssh/package.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "name": "@termix-plugin/opkssh",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "js-yaml": "^5.2.3",
-    "lucide-react": "^1.33.0"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "axios": "^1.19.0",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "react": "^19.2.8",
-    "sonner": "^2.0.8"
-  }
-}
diff --git a/plugins/opkssh/src/backend/auth-session.ts b/plugins/opkssh/src/backend/auth-session.ts
deleted file mode 100644
index 20b2fc27a..000000000
--- a/plugins/opkssh/src/backend/auth-session.ts
+++ /dev/null
@@ -1,447 +0,0 @@
-import { randomUUID } from "node:crypto";
-import path from "node:path";
-import type {
-  PluginContext,
-  PluginProcessHandle,
-} from "@termix/plugin-sdk/backend";
-import {
-  CONFIG_FILE,
-  checkConfig,
-  DOCS_URL,
-  OPKSSH_DOCS_URL,
-  validateRedirectUris,
-} from "./config.js";
-import type { CertificateIdentity, TokenStore } from "./token-store.js";
-
-/** How long OPKSSH may wait for the browser sign-in. */
-export const AUTH_TIMEOUT_MS = 60 * 1000;
-
-/** Where the identity provider sends the browser back, before 2.9. */
-export const LEGACY_CALLBACK_PATH = "/host/opkssh-callback";
-/** The plugin's own routes, relative to the install's base URL. */
-export const PLUGIN_PATH = "/plugin-api/opkssh";
-export const CALLBACK_PATH = `${PLUGIN_PATH}/callback`;
-
-/** The terminal socket, as far as a sign-in needs it. */
-export interface SignInSocket {
-  send: (data: string) => void;
-  on: (event: "close", listener: () => void) => void;
-}
-
-export interface AuthSession {
-  requestId: string;
-  userId: string;
-  hostId: number;
-  /** OPKSSH's chooser listener on this server. */
-  localPort: number;
-  /** OPKSSH's login-callback listener on this server. */
-  callbackPort: number;
-  remoteRedirectUri: string;
-  providers: Array<{ alias: string; issuer: string }>;
-  status: "starting" | "waiting_for_auth" | "authenticating" | "completed";
-  socket: SignInSocket;
-  output: string;
-  privateKey: string;
-  sshCert: string;
-  identity: CertificateIdentity;
-  process: PluginProcessHandle | null;
-  timeout: ReturnType<typeof setTimeout> | null;
-  closed: boolean;
-}
-
-export interface StartRequest {
-  userId: string;
-  hostId: number;
-  socket: SignInSocket;
-  requestOrigin: string;
-}
-
-export type AuthSessions = ReturnType<typeof createAuthSessions>;
-
-function send(socket: SignInSocket, message: Record<string, unknown>): void {
-  try {
-    socket.send(JSON.stringify(message));
-  } catch {
-    // socket already gone
-  }
-}
-
-const CHOOSER_PATTERN =
-  /(?:Opening browser to|Open your browser to:)\s*http:\/\/(?:localhost|127\.0\.0\.1):(\d+)\/chooser/;
-const CALLBACK_PORT_PATTERN =
-  /listening on http:\/\/(?:127\.0\.0\.1|localhost):(\d+)\//;
-const PRIVATE_KEY_PATTERN =
-  /(-----BEGIN OPENSSH PRIVATE KEY-----[\s\S]*?-----END OPENSSH PRIVATE KEY-----)/;
-const CERT_PATTERN =
-  /((?:ecdsa-sha2-nistp256|ssh-rsa|ssh-ed25519)-cert-v01@openssh\.com\s+[A-Za-z0-9+/=]+)/;
-const IDENTITY_PATTERN =
-  /Email, sub, issuer, audience:\s*\n?\s*([^\s]+)\s+([^\s]+)\s+([^\s]+)\s+([^\s]+)/;
-const GENERIC_REDIRECT_ERRORS = [
-  "redirect_uri",
-  "redirect uri",
-  "invalid redirect",
-  "no matching redirect",
-  "allowed redirect",
-  "mismatching redirection",
-];
-
-/**
- * OPKSSH sign-ins in flight: one `opkssh login` process per session, whose
- * chooser and callback listeners the routes proxy. Created per activation.
- */
-export function createAuthSessions(
-  ctx: PluginContext,
-  deps: {
-    tokens: TokenStore;
-    binaryPath: () => Promise<string>;
-  },
-) {
-  const sessions = new Map<string, AuthSession>();
-  const oauthStates = new Map<string, string>();
-
-  async function configPath(): Promise<string> {
-    return path.join(await ctx.files.dataDir(), CONFIG_FILE);
-  }
-
-  async function callbackPath(): Promise<string> {
-    const legacy = await ctx.settings.get<boolean>("legacyCallback");
-    return legacy ? LEGACY_CALLBACK_PATH : CALLBACK_PATH;
-  }
-
-  async function end(requestId: string): Promise<void> {
-    const session = sessions.get(requestId);
-    if (!session || session.closed) return;
-    session.closed = true;
-    if (session.timeout) clearTimeout(session.timeout);
-    for (const [state, id] of oauthStates) {
-      if (id === requestId) oauthStates.delete(state);
-    }
-    const child = session.process;
-    if (child) {
-      child.kill("SIGTERM");
-      const forced = setTimeout(() => child.kill("SIGKILL"), 3000);
-      await child.exited.catch(() => undefined);
-      clearTimeout(forced);
-    }
-    sessions.delete(requestId);
-  }
-
-  async function complete(session: AuthSession): Promise<void> {
-    if (!session.privateKey.includes("BEGIN OPENSSH PRIVATE KEY")) {
-      send(session.socket, {
-        type: "opkssh_error",
-        requestId: session.requestId,
-        error: "Failed to extract valid private key from OPKSSH output",
-      });
-      return;
-    }
-    if (!/-cert-v01@openssh\.com/.test(session.sshCert)) {
-      send(session.socket, {
-        type: "opkssh_error",
-        requestId: session.requestId,
-        error: "Failed to extract valid SSH certificate from OPKSSH output",
-      });
-      return;
-    }
-    session.status = "completed";
-    try {
-      const expiresAt = await deps.tokens.save(
-        session.userId,
-        session.hostId,
-        { sshCert: session.sshCert, privateKey: session.privateKey },
-        session.identity,
-      );
-      send(session.socket, {
-        type: "opkssh_completed",
-        requestId: session.requestId,
-        expiresAt,
-      });
-    } catch (error) {
-      ctx.log.error(
-        `Failed to store OPKSSH certificate: ${error instanceof Error ? error.message : String(error)}`,
-      );
-      send(session.socket, {
-        type: "opkssh_error",
-        requestId: session.requestId,
-        error: "Failed to store authentication token",
-      });
-    }
-    await end(session.requestId);
-  }
-
-  function handleOutput(session: AuthSession, chunk: string): void {
-    if (session.closed) return;
-    session.output += chunk;
-
-    const chooser = session.output.match(CHOOSER_PATTERN);
-    if (chooser && session.status === "starting") {
-      session.localPort = parseInt(chooser[1], 10);
-      session.status = "waiting_for_auth";
-      const origin = session.remoteRedirectUri.slice(
-        0,
-        session.remoteRedirectUri.length -
-          (session.remoteRedirectUri.endsWith(LEGACY_CALLBACK_PATH)
-            ? LEGACY_CALLBACK_PATH.length
-            : CALLBACK_PATH.length),
-      );
-      send(session.socket, {
-        type: "opkssh_status",
-        requestId: session.requestId,
-        stage: "chooser",
-        url: `${origin}${PLUGIN_PATH}/chooser/${session.requestId}`,
-        providers: session.providers,
-        message: "Please authenticate in your browser",
-      });
-    }
-
-    const callbackPort = session.output.match(CALLBACK_PORT_PATTERN);
-    if (callbackPort && !session.callbackPort) {
-      session.callbackPort = parseInt(callbackPort[1], 10);
-    }
-
-    if (chunk.includes("BEGIN OPENSSH PRIVATE KEY")) {
-      session.status = "authenticating";
-      send(session.socket, {
-        type: "opkssh_status",
-        requestId: session.requestId,
-        stage: "authenticating",
-        message: "Processing authentication...",
-      });
-    }
-
-    const key = session.output.match(PRIVATE_KEY_PATTERN);
-    if (key) session.privateKey = key[1].trim();
-    const cert = session.output.match(CERT_PATTERN);
-    if (cert) session.sshCert = cert[1].trim();
-    const identity = session.output.match(IDENTITY_PATTERN);
-    if (identity) {
-      session.identity = {
-        email: identity[1],
-        sub: identity[2],
-        issuer: identity[3],
-        audience: identity[4],
-      };
-    }
-
-    if (
-      session.privateKey &&
-      session.sshCert &&
-      session.status !== "completed"
-    ) {
-      void complete(session);
-    }
-  }
-
-  function handleStderr(session: AuthSession, stderr: string): void {
-    if (
-      stderr.includes("Opening browser to") ||
-      stderr.includes("Open your browser to:") ||
-      stderr.includes("listening on")
-    ) {
-      handleOutput(session, stderr);
-    }
-
-    const lower = stderr.toLowerCase();
-    const configError = (error: string, instructions: string) => {
-      send(session.socket, {
-        type: "opkssh_config_error",
-        requestId: session.requestId,
-        error,
-        instructions,
-      });
-      void end(session.requestId);
-    };
-
-    if (lower.includes("redirecturi must be localhost")) {
-      ctx.log.warn("OPKSSH rejected a non-localhost entry in redirect_uris");
-      configError(
-        `OPKSSH rejected the local callback URI: every entry in 'redirect_uris' must be localhost.\n\n` +
-          `OPKSSH output:\n${stderr.trim()}\n\n` +
-          `The 'redirect_uris' config field is OPKSSH's LOCAL listener, not the public Termix callback. ` +
-          `Remove any non-localhost entries from redirect_uris (or delete the whole block to use OPKSSH's ` +
-          `defaults of :3000, :10001, :11110). Register the public Termix callback URL with your OAuth ` +
-          `provider instead, Termix passes it to OPKSSH automatically via --remote-redirect-uri.`,
-        `See documentation: ${DOCS_URL}`,
-      );
-      return;
-    }
-
-    if (GENERIC_REDIRECT_ERRORS.some((needle) => lower.includes(needle))) {
-      ctx.log.warn("OPKSSH reported a redirect_uri error");
-      configError(
-        `OPKSSH or the OAuth provider rejected the redirect URI.\n\n` +
-          `Computed Termix callback URI (sent to provider): ${session.remoteRedirectUri}\n\n` +
-          `OPKSSH output:\n${stderr.trim()}\n\n` +
-          `Register '${session.remoteRedirectUri}' as an authorized redirect URI with your OAuth provider. ` +
-          `Also confirm any 'redirect_uris' in your OPKSSH config contain ONLY localhost URLs.`,
-        `See documentation: ${DOCS_URL}`,
-      );
-      return;
-    }
-
-    if (
-      stderr.includes("provider not found") ||
-      stderr.includes("config error") ||
-      stderr.includes("invalid config") ||
-      stderr.includes("config not found")
-    ) {
-      configError(
-        "OPKSSH configuration error. Please verify your config file contains valid OIDC provider settings.",
-        `See documentation: ${OPKSSH_DOCS_URL}`,
-      );
-      return;
-    }
-
-    if (
-      !stderr.includes('exec: "xdg-open"') &&
-      (stderr.includes("bind: address already in use") ||
-        stderr.includes("error logging in") ||
-        stderr.includes("failed to start"))
-    ) {
-      void end(session.requestId);
-    }
-  }
-
-  return {
-    get: (requestId: string) => sessions.get(requestId),
-
-    registerOAuthState(state: string, requestId: string): void {
-      oauthStates.set(state, requestId);
-    },
-
-    /** Finds the session an identity provider callback belongs to. */
-    takeByOAuthState(state: string): AuthSession | undefined {
-      const requestId = oauthStates.get(state);
-      if (!requestId) return undefined;
-      oauthStates.delete(state);
-      return sessions.get(requestId);
-    },
-
-    callbackPath,
-
-    async start(request: StartRequest): Promise<string> {
-      const { socket } = request;
-      let config;
-      try {
-        config = await checkConfig(await configPath());
-      } catch (error) {
-        send(socket, {
-          type: "opkssh_error",
-          error: `OPKSSH directory initialization failed: ${error instanceof Error ? error.message : String(error)}`,
-        });
-        return "";
-      }
-      if (!config.ok) {
-        send(socket, {
-          type: "opkssh_config_error",
-          requestId: "",
-          error: config.error,
-          instructions: config.error,
-        });
-        return "";
-      }
-
-      const remoteRedirectUri = `${request.requestOrigin}${await callbackPath()}`;
-      const redirects = validateRedirectUris(
-        config.providers,
-        remoteRedirectUri,
-      );
-      if (redirects.ok === false) {
-        send(socket, {
-          type: "opkssh_config_error",
-          requestId: "",
-          error: redirects.message,
-          instructions: redirects.message,
-        });
-        return "";
-      }
-
-      const requestId = randomUUID();
-      const session: AuthSession = {
-        requestId,
-        userId: request.userId,
-        hostId: request.hostId,
-        localPort: 0,
-        callbackPort: 0,
-        remoteRedirectUri,
-        providers: config.providers.map(({ alias, issuer }) => ({
-          alias,
-          issuer,
-        })),
-        status: "starting",
-        socket,
-        output: "",
-        privateKey: "",
-        sshCert: "",
-        identity: {},
-        process: null,
-        timeout: null,
-        closed: false,
-      };
-      sessions.set(requestId, session);
-
-      try {
-        const binary = await deps.binaryPath();
-        const child = await ctx.process.run(binary, [
-          "login",
-          "--print-key",
-          "--disable-browser-open",
-          `--config-path=${config.configPath}`,
-          `--remote-redirect-uri=${remoteRedirectUri}`,
-        ]);
-        session.process = child;
-        session.timeout = setTimeout(() => {
-          send(socket, { type: "opkssh_timeout", requestId });
-          void end(requestId);
-        }, AUTH_TIMEOUT_MS);
-        socket.on("close", () => void end(requestId));
-
-        child.onStdout((chunk) => handleOutput(session, chunk));
-        child.onStderr((chunk) => handleStderr(session, chunk));
-        child.exited.then(
-          ({ code }) => {
-            if (
-              code !== 0 &&
-              session.status !== "completed" &&
-              !session.closed
-            ) {
-              send(socket, {
-                type: "opkssh_error",
-                requestId,
-                error: `OPKSSH process exited with code ${code}`,
-              });
-            }
-            void end(requestId);
-          },
-          (error: unknown) => {
-            send(socket, {
-              type: "opkssh_error",
-              requestId,
-              error: `OPKSSH process error: ${error instanceof Error ? error.message : String(error)}`,
-            });
-            void end(requestId);
-          },
-        );
-        return requestId;
-      } catch (error) {
-        sessions.delete(requestId);
-        ctx.log.error(
-          `Failed to start OPKSSH sign-in: ${error instanceof Error ? error.message : String(error)}`,
-        );
-        send(socket, {
-          type: "opkssh_error",
-          requestId,
-          error: `Failed to start OPKSSH authentication: ${error instanceof Error ? error.message : String(error)}`,
-        });
-        return "";
-      }
-    },
-
-    cancel: (requestId: string) => end(requestId),
-
-    /** Ends every session, for deactivate. */
-    async closeAll(): Promise<void> {
-      await Promise.all([...sessions.keys()].map((id) => end(id)));
-    },
-  };
-}
diff --git a/plugins/opkssh/src/backend/binary.ts b/plugins/opkssh/src/backend/binary.ts
deleted file mode 100644
index 21be1ac8b..000000000
--- a/plugins/opkssh/src/backend/binary.ts
+++ /dev/null
@@ -1,83 +0,0 @@
-import path from "node:path";
-import type { PluginBinarySpec } from "@termix/plugin-sdk/backend";
-
-export const DEFAULT_VERSION = "v0.16.0";
-
-const DEFAULT_CHECKSUMS: Record<string, string> = {
-  "opkssh-linux-amd64":
-    "c018c3e7baf98612b923e742dd87be38650bf61e3b755fb2bc90de177568b1bf",
-  "opkssh-linux-arm64":
-    "9dd10c2b6ce99cde18e52c054877ca014134b291fd82afe71741c68db4f83d44",
-  "opkssh-osx-amd64":
-    "e1ccddb4a73c7dd24e0677e9c933462b954dde9a151fcd96c8ee7ba83bc3f146",
-  "opkssh-osx-arm64":
-    "be279812cc4d44a28f8cb6eef4b13515fae16b6d00ae61e21630e0c061b02cbd",
-  "opkssh-windows-amd64.exe":
-    "db8991ceaac7ac224b704510ca6fba2114998291d4283de4bc2d3b8efa66ad07",
-  "opkssh-windows-arm64.exe":
-    "c35352dc2d12ef3775b280aa85dc1e97ff90cd8ad4beb62c3e2357fdf80ba5af",
-};
-
-const OS_NAMES: Record<string, string> = {
-  linux: "linux",
-  darwin: "osx",
-  win32: "windows",
-};
-
-const ARCH_NAMES: Record<string, string> = {
-  x64: "amd64",
-  arm64: "arm64",
-};
-
-/** The release asset name for this server, e.g. "opkssh-linux-amd64". */
-export function binaryName(
-  platform: string = process.platform,
-  arch: string = process.arch,
-): string {
-  const os = OS_NAMES[platform] ?? platform;
-  const cpu = ARCH_NAMES[arch] ?? arch;
-  return `opkssh-${os}-${cpu}${platform === "win32" ? ".exe" : ""}`;
-}
-
-/**
- * What ctx.process.ensureBinary needs for OPKSSH.
- *
- * The pinned version is trusted by its built-in checksums. OPKSSH_VERSION
- * picks another release, and then OPKSSH_SHA256 (or OPKSSH_SHA256_AMD64 /
- * OPKSSH_SHA256_ARM64, which the Docker image passes on) gives its checksum.
- *
- * The Docker image bakes the binary into /app/opkssh-bundled (the
- * opkssh-downloader stage), which is checked first so an offline install
- * never downloads. OPKSSH_BUNDLED_DIR points somewhere else.
- */
-export function binarySpec(
-  env: NodeJS.ProcessEnv = process.env,
-  platform: string = process.platform,
-  arch: string = process.arch,
-  cwd: string = process.cwd(),
-): PluginBinarySpec {
-  const name = binaryName(platform, arch);
-  const version = env.OPKSSH_VERSION || DEFAULT_VERSION;
-  const sha256 =
-    version === DEFAULT_VERSION
-      ? DEFAULT_CHECKSUMS[name]
-      : (
-          env.OPKSSH_SHA256 ||
-          env[`OPKSSH_SHA256_${arch === "arm64" ? "ARM64" : "AMD64"}`]
-        )
-          ?.trim()
-          .toLowerCase();
-  if (!sha256 || !/^[0-9a-f]{64}$/.test(sha256)) {
-    throw new Error(
-      `OPKSSH ${version} has no trusted SHA-256 checksum for ${name}`,
-    );
-  }
-  const bundledDir = env.OPKSSH_BUNDLED_DIR || path.join(cwd, "opkssh-bundled");
-  return {
-    name,
-    version,
-    sha256,
-    url: `https://github.com/openpubkey/opkssh/releases/download/${version}/${name}`,
-    prebuilt: [path.join(bundledDir, name)],
-  };
-}
diff --git a/plugins/opkssh/src/backend/config.ts b/plugins/opkssh/src/backend/config.ts
deleted file mode 100644
index 2ecf6dea6..000000000
--- a/plugins/opkssh/src/backend/config.ts
+++ /dev/null
@@ -1,161 +0,0 @@
-import { promises as fs } from "node:fs";
-import path from "node:path";
-import { load as loadYaml } from "js-yaml";
-
-export const CONFIG_FILE = "config.yml";
-
-const DOCS_URL = "https://docs.termix.site/features/authentication/opkssh";
-const OPKSSH_DOCS_URL =
-  "https://github.com/openpubkey/opkssh/blob/main/docs/config.md";
-
-const TEMPLATE = `
-# OPKSSH Configuration
-# OPKSSH Documentation: ${OPKSSH_DOCS_URL}
-# Termix Documentation: ${DOCS_URL}
-`;
-
-export interface ProviderInfo {
-  alias: string;
-  issuer: string;
-  redirectUris: string[];
-}
-
-export type ConfigCheck =
-  | { ok: true; configPath: string; providers: ProviderInfo[] }
-  | { ok: false; configPath: string; error: string };
-
-function dockerHint(): string {
-  const dataDir = process.env.DATA_DIR;
-  return dataDir && dataDir.startsWith("/app")
-    ? "\n\nDocker: Ensure /app/data is mounted as a volume with write permissions for node:node user."
-    : "";
-}
-
-/** Providers with an alias and issuer; issuers lose their scheme. */
-export function parseProviders(content: string): ProviderInfo[] {
-  const parsed = loadYaml(content) as {
-    providers?: Array<{
-      alias?: unknown;
-      issuer?: unknown;
-      redirect_uris?: unknown;
-    }>;
-  } | null;
-  if (!parsed?.providers || !Array.isArray(parsed.providers)) return [];
-  return parsed.providers
-    .filter(
-      (p) => typeof p?.alias === "string" && typeof p?.issuer === "string",
-    )
-    .map((p) => ({
-      alias: p.alias as string,
-      issuer: (p.issuer as string).replace(/^https?:\/\//, ""),
-      redirectUris: Array.isArray(p.redirect_uris)
-        ? p.redirect_uris.filter((u): u is string => typeof u === "string")
-        : [],
-    }));
-}
-
-/**
- * Reads the config, writing a template when there is none. The file must
- * have a providers section with at least one active provider.
- */
-export async function checkConfig(configPath: string): Promise<ConfigCheck> {
-  let content: string;
-  try {
-    content = await fs.readFile(configPath, "utf8");
-  } catch {
-    try {
-      await fs.mkdir(path.dirname(configPath), { recursive: true });
-      await fs.writeFile(configPath, TEMPLATE, "utf8");
-    } catch {
-      // Reported below either way.
-    }
-    return {
-      ok: false,
-      configPath,
-      error: `OPKSSH configuration not found. A template config file has been created at:\n${configPath}\n\nPlease edit this file and configure your OIDC provider (Google, GitHub, Microsoft, etc.).\nSee documentation: ${OPKSSH_DOCS_URL}${dockerHint()}`,
-    };
-  }
-
-  if (!content.includes("providers:")) {
-    return {
-      ok: false,
-      configPath,
-      error: `OPKSSH configuration is missing 'providers' section. Please edit the config file at:\n${configPath}`,
-    };
-  }
-
-  const hasActiveProvider = content.split("\n").some((line) => {
-    const trimmed = line.trim();
-    return trimmed.startsWith("- alias:") || trimmed.startsWith("issuer:");
-  });
-  if (!hasActiveProvider) {
-    return {
-      ok: false,
-      configPath,
-      error: `OPKSSH configuration has no active providers. Please edit the config file at:\n${configPath}\n\nUncomment and configure at least one OIDC provider.\nSee documentation: ${OPKSSH_DOCS_URL}${dockerHint()}`,
-    };
-  }
-
-  let providers: ProviderInfo[] = [];
-  try {
-    providers = parseProviders(content);
-  } catch {
-    // OPKSSH reports a broken file itself when it starts.
-  }
-  return { ok: true, configPath, providers };
-}
-
-function isLocalHost(host: string): boolean {
-  const bare = host.replace(/^\[|\]$/g, "");
-  return (
-    bare === "localhost" ||
-    bare === "127.0.0.1" ||
-    bare === "::1" ||
-    bare === "0:0:0:0:0:0:0:1" ||
-    bare.startsWith("localhost:") ||
-    bare.startsWith("127.0.0.1:")
-  );
-}
-
-/**
- * OPKSSH's redirect_uris are the candidate ports for its own callback
- * listener on this server, so they must be localhost. The public URL the
- * identity provider redirects to is passed separately as
- * --remote-redirect-uri; it never goes in this field.
- */
-export function validateRedirectUris(
-  providers: ProviderInfo[],
-  callbackUrl: string,
-): { ok: true } | { ok: false; message: string } {
-  const issues: string[] = [];
-  for (const provider of providers) {
-    const nonLocal = provider.redirectUris.filter((uri) => {
-      try {
-        return !isLocalHost(new URL(uri).hostname);
-      } catch {
-        return true;
-      }
-    });
-    if (nonLocal.length > 0) {
-      issues.push(
-        `Provider '${provider.alias}': non-localhost entries in redirect_uris: ${nonLocal.join(", ")}`,
-      );
-    }
-  }
-  if (issues.length === 0) return { ok: true };
-  return {
-    ok: false,
-    message:
-      `OPKSSH configuration error: 'redirect_uris' must only contain localhost URLs.\n\n` +
-      `${issues.join("\n")}\n\n` +
-      `This field is OPKSSH's local callback listener, it must be localhost (or omitted to use ` +
-      `the defaults http://localhost:3000/login-callback, :10001, :11110). ` +
-      `The public Termix callback URL is supplied automatically by Termix via --remote-redirect-uri; ` +
-      `you do not put it here. Register the public Termix URL with your OAuth provider instead ` +
-      `(${callbackUrl}).\n\n` +
-      `Fix: remove the non-localhost entries above, or delete the whole 'redirect_uris' block to use defaults.\n\n` +
-      `Docs: ${DOCS_URL}`,
-  };
-}
-
-export { DOCS_URL, OPKSSH_DOCS_URL };
diff --git a/plugins/opkssh/src/backend/html.ts b/plugins/opkssh/src/backend/html.ts
deleted file mode 100644
index 2c0248883..000000000
--- a/plugins/opkssh/src/backend/html.ts
+++ /dev/null
@@ -1,251 +0,0 @@
-export function escapeHtml(value: string): string {
-  return value
-    .replace(/&/g, "&amp;")
-    .replace(/</g, "&lt;")
-    .replace(/>/g, "&gt;")
-    .replace(/"/g, "&quot;")
-    .replace(/'/g, "&#39;");
-}
-
-// Replicates openpubkey's client/choosers/web_chooser.go IssuerToName().
-// OPKSSH's /select handler keys its providerMap by this derived name, NOT by the
-// `alias` field in config.yml. We need the same mapping so we can normalize any
-// `op=` query param we receive (which can be alias, issuer with protocol, or
-// issuer without protocol depending on client version) to what OPKSSH expects.
-function opksshIssuerToName(issuer: string): string | null {
-  if (!issuer) return null;
-  const withScheme =
-    issuer.startsWith("http://") || issuer.startsWith("https://")
-      ? issuer
-      : `https://${issuer}`;
-  if (withScheme.startsWith("https://accounts.google.com")) return "google";
-  if (withScheme.startsWith("https://login.microsoftonline.com"))
-    return "azure";
-  if (withScheme.startsWith("https://gitlab.com")) return "gitlab";
-  if (withScheme.startsWith("https://issuer.hello.coop")) return "hello";
-  if (withScheme.startsWith("https://")) {
-    const host = withScheme.slice("https://".length).split("/")[0];
-    return host || null;
-  }
-  return null;
-}
-
-export function normalizeSelectOpParam(
-  rawOp: string,
-  providers: Array<{ alias: string; issuer: string }>,
-): string {
-  if (!rawOp) return rawOp;
-  const knownNames = new Set(
-    providers
-      .map((p) => opksshIssuerToName(p.issuer))
-      .filter((n): n is string => typeof n === "string" && n.length > 0),
-  );
-  if (knownNames.has(rawOp)) return rawOp;
-
-  const derivedFromRaw = opksshIssuerToName(rawOp);
-  if (derivedFromRaw && knownNames.has(derivedFromRaw)) return derivedFromRaw;
-
-  const matchByAlias = providers.find((p) => p.alias === rawOp);
-  if (matchByAlias) {
-    const name = opksshIssuerToName(matchByAlias.issuer);
-    if (name) return name;
-  }
-
-  return rawOp;
-}
-
-type OpksshErrorPageOptions = {
-  title: string;
-  heading: string;
-  message: string;
-  details?: string;
-  requestId?: string;
-  statusCode?: number;
-};
-
-export function renderErrorPage(opts: OpksshErrorPageOptions): string {
-  const title = escapeHtml(opts.title);
-  const heading = escapeHtml(opts.heading);
-  const message = escapeHtml(opts.message);
-  const detailsBlock = opts.details
-    ? `<pre class="details">${escapeHtml(opts.details)}</pre>`
-    : "";
-  const requestIdBlock = opts.requestId
-    ? `<p class="request-id">Request ID: ${escapeHtml(opts.requestId)}</p>`
-    : "";
-
-  return `<!DOCTYPE html>
-<html>
-<head>
-  <title>${title}</title>
-  <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <style>
-    * { margin: 0; padding: 0; box-sizing: border-box; }
-    body {
-      font-family: system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;
-      display: flex;
-      justify-content: center;
-      align-items: center;
-      min-height: 100vh;
-      background: #18181b;
-      color: #fafafa;
-      padding: 1rem;
-    }
-    .container {
-      text-align: center;
-      background: #27272a;
-      padding: 3rem 2rem;
-      border: 1px solid rgba(255, 255, 255, 0.1);
-      max-width: 720px;
-      width: 100%;
-    }
-    h1 {
-      color: #fafafa;
-      font-size: 1.5rem;
-      font-weight: 600;
-      margin-bottom: 0.75rem;
-    }
-    p {
-      color: #9ca3af;
-      font-size: 0.95rem;
-      line-height: 1.5;
-      white-space: pre-wrap;
-      word-break: break-word;
-    }
-    p + p { margin-top: 0.5rem; }
-    .details {
-      color: #d4d4d8;
-      text-align: left;
-      font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
-      font-size: 0.8rem;
-      line-height: 1.45;
-      margin-top: 1.25rem;
-      padding: 0.875rem 1rem;
-      background: #0f0f11;
-      border: 1px solid rgba(255, 255, 255, 0.08);
-      white-space: pre-wrap;
-      word-break: break-word;
-      overflow-x: auto;
-    }
-    .request-id {
-      color: #6b7280;
-      font-size: 0.75rem;
-      margin-top: 1rem;
-      font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
-    }
-  </style>
-</head>
-<body>
-  <div class="container">
-    <h1>${heading}</h1>
-    <p>${message}</p>
-    ${detailsBlock}
-    ${requestIdBlock}
-  </div>
-</body>
-</html>`;
-}
-
-/**
- * Points every URL in a page OPKSSH served at its proxied path, so the
- * browser keeps talking to Termix instead of this server's localhost.
- * `basePath` is the proxied prefix, e.g. "/plugin-api/opkssh/chooser/<id>".
- */
-export function rewriteOpksshHtml(html: string, basePath: string): string {
-  const localHostPattern = "(?:localhost|127\\.0\\.0\\.1)";
-  const attrPatterns = ["action", "href", "src", "formaction"];
-  for (const attr of attrPatterns) {
-    html = html.replace(
-      new RegExp(`${attr}="(/[^"]*)`, "g"),
-      `${attr}="${basePath}$1`,
-    );
-    html = html.replace(
-      new RegExp(`${attr}='(/[^']*)`, "g"),
-      `${attr}='${basePath}$1`,
-    );
-  }
-
-  for (const attr of ["href", "action", "src", "formaction"]) {
-    html = html.replace(
-      new RegExp(
-        `${attr}=["']?http:\\/\\/${localHostPattern}:\\d+\\/([^"'\\s]*)`,
-        "g",
-      ),
-      `${attr}="${basePath}/$1`,
-    );
-  }
-
-  html = html.replace(
-    new RegExp(
-      `(window\\.location\\.href\\s*=\\s*["'])http:\\/\\/${localHostPattern}:\\d+\\/([^"']*)(["'])`,
-      "g",
-    ),
-    `$1${basePath}/$2$3`,
-  );
-  html = html.replace(
-    new RegExp(
-      `(window\\.location\\s*=\\s*["'])http:\\/\\/${localHostPattern}:\\d+\\/([^"']*)(["'])`,
-      "g",
-    ),
-    `$1${basePath}/$2$3`,
-  );
-  html = html.replace(
-    new RegExp(
-      `(fetch\\(["'])http:\\/\\/${localHostPattern}:\\d+\\/([^"']*)(["'])`,
-      "g",
-    ),
-    `$1${basePath}/$2$3`,
-  );
-
-  html = html.replace(
-    new RegExp(
-      `(location\\.assign\\(["'])http:\\/\\/${localHostPattern}:\\d+\\/([^"']*)(["']\\))`,
-      "g",
-    ),
-    `$1${basePath}/$2$3`,
-  );
-  html = html.replace(
-    new RegExp(
-      `(location\\.replace\\(["'])http:\\/\\/${localHostPattern}:\\d+\\/([^"']*)(["']\\))`,
-      "g",
-    ),
-    `$1${basePath}/$2$3`,
-  );
-
-  // XMLHttpRequest.open("GET", "http://localhost:PORT/path", ...)
-  html = html.replace(
-    new RegExp(
-      `(\\.open\\(["']\\w+["']\\s*,\\s*["'])http:\\/\\/${localHostPattern}:\\d+\\/([^"']*)(["'])`,
-      "g",
-    ),
-    `$1${basePath}/$2$3`,
-  );
-
-  html = html.replace(
-    new RegExp(
-      `(<meta[^>]+http-equiv=["']refresh["'][^>]+content=["'][^;]+;\\s*url=)http:\\/\\/${localHostPattern}:\\d+\\/([^"']+)(["'][^>]*>)`,
-      "gi",
-    ),
-    `$1${basePath}/$2$3`,
-  );
-
-  html = html.replace(
-    new RegExp(
-      `(data-[\\w-]+=["'])http:\\/\\/${localHostPattern}:\\d+\\/([^"']*)(["'])`,
-      "g",
-    ),
-    `$1${basePath}/$2$3`,
-  );
-
-  const baseTag = `<base href="${basePath}/">`;
-
-  if (html.includes("<base")) {
-    html = html.replace(/<base[^>]*>/i, baseTag);
-  } else if (html.includes("<head>")) {
-    html = html.replace(/<head>/i, `<head>${baseTag}`);
-  } else {
-    html = `<!DOCTYPE html><html><head>${baseTag}</head><body>${html}</body></html>`;
-  }
-
-  return html;
-}
diff --git a/plugins/opkssh/src/backend/index.ts b/plugins/opkssh/src/backend/index.ts
deleted file mode 100644
index 5bd79bd78..000000000
--- a/plugins/opkssh/src/backend/index.ts
+++ /dev/null
@@ -1,47 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { tokens as tokensTable } from "./tables.js";
-import { createTokenStore } from "./token-store.js";
-import { createAuthSessions } from "./auth-session.js";
-import { binarySpec } from "./binary.js";
-import { createOpksshProvider } from "./provider.js";
-import { PUBLIC_PATHS, registerRoutes } from "./routes.js";
-
-export async function activate(ctx: PluginContext) {
-  const table = await ctx.db.define(tokensTable);
-  const tokens = createTokenStore(ctx, table);
-
-  // Fetched once per activation, in the background: the Docker image ships a
-  // copy, anywhere else the first boot downloads it. A sign-in waits for it.
-  let binary: Promise<string> | null = null;
-  const binaryPath = () => {
-    if (!binary) {
-      binary = ctx.process.ensureBinary(binarySpec()).catch((error) => {
-        binary = null;
-        throw error;
-      });
-    }
-    return binary;
-  };
-  binaryPath().catch((error) =>
-    ctx.log.warn(
-      `OPKSSH binary is not available yet: ${error instanceof Error ? error.message : String(error)}`,
-    ),
-  );
-
-  const sessions = createAuthSessions(ctx, { tokens, binaryPath });
-  ctx.disposables.add(() => sessions.closeAll());
-
-  ctx.auth.registerSshAuthProvider(createOpksshProvider(ctx, tokens, sessions));
-
-  registerRoutes(
-    ctx.http.router<Router>({ public: PUBLIC_PATHS }),
-    ctx,
-    sessions,
-    tokens,
-  );
-}
-
-export async function deactivate() {
-  // Everything above was registered through ctx and is disposed by core.
-}
diff --git a/plugins/opkssh/src/backend/provider.ts b/plugins/opkssh/src/backend/provider.ts
deleted file mode 100644
index 07ef5bcf5..000000000
--- a/plugins/opkssh/src/backend/provider.ts
+++ /dev/null
@@ -1,88 +0,0 @@
-import type {
-  PluginContext,
-  PluginSshAuthProvider,
-} from "@termix/plugin-sdk/backend";
-import { applyCertificateAuth } from "@termix/plugin-sdk/ssh-certs";
-import type { AuthSessions, SignInSocket } from "./auth-session.js";
-import type { TokenStore } from "./token-store.js";
-
-export const AUTH_TYPE = "opkssh";
-
-const REQUIRED_MESSAGE =
-  "OPKSSH authentication required. Please open a Terminal connection to this host first to complete browser-based authentication. Your session will be cached for 24 hours.";
-
-const AUTH_FAILED_PATTERN = /All configured authentication methods failed/i;
-
-/**
- * Hosts with auth type "opkssh" connect with a cached certificate. Without
- * one, the terminal is asked for a browser sign-in ("opkssh_auth_required"),
- * which startInteraction runs.
- */
-export function createOpksshProvider(
-  ctx: PluginContext,
-  tokens: TokenStore,
-  sessions: AuthSessions,
-): PluginSshAuthProvider {
-  return {
-    type: AUTH_TYPE,
-    labelKey: "hosts.filterAuthOpkssh",
-    needsUserInteraction: true,
-    supportsBackground: false,
-    interaction: AUTH_TYPE,
-    prepare: async (config, host, env) => {
-      const certificate = await tokens.get(env.userId, env.hostId);
-      if (!certificate) {
-        env.log("info", "No valid certificate found, requesting sign-in");
-        return {
-          status: "interaction-required",
-          interaction: AUTH_TYPE,
-          message: REQUIRED_MESSAGE,
-          flag: "requiresOPKSSHAuth",
-        };
-      }
-      try {
-        await applyCertificateAuth(
-          config as never,
-          env.client as never,
-          {
-            privateKey: certificate.privateKey,
-            certificate: certificate.sshCert,
-          },
-          host.username,
-        );
-      } catch (error) {
-        return {
-          status: "error",
-          code: "failed",
-          message:
-            "OPKSSH authentication failed: " +
-            (error instanceof Error ? error.message : String(error)),
-        };
-      }
-      env.log("info", "Using cached SSH certificate");
-      return { status: "ready" };
-    },
-    onAuthFailed: (_host, env, context) => {
-      if (!AUTH_FAILED_PATTERN.test(context.error.message)) return undefined;
-      ctx.log.warn("OPKSSH authentication failed, forgetting the certificate");
-      void tokens.remove(env.userId, env.hostId).catch(() => undefined);
-      return {
-        status: "interaction-required",
-        interaction: AUTH_TYPE,
-        message:
-          "OPKSSH authentication failed or expired. Please authenticate again.",
-      };
-    },
-    startInteraction: async (request) => {
-      await sessions.start({
-        userId: request.userId,
-        hostId: request.hostId,
-        socket: request.socket as SignInSocket,
-        requestOrigin: request.requestOrigin,
-      });
-    },
-    cancelInteraction: async (request) => {
-      if (request.requestId) await sessions.cancel(request.requestId);
-    },
-  };
-}
diff --git a/plugins/opkssh/src/backend/routes.ts b/plugins/opkssh/src/backend/routes.ts
deleted file mode 100644
index f9f1ec0f3..000000000
--- a/plugins/opkssh/src/backend/routes.ts
+++ /dev/null
@@ -1,622 +0,0 @@
-import axios from "axios";
-import type { Request, Response, Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import {
-  normalizeSelectOpParam,
-  renderErrorPage,
-  rewriteOpksshHtml,
-} from "./html.js";
-import {
-  PLUGIN_PATH,
-  type AuthSession,
-  type AuthSessions,
-} from "./auth-session.js";
-import type { TokenStore } from "./token-store.js";
-
-/**
- * The browser reaches these without a Termix session: the sign-in may finish
- * in a different browser, and the identity provider redirects to /callback.
- * Each is matched to its sign-in by the request id, the OAuth state or the
- * opkssh_request_id cookie.
- */
-export const PUBLIC_PATHS = [
-  "/chooser/:requestId",
-  "/chooser/:requestId/*",
-  "/callback",
-  "/callback/:requestId",
-  "/callback/:requestId/*",
-];
-
-const REQUEST_COOKIE = "opkssh_request_id";
-const MAX_HOPS = 4;
-
-function isLocalHostname(host: string): boolean {
-  const bare = host.split(":")[0];
-  return bare === "127.0.0.1" || bare === "localhost" || bare === "[::1]";
-}
-
-function readCookie(req: Request, name: string): string | undefined {
-  const header = req.headers.cookie;
-  if (!header) return undefined;
-  for (const part of header.split(";")) {
-    const [key, ...rest] = part.trim().split("=");
-    if (key === name) return decodeURIComponent(rest.join("="));
-  }
-  return undefined;
-}
-
-function param(value: string | string[] | undefined): string {
-  return Array.isArray(value) ? (value[0] ?? "") : (value ?? "");
-}
-
-export function registerRoutes(
-  router: Router,
-  ctx: PluginContext,
-  sessions: AuthSessions,
-  tokens: TokenStore,
-): void {
-  /** The plugin's public path prefix on this install, base path included. */
-  const prefix = (req: Request): string => {
-    const base = new URL(ctx.http.baseUrl(req)).pathname.replace(/\/$/, "");
-    return `${base}${PLUGIN_PATH}`;
-  };
-
-  const pathAfter = (req: Request, marker: string): string => {
-    const full = req.originalUrl || req.url;
-    const index = full.indexOf(marker);
-    return index === -1 ? "" : full.slice(index + marker.length);
-  };
-
-  const sessionNotFound = (res: Response, requestId: string) => {
-    res.status(404).send(
-      renderErrorPage({
-        title: "Session Not Found",
-        heading: "Session Not Found",
-        message:
-          "This authentication session has expired or is invalid. Please close this window and try again.",
-        requestId,
-      }),
-    );
-  };
-
-  async function actingUserWithAccess(
-    req: Request,
-    res: Response,
-  ): Promise<{ userId: string; hostId: number } | null> {
-    const userId = ctx.currentActor();
-    const hostId = Number(param(req.params.hostId));
-    if (!userId) {
-      res.status(401).json({ error: "Authentication required" });
-      return null;
-    }
-    if (!Number.isInteger(hostId) || hostId <= 0) {
-      res.status(400).json({ error: "Invalid host id" });
-      return null;
-    }
-    const access = await ctx.hosts.checkAccess(hostId, "connect");
-    if (!access.hasAccess) {
-      res.status(404).json({ error: "Host not found" });
-      return null;
-    }
-    return { userId, hostId };
-  }
-
-  /**
-   * @openapi
-   * /plugin-api/opkssh/token/{hostId}:
-   *   get:
-   *     summary: Get the cached OPKSSH certificate status for a host
-   *     description: Whether the current user has a valid cached certificate for this host, and when it expires.
-   *     tags: [OPKSSH]
-   *     parameters:
-   *       - name: hostId
-   *         in: path
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Certificate status.
-   *       400:
-   *         description: Invalid host id.
-   *       404:
-   *         description: Host not found or not accessible.
-   */
-  router.get("/token/:hostId", async (req: Request, res: Response) => {
-    const target = await actingUserWithAccess(req, res);
-    if (!target) return;
-    res.json(await tokens.status(target.userId, target.hostId));
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/opkssh/token/{hostId}:
-   *   delete:
-   *     summary: Forget the cached OPKSSH certificate for a host
-   *     description: The next connection to the host asks for a browser sign-in again.
-   *     tags: [OPKSSH]
-   *     parameters:
-   *       - name: hostId
-   *         in: path
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Certificate removed, or there was none.
-   *       400:
-   *         description: Invalid host id.
-   *       404:
-   *         description: Host not found or not accessible.
-   */
-  router.delete("/token/:hostId", async (req: Request, res: Response) => {
-    const target = await actingUserWithAccess(req, res);
-    if (!target) return;
-    await tokens.remove(target.userId, target.hostId);
-    res.json({ success: true });
-  });
-
-  /**
-   * Follows OPKSSH's /select hops until it names the identity provider:
-   * /select to /select/ on the chooser, then /login on the callback listener,
-   * then the provider's authorize URL.
-   */
-  async function proxySelect(
-    req: Request,
-    res: Response,
-    session: AuthSession,
-    targetPath: string,
-  ): Promise<void> {
-    const requestId = session.requestId;
-    const rawQs = targetPath.includes("?")
-      ? targetPath.slice(targetPath.indexOf("?"))
-      : "";
-    let qs = rawQs;
-    if (rawQs) {
-      try {
-        const params = new URLSearchParams(rawQs.replace(/^\?/, ""));
-        const rawOp = params.get("op");
-        if (rawOp) {
-          const mapped = normalizeSelectOpParam(rawOp, session.providers);
-          if (mapped !== rawOp) {
-            params.set("op", mapped);
-            qs = `?${params.toString()}`;
-          }
-        }
-      } catch {
-        // keep the raw query
-      }
-    }
-
-    const chooserHost = `127.0.0.1:${session.localPort}`;
-    const startUrl = `http://${chooserHost}/select/${qs}`;
-
-    const fetchUpstream = async (url: string) => {
-      let hostHeader = chooserHost;
-      try {
-        hostHeader = new URL(url).host;
-      } catch {
-        // keep the chooser host
-      }
-      const response = await axios({
-        method: "GET",
-        url,
-        maxRedirects: 0,
-        validateStatus: () => true,
-        timeout: 10000,
-        responseType: "text",
-        transformResponse: (value) => value,
-        headers: { host: hostHeader },
-      });
-      const location = response.headers["location"];
-      const contentType = response.headers["content-type"];
-      return {
-        status: response.status,
-        location: typeof location === "string" ? location : undefined,
-        contentType: typeof contentType === "string" ? contentType : "",
-        body:
-          typeof response.data === "string"
-            ? response.data
-            : String(response.data ?? ""),
-        targetUrl: url,
-      };
-    };
-
-    try {
-      let response = await fetchUpstream(startUrl);
-      for (let hop = 0; hop < MAX_HOPS; hop++) {
-        if (response.status < 300 || response.status >= 400) break;
-        const location = response.location;
-        if (!location) break;
-
-        if (location.startsWith("/")) {
-          let currentHost = chooserHost;
-          try {
-            currentHost = new URL(response.targetUrl).host;
-          } catch {
-            // keep the chooser host
-          }
-          response = await fetchUpstream(`http://${currentHost}${location}`);
-          continue;
-        }
-
-        if (/^https?:\/\//i.test(location)) {
-          const parsed = new URL(location);
-          if (isLocalHostname(parsed.host)) {
-            if (!session.callbackPort) {
-              const port = parseInt(parsed.port, 10);
-              if (!Number.isNaN(port)) session.callbackPort = port;
-            }
-            // Send the browser through the proxy so it gets the state cookie
-            // OPKSSH sets on /login; following it here would swallow it.
-            res.redirect(
-              302,
-              `${prefix(req)}/chooser/${requestId}${parsed.pathname}${parsed.search}`,
-            );
-            return;
-          }
-        }
-        break;
-      }
-
-      let external: URL | null = null;
-      if (
-        response.status >= 300 &&
-        response.status < 400 &&
-        response.location &&
-        /^https?:\/\//i.test(response.location)
-      ) {
-        try {
-          const parsed = new URL(response.location);
-          if (!isLocalHostname(parsed.host)) external = parsed;
-        } catch {
-          external = null;
-        }
-      }
-
-      if (external) {
-        const state = external.searchParams.get("state");
-        if (state) sessions.registerOAuthState(state, requestId);
-        res.redirect(302, external.toString());
-        return;
-      }
-
-      const bodyPreview = response.body.slice(0, 512);
-      ctx.log.error(
-        `OPKSSH /select did not produce an OAuth redirect (status ${response.status})`,
-      );
-      res.status(502).send(
-        renderErrorPage({
-          title: "OPKSSH error",
-          heading: "Failed to get OAuth redirect",
-          message:
-            "OPKSSH did not return an external OAuth provider URL. " +
-            "This typically indicates a configuration mismatch between the provider's redirect_uris " +
-            "and the Termix callback path. Check the server log for the OPKSSH response body.",
-          details: [
-            `Upstream: ${response.targetUrl}`,
-            `Status: ${response.status}`,
-            response.location ? `Location: ${response.location}` : "",
-            `Content-Type: ${response.contentType || "(none)"}`,
-            "",
-            bodyPreview
-              ? `Body (first 512 chars):\n${bodyPreview}`
-              : "Body: (empty)",
-          ]
-            .filter((line, index) => line || index === 4)
-            .join("\n"),
-          requestId,
-        }),
-      );
-    } catch (error) {
-      const message = error instanceof Error ? error.message : String(error);
-      ctx.log.error(`Error proxying OPKSSH /select: ${message}`);
-      res.status(502).send(
-        renderErrorPage({
-          title: "OPKSSH error",
-          heading: "Failed to reach OPKSSH service",
-          message:
-            "Termix could not connect to the local OPKSSH authentication service. " +
-            "The OPKSSH process may have exited or is not listening yet.",
-          details: `Upstream: ${startUrl}\nError: ${message}`,
-          requestId,
-        }),
-      );
-    }
-  }
-
-  /**
-   * @openapi
-   * /plugin-api/opkssh/chooser/{requestId}:
-   *   get:
-   *     summary: Proxy the OPKSSH provider chooser page and its resources
-   *     description: Public. Serves OPKSSH's local chooser for one sign-in, rewriting its URLs to this path. Any subpath is proxied too.
-   *     tags: [OPKSSH]
-   *     parameters:
-   *       - name: requestId
-   *         in: path
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: Chooser page content.
-   *       302:
-   *         description: Redirect to the identity provider or the callback listener.
-   *       404:
-   *         description: Sign-in not found.
-   *       502:
-   *         description: OPKSSH did not answer as expected.
-   */
-  router.use("/chooser/:requestId", async (req: Request, res: Response) => {
-    const requestId = param(req.params.requestId);
-    const session = sessions.get(requestId);
-    if (!session) {
-      sessionNotFound(res, requestId);
-      return;
-    }
-    if (!session.localPort) {
-      res.status(500).send(
-        renderErrorPage({
-          title: "Error",
-          heading: "Authentication Error",
-          message:
-            "Failed to load authentication page. OPKSSH process may not be ready yet. Please try again.",
-          requestId,
-        }),
-      );
-      return;
-    }
-
-    const base = prefix(req);
-    const chooserBase = `${base}/chooser/${requestId}`;
-    const callbackBase = `${base}/callback/${requestId}`;
-    const targetPath = pathAfter(req, `/chooser/${requestId}`) || "/chooser";
-
-    if (targetPath.startsWith("/select")) {
-      await proxySelect(req, res, session, targetPath);
-      return;
-    }
-
-    // The browser is sent here for OPKSSH's login listener so it receives
-    // the listener's cookies.
-    const onCallbackListener =
-      /^\/login(?:\?|$)/.test(targetPath) ||
-      /^\/login-callback(?:\?|$)/.test(targetPath);
-    const upstreamPort =
-      onCallbackListener && session.callbackPort
-        ? session.callbackPort
-        : session.localPort;
-
-    try {
-      const response = await axios({
-        method: req.method,
-        url: `http://127.0.0.1:${upstreamPort}${targetPath}`,
-        headers: { ...req.headers, host: `127.0.0.1:${upstreamPort}` },
-        data: req.body,
-        timeout: 10000,
-        validateStatus: () => true,
-        maxRedirects: 0,
-        responseType: "arraybuffer",
-      });
-
-      for (const [key, value] of Object.entries(response.headers)) {
-        const lower = key.toLowerCase();
-        if (lower === "transfer-encoding") continue;
-        if (lower === "location") {
-          const location = String(value);
-          if (location.startsWith("/")) {
-            res.setHeader(key, `${chooserBase}${location}`);
-            continue;
-          }
-          const local = location.match(
-            /^http:\/\/(?:localhost|127\.0\.0\.1):(\d+)(\/.*)?$/,
-          );
-          if (local) {
-            const port = parseInt(local[1], 10);
-            const path = local[2] || "/";
-            const toCallback =
-              (session.callbackPort && port === session.callbackPort) ||
-              (port !== session.localPort &&
-                (path.includes("login") || path.includes("callback")));
-            res.setHeader(
-              key,
-              `${toCallback ? callbackBase : chooserBase}${path}`,
-            );
-            continue;
-          }
-          try {
-            const state = new URL(location).searchParams.get("state");
-            if (state) sessions.registerOAuthState(state, requestId);
-          } catch {
-            // not a URL
-          }
-          res.setHeader(key, location);
-        } else if (lower === "set-cookie") {
-          // Scope OPKSSH's cookies to the proxied callback, where the state
-          // cookie set by /login has to arrive.
-          const cookies = Array.isArray(value) ? value : [String(value)];
-          res.setHeader(
-            key,
-            cookies.map((cookie) =>
-              /;\s*path=/i.test(cookie)
-                ? cookie
-                    .replace(/;\s*domain=[^;]*/gi, "")
-                    .replace(/;\s*path=[^;]*/gi, `; Path=${base}/callback/`)
-                : `${cookie.replace(/;\s*domain=[^;]*/gi, "")}; Path=${base}/callback/`,
-            ),
-          );
-        } else if (value !== undefined) {
-          res.setHeader(key, value as string | string[]);
-        }
-      }
-
-      // Survives the identity provider round trip, for when OPKSSH
-      // redirects with script and no state was captured.
-      res.cookie(REQUEST_COOKIE, requestId, {
-        path: `${base}/`,
-        httpOnly: true,
-        sameSite: "lax",
-        maxAge: 5 * 60 * 1000,
-      });
-
-      const contentType = String(response.headers["content-type"] || "");
-      const data = Buffer.from(response.data as ArrayBuffer);
-      if (contentType.includes("text/html")) {
-        res
-          .status(response.status)
-          .send(rewriteOpksshHtml(data.toString("utf-8"), chooserBase));
-      } else {
-        res.status(response.status).send(data);
-      }
-    } catch (error) {
-      ctx.log.error(
-        `Error proxying OPKSSH chooser: ${error instanceof Error ? error.message : String(error)}`,
-      );
-      res.status(500).send(
-        renderErrorPage({
-          title: "Error",
-          heading: "Error",
-          message: "Failed to load authentication page. Please try again.",
-          requestId,
-        }),
-      );
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/opkssh/callback:
-   *   get:
-   *     summary: OAuth callback from the identity provider for an OPKSSH sign-in
-   *     description: Public. The redirect URI registered with the identity provider. Finds the sign-in by OAuth state or the opkssh_request_id cookie and forwards to its proxied callback listener.
-   *     tags: [OPKSSH]
-   *     responses:
-   *       302:
-   *         description: Forwarded to the sign-in's callback listener.
-   *       401:
-   *         description: No sign-in matches this callback.
-   *       503:
-   *         description: OPKSSH's callback listener is not ready yet.
-   */
-  router.get("/callback", (req: Request, res: Response) => {
-    const base = prefix(req);
-    const state = typeof req.query.state === "string" ? req.query.state : "";
-    let session = state ? sessions.takeByOAuthState(state) : undefined;
-    if (!session) {
-      const cookieId = readCookie(req, REQUEST_COOKIE);
-      if (cookieId) {
-        session = sessions.get(cookieId);
-        if (session) res.clearCookie(REQUEST_COOKIE, { path: `${base}/` });
-      }
-    }
-    if (!session) {
-      ctx.log.warn("OPKSSH callback matched no sign-in");
-      res
-        .status(401)
-        .send("Authentication callback failed: unable to identify session");
-      return;
-    }
-    if (!session.callbackPort) {
-      res.status(503).send("OPKSSH callback listener not ready yet");
-      return;
-    }
-    const query = req.url.includes("?")
-      ? req.url.slice(req.url.indexOf("?"))
-      : "";
-    res.redirect(302, `${base}/callback/${session.requestId}${query}`);
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/opkssh/callback/{requestId}:
-   *   get:
-   *     summary: Proxy OPKSSH's local callback listener for one sign-in
-   *     description: Public. Forwards to OPKSSH's login-callback listener, which prints the key and certificate once the code exchange succeeds. Any subpath is proxied too.
-   *     tags: [OPKSSH]
-   *     parameters:
-   *       - name: requestId
-   *         in: path
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: The listener's page.
-   *       404:
-   *         description: Sign-in not found.
-   *       500:
-   *         description: The listener is not ready.
-   */
-  router.use("/callback/:requestId", async (req: Request, res: Response) => {
-    const requestId = param(req.params.requestId);
-    const session = sessions.get(requestId);
-    if (!session) {
-      sessionNotFound(res, requestId);
-      return;
-    }
-    if (!session.callbackPort) {
-      res.status(500).send(
-        renderErrorPage({
-          title: "Error",
-          heading: "Callback Error",
-          message:
-            "OPKSSH callback listener not ready. Please try authenticating again.",
-          requestId,
-        }),
-      );
-      return;
-    }
-
-    const callbackBase = `${prefix(req)}/callback/${requestId}`;
-    const after = pathAfter(req, `/callback/${requestId}`);
-    // The listener serves /login-callback whatever the public path was.
-    const targetPath =
-      after === "" || after.startsWith("?") ? `/login-callback${after}` : after;
-
-    try {
-      const response = await axios({
-        method: req.method,
-        url: `http://127.0.0.1:${session.callbackPort}${targetPath}`,
-        headers: { ...req.headers, host: `127.0.0.1:${session.callbackPort}` },
-        data: req.body,
-        timeout: 10000,
-        validateStatus: () => true,
-        maxRedirects: 0,
-        responseType: "arraybuffer",
-      });
-
-      for (const [key, value] of Object.entries(response.headers)) {
-        const lower = key.toLowerCase();
-        if (lower === "transfer-encoding" || value === undefined) continue;
-        if (lower === "location" && String(value).startsWith("/")) {
-          res.setHeader(key, `${callbackBase}${String(value)}`);
-        } else {
-          res.setHeader(key, value as string | string[]);
-        }
-      }
-
-      const contentType = String(response.headers["content-type"] || "");
-      const data = Buffer.from(response.data as ArrayBuffer);
-      if (contentType.includes("text/html")) {
-        res
-          .status(response.status)
-          .send(rewriteOpksshHtml(data.toString("utf-8"), callbackBase));
-      } else {
-        res.status(response.status).send(data);
-      }
-    } catch (error) {
-      ctx.log.error(
-        `Error handling OPKSSH callback: ${error instanceof Error ? error.message : String(error)}`,
-      );
-      res.status(500).send(
-        renderErrorPage({
-          title: "Error",
-          heading: "Error",
-          message: "An unexpected error occurred. Please try again.",
-          requestId,
-        }),
-      );
-    }
-  });
-}
diff --git a/plugins/opkssh/src/backend/tables.ts b/plugins/opkssh/src/backend/tables.ts
deleted file mode 100644
index 4404a6983..000000000
--- a/plugins/opkssh/src/backend/tables.ts
+++ /dev/null
@@ -1,48 +0,0 @@
-import {
-  adoptLegacyTable,
-  defineTable,
-  id,
-  refHost,
-  refUser,
-  text,
-  varchar,
-} from "@termix/plugin-sdk/db";
-
-/**
- * One cached certificate per user and host. Adopted from core's
- * opkssh_tokens, so the column and index names are the legacy ones.
- *
- * sshCert and privateKey are sealed with ctx.secrets.seal. Rows written by
- * 2.8 were encrypted with the user's data key instead; they do not unseal and
- * are treated as expired, which costs one browser sign-in.
- */
-export const tokens = adoptLegacyTable(
-  "opkssh_tokens",
-  defineTable(
-    "tokens",
-    {
-      id: id(),
-      userId: refUser(),
-      hostId: refHost(),
-      sshCert: text().notNull(),
-      privateKey: text().notNull(),
-      email: text(),
-      sub: text(),
-      issuer: text(),
-      audience: text(),
-      createdAt: text().notNull().defaultNow(),
-      expiresAt: varchar().notNull(),
-      lastUsed: text(),
-    },
-    {
-      uniques: [
-        {
-          name: "idx_opkssh_tokens_user_host",
-          columns: ["userId", "hostId"],
-        },
-      ],
-    },
-  ),
-);
-
-export const tables = [tokens];
diff --git a/plugins/opkssh/src/backend/token-store.ts b/plugins/opkssh/src/backend/token-store.ts
deleted file mode 100644
index 125cdaf70..000000000
--- a/plugins/opkssh/src/backend/token-store.ts
+++ /dev/null
@@ -1,142 +0,0 @@
-import { and, eq } from "drizzle-orm";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// ctx.db.define hands the table back untyped and the drizzle handle is the
-// server's own, so both are typed at this module's edge.
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-/** How long a certificate is cached after sign-in. */
-export const TOKEN_LIFETIME_MS = 24 * 60 * 60 * 1000;
-
-export interface StoredCertificate {
-  sshCert: string;
-  privateKey: string;
-}
-
-export interface CertificateIdentity {
-  email?: string;
-  sub?: string;
-  issuer?: string;
-  audience?: string;
-}
-
-export interface TokenStatus {
-  exists: boolean;
-  expiresAt?: string;
-  email?: string | null;
-}
-
-export type TokenStore = ReturnType<typeof createTokenStore>;
-
-export function createTokenStore(ctx: PluginContext, table: Table) {
-  const client = () => ctx.db.client<Drizzle>();
-  const byUserAndHost = (userId: string, hostId: number) =>
-    and(eq(table.userId, userId), eq(table.hostId, hostId));
-
-  async function find(userId: string, hostId: number) {
-    const rows = await (
-      await client()
-    )
-      .select()
-      .from(table)
-      .where(byUserAndHost(userId, hostId))
-      .limit(1);
-    return rows[0] ?? null;
-  }
-
-  async function remove(userId: string, hostId: number): Promise<boolean> {
-    const existing = await find(userId, hostId);
-    if (!existing) return false;
-    await (await client()).delete(table).where(byUserAndHost(userId, hostId));
-    await ctx.db.persist();
-    return true;
-  }
-
-  function expired(row: { expiresAt: string }): boolean {
-    const expiresAt = new Date(row.expiresAt).getTime();
-    return !Number.isFinite(expiresAt) || expiresAt <= Date.now();
-  }
-
-  return {
-    async save(
-      userId: string,
-      hostId: number,
-      certificate: StoredCertificate,
-      identity: CertificateIdentity,
-    ): Promise<string> {
-      const expiresAt = new Date(Date.now() + TOKEN_LIFETIME_MS).toISOString();
-      const values = {
-        sshCert: await ctx.secrets.seal(certificate.sshCert),
-        privateKey: await ctx.secrets.seal(certificate.privateKey),
-        email: identity.email ?? null,
-        sub: identity.sub ?? null,
-        issuer: identity.issuer ?? null,
-        audience: identity.audience ?? null,
-        createdAt: new Date().toISOString(),
-        expiresAt,
-        lastUsed: null,
-      };
-      if (await find(userId, hostId)) {
-        await (
-          await client()
-        )
-          .update(table)
-          .set(values)
-          .where(byUserAndHost(userId, hostId));
-      } else {
-        await (
-          await client()
-        )
-          .insert(table)
-          .values({ userId, hostId, ...values });
-      }
-      await ctx.db.persist();
-      return expiresAt;
-    },
-
-    /**
-     * The usable certificate, or null. An expired row, or one that does not
-     * unseal (written by 2.8), is deleted.
-     */
-    async get(
-      userId: string,
-      hostId: number,
-    ): Promise<StoredCertificate | null> {
-      const row = await find(userId, hostId);
-      if (!row) return null;
-      if (expired(row)) {
-        await remove(userId, hostId);
-        return null;
-      }
-      const sshCert = await ctx.secrets.unseal(row.sshCert);
-      const privateKey = await ctx.secrets.unseal(row.privateKey);
-      if (!sshCert || !privateKey) {
-        await remove(userId, hostId);
-        return null;
-      }
-      await (
-        await client()
-      )
-        .update(table)
-        .set({ lastUsed: new Date().toISOString() })
-        .where(byUserAndHost(userId, hostId));
-      await ctx.db.persist({ lazy: true });
-      return { sshCert, privateKey };
-    },
-
-    async status(userId: string, hostId: number): Promise<TokenStatus> {
-      const row = await find(userId, hostId);
-      if (!row) return { exists: false };
-      if (expired(row)) {
-        await remove(userId, hostId);
-        return { exists: false };
-      }
-      return { exists: true, expiresAt: row.expiresAt, email: row.email };
-    },
-
-    remove,
-  };
-}
diff --git a/plugins/opkssh/src/frontend/OpksshAuthEditor.tsx b/plugins/opkssh/src/frontend/OpksshAuthEditor.tsx
deleted file mode 100644
index 719af72cc..000000000
--- a/plugins/opkssh/src/frontend/OpksshAuthEditor.tsx
+++ /dev/null
@@ -1,28 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-const DOCS_URL = "https://docs.termix.site/features/authentication/opkssh";
-
-/** The host editor's "opkssh" auth method: nothing to fill in, just a pointer. */
-export function OpksshAuthEditor() {
-  const { t } = useTranslation();
-  return (
-    <div className="flex flex-col gap-2 border-t border-border pt-3">
-      <div className="flex items-center justify-between">
-        <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-          {t("editor.label")}
-        </span>
-        <a
-          href={DOCS_URL}
-          target="_blank"
-          rel="noreferrer"
-          className="text-[10px] text-accent-brand hover:underline"
-        >
-          {t("editor.docs")}
-        </a>
-      </div>
-      <p className="text-[10px] text-muted-foreground">
-        {t("editor.description")}
-      </p>
-    </div>
-  );
-}
diff --git a/plugins/opkssh/src/frontend/OpksshDialog.tsx b/plugins/opkssh/src/frontend/OpksshDialog.tsx
deleted file mode 100644
index 66b8be8bd..000000000
--- a/plugins/opkssh/src/frontend/OpksshDialog.tsx
+++ /dev/null
@@ -1,150 +0,0 @@
-import { Shield, ExternalLink, Loader2, AlertCircle } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Button } from "@termix/plugin-sdk/ui";
-
-export type SignInStage =
-  "chooser" | "waiting" | "authenticating" | "completed" | "error";
-
-interface OpksshDialogProps {
-  authUrl: string;
-  stage: SignInStage;
-  error?: string;
-  providers?: Array<{ alias: string; issuer: string }>;
-  onCancel: () => void;
-  onOpenUrl: () => void;
-  onSelectProvider?: (alias: string) => void;
-  backgroundColor?: string;
-}
-
-/** The browser sign-in the terminal shows while OPKSSH waits. */
-export function OpksshDialog({
-  authUrl,
-  stage,
-  error,
-  providers,
-  onCancel,
-  onOpenUrl,
-  onSelectProvider,
-  backgroundColor,
-}: OpksshDialogProps) {
-  const { t } = useTranslation();
-
-  return (
-    <div className="absolute inset-0 flex items-center justify-center z-500 animate-in fade-in duration-200">
-      <div
-        className="absolute inset-0 bg-canvas"
-        style={{ backgroundColor: backgroundColor || undefined }}
-      />
-      <div className="bg-card border border-border w-full max-w-md mx-4 relative z-10 animate-in fade-in zoom-in-95 duration-200">
-        <div className="p-4 border-b border-border">
-          <div className="flex items-center gap-2">
-            <Shield className="size-4 text-accent-brand" />
-            <h3 className="text-xs font-bold uppercase tracking-widest">
-              {t("dialog.title")}
-            </h3>
-          </div>
-          {stage === "chooser" && (
-            <p className="text-[10px] font-bold uppercase tracking-tight text-muted-foreground mt-1">
-              {t("dialog.description")}
-            </p>
-          )}
-        </div>
-        <div className="p-4 flex flex-col gap-4">
-          {stage === "chooser" && (
-            <>
-              {providers && providers.length > 0 && onSelectProvider ? (
-                <div className="flex flex-col gap-2">
-                  {providers.map((provider) => (
-                    <Button
-                      key={provider.alias}
-                      type="button"
-                      variant="outline"
-                      onClick={() => onSelectProvider(provider.alias)}
-                      className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 rounded-none text-[10px] font-bold uppercase tracking-widest w-full flex items-center gap-2"
-                    >
-                      <ExternalLink className="size-3.5" />
-                      {t("dialog.signInWith", {
-                        provider:
-                          provider.alias.charAt(0).toUpperCase() +
-                          provider.alias.slice(1),
-                      })}
-                    </Button>
-                  ))}
-                </div>
-              ) : authUrl ? (
-                <Button
-                  type="button"
-                  variant="outline"
-                  onClick={onOpenUrl}
-                  className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 rounded-none text-[10px] font-bold uppercase tracking-widest w-full flex items-center gap-2"
-                >
-                  <ExternalLink className="size-3.5" />
-                  {t("dialog.openBrowser")}
-                </Button>
-              ) : null}
-              <div className="flex justify-end">
-                <Button
-                  type="button"
-                  variant="ghost"
-                  onClick={onCancel}
-                  className="rounded-none text-[10px] font-bold uppercase tracking-widest"
-                >
-                  {t("common.cancel")}
-                </Button>
-              </div>
-            </>
-          )}
-
-          {(stage === "waiting" || stage === "authenticating") && (
-            <>
-              <div className="flex items-center gap-3 py-2">
-                <Loader2 className="size-4 animate-spin text-accent-brand shrink-0" />
-                <p className="text-xs text-muted-foreground">
-                  {stage === "waiting"
-                    ? t("dialog.waiting")
-                    : t("dialog.authenticating")}
-                </p>
-              </div>
-              <div className="flex justify-end">
-                <Button
-                  type="button"
-                  variant="ghost"
-                  onClick={onCancel}
-                  className="rounded-none text-[10px] font-bold uppercase tracking-widest"
-                >
-                  {t("common.cancel")}
-                </Button>
-              </div>
-            </>
-          )}
-
-          {stage === "error" && error && (
-            <>
-              <div className="flex items-start gap-3 p-3 border border-destructive/20 bg-destructive/10">
-                <AlertCircle className="size-4 text-destructive shrink-0 mt-0.5" />
-                <div className="flex-1 min-w-0">
-                  <p className="text-[10px] font-bold uppercase tracking-widest text-destructive">
-                    {t("common.error")}
-                  </p>
-                  <p className="text-xs text-destructive/90 mt-1 whitespace-pre-wrap break-words">
-                    {error}
-                  </p>
-                </div>
-              </div>
-              <div className="flex justify-end">
-                <Button
-                  type="button"
-                  variant="ghost"
-                  onClick={onCancel}
-                  className="rounded-none text-[10px] font-bold uppercase tracking-widest"
-                >
-                  {t("common.close")}
-                </Button>
-              </div>
-            </>
-          )}
-        </div>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/opkssh/src/frontend/OpksshOverlay.tsx b/plugins/opkssh/src/frontend/OpksshOverlay.tsx
deleted file mode 100644
index ce18064e3..000000000
--- a/plugins/opkssh/src/frontend/OpksshOverlay.tsx
+++ /dev/null
@@ -1,202 +0,0 @@
-import { useEffect, useRef, useState } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { OpksshDialog, type SignInStage } from "./OpksshDialog";
-
-/** What the ssh-terminal plugin hands a "terminal.overlay" component. */
-export interface TerminalOverlayProps {
-  host: { id: number | string; [key: string]: unknown } | undefined;
-  backgroundColor?: string;
-  subscribe: (
-    listener: (message: { type: string; [key: string]: unknown }) => void,
-  ) => () => void;
-  holdConnectTimeout: (held: boolean) => void;
-  fail: (message: string) => void;
-  disconnect: () => void;
-  send: (type: string, data?: unknown) => void;
-  connectPayload: () => Record<string, unknown>;
-}
-
-interface DialogState {
-  authUrl: string;
-  requestId: string;
-  stage: SignInStage;
-  error?: string;
-  providers?: Array<{ alias: string; issuer: string }>;
-}
-
-/** How long the sign-in dialog waits before giving up on the connection. */
-const DIALOG_TIMEOUT_MS = 300_000;
-
-/**
- * Runs the OPKSSH browser sign-in for a terminal: asks the server to start
- * it, shows the provider chooser, and reconnects once the certificate is
- * stored.
- */
-export function OpksshOverlay({
-  subscribe,
-  holdConnectTimeout,
-  fail,
-  disconnect,
-  send,
-  connectPayload,
-  backgroundColor,
-}: TerminalOverlayProps) {
-  const { t } = useTranslation();
-  const [dialog, setDialog] = useState<DialogState | null>(null);
-  const timerRef = useRef<ReturnType<typeof setTimeout> | null>(null);
-  const heldRef = useRef(false);
-  // A second "auth required" after a sign-in means the certificate did not work.
-  const failedRef = useRef(false);
-
-  useEffect(() => {
-    const clearTimer = () => {
-      if (timerRef.current) clearTimeout(timerRef.current);
-      timerRef.current = null;
-    };
-    const hold = (held: boolean) => {
-      if (heldRef.current === held) return;
-      heldRef.current = held;
-      holdConnectTimeout(held);
-    };
-    const showError = (requestId: unknown, error: string) => {
-      clearTimer();
-      setDialog((current) =>
-        current
-          ? { ...current, stage: "error", error }
-          : {
-              authUrl: "",
-              requestId: typeof requestId === "string" ? requestId : "",
-              stage: "error",
-              error,
-            },
-      );
-    };
-
-    const unsubscribe = subscribe((message) => {
-      switch (message.type) {
-        case "opkssh_auth_required":
-          hold(true);
-          if (failedRef.current) {
-            clearTimer();
-            setDialog(null);
-            hold(false);
-            fail(t("errors.authFailed"));
-          } else {
-            failedRef.current = true;
-            send("opkssh_start_auth", { hostId: message.hostId });
-          }
-          break;
-        case "opkssh_status":
-          if (message.stage === "chooser") {
-            setDialog({
-              authUrl: typeof message.url === "string" ? message.url : "",
-              requestId:
-                typeof message.requestId === "string" ? message.requestId : "",
-              stage: "chooser",
-              providers: Array.isArray(message.providers)
-                ? (message.providers as DialogState["providers"])
-                : undefined,
-            });
-            clearTimer();
-            timerRef.current = setTimeout(() => {
-              setDialog(null);
-              hold(false);
-              disconnect();
-            }, DIALOG_TIMEOUT_MS);
-          } else {
-            setDialog((current) =>
-              current
-                ? { ...current, stage: message.stage as SignInStage }
-                : null,
-            );
-          }
-          break;
-        case "opkssh_completed":
-          clearTimer();
-          setDialog(null);
-          send("opkssh_auth_completed", connectPayload());
-          break;
-        case "opkssh_error":
-          failedRef.current = true;
-          showError(message.requestId, String(message.error ?? ""));
-          break;
-        case "opkssh_timeout":
-          failedRef.current = true;
-          showError(message.requestId, t("errors.timeout"));
-          break;
-        case "opkssh_config_error":
-          showError(
-            message.requestId,
-            String(message.instructions || message.error || ""),
-          );
-          break;
-        case "connected":
-        case "sessionAttached":
-          failedRef.current = false;
-          hold(false);
-          break;
-        case "session_closed":
-          clearTimer();
-          setDialog(null);
-          hold(false);
-          break;
-      }
-    });
-
-    return () => {
-      unsubscribe();
-      clearTimer();
-      if (heldRef.current) {
-        heldRef.current = false;
-        holdConnectTimeout(false);
-      }
-    };
-  }, [
-    subscribe,
-    holdConnectTimeout,
-    fail,
-    disconnect,
-    send,
-    connectPayload,
-    t,
-  ]);
-
-  if (!dialog) return null;
-
-  const close = () => {
-    if (timerRef.current) clearTimeout(timerRef.current);
-    timerRef.current = null;
-    if (dialog.requestId) {
-      send("opkssh_cancel", { requestId: dialog.requestId });
-    }
-    setDialog(null);
-    if (heldRef.current) {
-      heldRef.current = false;
-      holdConnectTimeout(false);
-    }
-  };
-
-  return (
-    <OpksshDialog
-      authUrl={dialog.authUrl}
-      stage={dialog.stage}
-      error={dialog.error}
-      providers={dialog.providers}
-      onCancel={close}
-      onOpenUrl={() => {
-        window.open(dialog.authUrl, "_blank");
-      }}
-      onSelectProvider={(alias) => {
-        if (!dialog.authUrl) return;
-        window.open(
-          `${dialog.authUrl}/select?op=${encodeURIComponent(alias)}`,
-          "_blank",
-        );
-        setDialog((current) =>
-          current ? { ...current, stage: "waiting" } : null,
-        );
-      }}
-      backgroundColor={backgroundColor}
-    />
-  );
-}
diff --git a/plugins/opkssh/src/frontend/RedirectUriSetting.tsx b/plugins/opkssh/src/frontend/RedirectUriSetting.tsx
deleted file mode 100644
index c96a3804e..000000000
--- a/plugins/opkssh/src/frontend/RedirectUriSetting.tsx
+++ /dev/null
@@ -1,54 +0,0 @@
-import { toast } from "sonner";
-import {
-  useTranslation,
-  type SettingsComponentProps,
-} from "@termix/plugin-sdk/frontend";
-import { Button, Input, copyToClipboard } from "@termix/plugin-sdk/ui";
-
-const CALLBACK_PATH = "plugin-api/opkssh/callback";
-const LEGACY_CALLBACK_PATH = "host/opkssh-callback";
-
-/** The public callback URI to register with the identity provider. */
-export function redirectUri(
-  legacy: boolean,
-  baseUri = document.baseURI,
-): string {
-  return new URL(
-    legacy ? LEGACY_CALLBACK_PATH : CALLBACK_PATH,
-    baseUri,
-  ).toString();
-}
-
-export function RedirectUriSetting({ values }: SettingsComponentProps) {
-  const { t } = useTranslation();
-  const uri = redirectUri(values.legacyCallback === true);
-
-  return (
-    <div className="flex flex-col gap-2">
-      <span className="text-xs font-medium">
-        {t("settings.redirectUri.label")}
-      </span>
-      <div className="flex gap-2">
-        <Input
-          value={uri}
-          readOnly
-          className="min-w-0 flex-1 rounded-none font-mono text-xs"
-        />
-        <Button
-          type="button"
-          variant="outline"
-          className="rounded-none"
-          onClick={async () => {
-            if (await copyToClipboard(uri)) toast.success(t("common.copied"));
-            else toast.error(t("common.copyFailed"));
-          }}
-        >
-          {t("common.copy")}
-        </Button>
-      </div>
-      <p className="text-[10px] text-muted-foreground">
-        {t("settings.redirectUri.description")}
-      </p>
-    </div>
-  );
-}
diff --git a/plugins/opkssh/src/frontend/index.tsx b/plugins/opkssh/src/frontend/index.tsx
deleted file mode 100644
index eb8b4542c..000000000
--- a/plugins/opkssh/src/frontend/index.tsx
+++ /dev/null
@@ -1,25 +0,0 @@
-import type { ComponentType } from "react";
-import type { TermixApp } from "@termix/plugin-sdk/frontend";
-import { OpksshAuthEditor } from "./OpksshAuthEditor";
-import { OpksshOverlay } from "./OpksshOverlay";
-import { RedirectUriSetting } from "./RedirectUriSetting";
-
-export function activate(app: TermixApp): void {
-  app.registerSshAuthEditor({
-    authType: "opkssh",
-    titleKey: "hosts.filterAuthOpkssh",
-    component: OpksshAuthEditor,
-  });
-
-  // The browser sign-in while a terminal connects to an OPKSSH host.
-  app.registerSlotContribution("terminal.overlay", {
-    actionId: "opkssh.signIn",
-    titleKey: "dialog.title",
-    kind: "component",
-    component: OpksshOverlay as unknown as ComponentType<
-      Record<string, unknown>
-    >,
-  });
-
-  app.registerSettingsComponent("redirectUri", RedirectUriSetting);
-}
diff --git a/plugins/opkssh/tests/backend/helpers-pure.test.ts b/plugins/opkssh/tests/backend/helpers-pure.test.ts
deleted file mode 100644
index 4dffd09c2..000000000
--- a/plugins/opkssh/tests/backend/helpers-pure.test.ts
+++ /dev/null
@@ -1,122 +0,0 @@
-import path from "node:path";
-import { describe, expect, it } from "vitest";
-import {
-  binaryName,
-  binarySpec,
-  DEFAULT_VERSION,
-} from "../../src/backend/binary.js";
-import {
-  parseProviders,
-  validateRedirectUris,
-} from "../../src/backend/config.js";
-import {
-  normalizeSelectOpParam,
-  rewriteOpksshHtml,
-} from "../../src/backend/html.js";
-
-describe("config", () => {
-  it("reads providers and strips the issuer scheme", () => {
-    expect(
-      parseProviders(`providers:
-  - alias: google
-    issuer: https://accounts.google.com
-    redirect_uris:
-      - http://localhost:3000/login-callback
-  - alias: broken
-`),
-    ).toEqual([
-      {
-        alias: "google",
-        issuer: "accounts.google.com",
-        redirectUris: ["http://localhost:3000/login-callback"],
-      },
-    ]);
-  });
-
-  it("accepts localhost redirect_uris only, naming the public callback", () => {
-    const callback = "https://termix.test/plugin-api/opkssh/callback";
-    expect(
-      validateRedirectUris(
-        [
-          {
-            alias: "a",
-            issuer: "x",
-            redirectUris: ["http://127.0.0.1:10001/login-callback"],
-          },
-        ],
-        callback,
-      ),
-    ).toEqual({ ok: true });
-    const refused = validateRedirectUris(
-      [{ alias: "a", issuer: "x", redirectUris: [callback] }],
-      callback,
-    );
-    expect(refused.ok).toBe(false);
-    expect(refused.ok === false && refused.message).toContain(callback);
-  });
-});
-
-describe("html", () => {
-  it("sends the page's links through the proxied path", () => {
-    const html = rewriteOpksshHtml(
-      '<html><head></head><body><a href="/select?op=google">g</a><form action="http://localhost:4567/login"></form></body></html>',
-      "/plugin-api/opkssh/chooser/req-1",
-    );
-    expect(html).toContain(
-      'href="/plugin-api/opkssh/chooser/req-1/select?op=google"',
-    );
-    expect(html).toContain('action="/plugin-api/opkssh/chooser/req-1/login"');
-    expect(html).toContain('<base href="/plugin-api/opkssh/chooser/req-1/">');
-  });
-
-  it("maps a provider alias to the name OPKSSH's chooser uses", () => {
-    const providers = [{ alias: "work", issuer: "accounts.google.com" }];
-    expect(normalizeSelectOpParam("work", providers)).toBe("google");
-    expect(normalizeSelectOpParam("google", providers)).toBe("google");
-    expect(normalizeSelectOpParam("other", providers)).toBe("other");
-  });
-});
-
-describe("binary", () => {
-  it("names the release asset per platform", () => {
-    expect(binaryName("linux", "x64")).toBe("opkssh-linux-amd64");
-    expect(binaryName("darwin", "arm64")).toBe("opkssh-osx-arm64");
-    expect(binaryName("win32", "x64")).toBe("opkssh-windows-amd64.exe");
-  });
-
-  it("pins the default release and checks the Docker copy first", () => {
-    const spec = binarySpec({}, "linux", "x64", "/app");
-    expect(spec).toMatchObject({
-      name: "opkssh-linux-amd64",
-      version: DEFAULT_VERSION,
-      url: `https://github.com/openpubkey/opkssh/releases/download/${DEFAULT_VERSION}/opkssh-linux-amd64`,
-      prebuilt: [path.join("/app", "opkssh-bundled", "opkssh-linux-amd64")],
-    });
-    expect(spec.sha256).toMatch(/^[0-9a-f]{64}$/);
-    expect(
-      binarySpec({ OPKSSH_BUNDLED_DIR: "/srv/opk" }, "linux", "x64").prebuilt,
-    ).toEqual([path.join("/srv/opk", "opkssh-linux-amd64")]);
-  });
-
-  it("needs a checksum for any other release", () => {
-    expect(() => binarySpec({ OPKSSH_VERSION: "v9" }, "linux", "x64")).toThrow(
-      /no trusted SHA-256/,
-    );
-    const sha = "a".repeat(64);
-    expect(
-      binarySpec({ OPKSSH_VERSION: "v9", OPKSSH_SHA256: sha }, "linux", "x64"),
-    ).toMatchObject({ version: "v9", sha256: sha });
-  });
-
-  it("reads the per-architecture checksum the Docker image passes on", () => {
-    const amd = "b".repeat(64);
-    const arm = "c".repeat(64);
-    const env = {
-      OPKSSH_VERSION: "v9",
-      OPKSSH_SHA256_AMD64: amd,
-      OPKSSH_SHA256_ARM64: arm,
-    };
-    expect(binarySpec(env, "linux", "x64").sha256).toBe(amd);
-    expect(binarySpec(env, "linux", "arm64").sha256).toBe(arm);
-  });
-});
diff --git a/plugins/opkssh/tests/backend/helpers.ts b/plugins/opkssh/tests/backend/helpers.ts
deleted file mode 100644
index 4c2396c15..000000000
--- a/plugins/opkssh/tests/backend/helpers.ts
+++ /dev/null
@@ -1,193 +0,0 @@
-import http from "node:http";
-import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import {
-  createFakeProcess,
-  createMockCtx,
-  createTestDb,
-  type FakeProcess,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import type {
-  PluginHostSummary,
-  PluginSshAuthProvider,
-} from "@termix/plugin-sdk/backend";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-export const manifest = manifestJson as unknown as PluginManifest;
-
-/** Core's 2.8 opkssh_tokens, as db/index.ts created it. */
-export const LEGACY_DDL = `
-  CREATE TABLE IF NOT EXISTS opkssh_tokens (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL,
-    host_id INTEGER NOT NULL,
-    ssh_cert TEXT NOT NULL,
-    private_key TEXT NOT NULL,
-    email TEXT,
-    sub TEXT,
-    issuer TEXT,
-    audience TEXT,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    expires_at TEXT NOT NULL,
-    last_used TEXT,
-    UNIQUE(user_id, host_id),
-    FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE,
-    FOREIGN KEY (host_id) REFERENCES ssh_data (id) ON DELETE CASCADE
-  );
-`;
-
-export const PROVIDERS_CONFIG = `providers:
-  - alias: google
-    issuer: https://accounts.google.com
-    client_id: abc
-    scopes: openid email
-`;
-
-/** A fake terminal socket that records what it was sent. */
-export function fakeSocket() {
-  const sent: Array<Record<string, unknown>> = [];
-  const closers: Array<() => void> = [];
-  return {
-    sent,
-    socket: {
-      send: (data: string) => sent.push(JSON.parse(data)),
-      on: (_event: "close", listener: () => void) => closers.push(listener),
-    },
-    close: () => closers.forEach((listener) => listener()),
-  };
-}
-
-export interface TestServer {
-  db: TestDb;
-  mock: MockPluginContext;
-  dataDir: string;
-  processes: FakeProcess[];
-  provider: () => PluginSshAuthProvider;
-  request: (
-    method: string,
-    path: string,
-    options?: { user?: string; headers?: Record<string, string> },
-    // Route bodies vary per test; asserting on them is the point.
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any; location: string | null }>;
-  close: () => Promise<void>;
-}
-
-export async function startServer(
-  options: {
-    capabilities?: string[];
-    hosts?: PluginHostSummary[];
-    settings?: Record<string, unknown>;
-    before?: (sqlite: TestDb["sqlite"]) => void;
-  } = {},
-): Promise<TestServer> {
-  const db = await createTestDb(pluginDir, { before: options.before });
-  db.sqlite
-    .prepare("INSERT OR IGNORE INTO users (id) VALUES (?)")
-    .run("user-1");
-  db.sqlite.prepare("INSERT OR IGNORE INTO ssh_data (id) VALUES (?)").run(7);
-  const dataDir = await fs.mkdtemp(path.join(os.tmpdir(), "opkssh-"));
-  const processes: FakeProcess[] = [];
-
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: options.capabilities ?? manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    hosts: options.hosts ?? [
-      {
-        id: 7,
-        userId: "user-1",
-        name: "box",
-        ip: "10.0.0.7",
-        port: 22,
-        username: "root",
-      } as PluginHostSummary,
-    ],
-    settings: options.settings,
-    baseUrl: "https://termix.test",
-    process: {
-      run: () => {
-        const child = createFakeProcess();
-        processes.push(child);
-        return child;
-      },
-      ensureBinary: async (spec) => `/opt/${spec.name}`,
-    },
-  });
-  // The plugin's data folder, somewhere the test can write.
-  (mock.ctx as unknown as { files: unknown }).files = {
-    dataDir: async () => dataDir,
-  };
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") || undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    db,
-    mock,
-    dataDir,
-    processes,
-    provider: () =>
-      mock.auth.sshAuthProviders.find(
-        (provider) => provider.type === "opkssh",
-      )!,
-    async request(method, requestPath, { user = "user-1", headers = {} } = {}) {
-      const response = await fetch(`http://127.0.0.1:${port}${requestPath}`, {
-        method,
-        redirect: "manual",
-        headers: { ...(user ? { "x-test-user": user } : {}), ...headers },
-      });
-      const text = await response.text();
-      let parsed: unknown = null;
-      try {
-        parsed = text ? JSON.parse(text) : null;
-      } catch {
-        parsed = text;
-      }
-      return {
-        status: response.status,
-        body: parsed,
-        location: response.headers.get("location"),
-      };
-    },
-    async close() {
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-      db.close();
-      await fs.rm(dataDir, { recursive: true, force: true });
-    },
-  };
-}
-
-export const env = (hostId = 7) => ({
-  client: {},
-  userId: "user-1",
-  hostId,
-  purpose: "terminal",
-  interactive: true,
-  log: () => {},
-});
-
-export const HOST = { id: 7, ip: "10.0.0.7", port: 22, username: "root" };
diff --git a/plugins/opkssh/tests/backend/legacy-urls.test.ts b/plugins/opkssh/tests/backend/legacy-urls.test.ts
deleted file mode 100644
index 0c5ece68d..000000000
--- a/plugins/opkssh/tests/backend/legacy-urls.test.ts
+++ /dev/null
@@ -1,19 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { validateManifest } from "@termix/plugin-sdk/manifest";
-import manifest from "../../manifest.json";
-
-// Old URLs something outside Termix still calls keep reaching the plugin.
-const redirects = manifest.contributes.http.legacyRedirects as unknown[];
-
-describe("legacy URLs", () => {
-  it("declares them in a manifest that validates", () => {
-    expect(validateManifest(manifest)).toEqual([]);
-  });
-
-  it("redirects /host/opkssh-callback, which OPKSSH identity providers were set up with before 2.9", () => {
-    expect(redirects).toContainEqual({
-      from: "/host/opkssh-callback",
-      to: "/callback",
-    });
-  });
-});
diff --git a/plugins/opkssh/tests/backend/opkssh.test.ts b/plugins/opkssh/tests/backend/opkssh.test.ts
deleted file mode 100644
index 1b7ff22b0..000000000
--- a/plugins/opkssh/tests/backend/opkssh.test.ts
+++ /dev/null
@@ -1,341 +0,0 @@
-import fs from "node:fs/promises";
-import path from "node:path";
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { PluginCapabilityError } from "@termix/plugin-sdk/backend";
-import { createMockCtx, createTestDb } from "@termix/plugin-sdk/testing";
-import {
-  HOST,
-  LEGACY_DDL,
-  PROVIDERS_CONFIG,
-  env,
-  fakeSocket,
-  manifest,
-  pluginDir,
-  startServer,
-  type TestServer,
-} from "./helpers.js";
-
-const certs = vi.hoisted(() => ({ applyCertificateAuth: vi.fn() }));
-vi.mock("@termix/plugin-sdk/ssh-certs", () => certs);
-
-const KEY = `-----BEGIN OPENSSH PRIVATE KEY-----
-b3BlbnNzaC1rZXktdjEAAAAA
------END OPENSSH PRIVATE KEY-----`;
-const CERT = "ssh-ed25519-cert-v01@openssh.com AAAAC3NzaC1lZDI1NTE5";
-
-let server: TestServer | null = null;
-
-beforeEach(() => {
-  certs.applyCertificateAuth.mockReset();
-});
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-});
-
-async function writeConfig(content = PROVIDERS_CONFIG) {
-  await fs.writeFile(path.join(server!.dataDir, "config.yml"), content);
-}
-
-/** Starts a sign-in and returns its request id and what the socket saw. */
-async function startSignIn(origin = "https://termix.test") {
-  const socket = fakeSocket();
-  await server!.provider().startInteraction!({
-    userId: "user-1",
-    hostId: 7,
-    host: { name: "box", ip: "10.0.0.7", username: "root" },
-    socket: socket.socket,
-    requestOrigin: origin,
-    payload: {},
-  });
-  return socket;
-}
-
-describe("adopting opkssh_tokens", () => {
-  it("keeps the 2.8 rows and the unique index", async () => {
-    const db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1')");
-        sqlite.exec("INSERT INTO ssh_data (id) VALUES (7)");
-        sqlite.exec(LEGACY_DDL);
-        sqlite
-          .prepare(
-            "INSERT INTO opkssh_tokens (user_id, host_id, ssh_cert, private_key, expires_at) VALUES (?, ?, ?, ?, ?)",
-          )
-          .run("user-1", 7, "cert", "key", "2099-01-01T00:00:00.000Z");
-      },
-    });
-    const rows = db.sqlite.prepare("SELECT * FROM p_opkssh_tokens").all();
-    expect(rows).toHaveLength(1);
-    expect(() =>
-      db.sqlite
-        .prepare(
-          "INSERT INTO p_opkssh_tokens (user_id, host_id, ssh_cert, private_key, expires_at) VALUES (?, ?, ?, ?, ?)",
-        )
-        .run("user-1", 7, "c", "k", "2099-01-01T00:00:00.000Z"),
-    ).toThrow(/UNIQUE/);
-    expect(
-      db.sqlite
-        .prepare("SELECT name FROM sqlite_master WHERE name = 'opkssh_tokens'")
-        .get(),
-    ).toBeUndefined();
-    db.close();
-  });
-
-  it("creates the table on a fresh install", async () => {
-    const db = await createTestDb(pluginDir);
-    expect(
-      db.sqlite
-        .prepare(
-          "SELECT name FROM sqlite_master WHERE name = 'p_opkssh_tokens'",
-        )
-        .get(),
-    ).toBeTruthy();
-    db.close();
-  });
-});
-
-describe("activate", () => {
-  it("registers the opkssh auth type and its routes", async () => {
-    server = await startServer();
-    expect(server.provider()).toMatchObject({
-      type: "opkssh",
-      interaction: "opkssh",
-      supportsBackground: false,
-    });
-    expect(server.mock.httpRouters).toHaveLength(1);
-    expect(server.mock.binaries[0]?.name).toMatch(/^opkssh-/);
-  });
-
-  it.each(["db:own", "auth:provide", "network:serve"])(
-    "fails closed without %s",
-    async (capability) => {
-      const mock = createMockCtx({
-        pluginId: manifest.id,
-        manifest,
-        capabilities: manifest.capabilities.filter((c) => c !== capability),
-        db: (await createTestDb(pluginDir)).database,
-      });
-      const { activate } = await import("../../src/backend/index.js");
-      await expect(activate(mock.ctx)).rejects.toThrow(PluginCapabilityError);
-    },
-  );
-});
-
-describe("the opkssh provider", () => {
-  it("asks for a sign-in without a cached certificate", async () => {
-    server = await startServer();
-    const outcome = await server.provider().prepare({}, HOST, env());
-    expect(outcome).toMatchObject({
-      status: "interaction-required",
-      interaction: "opkssh",
-      flag: "requiresOPKSSHAuth",
-    });
-  });
-
-  it("connects with the certificate a sign-in stored", async () => {
-    server = await startServer();
-    await writeConfig();
-    await startSignIn();
-    server.processes[0].emitStdout(`${KEY}\n${CERT}\n`);
-    await vi.waitFor(() =>
-      expect(
-        server!.db.sqlite.prepare("SELECT * FROM p_opkssh_tokens").all(),
-      ).toHaveLength(1),
-    );
-
-    const config: Record<string, unknown> = {};
-    const outcome = await server.provider().prepare(config, HOST, env());
-    expect(outcome).toEqual({ status: "ready" });
-    expect(certs.applyCertificateAuth).toHaveBeenCalledWith(
-      config,
-      {},
-      { privateKey: KEY, certificate: CERT },
-      "root",
-    );
-    const row = server.db.sqlite
-      .prepare("SELECT ssh_cert FROM p_opkssh_tokens")
-      .get() as { ssh_cert: string };
-    expect(row.ssh_cert).not.toContain("cert-v01");
-  });
-
-  it("treats a 2.8 row it cannot unseal as expired", async () => {
-    server = await startServer({
-      before: (sqlite) => {
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1')");
-        sqlite.exec("INSERT INTO ssh_data (id) VALUES (7)");
-        sqlite.exec(LEGACY_DDL);
-        sqlite
-          .prepare(
-            "INSERT INTO opkssh_tokens (user_id, host_id, ssh_cert, private_key, expires_at) VALUES (?, ?, ?, ?, ?)",
-          )
-          .run("user-1", 7, "v2:old", "v2:old", "2099-01-01T00:00:00.000Z");
-      },
-    });
-    const outcome = await server.provider().prepare({}, HOST, env());
-    expect(outcome.status).toBe("interaction-required");
-    expect(
-      server.db.sqlite.prepare("SELECT * FROM p_opkssh_tokens").all(),
-    ).toHaveLength(0);
-  });
-
-  it("forgets the certificate when the server refuses it", async () => {
-    server = await startServer();
-    await writeConfig();
-    await startSignIn();
-    server.processes[0].emitStdout(`${KEY}\n${CERT}\n`);
-    await vi.waitFor(() =>
-      expect(
-        server!.db.sqlite.prepare("SELECT * FROM p_opkssh_tokens").all(),
-      ).toHaveLength(1),
-    );
-    const followUp = server.provider().onAuthFailed!(HOST, env(), {
-      error: new Error("All configured authentication methods failed"),
-      retries: 0,
-      canRetry: true,
-      methodNotAvailable: false,
-    });
-    expect(followUp).toMatchObject({ status: "interaction-required" });
-    await vi.waitFor(() =>
-      expect(
-        server!.db.sqlite.prepare("SELECT * FROM p_opkssh_tokens").all(),
-      ).toHaveLength(0),
-    );
-  });
-});
-
-describe("the browser sign-in", () => {
-  it("runs opkssh with the plugin's config and the public callback", async () => {
-    server = await startServer();
-    await writeConfig();
-    const socket = await startSignIn();
-    const run = server.mock.processRuns[0];
-    expect(run.file).toMatch(/opkssh-/);
-    expect(run.args).toContain(
-      `--config-path=${path.join(server.dataDir, "config.yml")}`,
-    );
-    expect(run.args).toContain(
-      "--remote-redirect-uri=https://termix.test/plugin-api/opkssh/callback",
-    );
-
-    server.processes[0].emitStderr(
-      "Opening browser to http://localhost:4567/chooser\n",
-    );
-    const status = socket.sent.find((m) => m.type === "opkssh_status");
-    expect(status).toMatchObject({
-      stage: "chooser",
-      url: expect.stringMatching(
-        /^https:\/\/termix\.test\/plugin-api\/opkssh\/chooser\/[\w-]+$/,
-      ),
-    });
-  });
-
-  it("keeps the old callback for an install upgraded from 2.8", async () => {
-    server = await startServer({ settings: { legacyCallback: true } });
-    await writeConfig();
-    await startSignIn();
-    expect(server.mock.processRuns[0].args).toContain(
-      "--remote-redirect-uri=https://termix.test/host/opkssh-callback",
-    );
-  });
-
-  it("writes a template and reports a missing config", async () => {
-    server = await startServer();
-    const socket = await startSignIn();
-    expect(socket.sent[0]).toMatchObject({ type: "opkssh_config_error" });
-    expect(
-      await fs.readFile(path.join(server.dataDir, "config.yml"), "utf8"),
-    ).toContain("OPKSSH Configuration");
-    expect(server.mock.processRuns).toHaveLength(0);
-  });
-
-  it("refuses redirect_uris that are not localhost", async () => {
-    server = await startServer();
-    await writeConfig(
-      `${PROVIDERS_CONFIG}    redirect_uris:\n      - https://termix.example/host/opkssh-callback\n`,
-    );
-    const socket = await startSignIn();
-    expect(socket.sent[0]).toMatchObject({ type: "opkssh_config_error" });
-    expect(String(socket.sent[0].error)).toMatch(/must only contain localhost/);
-  });
-
-  it("kills the process when the terminal goes away", async () => {
-    server = await startServer();
-    await writeConfig();
-    const socket = await startSignIn();
-    socket.close();
-    await vi.waitFor(() =>
-      expect(server!.processes[0].killed).toContain("SIGTERM"),
-    );
-  });
-});
-
-describe("routes", () => {
-  it("reports and forgets a cached certificate", async () => {
-    server = await startServer();
-    expect((await server.request("GET", "/token/7")).body).toEqual({
-      exists: false,
-    });
-    await writeConfig();
-    await startSignIn();
-    server.processes[0].emitStdout(`${KEY}\n${CERT}\n`);
-    await vi.waitFor(async () =>
-      expect((await server!.request("GET", "/token/7")).body.exists).toBe(true),
-    );
-    expect((await server.request("DELETE", "/token/7")).status).toBe(200);
-    expect((await server.request("GET", "/token/7")).body.exists).toBe(false);
-  });
-
-  it("refuses a host the user cannot reach, and anonymous callers", async () => {
-    server = await startServer();
-    expect((await server.request("GET", "/token/99")).status).toBe(404);
-    expect((await server.request("GET", "/token/7", { user: "" })).status).toBe(
-      401,
-    );
-  });
-
-  it("forwards the identity provider's callback to the sign-in it belongs to", async () => {
-    server = await startServer();
-    await writeConfig();
-    const socket = await startSignIn();
-    server.processes[0].emitStderr(
-      "Opening browser to http://localhost:4567/chooser\n",
-    );
-    const requestId = String(
-      socket.sent.find((m) => m.type === "opkssh_status")?.requestId,
-    );
-    const cookie = { cookie: `opkssh_request_id=${requestId}` };
-
-    // OPKSSH's callback listener is not up yet.
-    expect(
-      (
-        await server.request("GET", "/callback?code=x", {
-          user: "",
-          headers: cookie,
-        })
-      ).status,
-    ).toBe(503);
-
-    server.processes[0].emitStderr("listening on http://127.0.0.1:5555/\n");
-    const forwarded = await server.request("GET", "/callback?code=x&state=s", {
-      user: "",
-      headers: cookie,
-    });
-    expect(forwarded.status).toBe(302);
-    expect(forwarded.location).toBe(
-      `/plugin-api/opkssh/callback/${requestId}?code=x&state=s`,
-    );
-
-    expect(
-      (await server.request("GET", "/callback?code=x", { user: "" })).status,
-    ).toBe(401);
-  });
-
-  it("answers an unknown sign-in with a not-found page", async () => {
-    server = await startServer();
-    const response = await server.request("GET", "/chooser/nope", { user: "" });
-    expect(response.status).toBe(404);
-    expect(String(response.body)).toContain("Session Not Found");
-  });
-});
diff --git a/plugins/opkssh/tests/frontend/activate.test.tsx b/plugins/opkssh/tests/frontend/activate.test.tsx
deleted file mode 100644
index e9760b226..000000000
--- a/plugins/opkssh/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,128 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { act, fireEvent, render, screen } from "@testing-library/react";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import { OpksshOverlay } from "../../src/frontend/OpksshOverlay";
-import { redirectUri } from "../../src/frontend/RedirectUriSetting";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-vi.mock("@termix/plugin-sdk/frontend", async (importOriginal) => ({
-  ...(await importOriginal<typeof import("@termix/plugin-sdk/frontend")>()),
-  useTranslation: () => ({ t: (key: string) => key }),
-}));
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe("opkssh activate", () => {
-  it("registers the auth editor, the terminal overlay and the settings field", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.settingsComponents()).toEqual(["redirectUri"]);
-    expect(rendered.registered.slot("terminal.overlay")).toEqual([
-      "opkssh.signIn",
-    ]);
-    await rendered.deactivate();
-    expect(rendered.registered.settingsComponents()).toEqual([]);
-    expect(rendered.registered.slot("terminal.overlay")).toEqual([]);
-    rendered = null;
-  });
-});
-
-describe("redirectUri", () => {
-  it("names the plugin callback, or the 2.8 one", () => {
-    expect(redirectUri(false, "https://t.example/app/")).toBe(
-      "https://t.example/app/plugin-api/opkssh/callback",
-    );
-    expect(redirectUri(true, "https://t.example/")).toBe(
-      "https://t.example/host/opkssh-callback",
-    );
-  });
-});
-
-describe("OpksshOverlay", () => {
-  function setup() {
-    let listener: (message: {
-      type: string;
-      [key: string]: unknown;
-    }) => void = () => {};
-    const props = {
-      host: { id: 7 },
-      subscribe: vi.fn((next: typeof listener) => {
-        listener = next;
-        return () => {};
-      }),
-      holdConnectTimeout: vi.fn(),
-      fail: vi.fn(),
-      disconnect: vi.fn(),
-      send: vi.fn(),
-      connectPayload: vi.fn(() => ({ hostId: 7, cols: 80, rows: 24 })),
-    };
-    render(<OpksshOverlay {...props} />);
-    const emit = (message: { type: string; [key: string]: unknown }) =>
-      act(() => listener(message));
-    return { props, emit };
-  }
-
-  it("starts the sign-in once, then reports a second request as a failure", () => {
-    const { props, emit } = setup();
-    emit({ type: "opkssh_auth_required", hostId: 7 });
-    expect(props.send).toHaveBeenCalledWith("opkssh_start_auth", { hostId: 7 });
-    expect(props.holdConnectTimeout).toHaveBeenCalledWith(true);
-
-    emit({ type: "opkssh_auth_required", hostId: 7 });
-    expect(props.fail).toHaveBeenCalledWith("errors.authFailed");
-  });
-
-  it("shows the chooser, cancels it, and reconnects once signed in", () => {
-    const { props, emit } = setup();
-    emit({ type: "opkssh_auth_required", hostId: 7 });
-    emit({
-      type: "opkssh_status",
-      stage: "chooser",
-      requestId: "req-1",
-      url: "https://termix.test/plugin-api/opkssh/chooser/req-1",
-      providers: [{ alias: "google", issuer: "accounts.google.com" }],
-    });
-    expect(screen.getByText("dialog.title")).toBeTruthy();
-
-    emit({ type: "opkssh_completed", requestId: "req-1" });
-    expect(props.send).toHaveBeenCalledWith("opkssh_auth_completed", {
-      hostId: 7,
-      cols: 80,
-      rows: 24,
-    });
-    expect(screen.queryByText("dialog.title")).toBeNull();
-
-    emit({
-      type: "opkssh_status",
-      stage: "chooser",
-      requestId: "req-2",
-      url: "https://termix.test/plugin-api/opkssh/chooser/req-2",
-    });
-    fireEvent.click(screen.getByText("common.cancel"));
-    expect(props.send).toHaveBeenCalledWith("opkssh_cancel", {
-      requestId: "req-2",
-    });
-  });
-
-  it("shows a config error", () => {
-    const { emit } = setup();
-    emit({
-      type: "opkssh_config_error",
-      requestId: "",
-      error: "OPKSSH configuration not found.",
-    });
-    expect(screen.getByText("OPKSSH configuration not found.")).toBeTruthy();
-  });
-});
diff --git a/plugins/opkssh/tsconfig.json b/plugins/opkssh/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/opkssh/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/opkssh/vitest.config.ts b/plugins/opkssh/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/opkssh/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/package.json b/plugins/package.json
deleted file mode 100644
index 3dbc1ca59..000000000
--- a/plugins/package.json
+++ /dev/null
@@ -1,3 +0,0 @@
-{
-  "type": "module"
-}
diff --git a/plugins/proxmox/CHANGELOG.md b/plugins/proxmox/CHANGELOG.md
deleted file mode 100644
index 95d41f13e..000000000
--- a/plugins/proxmox/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Finds the VMs and containers on a Proxmox VE node through an SSH host and imports them as Termix hosts. Can keep them in sync on a schedule and shows node stats.
diff --git a/plugins/proxmox/README.md b/plugins/proxmox/README.md
deleted file mode 100644
index 4df68d975..000000000
--- a/plugins/proxmox/README.md
+++ /dev/null
@@ -1,27 +0,0 @@
-# Proxmox
-
-Find Proxmox VE guests through an SSH host, import them as hosts and keep them in sync.
-
-## Features
-
-- Find the VMs and containers on a Proxmox VE node through an SSH host you already have.
-- Import them as Termix hosts with the login type you choose.
-- Keep imported hosts in sync on a schedule.
-- Show node and guest stats in the Proxmox tab.
-
-## Settings
-
-### Host
-
-- Proxmox: mark this host as a Proxmox node and set how guests are imported.
-- Default Auth Type: the login type given to imported guests.
-- Auto sync guests and Sync interval (minutes): check the node for changes on a schedule. The minimum is 5 minutes.
-- Proxmox stats: show the stats tab for this host.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/proxmox/locales/en.json b/plugins/proxmox/locales/en.json
deleted file mode 100644
index b4f5d48be..000000000
--- a/plugins/proxmox/locales/en.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Proxmox Stats"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Proxmox Stats",
-    "cpuUsage": "CPU Usage",
-    "memoryUsage": "Memory Usage",
-    "diskUsage": "Disk Usage",
-    "networkInterfaces": "Network Interfaces",
-    "uptime": "Uptime",
-    "systemInfo": "System Information",
-    "guestsSummary": "Guests",
-    "storagePools": "Storage Pools",
-    "clusterHealth": "Cluster Health",
-    "cpuCores_one": "{{count}} Core",
-    "cpuCores_other": "{{count}} Cores",
-    "used": "Used",
-    "total": "Total",
-    "hostname": "Hostname",
-    "kernel": "Kernel",
-    "pveVersion": "PVE Version",
-    "name": "Name",
-    "status": "Status",
-    "type": "Type",
-    "cpu": "CPU",
-    "mem": "Mem",
-    "disk": "Disk",
-    "running": "Running",
-    "stopped": "Stopped",
-    "guestCounts": "{{running}}/{{total}} running",
-    "inactive": "Inactive",
-    "notClustered": "Standalone node (not part of a cluster)",
-    "quorate": "Quorate",
-    "notQuorate": "Not quorate",
-    "nodeOnline": "Online",
-    "nodeOffline": "Offline",
-    "noHostSelected": "No host selected",
-    "pveshNotFound": "pvesh not found - is this a Proxmox node?",
-    "nodeDetectionFailed": "Unable to determine a valid Proxmox node name",
-    "connecting": "Connecting...",
-    "connectionFailed": "Failed to connect to Proxmox node",
-    "refresh": "Refresh",
-    "searchGuests": "Search guests...",
-    "filterAll": "All",
-    "filterVm": "VM",
-    "filterLxc": "LXC",
-    "noGuests": "No VMs or LXC containers found on this node.",
-    "noGuestsMatch": "No guests match the current filters."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Enable Proxmox Stats",
-    "enableProxmoxStatsDesc": "Show a Proxmox Stats tab for this host with live node, guest, storage, and cluster stats collected over SSH.",
-    "proxmoxStatsPollInterval": "Poll interval (seconds)",
-    "proxmoxStatsPollIntervalDesc": "Minimum 15 seconds. How often to refresh Proxmox node stats.",
-    "proxmoxStatsNodeOverride": "Node name override",
-    "proxmoxStatsNodeOverrideDesc": "Override auto-detection of the Proxmox node name (detected via hostname by default).",
-    "proxmoxStatsNodeOverridePlaceholder": "Auto-detected from hostname",
-    "authTypeStepca": "Step CA",
-    "proxmoxIntegration": "Proxmox Integration",
-    "enableProxmox": "Enable Proxmox",
-    "enableProxmoxDesc": "Mark this host as a Proxmox node. Enables guest discovery and import directly from this host.",
-    "proxmoxDefaultAuthType": "Default Auth Type",
-    "proxmoxDefaultAuthTypeDesc": "Authentication method applied to imported guest hosts. Choose the auth type that matches how you connect to your guests.",
-    "authTypePassword": "Password",
-    "authTypeKey": "SSH Key",
-    "authTypeCredential": "Credential",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "None",
-    "proxmoxDefaultCredential": "Default Credential",
-    "proxmoxDefaultCredentialDesc": "Credential used for imported guest hosts when auth type is set to Credential.",
-    "proxmoxWindowsDetection": "Windows / RDP detection",
-    "proxmoxWindowsDetectionDesc": "Comma-separated name patterns that trigger RDP instead of SSH (case-insensitive)",
-    "proxmoxDockerDetection": "Docker detection",
-    "proxmoxDockerDetectionDesc": "Comma-separated name patterns that enable Docker for matching guests",
-    "proxmoxPreferredRanges": "Preferred IP ranges",
-    "proxmoxPreferredRangesDesc": "Comma-separated prefixes in priority order for IP selection when a guest has multiple interfaces",
-    "proxmoxAutoSync": "Auto sync guests",
-    "proxmoxAutoSyncDesc": "Periodically discover this Proxmox node and create or update imported guest hosts while your session is unlocked.",
-    "proxmoxSyncInterval": "Sync interval (minutes)",
-    "proxmoxSyncIntervalDesc": "Minimum 5 minutes. The scheduler skips locked user sessions.",
-    "proxmoxMarkMissing": "Mark missing guests",
-    "proxmoxMarkMissingDesc": "Add a proxmox-missing tag when a previously imported guest disappears instead of deleting it.",
-    "proxmoxLastSync": "Last sync",
-    "proxmoxLastSyncNever": "Not synced yet",
-    "proxmoxLastSyncNoResult": "No result details",
-    "proxmoxLastSyncSummary": "{{created}} created, {{updated}} updated, {{markedMissing}} missing, {{skipped}} skipped",
-    "proxmoxLastSyncStatus": {
-      "error": "Failed",
-      "pending": "Pending",
-      "success": "Success"
-    },
-    "proxmoxDiscoverAction": "Discover & import Proxmox guests",
-    "proxmoxImportTitle": "Import from Proxmox",
-    "proxmoxSelectHost": "Select a Proxmox host…",
-    "proxmoxDiscover": "Discover",
-    "proxmoxDiscovering": "Discovering…",
-    "proxmoxDiscoverGuests": "Discover guests",
-    "proxmoxSelectAll": "Select all",
-    "proxmoxDeselectAll": "Deselect all",
-    "proxmoxNoGuests": "No guests found on this Proxmox node.",
-    "proxmoxResultImported": "{{count}} imported",
-    "proxmoxResultUpdated": "{{count}} updated",
-    "proxmoxResultFailed": "{{count}} failed",
-    "proxmoxImportComplete": "Proxmox import complete: {{summary}}",
-    "proxmoxDiscoveryFailed": "Discovery failed",
-    "proxmoxImportFailed": "Import failed",
-    "docsLink": "View docs",
-    "hostNotFound": "Host not found",
-    "loadingHost": "Loading host...",
-    "none": "None",
-    "proxmoxGuestsSelected_one": "{{count}} guest, {{selected}} selected",
-    "proxmoxGuestsSelected_other": "{{count}} guests, {{selected}} selected",
-    "proxmoxImportButton_one": "Import {{count}} host",
-    "proxmoxImportButton_other": "Import {{count}} hosts"
-  },
-  "terminal": {
-    "connected": "Connected"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/af_ZA.json b/plugins/proxmox/locales/translated/af_ZA.json
deleted file mode 100644
index 07975deba..000000000
--- a/plugins/proxmox/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Proxmox-statistieke"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Proxmox-statistieke",
-    "cpuUsage": "SVE-gebruik",
-    "memoryUsage": "Geheuegebruik",
-    "diskUsage": "Skyfgebruik",
-    "networkInterfaces": "Netwerkkoppelvlakke",
-    "uptime": "Optyd",
-    "systemInfo": "Stelselinligting",
-    "guestsSummary": "Gaste",
-    "storagePools": "Bergingspoele",
-    "clusterHealth": "Klustergesondheid",
-    "cpuCores_one": "{{count}} Kern",
-    "cpuCores_other": "{{count}} Kerne",
-    "used": "Gebruik",
-    "total": "Totaal",
-    "hostname": "Gasheernaam",
-    "kernel": "Kern",
-    "pveVersion": "PVE-weergawe",
-    "name": "Naam",
-    "status": "Status",
-    "type": "Tipe",
-    "cpu": "SVE",
-    "mem": "Mem",
-    "disk": "Skyf",
-    "running": "Hardloop",
-    "stopped": "Gestop",
-    "guestCounts": "{{running}}/{{total}} hardloop",
-    "inactive": "Onaktief",
-    "notClustered": "Losstaande nodus (nie deel van 'n groep nie)",
-    "quorate": "Kworate",
-    "notQuorate": "Nie kworum nie",
-    "nodeOnline": "Aanlyn",
-    "nodeOffline": "Vanlyn",
-    "noHostSelected": "Geen gasheer gekies nie",
-    "pveshNotFound": "pvesh nie gevind nie - is dit 'n Proxmox-node?",
-    "nodeDetectionFailed": "Kan nie 'n geldige Proxmox-nodusnaam bepaal nie",
-    "connecting": "Verbind...",
-    "connectionFailed": "Kon nie aan die Proxmox-nodus koppel nie",
-    "refresh": "Verfris",
-    "searchGuests": "Soek gaste...",
-    "filterAll": "Alles",
-    "filterVm": "VM",
-    "filterLxc": "LXC",
-    "noGuests": "Geen VM'e of LXC-houers is op hierdie node gevind nie.",
-    "noGuestsMatch": "Geen gaste stem ooreen met die huidige filters nie."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Aktiveer Proxmox-statistieke",
-    "enableProxmoxStatsDesc": "Wys 'n Proxmox Statistiek-oortjie vir hierdie gasheer met lewendige nodus-, gas-, bergings- en groepstatistieke wat oor SSH versamel is.",
-    "proxmoxStatsPollInterval": "Stembusinterval (sekondes)",
-    "proxmoxStatsPollIntervalDesc": "Minimum 15 sekondes. Hoe gereeld om Proxmox-nodusstatistieke te verfris.",
-    "proxmoxStatsNodeOverride": "Nodenaam-oorskrywing",
-    "proxmoxStatsNodeOverrideDesc": "Ignoreer outomatiese opsporing van die Proxmox-nodusnaam (standaard opgespoor via gasheernaam).",
-    "proxmoxStatsNodeOverridePlaceholder": "Outomaties opgespoor vanaf gasheernaam",
-    "authTypeStepca": "Stap CA",
-    "proxmoxIntegration": "Proxmox-integrasie",
-    "enableProxmox": "Aktiveer Proxmox",
-    "enableProxmoxDesc": "Merk hierdie gasheer as 'n Proxmox-nodus. Aktiveer gasontdekking en invoer direk vanaf hierdie gasheer.",
-    "proxmoxDefaultAuthType": "Standaardmagtigingtipe",
-    "proxmoxDefaultAuthTypeDesc": "Verifikasiemetode toegepas op ingevoerde gashere. Kies die verifikasietipe wat ooreenstem met hoe jy met jou gaste skakel.",
-    "authTypePassword": "Wagwoord",
-    "authTypeKey": "SSH-sleutel",
-    "authTypeCredential": "Geloofsbrief",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "Geen",
-    "proxmoxDefaultCredential": "Standaard geloofsbriewe",
-    "proxmoxDefaultCredentialDesc": "Geloofsbrief wat gebruik word vir ingevoerde gashere wanneer magtigingstipe op Geloofsbrief gestel is.",
-    "proxmoxWindowsDetection": "Windows / RDP-opsporing",
-    "proxmoxWindowsDetectionDesc": "Komma-geskeide naampatrone wat RDP in plaas van SSH aktiveer (ongesensitief vir hoofletters)",
-    "proxmoxDockerDetection": "Docker-opsporing",
-    "proxmoxDockerDetectionDesc": "Komma-geskeide naampatrone wat Docker in staat stel om gaste te pas",
-    "proxmoxPreferredRanges": "Voorkeur-IP-reekse",
-    "proxmoxPreferredRangesDesc": "Komma-geskeide voorvoegsels in prioriteitsvolgorde vir IP-keuse wanneer 'n gas verskeie koppelvlakke het",
-    "proxmoxAutoSync": "Outomatiese sinkronisering van gaste",
-    "proxmoxAutoSyncDesc": "Ontdek hierdie Proxmox-nodus gereeld en skep of werk ingevoerde gashere op terwyl jou sessie ontsluit is.",
-    "proxmoxSyncInterval": "Sinkronisasie-interval (minute)",
-    "proxmoxSyncIntervalDesc": "Minimum 5 minute. Die skeduleerder slaan geslote gebruikerssessies oor.",
-    "proxmoxMarkMissing": "Merk ontbrekende gaste",
-    "proxmoxMarkMissingDesc": "Voeg 'n proxmox-missing-etiket by wanneer 'n voorheen ingevoerde gas verdwyn in plaas daarvan om dit te verwyder.",
-    "proxmoxLastSync": "Laaste sinkronisasie",
-    "proxmoxLastSyncNever": "Nog nie gesinkroniseer nie",
-    "proxmoxLastSyncNoResult": "Geen resultaatbesonderhede nie",
-    "proxmoxLastSyncSummary": "{{created}} geskep, {{updated}} opgedateer, {{markedMissing}} ontbreek, {{skipped}} oorgeslaan",
-    "proxmoxLastSyncStatus": {
-      "error": "Misluk",
-      "pending": "Hangende",
-      "success": "Sukses"
-    },
-    "proxmoxDiscoverAction": "Ontdek en invoer Proxmox-gaste",
-    "proxmoxImportTitle": "Invoer vanaf Proxmox",
-    "proxmoxSelectHost": "Kies 'n Proxmox-gasheer…",
-    "proxmoxDiscover": "Ontdek",
-    "proxmoxDiscovering": "Ontdek…",
-    "proxmoxDiscoverGuests": "Ontdek gaste",
-    "proxmoxSelectAll": "Kies alles",
-    "proxmoxDeselectAll": "Deselekteer alles",
-    "proxmoxNoGuests": "Geen gaste gevind op hierdie Proxmox-nodus nie.",
-    "proxmoxResultImported": "{{count}} ingevoer",
-    "proxmoxResultUpdated": "{{count}} opgedateer",
-    "proxmoxResultFailed": "{{count}} het misluk",
-    "proxmoxImportComplete": "Proxmox-invoer voltooi: {{summary}}",
-    "proxmoxDiscoveryFailed": "Ontdekking het misluk",
-    "proxmoxImportFailed": "Invoer het misluk",
-    "docsLink": "Bekyk dokumente",
-    "hostNotFound": "Gasheer nie gevind nie",
-    "loadingHost": "Laai gasheer...",
-    "none": "Geen",
-    "proxmoxGuestsSelected_one": "{{count}} gas, {{selected}} gekies",
-    "proxmoxGuestsSelected_other": "{{count}} gaste, {{selected}} gekies",
-    "proxmoxImportButton_one": "Voer {{count}} gasheer in",
-    "proxmoxImportButton_other": "Voer {{count}} gashere in"
-  },
-  "terminal": {
-    "connected": "Verbonde"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/ar_SA.json b/plugins/proxmox/locales/translated/ar_SA.json
deleted file mode 100644
index 4f1dfb878..000000000
--- a/plugins/proxmox/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "إحصائيات Proxmox"
-  },
-  "proxmoxStats": {
-    "tabTitle": "إحصائيات Proxmox",
-    "cpuUsage": "استخدام CPU",
-    "memoryUsage": "استخدام الذاكرة",
-    "diskUsage": "استخدام القرص",
-    "networkInterfaces": "واجهات الشبكة",
-    "uptime": "مدة التشغيل",
-    "systemInfo": "معلومات النظام",
-    "guestsSummary": "الضيوف",
-    "storagePools": "أحواض التخزين",
-    "clusterHealth": "الصحة العنقودية",
-    "cpuCores_one": "{{count}} نواة",
-    "cpuCores_other": "{{count}} نوى",
-    "used": "مستخدم",
-    "total": "المجموع",
-    "hostname": "اسم المضيف",
-    "kernel": "النواة",
-    "pveVersion": "إصدار لاعب ضد البيئة",
-    "name": "الاسم",
-    "status": "الحالة",
-    "type": "النوع",
-    "cpu": "المعالج",
-    "mem": "ميم",
-    "disk": "القرص",
-    "running": "قيد التشغيل",
-    "stopped": "متوقف",
-    "guestCounts": "{{running}}/{{total}} قيد التشغيل",
-    "inactive": "غير نشط",
-    "notClustered": "عقدة مستقلة (ليست جزءًا من مجموعة)",
-    "quorate": "اقتبس",
-    "notQuorate": "غير مكتمل النصاب",
-    "nodeOnline": "متصل",
-    "nodeOffline": "غير متصل",
-    "noHostSelected": "لم يتم تحديد أي جهاز مضيف",
-    "pveshNotFound": "لم يتم العثور على pvesh - هل هذه عقدة Proxmox؟",
-    "nodeDetectionFailed": "تعذر تحديد اسم عقدة Proxmox صالح",
-    "connecting": "جارٍ الاتصال...",
-    "connectionFailed": "فشل الاتصال بعقدة Proxmox",
-    "refresh": "تحديث",
-    "searchGuests": "ابحث عن الضيوف...",
-    "filterAll": "الكل",
-    "filterVm": "آلة افتراضية",
-    "filterLxc": "LXC",
-    "noGuests": "لم يتم العثور على أي أجهزة افتراضية أو حاويات LXC على هذه العقدة.",
-    "noGuestsMatch": "لا يوجد ضيوف يطابقون المعايير الحالية."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "تفعيل إحصائيات Proxmox",
-    "enableProxmoxStatsDesc": "اعرض علامة تبويب إحصائيات Proxmox لهذا المضيف مع إحصائيات العقدة والضيف والتخزين والمجموعة التي تم جمعها عبر SSH.",
-    "proxmoxStatsPollInterval": "فترة الاستطلاع (بالثواني)",
-    "proxmoxStatsPollIntervalDesc": "الحد الأدنى 15 ثانية. عدد مرات تحديث إحصائيات عقدة Proxmox.",
-    "proxmoxStatsNodeOverride": "تجاوز اسم العقدة",
-    "proxmoxStatsNodeOverrideDesc": "تجاوز الكشف التلقائي عن اسم عقدة Proxmox (يتم الكشف عنه عبر اسم المضيف افتراضيًا).",
-    "proxmoxStatsNodeOverridePlaceholder": "تم اكتشافه تلقائيًا من اسم المضيف",
-    "authTypeStepca": "الخطوة ج",
-    "proxmoxIntegration": "تكامل Proxmox",
-    "enableProxmox": "تمكين Proxmox",
-    "enableProxmoxDesc": "تعليم هذا المضيف كعقدة Proxmox. يُمكّن اكتشاف الضيوف واستيرادهم مباشرة من هذا المضيف.",
-    "proxmoxDefaultAuthType": "نوع المصادقة الافتراضي",
-    "proxmoxDefaultAuthTypeDesc": "طريقة المصادقة المطبقة على المضيفين الضيوف المستوردين. اختر نوع المصادقة الذي يتوافق مع طريقة اتصالك بالضيوف.",
-    "authTypePassword": "كلمة مرور",
-    "authTypeKey": "مفتاح SSH",
-    "authTypeCredential": "بيانات اعتماد",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "بلا",
-    "proxmoxDefaultCredential": "بيانات الاعتماد الافتراضية",
-    "proxmoxDefaultCredentialDesc": "بيانات الاعتماد المُستخدمة للأجهزة الضيفة المستوردة عند ضبط نوع المصادقة على 'بيانات الاعتماد'.",
-    "proxmoxWindowsDetection": "اكتشاف Windows / RDP",
-    "proxmoxWindowsDetectionDesc": "أنماط الأسماء مفصولة بفواصل تُشغّل RDP بدلاً من SSH (غير حسّاسة لحالة الأحرف)",
-    "proxmoxDockerDetection": "اكتشاف Docker",
-    "proxmoxDockerDetectionDesc": "أنماط الأسماء مفصولة بفواصل تُمكّن Docker للأجهزة الضيفة المطابقة",
-    "proxmoxPreferredRanges": "نطاقات IP المُفضّلة",
-    "proxmoxPreferredRangesDesc": "بادئات مفصولة بفواصل بترتيب الأولوية لاختيار IP عندما يكون للجهاز الضيف واجهات متعددة",
-    "proxmoxAutoSync": "مزامنة تلقائية للأجهزة الضيفة",
-    "proxmoxAutoSyncDesc": "اكتشاف عقدة Proxmox هذه بشكل دوري وإنشاء أو تحديث الأجهزة الضيفة المستوردة أثناء فتح جلستك.",
-    "proxmoxSyncInterval": "فترة المزامنة (بالدقائق)",
-    "proxmoxSyncIntervalDesc": "الحد الأدنى 5 دقائق. يتخطّى المجدول جلسات المستخدم المقفلة.",
-    "proxmoxMarkMissing": "تعليم الأجهزة الضيفة المفقودة",
-    "proxmoxMarkMissingDesc": "أضف وسم proxmox-missing عندما يختفي جهاز ضيف تم استيراده مسبقاً بدلاً من حذفه.",
-    "proxmoxLastSync": "آخر مزامنة",
-    "proxmoxLastSyncNever": "لم تتم المزامنة بعد",
-    "proxmoxLastSyncNoResult": "لا توجد تفاصيل للنتائج",
-    "proxmoxLastSyncSummary": "{{created}} مُنشأ، {{updated}} مُحدَّث، {{markedMissing}} مفقود، {{skipped}} مُتخطّى",
-    "proxmoxLastSyncStatus": {
-      "error": "فشل",
-      "pending": "قيد الانتظار",
-      "success": "نجاح"
-    },
-    "proxmoxDiscoverAction": "اكتشاف واستيراد أجهزة Proxmox الضيفة",
-    "proxmoxImportTitle": "استيراد من Proxmox",
-    "proxmoxSelectHost": "اختر مضيف Proxmox…",
-    "proxmoxDiscover": "اكتشف",
-    "proxmoxDiscovering": "جارٍ الاكتشاف…",
-    "proxmoxDiscoverGuests": "اكتشف الأجهزة الضيفة",
-    "proxmoxSelectAll": "تحديد الكل",
-    "proxmoxDeselectAll": "إلغاء تحديد الكل",
-    "proxmoxNoGuests": "لم يتم العثور على أجهزة ضيفة على عقدة Proxmox هذه.",
-    "proxmoxResultImported": "{{count}} تم استيرادها",
-    "proxmoxResultUpdated": "{{count}} تم تحديثها",
-    "proxmoxResultFailed": "{{count}} فشلت",
-    "proxmoxImportComplete": "اكتمل استيراد Proxmox: {{summary}}",
-    "proxmoxDiscoveryFailed": "فشل الاكتشاف",
-    "proxmoxImportFailed": "فشل الاستيراد",
-    "docsLink": "عرض المستندات",
-    "hostNotFound": "المضيف غير موجود",
-    "loadingHost": "جارٍ تحميل المضيف...",
-    "none": "لا يوجد",
-    "proxmoxGuestsSelected_one": "{{count}} ضيف، {{selected}} مُختار",
-    "proxmoxGuestsSelected_other": "{{count}} ضيوف، {{selected}} مختارون",
-    "proxmoxImportButton_one": "استيراد {{count}} مضيف",
-    "proxmoxImportButton_other": "استيراد {{count}} مضيفين"
-  },
-  "terminal": {
-    "connected": "متصل"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/bg_BG.json b/plugins/proxmox/locales/translated/bg_BG.json
deleted file mode 100644
index 103e76249..000000000
--- a/plugins/proxmox/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Статистика на Proxmox"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Статистика на Proxmox",
-    "cpuUsage": "Използване на процесора",
-    "memoryUsage": "Използване на паметта",
-    "diskUsage": "Използване на диска",
-    "networkInterfaces": "Мрежови интерфейси",
-    "uptime": "Време на работа",
-    "systemInfo": "Системна информация",
-    "guestsSummary": "Гости",
-    "storagePools": "Пулове за съхранение",
-    "clusterHealth": "Здраве на клъстера",
-    "cpuCores_one": "{{count}} Ядро",
-    "cpuCores_other": "{{count}} Ядра",
-    "used": "Използван",
-    "total": "Общо",
-    "hostname": "Име на хост",
-    "kernel": "Ядро",
-    "pveVersion": "PVE версия",
-    "name": "Име",
-    "status": "Статус",
-    "type": "Тип",
-    "cpu": "Процесор",
-    "mem": "Мем",
-    "disk": "Диск",
-    "running": "Бягане",
-    "stopped": "Спряно",
-    "guestCounts": "{{running}}/{{total}} бягане",
-    "inactive": "Неактивен",
-    "notClustered": "Самостоятелен възел (не е част от клъстер)",
-    "quorate": "Кворат",
-    "notQuorate": "Няма кворум",
-    "nodeOnline": "Онлайн",
-    "nodeOffline": "Офлайн",
-    "noHostSelected": "Няма избран хост",
-    "pveshNotFound": "pvesh не е намерен - това Proxmox възел ли е?",
-    "nodeDetectionFailed": "Не може да се определи валидно име на възел Proxmox",
-    "connecting": "Свързване...",
-    "connectionFailed": "Неуспешно свързване с възел Proxmox",
-    "refresh": "Обновяване",
-    "searchGuests": "Търсене на гости...",
-    "filterAll": "Всички",
-    "filterVm": "ВМ",
-    "filterLxc": "LXC",
-    "noGuests": "На този възел не са намерени виртуални машини или LXC контейнери.",
-    "noGuestsMatch": "Няма гости, които да отговарят на текущите филтри."
-  },
-  "hosts": {
-    "tabProxmox": "Проксмокс",
-    "enableProxmoxStats": "Активиране на Proxmox Stats",
-    "enableProxmoxStatsDesc": "Покажете раздела „Статистика на Proxmox“ за този хост с актуални статистически данни за възлите, госта, хранилището и клъстера, събрани през SSH.",
-    "proxmoxStatsPollInterval": "Интервал на анкетата (секунди)",
-    "proxmoxStatsPollIntervalDesc": "Минимум 15 секунди. Колко често да се обновяват статистическите данни за възлите на Proxmox.",
-    "proxmoxStatsNodeOverride": "Замяна на името на възела",
-    "proxmoxStatsNodeOverrideDesc": "Игнориране на автоматичното откриване на името на възела Proxmox (по подразбиране се открива чрез името на хоста).",
-    "proxmoxStatsNodeOverridePlaceholder": "Автоматично разпознато от името на хоста",
-    "authTypeStepca": "Стъпка CA",
-    "proxmoxIntegration": "Интеграция с Proxmox",
-    "enableProxmox": "Активиране на Proxmox",
-    "enableProxmoxDesc": "Маркирайте този хост като Proxmox възел. Активирайте откриването на гост и импортирането директно от този хост.",
-    "proxmoxDefaultAuthType": "Тип удостоверяване по подразбиране",
-    "proxmoxDefaultAuthTypeDesc": "Методът за удостоверяване е приложен към импортираните гост-хостове. Изберете типа удостоверяване, който съответства на начина, по който се свързвате с гостите си.",
-    "authTypePassword": "Парола",
-    "authTypeKey": "SSH ключ",
-    "authTypeCredential": "Пълномощия",
-    "authTypeOpkssh": "ОПКСШ",
-    "authTypeNone": "Няма",
-    "proxmoxDefaultCredential": "Подразбиращи се идентификационни данни",
-    "proxmoxDefaultCredentialDesc": "Идентификационни данни, използвани за импортирани гост хостове, когато типът удостоверяване е зададен на Идентификационни данни.",
-    "proxmoxWindowsDetection": "Откриване на Windows / RDP",
-    "proxmoxWindowsDetectionDesc": "Модели на имена, разделени със запетаи, които задействат RDP вместо SSH (без значение от главни и малки букви)",
-    "proxmoxDockerDetection": "Откриване на Докер",
-    "proxmoxDockerDetectionDesc": "Модели за имена, разделени със запетаи, които позволяват на Docker да съпоставя гости",
-    "proxmoxPreferredRanges": "Предпочитани IP диапазони",
-    "proxmoxPreferredRangesDesc": "Префикси, разделени със запетаи, подредени по приоритет за избор на IP адрес, когато гост има множество интерфейси",
-    "proxmoxAutoSync": "Автоматично синхронизиране на гости",
-    "proxmoxAutoSyncDesc": "Периодично откривайте този Proxmox възел и създавайте или актуализирайте импортирани гост хостове, докато сесията ви е отключена.",
-    "proxmoxSyncInterval": "Интервал на синхронизиране (минути)",
-    "proxmoxSyncIntervalDesc": "Минимум 5 минути. Планировчикът пропуска заключените потребителски сесии.",
-    "proxmoxMarkMissing": "Маркиране на липсващи гости",
-    "proxmoxMarkMissingDesc": "Добавете етикет proxmox-missing, когато предварително импортиран гост изчезне, вместо да го изтриете.",
-    "proxmoxLastSync": "Последна синхронизация",
-    "proxmoxLastSyncNever": "Все още не е синхронизирано",
-    "proxmoxLastSyncNoResult": "Няма подробности за резултата",
-    "proxmoxLastSyncSummary": "{{created}} създадено, {{updated}} актуализирано, {{markedMissing}} липсващо, {{skipped}} пропуснато",
-    "proxmoxLastSyncStatus": {
-      "error": "Неуспешно",
-      "pending": "В очакване",
-      "success": "Успех"
-    },
-    "proxmoxDiscoverAction": "Откриване и импортиране на гости на Proxmox",
-    "proxmoxImportTitle": "Импортиране от Proxmox",
-    "proxmoxSelectHost": "Изберете хост на Proxmox…",
-    "proxmoxDiscover": "Открийте",
-    "proxmoxDiscovering": "Откриване…",
-    "proxmoxDiscoverGuests": "Открийте гостите",
-    "proxmoxSelectAll": "Избери всички",
-    "proxmoxDeselectAll": "Премахване на избора от всички",
-    "proxmoxNoGuests": "Няма намерени гости на този Proxmox възел.",
-    "proxmoxResultImported": "{{count}} импортирано",
-    "proxmoxResultUpdated": "{{count}} актуализирано",
-    "proxmoxResultFailed": "{{count}} неуспешно",
-    "proxmoxImportComplete": "Импортирането на Proxmox е завършено: {{summary}}",
-    "proxmoxDiscoveryFailed": "Откриването не беше успешно",
-    "proxmoxImportFailed": "Импортирането не бе успешно",
-    "docsLink": "Преглед на документи",
-    "hostNotFound": "Хостът не е намерен",
-    "loadingHost": "Зареждане на хоста...",
-    "none": "Няма",
-    "proxmoxGuestsSelected_one": "{{count}} гост, {{selected}} избран",
-    "proxmoxGuestsSelected_other": "{{count}} гости, {{selected}} избрани",
-    "proxmoxImportButton_one": "Импортиране на хост {{count}}",
-    "proxmoxImportButton_other": "Импортиране на {{count}} хостове"
-  },
-  "terminal": {
-    "connected": "Свързан"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/bn_BD.json b/plugins/proxmox/locales/translated/bn_BD.json
deleted file mode 100644
index 9863a1c62..000000000
--- a/plugins/proxmox/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "প্রক্সমক্স পরিসংখ্যান"
-  },
-  "proxmoxStats": {
-    "tabTitle": "প্রক্সমক্স পরিসংখ্যান",
-    "cpuUsage": "সিপিইউ ব্যবহার",
-    "memoryUsage": "মেমরি ব্যবহার",
-    "diskUsage": "ডিস্ক ব্যবহার",
-    "networkInterfaces": "নেটওয়ার্ক ইন্টারফেস",
-    "uptime": "আপটাইম",
-    "systemInfo": "সিস্টেমের তথ্য",
-    "guestsSummary": "অতিথিরা",
-    "storagePools": "স্টোরেজ পুল",
-    "clusterHealth": "ক্লাস্টার স্বাস্থ্য",
-    "cpuCores_one": "{{count}} কোর",
-    "cpuCores_other": "{{count}} কোর",
-    "used": "ব্যবহৃত",
-    "total": "মোট",
-    "hostname": "হোস্টনাম",
-    "kernel": "কার্নেল",
-    "pveVersion": "PVE সংস্করণ",
-    "name": "নাম",
-    "status": "অবস্থা",
-    "type": "প্রকার",
-    "cpu": "সিপিইউ",
-    "mem": "মেম",
-    "disk": "ডিস্ক",
-    "running": "দৌড়ানো",
-    "stopped": "থামানো হয়েছে",
-    "guestCounts": "{{running}}/{{total}} চলমান",
-    "inactive": "নিষ্ক্রিয়",
-    "notClustered": "স্বতন্ত্র নোড (ক্লাস্টারের অংশ নয়)",
-    "quorate": "কোরাট",
-    "notQuorate": "কোরাম পূর্ণ নয়",
-    "nodeOnline": "অনলাইন",
-    "nodeOffline": "অফলাইন",
-    "noHostSelected": "কোন হোস্ট নির্বাচন করা হয়নি",
-    "pveshNotFound": "pvesh খুঁজে পাওয়া যায়নি - এটি কি একটি Proxmox নোড?",
-    "nodeDetectionFailed": "একটি বৈধ Proxmox নোডের নাম নির্ধারণ করা সম্ভব হয়নি।",
-    "connecting": "সংযোগ স্থাপন...",
-    "connectionFailed": "Proxmox নোডের সাথে সংযোগ করতে ব্যর্থ হয়েছে",
-    "refresh": "রিফ্রেশ",
-    "searchGuests": "অতিথিদের অনুসন্ধান করুন...",
-    "filterAll": "সব",
-    "filterVm": "ভিএম",
-    "filterLxc": "এলএক্সসি",
-    "noGuests": "এই নোডে কোনো ভিএম বা এলএক্সসি কন্টেইনার খুঁজে পাওয়া যায়নি।",
-    "noGuestsMatch": "বর্তমান ফিল্টারগুলোর সাথে কোনো অতিথি মেলে না।"
-  },
-  "hosts": {
-    "tabProxmox": "প্রক্সমক্স",
-    "enableProxmoxStats": "Proxmox Stats সক্রিয় করুন",
-    "enableProxmoxStatsDesc": "এই হোস্টের জন্য একটি Proxmox Stats ট্যাব দেখান, যেখানে SSH-এর মাধ্যমে সংগৃহীত লাইভ নোড, গেস্ট, স্টোরেজ এবং ক্লাস্টারের পরিসংখ্যান থাকবে।",
-    "proxmoxStatsPollInterval": "ভোটের ব্যবধান (সেকেন্ড)",
-    "proxmoxStatsPollIntervalDesc": "সর্বনিম্ন ১৫ সেকেন্ড। কত ঘন ঘন প্রক্সমক্স নোড স্ট্যাটস রিফ্রেশ করতে হবে।",
-    "proxmoxStatsNodeOverride": "নোডের নাম ওভাররাইড",
-    "proxmoxStatsNodeOverrideDesc": "প্রক্সমক্স নোডের নামের স্বয়ংক্রিয় সনাক্তকরণকে অগ্রাহ্য করুন (যা ডিফল্টরূপে হোস্টনেমের মাধ্যমে সনাক্ত করা হয়)।",
-    "proxmoxStatsNodeOverridePlaceholder": "হোস্টনেম থেকে স্বয়ংক্রিয়ভাবে শনাক্ত করা হয়েছে",
-    "authTypeStepca": "স্টেপ সিএ",
-    "proxmoxIntegration": "প্রক্সমক্স ইন্টিগ্রেশন",
-    "enableProxmox": "প্রক্সমক্স সক্রিয় করুন",
-    "enableProxmoxDesc": "এই হোস্টটিকে একটি প্রক্সমক্স নোড হিসেবে চিহ্নিত করুন। এর ফলে সরাসরি এই হোস্ট থেকে গেস্ট ডিসকভারি এবং ইম্পোর্ট করা যায়।",
-    "proxmoxDefaultAuthType": "ডিফল্ট প্রমাণীকরণ ধরণ",
-    "proxmoxDefaultAuthTypeDesc": "আমদানিকৃত গেস্ট হোস্টদের জন্য প্রযোজ্য প্রমাণীকরণ পদ্ধতি। আপনি আপনার গেস্টদের সাথে যেভাবে সংযোগ স্থাপন করেন, তার সাথে মেলে এমন প্রমাণীকরণের ধরণটি বেছে নিন।",
-    "authTypePassword": "পাসওয়ার্ড",
-    "authTypeKey": "SSH কী",
-    "authTypeCredential": "শংসাপত্র",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "কোনোটিই না",
-    "proxmoxDefaultCredential": "ডিফল্ট পরিচয়পত্র",
-    "proxmoxDefaultCredentialDesc": "যখন অথোরাইজেশন টাইপ 'ক্রেডেনশিয়াল' হিসেবে সেট করা থাকে, তখন ইম্পোর্ট করা গেস্ট হোস্টগুলির জন্য ব্যবহৃত ক্রেডেনশিয়াল।",
-    "proxmoxWindowsDetection": "উইন্ডোজ / আরডিপি সনাক্তকরণ",
-    "proxmoxWindowsDetectionDesc": "কমা দ্বারা পৃথক করা নামের প্যাটার্ন যা SSH-এর পরিবর্তে RDP চালু করে (কেস-ইনসেনসিটিভ)",
-    "proxmoxDockerDetection": "ডকার সনাক্তকরণ",
-    "proxmoxDockerDetectionDesc": "কমা দ্বারা পৃথক করা নামের প্যাটার্ন যা ডকারকে গেস্টদের মেলানোর জন্য সক্ষম করে",
-    "proxmoxPreferredRanges": "পছন্দের আইপি রেঞ্জ",
-    "proxmoxPreferredRangesDesc": "যখন কোনো গেস্টের একাধিক ইন্টারফেস থাকে, তখন আইপি নির্বাচনের জন্য অগ্রাধিকার ক্রমে কমা দ্বারা পৃথক করা প্রিফিক্সগুলো ব্যবহৃত হয়।",
-    "proxmoxAutoSync": "অতিথিদের স্বয়ংক্রিয়ভাবে সিঙ্ক করুন",
-    "proxmoxAutoSyncDesc": "আপনার সেশন আনলক থাকা অবস্থায় পর্যায়ক্রমে এই প্রক্সমক্স নোডটি আবিষ্কার করুন এবং ইম্পোর্ট করা গেস্ট হোস্টগুলি তৈরি বা আপডেট করুন।",
-    "proxmoxSyncInterval": "সিঙ্ক ব্যবধান (মিনিট)",
-    "proxmoxSyncIntervalDesc": "সর্বনিম্ন ৫ মিনিট। শিডিউলারটি লক করা ব্যবহারকারীর সেশনগুলো এড়িয়ে যায়।",
-    "proxmoxMarkMissing": "অনুপস্থিত অতিথিদের চিহ্নিত করুন",
-    "proxmoxMarkMissingDesc": "পূর্বে ইম্পোর্ট করা কোনো গেস্ট অদৃশ্য হয়ে গেলে, সেটিকে ডিলিট না করে একটি proxmox-missing ট্যাগ যোগ করুন।",
-    "proxmoxLastSync": "শেষ সিঙ্ক",
-    "proxmoxLastSyncNever": "এখনো সিঙ্ক হয়নি",
-    "proxmoxLastSyncNoResult": "ফলাফলের কোনো বিবরণ নেই",
-    "proxmoxLastSyncSummary": "{{created}} তৈরি করা হয়েছে, {{updated}} আপডেট করা হয়েছে, {{markedMissing}} অনুপস্থিত, {{skipped}} বাদ দেওয়া হয়েছে",
-    "proxmoxLastSyncStatus": {
-      "error": "ব্যর্থ",
-      "pending": "বিচারাধীন",
-      "success": "সাফল্য"
-    },
-    "proxmoxDiscoverAction": "Proxmox গেস্টদের আবিষ্কার ও আমদানি করুন",
-    "proxmoxImportTitle": "প্রক্সমক্স থেকে আমদানি করুন",
-    "proxmoxSelectHost": "একটি প্রক্সমক্স হোস্ট নির্বাচন করুন…",
-    "proxmoxDiscover": "আবিষ্কার করুন",
-    "proxmoxDiscovering": "… আবিষ্কার করা",
-    "proxmoxDiscoverGuests": "অতিথিদের আবিষ্কার করুন",
-    "proxmoxSelectAll": "সবগুলো নির্বাচন করুন",
-    "proxmoxDeselectAll": "সবগুলো নির্বাচন বাতিল করুন",
-    "proxmoxNoGuests": "এই প্রক্সমক্স নোডে কোনো অতিথি পাওয়া যায়নি।",
-    "proxmoxResultImported": "{{count}} আমদানি করা হয়েছে",
-    "proxmoxResultUpdated": "{{count}} আপডেট করা হয়েছে",
-    "proxmoxResultFailed": "{{count}} ব্যর্থ হয়েছে",
-    "proxmoxImportComplete": "প্রক্সমক্স আমদানি সম্পন্ন: {{summary}}",
-    "proxmoxDiscoveryFailed": "আবিষ্কার ব্যর্থ হয়েছে",
-    "proxmoxImportFailed": "আমদানি ব্যর্থ হয়েছে",
-    "docsLink": "নথি দেখুন",
-    "hostNotFound": "হোস্ট খুঁজে পাওয়া যায়নি",
-    "loadingHost": "হোস্ট লোড হচ্ছে...",
-    "none": "কোনোটিই না",
-    "proxmoxGuestsSelected_one": "{{count}} অতিথি, {{selected}} নির্বাচিত",
-    "proxmoxGuestsSelected_other": "{{count}} জন অতিথি, {{selected}} জন নির্বাচিত",
-    "proxmoxImportButton_one": "{{count}} হোস্ট আমদানি করুন",
-    "proxmoxImportButton_other": "{{count}} হোস্ট আমদানি করুন"
-  },
-  "terminal": {
-    "connected": "সংযুক্ত"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/ca_ES.json b/plugins/proxmox/locales/translated/ca_ES.json
deleted file mode 100644
index 95314e63c..000000000
--- a/plugins/proxmox/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Estadístiques de Proxmox"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Estadístiques de Proxmox",
-    "cpuUsage": "Ús de la CPU",
-    "memoryUsage": "Ús de memòria",
-    "diskUsage": "Ús del disc",
-    "networkInterfaces": "Interfícies de xarxa",
-    "uptime": "Temps de funcionament",
-    "systemInfo": "Informació del sistema",
-    "guestsSummary": "Convidats",
-    "storagePools": "Piscines d'emmagatzematge",
-    "clusterHealth": "Salut del clúster",
-    "cpuCores_one": "{{count}} Nucli",
-    "cpuCores_other": "{{count}} Nuclis",
-    "used": "Usat",
-    "total": "Total",
-    "hostname": "Nom d'amfitrió",
-    "kernel": "Nucli",
-    "pveVersion": "Versió PVE",
-    "name": "Nom",
-    "status": "Estat",
-    "type": "Tipus",
-    "cpu": "CPU",
-    "mem": "Memòria",
-    "disk": "Disc",
-    "running": "Córrer",
-    "stopped": "Aturat",
-    "guestCounts": "{{running}}/{{total}} en execució",
-    "inactive": "Inactiu",
-    "notClustered": "Node autònom (no forma part d'un clúster)",
-    "quorate": "Quota",
-    "notQuorate": "Sense quòrum",
-    "nodeOnline": "En línia",
-    "nodeOffline": "Fora de línia",
-    "noHostSelected": "No s'ha seleccionat cap amfitrió",
-    "pveshNotFound": "No s'ha trobat pvesh: és un node de Proxmox?",
-    "nodeDetectionFailed": "No s'ha pogut determinar un nom de node Proxmox vàlid",
-    "connecting": "Connectant...",
-    "connectionFailed": "No s'ha pogut connectar al node de Proxmox.",
-    "refresh": "Actualitza",
-    "searchGuests": "Cerca convidats...",
-    "filterAll": "Tot",
-    "filterVm": "màquina virtual",
-    "filterLxc": "LXC",
-    "noGuests": "No s'han trobat màquines virtuals ni contenidors LXC en aquest node.",
-    "noGuestsMatch": "No hi ha convidats que coincideixin amb els filtres actuals."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Activa les estadístiques de Proxmox",
-    "enableProxmoxStatsDesc": "Mostra una pestanya Estadístiques de Proxmox per a aquest amfitrió amb estadístiques en directe de node, convidat, emmagatzematge i clúster recollides a través de SSH.",
-    "proxmoxStatsPollInterval": "Interval de sondeig (segons)",
-    "proxmoxStatsPollIntervalDesc": "Mínim 15 segons. Amb quina freqüència s'han d'actualitzar les estadístiques del node Proxmox.",
-    "proxmoxStatsNodeOverride": "Substitució del nom del node",
-    "proxmoxStatsNodeOverrideDesc": "Anul·la la detecció automàtica del nom del node Proxmox (detectat per defecte mitjançant el nom de l'amfitrió).",
-    "proxmoxStatsNodeOverridePlaceholder": "Detectat automàticament des del nom d'amfitrió",
-    "authTypeStepca": "Pas CA",
-    "proxmoxIntegration": "Integració de Proxmox",
-    "enableProxmox": "Activa Proxmox",
-    "enableProxmoxDesc": "Marca aquest amfitrió com a node de Proxmox. Activa la detecció de convidats i la importació directament des d'aquest amfitrió.",
-    "proxmoxDefaultAuthType": "Tipus d'autorització per defecte",
-    "proxmoxDefaultAuthTypeDesc": "Mètode d'autenticació aplicat als amfitrions convidats importats. Trieu el tipus d'autenticació que coincideixi amb la manera com us connecteu als vostres convidats.",
-    "authTypePassword": "Contrasenya",
-    "authTypeKey": "Clau SSH",
-    "authTypeCredential": "Credencial",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "Cap",
-    "proxmoxDefaultCredential": "Credencial predeterminada",
-    "proxmoxDefaultCredentialDesc": "Credencial utilitzada per als amfitrions convidats importats quan el tipus d'autenticació està definit com a Credencial.",
-    "proxmoxWindowsDetection": "Detecció de Windows / RDP",
-    "proxmoxWindowsDetectionDesc": "Patrons de noms separats per comes que activen RDP en lloc de SSH (sense distinció entre majúscules i minúscules)",
-    "proxmoxDockerDetection": "Detecció de Docker",
-    "proxmoxDockerDetectionDesc": "Patrons de noms separats per comes que permeten a Docker utilitzar convidats coincidents",
-    "proxmoxPreferredRanges": "Intervals d'IP preferits",
-    "proxmoxPreferredRangesDesc": "Prefixos separats per comes en ordre de prioritat per a la selecció d'IP quan un convidat té diverses interfícies",
-    "proxmoxAutoSync": "Sincronitza automàticament els convidats",
-    "proxmoxAutoSyncDesc": "Descobreix periòdicament aquest node de Proxmox i crea o actualitza els hosts convidats importats mentre la sessió està desbloquejada.",
-    "proxmoxSyncInterval": "Interval de sincronització (minuts)",
-    "proxmoxSyncIntervalDesc": "Mínim 5 minuts. El planificador omet les sessions d'usuari bloquejades.",
-    "proxmoxMarkMissing": "Marca els convidats que falten",
-    "proxmoxMarkMissingDesc": "Afegeix una etiqueta proxmox-missing quan un convidat importat prèviament desapareix en comptes d'eliminar-lo.",
-    "proxmoxLastSync": "Darrera sincronització",
-    "proxmoxLastSyncNever": "Encara no sincronitzat",
-    "proxmoxLastSyncNoResult": "Sense detalls del resultat",
-    "proxmoxLastSyncSummary": "{{created}} creat, {{updated}} actualitzat, {{markedMissing}} no hi és, {{skipped}} omès",
-    "proxmoxLastSyncStatus": {
-      "error": "Fallat",
-      "pending": "Pendent",
-      "success": "Èxit"
-    },
-    "proxmoxDiscoverAction": "Descobreix i importa convidats de Proxmox",
-    "proxmoxImportTitle": "Importar des de Proxmox",
-    "proxmoxSelectHost": "Seleccioneu un amfitrió Proxmox…",
-    "proxmoxDiscover": "Descobreix",
-    "proxmoxDiscovering": "Descobrint…",
-    "proxmoxDiscoverGuests": "Descobreix convidats",
-    "proxmoxSelectAll": "Selecciona-ho tot",
-    "proxmoxDeselectAll": "Desselecciona-ho tot",
-    "proxmoxNoGuests": "No s'han trobat convidats en aquest node de Proxmox.",
-    "proxmoxResultImported": "{{count}} importat",
-    "proxmoxResultUpdated": "{{count}} actualitzat",
-    "proxmoxResultFailed": "{{count}} ha fallat",
-    "proxmoxImportComplete": "Importació de Proxmox completada: {{summary}}",
-    "proxmoxDiscoveryFailed": "El descobriment ha fallat",
-    "proxmoxImportFailed": "La importació ha fallat",
-    "docsLink": "Veure documents",
-    "hostNotFound": "No s'ha trobat l'amfitrió",
-    "loadingHost": "S'està carregant l'amfitrió...",
-    "none": "Cap",
-    "proxmoxGuestsSelected_one": "{{count}} convidat, {{selected}} seleccionat",
-    "proxmoxGuestsSelected_other": "{{count}} convidats, {{selected}} seleccionats",
-    "proxmoxImportButton_one": "Importa l'amfitrió {{count}}",
-    "proxmoxImportButton_other": "Importa els amfitrions {{count}}"
-  },
-  "terminal": {
-    "connected": "Connectat"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/cs_CZ.json b/plugins/proxmox/locales/translated/cs_CZ.json
deleted file mode 100644
index 8899cd93e..000000000
--- a/plugins/proxmox/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Statistiky Proxmoxu"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Statistiky Proxmoxu",
-    "cpuUsage": "Využití CPU",
-    "memoryUsage": "Využití paměti",
-    "diskUsage": "Využití disku",
-    "networkInterfaces": "Síťová rozhraní",
-    "uptime": "Doba provozuschopnosti",
-    "systemInfo": "Informace o systému",
-    "guestsSummary": "Hosté",
-    "storagePools": "Úložné fondy",
-    "clusterHealth": "Zdraví klastru",
-    "cpuCores_one": "{{count}} Jádro",
-    "cpuCores_other": "{{count}} Jádra",
-    "used": "Použitý",
-    "total": "Celkový",
-    "hostname": "Název hostitele",
-    "kernel": "Jádro",
-    "pveVersion": "PVE verze",
-    "name": "Jméno",
-    "status": "Postavení",
-    "type": "Typ",
-    "cpu": "Procesor",
-    "mem": "Paměť",
-    "disk": "Disk",
-    "running": "Běh",
-    "stopped": "Zastaveno",
-    "guestCounts": "{{running}}/{{total}} běží",
-    "inactive": "Neaktivní",
-    "notClustered": "Samostatný uzel (není součástí clusteru)",
-    "quorate": "Kvorát",
-    "notQuorate": "Není usnášeníschopný",
-    "nodeOnline": "Online",
-    "nodeOffline": "Offline",
-    "noHostSelected": "Nebyl vybrán žádný hostitel",
-    "pveshNotFound": "pvesh nenalezen - je to uzel Proxmox?",
-    "nodeDetectionFailed": "Nelze určit platný název uzlu Proxmox.",
-    "connecting": "Spojovací...",
-    "connectionFailed": "Nepodařilo se připojit k uzlu Proxmox",
-    "refresh": "Obnovit",
-    "searchGuests": "Hledat hosty...",
-    "filterAll": "Vše",
-    "filterVm": "virtuální počítač",
-    "filterLxc": "LXC",
-    "noGuests": "Na tomto uzlu nebyly nalezeny žádné virtuální počítače ani kontejnery LXC.",
-    "noGuestsMatch": "Aktuálním filtrům neodpovídají žádní hosté."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Povolit statistiky Proxmoxu",
-    "enableProxmoxStatsDesc": "Zobrazit kartu Statistiky Proxmoxu pro tohoto hostitele s aktivními statistikami uzlů, hostů, úložišť a clusterů shromážděnými přes SSH.",
-    "proxmoxStatsPollInterval": "Interval dotazování (sekundy)",
-    "proxmoxStatsPollIntervalDesc": "Minimálně 15 sekund. Jak často aktualizovat statistiky uzlu Proxmox.",
-    "proxmoxStatsNodeOverride": "Přepsání názvu uzlu",
-    "proxmoxStatsNodeOverrideDesc": "Přepsat automatickou detekci názvu uzlu Proxmox (ve výchozím nastavení detekováno pomocí názvu hostitele).",
-    "proxmoxStatsNodeOverridePlaceholder": "Automaticky detekováno z názvu hostitele",
-    "authTypeStepca": "Krok CA",
-    "proxmoxIntegration": "Integrace Proxmoxu",
-    "enableProxmox": "Povolit Proxmox",
-    "enableProxmoxDesc": "Označit tento hostitel jako uzel Proxmox. Umožňuje vyhledávání hostů a import přímo z tohoto hostitele.",
-    "proxmoxDefaultAuthType": "Výchozí typ ověření",
-    "proxmoxDefaultAuthTypeDesc": "Metoda ověřování použitá na importované hostující hostitele. Vyberte typ ověřování, který odpovídá způsobu, jakým se připojujete k hostům.",
-    "authTypePassword": "Heslo",
-    "authTypeKey": "Klíč SSH",
-    "authTypeCredential": "Přihlašovací údaj",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "Žádný",
-    "proxmoxDefaultCredential": "Výchozí přihlašovací údaje",
-    "proxmoxDefaultCredentialDesc": "Přihlašovací údaje používané pro importované hostující hostitele, pokud je typ ověření nastaven na Přihlašovací údaje.",
-    "proxmoxWindowsDetection": "Detekce Windows / RDP",
-    "proxmoxWindowsDetectionDesc": "Vzory názvů oddělené čárkami, které spouštějí RDP místo SSH (bez rozlišení velkých a malých písmen)",
-    "proxmoxDockerDetection": "Detekce Dockeru",
-    "proxmoxDockerDetectionDesc": "Vzory názvů oddělených čárkami, které Dockeru umožňují vyhledávání hostů",
-    "proxmoxPreferredRanges": "Preferované rozsahy IP adres",
-    "proxmoxPreferredRangesDesc": "Prefixy oddělené čárkami v pořadí priority pro výběr IP adresy, když má host více rozhraní",
-    "proxmoxAutoSync": "Automatická synchronizace hostů",
-    "proxmoxAutoSyncDesc": "Pravidelně vyhledávejte tento uzel Proxmox a vytvářejte nebo aktualizujte importované hostující hostitele, když je vaše relace odemčená.",
-    "proxmoxSyncInterval": "Interval synchronizace (minuty)",
-    "proxmoxSyncIntervalDesc": "Minimálně 5 minut. Plánovač přeskakuje uzamčené uživatelské relace.",
-    "proxmoxMarkMissing": "Označit chybějící hosty",
-    "proxmoxMarkMissingDesc": "Přidat tag proxmox-missing, když dříve importovaný host zmizí, místo aby byl smazán.",
-    "proxmoxLastSync": "Poslední synchronizace",
-    "proxmoxLastSyncNever": "Zatím nesynchronizováno",
-    "proxmoxLastSyncNoResult": "Žádné podrobnosti o výsledcích",
-    "proxmoxLastSyncSummary": "{{created}} vytvořeno, {{updated}} aktualizováno, {{markedMissing}} chybí, {{skipped}} přeskočeno",
-    "proxmoxLastSyncStatus": {
-      "error": "Selhalo",
-      "pending": "Čeká na vyřízení",
-      "success": "Úspěch"
-    },
-    "proxmoxDiscoverAction": "Objevte a importujte hosty Proxmoxu",
-    "proxmoxImportTitle": "Import z Proxmoxu",
-    "proxmoxSelectHost": "Vyberte hostitele Proxmox…",
-    "proxmoxDiscover": "Objevit",
-    "proxmoxDiscovering": "Objevování…",
-    "proxmoxDiscoverGuests": "Objevte hosty",
-    "proxmoxSelectAll": "Vybrat vše",
-    "proxmoxDeselectAll": "Zrušit výběr všeho",
-    "proxmoxNoGuests": "Na tomto uzlu Proxmox nebyli nalezeni žádní hosté.",
-    "proxmoxResultImported": "{{count}} importováno",
-    "proxmoxResultUpdated": "{{count}} aktualizováno",
-    "proxmoxResultFailed": "{{count}} selhalo",
-    "proxmoxImportComplete": "Import Proxmoxu dokončen: {{summary}}",
-    "proxmoxDiscoveryFailed": "Objev selhal",
-    "proxmoxImportFailed": "Import se nezdařil",
-    "docsLink": "Zobrazit dokumenty",
-    "hostNotFound": "Hostitel nenalezen",
-    "loadingHost": "Načítání hostitele...",
-    "none": "Žádný",
-    "proxmoxGuestsSelected_one": "{{count}} host, {{selected}} vybráno",
-    "proxmoxGuestsSelected_other": "{{count}} hostů, {{selected}} vybráno",
-    "proxmoxImportButton_one": "Importovat hostitele {{count}}",
-    "proxmoxImportButton_other": "Importovat hostitele {{count}}"
-  },
-  "terminal": {
-    "connected": "Připojeno"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/da_DK.json b/plugins/proxmox/locales/translated/da_DK.json
deleted file mode 100644
index a954b04d7..000000000
--- a/plugins/proxmox/locales/translated/da_DK.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Proxmox-statistik"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Proxmox-statistik",
-    "cpuUsage": "CPU-forbrug",
-    "memoryUsage": "Hukommelsesforbrug",
-    "diskUsage": "Diskforbrug",
-    "networkInterfaces": "Netværksgrænseflader",
-    "uptime": "Oppetid",
-    "systemInfo": "Systemoplysninger",
-    "guestsSummary": "Gæster",
-    "storagePools": "Opbevaringsbassiner",
-    "clusterHealth": "Klyngesundhed",
-    "cpuCores_one": "{{count}} Kerne",
-    "cpuCores_other": "{{count}} Kerner",
-    "used": "Brugt",
-    "total": "Total",
-    "hostname": "Værtsnavn",
-    "kernel": "Kernen",
-    "pveVersion": "PVE-version",
-    "name": "Navn",
-    "status": "Status",
-    "type": "Type",
-    "cpu": "CPU",
-    "mem": "Mem",
-    "disk": "Disk",
-    "running": "Løb",
-    "stopped": "Stoppet",
-    "guestCounts": "{{running}}/{{total}} løber",
-    "inactive": "Inaktiv",
-    "notClustered": "Selvstændig node (ikke en del af en klynge)",
-    "quorate": "Kvorat",
-    "notQuorate": "Ikke quorable",
-    "nodeOnline": "Online",
-    "nodeOffline": "Offline",
-    "noHostSelected": "Ingen vært valgt",
-    "pveshNotFound": "pvesh ikke fundet - er dette en Proxmox-node?",
-    "nodeDetectionFailed": "Kan ikke bestemme et gyldigt Proxmox-nodenavn",
-    "connecting": "Forbinder...",
-    "connectionFailed": "Kunne ikke oprette forbindelse til Proxmox-noden",
-    "refresh": "Opfriske",
-    "searchGuests": "Søg gæster...",
-    "filterAll": "Alle",
-    "filterVm": "VM",
-    "filterLxc": "LXC",
-    "noGuests": "Der blev ikke fundet nogen VM'er eller LXC-containere på denne node.",
-    "noGuestsMatch": "Ingen gæster matcher de nuværende filtre."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Aktivér Proxmox-statistik",
-    "enableProxmoxStatsDesc": "Vis en Proxmox Stats-faneblad for denne vært med live node-, gæst-, lager- og klyngestatistikker indsamlet via SSH.",
-    "proxmoxStatsPollInterval": "Afstemningsinterval (sekunder)",
-    "proxmoxStatsPollIntervalDesc": "Minimum 15 sekunder. Hvor ofte skal Proxmox-nodestatistikker opdateres.",
-    "proxmoxStatsNodeOverride": "Tilsidesættelse af nodenavn",
-    "proxmoxStatsNodeOverrideDesc": "Tilsidesæt automatisk detektion af Proxmox-nodenavnet (registreres som standard via værtsnavn).",
-    "proxmoxStatsNodeOverridePlaceholder": "Automatisk registreret fra værtsnavn",
-    "authTypeStepca": "Trin CA",
-    "proxmoxIntegration": "Proxmox-integration",
-    "enableProxmox": "Aktivér Proxmox",
-    "enableProxmoxDesc": "Marker denne vært som en Proxmox-node. Aktiverer gæsteopdagelse og import direkte fra denne vært.",
-    "proxmoxDefaultAuthType": "Standardgodkendelsestype",
-    "proxmoxDefaultAuthTypeDesc": "Godkendelsesmetode anvendt på importerede gæsteværter. Vælg den godkendelsestype, der matcher den måde, du opretter forbindelse til dine gæster.",
-    "authTypePassword": "Adgangskode",
-    "authTypeKey": "SSH-nøgle",
-    "authTypeCredential": "Legitimationsoplysninger",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "Ingen",
-    "proxmoxDefaultCredential": "Standardlegitimationsoplysninger",
-    "proxmoxDefaultCredentialDesc": "Legitimationsoplysninger, der bruges til importerede gæsteværter, når godkendelsestypen er indstillet til Legitimationsoplysninger.",
-    "proxmoxWindowsDetection": "Windows/RDP-detektion",
-    "proxmoxWindowsDetectionDesc": "Kommaseparerede navnemønstre, der udløser RDP i stedet for SSH (ikke-sanskel på store og små bogstaver)",
-    "proxmoxDockerDetection": "Docker-detektion",
-    "proxmoxDockerDetectionDesc": "Kommaseparerede navnemønstre, der gør det muligt for Docker at matche gæster",
-    "proxmoxPreferredRanges": "Foretrukne IP-intervaller",
-    "proxmoxPreferredRangesDesc": "Kommaseparerede præfikser i prioriteret rækkefølge for IP-valg, når en gæst har flere grænseflader",
-    "proxmoxAutoSync": "Automatisk synkronisering af gæster",
-    "proxmoxAutoSyncDesc": "Opdag periodisk denne Proxmox-node og opret eller opdater importerede gæsteværter, mens din session er låst op.",
-    "proxmoxSyncInterval": "Synkroniseringsinterval (minutter)",
-    "proxmoxSyncIntervalDesc": "Minimum 5 minutter. Planlæggeren springer låste brugersessioner over.",
-    "proxmoxMarkMissing": "Markér manglende gæster",
-    "proxmoxMarkMissingDesc": "Tilføj et proxmox-missing-tag, når en tidligere importeret gæst forsvinder, i stedet for at slette den.",
-    "proxmoxLastSync": "Sidste synkronisering",
-    "proxmoxLastSyncNever": "Ikke synkroniseret endnu",
-    "proxmoxLastSyncNoResult": "Ingen resultatdetaljer",
-    "proxmoxLastSyncSummary": "{{created}} oprettet, {{updated}} opdateret, {{markedMissing}} mangler, {{skipped}} sprunget over",
-    "proxmoxLastSyncStatus": {
-      "error": "Mislykkedes",
-      "pending": "Indtil",
-      "success": "Succes"
-    },
-    "proxmoxDiscoverAction": "Opdag og importer Proxmox-gæster",
-    "proxmoxImportTitle": "Importer fra Proxmox",
-    "proxmoxSelectHost": "Vælg en Proxmox-vært…",
-    "proxmoxDiscover": "Opdage",
-    "proxmoxDiscovering": "Opdager…",
-    "proxmoxDiscoverGuests": "Opdag gæster",
-    "proxmoxSelectAll": "Vælg alle",
-    "proxmoxDeselectAll": "Fravælg alle",
-    "proxmoxNoGuests": "Ingen gæster fundet på denne Proxmox-node.",
-    "proxmoxResultImported": "{{count}} importeret",
-    "proxmoxResultUpdated": "{{count}} opdateret",
-    "proxmoxResultFailed": "{{count}} mislykkedes",
-    "proxmoxImportComplete": "Proxmox-import fuldført: {{summary}}",
-    "proxmoxDiscoveryFailed": "Opdagelsen mislykkedes",
-    "proxmoxImportFailed": "Importen mislykkedes",
-    "docsLink": "Se dokumenter",
-    "hostNotFound": "Værten blev ikke fundet",
-    "loadingHost": "Indlæser vært...",
-    "none": "Ingen",
-    "proxmoxGuestsSelected_one": "{{count}} gæst, {{selected}} valgt",
-    "proxmoxGuestsSelected_other": "{{count}} gæster, {{selected}} valgt",
-    "proxmoxImportButton_one": "Importér {{count}} vært",
-    "proxmoxImportButton_other": "Importér {{count}} værter"
-  },
-  "terminal": {
-    "connected": "Forbundet"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/de_DE.json b/plugins/proxmox/locales/translated/de_DE.json
deleted file mode 100644
index e712e4327..000000000
--- a/plugins/proxmox/locales/translated/de_DE.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Proxmox-Statistiken"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Proxmox-Statistiken",
-    "cpuUsage": "CPU-Auslastung",
-    "memoryUsage": "Speicherauslastung",
-    "diskUsage": "Festplattenauslastung",
-    "networkInterfaces": "Netzwerkschnittstellen",
-    "uptime": "Betriebszeit",
-    "systemInfo": "Systeminformationen",
-    "guestsSummary": "Gäste",
-    "storagePools": "Speicherbecken",
-    "clusterHealth": "Cluster Health",
-    "cpuCores_one": "{{count}} Kern",
-    "cpuCores_other": "{{count}} Kerne",
-    "used": "Belegt",
-    "total": "Gesamt",
-    "hostname": "Hostname",
-    "kernel": "Kernel",
-    "pveVersion": "PVE-Version",
-    "name": "Name",
-    "status": "Status",
-    "type": "Typ",
-    "cpu": "CPU",
-    "mem": "Mitglied",
-    "disk": "Festplatte",
-    "running": "Läuft",
-    "stopped": "Gestoppt",
-    "guestCounts": "{{running}}/{{total}} läuft",
-    "inactive": "Inaktiv",
-    "notClustered": "Eigenständiger Knoten (nicht Teil eines Clusters)",
-    "quorate": "Quorum",
-    "notQuorate": "Nicht beschlussfähig",
-    "nodeOnline": "Online",
-    "nodeOffline": "Offline",
-    "noHostSelected": "Kein Host ausgewählt",
-    "pveshNotFound": "pvesh nicht gefunden - handelt es sich um einen Proxmox-Knoten?",
-    "nodeDetectionFailed": "Es konnte kein gültiger Proxmox-Knotenname ermittelt werden.",
-    "connecting": "Verbindung wird hergestellt...",
-    "connectionFailed": "Verbindung zum Proxmox-Knoten fehlgeschlagen.",
-    "refresh": "Aktualisieren",
-    "searchGuests": "Gäste suchen...",
-    "filterAll": "Alle",
-    "filterVm": "VM",
-    "filterLxc": "LXC",
-    "noGuests": "Auf diesem Knoten wurden keine VMs oder LXC-Container gefunden.",
-    "noGuestsMatch": "Es gibt keine Gäste, die den aktuellen Filtern entsprechen."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Proxmox-Statistiken aktivieren",
-    "enableProxmoxStatsDesc": "Zeigen Sie für diesen Host eine Registerkarte „Proxmox Stats“ mit Live-Statistiken zu Knoten, Gastsystemen, Speicher und Cluster an, die über SSH erfasst werden.",
-    "proxmoxStatsPollInterval": "Abfrageintervall (Sekunden)",
-    "proxmoxStatsPollIntervalDesc": "Mindestens 15 Sekunden. Wie oft sollen die Proxmox-Knotenstatistiken aktualisiert werden?",
-    "proxmoxStatsNodeOverride": "Knotennamen überschreiben",
-    "proxmoxStatsNodeOverrideDesc": "Die automatische Erkennung des Proxmox-Knotennamens (standardmäßig über den Hostnamen ermittelt) kann deaktiviert werden.",
-    "proxmoxStatsNodeOverridePlaceholder": "Automatisch anhand des Hostnamens erkannt",
-    "authTypeStepca": "Schritt CA",
-    "proxmoxIntegration": "Proxmox-Integration",
-    "enableProxmox": "Proxmox aktivieren",
-    "enableProxmoxDesc": "Diesen Host als Proxmox-Knoten markieren. Ermöglicht die Erkennung und den Import von Gästen direkt von diesem Host.",
-    "proxmoxDefaultAuthType": "Standard-Authentifizierungstyp",
-    "proxmoxDefaultAuthTypeDesc": "Authentifizierungsmethode, die auf importierte Gast-Hosts angewendet wird. Wählen Sie den Authentifizierungstyp, der Ihrer Verbindungsmethode zu den Gästen entspricht.",
-    "authTypePassword": "Passwort",
-    "authTypeKey": "SSH-Schlüssel",
-    "authTypeCredential": "Anmeldedaten",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "Keine",
-    "proxmoxDefaultCredential": "Standard-Anmeldedaten",
-    "proxmoxDefaultCredentialDesc": "Anmeldedaten, die für importierte Gastsysteme verwendet werden, wenn der Authentifizierungstyp auf Anmeldedaten gesetzt ist.",
-    "proxmoxWindowsDetection": "Windows-/RDP-Erkennung",
-    "proxmoxWindowsDetectionDesc": "Kommagetrennte Namensmuster, die RDP statt SSH auslösen (Groß-/Kleinschreibung wird nicht beachtet).",
-    "proxmoxDockerDetection": "Docker-Erkennung",
-    "proxmoxDockerDetectionDesc": "Kommagetrennte Namensmuster, die Docker für passende Gastsysteme aktivieren.",
-    "proxmoxPreferredRanges": "Bevorzugte IP-Bereiche",
-    "proxmoxPreferredRangesDesc": "Kommagetrennte Präfixe in Prioritätsreihenfolge für die IP-Auswahl, wenn ein Gastsystem mehrere Schnittstellen hat.",
-    "proxmoxAutoSync": "Gastsysteme automatisch synchronisieren",
-    "proxmoxAutoSyncDesc": "Diesen Proxmox-Knoten periodisch erkennen und importierte Gastsysteme erstellen oder aktualisieren, während Ihre Sitzung entsperrt ist.",
-    "proxmoxSyncInterval": "Synchronisierungsintervall (Minuten)",
-    "proxmoxSyncIntervalDesc": "Mindestens 5 Minuten. Der Scheduler überspringt gesperrte Benutzersitzungen.",
-    "proxmoxMarkMissing": "Fehlende Gastsysteme markieren",
-    "proxmoxMarkMissingDesc": "Ein proxmox-missing-Tag hinzufügen, wenn ein zuvor importiertes Gastsystem verschwindet, anstatt es zu löschen.",
-    "proxmoxLastSync": "Letzte Synchronisierung",
-    "proxmoxLastSyncNever": "Noch nicht synchronisiert",
-    "proxmoxLastSyncNoResult": "Keine Ergebnisdetails",
-    "proxmoxLastSyncSummary": "{{created}} erstellt, {{updated}} aktualisiert, {{markedMissing}} fehlend, {{skipped}} übersprungen",
-    "proxmoxLastSyncStatus": {
-      "error": "Fehlgeschlagen",
-      "pending": "Ausstehend",
-      "success": "Erfolg"
-    },
-    "proxmoxDiscoverAction": "Proxmox-Gastsysteme erkennen & importieren",
-    "proxmoxImportTitle": "Von Proxmox importieren",
-    "proxmoxSelectHost": "Proxmox-Host auswählen…",
-    "proxmoxDiscover": "Erkennen",
-    "proxmoxDiscovering": "Erkennen…",
-    "proxmoxDiscoverGuests": "Gastsysteme erkennen",
-    "proxmoxSelectAll": "Alle auswählen",
-    "proxmoxDeselectAll": "Alle abwählen",
-    "proxmoxNoGuests": "Keine Gastsysteme auf diesem Proxmox-Knoten gefunden.",
-    "proxmoxResultImported": "{{count}} importiert",
-    "proxmoxResultUpdated": "{{count}} aktualisiert",
-    "proxmoxResultFailed": "{{count}} fehlgeschlagen",
-    "proxmoxImportComplete": "Proxmox-Import abgeschlossen: {{summary}}",
-    "proxmoxDiscoveryFailed": "Erkennung fehlgeschlagen",
-    "proxmoxImportFailed": "Import fehlgeschlagen",
-    "docsLink": "Dokumentation anzeigen",
-    "hostNotFound": "Host nicht gefunden",
-    "loadingHost": "Host wird geladen...",
-    "none": "Keine",
-    "proxmoxGuestsSelected_one": "{{count}} Gast, {{selected}} ausgewählt",
-    "proxmoxGuestsSelected_other": "{{count}} Gäste, {{selected}} ausgewählt",
-    "proxmoxImportButton_one": "{{count}} Host importieren",
-    "proxmoxImportButton_other": "{{count}} Hosts importieren"
-  },
-  "terminal": {
-    "connected": "Verbunden"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/el_GR.json b/plugins/proxmox/locales/translated/el_GR.json
deleted file mode 100644
index bc90cd2a5..000000000
--- a/plugins/proxmox/locales/translated/el_GR.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Στατιστικά Proxmox"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Στατιστικά Proxmox",
-    "cpuUsage": "Χρήση CPU",
-    "memoryUsage": "Χρήση μνήμης",
-    "diskUsage": "Χρήση δίσκου",
-    "networkInterfaces": "Διεπαφές δικτύου",
-    "uptime": "Χρόνος λειτουργίας",
-    "systemInfo": "Πληροφορίες συστήματος",
-    "guestsSummary": "Επισκέπτες",
-    "storagePools": "Πισίνες αποθήκευσης",
-    "clusterHealth": "Υγεία συμπλέγματος",
-    "cpuCores_one": "{{count}} Πυρήνας",
-    "cpuCores_other": "{{count}} Πυρήνες",
-    "used": "Μεταχειρισμένος",
-    "total": "Σύνολο",
-    "hostname": "Όνομα κεντρικού υπολογιστή",
-    "kernel": "Πυρήνας",
-    "pveVersion": "Έκδοση PVE",
-    "name": "Ονομα",
-    "status": "Κατάσταση",
-    "type": "Τύπος",
-    "cpu": "ΚΜΕ",
-    "mem": "Μνήμη",
-    "disk": "Δίσκος",
-    "running": "Τρέξιμο",
-    "stopped": "Σταμάτησε",
-    "guestCounts": "{{running}}/{{total}} σε λειτουργία",
-    "inactive": "Αδρανής",
-    "notClustered": "Αυτόνομος κόμβος (δεν αποτελεί μέρος συμπλέγματος)",
-    "quorate": "Απαρτίζω",
-    "notQuorate": "Δεν υπάρχει απαρτία",
-    "nodeOnline": "Διαδικτυακά",
-    "nodeOffline": "Εκτός σύνδεσης",
-    "noHostSelected": "Δεν έχει επιλεγεί κεντρικός υπολογιστής",
-    "pveshNotFound": "Το pvesh δεν βρέθηκε - είναι αυτός κόμβος Proxmox;",
-    "nodeDetectionFailed": "Δεν είναι δυνατός ο προσδιορισμός ενός έγκυρου ονόματος κόμβου Proxmox",
-    "connecting": "Συνδετικός...",
-    "connectionFailed": "Αποτυχία σύνδεσης με τον κόμβο Proxmox",
-    "refresh": "Φρεσκάρω",
-    "searchGuests": "Αναζήτηση επισκεπτών...",
-    "filterAll": "Ολοι",
-    "filterVm": "Εικονική Μηχανή",
-    "filterLxc": "LXC",
-    "noGuests": "Δεν βρέθηκαν εικονικές μηχανές ή κοντέινερ LXC σε αυτόν τον κόμβο.",
-    "noGuestsMatch": "Δεν υπάρχουν επισκέπτες που να αντιστοιχούν στα τρέχοντα φίλτρα."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Ενεργοποίηση στατιστικών Proxmox",
-    "enableProxmoxStatsDesc": "Εμφάνιση μιας καρτέλας Proxmox Stats για αυτόν τον κεντρικό υπολογιστή με στατιστικά στοιχεία ζωντανού κόμβου, επισκέπτη, χώρου αποθήκευσης και συμπλέγματος που συλλέγονται μέσω SSH.",
-    "proxmoxStatsPollInterval": "Διάστημα δημοσκόπησης (δευτερόλεπτα)",
-    "proxmoxStatsPollIntervalDesc": "Ελάχιστο 15 δευτερόλεπτα. Πόσο συχνά θα ανανεώνονται τα στατιστικά στοιχεία του κόμβου Proxmox.",
-    "proxmoxStatsNodeOverride": "Παράκαμψη ονόματος κόμβου",
-    "proxmoxStatsNodeOverrideDesc": "Παράκαμψη αυτόματης ανίχνευσης του ονόματος κόμβου Proxmox (εντοπίζεται μέσω του ονόματος κεντρικού υπολογιστή από προεπιλογή).",
-    "proxmoxStatsNodeOverridePlaceholder": "Αυτόματη ανίχνευση από το όνομα κεντρικού υπολογιστή",
-    "authTypeStepca": "Βήμα CA",
-    "proxmoxIntegration": "Ενσωμάτωση Proxmox",
-    "enableProxmox": "Ενεργοποίηση Proxmox",
-    "enableProxmoxDesc": "Σημειώστε αυτόν τον κεντρικό υπολογιστή ως κόμβο Proxmox. Επιτρέπει την ανακάλυψη επισκεπτών και την απευθείας εισαγωγή από αυτόν τον κεντρικό υπολογιστή.",
-    "proxmoxDefaultAuthType": "Προεπιλεγμένος τύπος εξουσιοδότησης",
-    "proxmoxDefaultAuthTypeDesc": "Μέθοδος ελέγχου ταυτότητας που εφαρμόστηκε στους εισαγόμενους φιλοξενούμενους οικοδεσπότες. Επιλέξτε τον τύπο ελέγχου ταυτότητας που ταιριάζει με τον τρόπο που συνδέεστε με τους επισκέπτες σας.",
-    "authTypePassword": "Σύνθημα",
-    "authTypeKey": "Κλειδί SSH",
-    "authTypeCredential": "Πιστοποιητικό",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "Κανένας",
-    "proxmoxDefaultCredential": "Προεπιλεγμένα διαπιστευτήρια",
-    "proxmoxDefaultCredentialDesc": "Διαπιστευτήριο που χρησιμοποιείται για εισαγόμενους φιλοξενούμενους οικοδεσπότες όταν ο τύπος εξουσιοδότησης έχει οριστεί σε Διαπιστευτήριο.",
-    "proxmoxWindowsDetection": "Ανίχνευση Windows / RDP",
-    "proxmoxWindowsDetectionDesc": "Μοτίβα ονομάτων διαχωρισμένα με κόμματα που ενεργοποιούν το RDP αντί για SSH (χωρίς διάκριση πεζών-κεφαλαίων)",
-    "proxmoxDockerDetection": "Ανίχνευση Docker",
-    "proxmoxDockerDetectionDesc": "Μοτίβα ονομάτων διαχωρισμένα με κόμματα που επιτρέπουν στο Docker να αντιστοιχίζει επισκέπτες",
-    "proxmoxPreferredRanges": "Προτιμώμενα εύρη IP",
-    "proxmoxPreferredRangesDesc": "Προθέματα διαχωρισμένα με κόμμα σε σειρά προτεραιότητας για την επιλογή IP όταν ένας επισκέπτης έχει πολλαπλές διεπαφές",
-    "proxmoxAutoSync": "Αυτόματος συγχρονισμός επισκεπτών",
-    "proxmoxAutoSyncDesc": "Εντοπίζετε περιοδικά αυτόν τον κόμβο Proxmox και δημιουργείτε ή ενημερώνετε εισαγόμενους φιλοξενούμενους υπολογιστές όσο η συνεδρία σας είναι ξεκλείδωτη.",
-    "proxmoxSyncInterval": "Διάστημα συγχρονισμού (λεπτά)",
-    "proxmoxSyncIntervalDesc": "Ελάχιστο 5 λεπτά. Ο προγραμματιστής παραλείπει τις κλειδωμένες συνεδρίες χρήστη.",
-    "proxmoxMarkMissing": "Ο Μαρκ λείπουν επισκέπτες.",
-    "proxmoxMarkMissingDesc": "Προσθέστε μια ετικέτα proxmox-missing όταν εξαφανιστεί ένας προηγουμένως εισαγόμενος επισκέπτης αντί να τον διαγράψετε.",
-    "proxmoxLastSync": "Τελευταίος συγχρονισμός",
-    "proxmoxLastSyncNever": "Δεν έχει συγχρονιστεί ακόμα",
-    "proxmoxLastSyncNoResult": "Δεν υπάρχουν λεπτομέρειες για το αποτέλεσμα",
-    "proxmoxLastSyncSummary": "{{created}} δημιουργήθηκε, {{updated}} ενημερώθηκε, {{markedMissing}} λείπει, {{skipped}} παραλείφθηκε",
-    "proxmoxLastSyncStatus": {
-      "error": "Αποτυχημένος",
-      "pending": "Εκκρεμής",
-      "success": "Επιτυχία"
-    },
-    "proxmoxDiscoverAction": "Ανακάλυψη και εισαγωγή επισκεπτών Proxmox",
-    "proxmoxImportTitle": "Εισαγωγή από το Proxmox",
-    "proxmoxSelectHost": "Επιλέξτε έναν κεντρικό υπολογιστή Proxmox…",
-    "proxmoxDiscover": "Ανακαλύπτω",
-    "proxmoxDiscovering": "Ανακαλύπτοντας…",
-    "proxmoxDiscoverGuests": "Ανακαλύψτε επισκέπτες",
-    "proxmoxSelectAll": "Επιλογή όλων",
-    "proxmoxDeselectAll": "Αποεπιλογή όλων",
-    "proxmoxNoGuests": "Δεν βρέθηκαν επισκέπτες σε αυτόν τον κόμβο Proxmox.",
-    "proxmoxResultImported": "{{count}} εισήχθη",
-    "proxmoxResultUpdated": "{{count}} ενημερώθηκε",
-    "proxmoxResultFailed": "{{count}} απέτυχε",
-    "proxmoxImportComplete": "Η εισαγωγή Proxmox ολοκληρώθηκε: {{summary}}",
-    "proxmoxDiscoveryFailed": "Η ανακάλυψη απέτυχε",
-    "proxmoxImportFailed": "Η εισαγωγή απέτυχε.",
-    "docsLink": "Προβολή εγγράφων",
-    "hostNotFound": "Δεν βρέθηκε κεντρικός υπολογιστής",
-    "loadingHost": "Φόρτωση κεντρικού υπολογιστή...",
-    "none": "Κανένας",
-    "proxmoxGuestsSelected_one": "{{count}} επισκέπτης, {{selected}} επιλεγμένος",
-    "proxmoxGuestsSelected_other": "{{count}} επισκέπτες, {{selected}} επιλεγμένοι",
-    "proxmoxImportButton_one": "Εισαγωγή κεντρικού υπολογιστή {{count}}",
-    "proxmoxImportButton_other": "Εισαγωγή {{count}} κεντρικών υπολογιστών"
-  },
-  "terminal": {
-    "connected": "Συνδεδεμένος"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/es_ES.json b/plugins/proxmox/locales/translated/es_ES.json
deleted file mode 100644
index b87796172..000000000
--- a/plugins/proxmox/locales/translated/es_ES.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Estadísticas de Proxmox"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Estadísticas de Proxmox",
-    "cpuUsage": "Uso de CPU",
-    "memoryUsage": "Uso de memoria",
-    "diskUsage": "Uso del disco",
-    "networkInterfaces": "Interfaces de red",
-    "uptime": "Tiempo de actividad",
-    "systemInfo": "Información del sistema",
-    "guestsSummary": "Huéspedes",
-    "storagePools": "Piscinas de almacenamiento",
-    "clusterHealth": "Salud en grupo",
-    "cpuCores_one": "{{count}} núcleo",
-    "cpuCores_other": "{{count}} núcleos",
-    "used": "Usado",
-    "total": "Total",
-    "hostname": "Nombre de host",
-    "kernel": "Kernel",
-    "pveVersion": "Versión PVE",
-    "name": "Nombre",
-    "status": "Estado",
-    "type": "Tipo",
-    "cpu": "CPU",
-    "mem": "Memoria",
-    "disk": "Disco",
-    "running": "En ejecución",
-    "stopped": "Detenido",
-    "guestCounts": "{{running}}/{{total}} corriendo",
-    "inactive": "Inactivo",
-    "notClustered": "Nodo independiente (no forma parte de un clúster)",
-    "quorate": "Con quórum",
-    "notQuorate": "No hay quórum",
-    "nodeOnline": "En línea",
-    "nodeOffline": "Desconectado",
-    "noHostSelected": "Ningún host seleccionado",
-    "pveshNotFound": "pvesh no encontrado - ¿es este un nodo Proxmox?",
-    "nodeDetectionFailed": "No se pudo determinar un nombre de nodo Proxmox válido.",
-    "connecting": "Conectando...",
-    "connectionFailed": "No se pudo conectar con el nodo Proxmox.",
-    "refresh": "Actualizar",
-    "searchGuests": "Buscar huéspedes...",
-    "filterAll": "Revocar todo",
-    "filterVm": "VM",
-    "filterLxc": "LXC",
-    "noGuests": "No se encontraron máquinas virtuales ni contenedores LXC en este nodo.",
-    "noGuestsMatch": "No hay huéspedes que coincidan con los filtros actuales."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Habilitar estadísticas de Proxmox",
-    "enableProxmoxStatsDesc": "Muestra una pestaña de estadísticas de Proxmox para este host con estadísticas en tiempo real del nodo, invitado, almacenamiento y clúster recopiladas a través de SSH.",
-    "proxmoxStatsPollInterval": "Intervalo de sondeo (segundos)",
-    "proxmoxStatsPollIntervalDesc": "Mínimo 15 segundos. Con qué frecuencia se actualizan las estadísticas del nodo Proxmox.",
-    "proxmoxStatsNodeOverride": "Anulación del nombre del nodo",
-    "proxmoxStatsNodeOverrideDesc": "Anular la detección automática del nombre del nodo Proxmox (detectado por defecto mediante el nombre de host).",
-    "proxmoxStatsNodeOverridePlaceholder": "Detectado automáticamente a partir del nombre de host.",
-    "authTypeStepca": "Paso CA",
-    "proxmoxIntegration": "Integración con Proxmox",
-    "enableProxmox": "Activar Proxmox",
-    "enableProxmoxDesc": "Marcar este host como un nodo Proxmox. Permite la detección e importación de invitados directamente desde este host.",
-    "proxmoxDefaultAuthType": "Tipo de autenticación predeterminado",
-    "proxmoxDefaultAuthTypeDesc": "Método de autenticación aplicado a los hosts invitados importados. Elija el tipo de autenticación que coincida con cómo se conecta a sus invitados.",
-    "authTypePassword": "Contraseña",
-    "authTypeKey": "Clave SSH",
-    "authTypeCredential": "Credencial",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "Ninguno",
-    "proxmoxDefaultCredential": "Credencial predeterminada",
-    "proxmoxDefaultCredentialDesc": "Credencial utilizada para los hosts invitados importados cuando el tipo de autenticación está configurado como Credencial.",
-    "proxmoxWindowsDetection": "Detección de Windows / RDP",
-    "proxmoxWindowsDetectionDesc": "Patrones de nombres separados por comas que activan RDP en lugar de SSH (sin distinción de mayúsculas/minúsculas)",
-    "proxmoxDockerDetection": "Detección de Docker",
-    "proxmoxDockerDetectionDesc": "Patrones de nombres separados por comas que habilitan Docker para los invitados coincidentes",
-    "proxmoxPreferredRanges": "Rangos de IP preferidos",
-    "proxmoxPreferredRangesDesc": "Prefijos separados por comas en orden de prioridad para la selección de IP cuando un invitado tiene múltiples interfaces",
-    "proxmoxAutoSync": "Sincronización automática de invitados",
-    "proxmoxAutoSyncDesc": "Descubrir periódicamente este nodo Proxmox y crear o actualizar los hosts invitados importados mientras la sesión está desbloqueada.",
-    "proxmoxSyncInterval": "Intervalo de sincronización (minutos)",
-    "proxmoxSyncIntervalDesc": "Mínimo 5 minutos. El planificador omite las sesiones de usuario bloqueadas.",
-    "proxmoxMarkMissing": "Marcar invitados faltantes",
-    "proxmoxMarkMissingDesc": "Añadir una etiqueta proxmox-missing cuando un invitado previamente importado desaparece en lugar de eliminarlo.",
-    "proxmoxLastSync": "Última sincronización",
-    "proxmoxLastSyncNever": "Aún no sincronizado",
-    "proxmoxLastSyncNoResult": "Sin detalles del resultado",
-    "proxmoxLastSyncSummary": "{{created}} creados, {{updated}} actualizados, {{markedMissing}} faltantes, {{skipped}} omitidos",
-    "proxmoxLastSyncStatus": {
-      "error": "Fallido",
-      "pending": "Pendiente",
-      "success": "Correcto"
-    },
-    "proxmoxDiscoverAction": "Descubrir e importar invitados Proxmox",
-    "proxmoxImportTitle": "Importar desde Proxmox",
-    "proxmoxSelectHost": "Seleccionar un host Proxmox…",
-    "proxmoxDiscover": "Descubrir",
-    "proxmoxDiscovering": "Descubriendo…",
-    "proxmoxDiscoverGuests": "Descubrir invitados",
-    "proxmoxSelectAll": "Seleccionar todos",
-    "proxmoxDeselectAll": "Deseleccionar todos",
-    "proxmoxNoGuests": "No se encontraron invitados en este nodo Proxmox.",
-    "proxmoxResultImported": "{{count}} importados",
-    "proxmoxResultUpdated": "{{count}} actualizados",
-    "proxmoxResultFailed": "{{count}} fallidos",
-    "proxmoxImportComplete": "Importación de Proxmox completada: {{summary}}",
-    "proxmoxDiscoveryFailed": "Descubrimiento fallido",
-    "proxmoxImportFailed": "Importación fallida",
-    "docsLink": "Ver documentación",
-    "hostNotFound": "Host no encontrado",
-    "loadingHost": "Cargando host...",
-    "none": "Ninguno",
-    "proxmoxGuestsSelected_one": "{{count}} invitado, {{selected}} seleccionado",
-    "proxmoxGuestsSelected_other": "{{count}} invitados, {{selected}} seleccionados",
-    "proxmoxImportButton_one": "Importar {{count}} host",
-    "proxmoxImportButton_other": "Importar {{count}} hosts"
-  },
-  "terminal": {
-    "connected": "Conectado"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/fi_FI.json b/plugins/proxmox/locales/translated/fi_FI.json
deleted file mode 100644
index 387087ac0..000000000
--- a/plugins/proxmox/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Proxmox-tilastot"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Proxmox-tilastot",
-    "cpuUsage": "Suorittimen käyttö",
-    "memoryUsage": "Muistin käyttö",
-    "diskUsage": "Levyn käyttö",
-    "networkInterfaces": "Verkkoliitännät",
-    "uptime": "Käyttöaika",
-    "systemInfo": "Järjestelmätiedot",
-    "guestsSummary": "Vieraat",
-    "storagePools": "Varastoaltaat",
-    "clusterHealth": "Klusterin terveys",
-    "cpuCores_one": "{{count}} Ydin",
-    "cpuCores_other": "{{count}} Ytimet",
-    "used": "Käytetty",
-    "total": "Kokonais",
-    "hostname": "Isäntänimi",
-    "kernel": "Ydin",
-    "pveVersion": "PVE-versio",
-    "name": "Nimi",
-    "status": "Status",
-    "type": "Tyyppi",
-    "cpu": "Suoritin",
-    "mem": "Mem",
-    "disk": "Levy",
-    "running": "Juoksu",
-    "stopped": "Pysähtynyt",
-    "guestCounts": "{{running}}/{{total}} käynnissä",
-    "inactive": "Passiivinen",
-    "notClustered": "Itsenäinen solmu (ei osa klusteria)",
-    "quorate": "Päätösvaltainen",
-    "notQuorate": "Ei päätöslauselma",
-    "nodeOnline": "Verkossa",
-    "nodeOffline": "Offline-tilassa",
-    "noHostSelected": "Ei valittua isäntää",
-    "pveshNotFound": "pvesh-solmua ei löytynyt - onko tämä Proxmox-solmu?",
-    "nodeDetectionFailed": "Kelvollista Proxmox-solmun nimeä ei voitu määrittää.",
-    "connecting": "Yhdistetään...",
-    "connectionFailed": "Yhteyden muodostaminen Proxmox-solmuun epäonnistui",
-    "refresh": "Päivitä",
-    "searchGuests": "Hae vieraita...",
-    "filterAll": "Kaikki",
-    "filterVm": "Virtuaalikone",
-    "filterLxc": "LXC",
-    "noGuests": "Tältä solmulta ei löytynyt virtuaalikoneita tai LXC-säilöjä.",
-    "noGuestsMatch": "Yksikään vieras ei vastaa nykyisiä suodattimia."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Ota Proxmox-tilastot käyttöön",
-    "enableProxmoxStatsDesc": "Näytä tämän isännän Proxmox-tilastot-välilehti, joka sisältää SSH:n kautta kerätyt reaaliaikaiset solmu-, vieras-, tallennus- ja klusteritilastot.",
-    "proxmoxStatsPollInterval": "Kyselyväli (sekuntia)",
-    "proxmoxStatsPollIntervalDesc": "Vähintään 15 sekuntia. Kuinka usein Proxmox-solmun tilastot päivitetään.",
-    "proxmoxStatsNodeOverride": "Solmun nimen ohitus",
-    "proxmoxStatsNodeOverrideDesc": "Ohita Proxmox-solmun nimen automaattinen tunnistus (tunnistetaan oletusarvoisesti isäntänimen kautta).",
-    "proxmoxStatsNodeOverridePlaceholder": "Automaattisesti tunnistettu isäntänimestä",
-    "authTypeStepca": "Vaihe CA",
-    "proxmoxIntegration": "Proxmox-integraatio",
-    "enableProxmox": "Ota Proxmox käyttöön",
-    "enableProxmoxDesc": "Merkitse tämä isäntä Proxmox-solmuksi. Mahdollistaa vieraslaitteiden etsinnän ja tuonnin suoraan tästä isännästä.",
-    "proxmoxDefaultAuthType": "Oletustodennustyyppi",
-    "proxmoxDefaultAuthTypeDesc": "Tuotuihin vieraspalvelimiin sovellettu todennustapa. Valitse todennustyyppi, joka vastaa tapaa, jolla muodostat yhteyden vieraisiin palvelimiin.",
-    "authTypePassword": "Salasana",
-    "authTypeKey": "SSH-avain",
-    "authTypeCredential": "Valtakirja",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "Ei mitään",
-    "proxmoxDefaultCredential": "Oletustunnistetiedot",
-    "proxmoxDefaultCredentialDesc": "Tuotujen vieraspalvelimien tunnistetiedot, kun todennustyypiksi on asetettu Tunnistetiedot.",
-    "proxmoxWindowsDetection": "Windowsin / RDP-tunnistus",
-    "proxmoxWindowsDetectionDesc": "Pilkuilla erotetut nimimallit, jotka käynnistävät RDP:n SSH:n sijaan (kirjainkokoa ei erotella)",
-    "proxmoxDockerDetection": "Docker-tunnistus",
-    "proxmoxDockerDetectionDesc": "Pilkuilla erotetut nimimallit, joiden avulla Docker löytää vieraat yhteensopiviksi",
-    "proxmoxPreferredRanges": "Suositellut IP-alueet",
-    "proxmoxPreferredRangesDesc": "Pilkuilla erotetut etuliitteet prioriteettijärjestyksessä IP-osoitteen valinnassa, kun vieraalla on useita rajapintoja",
-    "proxmoxAutoSync": "Synkronoi vieraat automaattisesti",
-    "proxmoxAutoSyncDesc": "Etsi tämä Proxmox-solmu säännöllisesti ja luo tai päivitä tuotuja vieraskomanteja istunnon ollessa lukitsematon.",
-    "proxmoxSyncInterval": "Synkronointiväli (minuuttia)",
-    "proxmoxSyncIntervalDesc": "Vähintään 5 minuuttia. Ajastin ohittaa lukitut käyttäjäistunnot.",
-    "proxmoxMarkMissing": "Merkitse puuttuvat vieraat",
-    "proxmoxMarkMissingDesc": "Lisää proxmox-missing-tunniste, kun aiemmin tuotu vieras katoaa sen poistamisen sijaan.",
-    "proxmoxLastSync": "Viimeisin synkronointi",
-    "proxmoxLastSyncNever": "Ei vielä synkronoitu",
-    "proxmoxLastSyncNoResult": "Ei tulostietoja",
-    "proxmoxLastSyncSummary": "{{created}} luotu, {{updated}} päivitetty, {{markedMissing}} puuttuu, {{skipped}} ohitettu",
-    "proxmoxLastSyncStatus": {
-      "error": "Epäonnistui",
-      "pending": "Odottaa",
-      "success": "Menestys"
-    },
-    "proxmoxDiscoverAction": "Löydä ja tuo Proxmox-vieraita",
-    "proxmoxImportTitle": "Tuo Proxmoxista",
-    "proxmoxSelectHost": "Valitse Proxmox-isäntä…",
-    "proxmoxDiscover": "Tutustu",
-    "proxmoxDiscovering": "Löytöretkellä…",
-    "proxmoxDiscoverGuests": "Tutustu vieraisiin",
-    "proxmoxSelectAll": "Valitse kaikki",
-    "proxmoxDeselectAll": "Poista kaikkien valinta",
-    "proxmoxNoGuests": "Tältä Proxmox-solmulta ei löytynyt vieraita.",
-    "proxmoxResultImported": "{{count}} tuotu",
-    "proxmoxResultUpdated": "{{count}} päivitetty",
-    "proxmoxResultFailed": "{{count}} epäonnistui",
-    "proxmoxImportComplete": "Proxmox-tuonti valmis: {{summary}}",
-    "proxmoxDiscoveryFailed": "Löytö epäonnistui",
-    "proxmoxImportFailed": "Tuonti epäonnistui",
-    "docsLink": "Näytä dokumentit",
-    "hostNotFound": "Isäntää ei löydy",
-    "loadingHost": "Ladataan isäntää...",
-    "none": "Ei mitään",
-    "proxmoxGuestsSelected_one": "{{count}} vieras, {{selected}} valittu",
-    "proxmoxGuestsSelected_other": "{{count}} vierasta, {{selected}} valittu",
-    "proxmoxImportButton_one": "Tuo {{count}} isäntä",
-    "proxmoxImportButton_other": "Tuo {{count}} isäntiä"
-  },
-  "terminal": {
-    "connected": "Yhdistetty"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/fr_FR.json b/plugins/proxmox/locales/translated/fr_FR.json
deleted file mode 100644
index c32ee9bd2..000000000
--- a/plugins/proxmox/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Statistiques Proxmox"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Statistiques Proxmox",
-    "cpuUsage": "Utilisation CPU",
-    "memoryUsage": "Utilisation mémoire",
-    "diskUsage": "Utilisation disque",
-    "networkInterfaces": "Interfaces réseau",
-    "uptime": "Disponibilité",
-    "systemInfo": "Informations système",
-    "guestsSummary": "Les invités",
-    "storagePools": "Piscines de stockage",
-    "clusterHealth": "Cluster Health",
-    "cpuCores_one": "{{count}} cœur",
-    "cpuCores_other": "{{count}} cœurs",
-    "used": "Utilisé",
-    "total": "Total",
-    "hostname": "Nom d'hôte",
-    "kernel": "Noyau",
-    "pveVersion": "Version JcE",
-    "name": "Nom",
-    "status": "État",
-    "type": "Type",
-    "cpu": "CPU",
-    "mem": "Mem",
-    "disk": "Disque",
-    "running": "En cours d’exécution",
-    "stopped": "Arrêté",
-    "guestCounts": "{{running}}/{{total}} en cours",
-    "inactive": "Inactif",
-    "notClustered": "Nœud autonome (ne faisant pas partie d'un cluster)",
-    "quorate": "Quaire",
-    "notQuorate": "Pas de quorum",
-    "nodeOnline": "En ligne",
-    "nodeOffline": "Hors ligne",
-    "noHostSelected": "Aucun hôte sélectionné",
-    "pveshNotFound": "pvesh introuvable - s'agit-il d'un nœud Proxmox ?",
-    "nodeDetectionFailed": "Impossible de déterminer un nom de nœud Proxmox valide",
-    "connecting": "Connexion...",
-    "connectionFailed": "Échec de la connexion au nœud Proxmox",
-    "refresh": "Actualiser",
-    "searchGuests": "Rechercher des invités...",
-    "filterAll": "Tout",
-    "filterVm": "VM",
-    "filterLxc": "LXC",
-    "noGuests": "Aucune machine virtuelle ni conteneur LXC n'a été trouvé sur ce nœud.",
-    "noGuestsMatch": "Aucun invité ne correspond aux filtres actuels."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Activer les statistiques Proxmox",
-    "enableProxmoxStatsDesc": "Afficher un onglet Statistiques Proxmox pour cet hôte avec des statistiques en direct sur les nœuds, les invités, le stockage et le cluster collectées via SSH.",
-    "proxmoxStatsPollInterval": "Intervalle d'interrogation (secondes)",
-    "proxmoxStatsPollIntervalDesc": "Minimum 15 secondes. Fréquence d'actualisation des statistiques du nœud Proxmox.",
-    "proxmoxStatsNodeOverride": "Remplacement du nom du nœud",
-    "proxmoxStatsNodeOverrideDesc": "Désactiver la détection automatique du nom du nœud Proxmox (détecté par défaut via le nom d'hôte).",
-    "proxmoxStatsNodeOverridePlaceholder": "Détection automatique à partir du nom d'hôte",
-    "authTypeStepca": "Étape CA",
-    "proxmoxIntegration": "Intégration Proxmox",
-    "enableProxmox": "Activer Proxmox",
-    "enableProxmoxDesc": "Marquer cet hôte comme un nœud Proxmox. Permet la découverte et l'importation des invités directement depuis cet hôte.",
-    "proxmoxDefaultAuthType": "Type d'authentification par défaut",
-    "proxmoxDefaultAuthTypeDesc": "Méthode d'authentification appliquée aux hôtes invités importés. Choisissez le type d'authentification correspondant à votre méthode de connexion aux invités.",
-    "authTypePassword": "Mot de passe",
-    "authTypeKey": "Clé SSH",
-    "authTypeCredential": "Identifiants",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "Aucun",
-    "proxmoxDefaultCredential": "Identifiant par défaut",
-    "proxmoxDefaultCredentialDesc": "Identifiant utilisé pour les hôtes invités importés lorsque le type d'authentification est défini sur Identifiant.",
-    "proxmoxWindowsDetection": "Détection Windows / RDP",
-    "proxmoxWindowsDetectionDesc": "Liste de motifs de noms, séparés par des virgules, qui déclenchent RDP au lieu de SSH (insensible à la casse).",
-    "proxmoxDockerDetection": "Détection Docker",
-    "proxmoxDockerDetectionDesc": "Liste de motifs de noms, séparés par des virgules, qui activent Docker pour les invités correspondants.",
-    "proxmoxPreferredRanges": "Plages IP préférées",
-    "proxmoxPreferredRangesDesc": "Préfixes séparés par des virgules, par ordre de priorité, pour la sélection d'adresse IP lorsqu'un invité possède plusieurs interfaces.",
-    "proxmoxAutoSync": "Synchronisation automatique des invités",
-    "proxmoxAutoSyncDesc": "Découvre périodiquement ce nœud Proxmox et crée ou met à jour les hôtes invités importés tant que votre session est déverrouillée.",
-    "proxmoxSyncInterval": "Intervalle de synchronisation (minutes)",
-    "proxmoxSyncIntervalDesc": "Minimum 5 minutes. Le planificateur ignore les sessions utilisateur verrouillées.",
-    "proxmoxMarkMissing": "Marquer les invités manquants",
-    "proxmoxMarkMissingDesc": "Ajoute une étiquette proxmox-missing lorsqu'un invité précédemment importé disparaît, au lieu de le supprimer.",
-    "proxmoxLastSync": "Dernière synchronisation",
-    "proxmoxLastSyncNever": "Pas encore synchronisé",
-    "proxmoxLastSyncNoResult": "Aucun détail de résultat",
-    "proxmoxLastSyncSummary": "{{created}} créé(s), {{updated}} mis à jour, {{markedMissing}} manquant(s), {{skipped}} ignoré(s)",
-    "proxmoxLastSyncStatus": {
-      "error": "Échec",
-      "pending": "En attente",
-      "success": "Succès"
-    },
-    "proxmoxDiscoverAction": "Découvrir et importer les invités Proxmox",
-    "proxmoxImportTitle": "Importer depuis Proxmox",
-    "proxmoxSelectHost": "Sélectionner un hôte Proxmox…",
-    "proxmoxDiscover": "Découvrir",
-    "proxmoxDiscovering": "Découverte en cours…",
-    "proxmoxDiscoverGuests": "Découvrir les invités",
-    "proxmoxSelectAll": "Tout sélectionner",
-    "proxmoxDeselectAll": "Tout désélectionner",
-    "proxmoxNoGuests": "Aucun invité trouvé sur ce nœud Proxmox.",
-    "proxmoxResultImported": "{{count}} importés",
-    "proxmoxResultUpdated": "{{count}} mis à jour",
-    "proxmoxResultFailed": "{{count}} échoués",
-    "proxmoxImportComplete": "Importation Proxmox terminée : {{summary}}",
-    "proxmoxDiscoveryFailed": "Échec de la découverte",
-    "proxmoxImportFailed": "Échec de l'importation",
-    "docsLink": "Voir la documentation",
-    "hostNotFound": "Hôte introuvable",
-    "loadingHost": "Chargement de l'hôte...",
-    "none": "Aucun",
-    "proxmoxGuestsSelected_one": "{{count}} invité, {{selected}} sélectionné",
-    "proxmoxGuestsSelected_other": "{{count}} invités, {{selected}} sélectionnés",
-    "proxmoxImportButton_one": "Importer {{count}} hôte",
-    "proxmoxImportButton_other": "Importer {{count}} hôtes"
-  },
-  "terminal": {
-    "connected": "Connecté"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/he_IL.json b/plugins/proxmox/locales/translated/he_IL.json
deleted file mode 100644
index a2921dbd8..000000000
--- a/plugins/proxmox/locales/translated/he_IL.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "סטטיסטיקות פרוקסמוקס"
-  },
-  "proxmoxStats": {
-    "tabTitle": "סטטיסטיקות פרוקסמוקס",
-    "cpuUsage": "שימוש במעבד",
-    "memoryUsage": "שימוש בזיכרון",
-    "diskUsage": "שימוש בדיסק",
-    "networkInterfaces": "ממשקי רשת",
-    "uptime": "זמן פעולה",
-    "systemInfo": "מידע מערכת",
-    "guestsSummary": "אורחים",
-    "storagePools": "בריכות אחסון",
-    "clusterHealth": "בריאות אשכול",
-    "cpuCores_one": "{{count}} ליבה",
-    "cpuCores_other": "{{count}} ליבות",
-    "used": "מְשׁוּמָשׁ",
-    "total": "סַך הַכֹּל",
-    "hostname": "שם מארח",
-    "kernel": "גַרעִין",
-    "pveVersion": "גרסת PVE",
-    "name": "שֵׁם",
-    "status": "סטָטוּס",
-    "type": "סוּג",
-    "cpu": "מעבד",
-    "mem": "מ",
-    "disk": "דִיסק",
-    "running": "רִיצָה",
-    "stopped": "נֶעצָר",
-    "guestCounts": "ריצה {{running}}/ ריצה{{total}}",
-    "inactive": "לֹא פָּעִיל",
-    "notClustered": "צומת עצמאי (לא חלק מאשכול)",
-    "quorate": "קוורט",
-    "notQuorate": "לא נמצא מניין חוקי",
-    "nodeOnline": "באינטרנט",
-    "nodeOffline": "לא מקוון",
-    "noHostSelected": "לא נבחר מארח",
-    "pveshNotFound": "pvesh לא נמצא - האם זהו צומת Proxmox?",
-    "nodeDetectionFailed": "לא ניתן לקבוע שם צומת Proxmox תקין",
-    "connecting": "מְקַשֵׁר...",
-    "connectionFailed": "נכשלה ההתחברות לצומת Proxmox",
-    "refresh": "לְרַעֲנֵן",
-    "searchGuests": "חיפוש אורחים...",
-    "filterAll": "כֹּל",
-    "filterVm": "מכונה וירטואלית",
-    "filterLxc": "LXC",
-    "noGuests": "לא נמצאו מכונות וירטואליות או מכולות LXC בצומת זה.",
-    "noGuestsMatch": "אין אורחים התואמים את המסננים הנוכחיים."
-  },
-  "hosts": {
-    "tabProxmox": "פרוקסמוקס",
-    "enableProxmoxStats": "הפעל סטטיסטיקות Proxmox",
-    "enableProxmoxStatsDesc": "הצג כרטיסיית סטטיסטיקות Proxmox עבור מארח זה עם סטטיסטיקות של צומת, אורח, אחסון ואשכול שנאספו דרך SSH.",
-    "proxmoxStatsPollInterval": "מרווח זמן בין סקר (שניות)",
-    "proxmoxStatsPollIntervalDesc": "מינימום 15 שניות. באיזו תדירות לרענן את סטטיסטיקות הצומת של Proxmox.",
-    "proxmoxStatsNodeOverride": "עקיפת שם הצומת",
-    "proxmoxStatsNodeOverrideDesc": "עקיפת זיהוי אוטומטי של שם הצומת Proxmox (מזוהה דרך שם המארח כברירת מחדל).",
-    "proxmoxStatsNodeOverridePlaceholder": "זוהה אוטומטית משם המארח",
-    "authTypeStepca": "שלב CA",
-    "proxmoxIntegration": "אינטגרציה של פרוקסמוקס",
-    "enableProxmox": "הפעל את Proxmox",
-    "enableProxmoxDesc": "סמן מארח זה כצומת Proxmox. מאפשר גילוי אורחים וייבוא ישירות ממארח זה.",
-    "proxmoxDefaultAuthType": "סוג אימות ברירת מחדל",
-    "proxmoxDefaultAuthTypeDesc": "שיטת אימות הוחלת על מארחי אורחים מיובאים. בחר את סוג האימות שמתאים לאופן שבו אתה מתחבר לאורחים שלך.",
-    "authTypePassword": "סִיסמָה",
-    "authTypeKey": "מפתח SSH",
-    "authTypeCredential": "תְעוּדָה",
-    "authTypeOpkssh": "אופקש",
-    "authTypeNone": "אַף לֹא אֶחָד",
-    "proxmoxDefaultCredential": "אישור ברירת מחדל",
-    "proxmoxDefaultCredentialDesc": "אישור המשמש עבור מארחים אורחים מיובאים כאשר סוג האימות מוגדר לאישור.",
-    "proxmoxWindowsDetection": "זיהוי Windows / RDP",
-    "proxmoxWindowsDetectionDesc": "תבניות שמות מופרדות בפסיקים המפעילות RDP במקום SSH (לא תלויות רישיות)",
-    "proxmoxDockerDetection": "זיהוי דוקר",
-    "proxmoxDockerDetectionDesc": "תבניות שמות מופרדות בפסיקים המאפשרות ל-Docker להתאים אורחים",
-    "proxmoxPreferredRanges": "טווחי IP מועדפים",
-    "proxmoxPreferredRangesDesc": "קידומות מופרדות בפסיקים בסדר עדיפות לבחירת IP כאשר לאורח יש ממשקים מרובים",
-    "proxmoxAutoSync": "סנכרון אוטומטי של אורחים",
-    "proxmoxAutoSyncDesc": "גלה מעת לעת את צומת Proxmox הזה וצור או עדכן מארחי אורחים מיובאים בזמן שההפעלה שלך אינה נעולה.",
-    "proxmoxSyncInterval": "מרווח סנכרון (דקות)",
-    "proxmoxSyncIntervalDesc": "מינימום 5 דקות. המתזמן מדלג על סשנים נעולים של משתמשים.",
-    "proxmoxMarkMissing": "סמן אורחים חסרים",
-    "proxmoxMarkMissingDesc": "הוסף תג proxmox-missing כאשר אורח שיובא בעבר נעלם במקום למחוק אותו.",
-    "proxmoxLastSync": "סנכרון אחרון",
-    "proxmoxLastSyncNever": "עדיין לא מסונכרן",
-    "proxmoxLastSyncNoResult": "אין פרטי תוצאה",
-    "proxmoxLastSyncSummary": "{{created}} נוצר, {{updated}} עודכן, {{markedMissing}} חסר, {{skipped}} דילג",
-    "proxmoxLastSyncStatus": {
-      "error": "נִכשָׁל",
-      "pending": "תָלוּי וְעוֹמֵד",
-      "success": "הַצלָחָה"
-    },
-    "proxmoxDiscoverAction": "גלה וייבא אורחי Proxmox",
-    "proxmoxImportTitle": "ייבוא מ-Proxmox",
-    "proxmoxSelectHost": "בחר מארח Proxmox…",
-    "proxmoxDiscover": "לְגַלוֹת",
-    "proxmoxDiscovering": "גילוי…",
-    "proxmoxDiscoverGuests": "גלה אורחים",
-    "proxmoxSelectAll": "בחר הכל",
-    "proxmoxDeselectAll": "בטל את הבחירה של הכל",
-    "proxmoxNoGuests": "לא נמצאו אורחים בצומת Proxmox זה.",
-    "proxmoxResultImported": "{{count}} מיובא",
-    "proxmoxResultUpdated": "{{count}} updated",
-    "proxmoxResultFailed": "{{count}} נכשל",
-    "proxmoxImportComplete": "ייבוא Proxmox הושלם: {{summary}}",
-    "proxmoxDiscoveryFailed": "הגילוי נכשל",
-    "proxmoxImportFailed": "הייבוא נכשל",
-    "docsLink": "הצג מסמכים",
-    "hostNotFound": "המארח לא נמצא",
-    "loadingHost": "טוען מארח...",
-    "none": "אַף לֹא אֶחָד",
-    "proxmoxGuestsSelected_one": "{{count}} אורח, {{selected}} נבחר",
-    "proxmoxGuestsSelected_other": "{{count}} אורחים, {{selected}} נבחרו",
-    "proxmoxImportButton_one": "ייבוא מארח {{count}}",
-    "proxmoxImportButton_other": "ייבוא מארחים {{count}}"
-  },
-  "terminal": {
-    "connected": "מְחוּבָּר"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/hi_IN.json b/plugins/proxmox/locales/translated/hi_IN.json
deleted file mode 100644
index 47af863f0..000000000
--- a/plugins/proxmox/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "प्रॉक्समॉक्स आँकड़े"
-  },
-  "proxmoxStats": {
-    "tabTitle": "प्रॉक्समॉक्स आँकड़े",
-    "cpuUsage": "CPU उपयोग",
-    "memoryUsage": "मेमोरी उपयोग",
-    "diskUsage": "डिस्क उपयोग",
-    "networkInterfaces": "नेटवर्क इंटरफ़ेस",
-    "uptime": "अपटाइम",
-    "systemInfo": "सिस्टम जानकारी",
-    "guestsSummary": "अतिथियों",
-    "storagePools": "भंडारण पूल",
-    "clusterHealth": "क्लस्टर स्वास्थ्य",
-    "cpuCores_one": "{{count}} कोर",
-    "cpuCores_other": "{{count}} कोर",
-    "used": "प्रयुक्त",
-    "total": "कुल",
-    "hostname": "होस्टनाम",
-    "kernel": "कर्नेल",
-    "pveVersion": "PVE संस्करण",
-    "name": "नाम",
-    "status": "स्थिति",
-    "type": "प्रकार",
-    "cpu": "CPU",
-    "mem": "मेम",
-    "disk": "डिस्क",
-    "running": "चालू",
-    "stopped": "बंद",
-    "guestCounts": "{{running}}/{{total}} चल रहा है",
-    "inactive": "निष्क्रिय",
-    "notClustered": "स्टैंडअलोन नोड (क्लस्टर का हिस्सा नहीं)",
-    "quorate": "कोरेट",
-    "notQuorate": "निर्धारित संख्या पूरी नहीं हुई",
-    "nodeOnline": "ऑनलाइन",
-    "nodeOffline": "ऑफलाइन",
-    "noHostSelected": "कोई होस्ट चयनित नहीं है",
-    "pveshNotFound": "pvesh नहीं मिला - क्या यह Proxmox नोड है?",
-    "nodeDetectionFailed": "वैध प्रोक्समॉक्स नोड नाम निर्धारित करने में असमर्थ",
-    "connecting": "कनेक्ट हो रहा है...",
-    "connectionFailed": "Proxmox नोड से कनेक्ट करने में विफल",
-    "refresh": "ताज़ा करें",
-    "searchGuests": "अतिथियों को खोजें...",
-    "filterAll": "सभी",
-    "filterVm": "वीएम",
-    "filterLxc": "एलएक्ससी",
-    "noGuests": "इस नोड पर कोई वीएम या एलएक्ससी कंटेनर नहीं मिला।",
-    "noGuestsMatch": "वर्तमान फ़िल्टरों से कोई अतिथि मेल नहीं खाता।"
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Proxmox सांख्यिकी सक्षम करें",
-    "enableProxmoxStatsDesc": "इस होस्ट के लिए एक प्रोक्समॉक्स स्टैट्स टैब दिखाएं जिसमें एसएसएच के माध्यम से एकत्रित किए गए लाइव नोड, गेस्ट, स्टोरेज और क्लस्टर स्टैट्स शामिल हों।",
-    "proxmoxStatsPollInterval": "मतदान अंतराल (सेकंड)",
-    "proxmoxStatsPollIntervalDesc": "कम से कम 15 सेकंड। प्रोक्समॉक्स नोड के आंकड़ों को कितनी बार रीफ्रेश करना है?",
-    "proxmoxStatsNodeOverride": "नोड नाम ओवरराइड",
-    "proxmoxStatsNodeOverrideDesc": "Proxmox नोड नाम की स्वतः पहचान को ओवरराइड करें (जो डिफ़ॉल्ट रूप से होस्टनाम के माध्यम से पता लगाया जाता है)।",
-    "proxmoxStatsNodeOverridePlaceholder": "होस्टनाम से स्वतः पता लगाया गया",
-    "authTypeStepca": "स्टेप सीए",
-    "proxmoxIntegration": "Proxmox एकीकरण",
-    "enableProxmox": "Proxmox सक्षम करें",
-    "enableProxmoxDesc": "इस होस्ट को Proxmox नोड के रूप में चिह्नित करें। इस होस्ट से सीधे अतिथि खोज और आयात सक्षम करता है।",
-    "proxmoxDefaultAuthType": "डिफ़ॉल्ट प्रमाणीकरण प्रकार",
-    "proxmoxDefaultAuthTypeDesc": "आयातित अतिथि होस्ट पर लागू प्रमाणीकरण विधि। वह प्रमाणीकरण प्रकार चुनें जो आपके अतिथियों से कनेक्ट करने के तरीके से मेल खाता हो।",
-    "authTypePassword": "पासवर्ड",
-    "authTypeKey": "SSH कुंजी",
-    "authTypeCredential": "क्रेडेंशियल",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "कोई नहीं",
-    "proxmoxDefaultCredential": "डिफ़ॉल्ट क्रेडेंशियल",
-    "proxmoxDefaultCredentialDesc": "जब प्रमाणीकरण प्रकार 'क्रेडेंशियल' पर सेट होता है तब आयातित अतिथि होस्ट के लिए उपयोग किया जाने वाला क्रेडेंशियल।",
-    "proxmoxWindowsDetection": "Windows / RDP पहचान",
-    "proxmoxWindowsDetectionDesc": "अल्पविराम से अलग नाम पैटर्न जो SSH के बजाय RDP ट्रिगर करते हैं (अक्षर-आकार असंवेदी)",
-    "proxmoxDockerDetection": "Docker पहचान",
-    "proxmoxDockerDetectionDesc": "अल्पविराम से अलग नाम पैटर्न जो मिलान वाले अतिथियों के लिए Docker सक्षम करते हैं",
-    "proxmoxPreferredRanges": "पसंदीदा IP श्रेणियाँ",
-    "proxmoxPreferredRangesDesc": "अतिथि के पास कई इंटरफ़ेस होने पर IP चयन के लिए प्राथमिकता क्रम में अल्पविराम से अलग उपसर्ग",
-    "proxmoxAutoSync": "अतिथि स्वतः सिंक",
-    "proxmoxAutoSyncDesc": "जब आपका सत्र अनलॉक हो तो समय-समय पर इस Proxmox नोड की खोज करें और आयातित अतिथि होस्ट बनाएँ या अपडेट करें।",
-    "proxmoxSyncInterval": "सिंक अंतराल (मिनट)",
-    "proxmoxSyncIntervalDesc": "न्यूनतम 5 मिनट। शेड्यूलर लॉक उपयोगकर्ता सत्रों को छोड़ देता है।",
-    "proxmoxMarkMissing": "गायब अतिथियों को चिह्नित करें",
-    "proxmoxMarkMissingDesc": "जब पहले से आयातित कोई अतिथि गायब हो जाए तो उसे हटाने के बजाय एक 'proxmox-missing' टैग जोड़ें।",
-    "proxmoxLastSync": "अंतिम सिंक",
-    "proxmoxLastSyncNever": "अभी तक सिंक नहीं हुआ",
-    "proxmoxLastSyncNoResult": "कोई परिणाम विवरण नहीं",
-    "proxmoxLastSyncSummary": "{{created}} बनाए गए, {{updated}} अपडेट किए गए, {{markedMissing}} गायब, {{skipped}} छोड़े गए",
-    "proxmoxLastSyncStatus": {
-      "error": "विफल",
-      "pending": "लंबित",
-      "success": "सफलता"
-    },
-    "proxmoxDiscoverAction": "Proxmox अतिथियों की खोज करें और आयात करें",
-    "proxmoxImportTitle": "Proxmox से आयात करें",
-    "proxmoxSelectHost": "एक Proxmox होस्ट चुनें…",
-    "proxmoxDiscover": "खोजें",
-    "proxmoxDiscovering": "खोज रहा है…",
-    "proxmoxDiscoverGuests": "अतिथियों की खोज करें",
-    "proxmoxSelectAll": "सभी चुनें",
-    "proxmoxDeselectAll": "सभी अचयनित करें",
-    "proxmoxNoGuests": "इस Proxmox नोड पर कोई अतिथि नहीं मिला।",
-    "proxmoxResultImported": "{{count}} आयातित",
-    "proxmoxResultUpdated": "{{count}} अद्यतित",
-    "proxmoxResultFailed": "{{count}} विफल",
-    "proxmoxImportComplete": "Proxmox आयात पूर्ण: {{summary}}",
-    "proxmoxDiscoveryFailed": "डिस्कवरी विफल",
-    "proxmoxImportFailed": "आयात विफल",
-    "docsLink": "दस्तावेज़ देखें",
-    "hostNotFound": "होस्ट नहीं मिला",
-    "loadingHost": "होस्ट लोड हो रहा है...",
-    "none": "कोई नहीं",
-    "proxmoxGuestsSelected_one": "{{count}} अतिथि, {{selected}} चयनित",
-    "proxmoxGuestsSelected_other": "{{count}} अतिथि, {{selected}} चयनित",
-    "proxmoxImportButton_one": "{{count}} होस्ट आयात करें",
-    "proxmoxImportButton_other": "{{count}} होस्ट आयात करें"
-  },
-  "terminal": {
-    "connected": "कनेक्टेड"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/hu_HU.json b/plugins/proxmox/locales/translated/hu_HU.json
deleted file mode 100644
index c778ce3af..000000000
--- a/plugins/proxmox/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Proxmox statisztikák"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Proxmox statisztikák",
-    "cpuUsage": "CPU-használat",
-    "memoryUsage": "Memóriahasználat",
-    "diskUsage": "Lemezhasználat",
-    "networkInterfaces": "Hálózati interfészek",
-    "uptime": "Üzemidő",
-    "systemInfo": "Rendszerinformációk",
-    "guestsSummary": "Vendégek",
-    "storagePools": "Tárolómedencék",
-    "clusterHealth": "Klaszter Egészségügy",
-    "cpuCores_one": "{{count}} Mag",
-    "cpuCores_other": "{{count}} Magok",
-    "used": "Használt",
-    "total": "Teljes",
-    "hostname": "Gazdagépnév",
-    "kernel": "Kernel",
-    "pveVersion": "PVE verzió",
-    "name": "Név",
-    "status": "Állapot",
-    "type": "Típus",
-    "cpu": "CPU",
-    "mem": "Mem",
-    "disk": "Korong",
-    "running": "Futás",
-    "stopped": "Leállítva",
-    "guestCounts": "{{running}}/{{total}} fut",
-    "inactive": "Inaktív",
-    "notClustered": "Önálló csomópont (nem része fürtnek)",
-    "quorate": "Kvórat",
-    "notQuorate": "Nem határozatképes",
-    "nodeOnline": "Online",
-    "nodeOffline": "Offline",
-    "noHostSelected": "Nincs kiválasztva gazdagép",
-    "pveshNotFound": "pvesh nem található - ez egy Proxmox csomópont?",
-    "nodeDetectionFailed": "Nem sikerült érvényes Proxmox csomópontnevet meghatározni.",
-    "connecting": "Kapcsolódás...",
-    "connectionFailed": "Nem sikerült csatlakozni a Proxmox csomóponthoz",
-    "refresh": "Frissítés",
-    "searchGuests": "Vendégek keresése...",
-    "filterAll": "Minden",
-    "filterVm": "Virtuális gép",
-    "filterLxc": "LXC",
-    "noGuests": "Nem találhatók virtuális gépek vagy LXC konténerek ezen a csomóponton.",
-    "noGuestsMatch": "Egyik vendég sem felel meg a jelenlegi szűrőknek."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Proxmox statisztikák engedélyezése",
-    "enableProxmoxStatsDesc": "Proxmox Statisztika fül megjelenítése ehhez a gazdagéphez, élő csomópont-, vendég-, tároló- és fürtstatisztikákkal, SSH-n keresztül gyűjtött adatokkal.",
-    "proxmoxStatsPollInterval": "Lekérdezési intervallum (másodperc)",
-    "proxmoxStatsPollIntervalDesc": "Minimum 15 másodperc. A Proxmox csomópont statisztikáinak frissítési gyakorisága.",
-    "proxmoxStatsNodeOverride": "Csomópont nevének felülbírálása",
-    "proxmoxStatsNodeOverrideDesc": "A Proxmox csomópont nevének automatikus észlelésének felülbírálása (alapértelmezés szerint a gazdagépnév alapján észlelhető).",
-    "proxmoxStatsNodeOverridePlaceholder": "Automatikusan felismerve a gazdagépnév alapján",
-    "authTypeStepca": "CA lépés",
-    "proxmoxIntegration": "Proxmox integráció",
-    "enableProxmox": "Proxmox engedélyezése",
-    "enableProxmoxDesc": "Jelölje meg ezt a gépet Proxmox csomópontként. Engedélyezi a vendégfelderítést és az importálást közvetlenül erről a gépről.",
-    "proxmoxDefaultAuthType": "Alapértelmezett hitelesítési típus",
-    "proxmoxDefaultAuthTypeDesc": "Hitelesítési módszer alkalmazva az importált vendéggazdagépekre. Válassza ki azt a hitelesítési típust, amelyik megfelel a vendéggazdagépekhez való csatlakozás módjának.",
-    "authTypePassword": "Jelszó",
-    "authTypeKey": "SSH-kulcs",
-    "authTypeCredential": "Hitelesítő adat",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "Egyik sem",
-    "proxmoxDefaultCredential": "Alapértelmezett hitelesítő adat",
-    "proxmoxDefaultCredentialDesc": "Az importált vendéggazdagépekhez használt hitelesítő adat, ha a hitelesítési típus Hitelesítő adatra van állítva.",
-    "proxmoxWindowsDetection": "Windows/RDP-észlelés",
-    "proxmoxWindowsDetectionDesc": "Vesszővel elválasztott névminták, amelyek RDP-t indítanak el SSH helyett (kis- és nagybetűket nem megkülönböztető)",
-    "proxmoxDockerDetection": "Docker-észlelés",
-    "proxmoxDockerDetectionDesc": "Vesszővel elválasztott névminták, amelyek lehetővé teszik a Docker számára a vendégek egyezését",
-    "proxmoxPreferredRanges": "Előnyben részesített IP-tartományok",
-    "proxmoxPreferredRangesDesc": "Vesszővel elválasztott előtagok prioritási sorrendben IP-cím kiválasztásához, ha egy vendégnek több interfésze van",
-    "proxmoxAutoSync": "Vendégek automatikus szinkronizálása",
-    "proxmoxAutoSyncDesc": "Rendszeresen fedezze fel ezt a Proxmox csomópontot, és hozzon létre vagy frissítsen importált vendéggazdagépeket, miközben a munkamenet fel van oldva.",
-    "proxmoxSyncInterval": "Szinkronizálási időköz (perc)",
-    "proxmoxSyncIntervalDesc": "Minimum 5 perc. Az ütemező kihagyja a zárolt felhasználói munkameneteket.",
-    "proxmoxMarkMissing": "Jelöld meg az eltűnt vendégeket",
-    "proxmoxMarkMissingDesc": "Hozzáad egy proxmox-missing címkét, amikor egy korábban importált vendég eltűnik, ahelyett, hogy törölné azt.",
-    "proxmoxLastSync": "Utolsó szinkronizálás",
-    "proxmoxLastSyncNever": "Még nincs szinkronizálva",
-    "proxmoxLastSyncNoResult": "Nincsenek találati részletek",
-    "proxmoxLastSyncSummary": "{{created}} létrehozva, {{updated}} frissítve, {{markedMissing}} hiányzik, {{skipped}} kihagyva",
-    "proxmoxLastSyncStatus": {
-      "error": "Sikertelen",
-      "pending": "Függőben levő",
-      "success": "Siker"
-    },
-    "proxmoxDiscoverAction": "Proxmox vendégek felfedezése és importálása",
-    "proxmoxImportTitle": "Importálás a Proxmoxból",
-    "proxmoxSelectHost": "Válasszon egy Proxmox hosztot…",
-    "proxmoxDiscover": "Felfedezés",
-    "proxmoxDiscovering": "Felfedezés…",
-    "proxmoxDiscoverGuests": "Fedezze fel a vendégeket",
-    "proxmoxSelectAll": "Összes kijelölése",
-    "proxmoxDeselectAll": "Összes kijelölés törlése",
-    "proxmoxNoGuests": "Nem találhatók vendégek ezen a Proxmox csomóponton.",
-    "proxmoxResultImported": "{{count}} importálva",
-    "proxmoxResultUpdated": "{{count}} frissítve",
-    "proxmoxResultFailed": "{{count}} sikertelen",
-    "proxmoxImportComplete": "Proxmox importálás kész: {{summary}}",
-    "proxmoxDiscoveryFailed": "A felfedezés sikertelen",
-    "proxmoxImportFailed": "Importálás sikertelen",
-    "docsLink": "Dokumentumok megtekintése",
-    "hostNotFound": "Nem található gazdagép",
-    "loadingHost": "Gazdagép betöltése...",
-    "none": "Egyik sem",
-    "proxmoxGuestsSelected_one": "{{count}} vendég, {{selected}} kiválasztva",
-    "proxmoxGuestsSelected_other": "{{count}} vendég, {{selected}} kiválasztva",
-    "proxmoxImportButton_one": "Importálja a {{count}} gazdagépet",
-    "proxmoxImportButton_other": "{{count}} hosztok importálása"
-  },
-  "terminal": {
-    "connected": "Csatlakoztatva"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/id_ID.json b/plugins/proxmox/locales/translated/id_ID.json
deleted file mode 100644
index 1a2d6a7d4..000000000
--- a/plugins/proxmox/locales/translated/id_ID.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Statistik Proxmox"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Statistik Proxmox",
-    "cpuUsage": "Penggunaan CPU",
-    "memoryUsage": "Penggunaan Memori",
-    "diskUsage": "Penggunaan Disk",
-    "networkInterfaces": "Antarmuka Jaringan",
-    "uptime": "Waktu aktif",
-    "systemInfo": "Informasi Sistem",
-    "guestsSummary": "Tamu",
-    "storagePools": "Kolam Penyimpanan",
-    "clusterHealth": "Kesehatan Klaster",
-    "cpuCores_one": "{{count}} Inti",
-    "cpuCores_other": "{{count}} Inti",
-    "used": "Digunakan",
-    "total": "Total",
-    "hostname": "Nama host",
-    "kernel": "Inti",
-    "pveVersion": "Versi PVE",
-    "name": "Nama",
-    "status": "Status",
-    "type": "Jenis",
-    "cpu": "CPU",
-    "mem": "Mem",
-    "disk": "Disk",
-    "running": "Berlari",
-    "stopped": "Berhenti",
-    "guestCounts": "{{running}}/{{total}} berjalan",
-    "inactive": "Tidak aktif",
-    "notClustered": "Node mandiri (bukan bagian dari klaster)",
-    "quorate": "Kutipan",
-    "notQuorate": "Tidak memenuhi kuorum",
-    "nodeOnline": "On line",
-    "nodeOffline": "Offline",
-    "noHostSelected": "Tidak ada pembawa acara yang dipilih.",
-    "pveshNotFound": "pvesh tidak ditemukan - apakah ini node Proxmox?",
-    "nodeDetectionFailed": "Tidak dapat menentukan nama node Proxmox yang valid.",
-    "connecting": "Menghubungkan...",
-    "connectionFailed": "Gagal terhubung ke node Proxmox",
-    "refresh": "Menyegarkan",
-    "searchGuests": "Mencari tamu...",
-    "filterAll": "Semua",
-    "filterVm": "Mesin virtual",
-    "filterLxc": "LXC",
-    "noGuests": "Tidak ditemukan VM atau kontainer LXC pada node ini.",
-    "noGuestsMatch": "Tidak ada tamu yang sesuai dengan filter saat ini."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Aktifkan Statistik Proxmox",
-    "enableProxmoxStatsDesc": "Tampilkan tab Statistik Proxmox untuk host ini dengan statistik node, guest, penyimpanan, dan cluster secara langsung yang dikumpulkan melalui SSH.",
-    "proxmoxStatsPollInterval": "Interval polling (detik)",
-    "proxmoxStatsPollIntervalDesc": "Minimal 15 detik. Seberapa sering statistik node Proxmox diperbarui.",
-    "proxmoxStatsNodeOverride": "Penggantian nama node",
-    "proxmoxStatsNodeOverrideDesc": "Ganti deteksi otomatis nama node Proxmox (yang secara default dideteksi melalui nama host).",
-    "proxmoxStatsNodeOverridePlaceholder": "Terdeteksi secara otomatis dari nama host",
-    "authTypeStepca": "Langkah CA",
-    "proxmoxIntegration": "Integrasi Proxmox",
-    "enableProxmox": "Aktifkan Proxmox",
-    "enableProxmoxDesc": "Tandai host ini sebagai node Proxmox. Memungkinkan penemuan dan impor guest langsung dari host ini.",
-    "proxmoxDefaultAuthType": "Jenis Otentikasi Default",
-    "proxmoxDefaultAuthTypeDesc": "Metode otentikasi yang diterapkan pada host tamu yang diimpor. Pilih jenis otentikasi yang sesuai dengan cara Anda terhubung dengan tamu Anda.",
-    "authTypePassword": "Kata sandi",
-    "authTypeKey": "Kunci SSH",
-    "authTypeCredential": "Mandat",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "Tidak ada",
-    "proxmoxDefaultCredential": "Kredensial Default",
-    "proxmoxDefaultCredentialDesc": "Kredensial yang digunakan untuk host tamu yang diimpor ketika tipe otentikasi diatur ke Kredensial.",
-    "proxmoxWindowsDetection": "Deteksi Windows / RDP",
-    "proxmoxWindowsDetectionDesc": "Pola nama yang dipisahkan koma yang memicu RDP alih-alih SSH (tidak peka huruf besar/kecil)",
-    "proxmoxDockerDetection": "Deteksi Docker",
-    "proxmoxDockerDetectionDesc": "Pola nama yang dipisahkan koma yang memungkinkan Docker untuk mencocokkan mesin virtual.",
-    "proxmoxPreferredRanges": "Rentang IP yang disukai",
-    "proxmoxPreferredRangesDesc": "Awalan yang dipisahkan koma dalam urutan prioritas untuk pemilihan IP ketika tamu memiliki beberapa antarmuka.",
-    "proxmoxAutoSync": "Sinkronisasi otomatis tamu",
-    "proxmoxAutoSyncDesc": "Secara berkala, temukan node Proxmox ini dan buat atau perbarui host tamu yang diimpor saat sesi Anda tidak terkunci.",
-    "proxmoxSyncInterval": "Interval sinkronisasi (menit)",
-    "proxmoxSyncIntervalDesc": "Minimal 5 menit. Penjadwal akan melewati sesi pengguna yang terkunci.",
-    "proxmoxMarkMissing": "Tandai tamu yang hilang",
-    "proxmoxMarkMissingDesc": "Tambahkan tag proxmox-missing ketika tamu yang sebelumnya diimpor menghilang, alih-alih menghapusnya.",
-    "proxmoxLastSync": "Sinkronisasi terakhir",
-    "proxmoxLastSyncNever": "Belum disinkronkan",
-    "proxmoxLastSyncNoResult": "Tidak ada detail hasil.",
-    "proxmoxLastSyncSummary": "{{created}} dibuat, {{updated}} diperbarui, {{markedMissing}} hilang, {{skipped}} dilewati",
-    "proxmoxLastSyncStatus": {
-      "error": "Gagal",
-      "pending": "Tertunda",
-      "success": "Kesuksesan"
-    },
-    "proxmoxDiscoverAction": "Temukan & impor tamu Proxmox",
-    "proxmoxImportTitle": "Impor dari Proxmox",
-    "proxmoxSelectHost": "Pilih host Proxmox…",
-    "proxmoxDiscover": "Menemukan",
-    "proxmoxDiscovering": "Menemukan…",
-    "proxmoxDiscoverGuests": "Temukan tamu",
-    "proxmoxSelectAll": "Pilih semua",
-    "proxmoxDeselectAll": "Batalkan pilihan semua",
-    "proxmoxNoGuests": "Tidak ada tamu yang ditemukan di node Proxmox ini.",
-    "proxmoxResultImported": "{{count}} diimpor",
-    "proxmoxResultUpdated": "{{count}} diperbarui",
-    "proxmoxResultFailed": "{{count}} gagal",
-    "proxmoxImportComplete": "Impor Proxmox selesai: {{summary}}",
-    "proxmoxDiscoveryFailed": "Penemuan gagal",
-    "proxmoxImportFailed": "Impor gagal",
-    "docsLink": "Lihat dokumen",
-    "hostNotFound": "Host tidak ditemukan",
-    "loadingHost": "Memuat host...",
-    "none": "Tidak ada",
-    "proxmoxGuestsSelected_one": "{{count}} tamu, {{selected}} terpilih",
-    "proxmoxGuestsSelected_other": "{{count}} tamu, {{selected}} terpilih",
-    "proxmoxImportButton_one": "Impor {{count}} host",
-    "proxmoxImportButton_other": "Impor {{count}} host"
-  },
-  "terminal": {
-    "connected": "Terhubung"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/it_IT.json b/plugins/proxmox/locales/translated/it_IT.json
deleted file mode 100644
index 3d65a8797..000000000
--- a/plugins/proxmox/locales/translated/it_IT.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Statistiche di Proxmox"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Statistiche di Proxmox",
-    "cpuUsage": "Utilizzo CPU",
-    "memoryUsage": "Utilizzo memoria",
-    "diskUsage": "Utilizzo disco",
-    "networkInterfaces": "Interfacce di rete",
-    "uptime": "Uptime",
-    "systemInfo": "Informazioni di sistema",
-    "guestsSummary": "Ospiti",
-    "storagePools": "Piscine di stoccaggio",
-    "clusterHealth": "Cluster Health",
-    "cpuCores_one": "{{count}} Core",
-    "cpuCores_other": "{{count}} Core",
-    "used": "Usato",
-    "total": "Totale",
-    "hostname": "Nome host",
-    "kernel": "Kernel",
-    "pveVersion": "Versione PVE",
-    "name": "Nome",
-    "status": "Stato",
-    "type": "Tipo",
-    "cpu": "CPU",
-    "mem": "Mem",
-    "disk": "Disco",
-    "running": "In esecuzione",
-    "stopped": "Arrestato",
-    "guestCounts": "{{running}}/{{total}} in esecuzione",
-    "inactive": "Inattivo",
-    "notClustered": "Nodo autonomo (non facente parte di un cluster)",
-    "quorate": "Citazione",
-    "notQuorate": "Non è stato raggiunto il quorum",
-    "nodeOnline": "Online",
-    "nodeOffline": "Offline",
-    "noHostSelected": "Nessun host selezionato",
-    "pveshNotFound": "pvesh non trovato: si tratta di un nodo Proxmox?",
-    "nodeDetectionFailed": "Impossibile determinare un nome nodo Proxmox valido",
-    "connecting": "Connessione in corso...",
-    "connectionFailed": "Impossibile connettersi al nodo Proxmox",
-    "refresh": "Aggiorna",
-    "searchGuests": "Cerca ospiti...",
-    "filterAll": "Tutte",
-    "filterVm": "VM",
-    "filterLxc": "LXC",
-    "noGuests": "Nessuna macchina virtuale o container LXC trovato su questo nodo.",
-    "noGuestsMatch": "Nessun ospite corrisponde ai filtri attualmente attivi."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Abilita le statistiche di Proxmox",
-    "enableProxmoxStatsDesc": "Mostra la scheda Statistiche di Proxmox per questo host con statistiche in tempo reale su nodi, guest, storage e cluster, raccolte tramite SSH.",
-    "proxmoxStatsPollInterval": "Intervallo di polling (secondi)",
-    "proxmoxStatsPollIntervalDesc": "Minimo 15 secondi. Frequenza di aggiornamento delle statistiche dei nodi Proxmox.",
-    "proxmoxStatsNodeOverride": "Sovrascrittura del nome del nodo",
-    "proxmoxStatsNodeOverrideDesc": "Ignora il rilevamento automatico del nome del nodo Proxmox (rilevato tramite nome host per impostazione predefinita).",
-    "proxmoxStatsNodeOverridePlaceholder": "Rilevato automaticamente dal nome host",
-    "authTypeStepca": "Passo CA",
-    "proxmoxIntegration": "Integrazione Proxmox",
-    "enableProxmox": "Abilita Proxmox",
-    "enableProxmoxDesc": "Contrassegna questo host come nodo Proxmox. Abilita il discovery e l'importazione di guest direttamente da questo host.",
-    "proxmoxDefaultAuthType": "Tipo di autenticazione predefinito",
-    "proxmoxDefaultAuthTypeDesc": "Metodo di autenticazione applicato agli host guest importati. Scegli il tipo di autenticazione corrispondente a come ti connetti ai tuoi guest.",
-    "authTypePassword": "Password",
-    "authTypeKey": "Chiave SSH",
-    "authTypeCredential": "Credenziale",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "Nessuno",
-    "proxmoxDefaultCredential": "Credenziale predefinita",
-    "proxmoxDefaultCredentialDesc": "Credenziale utilizzata per gli host guest importati quando il tipo di autenticazione è impostato su Credenziale.",
-    "proxmoxWindowsDetection": "Rilevamento Windows / RDP",
-    "proxmoxWindowsDetectionDesc": "Elenco di pattern di nomi separati da virgole che attivano RDP invece di SSH (case‑insensitive)",
-    "proxmoxDockerDetection": "Rilevamento Docker",
-    "proxmoxDockerDetectionDesc": "Elenco di pattern di nomi separati da virgole che abilitano Docker per i guest corrispondenti",
-    "proxmoxPreferredRanges": "Intervalli IP preferiti",
-    "proxmoxPreferredRangesDesc": "Prefissi separati da virgole in ordine di priorità per la selezione dell'IP quando un guest ha più interfacce",
-    "proxmoxAutoSync": "Sincronizzazione automatica dei guest",
-    "proxmoxAutoSyncDesc": "Scopri periodicamente questo nodo Proxmox e crea o aggiorna gli host guest importati mentre la sessione è sbloccata.",
-    "proxmoxSyncInterval": "Intervallo di sincronizzazione (minuti)",
-    "proxmoxSyncIntervalDesc": "Minimo 5 minuti. La pianificazione salta le sessioni utente bloccate.",
-    "proxmoxMarkMissing": "Segna i guest mancanti",
-    "proxmoxMarkMissingDesc": "Aggiungi un tag proxmox-missing quando un guest precedentemente importato scompare invece di eliminarlo.",
-    "proxmoxLastSync": "Ultima sincronizzazione",
-    "proxmoxLastSyncNever": "Non ancora sincronizzato",
-    "proxmoxLastSyncNoResult": "Nessun dettaglio del risultato",
-    "proxmoxLastSyncSummary": "{{created}} creati, {{updated}} aggiornati, {{markedMissing}} mancanti, {{skipped}} saltati",
-    "proxmoxLastSyncStatus": {
-      "error": "Fallita",
-      "pending": "In attesa",
-      "success": "Riuscita"
-    },
-    "proxmoxDiscoverAction": "Scopri e importa guest Proxmox",
-    "proxmoxImportTitle": "Importa da Proxmox",
-    "proxmoxSelectHost": "Seleziona un host Proxmox…",
-    "proxmoxDiscover": "Scopri",
-    "proxmoxDiscovering": "Scoperta in corso…",
-    "proxmoxDiscoverGuests": "Scopri guest",
-    "proxmoxSelectAll": "Seleziona tutto",
-    "proxmoxDeselectAll": "Deseleziona tutto",
-    "proxmoxNoGuests": "Nessun guest trovato su questo nodo Proxmox.",
-    "proxmoxResultImported": "{{count}} importati",
-    "proxmoxResultUpdated": "{{count}} aggiornati",
-    "proxmoxResultFailed": "{{count}} falliti",
-    "proxmoxImportComplete": "Importazione Proxmox completata: {{summary}}",
-    "proxmoxDiscoveryFailed": "Rilevamento non riuscito",
-    "proxmoxImportFailed": "Importazione non riuscita",
-    "docsLink": "Visualizza documentazione",
-    "hostNotFound": "Host non trovato",
-    "loadingHost": "Caricamento host...",
-    "none": "Nessuna",
-    "proxmoxGuestsSelected_one": "{{count}} ospite, {{selected}} selezionato",
-    "proxmoxGuestsSelected_other": "{{count}} ospiti, {{selected}} selezionati",
-    "proxmoxImportButton_one": "Importa {{count}} host",
-    "proxmoxImportButton_other": "Importa {{count}} host"
-  },
-  "terminal": {
-    "connected": "Connesso"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/ja_JP.json b/plugins/proxmox/locales/translated/ja_JP.json
deleted file mode 100644
index 79738a230..000000000
--- a/plugins/proxmox/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Proxmox統計情報"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Proxmox統計情報",
-    "cpuUsage": "CPU使用率",
-    "memoryUsage": "メモリ使用量",
-    "diskUsage": "ディスク使用率",
-    "networkInterfaces": "ネットワークインターフェース",
-    "uptime": "アップタイム",
-    "systemInfo": "システム情報",
-    "guestsSummary": "ゲスト",
-    "storagePools": "ストレージプール",
-    "clusterHealth": "クラスターヘルス",
-    "cpuCores_one": "{{count}} コア",
-    "cpuCores_other": "{{count}} コア",
-    "used": "使用量",
-    "total": "合計",
-    "hostname": "ホスト名",
-    "kernel": "カーネル",
-    "pveVersion": "PVEバージョン",
-    "name": "名前",
-    "status": "状態",
-    "type": "タイプ",
-    "cpu": "CPU",
-    "mem": "メモリ",
-    "disk": "ディスク",
-    "running": "実行中",
-    "stopped": "停止中",
-    "guestCounts": "{{running}}/{{total}} 実行中",
-    "inactive": "非アクティブ",
-    "notClustered": "スタンドアロンノード（クラスタの一部ではない）",
-    "quorate": "引用",
-    "notQuorate": "定足数に満たない",
-    "nodeOnline": "オンライン",
-    "nodeOffline": "オフライン",
-    "noHostSelected": "ホストが選択されていません",
-    "pveshNotFound": "pveshが見つかりません - これはProxmoxノードですか？",
-    "nodeDetectionFailed": "有効な Proxmox ノード名を特定できません",
-    "connecting": "接続中...",
-    "connectionFailed": "Proxmoxノードへの接続に失敗しました",
-    "refresh": "再読み込み",
-    "searchGuests": "ゲストを検索...",
-    "filterAll": "すべて選択",
-    "filterVm": "VM",
-    "filterLxc": "LXC",
-    "noGuests": "このノード上にはVMまたはLXCコンテナは見つかりませんでした。",
-    "noGuestsMatch": "現在の検索条件に一致するゲストはいません。"
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Proxmox Statsを有効にする",
-    "enableProxmoxStatsDesc": "SSH経由で収集された、このホストのリアルタイムのノード、ゲスト、ストレージ、およびクラスタの統計情報を表示するProxmox統計タブを表示します。",
-    "proxmoxStatsPollInterval": "ポーリング間隔（秒）",
-    "proxmoxStatsPollIntervalDesc": "最低15秒。Proxmoxノードの統計情報を更新する頻度。",
-    "proxmoxStatsNodeOverride": "ノード名の上書き",
-    "proxmoxStatsNodeOverrideDesc": "Proxmoxノード名の自動検出（デフォルトではホスト名で検出）を上書きします。",
-    "proxmoxStatsNodeOverridePlaceholder": "ホスト名から自動検出",
-    "authTypeStepca": "ステップCA",
-    "proxmoxIntegration": "Proxmox統合",
-    "enableProxmox": "Proxmoxを有効にする",
-    "enableProxmoxDesc": "このホストをProxmoxノードとしてマークします。ゲストの検出とインポートをこのホストから直接行えるようにします。",
-    "proxmoxDefaultAuthType": "デフォルト認証タイプ",
-    "proxmoxDefaultAuthTypeDesc": "インポートされたゲストホストに適用される認証方式です。ゲストへの接続方法に合わせて認証タイプを選択してください。",
-    "authTypePassword": "パスワード",
-    "authTypeKey": "SSH鍵",
-    "authTypeCredential": "クレデンシャル",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "なし",
-    "proxmoxDefaultCredential": "デフォルト認証情報",
-    "proxmoxDefaultCredentialDesc": "認証タイプが「Credential」に設定されている場合に、インポートされたゲストホストに使用される認証情報。",
-    "proxmoxWindowsDetection": "Windows / RDP 検出",
-    "proxmoxWindowsDetectionDesc": "SSH の代わりに RDP をトリガーする、カンマ区切りの名前パターン（大文字と小文字を区別しない）",
-    "proxmoxDockerDetection": "Docker 検出",
-    "proxmoxDockerDetectionDesc": "一致するゲストに対して Docker を有効にする、カンマ区切りの名前パターン",
-    "proxmoxPreferredRanges": "優先 IP 範囲",
-    "proxmoxPreferredRangesDesc": "ゲストが複数のインターフェースを持つ場合の IP 選択の優先順位で指定する、カンマ区切りのプレフィックス",
-    "proxmoxAutoSync": "ゲストの自動同期",
-    "proxmoxAutoSyncDesc": "セッションがロックされていないときに、この Proxmox ノードを定期的に検出し、インポートされたゲストホストを作成または更新します。",
-    "proxmoxSyncInterval": "同期間隔（分）",
-    "proxmoxSyncIntervalDesc": "最小 5 分。スケジューラーはロックされたユーザーセッションをスキップします。",
-    "proxmoxMarkMissing": "欠落ゲストをマーク",
-    "proxmoxMarkMissingDesc": "以前にインポートされたゲストが消えたときに、削除する代わりに proxmox-missing タグを追加します。",
-    "proxmoxLastSync": "最終同期",
-    "proxmoxLastSyncNever": "未同期",
-    "proxmoxLastSyncNoResult": "結果の詳細なし",
-    "proxmoxLastSyncSummary": "{{created}} 作成、{{updated}} 更新、{{markedMissing}} 欠落、{{skipped}} スキップ",
-    "proxmoxLastSyncStatus": {
-      "error": "失敗",
-      "pending": "保留中",
-      "success": "成功"
-    },
-    "proxmoxDiscoverAction": "Proxmox ゲストの検出とインポート",
-    "proxmoxImportTitle": "Proxmox からインポート",
-    "proxmoxSelectHost": "Proxmox ホストを選択…",
-    "proxmoxDiscover": "検出",
-    "proxmoxDiscovering": "検出中…",
-    "proxmoxDiscoverGuests": "ゲストを検出",
-    "proxmoxSelectAll": "すべて選択",
-    "proxmoxDeselectAll": "すべて選択解除",
-    "proxmoxNoGuests": "この Proxmox ノードにゲストが見つかりません。",
-    "proxmoxResultImported": "{{count}} インポート済み",
-    "proxmoxResultUpdated": "{{count}} 更新済み",
-    "proxmoxResultFailed": "{{count}} 失敗",
-    "proxmoxImportComplete": "Proxmox インポート完了: {{summary}}",
-    "proxmoxDiscoveryFailed": "検出に失敗しました",
-    "proxmoxImportFailed": "インポートに失敗しました",
-    "docsLink": "ドキュメントを表示",
-    "hostNotFound": "ホストが見つかりません",
-    "loadingHost": "ホストを読み込み中...",
-    "none": "なし",
-    "proxmoxGuestsSelected_one": "{{count}} ゲスト、 {{selected}} 選択済み",
-    "proxmoxGuestsSelected_other": "{{count}} ゲスト、 {{selected}} 選択済み",
-    "proxmoxImportButton_one": "{{count}} ホストをインポート",
-    "proxmoxImportButton_other": "{{count}} 台のホストをインポート"
-  },
-  "terminal": {
-    "connected": "接続中"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/ko_KR.json b/plugins/proxmox/locales/translated/ko_KR.json
deleted file mode 100644
index 1ba89061c..000000000
--- a/plugins/proxmox/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "프록스목스 통계"
-  },
-  "proxmoxStats": {
-    "tabTitle": "프록스목스 통계",
-    "cpuUsage": "CPU 사용률",
-    "memoryUsage": "메모리 사용률",
-    "diskUsage": "디스크 사용률",
-    "networkInterfaces": "네트워크 인터페이스",
-    "uptime": "업타임",
-    "systemInfo": "시스템 정보",
-    "guestsSummary": "손님",
-    "storagePools": "저장 풀",
-    "clusterHealth": "클러스터 헬스",
-    "cpuCores_one": "{{count}} 코어",
-    "cpuCores_other": "{{count}} 코어",
-    "used": "사용",
-    "total": "총",
-    "hostname": "호스트명",
-    "kernel": "커널",
-    "pveVersion": "PVE 버전",
-    "name": "이름",
-    "status": "상태",
-    "type": "유형",
-    "cpu": "CPU",
-    "mem": "메모리",
-    "disk": "디스크",
-    "running": "실행 중",
-    "stopped": "중지됨",
-    "guestCounts": "{{running}}/{{total}} 실행 중",
-    "inactive": "비활성",
-    "notClustered": "독립형 노드(클러스터의 일부가 아님)",
-    "quorate": "할당량",
-    "notQuorate": "정족수 미달",
-    "nodeOnline": "온라인",
-    "nodeOffline": "오프라인",
-    "noHostSelected": "선택된 호스트가 없습니다",
-    "pveshNotFound": "pvesh를 찾을 수 없습니다. Proxmox 노드입니까?",
-    "nodeDetectionFailed": "유효한 Proxmox 노드 이름을 확인할 수 없습니다.",
-    "connecting": "연결 중...",
-    "connectionFailed": "Proxmox 노드에 연결하지 못했습니다.",
-    "refresh": "새로 고침",
-    "searchGuests": "투숙객 검색...",
-    "filterAll": "모두",
-    "filterVm": "VM",
-    "filterLxc": "LXC",
-    "noGuests": "이 노드에서 VM 또는 LXC 컨테이너를 찾을 수 없습니다.",
-    "noGuestsMatch": "현재 필터 조건에 맞는 투숙객이 없습니다."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Proxmox 통계 활성화",
-    "enableProxmoxStatsDesc": "SSH를 통해 수집된 실시간 노드, 게스트, 스토리지 및 클러스터 통계를 포함하는 이 호스트의 Proxmox 통계 탭을 표시합니다.",
-    "proxmoxStatsPollInterval": "폴링 간격(초)",
-    "proxmoxStatsPollIntervalDesc": "최소 15초. Proxmox 노드 통계를 새로 고치는 빈도.",
-    "proxmoxStatsNodeOverride": "노드 이름 재정의",
-    "proxmoxStatsNodeOverrideDesc": "Proxmox 노드 이름 자동 감지 기능을 재정의합니다(기본적으로 호스트 이름을 통해 감지됨).",
-    "proxmoxStatsNodeOverridePlaceholder": "호스트 이름에서 자동 감지됨",
-    "authTypeStepca": "스텝 CA",
-    "proxmoxIntegration": "Proxmox 통합",
-    "enableProxmox": "Proxmox 활성화",
-    "enableProxmoxDesc": "이 호스트를 Proxmox 노드로 표시합니다. 이 호스트에서 직접 게스트를 검색하고 가져올 수 있도록 합니다.",
-    "proxmoxDefaultAuthType": "기본 인증 유형",
-    "proxmoxDefaultAuthTypeDesc": "가져온 게스트 호스트에 적용되는 인증 방법입니다. 게스트에 연결하는 방식에 맞는 인증 유형을 선택하세요.",
-    "authTypePassword": "비밀번호",
-    "authTypeKey": "SSH 키",
-    "authTypeCredential": "자격 증명",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "없음",
-    "proxmoxDefaultCredential": "기본 자격 증명",
-    "proxmoxDefaultCredentialDesc": "인증 유형이 자격 증명으로 설정된 경우 가져온 게스트 호스트에 사용되는 자격 증명입니다.",
-    "proxmoxWindowsDetection": "Windows / RDP 감지",
-    "proxmoxWindowsDetectionDesc": "SSH 대신 RDP를 트리거하는 쉼표로 구분된 이름 패턴(대소문자 구분 안 함)",
-    "proxmoxDockerDetection": "Docker 감지",
-    "proxmoxDockerDetectionDesc": "일치하는 게스트에 대해 Docker를 활성화하는 쉼표로 구분된 이름 패턴",
-    "proxmoxPreferredRanges": "선호하는 IP 범위",
-    "proxmoxPreferredRangesDesc": "게스트에 여러 인터페이스가 있을 때 IP 선택을 위한 우선 순위 순서의 쉼표로 구분된 접두사",
-    "proxmoxAutoSync": "게스트 자동 동기화",
-    "proxmoxAutoSyncDesc": "세션이 잠금 해제되어 있을 때 주기적으로 이 Proxmox 노드를 검색하고 가져온 게스트 호스트를 생성하거나 업데이트합니다.",
-    "proxmoxSyncInterval": "동기화 간격(분)",
-    "proxmoxSyncIntervalDesc": "최소 5분. 스케줄러는 잠긴 사용자 세션을 건너뜁니다.",
-    "proxmoxMarkMissing": "누락된 게스트 표시",
-    "proxmoxMarkMissingDesc": "이전에 가져온 게스트가 사라지면 삭제 대신 proxmox-missing 태그를 추가합니다.",
-    "proxmoxLastSync": "마지막 동기화",
-    "proxmoxLastSyncNever": "아직 동기화되지 않음",
-    "proxmoxLastSyncNoResult": "결과 세부 정보 없음",
-    "proxmoxLastSyncSummary": "생성 {{created}}개, 업데이트 {{updated}}개, 누락 {{markedMissing}}개, 건너뜀 {{skipped}}개",
-    "proxmoxLastSyncStatus": {
-      "error": "실패",
-      "pending": "보류 중",
-      "success": "성공"
-    },
-    "proxmoxDiscoverAction": "Proxmox 게스트 검색 및 가져오기",
-    "proxmoxImportTitle": "Proxmox에서 가져오기",
-    "proxmoxSelectHost": "Proxmox 호스트 선택…",
-    "proxmoxDiscover": "검색",
-    "proxmoxDiscovering": "검색 중…",
-    "proxmoxDiscoverGuests": "게스트 검색",
-    "proxmoxSelectAll": "전체 선택",
-    "proxmoxDeselectAll": "전체 선택 취소",
-    "proxmoxNoGuests": "이 Proxmox 노드에서 게스트를 찾을 수 없습니다.",
-    "proxmoxResultImported": "{{count}}개 가져옴",
-    "proxmoxResultUpdated": "{{count}}개 업데이트됨",
-    "proxmoxResultFailed": "{{count}}개 실패",
-    "proxmoxImportComplete": "Proxmox 가져오기 완료: {{summary}}",
-    "proxmoxDiscoveryFailed": "검색 실패",
-    "proxmoxImportFailed": "가져오기 실패",
-    "docsLink": "문서 보기",
-    "hostNotFound": "호스트를 찾을 수 없습니다",
-    "loadingHost": "호스트 로드 중...",
-    "none": "없음",
-    "proxmoxGuestsSelected_one": "{{count}} 게스트, {{selected}} 선택됨",
-    "proxmoxGuestsSelected_other": "{{count}} 명의 손님, {{selected}} 명이 선택되었습니다.",
-    "proxmoxImportButton_one": "호스트 {{count}}개 가져오기",
-    "proxmoxImportButton_other": "{{count}}개 호스트 가져오기"
-  },
-  "terminal": {
-    "connected": "연결됨"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/nl_NL.json b/plugins/proxmox/locales/translated/nl_NL.json
deleted file mode 100644
index 2e1f20e8b..000000000
--- a/plugins/proxmox/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Proxmox-statistieken"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Proxmox-statistieken",
-    "cpuUsage": "CPU-gebruik",
-    "memoryUsage": "Geheugengebruik",
-    "diskUsage": "Schijfgebruik",
-    "networkInterfaces": "Netwerkinterfaces",
-    "uptime": "Beschikbaarheid",
-    "systemInfo": "Systeeminformatie",
-    "guestsSummary": "Gasten",
-    "storagePools": "Opslagbassins",
-    "clusterHealth": "Clustergezondheid",
-    "cpuCores_one": "{{count}} Kern",
-    "cpuCores_other": "{{count}} Kernen",
-    "used": "Gebruikt",
-    "total": "Totaal",
-    "hostname": "Hostnaam",
-    "kernel": "Kernel",
-    "pveVersion": "PVE-versie",
-    "name": "Naam",
-    "status": "Status",
-    "type": "Type",
-    "cpu": "CPU",
-    "mem": "Mem",
-    "disk": "Schijf",
-    "running": "Rennen",
-    "stopped": "Gestopt",
-    "guestCounts": "{{running}}/{{total}} rennend",
-    "inactive": "Inactief",
-    "notClustered": "Zelfstandig knooppunt (geen onderdeel van een cluster)",
-    "quorate": "Quoraat",
-    "notQuorate": "Niet quorum",
-    "nodeOnline": "Online",
-    "nodeOffline": "Offline",
-    "noHostSelected": "Geen host geselecteerd",
-    "pveshNotFound": "pvesh niet gevonden - is dit een Proxmox-node?",
-    "nodeDetectionFailed": "Kan geen geldige Proxmox-knooppuntnaam bepalen",
-    "connecting": "Verbinden...",
-    "connectionFailed": "Verbinding met Proxmox-node mislukt.",
-    "refresh": "Vernieuwen",
-    "searchGuests": "Gasten zoeken...",
-    "filterAll": "Alle",
-    "filterVm": "VM",
-    "filterLxc": "LXC",
-    "noGuests": "Er zijn geen VM's of LXC-containers gevonden op dit knooppunt.",
-    "noGuestsMatch": "Er zijn geen gasten die aan de huidige filters voldoen."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Proxmox-statistieken inschakelen",
-    "enableProxmoxStatsDesc": "Toon een tabblad Proxmox-statistieken voor deze host met live statistieken van knooppunten, gastsystemen, opslag en het cluster, verzameld via SSH.",
-    "proxmoxStatsPollInterval": "Pollinterval (seconden)",
-    "proxmoxStatsPollIntervalDesc": "Minimaal 15 seconden. Hoe vaak moeten de Proxmox-node-statistieken worden vernieuwd?",
-    "proxmoxStatsNodeOverride": "Knooppuntnaam overschrijven",
-    "proxmoxStatsNodeOverrideDesc": "Schakel de automatische detectie van de Proxmox-knooppuntnaam uit (deze wordt standaard gedetecteerd via de hostnaam).",
-    "proxmoxStatsNodeOverridePlaceholder": "Automatisch gedetecteerd op basis van hostnaam",
-    "authTypeStepca": "Stap CA",
-    "proxmoxIntegration": "Proxmox-integratie",
-    "enableProxmox": "Proxmox inschakelen",
-    "enableProxmoxDesc": "Markeer deze host als een Proxmox-node. Dit maakt het mogelijk om virtuele machines direct vanaf deze host te detecteren en te importeren.",
-    "proxmoxDefaultAuthType": "Standaard authenticatietype",
-    "proxmoxDefaultAuthTypeDesc": "Authenticatiemethode toegepast op geïmporteerde gasthosts. Kies het authenticatietype dat overeenkomt met de manier waarop u verbinding maakt met uw gasten.",
-    "authTypePassword": "Wachtwoord",
-    "authTypeKey": "SSH-sleutel",
-    "authTypeCredential": "Referentie",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "Geen",
-    "proxmoxDefaultCredential": "Standaard inloggegevens",
-    "proxmoxDefaultCredentialDesc": "De inloggegevens die worden gebruikt voor geïmporteerde gasthosts wanneer het authenticatietype is ingesteld op 'Inloggegevens'.",
-    "proxmoxWindowsDetection": "Windows-/RDP-detectie",
-    "proxmoxWindowsDetectionDesc": "Door komma's gescheiden naampatronen die RDP in plaats van SSH activeren (hoofdlettergevoeligheid speelt geen rol).",
-    "proxmoxDockerDetection": "Docker-detectie",
-    "proxmoxDockerDetectionDesc": "Door komma's gescheiden naampatronen waarmee Docker gastsystemen kan herkennen.",
-    "proxmoxPreferredRanges": "Voorkeurs-IP-bereiken",
-    "proxmoxPreferredRangesDesc": "Door komma's gescheiden voorvoegsels in prioriteitsvolgorde voor IP-selectie wanneer een gast meerdere interfaces heeft.",
-    "proxmoxAutoSync": "Automatische synchronisatie van gasten",
-    "proxmoxAutoSyncDesc": "Ontdek periodiek dit Proxmox-knooppunt en maak of update geïmporteerde gasthosts terwijl uw sessie ontgrendeld is.",
-    "proxmoxSyncInterval": "Synchronisatie-interval (minuten)",
-    "proxmoxSyncIntervalDesc": "Minimaal 5 minuten. De planner slaat vergrendelde gebruikerssessies over.",
-    "proxmoxMarkMissing": "Markeer ontbrekende gasten",
-    "proxmoxMarkMissingDesc": "Voeg een 'proxmox-missing'-tag toe wanneer een eerder geïmporteerde gast verdwijnt, in plaats van deze te verwijderen.",
-    "proxmoxLastSync": "Laatste synchronisatie",
-    "proxmoxLastSyncNever": "Nog niet gesynchroniseerd",
-    "proxmoxLastSyncNoResult": "Geen resultaatdetails",
-    "proxmoxLastSyncSummary": "{{created}} aangemaakt, {{updated}} bijgewerkt, {{markedMissing}} ontbreekt, {{skipped}} overgeslagen",
-    "proxmoxLastSyncStatus": {
-      "error": "Mislukt",
-      "pending": "In behandeling",
-      "success": "Succes"
-    },
-    "proxmoxDiscoverAction": "Ontdek en importeer Proxmox-gasten",
-    "proxmoxImportTitle": "Importeren vanuit Proxmox",
-    "proxmoxSelectHost": "Selecteer een Proxmox-host…",
-    "proxmoxDiscover": "Ontdekken",
-    "proxmoxDiscovering": "Ontdekken…",
-    "proxmoxDiscoverGuests": "Ontdek gasten",
-    "proxmoxSelectAll": "Alles selecteren",
-    "proxmoxDeselectAll": "Alles deselecteren",
-    "proxmoxNoGuests": "Er zijn geen gasten gevonden op dit Proxmox-knooppunt.",
-    "proxmoxResultImported": "{{count}} geïmporteerd",
-    "proxmoxResultUpdated": "{{count}} bijgewerkt",
-    "proxmoxResultFailed": "{{count}} mislukt",
-    "proxmoxImportComplete": "Proxmox-import voltooid: {{summary}}",
-    "proxmoxDiscoveryFailed": "Ontdekking mislukt",
-    "proxmoxImportFailed": "Importeren mislukt",
-    "docsLink": "Documenten bekijken",
-    "hostNotFound": "Host niet gevonden",
-    "loadingHost": "Host wordt geladen...",
-    "none": "Geen",
-    "proxmoxGuestsSelected_one": "{{count}} gast, {{selected}} geselecteerd",
-    "proxmoxGuestsSelected_other": "{{count}} gasten, {{selected}} geselecteerd",
-    "proxmoxImportButton_one": "Importeer {{count}} host",
-    "proxmoxImportButton_other": "Importeer {{count}} hosts"
-  },
-  "terminal": {
-    "connected": "Aangesloten"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/no_NO.json b/plugins/proxmox/locales/translated/no_NO.json
deleted file mode 100644
index f15c3a0c0..000000000
--- a/plugins/proxmox/locales/translated/no_NO.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Proxmox-statistikk"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Proxmox-statistikk",
-    "cpuUsage": "CPU-bruk",
-    "memoryUsage": "Minnebruk",
-    "diskUsage": "Diskbruk",
-    "networkInterfaces": "Nettverksgrensesnitt",
-    "uptime": "Oppetid",
-    "systemInfo": "Systeminformasjon",
-    "guestsSummary": "Gjester",
-    "storagePools": "Lagringsbassenger",
-    "clusterHealth": "Klyngehelse",
-    "cpuCores_one": "{{count}} Kjerne",
-    "cpuCores_other": "{{count}} Kjerner",
-    "used": "Brukt",
-    "total": "Totalt",
-    "hostname": "Vertsnavn",
-    "kernel": "Kjerne",
-    "pveVersion": "PVE-versjon",
-    "name": "Navn",
-    "status": "Status",
-    "type": "Type",
-    "cpu": "CPU",
-    "mem": "Minne",
-    "disk": "Disk",
-    "running": "Kjører",
-    "stopped": "Stoppet",
-    "guestCounts": "{{running}}/{{total}} løping",
-    "inactive": "Inaktiv",
-    "notClustered": "Frittstående node (ikke en del av en klynge)",
-    "quorate": "Kvorat",
-    "notQuorate": "Ikke beslutningsdyktig",
-    "nodeOnline": "Tilkoblet",
-    "nodeOffline": "Frakoblet",
-    "noHostSelected": "Ingen vert valgt",
-    "pveshNotFound": "pvesh ikke funnet – er dette en Proxmox-node?",
-    "nodeDetectionFailed": "Kan ikke bestemme et gyldig Proxmox-nodenavn",
-    "connecting": "Kobler til...",
-    "connectionFailed": "Kunne ikke koble til Proxmox-noden",
-    "refresh": "Oppdater",
-    "searchGuests": "Søk etter gjester...",
-    "filterAll": "Alle",
-    "filterVm": "VM",
-    "filterLxc": "LXC",
-    "noGuests": "Ingen virtuelle maskiner eller LXC-containere funnet på denne noden.",
-    "noGuestsMatch": "Ingen gjester samsvarer med de gjeldende filtrene."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Aktiver Proxmox-statistikk",
-    "enableProxmoxStatsDesc": "Vis en Proxmox-statistikkfane for denne verten med live node-, gjeste-, lagrings- og klyngestatistikk samlet inn via SSH.",
-    "proxmoxStatsPollInterval": "Avstemningsintervall (sekunder)",
-    "proxmoxStatsPollIntervalDesc": "Minimum 15 sekunder. Hvor ofte Proxmox-nodestatistikken skal oppdateres.",
-    "proxmoxStatsNodeOverride": "Overstyring av nodenavn",
-    "proxmoxStatsNodeOverrideDesc": "Overstyr automatisk deteksjon av Proxmox-nodenavnet (detekteres via vertsnavn som standard).",
-    "proxmoxStatsNodeOverridePlaceholder": "Automatisk oppdaget fra vertsnavn",
-    "authTypeStepca": "Trinn CA",
-    "proxmoxIntegration": "Proxmox-integrasjon",
-    "enableProxmox": "Aktiver Proxmox",
-    "enableProxmoxDesc": "Merk denne verten som en Proxmox-node. Aktiverer gjesteoppdagelse og import direkte fra denne verten.",
-    "proxmoxDefaultAuthType": "Standard autentiseringstype",
-    "proxmoxDefaultAuthTypeDesc": "Autentiseringsmetode brukt på importerte gjesteverter. Velg autentiseringstypen som samsvarer med hvordan du kobler til gjestene dine.",
-    "authTypePassword": "Passord",
-    "authTypeKey": "SSH-nøkkel",
-    "authTypeCredential": "Legitimasjon",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "Ingen",
-    "proxmoxDefaultCredential": "Standard legitimasjon",
-    "proxmoxDefaultCredentialDesc": "Legitimasjon som brukes for importerte gjesteverter når godkjenningstypen er satt til Legitimasjon.",
-    "proxmoxWindowsDetection": "Windows / RDP-deteksjon",
-    "proxmoxWindowsDetectionDesc": "Kommaseparerte navnemønstre som utløser RDP i stedet for SSH (ikke-skillende mellom store og små bokstaver)",
-    "proxmoxDockerDetection": "Docker-deteksjon",
-    "proxmoxDockerDetectionDesc": "Kommaseparerte navnemønstre som gjør det mulig for Docker å matche gjester",
-    "proxmoxPreferredRanges": "Foretrukne IP-områder",
-    "proxmoxPreferredRangesDesc": "Kommaseparerte prefikser i prioritert rekkefølge for IP-valg når en gjest har flere grensesnitt",
-    "proxmoxAutoSync": "Automatisk synkronisering av gjester",
-    "proxmoxAutoSyncDesc": "Oppdag denne Proxmox-noden med jevne mellomrom og opprett eller oppdater importerte gjesteverter mens økten din er ulåst.",
-    "proxmoxSyncInterval": "Synkroniseringsintervall (minutter)",
-    "proxmoxSyncIntervalDesc": "Minimum 5 minutter. Planleggeren hopper over låste brukerøkter.",
-    "proxmoxMarkMissing": "Merk manglende gjester",
-    "proxmoxMarkMissingDesc": "Legg til en proxmox-missing-tag når en tidligere importert gjest forsvinner i stedet for å slette den.",
-    "proxmoxLastSync": "Siste synkronisering",
-    "proxmoxLastSyncNever": "Ikke synkronisert ennå",
-    "proxmoxLastSyncNoResult": "Ingen resultatdetaljer",
-    "proxmoxLastSyncSummary": "{{created}} opprettet, {{updated}} oppdatert, {{markedMissing}} mangler, {{skipped}} hoppet over",
-    "proxmoxLastSyncStatus": {
-      "error": "Mislyktes",
-      "pending": "I påvente av",
-      "success": "Suksess"
-    },
-    "proxmoxDiscoverAction": "Oppdag og importer Proxmox-gjester",
-    "proxmoxImportTitle": "Importer fra Proxmox",
-    "proxmoxSelectHost": "Velg en Proxmox-vert…",
-    "proxmoxDiscover": "Oppdage",
-    "proxmoxDiscovering": "Oppdager…",
-    "proxmoxDiscoverGuests": "Oppdag gjester",
-    "proxmoxSelectAll": "Velg alle",
-    "proxmoxDeselectAll": "Fjern merkingen av alt",
-    "proxmoxNoGuests": "Ingen gjester funnet på denne Proxmox-noden.",
-    "proxmoxResultImported": "{{count}} importert",
-    "proxmoxResultUpdated": "{{count}} oppdatert",
-    "proxmoxResultFailed": "{{count}} mislyktes",
-    "proxmoxImportComplete": "Proxmox-import fullført: {{summary}}",
-    "proxmoxDiscoveryFailed": "Oppdagelsen mislyktes",
-    "proxmoxImportFailed": "Import mislyktes",
-    "docsLink": "Vis dokumenter",
-    "hostNotFound": "Verten ble ikke funnet",
-    "loadingHost": "Laster inn vert ...",
-    "none": "Ingen",
-    "proxmoxGuestsSelected_one": "{{count}} gjest, {{selected}} valgt",
-    "proxmoxGuestsSelected_other": "{{count}} gjester, {{selected}} valgt",
-    "proxmoxImportButton_one": "Importer {{count}} vert",
-    "proxmoxImportButton_other": "Importer {{count}} verter"
-  },
-  "terminal": {
-    "connected": "Tilkoblet"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/pl_PL.json b/plugins/proxmox/locales/translated/pl_PL.json
deleted file mode 100644
index 1dd4fa94a..000000000
--- a/plugins/proxmox/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Statystyki Proxmox"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Statystyki Proxmox",
-    "cpuUsage": "Wykorzystanie procesora",
-    "memoryUsage": "Wykorzystanie pamięci",
-    "diskUsage": "Wykorzystanie dysku",
-    "networkInterfaces": "Interfejsy sieciowe",
-    "uptime": "Czas działania",
-    "systemInfo": "Informacje o systemie",
-    "guestsSummary": "Goście",
-    "storagePools": "Pule magazynowe",
-    "clusterHealth": "Kondycja klastra",
-    "cpuCores_one": "{{count}} rdzeń",
-    "cpuCores_other": "{{count}} rdzeni",
-    "used": "Użyte",
-    "total": "Łącznie",
-    "hostname": "Nazwa hosta",
-    "kernel": "Jądro",
-    "pveVersion": "Wersja PVE",
-    "name": "Nazwa",
-    "status": "Status",
-    "type": "Typ",
-    "cpu": "Procesor",
-    "mem": "Pamięć",
-    "disk": "Dysk",
-    "running": "Działa",
-    "stopped": "Zatrzymany",
-    "guestCounts": "{{running}}/{{total}} działa",
-    "inactive": "Nieaktywny",
-    "notClustered": "Samodzielny węzeł (nie jest częścią klastra)",
-    "quorate": "Kworum osiągnięte",
-    "notQuorate": "Brak kworum",
-    "nodeOnline": "Online",
-    "nodeOffline": "Offline",
-    "noHostSelected": "Nie wybrano hosta",
-    "pveshNotFound": "Nie znaleziono pvesh. Czy to węzeł Proxmox?",
-    "nodeDetectionFailed": "Nie można ustalić prawidłowej nazwy węzła Proxmox",
-    "connecting": "Łączenie...",
-    "connectionFailed": "Nie udało się połączyć z węzłem Proxmox",
-    "refresh": "Odśwież",
-    "searchGuests": "Wyszukaj gości...",
-    "filterAll": "Wszystkie",
-    "filterVm": "VM",
-    "filterLxc": "LXC",
-    "noGuests": "Nie znaleziono maszyn wirtualnych ani kontenerów LXC na tym węźle.",
-    "noGuestsMatch": "Żaden gość nie pasuje do bieżących filtrów."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Włącz statystyki Proxmox",
-    "enableProxmoxStatsDesc": "Pokaż kartę statystyk Proxmox dla tego hosta z bieżącymi statystykami węzła, gości, magazynu i klastra zbieranymi przez SSH.",
-    "proxmoxStatsPollInterval": "Interwał sondowania (sekundy)",
-    "proxmoxStatsPollIntervalDesc": "Minimum 15 sekund. Jak często odświeżać statystyki węzła Proxmox.",
-    "proxmoxStatsNodeOverride": "Nadpisanie nazwy węzła",
-    "proxmoxStatsNodeOverrideDesc": "Zastąp automatyczne wykrywanie nazwy węzła Proxmox (domyślnie wykrywane za pomocą nazwy hosta).",
-    "proxmoxStatsNodeOverridePlaceholder": "Automatycznie wykryto na podstawie nazwy hosta",
-    "authTypeStepca": "Krok CA",
-    "proxmoxIntegration": "Integracja Proxmox",
-    "enableProxmox": "Włącz Proxmox",
-    "enableProxmoxDesc": "Oznacz ten host jako węzeł Proxmox. Umożliwia wykrywanie gości i importowanie bezpośrednio z tego hosta.",
-    "proxmoxDefaultAuthType": "Domyślny typ uwierzytelniania",
-    "proxmoxDefaultAuthTypeDesc": "Metoda uwierzytelniania stosowana do importowanych hostów gościnnych. Wybierz typ uwierzytelniania odpowiadający sposobowi, w jaki łączysz się z gośćmi.",
-    "authTypePassword": "Hasło",
-    "authTypeKey": "Klucz SSH",
-    "authTypeCredential": "Poświadczenie",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "Brak",
-    "proxmoxDefaultCredential": "Domyślne poświadczenie",
-    "proxmoxDefaultCredentialDesc": "Poświadczenie używane dla importowanych hostów gości, gdy typ uwierzytelniania to Poświadczenie.",
-    "proxmoxWindowsDetection": "Wykrywanie systemu Windows/RDP",
-    "proxmoxWindowsDetectionDesc": "Wzorce nazw rozdzielone przecinkami, które wyzwalają protokół RDP zamiast protokołu SSH (bez uwzględniania wielkości liter)",
-    "proxmoxDockerDetection": "Wykrywanie Dockera",
-    "proxmoxDockerDetectionDesc": "Wzorce nazw rozdzielone przecinkami, które włączają Docker dla pasujących gości",
-    "proxmoxPreferredRanges": "Preferowane zakresy adresów IP",
-    "proxmoxPreferredRangesDesc": "Prefiksy rozdzielone przecinkami w kolejności priorytetów wyboru adresu IP, gdy gość ma wiele interfejsów",
-    "proxmoxAutoSync": "Automatyczna synchronizacja gości",
-    "proxmoxAutoSyncDesc": "Okresowo wykrywaj ten węzeł Proxmox i twórz lub aktualizuj importowane hosty gości, dopóki Twoja sesja jest odblokowana.",
-    "proxmoxSyncInterval": "Interwał synchronizacji (minuty)",
-    "proxmoxSyncIntervalDesc": "Minimum 5 minut. Harmonogram pomija zablokowane sesje użytkowników.",
-    "proxmoxMarkMissing": "Oznacz brakujących gości",
-    "proxmoxMarkMissingDesc": "Dodaj tag proxmox-missing, gdy wcześniej zaimportowany gość zniknie, zamiast go usuwać.",
-    "proxmoxLastSync": "Ostatnia synchronizacja",
-    "proxmoxLastSyncNever": "Jeszcze nie zsynchronizowano",
-    "proxmoxLastSyncNoResult": "Brak szczegółów wyników",
-    "proxmoxLastSyncSummary": "utworzono {{created}}, zaktualizowano {{updated}}, brakujących {{markedMissing}}, pominięto {{skipped}}",
-    "proxmoxLastSyncStatus": {
-      "error": "Niepowodzenie",
-      "pending": "Oczekuje",
-      "success": "Powodzenie"
-    },
-    "proxmoxDiscoverAction": "Wykryj i zaimportuj gości Proxmox",
-    "proxmoxImportTitle": "Import z Proxmox",
-    "proxmoxSelectHost": "Wybierz hosta Proxmox…",
-    "proxmoxDiscover": "Wykryj",
-    "proxmoxDiscovering": "Wykrywanie…",
-    "proxmoxDiscoverGuests": "Wykryj gości",
-    "proxmoxSelectAll": "Zaznacz wszystko",
-    "proxmoxDeselectAll": "Odznacz wszystko",
-    "proxmoxNoGuests": "Nie znaleziono gości na tym węźle Proxmox.",
-    "proxmoxResultImported": "{{count}} zaimportowano",
-    "proxmoxResultUpdated": "{{count}} zaktualizowano",
-    "proxmoxResultFailed": "{{count}} nie powiodło się",
-    "proxmoxImportComplete": "Zakończono importowanie Proxmox: {{summary}}",
-    "proxmoxDiscoveryFailed": "Wykrywanie nie powiodło się",
-    "proxmoxImportFailed": "Import nie powiódł się",
-    "docsLink": "Zobacz dokumentację",
-    "hostNotFound": "Nie znaleziono hosta",
-    "loadingHost": "Ładowanie hosta...",
-    "none": "Brak",
-    "proxmoxGuestsSelected_one": "{{count}} gość, {{selected}} wybrano",
-    "proxmoxGuestsSelected_other": "{{count}} gości, {{selected}} wybranych",
-    "proxmoxImportButton_one": "Importuj {{count}} host",
-    "proxmoxImportButton_other": "Importuj {{count}} hostów"
-  },
-  "terminal": {
-    "connected": "Połączono"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/pt_BR.json b/plugins/proxmox/locales/translated/pt_BR.json
deleted file mode 100644
index 58e0a53c4..000000000
--- a/plugins/proxmox/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Estatísticas do Proxmox"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Estatísticas do Proxmox",
-    "cpuUsage": "Utilização da CPU",
-    "memoryUsage": "Uso de memória",
-    "diskUsage": "Utilização do disco",
-    "networkInterfaces": "Interfaces de rede",
-    "uptime": "Tempo de atividade",
-    "systemInfo": "Informações do sistema",
-    "guestsSummary": "Convidados",
-    "storagePools": "Piscinas de armazenamento",
-    "clusterHealth": "Cluster Health",
-    "cpuCores_one": "{{count}} Núcleo",
-    "cpuCores_other": "{{count}} Núcleos",
-    "used": "Usado",
-    "total": "Total",
-    "hostname": "Nome do host",
-    "kernel": "Kernel",
-    "pveVersion": "Versão PvE",
-    "name": "Nome",
-    "status": "Status",
-    "type": "Tipo",
-    "cpu": "CPU",
-    "mem": "Membro",
-    "disk": "Disco",
-    "running": "Correndo",
-    "stopped": "Parou",
-    "guestCounts": "{{running}}/{{total}} em execução",
-    "inactive": "Inativo",
-    "notClustered": "Nó independente (não faz parte de um cluster)",
-    "quorate": "Quorate",
-    "notQuorate": "Sem quórum",
-    "nodeOnline": "Online",
-    "nodeOffline": "Offline",
-    "noHostSelected": "Nenhum host selecionado",
-    "pveshNotFound": "pvesh não encontrado - este é um nó Proxmox?",
-    "nodeDetectionFailed": "Não foi possível determinar um nome de nó Proxmox válido.",
-    "connecting": "Conectando...",
-    "connectionFailed": "Falha ao conectar-se ao nó Proxmox",
-    "refresh": "Atualizar",
-    "searchGuests": "Pesquisar hóspedes...",
-    "filterAll": "Todos",
-    "filterVm": "VM",
-    "filterLxc": "LXC",
-    "noGuests": "Nenhuma máquina virtual ou contêiner LXC foi encontrado neste nó.",
-    "noGuestsMatch": "Nenhum hóspede corresponde aos filtros atuais."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Ativar estatísticas do Proxmox",
-    "enableProxmoxStatsDesc": "Exibe a aba de Estatísticas do Proxmox para este host com estatísticas em tempo real de nós, máquinas virtuais, armazenamento e cluster, coletadas via SSH.",
-    "proxmoxStatsPollInterval": "Intervalo de sondagem (segundos)",
-    "proxmoxStatsPollIntervalDesc": "Mínimo de 15 segundos. Com que frequência as estatísticas do nó Proxmox devem ser atualizadas.",
-    "proxmoxStatsNodeOverride": "Substituição do nome do nó",
-    "proxmoxStatsNodeOverrideDesc": "Substituir a detecção automática do nome do nó Proxmox (detectado por padrão através do nome do host).",
-    "proxmoxStatsNodeOverridePlaceholder": "Detectado automaticamente a partir do nome do host",
-    "authTypeStepca": "Etapa CA",
-    "proxmoxIntegration": "Integração Proxmox",
-    "enableProxmox": "Ativar Proxmox",
-    "enableProxmoxDesc": "Marque este host como um nó Proxmox. Isso permite a descoberta e importação de máquinas virtuais diretamente deste host.",
-    "proxmoxDefaultAuthType": "Tipo de autenticação padrão",
-    "proxmoxDefaultAuthTypeDesc": "Método de autenticação aplicado aos hosts convidados importados. Escolha o tipo de autenticação que corresponde à forma como você se conecta aos seus convidados.",
-    "authTypePassword": "Senha",
-    "authTypeKey": "Chave SSH",
-    "authTypeCredential": "Credencial",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "Nenhum",
-    "proxmoxDefaultCredential": "Credencial padrão",
-    "proxmoxDefaultCredentialDesc": "Credencial usada para hosts convidados importados quando o tipo de autenticação está definido como Credencial.",
-    "proxmoxWindowsDetection": "Detecção de Windows/RDP",
-    "proxmoxWindowsDetectionDesc": "Padrões de nomes separados por vírgulas que acionam o RDP em vez do SSH (sem distinção entre maiúsculas e minúsculas)",
-    "proxmoxDockerDetection": "Detecção de Docker",
-    "proxmoxDockerDetectionDesc": "Padrões de nomes separados por vírgulas que permitem ao Docker identificar máquinas virtuais.",
-    "proxmoxPreferredRanges": "Faixas de IP preferenciais",
-    "proxmoxPreferredRangesDesc": "Prefixos separados por vírgula em ordem de prioridade para seleção de IP quando um convidado possui múltiplas interfaces.",
-    "proxmoxAutoSync": "Sincronização automática de convidados",
-    "proxmoxAutoSyncDesc": "Descubra periodicamente este nó Proxmox e crie ou atualize hosts convidados importados enquanto sua sessão estiver desbloqueada.",
-    "proxmoxSyncInterval": "Intervalo de sincronização (minutos)",
-    "proxmoxSyncIntervalDesc": "Tempo mínimo de 5 minutos. O agendador ignora sessões de usuário bloqueadas.",
-    "proxmoxMarkMissing": "Marque os hóspedes ausentes",
-    "proxmoxMarkMissingDesc": "Adicione a tag proxmox-missing quando uma máquina virtual previamente importada desaparecer, em vez de excluí-la.",
-    "proxmoxLastSync": "Última sincronização",
-    "proxmoxLastSyncNever": "Ainda não sincronizado",
-    "proxmoxLastSyncNoResult": "Nenhum detalhe do resultado",
-    "proxmoxLastSyncSummary": "{{created}} criado, {{updated}} atualizado, {{markedMissing}} ausente, {{skipped}} ignorado",
-    "proxmoxLastSyncStatus": {
-      "error": "Fracassado",
-      "pending": "Pendente",
-      "success": "Sucesso"
-    },
-    "proxmoxDiscoverAction": "Descubra e importe hóspedes do Proxmox",
-    "proxmoxImportTitle": "Importar do Proxmox",
-    "proxmoxSelectHost": "Selecione um host Proxmox…",
-    "proxmoxDiscover": "Descobrir",
-    "proxmoxDiscovering": "Descobrindo…",
-    "proxmoxDiscoverGuests": "Descubra os hóspedes",
-    "proxmoxSelectAll": "Selecionar tudo",
-    "proxmoxDeselectAll": "Desmarque tudo",
-    "proxmoxNoGuests": "Nenhum convidado encontrado neste nó Proxmox.",
-    "proxmoxResultImported": "{{count}} importado",
-    "proxmoxResultUpdated": "{{count}} atualizado",
-    "proxmoxResultFailed": "{{count}} falhou",
-    "proxmoxImportComplete": "Importação do Proxmox concluída: {{summary}}",
-    "proxmoxDiscoveryFailed": "A descoberta falhou",
-    "proxmoxImportFailed": "A importação falhou",
-    "docsLink": "Documentação",
-    "hostNotFound": "Host não encontrado",
-    "loadingHost": "Carregando host...",
-    "none": "Nenhum",
-    "proxmoxGuestsSelected_one": "{{count}} convidado, {{selected}} selecionado",
-    "proxmoxGuestsSelected_other": "{{count}} convidados, {{selected}} selecionados",
-    "proxmoxImportButton_one": "Importar {{count}} host",
-    "proxmoxImportButton_other": "Importar {{count}} hosts"
-  },
-  "terminal": {
-    "connected": "Conectado"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/pt_PT.json b/plugins/proxmox/locales/translated/pt_PT.json
deleted file mode 100644
index d71843ab4..000000000
--- a/plugins/proxmox/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Estatísticas do Proxmox"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Estatísticas do Proxmox",
-    "cpuUsage": "Utilização da CPU",
-    "memoryUsage": "Utilização da memória",
-    "diskUsage": "Utilização do disco",
-    "networkInterfaces": "Interfaces de Rede",
-    "uptime": "Tempo de Atividade",
-    "systemInfo": "Informação do Sistema",
-    "guestsSummary": "Convidados",
-    "storagePools": "Piscinas de armazenamento",
-    "clusterHealth": "Saúde em grupo",
-    "cpuCores_one": "{{count}} Núcleo",
-    "cpuCores_other": "{{count}} Núcleos",
-    "used": "Utilizado",
-    "total": "Total",
-    "hostname": "Nome do host",
-    "kernel": "Kernel",
-    "pveVersion": "Versão PvE",
-    "name": "Nome",
-    "status": "Estado",
-    "type": "Tipo",
-    "cpu": "CPU",
-    "mem": "Membro",
-    "disk": "Disco",
-    "running": "Em execução",
-    "stopped": "Parado",
-    "guestCounts": "{{running}}/{{total}} em execução",
-    "inactive": "Inativo",
-    "notClustered": "Nó independente (não faz parte de um cluster)",
-    "quorate": "Quorate",
-    "notQuorate": "Sem quórum",
-    "nodeOnline": "Online",
-    "nodeOffline": "Offline",
-    "noHostSelected": "Nenhum anfitrião selecionado",
-    "pveshNotFound": "pvesh não encontrado - este é um nó Proxmox?",
-    "nodeDetectionFailed": "Não foi possível determinar um nome de nó Proxmox válido.",
-    "connecting": "A ligar...",
-    "connectionFailed": "Falha ao ligar ao nó Proxmox",
-    "refresh": "Atualizar",
-    "searchGuests": "Pesquisar hóspedes...",
-    "filterAll": "Todas",
-    "filterVm": "VM",
-    "filterLxc": "LXC",
-    "noGuests": "Nenhuma máquina virtual ou contentor LXC foi encontrado neste nó.",
-    "noGuestsMatch": "Nenhum hóspede corresponde aos filtros atuais."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Ativar estatísticas do Proxmox",
-    "enableProxmoxStatsDesc": "Apresenta o separador de Estatísticas do Proxmox para este host com estatísticas em tempo real dos nós, máquinas virtuais, armazenamento e cluster, recolhidas via SSH.",
-    "proxmoxStatsPollInterval": "Intervalo de sondagem (segundos)",
-    "proxmoxStatsPollIntervalDesc": "Mínimo de 15 segundos. Com que frequência as estatísticas do nó Proxmox devem ser atualizadas.",
-    "proxmoxStatsNodeOverride": "Substituição do nome do nó",
-    "proxmoxStatsNodeOverrideDesc": "Substituir a deteção automática do nome do nó Proxmox (detetado por defeito através do nome do host).",
-    "proxmoxStatsNodeOverridePlaceholder": "Detetado automaticamente a partir do nome do host",
-    "authTypeStepca": "Etapa CA",
-    "proxmoxIntegration": "Integração com Proxmox",
-    "enableProxmox": "Ativar Proxmox",
-    "enableProxmoxDesc": "Marcar este host como um nó Proxmox. Permite a descoberta e importação de convidados diretamente a partir deste host.",
-    "proxmoxDefaultAuthType": "Tipo de Autenticação Padrão",
-    "proxmoxDefaultAuthTypeDesc": "Método de autenticação aplicado aos hosts convidados importados. Escolha o tipo de autenticação que corresponde à forma como se liga aos seus convidados.",
-    "authTypePassword": "Palavra-passe",
-    "authTypeKey": "Chave SSH",
-    "authTypeCredential": "Credencial",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "Nenhum",
-    "proxmoxDefaultCredential": "Credencial padrão",
-    "proxmoxDefaultCredentialDesc": "Credencial usada para os convidados importados quando o tipo de autenticação é definido como Credencial.",
-    "proxmoxWindowsDetection": "Deteção de Windows / RDP",
-    "proxmoxWindowsDetectionDesc": "Padrões de nomes separados por vírgulas que acionam RDP em vez de SSH (sem distinção entre maiúsculas/minúsculas)",
-    "proxmoxDockerDetection": "Deteção de Docker",
-    "proxmoxDockerDetectionDesc": "Padrões de nomes separados por vírgulas que ativam o Docker nos convidados que correspondam.",
-    "proxmoxPreferredRanges": "Intervalos de IP preferenciais",
-    "proxmoxPreferredRangesDesc": "Prefixos separados por vírgulas em ordem de prioridade para seleção de IP quando um convidado tem várias interfaces.",
-    "proxmoxAutoSync": "Sincronização automática",
-    "proxmoxAutoSyncDesc": "Descobrir periodicamente este nó Proxmox e criar ou atualizar os convidados importados enquanto a sessão estiver desbloqueada.",
-    "proxmoxSyncInterval": "Intervalo de sincronização (minutos)",
-    "proxmoxSyncIntervalDesc": "Mínimo de 5 minutos. O agendador ignora sessões de utilizador bloqueadas.",
-    "proxmoxMarkMissing": "Marcar convidados em falta",
-    "proxmoxMarkMissingDesc": "Adicionar a etiqueta proxmox-missing quando um convidado previamente importado desaparecer, em vez de o eliminar.",
-    "proxmoxLastSync": "Última sincronização",
-    "proxmoxLastSyncNever": "Ainda não sincronizado",
-    "proxmoxLastSyncNoResult": "Sem detalhes do resultado",
-    "proxmoxLastSyncSummary": "{{created}} criados, {{updated}} atualizados, {{markedMissing}} em falta, {{skipped}} ignorados",
-    "proxmoxLastSyncStatus": {
-      "error": "Falhou",
-      "pending": "Pendente",
-      "success": "Sucesso"
-    },
-    "proxmoxDiscoverAction": "Descobrir e importar convidados",
-    "proxmoxImportTitle": "Importar do Proxmox",
-    "proxmoxSelectHost": "Selecionar um host Proxmox…",
-    "proxmoxDiscover": "Descobrir",
-    "proxmoxDiscovering": "A descobrir…",
-    "proxmoxDiscoverGuests": "Descobrir convidados",
-    "proxmoxSelectAll": "Selecionar todos",
-    "proxmoxDeselectAll": "Desmarcar todos",
-    "proxmoxNoGuests": "Nenhum convidado encontrado neste nó Proxmox.",
-    "proxmoxResultImported": "{{count}} importados",
-    "proxmoxResultUpdated": "{{count}} atualizados",
-    "proxmoxResultFailed": "{{count}} falhados",
-    "proxmoxImportComplete": "Importação Proxmox concluída: {{summary}}",
-    "proxmoxDiscoveryFailed": "Descoberta falhou",
-    "proxmoxImportFailed": "Importação falhou",
-    "docsLink": "Ver documentação",
-    "hostNotFound": "Host não encontrado",
-    "loadingHost": "A carregar o host...",
-    "none": "Nenhum",
-    "proxmoxGuestsSelected_one": "{{count}} convidado, {{selected}} selecionado",
-    "proxmoxGuestsSelected_other": "{{count}} convidados, {{selected}} selecionados",
-    "proxmoxImportButton_one": "Importar {{count}} host",
-    "proxmoxImportButton_other": "Importar {{count}} hosts"
-  },
-  "terminal": {
-    "connected": "Ligado"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/ro_RO.json b/plugins/proxmox/locales/translated/ro_RO.json
deleted file mode 100644
index 1bda50c77..000000000
--- a/plugins/proxmox/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Statistici Proxmox"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Statistici Proxmox",
-    "cpuUsage": "Utilizarea procesorului",
-    "memoryUsage": "Utilizarea memoriei",
-    "diskUsage": "Utilizarea discului",
-    "networkInterfaces": "Interfețe de rețea",
-    "uptime": "Timp de funcționare",
-    "systemInfo": "Informații despre sistem",
-    "guestsSummary": "Oaspeți",
-    "storagePools": "Bazine de stocare",
-    "clusterHealth": "Sănătatea clusterului",
-    "cpuCores_one": "{{count}} Nucleu",
-    "cpuCores_other": "{{count}} Nuclee",
-    "used": "Folosit",
-    "total": "Total",
-    "hostname": "Nume gazdă",
-    "kernel": "Nucleu",
-    "pveVersion": "Versiunea PVE",
-    "name": "Nume",
-    "status": "Stare",
-    "type": "Tip",
-    "cpu": "CPU",
-    "mem": "Mem",
-    "disk": "Disc",
-    "running": "Funcţionare",
-    "stopped": "Oprit",
-    "guestCounts": "{{running}}/{{total}} rulează",
-    "inactive": "Inactiv",
-    "notClustered": "Nod independent (nu face parte dintr-un cluster)",
-    "quorate": "Cvoat",
-    "notQuorate": "Nu există cvorum",
-    "nodeOnline": "Online",
-    "nodeOffline": "Offline",
-    "noHostSelected": "Nicio gazdă selectată",
-    "pveshNotFound": "pvesh nu a fost găsit - este acesta un nod Proxmox?",
-    "nodeDetectionFailed": "Nu se poate determina un nume de nod Proxmox valid",
-    "connecting": "Se conectează...",
-    "connectionFailed": "Conectarea la nodul Proxmox nu a reușit.",
-    "refresh": "Reîmprospăta",
-    "searchGuests": "Caută invitați...",
-    "filterAll": "Toate",
-    "filterVm": "Mașină virtuală",
-    "filterLxc": "LXC",
-    "noGuests": "Nu s-au găsit mașini virtuale sau containere LXC pe acest nod.",
-    "noGuestsMatch": "Niciun invitat nu corespunde filtrelor actuale."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Activează statisticile Proxmox",
-    "enableProxmoxStatsDesc": "Afișează o filă Statistici Proxmox pentru această gazdă cu statistici live despre noduri, invitați, stocare și cluster, colectate prin SSH.",
-    "proxmoxStatsPollInterval": "Interval de sondaj (secunde)",
-    "proxmoxStatsPollIntervalDesc": "Minim 15 secunde. Cât de des se actualizează statisticile nodului Proxmox.",
-    "proxmoxStatsNodeOverride": "Suprascriere nume nod",
-    "proxmoxStatsNodeOverrideDesc": "Suprascrie detectarea automată a numelui nodului Proxmox (detectat implicit prin numele de gazdă).",
-    "proxmoxStatsNodeOverridePlaceholder": "Detectat automat de la numele gazdei",
-    "authTypeStepca": "Pasul CA",
-    "proxmoxIntegration": "Integrare Proxmox",
-    "enableProxmox": "Activează Proxmox",
-    "enableProxmoxDesc": "Marchează această gazdă ca nod Proxmox. Activează descoperirea și importul de informații de către oaspeți direct de pe această gazdă.",
-    "proxmoxDefaultAuthType": "Tip de autentificare implicit",
-    "proxmoxDefaultAuthTypeDesc": "Metodă de autentificare aplicată gazdelor invitate importate. Alegeți tipul de autentificare care corespunde modului în care vă conectați la invitați.",
-    "authTypePassword": "Parolă",
-    "authTypeKey": "Cheie SSH",
-    "authTypeCredential": "Acreditare",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "Nici unul",
-    "proxmoxDefaultCredential": "Acreditare implicită",
-    "proxmoxDefaultCredentialDesc": "Acreditare utilizată pentru gazdele invitate importate atunci când tipul de autentificare este setat la Acreditare.",
-    "proxmoxWindowsDetection": "Detectare Windows / RDP",
-    "proxmoxWindowsDetectionDesc": "Modele de nume separate prin virgulă care declanșează RDP în loc de SSH (fără sensibilitate la majuscule/minuscule)",
-    "proxmoxDockerDetection": "Detectarea Docker",
-    "proxmoxDockerDetectionDesc": "Modele de nume separate prin virgulă care activează Docker pentru invitații potriviți",
-    "proxmoxPreferredRanges": "Intervalele IP preferate",
-    "proxmoxPreferredRangesDesc": "Prefixe separate prin virgulă în ordinea priorității pentru selectarea adresei IP atunci când un oaspete are mai multe interfețe",
-    "proxmoxAutoSync": "Sincronizare automată a invitaților",
-    "proxmoxAutoSyncDesc": "Descoperiți periodic acest nod Proxmox și creați sau actualizați gazdele invitate importate în timp ce sesiunea este deblocată.",
-    "proxmoxSyncInterval": "Interval de sincronizare (minute)",
-    "proxmoxSyncIntervalDesc": "Minim 5 minute. Planificatorul omite sesiunile utilizatorilor blocate.",
-    "proxmoxMarkMissing": "Marchează oaspeții lipsă",
-    "proxmoxMarkMissingDesc": "Adăugați o etichetă proxmox-missing atunci când un invitat importat anterior dispare, în loc să îl ștergeți.",
-    "proxmoxLastSync": "Ultima sincronizare",
-    "proxmoxLastSyncNever": "Încă nesincronizat",
-    "proxmoxLastSyncNoResult": "Niciun detaliu al rezultatului",
-    "proxmoxLastSyncSummary": "{{created}} creat, {{updated}} actualizat, {{markedMissing}} lipsă, {{skipped}} omis",
-    "proxmoxLastSyncStatus": {
-      "error": "Eșuat",
-      "pending": "În așteptare",
-      "success": "Succes"
-    },
-    "proxmoxDiscoverAction": "Descoperiți și importați invitați Proxmox",
-    "proxmoxImportTitle": "Import din Proxmox",
-    "proxmoxSelectHost": "Selectați o gazdă Proxmox…",
-    "proxmoxDiscover": "Descoperi",
-    "proxmoxDiscovering": "Descoperind…",
-    "proxmoxDiscoverGuests": "Descoperă oaspeți",
-    "proxmoxSelectAll": "Selectați tot",
-    "proxmoxDeselectAll": "Deselectați tot",
-    "proxmoxNoGuests": "Nu au fost găsiți invitați pe acest nod Proxmox.",
-    "proxmoxResultImported": "{{count}} importat",
-    "proxmoxResultUpdated": "{{count}} actualizat",
-    "proxmoxResultFailed": "{{count}} a eșuat",
-    "proxmoxImportComplete": "Import Proxmox finalizat: {{summary}}",
-    "proxmoxDiscoveryFailed": "Descoperirea a eșuat",
-    "proxmoxImportFailed": "Importul a eșuat",
-    "docsLink": "Vizualizați documentele",
-    "hostNotFound": "Gazdă negăsită",
-    "loadingHost": "Se încarcă gazda...",
-    "none": "Nici unul",
-    "proxmoxGuestsSelected_one": "{{count}} invitat, {{selected}} selectat",
-    "proxmoxGuestsSelected_other": "{{count}} invitați, {{selected}} selectați",
-    "proxmoxImportButton_one": "Importați gazda {{count}}",
-    "proxmoxImportButton_other": "Importați gazde {{count}}"
-  },
-  "terminal": {
-    "connected": "Conectat"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/ru_RU.json b/plugins/proxmox/locales/translated/ru_RU.json
deleted file mode 100644
index 9955b8966..000000000
--- a/plugins/proxmox/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Статистика Proxmox"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Статистика Proxmox",
-    "cpuUsage": "Использование ЦП",
-    "memoryUsage": "Использование памяти",
-    "diskUsage": "Использование диска",
-    "networkInterfaces": "Сетевые интерфейсы",
-    "uptime": "Время работы",
-    "systemInfo": "Информация о системе",
-    "guestsSummary": "Гости",
-    "storagePools": "Бассейны для хранения",
-    "clusterHealth": "Здоровье кластера",
-    "cpuCores_one": "{{count}} ядро",
-    "cpuCores_other": "{{count}} ядер",
-    "used": "Занято",
-    "total": "Общий",
-    "hostname": "Имя хоста",
-    "kernel": "Ядро",
-    "pveVersion": "Версия для PVE",
-    "name": "Название",
-    "status": "Статус",
-    "type": "Тип",
-    "cpu": "CPU",
-    "mem": "Мем",
-    "disk": "Диск",
-    "running": "Запущен",
-    "stopped": "Остановлен",
-    "guestCounts": "{{running}}/{{total}} бежит",
-    "inactive": "Неактивен",
-    "notClustered": "Автономный узел (не входящий в кластер)",
-    "quorate": "Цитата",
-    "notQuorate": "Кворум не соблюден",
-    "nodeOnline": "Онлайн",
-    "nodeOffline": "Офлайн",
-    "noHostSelected": "Хост не выбран",
-    "pveshNotFound": "pvesh не найден — это узел Proxmox?",
-    "nodeDetectionFailed": "Не удалось определить допустимое имя узла Proxmox.",
-    "connecting": "Подключение...",
-    "connectionFailed": "Не удалось подключиться к узлу Proxmox.",
-    "refresh": "Обновить",
-    "searchGuests": "Поиск гостей...",
-    "filterAll": "Все",
-    "filterVm": "VM",
-    "filterLxc": "ЛХС",
-    "noGuests": "На этом узле не обнаружено виртуальных машин или контейнеров LXC.",
-    "noGuestsMatch": "Ни один из гостей не соответствует текущим фильтрам."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Включить статистику Proxmox",
-    "enableProxmoxStatsDesc": "Отобразить вкладку Proxmox Stats для этого хоста с актуальными статистическими данными по узлам, гостевым системам, хранилищу и кластеру, собранными по SSH.",
-    "proxmoxStatsPollInterval": "Интервал опроса (секунды)",
-    "proxmoxStatsPollIntervalDesc": "Минимум 15 секунд. Как часто обновлять статистику узлов Proxmox.",
-    "proxmoxStatsNodeOverride": "Переопределение имени узла",
-    "proxmoxStatsNodeOverrideDesc": "Отключить автоматическое определение имени узла Proxmox (по умолчанию определяется по имени хоста).",
-    "proxmoxStatsNodeOverridePlaceholder": "Автоматически определено по имени хоста",
-    "authTypeStepca": "Шаг CA",
-    "proxmoxIntegration": "Интеграция Proxmox",
-    "enableProxmox": "Включить Proxmox",
-    "enableProxmoxDesc": "Пометить этот хост как узел Proxmox. Включает обнаружение и импорт гостевых систем непосредственно с этого хоста.",
-    "proxmoxDefaultAuthType": "Тип аутентификации по умолчанию",
-    "proxmoxDefaultAuthTypeDesc": "Метод аутентификации, применяемый к импортированным гостевым хостам. Выберите тип аутентификации, соответствующий способу подключения к гостевым хостам.",
-    "authTypePassword": "Пароль",
-    "authTypeKey": "SSH-ключ",
-    "authTypeCredential": "Учётные данные",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "Нет",
-    "proxmoxDefaultCredential": "Учётные данные по умолчанию",
-    "proxmoxDefaultCredentialDesc": "Учётные данные, используемые для импортированных гостевых хостов, когда в качестве типа аутентификации выбраны «Учётные данные».",
-    "proxmoxWindowsDetection": "Обнаружение Windows / RDP",
-    "proxmoxWindowsDetectionDesc": "Шаблоны имён через запятую, при совпадении с которыми используется RDP вместо SSH (без учёта регистра).",
-    "proxmoxDockerDetection": "Обнаружение Docker",
-    "proxmoxDockerDetectionDesc": "Шаблоны имён через запятую, при совпадении с которыми для гостя включается Docker.",
-    "proxmoxPreferredRanges": "Предпочтительные IP-диапазоны",
-    "proxmoxPreferredRangesDesc": "Список префиксов через запятую в порядке приоритета для выбора IP-адреса, если у гостя несколько интерфейсов.",
-    "proxmoxAutoSync": "Автосинхронизация гостей",
-    "proxmoxAutoSyncDesc": "Периодически обнаруживать этот узел Proxmox и создавать или обновлять импортированные гостевые хосты, пока ваш сеанс разблокирован.",
-    "proxmoxSyncInterval": "Интервал синхронизации (мин.)",
-    "proxmoxSyncIntervalDesc": "Минимум 5 минут. Планировщик пропускает заблокированные сеансы.",
-    "proxmoxMarkMissing": "Помечать отсутствующих гостей",
-    "proxmoxMarkMissingDesc": "Добавлять тег proxmox-missing, когда ранее импортированный гость исчезает, вместо его удаления.",
-    "proxmoxLastSync": "Последняя синхронизация",
-    "proxmoxLastSyncNever": "Не выполнялась",
-    "proxmoxLastSyncNoResult": "Нет сведений о результате",
-    "proxmoxLastSyncSummary": "{{created}} создано, {{updated}} обновлено, {{markedMissing}} отсутствует, {{skipped}} пропущено",
-    "proxmoxLastSyncStatus": {
-      "error": "Ошибка",
-      "pending": "Ожидание",
-      "success": "Успешно"
-    },
-    "proxmoxDiscoverAction": "Обнаружить и импортировать гостей Proxmox",
-    "proxmoxImportTitle": "Импорт из Proxmox",
-    "proxmoxSelectHost": "Выберите хост Proxmox…",
-    "proxmoxDiscover": "Обнаружить",
-    "proxmoxDiscovering": "Обнаружение…",
-    "proxmoxDiscoverGuests": "Обнаружить гостей",
-    "proxmoxSelectAll": "Выбрать всё",
-    "proxmoxDeselectAll": "Снять выделение",
-    "proxmoxNoGuests": "На этом узле Proxmox гости не найдены.",
-    "proxmoxResultImported": "{{count}} импортировано",
-    "proxmoxResultUpdated": "{{count}} обновлено",
-    "proxmoxResultFailed": "{{count}} не удалось",
-    "proxmoxImportComplete": "Импорт Proxmox завершен: {{summary}}",
-    "proxmoxDiscoveryFailed": "Обнаружение не удалось",
-    "proxmoxImportFailed": "Импорт не удался",
-    "docsLink": "Документация",
-    "hostNotFound": "Хост не найден",
-    "loadingHost": "Загрузка хоста...",
-    "none": "Нет",
-    "proxmoxGuestsSelected_one": "{{count}} гость, {{selected}} выбран",
-    "proxmoxGuestsSelected_other": "{{count}} гостей, {{selected}} выбраны",
-    "proxmoxImportButton_one": "Импортировать {{count}} хост",
-    "proxmoxImportButton_other": "Импортировать {{count}} хостов"
-  },
-  "terminal": {
-    "connected": "Подключено"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/sr_SP.json b/plugins/proxmox/locales/translated/sr_SP.json
deleted file mode 100644
index 7f1173bdf..000000000
--- a/plugins/proxmox/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Proxmox статистика"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Proxmox статистика",
-    "cpuUsage": "Искоришћеност процесора",
-    "memoryUsage": "Коришћење меморије",
-    "diskUsage": "Искоришћеност диска",
-    "networkInterfaces": "Мрежни интерфејси",
-    "uptime": "Време непрекидног рада",
-    "systemInfo": "Системске информације",
-    "guestsSummary": "Гости",
-    "storagePools": "Складишни базени",
-    "clusterHealth": "Здравље кластера",
-    "cpuCores_one": "{{count}} Језгро",
-    "cpuCores_other": "{{count}} Језгра",
-    "used": "Коришћено",
-    "total": "Укупно",
-    "hostname": "Име хоста",
-    "kernel": "Језгро",
-    "pveVersion": "ПВЕ верзија",
-    "name": "Име",
-    "status": "Статус",
-    "type": "Тип",
-    "cpu": "Процесор",
-    "mem": "Мем",
-    "disk": "Диск",
-    "running": "Трчање",
-    "stopped": "Заустављено",
-    "guestCounts": "{{running}}/{{total}} трчи",
-    "inactive": "Неактивно",
-    "notClustered": "Самостални чвор (није део кластера)",
-    "quorate": "Кворат",
-    "notQuorate": "Није кворум",
-    "nodeOnline": "Онлајн",
-    "nodeOffline": "Офлајн",
-    "noHostSelected": "Није изабран домаћин",
-    "pveshNotFound": "pvesh није пронађен - да ли је ово Proxmox чвор?",
-    "nodeDetectionFailed": "Није могуће утврдити важеће име Proxmox чвора",
-    "connecting": "Повезивање...",
-    "connectionFailed": "Повезивање са Proxmox чвором није успело",
-    "refresh": "Освежи",
-    "searchGuests": "Претражи госте...",
-    "filterAll": "Сви",
-    "filterVm": "Виртуелна машина",
-    "filterLxc": "LXC",
-    "noGuests": "На овом чвору нису пронађене виртуелне машине или LXC контејнери.",
-    "noGuestsMatch": "Ниједан гост не одговара тренутним филтерима."
-  },
-  "hosts": {
-    "tabProxmox": "Проксмокс",
-    "enableProxmoxStats": "Омогући Proxmox статистику",
-    "enableProxmoxStatsDesc": "Прикажи картицу Proxmox Stats за овај хост са статистикама уживо чвора, госта, складишта и кластера прикупљеним преко SSH-а.",
-    "proxmoxStatsPollInterval": "Интервал анкете (секунде)",
-    "proxmoxStatsPollIntervalDesc": "Минимум 15 секунди. Колико често освежавати статистику Proxmox чвора.",
-    "proxmoxStatsNodeOverride": "Замена имена чвора",
-    "proxmoxStatsNodeOverrideDesc": "Поништи аутоматско откривање имена Proxmox чвора (подразумевано се открива преко имена хоста).",
-    "proxmoxStatsNodeOverridePlaceholder": "Аутоматски детектовано на основу имена хоста",
-    "authTypeStepca": "Корак CA",
-    "proxmoxIntegration": "Интеграција са Proxmox-ом",
-    "enableProxmox": "Омогући Proxmox",
-    "enableProxmoxDesc": "Означи овај хост као Proxmox чвор. Омогућава откривање госта и увоз директно са овог хоста.",
-    "proxmoxDefaultAuthType": "Подразумевани тип овлашћења",
-    "proxmoxDefaultAuthTypeDesc": "Метод аутентификације примењен на увезене гостујуће хостове. Изаберите тип аутентификације који одговара начину на који се повезујете са гостима.",
-    "authTypePassword": "Лозинка",
-    "authTypeKey": "SSH кључ",
-    "authTypeCredential": "Акредитив",
-    "authTypeOpkssh": "ОПКШ",
-    "authTypeNone": "Ниједан",
-    "proxmoxDefaultCredential": "Подразумевани акредитив",
-    "proxmoxDefaultCredentialDesc": "Акредитив који се користи за увезене гостујуће хостове када је тип овлашћења подешен на Акредитив.",
-    "proxmoxWindowsDetection": "Детекција Windows-а / RDP-а",
-    "proxmoxWindowsDetectionDesc": "Обрасци имена раздвојени зарезима који покрећу RDP уместо SSH (не разликују велика и мала слова)",
-    "proxmoxDockerDetection": "Детекција Докера",
-    "proxmoxDockerDetectionDesc": "Шаблони имена одвојени зарезима који омогућавају Докеру да упари госте",
-    "proxmoxPreferredRanges": "Жељени IP опсези",
-    "proxmoxPreferredRangesDesc": "Префикси одвојени зарезима по редоследу приоритета за избор IP адресе када гост има више интерфејса",
-    "proxmoxAutoSync": "Аутоматска синхронизација гостију",
-    "proxmoxAutoSyncDesc": "Периодично откривајте овај Proxmox чвор и креирајте или ажурирајте увезене гостујуће хостове док је ваша сесија откључана.",
-    "proxmoxSyncInterval": "Интервал синхронизације (минути)",
-    "proxmoxSyncIntervalDesc": "Минимум 5 минута. Планер прескаче закључане корисничке сесије.",
-    "proxmoxMarkMissing": "Означи госте који недостају",
-    "proxmoxMarkMissingDesc": "Додајте ознаку proxmox-missing када претходно увезени гост нестане уместо да га избришете.",
-    "proxmoxLastSync": "Последња синхронизација",
-    "proxmoxLastSyncNever": "Још није синхронизовано",
-    "proxmoxLastSyncNoResult": "Нема детаља о резултатима",
-    "proxmoxLastSyncSummary": "{{created}} креирано, {{updated}} ажурирано, {{markedMissing}} недостаје, {{skipped}} прескочено",
-    "proxmoxLastSyncStatus": {
-      "error": "Неуспешно",
-      "pending": "На чекању",
-      "success": "Успех"
-    },
-    "proxmoxDiscoverAction": "Откријте и увезите госте Proxmox-а",
-    "proxmoxImportTitle": "Увоз из Proxmox-а",
-    "proxmoxSelectHost": "Изаберите Proxmox хост…",
-    "proxmoxDiscover": "Откријте",
-    "proxmoxDiscovering": "Откривање…",
-    "proxmoxDiscoverGuests": "Откријте госте",
-    "proxmoxSelectAll": "Изабери све",
-    "proxmoxDeselectAll": "Поништи избор свих",
-    "proxmoxNoGuests": "Није пронађен ниједан гост на овом Proxmox чвору.",
-    "proxmoxResultImported": "{{count}} увезено",
-    "proxmoxResultUpdated": "{{count}} ажурирано",
-    "proxmoxResultFailed": "{{count}} није успело",
-    "proxmoxImportComplete": "Увоз Proxmox-а завршен: {{summary}}",
-    "proxmoxDiscoveryFailed": "Откривање није успело",
-    "proxmoxImportFailed": "Увоз није успео",
-    "docsLink": "Прикажи документе",
-    "hostNotFound": "Хост није пронађен",
-    "loadingHost": "Учитавање хоста...",
-    "none": "Ниједан",
-    "proxmoxGuestsSelected_one": "{{count}} гост, {{selected}} изабрано",
-    "proxmoxGuestsSelected_other": "{{count}} гостију, {{selected}} изабрано",
-    "proxmoxImportButton_one": "Увоз {{count}} хоста",
-    "proxmoxImportButton_other": "Увези {{count}} хостова"
-  },
-  "terminal": {
-    "connected": "Повезано"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/sv_SE.json b/plugins/proxmox/locales/translated/sv_SE.json
deleted file mode 100644
index cafab0bbe..000000000
--- a/plugins/proxmox/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Proxmox-statistik"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Proxmox-statistik",
-    "cpuUsage": "CPU-användning",
-    "memoryUsage": "Minnesanvändning",
-    "diskUsage": "Diskanvändning",
-    "networkInterfaces": "Nätverksgränssnitt",
-    "uptime": "Drifttid",
-    "systemInfo": "Systeminformation",
-    "guestsSummary": "Gäster",
-    "storagePools": "Lagringspooler",
-    "clusterHealth": "Klusterhälsa",
-    "cpuCores_one": "{{count}} Kärna",
-    "cpuCores_other": "{{count}} Kärnor",
-    "used": "Begagnad",
-    "total": "Total",
-    "hostname": "Värdnamn",
-    "kernel": "Kärna",
-    "pveVersion": "PVE-version",
-    "name": "Namn",
-    "status": "Status",
-    "type": "Typ",
-    "cpu": "CPU",
-    "mem": "Mem",
-    "disk": "Disk",
-    "running": "Spring",
-    "stopped": "Stoppad",
-    "guestCounts": "{{running}}/{{total}} springer",
-    "inactive": "Inaktiv",
-    "notClustered": "Fristående nod (inte en del av ett kluster)",
-    "quorate": "Kvorat",
-    "notQuorate": "Inte kvoriöst",
-    "nodeOnline": "Online",
-    "nodeOffline": "Off-line",
-    "noHostSelected": "Ingen värd vald",
-    "pveshNotFound": "pvesh hittades inte - är detta en Proxmox-nod?",
-    "nodeDetectionFailed": "Det gick inte att fastställa ett giltigt Proxmox-nodnamn",
-    "connecting": "Ansluter...",
-    "connectionFailed": "Misslyckades med att ansluta till Proxmox-noden",
-    "refresh": "Uppdatera",
-    "searchGuests": "Sök gäster...",
-    "filterAll": "Alla",
-    "filterVm": "VM",
-    "filterLxc": "LXC",
-    "noGuests": "Inga virtuella maskiner eller LXC-behållare hittades på den här noden.",
-    "noGuestsMatch": "Inga gäster matchar de aktuella filtren."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Aktivera Proxmox-statistik",
-    "enableProxmoxStatsDesc": "Visa en Proxmox-statistikflik för den här värden med statistik för livenoder, gäster, lagring och kluster insamlad via SSH.",
-    "proxmoxStatsPollInterval": "Undersökningsintervall (sekunder)",
-    "proxmoxStatsPollIntervalDesc": "Minst 15 sekunder. Hur ofta Proxmox-nodstatistik ska uppdateras.",
-    "proxmoxStatsNodeOverride": "Åsidosättning av nodnamn",
-    "proxmoxStatsNodeOverrideDesc": "Åsidosätt automatisk detektering av Proxmox-nodnamnet (detekteras via värdnamn som standard).",
-    "proxmoxStatsNodeOverridePlaceholder": "Automatiskt identifierad från värdnamn",
-    "authTypeStepca": "Steg CA",
-    "proxmoxIntegration": "Proxmox-integration",
-    "enableProxmox": "Aktivera Proxmox",
-    "enableProxmoxDesc": "Markera denna värd som en Proxmox-nod. Aktiverar gästidentifiering och import direkt från denna värd.",
-    "proxmoxDefaultAuthType": "Standardautentiseringstyp",
-    "proxmoxDefaultAuthTypeDesc": "Autentiseringsmetod tillämpad på importerade gästvärdar. Välj den autentiseringstyp som matchar hur du ansluter till dina gäster.",
-    "authTypePassword": "Lösenord",
-    "authTypeKey": "SSH-nyckel",
-    "authTypeCredential": "Referenser",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "Ingen",
-    "proxmoxDefaultCredential": "Standardautentiseringsuppgifter",
-    "proxmoxDefaultCredentialDesc": "Autentiseringsuppgifter som används för importerade gästvärdar när autentiseringstypen är inställd på Autentiseringsuppgifter.",
-    "proxmoxWindowsDetection": "Windows/RDP-detektering",
-    "proxmoxWindowsDetectionDesc": "Kommaavgränsade namnmönster som utlöser RDP istället för SSH (skiftlägeskänsliga)",
-    "proxmoxDockerDetection": "Docker-detektering",
-    "proxmoxDockerDetectionDesc": "Kommaavgränsade namnmönster som gör det möjligt för Docker att matcha gäster",
-    "proxmoxPreferredRanges": "Föredragna IP-intervall",
-    "proxmoxPreferredRangesDesc": "Kommaavgränsade prefix i prioritetsordning för IP-val när en gäst har flera gränssnitt",
-    "proxmoxAutoSync": "Synkronisera gäster automatiskt",
-    "proxmoxAutoSyncDesc": "Upptäck regelbundet denna Proxmox-nod och skapa eller uppdatera importerade gästvärdar medan din session är upplåst.",
-    "proxmoxSyncInterval": "Synkroniseringsintervall (minuter)",
-    "proxmoxSyncIntervalDesc": "Minst 5 minuter. Schemaläggaren hoppar över låsta användarsessioner.",
-    "proxmoxMarkMissing": "Markera saknade gäster",
-    "proxmoxMarkMissingDesc": "Lägg till en proxmox-missing-tagg när en tidigare importerad gäst försvinner istället för att ta bort den.",
-    "proxmoxLastSync": "Senaste synkronisering",
-    "proxmoxLastSyncNever": "Inte synkroniserad än",
-    "proxmoxLastSyncNoResult": "Inga resultatdetaljer",
-    "proxmoxLastSyncSummary": "{{created}} skapad, {{updated}} uppdaterad, {{markedMissing}} saknas, {{skipped}} hoppad över",
-    "proxmoxLastSyncStatus": {
-      "error": "Misslyckades",
-      "pending": "I avvaktan på",
-      "success": "Framgång"
-    },
-    "proxmoxDiscoverAction": "Upptäck och importera Proxmox-gäster",
-    "proxmoxImportTitle": "Importera från Proxmox",
-    "proxmoxSelectHost": "Välj en Proxmox-värd…",
-    "proxmoxDiscover": "Upptäcka",
-    "proxmoxDiscovering": "Upptäcker…",
-    "proxmoxDiscoverGuests": "Upptäck gäster",
-    "proxmoxSelectAll": "Markera alla",
-    "proxmoxDeselectAll": "Avmarkera alla",
-    "proxmoxNoGuests": "Inga gäster hittades på denna Proxmox-nod.",
-    "proxmoxResultImported": "{{count}} importerad",
-    "proxmoxResultUpdated": "{{count}} uppdaterad",
-    "proxmoxResultFailed": "{{count}} misslyckades",
-    "proxmoxImportComplete": "Proxmox-import klar: {{summary}}",
-    "proxmoxDiscoveryFailed": "Upptäckten misslyckades",
-    "proxmoxImportFailed": "Importen misslyckades",
-    "docsLink": "Visa dokument",
-    "hostNotFound": "Värden hittades inte",
-    "loadingHost": "Laddar värd...",
-    "none": "Ingen",
-    "proxmoxGuestsSelected_one": "{{count}} gäst, {{selected}} vald",
-    "proxmoxGuestsSelected_other": "{{count}} gäster, {{selected}} vald",
-    "proxmoxImportButton_one": "Importera {{count}} värd",
-    "proxmoxImportButton_other": "Importera {{count}} värdar"
-  },
-  "terminal": {
-    "connected": "Ansluten"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/th_TH.json b/plugins/proxmox/locales/translated/th_TH.json
deleted file mode 100644
index 686cc0f2a..000000000
--- a/plugins/proxmox/locales/translated/th_TH.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "สถิติ Proxmox"
-  },
-  "proxmoxStats": {
-    "tabTitle": "สถิติ Proxmox",
-    "cpuUsage": "การใช้งาน CPU",
-    "memoryUsage": "การใช้งานหน่วยความจำ",
-    "diskUsage": "การใช้งานดิสก์",
-    "networkInterfaces": "อินเทอร์เฟซเครือข่าย",
-    "uptime": "เวลาใช้งาน",
-    "systemInfo": "ข้อมูลระบบ",
-    "guestsSummary": "แขก",
-    "storagePools": "สระเก็บน้ำ",
-    "clusterHealth": "สุขภาพคลัสเตอร์",
-    "cpuCores_one": "{{count}} แกนหลัก",
-    "cpuCores_other": "{{count}} คอร์",
-    "used": "ใช้แล้ว",
-    "total": "ทั้งหมด",
-    "hostname": "ชื่อโฮสต์",
-    "kernel": "เคอร์เนล",
-    "pveVersion": "เวอร์ชัน PVE",
-    "name": "ชื่อ",
-    "status": "สถานะ",
-    "type": "พิมพ์",
-    "cpu": "ซีพียู",
-    "mem": "เมม",
-    "disk": "ดิสก์",
-    "running": "วิ่ง",
-    "stopped": "หยุด",
-    "guestCounts": "{{running}}/{{total}} กำลังทำงาน",
-    "inactive": "ไม่ใช้งาน",
-    "notClustered": "โหนดแบบสแตนด์อโลน (ไม่ได้เป็นส่วนหนึ่งของคลัสเตอร์)",
-    "quorate": "ควอต",
-    "notQuorate": "องค์ประชุมไม่ครบ",
-    "nodeOnline": "ออนไลน์",
-    "nodeOffline": "ออฟไลน์",
-    "noHostSelected": "ไม่ได้เลือกโฮสต์",
-    "pveshNotFound": "ไม่พบ pvesh - นี่เป็นโหนด Proxmox หรือไม่?",
-    "nodeDetectionFailed": "ไม่สามารถระบุชื่อโหนด Proxmox ที่ถูกต้องได้",
-    "connecting": "กำลังเชื่อมต่อ...",
-    "connectionFailed": "ไม่สามารถเชื่อมต่อกับโหนด Proxmox ได้",
-    "refresh": "รีเฟรช",
-    "searchGuests": "ค้นหาผู้เข้าพัก...",
-    "filterAll": "ทั้งหมด",
-    "filterVm": "วีเอ็ม",
-    "filterLxc": "LXC",
-    "noGuests": "ไม่พบเครื่องเสมือน (VM) หรือคอนเทนเนอร์ LXC บนโหนดนี้",
-    "noGuestsMatch": "ไม่มีแขกท่านใดตรงกับตัวกรองที่มีอยู่ในขณะนี้"
-  },
-  "hosts": {
-    "tabProxmox": "โปรกซ์ม็อกซ์",
-    "enableProxmoxStats": "เปิดใช้งานสถิติ Proxmox",
-    "enableProxmoxStatsDesc": "แสดงแท็บสถิติ Proxmox สำหรับโฮสต์นี้ พร้อมสถิติแบบเรียลไทม์ของโหนด เกสต์ พื้นที่จัดเก็บ และคลัสเตอร์ที่รวบรวมผ่าน SSH",
-    "proxmoxStatsPollInterval": "ช่วงเวลาการสำรวจ (วินาที)",
-    "proxmoxStatsPollIntervalDesc": "อย่างน้อย 15 วินาที ความถี่ในการอัปเดตสถิติโหนด Proxmox",
-    "proxmoxStatsNodeOverride": "การแทนที่ชื่อโหนด",
-    "proxmoxStatsNodeOverrideDesc": "ยกเลิกการตรวจจับชื่อโหนด Proxmox อัตโนมัติ (โดยค่าเริ่มต้นจะตรวจจับผ่านชื่อโฮสต์)",
-    "proxmoxStatsNodeOverridePlaceholder": "ตรวจจับอัตโนมัติจากชื่อโฮสต์",
-    "authTypeStepca": "ขั้นตอน CA",
-    "proxmoxIntegration": "การผสานรวม Proxmox",
-    "enableProxmox": "เปิดใช้งาน Proxmox",
-    "enableProxmoxDesc": "กำหนดให้โฮสต์นี้เป็นโหนด Proxmox เพื่อเปิดใช้งานการค้นหาและนำเข้าเครื่องเสมือนโดยตรงจากโฮสต์นี้",
-    "proxmoxDefaultAuthType": "ประเภทการตรวจสอบสิทธิ์เริ่มต้น",
-    "proxmoxDefaultAuthTypeDesc": "วิธีการตรวจสอบสิทธิ์ที่ใช้กับโฮสต์แขกที่นำเข้า เลือกประเภทการตรวจสอบสิทธิ์ที่ตรงกับวิธีการที่คุณเชื่อมต่อกับแขกของคุณ",
-    "authTypePassword": "รหัสผ่าน",
-    "authTypeKey": "คีย์ SSH",
-    "authTypeCredential": "ใบรับรอง",
-    "authTypeOpkssh": "โอพีเคเอสเอช",
-    "authTypeNone": "ไม่มี",
-    "proxmoxDefaultCredential": "ข้อมูลประจำตัวเริ่มต้น",
-    "proxmoxDefaultCredentialDesc": "ข้อมูลประจำตัวที่ใช้สำหรับโฮสต์แขกที่นำเข้าเมื่อตั้งค่าประเภทการตรวจสอบสิทธิ์เป็นข้อมูลประจำตัว (Credential)",
-    "proxmoxWindowsDetection": "การตรวจจับ Windows / RDP",
-    "proxmoxWindowsDetectionDesc": "รูปแบบชื่อที่คั่นด้วยเครื่องหมายจุลภาคซึ่งจะเรียกใช้งาน RDP แทน SSH (ไม่คำนึงถึงตัวพิมพ์ใหญ่เล็ก)",
-    "proxmoxDockerDetection": "การตรวจจับ Docker",
-    "proxmoxDockerDetectionDesc": "รูปแบบชื่อที่คั่นด้วยเครื่องหมายจุลภาค ซึ่งช่วยให้ Docker สามารถจับคู่กับเครื่องเสมือนได้",
-    "proxmoxPreferredRanges": "ช่วง IP ที่ต้องการ",
-    "proxmoxPreferredRangesDesc": "คำนำหน้า IP ที่คั่นด้วยเครื่องหมายจุลภาคเรียงตามลำดับความสำคัญสำหรับการเลือก IP เมื่อผู้ใช้งานมีอินเทอร์เฟซหลายตัว",
-    "proxmoxAutoSync": "ซิงค์ข้อมูลแขกโดยอัตโนมัติ",
-    "proxmoxAutoSyncDesc": "ตรวจสอบโหนด Proxmox นี้เป็นระยะ และสร้างหรืออัปเดตโฮสต์แขกที่นำเข้าในขณะที่เซสชันของคุณไม่ได้ล็อกอยู่",
-    "proxmoxSyncInterval": "ช่วงเวลาการซิงค์ (นาที)",
-    "proxmoxSyncIntervalDesc": "อย่างน้อย 5 นาที ระบบกำหนดเวลาจะข้ามเซสชันของผู้ใช้ที่ถูกล็อกไว้",
-    "proxmoxMarkMissing": "ทำเครื่องหมายแขกที่ขาดหายไป",
-    "proxmoxMarkMissingDesc": "เพิ่มแท็ก proxmox-missing เมื่อเครื่องเสมือนที่นำเข้าก่อนหน้านี้หายไป แทนที่จะลบออก",
-    "proxmoxLastSync": "การซิงค์ครั้งล่าสุด",
-    "proxmoxLastSyncNever": "ยังไม่ได้ซิงค์ข้อมูล",
-    "proxmoxLastSyncNoResult": "ไม่มีรายละเอียดผลลัพธ์",
-    "proxmoxLastSyncSummary": "{{created}} ถูกสร้างขึ้น, {{updated}} อัปเดตแล้ว, {{markedMissing}} หายไป, {{skipped}} ข้ามไป",
-    "proxmoxLastSyncStatus": {
-      "error": "ล้มเหลว",
-      "pending": "รอดำเนินการ",
-      "success": "ความสำเร็จ"
-    },
-    "proxmoxDiscoverAction": "ค้นหาและนำเข้าแขกของ Proxmox",
-    "proxmoxImportTitle": "นำเข้าจาก Proxmox",
-    "proxmoxSelectHost": "เลือกโฮสต์ Proxmox…",
-    "proxmoxDiscover": "ค้นพบ",
-    "proxmoxDiscovering": "การค้นพบ…",
-    "proxmoxDiscoverGuests": "ค้นพบแขก",
-    "proxmoxSelectAll": "เลือกทั้งหมด",
-    "proxmoxDeselectAll": "ยกเลิกการเลือกทั้งหมด",
-    "proxmoxNoGuests": "ไม่พบผู้ใช้งานในโหนด Proxmox นี้",
-    "proxmoxResultImported": "{{count}} นำเข้าแล้ว",
-    "proxmoxResultUpdated": "{{count}} อัปเดตแล้ว",
-    "proxmoxResultFailed": "{{count}} ล้มเหลว",
-    "proxmoxImportComplete": "การนำเข้า Proxmox เสร็จสมบูรณ์: {{summary}}",
-    "proxmoxDiscoveryFailed": "การค้นพบล้มเหลว",
-    "proxmoxImportFailed": "การนำเข้าล้มเหลว",
-    "docsLink": "ดูเอกสาร",
-    "hostNotFound": "ไม่พบโฮสต์",
-    "loadingHost": "กำลังโหลดโฮสต์...",
-    "none": "ไม่มี",
-    "proxmoxGuestsSelected_one": "{{count}} แขก, {{selected}} ผู้ถูกเลือก",
-    "proxmoxGuestsSelected_other": "แขก {{count}} คน, เลือก {{selected}} คน",
-    "proxmoxImportButton_one": "นำเข้าโฮสต์ {{count}}",
-    "proxmoxImportButton_other": "นำเข้าโฮสต์ {{count}}"
-  },
-  "terminal": {
-    "connected": "เชื่อมต่อแล้ว"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/tr_TR.json b/plugins/proxmox/locales/translated/tr_TR.json
deleted file mode 100644
index 765f2d44d..000000000
--- a/plugins/proxmox/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Proxmox İstatistikleri"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Proxmox İstatistikleri",
-    "cpuUsage": "CPU Kullanımı",
-    "memoryUsage": "Bellek Kullanımı",
-    "diskUsage": "Disk Kullanımı",
-    "networkInterfaces": "Ağ Arayüzleri",
-    "uptime": "Çalışma Süresi",
-    "systemInfo": "Sistem Bilgisi",
-    "guestsSummary": "Misafirler",
-    "storagePools": "Depolama Havuzları",
-    "clusterHealth": "Küme Sağlığı",
-    "cpuCores_one": "{{count}} Çekirdek",
-    "cpuCores_other": "{{count}} Çekirdek",
-    "used": "Kullanılan",
-    "total": "Toplam",
-    "hostname": "Ana bilgisayar adı",
-    "kernel": "Çekirdek",
-    "pveVersion": "PVE Sürümü",
-    "name": "Ad",
-    "status": "Durum",
-    "type": "Tür",
-    "cpu": "CPU",
-    "mem": "Mem",
-    "disk": "Disk",
-    "running": "Çalışıyor",
-    "stopped": "Durduruldu",
-    "guestCounts": "{{running}}/{{total}} çalışıyor",
-    "inactive": "Etkin Değil",
-    "notClustered": "Bağımsız düğüm (kümenin parçası olmayan)",
-    "quorate": "Quora",
-    "notQuorate": "Yeterli çoğunluğa sahip değil",
-    "nodeOnline": "çevrimiçi",
-    "nodeOffline": "Çevrimdışı",
-    "noHostSelected": "Sunucu seçilmedi",
-    "pveshNotFound": "pvesh bulunamadı - bu bir Proxmox düğümü mü?",
-    "nodeDetectionFailed": "Geçerli bir Proxmox düğüm adı belirlenemedi.",
-    "connecting": "Bağlanıyor...",
-    "connectionFailed": "Proxmox düğümüne bağlanılamadı.",
-    "refresh": "Yenile",
-    "searchGuests": "Misafirleri ara...",
-    "filterAll": "Tümü",
-    "filterVm": "Sanal makine",
-    "filterLxc": "LXC",
-    "noGuests": "Bu düğümde hiçbir sanal makine veya LXC kapsayıcısı bulunamadı.",
-    "noGuestsMatch": "Mevcut filtrelere uyan konuk bulunamadı."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Proxmox İstatistiklerini Etkinleştir",
-    "enableProxmoxStatsDesc": "Bu sunucu için, SSH üzerinden toplanan canlı düğüm, sanal makine, depolama ve küme istatistiklerini içeren bir Proxmox İstatistikleri sekmesi gösterin.",
-    "proxmoxStatsPollInterval": "Anket aralığı (saniye)",
-    "proxmoxStatsPollIntervalDesc": "En az 15 saniye. Proxmox düğüm istatistiklerinin ne sıklıkla yenilenmesi gerektiği.",
-    "proxmoxStatsNodeOverride": "Düğüm adı geçersiz kılma",
-    "proxmoxStatsNodeOverrideDesc": "Proxmox düğüm adının otomatik olarak algılanmasını (varsayılan olarak ana bilgisayar adı üzerinden algılanır) geçersiz kılın.",
-    "proxmoxStatsNodeOverridePlaceholder": "Ana bilgisayar adından otomatik olarak algılandı",
-    "authTypeStepca": "Adım CA",
-    "proxmoxIntegration": "Proxmox Entegrasyonu",
-    "enableProxmox": "Proxmox'u Etkinleştir",
-    "enableProxmoxDesc": "Bu ana bilgisayarı bir Proxmox düğümü olarak işaretle. Bu ana bilgisayardan doğrudan konuk keşfi ve içe aktarmayı etkinleştirir.",
-    "proxmoxDefaultAuthType": "Varsayılan Kimlik Doğrulama Türü",
-    "proxmoxDefaultAuthTypeDesc": "İçe aktarılan konuk ana bilgisayarlara uygulanan kimlik doğrulama yöntemi. Konuklarınıza nasıl bağlandığınıza uygun kimlik doğrulama türünü seçin.",
-    "authTypePassword": "Parola",
-    "authTypeKey": "SSH Anahtarı",
-    "authTypeCredential": "Kimlik Bilgisi",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "Yok",
-    "proxmoxDefaultCredential": "Varsayılan Kimlik Bilgisi",
-    "proxmoxDefaultCredentialDesc": "Kimlik doğrulama türü Kimlik Bilgisi olarak ayarlandığında içe aktarılan misafir ana makineleri için kullanılan kimlik bilgisi.",
-    "proxmoxWindowsDetection": "Windows / RDP algılama",
-    "proxmoxWindowsDetectionDesc": "SSH yerine RDP'yi tetikleyen virgülle ayrılmış ad desenleri (büyük/küçük harf duyarsız)",
-    "proxmoxDockerDetection": "Docker algılama",
-    "proxmoxDockerDetectionDesc": "Eşleşen misafirler için Docker'ı etkinleştiren virgülle ayrılmış ad desenleri",
-    "proxmoxPreferredRanges": "Tercih edilen IP aralıkları",
-    "proxmoxPreferredRangesDesc": "Bir misafirde birden fazla arayüz olduğunda IP seçimi için öncelik sırasına göre virgülle ayrılmış önekler",
-    "proxmoxAutoSync": "Misafirleri otomatik eşitle",
-    "proxmoxAutoSyncDesc": "Oturumunuz açıkken bu Proxmox düğümünü periyodik olarak keşfet ve içe aktarılan misafir ana makinelerini oluştur veya güncelle.",
-    "proxmoxSyncInterval": "Eşitleme aralığı (dakika)",
-    "proxmoxSyncIntervalDesc": "En az 5 dakika. Zamanlayıcı kilitli kullanıcı oturumlarını atlar.",
-    "proxmoxMarkMissing": "Kayıp misafirleri işaretle",
-    "proxmoxMarkMissingDesc": "Daha önce içe aktarılan bir misafir kaybolduğunda onu silmek yerine bir proxmox-missing etiketi ekle.",
-    "proxmoxLastSync": "Son eşitleme",
-    "proxmoxLastSyncNever": "Henüz eşitlenmedi",
-    "proxmoxLastSyncNoResult": "Sonuç detayı yok",
-    "proxmoxLastSyncSummary": "{{created}} oluşturuldu, {{updated}} güncellendi, {{markedMissing}} kayıp işaretlendi, {{skipped}} atlandı",
-    "proxmoxLastSyncStatus": {
-      "error": "Başarısız",
-      "pending": "Beklemede",
-      "success": "Başarılı"
-    },
-    "proxmoxDiscoverAction": "Proxmox misafirlerini keşfet ve içe aktar",
-    "proxmoxImportTitle": "Proxmox'tan içe aktar",
-    "proxmoxSelectHost": "Bir Proxmox ana makinesi seç…",
-    "proxmoxDiscover": "Keşfet",
-    "proxmoxDiscovering": "Keşfediliyor…",
-    "proxmoxDiscoverGuests": "Misafirleri keşfet",
-    "proxmoxSelectAll": "Tümünü seç",
-    "proxmoxDeselectAll": "Tüm seçimi kaldır",
-    "proxmoxNoGuests": "Bu Proxmox düğümünde hiç misafir bulunamadı.",
-    "proxmoxResultImported": "{{count}} içe aktarıldı",
-    "proxmoxResultUpdated": "{{count}} güncellendi",
-    "proxmoxResultFailed": "{{count}} başarısız",
-    "proxmoxImportComplete": "Proxmox içe aktarma tamamlandı: {{summary}}",
-    "proxmoxDiscoveryFailed": "Keşif başarısız",
-    "proxmoxImportFailed": "İçe aktarma başarısız",
-    "docsLink": "Dokümanları görüntüle",
-    "hostNotFound": "Host bulunamadı",
-    "loadingHost": "Host yükleniyor...",
-    "none": "Hiçbiri",
-    "proxmoxGuestsSelected_one": "{{count}} misafir, {{selected}} seçildi",
-    "proxmoxGuestsSelected_other": "{{count}} misafir, {{selected}} seçildi",
-    "proxmoxImportButton_one": "{{count}} ana makineyi içe aktar",
-    "proxmoxImportButton_other": "{{count}} sunucuyu içe aktar"
-  },
-  "terminal": {
-    "connected": "Bağlandı"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/uk_UA.json b/plugins/proxmox/locales/translated/uk_UA.json
deleted file mode 100644
index fb10a9a8b..000000000
--- a/plugins/proxmox/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Статистика Proxmox"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Статистика Proxmox",
-    "cpuUsage": "Використання процесора",
-    "memoryUsage": "Використання пам'яті",
-    "diskUsage": "Використання диска",
-    "networkInterfaces": "Мережеві інтерфейси",
-    "uptime": "Час безвідмовної роботи",
-    "systemInfo": "Інформація про систему",
-    "guestsSummary": "Гості",
-    "storagePools": "Пули зберігання",
-    "clusterHealth": "Кластерне здоров'я",
-    "cpuCores_one": "{{count}} Ядро",
-    "cpuCores_other": "{{count}} Ядра",
-    "used": "Використано",
-    "total": "Всього",
-    "hostname": "Ім'я хоста",
-    "kernel": "Ядро",
-    "pveVersion": "ПВЕ-версія",
-    "name": "Ім'я",
-    "status": "Статус",
-    "type": "Тип",
-    "cpu": "Процесор",
-    "mem": "Мем",
-    "disk": "Диск",
-    "running": "Біг",
-    "stopped": "Зупинено",
-    "guestCounts": "{{running}}/{{total}} бігає",
-    "inactive": "Неактивний",
-    "notClustered": "Автономний вузол (не є частиною кластера)",
-    "quorate": "Кворат",
-    "notQuorate": "Не має кворуму",
-    "nodeOnline": "Онлайн",
-    "nodeOffline": "Офлайн",
-    "noHostSelected": "Хост не вибрано",
-    "pveshNotFound": "pvesh не знайдено - це вузол Proxmox?",
-    "nodeDetectionFailed": "Не вдається визначити дійсну назву вузла Proxmox",
-    "connecting": "Підключення...",
-    "connectionFailed": "Не вдалося підключитися до вузла Proxmox",
-    "refresh": "Оновити",
-    "searchGuests": "Пошук гостей...",
-    "filterAll": "Усі",
-    "filterVm": "ВМ",
-    "filterLxc": "LXC",
-    "noGuests": "На цьому вузлі не знайдено віртуальних машин або контейнерів LXC.",
-    "noGuestsMatch": "Немає гостей, які відповідають поточним фільтрам."
-  },
-  "hosts": {
-    "tabProxmox": "Проксмокс",
-    "enableProxmoxStats": "Увімкнути статистику Proxmox",
-    "enableProxmoxStatsDesc": "Показати вкладку статистики Proxmox для цього хоста зі статистикою вузла, гостя, сховища та кластера, зібраною через SSH.",
-    "proxmoxStatsPollInterval": "Інтервал опитування (секунди)",
-    "proxmoxStatsPollIntervalDesc": "Мінімум 15 секунд. Як часто оновлювати статистику вузла Proxmox.",
-    "proxmoxStatsNodeOverride": "Перевизначення назви вузла",
-    "proxmoxStatsNodeOverrideDesc": "Перевизначити автоматичне визначення імені вузла Proxmox (за замовчуванням визначається через ім'я хоста).",
-    "proxmoxStatsNodeOverridePlaceholder": "Автоматично визначено за назвою хоста",
-    "authTypeStepca": "Крок CA",
-    "proxmoxIntegration": "Інтеграція з Proxmox",
-    "enableProxmox": "Увімкнути Proxmox",
-    "enableProxmoxDesc": "Позначити цей хост як вузол Proxmox. Дозволяє виявлення гостьових систем та імпорт безпосередньо з цього хоста.",
-    "proxmoxDefaultAuthType": "Тип автентифікації за замовчуванням",
-    "proxmoxDefaultAuthTypeDesc": "Метод автентифікації, застосований до імпортованих гостьових хостів. Виберіть тип автентифікації, який відповідає способу підключення до ваших гостей.",
-    "authTypePassword": "Пароль",
-    "authTypeKey": "SSH-ключ",
-    "authTypeCredential": "Посвідчення",
-    "authTypeOpkssh": "ОПКШ",
-    "authTypeNone": "Жоден",
-    "proxmoxDefaultCredential": "Облікові дані за замовчуванням",
-    "proxmoxDefaultCredentialDesc": "Облікові дані, що використовуються для імпортованих гостьових хостів, коли для типу автентифікації встановлено значення \"Облікові дані\".",
-    "proxmoxWindowsDetection": "Виявлення Windows / RDP",
-    "proxmoxWindowsDetectionDesc": "Шаблони імен, розділені комами, які запускають RDP замість SSH (без урахування регістру)",
-    "proxmoxDockerDetection": "Виявлення Docker",
-    "proxmoxDockerDetectionDesc": "Шаблони імен, розділені комами, що дозволяють Docker знаходити гостьові файли в відповідниках",
-    "proxmoxPreferredRanges": "Бажані діапазони IP-адрес",
-    "proxmoxPreferredRangesDesc": "Префікси, розділені комами, у порядку пріоритетності для вибору IP-адреси, коли гость має кілька інтерфейсів",
-    "proxmoxAutoSync": "Автоматична синхронізація гостей",
-    "proxmoxAutoSyncDesc": "Періодично виявляйте цей вузол Proxmox та створюйте або оновлюйте імпортовані гостьові хости, поки ваш сеанс розблоковано.",
-    "proxmoxSyncInterval": "Інтервал синхронізації (хвилини)",
-    "proxmoxSyncIntervalDesc": "Мінімум 5 хвилин. Планувальник пропускає заблоковані сеанси користувачів.",
-    "proxmoxMarkMissing": "Позначте відсутніх гостей",
-    "proxmoxMarkMissingDesc": "Додати тег proxmox-missing, коли раніше імпортований гостьовий сервер зникає, замість його видалення.",
-    "proxmoxLastSync": "Остання синхронізація",
-    "proxmoxLastSyncNever": "Ще не синхронізовано",
-    "proxmoxLastSyncNoResult": "Немає деталей результату",
-    "proxmoxLastSyncSummary": "{{created}} створено, {{updated}} оновлено, {{markedMissing}} відсутнє, {{skipped}} пропущено",
-    "proxmoxLastSyncStatus": {
-      "error": "Не вдалося",
-      "pending": "Очікує на розгляд",
-      "success": "Успіх"
-    },
-    "proxmoxDiscoverAction": "Пошук та імпорт гостьових систем Proxmox",
-    "proxmoxImportTitle": "Імпорт з Proxmox",
-    "proxmoxSelectHost": "Виберіть хост Proxmox…",
-    "proxmoxDiscover": "Відкрийте",
-    "proxmoxDiscovering": "Відкриття…",
-    "proxmoxDiscoverGuests": "Відкрийте для себе гостей",
-    "proxmoxSelectAll": "Вибрати все",
-    "proxmoxDeselectAll": "Зняти вибір усіх",
-    "proxmoxNoGuests": "На цьому вузлі Proxmox не знайдено гостей.",
-    "proxmoxResultImported": "{{count}} імпортовано",
-    "proxmoxResultUpdated": "{{count}} оновлено",
-    "proxmoxResultFailed": "{{count}} не вдалося",
-    "proxmoxImportComplete": "Імпорт Proxmox завершено: {{summary}}",
-    "proxmoxDiscoveryFailed": "Не вдалося знайти",
-    "proxmoxImportFailed": "Імпорт не вдалося",
-    "docsLink": "Переглянути документи",
-    "hostNotFound": "Хост не знайдено",
-    "loadingHost": "Завантаження хоста...",
-    "none": "Жоден",
-    "proxmoxGuestsSelected_one": "{{count}} гість, {{selected}} вибрано",
-    "proxmoxGuestsSelected_other": "{{count}} гостей, {{selected}} вибрано",
-    "proxmoxImportButton_one": "Імпортувати хост {{count}}",
-    "proxmoxImportButton_other": "Імпортувати {{count}} хостів"
-  },
-  "terminal": {
-    "connected": "Підключено"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/vi_VN.json b/plugins/proxmox/locales/translated/vi_VN.json
deleted file mode 100644
index 16f5a4c14..000000000
--- a/plugins/proxmox/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Thống kê Proxmox"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Thống kê Proxmox",
-    "cpuUsage": "Sử dụng CPU",
-    "memoryUsage": "Sử dụng bộ nhớ",
-    "diskUsage": "Mức sử dụng ổ đĩa",
-    "networkInterfaces": "Giao diện mạng",
-    "uptime": "Thời gian hoạt động",
-    "systemInfo": "Thông tin hệ thống",
-    "guestsSummary": "Khách",
-    "storagePools": "Các bể chứa",
-    "clusterHealth": "Cluster Health",
-    "cpuCores_one": "{{count}} Lõi",
-    "cpuCores_other": "{{count}} Lõi",
-    "used": "Đã dùng",
-    "total": "Tổng cộng",
-    "hostname": "Tên máy chủ",
-    "kernel": "Nhân",
-    "pveVersion": "Phiên bản PVE",
-    "name": "Tên",
-    "status": "Trạng thái",
-    "type": "Loại",
-    "cpu": "CPU",
-    "mem": "Mem",
-    "disk": "Ổ đĩa",
-    "running": "Đang chạy",
-    "stopped": "Đã dừng",
-    "guestCounts": "{{running}}/{{total}} đang chạy",
-    "inactive": "Không hoạt động",
-    "notClustered": "Nút độc lập (không thuộc cụm máy chủ)",
-    "quorate": "Quorate",
-    "notQuorate": "Không đủ số lượng",
-    "nodeOnline": "Trực tuyến",
-    "nodeOffline": "Ngoại tuyến",
-    "noHostSelected": "Chưa chọn máy chủ",
-    "pveshNotFound": "Không tìm thấy pvesh - đây có phải là một node Proxmox không?",
-    "nodeDetectionFailed": "Không thể xác định tên nút Proxmox hợp lệ.",
-    "connecting": "Đang kết nối...",
-    "connectionFailed": "Không thể kết nối đến nút Proxmox.",
-    "refresh": "Làm mới",
-    "searchGuests": "Tìm kiếm khách...",
-    "filterAll": "Tất cả",
-    "filterVm": "Máy ảo",
-    "filterLxc": "LXC",
-    "noGuests": "Không tìm thấy máy ảo hoặc vùng chứa LXC nào trên nút này.",
-    "noGuestsMatch": "Hiện không có khách nào phù hợp với bộ lọc hiện tại."
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "Bật thống kê Proxmox",
-    "enableProxmoxStatsDesc": "Hiển thị tab Thống kê Proxmox cho máy chủ này với các số liệu thống kê trực tiếp về nút, máy ảo, bộ nhớ và cụm được thu thập qua SSH.",
-    "proxmoxStatsPollInterval": "Khoảng thời gian thăm dò (giây)",
-    "proxmoxStatsPollIntervalDesc": "Tối thiểu 15 giây. Tần suất làm mới số liệu thống kê của node Proxmox.",
-    "proxmoxStatsNodeOverride": "Ghi đè tên nút",
-    "proxmoxStatsNodeOverrideDesc": "Ghi đè tính năng tự động phát hiện tên nút Proxmox (mặc định được phát hiện thông qua tên máy chủ).",
-    "proxmoxStatsNodeOverridePlaceholder": "Tự động nhận diện từ tên máy chủ",
-    "authTypeStepca": "Bước CA",
-    "proxmoxIntegration": "Tích hợp Proxmox",
-    "enableProxmox": "Bật Proxmox",
-    "enableProxmoxDesc": "Đánh dấu máy chủ này là một node Proxmox. Cho phép khám phá và nhập khách trực tiếp từ máy chủ này.",
-    "proxmoxDefaultAuthType": "Loại xác thực mặc định",
-    "proxmoxDefaultAuthTypeDesc": "Phương thức xác thực áp dụng cho các máy khách được nhập. Chọn loại xác thực phù hợp với cách bạn kết nối đến máy khách của mình.",
-    "authTypePassword": "Mật khẩu",
-    "authTypeKey": "Khóa SSH",
-    "authTypeCredential": "Thông tin xác thực",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "Không",
-    "proxmoxDefaultCredential": "Thông tin đăng nhập mặc định",
-    "proxmoxDefaultCredentialDesc": "Thông tin xác thực dùng cho máy khách được nhập khi phương thức xác thực là Credential.",
-    "proxmoxWindowsDetection": "Phát hiện Windows / RDP",
-    "proxmoxWindowsDetectionDesc": "Các mẫu tên cách nhau bằng dấu phẩy để kích hoạt RDP thay vì SSH (không phân biệt hoa thường).",
-    "proxmoxDockerDetection": "Phát hiện Docker",
-    "proxmoxDockerDetectionDesc": "Các mẫu tên cách nhau bằng dấu phẩy để bật Docker cho các máy khách phù hợp.",
-    "proxmoxPreferredRanges": "Dải IP ưu tiên",
-    "proxmoxPreferredRangesDesc": "Các tiền tố cách nhau bằng dấu phẩy theo thứ tự ưu tiên để chọn IP khi máy khách có nhiều giao diện mạng.",
-    "proxmoxAutoSync": "Tự động đồng bộ máy khách",
-    "proxmoxAutoSyncDesc": "Định kỳ khám phá nút Proxmox này và tạo hoặc cập nhật máy khách đã nhập khi phiên của bạn được mở khóa.",
-    "proxmoxSyncInterval": "Khoảng đồng bộ (phút)",
-    "proxmoxSyncIntervalDesc": "Tối thiểu 5 phút. Bộ lập lịch bỏ qua các phiên người dùng bị khóa.",
-    "proxmoxMarkMissing": "Đánh dấu máy khách bị thiếu",
-    "proxmoxMarkMissingDesc": "Thêm thẻ proxmox-missing khi máy khách đã nhập trước đó biến mất thay vì xóa nó.",
-    "proxmoxLastSync": "Lần đồng bộ cuối",
-    "proxmoxLastSyncNever": "Chưa đồng bộ",
-    "proxmoxLastSyncNoResult": "Không có chi tiết kết quả",
-    "proxmoxLastSyncSummary": "Đã tạo {{created}}, cập nhật {{updated}}, thiếu {{markedMissing}}, bỏ qua {{skipped}}",
-    "proxmoxLastSyncStatus": {
-      "error": "Thất bại",
-      "pending": "Đang chờ",
-      "success": "Thành công"
-    },
-    "proxmoxDiscoverAction": "Khám phá và nhập máy khách Proxmox",
-    "proxmoxImportTitle": "Nhập từ Proxmox",
-    "proxmoxSelectHost": "Chọn máy chủ Proxmox…",
-    "proxmoxDiscover": "Khám phá",
-    "proxmoxDiscovering": "Đang khám phá…",
-    "proxmoxDiscoverGuests": "Khám phá máy khách",
-    "proxmoxSelectAll": "Chọn tất cả",
-    "proxmoxDeselectAll": "Bỏ chọn tất cả",
-    "proxmoxNoGuests": "Không tìm thấy máy khách nào trên nút Proxmox này.",
-    "proxmoxResultImported": "Đã nhập {{count}}",
-    "proxmoxResultUpdated": "Đã cập nhật {{count}}",
-    "proxmoxResultFailed": "{{count}} thất bại",
-    "proxmoxImportComplete": "Hoàn tất nhập từ Proxmox: {{summary}}",
-    "proxmoxDiscoveryFailed": "Khám phá thất bại",
-    "proxmoxImportFailed": "Nhập thất bại",
-    "docsLink": "Xem tài liệu",
-    "hostNotFound": "Không tìm thấy máy chủ",
-    "loadingHost": "Đang tải máy chủ...",
-    "none": "Không có",
-    "proxmoxGuestsSelected_one": "{{count}} khách, {{selected}} được chọn",
-    "proxmoxGuestsSelected_other": "{{count}} khách, {{selected}} người được chọn",
-    "proxmoxImportButton_one": "Nhập {{count}} máy chủ",
-    "proxmoxImportButton_other": "Nhập {{count}} máy chủ"
-  },
-  "terminal": {
-    "connected": "Đã kết nối"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/zh_CN.json b/plugins/proxmox/locales/translated/zh_CN.json
deleted file mode 100644
index b9fcac1e7..000000000
--- a/plugins/proxmox/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Proxmox 统计数据"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Proxmox 统计数据",
-    "cpuUsage": "CPU 使用率",
-    "memoryUsage": "内存使用量",
-    "diskUsage": "磁盘使用率",
-    "networkInterfaces": "网络接口",
-    "uptime": "运行时间",
-    "systemInfo": "系统信息",
-    "guestsSummary": "客户主机",
-    "storagePools": "存储池",
-    "clusterHealth": "集群健康",
-    "cpuCores_one": "{{count}} 核",
-    "cpuCores_other": "{{count}} 核",
-    "used": "已用",
-    "total": "总计",
-    "hostname": "主机名",
-    "kernel": "内核",
-    "pveVersion": "PVE 版本",
-    "name": "名称",
-    "status": "状态",
-    "type": "类型",
-    "cpu": "CPU",
-    "mem": "内存",
-    "disk": "磁盘",
-    "running": "运行中",
-    "stopped": "已停止",
-    "guestCounts": "{{running}}/{{total}} 运行中",
-    "inactive": "未激活",
-    "notClustered": "独立节点（非集群的一部分）",
-    "quorate": "达到法定节点数量",
-    "notQuorate": "未达到法定节点数量",
-    "nodeOnline": "在线",
-    "nodeOffline": "离线",
-    "noHostSelected": "未选择主机",
-    "pveshNotFound": "未找到 pvesh - 这是 Proxmox 节点吗？",
-    "nodeDetectionFailed": "无法确定有效的 Proxmox 节点名称",
-    "connecting": "连接中...",
-    "connectionFailed": "连接到 Proxmox 节点失败",
-    "refresh": "刷新",
-    "searchGuests": "搜索客户主机...",
-    "filterAll": "全部",
-    "filterVm": "虚拟机",
-    "filterLxc": "LXC",
-    "noGuests": "此节点上未发现虚拟机或 LXC 容器。",
-    "noGuestsMatch": "没有符合当前筛选条件的客户主机。"
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "启用 Proxmox 统计信息",
-    "enableProxmoxStatsDesc": "显示此主机的 Proxmox 统计信息标签页，其中包含通过 SSH 收集的实时节点、客户机、存储和集群统计信息。",
-    "proxmoxStatsPollInterval": "轮询间隔（秒）",
-    "proxmoxStatsPollIntervalDesc": "最短间隔 15 秒。Proxmox 节点统计信息刷新频率。",
-    "proxmoxStatsNodeOverride": "覆盖节点名称",
-    "proxmoxStatsNodeOverrideDesc": "覆盖自动检测的 Proxmox 节点名称（默认情况下通过主机名检测）。",
-    "proxmoxStatsNodeOverridePlaceholder": "从主机名自动检测",
-    "authTypeStepca": "步骤 CA",
-    "proxmoxIntegration": "Proxmox 集成",
-    "enableProxmox": "启用 Proxmox",
-    "enableProxmoxDesc": "将此主机标记为 Proxmox 节点。启用从此主机直接进行客户机发现和导入。",
-    "proxmoxDefaultAuthType": "默认认证类型",
-    "proxmoxDefaultAuthTypeDesc": "应用于导入的客户机主机的认证方法。选择与您连接客户机的方式相匹配的认证类型。",
-    "authTypePassword": "密码",
-    "authTypeKey": "SSH 密钥",
-    "authTypeCredential": "凭据",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "无",
-    "proxmoxDefaultCredential": "默认凭据",
-    "proxmoxDefaultCredentialDesc": "当认证类型设置为凭据时，用于导入的客户主机的凭据。",
-    "proxmoxWindowsDetection": "Windows / RDP 检测",
-    "proxmoxWindowsDetectionDesc": "逗号分隔的名称模式，匹配时触发 RDP 而非 SSH（不区分大小写）",
-    "proxmoxDockerDetection": "Docker 检测",
-    "proxmoxDockerDetectionDesc": "逗号分隔的名称模式，为匹配的客户主机启用 Docker",
-    "proxmoxPreferredRanges": "首选 IP 范围",
-    "proxmoxPreferredRangesDesc": "逗号分隔的前缀，按优先级顺序用于当客户主机有多个网络接口时的 IP 选择",
-    "proxmoxAutoSync": "自动同步客户主机",
-    "proxmoxAutoSyncDesc": "在会话未锁定时定期发现此 Proxmox 节点，并创建或更新导入的客户主机。",
-    "proxmoxSyncInterval": "同步间隔（分钟）",
-    "proxmoxSyncIntervalDesc": "最小 5 分钟。调度器会跳过已锁定的用户会话。",
-    "proxmoxMarkMissing": "标记缺失的客户主机",
-    "proxmoxMarkMissingDesc": "当之前导入的客户主机消失时，添加 proxmox-missing 标签，而非删除它。",
-    "proxmoxLastSync": "上次同步",
-    "proxmoxLastSyncNever": "尚未同步",
-    "proxmoxLastSyncNoResult": "无结果详情",
-    "proxmoxLastSyncSummary": "已创建 {{created}}，已更新 {{updated}}，已标记缺失 {{markedMissing}}，已跳过 {{skipped}}",
-    "proxmoxLastSyncStatus": {
-      "error": "失败",
-      "pending": "待处理",
-      "success": "成功"
-    },
-    "proxmoxDiscoverAction": "发现并导入 Proxmox 客户主机",
-    "proxmoxImportTitle": "从 Proxmox 导入",
-    "proxmoxSelectHost": "选择 Proxmox 主机…",
-    "proxmoxDiscover": "发现",
-    "proxmoxDiscovering": "正在发现…",
-    "proxmoxDiscoverGuests": "发现客户主机",
-    "proxmoxSelectAll": "全选",
-    "proxmoxDeselectAll": "取消全选",
-    "proxmoxNoGuests": "此 Proxmox 节点上未找到客户主机。",
-    "proxmoxResultImported": "已导入 {{count}} 个",
-    "proxmoxResultUpdated": "已更新 {{count}} 个",
-    "proxmoxResultFailed": "已失败 {{count}} 个",
-    "proxmoxImportComplete": "Proxmox 导入完成：{{summary}}",
-    "proxmoxDiscoveryFailed": "发现失败",
-    "proxmoxImportFailed": "导入失败",
-    "docsLink": "查看文档",
-    "hostNotFound": "未找到主机",
-    "loadingHost": "正在加载主机...",
-    "none": "无",
-    "proxmoxGuestsSelected_one": "{{count}} 访客， {{selected}} 已选",
-    "proxmoxGuestsSelected_other": "{{count}} 位客人， {{selected}} 位已选客人",
-    "proxmoxImportButton_one": "导入 {{count}} 个主机",
-    "proxmoxImportButton_other": "导入 {{count}} 个主机"
-  },
-  "terminal": {
-    "connected": "已连接"
-  }
-}
diff --git a/plugins/proxmox/locales/translated/zh_TW.json b/plugins/proxmox/locales/translated/zh_TW.json
deleted file mode 100644
index f01e786a1..000000000
--- a/plugins/proxmox/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  "nav": {
-    "proxmoxStats": "Proxmox 統計數據"
-  },
-  "proxmoxStats": {
-    "tabTitle": "Proxmox 統計數據",
-    "cpuUsage": "CPU 使用率",
-    "memoryUsage": "記憶體使用量",
-    "diskUsage": "磁碟使用率",
-    "networkInterfaces": "網路介面",
-    "uptime": "運行時間",
-    "systemInfo": "系統資訊",
-    "guestsSummary": "賓客",
-    "storagePools": "儲水池",
-    "clusterHealth": "集群健康",
-    "cpuCores_one": "{{count}} 核心",
-    "cpuCores_other": "{{count}} 核心",
-    "used": "已使用",
-    "total": "全部的",
-    "hostname": "主機名稱",
-    "kernel": "核心",
-    "pveVersion": "PVE 版本",
-    "name": "名稱",
-    "status": "狀態",
-    "type": "類型",
-    "cpu": "CPU",
-    "mem": "記憶",
-    "disk": "磁碟",
-    "running": "執行中",
-    "stopped": "已停止",
-    "guestCounts": "{{running}}/{{total}} 運作中",
-    "inactive": "未啟用",
-    "notClustered": "獨立節點（非叢集的一部分）",
-    "quorate": "法定人數",
-    "notQuorate": "未達法定人數",
-    "nodeOnline": "在線",
-    "nodeOffline": "離線",
-    "noHostSelected": "未選擇主機",
-    "pveshNotFound": "找不到 pvesh - 這是 Proxmox 節點嗎？",
-    "nodeDetectionFailed": "無法確定有效的 Proxmox 節點名稱",
-    "connecting": "連線中…",
-    "connectionFailed": "連線到 Proxmox 節點失敗",
-    "refresh": "重新整理",
-    "searchGuests": "搜尋賓客...",
-    "filterAll": "全選",
-    "filterVm": "虛擬機",
-    "filterLxc": "LXC",
-    "noGuests": "此節點上未發現虛擬機器或 LXC 容器。",
-    "noGuestsMatch": "沒有符合目前篩選條件的客人。"
-  },
-  "hosts": {
-    "tabProxmox": "Proxmox",
-    "enableProxmoxStats": "啟用 Proxmox 統計訊息",
-    "enableProxmoxStatsDesc": "顯示此主機的 Proxmox 統計資料標籤，其中包含透過 SSH 收集的即時節點、虛擬機器、儲存和叢集統計資訊。",
-    "proxmoxStatsPollInterval": "輪詢間隔（秒）",
-    "proxmoxStatsPollIntervalDesc": "最短間隔 15 秒。 Proxmox 節點統計資訊的刷新頻率。",
-    "proxmoxStatsNodeOverride": "節點名稱覆蓋",
-    "proxmoxStatsNodeOverrideDesc": "覆蓋 Proxmox 節點名稱的自動偵測（預設透過主機名稱偵測）。",
-    "proxmoxStatsNodeOverridePlaceholder": "從主機名稱自動偵測",
-    "authTypeStepca": "步驟 CA",
-    "proxmoxIntegration": "Proxmox 整合",
-    "enableProxmox": "啟用 Proxmox",
-    "enableProxmoxDesc": "將此主機標記為 Proxmox 節點。啟用直接從此主機探索及匯入客體的功能。",
-    "proxmoxDefaultAuthType": "預設驗證類型",
-    "proxmoxDefaultAuthTypeDesc": "套用至匯入客體主機的驗證方法。選擇與您連線至客體的方式相符的驗證類型。",
-    "authTypePassword": "密碼",
-    "authTypeKey": "SSH 金鑰",
-    "authTypeCredential": "憑證",
-    "authTypeOpkssh": "OPKSSH",
-    "authTypeNone": "無",
-    "proxmoxDefaultCredential": "預設憑證",
-    "proxmoxDefaultCredentialDesc": "當驗證類型設為憑證時，用於已匯入之訪客主機的憑證。",
-    "proxmoxWindowsDetection": "Windows / RDP 偵測",
-    "proxmoxWindowsDetectionDesc": "逗號分隔的名稱模式，符合時將觸發 RDP 而非 SSH（不分大小寫）",
-    "proxmoxDockerDetection": "Docker 偵測",
-    "proxmoxDockerDetectionDesc": "逗號分隔的名稱模式，符合時將為對應的訪客主機啟用 Docker",
-    "proxmoxPreferredRanges": "偏好的 IP 範圍",
-    "proxmoxPreferredRangesDesc": "當訪客主機有多個網路介面時，以此逗號分隔的前綴清單依優先順序選取 IP",
-    "proxmoxAutoSync": "自動同步訪客主機",
-    "proxmoxAutoSyncDesc": "在您的工作階段解鎖時，定期探索此 Proxmox 節點並建立或更新已匯入的訪客主機。",
-    "proxmoxSyncInterval": "同步間隔（分鐘）",
-    "proxmoxSyncIntervalDesc": "最少 5 分鐘。排程器會略過鎖定的使用者工作階段。",
-    "proxmoxMarkMissing": "標記遺失的訪客主機",
-    "proxmoxMarkMissingDesc": "當先前匯入的訪客主機消失時，新增 proxmox-missing 標籤而非將其刪除。",
-    "proxmoxLastSync": "上次同步",
-    "proxmoxLastSyncNever": "尚未同步",
-    "proxmoxLastSyncNoResult": "無結果詳細資料",
-    "proxmoxLastSyncSummary": "建立 {{created}}，更新 {{updated}}，遺失 {{markedMissing}}，略過 {{skipped}}",
-    "proxmoxLastSyncStatus": {
-      "error": "失敗",
-      "pending": "待處理",
-      "success": "成功"
-    },
-    "proxmoxDiscoverAction": "探索並匯入 Proxmox 訪客主機",
-    "proxmoxImportTitle": "從 Proxmox 匯入",
-    "proxmoxSelectHost": "選取 Proxmox 主機…",
-    "proxmoxDiscover": "探索",
-    "proxmoxDiscovering": "探索中…",
-    "proxmoxDiscoverGuests": "探索訪客主機",
-    "proxmoxSelectAll": "全選",
-    "proxmoxDeselectAll": "取消全選",
-    "proxmoxNoGuests": "此 Proxmox 節點上找不到任何訪客主機。",
-    "proxmoxResultImported": "已匯入 {{count}} 台",
-    "proxmoxResultUpdated": "已更新 {{count}} 台",
-    "proxmoxResultFailed": "失敗 {{count}} 台",
-    "proxmoxImportComplete": "Proxmox 匯入完成：{{summary}}",
-    "proxmoxDiscoveryFailed": "探索失敗",
-    "proxmoxImportFailed": "匯入失敗",
-    "docsLink": "檢視文件",
-    "hostNotFound": "找不到主機",
-    "loadingHost": "正在載入主機...",
-    "none": "無",
-    "proxmoxGuestsSelected_one": "{{count}} 訪客， {{selected}} 已選",
-    "proxmoxGuestsSelected_other": "{{count}} 位客人， {{selected}} 位已選客人",
-    "proxmoxImportButton_one": "匯入 {{count}} 台主機",
-    "proxmoxImportButton_other": "匯入 {{count}} 台主機"
-  },
-  "terminal": {
-    "connected": "已連線"
-  }
-}
diff --git a/plugins/proxmox/manifest.json b/plugins/proxmox/manifest.json
deleted file mode 100644
index 7a1a6af5f..000000000
--- a/plugins/proxmox/manifest.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "id": "proxmox",
-  "name": "Proxmox",
-  "version": "1.0.0",
-  "description": "Find Proxmox VE guests through an SSH host, import them as hosts and keep them in sync.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Infrastructure",
-  "icon": "Server",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "hosts:read",
-    "hosts:write",
-    "credentials:use",
-    "credentials:read",
-    "ssh:connect",
-    "db:own",
-    "network:serve",
-    "ui:surface",
-    "users:impersonate"
-  ],
-  "contributes": {
-    "tabs": [
-      {
-        "id": "proxmox-stats",
-        "titleKey": "nav.proxmoxStats",
-        "icon": "HardDrive",
-        "openFrom": ["host-context-menu", "palette"]
-      }
-    ],
-    "settings": {
-      "host": {
-        "fields": [
-          {
-            "key": "enableProxmox",
-            "type": "custom",
-            "component": "proxmoxHostSettings",
-            "defaultable": false
-          },
-          {
-            "key": "proxmoxConfig",
-            "type": "custom",
-            "component": "proxmoxHostSettings",
-            "defaultable": false
-          },
-          {
-            "key": "enableProxmoxStats",
-            "type": "custom",
-            "component": "proxmoxHostSettings",
-            "defaultable": false
-          },
-          {
-            "key": "proxmoxStatsConfig",
-            "type": "custom",
-            "component": "proxmoxHostSettings",
-            "defaultable": false
-          }
-        ]
-      }
-    }
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"]
-}
diff --git a/plugins/proxmox/migrations/mysql/0001_adopt_proxmox_stats.sql b/plugins/proxmox/migrations/mysql/0001_adopt_proxmox_stats.sql
deleted file mode 100644
index 472a363b3..000000000
--- a/plugins/proxmox/migrations/mysql/0001_adopt_proxmox_stats.sql
+++ /dev/null
@@ -1,26 +0,0 @@
--- proxmox 0001: adopt_proxmox_stats
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `proxmox_node_history` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `host_id` int NOT NULL,
-  `ts` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `cpu_percent` double,
-  `mem_percent` double,
-  `disk_percent` double,
-  `net_rx_bytes` int,
-  `net_tx_bytes` int,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `proxmox_node_history` TO `p_proxmox_node_history`;
-CREATE TABLE IF NOT EXISTS `proxmox_stats_preferences` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `host_id` int NOT NULL,
-  `layout` text NOT NULL,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `proxmox_stats_preferences` TO `p_proxmox_stats_preferences`;
diff --git a/plugins/proxmox/migrations/postgres/0001_adopt_proxmox_stats.sql b/plugins/proxmox/migrations/postgres/0001_adopt_proxmox_stats.sql
deleted file mode 100644
index 36b450c9a..000000000
--- a/plugins/proxmox/migrations/postgres/0001_adopt_proxmox_stats.sql
+++ /dev/null
@@ -1,27 +0,0 @@
--- proxmox 0001: adopt_proxmox_stats
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "proxmox_node_history" (
-  "id" serial PRIMARY KEY,
-  "host_id" integer NOT NULL,
-  "ts" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "cpu_percent" double precision,
-  "mem_percent" double precision,
-  "disk_percent" double precision,
-  "net_rx_bytes" integer,
-  "net_tx_bytes" integer,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "proxmox_node_history" RENAME TO "p_proxmox_node_history";
-CREATE TABLE IF NOT EXISTS "proxmox_stats_preferences" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "host_id" integer NOT NULL,
-  "layout" text NOT NULL,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_proxmox_stats_prefs_user_host" ON "proxmox_stats_preferences" ("user_id", "host_id");
-ALTER TABLE "proxmox_stats_preferences" RENAME TO "p_proxmox_stats_preferences";
diff --git a/plugins/proxmox/migrations/snapshot.json b/plugins/proxmox/migrations/snapshot.json
deleted file mode 100644
index 9665ca851..000000000
--- a/plugins/proxmox/migrations/snapshot.json
+++ /dev/null
@@ -1,80 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "node_history": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "hostId": {
-          "type": "refHost",
-          "notNull": true
-        },
-        "ts": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "cpuPercent": {
-          "type": "real"
-        },
-        "memPercent": {
-          "type": "real"
-        },
-        "diskPercent": {
-          "type": "real"
-        },
-        "netRxBytes": {
-          "type": "integer"
-        },
-        "netTxBytes": {
-          "type": "integer"
-        }
-      },
-      "indexes": [],
-      "adopts": "proxmox_node_history"
-    },
-    "stats_preferences": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "hostId": {
-          "type": "refHost",
-          "notNull": true
-        },
-        "layout": {
-          "type": "text",
-          "notNull": true
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "updatedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_proxmox_stats_prefs_user_host",
-          "columns": ["userId", "hostId"],
-          "unique": true
-        }
-      ],
-      "adopts": "proxmox_stats_preferences"
-    }
-  }
-}
diff --git a/plugins/proxmox/migrations/sqlite/0001_adopt_proxmox_stats.sql b/plugins/proxmox/migrations/sqlite/0001_adopt_proxmox_stats.sql
deleted file mode 100644
index 19bc34bd7..000000000
--- a/plugins/proxmox/migrations/sqlite/0001_adopt_proxmox_stats.sql
+++ /dev/null
@@ -1,27 +0,0 @@
--- proxmox 0001: adopt_proxmox_stats
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "proxmox_node_history" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "host_id" integer NOT NULL,
-  "ts" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "cpu_percent" real,
-  "mem_percent" real,
-  "disk_percent" real,
-  "net_rx_bytes" integer,
-  "net_tx_bytes" integer,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "proxmox_node_history" RENAME TO "p_proxmox_node_history";
-CREATE TABLE IF NOT EXISTS "proxmox_stats_preferences" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "host_id" integer NOT NULL,
-  "layout" text NOT NULL,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_proxmox_stats_prefs_user_host" ON "proxmox_stats_preferences" ("user_id", "host_id");
-ALTER TABLE "proxmox_stats_preferences" RENAME TO "p_proxmox_stats_preferences";
diff --git a/plugins/proxmox/package.json b/plugins/proxmox/package.json
deleted file mode 100644
index d3a7d9e01..000000000
--- a/plugins/proxmox/package.json
+++ /dev/null
@@ -1,32 +0,0 @@
-{
-  "name": "@termix-plugin/proxmox",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "lucide-react": "^1.33.0"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "react": "^19.2.8",
-    "sonner": "^2.0.8",
-    "ssh2": "^1.17.0"
-  }
-}
diff --git a/plugins/proxmox/src/backend/guest-sync.ts b/plugins/proxmox/src/backend/guest-sync.ts
deleted file mode 100644
index 53ab1558f..000000000
--- a/plugins/proxmox/src/backend/guest-sync.ts
+++ /dev/null
@@ -1,78 +0,0 @@
-export type ProxmoxSource = {
-  source: "proxmox";
-  sourceHostId: number;
-  node: string;
-  vmid: number;
-  type: "qemu" | "lxc";
-  lastSeenAt?: string;
-  lastStatus?: string;
-  missingSince?: string | null;
-};
-
-export function parseJsonObject(value: unknown): Record<string, unknown> {
-  if (!value) return {};
-  if (typeof value === "object") return value as Record<string, unknown>;
-  if (typeof value !== "string") return {};
-  try {
-    const parsed = JSON.parse(value);
-    return parsed && typeof parsed === "object"
-      ? (parsed as Record<string, unknown>)
-      : {};
-  } catch {
-    return {};
-  }
-}
-
-/** The guest a host was imported from, read from its proxmoxConfig setting. */
-export function getProxmoxSource(config: unknown): ProxmoxSource | null {
-  const source = parseJsonObject(config).source;
-  if (!source || typeof source !== "object") return null;
-  const src = source as Record<string, unknown>;
-  if (
-    src.source !== "proxmox" ||
-    typeof src.sourceHostId !== "number" ||
-    typeof src.node !== "string" ||
-    typeof src.vmid !== "number" ||
-    (src.type !== "qemu" && src.type !== "lxc")
-  ) {
-    return null;
-  }
-  return src as ProxmoxSource;
-}
-
-export function proxmoxSourceKey(source: {
-  sourceHostId: number;
-  node: string;
-  type: string;
-  vmid: number;
-}): string {
-  return `${source.sourceHostId}:${source.node}:${source.type}:${source.vmid}`;
-}
-
-export interface ImportedGuest<H = Record<string, unknown>> {
-  host: H;
-  config: Record<string, unknown>;
-  source: ProxmoxSource;
-}
-
-/**
- * The hosts already imported from one Proxmox node, keyed by guest. The
- * source lives in each guest's proxmoxConfig host setting, not on the host
- * row, so the caller passes both.
- */
-export function indexImportedGuests<H extends { id: unknown }>(
-  hosts: H[],
-  configs: Array<{ hostId: number; value: unknown }>,
-  sourceHostId: number,
-): Map<string, ImportedGuest<H>> {
-  const configById = new Map(configs.map((c) => [c.hostId, c.value]));
-  const out = new Map<string, ImportedGuest<H>>();
-  for (const host of hosts) {
-    const config = parseJsonObject(configById.get(Number(host.id)));
-    const source = getProxmoxSource(config);
-    if (source?.sourceHostId === sourceHostId) {
-      out.set(proxmoxSourceKey(source), { host, config, source });
-    }
-  }
-  return out;
-}
diff --git a/plugins/proxmox/src/backend/index.ts b/plugins/proxmox/src/backend/index.ts
deleted file mode 100644
index fcc655f84..000000000
--- a/plugins/proxmox/src/backend/index.ts
+++ /dev/null
@@ -1,36 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { setPluginSsh } from "./ssh.js";
-import { setPluginCtx } from "./plugin-ctx.js";
-import { startProxmoxService, stopProxmoxService } from "./routes.js";
-import {
-  startProxmoxStatsService,
-  stopProxmoxStatsService,
-} from "./stats-service.js";
-import { proxmoxNodeHistory } from "./tables.js";
-import { createProxmoxNodeHistoryRepository } from "./proxmox-node-history-repository.js";
-
-export async function activate(ctx: PluginContext) {
-  setPluginSsh(ctx.ssh);
-  setPluginCtx(ctx);
-  ctx.disposables.add(() => setPluginSsh(null));
-  ctx.disposables.add(() => setPluginCtx(null));
-
-  const historyTable = await ctx.db.define(proxmoxNodeHistory);
-  const historyRepository = createProxmoxNodeHistoryRepository(
-    ctx.db,
-    historyTable,
-  );
-
-  const router = ctx.http.router<Router>();
-  startProxmoxService(router);
-  ctx.disposables.add(stopProxmoxService);
-  startProxmoxStatsService(ctx, router, historyRepository);
-  ctx.disposables.add(stopProxmoxStatsService);
-  ctx.log.info("Proxmox routes mounted at /plugin-api/proxmox");
-}
-
-export async function deactivate() {
-  stopProxmoxService();
-  stopProxmoxStatsService();
-}
diff --git a/plugins/proxmox/src/backend/plugin-ctx.ts b/plugins/proxmox/src/backend/plugin-ctx.ts
deleted file mode 100644
index a36386f49..000000000
--- a/plugins/proxmox/src/backend/plugin-ctx.ts
+++ /dev/null
@@ -1,13 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-
-let current: PluginContext | null = null;
-
-/** Set in activate, cleared on deactivate. */
-export function setPluginCtx(ctx: PluginContext | null): void {
-  current = ctx;
-}
-
-export function pluginCtx(): PluginContext {
-  if (!current) throw new Error("The plugin is not active");
-  return current;
-}
diff --git a/plugins/proxmox/src/backend/proxmox-import-auth.ts b/plugins/proxmox/src/backend/proxmox-import-auth.ts
deleted file mode 100644
index 65194c0dd..000000000
--- a/plugins/proxmox/src/backend/proxmox-import-auth.ts
+++ /dev/null
@@ -1,44 +0,0 @@
-// Pure decision: which auth settings an imported Proxmox guest inherits.
-//
-// The frontend carries a parallel copy in
-// plugins/proxmox/frontend/proxmox-import-auth.ts. The two drifting apart is
-// what produced the reported import bug, so both are kept behaviourally
-// identical and each is unit-tested against the same matrix.
-export function resolveProxmoxImportAuth(
-  defaultAuthType: string | undefined,
-  credentialId: number | null | undefined,
-): {
-  authType: string;
-  credentialId: number | null;
-  overrideCredentialUsername: number;
-} {
-  // An explicit special auth type (none/opkssh/tailscale/vault/…) wins.
-  if (
-    defaultAuthType &&
-    defaultAuthType !== "credential" &&
-    !["password", "key"].includes(defaultAuthType)
-  ) {
-    return {
-      authType: defaultAuthType,
-      credentialId: null,
-      overrideCredentialUsername: 0,
-    };
-  }
-
-  // A credential (configured default OR inherited from the source host) is a
-  // concrete auth source -> use it, even when defaultAuthType is the
-  // "password"/"key" default.
-  if (credentialId) {
-    return {
-      authType: "credential",
-      credentialId,
-      overrideCredentialUsername: 0,
-    };
-  }
-
-  return {
-    authType: "none",
-    credentialId: null,
-    overrideCredentialUsername: 0,
-  };
-}
diff --git a/plugins/proxmox/src/backend/proxmox-jump-hosts.ts b/plugins/proxmox/src/backend/proxmox-jump-hosts.ts
deleted file mode 100644
index c9cd753a1..000000000
--- a/plugins/proxmox/src/backend/proxmox-jump-hosts.ts
+++ /dev/null
@@ -1,12 +0,0 @@
-export function parseProxmoxJumpHosts(raw: unknown): unknown[] | null {
-  if (!raw) return null;
-  if (Array.isArray(raw)) return raw;
-  if (typeof raw !== "string") return null;
-
-  try {
-    const parsed = JSON.parse(raw);
-    return Array.isArray(parsed) ? parsed : null;
-  } catch {
-    return null;
-  }
-}
diff --git a/plugins/proxmox/src/backend/proxmox-node-history-repository.ts b/plugins/proxmox/src/backend/proxmox-node-history-repository.ts
deleted file mode 100644
index e5b66dab2..000000000
--- a/plugins/proxmox/src/backend/proxmox-node-history-repository.ts
+++ /dev/null
@@ -1,79 +0,0 @@
-import { and, gte, lte, eq, asc, lt } from "drizzle-orm";
-import type { PluginDatabase } from "@termix/plugin-sdk/backend";
-
-export interface ProxmoxNodeHistoryRow {
-  id: number;
-  hostId: number;
-  ts: string;
-  cpuPercent: number | null;
-  memPercent: number | null;
-  diskPercent: number | null;
-  netRxBytes: number | null;
-  netTxBytes: number | null;
-}
-
-export interface ProxmoxNodeHistoryCreateInput {
-  hostId: number;
-  cpuPercent: number | null;
-  memPercent: number | null;
-  diskPercent: number | null;
-  netRxBytes: number | null;
-  netTxBytes: number | null;
-}
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export type ProxmoxNodeHistoryRepository = ReturnType<
-  typeof createProxmoxNodeHistoryRepository
->;
-
-export function createProxmoxNodeHistoryRepository(
-  db: PluginDatabase,
-  table: Table,
-) {
-  const client = () => db.client<Drizzle>();
-
-  return {
-    async create(input: ProxmoxNodeHistoryCreateInput): Promise<void> {
-      const drizzle = await client();
-      await drizzle.insert(table).values(input);
-      await db.persist({ lazy: true });
-    },
-
-    async listRange(
-      hostId: number,
-      fromIso: string,
-      toIso: string,
-    ): Promise<ProxmoxNodeHistoryRow[]> {
-      const drizzle = await client();
-      return drizzle
-        .select()
-        .from(table)
-        .where(
-          and(
-            eq(table.hostId, hostId),
-            gte(table.ts, fromIso),
-            lte(table.ts, toIso),
-          ),
-        )
-        .orderBy(asc(table.ts));
-    },
-
-    async pruneOlderThan(hostId: number, retentionDays: number): Promise<void> {
-      // ts columns store CURRENT_TIMESTAMP as "YYYY-MM-DD HH:MM:SS" UTC, which
-      // sorts lexicographically, so the cutoff is a plain string comparison.
-      const cutoff = new Date(Date.now() - retentionDays * 24 * 60 * 60 * 1000)
-        .toISOString()
-        .slice(0, 19)
-        .replace("T", " ");
-      const drizzle = await client();
-      await drizzle
-        .delete(table)
-        .where(and(eq(table.hostId, hostId), lt(table.ts, cutoff)));
-      await db.persist({ lazy: true });
-    },
-  };
-}
diff --git a/plugins/proxmox/src/backend/proxmox-shared.ts b/plugins/proxmox/src/backend/proxmox-shared.ts
deleted file mode 100644
index 112c9f007..000000000
--- a/plugins/proxmox/src/backend/proxmox-shared.ts
+++ /dev/null
@@ -1,7 +0,0 @@
-// Proxmox node names are restricted to [a-zA-Z0-9-] by PVE itself,
-// but we validate defensively before using in a shell command.
-const SAFE_NODE_RE = /^[a-zA-Z0-9._-]{1,64}$/;
-
-export function isSafeNodeName(name: string): boolean {
-  return SAFE_NODE_RE.test(name);
-}
diff --git a/plugins/proxmox/src/backend/proxmox-stats-polling.ts b/plugins/proxmox/src/backend/proxmox-stats-polling.ts
deleted file mode 100644
index 4bd2d4c42..000000000
--- a/plugins/proxmox/src/backend/proxmox-stats-polling.ts
+++ /dev/null
@@ -1,334 +0,0 @@
-import {
-  collectProxmoxStats,
-  type ProxmoxStatsSnapshot,
-} from "./proxmox/collect-proxmox-stats.js";
-import type { ProxmoxNodeHistoryRepository } from "./proxmox-node-history-repository.js";
-import { pluginCtx } from "./plugin-ctx.js";
-import type { Client } from "ssh2";
-
-/**
- * Proxmox stats polling gets its own concurrency limiter so a burst of polls
- * on many hosts cannot starve one host's collection.
- */
-class ConcurrentLimiter {
-  private running = 0;
-  private queue: Array<() => void> = [];
-  constructor(private readonly max: number) {}
-
-  async run<T>(fn: () => Promise<T>): Promise<T> {
-    if (this.running >= this.max) {
-      await new Promise<void>((resolve) => this.queue.push(resolve));
-    }
-    this.running++;
-    try {
-      return await fn();
-    } finally {
-      this.running--;
-      const next = this.queue.shift();
-      if (next) next();
-    }
-  }
-}
-
-const proxmoxStatsPollLimiter = new ConcurrentLimiter(5);
-
-export interface ProxmoxStatsPollableHost {
-  id: number;
-  userId: string;
-  proxmoxStatsConfig?: string | ProxmoxStatsPollConfig | null;
-}
-
-export interface ProxmoxStatsPollConfig {
-  nodeName?: string | null;
-  pollInterval?: number;
-  enabledCards?: string[];
-}
-
-const DEFAULT_POLL_INTERVAL_SECONDS = 60;
-
-export function parseProxmoxStatsConfig(
-  raw: string | ProxmoxStatsPollConfig | null | undefined,
-): ProxmoxStatsPollConfig {
-  if (!raw) {
-    return { nodeName: null, pollInterval: DEFAULT_POLL_INTERVAL_SECONDS };
-  }
-  if (typeof raw === "object") {
-    return {
-      nodeName: raw.nodeName ?? null,
-      pollInterval: raw.pollInterval ?? DEFAULT_POLL_INTERVAL_SECONDS,
-      enabledCards: raw.enabledCards,
-    };
-  }
-  try {
-    const parsed = JSON.parse(raw) as ProxmoxStatsPollConfig;
-    return {
-      nodeName: parsed.nodeName ?? null,
-      pollInterval: parsed.pollInterval ?? DEFAULT_POLL_INTERVAL_SECONDS,
-      enabledCards: parsed.enabledCards,
-    };
-  } catch {
-    return { nodeName: null, pollInterval: DEFAULT_POLL_INTERVAL_SECONDS };
-  }
-}
-
-interface HostPollingEntry<THost extends ProxmoxStatsPollableHost> {
-  host: THost;
-  timer?: NodeJS.Timeout;
-  viewerUserId?: string;
-}
-
-interface ViewerDetail {
-  sessionId: string;
-  userId: string;
-  hostId: number;
-  lastHeartbeat: number;
-}
-
-interface CachedSnapshot {
-  data: ProxmoxStatsSnapshot;
-  timestamp: number;
-}
-
-interface ErrorSnapshot {
-  error: string;
-  timestamp: number;
-}
-
-export class ProxmoxPollingManager<
-  THost extends ProxmoxStatsPollableHost = ProxmoxStatsPollableHost,
-> {
-  private pollingConfigs = new Map<number, HostPollingEntry<THost>>();
-  private snapshotStore = new Map<number, CachedSnapshot>();
-  private errorStore = new Map<number, ErrorSnapshot>();
-  private activeViewers = new Map<number, Set<string>>();
-  private viewerDetails = new Map<string, ViewerDetail>();
-  private inFlight = new Set<number>();
-  private viewerCleanupInterval: NodeJS.Timeout;
-
-  constructor(
-    private readonly deps: {
-      fetchHostById: (
-        hostId: number,
-        userId: string,
-      ) => Promise<THost | undefined>;
-      withSshConnection: <T>(
-        host: THost,
-        fn: (client: Client) => Promise<T>,
-      ) => Promise<T>;
-      historyRepository: ProxmoxNodeHistoryRepository;
-      historyEnabled?: () => boolean;
-    },
-  ) {
-    this.viewerCleanupInterval = setInterval(() => {
-      this.cleanupInactiveViewers();
-    }, 60000);
-  }
-
-  private intervalWithJitter(intervalMs: number, hostId: number): number {
-    const spread = Math.min(intervalMs * 0.2, 15_000);
-    const jitter = (hostId * 1103515245) % Math.max(1, Math.floor(spread));
-    return intervalMs + jitter;
-  }
-
-  // Host Metrics' retention setting belongs to that plugin, so node history
-  // keeps a fixed week.
-  private readonly retentionDays = 7;
-
-  private async pollHostStats(
-    host: THost,
-    viewerUserId?: string,
-  ): Promise<void> {
-    if (this.inFlight.has(host.id)) return;
-    this.inFlight.add(host.id);
-
-    try {
-      await proxmoxStatsPollLimiter.run(async () => {
-        const userId = viewerUserId || host.userId;
-        const refreshed =
-          (await this.deps.fetchHostById(host.id, userId)) ?? host;
-        const config = parseProxmoxStatsConfig(refreshed.proxmoxStatsConfig);
-
-        try {
-          const snapshot = await this.deps.withSshConnection(
-            refreshed,
-            (client) => collectProxmoxStats(client, config.nodeName),
-          );
-
-          this.snapshotStore.set(host.id, {
-            data: snapshot,
-            timestamp: Date.now(),
-          });
-          this.errorStore.delete(host.id);
-
-          if (this.deps.historyEnabled?.() ?? true) {
-            await this.insertHistory(host.id, snapshot);
-          }
-        } catch (error) {
-          const message =
-            error instanceof Error ? error.message : String(error);
-          this.errorStore.set(host.id, {
-            error: message,
-            timestamp: Date.now(),
-          });
-          pluginCtx().log.warn(
-            `Proxmox stats poll failed for host ${host.id}: ${message}`,
-          );
-        }
-      });
-    } finally {
-      this.inFlight.delete(host.id);
-    }
-  }
-
-  private async insertHistory(
-    hostId: number,
-    snapshot: ProxmoxStatsSnapshot,
-  ): Promise<void> {
-    try {
-      const iface = snapshot.network?.interfaces?.[0];
-      const rxRaw = iface?.rxBytes ? parseInt(iface.rxBytes, 10) : null;
-      const txRaw = iface?.txBytes ? parseInt(iface.txBytes, 10) : null;
-
-      await this.deps.historyRepository.create({
-        hostId,
-        cpuPercent: snapshot.node?.cpu?.percent ?? null,
-        memPercent: snapshot.node?.memory?.percent ?? null,
-        diskPercent: snapshot.node?.disk?.percent ?? null,
-        netRxBytes: rxRaw !== null && !isNaN(rxRaw) ? rxRaw : null,
-        netTxBytes: txRaw !== null && !isNaN(txRaw) ? txRaw : null,
-      });
-
-      await this.deps.historyRepository.pruneOlderThan(
-        hostId,
-        this.retentionDays,
-      );
-    } catch (err) {
-      pluginCtx().log.warn(
-        `Failed to write proxmox node history for host ${hostId}: ${err instanceof Error ? err.message : String(err)}`,
-      );
-    }
-  }
-
-  private startPollingForHost(host: THost, viewerUserId?: string): void {
-    const existing = this.pollingConfigs.get(host.id);
-    if (existing?.timer) {
-      clearInterval(existing.timer);
-    }
-
-    const config = parseProxmoxStatsConfig(host.proxmoxStatsConfig);
-    const intervalMs = this.intervalWithJitter(
-      (config.pollInterval ?? DEFAULT_POLL_INTERVAL_SECONDS) * 1000,
-      host.id,
-    );
-
-    void this.pollHostStats(host, viewerUserId);
-
-    const timer = setInterval(() => {
-      const latest = this.pollingConfigs.get(host.id);
-      if (latest) {
-        void this.pollHostStats(latest.host, latest.viewerUserId);
-      }
-    }, intervalMs);
-
-    this.pollingConfigs.set(host.id, { host, timer, viewerUserId });
-  }
-
-  private stopPollingForHost(hostId: number): void {
-    const config = this.pollingConfigs.get(hostId);
-    if (config?.timer) {
-      clearInterval(config.timer);
-    }
-    this.pollingConfigs.delete(hostId);
-  }
-
-  getStats(
-    hostId: number,
-  ): { data: ProxmoxStatsSnapshot; timestamp: number } | undefined {
-    return this.snapshotStore.get(hostId);
-  }
-
-  getError(hostId: number): ErrorSnapshot | undefined {
-    return this.errorStore.get(hostId);
-  }
-
-  async ensurePolling(host: THost, viewerUserId?: string): Promise<void> {
-    if (!this.pollingConfigs.has(host.id)) {
-      this.startPollingForHost(host, viewerUserId);
-    }
-    if (!this.snapshotStore.has(host.id) && !this.inFlight.has(host.id)) {
-      await this.pollHostStats(host, viewerUserId);
-    }
-  }
-
-  registerViewer = (
-    hostId: number,
-    sessionId: string,
-    userId: string,
-  ): void => {
-    if (!this.activeViewers.has(hostId)) {
-      this.activeViewers.set(hostId, new Set());
-    }
-    this.activeViewers.get(hostId)!.add(sessionId);
-
-    this.viewerDetails.set(sessionId, {
-      sessionId,
-      userId,
-      hostId,
-      lastHeartbeat: Date.now(),
-    });
-
-    if (this.activeViewers.get(hostId)!.size === 1) {
-      Promise.resolve()
-        .then(async () => {
-          const host = await this.deps.fetchHostById(hostId, userId);
-          if (host) {
-            this.startPollingForHost(host, userId);
-          }
-        })
-        .catch((err) => {
-          pluginCtx().log.warn(
-            `Proxmox stats startPollingForHost rejected (non-fatal) for host ${hostId}: ${err instanceof Error ? err.message : String(err)}`,
-          );
-        });
-    }
-  };
-
-  unregisterViewer = (hostId: number, sessionId: string): void => {
-    const viewers = this.activeViewers.get(hostId);
-    if (viewers) {
-      viewers.delete(sessionId);
-      if (viewers.size === 0) {
-        this.activeViewers.delete(hostId);
-        this.stopPollingForHost(hostId);
-      }
-    }
-    this.viewerDetails.delete(sessionId);
-  };
-
-  updateHeartbeat(sessionId: string): boolean {
-    const viewer = this.viewerDetails.get(sessionId);
-    if (viewer) {
-      viewer.lastHeartbeat = Date.now();
-      return true;
-    }
-    return false;
-  }
-
-  private cleanupInactiveViewers(): void {
-    const now = Date.now();
-    const maxInactivity = 120000;
-
-    for (const [sessionId, viewer] of this.viewerDetails.entries()) {
-      if (now - viewer.lastHeartbeat > maxInactivity) {
-        this.unregisterViewer(viewer.hostId, sessionId);
-      }
-    }
-  }
-
-  destroy(): void {
-    clearInterval(this.viewerCleanupInterval);
-    for (const hostId of this.pollingConfigs.keys()) {
-      this.stopPollingForHost(hostId);
-    }
-  }
-}
diff --git a/plugins/proxmox/src/backend/proxmox/cluster-health-collector.ts b/plugins/proxmox/src/backend/proxmox/cluster-health-collector.ts
deleted file mode 100644
index 6ab539362..000000000
--- a/plugins/proxmox/src/backend/proxmox/cluster-health-collector.ts
+++ /dev/null
@@ -1,67 +0,0 @@
-import type { Client } from "ssh2";
-import { execCommand } from "./common-utils.js";
-
-export interface ProxmoxClusterNodeEntry {
-  name: string;
-  online: boolean;
-  local: boolean;
-  ip: string | null;
-}
-
-export type ProxmoxClusterHealthResult =
-  | { clustered: false }
-  | {
-      clustered: true;
-      quorate: boolean;
-      clusterName: string | null;
-      nodes: ProxmoxClusterNodeEntry[];
-    };
-
-const EMPTY_RESULT: ProxmoxClusterHealthResult = { clustered: false };
-
-export async function collectProxmoxClusterHealth(
-  client: Client,
-): Promise<ProxmoxClusterHealthResult> {
-  try {
-    const { stdout, code } = await execCommand(
-      client,
-      "pvesh get /cluster/status --output-format json",
-      15000,
-    );
-    if (code !== 0) {
-      return EMPTY_RESULT;
-    }
-
-    const data = JSON.parse(stdout);
-    if (!Array.isArray(data)) {
-      return EMPTY_RESULT;
-    }
-
-    const entries = data as Array<Record<string, unknown>>;
-    const clusterEntry = entries.find((e) => e.type === "cluster");
-    if (!clusterEntry) {
-      return EMPTY_RESULT;
-    }
-
-    const nodes: ProxmoxClusterNodeEntry[] = entries
-      .filter((e) => e.type === "node")
-      .map((e) => ({
-        name: typeof e.name === "string" ? e.name : "",
-        online: e.online === 1 || e.online === true,
-        local: e.local === 1 || e.local === true,
-        ip: typeof e.ip === "string" && e.ip ? e.ip : null,
-      }));
-
-    return {
-      clustered: true,
-      quorate: clusterEntry.quorate === 1 || clusterEntry.quorate === true,
-      clusterName:
-        typeof clusterEntry.name === "string" && clusterEntry.name
-          ? clusterEntry.name
-          : null,
-      nodes,
-    };
-  } catch {
-    return EMPTY_RESULT;
-  }
-}
diff --git a/plugins/proxmox/src/backend/proxmox/collect-proxmox-stats.ts b/plugins/proxmox/src/backend/proxmox/collect-proxmox-stats.ts
deleted file mode 100644
index 846cf21cf..000000000
--- a/plugins/proxmox/src/backend/proxmox/collect-proxmox-stats.ts
+++ /dev/null
@@ -1,86 +0,0 @@
-import type { Client } from "ssh2";
-import { execCommand } from "./common-utils.js";
-import { isSafeNodeName } from "../proxmox-shared.js";
-import {
-  collectProxmoxNodeStatus,
-  type ProxmoxNodeStatusResult,
-} from "./node-status-collector.js";
-import {
-  collectProxmoxNodeNetwork,
-  type ProxmoxNodeNetworkResult,
-} from "./node-network-collector.js";
-import {
-  collectProxmoxGuestsSummary,
-  type ProxmoxGuestsSummaryResult,
-} from "./guests-collector.js";
-import {
-  collectProxmoxStorage,
-  type ProxmoxStorageResult,
-} from "./storage-collector.js";
-import {
-  collectProxmoxClusterHealth,
-  type ProxmoxClusterHealthResult,
-} from "./cluster-health-collector.js";
-
-export interface ProxmoxStatsSnapshot {
-  node: ProxmoxNodeStatusResult;
-  network: ProxmoxNodeNetworkResult;
-  guests: ProxmoxGuestsSummaryResult;
-  storage: ProxmoxStorageResult;
-  cluster: ProxmoxClusterHealthResult;
-  lastChecked: string;
-}
-
-async function resolveNodeName(
-  client: Client,
-  configuredNodeName: string | null | undefined,
-): Promise<string> {
-  if (configuredNodeName) {
-    // An explicitly configured name is validated and used as-is - an unsafe
-    // value is rejected outright rather than silently falling back to
-    // auto-detection, which would mask a misconfigured (or malicious) override.
-    if (!isSafeNodeName(configuredNodeName)) {
-      throw new Error("Unable to determine a valid Proxmox node name");
-    }
-    return configuredNodeName;
-  }
-
-  const { stdout } = await execCommand(client, "hostname", 10000);
-  return stdout.trim();
-}
-
-export async function collectProxmoxStats(
-  client: Client,
-  configuredNodeName: string | null | undefined,
-): Promise<ProxmoxStatsSnapshot> {
-  const pveshCheck = await execCommand(
-    client,
-    "command -v pvesh >/dev/null 2>&1 && echo ok || echo missing",
-    10000,
-  );
-  if (pveshCheck.stdout.trim() !== "ok") {
-    throw new Error("pvesh not found — is this a Proxmox node?");
-  }
-
-  const nodeName = await resolveNodeName(client, configuredNodeName);
-  if (!isSafeNodeName(nodeName)) {
-    throw new Error("Unable to determine a valid Proxmox node name");
-  }
-
-  const [node, network, guests, storage, cluster] = await Promise.all([
-    collectProxmoxNodeStatus(client, nodeName),
-    collectProxmoxNodeNetwork(client, nodeName),
-    collectProxmoxGuestsSummary(client, nodeName),
-    collectProxmoxStorage(client, nodeName),
-    collectProxmoxClusterHealth(client),
-  ]);
-
-  return {
-    node,
-    network,
-    guests,
-    storage,
-    cluster,
-    lastChecked: new Date().toISOString(),
-  };
-}
diff --git a/plugins/proxmox/src/backend/proxmox/common-utils.ts b/plugins/proxmox/src/backend/proxmox/common-utils.ts
deleted file mode 100644
index 9e8147e30..000000000
--- a/plugins/proxmox/src/backend/proxmox/common-utils.ts
+++ /dev/null
@@ -1,98 +0,0 @@
-import type { Client, ClientChannel } from "ssh2";
-
-/** Runs a command over an already-open ssh2 client and collects its output. */
-export function execCommand(
-  client: Client,
-  command: string,
-  timeoutMs = 30000,
-): Promise<{
-  stdout: string;
-  stderr: string;
-  code: number | null;
-}> {
-  return new Promise((resolve, reject) => {
-    let settled = false;
-    let stream: ClientChannel | null = null;
-
-    const timeout = setTimeout(() => {
-      if (!settled) {
-        settled = true;
-        cleanup();
-        reject(new Error(`Command timeout after ${timeoutMs}ms: ${command}`));
-      }
-    }, timeoutMs);
-
-    const cleanup = () => {
-      clearTimeout(timeout);
-      if (stream) {
-        try {
-          stream.removeAllListeners();
-          if (stream.stderr) {
-            stream.stderr.removeAllListeners();
-          }
-          stream.destroy();
-        } catch {
-          // expected - cleanup errors ignored
-        }
-      }
-    };
-
-    client.exec(command, { pty: false }, (err, _stream) => {
-      if (err) {
-        if (!settled) {
-          settled = true;
-          cleanup();
-          reject(err);
-        }
-        return;
-      }
-
-      stream = _stream;
-      let stdout = "";
-      let stderr = "";
-      let exitCode: number | null = null;
-
-      stream
-        .on("close", (code: number | undefined) => {
-          if (!settled) {
-            settled = true;
-            exitCode = typeof code === "number" ? code : null;
-            cleanup();
-            resolve({ stdout, stderr, code: exitCode });
-          }
-        })
-        .on("data", (data: Buffer) => {
-          stdout += data.toString("utf8");
-        })
-        .on("error", (streamErr: Error) => {
-          if (!settled) {
-            settled = true;
-            cleanup();
-            reject(streamErr);
-          }
-        });
-
-      if (stream.stderr) {
-        stream.stderr
-          .on("data", (data: Buffer) => {
-            stderr += data.toString("utf8");
-          })
-          .on("error", (stderrErr: Error) => {
-            if (!settled) {
-              settled = true;
-              cleanup();
-              reject(stderrErr);
-            }
-          });
-      }
-    });
-  });
-}
-
-export function toFixedNum(
-  n: number | null | undefined,
-  digits = 2,
-): number | null {
-  if (typeof n !== "number" || !Number.isFinite(n)) return null;
-  return Number(n.toFixed(digits));
-}
diff --git a/plugins/proxmox/src/backend/proxmox/guests-collector.ts b/plugins/proxmox/src/backend/proxmox/guests-collector.ts
deleted file mode 100644
index 703852050..000000000
--- a/plugins/proxmox/src/backend/proxmox/guests-collector.ts
+++ /dev/null
@@ -1,113 +0,0 @@
-import type { Client } from "ssh2";
-import { execCommand, toFixedNum } from "./common-utils.js";
-import { isSafeNodeName } from "../proxmox-shared.js";
-
-export interface ProxmoxGuestSummaryEntry {
-  vmid: number;
-  name: string;
-  type: "qemu" | "lxc";
-  status: string;
-  cpuPercent: number | null;
-  memPercent: number | null;
-  memUsedGiB: number | null;
-  memTotalGiB: number | null;
-  diskPercent: number | null;
-  diskUsedGiB: number | null;
-  diskTotalGiB: number | null;
-  uptimeSeconds: number | null;
-}
-
-export interface ProxmoxGuestsSummaryResult {
-  guests: ProxmoxGuestSummaryEntry[];
-  counts: { running: number; stopped: number; total: number };
-}
-
-const EMPTY_RESULT: ProxmoxGuestsSummaryResult = {
-  guests: [],
-  counts: { running: 0, stopped: 0, total: 0 },
-};
-
-function bytesToGiB(bytes: number): number {
-  return bytes / (1024 * 1024 * 1024);
-}
-
-export async function collectProxmoxGuestsSummary(
-  client: Client,
-  nodeName: string,
-): Promise<ProxmoxGuestsSummaryResult> {
-  if (!isSafeNodeName(nodeName)) {
-    return EMPTY_RESULT;
-  }
-
-  try {
-    const { stdout, code } = await execCommand(
-      client,
-      "pvesh get /cluster/resources --output-format json",
-      25000,
-    );
-    if (code !== 0) {
-      return EMPTY_RESULT;
-    }
-
-    const resources = JSON.parse(stdout);
-    if (!Array.isArray(resources)) {
-      return EMPTY_RESULT;
-    }
-
-    const guests: ProxmoxGuestSummaryEntry[] = [];
-    for (const r of resources as Array<Record<string, unknown>>) {
-      const type = r.type;
-      if (type !== "qemu" && type !== "lxc") continue;
-      if (r.node !== nodeName) continue;
-      if (r.template === true || r.template === 1) continue;
-
-      const cpuFraction = typeof r.cpu === "number" ? r.cpu : null;
-      const mem = typeof r.mem === "number" ? r.mem : null;
-      const maxmem = typeof r.maxmem === "number" ? r.maxmem : null;
-      const memPercent =
-        mem !== null && maxmem !== null && maxmem > 0
-          ? Math.max(0, Math.min(100, (mem / maxmem) * 100))
-          : null;
-
-      const disk = typeof r.disk === "number" ? r.disk : null;
-      const maxdisk = typeof r.maxdisk === "number" ? r.maxdisk : null;
-      // QEMU guests without a running agent report maxdisk: 0 - a false 0%
-      // is worse than an honest "unknown", so treat that as no data at all.
-      const hasDiskData = maxdisk !== null && maxdisk > 0;
-      const diskPercent =
-        hasDiskData && disk !== null
-          ? Math.max(0, Math.min(100, (disk / maxdisk) * 100))
-          : null;
-
-      guests.push({
-        vmid: typeof r.vmid === "number" ? r.vmid : Number(r.vmid),
-        name:
-          typeof r.name === "string" && r.name ? r.name : String(r.vmid ?? ""),
-        type,
-        status: typeof r.status === "string" ? r.status : "unknown",
-        cpuPercent: toFixedNum(
-          cpuFraction !== null ? cpuFraction * 100 : null,
-          0,
-        ),
-        memPercent: toFixedNum(memPercent, 0),
-        memUsedGiB: mem !== null ? toFixedNum(bytesToGiB(mem), 2) : null,
-        memTotalGiB: maxmem !== null ? toFixedNum(bytesToGiB(maxmem), 2) : null,
-        diskPercent: toFixedNum(diskPercent, 0),
-        diskUsedGiB:
-          hasDiskData && disk !== null ? toFixedNum(bytesToGiB(disk), 2) : null,
-        diskTotalGiB: hasDiskData ? toFixedNum(bytesToGiB(maxdisk), 2) : null,
-        uptimeSeconds: typeof r.uptime === "number" ? r.uptime : null,
-      });
-    }
-
-    const running = guests.filter((g) => g.status === "running").length;
-    const stopped = guests.filter((g) => g.status !== "running").length;
-
-    return {
-      guests,
-      counts: { running, stopped, total: guests.length },
-    };
-  } catch {
-    return EMPTY_RESULT;
-  }
-}
diff --git a/plugins/proxmox/src/backend/proxmox/node-network-collector.ts b/plugins/proxmox/src/backend/proxmox/node-network-collector.ts
deleted file mode 100644
index 0c4a03738..000000000
--- a/plugins/proxmox/src/backend/proxmox/node-network-collector.ts
+++ /dev/null
@@ -1,145 +0,0 @@
-import type { Client } from "ssh2";
-import { execCommand } from "./common-utils.js";
-import { isSafeNodeName } from "../proxmox-shared.js";
-
-export interface ProxmoxNodeNetworkInterface {
-  name: string;
-  ip: string | null;
-  state: string | null;
-  rxBytes: string | null;
-  txBytes: string | null;
-}
-
-export interface ProxmoxNodeNetworkResult {
-  interfaces: ProxmoxNodeNetworkInterface[];
-}
-
-const EMPTY_RESULT: ProxmoxNodeNetworkResult = { interfaces: [] };
-
-async function collectFromProcNetDev(
-  client: Client,
-): Promise<ProxmoxNodeNetworkResult> {
-  const interfaces: ProxmoxNodeNetworkInterface[] = [];
-
-  try {
-    const [addrOut, stateOut, procNetOut] = await Promise.all([
-      execCommand(
-        client,
-        "ip -o addr show | awk '{print $2,$4}' | grep -v '^lo'",
-      ),
-      execCommand(
-        client,
-        "ip -o link show | awk '{gsub(/:/, \"\", $2); print $2,$9}'",
-      ),
-      execCommand(client, "cat /proc/net/dev"),
-    ]);
-
-    const ifMap = new Map<
-      string,
-      { ip: string | null; state: string | null }
-    >();
-    for (const line of addrOut.stdout
-      .split("\n")
-      .map((l) => l.trim())
-      .filter(Boolean)) {
-      const parts = line.split(/\s+/);
-      if (parts.length >= 2) {
-        const name = parts[0];
-        const ip = parts[1].split("/")[0];
-        if (!ifMap.has(name)) ifMap.set(name, { ip, state: null });
-      }
-    }
-    for (const line of stateOut.stdout
-      .split("\n")
-      .map((l) => l.trim())
-      .filter(Boolean)) {
-      const parts = line.split(/\s+/);
-      if (parts.length >= 2) {
-        const existing = ifMap.get(parts[0]);
-        if (existing) existing.state = parts[1];
-      }
-    }
-
-    const rxTxMap = new Map<string, { rx: string; tx: string }>();
-    for (const line of procNetOut.stdout.split("\n").slice(2)) {
-      const parts = line.trim().split(/\s+/);
-      if (parts.length >= 10) {
-        const ifName = parts[0].replace(":", "");
-        rxTxMap.set(ifName, { rx: parts[1], tx: parts[9] });
-      }
-    }
-
-    for (const [name, data] of ifMap.entries()) {
-      const rxTx = rxTxMap.get(name);
-      interfaces.push({
-        name,
-        ip: data.ip,
-        state: data.state,
-        rxBytes: rxTx?.rx ?? null,
-        txBytes: rxTx?.tx ?? null,
-      });
-    }
-  } catch {
-    return EMPTY_RESULT;
-  }
-
-  return { interfaces };
-}
-
-export async function collectProxmoxNodeNetwork(
-  client: Client,
-  nodeName: string,
-): Promise<ProxmoxNodeNetworkResult> {
-  if (!isSafeNodeName(nodeName)) {
-    return EMPTY_RESULT;
-  }
-
-  try {
-    const { stdout, code } = await execCommand(
-      client,
-      `pvesh get /nodes/${nodeName}/netstat --output-format json`,
-      15000,
-    );
-    if (code !== 0) {
-      return collectFromProcNetDev(client);
-    }
-
-    const data = JSON.parse(stdout);
-    if (!Array.isArray(data)) {
-      return collectFromProcNetDev(client);
-    }
-
-    const interfaces: ProxmoxNodeNetworkInterface[] = data
-      .filter(
-        (entry): entry is Record<string, unknown> =>
-          !!entry && typeof entry === "object",
-      )
-      .map((entry) => ({
-        name:
-          typeof entry.dev === "string" ? entry.dev : String(entry.dev ?? ""),
-        ip: null,
-        state: null,
-        rxBytes:
-          typeof entry.in === "number"
-            ? String(entry.in)
-            : typeof entry.received === "number"
-              ? String(entry.received)
-              : null,
-        txBytes:
-          typeof entry.out === "number"
-            ? String(entry.out)
-            : typeof entry.transmitted === "number"
-              ? String(entry.transmitted)
-              : null,
-      }))
-      .filter((iface) => iface.name && iface.name !== "lo");
-
-    if (interfaces.length === 0) {
-      return collectFromProcNetDev(client);
-    }
-
-    return { interfaces };
-  } catch {
-    return collectFromProcNetDev(client);
-  }
-}
diff --git a/plugins/proxmox/src/backend/proxmox/node-status-collector.ts b/plugins/proxmox/src/backend/proxmox/node-status-collector.ts
deleted file mode 100644
index e7bcec87c..000000000
--- a/plugins/proxmox/src/backend/proxmox/node-status-collector.ts
+++ /dev/null
@@ -1,142 +0,0 @@
-import type { Client } from "ssh2";
-import { execCommand, toFixedNum } from "./common-utils.js";
-import { isSafeNodeName } from "../proxmox-shared.js";
-
-export interface ProxmoxNodeStatusResult {
-  cpu: {
-    percent: number | null;
-    cores: number | null;
-    load: [number, number, number] | null;
-  };
-  memory: {
-    percent: number | null;
-    usedGiB: number | null;
-    totalGiB: number | null;
-  };
-  disk: {
-    percent: number | null;
-    usedGiB: number | null;
-    totalGiB: number | null;
-  };
-  uptime: {
-    seconds: number | null;
-    formatted: string | null;
-  };
-  system: {
-    hostname: string | null;
-    kernel: string | null;
-    pveVersion: string | null;
-  };
-}
-
-const EMPTY_RESULT: ProxmoxNodeStatusResult = {
-  cpu: { percent: null, cores: null, load: null },
-  memory: { percent: null, usedGiB: null, totalGiB: null },
-  disk: { percent: null, usedGiB: null, totalGiB: null },
-  uptime: { seconds: null, formatted: null },
-  system: { hostname: null, kernel: null, pveVersion: null },
-};
-
-function bytesToGiB(bytes: number): number {
-  return bytes / (1024 * 1024 * 1024);
-}
-
-function formatUptime(seconds: number): string {
-  const days = Math.floor(seconds / 86400);
-  const hours = Math.floor((seconds % 86400) / 3600);
-  const minutes = Math.floor((seconds % 3600) / 60);
-  return `${days}d ${hours}h ${minutes}m`;
-}
-
-export async function collectProxmoxNodeStatus(
-  client: Client,
-  nodeName: string,
-): Promise<ProxmoxNodeStatusResult> {
-  if (!isSafeNodeName(nodeName)) {
-    return EMPTY_RESULT;
-  }
-
-  try {
-    const { stdout, code } = await execCommand(
-      client,
-      `pvesh get /nodes/${nodeName}/status --output-format json`,
-      25000,
-    );
-    if (code !== 0) {
-      return EMPTY_RESULT;
-    }
-
-    const data = JSON.parse(stdout) as Record<string, unknown>;
-
-    const cpuFraction = typeof data.cpu === "number" ? data.cpu : null;
-    const cpuinfo = (data.cpuinfo as Record<string, unknown>) || {};
-    const cores = typeof cpuinfo.cores === "number" ? cpuinfo.cores : null;
-    const loadavgRaw = data.loadavg;
-    let load: [number, number, number] | null = null;
-    if (Array.isArray(loadavgRaw) && loadavgRaw.length >= 3) {
-      const parsed = loadavgRaw
-        .slice(0, 3)
-        .map((v) => Number(v))
-        .map((v) => (Number.isFinite(v) ? v : 0));
-      load = parsed as [number, number, number];
-    }
-
-    const memory = (data.memory as Record<string, unknown>) || {};
-    const memUsed = typeof memory.used === "number" ? memory.used : null;
-    const memTotal = typeof memory.total === "number" ? memory.total : null;
-    const memPercent =
-      memUsed !== null && memTotal !== null && memTotal > 0
-        ? Math.max(0, Math.min(100, (memUsed / memTotal) * 100))
-        : null;
-
-    const rootfs = (data.rootfs as Record<string, unknown>) || {};
-    const diskUsed = typeof rootfs.used === "number" ? rootfs.used : null;
-    const diskTotal = typeof rootfs.total === "number" ? rootfs.total : null;
-    const diskPercent =
-      diskUsed !== null && diskTotal !== null && diskTotal > 0
-        ? Math.max(0, Math.min(100, (diskUsed / diskTotal) * 100))
-        : null;
-
-    const uptimeSeconds = typeof data.uptime === "number" ? data.uptime : null;
-
-    return {
-      cpu: {
-        percent: toFixedNum(cpuFraction !== null ? cpuFraction * 100 : null, 0),
-        cores,
-        load,
-      },
-      memory: {
-        percent: toFixedNum(memPercent, 0),
-        usedGiB: memUsed !== null ? toFixedNum(bytesToGiB(memUsed), 2) : null,
-        totalGiB:
-          memTotal !== null ? toFixedNum(bytesToGiB(memTotal), 2) : null,
-      },
-      disk: {
-        percent: toFixedNum(diskPercent, 0),
-        usedGiB: diskUsed !== null ? toFixedNum(bytesToGiB(diskUsed), 2) : null,
-        totalGiB:
-          diskTotal !== null ? toFixedNum(bytesToGiB(diskTotal), 2) : null,
-      },
-      uptime: {
-        seconds: uptimeSeconds,
-        formatted: uptimeSeconds !== null ? formatUptime(uptimeSeconds) : null,
-      },
-      system: {
-        hostname:
-          typeof data.hostname === "string" && data.hostname
-            ? data.hostname
-            : null,
-        kernel:
-          typeof data.kversion === "string" && data.kversion
-            ? data.kversion
-            : null,
-        pveVersion:
-          typeof data.pveversion === "string" && data.pveversion
-            ? data.pveversion
-            : null,
-      },
-    };
-  } catch {
-    return EMPTY_RESULT;
-  }
-}
diff --git a/plugins/proxmox/src/backend/proxmox/storage-collector.ts b/plugins/proxmox/src/backend/proxmox/storage-collector.ts
deleted file mode 100644
index 9b1375257..000000000
--- a/plugins/proxmox/src/backend/proxmox/storage-collector.ts
+++ /dev/null
@@ -1,76 +0,0 @@
-import type { Client } from "ssh2";
-import { execCommand, toFixedNum } from "./common-utils.js";
-import { isSafeNodeName } from "../proxmox-shared.js";
-
-export interface ProxmoxStoragePoolEntry {
-  name: string;
-  type: string;
-  active: boolean;
-  enabled: boolean;
-  usedGiB: number | null;
-  totalGiB: number | null;
-  availGiB: number | null;
-  percent: number | null;
-}
-
-export interface ProxmoxStorageResult {
-  pools: ProxmoxStoragePoolEntry[];
-}
-
-const EMPTY_RESULT: ProxmoxStorageResult = { pools: [] };
-
-function bytesToGiB(bytes: number): number {
-  return bytes / (1024 * 1024 * 1024);
-}
-
-export async function collectProxmoxStorage(
-  client: Client,
-  nodeName: string,
-): Promise<ProxmoxStorageResult> {
-  if (!isSafeNodeName(nodeName)) {
-    return EMPTY_RESULT;
-  }
-
-  try {
-    const { stdout, code } = await execCommand(
-      client,
-      `pvesh get /nodes/${nodeName}/storage --output-format json`,
-      25000,
-    );
-    if (code !== 0) {
-      return EMPTY_RESULT;
-    }
-
-    const data = JSON.parse(stdout);
-    if (!Array.isArray(data)) {
-      return EMPTY_RESULT;
-    }
-
-    const pools: ProxmoxStoragePoolEntry[] = (
-      data as Array<Record<string, unknown>>
-    ).map((entry) => {
-      const used = typeof entry.used === "number" ? entry.used : null;
-      const total = typeof entry.total === "number" ? entry.total : null;
-      const avail = typeof entry.avail === "number" ? entry.avail : null;
-      const percent =
-        used !== null && total !== null && total > 0
-          ? Math.max(0, Math.min(100, (used / total) * 100))
-          : null;
-
-      return {
-        name: typeof entry.storage === "string" ? entry.storage : "",
-        type: typeof entry.type === "string" ? entry.type : "unknown",
-        active: entry.active === 1 || entry.active === true,
-        enabled: entry.enabled === 1 || entry.enabled === true,
-        usedGiB: used !== null ? toFixedNum(bytesToGiB(used), 2) : null,
-        totalGiB: total !== null ? toFixedNum(bytesToGiB(total), 2) : null,
-        availGiB: avail !== null ? toFixedNum(bytesToGiB(avail), 2) : null,
-        percent: toFixedNum(percent, 0),
-      };
-    });
-
-    return { pools };
-  } catch {
-    return EMPTY_RESULT;
-  }
-}
diff --git a/plugins/proxmox/src/backend/routes.ts b/plugins/proxmox/src/backend/routes.ts
deleted file mode 100644
index af29f715b..000000000
--- a/plugins/proxmox/src/backend/routes.ts
+++ /dev/null
@@ -1,1037 +0,0 @@
-import express, { type Router } from "express";
-import type { Client as SSHClient } from "ssh2";
-import { execElevated } from "@termix/plugin-sdk/host-commands";
-import type {
-  PluginHostCreateInput,
-  PluginHostJumpHost,
-  PluginHostUpdateInput,
-  PluginSshHost,
-} from "@termix/plugin-sdk/backend";
-import { connectSsh } from "./ssh.js";
-import { pluginCtx } from "./plugin-ctx.js";
-import { resolveProxmoxImportAuth } from "./proxmox-import-auth.js";
-import { parseProxmoxJumpHosts } from "./proxmox-jump-hosts.js";
-import { isSafeNodeName } from "./proxmox-shared.js";
-import {
-  indexImportedGuests,
-  parseJsonObject,
-  type ProxmoxSource,
-} from "./guest-sync.js";
-
-/** A thrown value's message, or the fallback when it is not an Error. */
-function getErrorMessage(error: unknown, fallback = "Unknown error"): string {
-  return error instanceof Error ? error.message : fallback;
-}
-
-const router = express.Router();
-const runningSyncs = new Set<string>();
-
-const MIN_SYNC_INTERVAL_MINUTES = 5;
-const DEFAULT_SYNC_INTERVAL_MINUTES = 15;
-
-// Helpers
-
-function execCommand(
-  client: SSHClient,
-  command: string,
-  timeoutMs = 25000,
-): Promise<string> {
-  return new Promise((resolve, reject) => {
-    let settled = false;
-    const timer = setTimeout(() => {
-      if (!settled) {
-        settled = true;
-        reject(new Error(`Command timed out after ${timeoutMs}ms`));
-      }
-    }, timeoutMs);
-
-    client.exec(command, (err, stream) => {
-      if (err) {
-        clearTimeout(timer);
-        return reject(err);
-      }
-      let stdout = "";
-      let stderr = "";
-      stream.on("close", (code: number) => {
-        if (settled) return;
-        settled = true;
-        clearTimeout(timer);
-        if (code !== 0)
-          reject(new Error(stderr || `Command exited with code ${code}`));
-        else resolve(stdout);
-      });
-      stream.on("data", (data: Buffer) => {
-        stdout += data.toString();
-      });
-      stream.stderr.on("data", (data: Buffer) => {
-        stderr += data.toString();
-      });
-    });
-  });
-}
-
-export async function execPveshCommand(
-  client: SSHClient,
-  command: string,
-  sudoPassword: string | undefined,
-  timeoutMs = 25000,
-): Promise<string> {
-  if (!sudoPassword) {
-    return execCommand(client, command, timeoutMs);
-  }
-
-  const result = await execElevated(client, command, sudoPassword, {
-    forceSudo: true,
-    timeoutMs,
-  });
-  if (result.code !== 0) {
-    throw new Error(result.stderr || `Command exited with code ${result.code}`);
-  }
-  return result.stdout;
-}
-
-// Parse all IPs from LXC net config, then return the one matching the preferred prefix.
-function parseLxcIp(
-  config: Record<string, unknown>,
-  preferredPrefixes: string[] = [],
-): string | null {
-  const ips: string[] = [];
-  for (const [key, value] of Object.entries(config)) {
-    if (/^net\d+$/.test(key) && typeof value === "string") {
-      const m = value.match(/ip=(\d{1,3}(?:\.\d{1,3}){3})/);
-      if (m) ips.push(m[1]);
-    }
-  }
-  if (!ips.length) return null;
-  for (const prefix of preferredPrefixes) {
-    const match = ips.find((ip) => ip.startsWith(prefix));
-    if (match) return match;
-  }
-  return ips[0];
-}
-
-function matchesAny(name: string, patterns: string[]): boolean {
-  const lower = name.toLowerCase();
-  return patterns.some((p) => lower.includes(p.toLowerCase()));
-}
-
-function parseProxmoxConfig(raw: unknown): {
-  windowsPatterns: string[];
-  dockerPatterns: string[];
-  preferredPrefixes: string[];
-  defaultCredentialId: number | null;
-  defaultAuthType: string;
-  autoSyncEnabled: boolean;
-  syncIntervalMinutes: number;
-  markMissingGuests: boolean;
-} {
-  const split = (s: string) =>
-    s
-      .split(",")
-      .map((x) => x.trim())
-      .filter(Boolean);
-  if (!raw || typeof raw !== "object") {
-    return {
-      windowsPatterns: ["win", "windows"],
-      dockerPatterns: ["docker"],
-      preferredPrefixes: [],
-      defaultCredentialId: null,
-      defaultAuthType: "password",
-      autoSyncEnabled: false,
-      syncIntervalMinutes: DEFAULT_SYNC_INTERVAL_MINUTES,
-      markMissingGuests: true,
-    };
-  }
-  const cfg = raw as Record<string, unknown>;
-  const interval =
-    typeof cfg.syncIntervalMinutes === "number"
-      ? cfg.syncIntervalMinutes
-      : Number.parseInt(String(cfg.syncIntervalMinutes ?? ""), 10);
-  return {
-    defaultCredentialId:
-      typeof cfg.defaultCredentialId === "number"
-        ? cfg.defaultCredentialId
-        : null,
-    defaultAuthType:
-      typeof cfg.defaultAuthType === "string"
-        ? cfg.defaultAuthType
-        : "password",
-    windowsPatterns: split(
-      typeof cfg.windowsPatterns === "string"
-        ? cfg.windowsPatterns
-        : "win,windows",
-    ),
-    dockerPatterns: split(
-      typeof cfg.dockerPatterns === "string" ? cfg.dockerPatterns : "docker",
-    ),
-    preferredPrefixes: split(
-      typeof cfg.preferredPrefixes === "string" ? cfg.preferredPrefixes : "",
-    ),
-    autoSyncEnabled: cfg.autoSyncEnabled === true,
-    syncIntervalMinutes:
-      Number.isFinite(interval) && interval >= MIN_SYNC_INTERVAL_MINUTES
-        ? interval
-        : DEFAULT_SYNC_INTERVAL_MINUTES,
-    markMissingGuests: cfg.markMissingGuests !== false,
-  };
-}
-
-type ProxmoxGuest = {
-  name: string;
-  vmid: number;
-  type: "qemu" | "lxc";
-  node: string;
-  status: string;
-  ip: string | null;
-  connectionType: "ssh" | "rdp";
-  enableDocker: boolean;
-};
-
-/** The resolved host ctx.ssh.connect hands back, plus the sudo secret proxmox needs for pvesh. */
-type PluginSshHostWithSudo = PluginSshHost & { sudoPassword?: string };
-
-type ProxmoxSyncResult = {
-  created: number;
-  updated: number;
-  markedMissing: number;
-  skipped: number;
-  errors: string[];
-};
-
-function guestSourceKey(sourceHostId: number, guest: ProxmoxGuest): string {
-  return `${sourceHostId}:${guest.node}:${guest.type}:${guest.vmid}`;
-}
-
-function guestTags(guest: ProxmoxGuest): string[] {
-  const idTag = guest.type === "lxc" ? `ct-${guest.vmid}` : `vm-${guest.vmid}`;
-  return [
-    "proxmox",
-    guest.type,
-    guest.node,
-    idTag,
-    ...(guest.enableDocker ? ["docker"] : []),
-  ];
-}
-
-/**
- * The switches another plugin keeps for an imported guest. An entry for a
- * plugin that is not running is skipped by core.
- */
-export function guestPluginSettings(
-  connectionType: "ssh" | "rdp",
-  enableDocker: boolean,
-): Record<string, Record<string, unknown>> {
-  return {
-    ...(connectionType === "rdp"
-      ? { "remote-desktop": { enableRdp: true, rdpPort: 3389 } }
-      : {}),
-    ...(enableDocker ? { docker: { enableDocker: true } } : {}),
-  };
-}
-
-function mergeTags(
-  existing: unknown,
-  additions: string[],
-  removals: string[] = [],
-): string {
-  const removeSet = new Set(removals);
-  const base =
-    typeof existing === "string"
-      ? existing
-          .split(",")
-          .map((tag) => tag.trim())
-          .filter(Boolean)
-      : Array.isArray(existing)
-        ? existing
-            .map((tag) => (typeof tag === "string" ? tag.trim() : ""))
-            .filter(Boolean)
-        : [];
-  return [...new Set([...base, ...additions])]
-    .filter((tag) => !removeSet.has(tag))
-    .join(",");
-}
-
-async function discoverProxmoxGuestsForHost(
-  userId: string,
-  parsedHostId: number,
-  onProgress?: (done: number, total: number) => void,
-): Promise<{
-  host: PluginSshHostWithSudo;
-  guests: ProxmoxGuest[];
-  credentialId: number | null;
-  defaultCredentialId: number | null;
-  jumpHosts: unknown[] | null;
-  config: ReturnType<typeof parseProxmoxConfig>;
-}> {
-  const ctx = pluginCtx();
-  const proxmoxCfgRaw = await ctx.settings.getHost(
-    parsedHostId,
-    "proxmoxConfig",
-  );
-  const config = parseProxmoxConfig(proxmoxCfgRaw);
-
-  const { client, host } = await connectSsh(parsedHostId, {
-    purpose: "proxmox",
-    timeoutMs: 35000,
-    overrides: { tryKeyboard: false, readyTimeout: 30000 },
-  });
-  // connect() always hands back a redacted host; the sudo password comes
-  // from resolveHost, which needs credentials:read.
-  const full = await ctx.ssh.resolveHost(parsedHostId);
-  const hostWithSudo: PluginSshHostWithSudo = {
-    ...host,
-    sudoPassword: (full?.sudoPassword as string | undefined) ?? undefined,
-  };
-  const hostCredentialId = (hostWithSudo.credentialId as number | null) ?? null;
-
-  try {
-    ctx.log.info("Proxmox discovery SSH connection established");
-
-    const pveshCheck = await execCommand(
-      client,
-      "command -v pvesh >/dev/null 2>&1 && echo ok || echo missing",
-    );
-    if (pveshCheck.trim() !== "ok") {
-      const error = new Error("pvesh not found — is this a Proxmox node?");
-      (error as Error & { status?: number }).status = 422;
-      throw error;
-    }
-
-    const resourcesJson = await execPveshCommand(
-      client,
-      "pvesh get /cluster/resources --output-format json 2>/dev/null",
-      hostWithSudo.sudoPassword,
-    );
-
-    let resources: Array<Record<string, unknown>>;
-    try {
-      resources = JSON.parse(resourcesJson);
-    } catch {
-      const error = new Error(
-        "Failed to parse pvesh output — unexpected response",
-      );
-      (error as Error & { status?: number }).status = 502;
-      throw error;
-    }
-
-    type GuestBase = {
-      name: string;
-      vmid: number;
-      type: "qemu" | "lxc";
-      node: string;
-      status: string;
-    };
-
-    const guestBases: GuestBase[] = [];
-    for (const r of resources) {
-      const type = r.type as string;
-      if (type !== "qemu" && type !== "lxc") continue;
-      if (r.template) continue;
-      const node = r.node as string;
-      if (!isSafeNodeName(node)) {
-        ctx.log.warn(
-          `Skipping guest with unsafe node name: ${node} (vmid ${r.vmid})`,
-        );
-        continue;
-      }
-      guestBases.push({
-        name: (r.name as string) || String(r.vmid),
-        vmid: Number(r.vmid),
-        type: type as "qemu" | "lxc",
-        node,
-        status: (r.status as string) || "unknown",
-      });
-    }
-
-    async function resolveIp(g: GuestBase): Promise<string | null> {
-      if (g.type === "lxc") {
-        let configIp: string | null = null;
-        try {
-          const cfgJson = await execPveshCommand(
-            client,
-            `pvesh get /nodes/${g.node}/lxc/${g.vmid}/config --output-format json 2>/dev/null`,
-            hostWithSudo.sudoPassword,
-            25000,
-          );
-          configIp = parseLxcIp(JSON.parse(cfgJson), config.preferredPrefixes);
-        } catch {
-          configIp = null;
-        }
-        if (configIp) return configIp;
-        // Static config parsing found nothing (e.g. net0 uses ip=dhcp).
-        // Fall back to the live interface list for running containers.
-        if (g.status === "running") {
-          try {
-            const ifRaw = await execPveshCommand(
-              client,
-              `pvesh get /nodes/${g.node}/lxc/${g.vmid}/interfaces --output-format json 2>/dev/null`,
-              hostWithSudo.sudoPassword,
-              12000,
-            );
-            const data = JSON.parse(ifRaw);
-            const entries: Array<Record<string, unknown>> = Array.isArray(data)
-              ? data
-              : [];
-            const allIps: string[] = [];
-            for (const entry of entries) {
-              if (entry.name === "lo") continue;
-              const inet = entry.inet;
-              if (typeof inet !== "string") continue;
-              const m = inet.match(/^(\d{1,3}(?:\.\d{1,3}){3})\/\d+$/);
-              if (m && !m[1].startsWith("127.")) allIps.push(m[1]);
-            }
-            if (allIps.length) {
-              for (const prefix of config.preferredPrefixes) {
-                const match = allIps.find((ip) => ip.startsWith(prefix));
-                if (match) return match;
-              }
-              return allIps[0];
-            }
-          } catch {
-            // Guest not running or interfaces unavailable
-          }
-        }
-        return null;
-      }
-      if (g.type === "qemu" && g.status === "running") {
-        try {
-          const ifJson = await execPveshCommand(
-            client,
-            `pvesh get /nodes/${g.node}/qemu/${g.vmid}/agent/network-get-interfaces --output-format json 2>/dev/null`,
-            hostWithSudo.sudoPassword,
-            12000,
-          );
-          const data = JSON.parse(ifJson);
-          const ifaces: Array<Record<string, unknown>> = Array.isArray(
-            data?.result,
-          )
-            ? data.result
-            : Array.isArray(data)
-              ? data
-              : [];
-          const allIps: string[] = [];
-          for (const iface of ifaces) {
-            if (iface.name === "lo") continue;
-            const addrs =
-              (iface["ip-addresses"] as Array<Record<string, string>>) ?? [];
-            for (const a of addrs) {
-              if (
-                a["ip-address-type"] === "ipv4" &&
-                !a["ip-address"].startsWith("127.")
-              ) {
-                allIps.push(a["ip-address"]);
-              }
-            }
-          }
-          if (allIps.length) {
-            for (const prefix of config.preferredPrefixes) {
-              const match = allIps.find((ip) => ip.startsWith(prefix));
-              if (match) return match;
-            }
-            return allIps[0];
-          }
-        } catch {
-          // Guest agent absent or timed out
-        }
-      }
-      return null;
-    }
-
-    // Low concurrency on purpose: pvesh is heavy and small Proxmox nodes
-    // (especially reached over a high-latency jump chain) suffer severe
-    // contention when many run at once — calls then exceed execCommand's
-    // timeout and IPs come back empty. 2 keeps each call well under budget.
-    const CONCURRENCY = 2;
-    const ips: (string | null)[] = new Array(guestBases.length).fill(null);
-    let cursor = 0;
-    let completed = 0;
-    onProgress?.(0, guestBases.length);
-    async function ipWorker() {
-      while (cursor < guestBases.length) {
-        const i = cursor++;
-        ips[i] = await resolveIp(guestBases[i]);
-        completed++;
-        onProgress?.(completed, guestBases.length);
-      }
-    }
-    await Promise.all(
-      Array.from({ length: Math.min(CONCURRENCY, guestBases.length) }, () =>
-        ipWorker(),
-      ),
-    );
-
-    const guests: ProxmoxGuest[] = guestBases.map((g, i) => ({
-      ...g,
-      ip: ips[i],
-      connectionType: matchesAny(g.name, config.windowsPatterns)
-        ? "rdp"
-        : "ssh",
-      enableDocker: matchesAny(g.name, config.dockerPatterns),
-    }));
-
-    ctx.log.info(
-      `Proxmox discovery completed for host ${parsedHostId}: ${guests.length} guest(s)`,
-    );
-
-    return {
-      host: hostWithSudo,
-      guests,
-      credentialId: hostCredentialId,
-      defaultCredentialId: config.defaultCredentialId,
-      jumpHosts: parseProxmoxJumpHosts(hostWithSudo.jumpHosts),
-      config,
-    };
-  } finally {
-    try {
-      client.end();
-    } catch {
-      // ignore cleanup errors
-    }
-  }
-}
-
-async function syncProxmoxHost(
-  userId: string,
-  sourceHostId: number,
-): Promise<ProxmoxSyncResult> {
-  const ctx = pluginCtx();
-  const lockKey = `${userId}:${sourceHostId}`;
-  if (runningSyncs.has(lockKey)) {
-    return {
-      created: 0,
-      updated: 0,
-      markedMissing: 0,
-      skipped: 0,
-      errors: ["Sync already running"],
-    };
-  }
-
-  runningSyncs.add(lockKey);
-  const result: ProxmoxSyncResult = {
-    created: 0,
-    updated: 0,
-    markedMissing: 0,
-    skipped: 0,
-    errors: [],
-  };
-  const startedAt = new Date().toISOString();
-
-  try {
-    const discovery = await discoverProxmoxGuestsForHost(userId, sourceHostId);
-    const sourceHostName = String(discovery.host.name || "Proxmox");
-    const defaultCredentialId =
-      discovery.config.defaultCredentialId ?? discovery.credentialId ?? null;
-    const importAuth = resolveProxmoxImportAuth(
-      discovery.config.defaultAuthType,
-      defaultCredentialId,
-    );
-    const now = new Date().toISOString();
-
-    const existingBySource = indexImportedGuests(
-      await ctx.hosts.listOwned(),
-      await ctx.settings.listHostValues("proxmoxConfig"),
-      sourceHostId,
-    );
-
-    const seen = new Set<string>();
-    for (const guest of discovery.guests) {
-      const key = guestSourceKey(sourceHostId, guest);
-      seen.add(key);
-      const imported = existingBySource.get(key);
-      const existing = imported?.host;
-      const source: ProxmoxSource = {
-        source: "proxmox",
-        sourceHostId,
-        node: guest.node,
-        vmid: guest.vmid,
-        type: guest.type,
-        lastSeenAt: now,
-        lastStatus: guest.status,
-        missingSince: null,
-      };
-
-      const proxmoxConfig = { ...(imported?.config ?? {}), source };
-      const existingConnectionType =
-        existing?.connectionType === "ssh" || existing?.connectionType === "rdp"
-          ? existing.connectionType
-          : null;
-      const connectionType = existingConnectionType ?? guest.connectionType;
-      const usesImportCredential =
-        connectionType === "ssh" && importAuth.authType === "credential";
-      const existingUsesImportCredential =
-        usesImportCredential &&
-        existing?.authType === "credential" &&
-        existing?.credentialId === importAuth.credentialId;
-      const port =
-        typeof existing?.port === "number"
-          ? existing.port
-          : connectionType === "rdp"
-            ? 3389
-            : 22;
-      const username =
-        usesImportCredential && (!existing || existingUsesImportCredential)
-          ? ""
-          : typeof existing?.username === "string" && existing.username
-            ? existing.username
-            : connectionType === "rdp"
-              ? ""
-              : "root";
-      const update: PluginHostUpdateInput = {
-        name: guest.name,
-        ip: guest.ip || existing?.ip || "0.0.0.0",
-        port,
-        username,
-        connectionType,
-        folder: existing?.folder || sourceHostName,
-        tags: mergeTags(existing?.tags, guestTags(guest), ["proxmox-missing"]),
-        pluginSettings: { [ctx.pluginId]: { proxmoxConfig } },
-      };
-
-      if (existing) {
-        if (existingUsesImportCredential) {
-          update.credentialId = importAuth.credentialId;
-          update.overrideCredentialUsername = false;
-        }
-        await ctx.hosts.update(existing.id, update);
-        result.updated++;
-        continue;
-      }
-
-      await ctx.hosts.create({
-        ...update,
-        name: guest.name,
-        ip: update.ip!,
-        port,
-        username,
-        enableSsh: connectionType === "ssh",
-        pin: false,
-        authType: connectionType === "rdp" ? "password" : importAuth.authType,
-        credentialId: connectionType === "ssh" ? importAuth.credentialId : null,
-        overrideCredentialUsername: !!importAuth.overrideCredentialUsername,
-        jumpHosts: (parseProxmoxJumpHosts(discovery.jumpHosts) ??
-          []) as PluginHostJumpHost[],
-        forceKeyboardInteractive: false,
-        pluginSettings: {
-          ...update.pluginSettings,
-          ...guestPluginSettings(connectionType, guest.enableDocker),
-        },
-      });
-      result.created++;
-    }
-
-    if (discovery.config.markMissingGuests) {
-      for (const [key, { host, config, source }] of existingBySource) {
-        if (seen.has(key)) continue;
-        await ctx.hosts.update(host.id, {
-          tags: mergeTags(host.tags, ["proxmox-missing"]),
-          pluginSettings: {
-            [ctx.pluginId]: {
-              proxmoxConfig: {
-                ...config,
-                source: { ...source, missingSince: source.missingSince || now },
-              },
-            },
-          },
-        });
-        result.markedMissing++;
-      }
-    }
-
-    await writeSyncStatus(sourceHostId, {
-      lastSyncAt: startedAt,
-      lastSyncStatus: "success",
-      lastSyncError: null,
-      lastSyncResult: result,
-    });
-
-    return result;
-  } catch (error) {
-    const message = getErrorMessage(error);
-    result.errors.push(message);
-    await writeSyncStatus(sourceHostId, {
-      lastSyncAt: startedAt,
-      lastSyncStatus: "error",
-      lastSyncError: message,
-      lastSyncResult: result,
-    });
-    throw error;
-  } finally {
-    runningSyncs.delete(lockKey);
-  }
-}
-
-async function writeSyncStatus(
-  hostId: number,
-  patch: Record<string, unknown>,
-): Promise<void> {
-  const ctx = pluginCtx();
-  const config = parseJsonObject(
-    await ctx.settings.getHost(hostId, "proxmoxConfig"),
-  );
-  await ctx.settings.setHost(hostId, "proxmoxConfig", { ...config, ...patch });
-}
-
-/**
- * @openapi
- * /proxmox/sync:
- *   post:
- *     summary: Sync Proxmox guests for a host
- *     description: Re-runs discovery for a Proxmox node and creates, updates or marks missing the imported guest hosts.
- *     tags: [Proxmox]
- *     security:
- *       - bearerAuth: []
- *     requestBody:
- *       required: true
- *       content:
- *         application/json:
- *           schema:
- *             type: object
- *             required: [hostId]
- *             properties:
- *               hostId:
- *                 type: number
- *     responses:
- *       200:
- *         description: Sync result.
- *       400:
- *         description: Missing or invalid hostId.
- *       500:
- *         description: Sync failed.
- */
-router.post("/sync", async (req, res) => {
-  const { hostId } = req.body as { hostId?: unknown };
-  const userId = pluginCtx().currentActor()!;
-
-  const parsedHostId = Number(hostId);
-  if (!hostId || !Number.isInteger(parsedHostId) || parsedHostId <= 0) {
-    return res.status(400).json({ error: "Missing or invalid hostId" });
-  }
-
-  try {
-    const result = await syncProxmoxHost(userId, parsedHostId);
-    return res.json(result);
-  } catch (err: unknown) {
-    const message = getErrorMessage(err);
-    const status = (err as Error & { status?: number }).status || 500;
-    pluginCtx().log.error(
-      `Proxmox sync failed for host ${parsedHostId}`,
-      err as Error,
-    );
-    return res.status(status).json({ error: `Sync failed: ${message}` });
-  }
-});
-
-async function runDueProxmoxAutoSyncs(): Promise<void> {
-  const ctx = pluginCtx();
-  try {
-    const enabled = await ctx.settings.listHostValues<boolean>("enableProxmox");
-
-    const now = Date.now();
-    for (const { hostId, userId, value } of enabled) {
-      if (value !== true) continue;
-
-      const configRaw =
-        (await ctx.settings.getHost<Record<string, unknown>>(
-          hostId,
-          "proxmoxConfig",
-        )) ?? {};
-      const config = parseProxmoxConfig(configRaw);
-      if (!config.autoSyncEnabled) continue;
-
-      const lastSyncAt =
-        typeof configRaw.lastSyncAt === "string"
-          ? Date.parse(configRaw.lastSyncAt)
-          : 0;
-      const intervalMs = config.syncIntervalMinutes * 60 * 1000;
-      if (lastSyncAt && now - lastSyncAt < intervalMs) continue;
-
-      ctx
-        .asUser(userId, () => syncProxmoxHost(userId, hostId))
-        .catch((error) => {
-          ctx.log.error(
-            `Scheduled Proxmox sync failed for host ${hostId}`,
-            error as Error,
-          );
-        });
-    }
-  } catch (error) {
-    ctx.log.error("Failed to scan Proxmox auto sync jobs", error as Error);
-  }
-}
-
-let proxmoxAutoSyncTimer: NodeJS.Timeout | undefined;
-let proxmoxAutoSyncStartupTimer: NodeJS.Timeout | undefined;
-
-/**
- * @openapi
- * /proxmox/discover:
- *   post:
- *     summary: Discover Proxmox guests on a node
- *     description: >
- *       Connects to an existing SSH host (a Proxmox node) using its stored
- *       credentials, runs pvesh to enumerate all guests (VMs and LXC
- *       containers) in the cluster, and returns them ready to be imported as
- *       Termix hosts. No separate Proxmox API token is required.
- *     tags: [Proxmox]
- *     security:
- *       - bearerAuth: []
- *     requestBody:
- *       required: true
- *       content:
- *         application/json:
- *           schema:
- *             type: object
- *             required: [hostId]
- *             properties:
- *               hostId:
- *                 type: number
- *                 description: ID of the SSH host that is a Proxmox node.
- *     responses:
- *       200:
- *         description: Discovered guests.
- *         content:
- *           application/json:
- *             schema:
- *               type: object
- *               properties:
- *                 guests:
- *                   type: array
- *                   items:
- *                     type: object
- *                     properties:
- *                       name:
- *                         type: string
- *                       vmid:
- *                         type: number
- *                       type:
- *                         type: string
- *                         enum: [qemu, lxc]
- *                       node:
- *                         type: string
- *                       status:
- *                         type: string
- *                       ip:
- *                         type: string
- *                         nullable: true
- *                       connectionType:
- *                         type: string
- *                         enum: [ssh, rdp]
- *                       enableDocker:
- *                         type: boolean
- *                 credentialId:
- *                   type: number
- *                   nullable: true
- *                 defaultCredentialId:
- *                   type: number
- *                   nullable: true
- *       400:
- *         description: Missing or invalid hostId.
- *       401:
- *         description: Authentication required or session expired.
- *       403:
- *         description: Access denied to the host.
- *       404:
- *         description: Host not found.
- *       422:
- *         description: Host is not a Proxmox node or is unreachable.
- *       500:
- *         description: Discovery failed.
- */
-router.get("/discover/stream", async (req, res) => {
-  const userId = pluginCtx().currentActor()!;
-  const parsedHostId = Number((req.query as { hostId?: unknown }).hostId);
-  if (!parsedHostId || !Number.isInteger(parsedHostId) || parsedHostId <= 0) {
-    return res.status(400).json({ error: "Missing or invalid hostId" });
-  }
-
-  res.writeHead(200, {
-    "Content-Type": "text/event-stream",
-    "Cache-Control": "no-store, no-transform",
-    Connection: "keep-alive",
-    "X-Accel-Buffering": "no",
-  });
-  res.flushHeaders?.();
-
-  let closed = false;
-  const send = (event: string, data: unknown) => {
-    if (closed) return;
-    try {
-      res.write(`event: ${event}\ndata: ${JSON.stringify(data)}\n\n`);
-    } catch {
-      closed = true;
-    }
-  };
-  const heartbeat = setInterval(() => {
-    if (closed) return;
-    try {
-      res.write(": keepalive\n\n");
-    } catch {
-      closed = true;
-      clearInterval(heartbeat);
-    }
-  }, 15000);
-  req.on("close", () => {
-    closed = true;
-    clearInterval(heartbeat);
-  });
-
-  try {
-    const discovery = await discoverProxmoxGuestsForHost(
-      userId,
-      parsedHostId,
-      (done, total) => send("progress", { done, total }),
-    );
-    send("result", {
-      guests: discovery.guests,
-      credentialId: discovery.credentialId,
-      defaultCredentialId: discovery.defaultCredentialId,
-      jumpHosts: discovery.jumpHosts,
-    });
-  } catch (err: unknown) {
-    const message = getErrorMessage(err);
-    pluginCtx().log.error(
-      `Proxmox discovery (stream) failed for host ${parsedHostId}`,
-      err as Error,
-    );
-    send("fail", { message });
-  } finally {
-    clearInterval(heartbeat);
-    if (!closed) {
-      try {
-        res.end();
-      } catch {
-        // ignore end errors
-      }
-    }
-  }
-});
-
-/**
- * @openapi
- * /plugin-api/proxmox/discover:
- *   post:
- *     summary: Discover the guests on a Proxmox node
- *     description: Lists the node's VMs and containers so they can be added as hosts. /discover/stream reports the same with progress.
- *     tags: [Proxmox]
- *     requestBody:
- *       required: true
- *       content:
- *         application/json:
- *           schema:
- *             type: object
- *             required: [hostId]
- *             properties:
- *               hostId: { type: integer }
- *     responses:
- *       200: { description: The guests found. }
- *       400: { description: Missing or invalid hostId. }
- *       403: { description: Access denied to the host. }
- *       404: { description: Host not found. }
- *       422: { description: Host is not a Proxmox node or is unreachable. }
- */
-router.post("/discover", async (req, res) => {
-  const { hostId } = req.body as { hostId?: unknown };
-  const userId = pluginCtx().currentActor()!;
-
-  const parsedHostId = Number(hostId);
-  if (!hostId || !Number.isInteger(parsedHostId) || parsedHostId <= 0) {
-    return res.status(400).json({ error: "Missing or invalid hostId" });
-  }
-
-  try {
-    const discovery = await discoverProxmoxGuestsForHost(userId, parsedHostId);
-    return res.json({
-      guests: discovery.guests,
-      credentialId: discovery.credentialId,
-      defaultCredentialId: discovery.defaultCredentialId,
-      jumpHosts: discovery.jumpHosts,
-    });
-  } catch (err: unknown) {
-    const message = getErrorMessage(err);
-    pluginCtx().log.error(
-      `Proxmox discovery failed for host ${parsedHostId}`,
-      err as Error,
-    );
-
-    const status =
-      (err as Error & { status?: number }).status ||
-      (message.includes("Authentication failed") ||
-      message.includes("connect ECONNREFUSED") ||
-      message.includes("connect ETIMEDOUT")
-        ? 422
-        : 500);
-    return res.status(status).json({ error: `Discovery failed: ${message}` });
-  }
-});
-
-/**
- * @openapi
- * /plugin-api/proxmox/import:
- *   post:
- *     summary: Import discovered Proxmox guests as hosts
- *     description: >
- *       Creates one host per entry, owned by the caller, and stores each
- *       entry's proxmox host settings (the guest's source) on the new host.
- *     tags:
- *       - Proxmox
- *     requestBody:
- *       required: true
- *       content:
- *         application/json:
- *           schema:
- *             type: object
- *             required:
- *               - hosts
- *             properties:
- *               hosts:
- *                 type: array
- *                 items:
- *                   type: object
- *     responses:
- *       200:
- *         description: How many hosts were created and which failed.
- *       400:
- *         description: No hosts given.
- */
-router.post("/import", async (req, res) => {
-  const ctx = pluginCtx();
-  const { hosts } = req.body as { hosts?: unknown };
-  if (!Array.isArray(hosts) || hosts.length === 0) {
-    return res.status(400).json({ error: "No hosts to import" });
-  }
-  const result = { success: 0, failed: 0, errors: [] as string[] };
-  for (const entry of hosts as PluginHostCreateInput[]) {
-    try {
-      // Core refuses any field it does not take, and any host setting its
-      // plugin does not declare.
-      await ctx.hosts.create(entry);
-      result.success++;
-    } catch (err: unknown) {
-      result.failed++;
-      result.errors.push(`${String(entry?.name)}: ${getErrorMessage(err)}`);
-    }
-  }
-  return res.json(result);
-});
-
-/** Called from activate(). Mounts this router at /proxmox via the shared
- * dispatcher, and starts the background auto-sync scan (a 60s interval plus
- * a one-off 30s-delayed startup run, both unref'd so they never keep the
- * process alive on their own). */
-export function startProxmoxService(mountOn: Router): void {
-  mountOn.use(router);
-  proxmoxAutoSyncTimer = setInterval(runDueProxmoxAutoSyncs, 60 * 1000);
-  proxmoxAutoSyncTimer.unref?.();
-  proxmoxAutoSyncStartupTimer = setTimeout(runDueProxmoxAutoSyncs, 30 * 1000);
-  proxmoxAutoSyncStartupTimer.unref?.();
-}
-
-/** Called from deactivate(). /proxmox/* falls back to 404 until reactivated,
- * and the auto-sync timers are cleared so a disabled plugin stops syncing. */
-export function stopProxmoxService(): void {
-  // Unmounted by the runtime when the plugin deactivates.
-  if (proxmoxAutoSyncTimer) clearInterval(proxmoxAutoSyncTimer);
-  if (proxmoxAutoSyncStartupTimer) clearTimeout(proxmoxAutoSyncStartupTimer);
-  proxmoxAutoSyncTimer = undefined;
-  proxmoxAutoSyncStartupTimer = undefined;
-}
diff --git a/plugins/proxmox/src/backend/ssh.ts b/plugins/proxmox/src/backend/ssh.ts
deleted file mode 100644
index b7a221543..000000000
--- a/plugins/proxmox/src/backend/ssh.ts
+++ /dev/null
@@ -1,36 +0,0 @@
-import type { Client } from "ssh2";
-import type {
-  PluginSsh,
-  PluginSshConnection,
-  PluginSshConnectOptions,
-  PluginSshHost,
-} from "@termix/plugin-sdk/backend";
-
-let current: PluginSsh | null = null;
-
-/** Set in activate, cleared on deactivate. */
-export function setPluginSsh(ssh: PluginSsh | null): void {
-  current = ssh;
-}
-
-export function pluginSsh(): PluginSsh {
-  if (!current) throw new Error("The plugin is not active");
-  return current;
-}
-
-/** withConnection with ssh2's Client type filled in. */
-export function withSshConnection<T>(
-  host: number | PluginSshHost,
-  options: PluginSshConnectOptions & { pool: string },
-  fn: (client: Client) => Promise<T>,
-): Promise<T> {
-  return pluginSsh().withConnection<T, Client>(host, options, fn);
-}
-
-/** connect with ssh2's Client type filled in. */
-export function connectSsh(
-  host: number | PluginSshHost,
-  options?: PluginSshConnectOptions,
-): Promise<PluginSshConnection<Client>> {
-  return pluginSsh().connect<Client>(host, options);
-}
diff --git a/plugins/proxmox/src/backend/stats-service.ts b/plugins/proxmox/src/backend/stats-service.ts
deleted file mode 100644
index c7b0b0f11..000000000
--- a/plugins/proxmox/src/backend/stats-service.ts
+++ /dev/null
@@ -1,366 +0,0 @@
-/**
- * Proxmox node stats: polling, viewer sessions and their routes.
- *
- * Moved here from host-metrics, which only ever hosted this because the
- * plugin split predates B5. host-metrics must not import proxmox code, so
- * this plugin owns its own polling manager, SSH connections and routes.
- */
-
-import type { Router } from "express";
-import express from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { pluginCtx } from "./plugin-ctx.js";
-import {
-  ProxmoxPollingManager,
-  parseProxmoxStatsConfig,
-  type ProxmoxStatsPollableHost,
-} from "./proxmox-stats-polling.js";
-import type { ProxmoxNodeHistoryRepository } from "./proxmox-node-history-repository.js";
-
-const EMPTY_SNAPSHOT = {
-  node: {
-    cpu: { percent: null, cores: null, load: null },
-    memory: { percent: null, usedGiB: null, totalGiB: null },
-    disk: { percent: null, usedGiB: null, totalGiB: null },
-    uptime: { seconds: null, formatted: null },
-    system: { hostname: null, kernel: null, pveVersion: null },
-  },
-  network: { interfaces: [] },
-  guests: { guests: [], counts: { running: 0, stopped: 0, total: 0 } },
-  storage: { pools: [] },
-  cluster: { clustered: false },
-  lastChecked: new Date(0).toISOString(),
-};
-
-type PollableHost = ProxmoxStatsPollableHost & { enableProxmoxStats: boolean };
-
-let pollingManager: ProxmoxPollingManager<PollableHost> | undefined;
-let router: Router | undefined;
-
-async function fetchHostForPolling(
-  ctx: PluginContext,
-  hostId: number,
-  userId: string,
-): Promise<PollableHost | undefined> {
-  const enabled = await ctx.asUser(userId, () =>
-    ctx.settings.getHost<boolean>(hostId, "enableProxmoxStats"),
-  );
-  if (!enabled) return undefined;
-  const host = await ctx.asUser(userId, () => ctx.hosts.get(hostId));
-  if (!host) return undefined;
-  const proxmoxStatsConfig = await ctx.asUser(userId, () =>
-    ctx.settings.getHost(hostId, "proxmoxStatsConfig"),
-  );
-  return {
-    id: host.id,
-    userId: host.userId,
-    proxmoxStatsConfig: proxmoxStatsConfig as string | undefined,
-    enableProxmoxStats: true,
-  };
-}
-
-/** Called from activate(). Builds the polling manager and mounts its routes. */
-export function startProxmoxStatsService(
-  ctx: PluginContext,
-  mountOn: Router,
-  historyRepository: ProxmoxNodeHistoryRepository,
-): void {
-  pollingManager = new ProxmoxPollingManager<PollableHost>({
-    fetchHostById: (hostId, userId) => fetchHostForPolling(ctx, hostId, userId),
-    withSshConnection: (host, fn) =>
-      ctx.ssh.withConnection(
-        host.id,
-        {
-          pool: "proxmox-stats",
-          purpose: "proxmox",
-          overrides: { readyTimeout: 60000 },
-        },
-        fn,
-      ),
-    historyRepository,
-  });
-
-  router = express.Router();
-  registerRoutes(router, pollingManager, historyRepository);
-  mountOn.use("/stats", router);
-}
-
-export function stopProxmoxStatsService(): void {
-  pollingManager?.destroy();
-  pollingManager = undefined;
-  router = undefined;
-}
-
-function registerRoutes(
-  app: Router,
-  manager: ProxmoxPollingManager<PollableHost>,
-  historyRepository: ProxmoxNodeHistoryRepository,
-): void {
-  /**
-   * @openapi
-   * /plugin-api/proxmox/stats/{id}:
-   *   get:
-   *     summary: Get cached Proxmox node stats for a host
-   *     description: Returns the most recently polled Proxmox stats snapshot for a host, or an empty skeleton if none has been collected yet.
-   *     tags: [Proxmox]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Proxmox stats snapshot.
-   *       404:
-   *         description: Stats not available yet.
-   */
-  app.get("/:id", async (req, res) => {
-    const id = Number(req.params.id);
-    const cached = manager.getStats(id);
-    if (!cached) {
-      const errorState = manager.getError(id);
-      return res.status(404).json({
-        error: errorState?.error || "Stats not available",
-        ...EMPTY_SNAPSHOT,
-        lastChecked: new Date().toISOString(),
-      });
-    }
-    res.json({
-      ...cached.data,
-      lastChecked: new Date(cached.timestamp).toISOString(),
-    });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/proxmox/stats/start/{id}:
-   *   post:
-   *     summary: Start Proxmox stats collection
-   *     description: Registers a viewer and starts (or reuses) polling for a host's Proxmox node stats.
-   *     tags: [Proxmox]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Polling started, snapshot returned if already available.
-   *       403:
-   *         description: Proxmox stats is not enabled for this host.
-   *       404:
-   *         description: Host not found.
-   */
-  app.post("/start/:id", async (req, res) => {
-    const id = Number(req.params.id);
-    const userId = pluginCtx().currentActor()!;
-
-    try {
-      const host = await fetchHostForPolling(pluginCtx(), id, userId);
-      if (!host) {
-        return res
-          .status(403)
-          .json({ error: "Proxmox stats is not enabled for this host" });
-      }
-
-      const viewerSessionId = `proxmox-viewer-${Date.now()}-${Math.random().toString(36).slice(2, 11)}`;
-      manager.registerViewer(id, viewerSessionId, userId);
-      await manager.ensurePolling(host, userId);
-
-      const cached = manager.getStats(id);
-      if (cached) {
-        return res.json({
-          success: true,
-          viewerSessionId,
-          ...cached.data,
-          lastChecked: new Date(cached.timestamp).toISOString(),
-        });
-      }
-      const errorState = manager.getError(id);
-      if (errorState) {
-        return res.json({
-          success: true,
-          viewerSessionId,
-          status: "error",
-          error: errorState.error,
-        });
-      }
-      return res.json({ success: true, viewerSessionId, status: "collecting" });
-    } catch (error) {
-      pluginCtx().log.error(
-        `Failed to start proxmox stats collection for host ${id}`,
-        error as Error,
-      );
-      res
-        .status(500)
-        .json({ error: "Failed to start proxmox stats collection" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/proxmox/stats/stop/{id}:
-   *   post:
-   *     summary: Stop Proxmox stats collection
-   *     description: Unregisters a viewer session for a host's Proxmox node stats polling.
-   *     tags: [Proxmox]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       required: false
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               viewerSessionId:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Polling stopped successfully.
-   */
-  app.post("/stop/:id", (req, res) => {
-    const id = Number(req.params.id);
-    const { viewerSessionId } = req.body as { viewerSessionId?: string };
-    if (viewerSessionId && typeof viewerSessionId === "string") {
-      manager.unregisterViewer(id, viewerSessionId);
-    }
-    res.json({ success: true });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/proxmox/stats/heartbeat:
-   *   post:
-   *     summary: Update Proxmox stats viewer heartbeat
-   *     description: Keeps a Proxmox stats viewer session alive.
-   *     tags: [Proxmox]
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               viewerSessionId:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Heartbeat updated.
-   *       400:
-   *         description: Invalid viewerSessionId.
-   *       404:
-   *         description: Viewer session not found.
-   */
-  app.post("/heartbeat", (req, res) => {
-    const { viewerSessionId } = req.body as { viewerSessionId?: string };
-    if (!viewerSessionId || typeof viewerSessionId !== "string") {
-      return res.status(400).json({ error: "Invalid viewerSessionId" });
-    }
-    const ok = manager.updateHeartbeat(viewerSessionId);
-    if (!ok) return res.status(404).json({ error: "Viewer session not found" });
-    res.json({ success: true });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/proxmox/stats/history/{hostId}:
-   *   get:
-   *     summary: Get historical Proxmox node stats for a host
-   *     tags: [Proxmox]
-   *     parameters:
-   *       - in: path
-   *         name: hostId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *       - in: query
-   *         name: range
-   *         schema:
-   *           type: string
-   *           enum: [1h, 6h, 24h, 7d, 30d]
-   *       - in: query
-   *         name: from
-   *         schema:
-   *           type: string
-   *           format: date-time
-   *       - in: query
-   *         name: to
-   *         schema:
-   *           type: string
-   *           format: date-time
-   *     responses:
-   *       200:
-   *         description: Array of node history rows.
-   *       400:
-   *         description: Invalid range or date.
-   */
-  app.get("/history/:hostId", async (req, res) => {
-    const hostId = Number(req.params.hostId);
-    const { range, from, to } = req.query as Record<string, string | undefined>;
-
-    const RANGE_OFFSETS: Record<string, number> = {
-      "1h": 1 * 60 * 60 * 1000,
-      "6h": 6 * 60 * 60 * 1000,
-      "24h": 24 * 60 * 60 * 1000,
-      "7d": 7 * 24 * 60 * 60 * 1000,
-      "30d": 30 * 24 * 60 * 60 * 1000,
-    };
-
-    let fromTs: string;
-    let toTs = new Date().toISOString();
-    if (range) {
-      const offsetMs = RANGE_OFFSETS[range];
-      if (!offsetMs) {
-        return res
-          .status(400)
-          .json({ error: "Invalid range. Use 1h, 6h, 24h, 7d, or 30d" });
-      }
-      fromTs = new Date(Date.now() - offsetMs).toISOString();
-    } else if (from && to) {
-      const fromDate = new Date(from);
-      const toDate = new Date(to);
-      if (isNaN(fromDate.getTime()) || isNaN(toDate.getTime())) {
-        return res.status(400).json({ error: "Invalid from/to date format" });
-      }
-      fromTs = fromDate.toISOString();
-      toTs = toDate.toISOString();
-    } else {
-      fromTs = new Date(Date.now() - 24 * 60 * 60 * 1000).toISOString();
-    }
-
-    try {
-      const toSqlite = (iso: string) =>
-        iso.replace("T", " ").replace(/\.\d{3}Z$/, "");
-      const rows = (
-        await historyRepository.listRange(
-          hostId,
-          toSqlite(fromTs),
-          toSqlite(toTs),
-        )
-      ).map((row) => ({
-        ts: row.ts,
-        cpu_percent: row.cpuPercent,
-        mem_percent: row.memPercent,
-        disk_percent: row.diskPercent,
-        net_rx_bytes: row.netRxBytes,
-        net_tx_bytes: row.netTxBytes,
-      }));
-      res.json({ rows, fromTs, toTs });
-    } catch (error) {
-      pluginCtx().log.error(
-        `Failed to fetch proxmox stats history for host ${hostId}`,
-        error as Error,
-      );
-      res.status(500).json({ error: "Failed to fetch proxmox stats history" });
-    }
-  });
-}
-
-export { parseProxmoxStatsConfig };
diff --git a/plugins/proxmox/src/backend/tables.ts b/plugins/proxmox/src/backend/tables.ts
deleted file mode 100644
index 0c91970f6..000000000
--- a/plugins/proxmox/src/backend/tables.ts
+++ /dev/null
@@ -1,64 +0,0 @@
-import {
-  adoptLegacyTable,
-  defineTable,
-  id,
-  integer,
-  real,
-  refHost,
-  refUser,
-  text,
-  timestamp,
-} from "@termix/plugin-sdk/db";
-
-/**
- * Per-host historical node stats samples (CPU, memory, disk, network),
- * polled on an interval while a viewer has the Proxmox stats tab open.
- *
- * Adopted from core's proxmox_node_history, so the column and index names are
- * the legacy ones: the rename carries the existing rows across.
- */
-export const proxmoxNodeHistory = adoptLegacyTable(
-  "proxmox_node_history",
-  defineTable("node_history", {
-    id: id(),
-    hostId: refHost(),
-    ts: timestamp().notNull().defaultNow(),
-    cpuPercent: real(),
-    memPercent: real(),
-    diskPercent: real(),
-    netRxBytes: integer(),
-    netTxBytes: integer(),
-  }),
-);
-
-/**
- * One saved dashboard layout per user per host for the Proxmox stats tab.
- *
- * Adopted from core's proxmox_stats_preferences.
- */
-export const proxmoxStatsPreferences = adoptLegacyTable(
-  "proxmox_stats_preferences",
-  defineTable(
-    "stats_preferences",
-    {
-      id: id(),
-      userId: refUser(),
-      hostId: refHost(),
-      // JSON-encoded layout. No secrets, so plain text.
-      layout: text().notNull(),
-      createdAt: timestamp().notNull().defaultNow(),
-      updatedAt: timestamp().notNull().defaultNow(),
-    },
-    {
-      indexes: [
-        {
-          name: "idx_proxmox_stats_prefs_user_host",
-          columns: ["userId", "hostId"],
-          unique: true,
-        },
-      ],
-    },
-  ),
-);
-
-export const tables = [proxmoxNodeHistory, proxmoxStatsPreferences];
diff --git a/plugins/proxmox/src/frontend/HostProxmoxTab.tsx b/plugins/proxmox/src/frontend/HostProxmoxTab.tsx
deleted file mode 100644
index de154f55e..000000000
--- a/plugins/proxmox/src/frontend/HostProxmoxTab.tsx
+++ /dev/null
@@ -1,263 +0,0 @@
-import { useEffect, useState } from "react";
-import { useSshAuthTypes, useTranslation } from "@termix/plugin-sdk/frontend";
-import { Server } from "lucide-react";
-import {
-  FakeSwitch,
-  Input,
-  SectionCard,
-  Select2,
-  SettingRow,
-} from "@termix/plugin-sdk/ui";
-import { listCredentials } from "@termix/plugin-sdk/frontend";
-import type { ProxmoxHostConfig } from "./types";
-
-interface HostProxmoxForm {
-  enableProxmox: boolean;
-  proxmoxConfig: ProxmoxHostConfig | null;
-}
-
-type SetHostField = (key: string, value: unknown) => void;
-
-export function HostProxmoxTab({
-  form,
-  setField,
-}: {
-  form: HostProxmoxForm;
-  setField: SetHostField;
-}) {
-  const { t } = useTranslation();
-  const sshAuthTypes = useSshAuthTypes();
-  const [credentials, setCredentials] = useState<
-    { id: number; name: string; username: string | null }[]
-  >([]);
-
-  useEffect(() => {
-    listCredentials()
-      .then((list) =>
-        setCredentials(
-          list.map((c) => ({
-            id: c.id,
-            name: c.name,
-            username: c.username ?? null,
-          })),
-        ),
-      )
-      .catch(() => {});
-  }, []);
-
-  const cfg = form.proxmoxConfig ?? {
-    defaultCredentialId: null,
-    defaultAuthType: "password",
-    windowsPatterns: "win, windows",
-    dockerPatterns: "docker",
-    preferredPrefixes: "10., 192.168.",
-    autoSyncEnabled: false,
-    syncIntervalMinutes: 15,
-    markMissingGuests: true,
-  };
-  const lastSyncResult = cfg.lastSyncResult;
-  const lastSyncSummary = lastSyncResult
-    ? t("hosts.proxmoxLastSyncSummary", {
-        created: lastSyncResult.created,
-        updated: lastSyncResult.updated,
-        markedMissing: lastSyncResult.markedMissing,
-        skipped: lastSyncResult.skipped,
-      })
-    : t("hosts.proxmoxLastSyncNoResult");
-  const lastSyncDescription = cfg.lastSyncAt
-    ? `${new Date(cfg.lastSyncAt).toLocaleString()}, ${lastSyncSummary}`
-    : t("hosts.proxmoxLastSyncNever");
-
-  return (
-    <SectionCard
-      title={t("hosts.proxmoxIntegration")}
-      icon={<Server className="size-3.5" />}
-    >
-      <div className="flex flex-col gap-0 py-1">
-        <SettingRow
-          label={t("hosts.enableProxmox")}
-          description={
-            <>
-              {t("hosts.enableProxmoxDesc")}{" "}
-              <a
-                href="https://docs.termix.site/features/files-and-hosts/proxmox-import"
-                target="_blank"
-                rel="noreferrer"
-                className="text-accent-brand hover:underline"
-              >
-                {t("hosts.docsLink")}
-              </a>
-            </>
-          }
-        >
-          <FakeSwitch
-            checked={form.enableProxmox}
-            onChange={(v) => setField("enableProxmox", v)}
-          />
-        </SettingRow>
-        {form.enableProxmox && (
-          <>
-            <SettingRow
-              label={t("hosts.proxmoxDefaultAuthType")}
-              description={t("hosts.proxmoxDefaultAuthTypeDesc")}
-            >
-              <Select2
-                value={cfg.defaultAuthType ?? "password"}
-                onChange={(e) =>
-                  setField("proxmoxConfig", {
-                    ...cfg,
-                    defaultAuthType: e.target.value,
-                  })
-                }
-                className="h-7 w-44 text-xs border border-border bg-background px-2 outline-none focus:ring-1 focus:ring-ring"
-              >
-                {sshAuthTypes.types.map((option) => (
-                  <option key={option.type} value={option.type}>
-                    {t(option.labelKey)}
-                  </option>
-                ))}
-              </Select2>
-            </SettingRow>
-            <SettingRow
-              label={t("hosts.proxmoxDefaultCredential")}
-              description={t("hosts.proxmoxDefaultCredentialDesc")}
-            >
-              <Select2
-                value={cfg.defaultCredentialId ?? ""}
-                onChange={(e) =>
-                  setField("proxmoxConfig", {
-                    ...cfg,
-                    defaultCredentialId: e.target.value
-                      ? Number(e.target.value)
-                      : null,
-                  })
-                }
-                className="h-7 w-44 text-xs border border-border bg-background px-2 outline-none focus:ring-1 focus:ring-ring"
-              >
-                <option value="">{t("hosts.none")}</option>
-                {credentials.map((c) => (
-                  <option key={c.id} value={c.id}>
-                    {c.username ? `${c.name} (${c.username})` : c.name}
-                  </option>
-                ))}
-              </Select2>
-            </SettingRow>
-            <SettingRow
-              label={t("hosts.proxmoxWindowsDetection")}
-              description={t("hosts.proxmoxWindowsDetectionDesc")}
-            >
-              <Input
-                className="w-44 h-7 text-xs"
-                value={cfg.windowsPatterns}
-                onChange={(e) =>
-                  setField("proxmoxConfig", {
-                    ...cfg,
-                    windowsPatterns: e.target.value,
-                  })
-                }
-                placeholder="win, windows"
-              />
-            </SettingRow>
-            <SettingRow
-              label={t("hosts.proxmoxDockerDetection")}
-              description={t("hosts.proxmoxDockerDetectionDesc")}
-            >
-              <Input
-                className="w-44 h-7 text-xs"
-                value={cfg.dockerPatterns}
-                onChange={(e) =>
-                  setField("proxmoxConfig", {
-                    ...cfg,
-                    dockerPatterns: e.target.value,
-                  })
-                }
-                placeholder="docker"
-              />
-            </SettingRow>
-            <SettingRow
-              label={t("hosts.proxmoxPreferredRanges")}
-              description={t("hosts.proxmoxPreferredRangesDesc")}
-            >
-              <Input
-                className="w-44 h-7 text-xs"
-                value={cfg.preferredPrefixes}
-                onChange={(e) =>
-                  setField("proxmoxConfig", {
-                    ...cfg,
-                    preferredPrefixes: e.target.value,
-                  })
-                }
-                placeholder="10., 192.168."
-              />
-            </SettingRow>
-            <SettingRow
-              label={t("hosts.proxmoxAutoSync")}
-              description={t("hosts.proxmoxAutoSyncDesc")}
-            >
-              <FakeSwitch
-                checked={cfg.autoSyncEnabled === true}
-                onChange={(v) =>
-                  setField("proxmoxConfig", {
-                    ...cfg,
-                    autoSyncEnabled: v,
-                  })
-                }
-              />
-            </SettingRow>
-            <SettingRow
-              label={t("hosts.proxmoxSyncInterval")}
-              description={t("hosts.proxmoxSyncIntervalDesc")}
-            >
-              <Input
-                className="w-24 h-7 text-xs"
-                type="number"
-                min={5}
-                value={cfg.syncIntervalMinutes ?? 15}
-                onChange={(e) =>
-                  setField("proxmoxConfig", {
-                    ...cfg,
-                    syncIntervalMinutes: Math.max(
-                      5,
-                      Number.parseInt(e.target.value || "15", 10),
-                    ),
-                  })
-                }
-              />
-            </SettingRow>
-            <SettingRow
-              label={t("hosts.proxmoxMarkMissing")}
-              description={t("hosts.proxmoxMarkMissingDesc")}
-            >
-              <FakeSwitch
-                checked={cfg.markMissingGuests !== false}
-                onChange={(v) =>
-                  setField("proxmoxConfig", {
-                    ...cfg,
-                    markMissingGuests: v,
-                  })
-                }
-              />
-            </SettingRow>
-            <SettingRow
-              label={t("hosts.proxmoxLastSync")}
-              description={lastSyncDescription}
-            >
-              <span
-                className={`text-xs ${
-                  cfg.lastSyncStatus === "error"
-                    ? "text-destructive"
-                    : "text-muted-foreground"
-                }`}
-                title={cfg.lastSyncError ?? undefined}
-              >
-                {cfg.lastSyncStatus
-                  ? t(`hosts.proxmoxLastSyncStatus.${cfg.lastSyncStatus}`)
-                  : t("hosts.proxmoxLastSyncStatus.pending")}
-              </span>
-            </SettingRow>
-          </>
-        )}
-      </div>
-    </SectionCard>
-  );
-}
diff --git a/plugins/proxmox/src/frontend/ProxmoxDiscoverDialog.tsx b/plugins/proxmox/src/frontend/ProxmoxDiscoverDialog.tsx
deleted file mode 100644
index 368feb16d..000000000
--- a/plugins/proxmox/src/frontend/ProxmoxDiscoverDialog.tsx
+++ /dev/null
@@ -1,434 +0,0 @@
-import { useRef, useState } from "react";
-import {
-  notifyHostsChanged,
-  useTranslation,
-} from "@termix/plugin-sdk/frontend";
-import { Server, RefreshCw, CheckSquare, Square, Download } from "lucide-react";
-import { toast } from "sonner";
-import { Button } from "@termix/plugin-sdk/ui";
-import {
-  Dialog,
-  DialogContent,
-  DialogHeader,
-  DialogTitle,
-  DialogFooter,
-} from "@termix/plugin-sdk/ui";
-import { Select2 } from "@termix/plugin-sdk/ui";
-import {
-  discoverProxmoxGuestsStream,
-  importProxmoxHosts,
-  listHosts,
-} from "./proxmox-api";
-import type { PluginHostRecord } from "@termix/plugin-sdk/frontend";
-import type { ProxmoxGuest } from "./types";
-import { resolveProxmoxImportAuth } from "./proxmox-import-auth";
-
-interface ProxmoxDiscoverDialogProps {
-  open: boolean;
-  onClose: () => void;
-  hosts: PluginHostRecord[];
-  onHostsChanged: (hosts: PluginHostRecord[]) => void;
-  /** Pre-select a specific host and skip the host picker */
-  preselectedHostId?: number;
-  /** Credential to use for imported hosts */
-  defaultCredentialId?: number | null;
-  /** Auth type to use for imported hosts */
-  defaultAuthType?: string;
-  /** Username from the default credential */
-  defaultUsername?: string;
-}
-
-export function ProxmoxDiscoverDialog({
-  open,
-  onClose,
-  hosts,
-  onHostsChanged,
-  preselectedHostId,
-  defaultCredentialId,
-  defaultAuthType,
-  defaultUsername,
-}: ProxmoxDiscoverDialogProps) {
-  const { t } = useTranslation();
-  const [selectedHostId, setSelectedHostId] = useState<string>(
-    preselectedHostId ? String(preselectedHostId) : "",
-  );
-  const [discovering, setDiscovering] = useState(false);
-  const [progress, setProgress] = useState<{
-    done: number;
-    total: number;
-  } | null>(null);
-  const streamCloseRef = useRef<(() => void) | null>(null);
-  const [guests, setGuests] = useState<ProxmoxGuest[] | null>(null);
-  const [discoveredCredentialId, setDiscoveredCredentialId] = useState<
-    number | null
-  >(null);
-  const [discoveredJumpHosts, setDiscoveredJumpHosts] = useState<
-    unknown[] | null
-  >(null);
-  const [selected, setSelected] = useState<Set<number>>(new Set());
-  const [importing, setImporting] = useState(false);
-
-  // When opened from the dropdown (no preselectedHostId), only show Proxmox-enabled hosts
-  const sshHosts = hosts.filter(
-    (h) =>
-      !("isFolder" in h) &&
-      (
-        h.pluginSettings as
-          Record<string, Record<string, unknown> | undefined> | undefined
-      )?.proxmox?.enableProxmox === true,
-  );
-
-  // The Proxmox host the discovery runs against — imported guests are grouped
-  // into a folder named after it. Use the same id resolution as discovery so
-  // it also works when launched directly from a host action (preselectedHostId).
-  const effectiveHostId =
-    preselectedHostId != null ? String(preselectedHostId) : selectedHostId;
-  const sourceHost = hosts.find(
-    (h) => !("isFolder" in h) && String(h.id) === effectiveHostId,
-  );
-  const importFolder = sourceHost?.name || "Proxmox";
-
-  function reset() {
-    if (!preselectedHostId) setSelectedHostId("");
-    setGuests(null);
-    setDiscoveredCredentialId(null);
-    setDiscoveredJumpHosts(null);
-    setSelected(new Set());
-    streamCloseRef.current?.();
-    streamCloseRef.current = null;
-    setProgress(null);
-    setDiscovering(false);
-    setImporting(false);
-  }
-
-  function handleDiscover() {
-    const hostId =
-      preselectedHostId ?? (selectedHostId ? Number(selectedHostId) : null);
-    if (!hostId) return;
-    setDiscovering(true);
-    setGuests(null);
-    setDiscoveredCredentialId(null);
-    setDiscoveredJumpHosts(null);
-    setSelected(new Set());
-    setProgress(null);
-    streamCloseRef.current?.();
-    streamCloseRef.current = discoverProxmoxGuestsStream(hostId, {
-      onProgress: (done, total) => setProgress({ done, total }),
-      onResult: (result) => {
-        setGuests(result.guests);
-        setDiscoveredCredentialId(result.credentialId ?? null);
-        setDiscoveredJumpHosts(result.jumpHosts ?? null);
-        setSelected(
-          new Set(
-            result.guests
-              .filter((g) => g.status === "running")
-              .map((g) => g.vmid),
-          ),
-        );
-        setDiscovering(false);
-        setProgress(null);
-        streamCloseRef.current = null;
-      },
-      onError: (message) => {
-        toast.error(message ?? t("hosts.proxmoxDiscoveryFailed"));
-        setDiscovering(false);
-        setProgress(null);
-        streamCloseRef.current = null;
-      },
-    });
-  }
-
-  async function handleImport() {
-    if (!guests || selected.size === 0) return;
-    setImporting(true);
-    try {
-      // Prefer explicitly configured credential, then fall back to the host's own credential
-      const credId = defaultCredentialId ?? discoveredCredentialId;
-      const importAuth = resolveProxmoxImportAuth(defaultAuthType, credId);
-
-      const selectedGuests = guests.filter((g) => selected.has(g.vmid));
-
-      const toImport = selectedGuests.map((g) => ({
-        name: g.name,
-        // No IP discovered (e.g. QEMU without a running guest agent): import
-        // with a placeholder so the host is created and the user can fill in
-        // the real IP. Re-sync keeps the manual value (guest.ip || existing.ip).
-        ip: g.ip || "0.0.0.0",
-        port: g.connectionType === "rdp" ? 3389 : 22,
-        username:
-          importAuth.authType === "credential"
-            ? ""
-            : (defaultUsername ?? "root"),
-        folder: importFolder,
-        // Inherit the jump-host chain from the scanned Proxmox host so the
-        // imported guests are reachable the same way; user can override.
-        jumpHosts: discoveredJumpHosts ?? undefined,
-        ...importAuth,
-        enableSsh: g.connectionType !== "rdp",
-        connectionType: g.connectionType,
-        tags: [
-          "proxmox",
-          g.type,
-          g.node,
-          g.type === "lxc" ? `ct-${g.vmid}` : `vm-${g.vmid}`,
-          ...(g.enableDocker ? ["docker"] : []),
-        ],
-        // Host settings travel with the import like an export's, keyed by
-        // the plugin that keeps them.
-        pluginSettings: {
-          ...(g.connectionType === "rdp"
-            ? { "remote-desktop": { enableRdp: true, rdpPort: 3389 } }
-            : {}),
-          ...(g.enableDocker ? { docker: { enableDocker: true } } : {}),
-          proxmox: {
-            proxmoxConfig: {
-              source: {
-                source: "proxmox",
-                sourceHostId: Number(effectiveHostId),
-                node: g.node,
-                vmid: g.vmid,
-                type: g.type,
-                lastSeenAt: new Date().toISOString(),
-                lastStatus: g.status,
-                missingSince: null,
-              },
-            },
-          },
-        },
-      }));
-
-      const result = toImport.length
-        ? await importProxmoxHosts(toImport)
-        : { success: 0, failed: 0, errors: [] };
-
-      if (toImport.length) {
-        const updated = await listHosts();
-        onHostsChanged(updated);
-        notifyHostsChanged();
-      }
-
-      const msg = [
-        result.success
-          ? t("hosts.proxmoxResultImported", { count: result.success })
-          : null,
-        result.failed
-          ? t("hosts.proxmoxResultFailed", { count: result.failed })
-          : null,
-      ]
-        .filter(Boolean)
-        .join(", ");
-      toast.success(t("hosts.proxmoxImportComplete", { summary: msg }));
-
-      if (result.failed === 0) {
-        reset();
-        onClose();
-      }
-    } catch (err: any) {
-      toast.error(err?.message ?? t("hosts.proxmoxImportFailed"));
-    } finally {
-      setImporting(false);
-    }
-  }
-
-  const nodeGroups = guests
-    ? guests.reduce(
-        (acc, g) => {
-          if (!acc[g.node]) acc[g.node] = [];
-          acc[g.node].push(g);
-          return acc;
-        },
-        {} as Record<string, ProxmoxGuest[]>,
-      )
-    : {};
-
-  const canDiscover = preselectedHostId != null || !!selectedHostId;
-
-  return (
-    <Dialog
-      open={open}
-      onOpenChange={(v) => {
-        if (!v) {
-          reset();
-          onClose();
-        }
-      }}
-    >
-      <DialogContent className="sm:max-w-md">
-        <DialogHeader>
-          <DialogTitle className="flex items-center gap-2">
-            <Server className="size-4" />
-            {t("hosts.proxmoxImportTitle")}
-          </DialogTitle>
-          <a
-            href="https://docs.termix.site/features/files-and-hosts/proxmox-import"
-            target="_blank"
-            rel="noreferrer"
-            className="text-[10px] text-accent-brand hover:underline"
-          >
-            {t("hosts.docsLink")}
-          </a>
-        </DialogHeader>
-
-        <div className="space-y-3">
-          {/* Host selector — hidden when launched from a specific host */}
-          {!preselectedHostId && (
-            <div className="flex gap-2">
-              <Select2
-                value={selectedHostId}
-                onChange={(event) => setSelectedHostId(event.target.value)}
-                disabled={discovering}
-                placeholder={t("hosts.proxmoxSelectHost")}
-                className="flex-1 text-xs h-8"
-              >
-                {sshHosts.map((h) => (
-                  <option key={h.id} value={String(h.id)}>
-                    {h.name || h.ip}
-                  </option>
-                ))}
-              </Select2>
-              <Button
-                size="sm"
-                variant="outline"
-                disabled={!canDiscover || discovering}
-                onClick={handleDiscover}
-                className="shrink-0"
-              >
-                <RefreshCw
-                  className={`size-3.5 mr-1.5 ${discovering ? "animate-spin" : ""}`}
-                />
-                {t("hosts.proxmoxDiscover")}
-              </Button>
-            </div>
-          )}
-
-          {/* When launched from a specific host, show Discover directly */}
-          {preselectedHostId && !guests && (
-            <Button
-              size="sm"
-              variant="outline"
-              disabled={discovering}
-              onClick={handleDiscover}
-              className="w-full"
-            >
-              <RefreshCw
-                className={`size-3.5 mr-1.5 ${discovering ? "animate-spin" : ""}`}
-              />
-              {discovering
-                ? progress
-                  ? `${t("hosts.proxmoxDiscovering")} ${progress.done}/${progress.total}`
-                  : t("hosts.proxmoxDiscovering")
-                : t("hosts.proxmoxDiscoverGuests")}
-            </Button>
-          )}
-
-          {/* Guest list */}
-          {guests !== null && (
-            <div className="space-y-1.5">
-              <div className="flex items-center justify-between text-xs text-muted-foreground">
-                <span>
-                  {t("hosts.proxmoxGuestsSelected", {
-                    count: guests.length,
-                    selected: selected.size,
-                  })}
-                </span>
-                <div className="flex gap-3">
-                  <button
-                    className="hover:text-foreground transition-colors"
-                    onClick={() =>
-                      setSelected(new Set(guests.map((g) => g.vmid)))
-                    }
-                  >
-                    {t("hosts.proxmoxSelectAll")}
-                  </button>
-                  <button
-                    className="hover:text-foreground transition-colors"
-                    onClick={() => setSelected(new Set())}
-                  >
-                    {t("hosts.proxmoxDeselectAll")}
-                  </button>
-                </div>
-              </div>
-
-              {guests.length === 0 ? (
-                <p className="text-xs text-muted-foreground py-4 text-center">
-                  {t("hosts.proxmoxNoGuests")}
-                </p>
-              ) : (
-                <div className="max-h-64 overflow-y-auto rounded-md border border-border divide-y divide-border">
-                  {Object.entries(nodeGroups).map(([node, nodeGuests]) => (
-                    <div key={node}>
-                      <div className="px-2 py-1 text-[10px] font-medium text-muted-foreground bg-muted/50 uppercase tracking-wider">
-                        {node}
-                      </div>
-                      {nodeGuests.map((g) => (
-                        <button
-                          key={g.vmid}
-                          className="w-full flex items-center gap-2 px-2 py-1.5 text-xs hover:bg-accent transition-colors text-left"
-                          onClick={() => {
-                            setSelected((prev) => {
-                              const next = new Set(prev);
-                              if (next.has(g.vmid)) next.delete(g.vmid);
-                              else next.add(g.vmid);
-                              return next;
-                            });
-                          }}
-                        >
-                          {selected.has(g.vmid) ? (
-                            <CheckSquare className="size-3.5 text-primary shrink-0" />
-                          ) : (
-                            <Square className="size-3.5 text-muted-foreground shrink-0" />
-                          )}
-                          <span className="flex-1 truncate">{g.name}</span>
-                          <span className="text-muted-foreground text-[10px] shrink-0">
-                            {g.type.toUpperCase()} {g.vmid}
-                          </span>
-                          <span
-                            className={`shrink-0 text-[10px] ${g.status === "running" ? "text-green-400" : "text-muted-foreground"}`}
-                          >
-                            {g.status}
-                          </span>
-                          <span
-                            className={`shrink-0 text-[10px] font-mono ${
-                              g.ip
-                                ? "text-muted-foreground"
-                                : "text-amber-400/80 italic"
-                            }`}
-                          >
-                            {g.ip || "no IP"}
-                          </span>
-                        </button>
-                      ))}
-                    </div>
-                  ))}
-                </div>
-              )}
-            </div>
-          )}
-        </div>
-
-        <DialogFooter>
-          <Button
-            variant="ghost"
-            size="sm"
-            onClick={() => {
-              reset();
-              onClose();
-            }}
-          >
-            {t("common.cancel")}
-          </Button>
-          {guests !== null && selected.size > 0 && (
-            <Button size="sm" disabled={importing} onClick={handleImport}>
-              {importing ? (
-                <RefreshCw className="size-3.5 animate-spin mr-1.5" />
-              ) : (
-                <Download className="size-3.5 mr-1.5" />
-              )}
-              {t("hosts.proxmoxImportButton", { count: selected.size })}
-            </Button>
-          )}
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
-  );
-}
diff --git a/plugins/proxmox/src/frontend/index.tsx b/plugins/proxmox/src/frontend/index.tsx
deleted file mode 100644
index b8a6ff499..000000000
--- a/plugins/proxmox/src/frontend/index.tsx
+++ /dev/null
@@ -1,217 +0,0 @@
-import { useEffect, useState, type ComponentType } from "react";
-import { Boxes, HardDrive, Server } from "lucide-react";
-import {
-  useHosts,
-  useTranslation,
-  type HostEditorSectionProps,
-  type StandaloneViewProps,
-  type TabProps,
-  type TermixApp,
-} from "@termix/plugin-sdk/frontend";
-import { ComponentSlot, DropdownMenuItem } from "@termix/plugin-sdk/ui";
-import type { PluginHostRecord } from "@termix/plugin-sdk/frontend";
-import { setProxmoxApp } from "./proxmox-api";
-import { ProxmoxDiscoverDialog } from "./ProxmoxDiscoverDialog";
-import { HostProxmoxTab } from "./HostProxmoxTab";
-import { ProxmoxStatsTab } from "./stats/ProxmoxStatsTab";
-import ProxmoxStatsApp from "./stats/ProxmoxStatsApp";
-import { HostProxmoxStatsTab } from "./stats/HostProxmoxStatsTab";
-
-interface DiscoverRequest {
-  hostId?: number;
-  defaultCredentialId?: number | null;
-  defaultAuthType?: string;
-}
-
-type Opener = (request: DiscoverRequest) => void;
-
-// The Proxmox fields are this plugin's host settings, saved with the host
-// through form.pluginSettings.proxmox.
-function ProxmoxHostSection({ form, updateForm }: HostEditorSectionProps) {
-  const values = (form.pluginSettings?.proxmox ?? {}) as Record<
-    string,
-    unknown
-  >;
-  const setField = (key: string, value: unknown) =>
-    updateForm((current) => {
-      const all = (current.pluginSettings ?? {}) as Record<
-        string,
-        Record<string, unknown>
-      >;
-      return {
-        ...current,
-        pluginSettings: {
-          ...all,
-          proxmox: { ...(all.proxmox ?? {}), [key]: value },
-        },
-      };
-    });
-  const sectionForm = {
-    enableProxmox: values.enableProxmox === true,
-    proxmoxConfig: values.proxmoxConfig ?? null,
-    enableProxmoxStats: values.enableProxmoxStats === true,
-    proxmoxStatsConfig: values.proxmoxStatsConfig ?? {
-      pollInterval: 60,
-      nodeName: null,
-    },
-  };
-  return (
-    <>
-      <HostProxmoxTab
-        form={sectionForm as Parameters<typeof HostProxmoxTab>[0]["form"]}
-        setField={setField as Parameters<typeof HostProxmoxTab>[0]["setField"]}
-      />
-      <HostProxmoxStatsTab
-        form={sectionForm as Parameters<typeof HostProxmoxStatsTab>[0]["form"]}
-        setField={
-          setField as Parameters<typeof HostProxmoxStatsTab>[0]["setField"]
-        }
-      />
-      {/* Other plugins add Proxmox-related settings here. */}
-      <ComponentSlot
-        slotId="proxmox.hostEditor"
-        props={{ form: sectionForm, setField }}
-      />
-    </>
-  );
-}
-
-function ProxmoxStatsTabView({ sshHost, label, isVisible }: TabProps) {
-  return (
-    <ProxmoxStatsTab
-      hostConfig={sshHost as never}
-      title={label}
-      isVisible={isVisible}
-      isTopbarOpen={false}
-      embedded={true}
-    />
-  );
-}
-
-function ProxmoxStatsStandalone({ hostId }: StandaloneViewProps) {
-  return <ProxmoxStatsApp hostId={hostId} />;
-}
-
-/** This plugin's host settings, as they arrive on the host record. */
-export function proxmoxSettings(
-  host: Pick<PluginHostRecord, "pluginSettings">,
-): Record<string, unknown> {
-  return host.pluginSettings?.proxmox ?? {};
-}
-
-export function activate(app: TermixApp): void {
-  setProxmoxApp(app);
-  app.onDispose(() => setProxmoxApp(null));
-  // The dialog lives in the hosts panel; the menu item and host action open
-  // it through this, created per activation.
-  const openers = new Set<Opener>();
-  const openDiscover: Opener = (request) => {
-    for (const open of openers) open(request);
-  };
-
-  function DiscoverDialogHost({
-    hosts,
-    onHostsChanged,
-  }: {
-    hosts: PluginHostRecord[];
-    onHostsChanged: (hosts: PluginHostRecord[]) => void;
-  }) {
-    const [request, setRequest] = useState<DiscoverRequest | null>(null);
-    useEffect(() => {
-      openers.add(setRequest);
-      return () => {
-        openers.delete(setRequest);
-      };
-    }, []);
-    if (!request) return null;
-    return (
-      <ProxmoxDiscoverDialog
-        open
-        onClose={() => setRequest(null)}
-        hosts={hosts}
-        onHostsChanged={onHostsChanged}
-        preselectedHostId={request.hostId}
-        defaultCredentialId={request.defaultCredentialId ?? null}
-        defaultAuthType={request.defaultAuthType}
-      />
-    );
-  }
-
-  function ImportMenuItem() {
-    const { t } = useTranslation();
-    const { hosts } = useHosts();
-    return (
-      <DropdownMenuItem
-        onClick={() => openDiscover({})}
-        disabled={!hosts.some((host) => proxmoxSettings(host).enableProxmox)}
-      >
-        <Server className="size-3.5 mr-2" />
-        {t("hosts.proxmoxImportTitle")}
-      </DropdownMenuItem>
-    );
-  }
-
-  app.registerSlotContribution("hosts.panel", {
-    actionId: "proxmox.discoverDialog",
-    titleKey: "hosts.proxmoxImportTitle",
-    kind: "component",
-    component: DiscoverDialogHost as unknown as ComponentType<
-      Record<string, unknown>
-    >,
-  });
-
-  app.registerSlotContribution("hosts.importMenu", {
-    actionId: "proxmox.import",
-    titleKey: "hosts.proxmoxImportTitle",
-    kind: "component",
-    component: ImportMenuItem as ComponentType<Record<string, unknown>>,
-  });
-
-  app.registerHostAction({
-    id: "proxmox-discover",
-    titleKey: "hosts.proxmoxDiscoverAction",
-    icon: Boxes,
-    kind: "open",
-    order: 90,
-    when: (host) => !!proxmoxSettings(host).enableProxmox,
-    run: (host) => {
-      const config = proxmoxSettings(host).proxmoxConfig as
-        | { defaultCredentialId?: number | null; defaultAuthType?: string }
-        | undefined;
-      openDiscover({
-        hostId: Number(host.id),
-        defaultCredentialId: config?.defaultCredentialId ?? null,
-        defaultAuthType: config?.defaultAuthType ?? undefined,
-      });
-    },
-  });
-
-  app.registerHostEditorSection({
-    id: "proxmox",
-    group: "ssh",
-    titleKey: "hosts.tabProxmox",
-    icon: Server,
-    order: 50,
-    component: ProxmoxHostSection,
-  });
-
-  app.registerTab("proxmox-stats", ProxmoxStatsTabView, {
-    icon: HardDrive,
-    titleKey: "nav.proxmoxStats",
-    requiresHost: true,
-    noHostMessageKey: "proxmoxStats.noHostSelected",
-    standalone: ProxmoxStatsStandalone,
-    preload: () => import("./stats/ProxmoxStatsTab"),
-  });
-
-  app.registerHostAction({
-    id: "proxmox-stats",
-    titleKey: "nav.proxmoxStats",
-    icon: HardDrive,
-    kind: "open",
-    order: 60,
-    tabType: "proxmox-stats",
-    copyUrlView: "proxmox-stats",
-    when: (host) => proxmoxSettings(host).enableProxmoxStats === true,
-  });
-}
diff --git a/plugins/proxmox/src/frontend/proxmox-api.ts b/plugins/proxmox/src/frontend/proxmox-api.ts
deleted file mode 100644
index 08bcac634..000000000
--- a/plugins/proxmox/src/frontend/proxmox-api.ts
+++ /dev/null
@@ -1,121 +0,0 @@
-import type { TermixApp } from "@termix/plugin-sdk/frontend";
-import type { ProxmoxDiscoverResult } from "./types";
-
-let current: TermixApp | null = null;
-
-/** Set in activate, cleared on deactivate. */
-export function setProxmoxApp(app: TermixApp | null): void {
-  current = app;
-}
-
-function app(): TermixApp {
-  if (!current) throw new Error("The Proxmox plugin is not active");
-  return current;
-}
-
-export function listHosts(): ReturnType<TermixApp["listHosts"]> {
-  return app().listHosts();
-}
-
-/**
- * Runs a guest discovery over the server-sent event stream and reports
- * progress. Returns a function that stops listening.
- */
-export function discoverProxmoxGuestsStream(
-  hostId: number,
-  handlers: {
-    onProgress?: (done: number, total: number) => void;
-    onResult: (result: ProxmoxDiscoverResult) => void;
-    onError: (message: string) => void;
-  },
-): () => void {
-  const controller = new AbortController();
-  let settled = false;
-  const finish = () => {
-    settled = true;
-    controller.abort();
-  };
-
-  const handleEvent = (event: string, data: string) => {
-    if (event === "progress") {
-      try {
-        const parsed = JSON.parse(data);
-        handlers.onProgress?.(parsed.done, parsed.total);
-      } catch {
-        // ignore malformed progress frames
-      }
-    } else if (event === "result") {
-      finish();
-      try {
-        handlers.onResult(JSON.parse(data));
-      } catch {
-        handlers.onError("Failed to parse discovery result");
-      }
-    } else if (event === "fail") {
-      finish();
-      let message = "Discovery failed";
-      try {
-        message = JSON.parse(data).message || message;
-      } catch {
-        // keep default message
-      }
-      handlers.onError(message);
-    }
-  };
-
-  void (async () => {
-    try {
-      const response = await app().fetch(
-        `/discover/stream?hostId=${encodeURIComponent(String(hostId))}`,
-        { signal: controller.signal },
-      );
-      if (!response.ok || !response.body) throw new Error("stream failed");
-      const reader = response.body.getReader();
-      const decoder = new TextDecoder();
-      let buffer = "";
-      for (;;) {
-        const { done, value } = await reader.read();
-        if (done) break;
-        buffer += decoder.decode(value, { stream: true });
-        let split = buffer.indexOf("\n\n");
-        while (split !== -1) {
-          const frame = buffer.slice(0, split);
-          buffer = buffer.slice(split + 2);
-          let event = "message";
-          const data: string[] = [];
-          for (const line of frame.split("\n")) {
-            if (line.startsWith("event:")) event = line.slice(6).trim();
-            else if (line.startsWith("data:")) data.push(line.slice(5).trim());
-          }
-          if (data.length) handleEvent(event, data.join("\n"));
-          split = buffer.indexOf("\n\n");
-        }
-      }
-      if (!settled) {
-        settled = true;
-        handlers.onError("Discovery connection lost");
-      }
-    } catch {
-      if (settled) return;
-      settled = true;
-      handlers.onError("Discovery connection lost");
-    }
-  })();
-
-  return finish;
-}
-
-export interface ProxmoxImportResult {
-  success: number;
-  failed: number;
-  errors: string[];
-}
-
-export async function importProxmoxHosts(
-  hosts: Record<string, unknown>[],
-): Promise<ProxmoxImportResult> {
-  const response = await app().api.post<ProxmoxImportResult>("/import", {
-    hosts,
-  });
-  return response.data;
-}
diff --git a/plugins/proxmox/src/frontend/proxmox-import-auth.ts b/plugins/proxmox/src/frontend/proxmox-import-auth.ts
deleted file mode 100644
index e48ca7ef3..000000000
--- a/plugins/proxmox/src/frontend/proxmox-import-auth.ts
+++ /dev/null
@@ -1,36 +0,0 @@
-const SECRET_BACKED_AUTH_TYPES = new Set(["password", "key"]);
-
-export type ProxmoxImportAuth = {
-  authType: string;
-  credentialId?: number;
-  overrideCredentialUsername?: boolean;
-};
-
-export function resolveProxmoxImportAuth(
-  defaultAuthType: string | undefined,
-  credentialId: number | null | undefined,
-): ProxmoxImportAuth {
-  // Any auth type that needs no stored secret (none, agent, or one a plugin
-  // adds) wins, the same rule the backend copy applies.
-  if (
-    defaultAuthType &&
-    defaultAuthType !== "credential" &&
-    !SECRET_BACKED_AUTH_TYPES.has(defaultAuthType)
-  ) {
-    return { authType: defaultAuthType };
-  }
-
-  // A credential (configured default OR inherited from the source Proxmox host)
-  // is a concrete auth source -> use it, even when defaultAuthType is the
-  // "password"/"key" default. Otherwise imported guests end up as authType
-  // "none" although the host authenticates via a credential.
-  if (credentialId) {
-    return {
-      authType: "credential",
-      credentialId,
-      overrideCredentialUsername: false,
-    };
-  }
-
-  return { authType: "none" };
-}
diff --git a/plugins/proxmox/src/frontend/stats/GuestTable.tsx b/plugins/proxmox/src/frontend/stats/GuestTable.tsx
deleted file mode 100644
index f5b202c07..000000000
--- a/plugins/proxmox/src/frontend/stats/GuestTable.tsx
+++ /dev/null
@@ -1,261 +0,0 @@
-import { useMemo, useState } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Box, Search, Server as ServerIcon } from "lucide-react";
-import { Input } from "@termix/plugin-sdk/ui";
-import type { ProxmoxGuestSummary } from "../types";
-import { cn } from "@termix/plugin-sdk/ui";
-
-type StatusFilter = "all" | "running" | "stopped";
-type TypeFilter = "all" | "qemu" | "lxc";
-
-function formatUptime(seconds: number | null): string {
-  if (seconds === null || seconds <= 0) return "-";
-  const days = Math.floor(seconds / 86400);
-  const hours = Math.floor((seconds % 86400) / 3600);
-  const minutes = Math.floor((seconds % 3600) / 60);
-  if (days > 0) return `${days}d ${hours}h`;
-  if (hours > 0) return `${hours}h ${minutes}m`;
-  return `${minutes}m`;
-}
-
-function UsageCell({
-  percent,
-  usedGiB,
-  totalGiB,
-}: {
-  percent: number | null;
-  usedGiB?: number | null;
-  totalGiB?: number | null;
-}) {
-  if (percent === null) {
-    return <span className="text-[11px] text-muted-foreground">-</span>;
-  }
-  const clamped = Math.min(100, Math.max(0, percent));
-  const barColor =
-    clamped >= 90
-      ? "bg-red-500"
-      : clamped >= 75
-        ? "bg-yellow-500"
-        : "bg-accent-brand";
-  return (
-    <div className="flex min-w-[92px] flex-col gap-1">
-      <div className="flex items-baseline justify-between gap-2">
-        <span className="text-xs font-semibold tabular-nums">
-          {clamped.toFixed(0)}%
-        </span>
-        {usedGiB != null && totalGiB != null && (
-          <span className="text-[10px] tabular-nums text-muted-foreground">
-            {usedGiB.toFixed(1)}/{totalGiB.toFixed(1)}G
-          </span>
-        )}
-      </div>
-      <div className="h-1.5 w-full overflow-hidden rounded-full bg-muted">
-        <div
-          className={cn("h-full rounded-full", barColor)}
-          style={{ width: `${clamped}%` }}
-        />
-      </div>
-    </div>
-  );
-}
-
-export function GuestTable({ guests }: { guests: ProxmoxGuestSummary[] }) {
-  const { t } = useTranslation();
-  const [query, setQuery] = useState("");
-  const [statusFilter, setStatusFilter] = useState<StatusFilter>("all");
-  const [typeFilter, setTypeFilter] = useState<TypeFilter>("all");
-
-  const filtered = useMemo(() => {
-    const q = query.trim().toLowerCase();
-    return guests
-      .filter(
-        (g) =>
-          statusFilter === "all" ||
-          (statusFilter === "running") === (g.status === "running"),
-      )
-      .filter((g) => typeFilter === "all" || g.type === typeFilter)
-      .filter(
-        (g) =>
-          !q || g.name.toLowerCase().includes(q) || String(g.vmid).includes(q),
-      )
-      .sort((a, b) => {
-        if (a.status === b.status) return a.name.localeCompare(b.name);
-        return a.status === "running" ? -1 : 1;
-      });
-  }, [guests, query, statusFilter, typeFilter]);
-
-  const running = guests.filter((g) => g.status === "running").length;
-
-  return (
-    <div className="flex min-h-[420px] flex-1 flex-col overflow-hidden border border-border bg-card">
-      <div className="flex shrink-0 flex-wrap items-center gap-2 border-b border-border px-3 py-2.5">
-        <span className="text-xs font-semibold uppercase tracking-widest text-muted-foreground">
-          {t("proxmoxStats.guestsSummary")}
-        </span>
-        <span className="text-[11px] text-muted-foreground">
-          {t("proxmoxStats.guestCounts", { running, total: guests.length })}
-        </span>
-        <div className="ml-auto flex items-center gap-1.5">
-          <div className="relative">
-            <Search className="pointer-events-none absolute left-2 top-1/2 size-3 -translate-y-1/2 text-muted-foreground" />
-            <Input
-              value={query}
-              onChange={(e) => setQuery(e.target.value)}
-              placeholder={t("proxmoxStats.searchGuests")}
-              className="h-7 w-40 pl-6 text-xs"
-            />
-          </div>
-          <div className="flex overflow-hidden rounded-none border border-border">
-            {(["all", "qemu", "lxc"] as TypeFilter[]).map((f) => (
-              <button
-                key={f}
-                onClick={() => setTypeFilter(f)}
-                className={cn(
-                  "px-2 py-1 text-[10px] font-semibold uppercase tracking-wide transition-colors",
-                  typeFilter === f
-                    ? "bg-accent-brand text-white"
-                    : "bg-background text-muted-foreground hover:bg-muted",
-                )}
-              >
-                {f === "all"
-                  ? t("proxmoxStats.filterAll")
-                  : f === "qemu"
-                    ? t("proxmoxStats.filterVm")
-                    : t("proxmoxStats.filterLxc")}
-              </button>
-            ))}
-          </div>
-          <div className="flex overflow-hidden rounded-none border border-border">
-            {(["all", "running", "stopped"] as StatusFilter[]).map((f) => (
-              <button
-                key={f}
-                onClick={() => setStatusFilter(f)}
-                className={cn(
-                  "px-2 py-1 text-[10px] font-semibold uppercase tracking-wide transition-colors",
-                  statusFilter === f
-                    ? "bg-accent-brand text-white"
-                    : "bg-background text-muted-foreground hover:bg-muted",
-                )}
-              >
-                {f === "all"
-                  ? t("proxmoxStats.filterAll")
-                  : f === "running"
-                    ? t("proxmoxStats.running")
-                    : t("proxmoxStats.stopped")}
-              </button>
-            ))}
-          </div>
-        </div>
-      </div>
-
-      <div className="min-h-0 flex-1 overflow-y-auto thin-scrollbar">
-        {guests.length === 0 ? (
-          <div className="flex h-full items-center justify-center py-16 text-xs text-muted-foreground">
-            {t("proxmoxStats.noGuests")}
-          </div>
-        ) : filtered.length === 0 ? (
-          <div className="flex h-full items-center justify-center py-16 text-xs text-muted-foreground">
-            {t("proxmoxStats.noGuestsMatch")}
-          </div>
-        ) : (
-          <table className="w-full border-collapse text-xs">
-            <thead className="sticky top-0 z-10 bg-card">
-              <tr className="border-b border-border text-[10px] uppercase tracking-wider text-muted-foreground">
-                <th className="px-3 py-2 text-left font-semibold">
-                  {t("proxmoxStats.name")}
-                </th>
-                <th className="px-3 py-2 text-left font-semibold">
-                  {t("proxmoxStats.status")}
-                </th>
-                <th className="px-3 py-2 text-left font-semibold">ID</th>
-                <th className="px-3 py-2 text-left font-semibold">
-                  {t("proxmoxStats.cpu")}
-                </th>
-                <th className="px-3 py-2 text-left font-semibold">
-                  {t("proxmoxStats.mem")}
-                </th>
-                <th className="px-3 py-2 text-left font-semibold">
-                  {t("proxmoxStats.disk")}
-                </th>
-                <th className="px-3 py-2 text-left font-semibold">
-                  {t("proxmoxStats.uptime")}
-                </th>
-              </tr>
-            </thead>
-            <tbody className="divide-y divide-border">
-              {filtered.map((guest) => (
-                <tr
-                  key={`${guest.type}-${guest.vmid}`}
-                  className="transition-colors hover:bg-muted/40"
-                >
-                  <td className="px-3 py-2">
-                    <div className="flex items-center gap-2">
-                      {guest.type === "lxc" ? (
-                        <Box className="size-3.5 shrink-0 text-muted-foreground" />
-                      ) : (
-                        <ServerIcon className="size-3.5 shrink-0 text-muted-foreground" />
-                      )}
-                      <span className="min-w-0 truncate font-semibold">
-                        {guest.name}
-                      </span>
-                      <span className="shrink-0 rounded-full border border-border px-1.5 py-0.5 text-[9px] uppercase text-muted-foreground">
-                        {guest.type === "lxc" ? "LXC" : "VM"}
-                      </span>
-                    </div>
-                  </td>
-                  <td className="px-3 py-2">
-                    <div className="flex items-center gap-1.5">
-                      <span
-                        className={cn(
-                          "size-1.5 shrink-0 rounded-full",
-                          guest.status === "running"
-                            ? "bg-green-500"
-                            : "bg-muted-foreground/50",
-                        )}
-                      />
-                      <span
-                        className={cn(
-                          "font-medium",
-                          guest.status === "running"
-                            ? "text-foreground"
-                            : "text-muted-foreground",
-                        )}
-                      >
-                        {guest.status === "running"
-                          ? t("proxmoxStats.running")
-                          : t("proxmoxStats.stopped")}
-                      </span>
-                    </div>
-                  </td>
-                  <td className="px-3 py-2 font-mono text-muted-foreground">
-                    {guest.vmid}
-                  </td>
-                  <td className="px-3 py-2">
-                    <UsageCell percent={guest.cpuPercent} />
-                  </td>
-                  <td className="px-3 py-2">
-                    <UsageCell
-                      percent={guest.memPercent}
-                      usedGiB={guest.memUsedGiB}
-                      totalGiB={guest.memTotalGiB}
-                    />
-                  </td>
-                  <td className="px-3 py-2">
-                    <UsageCell
-                      percent={guest.diskPercent}
-                      usedGiB={guest.diskUsedGiB}
-                      totalGiB={guest.diskTotalGiB}
-                    />
-                  </td>
-                  <td className="px-3 py-2 whitespace-nowrap text-muted-foreground">
-                    {formatUptime(guest.uptimeSeconds)}
-                  </td>
-                </tr>
-              ))}
-            </tbody>
-          </table>
-        )}
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/proxmox/src/frontend/stats/HostProxmoxStatsTab.tsx b/plugins/proxmox/src/frontend/stats/HostProxmoxStatsTab.tsx
deleted file mode 100644
index 8d52b04b5..000000000
--- a/plugins/proxmox/src/frontend/stats/HostProxmoxStatsTab.tsx
+++ /dev/null
@@ -1,85 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Server } from "lucide-react";
-import {
-  Input,
-  SectionCard,
-  SettingRow,
-  FakeSwitch,
-} from "@termix/plugin-sdk/ui";
-import type { ProxmoxStatsConfig } from "../types";
-
-interface HostProxmoxStatsForm {
-  enableProxmoxStats: boolean;
-  proxmoxStatsConfig?: ProxmoxStatsConfig | null;
-}
-
-type SetHostField = (key: string, value: unknown) => void;
-
-export function HostProxmoxStatsTab({
-  form,
-  setField,
-}: {
-  form: HostProxmoxStatsForm;
-  setField: SetHostField;
-}) {
-  const { t } = useTranslation();
-
-  return (
-    <SectionCard
-      title={t("hosts.enableProxmoxStats")}
-      icon={<Server className="size-3.5" />}
-    >
-      <div className="flex flex-col gap-0 py-1">
-        <SettingRow
-          label={t("hosts.enableProxmoxStats")}
-          description={t("hosts.enableProxmoxStatsDesc")}
-        >
-          <FakeSwitch
-            checked={form.enableProxmoxStats}
-            onChange={(v) => setField("enableProxmoxStats", v)}
-          />
-        </SettingRow>
-        {form.enableProxmoxStats && (
-          <>
-            <SettingRow
-              label={t("hosts.proxmoxStatsPollInterval")}
-              description={t("hosts.proxmoxStatsPollIntervalDesc")}
-            >
-              <Input
-                className="w-24 h-7 text-xs"
-                type="number"
-                min={15}
-                value={form.proxmoxStatsConfig?.pollInterval ?? 60}
-                onChange={(e) =>
-                  setField("proxmoxStatsConfig", {
-                    ...form.proxmoxStatsConfig,
-                    pollInterval: Math.max(
-                      15,
-                      Number.parseInt(e.target.value || "60", 10),
-                    ),
-                  })
-                }
-              />
-            </SettingRow>
-            <SettingRow
-              label={t("hosts.proxmoxStatsNodeOverride")}
-              description={t("hosts.proxmoxStatsNodeOverrideDesc")}
-            >
-              <Input
-                className="w-44 h-7 text-xs"
-                value={form.proxmoxStatsConfig?.nodeName ?? ""}
-                placeholder={t("hosts.proxmoxStatsNodeOverridePlaceholder")}
-                onChange={(e) =>
-                  setField("proxmoxStatsConfig", {
-                    ...form.proxmoxStatsConfig,
-                    nodeName: e.target.value || null,
-                  })
-                }
-              />
-            </SettingRow>
-          </>
-        )}
-      </div>
-    </SectionCard>
-  );
-}
diff --git a/plugins/proxmox/src/frontend/stats/NodeSummaryStrip.tsx b/plugins/proxmox/src/frontend/stats/NodeSummaryStrip.tsx
deleted file mode 100644
index eaa5b73f5..000000000
--- a/plugins/proxmox/src/frontend/stats/NodeSummaryStrip.tsx
+++ /dev/null
@@ -1,147 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Cpu, MemoryStick, HardDrive, Clock, Server } from "lucide-react";
-import type { ProxmoxNodeStats } from "../types";
-import { cn } from "@termix/plugin-sdk/ui";
-
-function Tile({
-  icon,
-  label,
-  percent,
-  detail,
-  sparkline,
-}: {
-  icon: React.ReactNode;
-  label: string;
-  percent: number | null;
-  detail?: string | null;
-  sparkline?: number[];
-}) {
-  const clamped = percent === null ? null : Math.min(100, Math.max(0, percent));
-  const barColor =
-    clamped === null
-      ? "bg-muted-foreground/30"
-      : clamped >= 90
-        ? "bg-red-500"
-        : clamped >= 75
-          ? "bg-yellow-500"
-          : "bg-accent-brand";
-
-  return (
-    <div className="flex min-w-0 flex-1 flex-col gap-2 border border-border bg-card px-4 py-3">
-      <div className="flex items-center gap-2 text-muted-foreground">
-        {icon}
-        <span className="text-[10px] font-bold uppercase tracking-widest">
-          {label}
-        </span>
-      </div>
-      <div className="flex items-baseline justify-between gap-2">
-        <span className="text-2xl font-bold tabular-nums">
-          {clamped === null ? "N/A" : `${clamped.toFixed(0)}%`}
-        </span>
-        {detail && (
-          <span className="truncate text-[11px] text-muted-foreground">
-            {detail}
-          </span>
-        )}
-      </div>
-      <div className="h-1.5 w-full overflow-hidden rounded-full bg-muted">
-        <div
-          className={cn("h-full rounded-full transition-all", barColor)}
-          style={{ width: `${clamped ?? 0}%` }}
-        />
-      </div>
-      {sparkline && sparkline.length > 1 && <MiniSparkline data={sparkline} />}
-    </div>
-  );
-}
-
-function MiniSparkline({ data }: { data: number[] }) {
-  const w = 100;
-  const h = 20;
-  const max = 100;
-  const points = data
-    .map((v, i) => {
-      const x = (i / (data.length - 1)) * w;
-      const y = h - (Math.min(100, Math.max(0, v)) / max) * h;
-      return `${x.toFixed(1)},${y.toFixed(1)}`;
-    })
-    .join(" ");
-  return (
-    <svg viewBox={`0 0 ${w} ${h}`} className="h-5 w-full text-accent-brand/70">
-      <polyline
-        points={points}
-        fill="none"
-        stroke="currentColor"
-        strokeWidth={1.5}
-        strokeLinejoin="round"
-        strokeLinecap="round"
-      />
-    </svg>
-  );
-}
-
-export function NodeSummaryStrip({
-  node,
-  histories,
-}: {
-  node: ProxmoxNodeStats | undefined;
-  histories: { cpu: number[]; memory: number[]; disk: number[] };
-}) {
-  const { t } = useTranslation();
-
-  return (
-    <div className="flex flex-wrap gap-2">
-      <Tile
-        icon={<Cpu className="size-3.5" />}
-        label={t("proxmoxStats.cpuUsage")}
-        percent={node?.cpu.percent ?? null}
-        detail={
-          node?.cpu.cores != null
-            ? t("proxmoxStats.cpuCores", { count: node.cpu.cores })
-            : undefined
-        }
-        sparkline={histories.cpu}
-      />
-      <Tile
-        icon={<MemoryStick className="size-3.5" />}
-        label={t("proxmoxStats.memoryUsage")}
-        percent={node?.memory.percent ?? null}
-        detail={
-          node?.memory.usedGiB != null && node?.memory.totalGiB != null
-            ? `${node.memory.usedGiB.toFixed(1)} / ${node.memory.totalGiB.toFixed(1)} GiB`
-            : undefined
-        }
-        sparkline={histories.memory}
-      />
-      <Tile
-        icon={<HardDrive className="size-3.5" />}
-        label={t("proxmoxStats.diskUsage")}
-        percent={node?.disk.percent ?? null}
-        detail={
-          node?.disk.usedGiB != null && node?.disk.totalGiB != null
-            ? `${node.disk.usedGiB.toFixed(1)} / ${node.disk.totalGiB.toFixed(1)} GiB`
-            : undefined
-        }
-        sparkline={histories.disk}
-      />
-      <div className="flex min-w-0 flex-1 flex-col justify-between gap-2 border border-border bg-card px-4 py-3">
-        <div className="flex items-center gap-2 text-muted-foreground">
-          <Clock className="size-3.5" />
-          <span className="text-[10px] font-bold uppercase tracking-widest">
-            {t("proxmoxStats.uptime")}
-          </span>
-        </div>
-        <span className="text-2xl font-bold">
-          {node?.uptime.formatted ?? "N/A"}
-        </span>
-        <div className="flex items-center gap-1.5 truncate text-[11px] text-muted-foreground">
-          <Server className="size-3 shrink-0" />
-          <span className="truncate">{node?.system.hostname ?? "-"}</span>
-          {node?.system.pveVersion && (
-            <span className="ml-1 shrink-0">{node.system.pveVersion}</span>
-          )}
-        </div>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/proxmox/src/frontend/stats/ProxmoxStatsApp.tsx b/plugins/proxmox/src/frontend/stats/ProxmoxStatsApp.tsx
deleted file mode 100644
index 7a55820b9..000000000
--- a/plugins/proxmox/src/frontend/stats/ProxmoxStatsApp.tsx
+++ /dev/null
@@ -1,51 +0,0 @@
-import React from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { FullScreenAppWrapper, ConnectionScreen } from "@termix/plugin-sdk/ui";
-import { ProxmoxStatsTab } from "./ProxmoxStatsTab";
-
-interface ProxmoxStatsAppProps {
-  hostId?: string;
-}
-
-const ProxmoxStatsApp: React.FC<ProxmoxStatsAppProps> = ({ hostId }) => {
-  const { t } = useTranslation();
-  return (
-    <FullScreenAppWrapper hostId={hostId}>
-      {(hostConfig, phase) => {
-        if (phase === "loading") {
-          return (
-            <div className="relative h-full w-full">
-              <ConnectionScreen
-                status="connecting"
-                message={t("hosts.loadingHost")}
-              />
-            </div>
-          );
-        }
-
-        if (!hostConfig) {
-          return (
-            <div className="relative h-full w-full">
-              <ConnectionScreen
-                status="disconnected"
-                message={t("hosts.hostNotFound")}
-              />
-            </div>
-          );
-        }
-
-        return (
-          <ProxmoxStatsTab
-            hostConfig={hostConfig}
-            title={hostConfig.name || `${hostConfig.username}@${hostConfig.ip}`}
-            isVisible={true}
-            isTopbarOpen={false}
-            embedded={true}
-          />
-        );
-      }}
-    </FullScreenAppWrapper>
-  );
-};
-
-export default ProxmoxStatsApp;
diff --git a/plugins/proxmox/src/frontend/stats/ProxmoxStatsTab.tsx b/plugins/proxmox/src/frontend/stats/ProxmoxStatsTab.tsx
deleted file mode 100644
index 774faed7b..000000000
--- a/plugins/proxmox/src/frontend/stats/ProxmoxStatsTab.tsx
+++ /dev/null
@@ -1,387 +0,0 @@
-/* eslint-disable react-hooks/exhaustive-deps */
-import React from "react";
-import {
-  Button,
-  ConnectionScreen,
-  ConnectionLogProvider,
-  useConnectionLog,
-} from "@termix/plugin-sdk/ui";
-import {
-  useTranslation,
-  usePluginApi,
-  useHosts,
-} from "@termix/plugin-sdk/frontend";
-import { RefreshCw, Server } from "lucide-react";
-import { createProxmoxStatsApi } from "./proxmox-stats-api";
-import type { ProxmoxStatsSnapshot, ProxmoxStatsConfig } from "../types";
-import { NodeSummaryStrip } from "./NodeSummaryStrip";
-import { GuestTable } from "./GuestTable";
-import { NodeNetworkCard } from "./cards/NodeNetworkCard";
-import { StoragePoolsCard } from "./cards/StoragePoolsCard";
-import { ClusterHealthCard } from "./cards/ClusterHealthCard";
-import { useConnectionRetry } from "@termix/plugin-sdk/frontend";
-import { runAdaptivePolling } from "@termix/plugin-sdk/ui";
-
-const HISTORY_LEN = 30;
-
-function statsChangeKey(data: ProxmoxStatsSnapshot): string {
-  const bucket = (value: number | null | undefined) =>
-    value == null ? null : Math.round(value / 5) * 5;
-  return JSON.stringify({
-    cpu: bucket(data.node.cpu.percent),
-    memory: bucket(data.node.memory.percent),
-    disk: bucket(data.node.disk.percent),
-    guests: data.guests.counts,
-    cluster: data.cluster,
-  });
-}
-const DEFAULT_POLL_INTERVAL = 60;
-
-interface HostConfig {
-  id: number;
-  name: string;
-  ip: string;
-  username: string;
-  pluginSettings?: {
-    proxmox?: {
-      enableProxmoxStats?: boolean;
-      proxmoxStatsConfig?: string | ProxmoxStatsConfig | null;
-    };
-  };
-  authType?: string;
-  port?: number;
-  [key: string]: unknown;
-}
-
-interface ProxmoxStatsProps {
-  hostConfig?: HostConfig;
-  title?: string;
-  isVisible?: boolean;
-  isTopbarOpen?: boolean;
-  embedded?: boolean;
-}
-
-interface ProxmoxStatsHistories {
-  cpu: number[];
-  memory: number[];
-  disk: number[];
-}
-
-function parseProxmoxStatsConfig(
-  raw?: string | ProxmoxStatsConfig | null,
-): Required<Pick<ProxmoxStatsConfig, "pollInterval">> & ProxmoxStatsConfig {
-  const defaults = { pollInterval: DEFAULT_POLL_INTERVAL, nodeName: null };
-  if (!raw) return defaults;
-  try {
-    const parsed = typeof raw === "string" ? JSON.parse(raw) : raw;
-    return { ...defaults, ...parsed };
-  } catch {
-    return defaults;
-  }
-}
-
-export function ProxmoxStatsTab(props: ProxmoxStatsProps): React.ReactElement {
-  return (
-    <ConnectionLogProvider>
-      <ProxmoxStatsInner {...props} />
-    </ConnectionLogProvider>
-  );
-}
-
-function ProxmoxStatsInner({
-  hostConfig,
-  title,
-  isVisible = true,
-  isTopbarOpen = true,
-  embedded = false,
-}: ProxmoxStatsProps): React.ReactElement {
-  const { t } = useTranslation();
-  const { addLog, clearLogs } = useConnectionLog();
-  const pluginApi = usePluginApi();
-  const api = React.useMemo(
-    () => createProxmoxStatsApi(pluginApi),
-    [pluginApi],
-  );
-  const { hosts } = useHosts();
-
-  const [snapshot, setSnapshot] = React.useState<ProxmoxStatsSnapshot | null>(
-    null,
-  );
-  const [histories, setHistories] = React.useState<ProxmoxStatsHistories>({
-    cpu: [],
-    memory: [],
-    disk: [],
-  });
-  const [currentHostConfig, setCurrentHostConfig] = React.useState(hostConfig);
-  const [isRefreshing, setIsRefreshing] = React.useState(false);
-  const [isPageVisible, setIsPageVisible] = React.useState(!document.hidden);
-  const [viewerSessionId, setViewerSessionId] = React.useState<string | null>(
-    null,
-  );
-
-  const proxmoxSettings = currentHostConfig?.pluginSettings?.proxmox;
-  const statsConfig = React.useMemo(
-    () => parseProxmoxStatsConfig(proxmoxSettings?.proxmoxStatsConfig),
-    [proxmoxSettings?.proxmoxStatsConfig],
-  );
-
-  React.useEffect(() => {
-    const onVis = () => setIsPageVisible(!document.hidden);
-    document.addEventListener("visibilitychange", onVis);
-    return () => document.removeEventListener("visibilitychange", onVis);
-  }, []);
-
-  const isActuallyVisible = isVisible && isPageVisible;
-
-  React.useEffect(() => {
-    if (!viewerSessionId || !isActuallyVisible) return;
-    const interval = setInterval(() => {
-      api.sendHeartbeat(viewerSessionId).catch(() => {});
-    }, 30000);
-    return () => clearInterval(interval);
-  }, [viewerSessionId, isActuallyVisible, api]);
-
-  React.useEffect(() => {
-    if (hostConfig?.id !== currentHostConfig?.id) {
-      setSnapshot(null);
-      setHistories({ cpu: [], memory: [], disk: [] });
-    }
-    setCurrentHostConfig(hostConfig);
-  }, [hostConfig?.id]);
-
-  React.useEffect(() => {
-    if (!hostConfig?.id) return;
-    const updated = hosts.find((h) => String(h.id) === String(hostConfig.id));
-    if (updated) setCurrentHostConfig(updated as unknown as HostConfig);
-  }, [hostConfig?.id, hosts]);
-
-  const pushHistory = React.useCallback((data: ProxmoxStatsSnapshot) => {
-    setHistories((prev) => {
-      const add = (arr: number[], v: number | null | undefined) =>
-        [...arr, v ?? 0].slice(-HISTORY_LEN);
-      return {
-        cpu: add(prev.cpu, data.node?.cpu?.percent),
-        memory: add(prev.memory, data.node?.memory?.percent),
-        disk: add(prev.disk, data.node?.disk?.percent),
-      };
-    });
-  }, []);
-
-  const notEnabled = proxmoxSettings?.enableProxmoxStats !== true;
-  const stopPollingRef = React.useRef<(() => void) | null>(null);
-
-  const fetchSnapshot = React.useCallback(async (): Promise<void> => {
-    if (!currentHostConfig?.id) return;
-
-    addLog({
-      type: "info",
-      stage: "stats_connecting",
-      message: t("proxmoxStats.connecting"),
-    });
-
-    const result = await api.startPolling(currentHostConfig.id);
-    if (result.viewerSessionId) setViewerSessionId(result.viewerSessionId);
-
-    addLog({
-      type: "info",
-      stage: "stats_polling",
-      message: t("proxmoxStats.connecting"),
-    });
-
-    const data = await api.getStats(currentHostConfig.id);
-    if (!data) {
-      throw new Error(t("proxmoxStats.connectionFailed"));
-    }
-
-    setSnapshot(data);
-    addLog({
-      type: "success",
-      stage: "connected",
-      message: t("terminal.connected"),
-    });
-
-    const intervalMs =
-      (statsConfig.pollInterval ?? DEFAULT_POLL_INTERVAL) * 1000;
-    let signature = statsChangeKey(data);
-    stopPollingRef.current?.();
-    stopPollingRef.current = runAdaptivePolling(
-      async () => {
-        const next = await api.getStats(currentHostConfig.id);
-        if (!next) throw new Error(t("proxmoxStats.connectionFailed"));
-        const nextSignature = statsChangeKey(next);
-        const changed = nextSignature !== signature;
-        signature = nextSignature;
-        setSnapshot(next);
-        pushHistory(next);
-        return changed;
-      },
-      {
-        minIntervalMs: intervalMs,
-        maxIntervalMs: Math.min(120_000, intervalMs * 6),
-        stablePollsPerStep: 3,
-      },
-      { runImmediately: false },
-    );
-  }, [
-    currentHostConfig?.id,
-    statsConfig.pollInterval,
-    addLog,
-    t,
-    pushHistory,
-    api,
-  ]);
-
-  const retry = useConnectionRetry({
-    connect: async () => {
-      try {
-        await fetchSnapshot();
-        retry.markConnected();
-      } catch (error: unknown) {
-        addLog({
-          type: "error",
-          stage: "error",
-          message:
-            error instanceof Error
-              ? error.message
-              : t("proxmoxStats.connectionFailed"),
-        });
-        retry.markFailed();
-      }
-    },
-    enabled: isPageVisible && !notEnabled && !!currentHostConfig?.id,
-    autoStart: false,
-  });
-
-  const retryRef = React.useRef(retry);
-  retryRef.current = retry;
-
-  // Connects once per host and stays connected while this tab exists, even
-  // when the user switches to another tab and back. Only the browser tab
-  // going into the background (isPageVisible) pauses/resumes it -- switching
-  // between Termix tabs must not tear down and reconnect the session.
-  React.useEffect(() => {
-    if (notEnabled || !currentHostConfig?.id) return;
-
-    let cancelled = false;
-    const debounce = setTimeout(() => {
-      if (isPageVisible && !cancelled) {
-        clearLogs();
-        retryRef.current.reset();
-        retryRef.current.retryNow();
-      } else if (!isPageVisible) {
-        stopPollingRef.current?.();
-        stopPollingRef.current = null;
-        if (currentHostConfig?.id) {
-          api.stopPolling(currentHostConfig.id, undefined).catch(() => {});
-        }
-      }
-    }, 500);
-
-    return () => {
-      cancelled = true;
-      clearTimeout(debounce);
-      stopPollingRef.current?.();
-      stopPollingRef.current = null;
-      if (currentHostConfig?.id) {
-        api.stopPolling(currentHostConfig.id).catch(() => {});
-      }
-    };
-  }, [currentHostConfig?.id, notEnabled, isPageVisible, api]);
-
-  const wrapperStyle: React.CSSProperties = embedded
-    ? { opacity: isVisible ? 1 : 0, height: "100%", width: "100%" }
-    : {
-        opacity: isVisible ? 1 : 0,
-        margin: isTopbarOpen ? "74px 17px 8px 8px" : "16px 17px 8px 8px",
-        height: isTopbarOpen ? "calc(100vh - 82px)" : "calc(100vh - 24px)",
-      };
-
-  const handleRefresh = async () => {
-    if (!currentHostConfig?.id) return;
-    if (retry.status !== "connected") {
-      retry.retryNow();
-      return;
-    }
-    try {
-      setIsRefreshing(true);
-      const data = await api.getStats(currentHostConfig.id);
-      if (data) {
-        setSnapshot(data);
-        pushHistory(data);
-      }
-    } finally {
-      setIsRefreshing(false);
-    }
-  };
-
-  const showContent = !notEnabled && retry.status === "connected" && snapshot;
-
-  return (
-    <div
-      style={wrapperStyle}
-      className="relative flex flex-col overflow-hidden"
-    >
-      <div className="flex min-h-0 flex-1 flex-col overflow-hidden">
-        {retry.status === "connected" && !notEnabled && (
-          <div className="mx-3 mt-3 flex shrink-0 items-center justify-between border border-border bg-card px-3 py-3">
-            <div className="flex items-center gap-3">
-              <div className="flex size-10 shrink-0 items-center justify-center border border-border bg-muted">
-                <Server className="size-5 text-accent-brand" />
-              </div>
-              <h1 className="text-lg font-bold md:text-2xl">{title}</h1>
-            </div>
-            <Button
-              variant="outline"
-              size="default"
-              onClick={handleRefresh}
-              disabled={isRefreshing}
-              className="gap-2 font-semibold"
-            >
-              <RefreshCw
-                className={`size-3.5 ${isRefreshing ? "animate-spin" : ""}`}
-              />
-              {t("proxmoxStats.refresh")}
-            </Button>
-          </div>
-        )}
-
-        {showContent && (
-          <div className="flex min-h-0 flex-1 flex-col gap-3 overflow-y-auto px-3 pb-3 pt-3">
-            <div className="shrink-0">
-              <NodeSummaryStrip node={snapshot.node} histories={histories} />
-            </div>
-
-            <GuestTable guests={snapshot.guests.guests} />
-
-            <div className="grid shrink-0 grid-cols-1 gap-3 pb-1 md:grid-cols-3">
-              <NodeNetworkCard snapshot={snapshot} />
-              <StoragePoolsCard snapshot={snapshot} />
-              {snapshot.cluster.clustered && (
-                <ClusterHealthCard snapshot={snapshot} />
-              )}
-            </div>
-          </div>
-        )}
-
-        <ConnectionScreen
-          status={notEnabled ? "connected" : retry.status}
-          message={t("proxmoxStats.connecting")}
-          attempt={retry.attempt}
-          maxAttempts={retry.maxAttempts}
-          nextRetryInMs={retry.nextRetryInMs}
-          onManualRetry={retry.retryNow}
-          emptyState={
-            notEnabled ? (
-              <div className="text-center opacity-40">
-                <Server className="mx-auto mb-4 size-16" />
-                <p className="text-xl font-bold uppercase tracking-widest">
-                  {t("proxmoxStats.noHostSelected")}
-                </p>
-              </div>
-            ) : undefined
-          }
-        />
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/proxmox/src/frontend/stats/cards/ClusterHealthCard.tsx b/plugins/proxmox/src/frontend/stats/cards/ClusterHealthCard.tsx
deleted file mode 100644
index 08ee455fd..000000000
--- a/plugins/proxmox/src/frontend/stats/cards/ClusterHealthCard.tsx
+++ /dev/null
@@ -1,67 +0,0 @@
-import { Network } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { MetricCard } from "@termix/plugin-sdk/ui";
-import type { ProxmoxStatsSnapshot } from "../../types";
-import { cn } from "@termix/plugin-sdk/ui";
-
-export function ClusterHealthCard({
-  snapshot,
-}: {
-  snapshot: ProxmoxStatsSnapshot | null;
-}) {
-  const { t } = useTranslation();
-  const cluster = snapshot?.cluster;
-
-  return (
-    <MetricCard
-      title={t("proxmoxStats.clusterHealth")}
-      icon={<Network className="size-3.5" />}
-      scroll
-    >
-      {!cluster || !cluster.clustered ? (
-        <span className="text-xs text-muted-foreground">
-          {t("proxmoxStats.notClustered")}
-        </span>
-      ) : (
-        <div className="flex flex-col gap-2 text-xs">
-          <div className="flex items-center gap-2">
-            <span
-              className={cn(
-                "size-1.5 shrink-0 rounded-full",
-                cluster.quorate ? "bg-green-500" : "bg-red-500",
-              )}
-            />
-            <span className="font-medium">
-              {cluster.clusterName ?? t("proxmoxStats.clusterHealth")}
-            </span>
-            <span className="text-muted-foreground">
-              {cluster.quorate
-                ? t("proxmoxStats.quorate")
-                : t("proxmoxStats.notQuorate")}
-            </span>
-          </div>
-          <div className="flex flex-col divide-y divide-border">
-            {cluster.nodes.map((node) => (
-              <div key={node.name} className="flex items-center gap-2 py-1.5">
-                <span
-                  className={cn(
-                    "size-1.5 shrink-0 rounded-full",
-                    node.online ? "bg-green-500" : "bg-muted-foreground/50",
-                  )}
-                />
-                <span className="min-w-0 flex-1 truncate font-medium">
-                  {node.name}
-                </span>
-                <span className="shrink-0 text-[10px] text-muted-foreground">
-                  {node.online
-                    ? t("proxmoxStats.nodeOnline")
-                    : t("proxmoxStats.nodeOffline")}
-                </span>
-              </div>
-            ))}
-          </div>
-        </div>
-      )}
-    </MetricCard>
-  );
-}
diff --git a/plugins/proxmox/src/frontend/stats/cards/NodeNetworkCard.tsx b/plugins/proxmox/src/frontend/stats/cards/NodeNetworkCard.tsx
deleted file mode 100644
index cd0d52756..000000000
--- a/plugins/proxmox/src/frontend/stats/cards/NodeNetworkCard.tsx
+++ /dev/null
@@ -1,36 +0,0 @@
-import { Network } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { StatRow, MetricCard } from "@termix/plugin-sdk/ui";
-import type { ProxmoxStatsSnapshot } from "../../types";
-
-export function NodeNetworkCard({
-  snapshot,
-}: {
-  snapshot: ProxmoxStatsSnapshot | null;
-}) {
-  const { t } = useTranslation();
-  const interfaces = snapshot?.network.interfaces ?? [];
-
-  return (
-    <MetricCard
-      title={t("proxmoxStats.networkInterfaces")}
-      icon={<Network className="size-3.5" />}
-      scroll
-    >
-      {interfaces.length === 0 ? (
-        <span className="text-xs text-muted-foreground">N/A</span>
-      ) : (
-        <div className="flex flex-col divide-y divide-border">
-          {interfaces.map((iface) => (
-            <StatRow
-              key={iface.name}
-              label={iface.name}
-              value={iface.ip ?? iface.state ?? "-"}
-              mono
-            />
-          ))}
-        </div>
-      )}
-    </MetricCard>
-  );
-}
diff --git a/plugins/proxmox/src/frontend/stats/cards/StoragePoolsCard.tsx b/plugins/proxmox/src/frontend/stats/cards/StoragePoolsCard.tsx
deleted file mode 100644
index 9b9c48059..000000000
--- a/plugins/proxmox/src/frontend/stats/cards/StoragePoolsCard.tsx
+++ /dev/null
@@ -1,60 +0,0 @@
-import { Database } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { MetricCard } from "@termix/plugin-sdk/ui";
-import type { ProxmoxStatsSnapshot } from "../../types";
-
-export function StoragePoolsCard({
-  snapshot,
-}: {
-  snapshot: ProxmoxStatsSnapshot | null;
-}) {
-  const { t } = useTranslation();
-  const pools = snapshot?.storage.pools ?? [];
-
-  return (
-    <MetricCard
-      title={t("proxmoxStats.storagePools")}
-      icon={<Database className="size-3.5" />}
-      scroll
-    >
-      {pools.length === 0 ? (
-        <span className="text-xs text-muted-foreground">N/A</span>
-      ) : (
-        <div className="flex flex-col divide-y divide-border">
-          {pools.map((pool) => (
-            <div key={pool.name} className="flex flex-col gap-1 py-2 text-xs">
-              <div className="flex items-center gap-2">
-                <span className="min-w-0 flex-1 truncate font-medium">
-                  {pool.name}
-                </span>
-                <span className="shrink-0 rounded-full border border-border px-1.5 py-0.5 text-[10px] uppercase text-muted-foreground">
-                  {pool.type}
-                </span>
-                {!pool.active && (
-                  <span className="shrink-0 text-[10px] text-muted-foreground">
-                    {t("proxmoxStats.inactive")}
-                  </span>
-                )}
-              </div>
-              <div className="flex items-center gap-2">
-                <div className="h-1.5 flex-1 overflow-hidden rounded-full bg-muted">
-                  <div
-                    className="h-full bg-accent-brand"
-                    style={{
-                      width: `${Math.min(100, Math.max(0, pool.percent ?? 0))}%`,
-                    }}
-                  />
-                </div>
-                <span className="shrink-0 text-[10px] tabular-nums text-muted-foreground">
-                  {pool.usedGiB !== null && pool.totalGiB !== null
-                    ? `${pool.usedGiB.toFixed(1)} / ${pool.totalGiB.toFixed(1)} GiB`
-                    : "N/A"}
-                </span>
-              </div>
-            </div>
-          ))}
-        </div>
-      )}
-    </MetricCard>
-  );
-}
diff --git a/plugins/proxmox/src/frontend/stats/proxmox-stats-api.ts b/plugins/proxmox/src/frontend/stats/proxmox-stats-api.ts
deleted file mode 100644
index 5fd5c4356..000000000
--- a/plugins/proxmox/src/frontend/stats/proxmox-stats-api.ts
+++ /dev/null
@@ -1,80 +0,0 @@
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import type { ProxmoxStatsSnapshot } from "../types";
-
-/**
- * The Proxmox node-stats routes, through the plugin's own client. Paths are
- * relative to /plugin-api/proxmox/, which the client already points at.
- */
-export function createProxmoxStatsApi(api: PluginApiClient) {
-  return {
-    async getStats(hostId: number): Promise<ProxmoxStatsSnapshot | null> {
-      try {
-        const response = await api.get<ProxmoxStatsSnapshot>(
-          `/stats/${hostId}`,
-        );
-        return response.data;
-      } catch (error) {
-        if (
-          typeof error === "object" &&
-          error &&
-          "response" in error &&
-          (error as { response?: { status?: number } }).response?.status === 404
-        ) {
-          return null;
-        }
-        throw error;
-      }
-    },
-
-    async startPolling(hostId: number): Promise<{
-      success: boolean;
-      viewerSessionId?: string;
-      status?: string;
-      error?: string;
-    }> {
-      const response = await api.post<{
-        success: boolean;
-        viewerSessionId?: string;
-        status?: string;
-        error?: string;
-      }>(`/stats/start/${hostId}`);
-      return response.data;
-    },
-
-    async stopPolling(hostId: number, viewerSessionId?: string): Promise<void> {
-      await api.post(`/stats/stop/${hostId}`, { viewerSessionId });
-    },
-
-    async sendHeartbeat(viewerSessionId: string): Promise<void> {
-      await api.post("/stats/heartbeat", { viewerSessionId });
-    },
-
-    async getHistory(
-      hostId: number,
-      opts: { range?: string; from?: string; to?: string },
-    ): Promise<ProxmoxStatsHistoryResponse> {
-      const response = await api.get<ProxmoxStatsHistoryResponse>(
-        `/stats/history/${hostId}`,
-        { params: opts },
-      );
-      return response.data;
-    },
-  };
-}
-
-export type ProxmoxStatsApi = ReturnType<typeof createProxmoxStatsApi>;
-
-export interface ProxmoxStatsHistoryRow {
-  ts: string;
-  cpu_percent: number | null;
-  mem_percent: number | null;
-  disk_percent: number | null;
-  net_rx_bytes: number | null;
-  net_tx_bytes: number | null;
-}
-
-export interface ProxmoxStatsHistoryResponse {
-  rows: ProxmoxStatsHistoryRow[];
-  fromTs: string;
-  toTs: string;
-}
diff --git a/plugins/proxmox/src/frontend/types.ts b/plugins/proxmox/src/frontend/types.ts
deleted file mode 100644
index 806002571..000000000
--- a/plugins/proxmox/src/frontend/types.ts
+++ /dev/null
@@ -1,153 +0,0 @@
-// Frontend-side mirror of the backend Proxmox stats collectors' return
-// shapes (src/backend/proxmox/*.ts). Kept in sync by hand.
-
-export interface ProxmoxNodeStats {
-  cpu: {
-    percent: number | null;
-    cores: number | null;
-    load: [number, number, number] | null;
-  };
-  memory: {
-    percent: number | null;
-    usedGiB: number | null;
-    totalGiB: number | null;
-  };
-  disk: {
-    percent: number | null;
-    usedGiB: number | null;
-    totalGiB: number | null;
-  };
-  uptime: {
-    seconds: number | null;
-    formatted: string | null;
-  };
-  system: {
-    hostname: string | null;
-    kernel: string | null;
-    pveVersion: string | null;
-  };
-}
-
-export interface ProxmoxNodeNetwork {
-  interfaces: Array<{
-    name: string;
-    ip: string | null;
-    state: string | null;
-    rxBytes: string | null;
-    txBytes: string | null;
-  }>;
-}
-
-export interface ProxmoxGuestSummary {
-  vmid: number;
-  name: string;
-  type: "qemu" | "lxc";
-  status: string;
-  cpuPercent: number | null;
-  memPercent: number | null;
-  memUsedGiB: number | null;
-  memTotalGiB: number | null;
-  diskPercent: number | null;
-  diskUsedGiB: number | null;
-  diskTotalGiB: number | null;
-  uptimeSeconds: number | null;
-}
-
-export interface ProxmoxGuestsSummary {
-  guests: ProxmoxGuestSummary[];
-  counts: { running: number; stopped: number; total: number };
-}
-
-export interface ProxmoxStoragePool {
-  name: string;
-  type: string;
-  active: boolean;
-  enabled: boolean;
-  usedGiB: number | null;
-  totalGiB: number | null;
-  availGiB: number | null;
-  percent: number | null;
-}
-
-export interface ProxmoxStorage {
-  pools: ProxmoxStoragePool[];
-}
-
-export type ProxmoxClusterHealth =
-  | { clustered: false }
-  | {
-      clustered: true;
-      quorate: boolean;
-      clusterName: string | null;
-      nodes: Array<{
-        name: string;
-        online: boolean;
-        local: boolean;
-        ip: string | null;
-      }>;
-    };
-
-export interface ProxmoxStatsSnapshot {
-  node: ProxmoxNodeStats;
-  network: ProxmoxNodeNetwork;
-  guests: ProxmoxGuestsSummary;
-  storage: ProxmoxStorage;
-  cluster: ProxmoxClusterHealth;
-  lastChecked: string;
-}
-
-export interface ProxmoxStatsConfig {
-  nodeName?: string | null;
-  pollInterval?: number;
-  enabledCards?: string[];
-}
-
-/** The proxmoxConfig host setting. */
-export interface ProxmoxHostConfig {
-  source?: {
-    source: "proxmox";
-    sourceHostId: number;
-    node: string;
-    vmid: number;
-    type: "qemu" | "lxc";
-    lastSeenAt?: string;
-    lastStatus?: string;
-    missingSince?: string | null;
-  };
-  defaultCredentialId: number | null;
-  defaultAuthType?: string;
-  windowsPatterns: string;
-  dockerPatterns: string;
-  preferredPrefixes: string;
-  autoSyncEnabled?: boolean;
-  syncIntervalMinutes?: number;
-  markMissingGuests?: boolean;
-  lastSyncAt?: string;
-  lastSyncStatus?: "success" | "error";
-  lastSyncError?: string | null;
-  lastSyncResult?: {
-    created: number;
-    updated: number;
-    markedMissing: number;
-    skipped: number;
-    errors: string[];
-  };
-}
-
-export interface ProxmoxGuest {
-  name: string;
-  vmid: number;
-  type: "qemu" | "lxc";
-  node: string;
-  status: string;
-  ip: string | null;
-  connectionType: "ssh" | "rdp";
-  enableDocker: boolean;
-}
-
-export interface ProxmoxDiscoverResult {
-  guests: ProxmoxGuest[];
-  credentialId: number | null;
-  defaultCredentialId: number | null;
-  jumpHosts?: unknown[] | null;
-}
diff --git a/plugins/proxmox/tests/backend/guest-sync.test.ts b/plugins/proxmox/tests/backend/guest-sync.test.ts
deleted file mode 100644
index 53af05465..000000000
--- a/plugins/proxmox/tests/backend/guest-sync.test.ts
+++ /dev/null
@@ -1,61 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  getProxmoxSource,
-  indexImportedGuests,
-  proxmoxSourceKey,
-} from "../../src/backend/guest-sync.js";
-
-const source = {
-  source: "proxmox",
-  sourceHostId: 1,
-  node: "pve",
-  vmid: 101,
-  type: "qemu",
-};
-
-describe("getProxmoxSource", () => {
-  it("reads the source from an object or a JSON string", () => {
-    expect(getProxmoxSource({ source })).toEqual(source);
-    expect(getProxmoxSource(JSON.stringify({ source }))).toEqual(source);
-  });
-
-  it("refuses a malformed source", () => {
-    expect(getProxmoxSource(null)).toBeNull();
-    expect(getProxmoxSource({ source: { ...source, vmid: "101" } })).toBeNull();
-    expect(getProxmoxSource({ source: { ...source, type: "vm" } })).toBeNull();
-  });
-});
-
-describe("indexImportedGuests", () => {
-  // The host row carries no proxmoxConfig since 2.9.0; the source only
-  // exists in the plugin's host settings.
-  const hosts = [
-    { id: 10, name: "guest-a" },
-    { id: 11, name: "guest-b" },
-    { id: 12, name: "manual" },
-  ];
-
-  it("matches hosts to guests through their settings", () => {
-    const index = indexImportedGuests(
-      hosts,
-      [
-        { hostId: 10, value: { source, lastSyncAt: "x" } },
-        { hostId: 11, value: { source: { ...source, sourceHostId: 2 } } },
-      ],
-      1,
-    );
-    expect([...index.keys()]).toEqual([proxmoxSourceKey(source as never)]);
-    const entry = index.get("1:pve:qemu:101")!;
-    expect(entry.host.id).toBe(10);
-    expect(entry.config.lastSyncAt).toBe("x");
-  });
-
-  it("ignores settings for hosts the user does not own", () => {
-    const index = indexImportedGuests(
-      hosts,
-      [{ hostId: 99, value: { source } }],
-      1,
-    );
-    expect(index.size).toBe(0);
-  });
-});
diff --git a/plugins/proxmox/tests/backend/helpers.ts b/plugins/proxmox/tests/backend/helpers.ts
deleted file mode 100644
index 90bd1b95c..000000000
--- a/plugins/proxmox/tests/backend/helpers.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { fileURLToPath } from "node:url";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
diff --git a/plugins/proxmox/tests/backend/migrations.test.ts b/plugins/proxmox/tests/backend/migrations.test.ts
deleted file mode 100644
index 4967217c4..000000000
--- a/plugins/proxmox/tests/backend/migrations.test.ts
+++ /dev/null
@@ -1,99 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { createTestDb, type TestDb } from "@termix/plugin-sdk/testing";
-import { pluginDir } from "./helpers.js";
-
-// proxmox_node_history and proxmox_stats_preferences as core's SQLite
-// bootstrap created them before 2.9.0.
-const LEGACY_DDL = `
-  CREATE TABLE proxmox_node_history (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    host_id INTEGER NOT NULL REFERENCES ssh_data(id) ON DELETE CASCADE,
-    ts TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    cpu_percent REAL,
-    mem_percent REAL,
-    disk_percent REAL,
-    net_rx_bytes INTEGER,
-    net_tx_bytes INTEGER
-  );
-  CREATE TABLE proxmox_stats_preferences (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-    host_id INTEGER NOT NULL REFERENCES ssh_data(id) ON DELETE CASCADE,
-    layout TEXT NOT NULL,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
-  );
-  CREATE UNIQUE INDEX idx_proxmox_stats_prefs_user_host ON proxmox_stats_preferences (user_id, host_id);
-`;
-
-let db: TestDb | null = null;
-
-afterEach(() => {
-  db?.close();
-  db = null;
-});
-
-const tableExists = (name: string) =>
-  !!db!.sqlite
-    .prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?")
-    .get(name);
-
-const indexOn = (table: string) =>
-  (
-    db!.sqlite
-      .prepare(
-        "SELECT name FROM sqlite_master WHERE type = 'index' AND tbl_name = ? AND name NOT LIKE 'sqlite_%'",
-      )
-      .all(table) as { name: string }[]
-  ).map((row) => row.name);
-
-describe("adopting proxmox_node_history and proxmox_stats_preferences", () => {
-  it("keeps every existing row when the legacy tables are there", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec(
-          "INSERT INTO users (id, username) VALUES ('user-1', 'user-1')",
-        );
-        sqlite.exec("INSERT INTO ssh_data (id) VALUES (1)");
-        sqlite.exec(LEGACY_DDL);
-        sqlite
-          .prepare(
-            "INSERT INTO proxmox_node_history (host_id, ts, cpu_percent) VALUES (?, ?, ?)",
-          )
-          .run(1, "2026-01-01 00:00:00", 42);
-        sqlite
-          .prepare(
-            "INSERT INTO proxmox_stats_preferences (user_id, host_id, layout) VALUES (?, ?, ?)",
-          )
-          .run("user-1", 1, '{"cards":[]}');
-      },
-    });
-
-    expect(db.applied).toEqual(["0001_adopt_proxmox_stats"]);
-    expect(tableExists("proxmox_node_history")).toBe(false);
-    expect(tableExists("proxmox_stats_preferences")).toBe(false);
-    expect(tableExists("p_proxmox_node_history")).toBe(true);
-    expect(tableExists("p_proxmox_stats_preferences")).toBe(true);
-
-    expect(
-      db.sqlite.prepare("SELECT cpu_percent FROM p_proxmox_node_history").all(),
-    ).toEqual([{ cpu_percent: 42 }]);
-    expect(
-      db.sqlite.prepare("SELECT layout FROM p_proxmox_stats_preferences").all(),
-    ).toEqual([{ layout: '{"cards":[]}' }]);
-    expect(indexOn("p_proxmox_stats_preferences")).toEqual([
-      "idx_proxmox_stats_prefs_user_host",
-    ]);
-  });
-
-  it("creates the tables fresh when there is no legacy one", async () => {
-    db = await createTestDb(pluginDir);
-
-    expect(tableExists("proxmox_node_history")).toBe(false);
-    expect(tableExists("p_proxmox_node_history")).toBe(true);
-    expect(tableExists("p_proxmox_stats_preferences")).toBe(true);
-    expect(
-      db.sqlite.prepare("SELECT * FROM p_proxmox_node_history").all(),
-    ).toEqual([]);
-  });
-});
diff --git a/plugins/proxmox/tests/backend/proxmox-import-auth.test.ts b/plugins/proxmox/tests/backend/proxmox-import-auth.test.ts
deleted file mode 100644
index 70bf71b93..000000000
--- a/plugins/proxmox/tests/backend/proxmox-import-auth.test.ts
+++ /dev/null
@@ -1,58 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { resolveProxmoxImportAuth } from "../../src/backend/proxmox-import-auth.js";
-
-// The frontend carries its own copy of this decision in
-// plugins/proxmox/frontend/proxmox-import-auth.ts. The two drifting apart is
-// what produced the reported bug, so both are held to the same matrix.
-describe("resolveProxmoxImportAuth", () => {
-  it("uses the default credential for key auth when one is configured", () => {
-    expect(resolveProxmoxImportAuth("key", 7)).toEqual({
-      authType: "credential",
-      credentialId: 7,
-      overrideCredentialUsername: 0,
-    });
-  });
-
-  it("uses the default credential for password auth when one is configured", () => {
-    expect(resolveProxmoxImportAuth("password", 7)).toEqual({
-      authType: "credential",
-      credentialId: 7,
-      overrideCredentialUsername: 0,
-    });
-  });
-
-  it("falls back to none when a secret-backed default has no credential", () => {
-    for (const authType of ["password", "key", "credential"]) {
-      expect(resolveProxmoxImportAuth(authType, null)).toEqual({
-        authType: "none",
-        credentialId: null,
-        overrideCredentialUsername: 0,
-      });
-    }
-  });
-
-  it("uses the credential when no default auth type is configured", () => {
-    expect(resolveProxmoxImportAuth(undefined, 42)).toEqual({
-      authType: "credential",
-      credentialId: 42,
-      overrideCredentialUsername: 0,
-    });
-    expect(resolveProxmoxImportAuth(undefined, null)).toEqual({
-      authType: "none",
-      credentialId: null,
-      overrideCredentialUsername: 0,
-    });
-  });
-
-  it("keeps secretless auth types, with or without a credential", () => {
-    for (const authType of ["none", "agent", "opkssh", "tailscale", "vault"]) {
-      for (const credentialId of [null, 7]) {
-        expect(resolveProxmoxImportAuth(authType, credentialId)).toEqual({
-          authType,
-          credentialId: null,
-          overrideCredentialUsername: 0,
-        });
-      }
-    }
-  });
-});
diff --git a/plugins/proxmox/tests/backend/proxmox-jump-hosts.test.ts b/plugins/proxmox/tests/backend/proxmox-jump-hosts.test.ts
deleted file mode 100644
index e57743b6a..000000000
--- a/plugins/proxmox/tests/backend/proxmox-jump-hosts.test.ts
+++ /dev/null
@@ -1,14 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { parseProxmoxJumpHosts } from "../../src/backend/proxmox-jump-hosts.js";
-
-describe("Proxmox jump-host persistence", () => {
-  it("reads a resolved array or a stored JSON string", () => {
-    expect(parseProxmoxJumpHosts([{ hostId: 7 }])).toEqual([{ hostId: 7 }]);
-    expect(parseProxmoxJumpHosts('[{"hostId":7}]')).toEqual([{ hostId: 7 }]);
-  });
-
-  it("turns missing or malformed values into null", () => {
-    expect(parseProxmoxJumpHosts(null)).toBeNull();
-    expect(parseProxmoxJumpHosts("invalid")).toBeNull();
-  });
-});
diff --git a/plugins/proxmox/tests/backend/proxmox-stats-polling.test.ts b/plugins/proxmox/tests/backend/proxmox-stats-polling.test.ts
deleted file mode 100644
index fdbff72f7..000000000
--- a/plugins/proxmox/tests/backend/proxmox-stats-polling.test.ts
+++ /dev/null
@@ -1,148 +0,0 @@
-import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
-
-vi.mock("../../src/backend/plugin-ctx.js", () => ({
-  pluginCtx: () => ({
-    log: { info: vi.fn(), warn: vi.fn(), error: vi.fn(), debug: vi.fn() },
-  }),
-}));
-
-const collectProxmoxStats = vi.fn();
-vi.mock("../../src/backend/proxmox/collect-proxmox-stats.js", () => ({
-  collectProxmoxStats: (...args: unknown[]) => collectProxmoxStats(...args),
-}));
-
-import {
-  ProxmoxPollingManager,
-  parseProxmoxStatsConfig,
-} from "../../src/backend/proxmox-stats-polling.js";
-import type { Client } from "ssh2";
-
-interface TestHost {
-  id: number;
-  userId: string;
-  proxmoxStatsConfig?: string | null;
-}
-
-function snapshot(overrides: Partial<Record<string, unknown>> = {}) {
-  return {
-    node: {
-      cpu: { percent: 10, cores: 4, load: [0.1, 0.2, 0.3] },
-      memory: { percent: 20, usedGiB: 2, totalGiB: 8 },
-      disk: { percent: 30, usedGiB: 30, totalGiB: 100 },
-      uptime: { seconds: 100, formatted: "0d 0h 1m" },
-      system: { hostname: "pve1", kernel: "6.8", pveVersion: "8.2" },
-    },
-    network: { interfaces: [{ name: "eth0", rxBytes: "10", txBytes: "20" }] },
-    guests: { guests: [], counts: { running: 0, stopped: 0, total: 0 } },
-    storage: { pools: [] },
-    cluster: { clustered: false },
-    lastChecked: new Date().toISOString(),
-    ...overrides,
-  };
-}
-
-beforeEach(() => {
-  vi.useFakeTimers();
-  collectProxmoxStats.mockReset();
-});
-
-afterEach(() => {
-  vi.useRealTimers();
-});
-
-describe("parseProxmoxStatsConfig", () => {
-  it("returns default poll interval when config is missing", () => {
-    expect(parseProxmoxStatsConfig(null)).toEqual({
-      nodeName: null,
-      pollInterval: 60,
-    });
-  });
-
-  it("parses a JSON string config", () => {
-    expect(
-      parseProxmoxStatsConfig('{"nodeName":"pve1","pollInterval":30}'),
-    ).toEqual({ nodeName: "pve1", pollInterval: 30 });
-  });
-
-  it("falls back to defaults on malformed JSON", () => {
-    expect(parseProxmoxStatsConfig("{not json")).toEqual({
-      nodeName: null,
-      pollInterval: 60,
-    });
-  });
-});
-
-describe("ProxmoxPollingManager", () => {
-  function makeManager(host: TestHost) {
-    const fetchHostById = vi.fn(async () => host);
-    const withSshConnection = vi.fn(
-      async (_host: TestHost, fn: (client: Client) => Promise<unknown>) =>
-        fn({} as Client),
-    );
-    const historyRepository = {
-      create: vi.fn(async () => {}),
-      pruneOlderThan: vi.fn(async () => {}),
-      listRange: vi.fn(async () => []),
-    };
-    const manager = new ProxmoxPollingManager<TestHost>({
-      fetchHostById,
-      withSshConnection: withSshConnection as never,
-      historyRepository,
-    });
-    return { manager, fetchHostById, withSshConnection, historyRepository };
-  }
-
-  it("starts polling and caches a snapshot when the first viewer registers", async () => {
-    const host: TestHost = { id: 1, userId: "user-1" };
-    collectProxmoxStats.mockResolvedValue(snapshot());
-    const { manager, withSshConnection } = makeManager(host);
-
-    manager.registerViewer(1, "viewer-1", "user-1");
-    // registerViewer kicks off polling via a fire-and-forget promise chain.
-    await vi.waitFor(() => {
-      expect(withSshConnection).toHaveBeenCalled();
-    });
-
-    const cached = manager.getStats(1);
-    expect(cached?.data.node.cpu.percent).toBe(10);
-    manager.destroy();
-  });
-
-  it("stops polling once the last viewer unregisters", async () => {
-    const host: TestHost = { id: 2, userId: "user-1" };
-    collectProxmoxStats.mockResolvedValue(snapshot());
-    const { manager } = makeManager(host);
-
-    manager.registerViewer(2, "viewer-a", "user-1");
-    manager.registerViewer(2, "viewer-b", "user-1");
-    await vi.waitFor(() => expect(manager.getStats(2)).toBeDefined());
-
-    manager.unregisterViewer(2, "viewer-a");
-    // one viewer left - stats stay cached
-    expect(manager.getStats(2)).toBeDefined();
-
-    manager.unregisterViewer(2, "viewer-b");
-    // Cached snapshot is retained (not cleared) but the interval is stopped;
-    // registering a new viewer must restart polling.
-    manager.destroy();
-  });
-
-  it("updateHeartbeat returns false for an unknown session", () => {
-    const { manager } = makeManager({ id: 3, userId: "user-1" });
-    expect(manager.updateHeartbeat("nope")).toBe(false);
-    manager.destroy();
-  });
-
-  it("records an error snapshot when collection fails, without throwing", async () => {
-    const host: TestHost = { id: 4, userId: "user-1" };
-    collectProxmoxStats.mockRejectedValue(new Error("pvesh not found"));
-    const { manager } = makeManager(host);
-
-    manager.registerViewer(4, "viewer-1", "user-1");
-    await vi.waitFor(() => {
-      expect(manager.getError(4)?.error).toBe("pvesh not found");
-    });
-    expect(manager.getStats(4)).toBeUndefined();
-    manager.destroy();
-  });
-});
diff --git a/plugins/proxmox/tests/backend/proxmox-sudo.test.ts b/plugins/proxmox/tests/backend/proxmox-sudo.test.ts
deleted file mode 100644
index 1c49c02a9..000000000
--- a/plugins/proxmox/tests/backend/proxmox-sudo.test.ts
+++ /dev/null
@@ -1,50 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
-import type { Client } from "ssh2";
-
-const execElevated = vi.fn();
-vi.mock("@termix/plugin-sdk/host-commands", async (importOriginal) => ({
-  ...(await importOriginal<object>()),
-  execElevated: (...args: unknown[]) => execElevated(...args),
-}));
-
-const { execPveshCommand } = await import("../../src/backend/routes.js");
-
-const client = {} as Client;
-
-describe("Proxmox discovery sudo execution", () => {
-  beforeEach(() => {
-    execElevated.mockReset();
-  });
-
-  it("forces pvesh through the stored sudo credentials", async () => {
-    execElevated.mockResolvedValue({
-      stdout: '[{"type":"qemu"}]',
-      stderr: "",
-      code: 0,
-      usedSudo: true,
-    });
-
-    await expect(
-      execPveshCommand(client, "pvesh get /cluster/resources", "secret", 12000),
-    ).resolves.toBe('[{"type":"qemu"}]');
-    expect(execElevated).toHaveBeenCalledWith(
-      client,
-      "pvesh get /cluster/resources",
-      "secret",
-      { forceSudo: true, timeoutMs: 12000 },
-    );
-  });
-
-  it("surfaces a failed elevated pvesh command", async () => {
-    execElevated.mockResolvedValue({
-      stdout: "",
-      stderr: "pvesh failed",
-      code: 255,
-      usedSudo: true,
-    });
-
-    await expect(
-      execPveshCommand(client, "pvesh get /cluster/resources", "secret"),
-    ).rejects.toThrow("pvesh failed");
-  });
-});
diff --git a/plugins/proxmox/tests/backend/proxmox/cluster-health-collector.test.ts b/plugins/proxmox/tests/backend/proxmox/cluster-health-collector.test.ts
deleted file mode 100644
index 666b0aee9..000000000
--- a/plugins/proxmox/tests/backend/proxmox/cluster-health-collector.test.ts
+++ /dev/null
@@ -1,66 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
-
-const execCommand = vi.fn();
-vi.mock("../../../src/backend/proxmox/common-utils.js", () => ({
-  execCommand: (...args: unknown[]) => execCommand(...args),
-}));
-
-import { collectProxmoxClusterHealth } from "../../../src/backend/proxmox/cluster-health-collector.js";
-import type { Client } from "ssh2";
-
-const fakeClient = {} as Client;
-
-function result(stdout: string, code: number | null = 0) {
-  return { stdout, stderr: "", code };
-}
-
-beforeEach(() => {
-  execCommand.mockReset();
-});
-
-describe("collectProxmoxClusterHealth", () => {
-  it("reports clustered:false for a standalone node (no cluster entry)", async () => {
-    execCommand.mockResolvedValueOnce(result(JSON.stringify([]), 0));
-    const res = await collectProxmoxClusterHealth(fakeClient);
-    expect(res).toEqual({ clustered: false });
-  });
-
-  it("parses a clustered response with quorum and node entries", async () => {
-    execCommand.mockResolvedValueOnce(
-      result(
-        JSON.stringify([
-          { type: "cluster", name: "prod-cluster", quorate: 1, nodes: 3 },
-          { type: "node", name: "pve1", online: 1, local: 1, ip: "10.0.0.1" },
-          { type: "node", name: "pve2", online: 0, local: 0, ip: "10.0.0.2" },
-        ]),
-      ),
-    );
-
-    const res = await collectProxmoxClusterHealth(fakeClient);
-    expect(res.clustered).toBe(true);
-    if (res.clustered) {
-      expect(res.quorate).toBe(true);
-      expect(res.clusterName).toBe("prod-cluster");
-      expect(res.nodes).toHaveLength(2);
-      expect(res.nodes[0]).toEqual({
-        name: "pve1",
-        online: true,
-        local: true,
-        ip: "10.0.0.1",
-      });
-      expect(res.nodes[1].online).toBe(false);
-    }
-  });
-
-  it("returns clustered:false when pvesh fails", async () => {
-    execCommand.mockResolvedValueOnce(result("", 1));
-    const res = await collectProxmoxClusterHealth(fakeClient);
-    expect(res).toEqual({ clustered: false });
-  });
-
-  it("returns clustered:false on malformed JSON", async () => {
-    execCommand.mockResolvedValueOnce(result("not json", 0));
-    const res = await collectProxmoxClusterHealth(fakeClient);
-    expect(res).toEqual({ clustered: false });
-  });
-});
diff --git a/plugins/proxmox/tests/backend/proxmox/collect-proxmox-stats.test.ts b/plugins/proxmox/tests/backend/proxmox/collect-proxmox-stats.test.ts
deleted file mode 100644
index 80dd48ff7..000000000
--- a/plugins/proxmox/tests/backend/proxmox/collect-proxmox-stats.test.ts
+++ /dev/null
@@ -1,70 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
-
-const execCommand = vi.fn();
-vi.mock("../../../src/backend/proxmox/common-utils.js", () => ({
-  execCommand: (...args: unknown[]) => execCommand(...args),
-  toFixedNum: (n: number | null | undefined, digits = 2) => {
-    if (typeof n !== "number" || !Number.isFinite(n)) return null;
-    return Number(n.toFixed(digits));
-  },
-}));
-
-import { collectProxmoxStats } from "../../../src/backend/proxmox/collect-proxmox-stats.js";
-import type { Client } from "ssh2";
-
-const fakeClient = {} as Client;
-
-function result(stdout: string, code: number | null = 0) {
-  return { stdout, stderr: "", code };
-}
-
-beforeEach(() => {
-  execCommand.mockReset();
-});
-
-describe("collectProxmoxStats", () => {
-  it("throws a distinguishable error when pvesh is missing", async () => {
-    execCommand.mockResolvedValueOnce(result("missing"));
-
-    await expect(collectProxmoxStats(fakeClient, null)).rejects.toThrow(
-      /pvesh not found/i,
-    );
-    // Only the pvesh-presence check should have run - no node resolution or
-    // per-collector execs once that check fails.
-    expect(execCommand).toHaveBeenCalledTimes(1);
-  });
-
-  it("auto-detects the node name via hostname when none is configured", async () => {
-    execCommand.mockResolvedValueOnce(result("ok")); // pvesh check
-    execCommand.mockResolvedValueOnce(result("pve-auto\n")); // hostname
-    // Five collectors run concurrently after that; give each a benign failing
-    // response so the aggregator still resolves with null-filled sub-shapes.
-    execCommand.mockResolvedValue(result("", 1));
-
-    const snapshot = await collectProxmoxStats(fakeClient, null);
-    expect(snapshot.lastChecked).toBeTruthy();
-    expect(snapshot.node).toBeDefined();
-    expect(snapshot.guests).toBeDefined();
-    expect(snapshot.storage).toBeDefined();
-    expect(snapshot.cluster).toEqual({ clustered: false });
-  });
-
-  it("uses the configured node name when it is safe, skipping hostname detection", async () => {
-    execCommand.mockResolvedValueOnce(result("ok")); // pvesh check
-    execCommand.mockResolvedValue(result("", 1)); // all collector calls fail benignly
-
-    await collectProxmoxStats(fakeClient, "my-node");
-
-    // hostname auto-detection command should never have been issued.
-    const calls = execCommand.mock.calls.map((c) => c[1] as string);
-    expect(calls).not.toContain("hostname");
-  });
-
-  it("rejects an unsafe configured node name", async () => {
-    execCommand.mockResolvedValueOnce(result("ok")); // pvesh check
-
-    await expect(collectProxmoxStats(fakeClient, "bad;node")).rejects.toThrow(
-      /valid Proxmox node name/i,
-    );
-  });
-});
diff --git a/plugins/proxmox/tests/backend/proxmox/guests-collector.test.ts b/plugins/proxmox/tests/backend/proxmox/guests-collector.test.ts
deleted file mode 100644
index f2cb5bab3..000000000
--- a/plugins/proxmox/tests/backend/proxmox/guests-collector.test.ts
+++ /dev/null
@@ -1,144 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
-
-const execCommand = vi.fn();
-vi.mock("../../../src/backend/proxmox/common-utils.js", () => ({
-  execCommand: (...args: unknown[]) => execCommand(...args),
-  toFixedNum: (n: number | null | undefined, digits = 2) => {
-    if (typeof n !== "number" || !Number.isFinite(n)) return null;
-    return Number(n.toFixed(digits));
-  },
-}));
-
-import { collectProxmoxGuestsSummary } from "../../../src/backend/proxmox/guests-collector.js";
-import type { Client } from "ssh2";
-
-const fakeClient = {} as Client;
-
-function result(stdout: string, code: number | null = 0) {
-  return { stdout, stderr: "", code };
-}
-
-beforeEach(() => {
-  execCommand.mockReset();
-});
-
-describe("collectProxmoxGuestsSummary", () => {
-  it("filters to the target node, excludes templates, and computes percentages", async () => {
-    execCommand.mockResolvedValueOnce(
-      result(
-        JSON.stringify([
-          {
-            type: "qemu",
-            node: "pve1",
-            vmid: 100,
-            name: "vm-a",
-            status: "running",
-            cpu: 0.25,
-            mem: 2 * 1024 ** 3,
-            maxmem: 4 * 1024 ** 3,
-            disk: 10 * 1024 ** 3,
-            maxdisk: 40 * 1024 ** 3,
-            uptime: 3600,
-          },
-          {
-            type: "lxc",
-            node: "pve1",
-            vmid: 101,
-            name: "ct-b",
-            status: "stopped",
-            cpu: 0,
-            mem: 0,
-            maxmem: 512 * 1024 ** 2,
-            disk: 0,
-            maxdisk: 8 * 1024 ** 3,
-            uptime: 0,
-          },
-          {
-            // different node - excluded
-            type: "qemu",
-            node: "pve2",
-            vmid: 200,
-            name: "elsewhere",
-            status: "running",
-          },
-          {
-            // template - excluded
-            type: "qemu",
-            node: "pve1",
-            vmid: 999,
-            name: "template",
-            status: "stopped",
-            template: 1,
-          },
-          {
-            // non-guest resource type - excluded
-            type: "storage",
-            node: "pve1",
-          },
-        ]),
-      ),
-    );
-
-    const res = await collectProxmoxGuestsSummary(fakeClient, "pve1");
-
-    expect(res.guests).toHaveLength(2);
-    expect(res.counts).toEqual({ running: 1, stopped: 1, total: 2 });
-
-    const vmA = res.guests.find((g) => g.vmid === 100)!;
-    expect(vmA.cpuPercent).toBe(25);
-    expect(vmA.memPercent).toBe(50);
-    expect(vmA.diskPercent).toBe(25);
-  });
-
-  it("reports null disk fields (not a false 0%) when maxdisk is 0", async () => {
-    execCommand.mockResolvedValueOnce(
-      result(
-        JSON.stringify([
-          {
-            type: "qemu",
-            node: "pve1",
-            vmid: 100,
-            name: "vm-no-agent",
-            status: "running",
-            cpu: 0.1,
-            mem: 1024,
-            maxmem: 2048,
-            disk: 0,
-            maxdisk: 0,
-            uptime: 10,
-          },
-        ]),
-      ),
-    );
-
-    const res = await collectProxmoxGuestsSummary(fakeClient, "pve1");
-    expect(res.guests[0].diskPercent).toBeNull();
-    expect(res.guests[0].diskUsedGiB).toBeNull();
-    expect(res.guests[0].diskTotalGiB).toBeNull();
-  });
-
-  it("returns an empty guest list when there are no matching resources", async () => {
-    execCommand.mockResolvedValueOnce(result(JSON.stringify([]), 0));
-    const res = await collectProxmoxGuestsSummary(fakeClient, "pve1");
-    expect(res.guests).toEqual([]);
-    expect(res.counts).toEqual({ running: 0, stopped: 0, total: 0 });
-  });
-
-  it("returns an empty result when pvesh is missing (non-zero exit)", async () => {
-    execCommand.mockResolvedValueOnce(result("", 127));
-    const res = await collectProxmoxGuestsSummary(fakeClient, "pve1");
-    expect(res.guests).toEqual([]);
-  });
-
-  it("returns an empty result on malformed JSON", async () => {
-    execCommand.mockResolvedValueOnce(result("{not json", 0));
-    const res = await collectProxmoxGuestsSummary(fakeClient, "pve1");
-    expect(res.guests).toEqual([]);
-  });
-
-  it("rejects an unsafe node name before running any command", async () => {
-    const res = await collectProxmoxGuestsSummary(fakeClient, "../etc");
-    expect(res.guests).toEqual([]);
-    expect(execCommand).not.toHaveBeenCalled();
-  });
-});
diff --git a/plugins/proxmox/tests/backend/proxmox/node-network-collector.test.ts b/plugins/proxmox/tests/backend/proxmox/node-network-collector.test.ts
deleted file mode 100644
index 8399fa4a6..000000000
--- a/plugins/proxmox/tests/backend/proxmox/node-network-collector.test.ts
+++ /dev/null
@@ -1,62 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
-
-const execCommand = vi.fn();
-vi.mock("../../../src/backend/proxmox/common-utils.js", () => ({
-  execCommand: (...args: unknown[]) => execCommand(...args),
-}));
-
-import { collectProxmoxNodeNetwork } from "../../../src/backend/proxmox/node-network-collector.js";
-import type { Client } from "ssh2";
-
-const fakeClient = {} as Client;
-
-function result(stdout: string, code: number | null = 0) {
-  return { stdout, stderr: "", code };
-}
-
-beforeEach(() => {
-  execCommand.mockReset();
-});
-
-describe("collectProxmoxNodeNetwork", () => {
-  it("rejects an unsafe node name before running any command", async () => {
-    const res = await collectProxmoxNodeNetwork(fakeClient, "bad;name");
-    expect(res.interfaces).toEqual([]);
-    expect(execCommand).not.toHaveBeenCalled();
-  });
-
-  it("falls back to /proc/net/dev when pvesh netstat fails", async () => {
-    // First call: pvesh netstat -> failure.
-    execCommand.mockResolvedValueOnce(result("", 1));
-    // Fallback calls: ip addr, ip link, /proc/net/dev.
-    execCommand.mockResolvedValueOnce(result("eth0 10.0.0.5/24\n"));
-    execCommand.mockResolvedValueOnce(result("eth0 UP\n"));
-    execCommand.mockResolvedValueOnce(
-      result(
-        "Inter-|   Receive\n" +
-          " face |bytes    packets\n" +
-          "eth0: 123456    10    0    0    0     0          0         0   654321   20    0    0    0     0       0          0\n",
-      ),
-    );
-
-    const res = await collectProxmoxNodeNetwork(fakeClient, "pve1");
-    expect(res.interfaces).toHaveLength(1);
-    expect(res.interfaces[0]).toMatchObject({
-      name: "eth0",
-      ip: "10.0.0.5",
-      state: "UP",
-      rxBytes: "123456",
-      txBytes: "654321",
-    });
-  });
-
-  it("falls back to /proc/net/dev when pvesh returns unparseable data", async () => {
-    execCommand.mockResolvedValueOnce(result("not json", 0));
-    execCommand.mockResolvedValueOnce(result(""));
-    execCommand.mockResolvedValueOnce(result(""));
-    execCommand.mockResolvedValueOnce(result("Inter-|   Receive\n face |\n"));
-
-    const res = await collectProxmoxNodeNetwork(fakeClient, "pve1");
-    expect(res.interfaces).toEqual([]);
-  });
-});
diff --git a/plugins/proxmox/tests/backend/proxmox/node-status-collector.test.ts b/plugins/proxmox/tests/backend/proxmox/node-status-collector.test.ts
deleted file mode 100644
index cd6a52638..000000000
--- a/plugins/proxmox/tests/backend/proxmox/node-status-collector.test.ts
+++ /dev/null
@@ -1,80 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
-
-const execCommand = vi.fn();
-vi.mock("../../../src/backend/proxmox/common-utils.js", () => ({
-  execCommand: (...args: unknown[]) => execCommand(...args),
-  toFixedNum: (n: number | null | undefined, digits = 2) => {
-    if (typeof n !== "number" || !Number.isFinite(n)) return null;
-    return Number(n.toFixed(digits));
-  },
-}));
-
-import { collectProxmoxNodeStatus } from "../../../src/backend/proxmox/node-status-collector.js";
-import type { Client } from "ssh2";
-
-const fakeClient = {} as Client;
-
-function result(stdout: string, code: number | null = 0) {
-  return { stdout, stderr: "", code };
-}
-
-beforeEach(() => {
-  execCommand.mockReset();
-});
-
-describe("collectProxmoxNodeStatus", () => {
-  it("parses a healthy pvesh /nodes/{node}/status response", async () => {
-    execCommand.mockResolvedValueOnce(
-      result(
-        JSON.stringify({
-          cpu: 0.15,
-          cpuinfo: { cores: 8 },
-          loadavg: ["0.5", "0.6", "0.7"],
-          memory: { used: 4 * 1024 ** 3, total: 16 * 1024 ** 3 },
-          rootfs: { used: 20 * 1024 ** 3, total: 100 * 1024 ** 3 },
-          uptime: 90061,
-          hostname: "pve1",
-          kversion: "Linux 6.8.0",
-          pveversion: "pve-manager/8.2.0",
-        }),
-      ),
-    );
-
-    const res = await collectProxmoxNodeStatus(fakeClient, "pve1");
-
-    expect(res.cpu.percent).toBe(15);
-    expect(res.cpu.cores).toBe(8);
-    expect(res.cpu.load).toEqual([0.5, 0.6, 0.7]);
-    expect(res.memory.percent).toBe(25);
-    expect(res.memory.usedGiB).toBeCloseTo(4, 1);
-    expect(res.memory.totalGiB).toBeCloseTo(16, 1);
-    expect(res.disk.percent).toBe(20);
-    expect(res.uptime.seconds).toBe(90061);
-    expect(res.uptime.formatted).toBe("1d 1h 1m");
-    expect(res.system.hostname).toBe("pve1");
-    expect(res.system.kernel).toBe("Linux 6.8.0");
-    expect(res.system.pveVersion).toBe("pve-manager/8.2.0");
-  });
-
-  it("returns a fully null-filled shape when pvesh exits non-zero", async () => {
-    execCommand.mockResolvedValueOnce(result("", 1));
-    const res = await collectProxmoxNodeStatus(fakeClient, "pve1");
-    expect(res.cpu.percent).toBeNull();
-    expect(res.memory.percent).toBeNull();
-    expect(res.disk.percent).toBeNull();
-    expect(res.uptime.seconds).toBeNull();
-    expect(res.system.hostname).toBeNull();
-  });
-
-  it("returns null-filled shape on malformed JSON", async () => {
-    execCommand.mockResolvedValueOnce(result("not json", 0));
-    const res = await collectProxmoxNodeStatus(fakeClient, "pve1");
-    expect(res.cpu.percent).toBeNull();
-  });
-
-  it("rejects an unsafe node name before running any command", async () => {
-    const res = await collectProxmoxNodeStatus(fakeClient, "pve1; rm -rf /");
-    expect(res.cpu.percent).toBeNull();
-    expect(execCommand).not.toHaveBeenCalled();
-  });
-});
diff --git a/plugins/proxmox/tests/backend/proxmox/storage-collector.test.ts b/plugins/proxmox/tests/backend/proxmox/storage-collector.test.ts
deleted file mode 100644
index d9aa02d9f..000000000
--- a/plugins/proxmox/tests/backend/proxmox/storage-collector.test.ts
+++ /dev/null
@@ -1,78 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
-
-const execCommand = vi.fn();
-vi.mock("../../../src/backend/proxmox/common-utils.js", () => ({
-  execCommand: (...args: unknown[]) => execCommand(...args),
-  toFixedNum: (n: number | null | undefined, digits = 2) => {
-    if (typeof n !== "number" || !Number.isFinite(n)) return null;
-    return Number(n.toFixed(digits));
-  },
-}));
-
-import { collectProxmoxStorage } from "../../../src/backend/proxmox/storage-collector.js";
-import type { Client } from "ssh2";
-
-const fakeClient = {} as Client;
-
-function result(stdout: string, code: number | null = 0) {
-  return { stdout, stderr: "", code };
-}
-
-beforeEach(() => {
-  execCommand.mockReset();
-});
-
-describe("collectProxmoxStorage", () => {
-  it("parses storage pools with usage percentages", async () => {
-    execCommand.mockResolvedValueOnce(
-      result(
-        JSON.stringify([
-          {
-            storage: "local",
-            type: "dir",
-            active: 1,
-            enabled: 1,
-            used: 20 * 1024 ** 3,
-            total: 100 * 1024 ** 3,
-            avail: 80 * 1024 ** 3,
-          },
-          {
-            storage: "local-zfs",
-            type: "zfspool",
-            active: 0,
-            enabled: 1,
-            used: 0,
-            total: 0,
-            avail: 0,
-          },
-        ]),
-      ),
-    );
-
-    const res = await collectProxmoxStorage(fakeClient, "pve1");
-    expect(res.pools).toHaveLength(2);
-    expect(res.pools[0].name).toBe("local");
-    expect(res.pools[0].active).toBe(true);
-    expect(res.pools[0].percent).toBe(20);
-    expect(res.pools[1].active).toBe(false);
-    expect(res.pools[1].percent).toBeNull();
-  });
-
-  it("returns an empty pool list when pvesh fails", async () => {
-    execCommand.mockResolvedValueOnce(result("", 1));
-    const res = await collectProxmoxStorage(fakeClient, "pve1");
-    expect(res.pools).toEqual([]);
-  });
-
-  it("returns an empty pool list on malformed JSON", async () => {
-    execCommand.mockResolvedValueOnce(result("nope", 0));
-    const res = await collectProxmoxStorage(fakeClient, "pve1");
-    expect(res.pools).toEqual([]);
-  });
-
-  it("rejects an unsafe node name before running any command", async () => {
-    const res = await collectProxmoxStorage(fakeClient, "$(whoami)");
-    expect(res.pools).toEqual([]);
-    expect(execCommand).not.toHaveBeenCalled();
-  });
-});
diff --git a/plugins/proxmox/tests/backend/repositories/proxmox-node-history-repository.test.ts b/plugins/proxmox/tests/backend/repositories/proxmox-node-history-repository.test.ts
deleted file mode 100644
index e65949912..000000000
--- a/plugins/proxmox/tests/backend/repositories/proxmox-node-history-repository.test.ts
+++ /dev/null
@@ -1,84 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { createTestDb, type TestDb } from "@termix/plugin-sdk/testing";
-import { proxmoxNodeHistory } from "../../../src/backend/tables.js";
-import {
-  createProxmoxNodeHistoryRepository,
-  type ProxmoxNodeHistoryRepository,
-} from "../../../src/backend/proxmox-node-history-repository.js";
-import { pluginDir } from "../helpers.js";
-
-describe("ProxmoxNodeHistoryRepository", () => {
-  let db: TestDb | null = null;
-
-  afterEach(() => {
-    db?.close();
-    db = null;
-  });
-
-  async function createRepository(): Promise<ProxmoxNodeHistoryRepository> {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec(
-          "INSERT INTO users (id, username) VALUES ('user-1', 'user-1'), ('user-2', 'user-2')",
-        );
-        sqlite.exec("INSERT INTO ssh_data (id) VALUES (1), (2)");
-      },
-      skipMigrations: false,
-    });
-    // Migrations already ran (adopting proxmox_node_history), so seed rows on
-    // the real table after the fact.
-    db.sqlite.exec(`
-      INSERT INTO p_proxmox_node_history (
-        host_id, ts, cpu_percent, mem_percent, disk_percent, net_rx_bytes, net_tx_bytes
-      )
-      VALUES
-        (1, '2026-01-01 00:00:00', 10, 20, 30, 100, 200),
-        (1, '2026-01-02 00:00:00', 11, 21, 31, 101, 201),
-        (1, '2999-01-01 00:00:00', 12, 22, 32, 102, 202),
-        (2, '2026-01-02 00:00:00', 99, 99, 99, 999, 999);
-    `);
-
-    return createProxmoxNodeHistoryRepository(
-      db.database,
-      await db.database.define(proxmoxNodeHistory),
-    );
-  }
-
-  it("creates and lists node history rows by range", async () => {
-    const repo = await createRepository();
-
-    await repo.create({
-      hostId: 1,
-      cpuPercent: 12,
-      memPercent: 22,
-      diskPercent: 32,
-      netRxBytes: 102,
-      netTxBytes: 202,
-    });
-
-    const rows = await repo.listRange(
-      1,
-      "2026-01-01 00:00:00",
-      "2026-01-02 23:59:59",
-    );
-
-    expect(rows.map((row) => row.cpuPercent)).toEqual([10, 11]);
-    expect(db!.persisted).toBe(1);
-  });
-
-  it("prunes old history for a host only", async () => {
-    const repo = await createRepository();
-
-    await repo.pruneOlderThan(1, 1);
-
-    const rows = await repo.listRange(
-      1,
-      "2000-01-01 00:00:00",
-      "2999-12-31 23:59:59",
-    );
-    expect(rows.map((row) => row.ts)).toEqual(["2999-01-01 00:00:00"]);
-    expect(
-      await repo.listRange(2, "2026-01-01 00:00:00", "2026-01-03 00:00:00"),
-    ).toHaveLength(1);
-  });
-});
diff --git a/plugins/proxmox/tests/backend/routes.test.ts b/plugins/proxmox/tests/backend/routes.test.ts
deleted file mode 100644
index c959e4f1d..000000000
--- a/plugins/proxmox/tests/backend/routes.test.ts
+++ /dev/null
@@ -1,12 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { guestPluginSettings } from "../../src/backend/routes.js";
-
-describe("guestPluginSettings", () => {
-  it("names the plugin that keeps each switch an imported guest needs", () => {
-    expect(guestPluginSettings("rdp", true)).toEqual({
-      "remote-desktop": { enableRdp: true, rdpPort: 3389 },
-      docker: { enableDocker: true },
-    });
-    expect(guestPluginSettings("ssh", false)).toEqual({});
-  });
-});
diff --git a/plugins/proxmox/tests/backend/sudo-capability.test.ts b/plugins/proxmox/tests/backend/sudo-capability.test.ts
deleted file mode 100644
index ab3f3d7a1..000000000
--- a/plugins/proxmox/tests/backend/sudo-capability.test.ts
+++ /dev/null
@@ -1,17 +0,0 @@
-import { describe, expect, it } from "vitest";
-import fs from "node:fs";
-import path from "node:path";
-
-// Elevated commands read the host's sudo password, which core only hands to
-// a plugin holding credentials:read.
-describe("sudo password access", () => {
-  it("declares credentials:read", () => {
-    const manifest = JSON.parse(
-      fs.readFileSync(
-        path.resolve(import.meta.dirname, "../../manifest.json"),
-        "utf8",
-      ),
-    );
-    expect(manifest.capabilities).toContain("credentials:read");
-  });
-});
diff --git a/plugins/proxmox/tests/frontend/activate.test.tsx b/plugins/proxmox/tests/frontend/activate.test.tsx
deleted file mode 100644
index 9c693739d..000000000
--- a/plugins/proxmox/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,72 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-const declared = (views?: Array<{ id: string }>) =>
-  (views ?? []).map((view) => view.id).sort();
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe(`${manifest.id} activate`, () => {
-  it("activates and registers only views its manifest declares", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    const contributes = manifest.contributes as unknown as Record<
-      string,
-      Array<{ id: string }> | undefined
-    >;
-    const tabs = declared(contributes.tabs);
-    // A rail panel may reuse one of the plugin's tab ids.
-    const panels = [...declared(contributes.panels), ...tabs];
-    const cards = declared(contributes.dashboardCards);
-    for (const id of rendered.registered.tabs()) expect(tabs).toContain(id);
-    for (const id of rendered.registered.panels()) expect(panels).toContain(id);
-    for (const id of rendered.registered.dashboardCards()) {
-      expect(cards).toContain(id);
-    }
-  });
-
-  it("reads its switches from its own host settings", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    const host = (settings: Record<string, unknown>) => ({
-      id: "1",
-      name: "pve",
-      ip: "10.0.0.1",
-      port: 22,
-      pluginSettings: { proxmox: settings },
-    });
-    const ids = (settings: Record<string, unknown>) =>
-      rendered!.registered.hostActionsFor(host(settings)).map((a) => a.id);
-    expect(ids({ enableProxmox: true })).toContain("proxmox-discover");
-    expect(ids({})).not.toContain("proxmox-discover");
-    expect(ids({ enableProxmoxStats: true })).toContain("proxmox-stats");
-    expect(plugin.proxmoxSettings(host({ enableProxmoxStats: true }))).toEqual({
-      enableProxmoxStats: true,
-    });
-  });
-
-  it("removes everything it registered on deactivate", async () => {
-    const app = await renderWithApp(plugin, { manifest, locales });
-    await app.deactivate();
-    expect(app.registered.tabs()).toEqual([]);
-    expect(app.registered.panels()).toEqual([]);
-    expect(app.registered.railItems()).toEqual([]);
-    expect(app.registered.hostActions()).toEqual([]);
-    expect(app.registered.hostEditorSections()).toEqual([]);
-    expect(app.registered.dashboardCards()).toEqual([]);
-    expect(app.registered.settingsComponents()).toEqual([]);
-    expect(app.registered.actions()).toEqual([]);
-  });
-});
diff --git a/plugins/proxmox/tests/frontend/proxmox-import-auth.test.ts b/plugins/proxmox/tests/frontend/proxmox-import-auth.test.ts
deleted file mode 100644
index 3120cc95b..000000000
--- a/plugins/proxmox/tests/frontend/proxmox-import-auth.test.ts
+++ /dev/null
@@ -1,59 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { resolveProxmoxImportAuth } from "../../src/frontend/proxmox-import-auth";
-
-describe("resolveProxmoxImportAuth", () => {
-  it("inherits an available credential even with the default 'password' authType", () => {
-    // Regression guard: a Proxmox host authenticating via a Termix credential
-    // used to yield authType 'none' for imported guests because the default
-    // authType is 'password', not 'credential'.
-    expect(resolveProxmoxImportAuth("password", 42)).toEqual({
-      authType: "credential",
-      credentialId: 42,
-      overrideCredentialUsername: false,
-    });
-  });
-
-  it("uses the credential when authType is explicitly 'credential'", () => {
-    expect(resolveProxmoxImportAuth("credential", 7)).toEqual({
-      authType: "credential",
-      credentialId: 7,
-      overrideCredentialUsername: false,
-    });
-  });
-
-  it("uses the credential when no authType is given", () => {
-    expect(resolveProxmoxImportAuth(undefined, 5)).toEqual({
-      authType: "credential",
-      credentialId: 5,
-      overrideCredentialUsername: false,
-    });
-  });
-
-  it("lets an explicit secretless authType win over an available credential", () => {
-    expect(resolveProxmoxImportAuth("none", 42)).toEqual({ authType: "none" });
-    expect(resolveProxmoxImportAuth("tailscale", 42)).toEqual({
-      authType: "tailscale",
-    });
-    expect(resolveProxmoxImportAuth("agent", 42)).toEqual({
-      authType: "agent",
-    });
-  });
-
-  it("falls back to 'none' when no credential is available", () => {
-    expect(resolveProxmoxImportAuth("password", null)).toEqual({
-      authType: "none",
-    });
-    expect(resolveProxmoxImportAuth("key", undefined)).toEqual({
-      authType: "none",
-    });
-    expect(resolveProxmoxImportAuth(undefined, undefined)).toEqual({
-      authType: "none",
-    });
-  });
-
-  it("passes through a non secret-backed special type without a credential", () => {
-    expect(resolveProxmoxImportAuth("opkssh", null)).toEqual({
-      authType: "opkssh",
-    });
-  });
-});
diff --git a/plugins/proxmox/tests/frontend/stats/ProxmoxStatsTab.test.tsx b/plugins/proxmox/tests/frontend/stats/ProxmoxStatsTab.test.tsx
deleted file mode 100644
index fc4cfdf54..000000000
--- a/plugins/proxmox/tests/frontend/stats/ProxmoxStatsTab.test.tsx
+++ /dev/null
@@ -1,45 +0,0 @@
-import { cleanup, render, screen } from "@testing-library/react";
-import "@testing-library/jest-dom/vitest";
-import { afterEach, describe, expect, it, vi } from "vitest";
-
-vi.mock("@termix/plugin-sdk/frontend", async (importOriginal) => ({
-  ...(await importOriginal<Record<string, unknown>>()),
-  useTranslation: () => ({ t: (key: string) => key, language: "en" }),
-  usePluginApi: () => ({}),
-  useHosts: () => ({ hosts: [] }),
-}));
-
-vi.mock("../../../src/frontend/stats/proxmox-stats-api", () => ({
-  createProxmoxStatsApi: () => ({
-    startPolling: () => new Promise(() => {}),
-    stopPolling: () => Promise.resolve(),
-    getSnapshot: () => new Promise(() => {}),
-    sendHeartbeat: () => Promise.resolve(),
-  }),
-}));
-
-import { ProxmoxStatsTab } from "../../../src/frontend/stats/ProxmoxStatsTab";
-
-const host = (proxmox: Record<string, unknown>) => ({
-  id: 1,
-  name: "pve",
-  ip: "10.0.0.1",
-  username: "root",
-  pluginSettings: { proxmox },
-});
-
-afterEach(cleanup);
-
-describe("ProxmoxStatsTab", () => {
-  it("reads the stats switch from the plugin host settings", () => {
-    render(<ProxmoxStatsTab hostConfig={host({ enableProxmoxStats: true })} />);
-    expect(
-      screen.queryByText("proxmoxStats.noHostSelected"),
-    ).not.toBeInTheDocument();
-  });
-
-  it("shows the empty state when stats are off for the host", () => {
-    render(<ProxmoxStatsTab hostConfig={host({})} />);
-    expect(screen.getByText("proxmoxStats.noHostSelected")).toBeInTheDocument();
-  });
-});
diff --git a/plugins/proxmox/tsconfig.json b/plugins/proxmox/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/proxmox/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/proxmox/vitest.config.ts b/plugins/proxmox/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/proxmox/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/remote-desktop/CHANGELOG.md b/plugins/remote-desktop/CHANGELOG.md
deleted file mode 100644
index 0b364ff91..000000000
--- a/plugins/remote-desktop/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Adds RDP, VNC and Telnet sessions in the browser through guacd. Supports clipboard, file transfer through RDP drive redirection, session recording and session sharing.
diff --git a/plugins/remote-desktop/README.md b/plugins/remote-desktop/README.md
deleted file mode 100644
index 148596406..000000000
--- a/plugins/remote-desktop/README.md
+++ /dev/null
@@ -1,68 +0,0 @@
-# Remote Desktop
-
-RDP, VNC and Telnet sessions in the browser, with clipboard, file transfer, recording and sharing.
-
-## Features
-
-- Connect to hosts over RDP, VNC or Telnet from any browser.
-- Clipboard sync and file transfer through RDP drive redirection.
-- Session recording and session sharing, when those plugins are on.
-- Jump host support.
-- Opens the Windows Remote Desktop client from the desktop app.
-
-## Setup
-
-This plugin needs guacd, the Apache Guacamole proxy that speaks RDP, VNC and Telnet. The Docker compose file runs it as its own `guacamole/guacd` container. This plugin never starts guacd itself.
-
-Set where guacd runs with the guacd URL admin setting. The `GUACD_URL`, or `GUACD_HOST` and `GUACD_PORT`, environment variables override that setting.
-
-Other environment variables:
-
-| Variable                       | What it sets                                                                      |
-| ------------------------------ | --------------------------------------------------------------------------------- |
-| `GUACD_TUNNEL_HOST`            | The name guacd uses to reach Termix for a jump host tunnel. Defaults to `termix`. |
-| `GUACD_RECORDING_PATH`         | Where guacd writes recordings, as guacd sees it.                                  |
-| `GUACD_RECORDING_BACKEND_PATH` | The same folder, as Termix sees it.                                               |
-| `GUACD_DRIVE_PATH`             | The root of each user's RDP drive folder on the guacd host.                       |
-| `GUACAMOLE_ENCRYPTION_KEY`     | The connection token key. Made from `JWT_SECRET` when not set.                    |
-
-## Settings
-
-### Admin
-
-- Enable Remote Desktop: turn remote desktop on or off.
-- guacd URL: where guacd runs, as `host:port`. Changes apply without a restart.
-
-### User
-
-- RDP defaults: color depth, resize method, wallpaper, font smoothing, audio, printing, drive redirection and clipboard. A host's own values win over these.
-
-### Host
-
-- RDP, VNC and Telnet: turn each protocol on and set its port.
-- RDP security mode and Ignore certificate errors.
-- guacd settings: every other guacd option.
-- Remote desktop toolbar: show the toolbar in the session.
-
-## Permissions
-
-- `remote-desktop.sessions`: Let session sharing and recording reach your remote desktop sessions. Admins and users have it by default.
-
-## Services
-
-Provides to other plugins:
-
-- `sessions.live` as `rdp`, `vnc` and `telnet`: find a live session so it can be shared.
-
-Uses from other plugins:
-
-- `recordings.writer` to record sessions. Optional.
-- `tunnels.access` for single-hop jump host tunnels. Optional.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/remote-desktop/locales/en.json b/plugins/remote-desktop/locales/en.json
deleted file mode 100644
index 5f3c58597..000000000
--- a/plugins/remote-desktop/locales/en.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "Connecting to {{type}} session...",
-    "checkingGuacd": "Checking remote desktop service...",
-    "requestingToken": "Requesting {{type}} connection token...",
-    "openingSession": "Opening {{type}} session...",
-    "negotiating": "Negotiating {{type}} handshake...",
-    "sessionReady": "{{type}} session ready",
-    "connectionError": "Connection error",
-    "connectionFailed": "Connection failed",
-    "failedToConnect": "Failed to get connection token",
-    "hostNotFound": "Host not found",
-    "noHostSelected": "No host selected",
-    "reconnect": "Reconnect",
-    "retry": "Retry",
-    "guacdUnavailable": "Remote desktop service (guacd) is not available. Please ensure guacd is running and accessible and configured properly in admin settings.",
-    "credentialPromptTitle": "Enter RDP Credentials",
-    "credentialPromptDescription": "This host is set to prompt for credentials on connect. They are used for this session only and are not saved.",
-    "connect": "Connect",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "Drive Files",
-      "parent": "Parent directory",
-      "refresh": "Refresh",
-      "empty": "This folder is empty",
-      "listFailed": "Failed to read this folder",
-      "download": "Download",
-      "downloadFailed": "Failed to download {{name}}",
-      "upload": "Upload files",
-      "uploading": "Uploading {{name}}...",
-      "uploaded": "Uploaded {{name}}",
-      "uploadFailed": "Failed to upload {{name}}",
-      "uploadDisabled": "Uploads are disabled for this connection",
-      "driveUnavailable": "Enable RDP drive redirection before uploading files",
-      "driveNotWritable": "guacd cannot write to the drive folder. Check GUACD_DRIVE_PATH (or the host's Drive Path) and its permissions.",
-      "dropToUpload": "Drop files to upload"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (Lock Screen)",
-      "winKey": "Windows Key",
-      "superL": "Super+L (Lock Screen)",
-      "superKey": "Super Key",
-      "super": "Super",
-      "cmdL": "Cmd+L (Lock Screen)",
-      "cmdKey": "Command Key",
-      "cmd": "Cmd",
-      "ctrl": "Ctrl",
-      "alt": "Alt",
-      "shift": "Shift",
-      "win": "Win",
-      "stickyActive": "{{key}} (latched - click to release)",
-      "stickyInactive": "{{key}} (click to latch)",
-      "esc": "Escape",
-      "tab": "Tab",
-      "home": "Home",
-      "end": "End",
-      "pageUp": "Page Up",
-      "pageDown": "Page Down",
-      "arrowUp": "Arrow Up",
-      "arrowDown": "Arrow Down",
-      "arrowLeft": "Arrow Left",
-      "arrowRight": "Arrow Right",
-      "fnToggle": "Function Keys",
-      "reconnect": "Reconnect Session",
-      "collapse": "Collapse toolbar",
-      "expand": "Expand toolbar",
-      "dragHandle": "Drag to reposition",
-      "hide": "Hide for this session. To disable it permanently, open Host Settings → General → Connection Toolbar.",
-      "zoomIn": "Zoom in",
-      "zoomOut": "Zoom out",
-      "resetZoom": "Reset zoom",
-      "fitToScreen": "Fit to screen",
-      "switchToTrackpad": "Switch to trackpad mode (drag to move cursor, tap to click)",
-      "switchToTouch": "Switch to touch mode (tap directly where you want to click)"
-    },
-    "disabled": "Remote Desktop is turned off. An admin can turn it on in Settings."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Opened in Windows Remote Desktop",
-    "nativeRdpFailed": "Failed to open Windows Remote Desktop",
-    "openNativeRdp": "Open in Windows Remote Desktop",
-    "guac": {
-      "toolbar": "Toolbar",
-      "connection": "Connection",
-      "authentication": "Authentication",
-      "storedCredential": "Stored Credential",
-      "authMethod": "Auth Method",
-      "authTypeDirect": "Direct",
-      "authTypeCredential": "Credential",
-      "authTypeNone": "None",
-      "authTypeNoneDesc": "No credentials are stored. You'll be prompted for a username and password each time you connect; they are not saved.",
-      "selectCredential": "Select a credential...",
-      "connectionSettings": "Connection Settings",
-      "displaySettings": "Display Settings",
-      "audioSettings": "Audio Settings",
-      "rdpPerformance": "RDP Performance",
-      "deviceRedirection": "Device Redirection",
-      "session": "Session",
-      "gateway": "Gateway",
-      "remoteApp": "RemoteApp",
-      "clipboard": "Clipboard",
-      "sessionRecording": "Session Recording",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "VNC Settings",
-      "terminalSettings": "Terminal Settings",
-      "rdpPort": "RDP Port",
-      "username": "Username",
-      "password": "Password",
-      "passwordSaved": "Password saved, type to change",
-      "domain": "Domain",
-      "securityMode": "Security Mode",
-      "width": "Width",
-      "height": "Height",
-      "dpi": "DPI",
-      "clientName": "Client Name",
-      "initialProgram": "Initial Program",
-      "serverLayout": "Server Layout",
-      "timezone": "Timezone",
-      "loadBalanceInfo": "Load Balance Info / Cookie",
-      "loadBalanceInfoDesc": "RD Connection Broker cookie for RDS farm load balancing (e.g. tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "guacd Proxy",
-      "guacdHostname": "guacd Host",
-      "guacdHostnamePlaceholder": "Global default",
-      "guacdPort": "guacd Port",
-      "guacdProxyDesc": "Override the global guacd instance for this connection. Leave blank to use the globally configured guacd.",
-      "gatewayHostname": "Gateway Hostname",
-      "gatewayPort": "Gateway Port",
-      "gatewayUsername": "Gateway Username",
-      "gatewayPassword": "Gateway Password",
-      "gatewayDomain": "Gateway Domain",
-      "remoteAppProgram": "RemoteApp Program",
-      "workingDirectory": "Working Directory",
-      "arguments": "Arguments",
-      "normalizeLineEndings": "Normalize Line Endings",
-      "macAddress": "MAC Address",
-      "broadcastAddress": "Broadcast Address",
-      "udpPort": "UDP Port",
-      "waitTimeS": "Wait Time (s)",
-      "driveName": "Drive Name",
-      "drivePath": "Drive Path",
-      "ignoreCertificate": "Ignore Certificate",
-      "ignoreCertificateDesc": "Allow connections to hosts with self-signed certificates",
-      "forceLossless": "Force Lossless",
-      "forceLosslessDesc": "Force lossless image encoding (higher quality, more bandwidth)",
-      "disableAudio": "Disable Audio",
-      "disableAudioDesc": "Mute all audio from the remote session",
-      "enableAudioInput": "Enable Audio Input (Microphone)",
-      "enableAudioInputDesc": "Forward local microphone to the remote session",
-      "wallpaper": "Wallpaper",
-      "wallpaperDesc": "Show desktop wallpaper (disabling improves performance)",
-      "theming": "Theming",
-      "themingDesc": "Enable visual themes and styles",
-      "fontSmoothing": "Font Smoothing",
-      "fontSmoothingDesc": "Enable ClearType font rendering",
-      "fullWindowDrag": "Full Window Drag",
-      "fullWindowDragDesc": "Show window contents while dragging",
-      "desktopComposition": "Desktop Composition",
-      "desktopCompositionDesc": "Enable Aero glass effects",
-      "menuAnimations": "Menu Animations",
-      "menuAnimationsDesc": "Enable menu fade and slide animations",
-      "disableBitmapCaching": "Disable Bitmap Caching",
-      "disableBitmapCachingDesc": "Turn off bitmap cache (may help with glitches)",
-      "disableOffscreenCaching": "Disable Offscreen Caching",
-      "disableOffscreenCachingDesc": "Turn off offscreen cache",
-      "disableGlyphCaching": "Disable Glyph Caching",
-      "disableGlyphCachingDesc": "Turn off glyph cache",
-      "enableGfx": "Enable GFX",
-      "enableGfxDesc": "Use RemoteFX graphics pipeline",
-      "enablePrinting": "Enable Printing",
-      "enablePrintingDesc": "Redirect local printers to the remote session",
-      "enableDriveRedirection": "Enable Drive Redirection",
-      "enableDriveRedirectionDesc": "Map a local folder as a drive in the remote session",
-      "createDrivePath": "Create Drive Path",
-      "createDrivePathDesc": "Automatically create the folder if it does not exist",
-      "disableDownload": "Disable Download",
-      "disableDownloadDesc": "Prevent downloading files from the remote session",
-      "disableUpload": "Disable Upload",
-      "disableUploadDesc": "Prevent uploading files to the remote session",
-      "enableTouch": "Enable Touch",
-      "enableTouchDesc": "Enable touch input forwarding",
-      "consoleSession": "Console Session",
-      "consoleSessionDesc": "Connect to the console (session 0) instead of a new session",
-      "sendWolPacket": "Send WOL Packet",
-      "sendWolPacketDesc": "Send a magic packet to wake this host before connecting",
-      "disableCopy": "Disable Copy",
-      "disableCopyDesc": "Prevent copying text from the remote session",
-      "disablePaste": "Disable Paste",
-      "disablePasteDesc": "Prevent pasting text into the remote session",
-      "createPathIfMissing": "Create Path if Missing",
-      "createPathIfMissingDesc": "Automatically create the recording directory",
-      "excludeOutput": "Exclude Output",
-      "excludeOutputDesc": "Do not record screen output (metadata only)",
-      "excludeMouse": "Exclude Mouse",
-      "excludeMouseDesc": "Do not record mouse movements",
-      "includeKeystrokes": "Include Keystrokes",
-      "includeKeystrokesDesc": "Record raw keystrokes in addition to screen output",
-      "vncPort": "VNC Port",
-      "vncPassword": "VNC Password",
-      "vncUsernameOptional": "Username (optional)",
-      "vncLeaveBlank": "Leave blank if not required",
-      "cursorMode": "Cursor Mode",
-      "swapRedBlue": "Swap Red/Blue",
-      "swapRedBlueDesc": "Swap the red and blue color channels (fixes some colour issues)",
-      "readOnly": "Read-only",
-      "readOnlyDesc": "View the remote screen without sending any input",
-      "telnetPort": "Telnet Port",
-      "terminalType": "Terminal Type",
-      "fontName": "Font Name",
-      "fontSize": "Font Size",
-      "colorScheme": "Color Scheme",
-      "backspaceKey": "Backspace Key",
-      "colorDepth": "Color Depth",
-      "resizeMethod": "Resize Method",
-      "driveNamePlaceholder": "Termix Drive",
-      "options": {
-        "any": "Any",
-        "auto": "Auto",
-        "nlaExtended": "NLA Extended",
-        "color8": "8-bit",
-        "color16": "16-bit",
-        "color24": "24-bit",
-        "color32": "32-bit",
-        "displayUpdate": "Display Update",
-        "reconnect": "Reconnect",
-        "preserve": "Preserve",
-        "unix": "Unix (LF)",
-        "windows": "Windows (CRLF)",
-        "local": "Local",
-        "remote": "Remote",
-        "failsafe": "failsafe",
-        "blackOnWhite": "Black on White",
-        "whiteOnBlack": "White on Black",
-        "grayOnBlack": "Gray on Black",
-        "greenOnBlack": "Green on Black"
-      }
-    },
-    "remoteDesktop": "Remote Desktop",
-    "tabRdp": "RDP",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "Virtual Network",
-    "unencryptedShell": "Unencrypted shell",
-    "remoteDesktopNotes": "Notes",
-    "userDefaultsNote": "Settings you leave unchanged follow your host defaults.",
-    "connectionOriginNote": "On the desktop app, RDP, VNC and Telnet use the remote server unless the host is set to This device, which needs a guacd this machine can reach. Set one in the Remote Desktop settings, or per host under guacd Proxy.",
-    "docsLink": "View docs",
-    "connectionOriginGuacamoleNote": "RDP, VNC and Telnet use the remote server unless you pick \"This device\", which needs a guacd this machine can reach. Set one in the guacd URL setting, or per host under guacd Proxy."
-  },
-  "onboarding": {
-    "feature_desktop": "Remote desktop",
-    "feature_desktop_desc": "Open RDP, VNC and Telnet sessions in a tab, same as SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Color Depth",
-        "description": "Used for RDP hosts that leave it on their default."
-      },
-      "resizeMethod": {
-        "label": "Resize Method",
-        "description": "How the remote screen follows the window size."
-      },
-      "resizeDisplayUpdate": "Display Update",
-      "resizeReconnect": "Reconnect",
-      "inherit": "Inherit",
-      "on": "On",
-      "off": "Off",
-      "forceLossless": {
-        "label": "Force Lossless",
-        "description": "Force lossless image encoding (higher quality, more bandwidth)"
-      },
-      "enableWallpaper": {
-        "label": "Wallpaper",
-        "description": "Show desktop wallpaper (disabling improves performance)"
-      },
-      "enableFontSmoothing": {
-        "label": "Font Smoothing",
-        "description": "Enable ClearType font rendering"
-      },
-      "enableDesktopComposition": {
-        "label": "Desktop Composition",
-        "description": "Enable Aero glass effects"
-      },
-      "disableAudio": {
-        "label": "Disable Audio",
-        "description": "Mute all audio from the remote session"
-      },
-      "enablePrinting": {
-        "label": "Enable Printing",
-        "description": "Redirect local printers to the remote session"
-      },
-      "enableDrive": {
-        "label": "Enable Drive Redirection",
-        "description": "Map a local folder as a drive in the remote session"
-      },
-      "disableCopy": {
-        "label": "Disable Copy",
-        "description": "Prevent copying text from the remote session"
-      },
-      "disablePaste": {
-        "label": "Disable Paste",
-        "description": "Prevent pasting text into the remote session"
-      },
-      "group": "Remote Desktop defaults",
-      "colorDepth16": "16-bit",
-      "colorDepth24": "24-bit",
-      "colorDepth32": "32-bit"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Enable Remote Desktop",
-        "description": "Allow RDP, VNC and Telnet connections through guacd."
-      },
-      "guacdUrl": {
-        "label": "guacd URL",
-        "description": "Where guacd listens, as host:port. The GUACD_URL, GUACD_HOST and GUACD_PORT environment variables override this.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "RDP"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "RDP port"
-      },
-      "vncPort": {
-        "label": "VNC port"
-      },
-      "telnetPort": {
-        "label": "Telnet port"
-      },
-      "rdpSecurity": {
-        "label": "RDP security mode"
-      },
-      "rdpIgnoreCert": {
-        "label": "Ignore certificate errors"
-      },
-      "guacamoleConfig": {
-        "label": "guacd settings"
-      },
-      "enableToolbar": {
-        "label": "Remote desktop toolbar",
-        "description": "Show the toolbar in RDP, VNC and Telnet sessions."
-      },
-      "displayGroup": "Display",
-      "displayDefaultsTab": "Remote Desktop"
-    }
-  },
-  "palette": {
-    "connectRdp": "Connect with RDP",
-    "connectVnc": "Connect with VNC",
-    "connectTelnet": "Connect with Telnet"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Share remote desktop sessions",
-      "description": "Let session sharing and collab rooms show this user's RDP, VNC and Telnet sessions to others."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Remote server required. Connect a remote server in Settings to use this connection type."
-  },
-  "plugin": {
-    "name": "Remote Desktop"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/af_ZA.json b/plugins/remote-desktop/locales/translated/af_ZA.json
deleted file mode 100644
index ce3b0406a..000000000
--- a/plugins/remote-desktop/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "Verbind met {{type}} sessie...",
-    "checkingGuacd": "Kontroleer tans afstandwerkskermdiens...",
-    "requestingToken": "Versoek tans {{type}} verbindingstoken...",
-    "openingSession": "Maak {{type}} sessie oop...",
-    "negotiating": "Onderhandel {{type}} handdruk...",
-    "sessionReady": "{{type}} sessie gereed",
-    "connectionError": "Verbindingsfout",
-    "connectionFailed": "Verbinding het misluk",
-    "failedToConnect": "Kon nie verbindingstoken kry nie",
-    "hostNotFound": "Gasheer nie gevind nie",
-    "noHostSelected": "Geen gasheer gekies nie",
-    "reconnect": "Herkoppel",
-    "retry": "Probeer weer",
-    "guacdUnavailable": "Diens vir afstandwerkskerm (guacd) is nie beskikbaar nie. Maak asseblief seker dat guacd loop, toeganklik is en behoorlik in administrateurinstellings gekonfigureer is.",
-    "credentialPromptTitle": "Voer RDP-aanbewyse in",
-    "credentialPromptDescription": "Hierdie gasheer is ingestel om vir geloofsbriewe te vra tydens verbinding. Hulle word slegs vir hierdie sessie gebruik en word nie gestoor nie.",
-    "connect": "Verbind",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "Drive-lêers",
-      "parent": "Ouergids",
-      "refresh": "Verfris",
-      "empty": "Hierdie vouer is leeg",
-      "listFailed": "Kon nie hierdie vouer lees nie",
-      "download": "Laai af",
-      "downloadFailed": "Kon nie {{name}} aflaai nie",
-      "upload": "Laai lêers op",
-      "uploading": "Laai tans {{name}} op ...",
-      "uploaded": "Opgelaai {{name}}",
-      "uploadFailed": "Kon nie {{name}} oplaai nie",
-      "uploadDisabled": "Oplaaie is gedeaktiveer vir hierdie verbinding",
-      "driveUnavailable": "Aktiveer RDP-skyfherleiding voordat lêers opgelaai word",
-      "driveNotWritable": "guacd kan nie na die skyf se lêergids skryf nie. Kontroleer GUACD_DRIVE_PATH (of die gasheer se skyfpad) en sy toestemmings.",
-      "dropToUpload": "Laat lêers los om op te laai"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (Sluitskerm)",
-      "winKey": "Windows-sleutel",
-      "superL": "Super+L (Sluitskerm)",
-      "superKey": "Supersleutel",
-      "super": "Super",
-      "cmdL": "Cmd+L (Sluitskerm)",
-      "cmdKey": "Opdragsleutel",
-      "cmd": "Cmd",
-      "ctrl": "Ctrl",
-      "alt": "Alt",
-      "shift": "Skof",
-      "win": "Wen",
-      "stickyActive": "{{key}} (vasgeklem - klik om los te maak)",
-      "stickyInactive": "{{key}} (klik om te sluit)",
-      "esc": "Ontsnapping",
-      "tab": "Oortjie",
-      "home": "Tuis",
-      "end": "Einde",
-      "pageUp": "Bladsy op",
-      "pageDown": "Bladsy af",
-      "arrowUp": "Pyltjie Op",
-      "arrowDown": "Pyltjie Af",
-      "arrowLeft": "Pyltjie links",
-      "arrowRight": "Pyltjie Regs",
-      "fnToggle": "Funksiesleutels",
-      "reconnect": "Herkoppel Sessie",
-      "collapse": "Vou nutsbalk in",
-      "expand": "Vou die nutsbalk uit",
-      "dragHandle": "Sleep om te herposisioneer",
-      "hide": "Versteek vir hierdie sessie. Om dit permanent te deaktiveer, maak Gasheerinstellings → Algemeen → Verbindingsnutsbalk oop.",
-      "zoomIn": "Zoem in",
-      "zoomOut": "Zoem uit",
-      "resetZoom": "Stel zoom terug",
-      "fitToScreen": "Pas by skerm",
-      "switchToTrackpad": "Skakel oor na raakvlakmodus (sleep om wyser te beweeg, tik om te klik)",
-      "switchToTouch": "Skakel oor na raakmodus (tik direk waar jy wil klik)"
-    },
-    "disabled": "Afstandslessenaar is afgeskakel. 'n Administrateur kan dit in Instellings aanskakel."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Geopen in Windows Afstandslessenaar",
-    "nativeRdpFailed": "Kon nie Windows Remote Desktop oopmaak nie",
-    "openNativeRdp": "Maak oop in Windows Afstandslessenaar",
-    "guac": {
-      "toolbar": "Nutsbalk",
-      "connection": "Verbinding",
-      "authentication": "Verifikasie",
-      "storedCredential": "Gestoorde geloofsbriewe",
-      "authMethod": "Magtigingsmetode",
-      "authTypeDirect": "Direkte",
-      "authTypeCredential": "Geloofsbrief",
-      "authTypeNone": "Geen",
-      "authTypeNoneDesc": "Geen aanmeldingsbesonderhede word gestoor nie. Jy sal elke keer as jy koppel vir 'n gebruikersnaam en wagwoord gevra word; hulle word nie gestoor nie.",
-      "selectCredential": "Kies 'n geloofsbrief...",
-      "connectionSettings": "Verbindingsinstellings",
-      "displaySettings": "Skerminstellings",
-      "audioSettings": "Oudio-instellings",
-      "rdpPerformance": "RDP-prestasie",
-      "deviceRedirection": "Toestelherleiding",
-      "session": "Sessie",
-      "gateway": "Poort",
-      "remoteApp": "Afstandsprogram",
-      "clipboard": "Klembord",
-      "sessionRecording": "Sessie-opname",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "VNC-instellings",
-      "terminalSettings": "Terminaalinstellings",
-      "rdpPort": "RDP-poort",
-      "username": "Gebruikersnaam",
-      "password": "Wagwoord",
-      "passwordSaved": "Wagwoord gestoor, tik om te verander",
-      "domain": "Domein",
-      "securityMode": "Sekuriteitsmodus",
-      "width": "Breedte",
-      "height": "Hoogte",
-      "dpi": "DPI",
-      "clientName": "Kliëntnaam",
-      "initialProgram": "Aanvanklike Program",
-      "serverLayout": "Bedieneruitleg",
-      "timezone": "Tydsone",
-      "loadBalanceInfo": "Laaibalansinligting / Koekie",
-      "loadBalanceInfoDesc": "RD Connection Broker-koekie vir RDS-plaaslasbalansering (bv. tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "guacd Proxy",
-      "guacdHostname": "guacd-gasheer",
-      "guacdHostnamePlaceholder": "Globale verstekwaarde",
-      "guacdPort": "guacd-hawe",
-      "guacdProxyDesc": "Ignoreer die globale guacd-instansie vir hierdie verbinding. Los leeg om die globaal gekonfigureerde guacd te gebruik.",
-      "gatewayHostname": "Gateway-gasheernaam",
-      "gatewayPort": "Gateway-poort",
-      "gatewayUsername": "Gateway-gebruikersnaam",
-      "gatewayPassword": "Gateway-wagwoord",
-      "gatewayDomain": "Gateway-domein",
-      "remoteAppProgram": "RemoteApp-program",
-      "workingDirectory": "Werkgids",
-      "arguments": "Argumente",
-      "normalizeLineEndings": "Normaliseer Lyn Eindigings",
-      "macAddress": "MAC-adres",
-      "broadcastAddress": "Uitsaaiadres",
-      "udpPort": "UDP-poort",
-      "waitTimeS": "Wagtyd (s)",
-      "driveName": "Skyfnaam",
-      "drivePath": "Rypad",
-      "ignoreCertificate": "Ignoreer Sertifikaat",
-      "ignoreCertificateDesc": "Laat verbindings na gashere met selfgetekende sertifikate toe",
-      "forceLossless": "Forseer verliesloos",
-      "forceLosslessDesc": "Forseer verlieslose beeldkodering (hoër gehalte, meer bandwydte)",
-      "disableAudio": "Deaktiveer oudio",
-      "disableAudioDesc": "Demp alle klank van die afstandsessie",
-      "enableAudioInput": "Aktiveer oudio-invoer (mikrofoon)",
-      "enableAudioInputDesc": "Stuur plaaslike mikrofoon na die afgeleë sessie aan",
-      "wallpaper": "Agtergrond",
-      "wallpaperDesc": "Wys lessenaar agtergrond (deaktivering verbeter werkverrigting)",
-      "theming": "Temavorming",
-      "themingDesc": "Aktiveer visuele temas en style",
-      "fontSmoothing": "Lettertipe-gladmaak",
-      "fontSmoothingDesc": "Aktiveer ClearType-lettertipe-weergawe",
-      "fullWindowDrag": "Volle Venster Sleep",
-      "fullWindowDragDesc": "Wys vensterinhoud terwyl jy sleep",
-      "desktopComposition": "Komposisie op die lessenaar",
-      "desktopCompositionDesc": "Aktiveer Aero-glaseffekte",
-      "menuAnimations": "Menu Animasies",
-      "menuAnimationsDesc": "Aktiveer menu-vervaag- en skuifanimasies",
-      "disableBitmapCaching": "Deaktiveer Bitmap-kasgeheue",
-      "disableBitmapCachingDesc": "Skakel bitmap-kasgeheue af (kan help met foute)",
-      "disableOffscreenCaching": "Deaktiveer buiteskerm-kasgeheue",
-      "disableOffscreenCachingDesc": "Skakel buiteskerm-kasgeheue af",
-      "disableGlyphCaching": "Deaktiveer glifkasgeheue",
-      "disableGlyphCachingDesc": "Skakel glifkasgeheue af",
-      "enableGfx": "Aktiveer GFX",
-      "enableGfxDesc": "Gebruik RemoteFX-grafikapyplyn",
-      "enablePrinting": "Aktiveer drukwerk",
-      "enablePrintingDesc": "Herlei plaaslike drukkers na die afgeleë sessie",
-      "enableDriveRedirection": "Aktiveer dryfherleiding",
-      "enableDriveRedirectionDesc": "Karaktereer 'n plaaslike vouer as 'n skyf in die afstandsessie",
-      "createDrivePath": "Skep 'n rylaanpad",
-      "createDrivePathDesc": "Skep die lêer outomaties as dit nie bestaan nie",
-      "disableDownload": "Deaktiveer aflaai",
-      "disableDownloadDesc": "Voorkom die aflaai van lêers vanaf die afgeleë sessie",
-      "disableUpload": "Deaktiveer oplaai",
-      "disableUploadDesc": "Voorkom die oplaai van lêers na die afgeleë sessie",
-      "enableTouch": "Aktiveer Aanraking",
-      "enableTouchDesc": "Aktiveer aanstuur van raakinvoer",
-      "consoleSession": "Konsolesessie",
-      "consoleSessionDesc": "Koppel aan die konsole (sessie 0) in plaas van 'n nuwe sessie",
-      "sendWolPacket": "Stuur WOL-pakket",
-      "sendWolPacketDesc": "Stuur 'n magiese pakket om hierdie gasheer wakker te maak voordat jy verbind",
-      "disableCopy": "Deaktiveer Kopieer",
-      "disableCopyDesc": "Voorkom die kopiëring van teks vanaf die afgeleë sessie",
-      "disablePaste": "Deaktiveer plak",
-      "disablePasteDesc": "Voorkom die plak van teks in die afgeleë sessie",
-      "createPathIfMissing": "Skep pad indien ontbreek",
-      "createPathIfMissingDesc": "Skep outomaties die opnamegids",
-      "excludeOutput": "Sluit Uitvoer Uit",
-      "excludeOutputDesc": "Moenie skermuitvoer opneem nie (slegs metadata)",
-      "excludeMouse": "Sluit Muis uit",
-      "excludeMouseDesc": "Moenie muisbewegings opneem nie",
-      "includeKeystrokes": "Sluit toetsaanslagen in",
-      "includeKeystrokesDesc": "Neem rou toetsaanslagen op benewens skermuitvoer",
-      "vncPort": "VNC-poort",
-      "vncPassword": "VNC-wagwoord",
-      "vncUsernameOptional": "Gebruikersnaam (opsioneel)",
-      "vncLeaveBlank": "Los leeg indien nie nodig nie",
-      "cursorMode": "Wysermodus",
-      "swapRedBlue": "Ruil Rooi/Blou",
-      "swapRedBlueDesc": "Ruil die rooi en blou kleurkanale om (maak sommige kleurprobleme reg)",
-      "readOnly": "Leesalleen",
-      "readOnlyDesc": "Bekyk die afstandskerm sonder om enige insette te stuur",
-      "telnetPort": "Telnet-poort",
-      "terminalType": "Terminaaltipe",
-      "fontName": "Lettertipe Naam",
-      "fontSize": "Lettergrootte",
-      "colorScheme": "Kleurskema",
-      "backspaceKey": "Terugspasie-sleutel",
-      "colorDepth": "Kleurdiepte",
-      "resizeMethod": "Vergrootingsmetode",
-      "driveNamePlaceholder": "Termix-rylaan",
-      "options": {
-        "any": "Enige",
-        "auto": "Outomaties",
-        "nlaExtended": "NLA Uitgebreide",
-        "color8": "8-bis",
-        "color16": "16-bis",
-        "color24": "24-bis",
-        "color32": "32-bis",
-        "displayUpdate": "Skermopdatering",
-        "reconnect": "Herkoppel",
-        "preserve": "Bewaar",
-        "unix": "Unix (LF)",
-        "windows": "Vensters (CRLF)",
-        "local": "Plaaslik",
-        "remote": "Afstandsbediening",
-        "failsafe": "faalveilig",
-        "blackOnWhite": "Swart op wit",
-        "whiteOnBlack": "Wit op Swart",
-        "grayOnBlack": "Grys op Swart",
-        "greenOnBlack": "Groen op Swart"
-      }
-    },
-    "remoteDesktop": "Afstandslessenaar",
-    "tabRdp": "RDP",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "Virtuele Netwerk",
-    "unencryptedShell": "Ongeënkripteerde dop",
-    "remoteDesktopNotes": "Notas",
-    "userDefaultsNote": "Instellings wat jy onveranderd laat, volg jou gasheer se verstekwaardes.",
-    "connectionOriginNote": "Op die lessenaar-app gebruik RDP, VNC en Telnet die afstandbediener tensy die gasheer op Hierdie toestel gestel is, wat 'n guacd benodig wat hierdie masjien kan bereik. Stel een in die Afstandslessenaar-instellings, of per gasheer onder guacd Proxy.",
-    "docsLink": "Bekyk dokumente",
-    "connectionOriginGuacamoleNote": "RDP, VNC en Telnet gebruik die afstandbediener tensy jy \"Hierdie toestel\" kies, wat 'n guacd benodig wat hierdie masjien kan bereik. Stel een in die guacd URL-instelling, of per gasheer onder guacd Proxy."
-  },
-  "onboarding": {
-    "feature_desktop": "Afstandlessenaar",
-    "feature_desktop_desc": "Maak RDP-, VNC- en Telnet-sessies in 'n oortjie oop, dieselfde as SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Kleurdiepte",
-        "description": "Gebruik vir RDP-gashere wat dit op hul verstekwaarde laat."
-      },
-      "resizeMethod": {
-        "label": "Vergrootingsmetode",
-        "description": "Hoe die afstandskerm die venstergrootte volg."
-      },
-      "resizeDisplayUpdate": "Skermopdatering",
-      "resizeReconnect": "Herkoppel",
-      "inherit": "Erf",
-      "on": "Aan",
-      "off": "Af",
-      "forceLossless": {
-        "label": "Forseer verliesloos",
-        "description": "Forseer verlieslose beeldkodering (hoër gehalte, meer bandwydte)"
-      },
-      "enableWallpaper": {
-        "label": "Agtergrond",
-        "description": "Wys lessenaar agtergrond (deaktivering verbeter werkverrigting)"
-      },
-      "enableFontSmoothing": {
-        "label": "Lettertipe-gladmaak",
-        "description": "Aktiveer ClearType-lettertipe-weergawe"
-      },
-      "enableDesktopComposition": {
-        "label": "Komposisie op die lessenaar",
-        "description": "Aktiveer Aero-glaseffekte"
-      },
-      "disableAudio": {
-        "label": "Deaktiveer oudio",
-        "description": "Demp alle klank van die afstandsessie"
-      },
-      "enablePrinting": {
-        "label": "Aktiveer drukwerk",
-        "description": "Herlei plaaslike drukkers na die afgeleë sessie"
-      },
-      "enableDrive": {
-        "label": "Aktiveer dryfherleiding",
-        "description": "Karaktereer 'n plaaslike vouer as 'n skyf in die afstandsessie"
-      },
-      "disableCopy": {
-        "label": "Deaktiveer Kopieer",
-        "description": "Voorkom die kopiëring van teks vanaf die afgeleë sessie"
-      },
-      "disablePaste": {
-        "label": "Deaktiveer plak",
-        "description": "Voorkom die plak van teks in die afgeleë sessie"
-      },
-      "group": "Afstandslessenaar-verstekwaardes",
-      "colorDepth16": "16-bis",
-      "colorDepth24": "24-bis",
-      "colorDepth32": "32-bis"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Aktiveer Afstandslessenaar",
-        "description": "Laat RDP-, VNC- en Telnet-verbindings deur guacd toe."
-      },
-      "guacdUrl": {
-        "label": "guacd-URL",
-        "description": "Waar guacd luister, as host:port. Die GUACD_URL, GUACD_HOST en GUACD_PORT omgewingveranderlikes oorskryf dit.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "RDP"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "RDP-poort"
-      },
-      "vncPort": {
-        "label": "VNC-poort"
-      },
-      "telnetPort": {
-        "label": "Telnet-poort"
-      },
-      "rdpSecurity": {
-        "label": "RDP-sekuriteitsmodus"
-      },
-      "rdpIgnoreCert": {
-        "label": "Ignoreer sertifikaatfoute"
-      },
-      "guacamoleConfig": {
-        "label": "guacd-instellings"
-      },
-      "enableToolbar": {
-        "label": "Afstandswerkskerm-nutsbalk",
-        "description": "Wys die nutsbalk in RDP-, VNC- en Telnet-sessies."
-      },
-      "displayGroup": "Vertoon",
-      "displayDefaultsTab": "Afstandslessenaar"
-    }
-  },
-  "palette": {
-    "connectRdp": "Verbind met RDP",
-    "connectVnc": "Verbind met VNC",
-    "connectTelnet": "Verbind met Telnet"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Deel afstandlessenaarsessies",
-      "description": "Laat sessiedeling en samewerkingskamers hierdie gebruiker se RDP-, VNC- en Telnet-sessies aan ander wys."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Afstandbediener word benodig. Koppel 'n afstandbediener in Instellings om hierdie verbindingstipe te gebruik."
-  },
-  "plugin": {
-    "name": "Afstandslessenaar"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/ar_SA.json b/plugins/remote-desktop/locales/translated/ar_SA.json
deleted file mode 100644
index 47bd9d971..000000000
--- a/plugins/remote-desktop/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "جارٍ الاتصال بجلسة {{type}}...",
-    "checkingGuacd": "جارٍ التحقق من خدمة سطح المكتب البعيد...",
-    "requestingToken": "طلب رمز اتصال {{type}}...",
-    "openingSession": "جارٍ فتح الجلسة {{type}}...",
-    "negotiating": "التفاوض على مصافحة {{type}}...",
-    "sessionReady": "{{type}} الجلسة جاهزة",
-    "connectionError": "خطأ في الاتصال",
-    "connectionFailed": "فشل الاتصال",
-    "failedToConnect": "فشل الحصول على رمز الاتصال",
-    "hostNotFound": "المضيف غير موجود",
-    "noHostSelected": "لم يتم تحديد أي جهاز مضيف",
-    "reconnect": "إعادة الاتصال",
-    "retry": "إعادة المحاولة",
-    "guacdUnavailable": "خدمة سطح المكتب البعيد (guacd) غير متاحة. يرجى التأكد من تشغيل guacd وإمكانية الوصول إليه وتكوينه بشكل صحيح في إعدادات المسؤول.",
-    "credentialPromptTitle": "أدخل بيانات اعتماد RDP",
-    "credentialPromptDescription": "تم ضبط هذا المضيف ليطلب بيانات الاعتماد عند الاتصال. تُستخدم هذه البيانات لهذه الجلسة فقط ولا يتم حفظها.",
-    "connect": "اتصال",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "ملفات محرك الأقراص",
-      "parent": "الدليل الرئيسي",
-      "refresh": "تحديث",
-      "empty": "هذا المجلد فارغ",
-      "listFailed": "فشل في قراءة هذا المجلد",
-      "download": "تنزيل",
-      "downloadFailed": "فشل تنزيل {{name}}",
-      "upload": "تحميل الملفات",
-      "uploading": "جارٍ رفع {{name}}...",
-      "uploaded": "تم التحميل {{name}}",
-      "uploadFailed": "فشل تحميل {{name}}",
-      "uploadDisabled": "تم تعطيل التحميلات لهذا الاتصال",
-      "driveUnavailable": "قم بتمكين إعادة توجيه محرك الأقراص RDP قبل تحميل الملفات",
-      "driveNotWritable": "لا يستطيع برنامج guacd الكتابة إلى مجلد القرص. تحقق من مسار محرك الأقراص GUACD_DRIVE_PATH (أو مسار محرك الأقراص الخاص بالجهاز المضيف) وصلاحياته.",
-      "dropToUpload": "قم بإسقاط الملفات لتحميلها"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (قفل الشاشة)",
-      "winKey": "مفتاح Windows",
-      "superL": "Super+L (شاشة القفل)",
-      "superKey": "مفتاح سوبر",
-      "super": "ممتاز",
-      "cmdL": "Cmd+L (قفل الشاشة)",
-      "cmdKey": "مفتاح الاختصار",
-      "cmd": "الأمر",
-      "ctrl": "Ctrl",
-      "alt": "Alt",
-      "shift": "Shift",
-      "win": "Win",
-      "stickyActive": "{{key}} (مثبت - انقر لتحرير)",
-      "stickyInactive": "{{key}} (انقر للتثبيت)",
-      "esc": "Escape",
-      "tab": "Tab",
-      "home": "Home",
-      "end": "End",
-      "pageUp": "Page Up",
-      "pageDown": "Page Down",
-      "arrowUp": "Arrow Up",
-      "arrowDown": "Arrow Down",
-      "arrowLeft": "Arrow Left",
-      "arrowRight": "Arrow Right",
-      "fnToggle": "مفاتيح الوظائف",
-      "reconnect": "إعادة الاتصال بالجلسة",
-      "collapse": "طي شريط الأدوات",
-      "expand": "توسيع شريط الأدوات",
-      "dragHandle": "اسحب لتغيير الموضع",
-      "hide": "إخفاء هذه الميزة لهذه الجلسة. لتعطيلها نهائياً، افتح إعدادات المضيف ← عام ← شريط أدوات الاتصال.",
-      "zoomIn": "تكبير الصورة",
-      "zoomOut": "تصغير العرض",
-      "resetZoom": "إعادة ضبط التكبير",
-      "fitToScreen": "مناسب للشاشة",
-      "switchToTrackpad": "قم بالتبديل إلى وضع لوحة اللمس (اسحب لتحريك المؤشر، انقر للنقر)",
-      "switchToTouch": "قم بالتبديل إلى وضع اللمس (انقر مباشرة في المكان الذي تريد النقر فيه)"
-    },
-    "disabled": "تم إيقاف تشغيل سطح المكتب البعيد. يمكن للمسؤول تشغيله في الإعدادات."
-  },
-  "hosts": {
-    "nativeRdpOpened": "تم فتحه في سطح المكتب البعيد لنظام التشغيل Windows",
-    "nativeRdpFailed": "فشل فتح سطح المكتب البعيد لنظام التشغيل Windows",
-    "openNativeRdp": "افتح في سطح المكتب البعيد لنظام التشغيل Windows",
-    "guac": {
-      "toolbar": "شريط الأدوات",
-      "connection": "اتصال",
-      "authentication": "المصادقة",
-      "storedCredential": "بيانات الاعتماد المخزنة",
-      "authMethod": "طريقة المصادقة",
-      "authTypeDirect": "مباشر",
-      "authTypeCredential": "بيانات الاعتماد",
-      "authTypeNone": "لا شيء",
-      "authTypeNoneDesc": "لا يتم تخزين أي بيانات اعتماد. سيُطلب منك إدخال اسم المستخدم وكلمة المرور في كل مرة تتصل فيها؛ فهي غير محفوظة.",
-      "selectCredential": "اختر بيانات اعتماد...",
-      "connectionSettings": "إعدادات الاتصال",
-      "displaySettings": "إعدادات العرض",
-      "audioSettings": "إعدادات الصوت",
-      "rdpPerformance": "أداء RDP",
-      "deviceRedirection": "إعادة توجيه الأجهزة",
-      "session": "جلسة",
-      "gateway": "بوابة",
-      "remoteApp": "RemoteApp",
-      "clipboard": "الحافظة",
-      "sessionRecording": "تسجيل الجلسة",
-      "wakeOnLan": "الإيقاظ عبر الشبكة",
-      "vncSettings": "إعدادات VNC",
-      "terminalSettings": "إعدادات الطرفية",
-      "rdpPort": "منفذ RDP",
-      "username": "اسم المستخدم",
-      "password": "كلمة المرور",
-      "passwordSaved": "تم حفظ كلمة المرور، اكتب لتغييرها",
-      "domain": "مجال",
-      "securityMode": "وضع الأمان",
-      "width": "العرض",
-      "height": "الارتفاع",
-      "dpi": "DPI",
-      "clientName": "اسم العميل",
-      "initialProgram": "البرنامج الأولي",
-      "serverLayout": "تخطيط الخادم",
-      "timezone": "المنطقة الزمنية",
-      "loadBalanceInfo": "معلومات موازنة التحميل / ملف تعريف ارتباط",
-      "loadBalanceInfoDesc": "ملف تعريف ارتباط وسيط اتصال RD لموازنة تحميل مزرعة RDS (مثل: tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "وكيل guacd",
-      "guacdHostname": "مضيف guacd",
-      "guacdHostnamePlaceholder": "الافتراضي العام",
-      "guacdPort": "منفذ guacd",
-      "guacdProxyDesc": "تجاوز مثيل guacd العام لهذا الاتصال. اتركه فارغًا لاستخدام إعدادات guacd العمومية.",
-      "gatewayHostname": "اسم مضيف البوابة",
-      "gatewayPort": "منفذ البوابة",
-      "gatewayUsername": "اسم مستخدم البوابة",
-      "gatewayPassword": "كلمة مرور البوابة",
-      "gatewayDomain": "مجال البوابة",
-      "remoteAppProgram": "برنامج RemoteApp",
-      "workingDirectory": "دليل العمل",
-      "arguments": "الوسائط",
-      "normalizeLineEndings": "تطبيع نهايات الأسطر",
-      "macAddress": "عنوان MAC",
-      "broadcastAddress": "عنوان البث",
-      "udpPort": "منفذ UDP",
-      "waitTimeS": "وقت الانتظار (ث)",
-      "driveName": "اسم القرص",
-      "drivePath": "مسار القرص",
-      "ignoreCertificate": "تجاهل الشهادة",
-      "ignoreCertificateDesc": "السماح بالاتصال بالمضيفين بشهادات موقعة ذاتيًا",
-      "forceLossless": "فرض بدون فقدان",
-      "forceLosslessDesc": "فرض ترميز الصور بدون فقدان (جودة أعلى، استهلاك أكبر للنطاق الترددي)",
-      "disableAudio": "تعطيل الصوت",
-      "disableAudioDesc": "كتم كل الصوت من الجلسة البعيدة",
-      "enableAudioInput": "تمكين إدخال الصوت (الميكروفون)",
-      "enableAudioInputDesc": "إعادة توجيه الميكروفون المحلي إلى الجلسة البعيدة",
-      "wallpaper": "خلفية سطح المكتب",
-      "wallpaperDesc": "إظهار خلفية سطح المكتب (التعطيل يحسن الأداء)",
-      "theming": "السمات",
-      "themingDesc": "تمكين السمات والأنماط المرئية",
-      "fontSmoothing": "تنعيم الخطوط",
-      "fontSmoothingDesc": "تمكين عرض خطوط ClearType",
-      "fullWindowDrag": "سحب النافذة بالكامل",
-      "fullWindowDragDesc": "إظهار محتويات النافذة أثناء السحب",
-      "desktopComposition": "تركيب سطح المكتب",
-      "desktopCompositionDesc": "تمكين تأثيرات Aero الزجاجية",
-      "menuAnimations": "حركات القوائم",
-      "menuAnimationsDesc": "تمكين حركات التلاشي والانزلاق للقوائم",
-      "disableBitmapCaching": "تعطيل التخزين المؤقت للصور النقطية",
-      "disableBitmapCachingDesc": "إيقاف التخزين المؤقت للصور النقطية (قد يساعد في حل المشكلات)",
-      "disableOffscreenCaching": "تعطيل التخزين المؤقت خارج الشاشة",
-      "disableOffscreenCachingDesc": "إيقاف التخزين المؤقت خارج الشاشة",
-      "disableGlyphCaching": "تعطيل التخزين المؤقت للأشكال",
-      "disableGlyphCachingDesc": "إيقاف التخزين المؤقت للأشكال",
-      "enableGfx": "تمكين GFX",
-      "enableGfxDesc": "استخدام خط أنابيب رسوميات RemoteFX",
-      "enablePrinting": "تمكين الطباعة",
-      "enablePrintingDesc": "إعادة توجيه الطابعات المحلية إلى الجلسة البعيدة",
-      "enableDriveRedirection": "تمكين إعادة توجيه القرص",
-      "enableDriveRedirectionDesc": "تعيين مجلد محلي كقرص في الجلسة البعيدة",
-      "createDrivePath": "إنشاء مسار محرك الأقراص",
-      "createDrivePathDesc": "إنشاء المجلد تلقائياً إذا لم يكن موجوداً",
-      "disableDownload": "تعطيل التحميل",
-      "disableDownloadDesc": "منع تنزيل الملفات من الجلسة البعيدة",
-      "disableUpload": "تعطيل الرفع",
-      "disableUploadDesc": "منع رفع الملفات إلى الجلسة البعيدة",
-      "enableTouch": "تمكين اللمس",
-      "enableTouchDesc": "تمكين تمرير إدخالات اللمس",
-      "consoleSession": "جلسة وحدة التحكم",
-      "consoleSessionDesc": "الاتصال بوحدة التحكم (الجلسة 0) بدلاً من جلسة جديدة",
-      "sendWolPacket": "إرسال حزمة WOL",
-      "sendWolPacketDesc": "إرسال حزمة سحرية لإيقاظ هذا المضيف قبل الاتصال",
-      "disableCopy": "تعطيل النسخ",
-      "disableCopyDesc": "منع نسخ النص من الجلسة البعيدة",
-      "disablePaste": "تعطيل اللصق",
-      "disablePasteDesc": "منع لصق النص في الجلسة البعيدة",
-      "createPathIfMissing": "إنشاء المسار إذا كان مفقوداً",
-      "createPathIfMissingDesc": "إنشاء دليل التسجيل تلقائياً",
-      "excludeOutput": "استبعاد المخرجات",
-      "excludeOutputDesc": "عدم تسجيل مخرجات الشاشة (البيانات الوصفية فقط)",
-      "excludeMouse": "استبعاد الفأرة",
-      "excludeMouseDesc": "عدم تسجيل حركات الفأرة",
-      "includeKeystrokes": "تضمين ضغطات المفاتيح",
-      "includeKeystrokesDesc": "تسجيل ضغطات المفاتيح الخام بالإضافة إلى مخرجات الشاشة",
-      "vncPort": "منفذ VNC",
-      "vncPassword": "كلمة مرور VNC",
-      "vncUsernameOptional": "اسم المستخدم (اختياري)",
-      "vncLeaveBlank": "اتركه فارغاً إذا لم يكن مطلوباً",
-      "cursorMode": "وضع المؤشر",
-      "swapRedBlue": "تبديل الأحمر/الأزرق",
-      "swapRedBlueDesc": "تبديل قنوات اللون الأحمر والأزرق (يصلح بعض مشكلات الألوان)",
-      "readOnly": "للقراءة فقط",
-      "readOnlyDesc": "عرض الشاشة البعيدة دون إرسال أي إدخال",
-      "telnetPort": "منفذ Telnet",
-      "terminalType": "نوع الطرفية",
-      "fontName": "اسم الخط",
-      "fontSize": "حجم الخط",
-      "colorScheme": "نظام الألوان",
-      "backspaceKey": "مفتاح Backspace",
-      "colorDepth": "عمق اللون",
-      "resizeMethod": "طريقة تغيير الحجم",
-      "driveNamePlaceholder": "محرك Termix",
-      "options": {
-        "any": "أي",
-        "auto": "تلقائي",
-        "nlaExtended": "NLA Extended",
-        "color8": "8 بت",
-        "color16": "16 بت",
-        "color24": "24 بت",
-        "color32": "32 بت",
-        "displayUpdate": "تحديث الشاشة",
-        "reconnect": "إعادة الاتصال",
-        "preserve": "يحفظ",
-        "unix": "يونكس (LF)",
-        "windows": "ويندوز (CRLF)",
-        "local": "محلي",
-        "remote": "البعيد",
-        "failsafe": "نظام أمان",
-        "blackOnWhite": "أسود على أبيض",
-        "whiteOnBlack": "أبيض على أسود",
-        "grayOnBlack": "رمادي على أسود",
-        "greenOnBlack": "أخضر على أسود"
-      }
-    },
-    "remoteDesktop": "سطح المكتب البعيد",
-    "tabRdp": "RDP",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "الشبكة الافتراضية",
-    "unencryptedShell": "shell غير مشفر",
-    "remoteDesktopNotes": "ملاحظات",
-    "userDefaultsNote": "تتبع الإعدادات التي تتركها دون تغيير الإعدادات الافتراضية للمضيف.",
-    "connectionOriginNote": "في تطبيق سطح المكتب، تستخدم بروتوكولات RDP وVNC وTelnet الخادم البعيد ما لم يتم ضبط المضيف على \"هذا الجهاز\"، الأمر الذي يتطلب عنوان IP يمكن لهذا الجهاز الوصول إليه. يمكنك تعيين عنوان IP في إعدادات سطح المكتب البعيد، أو لكل مضيف ضمن \"وكيل guacd\".",
-    "docsLink": "عرض المستندات",
-    "connectionOriginGuacamoleNote": "تستخدم بروتوكولات RDP وVNC وTelnet الخادم البعيد ما لم تختر \"هذا الجهاز\"، الأمر الذي يتطلب عنوان IP افتراضيًا (guacd) يمكن لهذا الجهاز الوصول إليه. يمكنك تعيين عنوان IP افتراضي في إعدادات عنوان URL الخاص بـ guacd، أو لكل مضيف ضمن إعدادات وكيل guacd."
-  },
-  "onboarding": {
-    "feature_desktop": "سطح المكتب البعيد",
-    "feature_desktop_desc": "افتح جلسات RDP وVNC وTelnet في علامة تبويب، تمامًا مثل SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "عمق اللون",
-        "description": "يُستخدم مع مضيفي بروتوكول سطح المكتب البعيد (RDP) الذين يتركونه على إعداداتهم الافتراضية."
-      },
-      "resizeMethod": {
-        "label": "طريقة تغيير الحجم",
-        "description": "كيف تتكيف الشاشة البعيدة مع حجم النافذة."
-      },
-      "resizeDisplayUpdate": "تحديث الشاشة",
-      "resizeReconnect": "إعادة الاتصال",
-      "inherit": "يرث",
-      "on": "مفعلة",
-      "off": "غير مفعلة",
-      "forceLossless": {
-        "label": "فرض بدون فقدان",
-        "description": "فرض ترميز الصور بدون فقدان (جودة أعلى، استهلاك أكبر للنطاق الترددي)"
-      },
-      "enableWallpaper": {
-        "label": "خلفية سطح المكتب",
-        "description": "إظهار خلفية سطح المكتب (التعطيل يحسن الأداء)"
-      },
-      "enableFontSmoothing": {
-        "label": "تنعيم الخطوط",
-        "description": "تمكين عرض خطوط ClearType"
-      },
-      "enableDesktopComposition": {
-        "label": "تركيب سطح المكتب",
-        "description": "تمكين تأثيرات Aero الزجاجية"
-      },
-      "disableAudio": {
-        "label": "تعطيل الصوت",
-        "description": "كتم كل الصوت من الجلسة البعيدة"
-      },
-      "enablePrinting": {
-        "label": "تمكين الطباعة",
-        "description": "إعادة توجيه الطابعات المحلية إلى الجلسة البعيدة"
-      },
-      "enableDrive": {
-        "label": "تمكين إعادة توجيه القرص",
-        "description": "تعيين مجلد محلي كقرص في الجلسة البعيدة"
-      },
-      "disableCopy": {
-        "label": "تعطيل النسخ",
-        "description": "منع نسخ النص من الجلسة البعيدة"
-      },
-      "disablePaste": {
-        "label": "تعطيل اللصق",
-        "description": "منع لصق النص في الجلسة البعيدة"
-      },
-      "group": "الإعدادات الافتراضية لسطح المكتب البعيد",
-      "colorDepth16": "16 بت",
-      "colorDepth24": "24 بت",
-      "colorDepth32": "32 بت"
-    },
-    "admin": {
-      "enabled": {
-        "label": "تمكين سطح المكتب البعيد",
-        "description": "السماح باتصالات RDP وVNC وTelnet عبر guacd."
-      },
-      "guacdUrl": {
-        "label": "رابط guacd",
-        "description": "حيث يستمع برنامج guacd، كعنوان المضيف:المنفذ. وتتجاوز متغيرات البيئة GUACD_URL و GUACD_HOST و GUACD_PORT هذا الإعداد.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "RDP"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "منفذ RDP"
-      },
-      "vncPort": {
-        "label": "منفذ VNC"
-      },
-      "telnetPort": {
-        "label": "منفذ Telnet"
-      },
-      "rdpSecurity": {
-        "label": "وضع أمان RDP"
-      },
-      "rdpIgnoreCert": {
-        "label": "تجاهل أخطاء الشهادة"
-      },
-      "guacamoleConfig": {
-        "label": "إعدادات guacd"
-      },
-      "enableToolbar": {
-        "label": "شريط أدوات سطح المكتب البعيد",
-        "description": "إظهار شريط الأدوات في جلسات RDP وVNC وTelnet."
-      },
-      "displayGroup": "عرض",
-      "displayDefaultsTab": "سطح المكتب البعيد"
-    }
-  },
-  "palette": {
-    "connectRdp": "الاتصال بـ RDP",
-    "connectVnc": "الاتصال بـ VNC",
-    "connectTelnet": "اتصل بشبكة Telnet"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "مشاركة جلسات سطح المكتب البعيد",
-      "description": "اسمح لمشاركة الجلسات وغرف التعاون بعرض جلسات RDP وVNC وTelnet الخاصة بهذا المستخدم للآخرين."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "يلزم وجود خادم بعيد. قم بتوصيل خادم بعيد في الإعدادات لاستخدام نوع الاتصال هذا."
-  },
-  "plugin": {
-    "name": "سطح المكتب البعيد"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/bg_BG.json b/plugins/remote-desktop/locales/translated/bg_BG.json
deleted file mode 100644
index c1f0f70f5..000000000
--- a/plugins/remote-desktop/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "Свързване към сесия {{type}}...",
-    "checkingGuacd": "Проверка на услугата за отдалечен работен плот...",
-    "requestingToken": "Заявка за {{type}} токен за връзка...",
-    "openingSession": "Отваряне на {{type}} сесия...",
-    "negotiating": "Преговаряне {{type}} ръкостискане...",
-    "sessionReady": "{{type}} сесията е готова",
-    "connectionError": "Грешка във връзката",
-    "connectionFailed": "Връзката не бе успешна",
-    "failedToConnect": "Неуспешно получаване на токен за връзка",
-    "hostNotFound": "Хостът не е намерен",
-    "noHostSelected": "Няма избран хост",
-    "reconnect": "Свържете се отново",
-    "retry": "Опитай отново",
-    "guacdUnavailable": "Услугата за отдалечен работен плот (guacd) не е налична. Моля, уверете се, че guacd работи, е достъпна и е конфигурирана правилно в администраторските настройки.",
-    "credentialPromptTitle": "Въведете RDP идентификационни данни",
-    "credentialPromptDescription": "Този хост е настроен да изисква идентификационни данни при свързване. Те се използват само за тази сесия и не се запазват.",
-    "connect": "Свържете се",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "Файлове на Диск",
-      "parent": "Родителска директория",
-      "refresh": "Обновяване",
-      "empty": "Тази папка е празна",
-      "listFailed": "Неуспешно четене на тази папка",
-      "download": "Изтегляне",
-      "downloadFailed": "Неуспешно изтегляне {{name}}",
-      "upload": "Качване на файлове",
-      "uploading": "Качване {{name}}...",
-      "uploaded": "Качено {{name}}",
-      "uploadFailed": "Качването не бе успешно {{name}}",
-      "uploadDisabled": "Качванията са деактивирани за тази връзка",
-      "driveUnavailable": "Активирайте пренасочването на RDP устройството, преди да качвате файлове",
-      "driveNotWritable": "guacd не може да записва в папката на устройството. Проверете GUACD_DRIVE_PATH (или пътя на устройството на хоста) и неговите разрешения.",
-      "dropToUpload": "Пуснете файловете, за да ги качите"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (Заключен екран)",
-      "winKey": "Клавиш за Windows",
-      "superL": "Супер+L (Заключен екран)",
-      "superKey": "Супер ключ",
-      "super": "Супер",
-      "cmdL": "Cmd+L (Заключен екран)",
-      "cmdKey": "Команден ключ",
-      "cmd": "Команда",
-      "ctrl": "Ctrl",
-      "alt": "Алтернативно",
-      "shift": "Изместване",
-      "win": "Спечелете",
-      "stickyActive": "{{key}} (заключено - щракнете за освобождаване)",
-      "stickyInactive": "{{key}} (щракнете, за да заключите)",
-      "esc": "Бягство",
-      "tab": "Раздел",
-      "home": "Дом",
-      "end": "Край",
-      "pageUp": "Страница нагоре",
-      "pageDown": "Страница надолу",
-      "arrowUp": "Стрелка нагоре",
-      "arrowDown": "Стрелка надолу",
-      "arrowLeft": "Стрелка наляво",
-      "arrowRight": "Стрелка надясно",
-      "fnToggle": "Функционални клавиши",
-      "reconnect": "Сесия за повторно свързване",
-      "collapse": "Свиване на лентата с инструменти",
-      "expand": "Разгъване на лентата с инструменти",
-      "dragHandle": "Плъзнете, за да препозиционирате",
-      "hide": "Скриване за тази сесия. За да го деактивирате за постоянно, отворете Настройки на хоста → Общи → Лента с инструменти за връзка.",
-      "zoomIn": "Увеличаване",
-      "zoomOut": "Намаляване на мащаба",
-      "resetZoom": "Нулиране на мащаба",
-      "fitToScreen": "Побиране на екрана",
-      "switchToTrackpad": "Превключване в режим на тракпад (плъзнете, за да преместите курсора, докоснете, за да щракнете)",
-      "switchToTouch": "Превключване към режим на докосване (докоснете директно там, където искате да щракнете)"
-    },
-    "disabled": "Отдалеченият работен плот е изключен. Администратор може да го включи в „Настройки“."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Отворено в отдалечен работен плот на Windows",
-    "nativeRdpFailed": "Неуспешно отваряне на отдалечения работен плот на Windows",
-    "openNativeRdp": "Отваряне в отдалечен работен плот на Windows",
-    "guac": {
-      "toolbar": "Лента с инструменти",
-      "connection": "Връзка",
-      "authentication": "Удостоверяване",
-      "storedCredential": "Съхранени идентификационни данни",
-      "authMethod": "Метод за удостоверяване",
-      "authTypeDirect": "Директно",
-      "authTypeCredential": "Пълномощия",
-      "authTypeNone": "Няма",
-      "authTypeNoneDesc": "Не се съхраняват идентификационни данни. Ще бъдете подканени да въведете потребителско име и парола всеки път, когато се свържете; те не се запазват.",
-      "selectCredential": "Изберете идентификационен номер...",
-      "connectionSettings": "Настройки за връзка",
-      "displaySettings": "Настройки на дисплея",
-      "audioSettings": "Аудио настройки",
-      "rdpPerformance": "Производителност на RDP",
-      "deviceRedirection": "Пренасочване на устройството",
-      "session": "Сесия",
-      "gateway": "Портал",
-      "remoteApp": "Отдалечено приложение",
-      "clipboard": "Клипборд",
-      "sessionRecording": "Запис на сесия",
-      "wakeOnLan": "Събуждане по локална мрежа",
-      "vncSettings": "VNC настройки",
-      "terminalSettings": "Настройки на терминала",
-      "rdpPort": "RDP порт",
-      "username": "Потребителско име",
-      "password": "Парола",
-      "passwordSaved": "Паролата е запазена, въведете, за да я промените",
-      "domain": "Домейн",
-      "securityMode": "Режим на сигурност",
-      "width": "Ширина",
-      "height": "Височина",
-      "dpi": "DPI",
-      "clientName": "Име на клиента",
-      "initialProgram": "Първоначална програма",
-      "serverLayout": "Разположение на сървъра",
-      "timezone": "Часова зона",
-      "loadBalanceInfo": "Информация за балансиране на натоварването / бисквитка",
-      "loadBalanceInfoDesc": "„бисквитка“ на RD Connection Broker за балансиране на натоварването на RDS фермата (напр. tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "guacd прокси",
-      "guacdHostname": "guacd хост",
-      "guacdHostnamePlaceholder": "Глобално по подразбиране",
-      "guacdPort": "порт guacd",
-      "guacdProxyDesc": "Заменете глобалния екземпляр на guacd за тази връзка. Оставете празно, за да използвате глобално конфигурирания guacd.",
-      "gatewayHostname": "Име на хост на шлюз",
-      "gatewayPort": "Порт на шлюза",
-      "gatewayUsername": "Потребителско име на шлюз",
-      "gatewayPassword": "Парола за шлюз",
-      "gatewayDomain": "Домейн на шлюз",
-      "remoteAppProgram": "Програма за отдалечено приложение",
-      "workingDirectory": "Работна директория",
-      "arguments": "Аргументи",
-      "normalizeLineEndings": "Нормализиране на края на редовете",
-      "macAddress": "MAC адрес",
-      "broadcastAddress": "Адрес за излъчване",
-      "udpPort": "UDP порт",
-      "waitTimeS": "Време за изчакване (и)",
-      "driveName": "Име на устройството",
-      "drivePath": "Път на устройството",
-      "ignoreCertificate": "Игнориране на сертификата",
-      "ignoreCertificateDesc": "Разрешаване на връзки към хостове със самоподписани сертификати",
-      "forceLossless": "Принудително беззагубно",
-      "forceLosslessDesc": "Принудително кодиране на изображения без загуби (по-високо качество, по-голяма честотна лента)",
-      "disableAudio": "Деактивиране на звука",
-      "disableAudioDesc": "Изключване на звука от отдалечената сесия",
-      "enableAudioInput": "Активиране на аудио вход (микрофон)",
-      "enableAudioInputDesc": "Пренасочване на локалния микрофон към отдалечената сесия",
-      "wallpaper": "Тапет",
-      "wallpaperDesc": "Показване на тапет на работния плот (деактивирането му подобрява производителността)",
-      "theming": "Темиране",
-      "themingDesc": "Активиране на визуални теми и стилове",
-      "fontSmoothing": "Изглаждане на шрифта",
-      "fontSmoothingDesc": "Активиране на рендирането на шрифтове ClearType",
-      "fullWindowDrag": "Плъзгане на целия прозорец",
-      "fullWindowDragDesc": "Показване на съдържанието на прозореца при плъзгане",
-      "desktopComposition": "Композиция на работния плот",
-      "desktopCompositionDesc": "Активиране на ефектите на Aero Glass",
-      "menuAnimations": "Анимации на менюто",
-      "menuAnimationsDesc": "Активиране на анимации за избледняване на менюта и слайдове",
-      "disableBitmapCaching": "Деактивиране на кеширането на растерни изображения",
-      "disableBitmapCachingDesc": "Изключете кеша на растерните изображения (може да помогне с проблеми)",
-      "disableOffscreenCaching": "Деактивиране на кеширането извън екрана",
-      "disableOffscreenCachingDesc": "Изключване на кеша извън екрана",
-      "disableGlyphCaching": "Деактивиране на кеширането на глифи",
-      "disableGlyphCachingDesc": "Изключване на кеша на глифове",
-      "enableGfx": "Активиране на графични ефекти",
-      "enableGfxDesc": "Използвайте графичен конвейер RemoteFX",
-      "enablePrinting": "Активиране на печат",
-      "enablePrintingDesc": "Пренасочване на локални принтери към отдалечена сесия",
-      "enableDriveRedirection": "Активиране на пренасочване на устройството",
-      "enableDriveRedirectionDesc": "Карта на локална папка като устройство в отдалечена сесия",
-      "createDrivePath": "Създаване на път за устройство",
-      "createDrivePathDesc": "Автоматично създаване на папката, ако тя не съществува",
-      "disableDownload": "Деактивиране на изтеглянето",
-      "disableDownloadDesc": "Предотвратяване на изтеглянето на файлове от отдалечената сесия",
-      "disableUpload": "Деактивиране на качването",
-      "disableUploadDesc": "Предотвратяване на качването на файлове към отдалечената сесия",
-      "enableTouch": "Активиране на докосване",
-      "enableTouchDesc": "Активиране на пренасочване на сензорен вход",
-      "consoleSession": "Конзолна сесия",
-      "consoleSessionDesc": "Свържете се с конзолата (сесия 0) вместо с нова сесия",
-      "sendWolPacket": "Изпращане на WOL пакет",
-      "sendWolPacketDesc": "Изпратете магически пакет, за да събудите този хост преди свързване",
-      "disableCopy": "Деактивиране на копирането",
-      "disableCopyDesc": "Предотвратяване на копирането на текст от отдалечената сесия",
-      "disablePaste": "Деактивиране на поставянето",
-      "disablePasteDesc": "Предотвратяване на поставянето на текст в отдалечената сесия",
-      "createPathIfMissing": "Създаване на път, ако липсва",
-      "createPathIfMissingDesc": "Автоматично създаване на директорията за записи",
-      "excludeOutput": "Изключване на изхода",
-      "excludeOutputDesc": "Не записвайте изхода на екрана (само метаданни)",
-      "excludeMouse": "Изключване на мишката",
-      "excludeMouseDesc": "Не записвайте движенията на мишката",
-      "includeKeystrokes": "Включи клавишни комбинации",
-      "includeKeystrokesDesc": "Записване на сурови натискания на клавиши в допълнение към изхода на екрана",
-      "vncPort": "VNC порт",
-      "vncPassword": "VNC парола",
-      "vncUsernameOptional": "Потребителско име (по избор)",
-      "vncLeaveBlank": "Оставете празно, ако не е необходимо",
-      "cursorMode": "Режим на курсора",
-      "swapRedBlue": "Разменете червено/синьо",
-      "swapRedBlueDesc": "Разменете червените и сините цветови канали (коригира някои проблеми с цветовете)",
-      "readOnly": "Само за четене",
-      "readOnlyDesc": "Преглед на отдалечения екран без изпращане на каквито и да било входни данни",
-      "telnetPort": "Telnet порт",
-      "terminalType": "Тип терминал",
-      "fontName": "Име на шрифта",
-      "fontSize": "Размер на шрифта",
-      "colorScheme": "Цветова схема",
-      "backspaceKey": "Клавиш Backspace",
-      "colorDepth": "Дълбочина на цвета",
-      "resizeMethod": "Метод за преоразмеряване",
-      "driveNamePlaceholder": "Термикс Драйв",
-      "options": {
-        "any": "Всякакви",
-        "auto": "Автоматично",
-        "nlaExtended": "Разширена НЛА",
-        "color8": "8-битов",
-        "color16": "16-битов",
-        "color24": "24-битов",
-        "color32": "32-битов",
-        "displayUpdate": "Актуализация на дисплея",
-        "reconnect": "Свържете се отново",
-        "preserve": "Запази",
-        "unix": "Unix (LF)",
-        "windows": "Windows (CRLF)",
-        "local": "Местно",
-        "remote": "Дистанционно",
-        "failsafe": "отказоустойчив",
-        "blackOnWhite": "Черно на бяло",
-        "whiteOnBlack": "Бяло върху черно",
-        "grayOnBlack": "Сиво на черно",
-        "greenOnBlack": "Зелено на черно"
-      }
-    },
-    "remoteDesktop": "Отдалечен работен плот",
-    "tabRdp": "ПРСР",
-    "tabVnc": "VNC",
-    "tabTelnet": "Телнет",
-    "virtualNetwork": "Виртуална мрежа",
-    "unencryptedShell": "Некриптирана обвивка",
-    "remoteDesktopNotes": "Бележки",
-    "userDefaultsNote": "Настройките, които оставяте непроменени, следват настройките по подразбиране на вашия хост.",
-    "connectionOriginNote": "В настолното приложение RDP, VNC и Telnet използват отдалечения сървър, освен ако хостът не е зададен на „Това устройство“, което изисква guacd, до който тази машина може да достигне. Задайте такъв в настройките на отдалечения работен плот или за всеки хост под guacd Proxy.",
-    "docsLink": "Преглед на документи",
-    "connectionOriginGuacamoleNote": "RDP, VNC и Telnet използват отдалечения сървър, освен ако не изберете „Това устройство“, което изисква guacd, до който тази машина може да достигне. Задайте такъв в настройката на guacd URL или за всеки хост под guacd Proxy."
-  },
-  "onboarding": {
-    "feature_desktop": "Отдалечен работен плот",
-    "feature_desktop_desc": "Отваряне на RDP, VNC и Telnet сесии в раздел, както при SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Дълбочина на цвета",
-        "description": "Използва се за RDP хостове, които го оставят по подразбиране."
-      },
-      "resizeMethod": {
-        "label": "Метод за преоразмеряване",
-        "description": "Как отдалеченият екран следва размера на прозореца."
-      },
-      "resizeDisplayUpdate": "Актуализация на дисплея",
-      "resizeReconnect": "Свържете се отново",
-      "inherit": "Наследяване",
-      "on": "Включено",
-      "off": "Изключено",
-      "forceLossless": {
-        "label": "Принудително беззагубно",
-        "description": "Принудително кодиране на изображения без загуби (по-високо качество, по-голяма честотна лента)"
-      },
-      "enableWallpaper": {
-        "label": "Тапет",
-        "description": "Показване на тапет на работния плот (деактивирането му подобрява производителността)"
-      },
-      "enableFontSmoothing": {
-        "label": "Изглаждане на шрифта",
-        "description": "Активиране на рендирането на шрифтове ClearType"
-      },
-      "enableDesktopComposition": {
-        "label": "Композиция на работния плот",
-        "description": "Активиране на ефектите на Aero Glass"
-      },
-      "disableAudio": {
-        "label": "Деактивиране на звука",
-        "description": "Изключване на звука от отдалечената сесия"
-      },
-      "enablePrinting": {
-        "label": "Активиране на печат",
-        "description": "Пренасочване на локални принтери към отдалечена сесия"
-      },
-      "enableDrive": {
-        "label": "Активиране на пренасочване на устройството",
-        "description": "Карта на локална папка като устройство в отдалечена сесия"
-      },
-      "disableCopy": {
-        "label": "Деактивиране на копирането",
-        "description": "Предотвратяване на копирането на текст от отдалечената сесия"
-      },
-      "disablePaste": {
-        "label": "Деактивиране на поставянето",
-        "description": "Предотвратяване на поставянето на текст в отдалечената сесия"
-      },
-      "group": "Настройки по подразбиране за отдалечен работен плот",
-      "colorDepth16": "16-битов",
-      "colorDepth24": "24-битов",
-      "colorDepth32": "32-битов"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Активиране на отдалечен работен плот",
-        "description": "Разрешаване на RDP, VNC и Telnet връзки чрез guacd."
-      },
-      "guacdUrl": {
-        "label": "URL адрес на GUACD",
-        "description": "Където guacd слуша, като host:port. Променливите на средата GUACD_URL, GUACD_HOST и GUACD_PORT отменят това.",
-        "placeholder": "гуакд:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "ПРСР"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Телнет"
-      },
-      "rdpPort": {
-        "label": "RDP порт"
-      },
-      "vncPort": {
-        "label": "VNC порт"
-      },
-      "telnetPort": {
-        "label": "Telnet порт"
-      },
-      "rdpSecurity": {
-        "label": "Режим на защита на RDP"
-      },
-      "rdpIgnoreCert": {
-        "label": "Игнориране на грешки в сертификатите"
-      },
-      "guacamoleConfig": {
-        "label": "настройки на GUACD"
-      },
-      "enableToolbar": {
-        "label": "Лента с инструменти за отдалечен работен плот",
-        "description": "Показване на лентата с инструменти в RDP, VNC и Telnet сесии."
-      },
-      "displayGroup": "Дисплей",
-      "displayDefaultsTab": "Отдалечен работен плот"
-    }
-  },
-  "palette": {
-    "connectRdp": "Свържете се с RDP",
-    "connectVnc": "Свържете се с VNC",
-    "connectTelnet": "Свържете се с Telnet"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Споделяне на сесии за отдалечен работен плот",
-      "description": "Позволете на споделянето на сесии и стаите за сътрудничество да показват RDP, VNC и Telnet сесиите на този потребител на други."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Изисква се отдалечен сървър. Свържете се с отдалечен сървър в „Настройки“, за да използвате този тип връзка."
-  },
-  "plugin": {
-    "name": "Отдалечен работен плот"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/bn_BD.json b/plugins/remote-desktop/locales/translated/bn_BD.json
deleted file mode 100644
index 339c2c63d..000000000
--- a/plugins/remote-desktop/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "{{type}} সেশনে সংযোগ স্থাপন করা হচ্ছে...",
-    "checkingGuacd": "রিমোট ডেস্কটপ পরিষেবা পরীক্ষা করা হচ্ছে...",
-    "requestingToken": "{{type}} সংযোগ টোকেনের জন্য অনুরোধ করা হচ্ছে...",
-    "openingSession": "{{type}} সেশন শুরু হচ্ছে...",
-    "negotiating": "{{type}} করমর্দন নিয়ে আলোচনা চলছে...",
-    "sessionReady": "{{type}} সেশন প্রস্তুত",
-    "connectionError": "সংযোগ ত্রুটি",
-    "connectionFailed": "সংযোগ ব্যর্থ হয়েছে",
-    "failedToConnect": "সংযোগ টোকেন পেতে ব্যর্থ হয়েছে",
-    "hostNotFound": "হোস্ট খুঁজে পাওয়া যায়নি",
-    "noHostSelected": "কোন হোস্ট নির্বাচন করা হয়নি",
-    "reconnect": "পুনরায় সংযোগ করুন",
-    "retry": "পুনরায় চেষ্টা করুন",
-    "guacdUnavailable": "রিমোট ডেস্কটপ সার্ভিস (guacd) উপলব্ধ নেই। অনুগ্রহ করে নিশ্চিত করুন যে guacd চালু ও অ্যাক্সেসযোগ্য আছে এবং অ্যাডমিন সেটিংসে সঠিকভাবে কনফিগার করা আছে।",
-    "credentialPromptTitle": "RDP পরিচয়পত্র প্রবেশ করান",
-    "credentialPromptDescription": "এই হোস্টটি সংযোগের সময় ক্রেডেনশিয়াল চাওয়ার জন্য সেট করা আছে। এগুলি শুধুমাত্র এই সেশনের জন্য ব্যবহৃত হয় এবং সংরক্ষিত হয় না।",
-    "connect": "সংযোগ করুন",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "ড্রাইভ ফাইল",
-      "parent": "অভিভাবক ডিরেক্টরি",
-      "refresh": "রিফ্রেশ",
-      "empty": "এই ফোল্ডারটি খালি",
-      "listFailed": "এই ফোল্ডারটি পড়তে ব্যর্থ হয়েছে",
-      "download": "ডাউনলোড করুন",
-      "downloadFailed": "{{name}} ডাউনলোড করতে ব্যর্থ হয়েছে",
-      "upload": "ফাইল আপলোড করুন",
-      "uploading": "{{name}} আপলোড হচ্ছে ...",
-      "uploaded": "আপলোড করা হয়েছে {{name}}",
-      "uploadFailed": "{{name}} আপলোড করতে ব্যর্থ হয়েছে",
-      "uploadDisabled": "এই সংযোগের জন্য আপলোড নিষ্ক্রিয় করা হয়েছে।",
-      "driveUnavailable": "ফাইল আপলোড করার আগে RDP ড্রাইভ রিডাইরেকশন সক্রিয় করুন।",
-      "driveNotWritable": "guacd ড্রাইভ ফোল্ডারে লিখতে পারছে না। GUACD_DRIVE_PATH (অথবা হোস্টের ড্রাইভ পাথ) এবং এর অনুমতিগুলো পরীক্ষা করুন।",
-      "dropToUpload": "আপলোড করতে ফাইলগুলো ড্রপ করুন"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "উইন+এল (লক স্ক্রিন)",
-      "winKey": "উইন্ডোজ কী",
-      "superL": "সুপার+এল (লক স্ক্রিন)",
-      "superKey": "সুপার কী",
-      "super": "সুপার",
-      "cmdL": "Cmd+L (লক স্ক্রিন)",
-      "cmdKey": "কমান্ড কী",
-      "cmd": "কমান্ডার",
-      "ctrl": "Ctrl",
-      "alt": "বিকল্প",
-      "shift": "শিফট",
-      "win": "জয়",
-      "stickyActive": "{{key}} (আটকানো - খুলতে ক্লিক করুন)",
-      "stickyInactive": "{{key}} (আটকাতে ক্লিক করুন)",
-      "esc": "পালানো",
-      "tab": "ট্যাব",
-      "home": "হোম",
-      "end": "শেষ",
-      "pageUp": "পৃষ্ঠা উপরে",
-      "pageDown": "পৃষ্ঠা নিচে",
-      "arrowUp": "তীর ঊর্ধ্বমুখী",
-      "arrowDown": "অ্যারো ডাউন",
-      "arrowLeft": "বাম তীর",
-      "arrowRight": "ডান তীরচিহ্ন",
-      "fnToggle": "ফাংশন কী",
-      "reconnect": "পুনরায় সংযোগ সেশন",
-      "collapse": "টুলবার সংকুচিত করুন",
-      "expand": "টুলবার প্রসারিত করুন",
-      "dragHandle": "অবস্থান পরিবর্তন করতে টেনে আনুন",
-      "hide": "এই সেশনের জন্য লুকান। এটিকে স্থায়ীভাবে নিষ্ক্রিয় করতে, হোস্ট সেটিংস → সাধারণ → সংযোগ টুলবার খুলুন।",
-      "zoomIn": "জুম ইন",
-      "zoomOut": "জুম আউট",
-      "resetZoom": "জুম রিসেট করুন",
-      "fitToScreen": "স্ক্রিনের সাথে মানানসই",
-      "switchToTrackpad": "ট্র্যাকপ্যাড মোডে যান (কার্সার সরাতে ড্র্যাগ করুন, ক্লিক করতে ট্যাপ করুন)",
-      "switchToTouch": "টাচ মোডে যান (যেখানে ক্লিক করতে চান সেখানে সরাসরি ট্যাপ করুন)"
-    },
-    "disabled": "রিমোট ডেস্কটপ বন্ধ করা আছে। একজন অ্যাডমিন সেটিংস থেকে এটি চালু করতে পারেন।"
-  },
-  "hosts": {
-    "nativeRdpOpened": "উইন্ডোজ রিমোট ডেস্কটপে খোলা হয়েছে",
-    "nativeRdpFailed": "উইন্ডোজ রিমোট ডেস্কটপ খুলতে ব্যর্থ হয়েছে",
-    "openNativeRdp": "উইন্ডোজ রিমোট ডেস্কটপে খুলুন",
-    "guac": {
-      "toolbar": "টুলবার",
-      "connection": "সংযোগ",
-      "authentication": "প্রমাণীকরণ",
-      "storedCredential": "সংরক্ষিত পরিচয়পত্র",
-      "authMethod": "প্রমাণীকরণ পদ্ধতি",
-      "authTypeDirect": "সরাসরি",
-      "authTypeCredential": "শংসাপত্র",
-      "authTypeNone": "কোনোটিই না",
-      "authTypeNoneDesc": "কোনো পরিচয়পত্র সংরক্ষিত থাকে না। প্রতিবার সংযোগ করার সময় আপনাকে একটি ইউজারনেম এবং পাসওয়ার্ড দিতে বলা হবে; সেগুলি সংরক্ষণ করা হয় না।",
-      "selectCredential": "একটি শংসাপত্র নির্বাচন করুন...",
-      "connectionSettings": "সংযোগ সেটিংস",
-      "displaySettings": "ডিসপ্লে সেটিংস",
-      "audioSettings": "অডিও সেটিংস",
-      "rdpPerformance": "আরডিপি পারফরম্যান্স",
-      "deviceRedirection": "ডিভাইস পুনঃনির্দেশনা",
-      "session": "অধিবেশন",
-      "gateway": "গেটওয়ে",
-      "remoteApp": "রিমোটঅ্যাপ",
-      "clipboard": "ক্লিপবোর্ড",
-      "sessionRecording": "সেশন রেকর্ডিং",
-      "wakeOnLan": "ওয়েক-অন-ল্যান",
-      "vncSettings": "VNC সেটিংস",
-      "terminalSettings": "টার্মিনাল সেটিংস",
-      "rdpPort": "আরডিপি পোর্ট",
-      "username": "ব্যবহারকারীর নাম",
-      "password": "পাসওয়ার্ড",
-      "passwordSaved": "পাসওয়ার্ড সংরক্ষিত আছে, পরিবর্তন করতে টাইপ করুন",
-      "domain": "ডোমেইন",
-      "securityMode": "নিরাপত্তা মোড",
-      "width": "প্রস্থ",
-      "height": "উচ্চতা",
-      "dpi": "ডিপিআই",
-      "clientName": "ক্লায়েন্টের নাম",
-      "initialProgram": "প্রাথমিক প্রোগ্রাম",
-      "serverLayout": "সার্ভার লেআউট",
-      "timezone": "সময় অঞ্চল",
-      "loadBalanceInfo": "লোড ব্যালেন্স তথ্য / কুকি",
-      "loadBalanceInfoDesc": "RDS ফার্ম লোড ব্যালান্সিংয়ের জন্য RD কানেকশন ব্রোকার কুকি (যেমন tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "গুয়াকড প্রক্সি",
-      "guacdHostname": "গুয়াকড হোস্ট",
-      "guacdHostnamePlaceholder": "গ্লোবাল ডিফল্ট",
-      "guacdPort": "গুয়াকড পোর্ট",
-      "guacdProxyDesc": "এই সংযোগের জন্য গ্লোবাল guacd ইনস্ট্যান্সটি ওভাররাইড করুন। বিশ্বব্যাপী কনফিগার করা guacd ব্যবহার করতে এটি খালি রাখুন।",
-      "gatewayHostname": "গেটওয়ে হোস্টনাম",
-      "gatewayPort": "গেটওয়ে পোর্ট",
-      "gatewayUsername": "গেটওয়ে ব্যবহারকারীর নাম",
-      "gatewayPassword": "গেটওয়ে পাসওয়ার্ড",
-      "gatewayDomain": "গেটওয়ে ডোমেইন",
-      "remoteAppProgram": "রিমোটঅ্যাপ প্রোগ্রাম",
-      "workingDirectory": "কর্ম ডিরেক্টরি",
-      "arguments": "যুক্তি",
-      "normalizeLineEndings": "লাইনের শেষাংশ স্বাভাবিক করুন",
-      "macAddress": "MAC ঠিকানা",
-      "broadcastAddress": "সম্প্রচার ঠিকানা",
-      "udpPort": "ইউডিপি পোর্ট",
-      "waitTimeS": "অপেক্ষার সময় (সেকেন্ড)",
-      "driveName": "ড্রাইভের নাম",
-      "drivePath": "ড্রাইভ পাথ",
-      "ignoreCertificate": "সার্টিফিকেট উপেক্ষা করুন",
-      "ignoreCertificateDesc": "সেলফ-সাইনড সার্টিফিকেটযুক্ত হোস্টগুলিতে সংযোগের অনুমতি দিন",
-      "forceLossless": "বল ক্ষয়হীন",
-      "forceLosslessDesc": "লসলেস ইমেজ এনকোডিং বাধ্যতামূলক করুন (উচ্চতর গুণমান, বেশি ব্যান্ডউইথ)",
-      "disableAudio": "অডিও নিষ্ক্রিয় করুন",
-      "disableAudioDesc": "রিমোট সেশন থেকে সমস্ত অডিও মিউট করুন",
-      "enableAudioInput": "অডিও ইনপুট (মাইক্রোফোন) সক্রিয় করুন",
-      "enableAudioInputDesc": "স্থানীয় মাইক্রোফোনটি রিমোট সেশনে ফরোয়ার্ড করুন",
-      "wallpaper": "ওয়ালপেপার",
-      "wallpaperDesc": "ডেস্কটপ ওয়ালপেপার দেখান (এটি বন্ধ করলে পারফরম্যান্স উন্নত হয়)",
-      "theming": "থিমিং",
-      "themingDesc": "ভিজ্যুয়াল থিম এবং স্টাইল সক্রিয় করুন",
-      "fontSmoothing": "ফন্ট মসৃণকরণ",
-      "fontSmoothingDesc": "ক্লিয়ারটাইপ ফন্ট রেন্ডারিং সক্ষম করুন",
-      "fullWindowDrag": "সম্পূর্ণ উইন্ডো ড্র্যাগ",
-      "fullWindowDragDesc": "ড্র্যাগ করার সময় উইন্ডোর বিষয়বস্তু দেখান",
-      "desktopComposition": "ডেস্কটপ কম্পোজিশন",
-      "desktopCompositionDesc": "এরো গ্লাস এফেক্টস সক্রিয় করুন",
-      "menuAnimations": "মেনু অ্যানিমেশন",
-      "menuAnimationsDesc": "মেনু ফেড এবং স্লাইড অ্যানিমেশন সক্রিয় করুন",
-      "disableBitmapCaching": "বিটম্যাপ ক্যাশিং নিষ্ক্রিয় করুন",
-      "disableBitmapCachingDesc": "বিটম্যাপ ক্যাশে বন্ধ করুন (এটি গ্লিচ কমাতে সাহায্য করতে পারে)।",
-      "disableOffscreenCaching": "অফস্ক্রিন ক্যাশিং নিষ্ক্রিয় করুন",
-      "disableOffscreenCachingDesc": "অফস্ক্রিন ক্যাশে বন্ধ করুন",
-      "disableGlyphCaching": "গ্লিফ ক্যাশিং নিষ্ক্রিয় করুন",
-      "disableGlyphCachingDesc": "গ্লিফ ক্যাশে বন্ধ করুন",
-      "enableGfx": "GFX সক্ষম করুন",
-      "enableGfxDesc": "RemoteFX গ্রাফিক্স পাইপলাইন ব্যবহার করুন",
-      "enablePrinting": "প্রিন্টিং সক্ষম করুন",
-      "enablePrintingDesc": "স্থানীয় প্রিন্টারগুলিকে রিমোট সেশনে পুনঃনির্দেশিত করুন",
-      "enableDriveRedirection": "ড্রাইভ পুনঃনির্দেশনা সক্ষম করুন",
-      "enableDriveRedirectionDesc": "রিমোট সেশনে একটি স্থানীয় ফোল্ডারকে ড্রাইভ হিসেবে ম্যাপ করুন।",
-      "createDrivePath": "ড্রাইভ পাথ তৈরি করুন",
-      "createDrivePathDesc": "ফোল্ডারটি বিদ্যমান না থাকলে স্বয়ংক্রিয়ভাবে তৈরি করুন।",
-      "disableDownload": "ডাউনলোড নিষ্ক্রিয় করুন",
-      "disableDownloadDesc": "রিমোট সেশন থেকে ফাইল ডাউনলোড প্রতিরোধ করুন",
-      "disableUpload": "আপলোড নিষ্ক্রিয় করুন",
-      "disableUploadDesc": "রিমোট সেশনে ফাইল আপলোড করা প্রতিরোধ করুন",
-      "enableTouch": "টাচ সক্ষম করুন",
-      "enableTouchDesc": "টাচ ইনপুট ফরওয়ার্ডিং সক্ষম করুন",
-      "consoleSession": "কনসোল সেশন",
-      "consoleSessionDesc": "নতুন সেশন শুরু করার পরিবর্তে কনসোলে (সেশন ০) সংযোগ করুন।",
-      "sendWolPacket": "WOL প্যাকেট পাঠান",
-      "sendWolPacketDesc": "সংযোগ করার আগে এই হোস্টকে জাগিয়ে তুলতে একটি ম্যাজিক প্যাকেট পাঠান।",
-      "disableCopy": "কপি নিষ্ক্রিয় করুন",
-      "disableCopyDesc": "রিমোট সেশন থেকে টেক্সট কপি করা প্রতিরোধ করুন",
-      "disablePaste": "পেস্ট নিষ্ক্রিয় করুন",
-      "disablePasteDesc": "রিমোট সেশনে টেক্সট পেস্ট করা প্রতিরোধ করুন",
-      "createPathIfMissing": "অনুপস্থিত থাকলে পাথ তৈরি করুন",
-      "createPathIfMissingDesc": "স্বয়ংক্রিয়ভাবে রেকর্ডিং ডিরেক্টরি তৈরি করুন",
-      "excludeOutput": "আউটপুট বাদ দিন",
-      "excludeOutputDesc": "স্ক্রিন আউটপুট রেকর্ড করবেন না (শুধুমাত্র মেটাডেটা)",
-      "excludeMouse": "মাউস বাদ দিন",
-      "excludeMouseDesc": "মাউসের নড়াচড়া রেকর্ড করবেন না।",
-      "includeKeystrokes": "কীস্ট্রোক অন্তর্ভুক্ত করুন",
-      "includeKeystrokesDesc": "স্ক্রিন আউটপুটের পাশাপাশি সরাসরি কীস্ট্রোক রেকর্ড করুন।",
-      "vncPort": "ভিএনসি পোর্ট",
-      "vncPassword": "VNC পাসওয়ার্ড",
-      "vncUsernameOptional": "ব্যবহারকারীর নাম (ঐচ্ছিক)",
-      "vncLeaveBlank": "প্রয়োজন না হলে খালি রাখুন",
-      "cursorMode": "কার্সার মোড",
-      "swapRedBlue": "লাল/নীল অদলবদল করুন",
-      "swapRedBlueDesc": "লাল এবং নীল রঙের চ্যানেলগুলি অদলবদল করুন (কিছু রঙের সমস্যা সমাধান করে)",
-      "readOnly": "শুধুমাত্র পঠনযোগ্য",
-      "readOnlyDesc": "কোনো ইনপুট না পাঠিয়ে রিমোট স্ক্রিন দেখুন।",
-      "telnetPort": "টেলনেট পোর্ট",
-      "terminalType": "টার্মিনাল টাইপ",
-      "fontName": "ফন্টের নাম",
-      "fontSize": "ফন্ট সাইজ",
-      "colorScheme": "রঙের পরিকল্পনা",
-      "backspaceKey": "ব্যাকস্পেস কী",
-      "colorDepth": "রঙের গভীরতা",
-      "resizeMethod": "আকার পরিবর্তন পদ্ধতি",
-      "driveNamePlaceholder": "টারমিক্স ড্রাইভ",
-      "options": {
-        "any": "যেকোনো",
-        "auto": "অটো",
-        "nlaExtended": "এনএলএ বর্ধিত",
-        "color8": "৮-বিট",
-        "color16": "১৬-বিট",
-        "color24": "২৪-বিট",
-        "color32": "৩২-বিট",
-        "displayUpdate": "ডিসপ্লে আপডেট",
-        "reconnect": "পুনরায় সংযোগ করুন",
-        "preserve": "সংরক্ষণ করুন",
-        "unix": "ইউনিক্স (এলএফ)",
-        "windows": "উইন্ডোজ (CRLF)",
-        "local": "স্থানীয়",
-        "remote": "দূরবর্তী",
-        "failsafe": "ব্যর্থতারোধী",
-        "blackOnWhite": "সাদার উপর কালো",
-        "whiteOnBlack": "কালোর উপর সাদা",
-        "grayOnBlack": "কালোর উপর ধূসর",
-        "greenOnBlack": "কালোর উপর সবুজ"
-      }
-    },
-    "remoteDesktop": "রিমোট ডেস্কটপ",
-    "tabRdp": "আরডিপি",
-    "tabVnc": "ভিএনসি",
-    "tabTelnet": "টেলনেট",
-    "virtualNetwork": "ভার্চুয়াল নেটওয়ার্ক",
-    "unencryptedShell": "এনক্রিপ্টবিহীন শেল",
-    "remoteDesktopNotes": "নোট",
-    "userDefaultsNote": "আপনি যে সেটিংস অপরিবর্তিত রাখবেন, তা আপনার হোস্টের ডিফল্ট অনুযায়ী নির্ধারিত হবে।",
-    "connectionOriginNote": "ডেস্কটপ অ্যাপে, RDP, VNC এবং Telnet রিমোট সার্ভার ব্যবহার করে, যদি না হোস্টটি 'এই ডিভাইস' (This device) হিসেবে সেট করা থাকে। এর জন্য এমন একটি guacd প্রয়োজন, যা এই মেশিনের নাগালের মধ্যে থাকে। রিমোট ডেস্কটপ সেটিংসে অথবা প্রতিটি হোস্টের জন্য guacd প্রক্সির অধীনে এটি সেট করুন।",
-    "docsLink": "নথি দেখুন",
-    "connectionOriginGuacamoleNote": "RDP, VNC এবং Telnet রিমোট সার্ভার ব্যবহার করে, যদি না আপনি \"এই ডিভাইস\" বিকল্পটি বেছে নেন, যার জন্য এমন একটি guacd প্রয়োজন যা এই মেশিনের নাগালের মধ্যে থাকে। guacd URL সেটিংসে, অথবা প্রতিটি হোস্টের জন্য guacd Proxy-এর অধীনে এটি সেট করুন।"
-  },
-  "onboarding": {
-    "feature_desktop": "রিমোট ডেস্কটপ",
-    "feature_desktop_desc": "SSH-এর মতোই একটি ট্যাবে RDP, VNC এবং Telnet সেশন খুলুন।"
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "রঙের গভীরতা",
-        "description": "যেসব RDP হোস্ট তাদের ডিফল্ট সেটিংসে রাখে, তাদের জন্য ব্যবহৃত হয়।"
-      },
-      "resizeMethod": {
-        "label": "আকার পরিবর্তন পদ্ধতি",
-        "description": "রিমোট স্ক্রিনটি কীভাবে উইন্ডোর আকার অনুসরণ করে"
-      },
-      "resizeDisplayUpdate": "ডিসপ্লে আপডেট",
-      "resizeReconnect": "পুনরায় সংযোগ করুন",
-      "inherit": "উত্তরাধিকার সূত্রে",
-      "on": "চালু",
-      "off": "বন্ধ",
-      "forceLossless": {
-        "label": "বল ক্ষয়হীন",
-        "description": "লসলেস ইমেজ এনকোডিং বাধ্যতামূলক করুন (উচ্চতর গুণমান, বেশি ব্যান্ডউইথ)"
-      },
-      "enableWallpaper": {
-        "label": "ওয়ালপেপার",
-        "description": "ডেস্কটপ ওয়ালপেপার দেখান (এটি বন্ধ করলে পারফরম্যান্স উন্নত হয়)"
-      },
-      "enableFontSmoothing": {
-        "label": "ফন্ট মসৃণকরণ",
-        "description": "ক্লিয়ারটাইপ ফন্ট রেন্ডারিং সক্ষম করুন"
-      },
-      "enableDesktopComposition": {
-        "label": "ডেস্কটপ কম্পোজিশন",
-        "description": "এরো গ্লাস এফেক্টস সক্রিয় করুন"
-      },
-      "disableAudio": {
-        "label": "অডিও নিষ্ক্রিয় করুন",
-        "description": "রিমোট সেশন থেকে সমস্ত অডিও মিউট করুন"
-      },
-      "enablePrinting": {
-        "label": "প্রিন্টিং সক্ষম করুন",
-        "description": "স্থানীয় প্রিন্টারগুলিকে রিমোট সেশনে পুনঃনির্দেশিত করুন"
-      },
-      "enableDrive": {
-        "label": "ড্রাইভ পুনঃনির্দেশনা সক্ষম করুন",
-        "description": "রিমোট সেশনে একটি স্থানীয় ফোল্ডারকে ড্রাইভ হিসেবে ম্যাপ করুন।"
-      },
-      "disableCopy": {
-        "label": "কপি নিষ্ক্রিয় করুন",
-        "description": "রিমোট সেশন থেকে টেক্সট কপি করা প্রতিরোধ করুন"
-      },
-      "disablePaste": {
-        "label": "পেস্ট নিষ্ক্রিয় করুন",
-        "description": "রিমোট সেশনে টেক্সট পেস্ট করা প্রতিরোধ করুন"
-      },
-      "group": "রিমোট ডেস্কটপ ডিফল্ট",
-      "colorDepth16": "১৬-বিট",
-      "colorDepth24": "২৪-বিট",
-      "colorDepth32": "৩২-বিট"
-    },
-    "admin": {
-      "enabled": {
-        "label": "রিমোট ডেস্কটপ সক্ষম করুন",
-        "description": "guacd-এর মাধ্যমে RDP, VNC এবং Telnet সংযোগের অনুমতি দিন।"
-      },
-      "guacdUrl": {
-        "label": "guacd URL",
-        "description": "guacd কোথায় শোনে, তা হোস্ট:পোর্ট হিসেবে নির্ধারিত হয়। GUACD_URL, GUACD_HOST এবং GUACD_PORT এনভায়রনমেন্ট ভেরিয়েবলগুলো এটিকে ওভাররাইড করে।",
-        "placeholder": "গুয়াকডি:৪৮২২"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "আরডিপি"
-      },
-      "enableVnc": {
-        "label": "ভিএনসি"
-      },
-      "enableTelnet": {
-        "label": "টেলনেট"
-      },
-      "rdpPort": {
-        "label": "আরডিপি পোর্ট"
-      },
-      "vncPort": {
-        "label": "VNC পোর্ট"
-      },
-      "telnetPort": {
-        "label": "টেলনেট পোর্ট"
-      },
-      "rdpSecurity": {
-        "label": "আরডিপি নিরাপত্তা মোড"
-      },
-      "rdpIgnoreCert": {
-        "label": "সার্টিফিকেটের ত্রুটি উপেক্ষা করুন"
-      },
-      "guacamoleConfig": {
-        "label": "guacd সেটিংস"
-      },
-      "enableToolbar": {
-        "label": "রিমোট ডেস্কটপ টুলবার",
-        "description": "RDP, VNC এবং Telnet সেশনে টুলবারটি দেখান।"
-      },
-      "displayGroup": "প্রদর্শন",
-      "displayDefaultsTab": "রিমোট ডেস্কটপ"
-    }
-  },
-  "palette": {
-    "connectRdp": "RDP-এর সাথে সংযোগ করুন",
-    "connectVnc": "VNC দিয়ে সংযোগ করুন",
-    "connectTelnet": "টেলনেটের সাথে সংযোগ করুন"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "রিমোট ডেস্কটপ সেশন শেয়ার করুন",
-      "description": "সেশন শেয়ারিং এবং কোলাব রুমগুলোকে এই ব্যবহারকারীর RDP, VNC এবং Telnet সেশনগুলো অন্যদের কাছে দেখানোর অনুমতি দিন।"
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "রিমোট সার্ভার প্রয়োজন। এই সংযোগের ধরণটি ব্যবহার করতে সেটিংস-এ একটি রিমোট সার্ভার সংযুক্ত করুন।"
-  },
-  "plugin": {
-    "name": "রিমোট ডেস্কটপ"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/ca_ES.json b/plugins/remote-desktop/locales/translated/ca_ES.json
deleted file mode 100644
index 4812f9c2d..000000000
--- a/plugins/remote-desktop/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "Connectant a la sessió {{type}}...",
-    "checkingGuacd": "S'està comprovant el servei d'escriptori remot...",
-    "requestingToken": "Sol·licitant el testimoni de connexió {{type}}...",
-    "openingSession": "Obrint sessió {{type}}...",
-    "negotiating": "Negociant una {{type}} encaixada de mans...",
-    "sessionReady": "{{type}} sessió a punt",
-    "connectionError": "Error de connexió",
-    "connectionFailed": "La connexió ha fallat",
-    "failedToConnect": "No s'ha pogut obtenir el testimoni de connexió",
-    "hostNotFound": "No s'ha trobat l'amfitrió",
-    "noHostSelected": "No s'ha seleccionat cap amfitrió",
-    "reconnect": "Reconnecta",
-    "retry": "Torna-ho a intentar",
-    "guacdUnavailable": "El servei d'escriptori remot (guacd) no està disponible. Assegureu-vos que guacd estigui en execució, sigui accessible i estigui configurat correctament a la configuració d'administrador.",
-    "credentialPromptTitle": "Introduïu les credencials RDP",
-    "credentialPromptDescription": "Aquest amfitrió està configurat per demanar credencials en connectar-se. Només s'utilitzen per a aquesta sessió i no es desen.",
-    "connect": "Connecta",
-    "ctrlAltDel": "Ctrl+Alt+Supr",
-    "files": {
-      "title": "Fitxers de Drive",
-      "parent": "Directori principal",
-      "refresh": "Actualitza",
-      "empty": "Aquesta carpeta està buida",
-      "listFailed": "No s'ha pogut llegir aquesta carpeta",
-      "download": "Descarrega",
-      "downloadFailed": "No s'ha pogut descarregar {{name}}",
-      "upload": "Puja fitxers",
-      "uploading": "S'està carregant {{name}}...",
-      "uploaded": "Pujat {{name}}",
-      "uploadFailed": "No s'ha pogut carregar {{name}}",
-      "uploadDisabled": "Les càrregues estan desactivades per a aquesta connexió",
-      "driveUnavailable": "Activa la redirecció de la unitat RDP abans de carregar fitxers",
-      "driveNotWritable": "guacd no pot escriure a la carpeta de la unitat. Comproveu GUACD_DRIVE_PATH (o la ruta de la unitat de l'amfitrió) i els seus permisos.",
-      "dropToUpload": "Deixa anar els fitxers per pujar-los"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Supr",
-      "winL": "Win+L (Pantalla de bloqueig)",
-      "winKey": "Clau de Windows",
-      "superL": "Super+L (Pantalla de bloqueig)",
-      "superKey": "Superclau",
-      "super": "Súper",
-      "cmdL": "Cmd+L (Pantalla de bloqueig)",
-      "cmdKey": "Tecla de comandament",
-      "cmd": "Cmd",
-      "ctrl": "Ctrl",
-      "alt": "Alt",
-      "shift": "Majúscules",
-      "win": "Guanyar",
-      "stickyActive": "{{key}} (bloquejat - feu clic per alliberar)",
-      "stickyInactive": "{{key}} (feu clic per bloquejar)",
-      "esc": "Escapada",
-      "tab": "Pestanya",
-      "home": "Inici",
-      "end": "Final",
-      "pageUp": "Pàgina amunt",
-      "pageDown": "Pàgina avall",
-      "arrowUp": "Fletxa amunt",
-      "arrowDown": "Fletxa avall",
-      "arrowLeft": "Fletxa esquerra",
-      "arrowRight": "Fletxa dreta",
-      "fnToggle": "Tecles de funció",
-      "reconnect": "Sessió de reconnexió",
-      "collapse": "Replega la barra d'eines",
-      "expand": "Expandeix la barra d'eines",
-      "dragHandle": "Arrossega per reposicionar",
-      "hide": "Amaga-ho per a aquesta sessió. Per desactivar-ho permanentment, obriu Configuració de l'amfitrió → General → Barra d'eines de connexió.",
-      "zoomIn": "Amplia la imatge",
-      "zoomOut": "Allunya",
-      "resetZoom": "Restableix el zoom",
-      "fitToScreen": "Ajusta a la pantalla",
-      "switchToTrackpad": "Canvia al mode trackpad (arrossega per moure el cursor, toca per fer clic)",
-      "switchToTouch": "Canvia al mode tàctil (toca directament on vols fer clic)"
-    },
-    "disabled": "L'escriptori remot està desactivat. Un administrador el pot activar a Configuració."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Obert a l'escriptori remot de Windows",
-    "nativeRdpFailed": "No s'ha pogut obrir l'escriptori remot de Windows",
-    "openNativeRdp": "Obre a l'escriptori remot de Windows",
-    "guac": {
-      "toolbar": "Barra d'eines",
-      "connection": "Connexió",
-      "authentication": "Autenticació",
-      "storedCredential": "Credencial emmagatzemada",
-      "authMethod": "Mètode d'autenticació",
-      "authTypeDirect": "Directe",
-      "authTypeCredential": "Credencial",
-      "authTypeNone": "Cap",
-      "authTypeNoneDesc": "No s'emmagatzemen les credencials. Se us demanarà un nom d'usuari i una contrasenya cada vegada que us connecteu; no es desen.",
-      "selectCredential": "Selecciona una credencial...",
-      "connectionSettings": "Configuració de connexió",
-      "displaySettings": "Configuració de la pantalla",
-      "audioSettings": "Configuració d'àudio",
-      "rdpPerformance": "Rendiment de l'RDP",
-      "deviceRedirection": "Redirecció de dispositius",
-      "session": "Sessió",
-      "gateway": "Porta d'entrada",
-      "remoteApp": "Aplicació remota",
-      "clipboard": "Porta-retalls",
-      "sessionRecording": "Gravació de sessions",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "Configuració de VNC",
-      "terminalSettings": "Configuració del terminal",
-      "rdpPort": "Port RDP",
-      "username": "Nom d'usuari",
-      "password": "Contrasenya",
-      "passwordSaved": "Contrasenya desada, escriu per canviar-la",
-      "domain": "Domini",
-      "securityMode": "Mode de seguretat",
-      "width": "Amplada",
-      "height": "Alçada",
-      "dpi": "DPI",
-      "clientName": "Nom del client",
-      "initialProgram": "Programa inicial",
-      "serverLayout": "Disseny del servidor",
-      "timezone": "Zona horària",
-      "loadBalanceInfo": "Informació de balanç de càrrega / Galeta",
-      "loadBalanceInfoDesc": "Galeta del broker de connexió RD per a l'equilibri de càrrega de granges RDS (per exemple, tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "Proxy guacd",
-      "guacdHostname": "Host guacd",
-      "guacdHostnamePlaceholder": "Predeterminat global",
-      "guacdPort": "Port de Guacd",
-      "guacdProxyDesc": "Substitueix la instància global de guacd per a aquesta connexió. Deixa-ho en blanc per utilitzar el guacd configurat globalment.",
-      "gatewayHostname": "Nom de l'amfitrió de la passarel·la",
-      "gatewayPort": "Port de passarel·la",
-      "gatewayUsername": "Nom d'usuari de la passarel·la",
-      "gatewayPassword": "Contrasenya de la passarel·la",
-      "gatewayDomain": "Domini de passarel·la",
-      "remoteAppProgram": "Programa RemoteApp",
-      "workingDirectory": "Directori de treball",
-      "arguments": "Arguments",
-      "normalizeLineEndings": "Normalitzar els finals de línia",
-      "macAddress": "Adreça MAC",
-      "broadcastAddress": "Adreça de difusió",
-      "udpPort": "Port UDP",
-      "waitTimeS": "Temps d'espera (s)",
-      "driveName": "Nom de la unitat",
-      "drivePath": "Camí de conducció",
-      "ignoreCertificate": "Ignora el certificat",
-      "ignoreCertificateDesc": "Permet connexions a amfitrions amb certificats autosignats",
-      "forceLossless": "Força sense pèrdues",
-      "forceLosslessDesc": "Força la codificació d'imatges sense pèrdues (més qualitat, més amplada de banda)",
-      "disableAudio": "Desactiva l'àudio",
-      "disableAudioDesc": "Silencia tot l'àudio de la sessió remota",
-      "enableAudioInput": "Activa l'entrada d'àudio (micròfon)",
-      "enableAudioInputDesc": "Reenvia el micròfon local a la sessió remota",
-      "wallpaper": "Fons de pantalla",
-      "wallpaperDesc": "Mostra el fons de pantalla de l'escriptori (desactivar-lo millora el rendiment)",
-      "theming": "Tematització",
-      "themingDesc": "Habilita els temes i estils visuals",
-      "fontSmoothing": "Suavitzat de fonts",
-      "fontSmoothingDesc": "Activa la renderització de fonts ClearType",
-      "fullWindowDrag": "Arrossegar per tota la finestra",
-      "fullWindowDragDesc": "Mostra el contingut de la finestra mentre arrossegues",
-      "desktopComposition": "Composició d'escriptori",
-      "desktopCompositionDesc": "Activa els efectes Aero Glass",
-      "menuAnimations": "Animacions de menú",
-      "menuAnimationsDesc": "Activa les animacions de diapositives i esvaïment del menú",
-      "disableBitmapCaching": "Desactiva la memòria cau de mapes de bits",
-      "disableBitmapCachingDesc": "Desactiva la memòria cau de mapes de bits (pot ajudar amb errors)",
-      "disableOffscreenCaching": "Desactiva la memòria cau fora de pantalla",
-      "disableOffscreenCachingDesc": "Desactiva la memòria cau fora de pantalla",
-      "disableGlyphCaching": "Desactiva la memòria cau de glifs",
-      "disableGlyphCachingDesc": "Desactiva la memòria cau de glifos",
-      "enableGfx": "Activa els efectes especials",
-      "enableGfxDesc": "Utilitza el canal de gràfics RemoteFX",
-      "enablePrinting": "Habilita la impressió",
-      "enablePrintingDesc": "Redirigir les impressores locals a la sessió remota",
-      "enableDriveRedirection": "Activa la redirecció de la unitat",
-      "enableDriveRedirectionDesc": "Assignar una carpeta local com a unitat a la sessió remota",
-      "createDrivePath": "Crea una ruta de conducció",
-      "createDrivePathDesc": "Crea automàticament la carpeta si no existeix",
-      "disableDownload": "Desactiva la descàrrega",
-      "disableDownloadDesc": "Impedir la descàrrega de fitxers des de la sessió remota",
-      "disableUpload": "Desactiva la càrrega",
-      "disableUploadDesc": "Impedir la càrrega de fitxers a la sessió remota",
-      "enableTouch": "Activa el tacte",
-      "enableTouchDesc": "Activa el reenviament d'entrada tàctil",
-      "consoleSession": "Sessió de consola",
-      "consoleSessionDesc": "Connecta't a la consola (sessió 0) en comptes d'una nova sessió",
-      "sendWolPacket": "Enviar paquet WOL",
-      "sendWolPacketDesc": "Envia un paquet màgic per despertar aquest host abans de connectar-se",
-      "disableCopy": "Desactiva la còpia",
-      "disableCopyDesc": "Impedir la còpia de text des de la sessió remota",
-      "disablePaste": "Desactiva l'enganxament",
-      "disablePasteDesc": "Impedir enganxar text a la sessió remota",
-      "createPathIfMissing": "Crea un camí si falta",
-      "createPathIfMissingDesc": "Crea automàticament el directori d'enregistrament",
-      "excludeOutput": "Exclou la sortida",
-      "excludeOutputDesc": "No enregistrar la sortida de pantalla (només metadades)",
-      "excludeMouse": "Exclou el ratolí",
-      "excludeMouseDesc": "No enregistreu els moviments del ratolí",
-      "includeKeystrokes": "Inclou les pulsacions de tecles",
-      "includeKeystrokesDesc": "Enregistra les pulsacions de tecles en brut a més de la sortida de la pantalla",
-      "vncPort": "Port VNC",
-      "vncPassword": "Contrasenya de VNC",
-      "vncUsernameOptional": "Nom d'usuari (opcional)",
-      "vncLeaveBlank": "Deixeu-ho en blanc si no és necessari",
-      "cursorMode": "Mode del cursor",
-      "swapRedBlue": "Intercanvia vermell/blau",
-      "swapRedBlueDesc": "Intercanvia els canals de color vermell i blau (corregeix alguns problemes de color)",
-      "readOnly": "Només lectura",
-      "readOnlyDesc": "Visualitza la pantalla remota sense enviar cap entrada",
-      "telnetPort": "Port Telnet",
-      "terminalType": "Tipus de terminal",
-      "fontName": "Nom de la font",
-      "fontSize": "Mida de la lletra",
-      "colorScheme": "Esquema de colors",
-      "backspaceKey": "Tecla Retrocés",
-      "colorDepth": "Profunditat de color",
-      "resizeMethod": "Mètode de redimensionament",
-      "driveNamePlaceholder": "Termix Drive",
-      "options": {
-        "any": "Qualsevol",
-        "auto": "Automàtic",
-        "nlaExtended": "NLA ampliat",
-        "color8": "8 bits",
-        "color16": "16 bits",
-        "color24": "24 bits",
-        "color32": "32 bits",
-        "displayUpdate": "Actualització de la pantalla",
-        "reconnect": "Reconnecta",
-        "preserve": "Preservar",
-        "unix": "Unix (LF)",
-        "windows": "Windows (CRLF)",
-        "local": "Local",
-        "remote": "Remot",
-        "failsafe": "a prova de fallades",
-        "blackOnWhite": "Negre sobre blanc",
-        "whiteOnBlack": "Blanc sobre negre",
-        "grayOnBlack": "Gris sobre negre",
-        "greenOnBlack": "Verd sobre negre"
-      }
-    },
-    "remoteDesktop": "Escriptori remot",
-    "tabRdp": "RDP",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "Xarxa virtual",
-    "unencryptedShell": "Shell sense xifrar",
-    "remoteDesktopNotes": "Notes",
-    "userDefaultsNote": "La configuració que deixeu sense canvis segueix els valors predeterminats de l'amfitrió.",
-    "connectionOriginNote": "A l'aplicació d'escriptori, RDP, VNC i Telnet utilitzen el servidor remot tret que l'amfitrió estigui configurat com a Aquest dispositiu, que necessita un guacd al qual pugui arribar aquesta màquina. Configureu-ne un a la configuració de l'escriptori remot o per amfitrió a guacd Proxy.",
-    "docsLink": "Veure documents",
-    "connectionOriginGuacamoleNote": "RDP, VNC i Telnet utilitzen el servidor remot tret que seleccioneu \"Aquest dispositiu\", que necessita un guacd al qual aquesta màquina pugui arribar. Definiu-ne un a la configuració de l'URL guacd o per host a guacd Proxy."
-  },
-  "onboarding": {
-    "feature_desktop": "Escriptori remot",
-    "feature_desktop_desc": "Obriu sessions RDP, VNC i Telnet en una pestanya, igual que SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Profunditat de color",
-        "description": "S'utilitza per a hosts RDP que el deixen per defecte."
-      },
-      "resizeMethod": {
-        "label": "Mètode de redimensionament",
-        "description": "Com la pantalla remota segueix la mida de la finestra."
-      },
-      "resizeDisplayUpdate": "Actualització de la pantalla",
-      "resizeReconnect": "Reconnecta",
-      "inherit": "Heretar",
-      "on": "Activat",
-      "off": "Desactivat",
-      "forceLossless": {
-        "label": "Força sense pèrdues",
-        "description": "Força la codificació d'imatges sense pèrdues (més qualitat, més amplada de banda)"
-      },
-      "enableWallpaper": {
-        "label": "Fons de pantalla",
-        "description": "Mostra el fons de pantalla de l'escriptori (desactivar-lo millora el rendiment)"
-      },
-      "enableFontSmoothing": {
-        "label": "Suavitzat de fonts",
-        "description": "Activa la renderització de fonts ClearType"
-      },
-      "enableDesktopComposition": {
-        "label": "Composició d'escriptori",
-        "description": "Activa els efectes Aero Glass"
-      },
-      "disableAudio": {
-        "label": "Desactiva l'àudio",
-        "description": "Silencia tot l'àudio de la sessió remota"
-      },
-      "enablePrinting": {
-        "label": "Habilita la impressió",
-        "description": "Redirigir les impressores locals a la sessió remota"
-      },
-      "enableDrive": {
-        "label": "Activa la redirecció de la unitat",
-        "description": "Assignar una carpeta local com a unitat a la sessió remota"
-      },
-      "disableCopy": {
-        "label": "Desactiva la còpia",
-        "description": "Impedir la còpia de text des de la sessió remota"
-      },
-      "disablePaste": {
-        "label": "Desactiva l'enganxament",
-        "description": "Impedir enganxar text a la sessió remota"
-      },
-      "group": "Valors predeterminats d'escriptori remot",
-      "colorDepth16": "16 bits",
-      "colorDepth24": "24 bits",
-      "colorDepth32": "32 bits"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Habilita l'escriptori remot",
-        "description": "Permet connexions RDP, VNC i Telnet a través de guacd."
-      },
-      "guacdUrl": {
-        "label": "URL de guacd",
-        "description": "On guacd escolta, com a host:port. Les variables d'entorn GUACD_URL, GUACD_HOST i GUACD_PORT ho anul·len.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "RDP"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "Port RDP"
-      },
-      "vncPort": {
-        "label": "Port VNC"
-      },
-      "telnetPort": {
-        "label": "Port Telnet"
-      },
-      "rdpSecurity": {
-        "label": "Mode de seguretat RDP"
-      },
-      "rdpIgnoreCert": {
-        "label": "Ignora els errors de certificat"
-      },
-      "guacamoleConfig": {
-        "label": "configuració de guacd"
-      },
-      "enableToolbar": {
-        "label": "Barra d'eines d'escriptori remot",
-        "description": "Mostra la barra d'eines a les sessions RDP, VNC i Telnet."
-      },
-      "displayGroup": "Pantalla",
-      "displayDefaultsTab": "Escriptori remot"
-    }
-  },
-  "palette": {
-    "connectRdp": "Connecta't amb RDP",
-    "connectVnc": "Connecta amb VNC",
-    "connectTelnet": "Connecta amb Telnet"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Compartir sessions d'escriptori remot",
-      "description": "Permet que les sales de compartició de sessions i col·laboració mostrin les sessions RDP, VNC i Telnet d'aquest usuari a altres persones."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Cal un servidor remot. Connecteu un servidor remot a Configuració per utilitzar aquest tipus de connexió."
-  },
-  "plugin": {
-    "name": "Escriptori remot"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/cs_CZ.json b/plugins/remote-desktop/locales/translated/cs_CZ.json
deleted file mode 100644
index 96e0f714b..000000000
--- a/plugins/remote-desktop/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "Připojování k relaci {{type}}...",
-    "checkingGuacd": "Kontrola služby vzdálené plochy...",
-    "requestingToken": "Žádost o token připojení {{type}}...",
-    "openingSession": "Otevírání {{type}} relace...",
-    "negotiating": "Vyjednávání {{type}} podání ruky...",
-    "sessionReady": "{{type}} relace připravena",
-    "connectionError": "Chyba připojení",
-    "connectionFailed": "Připojení se nezdařilo",
-    "failedToConnect": "Nepodařilo se získat token připojení",
-    "hostNotFound": "Hostitel nenalezen",
-    "noHostSelected": "Nebyl vybrán žádný hostitel",
-    "reconnect": "Znovu se připojte",
-    "retry": "Zkusit znovu",
-    "guacdUnavailable": "Služba vzdálené plochy (guacd) není k dispozici. Ujistěte se prosím, že je guacd spuštěná, přístupná a správně nakonfigurovaná v nastavení administrátora.",
-    "credentialPromptTitle": "Zadejte přihlašovací údaje RDP",
-    "credentialPromptDescription": "Tento hostitel je nastaven tak, aby při připojení vyžadoval přihlašovací údaje. Tyto přihlašovací údaje se používají pouze pro tuto relaci a neukládají se.",
-    "connect": "Připojit",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "Soubory na Disku",
-      "parent": "Nadřazený adresář",
-      "refresh": "Obnovit",
-      "empty": "Tato složka je prázdná",
-      "listFailed": "Tuto složku se nepodařilo přečíst.",
-      "download": "Stáhnout",
-      "downloadFailed": "Stažení se nezdařilo {{name}}",
-      "upload": "Nahrát soubory",
-      "uploading": "Nahrávání {{name}}...",
-      "uploaded": "Nahráno {{name}}",
-      "uploadFailed": "Nahrávání se nezdařilo {{name}}",
-      "uploadDisabled": "Nahrávání je pro toto připojení zakázáno.",
-      "driveUnavailable": "Před nahráváním souborů povolte přesměrování disku RDP",
-      "driveNotWritable": "Příkaz guacd nemůže zapisovat do složky na disku. Zkontrolujte cestu k disku GUACD_DRIVE_PATH (nebo cestu k disku hostitele) a její oprávnění.",
-      "dropToUpload": "Přetáhněte soubory k nahrání"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (Zamykání obrazovky)",
-      "winKey": "Klávesa Windows",
-      "superL": "Super+L (Zamykací obrazovka)",
-      "superKey": "Super klíč",
-      "super": "Super",
-      "cmdL": "Cmd+L (Zamykací obrazovka)",
-      "cmdKey": "Příkazový klíč",
-      "cmd": "Příkaz",
-      "ctrl": "Ctrl",
-      "alt": "Alternativní",
-      "shift": "Posun",
-      "win": "Vyhrát",
-      "stickyActive": "{{key}} (zajištěno - kliknutím uvolníte)",
-      "stickyInactive": "{{key}} (kliknutím zajistíte)",
-      "esc": "Uniknout",
-      "tab": "Záložka",
-      "home": "Domov",
-      "end": "Konec",
-      "pageUp": "Stránka nahoru",
-      "pageDown": "Stránka dolů",
-      "arrowUp": "Šipka nahoru",
-      "arrowDown": "Šipka dolů",
-      "arrowLeft": "Šipka vlevo",
-      "arrowRight": "Šipka vpravo",
-      "fnToggle": "Funkční klávesy",
-      "reconnect": "Znovu připojit relaci",
-      "collapse": "Sbalit panel nástrojů",
-      "expand": "Rozbalit panel nástrojů",
-      "dragHandle": "Přetažením změníte pozici",
-      "hide": "Skrýt pro tuto relaci. Chcete-li jej trvale zakázat, otevřete Nastavení hostitele → Obecné → Panel nástrojů pro připojení.",
-      "zoomIn": "Přiblížit",
-      "zoomOut": "Oddálit",
-      "resetZoom": "Obnovit zoom",
-      "fitToScreen": "Přizpůsobit obrazovce",
-      "switchToTrackpad": "Přepnout do režimu trackpadu (tažením přesunete kurzor, klepnutím kliknete)",
-      "switchToTouch": "Přepnout do dotykového režimu (klepněte přímo na místo, kam chcete kliknout)"
-    },
-    "disabled": "Vzdálená plocha je vypnutá. Správce ji může zapnout v Nastavení."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Otevřeno ve Vzdálené ploše systému Windows",
-    "nativeRdpFailed": "Nepodařilo se otevřít Vzdálenou plochu systému Windows",
-    "openNativeRdp": "Otevřít ve Vzdálené ploše systému Windows",
-    "guac": {
-      "toolbar": "Panel nástrojů",
-      "connection": "Spojení",
-      "authentication": "Ověřování",
-      "storedCredential": "Uložené přihlašovací údaje",
-      "authMethod": "Metoda ověřování",
-      "authTypeDirect": "Řídit",
-      "authTypeCredential": "Přihlašovací údaj",
-      "authTypeNone": "Žádný",
-      "authTypeNoneDesc": "Nejsou uloženy žádné přihlašovací údaje. Při každém připojení budete vyzváni k zadání uživatelského jména a hesla; tyto údaje se neukládají.",
-      "selectCredential": "Vyberte pověření...",
-      "connectionSettings": "Nastavení připojení",
-      "displaySettings": "Nastavení displeje",
-      "audioSettings": "Nastavení zvuku",
-      "rdpPerformance": "Výkon RDP",
-      "deviceRedirection": "Přesměrování zařízení",
-      "session": "Zasedání",
-      "gateway": "Brána",
-      "remoteApp": "Vzdálená aplikace",
-      "clipboard": "Schránka",
-      "sessionRecording": "Nahrávání relace",
-      "wakeOnLan": "Probuzení přes LAN",
-      "vncSettings": "Nastavení VNC",
-      "terminalSettings": "Nastavení terminálu",
-      "rdpPort": "RDP port",
-      "username": "Uživatelské jméno",
-      "password": "Heslo",
-      "passwordSaved": "Heslo uloženo, zadejte heslo pro změnu",
-      "domain": "Doména",
-      "securityMode": "Bezpečnostní režim",
-      "width": "Šířka",
-      "height": "Výška",
-      "dpi": "DPI",
-      "clientName": "Jméno klienta",
-      "initialProgram": "Počáteční program",
-      "serverLayout": "Rozložení serveru",
-      "timezone": "Časové pásmo",
-      "loadBalanceInfo": "Informace o vyrovnávání zátěže / soubor cookie",
-      "loadBalanceInfoDesc": "Soubor cookie RD Connection Broker pro vyvažování zátěže farmy RDS (např. tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "Proxy GUACD",
-      "guacdHostname": "Hostitel guacd",
-      "guacdHostnamePlaceholder": "Globální výchozí nastavení",
-      "guacdPort": "Port GUACD",
-      "guacdProxyDesc": "Pro toto připojení přepište globální instanci guacd. Pokud chcete použít globálně nakonfigurovaný guacd, ponechte pole prázdné.",
-      "gatewayHostname": "Název hostitele brány",
-      "gatewayPort": "Port brány",
-      "gatewayUsername": "Uživatelské jméno brány",
-      "gatewayPassword": "Heslo brány",
-      "gatewayDomain": "Doména brány",
-      "remoteAppProgram": "Program RemoteApp",
-      "workingDirectory": "Pracovní adresář",
-      "arguments": "Argumenty",
-      "normalizeLineEndings": "Normalizovat konce řádků",
-      "macAddress": "MAC adresa",
-      "broadcastAddress": "Vysílací adresa",
-      "udpPort": "UDP port",
-      "waitTimeS": "Čekací doba (s)",
-      "driveName": "Název disku",
-      "drivePath": "Cesta pohonu",
-      "ignoreCertificate": "Ignorovat certifikát",
-      "ignoreCertificateDesc": "Povolit připojení k hostitelům s certifikáty podepsanými držitelem",
-      "forceLossless": "Vynutit bezztrátové",
-      "forceLosslessDesc": "Vynucení bezztrátového kódování obrazu (vyšší kvalita, větší šířka pásma)",
-      "disableAudio": "Zakázat zvuk",
-      "disableAudioDesc": "Ztlumit veškerý zvuk ze vzdálené relace",
-      "enableAudioInput": "Povolit zvukový vstup (mikrofon)",
-      "enableAudioInputDesc": "Přesměrování lokálního mikrofonu do vzdálené relace",
-      "wallpaper": "Tapeta",
-      "wallpaperDesc": "Zobrazit tapetu plochy (zakázání zlepšuje výkon)",
-      "theming": "Témata",
-      "themingDesc": "Povolit vizuální motivy a styly",
-      "fontSmoothing": "Vyhlazování písma",
-      "fontSmoothingDesc": "Povolit vykreslování písma ClearType",
-      "fullWindowDrag": "Přetažení celého okna",
-      "fullWindowDragDesc": "Zobrazit obsah okna při přetahování",
-      "desktopComposition": "Složení plochy",
-      "desktopCompositionDesc": "Povolit efekty Aero Glass",
-      "menuAnimations": "Animace v menu",
-      "menuAnimationsDesc": "Povolit animace prolínání a snímání nabídek",
-      "disableBitmapCaching": "Zakázat ukládání bitmap do mezipaměti",
-      "disableBitmapCachingDesc": "Vypnout mezipaměť bitmap (může pomoci s chybami)",
-      "disableOffscreenCaching": "Zakázat ukládání do mezipaměti mimo obrazovku",
-      "disableOffscreenCachingDesc": "Vypnout mezipaměť mimo obrazovku",
-      "disableGlyphCaching": "Zakázat ukládání glyfů do mezipaměti",
-      "disableGlyphCachingDesc": "Vypnout mezipaměť glyfů",
-      "enableGfx": "Povolit grafické efekty",
-      "enableGfxDesc": "Použití grafického kanálu RemoteFX",
-      "enablePrinting": "Povolit tisk",
-      "enablePrintingDesc": "Přesměrování lokálních tiskáren na vzdálenou relaci",
-      "enableDriveRedirection": "Povolit přesměrování disku",
-      "enableDriveRedirectionDesc": "Namapování lokální složky jako jednotky ve vzdálené relaci",
-      "createDrivePath": "Vytvořit cestu k disku",
-      "createDrivePathDesc": "Automaticky vytvořit složku, pokud neexistuje",
-      "disableDownload": "Zakázat stahování",
-      "disableDownloadDesc": "Zabránit stahování souborů ze vzdálené relace",
-      "disableUpload": "Zakázat nahrávání",
-      "disableUploadDesc": "Zabránit nahrávání souborů do vzdálené relace",
-      "enableTouch": "Povolit dotyk",
-      "enableTouchDesc": "Povolit přesměrování dotykového vstupu",
-      "consoleSession": "Relace konzole",
-      "consoleSessionDesc": "Připojení ke konzoli (relace 0) namísto nové relace",
-      "sendWolPacket": "Odeslat paket WOL",
-      "sendWolPacketDesc": "Před připojením odešlete magický paket, který probudí tento hostitel.",
-      "disableCopy": "Zakázat kopírování",
-      "disableCopyDesc": "Zabránit kopírování textu ze vzdálené relace",
-      "disablePaste": "Zakázat vkládání",
-      "disablePasteDesc": "Zabránit vkládání textu do vzdálené relace",
-      "createPathIfMissing": "Vytvořit cestu, pokud chybí",
-      "createPathIfMissingDesc": "Automaticky vytvořit adresář pro nahrávání",
-      "excludeOutput": "Vyloučit výstup",
-      "excludeOutputDesc": "Nezaznamenávat výstup obrazovky (pouze metadata)",
-      "excludeMouse": "Vyloučit myš",
-      "excludeMouseDesc": "Nezaznamenávat pohyby myši",
-      "includeKeystrokes": "Zahrnout klávesové zkratky",
-      "includeKeystrokesDesc": "Zaznamenávat nezpracované stisky kláves kromě výstupu na obrazovku",
-      "vncPort": "VNC port",
-      "vncPassword": "Heslo VNC",
-      "vncUsernameOptional": "Uživatelské jméno (volitelné)",
-      "vncLeaveBlank": "Pokud není vyžadováno, nechte prázdné.",
-      "cursorMode": "Režim kurzoru",
-      "swapRedBlue": "Prohodit červenou/modrou",
-      "swapRedBlueDesc": "Prohoďte červený a modrý barevný kanál (opravuje některé problémy s barvami)",
-      "readOnly": "Pouze pro čtení",
-      "readOnlyDesc": "Zobrazení vzdálené obrazovky bez odesílání jakýchkoli vstupních dat",
-      "telnetPort": "Telnetový port",
-      "terminalType": "Typ terminálu",
-      "fontName": "Název písma",
-      "fontSize": "Velikost písma",
-      "colorScheme": "Barevné schéma",
-      "backspaceKey": "Klávesa Backspace",
-      "colorDepth": "Barevná hloubka",
-      "resizeMethod": "Metoda změny velikosti",
-      "driveNamePlaceholder": "Termix Drive",
-      "options": {
-        "any": "Žádný",
-        "auto": "Auto",
-        "nlaExtended": "NLA Extended",
-        "color8": "8bitový",
-        "color16": "16bitový",
-        "color24": "24bitový",
-        "color32": "32bitový",
-        "displayUpdate": "Aktualizace displeje",
-        "reconnect": "Znovu se připojte",
-        "preserve": "Zachovat",
-        "unix": "Unix (LF)",
-        "windows": "Windows (CRLF)",
-        "local": "Místní",
-        "remote": "Vzdálený",
-        "failsafe": "zabezpečený proti selhání",
-        "blackOnWhite": "Černá na bílém",
-        "whiteOnBlack": "Bílá na černé",
-        "grayOnBlack": "Šedá na černé",
-        "greenOnBlack": "Zelená na černém"
-      }
-    },
-    "remoteDesktop": "Vzdálená plocha",
-    "tabRdp": "PRV",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "Virtuální síť",
-    "unencryptedShell": "Nešifrovaný shell",
-    "remoteDesktopNotes": "Poznámky",
-    "userDefaultsNote": "Nastavení, která ponecháte beze změny, se řídí výchozími hodnotami vašeho hostitele.",
-    "connectionOriginNote": "V desktopové aplikaci používají RDP, VNC a Telnet vzdálený server, pokud není hostitel nastaven na Toto zařízení, které vyžaduje guacd, ke kterému má tento počítač přístup. Nastavte ho v nastavení Vzdálené plochy nebo pro každého hostitele v části guacd Proxy.",
-    "docsLink": "Zobrazit dokumenty",
-    "connectionOriginGuacamoleNote": "RDP, VNC a Telnet používají vzdálený server, pokud nevyberete možnost „Toto zařízení“, která vyžaduje GUACD, ke kterému má tento počítač přístup. Nastavte ho v nastavení URL GUACD nebo pro každého hostitele v části Proxy GUACD."
-  },
-  "onboarding": {
-    "feature_desktop": "Vzdálená plocha",
-    "feature_desktop_desc": "Otevírejte relace RDP, VNC a Telnet na kartě, stejně jako SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Barevná hloubka",
-        "description": "Používá se pro hostitele RDP, kteří jej ponechávají na výchozím nastavení."
-      },
-      "resizeMethod": {
-        "label": "Metoda změny velikosti",
-        "description": "Jak vzdálená obrazovka kopíruje velikost okna."
-      },
-      "resizeDisplayUpdate": "Aktualizace displeje",
-      "resizeReconnect": "Znovu se připojte",
-      "inherit": "Zdědit",
-      "on": "Na",
-      "off": "Vypnuto",
-      "forceLossless": {
-        "label": "Vynutit bezztrátové",
-        "description": "Vynucení bezztrátového kódování obrazu (vyšší kvalita, větší šířka pásma)"
-      },
-      "enableWallpaper": {
-        "label": "Tapeta",
-        "description": "Zobrazit tapetu plochy (zakázání zlepšuje výkon)"
-      },
-      "enableFontSmoothing": {
-        "label": "Vyhlazování písma",
-        "description": "Povolit vykreslování písma ClearType"
-      },
-      "enableDesktopComposition": {
-        "label": "Složení plochy",
-        "description": "Povolit efekty Aero Glass"
-      },
-      "disableAudio": {
-        "label": "Zakázat zvuk",
-        "description": "Ztlumit veškerý zvuk ze vzdálené relace"
-      },
-      "enablePrinting": {
-        "label": "Povolit tisk",
-        "description": "Přesměrování lokálních tiskáren na vzdálenou relaci"
-      },
-      "enableDrive": {
-        "label": "Povolit přesměrování disku",
-        "description": "Namapování lokální složky jako jednotky ve vzdálené relaci"
-      },
-      "disableCopy": {
-        "label": "Zakázat kopírování",
-        "description": "Zabránit kopírování textu ze vzdálené relace"
-      },
-      "disablePaste": {
-        "label": "Zakázat vkládání",
-        "description": "Zabránit vkládání textu do vzdálené relace"
-      },
-      "group": "Výchozí nastavení vzdálené plochy",
-      "colorDepth16": "16bitový",
-      "colorDepth24": "24bitový",
-      "colorDepth32": "32bitový"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Povolit vzdálenou plochu",
-        "description": "Povolit připojení RDP, VNC a Telnet přes guacd."
-      },
-      "guacdUrl": {
-        "label": "URL GUACD",
-        "description": "Kde guacd naslouchá, jako host:port. Proměnné prostředí GUACD_URL, GUACD_HOST a GUACD_PORT toto přepíší.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "PRV"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "RDP port"
-      },
-      "vncPort": {
-        "label": "VNC port"
-      },
-      "telnetPort": {
-        "label": "Telnetový port"
-      },
-      "rdpSecurity": {
-        "label": "Režim zabezpečení RDP"
-      },
-      "rdpIgnoreCert": {
-        "label": "Ignorovat chyby certifikátu"
-      },
-      "guacamoleConfig": {
-        "label": "nastavení GUACD"
-      },
-      "enableToolbar": {
-        "label": "Panel nástrojů Vzdálená plocha",
-        "description": "Zobrazit panel nástrojů v relacích RDP, VNC a Telnet."
-      },
-      "displayGroup": "Zobrazit",
-      "displayDefaultsTab": "Vzdálená plocha"
-    }
-  },
-  "palette": {
-    "connectRdp": "Připojení k RDP",
-    "connectVnc": "Spojte se s VNC",
-    "connectTelnet": "Připojení přes Telnet"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Sdílení relací vzdálené plochy",
-      "description": "Umožnit sdílení relací a místnostem pro spolupráci zobrazovat relace RDP, VNC a Telnet tohoto uživatele ostatním."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Je vyžadován vzdálený server. Pro použití tohoto typu připojení se připojte ke vzdálenému serveru v Nastavení."
-  },
-  "plugin": {
-    "name": "Vzdálená plocha"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/da_DK.json b/plugins/remote-desktop/locales/translated/da_DK.json
deleted file mode 100644
index b5340bd30..000000000
--- a/plugins/remote-desktop/locales/translated/da_DK.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "Forbinder til {{type}} session...",
-    "checkingGuacd": "Tjekker fjernskrivebordstjeneste...",
-    "requestingToken": "Anmoder om {{type}} forbindelsestoken...",
-    "openingSession": "Åbner {{type}} session...",
-    "negotiating": "Forhandler {{type}} håndtryk...",
-    "sessionReady": "{{type}} session klar",
-    "connectionError": "Forbindelsesfejl",
-    "connectionFailed": "Forbindelsen mislykkedes",
-    "failedToConnect": "Kunne ikke hente forbindelsestoken",
-    "hostNotFound": "Værten blev ikke fundet",
-    "noHostSelected": "Ingen vært valgt",
-    "reconnect": "Genopret forbindelse",
-    "retry": "Prøv igen",
-    "guacdUnavailable": "Fjernskrivebordstjenesten (guacd) er ikke tilgængelig. Sørg for, at guacd kører, er tilgængelig og konfigureret korrekt i administratorindstillingerne.",
-    "credentialPromptTitle": "Indtast RDP-legitimationsoplysninger",
-    "credentialPromptDescription": "Denne vært er indstillet til at bede om legitimationsoplysninger ved forbindelse. De bruges kun til denne session og gemmes ikke.",
-    "connect": "Forbinde",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "Drev-filer",
-      "parent": "Forældreregister",
-      "refresh": "Opfriske",
-      "empty": "Denne mappe er tom",
-      "listFailed": "Kunne ikke læse denne mappe",
-      "download": "Download",
-      "downloadFailed": "Kunne ikke downloade {{name}}",
-      "upload": "Upload filer",
-      "uploading": "Uploader {{name}}...",
-      "uploaded": "Uploadet {{name}}",
-      "uploadFailed": "Kunne ikke uploade {{name}}",
-      "uploadDisabled": "Uploads er deaktiveret for denne forbindelse",
-      "driveUnavailable": "Aktivér omdirigering af RDP-drev før upload af filer",
-      "driveNotWritable": "guacd kan ikke skrive til drevmappen. Kontroller GUACD_DRIVE_PATH (eller værtens drevsti) og dens tilladelser.",
-      "dropToUpload": "Slip filer for at uploade"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (Låseskærm)",
-      "winKey": "Windows-nøgle",
-      "superL": "Super+L (Låseskærm)",
-      "superKey": "Supernøgle",
-      "super": "Super",
-      "cmdL": "Cmd+L (Låseskærm)",
-      "cmdKey": "Kommandotast",
-      "cmd": "Kommando",
-      "ctrl": "Ctrl",
-      "alt": "Alt",
-      "shift": "Flytte",
-      "win": "Vinde",
-      "stickyActive": "{{key}} (låst - klik for at slippe)",
-      "stickyInactive": "{{key}} (klik for at låse)",
-      "esc": "Flugt",
-      "tab": "Faneblad",
-      "home": "Hjem",
-      "end": "Ende",
-      "pageUp": "Side op",
-      "pageDown": "Side ned",
-      "arrowUp": "Pil op",
-      "arrowDown": "Pil ned",
-      "arrowLeft": "Pil til venstre",
-      "arrowRight": "Pil til højre",
-      "fnToggle": "Funktionstaster",
-      "reconnect": "Genopret forbindelse til sessionen",
-      "collapse": "Skjul værktøjslinjen",
-      "expand": "Udvid værktøjslinjen",
-      "dragHandle": "Træk for at flytte",
-      "hide": "Skjul for denne session. For at deaktivere det permanent skal du åbne Værtsindstillinger → Generelt → Forbindelsesværktøjslinje.",
-      "zoomIn": "Zoom ind",
-      "zoomOut": "Zoom ud",
-      "resetZoom": "Nulstil zoom",
-      "fitToScreen": "Tilpas til skærm",
-      "switchToTrackpad": "Skift til trackpad-tilstand (træk for at flytte markøren, tryk for at klikke)",
-      "switchToTouch": "Skift til berøringstilstand (tryk direkte der, hvor du vil klikke)"
-    },
-    "disabled": "Fjernskrivebord er slået fra. En administrator kan slå det til i Indstillinger."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Åbnet i Windows Fjernskrivebord",
-    "nativeRdpFailed": "Kunne ikke åbne Windows Fjernskrivebord",
-    "openNativeRdp": "Åbn i Windows Fjernskrivebord",
-    "guac": {
-      "toolbar": "Værktøjslinje",
-      "connection": "Forbindelse",
-      "authentication": "Godkendelse",
-      "storedCredential": "Gemte legitimationsoplysninger",
-      "authMethod": "Godkendelsesmetode",
-      "authTypeDirect": "Direkte",
-      "authTypeCredential": "Legitimationsoplysninger",
-      "authTypeNone": "Ingen",
-      "authTypeNoneDesc": "Ingen loginoplysninger gemmes. Du vil blive bedt om et brugernavn og en adgangskode, hver gang du opretter forbindelse; de gemmes ikke.",
-      "selectCredential": "Vælg en legitimationsoplysninger...",
-      "connectionSettings": "Forbindelsesindstillinger",
-      "displaySettings": "Skærmindstillinger",
-      "audioSettings": "Lydindstillinger",
-      "rdpPerformance": "RDP-ydeevne",
-      "deviceRedirection": "Omdirigering af enhed",
-      "session": "Session",
-      "gateway": "Gateway",
-      "remoteApp": "Fjernbetjening",
-      "clipboard": "Udklipsholder",
-      "sessionRecording": "Sessionsoptagelse",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "VNC-indstillinger",
-      "terminalSettings": "Terminalindstillinger",
-      "rdpPort": "RDP-port",
-      "username": "Brugernavn",
-      "password": "Adgangskode",
-      "passwordSaved": "Adgangskode gemt, skriv for at ændre",
-      "domain": "Domæne",
-      "securityMode": "Sikkerhedstilstand",
-      "width": "Bredde",
-      "height": "Højde",
-      "dpi": "DPI",
-      "clientName": "Klientnavn",
-      "initialProgram": "Indledende program",
-      "serverLayout": "Serverlayout",
-      "timezone": "Tidszone",
-      "loadBalanceInfo": "Oplysninger om belastningsbalance / cookie",
-      "loadBalanceInfoDesc": "RD Connection Broker-cookie til belastningsbalancering af RDS-farm (f.eks. tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "guacd Proxy",
-      "guacdHostname": "guacd-vært",
-      "guacdHostnamePlaceholder": "Global standard",
-      "guacdPort": "guacd Port",
-      "guacdProxyDesc": "Tilsidesæt den globale guacd-instans for denne forbindelse. Lad være tom for at bruge den globalt konfigurerede guacd.",
-      "gatewayHostname": "Gateway-værtsnavn",
-      "gatewayPort": "Gateway-porten",
-      "gatewayUsername": "Gateway-brugernavn",
-      "gatewayPassword": "Gateway-adgangskode",
-      "gatewayDomain": "Gateway-domæne",
-      "remoteAppProgram": "RemoteApp-programmet",
-      "workingDirectory": "Arbejdskatalog",
-      "arguments": "Argumenter",
-      "normalizeLineEndings": "Normaliser linjeafslutninger",
-      "macAddress": "MAC-adresse",
-      "broadcastAddress": "Udsendelsesadresse",
-      "udpPort": "UDP-port",
-      "waitTimeS": "Ventetid (s)",
-      "driveName": "Drevnavn",
-      "drivePath": "Kørselssti",
-      "ignoreCertificate": "Ignorer certifikat",
-      "ignoreCertificateDesc": "Tillad forbindelser til værter med selvsignerede certifikater",
-      "forceLossless": "Tving tabsfri",
-      "forceLosslessDesc": "Tving tabsfri billedkodning (højere kvalitet, mere båndbredde)",
-      "disableAudio": "Deaktiver lyd",
-      "disableAudioDesc": "Slå al lyd fra fra fjernsessionen",
-      "enableAudioInput": "Aktivér lydindgang (mikrofon)",
-      "enableAudioInputDesc": "Videresend den lokale mikrofon til den eksterne session",
-      "wallpaper": "Tapet",
-      "wallpaperDesc": "Vis skrivebordsbaggrund (deaktivering forbedrer ydeevnen)",
-      "theming": "Temaer",
-      "themingDesc": "Aktivér visuelle temaer og stilarter",
-      "fontSmoothing": "Skrifttypeudjævning",
-      "fontSmoothingDesc": "Aktivér gengivelse af ClearType-skrifttyper",
-      "fullWindowDrag": "Træk i hele vinduet",
-      "fullWindowDragDesc": "Vis vinduesindhold under træk",
-      "desktopComposition": "Skrivebordskomposition",
-      "desktopCompositionDesc": "Aktivér Aero Glass-effekter",
-      "menuAnimations": "Menuanimationer",
-      "menuAnimationsDesc": "Aktivér menuudtoning og slideanimationer",
-      "disableBitmapCaching": "Deaktiver bitmap-caching",
-      "disableBitmapCachingDesc": "Slå bitmap-cache fra (kan muligvis hjælpe med fejl)",
-      "disableOffscreenCaching": "Deaktiver cachelagring uden for skærmen",
-      "disableOffscreenCachingDesc": "Slå cache uden for skærmen fra",
-      "disableGlyphCaching": "Deaktiver glyf-cachelagring",
-      "disableGlyphCachingDesc": "Slå glyfcache fra",
-      "enableGfx": "Aktivér GFX",
-      "enableGfxDesc": "Brug RemoteFX-grafikpipeline",
-      "enablePrinting": "Aktivér udskrivning",
-      "enablePrintingDesc": "Omdiriger lokale printere til fjernsessionen",
-      "enableDriveRedirection": "Aktivér drevomdirigering",
-      "enableDriveRedirectionDesc": "Tilknyt en lokal mappe som et drev i den eksterne session",
-      "createDrivePath": "Opret drevsti",
-      "createDrivePathDesc": "Opret mappen automatisk, hvis den ikke findes",
-      "disableDownload": "Deaktiver download",
-      "disableDownloadDesc": "Forhindr download af filer fra fjernsessionen",
-      "disableUpload": "Deaktiver upload",
-      "disableUploadDesc": "Forhindr upload af filer til fjernsessionen",
-      "enableTouch": "Aktivér berøring",
-      "enableTouchDesc": "Aktivér videresendelse af berøringsinput",
-      "consoleSession": "Konsolsession",
-      "consoleSessionDesc": "Opret forbindelse til konsollen (session 0) i stedet for en ny session",
-      "sendWolPacket": "Send WOL-pakke",
-      "sendWolPacketDesc": "Send en magisk pakke for at vække denne vært før forbindelse",
-      "disableCopy": "Deaktiver kopiering",
-      "disableCopyDesc": "Forhindr kopiering af tekst fra fjernsessionen",
-      "disablePaste": "Deaktiver indsætning",
-      "disablePasteDesc": "Forhindr indsættelse af tekst i fjernsessionen",
-      "createPathIfMissing": "Opret sti, hvis den mangler",
-      "createPathIfMissingDesc": "Opret automatisk optagelsesmappen",
-      "excludeOutput": "Udeluk output",
-      "excludeOutputDesc": "Optag ikke skærmoutput (kun metadata)",
-      "excludeMouse": "Udeluk mus",
-      "excludeMouseDesc": "Optag ikke musebevægelser",
-      "includeKeystrokes": "Inkluder tastetryk",
-      "includeKeystrokesDesc": "Optag rå tastetryk ud over skærmoutput",
-      "vncPort": "VNC-port",
-      "vncPassword": "VNC-adgangskode",
-      "vncUsernameOptional": "Brugernavn (valgfrit)",
-      "vncLeaveBlank": "Lad stå tomt, hvis det ikke er nødvendigt",
-      "cursorMode": "Markørtilstand",
-      "swapRedBlue": "Skift rød/blå",
-      "swapRedBlueDesc": "Byt de røde og blå farvekanaler (løser nogle farveproblemer)",
-      "readOnly": "Skrivebeskyttet",
-      "readOnlyDesc": "Se fjernskærmen uden at sende input",
-      "telnetPort": "Telnet-port",
-      "terminalType": "Terminaltype",
-      "fontName": "Skrifttypenavn",
-      "fontSize": "Skriftstørrelse",
-      "colorScheme": "Farveskema",
-      "backspaceKey": "Tilbagetast",
-      "colorDepth": "Farvedybde",
-      "resizeMethod": "Ændre størrelse-metode",
-      "driveNamePlaceholder": "Termix Drive",
-      "options": {
-        "any": "Enhver",
-        "auto": "Bil",
-        "nlaExtended": "NLA udvidet",
-        "color8": "8-bit",
-        "color16": "16-bit",
-        "color24": "24-bit",
-        "color32": "32-bit",
-        "displayUpdate": "Opdatering af display",
-        "reconnect": "Genopret forbindelse",
-        "preserve": "Bevare",
-        "unix": "Unix (LF)",
-        "windows": "Vinduer (CRLF)",
-        "local": "Lokal",
-        "remote": "Fjern",
-        "failsafe": "fejlsikker",
-        "blackOnWhite": "Sort på hvid",
-        "whiteOnBlack": "Hvid på sort",
-        "grayOnBlack": "Grå på sort",
-        "greenOnBlack": "Grøn på sort"
-      }
-    },
-    "remoteDesktop": "Fjernskrivebord",
-    "tabRdp": "Landdistriktsudviklingsplan",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "Virtuelt netværk",
-    "unencryptedShell": "Ukrypteret skal",
-    "remoteDesktopNotes": "Noter",
-    "userDefaultsNote": "Indstillinger, du lader være uændrede, følger din værts standardindstillinger.",
-    "connectionOriginNote": "I desktop-appen bruger RDP, VNC og Telnet den eksterne server, medmindre værten er indstillet til Denne enhed, som kræver en guacd, som denne maskine kan nå. Angiv en i indstillingerne for Fjernskrivebord, eller pr. vært under guacd Proxy.",
-    "docsLink": "Se dokumenter",
-    "connectionOriginGuacamoleNote": "RDP, VNC og Telnet bruger den eksterne server, medmindre du vælger \"Denne enhed\", som kræver en guacd, som denne maskine kan nå. Angiv en i guacd URL-indstillingen eller pr. vært under guacd Proxy."
-  },
-  "onboarding": {
-    "feature_desktop": "Fjernskrivebord",
-    "feature_desktop_desc": "Åbn RDP-, VNC- og Telnet-sessioner i en fane, ligesom med SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Farvedybde",
-        "description": "Bruges til RDP-værter, der lader den være på standardværdien."
-      },
-      "resizeMethod": {
-        "label": "Ændre størrelse-metode",
-        "description": "Hvordan fjernskærmen følger vinduets størrelse."
-      },
-      "resizeDisplayUpdate": "Opdatering af display",
-      "resizeReconnect": "Genopret forbindelse",
-      "inherit": "Arve",
-      "on": "På",
-      "off": "Slukket",
-      "forceLossless": {
-        "label": "Tving tabsfri",
-        "description": "Tving tabsfri billedkodning (højere kvalitet, mere båndbredde)"
-      },
-      "enableWallpaper": {
-        "label": "Tapet",
-        "description": "Vis skrivebordsbaggrund (deaktivering forbedrer ydeevnen)"
-      },
-      "enableFontSmoothing": {
-        "label": "Skrifttypeudjævning",
-        "description": "Aktivér gengivelse af ClearType-skrifttyper"
-      },
-      "enableDesktopComposition": {
-        "label": "Skrivebordskomposition",
-        "description": "Aktivér Aero Glass-effekter"
-      },
-      "disableAudio": {
-        "label": "Deaktiver lyd",
-        "description": "Slå al lyd fra fra fjernsessionen"
-      },
-      "enablePrinting": {
-        "label": "Aktivér udskrivning",
-        "description": "Omdiriger lokale printere til fjernsessionen"
-      },
-      "enableDrive": {
-        "label": "Aktivér drevomdirigering",
-        "description": "Tilknyt en lokal mappe som et drev i den eksterne session"
-      },
-      "disableCopy": {
-        "label": "Deaktiver kopiering",
-        "description": "Forhindr kopiering af tekst fra fjernsessionen"
-      },
-      "disablePaste": {
-        "label": "Deaktiver indsætning",
-        "description": "Forhindr indsættelse af tekst i fjernsessionen"
-      },
-      "group": "Standardindstillinger for fjernskrivebord",
-      "colorDepth16": "16-bit",
-      "colorDepth24": "24-bit",
-      "colorDepth32": "32-bit"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Aktivér fjernskrivebord",
-        "description": "Tillad RDP-, VNC- og Telnet-forbindelser via guacd."
-      },
-      "guacdUrl": {
-        "label": "guacd-URL",
-        "description": "Hvor guacd lytter som host:port. Miljøvariablerne GUACD_URL, GUACD_HOST og GUACD_PORT tilsidesætter dette.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "Landdistriktsudviklingsplan"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "RDP-port"
-      },
-      "vncPort": {
-        "label": "VNC-port"
-      },
-      "telnetPort": {
-        "label": "Telnet-port"
-      },
-      "rdpSecurity": {
-        "label": "RDP-sikkerhedstilstand"
-      },
-      "rdpIgnoreCert": {
-        "label": "Ignorer certifikatfejl"
-      },
-      "guacamoleConfig": {
-        "label": "guacd-indstillinger"
-      },
-      "enableToolbar": {
-        "label": "Værktøjslinjen til fjernskrivebord",
-        "description": "Vis værktøjslinjen i RDP-, VNC- og Telnet-sessioner."
-      },
-      "displayGroup": "Vise",
-      "displayDefaultsTab": "Fjernskrivebord"
-    }
-  },
-  "palette": {
-    "connectRdp": "Opret forbindelse med RDP",
-    "connectVnc": "Opret forbindelse med VNC",
-    "connectTelnet": "Opret forbindelse med Telnet"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Del fjernskrivebordssessioner",
-      "description": "Lad sessionsdeling og samarbejdsrum vise denne brugers RDP-, VNC- og Telnet-sessioner til andre."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Fjernserver kræves. Opret forbindelse til en fjernserver i Indstillinger for at bruge denne forbindelsestype."
-  },
-  "plugin": {
-    "name": "Fjernskrivebord"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/de_DE.json b/plugins/remote-desktop/locales/translated/de_DE.json
deleted file mode 100644
index a2bdf44c9..000000000
--- a/plugins/remote-desktop/locales/translated/de_DE.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "Verbinde mit {{type}}-Sitzung...",
-    "checkingGuacd": "Überprüfung des Remotedesktopdienstes...",
-    "requestingToken": "Verbindungstoken {{type}} wird angefordert...",
-    "openingSession": "Öffne {{type}} Sitzung...",
-    "negotiating": "Verhandlung {{type}} Handschlag...",
-    "sessionReady": "{{type}} Sitzung bereit",
-    "connectionError": "Verbindungsfehler",
-    "connectionFailed": "Verbindung fehlgeschlagen",
-    "failedToConnect": "Fehler beim Abrufen des Verbindungstokens",
-    "hostNotFound": "Host nicht gefunden",
-    "noHostSelected": "Kein Host ausgewählt",
-    "reconnect": "Erneut verbinden",
-    "retry": "Erneut versuchen",
-    "guacdUnavailable": "Der Remote-Desktop-Dienst (guacd) ist nicht verfügbar. Bitte stellen Sie sicher, dass guacd ausgeführt wird, erreichbar ist und in den Admin-Einstellungen richtig konfiguriert ist.",
-    "credentialPromptTitle": "Geben Sie die RDP-Anmeldeinformationen ein.",
-    "credentialPromptDescription": "Dieser Host ist so konfiguriert, dass er beim Verbindungsaufbau zur Eingabe von Anmeldeinformationen auffordert. Diese werden nur für diese Sitzung verwendet und nicht gespeichert.",
-    "connect": "Verbinden",
-    "ctrlAltDel": "Strg+Alt+Entf",
-    "files": {
-      "title": "Laufwerksdateien",
-      "parent": "Übergeordnetes Verzeichnis",
-      "refresh": "Aktualisieren",
-      "empty": "Dieser Ordner ist leer",
-      "listFailed": "Dieser Ordner konnte nicht gelesen werden",
-      "download": "Herunterladen",
-      "downloadFailed": "Download fehlgeschlagen {{name}}",
-      "upload": "Dateien hochladen",
-      "uploading": "Lade {{name}} hoch...",
-      "uploaded": "Hochgeladen {{name}}",
-      "uploadFailed": "Hochladen fehlgeschlagen {{name}}",
-      "uploadDisabled": "Uploads sind für diese Verbindung deaktiviert.",
-      "driveUnavailable": "Aktivieren Sie die RDP-Laufwerksumleitung, bevor Sie Dateien hochladen.",
-      "driveNotWritable": "guacd kann nicht in den Laufwerksordner schreiben. Überprüfen Sie GUACD_DRIVE_PATH (oder den Laufwerkspfad des Hosts) und dessen Berechtigungen.",
-      "dropToUpload": "Dateien zum Hochladen per Drag & Drop ablegen"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Strg+Alt+Entf",
-      "winL": "Win+L (Bildschirm sperren)",
-      "winKey": "Windows-Taste",
-      "superL": "Super+L (Sperrbildschirm)",
-      "superKey": "Super Key",
-      "super": "Super",
-      "cmdL": "Cmd+L (Sperrbildschirm)",
-      "cmdKey": "Befehlstaste",
-      "cmd": "Cmd",
-      "ctrl": "Strg",
-      "alt": "Alt",
-      "shift": "Umschalt",
-      "win": "Win",
-      "stickyActive": "{{key}} (eingerastet – zum Lösen klicken)",
-      "stickyInactive": "{{key}} (zum Einrasten klicken)",
-      "esc": "Escape",
-      "tab": "Tab",
-      "home": "Startseite",
-      "end": "Ende",
-      "pageUp": "Bild auf",
-      "pageDown": "Bild ab",
-      "arrowUp": "Pfeil nach oben",
-      "arrowDown": "Pfeil nach unten",
-      "arrowLeft": "Pfeil nach links",
-      "arrowRight": "Pfeil nach rechts",
-      "fnToggle": "Funktionstasten",
-      "reconnect": "Sitzung erneut verbinden",
-      "collapse": "Symbolleiste einklappen",
-      "expand": "Symbolleiste ausklappen",
-      "dragHandle": "Zum Neupositionieren ziehen",
-      "hide": "Für diese Sitzung ausblenden. Um es dauerhaft zu deaktivieren, öffnen Sie Host-Einstellungen → Allgemein → Verbindungssymbolleiste.",
-      "zoomIn": "Vergrößern",
-      "zoomOut": "Herauszoomen",
-      "resetZoom": "Zoom zurücksetzen",
-      "fitToScreen": "An Bildschirm anpassen",
-      "switchToTrackpad": "In den Trackpad-Modus wechseln (Zum Bewegen des Cursors ziehen, zum Klicken tippen)",
-      "switchToTouch": "Wechseln Sie in den Touch-Modus (tippen Sie direkt auf die Stelle, an der Sie klicken möchten)."
-    },
-    "disabled": "Die Remotedesktopverbindung ist deaktiviert. Ein Administrator kann sie in den Einstellungen aktivieren."
-  },
-  "hosts": {
-    "nativeRdpOpened": "In Windows-Remotedesktop geöffnet",
-    "nativeRdpFailed": "Windows-Remotedesktop konnte nicht geöffnet werden",
-    "openNativeRdp": "In Windows-Remotedesktop öffnen",
-    "guac": {
-      "toolbar": "Symbolleiste",
-      "connection": "Verbindung",
-      "authentication": "Authentifizierung",
-      "storedCredential": "Gespeicherte Anmeldeinformation",
-      "authMethod": "Authentifizierungsmethode",
-      "authTypeDirect": "Direkt",
-      "authTypeCredential": "Anmeldeinformation",
-      "authTypeNone": "Keine",
-      "authTypeNoneDesc": "Es werden keine Zugangsdaten gespeichert. Sie werden bei jeder Verbindung zur Eingabe eines Benutzernamens und eines Passworts aufgefordert; diese werden nicht gespeichert.",
-      "selectCredential": "Anmeldeinformation auswählen...",
-      "connectionSettings": "Verbindungseinstellungen",
-      "displaySettings": "Anzeigeeinstellungen",
-      "audioSettings": "Audioeinstellungen",
-      "rdpPerformance": "RDP-Leistung",
-      "deviceRedirection": "Geräteumleitung",
-      "session": "Sitzung",
-      "gateway": "Gateway",
-      "remoteApp": "RemoteApp",
-      "clipboard": "Zwischenablage",
-      "sessionRecording": "Sitzungsaufzeichnung",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "VNC-Einstellungen",
-      "terminalSettings": "Terminaleinstellungen",
-      "rdpPort": "RDP-Port",
-      "username": "Benutzername",
-      "password": "Passwort",
-      "passwordSaved": "Passwort gespeichert, zum Ändern eingeben",
-      "domain": "Domäne",
-      "securityMode": "Sicherheitsmodus",
-      "width": "Breite",
-      "height": "Höhe",
-      "dpi": "DPI",
-      "clientName": "Client-Name",
-      "initialProgram": "Startprogramm",
-      "serverLayout": "Tastaturlayout",
-      "timezone": "Zeitzone",
-      "loadBalanceInfo": "Lastverteilungsinfo / Cookie",
-      "loadBalanceInfoDesc": "RD-Verbindungsbroker-Cookie für den Lastausgleich einer RDS-Farm (z.B. tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "guacd-Proxy",
-      "guacdHostname": "guacd-Host",
-      "guacdHostnamePlaceholder": "Globaler Standard",
-      "guacdPort": "guacd-Port",
-      "guacdProxyDesc": "Überschreibt die globale guacd-Instanz für diese Verbindung. Leer lassen, um die global konfigurierte guacd zu verwenden.",
-      "gatewayHostname": "Gateway-Hostname",
-      "gatewayPort": "Gateway-Port",
-      "gatewayUsername": "Gateway-Benutzername",
-      "gatewayPassword": "Gateway-Passwort",
-      "gatewayDomain": "Gateway-Domäne",
-      "remoteAppProgram": "RemoteApp-Programm",
-      "workingDirectory": "Arbeitsverzeichnis",
-      "arguments": "Argumente",
-      "normalizeLineEndings": "Zeilenenden normalisieren",
-      "macAddress": "MAC-Adresse",
-      "broadcastAddress": "Broadcast-Adresse",
-      "udpPort": "UDP-Port",
-      "waitTimeS": "Wartezeit (s)",
-      "driveName": "Laufwerksname",
-      "drivePath": "Laufwerkspfad",
-      "ignoreCertificate": "Zertifikat ignorieren",
-      "ignoreCertificateDesc": "Verbindungen zu Hosts mit selbstsignierten Zertifikaten erlauben",
-      "forceLossless": "Verlustfreie Übertragung erzwingen",
-      "forceLosslessDesc": "Verlustfreie Bildcodierung erzwingen (höhere Qualität, mehr Bandbreite)",
-      "disableAudio": "Audio deaktivieren",
-      "disableAudioDesc": "Gesamten Ton der Remote-Sitzung stummschalten",
-      "enableAudioInput": "Audioeingabe aktivieren (Mikrofon)",
-      "enableAudioInputDesc": "Lokales Mikrofon an die Remote-Sitzung weiterleiten",
-      "wallpaper": "Hintergrundbild",
-      "wallpaperDesc": "Desktop-Hintergrundbild anzeigen (Deaktivierung verbessert die Leistung)",
-      "theming": "Designs",
-      "themingDesc": "Visuelle Designs und Stile aktivieren",
-      "fontSmoothing": "Schriftglättung",
-      "fontSmoothingDesc": "ClearType-Schriftdarstellung aktivieren",
-      "fullWindowDrag": "Vollständiges Fensterziehen",
-      "fullWindowDragDesc": "Fensterinhalt beim Ziehen anzeigen",
-      "desktopComposition": "Desktopkomposition",
-      "desktopCompositionDesc": "Aero-Glaseffekte aktivieren",
-      "menuAnimations": "Menüanimationen",
-      "menuAnimationsDesc": "Ein- und Ausblendeanimationen für Menüs aktivieren",
-      "disableBitmapCaching": "Bitmap-Caching deaktivieren",
-      "disableBitmapCachingDesc": "Bitmap-Cache deaktivieren (kann bei Grafikfehlern helfen)",
-      "disableOffscreenCaching": "Offscreen-Caching deaktivieren",
-      "disableOffscreenCachingDesc": "Offscreen-Cache deaktivieren",
-      "disableGlyphCaching": "Glyphen-Caching deaktivieren",
-      "disableGlyphCachingDesc": "Glyphen-Cache deaktivieren",
-      "enableGfx": "GFX aktivieren",
-      "enableGfxDesc": "RemoteFX-Grafikpipeline verwenden",
-      "enablePrinting": "Drucken aktivieren",
-      "enablePrintingDesc": "Lokale Drucker an die Remote-Sitzung umleiten",
-      "enableDriveRedirection": "Laufwerksumleitung aktivieren",
-      "enableDriveRedirectionDesc": "Lokalen Ordner als Laufwerk in der Remote-Sitzung einbinden",
-      "createDrivePath": "Laufwerkspfad erstellen",
-      "createDrivePathDesc": "Ordner automatisch erstellen, falls nicht vorhanden",
-      "disableDownload": "Download deaktivieren",
-      "disableDownloadDesc": "Herunterladen von Dateien aus der entfernten Sitzung verhindern",
-      "disableUpload": "Upload deaktivieren",
-      "disableUploadDesc": "Hochladen von Dateien in die entfernte Sitzung verhindern",
-      "enableTouch": "Touch aktivieren",
-      "enableTouchDesc": "Touch-Eingabeweiterleitung aktivieren",
-      "consoleSession": "Konsolensitzung",
-      "consoleSessionDesc": "Mit der Konsole (Sitzung 0) statt mit einer neuen Sitzung verbinden",
-      "sendWolPacket": "WOL-Paket senden",
-      "sendWolPacketDesc": "Magic Packet senden, um diesen Host vor dem Verbinden aufzuwecken",
-      "disableCopy": "Kopieren deaktivieren",
-      "disableCopyDesc": "Kopieren von Text aus der entfernten Sitzung verhindern",
-      "disablePaste": "Einfügen deaktivieren",
-      "disablePasteDesc": "Einfügen von Text in die entfernte Sitzung verhindern",
-      "createPathIfMissing": "Pfad erstellen, falls nicht vorhanden",
-      "createPathIfMissingDesc": "Aufzeichnungsverzeichnis automatisch erstellen",
-      "excludeOutput": "Ausgabe ausschließen",
-      "excludeOutputDesc": "Bildschirmausgabe nicht aufzeichnen (nur Metadaten)",
-      "excludeMouse": "Maus ausschließen",
-      "excludeMouseDesc": "Mausbewegungen nicht aufzeichnen",
-      "includeKeystrokes": "Tastatureingaben einschließen",
-      "includeKeystrokesDesc": "Rohe Tastatureingaben zusätzlich zur Bildschirmausgabe aufzeichnen",
-      "vncPort": "VNC-Port",
-      "vncPassword": "VNC-Passwort",
-      "vncUsernameOptional": "Benutzername (optional)",
-      "vncLeaveBlank": "Leer lassen, falls nicht erforderlich",
-      "cursorMode": "Cursor-Modus",
-      "swapRedBlue": "Rot/Blau tauschen",
-      "swapRedBlueDesc": "Die roten und blauen Farbkanäle tauschen (behebt einige Farbprobleme)",
-      "readOnly": "Schreibgeschützt",
-      "readOnlyDesc": "Bildschirm anzeigen, ohne Eingaben zu senden",
-      "telnetPort": "Telnet-Port",
-      "terminalType": "Terminaltyp",
-      "fontName": "Schriftname",
-      "fontSize": "Schriftgröße",
-      "colorScheme": "Farbschema",
-      "backspaceKey": "Backspace-Taste",
-      "colorDepth": "Farbtiefe",
-      "resizeMethod": "Skalierungsmethode",
-      "driveNamePlaceholder": "Termix Drive",
-      "options": {
-        "any": "Beliebig",
-        "auto": "Automatisch",
-        "nlaExtended": "NLA Extended",
-        "color8": "8-Bit",
-        "color16": "16-Bit",
-        "color24": "24-Bit",
-        "color32": "32-Bit",
-        "displayUpdate": "Anzeigeaktualisierung",
-        "reconnect": "Erneut verbinden",
-        "preserve": "Bewahren",
-        "unix": "Unix (LF)",
-        "windows": "Windows (CRLF)",
-        "local": "Lokal",
-        "remote": "Remote",
-        "failsafe": "Ausfallsicherung",
-        "blackOnWhite": "Schwarz auf Weiß",
-        "whiteOnBlack": "Weiß auf Schwarz",
-        "grayOnBlack": "Grau auf Schwarz",
-        "greenOnBlack": "Grün auf Schwarz"
-      }
-    },
-    "remoteDesktop": "Remotedesktop",
-    "tabRdp": "RDP",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "Virtuelles Netzwerk",
-    "unencryptedShell": "Unverschlüsselte Shell",
-    "remoteDesktopNotes": "Notizen",
-    "userDefaultsNote": "Einstellungen, die Sie unverändert lassen, verwenden die Standardeinstellungen Ihres Hostsystems.",
-    "connectionOriginNote": "In der Desktop-App verwenden RDP, VNC und Telnet den Remote-Server, es sei denn, der Host ist auf „Dieses Gerät“ eingestellt. In diesem Fall wird ein guacd-Server benötigt, den dieser Rechner erreichen kann. Legen Sie einen solchen Server in den Remote-Desktop-Einstellungen oder pro Host unter „guacd-Proxy“ fest.",
-    "docsLink": "Dokumentation anzeigen",
-    "connectionOriginGuacamoleNote": "RDP, VNC und Telnet verwenden den Remote-Server, es sei denn, Sie wählen „Dieses Gerät“. Dafür ist ein guacd-Server erforderlich, den dieser Rechner erreichen kann. Legen Sie einen solchen Server in den guacd-URL-Einstellungen oder pro Host unter „guacd-Proxy“ fest."
-  },
-  "onboarding": {
-    "feature_desktop": "Remote-Desktop",
-    "feature_desktop_desc": "Öffnen Sie RDP-, VNC- und Telnet-Sitzungen in einem Tab, genau wie bei SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Farbtiefe",
-        "description": "Wird für RDP-Hosts verwendet, die die Standardeinstellung beibehalten."
-      },
-      "resizeMethod": {
-        "label": "Skalierungsmethode",
-        "description": "Wie sich der Bildschirm der Fernbedienung an die Fenstergröße anpasst."
-      },
-      "resizeDisplayUpdate": "Anzeigeaktualisierung",
-      "resizeReconnect": "Erneut verbinden",
-      "inherit": "Erben",
-      "on": "Ein",
-      "off": "Aus",
-      "forceLossless": {
-        "label": "Verlustfreie Übertragung erzwingen",
-        "description": "Verlustfreie Bildcodierung erzwingen (höhere Qualität, mehr Bandbreite)"
-      },
-      "enableWallpaper": {
-        "label": "Hintergrundbild",
-        "description": "Desktop-Hintergrundbild anzeigen (Deaktivierung verbessert die Leistung)"
-      },
-      "enableFontSmoothing": {
-        "label": "Schriftglättung",
-        "description": "ClearType-Schriftdarstellung aktivieren"
-      },
-      "enableDesktopComposition": {
-        "label": "Desktopkomposition",
-        "description": "Aero-Glaseffekte aktivieren"
-      },
-      "disableAudio": {
-        "label": "Audio deaktivieren",
-        "description": "Gesamten Ton der Remote-Sitzung stummschalten"
-      },
-      "enablePrinting": {
-        "label": "Drucken aktivieren",
-        "description": "Lokale Drucker an die Remote-Sitzung umleiten"
-      },
-      "enableDrive": {
-        "label": "Laufwerksumleitung aktivieren",
-        "description": "Lokalen Ordner als Laufwerk in der Remote-Sitzung einbinden"
-      },
-      "disableCopy": {
-        "label": "Kopieren deaktivieren",
-        "description": "Kopieren von Text aus der entfernten Sitzung verhindern"
-      },
-      "disablePaste": {
-        "label": "Einfügen deaktivieren",
-        "description": "Einfügen von Text in die entfernte Sitzung verhindern"
-      },
-      "group": "Standardeinstellungen für Remotedesktop",
-      "colorDepth16": "16-Bit",
-      "colorDepth24": "24-Bit",
-      "colorDepth32": "32-Bit"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Remotedesktop aktivieren",
-        "description": "RDP-, VNC- und Telnet-Verbindungen über guacd zulassen."
-      },
-      "guacdUrl": {
-        "label": "guacd-URL",
-        "description": "Der Hostname „guacd“ gibt an, wo er lauscht. Die Umgebungsvariablen GUACD_URL, GUACD_HOST und GUACD_PORT überschreiben diese Angabe.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "RDP"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "RDP-Port"
-      },
-      "vncPort": {
-        "label": "VNC-Port"
-      },
-      "telnetPort": {
-        "label": "Telnet-Port"
-      },
-      "rdpSecurity": {
-        "label": "RDP-Sicherheitsmodus"
-      },
-      "rdpIgnoreCert": {
-        "label": "Zertifikatsfehler ignorieren"
-      },
-      "guacamoleConfig": {
-        "label": "guacd-Einstellungen"
-      },
-      "enableToolbar": {
-        "label": "Symbolleiste für Remote-Desktop",
-        "description": "Die Symbolleiste wird in RDP-, VNC- und Telnet-Sitzungen angezeigt."
-      },
-      "displayGroup": "Anzeige",
-      "displayDefaultsTab": "Remotedesktop"
-    }
-  },
-  "palette": {
-    "connectRdp": "Mit RDP verbinden",
-    "connectVnc": "Mit VNC verbinden",
-    "connectTelnet": "Mit Telnet verbinden"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Remote-Desktop-Sitzungen freigeben",
-      "description": "Erlauben Sie, dass die RDP-, VNC- und Telnet-Sitzungen dieses Benutzers anderen Benutzern angezeigt werden, wenn diese die Sitzungsfreigabe und Kollaborationsräume nutzen."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Remote-Server erforderlich. Um diesen Verbindungstyp zu verwenden, verbinden Sie einen Remote-Server in den Einstellungen."
-  },
-  "plugin": {
-    "name": "Remotedesktop"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/el_GR.json b/plugins/remote-desktop/locales/translated/el_GR.json
deleted file mode 100644
index df37507a9..000000000
--- a/plugins/remote-desktop/locales/translated/el_GR.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "Σύνδεση σε συνεδρία {{type}}...",
-    "checkingGuacd": "Έλεγχος υπηρεσίας απομακρυσμένης επιφάνειας εργασίας...",
-    "requestingToken": "Αίτημα διακριτικού σύνδεσης {{type}}...",
-    "openingSession": "Άνοιγμα συνεδρίας {{type}}...",
-    "negotiating": "Διαπραγμάτευση χειραψίας {{type}}...",
-    "sessionReady": "{{type}} συνεδρία έτοιμη",
-    "connectionError": "Σφάλμα σύνδεσης",
-    "connectionFailed": "Η σύνδεση απέτυχε",
-    "failedToConnect": "Αποτυχία λήψης διακριτικού σύνδεσης",
-    "hostNotFound": "Δεν βρέθηκε κεντρικός υπολογιστής",
-    "noHostSelected": "Δεν έχει επιλεγεί κεντρικός υπολογιστής",
-    "reconnect": "Επανασύνδεση",
-    "retry": "Δοκιμάζω πάλι",
-    "guacdUnavailable": "Η υπηρεσία απομακρυσμένης επιφάνειας εργασίας (guacd) δεν είναι διαθέσιμη. Βεβαιωθείτε ότι το guacd εκτελείται και είναι προσβάσιμο, καθώς και ότι έχει ρυθμιστεί σωστά στις ρυθμίσεις διαχειριστή.",
-    "credentialPromptTitle": "Εισαγάγετε τα διαπιστευτήρια RDP",
-    "credentialPromptDescription": "Αυτός ο κεντρικός υπολογιστής έχει ρυθμιστεί να ζητά διαπιστευτήρια κατά τη σύνδεση. Χρησιμοποιούνται μόνο για αυτήν την περίοδο σύνδεσης και δεν αποθηκεύονται.",
-    "connect": "Συνδέω",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "Αρχεία μονάδας δίσκου",
-      "parent": "Γονικός κατάλογος",
-      "refresh": "Φρεσκάρω",
-      "empty": "Αυτός ο φάκελος είναι κενός",
-      "listFailed": "Αποτυχία ανάγνωσης αυτού του φακέλου",
-      "download": "Λήψη",
-      "downloadFailed": "Αποτυχία λήψης {{name}}",
-      "upload": "Μεταφόρτωση αρχείων",
-      "uploading": "Μεταφόρτωση {{name}}...",
-      "uploaded": "Μεταφορτώθηκε {{name}}",
-      "uploadFailed": "Αποτυχία μεταφόρτωσης {{name}}",
-      "uploadDisabled": "Οι μεταφορτώσεις είναι απενεργοποιημένες για αυτήν τη σύνδεση",
-      "driveUnavailable": "Ενεργοποίηση ανακατεύθυνσης μονάδας δίσκου RDP πριν από την αποστολή αρχείων",
-      "driveNotWritable": "Το guacd δεν μπορεί να γράψει στον φάκελο της μονάδας δίσκου. Ελέγξτε το GUACD_DRIVE_PATH (ή τη διαδρομή μονάδας δίσκου του κεντρικού υπολογιστή) και τα δικαιώματά του.",
-      "dropToUpload": "Αποθέστε αρχεία για μεταφόρτωση"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (Κλείδωμα οθόνης)",
-      "winKey": "Κλειδί των Windows",
-      "superL": "Super+L (Κλείδωμα οθόνης)",
-      "superKey": "Σούπερ Κλειδί",
-      "super": "Σούπερ",
-      "cmdL": "Cmd+L (Κλείδωμα οθόνης)",
-      "cmdKey": "Πλήκτρο εντολών",
-      "cmd": "Εκτελεστής",
-      "ctrl": "Ctrl",
-      "alt": "Εναλλακτική",
-      "shift": "Αλλαγή",
-      "win": "Νίκη",
-      "stickyActive": "{{key}} (κλειδωμένο - κάντε κλικ για απελευθέρωση)",
-      "stickyInactive": "{{key}} (κάντε κλικ για να κλειδώσετε)",
-      "esc": "Διαφυγή",
-      "tab": "Αυτί",
-      "home": "Σπίτι",
-      "end": "Τέλος",
-      "pageUp": "Σελίδα προς τα πάνω",
-      "pageDown": "Σελίδα προς τα κάτω",
-      "arrowUp": "Βέλος προς τα πάνω",
-      "arrowDown": "Βέλος προς τα κάτω",
-      "arrowLeft": "Βέλος αριστερά",
-      "arrowRight": "Βέλος δεξιά",
-      "fnToggle": "Πλήκτρα λειτουργιών",
-      "reconnect": "Επανασύνδεση περιόδου σύνδεσης",
-      "collapse": "Σύμπτυξη γραμμής εργαλείων",
-      "expand": "Ανάπτυξη γραμμής εργαλείων",
-      "dragHandle": "Σύρετε για αλλαγή θέσης",
-      "hide": "Απόκρυψη για αυτήν την περίοδο λειτουργίας. Για να την απενεργοποιήσετε μόνιμα, ανοίξτε τις Ρυθμίσεις κεντρικού υπολογιστή → Γενικά → Γραμμή εργαλείων σύνδεσης.",
-      "zoomIn": "Μεγέθυνση",
-      "zoomOut": "Σμίκρυνση",
-      "resetZoom": "Επαναφορά ζουμ",
-      "fitToScreen": "Προσαρμογή στην οθόνη",
-      "switchToTrackpad": "Μετάβαση σε λειτουργία trackpad (σύρσιμο για μετακίνηση του κέρσορα, άγγιγμα για κλικ)",
-      "switchToTouch": "Μετάβαση σε λειτουργία αφής (πατήστε απευθείας εκεί που θέλετε να κάνετε κλικ)"
-    },
-    "disabled": "Η Απομακρυσμένη επιφάνεια εργασίας είναι απενεργοποιημένη. Ένας διαχειριστής μπορεί να την ενεργοποιήσει στις Ρυθμίσεις."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Άνοιξε στην Απομακρυσμένη επιφάνεια εργασίας των Windows",
-    "nativeRdpFailed": "Αποτυχία ανοίγματος της Απομακρυσμένης επιφάνειας εργασίας των Windows",
-    "openNativeRdp": "Άνοιγμα στην Απομακρυσμένη επιφάνεια εργασίας των Windows",
-    "guac": {
-      "toolbar": "Γραμμή εργαλείων",
-      "connection": "Σύνδεση",
-      "authentication": "Πιστοποίηση",
-      "storedCredential": "Αποθηκευμένα διαπιστευτήρια",
-      "authMethod": "Μέθοδος Εξουσιοδότησης",
-      "authTypeDirect": "Απευθείας",
-      "authTypeCredential": "Πιστοποιητικό",
-      "authTypeNone": "Κανένας",
-      "authTypeNoneDesc": "Δεν αποθηκεύονται διαπιστευτήρια. Θα σας ζητείται όνομα χρήστη και κωδικός πρόσβασης κάθε φορά που συνδέεστε. Δεν αποθηκεύονται.",
-      "selectCredential": "Επιλέξτε ένα πιστοποιητικό...",
-      "connectionSettings": "Ρυθμίσεις σύνδεσης",
-      "displaySettings": "Ρυθμίσεις οθόνης",
-      "audioSettings": "Ρυθμίσεις ήχου",
-      "rdpPerformance": "Απόδοση RDP",
-      "deviceRedirection": "Ανακατεύθυνση συσκευής",
-      "session": "Συνεδρίαση",
-      "gateway": "Είσοδος πυλών",
-      "remoteApp": "Απομακρυσμένη εφαρμογή",
-      "clipboard": "Πρόχειρο",
-      "sessionRecording": "Ηχογράφηση συνεδρίας",
-      "wakeOnLan": "Αφύπνιση μέσω LAN",
-      "vncSettings": "Ρυθμίσεις VNC",
-      "terminalSettings": "Ρυθμίσεις τερματικού",
-      "rdpPort": "Θύρα RDP",
-      "username": "Όνομα χρήστη",
-      "password": "Σύνθημα",
-      "passwordSaved": "Ο κωδικός πρόσβασης αποθηκεύτηκε, πληκτρολογήστε για να τον αλλάξετε",
-      "domain": "Πεδίο ορισμού",
-      "securityMode": "Λειτουργία ασφαλείας",
-      "width": "Πλάτος",
-      "height": "Υψος",
-      "dpi": "DPI",
-      "clientName": "Όνομα πελάτη",
-      "initialProgram": "Αρχικό Πρόγραμμα",
-      "serverLayout": "Διάταξη διακομιστή",
-      "timezone": "Ζώνη ώρας",
-      "loadBalanceInfo": "Πληροφορίες ισορροπίας φορτίου / Cookie",
-      "loadBalanceInfoDesc": "Cookie RD Connection Broker για εξισορρόπηση φόρτου συστοιχίας RDS (π.χ. tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "guacd Proxy",
-      "guacdHostname": "οικοδεσπότης guacd",
-      "guacdHostnamePlaceholder": "Παγκόσμια προεπιλογή",
-      "guacdPort": "Λιμάνι Guacd",
-      "guacdProxyDesc": "Παρακάμψτε την καθολική παρουσία guacd για αυτήν τη σύνδεση. Αφήστε το κενό για να χρησιμοποιήσετε την καθολικά διαμορφωμένη παρουσία guacd.",
-      "gatewayHostname": "Όνομα κεντρικού υπολογιστή πύλης",
-      "gatewayPort": "Λιμάνι Πύλης",
-      "gatewayUsername": "Όνομα χρήστη πύλης",
-      "gatewayPassword": "Κωδικός πρόσβασης πύλης",
-      "gatewayDomain": "Τομέας πύλης",
-      "remoteAppProgram": "Πρόγραμμα RemoteApp",
-      "workingDirectory": "Κατάλογος εργασίας",
-      "arguments": "Επιχειρήματα",
-      "normalizeLineEndings": "Κανονικοποίηση τελών γραμμών",
-      "macAddress": "Διεύθυνση MAC",
-      "broadcastAddress": "Διεύθυνση μετάδοσης",
-      "udpPort": "Θύρα UDP",
-      "waitTimeS": "Χρόνος αναμονής (s)",
-      "driveName": "Όνομα μονάδας δίσκου",
-      "drivePath": "Μονοπάτι οδήγησης",
-      "ignoreCertificate": "Αγνόηση πιστοποιητικού",
-      "ignoreCertificateDesc": "Επιτρέψτε συνδέσεις σε κεντρικούς υπολογιστές με αυτο-υπογεγραμμένα πιστοποιητικά",
-      "forceLossless": "Δύναμη χωρίς απώλειες",
-      "forceLosslessDesc": "Επιβολή κωδικοποίησης εικόνας χωρίς απώλειες (υψηλότερη ποιότητα, μεγαλύτερο εύρος ζώνης)",
-      "disableAudio": "Απενεργοποίηση ήχου",
-      "disableAudioDesc": "Σίγαση όλου του ήχου από την απομακρυσμένη συνεδρία",
-      "enableAudioInput": "Ενεργοποίηση εισόδου ήχου (Μικρόφωνο)",
-      "enableAudioInputDesc": "Προώθηση τοπικού μικροφώνου στην απομακρυσμένη συνεδρία",
-      "wallpaper": "Ταπετσαρία",
-      "wallpaperDesc": "Εμφάνιση ταπετσαρίας επιφάνειας εργασίας (η απενεργοποίηση βελτιώνει την απόδοση)",
-      "theming": "Θέμα",
-      "themingDesc": "Ενεργοποίηση οπτικών θεμάτων και στυλ",
-      "fontSmoothing": "Εξομάλυνση γραμματοσειράς",
-      "fontSmoothingDesc": "Ενεργοποίηση απόδοσης γραμματοσειράς ClearType",
-      "fullWindowDrag": "Πλήρες σύρσιμο παραθύρου",
-      "fullWindowDragDesc": "Εμφάνιση περιεχομένων παραθύρου κατά τη μεταφορά",
-      "desktopComposition": "Σύνθεση επιφάνειας εργασίας",
-      "desktopCompositionDesc": "Ενεργοποίηση εφέ Aero glass",
-      "menuAnimations": "Κινήσεις μενού",
-      "menuAnimationsDesc": "Ενεργοποίηση κινούμενων εικόνων fade και slide μενού",
-      "disableBitmapCaching": "Απενεργοποίηση προσωρινής αποθήκευσης bitmap",
-      "disableBitmapCachingDesc": "Απενεργοποίηση της προσωρινής μνήμης bitmap (μπορεί να βοηθήσει με προβλήματα)",
-      "disableOffscreenCaching": "Απενεργοποίηση προσωρινής αποθήκευσης εκτός οθόνης",
-      "disableOffscreenCachingDesc": "Απενεργοποίηση προσωρινής μνήμης εκτός οθόνης",
-      "disableGlyphCaching": "Απενεργοποίηση προσωρινής αποθήκευσης γλύφων",
-      "disableGlyphCachingDesc": "Απενεργοποίηση προσωρινής μνήμης glyph",
-      "enableGfx": "Ενεργοποίηση GFX",
-      "enableGfxDesc": "Χρήση αγωγού γραφικών RemoteFX",
-      "enablePrinting": "Ενεργοποίηση εκτύπωσης",
-      "enablePrintingDesc": "Ανακατεύθυνση τοπικών εκτυπωτών στην απομακρυσμένη συνεδρία",
-      "enableDriveRedirection": "Ενεργοποίηση ανακατεύθυνσης μονάδας δίσκου",
-      "enableDriveRedirectionDesc": "Αντιστοίχιση τοπικού φακέλου ως μονάδας δίσκου στην απομακρυσμένη συνεδρία",
-      "createDrivePath": "Δημιουργία διαδρομής μονάδας δίσκου",
-      "createDrivePathDesc": "Αυτόματη δημιουργία του φακέλου εάν δεν υπάρχει",
-      "disableDownload": "Απενεργοποίηση λήψης",
-      "disableDownloadDesc": "Αποτροπή λήψης αρχείων από την απομακρυσμένη συνεδρία",
-      "disableUpload": "Απενεργοποίηση μεταφόρτωσης",
-      "disableUploadDesc": "Αποτροπή μεταφόρτωσης αρχείων στην απομακρυσμένη συνεδρία",
-      "enableTouch": "Ενεργοποίηση αφής",
-      "enableTouchDesc": "Ενεργοποίηση προώθησης εισόδου αφής",
-      "consoleSession": "Συνεδρία κονσόλας",
-      "consoleSessionDesc": "Σύνδεση στην κονσόλα (περίοδος λειτουργίας 0) αντί για νέα περίοδο λειτουργίας",
-      "sendWolPacket": "Αποστολή πακέτου WOL",
-      "sendWolPacketDesc": "Στείλτε ένα μαγικό πακέτο για να αφυπνίσετε αυτόν τον κεντρικό υπολογιστή πριν από τη σύνδεση",
-      "disableCopy": "Απενεργοποίηση αντιγραφής",
-      "disableCopyDesc": "Αποτροπή αντιγραφής κειμένου από την απομακρυσμένη συνεδρία",
-      "disablePaste": "Απενεργοποίηση επικόλλησης",
-      "disablePasteDesc": "Αποτροπή επικόλλησης κειμένου στην απομακρυσμένη συνεδρία",
-      "createPathIfMissing": "Δημιουργία διαδρομής εάν λείπει",
-      "createPathIfMissingDesc": "Αυτόματη δημιουργία του καταλόγου ηχογράφησης",
-      "excludeOutput": "Εξαίρεση εξόδου",
-      "excludeOutputDesc": "Μην καταγράφετε την έξοδο οθόνης (μόνο μεταδεδομένα)",
-      "excludeMouse": "Εξαίρεση ποντικιού",
-      "excludeMouseDesc": "Μην καταγράφετε τις κινήσεις του ποντικιού",
-      "includeKeystrokes": "Συμπερίληψη πληκτρολογήσεων",
-      "includeKeystrokesDesc": "Εγγραφή ακατέργαστων πληκτρολογήσεων εκτός από την έξοδο οθόνης",
-      "vncPort": "Θύρα VNC",
-      "vncPassword": "Κωδικός πρόσβασης VNC",
-      "vncUsernameOptional": "Όνομα χρήστη (προαιρετικό)",
-      "vncLeaveBlank": "Αφήστε κενό εάν δεν απαιτείται",
-      "cursorMode": "Λειτουργία δρομέα",
-      "swapRedBlue": "Εναλλαγή Κόκκινου/Μπλε",
-      "swapRedBlueDesc": "Εναλλαγή των καναλιών κόκκινου και μπλε χρώματος (διορθώνει ορισμένα προβλήματα χρώματος)",
-      "readOnly": "Μόνο για ανάγνωση",
-      "readOnlyDesc": "Δείτε την οθόνη του τηλεχειριστηρίου χωρίς να στείλετε καμία πληροφορία",
-      "telnetPort": "Θύρα Telnet",
-      "terminalType": "Τύπος τερματικού",
-      "fontName": "Όνομα γραμματοσειράς",
-      "fontSize": "Μέγεθος γραμματοσειράς",
-      "colorScheme": "Χρωματικό σχέδιο",
-      "backspaceKey": "Πλήκτρο Backspace",
-      "colorDepth": "Βάθος χρώματος",
-      "resizeMethod": "Μέθοδος αλλαγής μεγέθους",
-      "driveNamePlaceholder": "Οδός Τέρμιξ",
-      "options": {
-        "any": "Κάθε",
-        "auto": "Αυτο",
-        "nlaExtended": "Επέκταση NLA",
-        "color8": "8-bit",
-        "color16": "16-bit",
-        "color24": "24-bit",
-        "color32": "32-bit",
-        "displayUpdate": "Ενημέρωση οθόνης",
-        "reconnect": "Επανασύνδεση",
-        "preserve": "Διατηρώ",
-        "unix": "Unix (LF)",
-        "windows": "Windows (CRLF)",
-        "local": "Τοπικός",
-        "remote": "Μακρινός",
-        "failsafe": "ασφαλής",
-        "blackOnWhite": "Μαύρο σε άσπρο",
-        "whiteOnBlack": "Λευκό σε μαύρο",
-        "grayOnBlack": "Γκρι σε μαύρο",
-        "greenOnBlack": "Πράσινο σε μαύρο"
-      }
-    },
-    "remoteDesktop": "Απομακρυσμένη επιφάνεια εργασίας",
-    "tabRdp": "ΠΑΑ",
-    "tabVnc": "VNC",
-    "tabTelnet": "Τέλνετ",
-    "virtualNetwork": "Εικονικό Δίκτυο",
-    "unencryptedShell": "Μη κρυπτογραφημένο κέλυφος",
-    "remoteDesktopNotes": "Σημειώσεις",
-    "userDefaultsNote": "Οι ρυθμίσεις που αφήνετε αμετάβλητες ακολουθούν τις προεπιλογές του κεντρικού υπολογιστή σας.",
-    "connectionOriginNote": "Στην εφαρμογή για υπολογιστές, τα RDP, VNC και Telnet χρησιμοποιούν τον απομακρυσμένο διακομιστή, εκτός εάν ο κεντρικός υπολογιστής έχει οριστεί σε Αυτή η συσκευή, η οποία απαιτεί ένα guacd που μπορεί να φτάσει σε αυτό το μηχάνημα. Ορίστε ένα στις ρυθμίσεις Απομακρυσμένης επιφάνειας εργασίας ή ανά κεντρικό υπολογιστή στην ενότητα Guacd Proxy.",
-    "docsLink": "Προβολή εγγράφων",
-    "connectionOriginGuacamoleNote": "Τα RDP, VNC και Telnet χρησιμοποιούν τον απομακρυσμένο διακομιστή, εκτός εάν επιλέξετε \"Αυτή η συσκευή\", κάτι που απαιτεί ένα guacd στο οποίο μπορεί να φτάσει αυτό το μηχάνημα. Ορίστε ένα στη ρύθμιση URL guacd ή ανά κεντρικό υπολογιστή στην ενότητα Guacd Proxy."
-  },
-  "onboarding": {
-    "feature_desktop": "Απομακρυσμένη επιφάνεια εργασίας",
-    "feature_desktop_desc": "Ανοίξτε τις συνεδρίες RDP, VNC και Telnet σε μια καρτέλα, όπως και το SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Βάθος χρώματος",
-        "description": "Χρησιμοποιείται για κεντρικούς υπολογιστές RDP που το αφήνουν στην προεπιλεγμένη τιμή τους."
-      },
-      "resizeMethod": {
-        "label": "Μέθοδος αλλαγής μεγέθους",
-        "description": "Πώς η απομακρυσμένη οθόνη ακολουθεί το μέγεθος του παραθύρου."
-      },
-      "resizeDisplayUpdate": "Ενημέρωση οθόνης",
-      "resizeReconnect": "Επανασύνδεση",
-      "inherit": "Κληρονομώ",
-      "on": "Επί",
-      "off": "Μακριά από",
-      "forceLossless": {
-        "label": "Δύναμη χωρίς απώλειες",
-        "description": "Επιβολή κωδικοποίησης εικόνας χωρίς απώλειες (υψηλότερη ποιότητα, μεγαλύτερο εύρος ζώνης)"
-      },
-      "enableWallpaper": {
-        "label": "Ταπετσαρία",
-        "description": "Εμφάνιση ταπετσαρίας επιφάνειας εργασίας (η απενεργοποίηση βελτιώνει την απόδοση)"
-      },
-      "enableFontSmoothing": {
-        "label": "Εξομάλυνση γραμματοσειράς",
-        "description": "Ενεργοποίηση απόδοσης γραμματοσειράς ClearType"
-      },
-      "enableDesktopComposition": {
-        "label": "Σύνθεση επιφάνειας εργασίας",
-        "description": "Ενεργοποίηση εφέ Aero glass"
-      },
-      "disableAudio": {
-        "label": "Απενεργοποίηση ήχου",
-        "description": "Σίγαση όλου του ήχου από την απομακρυσμένη συνεδρία"
-      },
-      "enablePrinting": {
-        "label": "Ενεργοποίηση εκτύπωσης",
-        "description": "Ανακατεύθυνση τοπικών εκτυπωτών στην απομακρυσμένη συνεδρία"
-      },
-      "enableDrive": {
-        "label": "Ενεργοποίηση ανακατεύθυνσης μονάδας δίσκου",
-        "description": "Αντιστοίχιση τοπικού φακέλου ως μονάδας δίσκου στην απομακρυσμένη συνεδρία"
-      },
-      "disableCopy": {
-        "label": "Απενεργοποίηση αντιγραφής",
-        "description": "Αποτροπή αντιγραφής κειμένου από την απομακρυσμένη συνεδρία"
-      },
-      "disablePaste": {
-        "label": "Απενεργοποίηση επικόλλησης",
-        "description": "Αποτροπή επικόλλησης κειμένου στην απομακρυσμένη συνεδρία"
-      },
-      "group": "Προεπιλογές απομακρυσμένης επιφάνειας εργασίας",
-      "colorDepth16": "16-bit",
-      "colorDepth24": "24-bit",
-      "colorDepth32": "32-bit"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Ενεργοποίηση απομακρυσμένης επιφάνειας εργασίας",
-        "description": "Επιτρέψτε συνδέσεις RDP, VNC και Telnet μέσω του guacd."
-      },
-      "guacdUrl": {
-        "label": "URL guacd",
-        "description": "Όπου το guacd εκτελεί ακρόαση, ως host:port. Οι μεταβλητές περιβάλλοντος GUACD_URL, GUACD_HOST και GUACD_PORT το παρακάμπτουν.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "ΠΑΑ"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Τέλνετ"
-      },
-      "rdpPort": {
-        "label": "Θύρα RDP"
-      },
-      "vncPort": {
-        "label": "Θύρα VNC"
-      },
-      "telnetPort": {
-        "label": "Θύρα Telnet"
-      },
-      "rdpSecurity": {
-        "label": "Λειτουργία ασφαλείας RDP"
-      },
-      "rdpIgnoreCert": {
-        "label": "Αγνόηση σφαλμάτων πιστοποιητικών"
-      },
-      "guacamoleConfig": {
-        "label": "ρυθμίσεις guacd"
-      },
-      "enableToolbar": {
-        "label": "Γραμμή εργαλείων απομακρυσμένης επιφάνειας εργασίας",
-        "description": "Εμφάνιση της γραμμής εργαλείων σε συνεδρίες RDP, VNC και Telnet."
-      },
-      "displayGroup": "Επίδειξη",
-      "displayDefaultsTab": "Απομακρυσμένη επιφάνεια εργασίας"
-    }
-  },
-  "palette": {
-    "connectRdp": "Σύνδεση με το RDP",
-    "connectVnc": "Σύνδεση με VNC",
-    "connectTelnet": "Σύνδεση με Telnet"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Κοινή χρήση περιόδων λειτουργίας απομακρυσμένης επιφάνειας εργασίας",
-      "description": "Να επιτρέπεται η κοινή χρήση συνεδριών και οι χώροι συνεργασίας να εμφανίζουν τις συνεδρίες RDP, VNC και Telnet αυτού του χρήστη σε άλλους."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Απαιτείται απομακρυσμένος διακομιστής. Συνδέστε έναν απομακρυσμένο διακομιστή στις Ρυθμίσεις για να χρησιμοποιήσετε αυτόν τον τύπο σύνδεσης."
-  },
-  "plugin": {
-    "name": "Απομακρυσμένη επιφάνεια εργασίας"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/es_ES.json b/plugins/remote-desktop/locales/translated/es_ES.json
deleted file mode 100644
index ba54e4848..000000000
--- a/plugins/remote-desktop/locales/translated/es_ES.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "Conectando a la sesión {{type}}...",
-    "checkingGuacd": "Comprobando el servicio de escritorio remoto...",
-    "requestingToken": "Solicitando el token de conexión {{type}}...",
-    "openingSession": "Abriendo {{type}} sesión...",
-    "negotiating": "Negociando el apretón de manos {{type}}...",
-    "sessionReady": "{{type}} sesión lista",
-    "connectionError": "Error de conexión",
-    "connectionFailed": "Conexión fallida",
-    "failedToConnect": "Error al obtener el token de conexión",
-    "hostNotFound": "Host no encontrado",
-    "noHostSelected": "Ningún host seleccionado",
-    "reconnect": "Reconectar",
-    "retry": "Reintentar",
-    "guacdUnavailable": "El servicio de escritorio remoto (guacd) no está disponible. Por favor, asegúrate de que guacd se está ejecutando, es accesible y está correctamente configurado en los ajustes de administración.",
-    "credentialPromptTitle": "Introduzca las credenciales de RDP",
-    "credentialPromptDescription": "Este host está configurado para solicitar credenciales al conectarse. Estas se utilizan únicamente para esta sesión y no se guardan.",
-    "connect": "Conectar",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "Archivos de Drive",
-      "parent": "Directorio principal",
-      "refresh": "Actualizar",
-      "empty": "Esta carpeta está vacía",
-      "listFailed": "No se pudo leer esta carpeta.",
-      "download": "Descargar",
-      "downloadFailed": "Error al descargar {{name}}",
-      "upload": "Subir archivos",
-      "uploading": "Subiendo {{name}}...",
-      "uploaded": "Subido {{name}}",
-      "uploadFailed": "Error al cargar {{name}}",
-      "uploadDisabled": "Las cargas están deshabilitadas para esta conexión.",
-      "driveUnavailable": "Habilite la redirección de unidades RDP antes de cargar archivos.",
-      "driveNotWritable": "guacd no puede escribir en la carpeta de la unidad. Compruebe GUACD_DRIVE_PATH (o la ruta de la unidad del host) y sus permisos.",
-      "dropToUpload": "Arrastra y suelta los archivos para subirlos"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (Bloquear pantalla)",
-      "winKey": "Tecla Windows",
-      "superL": "Super+L (Pantalla de bloqueo)",
-      "superKey": "Súper llave",
-      "super": "Súper",
-      "cmdL": "Cmd+L (Pantalla de bloqueo)",
-      "cmdKey": "Tecla de comando",
-      "cmd": "Comando",
-      "ctrl": "Ctrl",
-      "alt": "Alt",
-      "shift": "Mayús",
-      "win": "Win",
-      "stickyActive": "{{key}} (activado - clic para soltar)",
-      "stickyInactive": "{{key}} (clic para activar)",
-      "esc": "Escape",
-      "tab": "Tab",
-      "home": "Inicio",
-      "end": "Fin",
-      "pageUp": "Re Pág",
-      "pageDown": "Av Pág",
-      "arrowUp": "Flecha arriba",
-      "arrowDown": "Flecha abajo",
-      "arrowLeft": "Flecha izquierda",
-      "arrowRight": "Flecha derecha",
-      "fnToggle": "Teclas de función",
-      "reconnect": "Reconectar sesión",
-      "collapse": "Contraer barra de herramientas",
-      "expand": "Expandir barra de herramientas",
-      "dragHandle": "Arrastrar para reposicionar",
-      "hide": "Ocultar para esta sesión. Para desactivarlo permanentemente, abra Configuración del host → General → Barra de herramientas de conexión.",
-      "zoomIn": "Dar un golpe de zoom",
-      "zoomOut": "Aleja la vista",
-      "resetZoom": "Restablecer zoom",
-      "fitToScreen": "Ajustar a la pantalla",
-      "switchToTrackpad": "Cambia al modo panel táctil (arrastra para mover el cursor, toca para hacer clic).",
-      "switchToTouch": "Cambia al modo táctil (pulsa directamente donde quieras hacer clic)."
-    },
-    "disabled": "El Escritorio remoto está desactivado. Un administrador puede activarlo en la configuración."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Abierto en Escritorio remoto de Windows",
-    "nativeRdpFailed": "No se pudo abrir el Escritorio remoto de Windows.",
-    "openNativeRdp": "Abrir en Escritorio remoto de Windows",
-    "guac": {
-      "toolbar": "Barra de herramientas",
-      "connection": "Conexión",
-      "authentication": "Autenticación",
-      "storedCredential": "Credencial almacenada",
-      "authMethod": "Método de autenticación",
-      "authTypeDirect": "Directa",
-      "authTypeCredential": "Credencial",
-      "authTypeNone": "Ninguna",
-      "authTypeNoneDesc": "No se almacenan credenciales. Se le solicitará un nombre de usuario y una contraseña cada vez que se conecte; estos no se guardan.",
-      "selectCredential": "Seleccionar una credencial...",
-      "connectionSettings": "Configuración de conexión",
-      "displaySettings": "Configuración de pantalla",
-      "audioSettings": "Configuración de audio",
-      "rdpPerformance": "Rendimiento RDP",
-      "deviceRedirection": "Redirección de dispositivos",
-      "session": "Sesión",
-      "gateway": "Gateway",
-      "remoteApp": "RemoteApp",
-      "clipboard": "Portapapeles",
-      "sessionRecording": "Grabación de sesión",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "Configuración de VNC",
-      "terminalSettings": "Configuración de terminal",
-      "rdpPort": "Puerto RDP",
-      "username": "Nombre de usuario",
-      "password": "Contraseña",
-      "passwordSaved": "Contraseña guardada, escriba para cambiarla",
-      "domain": "Dominio",
-      "securityMode": "Modo de seguridad",
-      "width": "Ancho",
-      "height": "Alto",
-      "dpi": "DPI",
-      "clientName": "Nombre del cliente",
-      "initialProgram": "Programa inicial",
-      "serverLayout": "Disposición del teclado",
-      "timezone": "Zona horaria",
-      "loadBalanceInfo": "Información de balanceo de carga / Cookie",
-      "loadBalanceInfoDesc": "Cookie del agente de conexiones a Escritorio Remoto para el balanceo de carga de la granja RDS (p. ej. tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "Proxy de guacd",
-      "guacdHostname": "Host de guacd",
-      "guacdHostnamePlaceholder": "Predeterminado global",
-      "guacdPort": "Puerto de guacd",
-      "guacdProxyDesc": "Sobrescribir la instancia global de guacd para esta conexión. Dejar en blanco para usar la configuración global de guacd.",
-      "gatewayHostname": "Nombre de host de la puerta de enlace",
-      "gatewayPort": "Puerto de la puerta de enlace",
-      "gatewayUsername": "Nombre de usuario de la puerta de enlace",
-      "gatewayPassword": "Contraseña de la puerta de enlace",
-      "gatewayDomain": "Dominio de la puerta de enlace",
-      "remoteAppProgram": "Programa RemoteApp",
-      "workingDirectory": "Directorio de trabajo",
-      "arguments": "Argumentos",
-      "normalizeLineEndings": "Normalizar finales de línea",
-      "macAddress": "Dirección MAC",
-      "broadcastAddress": "Dirección de difusión",
-      "udpPort": "Puerto UDP",
-      "waitTimeS": "Tiempo de espera (s)",
-      "driveName": "Nombre de la unidad",
-      "drivePath": "Ruta de la unidad",
-      "ignoreCertificate": "Ignorar certificado",
-      "ignoreCertificateDesc": "Permitir conexiones a hosts con certificados autofirmados",
-      "forceLossless": "Forzar sin pérdida",
-      "forceLosslessDesc": "Forzar codificación de imagen sin pérdida (más calidad, más ancho de banda)",
-      "disableAudio": "Desactivar audio",
-      "disableAudioDesc": "Silenciar todo el audio de la sesión remota",
-      "enableAudioInput": "Activar entrada de audio (micrófono)",
-      "enableAudioInputDesc": "Reenviar el micrófono local a la sesión remota",
-      "wallpaper": "Fondo de pantalla",
-      "wallpaperDesc": "Mostrar fondo de escritorio (desactivarlo mejora el rendimiento)",
-      "theming": "Temas",
-      "themingDesc": "Activar temas y estilos visuales",
-      "fontSmoothing": "Suavizado de fuentes",
-      "fontSmoothingDesc": "Activar renderizado de fuentes ClearType",
-      "fullWindowDrag": "Arrastre de ventana completa",
-      "fullWindowDragDesc": "Mostrar el contenido de la ventana al arrastrar",
-      "desktopComposition": "Composición de escritorio",
-      "desktopCompositionDesc": "Activar efectos Aero Glass",
-      "menuAnimations": "Animaciones de menú",
-      "menuAnimationsDesc": "Activar animaciones de fundido y deslizamiento de menú",
-      "disableBitmapCaching": "Desactivar caché de mapa de bits",
-      "disableBitmapCachingDesc": "Desactivar la caché de mapa de bits (puede ayudar con fallos)",
-      "disableOffscreenCaching": "Desactivar caché fuera de pantalla",
-      "disableOffscreenCachingDesc": "Desactivar la caché fuera de pantalla",
-      "disableGlyphCaching": "Desactivar caché de glifos",
-      "disableGlyphCachingDesc": "Desactivar la caché de glifos",
-      "enableGfx": "Activar GFX",
-      "enableGfxDesc": "Usar la canalización de gráficos RemoteFX",
-      "enablePrinting": "Activar impresión",
-      "enablePrintingDesc": "Redirigir las impresoras locales a la sesión remota",
-      "enableDriveRedirection": "Activar redirección de unidades",
-      "enableDriveRedirectionDesc": "Asignar una carpeta local como una unidad en la sesión remota",
-      "createDrivePath": "Crear ruta de unidad",
-      "createDrivePathDesc": "Crear automáticamente la carpeta si no existe",
-      "disableDownload": "Deshabilitar descarga",
-      "disableDownloadDesc": "Impedir la descarga de archivos de la sesión remota",
-      "disableUpload": "Deshabilitar subida",
-      "disableUploadDesc": "Impedir la subida de archivos a la sesión remota",
-      "enableTouch": "Habilitar táctil",
-      "enableTouchDesc": "Habilitar el reenvío de entrada táctil",
-      "consoleSession": "Sesión de consola",
-      "consoleSessionDesc": "Conectar a la consola (sesión 0) en lugar de una nueva sesión",
-      "sendWolPacket": "Enviar paquete WOL",
-      "sendWolPacketDesc": "Enviar un paquete mágico para encender este equipo antes de conectar",
-      "disableCopy": "Deshabilitar copia",
-      "disableCopyDesc": "Impedir la copia de texto de la sesión remota",
-      "disablePaste": "Deshabilitar pegado",
-      "disablePasteDesc": "Impedir el pegado de texto en la sesión remota",
-      "createPathIfMissing": "Crear ruta si no existe",
-      "createPathIfMissingDesc": "Crear automáticamente el directorio de grabación",
-      "excludeOutput": "Excluir salida",
-      "excludeOutputDesc": "No grabar la salida de pantalla (solo metadatos)",
-      "excludeMouse": "Excluir ratón",
-      "excludeMouseDesc": "No grabar los movimientos del ratón",
-      "includeKeystrokes": "Incluir pulsaciones de teclas",
-      "includeKeystrokesDesc": "Grabar las pulsaciones de teclas en bruto además de la salida de pantalla",
-      "vncPort": "Puerto VNC",
-      "vncPassword": "Contraseña VNC",
-      "vncUsernameOptional": "Nombre de usuario (opcional)",
-      "vncLeaveBlank": "Dejar en blanco si no es necesario",
-      "cursorMode": "Modo de cursor",
-      "swapRedBlue": "Intercambiar rojo/azul",
-      "swapRedBlueDesc": "Intercambiar los canales de color rojo y azul (corrige algunos problemas de color)",
-      "readOnly": "Solo lectura",
-      "readOnlyDesc": "Ver la pantalla remota sin enviar ninguna entrada",
-      "telnetPort": "Puerto Telnet",
-      "terminalType": "Tipo de terminal",
-      "fontName": "Nombre de fuente",
-      "fontSize": "Tamaño de fuente",
-      "colorScheme": "Esquema de color",
-      "backspaceKey": "Tecla de retroceso",
-      "colorDepth": "Profundidad de color",
-      "resizeMethod": "Método de redimensionamiento",
-      "driveNamePlaceholder": "Unidad Termix",
-      "options": {
-        "any": "Cualquier",
-        "auto": "Automático",
-        "nlaExtended": "NLA Extendido",
-        "color8": "8 bits",
-        "color16": "16 bits",
-        "color24": "24 bits",
-        "color32": "32 bits",
-        "displayUpdate": "Actualización de pantalla",
-        "reconnect": "Reconectar",
-        "preserve": "Preservar",
-        "unix": "Unix (LF)",
-        "windows": "Ventanas (CRLF)",
-        "local": "Local",
-        "remote": "Remoto",
-        "failsafe": "a prueba de fallos",
-        "blackOnWhite": "Negro sobre blanco",
-        "whiteOnBlack": "Blanco sobre negro",
-        "grayOnBlack": "Gris sobre negro",
-        "greenOnBlack": "Verde sobre negro"
-      }
-    },
-    "remoteDesktop": "Escritorio remoto",
-    "tabRdp": "RDP",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "Red virtual",
-    "unencryptedShell": "Shell sin cifrar",
-    "remoteDesktopNotes": "Notas",
-    "userDefaultsNote": "Los ajustes que no modifiques seguirán la configuración predeterminada de tu servidor.",
-    "connectionOriginNote": "En la aplicación de escritorio, RDP, VNC y Telnet usan el servidor remoto a menos que el host esté configurado como Este dispositivo, que necesita un proxy guacd al que esta máquina pueda acceder. Configure uno en la configuración de Escritorio remoto o por host en Proxy guacd.",
-    "docsLink": "Ver documentación",
-    "connectionOriginGuacamoleNote": "RDP, VNC y Telnet utilizan el servidor remoto a menos que seleccione \"Este dispositivo\", en cuyo caso se necesita un servidor guacd al que esta máquina pueda acceder. Configure uno en la configuración de URL de guacd o por host en la configuración de proxy de guacd."
-  },
-  "onboarding": {
-    "feature_desktop": "Escritorio remoto",
-    "feature_desktop_desc": "Abre sesiones RDP, VNC y Telnet en una pestaña, igual que con SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Profundidad de color",
-        "description": "Se utiliza para hosts RDP que lo dejan en su configuración predeterminada."
-      },
-      "resizeMethod": {
-        "label": "Método de redimensionamiento",
-        "description": "Cómo la pantalla remota se ajusta al tamaño de la ventana."
-      },
-      "resizeDisplayUpdate": "Actualización de pantalla",
-      "resizeReconnect": "Reconectar",
-      "inherit": "Heredar",
-      "on": "Activado",
-      "off": "Desactivado",
-      "forceLossless": {
-        "label": "Forzar sin pérdida",
-        "description": "Forzar codificación de imagen sin pérdida (más calidad, más ancho de banda)"
-      },
-      "enableWallpaper": {
-        "label": "Fondo de pantalla",
-        "description": "Mostrar fondo de escritorio (desactivarlo mejora el rendimiento)"
-      },
-      "enableFontSmoothing": {
-        "label": "Suavizado de fuentes",
-        "description": "Activar renderizado de fuentes ClearType"
-      },
-      "enableDesktopComposition": {
-        "label": "Composición de escritorio",
-        "description": "Activar efectos Aero Glass"
-      },
-      "disableAudio": {
-        "label": "Desactivar audio",
-        "description": "Silenciar todo el audio de la sesión remota"
-      },
-      "enablePrinting": {
-        "label": "Activar impresión",
-        "description": "Redirigir las impresoras locales a la sesión remota"
-      },
-      "enableDrive": {
-        "label": "Activar redirección de unidades",
-        "description": "Asignar una carpeta local como una unidad en la sesión remota"
-      },
-      "disableCopy": {
-        "label": "Deshabilitar copia",
-        "description": "Impedir la copia de texto de la sesión remota"
-      },
-      "disablePaste": {
-        "label": "Deshabilitar pegado",
-        "description": "Impedir el pegado de texto en la sesión remota"
-      },
-      "group": "Configuración predeterminada de Escritorio remoto",
-      "colorDepth16": "16 bits",
-      "colorDepth24": "24 bits",
-      "colorDepth32": "32 bits"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Habilitar Escritorio remoto",
-        "description": "Permitir conexiones RDP, VNC y Telnet a través de guacd."
-      },
-      "guacdUrl": {
-        "label": "URL de guacd",
-        "description": "Donde guacd escucha, como host:puerto. Las variables de entorno GUACD_URL, GUACD_HOST y GUACD_PORT anulan esto.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "RDP"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "Puerto RDP"
-      },
-      "vncPort": {
-        "label": "puerto VNC"
-      },
-      "telnetPort": {
-        "label": "Puerto Telnet"
-      },
-      "rdpSecurity": {
-        "label": "Modo de seguridad RDP"
-      },
-      "rdpIgnoreCert": {
-        "label": "Ignorar errores de certificado"
-      },
-      "guacamoleConfig": {
-        "label": "Configuración de guacd"
-      },
-      "enableToolbar": {
-        "label": "Barra de herramientas de escritorio remoto",
-        "description": "Mostrar la barra de herramientas en las sesiones RDP, VNC y Telnet."
-      },
-      "displayGroup": "Mostrar",
-      "displayDefaultsTab": "Escritorio remoto"
-    }
-  },
-  "palette": {
-    "connectRdp": "Conéctese mediante RDP",
-    "connectVnc": "Conéctate con VNC",
-    "connectTelnet": "Conéctese con Telnet"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Compartir sesiones de escritorio remoto",
-      "description": "Permitir que las salas de colaboración y de uso compartido de sesiones muestren las sesiones RDP, VNC y Telnet de este usuario a otros."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Se requiere un servidor remoto. Conecte un servidor remoto en Configuración para usar este tipo de conexión."
-  },
-  "plugin": {
-    "name": "Escritorio remoto"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/fi_FI.json b/plugins/remote-desktop/locales/translated/fi_FI.json
deleted file mode 100644
index a75328463..000000000
--- a/plugins/remote-desktop/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "Yhdistetään {{type}} -istuntoon...",
-    "checkingGuacd": "Tarkistetaan etätyöpöytäpalvelua...",
-    "requestingToken": "Pyydetään {{type}} yhteystunnusta...",
-    "openingSession": "Avataan {{type}} -istuntoa...",
-    "negotiating": "Neuvottelen {{type}} kädenpuristuksesta...",
-    "sessionReady": "{{type}} istunto valmis",
-    "connectionError": "Yhteysvirhe",
-    "connectionFailed": "Yhteys epäonnistui",
-    "failedToConnect": "Yhteystunnuksen hakeminen epäonnistui",
-    "hostNotFound": "Isäntää ei löydy",
-    "noHostSelected": "Ei valittua isäntää",
-    "reconnect": "Yhdistä uudelleen",
-    "retry": "Yritä uudelleen",
-    "guacdUnavailable": "Etätyöpöytäpalvelu (guacd) ei ole käytettävissä. Varmista, että guacd on käynnissä, käytettävissä ja määritetty oikein järjestelmänvalvojan asetuksissa.",
-    "credentialPromptTitle": "Syötä RDP-tunnistetiedot",
-    "credentialPromptDescription": "Tämä isäntä on asetettu kysymään tunnistetietoja yhteyden muodostamisen yhteydessä. Niitä käytetään vain tässä istunnossa, eikä niitä tallenneta.",
-    "connect": "Yhdistä",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "Drive-tiedostot",
-      "parent": "Ylähakemisto",
-      "refresh": "Päivitä",
-      "empty": "Tämä kansio on tyhjä",
-      "listFailed": "Tämän kansion lukeminen epäonnistui",
-      "download": "Lataa",
-      "downloadFailed": "Lataus epäonnistui {{name}}",
-      "upload": "Lataa tiedostoja",
-      "uploading": "Ladataan {{name}}...",
-      "uploaded": "Ladattu {{name}}",
-      "uploadFailed": "Lataus epäonnistui {{name}}",
-      "uploadDisabled": "Lähetykset on poistettu käytöstä tällä yhteydellä",
-      "driveUnavailable": "Ota RDP-aseman uudelleenohjaus käyttöön ennen tiedostojen lataamista",
-      "driveNotWritable": "guacd ei voi kirjoittaa asemakansioon. Tarkista GUACD_DRIVE_PATH (tai isännän asemapolku) ja sen käyttöoikeudet.",
-      "dropToUpload": "Pudota tiedostot ladattavaksi"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (Lukitusnäyttö)",
-      "winKey": "Windows-näppäin",
-      "superL": "Super+L (Lukitusnäyttö)",
-      "superKey": "Superavain",
-      "super": "Super",
-      "cmdL": "Cmd+L (Lukitusnäyttö)",
-      "cmdKey": "Komento-näppäin",
-      "cmd": "Komento",
-      "ctrl": "Ctrl",
-      "alt": "Vaihtoehto",
-      "shift": "Siirtää",
-      "win": "Voittaa",
-      "stickyActive": "{{key}} (lukittu - napsauta vapauttaaksesi)",
-      "stickyInactive": "{{key}} (napsauta lukitaksesi)",
-      "esc": "Paeta",
-      "tab": "Välilehti",
-      "home": "Kotiin",
-      "end": "Loppu",
-      "pageUp": "Sivu ylös",
-      "pageDown": "Sivu alas",
-      "arrowUp": "Nuoli ylös",
-      "arrowDown": "Nuoli alas",
-      "arrowLeft": "Nuoli vasemmalle",
-      "arrowRight": "Nuoli oikealle",
-      "fnToggle": "Toimintonäppäimet",
-      "reconnect": "Yhdistä istunto uudelleen",
-      "collapse": "Pienennä työkalupalkki",
-      "expand": "Laajenna työkalupalkkia",
-      "dragHandle": "Vedä siirtääksesi",
-      "hide": "Piilota tältä istunnolta. Voit poistaa sen käytöstä pysyvästi avaamalla Isäntäasetukset → Yleiset → Yhteystyökalurivi.",
-      "zoomIn": "Lähennä",
-      "zoomOut": "Loitonna",
-      "resetZoom": "Palauta zoomaus",
-      "fitToScreen": "Sovita näyttöön",
-      "switchToTrackpad": "Vaihda ohjauslevytilaan (vedä siirtääksesi kohdistinta, napauta napsauttamalla)",
-      "switchToTouch": "Vaihda kosketustilaan (napauta suoraan haluamaasi kohtaan)"
-    },
-    "disabled": "Etätyöpöytä on poistettu käytöstä. Ylläpitäjä voi ottaa sen käyttöön asetuksissa."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Avattu Windowsin etätyöpöydällä",
-    "nativeRdpFailed": "Windowsin etätyöpöydän avaaminen epäonnistui",
-    "openNativeRdp": "Avaa Windowsin etätyöpöydällä",
-    "guac": {
-      "toolbar": "Työkalurivi",
-      "connection": "Yhteys",
-      "authentication": "Todennus",
-      "storedCredential": "Tallennetut tunnistetiedot",
-      "authMethod": "Todennustapa",
-      "authTypeDirect": "Suoraan",
-      "authTypeCredential": "Valtakirja",
-      "authTypeNone": "Ei mitään",
-      "authTypeNoneDesc": "Tunnuksia ei tallenneta. Sinulta kysytään käyttäjätunnusta ja salasanaa aina, kun muodostat yhteyden; niitä ei tallenneta.",
-      "selectCredential": "Valitse tunnistetiedot...",
-      "connectionSettings": "Yhteysasetukset",
-      "displaySettings": "Näyttöasetukset",
-      "audioSettings": "Ääniasetukset",
-      "rdpPerformance": "RDP-suorituskyky",
-      "deviceRedirection": "Laitteen uudelleenohjaus",
-      "session": "Istunto",
-      "gateway": "Yhdyskäytävä",
-      "remoteApp": "Etäsovellus",
-      "clipboard": "Leikepöytä",
-      "sessionRecording": "Istunnon tallennus",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "VNC-asetukset",
-      "terminalSettings": "Pääteasetukset",
-      "rdpPort": "RDP-portti",
-      "username": "Käyttäjätunnus",
-      "password": "Salasana",
-      "passwordSaved": "Salasana tallennettu, kirjoita muuttaaksesi",
-      "domain": "Verkkotunnus",
-      "securityMode": "Suojaustila",
-      "width": "Leveys",
-      "height": "Korkeus",
-      "dpi": "DPI",
-      "clientName": "Asiakkaan nimi",
-      "initialProgram": "Alkuperäinen ohjelma",
-      "serverLayout": "Palvelimen asettelu",
-      "timezone": "Aikavyöhyke",
-      "loadBalanceInfo": "Kuormituksen tasapainotustiedot / eväste",
-      "loadBalanceInfoDesc": "RD Connection Broker -eväste RDS-farmin kuormituksen tasapainottamista varten (esim. tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "guacd-välityspalvelin",
-      "guacdHostname": "guacd-isäntä",
-      "guacdHostnamePlaceholder": "Globaali oletusarvo",
-      "guacdPort": "guacdin satama",
-      "guacdProxyDesc": "Ohita tämän yhteyden globaali guacd-instanssi. Jätä tyhjäksi käyttääksesi globaalisti määritettyä guacd-instanssia.",
-      "gatewayHostname": "Yhdyskäytävän isäntänimi",
-      "gatewayPort": "Yhdyskäytäväportti",
-      "gatewayUsername": "Yhdyskäytävän käyttäjätunnus",
-      "gatewayPassword": "Yhdyskäytävän salasana",
-      "gatewayDomain": "Yhdyskäytävän verkkotunnus",
-      "remoteAppProgram": "RemoteApp-ohjelma",
-      "workingDirectory": "Työhakemisto",
-      "arguments": "Argumentit",
-      "normalizeLineEndings": "Normalisoi rivinpäätteet",
-      "macAddress": "MAC-osoite",
-      "broadcastAddress": "Lähetysosoite",
-      "udpPort": "UDP-portti",
-      "waitTimeS": "Odotusaika (s)",
-      "driveName": "Aseman nimi",
-      "drivePath": "Ajopolku",
-      "ignoreCertificate": "Ohita varmenne",
-      "ignoreCertificateDesc": "Salli yhteydet itse allekirjoitettuja varmenteita käyttäviin isäntiin",
-      "forceLossless": "Pakota häviötön",
-      "forceLosslessDesc": "Pakota häviötön kuvan koodaus (korkeampi laatu, enemmän kaistanleveyttä)",
-      "disableAudio": "Poista ääni käytöstä",
-      "disableAudioDesc": "Mykistä kaikki etäistunnon äänet",
-      "enableAudioInput": "Ota äänitulo käyttöön (mikrofoni)",
-      "enableAudioInputDesc": "Lähetä paikallinen mikrofoni etäistuntoon",
-      "wallpaper": "Taustakuva",
-      "wallpaperDesc": "Näytä työpöydän taustakuva (poistaminen käytöstä parantaa suorituskykyä)",
-      "theming": "Teemat",
-      "themingDesc": "Ota käyttöön visuaaliset teemat ja tyylit",
-      "fontSmoothing": "Fontin pehmennys",
-      "fontSmoothingDesc": "Ota ClearType-fonttien renderöinti käyttöön",
-      "fullWindowDrag": "Koko ikkunan vetäminen",
-      "fullWindowDragDesc": "Näytä ikkunan sisältö vetämisen aikana",
-      "desktopComposition": "Työpöydän sommittelu",
-      "desktopCompositionDesc": "Ota Aero Glass -tehosteet käyttöön",
-      "menuAnimations": "Valikkoanimaatiot",
-      "menuAnimationsDesc": "Ota käyttöön valikoiden häivytys ja dia-animaatiot",
-      "disableBitmapCaching": "Poista bittikarttavälimuisti käytöstä",
-      "disableBitmapCachingDesc": "Poista bittikarttavälimuisti käytöstä (saattaa auttaa häiriöiden kanssa)",
-      "disableOffscreenCaching": "Poista käytöstä näytön ulkopuolinen välimuisti",
-      "disableOffscreenCachingDesc": "Poista käytöstä näytön ulkopuolinen välimuisti",
-      "disableGlyphCaching": "Poista käytöstä glyfien välimuisti",
-      "disableGlyphCachingDesc": "Poista merkkijonojen välimuisti käytöstä",
-      "enableGfx": "Ota käyttöön näytönsäästäjä",
-      "enableGfxDesc": "Käytä RemoteFX-grafiikkaputkea",
-      "enablePrinting": "Ota tulostus käyttöön",
-      "enablePrintingDesc": "Ohjaa paikalliset tulostimet etäistuntoon",
-      "enableDriveRedirection": "Ota aseman uudelleenohjaus käyttöön",
-      "enableDriveRedirectionDesc": "Yhdistä paikallinen kansio asemaksi etäistunnossa",
-      "createDrivePath": "Luo ajopolku",
-      "createDrivePathDesc": "Luo kansio automaattisesti, jos sitä ei ole olemassa",
-      "disableDownload": "Poista lataus käytöstä",
-      "disableDownloadDesc": "Estä tiedostojen lataaminen etäistunnosta",
-      "disableUpload": "Poista lähetys käytöstä",
-      "disableUploadDesc": "Estä tiedostojen lataaminen etäistuntoon",
-      "enableTouch": "Ota kosketus käyttöön",
-      "enableTouchDesc": "Ota kosketussyötteen edelleenlähetys käyttöön",
-      "consoleSession": "Konsoli-istunto",
-      "consoleSessionDesc": "Yhdistä konsoliin (istunto 0) uuden istunnon sijaan",
-      "sendWolPacket": "Lähetä WOL-paketti",
-      "sendWolPacketDesc": "Lähetä taikapaketti herättääksesi tämän isännän ennen yhteyden muodostamista",
-      "disableCopy": "Poista kopiointi käytöstä",
-      "disableCopyDesc": "Estä tekstin kopioiminen etäistunnosta",
-      "disablePaste": "Poista liittäminen käytöstä",
-      "disablePasteDesc": "Estä tekstin liittäminen etäistuntoon",
-      "createPathIfMissing": "Luo polku, jos se puuttuu",
-      "createPathIfMissingDesc": "Luo tallennushakemisto automaattisesti",
-      "excludeOutput": "Sulje pois tuloste",
-      "excludeOutputDesc": "Älä tallenna näytön tulostetta (vain metatiedot)",
-      "excludeMouse": "Sulje hiiri pois",
-      "excludeMouseDesc": "Älä tallenna hiiren liikkeitä",
-      "includeKeystrokes": "Sisällytä näppäinpainallukset",
-      "includeKeystrokesDesc": "Tallenna raakat näppäinpainallukset näytön tulosteen lisäksi",
-      "vncPort": "VNC-portti",
-      "vncPassword": "VNC-salasana",
-      "vncUsernameOptional": "Käyttäjätunnus (valinnainen)",
-      "vncLeaveBlank": "Jätä tyhjäksi, jos ei pakollinen",
-      "cursorMode": "Kohdistimen tila",
-      "swapRedBlue": "Vaihda punainen/sininen",
-      "swapRedBlueDesc": "Vaihda punaisen ja sinisen värikanavan paikkaa (korjaa joitakin väriongelmia)",
-      "readOnly": "Vain lukuoikeus",
-      "readOnlyDesc": "Katso etänäyttöä lähettämättä mitään syötettä",
-      "telnetPort": "Telnet-portti",
-      "terminalType": "Päätetyyppi",
-      "fontName": "Fontin nimi",
-      "fontSize": "Fonttikoko",
-      "colorScheme": "Värimaailma",
-      "backspaceKey": "Askelpalautin-näppäin",
-      "colorDepth": "Värisyvyys",
-      "resizeMethod": "Koon muuttamismenetelmä",
-      "driveNamePlaceholder": "Termix Drive",
-      "options": {
-        "any": "Mikä tahansa",
-        "auto": "Auto",
-        "nlaExtended": "NLA Laajennettu",
-        "color8": "8-bittinen",
-        "color16": "16-bittinen",
-        "color24": "24-bittinen",
-        "color32": "32-bittinen",
-        "displayUpdate": "Näyttöpäivitys",
-        "reconnect": "Yhdistä uudelleen",
-        "preserve": "Säilyttää",
-        "unix": "Unix (LF)",
-        "windows": "Windows (CRLF)",
-        "local": "Paikallinen",
-        "remote": "Kauko",
-        "failsafe": "vikaturvallinen",
-        "blackOnWhite": "Mustaa valkoisella",
-        "whiteOnBlack": "Valkoinen mustalla",
-        "grayOnBlack": "Harmaa mustalla pohjalla",
-        "greenOnBlack": "Vihreä mustalla"
-      }
-    },
-    "remoteDesktop": "Etätyöpöytä",
-    "tabRdp": "Maaseudun kehittämisohjelma",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "Virtuaaliverkko",
-    "unencryptedShell": "Salaamaton kuori",
-    "remoteDesktopNotes": "Muistiinpanoja",
-    "userDefaultsNote": "Muuttamatta jätetyt asetukset noudattavat isäntäsi oletusasetuksia.",
-    "connectionOriginNote": "Työpöytäsovelluksessa RDP, VNC ja Telnet käyttävät etäpalvelinta, ellei isäntäasetukseksi ole asetettu Tämä laite, jolloin tarvitaan GUACD, johon tämä kone voi tavoittaa. Aseta sellainen etätyöpöytäasetuksissa tai isäntäkohtaisesti GUACD-välityspalvelimen alla.",
-    "docsLink": "Näytä dokumentit",
-    "connectionOriginGuacamoleNote": "RDP, VNC ja Telnet käyttävät etäpalvelinta, ellet valitse \"Tämä laite\", jolloin tarvitset GUACD:n, johon tämä kone voi tavoittaa. Aseta sellainen GUACD:n URL-asetuksissa tai isäntäkohtaisesti GUACD-välityspalvelimen alla."
-  },
-  "onboarding": {
-    "feature_desktop": "Etätyöpöytä",
-    "feature_desktop_desc": "Avaa RDP-, VNC- ja Telnet-istunnot välilehdellä, samalla tavalla kuin SSH:ssa."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Värisyvyys",
-        "description": "Käytetään RDP-isännille, jotka jättävät sen oletusarvoiseksi."
-      },
-      "resizeMethod": {
-        "label": "Koon muuttamismenetelmä",
-        "description": "Miten etänäyttö seuraa ikkunan kokoa."
-      },
-      "resizeDisplayUpdate": "Näyttöpäivitys",
-      "resizeReconnect": "Yhdistä uudelleen",
-      "inherit": "Periä",
-      "on": "Päällä",
-      "off": "Pois",
-      "forceLossless": {
-        "label": "Pakota häviötön",
-        "description": "Pakota häviötön kuvan koodaus (korkeampi laatu, enemmän kaistanleveyttä)"
-      },
-      "enableWallpaper": {
-        "label": "Taustakuva",
-        "description": "Näytä työpöydän taustakuva (poistaminen käytöstä parantaa suorituskykyä)"
-      },
-      "enableFontSmoothing": {
-        "label": "Fontin pehmennys",
-        "description": "Ota ClearType-fonttien renderöinti käyttöön"
-      },
-      "enableDesktopComposition": {
-        "label": "Työpöydän sommittelu",
-        "description": "Ota Aero Glass -tehosteet käyttöön"
-      },
-      "disableAudio": {
-        "label": "Poista ääni käytöstä",
-        "description": "Mykistä kaikki etäistunnon äänet"
-      },
-      "enablePrinting": {
-        "label": "Ota tulostus käyttöön",
-        "description": "Ohjaa paikalliset tulostimet etäistuntoon"
-      },
-      "enableDrive": {
-        "label": "Ota aseman uudelleenohjaus käyttöön",
-        "description": "Yhdistä paikallinen kansio asemaksi etäistunnossa"
-      },
-      "disableCopy": {
-        "label": "Poista kopiointi käytöstä",
-        "description": "Estä tekstin kopioiminen etäistunnosta"
-      },
-      "disablePaste": {
-        "label": "Poista liittäminen käytöstä",
-        "description": "Estä tekstin liittäminen etäistuntoon"
-      },
-      "group": "Etätyöpöydän oletusasetukset",
-      "colorDepth16": "16-bittinen",
-      "colorDepth24": "24-bittinen",
-      "colorDepth32": "32-bittinen"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Ota etätyöpöytä käyttöön",
-        "description": "Salli RDP-, VNC- ja Telnet-yhteydet guacdin kautta."
-      },
-      "guacdUrl": {
-        "label": "guacd-URL-osoite",
-        "description": "Missä guacd kuuntelee, muodossa host:port. GUACD_URL-, GUACD_HOST- ja GUACD_PORT-ympäristömuuttujat korvaavat tämän.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "Maaseudun kehittämisohjelma"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "RDP-portti"
-      },
-      "vncPort": {
-        "label": "VNC-portti"
-      },
-      "telnetPort": {
-        "label": "Telnet-portti"
-      },
-      "rdpSecurity": {
-        "label": "RDP-suojaustila"
-      },
-      "rdpIgnoreCert": {
-        "label": "Ohita varmennevirheet"
-      },
-      "guacamoleConfig": {
-        "label": "guacd-asetukset"
-      },
-      "enableToolbar": {
-        "label": "Etätyöpöydän työkalupalkki",
-        "description": "Näytä työkalupalkki RDP-, VNC- ja Telnet-istunnoissa."
-      },
-      "displayGroup": "Näyttö",
-      "displayDefaultsTab": "Etätyöpöytä"
-    }
-  },
-  "palette": {
-    "connectRdp": "Yhdistä RDP:hen",
-    "connectVnc": "Yhdistä VNC:hen",
-    "connectTelnet": "Yhdistä Telnetillä"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Jaa etätyöpöytäistuntoja",
-      "description": "Salli istuntojen jakamisen ja yhteistyöhuoneiden näyttää tämän käyttäjän RDP-, VNC- ja Telnet-istunnot muille."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Etäpalvelin vaaditaan. Yhdistä etäpalvelin asetuksissa käyttääksesi tätä yhteystyyppiä."
-  },
-  "plugin": {
-    "name": "Etätyöpöytä"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/fr_FR.json b/plugins/remote-desktop/locales/translated/fr_FR.json
deleted file mode 100644
index b3cc4be50..000000000
--- a/plugins/remote-desktop/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "Connexion à la session {{type}}...",
-    "checkingGuacd": "Vérification du service de bureau à distance...",
-    "requestingToken": "Demande de jeton de connexion {{type}}...",
-    "openingSession": "Ouverture de la session {{type}}...",
-    "negotiating": "Negotiating {{type}} handshake...",
-    "sessionReady": "{{type}} session prête",
-    "connectionError": "Erreur de connexion",
-    "connectionFailed": "Échec de la connexion",
-    "failedToConnect": "Échec de l'obtention du jeton de connexion",
-    "hostNotFound": "Hôte introuvable",
-    "noHostSelected": "Aucun hôte sélectionné",
-    "reconnect": "Reconnecter",
-    "retry": "Réessayer",
-    "guacdUnavailable": "Le service de bureau à distance (guacd) n'est pas disponible. Veuillez vous assurer que guacd est en cours d'exécution, accessible et correctement configuré dans les paramètres administrateur.",
-    "credentialPromptTitle": "Saisir les informations d'identification RDP",
-    "credentialPromptDescription": "Cet hôte est configuré pour demander des identifiants lors de la connexion. Ces identifiants sont utilisés uniquement pour cette session et ne sont pas enregistrés.",
-    "connect": "Se connecter",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "Fichiers Drive",
-      "parent": "Répertoire parent",
-      "refresh": "Actualiser",
-      "empty": "Ce dossier est vide",
-      "listFailed": "Impossible de lire ce dossier",
-      "download": "Télécharger",
-      "downloadFailed": "Échec du téléchargement {{name}}",
-      "upload": "Téléverser des fichiers",
-      "uploading": "Téléversement de {{name}}...",
-      "uploaded": "Téléchargé {{name}}",
-      "uploadFailed": "Échec du chargement {{name}}",
-      "uploadDisabled": "Les chargements sont désactivés pour cette connexion.",
-      "driveUnavailable": "Activez la redirection du lecteur RDP avant de télécharger les fichiers",
-      "driveNotWritable": "guacd ne peut pas écrire dans le dossier du lecteur. Vérifiez la variable d'environnement GUACD_DRIVE_PATH (ou le chemin d'accès au lecteur de l'hôte) et ses autorisations.",
-      "dropToUpload": "Déposez les fichiers à télécharger"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (Verrouiller l'écran)",
-      "winKey": "Touche Windows",
-      "superL": "Super+L (Écran de verrouillage)",
-      "superKey": "Super Clé",
-      "super": "Super",
-      "cmdL": "Cmd+L (Écran de verrouillage)",
-      "cmdKey": "Touche de commande",
-      "cmd": "Commande",
-      "ctrl": "Ctrl",
-      "alt": "Alt",
-      "shift": "Maj",
-      "win": "Win",
-      "stickyActive": "{{key}} (verrouillé - cliquer pour libérer)",
-      "stickyInactive": "{{key}} (cliquer pour verrouiller)",
-      "esc": "Échap",
-      "tab": "Tab",
-      "home": "Début",
-      "end": "Fin",
-      "pageUp": "Page préc.",
-      "pageDown": "Page suiv.",
-      "arrowUp": "Flèche haut",
-      "arrowDown": "Flèche bas",
-      "arrowLeft": "Flèche gauche",
-      "arrowRight": "Flèche droite",
-      "fnToggle": "Touches de fonction",
-      "reconnect": "Reconnecter la session",
-      "collapse": "Réduire la barre d'outils",
-      "expand": "Développer la barre d'outils",
-      "dragHandle": "Glisser pour repositionner",
-      "hide": "Masquer cette option pour cette session. Pour la désactiver définitivement, ouvrez Paramètres de l'hôte → Général → Barre d'outils de connexion.",
-      "zoomIn": "Zoomer",
-      "zoomOut": "Dézoomer",
-      "resetZoom": "Réinitialiser le zoom",
-      "fitToScreen": "Ajuster à l'écran",
-      "switchToTrackpad": "Passez en mode pavé tactile (glissez pour déplacer le curseur, appuyez pour cliquer)",
-      "switchToTouch": "Passez en mode tactile (appuyez directement à l'endroit où vous souhaitez cliquer)."
-    },
-    "disabled": "Le Bureau à distance est désactivé. Un administrateur peut l'activer dans les paramètres."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Ouvert dans Bureau à distance Windows",
-    "nativeRdpFailed": "Impossible d'ouvrir le Bureau à distance Windows",
-    "openNativeRdp": "Ouvrir dans le Bureau à distance Windows",
-    "guac": {
-      "toolbar": "barre d'outils",
-      "connection": "Connexion",
-      "authentication": "Authentification",
-      "storedCredential": "Identifiant enregistré",
-      "authMethod": "Méthode d'authentification",
-      "authTypeDirect": "Direct",
-      "authTypeCredential": "Identifiant",
-      "authTypeNone": "Aucune",
-      "authTypeNoneDesc": "Aucune information d'identification n'est stockée. Un nom d'utilisateur et un mot de passe vous seront demandés à chaque connexion ; ils ne sont pas enregistrés.",
-      "selectCredential": "Sélectionner un identifiant...",
-      "connectionSettings": "Paramètres de connexion",
-      "displaySettings": "Paramètres d'affichage",
-      "audioSettings": "Paramètres audio",
-      "rdpPerformance": "Performances RDP",
-      "deviceRedirection": "Redirection de périphériques",
-      "session": "Session",
-      "gateway": "Passerelle",
-      "remoteApp": "RemoteApp",
-      "clipboard": "Presse-papiers",
-      "sessionRecording": "Enregistrement de session",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "Paramètres VNC",
-      "terminalSettings": "Paramètres du terminal",
-      "rdpPort": "Port RDP",
-      "username": "Nom d'utilisateur",
-      "password": "Mot de passe",
-      "passwordSaved": "Mot de passe enregistré, saisissez-le pour le modifier",
-      "domain": "Domaine",
-      "securityMode": "Mode de sécurité",
-      "width": "Largeur",
-      "height": "Hauteur",
-      "dpi": "DPI",
-      "clientName": "Nom du client",
-      "initialProgram": "Programme initial",
-      "serverLayout": "Disposition du clavier",
-      "timezone": "Fuseau horaire",
-      "loadBalanceInfo": "Infos d'équilibrage de charge / Cookie",
-      "loadBalanceInfoDesc": "Cookie du RD Connection Broker pour l'équilibrage de charge d'une ferme RDS (ex. tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "Proxy guacd",
-      "guacdHostname": "Hôte guacd",
-      "guacdHostnamePlaceholder": "Valeur globale par défaut",
-      "guacdPort": "Port guacd",
-      "guacdProxyDesc": "Remplacer l'instance guacd globale pour cette connexion. Laisser vide pour utiliser le guacd configuré globalement.",
-      "gatewayHostname": "Nom d'hôte de la passerelle",
-      "gatewayPort": "Port de la passerelle",
-      "gatewayUsername": "Nom d'utilisateur de la passerelle",
-      "gatewayPassword": "Mot de passe de la passerelle",
-      "gatewayDomain": "Domaine de la passerelle",
-      "remoteAppProgram": "Programme RemoteApp",
-      "workingDirectory": "Répertoire de travail",
-      "arguments": "Arguments",
-      "normalizeLineEndings": "Normaliser les fins de ligne",
-      "macAddress": "Adresse MAC",
-      "broadcastAddress": "Adresse de diffusion",
-      "udpPort": "Port UDP",
-      "waitTimeS": "Délai d'attente (s)",
-      "driveName": "Nom du lecteur",
-      "drivePath": "Chemin du lecteur",
-      "ignoreCertificate": "Ignorer le certificat",
-      "ignoreCertificateDesc": "Autoriser les connexions aux hôtes avec des certificats auto-signés",
-      "forceLossless": "Forcer sans perte",
-      "forceLosslessDesc": "Forcer l'encodage d'image sans perte (meilleure qualité, plus de bande passante)",
-      "disableAudio": "Désactiver l'audio",
-      "disableAudioDesc": "Couper tout le son de la session distante",
-      "enableAudioInput": "Activer l'entrée audio (microphone)",
-      "enableAudioInputDesc": "Transférer le microphone local vers la session distante",
-      "wallpaper": "Fond d'écran",
-      "wallpaperDesc": "Afficher le fond d'écran du bureau (désactiver cette option améliore les performances)",
-      "theming": "Thèmes",
-      "themingDesc": "Activer les thèmes et styles visuels",
-      "fontSmoothing": "Lissage des polices",
-      "fontSmoothingDesc": "Activer le rendu des polices ClearType",
-      "fullWindowDrag": "Afficher le contenu de la fenêtre lors du déplacement",
-      "fullWindowDragDesc": "Afficher le contenu de la fenêtre lors du déplacement",
-      "desktopComposition": "Composition du bureau",
-      "desktopCompositionDesc": "Activer les effets Aero Glass",
-      "menuAnimations": "Animations des menus",
-      "menuAnimationsDesc": "Activer les animations de fondu et de glissement des menus",
-      "disableBitmapCaching": "Désactiver le cache bitmap",
-      "disableBitmapCachingDesc": "Désactiver le cache bitmap (peut aider en cas de problèmes graphiques)",
-      "disableOffscreenCaching": "Désactiver le cache hors écran",
-      "disableOffscreenCachingDesc": "Désactiver le cache hors écran",
-      "disableGlyphCaching": "Désactiver le cache des glyphes",
-      "disableGlyphCachingDesc": "Désactiver le cache des glyphes",
-      "enableGfx": "Activer GFX",
-      "enableGfxDesc": "Utiliser le pipeline graphique RemoteFX",
-      "enablePrinting": "Activer l'impression",
-      "enablePrintingDesc": "Rediriger les imprimantes locales vers la session distante",
-      "enableDriveRedirection": "Activer la redirection de lecteur",
-      "enableDriveRedirectionDesc": "Monter un dossier local en tant que lecteur dans la session distante",
-      "createDrivePath": "Créer le chemin du lecteur",
-      "createDrivePathDesc": "Créer automatiquement le dossier s'il n'existe pas",
-      "disableDownload": "Désactiver le téléchargement",
-      "disableDownloadDesc": "Empêcher le téléchargement des fichiers depuis la session distante",
-      "disableUpload": "Désactiver le téléversement",
-      "disableUploadDesc": "Empêcher le téléversement de fichiers vers la session distante",
-      "enableTouch": "Activer le tactile",
-      "enableTouchDesc": "Activer la transmission des entrées tactiles",
-      "consoleSession": "Session console",
-      "consoleSessionDesc": "Se connecter à la console (session 0) au lieu d'une nouvelle session",
-      "sendWolPacket": "Envoyer un paquet WOL",
-      "sendWolPacketDesc": "Envoyer un paquet magique pour réveiller cet hôte avant la connexion",
-      "disableCopy": "Désactiver la copie",
-      "disableCopyDesc": "Empêcher la copie de texte depuis la session distante",
-      "disablePaste": "Désactiver le collage",
-      "disablePasteDesc": "Empêcher le collage de texte dans la session distante",
-      "createPathIfMissing": "Créer le chemin si absent",
-      "createPathIfMissingDesc": "Créer automatiquement le répertoire d'enregistrement",
-      "excludeOutput": "Exclure la sortie",
-      "excludeOutputDesc": "Ne pas enregistrer l'affichage écran (métadonnées uniquement)",
-      "excludeMouse": "Exclure la souris",
-      "excludeMouseDesc": "Ne pas enregistrer les mouvements de la souris",
-      "includeKeystrokes": "Inclure les frappes",
-      "includeKeystrokesDesc": "Enregistrer les frappes brutes en plus de l'affichage écran",
-      "vncPort": "Port VNC",
-      "vncPassword": "Mot de passe VNC",
-      "vncUsernameOptional": "Nom d'utilisateur (facultatif)",
-      "vncLeaveBlank": "Laisser vide si non requis",
-      "cursorMode": "Mode curseur",
-      "swapRedBlue": "Échanger rouge/bleu",
-      "swapRedBlueDesc": "Échanger les canaux de couleur rouge et bleu (corrige certains problèmes de couleur)",
-      "readOnly": "Lecture seule",
-      "readOnlyDesc": "Afficher l'écran distant sans envoyer d'entrée",
-      "telnetPort": "Port Telnet",
-      "terminalType": "Type de terminal",
-      "fontName": "Nom de la police",
-      "fontSize": "Taille de la police",
-      "colorScheme": "Schéma de couleurs",
-      "backspaceKey": "Touche Backspace",
-      "colorDepth": "Profondeur de couleur",
-      "resizeMethod": "Méthode de redimensionnement",
-      "driveNamePlaceholder": "Lecteur Termix",
-      "options": {
-        "any": "N'importe lequel",
-        "auto": "Auto",
-        "nlaExtended": "NLA étendu",
-        "color8": "8 bits",
-        "color16": "16 bits",
-        "color24": "24 bits",
-        "color32": "32 bits",
-        "displayUpdate": "Mise à jour de l'affichage",
-        "reconnect": "Reconnecter",
-        "preserve": "Préserver",
-        "unix": "Unix (LF)",
-        "windows": "Windows (CRLF)",
-        "local": "Locale",
-        "remote": "Distant",
-        "failsafe": "sécurité intégrée",
-        "blackOnWhite": "Noir sur blanc",
-        "whiteOnBlack": "Blanc sur noir",
-        "grayOnBlack": "Gris sur noir",
-        "greenOnBlack": "Vert sur noir"
-      }
-    },
-    "remoteDesktop": "Bureau à distance",
-    "tabRdp": "RDP",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "Réseau virtuel",
-    "unencryptedShell": "Shell non chiffré",
-    "remoteDesktopNotes": "Notes",
-    "userDefaultsNote": "Les paramètres que vous laissez inchangés suivent les valeurs par défaut de votre hôte.",
-    "connectionOriginNote": "Sur l'application de bureau, RDP, VNC et Telnet utilisent le serveur distant, sauf si l'hôte est configuré sur « Cet appareil », auquel cas un proxy guacd accessible par cette machine est nécessaire. Configurez-en un dans les paramètres du Bureau à distance ou pour chaque hôte dans les paramètres du proxy guacd.",
-    "docsLink": "Voir la documentation",
-    "connectionOriginGuacamoleNote": "RDP, VNC et Telnet utilisent le serveur distant, sauf si vous sélectionnez « Cet appareil », auquel cas un serveur guacd accessible par cette machine est nécessaire. Configurez-en un dans les paramètres d'URL guacd ou par hôte dans les paramètres de proxy guacd."
-  },
-  "onboarding": {
-    "feature_desktop": "Bureau à distance",
-    "feature_desktop_desc": "Ouvrez les sessions RDP, VNC et Telnet dans un onglet, de la même manière que SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Profondeur de couleur",
-        "description": "Utilisé pour les hôtes RDP qui conservent leurs paramètres par défaut."
-      },
-      "resizeMethod": {
-        "label": "Méthode de redimensionnement",
-        "description": "Comment l'écran distant s'adapte à la taille de la fenêtre."
-      },
-      "resizeDisplayUpdate": "Mise à jour de l'affichage",
-      "resizeReconnect": "Reconnecter",
-      "inherit": "Hériter",
-      "on": "Activée",
-      "off": "Désactivée",
-      "forceLossless": {
-        "label": "Forcer sans perte",
-        "description": "Forcer l'encodage d'image sans perte (meilleure qualité, plus de bande passante)"
-      },
-      "enableWallpaper": {
-        "label": "Fond d'écran",
-        "description": "Afficher le fond d'écran du bureau (désactiver cette option améliore les performances)"
-      },
-      "enableFontSmoothing": {
-        "label": "Lissage des polices",
-        "description": "Activer le rendu des polices ClearType"
-      },
-      "enableDesktopComposition": {
-        "label": "Composition du bureau",
-        "description": "Activer les effets Aero Glass"
-      },
-      "disableAudio": {
-        "label": "Désactiver l'audio",
-        "description": "Couper tout le son de la session distante"
-      },
-      "enablePrinting": {
-        "label": "Activer l'impression",
-        "description": "Rediriger les imprimantes locales vers la session distante"
-      },
-      "enableDrive": {
-        "label": "Activer la redirection de lecteur",
-        "description": "Monter un dossier local en tant que lecteur dans la session distante"
-      },
-      "disableCopy": {
-        "label": "Désactiver la copie",
-        "description": "Empêcher la copie de texte depuis la session distante"
-      },
-      "disablePaste": {
-        "label": "Désactiver le collage",
-        "description": "Empêcher le collage de texte dans la session distante"
-      },
-      "group": "Paramètres par défaut du Bureau à distance",
-      "colorDepth16": "16 bits",
-      "colorDepth24": "24 bits",
-      "colorDepth32": "32 bits"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Activer le bureau à distance",
-        "description": "Autoriser les connexions RDP, VNC et Telnet via guacd."
-      },
-      "guacdUrl": {
-        "label": "URL guacd",
-        "description": "L'adresse d'écoute de guacd est indiquée par l'hôte et le port. Les variables d'environnement GUACD_URL, GUACD_HOST et GUACD_PORT prévalent sur ce comportement.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "RDP"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "Port RDP"
-      },
-      "vncPort": {
-        "label": "port VNC"
-      },
-      "telnetPort": {
-        "label": "Port Telnet"
-      },
-      "rdpSecurity": {
-        "label": "Mode de sécurité RDP"
-      },
-      "rdpIgnoreCert": {
-        "label": "Ignorer les erreurs de certificat"
-      },
-      "guacamoleConfig": {
-        "label": "paramètres guacd"
-      },
-      "enableToolbar": {
-        "label": "barre d'outils de bureau à distance",
-        "description": "Afficher la barre d'outils dans les sessions RDP, VNC et Telnet."
-      },
-      "displayGroup": "Afficher",
-      "displayDefaultsTab": "Bureau à distance"
-    }
-  },
-  "palette": {
-    "connectRdp": "Se connecter via RDP",
-    "connectVnc": "Se connecter avec VNC",
-    "connectTelnet": "Se connecter avec Telnet"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Sessions de bureau à distance partagées",
-      "description": "Autoriser le partage de session et les salles de collaboration à afficher les sessions RDP, VNC et Telnet de cet utilisateur aux autres."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Serveur distant requis. Connectez un serveur distant dans les paramètres pour utiliser ce type de connexion."
-  },
-  "plugin": {
-    "name": "Bureau à distance"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/he_IL.json b/plugins/remote-desktop/locales/translated/he_IL.json
deleted file mode 100644
index 5ee0ef160..000000000
--- a/plugins/remote-desktop/locales/translated/he_IL.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "מתחבר לסשן {{type}}...",
-    "checkingGuacd": "בודק שירות שולחן עבודה מרוחק...",
-    "requestingToken": "מבקש אסימון חיבור {{type}}...",
-    "openingSession": "פותח סשן {{type}}...",
-    "negotiating": "מנהל משא ומתן על לחיצת יד {{type}}...",
-    "sessionReady": "{{type}} מוכנה לסשן",
-    "connectionError": "שגיאת חיבור",
-    "connectionFailed": "החיבור נכשל",
-    "failedToConnect": "נכשל בקבלת אסימון החיבור",
-    "hostNotFound": "המארח לא נמצא",
-    "noHostSelected": "לא נבחר מארח",
-    "reconnect": "התחבר מחדש",
-    "retry": "נסה שוב",
-    "guacdUnavailable": "שירות שולחן עבודה מרוחק (guacd) אינו זמין. אנא ודא ש-guacd פועל, נגיש ומוגדר כראוי בהגדרות המנהל.",
-    "credentialPromptTitle": "הזן אישורי RDP",
-    "credentialPromptDescription": "מארח זה מוגדר לבקש אישורים בעת התחברות. הם משמשים עבור הפעלה זו בלבד ואינם נשמרים.",
-    "connect": "לְחַבֵּר",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "קבצי דרייב",
-      "parent": "ספריית הורים",
-      "refresh": "לְרַעֲנֵן",
-      "empty": "תיקייה זו ריקה",
-      "listFailed": "נכשלה קריאת התיקייה הזו",
-      "download": "הורדה",
-      "downloadFailed": "נכשל בהורדת {{name}}",
-      "upload": "העלאת קבצים",
-      "uploading": "מעלה {{name}}...",
-      "uploaded": "הועלה {{name}}",
-      "uploadFailed": "נכשלה העלאת {{name}}",
-      "uploadDisabled": "העלאות מושבתות עבור חיבור זה",
-      "driveUnavailable": "הפעל ניתוב מחדש של כונן RDP לפני העלאת קבצים",
-      "driveNotWritable": "ל-guacd אין אפשרות לכתוב לתיקיית הכונן. בדוק את GUACD_DRIVE_PATH (או את נתיב הכונן של המארח) ואת ההרשאות שלו.",
-      "dropToUpload": "שחררו קבצים להעלאה"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (מסך נעילה)",
-      "winKey": "מפתח חלונות",
-      "superL": "סופר+L (מסך נעילה)",
-      "superKey": "סופר קי",
-      "super": "סוּפֶּר",
-      "cmdL": "Cmd+L (מסך נעילה)",
-      "cmdKey": "מקש פקודה",
-      "cmd": "פקודה",
-      "ctrl": "קונטרול",
-      "alt": "אלט",
-      "shift": "מִשׁמֶרֶת",
-      "win": "לְנַצֵחַ",
-      "stickyActive": "{{key}} (נעול - לחץ לשחרור)",
-      "stickyInactive": "{{key}} (לחץ כדי לנעול)",
-      "esc": "לִברוֹחַ",
-      "tab": "טאב",
-      "home": "בַּיִת",
-      "end": "סוֹף",
-      "pageUp": "עמוד למעלה",
-      "pageDown": "עמוד למטה",
-      "arrowUp": "חץ למעלה",
-      "arrowDown": "חץ למטה",
-      "arrowLeft": "חץ שמאלה",
-      "arrowRight": "חץ ימינה",
-      "fnToggle": "מקשי פונקציה",
-      "reconnect": "חיבור מחדש של הפעלת המושב",
-      "collapse": "כיווץ סרגל הכלים",
-      "expand": "הרחב את סרגל הכלים",
-      "dragHandle": "גרור כדי למקם מחדש",
-      "hide": "הסתר עבור הפעלה זו. כדי להשבית זאת לצמיתות, פתח את הגדרות המארח ← כללי ← סרגל הכלים לחיבור.",
-      "zoomIn": "לְהִתְמַקֵד",
-      "zoomOut": "התרחקות",
-      "resetZoom": "איפוס זום",
-      "fitToScreen": "התאמה למסך",
-      "switchToTrackpad": "מעבר למצב משטח עקיבה (גרור כדי להזיז את הסמן, הקש כדי ללחוץ)",
-      "switchToTouch": "מעבר למצב מגע (הקש ישירות במקום שברצונך ללחוץ)"
-    },
-    "disabled": "שולחן עבודה מרוחק כבוי. מנהל יכול להפעיל אותו בהגדרות."
-  },
-  "hosts": {
-    "nativeRdpOpened": "נפתח בשולחן עבודה מרוחק של Windows",
-    "nativeRdpFailed": "נכשלה פתיחת שולחן עבודה מרוחק של Windows",
-    "openNativeRdp": "פתח בשולחן עבודה מרוחק של Windows",
-    "guac": {
-      "toolbar": "סרגל כלים",
-      "connection": "קֶשֶׁר",
-      "authentication": "אימות",
-      "storedCredential": "אישורים מאוחסנים",
-      "authMethod": "שיטת אימות",
-      "authTypeDirect": "יָשִׁיר",
-      "authTypeCredential": "תְעוּדָה",
-      "authTypeNone": "אַף לֹא אֶחָד",
-      "authTypeNoneDesc": "לא נשמרים פרטי גישה. תתבקש להזין שם משתמש וסיסמה בכל פעם שתתחבר; הם לא נשמרים.",
-      "selectCredential": "בחר אישור...",
-      "connectionSettings": "הגדרות חיבור",
-      "displaySettings": "הגדרות תצוגה",
-      "audioSettings": "הגדרות שמע",
-      "rdpPerformance": "ביצועי RDP",
-      "deviceRedirection": "ניתוב מחדש של מכשירים",
-      "session": "מוֹשָׁב",
-      "gateway": "כְּנִיסָה",
-      "remoteApp": "אפליקציה מרחוק",
-      "clipboard": "לוח כתיבה",
-      "sessionRecording": "הקלטת סשן",
-      "wakeOnLan": "התעוררות ברשת LAN",
-      "vncSettings": "הגדרות VNC",
-      "terminalSettings": "הגדרות מסוף",
-      "rdpPort": "יציאת RDP",
-      "username": "שם משתמש",
-      "password": "סִיסמָה",
-      "passwordSaved": "הסיסמה נשמרה, הקלד כדי לשנות",
-      "domain": "תְחוּם",
-      "securityMode": "מצב אבטחה",
-      "width": "רוֹחַב",
-      "height": "גוֹבַה",
-      "dpi": "DPI",
-      "clientName": "שם הלקוח",
-      "initialProgram": "תוכנית ראשונית",
-      "serverLayout": "פריסת שרת",
-      "timezone": "אזור זמן",
-      "loadBalanceInfo": "מידע על מאזן עומס / קובץ Cookie",
-      "loadBalanceInfoDesc": "קובץ cookie של RD Connection Broker עבור איזון עומסים של חוות RDS (לדוגמה tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "פרוקסי של guacd",
-      "guacdHostname": "מארח guacd",
-      "guacdHostnamePlaceholder": "ברירת מחדל גלובלית",
-      "guacdPort": "נמל גואקד",
-      "guacdProxyDesc": "עקוף את מופע ה-guacd הגלובלי עבור חיבור זה. השאר ריק כדי להשתמש ב-guacd שתצורתו הגלובלית.",
-      "gatewayHostname": "שם מארח השער",
-      "gatewayPort": "שער היציאה",
-      "gatewayUsername": "שם משתמש של השער",
-      "gatewayPassword": "סיסמת השער",
-      "gatewayDomain": "דומיין שער",
-      "remoteAppProgram": "תוכנית RemoteApp",
-      "workingDirectory": "ספריית עבודה",
-      "arguments": "טיעונים",
-      "normalizeLineEndings": "נרמול סיומות שורות",
-      "macAddress": "כתובת MAC",
-      "broadcastAddress": "כתובת שידור",
-      "udpPort": "יציאת UDP",
-      "waitTimeS": "זמן המתנה (שניות)",
-      "driveName": "שם הכונן",
-      "drivePath": "נתיב הנסיעה",
-      "ignoreCertificate": "התעלם מהתעודה",
-      "ignoreCertificateDesc": "אפשר חיבורים למארחים עם אישורים חתומים עצמית",
-      "forceLossless": "כפיית אובדן נתונים",
-      "forceLosslessDesc": "כפיית קידוד תמונה ללא אובדן נתונים (איכות גבוהה יותר, רוחב פס גדול יותר)",
-      "disableAudio": "השבתת שמע",
-      "disableAudioDesc": "השתקת כל האודיו מההפעלה המרוחקת",
-      "enableAudioInput": "הפעלת קלט שמע (מיקרופון)",
-      "enableAudioInputDesc": "העברת המיקרופון המקומי לסשן המרוחק",
-      "wallpaper": "טָפֵּט",
-      "wallpaperDesc": "הצגת טפט שולחן עבודה (השבתה משפרת את הביצועים)",
-      "theming": "ת'מינג",
-      "themingDesc": "הפעלת ערכות נושא וסגנונות חזותיים",
-      "fontSmoothing": "החלקת גופנים",
-      "fontSmoothingDesc": "הפעלת עיבוד גופני ClearType",
-      "fullWindowDrag": "גרירת חלון מלאה",
-      "fullWindowDragDesc": "הצגת תוכן החלון בעת גרירה",
-      "desktopComposition": "קומפוזיציה לשולחן העבודה",
-      "desktopCompositionDesc": "הפעלת אפקטים של Aero Glass",
-      "menuAnimations": "אנימציות תפריטים",
-      "menuAnimationsDesc": "הפעלת אנימציות של דהייה והחלקה בתפריט",
-      "disableBitmapCaching": "השבתת אחסון במטמון של מפת סיביות",
-      "disableBitmapCachingDesc": "כבה את מטמון הסיביות (עשוי לעזור עם תקלות)",
-      "disableOffscreenCaching": "השבתת אחסון במטמון מחוץ למסך",
-      "disableOffscreenCachingDesc": "כבה את המטמון מחוץ למסך",
-      "disableGlyphCaching": "השבתת אחסון גליפים במטמון",
-      "disableGlyphCachingDesc": "כבה את מטמון הגליפים",
-      "enableGfx": "הפעלת GFX",
-      "enableGfxDesc": "השתמש בצינור הגרפיקה של RemoteFX",
-      "enablePrinting": "הפעל הדפסה",
-      "enablePrintingDesc": "ניתוב מחדש של מדפסות מקומיות להפעלה מרוחקת",
-      "enableDriveRedirection": "הפעל ניתוב מחדש של כונן",
-      "enableDriveRedirectionDesc": "מיפוי תיקייה מקומית ככונן בהפעלה מרוחקת",
-      "createDrivePath": "צור נתיב כונן",
-      "createDrivePathDesc": "צור את התיקייה באופן אוטומטי אם היא אינה קיימת",
-      "disableDownload": "השבתת הורדה",
-      "disableDownloadDesc": "מניעת הורדת קבצים מההפעלה המרוחקת",
-      "disableUpload": "השבתת העלאה",
-      "disableUploadDesc": "מניעת העלאת קבצים לסשן מרחוק",
-      "enableTouch": "הפעל מגע",
-      "enableTouchDesc": "הפעל העברת קלט מגע",
-      "consoleSession": "סשן קונסולה",
-      "consoleSessionDesc": "התחברות לקונסולה (סשן 0) במקום סשן חדש",
-      "sendWolPacket": "שלח חבילת WOL",
-      "sendWolPacketDesc": "שלח חבילת קסם כדי להעיר את המארח הזה לפני התחברות",
-      "disableCopy": "השבתת העתקה",
-      "disableCopyDesc": "מניעת העתקת טקסט מההפעלה המרוחקת",
-      "disablePaste": "השבתת הדבקה",
-      "disablePasteDesc": "מניעת הדבקת טקסט לתוך ההפעלה המרוחקת",
-      "createPathIfMissing": "צור נתיב אם חסר",
-      "createPathIfMissingDesc": "צור אוטומטית את ספריית ההקלטה",
-      "excludeOutput": "אי הכללת פלט",
-      "excludeOutputDesc": "אל תקליטו פלט מסך (מטא-נתונים בלבד)",
-      "excludeMouse": "אי הכללת עכבר",
-      "excludeMouseDesc": "אל תתעדו תנועות עכבר",
-      "includeKeystrokes": "כלול הקשות מקשים",
-      "includeKeystrokesDesc": "הקלטת הקשות גולמיות בנוסף לפלט המסך",
-      "vncPort": "יציאת VNC",
-      "vncPassword": "סיסמת VNC",
-      "vncUsernameOptional": "שם משתמש (אופציונלי)",
-      "vncLeaveBlank": "השאר ריק אם לא נדרש",
-      "cursorMode": "מצב סמן",
-      "swapRedBlue": "החלפת אדום/כחול",
-      "swapRedBlueDesc": "החלפת ערוצי הצבע האדום והכחול (תיקון של כמה בעיות צבע)",
-      "readOnly": "לקריאה בלבד",
-      "readOnlyDesc": "צפה במסך השלט הרחוק מבלי לשלוח קלט כלשהו",
-      "telnetPort": "יציאת טלנט",
-      "terminalType": "סוג הטרמינל",
-      "fontName": "שם הגופן",
-      "fontSize": "גודל גופן",
-      "colorScheme": "ערכת צבעים",
-      "backspaceKey": "מקש Backspace",
-      "colorDepth": "עומק צבע",
-      "resizeMethod": "שיטת שינוי גודל",
-      "driveNamePlaceholder": "כונן טרמיקס",
-      "options": {
-        "any": "כֹּל",
-        "auto": "אוטומטי",
-        "nlaExtended": "NLA מורחב",
-        "color8": "8 סיביות",
-        "color16": "16 סיביות",
-        "color24": "24 סיביות",
-        "color32": "32 סיביות",
-        "displayUpdate": "עדכון תצוגה",
-        "reconnect": "התחבר מחדש",
-        "preserve": "לְשַׁמֵר",
-        "unix": "יוניקס (LF)",
-        "windows": "חלונות (CRLF)",
-        "local": "מְקוֹמִי",
-        "remote": "מְרוּחָק",
-        "failsafe": "אַל כֶּשֶׁל",
-        "blackOnWhite": "שחור על לבן",
-        "whiteOnBlack": "לבן על שחור",
-        "grayOnBlack": "אפור על שחור",
-        "greenOnBlack": "ירוק על שחור"
-      }
-    },
-    "remoteDesktop": "שולחן עבודה מרוחק",
-    "tabRdp": "RDP",
-    "tabVnc": "VNC",
-    "tabTelnet": "טלנט",
-    "virtualNetwork": "רשת וירטואלית",
-    "unencryptedShell": "מעטפת לא מוצפנת",
-    "remoteDesktopNotes": "הערות",
-    "userDefaultsNote": "הגדרות שאתה משאיר ללא שינוי עוקבות אחר הגדרות ברירת המחדל של המארח.",
-    "connectionOriginNote": "באפליקציית שולחן העבודה, RDP, VNC ו-Telnet משתמשים בשרת המרוחק אלא אם כן המארח מוגדר ל-This device, אשר זקוק ל-guacd שאליו מכונה זו יכולה להגיע. הגדר אחד בהגדרות שולחן העבודה המרוחק, או לכל מארח תחת guacd Proxy.",
-    "docsLink": "הצג מסמכים",
-    "connectionOriginGuacamoleNote": "RDP, VNC ו-Telnet משתמשים בשרת המרוחק אלא אם כן תבחרו באפשרות \"התקן זה\", אשר דורש גישה ל-guacd. הגדר קוד כזה בהגדרת כתובת ה-URL של guacd, או לכל מחשב מארח תחת Proxy של guacd."
-  },
-  "onboarding": {
-    "feature_desktop": "שולחן עבודה מרוחק",
-    "feature_desktop_desc": "פתחו הפעלות RDP, VNC ו-Telnet בכרטיסייה, בדומה ל-SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "עומק צבע",
-        "description": "משמש עבור מארחי RDP שמשאירים אותו כברירת מחדל."
-      },
-      "resizeMethod": {
-        "label": "שיטת שינוי גודל",
-        "description": "כיצד מסך השלט עוקב אחר גודל החלון."
-      },
-      "resizeDisplayUpdate": "עדכון תצוגה",
-      "resizeReconnect": "התחבר מחדש",
-      "inherit": "לָרֶשֶׁת",
-      "on": "עַל",
-      "off": "כבוי",
-      "forceLossless": {
-        "label": "כפה ללא אובדן",
-        "description": "כפיית קידוד תמונה ללא אובדן נתונים (איכות גבוהה יותר, רוחב פס גדול יותר)"
-      },
-      "enableWallpaper": {
-        "label": "טָפֵּט",
-        "description": "הצגת טפט שולחן עבודה (השבתה משפרת את הביצועים)"
-      },
-      "enableFontSmoothing": {
-        "label": "החלקת גופנים",
-        "description": "הפעלת עיבוד גופני ClearType"
-      },
-      "enableDesktopComposition": {
-        "label": "קומפוזיציה לשולחן העבודה",
-        "description": "הפעלת אפקטים של Aero Glass"
-      },
-      "disableAudio": {
-        "label": "השבתת שמע",
-        "description": "השתקת כל האודיו מההפעלה המרוחקת"
-      },
-      "enablePrinting": {
-        "label": "הפעל הדפסה",
-        "description": "ניתוב מחדש של מדפסות מקומיות להפעלה מרוחקת"
-      },
-      "enableDrive": {
-        "label": "הפעל ניתוב מחדש של כונן",
-        "description": "מיפוי תיקייה מקומית ככונן בהפעלה מרוחקת"
-      },
-      "disableCopy": {
-        "label": "השבתת העתקה",
-        "description": "מניעת העתקת טקסט מההפעלה המרוחקת"
-      },
-      "disablePaste": {
-        "label": "השבתת הדבקה",
-        "description": "מניעת הדבקת טקסט לתוך ההפעלה המרוחקת"
-      },
-      "group": "ברירות מחדל של שולחן עבודה מרוחק",
-      "colorDepth16": "16 סיביות",
-      "colorDepth24": "24 סיביות",
-      "colorDepth32": "32 סיביות"
-    },
-    "admin": {
-      "enabled": {
-        "label": "הפעלת שולחן עבודה מרוחק",
-        "description": "אפשר חיבורי RDP, VNC ו-Telnet דרך guacd."
-      },
-      "guacdUrl": {
-        "label": "כתובת אתר של guacd",
-        "description": "כאשר guacd מאזין, כ-host:port. משתני הסביבה GUACD_URL, GUACD_HOST ו-GUACD_PORT עוקפים זאת.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "RDP"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "טלנט"
-      },
-      "rdpPort": {
-        "label": "יציאת RDP"
-      },
-      "vncPort": {
-        "label": "יציאת VNC"
-      },
-      "telnetPort": {
-        "label": "יציאת טלנט"
-      },
-      "rdpSecurity": {
-        "label": "מצב אבטחה של RDP"
-      },
-      "rdpIgnoreCert": {
-        "label": "התעלם משגיאות אישור"
-      },
-      "guacamoleConfig": {
-        "label": "הגדרות guacd"
-      },
-      "enableToolbar": {
-        "label": "סרגל הכלים של שולחן עבודה מרוחק",
-        "description": "הצג את סרגל הכלים בהפעלות RDP, VNC ו-Telnet."
-      },
-      "displayGroup": "לְהַצִיג",
-      "displayDefaultsTab": "שולחן עבודה מרוחק"
-    }
-  },
-  "palette": {
-    "connectRdp": "התחבר עם RDP",
-    "connectVnc": "התחבר עם VNC",
-    "connectTelnet": "התחבר עם טלנט"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "שיתוף הפעלות שולחן עבודה מרוחק",
-      "description": "אפשר לשיתוף סשנים וחדרי שיתוף פעולה להציג את סשנים של RDP, VNC ו-Telnet של משתמש זה לאחרים."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "נדרש שרת מרוחק. יש להתחבר לשרת מרוחק בהגדרות כדי להשתמש בסוג חיבור זה."
-  },
-  "plugin": {
-    "name": "שולחן עבודה מרוחק"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/hi_IN.json b/plugins/remote-desktop/locales/translated/hi_IN.json
deleted file mode 100644
index ecd938915..000000000
--- a/plugins/remote-desktop/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "{{type}} सत्र से कनेक्ट हो रहा है...",
-    "checkingGuacd": "रिमोट डेस्कटॉप सेवा की जाँच की जा रही है...",
-    "requestingToken": "{{type}} कनेक्शन टोकन का अनुरोध किया जा रहा है...",
-    "openingSession": "Opening {{type}} session...",
-    "negotiating": "बातचीत चल रही है {{type}} हाथ मिलाना...",
-    "sessionReady": "{{type}} सत्र तैयार है",
-    "connectionError": "कनेक्शन त्रुटि",
-    "connectionFailed": "कनेक्शन विफल",
-    "failedToConnect": "कनेक्शन टोकन प्राप्त करने में विफल",
-    "hostNotFound": "होस्ट नहीं मिला",
-    "noHostSelected": "कोई होस्ट चयनित नहीं है",
-    "reconnect": "पुनः कनेक्ट करें",
-    "retry": "पुनः प्रयास करें",
-    "guacdUnavailable": "रिमोट डेस्कटॉप सेवा (guacd) उपलब्ध नहीं है। कृपया सुनिश्चित करें कि guacd चल रहा है और पहुंच योग्य है और एडमिन सेटिंग्स में ठीक से कॉन्फ़िगर किया गया है।",
-    "credentialPromptTitle": "आरडीपी क्रेडेंशियल दर्ज करें",
-    "credentialPromptDescription": "इस होस्ट पर कनेक्ट होने पर क्रेडेंशियल मांगे जाएंगे। ये क्रेडेंशियल केवल इसी सेशन के लिए उपयोग किए जाएंगे और सेव नहीं किए जाएंगे।",
-    "connect": "कनेक्ट",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "ड्राइव फ़ाइलें",
-      "parent": "मूल निर्देशिका",
-      "refresh": "ताज़ा करें",
-      "empty": "यह फ़ोल्डर खाली है",
-      "listFailed": "इस फ़ोल्डर को पढ़ने में विफल रहा",
-      "download": "डाउनलोड",
-      "downloadFailed": "डाउनलोड करने में विफल {{name}}",
-      "upload": "फाइलें अपलोड करें",
-      "uploading": "{{name}} अपलोड हो रहा है...",
-      "uploaded": "अपलोड किया गया {{name}}",
-      "uploadFailed": "अपलोड करने में विफल {{name}}",
-      "uploadDisabled": "इस कनेक्शन के लिए अपलोड अक्षम हैं।",
-      "driveUnavailable": "फ़ाइलें अपलोड करने से पहले RDP ड्राइव रीडायरेक्शन को सक्षम करें",
-      "driveNotWritable": "GUACD ड्राइव फ़ोल्डर में लिख नहीं सकता। कृपया GUACD_DRIVE_PATH (या होस्ट का ड्राइव पाथ) और उसकी अनुमतियाँ जाँचें।",
-      "dropToUpload": "अपलोड करने के लिए फ़ाइलें ड्रॉप करें"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (लॉक स्क्रीन)",
-      "winKey": "विंडोज की",
-      "superL": "सुपर+एल (लॉक स्क्रीन)",
-      "superKey": "सुपर कुंजी",
-      "super": "बहुत अच्छा",
-      "cmdL": "Cmd+L (लॉक स्क्रीन)",
-      "cmdKey": "कमांड कुंजी",
-      "cmd": "अध्यक्ष एवं प्रबंध निदेशक",
-      "ctrl": "Ctrl",
-      "alt": "Alt",
-      "shift": "Shift",
-      "win": "Win",
-      "stickyActive": "{{key}} (लैच्ड - रिलीज़ करने के लिए क्लिक करें)",
-      "stickyInactive": "{{key}} (लैच करने के लिए क्लिक करें)",
-      "esc": "Escape",
-      "tab": "Tab",
-      "home": "Home",
-      "end": "एंड",
-      "pageUp": "Page Up",
-      "pageDown": "Page Down",
-      "arrowUp": "ऊपर तीर",
-      "arrowDown": "नीचे तीर",
-      "arrowLeft": "बाएँ तीर",
-      "arrowRight": "दाएँ तीर",
-      "fnToggle": "फ़ंक्शन कुंजियाँ",
-      "reconnect": "सत्र पुनः कनेक्ट करें",
-      "collapse": "टूलबार समेटें",
-      "expand": "टूलबार विस्तारित करें",
-      "dragHandle": "स्थान बदलने के लिए खींचें",
-      "hide": "इस सत्र के लिए इसे छुपाएं। इसे स्थायी रूप से अक्षम करने के लिए, होस्ट सेटिंग्स → सामान्य → कनेक्शन टूलबार खोलें।",
-      "zoomIn": "ज़ूम इन",
-      "zoomOut": "ज़ूम आउट",
-      "resetZoom": "ज़ूम रीसेट करें",
-      "fitToScreen": "स्क्रीनिंग के लिए उपयुक्त",
-      "switchToTrackpad": "ट्रैकपैड मोड पर स्विच करें (कर्सर को स्थानांतरित करने के लिए ड्रैग करें, क्लिक करने के लिए टैप करें)",
-      "switchToTouch": "टच मोड पर स्विच करें (जहां क्लिक करना चाहते हैं वहां सीधे टैप करें)"
-    },
-    "disabled": "रिमोट डेस्कटॉप बंद है। व्यवस्थापक सेटिंग्स में जाकर इसे चालू कर सकते हैं।"
-  },
-  "hosts": {
-    "nativeRdpOpened": "विंडोज़ रिमोट डेस्कटॉप में खोला गया",
-    "nativeRdpFailed": "विंडोज़ रिमोट डेस्कटॉप खोलने में विफल",
-    "openNativeRdp": "विंडोज़ रिमोट डेस्कटॉप में खोलें",
-    "guac": {
-      "toolbar": "उपकरण पट्टी",
-      "connection": "कनेक्शन",
-      "authentication": "प्रमाणीकरण",
-      "storedCredential": "संग्रहीत क्रेडेंशियल",
-      "authMethod": "प्रमाणीकरण विधि",
-      "authTypeDirect": "सीधा",
-      "authTypeCredential": "क्रेडेंशियल",
-      "authTypeNone": "कोई नहीं",
-      "authTypeNoneDesc": "कोई भी क्रेडेंशियल स्टोर नहीं किए जाते हैं। हर बार कनेक्ट करते समय आपसे उपयोगकर्ता नाम और पासवर्ड मांगा जाएगा; वे सहेजे नहीं जाते हैं।",
-      "selectCredential": "एक क्रेडेंशियल चुनें...",
-      "connectionSettings": "कनेक्शन सेटिंग्स",
-      "displaySettings": "प्रदर्शन सेटिंग्स",
-      "audioSettings": "ऑडियो सेटिंग्स",
-      "rdpPerformance": "RDP प्रदर्शन",
-      "deviceRedirection": "डिवाइस पुनर्निर्देशन",
-      "session": "सत्र",
-      "gateway": "गेटवे",
-      "remoteApp": "RemoteApp",
-      "clipboard": "क्लिपबोर्ड",
-      "sessionRecording": "सत्र रिकॉर्डिंग",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "VNC सेटिंग्स",
-      "terminalSettings": "टर्मिनल सेटिंग्स",
-      "rdpPort": "RDP पोर्ट",
-      "username": "उपयोगकर्ता नाम",
-      "password": "पासवर्ड",
-      "passwordSaved": "पासवर्ड सहेज लिया गया है, बदलने के लिए टाइप करें",
-      "domain": "डोमेन",
-      "securityMode": "सुरक्षा मोड",
-      "width": "चौड़ाई",
-      "height": "ऊंचाई",
-      "dpi": "DPI",
-      "clientName": "क्लाइंट नाम",
-      "initialProgram": "आरंभिक प्रोग्राम",
-      "serverLayout": "सर्वर लेआउट",
-      "timezone": "समय क्षेत्र",
-      "loadBalanceInfo": "लोड बैलेंस जानकारी / कुकी",
-      "loadBalanceInfoDesc": "RDS फ़ार्म लोड संतुलन के लिए RD कनेक्शन ब्रोकर कुकी (उदा. tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "guacd प्रॉक्सी",
-      "guacdHostname": "guacd होस्ट",
-      "guacdHostnamePlaceholder": "वैश्विक डिफ़ॉल्ट",
-      "guacdPort": "guacd पोर्ट",
-      "guacdProxyDesc": "इस कनेक्शन के लिए वैश्विक guacd इंस्टेंस को अधिलेखित करें। वैश्विक रूप से कॉन्फ़िगर किए गए guacd का उपयोग करने के लिए खाली छोड़ें।",
-      "gatewayHostname": "गेटवे होस्टनाम",
-      "gatewayPort": "गेटवे पोर्ट",
-      "gatewayUsername": "गेटवे उपयोगकर्ता नाम",
-      "gatewayPassword": "गेटवे पासवर्ड",
-      "gatewayDomain": "गेटवे डोमेन",
-      "remoteAppProgram": "RemoteApp प्रोग्राम",
-      "workingDirectory": "कार्यशील निर्देशिका",
-      "arguments": "तर्क",
-      "normalizeLineEndings": "लाइन अंत सामान्यीकृत करें",
-      "macAddress": "MAC पता",
-      "broadcastAddress": "प्रसारण पता",
-      "udpPort": "UDP पोर्ट",
-      "waitTimeS": "प्रतीक्षा समय (s)",
-      "driveName": "ड्राइव का नाम",
-      "drivePath": "ड्राइव पथ",
-      "ignoreCertificate": "प्रमाणपत्र अनदेखा करें",
-      "ignoreCertificateDesc": "स्व-हस्ताक्षरित प्रमाणपत्र वाले होस्ट से कनेक्शन की अनुमति दें",
-      "forceLossless": "दोषरहित बाध्य करें",
-      "forceLosslessDesc": "दोषरहित छवि एन्कोडिंग बाध्य करें (उच्च गुणवत्ता, अधिक बैंडविड्थ)",
-      "disableAudio": "ऑडियो अक्षम करें",
-      "disableAudioDesc": "दूरस्थ सत्र से सभी ऑडियो म्यूट करें",
-      "enableAudioInput": "ऑडियो इनपुट सक्षम करें (माइक्रोफ़ोन)",
-      "enableAudioInputDesc": "स्थानीय माइक्रोफ़ोन को दूरस्थ सत्र में अग्रेषित करें",
-      "wallpaper": "वॉलपेपर",
-      "wallpaperDesc": "डेस्कटॉप वॉलपेपर दिखाएं (अक्षम करने से प्रदर्शन बेहतर होता है)",
-      "theming": "थीमिंग",
-      "themingDesc": "दृश्य थीम और शैलियाँ सक्षम करें",
-      "fontSmoothing": "फ़ॉन्ट स्मूथिंग",
-      "fontSmoothingDesc": "ClearType फ़ॉन्ट रेंडरिंग सक्षम करें",
-      "fullWindowDrag": "पूर्ण विंडो ड्रैग",
-      "fullWindowDragDesc": "ड्रैग करते समय विंडो सामग्री दिखाएं",
-      "desktopComposition": "डेस्कटॉप कंपोज़िशन",
-      "desktopCompositionDesc": "Aero ग्लास प्रभाव सक्षम करें",
-      "menuAnimations": "मेन्यू एनिमेशन",
-      "menuAnimationsDesc": "मेन्यू फेड और स्लाइड एनिमेशन सक्षम करें",
-      "disableBitmapCaching": "बिटमैप कैशिंग अक्षम करें",
-      "disableBitmapCachingDesc": "बिटमैप कैश बंद करें (गड़बड़ियों में मदद कर सकता है)",
-      "disableOffscreenCaching": "ऑफस्क्रीन कैशिंग अक्षम करें",
-      "disableOffscreenCachingDesc": "ऑफस्क्रीन कैश बंद करें",
-      "disableGlyphCaching": "ग्लिफ़ कैशिंग अक्षम करें",
-      "disableGlyphCachingDesc": "ग्लिफ़ कैश बंद करें",
-      "enableGfx": "GFX सक्षम करें",
-      "enableGfxDesc": "RemoteFX ग्राफ़िक्स पाइपलाइन का उपयोग करें",
-      "enablePrinting": "प्रिंटिंग सक्षम करें",
-      "enablePrintingDesc": "स्थानीय प्रिंटर को दूरस्थ सत्र में पुनर्निर्देशित करें",
-      "enableDriveRedirection": "ड्राइव पुनर्निर्देशन सक्षम करें",
-      "enableDriveRedirectionDesc": "स्थानीय फ़ोल्डर को दूरस्थ सत्र में ड्राइव के रूप में मैप करें",
-      "createDrivePath": "ड्राइव पथ बनाएँ",
-      "createDrivePathDesc": "यदि फ़ोल्डर मौजूद न हो तो स्वचालित रूप से बनाएँ",
-      "disableDownload": "डाउनलोड अक्षम करें",
-      "disableDownloadDesc": "रिमोट सत्र से फ़ाइलें डाउनलोड करना रोकें",
-      "disableUpload": "अपलोड अक्षम करें",
-      "disableUploadDesc": "रिमोट सत्र पर फ़ाइलें अपलोड करना रोकें",
-      "enableTouch": "टच सक्षम करें",
-      "enableTouchDesc": "टच इनपुट अग्रेषण सक्षम करें",
-      "consoleSession": "कंसोल सत्र",
-      "consoleSessionDesc": "नए सत्र के बजाय कंसोल (सत्र 0) से कनेक्ट करें",
-      "sendWolPacket": "WOL पैकेट भेजें",
-      "sendWolPacketDesc": "कनेक्ट करने से पहले इस होस्ट को जगाने के लिए मैजिक पैकेट भेजें",
-      "disableCopy": "कॉपी अक्षम करें",
-      "disableCopyDesc": "रिमोट सत्र से टेक्स्ट कॉपी करना रोकें",
-      "disablePaste": "पेस्ट अक्षम करें",
-      "disablePasteDesc": "रिमोट सत्र में टेक्स्ट पेस्ट करना रोकें",
-      "createPathIfMissing": "यदि पथ मौजूद न हो तो बनाएँ",
-      "createPathIfMissingDesc": "रिकॉर्डिंग निर्देशिका स्वचालित रूप से बनाएँ",
-      "excludeOutput": "आउटपुट बहिष्कृत करें",
-      "excludeOutputDesc": "स्क्रीन आउटपुट रिकॉर्ड न करें (केवल मेटाडेटा)",
-      "excludeMouse": "माउस बहिष्कृत करें",
-      "excludeMouseDesc": "माउस गतिविधियाँ रिकॉर्ड न करें",
-      "includeKeystrokes": "कीस्ट्रोक्स शामिल करें",
-      "includeKeystrokesDesc": "स्क्रीन आउटपुट के अतिरिक्त कच्चे कीस्ट्रोक्स रिकॉर्ड करें",
-      "vncPort": "VNC पोर्ट",
-      "vncPassword": "VNC पासवर्ड",
-      "vncUsernameOptional": "उपयोगकर्ता नाम (वैकल्पिक)",
-      "vncLeaveBlank": "यदि आवश्यक न हो तो खाली छोड़ें",
-      "cursorMode": "कर्सर मोड",
-      "swapRedBlue": "लाल/नीला अदल-बदल करें",
-      "swapRedBlueDesc": "लाल और नीले रंग चैनलों को अदल-बदल करें (कुछ रंग समस्याओं को ठीक करता है)",
-      "readOnly": "केवल-पठनीय",
-      "readOnlyDesc": "बिना कोई इनपुट भेजे रिमोट स्क्रीन देखें",
-      "telnetPort": "टेलनेट पोर्ट",
-      "terminalType": "टर्मिनल प्रकार",
-      "fontName": "फ़ॉन्ट नाम",
-      "fontSize": "फ़ॉन्ट आकार",
-      "colorScheme": "रंग योजना",
-      "backspaceKey": "बैकस्पेस कुंजी",
-      "colorDepth": "रंग गहराई",
-      "resizeMethod": "रीसाइज़ विधि",
-      "driveNamePlaceholder": "टर्मिक्स ड्राइव",
-      "options": {
-        "any": "कोई",
-        "auto": "स्वचालित",
-        "nlaExtended": "एनएलए विस्तारित",
-        "color8": "8 बिट",
-        "color16": "16-बिट",
-        "color24": "24-बिट",
-        "color32": "32-बिट",
-        "displayUpdate": "डिस्प्ले अपडेट",
-        "reconnect": "पुनः कनेक्ट करें",
-        "preserve": "संरक्षित करना",
-        "unix": "यूनिक्स (एलएफ)",
-        "windows": "विंडोज़ (सीआरएलएफ)",
-        "local": "स्थानीय",
-        "remote": "रिमोट",
-        "failsafe": "सुरक्षा कम होना",
-        "blackOnWhite": "सफेद पर काला",
-        "whiteOnBlack": "काले पर सफेद",
-        "grayOnBlack": "काले पर धूसर",
-        "greenOnBlack": "काले पर हरा"
-      }
-    },
-    "remoteDesktop": "दूरस्थ डेस्कटॉप",
-    "tabRdp": "RDP",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "वर्चुअल नेटवर्क",
-    "unencryptedShell": "अनएन्क्रिप्टेड शेल",
-    "remoteDesktopNotes": "नोट्स",
-    "userDefaultsNote": "जिन सेटिंग्स को आप अपरिवर्तित छोड़ते हैं, वे आपके होस्ट की डिफ़ॉल्ट सेटिंग्स का पालन करती हैं।",
-    "connectionOriginNote": "डेस्कटॉप ऐप पर, RDP, VNC और Telnet रिमोट सर्वर का उपयोग करते हैं, जब तक कि होस्ट को \"यह डिवाइस\" पर सेट न किया गया हो। इसके लिए एक GUACD प्रॉक्सी की आवश्यकता होती है जिस तक यह मशीन पहुंच सके। इसे रिमोट डेस्कटॉप सेटिंग्स में या GUACD प्रॉक्सी के अंतर्गत प्रति होस्ट सेट करें।",
-    "docsLink": "दस्तावेज़ देखें",
-    "connectionOriginGuacamoleNote": "RDP, VNC और Telnet रिमोट सर्वर का उपयोग करते हैं, जब तक कि आप \"यह डिवाइस\" का चयन न करें, जिसके लिए एक guacd की आवश्यकता होती है जिस तक यह मशीन पहुंच सके। इसे guacd URL सेटिंग में या guacd प्रॉक्सी के अंतर्गत प्रति होस्ट सेट करें।"
-  },
-  "onboarding": {
-    "feature_desktop": "दूरवर्ती डेस्कटॉप",
-    "feature_desktop_desc": "RDP, VNC और Telnet सेशन को SSH की तरह ही एक टैब में खोलें।"
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "रंग गहराई",
-        "description": "इसका उपयोग उन आरडीपी होस्ट के लिए किया जाता है जो इसे डिफ़ॉल्ट सेटिंग पर छोड़ देते हैं।"
-      },
-      "resizeMethod": {
-        "label": "रीसाइज़ विधि",
-        "description": "रिमोट स्क्रीन विंडो के आकार का अनुसरण कैसे करती है।"
-      },
-      "resizeDisplayUpdate": "डिस्प्ले अपडेट",
-      "resizeReconnect": "पुनः कनेक्ट करें",
-      "inherit": "इनहेरिट",
-      "on": "चालू",
-      "off": "बंद",
-      "forceLossless": {
-        "label": "दोषरहित बाध्य करें",
-        "description": "दोषरहित छवि एन्कोडिंग बाध्य करें (उच्च गुणवत्ता, अधिक बैंडविड्थ)"
-      },
-      "enableWallpaper": {
-        "label": "वॉलपेपर",
-        "description": "डेस्कटॉप वॉलपेपर दिखाएं (अक्षम करने से प्रदर्शन बेहतर होता है)"
-      },
-      "enableFontSmoothing": {
-        "label": "फ़ॉन्ट स्मूथिंग",
-        "description": "ClearType फ़ॉन्ट रेंडरिंग सक्षम करें"
-      },
-      "enableDesktopComposition": {
-        "label": "डेस्कटॉप कंपोज़िशन",
-        "description": "Aero ग्लास प्रभाव सक्षम करें"
-      },
-      "disableAudio": {
-        "label": "ऑडियो अक्षम करें",
-        "description": "दूरस्थ सत्र से सभी ऑडियो म्यूट करें"
-      },
-      "enablePrinting": {
-        "label": "प्रिंटिंग सक्षम करें",
-        "description": "स्थानीय प्रिंटर को दूरस्थ सत्र में पुनर्निर्देशित करें"
-      },
-      "enableDrive": {
-        "label": "ड्राइव पुनर्निर्देशन सक्षम करें",
-        "description": "स्थानीय फ़ोल्डर को दूरस्थ सत्र में ड्राइव के रूप में मैप करें"
-      },
-      "disableCopy": {
-        "label": "कॉपी अक्षम करें",
-        "description": "रिमोट सत्र से टेक्स्ट कॉपी करना रोकें"
-      },
-      "disablePaste": {
-        "label": "पेस्ट अक्षम करें",
-        "description": "रिमोट सत्र में टेक्स्ट पेस्ट करना रोकें"
-      },
-      "group": "रिमोट डेस्कटॉप डिफ़ॉल्ट",
-      "colorDepth16": "16-बिट",
-      "colorDepth24": "24-बिट",
-      "colorDepth32": "32-बिट"
-    },
-    "admin": {
-      "enabled": {
-        "label": "रिमोट डेस्कटॉप सक्षम करें",
-        "description": "guacd के माध्यम से RDP, VNC और Telnet कनेक्शन की अनुमति दें।"
-      },
-      "guacdUrl": {
-        "label": "guacd URL",
-        "description": "जहां guacd होस्ट:पोर्ट के रूप में सुनता है। GUACD_URL, GUACD_HOST और GUACD_PORT पर्यावरण चर इसे ओवरराइड करते हैं।",
-        "placeholder": "गुआकडी:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "RDP"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "आरडीपी पोर्ट"
-      },
-      "vncPort": {
-        "label": "वीएनसी पोर्ट"
-      },
-      "telnetPort": {
-        "label": "टेलनेट पोर्ट"
-      },
-      "rdpSecurity": {
-        "label": "आरडीपी सुरक्षा मोड"
-      },
-      "rdpIgnoreCert": {
-        "label": "प्रमाणपत्र त्रुटियों को अनदेखा करें"
-      },
-      "guacamoleConfig": {
-        "label": "गुआकडी सेटिंग्स"
-      },
-      "enableToolbar": {
-        "label": "रिमोट डेस्कटॉप टूलबार",
-        "description": "RDP, VNC और Telnet सत्रों में टूलबार दिखाएँ।"
-      },
-      "displayGroup": "प्रदर्शन",
-      "displayDefaultsTab": "दूरस्थ डेस्कटॉप"
-    }
-  },
-  "palette": {
-    "connectRdp": "आरडीपी से जुड़ें",
-    "connectVnc": "VNC से कनेक्ट करें",
-    "connectTelnet": "टेलनेट के माध्यम से कनेक्ट करें"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "रिमोट डेस्कटॉप सेशन साझा करें",
-      "description": "सेशन शेयरिंग और कोलैब रूम को इस उपयोगकर्ता के RDP, VNC और Telnet सेशन दूसरों को दिखाने की अनुमति दें।"
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "रिमोट सर्वर आवश्यक है। इस कनेक्शन प्रकार का उपयोग करने के लिए सेटिंग्स में जाकर रिमोट सर्वर कनेक्ट करें।"
-  },
-  "plugin": {
-    "name": "दूरस्थ डेस्कटॉप"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/hu_HU.json b/plugins/remote-desktop/locales/translated/hu_HU.json
deleted file mode 100644
index a3b1dcccd..000000000
--- a/plugins/remote-desktop/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "Kapcsolódás ehhez: {{type}} munkamenet...",
-    "checkingGuacd": "Távoli asztal szolgáltatás ellenőrzése...",
-    "requestingToken": "{{type}} kapcsolati token kérése...",
-    "openingSession": "{{type}} munkamenet megnyitása...",
-    "negotiating": "Kézfogásról tárgyalunk... {{type}}",
-    "sessionReady": "{{type}} munkamenet kész",
-    "connectionError": "Csatlakozási hiba",
-    "connectionFailed": "Kapcsolódás sikertelen",
-    "failedToConnect": "Nem sikerült lekérni a kapcsolati tokent",
-    "hostNotFound": "Nem található gazdagép",
-    "noHostSelected": "Nincs kiválasztva gazdagép",
-    "reconnect": "Újracsatlakozás",
-    "retry": "Újrapróbálkozás",
-    "guacdUnavailable": "A távoli asztali szolgáltatás (guacd) nem érhető el. Kérjük, győződjön meg róla, hogy a guacd fut, elérhető és megfelelően van konfigurálva az adminisztrátori beállításokban.",
-    "credentialPromptTitle": "RDP hitelesítő adatok megadása",
-    "credentialPromptDescription": "Ez a gazdagép úgy van beállítva, hogy csatlakozáskor hitelesítő adatokat kérjen. Ezeket csak ehhez a munkamenethez használjuk, és nem kerülnek mentésre.",
-    "connect": "Csatlakozás",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "Drive-fájlok",
-      "parent": "Szülőkönyvtár",
-      "refresh": "Frissítés",
-      "empty": "Ez a mappa üres",
-      "listFailed": "Nem sikerült beolvasni ezt a mappát",
-      "download": "Letöltés",
-      "downloadFailed": "Nem sikerült letölteni {{name}}",
-      "upload": "Fájlok feltöltése",
-      "uploading": "Feltöltés {{name}}...",
-      "uploaded": "Feltöltve {{name}}",
-      "uploadFailed": "Nem sikerült feltölteni {{name}}",
-      "uploadDisabled": "A feltöltések le vannak tiltva ennél a kapcsolatnál.",
-      "driveUnavailable": "RDP meghajtó átirányításának engedélyezése fájlok feltöltése előtt",
-      "driveNotWritable": "A guacd nem tud írni a meghajtó mappájába. Ellenőrizd a GUACD_DRIVE_PATH-ot (vagy a gazdagép meghajtó elérési útját) és a hozzá tartozó jogosultságokat.",
-      "dropToUpload": "Fájlok húzása a feltöltéshez"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (Képernyőzár)",
-      "winKey": "Windows billentyű",
-      "superL": "Super+L (Képernyőzár)",
-      "superKey": "Szuperkulcs",
-      "super": "Szuper",
-      "cmdL": "Cmd+L (Képernyő lezárása)",
-      "cmdKey": "Parancsbillentyű",
-      "cmd": "Parancs",
-      "ctrl": "Ctrl",
-      "alt": "Alt",
-      "shift": "Váltás",
-      "win": "Győzelem",
-      "stickyActive": "{{key}} (reteszelve - kattintson a kioldáshoz)",
-      "stickyInactive": "{{key}} (kattintson a rögzítéshez)",
-      "esc": "Menekülés",
-      "tab": "Fül",
-      "home": "Otthon",
-      "end": "Vége",
-      "pageUp": "Oldal fel",
-      "pageDown": "Oldal le",
-      "arrowUp": "Felfelé nyíl",
-      "arrowDown": "Lefelé mutató nyíl",
-      "arrowLeft": "Balra nyíl",
-      "arrowRight": "Jobbra nyíl",
-      "fnToggle": "Funkcióbillentyűk",
-      "reconnect": "Munkamenet újracsatlakoztatása",
-      "collapse": "Eszköztár összecsukása",
-      "expand": "Eszköztár kibontása",
-      "dragHandle": "Húzással áthelyezhető",
-      "hide": "Elrejtés ehhez a munkamenethez. A végleges letiltáshoz nyissa meg a Gazdagép beállításai → Általános → Kapcsolat eszköztár menüpontot.",
-      "zoomIn": "Nagyítás",
-      "zoomOut": "Kicsinyítés",
-      "resetZoom": "Nagyítás visszaállítása",
-      "fitToScreen": "Képernyőhöz igazítás",
-      "switchToTrackpad": "Váltás trackpad módra (húzással mozgathatja a kurzort, koppintással kattinthat)",
-      "switchToTouch": "Váltás érintőképernyős módra (koppintson közvetlenül oda, ahová kattintani szeretne)"
-    },
-    "disabled": "A Távoli asztal ki van kapcsolva. Egy rendszergazda bekapcsolhatja a Beállításokban."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Megnyitva a Windows Távoli asztal alkalmazásban",
-    "nativeRdpFailed": "Nem sikerült megnyitni a Windows távoli asztalt",
-    "openNativeRdp": "Megnyitás a Windows távoli asztalon",
-    "guac": {
-      "toolbar": "Eszköztár",
-      "connection": "Kapcsolat",
-      "authentication": "Hitelesítés",
-      "storedCredential": "Tárolt hitelesítő adatok",
-      "authMethod": "Aut. módszer",
-      "authTypeDirect": "Közvetlen",
-      "authTypeCredential": "Hitelesítő adat",
-      "authTypeNone": "Egyik sem",
-      "authTypeNoneDesc": "Nincsenek tárolt hitelesítő adatok. Minden csatlakozáskor meg kell adnia a felhasználónevet és a jelszót; ezek nem kerülnek mentésre.",
-      "selectCredential": "Válasszon hitelesítő adatot...",
-      "connectionSettings": "Kapcsolati beállítások",
-      "displaySettings": "Kijelzőbeállítások",
-      "audioSettings": "Hangbeállítások",
-      "rdpPerformance": "RDP-teljesítmény",
-      "deviceRedirection": "Eszközátirányítás",
-      "session": "Ülés",
-      "gateway": "Átjáró",
-      "remoteApp": "RemoteApp",
-      "clipboard": "Vágólap",
-      "sessionRecording": "Munkamenet-felvétel",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "VNC-beállítások",
-      "terminalSettings": "Terminálbeállítások",
-      "rdpPort": "RDP-port",
-      "username": "Felhasználónév",
-      "password": "Jelszó",
-      "passwordSaved": "Jelszó mentve, gépelje be a módosításhoz",
-      "domain": "Domain",
-      "securityMode": "Biztonsági mód",
-      "width": "Szélesség",
-      "height": "Magasság",
-      "dpi": "DPI",
-      "clientName": "Ügyfél neve",
-      "initialProgram": "Kezdeti program",
-      "serverLayout": "Szerver elrendezése",
-      "timezone": "Időzóna",
-      "loadBalanceInfo": "Terheléselosztási információk / Süti",
-      "loadBalanceInfoDesc": "RD Connection Broker süti az RDS farm terheléselosztásához (pl. tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "guacd proxy",
-      "guacdHostname": "guacd Host",
-      "guacdHostnamePlaceholder": "Globális alapértelmezett",
-      "guacdPort": "guacd kikötő",
-      "guacdProxyDesc": "Írja felül a globális guacd példányt ehhez a kapcsolathoz. Hagyja üresen a globálisan konfigurált guacd használatához.",
-      "gatewayHostname": "Átjáró állomásneve",
-      "gatewayPort": "Átjáró kikötő",
-      "gatewayUsername": "Átjáró felhasználóneve",
-      "gatewayPassword": "Átjáró jelszava",
-      "gatewayDomain": "Átjáró domain",
-      "remoteAppProgram": "RemoteApp program",
-      "workingDirectory": "Munkakönyvtár",
-      "arguments": "érvek",
-      "normalizeLineEndings": "Sorvégek normalizálása",
-      "macAddress": "MAC-cím",
-      "broadcastAddress": "Sugárzási cím",
-      "udpPort": "UDP port",
-      "waitTimeS": "Várakozási idő (s)",
-      "driveName": "Meghajtó neve",
-      "drivePath": "Útvonal",
-      "ignoreCertificate": "Tanúsítvány figyelmen kívül hagyása",
-      "ignoreCertificateDesc": "Kapcsolódás engedélyezése önaláírt tanúsítványokkal rendelkező gazdagépekhez",
-      "forceLossless": "Veszteségmentes erő",
-      "forceLosslessDesc": "Veszteségmentes képkódolás kényszerítése (jobb minőség, nagyobb sávszélesség)",
-      "disableAudio": "Hang letiltása",
-      "disableAudioDesc": "Némítsa el az összes hangot a távoli munkamenetből",
-      "enableAudioInput": "Hangbemenet engedélyezése (mikrofon)",
-      "enableAudioInputDesc": "Helyi mikrofon továbbítása a távoli munkamenetbe",
-      "wallpaper": "Tapéta",
-      "wallpaperDesc": "Asztali háttérkép megjelenítése (a letiltás javítja a teljesítményt)",
-      "theming": "Témázás",
-      "themingDesc": "Vizuális témák és stílusok engedélyezése",
-      "fontSmoothing": "Betűsimítás",
-      "fontSmoothingDesc": "ClearType betűtípus-megjelenítés engedélyezése",
-      "fullWindowDrag": "Teljes ablak húzása",
-      "fullWindowDragDesc": "Ablak tartalmának megjelenítése húzás közben",
-      "desktopComposition": "Asztali kompozíció",
-      "desktopCompositionDesc": "Aero Glass effektek engedélyezése",
-      "menuAnimations": "Menüanimációk",
-      "menuAnimationsDesc": "Menü elhalványulásának és diaanimációk engedélyezése",
-      "disableBitmapCaching": "Bitképes gyorsítótár letiltása",
-      "disableBitmapCachingDesc": "Kapcsold ki a bitképes gyorsítótárat (segíthet a hibákon)",
-      "disableOffscreenCaching": "Képernyőn kívüli gyorsítótár letiltása",
-      "disableOffscreenCachingDesc": "Kapcsolja ki a képernyőn kívüli gyorsítótárat",
-      "disableGlyphCaching": "Karakterjel-gyorsítótár letiltása",
-      "disableGlyphCachingDesc": "Kapcsolja ki a karakterjel-gyorsítótárat",
-      "enableGfx": "GFX engedélyezése",
-      "enableGfxDesc": "RemoteFX grafikus folyamatsor használata",
-      "enablePrinting": "Nyomtatás engedélyezése",
-      "enablePrintingDesc": "Helyi nyomtatók átirányítása a távoli munkamenetre",
-      "enableDriveRedirection": "Meghajtó átirányításának engedélyezése",
-      "enableDriveRedirectionDesc": "Helyi mappa meghajtóként való leképezése a távoli munkamenetben",
-      "createDrivePath": "Útvonal létrehozása",
-      "createDrivePathDesc": "Automatikusan létrehozza a mappát, ha az nem létezik",
-      "disableDownload": "Letöltés letiltása",
-      "disableDownloadDesc": "Fájlok letöltésének megakadályozása a távoli munkamenetből",
-      "disableUpload": "Feltöltés letiltása",
-      "disableUploadDesc": "Fájlok távoli munkamenetbe való feltöltésének megakadályozása",
-      "enableTouch": "Érintés engedélyezése",
-      "enableTouchDesc": "Érintéses bevitel továbbításának engedélyezése",
-      "consoleSession": "Konzol munkamenet",
-      "consoleSessionDesc": "Csatlakozás a konzolhoz (0. munkamenet) egy új munkamenet helyett",
-      "sendWolPacket": "WOL csomag küldése",
-      "sendWolPacketDesc": "Küldjön egy varázslatos csomagot a gazdagép felébresztéséhez a csatlakozás előtt",
-      "disableCopy": "Másolás letiltása",
-      "disableCopyDesc": "Szöveg másolásának megakadályozása a távoli munkamenetből",
-      "disablePaste": "Beillesztés letiltása",
-      "disablePasteDesc": "Szöveg beillesztésének megakadályozása a távoli munkamenetbe",
-      "createPathIfMissing": "Útvonal létrehozása, ha hiányzik",
-      "createPathIfMissingDesc": "Felvételi könyvtár automatikus létrehozása",
-      "excludeOutput": "Kimenet kizárása",
-      "excludeOutputDesc": "Ne rögzítse a képernyőkimenetet (csak metaadatok)",
-      "excludeMouse": "Egér kizárása",
-      "excludeMouseDesc": "Ne rögzítse az egér mozgását",
-      "includeKeystrokes": "Billentyűleütések belefoglalása",
-      "includeKeystrokesDesc": "Nyers billentyűleütések rögzítése a képernyőn megjelenő kimenet mellett",
-      "vncPort": "VNC port",
-      "vncPassword": "VNC jelszó",
-      "vncUsernameOptional": "Felhasználónév (opcionális)",
-      "vncLeaveBlank": "Hagyja üresen, ha nem szükséges",
-      "cursorMode": "Kurzor mód",
-      "swapRedBlue": "Piros/Kék csere",
-      "swapRedBlueDesc": "Cserélje fel a piros és kék színcsatornákat (javít néhány színproblémát)",
-      "readOnly": "Csak olvasható",
-      "readOnlyDesc": "Távoli képernyő megtekintése bemenet küldése nélkül",
-      "telnetPort": "Telnet port",
-      "terminalType": "Terminál típusa",
-      "fontName": "Betűtípus neve",
-      "fontSize": "Betűméret",
-      "colorScheme": "Színséma",
-      "backspaceKey": "Visszatörlés billentyű",
-      "colorDepth": "Színmélység",
-      "resizeMethod": "Átméretezési módszer",
-      "driveNamePlaceholder": "Termix Drive",
-      "options": {
-        "any": "Bármilyen",
-        "auto": "Autó",
-        "nlaExtended": "NLA kiterjesztve",
-        "color8": "8 bites",
-        "color16": "16 bites",
-        "color24": "24 bites",
-        "color32": "32 bites",
-        "displayUpdate": "Kijelzőfrissítés",
-        "reconnect": "Újracsatlakozás",
-        "preserve": "Megőrzés",
-        "unix": "Unix (LF)",
-        "windows": "Windows (CRLF)",
-        "local": "Helyi",
-        "remote": "Távoli",
-        "failsafe": "meghibásodásbiztos",
-        "blackOnWhite": "Fekete-fehér",
-        "whiteOnBlack": "Fehér a feketén",
-        "grayOnBlack": "Szürke feketén",
-        "greenOnBlack": "Zöld a feketén"
-      }
-    },
-    "remoteDesktop": "Távoli asztal",
-    "tabRdp": "Vidékfejlesztési Program",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "Virtuális hálózat",
-    "unencryptedShell": "Titkosítatlan shell",
-    "remoteDesktopNotes": "Megjegyzések",
-    "userDefaultsNote": "A változatlanul hagyott beállítások a gazdagép alapértelmezett beállításait követik.",
-    "connectionOriginNote": "Az asztali alkalmazásban az RDP, a VNC és a Telnet a távoli szervert használja, kivéve, ha a gazdagép értéke „Ez az eszköz”, amelyhez egy olyan GUACD-re van szükség, amelyet ez a gép el tud érni. Állítson be egyet a Távoli asztal beállításaiban, vagy gazdagépenként a GUACD Proxy alatt.",
-    "docsLink": "Dokumentumok megtekintése",
-    "connectionOriginGuacamoleNote": "Az RDP, a VNC és a Telnet a távoli szervert használja, kivéve, ha az „Ez az eszköz” lehetőséget választod, amelyhez egy olyan GUACD-re van szükség, amelyet ez a gép el tud érni. Állíts be egyet a GUACD URL-beállításaiban, vagy hosztonként a GUACD Proxy alatt."
-  },
-  "onboarding": {
-    "feature_desktop": "Távoli asztal",
-    "feature_desktop_desc": "Nyisson meg RDP, VNC és Telnet munkameneteket egy lapon, ugyanúgy, mint az SSH-n."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Színmélység",
-        "description": "Azoknál az RDP-gazdagépeknél használatos, amelyek az alapértelmezett értéken hagyják."
-      },
-      "resizeMethod": {
-        "label": "Átméretezési módszer",
-        "description": "Hogyan követi a távoli képernyő az ablak méretét."
-      },
-      "resizeDisplayUpdate": "Kijelzőfrissítés",
-      "resizeReconnect": "Újracsatlakozás",
-      "inherit": "Örököl",
-      "on": "On",
-      "off": "Le",
-      "forceLossless": {
-        "label": "Veszteségmentes erő",
-        "description": "Veszteségmentes képkódolás kényszerítése (jobb minőség, nagyobb sávszélesség)"
-      },
-      "enableWallpaper": {
-        "label": "Tapéta",
-        "description": "Asztali háttérkép megjelenítése (a letiltás javítja a teljesítményt)"
-      },
-      "enableFontSmoothing": {
-        "label": "Betűsimítás",
-        "description": "ClearType betűtípus-megjelenítés engedélyezése"
-      },
-      "enableDesktopComposition": {
-        "label": "Asztali kompozíció",
-        "description": "Aero Glass effektek engedélyezése"
-      },
-      "disableAudio": {
-        "label": "Hang letiltása",
-        "description": "Némítsa el az összes hangot a távoli munkamenetből"
-      },
-      "enablePrinting": {
-        "label": "Nyomtatás engedélyezése",
-        "description": "Helyi nyomtatók átirányítása a távoli munkamenetre"
-      },
-      "enableDrive": {
-        "label": "Meghajtó átirányításának engedélyezése",
-        "description": "Helyi mappa meghajtóként való leképezése a távoli munkamenetben"
-      },
-      "disableCopy": {
-        "label": "Másolás letiltása",
-        "description": "Szöveg másolásának megakadályozása a távoli munkamenetből"
-      },
-      "disablePaste": {
-        "label": "Beillesztés letiltása",
-        "description": "Szöveg beillesztésének megakadályozása a távoli munkamenetbe"
-      },
-      "group": "Távoli asztal alapértelmezett beállításai",
-      "colorDepth16": "16 bites",
-      "colorDepth24": "24 bites",
-      "colorDepth32": "32 bites"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Távoli asztal engedélyezése",
-        "description": "RDP, VNC és Telnet kapcsolatok engedélyezése GUACD-n keresztül."
-      },
-      "guacdUrl": {
-        "label": "guacd URL",
-        "description": "Ahol a guacd figyel, host:portként. A GUACD_URL, GUACD_HOST és GUACD_PORT környezeti változók felülírják ezt.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "Vidékfejlesztési Program"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "RDP-port"
-      },
-      "vncPort": {
-        "label": "VNC-port"
-      },
-      "telnetPort": {
-        "label": "Telnet port"
-      },
-      "rdpSecurity": {
-        "label": "RDP biztonsági mód"
-      },
-      "rdpIgnoreCert": {
-        "label": "Tanúsítványhibák figyelmen kívül hagyása"
-      },
-      "guacamoleConfig": {
-        "label": "guacd beállítások"
-      },
-      "enableToolbar": {
-        "label": "Távoli asztal eszköztár",
-        "description": "Eszköztár megjelenítése RDP, VNC és Telnet munkamenetekben."
-      },
-      "displayGroup": "Kijelző",
-      "displayDefaultsTab": "Távoli asztal"
-    }
-  },
-  "palette": {
-    "connectRdp": "Kapcsolódjon az RDP-hez",
-    "connectVnc": "Csatlakozás VNC-vel",
-    "connectTelnet": "Csatlakozás Telnet-hez"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Távoli asztali munkamenetek megosztása",
-      "description": "A munkamenet-megosztási és együttműködési szobák megjeleníthetik a felhasználó RDP-, VNC- és Telnet-munkameneteit mások számára."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Távoli szerver szükséges. Csatlakoztasson egy távoli szervert a Beállításokban a kapcsolattípus használatához."
-  },
-  "plugin": {
-    "name": "Távoli asztal"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/id_ID.json b/plugins/remote-desktop/locales/translated/id_ID.json
deleted file mode 100644
index 04354841a..000000000
--- a/plugins/remote-desktop/locales/translated/id_ID.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "Menghubungkan ke sesi {{type}}...",
-    "checkingGuacd": "Memeriksa layanan desktop jarak jauh...",
-    "requestingToken": "Meminta token koneksi {{type}}...",
-    "openingSession": "Membuka sesi {{type}}...",
-    "negotiating": "Bernegosiasi {{type}} jabat tangan...",
-    "sessionReady": "{{type}} sesi siap",
-    "connectionError": "Kesalahan koneksi",
-    "connectionFailed": "Koneksi gagal",
-    "failedToConnect": "Gagal mendapatkan token koneksi.",
-    "hostNotFound": "Host tidak ditemukan",
-    "noHostSelected": "Tidak ada pembawa acara yang dipilih.",
-    "reconnect": "Terhubung kembali",
-    "retry": "Mencoba kembali",
-    "guacdUnavailable": "Layanan desktop jarak jauh (guacd) tidak tersedia. Pastikan guacd berjalan, dapat diakses, dan dikonfigurasi dengan benar di pengaturan admin.",
-    "credentialPromptTitle": "Masukkan Kredensial RDP",
-    "credentialPromptDescription": "Host ini diatur untuk meminta kredensial saat terhubung. Kredensial tersebut hanya digunakan untuk sesi ini dan tidak disimpan.",
-    "connect": "Menghubungkan",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "File Drive",
-      "parent": "Direktori induk",
-      "refresh": "Menyegarkan",
-      "empty": "Folder ini kosong",
-      "listFailed": "Gagal membaca folder ini",
-      "download": "Unduh",
-      "downloadFailed": "Gagal mengunduh {{name}}",
-      "upload": "Unggah file",
-      "uploading": "Mengunggah {{name}}...",
-      "uploaded": "Diunggah {{name}}",
-      "uploadFailed": "Gagal mengunggah {{name}}",
-      "uploadDisabled": "Unggahan dinonaktifkan untuk koneksi ini.",
-      "driveUnavailable": "Aktifkan pengalihan drive RDP sebelum mengunggah file.",
-      "driveNotWritable": "guacd tidak dapat menulis ke folder drive. Periksa GUACD_DRIVE_PATH (atau Drive Path host) dan izinnya.",
-      "dropToUpload": "Seret file untuk diunggah"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (Kunci Layar)",
-      "winKey": "Kunci Windows",
-      "superL": "Super+L (Layar Kunci)",
-      "superKey": "Kunci Super",
-      "super": "Super",
-      "cmdL": "Cmd+L (Kunci Layar)",
-      "cmdKey": "Tombol Perintah",
-      "cmd": "Perintah",
-      "ctrl": "Ctrl",
-      "alt": "Alternatif",
-      "shift": "Menggeser",
-      "win": "Menang",
-      "stickyActive": "{{key}} (terkunci - klik untuk membuka)",
-      "stickyInactive": "{{key}} (klik untuk mengunci)",
-      "esc": "Melarikan diri",
-      "tab": "Tab",
-      "home": "Rumah",
-      "end": "Akhir",
-      "pageUp": "Halaman Atas",
-      "pageDown": "Halaman ke Bawah",
-      "arrowUp": "Panah Atas",
-      "arrowDown": "Panah ke Bawah",
-      "arrowLeft": "Panah Kiri",
-      "arrowRight": "Panah Kanan",
-      "fnToggle": "Tombol Fungsi",
-      "reconnect": "Sesi Terhubung Kembali",
-      "collapse": "Ciutkan bilah alat",
-      "expand": "Perluas bilah alat",
-      "dragHandle": "Seret untuk mengubah posisi",
-      "hide": "Sembunyikan untuk sesi ini. Untuk menonaktifkannya secara permanen, buka Pengaturan Host → Umum → Bilah Alat Koneksi.",
-      "zoomIn": "Perbesar",
-      "zoomOut": "Perbesar tampilan",
-      "resetZoom": "Atur ulang zoom",
-      "fitToScreen": "Sesuaikan dengan layar",
-      "switchToTrackpad": "Beralih ke mode trackpad (seret untuk memindahkan kursor, ketuk untuk mengklik)",
-      "switchToTouch": "Beralih ke mode sentuh (ketuk langsung di tempat yang ingin Anda klik)"
-    },
-    "disabled": "Akses Desktop Jarak Jauh dimatikan. Administrator dapat mengaktifkannya di Pengaturan."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Dibuka di Windows Remote Desktop",
-    "nativeRdpFailed": "Gagal membuka Windows Remote Desktop",
-    "openNativeRdp": "Buka di Windows Remote Desktop",
-    "guac": {
-      "toolbar": "Bilah alat",
-      "connection": "Koneksi",
-      "authentication": "Autentikasi",
-      "storedCredential": "Kredensial Tersimpan",
-      "authMethod": "Metode Otentikasi",
-      "authTypeDirect": "Langsung",
-      "authTypeCredential": "Mandat",
-      "authTypeNone": "Tidak ada",
-      "authTypeNoneDesc": "Tidak ada kredensial yang disimpan. Anda akan diminta memasukkan nama pengguna dan kata sandi setiap kali Anda terhubung; informasi tersebut tidak disimpan.",
-      "selectCredential": "Pilih kredensial...",
-      "connectionSettings": "Pengaturan Koneksi",
-      "displaySettings": "Pengaturan Tampilan",
-      "audioSettings": "Pengaturan Audio",
-      "rdpPerformance": "Kinerja RDP",
-      "deviceRedirection": "Pengalihan Perangkat",
-      "session": "Sidang",
-      "gateway": "Gerbang",
-      "remoteApp": "RemoteApp",
-      "clipboard": "Papan klip",
-      "sessionRecording": "Rekaman Sesi",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "Pengaturan VNC",
-      "terminalSettings": "Pengaturan Terminal",
-      "rdpPort": "Port RDP",
-      "username": "Nama pengguna",
-      "password": "Kata sandi",
-      "passwordSaved": "Kata sandi tersimpan, ketik untuk mengubahnya",
-      "domain": "Domain",
-      "securityMode": "Mode Keamanan",
-      "width": "Lebar",
-      "height": "Tinggi",
-      "dpi": "DPI",
-      "clientName": "Nama Klien",
-      "initialProgram": "Program Awal",
-      "serverLayout": "Tata Letak Server",
-      "timezone": "Zona waktu",
-      "loadBalanceInfo": "Informasi Saldo Beban / Cookie",
-      "loadBalanceInfoDesc": "Cookie RD Connection Broker untuk penyeimbangan beban farm RDS (misalnya tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "Proksi guacd",
-      "guacdHostname": "guacd Host",
-      "guacdHostnamePlaceholder": "Pengaturan default global",
-      "guacdPort": "guacd Port",
-      "guacdProxyDesc": "Ganti instance guacd global untuk koneksi ini. Biarkan kosong untuk menggunakan guacd yang dikonfigurasi secara global.",
-      "gatewayHostname": "Nama Host Gateway",
-      "gatewayPort": "Port Gerbang",
-      "gatewayUsername": "Nama Pengguna Gateway",
-      "gatewayPassword": "Kata Sandi Gerbang",
-      "gatewayDomain": "Domain Gerbang",
-      "remoteAppProgram": "Program RemoteApp",
-      "workingDirectory": "Direktori Kerja",
-      "arguments": "Argumen",
-      "normalizeLineEndings": "Normalisasi Akhiran Baris",
-      "macAddress": "Alamat MAC",
-      "broadcastAddress": "Pidato Siaran",
-      "udpPort": "Port UDP",
-      "waitTimeS": "Waktu Tunggu (detik)",
-      "driveName": "Nama Drive",
-      "drivePath": "Jalur Berkendara",
-      "ignoreCertificate": "Abaikan Sertifikat",
-      "ignoreCertificateDesc": "Izinkan koneksi ke host dengan sertifikat yang ditandatangani sendiri.",
-      "forceLossless": "Paksa Tanpa Kehilangan",
-      "forceLosslessDesc": "Paksa pengkodean gambar tanpa kehilangan data (kualitas lebih tinggi, bandwidth lebih besar)",
-      "disableAudio": "Nonaktifkan Audio",
-      "disableAudioDesc": "Nonaktifkan semua audio dari sesi jarak jauh.",
-      "enableAudioInput": "Aktifkan Input Audio (Mikrofon)",
-      "enableAudioInputDesc": "Teruskan mikrofon lokal ke sesi jarak jauh.",
-      "wallpaper": "Wallpaper",
-      "wallpaperDesc": "Tampilkan wallpaper desktop (menonaktifkannya akan meningkatkan kinerja)",
-      "theming": "Tema",
-      "themingDesc": "Aktifkan tema dan gaya visual.",
-      "fontSmoothing": "Penghalusan Font",
-      "fontSmoothingDesc": "Aktifkan rendering font ClearType",
-      "fullWindowDrag": "Geser Jendela Penuh",
-      "fullWindowDragDesc": "Tampilkan isi jendela saat menyeret",
-      "desktopComposition": "Komposisi Desktop",
-      "desktopCompositionDesc": "Aktifkan efek kaca Aero",
-      "menuAnimations": "Animasi Menu",
-      "menuAnimationsDesc": "Aktifkan animasi pudar dan geser menu",
-      "disableBitmapCaching": "Nonaktifkan Cache Bitmap",
-      "disableBitmapCachingDesc": "Matikan cache bitmap (dapat membantu mengatasi gangguan)",
-      "disableOffscreenCaching": "Nonaktifkan Cache di Luar Layar",
-      "disableOffscreenCachingDesc": "Matikan cache di luar layar.",
-      "disableGlyphCaching": "Nonaktifkan Cache Glif",
-      "disableGlyphCachingDesc": "Matikan cache glif",
-      "enableGfx": "Aktifkan GFX",
-      "enableGfxDesc": "Gunakan pipeline grafis RemoteFX.",
-      "enablePrinting": "Aktifkan Pencetakan",
-      "enablePrintingDesc": "Alihkan printer lokal ke sesi jarak jauh.",
-      "enableDriveRedirection": "Aktifkan Pengalihan Drive",
-      "enableDriveRedirectionDesc": "Petakan folder lokal sebagai drive di sesi jarak jauh.",
-      "createDrivePath": "Buat Jalur Mengemudi",
-      "createDrivePathDesc": "Buat folder secara otomatis jika belum ada.",
-      "disableDownload": "Nonaktifkan Unduhan",
-      "disableDownloadDesc": "Mencegah pengunduhan file dari sesi jarak jauh",
-      "disableUpload": "Nonaktifkan Unggahan",
-      "disableUploadDesc": "Mencegah pengunggahan file ke sesi jarak jauh",
-      "enableTouch": "Aktifkan Sentuhan",
-      "enableTouchDesc": "Aktifkan penerusan input sentuh",
-      "consoleSession": "Sesi Konsol",
-      "consoleSessionDesc": "Hubungkan ke konsol (sesi 0) alih-alih sesi baru.",
-      "sendWolPacket": "Kirim Paket WOL",
-      "sendWolPacketDesc": "Kirim paket ajaib untuk membangunkan host ini sebelum terhubung.",
-      "disableCopy": "Nonaktifkan Salin",
-      "disableCopyDesc": "Mencegah penyalinan teks dari sesi jarak jauh",
-      "disablePaste": "Nonaktifkan Tempel",
-      "disablePasteDesc": "Mencegah penyisipan teks ke dalam sesi jarak jauh",
-      "createPathIfMissing": "Buat Jalur jika Belum Ada",
-      "createPathIfMissingDesc": "Membuat direktori rekaman secara otomatis.",
-      "excludeOutput": "Kecualikan Output",
-      "excludeOutputDesc": "Jangan merekam output layar (hanya metadata)",
-      "excludeMouse": "Kecualikan Tikus",
-      "excludeMouseDesc": "Jangan merekam pergerakan mouse.",
-      "includeKeystrokes": "Sertakan Penekanan Tombol",
-      "includeKeystrokesDesc": "Rekam setiap ketukan keyboard mentah selain output layar.",
-      "vncPort": "Port VNC",
-      "vncPassword": "Kata Sandi VNC",
-      "vncUsernameOptional": "Nama pengguna (opsional)",
-      "vncLeaveBlank": "Kosongkan jika tidak diperlukan",
-      "cursorMode": "Mode Kursor",
-      "swapRedBlue": "Tukar Merah/Biru",
-      "swapRedBlueDesc": "Tukar saluran warna merah dan biru (memperbaiki beberapa masalah warna)",
-      "readOnly": "Hanya baca",
-      "readOnlyDesc": "Lihat layar jarak jauh tanpa mengirimkan input apa pun.",
-      "telnetPort": "Port Telnet",
-      "terminalType": "Jenis Terminal",
-      "fontName": "Nama Font",
-      "fontSize": "Ukuran Huruf",
-      "colorScheme": "Skema Warna",
-      "backspaceKey": "Tombol Backspace",
-      "colorDepth": "Kedalaman Warna",
-      "resizeMethod": "Metode Pengubahan Ukuran",
-      "driveNamePlaceholder": "Termix Drive",
-      "options": {
-        "any": "Setiap",
-        "auto": "Mobil",
-        "nlaExtended": "NLA Diperpanjang",
-        "color8": "8-bit",
-        "color16": "16-bit",
-        "color24": "24-bit",
-        "color32": "32-bit",
-        "displayUpdate": "Pembaruan Tampilan",
-        "reconnect": "Terhubung kembali",
-        "preserve": "Melestarikan",
-        "unix": "Unix (LF)",
-        "windows": "Windows (CRLF)",
-        "local": "Lokal",
-        "remote": "Terpencil",
-        "failsafe": "pengaman",
-        "blackOnWhite": "Hitam di atas Putih",
-        "whiteOnBlack": "Putih di atas Hitam",
-        "grayOnBlack": "Abu-abu di atas Hitam",
-        "greenOnBlack": "Hijau di atas Hitam"
-      }
-    },
-    "remoteDesktop": "Desktop Jarak Jauh",
-    "tabRdp": "RDP",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "Jaringan Virtual",
-    "unencryptedShell": "Shell yang tidak terenkripsi",
-    "remoteDesktopNotes": "Catatan",
-    "userDefaultsNote": "Pengaturan yang Anda biarkan tidak berubah akan mengikuti pengaturan default host Anda.",
-    "connectionOriginNote": "Pada aplikasi desktop, RDP, VNC, dan Telnet menggunakan server jarak jauh kecuali jika host diatur ke Perangkat ini, yang memerlukan guacd yang dapat dijangkau oleh mesin ini. Atur satu di pengaturan Remote Desktop, atau per host di bawah guacd Proxy.",
-    "docsLink": "Lihat dokumen",
-    "connectionOriginGuacamoleNote": "RDP, VNC, dan Telnet menggunakan server jarak jauh kecuali Anda memilih \"Perangkat ini\", yang membutuhkan guacd yang dapat dijangkau oleh mesin ini. Tetapkan satu di pengaturan URL guacd, atau per host di bawah Proksi guacd."
-  },
-  "onboarding": {
-    "feature_desktop": "Desktop jarak jauh",
-    "feature_desktop_desc": "Buka sesi RDP, VNC, dan Telnet dalam satu tab, sama seperti SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Kedalaman Warna",
-        "description": "Digunakan untuk host RDP yang membiarkan pengaturan tersebut pada nilai default."
-      },
-      "resizeMethod": {
-        "label": "Metode Pengubahan Ukuran",
-        "description": "Bagaimana tampilan jarak jauh mengikuti ukuran jendela."
-      },
-      "resizeDisplayUpdate": "Pembaruan Tampilan",
-      "resizeReconnect": "Terhubung kembali",
-      "inherit": "Mewarisi",
-      "on": "Pada",
-      "off": "Mati",
-      "forceLossless": {
-        "label": "Paksa Tanpa Kehilangan",
-        "description": "Paksa pengkodean gambar tanpa kehilangan data (kualitas lebih tinggi, bandwidth lebih besar)"
-      },
-      "enableWallpaper": {
-        "label": "Wallpaper",
-        "description": "Tampilkan wallpaper desktop (menonaktifkannya akan meningkatkan kinerja)"
-      },
-      "enableFontSmoothing": {
-        "label": "Penghalusan Font",
-        "description": "Aktifkan rendering font ClearType"
-      },
-      "enableDesktopComposition": {
-        "label": "Komposisi Desktop",
-        "description": "Aktifkan efek kaca Aero"
-      },
-      "disableAudio": {
-        "label": "Nonaktifkan Audio",
-        "description": "Nonaktifkan semua audio dari sesi jarak jauh."
-      },
-      "enablePrinting": {
-        "label": "Aktifkan Pencetakan",
-        "description": "Alihkan printer lokal ke sesi jarak jauh."
-      },
-      "enableDrive": {
-        "label": "Aktifkan Pengalihan Drive",
-        "description": "Petakan folder lokal sebagai drive di sesi jarak jauh."
-      },
-      "disableCopy": {
-        "label": "Nonaktifkan Salin",
-        "description": "Mencegah penyalinan teks dari sesi jarak jauh"
-      },
-      "disablePaste": {
-        "label": "Nonaktifkan Tempel",
-        "description": "Mencegah penyisipan teks ke dalam sesi jarak jauh"
-      },
-      "group": "Pengaturan default Remote Desktop",
-      "colorDepth16": "16-bit",
-      "colorDepth24": "24-bit",
-      "colorDepth32": "32-bit"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Aktifkan Remote Desktop",
-        "description": "Izinkan koneksi RDP, VNC, dan Telnet melalui guacd."
-      },
-      "guacdUrl": {
-        "label": "URL guacd",
-        "description": "Guacd mendengarkan di mana, sebagai host:port. Variabel lingkungan GUACD_URL, GUACD_HOST, dan GUACD_PORT akan menimpa pengaturan ini.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "RDP"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "Port RDP"
-      },
-      "vncPort": {
-        "label": "Port VNC"
-      },
-      "telnetPort": {
-        "label": "Port Telnet"
-      },
-      "rdpSecurity": {
-        "label": "Mode keamanan RDP"
-      },
-      "rdpIgnoreCert": {
-        "label": "Abaikan kesalahan sertifikat"
-      },
-      "guacamoleConfig": {
-        "label": "pengaturan guacd"
-      },
-      "enableToolbar": {
-        "label": "Toolbar desktop jarak jauh",
-        "description": "Tampilkan bilah alat di sesi RDP, VNC, dan Telnet."
-      },
-      "displayGroup": "Menampilkan",
-      "displayDefaultsTab": "Desktop Jarak Jauh"
-    }
-  },
-  "palette": {
-    "connectRdp": "Terhubung dengan RDP",
-    "connectVnc": "Terhubung dengan VNC",
-    "connectTelnet": "Terhubung dengan Telnet"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Berbagi sesi desktop jarak jauh",
-      "description": "Izinkan fitur berbagi sesi dan ruang kolaborasi untuk menampilkan sesi RDP, VNC, dan Telnet pengguna ini kepada pengguna lain."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Diperlukan server jarak jauh. Hubungkan server jarak jauh di Pengaturan untuk menggunakan jenis koneksi ini."
-  },
-  "plugin": {
-    "name": "Desktop Jarak Jauh"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/it_IT.json b/plugins/remote-desktop/locales/translated/it_IT.json
deleted file mode 100644
index 4075903fe..000000000
--- a/plugins/remote-desktop/locales/translated/it_IT.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "Connessione alla sessione {{type}} in corso...",
-    "checkingGuacd": "Verifica del servizio desktop remoto...",
-    "requestingToken": "Richiesta del token di connessione {{type}}...",
-    "openingSession": "Apertura della sessione {{type}}...",
-    "negotiating": "Negoziazione della stretta di mano {{type}}...",
-    "sessionReady": "{{type}} sessione pronta",
-    "connectionError": "Errore di connessione",
-    "connectionFailed": "Connessione non riuscita",
-    "failedToConnect": "Impossibile ottenere il token di connessione",
-    "hostNotFound": "Host non trovato",
-    "noHostSelected": "Nessun host selezionato",
-    "reconnect": "Riconnetti",
-    "retry": "Riprova",
-    "guacdUnavailable": "Il servizio desktop remoto (guacd) non è disponibile. Assicurati che guacd sia in esecuzione, accessibile e configurato correttamente nelle impostazioni di amministrazione.",
-    "credentialPromptTitle": "Inserisci le credenziali RDP",
-    "credentialPromptDescription": "Questo host è configurato per richiedere le credenziali al momento della connessione. Tali credenziali vengono utilizzate solo per questa sessione e non vengono salvate.",
-    "connect": "Connetti",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "File di Drive",
-      "parent": "Cartella principale",
-      "refresh": "Aggiorna",
-      "empty": "Questa cartella è vuota",
-      "listFailed": "Impossibile leggere questa cartella",
-      "download": "Scarica",
-      "downloadFailed": "Impossibile scaricare {{name}}",
-      "upload": "Carica i file",
-      "uploading": "Caricamento di {{name}}...",
-      "uploaded": "Caricato {{name}}",
-      "uploadFailed": "Impossibile caricare {{name}}",
-      "uploadDisabled": "Il caricamento è disabilitato per questa connessione.",
-      "driveUnavailable": "Abilita il reindirizzamento delle unità RDP prima di caricare i file",
-      "driveNotWritable": "guacd non può scrivere nella cartella dell'unità. Verificare GUACD_DRIVE_PATH (o il percorso dell'unità host) e le relative autorizzazioni.",
-      "dropToUpload": "Trascina i file da caricare"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (Blocca schermo)",
-      "winKey": "Tasto Windows",
-      "superL": "Super+L (Schermata di blocco)",
-      "superKey": "Super Chiave",
-      "super": "Super",
-      "cmdL": "Cmd+L (Blocca schermo)",
-      "cmdKey": "Tasto di comando",
-      "cmd": "Comando",
-      "ctrl": "Ctrl",
-      "alt": "Alt",
-      "shift": "Maiusc",
-      "win": "Win",
-      "stickyActive": "{{key}} (bloccato - clicca per rilasciare)",
-      "stickyInactive": "{{key}} (clicca per bloccare)",
-      "esc": "Esc",
-      "tab": "Tab",
-      "home": "Home",
-      "end": "Fine",
-      "pageUp": "Pag Su",
-      "pageDown": "Pag Giù",
-      "arrowUp": "Freccia Su",
-      "arrowDown": "Freccia Giù",
-      "arrowLeft": "Freccia Sinistra",
-      "arrowRight": "Freccia Destra",
-      "fnToggle": "Tasti funzione",
-      "reconnect": "Riconnetti sessione",
-      "collapse": "Comprimi barra degli strumenti",
-      "expand": "Espandi barra degli strumenti",
-      "dragHandle": "Trascina per riposizionare",
-      "hide": "Nascondi per questa sessione. Per disabilitarlo in modo permanente, apri Impostazioni host → Generale → Barra degli strumenti di connessione.",
-      "zoomIn": "Ingrandisci",
-      "zoomOut": "Riduci lo zoom",
-      "resetZoom": "Ripristina lo zoom",
-      "fitToScreen": "Adatto allo schermo",
-      "switchToTrackpad": "Passa alla modalità trackpad (trascina per spostare il cursore, tocca per fare clic)",
-      "switchToTouch": "Passa alla modalità touch (tocca direttamente il punto in cui desideri fare clic)"
-    },
-    "disabled": "Desktop remoto è disattivato. Un amministratore può attivarlo nelle Impostazioni."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Aperto in Desktop remoto di Windows",
-    "nativeRdpFailed": "Impossibile aprire Desktop remoto di Windows",
-    "openNativeRdp": "Apri in Desktop remoto di Windows",
-    "guac": {
-      "toolbar": "barra degli strumenti",
-      "connection": "Connessione",
-      "authentication": "Autenticazione",
-      "storedCredential": "Credenziale memorizzata",
-      "authMethod": "Metodo di autenticazione",
-      "authTypeDirect": "Diretta",
-      "authTypeCredential": "Credenziale",
-      "authTypeNone": "Nessuno",
-      "authTypeNoneDesc": "Non vengono memorizzate credenziali. Ti verrà richiesto di inserire nome utente e password ogni volta che effettuerai la connessione; questi dati non verranno salvati.",
-      "selectCredential": "Seleziona una credenziale...",
-      "connectionSettings": "Impostazioni di connessione",
-      "displaySettings": "Impostazioni schermo",
-      "audioSettings": "Impostazioni audio",
-      "rdpPerformance": "Prestazioni RDP",
-      "deviceRedirection": "Reindirizzamento dispositivi",
-      "session": "Sessione",
-      "gateway": "Gateway",
-      "remoteApp": "RemoteApp",
-      "clipboard": "Appunti",
-      "sessionRecording": "Registrazione sessione",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "Impostazioni VNC",
-      "terminalSettings": "Impostazioni terminale",
-      "rdpPort": "Porta RDP",
-      "username": "Nome utente",
-      "password": "Password",
-      "passwordSaved": "Password salvata, digita per modificarla",
-      "domain": "Dominio",
-      "securityMode": "Modalità di sicurezza",
-      "width": "Larghezza",
-      "height": "Altezza",
-      "dpi": "DPI",
-      "clientName": "Nome client",
-      "initialProgram": "Programma iniziale",
-      "serverLayout": "Layout del server",
-      "timezone": "Fuso orario",
-      "loadBalanceInfo": "Info bilanciamento carico / Cookie",
-      "loadBalanceInfoDesc": "Cookie del RD Connection Broker per il bilanciamento del carico della farm RDS (es. tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "Proxy guacd",
-      "guacdHostname": "Host guacd",
-      "guacdHostnamePlaceholder": "Default globale",
-      "guacdPort": "Porta guacd",
-      "guacdProxyDesc": "Sostituisci l'istanza guacd globale per questa connessione. Lascia vuoto per utilizzare il guacd configurato globalmente.",
-      "gatewayHostname": "Hostname del gateway",
-      "gatewayPort": "Porta del gateway",
-      "gatewayUsername": "Nome utente gateway",
-      "gatewayPassword": "Password gateway",
-      "gatewayDomain": "Dominio gateway",
-      "remoteAppProgram": "Programma RemoteApp",
-      "workingDirectory": "Directory di lavoro",
-      "arguments": "Argomenti",
-      "normalizeLineEndings": "Normalizza terminazioni di riga",
-      "macAddress": "Indirizzo MAC",
-      "broadcastAddress": "Indirizzo di broadcast",
-      "udpPort": "Porta UDP",
-      "waitTimeS": "Tempo di attesa (s)",
-      "driveName": "Nome unità",
-      "drivePath": "Percorso unità",
-      "ignoreCertificate": "Ignora certificato",
-      "ignoreCertificateDesc": "Consente connessioni a host con certificati autofirmati",
-      "forceLossless": "Forza lossless",
-      "forceLosslessDesc": "Forza la codifica lossless delle immagini (qualità più alta, maggiore utilizzo di banda)",
-      "disableAudio": "Disabilita audio",
-      "disableAudioDesc": "Disattiva tutto l'audio dalla sessione remota",
-      "enableAudioInput": "Abilita ingresso audio (microfono)",
-      "enableAudioInputDesc": "Inoltra il microfono locale alla sessione remota",
-      "wallpaper": "Sfondo",
-      "wallpaperDesc": "Mostra lo sfondo del desktop (disabilitarlo migliora le prestazioni)",
-      "theming": "Temi",
-      "themingDesc": "Abilita temi e stili visivi",
-      "fontSmoothing": "Smussamento caratteri",
-      "fontSmoothingDesc": "Abilita il rendering dei caratteri ClearType",
-      "fullWindowDrag": "Trascinamento finestra intera",
-      "fullWindowDragDesc": "Mostra il contenuto della finestra durante il trascinamento",
-      "desktopComposition": "Composizione desktop",
-      "desktopCompositionDesc": "Abilita gli effetti Aero Glass",
-      "menuAnimations": "Animazioni menu",
-      "menuAnimationsDesc": "Abilita animazioni di dissolvenza e scorrimento dei menu",
-      "disableBitmapCaching": "Disabilita cache bitmap",
-      "disableBitmapCachingDesc": "Disattiva la cache bitmap (può essere utile per risolvere anomalie)",
-      "disableOffscreenCaching": "Disabilita cache fuori schermo",
-      "disableOffscreenCachingDesc": "Disattiva la cache fuori schermo",
-      "disableGlyphCaching": "Disabilita cache glifi",
-      "disableGlyphCachingDesc": "Disattiva la cache dei glifi",
-      "enableGfx": "Abilita GFX",
-      "enableGfxDesc": "Usa la pipeline grafica RemoteFX",
-      "enablePrinting": "Abilita stampa",
-      "enablePrintingDesc": "Reindirizza le stampanti locali alla sessione remota",
-      "enableDriveRedirection": "Abilita reindirizzamento unità",
-      "enableDriveRedirectionDesc": "Mappa una cartella locale come unità nella sessione remota",
-      "createDrivePath": "Crea percorso drive",
-      "createDrivePathDesc": "Crea automaticamente la cartella se non esiste",
-      "disableDownload": "Disabilita download",
-      "disableDownloadDesc": "Impedisce il download di file dalla sessione remota",
-      "disableUpload": "Disabilita upload",
-      "disableUploadDesc": "Impedisce il caricamento di file sulla sessione remota",
-      "enableTouch": "Abilita input tattile",
-      "enableTouchDesc": "Abilita l'inoltro dell'input tattile",
-      "consoleSession": "Sessione console",
-      "consoleSessionDesc": "Connetti alla console (sessione 0) invece di una nuova sessione",
-      "sendWolPacket": "Invia pacchetto WOL",
-      "sendWolPacketDesc": "Invia un pacchetto magico per riattivare questo host prima della connessione",
-      "disableCopy": "Disabilita copia",
-      "disableCopyDesc": "Impedisce la copia di testo dalla sessione remota",
-      "disablePaste": "Disabilita incolla",
-      "disablePasteDesc": "Impedisce di incollare testo nella sessione remota",
-      "createPathIfMissing": "Crea percorso se mancante",
-      "createPathIfMissingDesc": "Crea automaticamente la directory di registrazione",
-      "excludeOutput": "Escludi output",
-      "excludeOutputDesc": "Non registrare l'output dello schermo (solo metadati)",
-      "excludeMouse": "Escludi mouse",
-      "excludeMouseDesc": "Non registrare i movimenti del mouse",
-      "includeKeystrokes": "Includi tasti premuti",
-      "includeKeystrokesDesc": "Registra i tasti premuti non elaborati in aggiunta all'output dello schermo",
-      "vncPort": "Porta VNC",
-      "vncPassword": "Password VNC",
-      "vncUsernameOptional": "Nome utente (opzionale)",
-      "vncLeaveBlank": "Lascia vuoto se non richiesto",
-      "cursorMode": "Modalità cursore",
-      "swapRedBlue": "Scambia Rosso/Blu",
-      "swapRedBlueDesc": "Scambia i canali di colore rosso e blu (corregge alcuni problemi di colore)",
-      "readOnly": "Sola lettura",
-      "readOnlyDesc": "Visualizza lo schermo remoto senza inviare alcun input",
-      "telnetPort": "Porta Telnet",
-      "terminalType": "Tipo terminale",
-      "fontName": "Nome font",
-      "fontSize": "Dimensione font",
-      "colorScheme": "Schema colori",
-      "backspaceKey": "Tasto Backspace",
-      "colorDepth": "Profondità colore",
-      "resizeMethod": "Metodo di ridimensionamento",
-      "driveNamePlaceholder": "Termix Drive",
-      "options": {
-        "any": "Qualunque",
-        "auto": "Auto",
-        "nlaExtended": "NLA esteso",
-        "color8": "8 bit",
-        "color16": "16 bit",
-        "color24": "24 bit",
-        "color32": "32 bit",
-        "displayUpdate": "Aggiornamento della visualizzazione",
-        "reconnect": "Riconnetti",
-        "preserve": "Conserva",
-        "unix": "Unix (LF)",
-        "windows": "Windows (CRLF)",
-        "local": "Locale",
-        "remote": "Remoto",
-        "failsafe": "Sistema di sicurezza",
-        "blackOnWhite": "Nero su bianco",
-        "whiteOnBlack": "Bianco su nero",
-        "grayOnBlack": "Grigio su nero",
-        "greenOnBlack": "Verde su nero"
-      }
-    },
-    "remoteDesktop": "Desktop remoto",
-    "tabRdp": "RDP",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "Rete virtuale",
-    "unencryptedShell": "Shell non crittografata",
-    "remoteDesktopNotes": "Note",
-    "userDefaultsNote": "Le impostazioni che lasci invariate seguiranno le impostazioni predefinite del tuo provider di hosting.",
-    "connectionOriginNote": "Nell'applicazione desktop, RDP, VNC e Telnet utilizzano il server remoto a meno che l'host non sia impostato su \"Questo dispositivo\", che richiede un GUACD raggiungibile da questa macchina. Impostalo nelle impostazioni di Desktop remoto oppure per ogni host in Proxy GUACD.",
-    "docsLink": "Visualizza documentazione",
-    "connectionOriginGuacamoleNote": "RDP, VNC e Telnet utilizzano il server remoto a meno che non si selezioni \"Questo dispositivo\", che richiede un GUACD raggiungibile da questa macchina. È possibile impostarlo nelle impostazioni dell'URL di GUACD oppure per ogni host in \"Proxy di GUACD\"."
-  },
-  "onboarding": {
-    "feature_desktop": "Desktop remoto",
-    "feature_desktop_desc": "Apri le sessioni RDP, VNC e Telnet in una scheda, proprio come per SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Profondità colore",
-        "description": "Utilizzato per gli host RDP che mantengono l'impostazione predefinita."
-      },
-      "resizeMethod": {
-        "label": "Metodo di ridimensionamento",
-        "description": "Come lo schermo remoto si adatta alle dimensioni della finestra."
-      },
-      "resizeDisplayUpdate": "Aggiornamento della visualizzazione",
-      "resizeReconnect": "Riconnetti",
-      "inherit": "Ereditare",
-      "on": "Attivo",
-      "off": "Disattivo",
-      "forceLossless": {
-        "label": "Forza lossless",
-        "description": "Forza la codifica lossless delle immagini (qualità più alta, maggiore utilizzo di banda)"
-      },
-      "enableWallpaper": {
-        "label": "Sfondo",
-        "description": "Mostra lo sfondo del desktop (disabilitarlo migliora le prestazioni)"
-      },
-      "enableFontSmoothing": {
-        "label": "Smussamento caratteri",
-        "description": "Abilita il rendering dei caratteri ClearType"
-      },
-      "enableDesktopComposition": {
-        "label": "Composizione desktop",
-        "description": "Abilita gli effetti Aero Glass"
-      },
-      "disableAudio": {
-        "label": "Disabilita audio",
-        "description": "Disattiva tutto l'audio dalla sessione remota"
-      },
-      "enablePrinting": {
-        "label": "Abilita stampa",
-        "description": "Reindirizza le stampanti locali alla sessione remota"
-      },
-      "enableDrive": {
-        "label": "Abilita reindirizzamento unità",
-        "description": "Mappa una cartella locale come unità nella sessione remota"
-      },
-      "disableCopy": {
-        "label": "Disabilita copia",
-        "description": "Impedisce la copia di testo dalla sessione remota"
-      },
-      "disablePaste": {
-        "label": "Disabilita incolla",
-        "description": "Impedisce di incollare testo nella sessione remota"
-      },
-      "group": "Impostazioni predefinite di Desktop remoto",
-      "colorDepth16": "16 bit",
-      "colorDepth24": "24 bit",
-      "colorDepth32": "32 bit"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Abilita Desktop remoto",
-        "description": "Consenti connessioni RDP, VNC e Telnet tramite guacd."
-      },
-      "guacdUrl": {
-        "label": "URL guacd",
-        "description": "Dove guacd è in ascolto, come host:porta. Le variabili d'ambiente GUACD_URL, GUACD_HOST e GUACD_PORT sovrascrivono questa impostazione.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "RDP"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "porta RDP"
-      },
-      "vncPort": {
-        "label": "porta VNC"
-      },
-      "telnetPort": {
-        "label": "Porta Telnet"
-      },
-      "rdpSecurity": {
-        "label": "Modalità di sicurezza RDP"
-      },
-      "rdpIgnoreCert": {
-        "label": "Ignora gli errori del certificato"
-      },
-      "guacamoleConfig": {
-        "label": "impostazioni guacd"
-      },
-      "enableToolbar": {
-        "label": "Barra degli strumenti del desktop remoto",
-        "description": "Mostra la barra degli strumenti nelle sessioni RDP, VNC e Telnet."
-      },
-      "displayGroup": "Display",
-      "displayDefaultsTab": "Desktop remoto"
-    }
-  },
-  "palette": {
-    "connectRdp": "Connettiti tramite RDP",
-    "connectVnc": "Connettiti tramite VNC",
-    "connectTelnet": "Connettiti con Telnet"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Condividere sessioni di desktop remoto",
-      "description": "Consenti la condivisione di sessioni e le stanze di collaborazione per mostrare le sessioni RDP, VNC e Telnet di questo utente agli altri."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "È necessario un server remoto. Per utilizzare questo tipo di connessione, collega un server remoto nelle Impostazioni."
-  },
-  "plugin": {
-    "name": "Desktop remoto"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/ja_JP.json b/plugins/remote-desktop/locales/translated/ja_JP.json
deleted file mode 100644
index 937e1babb..000000000
--- a/plugins/remote-desktop/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "{{type}} セッションに接続中...",
-    "checkingGuacd": "リモートデスクトップサービスを確認しています...",
-    "requestingToken": "{{type}} 接続トークンを要求しています...",
-    "openingSession": "{{type}} セッションを開始しています...",
-    "negotiating": "交渉中 {{type}} 握手...",
-    "sessionReady": "{{type}} セッション準備完了",
-    "connectionError": "接続エラー",
-    "connectionFailed": "接続に失敗しました",
-    "failedToConnect": "接続トークンの取得に失敗しました",
-    "hostNotFound": "ホストが見つかりません",
-    "noHostSelected": "ホストが選択されていません",
-    "reconnect": "再接続",
-    "retry": "再試行",
-    "guacdUnavailable": "リモートデスクトップサービス (guacd) が利用できません。guacd が実行中でアクセス可能であり、管理者設定で正しく構成されていることを確認してください。",
-    "credentialPromptTitle": "RDP認証情報を入力してください",
-    "credentialPromptDescription": "このホストは、接続時に認証情報の入力を求めるように設定されています。認証情報は今回のセッションのみで使用され、保存されません。",
-    "connect": "接続",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "ドライブファイル",
-      "parent": "親ディレクトリ",
-      "refresh": "再読み込み",
-      "empty": "このフォルダーは空です",
-      "listFailed": "このフォルダの読み取りに失敗しました",
-      "download": "ダウンロード",
-      "downloadFailed": "ダウンロードに失敗しました {{name}}",
-      "upload": "ファイルをアップロードする",
-      "uploading": "{{name}} をアップロード中...",
-      "uploaded": "アップロード済み {{name}}",
-      "uploadFailed": "アップロードに失敗しました {{name}}",
-      "uploadDisabled": "この接続ではアップロードが無効になっています。",
-      "driveUnavailable": "ファイルをアップロードする前に、RDPドライブリダイレクトを有効にしてください。",
-      "driveNotWritable": "guacd はドライブフォルダに書き込むことができません。GUACD_DRIVE_PATH（またはホストのドライブパス）とそのアクセス許可を確認してください。",
-      "dropToUpload": "アップロードするファイルをドロップしてください"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (画面ロック)",
-      "winKey": "Windows キー",
-      "superL": "Super+L（ロック画面）",
-      "superKey": "スーパーキー",
-      "super": "素晴らしい",
-      "cmdL": "Cmd+L（画面ロック）",
-      "cmdKey": "コマンドキー",
-      "cmd": "コマンド",
-      "ctrl": "Ctrl",
-      "alt": "Alt",
-      "shift": "Shift",
-      "win": "Win",
-      "stickyActive": "{{key}}（ラッチ中 - クリックで解除）",
-      "stickyInactive": "{{key}}（クリックでラッチ）",
-      "esc": "Escape",
-      "tab": "Tab",
-      "home": "Home",
-      "end": "エンド",
-      "pageUp": "Page Up",
-      "pageDown": "Page Down",
-      "arrowUp": "↑",
-      "arrowDown": "↓",
-      "arrowLeft": "←",
-      "arrowRight": "→",
-      "fnToggle": "ファンクションキー",
-      "reconnect": "セッション再接続",
-      "collapse": "ツールバーを折りたたむ",
-      "expand": "ツールバーを展開",
-      "dragHandle": "ドラッグで位置変更",
-      "hide": "このセッション中は非表示にします。完全に無効にするには、ホスト設定 → 一般 → 接続ツールバーを開いてください。",
-      "zoomIn": "ズームイン",
-      "zoomOut": "ズームアウト",
-      "resetZoom": "ズームをリセット",
-      "fitToScreen": "画面に合わせる",
-      "switchToTrackpad": "トラックパッドモードに切り替える（ドラッグでカーソルを移動、タップでクリック）",
-      "switchToTouch": "タッチモードに切り替える（クリックしたい場所を直接タップする）"
-    },
-    "disabled": "リモートデスクトップは無効になっています。管理者は設定画面で有効にできます。"
-  },
-  "hosts": {
-    "nativeRdpOpened": "Windowsリモートデスクトップで開きました",
-    "nativeRdpFailed": "Windowsリモートデスクトップを開くことができませんでした",
-    "openNativeRdp": "Windowsリモートデスクトップで開く",
-    "guac": {
-      "toolbar": "ツールバー",
-      "connection": "接続",
-      "authentication": "認証",
-      "storedCredential": "保存された認証情報",
-      "authMethod": "認証方法",
-      "authTypeDirect": "直接",
-      "authTypeCredential": "認証情報",
-      "authTypeNone": "すべて解除",
-      "authTypeNoneDesc": "認証情報は保存されません。接続するたびにユーザー名とパスワードの入力を求められますが、それらは保存されません。",
-      "selectCredential": "認証情報を選択...",
-      "connectionSettings": "接続設定",
-      "displaySettings": "表示設定",
-      "audioSettings": "オーディオ設定",
-      "rdpPerformance": "RDP パフォーマンス",
-      "deviceRedirection": "デバイスリダイレクト",
-      "session": "セッション",
-      "gateway": "ゲートウェイ",
-      "remoteApp": "RemoteApp",
-      "clipboard": "クリップボード",
-      "sessionRecording": "セッション記録",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "VNC設定",
-      "terminalSettings": "ターミナル設定",
-      "rdpPort": "RDPポート",
-      "username": "ユーザー名",
-      "password": "パスワード",
-      "passwordSaved": "パスワードが保存されました。変更するには入力してください。",
-      "domain": "ドメイン",
-      "securityMode": "セキュリティモード",
-      "width": "幅",
-      "height": "高さ",
-      "dpi": "DPI",
-      "clientName": "クライアント名",
-      "initialProgram": "初期プログラム",
-      "serverLayout": "サーバーレイアウト",
-      "timezone": "タイムゾーン",
-      "loadBalanceInfo": "負荷分散情報 / Cookie",
-      "loadBalanceInfoDesc": "RDSファームの負荷分散用RD接続ブローカーCookie (例: tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "guacdプロキシ",
-      "guacdHostname": "guacdホスト",
-      "guacdHostnamePlaceholder": "全体のデフォルト",
-      "guacdPort": "guacdポート",
-      "guacdProxyDesc": "この接続に対してグローバル guacd インスタンスを上書きします。空白にするとグローバルに設定された guacd を使用します。",
-      "gatewayHostname": "ゲートウェイホスト名",
-      "gatewayPort": "ゲートウェイポート",
-      "gatewayUsername": "ゲートウェイユーザー名",
-      "gatewayPassword": "ゲートウェイパスワード",
-      "gatewayDomain": "ゲートウェイドメイン",
-      "remoteAppProgram": "RemoteAppプログラム",
-      "workingDirectory": "作業ディレクトリ",
-      "arguments": "引数",
-      "normalizeLineEndings": "改行コードの正規化",
-      "macAddress": "MACアドレス",
-      "broadcastAddress": "ブロードキャストアドレス",
-      "udpPort": "UDPポート",
-      "waitTimeS": "待機時間（秒）",
-      "driveName": "ドライブ名",
-      "drivePath": "ドライブパス",
-      "ignoreCertificate": "証明書を無視",
-      "ignoreCertificateDesc": "自己署名証明書を持つホストへの接続を許可する",
-      "forceLossless": "ロスレスを強制",
-      "forceLosslessDesc": "ロスレス画像エンコーディングを強制する（高品質だが帯域幅を多く消費）",
-      "disableAudio": "オーディオを無効化",
-      "disableAudioDesc": "リモートセッションの音声をすべてミュートする",
-      "enableAudioInput": "音声入力（マイク）を有効化",
-      "enableAudioInputDesc": "ローカルマイクをリモートセッションに転送する",
-      "wallpaper": "壁紙",
-      "wallpaperDesc": "デスクトップ壁紙を表示する（無効にするとパフォーマンスが向上）",
-      "theming": "テーマ",
-      "themingDesc": "ビジュアルテーマとスタイルを有効にする",
-      "fontSmoothing": "フォントスムージング",
-      "fontSmoothingDesc": "ClearTypeフォントレンダリングを有効にする",
-      "fullWindowDrag": "フルウィンドウドラッグ",
-      "fullWindowDragDesc": "ウィンドウドラッグ中に内容を表示する",
-      "desktopComposition": "デスクトップコンポジション",
-      "desktopCompositionDesc": "Aero Glass効果を有効にする",
-      "menuAnimations": "メニューアニメーション",
-      "menuAnimationsDesc": "メニューのフェードおよびスライドアニメーションを有効にする",
-      "disableBitmapCaching": "ビットマップキャッシュを無効化",
-      "disableBitmapCachingDesc": "ビットマップキャッシュをオフにする（不具合の解決に役立つ場合がある）",
-      "disableOffscreenCaching": "オフスクリーンキャッシュを無効化",
-      "disableOffscreenCachingDesc": "オフスクリーンキャッシュをオフにする",
-      "disableGlyphCaching": "グリフキャッシュを無効化",
-      "disableGlyphCachingDesc": "グリフキャッシュをオフにする",
-      "enableGfx": "GFXを有効化",
-      "enableGfxDesc": "RemoteFXグラフィックスパイプラインを使用する",
-      "enablePrinting": "印刷を有効化",
-      "enablePrintingDesc": "ローカルプリンターをリモートセッションにリダイレクトする",
-      "enableDriveRedirection": "ドライブリダイレクションを有効化",
-      "enableDriveRedirectionDesc": "リモートセッションでローカルフォルダーをドライブとしてマッピングする",
-      "createDrivePath": "ドライブパスを作成",
-      "createDrivePathDesc": "フォルダが存在しない場合に自動的に作成します",
-      "disableDownload": "ダウンロードを無効にする",
-      "disableDownloadDesc": "リモートセッションからファイルをダウンロードできないようにします",
-      "disableUpload": "アップロードを無効にする",
-      "disableUploadDesc": "リモートセッションにファイルをアップロードできないようにします",
-      "enableTouch": "タッチを有効にする",
-      "enableTouchDesc": "タッチ入力転送を有効にします",
-      "consoleSession": "コンソールセッション",
-      "consoleSessionDesc": "新しいセッションではなくコンソール（セッション0）に接続します",
-      "sendWolPacket": "WOLパケットを送信",
-      "sendWolPacketDesc": "接続前にこのホストを起動するためのマジックパケットを送信します",
-      "disableCopy": "コピーを無効にする",
-      "disableCopyDesc": "リモートセッションからのテキストコピーを禁止します",
-      "disablePaste": "貼り付けを無効にする",
-      "disablePasteDesc": "リモートセッションへのテキスト貼り付けを禁止します",
-      "createPathIfMissing": "パスが存在しない場合に作成",
-      "createPathIfMissingDesc": "レコーディングディレクトリが存在しない場合に自動的に作成します",
-      "excludeOutput": "出力を除外",
-      "excludeOutputDesc": "画面出力を記録しません（メタデータのみ）",
-      "excludeMouse": "マウスを除外",
-      "excludeMouseDesc": "マウスの動きを記録しません",
-      "includeKeystrokes": "キーストロークを含める",
-      "includeKeystrokesDesc": "画面出力に加えて生のキーストロークを記録します",
-      "vncPort": "VNCポート",
-      "vncPassword": "VNCパスワード",
-      "vncUsernameOptional": "ユーザー名（オプション）",
-      "vncLeaveBlank": "必要ない場合は空白のままにしてください",
-      "cursorMode": "カーソルモード",
-      "swapRedBlue": "赤/青を入れ替え",
-      "swapRedBlueDesc": "赤と青の色チャネルを入れ替えます（色の問題を修正）",
-      "readOnly": "読み取り専用",
-      "readOnlyDesc": "入力を送信せずにリモート画面を表示します",
-      "telnetPort": "Telnetポート",
-      "terminalType": "端末タイプ",
-      "fontName": "フォント名",
-      "fontSize": "フォントサイズ",
-      "colorScheme": "カラースキーム",
-      "backspaceKey": "バックスペースキー",
-      "colorDepth": "色深度",
-      "resizeMethod": "リサイズ方法",
-      "driveNamePlaceholder": "ターミックスドライブ",
-      "options": {
-        "any": "どれでも",
-        "auto": "自動",
-        "nlaExtended": "NLA延長",
-        "color8": "8ビット",
-        "color16": "16ビット",
-        "color24": "24ビット",
-        "color32": "32ビット",
-        "displayUpdate": "ディスプレイの更新",
-        "reconnect": "再接続",
-        "preserve": "保存する",
-        "unix": "Unix (LF)",
-        "windows": "Windows (CRLF)",
-        "local": "ローカル",
-        "remote": "リモート",
-        "failsafe": "フェイルセーフ",
-        "blackOnWhite": "白地に黒",
-        "whiteOnBlack": "白地に黒",
-        "grayOnBlack": "黒地にグレー",
-        "greenOnBlack": "黒地に緑"
-      }
-    },
-    "remoteDesktop": "リモートデスクトップ",
-    "tabRdp": "RDP",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "仮想ネットワーク",
-    "unencryptedShell": "暗号化されていないシェル",
-    "remoteDesktopNotes": "メモ",
-    "userDefaultsNote": "変更しない設定は、ホストのデフォルト設定に従います。",
-    "connectionOriginNote": "デスクトップアプリでは、ホストが「このデバイス」に設定されていない限り、RDP、VNC、Telnetはリモートサーバーを使用します。「このデバイス」に設定するには、このマシンがアクセスできるguacdが必要です。リモートデスクトップの設定、またはguacdプロキシでホストごとに設定してください。",
-    "docsLink": "ドキュメントを表示",
-    "connectionOriginGuacamoleNote": "RDP、VNC、Telnetは、リモートサーバーを使用します。「このデバイス」を選択した場合は、このマシンからアクセスできるguacdが必要です。guacd URL設定で設定するか、guacdプロキシでホストごとに設定してください。"
-  },
-  "onboarding": {
-    "feature_desktop": "リモートデスクトップ",
-    "feature_desktop_desc": "RDP、VNC、Telnetのセッションは、SSHと同様にタブで開きます。"
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "色深度",
-        "description": "デフォルト設定のままになっているRDPホストで使用されます。"
-      },
-      "resizeMethod": {
-        "label": "リサイズ方法",
-        "description": "リモート画面がウィンドウサイズに追従する仕組み。"
-      },
-      "resizeDisplayUpdate": "ディスプレイの更新",
-      "resizeReconnect": "再接続",
-      "inherit": "継承する",
-      "on": "オン",
-      "off": "オフ",
-      "forceLossless": {
-        "label": "ロスレスを強制",
-        "description": "ロスレス画像エンコーディングを強制する（高品質だが帯域幅を多く消費）"
-      },
-      "enableWallpaper": {
-        "label": "壁紙",
-        "description": "デスクトップ壁紙を表示する（無効にするとパフォーマンスが向上）"
-      },
-      "enableFontSmoothing": {
-        "label": "フォントスムージング",
-        "description": "ClearTypeフォントレンダリングを有効にする"
-      },
-      "enableDesktopComposition": {
-        "label": "デスクトップコンポジション",
-        "description": "Aero Glass効果を有効にする"
-      },
-      "disableAudio": {
-        "label": "オーディオを無効化",
-        "description": "リモートセッションの音声をすべてミュートする"
-      },
-      "enablePrinting": {
-        "label": "印刷を有効化",
-        "description": "ローカルプリンターをリモートセッションにリダイレクトする"
-      },
-      "enableDrive": {
-        "label": "ドライブリダイレクションを有効化",
-        "description": "リモートセッションでローカルフォルダーをドライブとしてマッピングする"
-      },
-      "disableCopy": {
-        "label": "コピーを無効にする",
-        "description": "リモートセッションからのテキストコピーを禁止します"
-      },
-      "disablePaste": {
-        "label": "貼り付けを無効にする",
-        "description": "リモートセッションへのテキスト貼り付けを禁止します"
-      },
-      "group": "リモートデスクトップのデフォルト設定",
-      "colorDepth16": "16ビット",
-      "colorDepth24": "24ビット",
-      "colorDepth32": "32ビット"
-    },
-    "admin": {
-      "enabled": {
-        "label": "リモートデスクトップを有効にする",
-        "description": "guacd を介して RDP、VNC、および Telnet 接続を許可する。"
-      },
-      "guacdUrl": {
-        "label": "guacd URL",
-        "description": "guacd がリッスンする場所をホスト:ポートとして指定します。GUACD_URL、GUACD_HOST、GUACD_PORT 環境変数によって、この設定は上書きされます。",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "RDP"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "RDPポート"
-      },
-      "vncPort": {
-        "label": "VNCポート"
-      },
-      "telnetPort": {
-        "label": "Telnetポート"
-      },
-      "rdpSecurity": {
-        "label": "RDPセキュリティモード"
-      },
-      "rdpIgnoreCert": {
-        "label": "証明書エラーを無視する"
-      },
-      "guacamoleConfig": {
-        "label": "guacd 設定"
-      },
-      "enableToolbar": {
-        "label": "リモートデスクトップツールバー",
-        "description": "RDP、VNC、Telnetセッションでツールバーを表示する。"
-      },
-      "displayGroup": "画面",
-      "displayDefaultsTab": "リモートデスクトップ"
-    }
-  },
-  "palette": {
-    "connectRdp": "RDPで接続する",
-    "connectVnc": "VNCで接続する",
-    "connectTelnet": "Telnetで接続する"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "リモートデスクトップセッションを共有する",
-      "description": "セッション共有とコラボレーションルームで、このユーザーのRDP、VNC、およびTelnetセッションを他のユーザーに表示できるようにする。"
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "リモートサーバーが必要です。この接続タイプを使用するには、設定でリモートサーバーを接続してください。"
-  },
-  "plugin": {
-    "name": "リモートデスクトップ"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/ko_KR.json b/plugins/remote-desktop/locales/translated/ko_KR.json
deleted file mode 100644
index c2a6ecd72..000000000
--- a/plugins/remote-desktop/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "{{type}} 세션에 연결 중...",
-    "checkingGuacd": "원격 데스크톱 서비스를 확인하는 중...",
-    "requestingToken": "{{type}} 연결 토큰을 요청하는 중...",
-    "openingSession": "{{type}} 세션을 여는 중...",
-    "negotiating": "협상 중 {{type}} 악수...",
-    "sessionReady": "{{type}} 세션 준비 완료",
-    "connectionError": "연결 오류",
-    "connectionFailed": "연결 실패",
-    "failedToConnect": "연결 토큰을 가져오지 못했습니다.",
-    "hostNotFound": "호스트를 찾을 수 없음",
-    "noHostSelected": "선택된 호스트가 없습니다",
-    "reconnect": "재연결",
-    "retry": "재시도",
-    "guacdUnavailable": "원격 데스크톱 서비스(guacd)를 사용할 수 없습니다. guacd가 실행 중이고 접근 가능하며 관리자 설정에서 올바르게 구성되었는지 확인하세요.",
-    "credentialPromptTitle": "RDP 자격 증명을 입력하십시오.",
-    "credentialPromptDescription": "이 호스트는 연결 시 자격 증명을 입력하라는 메시지를 표시하도록 설정되어 있습니다. 입력된 자격 증명은 해당 세션 동안에만 사용되며 저장되지 않습니다.",
-    "connect": "연결",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "드라이브 파일",
-      "parent": "상위 디렉토리",
-      "refresh": "새로 고침",
-      "empty": "이 폴더는 비어 있습니다",
-      "listFailed": "이 폴더를 읽는 데 실패했습니다.",
-      "download": "다운로드",
-      "downloadFailed": "{{name}} 다운로드에 실패했습니다.",
-      "upload": "파일 업로드",
-      "uploading": "{{name}} 업로드 중...",
-      "uploaded": "업로드됨 {{name}}",
-      "uploadFailed": "{{name}} 업로드에 실패했습니다.",
-      "uploadDisabled": "이 연결에서는 업로드가 비활성화되어 있습니다.",
-      "driveUnavailable": "파일을 업로드하기 전에 RDP 드라이브 리디렉션을 활성화하십시오.",
-      "driveNotWritable": "guacd가 드라이브 폴더에 쓰기 권한이 없습니다. GUACD_DRIVE_PATH(또는 호스트의 드라이브 경로)와 해당 권한을 확인하십시오.",
-      "dropToUpload": "업로드할 파일을 드롭하세요"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (화면 잠금)",
-      "winKey": "Windows 키",
-      "superL": "Super+L (잠금 화면)",
-      "superKey": "슈퍼 키",
-      "super": "감독자",
-      "cmdL": "Cmd+L (화면 잠금)",
-      "cmdKey": "명령 키",
-      "cmd": "명령",
-      "ctrl": "Ctrl",
-      "alt": "Alt",
-      "shift": "Shift",
-      "win": "Win",
-      "stickyActive": "{{key}} (고정됨 - 클릭하여 해제)",
-      "stickyInactive": "{{key}} (클릭하여 고정)",
-      "esc": "Esc",
-      "tab": "Tab",
-      "home": "홈",
-      "end": "End",
-      "pageUp": "Page Up",
-      "pageDown": "Page Down",
-      "arrowUp": "위쪽 화살표",
-      "arrowDown": "아래쪽 화살표",
-      "arrowLeft": "왼쪽 화살표",
-      "arrowRight": "오른쪽 화살표",
-      "fnToggle": "기능 키",
-      "reconnect": "세션 재연결",
-      "collapse": "도구 모음 접기",
-      "expand": "도구 모음 펼치기",
-      "dragHandle": "드래그하여 위치 이동",
-      "hide": "이번 세션 동안에는 숨깁니다. 영구적으로 비활성화하려면 호스트 설정 → 일반 → 연결 도구 모음을 여세요.",
-      "zoomIn": "확대",
-      "zoomOut": "축소하기",
-      "resetZoom": "확대/축소 초기화",
-      "fitToScreen": "화면에 맞추기",
-      "switchToTrackpad": "트랙패드 모드로 전환하세요 (드래그하여 커서 이동, 탭하여 클릭).",
-      "switchToTouch": "터치 모드로 전환하세요 (클릭하려는 위치를 직접 탭하세요)."
-    },
-    "disabled": "원격 데스크톱 기능이 꺼져 있습니다. 관리자는 설정에서 이 기능을 켤 수 있습니다."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Windows 원격 데스크톱에서 열림",
-    "nativeRdpFailed": "Windows 원격 데스크톱을 열지 못했습니다.",
-    "openNativeRdp": "Windows 원격 데스크톱에서 열기",
-    "guac": {
-      "toolbar": "툴바",
-      "connection": "연결",
-      "authentication": "인증",
-      "storedCredential": "저장된 자격 증명",
-      "authMethod": "인증 방법",
-      "authTypeDirect": "직접",
-      "authTypeCredential": "자격 증명",
-      "authTypeNone": "전체 해제",
-      "authTypeNoneDesc": "사용자 이름은 저장되지 않습니다. 접속할 때마다 사용자 이름과 비밀번호를 입력하라는 메시지가 표시되며, 해당 정보는 저장되지 않습니다.",
-      "selectCredential": "자격 증명 선택...",
-      "connectionSettings": "연결 설정",
-      "displaySettings": "화면 설정",
-      "audioSettings": "오디오 설정",
-      "rdpPerformance": "RDP 성능",
-      "deviceRedirection": "장치 리디렉션",
-      "session": "세션",
-      "gateway": "게이트웨이",
-      "remoteApp": "RemoteApp",
-      "clipboard": "클립보드",
-      "sessionRecording": "세션 녹화",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "VNC 설정",
-      "terminalSettings": "터미널 설정",
-      "rdpPort": "RDP 포트",
-      "username": "사용자 이름",
-      "password": "비밀번호",
-      "passwordSaved": "비밀번호가 저장되었습니다. 변경하려면 입력하세요.",
-      "domain": "도메인",
-      "securityMode": "보안 모드",
-      "width": "너비",
-      "height": "높이",
-      "dpi": "DPI",
-      "clientName": "클라이언트 이름",
-      "initialProgram": "초기 프로그램",
-      "serverLayout": "서버 레이아웃",
-      "timezone": "시간대",
-      "loadBalanceInfo": "로드 밸런스 정보 / 쿠키",
-      "loadBalanceInfoDesc": "RDS 팜 로드 밸런싱을 위한 RD 연결 브로커 쿠키 (예: tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "guacd 프록시",
-      "guacdHostname": "guacd 호스트",
-      "guacdHostnamePlaceholder": "전역 기본값",
-      "guacdPort": "guacd 포트",
-      "guacdProxyDesc": "이 연결에 대해 전역 guacd 인스턴스를 재정의합니다. 공란으로 두면 전역으로 구성된 guacd를 사용합니다.",
-      "gatewayHostname": "게이트웨이 호스트 이름",
-      "gatewayPort": "게이트웨이 포트",
-      "gatewayUsername": "게이트웨이 사용자 이름",
-      "gatewayPassword": "게이트웨이 비밀번호",
-      "gatewayDomain": "게이트웨이 도메인",
-      "remoteAppProgram": "RemoteApp 프로그램",
-      "workingDirectory": "작업 디렉터리",
-      "arguments": "인수",
-      "normalizeLineEndings": "줄 끝 정규화",
-      "macAddress": "MAC 주소",
-      "broadcastAddress": "브로드캐스트 주소",
-      "udpPort": "UDP 포트",
-      "waitTimeS": "대기 시간(초)",
-      "driveName": "드라이브 이름",
-      "drivePath": "드라이브 경로",
-      "ignoreCertificate": "인증서 무시",
-      "ignoreCertificateDesc": "자체 서명 인증서가 있는 호스트에 연결 허용",
-      "forceLossless": "무손실 강제",
-      "forceLosslessDesc": "무손실 이미지 인코딩 강제 (더 높은 품질, 더 많은 대역폭)",
-      "disableAudio": "오디오 비활성화",
-      "disableAudioDesc": "원격 세션의 모든 오디오 음소거",
-      "enableAudioInput": "오디오 입력 활성화 (마이크)",
-      "enableAudioInputDesc": "로컬 마이크를 원격 세션으로 전달",
-      "wallpaper": "배경 화면",
-      "wallpaperDesc": "바탕 화면 배경 표시 (비활성화 시 성능 향상)",
-      "theming": "테마",
-      "themingDesc": "비주얼 테마 및 스타일 활성화",
-      "fontSmoothing": "글꼴 다듬기",
-      "fontSmoothingDesc": "ClearType 글꼴 렌더링 사용",
-      "fullWindowDrag": "전체 창 끌기",
-      "fullWindowDragDesc": "드래그하는 동안 창 내용 표시",
-      "desktopComposition": "데스크톱 구성",
-      "desktopCompositionDesc": "Aero 글래스 효과 활성화",
-      "menuAnimations": "메뉴 애니메이션",
-      "menuAnimationsDesc": "메뉴 페이드 및 슬라이드 애니메이션 활성화",
-      "disableBitmapCaching": "비트맵 캐싱 비활성화",
-      "disableBitmapCachingDesc": "비트맵 캐시 끄기 (오류 해결에 도움이 될 수 있음)",
-      "disableOffscreenCaching": "오프스크린 캐싱 비활성화",
-      "disableOffscreenCachingDesc": "오프스크린 캐시 끄기",
-      "disableGlyphCaching": "글리프 캐싱 비활성화",
-      "disableGlyphCachingDesc": "글리프 캐시 끄기",
-      "enableGfx": "GFX 활성화",
-      "enableGfxDesc": "RemoteFX 그래픽 파이프라인 사용",
-      "enablePrinting": "인쇄 활성화",
-      "enablePrintingDesc": "로컬 프린터를 원격 세션으로 리디렉션",
-      "enableDriveRedirection": "드라이브 리디렉션 활성화",
-      "enableDriveRedirectionDesc": "로컬 폴더를 원격 세션에서 드라이브로 매핑",
-      "createDrivePath": "드라이브 경로 생성",
-      "createDrivePathDesc": "폴더가 없으면 자동 생성",
-      "disableDownload": "다운로드 비활성화",
-      "disableDownloadDesc": "원격 세션에서 파일 다운로드 방지",
-      "disableUpload": "업로드 비활성화",
-      "disableUploadDesc": "원격 세션으로 파일 업로드 방지",
-      "enableTouch": "터치 활성화",
-      "enableTouchDesc": "터치 입력 전달 활성화",
-      "consoleSession": "콘솔 세션",
-      "consoleSessionDesc": "새 세션 대신 콘솔(세션 0)에 연결",
-      "sendWolPacket": "WOL 패킷 전송",
-      "sendWolPacketDesc": "연결 전에 호스트를 깨우기 위해 매직 패킷 전송",
-      "disableCopy": "복사 비활성화",
-      "disableCopyDesc": "원격 세션에서 텍스트 복사 방지",
-      "disablePaste": "붙여넣기 비활성화",
-      "disablePasteDesc": "원격 세션으로 텍스트 붙여넣기 방지",
-      "createPathIfMissing": "경로가 없으면 생성",
-      "createPathIfMissingDesc": "녹화 디렉터리 자동 생성",
-      "excludeOutput": "출력 제외",
-      "excludeOutputDesc": "화면 출력 기록 안 함(메타데이터만)",
-      "excludeMouse": "마우스 제외",
-      "excludeMouseDesc": "마우스 움직임 기록 안 함",
-      "includeKeystrokes": "키 입력 포함",
-      "includeKeystrokesDesc": "화면 출력 외에 원시 키 입력 기록",
-      "vncPort": "VNC 포트",
-      "vncPassword": "VNC 비밀번호",
-      "vncUsernameOptional": "사용자 이름(선택 사항)",
-      "vncLeaveBlank": "필요하지 않으면 비워 두세요",
-      "cursorMode": "커서 모드",
-      "swapRedBlue": "적색/청색 교환",
-      "swapRedBlueDesc": "적색과 청색 채널을 교환(일부 색상 문제 해결)",
-      "readOnly": "읽기 전용",
-      "readOnlyDesc": "입력을 보내지 않고 원격 화면 보기",
-      "telnetPort": "Telnet 포트",
-      "terminalType": "터미널 유형",
-      "fontName": "글꼴 이름",
-      "fontSize": "글꼴 크기",
-      "colorScheme": "색 구성표",
-      "backspaceKey": "백스페이스 키",
-      "colorDepth": "색 농도",
-      "resizeMethod": "크기 조정 방법",
-      "driveNamePlaceholder": "터믹스 드라이브",
-      "options": {
-        "any": "어느",
-        "auto": "자동",
-        "nlaExtended": "NLA 확장",
-        "color8": "8비트",
-        "color16": "16비트",
-        "color24": "24비트",
-        "color32": "32비트",
-        "displayUpdate": "디스플레이 업데이트",
-        "reconnect": "재연결",
-        "preserve": "보존하다",
-        "unix": "유닉스(LF)",
-        "windows": "윈도우(CRLF)",
-        "local": "로컬",
-        "remote": "원격",
-        "failsafe": "안전장치",
-        "blackOnWhite": "흰색 바탕에 검은색",
-        "whiteOnBlack": "검정색 바탕에 흰색",
-        "grayOnBlack": "검정색 바탕에 회색",
-        "greenOnBlack": "검정색 바탕에 녹색"
-      }
-    },
-    "remoteDesktop": "원격 데스크톱",
-    "tabRdp": "RDP",
-    "tabVnc": "VNC",
-    "tabTelnet": "텔넷",
-    "virtualNetwork": "가상 네트워크",
-    "unencryptedShell": "암호화되지 않은 셸",
-    "remoteDesktopNotes": "메모",
-    "userDefaultsNote": "설정을 변경하지 않고 그대로 두면 호스트의 기본 설정이 적용됩니다.",
-    "connectionOriginNote": "데스크톱 앱에서 RDP, VNC 및 Telnet은 호스트가 \"이 장치\"로 설정되어 있지 않은 한 원격 서버를 사용합니다. \"이 장치\"로 설정된 경우 해당 장치가 연결할 수 있는 guacd 프록시가 필요합니다. 원격 데스크톱 설정 또는 호스트별 guacd 프록시 설정에서 guacd 프록시를 설정하십시오.",
-    "docsLink": "문서 보기",
-    "connectionOriginGuacamoleNote": "RDP, VNC, Telnet은 \"이 장치\"를 선택하지 않는 한 원격 서버를 사용합니다. \"이 장치\"를 선택하려면 해당 장치가 연결할 수 있는 guacd가 필요합니다. guacd URL 설정에서 또는 guacd 프록시 설정에서 호스트별로 guacd를 설정하십시오."
-  },
-  "onboarding": {
-    "feature_desktop": "원격 데스크톱",
-    "feature_desktop_desc": "SSH와 마찬가지로 RDP, VNC 및 Telnet 세션을 탭에서 열 수 있습니다."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "색 농도",
-        "description": "기본 설정으로 유지되는 RDP 호스트에 사용됩니다."
-      },
-      "resizeMethod": {
-        "label": "크기 조정 방법",
-        "description": "원격 화면이 창 크기에 따라 어떻게 변하는지."
-      },
-      "resizeDisplayUpdate": "디스플레이 업데이트",
-      "resizeReconnect": "재연결",
-      "inherit": "상속하다",
-      "on": "켜짐",
-      "off": "꺼짐",
-      "forceLossless": {
-        "label": "무손실 강제",
-        "description": "무손실 이미지 인코딩 강제 (더 높은 품질, 더 많은 대역폭)"
-      },
-      "enableWallpaper": {
-        "label": "배경 화면",
-        "description": "바탕 화면 배경 표시 (비활성화 시 성능 향상)"
-      },
-      "enableFontSmoothing": {
-        "label": "글꼴 다듬기",
-        "description": "ClearType 글꼴 렌더링 사용"
-      },
-      "enableDesktopComposition": {
-        "label": "데스크톱 구성",
-        "description": "Aero 글래스 효과 활성화"
-      },
-      "disableAudio": {
-        "label": "오디오 비활성화",
-        "description": "원격 세션의 모든 오디오 음소거"
-      },
-      "enablePrinting": {
-        "label": "인쇄 활성화",
-        "description": "로컬 프린터를 원격 세션으로 리디렉션"
-      },
-      "enableDrive": {
-        "label": "드라이브 리디렉션 활성화",
-        "description": "로컬 폴더를 원격 세션에서 드라이브로 매핑"
-      },
-      "disableCopy": {
-        "label": "복사 비활성화",
-        "description": "원격 세션에서 텍스트 복사 방지"
-      },
-      "disablePaste": {
-        "label": "붙여넣기 비활성화",
-        "description": "원격 세션으로 텍스트 붙여넣기 방지"
-      },
-      "group": "원격 데스크톱 기본 설정",
-      "colorDepth16": "16비트",
-      "colorDepth24": "24비트",
-      "colorDepth32": "32비트"
-    },
-    "admin": {
-      "enabled": {
-        "label": "원격 데스크톱 활성화",
-        "description": "guacd를 통해 RDP, VNC 및 Telnet 연결을 허용합니다."
-      },
-      "guacdUrl": {
-        "label": "guacd URL",
-        "description": "guacd가 수신 대기하는 주소는 호스트:포트 형식입니다. GUACD_URL, GUACD_HOST 및 GUACD_PORT 환경 변수가 이 값을 재정의합니다.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "RDP"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "RDP 포트"
-      },
-      "vncPort": {
-        "label": "VNC 포트"
-      },
-      "telnetPort": {
-        "label": "텔넷 포트"
-      },
-      "rdpSecurity": {
-        "label": "RDP 보안 모드"
-      },
-      "rdpIgnoreCert": {
-        "label": "인증서 오류를 무시하세요"
-      },
-      "guacamoleConfig": {
-        "label": "guacd 설정"
-      },
-      "enableToolbar": {
-        "label": "원격 데스크톱 툴바",
-        "description": "RDP, VNC 및 Telnet 세션에서 툴바를 표시합니다."
-      },
-      "displayGroup": "표시하다",
-      "displayDefaultsTab": "원격 데스크톱"
-    }
-  },
-  "palette": {
-    "connectRdp": "RDP에 연결",
-    "connectVnc": "VNC로 연결",
-    "connectTelnet": "텔넷으로 연결"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "원격 데스크톱 세션을 공유하세요",
-      "description": "세션 공유 및 공동 작업 공간에서 이 사용자의 RDP, VNC 및 Telnet 세션을 다른 사용자에게 표시할 수 있도록 허용합니다."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "원격 서버가 필요합니다. 이 연결 유형을 사용하려면 설정에서 원격 서버를 연결하세요."
-  },
-  "plugin": {
-    "name": "원격 데스크톱"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/nl_NL.json b/plugins/remote-desktop/locales/translated/nl_NL.json
deleted file mode 100644
index 91e0dd158..000000000
--- a/plugins/remote-desktop/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "Verbinding maken met de {{type}} sessie...",
-    "checkingGuacd": "De externe bureaubladservice controleren...",
-    "requestingToken": "Verzoek om {{type}} verbindingstoken...",
-    "openingSession": "Sessie {{type}} openen...",
-    "negotiating": "Onderhandelen over een {{type}} handdruk...",
-    "sessionReady": "{{type}} sessie gereed",
-    "connectionError": "Verbindingsfout",
-    "connectionFailed": "Verbinding mislukt",
-    "failedToConnect": "Verbindingstoken kon niet worden verkregen.",
-    "hostNotFound": "Host niet gevonden",
-    "noHostSelected": "Geen host geselecteerd",
-    "reconnect": "Opnieuw verbinding maken",
-    "retry": "Opnieuw proberen",
-    "guacdUnavailable": "De service voor extern bureaublad (guacd) is niet beschikbaar. Zorg ervoor dat guacd actief en toegankelijk is en correct is geconfigureerd in de beheerdersinstellingen.",
-    "credentialPromptTitle": "Voer de RDP-inloggegevens in.",
-    "credentialPromptDescription": "Deze host is zo ingesteld dat er bij het verbinden om inloggegevens wordt gevraagd. Deze worden alleen voor deze sessie gebruikt en niet opgeslagen.",
-    "connect": "Verbinden",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "Drive-bestanden",
-      "parent": "Hoofdmap",
-      "refresh": "Vernieuwen",
-      "empty": "Deze map is leeg.",
-      "listFailed": "Het lezen van deze map is mislukt.",
-      "download": "Download",
-      "downloadFailed": "Downloaden mislukt {{name}}",
-      "upload": "Bestanden uploaden",
-      "uploading": "Bezig met uploaden {{name}}...",
-      "uploaded": "Geüpload {{name}}",
-      "uploadFailed": "Uploaden mislukt {{name}}",
-      "uploadDisabled": "Uploaden is uitgeschakeld voor deze verbinding.",
-      "driveUnavailable": "Schakel RDP-schijfomleiding in voordat u bestanden uploadt.",
-      "driveNotWritable": "guacd kan niet naar de schijfmap schrijven. Controleer GUACD_DRIVE_PATH (of het schijfpad van de host) en de bijbehorende machtigingen.",
-      "dropToUpload": "Sleep de bestanden hierheen om ze te uploaden."
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (Vergrendelscherm)",
-      "winKey": "Windows-toets",
-      "superL": "Super+L (Vergrendelscherm)",
-      "superKey": "Supersleutel",
-      "super": "Super",
-      "cmdL": "Cmd+L (Scherm vergrendelen)",
-      "cmdKey": "Commando-toets",
-      "cmd": "Commando",
-      "ctrl": "Ctrl",
-      "alt": "Alt",
-      "shift": "Verschuiving",
-      "win": "Winnen",
-      "stickyActive": "{{key}} (vergrendeld - klik om te ontgrendelen)",
-      "stickyInactive": "{{key}} (klik om te vergrendelen)",
-      "esc": "Ontsnappen",
-      "tab": "Tab",
-      "home": "Thuis",
-      "end": "Einde",
-      "pageUp": "Pagina omhoog",
-      "pageDown": "Pagina omlaag",
-      "arrowUp": "Pijl omhoog",
-      "arrowDown": "Pijl omlaag",
-      "arrowLeft": "Pijl naar links",
-      "arrowRight": "Pijl naar rechts",
-      "fnToggle": "Functietoetsen",
-      "reconnect": "Herverbindingssessie",
-      "collapse": "Werkbalk inklappen",
-      "expand": "Werkbalk uitklappen",
-      "dragHandle": "Sleep om te verplaatsen",
-      "hide": "Voor deze sessie verbergen. Om het permanent uit te schakelen, opent u Hostinstellingen → Algemeen → Verbindingswerkbalk.",
-      "zoomIn": "Zoom in",
-      "zoomOut": "Uitzoomen",
-      "resetZoom": "Zoom opnieuw instellen",
-      "fitToScreen": "Aan het scherm aanpassen",
-      "switchToTrackpad": "Schakel over naar de trackpadmodus (sleep om de cursor te verplaatsen, tik om te klikken).",
-      "switchToTouch": "Schakel over naar de aanraakmodus (tik direct op de plek waar u wilt klikken)."
-    },
-    "disabled": "Extern bureaublad is uitgeschakeld. Een beheerder kan dit inschakelen in de instellingen."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Geopend in Windows Remote Desktop",
-    "nativeRdpFailed": "Het openen van Windows Remote Desktop is mislukt.",
-    "openNativeRdp": "Openen in Windows Extern bureaublad",
-    "guac": {
-      "toolbar": "Werkbalk",
-      "connection": "Verbinding",
-      "authentication": "Authenticatie",
-      "storedCredential": "Opgeslagen inloggegevens",
-      "authMethod": "Authenticatiemethode",
-      "authTypeDirect": "Direct",
-      "authTypeCredential": "Referentie",
-      "authTypeNone": "Geen",
-      "authTypeNoneDesc": "Er worden geen inloggegevens opgeslagen. U wordt bij elke verbinding gevraagd om een gebruikersnaam en wachtwoord; deze worden niet bewaard.",
-      "selectCredential": "Selecteer een certificaat...",
-      "connectionSettings": "Verbindingsinstellingen",
-      "displaySettings": "Weergave-instellingen",
-      "audioSettings": "Audio-instellingen",
-      "rdpPerformance": "RDP-prestaties",
-      "deviceRedirection": "Apparaatomleiding",
-      "session": "Sessie",
-      "gateway": "Gateway",
-      "remoteApp": "RemoteApp",
-      "clipboard": "Klembord",
-      "sessionRecording": "Sessieopname",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "VNC-instellingen",
-      "terminalSettings": "Terminalinstellingen",
-      "rdpPort": "RDP-poort",
-      "username": "Gebruikersnaam",
-      "password": "Wachtwoord",
-      "passwordSaved": "Wachtwoord opgeslagen, typ om te wijzigen",
-      "domain": "Domein",
-      "securityMode": "Beveiligingsmodus",
-      "width": "Breedte",
-      "height": "Hoogte",
-      "dpi": "DPI",
-      "clientName": "Klantnaam",
-      "initialProgram": "Initiële programma",
-      "serverLayout": "Serverindeling",
-      "timezone": "Tijdzone",
-      "loadBalanceInfo": "Informatie over load balancing / Cookie",
-      "loadBalanceInfoDesc": "RD Connection Broker-cookie voor load balancing van RDS-farms (bijv. tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "guacd-proxy",
-      "guacdHostname": "guacd Host",
-      "guacdHostnamePlaceholder": "Globale standaard",
-      "guacdPort": "bewakingshaven",
-      "guacdProxyDesc": "Overschrijf de globale guacd-instantie voor deze verbinding. Laat dit veld leeg om de globaal geconfigureerde guacd te gebruiken.",
-      "gatewayHostname": "Gateway-hostnaam",
-      "gatewayPort": "Gateway-poort",
-      "gatewayUsername": "Gateway-gebruikersnaam",
-      "gatewayPassword": "Gateway-wachtwoord",
-      "gatewayDomain": "Gateway-domein",
-      "remoteAppProgram": "RemoteApp-programma",
-      "workingDirectory": "Werkmap",
-      "arguments": "Argumenten",
-      "normalizeLineEndings": "Normaliseer regeleinden",
-      "macAddress": "MAC-adres",
-      "broadcastAddress": "Uitzendadres",
-      "udpPort": "UDP-poort",
-      "waitTimeS": "Wachttijd (s)",
-      "driveName": "Schijfnaam",
-      "drivePath": "Rijpad",
-      "ignoreCertificate": "Certificaat negeren",
-      "ignoreCertificateDesc": "Sta verbindingen toe met hosts die zelfondertekende certificaten hebben.",
-      "forceLossless": "Krachtverliesloos",
-      "forceLosslessDesc": "Forceer verliesvrije beeldcodering (hogere kwaliteit, meer bandbreedte)",
-      "disableAudio": "Geluid uitschakelen",
-      "disableAudioDesc": "Demp alle audio van de externe sessie.",
-      "enableAudioInput": "Audio-ingang (microfoon) inschakelen",
-      "enableAudioInputDesc": "Stuur de lokale microfoon door naar de externe sessie.",
-      "wallpaper": "Behang",
-      "wallpaperDesc": "Toon bureaubladachtergrond (uitschakelen verbetert de prestaties)",
-      "theming": "Thema",
-      "themingDesc": "Schakel visuele thema's en stijlen in.",
-      "fontSmoothing": "Lettertype-vloeiendheid",
-      "fontSmoothingDesc": "Schakel ClearType-lettertypeweergave in",
-      "fullWindowDrag": "Volledig venster slepen",
-      "fullWindowDragDesc": "Toon de inhoud van het venster tijdens het slepen.",
-      "desktopComposition": "Bureaubladcompositie",
-      "desktopCompositionDesc": "Schakel Aero-glaseffecten in",
-      "menuAnimations": "Menu-animaties",
-      "menuAnimationsDesc": "Schakel menu-vervagings- en schuifanimaties in.",
-      "disableBitmapCaching": "Bitmapcaching uitschakelen",
-      "disableBitmapCachingDesc": "Schakel de bitmapcache uit (dit kan helpen bij storingen).",
-      "disableOffscreenCaching": "Offscreen-caching uitschakelen",
-      "disableOffscreenCachingDesc": "Schakel de offscreen cache uit.",
-      "disableGlyphCaching": "Glyph-caching uitschakelen",
-      "disableGlyphCachingDesc": "Schakel de glyph-cache uit.",
-      "enableGfx": "Schakel GFX in",
-      "enableGfxDesc": "Gebruik de RemoteFX-grafische pipeline",
-      "enablePrinting": "Afdrukken inschakelen",
-      "enablePrintingDesc": "Lokale printers doorverwijzen naar de externe sessie",
-      "enableDriveRedirection": "Schakel schijfomleiding in",
-      "enableDriveRedirectionDesc": "Een lokale map toewijzen als schijfstation in de externe sessie.",
-      "createDrivePath": "Maak een rijpad aan",
-      "createDrivePathDesc": "Maak de map automatisch aan als deze nog niet bestaat.",
-      "disableDownload": "Download uitschakelen",
-      "disableDownloadDesc": "Voorkom het downloaden van bestanden vanuit de externe sessie.",
-      "disableUpload": "Uploaden uitschakelen",
-      "disableUploadDesc": "Voorkom het uploaden van bestanden naar de externe sessie.",
-      "enableTouch": "Aanraakbediening inschakelen",
-      "enableTouchDesc": "Schakel het doorsturen van aanraakinvoer in.",
-      "consoleSession": "Consolesessie",
-      "consoleSessionDesc": "Maak verbinding met de console (sessie 0) in plaats van een nieuwe sessie te starten.",
-      "sendWolPacket": "Verzend WOL-pakket",
-      "sendWolPacketDesc": "Verzend een magic packet om deze host te activeren voordat u verbinding maakt.",
-      "disableCopy": "Kopiëren uitschakelen",
-      "disableCopyDesc": "Voorkom het kopiëren van tekst vanuit de externe sessie.",
-      "disablePaste": "Plakken uitschakelen",
-      "disablePasteDesc": "Voorkom dat tekst in de externe sessie wordt geplakt.",
-      "createPathIfMissing": "Maak een pad aan als dit ontbreekt.",
-      "createPathIfMissingDesc": "Maak automatisch de opnamemap aan.",
-      "excludeOutput": "Uitvoer uitsluiten",
-      "excludeOutputDesc": "Schermuitvoer niet opnemen (alleen metadata).",
-      "excludeMouse": "Muis uitsluiten",
-      "excludeMouseDesc": "Neem geen muisbewegingen op.",
-      "includeKeystrokes": "Inclusief toetsaanslagen",
-      "includeKeystrokesDesc": "Registreer naast de schermuitvoer ook onbewerkte toetsaanslagen.",
-      "vncPort": "VNC-poort",
-      "vncPassword": "VNC-wachtwoord",
-      "vncUsernameOptional": "Gebruikersnaam (optioneel)",
-      "vncLeaveBlank": "Laat dit veld leeg als het niet verplicht is.",
-      "cursorMode": "Cursormodus",
-      "swapRedBlue": "Wissel rood/blauw om.",
-      "swapRedBlueDesc": "Wissel de rode en blauwe kleurkanalen om (dit lost enkele kleurproblemen op).",
-      "readOnly": "Alleen-lezen",
-      "readOnlyDesc": "Bekijk het externe scherm zonder invoer te verzenden.",
-      "telnetPort": "Telnet-poort",
-      "terminalType": "Terminaltype",
-      "fontName": "Lettertypenaam",
-      "fontSize": "Lettergrootte",
-      "colorScheme": "Kleurenschema",
-      "backspaceKey": "Backspace-toets",
-      "colorDepth": "Kleurdiepte",
-      "resizeMethod": "Formaatwijzigingsmethode",
-      "driveNamePlaceholder": "Termix Drive",
-      "options": {
-        "any": "Elk",
-        "auto": "Auto",
-        "nlaExtended": "NLA Extended",
-        "color8": "8-bit",
-        "color16": "16-bit",
-        "color24": "24-bit",
-        "color32": "32-bit",
-        "displayUpdate": "Weergave bijwerken",
-        "reconnect": "Opnieuw verbinding maken",
-        "preserve": "Beschermen",
-        "unix": "Unix (LF)",
-        "windows": "Windows (CRLF)",
-        "local": "Lokaal",
-        "remote": "Op afstand",
-        "failsafe": "faalveilige",
-        "blackOnWhite": "Zwart op wit",
-        "whiteOnBlack": "Wit op zwart",
-        "grayOnBlack": "Grijs op zwart",
-        "greenOnBlack": "Groen op zwart"
-      }
-    },
-    "remoteDesktop": "Extern bureaublad",
-    "tabRdp": "RDP",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "Virtueel netwerk",
-    "unencryptedShell": "Niet-versleutelde shell",
-    "remoteDesktopNotes": "Notities",
-    "userDefaultsNote": "Instellingen die u ongewijzigd laat, volgen de standaardinstellingen van uw host.",
-    "connectionOriginNote": "In de desktop-app gebruiken RDP, VNC en Telnet de externe server, tenzij de host is ingesteld op 'Dit apparaat'. In dat geval is een guacd-proxy nodig die deze machine kan bereiken. Stel er een in via de instellingen voor Extern bureaublad of per host onder guacd-proxy.",
-    "docsLink": "Documenten bekijken",
-    "connectionOriginGuacamoleNote": "RDP, VNC en Telnet gebruiken de externe server, tenzij u 'Dit apparaat' selecteert. In dat geval is een guacd-server nodig die deze machine kan bereiken. Stel er een in bij de guacd-URL-instellingen of per host onder guacd-proxy."
-  },
-  "onboarding": {
-    "feature_desktop": "Extern bureaublad",
-    "feature_desktop_desc": "Open RDP-, VNC- en Telnet-sessies in een tabblad, net als bij SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Kleurdiepte",
-        "description": "Gebruikt voor RDP-hosts die dit standaard ingeschakeld laten."
-      },
-      "resizeMethod": {
-        "label": "Formaatwijzigingsmethode",
-        "description": "Hoe het scherm op afstand de venstergrootte aanpast."
-      },
-      "resizeDisplayUpdate": "Weergave bijwerken",
-      "resizeReconnect": "Opnieuw verbinding maken",
-      "inherit": "Erven",
-      "on": "Op",
-      "off": "Uit",
-      "forceLossless": {
-        "label": "Krachtverliesloos",
-        "description": "Forceer verliesvrije beeldcodering (hogere kwaliteit, meer bandbreedte)"
-      },
-      "enableWallpaper": {
-        "label": "Behang",
-        "description": "Toon bureaubladachtergrond (uitschakelen verbetert de prestaties)"
-      },
-      "enableFontSmoothing": {
-        "label": "Lettertype-vloeiendheid",
-        "description": "Schakel ClearType-lettertypeweergave in"
-      },
-      "enableDesktopComposition": {
-        "label": "Bureaubladcompositie",
-        "description": "Schakel Aero-glaseffecten in"
-      },
-      "disableAudio": {
-        "label": "Geluid uitschakelen",
-        "description": "Demp alle audio van de externe sessie."
-      },
-      "enablePrinting": {
-        "label": "Afdrukken inschakelen",
-        "description": "Lokale printers doorverwijzen naar de externe sessie"
-      },
-      "enableDrive": {
-        "label": "Schakel schijfomleiding in",
-        "description": "Een lokale map toewijzen als schijfstation in de externe sessie."
-      },
-      "disableCopy": {
-        "label": "Kopiëren uitschakelen",
-        "description": "Voorkom het kopiëren van tekst vanuit de externe sessie."
-      },
-      "disablePaste": {
-        "label": "Plakken uitschakelen",
-        "description": "Voorkom dat tekst in de externe sessie wordt geplakt."
-      },
-      "group": "Standaardinstellingen voor Remote Desktop",
-      "colorDepth16": "16-bit",
-      "colorDepth24": "24-bit",
-      "colorDepth32": "32-bit"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Schakel Extern bureaublad in.",
-        "description": "Sta RDP-, VNC- en Telnet-verbindingen toe via guacd."
-      },
-      "guacdUrl": {
-        "label": "guacd URL",
-        "description": "Waar guacd luistert, als host:poort. De omgevingsvariabelen GUACD_URL, GUACD_HOST en GUACD_PORT overschrijven dit.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "RDP"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "RDP-poort"
-      },
-      "vncPort": {
-        "label": "VNC-poort"
-      },
-      "telnetPort": {
-        "label": "Telnet-poort"
-      },
-      "rdpSecurity": {
-        "label": "RDP-beveiligingsmodus"
-      },
-      "rdpIgnoreCert": {
-        "label": "Certificaatfouten negeren"
-      },
-      "guacamoleConfig": {
-        "label": "GUACD-instellingen"
-      },
-      "enableToolbar": {
-        "label": "Werkbalk voor extern bureaublad",
-        "description": "Toon de werkbalk in RDP-, VNC- en Telnet-sessies."
-      },
-      "displayGroup": "Weergave",
-      "displayDefaultsTab": "Extern bureaublad"
-    }
-  },
-  "palette": {
-    "connectRdp": "Verbinden via RDP",
-    "connectVnc": "Verbinden met VNC",
-    "connectTelnet": "Verbinden via Telnet"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Externe bureaubladsessies delen",
-      "description": "Zorg ervoor dat sessiedeling en samenwerkingsruimtes de RDP-, VNC- en Telnet-sessies van deze gebruiker aan anderen kunnen tonen."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Externe server vereist. Verbind een externe server in de instellingen om dit verbindingstype te gebruiken."
-  },
-  "plugin": {
-    "name": "Extern bureaublad"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/no_NO.json b/plugins/remote-desktop/locales/translated/no_NO.json
deleted file mode 100644
index ff3256314..000000000
--- a/plugins/remote-desktop/locales/translated/no_NO.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "Kobler til {{type}} økt...",
-    "checkingGuacd": "Sjekker tjenesten for eksternt skrivebord...",
-    "requestingToken": "Ber om {{type}} tilkoblingstoken...",
-    "openingSession": "Åpner {{type}} økt...",
-    "negotiating": "Forhandler {{type}} håndtrykk...",
-    "sessionReady": "{{type}} økt klar",
-    "connectionError": "Tilkoblingsfeil",
-    "connectionFailed": "Tilkobling mislyktes",
-    "failedToConnect": "Kunne ikke hente tilkoblingstoken",
-    "hostNotFound": "Verten ble ikke funnet",
-    "noHostSelected": "Ingen vert valgt",
-    "reconnect": "Koble til på nytt",
-    "retry": "Prøv igjen",
-    "guacdUnavailable": "Ekstern skrivebordstjeneste (guacd) er ikke tilgjengelig. Sørg for at guacd kjører, er tilgjengelig og riktig konfigurert i administratorinnstillingene.",
-    "credentialPromptTitle": "Skriv inn RDP-legitimasjon",
-    "credentialPromptDescription": "Denne verten er satt til å be om påloggingsinformasjon ved tilkobling. Disse brukes kun for denne økten og lagres ikke.",
-    "connect": "Koble til",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "Disk-filer",
-      "parent": "Foreldrekatalog",
-      "refresh": "Oppdater",
-      "empty": "Denne mappen er tom",
-      "listFailed": "Kunne ikke lese denne mappen",
-      "download": "Last ned",
-      "downloadFailed": "Kunne ikke laste ned {{name}}",
-      "upload": "Last opp filer",
-      "uploading": "Laster opp {{name}}...",
-      "uploaded": "Lastet opp {{name}}",
-      "uploadFailed": "Kunne ikke laste opp {{name}}",
-      "uploadDisabled": "Opplastinger er deaktivert for denne tilkoblingen",
-      "driveUnavailable": "Aktiver omdirigering av RDP-stasjoner før du laster opp filer",
-      "driveNotWritable": "guacd kan ikke skrive til stasjonsmappen. Sjekk GUACD_DRIVE_PATH (eller vertens stasjonsbane) og dens tillatelser.",
-      "dropToUpload": "Slipp filer for å laste opp"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (Låseskjerm)",
-      "winKey": "Windows-nøkkel",
-      "superL": "Super+L (Låseskjerm)",
-      "superKey": "Supernøkkel",
-      "super": "Super",
-      "cmdL": "Cmd+L (Låseskjerm)",
-      "cmdKey": "Kommandotast",
-      "cmd": "Kommando",
-      "ctrl": "Ctrl",
-      "alt": "Alt",
-      "shift": "Skifte",
-      "win": "Vinne",
-      "stickyActive": "{{key}} (låst – klikk for å slippe)",
-      "stickyInactive": "{{key}} (klikk for å låse)",
-      "esc": "Flykte",
-      "tab": "Fane",
-      "home": "Hjem",
-      "end": "Slutt",
-      "pageUp": "Side opp",
-      "pageDown": "Side ned",
-      "arrowUp": "Pil opp",
-      "arrowDown": "Pil ned",
-      "arrowLeft": "Pil venstre",
-      "arrowRight": "Pil høyre",
-      "fnToggle": "Funksjonstaster",
-      "reconnect": "Koble til økten på nytt",
-      "collapse": "Skjul verktøylinjen",
-      "expand": "Utvid verktøylinjen",
-      "dragHandle": "Dra for å flytte",
-      "hide": "Skjul for denne økten. For å deaktivere den permanent, åpne Vertsinnstillinger → Generelt → Tilkoblingsverktøylinje.",
-      "zoomIn": "Zoom inn",
-      "zoomOut": "Zoom ut",
-      "resetZoom": "Tilbakestill zoom",
-      "fitToScreen": "Tilpass til skjerm",
-      "switchToTrackpad": "Bytt til styreflatemodus (dra for å flytte markøren, trykk for å klikke)",
-      "switchToTouch": "Bytt til berøringsmodus (trykk direkte der du vil klikke)"
-    },
-    "disabled": "Eksternt skrivebord er slått av. En administrator kan slå det på i Innstillinger."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Åpnet i Windows Eksternt skrivebord",
-    "nativeRdpFailed": "Kunne ikke åpne Windows Eksternt skrivebord",
-    "openNativeRdp": "Åpne i Windows Eksternt skrivebord",
-    "guac": {
-      "toolbar": "Verktøylinjen",
-      "connection": "Tilkobling",
-      "authentication": "Autentisering",
-      "storedCredential": "Lagret legitimasjon",
-      "authMethod": "Autorisasjonsmetode",
-      "authTypeDirect": "Direkte",
-      "authTypeCredential": "Legitimasjon",
-      "authTypeNone": "Ingen",
-      "authTypeNoneDesc": "Ingen påloggingsinformasjon lagres. Du blir bedt om å oppgi brukernavn og passord hver gang du kobler til; de lagres ikke.",
-      "selectCredential": "Velg en legitimasjon...",
-      "connectionSettings": "Tilkoblingsinnstillinger",
-      "displaySettings": "Skjerminnstillinger",
-      "audioSettings": "Lydinnstillinger",
-      "rdpPerformance": "RDP-ytelse",
-      "deviceRedirection": "Enhetsomdirigering",
-      "session": "Økt",
-      "gateway": "Inngangsport",
-      "remoteApp": "Fjernapp",
-      "clipboard": "Utklippstavlen",
-      "sessionRecording": "Øktopptak",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "VNC-innstillinger",
-      "terminalSettings": "Terminalinnstillinger",
-      "rdpPort": "RDP-port",
-      "username": "Brukernavn",
-      "password": "Passord",
-      "passwordSaved": "Passord lagret, skriv inn for å endre",
-      "domain": "Domene",
-      "securityMode": "Sikkerhetsmodus",
-      "width": "Bredde",
-      "height": "Høyde",
-      "dpi": "DPI",
-      "clientName": "Klientnavn",
-      "initialProgram": "Innledende program",
-      "serverLayout": "Serveroppsett",
-      "timezone": "Tidssone",
-      "loadBalanceInfo": "Informasjon om lastbalanse / informasjonskapsler",
-      "loadBalanceInfoDesc": "RD Connection Broker-informasjonskapsel for lastbalansering på RDS-farm (f.eks. tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "guacd-proxy",
-      "guacdHostname": "guacd-vert",
-      "guacdHostnamePlaceholder": "Global standard",
-      "guacdPort": "guacd-porten",
-      "guacdProxyDesc": "Overstyr den globale guacd-forekomsten for denne tilkoblingen. La stå tomt for å bruke den globalt konfigurerte guacd-en.",
-      "gatewayHostname": "Gateway-vertsnavn",
-      "gatewayPort": "Gateway-porten",
-      "gatewayUsername": "Gateway-brukernavn",
-      "gatewayPassword": "Gateway-passord",
-      "gatewayDomain": "Gateway-domene",
-      "remoteAppProgram": "RemoteApp-programmet",
-      "workingDirectory": "Arbeidskatalog",
-      "arguments": "Argumenter",
-      "normalizeLineEndings": "Normaliser linjeavslutninger",
-      "macAddress": "MAC-adresse",
-      "broadcastAddress": "Kringkastingsadresse",
-      "udpPort": "UDP-port",
-      "waitTimeS": "Ventetid (s)",
-      "driveName": "Stasjonsnavn",
-      "drivePath": "Kjøresti",
-      "ignoreCertificate": "Ignorer sertifikat",
-      "ignoreCertificateDesc": "Tillat tilkoblinger til verter med selvsignerte sertifikater",
-      "forceLossless": "Tving tapsfri",
-      "forceLosslessDesc": "Tving frem tapsfri bildekoding (høyere kvalitet, mer båndbredde)",
-      "disableAudio": "Deaktiver lyd",
-      "disableAudioDesc": "Demp all lyd fra den eksterne økten",
-      "enableAudioInput": "Aktiver lydinngang (mikrofon)",
-      "enableAudioInputDesc": "Videresend den lokale mikrofonen til den eksterne økten",
-      "wallpaper": "Bakgrunn",
-      "wallpaperDesc": "Vis skrivebordsbakgrunn (deaktivering forbedrer ytelsen)",
-      "theming": "Temaer",
-      "themingDesc": "Aktiver visuelle temaer og stiler",
-      "fontSmoothing": "Skriftutjevning",
-      "fontSmoothingDesc": "Aktiver gjengivelse av ClearType-skrifttyper",
-      "fullWindowDrag": "Dra i hele vinduet",
-      "fullWindowDragDesc": "Vis vindusinnhold mens du drar",
-      "desktopComposition": "Skrivebordskomposisjon",
-      "desktopCompositionDesc": "Aktiver Aero Glass-effekter",
-      "menuAnimations": "Menyanimasjoner",
-      "menuAnimationsDesc": "Aktiver menyuttoning og lysbildeanimasjoner",
-      "disableBitmapCaching": "Deaktiver punktmap-hurtigbufring",
-      "disableBitmapCachingDesc": "Slå av bitmap-hurtigbufferen (kan hjelpe med feil)",
-      "disableOffscreenCaching": "Deaktiver mellomlagring utenfor skjermen",
-      "disableOffscreenCachingDesc": "Slå av hurtigbuffer utenfor skjermen",
-      "disableGlyphCaching": "Deaktiver glyff-caching",
-      "disableGlyphCachingDesc": "Slå av glyph-cache",
-      "enableGfx": "Aktiver GFX",
-      "enableGfxDesc": "Bruk RemoteFX-grafikkpipeline",
-      "enablePrinting": "Aktiver utskrift",
-      "enablePrintingDesc": "Omdiriger lokale skrivere til den eksterne økten",
-      "enableDriveRedirection": "Aktiver omdirigering av stasjoner",
-      "enableDriveRedirectionDesc": "Tilordne en lokal mappe som en stasjon i den eksterne økten",
-      "createDrivePath": "Opprett stasjonssti",
-      "createDrivePathDesc": "Opprett mappen automatisk hvis den ikke finnes",
-      "disableDownload": "Deaktiver nedlasting",
-      "disableDownloadDesc": "Forhindre nedlasting av filer fra den eksterne økten",
-      "disableUpload": "Deaktiver opplasting",
-      "disableUploadDesc": "Forhindre opplasting av filer til den eksterne økten",
-      "enableTouch": "Aktiver berøring",
-      "enableTouchDesc": "Aktiver videresending av berøringsinndata",
-      "consoleSession": "Konsolløkt",
-      "consoleSessionDesc": "Koble til konsollen (økt 0) i stedet for en ny økt",
-      "sendWolPacket": "Send WOL-pakke",
-      "sendWolPacketDesc": "Send en magisk pakke for å vekke denne verten før du kobler til",
-      "disableCopy": "Deaktiver kopiering",
-      "disableCopyDesc": "Forhindre kopiering av tekst fra den eksterne økten",
-      "disablePaste": "Deaktiver liming",
-      "disablePasteDesc": "Forhindre innliming av tekst i den eksterne økten",
-      "createPathIfMissing": "Opprett sti hvis den mangler",
-      "createPathIfMissingDesc": "Opprett opptaksmappen automatisk",
-      "excludeOutput": "Ekskluder utdata",
-      "excludeOutputDesc": "Ikke ta opp skjermutdata (kun metadata)",
-      "excludeMouse": "Utelukk mus",
-      "excludeMouseDesc": "Ikke opptak musebevegelser",
-      "includeKeystrokes": "Inkluder tastetrykk",
-      "includeKeystrokesDesc": "Ta opp rå tastetrykk i tillegg til skjermutdata",
-      "vncPort": "VNC-port",
-      "vncPassword": "VNC-passord",
-      "vncUsernameOptional": "Brukernavn (valgfritt)",
-      "vncLeaveBlank": "La stå tomt hvis det ikke er nødvendig",
-      "cursorMode": "Markørmodus",
-      "swapRedBlue": "Bytt rød/blå",
-      "swapRedBlueDesc": "Bytt om de røde og blå fargekanalene (rettar opp nokre fargeproblem)",
-      "readOnly": "Skrivebeskyttet",
-      "readOnlyDesc": "Vis fjernskjermen uten å sende noen input",
-      "telnetPort": "Telnet-port",
-      "terminalType": "Terminaltype",
-      "fontName": "Skriftnavn",
-      "fontSize": "Skriftstørrelse",
-      "colorScheme": "Fargeskjema",
-      "backspaceKey": "Tilbaketast",
-      "colorDepth": "Fargedybde",
-      "resizeMethod": "Endre størrelse-metoden",
-      "driveNamePlaceholder": "Termix Drive",
-      "options": {
-        "any": "Noen",
-        "auto": "Bil",
-        "nlaExtended": "NLA utvidet",
-        "color8": "8-bit",
-        "color16": "16-bit",
-        "color24": "24-bit",
-        "color32": "32-bit",
-        "displayUpdate": "Oppdatering av skjerm",
-        "reconnect": "Koble til på nytt",
-        "preserve": "Bevare",
-        "unix": "Unix (LF)",
-        "windows": "Windows (CRLF)",
-        "local": "Lokal",
-        "remote": "Fjern",
-        "failsafe": "feilsikker",
-        "blackOnWhite": "Svart på hvitt",
-        "whiteOnBlack": "Hvitt på svart",
-        "grayOnBlack": "Grått på svart",
-        "greenOnBlack": "Grønt på svart"
-      }
-    },
-    "remoteDesktop": "Eksternt skrivebord",
-    "tabRdp": "RDP",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "Virtuelt nettverk",
-    "unencryptedShell": "Ukryptert skall",
-    "remoteDesktopNotes": "Notater",
-    "userDefaultsNote": "Innstillinger du lar være uendret følger vertens standardinnstillinger.",
-    "connectionOriginNote": "I skrivebordsappen bruker RDP, VNC og Telnet den eksterne serveren med mindre verten er satt til Denne enheten, som trenger en GUACD som denne maskinen kan nå. Angi én i innstillingene for eksternt skrivebord, eller per vert under GUACD Proxy.",
-    "docsLink": "Vis dokumenter",
-    "connectionOriginGuacamoleNote": "RDP, VNC og Telnet bruker den eksterne serveren med mindre du velger «Denne enheten», som trenger en GUACD som denne maskinen kan nå. Angi én i GUACD URL-innstillingen, eller per vert under GUACD Proxy."
-  },
-  "onboarding": {
-    "feature_desktop": "Eksternt skrivebord",
-    "feature_desktop_desc": "Åpne RDP-, VNC- og Telnet-økter i en fane, på samme måte som SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Fargedybde",
-        "description": "Brukes for RDP-verter som lar den være på standardverdi."
-      },
-      "resizeMethod": {
-        "label": "Endre størrelse-metoden",
-        "description": "Hvordan den eksterne skjermen følger vindusstørrelsen."
-      },
-      "resizeDisplayUpdate": "Oppdatering av skjerm",
-      "resizeReconnect": "Koble til på nytt",
-      "inherit": "Arve",
-      "on": "På",
-      "off": "Av",
-      "forceLossless": {
-        "label": "Tving tapsfri",
-        "description": "Tving frem tapsfri bildekoding (høyere kvalitet, mer båndbredde)"
-      },
-      "enableWallpaper": {
-        "label": "Bakgrunn",
-        "description": "Vis skrivebordsbakgrunn (deaktivering forbedrer ytelsen)"
-      },
-      "enableFontSmoothing": {
-        "label": "Skriftutjevning",
-        "description": "Aktiver gjengivelse av ClearType-skrifttyper"
-      },
-      "enableDesktopComposition": {
-        "label": "Skrivebordskomposisjon",
-        "description": "Aktiver Aero-glasseffekter"
-      },
-      "disableAudio": {
-        "label": "Deaktiver lyd",
-        "description": "Demp all lyd fra den eksterne økten"
-      },
-      "enablePrinting": {
-        "label": "Aktiver utskrift",
-        "description": "Omdiriger lokale skrivere til den eksterne økten"
-      },
-      "enableDrive": {
-        "label": "Aktiver omdirigering av stasjoner",
-        "description": "Tilordne en lokal mappe som en stasjon i den eksterne økten"
-      },
-      "disableCopy": {
-        "label": "Deaktiver kopiering",
-        "description": "Forhindre kopiering av tekst fra den eksterne økten"
-      },
-      "disablePaste": {
-        "label": "Deaktiver liming",
-        "description": "Forhindre innliming av tekst i den eksterne økten"
-      },
-      "group": "Standardinnstillinger for eksternt skrivebord",
-      "colorDepth16": "16-bit",
-      "colorDepth24": "24-bit",
-      "colorDepth32": "32-bit"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Aktiver eksternt skrivebord",
-        "description": "Tillat RDP-, VNC- og Telnet-tilkoblinger gjennom guacd."
-      },
-      "guacdUrl": {
-        "label": "guacd-URL",
-        "description": "Der guacd lytter som host:port. Miljøvariablene GUACD_URL, GUACD_HOST og GUACD_PORT overstyrer dette.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "RDP"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "RDP-port"
-      },
-      "vncPort": {
-        "label": "VNC-port"
-      },
-      "telnetPort": {
-        "label": "Telnet-port"
-      },
-      "rdpSecurity": {
-        "label": "RDP-sikkerhetsmodus"
-      },
-      "rdpIgnoreCert": {
-        "label": "Ignorer sertifikatfeil"
-      },
-      "guacamoleConfig": {
-        "label": "guacd-innstillinger"
-      },
-      "enableToolbar": {
-        "label": "Verktøylinjen for eksternt skrivebord",
-        "description": "Vis verktøylinjen i RDP-, VNC- og Telnet-økter."
-      },
-      "displayGroup": "Utstilling",
-      "displayDefaultsTab": "Eksternt skrivebord"
-    }
-  },
-  "palette": {
-    "connectRdp": "Koble til RDP",
-    "connectVnc": "Koble til VNC",
-    "connectTelnet": "Koble til med Telnet"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Del eksterne skrivebordsøkter",
-      "description": "La øktdeling og samarbeidsrom vise denne brukerens RDP-, VNC- og Telnet-økter til andre."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Ekstern server kreves. Koble til en ekstern server i Innstillinger for å bruke denne tilkoblingstypen."
-  },
-  "plugin": {
-    "name": "Eksternt skrivebord"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/pl_PL.json b/plugins/remote-desktop/locales/translated/pl_PL.json
deleted file mode 100644
index f9070c67c..000000000
--- a/plugins/remote-desktop/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "Łączenie z sesją {{type}}...",
-    "checkingGuacd": "Sprawdzanie usługi pulpitu zdalnego...",
-    "requestingToken": "Żądanie tokena połączenia {{type}}...",
-    "openingSession": "Otwieranie sesji {{type}}...",
-    "negotiating": "Negocjowanie {{type}} uścisku dłoni...",
-    "sessionReady": "{{type}} sesja gotowa",
-    "connectionError": "Błąd połączenia",
-    "connectionFailed": "Połączenie nieudane",
-    "failedToConnect": "Nie udało się uzyskać tokena połączenia",
-    "hostNotFound": "Nie znaleziono hosta",
-    "noHostSelected": "Nie wybrano hosta",
-    "reconnect": "Połącz ponownie",
-    "retry": "Ponów",
-    "guacdUnavailable": "Usługa pulpitu zdalnego (guacd) jest niedostępna. Upewnij się, że usługa guacd jest uruchomiona, dostępna i poprawnie skonfigurowana w ustawieniach administratora.",
-    "credentialPromptTitle": "Wprowadź poświadczenia RDP",
-    "credentialPromptDescription": "Ten host jest ustawiony tak, aby pytać o poświadczenia przy łączeniu. Są używane tylko w tej sesji i nie są zapisywane.",
-    "connect": "Połączenie",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "Pliki dysku",
-      "parent": "Katalog nadrzędny",
-      "refresh": "Odśwież",
-      "empty": "Ten folder jest pusty",
-      "listFailed": "Nie udało się odczytać tego folderu",
-      "download": "Pobierz",
-      "downloadFailed": "Nie udało się pobrać {{name}}",
-      "upload": "Prześlij pliki",
-      "uploading": "Przesyłanie {{name}}...",
-      "uploaded": "Przesłano {{name}}",
-      "uploadFailed": "Nie udało się przesłać {{name}}",
-      "uploadDisabled": "Przesyłanie plików jest wyłączone dla tego połączenia",
-      "driveUnavailable": "Włącz przekierowanie dysku RDP przed przesłaniem plików",
-      "driveNotWritable": "guacd nie może zapisać do folderu dysku. Sprawdź zmienną GUACD_DRIVE_PATH (lub ścieżkę do dysku hosta) i jej uprawnienia.",
-      "dropToUpload": "Upuść pliki, aby je przesłać"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (zablokuj ekran)",
-      "winKey": "Klawisz Windows",
-      "superL": "Super+L (ekran blokady)",
-      "superKey": "Super klucz",
-      "super": "Super",
-      "cmdL": "Cmd+L (ekran blokady)",
-      "cmdKey": "Klawisz polecenia",
-      "cmd": "Polecenie",
-      "ctrl": "Ctrl",
-      "alt": "Alt",
-      "shift": "Shift",
-      "win": "Win",
-      "stickyActive": "{{key}} (zatrzaśnięty - kliknij, aby zwolnić)",
-      "stickyInactive": "{{key}} (kliknij, aby zatrzasnąć)",
-      "esc": "Esc",
-      "tab": "Tab",
-      "home": "Home",
-      "end": "End",
-      "pageUp": "Page Up",
-      "pageDown": "Page Down",
-      "arrowUp": "Strzałka w górę",
-      "arrowDown": "Strzałka w dół",
-      "arrowLeft": "Strzałka w lewo",
-      "arrowRight": "Strzałka w prawo",
-      "fnToggle": "Klawisze funkcyjne",
-      "reconnect": "Połącz sesję ponownie",
-      "collapse": "Zwiń pasek narzędzi",
-      "expand": "Rozwiń pasek narzędzi",
-      "dragHandle": "Przeciągnij, aby zmienić położenie",
-      "hide": "Ukryj na czas tej sesji. Aby trwale wyłączyć tę opcję, otwórz Ustawienia hosta → Ogólne → Pasek narzędzi połączenia.",
-      "zoomIn": "Powiększ",
-      "zoomOut": "Oddal",
-      "resetZoom": "Zresetuj powiększenie",
-      "fitToScreen": "Dopasuj do ekranu",
-      "switchToTrackpad": "Przełącz na tryb gładzika (przeciągnij, aby przesunąć kursor, dotknij, aby kliknąć)",
-      "switchToTouch": "Przełącz na tryb dotykowy (dotknij bezpośrednio miejsca, w którym chcesz kliknąć)"
-    },
-    "disabled": "Pulpit zdalny jest wyłączony. Administrator może go włączyć w Ustawieniach."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Otwarto w Pulpicie zdalnym systemu Windows",
-    "nativeRdpFailed": "Nie udało się otworzyć pulpitu zdalnego systemu Windows",
-    "openNativeRdp": "Otwórz w Pulpicie zdalnym systemu Windows",
-    "guac": {
-      "toolbar": "Pasek narzędzi",
-      "connection": "Połączenie",
-      "authentication": "Uwierzytelnianie",
-      "storedCredential": "Zapisane poświadczenie",
-      "authMethod": "Metoda uwierzytelniania",
-      "authTypeDirect": "Bezpośredni",
-      "authTypeCredential": "Poświadczenie",
-      "authTypeNone": "Brak",
-      "authTypeNoneDesc": "Żadne poświadczenia nie są przechowywane. Przy każdym połączeniu pojawi się prośba o nazwę użytkownika i hasło; nie są zapisywane.",
-      "selectCredential": "Wybierz poświadczenie...",
-      "connectionSettings": "Ustawienia połączenia",
-      "displaySettings": "Ustawienia wyświetlania",
-      "audioSettings": "Ustawienia audio",
-      "rdpPerformance": "Wydajność RDP",
-      "deviceRedirection": "Przekierowanie urządzenia",
-      "session": "Sesja",
-      "gateway": "Brama",
-      "remoteApp": "RemoteApp",
-      "clipboard": "Schowek",
-      "sessionRecording": "Nagrywanie sesji",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "Ustawienia VNC",
-      "terminalSettings": "Ustawienia terminala",
-      "rdpPort": "Port RDP",
-      "username": "Nazwa użytkownika",
-      "password": "Hasło",
-      "passwordSaved": "Hasło zapisane, wpisz, aby zmienić",
-      "domain": "Domena",
-      "securityMode": "Tryb bezpieczeństwa",
-      "width": "Szerokość",
-      "height": "Wysokość",
-      "dpi": "DPI",
-      "clientName": "Nazwa klienta",
-      "initialProgram": "Program początkowy",
-      "serverLayout": "Układ serwera",
-      "timezone": "Strefa czasowa",
-      "loadBalanceInfo": "Informacje o równoważeniu obciążenia / cookie",
-      "loadBalanceInfoDesc": "Plik cookie brokera połączeń usług pulpitu zdalnego do równoważenia obciążenia farmy usług pulpitu zdalnego (np. tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "Serwer proxy guacd",
-      "guacdHostname": "Host guacd",
-      "guacdHostnamePlaceholder": "Globalne ustawienie domyślne",
-      "guacdPort": "Port guacd",
-      "guacdProxyDesc": "Zastąp globalną instancję guacd dla tego połączenia. Pozostaw puste, aby użyć globalnie skonfigurowanego guacd.",
-      "gatewayHostname": "Nazwa hosta bramy",
-      "gatewayPort": "Port bramy",
-      "gatewayUsername": "Nazwa użytkownika bramy",
-      "gatewayPassword": "Hasło bramy",
-      "gatewayDomain": "Domena bramy",
-      "remoteAppProgram": "Program RemoteApp",
-      "workingDirectory": "Katalog roboczy",
-      "arguments": "Argumenty",
-      "normalizeLineEndings": "Normalizuj zakończenia linii",
-      "macAddress": "Adres MAC",
-      "broadcastAddress": "Adres rozgłoszeniowy",
-      "udpPort": "Port UDP",
-      "waitTimeS": "Czas oczekiwania (s)",
-      "driveName": "Nazwa dysku",
-      "drivePath": "Ścieżka dysku",
-      "ignoreCertificate": "Ignoruj certyfikat",
-      "ignoreCertificateDesc": "Zezwalaj na połączenia z hostami z certyfikatami samopodpisanymi",
-      "forceLossless": "Wymuś bezstratność",
-      "forceLosslessDesc": "Wymuś bezstratne kodowanie obrazu (wyższa jakość, większa przepustowość)",
-      "disableAudio": "Wyłącz dźwięk",
-      "disableAudioDesc": "Wycisz cały dźwięk z sesji zdalnej",
-      "enableAudioInput": "Włącz wejście audio (mikrofon)",
-      "enableAudioInputDesc": "Przekaż lokalny mikrofon do sesji zdalnej",
-      "wallpaper": "Tapeta",
-      "wallpaperDesc": "Pokaż tapetę pulpitu (wyłączenie poprawia wydajność)",
-      "theming": "Motywy",
-      "themingDesc": "Włącz motywy i style wizualne",
-      "fontSmoothing": "Wygładzanie czcionek",
-      "fontSmoothingDesc": "Włącz renderowanie czcionek ClearType",
-      "fullWindowDrag": "Przeciąganie pełnego okna",
-      "fullWindowDragDesc": "Pokaż zawartość okna podczas przeciągania",
-      "desktopComposition": "Kompozycja pulpitu",
-      "desktopCompositionDesc": "Włącz efekty Aero Glass",
-      "menuAnimations": "Animacje menu",
-      "menuAnimationsDesc": "Włącz animacje zanikania i wysuwania menu",
-      "disableBitmapCaching": "Wyłącz buforowanie bitmap",
-      "disableBitmapCachingDesc": "Wyłącz pamięć podręczną bitmap (może pomóc przy artefaktach)",
-      "disableOffscreenCaching": "Wyłącz buforowanie poza ekranem",
-      "disableOffscreenCachingDesc": "Wyłącz pamięć podręczną poza ekranem",
-      "disableGlyphCaching": "Wyłącz buforowanie glifów",
-      "disableGlyphCachingDesc": "Wyłącz pamięć podręczną glifów",
-      "enableGfx": "Włącz GFX",
-      "enableGfxDesc": "Użyj potoku graficznego RemoteFX",
-      "enablePrinting": "Włącz drukowanie",
-      "enablePrintingDesc": "Przekieruj drukarki lokalne do sesji zdalnej",
-      "enableDriveRedirection": "Włącz przekierowanie dysku",
-      "enableDriveRedirectionDesc": "Mapuj folder lokalny jako dysk w sesji zdalnej",
-      "createDrivePath": "Utwórz ścieżkę dysku",
-      "createDrivePathDesc": "Automatycznie utwórz folder, jeśli nie istnieje",
-      "disableDownload": "Wyłącz pobieranie",
-      "disableDownloadDesc": "Zapobiegaj pobieraniu plików z sesji zdalnej",
-      "disableUpload": "Wyłącz przesyłanie",
-      "disableUploadDesc": "Zapobiegaj przesyłaniu plików do sesji zdalnej",
-      "enableTouch": "Włącz dotyk",
-      "enableTouchDesc": "Włącz przekazywanie wejścia dotykowego",
-      "consoleSession": "Sesja konsoli",
-      "consoleSessionDesc": "Połącz się z konsolą (sesja 0) zamiast z nową sesją",
-      "sendWolPacket": "Wyślij pakiet WOL",
-      "sendWolPacketDesc": "Wyślij magic packet, aby obudzić tego hosta przed połączeniem",
-      "disableCopy": "Wyłącz kopiowanie",
-      "disableCopyDesc": "Zapobiegaj kopiowaniu tekstu z sesji zdalnej",
-      "disablePaste": "Wyłącz wklejanie",
-      "disablePasteDesc": "Zapobiegaj wklejaniu tekstu do sesji zdalnej",
-      "createPathIfMissing": "Utwórz ścieżkę, jeśli nie istnieje",
-      "createPathIfMissingDesc": "Automatycznie utwórz katalog nagrań",
-      "excludeOutput": "Wyklucz obraz",
-      "excludeOutputDesc": "Nie nagrywaj obrazu ekranu (tylko metadane)",
-      "excludeMouse": "Wyklucz mysz",
-      "excludeMouseDesc": "Nie nagrywaj ruchów myszy",
-      "includeKeystrokes": "Uwzględnij naciśnięcia klawiszy",
-      "includeKeystrokesDesc": "Rejestruj surowe naciśnięcia klawiszy oprócz obrazu ekranu",
-      "vncPort": "Port VNC",
-      "vncPassword": "Hasło VNC",
-      "vncUsernameOptional": "Nazwa użytkownika (opcjonalnie)",
-      "vncLeaveBlank": "Pozostaw puste, jeśli nie jest wymagane",
-      "cursorMode": "Tryb kursora",
-      "swapRedBlue": "Zamień czerwony/niebieski",
-      "swapRedBlueDesc": "Zamień kanały kolorów czerwonego i niebieskiego (rozwiązuje niektóre problemy z kolorami)",
-      "readOnly": "Tylko do odczytu",
-      "readOnlyDesc": "Oglądaj zdalny ekran bez wysyłania jakiegokolwiek wejścia",
-      "telnetPort": "Port Telnet",
-      "terminalType": "Typ terminala",
-      "fontName": "Nazwa czcionki",
-      "fontSize": "Rozmiar czcionki",
-      "colorScheme": "Schemat kolorów",
-      "backspaceKey": "Klawisz Backspace",
-      "colorDepth": "Głębia koloru",
-      "resizeMethod": "Metoda zmiany rozmiaru",
-      "driveNamePlaceholder": "Napęd Termix",
-      "options": {
-        "any": "Każdy",
-        "auto": "Auto",
-        "nlaExtended": "NLA rozszerzony",
-        "color8": "8-bit",
-        "color16": "16-bit",
-        "color24": "24-bit",
-        "color32": "32-bit",
-        "displayUpdate": "Aktualizacja ekranu",
-        "reconnect": "Połącz ponownie",
-        "preserve": "Utrzymywać",
-        "unix": "Unix (LF)",
-        "windows": "Okna (CRLF)",
-        "local": "Lokalne",
-        "remote": "Zdalny",
-        "failsafe": "bezpieczny w razie awarii",
-        "blackOnWhite": "Czarno na białym",
-        "whiteOnBlack": "Białe na czarnym",
-        "grayOnBlack": "Szary na czarnym",
-        "greenOnBlack": "Zielony na czarnym"
-      }
-    },
-    "remoteDesktop": "Pulpit zdalny",
-    "tabRdp": "RDP",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "Sieć wirtualna",
-    "unencryptedShell": "Niezaszyfrowana powłoka",
-    "remoteDesktopNotes": "Notatki",
-    "userDefaultsNote": "Ustawienia, które pozostawisz bez zmian, będą zgodne z ustawieniami domyślnymi Twojego hosta.",
-    "connectionOriginNote": "W aplikacji desktopowej RDP, VNC i Telnet korzystają ze zdalnego serwera, chyba że host jest ustawiony na „To urządzenie”, co wymaga identyfikatora GUACD, z którym ten komputer może się połączyć. Ustaw go w ustawieniach pulpitu zdalnego lub dla każdego hosta w sekcji Serwer proxy GUACD.",
-    "docsLink": "Zobacz dokumentację",
-    "connectionOriginGuacamoleNote": "RDP, VNC i Telnet korzystają ze zdalnego serwera, chyba że wybierzesz opcję „To urządzenie”, co wymaga identyfikatora GUACD, z którym ten komputer może się połączyć. Ustaw go w ustawieniu adresu URL GUACD lub dla każdego hosta w sekcji Serwer proxy GUACD."
-  },
-  "onboarding": {
-    "feature_desktop": "Zdalny pulpit",
-    "feature_desktop_desc": "Otwieraj sesje RDP, VNC i Telnet w karcie, tak samo jak SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Głębia koloru",
-        "description": "Używane w przypadku hostów RDP, które pozostawiają tę wartość domyślną."
-      },
-      "resizeMethod": {
-        "label": "Metoda zmiany rozmiaru",
-        "description": "W jaki sposób zdalny ekran dostosowuje się do rozmiaru okna."
-      },
-      "resizeDisplayUpdate": "Aktualizacja ekranu",
-      "resizeReconnect": "Połącz ponownie",
-      "inherit": "Dziedzicz",
-      "on": "Wł.",
-      "off": "Wył.",
-      "forceLossless": {
-        "label": "Wymuś bezstratność",
-        "description": "Wymuś bezstratne kodowanie obrazu (wyższa jakość, większa przepustowość)"
-      },
-      "enableWallpaper": {
-        "label": "Tapeta",
-        "description": "Pokaż tapetę pulpitu (wyłączenie poprawia wydajność)"
-      },
-      "enableFontSmoothing": {
-        "label": "Wygładzanie czcionek",
-        "description": "Włącz renderowanie czcionek ClearType"
-      },
-      "enableDesktopComposition": {
-        "label": "Kompozycja pulpitu",
-        "description": "Włącz efekty Aero Glass"
-      },
-      "disableAudio": {
-        "label": "Wyłącz dźwięk",
-        "description": "Wycisz cały dźwięk z sesji zdalnej"
-      },
-      "enablePrinting": {
-        "label": "Włącz drukowanie",
-        "description": "Przekieruj drukarki lokalne do sesji zdalnej"
-      },
-      "enableDrive": {
-        "label": "Włącz przekierowanie dysku",
-        "description": "Mapuj folder lokalny jako dysk w sesji zdalnej"
-      },
-      "disableCopy": {
-        "label": "Wyłącz kopiowanie",
-        "description": "Zapobiegaj kopiowaniu tekstu z sesji zdalnej"
-      },
-      "disablePaste": {
-        "label": "Wyłącz wklejanie",
-        "description": "Zapobiegaj wklejaniu tekstu do sesji zdalnej"
-      },
-      "group": "Domyślne ustawienia pulpitu zdalnego",
-      "colorDepth16": "16-bit",
-      "colorDepth24": "24-bit",
-      "colorDepth32": "32-bit"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Włącz pulpit zdalny",
-        "description": "Zezwalaj na połączenia RDP, VNC i Telnet przez guacd."
-      },
-      "guacdUrl": {
-        "label": "Adres URL guacd",
-        "description": "Miejsce, w którym nasłuchuje GUACD, jako host:port. Zmienne środowiskowe GUACD_URL, GUACD_HOST i GUACD_PORT zastępują to ustawienie.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "RDP"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "Port RDP"
-      },
-      "vncPort": {
-        "label": "Port VNC"
-      },
-      "telnetPort": {
-        "label": "Port Telnet"
-      },
-      "rdpSecurity": {
-        "label": "Tryb bezpieczeństwa RDP"
-      },
-      "rdpIgnoreCert": {
-        "label": "Ignoruj błędy certyfikatu"
-      },
-      "guacamoleConfig": {
-        "label": "ustawienia GUACD"
-      },
-      "enableToolbar": {
-        "label": "Pasek narzędzi pulpitu zdalnego",
-        "description": "Wyświetla pasek narzędzi w sesjach RDP, VNC i Telnet."
-      },
-      "displayGroup": "Wyświetlanie",
-      "displayDefaultsTab": "Pulpit zdalny"
-    }
-  },
-  "palette": {
-    "connectRdp": "Połącz się z RDP",
-    "connectVnc": "Połącz się z VNC",
-    "connectTelnet": "Połącz się przez Telnet"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Udostępniaj sesje pulpitu zdalnego",
-      "description": "Zezwól na udostępnianie sesji i współpracę w pokojach, aby sesje RDP, VNC i Telnet tego użytkownika były widoczne dla innych użytkowników."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Wymagany jest serwer zdalny. Połącz się z serwerem zdalnym w Ustawieniach, aby korzystać z tego typu połączenia."
-  },
-  "plugin": {
-    "name": "Pulpit zdalny"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/pt_BR.json b/plugins/remote-desktop/locales/translated/pt_BR.json
deleted file mode 100644
index 4fe26c8d3..000000000
--- a/plugins/remote-desktop/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "Conectando à sessão {{type}}...",
-    "checkingGuacd": "Verificando o serviço de área de trabalho remota...",
-    "requestingToken": "Solicitando token de conexão {{type}}...",
-    "openingSession": "Abrindo {{type}} sessão...",
-    "negotiating": "Negotiating {{type}} handshake...",
-    "sessionReady": "{{type}} sessão pronta",
-    "connectionError": "Erro de conexão",
-    "connectionFailed": "Falha na conexão",
-    "failedToConnect": "Falha ao obter o token de conexão",
-    "hostNotFound": "Host não encontrado",
-    "noHostSelected": "Nenhum host selecionado",
-    "reconnect": "Reconectar",
-    "retry": "Tentar novamente",
-    "guacdUnavailable": "O serviço de área de trabalho remota (guacd) não está disponível. Certifique-se de que o guacd esteja em execução, acessível e configurado corretamente nas configurações de administrador.",
-    "credentialPromptTitle": "Insira as credenciais RDP",
-    "credentialPromptDescription": "Este host está configurado para solicitar credenciais ao conectar. Elas são usadas apenas para esta sessão e não são salvas.",
-    "connect": "Conectar",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "Arquivos do Drive",
-      "parent": "Diretório pai",
-      "refresh": "Atualizar",
-      "empty": "Esta pasta está vazia",
-      "listFailed": "Não foi possível ler esta pasta.",
-      "download": "Download",
-      "downloadFailed": "Falha ao baixar {{name}}",
-      "upload": "Carregar arquivos",
-      "uploading": "Carregando {{name}}...",
-      "uploaded": "Enviado {{name}}",
-      "uploadFailed": "Falha ao carregar {{name}}",
-      "uploadDisabled": "Os uploads estão desativados para esta conexão.",
-      "driveUnavailable": "Ative o redirecionamento de unidade RDP antes de enviar arquivos.",
-      "driveNotWritable": "O guacd não consegue gravar na pasta da unidade. Verifique a variável de ambiente GUACD_DRIVE_PATH (ou o caminho da unidade do host) e suas permissões.",
-      "dropToUpload": "Arraste e solte os arquivos para fazer o upload."
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (Bloquear tela)",
-      "winKey": "Tecla do Windows",
-      "superL": "Super+L (Tela de bloqueio)",
-      "superKey": "Super Chave",
-      "super": "Super",
-      "cmdL": "Cmd+L (Bloquear tela)",
-      "cmdKey": "Tecla de comando",
-      "cmd": "Comando",
-      "ctrl": "Ctrl",
-      "alt": "Alternativa",
-      "shift": "Mudança",
-      "win": "Ganhar",
-      "stickyActive": "{{key}} (travado - clique para liberar)",
-      "stickyInactive": "{{key}} (clique para travar)",
-      "esc": "Escapar",
-      "tab": "Aba",
-      "home": "Inicio",
-      "end": "Fim",
-      "pageUp": "Página acima",
-      "pageDown": "Página abaixo",
-      "arrowUp": "Seta para cima",
-      "arrowDown": "Seta para baixo",
-      "arrowLeft": "Seta para a esquerda",
-      "arrowRight": "Seta para a direita",
-      "fnToggle": "Teclas de função",
-      "reconnect": "Sessão de reconexão",
-      "collapse": "Recolher barra de ferramentas",
-      "expand": "Expandir barra de ferramentas",
-      "dragHandle": "Arraste para reposicionar",
-      "hide": "Ocultar para esta sessão. Para desativá-lo permanentemente, abra Configurações do Host → Geral → Barra de Ferramentas de Conexão.",
-      "zoomIn": "Ampliar",
-      "zoomOut": "Diminuir o zoom",
-      "resetZoom": "Redefinir zoom",
-      "fitToScreen": "Ajustar à tela",
-      "switchToTrackpad": "Alternar para o modo trackpad (arraste para mover o cursor, toque para clicar)",
-      "switchToTouch": "Mude para o modo de toque (toque diretamente onde deseja clicar)."
-    },
-    "disabled": "A Área de Trabalho Remota está desativada. Um administrador pode ativá-la nas Configurações."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Aberto na Área de Trabalho Remota do Windows",
-    "nativeRdpFailed": "Falha ao abrir a Área de Trabalho Remota do Windows",
-    "openNativeRdp": "Abrir no Windows Remote Desktop",
-    "guac": {
-      "toolbar": "Barra de ferramentas",
-      "connection": "Conexão",
-      "authentication": "Autenticação",
-      "storedCredential": "Credencial Armazenado",
-      "authMethod": "Método de Autenticação",
-      "authTypeDirect": "Direto",
-      "authTypeCredential": "Credencial",
-      "authTypeNone": "Nenhum",
-      "authTypeNoneDesc": "Nenhuma credencial é armazenada. Você será solicitado a inserir um nome de usuário e uma senha sempre que se conectar; eles não são salvos.",
-      "selectCredential": "Selecione uma credencial...",
-      "connectionSettings": "Configurações de conexão",
-      "displaySettings": "Configurações de exibição",
-      "audioSettings": "Configurações de áudio",
-      "rdpPerformance": "Desempenho do RDP",
-      "deviceRedirection": "Redirecionamento de Dispositivos",
-      "session": "Sessão",
-      "gateway": "Portal",
-      "remoteApp": "Aplicativo remoto",
-      "clipboard": "Área de transferência",
-      "sessionRecording": "Gravação da sessão",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "Configurações VNC",
-      "terminalSettings": "Configurações do terminal",
-      "rdpPort": "Porta RDP",
-      "username": "Nome de usuário",
-      "password": "Senha",
-      "passwordSaved": "Senha salva, digite para alterar",
-      "domain": "Domínio",
-      "securityMode": "Modo de segurança",
-      "width": "Largura",
-      "height": "Altura",
-      "dpi": "DPI",
-      "clientName": "Nome do cliente",
-      "initialProgram": "Programa Inicial",
-      "serverLayout": "Layout do servidor",
-      "timezone": "Fuso horário",
-      "loadBalanceInfo": "Informações de balanceamento de carga / Cookies",
-      "loadBalanceInfoDesc": "Cookie do agente de conexão RD para balanceamento de carga do farm RDS (ex: tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "Proxy guacd",
-      "guacdHostname": "guacd Host",
-      "guacdHostnamePlaceholder": "Padrão global",
-      "guacdPort": "Porto guacd",
-      "guacdProxyDesc": "Substitua a instância global do guacd para esta conexão. Deixe em branco para usar o guacd configurado globalmente.",
-      "gatewayHostname": "Nome do host do gateway",
-      "gatewayPort": "Porta de entrada",
-      "gatewayUsername": "Nome de usuário do gateway",
-      "gatewayPassword": "Senha do Gateway",
-      "gatewayDomain": "Domínio de entrada",
-      "remoteAppProgram": "Programa RemoteApp",
-      "workingDirectory": "Diretório de Trabalho",
-      "arguments": "Argumentos",
-      "normalizeLineEndings": "Normalizar as quebras de linha",
-      "macAddress": "Endereço MAC",
-      "broadcastAddress": "Discurso de transmissão",
-      "udpPort": "Porta UDP",
-      "waitTimeS": "Tempo de espera (s)",
-      "driveName": "Nome da unidade",
-      "drivePath": "Percurso de condução",
-      "ignoreCertificate": "Ignorar certificado",
-      "ignoreCertificateDesc": "Permitir conexões a hosts com certificados autoassinados",
-      "forceLossless": "Força sem perdas",
-      "forceLosslessDesc": "Forçar codificação de imagem sem perdas (maior qualidade, mais largura de banda)",
-      "disableAudio": "Desativar áudio",
-      "disableAudioDesc": "Silenciar todo o áudio da sessão remota.",
-      "enableAudioInput": "Ativar entrada de áudio (microfone)",
-      "enableAudioInputDesc": "Encaminhar o microfone local para a sessão remota.",
-      "wallpaper": "Papel de parede",
-      "wallpaperDesc": "Exibir papel de parede da área de trabalho (desativar melhora o desempenho)",
-      "theming": "Tematização",
-      "themingDesc": "Ativar temas e estilos visuais",
-      "fontSmoothing": "Suavização de fontes",
-      "fontSmoothingDesc": "Ativar renderização de fontes ClearType",
-      "fullWindowDrag": "Arrastar janela inteira",
-      "fullWindowDragDesc": "Exibir o conteúdo da janela enquanto arrasta",
-      "desktopComposition": "Composição de mesa",
-      "desktopCompositionDesc": "Ative os efeitos de vidro Aero",
-      "menuAnimations": "Animações de menu",
-      "menuAnimationsDesc": "Ativar animações de transição e deslizamento do menu",
-      "disableBitmapCaching": "Desativar o cache de bitmaps",
-      "disableBitmapCachingDesc": "Desative o cache de bitmaps (pode ajudar a resolver problemas técnicos).",
-      "disableOffscreenCaching": "Desativar o cache fora da tela",
-      "disableOffscreenCachingDesc": "Desative o cache fora da tela",
-      "disableGlyphCaching": "Desativar o cache de glifos",
-      "disableGlyphCachingDesc": "Desative o cache de glifos",
-      "enableGfx": "Ativar GFX",
-      "enableGfxDesc": "Utilize o pipeline gráfico RemoteFX",
-      "enablePrinting": "Habilitar impressão",
-      "enablePrintingDesc": "Redirecionar impressoras locais para a sessão remota.",
-      "enableDriveRedirection": "Ativar o redirecionamento de unidades",
-      "enableDriveRedirectionDesc": "Mapear uma pasta local como uma unidade na sessão remota.",
-      "createDrivePath": "Criar caminho de unidade",
-      "createDrivePathDesc": "Criar automaticamente a pasta caso ela não exista.",
-      "disableDownload": "Desativar download",
-      "disableDownloadDesc": "Impedir o download de arquivos da sessão remota.",
-      "disableUpload": "Desativar o upload",
-      "disableUploadDesc": "Impedir o envio de arquivos para a sessão remota.",
-      "enableTouch": "Ativar toque",
-      "enableTouchDesc": "Ativar o encaminhamento de entrada por toque",
-      "consoleSession": "Sessão do console",
-      "consoleSessionDesc": "Conecte-se ao console (sessão 0) em vez de uma nova sessão.",
-      "sendWolPacket": "Enviar pacote WOL",
-      "sendWolPacketDesc": "Envie um pacote mágico para ativar este host antes de se conectar.",
-      "disableCopy": "Desativar cópia",
-      "disableCopyDesc": "Impedir a cópia de texto da sessão remota",
-      "disablePaste": "Desativar colagem",
-      "disablePasteDesc": "Impedir a colagem de texto na sessão remota.",
-      "createPathIfMissing": "Criar caminho se estiver faltando",
-      "createPathIfMissingDesc": "Criar automaticamente o diretório de gravação",
-      "excludeOutput": "Excluir saída",
-      "excludeOutputDesc": "Não gravar a saída da tela (apenas metadados).",
-      "excludeMouse": "Excluir o rato",
-      "excludeMouseDesc": "Não grave movimentos do mouse",
-      "includeKeystrokes": "Incluir teclas pressionadas",
-      "includeKeystrokesDesc": "Registre as teclas digitadas em sua forma original, além da saída na tela.",
-      "vncPort": "Porta VNC",
-      "vncPassword": "Senha VNC",
-      "vncUsernameOptional": "Nome de usuário (opcional)",
-      "vncLeaveBlank": "Deixe em branco se não for necessário.",
-      "cursorMode": "Modo Cursor",
-      "swapRedBlue": "Trocar Vermelho/Azul",
-      "swapRedBlueDesc": "Trocar os canais de cor vermelho e azul resolve alguns problemas de cor.",
-      "readOnly": "Somente leitura",
-      "readOnlyDesc": "Visualize a tela remota sem enviar nenhum comando.",
-      "telnetPort": "Porta Telnet",
-      "terminalType": "Tipo de terminal",
-      "fontName": "Nome da fonte",
-      "fontSize": "Tamanho da Fonte",
-      "colorScheme": "Esquema de cores",
-      "backspaceKey": "Tecla Backspace",
-      "colorDepth": "Profundidade de cor",
-      "resizeMethod": "Método de redimensionamento",
-      "driveNamePlaceholder": "Termix Drive",
-      "options": {
-        "any": "Qualquer",
-        "auto": "Auto",
-        "nlaExtended": "NLA Estendido",
-        "color8": "8 bits",
-        "color16": "16 bits",
-        "color24": "24 bits",
-        "color32": "32 bits",
-        "displayUpdate": "Atualização de exibição",
-        "reconnect": "Reconectar",
-        "preserve": "Preservar",
-        "unix": "Unix (LF)",
-        "windows": "Windows (CRLF)",
-        "local": "Local",
-        "remote": "Remoto",
-        "failsafe": "segurança contra falhas",
-        "blackOnWhite": "Preto sobre branco",
-        "whiteOnBlack": "Branco sobre preto",
-        "grayOnBlack": "Cinza sobre preto",
-        "greenOnBlack": "Verde sobre preto"
-      }
-    },
-    "remoteDesktop": "Área de trabalho remota",
-    "tabRdp": "RDP",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "Rede Virtual",
-    "unencryptedShell": "Shell não criptografado",
-    "remoteDesktopNotes": "Notas",
-    "userDefaultsNote": "As configurações que você deixar inalteradas seguirão as configurações padrão do seu host.",
-    "connectionOriginNote": "No aplicativo para desktop, RDP, VNC e Telnet usam o servidor remoto, a menos que o host esteja configurado como \"Este dispositivo\", o que requer um proxy guacd que esta máquina possa acessar. Defina um nas configurações da Área de Trabalho Remota ou por host em \"Proxy guacd\".",
-    "docsLink": "Documentação",
-    "connectionOriginGuacamoleNote": "RDP, VNC e Telnet usam o servidor remoto, a menos que você selecione \"Este dispositivo\", que requer um guacd que esta máquina possa acessar. Defina um nas configurações de URL do guacd ou por host em Proxy do guacd."
-  },
-  "onboarding": {
-    "feature_desktop": "Área de trabalho remota",
-    "feature_desktop_desc": "Abra sessões RDP, VNC e Telnet em uma aba, da mesma forma que o SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Profundidade de cor",
-        "description": "Usado para hosts RDP que o deixam na configuração padrão."
-      },
-      "resizeMethod": {
-        "label": "Método de redimensionamento",
-        "description": "Como a tela remota acompanha o tamanho da janela."
-      },
-      "resizeDisplayUpdate": "Atualização de exibição",
-      "resizeReconnect": "Reconectar",
-      "inherit": "Herdar",
-      "on": "Sobre",
-      "off": "Desligado",
-      "forceLossless": {
-        "label": "Força sem perdas",
-        "description": "Forçar codificação de imagem sem perdas (maior qualidade, mais largura de banda)"
-      },
-      "enableWallpaper": {
-        "label": "Papel de parede",
-        "description": "Exibir papel de parede da área de trabalho (desativar melhora o desempenho)"
-      },
-      "enableFontSmoothing": {
-        "label": "Suavização de fontes",
-        "description": "Ativar renderização de fontes ClearType"
-      },
-      "enableDesktopComposition": {
-        "label": "Composição de mesa",
-        "description": "Ative os efeitos de vidro Aero"
-      },
-      "disableAudio": {
-        "label": "Desativar áudio",
-        "description": "Silenciar todo o áudio da sessão remota."
-      },
-      "enablePrinting": {
-        "label": "Habilitar impressão",
-        "description": "Redirecionar impressoras locais para a sessão remota."
-      },
-      "enableDrive": {
-        "label": "Ativar o redirecionamento de unidades",
-        "description": "Mapear uma pasta local como uma unidade na sessão remota."
-      },
-      "disableCopy": {
-        "label": "Desativar cópia",
-        "description": "Impedir a cópia de texto da sessão remota"
-      },
-      "disablePaste": {
-        "label": "Desativar colagem",
-        "description": "Impedir a colagem de texto na sessão remota."
-      },
-      "group": "Configurações padrão da Área de Trabalho Remota",
-      "colorDepth16": "16 bits",
-      "colorDepth24": "24 bits",
-      "colorDepth32": "32 bits"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Habilitar Área de Trabalho Remota",
-        "description": "Permitir conexões RDP, VNC e Telnet através do guacd."
-      },
-      "guacdUrl": {
-        "label": "URL do guacd",
-        "description": "O local onde o guacd está escutando é definido como host:porta. As variáveis de ambiente GUACD_URL, GUACD_HOST e GUACD_PORT têm precedência sobre isso.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "RDP"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "Porta RDP"
-      },
-      "vncPort": {
-        "label": "Porta VNC"
-      },
-      "telnetPort": {
-        "label": "porta Telnet"
-      },
-      "rdpSecurity": {
-        "label": "Modo de segurança RDP"
-      },
-      "rdpIgnoreCert": {
-        "label": "Ignorar erros de certificado"
-      },
-      "guacamoleConfig": {
-        "label": "configurações do guacd"
-      },
-      "enableToolbar": {
-        "label": "Barra de ferramentas da área de trabalho remota",
-        "description": "Exibir a barra de ferramentas em sessões RDP, VNC e Telnet."
-      },
-      "displayGroup": "Mostrar",
-      "displayDefaultsTab": "Área de trabalho remota"
-    }
-  },
-  "palette": {
-    "connectRdp": "Conectar com RDP",
-    "connectVnc": "Conecte-se com VNC",
-    "connectTelnet": "Conecte-se com Telnet"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Compartilhar sessões de área de trabalho remota",
-      "description": "Permitir que o compartilhamento de sessões e as salas de colaboração mostrem as sessões RDP, VNC e Telnet deste usuário para outros usuários."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "É necessário um servidor remoto. Conecte um servidor remoto nas Configurações para usar este tipo de conexão."
-  },
-  "plugin": {
-    "name": "Área de trabalho remota"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/pt_PT.json b/plugins/remote-desktop/locales/translated/pt_PT.json
deleted file mode 100644
index 4573dcc7b..000000000
--- a/plugins/remote-desktop/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "A ligar à sessão {{type}}...",
-    "checkingGuacd": "Verificação do serviço de ambiente de trabalho remoto...",
-    "requestingToken": "A solicitar token de ligação {{type}}...",
-    "openingSession": "Abertura {{type}} sessão...",
-    "negotiating": "Negotiating {{type}} handshake...",
-    "sessionReady": "{{type}} sessão pronta",
-    "connectionError": "Erro de ligação",
-    "connectionFailed": "Falha na ligação",
-    "failedToConnect": "Falha ao obter o token de ligação",
-    "hostNotFound": "Servidor não encontrado",
-    "noHostSelected": "Nenhum servidor selecionado",
-    "reconnect": "Reconectar",
-    "retry": "Repetir",
-    "guacdUnavailable": "O serviço de ambiente de trabalho remoto (guacd) não está disponível. Certifique-se de que o guacd está em execução, acessível e devidamente configurado nas definições de administração.",
-    "credentialPromptTitle": "Introduza as credenciais RDP",
-    "credentialPromptDescription": "Este host está configurado para solicitar credenciais ao ligar. São utilizadas apenas para esta sessão e não são guardadas.",
-    "connect": "Ligar",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "Arquivos do Drive",
-      "parent": "Diretório pai",
-      "refresh": "Atualizar",
-      "empty": "Esta pasta está vazia",
-      "listFailed": "Não foi possível ler esta pasta.",
-      "download": "Descarregar",
-      "downloadFailed": "Falha ao descarregar {{name}}",
-      "upload": "Carregar ficheiros",
-      "uploading": "A enviar {{name}}...",
-      "uploaded": "Enviado {{name}}",
-      "uploadFailed": "Falha ao carregar {{name}}",
-      "uploadDisabled": "Os uploads estão desativados para esta ligação.",
-      "driveUnavailable": "Ative o redireccionamento da unidade RDP antes de enviar ficheiros.",
-      "driveNotWritable": "O guacd não consegue escrever na pasta da unidade. Verifique a variável de ambiente GUACD_DRIVE_PATH (ou o caminho da unidade do host) e as suas permissões.",
-      "dropToUpload": "Arraste e largue os ficheiros para fazer o upload."
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (Bloquear ecrã)",
-      "winKey": "Tecla Windows",
-      "superL": "Super+L (Ecrã de bloqueio)",
-      "superKey": "Super Chave",
-      "super": "Super",
-      "cmdL": "Cmd+L (Bloquear ecrã)",
-      "cmdKey": "Tecla de comando",
-      "cmd": "Comando",
-      "ctrl": "Ctrl",
-      "alt": "Alt",
-      "shift": "Shift",
-      "win": "Win",
-      "stickyActive": "{{key}} (bloqueado - clique para libertar)",
-      "stickyInactive": "{{key}} (clique para bloquear)",
-      "esc": "Escape",
-      "tab": "Tab",
-      "home": "Home",
-      "end": "Fim",
-      "pageUp": "Page Up",
-      "pageDown": "Page Down",
-      "arrowUp": "Seta para Cima",
-      "arrowDown": "Seta para Baixo",
-      "arrowLeft": "Seta para a Esquerda",
-      "arrowRight": "Seta para a Direita",
-      "fnToggle": "Teclas de Função",
-      "reconnect": "Reconectar Sessão",
-      "collapse": "Recolher barra",
-      "expand": "Expandir barra",
-      "dragHandle": "Arraste para reposicionar",
-      "hide": "Ocultar para esta sessão. Para o desativar permanentemente, abra as Definições do Host → Geral → Barra de Ferramentas de Ligação.",
-      "zoomIn": "Ampliar",
-      "zoomOut": "Diminuir o zoom",
-      "resetZoom": "Redefinir zoom",
-      "fitToScreen": "Ajustar ao ecrã",
-      "switchToTrackpad": "Mudar para o modo trackpad (arraste para mover o cursor, toque para clicar)",
-      "switchToTouch": "Mude para o modo de toque (toque diretamente onde pretende clicar)."
-    },
-    "disabled": "A Área de Trabalho Remota está desativada. Um administrador pode ativá-la nas Definições."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Aberto na Área de Trabalho Remota do Windows",
-    "nativeRdpFailed": "Falha ao abrir a Área de Trabalho Remota do Windows",
-    "openNativeRdp": "Abrir no Windows Remote Desktop",
-    "guac": {
-      "toolbar": "Barra de ferramentas",
-      "connection": "Ligação",
-      "authentication": "Autenticação",
-      "storedCredential": "Credencial Armazenada",
-      "authMethod": "Método de Autenticação",
-      "authTypeDirect": "Direta",
-      "authTypeCredential": "Credencial",
-      "authTypeNone": "Nenhuma",
-      "authTypeNoneDesc": "Nenhuma credencial é armazenada. Ser-lhe-á pedido que insira um nome de utilizador e uma senha sempre que se conectar; não são salvos.",
-      "selectCredential": "Selecionar uma credencial...",
-      "connectionSettings": "Definições de Ligação",
-      "displaySettings": "Definições de Ecrã",
-      "audioSettings": "Definições de Áudio",
-      "rdpPerformance": "Desempenho do RDP",
-      "deviceRedirection": "Redirecionamento de Dispositivos",
-      "session": "Sessão",
-      "gateway": "Gateway",
-      "remoteApp": "RemoteApp",
-      "clipboard": "Área de Transferência",
-      "sessionRecording": "Gravação de Sessão",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "Definições VNC",
-      "terminalSettings": "Definições do Terminal",
-      "rdpPort": "Porta RDP",
-      "username": "Nome de utilizador",
-      "password": "Palavra-passe",
-      "passwordSaved": "Palavra-passe guardada, digite para alterar",
-      "domain": "Domínio",
-      "securityMode": "Modo de segurança",
-      "width": "Largura",
-      "height": "Altura",
-      "dpi": "DPI",
-      "clientName": "Nome do cliente",
-      "initialProgram": "Programa inicial",
-      "serverLayout": "Layout do servidor",
-      "timezone": "Fuso horário",
-      "loadBalanceInfo": "Informação de balanceamento de carga / Cookie",
-      "loadBalanceInfoDesc": "Cookie do RD Connection Broker para balanceamento de carga em farms RDS (ex: tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "Proxy guacd",
-      "guacdHostname": "Host guacd",
-      "guacdHostnamePlaceholder": "Padrão global",
-      "guacdPort": "Porta guacd",
-      "guacdProxyDesc": "Substituir a instância guacd global para esta ligação. Deixe em branco para usar o guacd configurado globalmente.",
-      "gatewayHostname": "Nome de host do gateway",
-      "gatewayPort": "Porta do gateway",
-      "gatewayUsername": "Nome de utilizador do gateway",
-      "gatewayPassword": "Palavra-passe do gateway",
-      "gatewayDomain": "Domínio do gateway",
-      "remoteAppProgram": "Programa RemoteApp",
-      "workingDirectory": "Diretório de trabalho",
-      "arguments": "Argumentos",
-      "normalizeLineEndings": "Normalizar fins de linha",
-      "macAddress": "Endereço MAC",
-      "broadcastAddress": "Endereço de broadcast",
-      "udpPort": "Porta UDP",
-      "waitTimeS": "Tempo de Espera (s)",
-      "driveName": "Nome da Unidade",
-      "drivePath": "Caminho da Unidade",
-      "ignoreCertificate": "Ignorar Certificado",
-      "ignoreCertificateDesc": "Permitir ligações a hosts com certificados auto-assinados",
-      "forceLossless": "Forçar sem perdas",
-      "forceLosslessDesc": "Forçar codificação de imagem sem perdas (maior qualidade, mais largura de banda)",
-      "disableAudio": "Desativar Áudio",
-      "disableAudioDesc": "Silenciar todo o áudio da sessão remota",
-      "enableAudioInput": "Ativar Entrada de Áudio (Microfone)",
-      "enableAudioInputDesc": "Encaminhar microfone local para a sessão remota",
-      "wallpaper": "Fundo de ecrã",
-      "wallpaperDesc": "Mostrar fundo de ecrã (desativar melhora o desempenho)",
-      "theming": "Temas",
-      "themingDesc": "Ativar temas e estilos visuais",
-      "fontSmoothing": "Suavização de Fontes",
-      "fontSmoothingDesc": "Ativar renderização de fontes ClearType",
-      "fullWindowDrag": "Arrasto de Janela Completo",
-      "fullWindowDragDesc": "Mostrar conteúdo da janela ao arrastar",
-      "desktopComposition": "Composição do ambiente de trabalho",
-      "desktopCompositionDesc": "Ativar efeitos de transparência Aero",
-      "menuAnimations": "Animações de Menu",
-      "menuAnimationsDesc": "Ativar animações de desvanecimento e deslizamento de menus",
-      "disableBitmapCaching": "Desativar cache de bitmaps",
-      "disableBitmapCachingDesc": "Desativar a cache de bitmaps (pode ajudar com falhas)",
-      "disableOffscreenCaching": "Desativar cache fora do ecrã",
-      "disableOffscreenCachingDesc": "Desativar a cache fora do ecrã",
-      "disableGlyphCaching": "Desativar cache de glifos",
-      "disableGlyphCachingDesc": "Desativar a cache de glifos",
-      "enableGfx": "Ativar GFX",
-      "enableGfxDesc": "Usar pipeline gráfico RemoteFX",
-      "enablePrinting": "Ativar Impressão",
-      "enablePrintingDesc": "Redirecionar impressoras locais para a sessão remota",
-      "enableDriveRedirection": "Ativar Redirecionamento de Unidades",
-      "enableDriveRedirectionDesc": "Mapear uma pasta local como unidade na sessão remota",
-      "createDrivePath": "Criar Caminho de Unidade",
-      "createDrivePathDesc": "Criar automaticamente a pasta se não existir",
-      "disableDownload": "Desativar Download",
-      "disableDownloadDesc": "Impedir o download de ficheiros da sessão remota",
-      "disableUpload": "Desativar Upload",
-      "disableUploadDesc": "Impedir o envio de ficheiros para a sessão remota",
-      "enableTouch": "Ativar Toque",
-      "enableTouchDesc": "Ativar o reencaminhamento de entrada tátil",
-      "consoleSession": "Sessão de Consola",
-      "consoleSessionDesc": "Ligar à consola (sessão 0) em vez de uma nova sessão",
-      "sendWolPacket": "Enviar Pacote WOL",
-      "sendWolPacketDesc": "Enviar um pacote mágico para despertar este host antes de ligar",
-      "disableCopy": "Desativar Cópia",
-      "disableCopyDesc": "Impedir a cópia de texto da sessão remota",
-      "disablePaste": "Desativar Colagem",
-      "disablePasteDesc": "Impedir a colagem de texto na sessão remota",
-      "createPathIfMissing": "Criar caminho se não existir",
-      "createPathIfMissingDesc": "Criar automaticamente o diretório de gravação",
-      "excludeOutput": "Excluir Saída",
-      "excludeOutputDesc": "Não gravar a saída do ecrã (apenas metadados)",
-      "excludeMouse": "Excluir Rato",
-      "excludeMouseDesc": "Não gravar os movimentos do rato",
-      "includeKeystrokes": "Incluir Teclas",
-      "includeKeystrokesDesc": "Gravar as teclas premidas em bruto, além da saída do ecrã",
-      "vncPort": "Porta VNC",
-      "vncPassword": "Palavra-passe VNC",
-      "vncUsernameOptional": "Nome de utilizador (opcional)",
-      "vncLeaveBlank": "Deixar em branco se não for necessário",
-      "cursorMode": "Modo do Cursor",
-      "swapRedBlue": "Trocar Vermelho/Azul",
-      "swapRedBlueDesc": "Trocar os canais de cor vermelha e azul (corrige alguns problemas de cor)",
-      "readOnly": "Apenas leitura",
-      "readOnlyDesc": "Visualizar o ecrã remoto sem enviar qualquer entrada",
-      "telnetPort": "Porta Telnet",
-      "terminalType": "Tipo de Terminal",
-      "fontName": "Nome da Fonte",
-      "fontSize": "Tamanho da Fonte",
-      "colorScheme": "Esquema de Cores",
-      "backspaceKey": "Tecla Backspace",
-      "colorDepth": "Profundidade de cor",
-      "resizeMethod": "Método de redimensionamento",
-      "driveNamePlaceholder": "Termix Drive",
-      "options": {
-        "any": "Qualquer",
-        "auto": "Automático",
-        "nlaExtended": "NLA Estendido",
-        "color8": "8 bits",
-        "color16": "16 bits",
-        "color24": "24 bits",
-        "color32": "32 bits",
-        "displayUpdate": "Atualização de visualização",
-        "reconnect": "Reconectar",
-        "preserve": "Preservar",
-        "unix": "Unix (LF)",
-        "windows": "Windows (CRLF)",
-        "local": "Local",
-        "remote": "Remoto",
-        "failsafe": "segurança contra falhas",
-        "blackOnWhite": "Preto sobre branco",
-        "whiteOnBlack": "Branco sobre preto",
-        "grayOnBlack": "Cinza sobre preto",
-        "greenOnBlack": "Verde sobre preto"
-      }
-    },
-    "remoteDesktop": "Ambiente de trabalho remoto",
-    "tabRdp": "RDP",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "Rede Virtual",
-    "unencryptedShell": "Shell não encriptado",
-    "remoteDesktopNotes": "Notas",
-    "userDefaultsNote": "As definições que deixar inalteradas seguirão as definições padrão do seu host.",
-    "connectionOriginNote": "Na aplicação para desktop, o RDP, o VNC e o Telnet utilizam o servidor remoto, a menos que o host esteja configurado como \"Este dispositivo\", o que requer um proxy guacd a que esta máquina possa aceder. Defina um nas definições da Área de Trabalho Remota ou por host em \"Proxy guacd\".",
-    "docsLink": "Ver documentação",
-    "connectionOriginGuacamoleNote": "O RDP, o VNC e o Telnet utilizam o servidor remoto, a menos que seleccione \"Este dispositivo\", que requer um guacd a que esta máquina possa aceder. Defina um nas definições de URL do guacd ou por host em Proxy do guacd."
-  },
-  "onboarding": {
-    "feature_desktop": "Área de trabalho remota",
-    "feature_desktop_desc": "Abra as sessões RDP, VNC e Telnet num separador, da mesma forma que o SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Profundidade de cor",
-        "description": "Utilizado para hosts RDP que o deixam na configuração padrão."
-      },
-      "resizeMethod": {
-        "label": "Método de redimensionamento",
-        "description": "Como o ecrã remoto acompanha o tamanho da janela."
-      },
-      "resizeDisplayUpdate": "Atualização de visualização",
-      "resizeReconnect": "Reconectar",
-      "inherit": "Herdar",
-      "on": "Ativado",
-      "off": "Desativado",
-      "forceLossless": {
-        "label": "Forçar sem perdas",
-        "description": "Forçar codificação de imagem sem perdas (maior qualidade, mais largura de banda)"
-      },
-      "enableWallpaper": {
-        "label": "Fundo de ecrã",
-        "description": "Mostrar fundo de ecrã (desativar melhora o desempenho)"
-      },
-      "enableFontSmoothing": {
-        "label": "Suavização de Fontes",
-        "description": "Ativar renderização de fontes ClearType"
-      },
-      "enableDesktopComposition": {
-        "label": "Composição do ambiente de trabalho",
-        "description": "Ativar efeitos de transparência Aero"
-      },
-      "disableAudio": {
-        "label": "Desativar Áudio",
-        "description": "Silenciar todo o áudio da sessão remota"
-      },
-      "enablePrinting": {
-        "label": "Ativar Impressão",
-        "description": "Redirecionar impressoras locais para a sessão remota"
-      },
-      "enableDrive": {
-        "label": "Ativar Redirecionamento de Unidades",
-        "description": "Mapear uma pasta local como unidade na sessão remota"
-      },
-      "disableCopy": {
-        "label": "Desativar Cópia",
-        "description": "Impedir a cópia de texto da sessão remota"
-      },
-      "disablePaste": {
-        "label": "Desativar Colagem",
-        "description": "Impedir a colagem de texto na sessão remota"
-      },
-      "group": "Configurações padrão da Área de Trabalho Remota",
-      "colorDepth16": "16 bits",
-      "colorDepth24": "24 bits",
-      "colorDepth32": "32 bits"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Ativar Área de Trabalho Remota",
-        "description": "Permitir ligações RDP, VNC e Telnet através do guacd."
-      },
-      "guacdUrl": {
-        "label": "URL do guacd",
-        "description": "O local onde o guacd está a escutar é definido como host:porta. As variáveis de ambiente GUACD_URL, GUACD_HOST e GUACD_PORT têm precedência sobre isto.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "RDP"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "Porta RDP"
-      },
-      "vncPort": {
-        "label": "Porta VNC"
-      },
-      "telnetPort": {
-        "label": "porta Telnet"
-      },
-      "rdpSecurity": {
-        "label": "Modo de segurança RDP"
-      },
-      "rdpIgnoreCert": {
-        "label": "Ignorar erros de certificado"
-      },
-      "guacamoleConfig": {
-        "label": "configurações do guacd"
-      },
-      "enableToolbar": {
-        "label": "Barra de ferramentas da área de trabalho remota",
-        "description": "Visualizar a barra de ferramentas nas sessões RDP, VNC e Telnet."
-      },
-      "displayGroup": "Ecrã",
-      "displayDefaultsTab": "Ambiente de trabalho remoto"
-    }
-  },
-  "palette": {
-    "connectRdp": "Ligar com RDP",
-    "connectVnc": "Ligue-se com VNC",
-    "connectTelnet": "Ligue-se com Telnet"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Partilhar sessões de ambiente de trabalho remoto",
-      "description": "Permitir que a partilha de sessões e as salas de colaboração mostrem as sessões RDP, VNC e Telnet deste utilizador a outros utilizadores."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "É necessário um servidor remoto. Ligue um servidor remoto nas Definições para utilizar este tipo de ligação."
-  },
-  "plugin": {
-    "name": "Ambiente de trabalho remoto"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/ro_RO.json b/plugins/remote-desktop/locales/translated/ro_RO.json
deleted file mode 100644
index 76b4a63cf..000000000
--- a/plugins/remote-desktop/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "Se conectează la sesiunea {{type}}...",
-    "checkingGuacd": "Se verifică serviciul desktop la distanță...",
-    "requestingToken": "Se solicită tokenul de conexiune {{type}}...",
-    "openingSession": "Se deschide sesiunea {{type}}...",
-    "negotiating": "Se negociază o strângere de mână {{type}}...",
-    "sessionReady": "{{type}} sesiune gata",
-    "connectionError": "Eroare de conexiune",
-    "connectionFailed": "Conexiunea a eșuat",
-    "failedToConnect": "Nu s-a putut obține token-ul de conexiune",
-    "hostNotFound": "Gazdă negăsită",
-    "noHostSelected": "Nicio gazdă selectată",
-    "reconnect": "Reconectați-vă",
-    "retry": "Reîncercați",
-    "guacdUnavailable": "Serviciul desktop la distanță (guacd) nu este disponibil. Asigurați-vă că guacd rulează, este accesibil și configurat corect în setările de administrare.",
-    "credentialPromptTitle": "Introduceți acreditările RDP",
-    "credentialPromptDescription": "Această gazdă este configurată să solicite acreditări la conectare. Acestea sunt utilizate doar pentru această sesiune și nu sunt salvate.",
-    "connect": "Conectează-te",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "Fișiere Drive",
-      "parent": "Directorul părinte",
-      "refresh": "Reîmprospăta",
-      "empty": "Acest folder este gol",
-      "listFailed": "Nu s-a putut citi acest folder",
-      "download": "Descărcare",
-      "downloadFailed": "Descărcarea {{name}} a eșuat",
-      "upload": "Încărcați fișiere",
-      "uploading": "Se încarcă {{name}}...",
-      "uploaded": "Încărcat {{name}}",
-      "uploadFailed": "Nu s-a putut încărca {{name}}",
-      "uploadDisabled": "Încărcările sunt dezactivate pentru această conexiune",
-      "driveUnavailable": "Activați redirecționarea unității RDP înainte de încărcarea fișierelor",
-      "driveNotWritable": "guacd nu poate scrie în folderul unității. Verificați GUACD_DRIVE_PATH (sau calea unității gazdă) și permisiunile acesteia.",
-      "dropToUpload": "Plasați fișierele pentru încărcare"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (Ecran de blocare)",
-      "winKey": "Cheie Windows",
-      "superL": "Super+L (Ecran de blocare)",
-      "superKey": "Super Cheie",
-      "super": "Super",
-      "cmdL": "Cmd+L (Ecran de blocare)",
-      "cmdKey": "Tastă de comandă",
-      "cmd": "Comandă",
-      "ctrl": "Ctrl",
-      "alt": "Alt",
-      "shift": "Schimbare",
-      "win": "Câştiga",
-      "stickyActive": "{{key}} (blocat - clic pentru eliberare)",
-      "stickyInactive": "{{key}} (clic pentru blocare)",
-      "esc": "Evadare",
-      "tab": "Tab",
-      "home": "Acasă",
-      "end": "Sfârşit",
-      "pageUp": "Pagină sus",
-      "pageDown": "Pagină în jos",
-      "arrowUp": "Săgeată în sus",
-      "arrowDown": "Săgeată în jos",
-      "arrowLeft": "Săgeată stânga",
-      "arrowRight": "Săgeată dreapta",
-      "fnToggle": "Taste funcționale",
-      "reconnect": "Sesiune de reconectare",
-      "collapse": "Restrângeți bara de instrumente",
-      "expand": "Extindeți bara de instrumente",
-      "dragHandle": "Trageți pentru a repoziționa",
-      "hide": "Ascundeți pentru această sesiune. Pentru a o dezactiva definitiv, deschideți Setări gazdă → General → Bara de instrumente conexiune.",
-      "zoomIn": "Măriți",
-      "zoomOut": "Micșorare",
-      "resetZoom": "Resetare zoom",
-      "fitToScreen": "Potrivire la ecran",
-      "switchToTrackpad": "Comutare la modul trackpad (tragere pentru mutarea cursorului, atingere pentru clic)",
-      "switchToTouch": "Comutare la modul tactil (atingere direct unde doriți să faceți clic)"
-    },
-    "disabled": "Desktopul la distanță este dezactivat. Un administrator îl poate activa în Setări."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Deschis în Desktop la distanță Windows",
-    "nativeRdpFailed": "Nu s-a putut deschide Desktop la distanță Windows",
-    "openNativeRdp": "Deschideți în Desktop la distanță Windows",
-    "guac": {
-      "toolbar": "Bara de instrumente",
-      "connection": "Conexiune",
-      "authentication": "Autentificare",
-      "storedCredential": "Acreditare stocată",
-      "authMethod": "Metodă de autentificare",
-      "authTypeDirect": "Direct",
-      "authTypeCredential": "Acreditare",
-      "authTypeNone": "Nici unul",
-      "authTypeNoneDesc": "Nu sunt stocate acreditări. Vi se va solicita un nume de utilizator și o parolă de fiecare dată când vă conectați; acestea nu sunt salvate.",
-      "selectCredential": "Selectați o acreditare...",
-      "connectionSettings": "Setări de conectare",
-      "displaySettings": "Setări de afișare",
-      "audioSettings": "Setări audio",
-      "rdpPerformance": "Performanța RDP",
-      "deviceRedirection": "Redirecționare dispozitiv",
-      "session": "Sesiune",
-      "gateway": "Poartă de acces",
-      "remoteApp": "RemoteApp",
-      "clipboard": "Clipboard",
-      "sessionRecording": "Înregistrarea sesiunii",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "Setări VNC",
-      "terminalSettings": "Setări terminal",
-      "rdpPort": "Port RDP",
-      "username": "Nume de utilizator",
-      "password": "Parolă",
-      "passwordSaved": "Parolă salvată, tastați pentru a o modifica",
-      "domain": "Domeniu",
-      "securityMode": "Mod de securitate",
-      "width": "Lăţime",
-      "height": "Înălţime",
-      "dpi": "DPI",
-      "clientName": "Numele clientului",
-      "initialProgram": "Program inițial",
-      "serverLayout": "Aspectul serverului",
-      "timezone": "Fus orar",
-      "loadBalanceInfo": "Informații despre echilibrul încărcării / Cookie",
-      "loadBalanceInfoDesc": "Cookie-ul RD Connection Broker pentru echilibrarea încărcării fermei RDS (de exemplu, tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "Proxy guacd",
-      "guacdHostname": "Gazdă guacd",
-      "guacdHostnamePlaceholder": "Implicit global",
-      "guacdPort": "Portul Guacd",
-      "guacdProxyDesc": "Suprascrie instanța globală guacd pentru această conexiune. Lasă câmpul necompletat pentru a utiliza guacd-ul configurat global.",
-      "gatewayHostname": "Nume gazdă gateway",
-      "gatewayPort": "Portul Gateway",
-      "gatewayUsername": "Nume de utilizator Gateway",
-      "gatewayPassword": "Parolă gateway",
-      "gatewayDomain": "Domeniu Gateway",
-      "remoteAppProgram": "Programul RemoteApp",
-      "workingDirectory": "Director de lucru",
-      "arguments": "Argumente",
-      "normalizeLineEndings": "Normalizarea sfârșitului de linie",
-      "macAddress": "Adresă MAC",
-      "broadcastAddress": "Adresă de difuzare",
-      "udpPort": "Port UDP",
-      "waitTimeS": "Timp de așteptare (s)",
-      "driveName": "Nume unitate",
-      "drivePath": "Cale de acces",
-      "ignoreCertificate": "Ignoră certificatul",
-      "ignoreCertificateDesc": "Permiteți conexiuni la gazde cu certificate autosemnate",
-      "forceLossless": "Forța fără pierderi",
-      "forceLosslessDesc": "Forțează codificarea imaginilor fără pierderi (calitate mai mare, lățime de bandă mai mare)",
-      "disableAudio": "Dezactivați sunetul",
-      "disableAudioDesc": "Dezactivați tot sunetul din sesiunea la distanță",
-      "enableAudioInput": "Activare intrare audio (microfon)",
-      "enableAudioInputDesc": "Redirecționează microfonul local către sesiunea la distanță",
-      "wallpaper": "Tapet",
-      "wallpaperDesc": "Afișează imaginea de fundal a desktopului (dezactivarea îmbunătățește performanța)",
-      "theming": "Tematizare",
-      "themingDesc": "Activează teme și stiluri vizuale",
-      "fontSmoothing": "Netezirea fonturilor",
-      "fontSmoothingDesc": "Activează randarea fonturilor ClearType",
-      "fullWindowDrag": "Tragere pe toată ferestra",
-      "fullWindowDragDesc": "Afișează conținutul ferestrei la tragere",
-      "desktopComposition": "Compoziție desktop",
-      "desktopCompositionDesc": "Activează efectele Aero Glass",
-      "menuAnimations": "Animații de meniu",
-      "menuAnimationsDesc": "Activează estomparea meniului și animațiile diapozitivelor",
-      "disableBitmapCaching": "Dezactivați memorarea în cache a bitmap-urilor",
-      "disableBitmapCachingDesc": "Dezactivați memoria cache bitmap (poate ajuta la rezolvarea erorilor)",
-      "disableOffscreenCaching": "Dezactivați memoria cache în afara ecranului",
-      "disableOffscreenCachingDesc": "Dezactivați memoria cache în afara ecranului",
-      "disableGlyphCaching": "Dezactivați memoria cache a glifelor",
-      "disableGlyphCachingDesc": "Dezactivați memoria cache a glifurilor",
-      "enableGfx": "Activează efectele grafice",
-      "enableGfxDesc": "Folosește canalul grafic RemoteFX",
-      "enablePrinting": "Activează imprimarea",
-      "enablePrintingDesc": "Redirecționează imprimantele locale către sesiunea la distanță",
-      "enableDriveRedirection": "Activați redirecționarea unității",
-      "enableDriveRedirectionDesc": "Maparea unui folder local ca unitate în sesiunea la distanță",
-      "createDrivePath": "Creați o cale de acces",
-      "createDrivePathDesc": "Creează automat folderul dacă acesta nu există",
-      "disableDownload": "Dezactivați descărcarea",
-      "disableDownloadDesc": "Împiedicați descărcarea fișierelor din sesiunea la distanță",
-      "disableUpload": "Dezactivați încărcarea",
-      "disableUploadDesc": "Împiedicați încărcarea fișierelor în sesiunea la distanță",
-      "enableTouch": "Activează atingerea",
-      "enableTouchDesc": "Activează redirecționarea prin introducerea tactilă",
-      "consoleSession": "Sesiune consolă",
-      "consoleSessionDesc": "Conectați-vă la consolă (sesiunea 0) în loc de o sesiune nouă",
-      "sendWolPacket": "Trimiteți pachetul WOL",
-      "sendWolPacketDesc": "Trimiteți un pachet magic pentru a activa această gazdă înainte de conectare",
-      "disableCopy": "Dezactivați copierea",
-      "disableCopyDesc": "Împiedicați copierea textului din sesiunea la distanță",
-      "disablePaste": "Dezactivați lipirea",
-      "disablePasteDesc": "Împiedicați lipirea textului în sesiunea la distanță",
-      "createPathIfMissing": "Creați o cale dacă lipsește",
-      "createPathIfMissingDesc": "Creați automat directorul de înregistrare",
-      "excludeOutput": "Excludeți ieșirea",
-      "excludeOutputDesc": "Nu înregistrați ieșirea ecranului (doar metadate)",
-      "excludeMouse": "Excludeți mouse-ul",
-      "excludeMouseDesc": "Nu înregistrați mișcările mouse-ului",
-      "includeKeystrokes": "Includeți apăsările de taste",
-      "includeKeystrokesDesc": "Înregistrați apăsările de taste brute pe lângă ieșirea de pe ecran",
-      "vncPort": "Port VNC",
-      "vncPassword": "Parolă VNC",
-      "vncUsernameOptional": "Nume de utilizator (opțional)",
-      "vncLeaveBlank": "Lăsați necompletat dacă nu este necesar",
-      "cursorMode": "Mod cursor",
-      "swapRedBlue": "Schimbă roșu/albastru",
-      "swapRedBlueDesc": "Schimbarea canalelor de culoare roșu și albastru (rezolvă unele probleme de culoare)",
-      "readOnly": "Doar citire",
-      "readOnlyDesc": "Vizualizați ecranul de la distanță fără a trimite nicio intrare",
-      "telnetPort": "Port Telnet",
-      "terminalType": "Tipul terminalului",
-      "fontName": "Nume font",
-      "fontSize": "Dimensiunea fontului",
-      "colorScheme": "Schemă de culori",
-      "backspaceKey": "Tasta Backspace",
-      "colorDepth": "Adâncimea culorii",
-      "resizeMethod": "Metodă de redimensionare",
-      "driveNamePlaceholder": "Termix Drive",
-      "options": {
-        "any": "Orice",
-        "auto": "Auto",
-        "nlaExtended": "NLA extins",
-        "color8": "8 biți",
-        "color16": "16 biți",
-        "color24": "24 de biți",
-        "color32": "32 de biți",
-        "displayUpdate": "Actualizare afișare",
-        "reconnect": "Reconectați-vă",
-        "preserve": "Păstrați",
-        "unix": "Unix (LF)",
-        "windows": "Windows (CRLF)",
-        "local": "Local",
-        "remote": "De la distanță",
-        "failsafe": "siguranță",
-        "blackOnWhite": "Negru pe alb",
-        "whiteOnBlack": "Alb pe negru",
-        "grayOnBlack": "Gri pe negru",
-        "greenOnBlack": "Verde pe negru"
-      }
-    },
-    "remoteDesktop": "Desktop la distanță",
-    "tabRdp": "RDP",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "Rețea virtuală",
-    "unencryptedShell": "Shell necriptat",
-    "remoteDesktopNotes": "Note",
-    "userDefaultsNote": "Setările pe care le lăsați neschimbate respectă valorile implicite ale gazdei.",
-    "connectionOriginNote": "În aplicația desktop, RDP, VNC și Telnet folosesc serverul la distanță, cu excepția cazului în care gazda este setată la Acest dispozitiv, care necesită un guacd pe care acest computer îl poate accesa. Setați unul în setările Desktop la distanță sau pentru fiecare gazdă în secțiunea Proxy guacd.",
-    "docsLink": "Vizualizați documentele",
-    "connectionOriginGuacamoleNote": "RDP, VNC și Telnet folosesc serverul la distanță, cu excepția cazului în care selectați „Acest dispozitiv”, care necesită un guacd pe care această mașină îl poate accesa. Setați unul în setarea URL guacd sau pentru fiecare gazdă în guacd Proxy."
-  },
-  "onboarding": {
-    "feature_desktop": "Desktop la distanță",
-    "feature_desktop_desc": "Deschideți sesiuni RDP, VNC și Telnet într-o filă, la fel ca în cazul SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Adâncimea culorii",
-        "description": "Folosit pentru gazdele RDP care îl lasă pe setările implicite."
-      },
-      "resizeMethod": {
-        "label": "Metodă de redimensionare",
-        "description": "Cum urmărește ecranul de la distanță dimensiunea ferestrei."
-      },
-      "resizeDisplayUpdate": "Actualizare afișare",
-      "resizeReconnect": "Reconectați-vă",
-      "inherit": "Moşteni",
-      "on": "Pe",
-      "off": "Dezactivat",
-      "forceLossless": {
-        "label": "Forța fără pierderi",
-        "description": "Forțează codificarea imaginilor fără pierderi (calitate mai mare, lățime de bandă mai mare)"
-      },
-      "enableWallpaper": {
-        "label": "Tapet",
-        "description": "Afișează imaginea de fundal a desktopului (dezactivarea îmbunătățește performanța)"
-      },
-      "enableFontSmoothing": {
-        "label": "Netezirea fonturilor",
-        "description": "Activează randarea fonturilor ClearType"
-      },
-      "enableDesktopComposition": {
-        "label": "Compoziție desktop",
-        "description": "Activează efectele Aero Glass"
-      },
-      "disableAudio": {
-        "label": "Dezactivați sunetul",
-        "description": "Dezactivați tot sunetul din sesiunea la distanță"
-      },
-      "enablePrinting": {
-        "label": "Activează imprimarea",
-        "description": "Redirecționează imprimantele locale către sesiunea la distanță"
-      },
-      "enableDrive": {
-        "label": "Activați redirecționarea unității",
-        "description": "Maparea unui folder local ca unitate în sesiunea la distanță"
-      },
-      "disableCopy": {
-        "label": "Dezactivați copierea",
-        "description": "Împiedicați copierea textului din sesiunea la distanță"
-      },
-      "disablePaste": {
-        "label": "Dezactivați lipirea",
-        "description": "Împiedicați lipirea textului în sesiunea la distanță"
-      },
-      "group": "Setări implicite Desktop la distanță",
-      "colorDepth16": "16 biți",
-      "colorDepth24": "24 de biți",
-      "colorDepth32": "32 de biți"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Activează Desktop la distanță",
-        "description": "Permite conexiuni RDP, VNC și Telnet prin guacd."
-      },
-      "guacdUrl": {
-        "label": "URL-ul guacd",
-        "description": "Unde guacd ascultă, ca host:port. Variabilele de mediu GUACD_URL, GUACD_HOST și GUACD_PORT suprascriu acest lucru.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "RDP"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "Port RDP"
-      },
-      "vncPort": {
-        "label": "Port VNC"
-      },
-      "telnetPort": {
-        "label": "Port Telnet"
-      },
-      "rdpSecurity": {
-        "label": "Mod de securitate RDP"
-      },
-      "rdpIgnoreCert": {
-        "label": "Ignorați erorile de certificat"
-      },
-      "guacamoleConfig": {
-        "label": "setări guacd"
-      },
-      "enableToolbar": {
-        "label": "Bara de instrumente desktop la distanță",
-        "description": "Afișează bara de instrumente în sesiunile RDP, VNC și Telnet."
-      },
-      "displayGroup": "Afişa",
-      "displayDefaultsTab": "Desktop la distanță"
-    }
-  },
-  "palette": {
-    "connectRdp": "Conectați-vă cu RDP",
-    "connectVnc": "Conectați-vă cu VNC",
-    "connectTelnet": "Conectați-vă cu Telnet"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Partajați sesiuni desktop la distanță",
-      "description": "Permiteți ca partajarea sesiunilor și camerele de colaborare să arate sesiunile RDP, VNC și Telnet ale acestui utilizator către ceilalți."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Este necesar un server la distanță. Conectați un server la distanță în Setări pentru a utiliza acest tip de conexiune."
-  },
-  "plugin": {
-    "name": "Desktop la distanță"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/ru_RU.json b/plugins/remote-desktop/locales/translated/ru_RU.json
deleted file mode 100644
index 338f9206b..000000000
--- a/plugins/remote-desktop/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "Подключение к сессии {{type}}...",
-    "checkingGuacd": "Проверка службы удаленного рабочего стола...",
-    "requestingToken": "Запрос токена подключения {{type}}...",
-    "openingSession": "Открытие сессии {{type}}...",
-    "negotiating": "Переговоры {{type}} рукопожатие...",
-    "sessionReady": "{{type}} сессия готова",
-    "connectionError": "Ошибка подключения",
-    "connectionFailed": "Ошибка подключения",
-    "failedToConnect": "Не удалось получить токен подключения",
-    "hostNotFound": "Хост не найден",
-    "noHostSelected": "Хост не выбран",
-    "reconnect": "Переподключиться",
-    "retry": "Повторить",
-    "guacdUnavailable": "Служба удалённого рабочего стола (guacd) недоступна. Убедитесь, что guacd запущен, доступен и правильно настроен в настройках администратора.",
-    "credentialPromptTitle": "Введите учетные данные RDP.",
-    "credentialPromptDescription": "На этом хосте настроен запрос учетных данных при подключении. Они используются только в течение этой сессии и не сохраняются.",
-    "connect": "Соединить",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "Файлы диска",
-      "parent": "Родительский каталог",
-      "refresh": "Обновить",
-      "empty": "Эта папка пуста",
-      "listFailed": "Не удалось прочитать эту папку.",
-      "download": "Скачать",
-      "downloadFailed": "Не удалось загрузить {{name}}",
-      "upload": "Загрузка файлов",
-      "uploading": "Загрузка {{name}}...",
-      "uploaded": "Загружено {{name}}",
-      "uploadFailed": "Не удалось загрузить {{name}}",
-      "uploadDisabled": "Загрузка файлов для этого соединения отключена.",
-      "driveUnavailable": "Включите перенаправление дисков RDP перед загрузкой файлов.",
-      "driveNotWritable": "guacd не может записывать данные в папку на диске. Проверьте переменную GUACD_DRIVE_PATH (или путь к диску на хосте) и ее права доступа.",
-      "dropToUpload": "Перетащите файлы для загрузки"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (Блокировка экрана)",
-      "winKey": "Клавиша Windows",
-      "superL": "Super+L (экран блокировки)",
-      "superKey": "Суперклавиша",
-      "super": "Супер",
-      "cmdL": "Cmd+L (Блокировка экрана)",
-      "cmdKey": "Клавиша Command",
-      "cmd": "Команда",
-      "ctrl": "Ctrl",
-      "alt": "Alt",
-      "shift": "Shift",
-      "win": "Win",
-      "stickyActive": "{{key}} (зафиксирована – кликните для отключения)",
-      "stickyInactive": "{{key}} (кликните для фиксации)",
-      "esc": "Escape",
-      "tab": "Tab",
-      "home": "Главная",
-      "end": "End",
-      "pageUp": "Page Up",
-      "pageDown": "Page Down",
-      "arrowUp": "Вверх",
-      "arrowDown": "Вниз",
-      "arrowLeft": "Влево",
-      "arrowRight": "Вправо",
-      "fnToggle": "Функциональные клавиши",
-      "reconnect": "Переподключить сеанс",
-      "collapse": "Свернуть панель",
-      "expand": "Развернуть панель",
-      "dragHandle": "Перетащите для перемещения",
-      "hide": "Скрыть на время текущей сессии. Чтобы отключить эту функцию навсегда, откройте «Настройки хоста» → «Общие» → «Панель подключения».",
-      "zoomIn": "Увеличить масштаб",
-      "zoomOut": "Отдалиться",
-      "resetZoom": "Сбросить масштаб",
-      "fitToScreen": "Подогнать под экран",
-      "switchToTrackpad": "Переключитесь в режим трекпада (перетащите для перемещения курсора, коснитесь для щелчка).",
-      "switchToTouch": "Переключитесь в сенсорный режим (коснитесь непосредственно того места, куда хотите нажать)."
-    },
-    "disabled": "Функция удаленного рабочего стола отключена. Администратор может включить ее в настройках."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Открыто в Windows Remote Desktop",
-    "nativeRdpFailed": "Не удалось открыть удаленный рабочий стол Windows.",
-    "openNativeRdp": "Открыть в удаленном рабочем столе Windows",
-    "guac": {
-      "toolbar": "Панель инструментов",
-      "connection": "Подключение",
-      "authentication": "Аутентификация",
-      "storedCredential": "Сохраненные учетные данные",
-      "authMethod": "Метод аутентификации",
-      "authTypeDirect": "Прямой",
-      "authTypeCredential": "Учетные данные",
-      "authTypeNone": "Ни одного",
-      "authTypeNoneDesc": "Учетные данные не сохраняются. При каждом подключении вам будет предлагаться ввести имя пользователя и пароль; они не сохраняются.",
-      "selectCredential": "Выберите учетные данные...",
-      "connectionSettings": "Параметры подключения",
-      "displaySettings": "Параметры отображения",
-      "audioSettings": "Параметры звука",
-      "rdpPerformance": "Производительность RDP",
-      "deviceRedirection": "Перенаправление устройств",
-      "session": "Сессия",
-      "gateway": "Шлюз",
-      "remoteApp": "RemoteApp",
-      "clipboard": "Буфер обмена",
-      "sessionRecording": "Запись сессии",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "Параметры VNC",
-      "terminalSettings": "Параметры терминала",
-      "rdpPort": "Порт RDP",
-      "username": "Имя пользователя",
-      "password": "Пароль",
-      "passwordSaved": "Пароль сохранен, введите для изменения.",
-      "domain": "Домен",
-      "securityMode": "Режим безопасности",
-      "width": "Ширина",
-      "height": "Высота",
-      "dpi": "DPI",
-      "clientName": "Имя клиента",
-      "initialProgram": "Начальная программа",
-      "serverLayout": "Раскладка сервера",
-      "timezone": "Часовой пояс",
-      "loadBalanceInfo": "Информация о балансировке нагрузки / Cookie",
-      "loadBalanceInfoDesc": "Cookie брокера подключений к удаленному рабочему столу для балансировки нагрузки фермы RDS (например, tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "Прокси guacd",
-      "guacdHostname": "Хост guacd",
-      "guacdHostnamePlaceholder": "Глобальное значение по умолчанию",
-      "guacdPort": "Порт guacd",
-      "guacdProxyDesc": "Переопределить глобальный экземпляр guacd для этого соединения. Оставьте пустым для использования глобально настроенного guacd.",
-      "gatewayHostname": "Имя хоста шлюза",
-      "gatewayPort": "Порт шлюза",
-      "gatewayUsername": "Имя пользователя шлюза",
-      "gatewayPassword": "Пароль шлюза",
-      "gatewayDomain": "Домен шлюза",
-      "remoteAppProgram": "Программа RemoteApp",
-      "workingDirectory": "Рабочий каталог",
-      "arguments": "Аргументы",
-      "normalizeLineEndings": "Нормализовать окончания строк",
-      "macAddress": "MAC-адрес",
-      "broadcastAddress": "Широковещательный адрес",
-      "udpPort": "Порт UDP",
-      "waitTimeS": "Время ожидания (с)",
-      "driveName": "Имя диска",
-      "drivePath": "Путь к диску",
-      "ignoreCertificate": "Игнорировать сертификат",
-      "ignoreCertificateDesc": "Разрешить подключения к хостам с самоподписанными сертификатами",
-      "forceLossless": "Принудительно без потерь",
-      "forceLosslessDesc": "Принудительное кодирование изображений без потерь (более высокое качество, больший расход трафика)",
-      "disableAudio": "Отключить звук",
-      "disableAudioDesc": "Отключить весь звук в удаленном сеансе",
-      "enableAudioInput": "Включить аудиовход (микрофон)",
-      "enableAudioInputDesc": "Передавать локальный микрофон в удаленный сеанс",
-      "wallpaper": "Обои",
-      "wallpaperDesc": "Показывать обои рабочего стола (отключение повышает производительность)",
-      "theming": "Темы",
-      "themingDesc": "Включить визуальные темы и стили",
-      "fontSmoothing": "Сглаживание шрифтов",
-      "fontSmoothingDesc": "Включить рендеринг шрифтов ClearType",
-      "fullWindowDrag": "Перетаскивание окон с содержимым",
-      "fullWindowDragDesc": "Показывать содержимое окна при перетаскивании",
-      "desktopComposition": "Композиция рабочего стола",
-      "desktopCompositionDesc": "Включить эффекты Aero Glass",
-      "menuAnimations": "Анимации меню",
-      "menuAnimationsDesc": "Включить анимацию исчезновения и сдвига меню",
-      "disableBitmapCaching": "Отключить кеширование растровых изображений",
-      "disableBitmapCachingDesc": "Отключить кеш растровых изображений (может помочь при сбоях)",
-      "disableOffscreenCaching": "Отключить внеэкранное кеширование",
-      "disableOffscreenCachingDesc": "Отключить внеэкранный кеш",
-      "disableGlyphCaching": "Отключить кеширование глифов",
-      "disableGlyphCachingDesc": "Отключить кеш глифов",
-      "enableGfx": "Включить GFX",
-      "enableGfxDesc": "Использовать графический конвейер RemoteFX",
-      "enablePrinting": "Включить печать",
-      "enablePrintingDesc": "Перенаправлять локальные принтеры в удаленный сеанс",
-      "enableDriveRedirection": "Включить перенаправление дисков",
-      "enableDriveRedirectionDesc": "Подключать локальную папку как диск в удаленном сеансе",
-      "createDrivePath": "Создать путь к диску",
-      "createDrivePathDesc": "Автоматически создать папку, если она не существует",
-      "disableDownload": "Отключить загрузку",
-      "disableDownloadDesc": "Запретить загрузку файлов из удаленного сеанса",
-      "disableUpload": "Отключить выгрузку",
-      "disableUploadDesc": "Запретить выгрузку файлов в удаленный сеанс",
-      "enableTouch": "Включить сенсорный ввод",
-      "enableTouchDesc": "Включить передачу сенсорного ввода",
-      "consoleSession": "Консольный сеанс",
-      "consoleSessionDesc": "Подключиться к консоли (сеанс 0) вместо создания нового сеанса",
-      "sendWolPacket": "Отправить WOL-пакет",
-      "sendWolPacketDesc": "Отправить magic-пакет для пробуждения хоста перед подключением",
-      "disableCopy": "Отключить копирование",
-      "disableCopyDesc": "Запретить копирование текста из удаленного сеанса",
-      "disablePaste": "Отключить вставку",
-      "disablePasteDesc": "Запретить вставку текста в удаленный сеанс",
-      "createPathIfMissing": "Создать путь, если отсутствует",
-      "createPathIfMissingDesc": "Автоматически создать каталог для записей",
-      "excludeOutput": "Исключить вывод",
-      "excludeOutputDesc": "Не записывать вывод экрана (только метаданные)",
-      "excludeMouse": "Исключить мышь",
-      "excludeMouseDesc": "Не записывать движения мыши",
-      "includeKeystrokes": "Записывать нажатия",
-      "includeKeystrokesDesc": "Записывать необработанные нажатия клавиш в дополнение к выводу экрана",
-      "vncPort": "Порт VNC",
-      "vncPassword": "Пароль VNC",
-      "vncUsernameOptional": "Имя пользователя (необязательно)",
-      "vncLeaveBlank": "Оставьте пустым, если не требуется",
-      "cursorMode": "Режим курсора",
-      "swapRedBlue": "Поменять красный/синий",
-      "swapRedBlueDesc": "Обменять красный и синий цветовые каналы (исправляет некоторые проблемы с цветом)",
-      "readOnly": "Только чтение",
-      "readOnlyDesc": "Просмотр удаленного экрана без отправки ввода",
-      "telnetPort": "Порт Telnet",
-      "terminalType": "Тип терминала",
-      "fontName": "Название шрифта",
-      "fontSize": "Размер шрифта",
-      "colorScheme": "Цветовая схема",
-      "backspaceKey": "Клавиша Backspace",
-      "colorDepth": "Глубина цвета",
-      "resizeMethod": "Метод изменения размера",
-      "driveNamePlaceholder": "Термикс Драйв",
-      "options": {
-        "any": "Любой",
-        "auto": "Авто",
-        "nlaExtended": "NLA Extended",
-        "color8": "8-битный",
-        "color16": "16-бит",
-        "color24": "24-бит",
-        "color32": "32-битный",
-        "displayUpdate": "Обновление дисплея",
-        "reconnect": "Переподключиться",
-        "preserve": "Сохранять",
-        "unix": "Unix (LF)",
-        "windows": "Windows (CRLF)",
-        "local": "Локальная",
-        "remote": "Удалённый",
-        "failsafe": "отказоустойчивость",
-        "blackOnWhite": "Черное на белом",
-        "whiteOnBlack": "Белый на чёрном",
-        "grayOnBlack": "Серый на чёрном",
-        "greenOnBlack": "Зеленый на черном"
-      }
-    },
-    "remoteDesktop": "Удаленный рабочий стол",
-    "tabRdp": "RDP",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "Виртуальная сеть",
-    "unencryptedShell": "Незашифрованная оболочка",
-    "remoteDesktopNotes": "Заметки",
-    "userDefaultsNote": "Настройки, которые вы оставляете без изменений, соответствуют настройкам по умолчанию вашего хоста.",
-    "connectionOriginNote": "В настольном приложении RDP, VNC и Telnet используют удаленный сервер, если только для хоста не установлен параметр «Это устройство», для которого требуется guacd, к которому может подключиться эта машина. Задайте его в настройках удаленного рабочего стола или для каждого хоста в разделе guacd Proxy.",
-    "docsLink": "Документация",
-    "connectionOriginGuacamoleNote": "RDP, VNC и Telnet используют удаленный сервер, если вы не выберете «Это устройство», для которого требуется guacd, к которому может подключиться эта машина. Задайте его в настройках URL-адреса guacd или для каждого хоста в разделе «Прокси guacd»."
-  },
-  "onboarding": {
-    "feature_desktop": "Удаленный рабочий стол",
-    "feature_desktop_desc": "Открывайте сеансы RDP, VNC и Telnet во вкладке, как и SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Глубина цвета",
-        "description": "Используется для RDP-хостов, которые оставляют этот параметр по умолчанию."
-      },
-      "resizeMethod": {
-        "label": "Метод изменения размера",
-        "description": "Как удаленный экран подстраивается под размер окна."
-      },
-      "resizeDisplayUpdate": "Обновление дисплея",
-      "resizeReconnect": "Переподключиться",
-      "inherit": "Наследовать",
-      "on": "Включено",
-      "off": "Отключено",
-      "forceLossless": {
-        "label": "Принудительно без потерь",
-        "description": "Принудительное кодирование изображений без потерь (более высокое качество, больший расход трафика)"
-      },
-      "enableWallpaper": {
-        "label": "Обои",
-        "description": "Показывать обои рабочего стола (отключение повышает производительность)"
-      },
-      "enableFontSmoothing": {
-        "label": "Сглаживание шрифтов",
-        "description": "Включить рендеринг шрифтов ClearType"
-      },
-      "enableDesktopComposition": {
-        "label": "Композиция рабочего стола",
-        "description": "Включить эффекты Aero Glass"
-      },
-      "disableAudio": {
-        "label": "Отключить звук",
-        "description": "Отключить весь звук в удаленном сеансе"
-      },
-      "enablePrinting": {
-        "label": "Включить печать",
-        "description": "Перенаправлять локальные принтеры в удаленный сеанс"
-      },
-      "enableDrive": {
-        "label": "Включить перенаправление дисков",
-        "description": "Подключать локальную папку как диск в удаленном сеансе"
-      },
-      "disableCopy": {
-        "label": "Отключить копирование",
-        "description": "Запретить копирование текста из удаленного сеанса"
-      },
-      "disablePaste": {
-        "label": "Отключить вставку",
-        "description": "Запретить вставку текста в удаленный сеанс"
-      },
-      "group": "Настройки удаленного рабочего стола по умолчанию",
-      "colorDepth16": "16-бит",
-      "colorDepth24": "24-бит",
-      "colorDepth32": "32-битный"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Включить удалённый рабочий стол",
-        "description": "Разрешите подключения RDP, VNC и Telnet через guacd."
-      },
-      "guacdUrl": {
-        "label": "URL guacd",
-        "description": "guacd прослушивает порты и хосты. Переменные окружения GUACD_URL, GUACD_HOST и GUACD_PORT переопределяют это.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "RDP"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "порт RDP"
-      },
-      "vncPort": {
-        "label": "порт VNC"
-      },
-      "telnetPort": {
-        "label": "порт Telnet"
-      },
-      "rdpSecurity": {
-        "label": "режим безопасности RDP"
-      },
-      "rdpIgnoreCert": {
-        "label": "Игнорировать ошибки сертификатов"
-      },
-      "guacamoleConfig": {
-        "label": "настройки guacd"
-      },
-      "enableToolbar": {
-        "label": "Панель инструментов удаленного рабочего стола",
-        "description": "Отображение панели инструментов в сеансах RDP, VNC и Telnet."
-      },
-      "displayGroup": "Отображать",
-      "displayDefaultsTab": "Удаленный рабочий стол"
-    }
-  },
-  "palette": {
-    "connectRdp": "Подключитесь к RDP",
-    "connectVnc": "Подключитесь к VNC",
-    "connectTelnet": "Подключитесь через Telnet"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Совместное использование сеансов удалённого рабочего стола",
-      "description": "Разрешите совместное использование сессий и комнаты для совместной работы отображать сессии этого пользователя по протоколам RDP, VNC и Telnet другим пользователям."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Требуется удаленный сервер. Для использования этого типа подключения подключите удаленный сервер в настройках."
-  },
-  "plugin": {
-    "name": "Удаленный рабочий стол"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/sr_SP.json b/plugins/remote-desktop/locales/translated/sr_SP.json
deleted file mode 100644
index 1d8659525..000000000
--- a/plugins/remote-desktop/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "Повезивање са {{type}} сесијом...",
-    "checkingGuacd": "Провера услуге удаљене радне површине...",
-    "requestingToken": "Захтева се {{type}} токен за повезивање...",
-    "openingSession": "Отварање {{type}} сесије...",
-    "negotiating": "Преговарање {{type}} руковање...",
-    "sessionReady": "{{type}} сесија спремна",
-    "connectionError": "Грешка у повезивању",
-    "connectionFailed": "Повезивање није успело",
-    "failedToConnect": "Није успело добијање токена за повезивање",
-    "hostNotFound": "Хост није пронађен",
-    "noHostSelected": "Није изабран домаћин",
-    "reconnect": "Поново се повежите",
-    "retry": "Покушај поново",
-    "guacdUnavailable": "Услуга удаљеног рачунара (guacd) није доступна. Молимо вас да се уверите да је guacd покренут, доступан и правилно конфигурисан у администраторским подешавањима.",
-    "credentialPromptTitle": "Унесите RDP акредитиве",
-    "credentialPromptDescription": "Овај хост је подешен да тражи акредитиве при повезивању. Они се користе само за ову сесију и не чувају се.",
-    "connect": "Повежи се",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "Датотеке на Диску",
-      "parent": "Надређени директоријум",
-      "refresh": "Освежи",
-      "empty": "Ова фасцикла је празна",
-      "listFailed": "Није успело читање ове фасцикле",
-      "download": "Преузми",
-      "downloadFailed": "Преузимање није успело {{name}}",
-      "upload": "Отпреми датотеке",
-      "uploading": "Отпремање {{name}}...",
-      "uploaded": "Отпремљено {{name}}",
-      "uploadFailed": "Није успело отпремање {{name}}",
-      "uploadDisabled": "Отпремања су онемогућена за ову везу",
-      "driveUnavailable": "Омогућите преусмеравање RDP диска пре отпремања датотека",
-      "driveNotWritable": "guacd не може да пише у фасциклу диска. Проверите GUACD_DRIVE_PATH (или путању диска хоста) и његове дозволе.",
-      "dropToUpload": "Отпустите датотеке да бисте их отпремили"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (Закључавање екрана)",
-      "winKey": "Windows тастер",
-      "superL": "Супер+Л (Закључани екран)",
-      "superKey": "Супер кључ",
-      "super": "Супер",
-      "cmdL": "Cmd+L (Закључани екран)",
-      "cmdKey": "Командни тастер",
-      "cmd": "Команда",
-      "ctrl": "Ctrl",
-      "alt": "Алтернативно",
-      "shift": "Померање",
-      "win": "Победа",
-      "stickyActive": "{{key}} (закључано - кликните да бисте отпустили)",
-      "stickyInactive": "{{key}} (кликните да бисте закључали)",
-      "esc": "Бег",
-      "tab": "Таб",
-      "home": "Дом",
-      "end": "Крај",
-      "pageUp": "Страница нагоре",
-      "pageDown": "Страница надоле",
-      "arrowUp": "Стрелица нагоре",
-      "arrowDown": "Стрелица надоле",
-      "arrowLeft": "Стрелица лево",
-      "arrowRight": "Стрелица десно",
-      "fnToggle": "Функцијски тастери",
-      "reconnect": "Поновно повезивање сесије",
-      "collapse": "Савиј траку са алаткама",
-      "expand": "Прошири траку са алаткама",
-      "dragHandle": "Превуците да бисте променили положај",
-      "hide": "Сакриј за ову сесију. Да бисте га трајно онемогућили, отворите Подешавања хоста → Опште → Трака са алаткама за повезивање.",
-      "zoomIn": "Увећај",
-      "zoomOut": "Умањи",
-      "resetZoom": "Ресетуј зумирање",
-      "fitToScreen": "Прилагоди екрану",
-      "switchToTrackpad": "Пребаците се у режим додирне табле (превуците да бисте померили курсор, додирните да бисте кликнули)",
-      "switchToTouch": "Пребаците се на режим додира (додирните директно место где желите да кликнете)"
-    },
-    "disabled": "Удаљена радна површина је искључена. Администратор је може укључити у подешавањима."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Отворено у Windows удаљеној радној површини",
-    "nativeRdpFailed": "Није успело отварање Windows удаљене радне површине",
-    "openNativeRdp": "Отвори у Windows удаљеној радној површини",
-    "guac": {
-      "toolbar": "Трака са алаткама",
-      "connection": "Веза",
-      "authentication": "Аутентификација",
-      "storedCredential": "Сачувани акредитив",
-      "authMethod": "Метода овлашћења",
-      "authTypeDirect": "Директно",
-      "authTypeCredential": "Акредитив",
-      "authTypeNone": "Ниједан",
-      "authTypeNoneDesc": "Акредитиви се не чувају. Сваки пут када се повежете, биће вам затражено корисничко име и лозинка; они се не чувају.",
-      "selectCredential": "Изаберите акредитив...",
-      "connectionSettings": "Подешавања везе",
-      "displaySettings": "Подешавања екрана",
-      "audioSettings": "Подешавања звука",
-      "rdpPerformance": "Перформансе РДП-а",
-      "deviceRedirection": "Преусмеравање уређаја",
-      "session": "Сесија",
-      "gateway": "Капија",
-      "remoteApp": "Удаљена апликација",
-      "clipboard": "Међуспремник",
-      "sessionRecording": "Снимање сесије",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "VNC подешавања",
-      "terminalSettings": "Подешавања терминала",
-      "rdpPort": "РДП порт",
-      "username": "Корисничко име",
-      "password": "Лозинка",
-      "passwordSaved": "Лозинка сачувана, унесите текст да бисте је променили",
-      "domain": "Домен",
-      "securityMode": "Безбедносни режим",
-      "width": "Ширина",
-      "height": "Висина",
-      "dpi": "DPI",
-      "clientName": "Име клијента",
-      "initialProgram": "Почетни програм",
-      "serverLayout": "Распоред сервера",
-      "timezone": "Временска зона",
-      "loadBalanceInfo": "Информације о балансу оптерећења / колачић",
-      "loadBalanceInfoDesc": "Колачић RD Connection Broker-а за балансирање оптерећења RDS фарме (нпр. tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "guacd прокси",
-      "guacdHostname": "guacd хост",
-      "guacdHostnamePlaceholder": "Глобално подразумевано",
-      "guacdPort": "ГУАЦД порт",
-      "guacdProxyDesc": "Замените глобалну инстанцу guacd-а за ову везу. Оставите празно да бисте користили глобално конфигурисани guacd.",
-      "gatewayHostname": "Име хоста мрежног пролаза",
-      "gatewayPort": "Порт за пролаз",
-      "gatewayUsername": "Корисничко име на гејтвеју",
-      "gatewayPassword": "Лозинка за пролаз",
-      "gatewayDomain": "Домен капије",
-      "remoteAppProgram": "Програм RemoteApp",
-      "workingDirectory": "Радни директоријум",
-      "arguments": "Аргументи",
-      "normalizeLineEndings": "Нормализуј завршетке линија",
-      "macAddress": "MAC адреса",
-      "broadcastAddress": "Адреса за емитовање",
-      "udpPort": "UDP порт",
-      "waitTimeS": "Време чекања (s)",
-      "driveName": "Назив диска",
-      "drivePath": "Путања диска",
-      "ignoreCertificate": "Игнориши сертификат",
-      "ignoreCertificateDesc": "Дозволи везе са хостовима са самопотписаним сертификатима",
-      "forceLossless": "Присилно без губитака",
-      "forceLosslessDesc": "Присилно кодирање слике без губитака (виши квалитет, већи пропусни опсег)",
-      "disableAudio": "Онемогући звук",
-      "disableAudioDesc": "Искључите сав звук из удаљене сесије",
-      "enableAudioInput": "Омогући аудио улаз (микрофон)",
-      "enableAudioInputDesc": "Прослеђивање локалног микрофона на удаљену сесију",
-      "wallpaper": "Позадина",
-      "wallpaperDesc": "Прикажи позадину радне површине (онемогућавање побољшава перформансе)",
-      "theming": "Темирање",
-      "themingDesc": "Омогући визуелне теме и стилове",
-      "fontSmoothing": "Изглађивање фонта",
-      "fontSmoothingDesc": "Омогући приказивање ClearType фонта",
-      "fullWindowDrag": "Превлачење преко целог прозора",
-      "fullWindowDragDesc": "Приказ садржаја прозора током превлачења",
-      "desktopComposition": "Композиција на радној површини",
-      "desktopCompositionDesc": "Омогући ефекте Aero Glass-а",
-      "menuAnimations": "Анимације менија",
-      "menuAnimationsDesc": "Омогући анимације постепеног постепеног померања менија и слајдова",
-      "disableBitmapCaching": "Онемогући кеширање битмапа",
-      "disableBitmapCachingDesc": "Искључите кеш битмапа (може помоћи код грешака)",
-      "disableOffscreenCaching": "Онемогући кеширање ван екрана",
-      "disableOffscreenCachingDesc": "Искључите кеш меморију ван екрана",
-      "disableGlyphCaching": "Онемогући кеширање глифова",
-      "disableGlyphCachingDesc": "Искључите кеш глифова",
-      "enableGfx": "Омогући графичке ефекте",
-      "enableGfxDesc": "Користите графички цевовод RemoteFX",
-      "enablePrinting": "Омогући штампање",
-      "enablePrintingDesc": "Преусмерите локалне штампаче на удаљену сесију",
-      "enableDriveRedirection": "Омогући преусмеравање диска",
-      "enableDriveRedirectionDesc": "Мапирајте локалну фасциклу као диск у удаљеној сесији",
-      "createDrivePath": "Креирај путању диска",
-      "createDrivePathDesc": "Аутоматски креирај фасциклу ако не постоји",
-      "disableDownload": "Онемогући преузимање",
-      "disableDownloadDesc": "Спречите преузимање датотека са удаљене сесије",
-      "disableUpload": "Онемогући отпремање",
-      "disableUploadDesc": "Спречите отпремање датотека на удаљену сесију",
-      "enableTouch": "Омогући додир",
-      "enableTouchDesc": "Омогући преусмеравање уноса додиром",
-      "consoleSession": "Конзолна сесија",
-      "consoleSessionDesc": "Повежите се са конзолом (сесија 0) уместо нове сесије",
-      "sendWolPacket": "Пошаљи WOL пакет",
-      "sendWolPacketDesc": "Пошаљите магични пакет да пробудите овај хост пре повезивања",
-      "disableCopy": "Онемогући копирање",
-      "disableCopyDesc": "Спречите копирање текста из удаљене сесије",
-      "disablePaste": "Онемогући лепљење",
-      "disablePasteDesc": "Спречите лепљење текста у удаљену сесију",
-      "createPathIfMissing": "Креирај путању ако недостаје",
-      "createPathIfMissingDesc": "Аутоматски креирајте директоријум за снимање",
-      "excludeOutput": "Искључи излаз",
-      "excludeOutputDesc": "Не снимај излаз екрана (само метаподаци)",
-      "excludeMouse": "Искључи миш",
-      "excludeMouseDesc": "Не снимај покрете миша",
-      "includeKeystrokes": "Укључи притиске на тастатури",
-      "includeKeystrokesDesc": "Снимање сирових притиска тастера поред излаза на екран",
-      "vncPort": "VNC порт",
-      "vncPassword": "VNC лозинка",
-      "vncUsernameOptional": "Корисничко име (опционо)",
-      "vncLeaveBlank": "Оставите празно ако није потребно",
-      "cursorMode": "Режим курсора",
-      "swapRedBlue": "Замена црвене/плаве",
-      "swapRedBlueDesc": "Замена црвених и плавих канала боја (решава неке проблеме са бојама)",
-      "readOnly": "Само за читање",
-      "readOnlyDesc": "Погледајте удаљени екран без слања било каквог уноса",
-      "telnetPort": "Телнет порт",
-      "terminalType": "Тип терминала",
-      "fontName": "Назив фонта",
-      "fontSize": "Величина фонта",
-      "colorScheme": "Шема боја",
-      "backspaceKey": "Тастер Backspace",
-      "colorDepth": "Дубина боје",
-      "resizeMethod": "Метод промене величине",
-      "driveNamePlaceholder": "Термикс Драјв",
-      "options": {
-        "any": "Било који",
-        "auto": "Аутоматски",
-        "nlaExtended": "НЛА продужена",
-        "color8": "8-битни",
-        "color16": "16-битни",
-        "color24": "24-битни",
-        "color32": "32-битни",
-        "displayUpdate": "Ажурирање екрана",
-        "reconnect": "Поново се повежите",
-        "preserve": "Сачувај",
-        "unix": "Јуникс (ЛФ)",
-        "windows": "Виндоус (CRLF)",
-        "local": "Локално",
-        "remote": "Даљински",
-        "failsafe": "безбедан",
-        "blackOnWhite": "Црно на белом",
-        "whiteOnBlack": "Бело на црном",
-        "grayOnBlack": "Сиво на црном",
-        "greenOnBlack": "Зелено на црном"
-      }
-    },
-    "remoteDesktop": "Удаљена радна површина",
-    "tabRdp": "РДП",
-    "tabVnc": "VNC",
-    "tabTelnet": "Телнет",
-    "virtualNetwork": "Виртуелна мрежа",
-    "unencryptedShell": "Нешифрована љуска",
-    "remoteDesktopNotes": "Белешке",
-    "userDefaultsNote": "Подешавања која оставите непромењена прате подразумеване вредности вашег хоста.",
-    "connectionOriginNote": "У десктоп апликацији, RDP, VNC и Telnet користе удаљени сервер осим ако хост није подешен на „Овај уређај“, чему је потребан guacd који ова машина може да досегне. Подесите га у подешавањима удаљене радне површине или по хосту под guacd прокси.",
-    "docsLink": "Прикажи документе",
-    "connectionOriginGuacamoleNote": "RDP, VNC и Telnet користе удаљени сервер осим ако не изаберете „Овај уређај“, за шта је потребан guacd који ова машина може да досегне. Подесите га у подешавању guacd URL-а или по хосту под guacd прокси."
-  },
-  "onboarding": {
-    "feature_desktop": "Удаљена радна површина",
-    "feature_desktop_desc": "Отворите RDP, VNC и Telnet сесије у картици, исто као и SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Дубина боје",
-        "description": "Користи се за RDP хостове који га остављају на подразумеваним подешавањима."
-      },
-      "resizeMethod": {
-        "label": "Метод промене величине",
-        "description": "Како удаљени екран прати величину прозора."
-      },
-      "resizeDisplayUpdate": "Ажурирање екрана",
-      "resizeReconnect": "Поново се повежите",
-      "inherit": "Наследи",
-      "on": "Укључено",
-      "off": "Искључено",
-      "forceLossless": {
-        "label": "Присилно без губитака",
-        "description": "Присилно кодирање слике без губитака (виши квалитет, већи пропусни опсег)"
-      },
-      "enableWallpaper": {
-        "label": "Позадина",
-        "description": "Прикажи позадину радне површине (онемогућавање побољшава перформансе)"
-      },
-      "enableFontSmoothing": {
-        "label": "Изглађивање фонта",
-        "description": "Омогући приказивање ClearType фонта"
-      },
-      "enableDesktopComposition": {
-        "label": "Композиција на радној површини",
-        "description": "Омогући ефекте Aero Glass-а"
-      },
-      "disableAudio": {
-        "label": "Онемогући звук",
-        "description": "Искључите сав звук из удаљене сесије"
-      },
-      "enablePrinting": {
-        "label": "Омогући штампање",
-        "description": "Преусмерите локалне штампаче на удаљену сесију"
-      },
-      "enableDrive": {
-        "label": "Омогући преусмеравање диска",
-        "description": "Мапирајте локалну фасциклу као диск у удаљеној сесији"
-      },
-      "disableCopy": {
-        "label": "Онемогући копирање",
-        "description": "Спречите копирање текста из удаљене сесије"
-      },
-      "disablePaste": {
-        "label": "Онемогући лепљење",
-        "description": "Спречите лепљење текста у удаљену сесију"
-      },
-      "group": "Подразумевана подешавања удаљене радне површине",
-      "colorDepth16": "16-битни",
-      "colorDepth24": "24-битни",
-      "colorDepth32": "32-битни"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Омогући удаљену радну површину",
-        "description": "Дозволите RDP, VNC и Telnet везе путем guacd-а."
-      },
-      "guacdUrl": {
-        "label": "URL адреса guacd-а",
-        "description": "Где guacd слуша, као host:port. Променљиве окружења GUACD_URL, GUACD_HOST и GUACD_PORT ово поништавају.",
-        "placeholder": "гуацд:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "РДП"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Телнет"
-      },
-      "rdpPort": {
-        "label": "РДП порт"
-      },
-      "vncPort": {
-        "label": "VNC порт"
-      },
-      "telnetPort": {
-        "label": "Телнет порт"
-      },
-      "rdpSecurity": {
-        "label": "RDP безбедносни режим"
-      },
-      "rdpIgnoreCert": {
-        "label": "Игноришите грешке сертификата"
-      },
-      "guacamoleConfig": {
-        "label": "подешавања GUACD-а"
-      },
-      "enableToolbar": {
-        "label": "Трака са алаткама за удаљену радну површину",
-        "description": "Прикажи траку са алаткама у RDP, VNC и Telnet сесијама."
-      },
-      "displayGroup": "Приказ",
-      "displayDefaultsTab": "Удаљена радна површина"
-    }
-  },
-  "palette": {
-    "connectRdp": "Повежите се са RDP-ом",
-    "connectVnc": "Повежите се са VNC-ом",
-    "connectTelnet": "Повежите се са Телнетом"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Делите сесије удаљене радне површине",
-      "description": "Дозволите дељењу сесија и собама за сарадњу да приказују RDP, VNC и Telnet сесије овог корисника другима."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Потребан је удаљени сервер. Повежите се са удаљеним сервером у Подешавањима да бисте користили овај тип везе."
-  },
-  "plugin": {
-    "name": "Удаљена радна површина"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/sv_SE.json b/plugins/remote-desktop/locales/translated/sv_SE.json
deleted file mode 100644
index 448b074ef..000000000
--- a/plugins/remote-desktop/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "Ansluter till {{type}} session...",
-    "checkingGuacd": "Kontrollerar fjärrskrivbordstjänsten...",
-    "requestingToken": "Begär {{type}} anslutningstoken...",
-    "openingSession": "Öppnar {{type}} session...",
-    "negotiating": "Förhandlar {{type}} handslag...",
-    "sessionReady": "{{type}} session klar",
-    "connectionError": "Anslutningsfel",
-    "connectionFailed": "Anslutningen misslyckades",
-    "failedToConnect": "Misslyckades med att hämta anslutningstoken",
-    "hostNotFound": "Värden hittades inte",
-    "noHostSelected": "Ingen värd vald",
-    "reconnect": "Återanslut",
-    "retry": "Försöka igen",
-    "guacdUnavailable": "Fjärrskrivbordstjänsten (guacd) är inte tillgänglig. Se till att guacd körs, är tillgängligt och korrekt konfigurerat i administratörsinställningarna.",
-    "credentialPromptTitle": "Ange RDP-inloggningsuppgifter",
-    "credentialPromptDescription": "Den här värden är inställd på att be om inloggningsuppgifter vid anslutning. De används endast för den här sessionen och sparas inte.",
-    "connect": "Ansluta",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "Drive-filer",
-      "parent": "Föräldrakatalog",
-      "refresh": "Uppdatera",
-      "empty": "Den här mappen är tom",
-      "listFailed": "Kunde inte läsa den här mappen",
-      "download": "Ladda ner",
-      "downloadFailed": "Misslyckades med att ladda ner {{name}}",
-      "upload": "Ladda upp filer",
-      "uploading": "Laddar upp {{name}}...",
-      "uploaded": "Uppladdad {{name}}",
-      "uploadFailed": "Misslyckades med att ladda upp {{name}}",
-      "uploadDisabled": "Uppladdningar är inaktiverade för den här anslutningen",
-      "driveUnavailable": "Aktivera omdirigering av RDP-enheter innan du laddar upp filer",
-      "driveNotWritable": "guacd kan inte skriva till enhetsmappen. Kontrollera GUACD_DRIVE_PATH (eller värdens sökväg för enhet) och dess behörigheter.",
-      "dropToUpload": "Släpp filer för att ladda upp"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (Låsskärm)",
-      "winKey": "Windows-tangenten",
-      "superL": "Super+L (Låsskärm)",
-      "superKey": "Supernyckel",
-      "super": "Super",
-      "cmdL": "Cmd+L (Låsskärm)",
-      "cmdKey": "Kommandotangent",
-      "cmd": "Kommando",
-      "ctrl": "Ctrl",
-      "alt": "Alt",
-      "shift": "Flytta",
-      "win": "Vinna",
-      "stickyActive": "{{key}} (låst – klicka för att släppa)",
-      "stickyInactive": "{{key}} (klicka för att låsa)",
-      "esc": "Fly",
-      "tab": "Flik",
-      "home": "Hem",
-      "end": "Avsluta",
-      "pageUp": "Sida upp",
-      "pageDown": "Sida ner",
-      "arrowUp": "Pil upp",
-      "arrowDown": "Pil nedåt",
-      "arrowLeft": "Pil vänster",
-      "arrowRight": "Pil höger",
-      "fnToggle": "Funktionstangenter",
-      "reconnect": "Återanslut sessionen",
-      "collapse": "Komprimera verktygsfältet",
-      "expand": "Expandera verktygsfältet",
-      "dragHandle": "Dra för att flytta",
-      "hide": "Dölj för den här sessionen. För att inaktivera det permanent, öppna Värdinställningar → Allmänt → Anslutningsverktygsfält.",
-      "zoomIn": "Zooma in",
-      "zoomOut": "Zooma ut",
-      "resetZoom": "Återställ zoom",
-      "fitToScreen": "Anpassa till skärmen",
-      "switchToTrackpad": "Växla till styrplatteläge (dra för att flytta markören, tryck för att klicka)",
-      "switchToTouch": "Växla till pekläge (tryck direkt där du vill klicka)"
-    },
-    "disabled": "Fjärrskrivbord är avstängt. En administratör kan aktivera det i Inställningar."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Öppnad i Windows Fjärrskrivbord",
-    "nativeRdpFailed": "Misslyckades med att öppna Windows Fjärrskrivbord",
-    "openNativeRdp": "Öppna i Windows Fjärrskrivbord",
-    "guac": {
-      "toolbar": "Verktygsfält",
-      "connection": "Förbindelse",
-      "authentication": "Autentisering",
-      "storedCredential": "Lagrade autentiseringsuppgifter",
-      "authMethod": "Autentiseringsmetod",
-      "authTypeDirect": "Direkt",
-      "authTypeCredential": "Referenser",
-      "authTypeNone": "Ingen",
-      "authTypeNoneDesc": "Inga inloggningsuppgifter lagras. Du kommer att bli ombedd att ange ett användarnamn och lösenord varje gång du ansluter; de sparas inte.",
-      "selectCredential": "Välj en behörighetsinloggning...",
-      "connectionSettings": "Anslutningsinställningar",
-      "displaySettings": "Skärminställningar",
-      "audioSettings": "Ljudinställningar",
-      "rdpPerformance": "RDP-prestanda",
-      "deviceRedirection": "Omdirigering av enhet",
-      "session": "Session",
-      "gateway": "Inkörsport",
-      "remoteApp": "Fjärrapp",
-      "clipboard": "Urklipp",
-      "sessionRecording": "Sessionsinspelning",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "VNC-inställningar",
-      "terminalSettings": "Terminalinställningar",
-      "rdpPort": "RDP-port",
-      "username": "Användarnamn",
-      "password": "Lösenord",
-      "passwordSaved": "Lösenordet sparats, skriv för att ändra",
-      "domain": "Domän",
-      "securityMode": "Säkerhetsläge",
-      "width": "Bredd",
-      "height": "Höjd",
-      "dpi": "DPI",
-      "clientName": "Klientnamn",
-      "initialProgram": "Inledande program",
-      "serverLayout": "Serverlayout",
-      "timezone": "Tidszon",
-      "loadBalanceInfo": "Information om belastningsbalans / Cookie",
-      "loadBalanceInfoDesc": "RD Connection Broker-cookie för lastbalansering av RDS-farm (t.ex. tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "guacd-proxy",
-      "guacdHostname": "guacd-värd",
-      "guacdHostnamePlaceholder": "Global standard",
-      "guacdPort": "guacd-porten",
-      "guacdProxyDesc": "Åsidosätt den globala guacd-instansen för den här anslutningen. Lämna tomt om du vill använda den globalt konfigurerade guacd-instansen.",
-      "gatewayHostname": "Gateway-värdnamn",
-      "gatewayPort": "Gateway-porten",
-      "gatewayUsername": "Gateway-användarnamn",
-      "gatewayPassword": "Gateway-lösenord",
-      "gatewayDomain": "Gateway-domän",
-      "remoteAppProgram": "RemoteApp-programmet",
-      "workingDirectory": "Arbetskatalog",
-      "arguments": "Argument",
-      "normalizeLineEndings": "Normalisera radavslutningar",
-      "macAddress": "MAC-adress",
-      "broadcastAddress": "Sändningsadress",
-      "udpPort": "UDP-port",
-      "waitTimeS": "Väntetid (s)",
-      "driveName": "Enhetsnamn",
-      "drivePath": "Körväg",
-      "ignoreCertificate": "Ignorera certifikat",
-      "ignoreCertificateDesc": "Tillåt anslutningar till värdar med självsignerade certifikat",
-      "forceLossless": "Tvinga förlustfri",
-      "forceLosslessDesc": "Tvinga fram förlustfri bildkodning (högre kvalitet, mer bandbredd)",
-      "disableAudio": "Inaktivera ljud",
-      "disableAudioDesc": "Stäng av allt ljud från fjärrsessionen",
-      "enableAudioInput": "Aktivera ljudingång (mikrofon)",
-      "enableAudioInputDesc": "Vidarebefordra den lokala mikrofonen till fjärrsessionen",
-      "wallpaper": "Tapet",
-      "wallpaperDesc": "Visa skrivbordsbakgrund (inaktivering förbättrar prestandan)",
-      "theming": "Teman",
-      "themingDesc": "Aktivera visuella teman och stilar",
-      "fontSmoothing": "Utjämning av teckensnitt",
-      "fontSmoothingDesc": "Aktivera rendering av ClearType-teckensnitt",
-      "fullWindowDrag": "Drag i hela fönstret",
-      "fullWindowDragDesc": "Visa fönsterinnehållet när du drar",
-      "desktopComposition": "Skrivbordskomposition",
-      "desktopCompositionDesc": "Aktivera Aero Glass-effekter",
-      "menuAnimations": "Menyanimationer",
-      "menuAnimationsDesc": "Aktivera menytoning och glidande animationer",
-      "disableBitmapCaching": "Inaktivera bitmappscachning",
-      "disableBitmapCachingDesc": "Stäng av bitmappscachen (kan hjälpa till med problem)",
-      "disableOffscreenCaching": "Inaktivera cachelagring utanför skärmen",
-      "disableOffscreenCachingDesc": "Stäng av cache utanför skärmen",
-      "disableGlyphCaching": "Inaktivera glyf-cachning",
-      "disableGlyphCachingDesc": "Stäng av glyph-cache",
-      "enableGfx": "Aktivera GFX",
-      "enableGfxDesc": "Använd RemoteFX-grafikpipeline",
-      "enablePrinting": "Aktivera utskrift",
-      "enablePrintingDesc": "Omdirigera lokala skrivare till fjärrsessionen",
-      "enableDriveRedirection": "Aktivera omdirigering av kördata",
-      "enableDriveRedirectionDesc": "Mappa en lokal mapp som en enhet i fjärrsessionen",
-      "createDrivePath": "Skapa drivväg",
-      "createDrivePathDesc": "Skapa mappen automatiskt om den inte finns",
-      "disableDownload": "Inaktivera nedladdning",
-      "disableDownloadDesc": "Förhindra nedladdning av filer från fjärrsessionen",
-      "disableUpload": "Inaktivera uppladdning",
-      "disableUploadDesc": "Förhindra uppladdning av filer till fjärrsessionen",
-      "enableTouch": "Aktivera pekskärm",
-      "enableTouchDesc": "Aktivera vidarebefordran av pekinmatning",
-      "consoleSession": "Konsolsession",
-      "consoleSessionDesc": "Anslut till konsolen (session 0) istället för en ny session",
-      "sendWolPacket": "Skicka WOL-paket",
-      "sendWolPacketDesc": "Skicka ett magiskt paket för att väcka den här värden innan anslutning",
-      "disableCopy": "Inaktivera kopiering",
-      "disableCopyDesc": "Förhindra kopiering av text från fjärrsessionen",
-      "disablePaste": "Inaktivera inklistring",
-      "disablePasteDesc": "Förhindra att text klistras in i fjärrsessionen",
-      "createPathIfMissing": "Skapa sökväg om den saknas",
-      "createPathIfMissingDesc": "Skapa inspelningskatalogen automatiskt",
-      "excludeOutput": "Exkludera utdata",
-      "excludeOutputDesc": "Spela inte in skärmutdata (endast metadata)",
-      "excludeMouse": "Uteslut mus",
-      "excludeMouseDesc": "Spela inte in musrörelser",
-      "includeKeystrokes": "Inkludera tangenttryckningar",
-      "includeKeystrokesDesc": "Spela in råa tangenttryckningar utöver skärmutdata",
-      "vncPort": "VNC-port",
-      "vncPassword": "VNC-lösenord",
-      "vncUsernameOptional": "Användarnamn (valfritt)",
-      "vncLeaveBlank": "Lämna tomt om det inte behövs",
-      "cursorMode": "Markörläge",
-      "swapRedBlue": "Byt röd/blå",
-      "swapRedBlueDesc": "Byt ut de röda och blå färgkanalerna (åtgärdar vissa färgproblem)",
-      "readOnly": "Skrivskyddad",
-      "readOnlyDesc": "Visa fjärrskärmen utan att skicka någon inmatning",
-      "telnetPort": "Telnet-port",
-      "terminalType": "Terminaltyp",
-      "fontName": "Typsnittsnamn",
-      "fontSize": "Fontstorlek",
-      "colorScheme": "Färgschema",
-      "backspaceKey": "Backstegstangenten",
-      "colorDepth": "Färgdjup",
-      "resizeMethod": "Ändra storleksmetod",
-      "driveNamePlaceholder": "Termix Drive",
-      "options": {
-        "any": "Några",
-        "auto": "Bil",
-        "nlaExtended": "NLA-utökning",
-        "color8": "8-bitars",
-        "color16": "16-bitars",
-        "color24": "24-bitars",
-        "color32": "32-bitars",
-        "displayUpdate": "Uppdatering av displayen",
-        "reconnect": "Återanslut",
-        "preserve": "Bevara",
-        "unix": "Unix (LF)",
-        "windows": "Windows (CRLF)",
-        "local": "Lokal",
-        "remote": "Avlägsen",
-        "failsafe": "felsäker",
-        "blackOnWhite": "Svart på vitt",
-        "whiteOnBlack": "Vitt på svart",
-        "grayOnBlack": "Grått på svart",
-        "greenOnBlack": "Grönt på svart"
-      }
-    },
-    "remoteDesktop": "Fjärrskrivbord",
-    "tabRdp": "Landsbygdsutveckling",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "Virtuellt nätverk",
-    "unencryptedShell": "Okrypterat skal",
-    "remoteDesktopNotes": "Anteckningar",
-    "userDefaultsNote": "Inställningar som du lämnar oförändrade följer dina standardinställningar.",
-    "connectionOriginNote": "I skrivbordsappen använder RDP, VNC och Telnet fjärrservern om inte värden är inställd på Den här enheten, vilket kräver en guacd som den här maskinen kan nå. Ställ in en i inställningarna för fjärrskrivbord, eller per värd under guacd Proxy.",
-    "docsLink": "Visa dokument",
-    "connectionOriginGuacamoleNote": "RDP, VNC och Telnet använder fjärrservern om du inte väljer \"Den här enheten\", vilket kräver en guacd som den här maskinen kan nå. Ange en i guacd URL-inställningen, eller per värd under guacd Proxy."
-  },
-  "onboarding": {
-    "feature_desktop": "Fjärrskrivbord",
-    "feature_desktop_desc": "Öppna RDP-, VNC- och Telnet-sessioner i en flik, samma som med SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Färgdjup",
-        "description": "Används för RDP-värdar som lämnar den på standardvärdet."
-      },
-      "resizeMethod": {
-        "label": "Ändra storleksmetod",
-        "description": "Hur fjärrskärmen följer fönsterstorleken."
-      },
-      "resizeDisplayUpdate": "Uppdatering av displayen",
-      "resizeReconnect": "Återanslut",
-      "inherit": "Ärva",
-      "on": "På",
-      "off": "Av",
-      "forceLossless": {
-        "label": "Tvinga förlustfri",
-        "description": "Tvinga fram förlustfri bildkodning (högre kvalitet, mer bandbredd)"
-      },
-      "enableWallpaper": {
-        "label": "Tapet",
-        "description": "Visa skrivbordsbakgrund (inaktivering förbättrar prestandan)"
-      },
-      "enableFontSmoothing": {
-        "label": "Utjämning av teckensnitt",
-        "description": "Aktivera rendering av ClearType-teckensnitt"
-      },
-      "enableDesktopComposition": {
-        "label": "Skrivbordskomposition",
-        "description": "Aktivera Aero Glass-effekter"
-      },
-      "disableAudio": {
-        "label": "Inaktivera ljud",
-        "description": "Stäng av allt ljud från fjärrsessionen"
-      },
-      "enablePrinting": {
-        "label": "Aktivera utskrift",
-        "description": "Omdirigera lokala skrivare till fjärrsessionen"
-      },
-      "enableDrive": {
-        "label": "Aktivera omdirigering av kördata",
-        "description": "Mappa en lokal mapp som en enhet i fjärrsessionen"
-      },
-      "disableCopy": {
-        "label": "Inaktivera kopiering",
-        "description": "Förhindra kopiering av text från fjärrsessionen"
-      },
-      "disablePaste": {
-        "label": "Inaktivera inklistring",
-        "description": "Förhindra att text klistras in i fjärrsessionen"
-      },
-      "group": "Standardinställningar för fjärrskrivbord",
-      "colorDepth16": "16-bitars",
-      "colorDepth24": "24-bitars",
-      "colorDepth32": "32-bitars"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Aktivera fjärrskrivbord",
-        "description": "Tillåt RDP-, VNC- och Telnet-anslutningar via guacd."
-      },
-      "guacdUrl": {
-        "label": "guacd-URL",
-        "description": "Där guacd lyssnar som host:port. Miljövariablerna GUACD_URL, GUACD_HOST och GUACD_PORT åsidosätter detta.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "Landsbygdsutveckling"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "RDP-port"
-      },
-      "vncPort": {
-        "label": "VNC-port"
-      },
-      "telnetPort": {
-        "label": "Telnet-port"
-      },
-      "rdpSecurity": {
-        "label": "RDP-säkerhetsläge"
-      },
-      "rdpIgnoreCert": {
-        "label": "Ignorera certifikatfel"
-      },
-      "guacamoleConfig": {
-        "label": "guacd-inställningar"
-      },
-      "enableToolbar": {
-        "label": "Verktygsfält för fjärrskrivbord",
-        "description": "Visa verktygsfältet i RDP-, VNC- och Telnet-sessioner."
-      },
-      "displayGroup": "Visa",
-      "displayDefaultsTab": "Fjärrskrivbord"
-    }
-  },
-  "palette": {
-    "connectRdp": "Anslut med RDP",
-    "connectVnc": "Anslut med VNC",
-    "connectTelnet": "Anslut med Telnet"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Dela fjärrskrivbordssessioner",
-      "description": "Låt sessionsdelning och samarbetsrum visa den här användarens RDP-, VNC- och Telnet-sessioner för andra."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Fjärrserver krävs. Anslut en fjärrserver i Inställningar för att använda den här anslutningstypen."
-  },
-  "plugin": {
-    "name": "Fjärrskrivbord"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/th_TH.json b/plugins/remote-desktop/locales/translated/th_TH.json
deleted file mode 100644
index 059400967..000000000
--- a/plugins/remote-desktop/locales/translated/th_TH.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "กำลังเชื่อมต่อกับเซสชัน {{type}}...",
-    "checkingGuacd": "กำลังตรวจสอบบริการเดสก์ท็อประยะไกล...",
-    "requestingToken": "กำลังขอโทเค็นการเชื่อมต่อ {{type}}...",
-    "openingSession": "กำลังเปิดเซสชั่น {{type}}...",
-    "negotiating": "กำลังเจรจาต่อรองด้วยการจับมือ {{type}}...",
-    "sessionReady": "{{type}} เซสชั่นพร้อมใช้งาน",
-    "connectionError": "ข้อผิดพลาดในการเชื่อมต่อ",
-    "connectionFailed": "การเชื่อมต่อล้มเหลว",
-    "failedToConnect": "ไม่สามารถรับโทเค็นการเชื่อมต่อได้",
-    "hostNotFound": "ไม่พบโฮสต์",
-    "noHostSelected": "ไม่ได้เลือกโฮสต์",
-    "reconnect": "เชื่อมต่อใหม่",
-    "retry": "ลองใหม่อีกครั้ง",
-    "guacdUnavailable": "บริการเดสก์ท็อประยะไกล (guacd) ไม่พร้อมใช้งาน โปรดตรวจสอบให้แน่ใจว่า guacd กำลังทำงาน สามารถเข้าถึงได้ และกำหนดค่าอย่างถูกต้องในการตั้งค่าผู้ดูแลระบบ",
-    "credentialPromptTitle": "ป้อนข้อมูลรับรอง RDP",
-    "credentialPromptDescription": "โฮสต์นี้ตั้งค่าให้ขอข้อมูลรับรองเมื่อเชื่อมต่อ ข้อมูลเหล่านี้จะใช้สำหรับเซสชันนี้เท่านั้นและจะไม่ถูกบันทึกไว้",
-    "connect": "เชื่อมต่อ",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "ไฟล์ไดรฟ์",
-      "parent": "ไดเร็กทอรีผู้ปกครอง",
-      "refresh": "รีเฟรช",
-      "empty": "โฟลเดอร์นี้ว่างเปล่า",
-      "listFailed": "ไม่สามารถอ่านโฟลเดอร์นี้ได้",
-      "download": "ดาวน์โหลด",
-      "downloadFailed": "ไม่สามารถดาวน์โหลด {{name}} ได้",
-      "upload": "อัปโหลดไฟล์",
-      "uploading": "กำลังอัปโหลด {{name}}...",
-      "uploaded": "อัปโหลดแล้ว {{name}}",
-      "uploadFailed": "การอัปโหลดล้มเหลว {{name}}",
-      "uploadDisabled": "การอัปโหลดถูกปิดใช้งานสำหรับการเชื่อมต่อนี้",
-      "driveUnavailable": "เปิดใช้งานการส่งต่อไดรฟ์ RDP ก่อนอัปโหลดไฟล์",
-      "driveNotWritable": "guacd ไม่สามารถเขียนลงในโฟลเดอร์ไดรฟ์ได้ โปรดตรวจสอบ GUACD_DRIVE_PATH (หรือเส้นทางไดรฟ์ของโฮสต์) และสิทธิ์การเข้าถึง",
-      "dropToUpload": "ลากไฟล์เพื่ออัปโหลด"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (หน้าจอล็อก)",
-      "winKey": "ปุ่ม Windows",
-      "superL": "Super+L (หน้าจอล็อก)",
-      "superKey": "ซูเปอร์คีย์",
-      "super": "สุดยอด",
-      "cmdL": "กด Cmd+L (หน้าจอล็อก)",
-      "cmdKey": "ปุ่มคำสั่ง",
-      "cmd": "ผู้บัญชาการ",
-      "ctrl": "Ctrl",
-      "alt": "อัลท์",
-      "shift": "กะ",
-      "win": "ชนะ",
-      "stickyActive": "{{key}} (ล็อคอยู่ - คลิกเพื่อปลดล็อค)",
-      "stickyInactive": "{{key}} (คลิกเพื่อล็อค)",
-      "esc": "หนี",
-      "tab": "แท็บ",
-      "home": "บ้าน",
-      "end": "จบ",
-      "pageUp": "เลื่อนขึ้น",
-      "pageDown": "เลื่อนลง",
-      "arrowUp": "ลูกศรขึ้น",
-      "arrowDown": "ลูกศรลง",
-      "arrowLeft": "ลูกศรซ้าย",
-      "arrowRight": "ลูกศรขวา",
-      "fnToggle": "ปุ่มฟังก์ชัน",
-      "reconnect": "เซสชั่นเชื่อมต่อใหม่",
-      "collapse": "ยุบแถบเครื่องมือ",
-      "expand": "ขยายแถบเครื่องมือ",
-      "dragHandle": "ลากเพื่อจัดตำแหน่งใหม่",
-      "hide": "ซ่อนไว้สำหรับการใช้งานในครั้งนี้ หากต้องการปิดใช้งานอย่างถาวร ให้เปิด การตั้งค่าโฮสต์ → ทั่วไป → แถบเครื่องมือการเชื่อมต่อ",
-      "zoomIn": "ซูมเข้า",
-      "zoomOut": "ซูมออก",
-      "resetZoom": "รีเซ็ตการซูม",
-      "fitToScreen": "พอดีกับหน้าจอ",
-      "switchToTrackpad": "เปลี่ยนไปใช้โหมดแทร็กแพด (ลากเพื่อเลื่อนเคอร์เซอร์ แตะเพื่อคลิก)",
-      "switchToTouch": "เปลี่ยนเป็นโหมดสัมผัส (แตะตรงจุดที่คุณต้องการคลิก)"
-    },
-    "disabled": "ฟังก์ชันการเข้าถึงระยะไกล (Remote Desktop) ถูกปิดใช้งานอยู่ ผู้ดูแลระบบสามารถเปิดใช้งานได้ในการตั้งค่า"
-  },
-  "hosts": {
-    "nativeRdpOpened": "เปิดใช้งานใน Windows Remote Desktop",
-    "nativeRdpFailed": "ไม่สามารถเปิด Windows Remote Desktop ได้",
-    "openNativeRdp": "เปิดใน Windows Remote Desktop",
-    "guac": {
-      "toolbar": "แถบเครื่องมือ",
-      "connection": "การเชื่อมต่อ",
-      "authentication": "การตรวจสอบสิทธิ์",
-      "storedCredential": "ข้อมูลประจำตัวที่บันทึกไว้",
-      "authMethod": "วิธีการตรวจสอบสิทธิ์",
-      "authTypeDirect": "โดยตรง",
-      "authTypeCredential": "ใบรับรอง",
-      "authTypeNone": "ไม่มี",
-      "authTypeNoneDesc": "ไม่มีการจัดเก็บข้อมูลประจำตัวใดๆ คุณจะต้องป้อนชื่อผู้ใช้และรหัสผ่านทุกครั้งที่เชื่อมต่อ ซึ่งจะไม่ถูกบันทึกไว้",
-      "selectCredential": "เลือกข้อมูลประจำตัว...",
-      "connectionSettings": "การตั้งค่าการเชื่อมต่อ",
-      "displaySettings": "การตั้งค่าการแสดงผล",
-      "audioSettings": "การตั้งค่าเสียง",
-      "rdpPerformance": "ประสิทธิภาพ RDP",
-      "deviceRedirection": "การเปลี่ยนเส้นทางอุปกรณ์",
-      "session": "การประชุม",
-      "gateway": "เกตเวย์",
-      "remoteApp": "รีโมทแอป",
-      "clipboard": "คลิปบอร์ด",
-      "sessionRecording": "การบันทึกการประชุม",
-      "wakeOnLan": "ปลุกเครื่องผ่าน LAN",
-      "vncSettings": "การตั้งค่า VNC",
-      "terminalSettings": "การตั้งค่าเทอร์มินัล",
-      "rdpPort": "พอร์ต RDP",
-      "username": "ชื่อผู้ใช้",
-      "password": "รหัสผ่าน",
-      "passwordSaved": "บันทึกรหัสผ่านแล้ว กรุณาพิมพ์เพื่อเปลี่ยนรหัสผ่าน",
-      "domain": "โดเมน",
-      "securityMode": "โหมดความปลอดภัย",
-      "width": "ความกว้าง",
-      "height": "ความสูง",
-      "dpi": "ดีพีไอ",
-      "clientName": "ชื่อลูกค้า",
-      "initialProgram": "โปรแกรมเริ่มต้น",
-      "serverLayout": "เค้าโครงเซิร์ฟเวอร์",
-      "timezone": "เขตเวลา",
-      "loadBalanceInfo": "ข้อมูลการปรับสมดุลโหลด / คุกกี้",
-      "loadBalanceInfoDesc": "คุกกี้ RD Connection Broker สำหรับการปรับสมดุลโหลดของฟาร์ม RDS (เช่น tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "guacd Proxy",
-      "guacdHostname": "guacd Host",
-      "guacdHostnamePlaceholder": "ค่าเริ่มต้นทั่วโลก",
-      "guacdPort": "guacd Port",
-      "guacdProxyDesc": "แทนที่อินสแตนซ์ guacd ทั่วโลกสำหรับการเชื่อมต่อนี้ หากต้องการใช้ guacd ที่กำหนดค่าไว้ทั่วโลก ให้เว้นว่างไว้",
-      "gatewayHostname": "ชื่อโฮสต์เกตเวย์",
-      "gatewayPort": "พอร์ตเกตเวย์",
-      "gatewayUsername": "ชื่อผู้ใช้เกตเวย์",
-      "gatewayPassword": "รหัสผ่านเกตเวย์",
-      "gatewayDomain": "โดเมนเกตเวย์",
-      "remoteAppProgram": "โปรแกรม RemoteApp",
-      "workingDirectory": "ไดเร็กทอรีการทำงาน",
-      "arguments": "ข้อโต้แย้ง",
-      "normalizeLineEndings": "ปรับความยาวบรรทัดให้เป็นมาตรฐาน",
-      "macAddress": "ที่อยู่ MAC",
-      "broadcastAddress": "ที่อยู่กระจายเสียง",
-      "udpPort": "พอร์ต UDP",
-      "waitTimeS": "ระยะเวลารอคอย (วินาที)",
-      "driveName": "ชื่อไดรฟ์",
-      "drivePath": "เส้นทางขับรถ",
-      "ignoreCertificate": "ละเว้นใบรับรอง",
-      "ignoreCertificateDesc": "อนุญาตการเชื่อมต่อกับโฮสต์ที่มีใบรับรองที่ลงนามด้วยตนเอง",
-      "forceLossless": "บังคับการสูญเสีย",
-      "forceLosslessDesc": "บังคับใช้การเข้ารหัสภาพแบบไม่สูญเสียคุณภาพ (คุณภาพสูงกว่า ใช้แบนด์วิดท์มากกว่า)",
-      "disableAudio": "ปิดใช้งานเสียง",
-      "disableAudioDesc": "ปิดเสียงทั้งหมดจากการเชื่อมต่อระยะไกล",
-      "enableAudioInput": "เปิดใช้งานการรับเสียง (ไมโครโฟน)",
-      "enableAudioInputDesc": "ส่งต่อไมโครโฟนในเครื่องไปยังเซสชันระยะไกล",
-      "wallpaper": "วอลเปเปอร์",
-      "wallpaperDesc": "แสดงภาพพื้นหลังเดสก์ท็อป (การปิดใช้งานจะช่วยเพิ่มประสิทธิภาพ)",
-      "theming": "ธีม",
-      "themingDesc": "เปิดใช้งานธีมและสไตล์ภาพ",
-      "fontSmoothing": "การปรับความเรียบของแบบอักษร",
-      "fontSmoothingDesc": "เปิดใช้งานการแสดงผลฟอนต์ ClearType",
-      "fullWindowDrag": "ลากแบบเต็มหน้าต่าง",
-      "fullWindowDragDesc": "แสดงเนื้อหาในหน้าต่างขณะลาก",
-      "desktopComposition": "การจัดองค์ประกอบเดสก์ท็อป",
-      "desktopCompositionDesc": "เปิดใช้งานเอฟเฟกต์กระจก Aero",
-      "menuAnimations": "แอนิเมชันเมนู",
-      "menuAnimationsDesc": "เปิดใช้งานแอนิเมชั่นเฟดและสไลด์ของเมนู",
-      "disableBitmapCaching": "ปิดใช้งานการแคชภาพบิตแมป",
-      "disableBitmapCachingDesc": "ปิดใช้งานแคชภาพบิตแมป (อาจช่วยลดปัญหาภาพกระตุกได้)",
-      "disableOffscreenCaching": "ปิดใช้งานการแคชแบบออฟสกรีน",
-      "disableOffscreenCachingDesc": "ปิดใช้งานแคชแบบออฟไลน์",
-      "disableGlyphCaching": "ปิดใช้งานการแคชสัญลักษณ์",
-      "disableGlyphCachingDesc": "ปิดใช้งานแคชสัญลักษณ์",
-      "enableGfx": "เปิดใช้งาน GFX",
-      "enableGfxDesc": "ใช้ไปป์ไลน์กราฟิก RemoteFX",
-      "enablePrinting": "เปิดใช้งานการพิมพ์",
-      "enablePrintingDesc": "โอนย้ายเครื่องพิมพ์ในเครื่องไปยังเซสชันระยะไกล",
-      "enableDriveRedirection": "เปิดใช้งานการเปลี่ยนเส้นทางไดรฟ์",
-      "enableDriveRedirectionDesc": "แมปโฟลเดอร์ในเครื่องเป็นไดรฟ์ในเซสชันระยะไกล",
-      "createDrivePath": "สร้างเส้นทางไดรฟ์",
-      "createDrivePathDesc": "สร้างโฟลเดอร์โดยอัตโนมัติหากยังไม่มีอยู่",
-      "disableDownload": "ปิดใช้งานการดาวน์โหลด",
-      "disableDownloadDesc": "ป้องกันการดาวน์โหลดไฟล์จากการเชื่อมต่อระยะไกล",
-      "disableUpload": "ปิดใช้งานการอัปโหลด",
-      "disableUploadDesc": "ป้องกันการอัปโหลดไฟล์ไปยังเซสชันระยะไกล",
-      "enableTouch": "เปิดใช้งานระบบสัมผัส",
-      "enableTouchDesc": "เปิดใช้งานการส่งต่อข้อมูลการสัมผัส",
-      "consoleSession": "เซสชันคอนโซล",
-      "consoleSessionDesc": "เชื่อมต่อกับคอนโซล (เซสชัน 0) แทนที่จะสร้างเซสชันใหม่",
-      "sendWolPacket": "ส่งแพ็กเก็ต WOL",
-      "sendWolPacketDesc": "ส่งแพ็กเก็ตเวทมนตร์เพื่อปลุกโฮสต์นี้ก่อนเชื่อมต่อ",
-      "disableCopy": "ปิดใช้งานการคัดลอก",
-      "disableCopyDesc": "ป้องกันการคัดลอกข้อความจากเซสชันระยะไกล",
-      "disablePaste": "ปิดใช้งานการวาง",
-      "disablePasteDesc": "ป้องกันการวางข้อความลงในเซสชันระยะไกล",
-      "createPathIfMissing": "สร้างเส้นทางหากยังไม่มีอยู่",
-      "createPathIfMissingDesc": "สร้างไดเร็กทอรีสำหรับการบันทึกโดยอัตโนมัติ",
-      "excludeOutput": "ไม่รวมผลลัพธ์",
-      "excludeOutputDesc": "ห้ามบันทึกข้อมูลที่แสดงบนหน้าจอ (บันทึกเฉพาะข้อมูลเมตาเท่านั้น)",
-      "excludeMouse": "ไม่รวมเมาส์",
-      "excludeMouseDesc": "ห้ามบันทึกการเคลื่อนไหวของเมาส์",
-      "includeKeystrokes": "รวมการกดแป้นพิมพ์",
-      "includeKeystrokesDesc": "บันทึกการกดแป้นพิมพ์ดิบนอกเหนือจากข้อมูลที่แสดงผลบนหน้าจอ",
-      "vncPort": "พอร์ต VNC",
-      "vncPassword": "รหัสผ่าน VNC",
-      "vncUsernameOptional": "ชื่อผู้ใช้ (ไม่บังคับ)",
-      "vncLeaveBlank": "เว้นว่างไว้หากไม่ต้องการใช้",
-      "cursorMode": "โหมดเคอร์เซอร์",
-      "swapRedBlue": "สลับสีแดง/น้ำเงิน",
-      "swapRedBlueDesc": "สลับช่องสีแดงและสีน้ำเงิน (แก้ไขปัญหาเรื่องสีบางอย่าง)",
-      "readOnly": "อ่านอย่างเดียว",
-      "readOnlyDesc": "ดูหน้าจอระยะไกลโดยไม่ต้องส่งข้อมูลใดๆ",
-      "telnetPort": "พอร์ตเทลเน็ต",
-      "terminalType": "ประเภทเทอร์มินัล",
-      "fontName": "ชื่อแบบอักษร",
-      "fontSize": "ขนาดตัวอักษร",
-      "colorScheme": "โทนสี",
-      "backspaceKey": "ปุ่มลบ",
-      "colorDepth": "ความลึกของสี",
-      "resizeMethod": "วิธีการปรับขนาด",
-      "driveNamePlaceholder": "เทอร์มิกซ์ไดรฟ์",
-      "options": {
-        "any": "ใดๆ",
-        "auto": "อัตโนมัติ",
-        "nlaExtended": "NLA ขยาย",
-        "color8": "8 บิต",
-        "color16": "16 บิต",
-        "color24": "24 บิต",
-        "color32": "32 บิต",
-        "displayUpdate": "อัปเดตการแสดงผล",
-        "reconnect": "เชื่อมต่อใหม่",
-        "preserve": "อนุรักษ์",
-        "unix": "ยูนิกซ์ (LF)",
-        "windows": "วินโดวส์ (CRLF)",
-        "local": "ท้องถิ่น",
-        "remote": "ระยะไกล",
-        "failsafe": "ระบบป้องกันความล้มเหลว",
-        "blackOnWhite": "สีดำบนพื้นขาว",
-        "whiteOnBlack": "สีขาวบนพื้นดำ",
-        "grayOnBlack": "สีเทาบนพื้นดำ",
-        "greenOnBlack": "สีเขียวบนพื้นดำ"
-      }
-    },
-    "remoteDesktop": "รีโมทเดสก์ท็อป",
-    "tabRdp": "อาร์ดีพี",
-    "tabVnc": "วีเอ็นซี",
-    "tabTelnet": "เทลเน็ต",
-    "virtualNetwork": "เครือข่ายเสมือน",
-    "unencryptedShell": "เชลล์ที่ไม่ได้เข้ารหัส",
-    "remoteDesktopNotes": "หมายเหตุ",
-    "userDefaultsNote": "การตั้งค่าที่คุณไม่ได้เปลี่ยนแปลงจะใช้ค่าเริ่มต้นของโฮสต์ของคุณ",
-    "connectionOriginNote": "ในแอปพลิเคชันบนเดสก์ท็อป RDP, VNC และ Telnet จะใช้เซิร์ฟเวอร์ระยะไกล เว้นแต่ว่าโฮสต์จะถูกตั้งค่าเป็น \"อุปกรณ์นี้\" ซึ่งจำเป็นต้องมี guacd ที่เครื่องนี้สามารถเข้าถึงได้ ตั้งค่าได้ในการตั้งค่าเดสก์ท็อประยะไกล หรือต่อโฮสต์ภายใต้ guacd Proxy",
-    "docsLink": "ดูเอกสาร",
-    "connectionOriginGuacamoleNote": "RDP, VNC และ Telnet จะใช้เซิร์ฟเวอร์ระยะไกล เว้นแต่คุณจะเลือก \"อุปกรณ์นี้\" ซึ่งจำเป็นต้องมี guacd ที่เครื่องนี้สามารถเข้าถึงได้ ตั้งค่าได้ในการตั้งค่า URL ของ guacd หรือต่อโฮสต์ภายใต้พร็อกซีของ guacd"
-  },
-  "onboarding": {
-    "feature_desktop": "การเข้าถึงเดสก์ท็อประยะไกล",
-    "feature_desktop_desc": "เปิดเซสชัน RDP, VNC และ Telnet ในแท็บเดียวกัน เหมือนกับการเปิด SSH"
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "ความลึกของสี",
-        "description": "ใช้สำหรับโฮสต์ RDP ที่ตั้งค่าไว้เป็นค่าเริ่มต้น"
-      },
-      "resizeMethod": {
-        "label": "วิธีการปรับขนาด",
-        "description": "หน้าจอระยะไกลจะปรับขนาดตามขนาดหน้าต่างอย่างไร"
-      },
-      "resizeDisplayUpdate": "อัปเดตการแสดงผล",
-      "resizeReconnect": "เชื่อมต่อใหม่",
-      "inherit": "สืบทอด",
-      "on": "บน",
-      "off": "ปิด",
-      "forceLossless": {
-        "label": "บังคับการสูญเสีย",
-        "description": "บังคับใช้การเข้ารหัสภาพแบบไม่สูญเสียคุณภาพ (คุณภาพสูงกว่า ใช้แบนด์วิดท์มากกว่า)"
-      },
-      "enableWallpaper": {
-        "label": "วอลเปเปอร์",
-        "description": "แสดงภาพพื้นหลังเดสก์ท็อป (การปิดใช้งานจะช่วยเพิ่มประสิทธิภาพ)"
-      },
-      "enableFontSmoothing": {
-        "label": "การปรับความเรียบของแบบอักษร",
-        "description": "เปิดใช้งานการแสดงผลฟอนต์ ClearType"
-      },
-      "enableDesktopComposition": {
-        "label": "การจัดองค์ประกอบเดสก์ท็อป",
-        "description": "เปิดใช้งานเอฟเฟกต์กระจก Aero"
-      },
-      "disableAudio": {
-        "label": "ปิดใช้งานเสียง",
-        "description": "ปิดเสียงทั้งหมดจากการเชื่อมต่อระยะไกล"
-      },
-      "enablePrinting": {
-        "label": "เปิดใช้งานการพิมพ์",
-        "description": "โอนย้ายเครื่องพิมพ์ในเครื่องไปยังเซสชันระยะไกล"
-      },
-      "enableDrive": {
-        "label": "เปิดใช้งานการเปลี่ยนเส้นทางไดรฟ์",
-        "description": "แมปโฟลเดอร์ในเครื่องเป็นไดรฟ์ในเซสชันระยะไกล"
-      },
-      "disableCopy": {
-        "label": "ปิดใช้งานการคัดลอก",
-        "description": "ป้องกันการคัดลอกข้อความจากเซสชันระยะไกล"
-      },
-      "disablePaste": {
-        "label": "ปิดใช้งานการวาง",
-        "description": "ป้องกันการวางข้อความลงในเซสชันระยะไกล"
-      },
-      "group": "ค่าเริ่มต้นของการเข้าถึงเดสก์ท็อประยะไกล",
-      "colorDepth16": "16 บิต",
-      "colorDepth24": "24 บิต",
-      "colorDepth32": "32 บิต"
-    },
-    "admin": {
-      "enabled": {
-        "label": "เปิดใช้งานเดสก์ท็อประยะไกล",
-        "description": "อนุญาตการเชื่อมต่อ RDP, VNC และ Telnet ผ่าน guacd"
-      },
-      "guacdUrl": {
-        "label": "URL guacd",
-        "description": "ตำแหน่งที่ guacd รับฟังข้อมูล จะแสดงเป็น host:port ตัวแปรสภาพแวดล้อม GUACD_URL, GUACD_HOST และ GUACD_PORT จะแทนที่ค่านี้",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "อาร์ดีพี"
-      },
-      "enableVnc": {
-        "label": "วีเอ็นซี"
-      },
-      "enableTelnet": {
-        "label": "เทลเน็ต"
-      },
-      "rdpPort": {
-        "label": "พอร์ต RDP"
-      },
-      "vncPort": {
-        "label": "พอร์ต VNC"
-      },
-      "telnetPort": {
-        "label": "พอร์ตเทลเน็ต"
-      },
-      "rdpSecurity": {
-        "label": "โหมดความปลอดภัย RDP"
-      },
-      "rdpIgnoreCert": {
-        "label": "ละเว้นข้อผิดพลาดเกี่ยวกับใบรับรอง"
-      },
-      "guacamoleConfig": {
-        "label": "การตั้งค่า guacd"
-      },
-      "enableToolbar": {
-        "label": "แถบเครื่องมือเดสก์ท็อประยะไกล",
-        "description": "แสดงแถบเครื่องมือในเซสชัน RDP, VNC และ Telnet"
-      },
-      "displayGroup": "แสดง",
-      "displayDefaultsTab": "รีโมทเดสก์ท็อป"
-    }
-  },
-  "palette": {
-    "connectRdp": "เชื่อมต่อด้วย RDP",
-    "connectVnc": "เชื่อมต่อกับ VNC",
-    "connectTelnet": "เชื่อมต่อด้วย Telnet"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "แชร์เซสชันเดสก์ท็อประยะไกล",
-      "description": "อนุญาตให้การแชร์เซสชันและห้องทำงานร่วมกันแสดงเซสชัน RDP, VNC และ Telnet ของผู้ใช้รายนี้แก่ผู้อื่น"
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "จำเป็นต้องใช้เซิร์ฟเวอร์ระยะไกล เชื่อมต่อเซิร์ฟเวอร์ระยะไกลในการตั้งค่าเพื่อใช้ประเภทการเชื่อมต่อนี้"
-  },
-  "plugin": {
-    "name": "รีโมทเดสก์ท็อป"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/tr_TR.json b/plugins/remote-desktop/locales/translated/tr_TR.json
deleted file mode 100644
index b83a43724..000000000
--- a/plugins/remote-desktop/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "{{type}} oturumuna bağlanılıyor...",
-    "checkingGuacd": "Uzaktan masaüstü hizmeti kontrol ediliyor...",
-    "requestingToken": "{{type}} bağlantı belirteci isteniyor...",
-    "openingSession": "{{type}} oturumu açılıyor...",
-    "negotiating": "{{type}} el sıkışması üzerinde pazarlık yapılıyor...",
-    "sessionReady": "{{type}} oturum hazır",
-    "connectionError": "Bağlantı hatası",
-    "connectionFailed": "Bağlantı başarısız",
-    "failedToConnect": "Bağlantı belirteci alınamadı",
-    "hostNotFound": "Sunucu bulunamadı",
-    "noHostSelected": "Sunucu seçilmedi",
-    "reconnect": "Yeniden Bağlan",
-    "retry": "Yeniden dene",
-    "guacdUnavailable": "Uzak masaüstü hizmeti (guacd) kullanılamıyor. Lütfen guacd'nin çalıştığından, erişilebilir olduğundan ve yönetici ayarlarında düzgün yapılandırıldığından emin olun.",
-    "credentialPromptTitle": "RDP Kimlik Bilgilerini Girin",
-    "credentialPromptDescription": "Bu sunucu, bağlantı kurulurken kimlik bilgilerini isteyecek şekilde ayarlanmıştır. Bu bilgiler yalnızca bu oturum için kullanılır ve kaydedilmez.",
-    "connect": "Bağlan",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "Sürücü Dosyaları",
-      "parent": "Üst dizin",
-      "refresh": "Yenile",
-      "empty": "Bu klasör boş",
-      "listFailed": "Bu klasör okunamadı.",
-      "download": "İndir",
-      "downloadFailed": "{{name}} indirme işlemi başarısız oldu.",
-      "upload": "Dosyaları yükle",
-      "uploading": "{{name}} yükleniyor...",
-      "uploaded": "Yüklenen {{name}}",
-      "uploadFailed": "{{name}} yüklenemedi.",
-      "uploadDisabled": "Bu bağlantı için yüklemeler devre dışı bırakıldı.",
-      "driveUnavailable": "Dosyaları yüklemeden önce RDP sürücü yönlendirmesini etkinleştirin.",
-      "driveNotWritable": "guacd sürücü klasörüne yazamıyor. GUACD_DRIVE_PATH (veya ana bilgisayarın Sürücü Yolu) ve izinlerini kontrol edin.",
-      "dropToUpload": "Yüklemek için dosyaları sürükleyip bırakın."
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (Ekranı Kilitle)",
-      "winKey": "Windows Tuşu",
-      "superL": "Süper+L (Kilit Ekranı)",
-      "superKey": "Süper Anahtar",
-      "super": "Süper",
-      "cmdL": "Cmd+L (Kilit Ekranı)",
-      "cmdKey": "Komut Tuşu",
-      "cmd": "Komut",
-      "ctrl": "Ctrl",
-      "alt": "Alt",
-      "shift": "Shift",
-      "win": "Win",
-      "stickyActive": "{{key}} (sabitlenmiş - bırakmak için tıklayın)",
-      "stickyInactive": "{{key}} (sabitlemek için tıklayın)",
-      "esc": "Escape",
-      "tab": "Tab",
-      "home": "Home",
-      "end": "End",
-      "pageUp": "Page Up",
-      "pageDown": "Page Down",
-      "arrowUp": "Yukarı Ok",
-      "arrowDown": "Aşağı Ok",
-      "arrowLeft": "Sol Ok",
-      "arrowRight": "Sağ Ok",
-      "fnToggle": "Fonksiyon Tuşları",
-      "reconnect": "Oturumu Yeniden Bağla",
-      "collapse": "Araç çubuğunu daralt",
-      "expand": "Araç çubuğunu genişlet",
-      "dragHandle": "Yeniden konumlandırmak için sürükle",
-      "hide": "Bu oturum için gizle. Kalıcı olarak devre dışı bırakmak için Sunucu Ayarları → Genel → Bağlantı Araç Çubuğu'nu açın.",
-      "zoomIn": "Yakınlaştır",
-      "zoomOut": "Uzaklaştır",
-      "resetZoom": "Yakınlaştırmayı sıfırla",
-      "fitToScreen": "Ekrana uygun",
-      "switchToTrackpad": "İzleme dörtlüsü moduna geçin (imleci hareket ettirmek için sürükleyin, tıklamak için dokunun)",
-      "switchToTouch": "Dokunmatik moda geçin (tıklamak istediğiniz yere doğrudan dokunun)"
-    },
-    "disabled": "Uzaktan Masaüstü özelliği kapalı. Yönetici, Ayarlar bölümünden bu özelliği açabilir."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Windows Uzaktan Masaüstü'nde açıldı",
-    "nativeRdpFailed": "Windows Uzaktan Masaüstü açılamadı.",
-    "openNativeRdp": "Windows Uzaktan Masaüstü'nde aç",
-    "guac": {
-      "toolbar": "Araç Çubuğu",
-      "connection": "Bağlantı",
-      "authentication": "Kimlik doğrulama",
-      "storedCredential": "Kayıtlı kimlik bilgisi",
-      "authMethod": "Kimlik doğrulama yöntemi",
-      "authTypeDirect": "Doğrudan",
-      "authTypeCredential": "Kimlik bilgisi",
-      "authTypeNone": "Yok",
-      "authTypeNoneDesc": "Hiçbir kimlik bilgisi saklanmaz. Her bağlantı kurduğunuzda sizden kullanıcı adı ve şifre istenecektir; bunlar kaydedilmez.",
-      "selectCredential": "Bir kimlik bilgisi seçin...",
-      "connectionSettings": "Bağlantı ayarları",
-      "displaySettings": "Görüntü ayarları",
-      "audioSettings": "Ses ayarları",
-      "rdpPerformance": "RDP performansı",
-      "deviceRedirection": "Cihaz yönlendirme",
-      "session": "Oturum",
-      "gateway": "Ağ geçidi",
-      "remoteApp": "RemoteApp",
-      "clipboard": "Pano",
-      "sessionRecording": "Oturum kaydı",
-      "wakeOnLan": "LAN üzerinden uyandırma",
-      "vncSettings": "VNC ayarları",
-      "terminalSettings": "Terminal ayarları",
-      "rdpPort": "RDP Portu",
-      "username": "Kullanıcı Adı",
-      "password": "Parola",
-      "passwordSaved": "Parola kaydedildi, değiştirmek için tuşlayın.",
-      "domain": "Etki Alanı",
-      "securityMode": "Güvenlik Modu",
-      "width": "Genişlik",
-      "height": "Yükseklik",
-      "dpi": "DPI",
-      "clientName": "İstemci Adı",
-      "initialProgram": "Başlangıç Programı",
-      "serverLayout": "Sunucu Düzeni",
-      "timezone": "Saat Dilimi",
-      "loadBalanceInfo": "Yük Dengeleme Bilgisi / Çerez",
-      "loadBalanceInfoDesc": "RDS grubu yük dengelemesi için RD Bağlantı Aracısı çerezi (ör. tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "guacd Proxy",
-      "guacdHostname": "guacd Sunucusu",
-      "guacdHostnamePlaceholder": "Genel varsayılan",
-      "guacdPort": "guacd Portu",
-      "guacdProxyDesc": "Bu bağlantı için genel guacd örneğini geçersiz kıl. Genel olarak yapılandırılmış guacd'yi kullanmak için boş bırak.",
-      "gatewayHostname": "Ağ Geçidi Ana Bilgisayar Adı",
-      "gatewayPort": "Ağ Geçidi Portu",
-      "gatewayUsername": "Ağ Geçidi Kullanıcı Adı",
-      "gatewayPassword": "Ağ Geçidi Parolası",
-      "gatewayDomain": "Ağ Geçidi Etki Alanı",
-      "remoteAppProgram": "RemoteApp Programı",
-      "workingDirectory": "Çalışma Dizini",
-      "arguments": "Argümanlar",
-      "normalizeLineEndings": "Satır Sonlarını Normalleştir",
-      "macAddress": "MAC Adresi",
-      "broadcastAddress": "Yayın Adresi",
-      "udpPort": "UDP Portu",
-      "waitTimeS": "Bekleme Süresi (sn)",
-      "driveName": "Sürücü Adı",
-      "drivePath": "Sürücü Yolu",
-      "ignoreCertificate": "Sertifikayı Yoksay",
-      "ignoreCertificateDesc": "Kendinden imzalı sertifikalara sahip sunuculara bağlantılara izin ver",
-      "forceLossless": "Kayıpsız Zorla",
-      "forceLosslessDesc": "Kayıpsız görüntü kodlamasını zorla (daha yüksek kalite, daha fazla bant genişliği)",
-      "disableAudio": "Sesi Devre Dışı Bırak",
-      "disableAudioDesc": "Uzak oturumdaki tüm sesleri kapat",
-      "enableAudioInput": "Ses Girişini Etkinleştir (Mikrofon)",
-      "enableAudioInputDesc": "Yerel mikrofonu uzak oturuma yönlendir",
-      "wallpaper": "Duvar Kağıdı",
-      "wallpaperDesc": "Masaüstü duvar kağıdını göster (devre dışı bırakmak performansı artırır)",
-      "theming": "Tema",
-      "themingDesc": "Görsel temaları ve stilleri etkinleştir",
-      "fontSmoothing": "Yazı Tipi Yumuşatma",
-      "fontSmoothingDesc": "ClearType yazı tipi işlemeyi etkinleştir",
-      "fullWindowDrag": "Tam Pencere Sürükleme",
-      "fullWindowDragDesc": "Sürüklerken pencere içeriğini göster",
-      "desktopComposition": "Masaüstü Birleştirme",
-      "desktopCompositionDesc": "Aero cam efektlerini etkinleştir",
-      "menuAnimations": "Menü Animasyonları",
-      "menuAnimationsDesc": "Menü solma ve kayma animasyonlarını etkinleştir",
-      "disableBitmapCaching": "Bitmap Önbelleğini Devre Dışı Bırak",
-      "disableBitmapCachingDesc": "Bitmap önbelleğini kapat (grafik bozulmalarına yardımcı olabilir)",
-      "disableOffscreenCaching": "Ekran Dışı Önbelleğini Devre Dışı Bırak",
-      "disableOffscreenCachingDesc": "Ekran dışı önbelleğini kapat",
-      "disableGlyphCaching": "Glif Önbelleğini Devre Dışı Bırak",
-      "disableGlyphCachingDesc": "Glif önbelleğini kapat",
-      "enableGfx": "GFX'i Etkinleştir",
-      "enableGfxDesc": "RemoteFX grafik işlem hattını kullan",
-      "enablePrinting": "Yazdırmayı Etkinleştir",
-      "enablePrintingDesc": "Yerel yazıcıları uzak oturuma yönlendir",
-      "enableDriveRedirection": "Sürücü Yönlendirmesini Etkinleştir",
-      "enableDriveRedirectionDesc": "Yerel bir klasörü uzak oturumda sürücü olarak eşleştir",
-      "createDrivePath": "Sürücü Yolu Oluştur",
-      "createDrivePathDesc": "Klasör mevcut değilse otomatik oluştur",
-      "disableDownload": "İndirmeyi Devre Dışı Bırak",
-      "disableDownloadDesc": "Uzak oturumdan dosya indirmeyi engelle",
-      "disableUpload": "Yüklemeyi Devre Dışı Bırak",
-      "disableUploadDesc": "Uzak oturuma dosya yüklemeyi engelle",
-      "enableTouch": "Dokunmayı Etkinleştir",
-      "enableTouchDesc": "Dokunma girişi iletimini etkinleştir",
-      "consoleSession": "Konsol Oturumu",
-      "consoleSessionDesc": "Yeni oturum yerine konsola (oturum 0) bağlan",
-      "sendWolPacket": "WOL Paketi Gönder",
-      "sendWolPacketDesc": "Bağlanmadan önce bu sunucuyu uyandırmak için sihirli paket gönder",
-      "disableCopy": "Kopyalamayı Devre Dışı Bırak",
-      "disableCopyDesc": "Uzak oturumdan metin kopyalamayı engelle",
-      "disablePaste": "Yapıştırmayı Devre Dışı Bırak",
-      "disablePasteDesc": "Uzak oturuma metin yapıştırmayı engelle",
-      "createPathIfMissing": "Yol Yoksa Oluştur",
-      "createPathIfMissingDesc": "Kayıt dizinini otomatik oluştur",
-      "excludeOutput": "Çıktıyı Hariç Tut",
-      "excludeOutputDesc": "Ekran çıktısını kaydetme (yalnızca meta veri)",
-      "excludeMouse": "Fareyi Hariç Tut",
-      "excludeMouseDesc": "Fare hareketlerini kaydetme",
-      "includeKeystrokes": "Tuş Vuruşlarını Dahil Et",
-      "includeKeystrokesDesc": "Ekran çıktısına ek olarak ham tuş vuruşlarını kaydet",
-      "vncPort": "VNC Portu",
-      "vncPassword": "VNC Parolası",
-      "vncUsernameOptional": "Kullanıcı adı (isteğe bağlı)",
-      "vncLeaveBlank": "Gerekli değilse boş bırakın",
-      "cursorMode": "İmleç Modu",
-      "swapRedBlue": "Kırmızı ve Maviyi Değiştir",
-      "swapRedBlueDesc": "Kırmızı ve mavi renk kanallarını değiştir (bazı renk sorunlarını giderir)",
-      "readOnly": "Salt okunur",
-      "readOnlyDesc": "Hiçbir giriş göndermeden uzak ekranı görüntüle",
-      "telnetPort": "Telnet Portu",
-      "terminalType": "Terminal Türü",
-      "fontName": "Yazı Tipi Adı",
-      "fontSize": "Yazı Tipi Boyutu",
-      "colorScheme": "Renk Şeması",
-      "backspaceKey": "Geri Silme Tuşu",
-      "colorDepth": "Renk Derinliği",
-      "resizeMethod": "Yeniden Boyutlandırma Yöntemi",
-      "driveNamePlaceholder": "Termix Drive",
-      "options": {
-        "any": "Herhangi",
-        "auto": "Otomatik",
-        "nlaExtended": "NLA Uzatıldı",
-        "color8": "8 bit",
-        "color16": "16 bit",
-        "color24": "24 bit",
-        "color32": "32 bit",
-        "displayUpdate": "Ekran Güncellemesi",
-        "reconnect": "Yeniden Bağlan",
-        "preserve": "Korumak",
-        "unix": "Unix (LF)",
-        "windows": "Windows (CRLF)",
-        "local": "Yerel",
-        "remote": "Uzak",
-        "failsafe": "arıza emniyeti",
-        "blackOnWhite": "Siyah Beyaz",
-        "whiteOnBlack": "Siyah üzerine beyaz",
-        "grayOnBlack": "Siyah üzerine gri",
-        "greenOnBlack": "Siyah üzerine yeşil"
-      }
-    },
-    "remoteDesktop": "Uzak Masaüstü",
-    "tabRdp": "RDP",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "Sanal Ağ",
-    "unencryptedShell": "Şifrelenmemiş Shell",
-    "remoteDesktopNotes": "Notlar",
-    "userDefaultsNote": "Değiştirmediğiniz ayarlar, sunucunuzun varsayılan ayarlarını takip eder.",
-    "connectionOriginNote": "Masaüstü uygulamasında, RDP, VNC ve Telnet, ana bilgisayar \"Bu cihaz\" olarak ayarlanmadığı sürece uzak sunucuyu kullanır; bu ayar, bu makinenin erişebileceği bir guacd gerektirir. Bunu Uzak Masaüstü ayarlarında veya her ana bilgisayar için guacd Proxy altında ayarlayın.",
-    "docsLink": "Dokümanları görüntüle",
-    "connectionOriginGuacamoleNote": "RDP, VNC ve Telnet, \"Bu cihaz\" seçeneğini seçmediğiniz sürece uzak sunucuyu kullanır; bu seçenek için makinenin erişebileceği bir guacd adresine ihtiyaç vardır. Bunu guacd URL ayarında veya her ana bilgisayar için guacd Proxy altında belirleyebilirsiniz."
-  },
-  "onboarding": {
-    "feature_desktop": "Uzaktan masaüstü",
-    "feature_desktop_desc": "SSH'de olduğu gibi, RDP, VNC ve Telnet oturumlarını da bir sekmede açın."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Renk Derinliği",
-        "description": "Varsayılan ayarlarında bırakılan RDP sunucuları için kullanılır."
-      },
-      "resizeMethod": {
-        "label": "Yeniden Boyutlandırma Yöntemi",
-        "description": "Uzaktan kumanda ekranının pencere boyutunu nasıl takip ettiği."
-      },
-      "resizeDisplayUpdate": "Ekran Güncellemesi",
-      "resizeReconnect": "Yeniden Bağlan",
-      "inherit": "Miras almak",
-      "on": "Açık",
-      "off": "Kapalı",
-      "forceLossless": {
-        "label": "Kayıpsız Zorla",
-        "description": "Kayıpsız görüntü kodlamasını zorla (daha yüksek kalite, daha fazla bant genişliği)"
-      },
-      "enableWallpaper": {
-        "label": "Duvar Kağıdı",
-        "description": "Masaüstü duvar kağıdını göster (devre dışı bırakmak performansı artırır)"
-      },
-      "enableFontSmoothing": {
-        "label": "Yazı Tipi Yumuşatma",
-        "description": "ClearType yazı tipi işlemeyi etkinleştir"
-      },
-      "enableDesktopComposition": {
-        "label": "Masaüstü Birleştirme",
-        "description": "Aero cam efektlerini etkinleştir"
-      },
-      "disableAudio": {
-        "label": "Sesi Devre Dışı Bırak",
-        "description": "Uzak oturumdaki tüm sesleri kapat"
-      },
-      "enablePrinting": {
-        "label": "Yazdırmayı Etkinleştir",
-        "description": "Yerel yazıcıları uzak oturuma yönlendir"
-      },
-      "enableDrive": {
-        "label": "Sürücü Yönlendirmesini Etkinleştir",
-        "description": "Yerel bir klasörü uzak oturumda sürücü olarak eşleştir"
-      },
-      "disableCopy": {
-        "label": "Kopyalamayı Devre Dışı Bırak",
-        "description": "Uzak oturumdan metin kopyalamayı engelle"
-      },
-      "disablePaste": {
-        "label": "Yapıştırmayı Devre Dışı Bırak",
-        "description": "Uzak oturuma metin yapıştırmayı engelle"
-      },
-      "group": "Uzak Masaüstü varsayılan ayarları",
-      "colorDepth16": "16 bit",
-      "colorDepth24": "24 bit",
-      "colorDepth32": "32 bit"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Uzaktan Masaüstünü Etkinleştir",
-        "description": "guacd üzerinden RDP, VNC ve Telnet bağlantılarına izin verin."
-      },
-      "guacdUrl": {
-        "label": "guacd URL'si",
-        "description": "Guacd'nin dinlediği yer, host:port şeklindedir. GUACD_URL, GUACD_HOST ve GUACD_PORT ortam değişkenleri bunu geçersiz kılar.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "RDP"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "RDP bağlantı noktası"
-      },
-      "vncPort": {
-        "label": "VNC bağlantı noktası"
-      },
-      "telnetPort": {
-        "label": "Telnet bağlantı noktası"
-      },
-      "rdpSecurity": {
-        "label": "RDP güvenlik modu"
-      },
-      "rdpIgnoreCert": {
-        "label": "Sertifika hatalarını göz ardı edin"
-      },
-      "guacamoleConfig": {
-        "label": "guacd ayarları"
-      },
-      "enableToolbar": {
-        "label": "Uzak masaüstü araç çubuğu",
-        "description": "RDP, VNC ve Telnet oturumlarında araç çubuğunu göster."
-      },
-      "displayGroup": "Görüntülemek",
-      "displayDefaultsTab": "Uzak Masaüstü"
-    }
-  },
-  "palette": {
-    "connectRdp": "RDP ile bağlantı kurun",
-    "connectVnc": "VNC ile bağlantı kurun",
-    "connectTelnet": "Telnet ile bağlantı kurun"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Uzak masaüstü oturumlarını paylaşın",
-      "description": "Oturum paylaşımı ve iş birliği odalarının bu kullanıcının RDP, VNC ve Telnet oturumlarını diğer kullanıcılara göstermesine izin verin."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Uzak sunucu gereklidir. Bu bağlantı türünü kullanmak için Ayarlar'dan bir uzak sunucu bağlayın."
-  },
-  "plugin": {
-    "name": "Uzak Masaüstü"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/uk_UA.json b/plugins/remote-desktop/locales/translated/uk_UA.json
deleted file mode 100644
index 872e6bd32..000000000
--- a/plugins/remote-desktop/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "Підключення до сеансу {{type}}...",
-    "checkingGuacd": "Перевірка служби віддаленого робочого столу...",
-    "requestingToken": "Запитується токен з’єднання {{type}}...",
-    "openingSession": "Відкриття сеансу {{type}}...",
-    "negotiating": "Переговори {{type}} рукостискання...",
-    "sessionReady": "{{type}} сеанс готовий",
-    "connectionError": "Помилка підключення",
-    "connectionFailed": "Помилка підключення",
-    "failedToConnect": "Не вдалося отримати токен з'єднання",
-    "hostNotFound": "Хост не знайдено",
-    "noHostSelected": "Хост не вибрано",
-    "reconnect": "Знову підключитися",
-    "retry": "Повторити спробу",
-    "guacdUnavailable": "Служба віддаленого робочого столу (guacd) недоступна. Переконайтеся, що guacd запущено, доступно та правильно налаштовано в налаштуваннях адміністратора.",
-    "credentialPromptTitle": "Введіть облікові дані RDP",
-    "credentialPromptDescription": "Цей хост налаштовано на запит облікових даних під час підключення. Вони використовуються лише для цього сеансу та не зберігаються.",
-    "connect": "Підключитися",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "Файли Диска",
-      "parent": "Батьківський каталог",
-      "refresh": "Оновити",
-      "empty": "Ця папка порожня",
-      "listFailed": "Не вдалося прочитати цю папку",
-      "download": "Завантажити",
-      "downloadFailed": "Не вдалося завантажити {{name}}",
-      "upload": "Завантажити файли",
-      "uploading": "Завантаження {{name}}...",
-      "uploaded": "Завантажено {{name}}",
-      "uploadFailed": "Не вдалося завантажити {{name}}",
-      "uploadDisabled": "Завантаження для цього з’єднання вимкнено",
-      "driveUnavailable": "Увімкніть перенаправлення диска RDP перед завантаженням файлів",
-      "driveNotWritable": "guacd не може записувати дані в папку диска. Перевірте GUACD_DRIVE_PATH (або шлях до диска хоста) та його дозволи.",
-      "dropToUpload": "Перетягніть файли для завантаження"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (Екран блокування)",
-      "winKey": "Клавіша Windows",
-      "superL": "Супер+L (Екран блокування)",
-      "superKey": "Супер ключ",
-      "super": "Супер",
-      "cmdL": "Cmd+L (Екран блокування)",
-      "cmdKey": "Клавіша команди",
-      "cmd": "Команда",
-      "ctrl": "Ctrl",
-      "alt": "Альтернативний",
-      "shift": "Зсув",
-      "win": "Виграй",
-      "stickyActive": "{{key}} (зафіксовано - натисніть, щоб відпустити)",
-      "stickyInactive": "{{key}} (натисніть, щоб зафіксувати)",
-      "esc": "Втеча",
-      "tab": "Вкладка",
-      "home": "Дім",
-      "end": "Кінець",
-      "pageUp": "Сторінка вгору",
-      "pageDown": "Сторінка вниз",
-      "arrowUp": "Стрілка вгору",
-      "arrowDown": "Стрілка вниз",
-      "arrowLeft": "Стрілка ліворуч",
-      "arrowRight": "Стрілка праворуч",
-      "fnToggle": "Функціональні клавіші",
-      "reconnect": "Сеанс повторного підключення",
-      "collapse": "Згорнути панель інструментів",
-      "expand": "Розгорнути панель інструментів",
-      "dragHandle": "Перетягніть, щоб змінити положення",
-      "hide": "Приховати для цього сеансу. Щоб вимкнути його назавжди, відкрийте Параметри хоста → Загальні → Панель інструментів підключення.",
-      "zoomIn": "Збільшити масштаб",
-      "zoomOut": "Зменшити масштаб",
-      "resetZoom": "Скинути масштаб",
-      "fitToScreen": "Припасувати до екрана",
-      "switchToTrackpad": "Перехід у режим трекпада (перетягування для переміщення курсора, торкання для клацання)",
-      "switchToTouch": "Перемикання в сенсорний режим (торкайтеся безпосередньо там, де потрібно клацнути)"
-    },
-    "disabled": "Віддалений робочий стіл вимкнено. Адміністратор може ввімкнути його в налаштуваннях."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Відкрито у віддаленому робочому столі Windows",
-    "nativeRdpFailed": "Не вдалося відкрити віддалений робочий стіл Windows",
-    "openNativeRdp": "Відкрити у віддаленому робочому столі Windows",
-    "guac": {
-      "toolbar": "Панель інструментів",
-      "connection": "З'єднання",
-      "authentication": "Автентифікація",
-      "storedCredential": "Збережені облікові дані",
-      "authMethod": "Метод автентифікації",
-      "authTypeDirect": "Прямий",
-      "authTypeCredential": "Посвідчення",
-      "authTypeNone": "Жоден",
-      "authTypeNoneDesc": "Облікові дані не зберігаються. Вам буде запропоновано ввести ім’я користувача та пароль щоразу під час підключення; вони не зберігаються.",
-      "selectCredential": "Виберіть облікові дані...",
-      "connectionSettings": "Налаштування підключення",
-      "displaySettings": "Налаштування дисплея",
-      "audioSettings": "Налаштування аудіо",
-      "rdpPerformance": "Продуктивність RDP",
-      "deviceRedirection": "Перенаправлення пристрою",
-      "session": "Сесія",
-      "gateway": "Шлюз",
-      "remoteApp": "Віддалена програма",
-      "clipboard": "Буфер обміну",
-      "sessionRecording": "Запис сеансу",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "Налаштування VNC",
-      "terminalSettings": "Налаштування терміналу",
-      "rdpPort": "RDP-порт",
-      "username": "Ім'я користувача",
-      "password": "Пароль",
-      "passwordSaved": "Пароль збережено, введіть, щоб змінити",
-      "domain": "Домен",
-      "securityMode": "Режим безпеки",
-      "width": "Ширина",
-      "height": "Висота",
-      "dpi": "DPI",
-      "clientName": "Ім'я клієнта",
-      "initialProgram": "Початкова програма",
-      "serverLayout": "Макет сервера",
-      "timezone": "Часовий пояс",
-      "loadBalanceInfo": "Інформація про балансування навантаження / файли cookie",
-      "loadBalanceInfoDesc": "Файл cookie брокера підключень до робочого столу для балансування навантаження ферми RDS (наприклад, tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "Проксі-сервер guacd",
-      "guacdHostname": "Хост guacd",
-      "guacdHostnamePlaceholder": "Глобальний за замовчуванням",
-      "guacdPort": "Порт GUACD",
-      "guacdProxyDesc": "Перевизначте глобальний екземпляр guacd для цього з’єднання. Залиште поле порожнім, щоб використовувати глобально налаштований guacd.",
-      "gatewayHostname": "Ім'я хоста шлюзу",
-      "gatewayPort": "Порт шлюзу",
-      "gatewayUsername": "Ім'я користувача шлюзу",
-      "gatewayPassword": "Пароль шлюзу",
-      "gatewayDomain": "Домен шлюзу",
-      "remoteAppProgram": "Програма віддалених додатків",
-      "workingDirectory": "Робочий каталог",
-      "arguments": "Аргументи",
-      "normalizeLineEndings": "Нормалізувати закінчення рядків",
-      "macAddress": "MAC-адреса",
-      "broadcastAddress": "Адреса розсилки",
-      "udpPort": "UDP-порт",
-      "waitTimeS": "Час очікування (с)",
-      "driveName": "Назва диска",
-      "drivePath": "Шлях диска",
-      "ignoreCertificate": "Ігнорувати сертифікат",
-      "ignoreCertificateDesc": "Дозволити підключення до хостів із самопідписаними сертифікатами",
-      "forceLossless": "Примусово без втрат",
-      "forceLosslessDesc": "Примусове кодування зображень без втрат (вища якість, більша пропускна здатність)",
-      "disableAudio": "Вимкнути аудіо",
-      "disableAudioDesc": "Вимкнути весь звук під час віддаленого сеансу",
-      "enableAudioInput": "Увімкнути аудіовхід (мікрофон)",
-      "enableAudioInputDesc": "Переадресація локального мікрофона на віддалений сеанс",
-      "wallpaper": "Шпалери",
-      "wallpaperDesc": "Показувати шпалери робочого столу (вимикання покращує продуктивність)",
-      "theming": "Тематизація",
-      "themingDesc": "Увімкнути візуальні теми та стилі",
-      "fontSmoothing": "Згладжування шрифтів",
-      "fontSmoothingDesc": "Увімкнути рендеринг шрифтів ClearType",
-      "fullWindowDrag": "Повне перетягування вікна",
-      "fullWindowDragDesc": "Відображати вміст вікна під час перетягування",
-      "desktopComposition": "Композиція робочого столу",
-      "desktopCompositionDesc": "Увімкнути ефекти Aero Glass",
-      "menuAnimations": "Анімації меню",
-      "menuAnimationsDesc": "Увімкнути анімацію згасання меню та слайдів",
-      "disableBitmapCaching": "Вимкнути кешування растрових зображень",
-      "disableBitmapCachingDesc": "Вимкніть кеш растрових зображень (може допомогти з глюками)",
-      "disableOffscreenCaching": "Вимкнути кешування поза екраном",
-      "disableOffscreenCachingDesc": "Вимкнути кеш поза екраном",
-      "disableGlyphCaching": "Вимкнути кешування гліфів",
-      "disableGlyphCachingDesc": "Вимкнути кеш гліфів",
-      "enableGfx": "Увімкнути графічні ефекти",
-      "enableGfxDesc": "Використовуйте графічний конвеєр RemoteFX",
-      "enablePrinting": "Увімкнути друк",
-      "enablePrintingDesc": "Перенаправити локальні принтери на віддалений сеанс",
-      "enableDriveRedirection": "Увімкнути перенаправлення диска",
-      "enableDriveRedirectionDesc": "Призначення локальної папки як диска у віддаленому сеансі",
-      "createDrivePath": "Створити шлях до диска",
-      "createDrivePathDesc": "Автоматично створювати папку, якщо її не існує",
-      "disableDownload": "Вимкнути завантаження",
-      "disableDownloadDesc": "Заборонити завантаження файлів з віддаленого сеансу",
-      "disableUpload": "Вимкнути завантаження",
-      "disableUploadDesc": "Заборонити завантаження файлів у віддалений сеанс",
-      "enableTouch": "Увімкнути сенсорний режим",
-      "enableTouchDesc": "Увімкнути переадресацію сенсорного введення",
-      "consoleSession": "Сеанс консолі",
-      "consoleSessionDesc": "Підключення до консолі (сеанс 0) замість нового сеансу",
-      "sendWolPacket": "Надіслати пакет WOL",
-      "sendWolPacketDesc": "Надіслати магічний пакет, щоб розбудити цей хост перед підключенням",
-      "disableCopy": "Вимкнути копіювання",
-      "disableCopyDesc": "Запобігти копіюванню тексту з віддаленого сеансу",
-      "disablePaste": "Вимкнути вставку",
-      "disablePasteDesc": "Запобігти вставці тексту у віддалений сеанс",
-      "createPathIfMissing": "Створити шлях, якщо він відсутній",
-      "createPathIfMissingDesc": "Автоматично створити каталог записів",
-      "excludeOutput": "Виключити вивід",
-      "excludeOutputDesc": "Не записувати вивід екрана (лише метадані)",
-      "excludeMouse": "Виключити мишу",
-      "excludeMouseDesc": "Не записувати рухи миші",
-      "includeKeystrokes": "Включити натискання клавіш",
-      "includeKeystrokesDesc": "Записуйте необроблені натискання клавіш на додаток до виводу на екран",
-      "vncPort": "VNC-порт",
-      "vncPassword": "Пароль VNC",
-      "vncUsernameOptional": "Ім'я користувача (необов'язково)",
-      "vncLeaveBlank": "Залиште порожнім, якщо не потрібно",
-      "cursorMode": "Режим курсора",
-      "swapRedBlue": "Поміняйте місцями червоний/синій",
-      "swapRedBlueDesc": "Поміняти місцями червоний та синій кольорові канали (виправляє деякі проблеми з кольором)",
-      "readOnly": "Тільки для читання",
-      "readOnlyDesc": "Перегляд віддаленого екрана без надсилання будь-яких вхідних даних",
-      "telnetPort": "Порт Telnet",
-      "terminalType": "Тип терміналу",
-      "fontName": "Назва шрифту",
-      "fontSize": "Розмір шрифту",
-      "colorScheme": "Колірна схема",
-      "backspaceKey": "Клавіша Backspace",
-      "colorDepth": "Глибина кольору",
-      "resizeMethod": "Метод зміни розміру",
-      "driveNamePlaceholder": "Термікс Драйв",
-      "options": {
-        "any": "Будь-який",
-        "auto": "Авто",
-        "nlaExtended": "Розширена НЛА",
-        "color8": "8-бітний",
-        "color16": "16-бітний",
-        "color24": "24-бітний",
-        "color32": "32-бітний",
-        "displayUpdate": "Оновлення дисплея",
-        "reconnect": "Знову підключитися",
-        "preserve": "Зберегти",
-        "unix": "Unix (LF)",
-        "windows": "Windows (CRLF)",
-        "local": "Місцевий",
-        "remote": "Віддалений",
-        "failsafe": "безвідмовний",
-        "blackOnWhite": "Чорне на білому",
-        "whiteOnBlack": "Біле на чорному",
-        "grayOnBlack": "Сірий на чорному",
-        "greenOnBlack": "Зелений на чорному"
-      }
-    },
-    "remoteDesktop": "Віддалений робочий стіл",
-    "tabRdp": "ПРП",
-    "tabVnc": "VNC",
-    "tabTelnet": "Телнет",
-    "virtualNetwork": "Віртуальна мережа",
-    "unencryptedShell": "Незашифрована оболонка",
-    "remoteDesktopNotes": "Нотатки",
-    "userDefaultsNote": "Налаштування, які ви залишаєте без змін, відповідають налаштуванням вашого хоста за замовчуванням.",
-    "connectionOriginNote": "У настільному застосунку RDP, VNC та Telnet використовують віддалений сервер, якщо для хоста не налаштовано значення «Цей пристрій», для якого потрібен GUACD, до якого може отримати доступ ця машина. Встановіть його в налаштуваннях віддаленого робочого столу або для кожного хоста в розділі GUACD Proxy.",
-    "docsLink": "Переглянути документи",
-    "connectionOriginGuacamoleNote": "RDP, VNC та Telnet використовують віддалений сервер, якщо ви не виберете \"Цей пристрій\", для якого потрібен GUACD, до якого може отримати доступ ця машина. Встановіть його в налаштуваннях URL-адреси GUACD або для кожного хоста в розділі \"Проксі-сервер GUACD\"."
-  },
-  "onboarding": {
-    "feature_desktop": "Віддалений робочий стіл",
-    "feature_desktop_desc": "Відкривати сеанси RDP, VNC та Telnet у вкладці, так само, як SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Глибина кольору",
-        "description": "Використовується для хостів RDP, які залишають його за замовчуванням."
-      },
-      "resizeMethod": {
-        "label": "Метод зміни розміру",
-        "description": "Як віддалений екран відповідає розміру вікна."
-      },
-      "resizeDisplayUpdate": "Оновлення дисплея",
-      "resizeReconnect": "Знову підключитися",
-      "inherit": "Успадкувати",
-      "on": "Увімкнено",
-      "off": "Вимкнено",
-      "forceLossless": {
-        "label": "Примусово без втрат",
-        "description": "Примусове кодування зображень без втрат (вища якість, більша пропускна здатність)"
-      },
-      "enableWallpaper": {
-        "label": "Шпалери",
-        "description": "Показувати шпалери робочого столу (вимикання покращує продуктивність)"
-      },
-      "enableFontSmoothing": {
-        "label": "Згладжування шрифтів",
-        "description": "Увімкнути рендеринг шрифтів ClearType"
-      },
-      "enableDesktopComposition": {
-        "label": "Композиція робочого столу",
-        "description": "Увімкнути ефекти Aero Glass"
-      },
-      "disableAudio": {
-        "label": "Вимкнути аудіо",
-        "description": "Вимкнути весь звук під час віддаленого сеансу"
-      },
-      "enablePrinting": {
-        "label": "Увімкнути друк",
-        "description": "Перенаправити локальні принтери на віддалений сеанс"
-      },
-      "enableDrive": {
-        "label": "Увімкнути перенаправлення диска",
-        "description": "Призначення локальної папки як диска у віддаленому сеансі"
-      },
-      "disableCopy": {
-        "label": "Вимкнути копіювання",
-        "description": "Запобігти копіюванню тексту з віддаленого сеансу"
-      },
-      "disablePaste": {
-        "label": "Вимкнути вставку",
-        "description": "Запобігти вставці тексту у віддалений сеанс"
-      },
-      "group": "Налаштування віддаленого робочого столу за замовчуванням",
-      "colorDepth16": "16-бітний",
-      "colorDepth24": "24-бітний",
-      "colorDepth32": "32-бітний"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Увімкнути віддалений робочий стіл",
-        "description": "Дозволити з'єднання RDP, VNC та Telnet через guacd."
-      },
-      "guacdUrl": {
-        "label": "URL-адреса GUACD",
-        "description": "Де guacd прослуховує, як host:port. Змінні середовища GUACD_URL, GUACD_HOST та GUACD_PORT перевизначають це.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "ПРП"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Телнет"
-      },
-      "rdpPort": {
-        "label": "RDP-порт"
-      },
-      "vncPort": {
-        "label": "VNC-порт"
-      },
-      "telnetPort": {
-        "label": "Порт Telnet"
-      },
-      "rdpSecurity": {
-        "label": "Режим безпеки RDP"
-      },
-      "rdpIgnoreCert": {
-        "label": "Ігнорувати помилки сертифіката"
-      },
-      "guacamoleConfig": {
-        "label": "налаштування GUACD"
-      },
-      "enableToolbar": {
-        "label": "Панель інструментів віддаленого робочого столу",
-        "description": "Показувати панель інструментів у сеансах RDP, VNC та Telnet."
-      },
-      "displayGroup": "Дисплей",
-      "displayDefaultsTab": "Віддалений робочий стіл"
-    }
-  },
-  "palette": {
-    "connectRdp": "Зв'язок з RDP",
-    "connectVnc": "Зв'яжіться з VNC",
-    "connectTelnet": "З’єднання за допомогою Telnet"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Спільний доступ до сеансів віддаленого робочого столу",
-      "description": "Дозволити спільний доступ до сеансів та кімнати для співпраці показувати сеанси RDP, VNC та Telnet цього користувача іншим."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Потрібен віддалений сервер. Підключіться до віддаленого сервера в налаштуваннях, щоб використовувати цей тип підключення."
-  },
-  "plugin": {
-    "name": "Віддалений робочий стіл"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/vi_VN.json b/plugins/remote-desktop/locales/translated/vi_VN.json
deleted file mode 100644
index 7f9ab8216..000000000
--- a/plugins/remote-desktop/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "Đang kết nối đến phiên {{type}}...",
-    "checkingGuacd": "Kiểm tra dịch vụ máy tính từ xa...",
-    "requestingToken": "Yêu cầu mã thông báo kết nối {{type}}...",
-    "openingSession": "Khai mạc phiên {{type}}...",
-    "negotiating": "Đàm phán bằng cái bắt tay {{type}}...",
-    "sessionReady": "{{type}} phiên đã sẵn sàng",
-    "connectionError": "Lỗi kết nối",
-    "connectionFailed": "Kết nối thất bại",
-    "failedToConnect": "Không lấy được mã token kết nối",
-    "hostNotFound": "Không tìm thấy máy chủ",
-    "noHostSelected": "Chưa chọn máy chủ",
-    "reconnect": "Kết nối lại",
-    "retry": "Thử lại",
-    "guacdUnavailable": "Dịch vụ máy tính từ xa (guacd) không khả dụng. Vui lòng đảm bảo guacd đang chạy, có thể truy cập và được cấu hình đúng trong cài đặt quản trị.",
-    "credentialPromptTitle": "Nhập thông tin đăng nhập RDP",
-    "credentialPromptDescription": "Máy chủ này được thiết lập để yêu cầu thông tin đăng nhập khi kết nối. Thông tin này chỉ được sử dụng cho phiên này và không được lưu lại.",
-    "connect": "Kết nối",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "Tệp ổ đĩa",
-      "parent": "Thư mục cha",
-      "refresh": "Làm mới",
-      "empty": "Thư mục này trống",
-      "listFailed": "Không thể đọc thư mục này.",
-      "download": "Tải xuống",
-      "downloadFailed": "Tải xuống không thành công {{name}}",
-      "upload": "Tải lên tệp",
-      "uploading": "Đang tải lên {{name}}...",
-      "uploaded": "Đã tải lên {{name}}",
-      "uploadFailed": "Tải lên không thành công {{name}}",
-      "uploadDisabled": "Chức năng tải lên đã bị vô hiệu hóa cho kết nối này.",
-      "driveUnavailable": "Hãy bật tính năng chuyển hướng ổ đĩa RDP trước khi tải lên tệp.",
-      "driveNotWritable": "guacd không thể ghi vào thư mục ổ đĩa. Hãy kiểm tra GUACD_DRIVE_PATH (hoặc Đường dẫn ổ đĩa của máy chủ) và quyền truy cập của nó.",
-      "dropToUpload": "Kéo thả tệp để tải lên"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (Khóa màn hình)",
-      "winKey": "Phím Windows",
-      "superL": "Super+L (Màn hình khóa)",
-      "superKey": "Siêu chìa khóa",
-      "super": "Siêu",
-      "cmdL": "Cmd+L (Khóa màn hình)",
-      "cmdKey": "Phím lệnh",
-      "cmd": "Lệnh",
-      "ctrl": "Ctrl",
-      "alt": "Alt",
-      "shift": "Shift",
-      "win": "Win",
-      "stickyActive": "{{key}} (đang giữ - nhấn để nhả)",
-      "stickyInactive": "{{key}} (nhấn để giữ)",
-      "esc": "Escape",
-      "tab": "Tab",
-      "home": "Home",
-      "end": "End",
-      "pageUp": "Page Up",
-      "pageDown": "Page Down",
-      "arrowUp": "Mũi tên lên",
-      "arrowDown": "Mũi tên xuống",
-      "arrowLeft": "Mũi tên trái",
-      "arrowRight": "Mũi tên phải",
-      "fnToggle": "Phím chức năng",
-      "reconnect": "Kết nối lại phiên",
-      "collapse": "Thu gọn thanh công cụ",
-      "expand": "Mở rộng thanh công cụ",
-      "dragHandle": "Kéo để di chuyển",
-      "hide": "Ẩn tùy chọn này trong phiên làm việc hiện tại. Để tắt vĩnh viễn, hãy mở Cài đặt máy chủ → Chung → Thanh công cụ kết nối.",
-      "zoomIn": "Phóng to",
-      "zoomOut": "Thu nhỏ",
-      "resetZoom": "Đặt lại thu phóng",
-      "fitToScreen": "Vừa với màn hình",
-      "switchToTrackpad": "Chuyển sang chế độ bàn di chuột (kéo để di chuyển con trỏ, chạm để nhấp chuột)",
-      "switchToTouch": "Chuyển sang chế độ cảm ứng (chạm trực tiếp vào vị trí bạn muốn nhấp chuột)"
-    },
-    "disabled": "Chức năng Truy cập Máy tính Từ xa (Remote Desktop) đã bị tắt. Quản trị viên có thể bật chức năng này trong phần Cài đặt."
-  },
-  "hosts": {
-    "nativeRdpOpened": "Đã mở bằng Windows Remote Desktop",
-    "nativeRdpFailed": "Không thể mở Windows Remote Desktop",
-    "openNativeRdp": "Mở bằng Windows Remote Desktop",
-    "guac": {
-      "toolbar": "Thanh công cụ",
-      "connection": "Kết nối",
-      "authentication": "Xác thực",
-      "storedCredential": "Thông tin xác thực đã lưu",
-      "authMethod": "Phương thức xác thực",
-      "authTypeDirect": "Trực tiếp",
-      "authTypeCredential": "Thông tin xác thực",
-      "authTypeNone": "Không chọn",
-      "authTypeNoneDesc": "Thông tin đăng nhập của bạn không được lưu trữ. Bạn sẽ được yêu cầu nhập tên người dùng và mật khẩu mỗi khi kết nối; chúng không được lưu lại.",
-      "selectCredential": "Chọn thông tin xác thực...",
-      "connectionSettings": "Cài đặt kết nối",
-      "displaySettings": "Cài đặt hiển thị",
-      "audioSettings": "Cài đặt âm thanh",
-      "rdpPerformance": "Hiệu suất RDP",
-      "deviceRedirection": "Chuyển hướng thiết bị",
-      "session": "Phiên làm việc",
-      "gateway": "Gateway",
-      "remoteApp": "RemoteApp",
-      "clipboard": "Clipboard",
-      "sessionRecording": "Ghi phiên",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "Cài đặt VNC",
-      "terminalSettings": "Cài đặt Terminal",
-      "rdpPort": "Cổng RDP",
-      "username": "Tên người dùng",
-      "password": "Mật khẩu",
-      "passwordSaved": "Mật khẩu đã được lưu, nhập để thay đổi",
-      "domain": "Miền",
-      "securityMode": "Chế độ bảo mật",
-      "width": "Chiều rộng",
-      "height": "Chiều cao",
-      "dpi": "DPI",
-      "clientName": "Tên máy khách",
-      "initialProgram": "Chương trình ban đầu",
-      "serverLayout": "Bố cục máy chủ",
-      "timezone": "Múi giờ",
-      "loadBalanceInfo": "Thông tin cân bằng tải / Cookie",
-      "loadBalanceInfoDesc": "Cookie RD Connection Broker dùng cho cân bằng tải cụm RDS (vd: tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "Proxy guacd",
-      "guacdHostname": "Máy chủ guacd",
-      "guacdHostnamePlaceholder": "Mặc định toàn cục",
-      "guacdPort": "Cổng guacd",
-      "guacdProxyDesc": "Ghi đè phiên bản guacd toàn cục cho kết nối này. Để trống để sử dụng guacd được cấu hình toàn cục.",
-      "gatewayHostname": "Tên máy chủ gateway",
-      "gatewayPort": "Cổng gateway",
-      "gatewayUsername": "Tên người dùng gateway",
-      "gatewayPassword": "Mật khẩu gateway",
-      "gatewayDomain": "Miền gateway",
-      "remoteAppProgram": "Chương trình RemoteApp",
-      "workingDirectory": "Thư mục làm việc",
-      "arguments": "Tham số",
-      "normalizeLineEndings": "Chuẩn hóa kết thúc dòng",
-      "macAddress": "Địa chỉ MAC",
-      "broadcastAddress": "Địa chỉ broadcast",
-      "udpPort": "Cổng UDP",
-      "waitTimeS": "Thời gian chờ (s)",
-      "driveName": "Tên ổ đĩa",
-      "drivePath": "Đường dẫn ổ đĩa",
-      "ignoreCertificate": "Bỏ qua chứng chỉ",
-      "ignoreCertificateDesc": "Cho phép kết nối đến máy chủ có chứng chỉ tự ký",
-      "forceLossless": "Ép buộc Lossless",
-      "forceLosslessDesc": "Ép buộc mã hóa ảnh không mất dữ liệu (chất lượng cao hơn, tốn băng thông)",
-      "disableAudio": "Tắt âm thanh",
-      "disableAudioDesc": "Tắt tất cả âm thanh từ phiên từ xa",
-      "enableAudioInput": "Bật đầu vào âm thanh (micro)",
-      "enableAudioInputDesc": "Chuyển tiếp micro cục bộ đến phiên từ xa",
-      "wallpaper": "Hình nền",
-      "wallpaperDesc": "Hiển thị hình nền desktop (tắt để cải thiện hiệu suất)",
-      "theming": "Chủ đề",
-      "themingDesc": "Bật chủ đề và kiểu dáng trực quan",
-      "fontSmoothing": "Làm mịn phông chữ",
-      "fontSmoothingDesc": "Bật kết xuất phông chữ ClearType",
-      "fullWindowDrag": "Kéo toàn bộ cửa sổ",
-      "fullWindowDragDesc": "Hiển thị nội dung cửa sổ khi kéo",
-      "desktopComposition": "Tổ hợp màn hình nền",
-      "desktopCompositionDesc": "Bật hiệu ứng kính Aero",
-      "menuAnimations": "Hiệu ứng menu",
-      "menuAnimationsDesc": "Bật hiệu ứng mờ và trượt của menu",
-      "disableBitmapCaching": "Tắt bộ nhớ đệm bitmap",
-      "disableBitmapCachingDesc": "Tắt bộ nhớ đệm bitmap (có thể giúp tránh lỗi hiển thị)",
-      "disableOffscreenCaching": "Tắt bộ nhớ đệm ngoài màn hình",
-      "disableOffscreenCachingDesc": "Tắt bộ nhớ đệm ngoài màn hình",
-      "disableGlyphCaching": "Tắt bộ nhớ đệm glyph",
-      "disableGlyphCachingDesc": "Tắt bộ nhớ đệm glyph",
-      "enableGfx": "Bật GFX",
-      "enableGfxDesc": "Sử dụng pipeline đồ họa RemoteFX",
-      "enablePrinting": "Bật in",
-      "enablePrintingDesc": "Chuyển hướng máy in cục bộ đến phiên từ xa",
-      "enableDriveRedirection": "Bật chuyển hướng ổ đĩa",
-      "enableDriveRedirectionDesc": "Ánh xạ thư mục cục bộ thành ổ đĩa trong phiên từ xa",
-      "createDrivePath": "Tạo đường dẫn ổ đĩa",
-      "createDrivePathDesc": "Tự động tạo thư mục nếu chưa tồn tại",
-      "disableDownload": "Tắt tải xuống",
-      "disableDownloadDesc": "Ngăn tải file từ phiên từ xa",
-      "disableUpload": "Tắt tải lên",
-      "disableUploadDesc": "Ngăn tải file lên phiên từ xa",
-      "enableTouch": "Bật cảm ứng",
-      "enableTouchDesc": "Bật chuyển tiếp đầu vào cảm ứng",
-      "consoleSession": "Phiên console",
-      "consoleSessionDesc": "Kết nối tới console (phiên 0) thay vì phiên mới",
-      "sendWolPacket": "Gửi gói WOL",
-      "sendWolPacketDesc": "Gửi gói magic để đánh thức máy trước khi kết nối",
-      "disableCopy": "Tắt sao chép",
-      "disableCopyDesc": "Ngăn sao chép văn bản từ phiên từ xa",
-      "disablePaste": "Tắt dán",
-      "disablePasteDesc": "Ngăn dán văn bản vào phiên từ xa",
-      "createPathIfMissing": "Tạo đường dẫn nếu thiếu",
-      "createPathIfMissingDesc": "Tự động tạo thư mục ghi hình",
-      "excludeOutput": "Loại trừ đầu ra",
-      "excludeOutputDesc": "Không ghi hình màn hình (chỉ metadata)",
-      "excludeMouse": "Loại trừ chuột",
-      "excludeMouseDesc": "Không ghi lại chuyển động chuột",
-      "includeKeystrokes": "Bao gồm thao tác phím",
-      "includeKeystrokesDesc": "Ghi lại thao tác phím thô cùng với đầu ra màn hình",
-      "vncPort": "Cổng VNC",
-      "vncPassword": "Mật khẩu VNC",
-      "vncUsernameOptional": "Tên người dùng (tùy chọn)",
-      "vncLeaveBlank": "Để trống nếu không cần",
-      "cursorMode": "Chế độ con trỏ",
-      "swapRedBlue": "Hoán đổi Đỏ/Xanh",
-      "swapRedBlueDesc": "Hoán đổi kênh màu đỏ và xanh (khắc phục một số lỗi màu)",
-      "readOnly": "Chỉ đọc",
-      "readOnlyDesc": "Xem màn hình từ xa mà không gửi đầu vào",
-      "telnetPort": "Cổng Telnet",
-      "terminalType": "Loại terminal",
-      "fontName": "Tên phông chữ",
-      "fontSize": "Cỡ chữ",
-      "colorScheme": "Bảng màu",
-      "backspaceKey": "Phím Backspace",
-      "colorDepth": "Độ sâu màu",
-      "resizeMethod": "Phương thức thay đổi kích thước",
-      "driveNamePlaceholder": "Đường Termix",
-      "options": {
-        "any": "Bất kì",
-        "auto": "Tự động",
-        "nlaExtended": "NLA mở rộng",
-        "color8": "8-bit",
-        "color16": "16-bit",
-        "color24": "24 bit",
-        "color32": "32-bit",
-        "displayUpdate": "Cập nhật hiển thị",
-        "reconnect": "Kết nối lại",
-        "preserve": "Bảo tồn",
-        "unix": "Unix (LF)",
-        "windows": "Windows (CRLF)",
-        "local": "Cục bộ",
-        "remote": "Từ xa",
-        "failsafe": "an toàn",
-        "blackOnWhite": "Đen trên nền trắng",
-        "whiteOnBlack": "Trắng trên nền đen",
-        "grayOnBlack": "Xám trên nền đen",
-        "greenOnBlack": "Xanh lá cây trên nền đen"
-      }
-    },
-    "remoteDesktop": "Máy tính từ xa",
-    "tabRdp": "RDP",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "Mạng ảo",
-    "unencryptedShell": "Shell không mã hóa",
-    "remoteDesktopNotes": "Ghi chú",
-    "userDefaultsNote": "Các thiết lập bạn giữ nguyên sẽ tuân theo cài đặt mặc định của máy chủ.",
-    "connectionOriginNote": "Trên ứng dụng máy tính để bàn, RDP, VNC và Telnet sử dụng máy chủ từ xa trừ khi máy chủ được đặt thành Thiết bị này, điều này yêu cầu một máy ảo mà guacd này có thể truy cập được. Hãy thiết lập một máy ảo trong cài đặt Máy tính từ xa hoặc cho từng máy chủ trong guacd Proxy.",
-    "docsLink": "Xem tài liệu",
-    "connectionOriginGuacamoleNote": "RDP, VNC và Telnet sử dụng máy chủ từ xa trừ khi bạn chọn \"Thiết bị này\", tùy chọn này yêu cầu máy ảo guacd mà máy này có thể truy cập được. Hãy thiết lập máy ảo này trong cài đặt URL của guacd hoặc cho từng máy chủ trong phần Proxy của guacd."
-  },
-  "onboarding": {
-    "feature_desktop": "Máy tính từ xa",
-    "feature_desktop_desc": "Mở các phiên RDP, VNC và Telnet trong cùng một tab, tương tự như SSH."
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "Độ sâu màu",
-        "description": "Được sử dụng cho các máy chủ RDP để chế độ mặc định."
-      },
-      "resizeMethod": {
-        "label": "Phương thức thay đổi kích thước",
-        "description": "Màn hình điều khiển từ xa tự động điều chỉnh theo kích thước cửa sổ."
-      },
-      "resizeDisplayUpdate": "Cập nhật hiển thị",
-      "resizeReconnect": "Kết nối lại",
-      "inherit": "Kế thừa",
-      "on": "Bật",
-      "off": "Tắt",
-      "forceLossless": {
-        "label": "Ép buộc Lossless",
-        "description": "Ép buộc mã hóa ảnh không mất dữ liệu (chất lượng cao hơn, tốn băng thông)"
-      },
-      "enableWallpaper": {
-        "label": "Hình nền",
-        "description": "Hiển thị hình nền desktop (tắt để cải thiện hiệu suất)"
-      },
-      "enableFontSmoothing": {
-        "label": "Làm mịn phông chữ",
-        "description": "Bật kết xuất phông chữ ClearType"
-      },
-      "enableDesktopComposition": {
-        "label": "Tổ hợp màn hình nền",
-        "description": "Bật hiệu ứng kính Aero"
-      },
-      "disableAudio": {
-        "label": "Tắt âm thanh",
-        "description": "Tắt tất cả âm thanh từ phiên từ xa"
-      },
-      "enablePrinting": {
-        "label": "Bật in",
-        "description": "Chuyển hướng máy in cục bộ đến phiên từ xa"
-      },
-      "enableDrive": {
-        "label": "Bật chuyển hướng ổ đĩa",
-        "description": "Ánh xạ thư mục cục bộ thành ổ đĩa trong phiên từ xa"
-      },
-      "disableCopy": {
-        "label": "Tắt sao chép",
-        "description": "Ngăn sao chép văn bản từ phiên từ xa"
-      },
-      "disablePaste": {
-        "label": "Tắt dán",
-        "description": "Ngăn dán văn bản vào phiên từ xa"
-      },
-      "group": "Cài đặt mặc định của Remote Desktop",
-      "colorDepth16": "16-bit",
-      "colorDepth24": "24 bit",
-      "colorDepth32": "32-bit"
-    },
-    "admin": {
-      "enabled": {
-        "label": "Bật tính năng truy cập máy tính từ xa",
-        "description": "Cho phép các kết nối RDP, VNC và Telnet thông qua guacd."
-      },
-      "guacdUrl": {
-        "label": "URL guacd",
-        "description": "Nơi guacd lắng nghe, được định dạng là host:port. Các biến môi trường GUACD_URL, GUACD_HOST và GUACD_PORT sẽ ghi đè lên định dạng này.",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "RDP"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "Cổng RDP"
-      },
-      "vncPort": {
-        "label": "Cổng VNC"
-      },
-      "telnetPort": {
-        "label": "Cổng Telnet"
-      },
-      "rdpSecurity": {
-        "label": "Chế độ bảo mật RDP"
-      },
-      "rdpIgnoreCert": {
-        "label": "Bỏ qua lỗi chứng chỉ"
-      },
-      "guacamoleConfig": {
-        "label": "cài đặt guacd"
-      },
-      "enableToolbar": {
-        "label": "thanh công cụ máy tính từ xa",
-        "description": "Hiển thị thanh công cụ trong các phiên RDP, VNC và Telnet."
-      },
-      "displayGroup": "Trưng bày",
-      "displayDefaultsTab": "Máy tính từ xa"
-    }
-  },
-  "palette": {
-    "connectRdp": "Kết nối với RDP",
-    "connectVnc": "Kết nối với VNC",
-    "connectTelnet": "Kết nối bằng Telnet"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Chia sẻ phiên làm việc từ xa",
-      "description": "Cho phép chia sẻ phiên và phòng cộng tác hiển thị các phiên RDP, VNC và Telnet của người dùng này cho những người khác."
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "Cần có máy chủ từ xa. Kết nối máy chủ từ xa trong Cài đặt để sử dụng loại kết nối này."
-  },
-  "plugin": {
-    "name": "Máy tính từ xa"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/zh_CN.json b/plugins/remote-desktop/locales/translated/zh_CN.json
deleted file mode 100644
index c69e12836..000000000
--- a/plugins/remote-desktop/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "正在连接到 {{type}} 会话...",
-    "checkingGuacd": "正在检查远程桌面服务...",
-    "requestingToken": "Requesting {{type}} connection token...",
-    "openingSession": "正在开启 {{type}} 会话...",
-    "negotiating": "Negotiating {{type}} handshake...",
-    "sessionReady": "{{type}} 会话已准备就绪",
-    "connectionError": "连接错误",
-    "connectionFailed": "连接失败",
-    "failedToConnect": "获取连接令牌失败",
-    "hostNotFound": "未找到主机",
-    "noHostSelected": "未选择主机",
-    "reconnect": "重新连接",
-    "retry": "重试",
-    "guacdUnavailable": "远程桌面服务 (guacd) 不可用。请确保 guacd 正在运行并可访问，且在管理设置中正确配置。",
-    "credentialPromptTitle": "输入 RDP 凭据",
-    "credentialPromptDescription": "此主机设置为在连接时提示输入凭据。这些凭据仅用于当前会话，不会被保存。",
-    "connect": "连接",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "驱动器文件",
-      "parent": "父目录",
-      "refresh": "刷新",
-      "empty": "此文件夹为空",
-      "listFailed": "读取此文件夹失败",
-      "download": "下载",
-      "downloadFailed": "下载失败 {{name}}",
-      "upload": "上传文件",
-      "uploading": "正在上传 {{name}}...",
-      "uploaded": "已上传 {{name}}",
-      "uploadFailed": "上传失败 {{name}}",
-      "uploadDisabled": "此连接已禁用上传功能",
-      "driveUnavailable": "上传文件前启用 RDP 驱动器重定向",
-      "driveNotWritable": "guacd 无法写入驱动器文件夹。请检查 GUACD_DRIVE_PATH（或主机驱动器路径）及其权限。",
-      "dropToUpload": "拖放文件即可上传"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (锁定屏幕)",
-      "winKey": "Windows 键",
-      "superL": "Super+L（锁屏）",
-      "superKey": "超级密钥",
-      "super": "极好的",
-      "cmdL": "Cmd+L（锁屏）",
-      "cmdKey": "命令键",
-      "cmd": "命令",
-      "ctrl": "Ctrl",
-      "alt": "Alt",
-      "shift": "Shift",
-      "win": "Win",
-      "stickyActive": "{{key}}（已锁定 - 点击释放）",
-      "stickyInactive": "{{key}}（点击锁定）",
-      "esc": "Escape",
-      "tab": "Tab",
-      "home": "Home",
-      "end": "End",
-      "pageUp": "Page Up",
-      "pageDown": "Page Down",
-      "arrowUp": "Arrow Up",
-      "arrowDown": "Arrow Down",
-      "arrowLeft": "Arrow Left",
-      "arrowRight": "Arrow Right",
-      "fnToggle": "功能键",
-      "reconnect": "重新连接会话",
-      "collapse": "折叠工具栏",
-      "expand": "展开工具栏",
-      "dragHandle": "拖动以重新定位",
-      "hide": "本次会话期间隐藏。要永久禁用，请打开“主机设置”→“常规”→“连接工具栏”。",
-      "zoomIn": "放大",
-      "zoomOut": "缩小",
-      "resetZoom": "重置缩放",
-      "fitToScreen": "适应屏幕",
-      "switchToTrackpad": "切换到触控板模式（拖动移动光标，轻点进行点击）",
-      "switchToTouch": "切换到触摸模式（直接点击你想点击的地方）"
-    },
-    "disabled": "远程桌面已关闭。管理员可以在“设置”中启用它。"
-  },
-  "hosts": {
-    "nativeRdpOpened": "在 Windows 远程桌面中打开",
-    "nativeRdpFailed": "无法打开 Windows 远程桌面",
-    "openNativeRdp": "在 Windows 远程桌面中打开",
-    "guac": {
-      "toolbar": "工具栏",
-      "connection": "连接",
-      "authentication": "认证",
-      "storedCredential": "已存储凭据",
-      "authMethod": "认证方法",
-      "authTypeDirect": "直接",
-      "authTypeCredential": "凭据",
-      "authTypeNone": "无",
-      "authTypeNoneDesc": "不会存储任何凭据。每次连接时，系统都会提示您输入用户名和密码；这些信息不会被保存。",
-      "selectCredential": "选择凭据...",
-      "connectionSettings": "连接设置",
-      "displaySettings": "显示设置",
-      "audioSettings": "音频设置",
-      "rdpPerformance": "RDP 性能",
-      "deviceRedirection": "设备重定向",
-      "session": "会话",
-      "gateway": "网关",
-      "remoteApp": "RemoteApp",
-      "clipboard": "剪贴板",
-      "sessionRecording": "会话录制",
-      "wakeOnLan": "网络唤醒",
-      "vncSettings": "VNC 设置",
-      "terminalSettings": "终端设置",
-      "rdpPort": "RDP 端口",
-      "username": "用户名",
-      "password": "密码",
-      "passwordSaved": "密码已保存，输入即可更改",
-      "domain": "域",
-      "securityMode": "安全模式",
-      "width": "宽度",
-      "height": "高度",
-      "dpi": "DPI",
-      "clientName": "客户端名称",
-      "initialProgram": "初始程序",
-      "serverLayout": "服务器布局",
-      "timezone": "时区",
-      "loadBalanceInfo": "负载均衡信息 / Cookie",
-      "loadBalanceInfoDesc": "RD 连接代理 Cookie，用于 RDS 场负载均衡（例如 tsv://MS Terminal Services Plugin.1.CollectionName）",
-      "guacdProxy": "guacd 代理",
-      "guacdHostname": "guacd 主机",
-      "guacdHostnamePlaceholder": "全局默认",
-      "guacdPort": "guacd 端口",
-      "guacdProxyDesc": "为此连接覆盖全局 guacd 实例。留空则使用全局配置的 guacd。",
-      "gatewayHostname": "网关主机名",
-      "gatewayPort": "网关端口",
-      "gatewayUsername": "网关用户名",
-      "gatewayPassword": "网关密码",
-      "gatewayDomain": "网关域",
-      "remoteAppProgram": "RemoteApp 程序",
-      "workingDirectory": "工作目录",
-      "arguments": "参数",
-      "normalizeLineEndings": "规范化行尾",
-      "macAddress": "MAC 地址",
-      "broadcastAddress": "广播地址",
-      "udpPort": "UDP 端口",
-      "waitTimeS": "等待时间（秒）",
-      "driveName": "驱动器名称",
-      "drivePath": "驱动器路径",
-      "ignoreCertificate": "忽略证书",
-      "ignoreCertificateDesc": "允许连接到具有自签名证书的主机",
-      "forceLossless": "强制无损",
-      "forceLosslessDesc": "强制无损图像编码（质量更高，占用更多带宽）",
-      "disableAudio": "禁用音频",
-      "disableAudioDesc": "将远程会话的所有音频静音",
-      "enableAudioInput": "启用音频输入（麦克风）",
-      "enableAudioInputDesc": "将本地麦克风转发到远程会话",
-      "wallpaper": "壁纸",
-      "wallpaperDesc": "显示桌面壁纸（禁用可提高性能）",
-      "theming": "主题",
-      "themingDesc": "启用视觉主题和样式",
-      "fontSmoothing": "字体平滑",
-      "fontSmoothingDesc": "启用 ClearType 字体渲染",
-      "fullWindowDrag": "全窗口拖动",
-      "fullWindowDragDesc": "拖动时显示窗口内容",
-      "desktopComposition": "桌面合成",
-      "desktopCompositionDesc": "启用 Aero 玻璃效果",
-      "menuAnimations": "菜单动画",
-      "menuAnimationsDesc": "启用菜单淡入淡出与滑动动画",
-      "disableBitmapCaching": "禁用位图缓存",
-      "disableBitmapCachingDesc": "关闭位图缓存（可能有助于解决显示故障）",
-      "disableOffscreenCaching": "禁用离屏缓存",
-      "disableOffscreenCachingDesc": "关闭离屏缓存",
-      "disableGlyphCaching": "禁用字形缓存",
-      "disableGlyphCachingDesc": "关闭字形缓存",
-      "enableGfx": "启用 GFX",
-      "enableGfxDesc": "使用 RemoteFX 图形管道",
-      "enablePrinting": "启用打印",
-      "enablePrintingDesc": "将本地打印机重定向到远程会话",
-      "enableDriveRedirection": "启用驱动器重定向",
-      "enableDriveRedirectionDesc": "将本地文件夹映射为远程会话中的驱动器",
-      "createDrivePath": "创建驱动器路径",
-      "createDrivePathDesc": "如果文件夹不存在，则自动创建",
-      "disableDownload": "禁用下载",
-      "disableDownloadDesc": "禁止从远程会话下载文件",
-      "disableUpload": "禁用上传",
-      "disableUploadDesc": "禁止上传文件到远程会话",
-      "enableTouch": "启用触控",
-      "enableTouchDesc": "启用触控输入转发",
-      "consoleSession": "控制台会话",
-      "consoleSessionDesc": "连接到控制台（会话 0）而不是新会话",
-      "sendWolPacket": "发送 WOL 数据包",
-      "sendWolPacketDesc": "在连接前发送魔术包以唤醒此主机",
-      "disableCopy": "禁用复制",
-      "disableCopyDesc": "禁止从远程会话复制文本",
-      "disablePaste": "禁用粘贴",
-      "disablePasteDesc": "禁止粘贴文本到远程会话",
-      "createPathIfMissing": "如果路径不存在则创建",
-      "createPathIfMissingDesc": "自动创建录制目录",
-      "excludeOutput": "排除输出",
-      "excludeOutputDesc": "不录制屏幕输出（仅元数据）",
-      "excludeMouse": "排除鼠标",
-      "excludeMouseDesc": "不录制鼠标移动",
-      "includeKeystrokes": "包含击键",
-      "includeKeystrokesDesc": "除了屏幕输出外，还录制原始击键",
-      "vncPort": "VNC 端口",
-      "vncPassword": "VNC 密码",
-      "vncUsernameOptional": "用户名 (可选)",
-      "vncLeaveBlank": "如不需要请留空",
-      "cursorMode": "光标模式",
-      "swapRedBlue": "交换红/蓝",
-      "swapRedBlueDesc": "交换红蓝色彩通道 (可修复某些色彩问题)",
-      "readOnly": "只读",
-      "readOnlyDesc": "仅查看远程屏幕，不发送任何输入",
-      "telnetPort": "Telnet 端口",
-      "terminalType": "终端类型",
-      "fontName": "字体名称",
-      "fontSize": "字体大小",
-      "colorScheme": "配色方案",
-      "backspaceKey": "退格键",
-      "colorDepth": "颜色深度",
-      "resizeMethod": "调整大小方法",
-      "driveNamePlaceholder": "特米克斯大道",
-      "options": {
-        "any": "任何",
-        "auto": "自动",
-        "nlaExtended": "NLA 扩展",
-        "color8": "8 位",
-        "color16": "16 位",
-        "color24": "24 位",
-        "color32": "32 位",
-        "displayUpdate": "显示更新",
-        "reconnect": "重新连接",
-        "preserve": "保存",
-        "unix": "Unix（LF）",
-        "windows": "Windows（CRLF）",
-        "local": "本地",
-        "remote": "远程",
-        "failsafe": "故障安全",
-        "blackOnWhite": "黑底白字",
-        "whiteOnBlack": "黑底白字",
-        "grayOnBlack": "灰色底黑色",
-        "greenOnBlack": "绿色底黑色"
-      }
-    },
-    "remoteDesktop": "远程桌面",
-    "tabRdp": "RDP",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "虚拟网络",
-    "unencryptedShell": "未加密 Shell",
-    "remoteDesktopNotes": "笔记",
-    "userDefaultsNote": "如果您的设置保持不变，则遵循主机默认设置。",
-    "connectionOriginNote": "在桌面应用程序中，RDP、VNC 和 Telnet 会使用远程服务器，除非主机设置为“此设备”。“此设备”需要 guacd 代理，即此计算机可以访问的代理。您可以在远程桌面设置中设置 guacd 代理，也可以为每个主机单独设置。",
-    "docsLink": "查看文档",
-    "connectionOriginGuacamoleNote": "RDP、VNC 和 Telnet 默认使用远程服务器，除非您选择“此设备”，这需要一台机器可以访问的 guacd 服务器。您可以在 guacd URL 设置中设置，也可以在 guacd 代理中为每个主机单独设置。"
-  },
-  "onboarding": {
-    "feature_desktop": "远程桌面",
-    "feature_desktop_desc": "像 SSH 一样，在标签页中直接打开 RDP、VNC 和 Telnet 会话。"
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "颜色深度",
-        "description": "用于那些保留默认设置的 RDP 主机。"
-      },
-      "resizeMethod": {
-        "label": "调整大小方法",
-        "description": "远程屏幕如何跟随窗口大小变化。"
-      },
-      "resizeDisplayUpdate": "显示更新",
-      "resizeReconnect": "重新连接",
-      "inherit": "继承",
-      "on": "开启",
-      "off": "关闭",
-      "forceLossless": {
-        "label": "强制无损",
-        "description": "强制无损图像编码（质量更高，占用更多带宽）"
-      },
-      "enableWallpaper": {
-        "label": "壁纸",
-        "description": "显示桌面壁纸（禁用可提高性能）"
-      },
-      "enableFontSmoothing": {
-        "label": "字体平滑",
-        "description": "启用 ClearType 字体渲染"
-      },
-      "enableDesktopComposition": {
-        "label": "桌面合成",
-        "description": "启用 Aero 玻璃效果"
-      },
-      "disableAudio": {
-        "label": "禁用音频",
-        "description": "将远程会话的所有音频静音"
-      },
-      "enablePrinting": {
-        "label": "启用打印",
-        "description": "将本地打印机重定向到远程会话"
-      },
-      "enableDrive": {
-        "label": "启用驱动器重定向",
-        "description": "将本地文件夹映射为远程会话中的驱动器"
-      },
-      "disableCopy": {
-        "label": "禁用复制",
-        "description": "禁止从远程会话复制文本"
-      },
-      "disablePaste": {
-        "label": "禁用粘贴",
-        "description": "禁止粘贴文本到远程会话"
-      },
-      "group": "远程桌面默认设置",
-      "colorDepth16": "16 位",
-      "colorDepth24": "24 位",
-      "colorDepth32": "32 位"
-    },
-    "admin": {
-      "enabled": {
-        "label": "启用远程桌面",
-        "description": "允许通过 guacd 连接 RDP、VNC 和 Telnet。"
-      },
-      "guacdUrl": {
-        "label": "guacd URL",
-        "description": "guacd 监听的位置，格式为 host:port。GUACD_URL、GUACD_HOST 和 GUACD_PORT 环境变量会覆盖此设置。",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "RDP"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "RDP端口"
-      },
-      "vncPort": {
-        "label": "VNC端口"
-      },
-      "telnetPort": {
-        "label": "Telnet端口"
-      },
-      "rdpSecurity": {
-        "label": "RDP 安全模式"
-      },
-      "rdpIgnoreCert": {
-        "label": "忽略证书错误"
-      },
-      "guacamoleConfig": {
-        "label": "guacd 设置"
-      },
-      "enableToolbar": {
-        "label": "远程桌面工具栏",
-        "description": "在 RDP、VNC 和 Telnet 会话中显示工具栏。"
-      },
-      "displayGroup": "展示",
-      "displayDefaultsTab": "远程桌面"
-    }
-  },
-  "palette": {
-    "connectRdp": "使用 RDP 连接",
-    "connectVnc": "通过 VNC 连接",
-    "connectTelnet": "使用 Telnet 连接"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "共享远程桌面会话",
-      "description": "允许会话共享和协作房间向其他人显示此用户的 RDP、VNC 和 Telnet 会话。"
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "需要远程服务器。请在“设置”中连接远程服务器以使用此连接类型。"
-  },
-  "plugin": {
-    "name": "远程桌面"
-  }
-}
diff --git a/plugins/remote-desktop/locales/translated/zh_TW.json b/plugins/remote-desktop/locales/translated/zh_TW.json
deleted file mode 100644
index fe6c3c21c..000000000
--- a/plugins/remote-desktop/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,374 +0,0 @@
-{
-  "remoteDesktop": {
-    "connecting": "正在連線至 {{type}} 工作階段…",
-    "checkingGuacd": "正在檢查遠端桌面服務...",
-    "requestingToken": "Requesting {{type}} connection token...",
-    "openingSession": "正在開啟 {{type}} 會話...",
-    "negotiating": "Negotiating {{type}} handshake...",
-    "sessionReady": "{{type}} 會話已準備就緒",
-    "connectionError": "連線錯誤",
-    "connectionFailed": "連線失敗",
-    "failedToConnect": "無法取得連線權杖",
-    "hostNotFound": "找不到主機",
-    "noHostSelected": "未選擇主機",
-    "reconnect": "重新連線",
-    "retry": "重試",
-    "guacdUnavailable": "遠端桌面服務 (guacd) 無法使用。請確保 guacd 正在執行且可存取，並已在管理員設定中正確設定。",
-    "credentialPromptTitle": "輸入 RDP 憑證",
-    "credentialPromptDescription": "此主機設定為在連線時提示輸入憑證。這些憑證僅用於當前會話，不會被儲存。",
-    "connect": "連線",
-    "ctrlAltDel": "Ctrl+Alt+Del",
-    "files": {
-      "title": "磁碟機檔案",
-      "parent": "父目錄",
-      "refresh": "重新整理",
-      "empty": "此資料夾為空",
-      "listFailed": "讀取此資料夾失敗",
-      "download": "下載",
-      "downloadFailed": "下載失敗 {{name}}",
-      "upload": "上傳文件",
-      "uploading": "正在上傳 {{name}}...",
-      "uploaded": "已上傳 {{name}}",
-      "uploadFailed": "上傳失敗 {{name}}",
-      "uploadDisabled": "此連線已停用上傳功能",
-      "driveUnavailable": "上傳檔案前啟用 RDP 磁碟機重定向",
-      "driveNotWritable": "guacd 無法寫入磁碟機資料夾。請檢查 GUACD_DRIVE_PATH（或主機磁碟機路徑）及其權限。",
-      "dropToUpload": "拖放檔案即可上傳"
-    },
-    "toolbar": {
-      "ctrlAltDel": "Ctrl+Alt+Del",
-      "winL": "Win+L (鎖定螢幕)",
-      "winKey": "Windows 鍵",
-      "superL": "Super+L（鎖定畫面）",
-      "superKey": "超級鑰匙",
-      "super": "極佳的",
-      "cmdL": "Cmd+L（鎖定畫面）",
-      "cmdKey": "命令鍵",
-      "cmd": "命令",
-      "ctrl": "Ctrl",
-      "alt": "Alt",
-      "shift": "Shift",
-      "win": "Win",
-      "stickyActive": "{{key}} (已鎖定 - 點擊釋放)",
-      "stickyInactive": "{{key}} (點擊鎖定)",
-      "esc": "Escape",
-      "tab": "Tab",
-      "home": "Home",
-      "end": "End",
-      "pageUp": "Page Up",
-      "pageDown": "Page Down",
-      "arrowUp": "上箭頭",
-      "arrowDown": "下箭頭",
-      "arrowLeft": "左箭頭",
-      "arrowRight": "右箭頭",
-      "fnToggle": "功能鍵",
-      "reconnect": "重新連線工作階段",
-      "collapse": "收合工具列",
-      "expand": "展開工具列",
-      "dragHandle": "拖曳以重新定位",
-      "hide": "本次會話期間隱藏。若要永久停用，請開啟「主機設定」→「一般」→「連線工具列」。",
-      "zoomIn": "放大",
-      "zoomOut": "縮小",
-      "resetZoom": "重置縮放",
-      "fitToScreen": "適應螢幕",
-      "switchToTrackpad": "切換到觸控板模式（拖曳移動遊標，點擊點擊）",
-      "switchToTouch": "切換到觸控模式（直接點擊你想點擊的地方）"
-    },
-    "disabled": "遠端桌面已關閉。管理員可以在“設定”中啟用它。"
-  },
-  "hosts": {
-    "nativeRdpOpened": "在 Windows 遠端桌面中開啟",
-    "nativeRdpFailed": "無法開啟 Windows 遠端桌面",
-    "openNativeRdp": "在 Windows 遠端桌面中開啟",
-    "guac": {
-      "toolbar": "工具列",
-      "connection": "連線",
-      "authentication": "驗證",
-      "storedCredential": "已儲存的憑證",
-      "authMethod": "驗證方法",
-      "authTypeDirect": "直接",
-      "authTypeCredential": "憑證",
-      "authTypeNone": "取消全選",
-      "authTypeNoneDesc": "不會儲存任何憑證。每次連線時，系統都會提示您輸入使用者名稱和密碼；這些資訊不會被儲存。",
-      "selectCredential": "選取憑證…",
-      "connectionSettings": "連線設定",
-      "displaySettings": "顯示設定",
-      "audioSettings": "音訊設定",
-      "rdpPerformance": "RDP 效能",
-      "deviceRedirection": "裝置重新導向",
-      "session": "工作階段",
-      "gateway": "閘道",
-      "remoteApp": "RemoteApp",
-      "clipboard": "剪貼簿",
-      "sessionRecording": "工作階段錄製",
-      "wakeOnLan": "Wake-on-LAN",
-      "vncSettings": "VNC 設定",
-      "terminalSettings": "終端機設定",
-      "rdpPort": "RDP 連接埠",
-      "username": "使用者名稱",
-      "password": "密碼",
-      "passwordSaved": "密碼已儲存，輸入即可更改",
-      "domain": "網域",
-      "securityMode": "安全模式",
-      "width": "寬度",
-      "height": "高度",
-      "dpi": "DPI",
-      "clientName": "用戶端名稱",
-      "initialProgram": "初始程式",
-      "serverLayout": "伺服器鍵盤配置",
-      "timezone": "時區",
-      "loadBalanceInfo": "負載平衡資訊 / Cookie",
-      "loadBalanceInfoDesc": "用於 RDS 伺服器陣列負載平衡的 RD 連線代理 Cookie (例如 tsv://MS Terminal Services Plugin.1.CollectionName)",
-      "guacdProxy": "guacd 代理",
-      "guacdHostname": "guacd 主機",
-      "guacdHostnamePlaceholder": "全域預設",
-      "guacdPort": "guacd 連接埠",
-      "guacdProxyDesc": "覆寫此連線的全域 guacd 執行個體。留空以使用全域設定的 guacd。",
-      "gatewayHostname": "閘道主機名稱",
-      "gatewayPort": "閘道連接埠",
-      "gatewayUsername": "閘道使用者名稱",
-      "gatewayPassword": "閘道密碼",
-      "gatewayDomain": "閘道網域",
-      "remoteAppProgram": "RemoteApp 程式",
-      "workingDirectory": "工作目錄",
-      "arguments": "引數",
-      "normalizeLineEndings": "正規化行尾符號",
-      "macAddress": "MAC 位址",
-      "broadcastAddress": "廣播位址",
-      "udpPort": "UDP 連接埠",
-      "waitTimeS": "等待時間 (秒)",
-      "driveName": "磁碟機名稱",
-      "drivePath": "磁碟機路徑",
-      "ignoreCertificate": "忽略憑證",
-      "ignoreCertificateDesc": "允許連線至使用自行簽署憑證的主機",
-      "forceLossless": "強制無損",
-      "forceLosslessDesc": "強制使用無損影像編碼（品質較高，頻寬需求較大）",
-      "disableAudio": "停用音訊",
-      "disableAudioDesc": "將遠端工作階段的音訊全部靜音",
-      "enableAudioInput": "啟用音訊輸入（麥克風）",
-      "enableAudioInputDesc": "將本機麥克風轉送至遠端工作階段",
-      "wallpaper": "桌面背景",
-      "wallpaperDesc": "顯示桌面背景（停用可提升效能）",
-      "theming": "佈景主題",
-      "themingDesc": "啟用視覺主題與樣式",
-      "fontSmoothing": "字型平滑處理",
-      "fontSmoothingDesc": "啟用 ClearType 字型轉譯",
-      "fullWindowDrag": "全視窗拖曳",
-      "fullWindowDragDesc": "拖曳時顯示視窗內容",
-      "desktopComposition": "桌面合成",
-      "desktopCompositionDesc": "啟用 Aero 玻璃效果",
-      "menuAnimations": "選單動畫",
-      "menuAnimationsDesc": "啟用選單淡入淡出及滑動動畫",
-      "disableBitmapCaching": "停用點陣圖快取",
-      "disableBitmapCachingDesc": "關閉點陣圖快取（可能有助於解決顯示問題）",
-      "disableOffscreenCaching": "停用螢幕外快取",
-      "disableOffscreenCachingDesc": "關閉螢幕外快取",
-      "disableGlyphCaching": "停用字符快取",
-      "disableGlyphCachingDesc": "關閉字符快取",
-      "enableGfx": "啟用 GFX",
-      "enableGfxDesc": "使用 RemoteFX 圖形管線",
-      "enablePrinting": "啟用列印功能",
-      "enablePrintingDesc": "將本機印表機重新導向至遠端工作階段",
-      "enableDriveRedirection": "啟用磁碟機重新導向",
-      "enableDriveRedirectionDesc": "在遠端工作階段中將本機資料夾對應為磁碟機",
-      "createDrivePath": "建立磁碟機路徑",
-      "createDrivePathDesc": "如果資料夾不存在則自動建立",
-      "disableDownload": "停用下載",
-      "disableDownloadDesc": "防止從遠端工作階段下載檔案",
-      "disableUpload": "停用上傳",
-      "disableUploadDesc": "防止將檔案上傳至遠端工作階段",
-      "enableTouch": "啟用觸控",
-      "enableTouchDesc": "啟用觸控輸入轉送",
-      "consoleSession": "主控台工作階段",
-      "consoleSessionDesc": "連線至主控台 (工作階段 0) 而非新工作階段",
-      "sendWolPacket": "傳送 WOL 封包",
-      "sendWolPacketDesc": "在連線前傳送魔術封包以喚醒此主機",
-      "disableCopy": "停用複製",
-      "disableCopyDesc": "防止從遠端工作階段複製文字",
-      "disablePaste": "停用貼上",
-      "disablePasteDesc": "防止將文字貼上至遠端工作階段",
-      "createPathIfMissing": "若路徑不存在則建立",
-      "createPathIfMissingDesc": "自動建立錄製目錄",
-      "excludeOutput": "排除輸出",
-      "excludeOutputDesc": "不錄製螢幕輸出 (僅中繼資料)",
-      "excludeMouse": "排除滑鼠",
-      "excludeMouseDesc": "不錄製滑鼠移動",
-      "includeKeystrokes": "包含按鍵輸入",
-      "includeKeystrokesDesc": "除了螢幕輸出外，也錄製原始按鍵輸入",
-      "vncPort": "VNC 連接埠",
-      "vncPassword": "VNC 密碼",
-      "vncUsernameOptional": "使用者名稱 (選用)",
-      "vncLeaveBlank": "若不需要則留空",
-      "cursorMode": "游標模式",
-      "swapRedBlue": "交換紅/藍",
-      "swapRedBlueDesc": "交換紅色與藍色色版 (修正某些色彩問題)",
-      "readOnly": "唯讀",
-      "readOnlyDesc": "僅檢視遠端螢幕，不傳送任何輸入",
-      "telnetPort": "Telnet 連接埠",
-      "terminalType": "終端機類型",
-      "fontName": "字型名稱",
-      "fontSize": "字型大小",
-      "colorScheme": "色彩配置",
-      "backspaceKey": "退格鍵",
-      "colorDepth": "色彩深度",
-      "resizeMethod": "調整尺寸方法",
-      "driveNamePlaceholder": "特米克斯大道",
-      "options": {
-        "any": "任何",
-        "auto": "自動",
-        "nlaExtended": "NLA 擴展",
-        "color8": "8 位元",
-        "color16": "16 位元",
-        "color24": "24 位元",
-        "color32": "32 位元",
-        "displayUpdate": "顯示更新",
-        "reconnect": "重新連線",
-        "preserve": "儲存",
-        "unix": "Unix（LF）",
-        "windows": "Windows（CRLF）",
-        "local": "本機",
-        "remote": "遠端",
-        "failsafe": "故障安全",
-        "blackOnWhite": "黑底白字",
-        "whiteOnBlack": "黑底白字",
-        "grayOnBlack": "灰色底黑色",
-        "greenOnBlack": "綠色底黑色"
-      }
-    },
-    "remoteDesktop": "遠端桌面",
-    "tabRdp": "RDP",
-    "tabVnc": "VNC",
-    "tabTelnet": "Telnet",
-    "virtualNetwork": "虛擬網路",
-    "unencryptedShell": "未加密殼層",
-    "remoteDesktopNotes": "筆記",
-    "userDefaultsNote": "如果您的設定保持不變，請遵循主機預設設定。",
-    "connectionOriginNote": "在桌面應用程式中，RDP、VNC 和 Telnet 會使用遠端伺服器，除非主機設定為「此設備」。 「此設備」需要 guacd 代理，即此電腦可以存取的代理。您可以在遠端桌面設定中設定 guacd 代理，也可以為每個主機單獨設定。",
-    "docsLink": "檢視文件",
-    "connectionOriginGuacamoleNote": "RDP、VNC 和 Telnet 預設使用遠端伺服器，除非您選擇“此設備”，這需要一台機器可以存取的 guacd 伺服器。您可以在 guacd URL 設定中設置，也可以在 guacd 代理中為每個主機單獨設定。"
-  },
-  "onboarding": {
-    "feature_desktop": "遠端桌面",
-    "feature_desktop_desc": "像 SSH 一樣，在同一個標籤頁中開啟 RDP、VNC 和 Telnet 會話。"
-  },
-  "settings": {
-    "user": {
-      "colorDepth": {
-        "label": "色彩深度",
-        "description": "用於那些保留預設設定的 RDP 主機。"
-      },
-      "resizeMethod": {
-        "label": "調整尺寸方法",
-        "description": "遠端螢幕如何跟隨視窗大小變化。"
-      },
-      "resizeDisplayUpdate": "顯示更新",
-      "resizeReconnect": "重新連線",
-      "inherit": "繼承",
-      "on": "開啟",
-      "off": "關閉",
-      "forceLossless": {
-        "label": "強制無損",
-        "description": "強制使用無損影像編碼（品質較高，頻寬需求較大）"
-      },
-      "enableWallpaper": {
-        "label": "桌面背景",
-        "description": "顯示桌面背景（停用可提升效能）"
-      },
-      "enableFontSmoothing": {
-        "label": "字型平滑處理",
-        "description": "啟用 ClearType 字型轉譯"
-      },
-      "enableDesktopComposition": {
-        "label": "桌面合成",
-        "description": "啟用 Aero 玻璃效果"
-      },
-      "disableAudio": {
-        "label": "停用音訊",
-        "description": "將遠端工作階段的音訊全部靜音"
-      },
-      "enablePrinting": {
-        "label": "啟用列印功能",
-        "description": "將本機印表機重新導向至遠端工作階段"
-      },
-      "enableDrive": {
-        "label": "啟用磁碟機重新導向",
-        "description": "在遠端工作階段中將本機資料夾對應為磁碟機"
-      },
-      "disableCopy": {
-        "label": "停用複製",
-        "description": "防止從遠端工作階段複製文字"
-      },
-      "disablePaste": {
-        "label": "停用貼上",
-        "description": "防止將文字貼上至遠端工作階段"
-      },
-      "group": "遠端桌面預設設定",
-      "colorDepth16": "16 位元",
-      "colorDepth24": "24 位元",
-      "colorDepth32": "32 位元"
-    },
-    "admin": {
-      "enabled": {
-        "label": "啟用遠端桌面",
-        "description": "允許透過 guacd 連接 RDP、VNC 和 Telnet。"
-      },
-      "guacdUrl": {
-        "label": "guacd URL",
-        "description": "guacd 監聽的位置，格式為 host:port。 GUACD_URL、GUACD_HOST 和 GUACD_PORT 環境變數會覆寫此設定。",
-        "placeholder": "guacd:4822"
-      }
-    },
-    "host": {
-      "enableRdp": {
-        "label": "RDP"
-      },
-      "enableVnc": {
-        "label": "VNC"
-      },
-      "enableTelnet": {
-        "label": "Telnet"
-      },
-      "rdpPort": {
-        "label": "RDP埠"
-      },
-      "vncPort": {
-        "label": "VNC埠"
-      },
-      "telnetPort": {
-        "label": "Telnet連接埠"
-      },
-      "rdpSecurity": {
-        "label": "RDP 安全模式"
-      },
-      "rdpIgnoreCert": {
-        "label": "忽略證書錯誤"
-      },
-      "guacamoleConfig": {
-        "label": "guacd 設定"
-      },
-      "enableToolbar": {
-        "label": "遠端桌面工具列",
-        "description": "在 RDP、VNC 和 Telnet 會話中顯示工具列。"
-      },
-      "displayGroup": "展示",
-      "displayDefaultsTab": "遠端桌面"
-    }
-  },
-  "palette": {
-    "connectRdp": "使用 RDP 連接",
-    "connectVnc": "透過 VNC 連接",
-    "connectTelnet": "使用 Telnet 連接"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "共用遠端桌面會話",
-      "description": "允許會話共用和協作房間向其他人顯示此使用者的 RDP、VNC 和 Telnet 會話。"
-    }
-  },
-  "errors": {
-    "remoteServerRequired": "需要遠端伺服器。請在「設定」中連接遠端伺服器以使用此連線類型。"
-  },
-  "plugin": {
-    "name": "遠端桌面"
-  }
-}
diff --git a/plugins/remote-desktop/manifest.json b/plugins/remote-desktop/manifest.json
deleted file mode 100644
index 57660e4fa..000000000
--- a/plugins/remote-desktop/manifest.json
+++ /dev/null
@@ -1,739 +0,0 @@
-{
-  "id": "remote-desktop",
-  "name": "Remote Desktop",
-  "version": "1.0.0",
-  "description": "RDP, VNC and Telnet sessions in the browser, with clipboard, file transfer, recording and sharing.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Terminal",
-  "icon": "Monitor",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "hosts:read",
-    "credentials:read",
-    "credentials:use",
-    "ssh:connect",
-    "network:serve",
-    "desktop:window",
-    "ui:surface",
-    "users:impersonate"
-  ],
-  "optionalDependencies": {
-    "session-recording": "^1.0.0",
-    "tunnels": "^1.0.0"
-  },
-  "provides": [
-    {
-      "service": "sessions.live",
-      "version": "1.0.0",
-      "permission": "remote-desktop.sessions",
-      "names": ["rdp", "vnc", "telnet"]
-    }
-  ],
-  "requires": [
-    {
-      "service": "recordings.writer",
-      "versionRange": "^1.1.0",
-      "optional": true
-    },
-    {
-      "service": "tunnels.access",
-      "versionRange": "^1.0.0",
-      "optional": true
-    }
-  ],
-  "contributes": {
-    "tabs": [
-      {
-        "id": "rdp",
-        "titleKey": "hosts.tabRdp",
-        "icon": "Monitor",
-        "openFrom": ["host-context-menu", "palette"]
-      },
-      {
-        "id": "vnc",
-        "titleKey": "hosts.tabVnc",
-        "icon": "MousePointerClick",
-        "openFrom": ["host-context-menu", "palette"]
-      },
-      {
-        "id": "telnet",
-        "titleKey": "hosts.tabTelnet",
-        "icon": "Terminal",
-        "openFrom": ["host-context-menu", "palette"]
-      }
-    ],
-    "actionSlots": [
-      {
-        "id": "remote-desktop.toolbar",
-        "accepts": ["button"]
-      }
-    ],
-    "protocols": [
-      {
-        "id": "rdp",
-        "credentialFields": [
-          {
-            "key": "domain"
-          }
-        ],
-        "defaultPort": 3389,
-        "hostLoginFallback": ["username", "password"]
-      },
-      {
-        "id": "vnc",
-        "defaultPort": 5900,
-        "hostLoginFallback": ["password"]
-      },
-      {
-        "id": "telnet",
-        "defaultPort": 23,
-        "hostLoginFallback": ["password"]
-      }
-    ],
-    "guest": true,
-    "permissions": [
-      {
-        "name": "sessions",
-        "titleKey": "permissions.sessions.title",
-        "descriptionKey": "permissions.sessions.description",
-        "defaultRoles": ["admin", "user"]
-      }
-    ],
-    "settings": {
-      "admin": [
-        {
-          "key": "enabled",
-          "type": "boolean",
-          "labelKey": "settings.admin.enabled.label",
-          "descriptionKey": "settings.admin.enabled.description",
-          "default": true
-        },
-        {
-          "key": "guacdUrl",
-          "type": "string",
-          "labelKey": "settings.admin.guacdUrl.label",
-          "descriptionKey": "settings.admin.guacdUrl.description",
-          "placeholderKey": "settings.admin.guacdUrl.placeholder",
-          "requires": "enabled",
-          "default": ""
-        }
-      ],
-      "user": [
-        {
-          "key": "colorDepth",
-          "type": "select",
-          "labelKey": "settings.user.colorDepth.label",
-          "descriptionKey": "settings.user.colorDepth.description",
-          "group": "settings.user.group",
-          "options": [
-            {
-              "value": "inherit",
-              "labelKey": "settings.user.inherit"
-            },
-            {
-              "value": "16",
-              "labelKey": "settings.user.colorDepth16"
-            },
-            {
-              "value": "24",
-              "labelKey": "settings.user.colorDepth24"
-            },
-            {
-              "value": "32",
-              "labelKey": "settings.user.colorDepth32"
-            }
-          ],
-          "default": "inherit",
-          "hidden": true
-        },
-        {
-          "key": "resizeMethod",
-          "type": "select",
-          "labelKey": "settings.user.resizeMethod.label",
-          "descriptionKey": "settings.user.resizeMethod.description",
-          "group": "settings.user.group",
-          "options": [
-            {
-              "value": "inherit",
-              "labelKey": "settings.user.inherit"
-            },
-            {
-              "value": "display-update",
-              "labelKey": "settings.user.resizeDisplayUpdate"
-            },
-            {
-              "value": "reconnect",
-              "labelKey": "settings.user.resizeReconnect"
-            }
-          ],
-          "default": "inherit",
-          "hidden": true
-        },
-        {
-          "key": "forceLossless",
-          "type": "select",
-          "labelKey": "settings.user.forceLossless.label",
-          "descriptionKey": "settings.user.forceLossless.description",
-          "group": "settings.user.group",
-          "options": [
-            {
-              "value": "inherit",
-              "labelKey": "settings.user.inherit"
-            },
-            {
-              "value": "on",
-              "labelKey": "settings.user.on"
-            },
-            {
-              "value": "off",
-              "labelKey": "settings.user.off"
-            }
-          ],
-          "default": "inherit",
-          "hidden": true
-        },
-        {
-          "key": "enableWallpaper",
-          "type": "select",
-          "labelKey": "settings.user.enableWallpaper.label",
-          "descriptionKey": "settings.user.enableWallpaper.description",
-          "group": "settings.user.group",
-          "options": [
-            {
-              "value": "inherit",
-              "labelKey": "settings.user.inherit"
-            },
-            {
-              "value": "on",
-              "labelKey": "settings.user.on"
-            },
-            {
-              "value": "off",
-              "labelKey": "settings.user.off"
-            }
-          ],
-          "default": "inherit",
-          "hidden": true
-        },
-        {
-          "key": "enableFontSmoothing",
-          "type": "select",
-          "labelKey": "settings.user.enableFontSmoothing.label",
-          "descriptionKey": "settings.user.enableFontSmoothing.description",
-          "group": "settings.user.group",
-          "options": [
-            {
-              "value": "inherit",
-              "labelKey": "settings.user.inherit"
-            },
-            {
-              "value": "on",
-              "labelKey": "settings.user.on"
-            },
-            {
-              "value": "off",
-              "labelKey": "settings.user.off"
-            }
-          ],
-          "default": "inherit",
-          "hidden": true
-        },
-        {
-          "key": "enableDesktopComposition",
-          "type": "select",
-          "labelKey": "settings.user.enableDesktopComposition.label",
-          "descriptionKey": "settings.user.enableDesktopComposition.description",
-          "group": "settings.user.group",
-          "options": [
-            {
-              "value": "inherit",
-              "labelKey": "settings.user.inherit"
-            },
-            {
-              "value": "on",
-              "labelKey": "settings.user.on"
-            },
-            {
-              "value": "off",
-              "labelKey": "settings.user.off"
-            }
-          ],
-          "default": "inherit",
-          "hidden": true
-        },
-        {
-          "key": "disableAudio",
-          "type": "select",
-          "labelKey": "settings.user.disableAudio.label",
-          "descriptionKey": "settings.user.disableAudio.description",
-          "group": "settings.user.group",
-          "options": [
-            {
-              "value": "inherit",
-              "labelKey": "settings.user.inherit"
-            },
-            {
-              "value": "on",
-              "labelKey": "settings.user.on"
-            },
-            {
-              "value": "off",
-              "labelKey": "settings.user.off"
-            }
-          ],
-          "default": "inherit",
-          "hidden": true
-        },
-        {
-          "key": "enablePrinting",
-          "type": "select",
-          "labelKey": "settings.user.enablePrinting.label",
-          "descriptionKey": "settings.user.enablePrinting.description",
-          "group": "settings.user.group",
-          "options": [
-            {
-              "value": "inherit",
-              "labelKey": "settings.user.inherit"
-            },
-            {
-              "value": "on",
-              "labelKey": "settings.user.on"
-            },
-            {
-              "value": "off",
-              "labelKey": "settings.user.off"
-            }
-          ],
-          "default": "inherit",
-          "hidden": true
-        },
-        {
-          "key": "enableDrive",
-          "type": "select",
-          "labelKey": "settings.user.enableDrive.label",
-          "descriptionKey": "settings.user.enableDrive.description",
-          "group": "settings.user.group",
-          "options": [
-            {
-              "value": "inherit",
-              "labelKey": "settings.user.inherit"
-            },
-            {
-              "value": "on",
-              "labelKey": "settings.user.on"
-            },
-            {
-              "value": "off",
-              "labelKey": "settings.user.off"
-            }
-          ],
-          "default": "inherit",
-          "hidden": true
-        },
-        {
-          "key": "disableCopy",
-          "type": "select",
-          "labelKey": "settings.user.disableCopy.label",
-          "descriptionKey": "settings.user.disableCopy.description",
-          "group": "settings.user.group",
-          "options": [
-            {
-              "value": "inherit",
-              "labelKey": "settings.user.inherit"
-            },
-            {
-              "value": "on",
-              "labelKey": "settings.user.on"
-            },
-            {
-              "value": "off",
-              "labelKey": "settings.user.off"
-            }
-          ],
-          "default": "inherit",
-          "hidden": true
-        },
-        {
-          "key": "disablePaste",
-          "type": "select",
-          "labelKey": "settings.user.disablePaste.label",
-          "descriptionKey": "settings.user.disablePaste.description",
-          "group": "settings.user.group",
-          "options": [
-            {
-              "value": "inherit",
-              "labelKey": "settings.user.inherit"
-            },
-            {
-              "value": "on",
-              "labelKey": "settings.user.on"
-            },
-            {
-              "value": "off",
-              "labelKey": "settings.user.off"
-            }
-          ],
-          "default": "inherit",
-          "hidden": true
-        }
-      ],
-      "host": {
-        "fields": [
-          {
-            "key": "enableRdp",
-            "type": "boolean",
-            "labelKey": "settings.host.enableRdp.label",
-            "default": false,
-            "hidden": true,
-            "defaultable": false
-          },
-          {
-            "key": "enableVnc",
-            "type": "boolean",
-            "labelKey": "settings.host.enableVnc.label",
-            "default": false,
-            "hidden": true,
-            "defaultable": false
-          },
-          {
-            "key": "enableTelnet",
-            "type": "boolean",
-            "labelKey": "settings.host.enableTelnet.label",
-            "default": false,
-            "hidden": true,
-            "defaultable": false
-          },
-          {
-            "key": "rdpPort",
-            "type": "number",
-            "labelKey": "settings.host.rdpPort.label",
-            "min": 1,
-            "max": 65535,
-            "default": 3389,
-            "hidden": true,
-            "defaultable": false
-          },
-          {
-            "key": "vncPort",
-            "type": "number",
-            "labelKey": "settings.host.vncPort.label",
-            "min": 1,
-            "max": 65535,
-            "default": 5900,
-            "hidden": true,
-            "defaultable": false
-          },
-          {
-            "key": "telnetPort",
-            "type": "number",
-            "labelKey": "settings.host.telnetPort.label",
-            "min": 1,
-            "max": 65535,
-            "default": 23,
-            "hidden": true,
-            "defaultable": false
-          },
-          {
-            "key": "rdpSecurity",
-            "type": "string",
-            "labelKey": "settings.host.rdpSecurity.label",
-            "default": "",
-            "hidden": true
-          },
-          {
-            "key": "rdpIgnoreCert",
-            "type": "boolean",
-            "labelKey": "settings.host.rdpIgnoreCert.label",
-            "default": false,
-            "hidden": true
-          },
-          {
-            "key": "guacamoleConfig",
-            "type": "json",
-            "labelKey": "settings.host.guacamoleConfig.label",
-            "default": {},
-            "hidden": true,
-            "shareRead": "edit",
-            "secretKeys": ["gateway-password"],
-            "defaultable": false
-          },
-          {
-            "key": "enableToolbar",
-            "type": "boolean",
-            "labelKey": "settings.host.enableToolbar.label",
-            "descriptionKey": "settings.host.enableToolbar.description",
-            "default": true,
-            "hidden": true
-          },
-          {
-            "key": "colorDepth",
-            "type": "select",
-            "labelKey": "settings.user.colorDepth.label",
-            "descriptionKey": "settings.user.colorDepth.description",
-            "group": "settings.host.displayGroup",
-            "options": [
-              {
-                "value": "inherit",
-                "labelKey": "settings.user.inherit"
-              },
-              {
-                "value": "16",
-                "labelKey": "settings.user.colorDepth16"
-              },
-              {
-                "value": "24",
-                "labelKey": "settings.user.colorDepth24"
-              },
-              {
-                "value": "32",
-                "labelKey": "settings.user.colorDepth32"
-              }
-            ],
-            "default": "inherit",
-            "personal": true
-          },
-          {
-            "key": "resizeMethod",
-            "type": "select",
-            "labelKey": "settings.user.resizeMethod.label",
-            "descriptionKey": "settings.user.resizeMethod.description",
-            "group": "settings.host.displayGroup",
-            "options": [
-              {
-                "value": "inherit",
-                "labelKey": "settings.user.inherit"
-              },
-              {
-                "value": "display-update",
-                "labelKey": "settings.user.resizeDisplayUpdate"
-              },
-              {
-                "value": "reconnect",
-                "labelKey": "settings.user.resizeReconnect"
-              }
-            ],
-            "default": "inherit",
-            "personal": true
-          },
-          {
-            "key": "forceLossless",
-            "type": "select",
-            "labelKey": "settings.user.forceLossless.label",
-            "descriptionKey": "settings.user.forceLossless.description",
-            "group": "settings.host.displayGroup",
-            "options": [
-              {
-                "value": "inherit",
-                "labelKey": "settings.user.inherit"
-              },
-              {
-                "value": "on",
-                "labelKey": "settings.user.on"
-              },
-              {
-                "value": "off",
-                "labelKey": "settings.user.off"
-              }
-            ],
-            "default": "inherit",
-            "personal": true
-          },
-          {
-            "key": "enableWallpaper",
-            "type": "select",
-            "labelKey": "settings.user.enableWallpaper.label",
-            "descriptionKey": "settings.user.enableWallpaper.description",
-            "group": "settings.host.displayGroup",
-            "options": [
-              {
-                "value": "inherit",
-                "labelKey": "settings.user.inherit"
-              },
-              {
-                "value": "on",
-                "labelKey": "settings.user.on"
-              },
-              {
-                "value": "off",
-                "labelKey": "settings.user.off"
-              }
-            ],
-            "default": "inherit",
-            "personal": true
-          },
-          {
-            "key": "enableFontSmoothing",
-            "type": "select",
-            "labelKey": "settings.user.enableFontSmoothing.label",
-            "descriptionKey": "settings.user.enableFontSmoothing.description",
-            "group": "settings.host.displayGroup",
-            "options": [
-              {
-                "value": "inherit",
-                "labelKey": "settings.user.inherit"
-              },
-              {
-                "value": "on",
-                "labelKey": "settings.user.on"
-              },
-              {
-                "value": "off",
-                "labelKey": "settings.user.off"
-              }
-            ],
-            "default": "inherit",
-            "personal": true
-          },
-          {
-            "key": "enableDesktopComposition",
-            "type": "select",
-            "labelKey": "settings.user.enableDesktopComposition.label",
-            "descriptionKey": "settings.user.enableDesktopComposition.description",
-            "group": "settings.host.displayGroup",
-            "options": [
-              {
-                "value": "inherit",
-                "labelKey": "settings.user.inherit"
-              },
-              {
-                "value": "on",
-                "labelKey": "settings.user.on"
-              },
-              {
-                "value": "off",
-                "labelKey": "settings.user.off"
-              }
-            ],
-            "default": "inherit",
-            "personal": true
-          },
-          {
-            "key": "disableAudio",
-            "type": "select",
-            "labelKey": "settings.user.disableAudio.label",
-            "descriptionKey": "settings.user.disableAudio.description",
-            "group": "settings.host.displayGroup",
-            "options": [
-              {
-                "value": "inherit",
-                "labelKey": "settings.user.inherit"
-              },
-              {
-                "value": "on",
-                "labelKey": "settings.user.on"
-              },
-              {
-                "value": "off",
-                "labelKey": "settings.user.off"
-              }
-            ],
-            "default": "inherit",
-            "personal": true
-          },
-          {
-            "key": "enablePrinting",
-            "type": "select",
-            "labelKey": "settings.user.enablePrinting.label",
-            "descriptionKey": "settings.user.enablePrinting.description",
-            "group": "settings.host.displayGroup",
-            "options": [
-              {
-                "value": "inherit",
-                "labelKey": "settings.user.inherit"
-              },
-              {
-                "value": "on",
-                "labelKey": "settings.user.on"
-              },
-              {
-                "value": "off",
-                "labelKey": "settings.user.off"
-              }
-            ],
-            "default": "inherit",
-            "personal": true
-          },
-          {
-            "key": "enableDrive",
-            "type": "select",
-            "labelKey": "settings.user.enableDrive.label",
-            "descriptionKey": "settings.user.enableDrive.description",
-            "group": "settings.host.displayGroup",
-            "options": [
-              {
-                "value": "inherit",
-                "labelKey": "settings.user.inherit"
-              },
-              {
-                "value": "on",
-                "labelKey": "settings.user.on"
-              },
-              {
-                "value": "off",
-                "labelKey": "settings.user.off"
-              }
-            ],
-            "default": "inherit",
-            "personal": true
-          },
-          {
-            "key": "disableCopy",
-            "type": "select",
-            "labelKey": "settings.user.disableCopy.label",
-            "descriptionKey": "settings.user.disableCopy.description",
-            "group": "settings.host.displayGroup",
-            "options": [
-              {
-                "value": "inherit",
-                "labelKey": "settings.user.inherit"
-              },
-              {
-                "value": "on",
-                "labelKey": "settings.user.on"
-              },
-              {
-                "value": "off",
-                "labelKey": "settings.user.off"
-              }
-            ],
-            "default": "inherit",
-            "personal": true
-          },
-          {
-            "key": "disablePaste",
-            "type": "select",
-            "labelKey": "settings.user.disablePaste.label",
-            "descriptionKey": "settings.user.disablePaste.description",
-            "group": "settings.host.displayGroup",
-            "options": [
-              {
-                "value": "inherit",
-                "labelKey": "settings.user.inherit"
-              },
-              {
-                "value": "on",
-                "labelKey": "settings.user.on"
-              },
-              {
-                "value": "off",
-                "labelKey": "settings.user.off"
-              }
-            ],
-            "default": "inherit",
-            "personal": true
-          }
-        ]
-      }
-    },
-    "uses": ["session.remoteDisplay", "wakeOnLan.macAddress"]
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"]
-}
diff --git a/plugins/remote-desktop/package.json b/plugins/remote-desktop/package.json
deleted file mode 100644
index 2f0604f47..000000000
--- a/plugins/remote-desktop/package.json
+++ /dev/null
@@ -1,40 +0,0 @@
-{
-  "name": "@termix-plugin/remote-desktop",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "guacamole-common-js": "^1.5.0",
-    "guacamole-lite": "^1.2.0",
-    "lucide-react": "^1.33.0"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "express": "^5.2.1",
-    "react": "^19.2.8",
-    "react-i18next": "^17.0.14",
-    "sonner": "^2.0.8",
-    "ssh2": "^1.17.0"
-  },
-  "termix": {
-    "patches": [
-      "guacamole-common-js-flush"
-    ]
-  }
-}
diff --git a/plugins/remote-desktop/patches/guacamole-lite.cjs b/plugins/remote-desktop/patches/guacamole-lite.cjs
deleted file mode 100644
index 598191ab3..000000000
--- a/plugins/remote-desktop/patches/guacamole-lite.cjs
+++ /dev/null
@@ -1,396 +0,0 @@
-const fs = require("fs");
-const path = require("path");
-
-// Run by `termix-plugin build` with TERMIX_PATCH_ROOT set to the plugin, so
-// the package resolves the way the plugin's bundle will resolve it.
-function packageDir(name) {
-  const root = process.env.TERMIX_PATCH_ROOT || process.cwd();
-  // Walked by hand: a package whose exports map hides package.json cannot be
-  // found with require.resolve.
-  for (let dir = path.resolve(root); ; dir = path.dirname(dir)) {
-    const candidate = path.join(dir, "node_modules", name);
-    if (fs.existsSync(path.join(candidate, "package.json"))) return candidate;
-    if (path.dirname(dir) === dir) return path.join(root, "node_modules", name);
-  }
-}
-
-const guacdClientPath = path.join(
-  packageDir("guacamole-lite"),
-  "lib",
-  "GuacdClient.js",
-);
-const cryptPath = path.join(packageDir("guacamole-lite"), "lib", "Crypt.js");
-const clientConnectionPath = path.join(
-  packageDir("guacamole-lite"),
-  "lib",
-  "ClientConnection.js",
-);
-const serverPath = path.join(packageDir("guacamole-lite"), "lib", "Server.js");
-
-if (
-  !fs.existsSync(guacdClientPath) ||
-  !fs.existsSync(cryptPath) ||
-  !fs.existsSync(clientConnectionPath) ||
-  !fs.existsSync(serverPath)
-) {
-  console.log("[patch-guacamole-lite] File not found, skipping");
-  process.exit(0);
-}
-
-// Every patch below is required for correctness: protocol negotiation, the
-// guacd 1.6.0 name handshake, dynamic argument answering, UTF-8 tokens and
-// read-only joins. If an upstream release moves an anchor string, silently
-// skipping would ship a Termix that looks fine and then drops VNC/RDP sessions
-// at runtime, so a missing anchor has to stop the install instead.
-function missingAnchor(patch) {
-  console.error(
-    `[patch-guacamole-lite] ${patch} anchor not found in guacamole-lite. ` +
-      "The upstream file has changed and this patch no longer applies — " +
-      "update scripts/patch-guacamole-lite.cjs to match the new source.",
-  );
-  process.exit(1);
-}
-
-let guacdClientContent = fs.readFileSync(guacdClientPath, "utf8");
-let cryptContent = fs.readFileSync(cryptPath, "utf8");
-let clientConnectionContent = fs.readFileSync(clientConnectionPath, "utf8");
-let serverContent = fs.readFileSync(serverPath, "utf8");
-
-// Patch 1: protocol version negotiation.
-// guacamole-lite originally only accepted 1.0.0/1.1.0. Support the protocol
-// versions Termix can handle, and conservatively answer future 1.x versions as
-// VERSION_1_5_0 so guacd still sees support for `require`/`name` without us
-// claiming support for unknown instructions.
-const oldVersionBlock =
-  "                if (version === '1_0_0' || version === '1_1_0') {\n" +
-  "                    protocolVersion = version;\n" +
-  "                } else {\n" +
-  "                    protocolVersion = '1_1_0';\n" +
-  "                }";
-const oldPatchedVersionBlock =
-  "                if (version === '1_0_0' || version === '1_1_0' || version === '1_3_0' || version === '1_5_0') {\n" +
-  "                    protocolVersion = version;\n" +
-  "                } else {\n" +
-  "                    protocolVersion = '1_1_0';\n" +
-  "                }";
-const newVersionBlock =
-  "                if (version === '1_0_0' || version === '1_1_0' || version === '1_3_0' || version === '1_5_0') {\n" +
-  "                    protocolVersion = version;\n" +
-  "                } else if (/^1_\\d+_0$/.test(version)) {\n" +
-  "                    protocolVersion = '1_5_0';\n" +
-  "                } else {\n" +
-  "                    protocolVersion = '1_1_0';\n" +
-  "                }";
-
-// Patch 2: timezone instruction must be sent for all protocols >= 1.1.0, not just 1.1.0
-const oldTimezone = "if (protocolVersion === '1_1_0') {";
-const newTimezone = "if (protocolVersion !== '1_0_0') {";
-
-// Patch 3: send the `name` handshake instruction for all protocol versions >= 1.1.0.
-// The Guacamole protocol added `name` in 1.3.0, but guacd 1.6.0 began requiring it
-// during the VNC handshake even when negotiating VERSION_1_1_0, causing connections to
-// silently drop right after "User joined". Sending it for all non-1.0.0 sessions is
-// harmless (guacd ignores unknown handshake instructions for older versions). See
-// Termix-SSH/Support#567 and #734.
-const oldConnect =
-  "        this.sendInstruction(['connect'].concat(connectArgs));";
-const oldNameConnect =
-  "        if (protocolVersion === '1_3_0' || protocolVersion === '1_5_0') {\n" +
-  "            this.sendInstruction(['name', this.connectionSettings.name || 'guacamole-lite']);\n" +
-  "        }\n" +
-  "\n" +
-  "        this.sendInstruction(['connect'].concat(connectArgs));";
-const newConnect =
-  "        if (protocolVersion !== '1_0_0') {\n" +
-  "            this.sendInstruction(['name', this.connectionSettings.name || 'guacamole-lite']);\n" +
-  "        }\n" +
-  "\n" +
-  "        this.sendInstruction(['connect'].concat(connectArgs));";
-
-// Patch 4: answer guacd's dynamic argument requests locally.
-// macOS Screen Sharing can request VNC username/password through the
-// post-handshake `required`/`require` flow. guacamole-lite forwards those
-// instructions to the browser, but Termix already keeps the credentials in the
-// server-side token and the browser does not provide an onrequired handler.
-const oldSendBuffer =
-  "        this.lastActivity = Date.now();\n" + "        this.sendBuffer = '';";
-const newSendBuffer =
-  "        this.lastActivity = Date.now();\n" +
-  "        this.sendBuffer = '';\n" +
-  "        this.nextArgumentStreamIndex = 0;";
-
-const oldSendInstructionBlock =
-  "    sendInstruction(instruction) {\n" +
-  "        // convert every element in the instruction array to a string. convert null to an empty string\n" +
-  "        instruction = instruction.map((element) => {\n" +
-  "            if (element === null || element === undefined) {\n" +
-  "                return '';\n" +
-  "            }\n" +
-  "            return String(element);\n" +
-  "        });\n" +
-  "\n" +
-  "        const instructionString = GuacamoleParser.toInstruction(instruction);\n" +
-  "        this.send(instructionString);\n" +
-  "    }\n";
-const newSendInstructionBlock =
-  oldSendInstructionBlock +
-  "\n" +
-  "    sendArgumentValue(name, value) {\n" +
-  "        const stream = this.nextArgumentStreamIndex++;\n" +
-  "        this.sendInstruction(['argv', stream, 'text/plain', name]);\n" +
-  "        this.sendInstruction(['blob', stream, Buffer.from(String(value ?? ''), 'utf8').toString('base64')]);\n" +
-  "        this.sendInstruction(['end', stream]);\n" +
-  "    }\n" +
-  "\n" +
-  "    sendRequiredArguments(params) {\n" +
-  "        params.forEach((name) => {\n" +
-  "            this.sendArgumentValue(name, this.connectionSettings[name]);\n" +
-  "        });\n" +
-  "    }\n";
-
-const oldReadyHandler =
-  '        // Handle "ready" instruction\n' +
-  "        if (opcode === 'ready') {";
-const newReadyHandler =
-  "        // Handle dynamic argument requests from guacd\n" +
-  "        if (opcode === 'required' || opcode === 'require') {\n" +
-  "            this.sendRequiredArguments(params);\n" +
-  "            return;\n" +
-  "        }\n" +
-  "\n" +
-  oldReadyHandler;
-
-let patched = false;
-
-if (!guacdClientContent.includes("} else if (/^1_\\d+_0$/.test(version)) {")) {
-  if (guacdClientContent.includes(oldPatchedVersionBlock)) {
-    guacdClientContent = guacdClientContent.replace(
-      oldPatchedVersionBlock,
-      newVersionBlock,
-    );
-  } else if (guacdClientContent.includes(oldVersionBlock)) {
-    guacdClientContent = guacdClientContent.replace(
-      oldVersionBlock,
-      newVersionBlock,
-    );
-  } else {
-    missingAnchor("Version check");
-  }
-  patched = true;
-}
-
-if (!guacdClientContent.includes(newTimezone)) {
-  if (!guacdClientContent.includes(oldTimezone)) {
-    missingAnchor("Timezone");
-  }
-  guacdClientContent = guacdClientContent.replace(oldTimezone, newTimezone);
-  patched = true;
-}
-
-if (!guacdClientContent.includes(newConnect)) {
-  if (guacdClientContent.includes(oldNameConnect)) {
-    guacdClientContent = guacdClientContent.replace(oldNameConnect, newConnect);
-  } else if (guacdClientContent.includes(oldConnect)) {
-    guacdClientContent = guacdClientContent.replace(oldConnect, newConnect);
-  } else {
-    missingAnchor("Connect");
-  }
-  patched = true;
-}
-
-if (!guacdClientContent.includes("this.nextArgumentStreamIndex = 0;")) {
-  if (!guacdClientContent.includes(oldSendBuffer)) {
-    missingAnchor("Argument stream index");
-  }
-  guacdClientContent = guacdClientContent.replace(oldSendBuffer, newSendBuffer);
-  patched = true;
-}
-
-if (!guacdClientContent.includes("sendRequiredArguments(params) {")) {
-  if (!guacdClientContent.includes(oldSendInstructionBlock)) {
-    missingAnchor("Required argument helper");
-  }
-  guacdClientContent = guacdClientContent.replace(
-    oldSendInstructionBlock,
-    newSendInstructionBlock,
-  );
-  patched = true;
-}
-
-if (
-  !guacdClientContent.includes("opcode === 'required' || opcode === 'require'")
-) {
-  if (!guacdClientContent.includes(oldReadyHandler)) {
-    missingAnchor("Required opcode");
-  }
-  guacdClientContent = guacdClientContent.replace(
-    oldReadyHandler,
-    newReadyHandler,
-  );
-  patched = true;
-}
-
-// Patch 5: guacamole-lite decrypts token JSON through ASCII/binary strings,
-// which corrupts IV/ciphertext bytes and non-ASCII connection settings such as
-// RDP/VNC passwords with umlauts. Keep the encrypted fields as Buffers and
-// decode the plaintext JSON as UTF-8.
-const oldDecryptBlock =
-  "        let encoded = JSON.parse(this.constructor.base64decode(encodedString));\n" +
-  "\n" +
-  "        encoded.iv = this.constructor.base64decode(encoded.iv);\n" +
-  "        encoded.value = this.constructor.base64decode(encoded.value, 'binary');\n" +
-  "\n" +
-  "        const decipher = Crypto.createDecipheriv(this.cypher, this.key, encoded.iv);\n" +
-  "\n" +
-  "        let decrypted = decipher.update(encoded.value, 'binary', 'ascii');\n" +
-  "        decrypted += decipher.final('ascii');";
-const oldPartiallyPatchedDecryptBlock =
-  "        let encoded = JSON.parse(this.constructor.base64decode(encodedString));\n" +
-  "\n" +
-  "        encoded.iv = this.constructor.base64decode(encoded.iv);\n" +
-  "        encoded.value = this.constructor.base64decode(encoded.value, 'binary');\n" +
-  "\n" +
-  "        const decipher = Crypto.createDecipheriv(this.cypher, this.key, encoded.iv);\n" +
-  "\n" +
-  "        let decrypted = decipher.update(encoded.value, 'binary', 'utf8');\n" +
-  "        decrypted += decipher.final('utf8');";
-const newDecryptBlock =
-  "        const encoded = JSON.parse(Buffer.from(encodedString, 'base64').toString('utf8'));\n" +
-  "\n" +
-  "        const iv = Buffer.from(encoded.iv, 'base64');\n" +
-  "        const value = Buffer.from(encoded.value, 'base64');\n" +
-  "\n" +
-  "        const decipher = Crypto.createDecipheriv(this.cypher, this.key, iv);\n" +
-  "\n" +
-  "        let decrypted = decipher.update(value, undefined, 'utf8');\n" +
-  "        decrypted += decipher.final('utf8');";
-
-if (!cryptContent.includes(newDecryptBlock)) {
-  if (cryptContent.includes(oldDecryptBlock)) {
-    cryptContent = cryptContent.replace(oldDecryptBlock, newDecryptBlock);
-  } else if (cryptContent.includes(oldPartiallyPatchedDecryptBlock)) {
-    cryptContent = cryptContent.replace(
-      oldPartiallyPatchedDecryptBlock,
-      newDecryptBlock,
-    );
-  } else {
-    missingAnchor("UTF-8 token decrypt");
-  }
-  patched = true;
-}
-
-// Patch 7: drop client-to-guacd input instructions from read-only session-share
-// joins. guacd has no native read-only enforcement in the versions this project
-// targets, so Termix must gate here. Denylist (not allowlist) on purpose: an
-// unrecognized opcode is far more likely to be protocol plumbing (sync, blob,
-// clipboard streams) than a new input vector, so failing open is the safer
-// default for a client we already control.
-const oldSendMessageToGuacd =
-  "    sendMessageToGuacd(message) {\n" +
-  "        this.lastActivity = Date.now();\n" +
-  "        this.logger.log(LOGLEVEL.DEBUG, '[ >>> #     ]    Received from WS: ```' + message + '```');\n" +
-  "\n" +
-  "        if (this.guacdClient) {\n" +
-  "            this.guacdClient.send(message, true);\n" +
-  "        }\n" +
-  "    }";
-const newSendMessageToGuacd =
-  "    sendMessageToGuacd(message) {\n" +
-  "        this.lastActivity = Date.now();\n" +
-  "        this.logger.log(LOGLEVEL.DEBUG, '[ >>> #     ]    Received from WS: ```' + message + '```');\n" +
-  "\n" +
-  "        if (this.isReadOnlyJoin() && this.isInputInstruction(message)) {\n" +
-  "            return;\n" +
-  "        }\n" +
-  "\n" +
-  "        if (this.guacdClient) {\n" +
-  "            this.guacdClient.send(message, true);\n" +
-  "        }\n" +
-  "    }\n" +
-  "\n" +
-  "    isReadOnlyJoin() {\n" +
-  "        const connection = this.connectionSettings && this.connectionSettings.connection;\n" +
-  "        return !!(connection && connection.join && connection.readOnly === true);\n" +
-  "    }\n" +
-  "\n" +
-  "    // Termix-only read-only gate, not part of the vendored library: extracts just\n" +
-  "    // the leading opcode from a raw '<len>.<opcode>,...;' instruction without the\n" +
-  "    // overhead of a full stateful parse.\n" +
-  "    isInputInstruction(message) {\n" +
-  "        const dot = message.indexOf('.');\n" +
-  "        if (dot === -1) return false;\n" +
-  "        const len = parseInt(message.substring(0, dot), 10);\n" +
-  "        if (isNaN(len)) return false;\n" +
-  "        const opcode = message.substring(dot + 1, dot + 1 + len);\n" +
-  "        return ['mouse', 'key', 'touch', 'size'].includes(opcode);\n" +
-  "    }";
-
-if (!clientConnectionContent.includes("isReadOnlyJoin()")) {
-  if (!clientConnectionContent.includes(oldSendMessageToGuacd)) {
-    missingAnchor("sendMessageToGuacd");
-  }
-  clientConnectionContent = clientConnectionContent.replace(
-    oldSendMessageToGuacd,
-    newSendMessageToGuacd,
-  );
-  patched = true;
-}
-
-// Patch 8: mergeConnectionOptions only preserves `join` across the settings
-// merge, dropping Termix's `readOnly` flag before sendMessageToGuacd can see it.
-const oldPreserveJoin =
-  "        // For join connections, preserve the join property\n" +
-  "        if (this.connectionSettings.connection.join) {\n" +
-  "            compiledSettings.join = this.connectionSettings.connection.join;\n" +
-  "        }";
-const newPreserveJoin =
-  "        // For join connections, preserve the join property\n" +
-  "        if (this.connectionSettings.connection.join) {\n" +
-  "            compiledSettings.join = this.connectionSettings.connection.join;\n" +
-  "            compiledSettings.readOnly = this.connectionSettings.connection.readOnly === true;\n" +
-  "        }";
-
-if (!clientConnectionContent.includes("compiledSettings.readOnly")) {
-  if (!clientConnectionContent.includes(oldPreserveJoin)) {
-    missingAnchor("join-preserve");
-  }
-  clientConnectionContent = clientConnectionContent.replace(
-    oldPreserveJoin,
-    newPreserveJoin,
-  );
-  patched = true;
-}
-
-// Patch 9: ClientConnection closes malformed-token WebSockets in its
-// constructor, but Server.newConnection still called connect() afterwards.
-// That dereferenced the absent connection settings and turned one bad token
-// into an unhandled rejection that could terminate the backend process.
-const oldConnectionSetup =
-  "        newConnection.on('ready', async (clientConnection) => {";
-const newConnectionSetup =
-  "        if (!newConnection.connectionSettings || !newConnection.connectionSettings.connection) {\n" +
-  "            return;\n" +
-  "        }\n" +
-  "\n" +
-  oldConnectionSetup;
-
-if (!serverContent.includes("!newConnection.connectionSettings.connection")) {
-  if (!serverContent.includes(oldConnectionSetup)) {
-    missingAnchor("invalid-token connection guard");
-  }
-  serverContent = serverContent.replace(oldConnectionSetup, newConnectionSetup);
-  patched = true;
-}
-
-if (!patched) {
-  console.log("[patch-guacamole-lite] Already patched");
-  process.exit(0);
-}
-
-fs.writeFileSync(guacdClientPath, guacdClientContent);
-fs.writeFileSync(cryptPath, cryptContent);
-fs.writeFileSync(clientConnectionPath, clientConnectionContent);
-fs.writeFileSync(serverPath, serverContent);
-console.log(
-  "[patch-guacamole-lite] Patched protocol negotiation, name handshake, required arguments, UTF-8 token decrypt, read-only joins, and malformed-token handling",
-);
diff --git a/plugins/remote-desktop/src/backend/drive-settings.ts b/plugins/remote-desktop/src/backend/drive-settings.ts
deleted file mode 100644
index 12baa0ca7..000000000
--- a/plugins/remote-desktop/src/backend/drive-settings.ts
+++ /dev/null
@@ -1,29 +0,0 @@
-export const GUACD_DRIVE_PATH_ENV = "GUACD_DRIVE_PATH";
-const DEFAULT_DRIVE_ROOT = "/drive";
-
-/**
- * Fills in where guacd keeps the files behind RDP drive redirection.
- *
- * The folder lives on the guacd host, not on Termix's - with the stock
- * compose it is a directory in the shared termix-data volume, configured
- * through GUACD_DRIVE_PATH. Each user gets a folder of their own underneath:
- * a shared drive would show everyone's uploads to everyone else. A host that
- * names its own drive-path keeps it.
- */
-export function withDriveSettings(
-  guacConfig: Record<string, unknown>,
-  userId: string,
-  env: NodeJS.ProcessEnv = process.env,
-): Record<string, unknown> {
-  if (!guacConfig["enable-drive"] || guacConfig["drive-path"]) {
-    return guacConfig;
-  }
-  const root = (
-    env[GUACD_DRIVE_PATH_ENV]?.trim() || DEFAULT_DRIVE_ROOT
-  ).replace(/\/+$/, "");
-  return {
-    ...guacConfig,
-    "drive-path": `${root}/${userId}`,
-    "create-drive-path": true,
-  };
-}
diff --git a/plugins/remote-desktop/src/backend/guacamole-server.ts b/plugins/remote-desktop/src/backend/guacamole-server.ts
deleted file mode 100644
index 2d2365f6f..000000000
--- a/plugins/remote-desktop/src/backend/guacamole-server.ts
+++ /dev/null
@@ -1,335 +0,0 @@
-import GuacamoleLite from "guacamole-lite";
-import fs from "fs";
-import path from "path";
-import type { IncomingMessage } from "http";
-import type { Duplex } from "stream";
-import type {
-  GuacamoleRecordingMetadata,
-  GuacamoleTokenService,
-  TermixGuacMeta,
-} from "./token-service.js";
-import type { GuacdOptions } from "./guacd-config.js";
-import type { RemoteSessions } from "./sessions.js";
-import { errorMessage, type RemoteDesktopLogger } from "./log.js";
-
-/** The recordings.writer service, when the session-recording plugin provides it. */
-export interface RecordingsWriter {
-  enabledFor: (hostId: number) => Promise<boolean>;
-  createFinished: (input: {
-    hostId: number;
-    userId: string;
-    startedAt: string;
-    endedAt: string;
-    duration: number | null;
-    recordingPath: string;
-    protocol: string;
-    format: string;
-  }) => Promise<{ id: number }>;
-}
-
-const DATA_DIR = process.env.DATA_DIR || "./db/data";
-
-/** Where the backend reads guacd's recordings from. */
-export function recordingsDir(env: NodeJS.ProcessEnv = process.env): string {
-  return (
-    env.GUACD_RECORDING_BACKEND_PATH ||
-    path.join(DATA_DIR, "session_recordings", "guacamole")
-  );
-}
-
-type ClientConnection = {
-  guacamoleConnectionId?: string;
-  connectionSettings?: {
-    connection?: { type?: string; join?: string; readOnly?: boolean };
-    recording?: GuacamoleRecordingMetadata;
-    termixMeta?: TermixGuacMeta;
-  };
-  close?: () => void;
-};
-
-const clientOptions = (
-  tokens: GuacamoleTokenService,
-  log: RemoteDesktopLogger,
-) => ({
-  crypt: {
-    cypher: "AES-256-CBC",
-    key: tokens.getEncryptionKey(),
-  },
-  log: {
-    level: "ERRORS",
-    stdLog: (...args: unknown[]) => log.info(args.join(" ")),
-    errorLog: (...args: unknown[]) => log.error(args.join(" ")),
-  },
-  allowedUnencryptedConnectionSettings: {
-    rdp: ["width", "height", "dpi"],
-    vnc: ["width", "height"],
-    telnet: ["width", "height"],
-  },
-  connectionDefaultSettings: {
-    rdp: {
-      security: "any",
-      "ignore-cert": true,
-      "enable-wallpaper": false,
-      "enable-font-smoothing": true,
-      "enable-desktop-composition": false,
-      "disable-audio": false,
-      "enable-drive": false,
-      "resize-method": "display-update",
-      width: 1280,
-      height: 720,
-      dpi: 96,
-      audio: ["audio/L16"],
-    },
-    vnc: {
-      "swap-red-blue": false,
-      cursor: "remote",
-      width: 1280,
-      height: 720,
-      // macOS Screen Sharing negotiates its VNC security type over several
-      // round trips (RFB type 30 -> 33/36/2/35) and can fail the first
-      // attempt; retrying lets guacd's VNC client re-establish instead of
-      // guacd giving up immediately (Support#1063).
-      autoretry: 2,
-    },
-    telnet: {
-      "terminal-type": "xterm-256color",
-    },
-  },
-});
-
-export interface GuacamoleServerDeps {
-  log: RemoteDesktopLogger;
-  tokens: GuacamoleTokenService;
-  sessions: RemoteSessions;
-  guacd: () => GuacdOptions;
-  recordings: () => RecordingsWriter | null;
-  /** A socket event has no request behind it, so the row is written as the session's user. */
-  asUser: <T>(userId: string, fn: () => Promise<T>) => Promise<T>;
-  /** Called when a primary session opens; returns what to release on close. */
-  onOpen?: (hostId: number) => () => void;
-}
-
-export interface GuacamoleServer {
-  handleUpgrade: (
-    request: IncomingMessage,
-    socket: Duplex,
-    head: Buffer,
-  ) => void;
-  /** Rebuilds the server so a changed guacd address takes effect. */
-  restart: () => void;
-  /** Closes a session and everyone watching it. */
-  endSession: (guacamoleConnectionId: string) => boolean;
-  close: () => void;
-}
-
-/**
- * guacamole-lite in noServer mode: core owns the listening socket and hands
- * upgrades from /plugin-ws/remote-desktop/display to its WebSocketServer.
- */
-export function createGuacamoleServer(
-  deps: GuacamoleServerDeps,
-): GuacamoleServer {
-  const { log, sessions } = deps;
-  let server: GuacamoleLite | null = null;
-
-  const persistRecording = async (connection: ClientConnection) => {
-    const recording = connection.connectionSettings?.recording;
-    if (!recording) return;
-
-    const dir = recordingsDir();
-    const resolvedPath = path.resolve(dir, recording.path);
-    if (!resolvedPath.startsWith(`${path.resolve(dir)}${path.sep}`)) return;
-
-    // guacd may flush or rename the recording just after the socket closes.
-    for (
-      let attempt = 0;
-      attempt < 10 && !fs.existsSync(resolvedPath);
-      attempt++
-    ) {
-      await new Promise((resolve) => setTimeout(resolve, 100));
-    }
-    if (!fs.existsSync(resolvedPath)) {
-      log.warn("Guacamole recording file was not found", {
-        operation: "guac_recording_missing",
-        hostId: recording.hostId,
-        path: resolvedPath,
-        guacdPath: recording.guacdPath ?? dir,
-        hint:
-          "guacd writes the recording to guacdPath, the backend reads it from path. " +
-          "When guacd runs in its own container these must be the same volume: set " +
-          "GUACD_RECORDING_PATH to guacd's mount point and GUACD_RECORDING_BACKEND_PATH to this one.",
-      });
-      return;
-    }
-
-    const writer = await deps.asUser(recording.userId, async () =>
-      deps.recordings(),
-    );
-    if (!writer) {
-      log.warn(
-        "Session Recording is off; the recording was kept on disk only",
-        {
-          operation: "guac_recording_no_writer",
-          hostId: recording.hostId,
-        },
-      );
-      return;
-    }
-
-    const endedAt = new Date();
-    const startedAt = new Date(recording.startedAt);
-    await deps.asUser(recording.userId, () =>
-      writer.createFinished({
-        hostId: recording.hostId,
-        userId: recording.userId,
-        startedAt: startedAt.toISOString(),
-        endedAt: endedAt.toISOString(),
-        duration: Math.max(
-          0,
-          Math.floor((endedAt.getTime() - startedAt.getTime()) / 1000),
-        ),
-        recordingPath: resolvedPath,
-        protocol: recording.protocol,
-        format: "guacamole",
-      }),
-    );
-  };
-
-  const build = (): GuacamoleLite => {
-    // guacamole-lite fills in port 8080 unless it sees a server key, and ws
-    // refuses a port next to noServer, so the port is cleared explicitly.
-    const guacamole = new GuacamoleLite(
-      { noServer: true, port: undefined },
-      deps.guacd(),
-      clientOptions(deps.tokens, log),
-    );
-    // It also installs its own SIGTERM and SIGINT handlers. Core decides
-    // when the process stops and closes this through deactivate instead.
-    const handlers = guacamole as unknown as {
-      sigTermHandler?: () => void;
-      sigIntHandler?: () => void;
-    };
-    if (handlers.sigTermHandler) {
-      process.off("SIGTERM", handlers.sigTermHandler);
-    }
-    if (handlers.sigIntHandler) {
-      process.off("SIGINT", handlers.sigIntHandler);
-    }
-
-    guacamole.on("open", (connection: ClientConnection) => {
-      const meta = connection.connectionSettings?.termixMeta;
-      const guacamoleConnectionId = connection.guacamoleConnectionId;
-      const isJoin = !!connection.connectionSettings?.connection?.join;
-      if (isJoin || !meta || !guacamoleConnectionId) return;
-      const release = deps.onOpen?.(meta.hostId);
-      sessions.opened(meta, guacamoleConnectionId, release ? [release] : []);
-    });
-
-    guacamole.on("close", (connection: ClientConnection) => {
-      const meta = connection.connectionSettings?.termixMeta;
-      const isJoin = !!connection.connectionSettings?.connection?.join;
-      if (!isJoin && meta) sessions.closed(meta.termixConnectId);
-      persistRecording(connection).catch((error) => {
-        log.error("Failed to persist Guacamole recording", {
-          operation: "guac_recording_persist_error",
-          error: errorMessage(error),
-        });
-      });
-    });
-
-    guacamole.on("error", (connection: ClientConnection, error: Error) => {
-      log.error("Guacamole connection error", {
-        operation: "guac_connection_error",
-        type: connection.connectionSettings?.connection?.type,
-        error: errorMessage(error),
-      });
-    });
-
-    return guacamole;
-  };
-
-  const closeServer = () => {
-    if (!server) return;
-    try {
-      server.close();
-    } catch (error) {
-      log.error("Error closing the Guacamole server", {
-        error: errorMessage(error),
-      });
-    }
-    server = null;
-  };
-
-  server = build();
-
-  return {
-    handleUpgrade(request, socket, head) {
-      // The route is public, so the token is the only credential: refuse
-      // anything forged, edited or expired before guacamole-lite reads it.
-      const token = new URL(
-        request.url ?? "/",
-        "http://localhost",
-      ).searchParams.get("token");
-      if (!token || !deps.tokens.verifyToken(token)) {
-        try {
-          socket.write(
-            "HTTP/1.1 401 Unauthorized\r\nConnection: close\r\n\r\n",
-          );
-        } catch {
-          // The peer may already be gone.
-        }
-        socket.destroy();
-        return;
-      }
-      const wss = (
-        server as unknown as {
-          webSocketServer?: {
-            handleUpgrade: (
-              request: IncomingMessage,
-              socket: Duplex,
-              head: Buffer,
-              done: (ws: unknown) => void,
-            ) => void;
-            emit: (event: string, ...args: unknown[]) => void;
-          };
-        } | null
-      )?.webSocketServer;
-      if (!wss) {
-        socket.destroy();
-        return;
-      }
-      wss.handleUpgrade(request, socket, head, (ws) => {
-        wss.emit("connection", ws, request);
-      });
-    },
-
-    restart() {
-      if (!server) return;
-      closeServer();
-      server = build();
-    },
-
-    endSession(guacamoleConnectionId) {
-      const active = (
-        server as unknown as {
-          activeConnections?: Map<unknown, ClientConnection>;
-        } | null
-      )?.activeConnections;
-      if (!active) return false;
-      let closed = false;
-      for (const connection of [...active.values()]) {
-        const join = connection.connectionSettings?.connection?.join;
-        if (
-          connection.guacamoleConnectionId === guacamoleConnectionId ||
-          join === guacamoleConnectionId
-        ) {
-          connection.close?.();
-          closed = true;
-        }
-      }
-      return closed;
-    },
-
-    close: closeServer,
-  };
-}
diff --git a/plugins/remote-desktop/src/backend/guacd-config.ts b/plugins/remote-desktop/src/backend/guacd-config.ts
deleted file mode 100644
index 9947ed4d7..000000000
--- a/plugins/remote-desktop/src/backend/guacd-config.ts
+++ /dev/null
@@ -1,86 +0,0 @@
-export type GuacdOptions = {
-  host: string;
-  port: number;
-};
-
-const DEFAULT_GUACD_OPTIONS: GuacdOptions = {
-  host: "localhost",
-  port: 4822,
-};
-
-function parsePort(value: string | undefined, fallback: number) {
-  const port = parseInt(value || "", 10);
-  return Number.isFinite(port) ? port : fallback;
-}
-
-export function parseGuacdUrl(
-  value: string,
-  fallback: GuacdOptions = DEFAULT_GUACD_OPTIONS,
-): GuacdOptions {
-  const raw = value.trim();
-  if (!raw) {
-    return fallback;
-  }
-
-  if (raw.includes("://")) {
-    try {
-      const url = new URL(raw);
-      return {
-        host: url.hostname || fallback.host,
-        port: parsePort(url.port, fallback.port),
-      };
-    } catch {
-      return fallback;
-    }
-  }
-
-  const bracketedIpv6 = raw.match(/^\[([^\]]+)\](?::(\d+))?$/);
-  if (bracketedIpv6) {
-    return {
-      host: bracketedIpv6[1],
-      port: parsePort(bracketedIpv6[2], fallback.port),
-    };
-  }
-
-  const [host, port] = raw.split(":");
-  return {
-    host: host || fallback.host,
-    port: parsePort(port, fallback.port),
-  };
-}
-
-export function getGuacdEnvOptions(): GuacdOptions | null {
-  if (process.env.GUACD_URL) {
-    return parseGuacdUrl(process.env.GUACD_URL);
-  }
-
-  if (!process.env.GUACD_HOST && !process.env.GUACD_PORT) {
-    return null;
-  }
-
-  return {
-    host: process.env.GUACD_HOST || DEFAULT_GUACD_OPTIONS.host,
-    port: parsePort(process.env.GUACD_PORT, DEFAULT_GUACD_OPTIONS.port),
-  };
-}
-
-export function resolveGuacdOptions(dbUrl?: string | null): GuacdOptions {
-  const envOptions = getGuacdEnvOptions();
-  if (envOptions) {
-    return envOptions;
-  }
-
-  if (dbUrl) {
-    return parseGuacdUrl(dbUrl);
-  }
-
-  return DEFAULT_GUACD_OPTIONS;
-}
-
-export function formatGuacdOptions(options: GuacdOptions): string {
-  return `${options.host}:${options.port}`;
-}
-
-export function getDefaultGuacdUrl(): string {
-  return formatGuacdOptions(resolveGuacdOptions());
-}
diff --git a/plugins/remote-desktop/src/backend/host-settings.ts b/plugins/remote-desktop/src/backend/host-settings.ts
deleted file mode 100644
index 2e4dcaefd..000000000
--- a/plugins/remote-desktop/src/backend/host-settings.ts
+++ /dev/null
@@ -1,236 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-
-export type RemoteProtocol = "rdp" | "vnc" | "telnet";
-
-export const PLUGIN_ID = "remote-desktop";
-
-export interface RemoteDesktopHostSettings {
-  enableRdp: boolean;
-  enableVnc: boolean;
-  enableTelnet: boolean;
-  rdpPort: number;
-  vncPort: number;
-  telnetPort: number;
-  rdpSecurity: string;
-  rdpIgnoreCert: boolean;
-  guacamoleConfig: Record<string, unknown>;
-  enableToolbar: boolean;
-}
-
-export const ENABLE_KEY: Record<
-  RemoteProtocol,
-  keyof RemoteDesktopHostSettings
-> = { rdp: "enableRdp", vnc: "enableVnc", telnet: "enableTelnet" };
-
-export const PORT_KEY: Record<RemoteProtocol, keyof RemoteDesktopHostSettings> =
-  { rdp: "rdpPort", vnc: "vncPort", telnet: "telnetPort" };
-
-export const DEFAULT_PORT: Record<RemoteProtocol, number> = {
-  rdp: 3389,
-  vnc: 5900,
-  telnet: 23,
-};
-
-export function isRemoteProtocol(value: unknown): value is RemoteProtocol {
-  return value === "rdp" || value === "vnc" || value === "telnet";
-}
-
-function asPort(value: unknown): number | undefined {
-  const port = typeof value === "string" ? Number(value) : value;
-  return typeof port === "number" &&
-    Number.isInteger(port) &&
-    port > 0 &&
-    port <= 65535
-    ? port
-    : undefined;
-}
-
-function asObject(value: unknown): Record<string, unknown> | undefined {
-  let parsed = value;
-  if (typeof value === "string") {
-    try {
-      parsed = JSON.parse(value);
-    } catch {
-      return undefined;
-    }
-  }
-  return parsed && typeof parsed === "object" && !Array.isArray(parsed)
-    ? (parsed as Record<string, unknown>)
-    : undefined;
-}
-
-function asBool(value: unknown): boolean | undefined {
-  if (typeof value === "boolean") return value;
-  if (value === 1 || value === "1" || value === "true") return true;
-  if (value === 0 || value === "0" || value === "false") return false;
-  return undefined;
-}
-
-export async function readHostSettings(
-  ctx: PluginContext,
-  hostId: number,
-): Promise<RemoteDesktopHostSettings> {
-  const values = await ctx.settings.getAll("host", hostId);
-  return {
-    enableRdp: values.enableRdp === true,
-    enableVnc: values.enableVnc === true,
-    enableTelnet: values.enableTelnet === true,
-    rdpPort: asPort(values.rdpPort) ?? DEFAULT_PORT.rdp,
-    vncPort: asPort(values.vncPort) ?? DEFAULT_PORT.vnc,
-    telnetPort: asPort(values.telnetPort) ?? DEFAULT_PORT.telnet,
-    rdpSecurity:
-      typeof values.rdpSecurity === "string" ? values.rdpSecurity : "",
-    rdpIgnoreCert: values.rdpIgnoreCert === true,
-    guacamoleConfig: asObject(values.guacamoleConfig) ?? {},
-    enableToolbar: values.enableToolbar !== false,
-  };
-}
-
-/**
- * Turns an imported host row into this plugin's host settings.
- *
- * A Termix export carries them under pluginSettings["remote-desktop"]. Older
- * exports, other tools and a plugin creating a host (proxmox) use the flat
- * fields the host row had before 2.9.0, including the connectionType-only
- * shape of hosts from before the per-protocol switches existed.
- */
-export function normalizeImportedHost(
-  raw: Record<string, unknown>,
-): Record<string, unknown> | null {
-  const nested =
-    asObject(asObject(raw.pluginSettings)?.[PLUGIN_ID]) ??
-    ({} as Record<string, unknown>);
-  const pick = (key: string, legacy?: string) =>
-    nested[key] !== undefined
-      ? nested[key]
-      : raw[key] !== undefined
-        ? raw[key]
-        : legacy !== undefined
-          ? raw[legacy]
-          : undefined;
-
-  const out: Record<string, unknown> = {};
-  for (const protocol of ["rdp", "vnc", "telnet"] as const) {
-    const key = ENABLE_KEY[protocol];
-    const flag = asBool(pick(key));
-    if (flag !== undefined) out[key] = flag;
-    const port = asPort(pick(PORT_KEY[protocol]));
-    if (port !== undefined) out[PORT_KEY[protocol]] = port;
-  }
-
-  const anyFlag = ["enableRdp", "enableVnc", "enableTelnet"].some(
-    (key) => out[key] === true,
-  );
-  if (!anyFlag && isRemoteProtocol(raw.connectionType)) {
-    out[ENABLE_KEY[raw.connectionType]] = true;
-    const port = asPort(raw.port);
-    if (port !== undefined && out[PORT_KEY[raw.connectionType]] === undefined) {
-      out[PORT_KEY[raw.connectionType]] = port;
-    }
-  }
-
-  const security = pick("rdpSecurity", "security");
-  if (typeof security === "string" && security) out.rdpSecurity = security;
-  const ignoreCert = asBool(pick("rdpIgnoreCert", "ignoreCert"));
-  if (ignoreCert !== undefined) out.rdpIgnoreCert = ignoreCert;
-  const config = asObject(pick("guacamoleConfig"));
-  if (config && Object.keys(config).length > 0) out.guacamoleConfig = config;
-  const toolbar = asBool(pick("enableToolbar", "enableTerminalToolbar"));
-  if (toolbar !== undefined) out.enableToolbar = toolbar;
-
-  return Object.keys(out).length > 0 ? out : null;
-}
-
-/**
- * Registered as "remote-desktop.hostPayloadLegacy": each protocol's login
- * in the flat 2.8 shape (rdpUser, rdpDomain, vncAuthType and so on), for
- * Termix-Mobile until it reads protocolAuth. Built from the payload's own
- * protocolAuth, which core already reduced for a shared recipient.
- */
-export function hostPayloadLegacy(
-  _values: Record<string, unknown>,
-  host: Record<string, unknown>,
-): Record<string, unknown> | null {
-  const logins = asObject(host.protocolAuth);
-  if (!logins) return null;
-  const out: Record<string, unknown> = {};
-  for (const protocol of ["rdp", "vnc", "telnet"] as const) {
-    const login = asObject(logins[protocol]);
-    if (!login) continue;
-    out[`${protocol}AuthType`] = login.authType;
-    if (login.credentialId !== undefined) {
-      out[`${protocol}CredentialId`] = login.credentialId;
-    }
-    if (typeof login.username === "string" && login.username) {
-      out[`${protocol}User`] = login.username;
-    }
-    if (typeof login.hasPassword === "boolean") {
-      const name = protocol.charAt(0).toUpperCase() + protocol.slice(1);
-      out[`has${name}Password`] = login.hasPassword;
-    }
-    const domain = asObject(login.fields)?.domain;
-    if (protocol === "rdp" && typeof domain === "string" && domain) {
-      out.rdpDomain = domain;
-      out.domain = domain;
-    }
-  }
-  return Object.keys(out).length > 0 ? out : null;
-}
-
-/** Display field key to the guacd parameter it sets. */
-const USER_DEFAULT_PARAMS: Record<string, string> = {
-  colorDepth: "color-depth",
-  resizeMethod: "resize-method",
-  forceLossless: "force-lossless",
-  enableWallpaper: "enable-wallpaper",
-  enableFontSmoothing: "enable-font-smoothing",
-  enableDesktopComposition: "enable-desktop-composition",
-  disableAudio: "disable-audio",
-  enablePrinting: "enable-printing",
-  enableDrive: "enable-drive",
-  disableCopy: "disable-copy",
-  disablePaste: "disable-paste",
-};
-
-/**
- * Display settings as guacd parameters. "inherit" leaves a parameter to the
- * host and guacd; on and off become booleans.
- */
-export function userDefaultParams(
-  values: Record<string, unknown>,
-): Record<string, unknown> {
-  const params: Record<string, unknown> = {};
-  for (const [key, param] of Object.entries(USER_DEFAULT_PARAMS)) {
-    const value = values[key];
-    if (value === undefined || value === null || value === "inherit") continue;
-    if (key === "colorDepth") {
-      const depth = Number(value);
-      if (Number.isInteger(depth) && depth > 0) params[param] = depth;
-    } else if (key === "resizeMethod") {
-      if (typeof value === "string" && value) params[param] = value;
-    } else if (value === "on" || value === "off") {
-      params[param] = value === "on";
-    }
-  }
-  return params;
-}
-
-/**
- * The display settings a session runs with, as guacd parameters: the host's
- * as this user sees them (their own defaults while the host follows its
- * defaults), or with no host, this user's defaults.
- */
-export async function readDisplayDefaults(
-  ctx: PluginContext,
-  userId: string,
-  hostId?: number,
-): Promise<Record<string, unknown>> {
-  const values: Record<string, unknown> = {};
-  for (const key of Object.keys(USER_DEFAULT_PARAMS)) {
-    values[key] =
-      hostId === undefined
-        ? await ctx.settings.getHostDefault(userId, key)
-        : await ctx.settings.getHostFor(hostId, userId, key);
-  }
-  return userDefaultParams(values);
-}
diff --git a/plugins/remote-desktop/src/backend/index.ts b/plugins/remote-desktop/src/backend/index.ts
deleted file mode 100644
index 7fc19ebc0..000000000
--- a/plugins/remote-desktop/src/backend/index.ts
+++ /dev/null
@@ -1,122 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { GuacamoleTokenService } from "./token-service.js";
-import { RemoteSessions } from "./sessions.js";
-import {
-  createGuacamoleServer,
-  type RecordingsWriter,
-} from "./guacamole-server.js";
-import { resolveGuacdOptions } from "./guacd-config.js";
-import { registerRoutes } from "./routes.js";
-import { createLiveSessions } from "./live-sessions.js";
-import {
-  hostPayloadLegacy,
-  normalizeImportedHost,
-  PORT_KEY,
-  readHostSettings,
-} from "./host-settings.js";
-import { createLogger } from "./log.js";
-
-export async function activate(ctx: PluginContext) {
-  const log = createLogger(ctx.log);
-  const tokens = new GuacamoleTokenService(log);
-  const sessions = new RemoteSessions();
-  ctx.disposables.add(() => sessions.clear());
-
-  // The admin setting, unless GUACD_URL / GUACD_HOST / GUACD_PORT override it.
-  let guacdUrl = (await ctx.settings.get<string>("guacdUrl")) ?? "";
-  const guacd = () => resolveGuacdOptions(guacdUrl || undefined);
-  const enabled = async () =>
-    (await ctx.settings.get<boolean>("enabled")) !== false;
-
-  // Optional: without session-recording nothing is recorded.
-  const recordings = (): RecordingsWriter | null => {
-    const service =
-      ctx.services.get<Partial<RecordingsWriter>>("recordings.writer");
-    return typeof service.createFinished === "function" &&
-      typeof service.enabledFor === "function"
-      ? (service as RecordingsWriter)
-      : null;
-  };
-
-  // guacamole-lite prints every new connection to stdout.
-  const consoleLog = console.log;
-  console.log = (...args: unknown[]) => {
-    if (
-      typeof args[0] === "string" &&
-      args[0].startsWith("New client connection")
-    )
-      return;
-    consoleLog(...args);
-  };
-  ctx.disposables.add(() => {
-    console.log = consoleLog;
-  });
-
-  const server = createGuacamoleServer({
-    log,
-    tokens,
-    sessions,
-    guacd,
-    recordings,
-    asUser: (userId, fn) => ctx.asUser(userId, fn),
-    onOpen: (hostId) => ctx.hosts.trackSession(hostId),
-  });
-  ctx.disposables.add(() => server.close());
-
-  ctx.settings.onChange("guacdUrl", (value) => {
-    guacdUrl = typeof value === "string" ? value : "";
-    server.restart();
-  });
-
-  registerRoutes(ctx.http.router(), {
-    ctx,
-    log,
-    tokens,
-    sessions,
-    guacd,
-    enabled,
-    recordings,
-  });
-
-  // guacamole-lite owns its own WebSocketServer, so it takes the raw upgrade.
-  // Public because a display authenticates with the encrypted, single-use
-  // token minted by an authenticated route, not with a session JWT.
-  ctx.ws.upgrade(
-    "/display",
-    (request, socket, head) =>
-      server.handleUpgrade(
-        request as Parameters<typeof server.handleUpgrade>[0],
-        socket as Parameters<typeof server.handleUpgrade>[1],
-        head as Buffer,
-      ),
-    { public: true },
-  );
-
-  for (const protocol of ["rdp", "vnc", "telnet"] as const) {
-    ctx.services.provide(
-      "sessions.live",
-      createLiveSessions(protocol, {
-        sessions,
-        tokens,
-        endSession: server.endSession,
-      }),
-      { name: protocol },
-    );
-  }
-
-  ctx.registry.provide(
-    "remote-desktop.hostImportNormalizer",
-    normalizeImportedHost,
-  );
-  ctx.registry.provide("remote-desktop.hostPayloadLegacy", hostPayloadLegacy);
-
-  // Core's status dot pings these hosts on the protocol's own port.
-  for (const protocol of ["rdp", "vnc", "telnet"] as const) {
-    ctx.hosts.status.registerPort(protocol, async (hostId) => {
-      const settings = await readHostSettings(ctx, hostId);
-      return settings[PORT_KEY[protocol]] as number;
-    });
-  }
-}
-
-export async function deactivate() {}
diff --git a/plugins/remote-desktop/src/backend/jump-tunnel-endpoint.ts b/plugins/remote-desktop/src/backend/jump-tunnel-endpoint.ts
deleted file mode 100644
index e05f1e29b..000000000
--- a/plugins/remote-desktop/src/backend/jump-tunnel-endpoint.ts
+++ /dev/null
@@ -1,15 +0,0 @@
-const LOOPBACK_HOSTS = new Set(["localhost", "127.0.0.1", "::1"]);
-
-export function resolveJumpTunnelEndpoint(
-  guacdHost: string,
-  tunnelHost = process.env.GUACD_TUNNEL_HOST,
-): { bindHost: string; advertisedHost: string } {
-  if (LOOPBACK_HOSTS.has(guacdHost.toLowerCase())) {
-    return { bindHost: "127.0.0.1", advertisedHost: "127.0.0.1" };
-  }
-
-  return {
-    bindHost: "0.0.0.0",
-    advertisedHost: tunnelHost?.trim() || "termix",
-  };
-}
diff --git a/plugins/remote-desktop/src/backend/jump-tunnel.ts b/plugins/remote-desktop/src/backend/jump-tunnel.ts
deleted file mode 100644
index 9e0377842..000000000
--- a/plugins/remote-desktop/src/backend/jump-tunnel.ts
+++ /dev/null
@@ -1,145 +0,0 @@
-import net from "net";
-import type { Client } from "ssh2";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { RemoteDesktopLogger } from "./log.js";
-
-/** The tunnels plugin's service, as ctx.services.get("tunnels.access") returns it. */
-interface TunnelsAccess {
-  forward(
-    sourceHostId: number,
-    target: { targetHost: string; targetPort: number; bindHost?: string },
-    options?: { name?: string; idleTimeoutMs?: number },
-  ): Promise<{
-    bindHost: string;
-    bindPort: number;
-    close: () => Promise<void>;
-  }>;
-}
-
-/** The tunnels plugin keeps these names for on-demand forwards. */
-const TUNNEL_NAME_PREFIX = "web:";
-/** A forward nothing is using closes itself after this long. */
-const FORWARD_IDLE_TIMEOUT_MS = 10 * 60 * 1000;
-
-export interface JumpTunnel {
-  port: number;
-  close: () => void;
-}
-
-export interface JumpTunnelRequest {
-  jumpHosts: Array<{ hostId: number }>;
-  targetHost: string;
-  targetPort: number;
-  bindHost: string;
-  /** Names the forward, so each session gets one of its own. */
-  connectId: string;
-}
-
-/**
- * A local port guacd can dial that reaches the target through the host's
- * jump hosts.
- *
- * One hop is exactly what the tunnels plugin's forward does, so that is used
- * when the plugin is running and the user may use it. A chain, or no tunnels
- * plugin, goes through ctx.ssh.jumpChain with a listener of our own. Either
- * way the caller closes it when the session ends.
- */
-export async function openJumpTunnel(
-  ctx: PluginContext,
-  log: RemoteDesktopLogger,
-  request: JumpTunnelRequest,
-): Promise<JumpTunnel> {
-  if (request.jumpHosts.length === 1) {
-    const viaTunnels = await forwardThroughTunnels(ctx, log, request);
-    if (viaTunnels) return viaTunnels;
-  }
-  return forwardThroughChain(ctx, request);
-}
-
-async function forwardThroughTunnels(
-  ctx: PluginContext,
-  log: RemoteDesktopLogger,
-  request: JumpTunnelRequest,
-): Promise<JumpTunnel | null> {
-  const tunnels = ctx.services.get<Partial<TunnelsAccess>>("tunnels.access");
-  if (typeof tunnels.forward !== "function") return null;
-  const hopId = request.jumpHosts[0].hostId;
-  try {
-    const handle = await tunnels.forward(
-      hopId,
-      {
-        targetHost: request.targetHost,
-        targetPort: request.targetPort,
-        bindHost: request.bindHost,
-      },
-      {
-        name: `${TUNNEL_NAME_PREFIX}${hopId}:rd-${request.connectId}`,
-        idleTimeoutMs: FORWARD_IDLE_TIMEOUT_MS,
-      },
-    );
-    return {
-      port: handle.bindPort,
-      close: () => void handle.close().catch(() => undefined),
-    };
-  } catch (error) {
-    // A user without the tunnels permission still reaches their host.
-    log.warn("Tunnels forward failed, using a jump chain instead", {
-      operation: "guac_tunnels_forward",
-      hopId,
-      error: error instanceof Error ? error.message : String(error),
-    });
-    return null;
-  }
-}
-
-async function forwardThroughChain(
-  ctx: PluginContext,
-  request: JumpTunnelRequest,
-): Promise<JumpTunnel> {
-  // The chain dials the first hop through that hop's own SOCKS5 settings;
-  // the target host's proxy config does not apply to it.
-  const { client, dispose } = await ctx.ssh.jumpChain<Client>(
-    request.jumpHosts,
-  );
-
-  const sockets = new Set<net.Socket>();
-  const server = net.createServer((socket) => {
-    sockets.add(socket);
-    socket.once("close", () => sockets.delete(socket));
-    client.forwardOut(
-      "127.0.0.1",
-      0,
-      request.targetHost,
-      request.targetPort,
-      (error, stream) => {
-        if (error) {
-          socket.destroy();
-          return;
-        }
-        socket.pipe(stream).pipe(socket);
-      },
-    );
-  });
-
-  let port: number;
-  try {
-    port = await new Promise<number>((resolve, reject) => {
-      server.once("error", reject);
-      server.listen(0, request.bindHost, () =>
-        resolve((server.address() as net.AddressInfo).port),
-      );
-    });
-  } catch (error) {
-    await dispose();
-    throw error;
-  }
-
-  return {
-    port,
-    close: () => {
-      for (const socket of sockets) socket.destroy();
-      server.close();
-      void dispose();
-    },
-  };
-}
diff --git a/plugins/remote-desktop/src/backend/live-sessions.ts b/plugins/remote-desktop/src/backend/live-sessions.ts
deleted file mode 100644
index 5f3189f58..000000000
--- a/plugins/remote-desktop/src/backend/live-sessions.ts
+++ /dev/null
@@ -1,65 +0,0 @@
-import type { GuacamoleTokenService } from "./token-service.js";
-import type { RemoteSessions } from "./sessions.js";
-import type { RemoteProtocol } from "./host-settings.js";
-
-/** sessions.live v1, as session-sharing reads it (plugins/session-sharing/src/backend/live.ts). */
-export interface LiveSessionInfo {
-  id: string;
-  userId: string;
-  hostId: number;
-  hostName: string;
-  isConnected: boolean;
-  createdAt: number;
-  tabInstanceId: string | null;
-}
-
-export interface RemoteLiveSessions {
-  getSession: (sessionId: string) => LiveSessionInfo | null;
-  ownerEndSession: (sessionId: string, reason: string) => void;
-  createViewerToken: (sessionId: string, readOnly: boolean) => string;
-}
-
-/**
- * One provider per protocol. A session id is guacd's own connection id,
- * which is what a viewer's join token names.
- */
-export function createLiveSessions(
-  protocol: RemoteProtocol,
-  deps: {
-    sessions: RemoteSessions;
-    tokens: GuacamoleTokenService;
-    endSession: (guacamoleConnectionId: string) => boolean;
-  },
-): RemoteLiveSessions {
-  const find = (sessionId: string) => {
-    const session = deps.sessions.byGuacamole(sessionId);
-    return session && session.protocol === protocol ? session : null;
-  };
-
-  return {
-    getSession(sessionId) {
-      const session = find(sessionId);
-      if (!session) return null;
-      return {
-        id: session.guacamoleConnectionId,
-        userId: session.ownerUserId,
-        hostId: session.hostId,
-        hostName: session.hostName,
-        isConnected: true,
-        createdAt: session.openedAt,
-        tabInstanceId: session.tabInstanceId,
-      };
-    },
-
-    ownerEndSession(sessionId) {
-      if (find(sessionId)) deps.endSession(sessionId);
-    },
-
-    createViewerToken(sessionId, readOnly) {
-      if (!find(sessionId)) {
-        throw new Error(`No live ${protocol} session ${sessionId}`);
-      }
-      return deps.tokens.createJoinToken(sessionId, readOnly);
-    },
-  };
-}
diff --git a/plugins/remote-desktop/src/backend/log.ts b/plugins/remote-desktop/src/backend/log.ts
deleted file mode 100644
index 010d0f660..000000000
--- a/plugins/remote-desktop/src/backend/log.ts
+++ /dev/null
@@ -1,30 +0,0 @@
-import type { PluginLogger } from "@termix/plugin-sdk/backend";
-
-export type Meta = Record<string, unknown>;
-
-export interface RemoteDesktopLogger {
-  info: (message: string, meta?: Meta) => void;
-  warn: (message: string, meta?: Meta) => void;
-  error: (message: string, meta?: Meta) => void;
-}
-
-function withMeta(message: string, meta?: Meta): string {
-  return meta && Object.keys(meta).length > 0
-    ? `${message} ${JSON.stringify(meta)}`
-    : message;
-}
-
-/** ctx.log with the structured context the old guac logger carried. */
-export function createLogger(log: PluginLogger): RemoteDesktopLogger {
-  return {
-    info: (message, meta) => log.info(withMeta(message, meta)),
-    warn: (message, meta) => log.warn(withMeta(message, meta)),
-    error: (message, meta) => log.error(withMeta(message, meta)),
-  };
-}
-
-export function errorMessage(error: unknown, fallback = "Unknown error") {
-  if (error instanceof Error && error.message) return error.message;
-  if (typeof error === "string" && error) return error;
-  return fallback;
-}
diff --git a/plugins/remote-desktop/src/backend/macos-vnc-proxy.ts b/plugins/remote-desktop/src/backend/macos-vnc-proxy.ts
deleted file mode 100644
index b3c420a82..000000000
--- a/plugins/remote-desktop/src/backend/macos-vnc-proxy.ts
+++ /dev/null
@@ -1,97 +0,0 @@
-import net from "net";
-
-const RFB_BANNER_LENGTH = 12;
-const VNC_AUTH_SECURITY_TYPE = 2;
-const MACOS_RFB_BANNER = Buffer.from("RFB 003.889\n", "ascii");
-const STANDARD_RFB_BANNER = Buffer.from("RFB 003.008\n", "ascii");
-
-export interface VncCompatibilityProxy {
-  port: number;
-  close: () => void;
-}
-
-export async function createMacosVncCompatibilityProxy({
-  targetHost,
-  targetPort,
-  bindHost,
-}: {
-  targetHost: string;
-  targetPort: number;
-  bindHost: string;
-}): Promise<VncCompatibilityProxy> {
-  const sockets = new Set<net.Socket>();
-  const server = net.createServer((client) => {
-    const upstream = net.createConnection(targetPort, targetHost);
-    sockets.add(client);
-    sockets.add(upstream);
-
-    const forget = (socket: net.Socket) => sockets.delete(socket);
-    client.once("close", () => forget(client));
-    upstream.once("close", () => forget(upstream));
-    client.once("error", () => upstream.destroy());
-    upstream.once("error", () => client.destroy());
-    client.pipe(upstream);
-
-    let pending = Buffer.alloc(0);
-    const forwardMacosSecurityTypes = (chunk: Buffer) => {
-      pending = Buffer.concat([pending, chunk]);
-      if (pending.length < 1) return;
-
-      const securityTypeCount = pending[0];
-      if (securityTypeCount === 0) {
-        upstream.off("data", forwardMacosSecurityTypes);
-        client.write(pending);
-        upstream.pipe(client);
-        return;
-      }
-      if (pending.length < 1 + securityTypeCount) return;
-
-      upstream.off("data", forwardMacosSecurityTypes);
-      const securityTypes = pending.subarray(1, 1 + securityTypeCount);
-      if (securityTypes.includes(VNC_AUTH_SECURITY_TYPE)) {
-        client.write(Buffer.from([1, VNC_AUTH_SECURITY_TYPE]));
-      } else {
-        client.write(pending.subarray(0, 1 + securityTypeCount));
-      }
-      client.write(pending.subarray(1 + securityTypeCount));
-      upstream.pipe(client);
-    };
-
-    const forwardServerBanner = (chunk: Buffer) => {
-      pending = Buffer.concat([pending, chunk]);
-      if (pending.length < RFB_BANNER_LENGTH) return;
-
-      upstream.off("data", forwardServerBanner);
-      const banner = pending.subarray(0, RFB_BANNER_LENGTH);
-      const remainder = pending.subarray(RFB_BANNER_LENGTH);
-      if (banner.equals(MACOS_RFB_BANNER)) {
-        client.write(STANDARD_RFB_BANNER);
-        pending = Buffer.alloc(0);
-        upstream.on("data", forwardMacosSecurityTypes);
-        if (remainder.length > 0) forwardMacosSecurityTypes(remainder);
-      } else {
-        client.write(banner);
-        client.write(remainder);
-        upstream.pipe(client);
-      }
-    };
-    upstream.on("data", forwardServerBanner);
-  });
-
-  const port = await new Promise<number>((resolve, reject) => {
-    server.once("error", reject);
-    server.listen(0, bindHost, () => {
-      server.off("error", reject);
-      resolve((server.address() as net.AddressInfo).port);
-    });
-  });
-  server.unref();
-
-  return {
-    port,
-    close: () => {
-      server.close();
-      for (const socket of sockets) socket.destroy();
-    },
-  };
-}
diff --git a/plugins/remote-desktop/src/backend/rdp-settings.ts b/plugins/remote-desktop/src/backend/rdp-settings.ts
deleted file mode 100644
index 63ada8e14..000000000
--- a/plugins/remote-desktop/src/backend/rdp-settings.ts
+++ /dev/null
@@ -1,36 +0,0 @@
-interface RdpSettingsInput {
-  port: number;
-  domain?: string;
-  security?: string;
-  ignoreCert: boolean;
-  guacConfig: Record<string, unknown>;
-  guacdOverrides: Record<string, unknown>;
-}
-
-export function buildRdpSettings({
-  port,
-  domain,
-  security,
-  ignoreCert,
-  guacConfig,
-  guacdOverrides,
-}: RdpSettingsInput): Record<string, unknown> {
-  return {
-    ...guacConfig,
-    port,
-    domain,
-    ...(security === undefined ? {} : { security }),
-    "ignore-cert": ignoreCert,
-    ...guacdOverrides,
-  };
-}
-
-export function resolveRdpDomain(
-  authType: string | null,
-  promptedDomain: unknown,
-  storedDomain: string,
-): string {
-  return authType === "none" && typeof promptedDomain === "string"
-    ? promptedDomain
-    : storedDomain;
-}
diff --git a/plugins/remote-desktop/src/backend/recording-settings.ts b/plugins/remote-desktop/src/backend/recording-settings.ts
deleted file mode 100644
index 323691691..000000000
--- a/plugins/remote-desktop/src/backend/recording-settings.ts
+++ /dev/null
@@ -1,22 +0,0 @@
-/**
- * Merges Termix's recording bookkeeping into a host's guacd settings.
- *
- * Location and filename are not the host's to choose: recordings are indexed by
- * them for playback, and the backend refuses to read anything outside its
- * recordings directory. What a recording *contains* is a host-level decision, so
- * those flags are only defaulted, never overwritten.
- */
-export function withRecordingSettings(
-  guacConfig: Record<string, unknown>,
-  recordingPath: string,
-  recordingName: string,
-): Record<string, unknown> {
-  return {
-    ...guacConfig,
-    "recording-path": recordingPath,
-    "recording-name": recordingName,
-    "create-recording-path": true,
-    "recording-exclude-output": guacConfig["recording-exclude-output"] ?? false,
-    "recording-include-keys": guacConfig["recording-include-keys"] ?? true,
-  };
-}
diff --git a/plugins/remote-desktop/src/backend/routes.ts b/plugins/remote-desktop/src/backend/routes.ts
deleted file mode 100644
index 71d1dcd73..000000000
--- a/plugins/remote-desktop/src/backend/routes.ts
+++ /dev/null
@@ -1,655 +0,0 @@
-import crypto from "crypto";
-import net from "net";
-import path from "path";
-import type { Request, Response, Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import {
-  isServerOwnedSetting,
-  type GuacamoleTokenService,
-} from "./token-service.js";
-import type { GuacdOptions } from "./guacd-config.js";
-import type { RemoteSessions } from "./sessions.js";
-import type { RecordingsWriter } from "./guacamole-server.js";
-import { recordingsDir } from "./guacamole-server.js";
-import { withRecordingSettings } from "./recording-settings.js";
-import { withDriveSettings } from "./drive-settings.js";
-import { resolveJumpTunnelEndpoint } from "./jump-tunnel-endpoint.js";
-import { buildRdpSettings, resolveRdpDomain } from "./rdp-settings.js";
-import { createMacosVncCompatibilityProxy } from "./macos-vnc-proxy.js";
-import { openJumpTunnel } from "./jump-tunnel.js";
-import {
-  DEFAULT_PORT,
-  ENABLE_KEY,
-  PORT_KEY,
-  isRemoteProtocol,
-  readHostSettings,
-  readDisplayDefaults,
-  type RemoteProtocol,
-} from "./host-settings.js";
-import { errorMessage, type RemoteDesktopLogger } from "./log.js";
-
-export interface RouteDeps {
-  ctx: PluginContext;
-  log: RemoteDesktopLogger;
-  tokens: GuacamoleTokenService;
-  sessions: RemoteSessions;
-  guacd: () => GuacdOptions;
-  enabled: () => Promise<boolean>;
-  recordings: () => RecordingsWriter | null;
-}
-
-function actor(ctx: PluginContext, res: Response): string | null {
-  const userId = ctx.currentActor();
-  if (!userId) res.status(401).json({ error: "Authentication required" });
-  return userId ?? null;
-}
-
-function probeGuacd({ host, port }: GuacdOptions): Promise<boolean> {
-  return new Promise((resolve) => {
-    const socket = new net.Socket();
-    socket.setTimeout(3000);
-    const done = (ok: boolean) => {
-      socket.destroy();
-      resolve(ok);
-    };
-    socket.once("connect", () => done(true));
-    socket.once("timeout", () => done(false));
-    socket.once("error", () => done(false));
-    socket.connect(port, host);
-  });
-}
-
-/** guacd reads these settings as given; the editor stores "auto" for its default. */
-function cleanGuacConfig(raw: Record<string, unknown>): {
-  config: Record<string, unknown>;
-  guacdOverrides: { guacdHost?: string; guacdPort?: number };
-} {
-  const config: Record<string, unknown> = {};
-  for (const [key, value] of Object.entries(raw)) {
-    if (value !== "auto") config[key] = value;
-  }
-  const guacdHost =
-    typeof config["guacd-hostname"] === "string" && config["guacd-hostname"]
-      ? (config["guacd-hostname"] as string)
-      : undefined;
-  const guacdPort = config["guacd-port"]
-    ? parseInt(String(config["guacd-port"]), 10) || undefined
-    : undefined;
-  delete config["guacd-hostname"];
-  delete config["guacd-port"];
-  if (config.dpi != null) {
-    const dpi = parseInt(String(config.dpi), 10);
-    config.dpi = Number.isFinite(dpi) && dpi > 0 ? dpi : undefined;
-  }
-  return {
-    config,
-    guacdOverrides: {
-      ...(guacdHost ? { guacdHost } : {}),
-      ...(guacdPort ? { guacdPort } : {}),
-    },
-  };
-}
-
-export function registerRoutes(router: Router, deps: RouteDeps): void {
-  const { ctx, log, tokens, sessions } = deps;
-
-  const refuseWhenOff = async (res: Response): Promise<boolean> => {
-    if (await deps.enabled()) return false;
-    res.status(403).json({ error: "Remote Desktop is turned off" });
-    return true;
-  };
-
-  /**
-   * @openapi
-   * /plugin-api/remote-desktop/connection/{connectId}:
-   *   get:
-   *     summary: Look up guacd's id for a session
-   *     description: Returns the guacamole connection id for a connect request, once guacd has opened it. Only the session's owner gets an answer.
-   *     tags:
-   *       - Remote Desktop
-   *     security:
-   *       - bearerAuth: []
-   *     parameters:
-   *       - in: path
-   *         name: connectId
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: The id, or null while guacd has not opened the session.
-   *       401:
-   *         description: Not signed in.
-   */
-  router.get("/connection/:connectId", (req: Request, res: Response) => {
-    const userId = actor(ctx, res);
-    if (!userId) return;
-    const session = sessions.byConnect(String(req.params.connectId));
-    res.json({
-      guacamoleConnectionId:
-        session?.ownerUserId === userId ? session.guacamoleConnectionId : null,
-    });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/remote-desktop/token:
-   *   post:
-   *     summary: Mint a connection token for an address
-   *     description: Creates an encrypted guacamole-lite token for connection details the caller supplies, used by Quick Connect. No saved host is involved.
-   *     tags:
-   *       - Remote Desktop
-   *     security:
-   *       - bearerAuth: []
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required:
-   *               - type
-   *               - hostname
-   *             properties:
-   *               type:
-   *                 type: string
-   *                 enum: [rdp, vnc, telnet]
-   *               hostname:
-   *                 type: string
-   *               port:
-   *                 type: integer
-   *               username:
-   *                 type: string
-   *               password:
-   *                 type: string
-   *               domain:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: The encrypted token.
-   *       400:
-   *         description: Missing or invalid fields.
-   *       403:
-   *         description: Remote Desktop is turned off.
-   *       500:
-   *         description: Server error.
-   */
-  router.post("/token", async (req: Request, res: Response) => {
-    try {
-      if (await refuseWhenOff(res)) return;
-      const { type, hostname, port, username, password, domain, ...raw } =
-        (req.body ?? {}) as Record<string, unknown>;
-      if (!type || !hostname) {
-        return res
-          .status(400)
-          .json({ error: "Missing required fields: type and hostname" });
-      }
-      if (!isRemoteProtocol(type)) {
-        return res.status(400).json({
-          error: "Invalid connection type. Must be rdp, vnc, or telnet",
-        });
-      }
-      const options: Record<string, unknown> = {};
-      for (const [key, value] of Object.entries(raw)) {
-        // A quick connect names a host, never where guacd is or what paths
-        // it writes to: those would let any user aim guacd anywhere.
-        if (isServerOwnedSetting(key)) continue;
-        if (value !== "auto") options[key] = value;
-      }
-      const host = String(hostname);
-      const user = username ? String(username) : "";
-      const pass = password ? String(password) : "";
-      const targetPort = Number(port) || DEFAULT_PORT[type];
-      const userId = ctx.currentActor();
-      if (type === "rdp" && userId) {
-        for (const [key, value] of Object.entries(
-          await readDisplayDefaults(ctx, userId),
-        )) {
-          if (isServerOwnedSetting(key)) continue;
-          if (options[key] === undefined) options[key] = value;
-        }
-      }
-
-      let token: string;
-      if (type === "rdp") {
-        token = tokens.createRdpToken(host, user, pass, {
-          port: targetPort,
-          domain: domain ? String(domain) : undefined,
-          ...options,
-        });
-      } else if (type === "vnc") {
-        token = tokens.createVncToken(host, user || undefined, pass, {
-          port: targetPort,
-          ...options,
-        });
-      } else {
-        token = tokens.createTelnetToken(host, user, pass, {
-          port: targetPort,
-          ...options,
-        });
-      }
-      res.json({ token });
-    } catch (error) {
-      log.error("Failed to generate a connection token", {
-        operation: "guac_token_error",
-        error: errorMessage(error),
-      });
-      res.status(500).json({ error: "Failed to generate connection token" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/remote-desktop/connect-host/{hostId}:
-   *   post:
-   *     summary: Mint a connection token for a saved host
-   *     description: Resolves the host's RDP, VNC or Telnet login for the caller (a shared recipient gets only what was shared with them), opens a jump tunnel when the host has jump hosts, and returns an encrypted guacamole-lite token.
-   *     tags:
-   *       - Remote Desktop
-   *     security:
-   *       - bearerAuth: []
-   *     parameters:
-   *       - in: path
-   *         name: hostId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               protocol:
-   *                 type: string
-   *                 enum: [rdp, vnc, telnet]
-   *               promptedUsername:
-   *                 type: string
-   *               promptedPassword:
-   *                 type: string
-   *               promptedDomain:
-   *                 type: string
-   *               tabInstanceId:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: The token and the id to look the session up by.
-   *       400:
-   *         description: Invalid host id, or the protocol is off for this host.
-   *       403:
-   *         description: Remote Desktop is turned off.
-   *       404:
-   *         description: Host not found or no access.
-   *       500:
-   *         description: The tunnel or the token could not be set up.
-   */
-  router.post("/connect-host/:hostId", async (req: Request, res: Response) => {
-    try {
-      const userId = actor(ctx, res);
-      if (!userId) return;
-      if (await refuseWhenOff(res)) return;
-
-      const hostId = Number.parseInt(String(req.params.hostId), 10);
-      if (!hostId) return res.status(400).json({ error: "Invalid host ID" });
-
-      const body = (req.body ?? {}) as Record<string, unknown>;
-      const settings = await readHostSettings(ctx, hostId);
-      const requested = body.protocol;
-      const protocol: RemoteProtocol | undefined = isRemoteProtocol(requested)
-        ? requested
-        : (["rdp", "vnc", "telnet"] as const).find(
-            (candidate) => settings[ENABLE_KEY[candidate]],
-          );
-      if (!protocol) {
-        return res
-          .status(400)
-          .json({ error: "Remote Desktop is not enabled for this host." });
-      }
-
-      const target = await ctx.credentials.resolveHostProtocol(
-        hostId,
-        protocol,
-      );
-      if (!target) {
-        return res.status(404).json({ error: "Host not found" });
-      }
-      if (!settings[ENABLE_KEY[protocol]]) {
-        return res.status(400).json({
-          error: `${protocol.toUpperCase()} is not enabled for this host.`,
-        });
-      }
-
-      // The display settings sit under whatever the host's guacd settings say.
-      const { config, guacdOverrides } = cleanGuacConfig({
-        ...(protocol === "rdp"
-          ? await readDisplayDefaults(ctx, userId, hostId)
-          : {}),
-        ...settings.guacamoleConfig,
-      });
-      let guacConfig = config;
-
-      const promptForLogin =
-        protocol === "rdp" && target.auth.authType === "none";
-      const username = promptForLogin
-        ? String(body.promptedUsername || "")
-        : target.auth.username;
-      const password = promptForLogin
-        ? String(body.promptedPassword || "")
-        : target.auth.password;
-      const domain = resolveRdpDomain(
-        target.auth.authType,
-        body.promptedDomain,
-        target.auth.fields.domain ?? "",
-      );
-
-      let hostname = target.host.ip;
-      let port =
-        (settings[PORT_KEY[protocol]] as number) || DEFAULT_PORT[protocol];
-      const termixConnectId = crypto.randomUUID();
-      const cleanups: Array<() => void> = [];
-      const jumpHosts = target.host.jumpHosts;
-      const needsVncProxy = protocol === "vnc" && !username;
-
-      const endpoint =
-        jumpHosts.length > 0 || needsVncProxy
-          ? resolveJumpTunnelEndpoint(
-              guacdOverrides.guacdHost || deps.guacd().host,
-            )
-          : null;
-
-      try {
-        if (jumpHosts.length > 0 && endpoint) {
-          const tunnel = await openJumpTunnel(ctx, log, {
-            jumpHosts,
-            targetHost: hostname,
-            targetPort: port,
-            bindHost: endpoint.bindHost,
-            connectId: termixConnectId,
-          });
-          cleanups.push(tunnel.close);
-          hostname = endpoint.advertisedHost;
-          port = tunnel.port;
-        }
-
-        if (needsVncProxy && endpoint) {
-          const proxy = await createMacosVncCompatibilityProxy({
-            targetHost: hostname,
-            targetPort: port,
-            bindHost: endpoint.bindHost,
-          });
-          cleanups.push(proxy.close);
-          hostname = endpoint.advertisedHost;
-          port = proxy.port;
-        }
-      } catch (error) {
-        for (const cleanup of cleanups) cleanup();
-        log.error("Failed to reach the host through its jump hosts", {
-          operation: "guac_ssh_tunnel_error",
-          hostId,
-          error: errorMessage(error),
-        });
-        return res
-          .status(500)
-          .json({ error: "Failed to establish SSH tunnel to remote host" });
-      }
-      sessions.park(termixConnectId, cleanups);
-
-      const recordings = deps.recordings();
-      const recordingEnabled =
-        protocol !== "vnc" &&
-        !!recordings &&
-        (await recordings.enabledFor(hostId));
-      const recordingName = `${crypto.randomUUID()}.guac`;
-      const guacdRecordingPath =
-        process.env.GUACD_RECORDING_PATH ||
-        process.env.GUACD_RECORDING_BACKEND_PATH ||
-        path.resolve(recordingsDir());
-      const recording = recordingEnabled
-        ? {
-            hostId,
-            userId,
-            protocol,
-            path: recordingName,
-            guacdPath: guacdRecordingPath,
-            startedAt: new Date().toISOString(),
-          }
-        : undefined;
-      if (recordingEnabled) {
-        guacConfig = withRecordingSettings(
-          guacConfig,
-          guacdRecordingPath,
-          recordingName,
-        );
-      }
-
-      const termixMeta = {
-        termixConnectId,
-        hostId,
-        hostName: target.host.name || target.host.ip,
-        ownerUserId: userId,
-        protocol,
-        tabInstanceId:
-          typeof body.tabInstanceId === "string" ? body.tabInstanceId : null,
-      };
-
-      let token: string;
-      if (protocol === "rdp") {
-        token = tokens.createRdpToken(
-          hostname,
-          username,
-          password,
-          buildRdpSettings({
-            port,
-            domain,
-            security: settings.rdpSecurity || undefined,
-            ignoreCert: settings.rdpIgnoreCert,
-            guacConfig: withDriveSettings(guacConfig, userId),
-            guacdOverrides,
-          }),
-          recording,
-          termixMeta,
-        );
-      } else if (protocol === "vnc") {
-        token = tokens.createVncToken(
-          hostname,
-          username || undefined,
-          password,
-          { port, ...guacConfig, ...guacdOverrides },
-          recording,
-          termixMeta,
-        );
-      } else {
-        token = tokens.createTelnetToken(
-          hostname,
-          username,
-          password,
-          { port, ...guacConfig, ...guacdOverrides },
-          recording,
-          termixMeta,
-        );
-      }
-
-      await ctx.audit.record({
-        action: `${protocol}_connect`,
-        resourceType: "host",
-        resourceId: String(hostId),
-        resourceName: `${hostname}:${port}`,
-        success: true,
-      });
-
-      res.json({ token, termixConnectId, guacamoleConnectionId: null });
-    } catch (error) {
-      log.error("Failed to generate a connection token for a host", {
-        operation: "guac_host_token_error",
-        error: errorMessage(error),
-      });
-      res.status(500).json({ error: "Failed to generate connection token" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/remote-desktop/status:
-   *   get:
-   *     summary: Remote Desktop status
-   *     description: Whether Remote Desktop is turned on, and whether guacd answers at the configured address.
-   *     tags:
-   *       - Remote Desktop
-   *     security:
-   *       - bearerAuth: []
-   *     parameters:
-   *       - in: query
-   *         name: probe
-   *         schema:
-   *           type: string
-   *         description: Set to 0 to skip dialing guacd.
-   *       - in: query
-   *         name: hostId
-   *         schema:
-   *           type: integer
-   *         description: Saved host whose guacd settings should be checked; requires protocol and access to that host.
-   *       - in: query
-   *         name: protocol
-   *         schema:
-   *           type: string
-   *           enum: [rdp, vnc, telnet]
-   *     responses:
-   *       200:
-   *         description: The status.
-   *       500:
-   *         description: The check failed.
-   */
-  router.get("/status", async (req: Request, res: Response) => {
-    try {
-      const enabled = await deps.enabled();
-      let guacd = deps.guacd();
-      if (req.query.hostId !== undefined) {
-        const userId = actor(ctx, res);
-        if (!userId) return;
-        const hostId = Number(req.query.hostId);
-        const protocol = req.query.protocol;
-        if (
-          !Number.isSafeInteger(hostId) ||
-          hostId <= 0 ||
-          !isRemoteProtocol(protocol)
-        ) {
-          return res.status(400).json({ error: "Invalid host ID or protocol" });
-        }
-        const target = await ctx.credentials.resolveHostProtocol(
-          hostId,
-          protocol,
-        );
-        if (!target) return res.status(404).json({ error: "Host not found" });
-        const settings = await readHostSettings(ctx, hostId);
-        if (!settings[ENABLE_KEY[protocol]]) {
-          return res
-            .status(400)
-            .json({ error: "Protocol is not enabled for this host" });
-        }
-        const { guacdOverrides } = cleanGuacConfig({
-          ...(protocol === "rdp"
-            ? await readDisplayDefaults(ctx, userId, hostId)
-            : {}),
-          ...settings.guacamoleConfig,
-        });
-        guacd = {
-          host: guacdOverrides.guacdHost || guacd.host,
-          port: guacdOverrides.guacdPort || guacd.port,
-        };
-      }
-      const probe = enabled && req.query.probe !== "0";
-      const reachable = probe ? await probeGuacd(guacd) : false;
-      res.json({
-        enabled,
-        guacd: {
-          host: guacd.host,
-          port: guacd.port,
-          status: reachable ? "connected" : "disconnected",
-        },
-        websocket: {
-          path: "/plugin-ws/remote-desktop/display",
-          status: "running",
-        },
-      });
-    } catch (error) {
-      log.error("Failed to check Remote Desktop status", {
-        operation: "guac_status_error",
-        error: errorMessage(error),
-      });
-      res.status(500).json({ error: "Failed to check status" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/remote-desktop/native-rdp:
-   *   get:
-   *     summary: Whether the native RDP client can be opened
-   *     description: True only in the Windows desktop app.
-   *     tags:
-   *       - Remote Desktop
-   *     security:
-   *       - bearerAuth: []
-   *     responses:
-   *       200:
-   *         description: Availability.
-   *   post:
-   *     summary: Open the native RDP client
-   *     description: Opens the operating system's own RDP client (mstsc) for an address. The password is never passed; the client asks for it. Windows desktop app only.
-   *     tags:
-   *       - Remote Desktop
-   *     security:
-   *       - bearerAuth: []
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required:
-   *               - host
-   *             properties:
-   *               host:
-   *                 type: string
-   *               port:
-   *                 type: integer
-   *               username:
-   *                 type: string
-   *               domain:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Whether the client opened.
-   *       400:
-   *         description: Missing host.
-   *       404:
-   *         description: Not running in the desktop app.
-   */
-  router.get("/native-rdp", (_req: Request, res: Response) => {
-    res.json({
-      available: ctx.desktop.available() && process.platform === "win32",
-    });
-  });
-
-  router.post("/native-rdp", async (req: Request, res: Response) => {
-    if (!ctx.desktop.available()) {
-      return res.status(404).json({ error: "Only in the desktop app" });
-    }
-    const body = (req.body ?? {}) as Record<string, unknown>;
-    if (typeof body.host !== "string" || !body.host) {
-      return res.status(400).json({ error: "Missing host" });
-    }
-    try {
-      const result = await ctx.desktop.launchExternalClient({
-        protocol: "rdp",
-        host: body.host,
-        port: Number(body.port) || DEFAULT_PORT.rdp,
-        username: typeof body.username === "string" ? body.username : undefined,
-        domain: typeof body.domain === "string" ? body.domain : undefined,
-      });
-      res.json(result);
-    } catch (error) {
-      res.json({ success: false, error: errorMessage(error) });
-    }
-  });
-}
diff --git a/plugins/remote-desktop/src/backend/sessions.ts b/plugins/remote-desktop/src/backend/sessions.ts
deleted file mode 100644
index 083cc1e55..000000000
--- a/plugins/remote-desktop/src/backend/sessions.ts
+++ /dev/null
@@ -1,116 +0,0 @@
-import type { TermixGuacMeta } from "./token-service.js";
-
-export interface RemoteSession {
-  guacamoleConnectionId: string;
-  termixConnectId: string;
-  hostId: number;
-  hostName: string;
-  ownerUserId: string;
-  protocol: TermixGuacMeta["protocol"];
-  tabInstanceId: string | null;
-  openedAt: number;
-}
-
-type Cleanup = () => void;
-
-/** How long a minted token's tunnel waits for guacd to connect through it. */
-export const PENDING_TIMEOUT_MS = 5 * 60 * 1000;
-
-/**
- * Live guacd sessions and what each one holds open.
- *
- * A connect request builds its jump tunnel or VNC proxy before guacd dials
- * in, so those resources are parked under the request's connect id and move
- * onto the session when it opens. They are released when the session
- * closes, when guacd never shows up, or when the plugin stops.
- */
-export class RemoteSessions {
-  private readonly pending = new Map<
-    string,
-    { cleanups: Cleanup[]; timer: ReturnType<typeof setTimeout> }
-  >();
-  private readonly byConnectId = new Map<string, RemoteSession>();
-  private readonly byGuacamoleId = new Map<string, RemoteSession>();
-  private readonly cleanupsByConnectId = new Map<string, Cleanup[]>();
-
-  constructor(private readonly pendingTimeoutMs = PENDING_TIMEOUT_MS) {}
-
-  /** Resources for a connection that guacd has not opened yet. */
-  park(termixConnectId: string, cleanups: Cleanup[]): void {
-    if (cleanups.length === 0) return;
-    const timer = setTimeout(() => {
-      this.pending.delete(termixConnectId);
-      run(cleanups);
-    }, this.pendingTimeoutMs);
-    timer.unref?.();
-    this.pending.set(termixConnectId, { cleanups, timer });
-  }
-
-  opened(
-    meta: TermixGuacMeta,
-    guacamoleConnectionId: string,
-    extra: Cleanup[] = [],
-  ): RemoteSession {
-    const session: RemoteSession = {
-      guacamoleConnectionId,
-      termixConnectId: meta.termixConnectId,
-      hostId: meta.hostId,
-      hostName: meta.hostName,
-      ownerUserId: meta.ownerUserId,
-      protocol: meta.protocol,
-      tabInstanceId: meta.tabInstanceId ?? null,
-      openedAt: Date.now(),
-    };
-    const parked = this.pending.get(meta.termixConnectId);
-    if (parked) {
-      clearTimeout(parked.timer);
-      this.pending.delete(meta.termixConnectId);
-    }
-    this.cleanupsByConnectId.set(meta.termixConnectId, [
-      ...(parked?.cleanups ?? []),
-      ...extra,
-    ]);
-    this.byConnectId.set(meta.termixConnectId, session);
-    this.byGuacamoleId.set(guacamoleConnectionId, session);
-    return session;
-  }
-
-  closed(termixConnectId: string): void {
-    const session = this.byConnectId.get(termixConnectId);
-    if (session) this.byGuacamoleId.delete(session.guacamoleConnectionId);
-    this.byConnectId.delete(termixConnectId);
-    run(this.cleanupsByConnectId.get(termixConnectId) ?? []);
-    this.cleanupsByConnectId.delete(termixConnectId);
-  }
-
-  byConnect(termixConnectId: string): RemoteSession | null {
-    return this.byConnectId.get(termixConnectId) ?? null;
-  }
-
-  byGuacamole(guacamoleConnectionId: string): RemoteSession | null {
-    return this.byGuacamoleId.get(guacamoleConnectionId) ?? null;
-  }
-
-  /** Releases everything, for deactivate. */
-  clear(): void {
-    for (const { cleanups, timer } of this.pending.values()) {
-      clearTimeout(timer);
-      run(cleanups);
-    }
-    this.pending.clear();
-    for (const cleanups of this.cleanupsByConnectId.values()) run(cleanups);
-    this.cleanupsByConnectId.clear();
-    this.byConnectId.clear();
-    this.byGuacamoleId.clear();
-  }
-}
-
-function run(cleanups: Cleanup[]): void {
-  for (const cleanup of cleanups) {
-    try {
-      cleanup();
-    } catch {
-      // One failed close must not keep the rest open.
-    }
-  }
-}
diff --git a/plugins/remote-desktop/src/backend/token-service.ts b/plugins/remote-desktop/src/backend/token-service.ts
deleted file mode 100644
index ea007cc5d..000000000
--- a/plugins/remote-desktop/src/backend/token-service.ts
+++ /dev/null
@@ -1,318 +0,0 @@
-import crypto from "crypto";
-
-interface TokenLogger {
-  warn: (message: string, meta?: Record<string, unknown>) => void;
-  error: (message: string, meta?: Record<string, unknown>) => void;
-}
-
-export interface GuacamoleConnectionSettings {
-  type?: "rdp" | "vnc" | "telnet";
-  join?: string;
-  readOnly?: boolean;
-  guacdHost?: string;
-  guacdPort?: number;
-  settings: {
-    hostname?: string;
-    port?: number;
-    username?: string;
-    password?: string;
-    domain?: string;
-    width?: number;
-    height?: number;
-    dpi?: number;
-    security?: string;
-    "ignore-cert"?: boolean;
-    "disable-auth"?: boolean;
-    "enable-wallpaper"?: boolean;
-    "enable-drive"?: boolean;
-    "drive-path"?: string;
-    "create-drive-path"?: boolean;
-    "swap-red-blue"?: boolean;
-    cursor?: string;
-    "terminal-type"?: string;
-    [key: string]: unknown;
-  };
-}
-
-export interface TermixGuacMeta {
-  termixConnectId: string;
-  hostId: number;
-  hostName: string;
-  ownerUserId: string;
-  protocol: "rdp" | "vnc" | "telnet";
-  tabInstanceId: string | null;
-}
-
-export interface GuacamoleToken {
-  connection: GuacamoleConnectionSettings;
-  recording?: GuacamoleRecordingMetadata;
-  termixMeta?: TermixGuacMeta;
-  /** When the token stops opening displays, in ms since the epoch. */
-  exp?: number;
-}
-
-export interface GuacamoleRecordingMetadata {
-  hostId: number;
-  userId: string;
-  protocol: "rdp" | "vnc" | "telnet";
-  path: string;
-  /** Directory guacd was told to write into; differs from the backend's view
-   * when guacd runs in its own container. */
-  guacdPath?: string;
-  startedAt: string;
-}
-
-const CIPHER = "aes-256-cbc";
-const KEY_LENGTH = 32;
-
-/**
- * How long a token opens a display for. Short, because a token for a saved
- * host carries its password and ends up in the display URL.
- */
-export const TOKEN_TTL_MS = 5 * 60 * 1000;
-
-/**
- * Settings the server decides, never the caller: where guacd is, and every
- * path guacd writes or reads on its own filesystem.
- */
-export function isServerOwnedSetting(key: string): boolean {
-  return (
-    key.startsWith("guacd") ||
-    key.endsWith("-path") ||
-    key.startsWith("create-") ||
-    key.startsWith("recording-") ||
-    key.startsWith("typescript-")
-  );
-}
-
-const silentLogger: TokenLogger = { warn: () => {}, error: () => {} };
-
-/**
- * Encrypts the connection tokens guacamole-lite decrypts. Built in activate;
- * the key is derived from the environment, so a restart keeps it.
- */
-export class GuacamoleTokenService {
-  private encryptionKey: Buffer;
-  private macKey: Buffer;
-
-  constructor(
-    private readonly log: TokenLogger = silentLogger,
-    private readonly now: () => number = Date.now,
-  ) {
-    this.encryptionKey = this.initializeKey();
-    this.macKey = crypto
-      .createHmac("sha256", this.encryptionKey)
-      .update("termix-guacamole-token-mac")
-      .digest();
-  }
-
-  private initializeKey(): Buffer {
-    const existingKey = process.env.GUACAMOLE_ENCRYPTION_KEY;
-    if (existingKey) {
-      if (existingKey.length === 64 && /^[0-9a-fA-F]+$/.test(existingKey)) {
-        return Buffer.from(existingKey, "hex");
-      }
-      if (existingKey.length === KEY_LENGTH) {
-        return Buffer.from(existingKey, "utf8");
-      }
-    }
-
-    // A token lives for seconds between issue and connect, so a fresh key
-    // per boot is enough and nothing is derived from core's own secrets.
-    return crypto.randomBytes(KEY_LENGTH);
-  }
-
-  getEncryptionKey(): Buffer {
-    return this.encryptionKey;
-  }
-
-  /**
-   * guacamole-lite only knows AES-CBC, which does not notice tampering, so
-   * the ciphertext also carries an HMAC that verifyToken checks before
-   * guacamole-lite ever sees the token.
-   */
-  encryptToken(tokenObject: GuacamoleToken): string {
-    const iv = crypto.randomBytes(16);
-    const cipher = crypto.createCipheriv(CIPHER, this.encryptionKey, iv);
-
-    let encrypted = cipher.update(
-      JSON.stringify({ ...tokenObject, exp: this.now() + TOKEN_TTL_MS }),
-      "utf8",
-      "base64",
-    );
-    encrypted += cipher.final("base64");
-
-    const data = {
-      iv: iv.toString("base64"),
-      value: encrypted,
-      mac: this.mac(iv.toString("base64"), encrypted),
-    };
-
-    return Buffer.from(JSON.stringify(data)).toString("base64");
-  }
-
-  private mac(iv: string, value: string): string {
-    return crypto
-      .createHmac("sha256", this.macKey)
-      .update(`${iv}.${value}`)
-      .digest("base64");
-  }
-
-  /**
-   * The token if it is one this server minted, untouched and not expired,
-   * else null. The gate in front of guacamole-lite.
-   */
-  verifyToken(token: string): GuacamoleToken | null {
-    let data: { iv?: unknown; value?: unknown; mac?: unknown };
-    try {
-      data = JSON.parse(Buffer.from(token, "base64").toString("utf8"));
-    } catch {
-      return null;
-    }
-    if (
-      typeof data?.iv !== "string" ||
-      typeof data.value !== "string" ||
-      typeof data.mac !== "string"
-    ) {
-      return null;
-    }
-    const expected = Buffer.from(this.mac(data.iv, data.value), "base64");
-    const given = Buffer.from(data.mac, "base64");
-    if (
-      expected.length !== given.length ||
-      !crypto.timingSafeEqual(expected, given)
-    ) {
-      return null;
-    }
-    const decoded = this.decryptToken(token);
-    if (!decoded || typeof decoded.exp !== "number") return null;
-    return decoded.exp > this.now() ? decoded : null;
-  }
-
-  decryptToken(token: string): GuacamoleToken | null {
-    try {
-      const data = JSON.parse(Buffer.from(token, "base64").toString("utf8"));
-      const iv = Buffer.from(data.iv, "base64");
-      const decipher = crypto.createDecipheriv(CIPHER, this.encryptionKey, iv);
-
-      let decrypted = decipher.update(data.value, "base64", "utf8");
-      decrypted += decipher.final("utf8");
-
-      return JSON.parse(decrypted) as GuacamoleToken;
-    } catch (error) {
-      this.log.error("Failed to decrypt guacamole token", {
-        operation: "guac_token_decrypt_error",
-        error: error instanceof Error ? error.message : String(error),
-      });
-      return null;
-    }
-  }
-
-  createRdpToken(
-    hostname: string,
-    username: string,
-    password: string,
-    options: Partial<GuacamoleConnectionSettings["settings"]> & {
-      guacdHost?: string;
-      guacdPort?: number;
-    } = {},
-    recording?: GuacamoleRecordingMetadata,
-    termixMeta?: TermixGuacMeta,
-  ): string {
-    const { guacdHost, guacdPort, ...settingsOptions } = options;
-    const token: GuacamoleToken = {
-      connection: {
-        type: "rdp",
-        ...(guacdHost ? { guacdHost } : {}),
-        ...(guacdPort ? { guacdPort } : {}),
-        settings: {
-          hostname,
-          ...(username ? { username } : {}),
-          ...(password ? { password } : {}),
-          port: 3389,
-          "ignore-cert": true,
-          ...(!username && !password ? { "disable-auth": true } : {}),
-          ...settingsOptions,
-        },
-      },
-      recording,
-      termixMeta,
-    };
-    return this.encryptToken(token);
-  }
-
-  createVncToken(
-    hostname: string,
-    username?: string,
-    password?: string,
-    options: Partial<GuacamoleConnectionSettings["settings"]> & {
-      guacdHost?: string;
-      guacdPort?: number;
-    } = {},
-    recording?: GuacamoleRecordingMetadata,
-    termixMeta?: TermixGuacMeta,
-  ): string {
-    const { guacdHost, guacdPort, ...settingsOptions } = options;
-    const token: GuacamoleToken = {
-      connection: {
-        type: "vnc",
-        ...(guacdHost ? { guacdHost } : {}),
-        ...(guacdPort ? { guacdPort } : {}),
-        settings: {
-          hostname,
-          ...(username ? { username } : {}),
-          password,
-          port: 5900,
-          ...settingsOptions,
-        },
-      },
-      recording,
-      termixMeta,
-    };
-    return this.encryptToken(token);
-  }
-
-  createTelnetToken(
-    hostname: string,
-    username?: string,
-    password?: string,
-    options: Partial<GuacamoleConnectionSettings["settings"]> & {
-      guacdHost?: string;
-      guacdPort?: number;
-    } = {},
-    recording?: GuacamoleRecordingMetadata,
-    termixMeta?: TermixGuacMeta,
-  ): string {
-    const { guacdHost, guacdPort, ...settingsOptions } = options;
-    const token: GuacamoleToken = {
-      connection: {
-        type: "telnet",
-        ...(guacdHost ? { guacdHost } : {}),
-        ...(guacdPort ? { guacdPort } : {}),
-        settings: {
-          hostname,
-          username,
-          password,
-          port: 23,
-          ...settingsOptions,
-        },
-      },
-      recording,
-      termixMeta,
-    };
-    return this.encryptToken(token);
-  }
-
-  // join tokens never carry recording params - only the primary connection's
-  // token should write recording-path/recording-name to guacd.
-  createJoinToken(guacamoleConnectionId: string, readOnly: boolean): string {
-    const token: GuacamoleToken = {
-      connection: {
-        join: guacamoleConnectionId,
-        readOnly,
-        settings: {},
-      },
-    };
-    return this.encryptToken(token);
-  }
-}
diff --git a/plugins/remote-desktop/src/frontend/GuacamoleApp.tsx b/plugins/remote-desktop/src/frontend/GuacamoleApp.tsx
deleted file mode 100644
index cee8e5fab..000000000
--- a/plugins/remote-desktop/src/frontend/GuacamoleApp.tsx
+++ /dev/null
@@ -1,653 +0,0 @@
-import { watchGuacamoleConnectionId } from "./guacamole-session-id";
-import React, {
-  useState,
-  useEffect,
-  useRef,
-  useCallback,
-  useImperativeHandle,
-} from "react";
-import type Guacamole from "guacamole-common-js";
-import { toast } from "sonner";
-import {
-  GuacamoleDisplay,
-  type GuacamoleDisplayHandle,
-  type GuacamoleTouchMode,
-} from "./GuacamoleDisplay.tsx";
-import { getGuacamoleTokenFromHost, getGuacdStatus } from "./guacamole-api";
-import { readConfiguredDimension } from "./guacamole-display-size.ts";
-import { getGuacamoleToken } from "./guacamole-api";
-import {
-  useHost,
-  useTranslation,
-  useConnectionRetry,
-  logActivity,
-} from "@termix/plugin-sdk/frontend";
-import {
-  Button,
-  ConnectionLogProvider,
-  ConnectionScreen,
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogHeader,
-  DialogTitle,
-  Input,
-  PasswordInput,
-  isElectron,
-  linkedServerUrl,
-  resolveConnectionOrigin,
-  useConnectionLog,
-  type ConnectionOrigin,
-} from "@termix/plugin-sdk/ui";
-import type { GuacamoleConfig } from "./guacamole-config";
-import {
-  errorMessage,
-  hostRemoteOptions,
-  type Protocol,
-  rdpDomain,
-  type RemoteHostLogin,
-} from "./host-remote";
-import { GuacamoleToolbar } from "./GuacamoleToolbar.tsx";
-import { GuacamoleFileBrowser } from "./GuacamoleFileBrowser.tsx";
-import { describeUploadError } from "./guacamole-filesystem.ts";
-import { canUploadToRdpDrive } from "./guacamole-file-drop.ts";
-import { needsRdpCredentialPrompt } from "./rdp-credential-prompt";
-
-interface GuacamoleAppProps {
-  hostId?: string;
-  tabId?: string;
-  protocol?: "rdp" | "vnc" | "telnet";
-  isVisible?: boolean;
-  /** A quick-connect host: never saved, so the token is minted from its fields. */
-  quickConnectHost?: GuacamoleQuickHost;
-}
-
-/**
- * What a session needs from its host. A saved host brings its options; a
- * quick-connect host has no row, so it also carries its address and login.
- */
-export interface GuacamoleHostConfig {
-  name?: string;
-  ip: string;
-  connectionType?: Protocol;
-  domain?: string;
-  guacamoleConfig?: GuacamoleConfig;
-  rdpAuthType?: string;
-  authOverrides?: RemoteHostLogin["authOverrides"];
-  syncId?: string | null;
-  connectionOrigin?: "local" | "remote" | null;
-  showToolbar?: boolean;
-  port?: number;
-  username?: string;
-  password?: string;
-}
-
-export type GuacamoleQuickHost = GuacamoleHostConfig;
-
-function savedHostConfig(
-  host: RemoteHostLogin,
-  protocol: Protocol | undefined,
-): GuacamoleHostConfig {
-  const options = hostRemoteOptions(host);
-  return {
-    name: host.name ?? undefined,
-    ip: host.ip ?? "",
-    connectionType:
-      protocol ??
-      (options.enableRdp ? "rdp" : options.enableVnc ? "vnc" : "telnet"),
-    domain: rdpDomain(host),
-    guacamoleConfig: options.guacamoleConfig,
-    rdpAuthType: host.protocolAuth?.rdp?.authType,
-    authOverrides: host.authOverrides,
-    syncId: host.syncId,
-    connectionOrigin: host.connectionOrigin,
-    showToolbar: options.enableToolbar,
-  };
-}
-
-export interface GuacamoleAppHandle {
-  disconnect: () => void;
-  isConnected: () => boolean;
-  /** The tab bar's refresh. The shell calls `refresh` on every tab switch. */
-  reconnect: () => void;
-}
-
-const GuacamoleApp = React.forwardRef<GuacamoleAppHandle, GuacamoleAppProps>(
-  function GuacamoleApp(
-    { hostId, tabId, protocol, isVisible = true, quickConnectHost },
-    ref,
-  ) {
-    const { t } = useTranslation();
-    const savedHost = useHost(quickConnectHost ? undefined : hostId);
-    const hostConfig: GuacamoleHostConfig | null = quickConnectHost
-      ? quickConnectHost
-      : savedHost
-        ? savedHostConfig(savedHost as RemoteHostLogin, protocol)
-        : null;
-    // The host list loads with the shell; a tab restored before it arrives
-    // waits for it instead of reporting the host missing.
-    const [waited, setWaited] = useState(false);
-    useEffect(() => {
-      const timer = setTimeout(() => setWaited(true), 3000);
-      return () => clearTimeout(timer);
-    }, []);
-    const loading = !hostConfig && !!hostId && !waited;
-
-    if (loading) {
-      return (
-        <div className="relative w-full h-full">
-          <ConnectionScreen status="connecting" message={t("common.loading")} />
-        </div>
-      );
-    }
-
-    if (!hostConfig || !hostId) {
-      return (
-        <div className="relative w-full h-full">
-          <ConnectionScreen
-            status="disconnected"
-            message={t("remoteDesktop.hostNotFound")}
-          />
-        </div>
-      );
-    }
-
-    return (
-      <ConnectionLogProvider>
-        <GuacamoleAppInner
-          hostId={quickConnectHost ? 0 : parseInt(hostId, 10)}
-          hostConfig={hostConfig}
-          hostName={hostConfig.name || hostConfig.ip || String(hostId ?? "")}
-          tabId={tabId}
-          protocol={protocol}
-          isVisible={isVisible}
-          ref={ref}
-        />
-      </ConnectionLogProvider>
-    );
-  },
-);
-
-interface GuacamoleAppInnerProps {
-  hostId: number;
-  hostConfig: GuacamoleHostConfig;
-  hostName: string;
-  tabId?: string;
-  protocol?: "rdp" | "vnc" | "telnet";
-  isVisible: boolean;
-}
-
-const GuacamoleAppInner = React.forwardRef<
-  GuacamoleAppHandle,
-  GuacamoleAppInnerProps
->(function GuacamoleAppInner(
-  { hostId, hostConfig, hostName, tabId, protocol, isVisible },
-  ref,
-) {
-  const { t } = useTranslation();
-  const { addLog, clearLogs } = useConnectionLog();
-  const [token, setToken] = useState<string | null>(null);
-  const [guacamoleConnectionId, setGuacamoleConnectionId] = useState<
-    string | null
-  >(null);
-  const [sessionLookup, setSessionLookup] = useState<{
-    id: string;
-    origin: ConnectionOrigin;
-  } | null>(null);
-  const [error, setError] = useState<string | null>(null);
-  const [connectionError, setConnectionError] = useState<string | null>(null);
-  const [isDisplayReady, setIsDisplayReady] = useState(false);
-  const [touchMode, setTouchMode] = useState<GuacamoleTouchMode | null>(() =>
-    typeof window !== "undefined" &&
-    (navigator.maxTouchPoints > 0 || "ontouchstart" in window)
-      ? "touchscreen"
-      : null,
-  );
-  useEffect(() => {
-    if (!isDisplayReady || !sessionLookup) return;
-    return watchGuacamoleConnectionId(
-      sessionLookup.id,
-      sessionLookup.origin,
-      setGuacamoleConnectionId,
-    );
-  }, [isDisplayReady, sessionLookup]);
-  const displayRef = useRef<GuacamoleDisplayHandle>(null);
-  const [displayZoom, setDisplayZoom] = useState(1);
-  const [filesystem, setFilesystem] = useState<Guacamole.Object | null>(null);
-  const [fileBrowserOpen, setFileBrowserOpen] = useState(false);
-  const [toolbarHidden, setToolbarHidden] = useState(false);
-  const [pendingUploads, setPendingUploads] = useState<File[]>([]);
-
-  const guacConfig = hostConfig.guacamoleConfig ?? {};
-  const allowUpload = guacConfig.disableUpload !== true;
-  const allowDownload = guacConfig.disableDownload !== true;
-
-  // Prefer the browsable filesystem's current directory. guacd may expose the
-  // RDP drive only through the connection-level file stream, in which case the
-  // standard direct upload still lands in the redirected drive.
-  const handleDropFiles = useCallback(
-    (files: File[]) => {
-      if (filesystem) {
-        setPendingUploads(files);
-        setFileBrowserOpen(true);
-        return;
-      }
-
-      void (async () => {
-        for (const file of files) {
-          try {
-            const display = displayRef.current;
-            if (!display) throw new Error("RDP session is not ready");
-            await display.uploadFile(file);
-            toast.success(
-              t("remoteDesktop.files.uploaded", { name: file.name }),
-            );
-          } catch (error) {
-            toast.error(
-              describeUploadError(error, (key) =>
-                t(`remoteDesktop.files.${key}`, { name: file.name }),
-              ),
-            );
-          }
-        }
-      })();
-    },
-    [filesystem, t],
-  );
-
-  const handleDropUnavailable = useCallback(() => {
-    toast.error(
-      t(
-        allowUpload
-          ? "remoteDesktop.files.driveUnavailable"
-          : "remoteDesktop.files.uploadDisabled",
-      ),
-    );
-  }, [allowUpload, t]);
-
-  const resolvedProtocolForConnect = (protocol ??
-    hostConfig.connectionType ??
-    "rdp") as "rdp" | "vnc" | "telnet";
-  const needsCredentialPrompt = needsRdpCredentialPrompt({
-    protocol: resolvedProtocolForConnect,
-    rdpAuthType: hostConfig.rdpAuthType,
-    authOverrides: hostConfig.authOverrides,
-  });
-
-  const [promptedCredentials, setPromptedCredentials] = useState<{
-    username: string;
-    password: string;
-    domain: string;
-  } | null>(null);
-  const [promptOpen, setPromptOpen] = useState(needsCredentialPrompt);
-  const [promptUsername, setPromptUsername] = useState("");
-  const [promptPassword, setPromptPassword] = useState("");
-  const [promptDomain, setPromptDomain] = useState(hostConfig.domain ?? "");
-
-  // Assigned below, once handleReconnect exists; the shell's tab refresh calls it.
-  const reconnectRef = useRef<() => void>(() => {});
-
-  useImperativeHandle(ref, () => ({
-    disconnect: () => displayRef.current?.disconnect(),
-    isConnected: () => displayRef.current?.isConnected() === true,
-    reconnect: () => reconnectRef.current(),
-  }));
-
-  const fetchToken = useCallback(async (): Promise<void> => {
-    setToken(null);
-    setIsDisplayReady(false);
-    setSessionLookup(null);
-    setGuacamoleConnectionId(null);
-    setError(null);
-
-    // Outside Electron there is only one backend, so the origin is moot and
-    // the API layer ignores it; inside, it decides which backend mints the
-    // token and therefore has to match the one the session will run on.
-    let resolvedOrigin: ConnectionOrigin = "local";
-
-    if (isElectron()) {
-      resolvedOrigin = await resolveConnectionOrigin(
-        { connectionOrigin: hostConfig.connectionOrigin },
-        { defaultRemote: true },
-      );
-      if (resolvedOrigin === "remote") {
-        if (!(await linkedServerUrl())) {
-          throw new Error(t("errors.remoteServerRequired"));
-        }
-      }
-    }
-
-    addLog({
-      type: "info",
-      stage: "guac_guacd",
-      message: t("remoteDesktop.checkingGuacd"),
-    });
-    const status = await getGuacdStatus(resolvedOrigin, {
-      hostId,
-      protocol: resolvedProtocolForConnect,
-      syncId: hostConfig.syncId,
-    });
-    if (status.enabled === false) {
-      throw new Error(t("remoteDesktop.disabled"));
-    }
-    if (status.guacd.status !== "connected") {
-      throw new Error(t("remoteDesktop.guacdUnavailable"));
-    }
-
-    addLog({
-      type: "info",
-      stage: "guac_token",
-      message: t("remoteDesktop.requestingToken", {
-        type: resolvedProtocolForConnect.toUpperCase(),
-      }),
-    });
-    // hostId 0 is a quick-connect host: nothing to look up, mint the token
-    // straight from what the user typed. It cannot be shared or logged as
-    // host activity because there is no host row.
-    const result =
-      hostId === 0
-        ? await getGuacamoleToken(
-            {
-              protocol: resolvedProtocolForConnect,
-              hostname: hostConfig.ip,
-              port: hostConfig.port,
-              username: hostConfig.username,
-              password: hostConfig.password,
-              domain: hostConfig.domain,
-              ignoreCert: true,
-              guacamoleConfig: hostConfig.guacamoleConfig,
-            },
-            resolvedOrigin,
-          )
-        : await getGuacamoleTokenFromHost(
-            hostId,
-            resolvedOrigin,
-            protocol,
-            promptedCredentials ?? undefined,
-            hostConfig.syncId,
-            tabId,
-          );
-    if (result) {
-      setSessionLookup(
-        result.termixConnectId
-          ? { id: result.termixConnectId, origin: resolvedOrigin }
-          : null,
-      );
-      setToken(result.token);
-      setGuacamoleConnectionId(result.guacamoleConnectionId ?? null);
-      if (hostId !== 0) {
-        logActivity(resolvedProtocolForConnect, hostId, hostName).catch(
-          () => {},
-        );
-      }
-    }
-  }, [
-    hostId,
-    hostName,
-    protocol,
-    promptedCredentials,
-    resolvedProtocolForConnect,
-    hostConfig,
-    tabId,
-    addLog,
-    t,
-  ]);
-
-  const tokenRetry = useConnectionRetry({
-    connect: async () => {
-      try {
-        await fetchToken();
-        tokenRetryRef.current.markConnected();
-      } catch (err: unknown) {
-        const message = errorMessage(err, t("remoteDesktop.failedToConnect"));
-        setError(message || t("remoteDesktop.failedToConnect"));
-        addLog({ type: "error", stage: "error", message });
-        tokenRetryRef.current.markFailed();
-      }
-    },
-    enabled: !needsCredentialPrompt || !!promptedCredentials,
-    autoStart: false,
-  });
-  const tokenRetryRef = useRef(tokenRetry);
-  tokenRetryRef.current = tokenRetry;
-
-  useEffect(() => {
-    if (needsCredentialPrompt && !promptedCredentials) {
-      setPromptOpen(true);
-      return;
-    }
-    clearLogs();
-    tokenRetryRef.current.reset();
-    tokenRetryRef.current.retryNow();
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [hostId, protocol, needsCredentialPrompt, promptedCredentials]);
-
-  const handleReconnect = useCallback(() => {
-    setConnectionError(null);
-    setError(null);
-    setToken(null);
-    setIsDisplayReady(false);
-    if (needsCredentialPrompt) {
-      setPromptedCredentials(null);
-      setPromptUsername("");
-      setPromptPassword("");
-      setPromptDomain(hostConfig.domain ?? "");
-      setPromptOpen(true);
-      return;
-    }
-    clearLogs();
-    tokenRetryRef.current.reset();
-    tokenRetryRef.current.retryNow();
-  }, [needsCredentialPrompt, hostConfig.domain, clearLogs]);
-
-  reconnectRef.current = handleReconnect;
-
-  if (promptOpen) {
-    return (
-      <Dialog
-        open={promptOpen}
-        onOpenChange={(open) => {
-          if (!open) setPromptOpen(false);
-        }}
-      >
-        <DialogContent className="sm:max-w-sm">
-          <DialogHeader>
-            <DialogTitle className="text-lg font-bold">
-              {t("remoteDesktop.credentialPromptTitle")}
-            </DialogTitle>
-            <DialogDescription className="text-xs text-muted-foreground">
-              {t("remoteDesktop.credentialPromptDescription")}
-            </DialogDescription>
-          </DialogHeader>
-          <form
-            className="flex flex-col gap-4 mt-1"
-            onSubmit={(e) => {
-              e.preventDefault();
-              setPromptedCredentials({
-                username: promptUsername,
-                password: promptPassword,
-                domain: promptDomain,
-              });
-              setPromptOpen(false);
-            }}
-          >
-            <div className="flex flex-col gap-1.5">
-              <label className="text-xs font-semibold">
-                {t("hosts.guac.username")}
-              </label>
-              <Input
-                autoFocus
-                placeholder="Administrator"
-                value={promptUsername}
-                onChange={(e) => setPromptUsername(e.target.value)}
-              />
-            </div>
-            <div className="flex flex-col gap-1.5">
-              <label className="text-xs font-semibold">
-                {t("hosts.guac.domain")}
-              </label>
-              <Input
-                placeholder="WORKGROUP"
-                value={promptDomain}
-                onChange={(e) => setPromptDomain(e.target.value)}
-              />
-            </div>
-            <div className="flex flex-col gap-1.5">
-              <label className="text-xs font-semibold">
-                {t("hosts.guac.password")}
-              </label>
-              <PasswordInput
-                className="h-8 text-xs pr-8"
-                placeholder="••••••••"
-                value={promptPassword}
-                onChange={(e) => setPromptPassword(e.target.value)}
-              />
-            </div>
-            <div className="flex items-center justify-end gap-2 mt-2">
-              <Button type="submit" variant="outline">
-                {t("remoteDesktop.connect")}
-              </Button>
-            </div>
-          </form>
-        </DialogContent>
-      </Dialog>
-    );
-  }
-
-  if (error || !token) {
-    return (
-      <div className="relative w-full h-full">
-        <ConnectionScreen
-          status={error ? tokenRetry.status : "connecting"}
-          message={t("remoteDesktop.connecting", {
-            type: (
-              protocol ||
-              hostConfig.connectionType ||
-              "remote"
-            ).toUpperCase(),
-          })}
-          attempt={tokenRetry.attempt}
-          maxAttempts={tokenRetry.maxAttempts}
-          nextRetryInMs={tokenRetry.nextRetryInMs}
-          onManualRetry={handleReconnect}
-          retryLabel={t("remoteDesktop.retry")}
-        />
-      </div>
-    );
-  }
-
-  const resolvedProtocol = resolvedProtocolForConnect;
-  const configuredDpi = readConfiguredDimension(guacConfig.dpi);
-  const configuredWidth = readConfiguredDimension(guacConfig.width);
-  const configuredHeight = readConfiguredDimension(guacConfig.height);
-
-  return (
-    <div className="relative w-full h-full">
-      {(!isDisplayReady || connectionError) && (
-        <ConnectionScreen
-          status={connectionError ? "disconnected" : "connecting"}
-          message={t("remoteDesktop.connecting", {
-            type: resolvedProtocol.toUpperCase(),
-          })}
-          onManualRetry={handleReconnect}
-          retryLabel={t("remoteDesktop.reconnect")}
-          className="z-50"
-        />
-      )}
-      <GuacamoleDisplay
-        key={`${token}-${touchMode}`}
-        ref={displayRef}
-        connectionConfig={{
-          token,
-          protocol: resolvedProtocol,
-          type: resolvedProtocol,
-          connectionOrigin: hostConfig.connectionOrigin,
-          width: configuredWidth,
-          height: configuredHeight,
-          dpi: configuredDpi,
-        }}
-        isVisible={isVisible}
-        touchMode={touchMode}
-        allowUpload={canUploadToRdpDrive(
-          allowUpload,
-          guacConfig.enableDrive === true,
-          filesystem !== null,
-        )}
-        onConnect={() => setIsDisplayReady(true)}
-        onError={(err) => {
-          setConnectionError(err);
-          addLog({ type: "error", stage: "error", message: err });
-        }}
-        onStageChange={(stage) => {
-          const type = resolvedProtocol.toUpperCase();
-          switch (stage) {
-            case "guac_connecting":
-              addLog({
-                type: "info",
-                stage,
-                message: t("remoteDesktop.openingSession", { type }),
-              });
-              break;
-            case "guac_handshake":
-              addLog({
-                type: "info",
-                stage,
-                message: t("remoteDesktop.negotiating", { type }),
-              });
-              break;
-            case "guac_ready":
-              addLog({
-                type: "success",
-                stage,
-                message: t("remoteDesktop.sessionReady", { type }),
-              });
-              break;
-            default:
-              break;
-          }
-        }}
-        onZoomChange={setDisplayZoom}
-        onFilesystem={setFilesystem}
-        onDropFiles={handleDropFiles}
-        onDropUnavailable={handleDropUnavailable}
-      />
-      {filesystem && fileBrowserOpen && (
-        <GuacamoleFileBrowser
-          filesystem={filesystem}
-          allowUpload={allowUpload}
-          allowDownload={allowDownload}
-          pendingUploads={pendingUploads}
-          onPendingUploadsHandled={() => setPendingUploads([])}
-          onClose={() => setFileBrowserOpen(false)}
-        />
-      )}
-      {hostConfig.showToolbar !== false && !toolbarHidden && (
-        <GuacamoleToolbar
-          displayRef={displayRef}
-          protocol={resolvedProtocol}
-          touchMode={touchMode}
-          hasFilesystem={filesystem !== null}
-          fileBrowserOpen={fileBrowserOpen}
-          onToggleFileBrowser={() => setFileBrowserOpen((open) => !open)}
-          onTouchModeChange={setTouchMode}
-          zoom={displayZoom}
-          onHide={() => setToolbarHidden(true)}
-          slotContext={
-            typeof hostId === "number"
-              ? {
-                  hostId,
-                  sessionId: guacamoleConnectionId,
-                  protocol: resolvedProtocol,
-                  tabInstanceId: tabId,
-                  origin:
-                    sessionLookup?.origin === "remote" ? "remote" : "local",
-                }
-              : undefined
-          }
-        />
-      )}
-    </div>
-  );
-});
-
-export default GuacamoleApp;
diff --git a/plugins/remote-desktop/src/frontend/GuacamoleDisplay.tsx b/plugins/remote-desktop/src/frontend/GuacamoleDisplay.tsx
deleted file mode 100644
index 65f9b0635..000000000
--- a/plugins/remote-desktop/src/frontend/GuacamoleDisplay.tsx
+++ /dev/null
@@ -1,924 +0,0 @@
-import type React from "react";
-import {
-  useEffect,
-  useRef,
-  useState,
-  useImperativeHandle,
-  forwardRef,
-  useCallback,
-} from "react";
-import Guacamole from "guacamole-common-js";
-import { Upload } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { getGuacamoleToken } from "./guacamole-api";
-import { buildGuacamoleWebSocketBaseUrl } from "./guacamole-websocket-url.ts";
-import {
-  buildOriginWsUrl,
-  getBasePath,
-  isElectron,
-  resolveConnectionOrigin,
-  type ConnectionOrigin,
-  type ConnectionStage,
-} from "@termix/plugin-sdk/ui";
-import { errorMessage } from "./host-remote";
-import { guacStateToStage } from "./guacamole-state.ts";
-import { isPasteShortcut, pasteTextToRemote } from "./guacamole-clipboard.ts";
-import { getGuacamoleDisplaySize } from "./guacamole-display-size.ts";
-import { bindPointerInput } from "./guacamole-pointer.ts";
-import {
-  getFileDropDisposition,
-  hasDraggedFiles,
-} from "./guacamole-file-drop.ts";
-import {
-  uploadFileToClient,
-  type GuacamoleFileStreamClient,
-} from "./guacamole-filesystem.ts";
-import { clampGuacamoleZoom, stepGuacamoleZoom } from "./guacamole-zoom.ts";
-
-export type GuacamoleConnectionType = "rdp" | "vnc" | "telnet";
-
-export interface GuacamoleConnectionConfig {
-  token?: string;
-  protocol?: GuacamoleConnectionType;
-  type?: GuacamoleConnectionType;
-  hostname?: string;
-  port?: number;
-  username?: string;
-  password?: string;
-  domain?: string;
-  width?: number;
-  height?: number;
-  dpi?: number;
-  /**
-   * Which backend serves this session. Supplied by the owning app so the
-   * websocket dials the same backend that minted the token; omitted by
-   * shared/collab views, which follow the default for the connection type.
-   */
-  connectionOrigin?: ConnectionOrigin | null;
-  [key: string]: unknown;
-}
-
-export interface GuacamoleDisplayHandle {
-  disconnect: () => void;
-  isConnected: () => boolean;
-  sendKey: (keysym: number, pressed: boolean) => void;
-  sendMouse: (x: number, y: number, buttonMask: number) => void;
-  setClipboard: (data: string) => void;
-  getFilesystem: () => Guacamole.Object | null;
-  uploadFile: (file: File) => Promise<void>;
-  zoomIn: () => number;
-  zoomOut: () => number;
-  resetZoom: () => number;
-}
-
-export type GuacamoleTouchMode = "touchscreen" | "touchpad";
-
-interface GuacamoleDisplayProps {
-  connectionConfig: GuacamoleConnectionConfig;
-  isVisible: boolean;
-  touchMode?: GuacamoleTouchMode | null;
-  allowUpload?: boolean;
-  onConnect?: () => void;
-  onDisconnect?: () => void;
-  onError?: (error: string) => void;
-  onFilesystem?: (filesystem: Guacamole.Object | null) => void;
-  onDropFiles?: (files: File[]) => void;
-  onDropUnavailable?: () => void;
-  onStageChange?: (stage: ConnectionStage) => void;
-  onZoomChange?: (zoom: number) => void;
-}
-
-export const GuacamoleDisplay = forwardRef<
-  GuacamoleDisplayHandle,
-  GuacamoleDisplayProps
->(function GuacamoleDisplay(
-  {
-    connectionConfig,
-    isVisible,
-    touchMode,
-    allowUpload = false,
-    onConnect,
-    onDisconnect,
-    onError,
-    onFilesystem,
-    onDropFiles,
-    onDropUnavailable,
-    onStageChange,
-    onZoomChange,
-  },
-  ref,
-) {
-  const { t } = useTranslation();
-  // The host config pins the session resolution; without it the display follows
-  // the container.
-  const hasConfiguredSize =
-    connectionConfig.width != null && connectionConfig.height != null;
-  const containerRef = useRef<HTMLDivElement>(null);
-  const displayRef = useRef<HTMLDivElement>(null);
-  const displayElementRef = useRef<HTMLElement | null>(null);
-  const clientRef = useRef<Guacamole.Client | null>(null);
-  const filesystemRef = useRef<Guacamole.Object | null>(null);
-  // Held in a ref so tearing down the client can report the loss without
-  // rebuilding the connect callback whenever the parent re-renders.
-  const onFilesystemRef = useRef(onFilesystem);
-  onFilesystemRef.current = onFilesystem;
-  const onStageChangeRef = useRef(onStageChange);
-  onStageChangeRef.current = onStageChange;
-  const keyboardRef = useRef<Guacamole.Keyboard | null>(null);
-  const unbindPointerRef = useRef<(() => void) | null>(null);
-  const scaleRef = useRef<number>(1);
-  const fitScaleRef = useRef<number>(1);
-  const zoomRef = useRef<number>(1);
-  const resizeTimeoutRef = useRef<NodeJS.Timeout | null>(null);
-  const hasKeyboardFocusRef = useRef(false);
-  const windowFocusedRef = useRef(
-    typeof document === "undefined" ? true : document.hasFocus(),
-  );
-  const hasInitiatedRef = useRef(false);
-  const isMountedRef = useRef(false);
-  const isConnectingRef = useRef(false);
-  const [isReady, setIsReady] = useState(false);
-  const [hasError, setHasError] = useState(false);
-  // RDP's guacd backend (FreeRDP) can report the Guacamole-level CONNECTED
-  // state from a single early sync before the actual RDP handshake with the
-  // remote host has finished negotiating - a handshake that can then still
-  // fail up to ~30s later. Waiting for a couple of real frame syncs before
-  // announcing the connection avoids a black screen with no connecting UI
-  // during that window; VNC/telnet fail before ever reaching CONNECTED, so
-  // they are unaffected.
-  const syncCountRef = useRef(0);
-
-  const disconnectClient = useCallback(() => {
-    unbindPointerRef.current?.();
-    unbindPointerRef.current = null;
-    const client = clientRef.current;
-    clientRef.current = null;
-    isConnectingRef.current = false;
-    if (filesystemRef.current) {
-      filesystemRef.current = null;
-      onFilesystemRef.current?.(null);
-    }
-    if (!client) return;
-
-    try {
-      client.disconnect();
-    } catch (error) {
-      console.warn("Failed to disconnect Guacamole client", error);
-    }
-  }, []);
-
-  const applyZoom = useCallback(
-    (nextZoom: number): number => {
-      const zoom = clampGuacamoleZoom(nextZoom);
-      zoomRef.current = zoom;
-      const display = clientRef.current?.getDisplay();
-      if (display && displayRef.current) {
-        const scale = fitScaleRef.current * zoom;
-        scaleRef.current = scale;
-        display.scale(scale);
-        displayRef.current.style.width = `${Math.floor(display.getWidth() * scale)}px`;
-        displayRef.current.style.height = `${Math.floor(display.getHeight() * scale)}px`;
-      }
-      onZoomChange?.(zoom);
-      return zoom;
-    },
-    [onZoomChange],
-  );
-
-  useImperativeHandle(ref, () => ({
-    disconnect: disconnectClient,
-    isConnected: () => isReady && !hasError,
-    sendKey: (keysym: number, pressed: boolean) => {
-      if (clientRef.current) {
-        clientRef.current.sendKeyEvent(pressed ? 1 : 0, keysym);
-      }
-    },
-    sendMouse: (x: number, y: number, buttonMask: number) => {
-      if (clientRef.current) {
-        clientRef.current.sendMouseState(
-          new Guacamole.Mouse.State({
-            x,
-            y,
-            left: !!(buttonMask & 1),
-            middle: !!(buttonMask & 2),
-            right: !!(buttonMask & 4),
-          }),
-        );
-      }
-    },
-    setClipboard: (data: string) => {
-      if (clientRef.current) {
-        const stream = clientRef.current.createClipboardStream("text/plain");
-        const writer = new Guacamole.StringWriter(stream);
-        writer.sendText(data);
-        writer.sendEnd();
-      }
-    },
-    getFilesystem: () => filesystemRef.current,
-    uploadFile: (file: File) => {
-      const client = clientRef.current;
-      if (!client) return Promise.reject(new Error("RDP session is not ready"));
-      return uploadFileToClient(
-        client as unknown as GuacamoleFileStreamClient,
-        file,
-      );
-    },
-    zoomIn: () => applyZoom(stepGuacamoleZoom(zoomRef.current, 1)),
-    zoomOut: () => applyZoom(stepGuacamoleZoom(zoomRef.current, -1)),
-    resetZoom: () => applyZoom(1),
-  }));
-
-  const getWebSocketConnection = useCallback(
-    async (
-      containerWidth: number,
-      containerHeight: number,
-    ): Promise<{ url: string; query: string } | null> => {
-      try {
-        let token: string;
-        const connectionProtocol =
-          connectionConfig.protocol ?? connectionConfig.type;
-
-        // Resolved before the token is minted, not just before the socket is
-        // opened: the token has to come from whichever backend will serve the
-        // session, so both steps have to agree on the origin.
-        const origin = await resolveConnectionOrigin(
-          { connectionOrigin: connectionConfig.connectionOrigin },
-          { defaultRemote: true },
-        );
-
-        if (connectionConfig.token) {
-          token = connectionConfig.token;
-        } else {
-          const data = await getGuacamoleToken(
-            {
-              protocol: connectionProtocol ?? "rdp",
-              hostname: String(connectionConfig.hostname ?? ""),
-              port: connectionConfig.port,
-              username: connectionConfig.username,
-              password: connectionConfig.password,
-              domain: connectionConfig.domain,
-              security:
-                typeof connectionConfig.security === "string"
-                  ? connectionConfig.security
-                  : undefined,
-              ignoreCert:
-                typeof connectionConfig.ignoreCert === "boolean"
-                  ? connectionConfig.ignoreCert
-                  : undefined,
-              guacamoleConfig: connectionConfig.guacamoleConfig as Parameters<
-                typeof getGuacamoleToken
-              >[0]["guacamoleConfig"],
-            },
-            origin,
-          );
-          token = data.token;
-        }
-
-        const displaySize = getGuacamoleDisplaySize(
-          connectionConfig.width ?? containerWidth ?? 1280,
-          connectionConfig.height ?? containerHeight ?? 720,
-          connectionProtocol,
-          window.devicePixelRatio,
-          connectionConfig.dpi,
-        );
-
-        let wsBase: string | null;
-        if (isElectron()) {
-          // includeJwt stays off: a display authenticates with the encrypted
-          // connection token in the query, not a session.
-          const target = await buildOriginWsUrl({
-            origin,
-            localPort: 30001,
-            localPath: "/plugin-ws/remote-desktop/display",
-            remotePath: "/plugin-ws/remote-desktop/display",
-            includeJwt: false,
-          });
-          if (!target) {
-            onError?.(t("errors.remoteServerRequired"));
-            return null;
-          }
-          wsBase = target.url;
-        } else {
-          wsBase = buildGuacamoleWebSocketBaseUrl({
-            isElectronApp: false,
-            isEmbeddedApp: false,
-            basePath: getBasePath(),
-            location: window.location,
-          });
-        }
-
-        const params = new URLSearchParams({
-          token,
-          width: String(displaySize.width),
-          height: String(displaySize.height),
-        });
-        if (displaySize.dpi) params.set("dpi", String(displaySize.dpi));
-        return { url: wsBase, query: params.toString() };
-      } catch (error) {
-        const message = errorMessage(error);
-        onError?.(message);
-        return null;
-      }
-    },
-    [connectionConfig, onError, t],
-  );
-
-  const refreshKeyboardHandlers = useCallback(() => {
-    const keyboard = keyboardRef.current;
-    const client = clientRef.current;
-    const displayElement = displayElementRef.current;
-
-    if (!keyboard) return;
-
-    const documentVisible =
-      typeof document === "undefined" || document.visibilityState === "visible";
-    const displayIsFocused =
-      !!displayElement &&
-      typeof document !== "undefined" &&
-      document.activeElement === displayElement;
-    const shouldCaptureInput =
-      !!client &&
-      !!displayElement &&
-      isVisible &&
-      documentVisible &&
-      windowFocusedRef.current &&
-      (hasKeyboardFocusRef.current || displayIsFocused);
-
-    if (!shouldCaptureInput) {
-      keyboard.reset();
-      keyboard.onkeydown = null;
-      keyboard.onkeyup = null;
-      return;
-    }
-
-    keyboard.onkeydown = (keysym: number) => {
-      if (!clientRef.current) return;
-      if (!isVisible || !windowFocusedRef.current) return;
-
-      const activeDisplay = displayElementRef.current;
-      const stillFocused =
-        !!activeDisplay &&
-        typeof document !== "undefined" &&
-        document.activeElement === activeDisplay;
-
-      if (!hasKeyboardFocusRef.current && !stillFocused) return;
-      clientRef.current.sendKeyEvent(1, keysym);
-    };
-
-    keyboard.onkeyup = (keysym: number) => {
-      // Focus loss must still release keys already sent to the remote host.
-      clientRef.current?.sendKeyEvent(0, keysym);
-    };
-  }, [isVisible]);
-
-  const rescaleDisplay = useCallback(
-    (immediate: boolean = false) => {
-      if (!clientRef.current || !containerRef.current) return;
-
-      const performRescale = () => {
-        if (!clientRef.current || !containerRef.current) return;
-
-        const display = clientRef.current.getDisplay();
-        const cWidth = containerRef.current.clientWidth;
-        const cHeight = containerRef.current.clientHeight;
-        const displayWidth = display.getWidth();
-        const displayHeight = display.getHeight();
-
-        if (
-          displayWidth > 0 &&
-          displayHeight > 0 &&
-          cWidth > 0 &&
-          cHeight > 0
-        ) {
-          fitScaleRef.current = Math.min(
-            cWidth / displayWidth,
-            cHeight / displayHeight,
-          );
-          applyZoom(zoomRef.current);
-        }
-      };
-
-      if (immediate) {
-        performRescale();
-      } else {
-        if (resizeTimeoutRef.current) {
-          clearTimeout(resizeTimeoutRef.current);
-        }
-        resizeTimeoutRef.current = setTimeout(performRescale, 200);
-      }
-    },
-    [applyZoom],
-  );
-
-  const connect = useCallback(async () => {
-    if (isConnectingRef.current) return;
-    isConnectingRef.current = true;
-    setIsReady(false);
-    setHasError(false);
-    syncCountRef.current = 0;
-
-    // Let layout settle before measuring without depending on animation frames,
-    // which may be throttled while Electron windows or tabs are inactive.
-    await new Promise<void>((resolve) => setTimeout(resolve, 0));
-    if (!isMountedRef.current) {
-      isConnectingRef.current = false;
-      return;
-    }
-
-    // The tab's DOM node can still be display:none (and report 0x0) when this
-    // tab is restored in the background. Measuring then would force the
-    // window-size fallback, which ignores the tab bar and makes the remote
-    // resolution too tall (the bottom gets cut off). Poll briefly for a real
-    // size before connecting so we capture the actual visible viewport.
-    const measureContainer = () => {
-      const rect = containerRef.current?.getBoundingClientRect();
-      return { width: rect?.width || 0, height: rect?.height || 0 };
-    };
-
-    let { width: containerWidth, height: containerHeight } = measureContainer();
-    for (
-      let attempt = 0;
-      (containerWidth < 100 || containerHeight < 100) && attempt < 40;
-      attempt++
-    ) {
-      await new Promise<void>((resolve) => setTimeout(resolve, 25));
-      if (!isMountedRef.current) {
-        isConnectingRef.current = false;
-        return;
-      }
-      ({ width: containerWidth, height: containerHeight } = measureContainer());
-    }
-
-    if (containerWidth < 100 || containerHeight < 100) {
-      containerWidth = window.innerWidth || 1280;
-      containerHeight = window.innerHeight || 720;
-    }
-
-    const wsConnection = await getWebSocketConnection(
-      containerWidth,
-      containerHeight,
-    );
-    if (!isMountedRef.current) {
-      isConnectingRef.current = false;
-      return;
-    }
-    if (!wsConnection) {
-      isConnectingRef.current = false;
-      return;
-    }
-
-    const tunnel = new Guacamole.WebSocketTunnel(wsConnection.url);
-    const client = new Guacamole.Client(tunnel);
-    clientRef.current = client;
-
-    const display = client.getDisplay();
-    const displayElement = display.getElement();
-    displayElementRef.current = displayElement;
-
-    if (displayRef.current) {
-      displayRef.current.innerHTML = "";
-      displayRef.current.appendChild(displayElement);
-    }
-
-    displayElement.setAttribute("tabindex", "0");
-    displayElement.style.outline = "none";
-
-    // Reading navigator.clipboard outside a user gesture is denied by Safari
-    // and commonly denied by Chromium. The paste event carries the text under
-    // the browser's normal permission model, so use it on every browser and
-    // replace the original shortcut with an ordered clipboard update + Ctrl+V.
-    displayElement.addEventListener(
-      "keydown",
-      (event) => {
-        if (isPasteShortcut(event)) {
-          event.stopImmediatePropagation();
-        }
-      },
-      true,
-    );
-    displayElement.addEventListener(
-      "paste",
-      (event) => {
-        if (clientRef.current !== client) return;
-        const text = event.clipboardData?.getData("text/plain");
-        if (!text) return;
-
-        event.preventDefault();
-        event.stopImmediatePropagation();
-        pasteTextToRemote(client, text);
-      },
-      true,
-    );
-
-    display.onresize = () => {
-      if (!isMountedRef.current || clientRef.current !== client) return;
-      rescaleDisplay(true);
-      setIsReady(true);
-    };
-
-    const protocol = connectionConfig.protocol ?? connectionConfig.type;
-    if (protocol === "telnet" && isMountedRef.current) {
-      setIsReady(true);
-    }
-
-    const sendMouseState = (state: Guacamole.Mouse.State) => {
-      displayElement.focus({ preventScroll: true });
-      const scale = scaleRef.current;
-      const adjustedState = new Guacamole.Mouse.State(
-        Math.round(state.x / scale),
-        Math.round(state.y / scale),
-        state.left,
-        state.middle,
-        state.right,
-        state.up,
-        state.down,
-      ) as Guacamole.Mouse.State;
-      client.sendMouseState(adjustedState);
-    };
-
-    unbindPointerRef.current?.();
-    unbindPointerRef.current = bindPointerInput(
-      displayElement,
-      touchMode,
-      sendMouseState,
-    );
-
-    const keyboard = new Guacamole.Keyboard(displayElement);
-    keyboardRef.current = keyboard;
-
-    const handleDisplayFocus = () => {
-      hasKeyboardFocusRef.current = true;
-      refreshKeyboardHandlers();
-    };
-
-    const handleDisplayBlur = () => {
-      hasKeyboardFocusRef.current = false;
-      refreshKeyboardHandlers();
-    };
-
-    displayElement.addEventListener("focus", handleDisplayFocus);
-    displayElement.addEventListener("blur", handleDisplayBlur);
-    displayElement.addEventListener("mousedown", handleDisplayFocus);
-    displayElement.addEventListener("touchstart", handleDisplayFocus, {
-      passive: true,
-    });
-    refreshKeyboardHandlers();
-
-    client.onstatechange = (state: number) => {
-      if (!isMountedRef.current || clientRef.current !== client) return;
-      onStageChangeRef.current?.(guacStateToStage(state));
-      switch (state) {
-        case 0:
-          break;
-        case 1:
-          break;
-        case 2:
-          break;
-        case 3:
-          isConnectingRef.current = false;
-          if (protocol !== "rdp") {
-            setIsReady(true);
-            onConnect?.();
-          }
-          // A configured resolution is the size the session should render at;
-          // resizing it to the container would discard it. rescaleDisplay still
-          // fits that fixed display into whatever space is available.
-          if (!hasConfiguredSize && containerRef.current) {
-            const rect = containerRef.current.getBoundingClientRect();
-            const size = getGuacamoleDisplaySize(
-              rect.width,
-              rect.height,
-              protocol,
-              window.devicePixelRatio,
-              connectionConfig.dpi,
-            );
-            client.sendSize(size.width, size.height);
-          }
-          rescaleDisplay(false);
-          break;
-        case 4:
-          break;
-        case 5:
-          isConnectingRef.current = false;
-          setIsReady(false);
-          setHasError(true);
-          hasKeyboardFocusRef.current = false;
-          refreshKeyboardHandlers();
-          onError?.(t("remoteDesktop.connectionError"));
-          onDisconnect?.();
-          break;
-      }
-    };
-
-    client.onerror = (error: Guacamole.Status) => {
-      if (!isMountedRef.current || clientRef.current !== client) return;
-      const errorMessage = error.message || t("remoteDesktop.connectionError");
-      setIsReady(false);
-      setHasError(true);
-      isConnectingRef.current = false;
-      onError?.(errorMessage);
-    };
-
-    if (protocol === "rdp") {
-      client.onsync = () => {
-        if (!isMountedRef.current || clientRef.current !== client) return;
-        if (syncCountRef.current >= 2) return;
-        syncCountRef.current += 1;
-        if (syncCountRef.current >= 2) {
-          setIsReady(true);
-          onConnect?.();
-        }
-      };
-    }
-
-    client.onclipboard = (stream: Guacamole.InputStream, mimetype: string) => {
-      if (mimetype === "text/plain") {
-        const reader = new Guacamole.StringReader(stream);
-        let data = "";
-        reader.ontext = (text: string) => {
-          data += text;
-        };
-        reader.onend = () => {
-          navigator.clipboard?.writeText?.(data).catch(() => {});
-        };
-      }
-    };
-
-    client.onaudio = (stream: Guacamole.InputStream, mimetype: string) => {
-      Guacamole.AudioPlayer.getInstance(stream, mimetype);
-    };
-
-    // Only fires when the connection enables drive redirection; guacd exposes
-    // the redirected drive as a single filesystem object.
-    client.onfilesystem = (filesystem: Guacamole.Object) => {
-      if (!isMountedRef.current || clientRef.current !== client) return;
-      filesystemRef.current = filesystem;
-      onFilesystemRef.current?.(filesystem);
-
-      filesystem.onundefine = () => {
-        if (filesystemRef.current !== filesystem) return;
-        filesystemRef.current = null;
-        onFilesystemRef.current?.(null);
-      };
-    };
-
-    client.onfile = (
-      stream: Guacamole.InputStream,
-      mimetype: string,
-      filename: string,
-    ) => {
-      const reader = new Guacamole.BlobReader(stream, mimetype);
-      reader.onend = () => {
-        const blob = reader.getBlob();
-        const url = URL.createObjectURL(blob);
-        const a = document.createElement("a");
-        a.href = url;
-        a.download = filename;
-        a.click();
-        URL.revokeObjectURL(url);
-      };
-      stream.sendAck("OK", Guacamole.Status.Code.SUCCESS);
-    };
-
-    try {
-      client.connect(wsConnection.query);
-    } catch (error) {
-      isConnectingRef.current = false;
-      if (!isMountedRef.current) return;
-      setIsReady(false);
-      setHasError(true);
-      onError?.(errorMessage(error, t("remoteDesktop.connectionError")));
-    }
-  }, [
-    getWebSocketConnection,
-    onConnect,
-    onDisconnect,
-    onError,
-    refreshKeyboardHandlers,
-    rescaleDisplay,
-    connectionConfig.protocol,
-    connectionConfig.type,
-    connectionConfig.dpi,
-    hasConfiguredSize,
-    touchMode,
-    t,
-  ]);
-
-  useEffect(() => {
-    isMountedRef.current = true;
-
-    if (isVisible && !hasInitiatedRef.current) {
-      hasInitiatedRef.current = true;
-      connect();
-    }
-  }, [isVisible, connect]);
-
-  useEffect(() => {
-    if (!isVisible) {
-      hasKeyboardFocusRef.current = false;
-    }
-
-    refreshKeyboardHandlers();
-  }, [isVisible, refreshKeyboardHandlers]);
-
-  useEffect(() => {
-    const handleWindowFocus = () => {
-      windowFocusedRef.current = true;
-      refreshKeyboardHandlers();
-    };
-
-    const handleWindowBlur = () => {
-      windowFocusedRef.current = false;
-      hasKeyboardFocusRef.current = false;
-      refreshKeyboardHandlers();
-    };
-
-    const handleVisibilityChange = () => {
-      windowFocusedRef.current =
-        document.visibilityState === "visible" && document.hasFocus();
-      if (document.visibilityState !== "visible") {
-        hasKeyboardFocusRef.current = false;
-      }
-      refreshKeyboardHandlers();
-    };
-
-    window.addEventListener("focus", handleWindowFocus);
-    window.addEventListener("blur", handleWindowBlur);
-    document.addEventListener("visibilitychange", handleVisibilityChange);
-
-    return () => {
-      window.removeEventListener("focus", handleWindowFocus);
-      window.removeEventListener("blur", handleWindowBlur);
-      document.removeEventListener("visibilitychange", handleVisibilityChange);
-    };
-  }, [refreshKeyboardHandlers]);
-
-  useEffect(() => {
-    return () => {
-      isMountedRef.current = false;
-      hasInitiatedRef.current = false;
-      isConnectingRef.current = false;
-      if (resizeTimeoutRef.current) {
-        clearTimeout(resizeTimeoutRef.current);
-      }
-      disconnectClient();
-      displayElementRef.current = null;
-    };
-  }, [disconnectClient]);
-
-  useEffect(() => {
-    if (!containerRef.current) return;
-
-    const resizeObserver = new ResizeObserver(() => {
-      if (resizeTimeoutRef.current) clearTimeout(resizeTimeoutRef.current);
-      resizeTimeoutRef.current = setTimeout(() => {
-        if (clientRef.current && containerRef.current) {
-          const rect = containerRef.current.getBoundingClientRect();
-          if (rect.width > 0 && rect.height > 0) {
-            if (!hasConfiguredSize) {
-              const size = getGuacamoleDisplaySize(
-                rect.width,
-                rect.height,
-                connectionConfig.protocol ?? connectionConfig.type,
-                window.devicePixelRatio,
-                connectionConfig.dpi,
-              );
-              clientRef.current.sendSize(size.width, size.height);
-            }
-            rescaleDisplay(true);
-          }
-        }
-      }, 150);
-    });
-
-    resizeObserver.observe(containerRef.current);
-
-    return () => {
-      resizeObserver.disconnect();
-    };
-  }, [
-    connectionConfig.dpi,
-    connectionConfig.protocol,
-    connectionConfig.type,
-    hasConfiguredSize,
-    rescaleDisplay,
-  ]);
-
-  useEffect(() => {
-    const container = containerRef.current;
-    const protocol = connectionConfig.protocol ?? connectionConfig.type;
-    if (!container || !isReady || protocol !== "vnc") return;
-
-    let pinchDistance = 0;
-    let pinchZoom = zoomRef.current;
-    const distance = (touches: TouchList) =>
-      Math.hypot(
-        touches[0].clientX - touches[1].clientX,
-        touches[0].clientY - touches[1].clientY,
-      );
-    const onTouchStart = (event: TouchEvent) => {
-      if (event.touches.length !== 2) return;
-      event.preventDefault();
-      event.stopPropagation();
-      pinchDistance = distance(event.touches);
-      pinchZoom = zoomRef.current;
-    };
-    const onTouchMove = (event: TouchEvent) => {
-      if (event.touches.length !== 2 || pinchDistance === 0) return;
-      event.preventDefault();
-      event.stopPropagation();
-      applyZoom(pinchZoom * (distance(event.touches) / pinchDistance));
-    };
-    const onTouchEnd = () => {
-      pinchDistance = 0;
-    };
-
-    container.addEventListener("touchstart", onTouchStart, {
-      passive: false,
-      capture: true,
-    });
-    container.addEventListener("touchmove", onTouchMove, {
-      passive: false,
-      capture: true,
-    });
-    container.addEventListener("touchend", onTouchEnd, { capture: true });
-    return () => {
-      container.removeEventListener("touchstart", onTouchStart, true);
-      container.removeEventListener("touchmove", onTouchMove, true);
-      container.removeEventListener("touchend", onTouchEnd, true);
-    };
-  }, [applyZoom, connectionConfig.protocol, connectionConfig.type, isReady]);
-
-  const canDropFiles = allowUpload && onDropFiles != null;
-  const [isDraggingFiles, setIsDraggingFiles] = useState(false);
-  // Nested elements fire dragleave as the pointer crosses them, so track depth
-  // rather than clearing the highlight on the first leave.
-  const dragDepthRef = useRef(0);
-
-  const handleDragEnter = useCallback(
-    (event: React.DragEvent) => {
-      if (!hasDraggedFiles(event.dataTransfer.types)) return;
-      event.preventDefault();
-      if (!canDropFiles) return;
-      dragDepthRef.current += 1;
-      setIsDraggingFiles(true);
-    },
-    [canDropFiles],
-  );
-
-  const handleDragLeave = useCallback(() => {
-    dragDepthRef.current = Math.max(0, dragDepthRef.current - 1);
-    if (dragDepthRef.current === 0) setIsDraggingFiles(false);
-  }, []);
-
-  const handleDrop = useCallback(
-    (event: React.DragEvent) => {
-      if (!hasDraggedFiles(event.dataTransfer.types)) return;
-      event.preventDefault();
-      dragDepthRef.current = 0;
-      setIsDraggingFiles(false);
-
-      const files = Array.from(event.dataTransfer.files);
-      const disposition = getFileDropDisposition(
-        event.dataTransfer.types,
-        files.length,
-        canDropFiles,
-      );
-      if (disposition === "upload") onDropFiles?.(files);
-      if (disposition === "reject") onDropUnavailable?.();
-    },
-    [canDropFiles, onDropFiles, onDropUnavailable],
-  );
-
-  return (
-    <div
-      ref={containerRef}
-      className="absolute inset-0 overflow-auto"
-      style={{ backgroundColor: "var(--bg-base)" }}
-      onDragEnter={handleDragEnter}
-      onDragOver={(event) => {
-        if (hasDraggedFiles(event.dataTransfer.types)) event.preventDefault();
-      }}
-      onDragLeave={canDropFiles ? handleDragLeave : undefined}
-      onDrop={handleDrop}
-    >
-      <div
-        ref={displayRef}
-        className="relative flex min-h-full min-w-full items-center justify-center overflow-hidden"
-        style={{
-          cursor: isReady ? "none" : "default",
-          visibility: isReady ? "visible" : "hidden",
-        }}
-      />
-
-      {isDraggingFiles && (
-        <div className="absolute inset-0 z-30 flex items-center justify-center pointer-events-none bg-background/70 backdrop-blur-sm">
-          <div className="flex items-center gap-2 rounded-sm border-2 border-dashed border-border px-4 py-3 text-sm font-semibold">
-            <Upload className="size-4" />
-            {t("remoteDesktop.files.dropToUpload")}
-          </div>
-        </div>
-      )}
-    </div>
-  );
-});
diff --git a/plugins/remote-desktop/src/frontend/GuacamoleFileBrowser.tsx b/plugins/remote-desktop/src/frontend/GuacamoleFileBrowser.tsx
deleted file mode 100644
index 9737caa92..000000000
--- a/plugins/remote-desktop/src/frontend/GuacamoleFileBrowser.tsx
+++ /dev/null
@@ -1,245 +0,0 @@
-import { errorMessage } from "./host-remote";
-import { useCallback, useEffect, useRef, useState } from "react";
-import Guacamole from "guacamole-common-js";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import {
-  ArrowUp,
-  Download,
-  File as FileIcon,
-  Folder,
-  RefreshCw,
-  Upload,
-  X,
-} from "lucide-react";
-import { toast } from "sonner";
-import { Button } from "@termix/plugin-sdk/ui";
-import {
-  downloadFile,
-  listDirectory,
-  parentPath,
-  saveBlobAs,
-  uploadFile,
-  describeUploadError,
-  type RemoteFileEntry,
-} from "./guacamole-filesystem.ts";
-
-interface GuacamoleFileBrowserProps {
-  filesystem: Guacamole.Object;
-  allowUpload: boolean;
-  allowDownload: boolean;
-  pendingUploads: File[];
-  onPendingUploadsHandled: () => void;
-  onClose: () => void;
-}
-
-export function GuacamoleFileBrowser({
-  filesystem,
-  allowUpload,
-  allowDownload,
-  pendingUploads,
-  onPendingUploadsHandled,
-  onClose,
-}: GuacamoleFileBrowserProps) {
-  const { t } = useTranslation();
-  const [path, setPath] = useState("/");
-  const [entries, setEntries] = useState<RemoteFileEntry[]>([]);
-  const [loading, setLoading] = useState(false);
-  const [error, setError] = useState<string | null>(null);
-  const [busyName, setBusyName] = useState<string | null>(null);
-  const fileInputRef = useRef<HTMLInputElement>(null);
-
-  const refresh = useCallback(
-    async (target: string) => {
-      setLoading(true);
-      setError(null);
-      try {
-        setEntries(await listDirectory(filesystem, target));
-      } catch (err) {
-        setEntries([]);
-        setError(errorMessage(err, t("remoteDesktop.files.listFailed")));
-      } finally {
-        setLoading(false);
-      }
-    },
-    [filesystem, t],
-  );
-
-  useEffect(() => {
-    void refresh(path);
-  }, [refresh, path]);
-
-  const upload = useCallback(
-    async (files: File[]) => {
-      for (const file of files) {
-        setBusyName(file.name);
-        try {
-          await uploadFile(filesystem, path, file);
-          toast.success(t("remoteDesktop.files.uploaded", { name: file.name }));
-        } catch (err) {
-          toast.error(
-            describeUploadError(err, (key) =>
-              t(`remoteDesktop.files.${key}`, { name: file.name }),
-            ),
-          );
-        } finally {
-          setBusyName(null);
-        }
-      }
-      void refresh(path);
-    },
-    [filesystem, path, refresh, t],
-  );
-
-  // Files dropped on the display land here so they share the browser's current
-  // directory rather than always going to the drive root.
-  useEffect(() => {
-    if (pendingUploads.length === 0) return;
-    onPendingUploadsHandled();
-    if (!allowUpload) {
-      toast.error(t("remoteDesktop.files.uploadDisabled"));
-      return;
-    }
-    void upload(pendingUploads);
-  }, [pendingUploads, onPendingUploadsHandled, allowUpload, upload, t]);
-
-  const download = useCallback(
-    async (entry: RemoteFileEntry) => {
-      setBusyName(entry.name);
-      try {
-        const { blob, filename } = await downloadFile(filesystem, entry.path);
-        saveBlobAs(blob, filename);
-      } catch (err) {
-        toast.error(
-          err instanceof Error
-            ? err.message
-            : t("remoteDesktop.files.downloadFailed", { name: entry.name }),
-        );
-      } finally {
-        setBusyName(null);
-      }
-    },
-    [filesystem, t],
-  );
-
-  return (
-    <div className="absolute right-2 top-2 bottom-2 z-30 flex w-80 flex-col rounded-sm border border-border bg-background/95 shadow-lg backdrop-blur-sm">
-      <div className="flex items-center gap-1 border-b border-border px-2 py-1.5">
-        <span className="flex-1 truncate text-xs font-semibold">
-          {t("remoteDesktop.files.title")}
-        </span>
-        <Button
-          variant="ghost"
-          size="icon"
-          className="size-6"
-          onClick={onClose}
-          aria-label={t("common.close")}
-        >
-          <X className="size-3.5" />
-        </Button>
-      </div>
-
-      <div className="flex items-center gap-1 border-b border-border px-2 py-1.5">
-        <Button
-          variant="ghost"
-          size="icon"
-          className="size-6"
-          disabled={path === "/"}
-          onClick={() => setPath(parentPath(path))}
-          aria-label={t("remoteDesktop.files.parent")}
-        >
-          <ArrowUp className="size-3.5" />
-        </Button>
-        <span className="flex-1 truncate text-[11px] text-muted-foreground">
-          {path}
-        </span>
-        <Button
-          variant="ghost"
-          size="icon"
-          className="size-6"
-          onClick={() => void refresh(path)}
-          aria-label={t("remoteDesktop.files.refresh")}
-        >
-          <RefreshCw className="size-3.5" />
-        </Button>
-      </div>
-
-      <div className="flex-1 overflow-y-auto">
-        {loading && (
-          <p className="px-2 py-3 text-[11px] text-muted-foreground">
-            {t("common.loading")}
-          </p>
-        )}
-        {!loading && error && (
-          <p className="px-2 py-3 text-[11px] text-red-500">{error}</p>
-        )}
-        {!loading && !error && entries.length === 0 && (
-          <p className="px-2 py-3 text-[11px] text-muted-foreground">
-            {t("remoteDesktop.files.empty")}
-          </p>
-        )}
-        {!loading &&
-          !error &&
-          entries.map((entry) => (
-            <div
-              key={entry.path}
-              className="flex items-center gap-1.5 px-2 py-1 hover:bg-muted"
-            >
-              {entry.isDirectory ? (
-                <Folder className="size-3.5 shrink-0 text-muted-foreground" />
-              ) : (
-                <FileIcon className="size-3.5 shrink-0 text-muted-foreground" />
-              )}
-              <button
-                type="button"
-                className="flex-1 truncate text-left text-[11px] disabled:opacity-60"
-                disabled={!entry.isDirectory}
-                onClick={() => entry.isDirectory && setPath(entry.path)}
-              >
-                {entry.name}
-              </button>
-              {!entry.isDirectory && allowDownload && (
-                <Button
-                  variant="ghost"
-                  size="icon"
-                  className="size-5 shrink-0"
-                  disabled={busyName === entry.name}
-                  onClick={() => void download(entry)}
-                  aria-label={t("remoteDesktop.files.download")}
-                >
-                  <Download className="size-3" />
-                </Button>
-              )}
-            </div>
-          ))}
-      </div>
-
-      {allowUpload && (
-        <div className="border-t border-border px-2 py-1.5">
-          <input
-            ref={fileInputRef}
-            type="file"
-            multiple
-            className="hidden"
-            onChange={(e) => {
-              const files = Array.from(e.target.files ?? []);
-              e.target.value = "";
-              if (files.length > 0) void upload(files);
-            }}
-          />
-          <Button
-            variant="outline"
-            size="sm"
-            className="h-7 w-full text-[11px]"
-            disabled={busyName !== null}
-            onClick={() => fileInputRef.current?.click()}
-          >
-            <Upload className="mr-1 size-3" />
-            {busyName !== null
-              ? t("remoteDesktop.files.uploading", { name: busyName })
-              : t("remoteDesktop.files.upload")}
-          </Button>
-        </div>
-      )}
-    </div>
-  );
-}
diff --git a/plugins/remote-desktop/src/frontend/GuacamoleToolbar.tsx b/plugins/remote-desktop/src/frontend/GuacamoleToolbar.tsx
deleted file mode 100644
index c66bb05f4..000000000
--- a/plugins/remote-desktop/src/frontend/GuacamoleToolbar.tsx
+++ /dev/null
@@ -1,633 +0,0 @@
-import React, {
-  useState,
-  useRef,
-  useCallback,
-  useLayoutEffect,
-  useEffect,
-} from "react";
-import {
-  GripVertical,
-  Monitor,
-  ChevronLeft,
-  ChevronRight,
-  ChevronUp,
-  ChevronDown,
-  ChevronsLeftRight,
-  FolderOpen,
-  Touchpad,
-  MousePointer,
-  ZoomIn,
-  ZoomOut,
-  Scan,
-  X,
-} from "lucide-react";
-import {
-  Tooltip,
-  TooltipContent,
-  TooltipProvider,
-  TooltipTrigger,
-} from "@termix/plugin-sdk/ui";
-import type {
-  GuacamoleDisplayHandle,
-  GuacamoleTouchMode,
-} from "./GuacamoleDisplay.tsx";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { ActionSlot } from "@termix/plugin-sdk/ui";
-import { cn } from "@termix/plugin-sdk/ui";
-import {
-  detectRuntimeMetaKeyFamily,
-  metaKeyLabels,
-  type MetaKeyFamily,
-} from "./guacamole-meta-key.ts";
-
-interface GuacamoleToolbarProps {
-  displayRef: React.RefObject<GuacamoleDisplayHandle>;
-  protocol: "rdp" | "vnc" | "telnet";
-  touchMode?: GuacamoleTouchMode | null;
-  hasFilesystem?: boolean;
-  fileBrowserOpen?: boolean;
-  onToggleFileBrowser?: () => void;
-  onTouchModeChange?: (mode: GuacamoleTouchMode) => void;
-  zoom?: number;
-  onHide?: () => void;
-  metaKeyFamily?: MetaKeyFamily;
-  /** Handed to "remote-desktop.toolbar" actions (the share button). */
-  slotContext?: RemoteDesktopToolbarContext;
-}
-
-export const REMOTE_DESKTOP_TOOLBAR_SLOT = "remote-desktop.toolbar";
-
-/** What a "remote-desktop.toolbar" action is invoked with. */
-export interface RemoteDesktopToolbarContext {
-  hostId: number;
-  /** guacd's connection id, once the session is up. */
-  sessionId: string | null;
-  protocol: "rdp" | "vnc" | "telnet";
-  tabInstanceId?: string;
-  /** The backend the session runs on. */
-  origin?: "local" | "remote";
-}
-
-const MODIFIER_KEYSYMS = {
-  ctrl: 0xffe3,
-  alt: 0xffe9,
-  shift: 0xffe1,
-  win: 0xffeb,
-} as const;
-
-const FKEY_KEYSYMS = Array.from({ length: 12 }, (_, i) => 0xffbe + i);
-
-const BTN_BASE =
-  "flex items-center justify-center gap-1 h-7 px-2 text-[10px] font-medium text-muted-foreground hover:text-foreground hover:bg-muted transition-colors rounded-sm whitespace-nowrap select-none";
-
-const BTN_ICON =
-  "flex items-center justify-center size-7 text-muted-foreground hover:text-foreground hover:bg-muted transition-colors rounded-sm select-none";
-
-const SEP = "w-px h-5 bg-border mx-0.5 shrink-0";
-
-function TipBtn({
-  tooltip,
-  onClick,
-  className,
-  children,
-}: {
-  tooltip: string;
-  onClick: () => void;
-  className?: string;
-  children: React.ReactNode;
-}) {
-  return (
-    <Tooltip>
-      <TooltipTrigger asChild>
-        <button
-          type="button"
-          aria-label={tooltip}
-          onClick={onClick}
-          className={cn(BTN_BASE, className)}
-        >
-          {children}
-        </button>
-      </TooltipTrigger>
-      <TooltipContent side="bottom" sideOffset={6}>
-        {tooltip}
-      </TooltipContent>
-    </Tooltip>
-  );
-}
-
-function TipIconBtn({
-  tooltip,
-  onClick,
-  className,
-  children,
-}: {
-  tooltip: string;
-  onClick: () => void;
-  className?: string;
-  children: React.ReactNode;
-}) {
-  return (
-    <Tooltip>
-      <TooltipTrigger asChild>
-        <button
-          type="button"
-          aria-label={tooltip}
-          onClick={onClick}
-          className={cn(BTN_ICON, className)}
-        >
-          {children}
-        </button>
-      </TooltipTrigger>
-      <TooltipContent side="bottom" sideOffset={6}>
-        {tooltip}
-      </TooltipContent>
-    </Tooltip>
-  );
-}
-
-export const GuacamoleToolbar: React.FC<GuacamoleToolbarProps> = ({
-  displayRef,
-  protocol,
-  touchMode,
-  hasFilesystem = false,
-  fileBrowserOpen = false,
-  onToggleFileBrowser,
-  onTouchModeChange,
-  zoom = 1,
-  onHide,
-  metaKeyFamily,
-  slotContext,
-}) => {
-  const { t } = useTranslation();
-  const meta = metaKeyLabels(
-    metaKeyFamily ?? detectRuntimeMetaKeyFamily(protocol),
-  );
-  const [position, setPosition] = useState({ x: 0, y: 12 });
-  const [collapsed, setCollapsed] = useState(false);
-  const [showFKeys, setShowFKeys] = useState(false);
-  const [stickyKeys, setStickyKeys] = useState<Record<number, boolean>>({
-    [MODIFIER_KEYSYMS.ctrl]: false,
-    [MODIFIER_KEYSYMS.alt]: false,
-    [MODIFIER_KEYSYMS.shift]: false,
-    [MODIFIER_KEYSYMS.win]: false,
-  });
-
-  const toolbarRef = useRef<HTMLDivElement>(null);
-  const isDraggingRef = useRef(false);
-  const dragOriginRef = useRef({ mouseX: 0, mouseY: 0, posX: 0, posY: 0 });
-  const [isDragging, setIsDragging] = useState(false);
-
-  useLayoutEffect(() => {
-    const el = toolbarRef.current;
-    if (!el) return;
-    const parent = el.offsetParent as HTMLElement | null;
-    if (!parent) return;
-    const parentW = parent.clientWidth;
-    const toolbarW = el.offsetWidth;
-    setPosition((p) => ({ ...p, x: Math.max(0, (parentW - toolbarW) / 2) }));
-  }, [collapsed]);
-
-  useEffect(() => {
-    if (!isDragging) return;
-
-    const onMove = (e: MouseEvent) => {
-      if (!isDraggingRef.current) return;
-      const parent = toolbarRef.current?.offsetParent as HTMLElement | null;
-      const parentW = parent?.clientWidth ?? Infinity;
-      const parentH = parent?.clientHeight ?? Infinity;
-      const toolbarW = toolbarRef.current?.offsetWidth ?? 0;
-      const toolbarH = toolbarRef.current?.offsetHeight ?? 0;
-
-      const dx = e.clientX - dragOriginRef.current.mouseX;
-      const dy = e.clientY - dragOriginRef.current.mouseY;
-      setPosition({
-        x: Math.max(
-          0,
-          Math.min(dragOriginRef.current.posX + dx, parentW - toolbarW),
-        ),
-        y: Math.max(
-          0,
-          Math.min(dragOriginRef.current.posY + dy, parentH - toolbarH),
-        ),
-      });
-    };
-
-    const onUp = () => {
-      isDraggingRef.current = false;
-      setIsDragging(false);
-      document.body.style.userSelect = "";
-    };
-
-    document.addEventListener("mousemove", onMove);
-    document.addEventListener("mouseup", onUp);
-    return () => {
-      document.removeEventListener("mousemove", onMove);
-      document.removeEventListener("mouseup", onUp);
-    };
-  }, [isDragging]);
-
-  const startDrag = useCallback(
-    (e: React.MouseEvent) => {
-      e.preventDefault();
-      isDraggingRef.current = true;
-      dragOriginRef.current = {
-        mouseX: e.clientX,
-        mouseY: e.clientY,
-        posX: position.x,
-        posY: position.y,
-      };
-      document.body.style.userSelect = "none";
-      setIsDragging(true);
-    },
-    [position],
-  );
-
-  const releaseStickyKeys = useCallback(() => {
-    const display = displayRef.current;
-    if (!display) return;
-    setStickyKeys((prev) => {
-      const next = { ...prev };
-      for (const [ksStr, active] of Object.entries(prev)) {
-        if (active) {
-          display.sendKey(Number(ksStr), false);
-          next[Number(ksStr)] = false;
-        }
-      }
-      return next;
-    });
-  }, [displayRef]);
-
-  const sendCombo = useCallback(
-    (...keysyms: number[]) => {
-      const display = displayRef.current;
-      if (!display) return;
-      for (const k of keysyms) display.sendKey(k, true);
-      for (const k of [...keysyms].reverse()) display.sendKey(k, false);
-      releaseStickyKeys();
-    },
-    [displayRef, releaseStickyKeys],
-  );
-
-  const toggleStickyKey = useCallback(
-    (keysym: number) => {
-      const display = displayRef.current;
-      if (!display) return;
-      setStickyKeys((prev) => {
-        const isActive = prev[keysym];
-        display.sendKey(keysym, !isActive);
-        return { ...prev, [keysym]: !isActive };
-      });
-    },
-    [displayRef],
-  );
-
-  const isRdpVnc = protocol === "rdp" || protocol === "vnc";
-
-  const containerStyle: React.CSSProperties = {
-    position: "absolute",
-    left: position.x,
-    top: position.y,
-    zIndex: 20,
-  };
-
-  return (
-    <TooltipProvider delayDuration={500}>
-      <div
-        ref={toolbarRef}
-        style={containerStyle}
-        onMouseDown={(e) => e.preventDefault()}
-      >
-        {collapsed ? (
-          <Tooltip>
-            <TooltipTrigger asChild>
-              <div className="flex items-center bg-background/85 backdrop-blur-sm border border-border shadow-lg rounded-sm overflow-hidden">
-                <button
-                  type="button"
-                  onMouseDown={startDrag}
-                  className="flex items-center justify-center size-7 text-muted-foreground hover:text-foreground hover:bg-muted transition-colors cursor-grab active:cursor-grabbing"
-                >
-                  <GripVertical className="size-3" />
-                </button>
-                <div className="w-px h-4 bg-border" />
-                <button
-                  type="button"
-                  onClick={() => setCollapsed(false)}
-                  className="flex items-center justify-center size-7 text-muted-foreground hover:text-foreground hover:bg-muted transition-colors"
-                >
-                  <Monitor className="size-3.5" />
-                </button>
-              </div>
-            </TooltipTrigger>
-            <TooltipContent side="bottom" sideOffset={6}>
-              {t("remoteDesktop.toolbar.expand")}
-            </TooltipContent>
-          </Tooltip>
-        ) : (
-          <div className="flex items-center bg-background/85 backdrop-blur-sm border border-border shadow-lg rounded-sm px-0.5 py-0.5 gap-0">
-            {/* Drag handle */}
-            <Tooltip>
-              <TooltipTrigger asChild>
-                <button
-                  type="button"
-                  onMouseDown={startDrag}
-                  className="flex items-center justify-center h-7 px-1 text-muted-foreground hover:text-foreground hover:bg-muted transition-colors rounded-sm cursor-grab active:cursor-grabbing"
-                >
-                  <GripVertical className="size-3.5" />
-                </button>
-              </TooltipTrigger>
-              <TooltipContent side="bottom" sideOffset={6}>
-                {t("remoteDesktop.toolbar.dragHandle")}
-              </TooltipContent>
-            </Tooltip>
-
-            {/* Touch mode toggle — touch devices only */}
-            {touchMode != null && onTouchModeChange && (
-              <>
-                <div className={SEP} />
-                <Tooltip>
-                  <TooltipTrigger asChild>
-                    <button
-                      type="button"
-                      onClick={() =>
-                        onTouchModeChange(
-                          touchMode === "touchscreen"
-                            ? "touchpad"
-                            : "touchscreen",
-                        )
-                      }
-                      className={cn(BTN_ICON)}
-                    >
-                      {touchMode === "touchscreen" ? (
-                        <MousePointer className="size-3.5" />
-                      ) : (
-                        <Touchpad className="size-3.5" />
-                      )}
-                    </button>
-                  </TooltipTrigger>
-                  <TooltipContent side="bottom" sideOffset={6}>
-                    {touchMode === "touchscreen"
-                      ? t("remoteDesktop.toolbar.switchToTrackpad")
-                      : t("remoteDesktop.toolbar.switchToTouch")}
-                  </TooltipContent>
-                </Tooltip>
-              </>
-            )}
-
-            {/* Drive files — only once guacd reports a redirected filesystem */}
-            {hasFilesystem && onToggleFileBrowser && (
-              <>
-                <div className={SEP} />
-                <TipIconBtn
-                  tooltip={t("remoteDesktop.files.title")}
-                  onClick={onToggleFileBrowser}
-                  className={cn(fileBrowserOpen && "bg-muted text-foreground")}
-                >
-                  <FolderOpen className="size-3.5" />
-                </TipIconBtn>
-              </>
-            )}
-
-            {isRdpVnc && (
-              <>
-                <div className={SEP} />
-                <TipIconBtn
-                  tooltip={t("remoteDesktop.toolbar.zoomOut")}
-                  onClick={() => displayRef.current?.zoomOut()}
-                >
-                  <ZoomOut className="size-3.5" />
-                </TipIconBtn>
-                <TipBtn
-                  tooltip={t("remoteDesktop.toolbar.resetZoom")}
-                  onClick={() => displayRef.current?.resetZoom()}
-                  className="min-w-12 tabular-nums"
-                >
-                  {Math.round(zoom * 100)}%
-                </TipBtn>
-                <TipIconBtn
-                  tooltip={t("remoteDesktop.toolbar.zoomIn")}
-                  onClick={() => displayRef.current?.zoomIn()}
-                >
-                  <ZoomIn className="size-3.5" />
-                </TipIconBtn>
-                <TipIconBtn
-                  tooltip={t("remoteDesktop.toolbar.fitToScreen")}
-                  onClick={() => displayRef.current?.resetZoom()}
-                >
-                  <Scan className="size-3.5" />
-                </TipIconBtn>
-              </>
-            )}
-
-            {/* System combos — RDP/VNC only */}
-            {isRdpVnc && (
-              <>
-                <div className={SEP} />
-                <TipBtn
-                  tooltip={t("remoteDesktop.toolbar.ctrlAltDel")}
-                  onClick={() => sendCombo(0xffe3, 0xffe9, 0xffff)}
-                >
-                  CAD
-                </TipBtn>
-                <TipBtn
-                  tooltip={t(meta.lockTooltip)}
-                  onClick={() => sendCombo(MODIFIER_KEYSYMS.win, 0x006c)}
-                >
-                  {meta.lock}
-                </TipBtn>
-                <TipBtn
-                  tooltip={t(meta.keyTooltip)}
-                  onClick={() => sendCombo(MODIFIER_KEYSYMS.win)}
-                >
-                  {meta.short}
-                </TipBtn>
-              </>
-            )}
-
-            {/* Sticky modifiers — RDP/VNC only */}
-            {isRdpVnc && (
-              <>
-                <div className={SEP} />
-                {(
-                  [
-                    [
-                      "ctrl",
-                      MODIFIER_KEYSYMS.ctrl,
-                      t("remoteDesktop.toolbar.ctrl"),
-                    ],
-                    [
-                      "alt",
-                      MODIFIER_KEYSYMS.alt,
-                      t("remoteDesktop.toolbar.alt"),
-                    ],
-                    [
-                      "shift",
-                      MODIFIER_KEYSYMS.shift,
-                      t("remoteDesktop.toolbar.shift"),
-                    ],
-                    ["win", MODIFIER_KEYSYMS.win, t(meta.stickyKey)],
-                  ] as [string, number, string][]
-                ).map(([key, ks, label]) => (
-                  <Tooltip key={key}>
-                    <TooltipTrigger asChild>
-                      <button
-                        type="button"
-                        onClick={() => toggleStickyKey(ks)}
-                        className={cn(
-                          BTN_BASE,
-                          stickyKeys[ks] &&
-                            "bg-primary/15 text-primary border border-primary/30",
-                        )}
-                      >
-                        {label}
-                      </button>
-                    </TooltipTrigger>
-                    <TooltipContent side="bottom" sideOffset={6}>
-                      {stickyKeys[ks]
-                        ? t("remoteDesktop.toolbar.stickyActive", {
-                            key: label,
-                          })
-                        : t("remoteDesktop.toolbar.stickyInactive", {
-                            key: label,
-                          })}
-                    </TooltipContent>
-                  </Tooltip>
-                ))}
-              </>
-            )}
-
-            {/* Function key toggle */}
-            <div className={SEP} />
-            <TipBtn
-              tooltip={t("remoteDesktop.toolbar.fnToggle")}
-              onClick={() => setShowFKeys((v) => !v)}
-              className={cn(
-                showFKeys &&
-                  "bg-primary/15 text-primary border border-primary/30",
-              )}
-            >
-              Fn
-            </TipBtn>
-
-            {/* F1-F12 row */}
-            {showFKeys &&
-              FKEY_KEYSYMS.map((ks, i) => (
-                <TipBtn
-                  key={ks}
-                  tooltip={`F${i + 1}`}
-                  onClick={() => sendCombo(ks)}
-                >
-                  F{i + 1}
-                </TipBtn>
-              ))}
-
-            {/* Navigation */}
-            <div className={SEP} />
-            <TipBtn
-              tooltip={t("remoteDesktop.toolbar.esc")}
-              onClick={() => sendCombo(0xff1b)}
-            >
-              Esc
-            </TipBtn>
-            <TipBtn
-              tooltip={t("remoteDesktop.toolbar.tab")}
-              onClick={() => sendCombo(0xff09)}
-            >
-              Tab
-            </TipBtn>
-            <TipBtn
-              tooltip={t("remoteDesktop.toolbar.home")}
-              onClick={() => sendCombo(0xff50)}
-            >
-              Home
-            </TipBtn>
-            <TipBtn
-              tooltip={t("remoteDesktop.toolbar.end")}
-              onClick={() => sendCombo(0xff57)}
-            >
-              End
-            </TipBtn>
-            <TipBtn
-              tooltip={t("remoteDesktop.toolbar.pageUp")}
-              onClick={() => sendCombo(0xff55)}
-            >
-              PgUp
-            </TipBtn>
-            <TipBtn
-              tooltip={t("remoteDesktop.toolbar.pageDown")}
-              onClick={() => sendCombo(0xff56)}
-            >
-              PgDn
-            </TipBtn>
-
-            {/* Arrow cluster */}
-            <div className="flex flex-col ml-0.5">
-              <div className="flex justify-center">
-                <TipIconBtn
-                  tooltip={t("remoteDesktop.toolbar.arrowUp")}
-                  onClick={() => sendCombo(0xff52)}
-                >
-                  <ChevronUp className="size-3" />
-                </TipIconBtn>
-              </div>
-              <div className="flex">
-                <TipIconBtn
-                  tooltip={t("remoteDesktop.toolbar.arrowLeft")}
-                  onClick={() => sendCombo(0xff51)}
-                >
-                  <ChevronLeft className="size-3" />
-                </TipIconBtn>
-                <TipIconBtn
-                  tooltip={t("remoteDesktop.toolbar.arrowDown")}
-                  onClick={() => sendCombo(0xff54)}
-                >
-                  <ChevronDown className="size-3" />
-                </TipIconBtn>
-                <TipIconBtn
-                  tooltip={t("remoteDesktop.toolbar.arrowRight")}
-                  onClick={() => sendCombo(0xff53)}
-                >
-                  <ChevronRight className="size-3" />
-                </TipIconBtn>
-              </div>
-            </div>
-
-            {slotContext && (
-              <ActionSlot
-                slotId={REMOTE_DESKTOP_TOOLBAR_SLOT}
-                className={cn(BTN_ICON)}
-                hideLabels
-                when={{ ...slotContext }}
-                context={() => [slotContext]}
-              />
-            )}
-
-            {/* Collapse */}
-            <div className="w-px h-5 bg-border mx-0.5 shrink-0" />
-            <Tooltip>
-              <TooltipTrigger asChild>
-                <button
-                  type="button"
-                  onClick={() => setCollapsed(true)}
-                  className={cn(BTN_ICON)}
-                >
-                  <ChevronsLeftRight className="size-3.5" />
-                </button>
-              </TooltipTrigger>
-              <TooltipContent side="bottom" sideOffset={6}>
-                {t("remoteDesktop.toolbar.collapse")}
-              </TooltipContent>
-            </Tooltip>
-            {onHide && (
-              <TipIconBtn
-                tooltip={t("remoteDesktop.toolbar.hide")}
-                onClick={onHide}
-              >
-                <X className="size-3.5" />
-              </TipIconBtn>
-            )}
-          </div>
-        )}
-      </div>
-    </TooltipProvider>
-  );
-};
diff --git a/plugins/remote-desktop/src/frontend/HostEditorGuacamoleTabs.tsx b/plugins/remote-desktop/src/frontend/HostEditorGuacamoleTabs.tsx
deleted file mode 100644
index b4d97f493..000000000
--- a/plugins/remote-desktop/src/frontend/HostEditorGuacamoleTabs.tsx
+++ /dev/null
@@ -1,1743 +0,0 @@
-import {
-  HOST_PROTOCOL_SECRET_KEPT,
-  useTranslation,
-} from "@termix/plugin-sdk/frontend";
-import {
-  FakeSwitch,
-  Input,
-  PasswordInput,
-  SectionCard,
-  Select2,
-  SettingRow,
-} from "@termix/plugin-sdk/ui";
-import {
-  Activity,
-  Copy,
-  Globe,
-  Monitor,
-  Network,
-  Server,
-  Settings,
-  Shield,
-  Terminal,
-  Zap,
-  Cpu,
-} from "lucide-react";
-import type { RemoteDesktopForm, RemoteFormSetField } from "./remote-form";
-
-type HostEditorForm = RemoteDesktopForm;
-type HostEditorSetField = RemoteFormSetField;
-
-type GuacFieldSetter = (key: string, value: unknown) => void;
-
-function DocsLinkAction({ href, label }: { href: string; label: string }) {
-  return (
-    <a
-      href={href}
-      target="_blank"
-      rel="noreferrer"
-      className="text-[10px] text-accent-brand hover:underline normal-case tracking-normal font-normal"
-    >
-      {label}
-    </a>
-  );
-}
-
-export function HostEditorRdpTab({
-  form,
-  setField,
-  setGuacField,
-  host,
-  credentials,
-}: {
-  form: HostEditorForm;
-  setField: HostEditorSetField;
-  setGuacField: GuacFieldSetter;
-  host?: { macAddress?: string | null } | null;
-  credentials?: { id: string; name: string; username: string }[];
-}) {
-  const { t } = useTranslation();
-
-  return (
-    <>
-      <SectionCard
-        title={t("hosts.guac.connection")}
-        icon={<Globe className="size-3.5" />}
-        action={
-          <DocsLinkAction
-            href="https://docs.termix.site/setup/remote-desktop"
-            label={t("hosts.docsLink")}
-          />
-        }
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.rdpPort")}
-            </label>
-            <Input
-              type="number"
-              placeholder="3389"
-              value={form.rdpPort}
-              onChange={(e) => setField("rdpPort", Number(e.target.value))}
-              className="[appearance:textfield] [&::-webkit-outer-spin-button]:appearance-none [&::-webkit-inner-spin-button]:appearance-none"
-            />
-          </div>
-        </div>
-      </SectionCard>
-      <SectionCard
-        title={t("hosts.guac.guacdProxy")}
-        icon={<Cpu className="size-3.5" />}
-      >
-        <div className="grid grid-cols-1 md:grid-cols-2 gap-4 py-3">
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.guacdHostname")}
-            </label>
-            <Input
-              placeholder={t("hosts.guac.guacdHostnamePlaceholder")}
-              value={(form.guacamoleConfig["guacd-hostname"] as string) ?? ""}
-              onChange={(e) => setGuacField("guacd-hostname", e.target.value)}
-            />
-          </div>
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.guacdPort")}
-            </label>
-            <Input
-              type="number"
-              placeholder="4822"
-              value={(form.guacamoleConfig["guacd-port"] as string) ?? ""}
-              onChange={(e) => setGuacField("guacd-port", e.target.value)}
-              className="[appearance:textfield] [&::-webkit-outer-spin-button]:appearance-none [&::-webkit-inner-spin-button]:appearance-none"
-            />
-          </div>
-          <p className="col-span-full text-[10px] text-muted-foreground -mt-2">
-            {t("hosts.guac.guacdProxyDesc")}
-          </p>
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("hosts.guac.authentication")}
-        icon={<Shield className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.authMethod")}
-            </label>
-            <div className="flex gap-2">
-              {(
-                [
-                  "direct",
-                  ...(credentials && credentials.length > 0
-                    ? (["credential"] as const)
-                    : []),
-                  "none",
-                ] as const
-              ).map((m) => (
-                <button
-                  key={m}
-                  type="button"
-                  onClick={() => setField("rdpAuthType", m)}
-                  className={`px-3 py-1.5 text-[10px] font-bold uppercase tracking-widest border transition-colors ${
-                    form.rdpAuthType === m
-                      ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand"
-                      : "border-border text-muted-foreground hover:text-foreground"
-                  }`}
-                >
-                  {t(
-                    `hosts.guac.authType${m.charAt(0).toUpperCase() + m.slice(1)}`,
-                  )}
-                </button>
-              ))}
-            </div>
-          </div>
-          {form.rdpAuthType === "none" ? (
-            <p className="text-[10px] text-muted-foreground">
-              {t("hosts.guac.authTypeNoneDesc")}
-            </p>
-          ) : (
-            <div className="grid grid-cols-1 md:grid-cols-2 gap-4">
-              {form.rdpAuthType === "credential" &&
-              credentials &&
-              credentials.length > 0 ? (
-                <div className="flex flex-col gap-1.5 col-span-full">
-                  <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                    {t("hosts.guac.storedCredential")}
-                  </label>
-                  <Select2
-                    value={form.rdpCredentialId}
-                    onChange={(e) =>
-                      setField("rdpCredentialId", e.target.value)
-                    }
-                    className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-                  >
-                    <option value="">{t("hosts.guac.selectCredential")}</option>
-                    {credentials.map((c) => (
-                      <option key={c.id} value={c.id}>
-                        {c.username ? `${c.name} (${c.username})` : c.name}
-                      </option>
-                    ))}
-                  </Select2>
-                </div>
-              ) : (
-                <>
-                  <div className="flex flex-col gap-1.5">
-                    <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                      {t("hosts.guac.username")}
-                    </label>
-                    <Input
-                      placeholder="Administrator"
-                      value={form.rdpUser}
-                      onChange={(e) => setField("rdpUser", e.target.value)}
-                    />
-                  </div>
-                  <div className="flex flex-col gap-1.5">
-                    <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                      {t("hosts.guac.password")}
-                    </label>
-                    <PasswordInput
-                      className="h-8 text-xs pr-8"
-                      placeholder={
-                        form.rdpPassword === HOST_PROTOCOL_SECRET_KEPT
-                          ? t("hosts.guac.passwordSaved")
-                          : "••••••••"
-                      }
-                      value={
-                        form.rdpPassword === HOST_PROTOCOL_SECRET_KEPT
-                          ? ""
-                          : form.rdpPassword
-                      }
-                      onFocus={() => {
-                        if (form.rdpPassword === HOST_PROTOCOL_SECRET_KEPT)
-                          setField("rdpPassword", "");
-                      }}
-                      onChange={(e) => setField("rdpPassword", e.target.value)}
-                    />
-                  </div>
-                </>
-              )}
-              <div className="flex flex-col gap-1.5">
-                <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                  {t("hosts.guac.domain")}
-                </label>
-                <Input
-                  placeholder="WORKGROUP"
-                  value={form.domain}
-                  onChange={(e) => setField("domain", e.target.value)}
-                />
-              </div>
-            </div>
-          )}
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("hosts.guac.connectionSettings")}
-        icon={<Shield className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.securityMode")}
-            </label>
-            <Select2
-              className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-              value={form.security ?? "any"}
-              onChange={(e) => setField("security", e.target.value)}
-            >
-              <option value="any">{t("hosts.guac.options.any")}</option>
-              <option value="nla">NLA</option>
-              <option value="nla-ext">
-                {t("hosts.guac.options.nlaExtended")}
-              </option>
-              <option value="tls">TLS</option>
-              <option value="vmconnect">VMConnect</option>
-              <option value="rdp">RDP</option>
-            </Select2>
-          </div>
-          <SettingRow
-            label={t("hosts.guac.ignoreCertificate")}
-            description={t("hosts.guac.ignoreCertificateDesc")}
-          >
-            <FakeSwitch
-              checked={form.ignoreCert}
-              onChange={(v) => setField("ignoreCert", v)}
-            />
-          </SettingRow>
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.loadBalanceInfo")}
-            </label>
-            <Input
-              placeholder="tsv://MS Terminal Services Plugin.1.CollectionName"
-              value={
-                (form.guacamoleConfig["load-balance-info"] as string) ?? ""
-              }
-              onChange={(e) =>
-                setGuacField("load-balance-info", e.target.value)
-              }
-            />
-            <p className="text-[10px] text-muted-foreground">
-              {t("hosts.guac.loadBalanceInfoDesc")}
-            </p>
-          </div>
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("hosts.guac.displaySettings")}
-        icon={<Monitor className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.colorDepth")}
-            </label>
-            <Select2
-              className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-              value={form.guacamoleConfig["color-depth"] ?? "auto"}
-              onChange={(e) => setGuacField("color-depth", e.target.value)}
-            >
-              <option value="auto">{t("hosts.guac.options.auto")}</option>
-              <option value="8">{t("hosts.guac.options.color8")}</option>
-              <option value="16">{t("hosts.guac.options.color16")}</option>
-              <option value="24">{t("hosts.guac.options.color24")}</option>
-              <option value="32">{t("hosts.guac.options.color32")}</option>
-            </Select2>
-          </div>
-          <div className="grid grid-cols-1 md:grid-cols-2 gap-4">
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.width")}
-              </label>
-              <Input
-                type="number"
-                placeholder="Auto"
-                value={form.guacamoleConfig["width"] ?? ""}
-                onChange={(e) => setGuacField("width", e.target.value)}
-                className="[appearance:textfield] [&::-webkit-outer-spin-button]:appearance-none [&::-webkit-inner-spin-button]:appearance-none"
-              />
-            </div>
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.height")}
-              </label>
-              <Input
-                type="number"
-                placeholder="Auto"
-                value={form.guacamoleConfig["height"] ?? ""}
-                onChange={(e) => setGuacField("height", e.target.value)}
-                className="[appearance:textfield] [&::-webkit-outer-spin-button]:appearance-none [&::-webkit-inner-spin-button]:appearance-none"
-              />
-            </div>
-          </div>
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.dpi")}
-            </label>
-            <Input
-              type="number"
-              placeholder="96"
-              value={form.guacamoleConfig["dpi"] ?? ""}
-              onChange={(e) => setGuacField("dpi", e.target.value)}
-              className="[appearance:textfield] [&::-webkit-outer-spin-button]:appearance-none [&::-webkit-inner-spin-button]:appearance-none"
-            />
-          </div>
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.resizeMethod")}
-            </label>
-            <Select2
-              className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-              value={form.guacamoleConfig["resize-method"] ?? "auto"}
-              onChange={(e) => setGuacField("resize-method", e.target.value)}
-            >
-              <option value="auto">{t("hosts.guac.options.auto")}</option>
-              <option value="display-update">
-                {t("hosts.guac.options.displayUpdate")}
-              </option>
-              <option value="reconnect">
-                {t("hosts.guac.options.reconnect")}
-              </option>
-            </Select2>
-          </div>
-          <SettingRow
-            label={t("hosts.guac.forceLossless")}
-            description={t("hosts.guac.forceLosslessDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["force-lossless"]}
-              onChange={(v) => setGuacField("force-lossless", v)}
-            />
-          </SettingRow>
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("hosts.guac.audioSettings")}
-        icon={<Activity className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-0 py-1">
-          <SettingRow
-            label={t("hosts.guac.disableAudio")}
-            description={t("hosts.guac.disableAudioDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["disable-audio"]}
-              onChange={(v) => setGuacField("disable-audio", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.enableAudioInput")}
-            description={t("hosts.guac.enableAudioInputDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["enable-audio-input"]}
-              onChange={(v) => setGuacField("enable-audio-input", v)}
-            />
-          </SettingRow>
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("hosts.guac.rdpPerformance")}
-        icon={<Zap className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-0 py-1">
-          <SettingRow
-            label={t("hosts.guac.wallpaper")}
-            description={t("hosts.guac.wallpaperDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["enable-wallpaper"]}
-              onChange={(v) => setGuacField("enable-wallpaper", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.theming")}
-            description={t("hosts.guac.themingDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["enable-theming"]}
-              onChange={(v) => setGuacField("enable-theming", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.fontSmoothing")}
-            description={t("hosts.guac.fontSmoothingDesc")}
-          >
-            <FakeSwitch
-              checked={form.guacamoleConfig["enable-font-smoothing"] !== false}
-              onChange={(v) => setGuacField("enable-font-smoothing", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.fullWindowDrag")}
-            description={t("hosts.guac.fullWindowDragDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["enable-full-window-drag"]}
-              onChange={(v) => setGuacField("enable-full-window-drag", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.desktopComposition")}
-            description={t("hosts.guac.desktopCompositionDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["enable-desktop-composition"]}
-              onChange={(v) => setGuacField("enable-desktop-composition", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.menuAnimations")}
-            description={t("hosts.guac.menuAnimationsDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["enable-menu-animations"]}
-              onChange={(v) => setGuacField("enable-menu-animations", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.disableBitmapCaching")}
-            description={t("hosts.guac.disableBitmapCachingDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["disable-bitmap-caching"]}
-              onChange={(v) => setGuacField("disable-bitmap-caching", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.disableOffscreenCaching")}
-            description={t("hosts.guac.disableOffscreenCachingDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["disable-offscreen-caching"]}
-              onChange={(v) => setGuacField("disable-offscreen-caching", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.disableGlyphCaching")}
-            description={t("hosts.guac.disableGlyphCachingDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["disable-glyph-caching"]}
-              onChange={(v) => setGuacField("disable-glyph-caching", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.enableGfx")}
-            description={t("hosts.guac.enableGfxDesc")}
-          >
-            <FakeSwitch
-              checked={form.guacamoleConfig["enable-gfx"] !== false}
-              onChange={(v) => setGuacField("enable-gfx", v)}
-            />
-          </SettingRow>
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("hosts.guac.deviceRedirection")}
-        icon={<Settings className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <SettingRow
-            label={t("hosts.guac.enablePrinting")}
-            description={t("hosts.guac.enablePrintingDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["enable-printing"]}
-              onChange={(v) => setGuacField("enable-printing", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.enableDriveRedirection")}
-            description={t("hosts.guac.enableDriveRedirectionDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["enable-drive"]}
-              onChange={(v) => setGuacField("enable-drive", v)}
-            />
-          </SettingRow>
-          <div className="grid grid-cols-1 md:grid-cols-2 gap-3 border-t border-border pt-3">
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.driveName")}
-              </label>
-              <Input
-                placeholder={t("hosts.guac.driveNamePlaceholder")}
-                value={form.guacamoleConfig["drive-name"] ?? ""}
-                onChange={(e) => setGuacField("drive-name", e.target.value)}
-              />
-            </div>
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.drivePath")}
-              </label>
-              <Input
-                placeholder="/home/user/shared"
-                value={form.guacamoleConfig["drive-path"] ?? ""}
-                onChange={(e) => setGuacField("drive-path", e.target.value)}
-              />
-            </div>
-          </div>
-          <SettingRow
-            label={t("hosts.guac.createDrivePath")}
-            description={t("hosts.guac.createDrivePathDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["create-drive-path"]}
-              onChange={(v) => setGuacField("create-drive-path", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.disableDownload")}
-            description={t("hosts.guac.disableDownloadDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["disable-download"]}
-              onChange={(v) => setGuacField("disable-download", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.disableUpload")}
-            description={t("hosts.guac.disableUploadDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["disable-upload"]}
-              onChange={(v) => setGuacField("disable-upload", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.enableTouch")}
-            description={t("hosts.guac.enableTouchDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["enable-touch"]}
-              onChange={(v) => setGuacField("enable-touch", v)}
-            />
-          </SettingRow>
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("hosts.guac.session")}
-        icon={<Server className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.clientName")}
-            </label>
-            <Input
-              placeholder="Termix"
-              value={form.guacamoleConfig["client-name"] ?? ""}
-              onChange={(e) => setGuacField("client-name", e.target.value)}
-            />
-          </div>
-          <SettingRow
-            label={t("hosts.guac.consoleSession")}
-            description={t("hosts.guac.consoleSessionDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["console"]}
-              onChange={(v) => setGuacField("console", v)}
-            />
-          </SettingRow>
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.initialProgram")}
-            </label>
-            <Input
-              placeholder="e.g. cmd.exe"
-              value={form.guacamoleConfig["initial-program"] ?? ""}
-              onChange={(e) => setGuacField("initial-program", e.target.value)}
-            />
-          </div>
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.serverLayout")}
-            </label>
-            <Select2
-              className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-              value={form.guacamoleConfig["server-layout"] ?? "auto"}
-              onChange={(e) => setGuacField("server-layout", e.target.value)}
-            >
-              <option value="auto">{t("hosts.guac.options.auto")}</option>
-              <option>en-us-qwerty</option>
-              <option>en-gb-qwerty</option>
-              <option>de-de-qwertz</option>
-              <option>de-ch-qwertz</option>
-              <option>fr-fr-azerty</option>
-              <option>fr-be-azerty</option>
-              <option>it-it-qwerty</option>
-              <option>sv-se-qwerty</option>
-              <option>ja-jp-qwerty</option>
-              <option>pt-br-qwerty</option>
-              <option>es-es-qwerty</option>
-              <option>{t("hosts.guac.options.failsafe")}</option>
-            </Select2>
-          </div>
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.timezone")}
-            </label>
-            <Input
-              placeholder="e.g. America/New_York"
-              value={form.guacamoleConfig["timezone"] ?? ""}
-              onChange={(e) => setGuacField("timezone", e.target.value)}
-            />
-          </div>
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("hosts.guac.gateway")}
-        icon={<Network className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <div className="grid grid-cols-1 md:grid-cols-2 gap-3">
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.gatewayHostname")}
-              </label>
-              <Input
-                placeholder="gateway.example.com"
-                value={form.guacamoleConfig["gateway-hostname"] ?? ""}
-                onChange={(e) =>
-                  setGuacField("gateway-hostname", e.target.value)
-                }
-              />
-            </div>
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.gatewayPort")}
-              </label>
-              <Input
-                type="number"
-                placeholder="443"
-                value={form.guacamoleConfig["gateway-port"] ?? ""}
-                onChange={(e) => setGuacField("gateway-port", e.target.value)}
-              />
-            </div>
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.gatewayUsername")}
-              </label>
-              <Input
-                placeholder="user"
-                value={form.guacamoleConfig["gateway-username"] ?? ""}
-                onChange={(e) =>
-                  setGuacField("gateway-username", e.target.value)
-                }
-              />
-            </div>
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.gatewayPassword")}
-              </label>
-              <PasswordInput
-                className="h-8 text-xs pr-8"
-                placeholder="••••••••"
-                value={form.guacamoleConfig["gateway-password"] ?? ""}
-                onChange={(e) =>
-                  setGuacField("gateway-password", e.target.value)
-                }
-              />
-            </div>
-            <div className="flex flex-col gap-1.5 col-span-2">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.gatewayDomain")}
-              </label>
-              <Input
-                placeholder="DOMAIN"
-                value={form.guacamoleConfig["gateway-domain"] ?? ""}
-                onChange={(e) => setGuacField("gateway-domain", e.target.value)}
-              />
-            </div>
-          </div>
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("hosts.guac.remoteApp")}
-        icon={<Monitor className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.remoteAppProgram")}
-            </label>
-            <Input
-              placeholder="||MyApp"
-              value={form.guacamoleConfig["remote-app"] ?? ""}
-              onChange={(e) => setGuacField("remote-app", e.target.value)}
-            />
-          </div>
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.workingDirectory")}
-            </label>
-            <Input
-              placeholder="C:\Apps\MyApp"
-              value={form.guacamoleConfig["remote-app-dir"] ?? ""}
-              onChange={(e) => setGuacField("remote-app-dir", e.target.value)}
-            />
-          </div>
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.arguments")}
-            </label>
-            <Input
-              placeholder="--flag value"
-              value={form.guacamoleConfig["remote-app-args"] ?? ""}
-              onChange={(e) => setGuacField("remote-app-args", e.target.value)}
-            />
-          </div>
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("hosts.guac.clipboard")}
-        icon={<Copy className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.normalizeLineEndings")}
-            </label>
-            <Select2
-              className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-              value={form.guacamoleConfig["normalize-clipboard"] ?? "auto"}
-              onChange={(e) =>
-                setGuacField("normalize-clipboard", e.target.value)
-              }
-            >
-              <option value="auto">{t("hosts.guac.options.auto")}</option>
-              <option value="preserve">
-                {t("hosts.guac.options.preserve")}
-              </option>
-              <option value="unix">{t("hosts.guac.options.unix")}</option>
-              <option value="windows">{t("hosts.guac.options.windows")}</option>
-            </Select2>
-          </div>
-          <SettingRow
-            label={t("hosts.guac.disableCopy")}
-            description={t("hosts.guac.disableCopyDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["disable-copy"]}
-              onChange={(v) => setGuacField("disable-copy", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.disablePaste")}
-            description={t("hosts.guac.disablePasteDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["disable-paste"]}
-              onChange={(v) => setGuacField("disable-paste", v)}
-            />
-          </SettingRow>
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("hosts.guac.sessionRecording")}
-        icon={<Activity className="size-3.5" />}
-        action={
-          <DocsLinkAction
-            href="https://docs.termix.site/setup/remote-desktop#session-recording"
-            label={t("hosts.docsLink")}
-          />
-        }
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <SettingRow
-            label={t("hosts.guac.createPathIfMissing")}
-            description={t("hosts.guac.createPathIfMissingDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["create-recording-path"]}
-              onChange={(v) => setGuacField("create-recording-path", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.excludeOutput")}
-            description={t("hosts.guac.excludeOutputDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["recording-exclude-output"]}
-              onChange={(v) => setGuacField("recording-exclude-output", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.excludeMouse")}
-            description={t("hosts.guac.excludeMouseDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["recording-exclude-mouse"]}
-              onChange={(v) => setGuacField("recording-exclude-mouse", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.includeKeystrokes")}
-            description={t("hosts.guac.includeKeystrokesDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["recording-include-keys"]}
-              onChange={(v) => setGuacField("recording-include-keys", v)}
-            />
-          </SettingRow>
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("hosts.guac.wakeOnLan")}
-        icon={<Zap className="size-3.5" />}
-        action={
-          <DocsLinkAction
-            href="https://docs.termix.site/features/networking/wake-on-lan"
-            label={t("hosts.docsLink")}
-          />
-        }
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <SettingRow
-            label={t("hosts.guac.sendWolPacket")}
-            description={t("hosts.guac.sendWolPacketDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["wol-send-packet"]}
-              onChange={(v) => setGuacField("wol-send-packet", v)}
-            />
-          </SettingRow>
-          <div className="grid grid-cols-1 md:grid-cols-2 gap-3">
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.macAddress")}
-              </label>
-              <Input
-                placeholder="AA:BB:CC:DD:EE:FF"
-                value={
-                  form.guacamoleConfig["wol-mac-addr"] ?? host?.macAddress ?? ""
-                }
-                onChange={(e) => setGuacField("wol-mac-addr", e.target.value)}
-              />
-            </div>
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.broadcastAddress")}
-              </label>
-              <Input
-                placeholder="255.255.255.255"
-                value={form.guacamoleConfig["wol-broadcast-addr"] ?? ""}
-                onChange={(e) =>
-                  setGuacField("wol-broadcast-addr", e.target.value)
-                }
-              />
-            </div>
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.udpPort")}
-              </label>
-              <Input
-                type="number"
-                placeholder="9"
-                value={form.guacamoleConfig["wol-udp-port"] ?? ""}
-                onChange={(e) => setGuacField("wol-udp-port", e.target.value)}
-              />
-            </div>
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.waitTimeS")}
-              </label>
-              <Input
-                type="number"
-                placeholder="0"
-                value={form.guacamoleConfig["wol-wait-time"] ?? ""}
-                onChange={(e) => setGuacField("wol-wait-time", e.target.value)}
-              />
-            </div>
-          </div>
-        </div>
-      </SectionCard>
-    </>
-  );
-}
-
-export function HostEditorVncTab({
-  form,
-  setField,
-  setGuacField,
-  host,
-  credentials,
-}: {
-  form: HostEditorForm;
-  setField: HostEditorSetField;
-  setGuacField: GuacFieldSetter;
-  host?: { macAddress?: string | null } | null;
-  credentials?: { id: string; name: string; username: string }[];
-}) {
-  const { t } = useTranslation();
-
-  return (
-    <>
-      <SectionCard
-        title={t("hosts.guac.connection")}
-        icon={<Globe className="size-3.5" />}
-        action={
-          <DocsLinkAction
-            href="https://docs.termix.site/setup/remote-desktop"
-            label={t("hosts.docsLink")}
-          />
-        }
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.vncPort")}
-            </label>
-            <Input
-              type="number"
-              placeholder="5900"
-              value={form.vncPort}
-              onChange={(e) => setField("vncPort", Number(e.target.value))}
-              className="[appearance:textfield] [&::-webkit-outer-spin-button]:appearance-none [&::-webkit-inner-spin-button]:appearance-none"
-            />
-          </div>
-        </div>
-      </SectionCard>
-      <SectionCard
-        title={t("hosts.guac.guacdProxy")}
-        icon={<Cpu className="size-3.5" />}
-      >
-        <div className="grid grid-cols-1 md:grid-cols-2 gap-4 py-3">
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.guacdHostname")}
-            </label>
-            <Input
-              placeholder={t("hosts.guac.guacdHostnamePlaceholder")}
-              value={(form.guacamoleConfig["guacd-hostname"] as string) ?? ""}
-              onChange={(e) => setGuacField("guacd-hostname", e.target.value)}
-            />
-          </div>
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.guacdPort")}
-            </label>
-            <Input
-              type="number"
-              placeholder="4822"
-              value={(form.guacamoleConfig["guacd-port"] as string) ?? ""}
-              onChange={(e) => setGuacField("guacd-port", e.target.value)}
-              className="[appearance:textfield] [&::-webkit-outer-spin-button]:appearance-none [&::-webkit-inner-spin-button]:appearance-none"
-            />
-          </div>
-          <p className="col-span-full text-[10px] text-muted-foreground -mt-2">
-            {t("hosts.guac.guacdProxyDesc")}
-          </p>
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("hosts.guac.authentication")}
-        icon={<Shield className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-4 py-3">
-          {credentials && credentials.length > 0 && (
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.authMethod")}
-              </label>
-              <div className="flex gap-2">
-                {(["direct", "credential"] as const).map((m) => (
-                  <button
-                    key={m}
-                    type="button"
-                    onClick={() => setField("vncAuthType", m)}
-                    className={`px-3 py-1.5 text-[10px] font-bold uppercase tracking-widest border transition-colors ${
-                      form.vncAuthType === m
-                        ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand"
-                        : "border-border text-muted-foreground hover:text-foreground"
-                    }`}
-                  >
-                    {t(
-                      `hosts.guac.authType${m.charAt(0).toUpperCase() + m.slice(1)}`,
-                    )}
-                  </button>
-                ))}
-              </div>
-            </div>
-          )}
-          {form.vncAuthType === "credential" &&
-          credentials &&
-          credentials.length > 0 ? (
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.storedCredential")}
-              </label>
-              <Select2
-                value={form.vncCredentialId}
-                onChange={(e) => setField("vncCredentialId", e.target.value)}
-                className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-              >
-                <option value="">{t("hosts.guac.selectCredential")}</option>
-                {credentials.map((c) => (
-                  <option key={c.id} value={c.id}>
-                    {c.name}
-                  </option>
-                ))}
-              </Select2>
-            </div>
-          ) : (
-            <div className="grid grid-cols-1 md:grid-cols-2 gap-4">
-              <div className="flex flex-col gap-1.5">
-                <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                  {t("hosts.guac.vncPassword")}
-                </label>
-                <PasswordInput
-                  className="h-8 text-xs pr-8"
-                  placeholder={
-                    form.vncPassword === HOST_PROTOCOL_SECRET_KEPT
-                      ? t("hosts.guac.passwordSaved")
-                      : "••••••••"
-                  }
-                  value={
-                    form.vncPassword === HOST_PROTOCOL_SECRET_KEPT
-                      ? ""
-                      : form.vncPassword
-                  }
-                  onFocus={() => {
-                    if (form.vncPassword === HOST_PROTOCOL_SECRET_KEPT)
-                      setField("vncPassword", "");
-                  }}
-                  onChange={(e) => setField("vncPassword", e.target.value)}
-                />
-              </div>
-              <div className="flex flex-col gap-1.5">
-                <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                  {t("hosts.guac.vncUsernameOptional")}
-                </label>
-                <Input
-                  placeholder={t("hosts.guac.vncLeaveBlank")}
-                  value={form.vncUser}
-                  onChange={(e) => setField("vncUser", e.target.value)}
-                />
-              </div>
-            </div>
-          )}
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("hosts.guac.displaySettings")}
-        icon={<Monitor className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.colorDepth")}
-            </label>
-            <Select2
-              className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-              value={form.guacamoleConfig["color-depth"] ?? "auto"}
-              onChange={(e) => setGuacField("color-depth", e.target.value)}
-            >
-              <option value="auto">{t("hosts.guac.options.auto")}</option>
-              <option value="8">{t("hosts.guac.options.color8")}</option>
-              <option value="16">{t("hosts.guac.options.color16")}</option>
-              <option value="24">{t("hosts.guac.options.color24")}</option>
-              <option value="32">{t("hosts.guac.options.color32")}</option>
-            </Select2>
-          </div>
-          <div className="grid grid-cols-1 md:grid-cols-2 gap-4">
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.width")}
-              </label>
-              <Input
-                type="number"
-                placeholder="Auto"
-                value={form.guacamoleConfig["width"] ?? ""}
-                onChange={(e) => setGuacField("width", e.target.value)}
-              />
-            </div>
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.height")}
-              </label>
-              <Input
-                type="number"
-                placeholder="Auto"
-                value={form.guacamoleConfig["height"] ?? ""}
-                onChange={(e) => setGuacField("height", e.target.value)}
-              />
-            </div>
-          </div>
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.resizeMethod")}
-            </label>
-            <Select2
-              className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-              value={form.guacamoleConfig["resize-method"] ?? "auto"}
-              onChange={(e) => setGuacField("resize-method", e.target.value)}
-            >
-              <option value="auto">{t("hosts.guac.options.auto")}</option>
-              <option value="display-update">
-                {t("hosts.guac.options.displayUpdate")}
-              </option>
-              <option value="reconnect">
-                {t("hosts.guac.options.reconnect")}
-              </option>
-            </Select2>
-          </div>
-          <SettingRow
-            label={t("hosts.guac.forceLossless")}
-            description={t("hosts.guac.forceLosslessDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["force-lossless"]}
-              onChange={(v) => setGuacField("force-lossless", v)}
-            />
-          </SettingRow>
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("hosts.guac.audioSettings")}
-        icon={<Activity className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-0 py-1">
-          <SettingRow
-            label={t("hosts.guac.disableAudio")}
-            description={t("hosts.guac.disableAudioDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["disable-audio"]}
-              onChange={(v) => setGuacField("disable-audio", v)}
-            />
-          </SettingRow>
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("hosts.guac.vncSettings")}
-        icon={<Settings className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.cursorMode")}
-            </label>
-            <Select2
-              className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-              value={form.guacamoleConfig["cursor"] ?? "auto"}
-              onChange={(e) => setGuacField("cursor", e.target.value)}
-            >
-              <option value="auto">{t("hosts.guac.options.auto")}</option>
-              <option value="local">{t("hosts.guac.options.local")}</option>
-              <option value="remote">{t("hosts.guac.options.remote")}</option>
-            </Select2>
-          </div>
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.serverLayout")}
-            </label>
-            <Select2
-              className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-              value={form.guacamoleConfig["server-layout"] ?? "auto"}
-              onChange={(e) => setGuacField("server-layout", e.target.value)}
-            >
-              <option value="auto">{t("hosts.guac.options.auto")}</option>
-              <option>en-us-qwerty</option>
-              <option>en-gb-qwerty</option>
-              <option>de-de-qwertz</option>
-              <option>de-ch-qwertz</option>
-              <option>fr-fr-azerty</option>
-              <option>fr-be-azerty</option>
-              <option>it-it-qwerty</option>
-              <option>sv-se-qwerty</option>
-              <option>ja-jp-qwerty</option>
-              <option>pt-br-qwerty</option>
-              <option>es-es-qwerty</option>
-              <option>{t("hosts.guac.options.failsafe")}</option>
-            </Select2>
-          </div>
-          <SettingRow
-            label={t("hosts.guac.swapRedBlue")}
-            description={t("hosts.guac.swapRedBlueDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["swap-red-blue"]}
-              onChange={(v) => setGuacField("swap-red-blue", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.readOnly")}
-            description={t("hosts.guac.readOnlyDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["read-only"]}
-              onChange={(v) => setGuacField("read-only", v)}
-            />
-          </SettingRow>
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("hosts.guac.clipboard")}
-        icon={<Copy className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.normalizeLineEndings")}
-            </label>
-            <Select2
-              className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-              value={form.guacamoleConfig["normalize-clipboard"] ?? "auto"}
-              onChange={(e) =>
-                setGuacField("normalize-clipboard", e.target.value)
-              }
-            >
-              <option value="auto">{t("hosts.guac.options.auto")}</option>
-              <option value="preserve">
-                {t("hosts.guac.options.preserve")}
-              </option>
-              <option value="unix">{t("hosts.guac.options.unix")}</option>
-              <option value="windows">{t("hosts.guac.options.windows")}</option>
-            </Select2>
-          </div>
-          <SettingRow
-            label={t("hosts.guac.disableCopy")}
-            description={t("hosts.guac.disableCopyDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["disable-copy"]}
-              onChange={(v) => setGuacField("disable-copy", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.disablePaste")}
-            description={t("hosts.guac.disablePasteDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["disable-paste"]}
-              onChange={(v) => setGuacField("disable-paste", v)}
-            />
-          </SettingRow>
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("hosts.guac.sessionRecording")}
-        icon={<Activity className="size-3.5" />}
-        action={
-          <DocsLinkAction
-            href="https://docs.termix.site/setup/remote-desktop#session-recording"
-            label={t("hosts.docsLink")}
-          />
-        }
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <SettingRow
-            label={t("hosts.guac.createPathIfMissing")}
-            description={t("hosts.guac.createPathIfMissingDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["create-recording-path"]}
-              onChange={(v) => setGuacField("create-recording-path", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.excludeOutput")}
-            description={t("hosts.guac.excludeOutputDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["recording-exclude-output"]}
-              onChange={(v) => setGuacField("recording-exclude-output", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.excludeMouse")}
-            description={t("hosts.guac.excludeMouseDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["recording-exclude-mouse"]}
-              onChange={(v) => setGuacField("recording-exclude-mouse", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.includeKeystrokes")}
-            description={t("hosts.guac.includeKeystrokesDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["recording-include-keys"]}
-              onChange={(v) => setGuacField("recording-include-keys", v)}
-            />
-          </SettingRow>
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("hosts.guac.wakeOnLan")}
-        icon={<Zap className="size-3.5" />}
-        action={
-          <DocsLinkAction
-            href="https://docs.termix.site/features/networking/wake-on-lan"
-            label={t("hosts.docsLink")}
-          />
-        }
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <SettingRow
-            label={t("hosts.guac.sendWolPacket")}
-            description={t("hosts.guac.sendWolPacketDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["wol-send-packet"]}
-              onChange={(v) => setGuacField("wol-send-packet", v)}
-            />
-          </SettingRow>
-          <div className="grid grid-cols-1 md:grid-cols-2 gap-3">
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.macAddress")}
-              </label>
-              <Input
-                placeholder="AA:BB:CC:DD:EE:FF"
-                value={
-                  form.guacamoleConfig["wol-mac-addr"] ?? host?.macAddress ?? ""
-                }
-                onChange={(e) => setGuacField("wol-mac-addr", e.target.value)}
-              />
-            </div>
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.broadcastAddress")}
-              </label>
-              <Input
-                placeholder="255.255.255.255"
-                value={form.guacamoleConfig["wol-broadcast-addr"] ?? ""}
-                onChange={(e) =>
-                  setGuacField("wol-broadcast-addr", e.target.value)
-                }
-              />
-            </div>
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.udpPort")}
-              </label>
-              <Input
-                type="number"
-                placeholder="9"
-                value={form.guacamoleConfig["wol-udp-port"] ?? ""}
-                onChange={(e) => setGuacField("wol-udp-port", e.target.value)}
-              />
-            </div>
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.waitTimeS")}
-              </label>
-              <Input
-                type="number"
-                placeholder="0"
-                value={form.guacamoleConfig["wol-wait-time"] ?? ""}
-                onChange={(e) => setGuacField("wol-wait-time", e.target.value)}
-              />
-            </div>
-          </div>
-        </div>
-      </SectionCard>
-    </>
-  );
-}
-
-export function HostEditorTelnetTab({
-  form,
-  setField,
-  setGuacField,
-  credentials,
-}: {
-  form: HostEditorForm;
-  setField: HostEditorSetField;
-  setGuacField: GuacFieldSetter;
-  credentials?: { id: string; name: string; username: string }[];
-}) {
-  const { t } = useTranslation();
-
-  return (
-    <>
-      <SectionCard
-        title={t("hosts.guac.connection")}
-        icon={<Globe className="size-3.5" />}
-        action={
-          <DocsLinkAction
-            href="https://docs.termix.site/setup/remote-desktop"
-            label={t("hosts.docsLink")}
-          />
-        }
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.telnetPort")}
-            </label>
-            <Input
-              type="number"
-              placeholder="23"
-              value={form.telnetPort}
-              onChange={(e) => setField("telnetPort", Number(e.target.value))}
-              className="[appearance:textfield] [&::-webkit-outer-spin-button]:appearance-none [&::-webkit-inner-spin-button]:appearance-none"
-            />
-          </div>
-        </div>
-      </SectionCard>
-      <SectionCard
-        title={t("hosts.guac.guacdProxy")}
-        icon={<Cpu className="size-3.5" />}
-      >
-        <div className="grid grid-cols-1 md:grid-cols-2 gap-4 py-3">
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.guacdHostname")}
-            </label>
-            <Input
-              placeholder={t("hosts.guac.guacdHostnamePlaceholder")}
-              value={(form.guacamoleConfig["guacd-hostname"] as string) ?? ""}
-              onChange={(e) => setGuacField("guacd-hostname", e.target.value)}
-            />
-          </div>
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.guacdPort")}
-            </label>
-            <Input
-              type="number"
-              placeholder="4822"
-              value={(form.guacamoleConfig["guacd-port"] as string) ?? ""}
-              onChange={(e) => setGuacField("guacd-port", e.target.value)}
-              className="[appearance:textfield] [&::-webkit-outer-spin-button]:appearance-none [&::-webkit-inner-spin-button]:appearance-none"
-            />
-          </div>
-          <p className="col-span-full text-[10px] text-muted-foreground -mt-2">
-            {t("hosts.guac.guacdProxyDesc")}
-          </p>
-        </div>
-      </SectionCard>
-      <SectionCard
-        title={t("hosts.guac.authentication")}
-        icon={<Shield className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-4 py-3">
-          {credentials && credentials.length > 0 && (
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.authMethod")}
-              </label>
-              <div className="flex gap-2">
-                {(["direct", "credential"] as const).map((m) => (
-                  <button
-                    key={m}
-                    type="button"
-                    onClick={() => setField("telnetAuthType", m)}
-                    className={`px-3 py-1.5 text-[10px] font-bold uppercase tracking-widest border transition-colors ${
-                      form.telnetAuthType === m
-                        ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand"
-                        : "border-border text-muted-foreground hover:text-foreground"
-                    }`}
-                  >
-                    {t(
-                      `hosts.guac.authType${m.charAt(0).toUpperCase() + m.slice(1)}`,
-                    )}
-                  </button>
-                ))}
-              </div>
-            </div>
-          )}
-          {form.telnetAuthType === "credential" &&
-          credentials &&
-          credentials.length > 0 ? (
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.storedCredential")}
-              </label>
-              <Select2
-                value={form.telnetCredentialId}
-                onChange={(e) => setField("telnetCredentialId", e.target.value)}
-                className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-              >
-                <option value="">{t("hosts.guac.selectCredential")}</option>
-                {credentials.map((c) => (
-                  <option key={c.id} value={c.id}>
-                    {c.username ? `${c.name} (${c.username})` : c.name}
-                  </option>
-                ))}
-              </Select2>
-            </div>
-          ) : (
-            <div className="grid grid-cols-1 md:grid-cols-2 gap-4">
-              <div className="flex flex-col gap-1.5">
-                <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                  {t("hosts.guac.username")}
-                </label>
-                <Input
-                  placeholder="admin"
-                  value={form.telnetUser}
-                  onChange={(e) => setField("telnetUser", e.target.value)}
-                />
-              </div>
-              <div className="flex flex-col gap-1.5">
-                <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                  {t("hosts.guac.password")}
-                </label>
-                <PasswordInput
-                  className="h-8 text-xs pr-8"
-                  placeholder={
-                    form.telnetPassword === HOST_PROTOCOL_SECRET_KEPT
-                      ? t("hosts.guac.passwordSaved")
-                      : "••••••••"
-                  }
-                  value={
-                    form.telnetPassword === HOST_PROTOCOL_SECRET_KEPT
-                      ? ""
-                      : form.telnetPassword
-                  }
-                  onFocus={() => {
-                    if (form.telnetPassword === HOST_PROTOCOL_SECRET_KEPT)
-                      setField("telnetPassword", "");
-                  }}
-                  onChange={(e) => setField("telnetPassword", e.target.value)}
-                />
-              </div>
-            </div>
-          )}
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("hosts.guac.displaySettings")}
-        icon={<Monitor className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <div className="grid grid-cols-1 md:grid-cols-2 gap-4">
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.width")}
-              </label>
-              <Input
-                type="number"
-                placeholder="Auto"
-                value={form.guacamoleConfig["width"] ?? ""}
-                onChange={(e) => setGuacField("width", e.target.value)}
-              />
-            </div>
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.guac.height")}
-              </label>
-              <Input
-                type="number"
-                placeholder="Auto"
-                value={form.guacamoleConfig["height"] ?? ""}
-                onChange={(e) => setGuacField("height", e.target.value)}
-              />
-            </div>
-          </div>
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("hosts.guac.terminalSettings")}
-        icon={<Terminal className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.terminalType")}
-            </label>
-            <Select2
-              className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-              value={form.guacamoleConfig["terminal-type"] ?? "auto"}
-              onChange={(e) => setGuacField("terminal-type", e.target.value)}
-            >
-              <option value="auto">{t("hosts.guac.options.auto")}</option>
-              <option value="xterm">xterm</option>
-              <option value="xterm-256color">xterm-256color</option>
-              <option value="vt100">VT100</option>
-              <option value="vt220">VT220</option>
-            </Select2>
-          </div>
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.fontName")}
-            </label>
-            <Input
-              placeholder="monospace"
-              value={form.guacamoleConfig["font-name"] ?? ""}
-              onChange={(e) => setGuacField("font-name", e.target.value)}
-            />
-          </div>
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.fontSize")}
-            </label>
-            <Input
-              type="number"
-              value={form.guacamoleConfig["font-size"] ?? 12}
-              onChange={(e) =>
-                setGuacField("font-size", Number(e.target.value))
-              }
-            />
-          </div>
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.colorScheme")}
-            </label>
-            <Select2
-              className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-              value={form.guacamoleConfig["color-scheme"] ?? "auto"}
-              onChange={(e) => setGuacField("color-scheme", e.target.value)}
-            >
-              <option value="auto">{t("hosts.guac.options.auto")}</option>
-              <option value="black-white">
-                {t("hosts.guac.options.blackOnWhite")}
-              </option>
-              <option value="white-black">
-                {t("hosts.guac.options.whiteOnBlack")}
-              </option>
-              <option value="gray-black">
-                {t("hosts.guac.options.grayOnBlack")}
-              </option>
-              <option value="green-black">
-                {t("hosts.guac.options.greenOnBlack")}
-              </option>
-            </Select2>
-          </div>
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.guac.backspaceKey")}
-            </label>
-            <Select2
-              className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-              value={form.guacamoleConfig["backspace"] ?? "auto"}
-              onChange={(e) => setGuacField("backspace", e.target.value)}
-            >
-              <option value="auto">{t("hosts.guac.options.auto")}</option>
-              <option value="127">DEL (127)</option>
-              <option value="8">BS (8)</option>
-            </Select2>
-          </div>
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("hosts.guac.sessionRecording")}
-        icon={<Activity className="size-3.5" />}
-        action={
-          <DocsLinkAction
-            href="https://docs.termix.site/setup/remote-desktop#session-recording"
-            label={t("hosts.docsLink")}
-          />
-        }
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <SettingRow
-            label={t("hosts.guac.createPathIfMissing")}
-            description={t("hosts.guac.createPathIfMissingDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["create-recording-path"]}
-              onChange={(v) => setGuacField("create-recording-path", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.excludeOutput")}
-            description={t("hosts.guac.excludeOutputDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["recording-exclude-output"]}
-              onChange={(v) => setGuacField("recording-exclude-output", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.guac.includeKeystrokes")}
-            description={t("hosts.guac.includeKeystrokesDesc")}
-          >
-            <FakeSwitch
-              checked={!!form.guacamoleConfig["recording-include-keys"]}
-              onChange={(v) => setGuacField("recording-include-keys", v)}
-            />
-          </SettingRow>
-        </div>
-      </SectionCard>
-    </>
-  );
-}
diff --git a/plugins/remote-desktop/src/frontend/guacamole-api.ts b/plugins/remote-desktop/src/frontend/guacamole-api.ts
deleted file mode 100644
index 9ec59a906..000000000
--- a/plugins/remote-desktop/src/frontend/guacamole-api.ts
+++ /dev/null
@@ -1,309 +0,0 @@
-import type { PluginApiClient, TermixApp } from "@termix/plugin-sdk/frontend";
-import {
-  isElectron,
-  resolveRemoteHostId,
-  type ConnectionOrigin,
-} from "@termix/plugin-sdk/ui";
-import type { GuacamoleConfig } from "./guacamole-config";
-import { errorMessage } from "./host-remote";
-
-let app: Pick<TermixApp, "apiFor"> | null = null;
-
-/** Set in activate, cleared on deactivate. */
-export function setRemoteDesktopApp(next: Pick<TermixApp, "apiFor"> | null) {
-  app = next;
-}
-
-/**
- * Picks the backend that will actually serve this session, so the token and
- * status come from the same place as the connection.
- *
- * Outside Electron there is only one backend. Inside it, a host left on
- * Default still resolves to the connected server -- asking the embedded
- * backend would report the guacd *it* can reach rather than the one serving
- * the session. A host explicitly set to "This Device" (Support#1240) is
- * served by the embedded backend against the user's own guacd, so its calls
- * have to go there instead.
- *
- * Callers pass the origin explicitly rather than defaulting it: a default
- * silently sent a missed call site to the remote server, which fails with a
- * bare network error on a desktop that has none configured.
- */
-function guacamoleApi(origin: ConnectionOrigin): PluginApiClient {
-  if (!app) throw new Error("Remote Desktop is not active");
-  return app.apiFor(origin);
-}
-
-function apiError(error: unknown, action: string): Error {
-  return new Error(errorMessage(error, `Failed to ${action}`));
-}
-
-export interface GuacamoleTokenRequest {
-  protocol: "rdp" | "vnc" | "telnet";
-  hostname: string;
-  port?: number;
-  username?: string;
-  password?: string;
-  domain?: string;
-  security?: string;
-  ignoreCert?: boolean;
-  guacamoleConfig?: GuacamoleConfig;
-}
-
-export interface GuacamoleTokenResponse {
-  token: string;
-  guacamoleConnectionId?: string | null;
-  termixConnectId?: string;
-}
-
-type GuacamoleConfigSource = {
-  guacamoleConfig?: string | Record<string, unknown> | null;
-};
-
-export function getGuacamoleDpi(
-  source?: GuacamoleConfigSource,
-): number | undefined {
-  const config = source?.guacamoleConfig;
-  if (!config) return undefined;
-
-  let dpi: unknown;
-  if (typeof config === "string") {
-    try {
-      dpi = JSON.parse(config).dpi;
-    } catch {
-      return undefined;
-    }
-  } else {
-    dpi = config.dpi;
-  }
-
-  const parsedDpi = typeof dpi === "string" ? Number(dpi) : dpi;
-  if (
-    typeof parsedDpi !== "number" ||
-    !Number.isFinite(parsedDpi) ||
-    parsedDpi <= 0
-  ) {
-    return undefined;
-  }
-
-  return Math.trunc(parsedDpi);
-}
-
-function toGuacamoleParams(
-  config: GuacamoleTokenRequest["guacamoleConfig"],
-): Record<string, unknown> {
-  if (!config) return {};
-
-  const params: Record<string, unknown> = {};
-
-  const mappings: Record<string, string> = {
-    colorDepth: "color-depth",
-    resizeMethod: "resize-method",
-    forceLossless: "force-lossless",
-    disableAudio: "disable-audio",
-    enableAudioInput: "enable-audio-input",
-    enableWallpaper: "enable-wallpaper",
-    enableTheming: "enable-theming",
-    enableFontSmoothing: "enable-font-smoothing",
-    enableFullWindowDrag: "enable-full-window-drag",
-    enableDesktopComposition: "enable-desktop-composition",
-    enableMenuAnimations: "enable-menu-animations",
-    disableBitmapCaching: "disable-bitmap-caching",
-    disableOffscreenCaching: "disable-offscreen-caching",
-    disableGlyphCaching: "disable-glyph-caching",
-    disableGfx: "disable-gfx",
-    enablePrinting: "enable-printing",
-    printerName: "printer-name",
-    enableDrive: "enable-drive",
-    driveName: "drive-name",
-    drivePath: "drive-path",
-    createDrivePath: "create-drive-path",
-    disableDownload: "disable-download",
-    disableUpload: "disable-upload",
-    enableTouch: "enable-touch",
-    clientName: "client-name",
-    initialProgram: "initial-program",
-    serverLayout: "server-layout",
-    gatewayHostname: "gateway-hostname",
-    gatewayPort: "gateway-port",
-    gatewayUsername: "gateway-username",
-    gatewayPassword: "gateway-password",
-    gatewayDomain: "gateway-domain",
-    remoteApp: "remote-app",
-    remoteAppDir: "remote-app-dir",
-    remoteAppArgs: "remote-app-args",
-    normalizeClipboard: "normalize-clipboard",
-    disableCopy: "disable-copy",
-    disablePaste: "disable-paste",
-    swapRedBlue: "swap-red-blue",
-    readOnly: "read-only",
-    recordingPath: "recording-path",
-    recordingName: "recording-name",
-    createRecordingPath: "create-recording-path",
-    recordingExcludeOutput: "recording-exclude-output",
-    recordingExcludeMouse: "recording-exclude-mouse",
-    recordingIncludeKeys: "recording-include-keys",
-    wolSendPacket: "wol-send-packet",
-    wolMacAddr: "wol-mac-addr",
-    wolBroadcastAddr: "wol-broadcast-addr",
-    wolUdpPort: "wol-udp-port",
-    wolWaitTime: "wol-wait-time",
-  };
-
-  for (const [key, value] of Object.entries(config)) {
-    if (value !== undefined && value !== null && value !== "") {
-      const paramName = mappings[key] || key;
-      if (typeof value === "boolean") {
-        params[paramName] = value ? "true" : "false";
-      } else {
-        params[paramName] = value;
-      }
-    }
-  }
-
-  return params;
-}
-
-export async function getGuacamoleToken(
-  request: GuacamoleTokenRequest,
-  origin: ConnectionOrigin,
-): Promise<GuacamoleTokenResponse> {
-  try {
-    const guacParams = toGuacamoleParams(request.guacamoleConfig);
-
-    const response = await guacamoleApi(origin).post<GuacamoleTokenResponse>(
-      "/token",
-      {
-        type: request.protocol,
-        hostname: request.hostname,
-        port: request.port,
-        username: request.username,
-        password: request.password,
-        domain: request.domain,
-        security: request.security,
-        "ignore-cert": request.ignoreCert,
-        ...guacParams,
-      },
-    );
-    return response.data;
-  } catch (error) {
-    throw apiError(error, "get a connection token");
-  }
-}
-
-export async function getGuacamoleTokenFromHost(
-  hostId: number,
-  origin: ConnectionOrigin,
-  protocol?: "rdp" | "vnc" | "telnet",
-  promptedCredentials?: {
-    username?: string;
-    password?: string;
-    domain?: string;
-  },
-  syncId?: string | null,
-  tabInstanceId?: string,
-): Promise<GuacamoleTokenResponse> {
-  try {
-    // A locally-originated session is served by the embedded backend, which
-    // knows the host by its local id -- remapping it onto the remote
-    // server's id would address the wrong row, or fail outright when no
-    // server is configured at all.
-    const useRemote = isElectron() && origin === "remote";
-    const remoteHostId = useRemote ? await resolveRemoteHostId(syncId) : null;
-    if (useRemote && syncId && remoteHostId === null) {
-      throw new Error("The synced host does not exist on the remote server");
-    }
-    const targetHostId = remoteHostId ?? hostId;
-    const response = await guacamoleApi(origin).post<GuacamoleTokenResponse>(
-      `/connect-host/${targetHostId}`,
-      {
-        ...(protocol ? { protocol } : {}),
-        ...(tabInstanceId ? { tabInstanceId } : {}),
-        ...(promptedCredentials?.username
-          ? { promptedUsername: promptedCredentials.username }
-          : {}),
-        ...(promptedCredentials?.password
-          ? { promptedPassword: promptedCredentials.password }
-          : {}),
-        ...(promptedCredentials
-          ? { promptedDomain: promptedCredentials.domain ?? "" }
-          : {}),
-      },
-    );
-    return response.data;
-  } catch (error) {
-    throw apiError(error, "get a connection token");
-  }
-}
-
-export interface RemoteDesktopStatus {
-  enabled: boolean;
-  guacd: { status: string };
-}
-
-/** `probe: false` skips dialing guacd, for a caller that only needs `enabled`. */
-export async function getGuacdStatus(
-  origin: ConnectionOrigin,
-  options: {
-    probe?: boolean;
-    hostId?: number;
-    protocol?: "rdp" | "vnc" | "telnet";
-    syncId?: string | null;
-  } = {},
-): Promise<RemoteDesktopStatus> {
-  const params = new URLSearchParams();
-  if (options.probe === false) params.set("probe", "0");
-  if (options.hostId) {
-    const useRemote = isElectron() && origin === "remote";
-    const remoteHostId = useRemote
-      ? await resolveRemoteHostId(options.syncId)
-      : null;
-    if (useRemote && options.syncId && remoteHostId === null) {
-      throw new Error("The synced host does not exist on the remote server");
-    }
-    params.set("hostId", String(remoteHostId ?? options.hostId));
-    if (options.protocol) params.set("protocol", options.protocol);
-  }
-  const query = params.toString();
-  const response = await guacamoleApi(origin).get<RemoteDesktopStatus>(
-    query ? `/status?${query}` : "/status",
-  );
-  return response.data;
-}
-
-export async function getGuacamoleConnectionId(
-  connectId: string,
-  origin: ConnectionOrigin,
-  signal?: AbortSignal,
-): Promise<string | null> {
-  const response = await guacamoleApi(origin).get<{
-    guacamoleConnectionId?: string | null;
-  }>(`/connection/${encodeURIComponent(connectId)}`, { signal });
-  return response.data.guacamoleConnectionId ?? null;
-}
-
-export async function nativeRdpAvailable(): Promise<boolean> {
-  if (!isElectron()) return false;
-  try {
-    const response = await guacamoleApi("local").get<{ available: boolean }>(
-      "/native-rdp",
-    );
-    return response.data.available === true;
-  } catch {
-    return false;
-  }
-}
-
-/** Always the embedded backend: it is the one that can reach Electron. */
-export async function openNativeRdp(request: {
-  host: string;
-  port?: number;
-  username?: string;
-  domain?: string;
-}): Promise<{ success: boolean; error?: string }> {
-  const response = await guacamoleApi("local").post<{
-    success: boolean;
-    error?: string;
-  }>("/native-rdp", request);
-  return response.data;
-}
diff --git a/plugins/remote-desktop/src/frontend/guacamole-clipboard.ts b/plugins/remote-desktop/src/frontend/guacamole-clipboard.ts
deleted file mode 100644
index 9fe2f71da..000000000
--- a/plugins/remote-desktop/src/frontend/guacamole-clipboard.ts
+++ /dev/null
@@ -1,39 +0,0 @@
-import Guacamole from "guacamole-common-js";
-
-const CONTROL_LEFT_KEYSYM = 0xffe3;
-const V_KEYSYM = 0x76;
-
-interface ClipboardOutputStream {
-  sendBlob(data: string): void;
-  sendEnd(): void;
-}
-
-export interface GuacamoleClipboardClient {
-  createClipboardStream(mimetype: string): ClipboardOutputStream;
-  sendKeyEvent(pressed: number, keysym: number): void;
-}
-
-export function isPasteShortcut(
-  event: Pick<KeyboardEvent, "altKey" | "ctrlKey" | "key" | "metaKey">,
-): boolean {
-  return (
-    !event.altKey &&
-    (event.ctrlKey || event.metaKey) &&
-    event.key.toLowerCase() === "v"
-  );
-}
-
-export function pasteTextToRemote(
-  client: GuacamoleClipboardClient,
-  text: string,
-): void {
-  const stream = client.createClipboardStream("text/plain");
-  const writer = new Guacamole.StringWriter(stream);
-  writer.sendText(text);
-  writer.sendEnd();
-
-  client.sendKeyEvent(1, CONTROL_LEFT_KEYSYM);
-  client.sendKeyEvent(1, V_KEYSYM);
-  client.sendKeyEvent(0, V_KEYSYM);
-  client.sendKeyEvent(0, CONTROL_LEFT_KEYSYM);
-}
diff --git a/plugins/remote-desktop/src/frontend/guacamole-common-js.d.ts b/plugins/remote-desktop/src/frontend/guacamole-common-js.d.ts
deleted file mode 100644
index e3ff0a1fd..000000000
--- a/plugins/remote-desktop/src/frontend/guacamole-common-js.d.ts
+++ /dev/null
@@ -1,225 +0,0 @@
-declare module "guacamole-common-js" {
-  namespace Guacamole {
-    class Client {
-      constructor(tunnel: Tunnel);
-      connect(data?: string): void;
-      disconnect(): void;
-      getDisplay(): Display;
-      sendKeyEvent(pressed: number, keysym: number): void;
-      sendMouseState(state: Mouse.State): void;
-      sendSize(width: number, height: number): void;
-      setClipboard(stream: OutputStream, mimetype: string): void;
-      createClipboardStream(mimetype: string): OutputStream;
-      onstatechange: ((state: number) => void) | null;
-      onerror: ((error: Status) => void) | null;
-      onsync: ((timestamp: number) => void) | null;
-      onclipboard: ((stream: InputStream, mimetype: string) => void) | null;
-      onaudio: ((stream: InputStream, mimetype: string) => void) | null;
-      onfile:
-        | ((stream: InputStream, mimetype: string, filename: string) => void)
-        | null;
-      onfilesystem: ((filesystem: Object, name: string) => void) | null;
-    }
-
-    // Mirrors Guacamole.Object: a named collection of streams. Within this
-    // namespace `Object` refers to this class, not the global one.
-    class Object {
-      static readonly ROOT_STREAM: string;
-      static readonly STREAM_INDEX_MIMETYPE: string;
-      readonly index: number;
-      requestInputStream(
-        name: string,
-        bodyCallback?: (stream: InputStream, mimetype: string) => void,
-      ): void;
-      createOutputStream(mimetype: string, name: string): OutputStream;
-      onbody: ((stream: InputStream, mimetype: string) => void) | null;
-      onundefine: (() => void) | null;
-    }
-
-    class AudioPlayer {
-      static getInstance(
-        stream: InputStream,
-        mimetype: string,
-      ): AudioPlayer | null;
-      sync(): void;
-    }
-
-    class Display {
-      getElement(): HTMLElement;
-      getWidth(): number;
-      getHeight(): number;
-      scale(scale: number): void;
-      onresize: (() => void) | null;
-    }
-
-    class Tunnel {
-      onerror: ((status: Status) => void) | null;
-      onstatechange: ((state: number) => void) | null;
-    }
-
-    class WebSocketTunnel extends Tunnel {
-      constructor(url: string);
-    }
-
-    class SessionRecording {
-      constructor(source: Blob | Tunnel, refreshInterval?: number);
-      onload: (() => void) | null;
-      onerror: ((message: string) => void) | null;
-      onprogress: ((duration: number, parsedSize: number) => void) | null;
-      onplay: (() => void) | null;
-      onpause: (() => void) | null;
-      onseek:
-        ((position: number, current: number, total: number) => void) | null;
-      getDisplay(): Display;
-      getPosition(): number;
-      getDuration(): number;
-      isPlaying(): boolean;
-      play(): void;
-      pause(): void;
-      seek(position: number, callback?: () => void): void;
-      abort(): void;
-    }
-
-    class Mouse {
-      constructor(element: HTMLElement);
-      onmousedown: ((state: Mouse.State) => void) | null;
-      onmouseup: ((state: Mouse.State) => void) | null;
-      onmousemove: ((state: Mouse.State) => void) | null;
-      onmouseout: ((state: Mouse.State) => void) | null;
-    }
-
-    namespace Mouse {
-      class State {
-        constructor(
-          x: number,
-          y: number,
-          left?: boolean,
-          middle?: boolean,
-          right?: boolean,
-          up?: boolean,
-          down?: boolean,
-        );
-        constructor(state: {
-          x: number;
-          y: number;
-          left?: boolean;
-          middle?: boolean;
-          right?: boolean;
-          up?: boolean;
-          down?: boolean;
-        });
-        x: number;
-        y: number;
-        left: boolean;
-        middle: boolean;
-        right: boolean;
-        up: boolean;
-        down: boolean;
-      }
-
-      interface MouseEvent {
-        state: Mouse.State;
-        preventDefault(): void;
-        stopPropagation(): void;
-      }
-
-      class Touchpad {
-        constructor(element: HTMLElement);
-        currentState: Mouse.State;
-        clickTimingThreshold: number;
-        clickMoveThreshold: number;
-        scrollThreshold: number;
-        onEach(
-          types: string[],
-          listener: (event: Mouse.MouseEvent) => void,
-        ): void;
-        on(type: string, listener: (event: Mouse.MouseEvent) => void): void;
-      }
-
-      class Touchscreen {
-        constructor(element: HTMLElement);
-        currentState: Mouse.State;
-        clickTimingThreshold: number;
-        clickMoveThreshold: number;
-        scrollThreshold: number;
-        longPressThreshold: number;
-        onEach(
-          types: string[],
-          listener: (event: Mouse.MouseEvent) => void,
-        ): void;
-        on(type: string, listener: (event: Mouse.MouseEvent) => void): void;
-      }
-    }
-
-    class Keyboard {
-      constructor(element: Document | HTMLElement);
-      reset(): void;
-      onkeydown: ((keysym: number) => void) | null;
-      onkeyup: ((keysym: number) => void) | null;
-    }
-
-    class Status {
-      code: number;
-      message: string;
-      isError(): boolean;
-      static readonly Code: {
-        SUCCESS: number;
-        UNSUPPORTED: number;
-        SERVER_ERROR: number;
-        SERVER_BUSY: number;
-        UPSTREAM_TIMEOUT: number;
-        UPSTREAM_ERROR: number;
-        RESOURCE_NOT_FOUND: number;
-        RESOURCE_CONFLICT: number;
-        RESOURCE_CLOSED: number;
-        CLIENT_BAD_REQUEST: number;
-        CLIENT_UNAUTHORIZED: number;
-        CLIENT_FORBIDDEN: number;
-        CLIENT_TIMEOUT: number;
-      };
-    }
-
-    class InputStream {
-      onblob: ((data: string) => void) | null;
-      onend: (() => void) | null;
-      sendAck(message: string, code: number): void;
-    }
-
-    class OutputStream {
-      sendBlob(data: string): void;
-      sendEnd(): void;
-    }
-
-    class StringReader {
-      constructor(stream: InputStream);
-      ontext: ((text: string) => void) | null;
-      onend: (() => void) | null;
-    }
-
-    class StringWriter {
-      constructor(stream: OutputStream);
-      sendText(text: string): void;
-      sendEnd(): void;
-    }
-
-    class BlobReader {
-      constructor(stream: InputStream, mimetype: string);
-      getBlob(): Blob;
-      getLength(): number;
-      onprogress: ((length: number) => void) | null;
-      onend: (() => void) | null;
-    }
-
-    class BlobWriter {
-      constructor(stream: OutputStream);
-      sendBlob(blob: Blob): void;
-      sendEnd(): void;
-      onack: ((status: Status) => void) | null;
-      onerror: ((blob: Blob, offset: number, error: Status) => void) | null;
-      onprogress: ((blob: Blob, offset: number) => void) | null;
-      oncomplete: ((blob: Blob) => void) | null;
-    }
-  }
-
-  export default Guacamole;
-}
diff --git a/plugins/remote-desktop/src/frontend/guacamole-config.ts b/plugins/remote-desktop/src/frontend/guacamole-config.ts
deleted file mode 100644
index 74e7b6320..000000000
--- a/plugins/remote-desktop/src/frontend/guacamole-config.ts
+++ /dev/null
@@ -1,64 +0,0 @@
-/**
- * Per-host Guacamole connection settings, as edited in the host editor and
- * forwarded to guacd. Field names are camelCase here and translated to the
- * hyphenated protocol parameters in toGuacamoleParams().
- */
-export interface GuacamoleConfig {
-  colorDepth?: number;
-  width?: number;
-  height?: number;
-  dpi?: number;
-  resizeMethod?: string;
-  forceLossless?: boolean;
-  disableAudio?: boolean;
-  enableAudioInput?: boolean;
-  enableWallpaper?: boolean;
-  enableTheming?: boolean;
-  enableFontSmoothing?: boolean;
-  enableFullWindowDrag?: boolean;
-  enableDesktopComposition?: boolean;
-  enableMenuAnimations?: boolean;
-  disableBitmapCaching?: boolean;
-  disableOffscreenCaching?: boolean;
-  disableGlyphCaching?: boolean;
-  disableGfx?: boolean;
-  enablePrinting?: boolean;
-  printerName?: string;
-  enableDrive?: boolean;
-  driveName?: string;
-  drivePath?: string;
-  createDrivePath?: boolean;
-  disableDownload?: boolean;
-  disableUpload?: boolean;
-  enableTouch?: boolean;
-  clientName?: string;
-  console?: boolean;
-  initialProgram?: string;
-  serverLayout?: string;
-  timezone?: string;
-  gatewayHostname?: string;
-  gatewayPort?: number;
-  gatewayUsername?: string;
-  gatewayPassword?: string;
-  gatewayDomain?: string;
-  remoteApp?: string;
-  remoteAppDir?: string;
-  remoteAppArgs?: string;
-  normalizeClipboard?: string;
-  disableCopy?: boolean;
-  disablePaste?: boolean;
-  cursor?: string;
-  swapRedBlue?: boolean;
-  readOnly?: boolean;
-  recordingPath?: string;
-  recordingName?: string;
-  createRecordingPath?: boolean;
-  recordingExcludeOutput?: boolean;
-  recordingExcludeMouse?: boolean;
-  recordingIncludeKeys?: boolean;
-  wolSendPacket?: boolean;
-  wolMacAddr?: string;
-  wolBroadcastAddr?: string;
-  wolUdpPort?: number;
-  wolWaitTime?: number;
-}
diff --git a/plugins/remote-desktop/src/frontend/guacamole-display-size.ts b/plugins/remote-desktop/src/frontend/guacamole-display-size.ts
deleted file mode 100644
index 27e34f3a8..000000000
--- a/plugins/remote-desktop/src/frontend/guacamole-display-size.ts
+++ /dev/null
@@ -1,48 +0,0 @@
-const DEFAULT_RDP_DPI = 96;
-const MAX_DEVICE_PIXEL_RATIO = 3;
-
-/**
- * Reads a guacamoleConfig display field. The UI stores these as strings, and
- * leaves them empty when the size should follow the browser window.
- */
-export function readConfiguredDimension(value: unknown): number | undefined {
-  const parsed = Number(value);
-  return Number.isFinite(parsed) && parsed > 0 ? parsed : undefined;
-}
-
-export interface GuacamoleDisplaySize {
-  width: number;
-  height: number;
-  dpi?: number;
-  pixelRatio: number;
-}
-
-export function getGuacamoleDisplaySize(
-  cssWidth: number,
-  cssHeight: number,
-  protocol: string | undefined,
-  devicePixelRatio: number,
-  configuredDpi?: number,
-): GuacamoleDisplaySize {
-  const isRdp = protocol === "rdp";
-  const pixelRatio = isRdp
-    ? Math.min(
-        MAX_DEVICE_PIXEL_RATIO,
-        Math.max(1, Number.isFinite(devicePixelRatio) ? devicePixelRatio : 1),
-      )
-    : 1;
-
-  const size = {
-    width: Math.max(1, Math.round(cssWidth * pixelRatio)),
-    height: Math.max(1, Math.round(cssHeight * pixelRatio)),
-    pixelRatio,
-  };
-
-  if (!isRdp) return size;
-
-  const baseDpi =
-    configuredDpi && Number.isFinite(configuredDpi) && configuredDpi > 0
-      ? configuredDpi
-      : DEFAULT_RDP_DPI;
-  return { ...size, dpi: Math.round(baseDpi * pixelRatio) };
-}
diff --git a/plugins/remote-desktop/src/frontend/guacamole-file-drop.ts b/plugins/remote-desktop/src/frontend/guacamole-file-drop.ts
deleted file mode 100644
index b1fe2273c..000000000
--- a/plugins/remote-desktop/src/frontend/guacamole-file-drop.ts
+++ /dev/null
@@ -1,22 +0,0 @@
-export type FileDropDisposition = "ignore" | "reject" | "upload";
-
-export function hasDraggedFiles(types: readonly string[]): boolean {
-  return types.includes("Files");
-}
-
-export function getFileDropDisposition(
-  types: readonly string[],
-  fileCount: number,
-  canUpload: boolean,
-): FileDropDisposition {
-  if (!hasDraggedFiles(types) || fileCount === 0) return "ignore";
-  return canUpload ? "upload" : "reject";
-}
-
-export function canUploadToRdpDrive(
-  uploadAllowed: boolean,
-  driveEnabled: boolean,
-  hasFilesystem: boolean,
-): boolean {
-  return uploadAllowed && (driveEnabled || hasFilesystem);
-}
diff --git a/plugins/remote-desktop/src/frontend/guacamole-filesystem.ts b/plugins/remote-desktop/src/frontend/guacamole-filesystem.ts
deleted file mode 100644
index a0ae0a1cb..000000000
--- a/plugins/remote-desktop/src/frontend/guacamole-filesystem.ts
+++ /dev/null
@@ -1,223 +0,0 @@
-import Guacamole from "guacamole-common-js";
-
-// The bundled Guacamole runtime exposes Client.createFileStream(), but the
-// package's older TypeScript declaration omits it.
-export interface GuacamoleFileStreamClient {
-  createFileStream(mimetype: string, filename: string): Guacamole.OutputStream;
-}
-
-// The root stream of a Guacamole.Object maps stream name to mimetype; a stream
-// carrying that same mimetype is itself a directory.
-export const STREAM_INDEX_MIMETYPE =
-  "application/vnd.glyptodon.guacamole.stream-index+json";
-
-export interface RemoteFileEntry {
-  name: string;
-  path: string;
-  mimetype: string;
-  isDirectory: boolean;
-}
-
-export function isDirectoryMimetype(mimetype: string): boolean {
-  return mimetype === STREAM_INDEX_MIMETYPE;
-}
-
-export function joinPath(parent: string, name: string): string {
-  return parent === "/" ? `/${name}` : `${parent}/${name}`;
-}
-
-export function parentPath(path: string): string {
-  const cut = path.lastIndexOf("/");
-  return cut <= 0 ? "/" : path.slice(0, cut);
-}
-
-export function basename(path: string): string {
-  return path.slice(path.lastIndexOf("/") + 1) || path;
-}
-
-// guacd returns absolute paths as keys, but a malformed or relative key would
-// otherwise produce a broken path on the next descent.
-export function parseDirectoryIndex(
-  json: string,
-  path: string,
-): RemoteFileEntry[] {
-  const index = JSON.parse(json) as Record<string, string>;
-
-  return Object.entries(index)
-    .map(([key, mimetype]) => {
-      const name = basename(key);
-      return {
-        name,
-        path: key.startsWith("/") ? key : joinPath(path, name),
-        mimetype,
-        isDirectory: isDirectoryMimetype(mimetype),
-      };
-    })
-    .sort((a, b) =>
-      a.isDirectory === b.isDirectory
-        ? a.name.localeCompare(b.name)
-        : a.isDirectory
-          ? -1
-          : 1,
-    );
-}
-
-// A refused stream is answered with an error ack that never reaches the body
-// callback, so every request needs its own deadline to avoid hanging forever.
-const REQUEST_TIMEOUT_MS = 15000;
-
-function requestStream(
-  filesystem: Guacamole.Object,
-  path: string,
-): Promise<{ stream: Guacamole.InputStream; mimetype: string }> {
-  return new Promise((resolve, reject) => {
-    const timeout = setTimeout(
-      () => reject(new Error(`Timed out reading ${path}`)),
-      REQUEST_TIMEOUT_MS,
-    );
-
-    filesystem.requestInputStream(path, (stream, mimetype) => {
-      clearTimeout(timeout);
-      resolve({ stream, mimetype });
-    });
-  });
-}
-
-export async function listDirectory(
-  filesystem: Guacamole.Object,
-  path: string,
-): Promise<RemoteFileEntry[]> {
-  const { stream, mimetype } = await requestStream(filesystem, path);
-
-  if (!isDirectoryMimetype(mimetype)) {
-    throw new Error(`${path} is not a directory`);
-  }
-
-  const json = await new Promise<string>((resolve) => {
-    const reader = new Guacamole.StringReader(stream);
-    let text = "";
-    reader.ontext = (chunk: string) => {
-      text += chunk;
-    };
-    reader.onend = () => resolve(text);
-  });
-
-  return parseDirectoryIndex(json, path);
-}
-
-export async function downloadFile(
-  filesystem: Guacamole.Object,
-  path: string,
-): Promise<{ blob: Blob; filename: string }> {
-  const { stream, mimetype } = await requestStream(filesystem, path);
-
-  if (isDirectoryMimetype(mimetype)) {
-    throw new Error(`${path} is a directory`);
-  }
-
-  const blob = await new Promise<Blob>((resolve) => {
-    const reader = new Guacamole.BlobReader(stream, mimetype);
-    reader.onend = () => resolve(reader.getBlob());
-  });
-
-  return { blob, filename: basename(path) };
-}
-
-export function uploadFile(
-  filesystem: Guacamole.Object,
-  directory: string,
-  file: File,
-  onProgress?: (sent: number, total: number) => void,
-): Promise<void> {
-  return writeUpload(
-    filesystem.createOutputStream(
-      file.type || "application/octet-stream",
-      joinPath(directory, file.name),
-    ),
-    file,
-    onProgress,
-  );
-}
-
-/**
- * Uploads through Guacamole's connection-level file stream. RDP exposes this
- * path even when guacd does not advertise a browsable filesystem object, so
- * display drops must not depend on `Client.onfilesystem` having fired.
- */
-export function uploadFileToClient(
-  client: GuacamoleFileStreamClient,
-  file: File,
-  onProgress?: (sent: number, total: number) => void,
-): Promise<void> {
-  return writeUpload(createClientFileStream(client, file), file, onProgress);
-}
-
-export function createClientFileStream(
-  client: GuacamoleFileStreamClient,
-  file: File,
-): Guacamole.OutputStream {
-  return client.createFileStream(
-    file.type || "application/octet-stream",
-    file.name,
-  );
-}
-
-function writeUpload(
-  stream: Guacamole.OutputStream,
-  file: File,
-  onProgress?: (sent: number, total: number) => void,
-): Promise<void> {
-  return new Promise((resolve, reject) => {
-    const writer = new Guacamole.BlobWriter(stream);
-
-    // A rejected blob stops the writer without firing onerror or oncomplete —
-    // only the error ack reports it, so without this the upload hangs forever.
-    writer.onack = (status: Guacamole.Status) => {
-      if (status.isError()) {
-        reject(
-          new Error(
-            status.message || `Server refused the upload of ${file.name}`,
-          ),
-        );
-      }
-    };
-    writer.onerror = () => reject(new Error(`Failed to upload ${file.name}`));
-    writer.onprogress = (_blob: Blob, offset: number) =>
-      onProgress?.(offset, file.size);
-    writer.oncomplete = () => {
-      writer.sendEnd();
-      onProgress?.(file.size, file.size);
-      resolve();
-    };
-
-    writer.sendBlob(file);
-  });
-}
-
-export function saveBlobAs(blob: Blob, filename: string): void {
-  const url = URL.createObjectURL(blob);
-  const link = document.createElement("a");
-  link.href = url;
-  link.download = filename;
-  link.click();
-  URL.revokeObjectURL(url);
-}
-
-/**
- * Turns an upload failure into something a user can act on. guacd answers a
- * refused stream with an ack like "FAIL (CANNOT OPEN)" - accurate, but it
- * means "the drive folder isn't writable", which is what people need to hear.
- */
-export function describeUploadError(
-  error: unknown,
-  t: (key: "driveNotWritable" | "driveUnavailable" | "uploadFailed") => string,
-): string {
-  const message = error instanceof Error ? error.message : "";
-  if (/cannot open|can't open|permission denied/i.test(message)) {
-    return t("driveNotWritable");
-  }
-  if (/no fs/i.test(message)) {
-    return t("driveUnavailable");
-  }
-  return message || t("uploadFailed");
-}
diff --git a/plugins/remote-desktop/src/frontend/guacamole-meta-key.ts b/plugins/remote-desktop/src/frontend/guacamole-meta-key.ts
deleted file mode 100644
index a9cc446d2..000000000
--- a/plugins/remote-desktop/src/frontend/guacamole-meta-key.ts
+++ /dev/null
@@ -1,82 +0,0 @@
-export type MetaKeyFamily = "win" | "super" | "cmd";
-
-export interface MetaKeyLabels {
-  family: MetaKeyFamily;
-  short: string;
-  lock: string;
-  stickyKey: string;
-  keyTooltip: string;
-  lockTooltip: string;
-}
-
-/**
- * RDP is a Windows desktop, so the toolbar keeps Windows labels. VNC is used
- * for Linux and macOS as often as Windows; branding those sessions with a
- * Windows key is wrong, and the local device is the only OS we can see.
- */
-export function detectMetaKeyFamily(
-  protocol: "rdp" | "vnc" | "telnet",
-  env: {
-    platform?: string;
-    userAgent?: string;
-    userAgentDataPlatform?: string;
-  } = {},
-): MetaKeyFamily {
-  if (protocol === "rdp") return "win";
-
-  const uaPlatform = env.userAgentDataPlatform ?? "";
-  const platform = env.platform ?? "";
-  const userAgent = env.userAgent ?? "";
-  const haystack = `${uaPlatform} ${platform} ${userAgent}`;
-
-  if (/iphone|ipad|ipod|mac/i.test(haystack)) return "cmd";
-  if (/win/i.test(haystack)) return "win";
-  return "super";
-}
-
-export function detectRuntimeMetaKeyFamily(
-  protocol: "rdp" | "vnc" | "telnet",
-): MetaKeyFamily {
-  if (typeof navigator === "undefined") {
-    return detectMetaKeyFamily(protocol);
-  }
-  const uaData = navigator as Navigator & {
-    userAgentData?: { platform?: string };
-  };
-  return detectMetaKeyFamily(protocol, {
-    platform: navigator.platform,
-    userAgent: navigator.userAgent,
-    userAgentDataPlatform: uaData.userAgentData?.platform,
-  });
-}
-
-export function metaKeyLabels(family: MetaKeyFamily): MetaKeyLabels {
-  if (family === "cmd") {
-    return {
-      family,
-      short: "Cmd",
-      lock: "Cmd+L",
-      stickyKey: "remoteDesktop.toolbar.cmd",
-      keyTooltip: "remoteDesktop.toolbar.cmdKey",
-      lockTooltip: "remoteDesktop.toolbar.cmdL",
-    };
-  }
-  if (family === "super") {
-    return {
-      family,
-      short: "Super",
-      lock: "Super+L",
-      stickyKey: "remoteDesktop.toolbar.super",
-      keyTooltip: "remoteDesktop.toolbar.superKey",
-      lockTooltip: "remoteDesktop.toolbar.superL",
-    };
-  }
-  return {
-    family,
-    short: "Win",
-    lock: "Win+L",
-    stickyKey: "remoteDesktop.toolbar.win",
-    keyTooltip: "remoteDesktop.toolbar.winKey",
-    lockTooltip: "remoteDesktop.toolbar.winL",
-  };
-}
diff --git a/plugins/remote-desktop/src/frontend/guacamole-pointer.ts b/plugins/remote-desktop/src/frontend/guacamole-pointer.ts
deleted file mode 100644
index 507353a0d..000000000
--- a/plugins/remote-desktop/src/frontend/guacamole-pointer.ts
+++ /dev/null
@@ -1,65 +0,0 @@
-import Guacamole from "guacamole-common-js";
-import {
-  createScrollCoalescer,
-  isScrollButtonState,
-} from "./guacamole-scroll.js";
-
-export type GuacamoleTouchMode = "touchscreen" | "touchpad";
-
-/**
- * Guacamole.Mouse listens for mousedown/mousemove/mouseup; the Touchscreen and
- * Touchpad emulators listen only for touch events. The two sets do not overlap,
- * so binding one instead of the other leaves that input dead.
- *
- * A touch-capable device is not a device without a pointer: laptops with a
- * touchscreen report maxTouchPoints > 0 and are still driven by a mouse. The
- * physical pointer is therefore always bound, and a touch emulator is layered
- * on top when one is selected.
- */
-export function bindPointerInput(
-  element: HTMLElement,
-  touchMode: GuacamoleTouchMode | null | undefined,
-  onState: (state: Guacamole.Mouse.State) => void,
-): () => void {
-  const coalescer = createScrollCoalescer((state) => {
-    onState(state as Guacamole.Mouse.State);
-  });
-  let expectingScrollRelease = false;
-
-  const handleState = (state: Guacamole.Mouse.State) => {
-    coalescer.notePointer(state);
-    if (isScrollButtonState(state)) {
-      coalescer.ingestClick(state.down ? 1 : -1);
-      expectingScrollRelease = true;
-      return;
-    }
-    if (
-      expectingScrollRelease &&
-      !state.left &&
-      !state.middle &&
-      !state.right
-    ) {
-      expectingScrollRelease = false;
-      return;
-    }
-    expectingScrollRelease = false;
-    onState(state);
-  };
-
-  const mouse = new Guacamole.Mouse(element);
-  mouse.onmousedown = mouse.onmouseup = mouse.onmousemove = handleState;
-
-  if (touchMode === "touchscreen") {
-    const touchscreen = new Guacamole.Mouse.Touchscreen(element);
-    touchscreen.onEach(["mousedown", "mousemove", "mouseup"], (event) =>
-      handleState(event.state),
-    );
-  } else if (touchMode === "touchpad") {
-    const touchpad = new Guacamole.Mouse.Touchpad(element);
-    touchpad.onEach(["mousedown", "mousemove", "mouseup"], (event) =>
-      handleState(event.state),
-    );
-  }
-
-  return () => coalescer.dispose();
-}
diff --git a/plugins/remote-desktop/src/frontend/guacamole-scroll.ts b/plugins/remote-desktop/src/frontend/guacamole-scroll.ts
deleted file mode 100644
index 9a24d4da4..000000000
--- a/plugins/remote-desktop/src/frontend/guacamole-scroll.ts
+++ /dev/null
@@ -1,131 +0,0 @@
-/**
- * guacamole-common-js turns each wheel tick into one or more mouse-button
- * clicks (button 4/5). High-resolution trackpads and the library's duplicate
- * wheel/mousewheel listeners can emit dozens of those clicks in a single
- * gesture. Each click is two Guacamole instructions, so a laggy path (a
- * Cloudflare-proxied remote session especially) queues them and the remote
- * desktop keeps scrolling long after the user stopped.
- *
- * Cap the in-flight click count and space flushes out so scrolling stays
- * usable without changing the websocket proxy.
- */
-export const MAX_SCROLL_CLICKS_PER_FLUSH = 2;
-export const SCROLL_FLUSH_INTERVAL_MS = 32;
-
-export type ScrollClickDirection = 1 | -1;
-
-export interface GuacamolePointerState {
-  x: number;
-  y: number;
-  left: boolean;
-  middle: boolean;
-  right: boolean;
-  up: boolean;
-  down: boolean;
-}
-
-export function clampPendingScrollClicks(
-  pending: number,
-  delta: number,
-  max = MAX_SCROLL_CLICKS_PER_FLUSH,
-): number {
-  return Math.max(-max, Math.min(max, pending + delta));
-}
-
-export function takeScrollClicks(pending: number): {
-  clicks: number;
-  direction: ScrollClickDirection | 0;
-} {
-  if (pending === 0) return { clicks: 0, direction: 0 };
-  const direction: ScrollClickDirection = pending < 0 ? -1 : 1;
-  return {
-    clicks: Math.min(MAX_SCROLL_CLICKS_PER_FLUSH, Math.abs(pending)),
-    direction,
-  };
-}
-
-function mouseState(
-  x: number,
-  y: number,
-  buttons: Pick<GuacamolePointerState, "left" | "middle" | "right">,
-  up: boolean,
-  down: boolean,
-): GuacamolePointerState {
-  return {
-    x,
-    y,
-    left: buttons.left,
-    middle: buttons.middle,
-    right: buttons.right,
-    up,
-    down,
-  };
-}
-
-export function createScrollCoalescer(
-  send: (state: GuacamolePointerState) => void,
-  now: () => number = () => Date.now(),
-  schedule: (fn: () => void, ms: number) => number = (fn, ms) =>
-    window.setTimeout(fn, ms),
-  cancel: (id: number) => void = (id) => window.clearTimeout(id),
-): {
-  notePointer: (state: GuacamolePointerState) => void;
-  ingestClick: (direction: ScrollClickDirection) => void;
-  dispose: () => void;
-} {
-  let pending = 0;
-  let timer: number | null = null;
-  let x = 0;
-  let y = 0;
-  let buttons = { left: false, middle: false, right: false };
-  let lastFlushAt = 0;
-
-  const flush = () => {
-    timer = null;
-    const { clicks, direction } = takeScrollClicks(pending);
-    pending = 0;
-    if (clicks === 0 || direction === 0) return;
-    lastFlushAt = now();
-    const up = direction < 0;
-    const down = direction > 0;
-    for (let i = 0; i < clicks; i++) {
-      send(mouseState(x, y, buttons, up, down));
-      send(mouseState(x, y, buttons, false, false));
-    }
-  };
-
-  return {
-    notePointer(state) {
-      x = state.x;
-      y = state.y;
-      buttons = {
-        left: state.left,
-        middle: state.middle,
-        right: state.right,
-      };
-    },
-    ingestClick(direction) {
-      pending = clampPendingScrollClicks(pending, direction);
-      const elapsed = now() - lastFlushAt;
-      if (elapsed >= SCROLL_FLUSH_INTERVAL_MS) {
-        flush();
-        return;
-      }
-      if (timer == null) {
-        timer = schedule(flush, SCROLL_FLUSH_INTERVAL_MS - elapsed);
-      }
-    },
-    dispose() {
-      if (timer == null) return;
-      cancel(timer);
-      timer = null;
-    },
-  };
-}
-
-export function isScrollButtonState(state: {
-  up?: boolean;
-  down?: boolean;
-}): boolean {
-  return state.up === true || state.down === true;
-}
diff --git a/plugins/remote-desktop/src/frontend/guacamole-session-id.ts b/plugins/remote-desktop/src/frontend/guacamole-session-id.ts
deleted file mode 100644
index 9b173472b..000000000
--- a/plugins/remote-desktop/src/frontend/guacamole-session-id.ts
+++ /dev/null
@@ -1,31 +0,0 @@
-import { getGuacamoleConnectionId } from "./guacamole-api";
-import type { ConnectionOrigin } from "@termix/plugin-sdk/ui";
-
-export function watchGuacamoleConnectionId(
-  connectId: string,
-  origin: ConnectionOrigin,
-  onReady: (id: string) => void,
-): () => void {
-  const controller = new AbortController();
-  let timer: ReturnType<typeof setTimeout> | undefined;
-  let attempts = 0;
-  const poll = async () => {
-    try {
-      const id = await getGuacamoleConnectionId(
-        connectId,
-        origin,
-        controller.signal,
-      );
-      if (controller.signal.aborted) return;
-      if (id) onReady(id);
-      else if (++attempts < 20) timer = setTimeout(poll, 500);
-    } catch {
-      // Session sharing discovery must not interrupt the remote display.
-    }
-  };
-  void poll();
-  return () => {
-    controller.abort();
-    clearTimeout(timer);
-  };
-}
diff --git a/plugins/remote-desktop/src/frontend/guacamole-state.ts b/plugins/remote-desktop/src/frontend/guacamole-state.ts
deleted file mode 100644
index bf8efd923..000000000
--- a/plugins/remote-desktop/src/frontend/guacamole-state.ts
+++ /dev/null
@@ -1,26 +0,0 @@
-import type { ConnectionStage } from "@termix/plugin-sdk/ui";
-
-// Guacamole client states, per guacamole-common-js Guacamole.Client#STATE_*.
-const GUAC_STATE_IDLE = 0;
-const GUAC_STATE_CONNECTING = 1;
-const GUAC_STATE_WAITING = 2;
-const GUAC_STATE_CONNECTED = 3;
-const GUAC_STATE_DISCONNECTING = 4;
-const GUAC_STATE_DISCONNECTED = 5;
-
-export function guacStateToStage(state: number): ConnectionStage {
-  switch (state) {
-    case GUAC_STATE_CONNECTING:
-      return "guac_connecting";
-    case GUAC_STATE_WAITING:
-      return "guac_handshake";
-    case GUAC_STATE_CONNECTED:
-      return "guac_ready";
-    case GUAC_STATE_DISCONNECTING:
-    case GUAC_STATE_DISCONNECTED:
-      return "guac_disconnected";
-    case GUAC_STATE_IDLE:
-    default:
-      return "guac_connecting";
-  }
-}
diff --git a/plugins/remote-desktop/src/frontend/guacamole-websocket-url.ts b/plugins/remote-desktop/src/frontend/guacamole-websocket-url.ts
deleted file mode 100644
index 7d1af5ae5..000000000
--- a/plugins/remote-desktop/src/frontend/guacamole-websocket-url.ts
+++ /dev/null
@@ -1,39 +0,0 @@
-/**
- * Where the Guacamole display socket lives.
- *
- * One path in every deployment: the plugin serves it at
- * /plugin-ws/remote-desktop/display on the main backend, so there is no
- * guacamole port and no separate nginx block any more. Electron with a remote
- * server is the only case that targets a different host.
- */
-export function buildGuacamoleWebSocketBaseUrl({
-  isElectronApp,
-  isEmbeddedApp,
-  configuredServerUrl,
-  basePath,
-  location,
-}: {
-  isDev?: boolean;
-  isElectronApp: boolean;
-  isEmbeddedApp: boolean;
-  configuredServerUrl?: string;
-  basePath: string;
-  location: Pick<Location, "protocol" | "host">;
-}) {
-  const route = "/plugin-ws/remote-desktop/display";
-
-  if (isElectronApp && !isEmbeddedApp && configuredServerUrl) {
-    const wsProtocol = configuredServerUrl.startsWith("https://")
-      ? "wss://"
-      : "ws://";
-    const wsHost = configuredServerUrl
-      .replace(/^https?:\/\//, "")
-      .replace(/\/$/, "");
-    return `${wsProtocol}${wsHost}${route}`;
-  }
-
-  if (isElectronApp) return `ws://127.0.0.1:30001${route}`;
-
-  const wsProtocol = location.protocol === "https:" ? "wss" : "ws";
-  return `${wsProtocol}://${location.host}${basePath}${route}`;
-}
diff --git a/plugins/remote-desktop/src/frontend/guacamole-zoom.ts b/plugins/remote-desktop/src/frontend/guacamole-zoom.ts
deleted file mode 100644
index 8a2fceb27..000000000
--- a/plugins/remote-desktop/src/frontend/guacamole-zoom.ts
+++ /dev/null
@@ -1,11 +0,0 @@
-export const MIN_GUACAMOLE_ZOOM = 0.5;
-export const MAX_GUACAMOLE_ZOOM = 4;
-export const GUACAMOLE_ZOOM_STEP = 0.25;
-
-export function clampGuacamoleZoom(zoom: number): number {
-  return Math.min(MAX_GUACAMOLE_ZOOM, Math.max(MIN_GUACAMOLE_ZOOM, zoom));
-}
-
-export function stepGuacamoleZoom(zoom: number, direction: -1 | 1): number {
-  return clampGuacamoleZoom(zoom + direction * GUACAMOLE_ZOOM_STEP);
-}
diff --git a/plugins/remote-desktop/src/frontend/host-remote.ts b/plugins/remote-desktop/src/frontend/host-remote.ts
deleted file mode 100644
index 22b416c8a..000000000
--- a/plugins/remote-desktop/src/frontend/host-remote.ts
+++ /dev/null
@@ -1,147 +0,0 @@
-import type {
-  HostProtocolAuthSummary,
-  PluginHostRecord,
-  QuickConnectLogin,
-} from "@termix/plugin-sdk/frontend";
-import type { GuacamoleConfig } from "./guacamole-config";
-
-export const PLUGIN_ID = "remote-desktop";
-
-export type Protocol = "rdp" | "vnc" | "telnet";
-
-/** This plugin's host settings, as they arrive on host.pluginSettings. */
-export interface RemoteHostOptions {
-  enableRdp: boolean;
-  enableVnc: boolean;
-  enableTelnet: boolean;
-  rdpPort: number;
-  vncPort: number;
-  telnetPort: number;
-  rdpSecurity: string;
-  rdpIgnoreCert: boolean;
-  guacamoleConfig: GuacamoleConfig;
-  enableToolbar: boolean;
-}
-
-export const ENABLE_KEY = {
-  rdp: "enableRdp",
-  vnc: "enableVnc",
-  telnet: "enableTelnet",
-} as const satisfies Record<Protocol, keyof RemoteHostOptions>;
-
-export const PORT_KEY = {
-  rdp: "rdpPort",
-  vnc: "vncPort",
-  telnet: "telnetPort",
-} as const satisfies Record<Protocol, keyof RemoteHostOptions>;
-
-export const DEFAULT_PORT: Record<Protocol, number> = {
-  rdp: 3389,
-  vnc: 5900,
-  telnet: 23,
-};
-
-/**
- * The host fields a session reads. Each protocol's login is core's, under
- * protocolAuth, since this plugin declares its protocols in the manifest.
- */
-export interface RemoteHostLogin {
-  id?: number | string;
-  name?: string | null;
-  ip?: string;
-  syncId?: string | null;
-  connectionOrigin?: "local" | "remote" | null;
-  protocolAuth?: Record<string, HostProtocolAuthSummary>;
-  quickConnectLogin?: QuickConnectLogin;
-  authOverrides?: Record<
-    string,
-    {
-      credentialId?: number | string | null;
-      required?: boolean;
-      ownerAuthShared?: boolean;
-    }
-  >;
-  pluginSettings?: Record<string, Record<string, unknown>>;
-}
-
-/** The RDP domain a host's saved login carries. */
-export function rdpDomain(host: RemoteHostLogin): string | undefined {
-  return host.protocolAuth?.rdp?.fields?.domain || undefined;
-}
-
-function port(value: unknown, fallback: number): number {
-  const parsed = typeof value === "string" ? Number(value) : value;
-  return typeof parsed === "number" && Number.isInteger(parsed) && parsed > 0
-    ? parsed
-    : fallback;
-}
-
-export function parseGuacamoleConfig(value: unknown): GuacamoleConfig {
-  if (!value) return {};
-  if (typeof value === "string") {
-    try {
-      const parsed = JSON.parse(value);
-      return parsed && typeof parsed === "object" ? parsed : {};
-    } catch {
-      return {};
-    }
-  }
-  return typeof value === "object" ? (value as GuacamoleConfig) : {};
-}
-
-export function remoteOptions(
-  settings: Record<string, unknown> | undefined,
-): RemoteHostOptions {
-  const values = settings ?? {};
-  return {
-    enableRdp: values.enableRdp === true,
-    enableVnc: values.enableVnc === true,
-    enableTelnet: values.enableTelnet === true,
-    rdpPort: port(values.rdpPort, DEFAULT_PORT.rdp),
-    vncPort: port(values.vncPort, DEFAULT_PORT.vnc),
-    telnetPort: port(values.telnetPort, DEFAULT_PORT.telnet),
-    rdpSecurity:
-      typeof values.rdpSecurity === "string" ? values.rdpSecurity : "",
-    rdpIgnoreCert: values.rdpIgnoreCert === true,
-    guacamoleConfig: parseGuacamoleConfig(values.guacamoleConfig),
-    enableToolbar: values.enableToolbar !== false,
-  };
-}
-
-export function hostRemoteOptions(
-  host:
-    | Pick<RemoteHostLogin, "pluginSettings">
-    | PluginHostRecord
-    | null
-    | undefined,
-): RemoteHostOptions {
-  const bag = (host as RemoteHostLogin | null | undefined)?.pluginSettings;
-  return remoteOptions(bag?.[PLUGIN_ID]);
-}
-
-export function protocolEnabled(
-  host:
-    | Pick<RemoteHostLogin, "pluginSettings">
-    | PluginHostRecord
-    | null
-    | undefined,
-  protocol: Protocol,
-): boolean {
-  return hostRemoteOptions(host)[ENABLE_KEY[protocol]];
-}
-
-/** Quick Connect hosts are never saved; their ids carry this prefix. */
-const QUICK_CONNECT_ID_PREFIX = "quick-connect-";
-
-export function isQuickConnectHost(host: { id?: unknown } | null | undefined) {
-  return String(host?.id ?? "").startsWith(QUICK_CONNECT_ID_PREFIX);
-}
-
-export function errorMessage(error: unknown, fallback = "Unknown error") {
-  const data = (error as { response?: { data?: { error?: unknown } } })
-    ?.response?.data?.error;
-  if (typeof data === "string" && data) return data;
-  if (error instanceof Error && error.message) return error.message;
-  if (typeof error === "string" && error) return error;
-  return fallback;
-}
diff --git a/plugins/remote-desktop/src/frontend/index.tsx b/plugins/remote-desktop/src/frontend/index.tsx
deleted file mode 100644
index 47d08a3d6..000000000
--- a/plugins/remote-desktop/src/frontend/index.tsx
+++ /dev/null
@@ -1,457 +0,0 @@
-import { useEffect, useState, type ComponentType, type Ref } from "react";
-import {
-  Info,
-  MessagesSquare,
-  Monitor,
-  MonitorUp,
-  MousePointerClick,
-} from "lucide-react";
-import {
-  invokeAction,
-  useTranslation,
-  type HostEditorSectionProps,
-  type PluginHostRecord,
-  type StandaloneViewProps,
-  type TabProps,
-  type TermixApp,
-} from "@termix/plugin-sdk/frontend";
-import {
-  FakeSwitch,
-  HostFeatureFields,
-  SectionCard,
-  SettingRow,
-  isElectron,
-} from "@termix/plugin-sdk/ui";
-import { toast } from "sonner";
-import GuacamoleApp, { type GuacamoleAppHandle } from "./GuacamoleApp";
-import { GuacamoleDisplay } from "./GuacamoleDisplay";
-import {
-  HostEditorRdpTab,
-  HostEditorTelnetTab,
-  HostEditorVncTab,
-} from "./HostEditorGuacamoleTabs";
-import {
-  getGuacamoleTokenFromHost,
-  getGuacdStatus,
-  nativeRdpAvailable,
-  openNativeRdp,
-  setRemoteDesktopApp,
-} from "./guacamole-api";
-import { quickConnectGuacHost } from "./quick-connect-guac-host";
-import { REMOTE_DESKTOP_TOOLBAR_SLOT } from "./GuacamoleToolbar.tsx";
-import {
-  DEFAULT_PORT,
-  ENABLE_KEY,
-  PORT_KEY,
-  hostRemoteOptions,
-  isQuickConnectHost,
-  protocolEnabled,
-  type Protocol,
-  rdpDomain,
-  type RemoteHostLogin,
-} from "./host-remote";
-import { remoteDesktopForm } from "./remote-form";
-
-const PROTOCOLS: {
-  id: Protocol;
-  titleKey: string;
-  descriptionKey: string;
-  paletteKey: string;
-  icon: ComponentType<{ className?: string }>;
-  priority: number;
-  order: number;
-  quickConnect?: { showDomain?: boolean };
-}[] = [
-  {
-    id: "rdp",
-    titleKey: "hosts.tabRdp",
-    descriptionKey: "hosts.remoteDesktop",
-    paletteKey: "palette.connectRdp",
-    icon: Monitor,
-    priority: 50,
-    order: 100,
-    quickConnect: { showDomain: true },
-  },
-  {
-    id: "vnc",
-    titleKey: "hosts.tabVnc",
-    descriptionKey: "hosts.virtualNetwork",
-    paletteKey: "palette.connectVnc",
-    icon: MousePointerClick,
-    priority: 40,
-    order: 110,
-    quickConnect: {},
-  },
-  {
-    id: "telnet",
-    titleKey: "hosts.tabTelnet",
-    descriptionKey: "hosts.unencryptedShell",
-    paletteKey: "palette.connectTelnet",
-    icon: MessagesSquare,
-    priority: 30,
-    order: 120,
-  },
-];
-
-function RemoteDesktopTab({ tab, host, isVisible, handleRef }: TabProps) {
-  const record: RemoteHostLogin | undefined = host;
-  return (
-    <GuacamoleApp
-      ref={handleRef as Ref<GuacamoleAppHandle>}
-      hostId={String(host?.id ?? "")}
-      tabId={tab.id}
-      protocol={tab.type as Protocol}
-      isVisible={isVisible}
-      quickConnectHost={
-        record && isQuickConnectHost(record)
-          ? quickConnectGuacHost(record)
-          : undefined
-      }
-    />
-  );
-}
-
-function RemoteDesktopStandalone({ hostId, view }: StandaloneViewProps) {
-  return <GuacamoleApp hostId={hostId} protocol={view as Protocol} />;
-}
-
-/** What collab rooms and shared-session links draw a stream with. */
-function RemoteDisplay({
-  token,
-  connectionOrigin,
-  protocol,
-  isVisible,
-  onConnect,
-  onError,
-}: {
-  token: string;
-  connectionOrigin?: "local" | "remote";
-  protocol: Protocol;
-  isVisible: boolean;
-  onConnect?: () => void;
-  onError?: (error: string) => void;
-}) {
-  return (
-    <GuacamoleDisplay
-      connectionConfig={{ token, protocol, type: protocol, connectionOrigin }}
-      isVisible={isVisible}
-      onConnect={onConnect}
-      onError={onError}
-    />
-  );
-}
-
-function SectionNotes() {
-  const { t } = useTranslation();
-  return (
-    <SectionCard
-      title={t("hosts.remoteDesktopNotes")}
-      icon={<Info className="size-3.5" />}
-    >
-      <div className="flex flex-col gap-2 py-3 text-xs text-muted-foreground">
-        <p>{t("hosts.userDefaultsNote")}</p>
-        {isElectron() && <p>{t("hosts.connectionOriginNote")}</p>}
-      </div>
-    </SectionCard>
-  );
-}
-
-function ToolbarCard({
-  form,
-  setField,
-}: Pick<ReturnType<typeof remoteDesktopForm>, "form" | "setField">) {
-  const { t } = useTranslation();
-  return (
-    <SectionCard
-      title={t("hosts.guac.toolbar")}
-      icon={<MonitorUp className="size-3.5" />}
-    >
-      <SettingRow
-        label={t("settings.host.enableToolbar.label")}
-        description={t("settings.host.enableToolbar.description")}
-        defaultKey="enableToolbar"
-      >
-        <FakeSwitch
-          checked={form.enableToolbar}
-          onChange={(value) => setField("enableToolbar", value)}
-        />
-      </SettingRow>
-    </SectionCard>
-  );
-}
-
-/**
- * The Wake-on-LAN address a host keeps, the default for a session's wake
- * packet. Null while that plugin is off.
- */
-function useWakeOnLanMac(hostId: string | undefined): string | null {
-  const [mac, setMac] = useState<string | null>(null);
-  useEffect(() => {
-    let active = true;
-    if (!hostId) {
-      setMac(null);
-      return;
-    }
-    invokeAction("wakeOnLan.macAddress", hostId)
-      .then((value) => {
-        if (active) setMac(typeof value === "string" && value ? value : null);
-      })
-      .catch(() => {
-        if (active) setMac(null);
-      });
-    return () => {
-      active = false;
-    };
-  }, [hostId]);
-  return mac;
-}
-
-function RdpSection(props: HostEditorSectionProps) {
-  const { form, setField, setGuacField } = remoteDesktopForm(props);
-  const macAddress = useWakeOnLanMac(props.host?.id);
-  return (
-    <>
-      <HostEditorRdpTab
-        form={form}
-        setField={setField}
-        setGuacField={setGuacField}
-        host={{ macAddress }}
-        credentials={props.credentials as never}
-      />
-      <ToolbarCard form={form} setField={setField} />
-      <SectionNotes />
-    </>
-  );
-}
-
-function VncSection(props: HostEditorSectionProps) {
-  const { form, setField, setGuacField } = remoteDesktopForm(props);
-  const macAddress = useWakeOnLanMac(props.host?.id);
-  return (
-    <>
-      <HostEditorVncTab
-        form={form}
-        setField={setField}
-        setGuacField={setGuacField}
-        host={{ macAddress }}
-        credentials={props.credentials as never}
-      />
-      <ToolbarCard form={form} setField={setField} />
-      <SectionNotes />
-    </>
-  );
-}
-
-function TelnetSection(props: HostEditorSectionProps) {
-  const { form, setField, setGuacField } = remoteDesktopForm(props);
-  return (
-    <>
-      <HostEditorTelnetTab
-        form={form}
-        setField={setField}
-        setGuacField={setGuacField}
-        credentials={props.credentials as never}
-      />
-      <ToolbarCard form={form} setField={setField} />
-      <SectionNotes />
-    </>
-  );
-}
-
-/**
- * The defaults editor's remote desktop section: the display settings and the
- * toolbar, which every host follows unless its own guacd settings say
- * otherwise. A host edits these in its protocol tabs instead.
- */
-function DisplayDefaultsSection(props: HostEditorSectionProps) {
-  const { t } = useTranslation();
-  const { form, setField } = remoteDesktopForm(props);
-  return (
-    <>
-      <SectionCard
-        title={t("settings.host.displayGroup")}
-        icon={<Monitor className="size-3.5" />}
-      >
-        <HostFeatureFields form={props.form} updateForm={props.updateForm} />
-      </SectionCard>
-      <ToolbarCard form={form} setField={setField} />
-    </>
-  );
-}
-
-const SECTIONS: Record<Protocol, ComponentType<HostEditorSectionProps>> = {
-  rdp: RdpSection,
-  vnc: VncSection,
-  telnet: TelnetSection,
-};
-
-function registerNativeRdp(app: TermixApp): void {
-  let disposed = false;
-  app.onDispose(() => {
-    disposed = true;
-  });
-  void nativeRdpAvailable().then((available) => {
-    if (disposed || !available) return;
-    app.registerHostAction({
-      id: "rdp-native",
-      titleKey: "hosts.openNativeRdp",
-      icon: MonitorUp,
-      kind: "open",
-      order: 105,
-      when: (host) => protocolEnabled(host, "rdp"),
-      run: (host) => {
-        const record: RemoteHostLogin = host;
-        void openNativeRdp({
-          host: String(record.ip ?? ""),
-          port: hostRemoteOptions(record).rdpPort,
-          username: record.protocolAuth?.rdp?.username ?? undefined,
-          domain: rdpDomain(record),
-        })
-          .then((result) => {
-            if (result.success) toast.success(app.t("hosts.nativeRdpOpened"));
-            else toast.error(result.error || app.t("hosts.nativeRdpFailed"));
-          })
-          .catch(() => toast.error(app.t("hosts.nativeRdpFailed")));
-      },
-    });
-  });
-}
-
-function registerHostSurfaces(app: TermixApp): void {
-  for (const protocol of PROTOCOLS) {
-    const when = (host: PluginHostRecord) => protocolEnabled(host, protocol.id);
-
-    app.registerHostProtocol({
-      id: protocol.id,
-      settingKey: ENABLE_KEY[protocol.id],
-      portKey: PORT_KEY[protocol.id],
-      defaultPort: DEFAULT_PORT[protocol.id],
-      titleKey: protocol.titleKey,
-      descriptionKey: protocol.descriptionKey,
-      connectionOriginNoteKey: "hosts.connectionOriginGuacamoleNote",
-      icon: protocol.icon,
-      order: protocol.order,
-      quickConnect: protocol.quickConnect,
-    });
-
-    app.registerHostAction({
-      id: protocol.id,
-      titleKey: protocol.titleKey,
-      icon: protocol.icon,
-      kind: "connect",
-      priority: protocol.priority,
-      order: protocol.order,
-      tabType: protocol.id,
-      copyUrlView: protocol.id,
-      when,
-    });
-
-    app.registerPaletteEntry({
-      id: `remote-desktop.${protocol.id}`,
-      titleKey: protocol.paletteKey,
-      icon: protocol.icon,
-      keywords: [protocol.id],
-      scope: "host",
-      when: (host) => !!host && when(host),
-      run: (shell, host) => {
-        if (host) shell.openTab(host, protocol.id);
-      },
-    });
-
-    app.registerHostEditorSection({
-      id: protocol.id,
-      group: "top",
-      titleKey: protocol.titleKey,
-      icon: protocol.icon,
-      order: protocol.order / 5,
-      visible: (protocols) => !!protocols[ENABLE_KEY[protocol.id]],
-      component: SECTIONS[protocol.id],
-    });
-  }
-
-  app.registerHostEditorSection({
-    id: "remote-desktop-display",
-    group: "top",
-    titleKey: "settings.host.displayDefaultsTab",
-    icon: Monitor,
-    order: 40,
-    defaults: "only",
-    component: DisplayDefaultsSection,
-  });
-
-  if (isElectron()) registerNativeRdp(app);
-}
-
-export function activate(app: TermixApp): void {
-  setRemoteDesktopApp(app);
-  app.onDispose(() => setRemoteDesktopApp(null));
-
-  // Guest pages only draw shared streams.
-  app.registerSlotContribution("session.remoteDisplay", {
-    actionId: "remote-desktop.display",
-    titleKey: "hosts.tabRdp",
-    kind: "component",
-    component: RemoteDisplay as unknown as ComponentType<
-      Record<string, unknown>
-    >,
-  });
-  if (app.guest) return;
-
-  // The share button lives here, contributed by session sharing.
-  app.declareActionSlot({
-    id: REMOTE_DESKTOP_TOOLBAR_SLOT,
-    accepts: ["button"],
-  });
-
-  // Mints a token for presenting a host in a collab room.
-  app.registerAction(
-    "session.remoteDisplay.token",
-    async (hostId: number, origin: unknown, protocol: Protocol) => {
-      const response = await getGuacamoleTokenFromHost(
-        hostId,
-        origin as Parameters<typeof getGuacamoleTokenFromHost>[1],
-        protocol,
-      );
-      return response.guacamoleConnectionId
-        ? {
-            token: response.token,
-            connectionId: response.guacamoleConnectionId,
-          }
-        : null;
-    },
-  );
-
-  for (const protocol of PROTOCOLS) {
-    app.registerTab(protocol.id, RemoteDesktopTab, {
-      icon: protocol.icon,
-      titleKey: protocol.titleKey,
-      requiresHost: true,
-      noHostMessageKey: "remoteDesktop.noHostSelected",
-      persistent: true,
-      session: true,
-      restore: (host) => protocolEnabled(host, protocol.id),
-      activityTypes: [protocol.id],
-      standalone: RemoteDesktopStandalone,
-      preload: () => import("./GuacamoleApp"),
-    });
-  }
-
-  // An admin can turn Remote Desktop off; its ways in go with it.
-  let disposed = false;
-  app.onDispose(() => {
-    disposed = true;
-  });
-  void getGuacdStatus("local", { probe: false })
-    .then((status) => status.enabled !== false)
-    .catch(() => true)
-    .then((enabled) => {
-      if (!disposed && enabled) registerHostSurfaces(app);
-    });
-
-  app.registerSlotContribution("onboarding.features", {
-    actionId: "remote-desktop.feature",
-    titleKey: "onboarding.feature_desktop",
-    descriptionKey: "onboarding.feature_desktop_desc",
-    icon: Monitor,
-  });
-}
diff --git a/plugins/remote-desktop/src/frontend/quick-connect-guac-host.ts b/plugins/remote-desktop/src/frontend/quick-connect-guac-host.ts
deleted file mode 100644
index 42eda507c..000000000
--- a/plugins/remote-desktop/src/frontend/quick-connect-guac-host.ts
+++ /dev/null
@@ -1,28 +0,0 @@
-import type { GuacamoleQuickHost } from "./GuacamoleApp";
-import {
-  hostRemoteOptions,
-  type Protocol,
-  type RemoteHostLogin,
-} from "./host-remote";
-
-/** The slice of a quick-connect host that GuacamoleApp mints a token from. */
-export function quickConnectGuacHost(
-  host: RemoteHostLogin,
-): GuacamoleQuickHost {
-  const options = hostRemoteOptions(host);
-  const connectionType: Protocol = options.enableVnc ? "vnc" : "rdp";
-  const login =
-    host.quickConnectLogin?.protocol === connectionType
-      ? host.quickConnectLogin
-      : undefined;
-  return {
-    name: host.name ?? undefined,
-    ip: host.ip ?? "",
-    connectionType,
-    domain: login?.fields?.domain,
-    port: connectionType === "vnc" ? options.vncPort : options.rdpPort,
-    rdpAuthType: "direct",
-    username: login?.username,
-    password: login?.password,
-  };
-}
diff --git a/plugins/remote-desktop/src/frontend/rdp-credential-prompt.ts b/plugins/remote-desktop/src/frontend/rdp-credential-prompt.ts
deleted file mode 100644
index 80eb154e7..000000000
--- a/plugins/remote-desktop/src/frontend/rdp-credential-prompt.ts
+++ /dev/null
@@ -1,17 +0,0 @@
-import type { RemoteHostLogin } from "./host-remote";
-
-export function needsRdpCredentialPrompt({
-  protocol,
-  rdpAuthType,
-  authOverrides,
-}: {
-  protocol: "rdp" | "vnc" | "telnet";
-  rdpAuthType?: string;
-  authOverrides?: RemoteHostLogin["authOverrides"];
-}): boolean {
-  return (
-    protocol === "rdp" &&
-    rdpAuthType === "none" &&
-    !authOverrides?.rdp?.credentialId
-  );
-}
diff --git a/plugins/remote-desktop/src/frontend/remote-form.ts b/plugins/remote-desktop/src/frontend/remote-form.ts
deleted file mode 100644
index ad801826a..000000000
--- a/plugins/remote-desktop/src/frontend/remote-form.ts
+++ /dev/null
@@ -1,183 +0,0 @@
-import type {
-  HostEditorSectionProps,
-  HostProtocolAuthForm,
-} from "@termix/plugin-sdk/frontend";
-import { PLUGIN_ID, remoteOptions, type Protocol } from "./host-remote";
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-
-/**
- * The host editor fields the RDP, VNC and Telnet tabs edit. The logins are
- * core's, under form.protocolAuth (this plugin declares the protocols in its
- * manifest); the options (ports, security, guacd settings) are this plugin's
- * host settings. Both are presented here under the names the tabs use.
- */
-export interface RemoteDesktopForm {
-  domain: string;
-  security: string;
-  ignoreCert: boolean;
-  rdpPort: number;
-  vncPort: number;
-  telnetPort: number;
-  guacamoleConfig: Record<string, any>;
-  enableToolbar: boolean;
-  rdpAuthType: "direct" | "credential" | "none";
-  rdpCredentialId: string;
-  rdpUser: string;
-  rdpPassword: string;
-  vncAuthType: "direct" | "credential";
-  vncCredentialId: string;
-  vncUser: string;
-  vncPassword: string;
-  telnetAuthType: "direct" | "credential";
-  telnetCredentialId: string;
-  telnetUser: string;
-  telnetPassword: string;
-}
-
-export type RemoteFormSetField = <K extends keyof RemoteDesktopForm>(
-  key: K,
-  value: RemoteDesktopForm[K],
-) => void;
-
-/** Tab field name to this plugin's host setting key. */
-const SETTING_FOR_FIELD: Partial<Record<keyof RemoteDesktopForm, string>> = {
-  rdpPort: "rdpPort",
-  vncPort: "vncPort",
-  telnetPort: "telnetPort",
-  security: "rdpSecurity",
-  ignoreCert: "rdpIgnoreCert",
-  enableToolbar: "enableToolbar",
-};
-
-type LoginPart = "authType" | "credentialId" | "username" | "password";
-
-/** Tab field name to the protocol login it edits. */
-const LOGIN_FOR_FIELD: Partial<
-  Record<keyof RemoteDesktopForm, [Protocol, LoginPart | "domain"]>
-> = {
-  rdpAuthType: ["rdp", "authType"],
-  rdpCredentialId: ["rdp", "credentialId"],
-  rdpUser: ["rdp", "username"],
-  rdpPassword: ["rdp", "password"],
-  domain: ["rdp", "domain"],
-  vncAuthType: ["vnc", "authType"],
-  vncCredentialId: ["vnc", "credentialId"],
-  vncUser: ["vnc", "username"],
-  vncPassword: ["vnc", "password"],
-  telnetAuthType: ["telnet", "authType"],
-  telnetCredentialId: ["telnet", "credentialId"],
-  telnetUser: ["telnet", "username"],
-  telnetPassword: ["telnet", "password"],
-};
-
-type PluginSettingsBag = Record<string, Record<string, unknown>>;
-type LoginBag = Record<string, HostProtocolAuthForm>;
-
-const EMPTY_LOGIN: HostProtocolAuthForm = {
-  authType: "direct",
-  credentialId: "",
-  username: "",
-  password: "",
-  fields: {},
-};
-
-export function loginOf(
-  bag: LoginBag | undefined,
-  protocol: Protocol,
-): HostProtocolAuthForm {
-  const login = bag?.[protocol];
-  return login ? { ...EMPTY_LOGIN, ...login } : EMPTY_LOGIN;
-}
-
-function patchSettings(
-  current: Record<string, unknown>,
-  patch: (settings: Record<string, unknown>) => Record<string, unknown>,
-): Record<string, unknown> {
-  const bag = (current.pluginSettings as PluginSettingsBag | undefined) ?? {};
-  const mine = bag[PLUGIN_ID] ?? {};
-  return {
-    pluginSettings: { ...bag, [PLUGIN_ID]: { ...mine, ...patch(mine) } },
-  };
-}
-
-/** The form patch that sets one part of a protocol's login. */
-export function patchLogin(
-  current: Record<string, unknown>,
-  protocol: Protocol,
-  part: LoginPart | "domain",
-  value: unknown,
-): Record<string, unknown> {
-  const bag = (current.protocolAuth as LoginBag | undefined) ?? {};
-  const login = loginOf(bag, protocol);
-  const next: HostProtocolAuthForm =
-    part === "domain"
-      ? { ...login, fields: { ...login.fields, domain: String(value ?? "") } }
-      : ({ ...login, [part]: value } as HostProtocolAuthForm);
-  return { protocolAuth: { ...bag, [protocol]: next } };
-}
-
-export function remoteDesktopForm(props: HostEditorSectionProps): {
-  form: RemoteDesktopForm;
-  setField: RemoteFormSetField;
-  setGuacField: (key: string, value: unknown) => void;
-} {
-  const bag = props.form?.pluginSettings as PluginSettingsBag | undefined;
-  const logins = props.form?.protocolAuth as LoginBag | undefined;
-  const options = remoteOptions(bag?.[PLUGIN_ID]);
-  const rdp = loginOf(logins, "rdp");
-  const vnc = loginOf(logins, "vnc");
-  const telnet = loginOf(logins, "telnet");
-  const form: RemoteDesktopForm = {
-    rdpPort: options.rdpPort,
-    vncPort: options.vncPort,
-    telnetPort: options.telnetPort,
-    security: options.rdpSecurity,
-    ignoreCert: options.rdpIgnoreCert,
-    guacamoleConfig: options.guacamoleConfig as Record<string, any>,
-    enableToolbar: options.enableToolbar,
-    domain: rdp.fields.domain ?? "",
-    rdpAuthType: rdp.authType,
-    rdpCredentialId: rdp.credentialId,
-    rdpUser: rdp.username,
-    rdpPassword: rdp.password,
-    vncAuthType: vnc.authType === "credential" ? "credential" : "direct",
-    vncCredentialId: vnc.credentialId,
-    vncUser: vnc.username,
-    vncPassword: vnc.password,
-    telnetAuthType: telnet.authType === "credential" ? "credential" : "direct",
-    telnetCredentialId: telnet.credentialId,
-    telnetUser: telnet.username,
-    telnetPassword: telnet.password,
-  };
-
-  const setField: RemoteFormSetField = (key, value) => {
-    const login = LOGIN_FOR_FIELD[key];
-    if (login) {
-      props.updateForm((current) =>
-        patchLogin(current, login[0], login[1], value),
-      );
-      return;
-    }
-    const setting = SETTING_FOR_FIELD[key];
-    if (!setting) {
-      props.setField(key, value);
-      return;
-    }
-    props.updateForm((current) =>
-      patchSettings(current, () => ({ [setting]: value })),
-    );
-  };
-
-  const setGuacField = (key: string, value: unknown) =>
-    props.updateForm((current) =>
-      patchSettings(current, (mine) => ({
-        guacamoleConfig: {
-          ...remoteOptions(mine).guacamoleConfig,
-          [key]: value,
-        },
-      })),
-    );
-
-  return { form, setField, setGuacField };
-}
diff --git a/plugins/remote-desktop/tests/backend/drive-settings.test.ts b/plugins/remote-desktop/tests/backend/drive-settings.test.ts
deleted file mode 100644
index 68a5a3fdc..000000000
--- a/plugins/remote-desktop/tests/backend/drive-settings.test.ts
+++ /dev/null
@@ -1,34 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { withDriveSettings } from "../../src/backend/drive-settings.js";
-
-describe("withDriveSettings", () => {
-  it("gives each user a folder under GUACD_DRIVE_PATH and creates it", () => {
-    expect(
-      withDriveSettings({ "enable-drive": true }, "user-1", {
-        GUACD_DRIVE_PATH: "/termix-data/rdp-drive/",
-      }),
-    ).toEqual({
-      "enable-drive": true,
-      "drive-path": "/termix-data/rdp-drive/user-1",
-      "create-drive-path": true,
-    });
-  });
-
-  it("falls back to /drive when the environment says nothing", () => {
-    expect(
-      withDriveSettings({ "enable-drive": true }, "user-1", {}),
-    ).toMatchObject({ "drive-path": "/drive/user-1" });
-  });
-
-  it("leaves a host-chosen drive-path alone", () => {
-    const config = { "enable-drive": true, "drive-path": "/mnt/share" };
-    expect(
-      withDriveSettings(config, "user-1", { GUACD_DRIVE_PATH: "/x" }),
-    ).toBe(config);
-  });
-
-  it("does nothing when the drive is not enabled", () => {
-    const config = { "enable-drive": false };
-    expect(withDriveSettings(config, "user-1")).toBe(config);
-  });
-});
diff --git a/plugins/remote-desktop/tests/backend/host-settings.test.ts b/plugins/remote-desktop/tests/backend/host-settings.test.ts
deleted file mode 100644
index 95a427ae3..000000000
--- a/plugins/remote-desktop/tests/backend/host-settings.test.ts
+++ /dev/null
@@ -1,118 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  hostPayloadLegacy,
-  normalizeImportedHost,
-  userDefaultParams,
-} from "../../src/backend/host-settings.js";
-
-describe("normalizeImportedHost", () => {
-  it("reads a Termix export's pluginSettings", () => {
-    expect(
-      normalizeImportedHost({
-        pluginSettings: {
-          "remote-desktop": {
-            enableVnc: true,
-            vncPort: 5901,
-            guacamoleConfig: { cursor: "local" },
-          },
-        },
-      }),
-    ).toEqual({
-      enableVnc: true,
-      vncPort: 5901,
-      guacamoleConfig: { cursor: "local" },
-    });
-  });
-
-  it("reads the flat fields hosts had before 2.9.0", () => {
-    expect(
-      normalizeImportedHost({
-        enableRdp: true,
-        rdpPort: "3390",
-        security: "nla",
-        ignoreCert: 1,
-        guacamoleConfig: JSON.stringify({ dpi: 120 }),
-        enableTerminalToolbar: false,
-      }),
-    ).toEqual({
-      enableRdp: true,
-      rdpPort: 3390,
-      rdpSecurity: "nla",
-      rdpIgnoreCert: true,
-      guacamoleConfig: { dpi: 120 },
-      enableToolbar: false,
-    });
-  });
-
-  it("turns a connectionType-only host into its switch and port", () => {
-    expect(
-      normalizeImportedHost({ connectionType: "telnet", port: 2323 }),
-    ).toEqual({ enableTelnet: true, telnetPort: 2323 });
-  });
-
-  it("writes nothing for a plain SSH row", () => {
-    expect(
-      normalizeImportedHost({ connectionType: "ssh", port: 22 }),
-    ).toBeNull();
-  });
-
-  it("drops a port out of range", () => {
-    expect(normalizeImportedHost({ enableRdp: true, rdpPort: 70000 })).toEqual({
-      enableRdp: true,
-    });
-  });
-});
-
-describe("userDefaultParams", () => {
-  it("maps the user settings onto guacd parameters, skipping inherit", () => {
-    expect(
-      userDefaultParams({
-        colorDepth: "24",
-        resizeMethod: "reconnect",
-        disableCopy: "on",
-        enableWallpaper: "off",
-        enableDrive: "inherit",
-      }),
-    ).toEqual({
-      "color-depth": 24,
-      "resize-method": "reconnect",
-      "disable-copy": true,
-      "enable-wallpaper": false,
-    });
-  });
-});
-
-describe("hostPayloadLegacy", () => {
-  it("puts each login back in its 2.8 flat shape for older clients", () => {
-    expect(
-      hostPayloadLegacy(
-        {},
-        {
-          protocolAuth: {
-            rdp: {
-              authType: "direct",
-              credentialId: null,
-              username: "admin",
-              fields: { domain: "CORP" },
-              hasPassword: true,
-            },
-            vnc: { authType: "credential", credentialId: 4 },
-          },
-        },
-      ),
-    ).toEqual({
-      rdpAuthType: "direct",
-      rdpCredentialId: null,
-      rdpUser: "admin",
-      hasRdpPassword: true,
-      rdpDomain: "CORP",
-      domain: "CORP",
-      vncAuthType: "credential",
-      vncCredentialId: 4,
-    });
-  });
-
-  it("adds nothing for a host without logins", () => {
-    expect(hostPayloadLegacy({}, {})).toBeNull();
-  });
-});
diff --git a/plugins/remote-desktop/tests/backend/jump-tunnel-endpoint.test.ts b/plugins/remote-desktop/tests/backend/jump-tunnel-endpoint.test.ts
deleted file mode 100644
index af017f402..000000000
--- a/plugins/remote-desktop/tests/backend/jump-tunnel-endpoint.test.ts
+++ /dev/null
@@ -1,27 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { resolveJumpTunnelEndpoint } from "../../src/backend/jump-tunnel-endpoint.js";
-
-describe("resolveJumpTunnelEndpoint", () => {
-  it("keeps an in-process guacd tunnel on loopback", () => {
-    expect(resolveJumpTunnelEndpoint("localhost")).toEqual({
-      bindHost: "127.0.0.1",
-      advertisedHost: "127.0.0.1",
-    });
-  });
-
-  it("exposes the tunnel to a separate guacd container", () => {
-    expect(resolveJumpTunnelEndpoint("guacd")).toEqual({
-      bindHost: "0.0.0.0",
-      advertisedHost: "termix",
-    });
-  });
-
-  it("supports a custom backend hostname for external guacd", () => {
-    expect(
-      resolveJumpTunnelEndpoint("guacd.example", "termix-backend"),
-    ).toEqual({
-      bindHost: "0.0.0.0",
-      advertisedHost: "termix-backend",
-    });
-  });
-});
diff --git a/plugins/remote-desktop/tests/backend/macos-vnc-proxy.test.ts b/plugins/remote-desktop/tests/backend/macos-vnc-proxy.test.ts
deleted file mode 100644
index 6e097a6f0..000000000
--- a/plugins/remote-desktop/tests/backend/macos-vnc-proxy.test.ts
+++ /dev/null
@@ -1,115 +0,0 @@
-import net from "net";
-import { afterEach, describe, expect, it } from "vitest";
-import { createMacosVncCompatibilityProxy } from "../../src/backend/macos-vnc-proxy.js";
-
-const closers: Array<() => void> = [];
-
-afterEach(() => {
-  for (const close of closers.splice(0)) close();
-});
-
-async function listen(server: net.Server): Promise<number> {
-  return new Promise((resolve, reject) => {
-    server.once("error", reject);
-    server.listen(0, "127.0.0.1", () => {
-      resolve((server.address() as net.AddressInfo).port);
-    });
-  });
-}
-
-async function read(socket: net.Socket, length: number): Promise<Buffer> {
-  return new Promise((resolve, reject) => {
-    let received = Buffer.alloc(0);
-    const onData = (chunk: Buffer) => {
-      received = Buffer.concat([received, chunk]);
-      if (received.length < length) return;
-      socket.off("data", onData);
-      resolve(received);
-    };
-    socket.on("data", onData);
-    socket.once("error", reject);
-  });
-}
-
-describe("createMacosVncCompatibilityProxy", () => {
-  it("normalizes Apple's private RFB banner and forces classic VNC auth", async () => {
-    let clientBanner = "";
-    let selectedSecurityType = 0;
-    const target = net.createServer((socket) => {
-      socket.write("RFB 003.");
-      socket.write("889\n");
-      socket.once("data", (data) => {
-        clientBanner = data.toString("ascii");
-        socket.write(Buffer.from([5, 30, 33]));
-        socket.write(Buffer.from([36, 2, 35]));
-        socket.once("data", (selection) => {
-          selectedSecurityType = Number(selection[0]);
-          socket.write("desktop-data");
-        });
-      });
-    });
-    const targetPort = await listen(target);
-    closers.push(() => target.close());
-
-    const proxy = await createMacosVncCompatibilityProxy({
-      targetHost: "127.0.0.1",
-      targetPort,
-      bindHost: "127.0.0.1",
-    });
-    closers.push(proxy.close);
-
-    const client = net.createConnection(proxy.port, "127.0.0.1");
-    closers.push(() => client.destroy());
-    expect((await read(client, 12)).subarray(0, 12).toString("ascii")).toBe(
-      "RFB 003.008\n",
-    );
-    client.write("RFB 003.008\n");
-    expect([...(await read(client, 2))]).toEqual([1, 2]);
-    client.write(Buffer.from([2]));
-    expect((await read(client, 12)).toString("ascii")).toBe("desktop-data");
-    expect(clientBanner).toBe("RFB 003.008\n");
-    expect(selectedSecurityType).toBe(2);
-  });
-
-  it("passes standard RFB negotiation through unchanged", async () => {
-    const target = net.createServer((socket) => {
-      socket.write("RFB 003.008\n");
-      socket.once("data", () => socket.write(Buffer.from([2, 30, 2])));
-    });
-    const targetPort = await listen(target);
-    closers.push(() => target.close());
-    const proxy = await createMacosVncCompatibilityProxy({
-      targetHost: "127.0.0.1",
-      targetPort,
-      bindHost: "127.0.0.1",
-    });
-    closers.push(proxy.close);
-
-    const client = net.createConnection(proxy.port, "127.0.0.1");
-    closers.push(() => client.destroy());
-    expect((await read(client, 12)).toString("ascii")).toBe("RFB 003.008\n");
-    client.write("RFB 003.008\n");
-    expect([...(await read(client, 3))]).toEqual([2, 30, 2]);
-  });
-
-  it("passes Apple's security types through when VNC auth is unavailable", async () => {
-    const target = net.createServer((socket) => {
-      socket.write("RFB 003.889\n");
-      socket.once("data", () => socket.write(Buffer.from([2, 30, 33])));
-    });
-    const targetPort = await listen(target);
-    closers.push(() => target.close());
-    const proxy = await createMacosVncCompatibilityProxy({
-      targetHost: "127.0.0.1",
-      targetPort,
-      bindHost: "127.0.0.1",
-    });
-    closers.push(proxy.close);
-
-    const client = net.createConnection(proxy.port, "127.0.0.1");
-    closers.push(() => client.destroy());
-    expect((await read(client, 12)).toString("ascii")).toBe("RFB 003.008\n");
-    client.write("RFB 003.008\n");
-    expect([...(await read(client, 3))]).toEqual([2, 30, 33]);
-  });
-});
diff --git a/plugins/remote-desktop/tests/backend/rdp-settings.test.ts b/plugins/remote-desktop/tests/backend/rdp-settings.test.ts
deleted file mode 100644
index 2738c78d9..000000000
--- a/plugins/remote-desktop/tests/backend/rdp-settings.test.ts
+++ /dev/null
@@ -1,54 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  buildRdpSettings,
-  resolveRdpDomain,
-} from "../../src/backend/rdp-settings.js";
-
-describe("buildRdpSettings", () => {
-  it("keeps saved RDP settings authoritative over stale advanced config", () => {
-    expect(
-      buildRdpSettings({
-        port: 3390,
-        domain: "EXAMPLE",
-        security: "nla",
-        ignoreCert: true,
-        guacConfig: {
-          port: 3389,
-          domain: "OLD",
-          security: "rdp",
-          "ignore-cert": false,
-          "color-depth": 24,
-        },
-        guacdOverrides: { guacdHost: "guacd.internal" },
-      }),
-    ).toEqual({
-      port: 3390,
-      domain: "EXAMPLE",
-      security: "nla",
-      "ignore-cert": true,
-      "color-depth": 24,
-      guacdHost: "guacd.internal",
-    });
-  });
-
-  it("preserves an advanced security value when no saved value exists", () => {
-    expect(
-      buildRdpSettings({
-        port: 3389,
-        ignoreCert: false,
-        guacConfig: { security: "tls" },
-        guacdOverrides: {},
-      }).security,
-    ).toBe("tls");
-  });
-
-  it("uses the prompted domain for prompt-on-connect authentication", () => {
-    expect(resolveRdpDomain("none", "EXAMPLE", "OLD")).toBe("EXAMPLE");
-    expect(resolveRdpDomain("none", "", "OLD")).toBe("");
-  });
-
-  it("keeps the stored domain for saved authentication", () => {
-    expect(resolveRdpDomain("direct", "EXAMPLE", "SAVED")).toBe("SAVED");
-    expect(resolveRdpDomain("none", undefined, "SAVED")).toBe("SAVED");
-  });
-});
diff --git a/plugins/remote-desktop/tests/backend/recording-settings.test.ts b/plugins/remote-desktop/tests/backend/recording-settings.test.ts
deleted file mode 100644
index 8504e5f75..000000000
--- a/plugins/remote-desktop/tests/backend/recording-settings.test.ts
+++ /dev/null
@@ -1,68 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { withRecordingSettings } from "../../src/backend/recording-settings.js";
-
-const PATH = "/app/data/session_recordings/guacamole";
-const NAME = "b7e6c0f2-0000-4000-8000-000000000000.guac";
-
-describe("withRecordingSettings", () => {
-  it("takes ownership of the location and filename", () => {
-    const merged = withRecordingSettings(
-      {
-        "recording-path": "/var/lib/termix/recordings",
-        "recording-name": "${GUAC_USERNAME}-${GUAC_DATE}",
-        "create-recording-path": false,
-      },
-      PATH,
-      NAME,
-    );
-
-    expect(merged).toMatchObject({
-      "recording-path": PATH,
-      "recording-name": NAME,
-      "create-recording-path": true,
-    });
-  });
-
-  it("defaults the content flags when the host has no opinion", () => {
-    expect(withRecordingSettings({}, PATH, NAME)).toMatchObject({
-      "recording-exclude-output": false,
-      "recording-include-keys": true,
-    });
-  });
-
-  it("keeps the host's content flags, including the falsy ones", () => {
-    const merged = withRecordingSettings(
-      {
-        "recording-exclude-output": true,
-        "recording-include-keys": false,
-      },
-      PATH,
-      NAME,
-    );
-
-    expect(merged).toMatchObject({
-      "recording-exclude-output": true,
-      "recording-include-keys": false,
-    });
-  });
-
-  it("leaves unrelated settings alone", () => {
-    const merged = withRecordingSettings(
-      { "recording-exclude-mouse": true, width: "1920" },
-      PATH,
-      NAME,
-    );
-
-    expect(merged).toMatchObject({
-      "recording-exclude-mouse": true,
-      width: "1920",
-    });
-  });
-
-  it("does not mutate the settings it was given", () => {
-    const original = { "recording-path": "/tmp/mine" };
-    withRecordingSettings(original, PATH, NAME);
-
-    expect(original).toEqual({ "recording-path": "/tmp/mine" });
-  });
-});
diff --git a/plugins/remote-desktop/tests/backend/routes.test.ts b/plugins/remote-desktop/tests/backend/routes.test.ts
deleted file mode 100644
index c7571bca9..000000000
--- a/plugins/remote-desktop/tests/backend/routes.test.ts
+++ /dev/null
@@ -1,420 +0,0 @@
-import http from "node:http";
-import net, { type AddressInfo } from "node:net";
-import express, { type Router } from "express";
-import { afterEach, describe, expect, it } from "vitest";
-import {
-  createMockCtx,
-  type MockPluginContext,
-} from "@termix/plugin-sdk/testing";
-import type {
-  PluginContext,
-  PluginProtocolTarget,
-} from "@termix/plugin-sdk/backend";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-import { activate } from "../../src/backend/index.js";
-import { GuacamoleTokenService } from "../../src/backend/token-service.js";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-// Without a fixed key each token service picks its own.
-process.env.GUACAMOLE_ENCRYPTION_KEY = "ab".repeat(32);
-
-function target(
-  overrides: Partial<PluginProtocolTarget["auth"]> = {},
-): PluginProtocolTarget {
-  return {
-    host: {
-      id: 7,
-      name: "Win box",
-      ip: "10.0.0.7",
-      port: 22,
-      ownerUserId: "user-1",
-      jumpHosts: [],
-    },
-    shared: false,
-    auth: {
-      authType: "direct",
-      username: "admin",
-      password: "secret",
-      fields: { domain: "CORP" },
-      ...overrides,
-    },
-  };
-}
-
-interface Server {
-  mock: MockPluginContext;
-  request: (
-    method: string,
-    path: string,
-    body?: unknown,
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any }>;
-  close: () => Promise<void>;
-}
-
-let server: Server | null = null;
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-});
-
-async function start(
-  options: {
-    protocolTargets?: Record<string, PluginProtocolTarget>;
-    services?: Record<string, object>;
-    capabilities?: string[];
-  } = {},
-): Promise<Server> {
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: options.capabilities ?? manifest.capabilities,
-    router: () => (router = express.Router()),
-    protocolTargets: options.protocolTargets,
-    services: options.services,
-  });
-  await activate(mock.ctx as PluginContext);
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") ?? "user-1");
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-  const httpServer = http.createServer(app);
-  await new Promise<void>((resolve) => httpServer.listen(0, resolve));
-  const { port } = httpServer.address() as AddressInfo;
-
-  return {
-    mock,
-    async request(method, path, body) {
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        headers: body ? { "content-type": "application/json" } : {},
-        body: body ? JSON.stringify(body) : undefined,
-      });
-      const text = await response.text();
-      return { status: response.status, body: text ? JSON.parse(text) : null };
-    },
-    async close() {
-      await new Promise<void>((resolve) => httpServer.close(() => resolve()));
-      for (const dispose of [...mock.disposals].reverse()) await dispose();
-    },
-  };
-}
-
-const tokens = new GuacamoleTokenService();
-
-describe("POST /connect-host/:hostId", () => {
-  it("mints a token from the resolved login and the host's own settings", async () => {
-    server = await start({ protocolTargets: { "7:rdp": target() } });
-    await server.mock.ctx.settings.setHost(7, "enableRdp", true);
-    await server.mock.ctx.settings.setHost(7, "rdpPort", 3390);
-    await server.mock.ctx.settings.setHost(7, "rdpSecurity", "nla");
-    await server.mock.ctx.settings.setHost(7, "guacamoleConfig", {
-      "color-depth": 16,
-      "enable-wallpaper": "auto",
-    });
-
-    const response = await server.request("POST", "/connect-host/7", {
-      protocol: "rdp",
-    });
-
-    expect(response.status).toBe(200);
-    expect(response.body.termixConnectId).toEqual(expect.any(String));
-    const token = tokens.decryptToken(response.body.token);
-    expect(token?.connection.settings).toMatchObject({
-      hostname: "10.0.0.7",
-      port: 3390,
-      username: "admin",
-      password: "secret",
-      domain: "CORP",
-      security: "nla",
-      "color-depth": 16,
-    });
-    expect(token?.connection.settings).not.toHaveProperty("enable-wallpaper");
-    expect(token?.termixMeta).toMatchObject({
-      hostId: 7,
-      hostName: "Win box",
-      protocol: "rdp",
-    });
-    expect(server.mock.audits.at(-1)).toMatchObject({
-      action: "rdp_connect",
-      success: true,
-    });
-  });
-
-  it("puts the host's display settings under its own guacd settings", async () => {
-    server = await start({ protocolTargets: { "7:rdp": target() } });
-    await server.mock.ctx.settings.setHost(7, "enableRdp", true);
-    await server.mock.ctx.settings.setHost(7, "guacamoleConfig", {
-      "color-depth": 32,
-    });
-    // What the host follows from its defaults.
-    await server.mock.ctx.settings.setHost(7, "colorDepth", "16");
-    await server.mock.ctx.settings.setHost(7, "disableCopy", "on");
-
-    const response = await server.request("POST", "/connect-host/7", {
-      protocol: "rdp",
-    });
-    const settings = tokens.decryptToken(response.body.token)?.connection
-      .settings;
-    expect(settings?.["color-depth"]).toBe(32);
-    expect(settings?.["disable-copy"]).toBe(true);
-  });
-
-  it("uses the prompted login when the host asks at connect time", async () => {
-    server = await start({
-      protocolTargets: { "7:rdp": target({ authType: "none", username: "" }) },
-    });
-    await server.mock.ctx.settings.setHost(7, "enableRdp", true);
-
-    const response = await server.request("POST", "/connect-host/7", {
-      protocol: "rdp",
-      promptedUsername: "bob",
-      promptedPassword: "pw",
-      promptedDomain: "",
-    });
-    const settings = tokens.decryptToken(response.body.token)?.connection
-      .settings;
-    expect(settings).toMatchObject({ username: "bob", password: "pw" });
-  });
-
-  it("refuses a protocol the host has switched off", async () => {
-    server = await start({ protocolTargets: { "7:vnc": target() } });
-    const response = await server.request("POST", "/connect-host/7", {
-      protocol: "vnc",
-    });
-    expect(response.status).toBe(400);
-  });
-
-  it("answers 404 when the caller cannot reach the host", async () => {
-    server = await start();
-    await server.mock.ctx.settings.setHost(7, "enableRdp", true);
-    const response = await server.request("POST", "/connect-host/7", {
-      protocol: "rdp",
-    });
-    expect(response.status).toBe(404);
-  });
-
-  it("refuses everything while an admin has turned it off", async () => {
-    server = await start({ protocolTargets: { "7:rdp": target() } });
-    await server.mock.ctx.settings.set("enabled", false);
-    await server.mock.ctx.settings.setHost(7, "enableRdp", true);
-
-    expect(
-      (await server.request("POST", "/connect-host/7", { protocol: "rdp" }))
-        .status,
-    ).toBe(403);
-    expect(
-      (
-        await server.request("POST", "/token", {
-          type: "rdp",
-          hostname: "10.0.0.9",
-        })
-      ).status,
-    ).toBe(403);
-    const status = await server.request("GET", "/status?probe=0");
-    expect(status.body.enabled).toBe(false);
-  });
-
-  it("records only when session recording is on for the host", async () => {
-    const enabledFor = async (hostId: number) => hostId === 7;
-    server = await start({
-      protocolTargets: { "7:rdp": target() },
-      services: {
-        "recordings.writer": {
-          enabledFor,
-          createFinished: async () => ({ id: 1 }),
-        },
-      },
-    });
-    await server.mock.ctx.settings.setHost(7, "enableRdp", true);
-    const response = await server.request("POST", "/connect-host/7", {
-      protocol: "rdp",
-    });
-    const token = tokens.decryptToken(response.body.token);
-    expect(token?.recording).toMatchObject({ hostId: 7, protocol: "rdp" });
-    expect(token?.connection.settings["recording-name"]).toEqual(
-      expect.any(String),
-    );
-  });
-});
-
-describe("the rest of the routes", () => {
-  it("mints a quick connect token with the caller's defaults", async () => {
-    server = await start();
-    await server.mock.ctx.settings.setUser("user-1", "colorDepth", "24");
-    const response = await server.request("POST", "/token", {
-      type: "rdp",
-      hostname: "10.0.0.9",
-      username: "u",
-      password: "p",
-    });
-    expect(response.status).toBe(200);
-    expect(
-      tokens.decryptToken(response.body.token)?.connection.settings,
-    ).toMatchObject({ hostname: "10.0.0.9", port: 3389, "color-depth": 24 });
-  });
-
-  it("ignores guacd and path settings a quick connect tries to set", async () => {
-    server = await start();
-    const response = await server.request("POST", "/token", {
-      type: "rdp",
-      hostname: "10.0.0.9",
-      guacdHost: "attacker.example",
-      guacdPort: 4822,
-      "drive-path": "/etc",
-      "recording-path": "/tmp/x",
-      width: 800,
-    });
-    expect(response.status).toBe(200);
-    const token = tokens.decryptToken(response.body.token);
-    expect(token?.connection.guacdHost).toBeUndefined();
-    expect(token?.connection.guacdPort).toBeUndefined();
-    expect(token?.connection.settings["drive-path"]).toBeUndefined();
-    expect(token?.connection.settings["recording-path"]).toBeUndefined();
-    expect(token?.connection.settings.width).toBe(800);
-  });
-
-  it("offers native RDP only in the desktop app", async () => {
-    server = await start();
-    expect((await server.request("GET", "/native-rdp")).body).toEqual({
-      available: false,
-    });
-    expect(
-      (await server.request("POST", "/native-rdp", { host: "10.0.0.7" }))
-        .status,
-    ).toBe(404);
-  });
-
-  it("does not hand out another user's session id", async () => {
-    server = await start();
-    const response = await server.request("GET", "/connection/unknown");
-    expect(response.body).toEqual({ guacamoleConnectionId: null });
-  });
-});
-
-describe("activate", () => {
-  it("fails closed without network:serve", async () => {
-    await expect(
-      start({
-        capabilities: manifest.capabilities.filter(
-          (capability) => capability !== "network:serve",
-        ),
-      }),
-    ).rejects.toThrow(/network:serve/);
-  });
-
-  it("cannot read a host's login without credentials:read", async () => {
-    server = await start({
-      protocolTargets: { "7:rdp": target() },
-      capabilities: manifest.capabilities.filter(
-        (capability) => capability !== "credentials:read",
-      ),
-    });
-    await server.mock.ctx.settings.setHost(7, "enableRdp", true);
-    const response = await server.request("POST", "/connect-host/7", {
-      protocol: "rdp",
-    });
-    expect(response.status).toBe(500);
-    expect(server.mock.checked).toContain("credentials:read");
-  });
-
-  it("provides sessions.live for rdp, vnc and telnet", async () => {
-    server = await start();
-    expect([...server.mock.services.keys()].sort()).toEqual(
-      expect.arrayContaining([
-        "sessions.live#rdp",
-        "sessions.live#telnet",
-        "sessions.live#vnc",
-      ]),
-    );
-  });
-});
-
-describe("saved host guacd status", () => {
-  it("probes the same override used by the connection token", async () => {
-    const guacd = net.createServer((socket) => socket.end());
-    await new Promise<void>((resolve) => guacd.listen(0, "127.0.0.1", resolve));
-    try {
-      const port = (guacd.address() as AddressInfo).port;
-      server = await start({ protocolTargets: { "7:rdp": target() } });
-      await server.mock.ctx.settings.setHost(7, "enableRdp", true);
-      await server.mock.ctx.settings.setHost(7, "guacamoleConfig", {
-        "guacd-hostname": "127.0.0.1",
-        "guacd-port": String(port),
-      });
-      const status = await server.request(
-        "GET",
-        "/status?hostId=7&protocol=rdp",
-      );
-      expect(status.status).toBe(200);
-      expect(status.body.guacd).toEqual({
-        host: "127.0.0.1",
-        port,
-        status: "connected",
-      });
-      const result = await server.request("POST", "/connect-host/7", {
-        protocol: "rdp",
-      });
-      expect(tokens.decryptToken(result.body.token)?.connection).toMatchObject({
-        guacdHost: status.body.guacd.host,
-        guacdPort: status.body.guacd.port,
-      });
-    } finally {
-      await new Promise<void>((resolve) => guacd.close(() => resolve()));
-    }
-  });
-
-  it("keeps the global port for a host-only override and global config when absent", async () => {
-    server = await start({ protocolTargets: { "7:rdp": target() } });
-    await server.mock.ctx.settings.setHost(7, "enableRdp", true);
-    const global = await server.request("GET", "/status?probe=0");
-    const inherited = await server.request(
-      "GET",
-      "/status?probe=0&hostId=7&protocol=rdp",
-    );
-    expect(inherited.body.guacd).toEqual(global.body.guacd);
-    await server.mock.ctx.settings.setHost(7, "guacamoleConfig", {
-      "guacd-hostname": "custom.example",
-    });
-    const overridden = await server.request(
-      "GET",
-      "/status?probe=0&hostId=7&protocol=rdp",
-    );
-    expect(overridden.body.guacd).toEqual({
-      ...global.body.guacd,
-      host: "custom.example",
-    });
-  });
-
-  it("refuses a host the caller cannot resolve", async () => {
-    server = await start();
-    await server.mock.ctx.settings.setHost(7, "enableRdp", true);
-    const result = await server.request("GET", "/status?hostId=7&protocol=rdp");
-    expect(result.status).toBe(404);
-    expect(result.body.guacd).toBeUndefined();
-  });
-
-  it("refuses disabled protocols", async () => {
-    server = await start({ protocolTargets: { "7:rdp": target() } });
-    const result = await server.request("GET", "/status?hostId=7&protocol=rdp");
-    expect(result.status).toBe(400);
-  });
-
-  it.each([
-    "hostId=bad&protocol=rdp",
-    "hostId=0&protocol=rdp",
-    "hostId=7&protocol=ssh",
-    "hostId=7",
-  ])("rejects invalid queries: %s", async (query) => {
-    server = await start();
-    expect((await server.request("GET", `/status?${query}`)).status).toBe(400);
-  });
-});
diff --git a/plugins/remote-desktop/tests/backend/sessions.test.ts b/plugins/remote-desktop/tests/backend/sessions.test.ts
deleted file mode 100644
index 1a9716e90..000000000
--- a/plugins/remote-desktop/tests/backend/sessions.test.ts
+++ /dev/null
@@ -1,126 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { RemoteSessions } from "../../src/backend/sessions.js";
-import { createLiveSessions } from "../../src/backend/live-sessions.js";
-import { GuacamoleTokenService } from "../../src/backend/token-service.js";
-
-const meta = {
-  termixConnectId: "c1",
-  hostId: 7,
-  hostName: "Win box",
-  ownerUserId: "user-1",
-  protocol: "rdp" as const,
-  tabInstanceId: "tab-1",
-};
-
-afterEach(() => {
-  vi.useRealTimers();
-});
-
-describe("RemoteSessions", () => {
-  it("moves parked resources onto the session and releases them on close", () => {
-    const sessions = new RemoteSessions();
-    const tunnel = vi.fn();
-    const tracking = vi.fn();
-    sessions.park("c1", [tunnel]);
-    sessions.opened(meta, "g1", [tracking]);
-
-    expect(sessions.byConnect("c1")?.guacamoleConnectionId).toBe("g1");
-    expect(sessions.byGuacamole("g1")?.hostName).toBe("Win box");
-    expect(tunnel).not.toHaveBeenCalled();
-
-    sessions.closed("c1");
-    expect(tunnel).toHaveBeenCalledOnce();
-    expect(tracking).toHaveBeenCalledOnce();
-    expect(sessions.byGuacamole("g1")).toBeNull();
-  });
-
-  it.each(["vnc", "rdp"] as const)(
-    "keeps an opened %s session's proxy and jump tunnel alive beyond one hour",
-    (protocol) => {
-      vi.useFakeTimers();
-      const sessions = new RemoteSessions();
-      const proxy = vi.fn();
-      const tunnel = vi.fn();
-      sessions.park("c1", [proxy, tunnel]);
-      sessions.opened({ ...meta, protocol }, "g1");
-      vi.advanceTimersByTime(2 * 60 * 60 * 1000);
-      expect(proxy).not.toHaveBeenCalled();
-      expect(tunnel).not.toHaveBeenCalled();
-      expect(sessions.byConnect("c1")?.guacamoleConnectionId).toBe("g1");
-      sessions.closed("c1");
-      sessions.closed("c1");
-      expect(proxy).toHaveBeenCalledOnce();
-      expect(tunnel).toHaveBeenCalledOnce();
-    },
-  );
-
-  it("releases a tunnel guacd never used", () => {
-    vi.useFakeTimers();
-    const sessions = new RemoteSessions(1000);
-    const tunnel = vi.fn();
-    sessions.park("c1", [tunnel]);
-    vi.advanceTimersByTime(1000);
-    expect(tunnel).toHaveBeenCalledOnce();
-  });
-
-  it("releases everything on clear, and one failing close does not stop the rest", () => {
-    const sessions = new RemoteSessions();
-    const failing = vi.fn(() => {
-      throw new Error("already closed");
-    });
-    const pending = vi.fn();
-    const open = vi.fn();
-    sessions.park("c2", [failing, pending]);
-    sessions.park("c1", [open]);
-    sessions.opened(meta, "g1");
-    sessions.clear();
-    expect(pending).toHaveBeenCalledOnce();
-    expect(open).toHaveBeenCalledOnce();
-  });
-});
-
-describe("sessions.live providers", () => {
-  const tokens = new GuacamoleTokenService();
-
-  it("describes a live session of its own protocol only", () => {
-    const sessions = new RemoteSessions();
-    sessions.opened(meta, "g1");
-    const deps = { sessions, tokens, endSession: vi.fn(() => true) };
-    const rdp = createLiveSessions("rdp", deps);
-    const vnc = createLiveSessions("vnc", deps);
-
-    expect(rdp.getSession("g1")).toMatchObject({
-      id: "g1",
-      userId: "user-1",
-      hostId: 7,
-      hostName: "Win box",
-      isConnected: true,
-      tabInstanceId: "tab-1",
-    });
-    expect(vnc.getSession("g1")).toBeNull();
-  });
-
-  it("mints a join token for a viewer and refuses an unknown session", () => {
-    const sessions = new RemoteSessions();
-    sessions.opened(meta, "g1");
-    const rdp = createLiveSessions("rdp", {
-      sessions,
-      tokens,
-      endSession: vi.fn(() => true),
-    });
-
-    const token = tokens.decryptToken(rdp.createViewerToken("g1", true));
-    expect(token?.connection).toMatchObject({ join: "g1", readOnly: true });
-    expect(token?.recording).toBeUndefined();
-    expect(() => rdp.createViewerToken("nope", false)).toThrow();
-  });
-
-  it("ends the session for its owner", () => {
-    const sessions = new RemoteSessions();
-    sessions.opened(meta, "g1");
-    const endSession = vi.fn(() => true);
-    const rdp = createLiveSessions("rdp", { sessions, tokens, endSession });
-    rdp.ownerEndSession("g1", "owner ended");
-    expect(endSession).toHaveBeenCalledWith("g1");
-  });
-});
diff --git a/plugins/remote-desktop/tests/backend/token-security.test.ts b/plugins/remote-desktop/tests/backend/token-security.test.ts
deleted file mode 100644
index 75e86bde2..000000000
--- a/plugins/remote-desktop/tests/backend/token-security.test.ts
+++ /dev/null
@@ -1,97 +0,0 @@
-/**
- * A display token is the only credential on the public /display socket, so
- * it has to be one this server minted, unedited and recent.
- */
-
-import { describe, expect, it } from "vitest";
-import {
-  GuacamoleTokenService,
-  TOKEN_TTL_MS,
-  isServerOwnedSetting,
-} from "../../src/backend/token-service.js";
-
-process.env.GUACAMOLE_ENCRYPTION_KEY = "ab".repeat(32);
-
-function decode(token: string) {
-  return JSON.parse(Buffer.from(token, "base64").toString("utf8")) as {
-    iv: string;
-    value: string;
-    mac: string;
-  };
-}
-
-function encode(data: unknown): string {
-  return Buffer.from(JSON.stringify(data)).toString("base64");
-}
-
-describe("verifyToken", () => {
-  it("accepts a fresh token it minted", () => {
-    const tokens = new GuacamoleTokenService();
-    const token = tokens.createRdpToken("10.0.0.7", "admin", "secret");
-    expect(tokens.verifyToken(token)?.connection.settings.hostname).toBe(
-      "10.0.0.7",
-    );
-  });
-
-  it("refuses an edited ciphertext or IV", () => {
-    const tokens = new GuacamoleTokenService();
-    const data = decode(tokens.createRdpToken("10.0.0.7", "admin", "secret"));
-    const iv = Buffer.from(data.iv, "base64");
-    iv[0] ^= 0xff;
-    expect(
-      tokens.verifyToken(encode({ ...data, iv: iv.toString("base64") })),
-    ).toBeNull();
-    const ciphertext = Buffer.from(data.value, "base64");
-    ciphertext[0] ^= 0xff;
-    expect(
-      tokens.verifyToken(
-        encode({ ...data, value: ciphertext.toString("base64") }),
-      ),
-    ).toBeNull();
-  });
-
-  it("refuses a token with no MAC, as guacamole-lite alone would accept", () => {
-    const tokens = new GuacamoleTokenService();
-    const { iv, value } = decode(tokens.createRdpToken("h", "u", "p"));
-    expect(tokens.verifyToken(encode({ iv, value }))).toBeNull();
-  });
-
-  it("refuses a token once it is older than the TTL", () => {
-    let now = 1_000_000;
-    const tokens = new GuacamoleTokenService(undefined, () => now);
-    const token = tokens.createJoinToken("session-1", true);
-    now += TOKEN_TTL_MS - 1;
-    expect(tokens.verifyToken(token)).not.toBeNull();
-    now += 2;
-    expect(tokens.verifyToken(token)).toBeNull();
-  });
-
-  it("refuses garbage", () => {
-    const tokens = new GuacamoleTokenService();
-    expect(tokens.verifyToken("not-a-token")).toBeNull();
-    expect(tokens.verifyToken(encode({ iv: 1 }))).toBeNull();
-  });
-});
-
-describe("isServerOwnedSetting", () => {
-  it.each([
-    "guacdHost",
-    "guacdPort",
-    "drive-path",
-    "create-drive-path",
-    "recording-path",
-    "recording-name",
-    "create-recording-path",
-    "typescript-path",
-    "sftp-private-key-path",
-  ])("keeps %s for the server", (key) => {
-    expect(isServerOwnedSetting(key)).toBe(true);
-  });
-
-  it.each(["width", "security", "ignore-cert", "color-depth", "enable-drive"])(
-    "lets a caller set %s",
-    (key) => {
-      expect(isServerOwnedSetting(key)).toBe(false);
-    },
-  );
-});
diff --git a/plugins/remote-desktop/tests/backend/token-service.test.ts b/plugins/remote-desktop/tests/backend/token-service.test.ts
deleted file mode 100644
index ffb6d3511..000000000
--- a/plugins/remote-desktop/tests/backend/token-service.test.ts
+++ /dev/null
@@ -1,96 +0,0 @@
-import { describe, expect, it } from "vitest";
-
-import { GuacamoleTokenService } from "../../src/backend/token-service.js";
-
-describe("GuacamoleTokenService", () => {
-  const tokenService = new GuacamoleTokenService();
-
-  it("disables RDP pre-authentication when no credentials are configured", () => {
-    const token = tokenService.createRdpToken("windows.example.test", "", "");
-    const decrypted = tokenService.decryptToken(token);
-
-    expect(decrypted?.connection.settings).toMatchObject({
-      hostname: "windows.example.test",
-      port: 3389,
-      "ignore-cert": true,
-      "disable-auth": true,
-    });
-    expect(decrypted?.connection.settings.username).toBeUndefined();
-    expect(decrypted?.connection.settings.password).toBeUndefined();
-  });
-
-  it("keeps normal RDP credential authentication unchanged", () => {
-    const token = tokenService.createRdpToken(
-      "windows.example.test",
-      "Administrator",
-      "secret",
-    );
-    const decrypted = tokenService.decryptToken(token);
-
-    expect(decrypted?.connection.settings).toMatchObject({
-      hostname: "windows.example.test",
-      username: "Administrator",
-      password: "secret",
-      port: 3389,
-    });
-    expect(decrypted?.connection.settings["disable-auth"]).toBeUndefined();
-  });
-
-  it("preserves recording metadata outside guacd connection settings", () => {
-    const recording = {
-      hostId: 42,
-      userId: "user-1",
-      protocol: "vnc" as const,
-      path: "recording.guac",
-      startedAt: "2026-07-14T00:00:00.000Z",
-    };
-    const token = tokenService.createVncToken(
-      "vnc.example.test",
-      "user",
-      "secret",
-      {},
-      recording,
-    );
-
-    expect(tokenService.decryptToken(token)?.recording).toEqual(recording);
-  });
-
-  it("preserves termixMeta through the encrypt/decrypt round trip", () => {
-    const termixMeta = {
-      termixConnectId: "connect-1",
-      hostId: 7,
-      hostName: "windows",
-      ownerUserId: "user-1",
-      protocol: "rdp" as const,
-      tabInstanceId: null,
-    };
-    const token = tokenService.createRdpToken(
-      "windows.example.test",
-      "Administrator",
-      "secret",
-      {},
-      undefined,
-      termixMeta,
-    );
-
-    expect(tokenService.decryptToken(token)?.termixMeta).toEqual(termixMeta);
-  });
-
-  it("createJoinToken sets connection.join, not connection.type", () => {
-    const token = tokenService.createJoinToken("guacd-conn-123", true);
-    const decrypted = tokenService.decryptToken(token);
-
-    expect(decrypted?.connection.join).toBe("guacd-conn-123");
-    expect(decrypted?.connection.type).toBeUndefined();
-    expect(decrypted?.connection.readOnly).toBe(true);
-  });
-
-  it("createJoinToken round-trips a read-write join through decryptToken", () => {
-    const token = tokenService.createJoinToken("guacd-conn-456", false);
-    const decrypted = tokenService.decryptToken(token);
-
-    expect(decrypted?.connection.join).toBe("guacd-conn-456");
-    expect(decrypted?.connection.readOnly).toBe(false);
-    expect(decrypted?.recording).toBeUndefined();
-  });
-});
diff --git a/plugins/remote-desktop/tests/frontend/GuacamoleToolbar.test.tsx b/plugins/remote-desktop/tests/frontend/GuacamoleToolbar.test.tsx
deleted file mode 100644
index 06e265d30..000000000
--- a/plugins/remote-desktop/tests/frontend/GuacamoleToolbar.test.tsx
+++ /dev/null
@@ -1,152 +0,0 @@
-import React from "react";
-import { fireEvent, render } from "@testing-library/react";
-import { describe, expect, it, vi } from "vitest";
-import { GuacamoleToolbar } from "../../src/frontend/GuacamoleToolbar.js";
-import type { GuacamoleDisplayHandle } from "../../src/frontend/GuacamoleDisplay.js";
-
-vi.mock("react-i18next", async (importOriginal) => ({
-  ...(await importOriginal<typeof import("react-i18next")>()),
-  useTranslation: () => ({ t: (key: string) => key }),
-}));
-
-describe("GuacamoleToolbar Windows key", () => {
-  it("sends Super_L for Win shortcuts and the sticky modifier", () => {
-    const sendKey = vi.fn();
-    const displayRef = {
-      current: {
-        disconnect: vi.fn(),
-        isConnected: () => true,
-        sendKey,
-        sendMouse: vi.fn(),
-        setClipboard: vi.fn(),
-        getFilesystem: () => null,
-        uploadFile: async () => {},
-        zoomIn: vi.fn(() => 1.25),
-        zoomOut: vi.fn(() => 0.75),
-        resetZoom: vi.fn(() => 1),
-      } satisfies GuacamoleDisplayHandle,
-    } as React.RefObject<GuacamoleDisplayHandle>;
-    const { getByText } = render(
-      <GuacamoleToolbar
-        displayRef={displayRef}
-        protocol="rdp"
-        metaKeyFamily="win"
-      />,
-    );
-
-    fireEvent.click(getByText("Win+L"));
-    expect(sendKey.mock.calls).toEqual([
-      [0xffeb, true],
-      [0x006c, true],
-      [0x006c, false],
-      [0xffeb, false],
-    ]);
-
-    sendKey.mockClear();
-    fireEvent.click(getByText("Win"));
-    expect(sendKey.mock.calls).toEqual([
-      [0xffeb, true],
-      [0xffeb, false],
-    ]);
-
-    sendKey.mockClear();
-    fireEvent.click(getByText("remoteDesktop.toolbar.win"));
-    expect(sendKey).toHaveBeenCalledWith(0xffeb, true);
-  });
-
-  it.each(["vnc", "rdp"] as const)(
-    "exposes working zoom controls for %s",
-    (protocol) => {
-      const zoomIn = vi.fn(() => 1.25);
-      const zoomOut = vi.fn(() => 0.75);
-      const resetZoom = vi.fn(() => 1);
-      const displayRef = {
-        current: {
-          disconnect: vi.fn(),
-          isConnected: () => true,
-          sendKey: vi.fn(),
-          sendMouse: vi.fn(),
-          setClipboard: vi.fn(),
-          getFilesystem: () => null,
-          uploadFile: async () => {},
-          zoomIn,
-          zoomOut,
-          resetZoom,
-        } satisfies GuacamoleDisplayHandle,
-      } as React.RefObject<GuacamoleDisplayHandle>;
-      const { getByLabelText, getByText } = render(
-        <GuacamoleToolbar
-          displayRef={displayRef}
-          protocol={protocol}
-          zoom={1.25}
-        />,
-      );
-
-      fireEvent.click(getByLabelText("remoteDesktop.toolbar.zoomOut"));
-      fireEvent.click(getByLabelText("remoteDesktop.toolbar.zoomIn"));
-      fireEvent.click(getByText("125%"));
-      expect(zoomOut).toHaveBeenCalledOnce();
-      expect(zoomIn).toHaveBeenCalledOnce();
-      expect(resetZoom).toHaveBeenCalledOnce();
-    },
-  );
-
-  it("offers an explicit session-only hide action", () => {
-    const onHide = vi.fn();
-    const displayRef = {
-      current: {
-        disconnect: vi.fn(),
-        isConnected: () => true,
-        sendKey: vi.fn(),
-        sendMouse: vi.fn(),
-        setClipboard: vi.fn(),
-        getFilesystem: () => null,
-        uploadFile: vi.fn(),
-        zoomIn: vi.fn(() => 1.25),
-        zoomOut: vi.fn(() => 0.75),
-        resetZoom: vi.fn(() => 1),
-      } satisfies GuacamoleDisplayHandle,
-    } as React.RefObject<GuacamoleDisplayHandle>;
-
-    const { getByLabelText } = render(
-      <GuacamoleToolbar
-        displayRef={displayRef}
-        protocol="rdp"
-        onHide={onHide}
-      />,
-    );
-
-    fireEvent.click(getByLabelText("remoteDesktop.toolbar.hide"));
-    expect(onHide).toHaveBeenCalledOnce();
-  });
-
-  it("labels the VNC meta key Super instead of Windows", () => {
-    const displayRef = {
-      current: {
-        disconnect: vi.fn(),
-        isConnected: () => true,
-        sendKey: vi.fn(),
-        sendMouse: vi.fn(),
-        setClipboard: vi.fn(),
-        getFilesystem: () => null,
-        uploadFile: vi.fn(),
-        zoomIn: vi.fn(() => 1.25),
-        zoomOut: vi.fn(() => 0.75),
-        resetZoom: vi.fn(() => 1),
-      } satisfies GuacamoleDisplayHandle,
-    } as React.RefObject<GuacamoleDisplayHandle>;
-
-    const { getByText, queryByText } = render(
-      <GuacamoleToolbar
-        displayRef={displayRef}
-        protocol="vnc"
-        metaKeyFamily="super"
-      />,
-    );
-
-    expect(getByText("Super+L")).toBeTruthy();
-    expect(getByText("Super")).toBeTruthy();
-    expect(queryByText("Win+L")).toBeNull();
-    expect(queryByText("Win")).toBeNull();
-  });
-});
diff --git a/plugins/remote-desktop/tests/frontend/activate.test.tsx b/plugins/remote-desktop/tests/frontend/activate.test.tsx
deleted file mode 100644
index b9b00717c..000000000
--- a/plugins/remote-desktop/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,83 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-const declared = (views?: Array<{ id: string }>) =>
-  (views ?? []).map((view) => view.id).sort();
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe(`${manifest.id} activate`, () => {
-  it("activates and registers only views its manifest declares", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    const contributes = manifest.contributes as unknown as Record<
-      string,
-      Array<{ id: string }> | undefined
-    >;
-    const tabs = declared(contributes.tabs);
-    // A rail panel may reuse one of the plugin's tab ids.
-    const panels = [...declared(contributes.panels), ...tabs];
-    const cards = declared(contributes.dashboardCards);
-    for (const id of rendered.registered.tabs()) expect(tabs).toContain(id);
-    for (const id of rendered.registered.panels()) expect(panels).toContain(id);
-    for (const id of rendered.registered.dashboardCards()) {
-      expect(cards).toContain(id);
-    }
-  });
-
-  it("removes everything it registered on deactivate", async () => {
-    const app = await renderWithApp(plugin, { manifest, locales });
-    await app.deactivate();
-    expect(app.registered.tabs()).toEqual([]);
-    expect(app.registered.panels()).toEqual([]);
-    expect(app.registered.railItems()).toEqual([]);
-    expect(app.registered.hostActions()).toEqual([]);
-    expect(app.registered.hostProtocols()).toEqual([]);
-    expect(app.registered.hostEditorSections()).toEqual([]);
-    expect(app.registered.dashboardCards()).toEqual([]);
-    expect(app.registered.settingsComponents()).toEqual([]);
-    expect(app.registered.actions()).toEqual([]);
-  });
-
-  it("adds RDP, VNC and Telnet as host protocols while turned on", async () => {
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: { get: async () => ({ data: { enabled: true } }) } as never,
-    });
-    await vi.waitFor(() =>
-      expect(rendered!.registered.hostProtocols().sort()).toEqual([
-        "rdp",
-        "telnet",
-        "vnc",
-      ]),
-    );
-    expect(rendered.registered.hostActions().map((a) => a.id)).toEqual(
-      expect.arrayContaining(["rdp", "vnc", "telnet"]),
-    );
-  });
-
-  it("offers no way in while an admin has turned it off", async () => {
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: { get: async () => ({ data: { enabled: false } }) } as never,
-    });
-    await new Promise((resolve) => setTimeout(resolve, 20));
-    expect(rendered.registered.hostProtocols()).toEqual([]);
-    expect(rendered.registered.hostActions()).toEqual([]);
-  });
-});
diff --git a/plugins/remote-desktop/tests/frontend/guacamole-api.test.ts b/plugins/remote-desktop/tests/frontend/guacamole-api.test.ts
deleted file mode 100644
index bfab4c050..000000000
--- a/plugins/remote-desktop/tests/frontend/guacamole-api.test.ts
+++ /dev/null
@@ -1,217 +0,0 @@
-import { describe, expect, it, vi, beforeEach } from "vitest";
-
-const authApiMock = vi.hoisted(() => ({
-  get: vi.fn(async () => ({ data: { guacd: { status: "disconnected" } } })),
-  post: vi.fn(async () => ({ data: { token: "local-token" } })),
-}));
-const remoteApiMock = vi.hoisted(() => ({
-  get: vi.fn(async () => ({ data: { guacd: { status: "connected" } } })),
-  post: vi.fn(async () => ({ data: { token: "remote-token" } })),
-}));
-const isElectronMock = vi.hoisted(() => vi.fn(() => false));
-const resolveRemoteHostIdMock = vi.hoisted(() => vi.fn());
-
-vi.mock("@termix/plugin-sdk/ui", () => ({
-  isElectron: isElectronMock,
-  resolveRemoteHostId: resolveRemoteHostIdMock,
-}));
-
-import {
-  setRemoteDesktopApp,
-  getGuacdStatus,
-  getGuacamoleConnectionId,
-  getGuacamoleTokenFromHost,
-} from "../../src/frontend/guacamole-api";
-
-// Mirrors app.apiFor: the remote server only for a remote origin in the
-// desktop app, the ordinary client otherwise.
-setRemoteDesktopApp({
-  apiFor: (origin) =>
-    (origin === "remote" && isElectronMock()
-      ? remoteApiMock
-      : authApiMock) as never,
-});
-
-beforeEach(() => {
-  authApiMock.get.mockClear();
-  authApiMock.post.mockClear();
-  remoteApiMock.get.mockClear();
-  remoteApiMock.post.mockClear();
-  resolveRemoteHostIdMock.mockReset();
-});
-
-describe("guacamole API origin", () => {
-  it("uses the shared instance in the browser", async () => {
-    isElectronMock.mockReturnValue(false);
-
-    await getGuacdStatus("remote");
-    await getGuacamoleTokenFromHost(9, "remote", "vnc");
-
-    expect(authApiMock.get).toHaveBeenCalledWith("/status");
-    expect(authApiMock.post).toHaveBeenCalledOnce();
-    expect(remoteApiMock.get).not.toHaveBeenCalled();
-    expect(remoteApiMock.post).not.toHaveBeenCalled();
-  });
-
-  it("uses the connected remote server in the desktop app", async () => {
-    isElectronMock.mockReturnValue(true);
-
-    // The embedded backend has no guacd, so asking it reports "disconnected"
-    // even when the connected server can serve the session.
-    const status = await getGuacdStatus("remote");
-    const token = await getGuacamoleTokenFromHost(9, "remote", "vnc");
-
-    expect(status.guacd.status).toBe("connected");
-    expect(token.token).toBe("remote-token");
-    expect(remoteApiMock.get).toHaveBeenCalledWith("/status");
-    expect(remoteApiMock.post).toHaveBeenCalledOnce();
-    expect(authApiMock.get).not.toHaveBeenCalled();
-    expect(authApiMock.post).not.toHaveBeenCalled();
-  });
-
-  it("sends the connect-host payload unchanged to the remote server", async () => {
-    isElectronMock.mockReturnValue(true);
-    resolveRemoteHostIdMock.mockResolvedValue(41);
-
-    await getGuacamoleTokenFromHost(
-      9,
-      "remote",
-      "rdp",
-      {
-        username: "admin",
-        password: "secret",
-        domain: "EXAMPLE",
-      },
-      "host-sync-id",
-    );
-
-    expect(remoteApiMock.post).toHaveBeenCalledWith("/connect-host/41", {
-      protocol: "rdp",
-      promptedUsername: "admin",
-      promptedPassword: "secret",
-      promptedDomain: "EXAMPLE",
-    });
-    expect(resolveRemoteHostIdMock).toHaveBeenCalledWith("host-sync-id");
-  });
-
-  it("sends an empty prompted domain for local RDP accounts", async () => {
-    isElectronMock.mockReturnValue(false);
-
-    await getGuacamoleTokenFromHost(9, "local", "rdp", {
-      username: "local-admin",
-      password: "secret",
-      domain: "",
-    });
-
-    expect(authApiMock.post).toHaveBeenCalledWith("/connect-host/9", {
-      protocol: "rdp",
-      promptedUsername: "local-admin",
-      promptedPassword: "secret",
-      promptedDomain: "",
-    });
-  });
-
-  // Support#1240: a host set to "This Device" is served by the embedded
-  // backend, so its token has to come from there too -- and its id must not
-  // be remapped onto a remote server that may not even be configured.
-  it("asks the embedded backend when the host originates locally", async () => {
-    isElectronMock.mockReturnValue(true);
-
-    const token = await getGuacamoleTokenFromHost(9, "local", "rdp");
-
-    expect(token.token).toBe("local-token");
-    expect(authApiMock.post).toHaveBeenCalledWith("/connect-host/9", {
-      protocol: "rdp",
-    });
-    expect(remoteApiMock.post).not.toHaveBeenCalled();
-    expect(resolveRemoteHostIdMock).not.toHaveBeenCalled();
-  });
-
-  it("reports the embedded backend's own guacd for a local origin", async () => {
-    isElectronMock.mockReturnValue(true);
-
-    const status = await getGuacdStatus("local");
-
-    expect(status.guacd.status).toBe("disconnected");
-    expect(authApiMock.get).toHaveBeenCalledWith("/status");
-    expect(remoteApiMock.get).not.toHaveBeenCalled();
-  });
-
-  it("uses the remote server for an explicitly remote origin", async () => {
-    isElectronMock.mockReturnValue(true);
-
-    await getGuacamoleTokenFromHost(9, "remote", "rdp");
-
-    expect(remoteApiMock.post).toHaveBeenCalledOnce();
-    expect(authApiMock.post).not.toHaveBeenCalled();
-  });
-
-  it("does not fall back to a colliding local id when sync resolution fails", async () => {
-    isElectronMock.mockReturnValue(true);
-    resolveRemoteHostIdMock.mockResolvedValue(null);
-
-    await expect(
-      getGuacamoleTokenFromHost(
-        9,
-        "remote",
-        "rdp",
-        undefined,
-        "missing-sync-id",
-      ),
-    ).rejects.toThrow("The synced host does not exist on the remote server");
-    expect(remoteApiMock.post).not.toHaveBeenCalled();
-  });
-});
-
-it("looks up the session on the backend that issued its token", async () => {
-  isElectronMock.mockReturnValue(true);
-  const signal = new AbortController().signal;
-  await getGuacamoleConnectionId("connect/id", "remote", signal);
-  expect(remoteApiMock.get).toHaveBeenCalledWith("/connection/connect%2Fid", {
-    signal,
-  });
-  expect(authApiMock.get).not.toHaveBeenCalled();
-});
-
-describe("saved host status routing", () => {
-  it("maps the local host ID before probing the remote backend", async () => {
-    isElectronMock.mockReturnValue(true);
-    resolveRemoteHostIdMock.mockResolvedValue(41);
-    await getGuacdStatus("remote", {
-      hostId: 9,
-      protocol: "rdp",
-      syncId: "sync-9",
-    });
-    expect(resolveRemoteHostIdMock).toHaveBeenCalledWith("sync-9");
-    expect(remoteApiMock.get).toHaveBeenCalledWith(
-      "/status?hostId=41&protocol=rdp",
-    );
-    expect(authApiMock.get).not.toHaveBeenCalled();
-  });
-
-  it("keeps local IDs for local connections", async () => {
-    isElectronMock.mockReturnValue(true);
-    await getGuacdStatus("local", {
-      hostId: 9,
-      protocol: "vnc",
-      syncId: "sync-9",
-    });
-    expect(authApiMock.get).toHaveBeenCalledWith(
-      "/status?hostId=9&protocol=vnc",
-    );
-    expect(resolveRemoteHostIdMock).not.toHaveBeenCalled();
-  });
-
-  it("does not probe an unrelated remote ID when a synced host is missing", async () => {
-    isElectronMock.mockReturnValue(true);
-    resolveRemoteHostIdMock.mockResolvedValue(null);
-    await expect(
-      getGuacdStatus("remote", {
-        hostId: 9,
-        protocol: "rdp",
-        syncId: "missing",
-      }),
-    ).rejects.toThrow("does not exist");
-    expect(remoteApiMock.get).not.toHaveBeenCalled();
-  });
-});
diff --git a/plugins/remote-desktop/tests/frontend/guacamole-clipboard.test.ts b/plugins/remote-desktop/tests/frontend/guacamole-clipboard.test.ts
deleted file mode 100644
index 2c298bfff..000000000
--- a/plugins/remote-desktop/tests/frontend/guacamole-clipboard.test.ts
+++ /dev/null
@@ -1,63 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import {
-  isPasteShortcut,
-  pasteTextToRemote,
-  type GuacamoleClipboardClient,
-} from "../../src/frontend/guacamole-clipboard.js";
-
-describe("Guacamole clipboard paste", () => {
-  it("recognizes Ctrl+V and Command+V without intercepting Alt+V", () => {
-    expect(
-      isPasteShortcut({
-        key: "v",
-        ctrlKey: true,
-        metaKey: false,
-        altKey: false,
-      }),
-    ).toBe(true);
-    expect(
-      isPasteShortcut({
-        key: "V",
-        ctrlKey: false,
-        metaKey: true,
-        altKey: false,
-      }),
-    ).toBe(true);
-    expect(
-      isPasteShortcut({
-        key: "v",
-        ctrlKey: true,
-        metaKey: false,
-        altKey: true,
-      }),
-    ).toBe(false);
-  });
-
-  it("updates the remote clipboard before sending Ctrl+V", () => {
-    const events: string[] = [];
-    const client: GuacamoleClipboardClient = {
-      createClipboardStream: vi.fn((mimetype: string) => {
-        events.push(`stream:${mimetype}`);
-        return {
-          sendBlob: () => events.push("blob"),
-          sendEnd: () => events.push("end"),
-        };
-      }),
-      sendKeyEvent: vi.fn((pressed: number, keysym: number) => {
-        events.push(`key:${pressed}:${keysym}`);
-      }),
-    };
-
-    pasteTextToRemote(client, "Firefox clipboard");
-
-    expect(events).toEqual([
-      "stream:text/plain",
-      "blob",
-      "end",
-      "key:1:65507",
-      "key:1:118",
-      "key:0:118",
-      "key:0:65507",
-    ]);
-  });
-});
diff --git a/plugins/remote-desktop/tests/frontend/guacamole-display-size.test.ts b/plugins/remote-desktop/tests/frontend/guacamole-display-size.test.ts
deleted file mode 100644
index 0a1338fbb..000000000
--- a/plugins/remote-desktop/tests/frontend/guacamole-display-size.test.ts
+++ /dev/null
@@ -1,67 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  getGuacamoleDisplaySize,
-  readConfiguredDimension,
-} from "../../src/frontend/guacamole-display-size";
-
-describe("getGuacamoleDisplaySize", () => {
-  it("requests native pixels and matching DPI for HiDPI RDP", () => {
-    expect(getGuacamoleDisplaySize(1280, 720, "rdp", 2)).toEqual({
-      width: 2560,
-      height: 1440,
-      dpi: 192,
-      pixelRatio: 2,
-    });
-  });
-
-  it("scales a configured RDP DPI with the device pixel ratio", () => {
-    expect(getGuacamoleDisplaySize(1000, 600, "rdp", 1.5, 120)).toEqual({
-      width: 1500,
-      height: 900,
-      dpi: 180,
-      pixelRatio: 1.5,
-    });
-  });
-
-  it("leaves non-RDP protocols at CSS-pixel dimensions", () => {
-    expect(getGuacamoleDisplaySize(1280, 720, "vnc", 2)).toEqual({
-      width: 1280,
-      height: 720,
-      pixelRatio: 1,
-    });
-  });
-
-  it("caps pathological pixel ratios to protect remote session size", () => {
-    expect(getGuacamoleDisplaySize(400, 800, "rdp", 4)).toEqual({
-      width: 1200,
-      height: 2400,
-      dpi: 288,
-      pixelRatio: 3,
-    });
-  });
-
-  it("uses a configured resolution in place of the container size", () => {
-    expect(
-      getGuacamoleDisplaySize(800, 600, "rdp", 1, undefined),
-    ).toMatchObject({ width: 800, height: 600 });
-    expect(
-      getGuacamoleDisplaySize(1920, 1080, "rdp", 1, undefined),
-    ).toMatchObject({ width: 1920, height: 1080 });
-  });
-});
-
-describe("readConfiguredDimension", () => {
-  it("accepts the strings the host editor stores", () => {
-    expect(readConfiguredDimension("1920")).toBe(1920);
-    expect(readConfiguredDimension(1080)).toBe(1080);
-  });
-
-  it("treats an unset or unusable value as 'follow the container'", () => {
-    expect(readConfiguredDimension("")).toBeUndefined();
-    expect(readConfiguredDimension(undefined)).toBeUndefined();
-    expect(readConfiguredDimension(null)).toBeUndefined();
-    expect(readConfiguredDimension("auto")).toBeUndefined();
-    expect(readConfiguredDimension("0")).toBeUndefined();
-    expect(readConfiguredDimension("-1080")).toBeUndefined();
-  });
-});
diff --git a/plugins/remote-desktop/tests/frontend/guacamole-file-drop.test.ts b/plugins/remote-desktop/tests/frontend/guacamole-file-drop.test.ts
deleted file mode 100644
index cf407025d..000000000
--- a/plugins/remote-desktop/tests/frontend/guacamole-file-drop.test.ts
+++ /dev/null
@@ -1,25 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  canUploadToRdpDrive,
-  getFileDropDisposition,
-  hasDraggedFiles,
-} from "../../src/frontend/guacamole-file-drop.ts";
-
-describe("Guacamole file drop", () => {
-  it("recognizes external file drags", () => {
-    expect(hasDraggedFiles(["Files"])).toBe(true);
-    expect(hasDraggedFiles(["text/plain"])).toBe(false);
-  });
-
-  it("rejects files when upload is unavailable instead of ignoring them", () => {
-    expect(getFileDropDisposition(["Files"], 1, false)).toBe("reject");
-    expect(getFileDropDisposition(["Files"], 1, true)).toBe("upload");
-  });
-
-  it("accepts an enabled RDP drive before a filesystem object is advertised", () => {
-    expect(canUploadToRdpDrive(true, true, false)).toBe(true);
-    expect(canUploadToRdpDrive(true, false, true)).toBe(true);
-    expect(canUploadToRdpDrive(true, false, false)).toBe(false);
-    expect(canUploadToRdpDrive(false, true, true)).toBe(false);
-  });
-});
diff --git a/plugins/remote-desktop/tests/frontend/guacamole-filesystem.test.ts b/plugins/remote-desktop/tests/frontend/guacamole-filesystem.test.ts
deleted file mode 100644
index ce7c535af..000000000
--- a/plugins/remote-desktop/tests/frontend/guacamole-filesystem.test.ts
+++ /dev/null
@@ -1,20 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { describeUploadError } from "../../src/frontend/guacamole-filesystem";
-
-const t = (key: string) => `#${key}`;
-
-describe("describeUploadError", () => {
-  it("explains guacd's refusal to open the target file as a drive-folder problem", () => {
-    expect(describeUploadError(new Error("FAIL (CANNOT OPEN)"), t)).toBe(
-      "#driveNotWritable",
-    );
-    expect(describeUploadError(new Error("FAIL (NO FS)"), t)).toBe(
-      "#driveUnavailable",
-    );
-  });
-
-  it("passes other messages through and falls back for unknown errors", () => {
-    expect(describeUploadError(new Error("disk full"), t)).toBe("disk full");
-    expect(describeUploadError(undefined, t)).toBe("#uploadFailed");
-  });
-});
diff --git a/plugins/remote-desktop/tests/frontend/guacamole-key-release.test.ts b/plugins/remote-desktop/tests/frontend/guacamole-key-release.test.ts
deleted file mode 100644
index bdfcb05ac..000000000
--- a/plugins/remote-desktop/tests/frontend/guacamole-key-release.test.ts
+++ /dev/null
@@ -1,106 +0,0 @@
-/// <reference types="vite/client" />
-import ts from "typescript";
-import Guacamole from "guacamole-common-js";
-import { afterEach, describe, expect, it, vi } from "vitest";
-import displaySource from "../../src/frontend/GuacamoleDisplay.tsx?raw";
-
-// Exercise the display's actual focus callback with Guacamole's real keyboard.
-const source = ts.createSourceFile(
-  "GuacamoleDisplay.tsx",
-  displaySource,
-  ts.ScriptTarget.Latest,
-  true,
-  ts.ScriptKind.TSX,
-);
-let callback: string | undefined;
-function visit(node: ts.Node) {
-  if (
-    ts.isVariableDeclaration(node) &&
-    node.name.getText(source) === "refreshKeyboardHandlers" &&
-    node.initializer &&
-    ts.isCallExpression(node.initializer)
-  ) {
-    callback = node.initializer.arguments[0].getText(source);
-  }
-  ts.forEachChild(node, visit);
-}
-visit(source);
-if (!callback) throw new Error("Missing refreshKeyboardHandlers callback");
-const runRefresh = new Function(
-  "state",
-  ts.transpileModule(
-    `const { keyboardRef, clientRef, displayElementRef, isVisible, windowFocusedRef, hasKeyboardFocusRef } = state;
-    (${callback})();`,
-    { compilerOptions: { target: ts.ScriptTarget.ES2022 } },
-  ).outputText,
-) as (state: Record<string, unknown>) => void;
-
-afterEach(() => {
-  vi.restoreAllMocks();
-  document.body.replaceChildren();
-});
-
-describe("remote keyboard focus loss", () => {
-  it.each(["window", "display", "hidden", "tab"])(
-    "releases held modifiers when losing %s focus",
-    (reason) => {
-      const display = document.createElement("div");
-      display.tabIndex = 0;
-      document.body.append(display);
-      display.focus();
-      vi.spyOn(document, "visibilityState", "get").mockReturnValue("visible");
-      const keyboard = new Guacamole.Keyboard(display) as Guacamole.Keyboard & {
-        press(keysym: number): boolean;
-        release(keysym: number): void;
-        pressed: Record<number, boolean>;
-      };
-      const sendKeyEvent = vi.fn();
-      const state = {
-        keyboardRef: { current: keyboard },
-        clientRef: { current: { sendKeyEvent } },
-        displayElementRef: { current: display },
-        isVisible: true,
-        windowFocusedRef: { current: true },
-        hasKeyboardFocusRef: { current: true },
-      };
-      const refresh = () => runRefresh(state);
-      refresh();
-      const keys = [0xffeb, 0xffe3, 0xffe9]; // Windows, Ctrl, Alt
-      keys.forEach((key) => keyboard.press(key));
-      expect(sendKeyEvent.mock.calls).toEqual(keys.map((key) => [1, key]));
-
-      if (reason === "window") state.windowFocusedRef.current = false;
-      if (reason === "tab") state.isVisible = false;
-      if (reason === "hidden") {
-        vi.spyOn(document, "visibilityState", "get").mockReturnValue("hidden");
-      }
-      if (reason === "display") {
-        state.hasKeyboardFocusRef.current = false;
-        display.blur();
-      }
-      refresh();
-      expect(sendKeyEvent.mock.calls.slice(3)).toEqual(
-        [...keys].sort((a, b) => a - b).map((key) => [0, key]),
-      );
-      expect(Object.keys(keyboard.pressed)).toEqual([]);
-      expect(keyboard.onkeydown).toBeNull();
-      expect(keyboard.onkeyup).toBeNull();
-      keyboard.press(0x6c);
-      keyboard.reset();
-      expect(sendKeyEvent).toHaveBeenCalledTimes(6);
-
-      state.isVisible = true;
-      state.windowFocusedRef.current = true;
-      state.hasKeyboardFocusRef.current = true;
-      vi.spyOn(document, "visibilityState", "get").mockReturnValue("visible");
-      display.focus();
-      refresh();
-      keyboard.press(0x6c);
-      keyboard.release(0x6c);
-      expect(sendKeyEvent.mock.calls.slice(6)).toEqual([
-        [1, 0x6c],
-        [0, 0x6c],
-      ]);
-    },
-  );
-});
diff --git a/plugins/remote-desktop/tests/frontend/guacamole-meta-key.test.ts b/plugins/remote-desktop/tests/frontend/guacamole-meta-key.test.ts
deleted file mode 100644
index 7fa6d15ff..000000000
--- a/plugins/remote-desktop/tests/frontend/guacamole-meta-key.test.ts
+++ /dev/null
@@ -1,48 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  detectMetaKeyFamily,
-  metaKeyLabels,
-} from "../../src/frontend/guacamole-meta-key.js";
-
-describe("guacamole toolbar meta key labels", () => {
-  it("keeps Windows labels for RDP regardless of the local device", () => {
-    expect(
-      detectMetaKeyFamily("rdp", {
-        platform: "MacIntel",
-        userAgent: "Macintosh; Intel Mac OS X",
-        userAgentDataPlatform: "macOS",
-      }),
-    ).toBe("win");
-  });
-
-  it("labels VNC with the local device's modifier instead of Windows", () => {
-    expect(
-      detectMetaKeyFamily("vnc", {
-        platform: "MacIntel",
-        userAgent: "Macintosh; Intel Mac OS X",
-        userAgentDataPlatform: "macOS",
-      }),
-    ).toBe("cmd");
-    expect(
-      detectMetaKeyFamily("vnc", {
-        platform: "Linux x86_64",
-        userAgent: "X11; Linux x86_64",
-        userAgentDataPlatform: "Linux",
-      }),
-    ).toBe("super");
-    expect(
-      detectMetaKeyFamily("vnc", {
-        platform: "Win32",
-        userAgent: "Windows NT 10.0",
-        userAgentDataPlatform: "Windows",
-      }),
-    ).toBe("win");
-  });
-
-  it("exposes Super/Cmd button copy for non-Windows VNC sessions", () => {
-    expect(metaKeyLabels("super").short).toBe("Super");
-    expect(metaKeyLabels("super").lock).toBe("Super+L");
-    expect(metaKeyLabels("cmd").short).toBe("Cmd");
-    expect(metaKeyLabels("cmd").lock).toBe("Cmd+L");
-  });
-});
diff --git a/plugins/remote-desktop/tests/frontend/guacamole-pointer.test.ts b/plugins/remote-desktop/tests/frontend/guacamole-pointer.test.ts
deleted file mode 100644
index dcb7c54d5..000000000
--- a/plugins/remote-desktop/tests/frontend/guacamole-pointer.test.ts
+++ /dev/null
@@ -1,82 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import { bindPointerInput } from "../../src/frontend/guacamole-pointer.js";
-
-function listenedEvents(): {
-  element: HTMLElement;
-  events: () => string[];
-} {
-  const element = document.createElement("div");
-  const seen: string[] = [];
-  const original = element.addEventListener.bind(element);
-  element.addEventListener = ((type: string, ...rest: unknown[]) => {
-    seen.push(type);
-    return (original as (t: string, ...r: unknown[]) => void)(type, ...rest);
-  }) as typeof element.addEventListener;
-  return { element, events: () => seen };
-}
-
-describe("bindPointerInput", () => {
-  // A touchscreen laptop reports maxTouchPoints > 0 and still has a mouse.
-  // Binding only the touch emulator left the pointer dead on those machines.
-  it.each([
-    ["no touch mode", null],
-    ["touchscreen", "touchscreen" as const],
-    ["touchpad", "touchpad" as const],
-  ])("keeps the physical pointer bound with %s", (_label, touchMode) => {
-    const { element, events } = listenedEvents();
-
-    bindPointerInput(element, touchMode, vi.fn());
-
-    expect(events()).toContain("mousedown");
-    expect(events()).toContain("mousemove");
-    expect(events()).toContain("mouseup");
-  });
-
-  it("adds touch listeners only when a touch mode is selected", () => {
-    const withoutTouch = listenedEvents();
-    bindPointerInput(withoutTouch.element, null, vi.fn());
-    const plainTouchCount = withoutTouch
-      .events()
-      .filter((e) => e.startsWith("touch")).length;
-
-    const withTouch = listenedEvents();
-    bindPointerInput(withTouch.element, "touchscreen", vi.fn());
-    const touchModeCount = withTouch
-      .events()
-      .filter((e) => e.startsWith("touch")).length;
-
-    expect(touchModeCount).toBeGreaterThan(plainTouchCount);
-  });
-
-  it("does not forward a wheel flood as individual remote scroll clicks", () => {
-    vi.useFakeTimers();
-    const element = document.createElement("div");
-    const onState = vi.fn();
-    const dispose = bindPointerInput(element, null, onState);
-
-    for (let i = 0; i < 30; i++) {
-      element.dispatchEvent(
-        new WheelEvent("wheel", {
-          deltaY: 120,
-          deltaMode: 0,
-          bubbles: true,
-          cancelable: true,
-        }),
-      );
-    }
-
-    const presses = onState.mock.calls.filter(
-      ([state]) => state.up === true || state.down === true,
-    );
-    expect(presses.length).toBeLessThanOrEqual(2);
-
-    vi.advanceTimersByTime(40);
-    const laterPresses = onState.mock.calls.filter(
-      ([state]) => state.up === true || state.down === true,
-    );
-    expect(laterPresses.length).toBeLessThanOrEqual(4);
-
-    dispose();
-    vi.useRealTimers();
-  });
-});
diff --git a/plugins/remote-desktop/tests/frontend/guacamole-scroll.test.ts b/plugins/remote-desktop/tests/frontend/guacamole-scroll.test.ts
deleted file mode 100644
index 8c5665151..000000000
--- a/plugins/remote-desktop/tests/frontend/guacamole-scroll.test.ts
+++ /dev/null
@@ -1,81 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import {
-  clampPendingScrollClicks,
-  createScrollCoalescer,
-  isScrollButtonState,
-  MAX_SCROLL_CLICKS_PER_FLUSH,
-  SCROLL_FLUSH_INTERVAL_MS,
-  takeScrollClicks,
-} from "../../src/frontend/guacamole-scroll.js";
-
-describe("guacamole scroll coalescing", () => {
-  it("caps a click flood so a laggy tunnel cannot queue a backlog", () => {
-    expect(clampPendingScrollClicks(0, 40)).toBe(MAX_SCROLL_CLICKS_PER_FLUSH);
-    expect(clampPendingScrollClicks(0, -40)).toBe(-MAX_SCROLL_CLICKS_PER_FLUSH);
-    expect(takeScrollClicks(20)).toEqual({
-      clicks: MAX_SCROLL_CLICKS_PER_FLUSH,
-      direction: 1,
-    });
-  });
-
-  it("sends the first notch immediately and drops later clicks in the same burst", () => {
-    const send = vi.fn();
-    let now = 1_000;
-    const scheduled: Array<{ fn: () => void; ms: number }> = [];
-    const coalescer = createScrollCoalescer(
-      send,
-      () => now,
-      (fn, ms) => {
-        scheduled.push({ fn, ms });
-        return scheduled.length;
-      },
-      () => {},
-    );
-
-    coalescer.notePointer({
-      x: 12,
-      y: 34,
-      left: false,
-      middle: false,
-      right: false,
-      up: false,
-      down: false,
-    });
-    for (let i = 0; i < 20; i++) coalescer.ingestClick(1);
-
-    const firstBurst = send.mock.calls.map(([state]) => state);
-    expect(firstBurst).toEqual([
-      {
-        x: 12,
-        y: 34,
-        left: false,
-        middle: false,
-        right: false,
-        up: false,
-        down: true,
-      },
-      {
-        x: 12,
-        y: 34,
-        left: false,
-        middle: false,
-        right: false,
-        up: false,
-        down: false,
-      },
-    ]);
-
-    send.mockClear();
-    now += SCROLL_FLUSH_INTERVAL_MS;
-    expect(scheduled).toHaveLength(1);
-    scheduled[0].fn();
-    expect(send.mock.calls).toHaveLength(MAX_SCROLL_CLICKS_PER_FLUSH * 2);
-    coalescer.dispose();
-  });
-
-  it("recognizes only the scroll buttons as coalesced input", () => {
-    expect(isScrollButtonState({ up: true, down: false })).toBe(true);
-    expect(isScrollButtonState({ up: false, down: true })).toBe(true);
-    expect(isScrollButtonState({ up: false, down: false })).toBe(false);
-  });
-});
diff --git a/plugins/remote-desktop/tests/frontend/guacamole-session-id.test.ts b/plugins/remote-desktop/tests/frontend/guacamole-session-id.test.ts
deleted file mode 100644
index 27cc872cd..000000000
--- a/plugins/remote-desktop/tests/frontend/guacamole-session-id.test.ts
+++ /dev/null
@@ -1,46 +0,0 @@
-import { afterEach, beforeEach, expect, it, vi } from "vitest";
-const fetchId = vi.hoisted(() => vi.fn());
-vi.mock("../../src/frontend/guacamole-api", () => ({
-  getGuacamoleConnectionId: fetchId,
-}));
-import { watchGuacamoleConnectionId } from "../../src/frontend/guacamole-session-id";
-beforeEach(() => {
-  vi.useFakeTimers();
-  fetchId.mockReset();
-});
-afterEach(() => vi.useRealTimers());
-it("discovers the sharing ID after handshake without changing the connection origin", async () => {
-  fetchId.mockResolvedValueOnce(null).mockResolvedValueOnce("guacd-id");
-  const ready = vi.fn();
-  const stop = watchGuacamoleConnectionId("connect-id", "remote", ready);
-  await vi.advanceTimersByTimeAsync(500);
-  expect(fetchId).toHaveBeenLastCalledWith(
-    "connect-id",
-    "remote",
-    expect.any(AbortSignal),
-  );
-  expect(ready).toHaveBeenCalledExactlyOnceWith("guacd-id");
-  stop();
-});
-it("ignores a late response after disconnect or replacement", async () => {
-  let resolve!: (id: string) => void;
-  fetchId.mockReturnValue(
-    new Promise<string>((done) => {
-      resolve = done;
-    }),
-  );
-  const ready = vi.fn();
-  const stop = watchGuacamoleConnectionId("old", "local", ready);
-  stop();
-  resolve("old-guacd-id");
-  await vi.advanceTimersByTimeAsync(1000);
-  expect(ready).not.toHaveBeenCalled();
-  expect(fetchId.mock.calls[0][2].aborted).toBe(true);
-});
-it("bounds discovery when the session never opens", async () => {
-  fetchId.mockResolvedValue(null);
-  const stop = watchGuacamoleConnectionId("missing", "local", vi.fn());
-  await vi.advanceTimersByTimeAsync(30000);
-  expect(fetchId).toHaveBeenCalledTimes(20);
-  stop();
-});
diff --git a/plugins/remote-desktop/tests/frontend/guacamole-websocket-url.test.ts b/plugins/remote-desktop/tests/frontend/guacamole-websocket-url.test.ts
deleted file mode 100644
index 81cb19fe3..000000000
--- a/plugins/remote-desktop/tests/frontend/guacamole-websocket-url.test.ts
+++ /dev/null
@@ -1,60 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { buildGuacamoleWebSocketBaseUrl } from "../../src/frontend/guacamole-websocket-url.js";
-
-const httpsLocation = {
-  protocol: "https:",
-  host: "termix.example.com",
-} as Location;
-
-// The display socket moved off port 30008 to /plugin-ws/remote-desktop/display
-// on the main backend, so every case below asserts the same one path. Dev is
-// no longer a special case: Vite proxies the backend, so there is nothing to
-// point at a separate port.
-const ROUTE = "/plugin-ws/remote-desktop/display";
-
-describe("buildGuacamoleWebSocketBaseUrl", () => {
-  it("uses the same origin in production web builds", () => {
-    expect(
-      buildGuacamoleWebSocketBaseUrl({
-        isElectronApp: false,
-        isEmbeddedApp: false,
-        basePath: "",
-        location: httpsLocation,
-      }),
-    ).toBe(`wss://termix.example.com${ROUTE}`);
-  });
-
-  it("preserves the runtime base path for proxied web deployments", () => {
-    expect(
-      buildGuacamoleWebSocketBaseUrl({
-        isElectronApp: false,
-        isEmbeddedApp: false,
-        basePath: "/termix",
-        location: httpsLocation,
-      }),
-    ).toBe(`wss://termix.example.com/termix${ROUTE}`);
-  });
-
-  it("targets the embedded backend for electron running locally", () => {
-    expect(
-      buildGuacamoleWebSocketBaseUrl({
-        isElectronApp: true,
-        isEmbeddedApp: true,
-        basePath: "/termix",
-        location: httpsLocation,
-      }),
-    ).toBe(`ws://127.0.0.1:30001${ROUTE}`);
-  });
-
-  it("uses the configured remote server URL for electron remote mode", () => {
-    expect(
-      buildGuacamoleWebSocketBaseUrl({
-        isElectronApp: true,
-        isEmbeddedApp: false,
-        configuredServerUrl: "https://termix.example.com/termix/",
-        basePath: "",
-        location: httpsLocation,
-      }),
-    ).toBe(`wss://termix.example.com/termix${ROUTE}`);
-  });
-});
diff --git a/plugins/remote-desktop/tests/frontend/guacamole-zoom.test.ts b/plugins/remote-desktop/tests/frontend/guacamole-zoom.test.ts
deleted file mode 100644
index 413d15e0a..000000000
--- a/plugins/remote-desktop/tests/frontend/guacamole-zoom.test.ts
+++ /dev/null
@@ -1,17 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  clampGuacamoleZoom,
-  stepGuacamoleZoom,
-} from "../../src/frontend/guacamole-zoom.js";
-
-describe("guacamole zoom", () => {
-  it("steps in predictable quarter increments", () => {
-    expect(stepGuacamoleZoom(1, 1)).toBe(1.25);
-    expect(stepGuacamoleZoom(1, -1)).toBe(0.75);
-  });
-
-  it("keeps toolbar and pinch zoom within usable bounds", () => {
-    expect(clampGuacamoleZoom(0.1)).toBe(0.5);
-    expect(clampGuacamoleZoom(8)).toBe(4);
-  });
-});
diff --git a/plugins/remote-desktop/tests/frontend/quick-connect-guac-host.test.ts b/plugins/remote-desktop/tests/frontend/quick-connect-guac-host.test.ts
deleted file mode 100644
index 4a5829d2c..000000000
--- a/plugins/remote-desktop/tests/frontend/quick-connect-guac-host.test.ts
+++ /dev/null
@@ -1,58 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { quickConnectGuacHost } from "../../src/frontend/quick-connect-guac-host";
-
-// The shape core's Quick Connect builds for a plugin protocol: the switch and
-// port in this plugin's host settings, the unsaved login in quickConnectLogin.
-function quickHost(protocol: "rdp" | "vnc", extra: Record<string, unknown>) {
-  return {
-    id: "quick-connect-1",
-    name: "admin@10.0.0.2",
-    ip: "10.0.0.2",
-    pluginSettings: {
-      "remote-desktop": {
-        [protocol === "rdp" ? "enableRdp" : "enableVnc"]: true,
-        [protocol === "rdp" ? "rdpPort" : "vncPort"]:
-          protocol === "rdp" ? 3390 : 5901,
-      },
-    },
-    ...extra,
-  };
-}
-
-describe("quickConnectGuacHost", () => {
-  it("carries an RDP quick connect's address and credentials", () => {
-    expect(
-      quickConnectGuacHost(
-        quickHost("rdp", {
-          quickConnectLogin: {
-            protocol: "rdp",
-            username: "admin",
-            password: "pw",
-            fields: { domain: "CORP" },
-          },
-        }),
-      ),
-    ).toMatchObject({
-      ip: "10.0.0.2",
-      connectionType: "rdp",
-      port: 3390,
-      username: "admin",
-      password: "pw",
-      domain: "CORP",
-    });
-  });
-
-  it("takes a VNC quick connect's login from the VNC fields", () => {
-    expect(
-      quickConnectGuacHost(
-        quickHost("vnc", {
-          quickConnectLogin: { protocol: "vnc", password: "vncpw" },
-        }),
-      ),
-    ).toMatchObject({
-      connectionType: "vnc",
-      port: 5901,
-      password: "vncpw",
-    });
-  });
-});
diff --git a/plugins/remote-desktop/tests/frontend/rdp-credential-prompt.test.ts b/plugins/remote-desktop/tests/frontend/rdp-credential-prompt.test.ts
deleted file mode 100644
index 6170dcdf1..000000000
--- a/plugins/remote-desktop/tests/frontend/rdp-credential-prompt.test.ts
+++ /dev/null
@@ -1,28 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { needsRdpCredentialPrompt } from "../../src/frontend/rdp-credential-prompt";
-
-describe("needsRdpCredentialPrompt", () => {
-  it("prompts recipients when RDP has no saved authentication", () => {
-    expect(
-      needsRdpCredentialPrompt({ protocol: "rdp", rdpAuthType: "none" }),
-    ).toBe(true);
-  });
-
-  it("does not prompt when the recipient has a personal override", () => {
-    expect(
-      needsRdpCredentialPrompt({
-        protocol: "rdp",
-        rdpAuthType: "none",
-        authOverrides: {
-          rdp: { credentialId: 7, required: false, ownerAuthShared: true },
-        },
-      }),
-    ).toBe(false);
-  });
-
-  it("does not prompt for other protocols", () => {
-    expect(
-      needsRdpCredentialPrompt({ protocol: "vnc", rdpAuthType: "none" }),
-    ).toBe(false);
-  });
-});
diff --git a/plugins/remote-desktop/tests/frontend/remote-form.test.ts b/plugins/remote-desktop/tests/frontend/remote-form.test.ts
deleted file mode 100644
index 6fca9c30b..000000000
--- a/plugins/remote-desktop/tests/frontend/remote-form.test.ts
+++ /dev/null
@@ -1,91 +0,0 @@
-import { describe, expect, it } from "vitest";
-import type { HostEditorSectionProps } from "@termix/plugin-sdk/frontend";
-import {
-  loginOf,
-  patchLogin,
-  remoteDesktopForm,
-} from "../../src/frontend/remote-form";
-
-function sectionProps(form: Record<string, unknown>) {
-  const state = { form: { ...form } };
-  const props = {
-    form: state.form,
-    setField: (key: string, value: unknown) => {
-      state.form = { ...state.form, [key]: value };
-    },
-    updateForm: (
-      patch: (current: Record<string, unknown>) => Record<string, unknown>,
-    ) => {
-      state.form = { ...state.form, ...patch(state.form) };
-    },
-  } as unknown as HostEditorSectionProps;
-  return { props, state };
-}
-
-describe("remote desktop editor form", () => {
-  it("reads each protocol's login from the host form's protocolAuth", () => {
-    const { props } = sectionProps({
-      protocolAuth: {
-        rdp: {
-          authType: "credential",
-          credentialId: "4",
-          username: "",
-          password: "",
-          fields: { domain: "CORP" },
-        },
-        vnc: {
-          authType: "direct",
-          credentialId: "",
-          username: "",
-          password: "saved",
-          fields: {},
-        },
-      },
-    });
-    const { form } = remoteDesktopForm(props);
-    expect(form).toMatchObject({
-      rdpAuthType: "credential",
-      rdpCredentialId: "4",
-      domain: "CORP",
-      vncPassword: "saved",
-      telnetAuthType: "direct",
-      telnetUser: "",
-    });
-  });
-
-  it("writes the tabs' login fields into protocolAuth", () => {
-    const { props, state } = sectionProps({});
-    const { setField } = remoteDesktopForm(props);
-    setField("rdpUser", "admin");
-    setField("domain", "CORP");
-    setField("telnetAuthType", "credential");
-
-    expect(state.form.protocolAuth).toEqual({
-      rdp: {
-        authType: "direct",
-        credentialId: "",
-        username: "admin",
-        password: "",
-        fields: { domain: "CORP" },
-      },
-      telnet: {
-        authType: "credential",
-        credentialId: "",
-        username: "",
-        password: "",
-        fields: {},
-      },
-    });
-  });
-
-  it("keeps other protocols when one changes", () => {
-    const current = {
-      protocolAuth: { vnc: { ...loginOf(undefined, "vnc"), username: "v" } },
-    };
-    const next = patchLogin(current, "rdp", "password", "pw");
-    expect(next.protocolAuth).toMatchObject({
-      vnc: { username: "v" },
-      rdp: { password: "pw" },
-    });
-  });
-});
diff --git a/plugins/remote-desktop/tsconfig.json b/plugins/remote-desktop/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/remote-desktop/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/remote-desktop/vitest.config.ts b/plugins/remote-desktop/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/remote-desktop/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/secret-sources/CHANGELOG.md b/plugins/secret-sources/CHANGELOG.md
deleted file mode 100644
index 3e2bbb6b0..000000000
--- a/plugins/secret-sources/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Fetches host passwords and keys from 1Password when you connect, using op:// references, so they are not stored in Termix.
diff --git a/plugins/secret-sources/README.md b/plugins/secret-sources/README.md
deleted file mode 100644
index 933ee3975..000000000
--- a/plugins/secret-sources/README.md
+++ /dev/null
@@ -1,23 +0,0 @@
-# Secret Sources
-
-Fetch host secrets from 1Password when you connect instead of storing them in Termix.
-
-## Features
-
-- Connect a 1Password Connect server as a secret source.
-- Use `op://` references in a host's password or key fields instead of the secret itself.
-- Secrets are fetched each time you connect and are not stored in Termix.
-
-## Settings
-
-### Admin
-
-- Private endpoint allowlist: private or loopback hosts a secret source may reach, one per line. A self-hosted 1Password Connect server usually needs its address listed here.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/secret-sources/locales/en.json b/plugins/secret-sources/locales/en.json
deleted file mode 100644
index 42dfe8c50..000000000
--- a/plugins/secret-sources/locales/en.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "You can paste a 1Password reference (op://vault/item/field) instead of the secret. It is fetched from your secret source when connecting.",
-  "manage": "Manage secret sources",
-  "title": "Secret sources",
-  "description": "External password managers Termix reads secrets from at connect time. Currently 1Password Connect (self-hosted). The access token is stored encrypted with your data key.",
-  "new": "New source",
-  "nameLabel": "Friendly name",
-  "urlLabel": "Connect server URL",
-  "tokenLabel": "Connect access token",
-  "tokenKeep": "Leave empty to keep the current token",
-  "sharedLabel": "Share with all users (admins only, resolves while you are signed in)",
-  "shared": "shared",
-  "test": "Test",
-  "testOk": "Connected, {{count}} vault(s) visible",
-  "testFailed": "Connection test failed",
-  "required": "Name, server URL and token are required",
-  "saved": "Secret source saved",
-  "deleted": "Secret source deleted",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "Private endpoint allowlist",
-        "description": "Private or loopback hosts a secret source may reach, one per line. A self-hosted 1Password Connect server usually needs its own address listed here."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Secret Sources"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/af_ZA.json b/plugins/secret-sources/locales/translated/af_ZA.json
deleted file mode 100644
index 989bfca7c..000000000
--- a/plugins/secret-sources/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "Jy kan 'n 1Password-verwysing (op://vault/item/field) in plaas van die geheim plak. Dit word van jou geheime bron afgehaal wanneer jy koppel.",
-  "manage": "Bestuur geheime bronne",
-  "title": "Geheime bronne",
-  "description": "Eksterne wagwoordbestuurders Termix lees geheime vanaf wanneer dit verbind word. Tans 1Password Connect (selfgehuisves). Die toegangstoken word geïnkripteer met jou datasleutel gestoor.",
-  "new": "Nuwe bron",
-  "nameLabel": "Vriendelike naam",
-  "urlLabel": "Koppel bediener URL",
-  "tokenLabel": "Koppel toegangstoken",
-  "tokenKeep": "Los leeg om die huidige teken te behou",
-  "sharedLabel": "Deel met alle gebruikers (slegs administrateurs, word opgelos terwyl jy aangemeld is)",
-  "shared": "gedeel",
-  "test": "Toets",
-  "testOk": "Gekoppel, {{count}} kluis(se) sigbaar",
-  "testFailed": "Verbindingstoets het misluk",
-  "required": "Naam, bediener-URL en token word vereis",
-  "saved": "Geheime bron gestoor",
-  "deleted": "Geheime bron verwyder",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "Privaat eindpunt-toelaatlys",
-        "description": "Privaat of teruglusgashere wat 'n geheime bron mag bereik, een per lyn. 'n Selfgehosteerde 1Password Connect-bediener benodig gewoonlik sy eie adres wat hier gelys word."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Geheime Bronne"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/ar_SA.json b/plugins/secret-sources/locales/translated/ar_SA.json
deleted file mode 100644
index d2f225fb2..000000000
--- a/plugins/secret-sources/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "يمكنك لصق مرجع 1Password (op://vault/item/field) بدلاً من كلمة المرور السرية. يتم جلبها من مصدر كلمة المرور السرية عند الاتصال.",
-  "manage": "إدارة المصادر السرية",
-  "title": "مصادر سرية",
-  "description": "يقرأ برنامج إدارة كلمات المرور الخارجي Termix البيانات السرية عند الاتصال. حاليًا، نستخدم 1Password Connect (مُستضاف ذاتيًا). يتم تخزين رمز الوصول مُشفّرًا باستخدام مفتاح البيانات الخاص بك.",
-  "new": "مصدر جديد",
-  "nameLabel": "اسم ودود",
-  "urlLabel": "عنوان URL لخادم الاتصال",
-  "tokenLabel": "رمز الوصول للاتصال",
-  "tokenKeep": "اتركه فارغًا للاحتفاظ بالرمز المميز الحالي",
-  "sharedLabel": "مشاركة مع جميع المستخدمين (للمسؤولين فقط، يتم حل المشكلة أثناء تسجيل دخولك)",
-  "shared": "مشترك",
-  "test": "اختبار",
-  "testOk": "متصل، {{count}} الخزائن مرئية",
-  "testFailed": "فشل اختبار الاتصال",
-  "required": "الاسم وعنوان URL للخادم والرمز المميز مطلوبة",
-  "saved": "تم حفظ المصدر السري",
-  "deleted": "تم حذف المصدر السري",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "قائمة السماح لنقاط النهاية الخاصة",
-        "description": "قد يصل مصدر سري إلى مضيفات خاصة أو مضيفات ذات اتصال داخلي، واحد لكل سطر. عادةً ما يحتاج خادم 1Password Connect المستضاف ذاتيًا إلى عنوانه الخاص المدرج هنا."
-      }
-    }
-  },
-  "plugin": {
-    "name": "مصادر سرية"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/bg_BG.json b/plugins/secret-sources/locales/translated/bg_BG.json
deleted file mode 100644
index db7c08d02..000000000
--- a/plugins/secret-sources/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "Можете да поставите препратка към 1Password (op://vault/item/field) вместо тайната. Тя се извлича от вашия източник на тайна при свързване.",
-  "manage": "Управлявайте тайните източници",
-  "title": "Тайни източници",
-  "description": "Външни мениджъри на пароли Termix четат тайни по време на свързване. В момента 1Password Connect (самостоятелно хостван). Токенът за достъп се съхранява криптиран с вашия ключ за данни.",
-  "new": "Нов източник",
-  "nameLabel": "Приятелско име",
-  "urlLabel": "URL адрес на сървъра за свързване",
-  "tokenLabel": "Свързване на токен за достъп",
-  "tokenKeep": "Оставете празно, за да запазите текущия токен",
-  "sharedLabel": "Споделяне с всички потребители (само за администратори, разрешава се, докато сте влезли)",
-  "shared": "споделено",
-  "test": "Тест",
-  "testOk": "Свързано, {{count}} видими трезори",
-  "testFailed": "Тестът за връзка не бе успешен",
-  "required": "Име, URL адрес на сървъра и токен са задължителни",
-  "saved": "Секретният източник е запазен",
-  "deleted": "Секретният източник е изтрит",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "Списък с разрешени частни крайни точки",
-        "description": "Частни или loopback хостове, до които може да достигне таен източник, по един на ред. Самостоятелно хостван 1Password Connect сървър обикновено се нуждае от собствен адрес, посочен тук."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Тайни източници"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/bn_BD.json b/plugins/secret-sources/locales/translated/bn_BD.json
deleted file mode 100644
index 80a1cdfca..000000000
--- a/plugins/secret-sources/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "আপনি সিক্রেটের পরিবর্তে একটি 1Password রেফারেন্স (op://vault/item/field) পেস্ট করতে পারেন। সংযোগ করার সময় এটি আপনার সিক্রেট সোর্স থেকে সংগ্রহ করা হয়।",
-  "manage": "গোপন উৎস পরিচালনা করুন",
-  "title": "গোপন সূত্র",
-  "description": "এক্সটার্নাল পাসওয়ার্ড ম্যানেজার Termix কানেক্ট করার সময় সিক্রেট ডেটা পড়ে নেয়। বর্তমানে ব্যবহৃত হয় 1Password Connect (সেলফ-হোস্টেড)। অ্যাক্সেস টোকেনটি আপনার ডেটা কী দিয়ে এনক্রিপ্ট করে সংরক্ষণ করা হয়।",
-  "new": "নতুন উৎস",
-  "nameLabel": "বন্ধুত্বপূর্ণ নাম",
-  "urlLabel": "সার্ভার URL সংযোগ করুন",
-  "tokenLabel": "অ্যাক্সেস টোকেন সংযুক্ত করুন",
-  "tokenKeep": "বর্তমান টোকেনটি রাখতে খালি রাখুন।",
-  "sharedLabel": "সকল ব্যবহারকারীর সাথে শেয়ার করুন (শুধুমাত্র অ্যাডমিনদের জন্য, আপনি সাইন ইন থাকা অবস্থায় কার্যকর হবে)",
-  "shared": "ভাগ করা হয়েছে",
-  "test": "পরীক্ষা",
-  "testOk": "সংযুক্ত, {{count}} টি ভল্ট দৃশ্যমান",
-  "testFailed": "সংযোগ পরীক্ষা ব্যর্থ হয়েছে",
-  "required": "নাম, সার্ভার ইউআরএল এবং টোকেন প্রয়োজন।",
-  "saved": "গোপন উৎস সংরক্ষিত",
-  "deleted": "গোপন সূত্র মুছে ফেলা হয়েছে",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "ব্যক্তিগত এন্ডপয়েন্ট অনুমোদিত তালিকা",
-        "description": "একটি গোপন উৎস যেসব প্রাইভেট বা লুপব্যাক হোস্টে পৌঁছাতে পারে, প্রতি লাইনে একটি করে। একটি সেলফ-হোস্টেড 1Password Connect সার্ভারের জন্য সাধারণত এখানে তার নিজস্ব ঠিকানা তালিকাভুক্ত করার প্রয়োজন হয়।"
-      }
-    }
-  },
-  "plugin": {
-    "name": "গোপন সূত্র"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/ca_ES.json b/plugins/secret-sources/locales/translated/ca_ES.json
deleted file mode 100644
index 5c1d9db70..000000000
--- a/plugins/secret-sources/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "Podeu enganxar una referència 1Password (op://vault/item/field) en comptes del secret. S'obté de la font del secret quan us connecteu.",
-  "manage": "Gestiona fonts secretes",
-  "title": "Fonts secretes",
-  "description": "Els gestors de contrasenyes externes Termix llegeixen els secrets en el moment de la connexió. Actualment 1Password Connect (autoallotjat). El testimoni d'accés s'emmagatzema xifrat amb la vostra clau de dades.",
-  "new": "Nova font",
-  "nameLabel": "Nom amigable",
-  "urlLabel": "URL de connexió del servidor",
-  "tokenLabel": "Connecta el testimoni d'accés",
-  "tokenKeep": "Deixeu-ho en blanc per mantenir el testimoni actual",
-  "sharedLabel": "Comparteix amb tots els usuaris (només administradors, resol mentre tens la sessió iniciada)",
-  "shared": "compartit",
-  "test": "Prova",
-  "testOk": "Connectat, {{count}} volta(es) visible(s)",
-  "testFailed": "La prova de connexió ha fallat",
-  "required": "El nom, l'URL del servidor i el testimoni són obligatoris",
-  "saved": "Font secreta desada",
-  "deleted": "Font secreta suprimida",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "Llista permesa de punts finals privats",
-        "description": "Amfitrions privats o de bucle que una font secreta pot assolir, un per línia. Un servidor 1Password Connect autoallotjat normalment necessita la seva pròpia adreça llistada aquí."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Fonts secretes"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/cs_CZ.json b/plugins/secret-sources/locales/translated/cs_CZ.json
deleted file mode 100644
index ea934a074..000000000
--- a/plugins/secret-sources/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "Místo tajného hesla můžete vložit odkaz na heslo 1Password (op://vault/item/field). Ten se načte ze zdroje vašeho tajného hesla při připojování.",
-  "manage": "Správa tajných zdrojů",
-  "title": "Tajné zdroje",
-  "description": "Externí správci hesel Termix čte tajné hesla v době připojení. Aktuálně 1Password Connect (samostatně hostovaný). Přístupový token je uložen zašifrovaný s vaším datovým klíčem.",
-  "new": "Nový zdroj",
-  "nameLabel": "Přátelský název",
-  "urlLabel": "URL adresa serveru pro připojení",
-  "tokenLabel": "Připojit přístupový token",
-  "tokenKeep": "Pro zachování aktuálního tokenu ponechte prázdné.",
-  "sharedLabel": "Sdílet se všemi uživateli (pouze pro administrátory, řeší se, když jste přihlášeni)",
-  "shared": "sdílené",
-  "test": "Test",
-  "testOk": "Připojeno, viditelné {{count}} úložiště",
-  "testFailed": "Test připojení selhal",
-  "required": "Jméno, URL adresa serveru a token jsou povinné",
-  "saved": "Tajný zdroj uložen",
-  "deleted": "Tajný zdroj smazán",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "Seznam povolených soukromých koncových bodů",
-        "description": "Soukromé nebo zpětně loopbackové hostitele, na které může tajný zdroj dosáhnout, jeden na řádek. Samostatně hostovaný server 1Password Connect zde obvykle potřebuje uvedenou vlastní adresu."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Tajné zdroje"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/da_DK.json b/plugins/secret-sources/locales/translated/da_DK.json
deleted file mode 100644
index 8b16eb6ed..000000000
--- a/plugins/secret-sources/locales/translated/da_DK.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "Du kan indsætte en 1Password-reference (op://vault/item/field) i stedet for hemmeligheden. Den hentes fra din hemmelige kilde, når du opretter forbindelse.",
-  "manage": "Administrer hemmelige kilder",
-  "title": "Hemmelige kilder",
-  "description": "Eksterne adgangskodeadministratorer. Termix læser hemmeligheder fra ved tilslutning. I øjeblikket 1Password Connect (selvhostet). Adgangstokenet gemmes krypteret med din datanøgle.",
-  "new": "Ny kilde",
-  "nameLabel": "Venligt navn",
-  "urlLabel": "URL til forbindelsesserver",
-  "tokenLabel": "Forbind adgangstoken",
-  "tokenKeep": "Lad feltet stå tomt for at beholde det aktuelle token",
-  "sharedLabel": "Del med alle brugere (kun administratorer, løses mens du er logget ind)",
-  "shared": "delt",
-  "test": "Prøve",
-  "testOk": "Forbundet, {{count}} boks(e) synlig(e)",
-  "testFailed": "Forbindelsestest mislykkedes",
-  "required": "Navn, server-URL og token er påkrævet",
-  "saved": "Hemmelig kilde gemt",
-  "deleted": "Hemmelig kilde slettet",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "Tilladelsesliste for privat slutpunkt",
-        "description": "Private eller loopback-værter, som en hemmelig kilde kan nå, én pr. linje. En selvhostet 1Password Connect-server skal normalt have sin egen adresse angivet her."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Hemmelige kilder"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/de_DE.json b/plugins/secret-sources/locales/translated/de_DE.json
deleted file mode 100644
index 041bd2338..000000000
--- a/plugins/secret-sources/locales/translated/de_DE.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "Sie können anstelle des Geheimnisses eine 1Password-Referenz (op://vault/item/field) einfügen. Diese wird beim Verbindungsaufbau aus Ihrer Geheimnisquelle abgerufen.",
-  "manage": "Geheime Quellen verwalten",
-  "title": "Geheime Quellen",
-  "description": "Externe Passwortmanager wie Termix lesen die Geheimnisse beim Verbindungsaufbau. Aktuell wird 1Password Connect (selbst gehostet) verwendet. Das Zugriffstoken wird mit Ihrem Datenschlüssel verschlüsselt gespeichert.",
-  "new": "Neue Quelle",
-  "nameLabel": "Freundlicher Name",
-  "urlLabel": "Verbindungsserver-URL",
-  "tokenLabel": "Zugriffstoken verbinden",
-  "tokenKeep": "Lassen Sie dieses Feld leer, um das aktuelle Token beizubehalten.",
-  "sharedLabel": "Mit allen Benutzern teilen (nur für Administratoren, wird ausgeführt, solange Sie angemeldet sind)",
-  "shared": "geteilt",
-  "test": "Test",
-  "testOk": "Verbunden, {{count}} Tresor(e) sichtbar",
-  "testFailed": "Verbindungstest fehlgeschlagen",
-  "required": "Name, Server-URL und Token werden benötigt.",
-  "saved": "Geheime Quelle gerettet",
-  "deleted": "Geheime Quelle gelöscht",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "Zulassungsliste für private Endpunkte",
-        "description": "Private oder Loopback-Hosts, die eine geheime Quelle erreichen kann, jeweils einer pro Zeile. Ein selbst gehosteter 1Password Connect-Server benötigt in der Regel eine eigene Adresse, die hier aufgeführt wird."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Geheime Quellen"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/el_GR.json b/plugins/secret-sources/locales/translated/el_GR.json
deleted file mode 100644
index 2a8a52f60..000000000
--- a/plugins/secret-sources/locales/translated/el_GR.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "Μπορείτε να επικολλήσετε μια αναφορά 1Password (op://vault/item/field) αντί για το μυστικό. Λαμβάνεται από την μυστική σας πηγή κατά τη σύνδεση.",
-  "manage": "Διαχείριση μυστικών πηγών",
-  "title": "Μυστικές πηγές",
-  "description": "Οι εξωτερικοί διαχειριστές κωδικών πρόσβασης Termix διαβάζουν μυστικά κατά τη στιγμή της σύνδεσης. Προς το παρόν 1Password Connect (αυτοφιλοξενείται). Το διακριτικό πρόσβασης αποθηκεύεται κρυπτογραφημένο με το κλειδί δεδομένων σας.",
-  "new": "Νέα πηγή",
-  "nameLabel": "Φιλικό όνομα",
-  "urlLabel": "Σύνδεση URL διακομιστή",
-  "tokenLabel": "Σύνδεση διακριτικού πρόσβασης",
-  "tokenKeep": "Αφήστε κενό για να διατηρήσετε το τρέχον διακριτικό",
-  "sharedLabel": "Κοινή χρήση με όλους τους χρήστες (μόνο για διαχειριστές, επιλύεται ενώ είστε συνδεδεμένοι)",
-  "shared": "κοινόχρηστο",
-  "test": "Δοκιμή",
-  "testOk": "Συνδεδεμένο, {{count}} ορατό(α) θησαυροφυλάκιο(α)",
-  "testFailed": "Η δοκιμή σύνδεσης απέτυχε.",
-  "required": "Απαιτούνται όνομα, διεύθυνση URL διακομιστή και διακριτικό",
-  "saved": "Η μυστική πηγή αποθηκεύτηκε",
-  "deleted": "Η μυστική πηγή διαγράφηκε",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "Λίστα επιτρεπόμενων ιδιωτικών τελικών σημείων",
-        "description": "Ιδιωτικοί ή loopback hosts στους οποίους μπορεί να φτάσει μια μυστική πηγή, ένας ανά γραμμή. Ένας αυτοφιλοξενούμενος διακομιστής 1Password Connect συνήθως χρειάζεται τη δική του διεύθυνση να αναφέρεται εδώ."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Μυστικές Πηγές"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/es_ES.json b/plugins/secret-sources/locales/translated/es_ES.json
deleted file mode 100644
index 6b68a042b..000000000
--- a/plugins/secret-sources/locales/translated/es_ES.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "Puedes pegar una referencia de 1Password (op://vault/item/field) en lugar de la clave secreta. Esta se obtiene de tu fuente de claves secretas al conectarte.",
-  "manage": "Gestionar fuentes secretas",
-  "title": "Fuentes secretas",
-  "description": "Termix lee los secretos de los gestores de contraseñas externos al conectarse. Actualmente, utiliza 1Password Connect (autoalojado). El token de acceso se almacena cifrado con su clave de datos.",
-  "new": "Nueva fuente",
-  "nameLabel": "Nombre amistoso",
-  "urlLabel": "URL del servidor de conexión",
-  "tokenLabel": "Token de acceso de Connect",
-  "tokenKeep": "Déjelo vacío para conservar el token actual.",
-  "sharedLabel": "Compartir con todos los usuarios (solo administradores, se resuelve mientras estés conectado).",
-  "shared": "compartido",
-  "test": "Probar",
-  "testOk": "Conectado(s), {{count}} bóveda(s) visible(s)",
-  "testFailed": "La prueba de conexión falló.",
-  "required": "Se requieren nombre, URL del servidor y token.",
-  "saved": "Fuente secreta guardada",
-  "deleted": "Fuente secreta eliminada",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "Lista de permitidos de puntos finales privados",
-        "description": "Hosts privados o de bucle invertido a los que puede acceder una fuente secreta, uno por línea. Un servidor 1Password Connect autohospedado generalmente necesita su propia dirección IP que aparezca aquí."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Fuentes secretas"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/fi_FI.json b/plugins/secret-sources/locales/translated/fi_FI.json
deleted file mode 100644
index 49c1fe064..000000000
--- a/plugins/secret-sources/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "Voit liittää 1Password-viitteen (op://vault/item/field) salaisuuden sijaan. Se noudetaan salaisuuden lähteestäsi yhteyden muodostamisen yhteydessä.",
-  "manage": "Hallitse salaisia lähteitä",
-  "title": "Salaiset lähteet",
-  "description": "Ulkoiset salasananhallintaohjelmat Termix lukevat salaisuudet yhteyden muodostamisen yhteydessä. Tällä hetkellä käytössä on 1Password Connect (itse isännöity). Käyttöoikeustunnus tallennetaan salattuna dataavaimellasi.",
-  "new": "Uusi lähde",
-  "nameLabel": "Ystävällinen nimi",
-  "urlLabel": "Yhdistä palvelimen URL-osoite",
-  "tokenLabel": "Yhdistä käyttöoikeustunnus",
-  "tokenKeep": "Jätä tyhjäksi säilyttääksesi nykyisen tunnuksen",
-  "sharedLabel": "Jaa kaikkien käyttäjien kanssa (vain järjestelmänvalvojille, ratkeaa, kun olet kirjautuneena sisään)",
-  "shared": "jaettu",
-  "test": "Testata",
-  "testOk": "Yhdistetty, {{count}} holvia näkyvissä",
-  "testFailed": "Yhteystesti epäonnistui",
-  "required": "Nimi, palvelimen URL-osoite ja tunnus vaaditaan",
-  "saved": "Salainen lähde tallennettu",
-  "deleted": "Salainen lähde poistettu",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "Yksityisten päätepisteiden sallittujen luettelo",
-        "description": "Yksityiset tai loopback-isännät, joihin salainen lähde voi tavoittaa, yksi riviä kohden. Itse isännöity 1Password Connect -palvelin tarvitsee yleensä oman osoitteensa, joka luetellaan tässä."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Salaiset lähteet"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/fr_FR.json b/plugins/secret-sources/locales/translated/fr_FR.json
deleted file mode 100644
index a7500946f..000000000
--- a/plugins/secret-sources/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "Vous pouvez coller une référence 1Password (op://vault/item/field) à la place du mot de passe. Elle sera récupérée depuis votre source de mots de passe lors de la connexion.",
-  "manage": "Gérer les sources secrètes",
-  "title": "Sources secrètes",
-  "description": "Termix utilise des gestionnaires de mots de passe externes pour lire les secrets lors de la connexion. Actuellement, il s'agit de 1Password Connect (hébergé sur place). Le jeton d'accès est stocké chiffré avec votre clé de données.",
-  "new": "Nouvelle source",
-  "nameLabel": "Nom amical",
-  "urlLabel": "URL du serveur de connexion",
-  "tokenLabel": "Jeton d'accès Connect",
-  "tokenKeep": "Laissez vide pour conserver le jeton actuel",
-  "sharedLabel": "Partager avec tous les utilisateurs (administrateurs uniquement, résolution effectuée lorsque vous êtes connecté)",
-  "shared": "partagé",
-  "test": "Tester",
-  "testOk": "Connecté, {{count}} coffre(s) visible(s)",
-  "testFailed": "Le test de connexion a échoué.",
-  "required": "Le nom, l'URL du serveur et le jeton sont requis.",
-  "saved": "Source secrète sauvegardée",
-  "deleted": "Source secrète supprimée",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "liste blanche des points de terminaison privés",
-        "description": "Hôtes privés ou de bouclage auxquels une source secrète peut accéder, un par ligne. Un serveur 1Password Connect auto-hébergé nécessite généralement sa propre adresse indiquée ici."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Sources secrètes"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/he_IL.json b/plugins/secret-sources/locales/translated/he_IL.json
deleted file mode 100644
index eb42bfcee..000000000
--- a/plugins/secret-sources/locales/translated/he_IL.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "ניתן להדביק הפניה ל-1Password (op://vault/item/field) במקום הסוד. היא נלקחת ממקור הסוד שלך בעת ההתחברות.",
-  "manage": "ניהול מקורות סודיים",
-  "title": "מקורות סודיים",
-  "description": "מנהלי סיסמאות חיצוניים של Termix קוראים סודות מ- בזמן ההתחברות. נכון לעכשיו, 1Password Connect (מארח עצמי). אסימון הגישה מאוחסן מוצפן עם מפתח הנתונים שלך.",
-  "new": "מקור חדש",
-  "nameLabel": "שם ידידותי",
-  "urlLabel": "כתובת URL של שרת התחברות",
-  "tokenLabel": "אסימון גישה להתחברות",
-  "tokenKeep": "השאר ריק כדי לשמור את האסימון הנוכחי",
-  "sharedLabel": "שתף עם כל המשתמשים (מנהלים בלבד, נפתר בזמן שאתה מחובר)",
-  "shared": "מְשׁוּתָף",
-  "test": "מִבְחָן",
-  "testOk": "מחובר, כספת/ות {{count}} גלויה/יות",
-  "testFailed": "בדיקת החיבור נכשלה",
-  "required": "נדרשים שם, כתובת URL של השרת וטופס",
-  "saved": "מקור סודי נשמר",
-  "deleted": "מקור סודי נמחק",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "רשימת היתרים לנקודות קצה פרטיות",
-        "description": "מארחים פרטיים או לולאה-חוזרים אליהם מקור סודי עשוי להגיע, אחד בכל שורה. שרת 1Password Connect המתארח באופן עצמאי זקוק בדרך כלל לכתובת משלו הרשומה כאן."
-      }
-    }
-  },
-  "plugin": {
-    "name": "מקורות סודיים"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/hi_IN.json b/plugins/secret-sources/locales/translated/hi_IN.json
deleted file mode 100644
index 6ac2950ab..000000000
--- a/plugins/secret-sources/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "आप गुप्त पासवर्ड के स्थान पर 1Password संदर्भ (op://vault/item/field) पेस्ट कर सकते हैं। कनेक्ट करते समय यह आपके गुप्त पासवर्ड स्रोत से प्राप्त किया जाता है।",
-  "manage": "गुप्त स्रोतों का प्रबंधन करें",
-  "title": "गुप्त सूत्रों",
-  "description": "टर्मिक्स कनेक्ट होने के समय बाहरी पासवर्ड मैनेजर से गुप्त जानकारी पढ़ता है। वर्तमान में 1Password Connect (स्वयं-होस्टेड) का उपयोग किया जा रहा है। एक्सेस टोकन आपके डेटा कुंजी के साथ एन्क्रिप्टेड रूप में संग्रहीत किया जाता है।",
-  "new": "नए स्रोत",
-  "nameLabel": "दोस्ताना नाम",
-  "urlLabel": "सर्वर यूआरएल से कनेक्ट करें",
-  "tokenLabel": "एक्सेस टोकन कनेक्ट करें",
-  "tokenKeep": "वर्तमान टोकन को बनाए रखने के लिए इसे खाली छोड़ दें",
-  "sharedLabel": "सभी उपयोगकर्ताओं के साथ साझा करें (केवल व्यवस्थापकों के लिए, आपके लॉग इन होने पर ही समस्या का समाधान हो जाएगा)",
-  "shared": "साझा",
-  "test": "परीक्षण",
-  "testOk": "कनेक्टेड, {{count}} वॉल्ट दिखाई दे रहे हैं",
-  "testFailed": "कनेक्शन परीक्षण विफल रहा",
-  "required": "नाम, सर्वर यूआरएल और टोकन आवश्यक हैं।",
-  "saved": "गुप्त स्रोत सुरक्षित",
-  "deleted": "गुप्त सूत्र हटा दिया गया",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "निजी एंडपॉइंट अनुमति सूची",
-        "description": "निजी या लूपबैक होस्ट तक एक गुप्त स्रोत पहुंच सकता है, प्रति पंक्ति एक। एक स्व-होस्टेड 1Password Connect सर्वर को आमतौर पर यहां अपना पता सूचीबद्ध करने की आवश्यकता होती है।"
-      }
-    }
-  },
-  "plugin": {
-    "name": "गुप्त सूत्रों"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/hu_HU.json b/plugins/secret-sources/locales/translated/hu_HU.json
deleted file mode 100644
index 2ebc65e7f..000000000
--- a/plugins/secret-sources/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "A titkos kód helyett beilleszthetsz egy 1Password hivatkozást (op://vault/item/field). A titkos kód a csatlakozáskor a forrásból lesz lekérve.",
-  "manage": "Titkos források kezelése",
-  "title": "Titkos források",
-  "description": "Külső jelszókezelők: A Termix a csatlakozáskor olvassa be a titkos kódokat. Jelenleg az 1Password Connect (saját tárhelyen). A hozzáférési token titkosítva tárolódik az adatkulccsal.",
-  "new": "Új forrás",
-  "nameLabel": "Barátságos név",
-  "urlLabel": "Kapcsolódási szerver URL-címe",
-  "tokenLabel": "Hozzáférési token csatlakoztatása",
-  "tokenKeep": "Hagyja üresen az aktuális token megtartásához",
-  "sharedLabel": "Megosztás az összes felhasználóval (csak rendszergazdák, bejelentkezés után oldódik meg)",
-  "shared": "megosztott",
-  "test": "Teszt",
-  "testOk": "Csatlakoztatva, {{count}} trezor látható",
-  "testFailed": "A kapcsolat tesztje sikertelen",
-  "required": "Név, szerver URL és token megadása kötelező",
-  "saved": "Titkos forrás mentve",
-  "deleted": "Titkos forrás törölve",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "Privát végpontok engedélyezőlistája",
-        "description": "Privát vagy visszacsatolásos hosztok, amelyeket egy titkos forrás elérhet, soronként egy. Egy saját hosztolt 1Password Connect szervernek általában saját címre van szüksége, amely itt szerepel."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Titkos források"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/id_ID.json b/plugins/secret-sources/locales/translated/id_ID.json
deleted file mode 100644
index de935ff9e..000000000
--- a/plugins/secret-sources/locales/translated/id_ID.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "Anda dapat menempelkan referensi 1Password (op://vault/item/field) sebagai pengganti rahasia. Referensi tersebut akan diambil dari sumber rahasia Anda saat terhubung.",
-  "manage": "Mengelola sumber rahasia",
-  "title": "Sumber rahasia",
-  "description": "Termix membaca rahasia dari pengelola kata sandi eksternal pada saat koneksi. Saat ini menggunakan 1Password Connect (yang dihosting sendiri). Token akses disimpan dalam bentuk terenkripsi dengan kunci data Anda.",
-  "new": "Sumber baru",
-  "nameLabel": "Nama yang ramah",
-  "urlLabel": "Hubungkan URL server",
-  "tokenLabel": "Hubungkan token akses",
-  "tokenKeep": "Biarkan kosong untuk mempertahankan token saat ini.",
-  "sharedLabel": "Bagikan dengan semua pengguna (hanya admin, akan aktif saat Anda masuk)",
-  "shared": "dibagikan",
-  "test": "Tes",
-  "testOk": "Terhubung, {{count}} brankas terlihat",
-  "testFailed": "Pengujian koneksi gagal",
-  "required": "Nama, URL server, dan token wajib diisi.",
-  "saved": "Sumber rahasia tersimpan",
-  "deleted": "Sumber rahasia telah dihapus.",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "Daftar izin titik akhir privat",
-        "description": "Host privat atau loopback yang dapat dijangkau oleh sumber rahasia, satu per baris. Server 1Password Connect yang dihosting sendiri biasanya memerlukan alamatnya sendiri yang tercantum di sini."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Sumber Rahasia"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/it_IT.json b/plugins/secret-sources/locales/translated/it_IT.json
deleted file mode 100644
index f76294067..000000000
--- a/plugins/secret-sources/locales/translated/it_IT.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "Al posto del segreto, puoi incollare un riferimento a 1Password (op://vault/item/field). Questo verrà recuperato dalla tua fonte di segreti al momento della connessione.",
-  "manage": "Gestire le fonti segrete",
-  "title": "Fonti segrete",
-  "description": "I gestori di password esterni Termix leggono le credenziali al momento della connessione. Attualmente, 1Password Connect (self-hosted) è il gestore di password esterno. Il token di accesso viene memorizzato crittografato insieme alla chiave dati.",
-  "new": "Nuova fonte",
-  "nameLabel": "Nome amichevole",
-  "urlLabel": "URL del server di connessione",
-  "tokenLabel": "Connetti il token di accesso",
-  "tokenKeep": "Lascia vuoto per mantenere il token corrente",
-  "sharedLabel": "Condividi con tutti gli utenti (solo amministratori, la modifica si applica solo se si è connessi)",
-  "shared": "condiviso",
-  "test": "Test",
-  "testOk": "Connesso, {{count}} caveau visibile(i)",
-  "testFailed": "Test di connessione fallito",
-  "required": "Sono richiesti nome, URL del server e token.",
-  "saved": "fonte segreta salvata",
-  "deleted": "Fonte segreta eliminata",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "Lista di endpoint privati consentiti",
-        "description": "Host privati o di loopback raggiungibili da una fonte segreta, uno per riga. Un server 1Password Connect self-hosted di solito necessita di un proprio indirizzo elencato qui."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Fonti segrete"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/ja_JP.json b/plugins/secret-sources/locales/translated/ja_JP.json
deleted file mode 100644
index d82e39f40..000000000
--- a/plugins/secret-sources/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "シークレットの代わりに、1Passwordの参照（op://vault/item/field）を貼り付けることができます。これは接続時にシークレットソースから取得されます。",
-  "manage": "秘密情報源の管理",
-  "title": "秘密の情報源",
-  "description": "Termixは、接続時に外部パスワードマネージャーから秘密情報を読み取ります。現在、1Password Connect（セルフホスト型）に対応しています。アクセストークンは、お客様のデータキーで暗号化されて保存されます。",
-  "new": "新しい情報源",
-  "nameLabel": "親しみやすい名前",
-  "urlLabel": "接続サーバーURL",
-  "tokenLabel": "接続アクセストークン",
-  "tokenKeep": "現在のトークンを保持するには空欄のままにしてください。",
-  "sharedLabel": "すべてのユーザーと共有（管理者のみ、ログイン中に解決されます）",
-  "shared": "共有",
-  "test": "テスト",
-  "testOk": "接続済み、 {{count}} 個の保管庫が表示されています",
-  "testFailed": "接続テストに失敗しました",
-  "required": "名前、サーバーURL、トークンは必須です。",
-  "saved": "秘密の情報源が保存されました",
-  "deleted": "秘密情報源を削除",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "プライベートエンドポイントの許可リスト",
-        "description": "秘密情報源がアクセスできるプライベートホストまたはループバックホストを、1行に1つずつ記述します。自己ホスト型の1Password Connectサーバーの場合、通常はここに独自のIPアドレスを記載する必要があります。"
-      }
-    }
-  },
-  "plugin": {
-    "name": "秘密情報源"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/ko_KR.json b/plugins/secret-sources/locales/translated/ko_KR.json
deleted file mode 100644
index 14582ee9c..000000000
--- a/plugins/secret-sources/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "비밀 키 대신 1Password 참조(op://vault/item/field)를 붙여넣을 수 있습니다. 연결 시 비밀 키 소스에서 해당 참조를 가져옵니다.",
-  "manage": "비밀 소스를 관리하세요",
-  "title": "비밀 정보원",
-  "description": "Termix는 외부 암호 관리자(현재 1Password Connect(자체 호스팅))에서 연결 시 비밀 키를 읽어옵니다. 액세스 토큰은 데이터 키로 암호화되어 저장됩니다.",
-  "new": "새로운 소스",
-  "nameLabel": "친근한 이름",
-  "urlLabel": "서버 URL에 연결",
-  "tokenLabel": "연결 액세스 토큰",
-  "tokenKeep": "현재 토큰을 유지하려면 비워 두십시오.",
-  "sharedLabel": "모든 사용자와 공유 (관리자만 가능, 로그인 상태에서 해결됨)",
-  "shared": "공유",
-  "test": "테스트",
-  "testOk": "연결됨, {{count}} 금고가 보입니다",
-  "testFailed": "연결 테스트 실패",
-  "required": "이름, 서버 URL 및 토큰은 필수 입력 사항입니다.",
-  "saved": "비밀 소스 저장됨",
-  "deleted": "비밀 소스 삭제됨",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "개인 엔드포인트 허용 목록",
-        "description": "비밀 소스가 접근할 수 있는 개인 또는 루프백 호스트를 한 줄에 하나씩 나열합니다. 자체 호스팅 1Password Connect 서버는 일반적으로 여기에 자체 주소를 나열해야 합니다."
-      }
-    }
-  },
-  "plugin": {
-    "name": "비밀 정보원"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/nl_NL.json b/plugins/secret-sources/locales/translated/nl_NL.json
deleted file mode 100644
index 45d1af905..000000000
--- a/plugins/secret-sources/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "Je kunt in plaats van het geheim een 1Password-referentie (op://vault/item/field) plakken. Deze wordt opgehaald uit je geheime bron wanneer je verbinding maakt.",
-  "manage": "Beheer geheime bronnen",
-  "title": "Geheime bronnen",
-  "description": "Externe wachtwoordmanagers die Termix gebruikt, lezen de geheimen uit tijdens het verbinden. Momenteel is dat 1Password Connect (zelf gehost). Het toegangstoken wordt versleuteld opgeslagen met uw gegevenssleutel.",
-  "new": "Nieuwe bron",
-  "nameLabel": "Vriendelijke naam",
-  "urlLabel": "Verbindingsserver-URL",
-  "tokenLabel": "Verbindingstoegangstoken",
-  "tokenKeep": "Laat dit veld leeg om het huidige token te behouden.",
-  "sharedLabel": "Delen met alle gebruikers (alleen beheerders, wordt opgelost terwijl u bent ingelogd)",
-  "shared": "gedeeld",
-  "test": "Test",
-  "testOk": "Verbonden, {{count}} kluis(en) zichtbaar",
-  "testFailed": "Verbindingstest mislukt",
-  "required": "Naam, server-URL en token zijn vereist.",
-  "saved": "Geheime bron opgeslagen",
-  "deleted": "Geheime bron verwijderd",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "Toegestane lijst voor privé-eindpunten",
-        "description": "Privé- of loopback-hosts die een geheime bron kunnen bereiken, één per regel. Een zelfgehoste 1Password Connect-server heeft meestal een eigen adres nodig dat hier vermeld moet worden."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Geheime bronnen"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/no_NO.json b/plugins/secret-sources/locales/translated/no_NO.json
deleted file mode 100644
index cab1424cf..000000000
--- a/plugins/secret-sources/locales/translated/no_NO.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "Du kan lime inn en 1Password-referanse (op://vault/item/field) i stedet for hemmeligheten. Den hentes fra hemmelighetskilden din når du kobler til.",
-  "manage": "Administrer hemmelige kilder",
-  "title": "Hemmelige kilder",
-  "description": "Eksterne passordbehandlere Termix leser hemmeligheter fra ved tilkobling. For tiden 1Password Connect (selvhostet). Tilgangstokenet lagres kryptert med datanøkkelen din.",
-  "new": "Ny kilde",
-  "nameLabel": "Vennlig navn",
-  "urlLabel": "URL-adresse for tilkobling av server",
-  "tokenLabel": "Koble til tilgangstoken",
-  "tokenKeep": "La stå tomt for å beholde gjeldende token",
-  "sharedLabel": "Del med alle brukere (kun administratorer, løses mens du er logget på)",
-  "shared": "delt",
-  "test": "Test",
-  "testOk": "Tilkoblet, {{count}} hvelv synlig(e)",
-  "testFailed": "Tilkoblingstesten mislyktes",
-  "required": "Navn, server-URL og token er obligatorisk",
-  "saved": "Hemmelig kilde lagret",
-  "deleted": "Hemmelig kilde slettet",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "Tillatelsesliste for privat endepunkt",
-        "description": "Private verter eller loopback-verter en hemmelig kilde kan nå, én per linje. En selvhostet 1Password Connect-server trenger vanligvis sin egen adresse oppført her."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Hemmelige kilder"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/pl_PL.json b/plugins/secret-sources/locales/translated/pl_PL.json
deleted file mode 100644
index e8dc3812f..000000000
--- a/plugins/secret-sources/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "Zamiast klucza tajnego możesz wkleić odnośnik do 1Password (op://vault/item/field). Zostanie on pobrany ze źródła klucza tajnego podczas łączenia.",
-  "manage": "Zarządzaj tajnymi źródłami",
-  "title": "Tajne źródła",
-  "description": "Zewnętrzny menedżer haseł Termix odczytuje sekrety w momencie połączenia. Obecnie 1Password Connect (hostowany samodzielnie). Token dostępu jest przechowywany w postaci zaszyfrowanej z Twoim kluczem danych.",
-  "new": "Nowe źródło",
-  "nameLabel": "Przyjazna nazwa",
-  "urlLabel": "Połącz adres URL serwera",
-  "tokenLabel": "Połącz token dostępu",
-  "tokenKeep": "Pozostaw puste, aby zachować bieżący token",
-  "sharedLabel": "Udostępnij wszystkim użytkownikom (tylko administratorzy, rozwiązuje się, gdy jesteś zalogowany)",
-  "shared": "współdzielony",
-  "test": "Test",
-  "testOk": "Połączono, {{count}} widocznych skarbców",
-  "testFailed": "Test połączenia nie powiódł się",
-  "required": "Wymagane są nazwa, adres URL serwera i token",
-  "saved": "Tajne źródło uratowane",
-  "deleted": "Usunięto tajne źródło",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "Prywatna lista dozwolonych punktów końcowych",
-        "description": "Prywatne lub zwrotne hosty, do których może dotrzeć tajne źródło, po jednym na linię. Samodzielnie hostowany serwer 1Password Connect zazwyczaj wymaga podania tutaj własnego adresu."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Tajne źródła"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/pt_BR.json b/plugins/secret-sources/locales/translated/pt_BR.json
deleted file mode 100644
index 74d3f04f1..000000000
--- a/plugins/secret-sources/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "Você pode colar uma referência do 1Password (op://vault/item/field) em vez do segredo. Ela é obtida da sua fonte de segredos ao conectar.",
-  "manage": "Gerenciar fontes secretas",
-  "title": "Fontes secretas",
-  "description": "O Termix lê os segredos de gerenciadores de senhas externos no momento da conexão. Atualmente, utiliza o 1Password Connect (hospedado localmente). O token de acesso é armazenado criptografado com sua chave de dados.",
-  "new": "Nova fonte",
-  "nameLabel": "Nome amigável",
-  "urlLabel": "URL de conexão do servidor",
-  "tokenLabel": "Token de acesso Connect",
-  "tokenKeep": "Deixe em branco para manter o token atual.",
-  "sharedLabel": "Compartilhar com todos os usuários (somente administradores, funciona enquanto você estiver conectado)",
-  "shared": "compartilhado",
-  "test": "Teste",
-  "testOk": "Conectado, {{count}} cofre(s) visível(is)",
-  "testFailed": "Teste de conexão falhou",
-  "required": "Nome, URL do servidor e token são obrigatórios.",
-  "saved": "Fonte secreta salva",
-  "deleted": "Fonte secreta excluída",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "lista de permissões de endpoints privados",
-        "description": "Hosts privados ou de loopback que uma fonte secreta pode acessar, um por linha. Um servidor 1Password Connect autohospedado geralmente precisa ter seu próprio endereço listado aqui."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Fontes secretas"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/pt_PT.json b/plugins/secret-sources/locales/translated/pt_PT.json
deleted file mode 100644
index 82ba6a8c6..000000000
--- a/plugins/secret-sources/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "Pode colar uma referência do 1Password (op://vault/item/field) em vez do segredo. É obtida a partir da sua fonte de segredos ao conectar.",
-  "manage": "Gerir fontes secretas",
-  "title": "Fontes secretas",
-  "description": "O Termix lê os segredos dos gestores de palavras-passe externos no momento da ligação. Atualmente utiliza o 1Password Connect (alojado localmente). O token de acesso é armazenado encriptado com a sua chave de dados.",
-  "new": "Nova fonte",
-  "nameLabel": "Nome amigável",
-  "urlLabel": "URL de ligação do servidor",
-  "tokenLabel": "Token de acesso Connect",
-  "tokenKeep": "Deixe em branco para manter o token atual.",
-  "sharedLabel": "Partilhar com todos os utilizadores (apenas administradores, funciona enquanto estiver ligado)",
-  "shared": "partilhado",
-  "test": "Testar",
-  "testOk": "Ligado, {{count}} cofre(s) visível(is)",
-  "testFailed": "Teste de ligação falhou",
-  "required": "Nome, URL do servidor e token são obrigatórios.",
-  "saved": "Fonte secreta guardada",
-  "deleted": "Fonte secreta excluída",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "lista de permissões de endpoints privados",
-        "description": "Hosts privados ou de loopback a que uma fonte secreta pode aceder, um por linha. Um servidor 1Password Connect auto-hospedado precisa geralmente de ter o seu próprio endereço listado aqui."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Fontes secretas"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/ro_RO.json b/plugins/secret-sources/locales/translated/ro_RO.json
deleted file mode 100644
index 7d85a859d..000000000
--- a/plugins/secret-sources/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "Puteți lipi o referință 1Password (op://vault/item/field) în loc de secret. Aceasta este preluată din sursa secretului dvs. la conectare.",
-  "manage": "Gestionați sursele secrete",
-  "title": "Surse secrete",
-  "description": "Managerii de parole externi Termix citesc secretele la momentul conectării. În prezent, 1Password Connect (găzduit automat). Tokenul de acces este stocat criptat cu cheia dvs. de date.",
-  "new": "Sursă nouă",
-  "nameLabel": "Nume prietenos",
-  "urlLabel": "Conectați adresa URL a serverului",
-  "tokenLabel": "Conectare jeton de acces",
-  "tokenKeep": "Lăsați gol pentru a păstra token-ul curent",
-  "sharedLabel": "Partajează cu toți utilizatorii (doar pentru administratori, se rezolvă în timp ce ești conectat)",
-  "shared": "partajat",
-  "test": "Test",
-  "testOk": "Conectat, {{count}} seif(uri) vizibil(e)",
-  "testFailed": "Testul de conexiune a eșuat",
-  "required": "Numele, adresa URL a serverului și tokenul sunt obligatorii",
-  "saved": "Sursă secretă salvată",
-  "deleted": "Sursa secretă a fost ștearsă",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "Listă permisă pentru puncte de terminare private",
-        "description": "Gazde private sau loopback la care poate ajunge o sursă secretă, câte una pe linie. Un server 1Password Connect auto-găzduit are nevoie de obicei de propria adresă listată aici."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Surse secrete"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/ru_RU.json b/plugins/secret-sources/locales/translated/ru_RU.json
deleted file mode 100644
index 1d67eeb90..000000000
--- a/plugins/secret-sources/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "Вместо секретного ключа можно вставить ссылку на 1Password (op://vault/item/field). Она будет получена из вашего источника секретных ключей при подключении.",
-  "manage": "Управление секретными источниками",
-  "title": "Секретные источники",
-  "description": "Внешние менеджеры паролей Termix считывают секретные ключи во время подключения. В настоящее время используется 1Password Connect (самостоятельно размещенный). Токен доступа хранится в зашифрованном виде с помощью вашего ключа данных.",
-  "new": "Новый источник",
-  "nameLabel": "Дружелюбное имя",
-  "urlLabel": "URL-адрес сервера подключения",
-  "tokenLabel": "Токен доступа для подключения",
-  "tokenKeep": "Оставьте поле пустым, чтобы сохранить текущий токен.",
-  "sharedLabel": "Предоставить доступ всем пользователям (только администраторам, проблема решается при авторизации).",
-  "shared": "общий",
-  "test": "Проверить",
-  "testOk": "Подключено, {{count}} хранилище(я) видны",
-  "testFailed": "Проверка соединения не удалась.",
-  "required": "Необходимо указать имя, URL-адрес сервера и токен.",
-  "saved": "Секретный источник сохранен",
-  "deleted": "Секретный источник удален",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "Список разрешенных частных конечных точек",
-        "description": "Доступ к секретному источнику может осуществляться через частные или замыкающие хосты, по одному на строку. Самостоятельно размещенному серверу 1Password Connect обычно требуется собственный адрес, указанный здесь."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Секретные источники"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/sr_SP.json b/plugins/secret-sources/locales/translated/sr_SP.json
deleted file mode 100644
index 684a5b533..000000000
--- a/plugins/secret-sources/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "Можете да налепите референцу 1Password (op://vault/item/field) уместо тајне лозинке. Она се преузима из вашег тајног извора приликом повезивања.",
-  "manage": "Управљајте тајним изворима",
-  "title": "Тајни извори",
-  "description": "Спољни менаџери лозинки Termix чита тајне податке у време повезивања. Тренутно 1Password Connect (самостални хост). Приступни токен се чува шифровано помоћу вашег кључа података.",
-  "new": "Нови извор",
-  "nameLabel": "Пријатељско име",
-  "urlLabel": "URL адреса сервера за повезивање",
-  "tokenLabel": "Токен за приступ повезивању",
-  "tokenKeep": "Оставите празно да бисте задржали тренутни токен",
-  "sharedLabel": "Дели са свим корисницима (само за администраторе, решава се док сте пријављени)",
-  "shared": "дељено",
-  "test": "Тест",
-  "testOk": "Повезано, видљивих {{count}} трезора",
-  "testFailed": "Тест везе није успео",
-  "required": "Потребно је име, URL сервера и токен",
-  "saved": "Тајни извор сачуван",
-  "deleted": "Тајни извор је обрисан",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "Листа дозвољених приватних крајњих тачака",
-        "description": "Приватни или loopback хостови које тајни извор може досегнути, по један у сваком реду. Самостално хостовани 1Password Connect сервер обично захтева сопствену адресу наведену овде."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Тајни извори"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/sv_SE.json b/plugins/secret-sources/locales/translated/sv_SE.json
deleted file mode 100644
index 9b661dfa7..000000000
--- a/plugins/secret-sources/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "Du kan klistra in en 1Password-referens (op://vault/item/field) istället för hemligheten. Den hämtas från din hemliga källa när du ansluter.",
-  "manage": "Hantera hemliga källor",
-  "title": "Hemliga källor",
-  "description": "Externa lösenordshanterare Termix läser hemligheter från vid anslutningstillfället. För närvarande 1Password Connect (egenhostad). Åtkomsttoken lagras krypterad med din datanyckel.",
-  "new": "Ny källa",
-  "nameLabel": "Vänligt namn",
-  "urlLabel": "Anslut server-URL",
-  "tokenLabel": "Anslut åtkomsttoken",
-  "tokenKeep": "Lämna tomt för att behålla den aktuella token",
-  "sharedLabel": "Dela med alla användare (endast administratörer, löses medan du är inloggad)",
-  "shared": "delad",
-  "test": "Testa",
-  "testOk": "Ansluten, {{count}} valv synliga",
-  "testFailed": "Anslutningstestet misslyckades",
-  "required": "Namn, server-URL och token krävs",
-  "saved": "Hemlig källa sparad",
-  "deleted": "Hemlig källa raderad",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "Tillåtelselista för privat slutpunkt",
-        "description": "Privata eller loopback-värdar som en hemlig källa kan nå, en per rad. En självhostad 1Password Connect-server behöver vanligtvis sin egen adress listad här."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Hemliga källor"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/th_TH.json b/plugins/secret-sources/locales/translated/th_TH.json
deleted file mode 100644
index 3f8710882..000000000
--- a/plugins/secret-sources/locales/translated/th_TH.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "คุณสามารถวางข้อมูลอ้างอิง 1Password (op://vault/item/field) แทนรหัสลับได้ ระบบจะดึงข้อมูลนี้จากแหล่งข้อมูลลับของคุณเมื่อเชื่อมต่อ",
-  "manage": "จัดการแหล่งข้อมูลลับ",
-  "title": "แหล่งข่าวลับ",
-  "description": "โปรแกรมจัดการรหัสผ่านภายนอก Termix จะอ่านข้อมูลลับจากอุปกรณ์เมื่อเชื่อมต่อ ปัจจุบันคือ 1Password Connect (แบบติดตั้งเอง) โทเค็นการเข้าถึงจะถูกจัดเก็บในรูปแบบเข้ารหัสพร้อมกับคีย์ข้อมูลของคุณ",
-  "new": "แหล่งข้อมูลใหม่",
-  "nameLabel": "ชื่อที่เป็นมิตร",
-  "urlLabel": "เชื่อมต่อ URL ของเซิร์ฟเวอร์",
-  "tokenLabel": "เชื่อมต่อโทเค็นการเข้าถึง",
-  "tokenKeep": "เว้นว่างไว้เพื่อคงโทเค็นปัจจุบันไว้",
-  "sharedLabel": "แชร์กับผู้ใช้ทั้งหมด (เฉพาะผู้ดูแลระบบเท่านั้น ใช้งานได้เฉพาะเมื่อคุณเข้าสู่ระบบอยู่)",
-  "shared": "แชร์",
-  "test": "ทดสอบ",
-  "testOk": "เชื่อมต่อแล้ว, มองเห็นห้องนิรภัย {{count}} ห้อง",
-  "testFailed": "การทดสอบการเชื่อมต่อล้มเหลว",
-  "required": "จำเป็นต้องระบุชื่อ ที่อยู่ URL ของเซิร์ฟเวอร์ และโทเค็น",
-  "saved": "แหล่งข่าวลับถูกบันทึกไว้แล้ว",
-  "deleted": "แหล่งข่าวลับถูกลบแล้ว",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "รายการอนุญาตปลายทางส่วนตัว",
-        "description": "โฮสต์ส่วนตัวหรือโฮสต์แบบลูปแบ็กที่แหล่งข้อมูลลับสามารถเข้าถึงได้ หนึ่งโฮสต์ต่อบรรทัด โดยปกติแล้วเซิร์ฟเวอร์ 1Password Connect ที่ติดตั้งเองจะต้องมีที่อยู่ของตัวเองระบุไว้ที่นี่"
-      }
-    }
-  },
-  "plugin": {
-    "name": "แหล่งข่าวลับ"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/tr_TR.json b/plugins/secret-sources/locales/translated/tr_TR.json
deleted file mode 100644
index 0cb5beded..000000000
--- a/plugins/secret-sources/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "Gizli anahtar yerine 1Password referansını (op://vault/item/field) yapıştırabilirsiniz. Bağlantı kurulurken gizli anahtar kaynağınızdan alınır.",
-  "manage": "Gizli kaynakları yönetin",
-  "title": "Gizli kaynaklar",
-  "description": "Termix, bağlantı kurulduğunda harici parola yöneticilerinden gizli bilgileri okur. Şu anda 1Password Connect (kendi sunucunuzda barındırılan) kullanılmaktadır. Erişim belirteci, veri anahtarınızla şifrelenmiş olarak saklanır.",
-  "new": "Yeni kaynak",
-  "nameLabel": "Dostça isim",
-  "urlLabel": "Sunucu URL'sine bağlanın",
-  "tokenLabel": "Bağlantı erişim belirteci",
-  "tokenKeep": "Geçerli belirteci korumak için boş bırakın.",
-  "sharedLabel": "Tüm kullanıcılarla paylaş (yalnızca yöneticiler, oturumunuz açıkken çözümlenir)",
-  "shared": "paylaşılan",
-  "test": "Test Et",
-  "testOk": "Bağlı, {{count}} kasa görünür durumda",
-  "testFailed": "Bağlantı testi başarısız oldu.",
-  "required": "İsim, sunucu URL'si ve belirteç (token) gereklidir.",
-  "saved": "Gizli kaynak kaydedildi.",
-  "deleted": "Gizli kaynak silindi",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "Özel uç nokta izin listesi",
-        "description": "Gizli bir kaynağın erişebileceği özel veya geri döngü sunucuları, her satıra bir tane. Kendi kendine barındırılan bir 1Password Connect sunucusunun genellikle burada listelenen kendi adresine ihtiyacı vardır."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Gizli Kaynaklar"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/uk_UA.json b/plugins/secret-sources/locales/translated/uk_UA.json
deleted file mode 100644
index 008dd27c4..000000000
--- a/plugins/secret-sources/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "Ви можете вставити посилання на 1Password (op://vault/item/field) замість секретного коду. Воно отримується з вашого секретного джерела під час підключення.",
-  "manage": "Керування секретними джерелами",
-  "title": "Секретні джерела",
-  "description": "Зовнішні менеджери паролів Termix зчитують секрети під час підключення. Наразі це 1Password Connect (власний хостинг). Токен доступу зберігається в зашифрованому вигляді з вашим ключем даних.",
-  "new": "Нове джерело",
-  "nameLabel": "Зрозуміле ім'я",
-  "urlLabel": "URL-адреса сервера підключення",
-  "tokenLabel": "Підключити токен доступу",
-  "tokenKeep": "Залиште поле порожнім, щоб зберегти поточний токен",
-  "sharedLabel": "Поділитися з усіма користувачами (лише для адміністраторів, вирішується, коли ви ввійшли в систему)",
-  "shared": "спільний",
-  "test": "Тест",
-  "testOk": "Підключено, видимих сховищ {{count}}",
-  "testFailed": "Перевірка з'єднання не вдалася",
-  "required": "Ім'я, URL-адреса сервера та токен обов'язкові",
-  "saved": "Секретне джерело збережено",
-  "deleted": "Секретне джерело видалено",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "Список дозволених приватних кінцевих точок",
-        "description": "Приватні або петлеві хости, до яких може звернутися секретне джерело, по одному на рядок. Власному серверу 1Password Connect зазвичай потрібна власна адреса, вказана тут."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Секретні джерела"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/vi_VN.json b/plugins/secret-sources/locales/translated/vi_VN.json
deleted file mode 100644
index 4ce0f0460..000000000
--- a/plugins/secret-sources/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "Bạn có thể dán mã tham chiếu 1Password (op://vault/item/field) thay cho mã bí mật. Mã này sẽ được lấy từ nguồn mã bí mật của bạn khi kết nối.",
-  "manage": "Quản lý các nguồn tin mật",
-  "title": "Nguồn tin bí mật",
-  "description": "Termix đọc các mã bí mật từ các trình quản lý mật khẩu bên ngoài khi kết nối. Hiện tại là 1Password Connect (tự lưu trữ). Mã truy cập được lưu trữ dưới dạng mã hóa cùng với khóa dữ liệu của bạn.",
-  "new": "Nguồn tin mới",
-  "nameLabel": "Tên thân thiện",
-  "urlLabel": "URL kết nối máy chủ",
-  "tokenLabel": "Mã truy cập kết nối",
-  "tokenKeep": "Để trống nếu muốn giữ nguyên mã thông báo hiện tại.",
-  "sharedLabel": "Chia sẻ với tất cả người dùng (chỉ quản trị viên, thao tác này sẽ được thực hiện khi bạn đang đăng nhập)",
-  "shared": "được chia sẻ",
-  "test": "Kiểm tra",
-  "testOk": "Đã kết nối, {{count}} kho lưu trữ đang hiển thị",
-  "testFailed": "Kiểm tra kết nối thất bại",
-  "required": "Tên người dùng, URL máy chủ và mã thông báo là bắt buộc.",
-  "saved": "Nguồn bí mật đã được lưu",
-  "deleted": "Nguồn tin bí mật đã bị xóa.",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "Danh sách cho phép điểm cuối riêng tư",
-        "description": "Các máy chủ riêng tư hoặc máy chủ vòng lặp mà nguồn bí mật có thể truy cập được, mỗi dòng một máy chủ. Máy chủ 1Password Connect tự lưu trữ thường cần có địa chỉ riêng được liệt kê ở đây."
-      }
-    }
-  },
-  "plugin": {
-    "name": "Nguồn tin bí mật"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/zh_CN.json b/plugins/secret-sources/locales/translated/zh_CN.json
deleted file mode 100644
index eb631472b..000000000
--- a/plugins/secret-sources/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "您可以粘贴 1Password 引用（op://vault/item/field）而不是密钥。连接时，系统会从您的密钥源中获取该引用。",
-  "manage": "管理秘密来源",
-  "title": "秘密消息来源",
-  "description": "外部密码管理器 Termix 会在连接时读取密钥。目前支持 1Password Connect（自托管）。访问令牌会使用您的数据密钥进行加密存储。",
-  "new": "新来源",
-  "nameLabel": "友好名称",
-  "urlLabel": "连接服务器 URL",
-  "tokenLabel": "连接访问令牌",
-  "tokenKeep": "留空以保留当前令牌",
-  "sharedLabel": "共享给所有用户（仅限管理员，登录后生效）",
-  "shared": "已共享",
-  "test": "测试",
-  "testOk": "已连接， {{count}} 保险库可见",
-  "testFailed": "连接测试失败",
-  "required": "需要提供名称、服务器 URL 和令牌。",
-  "saved": "秘密来源已保存",
-  "deleted": "秘密来源已删除",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "私有端点允许列表",
-        "description": "私有或回环地址，秘密来源可以访问，每行一个。自托管的 1Password Connect 服务器通常需要在此处列出其自己的地址。"
-      }
-    }
-  },
-  "plugin": {
-    "name": "秘密消息来源"
-  }
-}
diff --git a/plugins/secret-sources/locales/translated/zh_TW.json b/plugins/secret-sources/locales/translated/zh_TW.json
deleted file mode 100644
index 8233ccca8..000000000
--- a/plugins/secret-sources/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,30 +0,0 @@
-{
-  "hint": "您可以貼上 1Password 引用（op://vault/item/field）而不是金鑰。連線時，系統會從您的金鑰來源取得該引用。",
-  "manage": "管理秘密來源",
-  "title": "秘密消息來源",
-  "description": "外部密碼管理器 Termix 會在連線時讀取金鑰。目前支援 1Password Connect（自架）。存取令牌會使用您的資料密鑰進行加密儲存。",
-  "new": "新來源",
-  "nameLabel": "友善名稱",
-  "urlLabel": "連接伺服器 URL",
-  "tokenLabel": "連接訪問令牌",
-  "tokenKeep": "留空以保留當前令牌",
-  "sharedLabel": "分享給所有使用者（僅限管理員，登入後生效）",
-  "shared": "已共用",
-  "test": "測試",
-  "testOk": "已連接， {{count}} 保險庫可見",
-  "testFailed": "連線測試失敗",
-  "required": "需要提供名稱、伺服器 URL 和令牌。",
-  "saved": "秘密來源已儲存",
-  "deleted": "秘密來源已刪除",
-  "settings": {
-    "admin": {
-      "privateEndpoints": {
-        "label": "私有端點允許列表",
-        "description": "私有或回環位址，秘密來源可以訪問，每行一個。自託管的 1Password Connect 伺服器通常需要在此列出自己的位址。"
-      }
-    }
-  },
-  "plugin": {
-    "name": "秘密消息來源"
-  }
-}
diff --git a/plugins/secret-sources/manifest.json b/plugins/secret-sources/manifest.json
deleted file mode 100644
index 0ed2eef67..000000000
--- a/plugins/secret-sources/manifest.json
+++ /dev/null
@@ -1,44 +0,0 @@
-{
-  "id": "secret-sources",
-  "name": "Secret Sources",
-  "version": "1.0.0",
-  "description": "Fetch host secrets from 1Password when you connect instead of storing them in Termix.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Access & Security",
-  "icon": "KeyRound",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "db:own",
-    "secrets:own",
-    "network:outbound",
-    "network:serve",
-    "auth:provide",
-    "ui:surface",
-    "users:impersonate"
-  ],
-  "contributes": {
-    "auth": {
-      "secretSchemes": ["op"]
-    },
-    "settings": {
-      "admin": [
-        {
-          "key": "privateEndpoints",
-          "type": "textarea",
-          "labelKey": "settings.admin.privateEndpoints.label",
-          "descriptionKey": "settings.admin.privateEndpoints.description",
-          "default": "localhost\n127.0.0.1\n::1\nhost.docker.internal"
-        }
-      ]
-    }
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"]
-}
diff --git a/plugins/secret-sources/migrations/mysql/0001_adopt_secret_sources.sql b/plugins/secret-sources/migrations/mysql/0001_adopt_secret_sources.sql
deleted file mode 100644
index 50c253185..000000000
--- a/plugins/secret-sources/migrations/mysql/0001_adopt_secret_sources.sql
+++ /dev/null
@@ -1,15 +0,0 @@
--- secret-sources 0001: adopt_secret_sources
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `secret_sources` (
-  `id` varchar(255) PRIMARY KEY NOT NULL,
-  `user_id` varchar(255) NOT NULL,
-  `name` text NOT NULL,
-  `kind` text NOT NULL DEFAULT ('onepassword-connect'),
-  `base_url` text NOT NULL,
-  `shared` boolean NOT NULL DEFAULT false,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `secret_sources` TO `p_secret_sources_sources`;
diff --git a/plugins/secret-sources/migrations/postgres/0001_adopt_secret_sources.sql b/plugins/secret-sources/migrations/postgres/0001_adopt_secret_sources.sql
deleted file mode 100644
index ae426dc7a..000000000
--- a/plugins/secret-sources/migrations/postgres/0001_adopt_secret_sources.sql
+++ /dev/null
@@ -1,16 +0,0 @@
--- secret-sources 0001: adopt_secret_sources
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "secret_sources" (
-  "id" varchar(255) PRIMARY KEY NOT NULL,
-  "user_id" varchar(255) NOT NULL,
-  "name" text NOT NULL,
-  "kind" text NOT NULL DEFAULT 'onepassword-connect',
-  "base_url" text NOT NULL,
-  "shared" boolean NOT NULL DEFAULT false,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_secret_sources_user" ON "secret_sources" ("user_id");
-ALTER TABLE "secret_sources" RENAME TO "p_secret_sources_sources";
diff --git a/plugins/secret-sources/migrations/snapshot.json b/plugins/secret-sources/migrations/snapshot.json
deleted file mode 100644
index 02ae92905..000000000
--- a/plugins/secret-sources/migrations/snapshot.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "sources": {
-      "columns": {
-        "id": {
-          "type": "varchar",
-          "length": 255,
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "name": {
-          "type": "text",
-          "notNull": true
-        },
-        "kind": {
-          "type": "text",
-          "notNull": true,
-          "defaultValue": "onepassword-connect"
-        },
-        "baseUrl": {
-          "type": "text",
-          "notNull": true
-        },
-        "shared": {
-          "type": "boolean",
-          "notNull": true,
-          "defaultValue": false
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "updatedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_secret_sources_user",
-          "columns": ["userId"]
-        }
-      ],
-      "adopts": "secret_sources"
-    }
-  }
-}
diff --git a/plugins/secret-sources/migrations/sqlite/0001_adopt_secret_sources.sql b/plugins/secret-sources/migrations/sqlite/0001_adopt_secret_sources.sql
deleted file mode 100644
index ddb2d0105..000000000
--- a/plugins/secret-sources/migrations/sqlite/0001_adopt_secret_sources.sql
+++ /dev/null
@@ -1,16 +0,0 @@
--- secret-sources 0001: adopt_secret_sources
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "secret_sources" (
-  "id" text PRIMARY KEY NOT NULL,
-  "user_id" text NOT NULL,
-  "name" text NOT NULL,
-  "kind" text NOT NULL DEFAULT 'onepassword-connect',
-  "base_url" text NOT NULL,
-  "shared" integer NOT NULL DEFAULT 0,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_secret_sources_user" ON "secret_sources" ("user_id");
-ALTER TABLE "secret_sources" RENAME TO "p_secret_sources_sources";
diff --git a/plugins/secret-sources/package.json b/plugins/secret-sources/package.json
deleted file mode 100644
index 11dfff5d7..000000000
--- a/plugins/secret-sources/package.json
+++ /dev/null
@@ -1,33 +0,0 @@
-{
-  "name": "@termix-plugin/secret-sources",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "lucide-react": "^1.33.0"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "react": "^19.2.8",
-    "sonner": "^2.0.8"
-  }
-}
diff --git a/plugins/secret-sources/src/backend/egress.ts b/plugins/secret-sources/src/backend/egress.ts
deleted file mode 100644
index 58fae605e..000000000
--- a/plugins/secret-sources/src/backend/egress.ts
+++ /dev/null
@@ -1,28 +0,0 @@
-/**
- * Where a secret source (a self-hosted 1Password Connect server) may be
- * reached. Every request goes through ctx.fetch, which refuses private and
- * loopback addresses unless the exact host is listed here, admin-only and
- * install-wide.
- */
-
-export const DEFAULT_PRIVATE_ALLOWLIST = [
-  "localhost",
-  "127.0.0.1",
-  "::1",
-  "host.docker.internal",
-];
-
-/** The admin setting is one host per line. A line that is not a bare host is ignored. */
-const HOST_PATTERN = /^[a-z0-9._:-]+$/;
-
-export function parseAllowlist(raw: unknown): string[] {
-  if (typeof raw !== "string") return [...DEFAULT_PRIVATE_ALLOWLIST];
-  const hosts: string[] = [];
-  for (const line of raw.split(/[\r\n,]+/)) {
-    const host = line.trim().toLowerCase();
-    if (host && HOST_PATTERN.test(host) && !hosts.includes(host)) {
-      hosts.push(host);
-    }
-  }
-  return hosts;
-}
diff --git a/plugins/secret-sources/src/backend/index.ts b/plugins/secret-sources/src/backend/index.ts
deleted file mode 100644
index fd8d388a1..000000000
--- a/plugins/secret-sources/src/backend/index.ts
+++ /dev/null
@@ -1,27 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { sources } from "./tables.js";
-import { createSecretSourceRepository } from "./repository.js";
-import { createTokenStore } from "./token-store.js";
-import { registerSecretSourceRoutes } from "./routes.js";
-import { registerOnePasswordResolver } from "./resolver.js";
-
-export async function activate(ctx: PluginContext) {
-  const table = await ctx.db.define(sources);
-  const repository = createSecretSourceRepository(ctx.db, table);
-  const tokenStore = createTokenStore(ctx);
-
-  registerSecretSourceRoutes(
-    ctx.http.router<Router>(),
-    ctx,
-    repository,
-    tokenStore,
-  );
-  registerOnePasswordResolver(ctx, repository, tokenStore);
-
-  ctx.log.info("Secret sources routes mounted at /plugin-api/secret-sources");
-}
-
-export async function deactivate() {
-  // Everything above was registered through ctx and is disposed by core.
-}
diff --git a/plugins/secret-sources/src/backend/onepassword-connect.ts b/plugins/secret-sources/src/backend/onepassword-connect.ts
deleted file mode 100644
index 977905eb8..000000000
--- a/plugins/secret-sources/src/backend/onepassword-connect.ts
+++ /dev/null
@@ -1,136 +0,0 @@
-import type { PluginFetch } from "@termix/plugin-sdk/backend";
-
-/**
- * The slice of the 1Password Connect REST API needed to resolve a secret
- * reference: find the vault, find the item, read one field.
- * https://developer.1password.com/docs/connect/api-reference
- */
-
-export interface SecretReference {
-  vault: string;
-  item: string;
-  field: string;
-}
-
-const FETCH_TIMEOUT_MS = 10_000;
-
-/** op://<vault>/<item>/<field>  (a trailing ?query, as in ?ssh-format=openssh, is ignored) */
-export function parseSecretReference(raw: string): SecretReference | null {
-  const match = /^op:\/\/([^/]+)\/([^/]+)\/([^/?]+)(?:\?.*)?$/.exec(raw.trim());
-  if (!match) return null;
-  const [, vault, item, field] = match.map((part) => decodeURIComponent(part));
-  return { vault, item, field };
-}
-
-export interface ConnectSource {
-  baseUrl: string;
-  token: string;
-  allowedPrivateHosts: readonly string[];
-}
-
-async function connectGet<T>(
-  fetch: PluginFetch,
-  source: ConnectSource,
-  path: string,
-): Promise<T> {
-  const base = source.baseUrl.replace(/\/+$/, "");
-  const response = await fetch(`${base}${path}`, {
-    method: "GET",
-    headers: { Authorization: `Bearer ${source.token}` },
-    timeoutMs: FETCH_TIMEOUT_MS,
-    allowPrivateHosts: source.allowedPrivateHosts,
-  });
-  if (!response.ok) {
-    throw new Error(
-      `1Password Connect ${path} failed: HTTP ${response.status}`,
-    );
-  }
-  return (await response.json()) as T;
-}
-
-function eqFilter(value: string): string {
-  return encodeURIComponent(`title eq "${value.replace(/"/g, '\\"')}"`);
-}
-
-interface ConnectVault {
-  id: string;
-  name: string;
-}
-interface ConnectItemSummary {
-  id: string;
-  title: string;
-}
-interface ConnectField {
-  id: string;
-  label?: string;
-  purpose?: string;
-  type?: string;
-  value?: string;
-}
-
-/** Reachability + token validity: the vault list needs a valid token. */
-export async function testConnectSource(
-  fetch: PluginFetch,
-  source: ConnectSource,
-): Promise<number> {
-  const vaults = await connectGet<ConnectVault[]>(fetch, source, "/v1/vaults");
-  return vaults.length;
-}
-
-const byIdOrName =
-  (name: string) =>
-  (candidate: { id: string; name?: string; title?: string }) =>
-    candidate.id === name ||
-    (candidate.name ?? candidate.title ?? "").toLowerCase() ===
-      name.toLowerCase();
-
-export async function resolveConnectReference(
-  fetch: PluginFetch,
-  source: ConnectSource,
-  ref: SecretReference,
-): Promise<string> {
-  const vaults = await connectGet<ConnectVault[]>(
-    fetch,
-    source,
-    `/v1/vaults?filter=${eqFilter(ref.vault)}`,
-  );
-  const vault =
-    vaults.find(byIdOrName(ref.vault)) ??
-    (await connectGet<ConnectVault[]>(fetch, source, "/v1/vaults")).find(
-      byIdOrName(ref.vault),
-    );
-  if (!vault) throw new Error(`1Password vault "${ref.vault}" not found`);
-
-  const items = await connectGet<ConnectItemSummary[]>(
-    fetch,
-    source,
-    `/v1/vaults/${vault.id}/items?filter=${eqFilter(ref.item)}`,
-  );
-  const summary =
-    items.find(byIdOrName(ref.item)) ??
-    (ref.item.length >= 26 ? { id: ref.item, title: ref.item } : undefined);
-  if (!summary) {
-    throw new Error(`1Password item "${ref.item}" not found in "${ref.vault}"`);
-  }
-
-  const item = await connectGet<{ fields?: ConnectField[] }>(
-    fetch,
-    source,
-    `/v1/vaults/${vault.id}/items/${summary.id}`,
-  );
-  const wanted = ref.field.toLowerCase();
-  const field = (item.fields ?? []).find(
-    (f) =>
-      f.id === ref.field ||
-      f.label?.toLowerCase() === wanted ||
-      f.purpose?.toLowerCase() === wanted ||
-      (wanted === "private key" && f.id === "private_key") ||
-      (wanted === "private_key" && f.label?.toLowerCase() === "private key"),
-  );
-  if (!field || field.value === undefined) {
-    throw new Error(
-      `1Password field "${ref.field}" not found on "${ref.item}"`,
-    );
-  }
-  return field.value;
-}
diff --git a/plugins/secret-sources/src/backend/repository.ts b/plugins/secret-sources/src/backend/repository.ts
deleted file mode 100644
index ebfb067ec..000000000
--- a/plugins/secret-sources/src/backend/repository.ts
+++ /dev/null
@@ -1,116 +0,0 @@
-import { eq, or } from "drizzle-orm";
-import type { PluginDatabase } from "@termix/plugin-sdk/backend";
-
-export type SecretSourceKind = "onepassword-connect";
-
-export interface SecretSourceRecord {
-  id: string;
-  userId: string;
-  name: string;
-  kind: SecretSourceKind;
-  baseUrl: string;
-  shared: boolean;
-  createdAt: string;
-  updatedAt: string;
-}
-
-export interface SecretSourceCreateInput {
-  id: string;
-  userId: string;
-  name: string;
-  kind: SecretSourceKind;
-  baseUrl: string;
-  shared: boolean;
-}
-
-export interface SecretSourceUpdateInput {
-  name?: string;
-  baseUrl?: string;
-  shared?: boolean;
-}
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// The table comes from ctx.db.define, which the SDK hands back untyped, and
-// the drizzle handle is the server's own. Typed at this module's edge instead.
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export type SecretSourceRepository = ReturnType<
-  typeof createSecretSourceRepository
->;
-
-/**
- * Per-user secret source storage. The token is never in this table - it
- * lives in ctx.secrets under "source:<id>". A row with an id the caller
- * chose is written without RETURNING so it runs the same on all three
- * engines.
- */
-export function createSecretSourceRepository(db: PluginDatabase, table: Table) {
-  const client = () => db.client<Drizzle>();
-
-  async function findById(id: string): Promise<SecretSourceRecord | null> {
-    const drizzle = await client();
-    const rows = await drizzle
-      .select()
-      .from(table)
-      .where(eq(table.id, id))
-      .limit(1);
-    return (rows[0] as SecretSourceRecord) ?? null;
-  }
-
-  return {
-    findById,
-
-    async listVisibleToUser(userId: string): Promise<SecretSourceRecord[]> {
-      const drizzle = await client();
-      return drizzle
-        .select()
-        .from(table)
-        .where(or(eq(table.userId, userId), eq(table.shared, true)));
-    },
-
-    async create(
-      input: SecretSourceCreateInput,
-      now = new Date().toISOString(),
-    ): Promise<SecretSourceRecord> {
-      const drizzle = await client();
-      await drizzle.insert(table).values({
-        id: input.id,
-        userId: input.userId,
-        name: input.name,
-        kind: input.kind,
-        baseUrl: input.baseUrl,
-        shared: input.shared,
-        createdAt: now,
-        updatedAt: now,
-      });
-      await db.persist();
-      return (await findById(input.id)) as SecretSourceRecord;
-    },
-
-    async update(
-      row: SecretSourceRecord,
-      input: SecretSourceUpdateInput,
-      now = new Date().toISOString(),
-    ): Promise<void> {
-      const drizzle = await client();
-      await drizzle
-        .update(table)
-        .set({
-          ...(input.name !== undefined ? { name: input.name } : {}),
-          ...(input.baseUrl !== undefined ? { baseUrl: input.baseUrl } : {}),
-          ...(input.shared !== undefined ? { shared: input.shared } : {}),
-          updatedAt: now,
-        })
-        .where(eq(table.id, row.id));
-      await db.persist();
-    },
-
-    async deleteById(id: string): Promise<void> {
-      const drizzle = await client();
-      await drizzle.delete(table).where(eq(table.id, id));
-      await db.persist();
-    },
-  };
-}
diff --git a/plugins/secret-sources/src/backend/resolver.ts b/plugins/secret-sources/src/backend/resolver.ts
deleted file mode 100644
index a79f39013..000000000
--- a/plugins/secret-sources/src/backend/resolver.ts
+++ /dev/null
@@ -1,61 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { SecretSourceRepository } from "./repository.js";
-import type { TokenStore } from "./token-store.js";
-import { parseAllowlist } from "./egress.js";
-import {
-  parseSecretReference,
-  resolveConnectReference,
-} from "./onepassword-connect.js";
-
-/** The user's own source first, else a shared one. */
-async function pickSecretSource(
-  repository: SecretSourceRepository,
-  userId: string,
-) {
-  const sources = await repository.listVisibleToUser(userId);
-  return (
-    sources.find((source) => source.userId === userId) ?? sources[0] ?? null
-  );
-}
-
-/**
- * The "op" scheme resolver: turns "op://vault/item/field" into the actual
- * secret, using whichever source the acting user can see (their own first,
- * else a shared one).
- */
-export function registerOnePasswordResolver(
-  ctx: PluginContext,
-  repository: SecretSourceRepository,
-  tokenStore: TokenStore,
-): void {
-  ctx.credentials.registerSecretResolver("op", async (userId, reference) => {
-    const ref = parseSecretReference(reference);
-    if (!ref) throw new Error(`Invalid secret reference: ${reference}`);
-
-    const source = await pickSecretSource(repository, userId);
-    if (!source) {
-      throw new Error(
-        "This host uses a secret reference but no secret source is configured",
-      );
-    }
-
-    const token = await tokenStore.getForOwner(source.id, source.userId);
-    if (!token) {
-      throw new Error(
-        "The secret source owner's data is locked; they need to sign in first",
-      );
-    }
-
-    return resolveConnectReference(
-      ctx.fetch,
-      {
-        baseUrl: source.baseUrl,
-        token,
-        allowedPrivateHosts: parseAllowlist(
-          await ctx.settings.get<string>("privateEndpoints"),
-        ),
-      },
-      ref,
-    );
-  });
-}
diff --git a/plugins/secret-sources/src/backend/routes.ts b/plugins/secret-sources/src/backend/routes.ts
deleted file mode 100644
index a804c79de..000000000
--- a/plugins/secret-sources/src/backend/routes.ts
+++ /dev/null
@@ -1,270 +0,0 @@
-import { randomUUID } from "node:crypto";
-import type { Request, Response, Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { SecretSourceRepository } from "./repository.js";
-import type { TokenStore } from "./token-store.js";
-import { testConnectSource } from "./onepassword-connect.js";
-import { parseAllowlist } from "./egress.js";
-
-const KINDS = ["onepassword-connect"] as const;
-
-function isNonEmptyString(value: unknown): value is string {
-  return typeof value === "string" && value.trim().length > 0;
-}
-
-function validBaseUrl(raw: unknown): string | null {
-  if (!isNonEmptyString(raw)) return null;
-  try {
-    const url = new URL(raw.trim());
-    if (!["http:", "https:"].includes(url.protocol)) return null;
-    return url.toString().replace(/\/+$/, "");
-  } catch {
-    return null;
-  }
-}
-
-function errorMessage(error: unknown): string {
-  return error instanceof Error ? error.message : String(error);
-}
-
-export function registerSecretSourceRoutes(
-  router: Router,
-  ctx: PluginContext,
-  repository: SecretSourceRepository,
-  tokenStore: TokenStore,
-): void {
-  const isAdmin = () => ctx.rbac.has("admin.plugins.manage");
-  // Secret sources are credentials, so they follow core's credential
-  // permissions. ctx.rbac.require only takes this plugin's own names.
-  const requireCredentials =
-    (action: "view" | "create" | "edit" | "delete") =>
-    (req: Request, res: Response, next: () => void) => {
-      void ctx.rbac.has(`credentials.${action}`).then((allowed) => {
-        if (allowed) next();
-        else {
-          res.status(403).json({
-            error: "Insufficient permissions",
-            required: `credentials.${action}`,
-          });
-        }
-      });
-    };
-  const allowedPrivateHosts = async () =>
-    parseAllowlist(await ctx.settings.get<string>("privateEndpoints"));
-
-  /**
-   * @openapi
-   * /plugin-api/secret-sources:
-   *   get:
-   *     summary: List secret sources visible to the caller (own + shared)
-   *     tags:
-   *       - Secret Sources
-   */
-  router.get(
-    "/",
-    requireCredentials("view") as never,
-    async (req: Request, res: Response) => {
-      const userId = ctx.currentActor()!;
-      try {
-        const rows = await repository.listVisibleToUser(userId);
-        res.json({
-          sources: rows.map((row) => ({
-            ...row,
-            owned: row.userId === userId,
-          })),
-        });
-      } catch (error) {
-        ctx.log.error("Failed to list secret sources", error);
-        res.status(500).json({ error: "Failed to list secret sources" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/secret-sources:
-   *   post:
-   *     summary: Create a secret source (1Password Connect)
-   *     description: Sharing a source with every user requires admin. The token is encrypted with the owner's data key.
-   *     tags:
-   *       - Secret Sources
-   */
-  router.post(
-    "/",
-    requireCredentials("create") as never,
-    async (req: Request, res: Response) => {
-      const userId = ctx.currentActor()!;
-      const {
-        name,
-        kind = "onepassword-connect",
-        baseUrl,
-        token,
-        shared,
-      } = req.body ?? {};
-      const url = validBaseUrl(baseUrl);
-      if (!isNonEmptyString(name) || !url || !isNonEmptyString(token)) {
-        return res.status(400).json({
-          error: "name, a valid http(s) baseUrl and token are required",
-        });
-      }
-      if (!(KINDS as readonly string[]).includes(kind)) {
-        return res
-          .status(400)
-          .json({ error: "Unsupported secret source kind" });
-      }
-      if (shared === true && !(await isAdmin())) {
-        return res
-          .status(403)
-          .json({ error: "Only admins can share a secret source" });
-      }
-      try {
-        const id = randomUUID();
-        const created = await repository.create({
-          id,
-          userId,
-          name: name.trim(),
-          kind,
-          baseUrl: url,
-          shared: shared === true,
-        });
-        await tokenStore.set(id, token.trim());
-        await ctx.audit.record({
-          action: "secret_source_create",
-          resourceType: "secret_source",
-          resourceId: created.id,
-          resourceName: created.name,
-          success: true,
-        });
-        res.json({ source: { ...created, owned: true } });
-      } catch (error) {
-        ctx.log.error("Failed to create secret source", error);
-        res.status(500).json({ error: "Failed to create secret source" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/secret-sources/{id}:
-   *   put:
-   *     summary: Update a secret source (owner only; omit token to keep it)
-   *     tags:
-   *       - Secret Sources
-   */
-  router.put(
-    "/:id",
-    requireCredentials("edit") as never,
-    async (req: Request, res: Response) => {
-      const userId = ctx.currentActor()!;
-      const { name, baseUrl, token, shared } = req.body ?? {};
-      try {
-        const source = await repository.findById(String(req.params.id));
-        if (!source) {
-          return res.status(404).json({ error: "Secret source not found" });
-        }
-        if (source.userId !== userId) {
-          return res
-            .status(403)
-            .json({ error: "Only the owner can change this source" });
-        }
-        const url = baseUrl === undefined ? undefined : validBaseUrl(baseUrl);
-        if (baseUrl !== undefined && !url) {
-          return res.status(400).json({ error: "baseUrl must be http(s)" });
-        }
-        if (shared === true && !source.shared && !(await isAdmin())) {
-          return res
-            .status(403)
-            .json({ error: "Only admins can share a secret source" });
-        }
-        await repository.update(source, {
-          ...(isNonEmptyString(name) ? { name: name.trim() } : {}),
-          ...(url ? { baseUrl: url } : {}),
-          ...(typeof shared === "boolean" ? { shared } : {}),
-        });
-        if (isNonEmptyString(token)) {
-          await tokenStore.set(source.id, token.trim());
-        }
-        res.json({ success: true });
-      } catch (error) {
-        ctx.log.error("Failed to update secret source", error);
-        res.status(500).json({ error: "Failed to update secret source" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/secret-sources/{id}:
-   *   delete:
-   *     summary: Delete a secret source (owner only)
-   *     tags:
-   *       - Secret Sources
-   */
-  router.delete(
-    "/:id",
-    requireCredentials("delete") as never,
-    async (req: Request, res: Response) => {
-      const userId = ctx.currentActor()!;
-      try {
-        const source = await repository.findById(String(req.params.id));
-        if (!source) {
-          return res.status(404).json({ error: "Secret source not found" });
-        }
-        if (source.userId !== userId) {
-          return res
-            .status(403)
-            .json({ error: "Only the owner can change this source" });
-        }
-        await repository.deleteById(source.id);
-        await tokenStore.clear(source.id);
-        await ctx.audit.record({
-          action: "secret_source_delete",
-          resourceType: "secret_source",
-          resourceId: source.id,
-          resourceName: source.name,
-          success: true,
-        });
-        res.json({ success: true });
-      } catch (error) {
-        ctx.log.error("Failed to delete secret source", error);
-        res.status(500).json({ error: "Failed to delete secret source" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/secret-sources/{id}/test:
-   *   post:
-   *     summary: Check that the source is reachable and the token is accepted
-   *     tags:
-   *       - Secret Sources
-   */
-  router.post(
-    "/:id/test",
-    requireCredentials("view") as never,
-    async (req: Request, res: Response) => {
-      const userId = ctx.currentActor()!;
-      try {
-        const source = await repository.findById(String(req.params.id));
-        if (!source || (source.userId !== userId && !source.shared)) {
-          return res.status(404).json({ error: "Secret source not found" });
-        }
-        const token = await tokenStore.getForOwner(source.id, source.userId);
-        if (!token) {
-          return res
-            .status(200)
-            .json({ ok: false, error: "No token stored for this source" });
-        }
-        const vaults = await testConnectSource(ctx.fetch, {
-          baseUrl: source.baseUrl,
-          token,
-          allowedPrivateHosts: await allowedPrivateHosts(),
-        });
-        res.json({ ok: true, vaults });
-      } catch (error) {
-        res.status(200).json({ ok: false, error: errorMessage(error) });
-      }
-    },
-  );
-}
diff --git a/plugins/secret-sources/src/backend/tables.ts b/plugins/secret-sources/src/backend/tables.ts
deleted file mode 100644
index 4b5fb2d3a..000000000
--- a/plugins/secret-sources/src/backend/tables.ts
+++ /dev/null
@@ -1,42 +0,0 @@
-import {
-  adoptLegacyTable,
-  boolean,
-  defineTable,
-  refUser,
-  text,
-  timestamp,
-  varchar,
-} from "@termix/plugin-sdk/db";
-
-/**
- * Adopted from core's secret_sources, so column and index names are the
- * legacy ones and the rename carries every row across.
- *
- * The access token is not a column here: it lives in ctx.secrets under
- * "source:<id>", the same move the ai plugin made for provider API keys. A
- * 2.8 database still has a token column, which the boot migration empties
- * after moving the value.
- */
-export const sources = adoptLegacyTable(
-  "secret_sources",
-  defineTable(
-    "sources",
-    {
-      id: varchar().primaryKey(),
-      userId: refUser(),
-      name: text().notNull(),
-      // "onepassword-connect" for now; the reference syntax is per kind.
-      kind: text().notNull().default("onepassword-connect"),
-      baseUrl: text().notNull(),
-      // Visible to every user; the token still decrypts with the owner's key.
-      shared: boolean().notNull().default(false),
-      createdAt: timestamp().notNull().defaultNow(),
-      updatedAt: timestamp().notNull().defaultNow(),
-    },
-    {
-      indexes: [{ name: "idx_secret_sources_user", columns: ["userId"] }],
-    },
-  ),
-);
-
-export const tables = [sources];
diff --git a/plugins/secret-sources/src/backend/token-store.ts b/plugins/secret-sources/src/backend/token-store.ts
deleted file mode 100644
index 4d04b8371..000000000
--- a/plugins/secret-sources/src/backend/token-store.ts
+++ /dev/null
@@ -1,37 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-
-/**
- * The access token for one source, kept out of the sources table and in
- * ctx.secrets instead, the same move the ai plugin made for provider API
- * keys: encrypted with the installation key rather than the owner's data
- * key, so it is readable whenever the plugin runs rather than only while the
- * owner is signed in. A shared source's token is still only ever handed to
- * its owner's part of the resolve, so a read for any other acting user runs
- * as the owner through ctx.asUser.
- */
-
-function tokenKey(sourceId: string): string {
-  return `source:${sourceId}`;
-}
-
-export function createTokenStore(ctx: PluginContext) {
-  return {
-    async set(sourceId: string, token: string): Promise<void> {
-      await ctx.secrets.set(tokenKey(sourceId), token);
-    },
-
-    async clear(sourceId: string): Promise<void> {
-      await ctx.secrets.delete(tokenKey(sourceId));
-    },
-
-    /** Reads the token as the source's owner, whoever is currently acting. */
-    async getForOwner(
-      sourceId: string,
-      ownerId: string,
-    ): Promise<string | null> {
-      return ctx.asUser(ownerId, () => ctx.secrets.get(tokenKey(sourceId)));
-    },
-  };
-}
-
-export type TokenStore = ReturnType<typeof createTokenStore>;
diff --git a/plugins/secret-sources/src/frontend/SecretReferenceHint.tsx b/plugins/secret-sources/src/frontend/SecretReferenceHint.tsx
deleted file mode 100644
index 66a45b914..000000000
--- a/plugins/secret-sources/src/frontend/SecretReferenceHint.tsx
+++ /dev/null
@@ -1,18 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-/** One line under a secret field: references are allowed, here is where to set them up. */
-export function SecretReferenceHint({ onManage }: { onManage: () => void }) {
-  const { t } = useTranslation();
-  return (
-    <p className="text-[10px] text-muted-foreground">
-      {t("hint")}{" "}
-      <button
-        type="button"
-        className="text-accent-brand hover:underline"
-        onClick={onManage}
-      >
-        {t("manage")}
-      </button>
-    </p>
-  );
-}
diff --git a/plugins/secret-sources/src/frontend/SecretSourceManager.tsx b/plugins/secret-sources/src/frontend/SecretSourceManager.tsx
deleted file mode 100644
index cc0542dfe..000000000
--- a/plugins/secret-sources/src/frontend/SecretSourceManager.tsx
+++ /dev/null
@@ -1,277 +0,0 @@
-import { useCallback, useEffect, useMemo, useState } from "react";
-import { KeyRound, Pencil, Plus, Trash2, X } from "lucide-react";
-import { toast } from "sonner";
-import { Button, Input, PasswordInput } from "@termix/plugin-sdk/ui";
-import { usePluginApi, useTranslation } from "@termix/plugin-sdk/frontend";
-import {
-  createSecretSourcesApi,
-  type SecretSource,
-} from "./secret-sources-api";
-
-function errorMessage(error: unknown): string {
-  if (error && typeof error === "object" && "message" in error) {
-    return String((error as { message?: unknown }).message ?? "");
-  }
-  return String(error);
-}
-
-type FormState = {
-  id?: string;
-  name: string;
-  baseUrl: string;
-  token: string;
-  shared: boolean;
-};
-
-const emptyForm: FormState = {
-  name: "",
-  baseUrl: "",
-  token: "",
-  shared: false,
-};
-
-export function SecretSourceManager({ onClose }: { onClose: () => void }) {
-  const { t } = useTranslation();
-  const pluginApi = usePluginApi();
-  const api = useMemo(() => createSecretSourcesApi(pluginApi), [pluginApi]);
-  const [sources, setSources] = useState<SecretSource[]>([]);
-  const [form, setForm] = useState<FormState | null>(null);
-  const [saving, setSaving] = useState(false);
-  const [testing, setTesting] = useState<string | null>(null);
-
-  const reload = useCallback(async () => {
-    try {
-      setSources(await api.list());
-    } catch (e) {
-      toast.error(errorMessage(e));
-    }
-  }, [api]);
-
-  useEffect(() => {
-    void reload();
-  }, [reload]);
-
-  const setField = <K extends keyof FormState>(key: K, value: FormState[K]) =>
-    setForm((prev) => (prev ? { ...prev, [key]: value } : prev));
-
-  const handleSave = async () => {
-    if (!form) return;
-    if (
-      !form.name.trim() ||
-      !form.baseUrl.trim() ||
-      (!form.id && !form.token)
-    ) {
-      toast.error(t("required"));
-      return;
-    }
-    setSaving(true);
-    try {
-      if (form.id) {
-        await api.update(form.id, {
-          name: form.name,
-          baseUrl: form.baseUrl,
-          shared: form.shared,
-          ...(form.token ? { token: form.token } : {}),
-        });
-      } else {
-        await api.create({
-          name: form.name,
-          baseUrl: form.baseUrl,
-          token: form.token,
-          shared: form.shared,
-        });
-      }
-      toast.success(t("saved"));
-      setForm(null);
-      await reload();
-    } catch (e) {
-      toast.error(errorMessage(e));
-    } finally {
-      setSaving(false);
-    }
-  };
-
-  const handleDelete = async (source: SecretSource) => {
-    try {
-      await api.remove(source.id);
-      toast.success(t("deleted"));
-      await reload();
-    } catch (e) {
-      toast.error(errorMessage(e));
-    }
-  };
-
-  const handleTest = async (source: SecretSource) => {
-    setTesting(source.id);
-    try {
-      const result = await api.test(source.id);
-      if (result.ok) {
-        toast.success(t("testOk", { count: result.vaults ?? 0 }));
-      } else {
-        toast.error(result.error ?? t("testFailed"));
-      }
-    } catch (e) {
-      toast.error(errorMessage(e));
-    } finally {
-      setTesting(null);
-    }
-  };
-
-  return (
-    <div className="flex flex-col gap-3 col-span-2 border border-border bg-muted/20 p-3">
-      <div className="flex items-center justify-between">
-        <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-          {t("title")}
-        </span>
-        <button
-          type="button"
-          onClick={onClose}
-          className="text-muted-foreground hover:text-foreground"
-        >
-          <X className="size-3.5" />
-        </button>
-      </div>
-      <p className="text-[10px] text-muted-foreground">{t("description")}</p>
-
-      {!form && (
-        <>
-          {sources.map((source) => (
-            <div
-              key={source.id}
-              className="flex items-center gap-2 border border-border bg-background px-2 py-1.5 text-xs"
-            >
-              <KeyRound className="size-3.5 text-muted-foreground shrink-0" />
-              <div className="flex-1 min-w-0">
-                <div className="truncate">
-                  {source.name}
-                  {source.shared && (
-                    <span className="ml-1 text-[9px] uppercase text-muted-foreground">
-                      {t("shared")}
-                    </span>
-                  )}
-                </div>
-                <div className="truncate text-[10px] text-muted-foreground">
-                  {source.baseUrl}
-                </div>
-              </div>
-              <Button
-                type="button"
-                variant="ghost"
-                size="sm"
-                className="h-6 text-[10px]"
-                disabled={testing === source.id}
-                onClick={() => void handleTest(source)}
-              >
-                {t("test")}
-              </Button>
-              {source.owned && (
-                <>
-                  <button
-                    type="button"
-                    className="text-muted-foreground hover:text-foreground"
-                    onClick={() =>
-                      setForm({
-                        id: source.id,
-                        name: source.name,
-                        baseUrl: source.baseUrl,
-                        token: "",
-                        shared: source.shared,
-                      })
-                    }
-                  >
-                    <Pencil className="size-3.5" />
-                  </button>
-                  <button
-                    type="button"
-                    className="text-muted-foreground hover:text-destructive"
-                    onClick={() => void handleDelete(source)}
-                  >
-                    <Trash2 className="size-3.5" />
-                  </button>
-                </>
-              )}
-            </div>
-          ))}
-          <Button
-            type="button"
-            variant="outline"
-            size="sm"
-            className="self-start border-accent-brand/40 text-accent-brand"
-            onClick={() => setForm(emptyForm)}
-          >
-            <Plus className="size-3 mr-1" /> {t("new")}
-          </Button>
-        </>
-      )}
-
-      {form && (
-        <div className="flex flex-col gap-2">
-          <div className="grid grid-cols-1 md:grid-cols-2 gap-2">
-            <div className="flex flex-col gap-1">
-              <label className="text-[9px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("nameLabel")}
-              </label>
-              <Input
-                className="h-8 text-xs"
-                placeholder="Team 1Password"
-                value={form.name}
-                onChange={(e) => setField("name", e.target.value)}
-              />
-            </div>
-            <div className="flex flex-col gap-1">
-              <label className="text-[9px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("urlLabel")}
-              </label>
-              <Input
-                className="h-8 text-xs"
-                placeholder="https://connect.internal:8080"
-                value={form.baseUrl}
-                onChange={(e) => setField("baseUrl", e.target.value)}
-              />
-            </div>
-          </div>
-          <div className="flex flex-col gap-1">
-            <label className="text-[9px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("tokenLabel")}
-            </label>
-            <PasswordInput
-              className="h-8 text-xs pr-8"
-              placeholder={form.id ? t("tokenKeep") : "eyJhbGciOi..."}
-              value={form.token}
-              onChange={(e) => setField("token", e.target.value)}
-            />
-          </div>
-          <label className="flex items-center gap-2 text-xs text-foreground">
-            <input
-              type="checkbox"
-              checked={form.shared}
-              onChange={(e) => setField("shared", e.target.checked)}
-            />
-            {t("sharedLabel")}
-          </label>
-          <div className="flex justify-end gap-2">
-            <Button
-              type="button"
-              variant="ghost"
-              size="sm"
-              onClick={() => setForm(null)}
-              disabled={saving}
-            >
-              {t("common.cancel")}
-            </Button>
-            <Button
-              type="button"
-              variant="outline"
-              size="sm"
-              className="border-accent-brand/40 text-accent-brand"
-              onClick={() => void handleSave()}
-              disabled={saving}
-            >
-              {form.id ? t("common.save") : t("common.create")}
-            </Button>
-          </div>
-        </div>
-      )}
-    </div>
-  );
-}
diff --git a/plugins/secret-sources/src/frontend/index.tsx b/plugins/secret-sources/src/frontend/index.tsx
deleted file mode 100644
index c22106bff..000000000
--- a/plugins/secret-sources/src/frontend/index.tsx
+++ /dev/null
@@ -1,8 +0,0 @@
-import type { TermixApp } from "@termix/plugin-sdk/frontend";
-import { SecretSourceManager } from "./SecretSourceManager";
-import { SecretReferenceHint } from "./SecretReferenceHint";
-
-export function activate(app: TermixApp): void {
-  app.registerComponent("credentials.secretHint", SecretReferenceHint);
-  app.registerComponent("credentials.secretManager", SecretSourceManager);
-}
diff --git a/plugins/secret-sources/src/frontend/secret-sources-api.ts b/plugins/secret-sources/src/frontend/secret-sources-api.ts
deleted file mode 100644
index 315d2460b..000000000
--- a/plugins/secret-sources/src/frontend/secret-sources-api.ts
+++ /dev/null
@@ -1,51 +0,0 @@
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-
-export type SecretSourceKind = "onepassword-connect";
-
-export interface SecretSource {
-  id: string;
-  name: string;
-  kind: SecretSourceKind;
-  baseUrl: string;
-  shared: boolean;
-  owned: boolean;
-  createdAt: string;
-  updatedAt: string;
-}
-
-export interface SecretSourceInput {
-  name: string;
-  baseUrl: string;
-  token: string;
-  shared?: boolean;
-}
-
-export interface SecretSourceUpdateInput {
-  name?: string;
-  baseUrl?: string;
-  token?: string;
-  shared?: boolean;
-}
-
-/** The secret-sources routes, through the plugin's own client. */
-export function createSecretSourcesApi(api: PluginApiClient) {
-  const data = async <T>(request: Promise<{ data: T }>) => (await request).data;
-
-  return {
-    list: () =>
-      data(api.get<{ sources: SecretSource[] }>("/")).then((r) => r.sources),
-    create: (body: SecretSourceInput) =>
-      data(api.post<{ source: SecretSource }>("/", body)).then((r) => r.source),
-    update: (id: string, body: SecretSourceUpdateInput) =>
-      data(api.put<{ success: boolean }>(`/${id}`, body)),
-    remove: (id: string) => data(api.delete<{ success: boolean }>(`/${id}`)),
-    test: (id: string) =>
-      data(
-        api.post<{ ok: boolean; vaults?: number; error?: string }>(
-          `/${id}/test`,
-        ),
-      ),
-  };
-}
-
-export type SecretSourcesApi = ReturnType<typeof createSecretSourcesApi>;
diff --git a/plugins/secret-sources/tests/backend/helpers.ts b/plugins/secret-sources/tests/backend/helpers.ts
deleted file mode 100644
index 5f63f6922..000000000
--- a/plugins/secret-sources/tests/backend/helpers.ts
+++ /dev/null
@@ -1,103 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-export const manifest = manifestJson as unknown as PluginManifest;
-
-export const ALL_PERMISSIONS = [
-  "credentials.view",
-  "credentials.create",
-  "credentials.edit",
-  "credentials.delete",
-];
-
-export interface TestServer {
-  db: TestDb;
-  mock: MockPluginContext;
-  request: (
-    method: string,
-    path: string,
-    options?: { user?: string; body?: unknown },
-    // Route bodies vary per test; asserting on them is the point.
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any }>;
-  close: () => Promise<void>;
-}
-
-/**
- * The plugin activated against a real in-memory database, its router mounted
- * on an express app the way core mounts it: JSON parsed, the acting user set
- * from the request, everything else left to the plugin.
- */
-export async function startServer(
-  options: {
-    permissions?: string[];
-    users?: string[];
-    fetch?: (url: string, init?: unknown) => Promise<Response>;
-  } = {},
-): Promise<TestServer> {
-  const db = await createTestDb(pluginDir);
-  for (const user of options.users ?? ["user-1", "user-2"]) {
-    db.sqlite
-      .prepare("INSERT INTO users (id, username) VALUES (?, ?)")
-      .run(user, user);
-  }
-
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    permissions: options.permissions ?? ALL_PERMISSIONS,
-    fetch: options.fetch as never,
-  });
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") ?? undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    db,
-    mock,
-    async request(method, path, { user = "user-1", body: given } = {}) {
-      const body = method === "GET" ? undefined : given;
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        headers: {
-          "x-test-user": user,
-          ...(body !== undefined ? { "content-type": "application/json" } : {}),
-        },
-        body: body !== undefined ? JSON.stringify(body) : undefined,
-      });
-      const text = await response.text();
-      return { status: response.status, body: text ? JSON.parse(text) : null };
-    },
-    async close() {
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-      db.close();
-    },
-  };
-}
diff --git a/plugins/secret-sources/tests/backend/onepassword-connect.test.ts b/plugins/secret-sources/tests/backend/onepassword-connect.test.ts
deleted file mode 100644
index cb720efe9..000000000
--- a/plugins/secret-sources/tests/backend/onepassword-connect.test.ts
+++ /dev/null
@@ -1,117 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import {
-  parseSecretReference,
-  resolveConnectReference,
-  testConnectSource,
-} from "../../src/backend/onepassword-connect.js";
-import type { PluginFetch } from "@termix/plugin-sdk/backend";
-
-function jsonResponse(body: unknown, ok = true, status = 200): Response {
-  return {
-    ok,
-    status,
-    json: async () => body,
-  } as unknown as Response;
-}
-
-describe("1Password secret references", () => {
-  it("parses op://vault/item/field, ignoring a query suffix", () => {
-    expect(parseSecretReference("op://Infra/prod-db/password")).toEqual({
-      vault: "Infra",
-      item: "prod-db",
-      field: "password",
-    });
-    expect(
-      parseSecretReference(
-        "op://Infra/deploy key/private key?ssh-format=openssh",
-      ),
-    ).toEqual({ vault: "Infra", item: "deploy key", field: "private key" });
-    expect(parseSecretReference("op://Infra/only-two")).toBeNull();
-    expect(parseSecretReference("https://x")).toBeNull();
-  });
-});
-
-describe("testConnectSource", () => {
-  it("returns the vault count when the token is valid", async () => {
-    const fetch = vi.fn().mockResolvedValue(
-      jsonResponse([
-        { id: "v1", name: "Infra" },
-        { id: "v2", name: "Dev" },
-      ]),
-    ) as unknown as PluginFetch;
-
-    const count = await testConnectSource(fetch, {
-      baseUrl: "https://connect.internal",
-      token: "tok",
-      allowedPrivateHosts: ["connect.internal"],
-    });
-    expect(count).toBe(2);
-    expect(fetch).toHaveBeenCalledWith(
-      "https://connect.internal/v1/vaults",
-      expect.objectContaining({
-        headers: { Authorization: "Bearer tok" },
-        allowPrivateHosts: ["connect.internal"],
-      }),
-    );
-  });
-
-  it("throws when the server answers with a non-2xx status", async () => {
-    const fetch = vi
-      .fn()
-      .mockResolvedValue(
-        jsonResponse([], false, 401),
-      ) as unknown as PluginFetch;
-
-    await expect(
-      testConnectSource(fetch, {
-        baseUrl: "https://connect.internal",
-        token: "bad",
-        allowedPrivateHosts: [],
-      }),
-    ).rejects.toThrow(/HTTP 401/);
-  });
-});
-
-describe("resolveConnectReference", () => {
-  it("resolves a field by label across vault, item and field lookups", async () => {
-    const fetch = vi
-      .fn()
-      .mockResolvedValueOnce(jsonResponse([{ id: "vid", name: "Infra" }]))
-      .mockResolvedValueOnce(jsonResponse([{ id: "iid", title: "prod-db" }]))
-      .mockResolvedValueOnce(
-        jsonResponse({
-          fields: [{ id: "f1", label: "password", value: "s3cret" }],
-        }),
-      ) as unknown as PluginFetch;
-
-    const value = await resolveConnectReference(
-      fetch,
-      {
-        baseUrl: "https://connect.internal",
-        token: "tok",
-        allowedPrivateHosts: [],
-      },
-      { vault: "Infra", item: "prod-db", field: "password" },
-    );
-    expect(value).toBe("s3cret");
-  });
-
-  it("fails clearly when the vault is not found", async () => {
-    const fetch = vi
-      .fn()
-      .mockResolvedValueOnce(jsonResponse([]))
-      .mockResolvedValueOnce(jsonResponse([])) as unknown as PluginFetch;
-
-    await expect(
-      resolveConnectReference(
-        fetch,
-        {
-          baseUrl: "https://connect.internal",
-          token: "tok",
-          allowedPrivateHosts: [],
-        },
-        { vault: "Missing", item: "x", field: "y" },
-      ),
-    ).rejects.toThrow(/vault "Missing" not found/);
-  });
-});
diff --git a/plugins/secret-sources/tests/backend/resolver.test.ts b/plugins/secret-sources/tests/backend/resolver.test.ts
deleted file mode 100644
index 005dc21a6..000000000
--- a/plugins/secret-sources/tests/backend/resolver.test.ts
+++ /dev/null
@@ -1,93 +0,0 @@
-import { fileURLToPath } from "node:url";
-import { describe, expect, it, vi } from "vitest";
-import { createMockCtx, createTestDb } from "@termix/plugin-sdk/testing";
-import { createSecretSourceRepository } from "../../src/backend/repository.js";
-import { createTokenStore } from "../../src/backend/token-store.js";
-import { registerOnePasswordResolver } from "../../src/backend/resolver.js";
-import { sources } from "../../src/backend/tables.js";
-import manifestJson from "../../manifest.json";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-
-const manifest = manifestJson as unknown as PluginManifest;
-const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-
-function jsonResponse(body: unknown): Response {
-  return {
-    ok: true,
-    status: 200,
-    json: async () => body,
-  } as unknown as Response;
-}
-
-async function setUp(fetchMock: ReturnType<typeof vi.fn>) {
-  const db = await createTestDb(pluginDir);
-  db.sqlite
-    .prepare("INSERT INTO users (id, username) VALUES (?, ?)")
-    .run("owner-1", "owner-1");
-
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    db: db.database,
-    actor: "owner-1",
-    fetch: fetchMock as never,
-  });
-
-  const table = await mock.ctx.db.define(sources);
-  const repository = createSecretSourceRepository(mock.ctx.db, table as never);
-  const tokenStore = createTokenStore(mock.ctx);
-  registerOnePasswordResolver(mock.ctx, repository, tokenStore);
-
-  const resolve = mock.auth.secretResolvers.get("op");
-  if (!resolve) throw new Error("resolver was not registered");
-
-  return { db, repository, tokenStore, resolve };
-}
-
-describe("op:// secret resolver", () => {
-  it("registers under the declared scheme", async () => {
-    const { resolve } = await setUp(vi.fn());
-    expect(typeof resolve).toBe("function");
-  });
-
-  it("resolves through the owner's source", async () => {
-    const fetchMock = vi
-      .fn()
-      .mockResolvedValueOnce(jsonResponse([{ id: "vid", name: "Infra" }]))
-      .mockResolvedValueOnce(jsonResponse([{ id: "iid", title: "prod-db" }]))
-      .mockResolvedValueOnce(
-        jsonResponse({
-          fields: [{ id: "f1", label: "password", value: "s3cret" }],
-        }),
-      );
-    const { repository, tokenStore, resolve } = await setUp(fetchMock);
-
-    const source = await repository.create({
-      id: "src-1",
-      userId: "owner-1",
-      name: "n",
-      kind: "onepassword-connect",
-      baseUrl: "https://connect.internal",
-      shared: false,
-    });
-    await tokenStore.set(source.id, "tok");
-
-    const value = await resolve("owner-1", "op://Infra/prod-db/password");
-    expect(value).toBe("s3cret");
-  });
-
-  it("fails clearly with no configured source", async () => {
-    const { resolve } = await setUp(vi.fn());
-    await expect(
-      resolve("nobody", "op://Infra/prod-db/password"),
-    ).rejects.toThrow(/no secret source is configured/);
-  });
-
-  it("rejects a malformed reference", async () => {
-    const { resolve } = await setUp(vi.fn());
-    await expect(resolve("owner-1", "op://only-two")).rejects.toThrow(
-      /Invalid secret reference/,
-    );
-  });
-});
diff --git a/plugins/secret-sources/tests/backend/routes.test.ts b/plugins/secret-sources/tests/backend/routes.test.ts
deleted file mode 100644
index db3dc83ae..000000000
--- a/plugins/secret-sources/tests/backend/routes.test.ts
+++ /dev/null
@@ -1,177 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { startServer, type TestServer } from "./helpers.js";
-
-function jsonResponse(body: unknown, ok = true, status = 200): Response {
-  return { ok, status, json: async () => body } as unknown as Response;
-}
-
-let server: TestServer;
-
-afterEach(async () => {
-  await server?.close();
-});
-
-describe("secret-sources routes", () => {
-  beforeEach(async () => {
-    server = await startServer();
-  });
-
-  it("refuses a request without the matching core permission", async () => {
-    await server.close();
-    server = await startServer({ permissions: [] });
-    const res = await server.request("GET", "/");
-    expect(res.status).toBe(403);
-  });
-
-  it("creates, lists and hides the token from the owner's own list", async () => {
-    const create = await server.request("POST", "/", {
-      body: {
-        name: "Team 1Password",
-        baseUrl: "https://connect.internal",
-        token: "s3cret-token",
-      },
-    });
-    expect(create.status).toBe(200);
-    expect(create.body.source).toMatchObject({
-      name: "Team 1Password",
-      baseUrl: "https://connect.internal",
-      owned: true,
-      shared: false,
-    });
-    expect(create.body.source.token).toBeUndefined();
-
-    const list = await server.request("GET", "/");
-    expect(list.body.sources).toHaveLength(1);
-    expect(list.body.sources[0].owned).toBe(true);
-  });
-
-  it("rejects a create missing a required field", async () => {
-    const res = await server.request("POST", "/", {
-      body: { name: "", baseUrl: "https://x", token: "t" },
-    });
-    expect(res.status).toBe(400);
-  });
-
-  it("rejects an http(s)-only baseUrl", async () => {
-    const res = await server.request("POST", "/", {
-      body: { name: "n", baseUrl: "ftp://x", token: "t" },
-    });
-    expect(res.status).toBe(400);
-  });
-
-  it("refuses shared: true for a non-admin", async () => {
-    const res = await server.request("POST", "/", {
-      body: {
-        name: "n",
-        baseUrl: "https://connect.internal",
-        token: "t",
-        shared: true,
-      },
-    });
-    expect(res.status).toBe(403);
-  });
-
-  it("allows shared: true for an admin", async () => {
-    await server.close();
-    server = await startServer({
-      permissions: [
-        "credentials.view",
-        "credentials.create",
-        "credentials.edit",
-        "credentials.delete",
-        "admin.plugins.manage",
-      ],
-    });
-    const res = await server.request("POST", "/", {
-      body: {
-        name: "n",
-        baseUrl: "https://connect.internal",
-        token: "t",
-        shared: true,
-      },
-    });
-    expect(res.status).toBe(200);
-    expect(res.body.source.shared).toBe(true);
-  });
-
-  it("shows a shared source to another user, unowned", async () => {
-    await server.close();
-    server = await startServer({
-      permissions: [
-        "credentials.view",
-        "credentials.create",
-        "credentials.edit",
-        "credentials.delete",
-        "admin.plugins.manage",
-      ],
-    });
-    await server.request("POST", "/", {
-      body: { name: "n", baseUrl: "https://x", token: "t", shared: true },
-    });
-    const list = await server.request("GET", "/", { user: "user-2" });
-    expect(list.body.sources).toHaveLength(1);
-    expect(list.body.sources[0].owned).toBe(false);
-  });
-
-  it("refuses an update or delete from a non-owner", async () => {
-    const created = await server.request("POST", "/", {
-      body: { name: "n", baseUrl: "https://x", token: "t" },
-    });
-    const id = created.body.source.id;
-
-    const update = await server.request("PUT", `/${id}`, {
-      user: "user-2",
-      body: { name: "hijacked" },
-    });
-    expect(update.status).toBe(403);
-
-    const del = await server.request("DELETE", `/${id}`, { user: "user-2" });
-    expect(del.status).toBe(403);
-  });
-
-  it("updates without a token keeping the existing one, and deletes cleanly", async () => {
-    const created = await server.request("POST", "/", {
-      body: { name: "n", baseUrl: "https://x", token: "orig-token" },
-    });
-    const id = created.body.source.id;
-
-    const update = await server.request("PUT", `/${id}`, {
-      body: { name: "renamed" },
-    });
-    expect(update.status).toBe(200);
-
-    const test = await server.request("POST", `/${id}/test`);
-    // Reaches out through ctx.fetch, unstubbed here, so it fails softly.
-    expect(test.status).toBe(200);
-    expect(test.body.ok).toBe(false);
-
-    const del = await server.request("DELETE", `/${id}`);
-    expect(del.status).toBe(200);
-
-    const list = await server.request("GET", "/");
-    expect(list.body.sources).toHaveLength(0);
-  });
-
-  it("tests a source through ctx.fetch and reports the vault count", async () => {
-    await server.close();
-    const fetchMock = vi
-      .fn()
-      .mockResolvedValue(jsonResponse([{ id: "v1", name: "Infra" }]));
-    server = await startServer({ fetch: fetchMock });
-
-    const created = await server.request("POST", "/", {
-      body: { name: "n", baseUrl: "https://connect.internal", token: "tok" },
-    });
-    const id = created.body.source.id;
-
-    const test = await server.request("POST", `/${id}/test`);
-    expect(test.status).toBe(200);
-    expect(test.body).toEqual({ ok: true, vaults: 1 });
-    expect(fetchMock).toHaveBeenCalledWith(
-      "https://connect.internal/v1/vaults",
-      expect.objectContaining({
-        headers: { Authorization: "Bearer tok" },
-      }),
-    );
-  });
-});
diff --git a/plugins/secret-sources/tests/backend/token-store.test.ts b/plugins/secret-sources/tests/backend/token-store.test.ts
deleted file mode 100644
index ce934cf50..000000000
--- a/plugins/secret-sources/tests/backend/token-store.test.ts
+++ /dev/null
@@ -1,46 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { createMockCtx } from "@termix/plugin-sdk/testing";
-import { createTokenStore } from "../../src/backend/token-store.js";
-import manifestJson from "../../manifest.json";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-function mockCtx(actor?: string) {
-  return createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    actor,
-  });
-}
-
-describe("token store", () => {
-  it("stores and reads back a token for the acting user", async () => {
-    const { ctx } = mockCtx("owner-1");
-    const store = createTokenStore(ctx);
-
-    await store.set("src-1", "s3cret");
-    await expect(store.getForOwner("src-1", "owner-1")).resolves.toBe("s3cret");
-  });
-
-  it("reads the owner's token for a caller currently acting as someone else", async () => {
-    const { ctx, setActor } = mockCtx("owner-1");
-    const store = createTokenStore(ctx);
-    await store.set("src-1", "s3cret");
-
-    // A shared source's test/resolve runs as the recipient viewing it.
-    setActor("recipient-1");
-    await expect(store.getForOwner("src-1", "owner-1")).resolves.toBe("s3cret");
-    // ctx.asUser restores the previous actor once it returns.
-    expect(ctx.currentActor()).toBe("recipient-1");
-  });
-
-  it("clears a token", async () => {
-    const { ctx } = mockCtx("owner-1");
-    const store = createTokenStore(ctx);
-    await store.set("src-1", "s3cret");
-    await store.clear("src-1");
-    await expect(store.getForOwner("src-1", "owner-1")).resolves.toBeNull();
-  });
-});
diff --git a/plugins/secret-sources/tests/frontend/activate.test.tsx b/plugins/secret-sources/tests/frontend/activate.test.tsx
deleted file mode 100644
index a2b9d87f6..000000000
--- a/plugins/secret-sources/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,61 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { render, screen } from "@testing-library/react";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import { PluginComponent } from "@termix/plugin-sdk/ui";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe(`${manifest.id} activate`, () => {
-  it("registers the hint and manager components", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    render(
-      <PluginComponent
-        id="credentials.secretHint"
-        onManage={vi.fn()}
-        fallback={<span>fallback</span>}
-      />,
-    );
-    expect(await screen.findByText(locales.hint)).toBeTruthy();
-  });
-
-  it("renders the manager and can be closed", async () => {
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: {
-        get: vi.fn(async () => ({ data: { sources: [] } })),
-      } as never,
-    });
-    const onClose = vi.fn();
-    render(
-      <PluginComponent id="credentials.secretManager" onClose={onClose} />,
-    );
-    expect(await screen.findByText(locales.title)).toBeTruthy();
-  });
-
-  it("removes both components on deactivate", async () => {
-    const app = await renderWithApp(plugin, { manifest, locales });
-    await app.deactivate();
-    render(
-      <PluginComponent
-        id="credentials.secretHint"
-        fallback={<span>gone</span>}
-      />,
-    );
-    expect(await screen.findByText("gone")).toBeTruthy();
-  });
-});
diff --git a/plugins/secret-sources/tsconfig.json b/plugins/secret-sources/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/secret-sources/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/secret-sources/vitest.config.ts b/plugins/secret-sources/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/secret-sources/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/serial/CHANGELOG.md b/plugins/serial/CHANGELOG.md
deleted file mode 100644
index c55fc4d0e..000000000
--- a/plugins/serial/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Opens a serial console to a device plugged into your computer. The desktop app talks to the device directly, and the browser uses Web Serial.
diff --git a/plugins/serial/README.md b/plugins/serial/README.md
deleted file mode 100644
index 57680eb47..000000000
--- a/plugins/serial/README.md
+++ /dev/null
@@ -1,21 +0,0 @@
-# Serial
-
-Open a serial console to a device plugged into your computer.
-
-## Features
-
-- Open a serial console to a device plugged into your computer.
-- The desktop app talks to the device directly.
-- In a browser, the plugin uses Web Serial.
-
-## Setup
-
-The desktop app uses the `serialport` npm package, which has a native binary. The build does not bundle it.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/serial/locales/en.json b/plugins/serial/locales/en.json
deleted file mode 100644
index bf4b7de0c..000000000
--- a/plugins/serial/locales/en.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Serial"
-  },
-  "serial": {
-    "title": "Serial",
-    "portLabel": "Port",
-    "portPlaceholder": "/dev/ttyUSB0 or COM3",
-    "baudRateLabel": "Baud Rate",
-    "dataBitsLabel": "Data",
-    "stopBitsLabel": "Stop",
-    "parityLabel": "Parity",
-    "parityNone": "None",
-    "parityEven": "Even",
-    "parityOdd": "Odd",
-    "connect": "Connect to Serial",
-    "disconnect": "Disconnect",
-    "refreshPorts": "Refresh ports",
-    "connected": "Connected to {{path}} at {{baud}} baud",
-    "disconnected": "Serial port disconnected",
-    "connectionError": "Failed to open serial port",
-    "wsError": "WebSocket error",
-    "errorNoServerUrl": "No server URL configured",
-    "notSupportedTitle": "Serial Not Supported",
-    "notSupported": "Serial connections require a browser with Web Serial API support (Chrome, Edge, or Firefox 151+), or the Termix desktop app.",
-    "hideHint": "You can hide the Serial tab under User Profile > Appearance > Sidebar > Navigation.",
-    "browserPickerHint": "Click Connect and your browser will open a port picker to choose the device."
-  }
-}
diff --git a/plugins/serial/locales/translated/af_ZA.json b/plugins/serial/locales/translated/af_ZA.json
deleted file mode 100644
index 06690e526..000000000
--- a/plugins/serial/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Reeks"
-  },
-  "serial": {
-    "title": "Reeks",
-    "portLabel": "Hawe",
-    "portPlaceholder": "/dev/ttyUSB0 of COM3",
-    "baudRateLabel": "Baudtempo",
-    "dataBitsLabel": "Data",
-    "stopBitsLabel": "Stop",
-    "parityLabel": "Pariteit",
-    "parityNone": "Geen",
-    "parityEven": "Selfs",
-    "parityOdd": "Vreemd",
-    "connect": "Koppel aan serieel",
-    "disconnect": "Ontkoppel",
-    "refreshPorts": "Verfris poorte",
-    "connected": "Verbind aan {{path}} teen {{baud}} baud",
-    "disconnected": "Seriepoort ontkoppel",
-    "connectionError": "Kon nie die seriepoort oopmaak nie",
-    "wsError": "WebSocket-fout",
-    "errorNoServerUrl": "Geen bediener-URL gekonfigureer nie",
-    "notSupportedTitle": "Serienommer word nie ondersteun nie",
-    "notSupported": "Seriële verbindings vereis 'n blaaier met Web Serial API-ondersteuning (Chrome, Edge of Firefox 151+), of die Termix-lessenaarprogram.",
-    "hideHint": "Jy kan die Seriële oortjie versteek onder Gebruikersprofiel > Voorkoms > Sybalk > Navigasie.",
-    "browserPickerHint": "Klik op Verbind en jou blaaier sal 'n poortkieser oopmaak om die toestel te kies."
-  }
-}
diff --git a/plugins/serial/locales/translated/ar_SA.json b/plugins/serial/locales/translated/ar_SA.json
deleted file mode 100644
index aea5ec5ac..000000000
--- a/plugins/serial/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "تسلسلي"
-  },
-  "serial": {
-    "title": "منفذ تسلسلي",
-    "portLabel": "المنفذ",
-    "portPlaceholder": "/dev/ttyUSB0 or COM3",
-    "baudRateLabel": "معدل الباود",
-    "dataBitsLabel": "البيانات",
-    "stopBitsLabel": "التوقف",
-    "parityLabel": "التكافؤ",
-    "parityNone": "بلا",
-    "parityEven": "زوجي",
-    "parityOdd": "فردي",
-    "connect": "اتصال",
-    "disconnect": "قطع الاتصال",
-    "refreshPorts": "تحديث المنافذ",
-    "connected": "متصل بـ {{path}} بسرعة {{baud}} باود",
-    "disconnected": "تم قطع الاتصال بالمنفذ التسلسلي",
-    "connectionError": "فشل في فتح المنفذ التسلسلي",
-    "wsError": "خطأ في WebSocket",
-    "errorNoServerUrl": "لم يتم تكوين عنوان URL للخادم",
-    "notSupportedTitle": "المنفذ التسلسلي غير مدعوم",
-    "notSupported": "تتطلب الاتصالات التسلسلية متصفحًا يدعم Web Serial API (Chrome، أو Edge، أو Firefox 151+)، أو تطبيق Termix لسطح المكتب.",
-    "hideHint": "يمكنك إخفاء تبويب المنفذ التسلسلي من الملف الشخصي > المظهر > الشريط الجانبي > التنقل.",
-    "browserPickerHint": "انقر على Connect وسيفتح متصفحك نافذة اختيار المنفذ لتحديد الجهاز."
-  }
-}
diff --git a/plugins/serial/locales/translated/bg_BG.json b/plugins/serial/locales/translated/bg_BG.json
deleted file mode 100644
index 39c9de261..000000000
--- a/plugins/serial/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Сериен"
-  },
-  "serial": {
-    "title": "Сериен",
-    "portLabel": "Порт",
-    "portPlaceholder": "/dev/ttyUSB0 или COM3",
-    "baudRateLabel": "Скорост на бодове",
-    "dataBitsLabel": "Данни",
-    "stopBitsLabel": "Спри",
-    "parityLabel": "Паритет",
-    "parityNone": "Няма",
-    "parityEven": "Дори",
-    "parityOdd": "Странно",
-    "connect": "Свързване към сериен",
-    "disconnect": "Изключване",
-    "refreshPorts": "Обновяване на портове",
-    "connected": "Свързан към {{path}} при {{baud}} бод",
-    "disconnected": "Серийният порт е прекъснат",
-    "connectionError": "Неуспешно отваряне на серийния порт",
-    "wsError": "Грешка в WebSocket",
-    "errorNoServerUrl": "Няма конфигуриран URL адрес на сървъра",
-    "notSupportedTitle": "Серийният номер не се поддържа",
-    "notSupported": "Серийните връзки изискват браузър с поддръжка на Web Serial API (Chrome, Edge или Firefox 151+) или настолното приложение Termix.",
-    "hideHint": "Можете да скриете раздела „Сериен номер“ в Потребителски профил > Външен вид > Странична лента > Навигация.",
-    "browserPickerHint": "Щракнете върху „Свързване“ и браузърът ви ще отвори инструмент за избор на порт, за да изберете устройството."
-  }
-}
diff --git a/plugins/serial/locales/translated/bn_BD.json b/plugins/serial/locales/translated/bn_BD.json
deleted file mode 100644
index d739155e9..000000000
--- a/plugins/serial/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "সিরিয়াল"
-  },
-  "serial": {
-    "title": "সিরিয়াল",
-    "portLabel": "বন্দর",
-    "portPlaceholder": "/dev/ttyUSB0 অথবা COM3",
-    "baudRateLabel": "বড রেট",
-    "dataBitsLabel": "ডেটা",
-    "stopBitsLabel": "থামুন",
-    "parityLabel": "সমতা",
-    "parityNone": "কোনোটিই না",
-    "parityEven": "এমনকি",
-    "parityOdd": "অদ্ভুত",
-    "connect": "সিরিয়ালের সাথে সংযোগ করুন",
-    "disconnect": "সংযোগ বিচ্ছিন্ন করুন",
-    "refreshPorts": "পোর্টগুলি রিফ্রেশ করুন",
-    "connected": "{{path}} এর সাথে {{baud}} বাউডে সংযুক্ত।",
-    "disconnected": "সিরিয়াল পোর্ট সংযোগ বিচ্ছিন্ন",
-    "connectionError": "সিরিয়াল পোর্ট খুলতে ব্যর্থ হয়েছে",
-    "wsError": "ওয়েব সকেট ত্রুটি",
-    "errorNoServerUrl": "কোন সার্ভার URL কনফিগার করা নেই",
-    "notSupportedTitle": "সিরিয়াল সমর্থিত নয়",
-    "notSupported": "সিরিয়াল সংযোগের জন্য ওয়েব সিরিয়াল এপিআই সমর্থনসহ একটি ব্রাউজার (ক্রোম, এজ, বা ফায়ারফক্স ১৫১+), অথবা টারমিক্স ডেস্কটপ অ্যাপ প্রয়োজন।",
-    "hideHint": "আপনি ইউজার প্রোফাইল > অ্যাপিয়ারেন্স > সাইডবার > নেভিগেশন-এর অধীনে সিরিয়াল ট্যাবটি লুকাতে পারেন।",
-    "browserPickerHint": "কানেক্ট-এ ক্লিক করলে আপনার ব্রাউজারে ডিভাইসটি বেছে নেওয়ার জন্য একটি পোর্ট পিকার খুলবে।"
-  }
-}
diff --git a/plugins/serial/locales/translated/ca_ES.json b/plugins/serial/locales/translated/ca_ES.json
deleted file mode 100644
index 37d7cbda8..000000000
--- a/plugins/serial/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Sèrie"
-  },
-  "serial": {
-    "title": "Sèrie",
-    "portLabel": "Port",
-    "portPlaceholder": "/dev/ttyUSB0 o COM3",
-    "baudRateLabel": "velocitat de bauds",
-    "dataBitsLabel": "Dades",
-    "stopBitsLabel": "Atura",
-    "parityLabel": "Paritat",
-    "parityNone": "Cap",
-    "parityEven": "Fins i tot",
-    "parityOdd": "Estrany",
-    "connect": "Connecta't al serial",
-    "disconnect": "Desconnecta",
-    "refreshPorts": "Actualitza els ports",
-    "connected": "Connectat a {{path}} a {{baud}} baud",
-    "disconnected": "Port sèrie desconnectat",
-    "connectionError": "No s'ha pogut obrir el port sèrie",
-    "wsError": "Error de WebSocket",
-    "errorNoServerUrl": "No s'ha configurat cap URL del servidor",
-    "notSupportedTitle": "Número de sèrie no compatible",
-    "notSupported": "Les connexions en sèrie requereixen un navegador compatible amb l'API Web Serial (Chrome, Edge o Firefox 151+) o l'aplicació d'escriptori Termix.",
-    "hideHint": "Podeu amagar la pestanya Sèrie a Perfil d'usuari > Aparença > Barra lateral > Navegació.",
-    "browserPickerHint": "Feu clic a Connecta i el navegador obrirà un selector de ports per triar el dispositiu."
-  }
-}
diff --git a/plugins/serial/locales/translated/cs_CZ.json b/plugins/serial/locales/translated/cs_CZ.json
deleted file mode 100644
index 8a6cbd512..000000000
--- a/plugins/serial/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Seriál"
-  },
-  "serial": {
-    "title": "Seriál",
-    "portLabel": "Port",
-    "portPlaceholder": "/dev/ttyUSB0 nebo COM3",
-    "baudRateLabel": "Přenosová rychlost",
-    "dataBitsLabel": "Data",
-    "stopBitsLabel": "Zastávka",
-    "parityLabel": "Parita",
-    "parityNone": "Žádný",
-    "parityEven": "Dokonce",
-    "parityOdd": "Zvláštní",
-    "connect": "Připojení k sériovému",
-    "disconnect": "Odpojit",
-    "refreshPorts": "Obnovit porty",
-    "connected": "Připojeno k {{path}} rychlostí {{baud}} baudu",
-    "disconnected": "Sériový port odpojen",
-    "connectionError": "Nepodařilo se otevřít sériový port",
-    "wsError": "Chyba WebSocketu",
-    "errorNoServerUrl": "Není nakonfigurována žádná adresa URL serveru",
-    "notSupportedTitle": "Sériové číslo není podporováno",
-    "notSupported": "Sériová připojení vyžadují prohlížeč s podporou webového sériového API (Chrome, Edge nebo Firefox 151+) nebo desktopovou aplikaci Termix.",
-    "hideHint": "Kartu Sériové číslo můžete skrýt v části Profil uživatele > Vzhled > Postranní panel > Navigace.",
-    "browserPickerHint": "Klikněte na tlačítko Připojit a prohlížeč otevře výběr portu pro výběr zařízení."
-  }
-}
diff --git a/plugins/serial/locales/translated/da_DK.json b/plugins/serial/locales/translated/da_DK.json
deleted file mode 100644
index 82bf10916..000000000
--- a/plugins/serial/locales/translated/da_DK.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Seriel"
-  },
-  "serial": {
-    "title": "Seriel",
-    "portLabel": "Havn",
-    "portPlaceholder": "/dev/ttyUSB0 eller COM3",
-    "baudRateLabel": "Baudhastighed",
-    "dataBitsLabel": "Data",
-    "stopBitsLabel": "Stop",
-    "parityLabel": "Paritet",
-    "parityNone": "Ingen",
-    "parityEven": "Endog",
-    "parityOdd": "Ulige",
-    "connect": "Tilslut til seriel",
-    "disconnect": "Afbryde",
-    "refreshPorts": "Opdater porte",
-    "connected": "Forbundet til {{path}} ved {{baud}} baud",
-    "disconnected": "Seriel port afbrudt",
-    "connectionError": "Kunne ikke åbne seriel port",
-    "wsError": "WebSocket-fejl",
-    "errorNoServerUrl": "Ingen server-URL konfigureret",
-    "notSupportedTitle": "Seriel understøttes ikke",
-    "notSupported": "Serielle forbindelser kræver en browser med Web Serial API-understøttelse (Chrome, Edge eller Firefox 151+) eller Termix-desktopappen.",
-    "hideHint": "Du kan skjule fanen Seriel under Brugerprofil > Udseende > Sidebjælke > Navigation.",
-    "browserPickerHint": "Klik på Opret forbindelse, og din browser åbner en portvælger, hvor du kan vælge enheden."
-  }
-}
diff --git a/plugins/serial/locales/translated/de_DE.json b/plugins/serial/locales/translated/de_DE.json
deleted file mode 100644
index 73b196602..000000000
--- a/plugins/serial/locales/translated/de_DE.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Seriell"
-  },
-  "serial": {
-    "title": "Seriell",
-    "portLabel": "Port",
-    "portPlaceholder": "/dev/ttyUSB0 oder COM3",
-    "baudRateLabel": "Baudrate",
-    "dataBitsLabel": "Daten",
-    "stopBitsLabel": "Stop",
-    "parityLabel": "Parität",
-    "parityNone": "Keine",
-    "parityEven": "Gerade",
-    "parityOdd": "Ungerade",
-    "connect": "Mit Seriell verbinden",
-    "disconnect": "Trennen",
-    "refreshPorts": "Ports aktualisieren",
-    "connected": "Verbunden mit {{path}} bei {{baud}} Baud",
-    "disconnected": "Serielle Schnittstelle getrennt",
-    "connectionError": "Fehler beim Öffnen der seriellen Schnittstelle",
-    "wsError": "WebSocket-Fehler",
-    "errorNoServerUrl": "Keine Server-URL konfiguriert",
-    "notSupportedTitle": "Seriell nicht unterstützt",
-    "notSupported": "Serielle Verbindungen erfordern einen Browser mit Web Serial API-Unterstützung (Chrome, Edge oder Firefox 151+) oder die Termix-Desktop-App.",
-    "hideHint": "Sie können den Seriell-Tab unter Benutzerprofil > Erscheinungsbild > Seitenleiste > Navigation ausblenden.",
-    "browserPickerHint": "Klicken Sie auf Verbinden, und Ihr Browser öffnet eine Port-Auswahl, um das Gerät auszuwählen."
-  }
-}
diff --git a/plugins/serial/locales/translated/el_GR.json b/plugins/serial/locales/translated/el_GR.json
deleted file mode 100644
index c46a38c78..000000000
--- a/plugins/serial/locales/translated/el_GR.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Σειράς"
-  },
-  "serial": {
-    "title": "Σειράς",
-    "portLabel": "Λιμάνι",
-    "portPlaceholder": "/dev/ttyUSB0 ή COM3",
-    "baudRateLabel": "Ρυθμός Baud",
-    "dataBitsLabel": "Δεδομένα",
-    "stopBitsLabel": "Στάση",
-    "parityLabel": "Ισοτιμία",
-    "parityNone": "Κανένας",
-    "parityEven": "Ακόμη και",
-    "parityOdd": "Περιττός",
-    "connect": "Σύνδεση σε σειριακή σύνδεση",
-    "disconnect": "Αποσυνδέω",
-    "refreshPorts": "Ανανέωση θυρών",
-    "connected": "Συνδεδεμένο με {{path}} σε {{baud}} baud",
-    "disconnected": "Η σειριακή θύρα αποσυνδέθηκε",
-    "connectionError": "Αποτυχία ανοίγματος σειριακής θύρας",
-    "wsError": "Σφάλμα WebSocket",
-    "errorNoServerUrl": "Δεν έχει ρυθμιστεί διεύθυνση URL διακομιστή",
-    "notSupportedTitle": "Σειριακή Δεν Υποστηρίζεται",
-    "notSupported": "Οι σειριακές συνδέσεις απαιτούν ένα πρόγραμμα περιήγησης με υποστήριξη Web Serial API (Chrome, Edge ή Firefox 151+) ή την εφαρμογή Termix για υπολογιστές.",
-    "hideHint": "Μπορείτε να αποκρύψετε την καρτέλα Σειριακός αριθμός στην περιοχή Προφίλ χρήστη > Εμφάνιση > Πλαϊνή μπάρα > Πλοήγηση.",
-    "browserPickerHint": "Κάντε κλικ στην επιλογή Σύνδεση και το πρόγραμμα περιήγησής σας θα ανοίξει ένα πρόγραμμα επιλογής θυρών για να επιλέξετε τη συσκευή."
-  }
-}
diff --git a/plugins/serial/locales/translated/es_ES.json b/plugins/serial/locales/translated/es_ES.json
deleted file mode 100644
index 8bce3a3c3..000000000
--- a/plugins/serial/locales/translated/es_ES.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Serial"
-  },
-  "serial": {
-    "title": "Serial",
-    "portLabel": "Puerto",
-    "portPlaceholder": "/dev/ttyUSB0 or COM3",
-    "baudRateLabel": "Baudios",
-    "dataBitsLabel": "Datos",
-    "stopBitsLabel": "Parada",
-    "parityLabel": "Paridad",
-    "parityNone": "Ninguna",
-    "parityEven": "Par",
-    "parityOdd": "Impar",
-    "connect": "Conectar a Serial",
-    "disconnect": "Desconectar",
-    "refreshPorts": "Actualizar puertos",
-    "connected": "Conectado a {{path}} a {{baud}} baudios",
-    "disconnected": "Puerto serie desconectado",
-    "connectionError": "Error al abrir el puerto serie",
-    "wsError": "Error WebSocket",
-    "errorNoServerUrl": "No se ha configurado URL de servidor",
-    "notSupportedTitle": "Serial no compatible",
-    "notSupported": "Las conexiones serie requieren un navegador compatible con Web Serial API (Chrome, Edge o Firefox 151+), o la aplicación de escritorio Termix.",
-    "hideHint": "Puedes ocultar la pestaña Serial en Perfil de usuario > Apariencia > Barra lateral > Navegación.",
-    "browserPickerHint": "Haz clic en Conectar y el navegador abrirá un selector de puertos para elegir el dispositivo."
-  }
-}
diff --git a/plugins/serial/locales/translated/fi_FI.json b/plugins/serial/locales/translated/fi_FI.json
deleted file mode 100644
index 0f3583153..000000000
--- a/plugins/serial/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Sarjanumero"
-  },
-  "serial": {
-    "title": "Sarjanumero",
-    "portLabel": "Portti",
-    "portPlaceholder": "/dev/ttyUSB0 tai COM3",
-    "baudRateLabel": "Baud-nopeus",
-    "dataBitsLabel": "Data",
-    "stopBitsLabel": "Stop",
-    "parityLabel": "Pariteetti",
-    "parityNone": "Ei mitään",
-    "parityEven": "Jopa",
-    "parityOdd": "Pariton",
-    "connect": "Yhdistä sarjaporttiin",
-    "disconnect": "Katkaise yhteys",
-    "refreshPorts": "Päivitä portit",
-    "connected": "Yhdistetty {{path}} -laitteeseen {{baud}} baudilla",
-    "disconnected": "Sarjaportti irrotettu",
-    "connectionError": "Sarjaportin avaaminen epäonnistui",
-    "wsError": "WebSocket-virhe",
-    "errorNoServerUrl": "Palvelimen URL-osoitetta ei ole määritetty",
-    "notSupportedTitle": "Sarjanumeroa ei tueta",
-    "notSupported": "Sarjaliikenne vaatii selaimen, jossa on Web Serial API -tuki (Chrome, Edge tai Firefox 151+), tai Termix-työpöytäsovelluksen.",
-    "hideHint": "Voit piilottaa Sarja-välilehden kohdassa Käyttäjäprofiili > Ulkoasu > Sivupalkki > Navigointi.",
-    "browserPickerHint": "Napsauta Yhdistä, niin selaimesi avaa porttivalitsimen laitteen valitsemiseksi."
-  }
-}
diff --git a/plugins/serial/locales/translated/fr_FR.json b/plugins/serial/locales/translated/fr_FR.json
deleted file mode 100644
index 89b9c973b..000000000
--- a/plugins/serial/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Série"
-  },
-  "serial": {
-    "title": "Série",
-    "portLabel": "Port",
-    "portPlaceholder": "/dev/ttyUSB0 or COM3",
-    "baudRateLabel": "Débit en bauds",
-    "dataBitsLabel": "Données",
-    "stopBitsLabel": "Stop",
-    "parityLabel": "Parité",
-    "parityNone": "Aucune",
-    "parityEven": "Paire",
-    "parityOdd": "Impaire",
-    "connect": "Connecter",
-    "disconnect": "Déconnecter",
-    "refreshPorts": "Actualiser les ports",
-    "connected": "Connecté à {{path}} à {{baud}} bauds",
-    "disconnected": "Port série déconnecté",
-    "connectionError": "Échec de l'ouverture du port série",
-    "wsError": "Erreur WebSocket",
-    "errorNoServerUrl": "Aucune URL de serveur configurée",
-    "notSupportedTitle": "Port série non pris en charge",
-    "notSupported": "Les connexions série nécessitent un navigateur prenant en charge l'API Web Serial (Chrome, Edge, ou Firefox 151+), ou l'application de bureau Termix.",
-    "hideHint": "Vous pouvez masquer l'onglet Série sous Profil utilisateur > Apparence > Barre latérale > Navigation.",
-    "browserPickerHint": "Cliquez sur Connexion et votre navigateur ouvrira un sélecteur de port pour choisir le périphérique."
-  }
-}
diff --git a/plugins/serial/locales/translated/he_IL.json b/plugins/serial/locales/translated/he_IL.json
deleted file mode 100644
index 619822ae5..000000000
--- a/plugins/serial/locales/translated/he_IL.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "סִדרָתִי"
-  },
-  "serial": {
-    "title": "סִדרָתִי",
-    "portLabel": "נָמָל",
-    "portPlaceholder": "/dev/ttyUSB0 או COM3",
-    "baudRateLabel": "קצב באוד",
-    "dataBitsLabel": "נְתוּנִים",
-    "stopBitsLabel": "לְהַפְסִיק",
-    "parityLabel": "שִׁוּוּי",
-    "parityNone": "אַף לֹא אֶחָד",
-    "parityEven": "אֲפִילוּ",
-    "parityOdd": "מְשׁוּנֶה",
-    "connect": "חיבור סריאלי",
-    "disconnect": "לְנַתֵק",
-    "refreshPorts": "רענון פורטים",
-    "connected": "מחובר ל- {{path}} ב- {{baud}} באוד",
-    "disconnected": "יציאה טורית מנותקת",
-    "connectionError": "נכשלה פתיחת הפורט הטורי",
-    "wsError": "שגיאת WebSocket",
-    "errorNoServerUrl": "לא הוגדרה כתובת URL של שרת",
-    "notSupportedTitle": "סריאלי לא נתמך",
-    "notSupported": "חיבורים טוריים דורשים דפדפן עם תמיכה ב-Web Serial API (Chrome, Edge או Firefox 151+), או את אפליקציית שולחן העבודה Termix.",
-    "hideHint": "ניתן להסתיר את הכרטיסייה 'סדרתי' תחת פרופיל משתמש > מראה > סרגל צד > ניווט.",
-    "browserPickerHint": "לחץ על התחבר והדפדפן שלך יפתח בורר פורטים לבחירת המכשיר."
-  }
-}
diff --git a/plugins/serial/locales/translated/hi_IN.json b/plugins/serial/locales/translated/hi_IN.json
deleted file mode 100644
index a289a4155..000000000
--- a/plugins/serial/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "सीरियल"
-  },
-  "serial": {
-    "title": "सीरियल",
-    "portLabel": "पोर्ट",
-    "portPlaceholder": "/dev/ttyUSB0 or COM3",
-    "baudRateLabel": "बॉड दर",
-    "dataBitsLabel": "डेटा",
-    "stopBitsLabel": "स्टॉप",
-    "parityLabel": "पैरिटी",
-    "parityNone": "कोई नहीं",
-    "parityEven": "सम",
-    "parityOdd": "विषम",
-    "connect": "सीरियल कनेक्ट करें",
-    "disconnect": "डिस्कनेक्ट करें",
-    "refreshPorts": "पोर्ट रीफ़्रेश करें",
-    "connected": "{{path}} से {{baud}} बॉड पर कनेक्टेड",
-    "disconnected": "सीरियल पोर्ट डिस्कनेक्ट हो गया",
-    "connectionError": "सीरियल पोर्ट खोलने में विफल",
-    "wsError": "WebSocket त्रुटि",
-    "errorNoServerUrl": "कोई सर्वर URL कॉन्फ़िगर नहीं है",
-    "notSupportedTitle": "सीरियल समर्थित नहीं",
-    "notSupported": "सीरियल कनेक्शन के लिए Web Serial API समर्थन वाले ब्राउज़र (Chrome, Edge, या Firefox 151+) या Termix डेस्कटॉप ऐप की आवश्यकता है।",
-    "hideHint": "आप सीरियल टैब को User Profile > Appearance > Sidebar > Navigation में छिपा सकते हैं।",
-    "browserPickerHint": "Connect पर क्लिक करें और आपका ब्राउज़र डिवाइस चुनने के लिए एक पोर्ट पिकर खोलेगा।"
-  }
-}
diff --git a/plugins/serial/locales/translated/hu_HU.json b/plugins/serial/locales/translated/hu_HU.json
deleted file mode 100644
index cf3fbf123..000000000
--- a/plugins/serial/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Sorozatszám"
-  },
-  "serial": {
-    "title": "Sorozatszám",
-    "portLabel": "Kikötő",
-    "portPlaceholder": "/dev/ttyUSB0 vagy COM3",
-    "baudRateLabel": "Baud sebesség",
-    "dataBitsLabel": "Adat",
-    "stopBitsLabel": "Stop",
-    "parityLabel": "Paritás",
-    "parityNone": "Egyik sem",
-    "parityEven": "Még",
-    "parityOdd": "Páratlan",
-    "connect": "Csatlakozás soros porthoz",
-    "disconnect": "Leválasztás",
-    "refreshPorts": "Frissítse a portokat",
-    "connected": "{{path}} -hoz csatlakoztatva {{baud}} baud sebességgel",
-    "disconnected": "Soros port leválasztva",
-    "connectionError": "Nem sikerült megnyitni a soros portot",
-    "wsError": "WebSocket hiba",
-    "errorNoServerUrl": "Nincs konfigurálva szerver URL",
-    "notSupportedTitle": "Sorozatszám Nem támogatott",
-    "notSupported": "A soros kapcsolatokhoz Web Serial API-t támogató böngésző (Chrome, Edge vagy Firefox 151+), vagy a Termix asztali alkalmazás szükséges.",
-    "hideHint": "A Sorozat fület elrejtheted a Felhasználói profil > Megjelenés > Oldalsáv > Navigáció alatt.",
-    "browserPickerHint": "Kattintson a Csatlakozás gombra, és a böngészője megnyit egy portválasztót az eszköz kiválasztásához."
-  }
-}
diff --git a/plugins/serial/locales/translated/id_ID.json b/plugins/serial/locales/translated/id_ID.json
deleted file mode 100644
index b44424ed3..000000000
--- a/plugins/serial/locales/translated/id_ID.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Serial"
-  },
-  "serial": {
-    "title": "Serial",
-    "portLabel": "Pelabuhan",
-    "portPlaceholder": "/dev/ttyUSB0 atau COM3",
-    "baudRateLabel": "Kecepatan Baud",
-    "dataBitsLabel": "Data",
-    "stopBitsLabel": "Berhenti",
-    "parityLabel": "Keseimbangan",
-    "parityNone": "Tidak ada",
-    "parityEven": "Bahkan",
-    "parityOdd": "Aneh",
-    "connect": "Hubungkan ke Serial",
-    "disconnect": "Memutuskan",
-    "refreshPorts": "Penyegaran port",
-    "connected": "Terhubung ke {{path}} pada kecepatan {{baud}} baud",
-    "disconnected": "Port serial terputus",
-    "connectionError": "Gagal membuka port serial",
-    "wsError": "Kesalahan WebSocket",
-    "errorNoServerUrl": "Tidak ada URL server yang dikonfigurasi.",
-    "notSupportedTitle": "Nomor Seri Tidak Didukung",
-    "notSupported": "Koneksi serial memerlukan browser dengan dukungan Web Serial API (Chrome, Edge, atau Firefox 151+), atau aplikasi desktop Termix.",
-    "hideHint": "Anda dapat menyembunyikan tab Serial di bawah Profil Pengguna > Tampilan > Bilah Samping > Navigasi.",
-    "browserPickerHint": "Klik Sambungkan dan browser Anda akan membuka pemilih port untuk memilih perangkat."
-  }
-}
diff --git a/plugins/serial/locales/translated/it_IT.json b/plugins/serial/locales/translated/it_IT.json
deleted file mode 100644
index 5d3940e45..000000000
--- a/plugins/serial/locales/translated/it_IT.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Seriale"
-  },
-  "serial": {
-    "title": "Seriale",
-    "portLabel": "Porta",
-    "portPlaceholder": "/dev/ttyUSB0 or COM3",
-    "baudRateLabel": "Baud rate",
-    "dataBitsLabel": "Dati",
-    "stopBitsLabel": "Stop",
-    "parityLabel": "Parità",
-    "parityNone": "Nessuna",
-    "parityEven": "Pari",
-    "parityOdd": "Dispari",
-    "connect": "Connetti alla Seriale",
-    "disconnect": "Disconnetti",
-    "refreshPorts": "Aggiorna porte",
-    "connected": "Connesso a {{path}} a {{baud}} baud",
-    "disconnected": "Porta seriale disconnessa",
-    "connectionError": "Impossibile aprire la porta seriale",
-    "wsError": "Errore WebSocket",
-    "errorNoServerUrl": "Nessun URL del server configurato",
-    "notSupportedTitle": "Seriale non supportato",
-    "notSupported": "Le connessioni seriali richiedono un browser con supporto Web Serial API (Chrome, Edge o Firefox 151+), oppure l'app desktop Termix.",
-    "hideHint": "Puoi nascondere la scheda Seriale in Profilo Utente > Aspetto > Barra laterale > Navigazione.",
-    "browserPickerHint": "Fai clic su Connetti e il browser aprirà un selettore di porte per scegliere il dispositivo."
-  }
-}
diff --git a/plugins/serial/locales/translated/ja_JP.json b/plugins/serial/locales/translated/ja_JP.json
deleted file mode 100644
index ba2ede59d..000000000
--- a/plugins/serial/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "シリアル"
-  },
-  "serial": {
-    "title": "シリアル",
-    "portLabel": "ポート",
-    "portPlaceholder": "/dev/ttyUSB0 または COM3",
-    "baudRateLabel": "ボーレート",
-    "dataBitsLabel": "データ",
-    "stopBitsLabel": "ストップ",
-    "parityLabel": "パリティ",
-    "parityNone": "なし",
-    "parityEven": "偶数",
-    "parityOdd": "奇数",
-    "connect": "シリアルに接続",
-    "disconnect": "切断",
-    "refreshPorts": "ポートを更新",
-    "connected": "{{path}} に {{baud}} ボーで接続しました",
-    "disconnected": "シリアルポートが切断されました",
-    "connectionError": "シリアルポートを開けませんでした",
-    "wsError": "WebSocket エラー",
-    "errorNoServerUrl": "サーバー URL が設定されていません",
-    "notSupportedTitle": "シリアル非対応",
-    "notSupported": "シリアル接続には Web Serial API をサポートするブラウザ (Chrome, Edge, Firefox 151+) または Termix デスクトップアプリが必要です。",
-    "hideHint": "シリアルタブは「ユーザープロファイル > 外観 > サイドバー > ナビゲーション」で非表示にできます。",
-    "browserPickerHint": "接続をクリックすると、ブラウザがポートピッカーを開き、デバイスを選択できます。"
-  }
-}
diff --git a/plugins/serial/locales/translated/ko_KR.json b/plugins/serial/locales/translated/ko_KR.json
deleted file mode 100644
index 51b81e612..000000000
--- a/plugins/serial/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "시리얼"
-  },
-  "serial": {
-    "title": "시리얼",
-    "portLabel": "포트",
-    "portPlaceholder": "/dev/ttyUSB0 or COM3",
-    "baudRateLabel": "보레이트",
-    "dataBitsLabel": "데이터",
-    "stopBitsLabel": "스톱",
-    "parityLabel": "패리티",
-    "parityNone": "없음",
-    "parityEven": "짝수",
-    "parityOdd": "홀수",
-    "connect": "시리얼 연결",
-    "disconnect": "연결 해제",
-    "refreshPorts": "포트 새로 고침",
-    "connected": "{{path}}에 {{baud}} 보로 연결됨",
-    "disconnected": "시리얼 포트 연결 해제됨",
-    "connectionError": "시리얼 포트를 열지 못했습니다.",
-    "wsError": "WebSocket 오류",
-    "errorNoServerUrl": "서버 URL이 구성되지 않았습니다.",
-    "notSupportedTitle": "시리얼 미지원",
-    "notSupported": "시리얼 연결에는 Web Serial API를 지원하는 브라우저(Chrome, Edge, Firefox 151+) 또는 Termix 데스크톱 앱이 필요합니다.",
-    "hideHint": "Serial 탭은 사용자 프로필 > 모양 > 사이드바 > 탐색에서 숨길 수 있습니다.",
-    "browserPickerHint": "연결 버튼을 클릭하면 브라우저에서 장치 선택을 위한 포트 선택기가 열립니다."
-  }
-}
diff --git a/plugins/serial/locales/translated/nl_NL.json b/plugins/serial/locales/translated/nl_NL.json
deleted file mode 100644
index 2c46f23bc..000000000
--- a/plugins/serial/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Serieel"
-  },
-  "serial": {
-    "title": "Serieel",
-    "portLabel": "Haven",
-    "portPlaceholder": "/dev/ttyUSB0 of COM3",
-    "baudRateLabel": "Baudrate",
-    "dataBitsLabel": "Gegevens",
-    "stopBitsLabel": "Stop",
-    "parityLabel": "Pariteit",
-    "parityNone": "Geen",
-    "parityEven": "Zelfs",
-    "parityOdd": "Vreemd",
-    "connect": "Verbinden via serieel",
-    "disconnect": "Verbinding verbreken",
-    "refreshPorts": "Vernieuw poorten",
-    "connected": "Verbonden met {{path}} met {{baud}} baud",
-    "disconnected": "Seriële poort losgekoppeld",
-    "connectionError": "Het openen van de seriële poort is mislukt.",
-    "wsError": "WebSocket-fout",
-    "errorNoServerUrl": "Geen server-URL geconfigureerd",
-    "notSupportedTitle": "Serienummer niet ondersteund",
-    "notSupported": "Voor seriële verbindingen is een browser met Web Serial API-ondersteuning vereist (Chrome, Edge of Firefox 151+), of de Termix-desktopapp.",
-    "hideHint": "Je kunt het tabblad 'Serienummer' verbergen via Gebruikersprofiel > Uiterlijk > Zijbalk > Navigatie.",
-    "browserPickerHint": "Klik op Verbinden en uw browser opent een poortkiezer waarmee u het apparaat kunt selecteren."
-  }
-}
diff --git a/plugins/serial/locales/translated/no_NO.json b/plugins/serial/locales/translated/no_NO.json
deleted file mode 100644
index 068df0e16..000000000
--- a/plugins/serial/locales/translated/no_NO.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Seriell"
-  },
-  "serial": {
-    "title": "Seriell",
-    "portLabel": "Havn",
-    "portPlaceholder": "/dev/ttyUSB0 eller COM3",
-    "baudRateLabel": "Baudhastighet",
-    "dataBitsLabel": "Data",
-    "stopBitsLabel": "Stopp",
-    "parityLabel": "Paritet",
-    "parityNone": "Ingen",
-    "parityEven": "Til og med",
-    "parityOdd": "Merkelig",
-    "connect": "Koble til seriell",
-    "disconnect": "Koble fra",
-    "refreshPorts": "Oppdater porter",
-    "connected": "Koblet til {{path}} ved {{baud}} baud",
-    "disconnected": "Seriell port frakoblet",
-    "connectionError": "Klarte ikke å åpne serieporten",
-    "wsError": "WebSocket-feil",
-    "errorNoServerUrl": "Ingen server-URL konfigurert",
-    "notSupportedTitle": "Serienummer støttes ikke",
-    "notSupported": "Serielle tilkoblinger krever en nettleser med støtte for Web Serial API (Chrome, Edge eller Firefox 151+), eller Termix-skrivebordsappen.",
-    "hideHint": "Du kan skjule Seriell-fanen under Brukerprofil > Utseende > Sidefelt > Navigasjon.",
-    "browserPickerHint": "Klikk på Koble til, så åpner nettleseren din en portvelger der du kan velge enheten."
-  }
-}
diff --git a/plugins/serial/locales/translated/pl_PL.json b/plugins/serial/locales/translated/pl_PL.json
deleted file mode 100644
index ce7105580..000000000
--- a/plugins/serial/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Port szeregowy"
-  },
-  "serial": {
-    "title": "Port szeregowy",
-    "portLabel": "Port",
-    "portPlaceholder": "/dev/ttyUSB0 lub COM3",
-    "baudRateLabel": "Szybkość transmisji",
-    "dataBitsLabel": "Dane",
-    "stopBitsLabel": "Stop",
-    "parityLabel": "Parzystość",
-    "parityNone": "Brak",
-    "parityEven": "Parzysta",
-    "parityOdd": "Nieparzysta",
-    "connect": "Połącz z portem szeregowym",
-    "disconnect": "Odłącz",
-    "refreshPorts": "Odśwież porty",
-    "connected": "Połączono z {{path}} z szybkością {{baud}} bodów",
-    "disconnected": "Port szeregowy rozłączony",
-    "connectionError": "Nie udało się otworzyć portu szeregowego",
-    "wsError": "Błąd WebSocket",
-    "errorNoServerUrl": "Brak skonfigurowanego adresu URL serwera",
-    "notSupportedTitle": "Port szeregowy nieobsługiwany",
-    "notSupported": "Połączenia szeregowe wymagają przeglądarki obsługującej Web Serial API (Chrome, Edge lub Firefox 151+) albo aplikacji desktopowej Termix.",
-    "hideHint": "Kartę Port szeregowy można ukryć w: Profil użytkownika > Wygląd > Pasek boczny > Nawigacja.",
-    "browserPickerHint": "Kliknij Połącz, a przeglądarka otworzy okno wyboru portu, w którym wskażesz urządzenie."
-  }
-}
diff --git a/plugins/serial/locales/translated/pt_BR.json b/plugins/serial/locales/translated/pt_BR.json
deleted file mode 100644
index 83c97828d..000000000
--- a/plugins/serial/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Serial"
-  },
-  "serial": {
-    "title": "Serial",
-    "portLabel": "Porta",
-    "portPlaceholder": "/dev/ttyUSB0 ou COM3",
-    "baudRateLabel": "Taxa de transmissão (Baud rate)",
-    "dataBitsLabel": "Dados",
-    "stopBitsLabel": "Parar",
-    "parityLabel": "Paridade",
-    "parityNone": "Nenhum",
-    "parityEven": "Até",
-    "parityOdd": "Chance",
-    "connect": "Conectar à porta serial",
-    "disconnect": "Desconectar",
-    "refreshPorts": "Atualizar portas",
-    "connected": "Conectado a {{path}} na taxa de transmissão de {{baud}}",
-    "disconnected": "Porta serial desconectada",
-    "connectionError": "Falha ao abrir a porta serial",
-    "wsError": "Erro no WebSocket",
-    "errorNoServerUrl": "Nenhuma URL de servidor configurada",
-    "notSupportedTitle": "Serial não suportado",
-    "notSupported": "As conexões seriais exigem um navegador com suporte à API Web Serial (Chrome, Edge ou Firefox 151+) ou o aplicativo Termix para desktop.",
-    "hideHint": "Você pode ocultar a guia Serial em Perfil do Usuário > Aparência > Barra lateral > Navegação.",
-    "browserPickerHint": "Clique em Conectar e seu navegador abrirá um seletor de portas para que você escolha o dispositivo."
-  }
-}
diff --git a/plugins/serial/locales/translated/pt_PT.json b/plugins/serial/locales/translated/pt_PT.json
deleted file mode 100644
index 11a6d758c..000000000
--- a/plugins/serial/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Serial"
-  },
-  "serial": {
-    "title": "Serial",
-    "portLabel": "Porta",
-    "portPlaceholder": "/dev/ttyUSB0 ou COM3",
-    "baudRateLabel": "Taxa Baud",
-    "dataBitsLabel": "Dados",
-    "stopBitsLabel": "Stop",
-    "parityLabel": "Paridade",
-    "parityNone": "Nenhuma",
-    "parityEven": "Par",
-    "parityOdd": "Ímpar",
-    "connect": "Ligar à Serial",
-    "disconnect": "Desligar",
-    "refreshPorts": "Atualizar portas",
-    "connected": "Ligado a {{path}} a {{baud}} baud",
-    "disconnected": "Porta série desligada",
-    "connectionError": "Falha ao abrir a porta série",
-    "wsError": "Erro de WebSocket",
-    "errorNoServerUrl": "Nenhum URL de servidor configurado",
-    "notSupportedTitle": "Série não suportada",
-    "notSupported": "As ligações série requerem um navegador com suporte à Web Serial API (Chrome, Edge ou Firefox 151+) ou a aplicação de ambiente de trabalho Termix.",
-    "hideHint": "Pode ocultar o separador Série em Perfil do Utilizador > Aparência > Barra Lateral > Navegação.",
-    "browserPickerHint": "Clique em Ligar e o seu navegador abrirá um seletor de porta para escolher o dispositivo."
-  }
-}
diff --git a/plugins/serial/locales/translated/ro_RO.json b/plugins/serial/locales/translated/ro_RO.json
deleted file mode 100644
index fc1f7b0a5..000000000
--- a/plugins/serial/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Serial"
-  },
-  "serial": {
-    "title": "Serial",
-    "portLabel": "Port",
-    "portPlaceholder": "/dev/ttyUSB0 sau COM3",
-    "baudRateLabel": "Rată de baud",
-    "dataBitsLabel": "Date",
-    "stopBitsLabel": "Stop",
-    "parityLabel": "Paritate",
-    "parityNone": "Nici unul",
-    "parityEven": "Chiar",
-    "parityOdd": "Ciudat",
-    "connect": "Conectare la serial",
-    "disconnect": "Deconecta",
-    "refreshPorts": "Reîmprospătați porturile",
-    "connected": "Conectat la {{path}} la {{baud}} baud",
-    "disconnected": "Portul serial deconectat",
-    "connectionError": "Nu s-a putut deschide portul serial",
-    "wsError": "Eroare WebSocket",
-    "errorNoServerUrl": "Nu este configurată nicio adresă URL a serverului",
-    "notSupportedTitle": "Număr de serie neacceptat",
-    "notSupported": "Conexiunile seriale necesită un browser cu suport Web Serial API (Chrome, Edge sau Firefox 151+) sau aplicația desktop Termix.",
-    "hideHint": "Puteți ascunde fila Serial din Profil utilizator > Aspect > Bara laterală > Navigare.",
-    "browserPickerHint": "Faceți clic pe Conectare și browserul dvs. va deschide un selector de porturi pentru a alege dispozitivul."
-  }
-}
diff --git a/plugins/serial/locales/translated/ru_RU.json b/plugins/serial/locales/translated/ru_RU.json
deleted file mode 100644
index 9f99fbfa1..000000000
--- a/plugins/serial/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Последовательный порт"
-  },
-  "serial": {
-    "title": "Последовательный порт",
-    "portLabel": "Порт",
-    "portPlaceholder": "/dev/ttyUSB0 or COM3",
-    "baudRateLabel": "Скорость передачи",
-    "dataBitsLabel": "Биты данных",
-    "stopBitsLabel": "Стоп-биты",
-    "parityLabel": "Чётность",
-    "parityNone": "Нет",
-    "parityEven": "Чётный",
-    "parityOdd": "Нечётный",
-    "connect": "Подключиться",
-    "disconnect": "Отключиться",
-    "refreshPorts": "Обновить порты",
-    "connected": "Подключено к {{path}} на скорости {{baud}} бод",
-    "disconnected": "Последовательный порт отключен",
-    "connectionError": "Ошибка открытия последовательного порта",
-    "wsError": "Ошибка WebSocket",
-    "errorNoServerUrl": "Не настроен URL сервера",
-    "notSupportedTitle": "Последовательный порт не поддерживается",
-    "notSupported": "Последовательные подключения требуют браузер с поддержкой Web Serial API (Chrome, Edge или Firefox 151+) или десктопное приложение Termix.",
-    "hideHint": "Вы можете скрыть вкладку «Serial» в разделе «Профиль пользователя» > «Оформление» > «Боковая панель» > «Навигация».",
-    "browserPickerHint": "Нажмите «Подключиться», и браузер откроет окно выбора порта для выбора устройства."
-  }
-}
diff --git a/plugins/serial/locales/translated/sr_SP.json b/plugins/serial/locales/translated/sr_SP.json
deleted file mode 100644
index 0f7d87efe..000000000
--- a/plugins/serial/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Серијски"
-  },
-  "serial": {
-    "title": "Серијски",
-    "portLabel": "Лука",
-    "portPlaceholder": "/dev/ttyUSB0 или COM3",
-    "baudRateLabel": "Брзина преноса података",
-    "dataBitsLabel": "Подаци",
-    "stopBitsLabel": "Заустави",
-    "parityLabel": "Паритет",
-    "parityNone": "Ниједан",
-    "parityEven": "Чак",
-    "parityOdd": "Чудно",
-    "connect": "Повежи се са серијским",
-    "disconnect": "Прекини везу",
-    "refreshPorts": "Освежи портове",
-    "connected": "Повезано са {{path}} брзином {{baud}} бауда",
-    "disconnected": "Серијски порт је искључен",
-    "connectionError": "Отварање серијског порта није успело",
-    "wsError": "Грешка WebSocket-а",
-    "errorNoServerUrl": "Није конфигурисан URL сервера",
-    "notSupportedTitle": "Серијски број није подржан",
-    "notSupported": "Серијске везе захтевају прегледач са подршком за Web Serial API (Chrome, Edge или Firefox 151+) или Termix десктоп апликацију.",
-    "hideHint": "Картицу Серијски број можете сакрити под Кориснички профил > Изглед > Бочна трака > Навигација.",
-    "browserPickerHint": "Кликните на Повежи се и ваш прегледач ће отворити бирач портова за избор уређаја."
-  }
-}
diff --git a/plugins/serial/locales/translated/sv_SE.json b/plugins/serial/locales/translated/sv_SE.json
deleted file mode 100644
index 3b565d4bd..000000000
--- a/plugins/serial/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Serie"
-  },
-  "serial": {
-    "title": "Serie",
-    "portLabel": "Hamn",
-    "portPlaceholder": "/dev/ttyUSB0 eller COM3",
-    "baudRateLabel": "Baudhastighet",
-    "dataBitsLabel": "Data",
-    "stopBitsLabel": "Stopp",
-    "parityLabel": "Paritet",
-    "parityNone": "Ingen",
-    "parityEven": "Även",
-    "parityOdd": "Udda",
-    "connect": "Anslut till seriellt",
-    "disconnect": "Koppla från",
-    "refreshPorts": "Uppdatera portar",
-    "connected": "Ansluten till {{path}} vid {{baud}} baud",
-    "disconnected": "Seriell port frånkopplad",
-    "connectionError": "Misslyckades med att öppna serieporten",
-    "wsError": "WebSocket-fel",
-    "errorNoServerUrl": "Ingen server-URL konfigurerad",
-    "notSupportedTitle": "Seriellt stöds inte",
-    "notSupported": "Seriella anslutningar kräver en webbläsare med stöd för Web Serial API (Chrome, Edge eller Firefox 151+), eller Termix-skrivbordsappen.",
-    "hideHint": "Du kan dölja fliken Seriell under Användarprofil > Utseende > Sidofält > Navigering.",
-    "browserPickerHint": "Klicka på Anslut så öppnar din webbläsare en portväljare där du kan välja enheten."
-  }
-}
diff --git a/plugins/serial/locales/translated/th_TH.json b/plugins/serial/locales/translated/th_TH.json
deleted file mode 100644
index 4c74c23dc..000000000
--- a/plugins/serial/locales/translated/th_TH.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "ซีเรียล"
-  },
-  "serial": {
-    "title": "ซีเรียล",
-    "portLabel": "ท่าเรือ",
-    "portPlaceholder": "/dev/ttyUSB0 หรือ COM3",
-    "baudRateLabel": "อัตราบิต",
-    "dataBitsLabel": "ข้อมูล",
-    "stopBitsLabel": "หยุด",
-    "parityLabel": "ความเท่าเทียมกัน",
-    "parityNone": "ไม่มี",
-    "parityEven": "สม่ำเสมอ",
-    "parityOdd": "แปลก",
-    "connect": "เชื่อมต่อกับพอร์ตอนุกรม",
-    "disconnect": "ตัดการเชื่อมต่อ",
-    "refreshPorts": "พอร์ตรีเฟรช",
-    "connected": "เชื่อมต่อกับ {{path}} ที่ความเร็ว {{baud}} บอด",
-    "disconnected": "พอร์ตอนุกรมถูกตัดการเชื่อมต่อ",
-    "connectionError": "ไม่สามารถเปิดพอร์ตอนุกรมได้",
-    "wsError": "ข้อผิดพลาด WebSocket",
-    "errorNoServerUrl": "ไม่ได้กำหนดค่า URL เซิร์ฟเวอร์",
-    "notSupportedTitle": "ไม่รองรับหมายเลขซีเรียล",
-    "notSupported": "การเชื่อมต่อแบบอนุกรมจำเป็นต้องใช้เบราว์เซอร์ที่รองรับ Web Serial API (Chrome, Edge หรือ Firefox เวอร์ชัน 151 ขึ้นไป) หรือแอปพลิเคชัน Termix บนเดสก์ท็อป",
-    "hideHint": "คุณสามารถซ่อนแท็บ Serial ได้ที่ โปรไฟล์ผู้ใช้ > ลักษณะที่ปรากฏ > แถบด้านข้าง > การนำทาง",
-    "browserPickerHint": "คลิก \"เชื่อมต่อ\" แล้วเบราว์เซอร์ของคุณจะเปิดตัวเลือกพอร์ตเพื่อเลือกอุปกรณ์"
-  }
-}
diff --git a/plugins/serial/locales/translated/tr_TR.json b/plugins/serial/locales/translated/tr_TR.json
deleted file mode 100644
index 30edc85c7..000000000
--- a/plugins/serial/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Seri"
-  },
-  "serial": {
-    "title": "Seri",
-    "portLabel": "Port",
-    "portPlaceholder": "/dev/ttyUSB0 veya COM3",
-    "baudRateLabel": "Baud Hızı",
-    "dataBitsLabel": "Veri",
-    "stopBitsLabel": "Durdurma",
-    "parityLabel": "Eşlik",
-    "parityNone": "Yok",
-    "parityEven": "Çift",
-    "parityOdd": "Tek",
-    "connect": "Seri Bağlantıya Bağlan",
-    "disconnect": "Bağlantıyı Kes",
-    "refreshPorts": "Portları yenile",
-    "connected": "{{path}} ile {{baud}} baud hızında bağlandı.",
-    "disconnected": "Seri port bağlantısı kesildi.",
-    "connectionError": "Seri bağlantı noktası açılamadı",
-    "wsError": "WebSocket hatası",
-    "errorNoServerUrl": "Sunucu URL'si yapılandırılmamış",
-    "notSupportedTitle": "Seri Bağlantı Desteklenmiyor",
-    "notSupported": "Seri bağlantılar, Web Serial API desteği olan bir tarayıcı (Chrome, Edge veya Firefox 151+) ya da Termix masaüstü uygulaması gerektirir.",
-    "hideHint": "Seri sekmesini Kullanıcı Profili > Görünüm > Kenar Çubuğu > Gezinme altından gizleyebilirsiniz.",
-    "browserPickerHint": "Bağlan'a tıklayın, tarayıcınız cihazı seçmek için bir bağlantı noktası seçici açacaktır."
-  }
-}
diff --git a/plugins/serial/locales/translated/uk_UA.json b/plugins/serial/locales/translated/uk_UA.json
deleted file mode 100644
index 3487ac1f5..000000000
--- a/plugins/serial/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Серійний"
-  },
-  "serial": {
-    "title": "Серійний",
-    "portLabel": "Порт",
-    "portPlaceholder": "/dev/ttyUSB0 або COM3",
-    "baudRateLabel": "Швидкість передачі даних",
-    "dataBitsLabel": "Дані",
-    "stopBitsLabel": "СТІЙ",
-    "parityLabel": "Паритет",
-    "parityNone": "Жоден",
-    "parityEven": "Навіть",
-    "parityOdd": "Дивний",
-    "connect": "Підключення до послідовного порту",
-    "disconnect": "Відключитися",
-    "refreshPorts": "Оновити порти",
-    "connected": "Підключено до {{path}} зі швидкістю {{baud}} бод",
-    "disconnected": "Послідовний порт відключено",
-    "connectionError": "Не вдалося відкрити послідовний порт",
-    "wsError": "Помилка WebSocket",
-    "errorNoServerUrl": "URL-адреса сервера не налаштована",
-    "notSupportedTitle": "Серійний номер не підтримується",
-    "notSupported": "Для послідовних з’єднань потрібен браузер із підтримкою Web Serial API (Chrome, Edge або Firefox 151+) або настільний додаток Termix.",
-    "hideHint": "Ви можете приховати вкладку «Серійний номер» у розділі «Профіль користувача» > «Зовнішній вигляд» > «Бічна панель» > «Навігація».",
-    "browserPickerHint": "Натисніть «Підключитися», і ваш браузер відкриє вибір порту для вибору пристрою."
-  }
-}
diff --git a/plugins/serial/locales/translated/vi_VN.json b/plugins/serial/locales/translated/vi_VN.json
deleted file mode 100644
index a6140974c..000000000
--- a/plugins/serial/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "Nối tiếp"
-  },
-  "serial": {
-    "title": "Cổng nối tiếp",
-    "portLabel": "Cổng",
-    "portPlaceholder": "/dev/ttyUSB0 or COM3",
-    "baudRateLabel": "Tốc độ Baud",
-    "dataBitsLabel": "Dữ liệu",
-    "stopBitsLabel": "Bit dừng",
-    "parityLabel": "Kiểm tra chẵn lẻ",
-    "parityNone": "Không",
-    "parityEven": "Chẵn",
-    "parityOdd": "Lẻ",
-    "connect": "Kết nối cổng nối tiếp",
-    "disconnect": "Ngắt kết nối",
-    "refreshPorts": "Làm mới cổng",
-    "connected": "Đã kết nối tới {{path}} với tốc độ {{baud}} baud",
-    "disconnected": "Đã ngắt kết nối cổng nối tiếp",
-    "connectionError": "Không thể mở cổng nối tiếp",
-    "wsError": "Lỗi WebSocket",
-    "errorNoServerUrl": "Chưa cấu hình URL máy chủ",
-    "notSupportedTitle": "Không hỗ trợ Serial",
-    "notSupported": "Kết nối nối tiếp yêu cầu trình duyệt hỗ trợ Web Serial API (Chrome, Edge, hoặc Firefox 151+), hoặc ứng dụng Termix desktop.",
-    "hideHint": "Bạn có thể ẩn tab Serial trong Hồ sơ người dùng > Giao diện > Thanh bên > Điều hướng.",
-    "browserPickerHint": "Nhấn Kết nối và trình duyệt sẽ mở bộ chọn cổng để chọn thiết bị."
-  }
-}
diff --git a/plugins/serial/locales/translated/zh_CN.json b/plugins/serial/locales/translated/zh_CN.json
deleted file mode 100644
index 2fdf4476f..000000000
--- a/plugins/serial/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "串口"
-  },
-  "serial": {
-    "title": "串口",
-    "portLabel": "端口",
-    "portPlaceholder": "/dev/ttyUSB0 或 COM3",
-    "baudRateLabel": "波特率",
-    "dataBitsLabel": "数据",
-    "stopBitsLabel": "停止位",
-    "parityLabel": "奇偶校验",
-    "parityNone": "无",
-    "parityEven": "偶校验",
-    "parityOdd": "奇校验",
-    "connect": "连接串口",
-    "disconnect": "断开",
-    "refreshPorts": "刷新端口",
-    "connected": "已连接到 {{path}}，波特率 {{baud}}",
-    "disconnected": "串口已断开",
-    "connectionError": "打开串口失败",
-    "wsError": "WebSocket 错误",
-    "errorNoServerUrl": "未配置服务器 URL",
-    "notSupportedTitle": "不支持串口",
-    "notSupported": "串口连接需要支持 Web Serial API 的浏览器（Chrome、Edge 或 Firefox 151+），或者 Termix 桌面应用。",
-    "hideHint": "您可以在用户资料 > 外观 > 侧边栏 > 导航中隐藏串口标签页。",
-    "browserPickerHint": "点击连接，您的浏览器将打开端口选择器以选择设备。"
-  }
-}
diff --git a/plugins/serial/locales/translated/zh_TW.json b/plugins/serial/locales/translated/zh_TW.json
deleted file mode 100644
index 1258a15c0..000000000
--- a/plugins/serial/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-  "nav": {
-    "serial": "序列"
-  },
-  "serial": {
-    "title": "序列",
-    "portLabel": "連接埠",
-    "portPlaceholder": "/dev/ttyUSB0 or COM3",
-    "baudRateLabel": "鮑率",
-    "dataBitsLabel": "資料位元",
-    "stopBitsLabel": "停止位元",
-    "parityLabel": "同位檢查",
-    "parityNone": "無",
-    "parityEven": "偶",
-    "parityOdd": "奇",
-    "connect": "連線至序列埠",
-    "disconnect": "中斷連線",
-    "refreshPorts": "重新整理連接埠",
-    "connected": "已連線至 {{path}}，鮑率 {{baud}}",
-    "disconnected": "序列埠已中斷連線",
-    "connectionError": "開啟序列埠失敗",
-    "wsError": "WebSocket 錯誤",
-    "errorNoServerUrl": "未設定伺服器網址",
-    "notSupportedTitle": "不支援序列埠",
-    "notSupported": "序列連線需要支援 Web Serial API 的瀏覽器 (Chrome、Edge 或 Firefox 151+) 或 Termix 桌面應用程式。",
-    "hideHint": "您可以在「使用者設定檔 > 外觀 > 側邊欄 > 導覽」中隱藏序列索引標籤。",
-    "browserPickerHint": "按一下連線，瀏覽器會開啟連接埠選擇器讓您選取裝置。"
-  }
-}
diff --git a/plugins/serial/manifest.json b/plugins/serial/manifest.json
deleted file mode 100644
index bca945f96..000000000
--- a/plugins/serial/manifest.json
+++ /dev/null
@@ -1,40 +0,0 @@
-{
-  "id": "serial",
-  "name": "Serial",
-  "version": "1.0.0",
-  "description": "Open a serial console to a device plugged into your computer.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Terminal",
-  "icon": "Usb",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": ["network:serve", "device:serial", "ui:surface"],
-  "nativeDependencies": ["serialport"],
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"],
-  "contributes": {
-    "tabs": [
-      {
-        "id": "serial",
-        "titleKey": "nav.serial",
-        "icon": "Usb",
-        "openFrom": ["rail"]
-      }
-    ],
-    "panels": [
-      {
-        "id": "serial",
-        "titleKey": "nav.serial",
-        "icon": "Usb"
-      }
-    ],
-    "uses": ["terminal.resolveTheme"]
-  },
-  "desktop": "local"
-}
diff --git a/plugins/serial/package.json b/plugins/serial/package.json
deleted file mode 100644
index 314fec69f..000000000
--- a/plugins/serial/package.json
+++ /dev/null
@@ -1,44 +0,0 @@
-{
-  "name": "@termix-plugin/serial",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "@xterm/addon-fit": "^0.11.0",
-    "@xterm/xterm": "^6.0.0",
-    "lucide-react": "^1.33.0",
-    "react-xtermjs": "^1.0.10",
-    "serialport": "^13.0.0"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "react": "^19.2.8",
-    "ws": "^8.21.3"
-  },
-  "termix": {
-    "patches": [
-      "xterm-android-ime"
-    ]
-  },
-  "overrides": {
-    "react-xtermjs": {
-      "@xterm/xterm": "$@xterm/xterm"
-    }
-  }
-}
diff --git a/plugins/serial/src/backend/index.ts b/plugins/serial/src/backend/index.ts
deleted file mode 100644
index 17f46a0a9..000000000
--- a/plugins/serial/src/backend/index.ts
+++ /dev/null
@@ -1,12 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { createSerialSession } from "./session.js";
-
-export async function activate(ctx: PluginContext): Promise<void> {
-  ctx.ws.route("/console", createSerialSession(ctx));
-  ctx.log.info("Serial console mounted at /plugin-ws/serial/console");
-}
-
-export async function deactivate(): Promise<void> {
-  // The WS route and every open socket are torn down by core: see
-  // src/backend/plugins/ws.ts. Nothing here outlives activate().
-}
diff --git a/plugins/serial/src/backend/session.ts b/plugins/serial/src/backend/session.ts
deleted file mode 100644
index b869f7ac0..000000000
--- a/plugins/serial/src/backend/session.ts
+++ /dev/null
@@ -1,169 +0,0 @@
-import type { WebSocket } from "ws";
-import { SerialPort } from "serialport";
-import type {
-  PluginContext,
-  PluginWebSocketConnection,
-} from "@termix/plugin-sdk/backend";
-import { parseWsMessage } from "./ws-message.js";
-
-interface SerialConnectData {
-  path: string;
-  baudRate: number;
-  dataBits?: 5 | 6 | 7 | 8;
-  stopBits?: 1 | 2;
-  parity?: "none" | "even" | "odd";
-}
-
-/**
- * Handles one /plugin-ws/serial/console connection. Auth already ran (core's
- * ctx.ws.route authenticates before this is called), so every message here
- * only has to decide whether to touch the actual hardware.
- */
-export function createSerialSession(ctx: PluginContext) {
-  return async (connection: PluginWebSocketConnection): Promise<void> => {
-    const ws = connection.socket as WebSocket;
-    let port: SerialPort | null = null;
-
-    const send = (msg: object) => {
-      if (ws.readyState === ws.OPEN) {
-        ws.send(JSON.stringify(msg));
-      }
-    };
-
-    const cleanup = () => {
-      if (port?.isOpen) {
-        port.close();
-      }
-      port = null;
-    };
-
-    if (!connection.isDataUnlocked()) {
-      send({ type: "error", data: "Data locked" });
-      ws.close(1008, "Data access required");
-      return;
-    }
-
-    ws.on("message", async (raw) => {
-      let type: string;
-      let data: unknown;
-      try {
-        ({ type, data } = parseWsMessage(raw));
-      } catch {
-        return;
-      }
-
-      if (!connection.isDataUnlocked()) {
-        send({ type: "error", data: "Data access expired" });
-        ws.close(1008, "Data access expired");
-        return;
-      }
-
-      try {
-        switch (type) {
-          case "list_ports": {
-            await ctx.capabilities.require("device:serial");
-            try {
-              const ports = await SerialPort.list();
-              send({ type: "ports_list", data: ports });
-            } catch (err) {
-              send({
-                type: "error",
-                data: errorMessage(err, "Failed to list ports"),
-              });
-            }
-            break;
-          }
-
-          case "connect": {
-            await ctx.capabilities.require("device:serial");
-
-            if (port?.isOpen) {
-              port.close();
-              port = null;
-            }
-
-            const cfg = data as SerialConnectData;
-            if (!cfg?.path || !cfg?.baudRate) {
-              send({ type: "error", data: "Missing port path or baud rate" });
-              break;
-            }
-
-            try {
-              const opened = new SerialPort({
-                path: cfg.path,
-                baudRate: cfg.baudRate,
-                dataBits: cfg.dataBits ?? 8,
-                stopBits: cfg.stopBits ?? 1,
-                parity: cfg.parity ?? "none",
-                autoOpen: false,
-              });
-              port = opened;
-
-              opened.open((err) => {
-                if (err) {
-                  ctx.log.error(`Serial port open failed for ${cfg.path}`, err);
-                  send({ type: "error", data: err.message });
-                  port = null;
-                  return;
-                }
-                ctx.log.info(
-                  `Serial port opened: ${cfg.path} at ${cfg.baudRate} baud`,
-                );
-                send({ type: "connected" });
-              });
-
-              opened.on("data", (chunk: Buffer) => {
-                send({ type: "data", data: chunk.toString("binary") });
-              });
-
-              opened.on("error", (err) => {
-                send({ type: "error", data: err.message });
-              });
-
-              opened.on("close", () => {
-                send({ type: "disconnected" });
-                port = null;
-              });
-            } catch (err) {
-              send({
-                type: "error",
-                data: errorMessage(err, "Failed to open serial port"),
-              });
-            }
-            break;
-          }
-
-          case "input": {
-            if (!port?.isOpen) break;
-            const input = typeof data === "string" ? data : "";
-            if (!input) break;
-            port.write(Buffer.from(input, "binary"), (err) => {
-              if (err) send({ type: "error", data: err.message });
-            });
-            break;
-          }
-
-          case "disconnect": {
-            cleanup();
-            send({ type: "disconnected" });
-            break;
-          }
-        }
-      } catch (err) {
-        ctx.log.error("Error handling serial WebSocket message", err);
-        send({
-          type: "error",
-          data:
-            err instanceof Error ? err.message : "Failed to process message",
-        });
-      }
-    });
-
-    ws.on("close", cleanup);
-    ws.on("error", cleanup);
-  };
-}
-
-function errorMessage(err: unknown, fallback: string): string {
-  return err instanceof Error ? err.message : fallback;
-}
diff --git a/plugins/serial/src/backend/ws-message.ts b/plugins/serial/src/backend/ws-message.ts
deleted file mode 100644
index ad8907d01..000000000
--- a/plugins/serial/src/backend/ws-message.ts
+++ /dev/null
@@ -1,38 +0,0 @@
-import type { RawData } from "ws";
-
-// Control messages here are tiny (a path, a baud rate) or raw terminal input,
-// bounded by what a user can type or paste, so anything larger is abuse.
-const MAX_MESSAGE_BYTES = 1024 * 1024;
-
-function rawByteLength(raw: RawData): number {
-  if (Buffer.isBuffer(raw)) return raw.length;
-  if (Array.isArray(raw))
-    return raw.reduce((sum, part) => sum + part.length, 0);
-  if (raw instanceof ArrayBuffer) return raw.byteLength;
-  return 0;
-}
-
-/** Parses a WebSocket frame into `{ type, data }`, throwing on anything malformed. */
-export function parseWsMessage(raw: RawData): { type: string; data: unknown } {
-  if (rawByteLength(raw) > MAX_MESSAGE_BYTES) {
-    throw new Error("Message too large");
-  }
-
-  let parsed: unknown;
-  try {
-    parsed = JSON.parse(raw.toString());
-  } catch {
-    throw new Error("Invalid JSON");
-  }
-
-  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
-    throw new Error("Message must be a JSON object");
-  }
-
-  const { type, data } = parsed as { type?: unknown; data?: unknown };
-  if (typeof type !== "string") {
-    throw new Error("Message type must be a string");
-  }
-
-  return { type, data };
-}
diff --git a/plugins/serial/src/frontend/Serial.tsx b/plugins/serial/src/frontend/Serial.tsx
deleted file mode 100644
index 6be1b9717..000000000
--- a/plugins/serial/src/frontend/Serial.tsx
+++ /dev/null
@@ -1,358 +0,0 @@
-import {
-  useEffect,
-  useRef,
-  useCallback,
-  forwardRef,
-  useImperativeHandle,
-} from "react";
-import { useXTerm } from "react-xtermjs";
-import { FitAddon } from "@xterm/addon-fit";
-import { TriangleAlert } from "lucide-react";
-import {
-  invokeAction,
-  useTranslation,
-  useTheme,
-} from "@termix/plugin-sdk/frontend";
-import type { SerialConfig, SerialHandle } from "./types.js";
-import { isElectron } from "./electron.js";
-import { resolveSerialWsUrl } from "./transport.js";
-
-interface SerialLook {
-  colors: Record<string, string | undefined>;
-  fontFamily: string;
-  fontSize: number;
-}
-
-const FALLBACK_COLORS = {
-  background: "#0c0d0b",
-  foreground: "#fafafa",
-  cursor: "#fafafa",
-  cursorAccent: "#0c0d0b",
-};
-const FALLBACK_FONT = '"SF Mono", Consolas, "Liberation Mono", monospace';
-
-type WebSerialPort = {
-  open(options: {
-    baudRate: number;
-    dataBits?: number;
-    stopBits?: number;
-    parity?: string;
-  }): Promise<void>;
-  close(): Promise<void>;
-  readable: ReadableStream<Uint8Array> | null;
-  writable: WritableStream<Uint8Array> | null;
-};
-
-interface SerialProps {
-  config: SerialConfig;
-  isVisible: boolean;
-  instanceId: string;
-}
-
-export const Serial = forwardRef<SerialHandle, SerialProps>(function Serial(
-  { config, isVisible, instanceId },
-  ref,
-) {
-  const { t } = useTranslation();
-  const { theme: appTheme } = useTheme();
-  const { instance: terminal, ref: xtermRef } = useXTerm();
-  const fitAddonRef = useRef<FitAddon | null>(null);
-  const wsRef = useRef<WebSocket | null>(null);
-  const connectedRef = useRef(false);
-  const webSerialReaderRef = useRef<ReadableStreamDefaultReader | null>(null);
-  const webSerialWriterRef = useRef<WritableStreamDefaultWriter | null>(null);
-  const webSerialPortRef = useRef<WebSerialPort | null>(null);
-  const containerRef = useRef<HTMLDivElement | null>(null);
-
-  const useWebSerial = !isElectron();
-
-  const write = useCallback(
-    (text: string) => {
-      terminal?.write(text);
-    },
-    [terminal],
-  );
-
-  useEffect(() => {
-    if (!terminal) return;
-    let active = true;
-    terminal.options.theme = { ...FALLBACK_COLORS };
-    terminal.options.fontFamily = FALLBACK_FONT;
-    terminal.options.fontSize = 14;
-    // The user's terminal look from the SSH terminal, when it is running.
-    void invokeAction("terminal.resolveTheme", { appTheme })
-      .then((look) => {
-        const resolved = look as SerialLook | undefined;
-        if (!active || !resolved) return;
-        terminal.options.theme = { ...resolved.colors };
-        terminal.options.fontFamily = resolved.fontFamily;
-        terminal.options.fontSize = resolved.fontSize;
-        fitAddonRef.current?.fit();
-      })
-      .catch(() => {});
-    return () => {
-      active = false;
-    };
-  }, [terminal, appTheme]);
-
-  // ── WebSocket (Electron) path ──────────────────────────────────────────
-
-  const disconnectWs = useCallback(() => {
-    if (wsRef.current) {
-      wsRef.current.onclose = null;
-      wsRef.current.close();
-      wsRef.current = null;
-    }
-    connectedRef.current = false;
-  }, []);
-
-  const connectWs = useCallback(async () => {
-    disconnectWs();
-    const target = await resolveSerialWsUrl();
-    if (!target) {
-      write(`\r\n\x1b[31m${t("serial.errorNoServerUrl")}\x1b[0m\r\n`);
-      return;
-    }
-
-    const ws = new WebSocket(target.url, target.protocols);
-    wsRef.current = ws;
-
-    ws.onopen = () => {
-      ws.send(JSON.stringify({ type: "connect", data: config }));
-    };
-
-    ws.onmessage = (ev) => {
-      try {
-        const msg = JSON.parse(ev.data as string) as {
-          type: string;
-          data?: unknown;
-        };
-        switch (msg.type) {
-          case "connected":
-            connectedRef.current = true;
-            write(
-              `\x1b[32m${t("serial.connected", { path: config.path, baud: config.baudRate })}\x1b[0m\r\n`,
-            );
-            break;
-          case "data":
-            if (typeof msg.data === "string") write(msg.data);
-            break;
-          case "disconnected":
-            connectedRef.current = false;
-            write(`\r\n\x1b[33m${t("serial.disconnected")}\x1b[0m\r\n`);
-            break;
-          case "error":
-            write(
-              `\r\n\x1b[31m${t("serial.connectionError")}: ${msg.data as string}\x1b[0m\r\n`,
-            );
-            break;
-        }
-      } catch {
-        // ignore malformed messages
-      }
-    };
-
-    ws.onclose = () => {
-      connectedRef.current = false;
-    };
-
-    ws.onerror = () => {
-      write(`\r\n\x1b[31m${t("serial.wsError")}\x1b[0m\r\n`);
-    };
-  }, [config, disconnectWs, t, write]);
-
-  // ── Web Serial API path ────────────────────────────────────────────────
-
-  const disconnectWebSerial = useCallback(async () => {
-    try {
-      webSerialReaderRef.current?.cancel();
-      webSerialWriterRef.current?.releaseLock();
-      await webSerialPortRef.current?.close();
-    } catch {
-      // best-effort
-    }
-    webSerialReaderRef.current = null;
-    webSerialWriterRef.current = null;
-    webSerialPortRef.current = null;
-    connectedRef.current = false;
-  }, []);
-
-  const connectWebSerial = useCallback(async () => {
-    await disconnectWebSerial();
-
-    if (!("serial" in navigator)) {
-      write(`\r\n\x1b[31m${t("serial.notSupported")}\x1b[0m\r\n`);
-      return;
-    }
-
-    try {
-      const serial = navigator.serial as {
-        requestPort(): Promise<WebSerialPort>;
-      };
-      const port = await serial.requestPort();
-      await port.open({
-        baudRate: config.baudRate,
-        dataBits: config.dataBits,
-        stopBits: config.stopBits,
-        parity: config.parity === "none" ? "none" : config.parity,
-      });
-
-      webSerialPortRef.current = port;
-      connectedRef.current = true;
-      write(
-        `\x1b[32m${t("serial.connected", { path: config.path || "serial", baud: config.baudRate })}\x1b[0m\r\n`,
-      );
-
-      const reader = port.readable!.getReader();
-      webSerialReaderRef.current = reader;
-      const decoder = new TextDecoder();
-
-      (async () => {
-        try {
-          for (;;) {
-            const { value, done } = await reader.read();
-            if (done) break;
-            write(decoder.decode(value));
-          }
-        } catch {
-          // port closed
-        } finally {
-          reader.releaseLock();
-          connectedRef.current = false;
-          write(`\r\n\x1b[33m${t("serial.disconnected")}\x1b[0m\r\n`);
-        }
-      })();
-
-      const writer = port.writable!.getWriter();
-      webSerialWriterRef.current = writer;
-    } catch (err) {
-      if (err instanceof Error && err.name !== "NotFoundError") {
-        write(
-          `\r\n\x1b[31m${t("serial.connectionError")}: ${err.message}\x1b[0m\r\n`,
-        );
-      }
-    }
-  }, [config, disconnectWebSerial, t, write]);
-
-  // ── Unified connect/disconnect ─────────────────────────────────────────
-
-  const connect = useCallback(() => {
-    if (useWebSerial) {
-      connectWebSerial();
-    } else {
-      void connectWs();
-    }
-  }, [useWebSerial, connectWebSerial, connectWs]);
-
-  const disconnect = useCallback(() => {
-    if (useWebSerial) {
-      disconnectWebSerial();
-    } else {
-      if (wsRef.current?.readyState === WebSocket.OPEN) {
-        wsRef.current.send(JSON.stringify({ type: "disconnect" }));
-      }
-      disconnectWs();
-    }
-  }, [useWebSerial, disconnectWebSerial, disconnectWs]);
-
-  const reconnect = useCallback(() => {
-    disconnect();
-    connect();
-  }, [disconnect, connect]);
-
-  useImperativeHandle(ref, () => ({
-    connect,
-    disconnect,
-    reconnect,
-    isConnected: () => connectedRef.current,
-    sendInput: (data: string) => {
-      if (useWebSerial) {
-        const encoder = new TextEncoder();
-        webSerialWriterRef.current?.write(encoder.encode(data)).catch(() => {});
-      } else if (wsRef.current?.readyState === WebSocket.OPEN) {
-        wsRef.current.send(JSON.stringify({ type: "input", data }));
-      }
-    },
-  }));
-
-  // ── Terminal setup ─────────────────────────────────────────────────────
-
-  useEffect(() => {
-    if (!terminal) return;
-
-    const fitAddon = new FitAddon();
-    fitAddonRef.current = fitAddon;
-    terminal.loadAddon(fitAddon);
-    terminal.options.cursorBlink = true;
-    terminal.options.scrollback = 10000;
-
-    terminal.onData((data) => {
-      if (!connectedRef.current) return;
-      if (useWebSerial) {
-        const encoder = new TextEncoder();
-        webSerialWriterRef.current?.write(encoder.encode(data)).catch(() => {});
-      } else if (wsRef.current?.readyState === WebSocket.OPEN) {
-        wsRef.current.send(JSON.stringify({ type: "input", data }));
-      }
-    });
-
-    connect();
-
-    return () => {
-      disconnect();
-    };
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [terminal, instanceId]);
-
-  // ── Fit on visibility change ───────────────────────────────────────────
-
-  useEffect(() => {
-    if (!isVisible || !fitAddonRef.current) return;
-    try {
-      fitAddonRef.current.fit();
-    } catch {
-      // ignore
-    }
-  }, [isVisible]);
-
-  // ── ResizeObserver ─────────────────────────────────────────────────────
-
-  useEffect(() => {
-    if (!containerRef.current || !terminal) return;
-    const observer = new ResizeObserver(() => {
-      try {
-        fitAddonRef.current?.fit();
-      } catch {
-        // ignore
-      }
-    });
-    observer.observe(containerRef.current);
-    return () => observer.disconnect();
-  }, [terminal]);
-
-  // ── Not supported (Firefox etc.) ──────────────────────────────────────
-
-  if (useWebSerial && !("serial" in navigator)) {
-    return (
-      <div className="flex flex-col items-center justify-center flex-1 gap-3 p-6 text-center">
-        <div className="size-10 rounded-full bg-muted/40 flex items-center justify-center">
-          <TriangleAlert className="size-5 text-muted-foreground/50" />
-        </div>
-        <div className="flex flex-col gap-1">
-          <span className="text-sm font-semibold text-foreground">
-            {t("serial.notSupportedTitle")}
-          </span>
-          <span className="text-xs text-muted-foreground max-w-xs">
-            {t("serial.notSupported")}
-          </span>
-        </div>
-      </div>
-    );
-  }
-
-  return (
-    <div ref={containerRef} className="flex h-full w-full">
-      <div ref={xtermRef} className="flex-1 min-h-0" />
-    </div>
-  );
-});
diff --git a/plugins/serial/src/frontend/SerialPanel.tsx b/plugins/serial/src/frontend/SerialPanel.tsx
deleted file mode 100644
index 41317b1c3..000000000
--- a/plugins/serial/src/frontend/SerialPanel.tsx
+++ /dev/null
@@ -1,325 +0,0 @@
-import { useState, useEffect, useCallback } from "react";
-import { RefreshCw, Usb, TriangleAlert } from "lucide-react";
-import { Input, Select2 } from "@termix/plugin-sdk/ui";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import type { SerialConfig } from "./types.js";
-import { isElectron } from "./electron.js";
-import { resolveSerialWsUrl } from "./transport.js";
-
-const BAUD_RATES = [
-  300, 1200, 2400, 4800, 9600, 19200, 38400, 57600, 115200, 230400, 460800,
-  921600,
-];
-
-interface SerialPanelProps {
-  onConnect: (config: SerialConfig) => void;
-}
-
-// In Chrome/Edge the Web Serial API shows its own native port picker on requestPort(),
-// so getPorts() only returns previously-granted ports. We never need the user to type
-// a path — the browser handles selection at connect time.
-const useWebSerial = !isElectron() && "serial" in navigator;
-const serialUnsupported = !isElectron() && !("serial" in navigator);
-
-export function SerialPanel({ onConnect }: SerialPanelProps) {
-  const { t } = useTranslation();
-  const [path, setPath] = useState("");
-  const [baudRate, setBaudRate] = useState(115200);
-  const [dataBits, setDataBits] = useState<5 | 6 | 7 | 8>(8);
-  const [stopBits, setStopBits] = useState<1 | 2>(1);
-  const [parity, setParity] = useState<"none" | "even" | "odd">("none");
-  // Electron only: ports discovered from the backend
-  const [availablePorts, setAvailablePorts] = useState<string[]>([]);
-  const [loadingPorts, setLoadingPorts] = useState(false);
-
-  const refreshPorts = useCallback(async () => {
-    if (!isElectron()) return;
-    setLoadingPorts(true);
-    const target = await resolveSerialWsUrl();
-    if (!target) {
-      setLoadingPorts(false);
-      return;
-    }
-
-    const ws = new WebSocket(target.url, target.protocols);
-    ws.onopen = () => ws.send(JSON.stringify({ type: "list_ports" }));
-    ws.onmessage = (ev) => {
-      try {
-        const msg = JSON.parse(ev.data as string) as {
-          type: string;
-          data?: { path: string }[];
-        };
-        if (msg.type === "ports_list" && Array.isArray(msg.data)) {
-          const paths = msg.data.map((p) => p.path);
-          setAvailablePorts(paths);
-          setPath((current) => current || (paths[0] ?? current));
-        }
-      } catch {
-        // ignore
-      } finally {
-        ws.close();
-        setLoadingPorts(false);
-      }
-    };
-    ws.onerror = () => setLoadingPorts(false);
-  }, []);
-
-  useEffect(() => {
-    if (isElectron()) void refreshPorts();
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, []);
-
-  const connect = () => {
-    // For Web Serial, path is irrelevant — the browser picker handles it.
-    // We pass an empty string; Serial.tsx calls requestPort() itself.
-    if (useWebSerial) {
-      onConnect({ path: "", baudRate, dataBits, stopBits, parity });
-      return;
-    }
-    const finalPath = path.trim();
-    if (!finalPath) return;
-    onConnect({ path: finalPath, baudRate, dataBits, stopBits, parity });
-  };
-
-  // ── Not supported (Firefox, Safari, etc.) ─────────────────────────────
-
-  if (serialUnsupported) {
-    return (
-      <div className="flex flex-col flex-1 min-h-0 overflow-y-auto">
-        <div className="flex flex-col gap-3 p-3">
-          <div className="flex flex-col gap-2 rounded border border-destructive/30 bg-destructive/5 p-3">
-            <div className="flex items-center gap-2">
-              <TriangleAlert className="size-3.5 text-destructive shrink-0" />
-              <span className="text-xs font-semibold text-destructive">
-                {t("serial.notSupportedTitle")}
-              </span>
-            </div>
-            <p className="text-[11px] text-muted-foreground leading-relaxed">
-              {t("serial.notSupported")}
-            </p>
-            <p className="text-[11px] text-muted-foreground leading-relaxed">
-              {t("serial.hideHint")}
-            </p>
-          </div>
-        </div>
-      </div>
-    );
-  }
-
-  // ── Web Serial (Chrome / Edge) ─────────────────────────────────────────
-
-  if (useWebSerial) {
-    return (
-      <div className="flex flex-col flex-1 min-h-0 overflow-y-auto">
-        <div className="flex flex-col gap-3 p-3">
-          <p className="text-[11px] text-muted-foreground leading-relaxed">
-            {t("serial.browserPickerHint")}
-          </p>
-
-          <div className="flex flex-col gap-1">
-            <label className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
-              {t("serial.baudRateLabel")}
-            </label>
-            <Select2
-              value={baudRate}
-              onChange={(e) => setBaudRate(Number(e.target.value))}
-              className="flex h-7 w-full border border-border bg-background px-2.5 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-            >
-              {BAUD_RATES.map((r) => (
-                <option key={r} value={r}>
-                  {r}
-                </option>
-              ))}
-            </Select2>
-          </div>
-
-          <div className="grid grid-cols-3 gap-2">
-            <div className="flex flex-col gap-1">
-              <label className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
-                {t("serial.dataBitsLabel")}
-              </label>
-              <Select2
-                value={dataBits}
-                onChange={(e) =>
-                  setDataBits(Number(e.target.value) as 5 | 6 | 7 | 8)
-                }
-                className="flex h-7 w-full border border-border bg-background px-2.5 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-              >
-                {([5, 6, 7, 8] as const).map((b) => (
-                  <option key={b} value={b}>
-                    {b}
-                  </option>
-                ))}
-              </Select2>
-            </div>
-
-            <div className="flex flex-col gap-1">
-              <label className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
-                {t("serial.stopBitsLabel")}
-              </label>
-              <Select2
-                value={stopBits}
-                onChange={(e) => setStopBits(Number(e.target.value) as 1 | 2)}
-                className="flex h-7 w-full border border-border bg-background px-2.5 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-              >
-                <option value={1}>1</option>
-                <option value={2}>2</option>
-              </Select2>
-            </div>
-
-            <div className="flex flex-col gap-1">
-              <label className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
-                {t("serial.parityLabel")}
-              </label>
-              <Select2
-                value={parity}
-                onChange={(e) =>
-                  setParity(e.target.value as "none" | "even" | "odd")
-                }
-                className="flex h-7 w-full border border-border bg-background px-2.5 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-              >
-                <option value="none">{t("serial.parityNone")}</option>
-                <option value="even">{t("serial.parityEven")}</option>
-                <option value="odd">{t("serial.parityOdd")}</option>
-              </Select2>
-            </div>
-          </div>
-
-          <button
-            onClick={connect}
-            className="flex items-center justify-center gap-1.5 h-7 w-full border border-accent-brand/40 bg-accent-brand/10 text-accent-brand text-xs font-semibold hover:bg-accent-brand/20 transition-colors mt-1"
-          >
-            <Usb className="size-3.5" />
-            {t("serial.connect")}
-          </button>
-        </div>
-      </div>
-    );
-  }
-
-  // ── Electron (backend serialport) ─────────────────────────────────────
-
-  return (
-    <div className="flex flex-col flex-1 min-h-0 overflow-y-auto">
-      <div className="flex flex-col gap-3 p-3">
-        <div className="flex flex-col gap-1">
-          <div className="flex items-center justify-between">
-            <label className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
-              {t("serial.portLabel")}
-            </label>
-            <button
-              onClick={() => void refreshPorts()}
-              className="text-muted-foreground hover:text-foreground transition-colors"
-              title={t("serial.refreshPorts")}
-            >
-              <RefreshCw
-                className={`size-3 ${loadingPorts ? "animate-spin" : ""}`}
-              />
-            </button>
-          </div>
-          {availablePorts.length > 0 && (
-            <Select2
-              value={path}
-              onChange={(e) => setPath(e.target.value)}
-              className="flex h-7 w-full border border-border bg-background px-2.5 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-            >
-              <option value="">{t("serial.portPlaceholder")}</option>
-              {availablePorts.map((p) => (
-                <option key={p} value={p}>
-                  {p}
-                </option>
-              ))}
-            </Select2>
-          )}
-          <Input
-            placeholder={t("serial.portPlaceholder")}
-            value={path}
-            onChange={(e) => setPath(e.target.value)}
-            onKeyDown={(e) => {
-              if (e.key === "Enter") connect();
-            }}
-            className="h-7 text-xs font-mono"
-          />
-        </div>
-
-        <div className="flex flex-col gap-1">
-          <label className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
-            {t("serial.baudRateLabel")}
-          </label>
-          <Select2
-            value={baudRate}
-            onChange={(e) => setBaudRate(Number(e.target.value))}
-            className="flex h-7 w-full border border-border bg-background px-2.5 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-          >
-            {BAUD_RATES.map((r) => (
-              <option key={r} value={r}>
-                {r}
-              </option>
-            ))}
-          </Select2>
-        </div>
-
-        <div className="grid grid-cols-3 gap-2">
-          <div className="flex flex-col gap-1">
-            <label className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
-              {t("serial.dataBitsLabel")}
-            </label>
-            <Select2
-              value={dataBits}
-              onChange={(e) =>
-                setDataBits(Number(e.target.value) as 5 | 6 | 7 | 8)
-              }
-              className="flex h-7 w-full border border-border bg-background px-2.5 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-            >
-              {([5, 6, 7, 8] as const).map((b) => (
-                <option key={b} value={b}>
-                  {b}
-                </option>
-              ))}
-            </Select2>
-          </div>
-
-          <div className="flex flex-col gap-1">
-            <label className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
-              {t("serial.stopBitsLabel")}
-            </label>
-            <Select2
-              value={stopBits}
-              onChange={(e) => setStopBits(Number(e.target.value) as 1 | 2)}
-              className="flex h-7 w-full border border-border bg-background px-2.5 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-            >
-              <option value={1}>1</option>
-              <option value={2}>2</option>
-            </Select2>
-          </div>
-
-          <div className="flex flex-col gap-1">
-            <label className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
-              {t("serial.parityLabel")}
-            </label>
-            <Select2
-              value={parity}
-              onChange={(e) =>
-                setParity(e.target.value as "none" | "even" | "odd")
-              }
-              className="flex h-7 w-full border border-border bg-background px-2.5 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-            >
-              <option value="none">{t("serial.parityNone")}</option>
-              <option value="even">{t("serial.parityEven")}</option>
-              <option value="odd">{t("serial.parityOdd")}</option>
-            </Select2>
-          </div>
-        </div>
-
-        <button
-          onClick={connect}
-          disabled={!path.trim()}
-          className="flex items-center justify-center gap-1.5 h-7 w-full border border-accent-brand/40 bg-accent-brand/10 text-accent-brand text-xs font-semibold hover:bg-accent-brand/20 transition-colors disabled:opacity-40 disabled:cursor-not-allowed mt-1"
-        >
-          <Usb className="size-3.5" />
-          {t("serial.connect")}
-        </button>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/serial/src/frontend/electron.ts b/plugins/serial/src/frontend/electron.ts
deleted file mode 100644
index 7cfbd6d90..000000000
--- a/plugins/serial/src/frontend/electron.ts
+++ /dev/null
@@ -1,16 +0,0 @@
-type ElectronWindow = Window &
-  typeof globalThis & {
-    IS_ELECTRON?: boolean;
-    electronAPI?: { isElectron?: boolean };
-  };
-
-/** Serial is always local: the device is physically attached to this desktop machine. */
-export function isElectron(): boolean {
-  if (typeof window === "undefined") return false;
-  const win = window as ElectronWindow;
-  return (
-    win.IS_ELECTRON === true ||
-    !!win.electronAPI ||
-    win.electronAPI?.isElectron === true
-  );
-}
diff --git a/plugins/serial/src/frontend/index.tsx b/plugins/serial/src/frontend/index.tsx
deleted file mode 100644
index fa4daf74c..000000000
--- a/plugins/serial/src/frontend/index.tsx
+++ /dev/null
@@ -1,84 +0,0 @@
-// The terminal surfaces need xterm's own stylesheet.
-import "@xterm/xterm/css/xterm.css";
-import type { Ref } from "react";
-import { Usb } from "lucide-react";
-import type {
-  PanelProps,
-  PluginHostRecord,
-  TabProps,
-  TermixApp,
-} from "@termix/plugin-sdk/frontend";
-import { Serial } from "./Serial.js";
-import { SerialPanel } from "./SerialPanel.js";
-import { setSerialWsUrl } from "./transport.js";
-import type { SerialConfig, SerialHandle } from "./types.js";
-
-/**
- * A per-connection synthetic host, never a real DB host. The shell only
- * opens a genuinely hostless (host: null) tab as a singleton, and a serial
- * console is not one: a user can have several open at once, each with its
- * own device and settings. A distinct id per connection is what keeps them
- * separate tabs.
- */
-function buildPseudoHost(config: SerialConfig): PluginHostRecord {
-  return {
-    id: `serial-${Date.now()}`,
-    name: config.path
-      ? `${config.path} (${config.baudRate})`
-      : `Serial (${config.baudRate})`,
-    ip: "",
-    port: 0,
-  };
-}
-
-function SerialPanelView({ shell }: PanelProps) {
-  return (
-    <SerialPanel
-      onConnect={(config) => {
-        shell.openTab(buildPseudoHost(config), "serial", {
-          forceNewTab: true,
-          data: { serialConfig: config },
-        });
-      }}
-    />
-  );
-}
-
-function SerialTabView({ tab, isVisible, handleRef }: TabProps) {
-  const config = tab.data?.serialConfig as SerialConfig | undefined;
-  if (!config) return null;
-  return (
-    <Serial
-      ref={handleRef as Ref<SerialHandle>}
-      config={config}
-      isVisible={isVisible}
-      instanceId={tab.id}
-    />
-  );
-}
-
-export function activate(app: TermixApp): void {
-  setSerialWsUrl(app.wsUrl);
-  app.onDispose(() => setSerialWsUrl(null));
-
-  app.registerRailItem({
-    id: "serial",
-    icon: Usb,
-    titleKey: "nav.serial",
-    after: "quick-connect",
-    separatorAfter: true,
-  });
-
-  app.registerPanel("serial", SerialPanelView);
-
-  app.registerTab("serial", SerialTabView, {
-    icon: Usb,
-    titleKey: "nav.serial",
-    session: true,
-    // Reconnecting to a COM port automatically after a restart is not a
-    // workflow anyone asked for, and there's no host to restore against
-    // anyway, so a serial tab is a local, ephemeral session like the
-    // desktop app's local terminal rather than something workspaces saves.
-    inLayouts: false,
-  });
-}
diff --git a/plugins/serial/src/frontend/transport.ts b/plugins/serial/src/frontend/transport.ts
deleted file mode 100644
index 79fd3ce25..000000000
--- a/plugins/serial/src/frontend/transport.ts
+++ /dev/null
@@ -1,23 +0,0 @@
-import type { TermixApp } from "@termix/plugin-sdk/frontend";
-
-/**
- * The live app.wsUrl, for components that are defined at module scope rather
- * than inside activate(). Set on activate, cleared on dispose, the same
- * pattern the tunnels plugin uses for app.api.
- */
-let wsUrl: TermixApp["wsUrl"] | null = null;
-
-export function setSerialWsUrl(next: TermixApp["wsUrl"] | null): void {
-  wsUrl = next;
-}
-
-/**
- * The console's WebSocket URL and auth subprotocols. No origin option: a
- * serial device is physically attached to this desktop machine, so it
- * always dials the embedded local backend rather than a connected remote
- * sync server (app.wsUrl's default when no origin is given).
- */
-export async function resolveSerialWsUrl() {
-  if (!wsUrl) return null;
-  return wsUrl("/console");
-}
diff --git a/plugins/serial/src/frontend/types.ts b/plugins/serial/src/frontend/types.ts
deleted file mode 100644
index 32be6649e..000000000
--- a/plugins/serial/src/frontend/types.ts
+++ /dev/null
@@ -1,15 +0,0 @@
-export type SerialConfig = {
-  path: string;
-  baudRate: number;
-  dataBits: 5 | 6 | 7 | 8;
-  stopBits: 1 | 2;
-  parity: "none" | "even" | "odd";
-};
-
-export interface SerialHandle {
-  connect: () => void;
-  disconnect: () => void;
-  reconnect: () => void;
-  isConnected: () => boolean;
-  sendInput: (data: string) => void;
-}
diff --git a/plugins/serial/tests/backend/activate.test.ts b/plugins/serial/tests/backend/activate.test.ts
deleted file mode 100644
index dcb3b36fe..000000000
--- a/plugins/serial/tests/backend/activate.test.ts
+++ /dev/null
@@ -1,37 +0,0 @@
-import { describe, it, expect } from "vitest";
-import {
-  createMockCtx,
-  type MockPluginContext,
-} from "@termix/plugin-sdk/testing";
-import { PluginCapabilityError } from "@termix/plugin-sdk/backend";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-import { activate } from "../../src/backend/index.js";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-describe("serial activate", () => {
-  it("mounts the console WS route at /console with every declared capability", async () => {
-    const mock: MockPluginContext = createMockCtx({
-      pluginId: manifest.id,
-      manifest,
-      capabilities: manifest.capabilities,
-    });
-
-    await activate(mock.ctx);
-
-    expect(mock.wsRoutes).toMatchObject([{ path: "/console", raw: false }]);
-  });
-
-  it("refuses to mount without network:serve", async () => {
-    const mock: MockPluginContext = createMockCtx({
-      pluginId: manifest.id,
-      manifest,
-      capabilities: manifest.capabilities.filter((c) => c !== "network:serve"),
-    });
-
-    await expect(activate(mock.ctx)).rejects.toBeInstanceOf(
-      PluginCapabilityError,
-    );
-  });
-});
diff --git a/plugins/serial/tests/backend/session.test.ts b/plugins/serial/tests/backend/session.test.ts
deleted file mode 100644
index 2677b0299..000000000
--- a/plugins/serial/tests/backend/session.test.ts
+++ /dev/null
@@ -1,187 +0,0 @@
-import { EventEmitter } from "node:events";
-import { describe, it, expect, vi, beforeEach } from "vitest";
-import {
-  createMockCtx,
-  type MockPluginContext,
-} from "@termix/plugin-sdk/testing";
-import type { PluginWebSocketConnection } from "@termix/plugin-sdk/backend";
-import { createSerialSession } from "../../src/backend/session.js";
-
-// vi.mock's factory is hoisted above every import, including node:events, so
-// FakeSerialPort gets its own minimal emitter rather than extending it.
-const { listMock, openMock, FakeSerialPort } = vi.hoisted(() => {
-  const listMock = vi.fn(async () => [{ path: "/dev/ttyUSB0" }]);
-  const openMock = vi.fn();
-
-  class FakeSerialPort {
-    isOpen = false;
-    private listeners = new Map<string, Set<(...args: unknown[]) => void>>();
-    constructor(public options: Record<string, unknown>) {}
-    on(event: string, listener: (...args: unknown[]) => void) {
-      const set = this.listeners.get(event) ?? new Set();
-      set.add(listener);
-      this.listeners.set(event, set);
-      return this;
-    }
-    private emit(event: string, ...args: unknown[]) {
-      for (const listener of this.listeners.get(event) ?? []) listener(...args);
-    }
-    open(cb: (err?: Error) => void) {
-      openMock(this.options);
-      this.isOpen = true;
-      cb();
-    }
-    write(_data: Buffer, cb: (err?: Error) => void) {
-      cb();
-    }
-    close() {
-      this.isOpen = false;
-      this.emit("close");
-    }
-    static list = listMock;
-  }
-
-  return { listMock, openMock, FakeSerialPort };
-});
-
-vi.mock("serialport", () => ({ SerialPort: FakeSerialPort }));
-
-class FakeSocket extends EventEmitter {
-  readyState = 1;
-  OPEN = 1;
-  sent: unknown[] = [];
-  send(msg: string) {
-    this.sent.push(JSON.parse(msg));
-  }
-  close(_code?: number, _reason?: string) {
-    this.readyState = 3;
-  }
-}
-
-function fakeConnection(
-  socket: FakeSocket,
-  isDataUnlocked: () => boolean = () => true,
-): PluginWebSocketConnection {
-  return {
-    userId: "user-1",
-    request: {},
-    socket,
-    isDataUnlocked,
-  } as unknown as PluginWebSocketConnection;
-}
-
-async function deliver(socket: FakeSocket, message: object) {
-  socket.emit("message", Buffer.from(JSON.stringify(message)));
-  // Let the async message handler's microtasks settle.
-  await new Promise((resolve) => setTimeout(resolve, 0));
-}
-
-describe("serial session", () => {
-  let mock: MockPluginContext;
-
-  beforeEach(() => {
-    listMock.mockClear();
-    openMock.mockClear();
-  });
-
-  it("refuses list_ports and connect without device:serial", async () => {
-    mock = createMockCtx({ pluginId: "serial", capabilities: [] });
-    const socket = new FakeSocket();
-    await createSerialSession(mock.ctx)(fakeConnection(socket));
-
-    await deliver(socket, { type: "list_ports" });
-    expect(listMock).not.toHaveBeenCalled();
-    expect(socket.sent).toEqual([expect.objectContaining({ type: "error" })]);
-
-    socket.sent.length = 0;
-    await deliver(socket, {
-      type: "connect",
-      data: { path: "/dev/ttyUSB0", baudRate: 9600 },
-    });
-    expect(openMock).not.toHaveBeenCalled();
-    expect(socket.sent).toEqual([expect.objectContaining({ type: "error" })]);
-  });
-
-  it("lists ports once granted device:serial", async () => {
-    mock = createMockCtx({
-      pluginId: "serial",
-      capabilities: ["network:serve", "device:serial"],
-    });
-    const socket = new FakeSocket();
-    await createSerialSession(mock.ctx)(fakeConnection(socket));
-
-    await deliver(socket, { type: "list_ports" });
-
-    expect(listMock).toHaveBeenCalledTimes(1);
-    expect(socket.sent).toEqual([
-      { type: "ports_list", data: [{ path: "/dev/ttyUSB0" }] },
-    ]);
-  });
-
-  it("opens, writes to and closes a port through connect/input/disconnect", async () => {
-    mock = createMockCtx({
-      pluginId: "serial",
-      capabilities: ["network:serve", "device:serial"],
-    });
-    const socket = new FakeSocket();
-    await createSerialSession(mock.ctx)(fakeConnection(socket));
-
-    await deliver(socket, {
-      type: "connect",
-      data: { path: "/dev/ttyUSB0", baudRate: 115200 },
-    });
-    expect(openMock).toHaveBeenCalledWith(
-      expect.objectContaining({ path: "/dev/ttyUSB0", baudRate: 115200 }),
-    );
-    expect(socket.sent).toContainEqual({ type: "connected" });
-
-    socket.sent.length = 0;
-    await deliver(socket, { type: "input", data: "AT\r\n" });
-    // write() succeeds silently; nothing is echoed back until the port emits data.
-
-    socket.sent.length = 0;
-    await deliver(socket, { type: "disconnect" });
-    expect(socket.sent).toContainEqual({ type: "disconnected" });
-  });
-
-  it("rejects a connect with no path or baud rate without touching the port", async () => {
-    mock = createMockCtx({
-      pluginId: "serial",
-      capabilities: ["network:serve", "device:serial"],
-    });
-    const socket = new FakeSocket();
-    await createSerialSession(mock.ctx)(fakeConnection(socket));
-
-    await deliver(socket, { type: "connect", data: { path: "" } });
-
-    expect(openMock).not.toHaveBeenCalled();
-    expect(socket.sent).toEqual([expect.objectContaining({ type: "error" })]);
-  });
-
-  it("closes the socket at connect time when data is locked", async () => {
-    mock = createMockCtx({
-      pluginId: "serial",
-      capabilities: ["network:serve", "device:serial"],
-    });
-    const socket = new FakeSocket();
-    await createSerialSession(mock.ctx)(fakeConnection(socket, () => false));
-
-    expect(socket.sent).toEqual([expect.objectContaining({ type: "error" })]);
-  });
-
-  it("refuses a message once data locks mid-session", async () => {
-    mock = createMockCtx({
-      pluginId: "serial",
-      capabilities: ["network:serve", "device:serial"],
-    });
-    const socket = new FakeSocket();
-    let unlocked = true;
-    await createSerialSession(mock.ctx)(fakeConnection(socket, () => unlocked));
-
-    unlocked = false;
-    await deliver(socket, { type: "list_ports" });
-
-    expect(listMock).not.toHaveBeenCalled();
-    expect(socket.sent).toEqual([expect.objectContaining({ type: "error" })]);
-  });
-});
diff --git a/plugins/serial/tests/frontend/activate.test.tsx b/plugins/serial/tests/frontend/activate.test.tsx
deleted file mode 100644
index c395d306b..000000000
--- a/plugins/serial/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,59 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { screen } from "@testing-library/react";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-const declared = (views?: Array<{ id: string }>) =>
-  (views ?? []).map((view) => view.id).sort();
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe(`${manifest.id} activate`, () => {
-  it("activates and registers only views its manifest declares", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    const contributes = manifest.contributes as unknown as Record<
-      string,
-      Array<{ id: string }> | undefined
-    >;
-    const tabs = declared(contributes.tabs);
-    const panels = [...declared(contributes.panels), ...tabs];
-
-    expect(rendered.registered.tabs()).toEqual(["serial"]);
-    for (const id of rendered.registered.tabs()) expect(tabs).toContain(id);
-    for (const id of rendered.registered.panels()) expect(panels).toContain(id);
-    expect(rendered.registered.railItems().map((item) => item.id)).toContain(
-      "serial",
-    );
-  });
-
-  it("removes everything it registered on deactivate", async () => {
-    const app = await renderWithApp(plugin, { manifest, locales });
-    await app.deactivate();
-    expect(app.registered.tabs()).toEqual([]);
-    expect(app.registered.panels()).toEqual([]);
-    expect(app.registered.railItems()).toEqual([]);
-  });
-
-  it("renders the connect form in the rail panel", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    rendered.renderPanel("serial", { active: true });
-    // jsdom has no Web Serial API and isn't Electron, so the panel falls
-    // back to its "not supported" message rather than a live form.
-    expect(
-      await screen.findByText(locales.serial.notSupportedTitle),
-    ).toBeTruthy();
-  });
-});
diff --git a/plugins/serial/tsconfig.json b/plugins/serial/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/serial/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/serial/vitest.config.ts b/plugins/serial/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/serial/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/session-recording/CHANGELOG.md b/plugins/session-recording/CHANGELOG.md
deleted file mode 100644
index a4e735e92..000000000
--- a/plugins/session-recording/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Records SSH terminal sessions so you can play them back, copy their text or download them. Old recordings are removed after a set number of days.
diff --git a/plugins/session-recording/README.md b/plugins/session-recording/README.md
deleted file mode 100644
index cd4e575c2..000000000
--- a/plugins/session-recording/README.md
+++ /dev/null
@@ -1,39 +0,0 @@
-# Session Recording
-
-Record terminal sessions and play them back or download them later.
-
-## Features
-
-- Records SSH terminal sessions as they happen.
-- Play a recording back, skip through it and copy its text.
-- Download a recording as a file or as plain text.
-- Removes recordings older than a set number of days.
-- Keeps recordings when a user is deleted, with the user's name removed.
-
-## Settings
-
-### Admin
-
-- Retention (days): remove recordings older than this. Checked at startup and once a day.
-
-### Host
-
-- Enable session recording: record sessions on this host.
-
-## Permissions
-
-- `session-recording.view`: View and download session recordings. Admins and users have it by default.
-
-## Services
-
-Provides to other plugins:
-
-- `recordings.writer`: start a recording and add to it as a session runs, or save a recording that is already finished.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/session-recording/locales/en.json b/plugins/session-recording/locales/en.json
deleted file mode 100644
index ccd600232..000000000
--- a/plugins/session-recording/locales/en.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Session Logs"
-  },
-  "hosts": {
-    "enableSessionRecording": "Session Recording",
-    "enableSessionRecordingDesc": "Record terminal session output for later review"
-  },
-  "permissions": {
-    "view": {
-      "title": "View session recordings",
-      "description": "See and play back your own session recordings."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Retention (days)",
-        "description": "How long a session recording is kept before it is deleted automatically."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Enable session recording",
-        "description": "Record terminal output for this host so you can play it back or download it later."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Recording"
-  },
-  "sessionLogs": {
-    "title": "Session Logs",
-    "noLogs": "No session logs yet",
-    "noLogsDesc": "Enable session logging on a host to start recording",
-    "duration": "Duration",
-    "viewLog": "View log",
-    "downloadLog": "Download",
-    "downloadAsText": "Download as text",
-    "deleteLog": "Delete",
-    "confirmDelete": "Delete this session log?",
-    "confirmDeleteDesc": "This action cannot be undone.",
-    "copyContent": "Copy",
-    "copied": "Copied!",
-    "loadError": "Failed to load session logs",
-    "deleteError": "Failed to delete session log",
-    "filterByHost": "Filter by host...",
-    "back": "Back",
-    "empty": "(empty)",
-    "noResults": "No results for \"{{query}}\"",
-    "hostFallback": "Host {{id}}",
-    "sessionFallback": "Session {{id}}"
-  },
-  "player": {
-    "timeline": "Recording timeline",
-    "speed": "Playback speed",
-    "play": "Play recording",
-    "pause": "Pause recording"
-  },
-  "plugin": {
-    "name": "Session Recording"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/af_ZA.json b/plugins/session-recording/locales/translated/af_ZA.json
deleted file mode 100644
index 753c4fdd2..000000000
--- a/plugins/session-recording/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Sessielogboeke"
-  },
-  "hosts": {
-    "enableSessionRecording": "Sessie-opname",
-    "enableSessionRecordingDesc": "Neem terminaalsessie-uitvoer op vir latere hersiening"
-  },
-  "permissions": {
-    "view": {
-      "title": "Bekyk sessie-opnames",
-      "description": "Sien en speel jou eie sessie-opnames terug."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Behoud (dae)",
-        "description": "Hoe lank 'n sessie-opname gehou word voordat dit outomaties uitgevee word."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Aktiveer sessie-opname",
-        "description": "Neem terminaaluitvoer vir hierdie gasheer op sodat jy dit later kan terugspeel of aflaai."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Opname"
-  },
-  "sessionLogs": {
-    "title": "Sessielogboeke",
-    "noLogs": "Geen sessielogboeke nog nie",
-    "noLogsDesc": "Aktiveer sessie-aanmelding op 'n gasheer om opname te begin",
-    "duration": "Duur",
-    "viewLog": "Bekyk logboek",
-    "downloadLog": "Laai af",
-    "downloadAsText": "Laai af as teks",
-    "deleteLog": "Vee uit",
-    "confirmDelete": "Vee hierdie sessielog uit?",
-    "confirmDeleteDesc": "Hierdie aksie kan nie ongedaan gemaak word nie.",
-    "copyContent": "Kopieer",
-    "copied": "Gekopieer!",
-    "loadError": "Kon nie sessielogboeke laai nie",
-    "deleteError": "Kon nie sessielogboek uitvee nie",
-    "filterByHost": "Filtreer volgens gasheer...",
-    "back": "Terug",
-    "empty": "(leeg)",
-    "noResults": "Geen resultate vir \"{{query}}\"",
-    "hostFallback": "Gasheer {{id}}",
-    "sessionFallback": "Sessie {{id}}"
-  },
-  "player": {
-    "timeline": "Opnametydlyn",
-    "speed": "Terugspeelspoed",
-    "play": "Speel opname",
-    "pause": "Onderbreek opname"
-  },
-  "plugin": {
-    "name": "Sessie-opname"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/ar_SA.json b/plugins/session-recording/locales/translated/ar_SA.json
deleted file mode 100644
index fd1c1ffa6..000000000
--- a/plugins/session-recording/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "سجلات الجلسات"
-  },
-  "hosts": {
-    "enableSessionRecording": "تسجيل الجلسة",
-    "enableSessionRecordingDesc": "تسجيل مخرجات الجلسة الطرفية للمراجعة لاحقاً"
-  },
-  "permissions": {
-    "view": {
-      "title": "عرض تسجيلات الجلسات",
-      "description": "شاهد واستمع إلى تسجيلات جلساتك الخاصة."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "مدة الاحتفاظ (بالأيام)",
-        "description": "ما هي المدة التي يتم فيها الاحتفاظ بتسجيل الجلسة قبل حذفه تلقائيًا؟"
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "تفعيل تسجيل الجلسة",
-        "description": "سجل مخرجات الطرفية لهذا المضيف حتى تتمكن من تشغيلها أو تنزيلها لاحقًا."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "تسجيل"
-  },
-  "sessionLogs": {
-    "title": "سجلات الجلسات",
-    "noLogs": "لا توجد سجلات جلسات بعد",
-    "noLogsDesc": "فعّل تسجيل الجلسات على مضيف لبدء التسجيل",
-    "duration": "المدة",
-    "viewLog": "عرض السجل",
-    "downloadLog": "تنزيل",
-    "downloadAsText": "تنزيل كنص",
-    "deleteLog": "حذف",
-    "confirmDelete": "حذف سجل الجلسة هذا؟",
-    "confirmDeleteDesc": "لا يمكن التراجع عن هذا الإجراء.",
-    "copyContent": "نسخ",
-    "copied": "تم النسخ!",
-    "loadError": "فشل في تحميل سجلات الجلسات",
-    "deleteError": "فشل في حذف سجل الجلسة",
-    "filterByHost": "تصفية حسب المضيف...",
-    "back": "رجوع",
-    "empty": "(فارغ)",
-    "noResults": "لا توجد نتائج للبحث عن \"{{query}}\"",
-    "hostFallback": "المضيف {{id}}",
-    "sessionFallback": "الجلسة {{id}}"
-  },
-  "player": {
-    "timeline": "الجدول الزمني للتسجيل",
-    "speed": "سرعة التشغيل",
-    "play": "تشغيل التسجيل",
-    "pause": "إيقاف التسجيل مؤقتًا"
-  },
-  "plugin": {
-    "name": "تسجيل الجلسة"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/bg_BG.json b/plugins/session-recording/locales/translated/bg_BG.json
deleted file mode 100644
index 377fa22f1..000000000
--- a/plugins/session-recording/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Дневници на сесии"
-  },
-  "hosts": {
-    "enableSessionRecording": "Запис на сесия",
-    "enableSessionRecordingDesc": "Записване на изхода от терминалната сесия за по-късен преглед"
-  },
-  "permissions": {
-    "view": {
-      "title": "Преглед на записите от сесиите",
-      "description": "Вижте и възпроизведете собствените си записи от сесиите."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Задържане (дни)",
-        "description": "Колко дълго се съхранява записът на сесия, преди да бъде изтрит автоматично."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Активиране на запис на сесия",
-        "description": "Запишете изхода от терминала за този хост, за да можете да го възпроизведете или изтеглите по-късно."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Запис"
-  },
-  "sessionLogs": {
-    "title": "Дневници на сесии",
-    "noLogs": "Все още няма логове на сесии",
-    "noLogsDesc": "Активирайте регистрирането на сесията на хост, за да започнете записа",
-    "duration": "Продължителност",
-    "viewLog": "Преглед на дневника",
-    "downloadLog": "Изтегляне",
-    "downloadAsText": "Изтегляне като текст",
-    "deleteLog": "Изтриване",
-    "confirmDelete": "Да се изтрие ли този дневник на сесията?",
-    "confirmDeleteDesc": "Това действие не може да бъде отменено.",
-    "copyContent": "Копиране",
-    "copied": "Копирано!",
-    "loadError": "Зареждането на лог файловете на сесията не бе успешно",
-    "deleteError": "Неуспешно изтриване на дневника на сесията",
-    "filterByHost": "Филтриране по хост...",
-    "back": "Обратно",
-    "empty": "(празно)",
-    "noResults": "Няма резултати за „{{query}}“",
-    "hostFallback": "Домакин {{id}}",
-    "sessionFallback": "Сесия {{id}}"
-  },
-  "player": {
-    "timeline": "Хронология на записа",
-    "speed": "Скорост на възпроизвеждане",
-    "play": "Пускане на запис",
-    "pause": "Пауза на записа"
-  },
-  "plugin": {
-    "name": "Запис на сесия"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/bn_BD.json b/plugins/session-recording/locales/translated/bn_BD.json
deleted file mode 100644
index dab93a35d..000000000
--- a/plugins/session-recording/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "সেশন লগ"
-  },
-  "hosts": {
-    "enableSessionRecording": "সেশন রেকর্ডিং",
-    "enableSessionRecordingDesc": "পরবর্তী পর্যালোচনার জন্য টার্মিনাল সেশনের আউটপুট রেকর্ড করুন।"
-  },
-  "permissions": {
-    "view": {
-      "title": "সেশন রেকর্ডিং দেখুন",
-      "description": "আপনার নিজের সেশন রেকর্ডিংগুলো দেখুন এবং প্লেব্যাক করুন।"
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "ধারণক্ষমতা (দিন)",
-        "description": "একটি সেশন রেকর্ডিং স্বয়ংক্রিয়ভাবে মুছে যাওয়ার আগে কতক্ষণ সংরক্ষিত থাকে।"
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "সেশন রেকর্ডিং সক্ষম করুন",
-        "description": "এই হোস্টের জন্য টার্মিনাল আউটপুট রেকর্ড করুন, যাতে আপনি পরে এটি প্লেব্যাক বা ডাউনলোড করতে পারেন।"
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "রেকর্ডিং"
-  },
-  "sessionLogs": {
-    "title": "সেশন লগ",
-    "noLogs": "এখনো কোনো সেশন লগ নেই",
-    "noLogsDesc": "রেকর্ডিং শুরু করতে কোনো হোস্টে সেশন লগিং চালু করুন।",
-    "duration": "সময়কাল",
-    "viewLog": "লগ দেখুন",
-    "downloadLog": "ডাউনলোড করুন",
-    "downloadAsText": "টেক্সট হিসেবে ডাউনলোড করুন",
-    "deleteLog": "মুছে ফেলুন",
-    "confirmDelete": "এই সেশন লগটি মুছে ফেলবেন?",
-    "confirmDeleteDesc": "এই কাজটি পূর্বাবস্থায় ফেরানো যাবে না।",
-    "copyContent": "অনুলিপি",
-    "copied": "অনুলিপি করা হয়েছে!",
-    "loadError": "সেশন লগ লোড করতে ব্যর্থ হয়েছে",
-    "deleteError": "সেশন লগ মুছে ফেলতে ব্যর্থ হয়েছে",
-    "filterByHost": "হোস্ট দ্বারা ফিল্টার করুন...",
-    "back": "ফিরে যান",
-    "empty": "(খালি)",
-    "noResults": "\"{{query}} \" এর জন্য কোন ফলাফল পাওয়া যায়নি",
-    "hostFallback": "হোস্ট {{id}}",
-    "sessionFallback": "সেশন {{id}}"
-  },
-  "player": {
-    "timeline": "রেকর্ডিং টাইমলাইন",
-    "speed": "প্লেব্যাক গতি",
-    "play": "রেকর্ডিং চালান",
-    "pause": "রেকর্ডিং থামান"
-  },
-  "plugin": {
-    "name": "সেশন রেকর্ডিং"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/ca_ES.json b/plugins/session-recording/locales/translated/ca_ES.json
deleted file mode 100644
index e0fc30ab5..000000000
--- a/plugins/session-recording/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Registres de sessió"
-  },
-  "hosts": {
-    "enableSessionRecording": "Gravació de sessions",
-    "enableSessionRecordingDesc": "Enregistra la sortida de la sessió de terminal per a una revisió posterior"
-  },
-  "permissions": {
-    "view": {
-      "title": "Veure enregistraments de sessions",
-      "description": "Veure i reproduir els enregistraments de les teves pròpies sessions."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Retenció (dies)",
-        "description": "Quant de temps es conserva una gravació de sessió abans que s'elimini automàticament."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Activa l'enregistrament de la sessió",
-        "description": "Enregistra la sortida del terminal per a aquest host per poder reproduir-la o descarregar-la més tard."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Enregistrament"
-  },
-  "sessionLogs": {
-    "title": "Registres de sessió",
-    "noLogs": "Encara no hi ha registres de sessió",
-    "noLogsDesc": "Habilita el registre de sessions en un amfitrió per iniciar l'enregistrament",
-    "duration": "Durada",
-    "viewLog": "Veure registre",
-    "downloadLog": "Descarrega",
-    "downloadAsText": "Descarrega com a text",
-    "deleteLog": "Suprimeix",
-    "confirmDelete": "Voleu suprimir aquest registre de sessió?",
-    "confirmDeleteDesc": "Aquesta acció no es pot desfer.",
-    "copyContent": "Còpia",
-    "copied": "Copiat!",
-    "loadError": "No s'han pogut carregar els registres de sessió",
-    "deleteError": "No s'ha pogut suprimir el registre de sessió",
-    "filterByHost": "Filtra per amfitrió...",
-    "back": "Enrere",
-    "empty": "(buit)",
-    "noResults": "No hi ha resultats per a \"{{query}}\"",
-    "hostFallback": "Amfitrió {{id}}",
-    "sessionFallback": "Sessió {{id}}"
-  },
-  "player": {
-    "timeline": "Cronologia de gravació",
-    "speed": "Velocitat de reproducció",
-    "play": "Reprodueix la gravació",
-    "pause": "Pausa l'enregistrament"
-  },
-  "plugin": {
-    "name": "Gravació de sessions"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/cs_CZ.json b/plugins/session-recording/locales/translated/cs_CZ.json
deleted file mode 100644
index c367c61b5..000000000
--- a/plugins/session-recording/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Protokoly relací"
-  },
-  "hosts": {
-    "enableSessionRecording": "Nahrávání relace",
-    "enableSessionRecordingDesc": "Zaznamenejte výstup terminálové relace pro pozdější kontrolu"
-  },
-  "permissions": {
-    "view": {
-      "title": "Zobrazit záznamy relací",
-      "description": "Prohlížejte a přehrávejte si vlastní nahrávky z relací."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Retenční doba (dny)",
-        "description": "Jak dlouho je záznam relace uchováván, než je automaticky smazán."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Povolit nahrávání relace",
-        "description": "Nahrajte výstup terminálu pro tento hostitel, abyste si ho mohli později přehrát nebo stáhnout."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Záznam"
-  },
-  "sessionLogs": {
-    "title": "Protokoly relací",
-    "noLogs": "Zatím žádné protokoly relací",
-    "noLogsDesc": "Povolte protokolování relace na hostiteli pro zahájení nahrávání",
-    "duration": "Trvání",
-    "viewLog": "Zobrazit protokol",
-    "downloadLog": "Stáhnout",
-    "downloadAsText": "Stáhnout jako text",
-    "deleteLog": "Vymazat",
-    "confirmDelete": "Smazat tento protokol relace?",
-    "confirmDeleteDesc": "Tuto akci nelze vrátit zpět.",
-    "copyContent": "Kopie",
-    "copied": "Zkopírováno!",
-    "loadError": "Nepodařilo se načíst protokoly relací",
-    "deleteError": "Nepodařilo se smazat protokol relace",
-    "filterByHost": "Filtrovat podle hostitele...",
-    "back": "Zadní",
-    "empty": "(prázdný)",
-    "noResults": "Žádné výsledky pro výraz „{{query}}“",
-    "hostFallback": "Hostitel {{id}}",
-    "sessionFallback": "Relace {{id}}"
-  },
-  "player": {
-    "timeline": "Časová osa nahrávání",
-    "speed": "Rychlost přehrávání",
-    "play": "Přehrát nahrávku",
-    "pause": "Pozastavit nahrávání"
-  },
-  "plugin": {
-    "name": "Nahrávání relace"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/da_DK.json b/plugins/session-recording/locales/translated/da_DK.json
deleted file mode 100644
index ebb434407..000000000
--- a/plugins/session-recording/locales/translated/da_DK.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Sessionslogfiler"
-  },
-  "hosts": {
-    "enableSessionRecording": "Sessionsoptagelse",
-    "enableSessionRecordingDesc": "Optag output fra terminalsessionen til senere gennemgang"
-  },
-  "permissions": {
-    "view": {
-      "title": "Se sessionsoptagelser",
-      "description": "Se og afspil dine egne sessionsoptagelser."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Opbevaring (dage)",
-        "description": "Hvor længe en sessionsoptagelse gemmes, før den slettes automatisk."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Aktivér sessionsoptagelse",
-        "description": "Optag terminaloutput for denne vært, så du kan afspille det eller downloade det senere."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Indspilning"
-  },
-  "sessionLogs": {
-    "title": "Sessionslogfiler",
-    "noLogs": "Ingen sessionslogfiler endnu",
-    "noLogsDesc": "Aktivér sessionslogning på en vært for at starte optagelse",
-    "duration": "Varighed",
-    "viewLog": "Se log",
-    "downloadLog": "Download",
-    "downloadAsText": "Download som tekst",
-    "deleteLog": "Slet",
-    "confirmDelete": "Slet denne sessionslog?",
-    "confirmDeleteDesc": "Denne handling kan ikke fortrydes.",
-    "copyContent": "Kopi",
-    "copied": "Kopieret!",
-    "loadError": "Kunne ikke indlæse sessionslogfiler",
-    "deleteError": "Kunne ikke slette sessionsloggen",
-    "filterByHost": "Filtrer efter vært...",
-    "back": "Tilbage",
-    "empty": "(tom)",
-    "noResults": "Ingen resultater for \"{{query}}\"",
-    "hostFallback": "Vært {{id}}",
-    "sessionFallback": "Session {{id}}"
-  },
-  "player": {
-    "timeline": "Optagelsestidslinje",
-    "speed": "Afspilningshastighed",
-    "play": "Afspil optagelse",
-    "pause": "Pause optagelse"
-  },
-  "plugin": {
-    "name": "Sessionsoptagelse"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/de_DE.json b/plugins/session-recording/locales/translated/de_DE.json
deleted file mode 100644
index f28ee09e3..000000000
--- a/plugins/session-recording/locales/translated/de_DE.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Sitzungsprotokolle"
-  },
-  "hosts": {
-    "enableSessionRecording": "Sitzungsaufzeichnung",
-    "enableSessionRecordingDesc": "Terminal-Sitzungsausgabe zur späteren Überprüfung aufzeichnen"
-  },
-  "permissions": {
-    "view": {
-      "title": "Sitzungsaufzeichnungen ansehen",
-      "description": "Sehen und spielen Sie Ihre eigenen Session-Aufnahmen ab."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Aufbewahrungsdauer (Tage)",
-        "description": "Wie lange eine Sitzungsaufzeichnung aufbewahrt wird, bevor sie automatisch gelöscht wird."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Sitzungsaufzeichnung aktivieren",
-        "description": "Zeichnen Sie die Terminalausgabe dieses Hosts auf, damit Sie sie später wiedergeben oder herunterladen können."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Aufnahme"
-  },
-  "sessionLogs": {
-    "title": "Sitzungsprotokolle",
-    "noLogs": "Noch keine Sitzungsprotokolle",
-    "noLogsDesc": "Aktivieren Sie die Sitzungsprotokollierung auf einem Host, um die Aufzeichnung zu starten",
-    "duration": "Dauer",
-    "viewLog": "Protokoll anzeigen",
-    "downloadLog": "Herunterladen",
-    "downloadAsText": "Als Text herunterladen",
-    "deleteLog": "Löschen",
-    "confirmDelete": "Dieses Sitzungsprotokoll löschen?",
-    "confirmDeleteDesc": "Diese Aktion kann nicht rückgängig gemacht werden.",
-    "copyContent": "Kopieren",
-    "copied": "Kopiert!",
-    "loadError": "Fehler beim Laden der Sitzungsprotokolle",
-    "deleteError": "Fehler beim Löschen des Sitzungsprotokolls",
-    "filterByHost": "Nach Host filtern...",
-    "back": "Zurück",
-    "empty": "(leer)",
-    "noResults": "Keine Ergebnisse für \"{{query}}\"",
-    "hostFallback": "Host {{id}}",
-    "sessionFallback": "Sitzung {{id}}"
-  },
-  "player": {
-    "timeline": "Aufnahmezeitplan",
-    "speed": "Wiedergabegeschwindigkeit",
-    "play": "Wiedergabe",
-    "pause": "Aufnahme pausieren"
-  },
-  "plugin": {
-    "name": "Sitzungsaufzeichnung"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/el_GR.json b/plugins/session-recording/locales/translated/el_GR.json
deleted file mode 100644
index e64d16aa0..000000000
--- a/plugins/session-recording/locales/translated/el_GR.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Αρχεία καταγραφής συνεδρίας"
-  },
-  "hosts": {
-    "enableSessionRecording": "Ηχογράφηση συνεδρίας",
-    "enableSessionRecordingDesc": "Καταγραφή εξόδου συνεδρίας τερματικού για μελλοντική αναθεώρηση"
-  },
-  "permissions": {
-    "view": {
-      "title": "Δείτε τις ηχογραφήσεις της συνεδρίας",
-      "description": "Δείτε και αναπαράγετε τις δικές σας ηχογραφήσεις συνεδρίας."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Διατήρηση (ημέρες)",
-        "description": "Για πόσο χρονικό διάστημα διατηρείται μια εγγραφή συνεδρίας πριν διαγραφεί αυτόματα."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Ενεργοποίηση εγγραφής συνεδρίας",
-        "description": "Εγγράψτε την έξοδο του τερματικού για αυτόν τον κεντρικό υπολογιστή, ώστε να μπορείτε να την αναπαράγετε ή να την κατεβάσετε αργότερα."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Εγγραφή"
-  },
-  "sessionLogs": {
-    "title": "Αρχεία καταγραφής συνεδρίας",
-    "noLogs": "Δεν υπάρχουν ακόμη αρχεία καταγραφής συνεδρίας",
-    "noLogsDesc": "Ενεργοποίηση καταγραφής περιόδου λειτουργίας σε έναν κεντρικό υπολογιστή για έναρξη εγγραφής",
-    "duration": "Διάρκεια",
-    "viewLog": "Προβολή αρχείου καταγραφής",
-    "downloadLog": "Λήψη",
-    "downloadAsText": "Λήψη ως κείμενο",
-    "deleteLog": "Διαγράφω",
-    "confirmDelete": "Διαγραφή αυτού του αρχείου καταγραφής περιόδου σύνδεσης;",
-    "confirmDeleteDesc": "Αυτή η ενέργεια δεν μπορεί να αναιρεθεί.",
-    "copyContent": "Αντίγραφο",
-    "copied": "Αντιγράφηκε!",
-    "loadError": "Αποτυχία φόρτωσης αρχείων καταγραφής περιόδου λειτουργίας",
-    "deleteError": "Η διαγραφή του αρχείου καταγραφής περιόδου λειτουργίας απέτυχε",
-    "filterByHost": "Φιλτράρισμα κατά κεντρικό υπολογιστή...",
-    "back": "Πίσω",
-    "empty": "(αδειάζω)",
-    "noResults": "Δεν υπάρχουν αποτελέσματα για \"{{query}}\"",
-    "hostFallback": "Κεντρικός υπολογιστής {{id}}",
-    "sessionFallback": "Συνεδρία {{id}}"
-  },
-  "player": {
-    "timeline": "Χρονολόγιο καταγραφής",
-    "speed": "Ταχύτητα αναπαραγωγής",
-    "play": "Αναπαραγωγή ηχογράφησης",
-    "pause": "Παύση εγγραφής"
-  },
-  "plugin": {
-    "name": "Ηχογράφηση συνεδρίας"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/es_ES.json b/plugins/session-recording/locales/translated/es_ES.json
deleted file mode 100644
index e76f061f0..000000000
--- a/plugins/session-recording/locales/translated/es_ES.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Registros de sesión"
-  },
-  "hosts": {
-    "enableSessionRecording": "Grabación de sesión",
-    "enableSessionRecordingDesc": "Registrar la salida de la sesión de terminal para su revisión posterior"
-  },
-  "permissions": {
-    "view": {
-      "title": "Ver las grabaciones de las sesiones",
-      "description": "Visualiza y reproduce las grabaciones de tus propias sesiones."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Retención (días)",
-        "description": "Cuánto tiempo se conserva la grabación de una sesión antes de que se elimine automáticamente."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Habilitar la grabación de la sesión",
-        "description": "Graba la salida de la terminal de este host para que puedas reproducirla o descargarla más tarde."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Grabación"
-  },
-  "sessionLogs": {
-    "title": "Registros de sesión",
-    "noLogs": "Aún no hay registros de sesión",
-    "noLogsDesc": "Activa el registro de sesiones en un host para empezar a grabar",
-    "duration": "Duración",
-    "viewLog": "Ver registro",
-    "downloadLog": "Descargar",
-    "downloadAsText": "Descargar como texto",
-    "deleteLog": "Eliminar",
-    "confirmDelete": "¿Eliminar este registro de sesión?",
-    "confirmDeleteDesc": "Esta acción no se puede deshacer.",
-    "copyContent": "Copiar",
-    "copied": "¡Copiado!",
-    "loadError": "Error al cargar los registros de sesión",
-    "deleteError": "Error al eliminar el registro de sesión",
-    "filterByHost": "Filtrar por host...",
-    "back": "Volver",
-    "empty": "(vacío)",
-    "noResults": "No se encontraron resultados para \"{{query}}\"",
-    "hostFallback": "Anfitrión {{id}}",
-    "sessionFallback": "Sesión {{id}}"
-  },
-  "player": {
-    "timeline": "Cronología de la grabación",
-    "speed": "Velocidad de reproducción",
-    "play": "Reproducir grabación",
-    "pause": "Pausar la grabación"
-  },
-  "plugin": {
-    "name": "Grabación de sesión"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/fi_FI.json b/plugins/session-recording/locales/translated/fi_FI.json
deleted file mode 100644
index f84076651..000000000
--- a/plugins/session-recording/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Istuntolokit"
-  },
-  "hosts": {
-    "enableSessionRecording": "Istunnon tallennus",
-    "enableSessionRecordingDesc": "Tallenna pääteistunnon tuloste myöhempää tarkastelua varten"
-  },
-  "permissions": {
-    "view": {
-      "title": "Näytä istuntotallenteet",
-      "description": "Katsele ja toista omia istuntotallenteitasi."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Säilytys (päivää)",
-        "description": "Kuinka kauan istuntotallennetta säilytetään ennen kuin se poistetaan automaattisesti."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Ota istunnon tallennus käyttöön",
-        "description": "Tallenna tämän isännän päätelaitteen lähtö, jotta voit toistaa sen tai ladata sen myöhemmin."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Äänitys"
-  },
-  "sessionLogs": {
-    "title": "Istuntolokit",
-    "noLogs": "Ei vielä istuntolokeja",
-    "noLogsDesc": "Ota istunnon lokikirjaus käyttöön isännässä aloittaaksesi tallennuksen",
-    "duration": "Kesto",
-    "viewLog": "Näytä loki",
-    "downloadLog": "Lataa",
-    "downloadAsText": "Lataa tekstinä",
-    "deleteLog": "Poistaa",
-    "confirmDelete": "Poistetaanko tämä istuntoloki?",
-    "confirmDeleteDesc": "Tätä toimintoa ei voi perua.",
-    "copyContent": "Kopioida",
-    "copied": "Kopioitu!",
-    "loadError": "Istuntolokien lataaminen epäonnistui",
-    "deleteError": "Istuntolokitietojen poistaminen epäonnistui",
-    "filterByHost": "Suodata isännän mukaan...",
-    "back": "Takaisin",
-    "empty": "(tyhjä)",
-    "noResults": "Ei tuloksia haulle \"{{query}}\"",
-    "hostFallback": "Isäntä {{id}}",
-    "sessionFallback": "Istunto {{id}}"
-  },
-  "player": {
-    "timeline": "Tallennusaikajana",
-    "speed": "Toistonopeus",
-    "play": "Toista tallenne",
-    "pause": "Keskeytä tallennus"
-  },
-  "plugin": {
-    "name": "Istunnon tallennus"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/fr_FR.json b/plugins/session-recording/locales/translated/fr_FR.json
deleted file mode 100644
index 21c16ff6a..000000000
--- a/plugins/session-recording/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Journaux de session"
-  },
-  "hosts": {
-    "enableSessionRecording": "Enregistrement de session",
-    "enableSessionRecordingDesc": "Enregistrer la sortie de la session terminal pour une consultation ultérieure"
-  },
-  "permissions": {
-    "view": {
-      "title": "Consulter les enregistrements des sessions",
-      "description": "Consultez et relisez vos propres enregistrements de session."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Rétention (jours)",
-        "description": "Durée de conservation d'un enregistrement de session avant sa suppression automatique."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Activer l'enregistrement de session",
-        "description": "Enregistrez la sortie du terminal pour cet hôte afin de pouvoir la relire ou la télécharger ultérieurement."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Enregistrement"
-  },
-  "sessionLogs": {
-    "title": "Journaux de session",
-    "noLogs": "Aucun journal de session pour l’instant",
-    "noLogsDesc": "Activez la journalisation des sessions sur un hôte pour démarrer l’enregistrement",
-    "duration": "Durée",
-    "viewLog": "Afficher le journal",
-    "downloadLog": "Télécharger",
-    "downloadAsText": "Télécharger au format texte",
-    "deleteLog": "Supprimer",
-    "confirmDelete": "Supprimer ce journal de session ?",
-    "confirmDeleteDesc": "Cette action est irréversible.",
-    "copyContent": "Copier",
-    "copied": "Copié !",
-    "loadError": "Échec du chargement des journaux de session",
-    "deleteError": "Échec de la suppression du journal de session",
-    "filterByHost": "Filtrer par hôte...",
-    "back": "Retour",
-    "empty": "(vide)",
-    "noResults": "Aucun résultat pour «{{query}}»",
-    "hostFallback": "Hôte {{id}}",
-    "sessionFallback": "Session {{id}}"
-  },
-  "player": {
-    "timeline": "Chronologie de l'enregistrement",
-    "speed": "Vitesse de lecture",
-    "play": "Lire l'enregistrement",
-    "pause": "Mettre en pause l'enregistrement"
-  },
-  "plugin": {
-    "name": "Enregistrement de session"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/he_IL.json b/plugins/session-recording/locales/translated/he_IL.json
deleted file mode 100644
index 0a112ec1b..000000000
--- a/plugins/session-recording/locales/translated/he_IL.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "יומני סשן"
-  },
-  "hosts": {
-    "enableSessionRecording": "הקלטת סשן",
-    "enableSessionRecordingDesc": "הקלט את פלט הפעלת הטרמינל לצורך סקירה מאוחרת יותר"
-  },
-  "permissions": {
-    "view": {
-      "title": "צפה בהקלטות של הפגישה",
-      "description": "צפה והפעל את הקלטות ההקלטה שלך."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "שמירה (ימים)",
-        "description": "כמה זמן נשמרת הקלטת סשן לפני שהיא נמחקת אוטומטית."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "הפעל הקלטת סשן",
-        "description": "הקלט את פלט הטרמינל עבור מארח זה כדי שתוכל להשמיע אותו או להוריד אותו מאוחר יותר."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "הַקלָטָה"
-  },
-  "sessionLogs": {
-    "title": "יומני סשן",
-    "noLogs": "אין עדיין יומני סשן",
-    "noLogsDesc": "הפעל רישום סשן במארח כדי להתחיל להקליט",
-    "duration": "מֶשֶׁך",
-    "viewLog": "הצג יומן",
-    "downloadLog": "הורדה",
-    "downloadAsText": "הורד כטקסט",
-    "deleteLog": "לִמְחוֹק",
-    "confirmDelete": "למחוק את יומן הפעילויות הזה?",
-    "confirmDeleteDesc": "לא ניתן לבטל פעולה זו.",
-    "copyContent": "לְהַעְתִיק",
-    "copied": "מוּעֲתָק!",
-    "loadError": "טעינת יומני הסשן נכשלה",
-    "deleteError": "נכשלה מחיקת יומן ההפעלה",
-    "filterByHost": "סנן לפי מארח...",
-    "back": "בְּחֲזָרָה",
-    "empty": "(רֵיק)",
-    "noResults": "אין תוצאות עבור \"{{query}}\"",
-    "hostFallback": "מארח {{id}}",
-    "sessionFallback": "סשן {{id}}"
-  },
-  "player": {
-    "timeline": "ציר זמן של הקלטה",
-    "speed": "מהירות השמעה",
-    "play": "הפעלת הקלטה",
-    "pause": "השהיית ההקלטה"
-  },
-  "plugin": {
-    "name": "הקלטת סשן"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/hi_IN.json b/plugins/session-recording/locales/translated/hi_IN.json
deleted file mode 100644
index e19f80fea..000000000
--- a/plugins/session-recording/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "सत्र लॉग्स"
-  },
-  "hosts": {
-    "enableSessionRecording": "सत्र रिकॉर्डिंग",
-    "enableSessionRecordingDesc": "बाद में समीक्षा के लिए टर्मिनल सत्र का आउटपुट रिकॉर्ड करें"
-  },
-  "permissions": {
-    "view": {
-      "title": "सेशन की रिकॉर्डिंग देखें",
-      "description": "अपने सेशन की रिकॉर्डिंग देखें और उन्हें दोबारा चलाएं।"
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "प्रतिधारण अवधि (दिनों में)",
-        "description": "सेशन रिकॉर्डिंग को स्वचालित रूप से डिलीट होने से पहले कितने समय तक रखा जाता है।"
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "सेशन रिकॉर्डिंग चालू करें",
-        "description": "इस होस्ट के टर्मिनल आउटपुट को रिकॉर्ड करें ताकि आप इसे बाद में प्लेबैक कर सकें या डाउनलोड कर सकें।"
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "रिकॉर्डिंग"
-  },
-  "sessionLogs": {
-    "title": "सेशन लॉग्स",
-    "noLogs": "अभी तक कोई सेशन लॉग नहीं",
-    "noLogsDesc": "रिकॉर्डिंग शुरू करने के लिए किसी होस्ट पर सेशन लॉगिंग सक्षम करें",
-    "duration": "अवधि",
-    "viewLog": "लॉग देखें",
-    "downloadLog": "डाउनलोड करें",
-    "downloadAsText": "टेक्स्ट के रूप में डाउनलोड करें",
-    "deleteLog": "हटाएं",
-    "confirmDelete": "क्या इस सेशन लॉग को हटाएं?",
-    "confirmDeleteDesc": "यह क्रिया वापस नहीं ली जा सकती।",
-    "copyContent": "कॉपी करें",
-    "copied": "कॉपी हो गया!",
-    "loadError": "सेशन लॉग लोड करने में विफल",
-    "deleteError": "सेशन लॉग हटाने में विफल",
-    "filterByHost": "होस्ट द्वारा फ़िल्टर करें...",
-    "back": "वापस",
-    "empty": "(खाली)",
-    "noResults": "\"{{query}} \" के लिए कोई परिणाम नहीं मिले",
-    "hostFallback": "मेज़बान {{id}}",
-    "sessionFallback": "सत्र {{id}}"
-  },
-  "player": {
-    "timeline": "रिकॉर्डिंग समयरेखा",
-    "speed": "प्लेबैक गति",
-    "play": "रिकॉर्डिंग चलाएं",
-    "pause": "रिकॉर्डिंग रोकें"
-  },
-  "plugin": {
-    "name": "सत्र रिकॉर्डिंग"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/hu_HU.json b/plugins/session-recording/locales/translated/hu_HU.json
deleted file mode 100644
index 1d916f092..000000000
--- a/plugins/session-recording/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Munkamenet-naplók"
-  },
-  "hosts": {
-    "enableSessionRecording": "Munkamenet-felvétel",
-    "enableSessionRecordingDesc": "Terminál munkamenet kimenetének rögzítése későbbi áttekintés céljából"
-  },
-  "permissions": {
-    "view": {
-      "title": "Munkamenet-felvételek megtekintése",
-      "description": "Tekintse meg és játssza le saját felvételeit."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Megtartás (nap)",
-        "description": "Mennyi ideig tárolják a munkamenet-felvételt, mielőtt automatikusan törlődne."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Munkamenet-rögzítés engedélyezése",
-        "description": "Rögzítse a terminál kimenetét ehhez a gazdagéphez, hogy később lejátszhassa vagy letölthesse."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Felvétel"
-  },
-  "sessionLogs": {
-    "title": "Munkamenet-naplók",
-    "noLogs": "Még nincsenek munkamenet-naplók",
-    "noLogsDesc": "A felvétel megkezdéséhez engedélyezze a munkamenet-naplózást egy gazdagépen",
-    "duration": "Időtartam",
-    "viewLog": "Napló megtekintése",
-    "downloadLog": "Letöltés",
-    "downloadAsText": "Letöltés szövegként",
-    "deleteLog": "Töröl",
-    "confirmDelete": "Törli ezt a munkamenet-naplót?",
-    "confirmDeleteDesc": "Ez a művelet nem vonható vissza.",
-    "copyContent": "Másolat",
-    "copied": "Másolva!",
-    "loadError": "Nem sikerült betölteni a munkamenet-naplókat",
-    "deleteError": "Nem sikerült törölni a munkamenet-naplót",
-    "filterByHost": "Szűrés hoszt szerint...",
-    "back": "Vissza",
-    "empty": "(üres)",
-    "noResults": "Nincs találat a(z) „{{query}} ” kifejezésre",
-    "hostFallback": "Gazdagép {{id}}",
-    "sessionFallback": "Munkamenet {{id}}"
-  },
-  "player": {
-    "timeline": "Felvételi idővonal",
-    "speed": "Lejátszási sebesség",
-    "play": "Felvétel lejátszása",
-    "pause": "Felvétel szüneteltetése"
-  },
-  "plugin": {
-    "name": "Munkamenet-felvétel"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/id_ID.json b/plugins/session-recording/locales/translated/id_ID.json
deleted file mode 100644
index eff33aebd..000000000
--- a/plugins/session-recording/locales/translated/id_ID.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Log Sesi"
-  },
-  "hosts": {
-    "enableSessionRecording": "Rekaman Sesi",
-    "enableSessionRecordingDesc": "Rekam output sesi terminal untuk ditinjau nanti."
-  },
-  "permissions": {
-    "view": {
-      "title": "Lihat rekaman sesi",
-      "description": "Lihat dan putar kembali rekaman sesi Anda sendiri."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Retensi (hari)",
-        "description": "Berapa lama rekaman sesi disimpan sebelum dihapus secara otomatis."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Aktifkan perekaman sesi",
-        "description": "Rekam output terminal untuk host ini agar Anda dapat memutarnya kembali atau mengunduhnya nanti."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Rekaman"
-  },
-  "sessionLogs": {
-    "title": "Log Sesi",
-    "noLogs": "Belum ada log sesi.",
-    "noLogsDesc": "Aktifkan pencatatan sesi pada host untuk memulai perekaman.",
-    "duration": "Lamanya",
-    "viewLog": "Lihat log",
-    "downloadLog": "Unduh",
-    "downloadAsText": "Unduh sebagai teks",
-    "deleteLog": "Menghapus",
-    "confirmDelete": "Hapus log sesi ini?",
-    "confirmDeleteDesc": "Tindakan ini tidak dapat dibatalkan.",
-    "copyContent": "Menyalin",
-    "copied": "Disalin!",
-    "loadError": "Gagal memuat log sesi",
-    "deleteError": "Gagal menghapus log sesi",
-    "filterByHost": "Saring berdasarkan host...",
-    "back": "Kembali",
-    "empty": "(kosong)",
-    "noResults": "Tidak ada hasil untuk \"{{query}}\"",
-    "hostFallback": "Tuan rumah {{id}}",
-    "sessionFallback": "Sesi {{id}}"
-  },
-  "player": {
-    "timeline": "Garis waktu perekaman",
-    "speed": "Kecepatan pemutaran",
-    "play": "Putar rekaman",
-    "pause": "Jeda perekaman"
-  },
-  "plugin": {
-    "name": "Rekaman Sesi"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/it_IT.json b/plugins/session-recording/locales/translated/it_IT.json
deleted file mode 100644
index 91a4cc936..000000000
--- a/plugins/session-recording/locales/translated/it_IT.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Log di sessione"
-  },
-  "hosts": {
-    "enableSessionRecording": "Registrazione sessione",
-    "enableSessionRecordingDesc": "Registra l'output della sessione del terminale per la revisione successiva"
-  },
-  "permissions": {
-    "view": {
-      "title": "Visualizza le registrazioni delle sessioni",
-      "description": "Visualizza e riproduci le registrazioni delle tue sessioni."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Tempo di ritenzione (giorni)",
-        "description": "Per quanto tempo viene conservata la registrazione di una sessione prima di essere eliminata automaticamente."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Abilita la registrazione della sessione",
-        "description": "Registra l'output del terminale per questo host in modo da poterlo riprodurre o scaricare in seguito."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Registrazione"
-  },
-  "sessionLogs": {
-    "title": "Registri di sessione",
-    "noLogs": "Ancora nessun registro di sessione",
-    "noLogsDesc": "Abilita la registrazione delle sessioni su un host per iniziare a registrare",
-    "duration": "Durata",
-    "viewLog": "Visualizza registro",
-    "downloadLog": "Scarica",
-    "downloadAsText": "Scarica come testo",
-    "deleteLog": "Elimina",
-    "confirmDelete": "Eliminare questo registro di sessione?",
-    "confirmDeleteDesc": "Questa azione non può essere annullata.",
-    "copyContent": "Copia",
-    "copied": "Copiato!",
-    "loadError": "Impossibile caricare i registri di sessione",
-    "deleteError": "Impossibile eliminare il registro di sessione",
-    "filterByHost": "Filtra per host...",
-    "back": "Indietro",
-    "empty": "(vuoto)",
-    "noResults": "Nessun risultato per \"{{query}}\"",
-    "hostFallback": "Ospite {{id}}",
-    "sessionFallback": "Sessione {{id}}"
-  },
-  "player": {
-    "timeline": "Cronologia delle registrazioni",
-    "speed": "Velocità di riproduzione",
-    "play": "Riproduci la registrazione",
-    "pause": "Metti in pausa la registrazione"
-  },
-  "plugin": {
-    "name": "Registrazione sessione"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/ja_JP.json b/plugins/session-recording/locales/translated/ja_JP.json
deleted file mode 100644
index 8d052e552..000000000
--- a/plugins/session-recording/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "セッションログ"
-  },
-  "hosts": {
-    "enableSessionRecording": "セッション記録",
-    "enableSessionRecordingDesc": "後で確認できるようにターミナルセッションの出力を記録します"
-  },
-  "permissions": {
-    "view": {
-      "title": "セッションの録画を見る",
-      "description": "自分のセッション録音を視聴・再生できます。"
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "保持期間（日数）",
-        "description": "セッション記録が自動的に削除されるまでの保存期間。"
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "セッション記録を有効にする",
-        "description": "このホストの端末出力を記録しておけば、後で再生したりダウンロードしたりできます。"
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "録音"
-  },
-  "sessionLogs": {
-    "title": "セッションログ",
-    "noLogs": "セッションログはまだありません",
-    "noLogsDesc": "ホストでセッションログを有効にして記録を開始してください",
-    "duration": "所要時間",
-    "viewLog": "ログを表示",
-    "downloadLog": "ダウンロード",
-    "downloadAsText": "テキストとしてダウンロード",
-    "deleteLog": "削除",
-    "confirmDelete": "このセッションログを削除しますか？",
-    "confirmDeleteDesc": "この操作は元に戻せません。",
-    "copyContent": "コピー",
-    "copied": "コピーしました！",
-    "loadError": "セッションログの読み込みに失敗しました",
-    "deleteError": "セッションログの削除に失敗しました",
-    "filterByHost": "ホストでフィルター...",
-    "back": "戻る",
-    "empty": "(空)",
-    "noResults": "「{{query}}」の検索結果はありません",
-    "hostFallback": "ホスト {{id}}",
-    "sessionFallback": "セッション {{id}}"
-  },
-  "player": {
-    "timeline": "録音タイムライン",
-    "speed": "再生速度",
-    "play": "録音を再生する",
-    "pause": "録画を一時停止"
-  },
-  "plugin": {
-    "name": "セッション記録"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/ko_KR.json b/plugins/session-recording/locales/translated/ko_KR.json
deleted file mode 100644
index 35b3cb937..000000000
--- a/plugins/session-recording/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "세션 로그"
-  },
-  "hosts": {
-    "enableSessionRecording": "세션 녹화",
-    "enableSessionRecordingDesc": "나중에 검토할 수 있도록 터미널 세션 출력을 기록합니다"
-  },
-  "permissions": {
-    "view": {
-      "title": "세션 녹화 영상을 시청하세요",
-      "description": "자신이 녹음한 세션 내용을 보고 재생해 보세요."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "보유 기간(일)",
-        "description": "세션 녹화 파일이 자동으로 삭제되기 전까지 보관되는 기간은 얼마인가요?"
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "세션 녹화를 활성화합니다.",
-        "description": "이 호스트의 터미널 출력을 기록하여 나중에 재생하거나 다운로드할 수 있도록 합니다."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "녹음"
-  },
-  "sessionLogs": {
-    "title": "세션 로그",
-    "noLogs": "아직 세션 로그 없음",
-    "noLogsDesc": "호스트에서 세션 로깅을 활성화하여 기록 시작",
-    "duration": "지속 시간",
-    "viewLog": "로그 보기",
-    "downloadLog": "다운로드",
-    "downloadAsText": "텍스트 파일로 다운로드",
-    "deleteLog": "삭제",
-    "confirmDelete": "이 세션 로그를 삭제하시겠습니까?",
-    "confirmDeleteDesc": "이 작업은 취소할 수 없습니다.",
-    "copyContent": "복사",
-    "copied": "복사됨!",
-    "loadError": "세션 로그 로드 실패",
-    "deleteError": "세션 로그 삭제 실패",
-    "filterByHost": "호스트로 필터링...",
-    "back": "뒤로",
-    "empty": "(비어 있음)",
-    "noResults": "\"{{query}} \"에 대한 검색 결과가 없습니다.",
-    "hostFallback": "호스트 {{id}}",
-    "sessionFallback": "세션 {{id}}"
-  },
-  "player": {
-    "timeline": "녹음 타임라인",
-    "speed": "재생 속도",
-    "play": "재생 녹음",
-    "pause": "녹화 일시 중지"
-  },
-  "plugin": {
-    "name": "세션 녹화"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/nl_NL.json b/plugins/session-recording/locales/translated/nl_NL.json
deleted file mode 100644
index 48d3900f6..000000000
--- a/plugins/session-recording/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Sessielogboeken"
-  },
-  "hosts": {
-    "enableSessionRecording": "Sessieopname",
-    "enableSessionRecordingDesc": "Sla de uitvoer van de terminalsessie op voor latere beoordeling."
-  },
-  "permissions": {
-    "view": {
-      "title": "Bekijk sessieopnames",
-      "description": "Bekijk en speel je eigen sessieopnames af."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Retentie (dagen)",
-        "description": "Hoe lang een sessieopname wordt bewaard voordat deze automatisch wordt verwijderd."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Sessieopname inschakelen",
-        "description": "Neem de terminaluitvoer van deze host op, zodat u deze later kunt afspelen of downloaden."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Opname"
-  },
-  "sessionLogs": {
-    "title": "Sessielogboeken",
-    "noLogs": "Nog geen sessielogboeken",
-    "noLogsDesc": "Schakel sessielogging in op een host om te beginnen met opnemen.",
-    "duration": "Duur",
-    "viewLog": "Logboek bekijken",
-    "downloadLog": "Download",
-    "downloadAsText": "Downloaden als tekst",
-    "deleteLog": "Verwijderen",
-    "confirmDelete": "Dit sessielogboek verwijderen?",
-    "confirmDeleteDesc": "Deze actie kan niet ongedaan gemaakt worden.",
-    "copyContent": "Kopiëren",
-    "copied": "Gekopieerd!",
-    "loadError": "Het laden van de sessielogboeken is mislukt.",
-    "deleteError": "Het verwijderen van het sessielogboek is mislukt.",
-    "filterByHost": "Filteren op host...",
-    "back": "Rug",
-    "empty": "(leeg)",
-    "noResults": "Geen resultaten voor \"{{query}}\"",
-    "hostFallback": "Host {{id}}",
-    "sessionFallback": "Sessie {{id}}"
-  },
-  "player": {
-    "timeline": "Opnametijdlijn",
-    "speed": "Afspeelsnelheid",
-    "play": "Speel opname af",
-    "pause": "Opname pauzeren"
-  },
-  "plugin": {
-    "name": "Sessieopname"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/no_NO.json b/plugins/session-recording/locales/translated/no_NO.json
deleted file mode 100644
index c3d76953c..000000000
--- a/plugins/session-recording/locales/translated/no_NO.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Øktlogger"
-  },
-  "hosts": {
-    "enableSessionRecording": "Øktopptak",
-    "enableSessionRecordingDesc": "Ta opp utdata fra terminaløkten for senere gjennomgang"
-  },
-  "permissions": {
-    "view": {
-      "title": "Se opptak av økter",
-      "description": "Se og spill av dine egne øktopptak."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Oppbevaring (dager)",
-        "description": "Hvor lenge et øktopptak lagres før det slettes automatisk."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Aktiver øktopptak",
-        "description": "Spill inn terminalutdata for denne verten, slik at du kan spille det av eller laste det ned senere."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Innspilling"
-  },
-  "sessionLogs": {
-    "title": "Øktlogger",
-    "noLogs": "Ingen øktlogger ennå",
-    "noLogsDesc": "Aktiver øktlogging på en vert for å starte opptaket",
-    "duration": "Varighet",
-    "viewLog": "Vis logg",
-    "downloadLog": "Last ned",
-    "downloadAsText": "Last ned som tekst",
-    "deleteLog": "Slett",
-    "confirmDelete": "Slette denne øktloggen?",
-    "confirmDeleteDesc": "Denne handlingen kan ikke angres.",
-    "copyContent": "Kopier",
-    "copied": "Kopiert!",
-    "loadError": "Kunne ikke laste inn øktlogger",
-    "deleteError": "Kunne ikke slette øktloggen",
-    "filterByHost": "Filtrer etter vert...",
-    "back": "Tilbake",
-    "empty": "(tømme)",
-    "noResults": "Ingen resultater for «{{query}}»",
-    "hostFallback": "Vert {{id}}",
-    "sessionFallback": "Økt {{id}}"
-  },
-  "player": {
-    "timeline": "Tidslinje for opptak",
-    "speed": "Avspillingshastighet",
-    "play": "Spill av opptaket",
-    "pause": "Sett opptaket på pause"
-  },
-  "plugin": {
-    "name": "Øktopptak"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/pl_PL.json b/plugins/session-recording/locales/translated/pl_PL.json
deleted file mode 100644
index b3cc20ca6..000000000
--- a/plugins/session-recording/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Logi sesji"
-  },
-  "hosts": {
-    "enableSessionRecording": "Nagrywanie sesji",
-    "enableSessionRecordingDesc": "Zapisuj wyjście sesji terminala do późniejszego przejrzenia"
-  },
-  "permissions": {
-    "view": {
-      "title": "Zobacz nagrania sesji",
-      "description": "Oglądaj i odtwarzaj własne nagrania sesji."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Retencja (dni)",
-        "description": "Jak długo przechowywane jest nagranie sesji, zanim zostanie automatycznie usunięte."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Włącz nagrywanie sesji",
-        "description": "Nagraj dane wyjściowe terminala dla tego hosta, aby móc je później odtworzyć lub pobrać."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Nagranie"
-  },
-  "sessionLogs": {
-    "title": "Logi sesji",
-    "noLogs": "Brak logów sesji",
-    "noLogsDesc": "Włącz rejestrowanie sesji na hoście, aby rozpocząć nagrywanie",
-    "duration": "Czas trwania",
-    "viewLog": "Wyświetl log",
-    "downloadLog": "Pobierz",
-    "downloadAsText": "Pobierz jako tekst",
-    "deleteLog": "Usuń",
-    "confirmDelete": "Usunąć ten log sesji?",
-    "confirmDeleteDesc": "Tej czynności nie można cofnąć.",
-    "copyContent": "Kopiuj",
-    "copied": "Skopiowano!",
-    "loadError": "Nie udało się załadować logów sesji",
-    "deleteError": "Nie udało się usunąć logu sesji",
-    "filterByHost": "Filtruj według hosta...",
-    "back": "Wstecz",
-    "empty": "(pusty)",
-    "noResults": "Brak wyników dla „{{query}}”",
-    "hostFallback": "Gospodarz {{id}}",
-    "sessionFallback": "Sesja {{id}}"
-  },
-  "player": {
-    "timeline": "Oś czasu nagrywania",
-    "speed": "Prędkość odtwarzania",
-    "play": "Odtwórz nagranie",
-    "pause": "Wstrzymaj nagrywanie"
-  },
-  "plugin": {
-    "name": "Nagrywanie sesji"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/pt_BR.json b/plugins/session-recording/locales/translated/pt_BR.json
deleted file mode 100644
index 8ba3adff7..000000000
--- a/plugins/session-recording/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Logs de sessão"
-  },
-  "hosts": {
-    "enableSessionRecording": "Gravação da sessão",
-    "enableSessionRecordingDesc": "Registre a saída da sessão do terminal para revisão posterior."
-  },
-  "permissions": {
-    "view": {
-      "title": "Veja as gravações das sessões",
-      "description": "Veja e reproduza as gravações das suas próprias sessões."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Retenção (dias)",
-        "description": "Por quanto tempo uma gravação de sessão é mantida antes de ser excluída automaticamente."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Ativar gravação de sessão",
-        "description": "Grave a saída do terminal para este host para que você possa reproduzi-la ou baixá-la posteriormente."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Gravação"
-  },
-  "sessionLogs": {
-    "title": "Logs de sessão",
-    "noLogs": "Ainda não há registros de sessão.",
-    "noLogsDesc": "Habilite o registro de sessão em um host para iniciar a gravação.",
-    "duration": "Duração",
-    "viewLog": "Ver registro",
-    "downloadLog": "Download",
-    "downloadAsText": "Baixar como texto",
-    "deleteLog": "Apagar",
-    "confirmDelete": "Excluir este registro de sessão?",
-    "confirmDeleteDesc": "Esta ação não pode ser desfeita.",
-    "copyContent": "Copiar",
-    "copied": "Copiado!",
-    "loadError": "Falha ao carregar os registros da sessão.",
-    "deleteError": "Falha ao excluir o registro da sessão",
-    "filterByHost": "Filtrar por host...",
-    "back": "Voltar",
-    "empty": "(vazio)",
-    "noResults": "Nenhum resultado para \"{{query}}\"",
-    "hostFallback": "Anfitrião {{id}}",
-    "sessionFallback": "Sessão {{id}}"
-  },
-  "player": {
-    "timeline": "Cronograma de gravação",
-    "speed": "Velocidade de reprodução",
-    "play": "Reproduzir gravação",
-    "pause": "Pausar gravação"
-  },
-  "plugin": {
-    "name": "Gravação da sessão"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/pt_PT.json b/plugins/session-recording/locales/translated/pt_PT.json
deleted file mode 100644
index 15bed6948..000000000
--- a/plugins/session-recording/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Registos de Sessão"
-  },
-  "hosts": {
-    "enableSessionRecording": "Gravação de Sessão",
-    "enableSessionRecordingDesc": "Gravar a saída da sessão de terminal para revisão posterior"
-  },
-  "permissions": {
-    "view": {
-      "title": "Veja as gravações das sessões",
-      "description": "Veja e reproduza as gravações das suas próprias sessões."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Retenção (dias)",
-        "description": "Durante quanto tempo é mantida uma gravação de sessão antes de ser automaticamente eliminada."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Ativar gravação de sessão",
-        "description": "Grave a saída do terminal para este host para que possa reproduzi-la ou descarregá-la posteriormente."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Gravação"
-  },
-  "sessionLogs": {
-    "title": "Registos de Sessão",
-    "noLogs": "Ainda sem registos de sessão",
-    "noLogsDesc": "Ative o registo de sessão num host para começar a gravar",
-    "duration": "Duração",
-    "viewLog": "Ver registo",
-    "downloadLog": "Transferir",
-    "downloadAsText": "Descarregar como texto",
-    "deleteLog": "Eliminar",
-    "confirmDelete": "Eliminar este registo de sessão?",
-    "confirmDeleteDesc": "Esta ação não pode ser desfeita.",
-    "copyContent": "Copiar",
-    "copied": "Copiado!",
-    "loadError": "Falha ao carregar registos de sessão",
-    "deleteError": "Falha ao eliminar registo de sessão",
-    "filterByHost": "Filtrar por host...",
-    "back": "Voltar",
-    "empty": "(vazio)",
-    "noResults": "Nenhum resultado para \"{{query}}\"",
-    "hostFallback": "Anfitrião {{id}}",
-    "sessionFallback": "Sessão {{id}}"
-  },
-  "player": {
-    "timeline": "Cronograma de gravação",
-    "speed": "Velocidade de reprodução",
-    "play": "Reproduzir gravação",
-    "pause": "Pausar gravação"
-  },
-  "plugin": {
-    "name": "Gravação de Sessão"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/ro_RO.json b/plugins/session-recording/locales/translated/ro_RO.json
deleted file mode 100644
index aec38d031..000000000
--- a/plugins/session-recording/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Jurnalele de sesiune"
-  },
-  "hosts": {
-    "enableSessionRecording": "Înregistrarea sesiunii",
-    "enableSessionRecordingDesc": "Înregistrați ieșirea sesiunii terminale pentru o revizuire ulterioară"
-  },
-  "permissions": {
-    "view": {
-      "title": "Vizualizați înregistrările sesiunilor",
-      "description": "Vizualizați și redați propriile înregistrări ale sesiunilor."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Retenție (zile)",
-        "description": "Cât timp este păstrată o înregistrare a sesiunii înainte de a fi ștearsă automat."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Activează înregistrarea sesiunii",
-        "description": "Înregistrați ieșirea terminalului pentru această gazdă, astfel încât să o puteți reda sau descărca mai târziu."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Înregistrare"
-  },
-  "sessionLogs": {
-    "title": "Jurnalele de sesiune",
-    "noLogs": "Încă nu există jurnale de sesiune",
-    "noLogsDesc": "Activați înregistrarea în jurnal pe o gazdă pentru a începe înregistrarea",
-    "duration": "Durată",
-    "viewLog": "Vizualizare jurnal",
-    "downloadLog": "Descărcare",
-    "downloadAsText": "Descărcați ca text",
-    "deleteLog": "Şterge",
-    "confirmDelete": "Ștergeți acest jurnal de sesiune?",
-    "confirmDeleteDesc": "Această acțiune nu poate fi anulată.",
-    "copyContent": "Copie",
-    "copied": "Copiat!",
-    "loadError": "Nu s-au putut încărca jurnalele de sesiune",
-    "deleteError": "Nu s-a putut șterge jurnalul sesiunii",
-    "filterByHost": "Filtrare după gazdă...",
-    "back": "Spate",
-    "empty": "(gol)",
-    "noResults": "Niciun rezultat pentru „{{query}}”",
-    "hostFallback": "Gazdă {{id}}",
-    "sessionFallback": "Sesiune {{id}}"
-  },
-  "player": {
-    "timeline": "Cronologia înregistrării",
-    "speed": "Viteză de redare",
-    "play": "Redă înregistrarea",
-    "pause": "Întrerupe înregistrarea"
-  },
-  "plugin": {
-    "name": "Înregistrarea sesiunii"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/ru_RU.json b/plugins/session-recording/locales/translated/ru_RU.json
deleted file mode 100644
index b8eea342d..000000000
--- a/plugins/session-recording/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Журналы сессий"
-  },
-  "hosts": {
-    "enableSessionRecording": "Запись сессии",
-    "enableSessionRecordingDesc": "Записывать вывод терминальной сессии для последующего просмотра"
-  },
-  "permissions": {
-    "view": {
-      "title": "Просмотреть записи сессий",
-      "description": "Просматривайте и воспроизводите записи своих собственных сессий."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Срок хранения (дни)",
-        "description": "Как долго хранится запись сеанса, прежде чем она будет автоматически удалена."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Включить запись сеанса",
-        "description": "Запишите вывод терминала для этого хоста, чтобы вы могли воспроизвести его или загрузить позже."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Запись"
-  },
-  "sessionLogs": {
-    "title": "Журналы сеансов",
-    "noLogs": "Пока нет журналов сеансов",
-    "noLogsDesc": "Включите ведение журнала сеансов на хосте, чтобы начать запись",
-    "duration": "Продолжительность",
-    "viewLog": "Просмотреть журнал",
-    "downloadLog": "Скачать",
-    "downloadAsText": "Скачать как текст",
-    "deleteLog": "Удалить",
-    "confirmDelete": "Удалить этот журнал сеансов?",
-    "confirmDeleteDesc": "Это действие нельзя отменить.",
-    "copyContent": "Копировать",
-    "copied": "Скопировано!",
-    "loadError": "Не удалось загрузить журналы сеансов",
-    "deleteError": "Не удалось удалить журнал сеанса",
-    "filterByHost": "Фильтровать по хосту...",
-    "back": "Назад",
-    "empty": "(пусто)",
-    "noResults": "Результаты поиска по запросу \"{{query}} отсутствуют",
-    "hostFallback": "Хост {{id}}",
-    "sessionFallback": "Сессия {{id}}"
-  },
-  "player": {
-    "timeline": "Хронология записи",
-    "speed": "скорость воспроизведения",
-    "play": "Воспроизвести запись",
-    "pause": "Приостановить запись"
-  },
-  "plugin": {
-    "name": "Запись сессии"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/sr_SP.json b/plugins/session-recording/locales/translated/sr_SP.json
deleted file mode 100644
index 499822fe2..000000000
--- a/plugins/session-recording/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Записи сесија"
-  },
-  "hosts": {
-    "enableSessionRecording": "Снимање сесије",
-    "enableSessionRecordingDesc": "Снимите излаз терминалне сесије за каснији преглед"
-  },
-  "permissions": {
-    "view": {
-      "title": "Погледајте снимке сесије",
-      "description": "Погледајте и репродукујте снимке сопствених сесија."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Задржавање (дани)",
-        "description": "Колико дуго се снимак сесије чува пре него што се аутоматски обрише."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Омогући снимање сесије",
-        "description": "Снимите излаз терминала за овај хост како бисте га могли касније репродуковати или преузети."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Снимање"
-  },
-  "sessionLogs": {
-    "title": "Записи сесија",
-    "noLogs": "Још нема евиденција сесија",
-    "noLogsDesc": "Омогућите евидентирање сесије на хосту да бисте започели снимање",
-    "duration": "Трајање",
-    "viewLog": "Прикажи дневник",
-    "downloadLog": "Преузми",
-    "downloadAsText": "Преузми као текст",
-    "deleteLog": "Обриши",
-    "confirmDelete": "Да ли желите да обришете овај дневник сесије?",
-    "confirmDeleteDesc": "Ова радња се не може поништити.",
-    "copyContent": "Копија",
-    "copied": "Копирано!",
-    "loadError": "Учитавање евиденције сесије није успело",
-    "deleteError": "Брисање дневника сесије није успело",
-    "filterByHost": "Филтрирај по хосту...",
-    "back": "Назад",
-    "empty": "(празно)",
-    "noResults": "Нема резултата за „{{query}}“",
-    "hostFallback": "Домаћин {{id}}",
-    "sessionFallback": "Сесија {{id}}"
-  },
-  "player": {
-    "timeline": "Временска линија снимања",
-    "speed": "Брзина репродукције",
-    "play": "Пусти снимак",
-    "pause": "Паузирај снимање"
-  },
-  "plugin": {
-    "name": "Снимање сесије"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/sv_SE.json b/plugins/session-recording/locales/translated/sv_SE.json
deleted file mode 100644
index 6c6ada844..000000000
--- a/plugins/session-recording/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Sessionsloggar"
-  },
-  "hosts": {
-    "enableSessionRecording": "Sessionsinspelning",
-    "enableSessionRecordingDesc": "Spela in utdata från terminalsessionen för senare granskning"
-  },
-  "permissions": {
-    "view": {
-      "title": "Visa inspelningar av sessionen",
-      "description": "Se och spela upp dina egna inspelningar av sessioner."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Lagringstid (dagar)",
-        "description": "Hur länge en sessionsinspelning sparas innan den raderas automatiskt."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Aktivera sessionsinspelning",
-        "description": "Spela in terminalutdata för den här värden så att du kan spela upp eller ladda ner den senare."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Inspelning"
-  },
-  "sessionLogs": {
-    "title": "Sessionsloggar",
-    "noLogs": "Inga sessionsloggar ännu",
-    "noLogsDesc": "Aktivera sessionsloggning på en värd för att starta inspelning",
-    "duration": "Varaktighet",
-    "viewLog": "Visa logg",
-    "downloadLog": "Ladda ner",
-    "downloadAsText": "Ladda ner som text",
-    "deleteLog": "Radera",
-    "confirmDelete": "Radera den här sessionsloggen?",
-    "confirmDeleteDesc": "Den här åtgärden kan inte ångras.",
-    "copyContent": "Kopiera",
-    "copied": "Kopierad!",
-    "loadError": "Misslyckades med att läsa in sessionsloggar",
-    "deleteError": "Misslyckades med att radera sessionsloggen",
-    "filterByHost": "Filtrera efter värd...",
-    "back": "Tillbaka",
-    "empty": "(tömma)",
-    "noResults": "Inga resultat för \"{{query}}\"",
-    "hostFallback": "Värd {{id}}",
-    "sessionFallback": "Session {{id}}"
-  },
-  "player": {
-    "timeline": "Inspelningstidslinje",
-    "speed": "Uppspelningshastighet",
-    "play": "Spela upp inspelningen",
-    "pause": "Pausa inspelningen"
-  },
-  "plugin": {
-    "name": "Sessionsinspelning"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/th_TH.json b/plugins/session-recording/locales/translated/th_TH.json
deleted file mode 100644
index 1a163659f..000000000
--- a/plugins/session-recording/locales/translated/th_TH.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "บันทึกเซสชัน"
-  },
-  "hosts": {
-    "enableSessionRecording": "การบันทึกการประชุม",
-    "enableSessionRecordingDesc": "บันทึกผลลัพธ์จากเทอร์มินัลเพื่อตรวจสอบในภายหลัง"
-  },
-  "permissions": {
-    "view": {
-      "title": "ดูบันทึกการประชุม",
-      "description": "ดูและเล่นบันทึกการประชุมของคุณเองได้"
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "การเก็บรักษา (วัน)",
-        "description": "ระบบจะเก็บไฟล์บันทึกการประชุมไว้นานแค่ไหนก่อนที่จะลบออกโดยอัตโนมัติ"
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "เปิดใช้งานการบันทึกเซสชัน",
-        "description": "บันทึกข้อมูลที่แสดงบนเทอร์มินัลของโฮสต์นี้ เพื่อให้คุณสามารถเล่นซ้ำหรือดาวน์โหลดได้ในภายหลัง"
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "การบันทึก"
-  },
-  "sessionLogs": {
-    "title": "บันทึกเซสชัน",
-    "noLogs": "ยังไม่มีบันทึกการใช้งานใดๆ",
-    "noLogsDesc": "เปิดใช้งานการบันทึกเซสชันบนโฮสต์เพื่อเริ่มการบันทึก",
-    "duration": "ระยะเวลา",
-    "viewLog": "ดูบันทึก",
-    "downloadLog": "ดาวน์โหลด",
-    "downloadAsText": "ดาวน์โหลดเป็นข้อความ",
-    "deleteLog": "ลบ",
-    "confirmDelete": "ลบบันทึกการใช้งานนี้หรือไม่?",
-    "confirmDeleteDesc": "การกระทำนี้ไม่สามารถย้อนกลับได้",
-    "copyContent": "สำเนา",
-    "copied": "คัดลอกแล้ว!",
-    "loadError": "ไม่สามารถโหลดบันทึกเซสชันได้",
-    "deleteError": "ไม่สามารถลบบันทึกเซสชันได้",
-    "filterByHost": "กรองตามโฮสต์...",
-    "back": "กลับ",
-    "empty": "(ว่างเปล่า)",
-    "noResults": "ไม่พบผลลัพธ์สำหรับ \"{{query}}\"",
-    "hostFallback": "โฮสต์ {{id}}",
-    "sessionFallback": "เซสชั่น {{id}}"
-  },
-  "player": {
-    "timeline": "ลำดับเวลาการบันทึก",
-    "speed": "ความเร็วในการเล่น",
-    "play": "เล่นการบันทึก",
-    "pause": "หยุดการบันทึกชั่วคราว"
-  },
-  "plugin": {
-    "name": "การบันทึกการประชุม"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/tr_TR.json b/plugins/session-recording/locales/translated/tr_TR.json
deleted file mode 100644
index 84d0425f4..000000000
--- a/plugins/session-recording/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Oturum Kayıtları"
-  },
-  "hosts": {
-    "enableSessionRecording": "Oturum kaydı",
-    "enableSessionRecordingDesc": "Daha sonra gözden geçirmek için terminal oturumu çıktısını kaydet"
-  },
-  "permissions": {
-    "view": {
-      "title": "Oturum kayıtlarını görüntüleyin",
-      "description": "Kendi oturum kayıtlarınızı görüntüleyin ve tekrar oynatın."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Saklama süresi (gün)",
-        "description": "Oturum kaydının otomatik olarak silinmeden önce ne kadar süreyle saklandığı."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Oturum kaydını etkinleştirin",
-        "description": "Bu sunucu için terminal çıktısını kaydedin, böylece daha sonra tekrar oynatabilir veya indirebilirsiniz."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Kayıt"
-  },
-  "sessionLogs": {
-    "title": "Oturum Günlükleri",
-    "noLogs": "Henüz oturum günlüğü yok",
-    "noLogsDesc": "Kayda başlamak için bir sunucuda oturum günlüğünü etkinleştirin",
-    "duration": "Süre",
-    "viewLog": "Günlüğü görüntüle",
-    "downloadLog": "İndir",
-    "downloadAsText": "Metin olarak indir",
-    "deleteLog": "Sil",
-    "confirmDelete": "Bu oturum günlüğü silinsin mi?",
-    "confirmDeleteDesc": "Bu işlem geri alınamaz.",
-    "copyContent": "Kopyala",
-    "copied": "Kopyalandı!",
-    "loadError": "Oturum günlükleri yüklenemedi",
-    "deleteError": "Oturum günlüğü silinemedi",
-    "filterByHost": "Sunucuya göre filtrele...",
-    "back": "Geri",
-    "empty": "(boş)",
-    "noResults": "\"{{query}} \" için sonuç bulunamadı.",
-    "hostFallback": "Sunucu {{id}}",
-    "sessionFallback": "Oturum {{id}}"
-  },
-  "player": {
-    "timeline": "Kayıt zaman çizelgesi",
-    "speed": "Oynatma hızı",
-    "play": "Kaydı oynat",
-    "pause": "Kaydı duraklat"
-  },
-  "plugin": {
-    "name": "Oturum kaydı"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/uk_UA.json b/plugins/session-recording/locales/translated/uk_UA.json
deleted file mode 100644
index fb1fa4792..000000000
--- a/plugins/session-recording/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Журнали сеансів"
-  },
-  "hosts": {
-    "enableSessionRecording": "Запис сеансу",
-    "enableSessionRecordingDesc": "Запис виводу сеансу терміналу для подальшого перегляду"
-  },
-  "permissions": {
-    "view": {
-      "title": "Переглянути записи сеансу",
-      "description": "Переглядайте та відтворюйте власні записи сеансів."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Утримання (дні)",
-        "description": "Як довго зберігається запис сеансу, перш ніж його буде автоматично видалено."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Увімкнути запис сеансу",
-        "description": "Запишіть вивід терміналу для цього хоста, щоб ви могли його відтворити або завантажити пізніше."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Запис"
-  },
-  "sessionLogs": {
-    "title": "Журнали сеансів",
-    "noLogs": "Журналів сеансів поки що немає",
-    "noLogsDesc": "Увімкнути ведення журналу сеансу на хості, щоб розпочати запис",
-    "duration": "Тривалість",
-    "viewLog": "Переглянути журнал",
-    "downloadLog": "Завантажити",
-    "downloadAsText": "Завантажити як текст",
-    "deleteLog": "Видалити",
-    "confirmDelete": "Видалити цей журнал сеансу?",
-    "confirmDeleteDesc": "Цю дію не можна скасувати.",
-    "copyContent": "Копіювати",
-    "copied": "Скопійовано!",
-    "loadError": "Не вдалося завантажити журнали сеансу",
-    "deleteError": "Не вдалося видалити журнал сеансу",
-    "filterByHost": "Фільтрувати за хостом...",
-    "back": "Назад",
-    "empty": "(порожній)",
-    "noResults": "Немає результатів для запиту \"{{query}}\"",
-    "hostFallback": "Хост {{id}}",
-    "sessionFallback": "Сесія {{id}}"
-  },
-  "player": {
-    "timeline": "Хронологія запису",
-    "speed": "Швидкість відтворення",
-    "play": "Відтворити запис",
-    "pause": "Призупинити запис"
-  },
-  "plugin": {
-    "name": "Запис сеансу"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/vi_VN.json b/plugins/session-recording/locales/translated/vi_VN.json
deleted file mode 100644
index ef5910054..000000000
--- a/plugins/session-recording/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "Nhật ký phiên"
-  },
-  "hosts": {
-    "enableSessionRecording": "Ghi phiên",
-    "enableSessionRecordingDesc": "Ghi lại đầu ra phiên terminal để xem lại sau"
-  },
-  "permissions": {
-    "view": {
-      "title": "Xem bản ghi lại các buổi họp",
-      "description": "Xem và phát lại các bản ghi âm buổi tập của chính bạn."
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "Thời gian lưu giữ (ngày)",
-        "description": "Thời gian lưu giữ bản ghi phiên trước khi nó tự động bị xóa."
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "Bật tính năng ghi lại phiên",
-        "description": "Ghi lại thông báo lỗi trên terminal của máy chủ này để bạn có thể phát lại hoặc tải xuống sau."
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "Ghi âm"
-  },
-  "sessionLogs": {
-    "title": "Nhật ký phiên",
-    "noLogs": "Chưa có nhật ký phiên nào",
-    "noLogsDesc": "Bật ghi nhật ký phiên trên máy chủ để bắt đầu ghi",
-    "duration": "Thời lượng",
-    "viewLog": "Xem nhật ký",
-    "downloadLog": "Tải xuống",
-    "downloadAsText": "Tải xuống dưới dạng văn bản",
-    "deleteLog": "Xóa",
-    "confirmDelete": "Xóa nhật ký phiên này?",
-    "confirmDeleteDesc": "Hành động này không thể hoàn tác.",
-    "copyContent": "Sao chép",
-    "copied": "Đã sao chép!",
-    "loadError": "Tải nhật ký phiên thất bại",
-    "deleteError": "Xóa nhật ký phiên thất bại",
-    "filterByHost": "Lọc theo máy chủ...",
-    "back": "Quay lại",
-    "empty": "(trống)",
-    "noResults": "Không tìm thấy kết quả cho \"{{query}}\"",
-    "hostFallback": "Máy chủ {{id}}",
-    "sessionFallback": "Phiên {{id}}"
-  },
-  "player": {
-    "timeline": "Lịch trình ghi âm",
-    "speed": "Tốc độ phát lại",
-    "play": "Phát bản ghi âm",
-    "pause": "Tạm dừng ghi âm"
-  },
-  "plugin": {
-    "name": "Ghi phiên"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/zh_CN.json b/plugins/session-recording/locales/translated/zh_CN.json
deleted file mode 100644
index 8d9e5ff51..000000000
--- a/plugins/session-recording/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "会话日志"
-  },
-  "hosts": {
-    "enableSessionRecording": "会话录制",
-    "enableSessionRecordingDesc": "记录终端会话输出以供日后查看"
-  },
-  "permissions": {
-    "view": {
-      "title": "查看会议录像",
-      "description": "查看并回放您自己的会话录像。"
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "保留时间（天）",
-        "description": "会话录像在自动删除前会保留多长时间？"
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "启用会话录制",
-        "description": "记录此主机的终端输出，以便稍后回放或下载。"
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "记录"
-  },
-  "sessionLogs": {
-    "title": "会话日志",
-    "noLogs": "暂无会话日志",
-    "noLogsDesc": "在主机上启用会话日志以开始记录",
-    "duration": "持续时间",
-    "viewLog": "查看日志",
-    "downloadLog": "下载",
-    "downloadAsText": "下载为文本",
-    "deleteLog": "删除",
-    "confirmDelete": "删除此会话日志？",
-    "confirmDeleteDesc": "此操作无法撤消。",
-    "copyContent": "复制",
-    "copied": "已复制！",
-    "loadError": "加载会话日志失败",
-    "deleteError": "删除会话日志失败",
-    "filterByHost": "按主机筛选...",
-    "back": "返回",
-    "empty": "(空)",
-    "noResults": "没有找到“{{query}}”的结果",
-    "hostFallback": "主机 {{id}}",
-    "sessionFallback": "会话 {{id}}"
-  },
-  "player": {
-    "timeline": "录制时间线",
-    "speed": "播放速度",
-    "play": "播放录音",
-    "pause": "暂停录制"
-  },
-  "plugin": {
-    "name": "会话录制"
-  }
-}
diff --git a/plugins/session-recording/locales/translated/zh_TW.json b/plugins/session-recording/locales/translated/zh_TW.json
deleted file mode 100644
index af50d6099..000000000
--- a/plugins/session-recording/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,63 +0,0 @@
-{
-  "nav": {
-    "sessionLogs": "工作階段記錄"
-  },
-  "hosts": {
-    "enableSessionRecording": "工作階段錄製",
-    "enableSessionRecordingDesc": "記錄終端機工作階段輸出以供日後檢視"
-  },
-  "permissions": {
-    "view": {
-      "title": "查看會議錄影",
-      "description": "查看並回放您自己的會話錄影。"
-    }
-  },
-  "settings": {
-    "admin": {
-      "retentionDays": {
-        "label": "保留時間（天）",
-        "description": "會話錄影在自動刪除前會保留多久？"
-      }
-    },
-    "host": {
-      "enable": {
-        "label": "啟用會話錄製",
-        "description": "記錄此主機的終端輸出，以便稍後重播或下載。"
-      }
-    }
-  },
-  "terminalStatus": {
-    "recording": "記錄"
-  },
-  "sessionLogs": {
-    "title": "工作階段記錄",
-    "noLogs": "尚無任何工作階段記錄",
-    "noLogsDesc": "在主機上啟用工作階段記錄以開始錄製",
-    "duration": "持續時間",
-    "viewLog": "檢視記錄",
-    "downloadLog": "下載",
-    "downloadAsText": "下載為文字",
-    "deleteLog": "刪除",
-    "confirmDelete": "刪除此工作階段記錄？",
-    "confirmDeleteDesc": "此動作無法復原。",
-    "copyContent": "複製",
-    "copied": "已複製！",
-    "loadError": "載入工作階段記錄失敗",
-    "deleteError": "刪除工作階段記錄失敗",
-    "filterByHost": "依主機篩選...",
-    "back": "返回",
-    "empty": "(空的)",
-    "noResults": "沒有找到「{{query}}」的結果",
-    "hostFallback": "主機 {{id}}",
-    "sessionFallback": "會話 {{id}}"
-  },
-  "player": {
-    "timeline": "錄製時間軸",
-    "speed": "播放速度",
-    "play": "播放錄音",
-    "pause": "暫停錄製"
-  },
-  "plugin": {
-    "name": "工作階段錄製"
-  }
-}
diff --git a/plugins/session-recording/manifest.json b/plugins/session-recording/manifest.json
deleted file mode 100644
index bf19a807f..000000000
--- a/plugins/session-recording/manifest.json
+++ /dev/null
@@ -1,80 +0,0 @@
-{
-  "id": "session-recording",
-  "name": "Session Recording",
-  "version": "1.0.0",
-  "description": "Record terminal sessions and play them back or download them later.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Terminal",
-  "icon": "ScrollText",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "hosts:read",
-    "db:own",
-    "files:own",
-    "network:serve",
-    "ui:surface",
-    "events:core",
-    "db:core-refs"
-  ],
-  "provides": [
-    {
-      "service": "recordings.writer",
-      "version": "1.1.0",
-      "permission": "session-recording.view"
-    }
-  ],
-  "contributes": {
-    "tabs": [
-      {
-        "id": "session-logs",
-        "titleKey": "nav.sessionLogs",
-        "icon": "ScrollText",
-        "openFrom": ["rail"]
-      }
-    ],
-    "permissions": [
-      {
-        "name": "view",
-        "titleKey": "permissions.view.title",
-        "descriptionKey": "permissions.view.description",
-        "defaultRoles": ["admin", "user"]
-      }
-    ],
-    "settings": {
-      "admin": [
-        {
-          "key": "retentionDays",
-          "type": "number",
-          "labelKey": "settings.admin.retentionDays.label",
-          "descriptionKey": "settings.admin.retentionDays.description",
-          "min": 1,
-          "max": 3650,
-          "default": 30
-        }
-      ],
-      "host": {
-        "editorGroup": "ssh",
-        "editorOrder": 85,
-        "enableKey": "enableSessionRecording",
-        "enableLabelKey": "settings.host.enable.label",
-        "enableDescriptionKey": "settings.host.enable.description",
-        "fields": []
-      }
-    },
-    "hostCapability": {
-      "key": "enableSessionRecording",
-      "labelKey": "hosts.enableSessionRecording",
-      "editorTab": "general"
-    },
-    "uses": ["terminal.toolbarStatus"]
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"]
-}
diff --git a/plugins/session-recording/migrations/mysql/0001_adopt_session_recordings.sql b/plugins/session-recording/migrations/mysql/0001_adopt_session_recordings.sql
deleted file mode 100644
index b0760ddf7..000000000
--- a/plugins/session-recording/migrations/mysql/0001_adopt_session_recordings.sql
+++ /dev/null
@@ -1,22 +0,0 @@
--- session-recording 0001: adopt_session_recordings
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `session_recordings` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `host_id` int NOT NULL,
-  `user_id` varchar(255),
-  `username` text,
-  `access_id` int,
-  `started_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `ended_at` text,
-  `duration` int,
-  `commands` text,
-  `dangerous_actions` text,
-  `recording_path` text,
-  `protocol` text NOT NULL DEFAULT ('ssh'),
-  `format` text NOT NULL DEFAULT ('text'),
-  `terminated_by_owner` boolean DEFAULT false,
-  `termination_reason` text,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `session_recordings` TO `p_session_recording_session_recordings`;
diff --git a/plugins/session-recording/migrations/postgres/0001_adopt_session_recordings.sql b/plugins/session-recording/migrations/postgres/0001_adopt_session_recordings.sql
deleted file mode 100644
index 4cd436667..000000000
--- a/plugins/session-recording/migrations/postgres/0001_adopt_session_recordings.sql
+++ /dev/null
@@ -1,24 +0,0 @@
--- session-recording 0001: adopt_session_recordings
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "session_recordings" (
-  "id" serial PRIMARY KEY,
-  "host_id" integer NOT NULL,
-  "user_id" varchar(255),
-  "username" text,
-  "access_id" integer,
-  "started_at" varchar(255) NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "ended_at" text,
-  "duration" integer,
-  "commands" text,
-  "dangerous_actions" text,
-  "recording_path" text,
-  "protocol" text NOT NULL DEFAULT 'ssh',
-  "format" text NOT NULL DEFAULT 'text',
-  "terminated_by_owner" boolean DEFAULT false,
-  "termination_reason" text,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_session_recordings_user_started" ON "session_recordings" ("user_id", "started_at");
-CREATE INDEX IF NOT EXISTS "idx_session_recordings_host" ON "session_recordings" ("host_id");
-ALTER TABLE "session_recordings" RENAME TO "p_session_recording_session_recordings";
diff --git a/plugins/session-recording/migrations/snapshot.json b/plugins/session-recording/migrations/snapshot.json
deleted file mode 100644
index add1a0836..000000000
--- a/plugins/session-recording/migrations/snapshot.json
+++ /dev/null
@@ -1,76 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "session_recordings": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "hostId": {
-          "type": "refHost",
-          "notNull": true
-        },
-        "userId": {
-          "type": "varchar",
-          "length": 255
-        },
-        "username": {
-          "type": "text"
-        },
-        "accessId": {
-          "type": "integer"
-        },
-        "startedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "endedAt": {
-          "type": "timestamp"
-        },
-        "duration": {
-          "type": "integer"
-        },
-        "commands": {
-          "type": "text"
-        },
-        "dangerousActions": {
-          "type": "text"
-        },
-        "recordingPath": {
-          "type": "text"
-        },
-        "protocol": {
-          "type": "text",
-          "notNull": true,
-          "defaultValue": "ssh"
-        },
-        "format": {
-          "type": "text",
-          "notNull": true,
-          "defaultValue": "text"
-        },
-        "terminatedByOwner": {
-          "type": "boolean",
-          "defaultValue": false
-        },
-        "terminationReason": {
-          "type": "text"
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_session_recordings_user_started",
-          "columns": ["userId", "startedAt"]
-        },
-        {
-          "name": "idx_session_recordings_host",
-          "columns": ["hostId"]
-        }
-      ],
-      "adopts": "session_recordings"
-    }
-  }
-}
diff --git a/plugins/session-recording/migrations/sqlite/0001_adopt_session_recordings.sql b/plugins/session-recording/migrations/sqlite/0001_adopt_session_recordings.sql
deleted file mode 100644
index 93f9ba02f..000000000
--- a/plugins/session-recording/migrations/sqlite/0001_adopt_session_recordings.sql
+++ /dev/null
@@ -1,24 +0,0 @@
--- session-recording 0001: adopt_session_recordings
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "session_recordings" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "host_id" integer NOT NULL,
-  "user_id" text,
-  "username" text,
-  "access_id" integer,
-  "started_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "ended_at" text,
-  "duration" integer,
-  "commands" text,
-  "dangerous_actions" text,
-  "recording_path" text,
-  "protocol" text NOT NULL DEFAULT 'ssh',
-  "format" text NOT NULL DEFAULT 'text',
-  "terminated_by_owner" integer DEFAULT 0,
-  "termination_reason" text,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_session_recordings_user_started" ON "session_recordings" ("user_id", "started_at");
-CREATE INDEX IF NOT EXISTS "idx_session_recordings_host" ON "session_recordings" ("host_id");
-ALTER TABLE "session_recordings" RENAME TO "p_session_recording_session_recordings";
diff --git a/plugins/session-recording/package.json b/plugins/session-recording/package.json
deleted file mode 100644
index ce4fb7e10..000000000
--- a/plugins/session-recording/package.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
-  "name": "@termix-plugin/session-recording",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "@xterm/addon-fit": "^0.11.0",
-    "@xterm/xterm": "^6.0.0",
-    "guacamole-common-js": "^1.5.0",
-    "lucide-react": "^1.33.0"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "react": "^19.2.8"
-  },
-  "termix": {
-    "patches": [
-      "xterm-android-ime",
-      "guacamole-common-js-flush"
-    ]
-  }
-}
diff --git a/plugins/session-recording/src/backend/files.ts b/plugins/session-recording/src/backend/files.ts
deleted file mode 100644
index 32da411a8..000000000
--- a/plugins/session-recording/src/backend/files.ts
+++ /dev/null
@@ -1,39 +0,0 @@
-import fs from "node:fs/promises";
-import path from "node:path";
-
-export function isInside(file: string, dir: string): boolean {
-  return path.resolve(file).startsWith(`${path.resolve(dir)}${path.sep}`);
-}
-
-/**
- * Moves a finished recording someone else wrote (guacd's, in remote
- * desktop's recordings folder) under this plugin's data folder, which is the
- * only place playback and retention read from. Returns where it ended up;
- * a file that is not there is left alone.
- */
-export async function adoptRecordingFile(
-  source: string,
-  dataDir: string,
-): Promise<string> {
-  if (isInside(source, dataDir)) return source;
-  const target = path.join(
-    dataDir,
-    "session_recordings",
-    path.basename(path.dirname(source)),
-    path.basename(source),
-  );
-  try {
-    await fs.access(source);
-  } catch {
-    return source;
-  }
-  await fs.mkdir(path.dirname(target), { recursive: true });
-  try {
-    await fs.rename(source, target);
-  } catch (error) {
-    if ((error as NodeJS.ErrnoException).code !== "EXDEV") throw error;
-    await fs.copyFile(source, target);
-    await fs.unlink(source);
-  }
-  return target;
-}
diff --git a/plugins/session-recording/src/backend/index.ts b/plugins/session-recording/src/backend/index.ts
deleted file mode 100644
index 8df126870..000000000
--- a/plugins/session-recording/src/backend/index.ts
+++ /dev/null
@@ -1,42 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { sessionRecordings } from "./tables.js";
-import { createSessionRecordingRepository } from "./repository.js";
-import { createRecordingsWriter, type RecordingsWriterV1 } from "./service.js";
-import { registerSessionRecordingRoutes } from "./routes.js";
-import { startRetentionSweep } from "./retention.js";
-
-export type { RecordingsWriterV1, RecordingSink } from "./service.js";
-
-export async function activate(ctx: PluginContext) {
-  const table = await ctx.db.define(sessionRecordings);
-  const repository = createSessionRecordingRepository(ctx.db, table, ctx.hosts);
-
-  ctx.http
-    .router<Router>()
-    .use(
-      registerSessionRecordingRoutes(ctx, repository, () =>
-        ctx.files.dataDir(),
-      ),
-    );
-
-  ctx.services.provide<RecordingsWriterV1>(
-    "recordings.writer",
-    createRecordingsWriter(ctx, repository),
-  );
-
-  // A recording is evidence about the host as much as the person, so it
-  // outlives the account: the row's userId is cleared rather than cascading.
-  ctx.events.on("user.deleted", (payload) => {
-    const { userId } = payload as { userId: string };
-    void repository.anonymizeByUserId(userId);
-  });
-
-  startRetentionSweep(ctx, repository, () => ctx.files.dataDir());
-
-  ctx.log.info(
-    "Session Recording routes mounted at /plugin-api/session-recording",
-  );
-}
-
-export async function deactivate() {}
diff --git a/plugins/session-recording/src/backend/repository.ts b/plugins/session-recording/src/backend/repository.ts
deleted file mode 100644
index 7a3779f68..000000000
--- a/plugins/session-recording/src/backend/repository.ts
+++ /dev/null
@@ -1,240 +0,0 @@
-import { and, desc, eq, inArray, lt } from "drizzle-orm";
-import type { PluginDatabase, PluginHosts } from "@termix/plugin-sdk/backend";
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// The table comes from ctx.db.define, which the SDK hands back untyped, and
-// the drizzle handle is the server's own. Typed at this module's edge instead.
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export interface SessionRecordingRecord {
-  id: number;
-  hostId: number;
-  userId: string | null;
-  username: string | null;
-  startedAt: string;
-  endedAt: string | null;
-  duration: number | null;
-  recordingPath: string | null;
-  protocol: string;
-  format: string | null;
-  terminatedByOwner: boolean | null;
-  terminationReason: string | null;
-}
-
-export interface SessionRecordingListRecord {
-  id: number;
-  hostId: number;
-  userId: string | null;
-  startedAt: string;
-  endedAt: string | null;
-  duration: number | null;
-  recordingPath: string | null;
-  protocol: string;
-  format: string | null;
-  username: string | null;
-  hostName: string | null;
-  hostIp: string | null;
-}
-
-export interface SessionRecordingCreateInput {
-  hostId: number;
-  userId: string;
-  username?: string | null;
-  startedAt: string;
-  endedAt?: string | null;
-  duration?: number | null;
-  recordingPath?: string | null;
-  protocol?: string | null;
-  format?: string | null;
-  terminatedByOwner?: boolean | null;
-  terminationReason?: string | null;
-}
-
-export type SessionRecordingRepository = ReturnType<
-  typeof createSessionRecordingRepository
->;
-
-/**
- * Written without RETURNING so it runs the same on all three engines: an
- * insert is read back by a marker key it was given, an update by its id.
- */
-export function createSessionRecordingRepository(
-  db: PluginDatabase,
-  table: Table,
-  hosts: PluginHosts,
-) {
-  const client = () => db.client<Drizzle>();
-
-  async function usernameFor(userId: string): Promise<string | null> {
-    const { users } = await db.refs<{ users: Table }>();
-    const drizzle = await client();
-    const rows = await drizzle
-      .select({ username: users.username })
-      .from(users)
-      .where(eq(users.id, userId));
-    return rows[0]?.username ?? null;
-  }
-
-  async function withHostNames(
-    rows: SessionRecordingListRecord[],
-  ): Promise<SessionRecordingListRecord[]> {
-    const list = await hosts.list();
-    const byId = new Map(list.map((host) => [host.id, host]));
-    return rows.map((row) => {
-      const host = byId.get(row.hostId);
-      return { ...row, hostName: host?.name ?? null, hostIp: host?.ip ?? null };
-    });
-  }
-
-  return {
-    usernameFor,
-
-    /**
-     * Inserts a row and returns it. recordingPath is the caller's read-back
-     * key: every caller sets it to something unique (the file path or a
-     * session id) before insert, since MySQL has no RETURNING to read a new
-     * id back with.
-     */
-    async create(
-      input: SessionRecordingCreateInput & { recordingPath: string },
-    ): Promise<SessionRecordingRecord> {
-      const drizzle = await client();
-      await drizzle.insert(table).values(input);
-      const rows = await drizzle
-        .select()
-        .from(table)
-        .where(eq(table.recordingPath, input.recordingPath))
-        .orderBy(desc(table.id))
-        .limit(1);
-      await db.persist();
-      return rows[0];
-    },
-
-    async updateEnded(
-      id: number,
-      input: {
-        endedAt: string;
-        duration: number | null;
-        terminatedByOwner?: boolean;
-        terminationReason?: string | null;
-      },
-    ): Promise<void> {
-      const drizzle = await client();
-      await drizzle.update(table).set(input).where(eq(table.id, id));
-      await db.persist();
-    },
-
-    async findByIdForUser(
-      userId: string,
-      id: number,
-    ): Promise<SessionRecordingRecord | null> {
-      const drizzle = await client();
-      const rows = await drizzle
-        .select()
-        .from(table)
-        .where(and(eq(table.id, id), eq(table.userId, userId)))
-        .limit(1);
-      return rows[0] ?? null;
-    },
-
-    async findPathByIdForUser(
-      userId: string,
-      id: number,
-    ): Promise<{
-      id: number;
-      recordingPath: string | null;
-      format: string | null;
-    } | null> {
-      const drizzle = await client();
-      const rows = await drizzle
-        .select({
-          id: table.id,
-          recordingPath: table.recordingPath,
-          format: table.format,
-        })
-        .from(table)
-        .where(and(eq(table.id, id), eq(table.userId, userId)))
-        .limit(1);
-      return rows[0] ?? null;
-    },
-
-    async listByUserIdWithHost(
-      userId: string,
-    ): Promise<SessionRecordingListRecord[]> {
-      const drizzle = await client();
-      const rows = (await drizzle
-        .select()
-        .from(table)
-        .where(eq(table.userId, userId))
-        .orderBy(desc(table.startedAt))) as SessionRecordingListRecord[];
-      return withHostNames(rows);
-    },
-
-    async listPathsOlderThan(
-      cutoff: string,
-    ): Promise<Array<{ id: number; recordingPath: string | null }>> {
-      const drizzle = await client();
-      return drizzle
-        .select({ id: table.id, recordingPath: table.recordingPath })
-        .from(table)
-        .where(lt(table.startedAt, cutoff));
-    },
-
-    async deleteForUser(userId: string, id: number): Promise<boolean> {
-      const drizzle = await client();
-      const existing = await drizzle
-        .select({ id: table.id })
-        .from(table)
-        .where(and(eq(table.id, id), eq(table.userId, userId)))
-        .limit(1);
-      if (existing.length === 0) return false;
-      await drizzle
-        .delete(table)
-        .where(and(eq(table.id, id), eq(table.userId, userId)));
-      await db.persist();
-      return true;
-    },
-
-    async deleteById(id: number): Promise<boolean> {
-      const drizzle = await client();
-      const existing = await drizzle
-        .select({ id: table.id })
-        .from(table)
-        .where(eq(table.id, id))
-        .limit(1);
-      if (existing.length === 0) return false;
-      await drizzle.delete(table).where(eq(table.id, id));
-      await db.persist();
-      return true;
-    },
-
-    async deleteByHostId(hostId: number): Promise<void> {
-      const drizzle = await client();
-      await drizzle.delete(table).where(eq(table.hostId, hostId));
-      await db.persist();
-    },
-
-    async deleteByHostIds(hostIds: number[]): Promise<void> {
-      if (hostIds.length === 0) return;
-      const drizzle = await client();
-      await drizzle.delete(table).where(inArray(table.hostId, hostIds));
-      await db.persist();
-    },
-
-    /**
-     * Detaches recordings from a user being deleted instead of removing them.
-     * A recording is evidence about the host as much as about the person, and
-     * the file stays on disk regardless of the row.
-     */
-    async anonymizeByUserId(userId: string): Promise<void> {
-      const drizzle = await client();
-      await drizzle
-        .update(table)
-        .set({ userId: null })
-        .where(eq(table.userId, userId));
-      await db.persist();
-    },
-  };
-}
diff --git a/plugins/session-recording/src/backend/retention.ts b/plugins/session-recording/src/backend/retention.ts
deleted file mode 100644
index df10b49f7..000000000
--- a/plugins/session-recording/src/backend/retention.ts
+++ /dev/null
@@ -1,64 +0,0 @@
-import fs from "node:fs/promises";
-import path from "node:path";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { SessionRecordingRepository } from "./repository.js";
-
-const DEFAULT_RETENTION_DAYS = 30;
-const PRUNE_INTERVAL_MS = 24 * 60 * 60 * 1000;
-
-async function getRetentionDays(ctx: PluginContext): Promise<number> {
-  const configured = await ctx.settings.get<number>("retentionDays");
-  if (typeof configured === "number" && configured >= 1 && configured <= 3650) {
-    return configured;
-  }
-  return DEFAULT_RETENTION_DAYS;
-}
-
-async function pruneOldRecordings(
-  ctx: PluginContext,
-  repository: SessionRecordingRepository,
-  dataDir: () => Promise<string>,
-): Promise<void> {
-  try {
-    const retentionDays = await getRetentionDays(ctx);
-    const cutoff = new Date(
-      Date.now() - retentionDays * 24 * 60 * 60 * 1000,
-    ).toISOString();
-    const old = await repository.listPathsOlderThan(cutoff);
-    if (old.length === 0) return;
-
-    const base = `${path.resolve(await dataDir())}${path.sep}`;
-    for (const row of old) {
-      if (row.recordingPath) {
-        const resolved = path.resolve(row.recordingPath);
-        if (resolved.startsWith(base)) {
-          await fs.unlink(resolved).catch(() => {});
-        }
-      }
-      await repository.deleteById(row.id);
-    }
-
-    ctx.log.info(`Pruned ${old.length} old session recording(s)`);
-  } catch (error) {
-    ctx.log.warn(
-      `Failed to prune old session recordings: ${
-        error instanceof Error ? error.message : String(error)
-      }`,
-    );
-  }
-}
-
-/** Runs the retention sweep at startup and every 24 hours. */
-export function startRetentionSweep(
-  ctx: PluginContext,
-  repository: SessionRecordingRepository,
-  dataDir: () => Promise<string>,
-): void {
-  void pruneOldRecordings(ctx, repository, dataDir);
-  const timer = setInterval(
-    () => void pruneOldRecordings(ctx, repository, dataDir),
-    PRUNE_INTERVAL_MS,
-  );
-  timer.unref?.();
-  ctx.disposables.add(() => clearInterval(timer));
-}
diff --git a/plugins/session-recording/src/backend/routes.ts b/plugins/session-recording/src/backend/routes.ts
deleted file mode 100644
index 705ec4c0b..000000000
--- a/plugins/session-recording/src/backend/routes.ts
+++ /dev/null
@@ -1,253 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-import express, { type Request, type Response, type Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { SessionRecordingRepository } from "./repository.js";
-
-function actorId(ctx: PluginContext): string | undefined {
-  return ctx.currentActor();
-}
-
-/**
- * @openapi
- * /plugin-api/session-recording/:
- *   get:
- *     summary: List session recordings
- *     description: Returns every terminal session recording for the authenticated user.
- *     tags:
- *       - Session Recording
- *     responses:
- *       200:
- *         description: List of session recordings.
- *       500:
- *         description: Failed to fetch session recordings.
- */
-function registerList(
-  router: Router,
-  ctx: PluginContext,
-  repository: SessionRecordingRepository,
-): void {
-  router.get("/", async (_req: Request, res: Response) => {
-    const userId = actorId(ctx);
-    if (!userId) return res.status(401).json({ error: "Not authenticated" });
-    try {
-      const rows = await repository.listByUserIdWithHost(userId);
-      const records = rows.map((row) => {
-        let sizeBytes: number | null = null;
-        if (row.recordingPath) {
-          try {
-            sizeBytes = fs.statSync(row.recordingPath).size;
-          } catch {
-            // file may have been removed
-          }
-        }
-        return { ...row, sizeBytes };
-      });
-      res.json({ logs: records });
-    } catch (error) {
-      ctx.log.error(
-        "Failed to fetch session recordings",
-        error instanceof Error ? error : new Error(String(error)),
-      );
-      res.status(500).json({ error: "Failed to fetch session recordings" });
-    }
-  });
-}
-
-/**
- * @openapi
- * /plugin-api/session-recording/{id}:
- *   get:
- *     summary: Get session recording metadata
- *     description: Returns metadata for a single session recording.
- *     tags:
- *       - Session Recording
- *     parameters:
- *       - in: path
- *         name: id
- *         required: true
- *         schema: { type: integer }
- *     responses:
- *       200:
- *         description: Session recording metadata.
- *       404:
- *         description: Session recording not found.
- *       500:
- *         description: Failed to fetch session recording.
- */
-function registerGet(
-  router: Router,
-  ctx: PluginContext,
-  repository: SessionRecordingRepository,
-): void {
-  router.get("/:id", async (req: Request, res: Response) => {
-    const userId = actorId(ctx);
-    if (!userId) return res.status(401).json({ error: "Not authenticated" });
-    const rawId = Array.isArray(req.params.id)
-      ? req.params.id[0]
-      : req.params.id;
-    const id = parseInt(rawId, 10);
-    if (isNaN(id)) return res.status(400).json({ error: "Invalid id" });
-
-    try {
-      const row = await repository.findByIdForUser(userId, id);
-      if (!row) return res.status(404).json({ error: "Not found" });
-      res.json({ log: row });
-    } catch (error) {
-      ctx.log.error(
-        "Failed to fetch session recording",
-        error instanceof Error ? error : new Error(String(error)),
-      );
-      res.status(500).json({ error: "Failed to fetch session recording" });
-    }
-  });
-}
-
-/**
- * @openapi
- * /plugin-api/session-recording/{id}/content:
- *   get:
- *     summary: Get session recording content
- *     description: Returns the raw content of a session recording file.
- *     tags:
- *       - Session Recording
- *     parameters:
- *       - in: path
- *         name: id
- *         required: true
- *         schema: { type: integer }
- *     responses:
- *       200:
- *         description: Raw recording content.
- *       404:
- *         description: Session recording or file not found.
- *       500:
- *         description: Failed to read session recording.
- */
-function registerContent(
-  router: Router,
-  ctx: PluginContext,
-  repository: SessionRecordingRepository,
-  dataDir: () => Promise<string>,
-): void {
-  router.get("/:id/content", async (req: Request, res: Response) => {
-    const userId = actorId(ctx);
-    if (!userId) return res.status(401).json({ error: "Not authenticated" });
-    const rawId = Array.isArray(req.params.id)
-      ? req.params.id[0]
-      : req.params.id;
-    const id = parseInt(rawId, 10);
-    if (isNaN(id)) return res.status(400).json({ error: "Invalid id" });
-
-    try {
-      const row = await repository.findPathByIdForUser(userId, id);
-      if (!row) return res.status(404).json({ error: "Not found" });
-
-      const filePath = row.recordingPath;
-      if (!filePath)
-        return res.status(404).json({ error: "No recording file" });
-
-      const resolvedPath = path.resolve(filePath);
-      const base = `${path.resolve(await dataDir())}${path.sep}`;
-      if (!resolvedPath.startsWith(base)) {
-        return res.status(403).json({ error: "Forbidden" });
-      }
-      if (!fs.existsSync(resolvedPath)) {
-        return res.status(404).json({ error: "File not found" });
-      }
-
-      const content = await fs.promises.readFile(resolvedPath);
-      const format =
-        row.format ?? (filePath.endsWith(".cast") ? "asciicast" : "text");
-      const contentType =
-        format === "guacamole"
-          ? "application/vnd.apache.guacamole.recording"
-          : format === "asciicast"
-            ? "application/x-asciicast"
-            : "text/plain";
-      res.type(contentType).send(content);
-    } catch (error) {
-      ctx.log.error(
-        "Failed to read session recording content",
-        error instanceof Error ? error : new Error(String(error)),
-      );
-      res.status(500).json({ error: "Failed to read session recording" });
-    }
-  });
-}
-
-/**
- * @openapi
- * /plugin-api/session-recording/{id}:
- *   delete:
- *     summary: Delete session recording
- *     description: Deletes a session recording and its file.
- *     tags:
- *       - Session Recording
- *     parameters:
- *       - in: path
- *         name: id
- *         required: true
- *         schema: { type: integer }
- *     responses:
- *       200:
- *         description: Session recording deleted.
- *       404:
- *         description: Session recording not found.
- *       500:
- *         description: Failed to delete session recording.
- */
-function registerDelete(
-  router: Router,
-  ctx: PluginContext,
-  repository: SessionRecordingRepository,
-  dataDir: () => Promise<string>,
-): void {
-  router.delete("/:id", async (req: Request, res: Response) => {
-    const userId = actorId(ctx);
-    if (!userId) return res.status(401).json({ error: "Not authenticated" });
-    const rawId = Array.isArray(req.params.id)
-      ? req.params.id[0]
-      : req.params.id;
-    const id = parseInt(rawId, 10);
-    if (isNaN(id)) return res.status(400).json({ error: "Invalid id" });
-
-    try {
-      const row = await repository.findPathByIdForUser(userId, id);
-      if (!row) return res.status(404).json({ error: "Not found" });
-
-      const filePath = row.recordingPath;
-      const deleted = await repository.deleteForUser(userId, id);
-      if (!deleted) return res.status(404).json({ error: "Not found" });
-
-      if (filePath) {
-        const resolvedPath = path.resolve(filePath);
-        const base = `${path.resolve(await dataDir())}${path.sep}`;
-        if (resolvedPath.startsWith(base) && fs.existsSync(resolvedPath)) {
-          await fs.promises.unlink(resolvedPath).catch(() => {});
-        }
-      }
-
-      res.json({ success: true });
-    } catch (error) {
-      ctx.log.error(
-        "Failed to delete session recording",
-        error instanceof Error ? error : new Error(String(error)),
-      );
-      res.status(500).json({ error: "Failed to delete session recording" });
-    }
-  });
-}
-
-export function registerSessionRecordingRoutes(
-  ctx: PluginContext,
-  repository: SessionRecordingRepository,
-  dataDir: () => Promise<string>,
-): Router {
-  const router = express.Router();
-  registerList(router, ctx, repository);
-  registerGet(router, ctx, repository);
-  registerContent(router, ctx, repository, dataDir);
-  registerDelete(router, ctx, repository, dataDir);
-  return router;
-}
diff --git a/plugins/session-recording/src/backend/service.ts b/plugins/session-recording/src/backend/service.ts
deleted file mode 100644
index 73e313e72..000000000
--- a/plugins/session-recording/src/backend/service.ts
+++ /dev/null
@@ -1,133 +0,0 @@
-import fs from "node:fs/promises";
-import path from "node:path";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { SessionRecordingRepository } from "./repository.js";
-import { adoptRecordingFile } from "./files.js";
-
-/**
- * recordings.writer v1, the service ssh-terminal calls to record sessions.
- * 1.1 added enabledFor, for a caller that records outside this plugin.
- *
- * One call per already-batched chunk (ssh-terminal coalesces on a 300ms
- * trailing edge, issue #1049): mkdir and writeFile on the first append,
- * appendFile after that, never per chunk.
- */
-export interface RecordingSink {
-  append: (chunk: string) => Promise<void>;
-  persist: (summary: {
-    endedAt: number;
-    durationSeconds: number;
-    terminatedByOwner: boolean;
-    terminationReason: string | null;
-  }) => Promise<void>;
-  discard: () => void;
-}
-
-export interface RecordingsWriterV1 {
-  /**
-   * Whether the host's recording switch is on, for a caller that has to set
-   * up recording before a session exists (remote desktop tells guacd).
-   */
-  enabledFor: (hostId: number) => Promise<boolean>;
-  /** Null when recording is off for this user or host. */
-  open: (meta: {
-    sessionId: string;
-    hostId: number;
-    userId: string;
-    protocol: "ssh";
-    format: "asciicast";
-    startedAt: number;
-  }) => Promise<RecordingSink | null>;
-  /**
-   * Inserts a row for a recording a caller already wrote to disk itself
-   * (remote desktop's guacd recordings), rather than streaming through
-   * open()/append(). The caller already decided to record. The file is
-   * moved under this plugin's data folder, where playback reads it.
-   */
-  createFinished: (input: {
-    hostId: number;
-    userId: string;
-    startedAt: string;
-    endedAt: string;
-    duration: number | null;
-    recordingPath: string;
-    protocol: string;
-    format: string;
-  }) => Promise<{ id: number }>;
-}
-
-export function createRecordingsWriter(
-  ctx: PluginContext,
-  repository: SessionRecordingRepository,
-): RecordingsWriterV1 {
-  const enabledFor = async (hostId: number) =>
-    (await ctx.settings.getHost<boolean>(hostId, "enableSessionRecording")) !==
-    false;
-
-  return {
-    enabledFor,
-
-    async open(meta) {
-      if (!(await enabledFor(meta.hostId))) return null;
-
-      const dataDir = await ctx.files.dataDir();
-      const dir = path.join(dataDir, "session_logs", meta.userId);
-      const filePath = path.join(dir, `${meta.sessionId}.cast`);
-      let wroteFirst = false;
-      let discarded = false;
-
-      const username = await repository.usernameFor(meta.userId);
-      const row = await repository.create({
-        hostId: meta.hostId,
-        userId: meta.userId,
-        username,
-        startedAt: new Date(meta.startedAt).toISOString(),
-        recordingPath: filePath,
-        protocol: meta.protocol,
-        format: meta.format,
-      });
-
-      return {
-        async append(chunk: string) {
-          if (discarded) return;
-          if (!wroteFirst) {
-            await fs.mkdir(dir, { recursive: true });
-            await fs.writeFile(filePath, chunk);
-            wroteFirst = true;
-          } else {
-            await fs.appendFile(filePath, chunk);
-          }
-        },
-
-        async persist(summary) {
-          if (discarded) return;
-          await repository.updateEnded(row.id, {
-            endedAt: new Date(summary.endedAt).toISOString(),
-            duration: summary.durationSeconds,
-            terminatedByOwner: summary.terminatedByOwner,
-            terminationReason: summary.terminationReason,
-          });
-        },
-
-        discard() {
-          discarded = true;
-          void repository.deleteById(row.id).catch(() => {});
-        },
-      };
-    },
-
-    async createFinished(input) {
-      const username = await repository.usernameFor(input.userId);
-      const recordingPath = await adoptRecordingFile(
-        input.recordingPath,
-        await ctx.files.dataDir(),
-      ).catch(() => input.recordingPath);
-      const row = await repository.create({
-        ...input,
-        recordingPath,
-        username,
-      });
-      return { id: row.id };
-    },
-  };
-}
diff --git a/plugins/session-recording/src/backend/tables.ts b/plugins/session-recording/src/backend/tables.ts
deleted file mode 100644
index bb32940a6..000000000
--- a/plugins/session-recording/src/backend/tables.ts
+++ /dev/null
@@ -1,52 +0,0 @@
-import {
-  adoptLegacyTable,
-  boolean,
-  defineTable,
-  id,
-  integer,
-  refHost,
-  text,
-  timestamp,
-  varchar,
-} from "@termix/plugin-sdk/db";
-
-/**
- * userId is a plain column, not refUser(): a recording is evidence about the
- * host as much as the person, so it outlives the account. The plugin listens
- * for user.deleted and clears userId itself instead of cascading. username
- * keeps an anonymized row attributable.
- */
-export const sessionRecordings = adoptLegacyTable(
-  "session_recordings",
-  defineTable(
-    "session_recordings",
-    {
-      id: id(),
-      hostId: refHost(),
-      userId: varchar(),
-      username: text(),
-      accessId: integer(),
-      startedAt: timestamp().notNull().defaultNow(),
-      endedAt: timestamp(),
-      duration: integer(),
-      commands: text(),
-      dangerousActions: text(),
-      recordingPath: text(),
-      protocol: text().notNull().default("ssh"),
-      format: text().notNull().default("text"),
-      terminatedByOwner: boolean().default(false),
-      terminationReason: text(),
-    },
-    {
-      indexes: [
-        {
-          name: "idx_session_recordings_user_started",
-          columns: ["userId", "startedAt"],
-        },
-        { name: "idx_session_recordings_host", columns: ["hostId"] },
-      ],
-    },
-  ),
-);
-
-export const tables = [sessionRecordings];
diff --git a/plugins/session-recording/src/frontend/RecordingStatus.tsx b/plugins/session-recording/src/frontend/RecordingStatus.tsx
deleted file mode 100644
index c8ee32dbe..000000000
--- a/plugins/session-recording/src/frontend/RecordingStatus.tsx
+++ /dev/null
@@ -1,21 +0,0 @@
-import { Circle } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-/** What ssh-terminal hands a "terminal.toolbarStatus" component. */
-interface TerminalToolbarStatusProps {
-  host?: { pluginSettings?: Record<string, Record<string, unknown>> };
-  isConnected?: boolean;
-}
-
-export function RecordingStatus(props: Record<string, unknown>) {
-  const { isConnected } = props as TerminalToolbarStatusProps;
-  const { t } = useTranslation();
-  if (!isConnected) return null;
-
-  return (
-    <div className="flex items-center gap-1 px-1.5 text-[10px] font-semibold uppercase tracking-wider text-muted-foreground">
-      <Circle className="size-2 fill-red-500 text-red-500" />
-      {t("terminalStatus.recording")}
-    </div>
-  );
-}
diff --git a/plugins/session-recording/src/frontend/SessionLogsPanel.tsx b/plugins/session-recording/src/frontend/SessionLogsPanel.tsx
deleted file mode 100644
index 857a241da..000000000
--- a/plugins/session-recording/src/frontend/SessionLogsPanel.tsx
+++ /dev/null
@@ -1,632 +0,0 @@
-import {
-  useState,
-  useEffect,
-  useCallback,
-  useMemo,
-  useRef,
-  type ReactNode,
-} from "react";
-import {
-  useTranslation,
-  useToast,
-  usePluginApi,
-  usePermission,
-} from "@termix/plugin-sdk/frontend";
-import {
-  Input,
-  Tooltip,
-  TooltipContent,
-  TooltipProvider,
-  TooltipTrigger,
-  copyToClipboard,
-} from "@termix/plugin-sdk/ui";
-import {
-  ArrowLeft,
-  Check,
-  Copy,
-  Download,
-  Eye,
-  FileText,
-  Loader2,
-  ScrollText,
-  Search,
-  X,
-} from "lucide-react";
-import { SessionRecordingPlayer } from "./SessionRecordingPlayer";
-import { asciicastToPlainText, parseAsciicast } from "./asciicast";
-import {
-  createSessionRecordingApi,
-  type SessionLogRecord,
-} from "./session-recording-api";
-
-function useAdaptivePolling(
-  fn: () => Promise<boolean | void>,
-  options: { minIntervalMs: number; maxIntervalMs: number },
-  enabled: boolean,
-) {
-  const fnRef = useRef(fn);
-  fnRef.current = fn;
-
-  useEffect(() => {
-    if (!enabled) return;
-    let interval = options.minIntervalMs;
-    let stable = 0;
-    let cancelled = false;
-    let timer: ReturnType<typeof setTimeout>;
-
-    const tick = async () => {
-      if (cancelled) return;
-      try {
-        const changed = await fnRef.current();
-        if (changed) {
-          interval = options.minIntervalMs;
-          stable = 0;
-        } else {
-          stable++;
-          if (stable >= 3) {
-            interval = Math.min(interval * 1.5, options.maxIntervalMs);
-          }
-        }
-      } catch {
-        // keep polling
-      }
-      if (!cancelled) timer = setTimeout(tick, interval);
-    };
-
-    timer = setTimeout(tick, interval);
-    return () => {
-      cancelled = true;
-      clearTimeout(timer);
-    };
-  }, [enabled, options.minIntervalMs, options.maxIntervalMs]);
-}
-
-function formatDuration(seconds: number | null): string {
-  if (seconds == null) return "--";
-  if (seconds < 60) return `${seconds}s`;
-  const m = Math.floor(seconds / 60);
-  const s = seconds % 60;
-  return s > 0 ? `${m}m ${s}s` : `${m}m`;
-}
-
-function formatBytes(bytes: number | null): string {
-  if (bytes == null || bytes === 0) return "--";
-  if (bytes < 1024) return `${bytes} B`;
-  if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)} KB`;
-  return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
-}
-
-function formatDate(iso: string): string {
-  const d = new Date(iso);
-  return d.toLocaleString(undefined, {
-    month: "short",
-    day: "numeric",
-    hour: "2-digit",
-    minute: "2-digit",
-  });
-}
-
-function buildFilename(log: SessionLogRecord): string {
-  const host = (log.hostName ?? log.hostIp ?? "session")
-    .replace(/[^a-zA-Z0-9._-]/g, "_")
-    .slice(0, 40);
-  const d = new Date(log.startedAt);
-  const y = d.getFullYear();
-  const m = String(d.getMonth() + 1).padStart(2, "0");
-  const day = String(d.getDate()).padStart(2, "0");
-  const h = String(d.getHours()).padStart(2, "0");
-  const min = String(d.getMinutes()).padStart(2, "0");
-  const s = String(d.getSeconds()).padStart(2, "0");
-  const extension =
-    log.format === "guacamole"
-      ? "guac"
-      : log.format === "asciicast"
-        ? "cast"
-        : "log";
-  return `${host}_${y}-${m}-${day}_${h}-${min}-${s}.${extension}`;
-}
-
-function buildTextFilename(log: SessionLogRecord): string {
-  return buildFilename(log).replace(/\.(cast|guac|log)$/, ".txt");
-}
-
-async function extractPlainText(
-  log: SessionLogRecord,
-  blob: Blob,
-): Promise<string | null> {
-  if (log.format === "guacamole") return null;
-  const source = await blob.text();
-  if (log.format === "text") return source;
-  return asciicastToPlainText(parseAsciicast(source));
-}
-
-function SectionHeader({ label, count }: { label: string; count: number }) {
-  return (
-    <div className="flex items-center gap-2 px-3 py-2 border-b border-border/60 bg-muted/20">
-      <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground/60 flex-1">
-        {label}
-      </span>
-      <span className="text-[10px] font-semibold text-muted-foreground/40 bg-muted/60 px-1.5 py-0.5">
-        {count}
-      </span>
-    </div>
-  );
-}
-
-function LogMeta({
-  items,
-  className,
-}: {
-  items: (string | null | undefined)[];
-  className?: string;
-}) {
-  return (
-    <span
-      className={`flex min-w-0 items-center gap-x-2.5 overflow-hidden whitespace-nowrap text-[10px] ${className ?? ""}`}
-    >
-      {items.filter(Boolean).map((item, i) => (
-        <span key={i} className="truncate last:shrink-0">
-          {item}
-        </span>
-      ))}
-    </span>
-  );
-}
-
-const ACTION_BUTTON =
-  "size-6 flex items-center justify-center text-muted-foreground/50 hover:text-foreground hover:bg-muted/60 transition-colors";
-
-function ActionButton({
-  label,
-  onClick,
-  destructive,
-  children,
-}: {
-  label: string;
-  onClick: () => void;
-  destructive?: boolean;
-  children: ReactNode;
-}) {
-  return (
-    <Tooltip>
-      <TooltipTrigger asChild>
-        <button
-          type="button"
-          onClick={onClick}
-          aria-label={label}
-          className={
-            destructive
-              ? "size-6 flex items-center justify-center text-muted-foreground/50 hover:text-destructive hover:bg-destructive/10 transition-colors"
-              : ACTION_BUTTON
-          }
-        >
-          {children}
-        </button>
-      </TooltipTrigger>
-      <TooltipContent side="top" sideOffset={6}>
-        {label}
-      </TooltipContent>
-    </Tooltip>
-  );
-}
-
-function LogRow({
-  log,
-  onView,
-  onDownload,
-  onDownloadText,
-  onDelete,
-}: {
-  log: SessionLogRecord;
-  onView: () => void;
-  onDownload: () => void;
-  onDownloadText: () => void;
-  onDelete: () => void;
-}) {
-  const { t } = useTranslation();
-  const hostLabel =
-    log.hostName ??
-    log.hostIp ??
-    t("sessionLogs.hostFallback", { id: log.hostId });
-
-  return (
-    <div className="group flex items-center gap-2.5 px-3 py-2.5 border-b border-border/40 last:border-b-0 hover:bg-muted/40 transition-colors">
-      <div className="shrink-0 flex items-center justify-center size-7 bg-muted/60 text-muted-foreground">
-        <ScrollText className="size-3.5" />
-      </div>
-
-      <div className="flex flex-col flex-1 min-w-0 gap-0.5">
-        <span className="text-xs font-semibold truncate text-foreground">
-          {hostLabel}
-        </span>
-        <LogMeta
-          className="text-muted-foreground/60"
-          items={[
-            formatDate(log.startedAt),
-            (log.protocol ?? "ssh").toUpperCase(),
-            log.username,
-            formatDuration(log.duration),
-            formatBytes(log.sizeBytes),
-          ]}
-        />
-      </div>
-
-      <TooltipProvider disableHoverableContent>
-        <div className="shrink-0 flex items-center gap-0.5 opacity-0 group-hover:opacity-100 transition-opacity">
-          <ActionButton label={t("sessionLogs.viewLog")} onClick={onView}>
-            <Eye className="size-3" />
-          </ActionButton>
-          {log.format === "asciicast" && (
-            <ActionButton
-              label={t("sessionLogs.downloadAsText")}
-              onClick={onDownloadText}
-            >
-              <FileText className="size-3" />
-            </ActionButton>
-          )}
-          <ActionButton
-            label={t("sessionLogs.downloadLog")}
-            onClick={onDownload}
-          >
-            <Download className="size-3" />
-          </ActionButton>
-          <ActionButton
-            label={t("sessionLogs.deleteLog")}
-            onClick={onDelete}
-            destructive
-          >
-            <X className="size-3" />
-          </ActionButton>
-        </div>
-      </TooltipProvider>
-    </div>
-  );
-}
-
-export function SessionLogsPanel() {
-  const { t } = useTranslation();
-  const toast = useToast();
-  const pluginApi = usePluginApi();
-  const api = useMemo(() => createSessionRecordingApi(pluginApi), [pluginApi]);
-  const canView = usePermission("view");
-  const [logs, setLogs] = useState<SessionLogRecord[]>([]);
-  const [loading, setLoading] = useState(true);
-  const [filter, setFilter] = useState("");
-  const [viewLog, setViewLog] = useState<SessionLogRecord | null>(null);
-  const [viewContent, setViewContent] = useState<string>("");
-  const [viewBlob, setViewBlob] = useState<Blob | null>(null);
-  const [viewText, setViewText] = useState<string | null>(null);
-  const [viewLoading, setViewLoading] = useState(false);
-  const [deleteTarget, setDeleteTarget] = useState<SessionLogRecord | null>(
-    null,
-  );
-  const [deleting, setDeleting] = useState(false);
-  const [copied, setCopied] = useState(false);
-  const logsRef = useRef(logs);
-  logsRef.current = logs;
-
-  const load = useCallback(
-    async (initial = false) => {
-      if (initial) setLoading(true);
-      try {
-        const fresh = await api.list();
-        const changed =
-          logsRef.current.length !== fresh.length ||
-          logsRef.current.some((log, i) => log.id !== fresh[i]?.id);
-        if (changed) {
-          logsRef.current = fresh;
-          setLogs(fresh);
-        }
-        return changed;
-      } catch (error) {
-        if (initial) {
-          toast.error(t("sessionLogs.loadError"));
-          return false;
-        }
-        throw error;
-      } finally {
-        if (initial) setLoading(false);
-      }
-    },
-    [api, t, toast],
-  );
-
-  useEffect(() => {
-    if (!canView) return;
-    void load(true);
-  }, [canView, load]);
-
-  useAdaptivePolling(
-    () => load(false),
-    {
-      minIntervalMs: 5_000,
-      maxIntervalMs: 30_000,
-    },
-    canView,
-  );
-
-  const q = filter.trim().toLowerCase();
-  const filtered = q
-    ? logs.filter((l) =>
-        `${l.hostName ?? ""} ${l.hostIp ?? ""} ${l.username ?? ""} ${l.protocol}`
-          .toLowerCase()
-          .includes(q),
-      )
-    : logs;
-
-  const handleView = async (log: SessionLogRecord) => {
-    setViewLog(log);
-    setViewContent("");
-    setViewBlob(null);
-    setViewText(null);
-    setViewLoading(true);
-    try {
-      if (log.format === "text") {
-        const text = await api.getContent(log.id);
-        setViewContent(text);
-        setViewText(text);
-      } else {
-        const blob = await api.getBlob(log.id);
-        setViewBlob(blob);
-        setViewText(await extractPlainText(log, blob));
-      }
-    } catch {
-      toast.error(t("sessionLogs.loadError"));
-    } finally {
-      setViewLoading(false);
-    }
-  };
-
-  const downloadBlob = (blob: Blob, filename: string) => {
-    const url = URL.createObjectURL(blob);
-    const a = document.createElement("a");
-    a.href = url;
-    a.download = filename;
-    a.click();
-    URL.revokeObjectURL(url);
-  };
-
-  const handleDownload = async (log: SessionLogRecord) => {
-    try {
-      downloadBlob(await api.getBlob(log.id), buildFilename(log));
-    } catch {
-      toast.error(t("sessionLogs.loadError"));
-    }
-  };
-
-  const handleDownloadText = async (log: SessionLogRecord) => {
-    try {
-      const text =
-        log.id === viewLog?.id && viewText != null
-          ? viewText
-          : await extractPlainText(log, await api.getBlob(log.id));
-      if (text == null) {
-        toast.error(t("sessionLogs.loadError"));
-        return;
-      }
-      downloadBlob(
-        new Blob([text], { type: "text/plain" }),
-        buildTextFilename(log),
-      );
-    } catch {
-      toast.error(t("sessionLogs.loadError"));
-    }
-  };
-
-  const handleDelete = async () => {
-    if (!deleteTarget) return;
-    setDeleting(true);
-    try {
-      await api.delete(deleteTarget.id);
-      setLogs((prev) => prev.filter((l) => l.id !== deleteTarget.id));
-      setDeleteTarget(null);
-    } catch {
-      toast.error(t("sessionLogs.deleteError"));
-    } finally {
-      setDeleting(false);
-    }
-  };
-
-  const handleCopy = async () => {
-    if (!viewText) return;
-    const ok = await copyToClipboard(viewText);
-    if (ok) {
-      setCopied(true);
-      setTimeout(() => setCopied(false), 1500);
-    } else {
-      toast.error(t("common.copyFailed"));
-    }
-  };
-
-  if (loading) {
-    return (
-      <div className="flex items-center justify-center flex-1 p-8">
-        <Loader2 className="size-5 text-muted-foreground animate-spin" />
-      </div>
-    );
-  }
-
-  // Inline log viewer
-  if (viewLog) {
-    const hostLabel =
-      viewLog.hostName ??
-      viewLog.hostIp ??
-      t("sessionLogs.hostFallback", { id: viewLog.hostId });
-    return (
-      <div className="flex flex-col flex-1 min-h-0 overflow-hidden">
-        {/* Viewer header */}
-        <div className="flex items-center gap-2 px-2 py-2 border-b border-border/60 bg-muted/20 shrink-0">
-          <button
-            type="button"
-            onClick={() => setViewLog(null)}
-            aria-label={t("sessionLogs.back")}
-            className={ACTION_BUTTON}
-          >
-            <ArrowLeft className="size-3.5" />
-          </button>
-          <div className="flex flex-col flex-1 min-w-0">
-            <span className="text-xs font-semibold truncate text-foreground">
-              {hostLabel}
-            </span>
-            <LogMeta
-              className="text-muted-foreground/50"
-              items={[
-                formatDate(viewLog.startedAt),
-                viewLog.protocol.toUpperCase(),
-                viewLog.duration != null
-                  ? formatDuration(viewLog.duration)
-                  : null,
-                formatBytes(viewLog.sizeBytes),
-              ]}
-            />
-          </div>
-          <TooltipProvider disableHoverableContent>
-            <div className="flex items-center gap-0.5 shrink-0">
-              {viewText != null && (
-                <ActionButton
-                  label={
-                    copied
-                      ? t("sessionLogs.copied")
-                      : t("sessionLogs.copyContent")
-                  }
-                  onClick={handleCopy}
-                >
-                  {copied ? (
-                    <Check className="size-3 text-green-500" />
-                  ) : (
-                    <Copy className="size-3" />
-                  )}
-                </ActionButton>
-              )}
-              {viewLog.format === "asciicast" && (
-                <ActionButton
-                  label={t("sessionLogs.downloadAsText")}
-                  onClick={() => handleDownloadText(viewLog)}
-                >
-                  <FileText className="size-3" />
-                </ActionButton>
-              )}
-              <ActionButton
-                label={t("sessionLogs.downloadLog")}
-                onClick={() => handleDownload(viewLog)}
-              >
-                <Download className="size-3" />
-              </ActionButton>
-            </div>
-          </TooltipProvider>
-        </div>
-
-        {/* Log content */}
-        <div
-          className={`flex-1 min-h-0 min-w-0 ${viewBlob ? "overflow-hidden" : "overflow-y-auto overflow-x-hidden"}`}
-        >
-          {viewLoading ? (
-            <div className="flex items-center justify-center py-16">
-              <Loader2 className="size-4 animate-spin text-muted-foreground" />
-            </div>
-          ) : viewBlob ? (
-            <SessionRecordingPlayer log={viewLog} blob={viewBlob} />
-          ) : (
-            <pre className="p-3 text-[11px] font-mono whitespace-pre-wrap break-all text-foreground/80 leading-relaxed">
-              {viewContent || t("sessionLogs.empty")}
-            </pre>
-          )}
-        </div>
-      </div>
-    );
-  }
-
-  return (
-    <div className="flex flex-col flex-1 min-h-0">
-      <div className="flex-1 overflow-y-auto">
-        {logs.length === 0 ? (
-          <div className="flex flex-col items-center justify-center flex-1 gap-3 p-6 text-center py-16">
-            <div className="size-10 bg-muted/40 flex items-center justify-center">
-              <ScrollText className="size-5 text-muted-foreground/30" />
-            </div>
-            <div className="flex flex-col gap-1">
-              <span className="text-sm font-semibold text-muted-foreground/60">
-                {t("sessionLogs.noLogs")}
-              </span>
-              <span className="text-xs text-muted-foreground/40">
-                {t("sessionLogs.noLogsDesc")}
-              </span>
-            </div>
-          </div>
-        ) : (
-          <>
-            <div className="relative px-3 py-2 border-b border-border/60">
-              <Search className="absolute left-5.5 top-1/2 -translate-y-1/2 size-3.5 text-muted-foreground/50 pointer-events-none" />
-              <Input
-                placeholder={t("sessionLogs.filterByHost")}
-                value={filter}
-                onChange={(e) => setFilter(e.target.value)}
-                className="pl-8 h-7 text-xs"
-              />
-            </div>
-
-            {filtered.length === 0 ? (
-              <div className="flex flex-col items-center justify-center gap-2 py-10 text-center">
-                <span className="text-xs text-muted-foreground/50">
-                  {t("sessionLogs.noResults", { query: filter })}
-                </span>
-              </div>
-            ) : (
-              <div className="flex flex-col">
-                <SectionHeader
-                  label={t("sessionLogs.title")}
-                  count={filtered.length}
-                />
-                {filtered.map((log) => (
-                  <LogRow
-                    key={log.id}
-                    log={log}
-                    onView={() => handleView(log)}
-                    onDownload={() => handleDownload(log)}
-                    onDownloadText={() => handleDownloadText(log)}
-                    onDelete={() => setDeleteTarget(log)}
-                  />
-                ))}
-              </div>
-            )}
-          </>
-        )}
-      </div>
-
-      {/* Inline delete confirmation - positioned against the relative parent in AppShell */}
-      {deleteTarget && (
-        <div className="absolute inset-0 z-50 flex items-center justify-center bg-background/80 backdrop-blur-sm p-4">
-          <div className="bg-popover border border-border shadow-xl w-full max-w-xs flex flex-col gap-4 p-4">
-            <p className="text-sm text-foreground">
-              {t("sessionLogs.confirmDelete")}
-            </p>
-            <div className="flex flex-col text-xs text-muted-foreground">
-              <span className="font-medium text-foreground/80">
-                {deleteTarget.hostName ??
-                  deleteTarget.hostIp ??
-                  t("sessionLogs.sessionFallback", { id: deleteTarget.id })}
-              </span>
-              <span>{formatDate(deleteTarget.startedAt)}</span>
-            </div>
-            <div className="flex justify-end gap-2">
-              <button
-                onClick={() => setDeleteTarget(null)}
-                className="px-3 py-1.5 text-xs border border-border text-muted-foreground hover:text-foreground hover:bg-muted transition-colors"
-              >
-                {t("common.cancel")}
-              </button>
-              <button
-                onClick={handleDelete}
-                disabled={deleting}
-                className="px-3 py-1.5 text-xs bg-destructive text-destructive-foreground hover:bg-destructive/90 transition-colors flex items-center gap-1.5"
-              >
-                {deleting && <Loader2 className="size-3 animate-spin" />}
-                {t("sessionLogs.deleteLog")}
-              </button>
-            </div>
-          </div>
-        </div>
-      )}
-    </div>
-  );
-}
diff --git a/plugins/session-recording/src/frontend/SessionRecordingPlayer.tsx b/plugins/session-recording/src/frontend/SessionRecordingPlayer.tsx
deleted file mode 100644
index be7642c0f..000000000
--- a/plugins/session-recording/src/frontend/SessionRecordingPlayer.tsx
+++ /dev/null
@@ -1,375 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { useCallback, useEffect, useRef, useState } from "react";
-import { Pause, Play } from "lucide-react";
-import { Terminal } from "@xterm/xterm";
-import Guacamole from "guacamole-common-js";
-import "@xterm/xterm/css/xterm.css";
-import { parseAsciicast, type Asciicast } from "./asciicast";
-import type { SessionLogRecord } from "./session-recording-api";
-
-const SPEEDS = [0.5, 1, 2, 4];
-
-function formatPosition(seconds: number) {
-  const minutes = Math.floor(seconds / 60);
-  return `${minutes}:${String(Math.floor(seconds % 60)).padStart(2, "0")}`;
-}
-
-function getErrorMessage(error: unknown, fallback: string): string {
-  return error instanceof Error ? error.message : fallback;
-}
-
-function SeekBar({
-  position,
-  duration,
-  onSeek,
-}: {
-  position: number;
-  duration: number;
-  onSeek: (position: number) => void;
-}) {
-  const { t } = useTranslation();
-  const barRef = useRef<HTMLDivElement>(null);
-  const [dragging, setDragging] = useState(false);
-  const progress = duration > 0 ? Math.min(position / duration, 1) : 0;
-
-  const seekFromPointer = (clientX: number) => {
-    const rect = barRef.current?.getBoundingClientRect();
-    if (!rect || rect.width === 0 || duration <= 0) return;
-    const ratio = Math.min(Math.max((clientX - rect.left) / rect.width, 0), 1);
-    onSeek(ratio * duration);
-  };
-
-  return (
-    <div
-      ref={barRef}
-      role="slider"
-      tabIndex={0}
-      aria-label={t("player.timeline")}
-      aria-valuemin={0}
-      aria-valuemax={duration}
-      aria-valuenow={position}
-      className="group/seek relative h-3 w-full cursor-pointer touch-none outline-none"
-      onPointerDown={(event) => {
-        event.currentTarget.setPointerCapture(event.pointerId);
-        setDragging(true);
-        seekFromPointer(event.clientX);
-      }}
-      onPointerMove={(event) => {
-        if (dragging) seekFromPointer(event.clientX);
-      }}
-      onPointerUp={(event) => {
-        event.currentTarget.releasePointerCapture(event.pointerId);
-        setDragging(false);
-      }}
-      onKeyDown={(event) => {
-        if (event.key === "ArrowLeft") onSeek(Math.max(position - 5, 0));
-        if (event.key === "ArrowRight")
-          onSeek(Math.min(position + 5, duration));
-      }}
-    >
-      <div className="absolute inset-x-0 top-1/2 h-0.5 -translate-y-1/2 bg-border transition-[height] group-hover/seek:h-1 group-focus-visible/seek:h-1">
-        <div
-          className="h-full bg-primary"
-          style={{ width: `${progress * 100}%` }}
-        />
-      </div>
-    </div>
-  );
-}
-
-function PlaybackControls({
-  playing,
-  position,
-  duration,
-  speed,
-  onToggle,
-  onSeek,
-  onSpeed,
-}: {
-  playing: boolean;
-  position: number;
-  duration: number;
-  speed: number;
-  onToggle: () => void;
-  onSeek: (position: number) => void;
-  onSpeed: (speed: number) => void;
-}) {
-  const { t } = useTranslation();
-  return (
-    <div className="shrink-0 border-t border-border/60 bg-muted/20">
-      <SeekBar position={position} duration={duration} onSeek={onSeek} />
-      <div className="flex items-center gap-2 px-1 pb-1">
-        <button
-          type="button"
-          onClick={onToggle}
-          className="flex size-6 items-center justify-center text-muted-foreground hover:bg-muted hover:text-foreground"
-          aria-label={playing ? t("player.pause") : t("player.play")}
-        >
-          {playing ? (
-            <Pause className="size-3.5" />
-          ) : (
-            <Play className="size-3.5" />
-          )}
-        </button>
-        <span className="flex-1 text-[10px] tabular-nums text-muted-foreground">
-          {formatPosition(Math.min(position, duration))} /{" "}
-          {formatPosition(duration)}
-        </span>
-        <div
-          className="flex items-center"
-          role="group"
-          aria-label={t("player.speed")}
-        >
-          {SPEEDS.map((value) => (
-            <button
-              key={value}
-              type="button"
-              onClick={() => onSpeed(value)}
-              aria-pressed={speed === value}
-              className={
-                speed === value
-                  ? "h-5 px-1.5 text-[10px] tabular-nums bg-muted text-foreground"
-                  : "h-5 px-1.5 text-[10px] tabular-nums text-muted-foreground/60 hover:text-foreground"
-              }
-            >
-              {value}x
-            </button>
-          ))}
-        </div>
-      </div>
-    </div>
-  );
-}
-
-function AsciicastPlayer({ blob }: { blob: Blob }) {
-  const containerRef = useRef<HTMLDivElement>(null);
-  const screenRef = useRef<HTMLDivElement>(null);
-  const terminalRef = useRef<Terminal | null>(null);
-  const recordingRef = useRef<Asciicast | null>(null);
-  const positionRef = useRef(0);
-  const eventIndexRef = useRef(0);
-  const [position, setPosition] = useState(0);
-  const [duration, setDuration] = useState(0);
-  const [speed, setSpeed] = useState(1);
-  const [playing, setPlaying] = useState(false);
-  const [error, setError] = useState("");
-
-  const renderAt = useCallback((nextPosition: number) => {
-    const terminal = terminalRef.current;
-    const recording = recordingRef.current;
-    if (!terminal || !recording) return;
-    if (nextPosition < positionRef.current) {
-      terminal.reset();
-      terminal.resize(recording.width, recording.height);
-      eventIndexRef.current = 0;
-    }
-    while (eventIndexRef.current < recording.events.length) {
-      const [time, type, data] = recording.events[eventIndexRef.current];
-      if (time > nextPosition) break;
-      if (type === "o") terminal.write(data);
-      if (type === "r") {
-        const [cols, rows] = data.split("x").map(Number);
-        if (cols > 0 && rows > 0) terminal.resize(cols, rows);
-      }
-      eventIndexRef.current++;
-    }
-    positionRef.current = nextPosition;
-    setPosition(nextPosition);
-  }, []);
-
-  useEffect(() => {
-    const container = containerRef.current;
-    const screen = screenRef.current;
-    if (!container || !screen) return;
-    const terminal = new Terminal({
-      cursorBlink: false,
-      disableStdin: true,
-      convertEol: false,
-      fontSize: 12,
-      theme: { background: "#09090b" },
-    });
-    terminal.open(screen);
-    terminalRef.current = terminal;
-    // The recording keeps its own size, scaled down to fit the panel.
-    const fit = () => {
-      const width = screen.offsetWidth;
-      const height = screen.offsetHeight;
-      if (!width || !height) return;
-      const scale = Math.min(
-        1,
-        container.clientWidth / width,
-        container.clientHeight / height,
-      );
-      screen.style.transform = `scale(${scale})`;
-    };
-    const observer = new ResizeObserver(fit);
-    observer.observe(container);
-    observer.observe(screen);
-    const resizeListener = terminal.onResize(() => requestAnimationFrame(fit));
-
-    blob
-      .text()
-      .then((source) => {
-        const recording = parseAsciicast(source);
-        recordingRef.current = recording;
-        setDuration(recording.duration);
-        terminal.resize(recording.width, recording.height);
-        renderAt(0);
-      })
-      .catch((reason) => setError(getErrorMessage(reason, String(reason))));
-
-    return () => {
-      observer.disconnect();
-      resizeListener.dispose();
-      terminal.dispose();
-      terminalRef.current = null;
-    };
-  }, [blob, renderAt]);
-
-  useEffect(() => {
-    if (!playing || !recordingRef.current) return;
-    let frame = 0;
-    let previous = performance.now();
-    const tick = (now: number) => {
-      const next = Math.min(
-        duration,
-        positionRef.current + ((now - previous) / 1000) * speed,
-      );
-      previous = now;
-      renderAt(next);
-      if (next >= duration) setPlaying(false);
-      else frame = requestAnimationFrame(tick);
-    };
-    frame = requestAnimationFrame(tick);
-    return () => cancelAnimationFrame(frame);
-  }, [duration, playing, renderAt, speed]);
-
-  if (error) return <div className="p-4 text-xs text-destructive">{error}</div>;
-  return (
-    <div className="flex h-full min-h-0 min-w-0 flex-col overflow-hidden">
-      <div
-        ref={containerRef}
-        className="min-h-0 min-w-0 flex-1 overflow-hidden bg-[#09090b] p-2"
-      >
-        <div ref={screenRef} className="w-max origin-top-left" />
-      </div>
-      <PlaybackControls
-        playing={playing}
-        position={position}
-        duration={duration}
-        speed={speed}
-        onToggle={() => {
-          if (!playing && position >= duration) renderAt(0);
-          setPlaying((value) => !value);
-        }}
-        onSeek={renderAt}
-        onSpeed={setSpeed}
-      />
-    </div>
-  );
-}
-
-function GuacamolePlayer({ blob }: { blob: Blob }) {
-  const containerRef = useRef<HTMLDivElement>(null);
-  const recordingRef = useRef<Guacamole.SessionRecording | null>(null);
-  const positionRef = useRef(0);
-  const [position, setPosition] = useState(0);
-  const [duration, setDuration] = useState(0);
-  const [speed, setSpeed] = useState(1);
-  const [playing, setPlaying] = useState(false);
-  const [error, setError] = useState("");
-
-  useEffect(() => {
-    if (!containerRef.current) return;
-    const recording = new Guacamole.SessionRecording(blob, 100);
-    recordingRef.current = recording;
-    const display = recording.getDisplay();
-    const element = display.getElement();
-    containerRef.current.replaceChildren(element);
-    const fit = () => {
-      const width = display.getWidth();
-      if (width && containerRef.current) {
-        display.scale(containerRef.current.clientWidth / width);
-      }
-    };
-    const observer = new ResizeObserver(fit);
-    observer.observe(containerRef.current);
-    recording.onload = () => {
-      setDuration(recording.getDuration() / 1000);
-      fit();
-    };
-    recording.onprogress = (nextDuration) => setDuration(nextDuration / 1000);
-    recording.onseek = (nextPosition) => {
-      positionRef.current = nextPosition / 1000;
-      setPosition(positionRef.current);
-    };
-    recording.onerror = setError;
-
-    return () => {
-      observer.disconnect();
-      recording.abort();
-      recordingRef.current = null;
-    };
-  }, [blob]);
-
-  useEffect(() => {
-    const recording = recordingRef.current;
-    if (!recording || !playing) return;
-    recording.pause();
-    let previous = performance.now();
-    let nextPosition = positionRef.current;
-    const interval = window.setInterval(() => {
-      const now = performance.now();
-      nextPosition = Math.min(
-        duration,
-        nextPosition + ((now - previous) / 1000) * speed,
-      );
-      previous = now;
-      recording.seek(nextPosition * 1000);
-      if (nextPosition >= duration) setPlaying(false);
-    }, 100);
-    return () => clearInterval(interval);
-  }, [duration, playing, speed]);
-
-  if (error) return <div className="p-4 text-xs text-destructive">{error}</div>;
-  return (
-    <div className="flex h-full min-h-0 min-w-0 flex-col overflow-hidden">
-      <div
-        ref={containerRef}
-        className="min-h-0 flex-1 overflow-hidden bg-black"
-      />
-      <PlaybackControls
-        playing={playing}
-        position={position}
-        duration={duration}
-        speed={speed}
-        onToggle={() => {
-          const recording = recordingRef.current;
-          if (!recording) return;
-          if (!playing && position >= duration) recording.seek(0);
-          setPlaying((value) => !value);
-        }}
-        onSeek={(nextPosition) => {
-          recordingRef.current?.seek(nextPosition * 1000);
-          positionRef.current = nextPosition;
-          setPosition(nextPosition);
-        }}
-        onSpeed={setSpeed}
-      />
-    </div>
-  );
-}
-
-export function SessionRecordingPlayer({
-  log,
-  blob,
-}: {
-  log: SessionLogRecord;
-  blob: Blob;
-}) {
-  return log.format === "guacamole" ? (
-    <GuacamolePlayer blob={blob} />
-  ) : (
-    <AsciicastPlayer blob={blob} />
-  );
-}
diff --git a/plugins/session-recording/src/frontend/asciicast.ts b/plugins/session-recording/src/frontend/asciicast.ts
deleted file mode 100644
index 62d872f96..000000000
--- a/plugins/session-recording/src/frontend/asciicast.ts
+++ /dev/null
@@ -1,78 +0,0 @@
-import { Terminal } from "@xterm/xterm";
-
-export type AsciicastEvent = [
-  time: number,
-  type: "i" | "o" | "r",
-  data: string,
-];
-
-export type Asciicast = {
-  width: number;
-  height: number;
-  duration: number;
-  events: AsciicastEvent[];
-};
-
-export function parseAsciicast(source: string): Asciicast {
-  const lines = source.trim().split("\n");
-  const header = JSON.parse(lines.shift() || "{}") as {
-    version?: number;
-    width?: number;
-    height?: number;
-  };
-  if (header.version !== 2) throw new Error("Unsupported asciicast version");
-
-  const events = lines
-    .filter(Boolean)
-    .map((line) => JSON.parse(line) as AsciicastEvent)
-    .filter(
-      ([time, type, data]) =>
-        Number.isFinite(time) &&
-        (type === "i" || type === "o" || type === "r") &&
-        typeof data === "string",
-    );
-
-  return {
-    width: header.width || 80,
-    height: header.height || 24,
-    duration: events.at(-1)?.[0] || 0,
-    events,
-  };
-}
-
-function writeAsync(terminal: Terminal, data: string): Promise<void> {
-  return new Promise((resolve) => terminal.write(data, resolve));
-}
-
-// Replays the recording into an offscreen terminal and reads back its
-// rendered buffer, so cursor movement/overwrites resolve the same way
-// they would on screen instead of leaving raw ANSI escapes in the text.
-export async function asciicastToPlainText(
-  recording: Asciicast,
-): Promise<string> {
-  const terminal = new Terminal({
-    cols: recording.width,
-    rows: recording.height,
-    allowProposedApi: true,
-  });
-
-  try {
-    for (const [, type, data] of recording.events) {
-      if (type === "o") await writeAsync(terminal, data);
-      if (type === "r") {
-        const [cols, rows] = data.split("x").map(Number);
-        if (cols > 0 && rows > 0) terminal.resize(cols, rows);
-      }
-    }
-
-    const buffer = terminal.buffer.active;
-    const lines: string[] = [];
-    for (let i = 0; i < buffer.length; i++) {
-      lines.push(buffer.getLine(i)?.translateToString(true) ?? "");
-    }
-    while (lines.length > 0 && lines.at(-1) === "") lines.pop();
-    return lines.join("\n");
-  } finally {
-    terminal.dispose();
-  }
-}
diff --git a/plugins/session-recording/src/frontend/index.tsx b/plugins/session-recording/src/frontend/index.tsx
deleted file mode 100644
index 35b66413d..000000000
--- a/plugins/session-recording/src/frontend/index.tsx
+++ /dev/null
@@ -1,42 +0,0 @@
-import { ScrollText } from "lucide-react";
-import type { TermixApp } from "@termix/plugin-sdk/frontend";
-import { SessionLogsPanel } from "./SessionLogsPanel";
-import { RecordingStatus } from "./RecordingStatus";
-
-export function activate(app: TermixApp): void {
-  app.registerRailItem({
-    id: "session-logs",
-    icon: ScrollText,
-    titleKey: "nav.sessionLogs",
-    kind: "panel",
-    promotable: true,
-    rightDockable: true,
-    separatorAfter: true,
-    permission: "view",
-  });
-
-  app.registerPanel("session-logs", () => <SessionLogsPanel />);
-
-  app.registerTab("session-logs", () => <SessionLogsPanel />, {
-    icon: ScrollText,
-    titleKey: "nav.sessionLogs",
-    hostless: true,
-  });
-
-  app.registerSlotContribution("terminal.toolbarStatus", {
-    actionId: "session-recording.terminalStatus",
-    titleKey: "nav.sessionLogs",
-    kind: "component",
-    component: RecordingStatus,
-    when: (context) => {
-      const host = context.host as
-        | { pluginSettings?: Record<string, Record<string, unknown>> }
-        | undefined;
-      const enabled =
-        host?.pluginSettings?.["session-recording"]?.enableSessionRecording;
-      return enabled !== false;
-    },
-  });
-}
-
-export function deactivate(): void {}
diff --git a/plugins/session-recording/src/frontend/session-recording-api.ts b/plugins/session-recording/src/frontend/session-recording-api.ts
deleted file mode 100644
index 17e6b9c7d..000000000
--- a/plugins/session-recording/src/frontend/session-recording-api.ts
+++ /dev/null
@@ -1,44 +0,0 @@
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-
-export type SessionLogRecord = {
-  id: number;
-  hostId: number;
-  userId: string | null;
-  startedAt: string;
-  endedAt: string | null;
-  duration: number | null;
-  recordingPath: string | null;
-  hostName: string | null;
-  hostIp: string | null;
-  sizeBytes: number | null;
-  protocol: "ssh" | "rdp" | "vnc" | "telnet";
-  format: "text" | "asciicast" | "guacamole";
-  username: string | null;
-};
-
-export function createSessionRecordingApi(api: PluginApiClient) {
-  return {
-    async list(): Promise<SessionLogRecord[]> {
-      const response = await api.get<{ logs: SessionLogRecord[] }>("/");
-      return response.data.logs;
-    },
-
-    async getBlob(id: number): Promise<Blob> {
-      const response = await api.get<Blob>(`/${id}/content`, {
-        responseType: "blob",
-      });
-      return response.data;
-    },
-
-    async getContent(id: number): Promise<string> {
-      const response = await api.get<string>(`/${id}/content`, {
-        responseType: "text",
-      });
-      return response.data;
-    },
-
-    async delete(id: number): Promise<void> {
-      await api.delete(`/${id}`);
-    },
-  };
-}
diff --git a/plugins/session-recording/tests/backend/helpers.ts b/plugins/session-recording/tests/backend/helpers.ts
deleted file mode 100644
index 9f5334bf5..000000000
--- a/plugins/session-recording/tests/backend/helpers.ts
+++ /dev/null
@@ -1,128 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import type { PluginHostSummary } from "@termix/plugin-sdk/backend";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-export const manifest = manifestJson as unknown as PluginManifest;
-
-export function host(
-  overrides: Partial<PluginHostSummary> = {},
-): PluginHostSummary {
-  return {
-    id: 7,
-    userId: "user-1",
-    name: "web",
-    ip: "10.0.0.5",
-    port: 22,
-    username: "root",
-    tags: null,
-    folder: null,
-    authType: "password",
-    ...overrides,
-  };
-}
-
-export interface TestServer {
-  db: TestDb;
-  mock: MockPluginContext;
-  request: (
-    method: string,
-    path: string,
-    options?: { user?: string; body?: unknown },
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any }>;
-  requestBinary: (
-    method: string,
-    path: string,
-    options?: { user?: string },
-  ) => Promise<{ status: number; body: ArrayBuffer; contentType: string }>;
-  close: () => Promise<void>;
-}
-
-export async function startServer(
-  options: {
-    permissions?: string[];
-    users?: string[];
-    hosts?: PluginHostSummary[];
-  } = {},
-): Promise<TestServer> {
-  const db = await createTestDb(pluginDir);
-  for (const user of options.users ?? ["user-1", "user-2"]) {
-    db.sqlite
-      .prepare("INSERT INTO users (id, username) VALUES (?, ?)")
-      .run(user, user);
-  }
-  for (const h of options.hosts ?? [host()]) {
-    db.sqlite.prepare("INSERT INTO ssh_data (id) VALUES (?)").run(h.id);
-  }
-
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    permissions: options.permissions ?? ["session-recording.view"],
-    hosts: options.hosts ?? [host()],
-  });
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") ?? undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    db,
-    mock,
-    async request(method, path, { user = "user-1", body: given } = {}) {
-      const body = method === "GET" ? undefined : given;
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        headers: {
-          "x-test-user": user,
-          ...(body !== undefined ? { "content-type": "application/json" } : {}),
-        },
-        body: body !== undefined ? JSON.stringify(body) : undefined,
-      });
-      const text = await response.text();
-      return { status: response.status, body: text ? JSON.parse(text) : null };
-    },
-    async requestBinary(method, path, { user = "user-1" } = {}) {
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        headers: { "x-test-user": user },
-      });
-      return {
-        status: response.status,
-        body: await response.arrayBuffer(),
-        contentType: response.headers.get("content-type") ?? "",
-      };
-    },
-    async close() {
-      for (const dispose of [...mock.disposals].reverse()) await dispose();
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-      db.close();
-    },
-  };
-}
diff --git a/plugins/session-recording/tests/backend/migrations.test.ts b/plugins/session-recording/tests/backend/migrations.test.ts
deleted file mode 100644
index f817fab03..000000000
--- a/plugins/session-recording/tests/backend/migrations.test.ts
+++ /dev/null
@@ -1,141 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { createTestDb, type TestDb } from "@termix/plugin-sdk/testing";
-import { pluginDir } from "./helpers";
-
-// session_recordings as core's SQLite bootstrap created it before 2.9.0.
-const LEGACY_DDL = `
-  CREATE TABLE session_recordings (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    host_id INTEGER NOT NULL,
-    user_id TEXT,
-    username TEXT,
-    access_id INTEGER,
-    started_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    ended_at TEXT,
-    duration INTEGER,
-    commands TEXT,
-    dangerous_actions TEXT,
-    recording_path TEXT,
-    protocol TEXT NOT NULL DEFAULT 'ssh',
-    format TEXT NOT NULL DEFAULT 'text',
-    terminated_by_owner INTEGER DEFAULT 0,
-    termination_reason TEXT,
-    FOREIGN KEY (host_id) REFERENCES ssh_data (id) ON DELETE CASCADE,
-    FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE SET NULL
-  );
-`;
-
-let db: TestDb | null = null;
-
-afterEach(() => {
-  db?.close();
-  db = null;
-});
-
-const tableExists = (name: string) =>
-  !!db!.sqlite
-    .prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?")
-    .get(name);
-
-describe("adopting session_recordings", () => {
-  it("keeps every existing row when the legacy table is there", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1')");
-        sqlite.exec("INSERT INTO ssh_data (id) VALUES (7)");
-        sqlite.exec(LEGACY_DDL);
-        sqlite
-          .prepare(
-            "INSERT INTO session_recordings (host_id, user_id, username, recording_path, protocol, format) VALUES (?, ?, ?, ?, ?, ?)",
-          )
-          .run(
-            7,
-            "user-1",
-            "user-1",
-            "/data/session_logs/user-1/a.cast",
-            "ssh",
-            "asciicast",
-          );
-      },
-    });
-
-    expect(db.applied).toEqual(["0001_adopt_session_recordings"]);
-    expect(tableExists("session_recordings")).toBe(false);
-    expect(tableExists("p_session_recording_session_recordings")).toBe(true);
-
-    expect(
-      db.sqlite
-        .prepare(
-          "SELECT host_id, user_id, recording_path, protocol, format FROM p_session_recording_session_recordings",
-        )
-        .all(),
-    ).toEqual([
-      {
-        host_id: 7,
-        user_id: "user-1",
-        recording_path: "/data/session_logs/user-1/a.cast",
-        protocol: "ssh",
-        format: "asciicast",
-      },
-    ]);
-  });
-
-  it("creates the table fresh when there is no legacy one", async () => {
-    db = await createTestDb(pluginDir);
-
-    expect(tableExists("session_recordings")).toBe(false);
-    expect(tableExists("p_session_recording_session_recordings")).toBe(true);
-    expect(
-      db.sqlite
-        .prepare("SELECT * FROM p_session_recording_session_recordings")
-        .all(),
-    ).toEqual([]);
-  });
-
-  it("cascades on host delete", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1')");
-        sqlite.exec("INSERT INTO ssh_data (id) VALUES (7)");
-      },
-    });
-    db.sqlite
-      .prepare(
-        "INSERT INTO p_session_recording_session_recordings (host_id, user_id, protocol, format) VALUES (?, ?, ?, ?)",
-      )
-      .run(7, "user-1", "ssh", "asciicast");
-
-    db.sqlite.exec("DELETE FROM ssh_data WHERE id = 7");
-
-    expect(
-      db.sqlite
-        .prepare("SELECT * FROM p_session_recording_session_recordings")
-        .all(),
-    ).toEqual([]);
-  });
-
-  it("keeps a row whose user was deleted, with userId cleared", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1')");
-        sqlite.exec("INSERT INTO ssh_data (id) VALUES (7)");
-      },
-    });
-    db.sqlite
-      .prepare(
-        "INSERT INTO p_session_recording_session_recordings (host_id, user_id, protocol, format) VALUES (?, ?, ?, ?)",
-      )
-      .run(7, "user-1", "ssh", "asciicast");
-
-    // userId is a plain column, not refUser(): deleting the user must not
-    // cascade delete the row (the plugin clears userId itself on
-    // user.deleted instead).
-    db.sqlite.exec("DELETE FROM users WHERE id = 'user-1'");
-
-    expect(
-      db.sqlite
-        .prepare("SELECT host_id FROM p_session_recording_session_recordings")
-        .all(),
-    ).toEqual([{ host_id: 7 }]);
-  });
-});
diff --git a/plugins/session-recording/tests/backend/repository.test.ts b/plugins/session-recording/tests/backend/repository.test.ts
deleted file mode 100644
index 59a0cc435..000000000
--- a/plugins/session-recording/tests/backend/repository.test.ts
+++ /dev/null
@@ -1,149 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { createTestDb, type TestDb } from "@termix/plugin-sdk/testing";
-import { pluginDir } from "./helpers";
-import { createSessionRecordingRepository } from "../../src/backend/repository";
-import { sessionRecordings } from "../../src/backend/tables";
-
-let db: TestDb | null = null;
-
-afterEach(() => {
-  db?.close();
-  db = null;
-});
-
-const fakeHosts = {
-  list: async () => [
-    {
-      id: 7,
-      userId: "user-1",
-      name: "web",
-      ip: "10.0.0.5",
-      port: 22,
-      username: "root",
-      tags: null,
-      folder: null,
-      authType: "password",
-    },
-  ],
-  get: async () => null,
-  checkAccess: async () => ({
-    hasAccess: false,
-    isOwner: false,
-    isShared: false,
-  }),
-  create: async () => {
-    throw new Error("not used");
-  },
-  update: async () => null,
-  listOwned: async () => [],
-  share: async () => ({ hostId: 0, shared: false }),
-  listUsers: async () => [],
-  listRoles: async () => [],
-  trackSession: () => () => {},
-  recordActivity: async () => {},
-};
-
-async function setup() {
-  db = await createTestDb(pluginDir);
-  db.sqlite
-    .prepare("INSERT INTO users (id, username) VALUES (?, ?)")
-    .run("user-1", "alice");
-  db.sqlite.prepare("INSERT INTO ssh_data (id) VALUES (?)").run(7);
-  const table = await db.database.define(sessionRecordings);
-  return createSessionRecordingRepository(
-    db.database,
-    table,
-    fakeHosts as never,
-  );
-}
-
-describe("session recording repository", () => {
-  it("creates a row and reads it back by recordingPath", async () => {
-    const repo = await setup();
-    const row = await repo.create({
-      hostId: 7,
-      userId: "user-1",
-      username: "alice",
-      startedAt: new Date().toISOString(),
-      recordingPath: "/data/session_logs/user-1/a.cast",
-      protocol: "ssh",
-      format: "asciicast",
-    });
-
-    expect(row.id).toBeGreaterThan(0);
-    expect(row.recordingPath).toBe("/data/session_logs/user-1/a.cast");
-    expect(db!.persisted).toBeGreaterThan(0);
-  });
-
-  it("lists a user's recordings with host name and ip attached", async () => {
-    const repo = await setup();
-    await repo.create({
-      hostId: 7,
-      userId: "user-1",
-      startedAt: new Date().toISOString(),
-      recordingPath: "/data/session_logs/user-1/a.cast",
-      protocol: "ssh",
-      format: "asciicast",
-    });
-
-    const rows = await repo.listByUserIdWithHost("user-1");
-    expect(rows).toHaveLength(1);
-    expect(rows[0].hostName).toBe("web");
-    expect(rows[0].hostIp).toBe("10.0.0.5");
-  });
-
-  it("finds and deletes only the owner's row", async () => {
-    const repo = await setup();
-    const row = await repo.create({
-      hostId: 7,
-      userId: "user-1",
-      startedAt: new Date().toISOString(),
-      recordingPath: "/data/session_logs/user-1/a.cast",
-      protocol: "ssh",
-      format: "asciicast",
-    });
-
-    expect(await repo.findByIdForUser("user-2", row.id)).toBeNull();
-    expect(await repo.deleteForUser("user-2", row.id)).toBe(false);
-    expect(await repo.deleteForUser("user-1", row.id)).toBe(true);
-    expect(await repo.findByIdForUser("user-1", row.id)).toBeNull();
-  });
-
-  it("anonymizes a user's rows instead of deleting them", async () => {
-    const repo = await setup();
-    const row = await repo.create({
-      hostId: 7,
-      userId: "user-1",
-      startedAt: new Date().toISOString(),
-      recordingPath: "/data/session_logs/user-1/a.cast",
-      protocol: "ssh",
-      format: "asciicast",
-    });
-
-    await repo.anonymizeByUserId("user-1");
-
-    const rows = await repo.listPathsOlderThan(
-      new Date(Date.now() + 60_000).toISOString(),
-    );
-    expect(rows.map((r) => r.id)).toContain(row.id);
-    expect(await repo.findByIdForUser("user-1", row.id)).toBeNull();
-  });
-
-  it("lists recordings older than a cutoff for retention pruning", async () => {
-    const repo = await setup();
-    await repo.create({
-      hostId: 7,
-      userId: "user-1",
-      startedAt: "2020-01-01T00:00:00.000Z",
-      recordingPath: "/data/session_logs/user-1/old.cast",
-      protocol: "ssh",
-      format: "asciicast",
-    });
-
-    const old = await repo.listPathsOlderThan("2021-01-01T00:00:00.000Z");
-    expect(old).toHaveLength(1);
-
-    const none = await repo.listPathsOlderThan("2019-01-01T00:00:00.000Z");
-    expect(none).toHaveLength(0);
-  });
-});
diff --git a/plugins/session-recording/tests/backend/routes.test.ts b/plugins/session-recording/tests/backend/routes.test.ts
deleted file mode 100644
index e4ee2eccc..000000000
--- a/plugins/session-recording/tests/backend/routes.test.ts
+++ /dev/null
@@ -1,179 +0,0 @@
-import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import { startServer, type TestServer } from "./helpers";
-
-let server: TestServer | null = null;
-let dataDir: string;
-
-beforeEach(async () => {
-  dataDir = await fs.mkdtemp(
-    path.join(os.tmpdir(), "session-recording-routes-"),
-  );
-});
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-  await fs.rm(dataDir, { recursive: true, force: true });
-});
-
-describe("session recording routes", () => {
-  it("401s without an authenticated actor", async () => {
-    server = await startServer();
-    const res = await server.request("GET", "/", { user: "" });
-    expect(res.status).toBe(401);
-  });
-
-  it("lists only the caller's own recordings", async () => {
-    server = await startServer();
-
-    const table = await server.mock.ctx.db.client<{
-      insert: (t: unknown) => {
-        values: (v: unknown) => Promise<unknown>;
-      };
-    }>();
-    void table;
-
-    // Seed through the repository the way activate() wired it: easiest is a
-    // direct HTTP round trip isn't available for writes (only ssh-terminal
-    // and remote-desktop write through the service), so seed the table
-    // directly.
-    server.db.sqlite
-      .prepare(
-        `INSERT INTO p_session_recording_session_recordings
-         (host_id, user_id, recording_path, protocol, format, started_at)
-         VALUES (?, ?, ?, ?, ?, ?)`,
-      )
-      .run(
-        7,
-        "user-1",
-        "/tmp/a.cast",
-        "ssh",
-        "asciicast",
-        new Date().toISOString(),
-      );
-    server.db.sqlite
-      .prepare(
-        `INSERT INTO p_session_recording_session_recordings
-         (host_id, user_id, recording_path, protocol, format, started_at)
-         VALUES (?, ?, ?, ?, ?, ?)`,
-      )
-      .run(
-        7,
-        "user-2",
-        "/tmp/b.cast",
-        "ssh",
-        "asciicast",
-        new Date().toISOString(),
-      );
-
-    const res = await server.request("GET", "/", { user: "user-1" });
-    expect(res.status).toBe(200);
-    expect(res.body.logs).toHaveLength(1);
-    expect(res.body.logs[0].userId).toBe("user-1");
-  });
-
-  it("404s getting another user's recording", async () => {
-    server = await startServer();
-    server.db.sqlite
-      .prepare(
-        `INSERT INTO p_session_recording_session_recordings
-         (host_id, user_id, recording_path, protocol, format, started_at)
-         VALUES (?, ?, ?, ?, ?, ?)`,
-      )
-      .run(
-        7,
-        "user-2",
-        "/tmp/b.cast",
-        "ssh",
-        "asciicast",
-        new Date().toISOString(),
-      );
-
-    const res = await server.request("GET", "/1", { user: "user-1" });
-    expect(res.status).toBe(404);
-  });
-
-  it("serves file content within the plugin's data directory", async () => {
-    server = await startServer();
-    const filePath = path.join(dataDir, "session_logs", "user-1", "a.cast");
-    await fs.mkdir(path.dirname(filePath), { recursive: true });
-    await fs.writeFile(filePath, '{"version":2}\n[0,"o","hi"]\n');
-
-    server.db.sqlite
-      .prepare(
-        `INSERT INTO p_session_recording_session_recordings
-         (host_id, user_id, recording_path, protocol, format, started_at)
-         VALUES (?, ?, ?, ?, ?, ?)`,
-      )
-      .run(7, "user-1", filePath, "ssh", "asciicast", new Date().toISOString());
-
-    // Point ctx.files.dataDir() at the temp dir for this request.
-    (
-      server.mock.ctx as unknown as {
-        files: { dataDir: () => Promise<string> };
-      }
-    ).files = { dataDir: async () => dataDir };
-
-    const res = await server.requestBinary("GET", "/1/content", {
-      user: "user-1",
-    });
-    expect(res.status).toBe(200);
-    expect(res.contentType).toContain("asciicast");
-  });
-
-  it("refuses a path outside the plugin's data directory", async () => {
-    server = await startServer();
-    server.db.sqlite
-      .prepare(
-        `INSERT INTO p_session_recording_session_recordings
-         (host_id, user_id, recording_path, protocol, format, started_at)
-         VALUES (?, ?, ?, ?, ?, ?)`,
-      )
-      .run(
-        7,
-        "user-1",
-        "/etc/passwd",
-        "ssh",
-        "asciicast",
-        new Date().toISOString(),
-      );
-
-    (
-      server.mock.ctx as unknown as {
-        files: { dataDir: () => Promise<string> };
-      }
-    ).files = { dataDir: async () => dataDir };
-
-    const res = await server.requestBinary("GET", "/1/content", {
-      user: "user-1",
-    });
-    expect(res.status).toBe(403);
-  });
-
-  it("deletes only the caller's own recording", async () => {
-    server = await startServer();
-    server.db.sqlite
-      .prepare(
-        `INSERT INTO p_session_recording_session_recordings
-         (host_id, user_id, recording_path, protocol, format, started_at)
-         VALUES (?, ?, ?, ?, ?, ?)`,
-      )
-      .run(
-        7,
-        "user-1",
-        "/tmp/a.cast",
-        "ssh",
-        "asciicast",
-        new Date().toISOString(),
-      );
-
-    const denied = await server.request("DELETE", "/1", { user: "user-2" });
-    expect(denied.status).toBe(404);
-
-    const ok = await server.request("DELETE", "/1", { user: "user-1" });
-    expect(ok.status).toBe(200);
-  });
-});
diff --git a/plugins/session-recording/tests/backend/service.test.ts b/plugins/session-recording/tests/backend/service.test.ts
deleted file mode 100644
index 5b8522729..000000000
--- a/plugins/session-recording/tests/backend/service.test.ts
+++ /dev/null
@@ -1,267 +0,0 @@
-import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import manifestJson from "../../manifest.json";
-import { pluginDir } from "./helpers";
-import { createSessionRecordingRepository } from "../../src/backend/repository";
-import { sessionRecordings } from "../../src/backend/tables";
-import { createRecordingsWriter } from "../../src/backend/service";
-
-const manifest =
-  manifestJson as unknown as import("@termix/plugin-sdk/manifest").PluginManifest;
-
-let db: TestDb | null = null;
-let dataDir: string;
-
-beforeEach(async () => {
-  dataDir = await fs.mkdtemp(path.join(os.tmpdir(), "session-recording-"));
-});
-
-afterEach(async () => {
-  db?.close();
-  db = null;
-  await fs.rm(dataDir, { recursive: true, force: true });
-});
-
-async function setup(): Promise<{
-  mock: MockPluginContext;
-  writer: ReturnType<typeof createRecordingsWriter>;
-}> {
-  db = await createTestDb(pluginDir);
-  db.sqlite
-    .prepare("INSERT INTO users (id, username) VALUES (?, ?)")
-    .run("user-1", "alice");
-  db.sqlite.prepare("INSERT INTO ssh_data (id) VALUES (?)").run(7);
-  const table = await db.database.define(sessionRecordings);
-  const hosts = {
-    list: async () => [],
-    get: async () => null,
-    checkAccess: async () => ({
-      hasAccess: false,
-      isOwner: false,
-      isShared: false,
-    }),
-    create: async () => {
-      throw new Error("not used");
-    },
-    update: async () => null,
-    listOwned: async () => [],
-    share: async () => ({ hostId: 0, shared: false }),
-    listUsers: async () => [],
-    listRoles: async () => [],
-    trackSession: () => () => {},
-    recordActivity: async () => {},
-  };
-  const repo = createSessionRecordingRepository(
-    db.database,
-    table,
-    hosts as never,
-  );
-
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    db: db.database,
-  });
-  // Point ctx.files.dataDir() at a real temp dir for this test.
-  (mock.ctx as unknown as { files: { dataDir: () => Promise<string> } }).files =
-    {
-      dataDir: async () => dataDir,
-    };
-
-  const writer = createRecordingsWriter(mock.ctx, repo);
-  return { mock, writer };
-}
-
-describe("recordings.writer", () => {
-  it("is null when the host has recording switched off", async () => {
-    const { mock, writer } = await setup();
-    await mock.ctx.settings.setHost(7, "enableSessionRecording", false);
-
-    const sink = await writer.open({
-      sessionId: "s1",
-      hostId: 7,
-      userId: "user-1",
-      protocol: "ssh",
-      format: "asciicast",
-      startedAt: Date.now(),
-    });
-
-    expect(sink).toBeNull();
-    expect(await writer.enabledFor(7)).toBe(false);
-    expect(await fs.readdir(dataDir)).toEqual([]);
-    expect(
-      db!.sqlite
-        .prepare(
-          "SELECT COUNT(*) AS count FROM p_session_recording_session_recordings",
-        )
-        .get(),
-    ).toEqual({ count: 0 });
-  });
-
-  it("keeps a saved off switch after recreating the writer without affecting another host", async () => {
-    const { mock } = await setup();
-    db!.sqlite.prepare("INSERT INTO ssh_data (id) VALUES (?)").run(8);
-    await mock.ctx.settings.setHost(7, "enableSessionRecording", false);
-    await mock.ctx.settings.setHost(8, "enableSessionRecording", true);
-    const table = await db!.database.define(sessionRecordings);
-    const repository = createSessionRecordingRepository(
-      db!.database,
-      table,
-      mock.ctx.hosts,
-    );
-    const reopened = createRecordingsWriter(mock.ctx, repository);
-    for (const hostId of [7, 8]) {
-      const sink = await reopened.open({
-        sessionId: `host-${hostId}`,
-        hostId,
-        userId: "user-1",
-        protocol: "ssh",
-        format: "asciicast",
-        startedAt: Date.now(),
-      });
-      if (hostId === 7) expect(sink).toBeNull();
-      else {
-        expect(sink).not.toBeNull();
-        await sink!.append("marker\n");
-      }
-    }
-    expect(
-      await fs.readdir(path.join(dataDir, "session_logs", "user-1")),
-    ).toEqual(["host-8.cast"]);
-    expect(
-      db!.sqlite
-        .prepare("SELECT host_id FROM p_session_recording_session_recordings")
-        .all(),
-    ).toEqual([{ host_id: 8 }]);
-  });
-
-  it("writes the first append with writeFile and later ones with appendFile", async () => {
-    const { writer } = await setup();
-    const sink = await writer.open({
-      sessionId: "s1",
-      hostId: 7,
-      userId: "user-1",
-      protocol: "ssh",
-      format: "asciicast",
-      startedAt: Date.now(),
-    });
-    expect(sink).not.toBeNull();
-
-    await sink!.append("chunk-one\n");
-    await sink!.append("chunk-two\n");
-
-    const filePath = path.join(dataDir, "session_logs", "user-1", "s1.cast");
-    const content = await fs.readFile(filePath, "utf-8");
-    expect(content).toBe("chunk-one\nchunk-two\n");
-  });
-
-  it("persist writes the summary onto the row", async () => {
-    const { writer } = await setup();
-    const sink = await writer.open({
-      sessionId: "s1",
-      hostId: 7,
-      userId: "user-1",
-      protocol: "ssh",
-      format: "asciicast",
-      startedAt: Date.now(),
-    });
-    await sink!.append("x\n");
-
-    const endedAt = Date.now();
-    await sink!.persist({
-      endedAt,
-      durationSeconds: 42,
-      terminatedByOwner: true,
-      terminationReason: null,
-    });
-
-    // Not thrown means it wrote successfully; deeper row assertions belong
-    // to repository.test.ts.
-  });
-
-  it("discard removes the row and further writes are no-ops", async () => {
-    const { writer } = await setup();
-    const sink = await writer.open({
-      sessionId: "s1",
-      hostId: 7,
-      userId: "user-1",
-      protocol: "ssh",
-      format: "asciicast",
-      startedAt: Date.now(),
-    });
-
-    sink!.discard();
-    await sink!.append("should not write");
-
-    const filePath = path.join(dataDir, "session_logs", "user-1", "s1.cast");
-    await expect(fs.access(filePath)).rejects.toThrow();
-  });
-
-  it("createFinished inserts a row for an already-written recording", async () => {
-    const { writer } = await setup();
-    const row = await writer.createFinished({
-      hostId: 7,
-      userId: "user-1",
-      startedAt: new Date().toISOString(),
-      endedAt: new Date().toISOString(),
-      duration: 10,
-      recordingPath: "/data/session_recordings/guacamole/x.guac",
-      protocol: "rdp",
-      format: "guacamole",
-    });
-
-    expect(row.id).toBeGreaterThan(0);
-  });
-
-  it("createFinished moves guacd's file under the data folder, where playback reads it", async () => {
-    const { mock, writer } = await setup();
-    const guacdDir = await fs.mkdtemp(path.join(os.tmpdir(), "guacd-"));
-    const source = path.join(guacdDir, "guacamole", "rdp-1.guac");
-    await fs.mkdir(path.dirname(source), { recursive: true });
-    await fs.writeFile(source, "4.size,1.0;");
-
-    const row = await writer.createFinished({
-      hostId: 7,
-      userId: "user-1",
-      startedAt: new Date().toISOString(),
-      endedAt: new Date().toISOString(),
-      duration: 10,
-      recordingPath: source,
-      protocol: "rdp",
-      format: "guacamole",
-    });
-
-    const target = path.join(
-      await mock.ctx.files.dataDir(),
-      "session_recordings",
-      "guacamole",
-      "rdp-1.guac",
-    );
-    await expect(fs.readFile(target, "utf8")).resolves.toBe("4.size,1.0;");
-    await expect(fs.access(source)).rejects.toThrow();
-    const stored = db!.sqlite
-      .prepare(
-        "SELECT recording_path FROM p_session_recording_session_recordings WHERE id = ?",
-      )
-      .get(row.id) as { recording_path: string };
-    expect(stored.recording_path).toBe(target);
-    await fs.rm(guacdDir, { recursive: true, force: true });
-  });
-
-  it("enabledFor follows the host's recording switch", async () => {
-    const { mock, writer } = await setup();
-    await mock.ctx.settings.setHost(7, "enableSessionRecording", true);
-    await expect(writer.enabledFor(7)).resolves.toBe(true);
-    await mock.ctx.settings.setHost(7, "enableSessionRecording", false);
-    await expect(writer.enabledFor(7)).resolves.toBe(false);
-  });
-});
diff --git a/plugins/session-recording/tests/frontend/activate.test.tsx b/plugins/session-recording/tests/frontend/activate.test.tsx
deleted file mode 100644
index 4589ad2e3..000000000
--- a/plugins/session-recording/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,71 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-function stubApi(overrides: Partial<PluginApiClient> = {}): PluginApiClient {
-  return {
-    get: vi.fn(async () => ({ data: { logs: [] } })),
-    post: vi.fn(async () => ({ data: {} })),
-    put: vi.fn(async () => ({ data: {} })),
-    patch: vi.fn(async () => ({ data: {} })),
-    delete: vi.fn(async () => ({ data: {} })),
-    ...overrides,
-  } as PluginApiClient;
-}
-
-describe(`${manifest.id} activate`, () => {
-  it("registers only views its manifest declares", async () => {
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: stubApi(),
-    });
-
-    expect(rendered.registered.tabs()).toEqual(["session-logs"]);
-    expect(rendered.registered.panels()).toEqual(["session-logs"]);
-    expect(rendered.registered.railItems()).toEqual([
-      expect.objectContaining({ id: "session-logs" }),
-    ]);
-    expect(rendered.registered.slot("terminal.toolbarStatus")).toEqual([
-      "session-recording.terminalStatus",
-    ]);
-  });
-
-  it("removes everything it registered on deactivate", async () => {
-    const app = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: stubApi(),
-    });
-    await app.deactivate();
-    expect(app.registered.tabs()).toEqual([]);
-    expect(app.registered.panels()).toEqual([]);
-    expect(app.registered.railItems()).toEqual([]);
-  });
-
-  it("renders the panel without crashing", async () => {
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: stubApi(),
-    });
-    const element = rendered.renderPanel("session-logs");
-    expect(element).toBeTruthy();
-  });
-});
diff --git a/plugins/session-recording/tests/frontend/asciicast.test.ts b/plugins/session-recording/tests/frontend/asciicast.test.ts
deleted file mode 100644
index 1f7656837..000000000
--- a/plugins/session-recording/tests/frontend/asciicast.test.ts
+++ /dev/null
@@ -1,20 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { parseAsciicast } from "../../src/frontend/asciicast";
-
-describe("parseAsciicast", () => {
-  it("parses terminal dimensions and timed input/output", () => {
-    const recording = parseAsciicast(
-      '{"version":2,"width":120,"height":30}\n[0.1,"o","hello"]\n[1.5,"i","ls\\r"]\n[2,"r","100x40"]\n',
-    );
-    expect(recording.width).toBe(120);
-    expect(recording.height).toBe(30);
-    expect(recording.duration).toBe(2);
-    expect(recording.events).toHaveLength(3);
-  });
-
-  it("rejects unsupported recording versions", () => {
-    expect(() => parseAsciicast('{"version":1}\n')).toThrow(
-      "Unsupported asciicast version",
-    );
-  });
-});
diff --git a/plugins/session-recording/tsconfig.json b/plugins/session-recording/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/session-recording/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/session-recording/vitest.config.ts b/plugins/session-recording/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/session-recording/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/session-sharing/CHANGELOG.md b/plugins/session-sharing/CHANGELOG.md
deleted file mode 100644
index f9e465f00..000000000
--- a/plugins/session-sharing/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Share a live terminal or remote desktop session by link or with another user, read-only or with input. Collaboration rooms let a presenter show sessions to a group.
diff --git a/plugins/session-sharing/README.md b/plugins/session-sharing/README.md
deleted file mode 100644
index 6b253d9e9..000000000
--- a/plugins/session-sharing/README.md
+++ /dev/null
@@ -1,43 +0,0 @@
-# Session Sharing
-
-Share a live terminal or remote desktop session by link or with another user, and present sessions in collaboration rooms.
-
-## Features
-
-- Share a live terminal or remote desktop session by link or with one user.
-- Pick read-only or read and write, and set when the share expires.
-- Collaboration rooms where a presenter shows a session to a group and can hand control to a member.
-- Guest links for people without a Termix account.
-- The share button is in the terminal and remote desktop toolbars.
-
-## Settings
-
-### Admin
-
-- Allow Session Sharing: turn sharing on or off for everyone.
-
-### Host
-
-- Allow Session Sharing: allow sharing sessions on this host.
-
-## Permissions
-
-- `session-sharing.use`: Share sessions and join rooms. Admins and users have it by default.
-
-## Services
-
-Provides to other plugins:
-
-- `sessions.sharing`: join a shared session or room from the terminal.
-
-Uses from other plugins:
-
-- `sessions.live` to reach live SSH, RDP, VNC and Telnet sessions.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/session-sharing/locales/en.json b/plugins/session-sharing/locales/en.json
deleted file mode 100644
index 1b9763f07..000000000
--- a/plugins/session-sharing/locales/en.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Connecting to shared session...",
-      "linkInvalid": "This share link is invalid, expired, or has been revoked",
-      "rateLimited": "Too many attempts, please try again shortly",
-      "sessionEnded": "This session has ended",
-      "readOnlyBadge": "View only",
-      "ownerLabel": "Host owner"
-    },
-    "modalTitle": "Share session",
-    "shareButton": "Share",
-    "notReadyToShare": "Session is not ready to share yet",
-    "modeTab": {
-      "link": "Link",
-      "user": "User"
-    },
-    "linkModeDescription": "Anyone with this link can join, no account required.",
-    "userModeDescription": "Share with a specific user who already has access to this host. If they do not have access yet, share the host with them first or use a link instead. Once shared, the session appears in their Connections tab.",
-    "permissionLevel": {
-      "label": "Permission level",
-      "readOnly": "Read-only",
-      "readOnlyDescription": "Can watch the session live but cannot type or interact.",
-      "readWrite": "Read-write",
-      "readWriteDescription": "Can type and interact with the session just like the owner."
-    },
-    "expiryLabel": "Link expiry",
-    "createLinkButton": "Create link",
-    "createShareButton": "Share with user",
-    "searchUsersPlaceholder": "Search users...",
-    "noUsersFound": "No users found",
-    "linkCreated": "Share link created",
-    "linkNeedsServer": "Share links only work for sessions on a Termix server. Connect this host through your linked server to share it with a link.",
-    "linkCopied": "Link copied to clipboard",
-    "copyLink": "Copy link",
-    "shareCreated": "Session shared. It will appear in their Connections tab.",
-    "shareFailed": "Failed to create share",
-    "userLacksHostAccess": "That user does not have access to this host yet. Share the host with them first, or use a link instead.",
-    "activeShares": "Active shares",
-    "noActiveShares": "No active shares for this session",
-    "revoke": "Revoke",
-    "revokeConfirmTitle": "Revoke this share?",
-    "revokeConfirmDescription": "Anyone using this share will lose access immediately.",
-    "revoked": "Share revoked",
-    "revokeFailed": "Failed to revoke share",
-    "joinCount": "{{count}} join",
-    "joinCount_other": "{{count}} joins",
-    "expiresAt": "Expires {{date}}",
-    "linkShareBadge": "Link",
-    "userShareBadge": "User: {{username}}",
-    "loadSharesFailed": "Failed to load active shares",
-    "remoteDisplayUnavailable": "Remote desktop is not available right now.",
-    "sharedWithMe": "Sessions shared with me",
-    "customHoursPlaceholder": "Hours until access expires"
-  },
-  "collab": {
-    "createRoom": "New room",
-    "roomName": "Room name",
-    "persistentRoom": "Persistent room",
-    "persistentRoomHint": "Persistent rooms stay listed after the meeting ends and can be reused.",
-    "noRooms": "No rooms yet. Create one to start a meeting.",
-    "openRoom": "Open",
-    "endRoom": "End meeting",
-    "leaveRoom": "Leave",
-    "deleteMember": "Remove",
-    "removeMember": "Remove {{name}}",
-    "removeMemberTitle": "Remove this member?",
-    "removeMemberDescription": "{{name}} will lose access to this room immediately. Any active SSH viewer will be disconnected.",
-    "invite": "Invite",
-    "inviteTitle": "Invite members",
-    "members": "Members",
-    "membersPanel": "Room members and control requests",
-    "membersWithCount": "Members ({{count}})",
-    "guestsWithCount": "Guests ({{count}})",
-    "removeGuests": "Remove guests",
-    "anonymousGuest": "Guest",
-    "online": "online",
-    "offline": "offline",
-    "you": "(you)",
-    "hostBadge": "Host",
-    "presenterBadge": "Presenting",
-    "present": "Present",
-    "presentTitle": "Take the stage",
-    "presentHost": "Host",
-    "searchHosts": "Search hosts",
-    "noHostsFound": "No available hosts found.",
-    "presentProtocol": "Protocol",
-    "stopPresenting": "Stop presenting",
-    "takeOver": "Take over",
-    "takeOverConfirmTitle": "Replace the current presentation?",
-    "takeOverDescription": "{{name}} is presenting now. Taking over will disconnect everyone from that stage.",
-    "emptyStage": "Nobody is presenting. Take the stage to share a session.",
-    "stageLoading": "Connecting to the stage...",
-    "stageEnded": "The presentation ended",
-    "roomEnded": "This meeting has ended",
-    "presenterLabel": "{{name}} is presenting",
-    "guestLink": "Guest link",
-    "guestLinkOn": "Guest link is on. Anyone with the link can watch the stage.",
-    "guestLinkOff": "Guest link is off.",
-    "copyLink": "Copy link",
-    "rotateLink": "Rotate link",
-    "disableLink": "Disable link",
-    "rotateLinkConfirmTitle": "Rotate the guest link?",
-    "rotateLinkDescription": "The current link will stop working immediately. Connected SSH guests will be disconnected.",
-    "disableLinkConfirmTitle": "Disable the guest link?",
-    "disableLinkDescription": "Anonymous SSH viewers will be disconnected immediately and the current link will stop working.",
-    "linkCopied": "Link copied",
-    "roles": "Roles",
-    "users": "Users",
-    "searchUsers": "Search users",
-    "endConfirmTitle": "End this meeting?",
-    "endDescription": "{{name}} will end for everyone and cannot be reopened.",
-    "endPersistentDescription": "The active presentation in {{name}} will stop. The room remains available for reuse.",
-    "deleteRoom": "Delete room",
-    "deleteConfirmTitle": "Delete this room?",
-    "deleteDescription": "{{name}} will be permanently deleted for everyone and cannot be undone.",
-    "invitedTo": "You were invited to \"{{name}}\"",
-    "guest": {
-      "title": "Meeting",
-      "waiting": "Waiting for the presenter...",
-      "linkInvalid": "This guest link is invalid or the meeting has ended"
-    },
-    "reopenFromPanel": "This meeting tab expired. Reopen the room from the Meetings panel.",
-    "retry": "Retry",
-    "requestControl": "Request control",
-    "cancelControlRequest": "Cancel request",
-    "controlQueue": "Control requests",
-    "noControlRequests": "No pending requests.",
-    "grantControlTo": "Give control to {{name}}",
-    "dismissControlRequest": "Dismiss {{name}}'s control request",
-    "releaseControl": "Release control",
-    "grantControl": "Give control",
-    "revokeControl": "Take back control",
-    "controlRequestedBy": "{{name}} asked for control",
-    "grant": "Grant",
-    "controlBadge": "In control",
-    "youArePresenting": "You are presenting in another tab. Stop presenting to hand the stage over.",
-    "created": "Room created",
-    "invited": "Members invited",
-    "roomTab": "Meeting",
-    "serverChanged": "The meeting server changed. Reopen this meeting from the Meetings panel.",
-    "hostNotSynced": "Sync this host to the meeting server before presenting.",
-    "linkRequiresServer": "Link this desktop to a Termix server and create the meeting there to share a web link."
-  },
-  "nav": {
-    "collab": "Meetings"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Allow Session Sharing",
-        "description": "Allow live terminal, RDP, VNC, and Telnet sessions to be shared instance-wide. Overrides every per-host sharing toggle when disabled."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Allow Session Sharing",
-        "description": "Let live sessions on this host be shared via link or with other users"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Share sessions and join rooms",
-      "description": "Share live sessions by link or with other users, and create and join collaboration rooms."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Never",
-        "oneHour": "1 hour",
-        "oneDay": "24 hours",
-        "sevenDays": "7 days",
-        "thirtyDays": "30 days",
-        "custom": "Custom"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Shared with me",
-    "sharedBy": "Shared by {{username}}",
-    "join": "Join",
-    "sharedSessionLabel": "{{hostName}} (shared)"
-  },
-  "plugin": {
-    "name": "Session Sharing"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/af_ZA.json b/plugins/session-sharing/locales/translated/af_ZA.json
deleted file mode 100644
index d2f9b8d5b..000000000
--- a/plugins/session-sharing/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Verbind met gedeelde sessie...",
-      "linkInvalid": "Hierdie deelskakel is ongeldig, het verval of is herroep",
-      "rateLimited": "Te veel pogings, probeer asseblief weer binnekort",
-      "sessionEnded": "Hierdie sessie is verby",
-      "readOnlyBadge": "Slegs kyk",
-      "ownerLabel": "Gasheer-eienaar"
-    },
-    "modalTitle": "Deel sessie",
-    "shareButton": "Deel",
-    "notReadyToShare": "Sessie is nog nie gereed om te deel nie",
-    "modeTab": {
-      "link": "Skakel",
-      "user": "Gebruiker"
-    },
-    "linkModeDescription": "Enigiemand met hierdie skakel kan aansluit, geen rekening nodig nie.",
-    "userModeDescription": "Deel met 'n spesifieke gebruiker wat reeds toegang tot hierdie gasheer het. Indien hulle nog nie toegang het nie, deel die gasheer eers met hulle of gebruik eerder 'n skakel. Sodra dit gedeel is, verskyn die sessie in hul Verbindings-oortjie.",
-    "permissionLevel": {
-      "label": "Toestemmingsvlak",
-      "readOnly": "Leesalleen",
-      "readOnlyDescription": "Kan die sessie regstreeks kyk, maar kan nie tik of interaksie hê nie.",
-      "readWrite": "Lees-skryf",
-      "readWriteDescription": "Kan tik en met die sessie interaksie hê net soos die eienaar."
-    },
-    "expiryLabel": "Skakelvervaldatum",
-    "createLinkButton": "Skep skakel",
-    "createShareButton": "Deel met gebruiker",
-    "searchUsersPlaceholder": "Soek gebruikers...",
-    "noUsersFound": "Geen gebruikers gevind nie",
-    "linkCreated": "Deel skakel geskep",
-    "linkNeedsServer": "Deelskakels werk slegs vir sessies op 'n Termix-bediener. Koppel hierdie gasheer deur jou gekoppelde bediener om dit met 'n skakel te deel.",
-    "linkCopied": "Skakel gekopieer na knipbord",
-    "copyLink": "Kopieer skakel",
-    "shareCreated": "Sessie gedeel. Dit sal in hul Verbindings-oortjie verskyn.",
-    "shareFailed": "Kon nie deel skep nie",
-    "userLacksHostAccess": "Daardie gebruiker het nog nie toegang tot hierdie gasheer nie. Deel die gasheer eers met hulle, of gebruik eerder 'n skakel.",
-    "activeShares": "Aktiewe aandele",
-    "noActiveShares": "Geen aktiewe delings vir hierdie sessie nie",
-    "revoke": "Herroep",
-    "revokeConfirmTitle": "Herroep hierdie deling?",
-    "revokeConfirmDescription": "Enigiemand wat hierdie deel gebruik, sal onmiddellik toegang verloor.",
-    "revoked": "Deel herroep",
-    "revokeFailed": "Kon nie deel herroep nie",
-    "joinCount": "{{count}} sluit aan",
-    "joinCount_other": "{{count}} sluit aan",
-    "expiresAt": "Vervaldatum {{date}}",
-    "linkShareBadge": "Skakel",
-    "userShareBadge": "Gebruiker: {{username}}",
-    "loadSharesFailed": "Kon nie aktiewe delings laai nie",
-    "remoteDisplayUnavailable": "Afstandswerkskerm is tans nie beskikbaar nie.",
-    "sharedWithMe": "Sessies met my gedeel",
-    "customHoursPlaceholder": "Ure totdat toegang verval"
-  },
-  "collab": {
-    "createRoom": "Nuwe kamer",
-    "roomName": "Kamernaam",
-    "persistentRoom": "Permanente kamer",
-    "persistentRoomHint": "Permanente kamers bly gelys nadat die vergadering eindig en kan hergebruik word.",
-    "noRooms": "Geen kamers nog nie. Skep een om 'n vergadering te begin.",
-    "openRoom": "Oop",
-    "endRoom": "Beëindig vergadering",
-    "leaveRoom": "Vertrek",
-    "deleteMember": "Verwyder",
-    "removeMember": "Verwyder {{name}}",
-    "removeMemberTitle": "Verwyder hierdie lid?",
-    "removeMemberDescription": "{{name}} sal onmiddellik toegang tot hierdie kamer verloor. Enige aktiewe SSH-kyker sal ontkoppel word.",
-    "invite": "Nooi uit",
-    "inviteTitle": "Nooi lede uit",
-    "members": "Lede",
-    "membersPanel": "Kamerlede en beheerversoeke",
-    "membersWithCount": "Lede ({{count}})",
-    "guestsWithCount": "Gaste ({{count}})",
-    "removeGuests": "Verwyder gaste",
-    "anonymousGuest": "Gas",
-    "online": "aanlyn",
-    "offline": "vanlyn",
-    "you": "(jy)",
-    "hostBadge": "Gasheer",
-    "presenterBadge": "Aanbieding",
-    "present": "Aanwesig",
-    "presentTitle": "Neem die verhoog",
-    "presentHost": "Gasheer",
-    "searchHosts": "Soek gashere",
-    "noHostsFound": "Geen beskikbare gashere gevind nie.",
-    "presentProtocol": "Protokol",
-    "stopPresenting": "Hou op met aanbied",
-    "takeOver": "Neem oor",
-    "takeOverConfirmTitle": "Vervang die huidige aanbieding?",
-    "takeOverDescription": "{{name}} bied nou aan. Oorname sal almal van daardie stadium ontkoppel.",
-    "emptyStage": "Niemand bied aan nie. Neem die verhoog om 'n sessie te deel.",
-    "stageLoading": "Verbind met die verhoog...",
-    "stageEnded": "Die aanbieding het geëindig",
-    "roomEnded": "Hierdie vergadering het geëindig",
-    "presenterLabel": "{{name}} bied aan",
-    "guestLink": "Gas skakel",
-    "guestLinkOn": "Gasskakel is aan. Enigiemand met die skakel kan die verhoog kyk.",
-    "guestLinkOff": "Gas skakel is af.",
-    "copyLink": "Kopieer skakel",
-    "rotateLink": "Roteer skakel",
-    "disableLink": "Deaktiveer skakel",
-    "rotateLinkConfirmTitle": "Draai die gasskakel?",
-    "rotateLinkDescription": "Die huidige skakel sal onmiddellik ophou werk. Gekoppelde SSH-gaste sal ontkoppel word.",
-    "disableLinkConfirmTitle": "Deaktiveer die gasskakel?",
-    "disableLinkDescription": "Anonieme SSH-kykers sal onmiddellik ontkoppel word en die huidige skakel sal ophou werk.",
-    "linkCopied": "Skakel gekopieer",
-    "roles": "Rolle",
-    "users": "Gebruikers",
-    "searchUsers": "Soek gebruikers",
-    "endConfirmTitle": "Beëindig hierdie vergadering?",
-    "endDescription": "{{name}} sal vir almal eindig en kan nie weer heropen word nie.",
-    "endPersistentDescription": "Die aktiewe aanbieding in {{name}} sal stop. Die kamer bly beskikbaar vir hergebruik.",
-    "deleteRoom": "Vee kamer uit",
-    "deleteConfirmTitle": "Vee hierdie kamer uit?",
-    "deleteDescription": "{{name}} sal permanent vir almal uitgevee word en kan nie ongedaan gemaak word nie.",
-    "invitedTo": "Jy is genooi na \"{{name}}\"",
-    "guest": {
-      "title": "Vergadering",
-      "waiting": "Wag vir die aanbieder...",
-      "linkInvalid": "Hierdie gasskakel is ongeldig of die vergadering het geëindig"
-    },
-    "reopenFromPanel": "Hierdie vergadering-oortjie het verval. Maak die kamer weer oop vanaf die Vergaderings-paneel.",
-    "retry": "Probeer weer",
-    "requestControl": "Versoekbeheer",
-    "cancelControlRequest": "Kanselleer versoek",
-    "controlQueue": "Beheerversoeke",
-    "noControlRequests": "Geen hangende versoeke nie.",
-    "grantControlTo": "Gee beheer aan {{name}}",
-    "dismissControlRequest": "Maak {{name}}se beheerversoek toe",
-    "releaseControl": "Vrystellingsbeheer",
-    "grantControl": "Gee beheer",
-    "revokeControl": "Neem beheer terug",
-    "controlRequestedBy": "{{name}} het om beheer gevra",
-    "grant": "Toekenning",
-    "controlBadge": "In beheer",
-    "youArePresenting": "Jy bied aan in 'n ander oortjie. Stop die aanbieding om die verhoog oor te dra.",
-    "created": "Kamer geskep",
-    "invited": "Lede genooi",
-    "roomTab": "Vergadering",
-    "serverChanged": "Die vergaderingsbediener het verander. Maak hierdie vergadering weer oop vanaf die Vergaderingspaneel.",
-    "hostNotSynced": "Sinkroniseer hierdie gasheer met die vergaderingbediener voor die aanbieding.",
-    "linkRequiresServer": "Koppel hierdie lessenaar aan 'n Termix-bediener en skep die vergadering daar om 'n webskakel te deel."
-  },
-  "nav": {
-    "collab": "Vergaderings"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Laat Sessiedeling Toe",
-        "description": "Laat lewendige terminaal-, RDP-, VNC- en Telnet-sessies toe om instansiewyd gedeel te word. Oorskryf elke deelskakelaar per gasheer wanneer dit gedeaktiveer is."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Laat Sessiedeling Toe",
-        "description": "Laat regstreekse sessies op hierdie gasheer via skakel of met ander gebruikers gedeel word"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Deel sessies en sluit aan by kamers",
-      "description": "Deel regstreekse sessies per skakel of met ander gebruikers, en skep en sluit aan by samewerkingskamers."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Nooit",
-        "oneHour": "1 uur",
-        "oneDay": "24 uur",
-        "sevenDays": "7 dae",
-        "thirtyDays": "30 dae",
-        "custom": "Pasgemaak"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Met my gedeel",
-    "sharedBy": "Gedeel deur {{username}}",
-    "join": "Sluit aan",
-    "sharedSessionLabel": "{{hostName}} (gedeel)"
-  },
-  "plugin": {
-    "name": "Sessiedeling"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/ar_SA.json b/plugins/session-sharing/locales/translated/ar_SA.json
deleted file mode 100644
index 1b2cdc27c..000000000
--- a/plugins/session-sharing/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "جارٍ الاتصال بالجلسة المشتركة...",
-      "linkInvalid": "رابط المشاركة هذا غير صالح أو منتهي الصلاحية أو تم إلغاؤه",
-      "rateLimited": "عدد المحاولات كبير جدًا، يرجى المحاولة مرة أخرى قريبًا",
-      "sessionEnded": "انتهت هذه الجلسة",
-      "readOnlyBadge": "للعرض فقط",
-      "ownerLabel": "مالك المضيف"
-    },
-    "modalTitle": "جلسة مشاركة",
-    "shareButton": "مشاركة",
-    "notReadyToShare": "الجلسة غير جاهزة للمشاركة بعد",
-    "modeTab": {
-      "link": "وصلة",
-      "user": "المستخدم"
-    },
-    "linkModeDescription": "يمكن لأي شخص لديه هذا الرابط الانضمام، ولا يلزم وجود حساب.",
-    "userModeDescription": "شارك الملف مع مستخدم محدد لديه صلاحية الوصول إلى هذا المضيف. إذا لم يكن لديه صلاحية الوصول بعد، فشارك معه المضيف أولاً أو استخدم رابطًا. بمجرد المشاركة، ستظهر الجلسة في علامة تبويب \"الاتصالات\" الخاصة به.",
-    "permissionLevel": {
-      "label": "مستوى الصلاحية",
-      "readOnly": "للقراءة فقط",
-      "readOnlyDescription": "يمكنني مشاهدة الجلسة مباشرة ولكن لا يمكنني الكتابة أو التفاعل.",
-      "readWrite": "القراءة والكتابة",
-      "readWriteDescription": "يمكنه الكتابة والتفاعل مع الجلسة تمامًا مثل المالك."
-    },
-    "expiryLabel": "انتهاء صلاحية الرابط",
-    "createLinkButton": "إنشاء رابط",
-    "createShareButton": "مشاركة مع المستخدم",
-    "searchUsersPlaceholder": "ابحث عن المستخدمين...",
-    "noUsersFound": "لم يتم العثور على مستخدمين",
-    "linkCreated": "تم إنشاء رابط المشاركة",
-    "linkNeedsServer": "لا تعمل روابط المشاركة إلا مع الجلسات الموجودة على خادم Termix. قم بتوصيل هذا المضيف عبر خادمك المرتبط لمشاركته باستخدام رابط.",
-    "linkCopied": "تم نسخ الرابط إلى الحافظة",
-    "copyLink": "نسخ الوصلة",
-    "shareCreated": "تمت مشاركة الجلسة. ستظهر في علامة تبويب \"الاتصالات\" الخاصة بهم.",
-    "shareFailed": "فشل إنشاء المشاركة",
-    "userLacksHostAccess": "لا يملك هذا المستخدم صلاحية الوصول إلى هذا المضيف بعد. شارك المضيف معه أولاً، أو استخدم رابطاً بدلاً من ذلك.",
-    "activeShares": "الأسهم النشطة",
-    "noActiveShares": "لا توجد أسهم نشطة لهذه الجلسة",
-    "revoke": "إبطال",
-    "revokeConfirmTitle": "إلغاء هذه الحصة؟",
-    "revokeConfirmDescription": "أي شخص يستخدم هذا الملف المشترك سيفقد الوصول إليه فوراً.",
-    "revoked": "تم إلغاء الحصة",
-    "revokeFailed": "فشل في إلغاء المشاركة",
-    "joinCount": "{{count}} انضم",
-    "joinCount_other": "{{count}} ينضم",
-    "expiresAt": "تنتهي في {{date}}",
-    "linkShareBadge": "وصلة",
-    "userShareBadge": "المستخدم: {{username}}",
-    "loadSharesFailed": "فشل تحميل المشاركات النشطة",
-    "remoteDisplayUnavailable": "خدمة سطح المكتب البعيد غير متاحة حاليًا.",
-    "sharedWithMe": "الجلسات التي تمت مشاركتها معي",
-    "customHoursPlaceholder": "عدد الساعات حتى انتهاء صلاحية الوصول"
-  },
-  "collab": {
-    "createRoom": "غرف جديدة",
-    "roomName": "اسم الغرفة",
-    "persistentRoom": "غرفة مستمرة",
-    "persistentRoomHint": "تبقى الغرف الدائمة مدرجة بعد انتهاء الاجتماع ويمكن إعادة استخدامها.",
-    "noRooms": "لا توجد غرف اجتماعات بعد. أنشئ غرفة لبدء اجتماع.",
-    "openRoom": "فتح",
-    "endRoom": "انتهاء الاجتماع",
-    "leaveRoom": "يترك",
-    "deleteMember": "إزالة",
-    "removeMember": "إزالة {{name}}",
-    "removeMemberTitle": "هل تريد حذف هذا العضو؟",
-    "removeMemberDescription": "سيفقد المستخدم {{name}} إمكانية الوصول إلى هذه الغرفة فورًا. وسيتم فصل أي برنامج عرض SSH نشط.",
-    "invite": "يدعو",
-    "inviteTitle": "دعوة الأعضاء",
-    "members": "أعضاء",
-    "membersPanel": "أعضاء الغرفة وطلبات التحكم",
-    "membersWithCount": "الأعضاء ({{count}})",
-    "guestsWithCount": "الضيوف ({{count}})",
-    "removeGuests": "إزالة الضيوف",
-    "anonymousGuest": "ضيف",
-    "online": "متصل",
-    "offline": "غير متصل",
-    "you": "(أنت)",
-    "hostBadge": "المضيف",
-    "presenterBadge": "تقديم",
-    "present": "حاضر",
-    "presentTitle": "اصعد إلى المسرح",
-    "presentHost": "المضيف",
-    "searchHosts": "ابحث عن مضيفين",
-    "noHostsFound": "لم يتم العثور على مضيفين متاحين.",
-    "presentProtocol": "البروتوكول",
-    "stopPresenting": "توقف عن التقديم",
-    "takeOver": "تولي زمام الأمور",
-    "takeOverConfirmTitle": "هل تريد استبدال العرض التقديمي الحالي؟",
-    "takeOverDescription": "{{name}} يقدم العرض الآن. سيؤدي الاستحواذ على المنصة إلى فصل الجميع عنها.",
-    "emptyStage": "لا يوجد مقدمون. تفضلوا بالصعود إلى المنصة لمشاركة جلسة.",
-    "stageLoading": "الاتصال بالمسرح...",
-    "stageEnded": "انتهى العرض التقديمي",
-    "roomEnded": "انتهى هذا الاجتماع",
-    "presenterLabel": "{{name}} يقدم",
-    "guestLink": "رابط الضيف",
-    "guestLinkOn": "رابط الضيوف مُفعّل. يمكن لأي شخص لديه الرابط مشاهدة العرض.",
-    "guestLinkOff": "رابط الضيف معطل.",
-    "copyLink": "نسخ الوصلة",
-    "rotateLink": "تدوير الرابط",
-    "disableLink": "تعطيل الرابط",
-    "rotateLinkConfirmTitle": "هل تريد تدوير رابط الضيف؟",
-    "rotateLinkDescription": "سيتوقف الرابط الحالي عن العمل فوراً. سيتم فصل الضيوف المتصلين عبر SSH.",
-    "disableLinkConfirmTitle": "هل تريد تعطيل رابط الضيف؟",
-    "disableLinkDescription": "سيتم قطع اتصال عارضي SSH المجهولين على الفور وسيتوقف الرابط الحالي عن العمل.",
-    "linkCopied": "تم نسخ الرابط",
-    "roles": "الأدوار",
-    "users": "المستخدمون",
-    "searchUsers": "ابحث عن المستخدمين",
-    "endConfirmTitle": "هل ننهي هذا الاجتماع؟",
-    "endDescription": "سينتهي {{name}} للجميع ولن يكون من الممكن إعادة فتحه.",
-    "endPersistentDescription": "سيتوقف العرض التقديمي النشط في {{name}} . وستبقى الغرفة متاحة لإعادة الاستخدام.",
-    "deleteRoom": "حذف الغرفة",
-    "deleteConfirmTitle": "هل تريد حذف هذه الغرفة؟",
-    "deleteDescription": "سيتم حذف {{name}} نهائياً للجميع ولا يمكن التراجع عنه.",
-    "invitedTo": "لقد تمت دعوتك إلى \"{{name}}\"",
-    "guest": {
-      "title": "مقابلة",
-      "waiting": "في انتظار المذيع...",
-      "linkInvalid": "رابط الضيف هذا غير صالح أو انتهى الاجتماع"
-    },
-    "reopenFromPanel": "انتهت صلاحية علامة تبويب هذا الاجتماع. أعد فتح الغرفة من لوحة الاجتماعات.",
-    "retry": "إعادة المحاولة",
-    "requestControl": "التحكم في الطلبات",
-    "cancelControlRequest": "إلغاء الطلب",
-    "controlQueue": "طلبات التحكم",
-    "noControlRequests": "لا توجد طلبات معلقة.",
-    "grantControlTo": "قم بمنح التحكم إلى {{name}}",
-    "dismissControlRequest": "رفض طلب التحكم {{name}}",
-    "releaseControl": "التحكم في الإصدار",
-    "grantControl": "امنح السيطرة",
-    "revokeControl": "استعد السيطرة",
-    "controlRequestedBy": "طلب {{name}} التحكم",
-    "grant": "منحة",
-    "controlBadge": "مسيطر",
-    "youArePresenting": "أنت تعرض المحتوى في علامة تبويب أخرى. توقف عن العرض لتسليم المنصة.",
-    "created": "تم إنشاء الغرفة",
-    "invited": "الأعضاء المدعوون",
-    "roomTab": "مقابلة",
-    "serverChanged": "تم تغيير خادم الاجتماع. أعد فتح هذا الاجتماع من لوحة الاجتماعات.",
-    "hostNotSynced": "قم بمزامنة هذا المضيف مع خادم الاجتماع قبل العرض التقديمي.",
-    "linkRequiresServer": "قم بربط هذا الجهاز بخادم Termix وقم بإنشاء الاجتماع هناك لمشاركة رابط الويب."
-  },
-  "nav": {
-    "collab": "الاجتماعات"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "السماح بمشاركة الجلسة",
-        "description": "يسمح هذا الخيار بمشاركة جلسات الطرفية المباشرة، وجلسات RDP، وVNC، وTelnet على مستوى الجهاز. ويتجاوز هذا الخيار جميع إعدادات المشاركة الخاصة بكل مضيف عند تعطيله."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "السماح بمشاركة الجلسة",
-        "description": "يمكن مشاركة الجلسات المباشرة على هذا المضيف عبر رابط أو مع مستخدمين آخرين"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "شارك الجلسات وانضم إلى الغرف",
-      "description": "شارك الجلسات المباشرة عبر رابط أو مع مستخدمين آخرين، وقم بإنشاء غرف تعاون والانضمام إليها."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "أبدًا",
-        "oneHour": "ساعة واحدة",
-        "oneDay": "24 ساعة",
-        "sevenDays": "7 أيام",
-        "thirtyDays": "30 يومًا",
-        "custom": "مخصص"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "تمت مشاركته معي",
-    "sharedBy": "تمت المشاركة بواسطة {{username}}",
-    "join": "ينضم",
-    "sharedSessionLabel": "{{hostName}} (مشترك)"
-  },
-  "plugin": {
-    "name": "مشاركة الجلسة"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/bg_BG.json b/plugins/session-sharing/locales/translated/bg_BG.json
deleted file mode 100644
index 92885cb53..000000000
--- a/plugins/session-sharing/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Свързване със споделена сесия...",
-      "linkInvalid": "Този линк за споделяне е невалиден, изтекъл или е отменен",
-      "rateLimited": "Твърде много опити, моля опитайте отново скоро",
-      "sessionEnded": "Тази сесия приключи",
-      "readOnlyBadge": "Само преглед",
-      "ownerLabel": "Собственик на домакин"
-    },
-    "modalTitle": "Споделяне на сесия",
-    "shareButton": "Споделяне",
-    "notReadyToShare": "Сесията все още не е готова за споделяне",
-    "modeTab": {
-      "link": "Връзка",
-      "user": "Потребител"
-    },
-    "linkModeDescription": "Всеки с този линк може да се присъедини, не е необходим акаунт.",
-    "userModeDescription": "Споделете с конкретен потребител, който вече има достъп до този хост. Ако все още няма достъп, първо споделете хоста с него или използвайте връзка. След като бъде споделена, сесията се показва в раздела му „Връзки“.",
-    "permissionLevel": {
-      "label": "Ниво на разрешение",
-      "readOnly": "Само за четене",
-      "readOnlyDescription": "Може да гледа сесията на живо, но не може да пише или да взаимодейства.",
-      "readWrite": "Четене и запис",
-      "readWriteDescription": "Може да пише и да взаимодейства със сесията точно като собственика."
-    },
-    "expiryLabel": "Изтичане на срока на валидност на връзката",
-    "createLinkButton": "Създаване на връзка",
-    "createShareButton": "Споделяне с потребителя",
-    "searchUsersPlaceholder": "Търсене на потребители...",
-    "noUsersFound": "Не са намерени потребители",
-    "linkCreated": "Линкът за споделяне е създаден",
-    "linkNeedsServer": "Линковете за споделяне работят само за сесии на Termix сървър. Свържете този хост чрез свързания си сървър, за да го споделите с линк.",
-    "linkCopied": "Връзката е копирана в буферната памет",
-    "copyLink": "Копиране на връзката",
-    "shareCreated": "Сесията е споделена. Тя ще се покаже в раздела им „Връзки“.",
-    "shareFailed": "Създаването на споделено съдържание не бе успешно",
-    "userLacksHostAccess": "Тозият потребител все още няма достъп до този хост. Първо споделете хоста с него или използвайте линк.",
-    "activeShares": "Активни акции",
-    "noActiveShares": "Няма активни споделяния за тази сесия",
-    "revoke": "Отмяна",
-    "revokeConfirmTitle": "Да се отмени ли това споделяне?",
-    "revokeConfirmDescription": "Всеки, който използва това споделяне, ще загуби достъп незабавно.",
-    "revoked": "Акцията е отменена",
-    "revokeFailed": "Неуспешно отменяне на споделянето",
-    "joinCount": "{{count}} присъединяване",
-    "joinCount_other": "{{count}} се присъединява",
-    "expiresAt": "Изтича {{date}}",
-    "linkShareBadge": "Връзка",
-    "userShareBadge": "Потребител: {{username}}",
-    "loadSharesFailed": "Зареждането на активните споделяния не бе успешно",
-    "remoteDisplayUnavailable": "Отдалеченият работен плот не е наличен в момента.",
-    "sharedWithMe": "Сесии, споделени с мен",
-    "customHoursPlaceholder": "Часове до изтичане на срока на достъп"
-  },
-  "collab": {
-    "createRoom": "Нова стая",
-    "roomName": "Име на стаята",
-    "persistentRoom": "Постоянна стая",
-    "persistentRoomHint": "Постоянните стаи остават в списъка след края на срещата и могат да бъдат използвани повторно.",
-    "noRooms": "Все още няма стаи. Създайте една, за да започнете среща.",
-    "openRoom": "Отворено",
-    "endRoom": "Край на срещата",
-    "leaveRoom": "Оставете",
-    "deleteMember": "Премахване",
-    "removeMember": "Премахване на {{name}}",
-    "removeMemberTitle": "Да се премахне ли този член?",
-    "removeMemberDescription": "{{name}} ще загуби достъп до тази стая незабавно. Всеки активен SSH зрител ще бъде прекъснат.",
-    "invite": "Покани",
-    "inviteTitle": "Поканете членове",
-    "members": "Членове",
-    "membersPanel": "Членове на стаята и заявки за контрол",
-    "membersWithCount": "Членове ({{count}})",
-    "guestsWithCount": "Гости ({{count}})",
-    "removeGuests": "Премахване на гости",
-    "anonymousGuest": "Гост",
-    "online": "онлайн",
-    "offline": "офлайн",
-    "you": "(ти)",
-    "hostBadge": "Домакин",
-    "presenterBadge": "Представяне",
-    "present": "Настояще",
-    "presentTitle": "Излезте на сцената",
-    "presentHost": "Домакин",
-    "searchHosts": "Търсене на хостове",
-    "noHostsFound": "Няма намерени налични хостове.",
-    "presentProtocol": "Протокол",
-    "stopPresenting": "Спиране на представянето",
-    "takeOver": "Поемете контрола",
-    "takeOverConfirmTitle": "Да се замени ли текущата презентация?",
-    "takeOverDescription": "{{name}} представя сега. Поемането на водещия ще изключи всички от тази сцена.",
-    "emptyStage": "Никой не представя. Излезте на сцената, за да споделите сесия.",
-    "stageLoading": "Свързване със сцената...",
-    "stageEnded": "Презентацията приключи",
-    "roomEnded": "Тази среща приключи",
-    "presenterLabel": "{{name}} представя",
-    "guestLink": "Връзка за гости",
-    "guestLinkOn": "Връзката за гости е включена. Всеки с връзката може да гледа сцената.",
-    "guestLinkOff": "Връзката за гости е изключена.",
-    "copyLink": "Копиране на връзката",
-    "rotateLink": "Завъртане на връзката",
-    "disableLink": "Деактивиране на връзката",
-    "rotateLinkConfirmTitle": "Да се завърти ли линкът за гости?",
-    "rotateLinkDescription": "Текущата връзка ще спре да работи незабавно. Свързаните SSH гости ще бъдат прекъснати.",
-    "disableLinkConfirmTitle": "Да се деактивира ли връзката за гости?",
-    "disableLinkDescription": "Анонимните SSH зрители ще бъдат незабавно прекъснати и текущата връзка ще спре да работи.",
-    "linkCopied": "Връзката е копирана",
-    "roles": "Роли",
-    "users": "Потребители",
-    "searchUsers": "Търсене на потребители",
-    "endConfirmTitle": "Да се прекрати ли тази среща?",
-    "endDescription": "{{name}} ще приключи за всички и не може да бъде отворено отново.",
-    "endPersistentDescription": "Активната презентация в {{name}} ще спре. Стаята остава достъпна за повторна употреба.",
-    "deleteRoom": "Изтриване на стая",
-    "deleteConfirmTitle": "Да се изтрие ли тази стая?",
-    "deleteDescription": "{{name}} ще бъде изтрито за постоянно за всички и действието не може да бъде отменено.",
-    "invitedTo": "Поканиха ви в „{{name}}“",
-    "guest": {
-      "title": "Среща",
-      "waiting": "В очакване на водещия...",
-      "linkInvalid": "Този линк за гости е невалиден или срещата е приключила"
-    },
-    "reopenFromPanel": "Този раздел за среща е с изтекъл срок. Отворете отново стаята от панела „Срещи“.",
-    "retry": "Опитай отново",
-    "requestControl": "Заявка за контрол",
-    "cancelControlRequest": "Отмяна на заявката",
-    "controlQueue": "Заявки за контрол",
-    "noControlRequests": "Няма чакащи заявки.",
-    "grantControlTo": "Дайте контрол на {{name}}",
-    "dismissControlRequest": "Отхвърляне на заявката за контрол на {{name}}",
-    "releaseControl": "Контрол на освобождаването",
-    "grantControl": "Дайте контрол",
-    "revokeControl": "Върнете си контрола",
-    "controlRequestedBy": "{{name}} поиска контрол",
-    "grant": "Грант",
-    "controlBadge": "В контрол",
-    "youArePresenting": "Презентирате в друг раздел. Спрете презентацията, за да предадете сцената.",
-    "created": "Стаята е създадена",
-    "invited": "Поканени членове",
-    "roomTab": "Среща",
-    "serverChanged": "Сървърът за срещата се промени. Отворете отново тази среща от панела „Срещи“.",
-    "hostNotSynced": "Синхронизирайте този хост със сървъра за срещи преди представяне.",
-    "linkRequiresServer": "Свържете този работен плот със Termix сървър и създайте срещата там, за да споделите уеб връзка."
-  },
-  "nav": {
-    "collab": "Срещи"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Разрешаване на споделяне на сесия",
-        "description": "Разрешава споделянето на сесии на живо на терминал, RDP, VNC и Telnet в целия екземпляр. Заменя всяко превключвател за споделяне на хост, когато е деактивиран."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Разрешаване на споделяне на сесия",
-        "description": "Позволете споделянето на сесиите на живо на този хост чрез линк или с други потребители"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Споделяне на сесии и присъединяване към стаи",
-      "description": "Споделяйте сесии на живо чрез линк или с други потребители, както и създавайте и се присъединявайте към стаи за сътрудничество."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Никога",
-        "oneHour": "1 час",
-        "oneDay": "24 часа",
-        "sevenDays": "7 дни",
-        "thirtyDays": "30 дни",
-        "custom": "Персонализирано"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Споделено с мен",
-    "sharedBy": "Споделено от {{username}}",
-    "join": "Присъединете се",
-    "sharedSessionLabel": "{{hostName}} (споделено)"
-  },
-  "plugin": {
-    "name": "Споделяне на сесия"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/bn_BD.json b/plugins/session-sharing/locales/translated/bn_BD.json
deleted file mode 100644
index e4dc0868f..000000000
--- a/plugins/session-sharing/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "শেয়ার করা সেশনে সংযোগ স্থাপন করা হচ্ছে...",
-      "linkInvalid": "এই শেয়ার লিঙ্কটি অবৈধ, মেয়াদোত্তীর্ণ, বা বাতিল করা হয়েছে।",
-      "rateLimited": "অনেকবার চেষ্টা করা হয়েছে, অনুগ্রহ করে কিছুক্ষণ পরে আবার চেষ্টা করুন।",
-      "sessionEnded": "এই অধিবেশন শেষ হয়েছে",
-      "readOnlyBadge": "শুধুমাত্র দেখার জন্য",
-      "ownerLabel": "হোস্ট মালিক"
-    },
-    "modalTitle": "সেশন শেয়ার করুন",
-    "shareButton": "শেয়ার",
-    "notReadyToShare": "সেশনটি এখনও শেয়ার করার জন্য প্রস্তুত নয়।",
-    "modeTab": {
-      "link": "লিঙ্ক",
-      "user": "ব্যবহারকারী"
-    },
-    "linkModeDescription": "এই লিঙ্কের মাধ্যমে যে কেউ যোগ দিতে পারবেন, কোনো অ্যাকাউন্টের প্রয়োজন নেই।",
-    "userModeDescription": "এমন একজন নির্দিষ্ট ব্যবহারকারীর সাথে শেয়ার করুন যার এই হোস্টে আগে থেকেই অ্যাক্সেস আছে। যদি তাদের এখনও অ্যাক্সেস না থাকে, তাহলে প্রথমে তাদের সাথে হোস্টটি শেয়ার করুন অথবা এর পরিবর্তে একটি লিঙ্ক ব্যবহার করুন। শেয়ার করা হয়ে গেলে, সেশনটি তাদের 'কানেকশনস' ট্যাবে দেখা যাবে।",
-    "permissionLevel": {
-      "label": "অনুমতি স্তর",
-      "readOnly": "শুধুমাত্র পঠনযোগ্য",
-      "readOnlyDescription": "সেশনটি সরাসরি দেখা যাবে কিন্তু টাইপ বা অংশগ্রহণ করা যাবে না।",
-      "readWrite": "পড়া-লেখা",
-      "readWriteDescription": "মালিকের মতোই সেশনে টাইপ করতে এবং ইন্টারঅ্যাক্ট করতে পারবেন।"
-    },
-    "expiryLabel": "লিঙ্কের মেয়াদ শেষ",
-    "createLinkButton": "লিঙ্ক তৈরি করুন",
-    "createShareButton": "ব্যবহারকারীর সাথে শেয়ার করুন",
-    "searchUsersPlaceholder": "ব্যবহারকারীদের অনুসন্ধান করুন...",
-    "noUsersFound": "কোন ব্যবহারকারী খুঁজে পাওয়া যায়নি",
-    "linkCreated": "শেয়ার লিঙ্ক তৈরি করা হয়েছে",
-    "linkNeedsServer": "শেয়ার লিঙ্ক শুধুমাত্র টারমিক্স সার্ভারের সেশনের জন্যই কাজ করে। লিঙ্কের মাধ্যমে শেয়ার করতে আপনার লিঙ্কড সার্ভারের মাধ্যমে এই হোস্টটি সংযুক্ত করুন।",
-    "linkCopied": "লিঙ্ক ক্লিপবোর্ডে কপি করা হয়েছে",
-    "copyLink": "লিঙ্ক কপি করুন",
-    "shareCreated": "সেশনটি শেয়ার করা হয়েছে। এটি তাদের কানেকশনস ট্যাবে দেখা যাবে।",
-    "shareFailed": "শেয়ার তৈরি করতে ব্যর্থ হয়েছে",
-    "userLacksHostAccess": "ওই ব্যবহারকারীর এখনও এই হোস্টে অ্যাক্সেস নেই। প্রথমে তাদের সাথে হোস্টটি শেয়ার করুন, অথবা এর পরিবর্তে একটি লিঙ্ক ব্যবহার করুন।",
-    "activeShares": "সক্রিয় শেয়ার",
-    "noActiveShares": "এই সেশনের জন্য কোনো সক্রিয় শেয়ার নেই",
-    "revoke": "বাতিল করুন",
-    "revokeConfirmTitle": "এই শেয়ারটি প্রত্যাহার করবেন?",
-    "revokeConfirmDescription": "যে কেউ এই শেয়ারটি ব্যবহার করলে, তিনি অবিলম্বে অ্যাক্সেস হারাবেন।",
-    "revoked": "শেয়ার প্রত্যাহার করা হয়েছে",
-    "revokeFailed": "শেয়ার প্রত্যাহার করতে ব্যর্থ হয়েছে",
-    "joinCount": "{{count}} যোগদান করুন",
-    "joinCount_other": "{{count}} যোগদান করে",
-    "expiresAt": "মেয়াদ শেষ হবে {{date}}",
-    "linkShareBadge": "লিঙ্ক",
-    "userShareBadge": "ব্যবহারকারী: {{username}}",
-    "loadSharesFailed": "সক্রিয় শেয়ারগুলি লোড করতে ব্যর্থ হয়েছে",
-    "remoteDisplayUnavailable": "এই মুহূর্তে রিমোট ডেস্কটপ উপলব্ধ নেই।",
-    "sharedWithMe": "আমার সাথে শেয়ার করা সেশনগুলি",
-    "customHoursPlaceholder": "অ্যাক্সেসের মেয়াদ শেষ হতে বাকি ঘন্টা"
-  },
-  "collab": {
-    "createRoom": "নতুন ঘর",
-    "roomName": "রুমের নাম",
-    "persistentRoom": "স্থায়ী কক্ষ",
-    "persistentRoomHint": "মিটিং শেষ হওয়ার পরেও স্থায়ী রুমগুলো তালিকাভুক্ত থাকে এবং পুনরায় ব্যবহার করা যায়।",
-    "noRooms": "এখনো কোনো রুম নেই। মিটিং শুরু করতে একটি রুম তৈরি করুন।",
-    "openRoom": "খোলা",
-    "endRoom": "সভা শেষ করুন",
-    "leaveRoom": "ছেড়ে দিন",
-    "deleteMember": "অপসারণ করুন",
-    "removeMember": "{{name}} মুছে ফেলুন",
-    "removeMemberTitle": "এই সদস্যকে অপসারণ করবেন?",
-    "removeMemberDescription": "{{name}} অবিলম্বে এই রুমে প্রবেশাধিকার হারাবে। যেকোনো সক্রিয় SSH ভিউয়ার সংযোগ বিচ্ছিন্ন হয়ে যাবে।",
-    "invite": "আমন্ত্রণ",
-    "inviteTitle": "সদস্যদের আমন্ত্রণ জানান",
-    "members": "সদস্যরা",
-    "membersPanel": "রুমের সদস্য এবং নিয়ন্ত্রণ অনুরোধ",
-    "membersWithCount": "সদস্যগণ ({{count}})",
-    "guestsWithCount": "অতিথিরা ({{count}})",
-    "removeGuests": "অতিথিদের সরিয়ে দিন",
-    "anonymousGuest": "অতিথি",
-    "online": "অনলাইন",
-    "offline": "অফলাইন",
-    "you": "(তুমি)",
-    "hostBadge": "হোস্ট",
-    "presenterBadge": "উপস্থাপন করা হচ্ছে",
-    "present": "বর্তমান",
-    "presentTitle": "মঞ্চে উঠুন",
-    "presentHost": "হোস্ট",
-    "searchHosts": "হোস্ট অনুসন্ধান করুন",
-    "noHostsFound": "কোনো উপলব্ধ হোস্ট খুঁজে পাওয়া যায়নি।",
-    "presentProtocol": "প্রোটোকল",
-    "stopPresenting": "উপস্থাপন করা বন্ধ করুন",
-    "takeOver": "দায়িত্ব গ্রহণ করুন",
-    "takeOverConfirmTitle": "বর্তমান উপস্থাপনাটি প্রতিস্থাপন করবেন?",
-    "takeOverDescription": "{{name}} এখন উপস্থাপনা করছে। দায়িত্ব গ্রহণ করলে সবাই সেই মঞ্চ থেকে বিচ্ছিন্ন হয়ে যাবে।",
-    "emptyStage": "কেউ উপস্থাপনা করছেন না। একটি সেশন পরিচালনা করতে মঞ্চে আসুন।",
-    "stageLoading": "মঞ্চের সাথে সংযোগ স্থাপন...",
-    "stageEnded": "উপস্থাপনা শেষ হলো।",
-    "roomEnded": "এই সভা শেষ হয়েছে।",
-    "presenterLabel": "{{name}} উপস্থাপন করছে",
-    "guestLink": "অতিথি লিঙ্ক",
-    "guestLinkOn": "গেস্ট লিঙ্ক চালু আছে। লিঙ্কটি ব্যবহার করে যে কেউ মঞ্চটি দেখতে পারবেন।",
-    "guestLinkOff": "গেস্ট লিঙ্ক বন্ধ আছে।",
-    "copyLink": "লিঙ্ক কপি করুন",
-    "rotateLink": "লিঙ্ক ঘোরান",
-    "disableLink": "লিঙ্ক নিষ্ক্রিয় করুন",
-    "rotateLinkConfirmTitle": "গেস্ট লিঙ্কটি ঘোরান?",
-    "rotateLinkDescription": "বর্তমান সংযোগটি অবিলম্বে কাজ করা বন্ধ করে দেবে। সংযুক্ত SSH গেস্টদের সংযোগ বিচ্ছিন্ন করা হবে।",
-    "disableLinkConfirmTitle": "গেস্ট লিঙ্কটি নিষ্ক্রিয় করবেন?",
-    "disableLinkDescription": "বেনামী SSH দর্শকদের সংযোগ অবিলম্বে বিচ্ছিন্ন করা হবে এবং বর্তমান লিঙ্কটি কাজ করা বন্ধ করে দেবে।",
-    "linkCopied": "লিঙ্ক কপি করা হয়েছে",
-    "roles": "ভূমিকা",
-    "users": "ব্যবহারকারীরা",
-    "searchUsers": "ব্যবহারকারীদের অনুসন্ধান করুন",
-    "endConfirmTitle": "এই সভা শেষ করব?",
-    "endDescription": "{{name}} সকলের জন্য শেষ হয়ে যাবে এবং পুনরায় খোলা যাবে না।",
-    "endPersistentDescription": "{{name}} -এ চলমান উপস্থাপনাটি বন্ধ হয়ে যাবে। রুমটি পুনরায় ব্যবহারের জন্য উপলব্ধ থাকবে।",
-    "deleteRoom": "রুম মুছুন",
-    "deleteConfirmTitle": "এই রুমটা মুছে ফেলবেন?",
-    "deleteDescription": "{{name}} সকলের জন্য স্থায়ীভাবে মুছে ফেলা হবে এবং এটি আর পূর্বাবস্থায় ফেরানো যাবে না।",
-    "invitedTo": "তোমাকে \"{{name}} \" এ আমন্ত্রণ জানানো হয়েছিল",
-    "guest": {
-      "title": "সভা",
-      "waiting": "উপস্থাপকের জন্য অপেক্ষা করছি...",
-      "linkInvalid": "এই অতিথি লিঙ্কটি অবৈধ অথবা মিটিং শেষ হয়ে গেছে।"
-    },
-    "reopenFromPanel": "এই মিটিং ট্যাবটির মেয়াদ শেষ হয়ে গেছে। মিটিং প্যানেল থেকে রুমটি পুনরায় খুলুন।",
-    "retry": "পুনরায় চেষ্টা করুন",
-    "requestControl": "অনুরোধ নিয়ন্ত্রণ",
-    "cancelControlRequest": "অনুরোধ বাতিল করুন",
-    "controlQueue": "নিয়ন্ত্রণ অনুরোধ",
-    "noControlRequests": "কোনো অপেক্ষমান অনুরোধ নেই।",
-    "grantControlTo": "{{name}}-কে নিয়ন্ত্রণ দিন",
-    "dismissControlRequest": "{{name}}এর নিয়ন্ত্রণ অনুরোধ খারিজ করুন",
-    "releaseControl": "রিলিজ নিয়ন্ত্রণ",
-    "grantControl": "নিয়ন্ত্রণ দিন",
-    "revokeControl": "নিয়ন্ত্রণ ফিরিয়ে নিন",
-    "controlRequestedBy": "{{name}} নিয়ন্ত্রণের জন্য অনুরোধ করেছে",
-    "grant": "অনুদান",
-    "controlBadge": "নিয়ন্ত্রণে",
-    "youArePresenting": "আপনি অন্য একটি ট্যাবে প্রেজেন্টেশন দিচ্ছেন। মঞ্চ হস্তান্তর করার জন্য প্রেজেন্টেশন বন্ধ করুন।",
-    "created": "রুম তৈরি করা হয়েছে",
-    "invited": "সদস্যদের আমন্ত্রণ জানানো হয়েছে",
-    "roomTab": "সভা",
-    "serverChanged": "মিটিং সার্ভার পরিবর্তিত হয়েছে। মিটিং প্যানেল থেকে এই মিটিংটি পুনরায় খুলুন।",
-    "hostNotSynced": "উপস্থাপনা করার আগে এই হোস্টকে মিটিং সার্ভারের সাথে সিঙ্ক করুন।",
-    "linkRequiresServer": "ওয়েব লিঙ্ক শেয়ার করার জন্য এই ডেস্কটপটিকে একটি টারমিক্স সার্ভারের সাথে লিঙ্ক করুন এবং সেখানে মিটিংটি তৈরি করুন।"
-  },
-  "nav": {
-    "collab": "সভা"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "সেশন শেয়ারিং অনুমোদন করুন",
-        "description": "লাইভ টার্মিনাল, RDP, VNC, এবং টেলনেট সেশনগুলোকে ইনস্ট্যান্স-ব্যাপী শেয়ার করার অনুমতি দিন। এটি নিষ্ক্রিয় করা হলে, প্রতি-হোস্ট শেয়ারিং টগলকে ওভাররাইড করে।"
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "সেশন শেয়ারিং অনুমোদন করুন",
-        "description": "এই হোস্টের লাইভ সেশনগুলো লিঙ্কের মাধ্যমে বা অন্যান্য ব্যবহারকারীদের সাথে শেয়ার করা যাবে।"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "সেশন শেয়ার করুন এবং রুমে যোগ দিন",
-      "description": "লিঙ্কের মাধ্যমে বা অন্যান্য ব্যবহারকারীদের সাথে লাইভ সেশন শেয়ার করুন, এবং কোলাবোরেশন রুম তৈরি করে তাতে যোগদান করুন।"
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "কখনো না",
-        "oneHour": "১ ঘন্টা",
-        "oneDay": "২৪ ঘন্টা",
-        "sevenDays": "৭ দিন",
-        "thirtyDays": "৩০ দিন",
-        "custom": "কাস্টম"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "আমার সাথে শেয়ার করা হয়েছে",
-    "sharedBy": "{{username}} দ্বারা শেয়ার করা হয়েছে",
-    "join": "যোগদান করুন",
-    "sharedSessionLabel": "{{hostName}} (ভাগ করা)"
-  },
-  "plugin": {
-    "name": "সেশন শেয়ারিং"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/ca_ES.json b/plugins/session-sharing/locales/translated/ca_ES.json
deleted file mode 100644
index 2e139ce26..000000000
--- a/plugins/session-sharing/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Connectant a la sessió compartida...",
-      "linkInvalid": "Aquest enllaç per compartir no és vàlid, ha caducat o s'ha revocat.",
-      "rateLimited": "Massa intents, si us plau, torneu-ho a intentar en breu",
-      "sessionEnded": "Aquesta sessió ha finalitzat",
-      "readOnlyBadge": "Només visualització",
-      "ownerLabel": "Propietari de l'amfitrió"
-    },
-    "modalTitle": "Comparteix la sessió",
-    "shareButton": "Comparteix",
-    "notReadyToShare": "La sessió encara no està a punt per compartir",
-    "modeTab": {
-      "link": "Enllaç",
-      "user": "Usuari"
-    },
-    "linkModeDescription": "Qualsevol persona amb aquest enllaç s'hi pot unir, no cal tenir cap compte.",
-    "userModeDescription": "Comparteix amb un usuari específic que ja tingui accés a aquest amfitrió. Si encara no hi té accés, comparteix primer l'amfitrió amb ell o utilitza un enllaç. Un cop compartida, la sessió apareix a la pestanya Connexions.",
-    "permissionLevel": {
-      "label": "Nivell de permís",
-      "readOnly": "Només lectura",
-      "readOnlyDescription": "Puc veure la sessió en directe però no puc escriure ni interactuar.",
-      "readWrite": "Lectura i escriptura",
-      "readWriteDescription": "Pot escriure i interactuar amb la sessió igual que el propietari."
-    },
-    "expiryLabel": "Caducitat de l'enllaç",
-    "createLinkButton": "Crea un enllaç",
-    "createShareButton": "Comparteix amb l'usuari",
-    "searchUsersPlaceholder": "Cerca usuaris...",
-    "noUsersFound": "No s'han trobat usuaris",
-    "linkCreated": "Enllaç de compartició creat",
-    "linkNeedsServer": "Els enllaços per compartir només funcionen per a sessions en un servidor Termix. Connecteu aquest amfitrió a través del vostre servidor enllaçat per compartir-lo amb un enllaç.",
-    "linkCopied": "Enllaç copiat al porta-retalls",
-    "copyLink": "Copia l'enllaç",
-    "shareCreated": "Sessió compartida. Apareixerà a la pestanya Connexions.",
-    "shareFailed": "No s'ha pogut crear la compartició",
-    "userLacksHostAccess": "Aquest usuari encara no té accés a aquest amfitrió. Primer comparteix l'amfitrió amb ell o utilitza un enllaç.",
-    "activeShares": "Accions actives",
-    "noActiveShares": "No hi ha cap compartició activa per a aquesta sessió",
-    "revoke": "Revocar",
-    "revokeConfirmTitle": "Voleu revocar aquesta compartició?",
-    "revokeConfirmDescription": "Qualsevol persona que utilitzi aquesta opció compartida perdrà l'accés immediatament.",
-    "revoked": "Compartir revocat",
-    "revokeFailed": "No s'ha pogut revocar la compartició",
-    "joinCount": "{{count}} uneix-te",
-    "joinCount_other": "{{count}} s'uneix",
-    "expiresAt": "Caduca {{date}}",
-    "linkShareBadge": "Enllaç",
-    "userShareBadge": "Usuari: {{username}}",
-    "loadSharesFailed": "No s'han pogut carregar les comparticions actives",
-    "remoteDisplayUnavailable": "L'escriptori remot no està disponible ara mateix.",
-    "sharedWithMe": "Sessions compartides amb mi",
-    "customHoursPlaceholder": "Hores fins que caduca l'accés"
-  },
-  "collab": {
-    "createRoom": "Nova habitació",
-    "roomName": "Nom de l'habitació",
-    "persistentRoom": "Sala persistent",
-    "persistentRoomHint": "Les sales persistents romanen a la llista després que finalitzi la reunió i es poden reutilitzar.",
-    "noRooms": "Encara no hi ha cap sala. Crea'n una per iniciar una reunió.",
-    "openRoom": "Obre",
-    "endRoom": "Finalitza la reunió",
-    "leaveRoom": "Marxar",
-    "deleteMember": "Elimina",
-    "removeMember": "Elimina {{name}}",
-    "removeMemberTitle": "Voleu eliminar aquest membre?",
-    "removeMemberDescription": "{{name}} perdrà l'accés a aquesta sala immediatament. Qualsevol visor SSH actiu es desconnectarà.",
-    "invite": "Convidar",
-    "inviteTitle": "Convida membres",
-    "members": "Membres",
-    "membersPanel": "Membres de la sala i sol·licituds de control",
-    "membersWithCount": "Membres ({{count}})",
-    "guestsWithCount": "Convidats ({{count}})",
-    "removeGuests": "Elimina els convidats",
-    "anonymousGuest": "Convidat",
-    "online": "en línia",
-    "offline": "fora de línia",
-    "you": "(tu)",
-    "hostBadge": "Amfitrió",
-    "presenterBadge": "Presentant",
-    "present": "Present",
-    "presentTitle": "Puja a l'escenari",
-    "presentHost": "Amfitrió",
-    "searchHosts": "Cerca amfitrions",
-    "noHostsFound": "No s'han trobat amfitrions disponibles.",
-    "presentProtocol": "Protocol",
-    "stopPresenting": "Atura la presentació",
-    "takeOver": "Prendre el control",
-    "takeOverConfirmTitle": "Voleu substituir la presentació actual?",
-    "takeOverDescription": "{{name}} està presentant ara. Prendre el control desconnectarà tothom d'aquesta etapa.",
-    "emptyStage": "Ningú fa una presentació. Puja a l'escenari per compartir una sessió.",
-    "stageLoading": "Connexió amb l'escenari...",
-    "stageEnded": "La presentació va acabar",
-    "roomEnded": "Aquesta reunió ha acabat",
-    "presenterLabel": "{{name}} presenta",
-    "guestLink": "Enllaç de convidat",
-    "guestLinkOn": "L'enllaç de convidat està activat. Qualsevol persona que tingui l'enllaç pot veure l'escenari.",
-    "guestLinkOff": "L'enllaç de convidat està desactivat.",
-    "copyLink": "Copia l'enllaç",
-    "rotateLink": "Gira l'enllaç",
-    "disableLink": "Desactiva l'enllaç",
-    "rotateLinkConfirmTitle": "Voleu girar l'enllaç de convidat?",
-    "rotateLinkDescription": "L'enllaç actual deixarà de funcionar immediatament. Els convidats SSH connectats es desconnectaran.",
-    "disableLinkConfirmTitle": "Voleu desactivar l'enllaç de convidat?",
-    "disableLinkDescription": "Els visors SSH anònims es desconnectaran immediatament i l'enllaç actual deixarà de funcionar.",
-    "linkCopied": "Enllaç copiat",
-    "roles": "Rols",
-    "users": "Usuaris",
-    "searchUsers": "Cerca usuaris",
-    "endConfirmTitle": "Voleu finalitzar aquesta reunió?",
-    "endDescription": "{{name}} finalitzarà per a tothom i no es podrà tornar a obrir.",
-    "endPersistentDescription": "La presentació activa a {{name}} s'aturarà. La sala romandrà disponible per a reutilització.",
-    "deleteRoom": "Suprimeix l'habitació",
-    "deleteConfirmTitle": "Voleu suprimir aquesta sala?",
-    "deleteDescription": "{{name}} s'eliminarà permanentment per a tothom i no es podrà desfer.",
-    "invitedTo": "Has estat convidat a \"{{name}}\"",
-    "guest": {
-      "title": "Reunió",
-      "waiting": "Esperant el presentador...",
-      "linkInvalid": "Aquest enllaç de convidat no és vàlid o la reunió ha finalitzat."
-    },
-    "reopenFromPanel": "Aquesta pestanya de reunió ha caducat. Torna a obrir la sala des del tauler Reunions.",
-    "retry": "Torna-ho a intentar",
-    "requestControl": "Sol·licitud de control",
-    "cancelControlRequest": "Cancel·la la sol·licitud",
-    "controlQueue": "Sol·licituds de control",
-    "noControlRequests": "No hi ha sol·licituds pendents.",
-    "grantControlTo": "Dóna el control a {{name}}",
-    "dismissControlRequest": "Ignora la sol·licitud de control de {{name}}",
-    "releaseControl": "Control de llançament",
-    "grantControl": "Donar control",
-    "revokeControl": "Recupera el control",
-    "controlRequestedBy": "{{name}} va demanar control",
-    "grant": "Subvenció",
-    "controlBadge": "En control",
-    "youArePresenting": "Esteu presentant en una altra pestanya. Deixeu de presentar per cedir l'escenari.",
-    "created": "Sala creada",
-    "invited": "Membres convidats",
-    "roomTab": "Reunió",
-    "serverChanged": "El servidor de reunions ha canviat. Torna a obrir aquesta reunió des del tauler Reunions.",
-    "hostNotSynced": "Sincronitza aquest amfitrió amb el servidor de reunions abans de presentar.",
-    "linkRequiresServer": "Enllaça aquest escriptori a un servidor de Termix i crea-hi la reunió per compartir un enllaç web."
-  },
-  "nav": {
-    "collab": "Reunions"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Permetre la compartició de sessions",
-        "description": "Permet que les sessions de terminal, RDP, VNC i Telnet en directe es comparteixin a tota la instància. Anul·la tots els activables i desactivables per compartir per host quan estan desactivats."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Permetre la compartició de sessions",
-        "description": "Permet que les sessions en directe d'aquest amfitrió es comparteixin mitjançant un enllaç o amb altres usuaris"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Comparteix sessions i uneix-te a sales",
-      "description": "Comparteix sessions en directe mitjançant un enllaç o amb altres usuaris, i crea sales de col·laboració i uneix-te-hi."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Mai",
-        "oneHour": "1 hora",
-        "oneDay": "24 hores",
-        "sevenDays": "7 dies",
-        "thirtyDays": "30 dies",
-        "custom": "Personalitzat"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Compartit amb mi",
-    "sharedBy": "Compartit per {{username}}",
-    "join": "Uneix-te",
-    "sharedSessionLabel": "{{hostName}} (compartit)"
-  },
-  "plugin": {
-    "name": "Compartició de sessions"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/cs_CZ.json b/plugins/session-sharing/locales/translated/cs_CZ.json
deleted file mode 100644
index 693c13763..000000000
--- a/plugins/session-sharing/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Připojování ke sdílené relaci...",
-      "linkInvalid": "Tento odkaz pro sdílení je neplatný, jeho platnost vypršela nebo byl zrušen.",
-      "rateLimited": "Příliš mnoho pokusů, zkuste to prosím znovu brzy",
-      "sessionEnded": "Tato relace skončila",
-      "readOnlyBadge": "Pouze zobrazení",
-      "ownerLabel": "Majitel hostitele"
-    },
-    "modalTitle": "Sdílení relace",
-    "shareButton": "Podíl",
-    "notReadyToShare": "Relace ještě není připravena ke sdílení",
-    "modeTab": {
-      "link": "Odkaz",
-      "user": "Uživatel"
-    },
-    "linkModeDescription": "Připojit se může kdokoli s tímto odkazem, účet není potřeba.",
-    "userModeDescription": "Sdílejte s konkrétním uživatelem, který již má k tomuto hostiteli přístup. Pokud ještě nemá přístup, nejprve s ním hostitele sdílejte nebo použijte odkaz. Po sdílení se relace zobrazí na jeho kartě Připojení.",
-    "permissionLevel": {
-      "label": "Úroveň oprávnění",
-      "readOnly": "Pouze pro čtení",
-      "readOnlyDescription": "Může sledovat relaci živě, ale nemůže psát ani interagovat.",
-      "readWrite": "Čtení a zápis",
-      "readWriteDescription": "Může psát a interagovat s relací stejně jako její vlastník."
-    },
-    "expiryLabel": "Platnost vypršení platnosti odkazu",
-    "createLinkButton": "Vytvořit odkaz",
-    "createShareButton": "Sdílet s uživatelem",
-    "searchUsersPlaceholder": "Hledat uživatele...",
-    "noUsersFound": "Nenaleženi žádní uživatelé",
-    "linkCreated": "Odkaz pro sdílení vytvořen",
-    "linkNeedsServer": "Sdílení odkazů funguje pouze pro relace na serveru Termix. Pro sdílení tohoto hostitele pomocí odkazu jej připojte přes propojený server.",
-    "linkCopied": "Odkaz zkopírován do schránky",
-    "copyLink": "Kopírovat odkaz",
-    "shareCreated": "Relace sdílena. Zobrazí se na jejich kartě Připojení.",
-    "shareFailed": "Vytvoření sdílené položky se nezdařilo",
-    "userLacksHostAccess": "Tento uživatel zatím nemá přístup k tomuto hostiteli. Nejprve s ním hostitele sdílejte nebo použijte odkaz.",
-    "activeShares": "Aktivní akcie",
-    "noActiveShares": "Pro tuto relaci nejsou žádné aktivní sdílení",
-    "revoke": "Zrušit",
-    "revokeConfirmTitle": "Zrušit toto sdílení?",
-    "revokeConfirmDescription": "Každý, kdo tuto sdílenou složku používá, okamžitě ztratí přístup.",
-    "revoked": "Podíl zrušen",
-    "revokeFailed": "Zrušení sdílení se nezdařilo",
-    "joinCount": "{{count}} připojit se",
-    "joinCount_other": "{{count}} se připojí",
-    "expiresAt": "Platnost vyprší {{date}}",
-    "linkShareBadge": "Odkaz",
-    "userShareBadge": "Uživatel: {{username}}",
-    "loadSharesFailed": "Nepodařilo se načíst aktivní sdílení",
-    "remoteDisplayUnavailable": "Vzdálená plocha momentálně není k dispozici.",
-    "sharedWithMe": "Sezení sdílená se mnou",
-    "customHoursPlaceholder": "Hodiny do vypršení přístupu"
-  },
-  "collab": {
-    "createRoom": "Nový pokoj",
-    "roomName": "Název místnosti",
-    "persistentRoom": "Trvalá místnost",
-    "persistentRoomHint": "Trvalé místnosti zůstanou uvedeny i po skončení schůzky a lze je znovu použít.",
-    "noRooms": "Zatím žádné místnosti. Vytvořte si novou a začněte schůzku.",
-    "openRoom": "OTEVŘENO",
-    "endRoom": "Ukončit schůzku",
-    "leaveRoom": "Dovolená",
-    "deleteMember": "Odstranit",
-    "removeMember": "Odebrat {{name}}",
-    "removeMemberTitle": "Odebrat tohoto člena?",
-    "removeMemberDescription": "{{name}} okamžitě ztratí přístup k této místnosti. Jakýkoli aktivní SSH prohlížeč bude odpojen.",
-    "invite": "Pozvat",
-    "inviteTitle": "Pozvat členy",
-    "members": "Členové",
-    "membersPanel": "Členové místnosti a požadavky na ovládání",
-    "membersWithCount": "Členové ({{count}})",
-    "guestsWithCount": "Hosté ({{count}})",
-    "removeGuests": "Odebrat hosty",
-    "anonymousGuest": "Host",
-    "online": "online",
-    "offline": "offline",
-    "you": "(Vy)",
-    "hostBadge": "Hostitel",
-    "presenterBadge": "Prezentace",
-    "present": "Současnost",
-    "presentTitle": "Vyjdi na pódium",
-    "presentHost": "Hostitel",
-    "searchHosts": "Vyhledávání hostitelů",
-    "noHostsFound": "Nebyli nalezeni žádní dostupní hostitelé.",
-    "presentProtocol": "Protokol",
-    "stopPresenting": "Zastavit prezentaci",
-    "takeOver": "Převzít",
-    "takeOverConfirmTitle": "Nahradit aktuální prezentaci?",
-    "takeOverDescription": "{{name}} právě vystupuje. Převzetí vystoupení odpojí všechny od dané scény.",
-    "emptyStage": "Nikdo neprezentuje. Vydejte se na pódium a sdílejte prezentaci.",
-    "stageLoading": "Připojení k pódiu...",
-    "stageEnded": "Prezentace skončila",
-    "roomEnded": "Tato schůzka skončila",
-    "presenterLabel": "{{name}} prezentuje",
-    "guestLink": "Odkaz pro hosty",
-    "guestLinkOn": "Odkaz pro hosty je zapnutý. Kdokoli s odkazem může sledovat pódium.",
-    "guestLinkOff": "Hostovský odkaz je vypnutý.",
-    "copyLink": "Kopírovat odkaz",
-    "rotateLink": "Otočit odkaz",
-    "disableLink": "Zakázat odkaz",
-    "rotateLinkConfirmTitle": "Otočit odkaz pro hosty?",
-    "rotateLinkDescription": "Aktuální odkaz okamžitě přestane fungovat. Připojení hosté přes SSH budou odpojeni.",
-    "disableLinkConfirmTitle": "Zakázat odkaz pro hosty?",
-    "disableLinkDescription": "Anonymní uživatelé SSH budou okamžitě odpojeni a aktuální odkaz přestane fungovat.",
-    "linkCopied": "Odkaz zkopírován",
-    "roles": "Role",
-    "users": "Uživatelé",
-    "searchUsers": "Vyhledat uživatele",
-    "endConfirmTitle": "Ukončit tuto schůzku?",
-    "endDescription": "{{name}} bude pro všechny ukončeno a nebude možné jej znovu otevřít.",
-    "endPersistentDescription": "Aktivní prezentace v {{name}} se zastaví. Místnost zůstane k dispozici pro opětovné použití.",
-    "deleteRoom": "Smazat místnost",
-    "deleteConfirmTitle": "Smazat tuto místnost?",
-    "deleteDescription": "{{name}} bude trvale smazáno pro všechny a nelze to vrátit zpět.",
-    "invitedTo": "Byli jste pozváni na „{{name}}“",
-    "guest": {
-      "title": "Zasedání",
-      "waiting": "Čekání na moderátora...",
-      "linkInvalid": "Tento odkaz pro hosty je neplatný nebo schůzka skončila."
-    },
-    "reopenFromPanel": "Platnost této karty schůzky vypršela. Znovu otevřete místnost z panelu Schůzky.",
-    "retry": "Zkusit znovu",
-    "requestControl": "Požádat o kontrolu",
-    "cancelControlRequest": "Zrušit požadavek",
-    "controlQueue": "Žádosti o kontrolu",
-    "noControlRequests": "Žádné čekající žádosti.",
-    "grantControlTo": "Předejte kontrolu uživateli {{name}}",
-    "dismissControlRequest": "Zamítnout požadavek uživatele {{name}}na kontrolu",
-    "releaseControl": "Ovládání uvolnění",
-    "grantControl": "Předejte kontrolu",
-    "revokeControl": "Převezměte zpět kontrolu",
-    "controlRequestedBy": "{{name}} požádal o kontrolu",
-    "grant": "Grant",
-    "controlBadge": "Pod kontrolou",
-    "youArePresenting": "Prezentujete na jiné kartě. Ukončete prezentaci, abyste mohli předat scénu.",
-    "created": "Místnost vytvořena",
-    "invited": "Pozvaní členové",
-    "roomTab": "Zasedání",
-    "serverChanged": "Server schůzky se změnil. Znovu otevřete tuto schůzku z panelu Schůzky.",
-    "hostNotSynced": "Před prezentací synchronizujte tohoto hostitele se serverem schůzek.",
-    "linkRequiresServer": "Propojte tuto plochu se serverem Termix a vytvořte tam schůzku pro sdílení webového odkazu."
-  },
-  "nav": {
-    "collab": "Schůzky"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Povolit sdílení relace",
-        "description": "Povolit sdílení relací živého terminálu, RDP, VNC a Telnet v rámci celé instance. Pokud je tato možnost zakázána, přepíše všechny přepínače sdílení pro jednotlivé hostitele."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Povolit sdílení relace",
-        "description": "Umožnit sdílení živých relací na tomto hostiteli prostřednictvím odkazu nebo s ostatními uživateli"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Sdílení relací a připojení k místnostem",
-      "description": "Sdílejte živé relace prostřednictvím odkazu nebo s ostatními uživateli a vytvářejte a připojujte se k místnostem pro spolupráci."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Nikdy",
-        "oneHour": "1 hodina",
-        "oneDay": "24 hodin",
-        "sevenDays": "7 dní",
-        "thirtyDays": "30 dní",
-        "custom": "Zvyk"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Sdíleno se mnou",
-    "sharedBy": "Sdíleno uživatelem {{username}}",
-    "join": "Připojit se",
-    "sharedSessionLabel": "{{hostName}} (sdílené)"
-  },
-  "plugin": {
-    "name": "Sdílení relace"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/da_DK.json b/plugins/session-sharing/locales/translated/da_DK.json
deleted file mode 100644
index 69080675c..000000000
--- a/plugins/session-sharing/locales/translated/da_DK.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Forbinder til delt session...",
-      "linkInvalid": "Dette delingslink er ugyldigt, udløbet eller er blevet tilbagekaldt",
-      "rateLimited": "For mange forsøg, prøv igen om lidt",
-      "sessionEnded": "Denne session er afsluttet",
-      "readOnlyBadge": "Kun visning",
-      "ownerLabel": "Værtsejer"
-    },
-    "modalTitle": "Del session",
-    "shareButton": "Dele",
-    "notReadyToShare": "Sessionen er ikke klar til deling endnu",
-    "modeTab": {
-      "link": "Forbindelse",
-      "user": "Bruger"
-    },
-    "linkModeDescription": "Alle med dette link kan tilmelde sig, ingen konto kræves.",
-    "userModeDescription": "Del med en bestemt bruger, der allerede har adgang til denne vært. Hvis de ikke har adgang endnu, skal du først dele værten med dem eller bruge et link i stedet. Når sessionen er delt, vises den under deres fane Forbindelser.",
-    "permissionLevel": {
-      "label": "Tilladelsesniveau",
-      "readOnly": "Skrivebeskyttet",
-      "readOnlyDescription": "Kan se sessionen live, men kan ikke skrive eller interagere.",
-      "readWrite": "Læs-skriv",
-      "readWriteDescription": "Kan skrive og interagere med sessionen ligesom ejeren."
-    },
-    "expiryLabel": "Linkudløb",
-    "createLinkButton": "Opret link",
-    "createShareButton": "Del med brugeren",
-    "searchUsersPlaceholder": "Søg efter brugere...",
-    "noUsersFound": "Ingen brugere fundet",
-    "linkCreated": "Delingslink oprettet",
-    "linkNeedsServer": "Delingslinks fungerer kun for sessioner på en Termix-server. Forbind denne vært via din linkede server for at dele den med et link.",
-    "linkCopied": "Link kopieret til udklipsholder",
-    "copyLink": "Kopiér link",
-    "shareCreated": "Session delt. Den vises i fanen Forbindelser.",
-    "shareFailed": "Kunne ikke oprette deling",
-    "userLacksHostAccess": "Den bruger har endnu ikke adgang til denne vært. Del værten med dem først, eller brug et link i stedet.",
-    "activeShares": "Aktive aktier",
-    "noActiveShares": "Ingen aktive delinger for denne session",
-    "revoke": "Tilbagekald",
-    "revokeConfirmTitle": "Tilbagekald denne deling?",
-    "revokeConfirmDescription": "Enhver, der bruger denne deling, mister adgangen med det samme.",
-    "revoked": "Deling tilbagekaldt",
-    "revokeFailed": "Delingen kunne ikke tilbagekaldes",
-    "joinCount": "{{count}} tilmeld dig",
-    "joinCount_other": "{{count}} deltager",
-    "expiresAt": "Udløber {{date}}",
-    "linkShareBadge": "Forbindelse",
-    "userShareBadge": "Bruger: {{username}}",
-    "loadSharesFailed": "Kunne ikke indlæse aktive delinger",
-    "remoteDisplayUnavailable": "Fjernskrivebord er ikke tilgængeligt lige nu.",
-    "sharedWithMe": "Sessioner delt med mig",
-    "customHoursPlaceholder": "Timer indtil adgangen udløber"
-  },
-  "collab": {
-    "createRoom": "Nyt værelse",
-    "roomName": "Værelsesnavn",
-    "persistentRoom": "Permanent rum",
-    "persistentRoomHint": "Permanente rum forbliver på listen efter mødets afslutning og kan genbruges.",
-    "noRooms": "Ingen rum endnu. Opret et for at starte et møde.",
-    "openRoom": "Åben",
-    "endRoom": "Afslut mødet",
-    "leaveRoom": "Forlade",
-    "deleteMember": "Fjerne",
-    "removeMember": "Fjern {{name}}",
-    "removeMemberTitle": "Fjern dette medlem?",
-    "removeMemberDescription": "{{name}} mister adgangen til dette rum med det samme. Enhver aktiv SSH-seer vil blive afbrudt.",
-    "invite": "Invitere",
-    "inviteTitle": "Inviter medlemmer",
-    "members": "Medlemmer",
-    "membersPanel": "Rummedlemmer og kontrolanmodninger",
-    "membersWithCount": "Medlemmer ({{count}})",
-    "guestsWithCount": "Gæster ({{count}})",
-    "removeGuests": "Fjern gæster",
-    "anonymousGuest": "Gæst",
-    "online": "online",
-    "offline": "offline",
-    "you": "(du)",
-    "hostBadge": "Vært",
-    "presenterBadge": "Præsentation",
-    "present": "Nuværende",
-    "presentTitle": "Indtag scenen",
-    "presentHost": "Vært",
-    "searchHosts": "Søg efter værter",
-    "noHostsFound": "Ingen tilgængelige værter fundet.",
-    "presentProtocol": "Protokol",
-    "stopPresenting": "Stop med at præsentere",
-    "takeOver": "Overtag",
-    "takeOverConfirmTitle": "Erstat den nuværende præsentation?",
-    "takeOverDescription": "{{name}} præsenterer nu. Overtagelse vil afbryde alles forbindelse til den scene.",
-    "emptyStage": "Ingen præsenterer. Gå på scenen for at dele en session.",
-    "stageLoading": "Forbinder sig til scenen...",
-    "stageEnded": "Præsentationen sluttede",
-    "roomEnded": "Dette møde er afsluttet",
-    "presenterLabel": "{{name}} præsenterer",
-    "guestLink": "Gæstelink",
-    "guestLinkOn": "Gæstelinket er aktiveret. Alle med linket kan se scenen.",
-    "guestLinkOff": "Gæstelinket er slået fra.",
-    "copyLink": "Kopiér link",
-    "rotateLink": "Roter link",
-    "disableLink": "Deaktiver link",
-    "rotateLinkConfirmTitle": "Roter gæstelinket?",
-    "rotateLinkDescription": "Det nuværende link vil stoppe med at virke med det samme. Forbundne SSH-gæster vil blive afbrudt.",
-    "disableLinkConfirmTitle": "Deaktiver gæstelinket?",
-    "disableLinkDescription": "Anonyme SSH-seere vil blive afbrudt med det samme, og det nuværende link vil stoppe med at virke.",
-    "linkCopied": "Linket er kopieret",
-    "roles": "Roller",
-    "users": "Brugere",
-    "searchUsers": "Søg brugere",
-    "endConfirmTitle": "Afslutte dette møde?",
-    "endDescription": "{{name}} slutter for alle og kan ikke genåbnes.",
-    "endPersistentDescription": "Den aktive præsentation i {{name}} stopper. Rummet forbliver tilgængeligt til genbrug.",
-    "deleteRoom": "Slet rum",
-    "deleteConfirmTitle": "Slet dette rum?",
-    "deleteDescription": "{{name}} vil blive slettet permanent for alle og kan ikke fortrydes.",
-    "invitedTo": "Du blev inviteret til \"{{name}}\"",
-    "guest": {
-      "title": "Møde",
-      "waiting": "Venter på præsentatoren...",
-      "linkInvalid": "Dette gæstelink er ugyldigt, eller mødet er afsluttet"
-    },
-    "reopenFromPanel": "Denne mødefane er udløbet. Genåbn rummet fra panelet Møder.",
-    "retry": "Prøv igen",
-    "requestControl": "Anmod om kontrol",
-    "cancelControlRequest": "Annuller anmodning",
-    "controlQueue": "Kontrolanmodninger",
-    "noControlRequests": "Ingen ventende anmodninger.",
-    "grantControlTo": "Giv kontrol til {{name}}",
-    "dismissControlRequest": "Afvis kontrolanmodningen fra {{name}}",
-    "releaseControl": "Slipkontrol",
-    "grantControl": "Giv kontrol",
-    "revokeControl": "Tag kontrollen tilbage",
-    "controlRequestedBy": "{{name}} bad om kontrol",
-    "grant": "Give",
-    "controlBadge": "I kontrol",
-    "youArePresenting": "Du præsenterer i en anden fane. Stop præsentationen for at overdrage scenen.",
-    "created": "Rum oprettet",
-    "invited": "Medlemmer inviteret",
-    "roomTab": "Møde",
-    "serverChanged": "Mødeserveren er ændret. Genåbn dette møde fra panelet Møder.",
-    "hostNotSynced": "Synkroniser denne vært med mødeserveren før præsentation.",
-    "linkRequiresServer": "Forbind dette skrivebord til en Termix-server, og opret mødet der for at dele et weblink."
-  },
-  "nav": {
-    "collab": "Møder"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Tillad deling af sessioner",
-        "description": "Tillad deling af live terminal-, RDP-, VNC- og Telnet-sessioner på tværs af instanser. Tilsidesætter alle delingsindstillinger pr. vært, når de er deaktiveret."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Tillad deling af sessioner",
-        "description": "Tillad live-sessioner på denne vært at blive delt via link eller med andre brugere"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Del sessioner og deltag i rum",
-      "description": "Del livesessioner via link eller med andre brugere, og opret og deltag i samarbejdsrum."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Aldrig",
-        "oneHour": "1 time",
-        "oneDay": "24 timer",
-        "sevenDays": "7 dage",
-        "thirtyDays": "30 dage",
-        "custom": "Skik"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Delt med mig",
-    "sharedBy": "Delt af {{username}}",
-    "join": "Deltag",
-    "sharedSessionLabel": "{{hostName}} (delt)"
-  },
-  "plugin": {
-    "name": "Sessionsdeling"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/de_DE.json b/plugins/session-sharing/locales/translated/de_DE.json
deleted file mode 100644
index 5fcbdee6b..000000000
--- a/plugins/session-sharing/locales/translated/de_DE.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Verbindung zur gemeinsamen Sitzung wird hergestellt...",
-      "linkInvalid": "Dieser Freigabelink ist ungültig, abgelaufen oder wurde widerrufen.",
-      "rateLimited": "Zu viele Versuche, bitte versuchen Sie es in Kürze erneut.",
-      "sessionEnded": "Diese Sitzung ist beendet.",
-      "readOnlyBadge": "Nur Ansicht",
-      "ownerLabel": "Gastgeber"
-    },
-    "modalTitle": "Sitzung teilen",
-    "shareButton": "Teilen",
-    "notReadyToShare": "Die Sitzung ist noch nicht zur Freigabe bereit.",
-    "modeTab": {
-      "link": "Link",
-      "user": "Benutzer"
-    },
-    "linkModeDescription": "Jeder mit diesem Link kann beitreten, ein Konto ist nicht erforderlich.",
-    "userModeDescription": "Teilen Sie die Sitzung mit einem bestimmten Benutzer, der bereits Zugriff auf diesen Host hat. Falls er noch keinen Zugriff hat, teilen Sie ihm den Host zuerst mit oder verwenden Sie stattdessen einen Link. Nach der Freigabe erscheint die Sitzung im Tab „Verbindungen“ des Benutzers.",
-    "permissionLevel": {
-      "label": "Berechtigungsstufe",
-      "readOnly": "Schreibgeschützt",
-      "readOnlyDescription": "Ich kann die Sitzung live verfolgen, aber nicht tippen oder interagieren.",
-      "readWrite": "Lesen und Schreiben",
-      "readWriteDescription": "Kann in der Sitzung genauso tippen und mit ihr interagieren wie der Besitzer."
-    },
-    "expiryLabel": "Linkablauf",
-    "createLinkButton": "Verknüpfung erstellen",
-    "createShareButton": "Mit dem Nutzer teilen",
-    "searchUsersPlaceholder": "Benutzer suchen...",
-    "noUsersFound": "Keine Benutzer gefunden",
-    "linkCreated": "Link zum Teilen erstellt",
-    "linkNeedsServer": "Freigabelinks funktionieren nur für Sitzungen auf einem Termix-Server. Verbinden Sie diesen Host über Ihren verknüpften Server, um ihn per Link freizugeben.",
-    "linkCopied": "Link in die Zwischenablage kopiert",
-    "copyLink": "Link kopieren",
-    "shareCreated": "Die Sitzung wurde freigegeben. Sie wird im Tab „Verbindungen“ des Benutzers angezeigt.",
-    "shareFailed": "Fehler beim Erstellen der Freigabe",
-    "userLacksHostAccess": "Dieser Benutzer hat noch keinen Zugriff auf diesen Host. Teilen Sie ihm den Host zuerst mit oder verwenden Sie stattdessen einen Link.",
-    "activeShares": "Aktive Anteile",
-    "noActiveShares": "Keine aktiven Anteile für diese Sitzung",
-    "revoke": "Widerrufen",
-    "revokeConfirmTitle": "Diese Aktie widerrufen?",
-    "revokeConfirmDescription": "Wer diese Freigabe nutzt, verliert sofort den Zugriff.",
-    "revoked": "Anteil widerrufen",
-    "revokeFailed": "Aktienwiderruf fehlgeschlagen",
-    "joinCount": "{{count}} beitreten",
-    "joinCount_other": "{{count}} verbindet sich",
-    "expiresAt": "Läuft ab {{date}}",
-    "linkShareBadge": "Link",
-    "userShareBadge": "Benutzer: {{username}}",
-    "loadSharesFailed": "Fehler beim Laden der aktiven Anteile",
-    "remoteDisplayUnavailable": "Remote-Desktop ist momentan nicht verfügbar.",
-    "sharedWithMe": "Sitzungen, die mit mir geteilt wurden",
-    "customHoursPlaceholder": "Stunden bis zum Zugriffsablauf"
-  },
-  "collab": {
-    "createRoom": "Neues Zimmer",
-    "roomName": "Zimmername",
-    "persistentRoom": "Persistenter Raum",
-    "persistentRoomHint": "Die gespeicherten Räume bleiben auch nach Ende des Meetings gelistet und können wiederverwendet werden.",
-    "noRooms": "Noch keine Räume vorhanden. Erstellen Sie einen, um ein Meeting zu starten.",
-    "openRoom": "Offen",
-    "endRoom": "Ende der Besprechung",
-    "leaveRoom": "Verlassen",
-    "deleteMember": "Entfernen",
-    "removeMember": "{{name}} entfernen",
-    "removeMemberTitle": "Dieses Mitglied entfernen?",
-    "removeMemberDescription": "{{name}} verliert sofort den Zugriff auf diesen Raum. Alle aktiven SSH-Viewer werden getrennt.",
-    "invite": "Einladen",
-    "inviteTitle": "Mitglieder einladen",
-    "members": "Mitglieder",
-    "membersPanel": "Raummitglieder und Kontrollanfragen",
-    "membersWithCount": "Mitglieder ({{count}})",
-    "guestsWithCount": "Gäste ({{count}})",
-    "removeGuests": "Gäste entfernen",
-    "anonymousGuest": "Gast",
-    "online": "online",
-    "offline": "offline",
-    "you": "(Du)",
-    "hostBadge": "Host",
-    "presenterBadge": "Präsentation",
-    "present": "Gegenwärtig",
-    "presentTitle": "Betretet die Bühne",
-    "presentHost": "Host",
-    "searchHosts": "Hosts suchen",
-    "noHostsFound": "Es wurden keine verfügbaren Hosts gefunden.",
-    "presentProtocol": "Protokoll",
-    "stopPresenting": "Hör auf zu präsentieren",
-    "takeOver": "Übernehmen",
-    "takeOverConfirmTitle": "Die aktuelle Präsentation ersetzen?",
-    "takeOverDescription": "{{name}} präsentiert sich jetzt. Die Übernahme trennt alle von dieser Bühne.",
-    "emptyStage": "Niemand präsentiert. Ergreife die Bühne, um eine Session zu teilen.",
-    "stageLoading": "Verbindung zur Bühne...",
-    "stageEnded": "Die Präsentation endete",
-    "roomEnded": "Diese Sitzung ist beendet.",
-    "presenterLabel": "{{name}} präsentiert",
-    "guestLink": "Gastlink",
-    "guestLinkOn": "Der Gastzugang ist aktiviert. Jeder mit dem Link kann die Bühnenshow verfolgen.",
-    "guestLinkOff": "Der Gastlink ist deaktiviert.",
-    "copyLink": "Link kopieren",
-    "rotateLink": "Drehverbindung",
-    "disableLink": "Link deaktivieren",
-    "rotateLinkConfirmTitle": "Den Gastlink drehen?",
-    "rotateLinkDescription": "Die bestehende Verbindung wird sofort unterbrochen. Verbundene SSH-Gäste werden getrennt.",
-    "disableLinkConfirmTitle": "Gastlink deaktivieren?",
-    "disableLinkDescription": "Anonyme SSH-Zugriffe werden sofort getrennt und die aktuelle Verbindung funktioniert nicht mehr.",
-    "linkCopied": "Link kopiert",
-    "roles": "Rollen",
-    "users": "Benutzer",
-    "searchUsers": "Nutzer suchen",
-    "endConfirmTitle": "Diese Sitzung beenden?",
-    "endDescription": "{{name}} wird für alle beendet und kann nicht wieder geöffnet werden.",
-    "endPersistentDescription": "Die aktive Präsentation in {{name}} wird beendet. Der Raum steht weiterhin zur erneuten Verwendung zur Verfügung.",
-    "deleteRoom": "Raum löschen",
-    "deleteConfirmTitle": "Diesen Raum löschen?",
-    "deleteDescription": "{{name}} wird für alle dauerhaft gelöscht und kann nicht rückgängig gemacht werden.",
-    "invitedTo": "Sie wurden eingeladen zu \"{{name}}\"",
-    "guest": {
-      "title": "Treffen",
-      "waiting": "Ich warte auf den Moderator...",
-      "linkInvalid": "Dieser Gastlink ist ungültig oder das Meeting ist beendet."
-    },
-    "reopenFromPanel": "Dieser Besprechungsreiter ist abgelaufen. Öffnen Sie den Raum erneut über das Besprechungsmenü.",
-    "retry": "Erneut versuchen",
-    "requestControl": "Anforderungskontrolle",
-    "cancelControlRequest": "Stornierungsanfrage",
-    "controlQueue": "Kontrollanfragen",
-    "noControlRequests": "Keine offenen Anfragen.",
-    "grantControlTo": "Übergib die Kontrolle an {{name}}",
-    "dismissControlRequest": "Kontrollanfrage von {{name}}ablehnen",
-    "releaseControl": "Freigabekontrolle",
-    "grantControl": "Kontrolle abgeben",
-    "revokeControl": "Übernehmen Sie wieder die Kontrolle",
-    "controlRequestedBy": "{{name}} hat um Kontrolle gebeten",
-    "grant": "Gewähren",
-    "controlBadge": "Unter Kontrolle",
-    "youArePresenting": "Sie präsentieren in einem anderen Tab. Beenden Sie Ihre Präsentation, um die Bühne zu übergeben.",
-    "created": "Raum geschaffen",
-    "invited": "Mitglieder eingeladen",
-    "roomTab": "Treffen",
-    "serverChanged": "Der Meeting-Server wurde geändert. Öffnen Sie dieses Meeting erneut über das Meeting-Panel.",
-    "hostNotSynced": "Synchronisieren Sie diesen Host vor der Präsentation mit dem Meeting-Server.",
-    "linkRequiresServer": "Verbinden Sie diesen Desktop mit einem Termix-Server und erstellen Sie dort das Meeting, um einen Weblink freizugeben."
-  },
-  "nav": {
-    "collab": "Treffen"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Sitzungsfreigabe zulassen",
-        "description": "Ermöglicht die instanzweite Freigabe von Live-Terminal-, RDP-, VNC- und Telnet-Sitzungen. Überschreibt alle Freigabeeinstellungen pro Host, wenn diese deaktiviert sind."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Sitzungsfreigabe zulassen",
-        "description": "Ermöglichen Sie es, Live-Sitzungen auf diesem Host per Link oder mit anderen Benutzern zu teilen."
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Sitzungen teilen und Räumen beitreten",
-      "description": "Teilen Sie Live-Sitzungen per Link oder mit anderen Nutzern und erstellen und treten Sie Kollaborationsräumen bei."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Nie",
-        "oneHour": "1 Stunde",
-        "oneDay": "24 Stunden",
-        "sevenDays": "7 Tage",
-        "thirtyDays": "30 Tage",
-        "custom": "Benutzerdefiniert"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Mit mir geteilt",
-    "sharedBy": "Geteilt von {{username}}",
-    "join": "Verbinden",
-    "sharedSessionLabel": "{{hostName}} (gemeinsam genutzt)"
-  },
-  "plugin": {
-    "name": "Sitzungsteilung"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/el_GR.json b/plugins/session-sharing/locales/translated/el_GR.json
deleted file mode 100644
index ce0055e54..000000000
--- a/plugins/session-sharing/locales/translated/el_GR.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Σύνδεση σε κοινόχρηστη συνεδρία...",
-      "linkInvalid": "Αυτός ο σύνδεσμος κοινής χρήσης δεν είναι έγκυρος, έχει λήξει ή έχει ανακληθεί",
-      "rateLimited": "Πάρα πολλές προσπάθειες, δοκιμάστε ξανά σύντομα.",
-      "sessionEnded": "Αυτή η συνεδρία έληξε",
-      "readOnlyBadge": "Μόνο προβολή",
-      "ownerLabel": "Κάτοχος κεντρικού υπολογιστή"
-    },
-    "modalTitle": "Κοινή χρήση περιόδου σύνδεσης",
-    "shareButton": "Μερίδιο",
-    "notReadyToShare": "Η συνεδρία δεν είναι ακόμη έτοιμη για κοινή χρήση",
-    "modeTab": {
-      "link": "Σύνδεσμος",
-      "user": "Μεταχειριζόμενος"
-    },
-    "linkModeDescription": "Οποιοσδήποτε έχει αυτόν τον σύνδεσμο μπορεί να συμμετάσχει, δεν απαιτείται λογαριασμός.",
-    "userModeDescription": "Κοινοποίηση με έναν συγκεκριμένο χρήστη που έχει ήδη πρόσβαση σε αυτόν τον κεντρικό υπολογιστή. Εάν δεν έχει ακόμη πρόσβαση, μοιραστείτε πρώτα τον κεντρικό υπολογιστή μαζί του ή χρησιμοποιήστε έναν σύνδεσμο. Μόλις κοινοποιηθεί, η συνεδρία εμφανίζεται στην καρτέλα Συνδέσεις.",
-    "permissionLevel": {
-      "label": "Επίπεδο δικαιωμάτων",
-      "readOnly": "Μόνο για ανάγνωση",
-      "readOnlyDescription": "Μπορώ να παρακολουθήσω την συνεδρία ζωντανά, αλλά δεν μπορώ να πληκτρολογήσω ή να αλληλεπιδράσω.",
-      "readWrite": "Ανάγνωση-εγγραφή",
-      "readWriteDescription": "Μπορεί να πληκτρολογήσει και να αλληλεπιδράσει με την περίοδο λειτουργίας όπως ο κάτοχος."
-    },
-    "expiryLabel": "Λήξη σύνδεσης",
-    "createLinkButton": "Δημιουργία συνδέσμου",
-    "createShareButton": "Κοινοποίηση με χρήστη",
-    "searchUsersPlaceholder": "Αναζήτηση χρηστών...",
-    "noUsersFound": "Δεν βρέθηκαν χρήστες",
-    "linkCreated": "Ο σύνδεσμος κοινής χρήσης δημιουργήθηκε",
-    "linkNeedsServer": "Οι σύνδεσμοι κοινής χρήσης λειτουργούν μόνο για συνεδρίες σε διακομιστή Termix. Συνδέστε αυτόν τον κεντρικό υπολογιστή μέσω του συνδεδεμένου διακομιστή σας για να τον κοινοποιήσετε με έναν σύνδεσμο.",
-    "linkCopied": "Ο σύνδεσμος αντιγράφηκε στο πρόχειρο",
-    "copyLink": "Αντιγραφή συνδέσμου",
-    "shareCreated": "Η συνεδρία κοινοποιήθηκε. Θα εμφανιστεί στην καρτέλα \"Συνδέσεις\".",
-    "shareFailed": "Η δημιουργία κοινής χρήσης απέτυχε",
-    "userLacksHostAccess": "Αυτός ο χρήστης δεν έχει ακόμη πρόσβαση σε αυτόν τον κεντρικό υπολογιστή. Κοινοποιήστε πρώτα τον κεντρικό υπολογιστή μαζί του ή χρησιμοποιήστε έναν σύνδεσμο.",
-    "activeShares": "Ενεργές κοινοποιήσεις",
-    "noActiveShares": "Δεν υπάρχουν ενεργές κοινοποιήσεις για αυτήν την περίοδο σύνδεσης",
-    "revoke": "Ανακαλώ",
-    "revokeConfirmTitle": "Ανάκληση αυτής της κοινοποίησης;",
-    "revokeConfirmDescription": "Όποιος χρησιμοποιεί αυτήν την κοινοποίηση θα χάσει αμέσως την πρόσβαση.",
-    "revoked": "Η κοινοποίηση ανακλήθηκε",
-    "revokeFailed": "Η ανάκληση της κοινής χρήσης απέτυχε",
-    "joinCount": "{{count}} συμμετοχή",
-    "joinCount_other": "{{count}} ενώσεις",
-    "expiresAt": "Λήγει {{date}}",
-    "linkShareBadge": "Σύνδεσμος",
-    "userShareBadge": "Χρήστης: {{username}}",
-    "loadSharesFailed": "Αποτυχία φόρτωσης ενεργών κοινόχρηστων στοιχείων",
-    "remoteDisplayUnavailable": "Η απομακρυσμένη επιφάνεια εργασίας δεν είναι διαθέσιμη αυτήν τη στιγμή.",
-    "sharedWithMe": "Συνεδρίες που κοινοποιήθηκαν σε εμένα",
-    "customHoursPlaceholder": "Ώρες μέχρι τη λήξη της πρόσβασης"
-  },
-  "collab": {
-    "createRoom": "Νέο δωμάτιο",
-    "roomName": "Όνομα δωματίου",
-    "persistentRoom": "Μόνιμο δωμάτιο",
-    "persistentRoomHint": "Οι μόνιμες αίθουσες παραμένουν καταχωρημένες μετά το τέλος της σύσκεψης και μπορούν να επαναχρησιμοποιηθούν.",
-    "noRooms": "Δεν υπάρχουν ακόμη αίθουσες. Δημιουργήστε μία για να ξεκινήσετε μια σύσκεψη.",
-    "openRoom": "Ανοιχτό",
-    "endRoom": "Λήξη συνάντησης",
-    "leaveRoom": "Αδεια",
-    "deleteMember": "Αφαιρώ",
-    "removeMember": "Αφαίρεση {{name}}",
-    "removeMemberTitle": "Κατάργηση αυτού του μέλους;",
-    "removeMemberDescription": "Ο χρήστης {{name}} θα χάσει αμέσως την πρόσβαση σε αυτό το δωμάτιο. Οποιοσδήποτε ενεργός χρήστης προβολής SSH θα αποσυνδεθεί.",
-    "invite": "Καλώ",
-    "inviteTitle": "Πρόσκληση μελών",
-    "members": "Μέλη",
-    "membersPanel": "Μέλη δωματίου και αιτήματα ελέγχου",
-    "membersWithCount": "Μέλη ({{count}})",
-    "guestsWithCount": "Επισκέπτες ({{count}})",
-    "removeGuests": "Αφαίρεση επισκεπτών",
-    "anonymousGuest": "Επισκέπτης",
-    "online": "διαδικτυακά",
-    "offline": "εκτός σύνδεσης",
-    "you": "(εσείς)",
-    "hostBadge": "Πλήθος",
-    "presenterBadge": "Παρουσίαση",
-    "present": "Παρόν",
-    "presentTitle": "Ανέβα στη σκηνή",
-    "presentHost": "Πλήθος",
-    "searchHosts": "Αναζήτηση κεντρικών υπολογιστών",
-    "noHostsFound": "Δεν βρέθηκαν διαθέσιμοι κεντρικοί υπολογιστές.",
-    "presentProtocol": "Πρωτόκολλο",
-    "stopPresenting": "Διακοπή παρουσίασης",
-    "takeOver": "Αναλαμβάνω",
-    "takeOverConfirmTitle": "Αντικατάσταση της τρέχουσας παρουσίασης;",
-    "takeOverDescription": "Το {{name}} παρουσιάζεται τώρα. Η ανάληψη του ελέγχου θα αποσυνδέσει όλους από αυτό το στάδιο.",
-    "emptyStage": "Κανείς δεν κάνει παρουσίαση. Ανεβείτε στη σκηνή για να μοιραστείτε μια συνεδρία.",
-    "stageLoading": "Σύνδεση με τη σκηνή...",
-    "stageEnded": "Η παρουσίαση έληξε",
-    "roomEnded": "Αυτή η συνάντηση έληξε",
-    "presenterLabel": "{{name}} παρουσιάζει",
-    "guestLink": "Σύνδεσμος επισκέπτη",
-    "guestLinkOn": "Ο σύνδεσμος επισκεπτών είναι ενεργοποιημένος. Όποιος έχει τον σύνδεσμο μπορεί να παρακολουθήσει τη σκηνή.",
-    "guestLinkOff": "Ο σύνδεσμος επισκέπτη είναι απενεργοποιημένος.",
-    "copyLink": "Αντιγραφή συνδέσμου",
-    "rotateLink": "Περιστροφή συνδέσμου",
-    "disableLink": "Απενεργοποίηση συνδέσμου",
-    "rotateLinkConfirmTitle": "Εναλλαγή του συνδέσμου επισκέπτη;",
-    "rotateLinkDescription": "Ο τρέχων σύνδεσμος θα σταματήσει να λειτουργεί αμέσως. Οι συνδεδεμένοι επισκέπτες SSH θα αποσυνδεθούν.",
-    "disableLinkConfirmTitle": "Απενεργοποίηση του συνδέσμου επισκέπτη;",
-    "disableLinkDescription": "Οι ανώνυμοι θεατές SSH θα αποσυνδεθούν αμέσως και ο τρέχων σύνδεσμος θα σταματήσει να λειτουργεί.",
-    "linkCopied": "Ο σύνδεσμος αντιγράφηκε",
-    "roles": "Ρόλοι",
-    "users": "Χρήστες",
-    "searchUsers": "Αναζήτηση χρηστών",
-    "endConfirmTitle": "Λήξη αυτής της συνάντησης;",
-    "endDescription": "Το {{name}} θα λήξει για όλους και δεν μπορεί να ανοίξει ξανά.",
-    "endPersistentDescription": "Η ενεργή παρουσίαση στο {{name}} θα σταματήσει. Η αίθουσα παραμένει διαθέσιμη για επαναχρησιμοποίηση.",
-    "deleteRoom": "Διαγραφή δωματίου",
-    "deleteConfirmTitle": "Διαγραφή αυτού του δωματίου;",
-    "deleteDescription": "Η εντολή {{name}} θα διαγραφεί οριστικά για όλους και δεν θα είναι δυνατή η αναίρεση της.",
-    "invitedTo": "Σας προσκάλεσαν στο \"{{name}}\"",
-    "guest": {
-      "title": "Συνάντηση",
-      "waiting": "Περιμένοντας τον παρουσιαστή...",
-      "linkInvalid": "Αυτός ο σύνδεσμος επισκέπτη δεν είναι έγκυρος ή η σύσκεψη έχει λήξει"
-    },
-    "reopenFromPanel": "Αυτή η καρτέλα σύσκεψης έληξε. Ανοίξτε ξανά την αίθουσα από τον πίνακα \"Συνέδρια\".",
-    "retry": "Δοκιμάζω πάλι",
-    "requestControl": "Αίτημα ελέγχου",
-    "cancelControlRequest": "Αίτημα ακύρωσης",
-    "controlQueue": "Αιτήματα ελέγχου",
-    "noControlRequests": "Δεν υπάρχουν εκκρεμή αιτήματα.",
-    "grantControlTo": "Δώστε τον έλεγχο σε {{name}}",
-    "dismissControlRequest": "Απόρριψη αιτήματος ελέγχου του {{name}}",
-    "releaseControl": "Έλεγχος απελευθέρωσης",
-    "grantControl": "Δώστε τον έλεγχο",
-    "revokeControl": "Πάρε πίσω τον έλεγχο",
-    "controlRequestedBy": "{{name}} ζήτησε έλεγχο",
-    "grant": "Χορήγηση",
-    "controlBadge": "Υπό έλεγχο",
-    "youArePresenting": "Κάνετε παρουσίαση σε άλλη καρτέλα. Διακόψτε την παρουσίαση για να παραδώσετε τη σκηνή.",
-    "created": "Δημιουργήθηκε δωμάτιο",
-    "invited": "Μέλη που έχουν προσκληθεί",
-    "roomTab": "Συνάντηση",
-    "serverChanged": "Ο διακομιστής συσκέψεων άλλαξε. Ανοίξτε ξανά αυτήν τη σύσκεψη από τον πίνακα \"Συσκέψεις\".",
-    "hostNotSynced": "Συγχρονίστε αυτόν τον κεντρικό υπολογιστή με τον διακομιστή συσκέψεων πριν από την παρουσίαση.",
-    "linkRequiresServer": "Συνδέστε αυτήν την επιφάνεια εργασίας με έναν διακομιστή Termix και δημιουργήστε τη σύσκεψη εκεί για να μοιραστείτε έναν σύνδεσμο ιστού."
-  },
-  "nav": {
-    "collab": "Συναντήσεις"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Επιτρέψτε την κοινή χρήση περιόδου σύνδεσης",
-        "description": "Επιτρέπεται η κοινή χρήση των ζωντανών συνεδριών τερματικού, RDP, VNC και Telnet σε ολόκληρη την παρουσία. Παρακάμπτει κάθε εναλλαγή κοινής χρήσης ανά κεντρικό υπολογιστή όταν είναι απενεργοποιημένη."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Επιτρέψτε την κοινή χρήση περιόδου σύνδεσης",
-        "description": "Να επιτρέπεται η κοινοποίηση ζωντανών συνεδριών σε αυτόν τον πάροχο μέσω συνδέσμου ή με άλλους χρήστες"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Κοινή χρήση συνεδριών και συμμετοχή σε αίθουσες",
-      "description": "Μοιραστείτε ζωντανές συνεδρίες μέσω συνδέσμου ή με άλλους χρήστες και δημιουργήστε και συμμετάσχετε σε αίθουσες συνεργασίας."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Ποτέ",
-        "oneHour": "1 ώρα",
-        "oneDay": "24 ώρες",
-        "sevenDays": "7 ημέρες",
-        "thirtyDays": "30 ημέρες",
-        "custom": "Εθιμο"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Κοινοποιήθηκε σε εμένα",
-    "sharedBy": "Κοινοποίηση από {{username}}",
-    "join": "Ενώνω",
-    "sharedSessionLabel": "{{hostName}} (κοινόχρηστο)"
-  },
-  "plugin": {
-    "name": "Κοινή χρήση περιόδου σύνδεσης"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/es_ES.json b/plugins/session-sharing/locales/translated/es_ES.json
deleted file mode 100644
index 3d37077c1..000000000
--- a/plugins/session-sharing/locales/translated/es_ES.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Conectando con la sesión compartida...",
-      "linkInvalid": "Este enlace para compartir no es válido, ha caducado o ha sido revocado.",
-      "rateLimited": "Demasiados intentos, por favor inténtelo de nuevo en breve.",
-      "sessionEnded": "Esta sesión ha finalizado.",
-      "readOnlyBadge": "Solo lectura",
-      "ownerLabel": "Propietario del anfitrión"
-    },
-    "modalTitle": "Compartir sesión",
-    "shareButton": "Compartir",
-    "notReadyToShare": "La sesión aún no está lista para compartirse.",
-    "modeTab": {
-      "link": "Enlace",
-      "user": "Usuario"
-    },
-    "linkModeDescription": "Cualquier persona con este enlace puede unirse, no se requiere cuenta.",
-    "userModeDescription": "Comparte la sesión con un usuario específico que ya tenga acceso a este host. Si aún no tiene acceso, comparte primero el host con él o utiliza un enlace. Una vez compartida, la sesión aparecerá en su pestaña Conexiones.",
-    "permissionLevel": {
-      "label": "Nivel de permiso",
-      "readOnly": "Solo lectura",
-      "readOnlyDescription": "Se puede ver la sesión en directo, pero no se puede escribir ni interactuar.",
-      "readWrite": "Leer y escribir",
-      "readWriteDescription": "Puede escribir e interactuar con la sesión igual que el propietario."
-    },
-    "expiryLabel": "Caducidad del enlace",
-    "createLinkButton": "Crear enlace",
-    "createShareButton": "Compartir con el usuario",
-    "searchUsersPlaceholder": "Buscar usuarios...",
-    "noUsersFound": "No se encontraron usuarios",
-    "linkCreated": "Enlace para compartir creado",
-    "linkNeedsServer": "Los enlaces para compartir solo funcionan para sesiones en un servidor Termix. Conecta este host a través de tu servidor vinculado para compartirlo mediante un enlace.",
-    "linkCopied": "Enlace copiado al portapapeles",
-    "copyLink": "Copiar enlace",
-    "shareCreated": "Sesión compartida. Aparecerá en su pestaña Conexiones.",
-    "shareFailed": "No se pudo crear el recurso compartido",
-    "userLacksHostAccess": "Ese usuario aún no tiene acceso a este servidor. Primero, comparte el servidor con él o utiliza un enlace.",
-    "activeShares": "Acciones activas",
-    "noActiveShares": "No hay acciones activas para esta sesión.",
-    "revoke": "Revocar",
-    "revokeConfirmTitle": "¿Revocar esta acción?",
-    "revokeConfirmDescription": "Cualquier persona que utilice este recurso compartido perderá el acceso inmediatamente.",
-    "revoked": "Acción revocada",
-    "revokeFailed": "No se pudo revocar la participación.",
-    "joinCount": "{{count}} unirse",
-    "joinCount_other": "{{count}} se une",
-    "expiresAt": "Caduca {{date}}",
-    "linkShareBadge": "Enlace",
-    "userShareBadge": "Usuario: {{username}}",
-    "loadSharesFailed": "No se pudieron cargar los recursos compartidos activos.",
-    "remoteDisplayUnavailable": "El acceso remoto al escritorio no está disponible en este momento.",
-    "sharedWithMe": "Sesiones compartidas conmigo",
-    "customHoursPlaceholder": "Horas hasta que caduque el acceso"
-  },
-  "collab": {
-    "createRoom": "Habitación nueva",
-    "roomName": "Nombre de la habitación",
-    "persistentRoom": "Habitación persistente",
-    "persistentRoomHint": "Las salas reservadas permanecen en la lista una vez finalizada la reunión y pueden volver a utilizarse.",
-    "noRooms": "Aún no hay salas disponibles. Crea una para iniciar una reunión.",
-    "openRoom": "Abrir",
-    "endRoom": "Fin de la reunión",
-    "leaveRoom": "Dejar",
-    "deleteMember": "Quitar",
-    "removeMember": "Eliminar {{name}}",
-    "removeMemberTitle": "¿Eliminar a este miembro?",
-    "removeMemberDescription": "{{name}} perderá el acceso a esta sala inmediatamente. Cualquier visor SSH activo será desconectado.",
-    "invite": "Invitar",
-    "inviteTitle": "Invitar a los miembros",
-    "members": "Miembros",
-    "membersPanel": "Miembros de la sala y solicitudes de control",
-    "membersWithCount": "Miembros ({{count}})",
-    "guestsWithCount": "Invitados ({{count}})",
-    "removeGuests": "Eliminar invitados",
-    "anonymousGuest": "Invitado",
-    "online": "en línea",
-    "offline": "desconectado",
-    "you": "(tú)",
-    "hostBadge": "Host",
-    "presenterBadge": "Presentación",
-    "present": "Presente",
-    "presentTitle": "Sube al escenario",
-    "presentHost": "Host",
-    "searchHosts": "Buscar hosts",
-    "noHostsFound": "No se encontraron hosts disponibles.",
-    "presentProtocol": "Protocolo",
-    "stopPresenting": "Deja de presentar",
-    "takeOver": "Tomar el control",
-    "takeOverConfirmTitle": "¿Reemplazar la presentación actual?",
-    "takeOverDescription": "{{name}} se está presentando ahora. Tomar el control desconectará a todos de ese escenario.",
-    "emptyStage": "Nadie va a presentar. Sube al escenario para compartir una sesión.",
-    "stageLoading": "Conectando con el escenario...",
-    "stageEnded": "La presentación terminó",
-    "roomEnded": "Esta reunión ha terminado.",
-    "presenterLabel": "{{name}} está presentando",
-    "guestLink": "Enlace de invitado",
-    "guestLinkOn": "El enlace para invitados está activado. Cualquiera que tenga el enlace puede ver el espectáculo.",
-    "guestLinkOff": "El enlace de invitado está desactivado.",
-    "copyLink": "Copiar enlace",
-    "rotateLink": "Enlace giratorio",
-    "disableLink": "Deshabilitar enlace",
-    "rotateLinkConfirmTitle": "¿Rotar el enlace de invitado?",
-    "rotateLinkDescription": "El enlace actual dejará de funcionar inmediatamente. Los invitados SSH conectados serán desconectados.",
-    "disableLinkConfirmTitle": "¿Deshabilitar el enlace de invitado?",
-    "disableLinkDescription": "Los usuarios que intenten acceder de forma anónima mediante SSH serán desconectados inmediatamente y el enlace actual dejará de funcionar.",
-    "linkCopied": "Enlace copiado",
-    "roles": "Roles",
-    "users": "Usuarios",
-    "searchUsers": "Buscar usuarios",
-    "endConfirmTitle": "¿Dar por terminada esta reunión?",
-    "endDescription": "{{name}} finalizará para todos y no podrá reabrirse.",
-    "endPersistentDescription": "La presentación activa en {{name}} se detendrá. La sala permanece disponible para su reutilización.",
-    "deleteRoom": "Eliminar habitación",
-    "deleteConfirmTitle": "¿Eliminar esta habitación?",
-    "deleteDescription": "{{name}} se eliminará permanentemente para todos y no se podrá deshacer.",
-    "invitedTo": "Te invitaron a \"{{name}}\"",
-    "guest": {
-      "title": "Reunión",
-      "waiting": "Esperando al presentador...",
-      "linkInvalid": "Este enlace de invitado no es válido o la reunión ha finalizado."
-    },
-    "reopenFromPanel": "Esta pestaña de reunión ha caducado. Vuelva a abrir la sala desde el panel de Reuniones.",
-    "retry": "Reintentar",
-    "requestControl": "Control de solicitudes",
-    "cancelControlRequest": "Cancelar solicitud",
-    "controlQueue": "Solicitudes de control",
-    "noControlRequests": "No hay solicitudes pendientes.",
-    "grantControlTo": "Cede el control a {{name}}",
-    "dismissControlRequest": "Rechazar la solicitud de control de {{name}}",
-    "releaseControl": "Control de liberación",
-    "grantControl": "Cede el control",
-    "revokeControl": "Recupera el control",
-    "controlRequestedBy": "{{name}} pidió control",
-    "grant": "Conceder",
-    "controlBadge": "En control",
-    "youArePresenting": "Estás presentando en otra pestaña. Deja de presentar para ceder la palabra.",
-    "created": "Habitación creada",
-    "invited": "Miembros invitados",
-    "roomTab": "Reunión",
-    "serverChanged": "El servidor de la reunión ha cambiado. Vuelva a abrir esta reunión desde el panel de Reuniones.",
-    "hostNotSynced": "Sincroniza este host con el servidor de la reunión antes de la presentación.",
-    "linkRequiresServer": "Conecta este ordenador de escritorio a un servidor Termix y crea la reunión allí para compartir un enlace web."
-  },
-  "nav": {
-    "collab": "Reuniones"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Permitir compartir la sesión",
-        "description": "Permite compartir sesiones de terminal en vivo, RDP, VNC y Telnet en toda la instancia. Cuando está desactivado, anula cualquier configuración de uso compartido por host."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Permitir compartir la sesión",
-        "description": "Permitir que las sesiones en vivo en este servidor se compartan mediante un enlace o con otros usuarios."
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Comparte sesiones y únete a salas",
-      "description": "Comparte sesiones en directo mediante un enlace o con otros usuarios, y crea y únete a salas de colaboración."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Nunca",
-        "oneHour": "1 hora",
-        "oneDay": "24 horas",
-        "sevenDays": "7 días",
-        "thirtyDays": "30 días",
-        "custom": "Personalizado"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Compartido conmigo",
-    "sharedBy": "Compartido por {{username}}",
-    "join": "Unirse",
-    "sharedSessionLabel": "{{hostName}} (compartido)"
-  },
-  "plugin": {
-    "name": "Compartir la sesión"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/fi_FI.json b/plugins/session-sharing/locales/translated/fi_FI.json
deleted file mode 100644
index b4a671b03..000000000
--- a/plugins/session-sharing/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Yhdistetään jaettuun istuntoon...",
-      "linkInvalid": "Tämä jakolinkki on virheellinen, vanhentunut tai se on peruutettu.",
-      "rateLimited": "Liikaa yrityksiä, yritä uudelleen pian",
-      "sessionEnded": "Tämä istunto on päättynyt",
-      "readOnlyBadge": "Vain katselu",
-      "ownerLabel": "Isännän omistaja"
-    },
-    "modalTitle": "Jaa istunto",
-    "shareButton": "Jakaa",
-    "notReadyToShare": "Istunto ei ole vielä valmis jaettavaksi",
-    "modeTab": {
-      "link": "Linkki",
-      "user": "Käyttäjä"
-    },
-    "linkModeDescription": "Kuka tahansa, jolla on tämä linkki, voi liittyä, tiliä ei tarvita.",
-    "userModeDescription": "Jaa tietyn käyttäjän kanssa, jolla on jo pääsy tähän isäntään. Jos heillä ei vielä ole pääsyä, jaa isäntä ensin heidän kanssaan tai käytä linkkiä. Jakamisen jälkeen istunto näkyy heidän Yhteydet-välilehdellään.",
-    "permissionLevel": {
-      "label": "Käyttöoikeustaso",
-      "readOnly": "Vain lukuoikeus",
-      "readOnlyDescription": "Voit katsoa istuntoa suorana, mutta et voi kirjoittaa tai olla vuorovaikutuksessa.",
-      "readWrite": "Lue ja kirjoita",
-      "readWriteDescription": "Voi kirjoittaa ja olla vuorovaikutuksessa istunnon kanssa aivan kuten omistaja."
-    },
-    "expiryLabel": "Linkin vanheneminen",
-    "createLinkButton": "Luo linkki",
-    "createShareButton": "Jaa käyttäjän kanssa",
-    "searchUsersPlaceholder": "Hae käyttäjiä...",
-    "noUsersFound": "Ei käyttäjiä löytynyt",
-    "linkCreated": "Jaa linkki luotu",
-    "linkNeedsServer": "Jakolinkit toimivat vain Termix-palvelimella olevissa istunnoissa. Yhdistä tämä isäntä linkitetyn palvelimesi kautta jakaaksesi sen linkillä.",
-    "linkCopied": "Linkki kopioitu leikepöydälle",
-    "copyLink": "Kopioi linkki",
-    "shareCreated": "Istunto jaettu. Se näkyy heidän Yhteydet-välilehdellä.",
-    "shareFailed": "Jaon luominen epäonnistui",
-    "userLacksHostAccess": "Käyttäjällä ei ole vielä pääsyä tähän isäntään. Jaa isäntä ensin heidän kanssaan tai käytä linkkiä.",
-    "activeShares": "Aktiiviset jaot",
-    "noActiveShares": "Ei aktiivisia jakoja tällä istunnolla",
-    "revoke": "Peruuttaa",
-    "revokeConfirmTitle": "Perutaanko tämä jako?",
-    "revokeConfirmDescription": "Kuka tahansa tätä jakoa käyttävä menettää käyttöoikeuden välittömästi.",
-    "revoked": "Jako peruttu",
-    "revokeFailed": "Jakamisen peruuttaminen epäonnistui",
-    "joinCount": "{{count}} liity",
-    "joinCount_other": "{{count}} liitokset",
-    "expiresAt": "Vanhenee {{date}}",
-    "linkShareBadge": "Linkki",
-    "userShareBadge": "Käyttäjä: {{username}}",
-    "loadSharesFailed": "Aktiivisten jakojen lataaminen epäonnistui",
-    "remoteDisplayUnavailable": "Etätyöpöytä ei ole käytettävissä juuri nyt.",
-    "sharedWithMe": "Kanssani jaetut sessiot",
-    "customHoursPlaceholder": "Tuntia käyttöoikeuden vanhenemiseen"
-  },
-  "collab": {
-    "createRoom": "Uusi huone",
-    "roomName": "Huoneen nimi",
-    "persistentRoom": "Pysyvä huone",
-    "persistentRoomHint": "Pysyvät huoneet pysyvät luettelossa kokouksen päättymisen jälkeen ja niitä voidaan käyttää uudelleen.",
-    "noRooms": "Ei vielä huoneita. Luo huone aloittaaksesi kokouksen.",
-    "openRoom": "Avata",
-    "endRoom": "Kokouksen loppu",
-    "leaveRoom": "Lähtö",
-    "deleteMember": "Poistaa",
-    "removeMember": "Poista {{name}}",
-    "removeMemberTitle": "Poistetaanko tämä jäsen?",
-    "removeMemberDescription": "{{name}} menettää pääsyn tähän huoneeseen välittömästi. Kaikki aktiiviset SSH-katseluohjelmat katkaistaan.",
-    "invite": "Kutsu",
-    "inviteTitle": "Kutsu jäseniä",
-    "members": "Jäsenet",
-    "membersPanel": "Huoneen jäsenet ja hallintapyynnöt",
-    "membersWithCount": "Jäsenet ({{count}})",
-    "guestsWithCount": "Vieraat ({{count}})",
-    "removeGuests": "Poista vieraat",
-    "anonymousGuest": "Vieras",
-    "online": "verkossa",
-    "offline": "offline-tilassa",
-    "you": "(sinä)",
-    "hostBadge": "Isäntä",
-    "presenterBadge": "Esittäminen",
-    "present": "Esittää",
-    "presentTitle": "Nouse lavalle",
-    "presentHost": "Isäntä",
-    "searchHosts": "Hae isäntiä",
-    "noHostsFound": "Ei saatavilla olevia isäntiä.",
-    "presentProtocol": "Protokolla",
-    "stopPresenting": "Lopeta esittäminen",
-    "takeOver": "Ota haltuunsa",
-    "takeOverConfirmTitle": "Korvataanko nykyinen esitys?",
-    "takeOverDescription": "{{name}} esittää nyt. Hallinnan ottaminen irrottaa kaikki yhteydet kyseiseen vaiheeseen.",
-    "emptyStage": "Kukaan ei esitä. Nouse lavalle ja jaa sessio.",
-    "stageLoading": "Yhdistetään lavalle...",
-    "stageEnded": "Esitys päättyi",
-    "roomEnded": "Tämä kokous on päättynyt",
-    "presenterLabel": "{{name}} esittää",
-    "guestLink": "Vieraslinkki",
-    "guestLinkOn": "Vieraslinkki on käytössä. Kuka tahansa linkin omaava voi katsoa lavaa.",
-    "guestLinkOff": "Vierailijalinkki on pois päältä.",
-    "copyLink": "Kopioi linkki",
-    "rotateLink": "Kierrä linkkiä",
-    "disableLink": "Poista linkki käytöstä",
-    "rotateLinkConfirmTitle": "Kierretäänkö vieraslinkkiä?",
-    "rotateLinkDescription": "Nykyinen linkki lakkaa toimimasta välittömästi. Yhdistettyjen SSH-vieraiden yhteys katkaistaan.",
-    "disableLinkConfirmTitle": "Poistetaanko vieraslinkki käytöstä?",
-    "disableLinkDescription": "Anonyymien SSH-katsojien yhteys katkaistaan välittömästi ja nykyinen linkki lakkaa toimimasta.",
-    "linkCopied": "Linkki kopioitu",
-    "roles": "Roolit",
-    "users": "Käyttäjät",
-    "searchUsers": "Hae käyttäjiä",
-    "endConfirmTitle": "Lopetetaanko tämä kokous?",
-    "endDescription": "{{name}} päättyy kaikilta, eikä sitä voida avata uudelleen.",
-    "endPersistentDescription": "Aktiivinen esitys kohdassa {{name}} pysähtyy. Huone pysyy käytettävissä uudelleen.",
-    "deleteRoom": "Poista huone",
-    "deleteConfirmTitle": "Poistetaanko tämä huone?",
-    "deleteDescription": "{{name}} poistetaan pysyvästi kaikilta, eikä sitä voi perua.",
-    "invitedTo": "Sinut kutsuttiin \"{{name}} \" -palveluun",
-    "guest": {
-      "title": "Kokous",
-      "waiting": "Esiintyjää odotellessa...",
-      "linkInvalid": "Tämä vieraslinkki on virheellinen tai kokous on päättynyt"
-    },
-    "reopenFromPanel": "Tämä kokousvälilehti vanheni. Avaa huone uudelleen Kokoukset-paneelista.",
-    "retry": "Yritä uudelleen",
-    "requestControl": "Pyydä hallintaa",
-    "cancelControlRequest": "Peruuta pyyntö",
-    "controlQueue": "Ohjauspyynnöt",
-    "noControlRequests": "Ei vireillä olevia pyyntöjä.",
-    "grantControlTo": "Anna hallinta käyttäjälle {{name}}",
-    "dismissControlRequest": "Hylkää käyttäjän {{name}}hallintapyyntö",
-    "releaseControl": "Vapautusohjaus",
-    "grantControl": "Anna hallinta",
-    "revokeControl": "Ota hallinta takaisin",
-    "controlRequestedBy": "{{name}} pyysi hallintaoikeutta",
-    "grant": "Myöntää",
-    "controlBadge": "Hallinnassa",
-    "youArePresenting": "Esität toisella välilehdellä. Lopeta esitys luovuttaaksesi esiintymispaikan.",
-    "created": "Huone luotu",
-    "invited": "Jäsenet kutsuttuina",
-    "roomTab": "Kokous",
-    "serverChanged": "Kokouspalvelin muuttui. Avaa tämä kokous uudelleen Kokoukset-paneelista.",
-    "hostNotSynced": "Synkronoi tämä isäntä kokouspalvelimeen ennen esityksen aloittamista.",
-    "linkRequiresServer": "Linkitä tämä työpöytä Termix-palvelimeen ja luo kokous siellä jakaaksesi verkkolinkin."
-  },
-  "nav": {
-    "collab": "Kokoukset"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Salli istunnon jakaminen",
-        "description": "Salli reaaliaikaisten pääte-, RDP-, VNC- ja Telnet-istuntojen jakaminen koko instanssin kesken. Poistamalla tämän asetuksen käytöstä ohitetaan kaikki isäntäkohtaisesti jakamiseen liittyvät asetukset."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Salli istunnon jakaminen",
-        "description": "Salli live-istuntojen jakaminen tällä isännällä linkin kautta tai muiden käyttäjien kanssa"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Jaa istuntoja ja liity huoneisiin",
-      "description": "Jaa live-istuntoja linkin kautta tai muiden käyttäjien kanssa ja luo ja liity yhteistyöhuoneisiin."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Ei koskaan",
-        "oneHour": "1 tunti",
-        "oneDay": "24 tuntia",
-        "sevenDays": "7 päivää",
-        "thirtyDays": "30 päivää",
-        "custom": "Mukautettu"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Jaettu kanssani",
-    "sharedBy": "Jakanut {{username}}",
-    "join": "Liity",
-    "sharedSessionLabel": "{{hostName}} (jaettu)"
-  },
-  "plugin": {
-    "name": "Istunnon jakaminen"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/fr_FR.json b/plugins/session-sharing/locales/translated/fr_FR.json
deleted file mode 100644
index 2541f5871..000000000
--- a/plugins/session-sharing/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Connexion à la session partagée...",
-      "linkInvalid": "Ce lien de partage est invalide, a expiré ou a été révoqué.",
-      "rateLimited": "Trop de tentatives, veuillez réessayer dans quelques instants.",
-      "sessionEnded": "Cette session est terminée.",
-      "readOnlyBadge": "Affichage uniquement",
-      "ownerLabel": "propriétaire de l'hôte"
-    },
-    "modalTitle": "Session de partage",
-    "shareButton": "Partager",
-    "notReadyToShare": "La session n'est pas encore prête à être partagée.",
-    "modeTab": {
-      "link": "Lien",
-      "user": "Utilisateur"
-    },
-    "linkModeDescription": "Toute personne disposant de ce lien peut s'inscrire, aucun compte n'est requis.",
-    "userModeDescription": "Partagez cette session avec un utilisateur spécifique qui y a déjà accès. S'il n'y a pas encore accès, partagez-lui d'abord l'hôte ou utilisez un lien. Une fois partagée, la session apparaîtra dans son onglet Connexions.",
-    "permissionLevel": {
-      "label": "Niveau de permission",
-      "readOnly": "Lecture seule",
-      "readOnlyDescription": "Je peux suivre la session en direct, mais je ne peux ni écrire ni interagir.",
-      "readWrite": "Lecture-écriture",
-      "readWriteDescription": "Peut saisir du texte et interagir avec la session comme le propriétaire."
-    },
-    "expiryLabel": "Expiration du lien",
-    "createLinkButton": "Créer un lien",
-    "createShareButton": "Partager avec l'utilisateur",
-    "searchUsersPlaceholder": "Rechercher des utilisateurs...",
-    "noUsersFound": "Aucun utilisateur trouvé",
-    "linkCreated": "Lien de partage créé",
-    "linkNeedsServer": "Les liens de partage ne fonctionnent que pour les sessions sur un serveur Termix. Connectez-vous à cet hôte via votre serveur lié pour le partager avec un lien.",
-    "linkCopied": "Lien copié dans le presse-papiers",
-    "copyLink": "Copier le lien",
-    "shareCreated": "Session partagée. Elle apparaîtra dans leur onglet Connexions.",
-    "shareFailed": "Échec de la création du partage",
-    "userLacksHostAccess": "Cet utilisateur n'a pas encore accès à cet hôte. Veuillez d'abord lui partager l'hôte ou utiliser un lien.",
-    "activeShares": "Actions actives",
-    "noActiveShares": "Aucune action active pour cette session",
-    "revoke": "Révoquer",
-    "revokeConfirmTitle": "Révoquer cette action ?",
-    "revokeConfirmDescription": "Toute personne utilisant ce partage perdra immédiatement l'accès.",
-    "revoked": "Action révoquée",
-    "revokeFailed": "Échec de la révocation de l'action",
-    "joinCount": "{{count}} rejoindre",
-    "joinCount_other": "{{count}} rejoint",
-    "expiresAt": "Expire le {{date}}",
-    "linkShareBadge": "Lien",
-    "userShareBadge": "Utilisateur : {{username}}",
-    "loadSharesFailed": "Échec du chargement des actions actives",
-    "remoteDisplayUnavailable": "Le bureau à distance n'est pas disponible pour le moment.",
-    "sharedWithMe": "Séances partagées avec moi",
-    "customHoursPlaceholder": "Heures jusqu'à l'expiration de l'accès"
-  },
-  "collab": {
-    "createRoom": "Nouvelle chambre",
-    "roomName": "Nom de la chambre",
-    "persistentRoom": "Chambre persistante",
-    "persistentRoomHint": "Les salles persistantes restent répertoriées après la fin de la réunion et peuvent être réutilisées.",
-    "noRooms": "Aucune salle disponible pour le moment. Créez-en une pour démarrer une réunion.",
-    "openRoom": "Ouvrir",
-    "endRoom": "Fin de la réunion",
-    "leaveRoom": "Partir",
-    "deleteMember": "Retirer",
-    "removeMember": "Supprimer {{name}}",
-    "removeMemberTitle": "Supprimer ce membre ?",
-    "removeMemberDescription": "{{name}} perdra immédiatement l'accès à cette salle. Tout utilisateur SSH actif sera déconnecté.",
-    "invite": "Inviter",
-    "inviteTitle": "Inviter des membres",
-    "members": "Membres",
-    "membersPanel": "Membres de la salle et demandes de contrôle",
-    "membersWithCount": "Membres ({{count}})",
-    "guestsWithCount": "Invités ({{count}})",
-    "removeGuests": "Retirer les invités",
-    "anonymousGuest": "Invité",
-    "online": "en ligne",
-    "offline": "hors ligne",
-    "you": "(toi)",
-    "hostBadge": "Hôte",
-    "presenterBadge": "Présentation",
-    "present": "Présent",
-    "presentTitle": "Montez sur scène",
-    "presentHost": "Hôte",
-    "searchHosts": "Rechercher des hôtes",
-    "noHostsFound": "Aucun hôte disponible trouvé.",
-    "presentProtocol": "Protocole",
-    "stopPresenting": "Arrêtez de présenter",
-    "takeOver": "Reprendre",
-    "takeOverConfirmTitle": "Remplacer la présentation actuelle ?",
-    "takeOverDescription": "{{name}} est en train de présenter. Prendre le relais déconnectera tout le monde de cette scène.",
-    "emptyStage": "Personne ne présente. Montez sur scène pour animer une session.",
-    "stageLoading": "Se connecter à la scène...",
-    "stageEnded": "La présentation s'est terminée.",
-    "roomEnded": "Cette réunion est terminée.",
-    "presenterLabel": "{{name}} présente",
-    "guestLink": "Lien invité",
-    "guestLinkOn": "Le lien invité est activé. Toute personne disposant du lien peut assister à la représentation.",
-    "guestLinkOff": "Le lien invité est désactivé.",
-    "copyLink": "Copier le lien",
-    "rotateLink": "Lien de rotation",
-    "disableLink": "Désactiver le lien",
-    "rotateLinkConfirmTitle": "Faire pivoter le lien invité ?",
-    "rotateLinkDescription": "La connexion actuelle sera immédiatement interrompue. Les sessions SSH virtuelles seront déconnectées.",
-    "disableLinkConfirmTitle": "Désactiver le lien invité ?",
-    "disableLinkDescription": "Les utilisateurs anonymes utilisant SSH seront immédiatement déconnectés et le lien actuel cessera de fonctionner.",
-    "linkCopied": "Lien copié",
-    "roles": "Rôles",
-    "users": "Utilisateurs",
-    "searchUsers": "Utilisateurs de recherche",
-    "endConfirmTitle": "Mettre fin à cette réunion ?",
-    "endDescription": "{{name}} prendra fin pour tout le monde et ne pourra pas être rouvert.",
-    "endPersistentDescription": "La présentation en cours dans {{name}} va s'arrêter. La salle reste disponible pour une réutilisation.",
-    "deleteRoom": "Supprimer la salle",
-    "deleteConfirmTitle": "Supprimer cette pièce ?",
-    "deleteDescription": "{{name}} sera définitivement supprimé pour tout le monde et ne pourra pas être annulé.",
-    "invitedTo": "Vous avez été invité à \"{{name}}\"",
-    "guest": {
-      "title": "Réunion",
-      "waiting": "En attente du présentateur...",
-      "linkInvalid": "Ce lien invité est invalide ou la réunion est terminée."
-    },
-    "reopenFromPanel": "Cette réunion a expiré. Veuillez rouvrir la salle depuis le panneau Réunions.",
-    "retry": "Réessayer",
-    "requestControl": "Contrôle des demandes",
-    "cancelControlRequest": "Demande d'annulation",
-    "controlQueue": "Demandes de contrôle",
-    "noControlRequests": "Aucune requête en attente.",
-    "grantControlTo": "Donnez le contrôle à {{name}}",
-    "dismissControlRequest": "Rejeter la demande de contrôle de {{name}}",
-    "releaseControl": "Contrôle de la libération",
-    "grantControl": "Donnez le contrôle",
-    "revokeControl": "Reprenez le contrôle",
-    "controlRequestedBy": "{{name}} a demandé le contrôle",
-    "grant": "Accorder",
-    "controlBadge": "En contrôle",
-    "youArePresenting": "Vous présentez dans un autre onglet. Arrêtez votre présentation pour laisser la parole à quelqu'un d'autre.",
-    "created": "Pièce créée",
-    "invited": "Les membres invités",
-    "roomTab": "Réunion",
-    "serverChanged": "Le serveur de réunion a changé. Veuillez rouvrir cette réunion depuis le panneau Réunions.",
-    "hostNotSynced": "Synchronisez cet hôte avec le serveur de réunion avant la présentation.",
-    "linkRequiresServer": "Connectez cet ordinateur de bureau à un serveur Termix et créez-y la réunion pour partager un lien web."
-  },
-  "nav": {
-    "collab": "Réunions"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Autoriser le partage de session",
-        "description": "Autorise le partage des sessions de terminal en direct, RDP, VNC et Telnet à l'échelle de l'instance. Remplace toute option de partage par hôte lorsqu'elle est désactivée."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Autoriser le partage de session",
-        "description": "Autoriser le partage des sessions en direct sur cet hébergeur via un lien ou avec d'autres utilisateurs"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Partagez des sessions et rejoignez des salles",
-      "description": "Partagez les sessions en direct par lien ou avec d'autres utilisateurs, et créez et rejoignez des espaces de collaboration."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Jamais",
-        "oneHour": "1 heure",
-        "oneDay": "24 heures",
-        "sevenDays": "7 jours",
-        "thirtyDays": "30 jours",
-        "custom": "Personnalisé"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Partagé avec moi",
-    "sharedBy": "Partagé par {{username}}",
-    "join": "Rejoindre",
-    "sharedSessionLabel": "{{hostName}} (partagé)"
-  },
-  "plugin": {
-    "name": "Partage de session"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/he_IL.json b/plugins/session-sharing/locales/translated/he_IL.json
deleted file mode 100644
index 79e0362ed..000000000
--- a/plugins/session-sharing/locales/translated/he_IL.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "מתחבר לסשן משותף...",
-      "linkInvalid": "קישור השיתוף הזה אינו תקין, פג תוקף או בוטל",
-      "rateLimited": "יותר מדי ניסיונות, אנא נסה שוב בקרוב",
-      "sessionEnded": "מושב זה הסתיים",
-      "readOnlyBadge": "צפייה בלבד",
-      "ownerLabel": "בעל המארח"
-    },
-    "modalTitle": "שיתוף סשן",
-    "shareButton": "לַחֲלוֹק",
-    "notReadyToShare": "הסשן עדיין לא מוכן לשיתוף",
-    "modeTab": {
-      "link": "לְקַשֵׁר",
-      "user": "מִשׁתַמֵשׁ"
-    },
-    "linkModeDescription": "כל מי שיש לו קישור זה יכול להצטרף, אין צורך בחשבון.",
-    "userModeDescription": "שתף עם משתמש ספציפי שכבר יש לו גישה למארח זה. אם עדיין אין לו גישה, שתף איתו תחילה את המארח או השתמש בקישור במקום זאת. לאחר השיתוף, הסשן מופיע בכרטיסייה \"חיבורים\" שלו.",
-    "permissionLevel": {
-      "label": "רמת הרשאה",
-      "readOnly": "לקריאה בלבד",
-      "readOnlyDescription": "יכול לצפות בפגישה בשידור חי אך לא להקליד או לתקשר.",
-      "readWrite": "קריאה-כתיבה",
-      "readWriteDescription": "יכול להקליד ולקיים אינטראקציה עם הסשן בדיוק כמו הבעלים."
-    },
-    "expiryLabel": "תוקף הקישור",
-    "createLinkButton": "צור קישור",
-    "createShareButton": "שתף עם המשתמש",
-    "searchUsersPlaceholder": "חיפוש משתמשים...",
-    "noUsersFound": "לא נמצאו משתמשים",
-    "linkCreated": "קישור השיתוף נוצר",
-    "linkNeedsServer": "קישורי שיתוף פועלים רק עבור סשנים בשרת Termix. חבר מארח זה דרך השרת המקושר שלך כדי לשתף אותו עם קישור.",
-    "linkCopied": "קישור שהועתק ללוח",
-    "copyLink": "העתקת קישור",
-    "shareCreated": "הסשן שותף. זה יופיע בלשונית החיבורים שלהם.",
-    "shareFailed": "יצירת השיתוף נכשלה",
-    "userLacksHostAccess": "למשתמש הזה עדיין אין גישה למארח הזה. שתף את המארח איתו תחילה, או השתמש בקישור במקום זאת.",
-    "activeShares": "מניות פעילות",
-    "noActiveShares": "אין שיתופים פעילים עבור סשן זה",
-    "revoke": "לְבַטֵל",
-    "revokeConfirmTitle": "לבטל את השיתוף הזה?",
-    "revokeConfirmDescription": "כל מי שישתמש בשיתוף הזה יאבד גישה באופן מיידי.",
-    "revoked": "השיתוף בוטל",
-    "revokeFailed": "ביטול השיתוף נכשל",
-    "joinCount": "{{count}} join",
-    "joinCount_other": "{{count}} מצטרף",
-    "expiresAt": "פג תוקף {{date}}",
-    "linkShareBadge": "לְקַשֵׁר",
-    "userShareBadge": "משתמש: {{username}}",
-    "loadSharesFailed": "נכשלה טעינת השיתופים הפעילים",
-    "remoteDisplayUnavailable": "שולחן עבודה מרוחק אינו זמין כרגע.",
-    "sharedWithMe": "מפגשים ששותפו איתי",
-    "customHoursPlaceholder": "שעות עד לפקיעת הגישה"
-  },
-  "collab": {
-    "createRoom": "חדר חדש",
-    "roomName": "שם החדר",
-    "persistentRoom": "חדר קבוע",
-    "persistentRoomHint": "חדרים קבועים נשארים רשומים לאחר סיום הפגישה וניתן לעשות בהם שימוש חוזר.",
-    "noRooms": "אין עדיין חדרים. צור אחד כדי להתחיל פגישה.",
-    "openRoom": "לִפְתוֹחַ",
-    "endRoom": "סיום פגישה",
-    "leaveRoom": "לַעֲזוֹב",
-    "deleteMember": "לְהַסִיר",
-    "removeMember": "הסר {{name}}",
-    "removeMemberTitle": "להסיר את החבר הזה?",
-    "removeMemberDescription": "{{name}} יאבד גישה לחדר הזה באופן מיידי. כל צופה פעיל ב-SSH ינותק.",
-    "invite": "לְהַזמִין",
-    "inviteTitle": "הזמנת חברים",
-    "members": "חברים",
-    "membersPanel": "חברי חדר ובקשות בקרה",
-    "membersWithCount": "חברים ({{count}})",
-    "guestsWithCount": "אורחים ({{count}})",
-    "removeGuests": "הסר אורחים",
-    "anonymousGuest": "אוֹרֵחַ",
-    "online": "באינטרנט",
-    "offline": "לא מקוון",
-    "you": "(אַתָה)",
-    "hostBadge": "מְאָרֵחַ",
-    "presenterBadge": "הצגה",
-    "present": "לְהַצִיג",
-    "presentTitle": "עלו על הבמה",
-    "presentHost": "מְאָרֵחַ",
-    "searchHosts": "חיפוש מארחים",
-    "noHostsFound": "לא נמצאו מארחים זמינים.",
-    "presentProtocol": "פּרוֹטוֹקוֹל",
-    "stopPresenting": "הפסקת ההצגה",
-    "takeOver": "השתלטות",
-    "takeOverConfirmTitle": "להחליף את המצגת הנוכחית?",
-    "takeOverDescription": "{{name}} מציג כעת. השתלטות תנתק את כולם מהבמה הזו.",
-    "emptyStage": "אף אחד לא מציג. עלו לבמה כדי לשתף סשן.",
-    "stageLoading": "מתחבר לבמה...",
-    "stageEnded": "המצגת הסתיימה",
-    "roomEnded": "פגישה זו הסתיימה",
-    "presenterLabel": "{{name}} מציג",
-    "guestLink": "קישור אורח",
-    "guestLinkOn": "קישור האורח פעיל. כל מי שיש לו קישור יכול לצפות בבמה.",
-    "guestLinkOff": "קישור האורח כבוי.",
-    "copyLink": "העתקת קישור",
-    "rotateLink": "סיבוב קישור",
-    "disableLink": "השבת קישור",
-    "rotateLinkConfirmTitle": "לסובב את קישור האורח?",
-    "rotateLinkDescription": "הקישור הנוכחי יפסיק לפעול באופן מיידי. אורחי SSH המחוברים ינותקו.",
-    "disableLinkConfirmTitle": "להשבית את קישור האורח?",
-    "disableLinkDescription": "צופי SSH אנונימיים ינותקו באופן מיידי והקישור הנוכחי יפסיק לפעול.",
-    "linkCopied": "הקישור הועתק",
-    "roles": "תפקידים",
-    "users": "משתמשים",
-    "searchUsers": "חיפוש משתמשים",
-    "endConfirmTitle": "לסיים את הפגישה הזו?",
-    "endDescription": "{{name}} יסתיים עבור כולם ולא ניתן יהיה לפתוח אותו מחדש.",
-    "endPersistentDescription": "המצגת הפעילה ב- {{name}} תיעצר. החדר יישאר זמין לשימוש חוזר.",
-    "deleteRoom": "מחיקת חדר",
-    "deleteConfirmTitle": "למחוק את החדר הזה?",
-    "deleteDescription": "{{name}} יימחק לצמיתות עבור כולם ולא ניתן יהיה לבטל אותו.",
-    "invitedTo": "הוזמנת ל-\"{{name}}\"",
-    "guest": {
-      "title": "פְּגִישָׁה",
-      "waiting": "מחכה למנחה...",
-      "linkInvalid": "קישור האורח הזה אינו תקין או שהפגישה הסתיימה"
-    },
-    "reopenFromPanel": "פג תוקף כרטיסיית הפגישה הזו. פתח מחדש את החדר מחלונית הפגישות.",
-    "retry": "נסה שוב",
-    "requestControl": "בקרת בקשות",
-    "cancelControlRequest": "ביטול בקשה",
-    "controlQueue": "בקשות בקרה",
-    "noControlRequests": "אין בקשות ממתינות.",
-    "grantControlTo": "תן שליטה ל- {{name}}",
-    "dismissControlRequest": "סגור את בקשת הבקרה של {{name}}",
-    "releaseControl": "בקרת שחרור",
-    "grantControl": "תן שליטה",
-    "revokeControl": "קח בחזרה את השליטה",
-    "controlRequestedBy": "{{name}} ביקש שליטה",
-    "grant": "מַעֲנָק",
-    "controlBadge": "בשליטה",
-    "youArePresenting": "אתה מציג בכרטיסייה אחרת. הפסק את ההצגה כדי להעביר את הבמה.",
-    "created": "החדר נוצר",
-    "invited": "חברים שהוזמנו",
-    "roomTab": "פְּגִישָׁה",
-    "serverChanged": "שרת הפגישות השתנה. פתח מחדש פגישה זו מחלונית הפגישות.",
-    "hostNotSynced": "סנכרן מארח זה עם שרת הפגישה לפני ההצגה.",
-    "linkRequiresServer": "קשר שולחן עבודה זה לשרת Termix וצור שם את הפגישה כדי לשתף קישור אינטרנט."
-  },
-  "nav": {
-    "collab": "פגישות"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "אפשר שיתוף סשנים",
-        "description": "מאפשר שיתוף של הפעלות מסוף חי, RDP, VNC ו-Telnet בכל המופעים. מבטל כל אפשרות שיתוף לפי מארח כאשר היא מושבתת."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "אפשר שיתוף סשנים",
-        "description": "אפשר שיתוף של מפגשים חיים במארח זה באמצעות קישור או עם משתמשים אחרים"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "שתף מפגשים והצטרף לחדרים",
-      "description": "שתף מפגשים חיים באמצעות קישור או עם משתמשים אחרים, וצר והצטרף לחדרי שיתוף פעולה."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "לְעוֹלָם לֹא",
-        "oneHour": "שעה אחת",
-        "oneDay": "24 שעות",
-        "sevenDays": "7 ימים",
-        "thirtyDays": "30 ימים",
-        "custom": "מִנְהָג"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "שיתף איתי",
-    "sharedBy": "שותף על ידי {{username}}",
-    "join": "לְהִצְטַרֵף",
-    "sharedSessionLabel": "{{hostName}} (שותף)"
-  },
-  "plugin": {
-    "name": "שיתוף סשנים"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/hi_IN.json b/plugins/session-sharing/locales/translated/hi_IN.json
deleted file mode 100644
index 244dab72a..000000000
--- a/plugins/session-sharing/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "साझा सत्र से जुड़ रहा है...",
-      "linkInvalid": "यह शेयर लिंक अमान्य है, इसकी समय सीमा समाप्त हो चुकी है, या इसे रद्द कर दिया गया है।",
-      "rateLimited": "बहुत अधिक प्रयास किए गए, कृपया कुछ देर बाद पुनः प्रयास करें।",
-      "sessionEnded": "यह सत्र समाप्त हो गया है।",
-      "readOnlyBadge": "केवल देखें",
-      "ownerLabel": "मेज़बान स्वामी"
-    },
-    "modalTitle": "सत्र साझा करें",
-    "shareButton": "साझा करें",
-    "notReadyToShare": "सेशन अभी शेयर करने के लिए तैयार नहीं है",
-    "modeTab": {
-      "link": "जोड़ना",
-      "user": "उपयोगकर्ता"
-    },
-    "linkModeDescription": "इस लिंक के जरिए कोई भी जुड़ सकता है, इसके लिए किसी खाते की आवश्यकता नहीं है।",
-    "userModeDescription": "इसे उस विशिष्ट उपयोगकर्ता के साथ साझा करें जिसके पास पहले से ही इस होस्ट का एक्सेस है। यदि उनके पास अभी एक्सेस नहीं है, तो पहले उनके साथ होस्ट साझा करें या इसके बजाय एक लिंक का उपयोग करें। साझा करने के बाद, सेशन उनके कनेक्शन टैब में दिखाई देगा।",
-    "permissionLevel": {
-      "label": "अनुमति स्तर",
-      "readOnly": "केवल-पठनीय",
-      "readOnlyDescription": "आप सेशन को लाइव देख सकते हैं लेकिन टाइप या इंटरैक्ट नहीं कर सकते।",
-      "readWrite": "पढ़ना-लिखना",
-      "readWriteDescription": "मालिक की तरह ही सेशन में टाइप कर सकता है और इंटरैक्ट कर सकता है।"
-    },
-    "expiryLabel": "लिंक की समय सीमा समाप्त",
-    "createLinkButton": "लिंक बनाएं",
-    "createShareButton": "उपयोगकर्ता के साथ साझा करें",
-    "searchUsersPlaceholder": "उपयोगकर्ताओं को खोजें...",
-    "noUsersFound": "कोई उपयोगकर्ता नहीं मिला",
-    "linkCreated": "शेयर लिंक बनाया गया",
-    "linkNeedsServer": "शेयर लिंक केवल टर्मिक्स सर्वर पर मौजूद सेशन के लिए काम करते हैं। लिंक के ज़रिए शेयर करने के लिए इस होस्ट को अपने लिंक्ड सर्वर के माध्यम से कनेक्ट करें।",
-    "linkCopied": "लिंक क्लिपबोर्ड पर कॉपी हो गया है",
-    "copyLink": "लिंक की प्रतिलिपि करें",
-    "shareCreated": "सेशन साझा कर दिया गया है। यह उनके कनेक्शन टैब में दिखाई देगा।",
-    "shareFailed": "शेयर बनाने में विफल",
-    "userLacksHostAccess": "उस उपयोगकर्ता के पास अभी इस होस्ट तक पहुंच नहीं है। कृपया पहले उनके साथ होस्ट साझा करें, या इसके बजाय एक लिंक का उपयोग करें।",
-    "activeShares": "सक्रिय शेयर",
-    "noActiveShares": "इस सत्र के लिए कोई सक्रिय शेयर नहीं हैं",
-    "revoke": "निरस्त करें",
-    "revokeConfirmTitle": "क्या इस शेयर को रद्द कर दें?",
-    "revokeConfirmDescription": "इस शेयर का उपयोग करने वाले किसी भी व्यक्ति की पहुंच तुरंत समाप्त हो जाएगी।",
-    "revoked": "शेयर रद्द कर दिया गया",
-    "revokeFailed": "शेयर रद्द करने में विफल",
-    "joinCount": "{{count}} जुड़ें",
-    "joinCount_other": "{{count}} जुड़ता है",
-    "expiresAt": "{{date}} को समाप्त होगा",
-    "linkShareBadge": "जोड़ना",
-    "userShareBadge": "उपयोगकर्ता: {{username}}",
-    "loadSharesFailed": "सक्रिय शेयर लोड करने में विफल",
-    "remoteDisplayUnavailable": "फिलहाल रिमोट डेस्कटॉप उपलब्ध नहीं है।",
-    "sharedWithMe": "मेरे साथ साझा किए गए सत्र",
-    "customHoursPlaceholder": "पहुँच समाप्त होने तक के घंटे"
-  },
-  "collab": {
-    "createRoom": "नया कमरा",
-    "roomName": "कमरे का नाम",
-    "persistentRoom": "लगातार कमरा",
-    "persistentRoomHint": "स्थायी कमरे मीटिंग समाप्त होने के बाद भी सूची में बने रहते हैं और उनका पुनः उपयोग किया जा सकता है।",
-    "noRooms": "अभी कोई कमरा उपलब्ध नहीं है। मीटिंग शुरू करने के लिए एक कमरा बनाएं।",
-    "openRoom": "खोलें",
-    "endRoom": "बैठक समाप्त",
-    "leaveRoom": "छुट्टी",
-    "deleteMember": "हटाएं",
-    "removeMember": "{{name}} हटाएँ",
-    "removeMemberTitle": "क्या इस सदस्य को हटा दें?",
-    "removeMemberDescription": "{{name}} को इस कमरे तक पहुँच तुरंत खोनी पड़ेगी। कोई भी सक्रिय SSH व्यूअर डिस्कनेक्ट हो जाएगा।",
-    "invite": "आमंत्रित करना",
-    "inviteTitle": "सदस्यों को आमंत्रित करो",
-    "members": "सदस्यों",
-    "membersPanel": "कमरे के सदस्य और नियंत्रण अनुरोध",
-    "membersWithCount": "सदस्य ({{count}})",
-    "guestsWithCount": "अतिथि ({{count}})",
-    "removeGuests": "मेहमानों को हटा दें",
-    "anonymousGuest": "अतिथि",
-    "online": "ऑनलाइन",
-    "offline": "ऑफलाइन",
-    "you": "(आप)",
-    "hostBadge": "होस्ट",
-    "presenterBadge": "प्रस्तुत करते हुए",
-    "present": "उपस्थित",
-    "presentTitle": "मंच पर आइए",
-    "presentHost": "होस्ट",
-    "searchHosts": "होस्ट खोजें",
-    "noHostsFound": "कोई उपलब्ध होस्ट नहीं मिला।",
-    "presentProtocol": "प्रोटोकॉल",
-    "stopPresenting": "प्रस्तुति देना बंद करो",
-    "takeOver": "कब्जा",
-    "takeOverConfirmTitle": "क्या वर्तमान प्रस्तुति को बदलना है?",
-    "takeOverDescription": "{{name}} अभी प्रस्तुति दे रहा है। कार्यभार संभालने से सभी लोग उस मंच से अलग हो जाएंगे।",
-    "emptyStage": "आज कोई प्रस्तुति नहीं दे रहा है। आप मंच पर आकर अपना सत्र साझा करें।",
-    "stageLoading": "मंच से जुड़ना...",
-    "stageEnded": "प्रस्तुति समाप्त हुई",
-    "roomEnded": "यह बैठक समाप्त हो गई है",
-    "presenterLabel": "{{name}} प्रस्तुत कर रहा है",
-    "guestLink": "अतिथि लिंक",
-    "guestLinkOn": "अतिथि लिंक चालू है। लिंक के माध्यम से कोई भी व्यक्ति मंच देख सकता है।",
-    "guestLinkOff": "अतिथि लिंक बंद है।",
-    "copyLink": "लिंक की प्रतिलिपि करें",
-    "rotateLink": "लिंक घुमाएँ",
-    "disableLink": "लिंक अक्षम करें",
-    "rotateLinkConfirmTitle": "अतिथि लिंक को घुमाएँ?",
-    "rotateLinkDescription": "वर्तमान लिंक तुरंत काम करना बंद कर देगा। कनेक्टेड एसएसएच गेस्ट डिस्कनेक्ट हो जाएंगे।",
-    "disableLinkConfirmTitle": "अतिथि लिंक को निष्क्रिय करें?",
-    "disableLinkDescription": "अनाम एसएसएच व्यूअर्स तुरंत डिस्कनेक्ट हो जाएंगे और वर्तमान लिंक काम करना बंद कर देगा।",
-    "linkCopied": "लिंक कॉपी हो गया",
-    "roles": "भूमिकाएं",
-    "users": "उपयोगकर्ता",
-    "searchUsers": "उपयोगकर्ताओं को खोजें",
-    "endConfirmTitle": "क्या इस बैठक को यहीं समाप्त करें?",
-    "endDescription": "{{name}} सभी के लिए समाप्त हो जाएगा और इसे दोबारा नहीं खोला जा सकता है।",
-    "endPersistentDescription": "{{name}} में चल रही प्रस्तुति बंद हो जाएगी। कमरा पुनः उपयोग के लिए उपलब्ध रहेगा।",
-    "deleteRoom": "कमरा हटाएं",
-    "deleteConfirmTitle": "क्या इस कमरे को हटा दें?",
-    "deleteDescription": "{{name}} को सभी के लिए स्थायी रूप से हटा दिया जाएगा और इसे पूर्ववत नहीं किया जा सकता है।",
-    "invitedTo": "आपको \"{{name}} \" में आमंत्रित किया गया था",
-    "guest": {
-      "title": "बैठक",
-      "waiting": "प्रस्तुतकर्ता का इंतजार है...",
-      "linkInvalid": "यह अतिथि लिंक अमान्य है या मीटिंग समाप्त हो चुकी है"
-    },
-    "reopenFromPanel": "इस मीटिंग टैब की समय सीमा समाप्त हो गई है। कृपया मीटिंग पैनल से कमरे को पुनः खोलें।",
-    "retry": "पुनः प्रयास करें",
-    "requestControl": "अनुरोध नियंत्रण",
-    "cancelControlRequest": "अनुरोध को रद्द करें",
-    "controlQueue": "नियंत्रण अनुरोध",
-    "noControlRequests": "कोई लंबित अनुरोध नहीं।",
-    "grantControlTo": "{{name}} को नियंत्रण दें",
-    "dismissControlRequest": "{{name}}के नियंत्रण अनुरोध को खारिज करें",
-    "releaseControl": "नियंत्रण छोड़ें",
-    "grantControl": "नियंत्रण सौंप दें",
-    "revokeControl": "नियंत्रण वापस अपने हाथ में लें।",
-    "controlRequestedBy": "{{name}} ने नियंत्रण मांगा",
-    "grant": "अनुदान",
-    "controlBadge": "नियंत्रण में",
-    "youArePresenting": "आप किसी दूसरे टैब में प्रेजेंटेशन दे रहे हैं। कृपया प्रेजेंटेशन देना बंद करें और स्टेज किसी और को सौंप दें।",
-    "created": "कमरा बनाया गया",
-    "invited": "सदस्यों को आमंत्रित किया गया",
-    "roomTab": "बैठक",
-    "serverChanged": "मीटिंग सर्वर बदल गया है। कृपया मीटिंग पैनल से इस मीटिंग को दोबारा खोलें।",
-    "hostNotSynced": "प्रस्तुति देने से पहले इस होस्ट को मीटिंग सर्वर से सिंक्रनाइज़ करें।",
-    "linkRequiresServer": "इस डेस्कटॉप को टर्मिक्स सर्वर से लिंक करें और वहां मीटिंग बनाएं ताकि वेब लिंक साझा किया जा सके।"
-  },
-  "nav": {
-    "collab": "बैठक"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "सेशन शेयरिंग की अनुमति दें",
-        "description": "लाइव टर्मिनल, RDP, VNC और Telnet सेशन को पूरे इंस्टेंस में साझा करने की अनुमति दें। अक्षम होने पर यह प्रति-होस्ट साझाकरण टॉगल को ओवरराइड कर देता है।"
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "सेशन शेयरिंग की अनुमति दें",
-        "description": "इस होस्ट पर होने वाले लाइव सेशन को लिंक के माध्यम से या अन्य उपयोगकर्ताओं के साथ साझा किया जा सकता है।"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "सेशन साझा करें और रूम में शामिल हों",
-      "description": "लाइव सेशन को लिंक के माध्यम से या अन्य उपयोगकर्ताओं के साथ साझा करें, और सहयोग कक्ष बनाएं और उनमें शामिल हों।"
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "कभी नहीं",
-        "oneHour": "1 घंटा",
-        "oneDay": "24 घंटे",
-        "sevenDays": "7 दिन",
-        "thirtyDays": "30 दिन",
-        "custom": "कस्टम"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "मेरे साथ साझा किया गया",
-    "sharedBy": "{{username}} द्वारा साझा किया गया",
-    "join": "जोड़ना",
-    "sharedSessionLabel": "{{hostName}} (साझा)"
-  },
-  "plugin": {
-    "name": "सत्र साझाकरण"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/hu_HU.json b/plugins/session-sharing/locales/translated/hu_HU.json
deleted file mode 100644
index 8ca381dda..000000000
--- a/plugins/session-sharing/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Kapcsolódás a megosztott munkamenethez...",
-      "linkInvalid": "Ez a megosztási link érvénytelen, lejárt vagy visszavonták.",
-      "rateLimited": "Túl sok próbálkozás, kérjük, próbáld újra később",
-      "sessionEnded": "Ez a munkamenet véget ért",
-      "readOnlyBadge": "Csak megtekintés",
-      "ownerLabel": "Házigazda tulajdonos"
-    },
-    "modalTitle": "Megosztási munkamenet",
-    "shareButton": "Részesedés",
-    "notReadyToShare": "A munkamenet még nem megosztható",
-    "modeTab": {
-      "link": "Link",
-      "user": "Felhasználó"
-    },
-    "linkModeDescription": "Bárki csatlakozhat a link birtokában, nincs szükség regisztrációra.",
-    "userModeDescription": "Megosztás egy adott felhasználóval, aki már rendelkezik hozzáféréssel ehhez a gazdagéphez. Ha még nincs hozzáférésük, először oszd meg vele a gazdagépet, vagy használj hivatkozást. A megosztás után a munkamenet megjelenik a Kapcsolatok lapon.",
-    "permissionLevel": {
-      "label": "Jogosultsági szint",
-      "readOnly": "Csak olvasható",
-      "readOnlyDescription": "Élőben nézhetem az előadást, de nem gépelhetek és nem léphetek interakcióba.",
-      "readWrite": "Olvasható-írható",
-      "readWriteDescription": "Pont úgy tud gépelni és kommunikálni a munkamenettel, mint a tulajdonos."
-    },
-    "expiryLabel": "Link lejárata",
-    "createLinkButton": "Link létrehozása",
-    "createShareButton": "Megosztás a felhasználóval",
-    "searchUsersPlaceholder": "Felhasználók keresése...",
-    "noUsersFound": "Nem található felhasználó",
-    "linkCreated": "Megosztási link létrehozva",
-    "linkNeedsServer": "A megosztási linkek csak Termix szerveren lévő munkamenetek esetén működnek. A linkkel való megosztáshoz csatlakoztasd ezt a hosztot a csatolt szervereden keresztül.",
-    "linkCopied": "Link a vágólapra másolva",
-    "copyLink": "Link másolása",
-    "shareCreated": "Munkamenet megosztva. Megjelenik a Kapcsolatok fülön.",
-    "shareFailed": "Nem sikerült létrehozni a megosztást",
-    "userLacksHostAccess": "A felhasználónak még nincs hozzáférése ehhez a gazdagéphez. Először oszd meg vele a gazdagépet, vagy használj linket.",
-    "activeShares": "Aktív megosztások",
-    "noActiveShares": "Nincsenek aktív megosztások ebben a munkamenetben",
-    "revoke": "Visszavonás",
-    "revokeConfirmTitle": "Visszavonja ezt a megosztást?",
-    "revokeConfirmDescription": "Bárki, aki ezt a megosztást használja, azonnal elveszíti a hozzáférését.",
-    "revoked": "Megosztás visszavonva",
-    "revokeFailed": "Nem sikerült visszavonni a megosztást",
-    "joinCount": "{{count}} csatlakozás",
-    "joinCount_other": "{{count}} csatlakozások",
-    "expiresAt": "Lejár {{date}}",
-    "linkShareBadge": "Link",
-    "userShareBadge": "Felhasználó: {{username}}",
-    "loadSharesFailed": "Nem sikerült betölteni az aktív megosztásokat",
-    "remoteDisplayUnavailable": "A távoli asztal jelenleg nem érhető el.",
-    "sharedWithMe": "Velem megosztott munkamenetek",
-    "customHoursPlaceholder": "Órák a hozzáférés lejártáig"
-  },
-  "collab": {
-    "createRoom": "Új szoba",
-    "roomName": "Szoba neve",
-    "persistentRoom": "Állandó szoba",
-    "persistentRoomHint": "Az állandó szobák a megbeszélés befejezése után is listázva maradnak, és újra felhasználhatók.",
-    "noRooms": "Még nincsenek szobák. Hozz létre egyet a megbeszélés megkezdéséhez.",
-    "openRoom": "Nyitott",
-    "endRoom": "Megbeszélés vége",
-    "leaveRoom": "Szabadság",
-    "deleteMember": "Eltávolítás",
-    "removeMember": "Eltávolítás {{name}}",
-    "removeMemberTitle": "Eltávolítja ezt a tagot?",
-    "removeMemberDescription": "{{name}} azonnal elveszíti a hozzáférést ehhez a szobához. Minden aktív SSH-megjelenítő lekapcsolódik.",
-    "invite": "Meghív",
-    "inviteTitle": "Tagok meghívása",
-    "members": "Tagok",
-    "membersPanel": "Szoba tagjai és irányítási kérelmek",
-    "membersWithCount": "Tagok ({{count}})",
-    "guestsWithCount": "Vendégek ({{count}})",
-    "removeGuests": "Vendégek eltávolítása",
-    "anonymousGuest": "Vendég",
-    "online": "online",
-    "offline": "offline",
-    "you": "(te)",
-    "hostBadge": "Házigazda",
-    "presenterBadge": "Bemutatja",
-    "present": "Jelenlegi",
-    "presentTitle": "Lépj színpadra",
-    "presentHost": "Házigazda",
-    "searchHosts": "Keresés hosztok",
-    "noHostsFound": "Nem található elérhető host.",
-    "presentProtocol": "Jegyzőkönyv",
-    "stopPresenting": "Prezentáció leállítása",
-    "takeOver": "Átvétel",
-    "takeOverConfirmTitle": "Lecseréli a jelenlegi prezentációt?",
-    "takeOverDescription": "{{name}} most tart előadást. Az irányítás átvétele mindenkit lekapcsolna arról a színpadról.",
-    "emptyStage": "Senki sem tart előadást. Lépjen színpadra, és ossza meg velünk az előadást.",
-    "stageLoading": "Csatlakozás a színpadhoz...",
-    "stageEnded": "A prezentáció véget ért",
-    "roomEnded": "Ez a találkozó véget ért",
-    "presenterLabel": "{{name}} bemutatja",
-    "guestLink": "Vendéglink",
-    "guestLinkOn": "Vendéglink be van kapcsolva. Bárki, aki rendelkezik a linkkel, nézheti a színpadot.",
-    "guestLinkOff": "A vendéglink ki van kapcsolva.",
-    "copyLink": "Link másolása",
-    "rotateLink": "Link elforgatása",
-    "disableLink": "Link letiltása",
-    "rotateLinkConfirmTitle": "Vendéglink elforgatása?",
-    "rotateLinkDescription": "A jelenlegi kapcsolat azonnal leáll. A csatlakoztatott SSH-vendégek le lesznek választva.",
-    "disableLinkConfirmTitle": "Letiltja a vendéglinket?",
-    "disableLinkDescription": "A névtelen SSH-nézők azonnal le lesznek választva, és a jelenlegi link nem fog működni.",
-    "linkCopied": "Link másolva",
-    "roles": "Szerepkörök",
-    "users": "Felhasználók",
-    "searchUsers": "Felhasználók keresése",
-    "endConfirmTitle": "Befejezi ezt a megbeszélést?",
-    "endDescription": "{{name}} mindenki számára megszűnik, és nem lehet újra megnyitni.",
-    "endPersistentDescription": "A {{name}} teremben futó aktív prezentáció leáll. A szoba továbbra is elérhető marad újrafelhasználásra.",
-    "deleteRoom": "Szoba törlése",
-    "deleteConfirmTitle": "Törli ezt a szobát?",
-    "deleteDescription": "A {{name}} véglegesen törlésre kerül mindenki számára, és a művelet nem vonható vissza.",
-    "invitedTo": "Meghívtak a következőre: \"{{name}}\"",
-    "guest": {
-      "title": "Találkozó",
-      "waiting": "Várjuk az előadót...",
-      "linkInvalid": "Ez a vendéglink érvénytelen, vagy a megbeszélés véget ért."
-    },
-    "reopenFromPanel": "Ez a megbeszélésfül lejárt. Nyissa meg újra a szobát a Megbeszélések panelről.",
-    "retry": "Újrapróbálkozás",
-    "requestControl": "Kérelemvezérlés",
-    "cancelControlRequest": "Kérés visszavonása",
-    "controlQueue": "Ellenőrzési kérelmek",
-    "noControlRequests": "Nincsenek függőben lévő kérések.",
-    "grantControlTo": "Átadni az irányítást {{name}}-nak",
-    "dismissControlRequest": "Elutasítom {{name}}vezérlési kérelmét",
-    "releaseControl": "Kioldásvezérlés",
-    "grantControl": "Átadni az irányítást",
-    "revokeControl": "Vedd vissza az irányítást",
-    "controlRequestedBy": "{{name}} kérte az irányítást",
-    "grant": "Támogatás",
-    "controlBadge": "Irányítás alatt",
-    "youArePresenting": "Egy másik lapon tartasz előadást. Állítsa le az előadást, hogy átadhassa a helyet.",
-    "created": "Szoba létrehozva",
-    "invited": "Meghívott tagok",
-    "roomTab": "Találkozó",
-    "serverChanged": "A megbeszélés szervere megváltozott. Nyissa meg újra a megbeszélést a Megbeszélések panelről.",
-    "hostNotSynced": "Szinkronizálja ezt a gazdagépet a megbeszélés szerverével a prezentáció megkezdése előtt.",
-    "linkRequiresServer": "Kapcsold össze ezt az asztalt egy Termix szerverrel, és hozd létre ott a találkozót egy webhivatkozás megosztásához."
-  },
-  "nav": {
-    "collab": "Találkozók"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Munkamenet-megosztás engedélyezése",
-        "description": "Engedélyezi az élő terminál-, RDP-, VNC- és Telnet-munkamenetek példányonkénti megosztását. Letiltás esetén felülírja az összes gazdagépenkénti megosztási kapcsolót."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Munkamenet-megosztás engedélyezése",
-        "description": "Engedélyezi az élő munkamenetek megosztását ezen a gazdagépen linken vagy más felhasználókkal"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Munkamenetek megosztása és szobákhoz való csatlakozás",
-      "description": "Ossz meg élő munkameneteket linken keresztül vagy más felhasználókkal, és hozz létre, illetve csatlakozz együttműködési szobákhoz."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Soha",
-        "oneHour": "1 óra",
-        "oneDay": "24 óra",
-        "sevenDays": "7 nap",
-        "thirtyDays": "30 nap",
-        "custom": "Szokás"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Megosztva velem",
-    "sharedBy": "Megosztotta: {{username}}",
-    "join": "Csatlakozik",
-    "sharedSessionLabel": "{{hostName}} (megosztva)"
-  },
-  "plugin": {
-    "name": "Munkamenet-megosztás"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/id_ID.json b/plugins/session-sharing/locales/translated/id_ID.json
deleted file mode 100644
index aec6d097a..000000000
--- a/plugins/session-sharing/locales/translated/id_ID.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Menghubungkan ke sesi bersama...",
-      "linkInvalid": "Tautan berbagi ini tidak valid, telah kedaluwarsa, atau telah dicabut.",
-      "rateLimited": "Terlalu banyak percobaan, silakan coba lagi sebentar lagi.",
-      "sessionEnded": "Sesi ini telah berakhir.",
-      "readOnlyBadge": "Hanya tampilan",
-      "ownerLabel": "Pemilik host"
-    },
-    "modalTitle": "Sesi berbagi",
-    "shareButton": "Membagikan",
-    "notReadyToShare": "Sesi belum siap untuk dibagikan.",
-    "modeTab": {
-      "link": "Link",
-      "user": "Pengguna"
-    },
-    "linkModeDescription": "Siapa pun yang memiliki tautan ini dapat bergabung, tidak perlu membuat akun.",
-    "userModeDescription": "Bagikan dengan pengguna tertentu yang sudah memiliki akses ke host ini. Jika mereka belum memiliki akses, bagikan host tersebut kepada mereka terlebih dahulu atau gunakan tautan. Setelah dibagikan, sesi akan muncul di tab Koneksi mereka.",
-    "permissionLevel": {
-      "label": "Tingkat izin",
-      "readOnly": "Hanya baca",
-      "readOnlyDescription": "Bisa menonton sesi secara langsung tetapi tidak bisa mengetik atau berinteraksi.",
-      "readWrite": "Baca-tulis",
-      "readWriteDescription": "Dapat mengetik dan berinteraksi dengan sesi seperti halnya pemilik."
-    },
-    "expiryLabel": "Kedaluwarsa tautan",
-    "createLinkButton": "Buat tautan",
-    "createShareButton": "Bagikan dengan pengguna",
-    "searchUsersPlaceholder": "Cari pengguna...",
-    "noUsersFound": "Tidak ada pengguna yang ditemukan",
-    "linkCreated": "Tautan berbagi telah dibuat",
-    "linkNeedsServer": "Tautan berbagi hanya berfungsi untuk sesi di server Termix. Hubungkan host ini melalui server tertaut Anda untuk membagikannya dengan tautan.",
-    "linkCopied": "Tautan disalin ke papan klip",
-    "copyLink": "Salin tautan",
-    "shareCreated": "Sesi dibagikan. Sesi tersebut akan muncul di tab Koneksi mereka.",
-    "shareFailed": "Gagal membuat saham",
-    "userLacksHostAccess": "Pengguna tersebut belum memiliki akses ke host ini. Bagikan host tersebut kepada mereka terlebih dahulu, atau gunakan tautan sebagai gantinya.",
-    "activeShares": "Saham aktif",
-    "noActiveShares": "Tidak ada saham aktif untuk sesi ini.",
-    "revoke": "Menarik kembali",
-    "revokeConfirmTitle": "Batalkan pembagian ini?",
-    "revokeConfirmDescription": "Siapa pun yang menggunakan share ini akan langsung kehilangan akses.",
-    "revoked": "Saham dicabut",
-    "revokeFailed": "Gagal mencabut saham",
-    "joinCount": "{{count}} bergabung",
-    "joinCount_other": "{{count}} bergabung",
-    "expiresAt": "Berakhir {{date}}",
-    "linkShareBadge": "Link",
-    "userShareBadge": "Pengguna: {{username}}",
-    "loadSharesFailed": "Gagal memuat saham aktif.",
-    "remoteDisplayUnavailable": "Akses desktop jarak jauh saat ini tidak tersedia.",
-    "sharedWithMe": "Sesi yang dibagikan kepada saya",
-    "customHoursPlaceholder": "Waktu hingga akses berakhir"
-  },
-  "collab": {
-    "createRoom": "Kamar baru",
-    "roomName": "Nama ruangan",
-    "persistentRoom": "Ruang permanen",
-    "persistentRoomHint": "Ruangan yang bersifat permanen akan tetap terdaftar setelah rapat berakhir dan dapat digunakan kembali.",
-    "noRooms": "Belum ada ruang rapat. Buat ruang rapat untuk memulai pertemuan.",
-    "openRoom": "Membuka",
-    "endRoom": "Mengakhiri pertemuan",
-    "leaveRoom": "Meninggalkan",
-    "deleteMember": "Menghapus",
-    "removeMember": "Hapus {{name}}",
-    "removeMemberTitle": "Hapus anggota ini?",
-    "removeMemberDescription": "{{name}} akan kehilangan akses ke ruangan ini segera. Setiap penonton SSH yang aktif akan terputus.",
-    "invite": "Mengundang",
-    "inviteTitle": "Undang anggota",
-    "members": "Anggota",
-    "membersPanel": "Anggota ruangan dan permintaan kontrol",
-    "membersWithCount": "Anggota ({{count}})",
-    "guestsWithCount": "Tamu ({{count}})",
-    "removeGuests": "Singkirkan tamu",
-    "anonymousGuest": "Tamu",
-    "online": "on line",
-    "offline": "offline",
-    "you": "(Anda)",
-    "hostBadge": "Tuan rumah",
-    "presenterBadge": "Mempersembahkan",
-    "present": "Hadiah",
-    "presentTitle": "Naik ke panggung",
-    "presentHost": "Tuan rumah",
-    "searchHosts": "Cari host",
-    "noHostsFound": "Tidak ditemukan host yang tersedia.",
-    "presentProtocol": "Protokol",
-    "stopPresenting": "Berhenti melakukan presentasi",
-    "takeOver": "Mengambil alih",
-    "takeOverConfirmTitle": "Mengganti presentasi yang ada?",
-    "takeOverDescription": "{{name}} sedang melakukan presentasi sekarang. Mengambil alih akan memutuskan koneksi semua orang dari panggung tersebut.",
-    "emptyStage": "Tidak ada yang sedang presentasi. Silakan naik ke panggung untuk berbagi sesi.",
-    "stageLoading": "Terhubung ke panggung...",
-    "stageEnded": "Presentasi berakhir",
-    "roomEnded": "Pertemuan ini telah berakhir.",
-    "presenterLabel": "{{name}} sedang menampilkan",
-    "guestLink": "Tautan tamu",
-    "guestLinkOn": "Tautan tamu sudah aktif. Siapa pun yang memiliki tautan tersebut dapat menonton pertunjukan di panggung.",
-    "guestLinkOff": "Tautan tamu dinonaktifkan.",
-    "copyLink": "Salin tautan",
-    "rotateLink": "Putar tautan",
-    "disableLink": "Nonaktifkan tautan",
-    "rotateLinkConfirmTitle": "Putar tautan tamu?",
-    "rotateLinkDescription": "Koneksi saat ini akan segera berhenti berfungsi. Tamu SSH yang terhubung akan terputus.",
-    "disableLinkConfirmTitle": "Nonaktifkan tautan tamu?",
-    "disableLinkDescription": "Pengguna anonim yang mengakses melalui SSH akan langsung terputus dan tautan saat ini akan berhenti berfungsi.",
-    "linkCopied": "Tautan disalin",
-    "roles": "Peran",
-    "users": "Pengguna",
-    "searchUsers": "Cari pengguna",
-    "endConfirmTitle": "Apakah pertemuan ini bisa diakhiri?",
-    "endDescription": "{{name}} akan berakhir untuk semua orang dan tidak dapat dibuka kembali.",
-    "endPersistentDescription": "Presentasi aktif di {{name}} akan berhenti. Ruangan tetap tersedia untuk digunakan kembali.",
-    "deleteRoom": "Hapus ruangan",
-    "deleteConfirmTitle": "Hapus ruangan ini?",
-    "deleteDescription": "{{name}} akan dihapus secara permanen untuk semua orang dan tidak dapat dibatalkan.",
-    "invitedTo": "Anda diundang ke \"{{name}}\"",
-    "guest": {
-      "title": "Pertemuan",
-      "waiting": "Menunggu pembawa acara...",
-      "linkInvalid": "Tautan tamu ini tidak valid atau rapat telah berakhir."
-    },
-    "reopenFromPanel": "Tab rapat ini telah kedaluwarsa. Buka kembali ruangan dari panel Rapat.",
-    "retry": "Mencoba kembali",
-    "requestControl": "Kontrol permintaan",
-    "cancelControlRequest": "Batalkan permintaan",
-    "controlQueue": "Permintaan kontrol",
-    "noControlRequests": "Tidak ada permintaan yang tertunda.",
-    "grantControlTo": "Berikan kendali ke {{name}}",
-    "dismissControlRequest": "Abaikan permintaan kontrol {{name}}",
-    "releaseControl": "Lepaskan kontrol",
-    "grantControl": "Berikan kendali",
-    "revokeControl": "Ambil kembali kendali",
-    "controlRequestedBy": "{{name}} meminta kendali",
-    "grant": "Menganugerahkan",
-    "controlBadge": "Dalam kendali",
-    "youArePresenting": "Anda sedang melakukan presentasi di tab lain. Hentikan presentasi untuk memberikan kesempatan kepada saya.",
-    "created": "Ruangan dibuat",
-    "invited": "Anggota diundang",
-    "roomTab": "Pertemuan",
-    "serverChanged": "Server rapat telah berubah. Buka kembali rapat ini dari panel Rapat.",
-    "hostNotSynced": "Sinkronkan host ini dengan server rapat sebelum presentasi.",
-    "linkRequiresServer": "Hubungkan desktop ini ke server Termix dan buat rapat di sana untuk berbagi tautan web."
-  },
-  "nav": {
-    "collab": "Pertemuan"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Izinkan Berbagi Sesi",
-        "description": "Izinkan sesi terminal langsung, RDP, VNC, dan Telnet untuk dibagikan di seluruh instance. Menggantikan setiap pengaturan berbagi per host saat dinonaktifkan."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Izinkan Berbagi Sesi",
-        "description": "Izinkan sesi langsung di host ini dibagikan melalui tautan atau dengan pengguna lain."
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Bagikan sesi dan bergabunglah dengan ruangan.",
-      "description": "Bagikan sesi langsung melalui tautan atau dengan pengguna lain, serta buat dan bergabunglah dengan ruang kolaborasi."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Tidak pernah",
-        "oneHour": "1 jam",
-        "oneDay": "24 jam",
-        "sevenDays": "7 hari",
-        "thirtyDays": "30 hari",
-        "custom": "Kebiasaan"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Dibagikan kepada saya",
-    "sharedBy": "Dibagikan oleh {{username}}",
-    "join": "Bergabung",
-    "sharedSessionLabel": "{{hostName}} (dibagikan)"
-  },
-  "plugin": {
-    "name": "Sesi Berbagi"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/it_IT.json b/plugins/session-sharing/locales/translated/it_IT.json
deleted file mode 100644
index 689441fde..000000000
--- a/plugins/session-sharing/locales/translated/it_IT.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Connessione alla sessione condivisa in corso...",
-      "linkInvalid": "Questo link di condivisione non è valido, è scaduto o è stato revocato.",
-      "rateLimited": "Troppi tentativi, riprova tra poco.",
-      "sessionEnded": "Questa sessione è terminata",
-      "readOnlyBadge": "Solo visualizzazione",
-      "ownerLabel": "Proprietario dell'host"
-    },
-    "modalTitle": "Sessione di condivisione",
-    "shareButton": "Condividi",
-    "notReadyToShare": "La sessione non è ancora pronta per la condivisione.",
-    "modeTab": {
-      "link": "Collegamento",
-      "user": "Utente"
-    },
-    "linkModeDescription": "Chiunque abbia questo link può partecipare, non è necessario creare un account.",
-    "userModeDescription": "Condividi la sessione con un utente specifico che ha già accesso a questo host. Se non ha ancora accesso, condividi prima l'host con lui oppure usa un link. Una volta condivisa, la sessione apparirà nella sua scheda Connessioni.",
-    "permissionLevel": {
-      "label": "Livello di autorizzazione",
-      "readOnly": "Sola lettura",
-      "readOnlyDescription": "È possibile seguire la sessione in diretta, ma non è possibile digitare o interagire.",
-      "readWrite": "lettura-scrittura",
-      "readWriteDescription": "Può digitare e interagire con la sessione proprio come il proprietario."
-    },
-    "expiryLabel": "Scadenza del collegamento",
-    "createLinkButton": "Crea collegamento",
-    "createShareButton": "Condividi con l'utente",
-    "searchUsersPlaceholder": "Cerca utenti...",
-    "noUsersFound": "Nessun utente trovato",
-    "linkCreated": "Link di condivisione creato",
-    "linkNeedsServer": "I link di condivisione funzionano solo per le sessioni su un server Termix. Collega questo host tramite il tuo server collegato per condividerlo con un link.",
-    "linkCopied": "Link copiato negli appunti",
-    "copyLink": "Copia il link",
-    "shareCreated": "Sessione condivisa. Sarà visibile nella scheda Connessioni.",
-    "shareFailed": "Impossibile creare la condivisione",
-    "userLacksHostAccess": "Quell'utente non ha ancora accesso a questo host. Condividi prima l'host con lui, oppure usa un link.",
-    "activeShares": "Condivisioni attive",
-    "noActiveShares": "Nessuna azione attiva in questa sessione.",
-    "revoke": "Revoca",
-    "revokeConfirmTitle": "Revocare questa condivisione?",
-    "revokeConfirmDescription": "Chiunque utilizzi questa condivisione perderà immediatamente l'accesso.",
-    "revoked": "Azione revocata.",
-    "revokeFailed": "Impossibile revocare la quota",
-    "joinCount": "{{count}} unisciti",
-    "joinCount_other": "{{count}} si unisce",
-    "expiresAt": "Scade il {{date}}",
-    "linkShareBadge": "Collegamento",
-    "userShareBadge": "Utente: {{username}}",
-    "loadSharesFailed": "Impossibile caricare le azioni attive",
-    "remoteDisplayUnavailable": "Al momento il desktop remoto non è disponibile.",
-    "sharedWithMe": "Sessioni condivise con me",
-    "customHoursPlaceholder": "Ore fino alla scadenza dell'accesso"
-  },
-  "collab": {
-    "createRoom": "Nuova stanza",
-    "roomName": "Nome della stanza",
-    "persistentRoom": "Stanza persistente",
-    "persistentRoomHint": "Le stanze persistenti rimangono elencate anche dopo la fine della riunione e possono essere riutilizzate.",
-    "noRooms": "Non ci sono ancora stanze. Creane una per avviare una riunione.",
-    "openRoom": "Apri",
-    "endRoom": "Fine della riunione",
-    "leaveRoom": "Partire",
-    "deleteMember": "Rimuovi",
-    "removeMember": "Rimuovi {{name}}",
-    "removeMemberTitle": "Rimuovere questo membro?",
-    "removeMemberDescription": "{{name}} perderà immediatamente l'accesso a questa stanza. Qualsiasi visualizzatore SSH attivo verrà disconnesso.",
-    "invite": "Invitare",
-    "inviteTitle": "Invita i membri",
-    "members": "Membri",
-    "membersPanel": "Membri della stanza e richieste di controllo",
-    "membersWithCount": "Membri ({{count}})",
-    "guestsWithCount": "Ospiti ({{count}})",
-    "removeGuests": "Rimuovi gli ospiti",
-    "anonymousGuest": "Ospite",
-    "online": "online",
-    "offline": "offline",
-    "you": "(Voi)",
-    "hostBadge": "Host",
-    "presenterBadge": "Presentazione",
-    "present": "Presente",
-    "presentTitle": "Sali sul palco",
-    "presentHost": "Host",
-    "searchHosts": "Cerca host",
-    "noHostsFound": "Nessun host disponibile trovato.",
-    "presentProtocol": "Protocollo",
-    "stopPresenting": "Smetti di presentare",
-    "takeOver": "Rilevare",
-    "takeOverConfirmTitle": "Sostituire la presentazione attuale?",
-    "takeOverDescription": "{{name}} sta presentando ora. Prendere il controllo disconnetterà tutti da quel palco.",
-    "emptyStage": "Nessuno sta presentando. Salite sul palco per condividere una sessione.",
-    "stageLoading": "Collegamento al palco...",
-    "stageEnded": "La presentazione è terminata",
-    "roomEnded": "La riunione è terminata",
-    "presenterLabel": "{{name}} sta presentando",
-    "guestLink": "Link ospite",
-    "guestLinkOn": "Il link per gli ospiti è attivo. Chiunque abbia il link può assistere alla diretta.",
-    "guestLinkOff": "Il link per gli ospiti è disattivato.",
-    "copyLink": "Copia il link",
-    "rotateLink": "Ruota il collegamento",
-    "disableLink": "Disabilita il collegamento",
-    "rotateLinkConfirmTitle": "Ruotare il link per gli ospiti?",
-    "rotateLinkDescription": "Il collegamento attuale smetterà di funzionare immediatamente. Gli ospiti SSH connessi verranno disconnessi.",
-    "disableLinkConfirmTitle": "Disabilitare il link per gli ospiti?",
-    "disableLinkDescription": "Gli utenti che tentano di connettersi tramite SSH in modo anonimo verranno disconnessi immediatamente e il collegamento corrente smetterà di funzionare.",
-    "linkCopied": "Collegamento copiato",
-    "roles": "Ruoli",
-    "users": "Utenti",
-    "searchUsers": "Utenti di ricerca",
-    "endConfirmTitle": "Chiudere questa riunione?",
-    "endDescription": "{{name}} terminerà per tutti e non potrà essere riaperto.",
-    "endPersistentDescription": "La presentazione attiva in {{name}} verrà interrotta. La sala rimane disponibile per un altro utilizzo.",
-    "deleteRoom": "Eliminare la stanza",
-    "deleteConfirmTitle": "Eliminare questa stanza?",
-    "deleteDescription": "{{name}} verrà eliminato definitivamente per tutti e non sarà possibile annullare l'operazione.",
-    "invitedTo": "Sei stato invitato a \"{{name}}\"",
-    "guest": {
-      "title": "Incontro",
-      "waiting": "In attesa del presentatore...",
-      "linkInvalid": "Questo link per gli ospiti non è valido oppure la riunione è terminata."
-    },
-    "reopenFromPanel": "La scheda di questa riunione è scaduta. Riapri la sala riunioni dal pannello Riunioni.",
-    "retry": "Riprova",
-    "requestControl": "Controllo della richiesta",
-    "cancelControlRequest": "Annulla richiesta",
-    "controlQueue": "Richieste di controllo",
-    "noControlRequests": "Nessuna richiesta in sospeso.",
-    "grantControlTo": "Assegna il controllo a {{name}}",
-    "dismissControlRequest": "Ignora la richiesta di controllo di {{name}}",
-    "releaseControl": "Controllo del rilascio",
-    "grantControl": "Dare il controllo",
-    "revokeControl": "Riprendi il controllo",
-    "controlRequestedBy": "{{name}} ha chiesto il controllo",
-    "grant": "Concessione",
-    "controlBadge": "In controllo",
-    "youArePresenting": "Stai presentando in un'altra scheda. Interrompi la presentazione per cedere la parola.",
-    "created": "Stanza creata",
-    "invited": "Membri invitati",
-    "roomTab": "Incontro",
-    "serverChanged": "Il server della riunione è cambiato. Riapri la riunione dal pannello Riunioni.",
-    "hostNotSynced": "Sincronizza l'host con il server della riunione prima di iniziare la presentazione.",
-    "linkRequiresServer": "Collega questo computer desktop a un server Termix e crea la riunione lì per condividere un link web."
-  },
-  "nav": {
-    "collab": "Riunioni"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Consenti la condivisione della sessione",
-        "description": "Consente la condivisione di sessioni live di terminale, RDP, VNC e Telnet a livello di istanza. Quando disabilitata, questa opzione sovrascrive tutte le impostazioni di condivisione per singolo host."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Consenti la condivisione della sessione",
-        "description": "Consenti la condivisione delle sessioni live su questo host tramite link o con altri utenti"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Condividi sessioni e unisciti alle stanze",
-      "description": "Condividi sessioni live tramite link o con altri utenti, e crea e partecipa a stanze di collaborazione."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Mai",
-        "oneHour": "1 ora",
-        "oneDay": "24 ore",
-        "sevenDays": "7 giorni",
-        "thirtyDays": "30 giorni",
-        "custom": "Personalizzato"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Condiviso con me",
-    "sharedBy": "Condiviso da {{username}}",
-    "join": "Giuntura",
-    "sharedSessionLabel": "{{hostName}} (condiviso)"
-  },
-  "plugin": {
-    "name": "Condivisione della sessione"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/ja_JP.json b/plugins/session-sharing/locales/translated/ja_JP.json
deleted file mode 100644
index 70c1ddbd5..000000000
--- a/plugins/session-sharing/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "共有セッションに接続しています...",
-      "linkInvalid": "この共有リンクは無効、期限切れ、または取り消されています。",
-      "rateLimited": "試行回数が多すぎます。しばらくしてからもう一度お試しください。",
-      "sessionEnded": "このセッションは終了しました",
-      "readOnlyBadge": "閲覧のみ",
-      "ownerLabel": "ホストオーナー"
-    },
-    "modalTitle": "セッションを共有する",
-    "shareButton": "共有",
-    "notReadyToShare": "セッションはまだ共有できません",
-    "modeTab": {
-      "link": "リンク",
-      "user": "ユーザー"
-    },
-    "linkModeDescription": "このリンクを知っている人なら誰でも参加できます。アカウントは必要ありません。",
-    "userModeDescription": "このホストへのアクセス権を既に持っている特定のユーザーと共有します。まだアクセス権がない場合は、まずホストを共有するか、代わりにリンクを使用してください。共有が完了すると、セッションはユーザーの「接続」タブに表示されます。",
-    "permissionLevel": {
-      "label": "権限レベル",
-      "readOnly": "読み取り専用",
-      "readOnlyDescription": "セッションをライブで視聴することはできますが、文字入力やインタラクションはできません。",
-      "readWrite": "読み書き",
-      "readWriteDescription": "所有者と同様に、セッション内で文字を入力したり操作したりできます。"
-    },
-    "expiryLabel": "リンクの有効期限",
-    "createLinkButton": "リンクを作成する",
-    "createShareButton": "ユーザーと共有する",
-    "searchUsersPlaceholder": "ユーザーを検索...",
-    "noUsersFound": "ユーザーが見つかりませんでした",
-    "linkCreated": "共有リンクが作成されました",
-    "linkNeedsServer": "共有リンクは、Termixサーバー上のセッションでのみ機能します。リンクを使用してホストを共有するには、リンク先のサーバー経由でこのホストに接続してください。",
-    "linkCopied": "リンクがクリップボードにコピーされました",
-    "copyLink": "リンクをコピー",
-    "shareCreated": "セッションが共有されました。相手の「接続」タブに表示されます。",
-    "shareFailed": "共有の作成に失敗しました",
-    "userLacksHostAccess": "そのユーザーはまだこのホストへのアクセス権を持っていません。まずホストを共有するか、代わりにリンクを使用してください。",
-    "activeShares": "アクティブなシェア",
-    "noActiveShares": "今セッションで有効な株式はありません",
-    "revoke": "無効化",
-    "revokeConfirmTitle": "この共有を取り消しますか？",
-    "revokeConfirmDescription": "この共有ファイルを使用している人は、即座にアクセス権を失います。",
-    "revoked": "シェアが取り消されました",
-    "revokeFailed": "シェアの取り消しに失敗しました",
-    "joinCount": "{{count}} 参加する",
-    "joinCount_other": "{{count}} が参加します",
-    "expiresAt": "有効期限 {{date}}",
-    "linkShareBadge": "リンク",
-    "userShareBadge": "ユーザー: {{username}}",
-    "loadSharesFailed": "アクティブな共有の読み込みに失敗しました",
-    "remoteDisplayUnavailable": "現在、リモートデスクトップはご利用いただけません。",
-    "sharedWithMe": "私と共有されたセッション",
-    "customHoursPlaceholder": "アクセス期限までの時間数"
-  },
-  "collab": {
-    "createRoom": "新しい部屋",
-    "roomName": "部屋名",
-    "persistentRoom": "永続的な部屋",
-    "persistentRoomHint": "永続的な会議室は、会議終了後もリストに表示され、再利用できます。",
-    "noRooms": "まだ会議室がありません。会議室を作成して会議を開始してください。",
-    "openRoom": "開く",
-    "endRoom": "会議終了",
-    "leaveRoom": "離れる",
-    "deleteMember": "削除",
-    "removeMember": "{{name}}を削除",
-    "removeMemberTitle": "このメンバーを削除しますか？",
-    "removeMemberDescription": "{{name}} は直ちにこのルームへのアクセス権を失います。アクティブな SSH ビューアはすべて切断されます。",
-    "invite": "招待する",
-    "inviteTitle": "メンバーを招待する",
-    "members": "メンバー",
-    "membersPanel": "ルームメンバーと制御リクエスト",
-    "membersWithCount": "メンバー（{{count}}）",
-    "guestsWithCount": "ゲスト ({{count}})",
-    "removeGuests": "ゲストを退出させる",
-    "anonymousGuest": "ゲスト",
-    "online": "オンライン",
-    "offline": "オフライン",
-    "you": "（あなた）",
-    "hostBadge": "ホスト",
-    "presenterBadge": "発表します",
-    "present": "現在",
-    "presentTitle": "ステージに立つ",
-    "presentHost": "ホスト",
-    "searchHosts": "ホストを検索",
-    "noHostsFound": "利用可能なホストが見つかりませんでした。",
-    "presentProtocol": "プロトコル",
-    "stopPresenting": "プレゼンテーションをやめる",
-    "takeOver": "引き継ぐ",
-    "takeOverConfirmTitle": "現在のプレゼンテーションを置き換えますか？",
-    "takeOverDescription": "{{name}} が現在プレゼンテーションを行っています。引き継ぐと、そのステージから全員が切断されます。",
-    "emptyStage": "発表者はいません。ステージに上がってセッションを共有してください。",
-    "stageLoading": "ステージに接続中…",
-    "stageEnded": "プレゼンテーションは終了しました",
-    "roomEnded": "この会議は終了しました。",
-    "presenterLabel": "{{name}} がプレゼンテーションを行っています",
-    "guestLink": "ゲストリンク",
-    "guestLinkOn": "ゲストリンクが有効になっています。リンクを知っている人なら誰でもステージを視聴できます。",
-    "guestLinkOff": "ゲストリンクが無効になっています。",
-    "copyLink": "リンクをコピー",
-    "rotateLink": "リンクを回転させる",
-    "disableLink": "リンクを無効にする",
-    "rotateLinkConfirmTitle": "ゲストリンクを回転させますか？",
-    "rotateLinkDescription": "現在の接続は直ちに停止します。接続中のSSHゲストは切断されます。",
-    "disableLinkConfirmTitle": "ゲストリンクを無効にしますか？",
-    "disableLinkDescription": "匿名SSHビューアは直ちに切断され、現在の接続は機能しなくなります。",
-    "linkCopied": "リンクをコピーしました",
-    "roles": "ロール",
-    "users": "ユーザー",
-    "searchUsers": "ユーザーを検索",
-    "endConfirmTitle": "この会議を終了しますか？",
-    "endDescription": "{{name}} は全員に対して終了し、再開することはできません。",
-    "endPersistentDescription": "{{name}} で現在行われているプレゼンテーションは終了します。この部屋は引き続きご利用いただけます。",
-    "deleteRoom": "ルームを削除",
-    "deleteConfirmTitle": "この部屋を削除しますか？",
-    "deleteDescription": "{{name}} は全員に対して完全に削除され、元に戻すことはできません。",
-    "invitedTo": "あなたは「{{name}}」に招待されました。",
-    "guest": {
-      "title": "ミーティング",
-      "waiting": "プレゼンターをお待ちしています…",
-      "linkInvalid": "このゲストリンクは無効であるか、ミーティングが終了しています"
-    },
-    "reopenFromPanel": "この会議タブの有効期限が切れました。会議パネルから会議室を再度開いてください。",
-    "retry": "再試行",
-    "requestControl": "リクエスト制御",
-    "cancelControlRequest": "キャンセルリクエスト",
-    "controlQueue": "制御要求",
-    "noControlRequests": "保留中のリクエストはありません。",
-    "grantControlTo": "{{name}}に制御権を与える",
-    "dismissControlRequest": "{{name}}の制御要求を却下します",
-    "releaseControl": "リリース制御",
-    "grantControl": "コントロールを与える",
-    "revokeControl": "主導権を取り戻す",
-    "controlRequestedBy": "{{name}} が制御を要求しました",
-    "grant": "付与",
-    "controlBadge": "制御する",
-    "youArePresenting": "あなたは別のタブでプレゼンテーションを行っています。プレゼンテーションを中断して、ステージを譲ってください。",
-    "created": "ルームが作成されました",
-    "invited": "会員の皆様を招待いたします",
-    "roomTab": "ミーティング",
-    "serverChanged": "会議サーバーが変更されました。会議パネルからこの会議を再度開いてください。",
-    "hostNotSynced": "プレゼンテーションを行う前に、このホストを会議サーバーと同期させてください。",
-    "linkRequiresServer": "このデスクトップをTermixサーバーに接続し、そこで会議を作成してWebリンクを共有してください。"
-  },
-  "nav": {
-    "collab": "会議"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "セッション共有を許可する",
-        "description": "ライブターミナル、RDP、VNC、およびTelnetセッションをインスタンス全体で共有できるようにします。無効にすると、ホストごとの共有設定がすべて上書きされます。"
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "セッション共有を許可する",
-        "description": "このホスト上のライブセッションをリンクまたは他のユーザーと共有できるようにします。"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "セッションを共有し、ルームに参加する",
-      "description": "ライブセッションをリンクまたは他のユーザーと共有したり、コラボレーションルームを作成・参加したりできます。"
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "無期限",
-        "oneHour": "1時間",
-        "oneDay": "24時間",
-        "sevenDays": "7日間",
-        "thirtyDays": "30日間",
-        "custom": "カスタム"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "私と共有しました",
-    "sharedBy": "{{username}} によって共有されました",
-    "join": "参加する",
-    "sharedSessionLabel": "{{hostName}} (共有)"
-  },
-  "plugin": {
-    "name": "セッション共有"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/ko_KR.json b/plugins/session-sharing/locales/translated/ko_KR.json
deleted file mode 100644
index 816e2e6f3..000000000
--- a/plugins/session-sharing/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "공유 세션에 연결 중...",
-      "linkInvalid": "이 공유 링크는 유효하지 않거나, 만료되었거나, 취소되었습니다.",
-      "rateLimited": "시도 횟수가 너무 많습니다. 잠시 후 다시 시도해 주세요.",
-      "sessionEnded": "이번 세션이 종료되었습니다.",
-      "readOnlyBadge": "보기 전용",
-      "ownerLabel": "호스트 소유자"
-    },
-    "modalTitle": "공유 세션",
-    "shareButton": "공유",
-    "notReadyToShare": "세션을 공유할 준비가 아직 되지 않았습니다.",
-    "modeTab": {
-      "link": "링크",
-      "user": "사용자"
-    },
-    "linkModeDescription": "이 링크만 있으면 누구나 가입할 수 있으며, 계정은 필요하지 않습니다.",
-    "userModeDescription": "이미 해당 호스트에 접근 권한이 있는 특정 사용자와 공유하세요. 접근 권한이 없는 경우, 먼저 호스트를 공유하거나 링크를 사용하세요. 공유가 완료되면 해당 세션이 사용자의 '연결' 탭에 나타납니다.",
-    "permissionLevel": {
-      "label": "권한 수준",
-      "readOnly": "읽기 전용",
-      "readOnlyDescription": "실시간으로 세션을 시청할 수는 있지만, 입력하거나 상호 작용할 수는 없습니다.",
-      "readWrite": "읽기-쓰기",
-      "readWriteDescription": "소유자와 마찬가지로 세션에 입력하고 상호 작용할 수 있습니다."
-    },
-    "expiryLabel": "링크 만료",
-    "createLinkButton": "링크 생성",
-    "createShareButton": "사용자와 공유",
-    "searchUsersPlaceholder": "사용자 검색...",
-    "noUsersFound": "사용자를 찾을 수 없습니다.",
-    "linkCreated": "공유 링크가 생성되었습니다",
-    "linkNeedsServer": "공유 링크는 Termix 서버의 세션에서만 작동합니다. 링크를 사용하여 공유하려면 연결된 서버를 통해 이 호스트에 연결하십시오.",
-    "linkCopied": "링크가 클립보드에 복사되었습니다",
-    "copyLink": "링크 복사",
-    "shareCreated": "세션이 공유되었습니다. 상대방의 연결 탭에 표시됩니다.",
-    "shareFailed": "공유 폴더 생성에 실패했습니다.",
-    "userLacksHostAccess": "해당 사용자는 아직 이 호스트에 대한 접근 권한이 없습니다. 먼저 호스트를 공유하거나 링크를 사용하세요.",
-    "activeShares": "활성 주식",
-    "noActiveShares": "이번 세션에는 활성 주식이 없습니다.",
-    "revoke": "취소",
-    "revokeConfirmTitle": "이 지분을 취소하시겠습니까?",
-    "revokeConfirmDescription": "이 공유 폴더를 사용하는 사람은 누구든 즉시 접근 권한을 잃게 됩니다.",
-    "revoked": "공유 취소됨",
-    "revokeFailed": "공유 취소에 실패했습니다",
-    "joinCount": "{{count}} 참여",
-    "joinCount_other": "{{count}} 참여",
-    "expiresAt": "만료일: {{date}}",
-    "linkShareBadge": "링크",
-    "userShareBadge": "사용자: {{username}}",
-    "loadSharesFailed": "활성 공유 항목을 로드하는 데 실패했습니다.",
-    "remoteDisplayUnavailable": "현재 원격 데스크톱을 사용할 수 없습니다.",
-    "sharedWithMe": "나와 공유된 세션",
-    "customHoursPlaceholder": "액세스 만료까지 시간"
-  },
-  "collab": {
-    "createRoom": "새로운 방",
-    "roomName": "객실 이름",
-    "persistentRoom": "지속적인 방",
-    "persistentRoomHint": "회의가 끝난 후에도 지정된 회의실 목록에 남아 재사용할 수 있습니다.",
-    "noRooms": "아직 회의실이 없습니다. 회의를 시작하려면 회의실을 만드세요.",
-    "openRoom": "열기",
-    "endRoom": "회의 종료",
-    "leaveRoom": "떠나다",
-    "deleteMember": "제거",
-    "removeMember": "{{name}} 제거",
-    "removeMemberTitle": "이 회원을 삭제하시겠습니까?",
-    "removeMemberDescription": "{{name}} 사용자는 즉시 이 방에 대한 접근 권한을 잃게 됩니다. 활성화된 SSH 뷰어는 모두 연결이 끊어집니다.",
-    "invite": "초대하다",
-    "inviteTitle": "회원 초대",
-    "members": "회원들",
-    "membersPanel": "회의실 구성원 및 제어 요청",
-    "membersWithCount": "멤버({{count}})",
-    "guestsWithCount": "손님 ({{count}})",
-    "removeGuests": "손님을 제거하세요",
-    "anonymousGuest": "손님",
-    "online": "온라인",
-    "offline": "오프라인",
-    "you": "(너)",
-    "hostBadge": "호스트",
-    "presenterBadge": "소개합니다",
-    "present": "현재의",
-    "presentTitle": "무대에 오르세요",
-    "presentHost": "호스트",
-    "searchHosts": "호스트 검색",
-    "noHostsFound": "사용 가능한 호스트를 찾을 수 없습니다.",
-    "presentProtocol": "프로토콜",
-    "stopPresenting": "프레젠테이션을 중단하세요",
-    "takeOver": "인수하세요",
-    "takeOverConfirmTitle": "현재 프레젠테이션을 교체하시겠습니까?",
-    "takeOverDescription": "{{name}} 님이 현재 발표 중입니다. 발표를 이어받으면 해당 무대에서 모든 사용자의 연결이 끊어집니다.",
-    "emptyStage": "발표자가 없습니다. 무대에 올라 세션을 공유해 보세요.",
-    "stageLoading": "무대와 연결 중...",
-    "stageEnded": "프레젠테이션이 끝났습니다.",
-    "roomEnded": "이 회의는 종료되었습니다.",
-    "presenterLabel": "{{name}} 가 발표합니다",
-    "guestLink": "게스트 링크",
-    "guestLinkOn": "게스트 링크가 활성화되었습니다. 링크만 있으면 누구나 무대를 시청할 수 있습니다.",
-    "guestLinkOff": "게스트 링크가 꺼져 있습니다.",
-    "copyLink": "링크 복사",
-    "rotateLink": "링크를 회전하세요",
-    "disableLink": "링크 비활성화",
-    "rotateLinkConfirmTitle": "게스트 링크를 변경하시겠습니까?",
-    "rotateLinkDescription": "현재 연결은 즉시 작동을 멈춥니다. 연결된 SSH 게스트는 연결이 끊어집니다.",
-    "disableLinkConfirmTitle": "게스트 링크를 비활성화하시겠습니까?",
-    "disableLinkDescription": "익명 SSH 뷰어는 즉시 연결이 끊어지고 현재 링크가 작동을 멈춥니다.",
-    "linkCopied": "링크가 복사되었습니다",
-    "roles": "역할",
-    "users": "사용자",
-    "searchUsers": "사용자 검색",
-    "endConfirmTitle": "이 회의를 종료하시겠습니까?",
-    "endDescription": "{{name}} 는 모든 사용자에게 종료되며 다시 열 수 없습니다.",
-    "endPersistentDescription": "{{name}} 에서 진행 중이던 프레젠테이션이 종료됩니다. 해당 공간은 재사용 가능합니다.",
-    "deleteRoom": "방 삭제",
-    "deleteConfirmTitle": "이 방을 삭제하시겠습니까?",
-    "deleteDescription": "{{name}} 는 모든 사용자에게 영구적으로 삭제되며 되돌릴 수 없습니다.",
-    "invitedTo": "당신은 \"{{name}} \"에 초대되었습니다.",
-    "guest": {
-      "title": "회의",
-      "waiting": "발표자를 기다리는 중...",
-      "linkInvalid": "게스트 링크가 유효하지 않거나 회의가 종료되었습니다."
-    },
-    "reopenFromPanel": "이 회의 탭이 만료되었습니다. 회의 패널에서 회의실을 다시 여세요.",
-    "retry": "재시도",
-    "requestControl": "요청 제어",
-    "cancelControlRequest": "취소 요청",
-    "controlQueue": "제어 요청",
-    "noControlRequests": "보류 중인 요청이 없습니다.",
-    "grantControlTo": "{{name}}에 제어권을 넘겨주세요",
-    "dismissControlRequest": "{{name}}의 제어 요청을 기각합니다.",
-    "releaseControl": "릴리스 컨트롤",
-    "grantControl": "제어권을 넘겨주세요",
-    "revokeControl": "주도권을 되찾으세요",
-    "controlRequestedBy": "{{name}} 제어권을 요청했습니다.",
-    "grant": "승인하다",
-    "controlBadge": "통제하에",
-    "youArePresenting": "다른 탭에서 프레젠테이션을 진행하고 계십니다. 프레젠테이션을 중지하고 다음 사람에게 넘겨주세요.",
-    "created": "방이 생성되었습니다",
-    "invited": "회원 초대",
-    "roomTab": "회의",
-    "serverChanged": "회의 서버가 변경되었습니다. 회의 패널에서 이 회의를 다시 여세요.",
-    "hostNotSynced": "발표하기 전에 이 호스트를 회의 서버와 동기화하세요.",
-    "linkRequiresServer": "이 데스크톱을 Termix 서버에 연결하고, 그곳에서 웹 링크를 공유하는 회의를 생성하세요."
-  },
-  "nav": {
-    "collab": "회의"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "세션 공유 허용",
-        "description": "라이브 터미널, RDP, VNC 및 Telnet 세션을 인스턴스 전체에서 공유할 수 있도록 허용합니다. 이 기능을 비활성화하면 호스트별 공유 설정이 모두 무시됩니다."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "세션 공유 허용",
-        "description": "이 호스트에서 진행되는 라이브 세션을 링크 또는 다른 사용자와 공유하세요."
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "세션을 공유하고 회의실에 참여하세요",
-      "description": "링크를 통해 또는 다른 사용자와 실시간 세션을 공유하고, 공동 작업 공간을 만들고 참여하세요."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "안 함",
-        "oneHour": "1시간",
-        "oneDay": "24시간",
-        "sevenDays": "7일",
-        "thirtyDays": "30일",
-        "custom": "사용자 지정"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "나와 공유됨",
-    "sharedBy": "{{username}}님이 공유",
-    "join": "가입하다",
-    "sharedSessionLabel": "{{hostName}} (공유됨)"
-  },
-  "plugin": {
-    "name": "세션 공유"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/nl_NL.json b/plugins/session-sharing/locales/translated/nl_NL.json
deleted file mode 100644
index c17e16e3a..000000000
--- a/plugins/session-sharing/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Verbinding maken met de gedeelde sessie...",
-      "linkInvalid": "Deze deelbare link is ongeldig, verlopen of ingetrokken.",
-      "rateLimited": "Te veel pogingen, probeer het over een tijdje opnieuw.",
-      "sessionEnded": "Deze sessie is afgelopen.",
-      "readOnlyBadge": "Alleen bekijken",
-      "ownerLabel": "Gastheer/gastvrouw"
-    },
-    "modalTitle": "Deel sessie",
-    "shareButton": "Deel",
-    "notReadyToShare": "De sessie is nog niet klaar om te delen.",
-    "modeTab": {
-      "link": "Link",
-      "user": "Gebruiker"
-    },
-    "linkModeDescription": "Iedereen met deze link kan deelnemen, een account is niet nodig.",
-    "userModeDescription": "Deel de host met een specifieke gebruiker die er al toegang toe heeft. Als die gebruiker nog geen toegang heeft, deel de host dan eerst met hem of haar, of gebruik een link. Zodra de sessie is gedeeld, verschijnt deze in het tabblad 'Verbindingen' van de gebruiker.",
-    "permissionLevel": {
-      "label": "Toegangsniveau",
-      "readOnly": "Alleen-lezen",
-      "readOnlyDescription": "Je kunt de sessie live volgen, maar je kunt niet typen of interageren.",
-      "readWrite": "Lezen en schrijven",
-      "readWriteDescription": "Kan typen en interactie hebben met de sessie, net als de eigenaar."
-    },
-    "expiryLabel": "Link verloopt",
-    "createLinkButton": "Link maken",
-    "createShareButton": "Delen met gebruiker",
-    "searchUsersPlaceholder": "Gebruikers doorzoeken...",
-    "noUsersFound": "Geen gebruikers gevonden",
-    "linkCreated": "Deellink aangemaakt",
-    "linkNeedsServer": "Deellinks werken alleen voor sessies op een Termix-server. Verbind deze host via uw gekoppelde server om deze met een link te delen.",
-    "linkCopied": "Link gekopieerd naar het klembord.",
-    "copyLink": "Kopieer link",
-    "shareCreated": "De sessie is gedeeld. Deze verschijnt in hun tabblad 'Verbindingen'.",
-    "shareFailed": "Aanmaken van de share is mislukt",
-    "userLacksHostAccess": "Die gebruiker heeft nog geen toegang tot deze host. Deel de host eerst met hem of haar, of gebruik een link.",
-    "activeShares": "Actieve aandelen",
-    "noActiveShares": "Geen actieve aandelen voor deze sessie.",
-    "revoke": "Herroepen",
-    "revokeConfirmTitle": "Wilt u dit aandeel intrekken?",
-    "revokeConfirmDescription": "Iedereen die deze gedeelde map gebruikt, verliest onmiddellijk de toegang.",
-    "revoked": "Aandeel ingetrokken",
-    "revokeFailed": "Het intrekken van het aandeel is mislukt.",
-    "joinCount": "{{count}} join",
-    "joinCount_other": "{{count}} sluit zich aan",
-    "expiresAt": "Verloopt {{date}}",
-    "linkShareBadge": "Link",
-    "userShareBadge": "Gebruiker: {{username}}",
-    "loadSharesFailed": "Het laden van actieve aandelen is mislukt.",
-    "remoteDisplayUnavailable": "Externe bureaubladtoegang is momenteel niet beschikbaar.",
-    "sharedWithMe": "Sessies die met mij zijn gedeeld",
-    "customHoursPlaceholder": "Aantal uren tot de toegang verloopt"
-  },
-  "collab": {
-    "createRoom": "Nieuwe kamer",
-    "roomName": "Kamernaam",
-    "persistentRoom": "Permanente kamer",
-    "persistentRoomHint": "Kamers die permanent gereserveerd blijven, blijven na afloop van de vergadering beschikbaar en kunnen opnieuw worden gebruikt.",
-    "noRooms": "Er zijn nog geen vergaderruimtes. Maak er een aan om een vergadering te starten.",
-    "openRoom": "Open",
-    "endRoom": "Einde vergadering",
-    "leaveRoom": "Vertrekken",
-    "deleteMember": "Verwijderen",
-    "removeMember": "Verwijder {{name}}",
-    "removeMemberTitle": "Dit lid verwijderen?",
-    "removeMemberDescription": "{{name}} verliest onmiddellijk de toegang tot deze ruimte. Elke actieve SSH-viewer wordt losgekoppeld.",
-    "invite": "Uitnodiging",
-    "inviteTitle": "Nodig leden uit",
-    "members": "Leden",
-    "membersPanel": "Kamerleden en beheerverzoeken",
-    "membersWithCount": "Leden ({{count}})",
-    "guestsWithCount": "Gasten ({{count}})",
-    "removeGuests": "Verwijder gasten",
-    "anonymousGuest": "Gast",
-    "online": "online",
-    "offline": "offline",
-    "you": "(Jij)",
-    "hostBadge": "Gastheer",
-    "presenterBadge": "Presentatie",
-    "present": "Cadeau",
-    "presentTitle": "Betreed het podium",
-    "presentHost": "Gastheer",
-    "searchHosts": "Zoek hosts",
-    "noHostsFound": "Geen beschikbare hosts gevonden.",
-    "presentProtocol": "Protocol",
-    "stopPresenting": "Stop met presenteren",
-    "takeOver": "Neem het over",
-    "takeOverConfirmTitle": "De huidige presentatie vervangen?",
-    "takeOverDescription": "{{name}} presenteert nu. Als je het overneemt, wordt iedereen van dat podium losgekoppeld.",
-    "emptyStage": "Niemand geeft een presentatie. Betreed het podium om een sessie te delen.",
-    "stageLoading": "Verbinding maken met het podium...",
-    "stageEnded": "De presentatie eindigde.",
-    "roomEnded": "Deze vergadering is afgelopen.",
-    "presenterLabel": "{{name}} presenteert",
-    "guestLink": "Gastlink",
-    "guestLinkOn": "De gastlink is ingeschakeld. Iedereen met de link kan het optreden bekijken.",
-    "guestLinkOff": "De gastlink is uitgeschakeld.",
-    "copyLink": "Kopieer link",
-    "rotateLink": "Draai de link",
-    "disableLink": "Link uitschakelen",
-    "rotateLinkConfirmTitle": "De gastlink roteren?",
-    "rotateLinkDescription": "De huidige verbinding wordt onmiddellijk verbroken. Verbonden SSH-gasten worden losgekoppeld.",
-    "disableLinkConfirmTitle": "De gastlink uitschakelen?",
-    "disableLinkDescription": "Anonieme SSH-gebruikers worden onmiddellijk losgekoppeld en de huidige verbinding zal niet meer werken.",
-    "linkCopied": "Link gekopieerd",
-    "roles": "Rollen",
-    "users": "Gebruikers",
-    "searchUsers": "Zoek gebruikers",
-    "endConfirmTitle": "Deze vergadering beëindigen?",
-    "endDescription": "{{name}} zal voor iedereen eindigen en kan niet opnieuw worden geopend.",
-    "endPersistentDescription": "De actieve presentatie in {{name}} wordt gestopt. De ruimte blijft beschikbaar voor hergebruik.",
-    "deleteRoom": "Verwijder kamer",
-    "deleteConfirmTitle": "Deze kamer verwijderen?",
-    "deleteDescription": "{{name}} wordt permanent verwijderd voor iedereen en kan niet ongedaan worden gemaakt.",
-    "invitedTo": "Je werd uitgenodigd voor \"{{name}}\"",
-    "guest": {
-      "title": "Ontmoeting",
-      "waiting": "Wachten op de presentator...",
-      "linkInvalid": "Deze gastlink is ongeldig of de vergadering is afgelopen."
-    },
-    "reopenFromPanel": "Dit vergadertabblad is verlopen. Heropen de ruimte via het paneel Vergaderingen.",
-    "retry": "Opnieuw proberen",
-    "requestControl": "Verzoekbeheer",
-    "cancelControlRequest": "Verzoek annuleren",
-    "controlQueue": "Controleverzoeken",
-    "noControlRequests": "Geen openstaande aanvragen.",
-    "grantControlTo": "Geef de controle aan {{name}}",
-    "dismissControlRequest": "Negeer het controleverzoek van {{name}}",
-    "releaseControl": "Ontgrendeling",
-    "grantControl": "Geef de controle",
-    "revokeControl": "Neem de controle terug",
-    "controlRequestedBy": "{{name}} vroeg om controle",
-    "grant": "Studiebeurs",
-    "controlBadge": "Onder controle",
-    "youArePresenting": "Je presenteert momenteel in een ander tabblad. Stop met presenteren en geef het woord aan iemand anders.",
-    "created": "Kamer gecreëerd",
-    "invited": "Leden uitgenodigd",
-    "roomTab": "Ontmoeting",
-    "serverChanged": "De vergaderserver is gewijzigd. Heropen deze vergadering via het paneel Vergaderingen.",
-    "hostNotSynced": "Synchroniseer deze host met de vergaderserver voordat u de presentatie geeft.",
-    "linkRequiresServer": "Koppel dit bureaublad aan een Termix-server en maak daar de vergadering aan om een weblink te delen."
-  },
-  "nav": {
-    "collab": "Vergaderingen"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Sessiedeling toestaan",
-        "description": "Sta toe dat live terminal-, RDP-, VNC- en Telnet-sessies instantiebreed worden gedeeld. Deze functie overschrijft elke instelling voor delen per host wanneer deze is uitgeschakeld."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Sessiedeling toestaan",
-        "description": "Sta toe dat live sessies op deze host via een link of met andere gebruikers worden gedeeld."
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Deel sessies en neem deel aan chatrooms.",
-      "description": "Deel live sessies via een link of met andere gebruikers, en creëer en neem deel aan samenwerkingsruimtes."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Nooit",
-        "oneHour": "1 uur",
-        "oneDay": "24 uur",
-        "sevenDays": "7 dagen",
-        "thirtyDays": "30 dagen",
-        "custom": "Aangepast"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Met mij gedeeld",
-    "sharedBy": "Gedeeld door {{username}}",
-    "join": "Meedoen",
-    "sharedSessionLabel": "{{hostName}} (gedeeld)"
-  },
-  "plugin": {
-    "name": "Sessie delen"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/no_NO.json b/plugins/session-sharing/locales/translated/no_NO.json
deleted file mode 100644
index 8b07cb755..000000000
--- a/plugins/session-sharing/locales/translated/no_NO.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Kobler til delt økt...",
-      "linkInvalid": "Denne delingslenken er ugyldig, utløpt eller har blitt tilbakekalt",
-      "rateLimited": "For mange forsøk, prøv igjen snart",
-      "sessionEnded": "Denne økten er avsluttet",
-      "readOnlyBadge": "Kun visning",
-      "ownerLabel": "Vertseier"
-    },
-    "modalTitle": "Del økt",
-    "shareButton": "Dele",
-    "notReadyToShare": "Økten er ikke klar til deling ennå",
-    "modeTab": {
-      "link": "Lenke",
-      "user": "Bruker"
-    },
-    "linkModeDescription": "Alle med denne lenken kan bli med, ingen konto kreves.",
-    "userModeDescription": "Del med en bestemt bruker som allerede har tilgang til denne verten. Hvis de ikke har tilgang ennå, del verten med dem først eller bruk en lenke i stedet. Når økten er delt, vises den i deres Tilkoblinger-fane.",
-    "permissionLevel": {
-      "label": "Tillatelsesnivå",
-      "readOnly": "Skrivebeskyttet",
-      "readOnlyDescription": "Kan se økten direkte, men kan ikke skrive eller samhandle.",
-      "readWrite": "Lese-skrive",
-      "readWriteDescription": "Kan skrive og samhandle med økten akkurat som eieren."
-    },
-    "expiryLabel": "Utløpsdato for lenke",
-    "createLinkButton": "Opprett lenke",
-    "createShareButton": "Del med brukeren",
-    "searchUsersPlaceholder": "Søk etter brukere...",
-    "noUsersFound": "Ingen brukere funnet",
-    "linkCreated": "Delingslenke opprettet",
-    "linkNeedsServer": "Delingslenker fungerer bare for økter på en Termix-server. Koble til denne verten via den tilkoblede serveren din for å dele den med en lenke.",
-    "linkCopied": "Lenke kopiert til utklippstavlen",
-    "copyLink": "Kopier lenke",
-    "shareCreated": "Økten er delt. Den vil vises i Tilkoblinger-fanen deres.",
-    "shareFailed": "Kunne ikke opprette delingen",
-    "userLacksHostAccess": "Den brukeren har ikke tilgang til denne verten ennå. Del verten med dem først, eller bruk en lenke i stedet.",
-    "activeShares": "Aktive aksjer",
-    "noActiveShares": "Ingen aktive delinger for denne økten",
-    "revoke": "Tilbakekalling",
-    "revokeConfirmTitle": "Tilbakekalle denne delingen?",
-    "revokeConfirmDescription": "Alle som bruker denne delingen vil miste tilgangen umiddelbart.",
-    "revoked": "Deling tilbakekalt",
-    "revokeFailed": "Kunne ikke tilbakekalle delingen",
-    "joinCount": "{{count}} bli med",
-    "joinCount_other": "{{count}} blir med",
-    "expiresAt": "Utløper {{date}}",
-    "linkShareBadge": "Lenke",
-    "userShareBadge": "Bruker: {{username}}",
-    "loadSharesFailed": "Kunne ikke laste inn aktive delinger",
-    "remoteDisplayUnavailable": "Eksternt skrivebord er ikke tilgjengelig akkurat nå.",
-    "sharedWithMe": "Økter delt med meg",
-    "customHoursPlaceholder": "Timer til tilgangen utløper"
-  },
-  "collab": {
-    "createRoom": "Nytt rom",
-    "roomName": "Romnavn",
-    "persistentRoom": "Permanent rom",
-    "persistentRoomHint": "Permanente rom forblir oppført etter at møtet er avsluttet og kan brukes om igjen.",
-    "noRooms": "Ingen rom ennå. Opprett et for å starte et møte.",
-    "openRoom": "Åpne",
-    "endRoom": "Avslutt møtet",
-    "leaveRoom": "Forlate",
-    "deleteMember": "Fjern",
-    "removeMember": "Fjern {{name}}",
-    "removeMemberTitle": "Fjerne dette medlemmet?",
-    "removeMemberDescription": "{{name}} mister tilgangen til dette rommet umiddelbart. Alle aktive SSH-lesere blir frakoblet.",
-    "invite": "Invitere",
-    "inviteTitle": "Inviter medlemmer",
-    "members": "Medlemmer",
-    "membersPanel": "Rommedlemmer og kontrollforespørsler",
-    "membersWithCount": "Medlemmer ({{count}})",
-    "guestsWithCount": "Gjester ({{count}})",
-    "removeGuests": "Fjern gjester",
-    "anonymousGuest": "Gjest",
-    "online": "tilkoblet",
-    "offline": "frakoblet",
-    "you": "(du)",
-    "hostBadge": "Vert",
-    "presenterBadge": "Presenterer",
-    "present": "Nåværende",
-    "presentTitle": "Innta scenen",
-    "presentHost": "Vert",
-    "searchHosts": "Søk etter verter",
-    "noHostsFound": "Ingen tilgjengelige verter funnet.",
-    "presentProtocol": "Protokoll",
-    "stopPresenting": "Slutt å presentere",
-    "takeOver": "Ta over",
-    "takeOverConfirmTitle": "Erstatte den nåværende presentasjonen?",
-    "takeOverDescription": "{{name}} presenterer nå. Å ta over vil koble alle fra det stadiet.",
-    "emptyStage": "Ingen presenterer. Gå på scenen for å dele en økt.",
-    "stageLoading": "Kobler til scenen...",
-    "stageEnded": "Presentasjonen ble avsluttet",
-    "roomEnded": "Dette møtet er avsluttet",
-    "presenterLabel": "{{name}} presenterer",
-    "guestLink": "Gjestelenke",
-    "guestLinkOn": "Gjestelenken er på. Alle med lenken kan se scenen.",
-    "guestLinkOff": "Gjestelenken er av.",
-    "copyLink": "Kopier lenke",
-    "rotateLink": "Roter lenken",
-    "disableLink": "Deaktiver lenken",
-    "rotateLinkConfirmTitle": "Roter gjestelenken?",
-    "rotateLinkDescription": "Den nåværende lenken vil slutte å virke umiddelbart. Tilkoblede SSH-gjester vil bli frakoblet.",
-    "disableLinkConfirmTitle": "Deaktivere gjestelenken?",
-    "disableLinkDescription": "Anonyme SSH-lesere vil bli frakoblet umiddelbart, og den nåværende koblingen vil slutte å fungere.",
-    "linkCopied": "Lenken er kopiert",
-    "roles": "Roller",
-    "users": "Brukere",
-    "searchUsers": "Søk etter brukere",
-    "endConfirmTitle": "Avslutte dette møtet?",
-    "endDescription": "{{name}} vil avsluttes for alle og kan ikke åpnes igjen.",
-    "endPersistentDescription": "Den aktive presentasjonen i {{name}} stopper. Rommet er fortsatt tilgjengelig for gjenbruk.",
-    "deleteRoom": "Slett rom",
-    "deleteConfirmTitle": "Slette dette rommet?",
-    "deleteDescription": "{{name}} vil bli permanent slettet for alle og kan ikke angres.",
-    "invitedTo": "Du ble invitert til «{{name}}»",
-    "guest": {
-      "title": "Møte",
-      "waiting": "Venter på programlederen...",
-      "linkInvalid": "Denne gjestelenken er ugyldig, eller møtet er avsluttet"
-    },
-    "reopenFromPanel": "Denne møtefanen er utløpt. Åpne rommet på nytt fra Møter-panelet.",
-    "retry": "Prøv igjen",
-    "requestControl": "Be om kontroll",
-    "cancelControlRequest": "Avbryt forespørsel",
-    "controlQueue": "Kontrollforespørsler",
-    "noControlRequests": "Ingen ventende forespørsler.",
-    "grantControlTo": "Gi kontroll til {{name}}",
-    "dismissControlRequest": "Avvis kontrollforespørselen til {{name}}",
-    "releaseControl": "Slipp kontrollen",
-    "grantControl": "Gi kontroll",
-    "revokeControl": "Ta tilbake kontrollen",
-    "controlRequestedBy": "{{name}} ba om kontroll",
-    "grant": "Stipend",
-    "controlBadge": "I kontroll",
-    "youArePresenting": "Du presenterer i en annen fane. Stopp presentasjonen for å gi fra deg scenen.",
-    "created": "Rommet er opprettet",
-    "invited": "Medlemmer invitert",
-    "roomTab": "Møte",
-    "serverChanged": "Møteserveren er endret. Åpne dette møtet på nytt fra Møter-panelet.",
-    "hostNotSynced": "Synkroniser denne verten med møteserveren før presentasjonen.",
-    "linkRequiresServer": "Koble dette skrivebordet til en Termix-server og opprett møtet der for å dele en nettlenke."
-  },
-  "nav": {
-    "collab": "Møter"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Tillat øktdeling",
-        "description": "Tillat deling av Live Terminal-, RDP-, VNC- og Telnet-økter på tvers av hele instansen. Overstyrer alle delingsalternativer per vert når de er deaktivert."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Tillat øktdeling",
-        "description": "La direktesendte økter på denne verten deles via lenke eller med andre brukere"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Del økter og bli med i rom",
-      "description": "Del direktesendte økter via lenke eller med andre brukere, og opprett og bli med i samarbeidsrom."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Aldri",
-        "oneHour": "1 time",
-        "oneDay": "24 timer",
-        "sevenDays": "7 dager",
-        "thirtyDays": "30 dager",
-        "custom": "Skikk"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Delt med meg",
-    "sharedBy": "Delt av {{username}}",
-    "join": "Bli med",
-    "sharedSessionLabel": "{{hostName}} (delt)"
-  },
-  "plugin": {
-    "name": "Deling av økter"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/pl_PL.json b/plugins/session-sharing/locales/translated/pl_PL.json
deleted file mode 100644
index a49c76864..000000000
--- a/plugins/session-sharing/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Łączenie z sesją współdzieloną...",
-      "linkInvalid": "Ten link do udostępniania jest nieprawidłowy, wygasł lub został odwołany",
-      "rateLimited": "Zbyt wiele prób, spróbuj ponownie za chwilę",
-      "sessionEnded": "Ta sesja dobiegła końca",
-      "readOnlyBadge": "Tylko do podglądu",
-      "ownerLabel": "Właściciel gospodarza"
-    },
-    "modalTitle": "Udostępnij sesję",
-    "shareButton": "Udostępnij",
-    "notReadyToShare": "Sesja nie jest jeszcze gotowa do udostępnienia",
-    "modeTab": {
-      "link": "Link",
-      "user": "Użytkownik"
-    },
-    "linkModeDescription": "Każdy mający ten link może dołączyć, nie jest wymagane założenie konta.",
-    "userModeDescription": "Udostępnij konkretnemu użytkownikowi, który ma już dostęp do tego hosta. Jeśli jeszcze go nie ma, najpierw udostępnij mu hosta albo skorzystaj z linku. Po udostępnieniu sesja pojawi się na jego karcie Połączenia.",
-    "permissionLevel": {
-      "label": "Poziom uprawnień",
-      "readOnly": "Tylko do odczytu",
-      "readOnlyDescription": "Może oglądać sesję na żywo, ale nie może pisać ani nic w niej zmieniać.",
-      "readWrite": "Odczyt-zapis",
-      "readWriteDescription": "Może pisać i uczestniczyć w sesji tak samo jak właściciel."
-    },
-    "expiryLabel": "Wygaśnięcie linku",
-    "createLinkButton": "Utwórz link",
-    "createShareButton": "Udostępnij użytkownikowi",
-    "searchUsersPlaceholder": "Wyszukaj użytkowników...",
-    "noUsersFound": "Nie znaleziono użytkowników",
-    "linkCreated": "Utworzono link do udostępniania",
-    "linkNeedsServer": "Linki do udostępniania działają tylko w sesjach na serwerze Termix. Połącz się z tym hostem przez powiązany serwer, aby udostępnić go za pomocą linku.",
-    "linkCopied": "Link skopiowany do schowka",
-    "copyLink": "Kopiuj link",
-    "shareCreated": "Udostępniono sesję. Pojawi się na jego karcie Połączenia.",
-    "shareFailed": "Nie udało się utworzyć udostępnienia",
-    "userLacksHostAccess": "Ten użytkownik nie ma jeszcze dostępu do tego hosta. Udostępnij mu najpierw hosta lub skorzystaj z linku.",
-    "activeShares": "Aktywne udostępnienia",
-    "noActiveShares": "Brak aktywnych udostępnień tej sesji",
-    "revoke": "Unieważnij",
-    "revokeConfirmTitle": "Cofnąć to udostępnienie?",
-    "revokeConfirmDescription": "Każdy, kto korzysta z tego udostępnienia, natychmiast utraci dostęp.",
-    "revoked": "Unieważniono udostępnienie",
-    "revokeFailed": "Nie udało się unieważnić udostępnienia",
-    "joinCount": "{{count}} dołączenie",
-    "joinCount_other": "{{count}} dołączeń",
-    "expiresAt": "Wygasa {{date}}",
-    "linkShareBadge": "Link",
-    "userShareBadge": "Użytkownik: {{username}}",
-    "loadSharesFailed": "Nie udało się załadować aktywnych udostępnień",
-    "remoteDisplayUnavailable": "Zdalny pulpit nie jest obecnie dostępny.",
-    "sharedWithMe": "Sesje udostępnione mi",
-    "customHoursPlaceholder": "Godziny do wygaśnięcia dostępu"
-  },
-  "collab": {
-    "createRoom": "Nowy pokój",
-    "roomName": "Nazwa pokoju",
-    "persistentRoom": "Trwały pokój",
-    "persistentRoomHint": "Trwałe pokoje pozostają na liście po zakończeniu spotkania i można je ponownie wykorzystać.",
-    "noRooms": "Brak pokoi. Utwórz jeden, aby rozpocząć spotkanie.",
-    "openRoom": "Otwórz",
-    "endRoom": "Zakończ spotkanie",
-    "leaveRoom": "Wyjechać",
-    "deleteMember": "Usuń",
-    "removeMember": "Usuń {{name}}",
-    "removeMemberTitle": "Usunąć tego członka?",
-    "removeMemberDescription": "{{name}} natychmiast utraci dostęp do tego pokoju. Każdy aktywny użytkownik SSH zostanie rozłączony.",
-    "invite": "Zapraszać",
-    "inviteTitle": "Zaproś członków",
-    "members": "Członkowie",
-    "membersPanel": "Członkowie pokoju i prośby o kontrolę",
-    "membersWithCount": "Członkowie ({{count}})",
-    "guestsWithCount": "Goście ({{count}})",
-    "removeGuests": "Usuń gości",
-    "anonymousGuest": "Gość",
-    "online": "online",
-    "offline": "offline",
-    "you": "(Ty)",
-    "hostBadge": "Host",
-    "presenterBadge": "Przedstawianie",
-    "present": "Obecny",
-    "presentTitle": "Wejdź na scenę",
-    "presentHost": "Host",
-    "searchHosts": "Wyszukaj hosty",
-    "noHostsFound": "Nie znaleziono dostępnych hostów.",
-    "presentProtocol": "Protokół",
-    "stopPresenting": "Zatrzymaj prezentację",
-    "takeOver": "Przejąć",
-    "takeOverConfirmTitle": "Zastąpić bieżącą prezentację?",
-    "takeOverDescription": "{{name}} jest teraz prezentowany. Przejęcie kontroli spowoduje odłączenie wszystkich od tej sceny.",
-    "emptyStage": "Nikt nie prowadzi prezentacji. Wejdź na scenę i podziel się swoją sesją.",
-    "stageLoading": "Łączę się ze sceną...",
-    "stageEnded": "Prezentacja dobiegła końca",
-    "roomEnded": "To spotkanie dobiegło końca",
-    "presenterLabel": "{{name}} prezentuje",
-    "guestLink": "Link gościnny",
-    "guestLinkOn": "Link dla gości jest włączony. Każdy, kto ma link, może obejrzeć scenę.",
-    "guestLinkOff": "Link dla gości jest wyłączony.",
-    "copyLink": "Kopiuj link",
-    "rotateLink": "Obróć link",
-    "disableLink": "Wyłącz łącze",
-    "rotateLinkConfirmTitle": "Obrócić link gościa?",
-    "rotateLinkDescription": "Obecny link natychmiast przestanie działać. Połączeni goście SSH zostaną rozłączeni.",
-    "disableLinkConfirmTitle": "Wyłączyć link gościa?",
-    "disableLinkDescription": "Anonimowi użytkownicy SSH zostaną natychmiast rozłączeni, a bieżące łącze przestanie działać.",
-    "linkCopied": "Link skopiowany",
-    "roles": "Role",
-    "users": "Użytkownicy",
-    "searchUsers": "Wyszukaj użytkowników",
-    "endConfirmTitle": "Zakończyć to spotkanie?",
-    "endDescription": "{{name}} zakończy się dla wszystkich i nie będzie można go ponownie otworzyć.",
-    "endPersistentDescription": "Aktywna prezentacja w {{name}} zostanie zatrzymana. Pokój pozostaje dostępny do ponownego użycia.",
-    "deleteRoom": "Usuń pokój",
-    "deleteConfirmTitle": "Usunąć ten pokój?",
-    "deleteDescription": "{{name}} zostanie trwale usunięty u wszystkich i nie będzie można tego cofnąć.",
-    "invitedTo": "Zostałeś zaproszony do „{{name}}”",
-    "guest": {
-      "title": "Spotkanie",
-      "waiting": "Czekam na prezentera...",
-      "linkInvalid": "Ten link dla gościa jest nieprawidłowy lub spotkanie się zakończyło"
-    },
-    "reopenFromPanel": "Ta karta spotkania wygasła. Otwórz ponownie pokój z panelu Spotkania.",
-    "retry": "Ponów",
-    "requestControl": "Żądanie kontroli",
-    "cancelControlRequest": "Anuluj prośbę",
-    "controlQueue": "Żądania kontrolne",
-    "noControlRequests": "Brak oczekujących żądań.",
-    "grantControlTo": "Przekaż kontrolę {{name}}",
-    "dismissControlRequest": "Odrzuć żądanie kontroli {{name}}",
-    "releaseControl": "Kontrola wydania",
-    "grantControl": "Oddaj kontrolę",
-    "revokeControl": "Odzyskaj kontrolę",
-    "controlRequestedBy": "{{name}} poprosił o kontrolę",
-    "grant": "Dotacja",
-    "controlBadge": "Pod kontrolą",
-    "youArePresenting": "Prezentujesz na innej karcie. Zatrzymaj prezentację, aby przekazać scenę.",
-    "created": "Pokój utworzony",
-    "invited": "Zaproszeni członkowie",
-    "roomTab": "Spotkanie",
-    "serverChanged": "Zmieniono serwer spotkań. Otwórz ponownie to spotkanie z panelu Spotkania.",
-    "hostNotSynced": "Przed rozpoczęciem prezentacji zsynchronizuj tego hosta z serwerem konferencyjnym.",
-    "linkRequiresServer": "Połącz ten pulpit z serwerem Termix i utwórz tam spotkanie, aby udostępnić łącze internetowe."
-  },
-  "nav": {
-    "collab": "Spotkania"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Zezwól na udostępnianie sesji",
-        "description": "Zezwalaj na udostępnianie sesji terminala na żywo, RDP, VNC i Telnet w obrębie instancji. Po wyłączeniu zastępuje wszystkie przełączniki udostępniania dla poszczególnych hostów."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Zezwól na udostępnianie sesji",
-        "description": "Zezwól na udostępnianie sesji na żywo na tym hoście przez link lub innym użytkownikom"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Udostępniaj sesje i dołącz do pokoi",
-      "description": "Udostępniaj sesje na żywo za pośrednictwem łącza lub innym użytkownikom, a także twórz pokoje współpracy i do nich dołączaj."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Nigdy",
-        "oneHour": "1 godzina",
-        "oneDay": "24 godziny",
-        "sevenDays": "7 dni",
-        "thirtyDays": "30 dni",
-        "custom": "Niestandardowy"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Udostępniono mi",
-    "sharedBy": "Udostępnione przez {{username}}",
-    "join": "Dołącz",
-    "sharedSessionLabel": "{{hostName}} (udostępnione)"
-  },
-  "plugin": {
-    "name": "Udostępnianie sesji"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/pt_BR.json b/plugins/session-sharing/locales/translated/pt_BR.json
deleted file mode 100644
index 66d0b50f9..000000000
--- a/plugins/session-sharing/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Conectando à sessão compartilhada...",
-      "linkInvalid": "Este link de compartilhamento é inválido, expirou ou foi revogado.",
-      "rateLimited": "Muitas tentativas foram feitas, tente novamente em breve.",
-      "sessionEnded": "Esta sessão terminou.",
-      "readOnlyBadge": "Somente visualização",
-      "ownerLabel": "Proprietário do anfitrião"
-    },
-    "modalTitle": "Sessão de compartilhamento",
-    "shareButton": "Compartilhar",
-    "notReadyToShare": "A sessão ainda não está pronta para ser compartilhada.",
-    "modeTab": {
-      "link": "Link",
-      "user": "Usuário"
-    },
-    "linkModeDescription": "Qualquer pessoa com este link pode participar, sem necessidade de criar uma conta.",
-    "userModeDescription": "Compartilhe com um usuário específico que já tenha acesso a este host. Caso ele ainda não tenha acesso, compartilhe o host com ele primeiro ou use um link. Após o compartilhamento, a sessão aparecerá na aba Conexões do usuário.",
-    "permissionLevel": {
-      "label": "Nível de permissão",
-      "readOnly": "Somente leitura",
-      "readOnlyDescription": "É possível assistir à sessão ao vivo, mas não é possível digitar ou interagir.",
-      "readWrite": "Ler e escrever",
-      "readWriteDescription": "Pode digitar e interagir com a sessão da mesma forma que o proprietário."
-    },
-    "expiryLabel": "Expiração do link",
-    "createLinkButton": "Criar link",
-    "createShareButton": "Compartilhar com o usuário",
-    "searchUsersPlaceholder": "Pesquisar usuários...",
-    "noUsersFound": "Nenhum usuário encontrado",
-    "linkCreated": "Compartilhar link criado",
-    "linkNeedsServer": "Os links de compartilhamento funcionam apenas para sessões em um servidor Termix. Conecte este host através do seu servidor vinculado para compartilhá-lo com um link.",
-    "linkCopied": "Link copiado para a área de transferência",
-    "copyLink": "Copiar link",
-    "shareCreated": "Sessão compartilhada. Ela aparecerá na aba Conexões deles.",
-    "shareFailed": "Falha ao criar compartilhamento",
-    "userLacksHostAccess": "Esse usuário ainda não tem acesso a este host. Compartilhe o host com ele primeiro ou use um link.",
-    "activeShares": "Ações ativas",
-    "noActiveShares": "Nenhuma ação ativa nesta sessão.",
-    "revoke": "Revogar",
-    "revokeConfirmTitle": "Revogar essa participação?",
-    "revokeConfirmDescription": "Qualquer pessoa que usar este compartilhamento perderá o acesso imediatamente.",
-    "revoked": "Ações revogadas",
-    "revokeFailed": "Falha ao revogar a participação",
-    "joinCount": "{{count}} junte-se",
-    "joinCount_other": "{{count}} entra",
-    "expiresAt": "Expira em {{date}}",
-    "linkShareBadge": "Link",
-    "userShareBadge": "Usuário: {{username}}",
-    "loadSharesFailed": "Falha ao carregar compartilhamentos ativos",
-    "remoteDisplayUnavailable": "O acesso remoto à área de trabalho não está disponível no momento.",
-    "sharedWithMe": "Sessões compartilhadas comigo",
-    "customHoursPlaceholder": "Horas restantes até o acesso expirar"
-  },
-  "collab": {
-    "createRoom": "Quarto novo",
-    "roomName": "Nome do quarto",
-    "persistentRoom": "Sala persistente",
-    "persistentRoomHint": "As salas permanentes permanecem listadas após o término da reunião e podem ser reutilizadas.",
-    "noRooms": "Ainda não há salas. Crie uma para iniciar uma reunião.",
-    "openRoom": "Abrir",
-    "endRoom": "Encerramento da reunião",
-    "leaveRoom": "Deixar",
-    "deleteMember": "Remover",
-    "removeMember": "Remover {{name}}",
-    "removeMemberTitle": "Remover este membro?",
-    "removeMemberDescription": "{{name}} perderá o acesso a esta sala imediatamente. Qualquer visualizador SSH ativo será desconectado.",
-    "invite": "Convidar",
-    "inviteTitle": "Convide membros",
-    "members": "Membros",
-    "membersPanel": "Membros da sala e solicitações de controle",
-    "membersWithCount": "Membros ({{count}})",
-    "guestsWithCount": "Convidados ({{count}})",
-    "removeGuests": "Remover convidados",
-    "anonymousGuest": "Convidado",
-    "online": "online",
-    "offline": "offline",
-    "you": "(você)",
-    "hostBadge": "Hospedar",
-    "presenterBadge": "Apresentando",
-    "present": "Presente",
-    "presentTitle": "Suba ao palco",
-    "presentHost": "Hospedar",
-    "searchHosts": "Pesquisar anfitriões",
-    "noHostsFound": "Nenhum host disponível encontrado.",
-    "presentProtocol": "Protocolo",
-    "stopPresenting": "Pare de apresentar",
-    "takeOver": "Assumir",
-    "takeOverConfirmTitle": "Substituir a apresentação atual?",
-    "takeOverDescription": "{{name}} está apresentando agora. Assumir o controle desconectará todos desse palco.",
-    "emptyStage": "Ninguém está apresentando. Suba ao palco para compartilhar uma sessão.",
-    "stageLoading": "Conectando-se ao palco...",
-    "stageEnded": "A apresentação terminou.",
-    "roomEnded": "Esta reunião terminou.",
-    "presenterLabel": "{{name}} está apresentando",
-    "guestLink": "Link para convidado",
-    "guestLinkOn": "O link para convidados está ativado. Qualquer pessoa com o link pode assistir à apresentação.",
-    "guestLinkOff": "O link para visitantes está desativado.",
-    "copyLink": "Copiar link",
-    "rotateLink": "Rotacionar link",
-    "disableLink": "Desativar link",
-    "rotateLinkConfirmTitle": "Girar o link do convidado?",
-    "rotateLinkDescription": "A conexão atual deixará de funcionar imediatamente. Os dispositivos convidados SSH conectados serão desconectados.",
-    "disableLinkConfirmTitle": "Desativar o link de convidado?",
-    "disableLinkDescription": "Os visualizadores SSH anônimos serão desconectados imediatamente e a conexão atual deixará de funcionar.",
-    "linkCopied": "Link copiado",
-    "roles": "Funções",
-    "users": "Usuários",
-    "searchUsers": "Usuários da pesquisa",
-    "endConfirmTitle": "Encerrar esta reunião?",
-    "endDescription": "{{name}} será encerrado para todos e não poderá ser reaberto.",
-    "endPersistentDescription": "A apresentação ativa em {{name}} será interrompida. A sala permanece disponível para reutilização.",
-    "deleteRoom": "Excluir sala",
-    "deleteConfirmTitle": "Apagar esta sala?",
-    "deleteDescription": "{{name}} será excluído permanentemente para todos e não poderá ser desfeito.",
-    "invitedTo": "Você foi convidado para \"{{name}}\"",
-    "guest": {
-      "title": "Reunião",
-      "waiting": "Aguardando o apresentador...",
-      "linkInvalid": "Este link de convidado é inválido ou a reunião já terminou."
-    },
-    "reopenFromPanel": "Esta aba da reunião expirou. Reabra a sala no painel Reuniões.",
-    "retry": "Tentar novamente",
-    "requestControl": "Controle de solicitação",
-    "cancelControlRequest": "Cancelar solicitação",
-    "controlQueue": "Solicitações de controle",
-    "noControlRequests": "Não há solicitações pendentes.",
-    "grantControlTo": "Dê o controle para {{name}}",
-    "dismissControlRequest": "Rejeitar solicitação de controle de {{name}}",
-    "releaseControl": "Liberar controle",
-    "grantControl": "Dê o controle",
-    "revokeControl": "Retome o controle",
-    "controlRequestedBy": "{{name}} solicitou o controle",
-    "grant": "Conceder",
-    "controlBadge": "No controle",
-    "youArePresenting": "Você está apresentando em outra aba. Pare de apresentar para passar a palavra.",
-    "created": "Quarto criado",
-    "invited": "Membros convidados",
-    "roomTab": "Reunião",
-    "serverChanged": "O servidor da reunião foi alterado. Reabra esta reunião no painel Reuniões.",
-    "hostNotSynced": "Sincronize este host com o servidor de reuniões antes de apresentar.",
-    "linkRequiresServer": "Conecte este computador a um servidor Termix e crie a reunião lá para compartilhar um link da web."
-  },
-  "nav": {
-    "collab": "Reuniões"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Permitir compartilhamento de sessão",
-        "description": "Permite que sessões de terminal ao vivo, RDP, VNC e Telnet sejam compartilhadas em toda a instância. Substitui todas as configurações de compartilhamento por host quando desativada."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Permitir compartilhamento de sessão",
-        "description": "Permitir que as sessões ao vivo neste servidor sejam compartilhadas por meio de link ou com outros usuários."
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Participe de sessões e entre em salas.",
-      "description": "Compartilhe sessões ao vivo por link ou com outros usuários, e crie e participe de salas de colaboração."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Nunca",
-        "oneHour": "1 hora",
-        "oneDay": "24 horas",
-        "sevenDays": "7 dias",
-        "thirtyDays": "30 dias",
-        "custom": "Personalizado"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Compartilhou comigo",
-    "sharedBy": "Compartilhado por {{username}}",
-    "join": "Juntar",
-    "sharedSessionLabel": "{{hostName}} (compartilhado)"
-  },
-  "plugin": {
-    "name": "Compartilhamento de sessão"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/pt_PT.json b/plugins/session-sharing/locales/translated/pt_PT.json
deleted file mode 100644
index 4d008b8d2..000000000
--- a/plugins/session-sharing/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Ligar à sessão partilhada...",
-      "linkInvalid": "Este link de partilha é inválido, expirou ou foi revogado.",
-      "rateLimited": "Muitas tentativas foram feitas, tente novamente em breve.",
-      "sessionEnded": "Esta sessão terminou.",
-      "readOnlyBadge": "Somente visualização",
-      "ownerLabel": "Proprietário do anfitrião"
-    },
-    "modalTitle": "Sessão de partilha",
-    "shareButton": "Partilhar",
-    "notReadyToShare": "A sessão ainda não está pronta para ser partilhada.",
-    "modeTab": {
-      "link": "Ligação",
-      "user": "Utilizador"
-    },
-    "linkModeDescription": "Qualquer pessoa com este link pode participar, sem necessidade de criar conta.",
-    "userModeDescription": "Partilhe com um utilizador específico que já tenha acesso a este host. Caso ainda não tenha acesso, partilhe primeiro o host com ele ou utilize um link. Após a partilha, a sessão aparecerá no separador Conexões dele.",
-    "permissionLevel": {
-      "label": "Nível de permissão",
-      "readOnly": "Apenas leitura",
-      "readOnlyDescription": "É possível assistir à sessão em direto, mas não é possível digitar ou interagir.",
-      "readWrite": "Ler e escrever",
-      "readWriteDescription": "Pode digitar e interagir com a sessão da mesma forma que o proprietário."
-    },
-    "expiryLabel": "Expiração do link",
-    "createLinkButton": "Criar link",
-    "createShareButton": "Partilhar com o usuário",
-    "searchUsersPlaceholder": "Pesquisar utilizadores...",
-    "noUsersFound": "Nenhum utilizador encontrado",
-    "linkCreated": "Partilhar link criado",
-    "linkNeedsServer": "Os links de partilha funcionam apenas para sessões num servidor Termix. Ligue este host através do seu servidor ligado para o partilhar com um link.",
-    "linkCopied": "Ligação copiada para a área de transferência",
-    "copyLink": "Copiar link",
-    "shareCreated": "Sessão partilhada. Ela aparecerá no separador Conexões deles.",
-    "shareFailed": "Falha ao criar partilha",
-    "userLacksHostAccess": "Esse utilizador ainda não tem acesso a este host. Partilhe o host com ele primeiro ou use um link.",
-    "activeShares": "Ações ativas",
-    "noActiveShares": "Sem ação ativa nesta sessão.",
-    "revoke": "Revogar",
-    "revokeConfirmTitle": "Revogar essa participação?",
-    "revokeConfirmDescription": "Qualquer pessoa que utilize esta partilha perderá o acesso imediatamente.",
-    "revoked": "Ações revogadas",
-    "revokeFailed": "Falha ao revogar a participação",
-    "joinCount": "{{count}} junte-se",
-    "joinCount_other": "{{count}} entra",
-    "expiresAt": "Expira a {{date}}",
-    "linkShareBadge": "Ligação",
-    "userShareBadge": "Utilizador: {{username}}",
-    "loadSharesFailed": "Falha ao carregar partilhas ativas",
-    "remoteDisplayUnavailable": "O acesso remoto à área de trabalho não está disponível de momento.",
-    "sharedWithMe": "Sessões partilhadas comigo",
-    "customHoursPlaceholder": "Horas até à expiração do acesso"
-  },
-  "collab": {
-    "createRoom": "Quarto novo",
-    "roomName": "Nome do quarto",
-    "persistentRoom": "Sala persistente",
-    "persistentRoomHint": "As salas permanentes permanecem listadas após o término da reunião e podem ser reutilizadas.",
-    "noRooms": "Ainda não há salas. Crie uma para iniciar uma reunião.",
-    "openRoom": "Abrir",
-    "endRoom": "Encerramento da reunião",
-    "leaveRoom": "Ausência",
-    "deleteMember": "Remover",
-    "removeMember": "Remover {{name}}",
-    "removeMemberTitle": "Remover este membro?",
-    "removeMemberDescription": "{{name}} perderá o acesso a esta sala imediatamente. Qualquer visualizador SSH ativo será desligado.",
-    "invite": "Convidar",
-    "inviteTitle": "Convide os membros",
-    "members": "Membros",
-    "membersPanel": "Membros da sala e pedidos de controlo",
-    "membersWithCount": "Membros ({{count}})",
-    "guestsWithCount": "Convidados ({{count}})",
-    "removeGuests": "Remover convidados",
-    "anonymousGuest": "Convidado",
-    "online": "online",
-    "offline": "offline",
-    "you": "(tu)",
-    "hostBadge": "Servidor",
-    "presenterBadge": "Apresentando",
-    "present": "Presente",
-    "presentTitle": "Suba ao palco",
-    "presentHost": "Servidor",
-    "searchHosts": "Pesquisar hosts",
-    "noHostsFound": "Nenhum host disponível encontrado.",
-    "presentProtocol": "Protocolo",
-    "stopPresenting": "Pare de apresentar",
-    "takeOver": "Assumir",
-    "takeOverConfirmTitle": "Substituir a apresentação atual?",
-    "takeOverDescription": "{{name}} está a apresentar agora. Assumir o controlo desconectará todos desse palco.",
-    "emptyStage": "Ninguém está a apresentar. Suba ao palco para partilhar uma sessão.",
-    "stageLoading": "Ligar-se ao palco...",
-    "stageEnded": "A apresentação terminou.",
-    "roomEnded": "Esta reunião terminou.",
-    "presenterLabel": "{{name}} está a apresentar",
-    "guestLink": "Link para convidado",
-    "guestLinkOn": "O link para convidados está ativado. Qualquer pessoa com o link pode assistir à apresentação.",
-    "guestLinkOff": "O link para os visitantes está desativado.",
-    "copyLink": "Copiar link",
-    "rotateLink": "Rotacionar ligação",
-    "disableLink": "Desativar ligação",
-    "rotateLinkConfirmTitle": "Rodar o link do convidado?",
-    "rotateLinkDescription": "A ligação atual deixará de funcionar imediatamente. Os dispositivos convidados SSH ligados serão desligados.",
-    "disableLinkConfirmTitle": "Desativar o link de convidado?",
-    "disableLinkDescription": "Os visualizadores SSH anónimos serão imediatamente desligados e a ligação atual deixará de funcionar.",
-    "linkCopied": "Ligação copiada",
-    "roles": "Funções",
-    "users": "Utilizadores",
-    "searchUsers": "Os utilizadores da pesquisa",
-    "endConfirmTitle": "Encerrar esta reunião?",
-    "endDescription": "{{name}} será encerrado para todos e não poderá ser reaberto.",
-    "endPersistentDescription": "A apresentação ativa em {{name}} será interrompida. A sala continua disponível para reutilização.",
-    "deleteRoom": "Apagar sala",
-    "deleteConfirmTitle": "Apagar esta sala?",
-    "deleteDescription": "{{name}} será eliminado permanentemente para todos e não poderá ser anulado.",
-    "invitedTo": "Foi convidado para \"{{name}}\"",
-    "guest": {
-      "title": "Reunião",
-      "waiting": "À espera do apresentador...",
-      "linkInvalid": "Este link de convidado é inválido ou a reunião já terminou."
-    },
-    "reopenFromPanel": "Esta aba da reunião expirou. Volte a abrir a sala no painel Reuniões.",
-    "retry": "Repetir",
-    "requestControl": "Controle de solicitação",
-    "cancelControlRequest": "Cancelar pedido",
-    "controlQueue": "Solicitações de controlo",
-    "noControlRequests": "Não há pedidos pendentes.",
-    "grantControlTo": "Dê o controlo a {{name}}",
-    "dismissControlRequest": "Rejeitar pedido de controlo de {{name}}",
-    "releaseControl": "Libertar controle",
-    "grantControl": "Dê o controlo",
-    "revokeControl": "Retome o comando",
-    "controlRequestedBy": "{{name}} solicitou o controlo",
-    "grant": "Subvenção",
-    "controlBadge": "No controlo",
-    "youArePresenting": "Está a apresentar em outra aba. Pare de apresentar para passar a palavra.",
-    "created": "Quarto criado",
-    "invited": "Membros convidados",
-    "roomTab": "Reunião",
-    "serverChanged": "O servidor da reunião foi alterado. Reabra esta reunião no painel Reuniões.",
-    "hostNotSynced": "Sincronize este host com o servidor de reuniões antes de apresentar.",
-    "linkRequiresServer": "Ligue este computador a um servidor Termix e crie aí a reunião para partilhar um link web."
-  },
-  "nav": {
-    "collab": "Reuniões"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Permitir partilha de sessão",
-        "description": "Permite que as sessões de terminal ao vivo, RDP, VNC e Telnet sejam partilhadas em toda a instância. Substitui todas as definições de partilha por host quando desativada."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Permitir partilha de sessão",
-        "description": "Permitir que as sessões em direto neste servidor sejam partilhadas através de link ou com outros utilizadores."
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Participe em sessões e entre em salas.",
-      "description": "Partilhe sessões ao vivo por link ou com outros utilizadores, e crie e participe em salas de colaboração."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Nunca",
-        "oneHour": "1 hora",
-        "oneDay": "24 horas",
-        "sevenDays": "7 dias",
-        "thirtyDays": "30 dias",
-        "custom": "Personalizado"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Partilhou comigo",
-    "sharedBy": "Partilhado por {{username}}",
-    "join": "Juntar",
-    "sharedSessionLabel": "{{hostName}} (partilhado)"
-  },
-  "plugin": {
-    "name": "Partilha de sessão"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/ro_RO.json b/plugins/session-sharing/locales/translated/ro_RO.json
deleted file mode 100644
index a584603eb..000000000
--- a/plugins/session-sharing/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Conectare la sesiunea partajată...",
-      "linkInvalid": "Acest link de partajare este invalid, a expirat sau a fost revocat.",
-      "rateLimited": "Prea multe încercări, vă rugăm să încercați din nou în scurt timp",
-      "sessionEnded": "Această sesiune s-a încheiat",
-      "readOnlyBadge": "Numai vizualizare",
-      "ownerLabel": "Proprietarul gazdei"
-    },
-    "modalTitle": "Partajați sesiunea",
-    "shareButton": "Distribuie",
-    "notReadyToShare": "Sesiunea nu este încă gata de partajare",
-    "modeTab": {
-      "link": "Legătură",
-      "user": "Utilizator"
-    },
-    "linkModeDescription": "Oricine are acest link se poate alătura, nu este necesar un cont.",
-    "userModeDescription": "Partajați cu un anumit utilizator care are deja acces la această gazdă. Dacă nu are încă acces, partajați mai întâi gazda cu acesta sau utilizați un link în schimb. După partajare, sesiunea apare în fila Conexiuni.",
-    "permissionLevel": {
-      "label": "Nivel de permisiune",
-      "readOnly": "Doar citire",
-      "readOnlyDescription": "Pot urmări sesiunea în direct, dar nu pot tasta sau interacționa.",
-      "readWrite": "Citire-scriere",
-      "readWriteDescription": "Poate tasta și interacționa cu sesiunea la fel ca proprietarul."
-    },
-    "expiryLabel": "Expirarea linkului",
-    "createLinkButton": "Creați un link",
-    "createShareButton": "Partajează cu utilizatorul",
-    "searchUsersPlaceholder": "Căutați utilizatori...",
-    "noUsersFound": "Nu au fost găsiți utilizatori",
-    "linkCreated": "Link de partajare creat",
-    "linkNeedsServer": "Linkurile de partajare funcționează doar pentru sesiunile de pe un server Termix. Conectați această gazdă prin serverul conectat pentru a o partaja printr-un link.",
-    "linkCopied": "Linkul a fost copiat în clipboard",
-    "copyLink": "Copiază linkul",
-    "shareCreated": "Sesiune partajată. Va apărea în fila Conexiuni.",
-    "shareFailed": "Nu s-a putut crea partajarea",
-    "userLacksHostAccess": "Utilizatorul respectiv nu are încă acces la această gazdă. Partajați mai întâi gazda cu acesta sau folosiți un link în schimb.",
-    "activeShares": "Acțiuni active",
-    "noActiveShares": "Nicio partajare activă pentru această sesiune",
-    "revoke": "Revoca",
-    "revokeConfirmTitle": "Revocați această partajare?",
-    "revokeConfirmDescription": "Oricine folosește această partajare va pierde accesul imediat.",
-    "revoked": "Acțiune revocată",
-    "revokeFailed": "Nu s-a putut revoca partajarea",
-    "joinCount": "{{count}} alătură-te",
-    "joinCount_other": "{{count}} se alătură",
-    "expiresAt": "Expiră la {{date}}",
-    "linkShareBadge": "Legătură",
-    "userShareBadge": "Utilizator: {{username}}",
-    "loadSharesFailed": "Nu s-au putut încărca partajările active",
-    "remoteDisplayUnavailable": "Desktopul la distanță nu este disponibil momentan.",
-    "sharedWithMe": "Sesiuni partajate cu mine",
-    "customHoursPlaceholder": "Ore până la expirarea accesului"
-  },
-  "collab": {
-    "createRoom": "Cameră nouă",
-    "roomName": "Numele camerei",
-    "persistentRoom": "Cameră persistentă",
-    "persistentRoomHint": "Sălile persistente rămân listate după încheierea întâlnirii și pot fi reutilizate.",
-    "noRooms": "Încă nu există săli. Creează una pentru a începe o întâlnire.",
-    "openRoom": "Deschide",
-    "endRoom": "Încheiați întâlnirea",
-    "leaveRoom": "Pleacă",
-    "deleteMember": "Elimina",
-    "removeMember": "Eliminați {{name}}",
-    "removeMemberTitle": "Eliminați acest membru?",
-    "removeMemberDescription": "{{name}} va pierde imediat accesul la această cameră. Orice vizualizator SSH activ va fi deconectat.",
-    "invite": "Invita",
-    "inviteTitle": "Invită membri",
-    "members": "Membri",
-    "membersPanel": "Membrii camerei și solicitările de control",
-    "membersWithCount": "Membri ({{count}})",
-    "guestsWithCount": "Oaspeți ({{count}})",
-    "removeGuests": "Eliminați invitații",
-    "anonymousGuest": "Oaspete",
-    "online": "online",
-    "offline": "offline",
-    "you": "(tu)",
-    "hostBadge": "Gazdă",
-    "presenterBadge": "Prezentare",
-    "present": "Prezent",
-    "presentTitle": "Urcă pe scenă",
-    "presentHost": "Gazdă",
-    "searchHosts": "Căutați gazde",
-    "noHostsFound": "Nu au fost găsite gazde disponibile.",
-    "presentProtocol": "Protocol",
-    "stopPresenting": "Opriți prezentarea",
-    "takeOver": "Prelua",
-    "takeOverConfirmTitle": "Înlocuiți prezentarea curentă?",
-    "takeOverDescription": "{{name}} prezintă acum. Preluarea controlului îi va deconecta pe toți de la acea etapă.",
-    "emptyStage": "Nimeni nu prezintă. Urcă pe scenă pentru a împărtăși o sesiune.",
-    "stageLoading": "Conectarea la scenă...",
-    "stageEnded": "Prezentarea s-a încheiat",
-    "roomEnded": "Această întâlnire s-a încheiat",
-    "presenterLabel": "{{name}} prezintă",
-    "guestLink": "Link pentru invitați",
-    "guestLinkOn": "Linkul pentru invitați este activat. Oricine are linkul poate viziona scena.",
-    "guestLinkOff": "Linkul pentru invitați este dezactivat.",
-    "copyLink": "Copiază linkul",
-    "rotateLink": "Rotiți linkul",
-    "disableLink": "Dezactivați linkul",
-    "rotateLinkConfirmTitle": "Rotește linkul pentru oaspeți?",
-    "rotateLinkDescription": "Legătura curentă va înceta să funcționeze imediat. Oaspeții SSH conectați vor fi deconectați.",
-    "disableLinkConfirmTitle": "Dezactivați linkul pentru invitați?",
-    "disableLinkDescription": "Vizualizatorii SSH anonimi vor fi deconectați imediat, iar legătura curentă va înceta să funcționeze.",
-    "linkCopied": "Linkul a fost copiat",
-    "roles": "Roluri",
-    "users": "Utilizatori",
-    "searchUsers": "Căutați utilizatori",
-    "endConfirmTitle": "Încheiați această întâlnire?",
-    "endDescription": "{{name}} se va încheia pentru toată lumea și nu va putea fi redeschis.",
-    "endPersistentDescription": "Prezentarea activă din {{name}} se va opri. Sala rămâne disponibilă pentru reutilizare.",
-    "deleteRoom": "Ștergeți camera",
-    "deleteConfirmTitle": "Ștergeți această cameră?",
-    "deleteDescription": "{{name}} va fi șters definitiv pentru toată lumea și nu poate fi anulat.",
-    "invitedTo": "Ai fost invitat la „{{name}}”",
-    "guest": {
-      "title": "Întâlnire",
-      "waiting": "În așteptarea prezentatorului...",
-      "linkInvalid": "Acest link de invitat este invalid sau întâlnirea s-a încheiat."
-    },
-    "reopenFromPanel": "Această filă de întâlnire a expirat. Redeschideți sala din panoul Întâlniri.",
-    "retry": "Reîncercați",
-    "requestControl": "Cerere de control",
-    "cancelControlRequest": "Anulează cererea",
-    "controlQueue": "Cereri de control",
-    "noControlRequests": "Nicio solicitare în așteptare.",
-    "grantControlTo": "Acordă controlul către {{name}}",
-    "dismissControlRequest": "Închideți solicitarea de control a utilizatorului {{name}}",
-    "releaseControl": "Controlul eliberării",
-    "grantControl": "Oferă controlul",
-    "revokeControl": "Preia controlul",
-    "controlRequestedBy": "{{name}} a cerut controlul",
-    "grant": "Acorda",
-    "controlBadge": "În control",
-    "youArePresenting": "Prezentați într-o altă filă. Oprește prezentarea pentru a preda scena.",
-    "created": "Cameră creată",
-    "invited": "Membrii invitați",
-    "roomTab": "Întâlnire",
-    "serverChanged": "Serverul de întâlnire s-a modificat. Redeschideți această întâlnire din panoul Întâlniri.",
-    "hostNotSynced": "Sincronizează această gazdă cu serverul de întâlnire înainte de prezentare.",
-    "linkRequiresServer": "Conectează acest desktop la un server Termix și creează întâlnirea acolo pentru a partaja un link web."
-  },
-  "nav": {
-    "collab": "Întâlniri"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Permiteți partajarea sesiunii",
-        "description": "Permite partajarea sesiunilor live de terminal, RDP, VNC și Telnet la nivel de instanță. Suprascrie fiecare comutare de partajare per gazdă atunci când este dezactivată."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Permiteți partajarea sesiunii",
-        "description": "Permiteți partajarea sesiunilor live de pe această gazdă prin link sau cu alți utilizatori"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Partajați sesiuni și alăturați-vă sălilor",
-      "description": "Partajați sesiuni live prin link sau cu alți utilizatori și creați și alăturați-vă sălilor de colaborare."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Nu",
-        "oneHour": "1 oră",
-        "oneDay": "24 de ore",
-        "sevenDays": "7 zile",
-        "thirtyDays": "30 de zile",
-        "custom": "Personalizat"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Distribuit cu mine",
-    "sharedBy": "Distribuit de {{username}}",
-    "join": "Alătură-te",
-    "sharedSessionLabel": "{{hostName}} (partajat)"
-  },
-  "plugin": {
-    "name": "Partajarea sesiunii"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/ru_RU.json b/plugins/session-sharing/locales/translated/ru_RU.json
deleted file mode 100644
index a2abb03f7..000000000
--- a/plugins/session-sharing/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Подключение к общей сессии...",
-      "linkInvalid": "Данная ссылка для общего доступа недействительна, истек срок ее действия или она была аннулирована.",
-      "rateLimited": "Слишком много попыток, пожалуйста, попробуйте еще раз чуть позже.",
-      "sessionEnded": "Данная сессия завершена.",
-      "readOnlyBadge": "Только для просмотра",
-      "ownerLabel": "Владелец хостинга"
-    },
-    "modalTitle": "Совместное использование сессии",
-    "shareButton": "Поделиться",
-    "notReadyToShare": "Сессия пока не готова к публикации.",
-    "modeTab": {
-      "link": "Связь",
-      "user": "Пользователь"
-    },
-    "linkModeDescription": "Присоединиться может любой, у кого есть эта ссылка, регистрация не требуется.",
-    "userModeDescription": "Предоставьте доступ конкретному пользователю, у которого уже есть доступ к этому хосту. Если у него еще нет доступа, сначала предоставьте ему доступ к хосту или используйте ссылку. После предоставления доступа сессия отобразится на вкладке «Подключения» этого пользователя.",
-    "permissionLevel": {
-      "label": "Уровень доступа",
-      "readOnly": "Только чтение",
-      "readOnlyDescription": "Можно наблюдать за сессией в прямом эфире, но нельзя печатать или взаимодействовать с ней.",
-      "readWrite": "Чтение-запись",
-      "readWriteDescription": "Может печатать и взаимодействовать с сессией так же, как и её владелец."
-    },
-    "expiryLabel": "Срок действия ссылки истекает",
-    "createLinkButton": "Создать ссылку",
-    "createShareButton": "Поделиться с пользователем",
-    "searchUsersPlaceholder": "Поиск пользователей...",
-    "noUsersFound": "Пользователи не найдены",
-    "linkCreated": "Ссылка для обмена создана",
-    "linkNeedsServer": "Ссылки для общего доступа работают только для сессий на сервере Termix. Подключите этот хост через свой связанный сервер, чтобы поделиться им с помощью ссылки.",
-    "linkCopied": "Ссылка скопирована в буфер обмена",
-    "copyLink": "Скопировать ссылку",
-    "shareCreated": "Сессия была проведена совместно. Она отобразится на вкладке «Подключения».",
-    "shareFailed": "Не удалось создать общий ресурс.",
-    "userLacksHostAccess": "У этого пользователя пока нет доступа к данному хосту. Сначала предоставьте ему доступ к хосту или используйте ссылку.",
-    "activeShares": "Активные акции",
-    "noActiveShares": "В текущей торговой сессии нет активных акций.",
-    "revoke": "Отозвать",
-    "revokeConfirmTitle": "Отозвать эту публикацию?",
-    "revokeConfirmDescription": "Любой, кто воспользуется этой ссылкой, немедленно потеряет к ней доступ.",
-    "revoked": "Акция аннулирована",
-    "revokeFailed": "Не удалось отозвать акцию",
-    "joinCount": "{{count}} присоединиться",
-    "joinCount_other": "{{count}} присоединяется",
-    "expiresAt": "Истекает {{date}}",
-    "linkShareBadge": "Связь",
-    "userShareBadge": "Пользователь: {{username}}",
-    "loadSharesFailed": "Не удалось загрузить активные акции.",
-    "remoteDisplayUnavailable": "В настоящий момент функция удалённого доступа к рабочему столу недоступна.",
-    "sharedWithMe": "Сессии, которыми со мной поделились",
-    "customHoursPlaceholder": "Часов до окончания срока доступа"
-  },
-  "collab": {
-    "createRoom": "Новая комната",
-    "roomName": "Название комнаты",
-    "persistentRoom": "Постоянное помещение",
-    "persistentRoomHint": "Список свободных комнат сохраняется и после окончания встречи, и их можно использовать повторно.",
-    "noRooms": "Комнат пока нет. Создайте комнату, чтобы начать встречу.",
-    "openRoom": "Открыть",
-    "endRoom": "Завершение встречи",
-    "leaveRoom": "Оставлять",
-    "deleteMember": "Удалить",
-    "removeMember": "Удалить {{name}}",
-    "removeMemberTitle": "Удалить этого участника?",
-    "removeMemberDescription": "{{name}} немедленно потеряет доступ к этой комнате. Любой активный SSH-просмотрщик будет отключен.",
-    "invite": "Приглашать",
-    "inviteTitle": "Пригласить участников",
-    "members": "Члены",
-    "membersPanel": "Участники комнаты и запросы на управление",
-    "membersWithCount": "Участники ({{count}})",
-    "guestsWithCount": "Гости ({{count}})",
-    "removeGuests": "Удалить гостей",
-    "anonymousGuest": "Гость",
-    "online": "онлайн",
-    "offline": "офлайн",
-    "you": "(ты)",
-    "hostBadge": "Хост",
-    "presenterBadge": "Презентация",
-    "present": "Подарок",
-    "presentTitle": "Выходите на сцену",
-    "presentHost": "Хост",
-    "searchHosts": "Поиск хостов",
-    "noHostsFound": "Доступных хостов не найдено.",
-    "presentProtocol": "Протокол",
-    "stopPresenting": "Прекратите презентацию",
-    "takeOver": "Перенимать",
-    "takeOverConfirmTitle": "Заменить текущую презентацию?",
-    "takeOverDescription": "{{name}} сейчас выступает. Перехват инициативы отключит всех от этой сцены.",
-    "emptyStage": "Никто не выступает с презентацией. Выходите на сцену, чтобы поделиться своим опытом.",
-    "stageLoading": "Подключение к сцене...",
-    "stageEnded": "Презентация завершилась.",
-    "roomEnded": "Встреча завершена.",
-    "presenterLabel": "{{name}} представляет",
-    "guestLink": "Гостевая ссылка",
-    "guestLinkOn": "Гостевая ссылка включена. Любой, у кого есть ссылка, может посмотреть выступление.",
-    "guestLinkOff": "Гостевая ссылка отключена.",
-    "copyLink": "Скопировать ссылку",
-    "rotateLink": "Повернуть ссылку",
-    "disableLink": "Отключить ссылку",
-    "rotateLinkConfirmTitle": "Повернуть гостевую ссылку?",
-    "rotateLinkDescription": "Текущее соединение немедленно перестанет работать. Подключенные через SSH гостевые системы будут отключены.",
-    "disableLinkConfirmTitle": "Отключить гостевую ссылку?",
-    "disableLinkDescription": "Анонимные пользователи SSH-сервера будут немедленно отключены, и текущая связь перестанет работать.",
-    "linkCopied": "Ссылка скопирована",
-    "roles": "Роли",
-    "users": "Пользователи",
-    "searchUsers": "Поиск пользователей",
-    "endConfirmTitle": "Закончить это совещание?",
-    "endDescription": "{{name}} завершится для всех и не может быть возобновлено.",
-    "endPersistentDescription": "Активная презентация в {{name}} будет остановлена. Комната остается доступной для повторного использования.",
-    "deleteRoom": "Удалить комнату",
-    "deleteConfirmTitle": "Удалить эту комнату?",
-    "deleteDescription": "{{name}} будет безвозвратно удалено для всех и не может быть отменено.",
-    "invitedTo": "Вас пригласили на \"{{name}}\"",
-    "guest": {
-      "title": "Встреча",
-      "waiting": "Ожидание выступления докладчика...",
-      "linkInvalid": "Эта гостевая ссылка недействительна, или встреча завершилась."
-    },
-    "reopenFromPanel": "Срок действия этой вкладки «Встречи» истек. Откройте комнату заново на панели «Встречи».",
-    "retry": "Повторить",
-    "requestControl": "Управление запросами",
-    "cancelControlRequest": "Отменить запрос",
-    "controlQueue": "Запросы на управление",
-    "noControlRequests": "Нет ожидающих обработки запросов.",
-    "grantControlTo": "Передайте управление {{name}}",
-    "dismissControlRequest": "Отклонить запрос на управление от {{name}}",
-    "releaseControl": "Управление освобождением",
-    "grantControl": "Передайте контроль",
-    "revokeControl": "Верните себе контроль.",
-    "controlRequestedBy": "{{name}} запросил управление",
-    "grant": "Грант",
-    "controlBadge": "Под контролем",
-    "youArePresenting": "Вы ведёте презентацию в другой вкладке. Прекратите презентацию, чтобы передать слово другому пользователю.",
-    "created": "Комната создана",
-    "invited": "Приглашены члены",
-    "roomTab": "Встреча",
-    "serverChanged": "Сервер совещания изменился. Откройте это совещание заново из панели «Совещания».",
-    "hostNotSynced": "Перед началом презентации синхронизируйте этого организатора с сервером совещания.",
-    "linkRequiresServer": "Подключите этот компьютер к серверу Termix и создайте там собрание, чтобы поделиться веб-ссылкой."
-  },
-  "nav": {
-    "collab": "Встречи"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Разрешить совместное использование сеанса",
-        "description": "Разрешить общий доступ к сеансам Live Terminal, RDP, VNC и Telnet для всего экземпляра. При отключении этой функции отменяет все настройки общего доступа для отдельных хостов."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Разрешить совместное использование сеанса",
-        "description": "Разрешите делиться записями онлайн-сессий на этом хостинге по ссылке или с другими пользователями."
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Делитесь сессиями и присоединяйтесь к комнатам.",
-      "description": "Делитесь записями онлайн-сессий по ссылке или с другими пользователями, а также создавайте и присоединяйтесь к комнатам для совместной работы."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Никогда",
-        "oneHour": "1 час",
-        "oneDay": "24 часа",
-        "sevenDays": "7 дней",
-        "thirtyDays": "30 дней",
-        "custom": "Настроить"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Поделился со мной",
-    "sharedBy": "Поделился {{username}}",
-    "join": "Присоединиться",
-    "sharedSessionLabel": "{{hostName}} (совместно)"
-  },
-  "plugin": {
-    "name": "Совместное использование сессии"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/sr_SP.json b/plugins/session-sharing/locales/translated/sr_SP.json
deleted file mode 100644
index 19b530bb9..000000000
--- a/plugins/session-sharing/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Повезивање са дељеном сесијом...",
-      "linkInvalid": "Овај линк за дељење је неважећи, истекао је или је опозван",
-      "rateLimited": "Превише покушаја, покушајте поново ускоро",
-      "sessionEnded": "Ова сесија је завршена",
-      "readOnlyBadge": "Само преглед",
-      "ownerLabel": "Власник домаћина"
-    },
-    "modalTitle": "Дели сесију",
-    "shareButton": "Дели",
-    "notReadyToShare": "Сесија још није спремна за дељење",
-    "modeTab": {
-      "link": "Линк",
-      "user": "Корисник"
-    },
-    "linkModeDescription": "Свако ко има овај линк може да се придружи, није потребан налог.",
-    "userModeDescription": "Делите са одређеним корисником који већ има приступ овом хосту. Ако још немају приступ, прво поделите хост са њима или користите линк. Након дељења, сесија се појављује на њиховој картици „Везе“.",
-    "permissionLevel": {
-      "label": "Ниво дозволе",
-      "readOnly": "Само за читање",
-      "readOnlyDescription": "Може да гледа сесију уживо, али не може да куца или да комуницира.",
-      "readWrite": "Читање и писање",
-      "readWriteDescription": "Може да куца и интерагује са сесијом баш као и власник."
-    },
-    "expiryLabel": "Истек линка",
-    "createLinkButton": "Направи линк",
-    "createShareButton": "Подели са корисником",
-    "searchUsersPlaceholder": "Претражи кориснике...",
-    "noUsersFound": "Није пронађен ниједан корисник",
-    "linkCreated": "Линк за дељење је направљен",
-    "linkNeedsServer": "Линкови за дељење раде само за сесије на Termix серверу. Повежите овај хост преко повезаног сервера да бисте га делили помоћу линка.",
-    "linkCopied": "Линк је копиран у међуспремник",
-    "copyLink": "Копирај линк",
-    "shareCreated": "Сесија је дељена. Појавиће се на њиховој картици „Везе“.",
-    "shareFailed": "Није успело креирање дељења",
-    "userLacksHostAccess": "Тај корисник још увек нема приступ овом хосту. Прво поделите хост са њим или користите линк.",
-    "activeShares": "Активне акције",
-    "noActiveShares": "Нема активних дељења за ову сесију",
-    "revoke": "Поништи",
-    "revokeConfirmTitle": "Да ли желите да опозовете ово дељење?",
-    "revokeConfirmDescription": "Свако ко користи ово дељење ће одмах изгубити приступ.",
-    "revoked": "Дељење опозвано",
-    "revokeFailed": "Опозивање дељења није успело",
-    "joinCount": "{{count}} придружи се",
-    "joinCount_other": "{{count}} придруживања",
-    "expiresAt": "Истиче {{date}}",
-    "linkShareBadge": "Линк",
-    "userShareBadge": "Корисник: {{username}}",
-    "loadSharesFailed": "Учитавање активних дељења није успело",
-    "remoteDisplayUnavailable": "Удаљена радна површина тренутно није доступна.",
-    "sharedWithMe": "Сесије дељене са мном",
-    "customHoursPlaceholder": "Сати до истека приступа"
-  },
-  "collab": {
-    "createRoom": "Нова соба",
-    "roomName": "Назив собе",
-    "persistentRoom": "Трајна соба",
-    "persistentRoomHint": "Трајне собе остају наведене након завршетка састанка и могу се поново користити.",
-    "noRooms": "Још нема соба. Направите једну да бисте започели састанак.",
-    "openRoom": "Отворено",
-    "endRoom": "Заврши састанак",
-    "leaveRoom": "Одиђи",
-    "deleteMember": "Уклони",
-    "removeMember": "Уклони {{name}}",
-    "removeMemberTitle": "Уклонити овог члана?",
-    "removeMemberDescription": "{{name}} ће одмах изгубити приступ овој соби. Сваки активни SSH гледалац ће бити искључен.",
-    "invite": "Позови",
-    "inviteTitle": "Позовите чланове",
-    "members": "Чланови",
-    "membersPanel": "Чланови собе и захтеви за контролу",
-    "membersWithCount": "Чланови ({{count}})",
-    "guestsWithCount": "Гости ({{count}})",
-    "removeGuests": "Уклони госте",
-    "anonymousGuest": "Гост",
-    "online": "онлајн",
-    "offline": "офлајн",
-    "you": "(ти)",
-    "hostBadge": "Домаћин",
-    "presenterBadge": "Презентација",
-    "present": "Присутан",
-    "presentTitle": "Изађи на сцену",
-    "presentHost": "Домаћин",
-    "searchHosts": "Претрага хостова",
-    "noHostsFound": "Није пронађен ниједан доступан хост.",
-    "presentProtocol": "Протокол",
-    "stopPresenting": "Заустави презентацију",
-    "takeOver": "Преузми",
-    "takeOverConfirmTitle": "Заменити тренутну презентацију?",
-    "takeOverDescription": "{{name}} тренутно презентује. Преузимање ће искључити све са те сцене.",
-    "emptyStage": "Нико не презентује. Изађите на бину да бисте поделили сесију.",
-    "stageLoading": "Повезивање са сценом...",
-    "stageEnded": "Презентација је завршена",
-    "roomEnded": "Овај састанак је завршен",
-    "presenterLabel": "{{name}} презентује",
-    "guestLink": "Гостујући линк",
-    "guestLinkOn": "Линк за госте је укључен. Свако ко има линк може да гледа сцену.",
-    "guestLinkOff": "Линк за госте је искључен.",
-    "copyLink": "Копирај линк",
-    "rotateLink": "Ротирај линк",
-    "disableLink": "Онемогући везу",
-    "rotateLinkConfirmTitle": "Ротирати линк за госте?",
-    "rotateLinkDescription": "Тренутна веза ће одмах престати да ради. Повезани SSH гости ће бити искључени.",
-    "disableLinkConfirmTitle": "Онемогућити линк за госте?",
-    "disableLinkDescription": "Анонимни SSH гледаоци ће одмах бити прекинути везу и тренутна веза ће престати да ради.",
-    "linkCopied": "Линк је копиран",
-    "roles": "Улоге",
-    "users": "Корисници",
-    "searchUsers": "Претрага корисника",
-    "endConfirmTitle": "Да ли желите да завршите овај састанак?",
-    "endDescription": "{{name}} ће бити завршен за све и не може се поново отворити.",
-    "endPersistentDescription": "Активна презентација у {{name}} ће се зауставити. Просторија остаје доступна за поновну употребу.",
-    "deleteRoom": "Обриши собу",
-    "deleteConfirmTitle": "Да ли желите да избришете ову собу?",
-    "deleteDescription": "{{name}} ће бити трајно обрисан за све и не може се поништити.",
-    "invitedTo": "Позвани сте у „{{name}}“",
-    "guest": {
-      "title": "Састанак",
-      "waiting": "Чекање водитеља...",
-      "linkInvalid": "Овај линк за госте је неважећи или је састанак завршен"
-    },
-    "reopenFromPanel": "Ова картица састанка је истекла. Поново отворите просторију из панела Састанци.",
-    "retry": "Покушај поново",
-    "requestControl": "Захтевај контролу",
-    "cancelControlRequest": "Откажи захтев",
-    "controlQueue": "Захтеви за контролу",
-    "noControlRequests": "Нема захтева на чекању.",
-    "grantControlTo": "Дајте контролу кориснику {{name}}",
-    "dismissControlRequest": "Одбаци захтев за контролу корисника {{name}}",
-    "releaseControl": "Контрола ослобађања",
-    "grantControl": "Дајте контролу",
-    "revokeControl": "Преузмите контролу назад",
-    "controlRequestedBy": "{{name}} је затражио контролу",
-    "grant": "Грант",
-    "controlBadge": "Под контролом",
-    "youArePresenting": "Презентујете у другој картици. Прекините презентацију да бисте предали сцену.",
-    "created": "Соба је направљена",
-    "invited": "Чланови позвани",
-    "roomTab": "Састанак",
-    "serverChanged": "Сервер за састанке се променио. Поново отворите овај састанак из панела Састанци.",
-    "hostNotSynced": "Синхронизујте овог хоста са сервером за састанке пре презентације.",
-    "linkRequiresServer": "Повежите ову радну површину са Termix сервером и тамо креирајте састанак да бисте делили веб везу."
-  },
-  "nav": {
-    "collab": "Састанци"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Дозволи дељење сесије",
-        "description": "Дозвољава дељење сесија уживо терминала, RDP, VNC и Telnet сесија на нивоу целе инстанце. Замењује сваки прекидач за дељење по хосту када је онемогућен."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Дозволи дељење сесије",
-        "description": "Дозволите дељење сесија уживо на овом хосту путем линка или са другим корисницима"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Делите сесије и придружите се собама",
-      "description": "Делите сесије уживо путем линка или са другим корисницима, креирајте собе за сарадњу и придружите им се."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Никад",
-        "oneHour": "1 сат",
-        "oneDay": "24 сата",
-        "sevenDays": "7 дана",
-        "thirtyDays": "30 дана",
-        "custom": "Прилагођено"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Дељено са мном",
-    "sharedBy": "Дели {{username}}",
-    "join": "Придружи се",
-    "sharedSessionLabel": "{{hostName}} (дељено)"
-  },
-  "plugin": {
-    "name": "Дељење сесије"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/sv_SE.json b/plugins/session-sharing/locales/translated/sv_SE.json
deleted file mode 100644
index 4c2c54508..000000000
--- a/plugins/session-sharing/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Ansluter till delad session...",
-      "linkInvalid": "Den här delningslänken är ogiltig, har löpt ut eller har återkallats",
-      "rateLimited": "För många försök, försök igen snart",
-      "sessionEnded": "Den här sessionen är avslutad",
-      "readOnlyBadge": "Endast visning",
-      "ownerLabel": "Värdägare"
-    },
-    "modalTitle": "Dela session",
-    "shareButton": "Dela",
-    "notReadyToShare": "Sessionen är inte redo att delas ännu",
-    "modeTab": {
-      "link": "Länk",
-      "user": "Användare"
-    },
-    "linkModeDescription": "Vem som helst med den här länken kan gå med, inget konto krävs.",
-    "userModeDescription": "Dela med en specifik användare som redan har åtkomst till den här värden. Om de inte har åtkomst ännu, dela värden med dem först eller använd en länk istället. När sessionen har delats visas den på deras flik Anslutningar.",
-    "permissionLevel": {
-      "label": "Behörighetsnivå",
-      "readOnly": "Skrivskyddad",
-      "readOnlyDescription": "Kan titta på sessionen live men kan inte skriva eller interagera.",
-      "readWrite": "Läs-skriv",
-      "readWriteDescription": "Kan skriva och interagera med sessionen precis som ägaren."
-    },
-    "expiryLabel": "Länkens utgångsdatum",
-    "createLinkButton": "Skapa länk",
-    "createShareButton": "Dela med användaren",
-    "searchUsersPlaceholder": "Sök användare...",
-    "noUsersFound": "Inga användare hittades",
-    "linkCreated": "Delningslänk skapad",
-    "linkNeedsServer": "Delningslänkar fungerar bara för sessioner på en Termix-server. Anslut den här värden via din länkade server för att dela den med en länk.",
-    "linkCopied": "Länk kopierad till urklipp",
-    "copyLink": "Kopiera länk",
-    "shareCreated": "Sessionen delade. Den kommer att visas på fliken Anslutningar.",
-    "shareFailed": "Misslyckades med att skapa delningen",
-    "userLacksHostAccess": "Den användaren har inte åtkomst till den här värden ännu. Dela värden med dem först, eller använd en länk istället.",
-    "activeShares": "Aktiva aktier",
-    "noActiveShares": "Inga aktiva delningar för den här sessionen",
-    "revoke": "Återkalla",
-    "revokeConfirmTitle": "Återkalla den här delningen?",
-    "revokeConfirmDescription": "Alla som använder den här delningen kommer att förlora åtkomsten omedelbart.",
-    "revoked": "Delning återkallad",
-    "revokeFailed": "Misslyckades med att återkalla delningen",
-    "joinCount": "{{count}} gå med",
-    "joinCount_other": "{{count}} ansluter sig",
-    "expiresAt": "Utgångsdatum {{date}}",
-    "linkShareBadge": "Länk",
-    "userShareBadge": "Användare: {{username}}",
-    "loadSharesFailed": "Misslyckades med att läsa in aktiva delningar",
-    "remoteDisplayUnavailable": "Fjärrskrivbord är inte tillgängligt just nu.",
-    "sharedWithMe": "Sessioner delades med mig",
-    "customHoursPlaceholder": "Timmar tills åtkomsten upphör"
-  },
-  "collab": {
-    "createRoom": "Nytt rum",
-    "roomName": "Rumsnamn",
-    "persistentRoom": "Permanent rum",
-    "persistentRoomHint": "Beständiga rum finns kvar i listan efter att mötet är slut och kan återanvändas.",
-    "noRooms": "Inga rum ännu. Skapa ett för att starta ett möte.",
-    "openRoom": "Öppna",
-    "endRoom": "Avsluta mötet",
-    "leaveRoom": "Lämna",
-    "deleteMember": "Ta bort",
-    "removeMember": "Ta bort {{name}}",
-    "removeMemberTitle": "Ta bort den här medlemmen?",
-    "removeMemberDescription": "{{name}} kommer att förlora åtkomst till det här rummet omedelbart. Alla aktiva SSH-läsare kommer att kopplas bort.",
-    "invite": "Bjuda",
-    "inviteTitle": "Bjud in medlemmar",
-    "members": "Medlemmar",
-    "membersPanel": "Rumsmedlemmar och kontrollförfrågningar",
-    "membersWithCount": "Medlemmar ({{count}})",
-    "guestsWithCount": "Gäster ({{count}})",
-    "removeGuests": "Ta bort gäster",
-    "anonymousGuest": "Gäst",
-    "online": "online",
-    "offline": "off-line",
-    "you": "(du)",
-    "hostBadge": "Värd",
-    "presenterBadge": "Presenterar",
-    "present": "Presentera",
-    "presentTitle": "Inta scenen",
-    "presentHost": "Värd",
-    "searchHosts": "Sök värdar",
-    "noHostsFound": "Inga tillgängliga värdar hittades.",
-    "presentProtocol": "Protokoll",
-    "stopPresenting": "Sluta presentera",
-    "takeOver": "Ta över",
-    "takeOverConfirmTitle": "Ersätta den aktuella presentationen?",
-    "takeOverDescription": "{{name}} presenterar nu. Att ta över kommer att koppla bort alla från den scenen.",
-    "emptyStage": "Ingen presenterar. Gå ut på scenen för att dela en session.",
-    "stageLoading": "Ansluter till scenen...",
-    "stageEnded": "Presentationen avslutades",
-    "roomEnded": "Det här mötet har avslutats",
-    "presenterLabel": "{{name}} presenterar",
-    "guestLink": "Gästlänk",
-    "guestLinkOn": "Gästlänken är aktiverad. Alla med länken kan titta på scenen.",
-    "guestLinkOff": "Gästlänken är avstängd.",
-    "copyLink": "Kopiera länk",
-    "rotateLink": "Rotera länken",
-    "disableLink": "Inaktivera länk",
-    "rotateLinkConfirmTitle": "Rotera gästlänken?",
-    "rotateLinkDescription": "Den aktuella länken kommer att sluta fungera omedelbart. Anslutna SSH-gäster kommer att kopplas bort.",
-    "disableLinkConfirmTitle": "Inaktivera gästlänken?",
-    "disableLinkDescription": "Anonyma SSH-användare kommer att kopplas bort omedelbart och den aktuella länken kommer att sluta fungera.",
-    "linkCopied": "Länk kopierad",
-    "roles": "Roller",
-    "users": "Användare",
-    "searchUsers": "Sök användare",
-    "endConfirmTitle": "Avsluta det här mötet?",
-    "endDescription": "{{name}} kommer att upphöra för alla och kan inte öppnas igen.",
-    "endPersistentDescription": "Den aktiva presentationen i {{name}} kommer att stoppas. Rummet är fortfarande tillgängligt för återanvändning.",
-    "deleteRoom": "Ta bort rum",
-    "deleteConfirmTitle": "Radera det här rummet?",
-    "deleteDescription": "{{name}} kommer att raderas permanent för alla och kan inte ångras.",
-    "invitedTo": "Du blev inbjuden till \"{{name}}\"",
-    "guest": {
-      "title": "Möte",
-      "waiting": "Väntar på programledaren...",
-      "linkInvalid": "Denna gästlänk är ogiltig eller så har mötet avslutats"
-    },
-    "reopenFromPanel": "Den här mötesfliken har upphört att gälla. Öppna rummet igen från panelen Möten.",
-    "retry": "Försöka igen",
-    "requestControl": "Begäran om kontroll",
-    "cancelControlRequest": "Avbryt begäran",
-    "controlQueue": "Kontrollförfrågningar",
-    "noControlRequests": "Inga väntande förfrågningar.",
-    "grantControlTo": "Ge kontroll till {{name}}",
-    "dismissControlRequest": "Avvisa kontrollbegäran från {{name}}",
-    "releaseControl": "Släppkontroll",
-    "grantControl": "Ge kontroll",
-    "revokeControl": "Ta tillbaka kontrollen",
-    "controlRequestedBy": "{{name}} bad om kontroll",
-    "grant": "Bevilja",
-    "controlBadge": "I kontroll",
-    "youArePresenting": "Du presenterar i en annan flik. Avbryt presentationen för att lämna över scenen.",
-    "created": "Rum skapat",
-    "invited": "Medlemmar inbjudna",
-    "roomTab": "Möte",
-    "serverChanged": "Mötesservern har ändrats. Öppna mötet igen från panelen Möten.",
-    "hostNotSynced": "Synkronisera den här värden med mötesservern innan presentationen.",
-    "linkRequiresServer": "Länka den här skrivbordsmiljön till en Termix-server och skapa mötet där för att dela en webblänk."
-  },
-  "nav": {
-    "collab": "Möten"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Tillåt sessionsdelning",
-        "description": "Tillåt att liveterminal-, RDP-, VNC- och Telnet-sessioner delas instansövergripande. Åsidosätter alla delningsknappar per värd när de är inaktiverade."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Tillåt sessionsdelning",
-        "description": "Tillåt att livesessioner på den här värden delas via länk eller med andra användare"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Dela sessioner och gå med i rum",
-      "description": "Dela livesessioner via länk eller med andra användare, och skapa och gå med i samarbetsrum."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Aldrig",
-        "oneHour": "1 timme",
-        "oneDay": "24 timmar",
-        "sevenDays": "7 dagar",
-        "thirtyDays": "30 dagar",
-        "custom": "Beställnings"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Delade med mig",
-    "sharedBy": "Delat av {{username}}",
-    "join": "Ansluta sig till",
-    "sharedSessionLabel": "{{hostName}} (delad)"
-  },
-  "plugin": {
-    "name": "Sessionsdelning"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/th_TH.json b/plugins/session-sharing/locales/translated/th_TH.json
deleted file mode 100644
index 7f6c674be..000000000
--- a/plugins/session-sharing/locales/translated/th_TH.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "กำลังเชื่อมต่อกับเซสชันที่ใช้ร่วมกัน...",
-      "linkInvalid": "ลิงก์แชร์นี้ไม่ถูกต้อง หมดอายุ หรือถูกยกเลิกแล้ว",
-      "rateLimited": "พยายามหลายครั้งเกินไป โปรดลองใหม่อีกครั้งในภายหลัง",
-      "sessionEnded": "การประชุมครั้งนี้สิ้นสุดลงแล้ว",
-      "readOnlyBadge": "ดูได้อย่างเดียว",
-      "ownerLabel": "เจ้าของที่พัก"
-    },
-    "modalTitle": "เซสชั่นการแบ่งปัน",
-    "shareButton": "แบ่งปัน",
-    "notReadyToShare": "เซสชั่นยังไม่พร้อมให้แชร์",
-    "modeTab": {
-      "link": "ลิงก์",
-      "user": "ผู้ใช้"
-    },
-    "linkModeDescription": "ใครก็ตามที่มีลิงก์นี้สามารถเข้าร่วมได้ ไม่จำเป็นต้องมีบัญชีผู้ใช้",
-    "userModeDescription": "แชร์กับผู้ใช้เฉพาะรายที่มีสิทธิ์เข้าถึงโฮสต์นี้อยู่แล้ว หากพวกเขายังไม่มีสิทธิ์เข้าถึง ให้แชร์โฮสต์กับพวกเขาก่อน หรือใช้ลิงก์แทน เมื่อแชร์แล้ว เซสชันจะปรากฏในแท็บการเชื่อมต่อของพวกเขา",
-    "permissionLevel": {
-      "label": "ระดับการอนุญาต",
-      "readOnly": "อ่านอย่างเดียว",
-      "readOnlyDescription": "สามารถรับชมการประชุมสดได้ แต่ไม่สามารถพิมพ์หรือโต้ตอบได้",
-      "readWrite": "อ่าน-เขียน",
-      "readWriteDescription": "สามารถพิมพ์และโต้ตอบกับเซสชันได้เหมือนกับเจ้าของเซสชัน"
-    },
-    "expiryLabel": "ลิงก์หมดอายุ",
-    "createLinkButton": "สร้างลิงก์",
-    "createShareButton": "แชร์กับผู้ใช้",
-    "searchUsersPlaceholder": "ค้นหาผู้ใช้...",
-    "noUsersFound": "ไม่พบผู้ใช้งาน",
-    "linkCreated": "สร้างลิงก์สำหรับแชร์แล้ว",
-    "linkNeedsServer": "ลิงก์สำหรับแชร์ใช้งานได้เฉพาะกับเซสชันบนเซิร์ฟเวอร์ Termix เท่านั้น เชื่อมต่อโฮสต์นี้ผ่านเซิร์ฟเวอร์ที่เชื่อมโยงของคุณเพื่อแชร์ด้วยลิงก์",
-    "linkCopied": "คัดลอกลิงก์ไปยังคลิปบอร์ดแล้ว",
-    "copyLink": "คัดลิงก์",
-    "shareCreated": "แชร์เซสชันแล้ว เซสชันนั้นจะปรากฏในแท็บการเชื่อมต่อของพวกเขา",
-    "shareFailed": "ไม่สามารถสร้างการแชร์ได้",
-    "userLacksHostAccess": "ผู้ใช้รายนั้นยังไม่มีสิทธิ์เข้าถึงโฮสต์นี้ โปรดแชร์โฮสต์ให้พวกเขาก่อน หรือใช้ลิงก์แทน",
-    "activeShares": "หุ้นที่ใช้งานอยู่",
-    "noActiveShares": "ไม่มีหุ้นที่เปิดซื้อขายในรอบนี้",
-    "revoke": "ถอน",
-    "revokeConfirmTitle": "ต้องการยกเลิกการแชร์นี้หรือไม่?",
-    "revokeConfirmDescription": "ใครก็ตามที่ใช้ลิงก์นี้จะเสียสิทธิ์การเข้าถึงทันที",
-    "revoked": "หุ้นถูกเพิกถอน",
-    "revokeFailed": "ไม่สามารถเพิกถอนหุ้นได้",
-    "joinCount": "{{count}} เข้าร่วม",
-    "joinCount_other": "{{count}} เข้าร่วม",
-    "expiresAt": "หมดอายุ {{date}}",
-    "linkShareBadge": "ลิงก์",
-    "userShareBadge": "ผู้ใช้: {{username}}",
-    "loadSharesFailed": "ไม่สามารถโหลดหุ้นที่ใช้งานอยู่ได้",
-    "remoteDisplayUnavailable": "ขณะนี้ยังไม่สามารถใช้งานรีโมทเดสก์ท็อปได้",
-    "sharedWithMe": "เซสชั่นที่แชร์กับฉัน",
-    "customHoursPlaceholder": "เหลือเวลาอีกกี่ชั่วโมงก่อนที่สิทธิ์การเข้าถึงจะหมดอายุ"
-  },
-  "collab": {
-    "createRoom": "ห้องใหม่",
-    "roomName": "ชื่อห้อง",
-    "persistentRoom": "ห้องที่คงอยู่",
-    "persistentRoomHint": "ห้องประชุมที่ตั้งค่าไว้ถาวรจะยังคงอยู่ในรายการหลังจากสิ้นสุดการประชุมและสามารถนำกลับมาใช้ใหม่ได้",
-    "noRooms": "ยังไม่มีห้องประชุม สร้างห้องประชุมเพื่อเริ่มการประชุม",
-    "openRoom": "เปิด",
-    "endRoom": "สิ้นสุดการประชุม",
-    "leaveRoom": "ออกจาก",
-    "deleteMember": "ลบ",
-    "removeMember": "ลบ {{name}}",
-    "removeMemberTitle": "ลบสมาชิกนี้ออก?",
-    "removeMemberDescription": "{{name}} จะเสียสิทธิ์ในการเข้าถึงห้องนี้ทันที โปรแกรมดู SSH ที่ใช้งานอยู่จะถูกตัดการเชื่อมต่อ",
-    "invite": "เชิญ",
-    "inviteTitle": "เชิญสมาชิก",
-    "members": "สมาชิก",
-    "membersPanel": "สมาชิกห้องและคำขอควบคุม",
-    "membersWithCount": "สมาชิก ({{count}})",
-    "guestsWithCount": "แขก ({{count}})",
-    "removeGuests": "ไล่แขกออก",
-    "anonymousGuest": "แขก",
-    "online": "ออนไลน์",
-    "offline": "ออฟไลน์",
-    "you": "(คุณ)",
-    "hostBadge": "เจ้าภาพ",
-    "presenterBadge": "นำเสนอ",
-    "present": "ปัจจุบัน",
-    "presentTitle": "ขึ้นเวที",
-    "presentHost": "เจ้าภาพ",
-    "searchHosts": "ค้นหาโฮสต์",
-    "noHostsFound": "ไม่พบโฮสต์ที่ใช้งานได้",
-    "presentProtocol": "โปรโตคอล",
-    "stopPresenting": "หยุดการนำเสนอ",
-    "takeOver": "เข้ายึดครอง",
-    "takeOverConfirmTitle": "ต้องการเปลี่ยนรูปแบบการนำเสนอปัจจุบันหรือไม่?",
-    "takeOverDescription": "{{name}} กำลังนำเสนออยู่ การเข้าควบคุมจะตัดการเชื่อมต่อทุกคนจากเวทีนั้น",
-    "emptyStage": "ไม่มีใครกำลังนำเสนออยู่ เชิญขึ้นเวทีเพื่อร่วมแบ่งปันช่วงการนำเสนอได้เลย",
-    "stageLoading": "เชื่อมต่อกับเวที...",
-    "stageEnded": "การนำเสนอสิ้นสุดลงแล้ว",
-    "roomEnded": "การประชุมนี้ได้สิ้นสุดลงแล้ว",
-    "presenterLabel": "{{name}} กำลังนำเสนอ",
-    "guestLink": "ลิงก์สำหรับแขก",
-    "guestLinkOn": "ลิงก์สำหรับแขกรับเชิญเปิดใช้งานแล้ว ใครก็ตามที่มีลิงก์สามารถรับชมการแสดงสดได้",
-    "guestLinkOff": "ลิงก์สำหรับผู้เยี่ยมชมถูกปิดใช้งาน",
-    "copyLink": "คัดลิงก์",
-    "rotateLink": "หมุนลิงก์",
-    "disableLink": "ปิดใช้งานลิงก์",
-    "rotateLinkConfirmTitle": "หมุนลิงก์สำหรับแขกรับเชิญหรือไม่?",
-    "rotateLinkDescription": "ลิงก์ปัจจุบันจะหยุดทำงานทันที ผู้ใช้งาน SSH ที่เชื่อมต่ออยู่จะถูกตัดการเชื่อมต่อ",
-    "disableLinkConfirmTitle": "ปิดใช้งานลิงก์สำหรับแขกใช่ไหม?",
-    "disableLinkDescription": "ผู้ใช้งาน SSH ที่ไม่ระบุตัวตนจะถูกตัดการเชื่อมต่อทันที และลิงก์ปัจจุบันจะหยุดทำงาน",
-    "linkCopied": "คัดลอกลิงก์แล้ว",
-    "roles": "บทบาท",
-    "users": "ผู้ใช้",
-    "searchUsers": "ค้นหาผู้ใช้",
-    "endConfirmTitle": "จบการประชุมนี้?",
-    "endDescription": "{{name}} จะสิ้นสุดลงสำหรับทุกคนและไม่สามารถเปิดใช้งานใหม่ได้อีก",
-    "endPersistentDescription": "การนำเสนอใน {{name}} จะหยุดลง ห้องยังคงพร้อมใช้งานได้ตามปกติ",
-    "deleteRoom": "ลบห้อง",
-    "deleteConfirmTitle": "ลบห้องนี้?",
-    "deleteDescription": "{{name}} จะถูกลบอย่างถาวรสำหรับทุกคนและไม่สามารถกู้คืนได้",
-    "invitedTo": "คุณได้รับเชิญไปที่ \"{{name}}\"",
-    "guest": {
-      "title": "การประชุม",
-      "waiting": "กำลังรอผู้ประกาศ...",
-      "linkInvalid": "ลิงก์สำหรับผู้เข้าร่วมนี้ไม่ถูกต้อง หรือการประชุมได้สิ้นสุดลงแล้ว"
-    },
-    "reopenFromPanel": "แท็บการประชุมนี้หมดอายุแล้ว โปรดเปิดห้องประชุมอีกครั้งจากแผงการประชุม",
-    "retry": "ลองใหม่อีกครั้ง",
-    "requestControl": "การควบคุมคำขอ",
-    "cancelControlRequest": "คำขอการยกเลิก",
-    "controlQueue": "คำขอควบคุม",
-    "noControlRequests": "ไม่มีคำขอที่รอการดำเนินการ",
-    "grantControlTo": "มอบการควบคุมให้กับ {{name}}",
-    "dismissControlRequest": "ยกเลิกคำขอควบคุมของ {{name}}",
-    "releaseControl": "ปล่อยการควบคุม",
-    "grantControl": "มอบการควบคุม",
-    "revokeControl": "ทวงคืนการควบคุม",
-    "controlRequestedBy": "{{name}} ขอควบคุม",
-    "grant": "ยินยอม",
-    "controlBadge": "ควบคุมได้",
-    "youArePresenting": "คุณกำลังนำเสนออยู่ในแท็บอื่น โปรดหยุดการนำเสนอเพื่อส่งต่อให้ผู้อื่น",
-    "created": "สร้างห้อง",
-    "invited": "สมาชิกที่ได้รับเชิญ",
-    "roomTab": "การประชุม",
-    "serverChanged": "เซิร์ฟเวอร์การประชุมมีการเปลี่ยนแปลง โปรดเปิดการประชุมนี้อีกครั้งจากแผงการประชุม",
-    "hostNotSynced": "โปรดซิงค์โฮสต์นี้กับเซิร์ฟเวอร์การประชุมก่อนเริ่มการนำเสนอ",
-    "linkRequiresServer": "เชื่อมต่อเดสก์ท็อปเครื่องนี้กับเซิร์ฟเวอร์ Termix และสร้างการประชุมที่นั่นเพื่อแชร์ลิงก์เว็บ"
-  },
-  "nav": {
-    "collab": "การประชุม"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "อนุญาตการแชร์เซสชัน",
-        "description": "อนุญาตให้แชร์เซสชันเทอร์มินัลสด, RDP, VNC และ Telnet ทั่วทั้งอินสแตนซ์ การตั้งค่านี้จะแทนที่การตั้งค่าการแชร์ต่อโฮสต์ทั้งหมดเมื่อปิดใช้งานอยู่"
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "อนุญาตการแชร์เซสชัน",
-        "description": "อนุญาตให้แชร์เซสชันสดบนโฮสต์นี้ผ่านลิงก์หรือกับผู้ใช้รายอื่น"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "แชร์เซสชันและเข้าร่วมห้อง",
-      "description": "แชร์เซสชันสดผ่านลิงก์หรือกับผู้ใช้รายอื่น และสร้างและเข้าร่วมห้องทำงานร่วมกันได้"
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "ไม่เคย",
-        "oneHour": "1 ชั่วโมง",
-        "oneDay": "24 ชั่วโมง",
-        "sevenDays": "7 วัน",
-        "thirtyDays": "30 วัน",
-        "custom": "กำหนดเอง"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "แชร์กับฉัน",
-    "sharedBy": "แชร์โดย {{username}}",
-    "join": "เข้าร่วม",
-    "sharedSessionLabel": "{{hostName}} (แชร์)"
-  },
-  "plugin": {
-    "name": "การแบ่งปันเซสชัน"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/tr_TR.json b/plugins/session-sharing/locales/translated/tr_TR.json
deleted file mode 100644
index d921a76b2..000000000
--- a/plugins/session-sharing/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Paylaşılan oturuma bağlanılıyor...",
-      "linkInvalid": "Bu paylaşım bağlantısı geçersiz, süresi dolmuş veya iptal edilmiş.",
-      "rateLimited": "Çok fazla deneme yapıldı, lütfen kısa süre sonra tekrar deneyin.",
-      "sessionEnded": "Bu oturum sona erdi.",
-      "readOnlyBadge": "Yalnızca görüntüle",
-      "ownerLabel": "Ev sahibi"
-    },
-    "modalTitle": "Paylaşım oturumu",
-    "shareButton": "Paylaş",
-    "notReadyToShare": "Oturum henüz paylaşılmaya hazır değil.",
-    "modeTab": {
-      "link": "Bağlantı",
-      "user": "Kullanıcı"
-    },
-    "linkModeDescription": "Bu bağlantıya sahip herkes katılabilir, hesap gerekmez.",
-    "userModeDescription": "Bu sunucuya zaten erişimi olan belirli bir kullanıcıyla paylaşın. Henüz erişimleri yoksa, önce sunucuyu onlarla paylaşın veya bunun yerine bir bağlantı kullanın. Paylaşıldıktan sonra, oturum Bağlantılar sekmesinde görünür.",
-    "permissionLevel": {
-      "label": "İzin düzeyi",
-      "readOnly": "Salt okunur",
-      "readOnlyDescription": "Oturumu canlı olarak izleyebilirsiniz ancak yazı yazamaz veya etkileşimde bulunamazsınız.",
-      "readWrite": "Okuma-yazma",
-      "readWriteDescription": "Oturum sahibi gibi yazabilir ve oturumla etkileşim kurabilirsiniz."
-    },
-    "expiryLabel": "Bağlantı süresinin dolması",
-    "createLinkButton": "Bağlantı oluştur",
-    "createShareButton": "Kullanıcıyla paylaş",
-    "searchUsersPlaceholder": "Kullanıcıları ara...",
-    "noUsersFound": "Hiç kullanıcı bulunamadı.",
-    "linkCreated": "Paylaşım bağlantısı oluşturuldu.",
-    "linkNeedsServer": "Bağlantı paylaşımı yalnızca Termix sunucusundaki oturumlar için geçerlidir. Bağlantıyı kullanarak paylaşmak için bu sunucuya bağlı sunucunuz üzerinden bağlanın.",
-    "linkCopied": "Bağlantı panoya kopyalandı",
-    "copyLink": "Bağlantıyı kopyala",
-    "shareCreated": "Oturum paylaşıldı. Bu, onların Bağlantılar sekmesinde görünecektir.",
-    "shareFailed": "Paylaşım oluşturulamadı.",
-    "userLacksHostAccess": "Bu kullanıcının henüz bu sunucuya erişimi yok. Öncelikle sunucuyu onlarla paylaşın veya bunun yerine bir bağlantı kullanın.",
-    "activeShares": "Aktif hisseler",
-    "noActiveShares": "Bu oturum için aktif hisse senedi bulunmamaktadır.",
-    "revoke": "İptal Et",
-    "revokeConfirmTitle": "Bu hisseyi iptal etmek ister misiniz?",
-    "revokeConfirmDescription": "Bu paylaşımı kullanan herkes erişimini anında kaybedecektir.",
-    "revoked": "Hisseler geri alındı",
-    "revokeFailed": "Hisseleri geri alma işlemi başarısız oldu.",
-    "joinCount": "{{count}} katıl",
-    "joinCount_other": "{{count}} birleşiyor",
-    "expiresAt": "Son kullanma: {{date}}",
-    "linkShareBadge": "Bağlantı",
-    "userShareBadge": "Kullanıcı: {{username}}",
-    "loadSharesFailed": "Aktif paylaşımlar yüklenemedi.",
-    "remoteDisplayUnavailable": "Uzaktan masaüstü bağlantısı şu anda kullanılamıyor.",
-    "sharedWithMe": "Benimle paylaşılan oturumlar",
-    "customHoursPlaceholder": "Erişim süresi (saat)"
-  },
-  "collab": {
-    "createRoom": "Yeni oda",
-    "roomName": "Oda adı",
-    "persistentRoom": "Kalıcı oda",
-    "persistentRoomHint": "Kalıcı olarak tahsis edilen odalar, toplantı bittikten sonra da listede kalır ve tekrar kullanılabilir.",
-    "noRooms": "Henüz oda yok. Toplantı başlatmak için bir oda oluşturun.",
-    "openRoom": "Aç",
-    "endRoom": "Toplantıyı sonlandırın",
-    "leaveRoom": "Ayrılmak",
-    "deleteMember": "Kaldır",
-    "removeMember": "{{name}} kaldır",
-    "removeMemberTitle": "Bu üyeyi kaldırmak mı istiyorsunuz?",
-    "removeMemberDescription": "{{name}} bu odaya erişimini derhal kaybedecektir. Aktif olan tüm SSH izleyicilerinin bağlantısı kesilecektir.",
-    "invite": "Davet etmek",
-    "inviteTitle": "Üyeleri davet edin",
-    "members": "Üyeler",
-    "membersPanel": "Oda üyeleri ve kontrol talepleri",
-    "membersWithCount": "Üyeler ({{count}})",
-    "guestsWithCount": "Misafirler ({{count}})",
-    "removeGuests": "Misafirleri çıkarın",
-    "anonymousGuest": "Misafir",
-    "online": "çevrimiçi",
-    "offline": "çevrimdışı",
-    "you": "(Sen)",
-    "hostBadge": "Ana Bilgisayar",
-    "presenterBadge": "Sunar",
-    "present": "Sunmak",
-    "presentTitle": "Sahneye çıkın",
-    "presentHost": "Ana Bilgisayar",
-    "searchHosts": "Host ara",
-    "noHostsFound": "Kullanılabilir sunucu bulunamadı.",
-    "presentProtocol": "Protokol",
-    "stopPresenting": "Sunum yapmayı bırakın",
-    "takeOver": "Devralmak",
-    "takeOverConfirmTitle": "Mevcut sunumu değiştirmek mi istiyorsunuz?",
-    "takeOverDescription": "{{name}} şu anda sunum yapıyor. Devralmak, herkesi o sahneden ayıracaktır.",
-    "emptyStage": "Kimse sunum yapmıyor. Sahneye çıkın ve bir sunum paylaşın.",
-    "stageLoading": "Sahneye bağlanmak...",
-    "stageEnded": "Sunum sona erdi.",
-    "roomEnded": "Bu toplantı sona erdi.",
-    "presenterLabel": "{{name}} sunuyor",
-    "guestLink": "Konuk bağlantısı",
-    "guestLinkOn": "Misafir bağlantısı aktif. Bağlantıya sahip herkes sahneyi izleyebilir.",
-    "guestLinkOff": "Misafir bağlantısı kapalı.",
-    "copyLink": "Bağlantıyı kopyala",
-    "rotateLink": "Bağlantıyı döndür",
-    "disableLink": "Bağlantıyı devre dışı bırak",
-    "rotateLinkConfirmTitle": "Konuk bağlantısını döndürelim mi?",
-    "rotateLinkDescription": "Mevcut bağlantı derhal çalışmayı durduracaktır. Bağlı SSH misafirlerinin bağlantısı kesilecektir.",
-    "disableLinkConfirmTitle": "Misafir bağlantısını devre dışı bırak?",
-    "disableLinkDescription": "Anonim SSH izleyicilerinin bağlantısı derhal kesilecek ve mevcut bağlantı çalışmayı durduracaktır.",
-    "linkCopied": "Bağlantı kopyalandı",
-    "roles": "Roller",
-    "users": "Kullanıcılar",
-    "searchUsers": "Kullanıcıları ara",
-    "endConfirmTitle": "Bu toplantıyı sonlandıralım mı?",
-    "endDescription": "{{name}} herkes için sona erecek ve yeniden açılamayacak.",
-    "endPersistentDescription": "{{name}} 'daki aktif sunum durdurulacaktır. Oda yeniden kullanıma açıktır.",
-    "deleteRoom": "Odayı sil",
-    "deleteConfirmTitle": "Bu odayı silmek mi?",
-    "deleteDescription": "{{name}} herkes için kalıcı olarak silinecek ve geri alınamaz.",
-    "invitedTo": "\"{{name}} \" etkinliğine davet edildiniz.",
-    "guest": {
-      "title": "Toplantı",
-      "waiting": "Sunucuyu bekliyoruz...",
-      "linkInvalid": "Bu konuk bağlantısı geçersiz veya toplantı sona erdi."
-    },
-    "reopenFromPanel": "Bu toplantı sekmesinin süresi doldu. Toplantılar panelinden odayı yeniden açın.",
-    "retry": "Yeniden dene",
-    "requestControl": "Talep kontrolü",
-    "cancelControlRequest": "İptal talebi",
-    "controlQueue": "Kontrol talepleri",
-    "noControlRequests": "Bekleyen talep yok.",
-    "grantControlTo": "Kontrolü {{name}}'a verin.",
-    "dismissControlRequest": "{{name}}'ın kontrol isteğini reddet",
-    "releaseControl": "Kontrolü serbest bırak",
-    "grantControl": "Kontrolü ona verin.",
-    "revokeControl": "Kontrolü geri alın",
-    "controlRequestedBy": "{{name}} kontrolü istedi",
-    "grant": "Hibe etmek",
-    "controlBadge": "Kontrol altında",
-    "youArePresenting": "Başka bir sekmede sunum yapıyorsunuz. Sunumu durdurun ve sahneyi karşı tarafa devredin.",
-    "created": "Oda oluşturuldu",
-    "invited": "Üyeler davet edildi",
-    "roomTab": "Toplantı",
-    "serverChanged": "Toplantı sunucusu değişti. Bu toplantıyı Toplantılar panelinden yeniden açın.",
-    "hostNotSynced": "Sunuma başlamadan önce bu sunucuyu toplantı sunucusuyla senkronize edin.",
-    "linkRequiresServer": "Bu masaüstünü bir Termix sunucusuna bağlayın ve web bağlantısını paylaşmak için toplantıyı orada oluşturun."
-  },
-  "nav": {
-    "collab": "Toplantılar"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Oturum Paylaşımına İzin Ver",
-        "description": "Canlı terminal, RDP, VNC ve Telnet oturumlarının tüm örnek genelinde paylaşılmasına izin verin. Devre dışı bırakıldığında, sunucu başına paylaşım ayarlarının tümünü geçersiz kılar."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Oturum Paylaşımına İzin Ver",
-        "description": "Bu sunucudaki canlı oturumların bağlantı yoluyla veya diğer kullanıcılarla paylaşılmasına izin verin."
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Oturumları paylaşın ve odalara katılın",
-      "description": "Canlı oturumları bağlantı yoluyla veya diğer kullanıcılarla paylaşın ve iş birliği odaları oluşturup bunlara katılın."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Süresiz",
-        "oneHour": "1 saat",
-        "oneDay": "24 saat",
-        "sevenDays": "7 gün",
-        "thirtyDays": "30 gün",
-        "custom": "Özel"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Benimle paylaşıldı",
-    "sharedBy": "{{username}} tarafından paylaşıldı",
-    "join": "Katılmak",
-    "sharedSessionLabel": "{{hostName}} (paylaşılan)"
-  },
-  "plugin": {
-    "name": "Oturum Paylaşımı"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/uk_UA.json b/plugins/session-sharing/locales/translated/uk_UA.json
deleted file mode 100644
index 643922202..000000000
--- a/plugins/session-sharing/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Підключення до спільного сеансу...",
-      "linkInvalid": "Це посилання для спільного доступу недійсне, термін його дії минув або його було відкликано",
-      "rateLimited": "Забагато спроб, спробуйте ще раз пізніше",
-      "sessionEnded": "Цей сеанс завершився",
-      "readOnlyBadge": "Тільки перегляд",
-      "ownerLabel": "Власник хоста"
-    },
-    "modalTitle": "Поділитися сеансом",
-    "shareButton": "Поділитися",
-    "notReadyToShare": "Сеанс ще не готовий до поширення",
-    "modeTab": {
-      "link": "Посилання",
-      "user": "Користувач"
-    },
-    "linkModeDescription": "Приєднатися може кожен, хто має це посилання, обліковий запис не потрібен.",
-    "userModeDescription": "Надайте доступ певному користувачеві, який уже має доступ до цього хоста. Якщо у нього ще немає доступу, спочатку надайте йому доступ до хоста або скористайтеся посиланням. Після надання доступу сеанс відображається на його вкладці «Підключення».",
-    "permissionLevel": {
-      "label": "Рівень дозволів",
-      "readOnly": "Тільки для читання",
-      "readOnlyDescription": "Можна дивитися сеанс у прямому ефірі, але не можна друкувати чи взаємодіяти.",
-      "readWrite": "Читання-запис",
-      "readWriteDescription": "Можна друкувати та взаємодіяти з сеансом так само, як і його власник."
-    },
-    "expiryLabel": "Термін дії посилання",
-    "createLinkButton": "Створити посилання",
-    "createShareButton": "Поділитися з користувачем",
-    "searchUsersPlaceholder": "Пошук користувачів...",
-    "noUsersFound": "Користувачів не знайдено",
-    "linkCreated": "Посилання для спільного доступу створено",
-    "linkNeedsServer": "Посилання для спільного доступу працюють лише для сеансів на сервері Termix. Підключіть цей хост через ваш пов’язаний сервер, щоб поділитися ним за допомогою посилання.",
-    "linkCopied": "Посилання скопійовано в буфер обміну",
-    "copyLink": "Копіювати посилання",
-    "shareCreated": "Сеанс спільний. Він відображатиметься на вкладці «Зв’язки».",
-    "shareFailed": "Не вдалося створити спільний доступ",
-    "userLacksHostAccess": "Цей користувач ще не має доступу до цього хоста. Спочатку надайте йому доступ до хоста або скористайтеся посиланням.",
-    "activeShares": "Активні акції",
-    "noActiveShares": "Немає активних поширень для цього сеансу",
-    "revoke": "Скасувати",
-    "revokeConfirmTitle": "Скасувати цей спільний доступ?",
-    "revokeConfirmDescription": "Будь-хто, хто користується цим ресурсом спільного доступу, негайно втратить доступ.",
-    "revoked": "Акції анульовано",
-    "revokeFailed": "Не вдалося скасувати спільний доступ",
-    "joinCount": "{{count}} приєднатися",
-    "joinCount_other": "{{count}} приєднується",
-    "expiresAt": "Термін дії закінчується {{date}}",
-    "linkShareBadge": "Посилання",
-    "userShareBadge": "Користувач: {{username}}",
-    "loadSharesFailed": "Не вдалося завантажити активні спільні ресурси",
-    "remoteDisplayUnavailable": "Віддалений робочий стіл зараз недоступний.",
-    "sharedWithMe": "Сеанси, якими я поділився",
-    "customHoursPlaceholder": "Години до закінчення терміну дії доступу"
-  },
-  "collab": {
-    "createRoom": "Нова кімната",
-    "roomName": "Назва кімнати",
-    "persistentRoom": "Постійна кімната",
-    "persistentRoomHint": "Постійні кімнати залишаються у списку після завершення зустрічі та можуть бути використані повторно.",
-    "noRooms": "Поки що немає кімнат. Створіть одну, щоб розпочати зустріч.",
-    "openRoom": "ВІДЧИНЕНО",
-    "endRoom": "Закінчити зустріч",
-    "leaveRoom": "Залишити",
-    "deleteMember": "Видалити",
-    "removeMember": "Видалити {{name}}",
-    "removeMemberTitle": "Видалити цього учасника?",
-    "removeMemberDescription": "{{name}} негайно втратить доступ до цієї кімнати. Будь-який активний переглядач SSH буде відключено.",
-    "invite": "Запросити",
-    "inviteTitle": "Запросити учасників",
-    "members": "Члени",
-    "membersPanel": "Учасники кімнати та запити на керування",
-    "membersWithCount": "Учасники ({{count}})",
-    "guestsWithCount": "Гості ({{count}})",
-    "removeGuests": "Видалити гостей",
-    "anonymousGuest": "Гість",
-    "online": "онлайн",
-    "offline": "офлайн",
-    "you": "(ти)",
-    "hostBadge": "Хост",
-    "presenterBadge": "Презентація",
-    "present": "Подарунок",
-    "presentTitle": "Вийди на сцену",
-    "presentHost": "Хост",
-    "searchHosts": "Пошук хостів",
-    "noHostsFound": "Не знайдено доступних хостів.",
-    "presentProtocol": "Протокол",
-    "stopPresenting": "Зупинити презентацію",
-    "takeOver": "Захопити",
-    "takeOverConfirmTitle": "Замінити поточну презентацію?",
-    "takeOverDescription": "{{name}} зараз презентує. Перехоплення сцени відключить усіх учасників.",
-    "emptyStage": "Ніхто не виступає. Вийдіть на сцену, щоб поділитися сесією.",
-    "stageLoading": "Підключення до сцени...",
-    "stageEnded": "Презентація закінчилася",
-    "roomEnded": "Ця зустріч завершилася",
-    "presenterLabel": "{{name}} презентує",
-    "guestLink": "Гостьове посилання",
-    "guestLinkOn": "Гостьове посилання ввімкнено. Будь-хто, хто має посилання, може дивитися сцену.",
-    "guestLinkOff": "Гостьове посилання вимкнено.",
-    "copyLink": "Копіювати посилання",
-    "rotateLink": "Повернути посилання",
-    "disableLink": "Вимкнути посилання",
-    "rotateLinkConfirmTitle": "Повернути гостьове посилання?",
-    "rotateLinkDescription": "Поточне посилання негайно перестане працювати. Підключені гості SSH будуть відключені.",
-    "disableLinkConfirmTitle": "Вимкнути гостьове посилання?",
-    "disableLinkDescription": "Анонімні користувачі SSH будуть негайно відключені, а поточне посилання перестане працювати.",
-    "linkCopied": "Посилання скопійовано",
-    "roles": "Ролі",
-    "users": "Користувачі",
-    "searchUsers": "Пошук користувачів",
-    "endConfirmTitle": "Завершити цю зустріч?",
-    "endDescription": "{{name}} завершиться для всіх і не може бути відкрито повторно.",
-    "endPersistentDescription": "Активна презентація в {{name}} буде зупинена. Кімната залишається доступною для повторного використання.",
-    "deleteRoom": "Видалити кімнату",
-    "deleteConfirmTitle": "Видалити цю кімнату?",
-    "deleteDescription": "{{name}} буде видалено назавжди для всіх і цю дію не можна буде скасувати.",
-    "invitedTo": "Вас запросили до «{{name}}»",
-    "guest": {
-      "title": "Зустріч",
-      "waiting": "Чекаємо на ведучого...",
-      "linkInvalid": "Це гостьове посилання недійсне або зустріч завершилася"
-    },
-    "reopenFromPanel": "Термін дії цієї вкладки зустрічі закінчився. Відкрийте кімнату знову на панелі Зустрічі.",
-    "retry": "Повторити спробу",
-    "requestControl": "Запит на керування",
-    "cancelControlRequest": "Скасувати запит",
-    "controlQueue": "Запити на керування",
-    "noControlRequests": "Немає запитів, що очікують на розгляд.",
-    "grantControlTo": "Надайте керування {{name}}",
-    "dismissControlRequest": "Відхилити запит керування від {{name}}",
-    "releaseControl": "Контроль випуску",
-    "grantControl": "Надайте контроль",
-    "revokeControl": "Поверніть собі контроль",
-    "controlRequestedBy": "{{name}} запросив керування",
-    "grant": "Грант",
-    "controlBadge": "Контроль",
-    "youArePresenting": "Ви презентуєте в іншій вкладці. Зупиніть презентацію, щоб передати сцену.",
-    "created": "Кімнату створено",
-    "invited": "Запрошені учасники",
-    "roomTab": "Зустріч",
-    "serverChanged": "Сервер зустрічі змінився. Відкрийте цю зустріч знову з панелі «Зустрічі».",
-    "hostNotSynced": "Синхронізуйте цей хост із сервером зустрічей перед презентацією.",
-    "linkRequiresServer": "Підключіть цей робочий стіл до сервера Termix та створіть там зустріч, щоб поділитися веб-посиланням."
-  },
-  "nav": {
-    "collab": "Зустрічі"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Дозволити спільний доступ до сеансу",
-        "description": "Дозволити спільний доступ до сеансів терміналу, RDP, VNC та Telnet для всього екземпляра. Перевизначає кожен перемикач спільного доступу для кожного хоста, якщо його вимкнено."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Дозволити спільний доступ до сеансу",
-        "description": "Дозволити ділитися прямими трансляціями на цьому хості через посилання або з іншими користувачами"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Діліться сесіями та приєднуйтесь до кімнат",
-      "description": "Діліться сеансами в реальному часі за посиланням або з іншими користувачами, а також створюйте кімнати для співпраці та приєднуйтесь до них."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Ніколи",
-        "oneHour": "1 година",
-        "oneDay": "24 години",
-        "sevenDays": "7 днів",
-        "thirtyDays": "30 днів",
-        "custom": "Користувацька"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Поділилися зі мною",
-    "sharedBy": "Поділився користувачем {{username}}",
-    "join": "Приєднатися",
-    "sharedSessionLabel": "{{hostName}} (спільний доступ)"
-  },
-  "plugin": {
-    "name": "Спільне використання сеансу"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/vi_VN.json b/plugins/session-sharing/locales/translated/vi_VN.json
deleted file mode 100644
index 11979adc6..000000000
--- a/plugins/session-sharing/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "Đang kết nối đến phiên chia sẻ...",
-      "linkInvalid": "Liên kết chia sẻ này không hợp lệ, đã hết hạn hoặc đã bị thu hồi.",
-      "rateLimited": "Đã thử quá nhiều lần, vui lòng thử lại sau.",
-      "sessionEnded": "Phiên này đã kết thúc",
-      "readOnlyBadge": "Chỉ xem",
-      "ownerLabel": "Chủ nhà"
-    },
-    "modalTitle": "Chia sẻ phiên họp",
-    "shareButton": "Chia sẻ",
-    "notReadyToShare": "Buổi học chưa sẵn sàng để chia sẻ.",
-    "modeTab": {
-      "link": "Liên kết",
-      "user": "Người dùng"
-    },
-    "linkModeDescription": "Bất kỳ ai có liên kết này đều có thể tham gia, không cần tài khoản.",
-    "userModeDescription": "Chia sẻ với một người dùng cụ thể đã có quyền truy cập vào máy chủ này. Nếu họ chưa có quyền truy cập, hãy chia sẻ máy chủ với họ trước hoặc sử dụng liên kết thay thế. Sau khi chia sẻ, phiên làm việc sẽ xuất hiện trong tab Kết nối của họ.",
-    "permissionLevel": {
-      "label": "Cấp độ quyền",
-      "readOnly": "Chỉ đọc",
-      "readOnlyDescription": "Có thể xem phiên trực tiếp nhưng không thể gõ chữ hoặc tương tác.",
-      "readWrite": "Đọc-viết",
-      "readWriteDescription": "Có thể nhập liệu và tương tác với phiên làm việc giống như chủ sở hữu."
-    },
-    "expiryLabel": "Liên kết hết hạn",
-    "createLinkButton": "Tạo liên kết",
-    "createShareButton": "Chia sẻ với người dùng",
-    "searchUsersPlaceholder": "Tìm kiếm người dùng...",
-    "noUsersFound": "Không tìm thấy người dùng nào",
-    "linkCreated": "Đã tạo liên kết chia sẻ",
-    "linkNeedsServer": "Liên kết chia sẻ chỉ hoạt động cho các phiên trên máy chủ Termix. Kết nối máy chủ này thông qua máy chủ được liên kết của bạn để chia sẻ nó bằng liên kết.",
-    "linkCopied": "Liên kết đã được sao chép vào clipboard",
-    "copyLink": "Sao chép liên kết",
-    "shareCreated": "Phiên họp đã được chia sẻ. Nó sẽ xuất hiện trong tab Kết nối của họ.",
-    "shareFailed": "Không thể tạo chia sẻ",
-    "userLacksHostAccess": "Người dùng đó chưa có quyền truy cập vào máy chủ này. Hãy chia sẻ thông tin máy chủ với họ trước, hoặc sử dụng liên kết thay thế.",
-    "activeShares": "Cổ phiếu tích cực",
-    "noActiveShares": "Hiện không có cổ phiếu nào đang được giao dịch trong phiên này.",
-    "revoke": "Thu hồi",
-    "revokeConfirmTitle": "Thu hồi cổ phần này?",
-    "revokeConfirmDescription": "Bất kỳ ai sử dụng thư mục chia sẻ này sẽ mất quyền truy cập ngay lập tức.",
-    "revoked": "Cổ phần đã bị thu hồi",
-    "revokeFailed": "Không thể thu hồi cổ phần",
-    "joinCount": "{{count}} tham gia",
-    "joinCount_other": "{{count}} tham gia",
-    "expiresAt": "Hết hạn {{date}}",
-    "linkShareBadge": "Liên kết",
-    "userShareBadge": "Người dùng: {{username}}",
-    "loadSharesFailed": "Không thể tải các chia sẻ đang hoạt động",
-    "remoteDisplayUnavailable": "Hiện tại, tính năng truy cập máy tính từ xa không khả dụng.",
-    "sharedWithMe": "Các buổi chia sẻ với tôi",
-    "customHoursPlaceholder": "Số giờ cho đến khi hết hạn truy cập"
-  },
-  "collab": {
-    "createRoom": "Phòng mới",
-    "roomName": "Tên phòng",
-    "persistentRoom": "Phòng bền vững",
-    "persistentRoomHint": "Các phòng họp được lưu lại sẽ vẫn hiển thị sau khi cuộc họp kết thúc và có thể được sử dụng lại.",
-    "noRooms": "Chưa có phòng nào. Hãy tạo một phòng để bắt đầu cuộc họp.",
-    "openRoom": "Mở",
-    "endRoom": "Kết thúc cuộc họp",
-    "leaveRoom": "Rời khỏi",
-    "deleteMember": "Xóa",
-    "removeMember": "Xóa {{name}}",
-    "removeMemberTitle": "Xóa thành viên này?",
-    "removeMemberDescription": "{{name}} sẽ mất quyền truy cập vào phòng này ngay lập tức. Bất kỳ trình xem SSH nào đang hoạt động sẽ bị ngắt kết nối.",
-    "invite": "Mời",
-    "inviteTitle": "Mời thành viên",
-    "members": "Thành viên",
-    "membersPanel": "Thành viên phòng và yêu cầu kiểm soát",
-    "membersWithCount": "Thành viên ({{count}})",
-    "guestsWithCount": "Khách ({{count}})",
-    "removeGuests": "Đuổi khách",
-    "anonymousGuest": "Khách mời",
-    "online": "trực tuyến",
-    "offline": "ngoại tuyến",
-    "you": "(Bạn)",
-    "hostBadge": "Máy chủ",
-    "presenterBadge": "Giới thiệu",
-    "present": "Hiện tại",
-    "presentTitle": "Hãy lên sân khấu",
-    "presentHost": "Máy chủ",
-    "searchHosts": "Tìm kiếm máy chủ",
-    "noHostsFound": "Không tìm thấy máy chủ nào khả dụng.",
-    "presentProtocol": "Giao thức",
-    "stopPresenting": "Dừng thuyết trình",
-    "takeOver": "Tiếp quản",
-    "takeOverConfirmTitle": "Bạn muốn thay thế bài thuyết trình hiện tại?",
-    "takeOverDescription": "{{name}} đang trình bày. Việc tiếp quản sẽ ngắt kết nối mọi người khỏi sân khấu đó.",
-    "emptyStage": "Hiện chưa có ai thuyết trình. Hãy lên sân khấu để chia sẻ một phiên thảo luận.",
-    "stageLoading": "Kết nối với sân khấu...",
-    "stageEnded": "Buổi thuyết trình kết thúc.",
-    "roomEnded": "Cuộc họp này đã kết thúc.",
-    "presenterLabel": "{{name}} đang trình bày",
-    "guestLink": "Liên kết khách",
-    "guestLinkOn": "Link dành cho khách đã được bật. Bất cứ ai có link đều có thể xem chương trình.",
-    "guestLinkOff": "Liên kết khách đã bị tắt.",
-    "copyLink": "Sao chép liên kết",
-    "rotateLink": "Xoay liên kết",
-    "disableLink": "Vô hiệu hóa liên kết",
-    "rotateLinkConfirmTitle": "Xoay liên kết khách?",
-    "rotateLinkDescription": "Kết nối hiện tại sẽ ngừng hoạt động ngay lập tức. Các máy khách SSH đang kết nối sẽ bị ngắt kết nối.",
-    "disableLinkConfirmTitle": "Vô hiệu hóa liên kết khách?",
-    "disableLinkDescription": "Những người xem SSH ẩn danh sẽ bị ngắt kết nối ngay lập tức và liên kết hiện tại sẽ ngừng hoạt động.",
-    "linkCopied": "Đã sao chép liên kết",
-    "roles": "Vai trò",
-    "users": "Người dùng",
-    "searchUsers": "Tìm kiếm người dùng",
-    "endConfirmTitle": "Kết thúc cuộc họp này?",
-    "endDescription": "{{name}} sẽ kết thúc đối với tất cả mọi người và không thể mở lại.",
-    "endPersistentDescription": "Buổi thuyết trình đang diễn ra tại {{name}} sẽ dừng lại. Phòng vẫn có thể được sử dụng lại.",
-    "deleteRoom": "Xóa phòng",
-    "deleteConfirmTitle": "Xóa phòng này?",
-    "deleteDescription": "{{name}} sẽ bị xóa vĩnh viễn đối với tất cả mọi người và không thể hoàn tác.",
-    "invitedTo": "Bạn được mời đến \"{{name}}\"",
-    "guest": {
-      "title": "Cuộc họp",
-      "waiting": "Đang chờ người dẫn chương trình...",
-      "linkInvalid": "Liên kết dành cho khách này không hợp lệ hoặc cuộc họp đã kết thúc."
-    },
-    "reopenFromPanel": "Tab cuộc họp này đã hết hạn. Vui lòng mở lại phòng từ mục Cuộc họp.",
-    "retry": "Thử lại",
-    "requestControl": "Yêu cầu kiểm soát",
-    "cancelControlRequest": "Yêu cầu hủy bỏ",
-    "controlQueue": "Yêu cầu kiểm soát",
-    "noControlRequests": "Không có yêu cầu nào đang chờ xử lý.",
-    "grantControlTo": "Trao quyền điều khiển cho {{name}}",
-    "dismissControlRequest": "Bỏ qua yêu cầu điều khiển của {{name}}",
-    "releaseControl": "Kiểm soát giải phóng",
-    "grantControl": "Trao quyền kiểm soát",
-    "revokeControl": "Giành lại quyền kiểm soát",
-    "controlRequestedBy": "{{name}} yêu cầu quyền điều khiển",
-    "grant": "Khoản trợ cấp",
-    "controlBadge": "Trong tầm kiểm soát",
-    "youArePresenting": "Bạn đang thuyết trình ở một tab khác. Hãy dừng thuyết trình để nhường sân khấu.",
-    "created": "Phòng được tạo",
-    "invited": "Các thành viên được mời",
-    "roomTab": "Cuộc họp",
-    "serverChanged": "Máy chủ cuộc họp đã thay đổi. Vui lòng mở lại cuộc họp này từ mục Cuộc họp.",
-    "hostNotSynced": "Hãy đồng bộ hóa máy chủ này với máy chủ cuộc họp trước khi trình bày.",
-    "linkRequiresServer": "Kết nối máy tính để bàn này với máy chủ Termix và tạo cuộc họp ở đó để chia sẻ liên kết web."
-  },
-  "nav": {
-    "collab": "Các cuộc họp"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "Cho phép chia sẻ phiên",
-        "description": "Cho phép chia sẻ các phiên terminal trực tiếp, RDP, VNC và Telnet trên toàn bộ máy chủ. Khi bị vô hiệu hóa, tùy chọn này sẽ ghi đè lên mọi tùy chọn chia sẻ trên từng máy chủ riêng lẻ."
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "Cho phép chia sẻ phiên",
-        "description": "Cho phép chia sẻ các phiên trực tiếp trên máy chủ này qua liên kết hoặc với những người dùng khác."
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "Chia sẻ phiên họp và tham gia phòng họp",
-      "description": "Chia sẻ các phiên trực tiếp qua liên kết hoặc với người dùng khác, tạo và tham gia các phòng cộng tác."
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "Không bao giờ",
-        "oneHour": "1 giờ",
-        "oneDay": "24 giờ",
-        "sevenDays": "7 ngày",
-        "thirtyDays": "30 ngày",
-        "custom": "Tùy chỉnh"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "Đã chia sẻ với tôi",
-    "sharedBy": "Được chia sẻ bởi {{username}}",
-    "join": "Tham gia",
-    "sharedSessionLabel": "{{hostName}} (được chia sẻ)"
-  },
-  "plugin": {
-    "name": "Chia sẻ phiên họp"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/zh_CN.json b/plugins/session-sharing/locales/translated/zh_CN.json
deleted file mode 100644
index 777678a74..000000000
--- a/plugins/session-sharing/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "正在连接到共享会话...",
-      "linkInvalid": "此共享链接无效、已过期或已被撤销。",
-      "rateLimited": "尝试次数过多，请稍后再试。",
-      "sessionEnded": "此会话已结束",
-      "readOnlyBadge": "仅查看",
-      "ownerLabel": "房东"
-    },
-    "modalTitle": "共享会话",
-    "shareButton": "共享",
-    "notReadyToShare": "会话尚未准备好共享",
-    "modeTab": {
-      "link": "链接",
-      "user": "用户"
-    },
-    "linkModeDescription": "任何人只要拥有此链接即可加入，无需注册账号。",
-    "userModeDescription": "将主机共享给已拥有此主机访问权限的特定用户。如果他们还没有访问权限，请先将主机共享给他们，或者使用链接代替。共享后，会话将显示在他们的“连接”标签页中。",
-    "permissionLevel": {
-      "label": "权限级别",
-      "readOnly": "只读",
-      "readOnlyDescription": "可以观看直播，但无法打字或互动。",
-      "readWrite": "读写",
-      "readWriteDescription": "可以像会话所有者一样进行输入和互动。"
-    },
-    "expiryLabel": "链接过期",
-    "createLinkButton": "创建链接",
-    "createShareButton": "与用户共享",
-    "searchUsersPlaceholder": "搜索用户......",
-    "noUsersFound": "未找到用户",
-    "linkCreated": "已创建共享链接",
-    "linkNeedsServer": "分享链接仅适用于 Termix 服务器上的会话。请通过您链接的服务器连接此主机，然后使用链接进行分享。",
-    "linkCopied": "链接已复制到剪贴板",
-    "copyLink": "复制链接",
-    "shareCreated": "会话已共享。它将出现在对方的“连接”标签页中。",
-    "shareFailed": "创建共享失败",
-    "userLacksHostAccess": "该用户目前没有访问此主机的权限。请先与其共享主机，或使用链接进行共享。",
-    "activeShares": "有效共享",
-    "noActiveShares": "此会话暂无活跃共享",
-    "revoke": "吊销",
-    "revokeConfirmTitle": "撤销此共享？",
-    "revokeConfirmDescription": "任何使用此共享的用户都将立即失去访问权限。",
-    "revoked": "共享已撤销",
-    "revokeFailed": "撤销共享失败",
-    "joinCount": "{{count}} 人加入",
-    "joinCount_other": "{{count}} 人加入",
-    "expiresAt": "过期于 {{date}}",
-    "linkShareBadge": "链接",
-    "userShareBadge": "用户：{{username}}",
-    "loadSharesFailed": "无法加载共享",
-    "remoteDisplayUnavailable": "目前远程桌面功能不可用。",
-    "sharedWithMe": "与我分享的会议",
-    "customHoursPlaceholder": "过期前的小时数"
-  },
-  "collab": {
-    "createRoom": "新房间",
-    "roomName": "房间名称",
-    "persistentRoom": "持久房间",
-    "persistentRoomHint": "会议结束后，持久会议室仍会保留在列表中，可以重复使用。",
-    "noRooms": "暂无会议室。创建会议室即可开始会议。",
-    "openRoom": "打开",
-    "endRoom": "会议结束",
-    "leaveRoom": "离开",
-    "deleteMember": "删除",
-    "removeMember": "移除{{name}}",
-    "removeMemberTitle": "移除此成员？",
-    "removeMemberDescription": "{{name}} 将立即失去对该房间的访问权限。所有正在使用的 SSH 查看器都将被断开连接。",
-    "invite": "邀请",
-    "inviteTitle": "邀请成员",
-    "members": "成员",
-    "membersPanel": "房间成员和控制请求",
-    "membersWithCount": "成员（{{count}}）",
-    "guestsWithCount": "宾客（{{count}}）",
-    "removeGuests": "移除客人",
-    "anonymousGuest": "客人",
-    "online": "在线",
-    "offline": "离线",
-    "you": "（你）",
-    "hostBadge": "主机",
-    "presenterBadge": "呈现",
-    "present": "展示",
-    "presentTitle": "登上舞台",
-    "presentHost": "主机",
-    "searchHosts": "搜索主机",
-    "noHostsFound": "未找到可用主机。",
-    "presentProtocol": "协议",
-    "stopPresenting": "停止演示",
-    "takeOver": "接管",
-    "takeOverConfirmTitle": "替换当前演示文稿？",
-    "takeOverDescription": "{{name}} 正在直播。接管直播将会断开所有人与该直播间的连接。",
-    "emptyStage": "目前无人发言。请上台分享您的演讲内容。",
-    "stageLoading": "连接到舞台……",
-    "stageEnded": "演讲结束了",
-    "roomEnded": "会议结束",
-    "presenterLabel": "{{name}} 正在呈现",
-    "guestLink": "访客链接",
-    "guestLinkOn": "访客链接已开启。任何拥有该链接的人都可以观看舞台表演。",
-    "guestLinkOff": "访客链接已关闭。",
-    "copyLink": "复制链接",
-    "rotateLink": "旋转链接",
-    "disableLink": "禁用链接",
-    "rotateLinkConfirmTitle": "旋转访客链接？",
-    "rotateLinkDescription": "当前连接将立即停止工作。已连接的SSH访客将被断开连接。",
-    "disableLinkConfirmTitle": "禁用访客链接？",
-    "disableLinkDescription": "匿名 SSH 查看者将被立即断开连接，当前链接将停止工作。",
-    "linkCopied": "链接已复制",
-    "roles": "角色",
-    "users": "用户",
-    "searchUsers": "搜索用户",
-    "endConfirmTitle": "结束会议吗？",
-    "endDescription": "{{name}} 将对所有人关闭，且无法重新开启。",
-    "endPersistentDescription": "{{name}} 中的当前演示将停止。该房间仍可供再次使用。",
-    "deleteRoom": "删除房间",
-    "deleteConfirmTitle": "删除这个房间？",
-    "deleteDescription": "{{name}} 将被永久删除，且无法撤销。",
-    "invitedTo": "您受邀参加“{{name}}”",
-    "guest": {
-      "title": "会议",
-      "waiting": "等待主持人……",
-      "linkInvalid": "此访客链接无效或会议已结束"
-    },
-    "reopenFromPanel": "此会议标签页已过期。请从“会议”面板重新打开会议室。",
-    "retry": "重试",
-    "requestControl": "请求控制",
-    "cancelControlRequest": "取消请求",
-    "controlQueue": "控制请求",
-    "noControlRequests": "没有待处理的请求。",
-    "grantControlTo": "将控制权交给 {{name}}",
-    "dismissControlRequest": "驳回 {{name}}的控制请求",
-    "releaseControl": "发布控制",
-    "grantControl": "赋予控制权",
-    "revokeControl": "夺回控制权",
-    "controlRequestedBy": "{{name}} 请求控制权",
-    "grant": "授予",
-    "controlBadge": "掌控之中",
-    "youArePresenting": "您正在另一个标签页中进行演示。请停止演示，将演示权交给对方。",
-    "created": "创建房间",
-    "invited": "受邀成员",
-    "roomTab": "会议",
-    "serverChanged": "会议服务器已更改。请从“会议”面板重新打开此会议。",
-    "hostNotSynced": "演示前，请将此主机与会议服务器同步。",
-    "linkRequiresServer": "将此桌面连接到 Termix 服务器，并在该服务器上创建会议以共享 Web 链接。"
-  },
-  "nav": {
-    "collab": "会议"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "允许会话共享",
-        "description": "允许在整个实例范围内共享实时终端、RDP、VNC 和 Telnet 会话。禁用此功能将覆盖所有主机级别的共享设置。"
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "允许会话共享",
-        "description": "允许通过链接或其他方式共享此主机上的实时会话。"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "分享会话并加入房间",
-      "description": "通过链接或与其他用户共享实时会话，并创建和加入协作房间。"
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "永不过期",
-        "oneHour": "1 小时",
-        "oneDay": "24 小时",
-        "sevenDays": "7 天",
-        "thirtyDays": "30 天",
-        "custom": "自定义"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "与我共享",
-    "sharedBy": "由 {{username}} 共享",
-    "join": "加入",
-    "sharedSessionLabel": "{{hostName}}（共享）"
-  },
-  "plugin": {
-    "name": "会话共享"
-  }
-}
diff --git a/plugins/session-sharing/locales/translated/zh_TW.json b/plugins/session-sharing/locales/translated/zh_TW.json
deleted file mode 100644
index 0501a36d1..000000000
--- a/plugins/session-sharing/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,189 +0,0 @@
-{
-  "sessionSharing": {
-    "guestView": {
-      "loading": "正在連接到共享會話...",
-      "linkInvalid": "此分享連結無效、已過期或已撤銷。",
-      "rateLimited": "嘗試次數過多，請稍後再試。",
-      "sessionEnded": "本次會議已結束",
-      "readOnlyBadge": "僅查看",
-      "ownerLabel": "房東"
-    },
-    "modalTitle": "分享會話",
-    "shareButton": "分享",
-    "notReadyToShare": "會話尚未準備好分享",
-    "modeTab": {
-      "link": "關聯",
-      "user": "使用者"
-    },
-    "linkModeDescription": "任何人只要擁有此連結即可加入，無需註冊帳號。",
-    "userModeDescription": "將主機共用給已擁有此主機存取權限的特定使用者。如果他們還沒有存取權限，請先將主機分享給他們，或使用連結代替。共享後，會話將顯示在他們的“連接”選項卡中。",
-    "permissionLevel": {
-      "label": "權限層級",
-      "readOnly": "唯讀",
-      "readOnlyDescription": "可以觀看直播，但無法打字或互動。",
-      "readWrite": "讀寫",
-      "readWriteDescription": "可以像會話擁有者一樣進行輸入和互動。"
-    },
-    "expiryLabel": "連結過期",
-    "createLinkButton": "建立連結",
-    "createShareButton": "與用戶分享",
-    "searchUsersPlaceholder": "搜尋用戶...",
-    "noUsersFound": "未找到用戶",
-    "linkCreated": "已建立分享連結",
-    "linkNeedsServer": "分享連結僅適用於 Termix 伺服器上的會話。請透過您連結的伺服器連接此主機，然後使用連結進行分享。",
-    "linkCopied": "連結已複製到剪貼簿",
-    "copyLink": "複製連結",
-    "shareCreated": "會話已共用。它將出現在對方的「連線」標籤中。",
-    "shareFailed": "建立共享失敗",
-    "userLacksHostAccess": "該使用者目前沒有存取此主機的權限。請先與其共享主機，或使用連結進行共享。",
-    "activeShares": "活躍股",
-    "noActiveShares": "本會話無活躍份額",
-    "revoke": "撤銷",
-    "revokeConfirmTitle": "撤銷此份額？",
-    "revokeConfirmDescription": "任何使用此共用資料夾的使用者都將立即失去存取權限。",
-    "revoked": "股份撤銷",
-    "revokeFailed": "撤銷股份失敗",
-    "joinCount": "{{count}} 加入",
-    "joinCount_other": "{{count}} 加入",
-    "expiresAt": "到期日 {{date}}",
-    "linkShareBadge": "關聯",
-    "userShareBadge": "使用者： {{username}}",
-    "loadSharesFailed": "無法加載活躍份額",
-    "remoteDisplayUnavailable": "目前遠端桌面功能無法使用。",
-    "sharedWithMe": "與我分享的會議",
-    "customHoursPlaceholder": "存取到期前的小時數"
-  },
-  "collab": {
-    "createRoom": "新房間",
-    "roomName": "房間名稱",
-    "persistentRoom": "持久房間",
-    "persistentRoomHint": "會議結束後，持久會議室仍會保留在清單中，可重複使用。",
-    "noRooms": "暫無會議室。創建會議室即可開始會議。",
-    "openRoom": "開啟",
-    "endRoom": "會議結束",
-    "leaveRoom": "離開",
-    "deleteMember": "移除",
-    "removeMember": "移除 {{name}}",
-    "removeMemberTitle": "移除此成員？",
-    "removeMemberDescription": "{{name}} 將立即失去該房間的存取權限。所有正在使用的 SSH 檢視器都將被斷開連接。",
-    "invite": "邀請",
-    "inviteTitle": "邀請成員",
-    "members": "成員",
-    "membersPanel": "房間成員和控制請求",
-    "membersWithCount": "成員（{{count}}）",
-    "guestsWithCount": "賓客（{{count}}）",
-    "removeGuests": "移除客人",
-    "anonymousGuest": "客人",
-    "online": "在線",
-    "offline": "離線",
-    "you": "（你）",
-    "hostBadge": "主機",
-    "presenterBadge": "呈現",
-    "present": "展示",
-    "presentTitle": "登上舞台",
-    "presentHost": "主機",
-    "searchHosts": "搜尋主機",
-    "noHostsFound": "未找到可用主機。",
-    "presentProtocol": "通訊協定",
-    "stopPresenting": "停止演示",
-    "takeOver": "接管",
-    "takeOverConfirmTitle": "替換當前簡報？",
-    "takeOverDescription": "{{name}} 正在直播中。接管直播將會中斷所有人與該直播間的連結。",
-    "emptyStage": "目前無人發言。請上台分享您的演講內容。",
-    "stageLoading": "連接到舞台…",
-    "stageEnded": "演講結束了",
-    "roomEnded": "會議結束",
-    "presenterLabel": "{{name}} 正在呈現",
-    "guestLink": "訪客連結",
-    "guestLinkOn": "訪客連結已開啟。任何擁有該連結的人都可以觀看舞台表演。",
-    "guestLinkOff": "訪客連結已關閉。",
-    "copyLink": "複製連結",
-    "rotateLink": "旋轉連結",
-    "disableLink": "停用連結",
-    "rotateLinkConfirmTitle": "旋轉訪客連結？",
-    "rotateLinkDescription": "當前連線將立即停止工作。已連線的SSH訪客將會被斷開連線。",
-    "disableLinkConfirmTitle": "禁用訪客連結？",
-    "disableLinkDescription": "匿名 SSH 檢視者將立即被斷開連接，目前連結將停止運作。",
-    "linkCopied": "連結已複製",
-    "roles": "角色",
-    "users": "使用者",
-    "searchUsers": "搜尋用戶",
-    "endConfirmTitle": "結束會議嗎？",
-    "endDescription": "{{name}} 將對所有人關閉，且無法重新開啟。",
-    "endPersistentDescription": "{{name}} 中的目前示範將停止。該房間仍可供再次使用。",
-    "deleteRoom": "刪除房間",
-    "deleteConfirmTitle": "刪除這個房間？",
-    "deleteDescription": "{{name}} 將會永久刪除，且無法撤銷。",
-    "invitedTo": "您受邀參加“{{name}}”",
-    "guest": {
-      "title": "會議",
-      "waiting": "等待主持人…",
-      "linkInvalid": "此訪客連結無效或會議已結束"
-    },
-    "reopenFromPanel": "此會議標籤頁已過期。請從「會議」面板重新開啟會議室。",
-    "retry": "重試",
-    "requestControl": "請求控制",
-    "cancelControlRequest": "取消請求",
-    "controlQueue": "控制請求",
-    "noControlRequests": "沒有待處理的請求。",
-    "grantControlTo": "將控制權交給 {{name}}",
-    "dismissControlRequest": "駁回 {{name}}的控制請求",
-    "releaseControl": "發布控制",
-    "grantControl": "賦予控制權",
-    "revokeControl": "奪回控制權",
-    "controlRequestedBy": "{{name}} 請求控制權",
-    "grant": "授予",
-    "controlBadge": "掌控之中",
-    "youArePresenting": "您正在另一個標籤頁中進行示範。請停止演示，將演示權交給對方。",
-    "created": "創建房間",
-    "invited": "受邀成員",
-    "roomTab": "會議",
-    "serverChanged": "會議伺服器已更改。請從「會議」面板重新開啟此會議。",
-    "hostNotSynced": "演示前，請將此主機與會議伺服器同步。",
-    "linkRequiresServer": "將此桌面連接到 Termix 伺服器，並在該伺服器上建立會議以共用 Web 連結。"
-  },
-  "nav": {
-    "collab": "會議"
-  },
-  "settings": {
-    "admin": {
-      "globallyEnabled": {
-        "label": "允許會話共享",
-        "description": "允許在整個執行個體範圍內共用即時終端、RDP、VNC 和 Telnet 會話。停用此功能將覆蓋所有主機層級的共用設定。"
-      }
-    },
-    "host": {
-      "allowSessionSharing": {
-        "label": "允許會話共享",
-        "description": "允許透過連結或其他方式分享此主機上的即時會話。"
-      }
-    }
-  },
-  "permissions": {
-    "use": {
-      "title": "分享會話並加入房間",
-      "description": "透過連結或與其他使用者分享即時會話，並建立和加入協作房間。"
-    }
-  },
-  "hosts": {
-    "sharing": {
-      "expiry": {
-        "never": "永不",
-        "oneHour": "1 小時",
-        "oneDay": "24 小時",
-        "sevenDays": "7 天",
-        "thirtyDays": "30 天",
-        "custom": "自訂"
-      }
-    }
-  },
-  "connections": {
-    "sectionSharedWithMe": "與我分享",
-    "sharedBy": "由 {{username}} 分享",
-    "join": "加入",
-    "sharedSessionLabel": "{{hostName}} （共享）"
-  },
-  "plugin": {
-    "name": "會話共享"
-  }
-}
diff --git a/plugins/session-sharing/manifest.json b/plugins/session-sharing/manifest.json
deleted file mode 100644
index c80f1764e..000000000
--- a/plugins/session-sharing/manifest.json
+++ /dev/null
@@ -1,111 +0,0 @@
-{
-  "id": "session-sharing",
-  "name": "Session Sharing",
-  "version": "1.0.0",
-  "description": "Share a live terminal or remote desktop session by link or with another user, and present sessions in collaboration rooms.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Productivity",
-  "icon": "Presentation",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "hosts:read",
-    "db:own",
-    "network:serve",
-    "ui:surface",
-    "users:impersonate",
-    "db:core-refs"
-  ],
-  "dependencies": {
-    "ssh-terminal": "^1.0.0"
-  },
-  "optionalDependencies": {
-    "remote-desktop": "^1.0.0"
-  },
-  "provides": [
-    {
-      "service": "sessions.sharing",
-      "version": "1.0.0",
-      "permission": "session-sharing.use"
-    }
-  ],
-  "requires": [
-    {
-      "service": "sessions.live",
-      "versionRange": "^1.0.0"
-    }
-  ],
-  "contributes": {
-    "guest": true,
-    "guestViews": ["shared", "collab-guest"],
-    "tabs": [
-      {
-        "id": "collab",
-        "titleKey": "nav.collab",
-        "icon": "Presentation",
-        "openFrom": ["rail"]
-      }
-    ],
-    "actions": [
-      {
-        "id": "session-sharing.share",
-        "titleKey": "sessionSharing.shareButton",
-        "handler": "share",
-        "permission": "session-sharing.use"
-      },
-      {
-        "id": "sessions.sharedWithMe",
-        "titleKey": "sessionSharing.sharedWithMe",
-        "handler": "sharedWithMe",
-        "permission": "session-sharing.use"
-      }
-    ],
-    "actionSlots": [
-      {
-        "id": "session.remoteDisplay",
-        "accepts": ["component"]
-      }
-    ],
-    "permissions": [
-      {
-        "name": "use",
-        "titleKey": "permissions.use.title",
-        "descriptionKey": "permissions.use.description",
-        "defaultRoles": ["admin", "user"]
-      }
-    ],
-    "settings": {
-      "admin": [
-        {
-          "key": "globallyEnabled",
-          "type": "boolean",
-          "labelKey": "settings.admin.globallyEnabled.label",
-          "descriptionKey": "settings.admin.globallyEnabled.description",
-          "default": true
-        }
-      ],
-      "host": {
-        "editorGroup": "ssh",
-        "editorOrder": 80,
-        "fields": [
-          {
-            "key": "allowSessionSharing",
-            "type": "boolean",
-            "labelKey": "settings.host.allowSessionSharing.label",
-            "descriptionKey": "settings.host.allowSessionSharing.description",
-            "default": true
-          }
-        ]
-      }
-    },
-    "uses": ["session.remoteDisplay.token", "terminal.open", "terminal.overlay"]
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"]
-}
diff --git a/plugins/session-sharing/migrations/mysql/0001_adopt_session_sharing.sql b/plugins/session-sharing/migrations/mysql/0001_adopt_session_sharing.sql
deleted file mode 100644
index 5a77df38e..000000000
--- a/plugins/session-sharing/migrations/mysql/0001_adopt_session_sharing.sql
+++ /dev/null
@@ -1,67 +0,0 @@
--- session-sharing 0001: adopt_session_sharing
--- Generated by termix-plugin migrations. Review before committing.
--- Hand-edited: keeps the legacy foreign keys the SDK cannot declare
--- (nullable or set-null user and host links, and links between these tables).
-
-CREATE TABLE IF NOT EXISTS `session_shares` (
-  `id` varchar(255) PRIMARY KEY NOT NULL,
-  `host_id` int NOT NULL,
-  `owner_user_id` varchar(255) NOT NULL,
-  `protocol` text NOT NULL,
-  `session_id` varchar(255) NOT NULL,
-  `tab_instance_id` text,
-  `share_type` text NOT NULL,
-  `target_user_id` varchar(255),
-  `link_token` varchar(255) UNIQUE,
-  `permission_level` text NOT NULL DEFAULT ('read-only'),
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `expires_at` text NOT NULL,
-  `revoked_at` text,
-  `last_joined_at` text,
-  `join_count` int NOT NULL DEFAULT 0,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`owner_user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`target_user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `session_shares` TO `p_session_sharing_shares`;
-CREATE TABLE IF NOT EXISTS `session_share_participants` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `share_id` varchar(255) NOT NULL,
-  `user_id` varchar(255),
-  `guest_label` text,
-  `joined_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `left_at` text,
-  FOREIGN KEY (`share_id`) REFERENCES `p_session_sharing_shares` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `session_share_participants` TO `p_session_sharing_share_participants`;
-CREATE TABLE IF NOT EXISTS `collab_rooms` (
-  `id` varchar(255) PRIMARY KEY NOT NULL,
-  `name` text NOT NULL,
-  `owner_user_id` varchar(255) NOT NULL,
-  `persistent` boolean NOT NULL DEFAULT false,
-  `presenter_user_id` varchar(255),
-  `stage_protocol` text,
-  `stage_host_id` int,
-  `stage_share_id` varchar(255),
-  `guest_link_token` varchar(255),
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `ended_at` text,
-  FOREIGN KEY (`owner_user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`presenter_user_id`) REFERENCES `users` (`id`) ON DELETE SET NULL,
-  FOREIGN KEY (`stage_host_id`) REFERENCES `ssh_data` (`id`) ON DELETE SET NULL,
-  FOREIGN KEY (`stage_share_id`) REFERENCES `p_session_sharing_shares` (`id`) ON DELETE SET NULL
-);
-RENAME TABLE `collab_rooms` TO `p_session_sharing_rooms`;
-CREATE TABLE IF NOT EXISTS `collab_room_members` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `room_id` varchar(255) NOT NULL,
-  `user_id` varchar(255) NOT NULL,
-  `room_role` text NOT NULL DEFAULT ('member'),
-  `added_by` varchar(255),
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`room_id`) REFERENCES `p_session_sharing_rooms` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`added_by`) REFERENCES `users` (`id`) ON DELETE SET NULL
-);
-RENAME TABLE `collab_room_members` TO `p_session_sharing_room_members`;
diff --git a/plugins/session-sharing/migrations/postgres/0001_adopt_session_sharing.sql b/plugins/session-sharing/migrations/postgres/0001_adopt_session_sharing.sql
deleted file mode 100644
index 038407e9e..000000000
--- a/plugins/session-sharing/migrations/postgres/0001_adopt_session_sharing.sql
+++ /dev/null
@@ -1,73 +0,0 @@
--- session-sharing 0001: adopt_session_sharing
--- Generated by termix-plugin migrations. Review before committing.
--- Hand-edited: keeps the legacy foreign keys the SDK cannot declare
--- (nullable or set-null user and host links, and links between these tables).
-
-CREATE TABLE IF NOT EXISTS "session_shares" (
-  "id" varchar(255) PRIMARY KEY NOT NULL,
-  "host_id" integer NOT NULL,
-  "owner_user_id" varchar(255) NOT NULL,
-  "protocol" text NOT NULL,
-  "session_id" varchar(255) NOT NULL,
-  "tab_instance_id" text,
-  "share_type" text NOT NULL,
-  "target_user_id" varchar(255),
-  "link_token" varchar(255) UNIQUE,
-  "permission_level" text NOT NULL DEFAULT 'read-only',
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "expires_at" text NOT NULL,
-  "revoked_at" text,
-  "last_joined_at" text,
-  "join_count" integer NOT NULL DEFAULT 0,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("owner_user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("target_user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_session_shares_session_id" ON "session_shares" ("session_id");
-CREATE INDEX IF NOT EXISTS "idx_session_shares_host_id" ON "session_shares" ("host_id");
-ALTER TABLE "session_shares" RENAME TO "p_session_sharing_shares";
-CREATE TABLE IF NOT EXISTS "session_share_participants" (
-  "id" serial PRIMARY KEY,
-  "share_id" varchar(255) NOT NULL,
-  "user_id" varchar(255),
-  "guest_label" text,
-  "joined_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "left_at" text,
-  FOREIGN KEY ("share_id") REFERENCES "p_session_sharing_shares" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "session_share_participants" RENAME TO "p_session_sharing_share_participants";
-CREATE TABLE IF NOT EXISTS "collab_rooms" (
-  "id" varchar(255) PRIMARY KEY NOT NULL,
-  "name" text NOT NULL,
-  "owner_user_id" varchar(255) NOT NULL,
-  "persistent" boolean NOT NULL DEFAULT false,
-  "presenter_user_id" varchar(255),
-  "stage_protocol" text,
-  "stage_host_id" integer,
-  "stage_share_id" varchar(255),
-  "guest_link_token" varchar(255),
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "ended_at" text,
-  FOREIGN KEY ("owner_user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("presenter_user_id") REFERENCES "users" ("id") ON DELETE SET NULL,
-  FOREIGN KEY ("stage_host_id") REFERENCES "ssh_data" ("id") ON DELETE SET NULL,
-  FOREIGN KEY ("stage_share_id") REFERENCES "p_session_sharing_shares" ("id") ON DELETE SET NULL
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_collab_rooms_guest_token" ON "collab_rooms" ("guest_link_token");
-CREATE INDEX IF NOT EXISTS "idx_collab_rooms_owner" ON "collab_rooms" ("owner_user_id");
-ALTER TABLE "collab_rooms" RENAME TO "p_session_sharing_rooms";
-CREATE TABLE IF NOT EXISTS "collab_room_members" (
-  "id" serial PRIMARY KEY,
-  "room_id" varchar(255) NOT NULL,
-  "user_id" varchar(255) NOT NULL,
-  "room_role" text NOT NULL DEFAULT 'member',
-  "added_by" varchar(255),
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("room_id") REFERENCES "p_session_sharing_rooms" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("added_by") REFERENCES "users" ("id") ON DELETE SET NULL
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_collab_room_members_room_user" ON "collab_room_members" ("room_id", "user_id");
-CREATE INDEX IF NOT EXISTS "idx_collab_room_members_user" ON "collab_room_members" ("user_id");
-ALTER TABLE "collab_room_members" RENAME TO "p_session_sharing_room_members";
diff --git a/plugins/session-sharing/migrations/snapshot.json b/plugins/session-sharing/migrations/snapshot.json
deleted file mode 100644
index 4341c1fa0..000000000
--- a/plugins/session-sharing/migrations/snapshot.json
+++ /dev/null
@@ -1,223 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "shares": {
-      "columns": {
-        "id": {
-          "type": "varchar",
-          "length": 255,
-          "primaryKey": true,
-          "notNull": true
-        },
-        "hostId": {
-          "type": "refHost",
-          "notNull": true
-        },
-        "ownerUserId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "protocol": {
-          "type": "text",
-          "notNull": true
-        },
-        "sessionId": {
-          "type": "varchar",
-          "length": 255,
-          "notNull": true
-        },
-        "tabInstanceId": {
-          "type": "text"
-        },
-        "shareType": {
-          "type": "text",
-          "notNull": true
-        },
-        "targetUserId": {
-          "type": "varchar",
-          "length": 255
-        },
-        "linkToken": {
-          "type": "varchar",
-          "length": 255,
-          "unique": true
-        },
-        "permissionLevel": {
-          "type": "text",
-          "notNull": true,
-          "defaultValue": "read-only"
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "expiresAt": {
-          "type": "text",
-          "notNull": true
-        },
-        "revokedAt": {
-          "type": "text"
-        },
-        "lastJoinedAt": {
-          "type": "text"
-        },
-        "joinCount": {
-          "type": "integer",
-          "notNull": true,
-          "defaultValue": 0
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_session_shares_session_id",
-          "columns": ["sessionId"]
-        },
-        {
-          "name": "idx_session_shares_host_id",
-          "columns": ["hostId"]
-        }
-      ],
-      "adopts": "session_shares"
-    },
-    "share_participants": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "shareId": {
-          "type": "varchar",
-          "length": 255,
-          "notNull": true
-        },
-        "userId": {
-          "type": "varchar",
-          "length": 255
-        },
-        "guestLabel": {
-          "type": "text"
-        },
-        "joinedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "leftAt": {
-          "type": "text"
-        }
-      },
-      "indexes": [],
-      "adopts": "session_share_participants"
-    },
-    "rooms": {
-      "columns": {
-        "id": {
-          "type": "varchar",
-          "length": 255,
-          "primaryKey": true,
-          "notNull": true
-        },
-        "name": {
-          "type": "text",
-          "notNull": true
-        },
-        "ownerUserId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "persistent": {
-          "type": "boolean",
-          "notNull": true,
-          "defaultValue": false
-        },
-        "presenterUserId": {
-          "type": "varchar",
-          "length": 255
-        },
-        "stageProtocol": {
-          "type": "text"
-        },
-        "stageHostId": {
-          "type": "integer"
-        },
-        "stageShareId": {
-          "type": "varchar",
-          "length": 255
-        },
-        "guestLinkToken": {
-          "type": "varchar",
-          "length": 255
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "endedAt": {
-          "type": "text"
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_collab_rooms_guest_token",
-          "columns": ["guestLinkToken"],
-          "unique": true
-        },
-        {
-          "name": "idx_collab_rooms_owner",
-          "columns": ["ownerUserId"]
-        }
-      ],
-      "adopts": "collab_rooms"
-    },
-    "room_members": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "roomId": {
-          "type": "varchar",
-          "length": 255,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "roomRole": {
-          "type": "text",
-          "notNull": true,
-          "defaultValue": "member"
-        },
-        "addedBy": {
-          "type": "varchar",
-          "length": 255
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_collab_room_members_room_user",
-          "columns": ["roomId", "userId"],
-          "unique": true
-        },
-        {
-          "name": "idx_collab_room_members_user",
-          "columns": ["userId"]
-        }
-      ],
-      "adopts": "collab_room_members"
-    }
-  }
-}
diff --git a/plugins/session-sharing/migrations/sqlite/0001_adopt_session_sharing.sql b/plugins/session-sharing/migrations/sqlite/0001_adopt_session_sharing.sql
deleted file mode 100644
index 45947f678..000000000
--- a/plugins/session-sharing/migrations/sqlite/0001_adopt_session_sharing.sql
+++ /dev/null
@@ -1,73 +0,0 @@
--- session-sharing 0001: adopt_session_sharing
--- Generated by termix-plugin migrations. Review before committing.
--- Hand-edited: keeps the legacy foreign keys the SDK cannot declare
--- (nullable or set-null user and host links, and links between these tables).
-
-CREATE TABLE IF NOT EXISTS "session_shares" (
-  "id" text PRIMARY KEY NOT NULL,
-  "host_id" integer NOT NULL,
-  "owner_user_id" text NOT NULL,
-  "protocol" text NOT NULL,
-  "session_id" text NOT NULL,
-  "tab_instance_id" text,
-  "share_type" text NOT NULL,
-  "target_user_id" text,
-  "link_token" text UNIQUE,
-  "permission_level" text NOT NULL DEFAULT 'read-only',
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "expires_at" text NOT NULL,
-  "revoked_at" text,
-  "last_joined_at" text,
-  "join_count" integer NOT NULL DEFAULT 0,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("owner_user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("target_user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_session_shares_session_id" ON "session_shares" ("session_id");
-CREATE INDEX IF NOT EXISTS "idx_session_shares_host_id" ON "session_shares" ("host_id");
-ALTER TABLE "session_shares" RENAME TO "p_session_sharing_shares";
-CREATE TABLE IF NOT EXISTS "session_share_participants" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "share_id" text NOT NULL,
-  "user_id" text,
-  "guest_label" text,
-  "joined_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "left_at" text,
-  FOREIGN KEY ("share_id") REFERENCES "p_session_sharing_shares" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "session_share_participants" RENAME TO "p_session_sharing_share_participants";
-CREATE TABLE IF NOT EXISTS "collab_rooms" (
-  "id" text PRIMARY KEY NOT NULL,
-  "name" text NOT NULL,
-  "owner_user_id" text NOT NULL,
-  "persistent" integer NOT NULL DEFAULT 0,
-  "presenter_user_id" text,
-  "stage_protocol" text,
-  "stage_host_id" integer,
-  "stage_share_id" text,
-  "guest_link_token" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "ended_at" text,
-  FOREIGN KEY ("owner_user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("presenter_user_id") REFERENCES "users" ("id") ON DELETE SET NULL,
-  FOREIGN KEY ("stage_host_id") REFERENCES "ssh_data" ("id") ON DELETE SET NULL,
-  FOREIGN KEY ("stage_share_id") REFERENCES "p_session_sharing_shares" ("id") ON DELETE SET NULL
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_collab_rooms_guest_token" ON "collab_rooms" ("guest_link_token");
-CREATE INDEX IF NOT EXISTS "idx_collab_rooms_owner" ON "collab_rooms" ("owner_user_id");
-ALTER TABLE "collab_rooms" RENAME TO "p_session_sharing_rooms";
-CREATE TABLE IF NOT EXISTS "collab_room_members" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "room_id" text NOT NULL,
-  "user_id" text NOT NULL,
-  "room_role" text NOT NULL DEFAULT 'member',
-  "added_by" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("room_id") REFERENCES "p_session_sharing_rooms" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("added_by") REFERENCES "users" ("id") ON DELETE SET NULL
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_collab_room_members_room_user" ON "collab_room_members" ("room_id", "user_id");
-CREATE INDEX IF NOT EXISTS "idx_collab_room_members_user" ON "collab_room_members" ("user_id");
-ALTER TABLE "collab_room_members" RENAME TO "p_session_sharing_room_members";
diff --git a/plugins/session-sharing/package.json b/plugins/session-sharing/package.json
deleted file mode 100644
index 8f6971a04..000000000
--- a/plugins/session-sharing/package.json
+++ /dev/null
@@ -1,48 +0,0 @@
-{
-  "name": "@termix-plugin/session-sharing",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "@xterm/addon-fit": "^0.11.0",
-    "@xterm/xterm": "^6.0.0",
-    "lucide-react": "^1.33.0",
-    "react-xtermjs": "^1.0.10",
-    "redis": "^6.2.1"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "react": "^19.2.8",
-    "sonner": "^2.0.8",
-    "ws": "^8.21.3"
-  },
-  "termix": {
-    "patches": [
-      "xterm-android-ime"
-    ]
-  },
-  "overrides": {
-    "react-xtermjs": {
-      "@xterm/xterm": "$@xterm/xterm"
-    }
-  }
-}
diff --git a/plugins/session-sharing/src/backend/deps.ts b/plugins/session-sharing/src/backend/deps.ts
deleted file mode 100644
index d05d347e9..000000000
--- a/plugins/session-sharing/src/backend/deps.ts
+++ /dev/null
@@ -1,51 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { LiveSessions } from "./live.js";
-import type { RateLimiter } from "./rate-limit.js";
-import type {
-  Directory,
-  RoomRepository,
-  ShareRepository,
-} from "./repositories.js";
-import type { CollabRoomHub } from "./room-hub.js";
-import type { CollabRuntimeStore } from "./runtime-store.js";
-
-/** Everything the routes and services share, built once in activate. */
-export interface SharingDeps {
-  ctx: PluginContext;
-  shares: ShareRepository;
-  rooms: RoomRepository;
-  directory: Directory;
-  live: LiveSessions;
-  hub: CollabRoomHub;
-  store: CollabRuntimeStore;
-  /** /resolve/:linkToken, 30 a minute per IP. */
-  resolveLimiter: RateLimiter;
-  /** Room guest links, 60 a minute per IP. */
-  guestLimiter: RateLimiter;
-  isSharingEnabledForHost: (hostId: number) => Promise<boolean>;
-}
-
-export const PROTOCOLS = ["ssh", "rdp", "vnc", "telnet"] as const;
-
-/** Where SSH shares are joined: the terminal's own socket. */
-export const TERMINAL_WS_PATH = "/plugin-ws/ssh-terminal/terminal";
-/** Where remote desktop viewers connect. */
-export const DISPLAY_WS_PATH = "/plugin-ws/remote-desktop/display";
-
-export function clientIp(req: {
-  ip?: string;
-  socket?: { remoteAddress?: string };
-}): string {
-  return req.ip || req.socket?.remoteAddress || "unknown";
-}
-
-export function isNonEmptyString(value: unknown): value is string {
-  return typeof value === "string" && value.trim().length > 0;
-}
-
-/** The acting user, which core set from the authenticated request. */
-export function actorOf(ctx: PluginContext): string {
-  const userId = ctx.currentActor();
-  if (!userId) throw new Error("No acting user");
-  return userId;
-}
diff --git a/plugins/session-sharing/src/backend/index.ts b/plugins/session-sharing/src/backend/index.ts
deleted file mode 100644
index 37f012c8c..000000000
--- a/plugins/session-sharing/src/backend/index.ts
+++ /dev/null
@@ -1,80 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { SharingDeps } from "./deps.js";
-import { createLiveSessions, isSharingEnabledForHost } from "./live.js";
-import { createRateLimiter } from "./rate-limit.js";
-import {
-  createDirectory,
-  createRoomRepository,
-  createShareRepository,
-  type CoreRefs,
-  type Tables,
-} from "./repositories.js";
-import { CollabRoomHub } from "./room-hub.js";
-import { createRoomActions, registerRoomRoutes } from "./room-routes.js";
-import { CollabRuntimeStore } from "./runtime-store.js";
-import {
-  SESSION_GUESTS_KEY,
-  createSessionGuests,
-  createSessionSharingService,
-} from "./services.js";
-import { registerShareRoutes } from "./share-routes.js";
-import { roomMembers, rooms, shareParticipants, shares } from "./tables.js";
-
-export async function activate(ctx: PluginContext) {
-  const tables: Tables = {
-    shares: await ctx.db.define(shares),
-    participants: await ctx.db.define(shareParticipants),
-    rooms: await ctx.db.define(rooms),
-    members: await ctx.db.define(roomMembers),
-  };
-  const refs = () => ctx.db.refs<CoreRefs>();
-
-  const directory = createDirectory(ctx.db, refs);
-  const store = new CollabRuntimeStore(ctx.log);
-  const hub = new CollabRoomHub(store);
-  const resolveLimiter = createRateLimiter({
-    windowMs: 60_000,
-    maxAttempts: 30,
-  });
-  const guestLimiter = createRateLimiter({ windowMs: 60_000, maxAttempts: 60 });
-  ctx.disposables.add(() => {
-    hub.dispose();
-    resolveLimiter.dispose();
-    guestLimiter.dispose();
-    return store.close();
-  });
-
-  const deps: SharingDeps = {
-    ctx,
-    shares: createShareRepository(ctx.db, tables),
-    rooms: createRoomRepository(ctx.db, tables, refs),
-    directory,
-    live: createLiveSessions(ctx),
-    hub,
-    store,
-    resolveLimiter,
-    guestLimiter,
-    isSharingEnabledForHost: (hostId) =>
-      isSharingEnabledForHost(ctx, directory.hostExists, hostId),
-  };
-
-  const actions = createRoomActions(deps);
-  store.onEvent(actions.onRuntimeEvent);
-
-  // Guest links carry their own token, checked in the handlers.
-  const router = ctx.http.router<Router>({
-    public: ["/resolve/:linkToken", "/guest/:token"],
-  });
-  registerShareRoutes(router, deps);
-  registerRoomRoutes(router, deps, actions);
-
-  ctx.services.provide("sessions.sharing", createSessionSharingService(deps));
-  ctx.registry.provide(SESSION_GUESTS_KEY, createSessionGuests(deps));
-
-  ctx.log.info("Session sharing mounted at /plugin-api/session-sharing");
-}
-
-export async function deactivate() {
-  // Everything above was registered through ctx and is disposed by core.
-}
diff --git a/plugins/session-sharing/src/backend/live.ts b/plugins/session-sharing/src/backend/live.ts
deleted file mode 100644
index bf6eb8417..000000000
--- a/plugins/session-sharing/src/backend/live.ts
+++ /dev/null
@@ -1,205 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { LiveProtocol } from "./repositories.js";
-
-export const LIVE_SESSIONS_SERVICE = "sessions.live";
-
-/** What every sessions.live provider reports about one session. */
-export interface LiveSessionInfo {
-  id: string;
-  userId: string;
-  hostId: number;
-  hostName: string;
-  isConnected: boolean;
-  createdAt: number;
-  tabInstanceId: string | null;
-}
-
-/**
- * sessions.live v1, keyed by session type. ssh-terminal provides "ssh";
- * remote-desktop provides "rdp", "vnc" and "telnet". Through a service handle
- * every method answers with a promise. The control methods are the terminal's
- * (a remote desktop viewer cannot be kicked or handed control), and
- * createViewerToken is remote desktop's: a join token for a viewer.
- */
-export interface LiveSessionProvider {
-  getSession: (sessionId: string) => LiveSessionInfo | null;
-  ownerEndSession?: (sessionId: string, reason: string) => void;
-  disconnectParticipants?: (
-    sessionId: string,
-    shareId: string,
-    options: { reason: string; userId?: string | null },
-  ) => number;
-  setRoomShareControl?: (
-    sessionId: string,
-    shareId: string,
-    controllerUserId: string | null,
-  ) => void;
-  listGuests?: (
-    sessionId: string,
-    shareId: string,
-  ) => { label: string | null }[];
-  createViewerToken?: (sessionId: string, readOnly: boolean) => string;
-}
-
-type Async<T> = {
-  [K in keyof T]-?: T[K] extends ((...args: infer A) => infer R) | undefined
-    ? (...args: A) => Promise<R>
-    : never;
-};
-
-export type LiveSessions = ReturnType<typeof createLiveSessions>;
-
-/**
- * Reaches live sessions through sessions.live as the acting user. A caller
- * with no actor (a public guest route) passes the share owner, who owns the
- * session being looked at.
- */
-export function createLiveSessions(ctx: PluginContext) {
-  async function run<T>(
-    asUser: string | undefined,
-    fn: () => Promise<T>,
-  ): Promise<T> {
-    if (asUser && ctx.currentActor() !== asUser) {
-      return ctx.asUser(asUser, fn);
-    }
-    return fn();
-  }
-
-  function provider(protocol: string): Async<LiveSessionProvider> | null {
-    const handle = ctx.services.get<Async<LiveSessionProvider>>(
-      LIVE_SESSIONS_SERVICE,
-      { provider: protocol },
-    );
-    return "getSession" in handle ? handle : null;
-  }
-
-  async function getSession(
-    protocol: string,
-    sessionId: string,
-    asUser?: string,
-  ): Promise<LiveSessionInfo | null> {
-    const live = provider(protocol);
-    if (!live) return null;
-    try {
-      return (await run(asUser, () => live.getSession(sessionId))) ?? null;
-    } catch {
-      return null;
-    }
-  }
-
-  return {
-    getSession,
-
-    async isLive(
-      protocol: string,
-      sessionId: string,
-      asUser?: string,
-    ): Promise<boolean> {
-      const session = await getSession(protocol, sessionId, asUser);
-      return !!session?.isConnected;
-    },
-
-    async isOwnedBy(
-      protocol: LiveProtocol,
-      sessionId: string,
-      userId: string,
-    ): Promise<boolean> {
-      const session = await getSession(protocol, sessionId);
-      return !!session && session.isConnected && session.userId === userId;
-    },
-
-    /** Anonymous link guests on one share; empty when the type cannot tell. */
-    async listGuests(
-      protocol: string,
-      sessionId: string,
-      shareId: string,
-      asUser?: string,
-    ): Promise<{ label: string | null }[]> {
-      const live = provider(protocol);
-      if (!live || !("listGuests" in live)) return [];
-      try {
-        return (
-          (await run(asUser, () => live.listGuests(sessionId, shareId))) ?? []
-        );
-      } catch {
-        return [];
-      }
-    },
-
-    /** Ends the session for every guest. Best effort, like before. */
-    async ownerEndSession(
-      protocol: string,
-      sessionId: string,
-      reason: string,
-      asUser?: string,
-    ): Promise<void> {
-      const live = provider(protocol);
-      if (!live || !("ownerEndSession" in live)) return;
-      await run(asUser, () => live.ownerEndSession(sessionId, reason)).catch(
-        () => {},
-      );
-    },
-
-    async disconnectParticipants(
-      protocol: string,
-      sessionId: string,
-      shareId: string,
-      options: { reason: string; userId?: string | null },
-      asUser?: string,
-    ): Promise<void> {
-      const live = provider(protocol);
-      if (!live || !("disconnectParticipants" in live)) return;
-      await run(asUser, () =>
-        live.disconnectParticipants(sessionId, shareId, options),
-      ).catch(() => {});
-    },
-
-    async setRoomShareControl(
-      protocol: string,
-      sessionId: string,
-      shareId: string,
-      controllerUserId: string | null,
-      asUser?: string,
-    ): Promise<void> {
-      const live = provider(protocol);
-      if (!live || !("setRoomShareControl" in live)) return;
-      await run(asUser, () =>
-        live.setRoomShareControl(sessionId, shareId, controllerUserId),
-      ).catch(() => {});
-    },
-
-    /** A viewer token for a remote desktop session. Throws while unavailable. */
-    async createViewerToken(
-      protocol: string,
-      sessionId: string,
-      readOnly: boolean,
-      asUser?: string,
-    ): Promise<string> {
-      const live = provider(protocol);
-      if (!live || !("createViewerToken" in live)) {
-        throw new Error(`No ${protocol} session provider is running`);
-      }
-      return run(asUser, () => live.createViewerToken(sessionId, readOnly));
-    },
-  };
-}
-
-/**
- * Whether sessions on a host may be shared: the admin switch first, then the
- * host's own setting. Both default to on. A host that does not exist cannot
- * be shared.
- */
-export async function isSharingEnabledForHost(
-  ctx: PluginContext,
-  hostExists: (hostId: number) => Promise<boolean>,
-  hostId: number,
-): Promise<boolean> {
-  if ((await ctx.settings.get<boolean>("globallyEnabled")) === false) {
-    return false;
-  }
-  if (!(await hostExists(hostId))) return false;
-  return (
-    (await ctx.settings.getHost<boolean>(hostId, "allowSessionSharing")) !==
-    false
-  );
-}
diff --git a/plugins/session-sharing/src/backend/rate-limit.ts b/plugins/session-sharing/src/backend/rate-limit.ts
deleted file mode 100644
index 2994ba6d3..000000000
--- a/plugins/session-sharing/src/backend/rate-limit.ts
+++ /dev/null
@@ -1,37 +0,0 @@
-/**
- * A per-IP fixed window, for the public guest endpoints. `dispose` stops the
- * sweep that forgets old windows.
- */
-export function createRateLimiter(options: {
-  windowMs: number;
-  maxAttempts: number;
-}) {
-  const attempts = new Map<string, { count: number; windowStart: number }>();
-  const sweep = setInterval(() => {
-    const now = Date.now();
-    for (const [ip, entry] of attempts) {
-      if (now - entry.windowStart > options.windowMs) attempts.delete(ip);
-    }
-  }, 5 * options.windowMs);
-  sweep.unref();
-
-  return {
-    /** Counts an attempt and says whether this IP is over the limit. */
-    isLimited(ip: string): boolean {
-      const now = Date.now();
-      const entry = attempts.get(ip);
-      if (!entry || now - entry.windowStart > options.windowMs) {
-        attempts.set(ip, { count: 1, windowStart: now });
-        return false;
-      }
-      entry.count += 1;
-      return entry.count > options.maxAttempts;
-    },
-    dispose(): void {
-      clearInterval(sweep);
-      attempts.clear();
-    },
-  };
-}
-
-export type RateLimiter = ReturnType<typeof createRateLimiter>;
diff --git a/plugins/session-sharing/src/backend/repositories.ts b/plugins/session-sharing/src/backend/repositories.ts
deleted file mode 100644
index 5987b736b..000000000
--- a/plugins/session-sharing/src/backend/repositories.ts
+++ /dev/null
@@ -1,591 +0,0 @@
-import { and, desc, eq, gt, inArray, isNull } from "drizzle-orm";
-import type { PluginDatabase } from "@termix/plugin-sdk/backend";
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// Tables come from ctx.db.define, which the SDK hands back untyped, and the
-// drizzle handle is the server's own. Typed at this module's edge instead.
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export type ShareType = "link" | "user" | "room";
-export type PermissionLevel = "read-only" | "read-write";
-export type LiveProtocol = "ssh" | "rdp" | "vnc" | "telnet";
-
-export interface ShareRecord {
-  id: string;
-  hostId: number;
-  ownerUserId: string;
-  protocol: string;
-  sessionId: string;
-  tabInstanceId: string | null;
-  shareType: string;
-  targetUserId: string | null;
-  linkToken: string | null;
-  permissionLevel: string;
-  createdAt: string;
-  expiresAt: string;
-  revokedAt: string | null;
-  lastJoinedAt: string | null;
-  joinCount: number;
-}
-
-export interface ShareCreateInput {
-  id: string;
-  hostId: number;
-  ownerUserId: string;
-  protocol: string;
-  sessionId: string;
-  tabInstanceId?: string | null;
-  shareType: ShareType;
-  targetUserId?: string | null;
-  linkToken?: string | null;
-  permissionLevel: PermissionLevel;
-  expiresAt: string;
-}
-
-export interface RoomRecord {
-  id: string;
-  name: string;
-  ownerUserId: string;
-  persistent: boolean;
-  presenterUserId: string | null;
-  stageProtocol: string | null;
-  stageHostId: number | null;
-  stageShareId: string | null;
-  guestLinkToken: string | null;
-  createdAt: string;
-  endedAt: string | null;
-}
-
-export interface RoomMemberRecord {
-  id: number;
-  roomId: string;
-  userId: string;
-  roomRole: string;
-  addedBy: string | null;
-  createdAt: string;
-}
-
-export interface RoomMemberWithUser {
-  userId: string;
-  username: string;
-  roomRole: string;
-  createdAt: string;
-}
-
-export interface RoomStage {
-  presenterUserId: string | null;
-  stageProtocol: string | null;
-  stageHostId: number | null;
-  stageShareId: string | null;
-}
-
-export interface Tables {
-  shares: Table;
-  participants: Table;
-  rooms: Table;
-  members: Table;
-}
-
-export interface CoreRefs {
-  users: Table;
-  hosts: Table;
-  roles: Table;
-  userRoles: Table;
-}
-
-const nowIso = () => new Date().toISOString();
-
-/** Not revoked and not expired. Expiry is compared as ISO text, as before. */
-function activeShare(shares: Table, now: string) {
-  return and(isNull(shares.revokedAt), gt(shares.expiresAt, now));
-}
-
-export type ShareRepository = ReturnType<typeof createShareRepository>;
-
-export function createShareRepository(db: PluginDatabase, tables: Tables) {
-  const client = () => db.client<Drizzle>();
-  const { shares, participants } = tables;
-
-  async function findById(id: string): Promise<ShareRecord | null> {
-    const rows = await (
-      await client()
-    )
-      .select()
-      .from(shares)
-      .where(eq(shares.id, id))
-      .limit(1);
-    return rows[0] ?? null;
-  }
-
-  return {
-    findById,
-
-    async create(input: ShareCreateInput): Promise<ShareRecord> {
-      await (await client()).insert(shares).values({
-        id: input.id,
-        hostId: input.hostId,
-        ownerUserId: input.ownerUserId,
-        protocol: input.protocol,
-        sessionId: input.sessionId,
-        tabInstanceId: input.tabInstanceId ?? null,
-        shareType: input.shareType,
-        targetUserId: input.targetUserId ?? null,
-        linkToken: input.linkToken ?? null,
-        permissionLevel: input.permissionLevel,
-        expiresAt: input.expiresAt,
-      });
-      await db.persist();
-      return (await findById(input.id))!;
-    },
-
-    async findActiveById(
-      id: string,
-      now = nowIso(),
-    ): Promise<ShareRecord | null> {
-      const rows = await (
-        await client()
-      )
-        .select()
-        .from(shares)
-        .where(and(eq(shares.id, id), activeShare(shares, now)))
-        .limit(1);
-      return rows[0] ?? null;
-    },
-
-    async findByLinkToken(
-      linkToken: string,
-      now = nowIso(),
-    ): Promise<ShareRecord | null> {
-      const rows = await (
-        await client()
-      )
-        .select()
-        .from(shares)
-        .where(and(eq(shares.linkToken, linkToken), activeShare(shares, now)))
-        .limit(1);
-      return rows[0] ?? null;
-    },
-
-    async findActiveSharesForHost(
-      hostId: number,
-      ownerUserId: string,
-      now = nowIso(),
-    ): Promise<ShareRecord[]> {
-      return (await client())
-        .select()
-        .from(shares)
-        .where(
-          and(
-            eq(shares.hostId, hostId),
-            eq(shares.ownerUserId, ownerUserId),
-            activeShare(shares, now),
-          ),
-        );
-    },
-
-    /** Active user shares aimed at this user. */
-    async findSharesTargetingUser(
-      userId: string,
-      now = nowIso(),
-    ): Promise<ShareRecord[]> {
-      return (await client())
-        .select()
-        .from(shares)
-        .where(
-          and(
-            eq(shares.shareType, "user"),
-            eq(shares.targetUserId, userId),
-            activeShare(shares, now),
-          ),
-        );
-    },
-
-    /** Revokes a share the given user owns. False when it is not theirs. */
-    async revoke(shareId: string, ownerUserId: string): Promise<boolean> {
-      const share = await findById(shareId);
-      if (!share || share.ownerUserId !== ownerUserId) return false;
-      await (
-        await client()
-      )
-        .update(shares)
-        .set({ revokedAt: nowIso() })
-        .where(eq(shares.id, shareId));
-      await db.persist();
-      return true;
-    },
-
-    async revokeAny(shareId: string): Promise<boolean> {
-      if (!(await findById(shareId))) return false;
-      await (
-        await client()
-      )
-        .update(shares)
-        .set({ revokedAt: nowIso() })
-        .where(eq(shares.id, shareId));
-      await db.persist();
-      return true;
-    },
-
-    async touchUsage(shareId: string): Promise<void> {
-      const current = await findById(shareId);
-      if (!current) return;
-      await (
-        await client()
-      )
-        .update(shares)
-        .set({
-          lastJoinedAt: nowIso(),
-          joinCount: (current.joinCount ?? 0) + 1,
-        })
-        .where(eq(shares.id, shareId));
-      await db.persist();
-    },
-
-    async recordParticipantJoin(
-      shareId: string,
-      userId: string | null,
-      guestLabel: string | null,
-    ): Promise<void> {
-      await (
-        await client()
-      )
-        .insert(participants)
-        .values({ shareId, userId, guestLabel });
-      await db.persist();
-    },
-  };
-}
-
-export type RoomRepository = ReturnType<typeof createRoomRepository>;
-
-export function createRoomRepository(
-  db: PluginDatabase,
-  tables: Tables,
-  refs: () => Promise<CoreRefs>,
-) {
-  const client = () => db.client<Drizzle>();
-  const { rooms, members } = tables;
-
-  async function findById(id: string): Promise<RoomRecord | null> {
-    const rows = await (
-      await client()
-    )
-      .select()
-      .from(rooms)
-      .where(eq(rooms.id, id))
-      .limit(1);
-    return rows[0] ?? null;
-  }
-
-  async function findMember(
-    roomId: string,
-    userId: string,
-  ): Promise<RoomMemberRecord | null> {
-    const rows = await (
-      await client()
-    )
-      .select()
-      .from(members)
-      .where(and(eq(members.roomId, roomId), eq(members.userId, userId)))
-      .limit(1);
-    return rows[0] ?? null;
-  }
-
-  async function updateStage(roomId: string, stage: RoomStage): Promise<void> {
-    await (await client()).update(rooms).set(stage).where(eq(rooms.id, roomId));
-    await db.persist();
-  }
-
-  return {
-    findById,
-    findMember,
-    updateStage,
-
-    async createRoom(input: {
-      id: string;
-      name: string;
-      ownerUserId: string;
-      persistent: boolean;
-    }): Promise<RoomRecord> {
-      await (await client()).insert(rooms).values(input);
-      await db.persist();
-      return (await findById(input.id))!;
-    },
-
-    /** The live room whose stage points at this share, if any. */
-    async findByStageShareId(shareId: string): Promise<RoomRecord | null> {
-      const rows = await (
-        await client()
-      )
-        .select()
-        .from(rooms)
-        .where(and(eq(rooms.stageShareId, shareId), isNull(rooms.endedAt)))
-        .limit(1);
-      return rows[0] ?? null;
-    },
-
-    async findByGuestToken(token: string): Promise<RoomRecord | null> {
-      const rows = await (
-        await client()
-      )
-        .select()
-        .from(rooms)
-        .where(and(eq(rooms.guestLinkToken, token), isNull(rooms.endedAt)))
-        .limit(1);
-      return rows[0] ?? null;
-    },
-
-    async setGuestToken(roomId: string, token: string | null): Promise<void> {
-      await (
-        await client()
-      )
-        .update(rooms)
-        .set({ guestLinkToken: token })
-        .where(eq(rooms.id, roomId));
-      await db.persist();
-    },
-
-    async listForUser(userId: string): Promise<RoomRecord[]> {
-      const rows = await (
-        await client()
-      )
-        .select({ room: rooms })
-        .from(members)
-        .innerJoin(rooms, eq(members.roomId, rooms.id))
-        .where(and(eq(members.userId, userId), isNull(rooms.endedAt)))
-        .orderBy(desc(rooms.createdAt));
-      return rows.map((row: { room: RoomRecord }) => row.room);
-    },
-
-    async addMember(input: {
-      roomId: string;
-      userId: string;
-      roomRole: "host" | "member";
-      addedBy: string | null;
-    }): Promise<boolean> {
-      if (await findMember(input.roomId, input.userId)) return false;
-      await (await client()).insert(members).values(input);
-      await db.persist();
-      return true;
-    },
-
-    async removeMember(roomId: string, userId: string): Promise<void> {
-      await (
-        await client()
-      )
-        .delete(members)
-        .where(and(eq(members.roomId, roomId), eq(members.userId, userId)));
-      await db.persist();
-    },
-
-    async listMembers(roomId: string): Promise<RoomMemberWithUser[]> {
-      const rows: RoomMemberRecord[] = await (
-        await client()
-      )
-        .select()
-        .from(members)
-        .where(eq(members.roomId, roomId));
-      const names = await usernames(rows.map((row) => row.userId));
-      return rows
-        .filter((row) => names.has(row.userId))
-        .map((row) => ({
-          userId: row.userId,
-          username: names.get(row.userId)!,
-          roomRole: row.roomRole,
-          createdAt: row.createdAt,
-        }))
-        .sort((a, b) => a.username.localeCompare(b.username));
-    },
-
-    /**
-     * Sets the stage only if it still points at `expectedShareId`, so two
-     * members taking the stage at once cannot both win.
-     */
-    async replaceStage(
-      roomId: string,
-      expectedShareId: string | null,
-      stage: RoomStage,
-    ): Promise<boolean> {
-      await (
-        await client()
-      )
-        .update(rooms)
-        .set(stage)
-        .where(
-          and(
-            eq(rooms.id, roomId),
-            expectedShareId
-              ? eq(rooms.stageShareId, expectedShareId)
-              : isNull(rooms.stageShareId),
-          ),
-        );
-      const after = await findById(roomId);
-      const changed = !!after && after.stageShareId === stage.stageShareId;
-      if (changed) await db.persist();
-      return changed;
-    },
-
-    async clearStage(roomId: string): Promise<void> {
-      await updateStage(roomId, {
-        presenterUserId: null,
-        stageProtocol: null,
-        stageHostId: null,
-        stageShareId: null,
-      });
-    },
-
-    async endRoom(roomId: string): Promise<void> {
-      await (
-        await client()
-      )
-        .update(rooms)
-        .set({
-          endedAt: nowIso(),
-          presenterUserId: null,
-          stageProtocol: null,
-          stageHostId: null,
-          stageShareId: null,
-        })
-        .where(eq(rooms.id, roomId));
-      await db.persist();
-    },
-
-    async deleteRoom(roomId: string): Promise<void> {
-      const drizzle = await client();
-      // Not left to the foreign key: SQLite only cascades with foreign_keys on.
-      await drizzle.delete(members).where(eq(members.roomId, roomId));
-      await drizzle.delete(rooms).where(eq(rooms.id, roomId));
-      await db.persist();
-    },
-  };
-
-  async function usernames(ids: string[]): Promise<Map<string, string>> {
-    if (ids.length === 0) return new Map();
-    const { users } = await refs();
-    const rows: Array<{ id: string; username: string }> = await (
-      await client()
-    )
-      .select({ id: users.id, username: users.username })
-      .from(users)
-      .where(inArray(users.id, ids));
-    return new Map(rows.map((row) => [row.id, row.username]));
-  }
-}
-
-export type Directory = ReturnType<typeof createDirectory>;
-
-/** Users and roles, read through ctx.db.refs, for names and invites. */
-export function createDirectory(
-  db: PluginDatabase,
-  refs: () => Promise<CoreRefs>,
-) {
-  const client = () => db.client<Drizzle>();
-
-  return {
-    async username(userId: string): Promise<string> {
-      const { users } = await refs();
-      const rows = await (
-        await client()
-      )
-        .select({ username: users.username })
-        .from(users)
-        .where(eq(users.id, userId))
-        .limit(1);
-      return rows[0]?.username ?? userId;
-    },
-
-    async userExists(userId: string): Promise<boolean> {
-      const { users } = await refs();
-      const rows = await (
-        await client()
-      )
-        .select({ id: users.id })
-        .from(users)
-        .where(eq(users.id, userId))
-        .limit(1);
-      return rows.length > 0;
-    },
-
-    async isAdmin(userId: string): Promise<boolean> {
-      const { users } = await refs();
-      const rows = await (
-        await client()
-      )
-        .select({ isAdmin: users.isAdmin })
-        .from(users)
-        .where(eq(users.id, userId))
-        .limit(1);
-      return !!rows[0]?.isAdmin;
-    },
-
-    async hostIdsBySyncId(syncId: string): Promise<number[]> {
-      const { hosts } = await refs();
-      const rows = await (
-        await client()
-      )
-        .select({ id: hosts.id })
-        .from(hosts)
-        .where(eq(hosts.syncId, syncId));
-      return rows.map((row: { id: number }) => row.id);
-    },
-
-    async hostExists(hostId: number): Promise<boolean> {
-      const { hosts } = await refs();
-      const rows = await (
-        await client()
-      )
-        .select({ id: hosts.id })
-        .from(hosts)
-        .where(eq(hosts.id, hostId))
-        .limit(1);
-      return rows.length > 0;
-    },
-
-    async roleExists(roleId: number): Promise<boolean> {
-      const { roles } = await refs();
-      const rows = await (
-        await client()
-      )
-        .select({ id: roles.id })
-        .from(roles)
-        .where(eq(roles.id, roleId))
-        .limit(1);
-      return rows.length > 0;
-    },
-
-    async roleUserIds(roleId: number): Promise<string[]> {
-      const { userRoles } = await refs();
-      const rows: Array<{ userId: string }> = await (
-        await client()
-      )
-        .select({ userId: userRoles.userId })
-        .from(userRoles)
-        .where(eq(userRoles.roleId, roleId));
-      return rows.map((row) => row.userId);
-    },
-
-    async listUsers(): Promise<Array<{ id: string; username: string }>> {
-      const { users } = await refs();
-      return (await client())
-        .select({ id: users.id, username: users.username })
-        .from(users)
-        .orderBy(users.username);
-    },
-
-    async listRoles(): Promise<
-      Array<{ id: number; name: string; displayName: string | null }>
-    > {
-      const { roles } = await refs();
-      return (await client())
-        .select({
-          id: roles.id,
-          name: roles.name,
-          displayName: roles.displayName,
-        })
-        .from(roles)
-        .orderBy(roles.name);
-    },
-  };
-}
diff --git a/plugins/session-sharing/src/backend/room-hub.ts b/plugins/session-sharing/src/backend/room-hub.ts
deleted file mode 100644
index 76f339e00..000000000
--- a/plugins/session-sharing/src/backend/room-hub.ts
+++ /dev/null
@@ -1,118 +0,0 @@
-import type { WebSocket } from "ws";
-import type { CollabRuntimeStore } from "./runtime-store.js";
-
-const PRESENCE_HEARTBEAT_MS = 15_000;
-
-export interface CollabRoomClient {
-  ws: WebSocket;
-  userId: string;
-  username: string;
-}
-
-/**
- * Local WebSocket fan-out plus the runtime store's pub/sub for room events and
- * presence across instances. The terminal socket feeds subscribe and
- * unsubscribe through the sessions.sharing service.
- */
-export class CollabRoomHub {
-  private rooms = new Map<string, Set<CollabRoomClient>>();
-  private readonly heartbeat: NodeJS.Timeout;
-
-  constructor(private readonly store: CollabRuntimeStore) {
-    store.onEvent((roomId, message) => {
-      if (
-        "type" in message &&
-        typeof message.type === "string" &&
-        message.type.startsWith("collab_internal_")
-      ) {
-        return;
-      }
-      this.broadcastLocal(roomId, message);
-    });
-    this.heartbeat = setInterval(() => {
-      for (const roomId of this.rooms.keys()) void this.refreshPresence(roomId);
-    }, PRESENCE_HEARTBEAT_MS);
-    this.heartbeat.unref();
-  }
-
-  subscribe(roomId: string, client: CollabRoomClient): void {
-    let clients = this.rooms.get(roomId);
-    if (!clients) {
-      clients = new Set();
-      this.rooms.set(roomId, clients);
-    }
-    for (const existing of clients) {
-      if (existing.ws === client.ws) return;
-    }
-    clients.add(client);
-    void this.refreshPresence(roomId);
-  }
-
-  /** Drops the socket from one room, or from every room when roomId is omitted. */
-  unsubscribe(ws: WebSocket, roomId?: string): void {
-    for (const [id, clients] of this.rooms) {
-      if (roomId && id !== roomId) continue;
-      let removed = false;
-      for (const client of clients) {
-        if (client.ws === ws) {
-          clients.delete(client);
-          removed = true;
-        }
-      }
-      if (clients.size === 0) this.rooms.delete(id);
-      if (removed) void this.refreshPresence(id);
-    }
-  }
-
-  broadcast(roomId: string, message: object): void {
-    this.broadcastLocal(roomId, message);
-    void this.store.publish(roomId, message);
-  }
-
-  async onlineUsers(
-    roomId: string,
-  ): Promise<Array<{ userId: string; username: string }>> {
-    return this.store.onlineUsers(roomId, this.localOnlineUsers(roomId));
-  }
-
-  dispose(): void {
-    clearInterval(this.heartbeat);
-    this.rooms.clear();
-  }
-
-  private broadcastLocal(roomId: string, message: object): void {
-    const clients = this.rooms.get(roomId);
-    if (!clients) return;
-    const payload = JSON.stringify(message);
-    for (const client of clients) {
-      if (client.ws.readyState !== client.ws.OPEN) continue;
-      try {
-        client.ws.send(payload);
-      } catch {
-        /* keep broadcasting to the rest */
-      }
-    }
-  }
-
-  private localOnlineUsers(
-    roomId: string,
-  ): Array<{ userId: string; username: string }> {
-    const clients = this.rooms.get(roomId);
-    if (!clients) return [];
-    const seen = new Map<string, string>();
-    for (const client of clients) {
-      seen.set(client.userId, client.username);
-    }
-    return Array.from(seen, ([userId, username]) => ({ userId, username }));
-  }
-
-  private async refreshPresence(roomId: string): Promise<void> {
-    const localUsers = this.localOnlineUsers(roomId);
-    await this.store.updatePresence(roomId, localUsers);
-    this.broadcast(roomId, {
-      type: "collab_online",
-      roomId,
-      users: await this.onlineUsers(roomId),
-    });
-  }
-}
diff --git a/plugins/session-sharing/src/backend/room-routes.ts b/plugins/session-sharing/src/backend/room-routes.ts
deleted file mode 100644
index 8c078d8a1..000000000
--- a/plugins/session-sharing/src/backend/room-routes.ts
+++ /dev/null
@@ -1,1487 +0,0 @@
-import crypto from "node:crypto";
-import type { Request, Response, Router } from "express";
-import {
-  PROTOCOLS,
-  TERMINAL_WS_PATH,
-  actorOf,
-  clientIp,
-  isNonEmptyString,
-  type SharingDeps,
-} from "./deps.js";
-import type { LiveProtocol, RoomRecord } from "./repositories.js";
-import type { CollabControlRequest } from "./runtime-store.js";
-
-/*
- * Known limits, shared with session sharing:
- * - Redis synchronizes collaboration events and ephemeral state across
- *   instances, but live session transports still need WebSocket affinity.
- * - Remote desktop stages stay read-only because guacamole-lite cannot revoke
- *   a writable viewer without disconnecting the whole shared session.
- */
-
-const STAGE_SHARE_EXPIRY_HOURS = 12;
-const MAX_INVITE_TARGETS = 200;
-const CONTROL_REQUEST_COOLDOWN_MS = 5000;
-
-function publicRoom(room: RoomRecord) {
-  const { guestLinkToken: secret, ...safeRoom } = room;
-  return { ...safeRoom, guestLinkEnabled: Boolean(secret) };
-}
-
-function stagePayload(room: RoomRecord) {
-  return {
-    presenterUserId: room.presenterUserId,
-    protocol: room.stageProtocol,
-    hostId: room.stageHostId,
-    shareId: room.stageShareId,
-  };
-}
-
-/** The pieces of room behaviour the routes and the runtime events share. */
-export function createRoomActions(deps: SharingDeps) {
-  const { shares, rooms, live, hub, store } = deps;
-
-  async function requireRoomMember(
-    roomId: string,
-    userId: string,
-  ): Promise<{ room: RoomRecord; isHost: boolean } | null> {
-    const room = await rooms.findById(roomId);
-    if (!room || room.endedAt) return null;
-    const member = await rooms.findMember(roomId, userId);
-    if (!member) return null;
-    return { room, isHost: member.roomRole === "host" };
-  }
-
-  async function revokeStageShare(room: RoomRecord): Promise<void> {
-    if (!room.stageShareId) return;
-    const share = await shares.findActiveById(room.stageShareId);
-    if (!share) return;
-    if (!(await shares.revokeAny(room.stageShareId))) {
-      throw new Error("Failed to revoke the active stage share");
-    }
-    if (share.protocol === "ssh") {
-      await live.disconnectParticipants(
-        "ssh",
-        share.sessionId,
-        share.id,
-        { reason: "The collaboration stage ended" },
-        share.ownerUserId,
-      );
-      void store.publish(room.id, {
-        type: "collab_internal_stage_revoked",
-        sessionId: share.sessionId,
-        shareId: share.id,
-        ownerUserId: share.ownerUserId,
-      });
-    }
-  }
-
-  /** Sets the controller everywhere it lives: the store, the live gate, the hub. */
-  async function applyStageControl(
-    room: RoomRecord,
-    controllerUserId: string | null,
-  ): Promise<void> {
-    await store.setController(room.id, controllerUserId);
-    if (room.stageShareId && room.stageProtocol === "ssh") {
-      const share = await shares
-        .findActiveById(room.stageShareId)
-        .catch(() => null);
-      if (share) {
-        await live.setRoomShareControl(
-          "ssh",
-          share.sessionId,
-          share.id,
-          controllerUserId,
-          share.ownerUserId,
-        );
-      }
-    }
-    hub.broadcast(room.id, {
-      type: "collab_control_changed",
-      roomId: room.id,
-      controllerUserId,
-    });
-  }
-
-  async function clearStaleStage(roomId: string): Promise<void> {
-    await store.setController(roomId, null);
-    await rooms.clearStage(roomId);
-    hub.broadcast(roomId, {
-      type: "collab_stage_changed",
-      roomId,
-      stage: null,
-    });
-  }
-
-  /** The stage's share, when it is still active and its session still live. */
-  async function liveStageShare(room: RoomRecord) {
-    if (!room.stageShareId || !room.stageProtocol) return null;
-    const share = await shares.findActiveById(room.stageShareId);
-    if (!share) return null;
-    const alive = await live.isLive(
-      room.stageProtocol,
-      share.sessionId,
-      share.ownerUserId,
-    );
-    return alive ? share : null;
-  }
-
-  /** Room events from other instances that touch live sessions here. */
-  function onRuntimeEvent(roomId: string, message: object): void {
-    const event = message as Record<string, unknown>;
-    if (event.type === "collab_control_changed") {
-      const controllerUserId =
-        typeof event.controllerUserId === "string"
-          ? event.controllerUserId
-          : null;
-      void rooms
-        .findById(roomId)
-        .then(async (room) => {
-          if (!room?.stageShareId || room.stageProtocol !== "ssh") return;
-          const share = await shares.findActiveById(room.stageShareId);
-          if (share) {
-            await live.setRoomShareControl(
-              "ssh",
-              share.sessionId,
-              share.id,
-              controllerUserId,
-              share.ownerUserId,
-            );
-          }
-        })
-        .catch(() => {});
-    }
-    if (
-      event.type === "collab_internal_stage_revoked" &&
-      typeof event.sessionId === "string" &&
-      typeof event.shareId === "string" &&
-      typeof event.ownerUserId === "string"
-    ) {
-      void live.disconnectParticipants(
-        "ssh",
-        event.sessionId,
-        event.shareId,
-        { reason: "The collaboration stage ended" },
-        event.ownerUserId,
-      );
-    }
-  }
-
-  return {
-    requireRoomMember,
-    revokeStageShare,
-    applyStageControl,
-    clearStaleStage,
-    liveStageShare,
-    onRuntimeEvent,
-  };
-}
-
-export type RoomActions = ReturnType<typeof createRoomActions>;
-
-/**
- * Collaboration rooms. `/guest/:token` is public (an anonymous room guest
- * link); everything else needs the plugin's `use` permission and room
- * membership.
- */
-export function registerRoomRoutes(
-  router: Router,
-  deps: SharingDeps,
-  actions: RoomActions,
-): void {
-  const { ctx, shares, rooms, directory, live, hub, store, guestLimiter } =
-    deps;
-  const {
-    requireRoomMember,
-    revokeStageShare,
-    applyStageControl,
-    clearStaleStage,
-    liveStageShare,
-  } = actions;
-  const requireUse = ctx.rbac.require("use") as never;
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/meeting-host/{syncId}:
-   *   get:
-   *     summary: Find this server's id for a synced host
-   *     description: A desktop presents a host by its sync id; this returns the matching host the caller may connect to.
-   *     tags: [Collab]
-   *     parameters:
-   *       - in: path
-   *         name: syncId
-   *         required: true
-   *         schema: { type: string }
-   *     responses:
-   *       200: { description: The host id. }
-   *       401: { description: Not signed in. }
-   *       404: { description: No reachable host with that sync id. }
-   */
-  router.get(
-    "/meeting-host/:syncId",
-    requireUse,
-    async (req: Request, res: Response) => {
-      if (!ctx.currentActor())
-        return res.status(401).json({ error: "Authentication required" });
-      try {
-        for (const id of await directory.hostIdsBySyncId(
-          String(req.params.syncId),
-        )) {
-          if ((await ctx.hosts.checkAccess(id, "connect")).hasAccess) {
-            return res.json({ id });
-          }
-        }
-        return res.status(404).json({
-          error:
-            "The host must be synced to the meeting server before presenting",
-        });
-      } catch {
-        return res
-          .status(500)
-          .json({ error: "Failed to resolve meeting host" });
-      }
-    },
-  );
-
-  const audit = (
-    req: Request,
-    action: string,
-    room: { id: string; name: string },
-    details?: Record<string, unknown>,
-  ) =>
-    ctx.audit.record({
-      request: req,
-      action,
-      resourceType: "collab_room",
-      resourceId: room.id,
-      resourceName: room.name,
-      details: details ? JSON.stringify(details) : undefined,
-      success: true,
-    });
-
-  const fail = (res: Response, operation: string, message: string) => {
-    return (error: unknown) => {
-      ctx.log.error(
-        `${operation}: ${message}`,
-        error instanceof Error ? error : undefined,
-      );
-      res.status(500).json({ error: message });
-    };
-  };
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/rooms:
-   *   post:
-   *     summary: Create a collaboration room
-   *     tags:
-   *       - Collab
-   *     security:
-   *       - bearerAuth: []
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required: [name]
-   *             properties:
-   *               name:
-   *                 type: string
-   *               persistent:
-   *                 type: boolean
-   *     responses:
-   *       200:
-   *         description: The new room
-   *       400:
-   *         description: Missing or too long name
-   */
-  router.post("/rooms", requireUse, async (req: Request, res: Response) => {
-    const userId = actorOf(ctx);
-    const { name, persistent } = req.body ?? {};
-    if (!isNonEmptyString(name) || name.trim().length > 120) {
-      return res.status(400).json({ error: "Room name is required" });
-    }
-    try {
-      const room = await rooms.createRoom({
-        id: crypto.randomUUID(),
-        name: name.trim(),
-        ownerUserId: userId,
-        persistent: persistent === true,
-      });
-      await rooms.addMember({
-        roomId: room.id,
-        userId,
-        roomRole: "host",
-        addedBy: userId,
-      });
-      await audit(req, "collab_room_create", room);
-      res.json({ room: publicRoom(room) });
-    } catch (error) {
-      fail(res, "collab_room_create_error", "Failed to create room")(error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/rooms:
-   *   get:
-   *     summary: List rooms the caller belongs to
-   *     tags:
-   *       - Collab
-   *     security:
-   *       - bearerAuth: []
-   *     responses:
-   *       200:
-   *         description: Rooms, without their guest tokens
-   */
-  router.get("/rooms", requireUse, async (_req: Request, res: Response) => {
-    try {
-      const list = await rooms.listForUser(actorOf(ctx));
-      res.json({ rooms: list.map(publicRoom) });
-    } catch (error) {
-      fail(res, "collab_room_list_error", "Failed to list rooms")(error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/rooms/{id}:
-   *   get:
-   *     summary: Get a room with members, online users and stage state
-   *     tags:
-   *       - Collab
-   *     security:
-   *       - bearerAuth: []
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: The room
-   *       404:
-   *         description: Not a member, or no such room
-   */
-  router.get("/rooms/:id", requireUse, async (req: Request, res: Response) => {
-    const userId = actorOf(ctx);
-    const roomId = String(req.params.id);
-    try {
-      let access = await requireRoomMember(roomId, userId);
-      if (!access) return res.status(404).json({ error: "Room not found" });
-
-      // The presenter's own client drives the stage locally and never asks
-      // for it, so this is where a presenter whose session died is noticed.
-      if (access.room.stageShareId && !(await liveStageShare(access.room))) {
-        await clearStaleStage(roomId);
-        access = await requireRoomMember(roomId, userId);
-        if (!access) return res.status(404).json({ error: "Room not found" });
-      }
-
-      const members = await rooms.listMembers(roomId);
-      const stageShare = await liveStageShare(access.room);
-      const guests =
-        stageShare && access.room.stageProtocol
-          ? await live.listGuests(
-              access.room.stageProtocol,
-              stageShare.sessionId,
-              stageShare.id,
-              stageShare.ownerUserId,
-            )
-          : [];
-      const mayReview = access.isHost || access.room.presenterUserId === userId;
-      const controlRequests = await store.listRequests(roomId);
-      res.json({
-        room: publicRoom(access.room),
-        me: userId,
-        isHost: access.isHost,
-        members,
-        online: await hub.onlineUsers(roomId),
-        stage: stagePayload(access.room),
-        guests,
-        controllerUserId: await store.getController(roomId),
-        controlRequests: mayReview
-          ? controlRequests
-          : controlRequests.filter((request) => request.userId === userId),
-        // Room events ride on the terminal socket.
-        eventsWsPath: TERMINAL_WS_PATH,
-      });
-    } catch (error) {
-      fail(res, "collab_room_get_error", "Failed to get room")(error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/rooms/{id}/members:
-   *   post:
-   *     summary: Invite users to a room (host only)
-   *     description: Roles expand to their current members, a snapshot.
-   *     tags:
-   *       - Collab
-   *     security:
-   *       - bearerAuth: []
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: string
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               userIds:
-   *                 type: array
-   *                 items:
-   *                   type: string
-   *               roleIds:
-   *                 type: array
-   *                 items:
-   *                   type: integer
-   *     responses:
-   *       200:
-   *         description: Invited
-   *       403:
-   *         description: Not the host
-   *       404:
-   *         description: Room, user or role not found
-   */
-  router.post(
-    "/rooms/:id/members",
-    requireUse,
-    async (req: Request, res: Response) => {
-      const userId = actorOf(ctx);
-      const roomId = String(req.params.id);
-      const { userIds = [], roleIds = [] } = req.body ?? {};
-
-      if (
-        !Array.isArray(userIds) ||
-        userIds.some((id) => !isNonEmptyString(id)) ||
-        !Array.isArray(roleIds) ||
-        roleIds.some((id) => !Number.isInteger(id)) ||
-        (userIds.length === 0 && roleIds.length === 0)
-      ) {
-        return res.status(400).json({
-          error: "userIds (user ids) or roleIds (integers) are required",
-        });
-      }
-      if (userIds.length + roleIds.length > MAX_INVITE_TARGETS) {
-        return res.status(400).json({ error: "Too many invite targets" });
-      }
-
-      try {
-        const access = await requireRoomMember(roomId, userId);
-        if (!access) return res.status(404).json({ error: "Room not found" });
-        if (!access.isHost) {
-          return res.status(403).json({ error: "Only the host can invite" });
-        }
-
-        for (const targetId of userIds as string[]) {
-          if (!(await directory.userExists(targetId))) {
-            return res.status(404).json({ error: "User not found", targetId });
-          }
-        }
-        const expanded = new Set<string>(userIds as string[]);
-        for (const roleId of roleIds as number[]) {
-          if (!(await directory.roleExists(roleId))) {
-            return res.status(404).json({ error: "Role not found", roleId });
-          }
-          for (const memberId of await directory.roleUserIds(roleId)) {
-            expanded.add(memberId);
-          }
-        }
-        for (const targetId of expanded) {
-          await rooms.addMember({
-            roomId,
-            userId: targetId,
-            roomRole: "member",
-            addedBy: userId,
-          });
-        }
-
-        await audit(req, "collab_room_invite", access.room, {
-          memberCount: expanded.size,
-        });
-        hub.broadcast(roomId, { type: "collab_members_changed", roomId });
-        res.json({ success: true });
-      } catch (error) {
-        fail(
-          res,
-          "collab_room_invite_error",
-          "Failed to invite members",
-        )(error);
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/rooms/{id}/members/{userId}:
-   *   delete:
-   *     summary: Remove a member (host), or leave the room (self)
-   *     tags:
-   *       - Collab
-   *     security:
-   *       - bearerAuth: []
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: string
-   *       - in: path
-   *         name: userId
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: Removed
-   *       400:
-   *         description: The owner cannot be removed
-   *       403:
-   *         description: Only the host can remove others
-   */
-  router.delete(
-    "/rooms/:id/members/:userId",
-    requireUse,
-    async (req: Request, res: Response) => {
-      const userId = actorOf(ctx);
-      const roomId = String(req.params.id);
-      const targetId = String(req.params.userId);
-      try {
-        const access = await requireRoomMember(roomId, userId);
-        if (!access) return res.status(404).json({ error: "Room not found" });
-        if (targetId !== userId && !access.isHost) {
-          return res
-            .status(403)
-            .json({ error: "Only the host can remove members" });
-        }
-        if (targetId === access.room.ownerUserId) {
-          return res.status(400).json({ error: "The owner cannot be removed" });
-        }
-
-        await rooms.removeMember(roomId, targetId);
-        await store.removeRequest(roomId, targetId);
-
-        if (access.room.stageShareId && access.room.stageProtocol === "ssh") {
-          const share = await shares.findActiveById(access.room.stageShareId);
-          if (share) {
-            await live.disconnectParticipants(
-              "ssh",
-              share.sessionId,
-              share.id,
-              {
-                userId: targetId,
-                reason: "You were removed from the collaboration room",
-              },
-              share.ownerUserId,
-            );
-          }
-        }
-
-        if ((await store.getController(roomId)) === targetId) {
-          await applyStageControl(access.room, null);
-        }
-
-        if (access.room.presenterUserId === targetId) {
-          await revokeStageShare(access.room);
-          await rooms.clearStage(roomId);
-          hub.broadcast(roomId, {
-            type: "collab_stage_changed",
-            roomId,
-            stage: null,
-          });
-        }
-
-        await audit(
-          req,
-          targetId === userId
-            ? "collab_room_leave"
-            : "collab_room_remove_member",
-          access.room,
-          { targetUserId: targetId },
-        );
-        hub.broadcast(roomId, { type: "collab_members_changed", roomId });
-        res.json({ success: true });
-      } catch (error) {
-        fail(
-          res,
-          "collab_room_remove_member_error",
-          "Failed to remove member",
-        )(error);
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/rooms/{id}/present:
-   *   post:
-   *     summary: Take the stage with one of your live sessions
-   *     description: Any member may take over the stage; the previous stage share is revoked. The caller must own the live session and sharing must be enabled for the host.
-   *     tags:
-   *       - Collab
-   *     security:
-   *       - bearerAuth: []
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: string
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required: [protocol, sessionId, hostId]
-   *             properties:
-   *               protocol:
-   *                 type: string
-   *                 enum: [ssh, rdp, vnc, telnet]
-   *               sessionId:
-   *                 type: string
-   *               hostId:
-   *                 type: integer
-   *     responses:
-   *       200:
-   *         description: The new stage
-   *       403:
-   *         description: Sharing disabled, or not the session's owner
-   *       409:
-   *         description: The stage changed meanwhile
-   */
-  router.post(
-    "/rooms/:id/present",
-    requireUse,
-    async (req: Request, res: Response) => {
-      const userId = actorOf(ctx);
-      const roomId = String(req.params.id);
-      const { protocol, sessionId, hostId } = req.body ?? {};
-
-      if (!PROTOCOLS.includes(protocol)) {
-        return res.status(400).json({ error: "Invalid protocol" });
-      }
-      if (!isNonEmptyString(sessionId) || !Number.isInteger(Number(hostId))) {
-        return res
-          .status(400)
-          .json({ error: "sessionId and hostId are required" });
-      }
-
-      try {
-        const access = await requireRoomMember(roomId, userId);
-        if (!access) return res.status(404).json({ error: "Room not found" });
-
-        const numericHostId = Number(hostId);
-        if (!(await deps.isSharingEnabledForHost(numericHostId))) {
-          return res
-            .status(403)
-            .json({ error: "Session sharing is disabled for this host" });
-        }
-        if (
-          !(await live.isOwnedBy(
-            protocol as LiveProtocol,
-            String(sessionId),
-            userId,
-          ))
-        ) {
-          return res
-            .status(403)
-            .json({ error: "You do not own this live session" });
-        }
-
-        const share = await shares.create({
-          id: crypto.randomUUID(),
-          hostId: numericHostId,
-          ownerUserId: userId,
-          protocol,
-          sessionId: String(sessionId),
-          shareType: "room",
-          permissionLevel: "read-only",
-          expiresAt: new Date(
-            Date.now() + STAGE_SHARE_EXPIRY_HOURS * 60 * 60 * 1000,
-          ).toISOString(),
-        });
-
-        await revokeStageShare(access.room);
-        const replaced = await rooms.replaceStage(
-          roomId,
-          access.room.stageShareId,
-          {
-            presenterUserId: userId,
-            stageProtocol: protocol,
-            stageHostId: numericHostId,
-            stageShareId: share.id,
-          },
-        );
-        if (!replaced) {
-          await shares.revokeAny(share.id);
-          return res
-            .status(409)
-            .json({ error: "The stage changed; try again" });
-        }
-        await store.setController(roomId, null);
-        await store.clearRequests(roomId);
-
-        const stage = {
-          presenterUserId: userId,
-          protocol,
-          hostId: numericHostId,
-          shareId: share.id,
-        };
-        hub.broadcast(roomId, { type: "collab_stage_changed", roomId, stage });
-        await audit(req, "collab_room_present", access.room, {
-          protocol,
-          hostId: numericHostId,
-        });
-        res.json({ stage });
-      } catch (error) {
-        fail(
-          res,
-          "collab_room_present_error",
-          "Failed to start presenting",
-        )(error);
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/rooms/{id}/stop:
-   *   post:
-   *     summary: Stop presenting (presenter or host)
-   *     tags:
-   *       - Collab
-   *     security:
-   *       - bearerAuth: []
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: Stage cleared
-   *       403:
-   *         description: Not the presenter or host
-   */
-  router.post(
-    "/rooms/:id/stop",
-    requireUse,
-    async (req: Request, res: Response) => {
-      const userId = actorOf(ctx);
-      const roomId = String(req.params.id);
-      try {
-        const access = await requireRoomMember(roomId, userId);
-        if (!access) return res.status(404).json({ error: "Room not found" });
-        if (access.room.presenterUserId !== userId && !access.isHost) {
-          return res
-            .status(403)
-            .json({ error: "Only the presenter or host can stop the stage" });
-        }
-
-        await revokeStageShare(access.room);
-        await store.setController(roomId, null);
-        await store.clearRequests(roomId);
-        await rooms.clearStage(roomId);
-        hub.broadcast(roomId, {
-          type: "collab_stage_changed",
-          roomId,
-          stage: null,
-        });
-        await audit(req, "collab_room_stop_presenting", access.room);
-        res.json({ success: true });
-      } catch (error) {
-        fail(res, "collab_room_stop_error", "Failed to stop presenting")(error);
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/rooms/{id}/stage:
-   *   get:
-   *     summary: Get connect info for the current stage (members only)
-   *     description: SSH stages are joined over the terminal socket by shareId; remote desktop stages get a freshly minted read-only viewer token.
-   *     tags:
-   *       - Collab
-   *     security:
-   *       - bearerAuth: []
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: The stage, or null
-   */
-  router.get(
-    "/rooms/:id/stage",
-    requireUse,
-    async (req: Request, res: Response) => {
-      const userId = actorOf(ctx);
-      const roomId = String(req.params.id);
-      try {
-        const access = await requireRoomMember(roomId, userId);
-        if (!access) return res.status(404).json({ error: "Room not found" });
-        const { room } = access;
-        if (!room.stageShareId || !room.stageProtocol) {
-          return res.json({ stage: null });
-        }
-
-        const share = await liveStageShare(room);
-        if (!share) {
-          // The presenter is gone (expired share or dead session).
-          await clearStaleStage(roomId);
-          return res.json({ stage: null });
-        }
-
-        const stage: Record<string, unknown> = {
-          ...stagePayload(room),
-          sessionId: share.sessionId,
-          controllerUserId: await store.getController(roomId),
-        };
-        if (room.stageProtocol !== "ssh") {
-          stage.connectParams = {
-            token: await live.createViewerToken(
-              room.stageProtocol,
-              share.sessionId,
-              true,
-              share.ownerUserId,
-            ),
-          };
-        }
-        res.json({ stage });
-      } catch (error) {
-        fail(res, "collab_room_stage_error", "Failed to resolve stage")(error);
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/rooms/{id}/control:
-   *   post:
-   *     summary: Grant or revoke stage control (presenter or host)
-   *     description: Grants a member write access to the current SSH stage, or revokes it with a null userId. The controller may also release control themselves.
-   *     tags:
-   *       - Collab
-   *     security:
-   *       - bearerAuth: []
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: string
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               userId:
-   *                 type: string
-   *                 nullable: true
-   *     responses:
-   *       200:
-   *         description: The new controller
-   *       400:
-   *         description: Nothing presented, or a remote desktop stage
-   *       403:
-   *         description: Not the presenter or host
-   */
-  router.post(
-    "/rooms/:id/control",
-    requireUse,
-    async (req: Request, res: Response) => {
-      const userId = actorOf(ctx);
-      const roomId = String(req.params.id);
-      const { userId: targetId } = req.body ?? {};
-      if (targetId !== null && !isNonEmptyString(targetId)) {
-        return res
-          .status(400)
-          .json({ error: "userId must be a user id or null" });
-      }
-
-      try {
-        const access = await requireRoomMember(roomId, userId);
-        if (!access) return res.status(404).json({ error: "Room not found" });
-        if (!access.room.stageShareId) {
-          return res.status(400).json({ error: "Nothing is being presented" });
-        }
-        if (access.room.stageProtocol !== "ssh") {
-          return res
-            .status(400)
-            .json({ error: "Remote desktop stages are read-only" });
-        }
-
-        const releasingOwn =
-          targetId === null && (await store.getController(roomId)) === userId;
-        const mayGrant =
-          access.isHost || access.room.presenterUserId === userId;
-        if (!mayGrant && !releasingOwn) {
-          return res.status(403).json({
-            error: "Only the presenter or host can change stage control",
-          });
-        }
-        if (targetId && !(await rooms.findMember(roomId, targetId))) {
-          return res.status(404).json({ error: "Member not found" });
-        }
-
-        await applyStageControl(access.room, targetId);
-        if (targetId) {
-          await store.removeRequest(roomId, targetId);
-          hub.broadcast(roomId, {
-            type: "collab_control_requests_changed",
-            roomId,
-          });
-        }
-        await audit(
-          req,
-          targetId ? "collab_control_grant" : "collab_control_revoke",
-          access.room,
-          { targetUserId: targetId },
-        );
-        res.json({ controllerUserId: targetId });
-      } catch (error) {
-        fail(
-          res,
-          "collab_control_error",
-          "Failed to change stage control",
-        )(error);
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/rooms/{id}/control/request:
-   *   post:
-   *     summary: Ask the presenter for stage control (hand raise)
-   *     tags:
-   *       - Collab
-   *     security:
-   *       - bearerAuth: []
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: The request
-   *       429:
-   *         description: Asked too recently
-   */
-  router.post(
-    "/rooms/:id/control/request",
-    requireUse,
-    async (req: Request, res: Response) => {
-      const userId = actorOf(ctx);
-      const roomId = String(req.params.id);
-      try {
-        const access = await requireRoomMember(roomId, userId);
-        if (!access) return res.status(404).json({ error: "Room not found" });
-        if (!access.room.stageShareId) {
-          return res.status(400).json({ error: "Nothing is being presented" });
-        }
-        if (access.room.stageProtocol !== "ssh") {
-          return res
-            .status(400)
-            .json({ error: "Remote desktop stages are read-only" });
-        }
-        const existing = (await store.listRequests(roomId)).find(
-          (request) => request.userId === userId,
-        );
-        if (
-          existing &&
-          Date.now() - Date.parse(existing.requestedAt) <
-            CONTROL_REQUEST_COOLDOWN_MS
-        ) {
-          return res
-            .status(429)
-            .json({ error: "Control was already requested" });
-        }
-        const request: CollabControlRequest = {
-          userId,
-          username: await directory.username(userId),
-          requestedAt: new Date().toISOString(),
-        };
-        await store.upsertRequest(roomId, request);
-        hub.broadcast(roomId, {
-          type: "collab_control_requested",
-          roomId,
-          ...request,
-        });
-        await audit(req, "collab_control_request", access.room);
-        res.json({ request });
-      } catch (error) {
-        fail(
-          res,
-          "collab_control_request_error",
-          "Failed to request control",
-        )(error);
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/rooms/{id}/control/requests:
-   *   get:
-   *     summary: List pending control requests (presenter or host)
-   *     tags:
-   *       - Collab
-   *     security:
-   *       - bearerAuth: []
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: Pending requests
-   *       403:
-   *         description: Not the presenter or host
-   */
-  router.get(
-    "/rooms/:id/control/requests",
-    requireUse,
-    async (req: Request, res: Response) => {
-      const userId = actorOf(ctx);
-      const roomId = String(req.params.id);
-      try {
-        const access = await requireRoomMember(roomId, userId);
-        if (!access) return res.status(404).json({ error: "Room not found" });
-        if (!access.isHost && access.room.presenterUserId !== userId) {
-          return res.status(403).json({
-            error: "Only the presenter or host can review control requests",
-          });
-        }
-        res.json({ requests: await store.listRequests(roomId) });
-      } catch (error) {
-        fail(
-          res,
-          "collab_control_requests_list_error",
-          "Failed to list control requests",
-        )(error);
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/rooms/{id}/control/requests/{userId}:
-   *   delete:
-   *     summary: Dismiss a control request (presenter or host), or cancel your own
-   *     tags:
-   *       - Collab
-   *     security:
-   *       - bearerAuth: []
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: string
-   *       - in: path
-   *         name: userId
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: Dismissed
-   *       403:
-   *         description: Not allowed to dismiss it
-   */
-  router.delete(
-    "/rooms/:id/control/requests/:userId",
-    requireUse,
-    async (req: Request, res: Response) => {
-      const userId = actorOf(ctx);
-      const roomId = String(req.params.id);
-      const targetId = String(req.params.userId);
-      try {
-        const access = await requireRoomMember(roomId, userId);
-        if (!access) return res.status(404).json({ error: "Room not found" });
-        const mayReview =
-          access.isHost || access.room.presenterUserId === userId;
-        if (!mayReview && targetId !== userId) {
-          return res
-            .status(403)
-            .json({ error: "Not allowed to dismiss request" });
-        }
-        await store.removeRequest(roomId, targetId);
-        hub.broadcast(roomId, {
-          type: "collab_control_requests_changed",
-          roomId,
-        });
-        await audit(
-          req,
-          targetId === userId
-            ? "collab_control_request_cancel"
-            : "collab_control_request_dismiss",
-          access.room,
-          { targetUserId: targetId },
-        );
-        res.json({ success: true });
-      } catch (error) {
-        fail(
-          res,
-          "collab_control_request_dismiss_error",
-          "Failed to dismiss control request",
-        )(error);
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/rooms/{id}/guests/remove:
-   *   post:
-   *     summary: Disconnect every anonymous guest watching the stage (host only)
-   *     description: The guest link stays valid, so a guest may open it again.
-   *     tags:
-   *       - Collab
-   *     security:
-   *       - bearerAuth: []
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: Guests disconnected
-   *       403:
-   *         description: Not the host
-   *       404:
-   *         description: Not a member, or no such room
-   */
-  router.post(
-    "/rooms/:id/guests/remove",
-    requireUse,
-    async (req: Request, res: Response) => {
-      const userId = actorOf(ctx);
-      const roomId = String(req.params.id);
-      try {
-        const access = await requireRoomMember(roomId, userId);
-        if (!access) return res.status(404).json({ error: "Room not found" });
-        if (!access.isHost) {
-          return res
-            .status(403)
-            .json({ error: "Only the host can remove guests" });
-        }
-        const share = await liveStageShare(access.room);
-        if (share && access.room.stageProtocol) {
-          await live.disconnectParticipants(
-            access.room.stageProtocol,
-            share.sessionId,
-            share.id,
-            { userId: null, reason: "The host removed the guests" },
-            share.ownerUserId,
-          );
-        }
-        res.json({ success: true });
-      } catch (error) {
-        fail(
-          res,
-          "collab_guests_remove_error",
-          "Failed to remove guests",
-        )(error);
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/rooms/{id}/guest-link:
-   *   post:
-   *     summary: Enable, rotate or disable the room's anonymous guest link (host only)
-   *     tags:
-   *       - Collab
-   *     security:
-   *       - bearerAuth: []
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: string
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required: [enabled]
-   *             properties:
-   *               enabled:
-   *                 type: boolean
-   *     responses:
-   *       200:
-   *         description: The new token, or null when disabled
-   *       403:
-   *         description: Not the host
-   */
-  router.post(
-    "/rooms/:id/guest-link",
-    requireUse,
-    async (req: Request, res: Response) => {
-      const userId = actorOf(ctx);
-      const roomId = String(req.params.id);
-      const { enabled } = req.body ?? {};
-      if (typeof enabled !== "boolean") {
-        return res.status(400).json({ error: "enabled must be a boolean" });
-      }
-      try {
-        const access = await requireRoomMember(roomId, userId);
-        if (!access) return res.status(404).json({ error: "Room not found" });
-        if (!access.isHost) {
-          return res
-            .status(403)
-            .json({ error: "Only the host can manage the guest link" });
-        }
-        const token = enabled
-          ? crypto.randomBytes(24).toString("base64url")
-          : null;
-        await rooms.setGuestToken(roomId, token);
-
-        // A rotated or disabled link drops the guests who came in on the old one.
-        if (
-          (!enabled || access.room.guestLinkToken) &&
-          access.room.stageShareId &&
-          access.room.stageProtocol === "ssh"
-        ) {
-          const share = await shares.findActiveById(access.room.stageShareId);
-          if (share) {
-            await live.disconnectParticipants(
-              "ssh",
-              share.sessionId,
-              share.id,
-              {
-                userId: null,
-                reason: enabled
-                  ? "The guest link was rotated"
-                  : "The guest link was disabled",
-              },
-              share.ownerUserId,
-            );
-          }
-        }
-
-        await audit(
-          req,
-          enabled ? "collab_guest_link_enable" : "collab_guest_link_disable",
-          access.room,
-        );
-        res.json({ guestLinkToken: token });
-      } catch (error) {
-        fail(
-          res,
-          "collab_guest_link_error",
-          "Failed to update guest link",
-        )(error);
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/guest/{token}:
-   *   get:
-   *     summary: Resolve a room's current stage for an anonymous guest
-   *     description: Public, rate-limited per IP. Guests poll this to follow presenter switches. Never returns host details; SSH stages are joined over the terminal socket with roomGuestToken, remote desktop stages get a read-only viewer token.
-   *     tags:
-   *       - Collab
-   *     parameters:
-   *       - in: path
-   *         name: token
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: Room name and the stage, or a null stage
-   *       404:
-   *         description: Link not found
-   *       429:
-   *         description: Too many requests
-   */
-  router.get("/guest/:token", async (req: Request, res: Response) => {
-    if (guestLimiter.isLimited(clientIp(req))) {
-      return res.status(429).json({ error: "Too many requests" });
-    }
-    const token = String(req.params.token);
-    try {
-      const room = await rooms.findByGuestToken(token);
-      if (!room) return res.status(404).json({ error: "Link not found" });
-
-      const response: Record<string, unknown> = {
-        roomName: room.name,
-        stage: null,
-      };
-      const share = await liveStageShare(room);
-      if (
-        share &&
-        room.stageProtocol &&
-        (await deps.isSharingEnabledForHost(share.hostId))
-      ) {
-        const protocol = room.stageProtocol as LiveProtocol;
-        response.stage = {
-          protocol,
-          shareId: share.id,
-          ...(protocol === "ssh"
-            ? {
-                wsPath: `${TERMINAL_WS_PATH}?roomGuestToken=${encodeURIComponent(token)}`,
-              }
-            : {
-                connectParams: {
-                  token: await live.createViewerToken(
-                    protocol,
-                    share.sessionId,
-                    true,
-                    share.ownerUserId,
-                  ),
-                },
-              }),
-        };
-      }
-      res.json(response);
-    } catch (error) {
-      fail(
-        res,
-        "collab_guest_resolve_error",
-        "Failed to resolve guest link",
-      )(error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/rooms/{id}/end:
-   *   post:
-   *     summary: End the meeting (host only)
-   *     description: Clears the stage. One-off rooms are ended for good; persistent rooms stay listed for reuse.
-   *     tags:
-   *       - Collab
-   *     security:
-   *       - bearerAuth: []
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: Ended
-   *       403:
-   *         description: Not the host
-   */
-  router.post(
-    "/rooms/:id/end",
-    requireUse,
-    async (req: Request, res: Response) => {
-      const userId = actorOf(ctx);
-      const roomId = String(req.params.id);
-      try {
-        const access = await requireRoomMember(roomId, userId);
-        if (!access) return res.status(404).json({ error: "Room not found" });
-        if (!access.isHost) {
-          return res
-            .status(403)
-            .json({ error: "Only the host can end the room" });
-        }
-
-        await revokeStageShare(access.room);
-        await store.setController(roomId, null);
-        await store.clearRequests(roomId);
-        if (access.room.persistent) {
-          await rooms.setGuestToken(roomId, null);
-          await rooms.clearStage(roomId);
-          hub.broadcast(roomId, {
-            type: "collab_stage_changed",
-            roomId,
-            stage: null,
-          });
-        } else {
-          await rooms.endRoom(roomId);
-          hub.broadcast(roomId, { type: "collab_room_ended", roomId });
-        }
-        await audit(req, "collab_room_end", access.room);
-        res.json({ success: true });
-      } catch (error) {
-        fail(res, "collab_room_end_error", "Failed to end room")(error);
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/rooms/{id}:
-   *   delete:
-   *     summary: Permanently delete a room (host only)
-   *     description: Revokes the active stage and removes the room and its membership. This cannot be undone.
-   *     tags:
-   *       - Collab
-   *     security:
-   *       - bearerAuth: []
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: Deleted
-   *       403:
-   *         description: Not the host
-   */
-  router.delete(
-    "/rooms/:id",
-    requireUse,
-    async (req: Request, res: Response) => {
-      const userId = actorOf(ctx);
-      const roomId = String(req.params.id);
-      try {
-        const access = await requireRoomMember(roomId, userId);
-        if (!access) return res.status(404).json({ error: "Room not found" });
-        if (!access.isHost) {
-          return res
-            .status(403)
-            .json({ error: "Only the host can delete the room" });
-        }
-
-        await revokeStageShare(access.room);
-        await store.setController(roomId, null);
-        await store.clearRequests(roomId);
-        hub.broadcast(roomId, { type: "collab_room_ended", roomId });
-        await rooms.deleteRoom(roomId);
-        await audit(req, "collab_room_delete", access.room);
-        res.json({ success: true });
-      } catch (error) {
-        fail(res, "collab_room_delete_error", "Failed to delete room")(error);
-      }
-    },
-  );
-}
diff --git a/plugins/session-sharing/src/backend/runtime-store.ts b/plugins/session-sharing/src/backend/runtime-store.ts
deleted file mode 100644
index 28162110d..000000000
--- a/plugins/session-sharing/src/backend/runtime-store.ts
+++ /dev/null
@@ -1,289 +0,0 @@
-import crypto from "node:crypto";
-import { createClient } from "redis";
-import type { PluginLogger } from "@termix/plugin-sdk/backend";
-
-export interface CollabControlRequest {
-  userId: string;
-  username: string;
-  requestedAt: string;
-}
-
-interface PresenceEntry {
-  instanceId: string;
-  userId: string;
-  username: string;
-}
-
-interface EventEnvelope {
-  source: string;
-  roomId: string;
-  message: object;
-}
-
-const KEY_PREFIX = process.env.TERMIX_REDIS_PREFIX?.trim() || "termix:collab";
-const EVENT_CHANNEL = `${KEY_PREFIX}:events`;
-const PRESENCE_TTL_MS = 45_000;
-const STATE_TTL_SECONDS = 12 * 60 * 60;
-const CONNECT_RETRY_MS = 15_000;
-
-/**
- * Room state that has to be shared between Termix instances: who controls a
- * stage, pending control requests, presence and room events. Redis-backed when
- * REDIS_URL is set, with local state for a single instance.
- */
-export class CollabRuntimeStore {
-  constructor(private readonly log: PluginLogger) {}
-
-  private readonly instanceId = crypto.randomUUID();
-  private publisher: ReturnType<typeof createClient> | null = null;
-  private subscriber: ReturnType<typeof createClient> | null = null;
-  private connecting: Promise<boolean> | null = null;
-  private nextConnectAttempt = 0;
-  private eventListeners = new Set<(roomId: string, message: object) => void>();
-  private localControllers = new Map<string, string>();
-  private localRequests = new Map<string, Map<string, CollabControlRequest>>();
-  private presenceMembers = new Map<string, Set<string>>();
-
-  onEvent(listener: (roomId: string, message: object) => void): void {
-    this.eventListeners.add(listener);
-    void this.ensureConnected();
-  }
-
-  async publish(roomId: string, message: object): Promise<void> {
-    if (!(await this.ensureConnected()) || !this.publisher) return;
-    await this.publisher
-      .publish(
-        EVENT_CHANNEL,
-        JSON.stringify({ source: this.instanceId, roomId, message }),
-      )
-      .catch((error) => this.logRedisFailure("publish", error));
-  }
-
-  async getController(roomId: string): Promise<string | null> {
-    if (await this.ensureConnected()) {
-      const value = await this.publisher
-        ?.get(`${KEY_PREFIX}:controller:${roomId}`)
-        .catch((error) => {
-          this.logRedisFailure("get_controller", error);
-          return undefined;
-        });
-      if (value !== undefined) return value;
-    }
-    return this.localControllers.get(roomId) ?? null;
-  }
-
-  async setController(roomId: string, userId: string | null): Promise<void> {
-    if (userId) this.localControllers.set(roomId, userId);
-    else this.localControllers.delete(roomId);
-    if (!(await this.ensureConnected()) || !this.publisher) return;
-    const key = `${KEY_PREFIX}:controller:${roomId}`;
-    const operation = userId
-      ? this.publisher.set(key, userId, { EX: STATE_TTL_SECONDS })
-      : this.publisher.del(key);
-    await operation.catch((error) =>
-      this.logRedisFailure("set_controller", error),
-    );
-  }
-
-  async listRequests(roomId: string): Promise<CollabControlRequest[]> {
-    if (await this.ensureConnected()) {
-      const values = await this.publisher
-        ?.hVals(`${KEY_PREFIX}:requests:${roomId}`)
-        .catch((error) => {
-          this.logRedisFailure("list_requests", error);
-          return null;
-        });
-      if (values) {
-        return values
-          .flatMap((value) => this.parse<CollabControlRequest>(value) ?? [])
-          .sort((a, b) => a.requestedAt.localeCompare(b.requestedAt));
-      }
-    }
-    return Array.from(this.localRequests.get(roomId)?.values() ?? []).sort(
-      (a, b) => a.requestedAt.localeCompare(b.requestedAt),
-    );
-  }
-
-  async upsertRequest(
-    roomId: string,
-    request: CollabControlRequest,
-  ): Promise<void> {
-    let requests = this.localRequests.get(roomId);
-    if (!requests) {
-      requests = new Map();
-      this.localRequests.set(roomId, requests);
-    }
-    requests.set(request.userId, request);
-    if (!(await this.ensureConnected()) || !this.publisher) return;
-    const key = `${KEY_PREFIX}:requests:${roomId}`;
-    await this.publisher
-      .multi()
-      .hSet(key, request.userId, JSON.stringify(request))
-      .expire(key, STATE_TTL_SECONDS)
-      .exec()
-      .catch((error) => this.logRedisFailure("upsert_request", error));
-  }
-
-  async removeRequest(roomId: string, userId: string): Promise<void> {
-    const requests = this.localRequests.get(roomId);
-    requests?.delete(userId);
-    if (requests?.size === 0) this.localRequests.delete(roomId);
-    if (!(await this.ensureConnected()) || !this.publisher) return;
-    await this.publisher
-      .hDel(`${KEY_PREFIX}:requests:${roomId}`, userId)
-      .catch((error) => this.logRedisFailure("remove_request", error));
-  }
-
-  async clearRequests(roomId: string): Promise<void> {
-    this.localRequests.delete(roomId);
-    if (!(await this.ensureConnected()) || !this.publisher) return;
-    await this.publisher
-      .del(`${KEY_PREFIX}:requests:${roomId}`)
-      .catch((error) => this.logRedisFailure("clear_requests", error));
-  }
-
-  async updatePresence(
-    roomId: string,
-    users: Array<{ userId: string; username: string }>,
-  ): Promise<void> {
-    if (!(await this.ensureConnected()) || !this.publisher) return;
-    const key = `${KEY_PREFIX}:presence:${roomId}`;
-    const previous = this.presenceMembers.get(roomId) ?? new Set<string>();
-    const expiresAt = Date.now() + PRESENCE_TTL_MS;
-    const current = new Set(
-      users.map((user) =>
-        JSON.stringify({
-          instanceId: this.instanceId,
-          ...user,
-        } satisfies PresenceEntry),
-      ),
-    );
-    const transaction = this.publisher.multi();
-    if (previous.size > 0) transaction.zRem(key, Array.from(previous));
-    for (const member of current) {
-      transaction.zAdd(key, { score: expiresAt, value: member });
-    }
-    transaction.expire(key, Math.ceil(PRESENCE_TTL_MS / 1000) * 2);
-    await transaction
-      .exec()
-      .then(() => {
-        if (current.size > 0) this.presenceMembers.set(roomId, current);
-        else this.presenceMembers.delete(roomId);
-      })
-      .catch((error) => this.logRedisFailure("update_presence", error));
-  }
-
-  async onlineUsers(
-    roomId: string,
-    localUsers: Array<{ userId: string; username: string }>,
-  ): Promise<Array<{ userId: string; username: string }>> {
-    if (!(await this.ensureConnected()) || !this.publisher) return localUsers;
-    const key = `${KEY_PREFIX}:presence:${roomId}`;
-    const now = Date.now();
-    const transaction = this.publisher
-      .multi()
-      .zRemRangeByScore(key, 0, now)
-      .zRangeByScore(key, now + 1, "+inf");
-    const result = await transaction.exec().catch((error) => {
-      this.logRedisFailure("online_users", error);
-      return null;
-    });
-    const members = result?.[1] as string[] | undefined;
-    if (!members) return localUsers;
-    const seen = new Map<string, string>();
-    for (const member of members) {
-      const entry = this.parse<PresenceEntry>(member);
-      if (entry) seen.set(entry.userId, entry.username);
-    }
-    return Array.from(seen, ([userId, username]) => ({ userId, username }));
-  }
-
-  async close(): Promise<void> {
-    this.eventListeners.clear();
-    this.nextConnectAttempt = Number.POSITIVE_INFINITY;
-    await Promise.allSettled([
-      this.publisher?.isOpen ? this.publisher.quit() : Promise.resolve(),
-      this.subscriber?.isOpen ? this.subscriber.quit() : Promise.resolve(),
-    ]);
-    this.publisher = null;
-    this.subscriber = null;
-  }
-
-  private async ensureConnected(): Promise<boolean> {
-    const url = process.env.REDIS_URL?.trim();
-    if (!url) return false;
-    if (this.publisher?.isReady && this.subscriber?.isReady) return true;
-    if (Date.now() < this.nextConnectAttempt) return false;
-    if (this.connecting) return this.connecting;
-    this.connecting = this.connect(url).finally(() => {
-      this.connecting = null;
-    });
-    return this.connecting;
-  }
-
-  private async connect(url: string): Promise<boolean> {
-    try {
-      this.publisher = createClient({
-        url,
-        socket: { connectTimeout: 1500, reconnectStrategy: false },
-      });
-      this.subscriber = this.publisher.duplicate();
-      this.publisher.on("error", (error) =>
-        this.logRedisFailure("client", error),
-      );
-      this.subscriber.on("error", (error) =>
-        this.logRedisFailure("subscriber", error),
-      );
-      await Promise.all([this.publisher.connect(), this.subscriber.connect()]);
-      await this.subscriber.subscribe(EVENT_CHANNEL, (raw) => {
-        const envelope = this.parse<EventEnvelope>(raw);
-        if (
-          !envelope ||
-          typeof envelope.source !== "string" ||
-          typeof envelope.roomId !== "string" ||
-          !envelope.message ||
-          typeof envelope.message !== "object" ||
-          envelope.source === this.instanceId
-        ) {
-          return;
-        }
-        for (const listener of this.eventListeners) {
-          try {
-            listener(envelope.roomId, envelope.message);
-          } catch (error) {
-            this.logRedisFailure("event_listener", error);
-          }
-        }
-      });
-      this.log.info("Collaboration Redis runtime connected");
-      this.nextConnectAttempt = 0;
-      return true;
-    } catch (error) {
-      this.nextConnectAttempt = Date.now() + CONNECT_RETRY_MS;
-      this.logRedisFailure("connect", error);
-      await Promise.allSettled([
-        this.publisher?.disconnect(),
-        this.subscriber?.disconnect(),
-      ]);
-      this.publisher = null;
-      this.subscriber = null;
-      return false;
-    }
-  }
-
-  private parse<T>(value: string): T | null {
-    try {
-      return JSON.parse(value) as T;
-    } catch {
-      return null;
-    }
-  }
-
-  private logRedisFailure(operation: string, error: unknown): void {
-    this.log.warn(
-      `Collaboration Redis runtime unavailable (${operation}), using local state: ${
-        error instanceof Error ? error.message : String(error)
-      }`,
-    );
-  }
-}
diff --git a/plugins/session-sharing/src/backend/services.ts b/plugins/session-sharing/src/backend/services.ts
deleted file mode 100644
index ed3ad333b..000000000
--- a/plugins/session-sharing/src/backend/services.ts
+++ /dev/null
@@ -1,162 +0,0 @@
-import type { WebSocket } from "ws";
-import type { SharingDeps } from "./deps.js";
-import type { ShareRecord } from "./repositories.js";
-
-/**
- * What the terminal consumes. The shapes match
- * plugins/ssh-terminal/src/backend/services.ts, which is the consumer's copy.
- */
-export interface SharedSessionRef {
-  id: string;
-  sessionId: string;
-  permissionLevel: "read-write" | "read-only";
-}
-
-/** sessions.sharing v1: signed-in joins. Every call runs as the acting user. */
-export interface SessionSharingV1 {
-  authorizeJoin: (
-    shareId: string,
-  ) => Promise<{ share: SharedSessionRef; displayName: string } | null>;
-  recordJoin: (shareId: string) => Promise<void>;
-  subscribeRoom: (roomId: string, socket: unknown) => Promise<boolean>;
-  unsubscribeRoom: (socket: unknown, roomId?: string) => Promise<void>;
-}
-
-/**
- * Guest joins through a share link or a room guest link, on ctx.registry as
- * SESSION_GUESTS_KEY. A guest has no user, so a service's per-call
- * permission check cannot apply: the token is the authority.
- */
-export interface SessionGuestsV1 {
-  resolve: (request: {
-    shareToken?: string;
-    roomGuestToken?: string;
-    clientIp: string;
-  }) => Promise<
-    { ok: true; share: SharedSessionRef } | { ok: false; reason: string }
-  >;
-  recordJoin: (shareId: string) => Promise<void>;
-}
-
-export const SESSION_GUESTS_KEY = "session-sharing.guests";
-
-function toRef(share: ShareRecord): SharedSessionRef {
-  return {
-    id: share.id,
-    sessionId: share.sessionId,
-    permissionLevel:
-      share.permissionLevel === "read-write" ? "read-write" : "read-only",
-  };
-}
-
-export function createSessionSharingService(
-  deps: SharingDeps,
-): SessionSharingV1 {
-  const { ctx, shares, rooms, directory, hub } = deps;
-
-  return {
-    async authorizeJoin(shareId) {
-      const userId = ctx.currentActor();
-      if (!userId) return null;
-      const share = await shares.findActiveById(shareId);
-      if (!share || share.protocol !== "ssh") return null;
-
-      if (share.shareType === "user") {
-        // A user share needs its target, who can still reach the host.
-        if (share.targetUserId !== userId) return null;
-        const access = await ctx.hosts.checkAccess(share.hostId, "connect");
-        if (!access.hasAccess) return null;
-      } else if (share.shareType === "room") {
-        // Room membership is the authorization for a room stage: it is
-        // read-only and never exposes host credentials or config.
-        const room = await rooms.findByStageShareId(share.id);
-        if (!room || !(await rooms.findMember(room.id, userId))) return null;
-      } else {
-        return null;
-      }
-
-      return {
-        share: toRef(share),
-        displayName: await directory.username(userId),
-      };
-    },
-
-    async recordJoin(shareId) {
-      const userId = ctx.currentActor() ?? null;
-      await shares.touchUsage(shareId);
-      await shares.recordParticipantJoin(shareId, userId, null);
-    },
-
-    async subscribeRoom(roomId, socket) {
-      const userId = ctx.currentActor();
-      if (!userId) return false;
-      const room = await rooms.findById(roomId);
-      if (!room || room.endedAt) return false;
-      if (!(await rooms.findMember(roomId, userId))) return false;
-      hub.subscribe(roomId, {
-        ws: socket as WebSocket,
-        userId,
-        username: await directory.username(userId),
-      });
-      return true;
-    },
-
-    async unsubscribeRoom(socket, roomId) {
-      hub.unsubscribe(socket as WebSocket, roomId);
-    },
-  };
-}
-
-export function createSessionGuests(deps: SharingDeps): SessionGuestsV1 {
-  const { shares, rooms, guestLimiter } = deps;
-
-  /** Sharing still allowed, and an SSH share: the only kind the socket joins. */
-  async function joinable(
-    share: ShareRecord,
-  ): Promise<
-    { ok: true; share: SharedSessionRef } | { ok: false; reason: string }
-  > {
-    if (share.protocol !== "ssh") {
-      return { ok: false, reason: "Unsupported share protocol" };
-    }
-    if (!(await deps.isSharingEnabledForHost(share.hostId))) {
-      return { ok: false, reason: "Session sharing is disabled for this host" };
-    }
-    return { ok: true, share: toRef(share) };
-  }
-
-  return {
-    async resolve({ shareToken, roomGuestToken, clientIp }) {
-      if (shareToken) {
-        // Guessing link tokens is limited the same way room tokens are.
-        if (guestLimiter.isLimited(clientIp)) {
-          return { ok: false, reason: "Too many requests" };
-        }
-        const share = await shares.findByLinkToken(shareToken);
-        if (!share || share.shareType !== "link") {
-          return { ok: false, reason: "Invalid or expired share link" };
-        }
-        return joinable(share);
-      }
-
-      if (roomGuestToken) {
-        if (guestLimiter.isLimited(clientIp)) {
-          return { ok: false, reason: "Too many requests" };
-        }
-        const room = await rooms.findByGuestToken(roomGuestToken);
-        const share = room?.stageShareId
-          ? await shares.findActiveById(room.stageShareId)
-          : null;
-        if (!share) return { ok: false, reason: "Nothing is being presented" };
-        return joinable(share);
-      }
-
-      return { ok: false, reason: "Authentication required" };
-    },
-
-    async recordJoin(shareId) {
-      await shares.touchUsage(shareId);
-      await shares.recordParticipantJoin(shareId, null, "Guest");
-    },
-  };
-}
diff --git a/plugins/session-sharing/src/backend/share-routes.ts b/plugins/session-sharing/src/backend/share-routes.ts
deleted file mode 100644
index c154ca496..000000000
--- a/plugins/session-sharing/src/backend/share-routes.ts
+++ /dev/null
@@ -1,523 +0,0 @@
-import crypto from "node:crypto";
-import type { Request, Response, Router } from "express";
-import {
-  DISPLAY_WS_PATH,
-  PROTOCOLS,
-  TERMINAL_WS_PATH,
-  actorOf,
-  clientIp,
-  type SharingDeps,
-} from "./deps.js";
-import type { LiveProtocol, PermissionLevel } from "./repositories.js";
-
-const DEFAULT_EXPIRY_HOURS = 24;
-const MAX_EXPIRY_HOURS = 24 * 30;
-
-function computeExpiresAt(expiryHours: number | undefined): string {
-  const hours = Math.min(
-    Math.max(expiryHours ?? DEFAULT_EXPIRY_HOURS, 1),
-    MAX_EXPIRY_HOURS,
-  );
-  return new Date(Date.now() + hours * 60 * 60 * 1000).toISOString();
-}
-
-/**
- * The share routes. `/resolve/:linkToken` is public (an anonymous guest link);
- * the rest run behind core auth and the plugin's `use` permission, which the
- * caller applies to the router first.
- */
-export function registerShareRoutes(router: Router, deps: SharingDeps): void {
-  const { ctx, shares, directory, live, resolveLimiter } = deps;
-  const requireUse = ctx.rbac.require("use") as never;
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/resolve/{linkToken}:
-   *   get:
-   *     summary: Resolve a guest share link
-   *     description: Public, unauthenticated endpoint for anonymous share-link guests. Never returns host name, IP, username, or hostId. Rate-limited per IP.
-   *     tags:
-   *       - Session Sharing
-   *     parameters:
-   *       - in: path
-   *         name: linkToken
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: Resolved share connection info
-   *       404:
-   *         description: Link not found, expired, revoked, or sharing disabled
-   *       429:
-   *         description: Too many requests
-   *       500:
-   *         description: Server error
-   */
-  router.get("/resolve/:linkToken", async (req: Request, res: Response) => {
-    try {
-      if (resolveLimiter.isLimited(clientIp(req))) {
-        return res.status(429).json({ error: "Too many requests" });
-      }
-
-      const linkToken = String(req.params.linkToken);
-      const share = await shares.findByLinkToken(linkToken);
-      if (!share || share.shareType !== "link") {
-        return res.status(404).json({ error: "Link not found or expired" });
-      }
-      if (!(await deps.isSharingEnabledForHost(share.hostId))) {
-        return res.status(404).json({ error: "Link not found or expired" });
-      }
-
-      const protocol = share.protocol as LiveProtocol;
-      if (!(await live.isLive(protocol, share.sessionId, share.ownerUserId))) {
-        return res.status(404).json({ error: "Session is no longer active" });
-      }
-
-      // Field by field on purpose: anonymous guests never see the host's
-      // name, address, username or id.
-      const response: {
-        protocol: LiveProtocol;
-        permissionLevel: PermissionLevel;
-        wsPath: string;
-        connectParams?: Record<string, string>;
-      } = {
-        protocol,
-        permissionLevel: share.permissionLevel as PermissionLevel,
-        // Advisory only: the client builds its own socket URL per deployment.
-        wsPath:
-          protocol === "ssh"
-            ? `${TERMINAL_WS_PATH}?shareToken=${encodeURIComponent(linkToken)}`
-            : DISPLAY_WS_PATH,
-      };
-
-      if (protocol !== "ssh") {
-        response.connectParams = {
-          token: await live.createViewerToken(
-            protocol,
-            share.sessionId,
-            share.permissionLevel === "read-only",
-            share.ownerUserId,
-          ),
-        };
-      }
-
-      try {
-        await shares.touchUsage(share.id);
-        await shares.recordParticipantJoin(share.id, null, "Guest");
-      } catch {
-        // Bookkeeping never fails the resolve.
-      }
-
-      res.json(response);
-    } catch (error) {
-      ctx.log.error(
-        "Failed to resolve session share link",
-        error instanceof Error ? error : undefined,
-      );
-      res.status(500).json({ error: "Failed to resolve share link" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/create:
-   *   post:
-   *     summary: Create a session share (link or targeted user)
-   *     description: Mints a share grant for a live terminal/RDP/VNC/Telnet session. Caller must own the live session.
-   *     tags:
-   *       - Session Sharing
-   *     security:
-   *       - bearerAuth: []
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required:
-   *               - hostId
-   *               - sessionId
-   *               - protocol
-   *               - shareType
-   *               - permissionLevel
-   *             properties:
-   *               hostId:
-   *                 type: integer
-   *               sessionId:
-   *                 type: string
-   *               tabInstanceId:
-   *                 type: string
-   *               protocol:
-   *                 type: string
-   *                 enum: [ssh, rdp, vnc, telnet]
-   *               shareType:
-   *                 type: string
-   *                 enum: [link, user]
-   *               targetUserId:
-   *                 type: string
-   *               permissionLevel:
-   *                 type: string
-   *                 enum: [read-only, read-write]
-   *               expiryHours:
-   *                 type: number
-   *     responses:
-   *       200:
-   *         description: Share created
-   *       400:
-   *         description: Invalid request
-   *       403:
-   *         description: Sharing disabled, or caller does not own the session
-   *       500:
-   *         description: Server error
-   */
-  router.post("/create", requireUse, async (req: Request, res: Response) => {
-    try {
-      const userId = actorOf(ctx);
-      const {
-        hostId,
-        sessionId,
-        tabInstanceId,
-        protocol,
-        shareType,
-        targetUserId,
-        permissionLevel,
-        expiryHours,
-      } = req.body ?? {};
-
-      if (
-        !hostId ||
-        !sessionId ||
-        !protocol ||
-        !shareType ||
-        !permissionLevel
-      ) {
-        return res.status(400).json({ error: "Missing required fields" });
-      }
-      if (!PROTOCOLS.includes(protocol)) {
-        return res.status(400).json({ error: "Invalid protocol" });
-      }
-      if (!["link", "user"].includes(shareType)) {
-        return res.status(400).json({ error: "Invalid shareType" });
-      }
-      if (!["read-only", "read-write"].includes(permissionLevel)) {
-        return res.status(400).json({ error: "Invalid permissionLevel" });
-      }
-      if (shareType === "user" && !targetUserId) {
-        return res
-          .status(400)
-          .json({ error: "targetUserId is required for user shares" });
-      }
-
-      const numericHostId = Number(hostId);
-      if (!(await deps.isSharingEnabledForHost(numericHostId))) {
-        return res
-          .status(403)
-          .json({ error: "Session sharing is disabled for this host" });
-      }
-      if (!(await live.isOwnedBy(protocol, String(sessionId), userId))) {
-        return res
-          .status(403)
-          .json({ error: "You do not own this live session" });
-      }
-
-      if (shareType === "user") {
-        const target = String(targetUserId);
-        const access = (await directory.userExists(target))
-          ? await ctx.asUser(target, () =>
-              ctx.hosts.checkAccess(numericHostId, "connect"),
-            )
-          : { hasAccess: false };
-        if (!access.hasAccess) {
-          return res.status(403).json({
-            error: "Target user does not have access to this host",
-          });
-        }
-      }
-
-      const created = await shares.create({
-        id: crypto.randomUUID(),
-        hostId: numericHostId,
-        ownerUserId: userId,
-        protocol,
-        sessionId: String(sessionId),
-        tabInstanceId: tabInstanceId ?? null,
-        shareType,
-        targetUserId: shareType === "user" ? String(targetUserId) : null,
-        linkToken:
-          shareType === "link"
-            ? crypto.randomBytes(24).toString("base64url")
-            : null,
-        permissionLevel,
-        expiresAt: computeExpiresAt(expiryHours),
-      });
-
-      res.json({
-        shareId: created.id,
-        linkToken: created.linkToken,
-        expiresAt: created.expiresAt,
-      });
-    } catch (error) {
-      ctx.log.error(
-        "Failed to create session share",
-        error instanceof Error ? error : undefined,
-      );
-      res.status(500).json({ error: "Failed to create session share" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/host/{hostId}/active:
-   *   get:
-   *     summary: List active session shares for a host
-   *     description: Returns active (non-revoked, non-expired) shares owned by the caller for the given host.
-   *     tags:
-   *       - Session Sharing
-   *     security:
-   *       - bearerAuth: []
-   *     parameters:
-   *       - in: path
-   *         name: hostId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: List of active shares
-   *       400:
-   *         description: Invalid host id
-   *       500:
-   *         description: Server error
-   */
-  router.get(
-    "/host/:hostId/active",
-    requireUse,
-    async (req: Request, res: Response) => {
-      try {
-        const userId = actorOf(ctx);
-        const hostId = Number.parseInt(String(req.params.hostId), 10);
-        if (!hostId || Number.isNaN(hostId)) {
-          return res.status(400).json({ error: "Invalid host ID" });
-        }
-        res.json({
-          shares: await shares.findActiveSharesForHost(hostId, userId),
-        });
-      } catch (error) {
-        ctx.log.error(
-          "Failed to list session shares",
-          error instanceof Error ? error : undefined,
-        );
-        res.status(500).json({ error: "Failed to list session shares" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/shared-with-me:
-   *   get:
-   *     summary: List live SSH sessions other users shared with the caller
-   *     description: Active user shares aimed at the caller whose session is still live, in the shape of /open-tabs/active-sessions.
-   *     tags:
-   *       - Session Sharing
-   *     security:
-   *       - bearerAuth: []
-   *     responses:
-   *       200:
-   *         description: Shared sessions
-   *       500:
-   *         description: Server error
-   */
-  router.get(
-    "/shared-with-me",
-    requireUse,
-    async (_req: Request, res: Response) => {
-      try {
-        const userId = actorOf(ctx);
-        const result = [];
-        for (const share of await shares.findSharesTargetingUser(userId)) {
-          if (share.protocol !== "ssh") continue;
-          const session = await live.getSession("ssh", share.sessionId);
-          if (!session?.isConnected) continue;
-          result.push({
-            sessionId: session.id,
-            hostId: session.hostId,
-            hostName: session.hostName,
-            tabInstanceId: session.tabInstanceId,
-            isConnected: session.isConnected,
-            createdAt: session.createdAt,
-            isOwnSession: false,
-            sharedByUsername: await directory.username(share.ownerUserId),
-            permissionLevel: share.permissionLevel,
-            shareId: share.id,
-          });
-        }
-        res.json(result);
-      } catch (error) {
-        ctx.log.error(
-          "Failed to list shared sessions",
-          error instanceof Error ? error : undefined,
-        );
-        res.status(500).json({ error: "Failed to list shared sessions" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/directory:
-   *   get:
-   *     summary: Users and roles to share with or invite
-   *     tags:
-   *       - Session Sharing
-   *     security:
-   *       - bearerAuth: []
-   *     responses:
-   *       200:
-   *         description: Users (id, username) and roles (id, name, displayName)
-   *       500:
-   *         description: Server error
-   */
-  router.get("/directory", requireUse, async (_req: Request, res: Response) => {
-    try {
-      res.json({
-        users: await directory.listUsers(),
-        roles: await directory.listRoles(),
-      });
-    } catch (error) {
-      ctx.log.error(
-        "Failed to list users and roles",
-        error instanceof Error ? error : undefined,
-      );
-      res.status(500).json({ error: "Failed to list users and roles" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/{shareId}:
-   *   delete:
-   *     summary: Revoke a session share
-   *     description: Revokes a share. Owner or admin only. Best-effort kick of live SSH participants; remote desktop viewers are not force-disconnected.
-   *     tags:
-   *       - Session Sharing
-   *     security:
-   *       - bearerAuth: []
-   *     parameters:
-   *       - in: path
-   *         name: shareId
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: Share revoked
-   *       403:
-   *         description: Not authorized to revoke this share
-   *       404:
-   *         description: Share not found
-   *       500:
-   *         description: Server error
-   */
-  router.delete(
-    "/:shareId",
-    requireUse,
-    async (req: Request, res: Response) => {
-      try {
-        const userId = actorOf(ctx);
-        const shareId = String(req.params.shareId);
-        const share = await shares.findById(shareId);
-        if (!share) {
-          return res.status(404).json({ error: "Share not found" });
-        }
-
-        let revoked = await shares.revoke(shareId, userId);
-        if (!revoked && (await directory.isAdmin(userId))) {
-          revoked = await shares.revokeAny(shareId);
-        }
-        if (!revoked) {
-          return res
-            .status(403)
-            .json({ error: "Not authorized to revoke this share" });
-        }
-
-        // guacamole-lite has no kick, so a revoked remote desktop link only
-        // blocks new resolves until the viewer's own socket ends.
-        if (share.protocol === "ssh") {
-          await live.ownerEndSession(
-            "ssh",
-            share.sessionId,
-            "Session share revoked by owner",
-            share.ownerUserId,
-          );
-        }
-
-        res.json({ success: true });
-      } catch (error) {
-        ctx.log.error(
-          "Failed to revoke session share",
-          error instanceof Error ? error : undefined,
-        );
-        res.status(500).json({ error: "Failed to revoke session share" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/session-sharing/{shareId}/end:
-   *   post:
-   *     summary: End a shared session for all participants
-   *     description: Owner-only. Terminates the underlying session and notifies joined participants. Remote desktop viewers are not force-disconnected.
-   *     tags:
-   *       - Session Sharing
-   *     security:
-   *       - bearerAuth: []
-   *     parameters:
-   *       - in: path
-   *         name: shareId
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: Session ended
-   *       403:
-   *         description: Not the owner of this share
-   *       404:
-   *         description: Share not found
-   *       500:
-   *         description: Server error
-   */
-  router.post(
-    "/:shareId/end",
-    requireUse,
-    async (req: Request, res: Response) => {
-      try {
-        const userId = actorOf(ctx);
-        const share = await shares.findById(String(req.params.shareId));
-        if (!share) {
-          return res.status(404).json({ error: "Share not found" });
-        }
-        if (share.ownerUserId !== userId) {
-          return res.status(403).json({ error: "Not the owner of this share" });
-        }
-        if (share.protocol === "ssh") {
-          await live.ownerEndSession(
-            "ssh",
-            share.sessionId,
-            "Session ended by owner",
-          );
-        }
-        res.json({ success: true });
-      } catch (error) {
-        ctx.log.error(
-          "Failed to end shared session",
-          error instanceof Error ? error : undefined,
-        );
-        res.status(500).json({ error: "Failed to end shared session" });
-      }
-    },
-  );
-}
diff --git a/plugins/session-sharing/src/backend/tables.ts b/plugins/session-sharing/src/backend/tables.ts
deleted file mode 100644
index 515bbf18c..000000000
--- a/plugins/session-sharing/src/backend/tables.ts
+++ /dev/null
@@ -1,128 +0,0 @@
-import {
-  adoptLegacyTable,
-  boolean,
-  defineTable,
-  id,
-  integer,
-  refHost,
-  refUser,
-  text,
-  timestamp,
-  varchar,
-} from "@termix/plugin-sdk/db";
-
-/*
- * Adopted from core's session_shares, session_share_participants,
- * collab_rooms and collab_room_members, so column and index names are the
- * legacy ones and the rename carries every row across.
- *
- * Columns that point at a user or host but may be null or set null on delete,
- * and the links between these four tables, are plain columns here: the SDK
- * only references users and ssh_data, cascading. The adoption migrations keep
- * the legacy FOREIGN KEY clauses by hand, as fleets does.
- */
-
-/**
- * A grant to join one live session: a link for anonymous guests, a user, or
- * a collab room's stage ("room").
- */
-export const shares = adoptLegacyTable(
-  "session_shares",
-  defineTable(
-    "shares",
-    {
-      id: varchar().primaryKey(),
-      hostId: refHost(),
-      ownerUserId: refUser(),
-      protocol: text().notNull(),
-      // The terminal's session id for SSH, guacd's connection id otherwise.
-      // Neither is a row, so there is no foreign key.
-      sessionId: varchar().notNull(),
-      tabInstanceId: text(),
-      shareType: text().notNull(),
-      targetUserId: varchar(),
-      linkToken: varchar().unique(),
-      permissionLevel: text().notNull().default("read-only"),
-      createdAt: timestamp().notNull().defaultNow(),
-      expiresAt: text().notNull(),
-      revokedAt: text(),
-      lastJoinedAt: text(),
-      joinCount: integer().notNull().default(0),
-    },
-    {
-      indexes: [
-        { name: "idx_session_shares_session_id", columns: ["sessionId"] },
-        { name: "idx_session_shares_host_id", columns: ["hostId"] },
-      ],
-    },
-  ),
-);
-
-/** Who joined through a share, for the owner's record. */
-export const shareParticipants = adoptLegacyTable(
-  "session_share_participants",
-  defineTable("share_participants", {
-    id: id(),
-    shareId: varchar().notNull(),
-    userId: varchar(),
-    guestLabel: text(),
-    joinedAt: timestamp().notNull().defaultNow(),
-    leftAt: text(),
-  }),
-);
-
-/**
- * A collaboration room: members watching one stage, the live session the
- * current presenter shows through a "room" share.
- */
-export const rooms = adoptLegacyTable(
-  "collab_rooms",
-  defineTable(
-    "rooms",
-    {
-      id: varchar().primaryKey(),
-      name: text().notNull(),
-      ownerUserId: refUser(),
-      persistent: boolean().notNull().default(false),
-      presenterUserId: varchar(),
-      stageProtocol: text(),
-      stageHostId: integer(),
-      stageShareId: varchar(),
-      guestLinkToken: varchar(),
-      createdAt: timestamp().notNull().defaultNow(),
-      endedAt: text(),
-    },
-    {
-      indexes: [{ name: "idx_collab_rooms_owner", columns: ["ownerUserId"] }],
-      uniques: [
-        { name: "idx_collab_rooms_guest_token", columns: ["guestLinkToken"] },
-      ],
-    },
-  ),
-);
-
-export const roomMembers = adoptLegacyTable(
-  "collab_room_members",
-  defineTable(
-    "room_members",
-    {
-      id: id(),
-      roomId: varchar().notNull(),
-      userId: refUser(),
-      roomRole: text().notNull().default("member"),
-      addedBy: varchar(),
-      createdAt: timestamp().notNull().defaultNow(),
-    },
-    {
-      uniques: [
-        {
-          name: "idx_collab_room_members_room_user",
-          columns: ["roomId", "userId"],
-        },
-      ],
-      indexes: [{ name: "idx_collab_room_members_user", columns: ["userId"] }],
-    },
-  ),
-);
-
-export const tables = [shares, shareParticipants, rooms, roomMembers];
diff --git a/plugins/session-sharing/src/frontend/CollabGuestView.tsx b/plugins/session-sharing/src/frontend/CollabGuestView.tsx
deleted file mode 100644
index af8f2f642..000000000
--- a/plugins/session-sharing/src/frontend/CollabGuestView.tsx
+++ /dev/null
@@ -1,105 +0,0 @@
-import { useEffect, useRef, useState } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { AlertCircle, Eye, Presentation } from "lucide-react";
-import { RemoteDisplay } from "./shared";
-import { GuestTerminalView } from "./SharedSessionView";
-import { resolveCollabGuestStage, type CollabGuestStage } from "./api";
-
-const POLL_MS = 5000;
-
-/**
- * Anonymous guest page for a collab room (?view=collab-guest&token=...).
- * Guests have no account and no event channel, so they poll the public
- * resolve endpoint and remount the viewer whenever the stage share changes.
- */
-export default function CollabGuestView() {
-  const { t } = useTranslation();
-  const token = new URLSearchParams(window.location.search).get("token");
-  const [roomName, setRoomName] = useState<string | null>(null);
-  const [stage, setStage] = useState<CollabGuestStage | null>(null);
-  const [error, setError] = useState<string | null>(null);
-  const stageShareIdRef = useRef<string | null>(null);
-
-  useEffect(() => {
-    if (!token) {
-      setError(t("collab.guest.linkInvalid"));
-      return;
-    }
-    let cancelled = false;
-    const poll = async () => {
-      try {
-        const result = await resolveCollabGuestStage(token);
-        if (cancelled) return;
-        setRoomName(result.roomName);
-        setError(null);
-        const nextShareId = result.stage?.shareId ?? null;
-        // Tokens are minted per resolve; only swap the viewer on a real change.
-        if (nextShareId !== stageShareIdRef.current) {
-          stageShareIdRef.current = nextShareId;
-          setStage(result.stage);
-        }
-      } catch {
-        if (!cancelled) setError(t("collab.guest.linkInvalid"));
-      }
-    };
-    void poll();
-    const timer = setInterval(() => void poll(), POLL_MS);
-    return () => {
-      cancelled = true;
-      clearInterval(timer);
-    };
-  }, [token, t]);
-
-  return (
-    <div
-      className="fixed inset-0 flex flex-col"
-      style={{ backgroundColor: "var(--bg-base)", color: "var(--foreground)" }}
-    >
-      <div className="flex items-center gap-2 px-3 py-2 border-b border-border text-sm shrink-0">
-        <Presentation className="size-4 text-muted-foreground shrink-0" />
-        <span className="font-semibold truncate min-w-0">
-          {roomName ?? t("collab.guest.title")}
-        </span>
-        <div className="flex items-center gap-3 shrink-0 ml-auto text-xs text-muted-foreground">
-          <span className="flex items-center gap-1">
-            <Eye className="size-3.5" />
-            {t("sessionSharing.guestView.readOnlyBadge")}
-          </span>
-        </div>
-      </div>
-      <div className="relative flex-1 min-h-0">
-        {error ? (
-          <Note icon={<AlertCircle className="size-8" />} text={error} />
-        ) : !stage ? (
-          <Note
-            icon={<Presentation className="size-8" />}
-            text={t("collab.guest.waiting")}
-          />
-        ) : stage.protocol === "ssh" ? (
-          <GuestTerminalView
-            key={stage.shareId}
-            share={{ permissionLevel: "read-only" }}
-            wsPath={stage.wsPath ?? ""}
-            hideBadges
-          />
-        ) : stage.connectParams?.token ? (
-          <RemoteDisplay
-            key={stage.shareId}
-            token={stage.connectParams.token}
-            protocol={stage.protocol}
-            isVisible
-          />
-        ) : null}
-      </div>
-    </div>
-  );
-}
-
-function Note({ icon, text }: { icon: React.ReactNode; text: string }) {
-  return (
-    <div className="flex h-full flex-col items-center justify-center gap-3 text-muted-foreground">
-      {icon}
-      <p className="text-sm">{text}</p>
-    </div>
-  );
-}
diff --git a/plugins/session-sharing/src/frontend/CollabMembersSidebar.tsx b/plugins/session-sharing/src/frontend/CollabMembersSidebar.tsx
deleted file mode 100644
index 1a52e0975..000000000
--- a/plugins/session-sharing/src/frontend/CollabMembersSidebar.tsx
+++ /dev/null
@@ -1,325 +0,0 @@
-import { useState } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import {
-  Check,
-  Crown,
-  Eye,
-  Hand,
-  MonitorUp,
-  MousePointerClick,
-  UserMinus,
-  Users,
-  X,
-} from "lucide-react";
-import { Badge } from "@termix/plugin-sdk/ui";
-import { Button } from "@termix/plugin-sdk/ui";
-import {
-  AlertDialog,
-  AlertDialogAction,
-  AlertDialogCancel,
-  AlertDialogContent,
-  AlertDialogDescription,
-  AlertDialogFooter,
-  AlertDialogHeader,
-  AlertDialogTitle,
-} from "@termix/plugin-sdk/ui";
-import type { CollabControlRequest, CollabRoomDetail } from "./api";
-
-interface CollabMembersSidebarProps {
-  detail: CollabRoomDetail;
-  onClose: () => void;
-  onInvite: () => void;
-  onControl: (userId: string | null) => Promise<void>;
-  onDismissRequest: (userId: string) => Promise<void>;
-  onRemoveMember: (userId: string) => Promise<void>;
-  onRemoveGuests: () => Promise<void>;
-}
-
-export function CollabMembersSidebar({
-  detail,
-  onClose,
-  onInvite,
-  onControl,
-  onDismissRequest,
-  onRemoveMember,
-  onRemoveGuests,
-}: CollabMembersSidebarProps) {
-  const { t } = useTranslation();
-  const [removing, setRemoving] = useState<{
-    userId: string;
-    username: string;
-  } | null>(null);
-  const [busyUserId, setBusyUserId] = useState<string | null>(null);
-  const guests = detail.guests ?? [];
-  const onlineIds = new Set(detail.online.map((user) => user.userId));
-  const presenterUserId = detail.stage.presenterUserId;
-  const canManageControl = detail.isHost || presenterUserId === detail.me;
-  const canControl =
-    canManageControl &&
-    detail.stage.protocol === "ssh" &&
-    !!detail.stage.shareId;
-
-  async function run(userId: string, action: () => Promise<void>) {
-    setBusyUserId(userId);
-    try {
-      await action();
-    } finally {
-      setBusyUserId(null);
-    }
-  }
-
-  async function grant(request: CollabControlRequest) {
-    await run(request.userId, async () => {
-      await onControl(request.userId);
-    });
-  }
-
-  return (
-    <aside
-      id="collab-members-sidebar"
-      aria-label={t("collab.membersPanel")}
-      className="absolute inset-y-0 right-0 z-30 flex h-full w-[min(20rem,100%)] shrink-0 flex-col border-l border-border bg-background shadow-xl lg:static lg:z-auto lg:shadow-none"
-    >
-      <header className="flex h-11 items-center gap-2 border-b border-border px-3">
-        <Users className="size-4 text-muted-foreground" />
-        <h2 className="flex-1 text-sm font-semibold">
-          {t("collab.membersWithCount", { count: detail.members.length })}
-        </h2>
-        {detail.isHost && (
-          <Button size="sm" variant="outline" onClick={onInvite}>
-            {t("collab.invite")}
-          </Button>
-        )}
-        <Button
-          size="icon-sm"
-          variant="ghost"
-          aria-label={t("common.close")}
-          onClick={onClose}
-        >
-          <X className="size-4" />
-        </Button>
-      </header>
-
-      {canManageControl && (
-        <section className="border-b border-border p-3" aria-live="polite">
-          <div className="mb-2 flex items-center gap-2">
-            <Hand className="size-3.5 text-muted-foreground" />
-            <h3 className="text-xs font-semibold uppercase tracking-wide">
-              {t("collab.controlQueue")}
-            </h3>
-            {detail.controlRequests.length > 0 && (
-              <Badge variant="default" className="ml-auto text-xs">
-                {detail.controlRequests.length}
-              </Badge>
-            )}
-          </div>
-          {detail.controlRequests.length === 0 ? (
-            <p className="text-xs text-muted-foreground">
-              {t("collab.noControlRequests")}
-            </p>
-          ) : (
-            <div className="flex flex-col gap-2">
-              {detail.controlRequests.map((request) => (
-                <div
-                  key={request.userId}
-                  className="flex items-center gap-2 border border-border p-2"
-                >
-                  <div className="min-w-0 flex-1">
-                    <p className="truncate text-xs font-medium">
-                      {request.username}
-                    </p>
-                    <p className="text-xs text-muted-foreground">
-                      {new Date(request.requestedAt).toLocaleTimeString([], {
-                        hour: "2-digit",
-                        minute: "2-digit",
-                      })}
-                    </p>
-                  </div>
-                  <Button
-                    size="icon-sm"
-                    aria-label={t("collab.grantControlTo", {
-                      name: request.username,
-                    })}
-                    disabled={busyUserId === request.userId}
-                    onClick={() => void grant(request)}
-                  >
-                    <Check className="size-3.5" />
-                  </Button>
-                  <Button
-                    size="icon-sm"
-                    variant="outline"
-                    aria-label={t("collab.dismissControlRequest", {
-                      name: request.username,
-                    })}
-                    disabled={busyUserId === request.userId}
-                    onClick={() =>
-                      void run(request.userId, () =>
-                        onDismissRequest(request.userId),
-                      )
-                    }
-                  >
-                    <X className="size-3.5" />
-                  </Button>
-                </div>
-              ))}
-            </div>
-          )}
-        </section>
-      )}
-
-      <section className="min-h-0 flex-1 overflow-y-auto p-2">
-        <h3 className="sr-only">{t("collab.members")}</h3>
-        <div className="flex flex-col gap-1">
-          {detail.members.map((member) => {
-            const isOnline = onlineIds.has(member.userId);
-            const isPresenter = member.userId === presenterUserId;
-            const hasControl = member.userId === detail.controllerUserId;
-            return (
-              <div
-                key={member.userId}
-                className="group flex min-h-11 items-center gap-2 border border-transparent px-2 py-1.5 hover:border-border hover:bg-muted/40"
-              >
-                <span
-                  className={`size-2 shrink-0 rounded-full ${
-                    isOnline ? "bg-green-500" : "bg-muted-foreground/30"
-                  }`}
-                  aria-label={t(isOnline ? "collab.online" : "collab.offline")}
-                  role="img"
-                />
-                <div className="min-w-0 flex-1">
-                  <p className="truncate text-xs font-medium">
-                    {member.username}
-                    {member.userId === detail.me && (
-                      <span className="ml-1 text-muted-foreground">
-                        {t("collab.you")}
-                      </span>
-                    )}
-                  </p>
-                  <div className="mt-0.5 flex items-center gap-1.5 text-xs text-muted-foreground">
-                    {member.roomRole === "host" && (
-                      <span className="flex items-center gap-1">
-                        <Crown className="size-3" /> {t("collab.hostBadge")}
-                      </span>
-                    )}
-                    {isPresenter && (
-                      <span className="flex items-center gap-1">
-                        <MonitorUp className="size-3" />
-                        {t("collab.presenterBadge")}
-                      </span>
-                    )}
-                    {hasControl && (
-                      <span className="flex items-center gap-1">
-                        <MousePointerClick className="size-3" />
-                        {t("collab.controlBadge")}
-                      </span>
-                    )}
-                  </div>
-                </div>
-                {canControl && !isPresenter && (
-                  <Button
-                    size="icon-sm"
-                    variant={hasControl ? "default" : "ghost"}
-                    aria-label={t(
-                      hasControl
-                        ? "collab.revokeControl"
-                        : "collab.grantControlTo",
-                      { name: member.username },
-                    )}
-                    disabled={busyUserId === member.userId}
-                    onClick={() =>
-                      void run(member.userId, () =>
-                        onControl(hasControl ? null : member.userId),
-                      )
-                    }
-                  >
-                    <MousePointerClick className="size-3.5" />
-                  </Button>
-                )}
-                {detail.isHost && member.userId !== detail.room.ownerUserId && (
-                  <Button
-                    size="icon-sm"
-                    variant="ghost"
-                    aria-label={t("collab.removeMember", {
-                      name: member.username,
-                    })}
-                    onClick={() =>
-                      setRemoving({
-                        userId: member.userId,
-                        username: member.username,
-                      })
-                    }
-                  >
-                    <UserMinus className="size-3.5" />
-                  </Button>
-                )}
-              </div>
-            );
-          })}
-        </div>
-        {guests.length > 0 && (
-          <div className="mt-3 border-t border-border pt-2">
-            <div className="flex items-center gap-2 px-2 pb-1">
-              <Eye className="size-3.5 text-muted-foreground" />
-              <h3 className="flex-1 text-xs font-semibold uppercase tracking-wide">
-                {t("collab.guestsWithCount", { count: guests.length })}
-              </h3>
-              {detail.isHost && (
-                <Button
-                  size="sm"
-                  variant="ghost"
-                  className="h-7 text-xs"
-                  disabled={busyUserId === "guests"}
-                  onClick={() => void run("guests", onRemoveGuests)}
-                >
-                  {t("collab.removeGuests")}
-                </Button>
-              )}
-            </div>
-            <div className="flex flex-col gap-1">
-              {guests.map((guest, index) => (
-                <div
-                  key={index}
-                  className="flex min-h-9 items-center gap-2 px-2 py-1 text-xs"
-                >
-                  <span className="size-2 shrink-0 rounded-full bg-green-500" />
-                  <span className="truncate">
-                    {guest.label || t("collab.anonymousGuest")}
-                  </span>
-                </div>
-              ))}
-            </div>
-          </div>
-        )}
-      </section>
-
-      <AlertDialog
-        open={Boolean(removing)}
-        onOpenChange={(open) => {
-          if (!open) setRemoving(null);
-        }}
-      >
-        <AlertDialogContent>
-          <AlertDialogHeader>
-            <AlertDialogTitle>{t("collab.removeMemberTitle")}</AlertDialogTitle>
-            <AlertDialogDescription>
-              {t("collab.removeMemberDescription", {
-                name: removing?.username,
-              })}
-            </AlertDialogDescription>
-          </AlertDialogHeader>
-          <AlertDialogFooter>
-            <AlertDialogCancel>{t("common.cancel")}</AlertDialogCancel>
-            <AlertDialogAction
-              className="bg-destructive text-destructive-foreground hover:bg-destructive/90"
-              onClick={() => {
-                if (removing) void onRemoveMember(removing.userId);
-              }}
-            >
-              {t("collab.deleteMember")}
-            </AlertDialogAction>
-          </AlertDialogFooter>
-        </AlertDialogContent>
-      </AlertDialog>
-    </aside>
-  );
-}
diff --git a/plugins/session-sharing/src/frontend/CollabPanel.tsx b/plugins/session-sharing/src/frontend/CollabPanel.tsx
deleted file mode 100644
index ff750a585..000000000
--- a/plugins/session-sharing/src/frontend/CollabPanel.tsx
+++ /dev/null
@@ -1,186 +0,0 @@
-import { useCallback, useEffect, useState } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { toast } from "sonner";
-import { Loader2, Plus, Presentation, RefreshCw } from "lucide-react";
-import { Button } from "@termix/plugin-sdk/ui";
-import { Input } from "@termix/plugin-sdk/ui";
-import { Badge } from "@termix/plugin-sdk/ui";
-import {
-  Dialog,
-  DialogContent,
-  DialogFooter,
-  DialogHeader,
-  DialogTitle,
-} from "@termix/plugin-sdk/ui";
-import type { CollabRoom } from "./api";
-import type { MeetingBackend } from "./meeting-backend";
-import { getErrorMessage } from "./shared";
-
-export function CollabPanel({
-  onOpenRoom,
-  backend,
-}: {
-  onOpenRoom: (room: CollabRoom) => void;
-  backend: MeetingBackend;
-}) {
-  const { t } = useTranslation();
-  const { createCollabRoom, listCollabRooms } = backend.api;
-  const [rooms, setRooms] = useState<CollabRoom[]>([]);
-  const [loading, setLoading] = useState(true);
-  const [createOpen, setCreateOpen] = useState(false);
-  const [name, setName] = useState("");
-  const [persistent, setPersistent] = useState(false);
-  const [creating, setCreating] = useState(false);
-
-  const refresh = useCallback(async () => {
-    try {
-      const result = await listCollabRooms();
-      setRooms(result.rooms ?? []);
-    } catch {
-      /* the list stays as-is */
-    } finally {
-      setLoading(false);
-    }
-  }, [backend]);
-
-  useEffect(() => {
-    void refresh();
-    const timer = window.setInterval(() => void refresh(), 30000);
-    return () => window.clearInterval(timer);
-  }, [refresh]);
-
-  async function handleCreate() {
-    if (!name.trim()) return;
-    setCreating(true);
-    try {
-      const { room } = await createCollabRoom(name.trim(), persistent);
-      toast.success(t("collab.created"));
-      setCreateOpen(false);
-      setName("");
-      setPersistent(false);
-      await refresh();
-      onOpenRoom(room);
-    } catch (error) {
-      toast.error(getErrorMessage(error));
-    } finally {
-      setCreating(false);
-    }
-  }
-
-  return (
-    <div className="flex flex-col gap-2 p-2">
-      <div className="flex items-center gap-1.5">
-        <Button
-          size="sm"
-          className="h-8 text-xs flex-1 border border-accent-brand/40 bg-accent-brand/10 text-accent-brand font-semibold hover:bg-accent-brand/20"
-          onClick={() => setCreateOpen(true)}
-        >
-          <Plus className="size-3.5 mr-1" />
-          {t("collab.createRoom")}
-        </Button>
-        <Button
-          size="sm"
-          variant="outline"
-          className="h-8 px-2"
-          onClick={() => void refresh()}
-          aria-label={t("common.refresh")}
-          title={t("common.refresh")}
-        >
-          <RefreshCw className="size-3.5" />
-        </Button>
-      </div>
-
-      {loading ? (
-        <div className="flex justify-center py-6">
-          <Loader2 className="size-4 animate-spin text-muted-foreground" />
-        </div>
-      ) : rooms.length === 0 ? (
-        <p className="text-xs text-muted-foreground px-1 py-4 text-center">
-          {t("collab.noRooms")}
-        </p>
-      ) : (
-        <div className="flex flex-col gap-1">
-          {rooms.map((room) => (
-            <button
-              key={room.id}
-              type="button"
-              onClick={() => onOpenRoom(room)}
-              className="flex items-center gap-2 px-2 py-1.5 text-left border border-border hover:bg-muted/50"
-            >
-              <Presentation className="size-3.5 shrink-0 text-muted-foreground" />
-              <span className="flex-1 text-xs truncate">{room.name}</span>
-              {room.presenterUserId && (
-                <span
-                  className="size-1.5 rounded-full bg-red-500 shrink-0"
-                  role="img"
-                  aria-label={t("collab.presenterBadge")}
-                  title={t("collab.presenterBadge")}
-                />
-              )}
-              {room.persistent && (
-                <Badge variant="outline" className="text-[9px] px-1 py-0">
-                  {t("collab.persistentRoom")}
-                </Badge>
-              )}
-            </button>
-          ))}
-        </div>
-      )}
-
-      <Dialog open={createOpen} onOpenChange={setCreateOpen}>
-        <DialogContent>
-          <DialogHeader>
-            <DialogTitle>{t("collab.createRoom")}</DialogTitle>
-          </DialogHeader>
-          <div className="flex flex-col gap-3">
-            <label htmlFor="collab-room-name" className="text-xs font-medium">
-              {t("collab.roomName")}
-            </label>
-            <Input
-              id="collab-room-name"
-              placeholder={t("collab.roomName")}
-              value={name}
-              onChange={(e) => setName(e.target.value)}
-              onKeyDown={(e) => {
-                if (e.key === "Enter") void handleCreate();
-              }}
-            />
-            <label className="flex items-start gap-2 text-xs cursor-pointer">
-              <input
-                type="checkbox"
-                className="mt-0.5"
-                checked={persistent}
-                onChange={(e) => setPersistent(e.target.checked)}
-              />
-              <span>
-                <span className="font-medium">
-                  {t("collab.persistentRoom")}
-                </span>
-                <br />
-                <span className="text-muted-foreground">
-                  {t("collab.persistentRoomHint")}
-                </span>
-              </span>
-            </label>
-          </div>
-          <DialogFooter>
-            <Button
-              variant="outline"
-              onClick={() => setCreateOpen(false)}
-              disabled={creating}
-            >
-              {t("common.cancel")}
-            </Button>
-            <Button
-              onClick={() => void handleCreate()}
-              disabled={creating || !name.trim()}
-            >
-              {creating && <Loader2 className="size-3.5 mr-1 animate-spin" />}
-              {t("common.create")}
-            </Button>
-          </DialogFooter>
-        </DialogContent>
-      </Dialog>
-    </div>
-  );
-}
diff --git a/plugins/session-sharing/src/frontend/CollabRoomTab.tsx b/plugins/session-sharing/src/frontend/CollabRoomTab.tsx
deleted file mode 100644
index 2fc07dbb0..000000000
--- a/plugins/session-sharing/src/frontend/CollabRoomTab.tsx
+++ /dev/null
@@ -1,1051 +0,0 @@
-import { useCallback, useEffect, useRef, useState } from "react";
-import {
-  hostProtocols,
-  useHosts,
-  useTranslation,
-  type PluginHostRecord,
-} from "@termix/plugin-sdk/frontend";
-import { toast } from "sonner";
-import {
-  AlertCircle,
-  Hand,
-  Link2,
-  Loader2,
-  MonitorUp,
-  Presentation,
-  Square,
-  Users,
-} from "lucide-react";
-import { Button } from "@termix/plugin-sdk/ui";
-import {
-  Dialog,
-  DialogContent,
-  DialogFooter,
-  DialogHeader,
-  DialogTitle,
-} from "@termix/plugin-sdk/ui";
-import {
-  AlertDialog,
-  AlertDialogAction,
-  AlertDialogCancel,
-  AlertDialogContent,
-  AlertDialogDescription,
-  AlertDialogFooter,
-  AlertDialogHeader,
-  AlertDialogTitle,
-} from "@termix/plugin-sdk/ui";
-import { Input, PluginComponent } from "@termix/plugin-sdk/ui";
-import { CollabMembersSidebar } from "./CollabMembersSidebar";
-import {
-  RemoteDisplay,
-  createRemoteSessionToken,
-  getErrorMessage,
-  wsTargetForPath,
-} from "./shared";
-import type { CollabRoomDetail, CollabStage, DirectoryRole } from "./api";
-import { meetingGuestUrl, type MeetingBackend } from "./meeting-backend";
-
-type SharedProtocol = "ssh" | "rdp" | "vnc" | "telnet";
-
-function isSharedProtocol(value: string): value is SharedProtocol {
-  return (
-    value === "ssh" || value === "rdp" || value === "vnc" || value === "telnet"
-  );
-}
-
-/** A host from the shell's list; the connection fields ride along by name. */
-type SSHHostWithStatus = PluginHostRecord & {
-  enableSsh?: boolean;
-  connectionOrigin?: unknown;
-};
-
-const PING_INTERVAL_MS = 30000;
-const POLL_FALLBACK_MS = 15000;
-
-// The terminal socket the ssh-terminal plugin serves. Authentication rides on
-// the jwt cookie the way every terminal WS connection does.
-async function roomEventsWsUrl(roomId: string, backend: MeetingBackend) {
-  const { eventsWsPath } = await backend.api.getCollabRoom(roomId);
-  await backend.assertCurrent();
-  return wsTargetForPath(eventsWsPath, backend.origin);
-}
-
-type PresentDraft =
-  | { protocol: "ssh"; host: SSHHostWithStatus }
-  | {
-      protocol: "rdp" | "vnc" | "telnet";
-      host: SSHHostWithStatus;
-      token: string;
-      guacamoleConnectionId: string;
-    };
-type PresentChoice = {
-  host: SSHHostWithStatus;
-  protocol: "ssh" | "rdp" | "vnc" | "telnet";
-};
-
-export function CollabRoomTab({
-  roomId,
-  isVisible,
-  backend,
-}: {
-  backend: MeetingBackend;
-  roomId?: string;
-  isVisible: boolean;
-}) {
-  const { t } = useTranslation();
-  const {
-    deleteCollabRoom,
-    endCollabRoom,
-    dismissCollabControlRequest,
-    getCollabRoom,
-    getCollabStage,
-    inviteCollabMembers,
-    presentCollabStage,
-    requestCollabStageControl,
-    removeCollabMember,
-    removeCollabGuests,
-    setCollabGuestLink,
-    setCollabStageControl,
-    stopCollabStage,
-    getDirectory,
-  } = backend.api;
-  const [detail, setDetail] = useState<CollabRoomDetail | null>(null);
-  const [stage, setStage] = useState<CollabStage | null>(null);
-  const [ended, setEnded] = useState(false);
-  const [loadError, setLoadError] = useState<string | null>(null);
-  const [draft, setDraft] = useState<PresentDraft | null>(null);
-  const [presentOpen, setPresentOpen] = useState(false);
-  const { loaded: hostsLoaded } = useHosts();
-  const presentLoading = !hostsLoaded;
-  const [inviteOpen, setInviteOpen] = useState(false);
-  const [membersOpen, setMembersOpen] = useState(true);
-  const [endOpen, setEndOpen] = useState(false);
-  const [deleteOpen, setDeleteOpen] = useState(false);
-  const [deleting, setDeleting] = useState(false);
-  const [takeoverChoice, setTakeoverChoice] = useState<PresentChoice | null>(
-    null,
-  );
-  const [guestLinkToken, setGuestLinkToken] = useState<string | null>(null);
-  const [guestLinkAction, setGuestLinkAction] = useState<
-    "disable" | "rotate" | null
-  >(null);
-  const [hostSearch, setHostSearch] = useState("");
-  const [inviteSearch, setInviteSearch] = useState("");
-  const { hosts: shellHosts } = useHosts();
-  const hosts = shellHosts as SSHHostWithStatus[];
-  const [users, setUsers] = useState<Array<{ id: string; username: string }>>(
-    [],
-  );
-  const [inviteSelection, setInviteSelection] = useState<Set<string>>(
-    new Set(),
-  );
-  const [roles, setRoles] = useState<DirectoryRole[]>([]);
-  const [roleSelection, setRoleSelection] = useState<Set<number>>(new Set());
-  const draftRef = useRef<PresentDraft | null>(null);
-  draftRef.current = draft;
-  const stageKeyRef = useRef<string | null>(null);
-  const presenterRef = useRef<string | null>(null);
-  const refreshSequence = useRef(0);
-
-  const refresh = useCallback(async () => {
-    if (!roomId) return;
-    const sequence = ++refreshSequence.current;
-    try {
-      const nextDetail = await getCollabRoom(roomId);
-      if (sequence !== refreshSequence.current) return;
-      // Only discard a confirmed presentation that another member took over.
-      if (
-        presenterRef.current === nextDetail.me &&
-        nextDetail.stage.presenterUserId !== nextDetail.me
-      ) {
-        setDraft(null);
-      }
-      presenterRef.current = nextDetail.stage.presenterUserId;
-      setDetail(nextDetail);
-      setLoadError(null);
-      // Presenting locally? The local session is the stage - don't join it.
-      if (
-        nextDetail.stage.shareId &&
-        nextDetail.stage.presenterUserId !== nextDetail.me
-      ) {
-        // A guac viewer reconnects whenever its token changes, so the stage
-        // is only re-resolved when the share or my control actually changed.
-        const stageKey = `${nextDetail.stage.shareId}:${
-          nextDetail.controllerUserId === nextDetail.me
-        }`;
-        if (stageKeyRef.current !== stageKey) {
-          stageKeyRef.current = stageKey;
-          const { stage: resolved } = await getCollabStage(roomId);
-          setStage(resolved);
-        }
-      } else if (!nextDetail.stage.shareId) {
-        stageKeyRef.current = null;
-        setStage(null);
-        // The stage was cleared elsewhere; stop presenting locally too.
-        if (draftRef.current) setDraft(null);
-      }
-    } catch (error) {
-      if (sequence === refreshSequence.current) {
-        setLoadError(getErrorMessage(error));
-      }
-    }
-  }, [roomId, backend]);
-
-  useEffect(() => {
-    void refresh();
-  }, [refresh]);
-
-  // Live room events. Poll only while the socket is unavailable.
-  useEffect(() => {
-    if (!roomId) return;
-    let ws: WebSocket | null = null;
-    let pingTimer: ReturnType<typeof setInterval> | null = null;
-    let pollTimer: ReturnType<typeof setInterval> | null = null;
-    let reconnectTimer: ReturnType<typeof setTimeout> | null = null;
-    let reconnectAttempt = 0;
-    let cancelled = false;
-
-    const startPolling = () => {
-      pollTimer ??= setInterval(() => void refresh(), POLL_FALLBACK_MS);
-    };
-    const stopPolling = () => {
-      if (pollTimer) clearInterval(pollTimer);
-      pollTimer = null;
-    };
-    const connect = async () => {
-      if (cancelled) return;
-      try {
-        const url = await roomEventsWsUrl(roomId, backend);
-        if (cancelled) return;
-        if (!url) throw new Error("No terminal endpoint is available");
-        ws = new WebSocket(url.url, url.protocols);
-      } catch {
-        startPolling();
-        reconnectTimer = setTimeout(() => void connect(), 5000);
-        return;
-      }
-      ws.onopen = () => {
-        reconnectAttempt = 0;
-        stopPolling();
-        ws?.send(
-          JSON.stringify({ type: "collab_subscribe", data: { roomId } }),
-        );
-        pingTimer = setInterval(() => {
-          if (ws?.readyState === WebSocket.OPEN) {
-            ws.send(JSON.stringify({ type: "ping" }));
-          }
-        }, PING_INTERVAL_MS);
-      };
-      ws.onmessage = (event) => {
-        if (cancelled) return;
-        let msg: { type?: string; roomId?: string };
-        try {
-          msg = JSON.parse(event.data);
-        } catch {
-          return;
-        }
-        if (msg.roomId !== roomId) return;
-        switch (msg.type) {
-          case "collab_online":
-          case "collab_members_changed":
-          case "collab_stage_changed":
-          case "collab_control_changed":
-          case "collab_control_requested":
-          case "collab_control_requests_changed":
-            void refresh();
-            break;
-          case "collab_room_ended":
-            setEnded(true);
-            break;
-          default:
-            break;
-        }
-      };
-      ws.onclose = () => {
-        if (cancelled) return;
-        if (pingTimer) clearInterval(pingTimer);
-        pingTimer = null;
-        startPolling();
-        const delay = Math.min(1000 * 2 ** reconnectAttempt++, 15000);
-        reconnectTimer = setTimeout(() => void connect(), delay);
-      };
-      ws.onerror = () => ws?.close();
-    };
-
-    void connect();
-    return () => {
-      cancelled = true;
-      if (pingTimer) clearInterval(pingTimer);
-      if (pollTimer) clearInterval(pollTimer);
-      if (reconnectTimer) clearTimeout(reconnectTimer);
-      ws?.close();
-    };
-  }, [roomId, refresh]);
-
-  const me = detail?.me;
-  const isHost = detail?.isHost ?? false;
-  const controllerUserId = detail?.controllerUserId ?? null;
-  const presenterUserId = detail?.stage.presenterUserId ?? null;
-  const iAmPresenter = !!me && presenterUserId === me;
-  const presenterName = detail?.members.find(
-    (member) => member.userId === presenterUserId,
-  )?.username;
-
-  async function changeControl(targetId: string | null) {
-    if (!roomId) return;
-    try {
-      await setCollabStageControl(roomId, targetId);
-      await refresh();
-    } catch (error) {
-      toast.error(getErrorMessage(error));
-    }
-  }
-
-  async function dismissControlRequest(targetId: string) {
-    if (!roomId) return;
-    try {
-      await dismissCollabControlRequest(roomId, targetId);
-      await refresh();
-    } catch (error) {
-      toast.error(getErrorMessage(error));
-    }
-  }
-
-  async function removeGuests() {
-    if (!roomId) return;
-    try {
-      await removeCollabGuests(roomId);
-      await refresh();
-    } catch (error) {
-      toast.error(getErrorMessage(error));
-    }
-  }
-
-  async function removeMember(targetId: string) {
-    if (!roomId) return;
-    try {
-      await removeCollabMember(roomId, targetId);
-      await refresh();
-    } catch (error) {
-      toast.error(getErrorMessage(error));
-    }
-  }
-
-  async function toggleOwnControlRequest() {
-    if (!roomId || !me) return;
-    try {
-      const existing = detail?.controlRequests.some(
-        (request) => request.userId === me,
-      );
-      if (existing) await dismissCollabControlRequest(roomId, me);
-      else await requestCollabStageControl(roomId);
-      await refresh();
-    } catch (error) {
-      toast.error(getErrorMessage(error));
-    }
-  }
-
-  function openPresentDialog() {
-    setPresentOpen(true);
-  }
-
-  function choosePresent(
-    host: SSHHostWithStatus,
-    protocol: "ssh" | "rdp" | "vnc" | "telnet",
-  ) {
-    if (presenterUserId && !iAmPresenter) {
-      setPresentOpen(false);
-      setTakeoverChoice({ host, protocol });
-      return;
-    }
-    void startPresent(host, protocol);
-  }
-
-  async function startPresent(
-    host: SSHHostWithStatus,
-    protocol: "ssh" | "rdp" | "vnc" | "telnet",
-  ) {
-    if (!roomId) return;
-    setPresentOpen(false);
-    try {
-      await backend.assertCurrent();
-      if (backend.origin === "remote") {
-        if (!host.syncId) throw new Error(t("collab.hostNotSynced"));
-        const resolved = await backend.api.resolveHost(host.syncId);
-        host = { ...host, id: String(resolved.id), connectionOrigin: "remote" };
-      } else {
-        host = { ...host, connectionOrigin: "local" };
-      }
-      if (protocol === "ssh") {
-        setDraft({ protocol, host });
-        return;
-      }
-      const response = await createRemoteSessionToken(
-        Number(host.id),
-        backend.origin,
-        protocol,
-      );
-      if (!response?.connectionId) {
-        toast.error(t("collab.stageLoading"));
-        return;
-      }
-      setDraft({
-        protocol,
-        host,
-        token: response.token,
-        guacamoleConnectionId: response.connectionId,
-      });
-    } catch (error) {
-      toast.error(getErrorMessage(error));
-    }
-  }
-
-  async function registerStage(
-    protocol: string,
-    sessionId: string,
-    hostId: number,
-  ) {
-    if (!roomId) return;
-    try {
-      await presentCollabStage(roomId, { protocol, sessionId, hostId });
-      void refresh();
-    } catch (error) {
-      toast.error(getErrorMessage(error));
-      setDraft(null);
-    }
-  }
-
-  async function handleStop() {
-    if (!roomId) return;
-    try {
-      await stopCollabStage(roomId);
-      setDraft(null);
-      void refresh();
-    } catch (error) {
-      toast.error(getErrorMessage(error));
-    }
-  }
-
-  async function handleEnd() {
-    if (!roomId) return;
-    try {
-      await endCollabRoom(roomId);
-      setDraft(null);
-      if (!detail?.room.persistent) setEnded(true);
-      void refresh();
-    } catch (error) {
-      toast.error(getErrorMessage(error));
-    }
-  }
-
-  async function handleDelete() {
-    if (!roomId) return;
-    setDeleting(true);
-    try {
-      await deleteCollabRoom(roomId);
-      setDraft(null);
-      setEnded(true);
-    } catch (error) {
-      toast.error(getErrorMessage(error));
-    } finally {
-      setDeleting(false);
-    }
-  }
-
-  async function openInviteDialog() {
-    setInviteOpen(true);
-    setInviteSelection(new Set());
-    setRoleSelection(new Set());
-    try {
-      const directory = await getDirectory();
-      setUsers(directory.users);
-      setRoles(directory.roles);
-    } catch (error) {
-      toast.error(getErrorMessage(error));
-    }
-  }
-
-  async function handleGuestLink(enabled: boolean) {
-    if (!roomId) return;
-    try {
-      const result = await setCollabGuestLink(roomId, enabled);
-      setGuestLinkToken(result.guestLinkToken);
-      await refresh();
-    } catch (error) {
-      toast.error(getErrorMessage(error));
-    }
-  }
-
-  async function copyGuestLink(token: string) {
-    try {
-      await backend.assertCurrent();
-      const url = meetingGuestUrl(backend.publicUrl, token);
-      if (!url) throw new Error(t("collab.linkRequiresServer"));
-      await navigator.clipboard.writeText(url);
-      toast.success(t("collab.linkCopied"));
-    } catch (error) {
-      toast.error(getErrorMessage(error));
-    }
-  }
-
-  async function handleInvite() {
-    if (!roomId || (inviteSelection.size === 0 && roleSelection.size === 0))
-      return;
-    try {
-      await inviteCollabMembers(roomId, {
-        userIds: Array.from(inviteSelection),
-        roleIds: Array.from(roleSelection),
-      });
-      toast.success(t("collab.invited"));
-      setInviteOpen(false);
-      void refresh();
-    } catch (error) {
-      toast.error(getErrorMessage(error));
-    }
-  }
-
-  if (!roomId) {
-    return (
-      <div className="flex flex-1 h-full items-center justify-center">
-        <div className="flex flex-col items-center gap-2 text-muted-foreground">
-          <Presentation className="size-8" />
-          <p className="text-sm">{t("collab.reopenFromPanel")}</p>
-        </div>
-      </div>
-    );
-  }
-
-  if (ended) {
-    return (
-      <div className="flex flex-1 h-full items-center justify-center">
-        <div className="flex flex-col items-center gap-2 text-muted-foreground">
-          <AlertCircle className="size-8" />
-          <p className="text-sm">{t("collab.roomEnded")}</p>
-        </div>
-      </div>
-    );
-  }
-
-  if (!detail && loadError) {
-    return (
-      <div className="flex flex-1 h-full items-center justify-center">
-        <div className="flex flex-col items-center gap-3 text-muted-foreground">
-          <AlertCircle className="size-8" />
-          <p className="max-w-sm text-center text-sm">{loadError}</p>
-          <Button variant="outline" onClick={() => void refresh()}>
-            {t("collab.retry")}
-          </Button>
-        </div>
-      </div>
-    );
-  }
-
-  const memberIds = new Set(detail?.members.map((member) => member.userId));
-  const normalizedInviteSearch = inviteSearch.trim().toLocaleLowerCase();
-  const invitableUsers = users.filter(
-    (user) =>
-      !memberIds.has(user.id) &&
-      user.username.toLocaleLowerCase().includes(normalizedInviteSearch),
-  );
-  const normalizedHostSearch = hostSearch.trim().toLocaleLowerCase();
-  const filteredHosts = hosts.filter((host) =>
-    host.name.toLocaleLowerCase().includes(normalizedHostSearch),
-  );
-
-  return (
-    <div className="flex flex-col h-full min-h-0">
-      {loadError && (
-        <div
-          className="flex items-center gap-2 border-b border-destructive/40 bg-destructive/10 px-3 py-2 text-xs"
-          role="alert"
-        >
-          <AlertCircle className="size-4 shrink-0 text-destructive" />
-          <span className="flex-1 truncate">{loadError}</span>
-          <Button size="sm" variant="outline" onClick={() => void refresh()}>
-            {t("collab.retry")}
-          </Button>
-        </div>
-      )}
-      {/* Header: room identity + primary controls */}
-      <div className="flex items-center gap-2 px-3 py-2 border-b border-border flex-wrap">
-        <Presentation className="size-4 text-muted-foreground shrink-0" />
-        <span className="text-sm font-semibold truncate">
-          {detail?.room.name}
-        </span>
-        <div className="flex-1" />
-        <div className="flex items-center gap-1.5 shrink-0">
-          {!!detail?.stage.shareId &&
-            detail.stage.protocol === "ssh" &&
-            !iAmPresenter &&
-            !draft && (
-              <Button
-                size="sm"
-                variant={controllerUserId === me ? "default" : "outline"}
-                className="h-8 text-xs"
-                onClick={() =>
-                  controllerUserId === me
-                    ? void changeControl(null)
-                    : void toggleOwnControlRequest()
-                }
-              >
-                <Hand className="size-3.5 mr-1" />
-                {controllerUserId === me
-                  ? t("collab.releaseControl")
-                  : detail.controlRequests.some(
-                        (request) => request.userId === me,
-                      )
-                    ? t("collab.cancelControlRequest")
-                    : t("collab.requestControl")}
-              </Button>
-            )}
-          {(iAmPresenter || draft || (isHost && presenterUserId)) && (
-            <Button
-              size="sm"
-              variant="outline"
-              className="h-8 text-xs"
-              onClick={() => void handleStop()}
-            >
-              <Square className="size-3.5 mr-1" />
-              {t("collab.stopPresenting")}
-            </Button>
-          )}
-          <Button
-            size="sm"
-            variant={membersOpen ? "default" : "outline"}
-            className="h-8 text-xs"
-            aria-controls="collab-members-sidebar"
-            aria-expanded={membersOpen}
-            onClick={() => setMembersOpen((open) => !open)}
-          >
-            <Users className="mr-1 size-3.5" />
-            {(detail?.members.length ?? 0) + (detail?.guests?.length ?? 0)}
-          </Button>
-          <Button
-            size="sm"
-            className="h-8 text-xs"
-            onClick={() => void openPresentDialog()}
-          >
-            <MonitorUp className="size-3.5 mr-1" />
-            {presenterUserId && !iAmPresenter
-              ? t("collab.takeOver")
-              : t("collab.present")}
-          </Button>
-          {isHost && (
-            <Button
-              size="sm"
-              variant="destructive"
-              className="h-8 text-xs"
-              onClick={() => setEndOpen(true)}
-            >
-              {t("collab.endRoom")}
-            </Button>
-          )}
-          {isHost && detail?.room.persistent && (
-            <Button
-              size="sm"
-              variant="destructive"
-              className="h-8 text-xs"
-              onClick={() => setDeleteOpen(true)}
-            >
-              {t("collab.deleteRoom")}
-            </Button>
-          )}
-        </div>
-      </div>
-
-      {isHost && (
-        <div className="flex items-center gap-2 px-3 py-1.5 border-b border-border text-xs text-muted-foreground">
-          <Link2 className="size-3.5" />
-          <span className="flex-1 truncate">
-            {detail?.room.guestLinkEnabled
-              ? t("collab.guestLinkOn")
-              : t("collab.guestLinkOff")}
-          </span>
-          {guestLinkToken && (
-            <Button
-              size="sm"
-              variant="outline"
-              className="h-8 text-xs"
-              onClick={() => {
-                void copyGuestLink(guestLinkToken);
-              }}
-            >
-              {t("collab.copyLink")}
-            </Button>
-          )}
-          {detail?.room.guestLinkEnabled && !guestLinkToken && (
-            <Button
-              size="sm"
-              variant="outline"
-              className="h-8 text-xs"
-              onClick={() => setGuestLinkAction("rotate")}
-            >
-              {t("collab.rotateLink")}
-            </Button>
-          )}
-          <Button
-            size="sm"
-            variant={detail?.room.guestLinkEnabled ? "destructive" : "outline"}
-            className="h-8 text-xs"
-            onClick={() =>
-              detail?.room.guestLinkEnabled
-                ? setGuestLinkAction("disable")
-                : void handleGuestLink(true)
-            }
-          >
-            {t("collab.guestLink")}:{" "}
-            {detail?.room.guestLinkEnabled ? "ON" : "OFF"}
-          </Button>
-        </div>
-      )}
-
-      <div className="relative flex flex-1 min-h-0">
-        {/* Stage */}
-        <div className="relative flex-1 min-w-0 min-h-0">
-          {draft ? (
-            draft.protocol === "ssh" ? (
-              <PluginComponent
-                id="terminal.view"
-                hostConfig={{
-                  ...draft.host,
-                  id: Number(draft.host.id),
-                  ip: draft.host.ip,
-                  port: draft.host.port,
-                  username: draft.host.username,
-                  instanceId: `collab-present-${roomId}`,
-                }}
-                isVisible={isVisible}
-                disableAutoFocus={false}
-                onSessionReady={(sessionId) =>
-                  void registerStage("ssh", sessionId, Number(draft.host.id))
-                }
-              />
-            ) : (
-              <RemoteDisplay
-                connectionOrigin={backend.origin}
-                token={draft.token}
-                protocol={draft.protocol}
-                isVisible={isVisible}
-                onConnect={() =>
-                  void registerStage(
-                    draft.protocol,
-                    draft.guacamoleConnectionId,
-                    Number(draft.host.id),
-                  )
-                }
-                onError={(err) => {
-                  toast.error(err);
-                  setDraft(null);
-                }}
-              />
-            )
-          ) : stage && stage.protocol && !iAmPresenter ? (
-            <>
-              {presenterName && (
-                <div className="absolute top-2 left-2 z-20 rounded px-2 py-0.5 text-[10px] bg-background/80 border border-border">
-                  {t("collab.presenterLabel", { name: presenterName })}
-                </div>
-              )}
-              {stage.protocol === "ssh" ? (
-                <PluginComponent
-                  id="terminal.view"
-                  hostConfig={{
-                    id: stage.hostId ?? undefined,
-                    connectionOrigin: backend.origin,
-                    name: detail?.room.name ?? "stage",
-                    ip: "",
-                    port: 0,
-                    username: "",
-                    authType: "none",
-                    instanceId: `collab-view-${roomId}-${stage.shareId}`,
-                    joinShareId: stage.shareId,
-                    joinSharedSessionId: stage.sessionId ?? null,
-                  }}
-                  isVisible={isVisible}
-                  disableAutoFocus
-                />
-              ) : stage.connectParams?.token ? (
-                <RemoteDisplay
-                  connectionOrigin={backend.origin}
-                  key={stage.connectParams.token}
-                  token={stage.connectParams.token}
-                  protocol={stage.protocol}
-                  isVisible={isVisible}
-                />
-              ) : (
-                <CenteredNote text={t("collab.stageLoading")} />
-              )}
-            </>
-          ) : iAmPresenter && !draft ? (
-            <CenteredNote text={t("collab.youArePresenting")} />
-          ) : (
-            <CenteredNote text={t("collab.emptyStage")} />
-          )}
-        </div>
-        {membersOpen && detail && (
-          <CollabMembersSidebar
-            detail={detail}
-            onClose={() => setMembersOpen(false)}
-            onInvite={() => void openInviteDialog()}
-            onControl={changeControl}
-            onDismissRequest={dismissControlRequest}
-            onRemoveMember={removeMember}
-            onRemoveGuests={removeGuests}
-          />
-        )}
-      </div>
-
-      {/* Present dialog */}
-      <Dialog open={presentOpen} onOpenChange={setPresentOpen}>
-        <DialogContent className="max-h-[70vh] overflow-y-auto">
-          <DialogHeader>
-            <DialogTitle>{t("collab.presentTitle")}</DialogTitle>
-          </DialogHeader>
-          <Input
-            aria-label={t("collab.searchHosts")}
-            placeholder={t("collab.searchHosts")}
-            value={hostSearch}
-            onChange={(event) => setHostSearch(event.target.value)}
-          />
-          <div className="flex flex-col gap-1">
-            {presentLoading && (
-              <div className="flex justify-center py-4">
-                <Loader2 className="size-4 animate-spin text-muted-foreground" />
-              </div>
-            )}
-            {!presentLoading && filteredHosts.length === 0 && (
-              <CenteredNote text={t("collab.noHostsFound")} />
-            )}
-            {filteredHosts.map((host) => {
-              const protocols = hostProtocols(
-                host as unknown as PluginHostRecord,
-              ).filter(isSharedProtocol);
-              if (protocols.length === 0) return null;
-              return (
-                <div
-                  key={host.id}
-                  className="flex items-center gap-2 px-2 py-1.5 border border-border"
-                >
-                  <span className="flex-1 text-xs truncate">{host.name}</span>
-                  {protocols.map((protocol) => (
-                    <Button
-                      key={protocol}
-                      size="sm"
-                      variant="outline"
-                      className="h-8 text-xs uppercase"
-                      onClick={() => choosePresent(host, protocol)}
-                    >
-                      {protocol}
-                    </Button>
-                  ))}
-                </div>
-              );
-            })}
-          </div>
-        </DialogContent>
-      </Dialog>
-
-      {/* Invite dialog */}
-      <Dialog open={inviteOpen} onOpenChange={setInviteOpen}>
-        <DialogContent className="max-h-[70vh] overflow-y-auto">
-          <DialogHeader>
-            <DialogTitle>{t("collab.inviteTitle")}</DialogTitle>
-          </DialogHeader>
-          <Input
-            aria-label={t("collab.searchUsers")}
-            placeholder={t("collab.searchUsers")}
-            value={inviteSearch}
-            onChange={(event) => setInviteSearch(event.target.value)}
-          />
-          <div className="flex flex-col gap-1">
-            {roles.length > 0 && (
-              <span className="text-[9px] font-semibold uppercase tracking-widest text-muted-foreground">
-                {t("collab.roles")}
-              </span>
-            )}
-            {roles.map((role) => (
-              <label
-                key={role.id}
-                className="flex items-center gap-2 px-2 py-1.5 text-xs border border-border cursor-pointer"
-              >
-                <input
-                  type="checkbox"
-                  checked={roleSelection.has(role.id)}
-                  onChange={(e) => {
-                    setRoleSelection((prev) => {
-                      const next = new Set(prev);
-                      if (e.target.checked) next.add(role.id);
-                      else next.delete(role.id);
-                      return next;
-                    });
-                  }}
-                />
-                {role.displayName || role.name}
-              </label>
-            ))}
-            <span className="text-[9px] font-semibold uppercase tracking-widest text-muted-foreground">
-              {t("collab.users")}
-            </span>
-            {invitableUsers.map((user) => (
-              <label
-                key={user.id}
-                className="flex items-center gap-2 px-2 py-1.5 text-xs border border-border cursor-pointer"
-              >
-                <input
-                  type="checkbox"
-                  checked={inviteSelection.has(user.id)}
-                  onChange={(e) => {
-                    setInviteSelection((prev) => {
-                      const next = new Set(prev);
-                      if (e.target.checked) next.add(user.id);
-                      else next.delete(user.id);
-                      return next;
-                    });
-                  }}
-                />
-                {user.username}
-              </label>
-            ))}
-          </div>
-          <DialogFooter>
-            <Button variant="outline" onClick={() => setInviteOpen(false)}>
-              {t("common.cancel")}
-            </Button>
-            <Button
-              onClick={() => void handleInvite()}
-              disabled={inviteSelection.size === 0 && roleSelection.size === 0}
-            >
-              {t("collab.invite")}
-            </Button>
-          </DialogFooter>
-        </DialogContent>
-      </Dialog>
-
-      <AlertDialog open={endOpen} onOpenChange={setEndOpen}>
-        <AlertDialogContent>
-          <AlertDialogHeader>
-            <AlertDialogTitle>{t("collab.endConfirmTitle")}</AlertDialogTitle>
-            <AlertDialogDescription>
-              {t(
-                detail?.room.persistent
-                  ? "collab.endPersistentDescription"
-                  : "collab.endDescription",
-                { name: detail?.room.name },
-              )}
-            </AlertDialogDescription>
-          </AlertDialogHeader>
-          <AlertDialogFooter>
-            <AlertDialogCancel>{t("common.cancel")}</AlertDialogCancel>
-            <AlertDialogAction
-              className="bg-destructive text-destructive-foreground hover:bg-destructive/90"
-              onClick={() => void handleEnd()}
-            >
-              {t("collab.endRoom")}
-            </AlertDialogAction>
-          </AlertDialogFooter>
-        </AlertDialogContent>
-      </AlertDialog>
-
-      <AlertDialog open={deleteOpen} onOpenChange={setDeleteOpen}>
-        <AlertDialogContent>
-          <AlertDialogHeader>
-            <AlertDialogTitle>
-              {t("collab.deleteConfirmTitle")}
-            </AlertDialogTitle>
-            <AlertDialogDescription>
-              {t("collab.deleteDescription", { name: detail?.room.name })}
-            </AlertDialogDescription>
-          </AlertDialogHeader>
-          <AlertDialogFooter>
-            <AlertDialogCancel disabled={deleting}>
-              {t("common.cancel")}
-            </AlertDialogCancel>
-            <AlertDialogAction
-              className="bg-destructive text-destructive-foreground hover:bg-destructive/90"
-              disabled={deleting}
-              onClick={() => void handleDelete()}
-            >
-              {t("collab.deleteRoom")}
-            </AlertDialogAction>
-          </AlertDialogFooter>
-        </AlertDialogContent>
-      </AlertDialog>
-
-      <AlertDialog
-        open={Boolean(takeoverChoice)}
-        onOpenChange={(open) => !open && setTakeoverChoice(null)}
-      >
-        <AlertDialogContent>
-          <AlertDialogHeader>
-            <AlertDialogTitle>
-              {t("collab.takeOverConfirmTitle")}
-            </AlertDialogTitle>
-            <AlertDialogDescription>
-              {t("collab.takeOverDescription", { name: presenterName })}
-            </AlertDialogDescription>
-          </AlertDialogHeader>
-          <AlertDialogFooter>
-            <AlertDialogCancel>{t("common.cancel")}</AlertDialogCancel>
-            <AlertDialogAction
-              onClick={() => {
-                const choice = takeoverChoice;
-                setTakeoverChoice(null);
-                if (choice) void startPresent(choice.host, choice.protocol);
-              }}
-            >
-              {t("collab.takeOver")}
-            </AlertDialogAction>
-          </AlertDialogFooter>
-        </AlertDialogContent>
-      </AlertDialog>
-
-      <AlertDialog
-        open={Boolean(guestLinkAction)}
-        onOpenChange={(open) => !open && setGuestLinkAction(null)}
-      >
-        <AlertDialogContent>
-          <AlertDialogHeader>
-            <AlertDialogTitle>
-              {t(
-                guestLinkAction === "rotate"
-                  ? "collab.rotateLinkConfirmTitle"
-                  : "collab.disableLinkConfirmTitle",
-              )}
-            </AlertDialogTitle>
-            <AlertDialogDescription>
-              {t(
-                guestLinkAction === "rotate"
-                  ? "collab.rotateLinkDescription"
-                  : "collab.disableLinkDescription",
-              )}
-            </AlertDialogDescription>
-          </AlertDialogHeader>
-          <AlertDialogFooter>
-            <AlertDialogCancel>{t("common.cancel")}</AlertDialogCancel>
-            <AlertDialogAction
-              onClick={() => {
-                const enabled = guestLinkAction === "rotate";
-                setGuestLinkAction(null);
-                void handleGuestLink(enabled);
-              }}
-            >
-              {t(
-                guestLinkAction === "rotate"
-                  ? "collab.rotateLink"
-                  : "collab.disableLink",
-              )}
-            </AlertDialogAction>
-          </AlertDialogFooter>
-        </AlertDialogContent>
-      </AlertDialog>
-    </div>
-  );
-}
-
-function CenteredNote({ text }: { text: string }) {
-  return (
-    <div className="flex h-full items-center justify-center">
-      <p className="text-sm text-muted-foreground">{text}</p>
-    </div>
-  );
-}
diff --git a/plugins/session-sharing/src/frontend/ParticipantsOverlay.tsx b/plugins/session-sharing/src/frontend/ParticipantsOverlay.tsx
deleted file mode 100644
index 751b46237..000000000
--- a/plugins/session-sharing/src/frontend/ParticipantsOverlay.tsx
+++ /dev/null
@@ -1,41 +0,0 @@
-import { useEffect, useState } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import {
-  ParticipantsBadge,
-  type SessionParticipantInfo,
-} from "./SharedSessionView";
-
-interface ParticipantsOverlayProps {
-  subscribe: (
-    listener: (message: { type: string; [key: string]: unknown }) => void,
-  ) => () => void;
-}
-
-export function ParticipantsOverlay({ subscribe }: ParticipantsOverlayProps) {
-  const { t } = useTranslation();
-  const [participants, setParticipants] = useState<SessionParticipantInfo[]>(
-    [],
-  );
-
-  useEffect(
-    () =>
-      subscribe((message) => {
-        if (
-          message.type === "participants" &&
-          Array.isArray(message.participants)
-        ) {
-          setParticipants(message.participants as SessionParticipantInfo[]);
-        } else if (message.type === "session_closed") {
-          setParticipants([]);
-        }
-      }),
-    [subscribe],
-  );
-
-  return (
-    <ParticipantsBadge
-      participants={participants}
-      ownerLabel={t("sessionSharing.guestView.ownerLabel")}
-    />
-  );
-}
diff --git a/plugins/session-sharing/src/frontend/ShareSessionModal.tsx b/plugins/session-sharing/src/frontend/ShareSessionModal.tsx
deleted file mode 100644
index 08d204b67..000000000
--- a/plugins/session-sharing/src/frontend/ShareSessionModal.tsx
+++ /dev/null
@@ -1,450 +0,0 @@
-import { useEffect, useMemo, useState } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Check, Copy, Link2, Search, Shield, User, Users } from "lucide-react";
-import { toast } from "sonner";
-import { Button } from "@termix/plugin-sdk/ui";
-import { Input } from "@termix/plugin-sdk/ui";
-import {
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogHeader,
-  DialogTitle,
-} from "@termix/plugin-sdk/ui";
-import {
-  DropdownMenu,
-  DropdownMenuContent,
-  DropdownMenuItem,
-  DropdownMenuTrigger,
-} from "@termix/plugin-sdk/ui";
-import {
-  createSessionShare,
-  getActiveSessionShares,
-  revokeSessionShare,
-  type SessionShareProtocol,
-  type SessionSharePermissionLevel,
-  type SessionShareRecord,
-  getDirectory,
-  type SessionOrigin,
-} from "./api";
-import { guestViewUrl } from "./meeting-backend";
-
-const EXPIRY_PRESETS = [
-  { key: "oneHour", hours: 1 },
-  { key: "oneDay", hours: 24 },
-  { key: "sevenDays", hours: 24 * 7 },
-  { key: "thirtyDays", hours: 24 * 30 },
-  { key: "custom", hours: undefined },
-] as const;
-
-type ExpiryPresetKey = (typeof EXPIRY_PRESETS)[number]["key"];
-
-export function ShareSessionModal({
-  open,
-  onClose,
-  hostId,
-  sessionId,
-  protocol,
-  tabInstanceId,
-  origin,
-  resolvePublicUrl,
-}: {
-  open: boolean;
-  onClose: () => void;
-  hostId: number;
-  sessionId: string | null;
-  protocol: SessionShareProtocol;
-  tabInstanceId?: string;
-  origin?: SessionOrigin;
-  resolvePublicUrl?: (origin?: SessionOrigin) => Promise<string | null>;
-}) {
-  const { t } = useTranslation();
-  const [mode, setMode] = useState<"link" | "user">("link");
-  const [permissionLevel, setPermissionLevel] =
-    useState<SessionSharePermissionLevel>("read-only");
-  const [expiryPreset, setExpiryPreset] = useState<ExpiryPresetKey>("oneDay");
-  const [customHours, setCustomHours] = useState("");
-  const [search, setSearch] = useState("");
-  const [users, setUsers] = useState<{ id: string; username: string }[]>([]);
-  const [selectedUserId, setSelectedUserId] = useState<string | null>(null);
-  const [submitting, setSubmitting] = useState(false);
-  const [createdLink, setCreatedLink] = useState<string | null>(null);
-  const [shares, setShares] = useState<SessionShareRecord[]>([]);
-  const [sharesLoaded, setSharesLoaded] = useState(false);
-
-  useEffect(() => {
-    if (!open) return;
-    setMode("link");
-    setPermissionLevel("read-only");
-    setExpiryPreset("oneDay");
-    setCustomHours("");
-    setSearch("");
-    setSelectedUserId(null);
-    setCreatedLink(null);
-    setSharesLoaded(false);
-    setShares([]);
-  }, [open, sessionId]);
-
-  useEffect(() => {
-    if (!open || sharesLoaded) return;
-    setSharesLoaded(true);
-    Promise.all([
-      getDirectory(origin).catch(() => ({ users: [] })),
-      getActiveSessionShares(hostId, origin).catch(() => ({ shares: [] })),
-    ]).then(([usersRes, sharesRes]) => {
-      setUsers(
-        (usersRes.users ?? []).map((u) => ({
-          id: String(u.id),
-          username: u.username,
-        })),
-      );
-      setShares(sharesRes.shares ?? []);
-    });
-  }, [open, hostId, origin, sharesLoaded]);
-
-  const filteredUsers = useMemo(() => {
-    const q = search.trim().toLowerCase();
-    return q
-      ? users.filter((u) => u.username.toLowerCase().includes(q))
-      : users;
-  }, [users, search]);
-
-  const expiryHours = (() => {
-    if (expiryPreset === "custom") {
-      const hours = Number(customHours);
-      return Number.isFinite(hours) && hours > 0 ? hours : undefined;
-    }
-    return EXPIRY_PRESETS.find((p) => p.key === expiryPreset)?.hours;
-  })();
-
-  async function refreshShares() {
-    try {
-      const res = await getActiveSessionShares(hostId, origin);
-      setShares(res.shares ?? []);
-    } catch {
-      // silently ignore
-    }
-  }
-
-  async function handleCreate() {
-    if (!sessionId) return;
-    if (mode === "user" && !selectedUserId) return;
-    if (expiryPreset === "custom" && !expiryHours) return;
-
-    setSubmitting(true);
-    try {
-      const base =
-        mode === "link"
-          ? resolvePublicUrl
-            ? await resolvePublicUrl(origin)
-            : window.location.href
-          : null;
-      if (mode === "link" && !guestViewUrl(base, "shared", "check")) {
-        toast.error(t("sessionSharing.linkNeedsServer"));
-        return;
-      }
-      const result = await createSessionShare(
-        {
-          hostId,
-          sessionId,
-          tabInstanceId,
-          protocol,
-          shareType: mode,
-          targetUserId:
-            mode === "user" ? (selectedUserId ?? undefined) : undefined,
-          permissionLevel,
-          expiryHours,
-        },
-        origin,
-      );
-
-      if (mode === "link" && result.linkToken) {
-        setCreatedLink(guestViewUrl(base, "shared", result.linkToken));
-        toast.success(t("sessionSharing.linkCreated"));
-      } else {
-        toast.success(t("sessionSharing.shareCreated"));
-        setSelectedUserId(null);
-      }
-      await refreshShares();
-    } catch (error) {
-      const status = (error as { status?: number })?.status;
-      if (mode === "user" && status === 403) {
-        toast.error(t("sessionSharing.userLacksHostAccess"));
-      } else {
-        toast.error(t("sessionSharing.shareFailed"));
-      }
-    } finally {
-      setSubmitting(false);
-    }
-  }
-
-  async function handleCopyLink() {
-    if (!createdLink) return;
-    try {
-      await navigator.clipboard.writeText(createdLink);
-      toast.success(t("sessionSharing.linkCopied"));
-    } catch {
-      // clipboard API unavailable, ignore
-    }
-  }
-
-  async function handleRevoke(shareId: string) {
-    try {
-      await revokeSessionShare(shareId, origin);
-      setShares((prev) => prev.filter((s) => s.id !== shareId));
-      toast.success(t("sessionSharing.revoked"));
-    } catch {
-      toast.error(t("sessionSharing.revokeFailed"));
-    }
-  }
-
-  return (
-    <Dialog open={open} onOpenChange={(next) => !next && onClose()}>
-      <DialogContent className="sm:max-w-md">
-        <DialogHeader>
-          <DialogTitle>{t("sessionSharing.modalTitle")}</DialogTitle>
-          <DialogDescription>
-            {mode === "link"
-              ? t("sessionSharing.linkModeDescription")
-              : t("sessionSharing.userModeDescription")}
-          </DialogDescription>
-        </DialogHeader>
-
-        <div className="flex flex-col gap-3">
-          <div className="flex gap-1.5">
-            {(["link", "user"] as const).map((m) => (
-              <button
-                key={m}
-                onClick={() => {
-                  setMode(m);
-                  setCreatedLink(null);
-                }}
-                className={`flex-1 flex items-center justify-center gap-1 px-2 py-1.5 text-[10px] font-bold uppercase tracking-widest border transition-colors ${mode === m ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand" : "border-border text-muted-foreground hover:text-foreground"}`}
-              >
-                {m === "link" ? (
-                  <Link2 className="size-3 shrink-0" />
-                ) : (
-                  <User className="size-3 shrink-0" />
-                )}
-                {m === "link"
-                  ? t("sessionSharing.modeTab.link")
-                  : t("sessionSharing.modeTab.user")}
-              </button>
-            ))}
-          </div>
-
-          {mode === "user" && (
-            <>
-              <div className="relative">
-                <Search className="absolute left-2.5 top-1/2 -translate-y-1/2 size-3.5 text-muted-foreground/50" />
-                <Input
-                  placeholder={t("sessionSharing.searchUsersPlaceholder")}
-                  value={search}
-                  onChange={(e) => setSearch(e.target.value)}
-                  className="pl-8"
-                />
-              </div>
-              <div className="flex flex-col border border-border h-28 overflow-y-auto">
-                {filteredUsers.length === 0 ? (
-                  <div className="px-3 py-4 text-xs text-muted-foreground/50 text-center">
-                    {t("sessionSharing.noUsersFound")}
-                  </div>
-                ) : (
-                  filteredUsers.map((user) => {
-                    const isSelected = selectedUserId === user.id;
-                    return (
-                      <button
-                        key={user.id}
-                        onClick={() => setSelectedUserId(user.id)}
-                        className={`flex items-center gap-2 px-2.5 py-1.5 text-xs text-left border-b border-border/50 last:border-0 transition-colors shrink-0 ${isSelected ? "bg-accent-brand/10 text-accent-brand" : "hover:bg-muted/40"}`}
-                      >
-                        <div
-                          className={`size-3.5 border flex items-center justify-center shrink-0 transition-colors ${isSelected ? "border-accent-brand bg-accent-brand" : "border-border bg-background"}`}
-                        >
-                          {isSelected && (
-                            <Check className="size-2.5 text-background" />
-                          )}
-                        </div>
-                        <User className="size-3 text-muted-foreground shrink-0" />
-                        <span className="truncate">{user.username}</span>
-                      </button>
-                    );
-                  })
-                )}
-              </div>
-            </>
-          )}
-
-          <div className="flex items-end gap-2">
-            <div className="flex flex-col gap-1 flex-1 min-w-0">
-              <span className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
-                {t("sessionSharing.permissionLevel.label")}
-              </span>
-              <select
-                value={permissionLevel}
-                onChange={(e) =>
-                  setPermissionLevel(
-                    e.target.value as SessionSharePermissionLevel,
-                  )
-                }
-                className="h-8 w-full px-2.5 text-xs border border-border bg-background hover:bg-muted/40 transition-colors"
-              >
-                <option value="read-only">
-                  {t("sessionSharing.permissionLevel.readOnly")}
-                </option>
-                <option value="read-write">
-                  {t("sessionSharing.permissionLevel.readWrite")}
-                </option>
-              </select>
-            </div>
-
-            <DropdownMenu>
-              <DropdownMenuTrigger asChild>
-                <button className="flex flex-col gap-1 shrink-0">
-                  <span className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground text-left">
-                    {t("sessionSharing.expiryLabel")}
-                  </span>
-                  <span className="h-8 flex items-center justify-center px-2.5 text-xs border border-border hover:bg-muted/40 transition-colors whitespace-nowrap">
-                    {t(`hosts.sharing.expiry.${expiryPreset}`)}
-                  </span>
-                </button>
-              </DropdownMenuTrigger>
-              <DropdownMenuContent align="end" className="text-xs">
-                {EXPIRY_PRESETS.map((preset) => (
-                  <DropdownMenuItem
-                    key={preset.key}
-                    onClick={() => setExpiryPreset(preset.key)}
-                  >
-                    {expiryPreset === preset.key ? (
-                      <Check className="size-3 mr-1.5" />
-                    ) : (
-                      <span className="size-3 mr-1.5" />
-                    )}
-                    {t(`hosts.sharing.expiry.${preset.key}`)}
-                  </DropdownMenuItem>
-                ))}
-              </DropdownMenuContent>
-            </DropdownMenu>
-          </div>
-
-          {expiryPreset === "custom" && (
-            <Input
-              type="number"
-              autoFocus
-              placeholder={t("sessionSharing.customHoursPlaceholder")}
-              value={customHours}
-              onChange={(e) => setCustomHours(e.target.value)}
-              className="[appearance:textfield] [&::-webkit-outer-spin-button]:appearance-none [&::-webkit-inner-spin-button]:appearance-none"
-            />
-          )}
-
-          <p className="text-[11px] text-muted-foreground leading-snug">
-            {permissionLevel === "read-only"
-              ? t("sessionSharing.permissionLevel.readOnlyDescription")
-              : t("sessionSharing.permissionLevel.readWriteDescription")}
-          </p>
-
-          <Button
-            variant="outline"
-            className="h-8 shrink-0 border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-            disabled={
-              !sessionId ||
-              submitting ||
-              (mode === "user" && !selectedUserId) ||
-              (expiryPreset === "custom" && !expiryHours)
-            }
-            onClick={handleCreate}
-          >
-            {mode === "link"
-              ? t("sessionSharing.createLinkButton")
-              : t("sessionSharing.createShareButton")}
-          </Button>
-
-          {createdLink && (
-            <div className="flex items-center gap-1.5">
-              <Input readOnly value={createdLink} className="text-xs" />
-              <Button
-                variant="outline"
-                size="icon-sm"
-                onClick={handleCopyLink}
-                title={t("sessionSharing.copyLink")}
-              >
-                <Copy className="size-3.5" />
-              </Button>
-            </div>
-          )}
-
-          <div className="flex flex-col gap-0 border-t border-border pt-2">
-            <div className="flex items-center gap-1.5 pb-2 text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
-              <Users className="size-3.5" />
-              {t("sessionSharing.activeShares")}
-              {shares.length > 0 && (
-                <span className="text-muted-foreground/40">
-                  ({shares.length})
-                </span>
-              )}
-            </div>
-            <div className="flex flex-col max-h-40 overflow-y-auto">
-              {shares.length === 0 && (
-                <div className="px-1 py-4 text-xs text-muted-foreground/50 text-center">
-                  {t("sessionSharing.noActiveShares")}
-                </div>
-              )}
-              {shares.map((share) => {
-                const targetUser = users.find(
-                  (u) => u.id === share.targetUserId,
-                );
-                return (
-                  <div
-                    key={share.id}
-                    className="flex items-center justify-between gap-2 py-2 border-b border-border/60 last:border-0 text-xs"
-                  >
-                    <div className="flex items-center gap-1.5 min-w-0">
-                      {share.shareType === "link" ? (
-                        <Link2 className="size-3 text-muted-foreground shrink-0" />
-                      ) : (
-                        <Shield className="size-3 text-muted-foreground shrink-0" />
-                      )}
-                      <div className="flex flex-col min-w-0">
-                        <span className="truncate font-semibold">
-                          {share.shareType === "link"
-                            ? t("sessionSharing.linkShareBadge")
-                            : t("sessionSharing.userShareBadge", {
-                                username:
-                                  targetUser?.username ??
-                                  share.targetUserId ??
-                                  "?",
-                              })}
-                        </span>
-                        <span className="flex flex-wrap gap-x-2.5 text-[10px] text-muted-foreground/60">
-                          <span>
-                            {share.permissionLevel === "read-write"
-                              ? t("sessionSharing.permissionLevel.readWrite")
-                              : t("sessionSharing.permissionLevel.readOnly")}
-                          </span>
-                          <span>
-                            {t("sessionSharing.expiresAt", {
-                              date: new Date(share.expiresAt).toLocaleString(),
-                            })}
-                          </span>
-                        </span>
-                      </div>
-                    </div>
-                    <Button
-                      variant="ghost"
-                      size="sm"
-                      className="h-6 text-[10px] px-2 text-destructive hover:bg-destructive/10 shrink-0"
-                      onClick={() => handleRevoke(share.id)}
-                    >
-                      {t("sessionSharing.revoke")}
-                    </Button>
-                  </div>
-                );
-              })}
-            </div>
-          </div>
-        </div>
-      </DialogContent>
-    </Dialog>
-  );
-}
diff --git a/plugins/session-sharing/src/frontend/SharedSessionView.tsx b/plugins/session-sharing/src/frontend/SharedSessionView.tsx
deleted file mode 100644
index 329492583..000000000
--- a/plugins/session-sharing/src/frontend/SharedSessionView.tsx
+++ /dev/null
@@ -1,374 +0,0 @@
-import React, { useEffect, useRef, useState } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { useXTerm } from "react-xtermjs";
-import { FitAddon } from "@xterm/addon-fit";
-import { AlertCircle, Eye, Users } from "lucide-react";
-import {
-  resolveShareLink,
-  type ResolvedShareLink,
-  type ShareLinkErrorKind,
-} from "./api";
-import { Loader, RemoteDisplay, wsUrlForPath } from "./shared";
-
-const PING_INTERVAL_MS = 30000;
-
-interface TerminalWsMessage {
-  type: string;
-  data?: string;
-  [key: string]: unknown;
-}
-
-// A shared session link always resolves against the desktop app's embedded
-// local backend: joining a session on someone else's remote server is not
-// supported from the desktop app.
-async function resolveTerminalWsUrl(wsPath: string): Promise<string> {
-  const url = await wsUrlForPath(wsPath);
-  if (!url) throw new Error("No terminal endpoint is available");
-  return url;
-}
-
-export interface SessionParticipantInfo {
-  isOwner: boolean;
-  permissionLevel: "read-write" | "read-only";
-  label: string | null;
-}
-
-export function ParticipantsBadge({
-  participants,
-  ownerLabel,
-}: {
-  participants: SessionParticipantInfo[];
-  ownerLabel: string;
-}) {
-  if (participants.length < 2) return null;
-  const names = participants
-    .map((participant) =>
-      participant.isOwner ? ownerLabel : (participant.label ?? "?"),
-    )
-    .join(", ");
-  return (
-    <div
-      className="absolute top-3 left-3 z-20 flex items-center gap-1.5 rounded-md px-2.5 py-1 text-xs font-medium"
-      style={{
-        backgroundColor: "var(--bg-elevated, rgba(0,0,0,0.6))",
-        color: "var(--foreground)",
-        border: "1px solid var(--border-base)",
-      }}
-      title={names}
-    >
-      <Users className="size-3.5" />
-      {participants.length}
-    </div>
-  );
-}
-
-function ReadOnlyBadge({ label }: { label: string }) {
-  return (
-    <div
-      className="absolute top-3 right-3 z-20 flex items-center gap-1.5 rounded-md px-2.5 py-1 text-xs font-medium"
-      style={{
-        backgroundColor: "var(--bg-elevated, rgba(0,0,0,0.6))",
-        color: "var(--foreground)",
-        border: "1px solid var(--border-base)",
-      }}
-    >
-      <Eye className="size-3.5" />
-      {label}
-    </div>
-  );
-}
-
-function CenteredMessage({
-  icon,
-  message,
-}: {
-  icon: React.ReactNode;
-  message: string;
-}) {
-  return (
-    <div
-      className="flex flex-col items-center justify-center h-full gap-4 w-full"
-      style={{ backgroundColor: "var(--bg-base)" }}
-    >
-      {icon}
-      <p
-        className="text-sm font-semibold text-center max-w-xs"
-        style={{ color: "var(--foreground)" }}
-      >
-        {message}
-      </p>
-    </div>
-  );
-}
-
-export function GuestTerminalView({
-  share,
-  wsPath,
-  hideBadges = false,
-  onParticipantsChange,
-}: {
-  share: Pick<ResolvedShareLink, "permissionLevel">;
-  /** The socket path the backend handed out, query string included. */
-  wsPath: string;
-  /** Suppress the built-in overlay badges when the host page renders its own. */
-  hideBadges?: boolean;
-  onParticipantsChange?: (participants: SessionParticipantInfo[]) => void;
-}) {
-  const { t } = useTranslation();
-  const { instance: terminal, ref: xtermRef } = useXTerm();
-  const [ended, setEnded] = useState<string | null>(null);
-  const [participants, setParticipants] = useState<SessionParticipantInfo[]>(
-    [],
-  );
-  const wsRef = useRef<WebSocket | null>(null);
-  const pingIntervalRef = useRef<ReturnType<typeof setInterval> | null>(null);
-  const onParticipantsChangeRef = useRef(onParticipantsChange);
-  onParticipantsChangeRef.current = onParticipantsChange;
-
-  useEffect(() => {
-    if (!terminal || !xtermRef.current) return;
-
-    terminal.options.theme = { background: "#0c0d0b" };
-
-    const fitAddon = new FitAddon();
-    terminal.loadAddon(fitAddon);
-    terminal.open(xtermRef.current);
-    fitAddon.fit();
-
-    let sharedSize: { cols: number; rows: number } | null = null;
-    const resizeObserver = new ResizeObserver(() => {
-      if (sharedSize) terminal.resize(sharedSize.cols, sharedSize.rows);
-      else fitAddon.fit();
-    });
-    resizeObserver.observe(xtermRef.current);
-
-    let cancelled = false;
-    let ws: WebSocket | null = null;
-
-    resolveTerminalWsUrl(wsPath).then((url) => {
-      if (cancelled) return;
-      ws = new WebSocket(url);
-      wsRef.current = ws;
-
-      ws.onopen = () => {
-        pingIntervalRef.current = setInterval(() => {
-          if (ws && ws.readyState === WebSocket.OPEN) {
-            ws.send(JSON.stringify({ type: "ping" }));
-          }
-        }, PING_INTERVAL_MS);
-      };
-
-      ws.onmessage = (event) => {
-        let msg: TerminalWsMessage;
-        try {
-          msg = JSON.parse(event.data);
-        } catch {
-          return;
-        }
-
-        switch (msg.type) {
-          case "resized": {
-            const { cols, rows } = msg;
-            if (
-              typeof cols === "number" &&
-              typeof rows === "number" &&
-              Number.isInteger(cols) &&
-              Number.isInteger(rows) &&
-              cols > 0 &&
-              rows > 0
-            ) {
-              sharedSize = { cols, rows };
-              terminal.resize(cols, rows);
-            }
-            break;
-          }
-          case "data":
-            if (typeof msg.data === "string") terminal.write(msg.data);
-            break;
-          case "participants":
-            if (Array.isArray(msg.participants)) {
-              const next = msg.participants as SessionParticipantInfo[];
-              setParticipants(next);
-              onParticipantsChangeRef.current?.(next);
-            }
-            break;
-          case "sessionExpired":
-          case "sessionTerminatedByOwner":
-          case "session_ended":
-            setEnded(t("sessionSharing.guestView.sessionEnded"));
-            break;
-          default:
-            break;
-        }
-      };
-
-      ws.onclose = () => {
-        setEnded((prev) => prev ?? t("sessionSharing.guestView.sessionEnded"));
-      };
-
-      if (share.permissionLevel === "read-write") {
-        terminal.onData((data) => {
-          if (ws && ws.readyState === WebSocket.OPEN) {
-            ws.send(JSON.stringify({ type: "input", data }));
-          }
-        });
-      }
-    });
-
-    return () => {
-      cancelled = true;
-      resizeObserver.disconnect();
-      if (pingIntervalRef.current) clearInterval(pingIntervalRef.current);
-      ws?.close();
-      wsRef.current = null;
-    };
-    // Deliberately runs once terminal mounts - share/token/permission are stable for the view's lifetime.
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [terminal, wsPath]);
-
-  return (
-    <div className="relative w-full h-full">
-      {!hideBadges && (
-        <>
-          <ParticipantsBadge
-            participants={participants}
-            ownerLabel={t("sessionSharing.guestView.ownerLabel")}
-          />
-          {share.permissionLevel === "read-only" && (
-            <ReadOnlyBadge
-              label={t("sessionSharing.guestView.readOnlyBadge")}
-            />
-          )}
-        </>
-      )}
-      {ended && (
-        <div
-          className="absolute inset-0 z-30 flex items-center justify-center"
-          style={{ backgroundColor: "var(--bg-base)" }}
-        >
-          <CenteredMessage
-            icon={
-              <AlertCircle
-                className="size-10"
-                style={{ color: "var(--foreground)" }}
-              />
-            }
-            message={ended}
-          />
-        </div>
-      )}
-      <div ref={xtermRef} className="w-full h-full" />
-    </div>
-  );
-}
-
-function GuestGuacamoleView({ share }: { share: ResolvedShareLink }) {
-  const { t } = useTranslation();
-  const [connectionError, setConnectionError] = useState<string | null>(null);
-
-  if (!share.connectParams?.token) {
-    return (
-      <CenteredMessage
-        icon={
-          <AlertCircle
-            className="size-10"
-            style={{ color: "var(--foreground)" }}
-          />
-        }
-        message={t("sessionSharing.guestView.linkInvalid")}
-      />
-    );
-  }
-
-  return (
-    <div className="relative w-full h-full">
-      {share.permissionLevel === "read-only" && (
-        <ReadOnlyBadge label={t("sessionSharing.guestView.readOnlyBadge")} />
-      )}
-      {connectionError && (
-        <div
-          className="absolute inset-0 z-30 flex items-center justify-center"
-          style={{ backgroundColor: "var(--bg-base)" }}
-        >
-          <CenteredMessage
-            icon={
-              <AlertCircle
-                className="size-10"
-                style={{ color: "var(--foreground)" }}
-              />
-            }
-            message={connectionError}
-          />
-        </div>
-      )}
-      <RemoteDisplay
-        token={share.connectParams.token}
-        protocol={share.protocol}
-        isVisible={true}
-        onError={(err) => setConnectionError(err)}
-      />
-    </div>
-  );
-}
-
-export default function SharedSessionView() {
-  const { t } = useTranslation();
-  const [share, setShare] = useState<ResolvedShareLink | null>(null);
-  const [linkToken, setLinkToken] = useState<string | null>(null);
-  const [error, setError] = useState<string | null>(null);
-  const [loading, setLoading] = useState(true);
-
-  useEffect(() => {
-    const params = new URLSearchParams(window.location.search);
-    const token = params.get("token");
-    if (!token) {
-      setError(t("sessionSharing.guestView.linkInvalid"));
-      setLoading(false);
-      return;
-    }
-    setLinkToken(token);
-
-    resolveShareLink(token)
-      .then((resolved) => setShare(resolved))
-      .catch((err) => {
-        const kind = (err as { kind?: ShareLinkErrorKind })?.kind;
-        if (kind === "rate-limited") {
-          setError(t("sessionSharing.guestView.rateLimited"));
-        } else {
-          setError(t("sessionSharing.guestView.linkInvalid"));
-        }
-      })
-      .finally(() => setLoading(false));
-  }, [t]);
-
-  return (
-    <div
-      className="fixed inset-0 flex flex-col"
-      style={{ backgroundColor: "var(--bg-base)" }}
-    >
-      <div className="relative flex-1 min-h-0">
-        {loading && <Loader message={t("sessionSharing.guestView.loading")} />}
-        {!loading && error && (
-          <CenteredMessage
-            icon={
-              <AlertCircle
-                className="size-10"
-                style={{ color: "var(--foreground)" }}
-              />
-            }
-            message={error}
-          />
-        )}
-        {!loading &&
-          !error &&
-          share &&
-          linkToken &&
-          (share.protocol === "ssh" ? (
-            <GuestTerminalView share={share} wsPath={share.wsPath} />
-          ) : (
-            <GuestGuacamoleView share={share} />
-          ))}
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/session-sharing/src/frontend/SharedWithMeSection.tsx b/plugins/session-sharing/src/frontend/SharedWithMeSection.tsx
deleted file mode 100644
index d04b63d8f..000000000
--- a/plugins/session-sharing/src/frontend/SharedWithMeSection.tsx
+++ /dev/null
@@ -1,160 +0,0 @@
-import { useCallback, useEffect, useState } from "react";
-import { SquareTerminal } from "lucide-react";
-import {
-  invokeAction,
-  useHosts,
-  usePermission,
-  useTranslation,
-  type PluginHostRecord,
-} from "@termix/plugin-sdk/frontend";
-import { Badge, Button } from "@termix/plugin-sdk/ui";
-import { getSharedWithMe } from "./api";
-
-const POLL_MS = 15_000;
-
-interface SharedSession {
-  sessionId: string;
-  hostId: number;
-  hostName: string;
-  isConnected: boolean;
-  sharedByUsername: string | null;
-  permissionLevel: string | null;
-  shareId: string | null;
-}
-
-function isSharedSession(value: unknown): value is SharedSession {
-  const row = value as Partial<SharedSession> | null;
-  return (
-    !!row &&
-    typeof row.sessionId === "string" &&
-    typeof row.hostName === "string"
-  );
-}
-
-/**
- * The active connections list's "Shared with me" section: live sessions other
- * users shared with this one, each joinable in a terminal tab.
- */
-export function SharedWithMeSection({
-  search = "",
-  openTabData = [],
-}: {
-  search?: string;
-  openTabData?: Array<Record<string, unknown>>;
-}) {
-  const { t } = useTranslation();
-  const { hosts } = useHosts();
-  const allowed = usePermission("use");
-  const [sessions, setSessions] = useState<SharedSession[]>([]);
-
-  const load = useCallback(() => {
-    if (!allowed) return;
-    getSharedWithMe()
-      .then((rows) => setSessions(rows.filter(isSharedSession)))
-      .catch(() => setSessions([]));
-  }, [allowed]);
-
-  useEffect(() => {
-    load();
-    const timer = window.setInterval(load, POLL_MS);
-    return () => window.clearInterval(timer);
-  }, [load]);
-
-  const joined = new Set(
-    openTabData
-      .map((data) => data.joinSharedSessionId)
-      .filter((id): id is string => typeof id === "string"),
-  );
-  const q = search.trim().toLowerCase();
-  const visible = sessions.filter(
-    (session) =>
-      !joined.has(session.sessionId) &&
-      (!q ||
-        session.hostName.toLowerCase().includes(q) ||
-        (session.sharedByUsername ?? "").toLowerCase().includes(q)),
-  );
-  if (!allowed || visible.length === 0) return null;
-
-  const join = (session: SharedSession) => {
-    if (!session.shareId) return;
-    const host: PluginHostRecord = hosts.find(
-      (candidate) => String(candidate.id) === String(session.hostId),
-    ) ?? {
-      id: String(session.hostId),
-      name: session.hostName,
-      ip: "",
-      port: 0,
-      username: "",
-    };
-    void invokeAction("terminal.open", host, {
-      joinSharedSessionId: session.sessionId,
-      joinShareId: session.shareId,
-      label: t("connections.sharedSessionLabel", {
-        hostName: session.hostName,
-      }),
-    });
-  };
-
-  return (
-    <div className="mt-2 flex flex-col">
-      <div className="flex items-center justify-between px-3 py-1.5">
-        <span className="text-[10px] font-semibold uppercase tracking-wider text-muted-foreground/50">
-          {t("connections.sectionSharedWithMe")}
-        </span>
-        <span className="rounded bg-muted/60 px-1.5 py-0.5 text-[10px] font-semibold text-muted-foreground/40">
-          {visible.length}
-        </span>
-      </div>
-      {visible.map((session) => {
-        const readWrite = session.permissionLevel === "read-write";
-        return (
-          <div
-            key={session.sessionId}
-            className="group flex items-center gap-2.5 border-b border-border/40 px-3 py-2.5 last:border-b-0"
-          >
-            <div className="flex size-7 shrink-0 items-center justify-center rounded bg-muted/60 text-muted-foreground">
-              <SquareTerminal className="size-3.5" />
-            </div>
-            <div className="flex min-w-0 flex-1 flex-col gap-0.5">
-              <div className="flex min-w-0 items-center gap-1.5">
-                <span
-                  className={`size-1.5 shrink-0 rounded-full ${
-                    session.isConnected
-                      ? "bg-green-500"
-                      : "bg-muted-foreground/30"
-                  }`}
-                />
-                <span className="flex-1 truncate text-xs font-semibold text-foreground">
-                  {session.hostName}
-                </span>
-                <Badge
-                  variant="outline"
-                  className={`h-4 shrink-0 border-border/60 px-1 py-0 font-mono text-[9px] ${
-                    readWrite ? "text-accent-brand" : "text-muted-foreground/60"
-                  }`}
-                >
-                  {readWrite
-                    ? t("sessionSharing.permissionLevel.readWrite")
-                    : t("sessionSharing.permissionLevel.readOnly")}
-                </Badge>
-              </div>
-              <span className="truncate pl-3 text-[10px] text-muted-foreground/60">
-                {t("connections.sharedBy", {
-                  username: session.sharedByUsername ?? "?",
-                })}
-              </span>
-            </div>
-            <Button
-              variant="outline"
-              size="sm"
-              className="h-6 shrink-0 px-2 text-[10px] opacity-0 transition-opacity group-hover:opacity-100"
-              onClick={() => join(session)}
-            >
-              {t("connections.join")}
-            </Button>
-          </div>
-        );
-      })}
-    </div>
-  );
-}
diff --git a/plugins/session-sharing/src/frontend/api.ts b/plugins/session-sharing/src/frontend/api.ts
deleted file mode 100644
index e2bedba95..000000000
--- a/plugins/session-sharing/src/frontend/api.ts
+++ /dev/null
@@ -1,286 +0,0 @@
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-
-/**
- * The plugin's own /plugin-api/session-sharing client, bound in activate.
- * Guest pages use it too: the two guest routes are public.
- */
-let client: PluginApiClient | null = null;
-let clientFor: ((origin?: unknown) => PluginApiClient) | null = null;
-
-export function bindApi(
-  api: PluginApiClient | null,
-  apiFor?: (origin?: unknown) => PluginApiClient,
-): void {
-  client = api;
-  clientFor = api ? (apiFor ?? null) : null;
-}
-
-/** The session lives on the backend its tab connected through. */
-function api(origin?: SessionOrigin): PluginApiClient {
-  if (!client) throw new Error("Session sharing is not running");
-  return origin && clientFor ? clientFor(origin) : client;
-}
-
-export type SessionOrigin = "local" | "remote";
-
-interface HttpError {
-  response?: { status?: number; data?: { error?: string } };
-}
-
-function statusOf(error: unknown): number | undefined {
-  return (error as HttpError)?.response?.status;
-}
-
-/** The server's own message, like core's handleApiError. */
-function apiError(error: unknown, fallback: string): Error {
-  const message = (error as HttpError)?.response?.data?.error;
-  return new Error(message || fallback);
-}
-
-async function call<T>(
-  request: () => Promise<{ data: T }>,
-  fallback: string,
-): Promise<T> {
-  try {
-    return (await request()).data;
-  } catch (error) {
-    throw apiError(error, fallback);
-  }
-}
-
-// ---------------------------------------------------------------------------
-// Guest share links
-// ---------------------------------------------------------------------------
-
-export interface ResolvedShareLink {
-  protocol: "ssh" | "rdp" | "vnc" | "telnet";
-  permissionLevel: "read-only" | "read-write";
-  wsPath: string;
-  connectParams?: { token: string };
-}
-
-export type ShareLinkErrorKind = "not-found" | "rate-limited" | "unknown";
-
-export class ShareLinkError extends Error {
-  constructor(
-    message: string,
-    public readonly kind: ShareLinkErrorKind,
-  ) {
-    super(message);
-    this.name = "ShareLinkError";
-  }
-}
-
-export async function resolveShareLink(
-  linkToken: string,
-): Promise<ResolvedShareLink> {
-  try {
-    const response = await api().get<ResolvedShareLink>(
-      `/resolve/${encodeURIComponent(linkToken)}`,
-    );
-    return response.data;
-  } catch (error) {
-    const status = statusOf(error);
-    if (status === 404) {
-      throw new ShareLinkError(
-        "Share link is invalid, expired, or revoked",
-        "not-found",
-      );
-    }
-    if (status === 429) {
-      throw new ShareLinkError(
-        "Too many attempts, please try again shortly",
-        "rate-limited",
-      );
-    }
-    throw new ShareLinkError("Failed to resolve share link", "unknown");
-  }
-}
-
-// ---------------------------------------------------------------------------
-// Owner-side shares
-// ---------------------------------------------------------------------------
-
-export type SessionShareProtocol = "ssh" | "rdp" | "vnc" | "telnet";
-export type SessionShareType = "link" | "user";
-export type SessionSharePermissionLevel = "read-only" | "read-write";
-
-export interface SessionShareRecord {
-  id: string;
-  hostId: number;
-  ownerUserId: string;
-  protocol: SessionShareProtocol;
-  sessionId: string;
-  tabInstanceId: string | null;
-  shareType: SessionShareType;
-  targetUserId: string | null;
-  linkToken: string | null;
-  permissionLevel: SessionSharePermissionLevel;
-  createdAt: string;
-  expiresAt: string;
-  revokedAt: string | null;
-  lastJoinedAt: string | null;
-  joinCount: number;
-}
-
-export interface CreateSessionShareRequest {
-  hostId: number;
-  sessionId: string;
-  tabInstanceId?: string;
-  protocol: SessionShareProtocol;
-  shareType: SessionShareType;
-  targetUserId?: string;
-  permissionLevel: SessionSharePermissionLevel;
-  expiryHours?: number;
-}
-
-export interface CreateSessionShareResponse {
-  shareId: string;
-  linkToken: string | null;
-  expiresAt: string;
-}
-
-export function createSessionShare(
-  request: CreateSessionShareRequest,
-  origin?: SessionOrigin,
-): Promise<CreateSessionShareResponse> {
-  return call(
-    () => api(origin).post<CreateSessionShareResponse>("/create", request),
-    "Failed to create session share",
-  );
-}
-
-export function getActiveSessionShares(
-  hostId: number,
-  origin?: SessionOrigin,
-): Promise<{ shares: SessionShareRecord[] }> {
-  return call(
-    () =>
-      api(origin).get<{ shares: SessionShareRecord[] }>(
-        `/host/${hostId}/active`,
-      ),
-    "Failed to fetch active session shares",
-  );
-}
-
-export function revokeSessionShare(
-  shareId: string,
-  origin?: SessionOrigin,
-): Promise<unknown> {
-  return call(
-    () => api(origin).delete(`/${encodeURIComponent(shareId)}`),
-    "Failed to revoke session share",
-  );
-}
-
-export interface DirectoryUser {
-  id: string;
-  username: string;
-}
-
-export interface DirectoryRole {
-  id: number;
-  name: string;
-  displayName: string | null;
-}
-
-/** Users and roles to share with or invite. */
-export function getDirectory(origin?: SessionOrigin): Promise<{
-  users: DirectoryUser[];
-  roles: DirectoryRole[];
-}> {
-  return call(
-    () =>
-      api(origin).get<{ users: DirectoryUser[]; roles: DirectoryRole[] }>(
-        "/directory",
-      ),
-    "Failed to list users and roles",
-  );
-}
-
-/** Live sessions other users shared with the caller, as active-session rows. */
-export function getSharedWithMe(): Promise<unknown[]> {
-  return call(
-    () => api().get<unknown[]>("/shared-with-me"),
-    "Failed to list shared sessions",
-  );
-}
-
-// ---------------------------------------------------------------------------
-// Collab rooms
-// ---------------------------------------------------------------------------
-
-export interface CollabRoom {
-  id: string;
-  name: string;
-  ownerUserId: string;
-  persistent: boolean;
-  presenterUserId: string | null;
-  stageProtocol: string | null;
-  stageHostId: number | null;
-  stageShareId: string | null;
-  guestLinkEnabled: boolean;
-  createdAt: string;
-  endedAt: string | null;
-}
-
-export interface CollabRoomMember {
-  userId: string;
-  username: string;
-  roomRole: string;
-  createdAt: string;
-}
-
-export interface CollabOnlineUser {
-  userId: string;
-  username: string;
-}
-
-export interface CollabStage {
-  presenterUserId: string | null;
-  protocol: "ssh" | "rdp" | "vnc" | "telnet" | null;
-  hostId: number | null;
-  shareId: string | null;
-  sessionId?: string;
-  controllerUserId?: string | null;
-  connectParams?: { token: string };
-}
-
-export interface CollabControlRequest {
-  userId: string;
-  username: string;
-  requestedAt: string;
-}
-
-export interface CollabRoomDetail {
-  room: CollabRoom;
-  me: string;
-  isHost: boolean;
-  members: CollabRoomMember[];
-  online: CollabOnlineUser[];
-  stage: CollabStage;
-  /** Anonymous guests watching the stage through the guest link. */
-  guests?: { label: string | null }[];
-  controllerUserId: string | null;
-  controlRequests: CollabControlRequest[];
-  /** Where live room events are served, as /plugin-ws/<id>/<path>. */
-  eventsWsPath: string;
-}
-
-export interface CollabGuestStage {
-  protocol: "ssh" | "rdp" | "vnc" | "telnet";
-  shareId: string;
-  wsPath?: string;
-  connectParams?: { token: string };
-}
-
-/** Anonymous: guests poll this to follow the presenter. Throws on 404/429. */
-export async function resolveCollabGuestStage(
-  token: string,
-): Promise<{ roomName: string; stage: CollabGuestStage | null }> {
-  const response = await api().get<{
-    roomName: string;
-    stage: CollabGuestStage | null;
-  }>(`/guest/${encodeURIComponent(token)}`);
-  return response.data;
-}
diff --git a/plugins/session-sharing/src/frontend/index.tsx b/plugins/session-sharing/src/frontend/index.tsx
deleted file mode 100644
index ec0b6488a..000000000
--- a/plugins/session-sharing/src/frontend/index.tsx
+++ /dev/null
@@ -1,369 +0,0 @@
-// The terminal surfaces need xterm's own stylesheet.
-import "@xterm/xterm/css/xterm.css";
-import {
-  useEffect,
-  useRef,
-  useState,
-  type ReactNode,
-  type ComponentType,
-} from "react";
-import { Presentation, Share2 } from "lucide-react";
-import { toast } from "sonner";
-import {
-  useCurrentUser,
-  usePermission,
-  type PanelProps,
-  type StandaloneViewProps,
-  type TabProps,
-  type TermixApp,
-} from "@termix/plugin-sdk/frontend";
-import { bindApi } from "./api";
-import { SharedWithMeSection } from "./SharedWithMeSection";
-import CollabGuestView from "./CollabGuestView";
-import { CollabPanel } from "./CollabPanel";
-import { CollabRoomTab } from "./CollabRoomTab";
-import SharedSessionView from "./SharedSessionView";
-import { ParticipantsOverlay } from "./ParticipantsOverlay";
-import {
-  ShareDialogHost,
-  bindShareApp,
-  closeShareDialog,
-  openShareDialog,
-  type ShareTarget,
-} from "./share-dialog";
-import { REMOTE_DISPLAY_SLOT } from "./shared";
-
-import { connectMeetings, type MeetingBackend } from "./meeting-backend";
-
-let meetingApp: TermixApp;
-
-function MeetingScope({
-  children,
-  serverKey,
-  pin = false,
-}: {
-  children: (backend: MeetingBackend) => ReactNode;
-  serverKey?: string;
-  pin?: boolean;
-}) {
-  const [backend, setBackend] = useState<MeetingBackend | null>(null);
-  const [error, setError] = useState<string | null>(null);
-  const pinned = useRef(serverKey);
-  useEffect(() => {
-    let cancelled = false;
-    let sequence = 0;
-    const refresh = async () => {
-      const request = ++sequence;
-      try {
-        const next = await connectMeetings(meetingApp);
-        if (cancelled || request !== sequence) return;
-        if (
-          pin &&
-          pinned.current !== undefined &&
-          pinned.current !== next.key
-        ) {
-          setBackend(null);
-          setError(meetingApp.t("collab.serverChanged"));
-          return;
-        }
-        if (pin) pinned.current ??= next.key;
-        setError(null);
-        setBackend((previous) =>
-          previous?.key === next.key ? previous : next,
-        );
-      } catch (failure) {
-        if (!cancelled) {
-          setBackend(null);
-          setError(String(failure));
-        }
-      }
-    };
-    void refresh();
-    const dispose = meetingApp.desktop.onRemoteServerChange(() => {
-      void refresh();
-    });
-    return () => {
-      cancelled = true;
-      dispose();
-    };
-  }, [serverKey, pin]);
-  if (error)
-    return (
-      <p role="alert" className="p-3 text-sm">
-        {error}
-      </p>
-    );
-  return backend ? (
-    <div key={backend.key} className="contents">
-      {children(backend)}
-    </div>
-  ) : null;
-}
-
-const COLLAB = "collab";
-const SHARE_ACTION = "session-sharing.share";
-const SEEN_ROOMS_KEY = "termix:collab-rooms-seen";
-const INVITE_POLL_MS = 60_000;
-
-/** `?view=shared` and `?view=collab-guest`, the two anonymous guest links. */
-function GuestView({ view }: StandaloneViewProps) {
-  return view === "shared" ? <SharedSessionView /> : <CollabGuestView />;
-}
-
-function CollabRoomTabView({ tab, isVisible }: TabProps) {
-  const roomId = tab.data?.roomId;
-  const serverKey =
-    typeof tab.data?.meetingServerKey === "string"
-      ? tab.data.meetingServerKey
-      : undefined;
-  return (
-    <MeetingScope serverKey={serverKey} pin>
-      {(backend) => (
-        <CollabRoomTab
-          roomId={typeof roomId === "string" ? roomId : undefined}
-          isVisible={isVisible}
-          backend={backend}
-        />
-      )}
-    </MeetingScope>
-  );
-}
-
-function CollabPanelView({ shell }: PanelProps) {
-  return (
-    <MeetingScope>
-      {(backend) => (
-        <CollabPanel
-          backend={backend}
-          onOpenRoom={(room) =>
-            shell.openTab(null, COLLAB, {
-              label: room.name,
-              forceNewTab: true,
-              data: { roomId: room.id, meetingServerKey: backend.key },
-            })
-          }
-        />
-      )}
-    </MeetingScope>
-  );
-}
-
-/**
- * Rooms are discovered by polling, so a room this browser has never shown
- * gets one toast with an Open action. The first poll after login only
- * records what already exists.
- */
-function createInviteWatcher(app: TermixApp): ComponentType {
-  return function InviteWatcher() {
-    const user = useCurrentUser();
-    const allowed = usePermission("use");
-    const userId = user?.userId;
-
-    useEffect(() => {
-      if (!userId || !allowed) return;
-      let cancelled = false;
-      const check = async () => {
-        try {
-          const { rooms = [] } = await (
-            await connectMeetings(app)
-          ).api.listCollabRooms();
-          if (cancelled) return;
-          let seen: string[] = [];
-          try {
-            seen = JSON.parse(localStorage.getItem(SEEN_ROOMS_KEY) ?? "[]");
-          } catch {
-            seen = [];
-          }
-          const seenSet = new Set(seen);
-          const fresh = rooms.filter((room) => !seenSet.has(room.id));
-          if (fresh.length === 0) return;
-          localStorage.setItem(
-            SEEN_ROOMS_KEY,
-            JSON.stringify([...seenSet, ...fresh.map((room) => room.id)]),
-          );
-          if (seen.length === 0) return;
-          for (const room of fresh) {
-            if (room.ownerUserId === userId) continue;
-            toast(app.t("collab.invitedTo", { name: room.name }), {
-              action: {
-                label: app.t("collab.openRoom"),
-                onClick: () => app.tabs.openRailView(COLLAB),
-              },
-            });
-          }
-        } catch {
-          /* next poll */
-        }
-      };
-      void check();
-      const timer = setInterval(() => void check(), INVITE_POLL_MS);
-      return () => {
-        cancelled = true;
-        clearInterval(timer);
-      };
-    }, [userId, allowed]);
-
-    return null;
-  };
-}
-
-/** A terminal toolbar action is invoked with the terminal's slot API. */
-interface TerminalSlotApi {
-  getShareTarget?: () => ShareTarget | null;
-}
-
-/** A remote desktop toolbar action is invoked with the session it shows. */
-interface RemoteDesktopToolbarContext {
-  hostId: number;
-  sessionId: string | null;
-  protocol: "rdp" | "vnc" | "telnet";
-  tabInstanceId?: string;
-  origin?: "local" | "remote";
-}
-
-function isRemoteDesktopContext(
-  value: unknown,
-): value is RemoteDesktopToolbarContext {
-  return (
-    !!value &&
-    typeof value === "object" &&
-    "protocol" in value &&
-    "hostId" in value
-  );
-}
-
-export function activate(app: TermixApp): void {
-  meetingApp = app;
-  bindApi(app.api, app.apiFor);
-  bindShareApp(app);
-  app.onDispose(() => {
-    closeShareDialog();
-    bindApi(null);
-    bindShareApp(null);
-  });
-
-  // Rooms and share links draw remote desktop streams through this slot.
-  app.declareActionSlot({ id: REMOTE_DISPLAY_SLOT, accepts: ["component"] });
-
-  // Guest pages open the tab type's standalone view by ?view= name.
-  const guestViews = {
-    standalone: GuestView,
-    standaloneViews: ["shared", "collab-guest"],
-  };
-
-  if (app.guest) {
-    app.registerTab(COLLAB, () => null, { hostless: true, ...guestViews });
-    return;
-  }
-
-  app.registerRailItem({
-    id: COLLAB,
-    icon: Presentation,
-    titleKey: "nav.collab",
-    kind: "panel",
-    after: "connections",
-    separatorAfter: true,
-    permission: "use",
-  });
-  app.registerPanel(COLLAB, CollabPanelView);
-  app.registerTab(COLLAB, CollabRoomTabView, {
-    icon: Presentation,
-    titleKey: "nav.collab",
-    hostless: true,
-    multiInstance: true,
-    ...guestViews,
-  });
-
-  app.registerAction(
-    SHARE_ACTION,
-    (context: unknown) => {
-      let target: ShareTarget | null = null;
-      if (isRemoteDesktopContext(context)) {
-        target = context.sessionId
-          ? {
-              hostId: context.hostId,
-              sessionId: context.sessionId,
-              protocol: context.protocol,
-              tabInstanceId: context.tabInstanceId,
-              origin: context.origin,
-            }
-          : null;
-      } else {
-        target = (context as TerminalSlotApi)?.getShareTarget?.() ?? null;
-      }
-      if (target) openShareDialog(target);
-      else toast.error(app.t("sessionSharing.notReadyToShare"));
-    },
-    { permission: "use" },
-  );
-  for (const slot of ["terminal.toolbar", "remote-desktop.toolbar"]) {
-    app.registerSlotContribution(slot, {
-      actionId: SHARE_ACTION,
-      titleKey: "sessionSharing.shareButton",
-      icon: Share2,
-      kind: "button",
-    });
-  }
-
-  // The tab bar's right-click menu, for a terminal whose toolbar is hidden.
-  app.registerSlotContribution("tab.menu", {
-    actionId: SHARE_ACTION,
-    titleKey: "sessionSharing.shareButton",
-    icon: Share2,
-    kind: "button",
-    when: (context) => {
-      const handle = context.handle as
-        { getShareTarget?: () => unknown } | null | undefined;
-      return typeof handle?.getShareTarget === "function"
-        ? handle.getShareTarget() !== null
-        : false;
-    },
-  });
-
-  // A small share button on the tab itself, as in 2.8.
-  app.registerSlotContribution("tab.inline", {
-    actionId: SHARE_ACTION,
-    titleKey: "sessionSharing.shareButton",
-    icon: Share2,
-    kind: "button",
-    when: (context) =>
-      typeof (context.handle as { getShareTarget?: unknown } | null | undefined)
-        ?.getShareTarget === "function",
-  });
-
-  app.registerSlotContribution("terminal.overlay", {
-    actionId: "session-sharing.participants",
-    titleKey: "collab.members",
-    kind: "component",
-    component: ParticipantsOverlay as unknown as ComponentType<
-      Record<string, unknown>
-    >,
-  });
-
-  app.registerSlotContribution("shell.overlay", {
-    actionId: "session-sharing.shareDialog",
-    titleKey: "sessionSharing.shareButton",
-    kind: "component",
-    component: ShareDialogHost as ComponentType<Record<string, unknown>>,
-  });
-  app.registerSlotContribution("shell.overlay", {
-    actionId: "session-sharing.inviteWatcher",
-    titleKey: "nav.collab",
-    kind: "component",
-    component: createInviteWatcher(app) as ComponentType<
-      Record<string, unknown>
-    >,
-  });
-
-  // The "Shared with me" section of the active connections list.
-  app.registerSlotContribution("connections.sections", {
-    actionId: "session-sharing.sharedWithMe",
-    titleKey: "connections.sectionSharedWithMe",
-    kind: "component",
-    component: SharedWithMeSection as ComponentType<Record<string, unknown>>,
-  });
-}
-
-export function deactivate(): void {
-  closeShareDialog();
-}
diff --git a/plugins/session-sharing/src/frontend/meeting-api.ts b/plugins/session-sharing/src/frontend/meeting-api.ts
deleted file mode 100644
index 30602b73e..000000000
--- a/plugins/session-sharing/src/frontend/meeting-api.ts
+++ /dev/null
@@ -1,216 +0,0 @@
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import type {
-  CollabRoom,
-  CollabRoomDetail,
-  CollabStage,
-  CollabControlRequest,
-  DirectoryUser,
-  DirectoryRole,
-} from "./api";
-
-export function createMeetingApi(
-  client: PluginApiClient,
-  assertCurrent: () => Promise<void>,
-) {
-  const api = () => client;
-  async function call<T>(
-    request: () => Promise<{ data: T }>,
-    fallback: string,
-  ): Promise<T> {
-    await assertCurrent();
-    try {
-      return (await request()).data;
-    } catch (error) {
-      const response = error as { response?: { data?: { error?: string } } };
-      throw new Error(response.response?.data?.error || fallback);
-    }
-  }
-  const room = (roomId: string, suffix = "") =>
-    `/rooms/${encodeURIComponent(roomId)}${suffix}`;
-
-  function listCollabRooms(): Promise<{ rooms: CollabRoom[] }> {
-    return call(
-      () => api().get<{ rooms: CollabRoom[] }>("/rooms"),
-      "Failed to list rooms",
-    );
-  }
-
-  function createCollabRoom(
-    name: string,
-    persistent: boolean,
-  ): Promise<{ room: CollabRoom }> {
-    return call(
-      () => api().post<{ room: CollabRoom }>("/rooms", { name, persistent }),
-      "Failed to create room",
-    );
-  }
-
-  function getCollabRoom(roomId: string): Promise<CollabRoomDetail> {
-    return call(
-      () => api().get<CollabRoomDetail>(room(roomId)),
-      "Failed to get room",
-    );
-  }
-
-  async function inviteCollabMembers(
-    roomId: string,
-    targets: { userIds?: string[]; roleIds?: number[] },
-  ): Promise<void> {
-    await call(
-      () => api().post(room(roomId, "/members"), targets),
-      "Failed to invite members",
-    );
-  }
-
-  async function removeCollabMember(
-    roomId: string,
-    userId: string,
-  ): Promise<void> {
-    await call(
-      () =>
-        api().delete(room(roomId, `/members/${encodeURIComponent(userId)}`)),
-      "Failed to remove member",
-    );
-  }
-
-  function presentCollabStage(
-    roomId: string,
-    input: { protocol: string; sessionId: string; hostId: number },
-  ): Promise<{ stage: CollabStage }> {
-    return call(
-      () => api().post<{ stage: CollabStage }>(room(roomId, "/present"), input),
-      "Failed to start presenting",
-    );
-  }
-
-  async function stopCollabStage(roomId: string): Promise<void> {
-    await call(
-      () => api().post(room(roomId, "/stop")),
-      "Failed to stop presenting",
-    );
-  }
-
-  function getCollabStage(
-    roomId: string,
-  ): Promise<{ stage: CollabStage | null }> {
-    return call(
-      () => api().get<{ stage: CollabStage | null }>(room(roomId, "/stage")),
-      "Failed to resolve stage",
-    );
-  }
-
-  async function setCollabStageControl(
-    roomId: string,
-    userId: string | null,
-  ): Promise<void> {
-    await call(
-      () => api().post(room(roomId, "/control"), { userId }),
-      "Failed to change stage control",
-    );
-  }
-
-  function requestCollabStageControl(
-    roomId: string,
-  ): Promise<{ request: CollabControlRequest }> {
-    return call(
-      () =>
-        api().post<{ request: CollabControlRequest }>(
-          room(roomId, "/control/request"),
-        ),
-      "Failed to request control",
-    );
-  }
-
-  function listCollabControlRequests(
-    roomId: string,
-  ): Promise<{ requests: CollabControlRequest[] }> {
-    return call(
-      () =>
-        api().get<{ requests: CollabControlRequest[] }>(
-          room(roomId, "/control/requests"),
-        ),
-      "Failed to list control requests",
-    );
-  }
-
-  async function dismissCollabControlRequest(
-    roomId: string,
-    userId: string,
-  ): Promise<void> {
-    await call(
-      () =>
-        api().delete(
-          room(roomId, `/control/requests/${encodeURIComponent(userId)}`),
-        ),
-      "Failed to dismiss control request",
-    );
-  }
-
-  async function endCollabRoom(roomId: string): Promise<void> {
-    await call(() => api().post(room(roomId, "/end")), "Failed to end room");
-  }
-
-  async function deleteCollabRoom(roomId: string): Promise<void> {
-    await call(() => api().delete(room(roomId)), "Failed to delete room");
-  }
-
-  function setCollabGuestLink(
-    roomId: string,
-    enabled: boolean,
-  ): Promise<{ guestLinkToken: string | null }> {
-    return call(
-      () =>
-        api().post<{ guestLinkToken: string | null }>(
-          room(roomId, "/guest-link"),
-          { enabled },
-        ),
-      "Failed to update guest link",
-    );
-  }
-
-  async function removeCollabGuests(roomId: string): Promise<void> {
-    await call(
-      () => api().post(room(roomId, "/guests/remove")),
-      "Failed to remove guests",
-    );
-  }
-
-  function getDirectory() {
-    return call(
-      () =>
-        client.get<{ users: DirectoryUser[]; roles: DirectoryRole[] }>(
-          "/directory",
-        ),
-      "Failed to list users and roles",
-    );
-  }
-  function resolveHost(syncId: string) {
-    return call(
-      () =>
-        client.get<{ id: number }>(
-          `/meeting-host/${encodeURIComponent(syncId)}`,
-        ),
-      "The host must be synced to the meeting server before presenting",
-    );
-  }
-  return {
-    listCollabRooms,
-    createCollabRoom,
-    getCollabRoom,
-    inviteCollabMembers,
-    removeCollabMember,
-    presentCollabStage,
-    stopCollabStage,
-    getCollabStage,
-    setCollabStageControl,
-    requestCollabStageControl,
-    listCollabControlRequests,
-    dismissCollabControlRequest,
-    endCollabRoom,
-    deleteCollabRoom,
-    setCollabGuestLink,
-    removeCollabGuests,
-    getDirectory,
-    resolveHost,
-  };
-}
diff --git a/plugins/session-sharing/src/frontend/meeting-backend.ts b/plugins/session-sharing/src/frontend/meeting-backend.ts
deleted file mode 100644
index 03c0c18de..000000000
--- a/plugins/session-sharing/src/frontend/meeting-backend.ts
+++ /dev/null
@@ -1,63 +0,0 @@
-import type { TermixApp } from "@termix/plugin-sdk/frontend";
-import { createMeetingApi } from "./meeting-api";
-
-export type MeetingBackend = Awaited<ReturnType<typeof connectMeetings>>;
-
-/** A room, its hosts and its sockets must all belong to the same backend. */
-export async function connectMeetings(app: TermixApp) {
-  const remoteUrl = app.desktop.available
-    ? await app.desktop.remoteServerUrl()
-    : null;
-  const key = remoteUrl?.replace(/\/+$/, "") || "local";
-  const origin = remoteUrl ? ("remote" as const) : ("local" as const);
-  const publicUrl =
-    remoteUrl || (!app.desktop.available ? window.location.href : null);
-  const assertCurrent = async () => {
-    const current = app.desktop.available
-      ? await app.desktop.remoteServerUrl()
-      : null;
-    if ((current?.replace(/\/+$/, "") || "local") !== key) {
-      throw new Error(app.t("collab.serverChanged"));
-    }
-  };
-  return {
-    key,
-    origin,
-    publicUrl,
-    assertCurrent,
-    api: createMeetingApi(app.apiFor(origin), assertCurrent),
-  };
-}
-
-export function meetingGuestUrl(
-  publicUrl: string | null,
-  token: string,
-): string | null {
-  return guestViewUrl(publicUrl, "collab-guest", token);
-}
-
-/** A guest link on a server others can open, never a file:// desktop page. */
-export function guestViewUrl(
-  publicUrl: string | null,
-  view: string,
-  token: string,
-): string | null {
-  if (!publicUrl) return null;
-  const url = new URL(publicUrl);
-  if (url.protocol !== "http:" && url.protocol !== "https:") return null;
-  url.search = "";
-  url.hash = "";
-  url.searchParams.set("view", view);
-  url.searchParams.set("token", token);
-  return url.toString();
-}
-
-/** Where guests reach a session that runs on the given backend. */
-export async function sessionPublicUrl(
-  app: TermixApp,
-  origin: "local" | "remote" | undefined,
-): Promise<string | null> {
-  if (!app.desktop.available) return window.location.href;
-  if (origin !== "remote") return null;
-  return (await app.desktop.remoteServerUrl()) || null;
-}
diff --git a/plugins/session-sharing/src/frontend/share-dialog.tsx b/plugins/session-sharing/src/frontend/share-dialog.tsx
deleted file mode 100644
index 487a8ea0b..000000000
--- a/plugins/session-sharing/src/frontend/share-dialog.tsx
+++ /dev/null
@@ -1,69 +0,0 @@
-import { useSyncExternalStore } from "react";
-import type { TermixApp } from "@termix/plugin-sdk/frontend";
-import { ShareSessionModal } from "./ShareSessionModal";
-import type { SessionShareProtocol } from "./api";
-import { sessionPublicUrl } from "./meeting-backend";
-
-let shareApp: TermixApp | null = null;
-
-export function bindShareApp(app: TermixApp | null): void {
-  shareApp = app;
-}
-
-function resolveShareBase(
-  origin: "local" | "remote" | undefined,
-): Promise<string | null> {
-  if (!shareApp) return Promise.resolve(window.location.href);
-  return sessionPublicUrl(shareApp, origin);
-}
-
-/** What the share dialog needs to share one live session. */
-export interface ShareTarget {
-  hostId: number;
-  sessionId: string;
-  protocol: SessionShareProtocol;
-  tabInstanceId?: string;
-  /** The backend the session runs on; a desktop can be on either. */
-  origin?: "local" | "remote";
-}
-
-let current: ShareTarget | null = null;
-const listeners = new Set<() => void>();
-
-function emit(): void {
-  for (const listener of listeners) listener();
-}
-
-/** Opens the share dialog, which the shell overlay slot keeps mounted. */
-export function openShareDialog(target: ShareTarget): void {
-  current = target;
-  emit();
-}
-
-export function closeShareDialog(): void {
-  current = null;
-  emit();
-}
-
-function subscribe(listener: () => void): () => void {
-  listeners.add(listener);
-  return () => listeners.delete(listener);
-}
-
-/** Rendered once in "shell.overlay"; shows the dialog when a toolbar asks. */
-export function ShareDialogHost() {
-  const target = useSyncExternalStore(subscribe, () => current);
-  if (!target) return null;
-  return (
-    <ShareSessionModal
-      open
-      onClose={closeShareDialog}
-      hostId={target.hostId}
-      sessionId={target.sessionId}
-      protocol={target.protocol}
-      tabInstanceId={target.tabInstanceId}
-      origin={target.origin}
-      resolvePublicUrl={resolveShareBase}
-    />
-  );
-}
diff --git a/plugins/session-sharing/src/frontend/shared.tsx b/plugins/session-sharing/src/frontend/shared.tsx
deleted file mode 100644
index 75572a399..000000000
--- a/plugins/session-sharing/src/frontend/shared.tsx
+++ /dev/null
@@ -1,102 +0,0 @@
-import { useMemo } from "react";
-import {
-  invokeAction,
-  useSlotContributions,
-  useTranslation,
-} from "@termix/plugin-sdk/frontend";
-import { pluginWsUrl } from "@termix/plugin-sdk/ui";
-
-/**
- * A remote desktop stream drawn by whichever plugin provides one. Rooms and
- * share links show RDP, VNC and Telnet without knowing how they are drawn:
- * the provider contributes a component to this slot and answers the token
- * action below.
- */
-export const REMOTE_DISPLAY_SLOT = "session.remoteDisplay";
-export const REMOTE_SESSION_TOKEN_ACTION = "session.remoteDisplay.token";
-
-export interface RemoteDisplayProps {
-  token: string;
-  connectionOrigin?: "local" | "remote";
-  protocol: string;
-  isVisible: boolean;
-  onConnect?: () => void;
-  onError?: (error: string) => void;
-}
-
-export function RemoteDisplay(props: RemoteDisplayProps) {
-  const { t } = useTranslation();
-  const contributions = useSlotContributions(REMOTE_DISPLAY_SLOT);
-  const provider = useMemo(
-    () =>
-      contributions.find(
-        (contribution) =>
-          contribution.kind === "component" && contribution.component,
-      ),
-    [contributions],
-  );
-  if (!provider?.component) {
-    return (
-      <div className="flex h-full w-full items-center justify-center text-sm text-muted-foreground">
-        {t("sessionSharing.remoteDisplayUnavailable")}
-      </div>
-    );
-  }
-  const Display = provider.component;
-  return <Display {...(props as unknown as Record<string, unknown>)} />;
-}
-
-export interface RemoteSessionToken {
-  token: string;
-  connectionId: string;
-}
-
-/** Mints a session token for presenting a host, through the provider. */
-export async function createRemoteSessionToken(
-  hostId: number,
-  origin: unknown,
-  protocol: string,
-): Promise<RemoteSessionToken | null> {
-  return ((await invokeAction(
-    REMOTE_SESSION_TOKEN_ACTION,
-    hostId,
-    origin,
-    protocol,
-  )) ?? null) as RemoteSessionToken | null;
-}
-
-/** A socket URL for a /plugin-ws/<id>/<path>?query path the server handed out. */
-export async function wsTargetForPath(
-  wsPath: string,
-  origin: "local" | "remote" = "local",
-) {
-  const [pathname, query] = wsPath.split("?", 2);
-  const match = /^\/plugin-ws\/([^/]+)(\/.*)$/.exec(pathname);
-  if (!match) return null;
-  const target = await pluginWsUrl(match[1], match[2], { origin });
-  if (!target) return null;
-  return {
-    ...target,
-    url: query
-      ? `${target.url}${target.url.includes("?") ? "&" : "?"}${query}`
-      : target.url,
-  };
-}
-
-export async function wsUrlForPath(wsPath: string): Promise<string | null> {
-  return (await wsTargetForPath(wsPath))?.url ?? null;
-}
-
-export function getErrorMessage(error: unknown): string {
-  if (error instanceof Error) return error.message;
-  return typeof error === "string" ? error : String(error);
-}
-
-export function Loader({ message }: { message: string }) {
-  return (
-    <div className="absolute inset-0 z-10 flex flex-col items-center justify-center gap-3 bg-background">
-      <div className="size-5 animate-spin rounded-full border-2 border-primary border-t-transparent" />
-      <p className="text-sm text-muted-foreground">{message}</p>
-    </div>
-  );
-}
diff --git a/plugins/session-sharing/tests/backend/activate.test.ts b/plugins/session-sharing/tests/backend/activate.test.ts
deleted file mode 100644
index eaa2d4155..000000000
--- a/plugins/session-sharing/tests/backend/activate.test.ts
+++ /dev/null
@@ -1,69 +0,0 @@
-import express from "express";
-import { afterEach, describe, expect, it } from "vitest";
-import { PluginCapabilityError } from "@termix/plugin-sdk/backend";
-import {
-  createMockCtx,
-  createTestDb,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import { activate } from "../../src/backend/index.js";
-import { manifest, pluginDir, startServer, type TestServer } from "./helpers";
-
-let db: TestDb | null = null;
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  db?.close();
-  db = null;
-  await server?.close();
-  server = null;
-});
-
-describe("session-sharing activate", () => {
-  it("provides sessions.sharing and the guest resolver", async () => {
-    server = await startServer();
-    expect(server.mock.services.get("sessions.sharing")).toBeDefined();
-    expect(typeof server.guests.resolve).toBe("function");
-    expect(server.mock.httpRouters).toEqual([
-      { public: ["/resolve/:linkToken", "/guest/:token"] },
-    ]);
-  });
-
-  it.each(["db:own", "network:serve"])(
-    "fails closed without %s",
-    async (capability) => {
-      db = await createTestDb(pluginDir);
-      const mock = createMockCtx({
-        pluginId: manifest.id,
-        manifest,
-        capabilities: manifest.capabilities.filter((c) => c !== capability),
-        db: db.database,
-        router: () => express.Router(),
-      });
-      await expect(activate(mock.ctx)).rejects.toBeInstanceOf(
-        PluginCapabilityError,
-      );
-      for (const dispose of [...mock.disposals].reverse()) await dispose();
-    },
-  );
-
-  it("cannot check a share target's host access without hosts:read", async () => {
-    db = await createTestDb(pluginDir);
-    db.sqlite.exec(
-      "INSERT INTO users (id, username) VALUES ('alice', 'alice'), ('bob', 'bob'); INSERT INTO ssh_data (id) VALUES (1)",
-    );
-    const mock = createMockCtx({
-      pluginId: manifest.id,
-      manifest,
-      capabilities: manifest.capabilities.filter((c) => c !== "hosts:read"),
-      db: db.database,
-      router: () => express.Router(),
-      actor: "bob",
-    });
-    await activate(mock.ctx);
-    await expect(
-      mock.ctx.asUser("bob", () => mock.ctx.hosts.checkAccess(1, "connect")),
-    ).rejects.toBeInstanceOf(PluginCapabilityError);
-    for (const dispose of [...mock.disposals].reverse()) await dispose();
-  });
-});
diff --git a/plugins/session-sharing/tests/backend/helpers.ts b/plugins/session-sharing/tests/backend/helpers.ts
deleted file mode 100644
index 6c39e33cc..000000000
--- a/plugins/session-sharing/tests/backend/helpers.ts
+++ /dev/null
@@ -1,196 +0,0 @@
-import http from "node:http";
-import { sqliteTable, integer, text } from "drizzle-orm/sqlite-core";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-import type { LiveSessionInfo } from "../../src/backend/live.js";
-import type {
-  SessionGuestsV1,
-  SessionSharingV1,
-} from "../../src/backend/services.js";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-export const manifest = manifestJson as unknown as PluginManifest;
-
-/** A stand-in for the terminal's "ssh" sessions.live provider. */
-export function createFakeLive() {
-  const sessions = new Map<string, LiveSessionInfo>();
-  const calls: Array<[string, ...unknown[]]> = [];
-  return {
-    sessions,
-    calls,
-    addSession(id: string, userId: string, hostId = 1) {
-      sessions.set(id, {
-        id,
-        userId,
-        hostId,
-        hostName: `host-${hostId}`,
-        isConnected: true,
-        createdAt: 1,
-        tabInstanceId: `tab-${id}`,
-      });
-    },
-    provider: {
-      getSession: (id: string) => sessions.get(id) ?? null,
-      ownerEndSession: (...args: unknown[]) => {
-        calls.push(["ownerEndSession", ...args]);
-      },
-      disconnectParticipants: (...args: unknown[]) => {
-        calls.push(["disconnectParticipants", ...args]);
-        return 0;
-      },
-      setRoomShareControl: (...args: unknown[]) => {
-        calls.push(["setRoomShareControl", ...args]);
-      },
-      listGuests: () => [{ label: "Guest 1" }],
-    },
-  };
-}
-
-export interface TestServer {
-  db: TestDb;
-  mock: MockPluginContext;
-  live: ReturnType<typeof createFakeLive>;
-  sharing: SessionSharingV1;
-  guests: SessionGuestsV1;
-  request: (
-    method: string,
-    path: string,
-    options?: { user?: string | null; body?: unknown },
-    // Route bodies vary per test; asserting on them is the point.
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any }>;
-  close: () => Promise<void>;
-}
-
-/**
- * The plugin activated against a real in-memory database, its router mounted
- * the way core mounts it: JSON parsed and the acting user set from the
- * request (none for a guest), everything else left to the plugin.
- */
-export async function startServer(
-  options: {
-    permissions?: string[];
-    users?: string[];
-    admins?: string[];
-    hostIds?: number[];
-    /** Hosts ctx.hosts.checkAccess grants. Defaults to every host. */
-    accessibleHostIds?: number[];
-    settings?: Record<string, unknown>;
-  } = {},
-): Promise<TestServer> {
-  const db = await createTestDb(pluginDir, {
-    before: (sqlite) => {
-      sqlite.exec("ALTER TABLE ssh_data ADD COLUMN sync_id TEXT");
-    },
-  });
-  const refs = await db.database.refs();
-  db.database.refs = (async () => ({
-    ...(refs as object),
-    hosts: sqliteTable("ssh_data", {
-      id: integer("id").primaryKey(),
-      syncId: text("sync_id"),
-    }),
-  })) as typeof db.database.refs;
-  for (const user of options.users ?? ["alice", "bob", "carol"]) {
-    db.sqlite
-      .prepare("INSERT INTO users (id, username, is_admin) VALUES (?, ?, ?)")
-      .run(user, user, options.admins?.includes(user) ? 1 : 0);
-  }
-  const hostIds = options.hostIds ?? [1, 2];
-  for (const id of hostIds) {
-    db.sqlite.prepare("INSERT INTO ssh_data (id) VALUES (?)").run(id);
-  }
-
-  const live = createFakeLive();
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    permissions: options.permissions ?? ["session-sharing.use"],
-    settings: options.settings,
-    hosts: (options.accessibleHostIds ?? hostIds).map((id) => ({
-      id,
-      userId: "alice",
-      name: `host-${id}`,
-      ip: "10.0.0.1",
-      port: 22,
-      username: "root",
-      tags: [],
-      folder: null,
-      authType: "password",
-    })) as never,
-    services: { "sessions.live#ssh": live.provider },
-  });
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") || undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    db,
-    mock,
-    live,
-    sharing: mock.services.get("sessions.sharing") as SessionSharingV1,
-    guests: mock.ctx.registry.consume<SessionGuestsV1>(
-      "session-sharing.guests",
-    )!,
-    async request(method, path, { user = "alice", body: given } = {}) {
-      const body = method === "GET" ? undefined : given;
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        headers: {
-          ...(user ? { "x-test-user": user } : {}),
-          ...(body !== undefined ? { "content-type": "application/json" } : {}),
-        },
-        body: body !== undefined ? JSON.stringify(body) : undefined,
-      });
-      const text = await response.text();
-      return { status: response.status, body: text ? JSON.parse(text) : null };
-    },
-    async close() {
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-      for (const dispose of [...mock.disposals].reverse()) {
-        await Promise.resolve(dispose()).catch(() => {});
-      }
-      db.close();
-    },
-  };
-}
-
-/** Runs a service call the way a consumer's handle does: as that user. */
-export function asUser<T>(
-  server: TestServer,
-  userId: string,
-  fn: () => Promise<T>,
-): Promise<T> {
-  return server.mock.ctx.asUser(userId, fn);
-}
-
-export function expireShare(server: TestServer, shareId: string): void {
-  server.db.sqlite
-    .prepare("UPDATE p_session_sharing_shares SET expires_at = ? WHERE id = ?")
-    .run(new Date(Date.now() - 60_000).toISOString(), shareId);
-}
diff --git a/plugins/session-sharing/tests/backend/migrations.test.ts b/plugins/session-sharing/tests/backend/migrations.test.ts
deleted file mode 100644
index b69bc1696..000000000
--- a/plugins/session-sharing/tests/backend/migrations.test.ts
+++ /dev/null
@@ -1,222 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { createTestDb, type TestDb } from "@termix/plugin-sdk/testing";
-import { pluginDir } from "./helpers";
-
-// The four tables as core's SQLite bootstrap created them before 2.9.0,
-// including the guest token column and its index added later.
-const LEGACY_DDL = `
-  CREATE TABLE session_shares (
-    id TEXT PRIMARY KEY,
-    host_id INTEGER NOT NULL,
-    owner_user_id TEXT NOT NULL,
-    protocol TEXT NOT NULL,
-    session_id TEXT NOT NULL,
-    tab_instance_id TEXT,
-    share_type TEXT NOT NULL,
-    target_user_id TEXT,
-    link_token TEXT UNIQUE,
-    permission_level TEXT NOT NULL DEFAULT 'read-only',
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    expires_at TEXT NOT NULL,
-    revoked_at TEXT,
-    last_joined_at TEXT,
-    join_count INTEGER NOT NULL DEFAULT 0,
-    FOREIGN KEY (host_id) REFERENCES ssh_data (id) ON DELETE CASCADE,
-    FOREIGN KEY (owner_user_id) REFERENCES users (id) ON DELETE CASCADE,
-    FOREIGN KEY (target_user_id) REFERENCES users (id) ON DELETE CASCADE
-  );
-  CREATE TABLE session_share_participants (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    share_id TEXT NOT NULL,
-    user_id TEXT,
-    guest_label TEXT,
-    joined_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    left_at TEXT,
-    FOREIGN KEY (share_id) REFERENCES session_shares (id) ON DELETE CASCADE,
-    FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
-  );
-  CREATE TABLE collab_rooms (
-    id TEXT PRIMARY KEY,
-    name TEXT NOT NULL,
-    owner_user_id TEXT NOT NULL,
-    persistent INTEGER NOT NULL DEFAULT 0,
-    presenter_user_id TEXT,
-    stage_protocol TEXT,
-    stage_host_id INTEGER,
-    stage_share_id TEXT,
-    guest_link_token TEXT,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    ended_at TEXT,
-    FOREIGN KEY (owner_user_id) REFERENCES users (id) ON DELETE CASCADE,
-    FOREIGN KEY (presenter_user_id) REFERENCES users (id) ON DELETE SET NULL,
-    FOREIGN KEY (stage_host_id) REFERENCES ssh_data (id) ON DELETE SET NULL,
-    FOREIGN KEY (stage_share_id) REFERENCES session_shares (id) ON DELETE SET NULL
-  );
-  CREATE TABLE collab_room_members (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    room_id TEXT NOT NULL,
-    user_id TEXT NOT NULL,
-    room_role TEXT NOT NULL DEFAULT 'member',
-    added_by TEXT,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    UNIQUE (room_id, user_id),
-    FOREIGN KEY (room_id) REFERENCES collab_rooms (id) ON DELETE CASCADE,
-    FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE,
-    FOREIGN KEY (added_by) REFERENCES users (id) ON DELETE SET NULL
-  );
-  CREATE INDEX idx_session_shares_session_id ON session_shares (session_id);
-  CREATE INDEX idx_session_shares_host_id ON session_shares (host_id);
-  CREATE UNIQUE INDEX idx_collab_rooms_guest_token ON collab_rooms (guest_link_token);
-`;
-
-const TABLES = {
-  session_shares: "p_session_sharing_shares",
-  session_share_participants: "p_session_sharing_share_participants",
-  collab_rooms: "p_session_sharing_rooms",
-  collab_room_members: "p_session_sharing_room_members",
-};
-
-let db: TestDb | null = null;
-
-afterEach(() => {
-  db?.close();
-  db = null;
-});
-
-const exists = (type: "table" | "index", name: string) =>
-  !!db!.sqlite
-    .prepare("SELECT name FROM sqlite_master WHERE type = ? AND name = ?")
-    .get(type, name);
-
-function seedUsersAndHost(sqlite: TestDb["sqlite"]) {
-  sqlite.exec(
-    "INSERT INTO users (id, username) VALUES ('alice', 'alice'), ('bob', 'bob')",
-  );
-  sqlite.exec("INSERT INTO ssh_data (id) VALUES (7)");
-}
-
-describe("adopting the session sharing tables", () => {
-  it("keeps every row and index when the legacy tables are there", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        seedUsersAndHost(sqlite);
-        sqlite.exec(LEGACY_DDL);
-        sqlite.exec(`
-          INSERT INTO session_shares (id, host_id, owner_user_id, protocol, session_id, share_type, link_token, permission_level, expires_at, join_count)
-          VALUES ('share-1', 7, 'alice', 'ssh', 'sess-1', 'link', 'tok-1', 'read-write', '2999-01-01T00:00:00.000Z', 3);
-          INSERT INTO session_share_participants (share_id, user_id, guest_label) VALUES ('share-1', NULL, 'Guest');
-          INSERT INTO collab_rooms (id, name, owner_user_id, persistent, stage_share_id, stage_host_id, guest_link_token)
-          VALUES ('room-1', 'Standup', 'alice', 1, 'share-1', 7, 'guest-tok');
-          INSERT INTO collab_room_members (room_id, user_id, room_role) VALUES ('room-1', 'alice', 'host'), ('room-1', 'bob', 'member');
-        `);
-      },
-    });
-
-    expect(db.applied).toEqual(["0001_adopt_session_sharing"]);
-    for (const [legacy, adopted] of Object.entries(TABLES)) {
-      expect(exists("table", legacy)).toBe(false);
-      expect(exists("table", adopted)).toBe(true);
-    }
-
-    expect(
-      db.sqlite
-        .prepare(
-          "SELECT id, link_token, permission_level, join_count FROM p_session_sharing_shares",
-        )
-        .all(),
-    ).toEqual([
-      {
-        id: "share-1",
-        link_token: "tok-1",
-        permission_level: "read-write",
-        join_count: 3,
-      },
-    ]);
-    expect(
-      db.sqlite
-        .prepare(
-          "SELECT name, persistent, stage_share_id, guest_link_token FROM p_session_sharing_rooms",
-        )
-        .get(),
-    ).toEqual({
-      name: "Standup",
-      persistent: 1,
-      stage_share_id: "share-1",
-      guest_link_token: "guest-tok",
-    });
-    expect(
-      db.sqlite
-        .prepare("SELECT COUNT(*) AS n FROM p_session_sharing_room_members")
-        .get(),
-    ).toEqual({ n: 2 });
-    expect(
-      db.sqlite
-        .prepare("SELECT guest_label FROM p_session_sharing_share_participants")
-        .get(),
-    ).toEqual({ guest_label: "Guest" });
-
-    for (const index of [
-      "idx_session_shares_session_id",
-      "idx_session_shares_host_id",
-      "idx_collab_rooms_guest_token",
-      "idx_collab_rooms_owner",
-      "idx_collab_room_members_user",
-    ]) {
-      expect(exists("index", index)).toBe(true);
-    }
-  });
-
-  it("follows the rename in the links between the tables", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        seedUsersAndHost(sqlite);
-        sqlite.exec(LEGACY_DDL);
-      },
-    });
-    const ddl = (name: string) =>
-      (
-        db!.sqlite
-          .prepare("SELECT sql FROM sqlite_master WHERE name = ?")
-          .get(name) as { sql: string }
-      ).sql;
-
-    expect(ddl("p_session_sharing_rooms")).toContain(
-      '"p_session_sharing_shares"',
-    );
-    expect(ddl("p_session_sharing_room_members")).toContain(
-      '"p_session_sharing_rooms"',
-    );
-  });
-
-  it("creates the tables fresh when there are no legacy ones", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => seedUsersAndHost(sqlite),
-    });
-
-    for (const [legacy, adopted] of Object.entries(TABLES)) {
-      expect(exists("table", legacy)).toBe(false);
-      expect(exists("table", adopted)).toBe(true);
-    }
-
-    db.sqlite.exec(`
-      INSERT INTO p_session_sharing_shares (id, host_id, owner_user_id, protocol, session_id, share_type, expires_at)
-      VALUES ('s', 7, 'alice', 'ssh', 'x', 'room', '2999-01-01');
-      INSERT INTO p_session_sharing_rooms (id, name, owner_user_id, stage_share_id) VALUES ('r', 'R', 'alice', 's');
-      INSERT INTO p_session_sharing_room_members (room_id, user_id) VALUES ('r', 'bob');
-    `);
-    // The hand-kept set-null link: deleting the share clears the stage.
-    db.sqlite.exec("DELETE FROM p_session_sharing_shares WHERE id = 's'");
-    expect(
-      db.sqlite
-        .prepare("SELECT stage_share_id FROM p_session_sharing_rooms")
-        .get(),
-    ).toEqual({ stage_share_id: null });
-    // And deleting a user cascades to their memberships.
-    db.sqlite.exec("DELETE FROM users WHERE id = 'bob'");
-    expect(
-      db.sqlite
-        .prepare("SELECT COUNT(*) AS n FROM p_session_sharing_room_members")
-        .get(),
-    ).toEqual({ n: 0 });
-  });
-});
diff --git a/plugins/session-sharing/tests/backend/rooms.test.ts b/plugins/session-sharing/tests/backend/rooms.test.ts
deleted file mode 100644
index ccb94a8f6..000000000
--- a/plugins/session-sharing/tests/backend/rooms.test.ts
+++ /dev/null
@@ -1,324 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { startServer, type TestServer } from "./helpers";
-
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-});
-
-async function roomWithBob(s: TestServer, persistent = false) {
-  const created = await s.request("POST", "/rooms", {
-    body: { name: "Standup", persistent },
-  });
-  const roomId = created.body.room.id as string;
-  await s.request("POST", `/rooms/${roomId}/members`, {
-    body: { userIds: ["bob"] },
-  });
-  return roomId;
-}
-
-async function present(s: TestServer, roomId: string, user = "alice") {
-  s.live.addSession(`sess-${user}`, user);
-  return s.request("POST", `/rooms/${roomId}/present`, {
-    user,
-    body: { protocol: "ssh", sessionId: `sess-${user}`, hostId: 1 },
-  });
-}
-
-describe("collab rooms", () => {
-  it("resolves a synced host to the server ID only with connect access", async () => {
-    server = await startServer({ hostIds: [41, 42], accessibleHostIds: [42] });
-    server.db.sqlite.exec("UPDATE ssh_data SET sync_id = 'shared-host'");
-    expect(await server.request("GET", "/meeting-host/shared-host")).toEqual({
-      status: 200,
-      body: { id: 42 },
-    });
-    server.db.sqlite.exec(
-      "UPDATE ssh_data SET sync_id = 'private-host' WHERE id = 41",
-    );
-    expect(
-      (await server.request("GET", "/meeting-host/private-host")).status,
-    ).toBe(404);
-    expect(
-      (await server.request("GET", "/meeting-host/missing-host")).status,
-    ).toBe(404);
-    expect(
-      (await server.request("GET", "/meeting-host/shared-host", { user: null }))
-        .status,
-    ).toBe(401);
-  });
-
-  it("creates a room with the creator as host and hides the guest token", async () => {
-    server = await startServer();
-    const res = await server.request("POST", "/rooms", {
-      body: { name: " Standup " },
-    });
-    expect(res.status).toBe(200);
-    expect(res.body.room).toMatchObject({
-      name: "Standup",
-      ownerUserId: "alice",
-      guestLinkEnabled: false,
-    });
-    expect(res.body.room).not.toHaveProperty("guestLinkToken");
-
-    const detail = await server.request("GET", `/rooms/${res.body.room.id}`);
-    expect(detail.body.isHost).toBe(true);
-    expect(detail.body.members).toEqual([
-      expect.objectContaining({ userId: "alice", roomRole: "host" }),
-    ]);
-    expect(detail.body.eventsWsPath).toBe("/plugin-ws/ssh-terminal/terminal");
-    expect(server.mock.audits.map((entry) => entry.action)).toContain(
-      "collab_room_create",
-    );
-  });
-
-  it("keeps rooms private to members and invites to the host", async () => {
-    server = await startServer();
-    const roomId = await roomWithBob(server);
-
-    expect(
-      (await server.request("GET", `/rooms/${roomId}`, { user: "carol" }))
-        .status,
-    ).toBe(404);
-    expect(
-      (
-        await server.request("POST", `/rooms/${roomId}/members`, {
-          user: "bob",
-          body: { userIds: ["carol"] },
-        })
-      ).status,
-    ).toBe(403);
-    expect(
-      (await server.request("GET", "/rooms", { user: "bob" })).body.rooms,
-    ).toHaveLength(1);
-  });
-
-  it("expands a role invite to its current members", async () => {
-    server = await startServer();
-    server.db.sqlite.exec(
-      "INSERT INTO roles (id, name) VALUES (5, 'ops'); INSERT INTO user_roles (user_id, role_id) VALUES ('carol', 5)",
-    );
-    const created = await server.request("POST", "/rooms", {
-      body: { name: "Ops" },
-    });
-    const roomId = created.body.room.id;
-    await server.request("POST", `/rooms/${roomId}/members`, {
-      body: { roleIds: [5] },
-    });
-    expect(
-      (await server.request("GET", `/rooms/${roomId}`, { user: "carol" }))
-        .status,
-    ).toBe(200);
-    expect(
-      (
-        await server.request("POST", `/rooms/${roomId}/members`, {
-          body: { roleIds: [99] },
-        })
-      ).status,
-    ).toBe(404);
-  });
-
-  it("puts a member's live session on stage as a read-only room share", async () => {
-    server = await startServer();
-    const roomId = await roomWithBob(server);
-    const res = await present(server, roomId, "bob");
-    expect(res.status).toBe(200);
-
-    const stage = await server.request("GET", `/rooms/${roomId}/stage`);
-    expect(stage.body.stage).toMatchObject({
-      presenterUserId: "bob",
-      protocol: "ssh",
-      sessionId: "sess-bob",
-    });
-    const row = server.db.sqlite
-      .prepare(
-        "SELECT share_type, permission_level FROM p_session_sharing_shares",
-      )
-      .get();
-    expect(row).toEqual({ share_type: "room", permission_level: "read-only" });
-  });
-
-  it("refuses to present someone else's session", async () => {
-    server = await startServer();
-    const roomId = await roomWithBob(server);
-    server.live.addSession("sess-alice", "alice");
-    const res = await server.request("POST", `/rooms/${roomId}/present`, {
-      user: "bob",
-      body: { protocol: "ssh", sessionId: "sess-alice", hostId: 1 },
-    });
-    expect(res.status).toBe(403);
-  });
-
-  it("clears a stage whose session died", async () => {
-    server = await startServer();
-    const roomId = await roomWithBob(server);
-    await present(server, roomId);
-    server.live.sessions.delete("sess-alice");
-
-    const stage = await server.request("GET", `/rooms/${roomId}/stage`, {
-      user: "bob",
-    });
-    expect(stage.body.stage).toBeNull();
-    const detail = await server.request("GET", `/rooms/${roomId}`);
-    expect(detail.body.stage.shareId).toBeNull();
-  });
-
-  it("hands control only from the presenter or host, and only to members", async () => {
-    server = await startServer();
-    const roomId = await roomWithBob(server);
-    await present(server, roomId);
-
-    expect(
-      (
-        await server.request("POST", `/rooms/${roomId}/control`, {
-          user: "bob",
-          body: { userId: "bob" },
-        })
-      ).status,
-    ).toBe(403);
-    expect(
-      (
-        await server.request("POST", `/rooms/${roomId}/control`, {
-          body: { userId: "carol" },
-        })
-      ).status,
-    ).toBe(404);
-
-    const granted = await server.request("POST", `/rooms/${roomId}/control`, {
-      body: { userId: "bob" },
-    });
-    expect(granted.body).toEqual({ controllerUserId: "bob" });
-    expect(server.live.calls).toContainEqual([
-      "setRoomShareControl",
-      "sess-alice",
-      expect.any(String),
-      "bob",
-    ]);
-
-    // The controller may give it back.
-    expect(
-      (
-        await server.request("POST", `/rooms/${roomId}/control`, {
-          user: "bob",
-          body: { userId: null },
-        })
-      ).status,
-    ).toBe(200);
-  });
-
-  it("rate limits hand raises", async () => {
-    server = await startServer();
-    const roomId = await roomWithBob(server);
-    await present(server, roomId);
-
-    const first = await server.request(
-      "POST",
-      `/rooms/${roomId}/control/request`,
-      { user: "bob" },
-    );
-    expect(first.body.request).toMatchObject({
-      userId: "bob",
-      username: "bob",
-    });
-    expect(
-      (
-        await server.request("POST", `/rooms/${roomId}/control/request`, {
-          user: "bob",
-        })
-      ).status,
-    ).toBe(429);
-    expect(
-      (
-        await server.request("GET", `/rooms/${roomId}/control/requests`, {
-          user: "bob",
-        })
-      ).status,
-    ).toBe(403);
-    expect(
-      (await server.request("GET", `/rooms/${roomId}/control/requests`)).body
-        .requests,
-    ).toHaveLength(1);
-  });
-
-  it("removes a member and drops them from the stage", async () => {
-    server = await startServer();
-    const roomId = await roomWithBob(server);
-    await present(server, roomId);
-
-    expect(
-      (await server.request("DELETE", `/rooms/${roomId}/members/alice`)).status,
-    ).toBe(400);
-    expect(
-      (await server.request("DELETE", `/rooms/${roomId}/members/bob`)).status,
-    ).toBe(200);
-    expect(server.live.calls).toContainEqual([
-      "disconnectParticipants",
-      "sess-alice",
-      expect.any(String),
-      {
-        userId: "bob",
-        reason: "You were removed from the collaboration room",
-      },
-    ]);
-  });
-
-  it("lists stage guests for members and lets only the host remove them", async () => {
-    server = await startServer();
-    const roomId = await roomWithBob(server);
-    await present(server, roomId);
-
-    const detail = await server.request("GET", `/rooms/${roomId}`, {
-      user: "bob",
-    });
-    expect(detail.body.guests).toEqual([{ label: "Guest 1" }]);
-    expect(
-      (
-        await server.request("POST", `/rooms/${roomId}/guests/remove`, {
-          user: "bob",
-        })
-      ).status,
-    ).toBe(403);
-    expect(
-      (await server.request("POST", `/rooms/${roomId}/guests/remove`)).status,
-    ).toBe(200);
-    expect(server.live.calls).toContainEqual([
-      "disconnectParticipants",
-      "sess-alice",
-      expect.any(String),
-      { userId: null, reason: "The host removed the guests" },
-    ]);
-  });
-
-  it("ends a one-off room for good and keeps a persistent one", async () => {
-    server = await startServer();
-    const oneOff = await roomWithBob(server);
-    await present(server, oneOff);
-    expect(
-      (await server.request("POST", `/rooms/${oneOff}/end`, { user: "bob" }))
-        .status,
-    ).toBe(403);
-    await server.request("POST", `/rooms/${oneOff}/end`);
-    expect((await server.request("GET", `/rooms/${oneOff}`)).status).toBe(404);
-
-    const persistent = await roomWithBob(server, true);
-    await server.request("POST", `/rooms/${persistent}/end`);
-    expect((await server.request("GET", `/rooms/${persistent}`)).status).toBe(
-      200,
-    );
-  });
-
-  it("deletes a room and its members", async () => {
-    server = await startServer();
-    const roomId = await roomWithBob(server);
-    expect((await server.request("DELETE", `/rooms/${roomId}`)).status).toBe(
-      200,
-    );
-    expect(
-      server.db.sqlite
-        .prepare("SELECT COUNT(*) AS n FROM p_session_sharing_room_members")
-        .get(),
-    ).toEqual({ n: 0 });
-  });
-});
diff --git a/plugins/session-sharing/tests/backend/security.test.ts b/plugins/session-sharing/tests/backend/security.test.ts
deleted file mode 100644
index be07427b3..000000000
--- a/plugins/session-sharing/tests/backend/security.test.ts
+++ /dev/null
@@ -1,425 +0,0 @@
-/**
- * Guest tokens, participant permissions and expiry. These are what keep a
- * share link from becoming a way into someone else's session, so each rule
- * the old core code enforced has a test here.
- */
-
-import { afterEach, describe, expect, it } from "vitest";
-import { asUser, expireShare, startServer, type TestServer } from "./helpers";
-
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-});
-
-async function createShare(
-  s: TestServer,
-  body: Record<string, unknown> = {},
-): Promise<{ shareId: string; linkToken: string | null }> {
-  if (!s.live.sessions.has("sess-1")) s.live.addSession("sess-1", "alice");
-  const res = await s.request("POST", "/create", {
-    body: {
-      hostId: 1,
-      sessionId: "sess-1",
-      protocol: "ssh",
-      shareType: "link",
-      permissionLevel: "read-only",
-      ...body,
-    },
-  });
-  expect(res.status).toBe(200);
-  return res.body;
-}
-
-async function roomOnStage(s: TestServer) {
-  const created = await s.request("POST", "/rooms", { body: { name: "R" } });
-  const roomId = created.body.room.id as string;
-  await s.request("POST", `/rooms/${roomId}/members`, {
-    body: { userIds: ["bob"] },
-  });
-  s.live.addSession("sess-stage", "alice");
-  await s.request("POST", `/rooms/${roomId}/present`, {
-    body: { protocol: "ssh", sessionId: "sess-stage", hostId: 1 },
-  });
-  const link = await s.request("POST", `/rooms/${roomId}/guest-link`, {
-    body: { enabled: true },
-  });
-  return { roomId, token: link.body.guestLinkToken as string };
-}
-
-describe("share link guests", () => {
-  it("resolves a live link without any host details", async () => {
-    server = await startServer();
-    const { linkToken } = await createShare(server, {
-      permissionLevel: "read-write",
-    });
-
-    const res = await server.request("GET", `/resolve/${linkToken}`, {
-      user: null,
-    });
-    expect(res.status).toBe(200);
-    expect(res.body).toEqual({
-      protocol: "ssh",
-      permissionLevel: "read-write",
-      wsPath: `/plugin-ws/ssh-terminal/terminal?shareToken=${linkToken}`,
-    });
-
-    const joined = await server.guests.resolve({
-      shareToken: linkToken!,
-      clientIp: "1.1.1.1",
-    });
-    expect(joined).toEqual({
-      ok: true,
-      share: expect.objectContaining({
-        sessionId: "sess-1",
-        permissionLevel: "read-write",
-      }),
-    });
-  });
-
-  it("keeps a read-only link read-only", async () => {
-    server = await startServer();
-    const { linkToken } = await createShare(server);
-    const joined = await server.guests.resolve({
-      shareToken: linkToken!,
-      clientIp: "1.1.1.1",
-    });
-    expect(joined).toMatchObject({ share: { permissionLevel: "read-only" } });
-  });
-
-  it("refuses an unknown or guessed token", async () => {
-    server = await startServer();
-    await createShare(server);
-    for (const token of ["nope", "", "%00"]) {
-      const res = await server.request("GET", `/resolve/${token || "x"}`, {
-        user: null,
-      });
-      expect(res.status).toBe(404);
-      expect(
-        await server.guests.resolve({ shareToken: token, clientIp: "1.1.1.1" }),
-      ).toMatchObject({ ok: false });
-    }
-  });
-
-  it("refuses a revoked link", async () => {
-    server = await startServer();
-    const { shareId, linkToken } = await createShare(server);
-    await server.request("DELETE", `/${shareId}`);
-
-    expect(
-      (await server.request("GET", `/resolve/${linkToken}`, { user: null }))
-        .status,
-    ).toBe(404);
-    expect(
-      await server.guests.resolve({
-        shareToken: linkToken!,
-        clientIp: "1.1.1.1",
-      }),
-    ).toEqual({ ok: false, reason: "Invalid or expired share link" });
-  });
-
-  it("refuses a link once sharing is switched off", async () => {
-    server = await startServer();
-    const { linkToken } = await createShare(server);
-    await server.mock.ctx.settings.set("globallyEnabled", false);
-
-    expect(
-      (await server.request("GET", `/resolve/${linkToken}`, { user: null }))
-        .status,
-    ).toBe(404);
-    expect(
-      await server.guests.resolve({
-        shareToken: linkToken!,
-        clientIp: "1.1.1.1",
-      }),
-    ).toMatchObject({ ok: false });
-  });
-
-  it("answers 404 once the session is gone", async () => {
-    server = await startServer();
-    const { linkToken } = await createShare(server);
-    server.live.sessions.delete("sess-1");
-    const res = await server.request("GET", `/resolve/${linkToken}`, {
-      user: null,
-    });
-    expect(res.status).toBe(404);
-  });
-
-  it("rate limits resolves per IP", async () => {
-    server = await startServer();
-    let last = 0;
-    for (let i = 0; i < 31; i++) {
-      last = (await server.request("GET", "/resolve/guess", { user: null }))
-        .status;
-    }
-    expect(last).toBe(429);
-  });
-
-  it("records a guest join against the share", async () => {
-    server = await startServer();
-    const { shareId } = await createShare(server);
-    await server.guests.recordJoin(shareId);
-    expect(
-      server.db.sqlite
-        .prepare(
-          "SELECT join_count, (SELECT guest_label FROM p_session_sharing_share_participants) AS label FROM p_session_sharing_shares",
-        )
-        .get(),
-    ).toEqual({ join_count: 1, label: "Guest" });
-  });
-});
-
-describe("expired shares", () => {
-  it("stops resolving a link once it expires", async () => {
-    server = await startServer();
-    const { shareId, linkToken } = await createShare(server);
-    expireShare(server, shareId);
-
-    expect(
-      (await server.request("GET", `/resolve/${linkToken}`, { user: null }))
-        .status,
-    ).toBe(404);
-    expect(
-      await server.guests.resolve({
-        shareToken: linkToken!,
-        clientIp: "1.1.1.1",
-      }),
-    ).toMatchObject({ ok: false });
-    expect((await server.request("GET", "/host/1/active")).body.shares).toEqual(
-      [],
-    );
-  });
-
-  it("refuses a member join on an expired user share", async () => {
-    server = await startServer();
-    const { shareId } = await createShare(server, {
-      shareType: "user",
-      targetUserId: "bob",
-    });
-    expireShare(server, shareId);
-    expect(
-      await asUser(server, "bob", () => server!.sharing.authorizeJoin(shareId)),
-    ).toBeNull();
-  });
-
-  it("clears a room stage whose share expired and stops guests", async () => {
-    server = await startServer();
-    const { roomId, token } = await roomOnStage(server);
-    const shareId = (await server.request("GET", `/rooms/${roomId}`)).body.stage
-      .shareId;
-    expireShare(server, shareId);
-
-    const guest = await server.request("GET", `/guest/${token}`, {
-      user: null,
-    });
-    expect(guest.body).toEqual({ roomName: "R", stage: null });
-    expect(
-      await server.guests.resolve({
-        roomGuestToken: token,
-        clientIp: "1.1.1.1",
-      }),
-    ).toEqual({ ok: false, reason: "Nothing is being presented" });
-    expect(
-      (await server.request("GET", `/rooms/${roomId}/stage`)).body.stage,
-    ).toBeNull();
-  });
-});
-
-describe("member joins", () => {
-  it("lets only the target of a user share join", async () => {
-    server = await startServer();
-    const { shareId } = await createShare(server, {
-      shareType: "user",
-      targetUserId: "bob",
-      permissionLevel: "read-write",
-    });
-
-    expect(
-      await asUser(server, "bob", () => server!.sharing.authorizeJoin(shareId)),
-    ).toEqual({
-      share: {
-        id: shareId,
-        sessionId: "sess-1",
-        permissionLevel: "read-write",
-      },
-      displayName: "bob",
-    });
-    expect(
-      await asUser(server, "carol", () =>
-        server!.sharing.authorizeJoin(shareId),
-      ),
-    ).toBeNull();
-  });
-
-  it("refuses the target once they lose access to the host", async () => {
-    server = await startServer({ accessibleHostIds: [2] });
-    server.live.addSession("sess-1", "alice", 1);
-    // Inserted directly: bob could reach host 1 when it was shared with him.
-    server.db.sqlite
-      .prepare(
-        "INSERT INTO p_session_sharing_shares (id, host_id, owner_user_id, protocol, session_id, share_type, target_user_id, expires_at) VALUES ('s', 1, 'alice', 'ssh', 'sess-1', 'user', 'bob', ?)",
-      )
-      .run(new Date(Date.now() + 60_000).toISOString());
-
-    expect(
-      await asUser(server, "bob", () => server!.sharing.authorizeJoin("s")),
-    ).toBeNull();
-  });
-
-  it("refuses a link share joined as a member, and no user at all", async () => {
-    server = await startServer();
-    const { shareId } = await createShare(server);
-    expect(
-      await asUser(server, "bob", () => server!.sharing.authorizeJoin(shareId)),
-    ).toBeNull();
-    expect(await server.sharing.authorizeJoin(shareId)).toBeNull();
-  });
-
-  it("lets room members, and only them, join a room stage read-only", async () => {
-    server = await startServer();
-    const { roomId } = await roomOnStage(server);
-    const shareId = (await server.request("GET", `/rooms/${roomId}`)).body.stage
-      .shareId;
-
-    expect(
-      await asUser(server, "bob", () => server!.sharing.authorizeJoin(shareId)),
-    ).toMatchObject({ share: { permissionLevel: "read-only" } });
-    expect(
-      await asUser(server, "carol", () =>
-        server!.sharing.authorizeJoin(shareId),
-      ),
-    ).toBeNull();
-  });
-
-  it("subscribes only members to room events", async () => {
-    server = await startServer();
-    const { roomId } = await roomOnStage(server);
-    const socket = { readyState: 1, OPEN: 1, send: () => {} };
-    expect(
-      await asUser(server, "carol", () =>
-        server!.sharing.subscribeRoom(roomId, socket),
-      ),
-    ).toBe(false);
-    expect(
-      await asUser(server, "bob", () =>
-        server!.sharing.subscribeRoom(roomId, socket),
-      ),
-    ).toBe(true);
-    await server.sharing.unsubscribeRoom(socket);
-  });
-});
-
-describe("room guest links", () => {
-  it("resolves the stage for a guest without host details", async () => {
-    server = await startServer();
-    const { token } = await roomOnStage(server);
-
-    const res = await server.request("GET", `/guest/${token}`, { user: null });
-    expect(res.body).toEqual({
-      roomName: "R",
-      stage: {
-        protocol: "ssh",
-        shareId: expect.any(String),
-        wsPath: `/plugin-ws/ssh-terminal/terminal?roomGuestToken=${token}`,
-      },
-    });
-    expect(
-      await server.guests.resolve({
-        roomGuestToken: token,
-        clientIp: "1.1.1.1",
-      }),
-    ).toMatchObject({ ok: true, share: { permissionLevel: "read-only" } });
-  });
-
-  it("refuses the old token after a rotate and any token after disable", async () => {
-    server = await startServer();
-    const { roomId, token } = await roomOnStage(server);
-
-    const rotated = await server.request(
-      "POST",
-      `/rooms/${roomId}/guest-link`,
-      {
-        body: { enabled: true },
-      },
-    );
-    expect(
-      (await server.request("GET", `/guest/${token}`, { user: null })).status,
-    ).toBe(404);
-    expect(
-      await server.guests.resolve({
-        roomGuestToken: token,
-        clientIp: "1.1.1.1",
-      }),
-    ).toMatchObject({ ok: false });
-    expect(server.live.calls).toContainEqual([
-      "disconnectParticipants",
-      "sess-stage",
-      expect.any(String),
-      { userId: null, reason: "The guest link was rotated" },
-    ]);
-
-    await server.request("POST", `/rooms/${roomId}/guest-link`, {
-      body: { enabled: false },
-    });
-    expect(
-      (
-        await server.request("GET", `/guest/${rotated.body.guestLinkToken}`, {
-          user: null,
-        })
-      ).status,
-    ).toBe(404);
-  });
-
-  it("refuses a guest link after the room ends", async () => {
-    server = await startServer();
-    const { roomId, token } = await roomOnStage(server);
-    await server.request("POST", `/rooms/${roomId}/end`);
-    expect(
-      (await server.request("GET", `/guest/${token}`, { user: null })).status,
-    ).toBe(404);
-  });
-
-  it("does not accept a room guest token as a share link, or the reverse", async () => {
-    server = await startServer();
-    const { token } = await roomOnStage(server);
-    const { linkToken } = await createShare(server);
-
-    expect(
-      await server.guests.resolve({ shareToken: token, clientIp: "1.1.1.1" }),
-    ).toMatchObject({ ok: false });
-    expect(
-      (await server.request("GET", `/guest/${linkToken}`, { user: null }))
-        .status,
-    ).toBe(404);
-  });
-
-  it("only lets the host manage the guest link", async () => {
-    server = await startServer();
-    const { roomId } = await roomOnStage(server);
-    expect(
-      (
-        await server.request("POST", `/rooms/${roomId}/guest-link`, {
-          user: "bob",
-          body: { enabled: true },
-        })
-      ).status,
-    ).toBe(403);
-  });
-
-  it("rate limits room guests per IP", async () => {
-    server = await startServer();
-    let refused = false;
-    for (let i = 0; i < 61; i++) {
-      const result = await server.guests.resolve({
-        roomGuestToken: "guess",
-        clientIp: "9.9.9.9",
-      });
-      if (result.ok === false && result.reason === "Too many requests") {
-        refused = true;
-      }
-    }
-    expect(refused).toBe(true);
-  });
-});
diff --git a/plugins/session-sharing/tests/backend/shares.test.ts b/plugins/session-sharing/tests/backend/shares.test.ts
deleted file mode 100644
index 693c68fd5..000000000
--- a/plugins/session-sharing/tests/backend/shares.test.ts
+++ /dev/null
@@ -1,225 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { startServer, type TestServer } from "./helpers";
-
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-});
-
-const linkShare = (overrides: Record<string, unknown> = {}) => ({
-  hostId: 1,
-  sessionId: "sess-1",
-  protocol: "ssh",
-  shareType: "link",
-  permissionLevel: "read-only",
-  ...overrides,
-});
-
-describe("share routes", () => {
-  it("creates a link share for a session the caller owns", async () => {
-    server = await startServer();
-    server.live.addSession("sess-1", "alice");
-
-    const res = await server.request("POST", "/create", { body: linkShare() });
-
-    expect(res.status).toBe(200);
-    expect(res.body.linkToken).toMatch(/^[A-Za-z0-9_-]{32}$/);
-    const active = await server.request("GET", "/host/1/active");
-    expect(active.body.shares).toHaveLength(1);
-    expect(active.body.shares[0]).toMatchObject({
-      ownerUserId: "alice",
-      shareType: "link",
-      permissionLevel: "read-only",
-    });
-  });
-
-  it("refuses a session someone else owns", async () => {
-    server = await startServer();
-    server.live.addSession("sess-1", "bob");
-
-    const res = await server.request("POST", "/create", { body: linkShare() });
-    expect(res.status).toBe(403);
-  });
-
-  it("refuses when sharing is off for the host or everywhere", async () => {
-    server = await startServer({ settings: { globallyEnabled: false } });
-    server.live.addSession("sess-1", "alice");
-    expect(
-      (await server.request("POST", "/create", { body: linkShare() })).status,
-    ).toBe(403);
-    await server.close();
-
-    server = await startServer();
-    server.live.addSession("sess-1", "alice");
-    await server.mock.ctx.settings.setHost(1, "allowSessionSharing", false);
-    expect(
-      (await server.request("POST", "/create", { body: linkShare() })).status,
-    ).toBe(403);
-  });
-
-  it("validates the request", async () => {
-    server = await startServer();
-    for (const body of [
-      {},
-      linkShare({ protocol: "ftp" }),
-      linkShare({ shareType: "room" }),
-      linkShare({ permissionLevel: "owner" }),
-      linkShare({ shareType: "user" }),
-    ]) {
-      expect((await server.request("POST", "/create", { body })).status).toBe(
-        400,
-      );
-    }
-  });
-
-  it("shares with a user only when they can reach the host", async () => {
-    server = await startServer({ accessibleHostIds: [1] });
-    server.live.addSession("sess-1", "alice", 1);
-    server.live.addSession("sess-2", "alice", 2);
-
-    const ok = await server.request("POST", "/create", {
-      body: linkShare({ shareType: "user", targetUserId: "bob" }),
-    });
-    expect(ok.status).toBe(200);
-    expect(ok.body.linkToken).toBeNull();
-
-    const noAccess = await server.request("POST", "/create", {
-      body: linkShare({
-        hostId: 2,
-        sessionId: "sess-2",
-        shareType: "user",
-        targetUserId: "bob",
-      }),
-    });
-    expect(noAccess.status).toBe(403);
-
-    const unknownUser = await server.request("POST", "/create", {
-      body: linkShare({ shareType: "user", targetUserId: "nobody" }),
-    });
-    expect(unknownUser.status).toBe(403);
-  });
-
-  it("lets the owner or an admin revoke, and kicks SSH guests", async () => {
-    server = await startServer({ admins: ["carol"] });
-    server.live.addSession("sess-1", "alice");
-    const { body } = await server.request("POST", "/create", {
-      body: linkShare(),
-    });
-
-    expect(
-      (await server.request("DELETE", `/${body.shareId}`, { user: "bob" }))
-        .status,
-    ).toBe(403);
-    expect(
-      (await server.request("DELETE", `/${body.shareId}`, { user: "carol" }))
-        .status,
-    ).toBe(200);
-    expect(server.live.calls[0]).toEqual([
-      "ownerEndSession",
-      "sess-1",
-      "Session share revoked by owner",
-    ]);
-    expect(
-      (
-        await server.request("GET", `/resolve/${body.linkToken}`, {
-          user: null,
-        })
-      ).status,
-    ).toBe(404);
-    expect((await server.request("DELETE", "/missing")).status).toBe(404);
-  });
-
-  it("ends a shared session for its owner only", async () => {
-    server = await startServer();
-    server.live.addSession("sess-1", "alice");
-    const { body } = await server.request("POST", "/create", {
-      body: linkShare(),
-    });
-
-    expect(
-      (await server.request("POST", `/${body.shareId}/end`, { user: "bob" }))
-        .status,
-    ).toBe(403);
-    expect((await server.request("POST", `/${body.shareId}/end`)).status).toBe(
-      200,
-    );
-    expect(server.live.calls).toContainEqual([
-      "ownerEndSession",
-      "sess-1",
-      "Session ended by owner",
-    ]);
-  });
-
-  it("lists live sessions shared with the caller", async () => {
-    server = await startServer();
-    server.live.addSession("sess-1", "alice");
-    const { body } = await server.request("POST", "/create", {
-      body: linkShare({ shareType: "user", targetUserId: "bob" }),
-    });
-
-    const res = await server.request("GET", "/shared-with-me", { user: "bob" });
-    expect(res.body).toEqual([
-      expect.objectContaining({
-        sessionId: "sess-1",
-        hostName: "host-1",
-        isOwnSession: false,
-        sharedByUsername: "alice",
-        shareId: body.shareId,
-        permissionLevel: "read-only",
-      }),
-    ]);
-
-    server.live.sessions.delete("sess-1");
-    expect(
-      (await server.request("GET", "/shared-with-me", { user: "bob" })).body,
-    ).toEqual([]);
-  });
-
-  it("lists users and roles for the pickers", async () => {
-    server = await startServer();
-    server.db.sqlite
-      .prepare("INSERT INTO roles (id, name, display_name) VALUES (?, ?, ?)")
-      .run(3, "ops", "Operations");
-    const res = await server.request("GET", "/directory");
-    expect(res.body.users.map((u: { id: string }) => u.id)).toEqual([
-      "alice",
-      "bob",
-      "carol",
-    ]);
-    expect(res.body.roles).toEqual([
-      { id: 3, name: "ops", displayName: "Operations" },
-    ]);
-  });
-
-  it("denies every signed-in route without the use permission", async () => {
-    server = await startServer({ permissions: [] });
-    for (const [method, path] of [
-      ["POST", "/create"],
-      ["GET", "/host/1/active"],
-      ["GET", "/shared-with-me"],
-      ["GET", "/directory"],
-      ["DELETE", "/share-1"],
-      ["POST", "/share-1/end"],
-      ["POST", "/rooms"],
-      ["GET", "/rooms"],
-      ["GET", "/rooms/r"],
-      ["POST", "/rooms/r/members"],
-      ["DELETE", "/rooms/r/members/bob"],
-      ["POST", "/rooms/r/present"],
-      ["POST", "/rooms/r/stop"],
-      ["GET", "/rooms/r/stage"],
-      ["POST", "/rooms/r/control"],
-      ["POST", "/rooms/r/control/request"],
-      ["GET", "/rooms/r/control/requests"],
-      ["DELETE", "/rooms/r/control/requests/bob"],
-      ["POST", "/rooms/r/guest-link"],
-      ["POST", "/rooms/r/end"],
-      ["DELETE", "/rooms/r"],
-    ]) {
-      const res = await server.request(method, path, { body: {} });
-      expect([method, path, res.status]).toEqual([method, path, 403]);
-    }
-  });
-});
diff --git a/plugins/session-sharing/tests/frontend/SharedSessionView.test.tsx b/plugins/session-sharing/tests/frontend/SharedSessionView.test.tsx
deleted file mode 100644
index 57c469093..000000000
--- a/plugins/session-sharing/tests/frontend/SharedSessionView.test.tsx
+++ /dev/null
@@ -1,113 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { render, screen } from "@testing-library/react";
-import type { ComponentType } from "react";
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import { PluginComponent } from "@termix/plugin-sdk/ui";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import SharedSessionView from "../../src/frontend/SharedSessionView";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-vi.mock("react-xtermjs", () => ({
-  useXTerm: () => ({
-    instance: {
-      options: {},
-      loadAddon: vi.fn(),
-      open: vi.fn(),
-      write: vi.fn(),
-      onData: vi.fn(),
-    },
-    ref: { current: document.createElement("div") },
-  }),
-}));
-
-vi.mock("@xterm/addon-fit", () => ({
-  FitAddon: class FitAddon {
-    fit() {}
-  },
-}));
-
-const manifest = manifestJson as unknown as PluginManifest;
-const guestView = locales.sessionSharing.guestView;
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-function httpError(status: number) {
-  return Object.assign(new Error(`HTTP ${status}`), { response: { status } });
-}
-
-/** The shared-link page, rendered as a guest inside the plugin's scope. */
-async function renderShared(search: string, get: PluginApiClient["get"]) {
-  window.history.pushState({}, "", `/?${search}`);
-  rendered = await renderWithApp(plugin, {
-    manifest,
-    locales,
-    guest: true,
-    api: { get } as unknown as PluginApiClient,
-  });
-  rendered.app.registerComponent(
-    "session-sharing.testSharedView",
-    SharedSessionView as ComponentType<Record<string, unknown>>,
-  );
-  rendered.app.registerSlotContribution("session.remoteDisplay", {
-    actionId: "fixture.display",
-    titleKey: "nav.collab",
-    kind: "component",
-    component: () => <div data-testid="remote-display" />,
-  });
-  render(<PluginComponent id="session-sharing.testSharedView" />);
-}
-
-describe("SharedSessionView", () => {
-  it("says the link is invalid when there is no token", async () => {
-    const get = vi.fn();
-    await renderShared("view=shared", get as never);
-    expect(await screen.findByText(guestView.linkInvalid)).toBeTruthy();
-    expect(get).not.toHaveBeenCalled();
-  });
-
-  it("says the link is invalid for a revoked or expired link", async () => {
-    await renderShared(
-      "view=shared&token=gone",
-      vi.fn(async () => {
-        throw httpError(404);
-      }) as never,
-    );
-    expect(await screen.findByText(guestView.linkInvalid)).toBeTruthy();
-  });
-
-  it("asks the guest to wait when rate limited", async () => {
-    await renderShared(
-      "view=shared&token=busy",
-      vi.fn(async () => {
-        throw httpError(429);
-      }) as never,
-    );
-    expect(await screen.findByText(guestView.rateLimited)).toBeTruthy();
-  });
-
-  it("draws a remote desktop share through the display slot", async () => {
-    const get = vi.fn(async () => ({
-      data: {
-        protocol: "rdp",
-        permissionLevel: "read-only",
-        wsPath: "/plugin-ws/remote-desktop/display",
-        connectParams: { token: "t" },
-      },
-    }));
-    await renderShared("view=shared&token=ok", get as never);
-    expect(await screen.findByTestId("remote-display")).toBeTruthy();
-    expect(screen.getByText(guestView.readOnlyBadge)).toBeTruthy();
-    expect(get).toHaveBeenCalledWith("/resolve/ok");
-  });
-});
diff --git a/plugins/session-sharing/tests/frontend/SharedWithMeSection.test.tsx b/plugins/session-sharing/tests/frontend/SharedWithMeSection.test.tsx
deleted file mode 100644
index 051730e6e..000000000
--- a/plugins/session-sharing/tests/frontend/SharedWithMeSection.test.tsx
+++ /dev/null
@@ -1,103 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { cleanup, fireEvent, render, screen } from "@testing-library/react";
-
-const api = vi.hoisted(() => ({
-  getSharedWithMe: vi.fn(async () => [] as unknown[]),
-}));
-const sdk = vi.hoisted(() => ({
-  invokeAction: vi.fn(async () => undefined),
-  allowed: true,
-}));
-
-vi.mock("../../src/frontend/api", () => api);
-vi.mock("@termix/plugin-sdk/frontend", async (importActual) => ({
-  ...(await importActual<typeof import("@termix/plugin-sdk/frontend")>()),
-  invokeAction: sdk.invokeAction,
-  usePermission: () => sdk.allowed,
-  useHosts: () => ({ hosts: [], loaded: true }),
-  useTranslation: () => ({
-    t: (key: string, options?: Record<string, unknown>) =>
-      options ? `${key}:${JSON.stringify(options)}` : key,
-    language: "en",
-  }),
-}));
-
-import { SharedWithMeSection } from "../../src/frontend/SharedWithMeSection";
-
-function shared(overrides: Record<string, unknown> = {}) {
-  return {
-    sessionId: "sess-1",
-    hostId: 5,
-    hostName: "prod-db",
-    isConnected: true,
-    sharedByUsername: "alice",
-    permissionLevel: "read-only",
-    shareId: "share-1",
-    ...overrides,
-  };
-}
-
-beforeEach(() => {
-  api.getSharedWithMe.mockReset();
-  sdk.invokeAction.mockClear();
-  sdk.allowed = true;
-});
-
-afterEach(() => cleanup());
-
-describe("shared with me section", () => {
-  it("lists sessions shared with the user", async () => {
-    api.getSharedWithMe.mockResolvedValue([shared()]);
-    render(<SharedWithMeSection />);
-
-    expect(await screen.findByText("prod-db")).toBeTruthy();
-    expect(
-      screen.getByText('connections.sharedBy:{"username":"alice"}'),
-    ).toBeTruthy();
-    expect(
-      screen.getByText("sessionSharing.permissionLevel.readOnly"),
-    ).toBeTruthy();
-  });
-
-  it("hides a session the user already joined in a tab", async () => {
-    api.getSharedWithMe.mockResolvedValue([shared()]);
-    render(
-      <SharedWithMeSection openTabData={[{ joinSharedSessionId: "sess-1" }]} />,
-    );
-    await vi.waitFor(() => expect(api.getSharedWithMe).toHaveBeenCalled());
-    expect(screen.queryByText("prod-db")).toBeNull();
-  });
-
-  it("filters by the connections search", async () => {
-    api.getSharedWithMe.mockResolvedValue([
-      shared(),
-      shared({ sessionId: "sess-2", hostName: "web", sharedByUsername: "bob" }),
-    ]);
-    render(<SharedWithMeSection search="bob" />);
-    expect(await screen.findByText("web")).toBeTruthy();
-    expect(screen.queryByText("prod-db")).toBeNull();
-  });
-
-  it("joins through the terminal's open action", async () => {
-    api.getSharedWithMe.mockResolvedValue([shared()]);
-    render(<SharedWithMeSection />);
-    fireEvent.click(await screen.findByText("connections.join"));
-
-    expect(sdk.invokeAction).toHaveBeenCalledWith(
-      "terminal.open",
-      expect.objectContaining({ id: "5", name: "prod-db" }),
-      expect.objectContaining({
-        joinSharedSessionId: "sess-1",
-        joinShareId: "share-1",
-      }),
-    );
-  });
-
-  it("renders nothing for a user without the use permission", async () => {
-    sdk.allowed = false;
-    api.getSharedWithMe.mockResolvedValue([shared()]);
-    const { container } = render(<SharedWithMeSection />);
-    expect(container.textContent).toBe("");
-    expect(api.getSharedWithMe).not.toHaveBeenCalled();
-  });
-});
diff --git a/plugins/session-sharing/tests/frontend/activate.test.tsx b/plugins/session-sharing/tests/frontend/activate.test.tsx
deleted file mode 100644
index 601f4d78d..000000000
--- a/plugins/session-sharing/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,233 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { act, fireEvent, screen, waitFor } from "@testing-library/react";
-import {
-  invokeAction,
-  type PluginApiClient,
-} from "@termix/plugin-sdk/frontend";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-function stubApi(overrides: Partial<PluginApiClient> = {}): PluginApiClient {
-  return {
-    get: vi.fn(async (url: string) => ({
-      data:
-        url === "/directory"
-          ? { users: [{ id: "bob", username: "bob" }], roles: [] }
-          : url.includes("/active")
-            ? { shares: [] }
-            : url === "/rooms"
-              ? { rooms: [] }
-              : {},
-    })),
-    post: vi.fn(async () => ({
-      data: { shareId: "s1", linkToken: "tok", expiresAt: "2999-01-01" },
-    })),
-    put: vi.fn(async () => ({ data: {} })),
-    patch: vi.fn(async () => ({ data: {} })),
-    delete: vi.fn(async () => ({ data: {} })),
-    ...overrides,
-  } as PluginApiClient;
-}
-
-describe("session-sharing activate", () => {
-  it("registers the rooms rail item, panel and tab, and the share buttons", async () => {
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: stubApi(),
-    });
-
-    expect(rendered.registered.railItems()).toEqual([
-      expect.objectContaining({
-        id: "collab",
-        permission: "session-sharing.use",
-      }),
-    ]);
-    expect(rendered.registered.panels()).toEqual(["collab"]);
-    expect(rendered.registered.tabs()).toEqual(["collab"]);
-    expect(rendered.registered.slot("terminal.toolbar")).toEqual([
-      "session-sharing.share",
-    ]);
-    expect(rendered.registered.slot("remote-desktop.toolbar")).toEqual([
-      "session-sharing.share",
-    ]);
-    expect(rendered.registered.slot("tab.inline")).toEqual([
-      "session-sharing.share",
-    ]);
-    expect(rendered.registered.slot("shell.overlay")).toHaveLength(2);
-    expect(rendered.registered.actions().sort()).toEqual([
-      "session-sharing.share",
-    ]);
-    expect(rendered.registered.slot("connections.sections")).toEqual([
-      "session-sharing.sharedWithMe",
-    ]);
-  });
-
-  it("shows terminal participants and clears them after the last guest leaves or the socket closes", async () => {
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: stubApi(),
-    });
-    expect(rendered.registered.slot("terminal.overlay")).toEqual([
-      "session-sharing.participants",
-    ]);
-    let receive: (message: {
-      type: string;
-      [key: string]: unknown;
-    }) => void = () => {};
-    const unsubscribe = vi.fn();
-    rendered.renderSlot("terminal.overlay", {
-      subscribe: (listener: typeof receive) => {
-        receive = listener;
-        return unsubscribe;
-      },
-    });
-    const owner = { isOwner: true, permissionLevel: "read-write", label: null };
-    const guest = {
-      isOwner: false,
-      permissionLevel: "read-only",
-      label: "Guest 1",
-    };
-    await act(() =>
-      receive({ type: "participants", participants: [owner, guest] }),
-    );
-    expect(
-      screen.getByTitle(
-        `${locales.sessionSharing.guestView.ownerLabel}, Guest 1`,
-      ).textContent,
-    ).toBe("2");
-    await act(() => receive({ type: "participants", participants: [owner] }));
-    expect(screen.queryByText("2")).toBeNull();
-    await act(() =>
-      receive({ type: "participants", participants: [owner, guest] }),
-    );
-    await act(() => receive({ type: "session_closed" }));
-    expect(screen.queryByText("2")).toBeNull();
-    await rendered.deactivate();
-    expect(unsubscribe).toHaveBeenCalled();
-    rendered = null;
-  });
-
-  it("registers only the guest views on a guest page", async () => {
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: stubApi(),
-      guest: true,
-    });
-    expect(rendered.registered.tabs()).toEqual(["collab"]);
-    expect(rendered.registered.railItems()).toEqual([]);
-    expect(rendered.registered.actions()).toEqual([]);
-  });
-
-  it("opens the share dialog for a terminal's session", async () => {
-    const api = stubApi();
-    rendered = await renderWithApp(plugin, { manifest, locales, api });
-    rendered.renderSlot("shell.overlay");
-
-    await act(() =>
-      invokeAction("session-sharing.share", {
-        getShareTarget: () => ({
-          hostId: 4,
-          sessionId: "sess-9",
-          protocol: "ssh",
-        }),
-      }),
-    );
-
-    expect(
-      await screen.findByText(locales.sessionSharing.modalTitle),
-    ).toBeTruthy();
-    await waitFor(() => expect(api.get).toHaveBeenCalledWith("/host/4/active"));
-  });
-
-  it("opens the dialog for a remote desktop session once it is up", async () => {
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: stubApi(),
-    });
-    rendered.renderSlot("shell.overlay");
-
-    await act(() =>
-      invokeAction("session-sharing.share", {
-        hostId: 2,
-        sessionId: null,
-        protocol: "rdp",
-      }),
-    );
-    expect(screen.queryByText(locales.sessionSharing.modalTitle)).toBeNull();
-
-    await act(() =>
-      invokeAction("session-sharing.share", {
-        hostId: 2,
-        sessionId: "guac-1",
-        protocol: "rdp",
-      }),
-    );
-    expect(
-      await screen.findByText(locales.sessionSharing.modalTitle),
-    ).toBeTruthy();
-  });
-
-  it("creates a link share from the dialog", async () => {
-    const api = stubApi();
-    rendered = await renderWithApp(plugin, { manifest, locales, api });
-    rendered.renderSlot("shell.overlay");
-    await act(() =>
-      invokeAction("session-sharing.share", {
-        getShareTarget: () => ({
-          hostId: 1,
-          sessionId: "sess-1",
-          protocol: "ssh",
-        }),
-      }),
-    );
-
-    fireEvent.click(
-      await screen.findByRole("button", {
-        name: locales.sessionSharing.createLinkButton,
-      }),
-    );
-    await waitFor(() =>
-      expect(api.post).toHaveBeenCalledWith(
-        "/create",
-        expect.objectContaining({
-          hostId: 1,
-          sessionId: "sess-1",
-          shareType: "link",
-          permissionLevel: "read-only",
-        }),
-      ),
-    );
-  });
-
-  it("removes everything it registered on deactivate", async () => {
-    const app = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: stubApi(),
-    });
-    await app.deactivate();
-    expect(app.registered.tabs()).toEqual([]);
-    expect(app.registered.panels()).toEqual([]);
-    expect(app.registered.slot("terminal.toolbar")).toEqual([]);
-    expect(app.registered.actions()).toEqual([]);
-  });
-});
diff --git a/plugins/session-sharing/tests/frontend/guest-terminal-size.test.tsx b/plugins/session-sharing/tests/frontend/guest-terminal-size.test.tsx
deleted file mode 100644
index 5adfede78..000000000
--- a/plugins/session-sharing/tests/frontend/guest-terminal-size.test.tsx
+++ /dev/null
@@ -1,110 +0,0 @@
-import { act, cleanup, render, waitFor } from "@testing-library/react";
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { GuestTerminalView } from "../../src/frontend/SharedSessionView";
-
-const f = vi.hoisted(() => ({
-  terminal: {
-    cols: 80,
-    rows: 24,
-    options: {},
-    loadAddon: vi.fn(),
-    open: vi.fn(),
-    write: vi.fn(),
-    resize: vi.fn(),
-  },
-  fit: vi.fn(),
-  onResize: null as (() => void) | null,
-}));
-vi.mock("@termix/plugin-sdk/frontend", () => ({
-  useTranslation: () => ({ t: (key: string) => key }),
-}));
-vi.mock("react-xtermjs", () => ({
-  useXTerm: () => ({ instance: f.terminal, ref: { current: null } }),
-}));
-vi.mock("@xterm/addon-fit", () => ({
-  FitAddon: class {
-    fit() {
-      f.fit();
-    }
-  },
-}));
-vi.mock("../../src/frontend/shared", () => ({
-  wsUrlForPath: async () => "ws://termix.test/terminal",
-  RemoteDisplay: () => null,
-  Loader: () => null,
-}));
-class Socket {
-  static OPEN = 1;
-  static latest: Socket;
-  readyState = 1;
-  onopen?: () => void;
-  onmessage?: (event: { data: string }) => void;
-  onclose?: () => void;
-  onerror?: () => void;
-  constructor() {
-    Socket.latest = this;
-  }
-  send() {}
-  close() {}
-  message(value: object) {
-    this.onmessage?.({ data: JSON.stringify(value) });
-  }
-}
-beforeEach(() => {
-  vi.clearAllMocks();
-  f.terminal.cols = 80;
-  f.terminal.rows = 24;
-  f.terminal.resize.mockImplementation((cols: number, rows: number) => {
-    f.terminal.cols = cols;
-    f.terminal.rows = rows;
-  });
-  f.fit.mockImplementation(() => {
-    f.terminal.cols = 80;
-    f.terminal.rows = 24;
-  });
-  vi.stubGlobal("WebSocket", Socket);
-  vi.stubGlobal(
-    "ResizeObserver",
-    class {
-      constructor(fn: () => void) {
-        f.onResize = fn;
-      }
-      observe() {}
-      disconnect() {}
-    },
-  );
-});
-afterEach(() => {
-  cleanup();
-  vi.unstubAllGlobals();
-});
-
-it("keeps the presenter's grid while the guest window changes size", async () => {
-  render(
-    <GuestTerminalView
-      share={{ permissionLevel: "read-only" }}
-      wsPath="/plugin-ws/ssh-terminal/terminal?shareToken=test"
-    />,
-  );
-  await waitFor(() => expect(Socket.latest.onmessage).toBeTypeOf("function"));
-  act(() => Socket.latest.message({ type: "resized", cols: 132, rows: 40 }));
-  expect([f.terminal.cols, f.terminal.rows]).toEqual([132, 40]);
-  act(() => f.onResize?.());
-  expect([f.terminal.cols, f.terminal.rows]).toEqual([132, 40]);
-  act(() => Socket.latest.message({ type: "resized", cols: 100, rows: 30 }));
-  expect([f.terminal.cols, f.terminal.rows]).toEqual([100, 30]);
-});
-
-describe("invalid shared terminal dimensions", () => {
-  it.each([0, -1, 1.5, "132"])("ignores cols=%s", async (cols) => {
-    render(
-      <GuestTerminalView
-        share={{ permissionLevel: "read-only" }}
-        wsPath="/plugin-ws/ssh-terminal/terminal?shareToken=test"
-      />,
-    );
-    await waitFor(() => expect(Socket.latest.onmessage).toBeTypeOf("function"));
-    act(() => Socket.latest.message({ type: "resized", cols, rows: 24 }));
-    expect(f.terminal.resize).not.toHaveBeenCalled();
-  });
-});
diff --git a/plugins/session-sharing/tests/frontend/meeting-backend.test.ts b/plugins/session-sharing/tests/frontend/meeting-backend.test.ts
deleted file mode 100644
index 0f1d37341..000000000
--- a/plugins/session-sharing/tests/frontend/meeting-backend.test.ts
+++ /dev/null
@@ -1,80 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import type { PluginApiClient, TermixApp } from "@termix/plugin-sdk/frontend";
-import {
-  connectMeetings,
-  meetingGuestUrl,
-} from "../../src/frontend/meeting-backend";
-
-function client(): PluginApiClient {
-  return Object.fromEntries(
-    ["get", "post", "put", "patch", "delete"].map((method) => [
-      method,
-      vi.fn(async () => ({ data: { rooms: [] } })),
-    ]),
-  ) as unknown as PluginApiClient;
-}
-afterEach(() => vi.restoreAllMocks());
-
-describe("meeting backend", () => {
-  it("routes rooms, invites and host resolution to the linked server and refuses a later switch", async () => {
-    const local = client();
-    const remote = client();
-    let url: string | null = "https://termix.example/base/";
-    const app = {
-      desktop: { available: true, remoteServerUrl: async () => url },
-      apiFor: (origin: string) => (origin === "remote" ? remote : local),
-      t: (key: string) => key,
-    } as unknown as TermixApp;
-    const backend = await connectMeetings(app);
-    expect(backend.origin).toBe("remote");
-    await backend.api.listCollabRooms();
-    await backend.api.createCollabRoom("Standup", true);
-    await backend.api.getDirectory();
-    await backend.api.resolveHost("stable-host-id");
-    await backend.api.presentCollabStage("room", {
-      hostId: 99,
-      sessionId: "remote-session",
-      protocol: "ssh",
-    });
-    expect(local.get).not.toHaveBeenCalled();
-    expect(local.post).not.toHaveBeenCalled();
-    expect(remote.get).toHaveBeenCalledWith("/meeting-host/stable-host-id");
-    expect(remote.post).toHaveBeenCalledWith("/rooms/room/present", {
-      hostId: 99,
-      sessionId: "remote-session",
-      protocol: "ssh",
-    });
-    expect(meetingGuestUrl(backend.publicUrl, "a+b&c")).toBe(
-      "https://termix.example/base/?view=collab-guest&token=a%2Bb%26c",
-    );
-    url = "https://other.example";
-    await expect(backend.api.deleteCollabRoom("room")).rejects.toThrow(
-      "collab.serverChanged",
-    );
-    expect(remote.delete).not.toHaveBeenCalled();
-    url = null;
-    await expect(backend.api.getCollabRoom("room")).rejects.toThrow(
-      "collab.serverChanged",
-    );
-  });
-
-  it("keeps standalone rooms local without generating a file URL", async () => {
-    const local = client();
-    const backend = await connectMeetings({
-      desktop: { available: true, remoteServerUrl: async () => null },
-      apiFor: () => local,
-      t: (key: string) => key,
-    } as unknown as TermixApp);
-    expect(backend.origin).toBe("local");
-    await backend.api.listCollabRooms();
-    expect(local.get).toHaveBeenCalledWith("/rooms");
-    expect(meetingGuestUrl(backend.publicUrl, "token")).toBeNull();
-    expect(meetingGuestUrl("file:///app/index.html", "token")).toBeNull();
-  });
-
-  it("preserves web deployment paths while replacing old query and fragment values", () => {
-    expect(
-      meetingGuestUrl("https://termix.example/app/?view=other#old", "token"),
-    ).toBe("https://termix.example/app/?view=collab-guest&token=token");
-  });
-});
diff --git a/plugins/session-sharing/tests/frontend/meeting-transport.test.ts b/plugins/session-sharing/tests/frontend/meeting-transport.test.ts
deleted file mode 100644
index 166dd355b..000000000
--- a/plugins/session-sharing/tests/frontend/meeting-transport.test.ts
+++ /dev/null
@@ -1,29 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-
-const { pluginWsUrl } = vi.hoisted(() => ({ pluginWsUrl: vi.fn() }));
-vi.mock("@termix/plugin-sdk/ui", () => ({ pluginWsUrl }));
-import { wsTargetForPath } from "../../src/frontend/shared";
-
-describe("meeting event transport", () => {
-  it("preserves remote authentication protocols and event query parameters", async () => {
-    pluginWsUrl.mockResolvedValue({
-      url: "wss://server/base/plugin-ws/ssh-terminal/terminal",
-      protocols: ["jwt", "session-token"],
-    });
-    expect(
-      await wsTargetForPath(
-        "/plugin-ws/ssh-terminal/terminal?room=abc",
-        "remote",
-      ),
-    ).toEqual({
-      url: "wss://server/base/plugin-ws/ssh-terminal/terminal?room=abc",
-      protocols: ["jwt", "session-token"],
-    });
-    expect(pluginWsUrl).toHaveBeenCalledWith("ssh-terminal", "/terminal", {
-      origin: "remote",
-    });
-    expect(
-      await wsTargetForPath("https://another-server/ws", "remote"),
-    ).toBeNull();
-  });
-});
diff --git a/plugins/session-sharing/tests/frontend/presenter-takeover.test.ts b/plugins/session-sharing/tests/frontend/presenter-takeover.test.ts
deleted file mode 100644
index 539e8a6e1..000000000
--- a/plugins/session-sharing/tests/frontend/presenter-takeover.test.ts
+++ /dev/null
@@ -1,105 +0,0 @@
-/// <reference types="vite/client" />
-import ts from "typescript";
-import { describe, expect, it, vi } from "vitest";
-import roomSource from "../../src/frontend/CollabRoomTab.tsx?raw";
-
-// Run the room's real refresh callback across successive server snapshots.
-const source = ts.createSourceFile(
-  "CollabRoomTab.tsx",
-  roomSource,
-  ts.ScriptTarget.Latest,
-  true,
-  ts.ScriptKind.TSX,
-);
-let callback: string | undefined;
-function visit(node: ts.Node) {
-  if (
-    ts.isVariableDeclaration(node) &&
-    node.name.getText(source) === "refresh" &&
-    node.initializer &&
-    ts.isCallExpression(node.initializer)
-  ) {
-    callback = node.initializer.arguments[0].getText(source);
-  }
-  ts.forEachChild(node, visit);
-}
-visit(source);
-if (!callback) throw new Error("Missing room refresh callback");
-const refresh = new Function(
-  "state",
-  ts.transpileModule(
-    `
-  const { roomId, refreshSequence, presenterRef, stageKeyRef, draftRef,
-    getCollabRoom, getCollabStage, setDetail, setLoadError, setDraft,
-    setStage, getErrorMessage } = state;
-  return (${callback})();
-`,
-    { compilerOptions: { target: ts.ScriptTarget.ES2022 } },
-  ).outputText,
-) as (state: ReturnType<typeof fixture>) => Promise<void>;
-
-function snapshot(presenterUserId: string, shareId: string) {
-  return {
-    me: "alice",
-    stage: { presenterUserId, shareId },
-    controllerUserId: null,
-  };
-}
-
-function fixture() {
-  const state = {
-    roomId: "room",
-    refreshSequence: { current: 0 },
-    presenterRef: { current: null as string | null },
-    stageKeyRef: { current: null as string | null },
-    draftRef: { current: null as object | null },
-    getCollabRoom: vi.fn(async () => snapshot("alice", "alice-share")),
-    getCollabStage: vi.fn(async () => ({ stage: { shareId: "bob-share" } })),
-    setDetail: vi.fn(),
-    setLoadError: vi.fn(),
-    setDraft: vi.fn((draft: object | null) => {
-      state.draftRef.current = draft;
-    }),
-    setStage: vi.fn(),
-    getErrorMessage: String,
-  };
-  return state;
-}
-
-describe("meeting presenter takeover", () => {
-  it("replaces the previous presenter's local session with the new stage", async () => {
-    const state = fixture();
-    state.draftRef.current = { protocol: "ssh", host: { id: 1 } };
-    await refresh(state);
-    state.getCollabRoom.mockResolvedValue(snapshot("bob", "bob-share"));
-    await refresh(state);
-
-    expect(state.draftRef.current).toBeNull();
-    expect(state.setStage).toHaveBeenCalledWith({ shareId: "bob-share" });
-    expect(state.getCollabStage).toHaveBeenCalledWith("room");
-  });
-
-  it("keeps a new connection being prepared to take over another presenter", async () => {
-    const state = fixture();
-    state.getCollabRoom.mockResolvedValue(snapshot("bob", "bob-share"));
-    await refresh(state);
-    const draft = { protocol: "ssh", host: { id: 2 } };
-    state.draftRef.current = draft;
-    await refresh(state);
-
-    expect(state.draftRef.current).toBe(draft);
-    expect(state.setDraft).not.toHaveBeenCalled();
-  });
-
-  it("keeps the local session during ordinary room refreshes", async () => {
-    const state = fixture();
-    const draft = { protocol: "ssh", host: { id: 1 } };
-    state.draftRef.current = draft;
-    await refresh(state);
-    await refresh(state);
-
-    expect(state.draftRef.current).toBe(draft);
-    expect(state.getCollabStage).not.toHaveBeenCalled();
-    expect(state.setDraft).not.toHaveBeenCalled();
-  });
-});
diff --git a/plugins/session-sharing/tests/frontend/share-link-url.test.ts b/plugins/session-sharing/tests/frontend/share-link-url.test.ts
deleted file mode 100644
index d3716ebda..000000000
--- a/plugins/session-sharing/tests/frontend/share-link-url.test.ts
+++ /dev/null
@@ -1,38 +0,0 @@
-import { describe, expect, it } from "vitest";
-import type { TermixApp } from "@termix/plugin-sdk/frontend";
-import {
-  guestViewUrl,
-  sessionPublicUrl,
-} from "../../src/frontend/meeting-backend";
-
-function desktop(url: string | null): TermixApp {
-  return {
-    desktop: { available: true, remoteServerUrl: async () => url },
-  } as unknown as TermixApp;
-}
-
-describe("session share links", () => {
-  it("builds the link on the linked server for a remote session", async () => {
-    const base = await sessionPublicUrl(
-      desktop("https://termix.example/"),
-      "remote",
-    );
-    expect(guestViewUrl(base, "shared", "tok")).toBe(
-      "https://termix.example/?view=shared&token=tok",
-    );
-  });
-
-  it("gives no link for a session on the desktop's own backend", async () => {
-    expect(
-      await sessionPublicUrl(desktop("https://termix.example/"), "local"),
-    ).toBeNull();
-    expect(
-      guestViewUrl("file:///C:/app/index.html", "shared", "tok"),
-    ).toBeNull();
-  });
-
-  it("uses the page address in a browser", async () => {
-    const app = { desktop: { available: false } } as unknown as TermixApp;
-    expect(await sessionPublicUrl(app, undefined)).toBe(window.location.href);
-  });
-});
diff --git a/plugins/session-sharing/tsconfig.json b/plugins/session-sharing/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/session-sharing/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/session-sharing/vitest.config.ts b/plugins/session-sharing/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/session-sharing/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/snippets/CHANGELOG.md b/plugins/snippets/CHANGELOG.md
deleted file mode 100644
index 8774d7fe6..000000000
--- a/plugins/snippets/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Save commands and notes in folders, then run or paste them into a terminal. Snippets support variables and can be shared with other users or roles.
diff --git a/plugins/snippets/README.md b/plugins/snippets/README.md
deleted file mode 100644
index fe4a582b7..000000000
--- a/plugins/snippets/README.md
+++ /dev/null
@@ -1,39 +0,0 @@
-# Snippets
-
-Save commands and notes, then run or paste them into a terminal. Supports variables and sharing.
-
-## Features
-
-- Save commands and notes and sort them into folders.
-- Run a snippet or paste it into a terminal.
-- Use variables like `$HOST` and `$INPUT_1` that are filled in when the snippet runs.
-- Share snippets and folders with other users or roles.
-- Snippets sync between the desktop app and a server.
-
-## Settings
-
-### User
-
-- Collapse folders by default: start each folder closed when you open the Snippets panel.
-
-## Permissions
-
-- `snippets.view`: See your own and shared snippets. Admins and users have it by default.
-- `snippets.create`: Create snippets, notes and folders. Admins and users have it by default.
-- `snippets.edit`: Change snippets and folders. Admins and users have it by default.
-- `snippets.delete`: Delete snippets and folders. Admins and users have it by default.
-- `snippets.share`: Share snippets and folders. Admins and users have it by default.
-
-## Services
-
-Provides to other plugins:
-
-- `snippets.access`: read and run snippets.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/snippets/locales/en.json b/plugins/snippets/locales/en.json
deleted file mode 100644
index 2101cb3b7..000000000
--- a/plugins/snippets/locales/en.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Snippets"
-  },
-  "onboarding": {
-    "feature_snippets": "Snippets",
-    "feature_snippets_desc": "Save commands you run often and send them to a terminal in one click."
-  },
-  "permissions": {
-    "view": {
-      "title": "View snippets",
-      "description": "See your own snippets, notes and shared snippets."
-    },
-    "create": {
-      "title": "Create snippets",
-      "description": "Create new snippets, notes and folders."
-    },
-    "edit": {
-      "title": "Edit snippets",
-      "description": "Rename or change existing snippets and folders."
-    },
-    "delete": {
-      "title": "Delete snippets",
-      "description": "Delete snippets and folders."
-    },
-    "share": {
-      "title": "Share snippets",
-      "description": "Share snippets and folders with other users or roles."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Collapse folders by default",
-      "description": "Start each snippet folder collapsed when you open the Snippets panel."
-    },
-    "showCommands": {
-      "label": "Show commands",
-      "description": "Show the first line of each snippet's command under its name."
-    },
-    "confirmExecution": {
-      "label": "Confirm before running",
-      "description": "Ask before a command snippet runs in a terminal."
-    }
-  },
-  "cancel": "Cancel",
-  "loading": "Loading...",
-  "searchPlaceholder": "Search snippets",
-  "newFolder": "New folder",
-  "newSnippet": "New snippet",
-  "noFolder": "No folder",
-  "noSnippetsInFolder": "No snippets in this folder",
-  "noTerminalTabsOpen": "No terminal tab is open",
-  "run": "Run",
-  "pasteToTerminal": "Paste to terminal",
-  "copySuccess": "Copied to clipboard",
-  "importExport": "Import / Export",
-  "importFailed": "Failed to import snippets",
-  "nameLabel": "Name",
-  "namePlaceholder": "Snippet name",
-  "descriptionLabel": "Description",
-  "descriptionPlaceholder": "Optional description",
-  "folderLabel": "Folder",
-  "typeLabel": "Type",
-  "typeCommand": "Command",
-  "typeNote": "Note",
-  "commandLabel": "Command",
-  "commandPlaceholder": "Command to run, e.g. systemctl status $HOST",
-  "noteLabel": "Note",
-  "notePlaceholder": "Text to paste into the terminal",
-  "createSnippetTitle": "Create snippet",
-  "createSnippetButton": "Create snippet",
-  "createSuccess": "Snippet created",
-  "createFailed": "Failed to create snippet",
-  "editSnippetTitle": "Edit snippet",
-  "saveSnippetButton": "Save snippet",
-  "updateSuccess": "Snippet updated",
-  "updateFailed": "Failed to update snippet",
-  "deleteFailed": "Failed to delete snippet",
-  "createFolderTitle": "Create folder",
-  "createFolderButton": "Create folder",
-  "folderCreateSuccess": "Folder created",
-  "folderCreateFailed": "Failed to create folder",
-  "editFolderTitle": "Edit folder",
-  "saveFolderButton": "Save folder",
-  "folderEditSuccess": "Folder updated",
-  "folderEditFailed": "Failed to update folder",
-  "folderNameLabel": "Folder name",
-  "folderNamePlaceholder": "Folder name",
-  "folderIconLabel": "Icon",
-  "folderDeleteSuccess": "Folder deleted",
-  "folderDeleteFailed": "Failed to delete folder",
-  "confirmRunMessage": "Run \"{{name}}\"?",
-  "confirmRunButton": "Run",
-  "runSuccess": "Ran \"{{name}}\" on {{count}} terminal(s)",
-  "pasteSuccess": "Pasted \"{{name}}\" into {{count}} terminal(s)",
-  "admin": {
-    "tabTitle": "Snippets",
-    "count": "{{count}} snippets",
-    "add": "Add Snippet",
-    "namePlaceholder": "Snippet name",
-    "contentPlaceholder": "Command content",
-    "folderPlaceholder": "Folder (optional)",
-    "empty": "This user has no snippets",
-    "deleteConfirm": "Delete snippet \"{{name}}\" belonging to {{username}}?",
-    "deleted": "Snippet deleted",
-    "deleteFailed": "Failed to delete snippet",
-    "requiredFields": "Snippet name and content are required",
-    "saved": "Snippet saved",
-    "saveFailed": "Failed to save snippet",
-    "saving": "Saving...",
-    "save": "Save"
-  },
-  "backToSnippets": "Back to snippets",
-  "settingsTitle": "Snippet settings",
-  "settingsDisplayTitle": "Display",
-  "settingsBehaviorTitle": "Behavior",
-  "typeCommandHint": "Runs in the active terminal.",
-  "typeNoteHint": "Pastes into the active terminal without running.",
-  "variablesHint": "Variables: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Label}",
-  "doubleClickToRun": "Double click to run",
-  "sharedBadge": "Shared",
-  "copyToClipboard": "Copy to clipboard",
-  "copyFailed": "Failed to copy to clipboard",
-  "moreOptions": "More options",
-  "moreActions": "More actions",
-  "moveToFolder": "Move to folder",
-  "deleteSnippet": "Delete snippet",
-  "deleteSnippetConfirm": "Delete snippet \"{{name}}\"?",
-  "deleteSuccess": "Snippet deleted",
-  "delete": "Delete",
-  "folderActions": "Folder actions",
-  "addSnippetHere": "New snippet here",
-  "deleteFolder": "Delete folder",
-  "deleteFolderConfirm": "Delete folder \"{{name}}\"? Its snippets move out of the folder.",
-  "createFolderDescription": "Group related snippets together.",
-  "editFolderDescription": "Change this folder's name, color or icon.",
-  "folderColorLabel": "Color",
-  "loadFailed": "Failed to load snippets",
-  "importSkipExisting": "Import (skip existing)",
-  "importOverwrite": "Import (overwrite existing)",
-  "importInvalidFile": "That file is not a valid snippets export",
-  "importSuccess": "Imported {{imported}}, updated {{updated}}, skipped {{skipped}}",
-  "exportSnippets": "Export snippets",
-  "exportSuccess": "Snippets exported",
-  "exportFailed": "Failed to export snippets",
-  "expandAll": "Expand all folders",
-  "collapseAll": "Collapse all folders",
-  "docsLink": "Documentation",
-  "clearSearch": "Clear search",
-  "noSearchResults": "No snippets match your search",
-  "emptyTitle": "No snippets yet",
-  "emptyDescription": "Save commands you run often, then run them in a terminal with one click.",
-  "shareSnippet": "Share snippet",
-  "shareFolder": "Share folder",
-  "shareExpiry": "Expires",
-  "shareExpiryOptions": {
-    "h0": "Never",
-    "h1": "In 1 hour",
-    "h24": "In 1 day",
-    "h168": "In 7 days",
-    "h720": "In 30 days"
-  },
-  "shareButton": "Share",
-  "shareSuccess": "Shared with {{count}}",
-  "shareFailed": "Failed to share",
-  "shareLoadFailed": "Failed to load sharing details",
-  "currentAccess": "Current access",
-  "notSharedYet": "Not shared with anyone yet",
-  "revokeAccess": "Revoke",
-  "revokeSuccess": "Access revoked",
-  "revokeFailed": "Failed to revoke access",
-  "close": "Close",
-  "targetHostsLabel": "Target hosts",
-  "targetHostsHint": "Pick hosts to run this command on directly, without a terminal open. Leave empty to run it in the active terminal.",
-  "clearTargetHosts": "Clear",
-  "noHostsAvailable": "No hosts available",
-  "searchHosts": "Search hosts",
-  "runOnTargets": "Run on target hosts",
-  "executionResultTitle": "Results for \"{{name}}\"",
-  "executionResultDescription": "Output from each target host.",
-  "executionSuccess": "Success",
-  "executionFailed": "Failed",
-  "directRunSuccess": "Ran \"{{name}}\" on {{count}} host(s)",
-  "directRunPartialFail": "\"{{name}}\" failed on some hosts",
-  "reorderFailed": "Failed to reorder snippets",
-  "dropToRemoveFromFolder": "Drop here to move out of the folder",
-  "shareSnippetTitle": "Share \"{{name}}\"",
-  "shareFolderTitle": "Share folder \"{{name}}\"",
-  "shareWith": "Share with",
-  "usersTab": "Users",
-  "rolesTab": "Roles",
-  "shareSearchPlaceholder": "Search users or roles",
-  "shareNoMatches": "No matches",
-  "shareWithCount": "Share with {{count}}",
-  "shareFolderHint": "Shares every snippet in this folder. Snippets added later are not shared automatically.",
-  "shareFolderSummary": "Shared {{count}} snippet(s) in this folder",
-  "grantedBy": "Granted by",
-  "expired": "Expired",
-  "variablesDialogTitle": "Run \"{{name}}\"",
-  "variablesDialogDescription": "Fill in the values this snippet needs before running it.",
-  "variablesPreviewLabel": "Preview",
-  "variablesConfirmButton": "Run",
-  "keybindings": {
-    "runSnippet": "Run existing snippet",
-    "snippetLabel": "Snippet",
-    "selectSnippet": "Select a snippet",
-    "snippetMissing": "snippet not found",
-    "snippetRequired": "Select a snippet"
-  },
-  "paletteHintRun": "Run in the active terminal tab",
-  "host": {
-    "startupTitle": "Startup Snippet",
-    "quickActionsTitle": "Quick Actions",
-    "quickActionsDescription": "Quick actions appear as buttons in the Host Metrics toolbar for one-click command execution.",
-    "noQuickActions": "No quick actions yet.",
-    "buttonLabel": "Button label",
-    "selectSnippet": "Select snippet...",
-    "addQuickAction": "Add Action",
-    "tabTitle": "Snippets",
-    "startupDescription": "Runs in the terminal each time it connects to this host. Variables like $HOST are filled in; a snippet that asks for inputs is skipped.",
-    "none": "None",
-    "removeQuickAction": "Remove quick action"
-  },
-  "quickActions": {
-    "running": "Executing {{name}}...",
-    "succeeded": "{{name}} completed successfully",
-    "failed": "{{name}} failed",
-    "error": "Failed to execute {{name}}"
-  },
-  "paletteHintPaste": "Paste in the active terminal tab",
-  "targetTerminals": "Run in",
-  "targetTerminalsHint": "optional, else the active tab",
-  "selectAll": "All",
-  "selectNone": "None",
-  "plugin": {
-    "name": "Snippets"
-  }
-}
diff --git a/plugins/snippets/locales/translated/af_ZA.json b/plugins/snippets/locales/translated/af_ZA.json
deleted file mode 100644
index a039b57a0..000000000
--- a/plugins/snippets/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Brokkies"
-  },
-  "onboarding": {
-    "feature_snippets": "Brokkies",
-    "feature_snippets_desc": "Stoor opdragte wat jy gereeld uitvoer en stuur dit met een klik na 'n terminaal."
-  },
-  "permissions": {
-    "view": {
-      "title": "Bekyk brokkies",
-      "description": "Sien jou eie brokkies, notas en gedeelde brokkies."
-    },
-    "create": {
-      "title": "Skep brokkies",
-      "description": "Skep nuwe brokkies, notas en gidse."
-    },
-    "edit": {
-      "title": "Wysig brokkies",
-      "description": "Hernoem of verander bestaande brokkies en gidse."
-    },
-    "delete": {
-      "title": "Vee brokkies uit",
-      "description": "Vee brokkies en gidse uit."
-    },
-    "share": {
-      "title": "Deel brokkies",
-      "description": "Deel brokkies en gidse met ander gebruikers of rolle."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Vou vouers standaard in",
-      "description": "Begin elke brokkie-vouer ingevou wanneer jy die Brokkie-paneel oopmaak."
-    },
-    "showCommands": {
-      "label": "Wys bevele",
-      "description": "Wys die eerste reël van elke brokkie se opdrag onder sy naam."
-    },
-    "confirmExecution": {
-      "label": "Bevestig voor uitvoering",
-      "description": "Vra voordat 'n opdragbrokkie in 'n terminaal loop."
-    }
-  },
-  "cancel": "Kanselleer",
-  "loading": "Laai tans...",
-  "searchPlaceholder": "Soekbrokkies",
-  "newFolder": "Nuwe vouer",
-  "newSnippet": "Nuwe brokkie",
-  "noFolder": "Geen vouer nie",
-  "noSnippetsInFolder": "Geen brokkies in hierdie vouer nie",
-  "noTerminalTabsOpen": "Geen terminaal-oortjie is oop nie",
-  "run": "Hardloop",
-  "pasteToTerminal": "Plak na terminaal",
-  "copySuccess": "Na knipbord gekopieer",
-  "importExport": "Invoer / Uitvoer",
-  "importFailed": "Kon nie brokkies invoer nie",
-  "nameLabel": "Naam",
-  "namePlaceholder": "Brokkie naam",
-  "descriptionLabel": "Beskrywing",
-  "descriptionPlaceholder": "Opsionele beskrywing",
-  "folderLabel": "Vouer",
-  "typeLabel": "Tipe",
-  "typeCommand": "Bevel",
-  "typeNote": "Nota",
-  "commandLabel": "Bevel",
-  "commandPlaceholder": "Opdrag om uit te voer, bv. systemctl status $HOST",
-  "noteLabel": "Nota",
-  "notePlaceholder": "Teks om in die terminaal te plak",
-  "createSnippetTitle": "Skep brokkie",
-  "createSnippetButton": "Skep brokkie",
-  "createSuccess": "Brokkie geskep",
-  "createFailed": "Kon nie brokkie skep nie",
-  "editSnippetTitle": "Wysig brokkie",
-  "saveSnippetButton": "Stoor brokkie",
-  "updateSuccess": "Brokkie opgedateer",
-  "updateFailed": "Kon nie die brokkie opdateer nie",
-  "deleteFailed": "Kon nie fragment uitvee nie",
-  "createFolderTitle": "Skep vouer",
-  "createFolderButton": "Skep vouer",
-  "folderCreateSuccess": "Vouer geskep",
-  "folderCreateFailed": "Kon nie vouer skep nie",
-  "editFolderTitle": "Wysig vouer",
-  "saveFolderButton": "Stoor vouer",
-  "folderEditSuccess": "Vouer opgedateer",
-  "folderEditFailed": "Kon nie vouer opdateer nie",
-  "folderNameLabel": "Lêernaam",
-  "folderNamePlaceholder": "Lêernaam",
-  "folderIconLabel": "Ikoon",
-  "folderDeleteSuccess": "Vouer uitgevee",
-  "folderDeleteFailed": "Kon nie vouer uitvee nie",
-  "confirmRunMessage": "Begin \"{{name}}\"?",
-  "confirmRunButton": "Hardloop",
-  "runSuccess": "Het \"{{name}}\" op {{count}} terminaal(e) uitgevoer",
-  "pasteSuccess": "Het \"{{name}}\" in {{count}} terminaal(e) geplak",
-  "admin": {
-    "tabTitle": "Brokkies",
-    "count": "{{count}} brokkies",
-    "add": "Voeg brokkie by",
-    "namePlaceholder": "Brokkie naam",
-    "contentPlaceholder": "Opdraginhoud",
-    "folderPlaceholder": "Vouer (opsioneel)",
-    "empty": "Hierdie gebruiker het geen brokkies nie",
-    "deleteConfirm": "Vee die brokkie \"{{name}}\" uit wat aan {{username}} behoort?",
-    "deleted": "Brokkie uitgevee",
-    "deleteFailed": "Kon nie fragment uitvee nie",
-    "requiredFields": "Brokkienaam en inhoud word vereis",
-    "saved": "Brokkie gestoor",
-    "saveFailed": "Kon nie die brokkie stoor nie",
-    "saving": "Stoor...",
-    "save": "Stoor"
-  },
-  "backToSnippets": "Terug na brokkies",
-  "settingsTitle": "Brokkie-instellings",
-  "settingsDisplayTitle": "Vertoon",
-  "settingsBehaviorTitle": "Gedrag",
-  "typeCommandHint": "Loop in die aktiewe terminaal.",
-  "typeNoteHint": "Plak in die aktiewe terminaal sonder om te loop.",
-  "variablesHint": "Veranderlikes: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Etiket}",
-  "doubleClickToRun": "Dubbelklik om te hardloop",
-  "sharedBadge": "Gedeel",
-  "copyToClipboard": "Kopieer na knipbord",
-  "copyFailed": "Kon nie na knipbord kopieer nie",
-  "moreOptions": "Meer opsies",
-  "moreActions": "Meer aksies",
-  "moveToFolder": "Skuif na vouer",
-  "deleteSnippet": "Vee uittreksel uit",
-  "deleteSnippetConfirm": "Vee die brokkie \"{{name}} \" uit?",
-  "deleteSuccess": "Brokkie uitgevee",
-  "delete": "Vee uit",
-  "folderActions": "Voueraksies",
-  "addSnippetHere": "Nuwe stukkie hier",
-  "deleteFolder": "Vee vouer uit",
-  "deleteFolderConfirm": "Vee vouer \"{{name}}\" uit? Die brokkies skuif uit die vouer.",
-  "createFolderDescription": "Groepeer verwante brokkies saam.",
-  "editFolderDescription": "Verander hierdie vouer se naam, kleur of ikoon.",
-  "folderColorLabel": "Kleur",
-  "loadFailed": "Kon nie brokkies laai nie",
-  "importSkipExisting": "Invoer (slaan bestaande oor)",
-  "importOverwrite": "Invoer (oorskryf bestaande)",
-  "importInvalidFile": "Daardie lêer is nie 'n geldige uitvoer van brokkies nie",
-  "importSuccess": "Ingevoer {{imported}}, opgedateer {{updated}}, oorgeslaan {{skipped}}",
-  "exportSnippets": "Uitvoer brokkies",
-  "exportSuccess": "Uitgesnyde stukkies uitgevoer",
-  "exportFailed": "Kon nie brokkies uitvoer nie",
-  "expandAll": "Vou alle vouers uit",
-  "collapseAll": "Vou alle vouers in",
-  "docsLink": "Dokumentasie",
-  "clearSearch": "Vee soektog uit",
-  "noSearchResults": "Geen brokkies stem ooreen met jou soektog nie",
-  "emptyTitle": "Geen brokkies nog nie",
-  "emptyDescription": "Stoor opdragte wat jy gereeld uitvoer, en voer hulle dan met een klik in 'n terminaal uit.",
-  "shareSnippet": "Deel brokkie",
-  "shareFolder": "Deel vouer",
-  "shareExpiry": "Vervaldatum",
-  "shareExpiryOptions": {
-    "h0": "Nooit",
-    "h1": "Oor 1 uur",
-    "h24": "Oor 1 dag",
-    "h168": "Oor 7 dae",
-    "h720": "Oor 30 dae"
-  },
-  "shareButton": "Deel",
-  "shareSuccess": "Gedeel met {{count}}",
-  "shareFailed": "Kon nie deel nie",
-  "shareLoadFailed": "Kon nie deelbesonderhede laai nie",
-  "currentAccess": "Huidige toegang",
-  "notSharedYet": "Nog nie met enigiemand gedeel nie",
-  "revokeAccess": "Herroep",
-  "revokeSuccess": "Toegang herroep",
-  "revokeFailed": "Kon nie toegang herroep nie",
-  "close": "Maak toe",
-  "targetHostsLabel": "Teikengashere",
-  "targetHostsHint": "Kies gashere om hierdie opdrag direk op uit te voer, sonder 'n terminaal oop. Los leeg om dit in die aktiewe terminaal uit te voer.",
-  "clearTargetHosts": "Duidelik",
-  "noHostsAvailable": "Geen gashere beskikbaar nie",
-  "searchHosts": "Soek gashere",
-  "runOnTargets": "Begin op teikengashere",
-  "executionResultTitle": "Resultate vir \"{{name}}\"",
-  "executionResultDescription": "Uitvoer van elke teikengasheer.",
-  "executionSuccess": "Sukses",
-  "executionFailed": "Misluk",
-  "directRunSuccess": "Het \"{{name}}\" op {{count}} gasheer(s) uitgevoer",
-  "directRunPartialFail": "\"{{name}}\" het op sommige gashere misluk",
-  "reorderFailed": "Kon nie brokkies herrangskik nie",
-  "dropToRemoveFromFolder": "Laat val hier om uit die vouer te skuif",
-  "shareSnippetTitle": "Deel \"{{name}}\"",
-  "shareFolderTitle": "Deel vouer \"{{name}}\"",
-  "shareWith": "Deel met",
-  "usersTab": "Gebruikers",
-  "rolesTab": "Rolle",
-  "shareSearchPlaceholder": "Soek gebruikers of rolle",
-  "shareNoMatches": "Geen ooreenkomste nie",
-  "shareWithCount": "Deel met {{count}}",
-  "shareFolderHint": "Deel elke brokkie in hierdie vouer. Brokkies wat later bygevoeg word, word nie outomaties gedeel nie.",
-  "shareFolderSummary": "Gedeelde {{count}} brokkie(s) in hierdie vouer",
-  "grantedBy": "Toegeken deur",
-  "expired": "Verstryk",
-  "variablesDialogTitle": "Begin \"{{name}}\"",
-  "variablesDialogDescription": "Vul die waardes in wat hierdie brokkie benodig voordat dit uitgevoer word.",
-  "variablesPreviewLabel": "Voorskou",
-  "variablesConfirmButton": "Hardloop",
-  "keybindings": {
-    "runSnippet": "Voer bestaande brokkie uit",
-    "snippetLabel": "Brokkie",
-    "selectSnippet": "Kies 'n uittreksel",
-    "snippetMissing": "brokkie nie gevind nie",
-    "snippetRequired": "Kies 'n uittreksel"
-  },
-  "paletteHintRun": "Begin in die aktiewe terminaal-oortjie",
-  "host": {
-    "startupTitle": "Opstart-brokkie",
-    "quickActionsTitle": "Vinnige Aksies",
-    "quickActionsDescription": "Vinnige aksies verskyn as knoppies in die Host Metrics-nutsbalk vir die uitvoering van opdragte met een klik.",
-    "noQuickActions": "Geen vinnige aksies nog nie.",
-    "buttonLabel": "Knoppie-etiket",
-    "selectSnippet": "Kies uittreksel...",
-    "addQuickAction": "Voeg Aksie by",
-    "tabTitle": "Brokkies",
-    "startupDescription": "Loop in die terminaal elke keer as dit aan hierdie gasheer koppel. Veranderlikes soos $HOST word ingevul; 'n brokkie wat om insette vra, word oorgeslaan.",
-    "none": "Geen",
-    "removeQuickAction": "Verwyder vinnige aksie"
-  },
-  "quickActions": {
-    "running": "Voer tans {{name}} uit ...",
-    "succeeded": "{{name}} suksesvol voltooi",
-    "failed": "{{name}} het misluk",
-    "error": "Kon nie {{name}} uitvoer nie"
-  },
-  "paletteHintPaste": "Plak in die aktiewe terminaal-oortjie",
-  "targetTerminals": "Hardloop in",
-  "targetTerminalsHint": "opsioneel, anders die aktiewe oortjie",
-  "selectAll": "Alles",
-  "selectNone": "Geen",
-  "plugin": {
-    "name": "Brokkies"
-  }
-}
diff --git a/plugins/snippets/locales/translated/ar_SA.json b/plugins/snippets/locales/translated/ar_SA.json
deleted file mode 100644
index 64010b74c..000000000
--- a/plugins/snippets/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "المقتطفات"
-  },
-  "onboarding": {
-    "feature_snippets": "المقتطفات",
-    "feature_snippets_desc": "احفظ الأوامر التي تقوم بتشغيلها بشكل متكرر وأرسلها إلى الطرفية بنقرة واحدة."
-  },
-  "permissions": {
-    "view": {
-      "title": "عرض مقتطفات",
-      "description": "اطلع على مقتطفاتك وملاحظاتك ومقتطفاتك المشتركة."
-    },
-    "create": {
-      "title": "إنشاء مقتطفات",
-      "description": "أنشئ مقتطفات وملاحظات ومجلدات جديدة."
-    },
-    "edit": {
-      "title": "تعديل المقتطفات",
-      "description": "أعد تسمية أو تغيير المقتطفات والمجلدات الموجودة."
-    },
-    "delete": {
-      "title": "حذف المقتطفات",
-      "description": "احذف المقاطع والمجلدات."
-    },
-    "share": {
-      "title": "مشاركة مقتطفات",
-      "description": "مشاركة المقتطفات والمجلدات مع مستخدمين أو أدوار أخرى."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "طي المجلدات افتراضيًا",
-      "description": "ابدأ تشغيل كل مجلد من مجلدات المقتطفات وهو مطوي عند فتح لوحة المقتطفات."
-    },
-    "showCommands": {
-      "label": "عرض الأوامر",
-      "description": "اعرض السطر الأول من أمر كل جزء من التعليمات البرمجية أسفل اسمه."
-    },
-    "confirmExecution": {
-      "label": "تأكد قبل التشغيل",
-      "description": "اسأل قبل تشغيل أي جزء من الأوامر في الطرفية."
-    }
-  },
-  "cancel": "إلغاء",
-  "loading": "جارٍ التحميل...",
-  "searchPlaceholder": "ابحث في المقتطفات",
-  "newFolder": "مجلد جديد",
-  "newSnippet": "مقتطف جديد",
-  "noFolder": "بدون مجلد",
-  "noSnippetsInFolder": "لا توجد مقتطفات في هذا المجلد",
-  "noTerminalTabsOpen": "لا توجد علامة تبويب طرفية مفتوحة",
-  "run": "تشغيل",
-  "pasteToTerminal": "الصقه في الطرفية",
-  "copySuccess": "تم النسخ إلى الحافظة",
-  "importExport": "استيراد / تصدير",
-  "importFailed": "فشل استيراد الأجزاء البرمجية",
-  "nameLabel": "الاسم",
-  "namePlaceholder": "اسم المقتطف",
-  "descriptionLabel": "الوصف",
-  "descriptionPlaceholder": "وصف اختياري",
-  "folderLabel": "مجلد",
-  "typeLabel": "النوع",
-  "typeCommand": "الأمر",
-  "typeNote": "ملحوظة",
-  "commandLabel": "الأمر",
-  "commandPlaceholder": "الأمر المراد تنفيذه، على سبيل المثال: systemctl status $HOST",
-  "noteLabel": "ملحوظة",
-  "notePlaceholder": "نص للصقه في الطرفية",
-  "createSnippetTitle": "إنشاء مقتطف",
-  "createSnippetButton": "إنشاء مقتطف",
-  "createSuccess": "تم إنشاء المقتطف",
-  "createFailed": "فشل إنشاء المقتطف",
-  "editSnippetTitle": "تعديل المقتطف",
-  "saveSnippetButton": "حفظ المقتطف",
-  "updateSuccess": "تم تحديث المقتطف",
-  "updateFailed": "فشل تحديث المقتطف",
-  "deleteFailed": "فشل حذف المقتطف",
-  "createFolderTitle": "إنشاء مجلد",
-  "createFolderButton": "إنشاء مجلد",
-  "folderCreateSuccess": "تم إنشاء المجلد",
-  "folderCreateFailed": "فشل إنشاء المجلد",
-  "editFolderTitle": "تحرير المجلد",
-  "saveFolderButton": "حفظ المجلد",
-  "folderEditSuccess": "تم تحديث المجلد",
-  "folderEditFailed": "فشل تحديث المجلد",
-  "folderNameLabel": "اسم المجلد",
-  "folderNamePlaceholder": "اسم المجلد",
-  "folderIconLabel": "أيقونة",
-  "folderDeleteSuccess": "تم حذف المجلد",
-  "folderDeleteFailed": "فشل حذف المجلد",
-  "confirmRunMessage": "تشغيل \"{{name}}\"؟",
-  "confirmRunButton": "تشغيل",
-  "runSuccess": "تم تشغيل الأمر \"{{name}}\" على الجهاز الطرفي {{count}}",
-  "pasteSuccess": "تم لصق \"{{name}}\" في {{count}} طرفية (أطراف)",
-  "admin": {
-    "tabTitle": "المقتطفات",
-    "count": "{{count}} مقتطفات",
-    "add": "إضافة مقتطف",
-    "namePlaceholder": "اسم المقتطف",
-    "contentPlaceholder": "محتوى الأمر",
-    "folderPlaceholder": "المجلد (اختياري)",
-    "empty": "هذا المستخدم ليس لديه مقتطفات",
-    "deleteConfirm": "حذف المقتطف \"{{name}}\" الخاص بـ {{username}}؟",
-    "deleted": "تم حذف المقتطف",
-    "deleteFailed": "فشل حذف المقتطف",
-    "requiredFields": "اسم المقتطف والمحتوى مطلوبان",
-    "saved": "تم حفظ المقتطف",
-    "saveFailed": "فشل حفظ المقتطف",
-    "saving": "جارٍ الحفظ...",
-    "save": "حفظ"
-  },
-  "backToSnippets": "العودة إلى المقتطفات",
-  "settingsTitle": "إعدادات المقتطف",
-  "settingsDisplayTitle": "عرض",
-  "settingsBehaviorTitle": "السلوك",
-  "typeCommandHint": "يعمل في الطرفية النشطة.",
-  "typeNoteHint": "يلصق في الطرفية النشطة دون تشغيلها.",
-  "variablesHint": "المتغيرات: $HOST، $USER، $PORT، $NAME، ${INPUT_1:Label}",
-  "doubleClickToRun": "انقر نقراً مزدوجاً للتشغيل",
-  "sharedBadge": "مشترك",
-  "copyToClipboard": "انسخ إلى الحافظة",
-  "copyFailed": "فشل النسخ إلى الحافظة",
-  "moreOptions": "خيارات إضافية",
-  "moreActions": "إجراءات أخرى",
-  "moveToFolder": "نقل إلى المجلد",
-  "deleteSnippet": "حذف المقتطف",
-  "deleteSnippetConfirm": "حذف المقتطف \"{{name}}\"؟",
-  "deleteSuccess": "تم حذف المقتطف",
-  "delete": "حذف",
-  "folderActions": "إجراءات المجلد",
-  "addSnippetHere": "مقتطف جديد هنا",
-  "deleteFolder": "حذف المجلد",
-  "deleteFolderConfirm": "حذف المجلد \"{{name}}\"؟ ستنتقل مقتطفاته خارج المجلد.",
-  "createFolderDescription": "قم بتجميع المقتطفات ذات الصلة معًا.",
-  "editFolderDescription": "قم بتغيير اسم هذا المجلد أو لونه أو أيقونته.",
-  "folderColorLabel": "اللون",
-  "loadFailed": "فشل تحميل المقتطفات",
-  "importSkipExisting": "استيراد (تخطّي الموجود)",
-  "importOverwrite": "استيراد (استبدال الموجود)",
-  "importInvalidFile": "هذا الملف ليس ملف تصدير مقتطفات صالحًا",
-  "importSuccess": "تم الاستيراد {{imported}}، تم التحديث {{updated}}، تم التخطي {{skipped}}",
-  "exportSnippets": "مقتطفات التصدير",
-  "exportSuccess": "تم تصدير مقتطفات",
-  "exportFailed": "فشل تصدير الأجزاء البرمجية",
-  "expandAll": "توسيع جميع المجلدات",
-  "collapseAll": "طي جميع المجلدات",
-  "docsLink": "الوثائق",
-  "clearSearch": "مسح البحث",
-  "noSearchResults": "لم يتم العثور على أي نتائج مطابقة لبحثك",
-  "emptyTitle": "لا توجد مقتطفات حتى الآن",
-  "emptyDescription": "احفظ الأوامر التي تقوم بتشغيلها بشكل متكرر، ثم قم بتشغيلها في الطرفية بنقرة واحدة.",
-  "shareSnippet": "مشاركة المقتطف",
-  "shareFolder": "مجلد مشترك",
-  "shareExpiry": "ينتهي",
-  "shareExpiryOptions": {
-    "h0": "أبدًا",
-    "h1": "في غضون ساعة واحدة",
-    "h24": "في يوم واحد",
-    "h168": "في غضون 7 أيام",
-    "h720": "خلال 30 يومًا"
-  },
-  "shareButton": "مشاركة",
-  "shareSuccess": "تمت المشاركة مع {{count}}",
-  "shareFailed": "فشل في المشاركة",
-  "shareLoadFailed": "فشل تحميل تفاصيل المشاركة",
-  "currentAccess": "الوصول الحالي",
-  "notSharedYet": "لم تتم مشاركتها مع أي شخص حتى الآن",
-  "revokeAccess": "إبطال",
-  "revokeSuccess": "تم إبطال الوصول",
-  "revokeFailed": "فشل إبطال الوصول",
-  "close": "إغلاق",
-  "targetHostsLabel": "المضيفون المستهدفون",
-  "targetHostsHint": "اختر الأجهزة التي تريد تشغيل هذا الأمر عليها مباشرةً، دون فتح نافذة طرفية. اترك الحقل فارغًا لتشغيله في نافذة الطرفية النشطة.",
-  "clearTargetHosts": "مسح",
-  "noHostsAvailable": "لا يوجد مضيفون متاحون",
-  "searchHosts": "ابحث عن مضيفين",
-  "runOnTargets": "تشغيل على المضيفين المستهدفين",
-  "executionResultTitle": "نتائج البحث عن \"{{name}}\"",
-  "executionResultDescription": "مخرجات كل مضيف مستهدف.",
-  "executionSuccess": "نجاح",
-  "executionFailed": "فشل",
-  "directRunSuccess": "تم تشغيل \"{{name}}\" على {{count}} مضيف",
-  "directRunPartialFail": "فشلت عبارة \"{{name}}\" على بعض المضيفين",
-  "reorderFailed": "فشل في إعادة ترتيب المقاطع",
-  "dropToRemoveFromFolder": "أسقط هنا لنقل الملف خارج المجلد",
-  "shareSnippetTitle": "شارك \"{{name}}\"",
-  "shareFolderTitle": "مجلد المشاركة \"{{name}}\"",
-  "shareWith": "مشاركة مع",
-  "usersTab": "المستخدمون",
-  "rolesTab": "الأدوار",
-  "shareSearchPlaceholder": "البحث عن مستخدمين أو أدوار",
-  "shareNoMatches": "لا توجد نتائج",
-  "shareWithCount": "شارك مع {{count}}",
-  "shareFolderHint": "يشارك هذا المجلد جميع المقاطع البرمجية الموجودة فيه. أما المقاطع البرمجية التي تُضاف لاحقاً فلا تتم مشاركتها تلقائياً.",
-  "shareFolderSummary": "مقتطفات مشتركة {{count}} في هذا المجلد",
-  "grantedBy": "ممنوح بواسطة",
-  "expired": "منتهية",
-  "variablesDialogTitle": "تشغيل \"{{name}}\"",
-  "variablesDialogDescription": "أدخل القيم التي يحتاجها هذا المقتطف البرمجي قبل تشغيله.",
-  "variablesPreviewLabel": "معاينة",
-  "variablesConfirmButton": "تشغيل",
-  "keybindings": {
-    "runSnippet": "تشغيل المقتطف البرمجي الحالي",
-    "snippetLabel": "مقتطف",
-    "selectSnippet": "حدد جزءًا من التعليمات البرمجية",
-    "snippetMissing": "لم يتم العثور على المقتطف",
-    "snippetRequired": "حدد جزءًا من التعليمات البرمجية"
-  },
-  "paletteHintRun": "قم بتشغيله في علامة تبويب الطرفية النشطة",
-  "host": {
-    "startupTitle": "مقتطف بدء التشغيل",
-    "quickActionsTitle": "إجراءات سريعة",
-    "quickActionsDescription": "تظهر الإجراءات السريعة كأزرار في شريط أدوات مقاييس المضيف لتنفيذ الأوامر بنقرة واحدة.",
-    "noQuickActions": "لا توجد إجراءات سريعة بعد.",
-    "buttonLabel": "تسمية الزر",
-    "selectSnippet": "اختر مقتطفًا...",
-    "addQuickAction": "إضافة إجراء",
-    "tabTitle": "المقتطفات",
-    "startupDescription": "يتم تشغيله في الطرفية في كل مرة يتصل فيها بهذا المضيف. يتم ملء متغيرات مثل $HOST ؛ ويتم تخطي جزء يطلب إدخالات.",
-    "none": "لا شيء",
-    "removeQuickAction": "إزالة الإجراء السريع"
-  },
-  "quickActions": {
-    "running": "جارٍ تنفيذ {{name}}...",
-    "succeeded": "تم إكمال {{name}} بنجاح",
-    "failed": "فشل {{name}}",
-    "error": "فشل تنفيذ {{name}}"
-  },
-  "paletteHintPaste": "الصقي في علامة تبويب الطرفية النشطة",
-  "targetTerminals": "اركض",
-  "targetTerminalsHint": "اختياري، وإلا ستكون علامة التبويب النشطة",
-  "selectAll": "الكل",
-  "selectNone": "لا شيء",
-  "plugin": {
-    "name": "المقتطفات"
-  }
-}
diff --git a/plugins/snippets/locales/translated/bg_BG.json b/plugins/snippets/locales/translated/bg_BG.json
deleted file mode 100644
index 9eb3ed7aa..000000000
--- a/plugins/snippets/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Откъси"
-  },
-  "onboarding": {
-    "feature_snippets": "Откъси",
-    "feature_snippets_desc": "Запазвайте команди, които изпълнявате често, и ги изпращайте към терминал с едно щракване."
-  },
-  "permissions": {
-    "view": {
-      "title": "Преглед на фрагменти",
-      "description": "Вижте вашите собствени фрагменти, бележки и споделени фрагменти."
-    },
-    "create": {
-      "title": "Създаване на фрагменти",
-      "description": "Създавайте нови фрагменти, бележки и папки."
-    },
-    "edit": {
-      "title": "Редактиране на фрагменти",
-      "description": "Преименувайте или променете съществуващи фрагменти и папки."
-    },
-    "delete": {
-      "title": "Изтриване на фрагменти",
-      "description": "Изтрийте фрагменти и папки."
-    },
-    "share": {
-      "title": "Споделяне на фрагменти",
-      "description": "Споделяйте фрагменти и папки с други потребители или роли."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Свиване на папките по подразбиране",
-      "description": "Започнете всяка папка с фрагменти свита, когато отворите панела „Фрагменти“."
-    },
-    "showCommands": {
-      "label": "Показване на команди",
-      "description": "Покажете първия ред от командата на всеки фрагмент под неговото име."
-    },
-    "confirmExecution": {
-      "label": "Потвърдете преди стартиране",
-      "description": "Попитай преди изпълнението на фрагмент от команда в терминал."
-    }
-  },
-  "cancel": "Отказ",
-  "loading": "Зареждане...",
-  "searchPlaceholder": "Търсене на фрагменти",
-  "newFolder": "Нова папка",
-  "newSnippet": "Нов фрагмент",
-  "noFolder": "Няма папка",
-  "noSnippetsInFolder": "Няма фрагменти в тази папка",
-  "noTerminalTabsOpen": "Няма отворен раздел на терминала",
-  "run": "Бягане",
-  "pasteToTerminal": "Поставяне в терминала",
-  "copySuccess": "Копирано в буферната памет",
-  "importExport": "Внос / Износ",
-  "importFailed": "Импортирането на фрагменти не бе успешно",
-  "nameLabel": "Име",
-  "namePlaceholder": "Име на фрагмента",
-  "descriptionLabel": "Описание",
-  "descriptionPlaceholder": "Незадължително описание",
-  "folderLabel": "Папка",
-  "typeLabel": "Тип",
-  "typeCommand": "Команда",
-  "typeNote": "Забележка",
-  "commandLabel": "Команда",
-  "commandPlaceholder": "Команда за изпълнение, например systemctl status $HOST",
-  "noteLabel": "Забележка",
-  "notePlaceholder": "Текст за поставяне в терминала",
-  "createSnippetTitle": "Създаване на фрагмент",
-  "createSnippetButton": "Създаване на фрагмент",
-  "createSuccess": "Фрагментът е създаден",
-  "createFailed": "Създаването на фрагмент не бе успешно",
-  "editSnippetTitle": "Редактиране на фрагмент",
-  "saveSnippetButton": "Запазване на фрагмент",
-  "updateSuccess": "Фрагментът е актуализиран",
-  "updateFailed": "Актуализирането на фрагмента не бе успешно",
-  "deleteFailed": "Изтриването на фрагмента не бе успешно",
-  "createFolderTitle": "Създаване на папка",
-  "createFolderButton": "Създаване на папка",
-  "folderCreateSuccess": "Папката е създадена",
-  "folderCreateFailed": "Създаването на папка не бе успешно",
-  "editFolderTitle": "Редактиране на папка",
-  "saveFolderButton": "Запазване на папката",
-  "folderEditSuccess": "Папката е актуализирана",
-  "folderEditFailed": "Актуализирането на папката не бе успешно",
-  "folderNameLabel": "Име на папката",
-  "folderNamePlaceholder": "Име на папката",
-  "folderIconLabel": "Икона",
-  "folderDeleteSuccess": "Папката е изтрита",
-  "folderDeleteFailed": "Изтриването на папката не бе успешно",
-  "confirmRunMessage": "Изпълни „{{name}}“?",
-  "confirmRunButton": "Бягане",
-  "runSuccess": "Изпълни „{{name}}“ на {{count}} терминал(и)",
-  "pasteSuccess": "Поставено е „{{name}}“ в {{count}} терминал(и)",
-  "admin": {
-    "tabTitle": "Откъси",
-    "count": "{{count}} фрагменти",
-    "add": "Добавяне на фрагмент",
-    "namePlaceholder": "Име на фрагмента",
-    "contentPlaceholder": "Съдържание на командата",
-    "folderPlaceholder": "Папка (по избор)",
-    "empty": "Този потребител няма фрагменти",
-    "deleteConfirm": "Да се изтрие ли фрагментът „{{name}}“, принадлежащ на {{username}}?",
-    "deleted": "Фрагментът е изтрит",
-    "deleteFailed": "Изтриването на фрагмента не бе успешно",
-    "requiredFields": "Името и съдържанието на фрагмента са задължителни",
-    "saved": "Фрагментът е запазен",
-    "saveFailed": "Запазването на фрагмента не бе успешно",
-    "saving": "Запазване...",
-    "save": "Запазване"
-  },
-  "backToSnippets": "Обратно към откъси",
-  "settingsTitle": "Настройки на фрагмента",
-  "settingsDisplayTitle": "Дисплей",
-  "settingsBehaviorTitle": "Поведение",
-  "typeCommandHint": "Изпълнява се в активния терминал.",
-  "typeNoteHint": "Поставя в активния терминал без да се изпълнява.",
-  "variablesHint": "Променливи: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Етикет}",
-  "doubleClickToRun": "Щракнете двукратно, за да стартирате",
-  "sharedBadge": "Споделено",
-  "copyToClipboard": "Копиране в клипборда",
-  "copyFailed": "Копирането в буферната памет не бе успешно",
-  "moreOptions": "Още опции",
-  "moreActions": "Още действия",
-  "moveToFolder": "Преместване в папка",
-  "deleteSnippet": "Изтриване на фрагмент",
-  "deleteSnippetConfirm": "Да се изтрие ли фрагментът „{{name}}“?",
-  "deleteSuccess": "Фрагментът е изтрит",
-  "delete": "Изтриване",
-  "folderActions": "Действия с папки",
-  "addSnippetHere": "Нов фрагмент тук",
-  "deleteFolder": "Изтриване на папка",
-  "deleteFolderConfirm": "Да се изтрие ли папка „{{name}}“? Нейните фрагменти ще бъдат преместени извън папката.",
-  "createFolderDescription": "Групирайте свързани фрагменти заедно.",
-  "editFolderDescription": "Променете името, цвета или иконата на тази папка.",
-  "folderColorLabel": "Цвят",
-  "loadFailed": "Зареждането на фрагменти не бе успешно",
-  "importSkipExisting": "Импортиране (пропускане на съществуващото)",
-  "importOverwrite": "Импортиране (презаписване на съществуващо)",
-  "importInvalidFile": "Този файл не е валиден експорт на фрагменти",
-  "importSuccess": "Импортирано {{imported}}, актуализирано {{updated}}, пропуснато {{skipped}}",
-  "exportSnippets": "Експортиране на фрагменти",
-  "exportSuccess": "Експортирани фрагменти",
-  "exportFailed": "Експортирането на фрагменти не бе успешно",
-  "expandAll": "Разгъване на всички папки",
-  "collapseAll": "Свиване на всички папки",
-  "docsLink": "Документация",
-  "clearSearch": "Изчистване на търсенето",
-  "noSearchResults": "Няма фрагменти, съответстващи на търсенето ви",
-  "emptyTitle": "Все още няма фрагменти",
-  "emptyDescription": "Запазете командите, които изпълнявате често, след което ги стартирайте в терминал с едно щракване.",
-  "shareSnippet": "Споделяне на фрагмент",
-  "shareFolder": "Споделяне на папка",
-  "shareExpiry": "Изтича",
-  "shareExpiryOptions": {
-    "h0": "Никога",
-    "h1": "След 1 час",
-    "h24": "След 1 ден",
-    "h168": "След 7 дни",
-    "h720": "След 30 дни"
-  },
-  "shareButton": "Споделяне",
-  "shareSuccess": "Споделено с {{count}}",
-  "shareFailed": "Споделянето не бе успешно",
-  "shareLoadFailed": "Зареждането на подробностите за споделянето не бе успешно",
-  "currentAccess": "Текущ достъп",
-  "notSharedYet": "Все още не е споделено с никого",
-  "revokeAccess": "Отмяна",
-  "revokeSuccess": "Достъпът е отменен",
-  "revokeFailed": "Неуспешно отменяне на достъпа",
-  "close": "Затвори",
-  "targetHostsLabel": "Целеви хостове",
-  "targetHostsHint": "Изберете хостове, на които да се изпълни тази команда директно, без да е отворен терминал. Оставете празно, за да се изпълни в активния терминал.",
-  "clearTargetHosts": "Изчисти",
-  "noHostsAvailable": "Няма налични хостове",
-  "searchHosts": "Търсене на хостове",
-  "runOnTargets": "Изпълнява се на целеви хостове",
-  "executionResultTitle": "Резултати за „{{name}}“",
-  "executionResultDescription": "Изход от всеки целеви хост.",
-  "executionSuccess": "Успех",
-  "executionFailed": "Неуспешно",
-  "directRunSuccess": "Изпълни „{{name}}“ на {{count}} хост(ове)",
-  "directRunPartialFail": "„{{name}}“ не успя на някои хостове",
-  "reorderFailed": "Пренареждането на фрагменти не бе успешно",
-  "dropToRemoveFromFolder": "Пуснете тук, за да излезете от папката",
-  "shareSnippetTitle": "Сподели „{{name}}“",
-  "shareFolderTitle": "Споделяне на папка „{{name}}“",
-  "shareWith": "Сподели с",
-  "usersTab": "Потребители",
-  "rolesTab": "Роли",
-  "shareSearchPlaceholder": "Търсене на потребители или роли",
-  "shareNoMatches": "Няма съвпадения",
-  "shareWithCount": "Сподели с {{count}}",
-  "shareFolderHint": "Споделя всеки фрагмент в тази папка. Фрагментите, добавени по-късно, не се споделят автоматично.",
-  "shareFolderSummary": "Споделени {{count}} фрагмент(а) в тази папка",
-  "grantedBy": "Предоставено от",
-  "expired": "Изтекъл",
-  "variablesDialogTitle": "Изпълни „{{name}}“",
-  "variablesDialogDescription": "Попълнете стойностите, необходими на този фрагмент, преди да го изпълните.",
-  "variablesPreviewLabel": "Преглед",
-  "variablesConfirmButton": "Бягане",
-  "keybindings": {
-    "runSnippet": "Изпълнете съществуващия фрагмент",
-    "snippetLabel": "Фрагмент",
-    "selectSnippet": "Изберете фрагмент",
-    "snippetMissing": "фрагмент не е намерен",
-    "snippetRequired": "Изберете фрагмент"
-  },
-  "paletteHintRun": "Изпълняване в активния раздел на терминала",
-  "host": {
-    "startupTitle": "Стартов фрагмент",
-    "quickActionsTitle": "Бързи действия",
-    "quickActionsDescription": "Бързите действия се показват като бутони в лентата с инструменти Host Metrics за изпълнение на команди с едно щракване.",
-    "noQuickActions": "Все още няма бързи действия.",
-    "buttonLabel": "Етикет на бутона",
-    "selectSnippet": "Изберете фрагмент...",
-    "addQuickAction": "Добавяне на действие",
-    "tabTitle": "Откъси",
-    "startupDescription": "Изпълнява се в терминала всеки път, когато се свързва с този хост. Променливи като $HOST се попълват; фрагмент, който изисква входни данни, се пропуска.",
-    "none": "Няма",
-    "removeQuickAction": "Премахване на бързо действие"
-  },
-  "quickActions": {
-    "running": "Изпълнява се {{name}}...",
-    "succeeded": "{{name}} завършено успешно",
-    "failed": "{{name}} неуспешно",
-    "error": "Неуспешно изпълнение на {{name}}"
-  },
-  "paletteHintPaste": "Поставяне в активния раздел на терминала",
-  "targetTerminals": "Влизане",
-  "targetTerminalsHint": "по избор, в противен случай активният раздел",
-  "selectAll": "Всички",
-  "selectNone": "Няма",
-  "plugin": {
-    "name": "Откъси"
-  }
-}
diff --git a/plugins/snippets/locales/translated/bn_BD.json b/plugins/snippets/locales/translated/bn_BD.json
deleted file mode 100644
index 0847bfe44..000000000
--- a/plugins/snippets/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "খণ্ডাংশ"
-  },
-  "onboarding": {
-    "feature_snippets": "খণ্ডাংশ",
-    "feature_snippets_desc": "আপনার প্রায়শই ব্যবহৃত কমান্ডগুলো সংরক্ষণ করুন এবং এক ক্লিকে টার্মিনালে পাঠিয়ে দিন।"
-  },
-  "permissions": {
-    "view": {
-      "title": "স্নিপেটগুলি দেখুন",
-      "description": "আপনার নিজের স্নিপেট, নোট এবং শেয়ার করা স্নিপেটগুলো দেখুন।"
-    },
-    "create": {
-      "title": "স্নিপেট তৈরি করুন",
-      "description": "নতুন স্নিপেট, নোট এবং ফোল্ডার তৈরি করুন।"
-    },
-    "edit": {
-      "title": "সম্পাদনা স্নিপেট",
-      "description": "বিদ্যমান স্নিপেট এবং ফোল্ডারগুলির নাম পরিবর্তন করুন।"
-    },
-    "delete": {
-      "title": "স্নিপেটগুলি মুছুন",
-      "description": "স্নিপেট এবং ফোল্ডারগুলো মুছে ফেলুন।"
-    },
-    "share": {
-      "title": "ছোট ছোট অংশ শেয়ার করুন",
-      "description": "অন্যান্য ব্যবহারকারী বা রোলের সাথে স্নিপেট এবং ফোল্ডার শেয়ার করুন।"
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "ডিফল্টরূপে ফোল্ডারগুলি সংকুচিত করুন",
-      "description": "স্নিপেট প্যানেল খোলার সময় প্রতিটি স্নিপেট ফোল্ডার সংকুচিত অবস্থায় শুরু হয়।"
-    },
-    "showCommands": {
-      "label": "কমান্ড দেখান",
-      "description": "প্রতিটি স্নিপেটের কমান্ডের প্রথম লাইনটি তার নামের নিচে দেখান।"
-    },
-    "confirmExecution": {
-      "label": "চালানোর আগে নিশ্চিত করুন।",
-      "description": "টার্মিনালে কোনো কমান্ড স্নিপেট চালানোর আগে জিজ্ঞাসা করুন।"
-    }
-  },
-  "cancel": "বাতিল করুন",
-  "loading": "লোড হচ্ছে...",
-  "searchPlaceholder": "অনুসন্ধান স্নিপেট",
-  "newFolder": "নতুন ফোল্ডার",
-  "newSnippet": "নতুন স্নিপেট",
-  "noFolder": "কোন ফোল্ডার নেই",
-  "noSnippetsInFolder": "এই ফোল্ডারে কোনো স্নিপেট নেই",
-  "noTerminalTabsOpen": "কোন টার্মিনাল ট্যাব খোলা নেই",
-  "run": "দৌড়",
-  "pasteToTerminal": "টার্মিনালে পেস্ট করুন",
-  "copySuccess": "ক্লিপবোর্ডে কপি করা হয়েছে",
-  "importExport": "আমদানি / রপ্তানি",
-  "importFailed": "স্নিপেট আমদানি করতে ব্যর্থ হয়েছে",
-  "nameLabel": "নাম",
-  "namePlaceholder": "স্নিপেট নাম",
-  "descriptionLabel": "বর্ণনা",
-  "descriptionPlaceholder": "ঐচ্ছিক বিবরণ",
-  "folderLabel": "ফোল্ডার",
-  "typeLabel": "প্রকার",
-  "typeCommand": "আদেশ",
-  "typeNote": "দ্রষ্টব্য",
-  "commandLabel": "আদেশ",
-  "commandPlaceholder": "চালানোর জন্য কমান্ড, যেমন systemctl status $HOST",
-  "noteLabel": "দ্রষ্টব্য",
-  "notePlaceholder": "টার্মিনালে পেস্ট করার জন্য টেক্সট",
-  "createSnippetTitle": "স্নিপেট তৈরি করুন",
-  "createSnippetButton": "স্নিপেট তৈরি করুন",
-  "createSuccess": "স্নিপেট তৈরি করা হয়েছে",
-  "createFailed": "স্নিপেট তৈরি করতে ব্যর্থ হয়েছে",
-  "editSnippetTitle": "সম্পাদনা স্নিপেট",
-  "saveSnippetButton": "স্নিপেট সংরক্ষণ করুন",
-  "updateSuccess": "স্নিপেট আপডেট করা হয়েছে",
-  "updateFailed": "স্নিপেট আপডেট করতে ব্যর্থ হয়েছে",
-  "deleteFailed": "স্নিপেট মুছে ফেলা ব্যর্থ হয়েছে",
-  "createFolderTitle": "ফোল্ডার তৈরি করুন",
-  "createFolderButton": "ফোল্ডার তৈরি করুন",
-  "folderCreateSuccess": "ফোল্ডার তৈরি করা হয়েছে",
-  "folderCreateFailed": "ফোল্ডার তৈরি করতে ব্যর্থ হয়েছে",
-  "editFolderTitle": "ফোল্ডার সম্পাদনা করুন",
-  "saveFolderButton": "ফোল্ডার সংরক্ষণ করুন",
-  "folderEditSuccess": "ফোল্ডার আপডেট করা হয়েছে",
-  "folderEditFailed": "ফোল্ডার আপডেট করতে ব্যর্থ হয়েছে",
-  "folderNameLabel": "ফোল্ডারের নাম",
-  "folderNamePlaceholder": "ফোল্ডারের নাম",
-  "folderIconLabel": "আইকন",
-  "folderDeleteSuccess": "ফোল্ডার মুছে ফেলা হয়েছে",
-  "folderDeleteFailed": "ফোল্ডারটি মুছে ফেলা সম্ভব হয়নি",
-  "confirmRunMessage": "\"{{name}} \" চালান?",
-  "confirmRunButton": "দৌড়",
-  "runSuccess": "{{count}} টার্মিনালে \"{{name}}\" চালানো হয়েছে",
-  "pasteSuccess": "{{name}}\" {{count}} টার্মিনালে পেস্ট করা হয়েছে",
-  "admin": {
-    "tabTitle": "খণ্ডাংশ",
-    "count": "{{count}} খণ্ডাংশ",
-    "add": "স্নিপেট যোগ করুন",
-    "namePlaceholder": "স্নিপেট নাম",
-    "contentPlaceholder": "কমান্ডের বিষয়বস্তু",
-    "folderPlaceholder": "ফোল্ডার (ঐচ্ছিক)",
-    "empty": "এই ব্যবহারকারীর কোনো স্নিপেট নেই",
-    "deleteConfirm": "{{username}} এর অন্তর্গত স্নিপেট \"{{name}}\" মুছে ফেলবেন?",
-    "deleted": "স্নিপেট মুছে ফেলা হয়েছে",
-    "deleteFailed": "স্নিপেট মুছে ফেলা ব্যর্থ হয়েছে",
-    "requiredFields": "স্নিপেটের নাম এবং বিষয়বস্তু আবশ্যক।",
-    "saved": "স্নিপেট সংরক্ষিত",
-    "saveFailed": "স্নিপেট সংরক্ষণ করতে ব্যর্থ হয়েছে",
-    "saving": "সঞ্চয়...",
-    "save": "সংরক্ষণ করুন"
-  },
-  "backToSnippets": "স্নিপেটগুলিতে ফিরে যান",
-  "settingsTitle": "স্নিপেট সেটিংস",
-  "settingsDisplayTitle": "প্রদর্শন",
-  "settingsBehaviorTitle": "আচরণ",
-  "typeCommandHint": "সক্রিয় টার্মিনালে চলে।",
-  "typeNoteHint": "রান না করেই সক্রিয় টার্মিনালে পেস্ট করে।",
-  "variablesHint": "ভেরিয়েবল: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Label}",
-  "doubleClickToRun": "চালানোর জন্য ডাবল ক্লিক করুন",
-  "sharedBadge": "ভাগ করা হয়েছে",
-  "copyToClipboard": "ক্লিপবোর্ডে কপি করুন",
-  "copyFailed": "ক্লিপবোর্ডে কপি করতে ব্যর্থ হয়েছে",
-  "moreOptions": "আরও বিকল্প",
-  "moreActions": "আরও পদক্ষেপ",
-  "moveToFolder": "ফোল্ডারে সরান",
-  "deleteSnippet": "স্নিপেট মুছুন",
-  "deleteSnippetConfirm": "\"{{name}} \" স্নিপেটটি মুছে ফেলবেন?",
-  "deleteSuccess": "স্নিপেট মুছে ফেলা হয়েছে",
-  "delete": "মুছে ফেলুন",
-  "folderActions": "ফোল্ডারের কার্যকলাপ",
-  "addSnippetHere": "এখানে নতুন অংশ",
-  "deleteFolder": "ফোল্ডারটি মুছে ফেলুন",
-  "deleteFolderConfirm": "\"{{name}}\" ফোল্ডারটি মুছে ফেলবেন? এর স্নিপেটগুলো ফোল্ডারের বাইরে চলে যায়।",
-  "createFolderDescription": "সম্পর্কিত অংশগুলো একসাথে গ্রুপ করুন।",
-  "editFolderDescription": "এই ফোল্ডারটির নাম, রঙ বা আইকন পরিবর্তন করুন।",
-  "folderColorLabel": "রঙ",
-  "loadFailed": "স্নিপেট লোড করতে ব্যর্থ হয়েছে",
-  "importSkipExisting": "আমদানি করুন (বিদ্যমানটি বাদ দিন)",
-  "importOverwrite": "আমদানি করুন (বিদ্যমানটি মুছে ফেলুন)",
-  "importInvalidFile": "ওই ফাইলটি একটি বৈধ স্নিপেট এক্সপোর্ট নয়।",
-  "importSuccess": "{{imported}}আমদানি করা হয়েছে, {{updated}}আপডেট করা হয়েছে, {{skipped}} বাদ দেওয়া হয়েছে",
-  "exportSnippets": "স্নিপেট রপ্তানি করুন",
-  "exportSuccess": "স্নিপেট রপ্তানি করা হয়েছে",
-  "exportFailed": "স্নিপেট রপ্তানি করতে ব্যর্থ হয়েছে",
-  "expandAll": "সমস্ত ফোল্ডার প্রসারিত করুন",
-  "collapseAll": "সমস্ত ফোল্ডার সংকুচিত করুন",
-  "docsLink": "ডকুমেন্টেশন",
-  "clearSearch": "পরিষ্কার অনুসন্ধান",
-  "noSearchResults": "আপনার অনুসন্ধানের সাথে কোনো স্নিপেট মেলেনি।",
-  "emptyTitle": "এখনও কোনো স্নিপেট নেই",
-  "emptyDescription": "যে কমান্ডগুলো আপনি প্রায়ই ব্যবহার করেন, সেগুলো সেভ করে রাখুন, তারপর টার্মিনালে এক ক্লিকেই চালান।",
-  "shareSnippet": "স্নিপেট শেয়ার করুন",
-  "shareFolder": "ফোল্ডার শেয়ার করুন",
-  "shareExpiry": "মেয়াদ শেষ",
-  "shareExpiryOptions": {
-    "h0": "কখনো না",
-    "h1": "১ ঘন্টায়",
-    "h24": "১ দিনে",
-    "h168": "৭ দিনে",
-    "h720": "৩০ দিনে"
-  },
-  "shareButton": "শেয়ার",
-  "shareSuccess": "{{count}} এর সাথে শেয়ার করা হয়েছে",
-  "shareFailed": "শেয়ার করতে ব্যর্থ হয়েছে",
-  "shareLoadFailed": "শেয়ারিং বিবরণ লোড করতে ব্যর্থ হয়েছে",
-  "currentAccess": "বর্তমান অ্যাক্সেস",
-  "notSharedYet": "এখনো কারো সাথে শেয়ার করা হয়নি",
-  "revokeAccess": "বাতিল করুন",
-  "revokeSuccess": "প্রবেশাধিকার বাতিল করা হয়েছে",
-  "revokeFailed": "অ্যাক্সেস প্রত্যাহার করা যায়নিfdfg",
-  "close": "বন্ধ করুন",
-  "targetHostsLabel": "লক্ষ্য হোস্ট",
-  "targetHostsHint": "টার্মিনাল খোলা ছাড়াই সরাসরি এই কমান্ডটি চালানোর জন্য হোস্ট নির্বাচন করুন। সক্রিয় টার্মিনালে এটি চালাতে খালি রাখুন।",
-  "clearTargetHosts": "পরিষ্কার",
-  "noHostsAvailable": "কোন হোস্ট উপলব্ধ নেই",
-  "searchHosts": "হোস্ট অনুসন্ধান করুন",
-  "runOnTargets": "টার্গেট হোস্টগুলিতে চালান",
-  "executionResultTitle": "\"{{name}} \" এর ফলাফল",
-  "executionResultDescription": "প্রতিটি টার্গেট হোস্ট থেকে আউটপুট।",
-  "executionSuccess": "সাফল্য",
-  "executionFailed": "ব্যর্থ",
-  "directRunSuccess": "{{count}} হোস্টে \"{{name}}\" চালানো হয়েছে",
-  "directRunPartialFail": "কিছু হোস্টে \"{{name}}\" ব্যর্থ হয়েছে",
-  "reorderFailed": "স্নিপেটগুলির পুনর্বিন্যাস করতে ব্যর্থ হয়েছে",
-  "dropToRemoveFromFolder": "ফোল্ডার থেকে বের হতে এখানে ড্রপ করুন।",
-  "shareSnippetTitle": "শেয়ার করুন \"{{name}}\"",
-  "shareFolderTitle": "ফোল্ডার শেয়ার করুন \"{{name}}\"",
-  "shareWith": "শেয়ার করুন",
-  "usersTab": "ব্যবহারকারীরা",
-  "rolesTab": "ভূমিকা",
-  "shareSearchPlaceholder": "ব্যবহারকারী বা ভূমিকা অনুসন্ধান করুন",
-  "shareNoMatches": "কোনো মিল নেই",
-  "shareWithCount": "{{count}} এর সাথে শেয়ার করুন",
-  "shareFolderHint": "এই ফোল্ডারের প্রতিটি স্নিপেট শেয়ার করা হয়। পরে যোগ করা স্নিপেটগুলো স্বয়ংক্রিয়ভাবে শেয়ার করা হয় না।",
-  "shareFolderSummary": "এই ফোল্ডারে শেয়ার করা {{count}} স্নিপেট(গুলি)",
-  "grantedBy": "মঞ্জুর করেছেন",
-  "expired": "মেয়াদোত্তীর্ণ",
-  "variablesDialogTitle": "দৌড়াও \"{{name}}\"",
-  "variablesDialogDescription": "এই কোড স্নিপেটটি চালানোর আগে প্রয়োজনীয় মানগুলি পূরণ করুন।",
-  "variablesPreviewLabel": "প্রিভিউ",
-  "variablesConfirmButton": "দৌড়",
-  "keybindings": {
-    "runSnippet": "বিদ্যমান কোড চালান",
-    "snippetLabel": "স্নিপেট",
-    "selectSnippet": "একটি স্নিপেট নির্বাচন করুন",
-    "snippetMissing": "স্নিপেটটি খুঁজে পাওয়া যায়নি",
-    "snippetRequired": "একটি স্নিপেট নির্বাচন করুন"
-  },
-  "paletteHintRun": "সক্রিয় টার্মিনাল ট্যাবে চালান",
-  "host": {
-    "startupTitle": "স্টার্টআপ স্নিপেট",
-    "quickActionsTitle": "দ্রুত পদক্ষেপ",
-    "quickActionsDescription": "এক ক্লিকে কমান্ড কার্যকর করার জন্য কুইক অ্যাকশনগুলো হোস্ট মেট্রিক্স টুলবারে বাটন হিসেবে প্রদর্শিত হয়।",
-    "noQuickActions": "এখনো কোনো দ্রুত পদক্ষেপ নেওয়া হয়নি।",
-    "buttonLabel": "বোতাম লেবেল",
-    "selectSnippet": "স্নিপেট নির্বাচন করুন...",
-    "addQuickAction": "অ্যাকশন যোগ করুন",
-    "tabTitle": "খণ্ডাংশ",
-    "startupDescription": "প্রতিবার এই হোস্টে সংযোগ করার সময় এটি টার্মিনালে চলে। $HOST -এর মতো ভেরিয়েবলগুলো পূরণ করা হয়; ইনপুট চাওয়ার একটি অংশ এড়িয়ে যাওয়া হয়।",
-    "none": "কোনোটিই না",
-    "removeQuickAction": "দ্রুত পদক্ষেপ অপসারণ করুন"
-  },
-  "quickActions": {
-    "running": "{{name}} কার্যকর করা হচ্ছে ...",
-    "succeeded": "{{name}} সফলভাবে সম্পন্ন হয়েছে",
-    "failed": "{{name}} ব্যর্থ হয়েছে",
-    "error": "{{name}} কার্যকর করতে ব্যর্থ হয়েছে"
-  },
-  "paletteHintPaste": "সক্রিয় টার্মিনাল ট্যাবে পেস্ট করুন",
-  "targetTerminals": "দৌড়ে যান",
-  "targetTerminalsHint": "ঐচ্ছিক, অন্যথায় সক্রিয় ট্যাব",
-  "selectAll": "সব",
-  "selectNone": "কোনোটিই না",
-  "plugin": {
-    "name": "খণ্ডাংশ"
-  }
-}
diff --git a/plugins/snippets/locales/translated/ca_ES.json b/plugins/snippets/locales/translated/ca_ES.json
deleted file mode 100644
index 9fe9370c0..000000000
--- a/plugins/snippets/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Fragments"
-  },
-  "onboarding": {
-    "feature_snippets": "Fragments",
-    "feature_snippets_desc": "Desa les ordres que executes sovint i envia-les a un terminal amb un sol clic."
-  },
-  "permissions": {
-    "view": {
-      "title": "Veure fragments",
-      "description": "Veure els vostres propis fragments, notes i fragments compartits."
-    },
-    "create": {
-      "title": "Crea fragments",
-      "description": "Crea nous fragments, notes i carpetes."
-    },
-    "edit": {
-      "title": "Edita fragments",
-      "description": "Canvieu el nom o modifiqueu els fragments i les carpetes existents."
-    },
-    "delete": {
-      "title": "Suprimeix fragments",
-      "description": "Suprimeix fragments i carpetes."
-    },
-    "share": {
-      "title": "Comparteix fragments",
-      "description": "Comparteix fragments i carpetes amb altres usuaris o rols."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Replega les carpetes per defecte",
-      "description": "Inicia cada carpeta de fragments reduïda quan obris el panell Fragments."
-    },
-    "showCommands": {
-      "label": "Mostra les ordres",
-      "description": "Mostra la primera línia de l'ordre de cada fragment sota el seu nom."
-    },
-    "confirmExecution": {
-      "label": "Confirma abans d'executar",
-      "description": "Pregunta abans que s'executi un fragment d'ordre en un terminal."
-    }
-  },
-  "cancel": "Cancel·la",
-  "loading": "S'està carregant...",
-  "searchPlaceholder": "Fragments de cerca",
-  "newFolder": "Nova carpeta",
-  "newSnippet": "Nou fragment",
-  "noFolder": "Sense carpeta",
-  "noSnippetsInFolder": "No hi ha fragments en aquesta carpeta",
-  "noTerminalTabsOpen": "No hi ha cap pestanya de terminal oberta",
-  "run": "Corre",
-  "pasteToTerminal": "Enganxa al terminal",
-  "copySuccess": "Copiat al porta-retalls",
-  "importExport": "Importació / Exportació",
-  "importFailed": "No s'han pogut importar els fragments",
-  "nameLabel": "Nom",
-  "namePlaceholder": "Nom del fragment",
-  "descriptionLabel": "Descripció",
-  "descriptionPlaceholder": "Descripció opcional",
-  "folderLabel": "Carpeta",
-  "typeLabel": "Tipus",
-  "typeCommand": "Comandament",
-  "typeNote": "Nota",
-  "commandLabel": "Comandament",
-  "commandPlaceholder": "Ordre per executar, p. ex. systemctl status $HOST",
-  "noteLabel": "Nota",
-  "notePlaceholder": "Text per enganxar al terminal",
-  "createSnippetTitle": "Crea un fragment",
-  "createSnippetButton": "Crea un fragment",
-  "createSuccess": "Fragment creat",
-  "createFailed": "No s'ha pogut crear el fragment",
-  "editSnippetTitle": "Edita el fragment",
-  "saveSnippetButton": "Desa el fragment",
-  "updateSuccess": "Fragment actualitzat",
-  "updateFailed": "No s'ha pogut actualitzar el fragment",
-  "deleteFailed": "No s'ha pogut suprimir el fragment",
-  "createFolderTitle": "Crea una carpeta",
-  "createFolderButton": "Crea una carpeta",
-  "folderCreateSuccess": "Carpeta creada",
-  "folderCreateFailed": "No s'ha pogut crear la carpeta",
-  "editFolderTitle": "Edita la carpeta",
-  "saveFolderButton": "Desa la carpeta",
-  "folderEditSuccess": "Carpeta actualitzada",
-  "folderEditFailed": "No s'ha pogut actualitzar la carpeta",
-  "folderNameLabel": "Nom de la carpeta",
-  "folderNamePlaceholder": "Nom de la carpeta",
-  "folderIconLabel": "Icona",
-  "folderDeleteSuccess": "Carpeta suprimida",
-  "folderDeleteFailed": "No s'ha pogut suprimir la carpeta",
-  "confirmRunMessage": "Executar \"{{name}}\"?",
-  "confirmRunButton": "Corre",
-  "runSuccess": "Ha executat \"{{name}}\" al(s) terminal(s) {{count}}",
-  "pasteSuccess": "S'ha enganxat \"{{name}}\" al(s) terminal(s) {{count}}",
-  "admin": {
-    "tabTitle": "Fragments",
-    "count": "{{count}} fragments",
-    "add": "Afegeix un fragment",
-    "namePlaceholder": "Nom del fragment",
-    "contentPlaceholder": "Contingut de l'ordre",
-    "folderPlaceholder": "Carpeta (opcional)",
-    "empty": "Aquest usuari no té fragments",
-    "deleteConfirm": "Voleu suprimir el fragment \"{{name}}\" pertanyent a {{username}}?",
-    "deleted": "Fragment suprimit",
-    "deleteFailed": "No s'ha pogut suprimir el fragment",
-    "requiredFields": "El nom i el contingut del fragment són obligatoris",
-    "saved": "Fragment desat",
-    "saveFailed": "No s'ha pogut desar el fragment",
-    "saving": "Desant...",
-    "save": "Desa"
-  },
-  "backToSnippets": "Torna a fragments",
-  "settingsTitle": "Configuració del fragment",
-  "settingsDisplayTitle": "Pantalla",
-  "settingsBehaviorTitle": "Comportament",
-  "typeCommandHint": "S'executa al terminal actiu.",
-  "typeNoteHint": "Enganxa al terminal actiu sense executar-se.",
-  "variablesHint": "Variables: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Etiqueta}",
-  "doubleClickToRun": "Feu doble clic per executar",
-  "sharedBadge": "Compartit",
-  "copyToClipboard": "Copia al porta-retalls",
-  "copyFailed": "No s'ha pogut copiar al porta-retalls",
-  "moreOptions": "Més opcions",
-  "moreActions": "Més accions",
-  "moveToFolder": "Mou a la carpeta",
-  "deleteSnippet": "Suprimeix el fragment",
-  "deleteSnippetConfirm": "Voleu suprimir el fragment \"{{name}}\"?",
-  "deleteSuccess": "Fragment suprimit",
-  "delete": "Suprimeix",
-  "folderActions": "Accions de carpeta",
-  "addSnippetHere": "Nou fragment aquí",
-  "deleteFolder": "Suprimeix la carpeta",
-  "deleteFolderConfirm": "Suprimeix la carpeta \"{{name}}\"? Els seus fragments es mouen fora de la carpeta.",
-  "createFolderDescription": "Agrupa fragments relacionats.",
-  "editFolderDescription": "Canvia el nom, el color o la icona d'aquesta carpeta.",
-  "folderColorLabel": "Color",
-  "loadFailed": "No s'han pogut carregar els fragments",
-  "importSkipExisting": "Importa (omet els existents)",
-  "importOverwrite": "Importa (sobreescriu l'existent)",
-  "importInvalidFile": "Aquest fitxer no és una exportació de fragments vàlida.",
-  "importSuccess": "Importat {{imported}}, actualitzat {{updated}}, omès {{skipped}}",
-  "exportSnippets": "Exporta fragments",
-  "exportSuccess": "Fragments exportats",
-  "exportFailed": "No s'han pogut exportar els fragments",
-  "expandAll": "Expandir totes les carpetes",
-  "collapseAll": "Replega totes les carpetes",
-  "docsLink": "Documentació",
-  "clearSearch": "Esborra la cerca",
-  "noSearchResults": "No hi ha fragments que coincideixin amb la teva cerca",
-  "emptyTitle": "Encara no hi ha fragments",
-  "emptyDescription": "Desa les ordres que executes sovint i després executa-les en un terminal amb un sol clic.",
-  "shareSnippet": "Comparteix fragment",
-  "shareFolder": "Compartir carpeta",
-  "shareExpiry": "Caduca",
-  "shareExpiryOptions": {
-    "h0": "Mai",
-    "h1": "En 1 hora",
-    "h24": "En 1 dia",
-    "h168": "En 7 dies",
-    "h720": "En 30 dies"
-  },
-  "shareButton": "Comparteix",
-  "shareSuccess": "Compartit amb {{count}}",
-  "shareFailed": "No s'ha pogut compartir",
-  "shareLoadFailed": "No s'han pogut carregar els detalls de compartició",
-  "currentAccess": "Accés actual",
-  "notSharedYet": "Encara no s'ha compartit amb ningú",
-  "revokeAccess": "Revocar",
-  "revokeSuccess": "Accés revocat",
-  "revokeFailed": "No s'ha pogut revocar l'accés",
-  "close": "Tanca",
-  "targetHostsLabel": "Amfitrions de destinació",
-  "targetHostsHint": "Trieu els hosts on executar aquesta ordre directament, sense un terminal obert. Deixeu-ho en blanc per executar-la al terminal actiu.",
-  "clearTargetHosts": "Clar",
-  "noHostsAvailable": "No hi ha amfitrions disponibles",
-  "searchHosts": "Cerca amfitrions",
-  "runOnTargets": "Executar en els amfitrions de destinació",
-  "executionResultTitle": "Resultats per a \"{{name}}\"",
-  "executionResultDescription": "Sortida de cada amfitrió de destinació.",
-  "executionSuccess": "Èxit",
-  "executionFailed": "Fallat",
-  "directRunSuccess": "Ha executat \"{{name}}\" en {{count}} host(s)",
-  "directRunPartialFail": "\"{{name}}\" ha fallat en alguns hosts",
-  "reorderFailed": "No s'han pogut reordenar els fragments",
-  "dropToRemoveFromFolder": "Deixa anar aquí per sortir de la carpeta",
-  "shareSnippetTitle": "Comparteix \"{{name}}\"",
-  "shareFolderTitle": "Comparteix la carpeta \"{{name}}\"",
-  "shareWith": "Comparteix amb",
-  "usersTab": "Usuaris",
-  "rolesTab": "Rols",
-  "shareSearchPlaceholder": "Cerca usuaris o rols",
-  "shareNoMatches": "Sense coincidències",
-  "shareWithCount": "Comparteix amb {{count}}",
-  "shareFolderHint": "Comparteix tots els fragments d'aquesta carpeta. Els fragments afegits més tard no es comparteixen automàticament.",
-  "shareFolderSummary": "Fragments compartits {{count}} en aquesta carpeta",
-  "grantedBy": "Atorgat per",
-  "expired": "Caducat",
-  "variablesDialogTitle": "Executa \"{{name}}\"",
-  "variablesDialogDescription": "Empleneu els valors que necessita aquest fragment abans d'executar-lo.",
-  "variablesPreviewLabel": "Vista prèvia",
-  "variablesConfirmButton": "Corre",
-  "keybindings": {
-    "runSnippet": "Executa el fragment existent",
-    "snippetLabel": "Fragment",
-    "selectSnippet": "Selecciona un fragment",
-    "snippetMissing": "fragment no trobat",
-    "snippetRequired": "Selecciona un fragment"
-  },
-  "paletteHintRun": "Executar a la pestanya activa del terminal",
-  "host": {
-    "startupTitle": "Fragment d'inici",
-    "quickActionsTitle": "Accions ràpides",
-    "quickActionsDescription": "Les accions ràpides apareixen com a botons a la barra d'eines de mètriques de l'amfitrió per executar ordres amb un sol clic.",
-    "noQuickActions": "Encara no hi ha accions ràpides.",
-    "buttonLabel": "Etiqueta del botó",
-    "selectSnippet": "Selecciona un fragment...",
-    "addQuickAction": "Afegeix una acció",
-    "tabTitle": "Fragments",
-    "startupDescription": "S'executa al terminal cada vegada que es connecta a aquest host. Les variables com ara $HOST s'omplen; un fragment que demana entrades s'omet.",
-    "none": "Cap",
-    "removeQuickAction": "Elimina l'acció ràpida"
-  },
-  "quickActions": {
-    "running": "Executant {{name}}...",
-    "succeeded": "{{name}} s'ha completat correctament",
-    "failed": "{{name}} ha fallat",
-    "error": "No s'ha pogut executar {{name}}"
-  },
-  "paletteHintPaste": "Enganxa a la pestanya activa del terminal",
-  "targetTerminals": "Entrada",
-  "targetTerminalsHint": "opcional, si no, la pestanya activa",
-  "selectAll": "Tot",
-  "selectNone": "Cap",
-  "plugin": {
-    "name": "Fragments"
-  }
-}
diff --git a/plugins/snippets/locales/translated/cs_CZ.json b/plugins/snippets/locales/translated/cs_CZ.json
deleted file mode 100644
index 0b9c82304..000000000
--- a/plugins/snippets/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Úryvky"
-  },
-  "onboarding": {
-    "feature_snippets": "Úryvky",
-    "feature_snippets_desc": "Uložte si často spouštíné příkazy a odešlete je do terminálu jedním kliknutím."
-  },
-  "permissions": {
-    "view": {
-      "title": "Zobrazit úryvky",
-      "description": "Prohlédněte si své vlastní úryvky, poznámky a sdílené úryvky."
-    },
-    "create": {
-      "title": "Vytvořit úryvky",
-      "description": "Vytvořte nové úryvky, poznámky a složky."
-    },
-    "edit": {
-      "title": "Upravit úryvky",
-      "description": "Přejmenujte nebo změňte existující úryvky a složky."
-    },
-    "delete": {
-      "title": "Smazat úryvky",
-      "description": "Smazat úryvky a složky."
-    },
-    "share": {
-      "title": "Sdílet úryvky",
-      "description": "Sdílejte úryvky a složky s ostatními uživateli nebo rolemi."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Sbalit složky ve výchozím nastavení",
-      "description": "Spuštění každé složky úryvků kódu sbalené při otevření panelu Úryvky kódu."
-    },
-    "showCommands": {
-      "label": "Zobrazit příkazy",
-      "description": "Zobrazit první řádek příkazu každého úryvku pod jeho názvem."
-    },
-    "confirmExecution": {
-      "label": "Potvrďte před spuštěním",
-      "description": "Zeptat se před spuštěním úryvku příkazu v terminálu."
-    }
-  },
-  "cancel": "Zrušit",
-  "loading": "Načítání...",
-  "searchPlaceholder": "Hledat úryvky",
-  "newFolder": "Nová složka",
-  "newSnippet": "Nový úryvek",
-  "noFolder": "Žádná složka",
-  "noSnippetsInFolder": "V této složce nejsou žádné úryvky",
-  "noTerminalTabsOpen": "Není otevřená žádná záložka terminálu",
-  "run": "Běh",
-  "pasteToTerminal": "Vložit do terminálu",
-  "copySuccess": "Zkopírováno do schránky",
-  "importExport": "Import / Export",
-  "importFailed": "Import úryvků se nezdařilo",
-  "nameLabel": "Jméno",
-  "namePlaceholder": "Název úryvku",
-  "descriptionLabel": "Popis",
-  "descriptionPlaceholder": "Volitelný popis",
-  "folderLabel": "Složka",
-  "typeLabel": "Typ",
-  "typeCommand": "Příkaz",
-  "typeNote": "Poznámka",
-  "commandLabel": "Příkaz",
-  "commandPlaceholder": "Příkaz ke spuštění, např. systemctl status $HOST",
-  "noteLabel": "Poznámka",
-  "notePlaceholder": "Text k vložení do terminálu",
-  "createSnippetTitle": "Vytvořit úryvek",
-  "createSnippetButton": "Vytvořit úryvek",
-  "createSuccess": "Úryvek vytvořen",
-  "createFailed": "Nepodařilo se vytvořit úryvek",
-  "editSnippetTitle": "Upravit úryvek",
-  "saveSnippetButton": "Uložit úryvek",
-  "updateSuccess": "Úryvek aktualizován",
-  "updateFailed": "Nepodařilo se aktualizovat úryvek",
-  "deleteFailed": "Nepodařilo se odstranit úryvek",
-  "createFolderTitle": "Vytvořit složku",
-  "createFolderButton": "Vytvořit složku",
-  "folderCreateSuccess": "Složka vytvořena",
-  "folderCreateFailed": "Nepodařilo se vytvořit složku",
-  "editFolderTitle": "Upravit složku",
-  "saveFolderButton": "Uložit složku",
-  "folderEditSuccess": "Složka aktualizována",
-  "folderEditFailed": "Nepodařilo se aktualizovat složku",
-  "folderNameLabel": "Název složky",
-  "folderNamePlaceholder": "Název složky",
-  "folderIconLabel": "Ikona",
-  "folderDeleteSuccess": "Složka smazána",
-  "folderDeleteFailed": "Složku se nepodařilo smazat",
-  "confirmRunMessage": "Spustit „{{name}}“?",
-  "confirmRunButton": "Běh",
-  "runSuccess": "Spuštěno „{{name}}“ na terminálu(ech) {{count}}",
-  "pasteSuccess": "Vloženo „{{name}}“ do terminálu(ů) {{count}}",
-  "admin": {
-    "tabTitle": "Úryvky",
-    "count": "úryvky {{count}}",
-    "add": "Přidat úryvek",
-    "namePlaceholder": "Název úryvku",
-    "contentPlaceholder": "Obsah příkazu",
-    "folderPlaceholder": "Složka (volitelné)",
-    "empty": "Tento uživatel nemá žádné úryvky",
-    "deleteConfirm": "Smazat úryvek „{{name}}“ patřící do {{username}}?",
-    "deleted": "Úryvek smazán",
-    "deleteFailed": "Nepodařilo se odstranit úryvek",
-    "requiredFields": "Název a obsah úryvku jsou povinné",
-    "saved": "Úryvek uložen",
-    "saveFailed": "Uložení úryvku se nezdařilo",
-    "saving": "Ukládání…",
-    "save": "Uložit"
-  },
-  "backToSnippets": "Zpět k úryvkům",
-  "settingsTitle": "Nastavení úryvků",
-  "settingsDisplayTitle": "Zobrazit",
-  "settingsBehaviorTitle": "Chování",
-  "typeCommandHint": "Běží v aktivním terminálu.",
-  "typeNoteHint": "Vloží do aktivního terminálu bez spuštění.",
-  "variablesHint": "Proměnné: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Popis}",
-  "doubleClickToRun": "Dvojitým kliknutím spustíte",
-  "sharedBadge": "Sdílené",
-  "copyToClipboard": "Kopírovat do schránky",
-  "copyFailed": "Kopírování do schránky se nezdařilo",
-  "moreOptions": "Více možností",
-  "moreActions": "Další akce",
-  "moveToFolder": "Přesunout do složky",
-  "deleteSnippet": "Smazat úryvek",
-  "deleteSnippetConfirm": "Smazat úryvek „{{name}}“?",
-  "deleteSuccess": "Úryvek smazán",
-  "delete": "Vymazat",
-  "folderActions": "Akce se složkou",
-  "addSnippetHere": "Nový úryvek zde",
-  "deleteFolder": "Smazat složku",
-  "deleteFolderConfirm": "Smazat složku „{{name}}“? Její úryvky se přesunou mimo složku.",
-  "createFolderDescription": "Seskupte související úryvky.",
-  "editFolderDescription": "Změňte název, barvu nebo ikonu této složky.",
-  "folderColorLabel": "Barva",
-  "loadFailed": "Načtení úryvků se nezdařilo",
-  "importSkipExisting": "Importovat (přeskočit existující)",
-  "importOverwrite": "Importovat (přepsat existující)",
-  "importInvalidFile": "Tento soubor není platným exportem úryvků.",
-  "importSuccess": "Importováno {{imported}}, aktualizováno {{updated}}, přeskočeno {{skipped}}",
-  "exportSnippets": "Exportovat úryvky",
-  "exportSuccess": "Exportované úryvky",
-  "exportFailed": "Export úryvků se nezdařilo",
-  "expandAll": "Rozbalit všechny složky",
-  "collapseAll": "Sbalit všechny složky",
-  "docsLink": "Dokumentace",
-  "clearSearch": "Vymazat vyhledávání",
-  "noSearchResults": "Žádné úryvky neodpovídají vašemu vyhledávání",
-  "emptyTitle": "Zatím žádné úryvky",
-  "emptyDescription": "Uložte si často spouštíné příkazy a poté je spusťte v terminálu jedním kliknutím.",
-  "shareSnippet": "Sdílet úryvek",
-  "shareFolder": "Sdílet složku",
-  "shareExpiry": "Platnost vyprší",
-  "shareExpiryOptions": {
-    "h0": "Nikdy",
-    "h1": "Za 1 hodinu",
-    "h24": "Za 1 den",
-    "h168": "Za 7 dní",
-    "h720": "Za 30 dní"
-  },
-  "shareButton": "Podíl",
-  "shareSuccess": "Sdíleno s {{count}}",
-  "shareFailed": "Sdílení se nezdařilo",
-  "shareLoadFailed": "Nepodařilo se načíst podrobnosti o sdílení",
-  "currentAccess": "Aktuální přístup",
-  "notSharedYet": "Zatím s nikým nesdíleno",
-  "revokeAccess": "Zrušit",
-  "revokeSuccess": "Přístup zrušen",
-  "revokeFailed": "Zrušení přístupu se nezdařilo",
-  "close": "Blízko",
-  "targetHostsLabel": "Cílové hostitele",
-  "targetHostsHint": "Vyberte hostitele, na kterých se má tento příkaz spustit přímo, bez otevřeného terminálu. Pro spuštění v aktivním terminálu ponechte pole prázdné.",
-  "clearTargetHosts": "Jasný",
-  "noHostsAvailable": "Nejsou dostupní žádní hostitelé",
-  "searchHosts": "Vyhledávání hostitelů",
-  "runOnTargets": "Spustit na cílových hostitelích",
-  "executionResultTitle": "Výsledky pro „{{name}}“",
-  "executionResultDescription": "Výstup z každého cílového hostitele.",
-  "executionSuccess": "Úspěch",
-  "executionFailed": "Selhalo",
-  "directRunSuccess": "Spuštěno „{{name}}“ na hostiteli(ích) {{count}}",
-  "directRunPartialFail": "„{{name}}“ selhalo na některých hostitelích",
-  "reorderFailed": "Nepodařilo se změnit pořadí úryvků",
-  "dropToRemoveFromFolder": "Přetáhněte sem pro přesun ze složky",
-  "shareSnippetTitle": "Sdílet „{{name}}“",
-  "shareFolderTitle": "Sdílet složku „{{name}}“",
-  "shareWith": "Sdílet s",
-  "usersTab": "Uživatelé",
-  "rolesTab": "Role",
-  "shareSearchPlaceholder": "Vyhledávání uživatelů nebo rolí",
-  "shareNoMatches": "Žádné shody",
-  "shareWithCount": "Sdílet s {{count}}",
-  "shareFolderHint": "Sdílí všechny úryvky v této složce. Úryvky přidané později se nesdílejí automaticky.",
-  "shareFolderSummary": "Sdílené úryvky kódu {{count}} v této složce",
-  "grantedBy": "Uděleno",
-  "expired": "Platnost vypršela",
-  "variablesDialogTitle": "Spustit „{{name}}“",
-  "variablesDialogDescription": "Před spuštěním úryvku kódu vyplňte jeho potřebné hodnoty.",
-  "variablesPreviewLabel": "Náhled",
-  "variablesConfirmButton": "Běh",
-  "keybindings": {
-    "runSnippet": "Spustit existující úryvek kódu",
-    "snippetLabel": "Úryvek",
-    "selectSnippet": "Vyberte úryvek",
-    "snippetMissing": "úryvek nenalezen",
-    "snippetRequired": "Vyberte úryvek"
-  },
-  "paletteHintRun": "Spustit v aktivní kartě terminálu",
-  "host": {
-    "startupTitle": "Spustit úryvek",
-    "quickActionsTitle": "Rychlé akce",
-    "quickActionsDescription": "Rychlé akce se zobrazují jako tlačítka v panelu nástrojů Metriky hostitele pro spuštění příkazů jedním kliknutím.",
-    "noQuickActions": "Zatím žádné rychlé akce.",
-    "buttonLabel": "Štítek tlačítka",
-    "selectSnippet": "Vybrat úryvek...",
-    "addQuickAction": "Přidat akci",
-    "tabTitle": "Úryvky",
-    "startupDescription": "Spustí se v terminálu při každém připojení k tomuto hostiteli. Proměnné jako $HOST jsou vyplněny; úryvek kódu, který požaduje vstupy, je přeskočen.",
-    "none": "Žádný",
-    "removeQuickAction": "Odebrat rychlou akci"
-  },
-  "quickActions": {
-    "running": "Spouštění {{name}}...",
-    "succeeded": "{{name}} úspěšně dokončeno",
-    "failed": "{{name}} selhalo",
-    "error": "Nepodařilo se spustit {{name}}"
-  },
-  "paletteHintPaste": "Vložit do aktivní záložky terminálu",
-  "targetTerminals": "Zaběhnout",
-  "targetTerminalsHint": "volitelné, jinak aktivní záložka",
-  "selectAll": "Vše",
-  "selectNone": "Žádný",
-  "plugin": {
-    "name": "Úryvky"
-  }
-}
diff --git a/plugins/snippets/locales/translated/da_DK.json b/plugins/snippets/locales/translated/da_DK.json
deleted file mode 100644
index f8cb4ef03..000000000
--- a/plugins/snippets/locales/translated/da_DK.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Uddrag"
-  },
-  "onboarding": {
-    "feature_snippets": "Uddrag",
-    "feature_snippets_desc": "Gem kommandoer, du kører ofte, og send dem til en terminal med et enkelt klik."
-  },
-  "permissions": {
-    "view": {
-      "title": "Se uddrag",
-      "description": "Se dine egne uddrag, noter og delte uddrag."
-    },
-    "create": {
-      "title": "Opret uddrag",
-      "description": "Opret nye uddrag, noter og mapper."
-    },
-    "edit": {
-      "title": "Rediger uddrag",
-      "description": "Omdøb eller rediger eksisterende uddrag og mapper."
-    },
-    "delete": {
-      "title": "Slet uddrag",
-      "description": "Slet uddrag og mapper."
-    },
-    "share": {
-      "title": "Del uddrag",
-      "description": "Del uddrag og mapper med andre brugere eller roller."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Skjul mapper som standard",
-      "description": "Start hver uddragsmappe skjult, når du åbner panelet Uddrag."
-    },
-    "showCommands": {
-      "label": "Vis kommandoer",
-      "description": "Vis den første linje af hver kodestykkets kommando under dens navn."
-    },
-    "confirmExecution": {
-      "label": "Bekræft før kørsel",
-      "description": "Spørg før et kommandosnipp kører i en terminal."
-    }
-  },
-  "cancel": "Ophæve",
-  "loading": "Indlæser...",
-  "searchPlaceholder": "Søgeuddrag",
-  "newFolder": "Ny mappe",
-  "newSnippet": "Nyt uddrag",
-  "noFolder": "Ingen mappe",
-  "noSnippetsInFolder": "Ingen uddrag i denne mappe",
-  "noTerminalTabsOpen": "Ingen terminalfane er åben",
-  "run": "Løbe",
-  "pasteToTerminal": "Indsæt i terminalen",
-  "copySuccess": "Kopieret til udklipsholderen",
-  "importExport": "Import/eksport",
-  "importFailed": "Kunne ikke importere uddrag",
-  "nameLabel": "Navn",
-  "namePlaceholder": "Snippetnavn",
-  "descriptionLabel": "Beskrivelse",
-  "descriptionPlaceholder": "Valgfri beskrivelse",
-  "folderLabel": "Folder",
-  "typeLabel": "Type",
-  "typeCommand": "Kommando",
-  "typeNote": "Note",
-  "commandLabel": "Kommando",
-  "commandPlaceholder": "Kommando til at køre, f.eks. systemctl status $HOST",
-  "noteLabel": "Note",
-  "notePlaceholder": "Tekst, der skal indsættes i terminalen",
-  "createSnippetTitle": "Opret uddrag",
-  "createSnippetButton": "Opret uddrag",
-  "createSuccess": "Uddrag oprettet",
-  "createFailed": "Kunne ikke oprette kodestykket",
-  "editSnippetTitle": "Rediger uddrag",
-  "saveSnippetButton": "Gem uddrag",
-  "updateSuccess": "Uddrag opdateret",
-  "updateFailed": "Kunne ikke opdatere uddraget",
-  "deleteFailed": "Kunne ikke slette uddraget",
-  "createFolderTitle": "Opret mappe",
-  "createFolderButton": "Opret mappe",
-  "folderCreateSuccess": "Mappe oprettet",
-  "folderCreateFailed": "Kunne ikke oprette en mappe",
-  "editFolderTitle": "Rediger mappe",
-  "saveFolderButton": "Gem mappe",
-  "folderEditSuccess": "Mappen er opdateret",
-  "folderEditFailed": "Mappen kunne ikke opdateres",
-  "folderNameLabel": "Mappenavn",
-  "folderNamePlaceholder": "Mappenavn",
-  "folderIconLabel": "Ikon",
-  "folderDeleteSuccess": "Mappe slettet",
-  "folderDeleteFailed": "Kunne ikke slette mappen",
-  "confirmRunMessage": "Kør \"{{name}}\"?",
-  "confirmRunButton": "Løbe",
-  "runSuccess": "Kørte \"{{name}}\" på {{count}} terminal(er)",
-  "pasteSuccess": "Indsatte \"{{name}}\" i {{count}} terminal(er)",
-  "admin": {
-    "tabTitle": "Uddrag",
-    "count": "{{count}} uddrag",
-    "add": "Tilføj uddrag",
-    "namePlaceholder": "Snippetnavn",
-    "contentPlaceholder": "Kommandoindhold",
-    "folderPlaceholder": "Mappe (valgfrit)",
-    "empty": "Denne bruger har ingen uddrag",
-    "deleteConfirm": "Slet uddraget \"{{name}}\" der tilhører {{username}}?",
-    "deleted": "Uddrag slettet",
-    "deleteFailed": "Kunne ikke slette uddraget",
-    "requiredFields": "Navn og indhold på uddrag er påkrævet",
-    "saved": "Uddrag gemt",
-    "saveFailed": "Kunne ikke gemme uddraget",
-    "saving": "Gemmer...",
-    "save": "Spare"
-  },
-  "backToSnippets": "Tilbage til uddrag",
-  "settingsTitle": "Indstillinger for uddrag",
-  "settingsDisplayTitle": "Vise",
-  "settingsBehaviorTitle": "Opførsel",
-  "typeCommandHint": "Kører i den aktive terminal.",
-  "typeNoteHint": "Indsætter i den aktive terminal uden at køre.",
-  "variablesHint": "Variabler: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Label}",
-  "doubleClickToRun": "Dobbeltklik for at køre",
-  "sharedBadge": "Delt",
-  "copyToClipboard": "Kopiér til udklipsholder",
-  "copyFailed": "Kunne ikke kopiere til udklipsholder",
-  "moreOptions": "Flere muligheder",
-  "moreActions": "Flere handlinger",
-  "moveToFolder": "Flyt til mappe",
-  "deleteSnippet": "Slet uddrag",
-  "deleteSnippetConfirm": "Slet uddraget \"{{name}}\"?",
-  "deleteSuccess": "Uddrag slettet",
-  "delete": "Slet",
-  "folderActions": "Mappehandlinger",
-  "addSnippetHere": "Nyt uddrag her",
-  "deleteFolder": "Slet mappe",
-  "deleteFolderConfirm": "Slet mappen \"{{name}}\"? Dens uddrag flyttes ud af mappen.",
-  "createFolderDescription": "Gruppér relaterede uddrag sammen.",
-  "editFolderDescription": "Skift denne mappes navn, farve eller ikon.",
-  "folderColorLabel": "Farve",
-  "loadFailed": "Kunne ikke indlæse uddrag",
-  "importSkipExisting": "Importér (spring eksisterende over)",
-  "importOverwrite": "Importér (overskriv eksisterende)",
-  "importInvalidFile": "Den fil er ikke en gyldig eksport af kodestykker",
-  "importSuccess": "Importeret {{imported}}, opdateret {{updated}}, sprunget over {{skipped}}",
-  "exportSnippets": "Eksportér uddrag",
-  "exportSuccess": "Eksporterede uddrag",
-  "exportFailed": "Kunne ikke eksportere uddrag",
-  "expandAll": "Udvid alle mapper",
-  "collapseAll": "Skjul alle mapper",
-  "docsLink": "Dokumentation",
-  "clearSearch": "Ryd søgning",
-  "noSearchResults": "Ingen uddrag matcher din søgning",
-  "emptyTitle": "Ingen uddrag endnu",
-  "emptyDescription": "Gem kommandoer, du kører ofte, og kør dem derefter i en terminal med et enkelt klik.",
-  "shareSnippet": "Del uddrag",
-  "shareFolder": "Del mappe",
-  "shareExpiry": "Udløber",
-  "shareExpiryOptions": {
-    "h0": "Aldrig",
-    "h1": "Om 1 time",
-    "h24": "Om 1 dag",
-    "h168": "Om 7 dage",
-    "h720": "Om 30 dage"
-  },
-  "shareButton": "Dele",
-  "shareSuccess": "Delt med {{count}}",
-  "shareFailed": "Kunne ikke dele",
-  "shareLoadFailed": "Delingsoplysningerne kunne ikke indlæses",
-  "currentAccess": "Nuværende adgang",
-  "notSharedYet": "Ikke delt med nogen endnu",
-  "revokeAccess": "Tilbagekald",
-  "revokeSuccess": "Adgang tilbagekaldt",
-  "revokeFailed": "Adgang kunne ikke tilbagekaldes",
-  "close": "Tæt",
-  "targetHostsLabel": "Mål værter",
-  "targetHostsHint": "Vælg værter, som denne kommando skal køres direkte på, uden en terminal åben. Lad feltet stå tomt for at køre den i den aktive terminal.",
-  "clearTargetHosts": "Klar",
-  "noHostsAvailable": "Ingen værter tilgængelige",
-  "searchHosts": "Søg efter værter",
-  "runOnTargets": "Kør på målværter",
-  "executionResultTitle": "Resultater for \"{{name}}\"",
-  "executionResultDescription": "Output fra hver målvært.",
-  "executionSuccess": "Succes",
-  "executionFailed": "Mislykkedes",
-  "directRunSuccess": "Kørte \"{{name}}\" på {{count}} vært(er)",
-  "directRunPartialFail": "\"{{name}}\" mislykkedes på nogle værter",
-  "reorderFailed": "Kunne ikke omarrangere uddrag",
-  "dropToRemoveFromFolder": "Slip her for at flytte ud af mappen",
-  "shareSnippetTitle": "Del \"{{name}}\"",
-  "shareFolderTitle": "Del mappe \"{{name}}\"",
-  "shareWith": "Del med",
-  "usersTab": "Brugere",
-  "rolesTab": "Roller",
-  "shareSearchPlaceholder": "Søg efter brugere eller roller",
-  "shareNoMatches": "Ingen matches",
-  "shareWithCount": "Del med {{count}}",
-  "shareFolderHint": "Deler alle uddrag i denne mappe. Uddrag, der tilføjes senere, deles ikke automatisk.",
-  "shareFolderSummary": "Delte {{count}} kodestykker i denne mappe",
-  "grantedBy": "Tildelt af",
-  "expired": "Udløbet",
-  "variablesDialogTitle": "Kør \"{{name}}\"",
-  "variablesDialogDescription": "Udfyld de værdier, som dette kodestykke skal bruge, før det køres.",
-  "variablesPreviewLabel": "Forhåndsvisning",
-  "variablesConfirmButton": "Løbe",
-  "keybindings": {
-    "runSnippet": "Kør eksisterende kodestykke",
-    "snippetLabel": "Uddrag",
-    "selectSnippet": "Vælg et uddrag",
-    "snippetMissing": "uddrag ikke fundet",
-    "snippetRequired": "Vælg et uddrag"
-  },
-  "paletteHintRun": "Kør i den aktive terminalfane",
-  "host": {
-    "startupTitle": "Opstartskodestykke",
-    "quickActionsTitle": "Hurtige handlinger",
-    "quickActionsDescription": "Hurtige handlinger vises som knapper i værktøjslinjen Host Metrics til udførelse af kommandoer med et enkelt klik.",
-    "noQuickActions": "Ingen hurtige handlinger endnu.",
-    "buttonLabel": "Knapmærke",
-    "selectSnippet": "Vælg uddrag...",
-    "addQuickAction": "Tilføj handling",
-    "tabTitle": "Uddrag",
-    "startupDescription": "Kører i terminalen hver gang den opretter forbindelse til denne vært. Variabler som $HOST udfyldes; et kodestykke, der beder om input, springes over.",
-    "none": "Ingen",
-    "removeQuickAction": "Fjern hurtig handling"
-  },
-  "quickActions": {
-    "running": "Udfører {{name}}...",
-    "succeeded": "{{name}} gennemført",
-    "failed": "{{name}} mislykkedes",
-    "error": "Kunne ikke udføre {{name}}"
-  },
-  "paletteHintPaste": "Indsæt i den aktive terminalfane",
-  "targetTerminals": "Kør ind",
-  "targetTerminalsHint": "valgfrit, ellers den aktive fane",
-  "selectAll": "Alle",
-  "selectNone": "Ingen",
-  "plugin": {
-    "name": "Snippets"
-  }
-}
diff --git a/plugins/snippets/locales/translated/de_DE.json b/plugins/snippets/locales/translated/de_DE.json
deleted file mode 100644
index cdac19569..000000000
--- a/plugins/snippets/locales/translated/de_DE.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Snippets"
-  },
-  "onboarding": {
-    "feature_snippets": "Snippets",
-    "feature_snippets_desc": "Speichern Sie häufig ausgeführte Befehle und senden Sie sie mit einem Klick an ein Terminal."
-  },
-  "permissions": {
-    "view": {
-      "title": "Ausschnitte ansehen",
-      "description": "Sehen Sie Ihre eigenen Ausschnitte, Notizen und geteilten Ausschnitte."
-    },
-    "create": {
-      "title": "Code-Snippets erstellen",
-      "description": "Neue Snippets, Notizen und Ordner erstellen."
-    },
-    "edit": {
-      "title": "Bearbeitungs-Snippets",
-      "description": "Vorhandene Snippets und Ordner umbenennen oder ändern."
-    },
-    "delete": {
-      "title": "Code-Snippets löschen",
-      "description": "Snippets und Ordner löschen."
-    },
-    "share": {
-      "title": "Ausschnitte teilen",
-      "description": "Teilen Sie Codeausschnitte und Ordner mit anderen Benutzern oder Rollen."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Ordner standardmäßig einklappen",
-      "description": "Beim Öffnen des Snippets-Panels sind alle Snippet-Ordner standardmäßig ausgeblendet."
-    },
-    "showCommands": {
-      "label": "Befehle anzeigen",
-      "description": "Zeigen Sie die erste Zeile des Befehls jedes Code-Snippets unter dessen Namen an."
-    },
-    "confirmExecution": {
-      "label": "Vor dem Ausführen bestätigen.",
-      "description": "Fragen Sie vor der Ausführung eines Befehlsabschnitts im Terminal nach."
-    }
-  },
-  "cancel": "Abbrechen",
-  "loading": "Laden...",
-  "searchPlaceholder": "Snippets durchsuchen",
-  "newFolder": "Neuer Ordner",
-  "newSnippet": "Neuer Ausschnitt",
-  "noFolder": "Kein Ordner",
-  "noSnippetsInFolder": "Keine Snippets in diesem Ordner",
-  "noTerminalTabsOpen": "Es ist kein Terminal-Tab geöffnet.",
-  "run": "Ausführen",
-  "pasteToTerminal": "In Terminal einfügen",
-  "copySuccess": "In die Zwischenablage kopiert",
-  "importExport": "Import / Export",
-  "importFailed": "Snippets konnten nicht importiert werden",
-  "nameLabel": "Name",
-  "namePlaceholder": "Snippet-Name",
-  "descriptionLabel": "Beschreibung",
-  "descriptionPlaceholder": "Optionale Beschreibung",
-  "folderLabel": "Ordner",
-  "typeLabel": "Typ",
-  "typeCommand": "Befehl",
-  "typeNote": "Notiz",
-  "commandLabel": "Befehl",
-  "commandPlaceholder": "Auszuführender Befehl, z. B. systemctl status $HOST",
-  "noteLabel": "Notiz",
-  "notePlaceholder": "Text, der in das Terminal eingefügt werden soll",
-  "createSnippetTitle": "Snippet erstellen",
-  "createSnippetButton": "Snippet erstellen",
-  "createSuccess": "Snippet erstellt",
-  "createFailed": "Erstellen des Snippets fehlgeschlagen",
-  "editSnippetTitle": "Ausschnitt bearbeiten",
-  "saveSnippetButton": "Ausschnitt speichern",
-  "updateSuccess": "Ausschnitt aktualisiert",
-  "updateFailed": "Aktualisieren des Snippets fehlgeschlagen",
-  "deleteFailed": "Löschen des Snippets fehlgeschlagen",
-  "createFolderTitle": "Ordner erstellen",
-  "createFolderButton": "Ordner erstellen",
-  "folderCreateSuccess": "Ordner erstellt",
-  "folderCreateFailed": "Erstellen des Ordners fehlgeschlagen",
-  "editFolderTitle": "Ordner bearbeiten",
-  "saveFolderButton": "Ordner speichern",
-  "folderEditSuccess": "Ordner aktualisiert",
-  "folderEditFailed": "Aktualisieren des Ordners fehlgeschlagen",
-  "folderNameLabel": "Ordnername",
-  "folderNamePlaceholder": "Ordnername",
-  "folderIconLabel": "Symbol",
-  "folderDeleteSuccess": "Ordner gelöscht",
-  "folderDeleteFailed": "Löschen des Ordners fehlgeschlagen",
-  "confirmRunMessage": "„{{name}}“ ausführen?",
-  "confirmRunButton": "Ausführen",
-  "runSuccess": "Ran \"{{name}}\" on {{count}} terminal(s)",
-  "pasteSuccess": "\"{{name}}\" wurde in das/die Terminal(s) {{count}} eingefügt",
-  "admin": {
-    "tabTitle": "Snippets",
-    "count": "{{count}} Snippets",
-    "add": "Snippet hinzufügen",
-    "namePlaceholder": "Snippet-Name",
-    "contentPlaceholder": "Befehlsinhalt",
-    "folderPlaceholder": "Ordner (optional)",
-    "empty": "Dieser Benutzer hat keine Snippets",
-    "deleteConfirm": "Snippet \"{{name}}\" von {{username}} löschen?",
-    "deleted": "Snippet gelöscht",
-    "deleteFailed": "Löschen des Snippets fehlgeschlagen",
-    "requiredFields": "Name und Inhalt des Snippets sind erforderlich",
-    "saved": "Snippet gespeichert",
-    "saveFailed": "Fehler beim Speichern des Snippets",
-    "saving": "Speichern...",
-    "save": "Speichern"
-  },
-  "backToSnippets": "Zurück zu den Ausschnitten",
-  "settingsTitle": "Snippet-Einstellungen",
-  "settingsDisplayTitle": "Anzeige",
-  "settingsBehaviorTitle": "Verhalten",
-  "typeCommandHint": "Wird im aktiven Terminal ausgeführt.",
-  "typeNoteHint": "Fügt den Inhalt in das aktive Terminal ein, ohne es auszuführen.",
-  "variablesHint": "Variablen: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Label}",
-  "doubleClickToRun": "Doppelklicken zum Ausführen",
-  "sharedBadge": "Freigegeben",
-  "copyToClipboard": "In die Zwischenablage kopieren",
-  "copyFailed": "Kopieren in die Zwischenablage fehlgeschlagen",
-  "moreOptions": "Mehr Optionen",
-  "moreActions": "Weitere Aktionen",
-  "moveToFolder": "In Ordner verschieben",
-  "deleteSnippet": "Ausschnitt löschen",
-  "deleteSnippetConfirm": "Ausschnitt löschen \"{{name}}\"?",
-  "deleteSuccess": "Snippet gelöscht",
-  "delete": "Löschen",
-  "folderActions": "Ordneraktionen",
-  "addSnippetHere": "Neuer Ausschnitt hier",
-  "deleteFolder": "Ordner löschen",
-  "deleteFolderConfirm": "Ordner \"{{name}}\" löschen? Seine Snippets werden aus dem Ordner verschoben.",
-  "createFolderDescription": "Zusammengehörige Textbausteine gruppieren.",
-  "editFolderDescription": "Ändern Sie den Namen, die Farbe oder das Symbol dieses Ordners.",
-  "folderColorLabel": "Farbe",
-  "loadFailed": "Snippets konnten nicht geladen werden",
-  "importSkipExisting": "Importieren (Bestehende überspringen)",
-  "importOverwrite": "Importieren (vorhandene Daten überschreiben)",
-  "importInvalidFile": "Diese Datei ist kein gültiger Snippet-Export.",
-  "importSuccess": "Importiert {{imported}}, aktualisiert {{updated}}, übersprungen {{skipped}}",
-  "exportSnippets": "Export-Snippets",
-  "exportSuccess": "Ausschnitte exportiert",
-  "exportFailed": "Snippets konnten nicht exportiert werden",
-  "expandAll": "Alle Ordner ausklappen",
-  "collapseAll": "Alle Ordner einklappen",
-  "docsLink": "Dokumentation",
-  "clearSearch": "Suche löschen",
-  "noSearchResults": "Keine Suchergebnisse entsprechen Ihrer Suche",
-  "emptyTitle": "Noch keine Ausschnitte.",
-  "emptyDescription": "Speichern Sie häufig verwendete Befehle und führen Sie diese dann mit einem Klick im Terminal aus.",
-  "shareSnippet": "Ausschnitt teilen",
-  "shareFolder": "Ordner freigeben",
-  "shareExpiry": "Läuft ab",
-  "shareExpiryOptions": {
-    "h0": "Nie",
-    "h1": "In 1 Stunde",
-    "h24": "In 1 Tag",
-    "h168": "In 7 Tagen",
-    "h720": "In 30 Tagen"
-  },
-  "shareButton": "Teilen",
-  "shareSuccess": "Geteilt mit {{count}}",
-  "shareFailed": "Übermittlung fehlgeschlagen",
-  "shareLoadFailed": "Die Freigabedetails konnten nicht geladen werden.",
-  "currentAccess": "Aktueller Zugriff",
-  "notSharedYet": "Noch mit niemandem geteilt",
-  "revokeAccess": "Widerrufen",
-  "revokeSuccess": "Zugriff widerrufen",
-  "revokeFailed": "Zugriff konnte nicht widerrufen werden",
-  "close": "Schließen",
-  "targetHostsLabel": "Zielhosts",
-  "targetHostsHint": "Wählen Sie die Hosts aus, auf denen dieser Befehl direkt, ohne geöffnetes Terminal, ausgeführt werden soll. Lassen Sie das Feld leer, um ihn im aktiven Terminal auszuführen.",
-  "clearTargetHosts": "Löschen",
-  "noHostsAvailable": "Keine Hosts verfügbar",
-  "searchHosts": "Hosts suchen",
-  "runOnTargets": "Auf den Zielhosts ausführen",
-  "executionResultTitle": "Ergebnisse für \"{{name}}\"",
-  "executionResultDescription": "Ausgabe von jedem Zielhost.",
-  "executionSuccess": "Erfolgreich",
-  "executionFailed": "Fehlgeschlagen",
-  "directRunSuccess": "\"{{name}}\" auf {{count}} Host(s) ausgeführt",
-  "directRunPartialFail": "\"{{name}}\" schlug auf einigen Hosts fehl.",
-  "reorderFailed": "Fehler beim Neuanordnen der Codeausschnitte",
-  "dropToRemoveFromFolder": "Hierhin ziehen, um den Ordner zu verlassen",
-  "shareSnippetTitle": "Teilen \"{{name}}\"",
-  "shareFolderTitle": "Ordner freigeben \"{{name}}\"",
-  "shareWith": "Teilen mit",
-  "usersTab": "Benutzer",
-  "rolesTab": "Rollen",
-  "shareSearchPlaceholder": "Benutzer oder Rollen suchen",
-  "shareNoMatches": "Keine Übereinstimmungen",
-  "shareWithCount": "Teilen mit {{count}}",
-  "shareFolderHint": "Teilt alle Code-Snippets in diesem Ordner. Später hinzugefügte Snippets werden nicht automatisch geteilt.",
-  "shareFolderSummary": "Gemeinsame {{count}} Codeausschnitte in diesem Ordner",
-  "grantedBy": "Freigegeben von",
-  "expired": "Abgelaufen",
-  "variablesDialogTitle": "Run \"{{name}}\"",
-  "variablesDialogDescription": "Füllen Sie die für diesen Codeabschnitt erforderlichen Werte aus, bevor Sie ihn ausführen.",
-  "variablesPreviewLabel": "Vorschau",
-  "variablesConfirmButton": "Ausführen",
-  "keybindings": {
-    "runSnippet": "Vorhandenen Codeausschnitt ausführen",
-    "snippetLabel": "Ausschnitt",
-    "selectSnippet": "Wählen Sie einen Ausschnitt aus",
-    "snippetMissing": "Ausschnitt nicht gefunden",
-    "snippetRequired": "Wählen Sie einen Ausschnitt aus"
-  },
-  "paletteHintRun": "Im aktiven Terminal-Tab ausführen",
-  "host": {
-    "startupTitle": "Startup-Snippet",
-    "quickActionsTitle": "Schnellaktionen",
-    "quickActionsDescription": "Schnellaktionen erscheinen als Schaltflächen in der Host-Metriken-Symbolleiste zur Ausführung von Befehlen mit einem Klick.",
-    "noQuickActions": "Noch keine Schnellaktionen.",
-    "buttonLabel": "Schaltflächenbeschriftung",
-    "selectSnippet": "Snippet auswählen...",
-    "addQuickAction": "Aktion hinzufügen",
-    "tabTitle": "Snippets",
-    "startupDescription": "Wird bei jeder Verbindung zu diesem Host im Terminal ausgeführt. Variablen wie $HOST werden ausgefüllt; ein Codeabschnitt, der nach Eingaben fragt, wird übersprungen.",
-    "none": "Keine",
-    "removeQuickAction": "Schnellaktion entfernen"
-  },
-  "quickActions": {
-    "running": "{{name}} wird ausgeführt...",
-    "succeeded": "{{name}} erfolgreich abgeschlossen",
-    "failed": "{{name}} fehlgeschlagen",
-    "error": "Fehler beim Ausführen von {{name}}"
-  },
-  "paletteHintPaste": "Fügen Sie es im aktiven Terminal-Tab ein.",
-  "targetTerminals": "Laufen",
-  "targetTerminalsHint": "optional, ansonsten der aktive Tab",
-  "selectAll": "Alle",
-  "selectNone": "Keine",
-  "plugin": {
-    "name": "Snippets"
-  }
-}
diff --git a/plugins/snippets/locales/translated/el_GR.json b/plugins/snippets/locales/translated/el_GR.json
deleted file mode 100644
index fc7cc35fc..000000000
--- a/plugins/snippets/locales/translated/el_GR.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Αποσπάσματα"
-  },
-  "onboarding": {
-    "feature_snippets": "Αποσπάσματα",
-    "feature_snippets_desc": "Αποθηκεύστε τις εντολές που εκτελείτε συχνά και στείλτε τις σε ένα τερματικό με ένα κλικ."
-  },
-  "permissions": {
-    "view": {
-      "title": "Προβολή αποσπασμάτων",
-      "description": "Δείτε τα δικά σας αποσπάσματα, σημειώσεις και κοινόχρηστα αποσπάσματα."
-    },
-    "create": {
-      "title": "Δημιουργία αποσπασμάτων",
-      "description": "Δημιουργήστε νέα αποσπάσματα, σημειώσεις και φακέλους."
-    },
-    "edit": {
-      "title": "Επεξεργασία αποσπασμάτων",
-      "description": "Μετονομάστε ή αλλάξτε υπάρχοντα αποσπάσματα και φακέλους."
-    },
-    "delete": {
-      "title": "Διαγραφή αποσπασμάτων",
-      "description": "Διαγραφή αποσπασμάτων και φακέλων."
-    },
-    "share": {
-      "title": "Κοινή χρήση αποσπασμάτων",
-      "description": "Κοινή χρήση αποσπασμάτων και φακέλων με άλλους χρήστες ή ρόλους."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Σύμπτυξη φακέλων από προεπιλογή",
-      "description": "Ξεκινήστε κάθε φάκελο αποσπάσματος συμπτυγμένο όταν ανοίγετε τον πίνακα Αποσπάσματα."
-    },
-    "showCommands": {
-      "label": "Εμφάνιση εντολών",
-      "description": "Εμφανίστε την πρώτη γραμμή της εντολής κάθε τμήματος κώδικα κάτω από το όνομά της."
-    },
-    "confirmExecution": {
-      "label": "Επιβεβαίωση πριν από την εκτέλεση",
-      "description": "Ερώτηση πριν από την εκτέλεση ενός αποσπάσματος εντολής σε ένα τερματικό."
-    }
-  },
-  "cancel": "Ματαίωση",
-  "loading": "Φόρτωση...",
-  "searchPlaceholder": "Αναζήτηση αποσπασμάτων",
-  "newFolder": "Νέος φάκελος",
-  "newSnippet": "Νέο απόσπασμα",
-  "noFolder": "Δεν υπάρχει φάκελος",
-  "noSnippetsInFolder": "Δεν υπάρχουν αποσπάσματα σε αυτόν τον φάκελο",
-  "noTerminalTabsOpen": "Δεν υπάρχει ανοιχτή καρτέλα τερματικού",
-  "run": "Τρέξιμο",
-  "pasteToTerminal": "Επικόλληση στο τερματικό",
-  "copySuccess": "Αντιγράφηκε στο πρόχειρο",
-  "importExport": "Εισαγωγή / Εξαγωγή",
-  "importFailed": "Η εισαγωγή αποσπασμάτων απέτυχε",
-  "nameLabel": "Ονομα",
-  "namePlaceholder": "Όνομα αποσπάσματος",
-  "descriptionLabel": "Περιγραφή",
-  "descriptionPlaceholder": "Προαιρετική περιγραφή",
-  "folderLabel": "Ντοσιέ",
-  "typeLabel": "Τύπος",
-  "typeCommand": "Εντολή",
-  "typeNote": "Σημείωμα",
-  "commandLabel": "Εντολή",
-  "commandPlaceholder": "Εντολή για εκτέλεση, π.χ. systemctl status $HOST",
-  "noteLabel": "Σημείωμα",
-  "notePlaceholder": "Κείμενο για επικόλληση στο τερματικό",
-  "createSnippetTitle": "Δημιουργία αποσπάσματος",
-  "createSnippetButton": "Δημιουργία αποσπάσματος",
-  "createSuccess": "Δημιουργήθηκε απόσπασμα",
-  "createFailed": "Η δημιουργία αποσπάσματος απέτυχε",
-  "editSnippetTitle": "Επεξεργασία αποσπάσματος",
-  "saveSnippetButton": "Αποθήκευση αποσπάσματος",
-  "updateSuccess": "Το απόσπασμα ενημερώθηκε",
-  "updateFailed": "Η ενημέρωση του αποσπάσματος απέτυχε",
-  "deleteFailed": "Η διαγραφή του αποσπάσματος απέτυχε",
-  "createFolderTitle": "Δημιουργία φακέλου",
-  "createFolderButton": "Δημιουργία φακέλου",
-  "folderCreateSuccess": "Ο φάκελος δημιουργήθηκε",
-  "folderCreateFailed": "Η δημιουργία φακέλου απέτυχε",
-  "editFolderTitle": "Επεξεργασία φακέλου",
-  "saveFolderButton": "Αποθήκευση φακέλου",
-  "folderEditSuccess": "Ο φάκελος ενημερώθηκε",
-  "folderEditFailed": "Η ενημέρωση του φακέλου απέτυχε",
-  "folderNameLabel": "Όνομα φακέλου",
-  "folderNamePlaceholder": "Όνομα φακέλου",
-  "folderIconLabel": "Εικόνισμα",
-  "folderDeleteSuccess": "Ο φάκελος διαγράφηκε",
-  "folderDeleteFailed": "Η διαγραφή του φακέλου απέτυχε",
-  "confirmRunMessage": "Εκτέλεση \"{{name}}\";",
-  "confirmRunButton": "Τρέξιμο",
-  "runSuccess": "Εκτέλεση \"{{name}}\" σε {{count}} τερματικό(α)",
-  "pasteSuccess": "Επικολλήθηκε το \"{{name}}\" σε {{count}} τερματικό(α)",
-  "admin": {
-    "tabTitle": "Αποσπάσματα",
-    "count": "{{count}} αποσπάσματα",
-    "add": "Προσθήκη αποσπάσματος",
-    "namePlaceholder": "Όνομα αποσπάσματος",
-    "contentPlaceholder": "Περιεχόμενο εντολών",
-    "folderPlaceholder": "Φάκελος (προαιρετικό)",
-    "empty": "Αυτός ο χρήστης δεν έχει αποσπάσματα",
-    "deleteConfirm": "Διαγραφή αποσπάσματος \"{{name}}\" που ανήκει στο {{username}};",
-    "deleted": "Το απόσπασμα διαγράφηκε",
-    "deleteFailed": "Η διαγραφή του αποσπάσματος απέτυχε",
-    "requiredFields": "Απαιτούνται το όνομα και το περιεχόμενο του αποσπάσματος",
-    "saved": "Το απόσπασμα αποθηκεύτηκε",
-    "saveFailed": "Η αποθήκευση του αποσπάσματος απέτυχε",
-    "saving": "Οικονομία...",
-    "save": "Εκτός"
-  },
-  "backToSnippets": "Επιστροφή στα αποσπάσματα",
-  "settingsTitle": "Ρυθμίσεις αποσπάσματος",
-  "settingsDisplayTitle": "Επίδειξη",
-  "settingsBehaviorTitle": "Συμπεριφορά",
-  "typeCommandHint": "Εκτελείται στο ενεργό τερματικό.",
-  "typeNoteHint": "Επικολλά στο ενεργό τερματικό χωρίς να εκτελείται.",
-  "variablesHint": "Μεταβλητές: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Label}",
-  "doubleClickToRun": "Κάντε διπλό κλικ για εκτέλεση",
-  "sharedBadge": "Κοινόχρηστο",
-  "copyToClipboard": "Αντιγραφή στο πρόχειρο",
-  "copyFailed": "Η αντιγραφή στο πρόχειρο απέτυχε",
-  "moreOptions": "Περισσότερες επιλογές",
-  "moreActions": "Περισσότερες ενέργειες",
-  "moveToFolder": "Μετακίνηση σε φάκελο",
-  "deleteSnippet": "Διαγραφή αποσπάσματος",
-  "deleteSnippetConfirm": "Διαγραφή αποσπάσματος \"{{name}}\";",
-  "deleteSuccess": "Το απόσπασμα διαγράφηκε",
-  "delete": "Διαγράφω",
-  "folderActions": "Ενέργειες φακέλου",
-  "addSnippetHere": "Νέο απόσπασμα εδώ",
-  "deleteFolder": "Διαγραφή φακέλου",
-  "deleteFolderConfirm": "Διαγραφή φακέλου \"{{name}}\"; Τα αποσπάσματά του μετακινούνται εκτός του φακέλου.",
-  "createFolderDescription": "Ομαδοποιήστε σχετικά αποσπάσματα.",
-  "editFolderDescription": "Αλλάξτε το όνομα, το χρώμα ή το εικονίδιο αυτού του φακέλου.",
-  "folderColorLabel": "Χρώμα",
-  "loadFailed": "Η φόρτωση αποσπασμάτων απέτυχε",
-  "importSkipExisting": "Εισαγωγή (παράλειψη υπαρχόντων)",
-  "importOverwrite": "Εισαγωγή (αντικατάσταση υπαρχόντων)",
-  "importInvalidFile": "Αυτό το αρχείο δεν αποτελεί έγκυρη εξαγωγή αποσπασμάτων (snippets)",
-  "importSuccess": "Εισήχθη {{imported}}, ενημερώθηκε {{updated}}, παραλείφθηκε {{skipped}}",
-  "exportSnippets": "Εξαγωγή αποσπασμάτων",
-  "exportSuccess": "Αποσπάσματα που εξήχθησαν",
-  "exportFailed": "Η εξαγωγή αποσπασμάτων απέτυχε",
-  "expandAll": "Ανάπτυξη όλων των φακέλων",
-  "collapseAll": "Σύμπτυξη όλων των φακέλων",
-  "docsLink": "Απόδειξη με έγγραφα",
-  "clearSearch": "Εκκαθάριση αναζήτησης",
-  "noSearchResults": "Δεν υπάρχουν αποσπάσματα που να αντιστοιχούν στην αναζήτησή σας",
-  "emptyTitle": "Δεν υπάρχουν ακόμη αποσπάσματα",
-  "emptyDescription": "Αποθηκεύστε τις εντολές που εκτελείτε συχνά και, στη συνέχεια, εκτελέστε τες σε ένα τερματικό με ένα κλικ.",
-  "shareSnippet": "Κοινή χρήση αποσπάσματος",
-  "shareFolder": "Κοινή χρήση φακέλου",
-  "shareExpiry": "Λήγει",
-  "shareExpiryOptions": {
-    "h0": "Ποτέ",
-    "h1": "Σε 1 ώρα",
-    "h24": "Σε 1 ημέρα",
-    "h168": "Σε 7 ημέρες",
-    "h720": "Σε 30 ημέρες"
-  },
-  "shareButton": "Μερίδιο",
-  "shareSuccess": "Κοινοποιημένο με {{count}}",
-  "shareFailed": "Η κοινοποίηση απέτυχε",
-  "shareLoadFailed": "Αποτυχία φόρτωσης λεπτομερειών κοινής χρήσης",
-  "currentAccess": "Τρέχουσα πρόσβαση",
-  "notSharedYet": "Δεν έχει κοινοποιηθεί ακόμη σε κανέναν",
-  "revokeAccess": "Ανακαλώ",
-  "revokeSuccess": "Η πρόσβαση ανακλήθηκε",
-  "revokeFailed": "Η ανάκληση της πρόσβασης απέτυχε",
-  "close": "Κοντά",
-  "targetHostsLabel": "Στοχευμένοι οικοδεσπότες",
-  "targetHostsHint": "Επιλέξτε κεντρικούς υπολογιστές στους οποίους θα εκτελεστεί αυτή η εντολή απευθείας, χωρίς να είναι ανοιχτό κάποιο τερματικό. Αφήστε το κενό για να την εκτελέσετε στο ενεργό τερματικό.",
-  "clearTargetHosts": "Σαφής",
-  "noHostsAvailable": "Δεν υπάρχουν διαθέσιμοι κεντρικοί υπολογιστές",
-  "searchHosts": "Αναζήτηση κεντρικών υπολογιστών",
-  "runOnTargets": "Εκτέλεση σε κεντρικούς υπολογιστές-στόχους",
-  "executionResultTitle": "Αποτελέσματα για \"{{name}}\"",
-  "executionResultDescription": "Έξοδος από κάθε κεντρικό υπολογιστή-στόχο.",
-  "executionSuccess": "Επιτυχία",
-  "executionFailed": "Αποτυχημένος",
-  "directRunSuccess": "Εκτέλεση \"{{name}}\" σε {{count}} κεντρικό υπολογιστή (ή κεντρικούς υπολογιστές)",
-  "directRunPartialFail": "Το \"{{name}}\" απέτυχε σε ορισμένους κεντρικούς υπολογιστές",
-  "reorderFailed": "Η αναδιάταξη των αποσπασμάτων απέτυχε",
-  "dropToRemoveFromFolder": "Αποθέστε εδώ για να μετακινηθείτε εκτός του φακέλου",
-  "shareSnippetTitle": "Κοινή χρήση \"{{name}}\"",
-  "shareFolderTitle": "Κοινόχρηστος φάκελος \"{{name}}\"",
-  "shareWith": "Κοινοποίηση με",
-  "usersTab": "Χρήστες",
-  "rolesTab": "Ρόλοι",
-  "shareSearchPlaceholder": "Αναζήτηση χρηστών ή ρόλων",
-  "shareNoMatches": "Δεν υπάρχουν αντιστοιχίσεις",
-  "shareWithCount": "Κοινοποίηση με {{count}}",
-  "shareFolderHint": "Κοινοποιεί κάθε απόσπασμα σε αυτόν τον φάκελο. Τα αποσπάσματα που προστίθενται αργότερα δεν κοινοποιούνται αυτόματα.",
-  "shareFolderSummary": "Κοινόχρηστο {{count}} απόσπασμα(-τα) σε αυτόν τον φάκελο",
-  "grantedBy": "Χορηγήθηκε από",
-  "expired": "Λήξη",
-  "variablesDialogTitle": "Εκτέλεση \"{{name}}\"",
-  "variablesDialogDescription": "Συμπληρώστε τις τιμές που χρειάζεται αυτό το τμήμα κώδικα πριν το εκτελέσετε.",
-  "variablesPreviewLabel": "Πρεμιέρα",
-  "variablesConfirmButton": "Τρέξιμο",
-  "keybindings": {
-    "runSnippet": "Εκτέλεση υπάρχοντος αποσπάσματος",
-    "snippetLabel": "Απόσπασμα",
-    "selectSnippet": "Επιλέξτε ένα απόσπασμα",
-    "snippetMissing": "το απόσπασμα δεν βρέθηκε",
-    "snippetRequired": "Επιλέξτε ένα απόσπασμα"
-  },
-  "paletteHintRun": "Εκτέλεση στην ενεργή καρτέλα τερματικού",
-  "host": {
-    "startupTitle": "Απόσπασμα εκκίνησης",
-    "quickActionsTitle": "Γρήγορες ενέργειες",
-    "quickActionsDescription": "Οι γρήγορες ενέργειες εμφανίζονται ως κουμπιά στη γραμμή εργαλείων Μετρήσεων κεντρικού υπολογιστή για εκτέλεση εντολών με ένα κλικ.",
-    "noQuickActions": "Δεν υπάρχουν ακόμη γρήγορες ενέργειες.",
-    "buttonLabel": "Ετικέτα κουμπιού",
-    "selectSnippet": "Επιλογή αποσπάσματος...",
-    "addQuickAction": "Προσθήκη ενέργειας",
-    "tabTitle": "Αποσπάσματα",
-    "startupDescription": "Εκτελείται στο τερματικό κάθε φορά που συνδέεται με αυτόν τον κεντρικό υπολογιστή. Μεταβλητές όπως $HOST συμπληρώνονται. Ένα τμήμα κώδικα που ζητά δεδομένα εισόδου παραλείπεται.",
-    "none": "Κανένας",
-    "removeQuickAction": "Κατάργηση γρήγορης ενέργειας"
-  },
-  "quickActions": {
-    "running": "Εκτέλεση {{name}}...",
-    "succeeded": "{{name}} ολοκληρώθηκε με επιτυχία",
-    "failed": "{{name}} απέτυχε",
-    "error": "Αποτυχία εκτέλεσης {{name}}"
-  },
-  "paletteHintPaste": "Επικόλληση στην ενεργή καρτέλα τερματικού",
-  "targetTerminals": "Τρέξιμο μέσα",
-  "targetTerminalsHint": "προαιρετικά, διαφορετικά η ενεργή καρτέλα",
-  "selectAll": "Ολοι",
-  "selectNone": "Κανένας",
-  "plugin": {
-    "name": "Αποσπάσματα"
-  }
-}
diff --git a/plugins/snippets/locales/translated/es_ES.json b/plugins/snippets/locales/translated/es_ES.json
deleted file mode 100644
index 87676f891..000000000
--- a/plugins/snippets/locales/translated/es_ES.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Fragmentos"
-  },
-  "onboarding": {
-    "feature_snippets": "Snippets",
-    "feature_snippets_desc": "Guarda los comandos que ejecutas con frecuencia y envíalos a una terminal con un solo clic."
-  },
-  "permissions": {
-    "view": {
-      "title": "Ver fragmentos",
-      "description": "Consulta tus propios fragmentos, notas y fragmentos compartidos."
-    },
-    "create": {
-      "title": "Crear fragmentos",
-      "description": "Crea nuevos fragmentos, notas y carpetas."
-    },
-    "edit": {
-      "title": "Editar fragmentos",
-      "description": "Cambiar el nombre o modificar los fragmentos y carpetas existentes."
-    },
-    "delete": {
-      "title": "Eliminar fragmentos",
-      "description": "Eliminar fragmentos y carpetas."
-    },
-    "share": {
-      "title": "Compartir fragmentos",
-      "description": "Comparta fragmentos y carpetas con otros usuarios o roles."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Contraer carpetas por defecto",
-      "description": "Al abrir el panel de fragmentos, cada carpeta de fragmentos aparecerá contraída."
-    },
-    "showCommands": {
-      "label": "Mostrar comandos",
-      "description": "Muestra la primera línea del comando de cada fragmento debajo de su nombre."
-    },
-    "confirmExecution": {
-      "label": "Confirmar antes de ejecutar",
-      "description": "Pregunte antes de ejecutar un fragmento de comando en una terminal."
-    }
-  },
-  "cancel": "Cancelar",
-  "loading": "Cargando...",
-  "searchPlaceholder": "Buscar fragmentos",
-  "newFolder": "Nueva carpeta",
-  "newSnippet": "Nuevo fragmento",
-  "noFolder": "Sin carpeta",
-  "noSnippetsInFolder": "No hay fragmentos en esta carpeta",
-  "noTerminalTabsOpen": "No hay ninguna pestaña de terminal abierta.",
-  "run": "Ejecutar",
-  "pasteToTerminal": "Pegar en la terminal",
-  "copySuccess": "Copiado al portapapeles",
-  "importExport": "Importar / Exportar",
-  "importFailed": "Error al importar los fragmentos",
-  "nameLabel": "Nombre",
-  "namePlaceholder": "Nombre del fragmento",
-  "descriptionLabel": "Descripción",
-  "descriptionPlaceholder": "Descripción opcional",
-  "folderLabel": "Carpeta",
-  "typeLabel": "Tipo",
-  "typeCommand": "Comando",
-  "typeNote": "Nota",
-  "commandLabel": "Comando",
-  "commandPlaceholder": "Comando a ejecutar, por ejemplo systemctl status $HOST",
-  "noteLabel": "Nota",
-  "notePlaceholder": "Texto para pegar en la terminal",
-  "createSnippetTitle": "Crear fragmento",
-  "createSnippetButton": "Crear fragmento",
-  "createSuccess": "Fragmento creado",
-  "createFailed": "No se pudo crear el fragmento",
-  "editSnippetTitle": "Editar fragmento",
-  "saveSnippetButton": "Guardar fragmento",
-  "updateSuccess": "Fragmento actualizado",
-  "updateFailed": "No se pudo actualizar el fragmento",
-  "deleteFailed": "No se pudo eliminar el fragmento",
-  "createFolderTitle": "Crear carpeta",
-  "createFolderButton": "Crear carpeta",
-  "folderCreateSuccess": "Carpeta creada",
-  "folderCreateFailed": "No se pudo crear la carpeta",
-  "editFolderTitle": "Editar carpeta",
-  "saveFolderButton": "Guardar carpeta",
-  "folderEditSuccess": "Carpeta actualizada",
-  "folderEditFailed": "No se pudo actualizar la carpeta",
-  "folderNameLabel": "Nombre de la carpeta",
-  "folderNamePlaceholder": "Nombre de la carpeta",
-  "folderIconLabel": "Icono",
-  "folderDeleteSuccess": "Carpeta eliminada",
-  "folderDeleteFailed": "No se pudo eliminar la carpeta",
-  "confirmRunMessage": "¿Ejecutar \"{{name}}\"?",
-  "confirmRunButton": "Ejecutar",
-  "runSuccess": "Se ejecutó \"{{name}}\" en {{count}} terminal(es)",
-  "pasteSuccess": "Se pegó \"{{name}}\" en {{count}} terminal(es)",
-  "admin": {
-    "tabTitle": "Snippets",
-    "count": "{{count}} fragmentos",
-    "add": "Añadir fragmento",
-    "namePlaceholder": "Nombre del fragmento",
-    "contentPlaceholder": "Contenido del comando",
-    "folderPlaceholder": "Carpeta (opcional)",
-    "empty": "Este usuario no tiene fragmentos",
-    "deleteConfirm": "¿Eliminar fragmento \"{{name}}\" de {{username}}?",
-    "deleted": "Fragmento eliminado",
-    "deleteFailed": "No se pudo eliminar el fragmento",
-    "requiredFields": "El nombre y el contenido del fragmento son obligatorios",
-    "saved": "Fragmento guardado",
-    "saveFailed": "Error al guardar fragmento",
-    "saving": "Guardando...",
-    "save": "Guardar"
-  },
-  "backToSnippets": "Volver a los fragmentos",
-  "settingsTitle": "Configuración del fragmento",
-  "settingsDisplayTitle": "Mostrar",
-  "settingsBehaviorTitle": "Comportamiento",
-  "typeCommandHint": "Se ejecuta en la terminal activa.",
-  "typeNoteHint": "Se pega en la terminal activa sin ejecutarse.",
-  "variablesHint": "Variables: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Label}",
-  "doubleClickToRun": "Haz doble clic para ejecutar",
-  "sharedBadge": "Compartido",
-  "copyToClipboard": "Copiar al portapapeles",
-  "copyFailed": "Error al copiar al portapapeles",
-  "moreOptions": "Más opciones",
-  "moreActions": "Más acciones",
-  "moveToFolder": "Mover a carpeta",
-  "deleteSnippet": "Eliminar fragmento",
-  "deleteSnippetConfirm": "¿Eliminar fragmento \"{{name}}\"?",
-  "deleteSuccess": "Fragmento eliminado",
-  "delete": "Eliminar",
-  "folderActions": "Acciones de carpeta",
-  "addSnippetHere": "Nuevo fragmento aquí",
-  "deleteFolder": "Eliminar carpeta",
-  "deleteFolderConfirm": "¿Eliminar la carpeta \"{{name}}\"? Sus fragmentos se moverán fuera de la carpeta.",
-  "createFolderDescription": "Agrupa los fragmentos relacionados.",
-  "editFolderDescription": "Cambia el nombre, el color o el icono de esta carpeta.",
-  "folderColorLabel": "Color",
-  "loadFailed": "No se pudieron cargar los fragmentos.",
-  "importSkipExisting": "Importar (omitir existentes)",
-  "importOverwrite": "Importar (sobrescribir existente)",
-  "importInvalidFile": "Ese archivo no es una exportación de fragmentos válida.",
-  "importSuccess": "Importado {{imported}}, actualizado {{updated}}, omitido {{skipped}}",
-  "exportSnippets": "Exportar fragmentos",
-  "exportSuccess": "Fragmentos exportados",
-  "exportFailed": "Error al exportar los fragmentos",
-  "expandAll": "Expandir todas las carpetas",
-  "collapseAll": "Contraer todas las carpetas",
-  "docsLink": "Documentación",
-  "clearSearch": "Borrar búsqueda",
-  "noSearchResults": "No se encontraron fragmentos que coincidan con su búsqueda.",
-  "emptyTitle": "Aún no hay fragmentos",
-  "emptyDescription": "Guarda los comandos que uses con frecuencia y ejecútalos en la terminal con un solo clic.",
-  "shareSnippet": "Compartir fragmento",
-  "shareFolder": "Carpeta compartida",
-  "shareExpiry": "Expira",
-  "shareExpiryOptions": {
-    "h0": "Nunca",
-    "h1": "En 1 hora",
-    "h24": "En 1 día",
-    "h168": "En 7 días",
-    "h720": "En 30 días"
-  },
-  "shareButton": "Compartir",
-  "shareSuccess": "Compartido con {{count}}",
-  "shareFailed": "No se pudo compartir",
-  "shareLoadFailed": "No se pudieron cargar los detalles de uso compartido.",
-  "currentAccess": "Acceso actual",
-  "notSharedYet": "Aún no lo he compartido con nadie.",
-  "revokeAccess": "Revocar",
-  "revokeSuccess": "Acceso revocado",
-  "revokeFailed": "Error al revocar el acceso",
-  "close": "Cerrar",
-  "targetHostsLabel": "Anfitriones objetivo",
-  "targetHostsHint": "Seleccione los hosts en los que desea ejecutar este comando directamente, sin tener una terminal abierta. Deje el campo vacío para ejecutarlo en la terminal activa.",
-  "clearTargetHosts": "Limpiar",
-  "noHostsAvailable": "No hay anfitriones disponibles",
-  "searchHosts": "Buscar hosts",
-  "runOnTargets": "Ejecutar en los hosts de destino",
-  "executionResultTitle": "Resultados para \"{{name}}\"",
-  "executionResultDescription": "Salida de cada host de destino.",
-  "executionSuccess": "Éxito",
-  "executionFailed": "Fallido",
-  "directRunSuccess": "Se ejecutó \"{{name}}\" en {{count}} host(s)",
-  "directRunPartialFail": "\"{{name}}\" falló en algunos hosts",
-  "reorderFailed": "No se pudieron reordenar los fragmentos.",
-  "dropToRemoveFromFolder": "Arrastra aquí para salir de la carpeta.",
-  "shareSnippetTitle": "Compartir \"{{name}}\"",
-  "shareFolderTitle": "Compartir carpeta \"{{name}}\"",
-  "shareWith": "Compartir con",
-  "usersTab": "Usuarios",
-  "rolesTab": "Roles",
-  "shareSearchPlaceholder": "Buscar usuarios o roles",
-  "shareNoMatches": "No hay coincidencias",
-  "shareWithCount": "Compartir con {{count}}",
-  "shareFolderHint": "Comparte todos los fragmentos de esta carpeta. Los fragmentos añadidos posteriormente no se comparten automáticamente.",
-  "shareFolderSummary": "Fragmento(s) compartido(s) {{count}} en esta carpeta",
-  "grantedBy": "Concedido por",
-  "expired": "Caducado",
-  "variablesDialogTitle": "Ejecutar \"{{name}}\"",
-  "variablesDialogDescription": "Rellena los valores que necesita este fragmento de código antes de ejecutarlo.",
-  "variablesPreviewLabel": "Vista previa",
-  "variablesConfirmButton": "Ejecutar",
-  "keybindings": {
-    "runSnippet": "Ejecutar el fragmento existente",
-    "snippetLabel": "Retazo",
-    "selectSnippet": "Seleccione un fragmento",
-    "snippetMissing": "Fragmento no encontrado",
-    "snippetRequired": "Seleccione un fragmento"
-  },
-  "paletteHintRun": "Ejecutar en la pestaña de terminal activa",
-  "host": {
-    "startupTitle": "Fragmento de inicio",
-    "quickActionsTitle": "Acciones rápidas",
-    "quickActionsDescription": "Las acciones rápidas aparecen como botones en la barra de herramientas de Métricas del host para la ejecución de comandos con un solo clic.",
-    "noQuickActions": "Aún no hay acciones rápidas.",
-    "buttonLabel": "Etiqueta del botón",
-    "selectSnippet": "Seleccionar fragmento...",
-    "addQuickAction": "Añadir acción",
-    "tabTitle": "Snippets",
-    "startupDescription": "Se ejecuta en la terminal cada vez que se conecta a este host. Se rellenan variables como $HOST ; se omite un fragmento que solicita entradas.",
-    "none": "Ninguna",
-    "removeQuickAction": "Eliminar acción rápida"
-  },
-  "quickActions": {
-    "running": "Ejecutando {{name}}...",
-    "succeeded": "{{name}} completado correctamente",
-    "failed": "{{name}} falló",
-    "error": "Error al ejecutar {{name}}"
-  },
-  "paletteHintPaste": "Pegar en la pestaña del terminal activo",
-  "targetTerminals": "Rodar",
-  "targetTerminalsHint": "opcional, de lo contrario la pestaña activa",
-  "selectAll": "Revocar todo",
-  "selectNone": "Ninguna",
-  "plugin": {
-    "name": "Snippets"
-  }
-}
diff --git a/plugins/snippets/locales/translated/fi_FI.json b/plugins/snippets/locales/translated/fi_FI.json
deleted file mode 100644
index e6f0b2450..000000000
--- a/plugins/snippets/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Katkelmat"
-  },
-  "onboarding": {
-    "feature_snippets": "Katkelmat",
-    "feature_snippets_desc": "Tallenna usein käyttämäsi komennot ja lähetä ne terminaaliin yhdellä napsautuksella."
-  },
-  "permissions": {
-    "view": {
-      "title": "Näytä katkelmat",
-      "description": "Katso omia katkelmiasi, muistiinpanojasi ja jaettuja katkelmiasi."
-    },
-    "create": {
-      "title": "Luo katkelmia",
-      "description": "Luo uusia katkelmia, muistiinpanoja ja kansioita."
-    },
-    "edit": {
-      "title": "Muokkaa katkelmia",
-      "description": "Nimeä uudelleen tai muuta olemassa olevia katkelmia ja kansioita."
-    },
-    "delete": {
-      "title": "Poista katkelmia",
-      "description": "Poista katkelmia ja kansioita."
-    },
-    "share": {
-      "title": "Jaa katkelmia",
-      "description": "Jaa katkelmia ja kansioita muiden käyttäjien tai roolien kanssa."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Pienennä kansiot oletusarvoisesti",
-      "description": "Aloita jokainen katkelmakansio supistettuna, kun avaat Katkelmat-paneelin."
-    },
-    "showCommands": {
-      "label": "Näytä komennot",
-      "description": "Näytä kunkin koodinpätkän komennon ensimmäinen rivi sen nimen alla."
-    },
-    "confirmExecution": {
-      "label": "Vahvista ennen suorittamista",
-      "description": "Kysy ennen komennonpätkän suorittamista terminaalissa."
-    }
-  },
-  "cancel": "Peruuttaa",
-  "loading": "Ladataan...",
-  "searchPlaceholder": "Hakukatkelmia",
-  "newFolder": "Uusi kansio",
-  "newSnippet": "Uusi katkelma",
-  "noFolder": "Ei kansiota",
-  "noSnippetsInFolder": "Tässä kansiossa ei ole katkelmia",
-  "noTerminalTabsOpen": "Yhtäkään päätevälilehteä ei ole auki",
-  "run": "Juokse",
-  "pasteToTerminal": "Liitä terminaaliin",
-  "copySuccess": "Kopioitu leikepöydälle",
-  "importExport": "Tuonti / vienti",
-  "importFailed": "Katkelmien tuonti epäonnistui",
-  "nameLabel": "Nimi",
-  "namePlaceholder": "Katkelman nimi",
-  "descriptionLabel": "Kuvaus",
-  "descriptionPlaceholder": "Valinnainen kuvaus",
-  "folderLabel": "Kansio",
-  "typeLabel": "Tyyppi",
-  "typeCommand": "Komento",
-  "typeNote": "Huomautus",
-  "commandLabel": "Komento",
-  "commandPlaceholder": "Suoritettava komento, esim. systemctl status $HOST",
-  "noteLabel": "Huomautus",
-  "notePlaceholder": "Päätelaitteeseen liitettävä teksti",
-  "createSnippetTitle": "Luo koodinpätkä",
-  "createSnippetButton": "Luo koodinpätkä",
-  "createSuccess": "Katkelma luotu",
-  "createFailed": "Katkelman luominen epäonnistui",
-  "editSnippetTitle": "Muokkaa katkelmaa",
-  "saveSnippetButton": "Tallenna koodinpätkä",
-  "updateSuccess": "Katkelma päivitetty",
-  "updateFailed": "Katkelman päivittäminen epäonnistui",
-  "deleteFailed": "Katkelman poistaminen epäonnistui",
-  "createFolderTitle": "Luo kansio",
-  "createFolderButton": "Luo kansio",
-  "folderCreateSuccess": "Kansio luotu",
-  "folderCreateFailed": "Kansion luominen epäonnistui",
-  "editFolderTitle": "Muokkaa kansiota",
-  "saveFolderButton": "Tallenna kansio",
-  "folderEditSuccess": "Kansio päivitetty",
-  "folderEditFailed": "Kansion päivittäminen epäonnistui",
-  "folderNameLabel": "Kansion nimi",
-  "folderNamePlaceholder": "Kansion nimi",
-  "folderIconLabel": "Kuvake",
-  "folderDeleteSuccess": "Kansio poistettu",
-  "folderDeleteFailed": "Kansion poistaminen epäonnistui",
-  "confirmRunMessage": "Suorittaa \"{{name}}\"?",
-  "confirmRunButton": "Juokse",
-  "runSuccess": "Suoritti komennon \"{{name}}\" {{count}} päätteessä/päätteissä",
-  "pasteSuccess": "Liitti \"{{name}}\" {{count}} terminaaliin/terminaaleihin",
-  "admin": {
-    "tabTitle": "Katkelmat",
-    "count": "{{count}} katkelmia",
-    "add": "Lisää katkelma",
-    "namePlaceholder": "Katkelman nimi",
-    "contentPlaceholder": "Komennon sisältö",
-    "folderPlaceholder": "Kansio (valinnainen)",
-    "empty": "Tällä käyttäjällä ei ole katkelmia",
-    "deleteConfirm": "Poistetaanko koodinpätkä \"{{name}}\", joka kuuluu käyttäjälle {{username}}?",
-    "deleted": "Katkelma poistettu",
-    "deleteFailed": "Katkelman poistaminen epäonnistui",
-    "requiredFields": "Katkelman nimi ja sisältö vaaditaan",
-    "saved": "Katkelma tallennettu",
-    "saveFailed": "Katkelman tallentaminen epäonnistui",
-    "saving": "Tallennetaan...",
-    "save": "Tallentaa"
-  },
-  "backToSnippets": "Takaisin katkelmiin",
-  "settingsTitle": "Katkelman asetukset",
-  "settingsDisplayTitle": "Näyttö",
-  "settingsBehaviorTitle": "Käyttäytyminen",
-  "typeCommandHint": "Suoritetaan aktiivisessa terminaalissa.",
-  "typeNoteHint": "Liittää aktiiviseen terminaaliin suorittamatta sitä.",
-  "variablesHint": "Muuttujat: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Label}",
-  "doubleClickToRun": "Kaksoisnapsauta suorittaaksesi",
-  "sharedBadge": "Jaettu",
-  "copyToClipboard": "Kopioi leikepöydälle",
-  "copyFailed": "Leikepöydälle kopiointi epäonnistui",
-  "moreOptions": "Lisää vaihtoehtoja",
-  "moreActions": "Lisää toimintoja",
-  "moveToFolder": "Siirrä kansioon",
-  "deleteSnippet": "Poista katkelma",
-  "deleteSnippetConfirm": "Poistetaanko koodinpätkä \"{{name}}\"?",
-  "deleteSuccess": "Katkelma poistettu",
-  "delete": "Poistaa",
-  "folderActions": "Kansiotoiminnot",
-  "addSnippetHere": "Uusi pätkä tässä",
-  "deleteFolder": "Poista kansio",
-  "deleteFolderConfirm": "Poistetaanko kansio \"{{name}}\"? Sen koodinpätkät siirretään pois kansiosta.",
-  "createFolderDescription": "Ryhmittele toisiinsa liittyvät katkelmat yhteen.",
-  "editFolderDescription": "Muuta tämän kansion nimeä, väriä tai kuvaketta.",
-  "folderColorLabel": "Väri",
-  "loadFailed": "Katkelmien lataaminen epäonnistui",
-  "importSkipExisting": "Tuo (ohita olemassa oleva)",
-  "importOverwrite": "Tuo (korvaa olemassa oleva)",
-  "importInvalidFile": "Tuo tiedosto ei ole kelvollinen katkelmien vienti.",
-  "importSuccess": "Tuotu {{imported}}, päivitetty {{updated}}, ohitettu {{skipped}}",
-  "exportSnippets": "Vie koodinpätkiä",
-  "exportSuccess": "Katkelmat viety",
-  "exportFailed": "Katkelmien vienti epäonnistui",
-  "expandAll": "Laajenna kaikki kansiot",
-  "collapseAll": "Pienennä kaikki kansiot",
-  "docsLink": "Dokumentaatio",
-  "clearSearch": "Tyhjennä haku",
-  "noSearchResults": "Hakuasi vastaavia katkelmia ei löytynyt.",
-  "emptyTitle": "Ei vielä katkelmia",
-  "emptyDescription": "Tallenna usein käyttämäsi komennot ja suorita ne sitten terminaalissa yhdellä napsautuksella.",
-  "shareSnippet": "Jaa katkelma",
-  "shareFolder": "Jaa kansio",
-  "shareExpiry": "Vanhenee",
-  "shareExpiryOptions": {
-    "h0": "Ei koskaan",
-    "h1": "Tunnin kuluttua",
-    "h24": "1 päivän kuluttua",
-    "h168": "7 päivän kuluttua",
-    "h720": "30 päivän kuluttua"
-  },
-  "shareButton": "Jakaa",
-  "shareSuccess": "Jaettu käyttäjän {{count}} kanssa",
-  "shareFailed": "Jakaminen epäonnistui",
-  "shareLoadFailed": "Jakamistietojen lataaminen epäonnistui",
-  "currentAccess": "Nykyinen käyttöoikeus",
-  "notSharedYet": "Ei vielä jaettu kenenkään kanssa",
-  "revokeAccess": "Peruuttaa",
-  "revokeSuccess": "Pääsy peruutettu",
-  "revokeFailed": "Käyttöoikeuden peruuttaminen epäonnistui",
-  "close": "Lähellä",
-  "targetHostsLabel": "Kohdeisännät",
-  "targetHostsHint": "Valitse isännät, joille tämä komento suoritetaan suoraan ilman avointa päätettä. Jätä tyhjäksi, jos haluat sen suoritettavan aktiivisessa päätelaitteessa.",
-  "clearTargetHosts": "Tyhjennä",
-  "noHostsAvailable": "Ei isäntiä saatavilla",
-  "searchHosts": "Hae isäntiä",
-  "runOnTargets": "Suorita kohdekoneissa",
-  "executionResultTitle": "Tulokset haulle \"{{name}}\"",
-  "executionResultDescription": "Kunkin kohdeisännän tuloste.",
-  "executionSuccess": "Menestys",
-  "executionFailed": "Epäonnistui",
-  "directRunSuccess": "Suoritti komennon \"{{name}}\" {{count}} isäntäkoneella/isännillä",
-  "directRunPartialFail": "\"{{name}}\" epäonnistui joillakin isännillä",
-  "reorderFailed": "Katkelmien uudelleenjärjestely epäonnistui",
-  "dropToRemoveFromFolder": "Pudota tähän siirtääksesi pois kansiosta",
-  "shareSnippetTitle": "Jaa \"{{name}}\"",
-  "shareFolderTitle": "Jaa kansio \"{{name}}\"",
-  "shareWith": "Jaa kanssa",
-  "usersTab": "Käyttäjät",
-  "rolesTab": "Roolit",
-  "shareSearchPlaceholder": "Hae käyttäjiä tai rooleja",
-  "shareNoMatches": "Ei osumia",
-  "shareWithCount": "Jaa käyttäjän {{count}} kanssa",
-  "shareFolderHint": "Jakaa kaikki tässä kansiossa olevat katkelmat. Myöhemmin lisättyjä katkelmia ei jaeta automaattisesti.",
-  "shareFolderSummary": "Jaettu(a) {{count}} katkelma(a) tässä kansiossa",
-  "grantedBy": "Myöntänyt",
-  "expired": "Vanhentunut",
-  "variablesDialogTitle": "Suorita \"{{name}}\"",
-  "variablesDialogDescription": "Täytä tämän koodinpätkän tarvitsemat arvot ennen sen suorittamista.",
-  "variablesPreviewLabel": "Esikatselu",
-  "variablesConfirmButton": "Juokse",
-  "keybindings": {
-    "runSnippet": "Suorita olemassa oleva koodinpätkä",
-    "snippetLabel": "Katkelma",
-    "selectSnippet": "Valitse katkelma",
-    "snippetMissing": "katkelmaa ei löytynyt",
-    "snippetRequired": "Valitse katkelma"
-  },
-  "paletteHintRun": "Suorita aktiivisessa päätevälilehdessä",
-  "host": {
-    "startupTitle": "Käynnistyskoodinpätkä",
-    "quickActionsTitle": "Pikatoiminnot",
-    "quickActionsDescription": "Pikatoiminnot näkyvät painikkeina isäntämetriikkatyökalurivillä komentojen suorittamista varten yhdellä napsautuksella.",
-    "noQuickActions": "Ei vielä nopeita toimia.",
-    "buttonLabel": "Painikkeen nimi",
-    "selectSnippet": "Valitse katkelma...",
-    "addQuickAction": "Lisää toiminto",
-    "tabTitle": "Katkelmat",
-    "startupDescription": "Suoritetaan terminaalissa joka kerta, kun se muodostaa yhteyden tähän isäntään. Muuttujat, kuten $HOST , täytetään; syötteitä pyytävä koodinpätkä ohitetaan.",
-    "none": "Ei mitään",
-    "removeQuickAction": "Poista pikatoiminto"
-  },
-  "quickActions": {
-    "running": "Suoritetaan {{name}}...",
-    "succeeded": "{{name}} suoritettu onnistuneesti",
-    "failed": "{{name}} epäonnistui",
-    "error": "Suoritus epäonnistui {{name}}"
-  },
-  "paletteHintPaste": "Liitä aktiiviseen päätevälilehteen",
-  "targetTerminals": "Aja sisään",
-  "targetTerminalsHint": "valinnainen, muuten aktiivinen välilehti",
-  "selectAll": "Kaikki",
-  "selectNone": "Ei mitään",
-  "plugin": {
-    "name": "Katkelmat"
-  }
-}
diff --git a/plugins/snippets/locales/translated/fr_FR.json b/plugins/snippets/locales/translated/fr_FR.json
deleted file mode 100644
index b8d339c50..000000000
--- a/plugins/snippets/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Extraits"
-  },
-  "onboarding": {
-    "feature_snippets": "Snippets",
-    "feature_snippets_desc": "Enregistrez les commandes que vous exécutez fréquemment et envoyez-les à un terminal en un seul clic."
-  },
-  "permissions": {
-    "view": {
-      "title": "Voir des extraits",
-      "description": "Consultez vos propres extraits, notes et extraits partagés."
-    },
-    "create": {
-      "title": "Créer des extraits",
-      "description": "Créez de nouveaux extraits, notes et dossiers."
-    },
-    "edit": {
-      "title": "Modifier des extraits",
-      "description": "Renommer ou modifier les extraits et dossiers existants."
-    },
-    "delete": {
-      "title": "Supprimer des extraits",
-      "description": "Supprimer les extraits et les dossiers."
-    },
-    "share": {
-      "title": "Extraits de partage",
-      "description": "Partagez des extraits de code et des dossiers avec d'autres utilisateurs ou rôles."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Réduire les dossiers par défaut",
-      "description": "Chaque dossier d'extraits de code doit être réduit au démarrage lorsque vous ouvrez le panneau Extraits de code."
-    },
-    "showCommands": {
-      "label": "Afficher les commandes",
-      "description": "Afficher la première ligne de la commande de chaque extrait sous son nom."
-    },
-    "confirmExecution": {
-      "label": "Veuillez confirmer avant d'exécuter",
-      "description": "Demandez la permission avant d'exécuter un extrait de commande dans un terminal."
-    }
-  },
-  "cancel": "Annuler",
-  "loading": "Chargement...",
-  "searchPlaceholder": "Rechercher des snippets",
-  "newFolder": "Nouveau dossier",
-  "newSnippet": "Nouvel extrait",
-  "noFolder": "Aucun dossier",
-  "noSnippetsInFolder": "Aucun snippet dans ce dossier",
-  "noTerminalTabsOpen": "Aucun onglet de terminal n'est ouvert.",
-  "run": "Exécuter",
-  "pasteToTerminal": "Coller dans le terminal",
-  "copySuccess": "Copié dans le presse-papiers.",
-  "importExport": "Importer / Exporter",
-  "importFailed": "Échec de l’importation des snippets",
-  "nameLabel": "Nom",
-  "namePlaceholder": "Nom du snippet",
-  "descriptionLabel": "Description",
-  "descriptionPlaceholder": "Description facultative",
-  "folderLabel": "Dossier",
-  "typeLabel": "Type",
-  "typeCommand": "Commande",
-  "typeNote": "Note",
-  "commandLabel": "Commande",
-  "commandPlaceholder": "Commande à exécuter, par exemple systemctl status $HOST",
-  "noteLabel": "Note",
-  "notePlaceholder": "Texte à coller dans le terminal",
-  "createSnippetTitle": "Créer un extrait",
-  "createSnippetButton": "Créer un extrait",
-  "createSuccess": "Extrait créé",
-  "createFailed": "Échec de la création du snippet",
-  "editSnippetTitle": "Modifier l'extrait",
-  "saveSnippetButton": "Enregistrer l'extrait",
-  "updateSuccess": "Extrait mis à jour",
-  "updateFailed": "Échec de la mise à jour du snippet",
-  "deleteFailed": "Échec de la suppression du snippet",
-  "createFolderTitle": "Créer un dossier",
-  "createFolderButton": "Créer un dossier",
-  "folderCreateSuccess": "Dossier créé",
-  "folderCreateFailed": "Échec de la création du dossier",
-  "editFolderTitle": "Modifier le dossier",
-  "saveFolderButton": "Enregistrer le dossier",
-  "folderEditSuccess": "Dossier mis à jour",
-  "folderEditFailed": "Échec de la mise à jour du dossier",
-  "folderNameLabel": "Nom du dossier",
-  "folderNamePlaceholder": "Nom du dossier",
-  "folderIconLabel": "Icône",
-  "folderDeleteSuccess": "Dossier supprimé",
-  "folderDeleteFailed": "Échec de la suppression du dossier",
-  "confirmRunMessage": "Exécuter « {{name}} » ?",
-  "confirmRunButton": "Exécuter",
-  "runSuccess": "Exécution de «{{name}}» sur le(s) terminal(s) {{count}}",
-  "pasteSuccess": "Collé \"{{name}}\" dans le(s) terminal(s) {{count}}",
-  "admin": {
-    "tabTitle": "Snippets",
-    "count": "{{count}} snippets",
-    "add": "Ajouter un snippet",
-    "namePlaceholder": "Nom du snippet",
-    "contentPlaceholder": "Contenu de la commande",
-    "folderPlaceholder": "Dossier (optionnel)",
-    "empty": "Cet utilisateur n'a aucun snippet",
-    "deleteConfirm": "Supprimer le snippet \"{{name}}\" appartenant à {{username}} ?",
-    "deleted": "Snippet supprimé",
-    "deleteFailed": "Échec de la suppression du snippet",
-    "requiredFields": "Le nom et le contenu du snippet sont requis",
-    "saved": "Snippet enregistré",
-    "saveFailed": "Échec de l'enregistrement du snippet",
-    "saving": "Enregistrement…",
-    "save": "Enregistrer"
-  },
-  "backToSnippets": "Retour aux extraits",
-  "settingsTitle": "Paramètres de l'extrait",
-  "settingsDisplayTitle": "Afficher",
-  "settingsBehaviorTitle": "Comportement",
-  "typeCommandHint": "S'exécute dans le terminal actif.",
-  "typeNoteHint": "Coller dans le terminal actif sans exécuter de commande.",
-  "variablesHint": "Variables : $HOST, $USER, $PORT, $NAME, ${INPUT_1:Label}",
-  "doubleClickToRun": "Double-cliquez pour exécuter",
-  "sharedBadge": "Partagé",
-  "copyToClipboard": "Copier dans le presse-papiers",
-  "copyFailed": "Échec de la copie dans le presse-papiers.",
-  "moreOptions": "Plus d'options",
-  "moreActions": "Plus d'actions",
-  "moveToFolder": "Déplacer vers le dossier",
-  "deleteSnippet": "Supprimer l'extrait",
-  "deleteSnippetConfirm": "Supprimer l'extrait \"{{name}}\"?",
-  "deleteSuccess": "Snippet supprimé",
-  "delete": "Supprimer",
-  "folderActions": "Actions sur le dossier",
-  "addSnippetHere": "Nouvel extrait ici",
-  "deleteFolder": "Supprimer le dossier",
-  "deleteFolderConfirm": "Supprimer le dossier «{{name}}» ? Ses extraits seront déplacés hors du dossier.",
-  "createFolderDescription": "Regroupez les extraits similaires.",
-  "editFolderDescription": "Modifiez le nom, la couleur ou l'icône de ce dossier.",
-  "folderColorLabel": "Couleur",
-  "loadFailed": "Échec du chargement des extraits",
-  "importSkipExisting": "Importer (ignorer existants)",
-  "importOverwrite": "Importer (écraser l'existant)",
-  "importInvalidFile": "Ce fichier n'est pas une exportation de fragments valide",
-  "importSuccess": "Importé {{imported}}, mis à jour {{updated}}, ignoré {{skipped}}",
-  "exportSnippets": "Extraits d'exportation",
-  "exportSuccess": "Extraits exportés",
-  "exportFailed": "Échec de l’exportation des snippets",
-  "expandAll": "Développer tous les dossiers",
-  "collapseAll": "Réduire tous les dossiers",
-  "docsLink": "Documentation",
-  "clearSearch": "Recherche propre",
-  "noSearchResults": "Aucun extrait ne correspond à votre recherche",
-  "emptyTitle": "Aucun extrait pour l'instant",
-  "emptyDescription": "Enregistrez les commandes que vous exécutez fréquemment, puis exécutez-les dans un terminal en un seul clic.",
-  "shareSnippet": "Extrait de partage",
-  "shareFolder": "Dossier partagé",
-  "shareExpiry": "Expiration",
-  "shareExpiryOptions": {
-    "h0": "Jamais",
-    "h1": "Dans 1 heure",
-    "h24": "En 1 jour",
-    "h168": "Dans 7 jours",
-    "h720": "En 30 jours"
-  },
-  "shareButton": "Partager",
-  "shareSuccess": "Partagé avec {{count}}",
-  "shareFailed": "Échec du partage",
-  "shareLoadFailed": "Impossible de charger les détails de partage",
-  "currentAccess": "Accès actuel",
-  "notSharedYet": "Pas encore partagé avec qui que ce soit",
-  "revokeAccess": "Révoquer",
-  "revokeSuccess": "Accès révoqué",
-  "revokeFailed": "Échec de la révocation de l’accès",
-  "close": "Fermer",
-  "targetHostsLabel": "hôtes cibles",
-  "targetHostsHint": "Sélectionnez les hôtes sur lesquels exécuter directement cette commande, sans terminal ouvert. Laissez ce champ vide pour l'exécuter dans le terminal actif.",
-  "clearTargetHosts": "Effacer",
-  "noHostsAvailable": "Aucun hôte disponible",
-  "searchHosts": "Rechercher des hôtes",
-  "runOnTargets": "Exécuter sur les hôtes cibles",
-  "executionResultTitle": "Résultats pour \"{{name}}\"",
-  "executionResultDescription": "Sortie de chaque hôte cible.",
-  "executionSuccess": "Succès",
-  "executionFailed": "Échec",
-  "directRunSuccess": "« {{name}} » exécuté sur {{count}} hôte(s)",
-  "directRunPartialFail": "\"{{name}}\" a échoué sur certains hôtes",
-  "reorderFailed": "Impossible de réorganiser les extraits",
-  "dropToRemoveFromFolder": "Déposez ici pour sortir du dossier",
-  "shareSnippetTitle": "Partager \"{{name}}\"",
-  "shareFolderTitle": "Dossier partagé \"{{name}}\"",
-  "shareWith": "Partager avec",
-  "usersTab": "Utilisateurs",
-  "rolesTab": "Rôles",
-  "shareSearchPlaceholder": "Rechercher des utilisateurs ou des rôles",
-  "shareNoMatches": "Aucun résultat",
-  "shareWithCount": "Partager avec {{count}}",
-  "shareFolderHint": "Partage tous les extraits de code contenus dans ce dossier. Les extraits ajoutés ultérieurement ne sont pas partagés automatiquement.",
-  "shareFolderSummary": "Extrait(s) partagé(s) {{count}} dans ce dossier",
-  "grantedBy": "Accordé par",
-  "expired": "Expiré",
-  "variablesDialogTitle": "Exécutez \"{{name}}\"",
-  "variablesDialogDescription": "Renseignez les valeurs nécessaires à cet extrait de code avant de l'exécuter.",
-  "variablesPreviewLabel": "Aperçu",
-  "variablesConfirmButton": "Exécuter",
-  "keybindings": {
-    "runSnippet": "Exécuter l'extrait de code existant",
-    "snippetLabel": "Fragment",
-    "selectSnippet": "Sélectionnez un extrait",
-    "snippetMissing": "extrait introuvable",
-    "snippetRequired": "Sélectionnez un extrait"
-  },
-  "paletteHintRun": "Exécuter dans l'onglet du terminal actif",
-  "host": {
-    "startupTitle": "Extrait de démarrage",
-    "quickActionsTitle": "Actions rapides",
-    "quickActionsDescription": "Les actions rapides apparaissent sous forme de boutons dans la barre d'outils Métriques de l'hôte pour une exécution en un clic.",
-    "noQuickActions": "Aucune action rapide pour le moment.",
-    "buttonLabel": "Étiquette du bouton",
-    "selectSnippet": "Sélectionner un snippet...",
-    "addQuickAction": "Ajouter une action",
-    "tabTitle": "Snippets",
-    "startupDescription": "S'exécute dans le terminal à chaque connexion à cet hôte. Les variables telles que $HOST sont renseignées ; la partie du code demandant des entrées est ignorée.",
-    "none": "Aucune",
-    "removeQuickAction": "Supprimer l'action rapide"
-  },
-  "quickActions": {
-    "running": "Exécution de {{name}}...",
-    "succeeded": "{{name}} terminé avec succès",
-    "failed": "Échec de {{name}}",
-    "error": "Échec de l'exécution de {{name}}"
-  },
-  "paletteHintPaste": "Collez dans l'onglet du terminal actif",
-  "targetTerminals": "Courir",
-  "targetTerminalsHint": "facultatif, sinon l'onglet actif",
-  "selectAll": "Tout",
-  "selectNone": "Aucune",
-  "plugin": {
-    "name": "Snippets"
-  }
-}
diff --git a/plugins/snippets/locales/translated/he_IL.json b/plugins/snippets/locales/translated/he_IL.json
deleted file mode 100644
index 42ee34135..000000000
--- a/plugins/snippets/locales/translated/he_IL.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "קטעי טקסט"
-  },
-  "onboarding": {
-    "feature_snippets": "קטעי טקסט",
-    "feature_snippets_desc": "שמור פקודות שאתה מפעיל לעתים קרובות ושלח אותן למסוף בלחיצה אחת."
-  },
-  "permissions": {
-    "view": {
-      "title": "הצג קטעי וידאו",
-      "description": "ראה קטעי וידאו, הערות וקטעי וידאו משותפים שלך."
-    },
-    "create": {
-      "title": "צור קטעי טקסט",
-      "description": "צור קטעי קוד, הערות ותיקיות חדשים."
-    },
-    "edit": {
-      "title": "עריכת קטעי טקסט",
-      "description": "שינוי שם או שינוי של קטעי טקסט ותיקיות קיימים."
-    },
-    "delete": {
-      "title": "מחיקת קטעי טקסט",
-      "description": "מחיקת קטעי קוד ותיקיות."
-    },
-    "share": {
-      "title": "שתף קטעי טקסט",
-      "description": "שתף קטעי קוד ותיקיות עם משתמשים או תפקידים אחרים."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "כיווץ תיקיות כברירת מחדל",
-      "description": "התחל כל תיקיית קטעי טקסט מקומטת בעת פתיחת החלונית 'קטעי טקסט'."
-    },
-    "showCommands": {
-      "label": "הצג פקודות",
-      "description": "הצג את השורה הראשונה של כל פקודה של קטע תחת שמו."
-    },
-    "confirmExecution": {
-      "label": "אשר לפני הפעלה",
-      "description": "שאל לפני שקטע פקודה מופעל בטרמינל."
-    }
-  },
-  "cancel": "לְבַטֵל",
-  "loading": "טְעִינָה...",
-  "searchPlaceholder": "קטעי חיפוש",
-  "newFolder": "תיקייה חדשה",
-  "newSnippet": "קטע חדש",
-  "noFolder": "אין תיקייה",
-  "noSnippetsInFolder": "אין קטעי טקסט בתיקייה זו",
-  "noTerminalTabsOpen": "אין לשונית מסוף פתוחה",
-  "run": "לָרוּץ",
-  "pasteToTerminal": "הדבקה לטרמינל",
-  "copySuccess": "הועתק ללוח",
-  "importExport": "ייבוא / ייצוא",
-  "importFailed": "ייבוא קטעי הקוד נכשל",
-  "nameLabel": "שֵׁם",
-  "namePlaceholder": "שם הקטע",
-  "descriptionLabel": "תֵאוּר",
-  "descriptionPlaceholder": "תיאור אופציונלי",
-  "folderLabel": "תיקייה",
-  "typeLabel": "סוּג",
-  "typeCommand": "פְּקוּדָה",
-  "typeNote": "פֶּתֶק",
-  "commandLabel": "פְּקוּדָה",
-  "commandPlaceholder": "פקודה להפעלה, לדוגמה systemctl status $HOST",
-  "noteLabel": "פֶּתֶק",
-  "notePlaceholder": "טקסט להדבקה בטרמינל",
-  "createSnippetTitle": "צור קטע",
-  "createSnippetButton": "צור קטע",
-  "createSuccess": "קטע נוצר",
-  "createFailed": "נכשלה יצירת קטע הקוד",
-  "editSnippetTitle": "עריכת קטע",
-  "saveSnippetButton": "שמור קטע",
-  "updateSuccess": "קטע הטקסט עודכן",
-  "updateFailed": "נכשל עדכון הקטע",
-  "deleteFailed": "מחיקת קטע הקוד נכשלה",
-  "createFolderTitle": "צור תיקייה",
-  "createFolderButton": "צור תיקייה",
-  "folderCreateSuccess": "תיקייה נוצרה",
-  "folderCreateFailed": "יצירת התיקייה נכשלה",
-  "editFolderTitle": "עריכת תיקייה",
-  "saveFolderButton": "שמור תיקייה",
-  "folderEditSuccess": "התיקייה עודכנה",
-  "folderEditFailed": "עדכון התיקייה נכשל",
-  "folderNameLabel": "שם התיקייה",
-  "folderNamePlaceholder": "שם התיקייה",
-  "folderIconLabel": "אייקון",
-  "folderDeleteSuccess": "תיקייה נמחקה",
-  "folderDeleteFailed": "מחיקת התיקייה נכשלה",
-  "confirmRunMessage": "להפעיל את \"{{name}}\"?",
-  "confirmRunButton": "לָרוּץ",
-  "runSuccess": "הריץ את \"{{name}}\" על הטרמינל/ים {{count}}",
-  "pasteSuccess": "הודבק \"{{name}}\" לתוך הטרמינל/ים {{count}}",
-  "admin": {
-    "tabTitle": "קטעי טקסט",
-    "count": "קטעי טקסט {{count}}",
-    "add": "הוסף קטע",
-    "namePlaceholder": "שם קטע",
-    "contentPlaceholder": "תוכן הפקודה",
-    "folderPlaceholder": "תיקייה (אופציונלי)",
-    "empty": "למשתמש זה אין קטעי טקסט",
-    "deleteConfirm": "למחוק את קטע הקוד \"{{name}}\" השייך ל- {{username}}?",
-    "deleted": "קטע הטקסט נמחק",
-    "deleteFailed": "מחיקת קטע הקוד נכשלה",
-    "requiredFields": "שם ותוכן הקטע נדרשים",
-    "saved": "קטע הטקסט נשמר",
-    "saveFailed": "שמירת קטע הקוד נכשלה",
-    "saving": "חִסָכוֹן...",
-    "save": "לְהַצִיל"
-  },
-  "backToSnippets": "חזרה לקטעי הטקסט",
-  "settingsTitle": "הגדרות קטע",
-  "settingsDisplayTitle": "לְהַצִיג",
-  "settingsBehaviorTitle": "הִתְנַהֲגוּת",
-  "typeCommandHint": "פועל בטרמינל הפעיל.",
-  "typeNoteHint": "מדביק לתוך הטרמינל הפעיל מבלי להריץ.",
-  "variablesHint": "משתנים: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Label}",
-  "doubleClickToRun": "לחץ פעמיים כדי להפעיל",
-  "sharedBadge": "מְשׁוּתָף",
-  "copyToClipboard": "העתק ללוח",
-  "copyFailed": "נכשל בהעתקה ללוח",
-  "moreOptions": "אפשרויות נוספות",
-  "moreActions": "פעולות נוספות",
-  "moveToFolder": "העבר לתיקייה",
-  "deleteSnippet": "מחיקת קטע",
-  "deleteSnippetConfirm": "למחוק את קטע הקוד \"{{name}}\"?",
-  "deleteSuccess": "קטע הטקסט נמחק",
-  "delete": "לִמְחוֹק",
-  "folderActions": "פעולות תיקייה",
-  "addSnippetHere": "קטע חדש כאן",
-  "deleteFolder": "מחיקת תיקייה",
-  "deleteFolderConfirm": "למחוק את התיקייה \"{{name}}\"? קטעי הטקסט שלה יוזבו מהתיקייה.",
-  "createFolderDescription": "קבץ קטעי טקסט קשורים יחד.",
-  "editFolderDescription": "שנה את שם, צבע או סמל תיקייה זו.",
-  "folderColorLabel": "צֶבַע",
-  "loadFailed": "טעינת קטעי הקוד נכשלה",
-  "importSkipExisting": "ייבוא (דלג על קיים)",
-  "importOverwrite": "ייבוא (החלפת קבצים קיימים)",
-  "importInvalidFile": "קובץ זה אינו קובץ ייצוא חוקי של קטעי טקסט",
-  "importSuccess": "יובא {{imported}}, עודכן {{updated}}, דילג על {{skipped}}",
-  "exportSnippets": "ייצוא קטעי טקסט",
-  "exportSuccess": "קטעי הטקסט יוצאו",
-  "exportFailed": "ייצוא קטעי הקוד נכשל",
-  "expandAll": "הרחב את כל התיקיות",
-  "collapseAll": "כווץ את כל התיקיות",
-  "docsLink": "תיעוד",
-  "clearSearch": "נקה חיפוש",
-  "noSearchResults": "אין קטעי טקסט התואמים את החיפוש שלך",
-  "emptyTitle": "עדיין אין קטעי טקסט",
-  "emptyDescription": "שמור פקודות שאתה מפעיל לעתים קרובות, ולאחר מכן הפעל אותן בטרמינל בלחיצה אחת.",
-  "shareSnippet": "שתף קטע",
-  "shareFolder": "שיתוף תיקייה",
-  "shareExpiry": "פג תוקף",
-  "shareExpiryOptions": {
-    "h0": "לְעוֹלָם לֹא",
-    "h1": "בעוד שעה",
-    "h24": "בעוד יום אחד",
-    "h168": "בעוד 7 ימים",
-    "h720": "בעוד 30 יום"
-  },
-  "shareButton": "לַחֲלוֹק",
-  "shareSuccess": "שותף עם {{count}}",
-  "shareFailed": "השיתוף נכשל",
-  "shareLoadFailed": "טעינת פרטי השיתוף נכשלה",
-  "currentAccess": "גישה נוכחית",
-  "notSharedYet": "עדיין לא שותף עם אף אחד",
-  "revokeAccess": "לְבַטֵל",
-  "revokeSuccess": "הגישה בוטלה",
-  "revokeFailed": "ביטול הגישה נכשל",
-  "close": "לִסְגוֹר",
-  "targetHostsLabel": "מארחי יעד",
-  "targetHostsHint": "בחר מארחים להפעלת פקודה זו ישירות, ללא טרמינל פתוח. השאר ריק כדי להפעיל אותה בטרמינל הפעיל.",
-  "clearTargetHosts": "בָּרוּר",
-  "noHostsAvailable": "אין מארחים זמינים",
-  "searchHosts": "חיפוש מארחים",
-  "runOnTargets": "הפעלה על מארחי היעד",
-  "executionResultTitle": "תוצאות עבור \"{{name}}\"",
-  "executionResultDescription": "פלט מכל מארח יעד.",
-  "executionSuccess": "הַצלָחָה",
-  "executionFailed": "נִכשָׁל",
-  "directRunSuccess": "הריץ את \"{{name}}\" על מארחים {{count}}",
-  "directRunPartialFail": "\"{{name}}\" נכשל בחלק מהמארחים",
-  "reorderFailed": "נכשל הסידור מחדש של קטעי הקוד",
-  "dropToRemoveFromFolder": "שחרר כאן כדי להוציא את התיקייה",
-  "shareSnippetTitle": "שתף \"{{name}}\"",
-  "shareFolderTitle": "שיתוף תיקייה \"{{name}}\"",
-  "shareWith": "שתף עם",
-  "usersTab": "משתמשים",
-  "rolesTab": "תפקידים",
-  "shareSearchPlaceholder": "חיפוש משתמשים או תפקידים",
-  "shareNoMatches": "אין התאמות",
-  "shareWithCount": "שתף עם {{count}}",
-  "shareFolderHint": "משתף כל קטע קוד בתיקייה זו. קטעי קוד שנוספו מאוחר יותר אינם משותפים אוטומטית.",
-  "shareFolderSummary": "קטעי {{count}} משותפים בתיקייה זו",
-  "grantedBy": "הוענק על ידי",
-  "expired": "פג תוקף",
-  "variablesDialogTitle": "הפעל \"{{name}}\"",
-  "variablesDialogDescription": "מלא את הערכים הדרושים לקטע זה לפני הפעלתו.",
-  "variablesPreviewLabel": "תצוגה מקדימה",
-  "variablesConfirmButton": "לָרוּץ",
-  "keybindings": {
-    "runSnippet": "הפעלת קטע קוד קיים",
-    "snippetLabel": "קטע",
-    "selectSnippet": "בחר קטע",
-    "snippetMissing": "קטע לא נמצא",
-    "snippetRequired": "בחר קטע"
-  },
-  "paletteHintRun": "הפעל בלשונית הטרמינל הפעילה",
-  "host": {
-    "startupTitle": "קטע הפעלה",
-    "quickActionsTitle": "פעולות מהירות",
-    "quickActionsDescription": "פעולות מהירות מופיעות ככפתורים בסרגל הכלים של Host Metrics לביצוע פקודה בלחיצה אחת.",
-    "noQuickActions": "אין עדיין פעולות מהירות.",
-    "buttonLabel": "תווית כפתור",
-    "selectSnippet": "בחר קטע...",
-    "addQuickAction": "הוסף פעולה",
-    "tabTitle": "קטעי טקסט",
-    "startupDescription": "פועל בטרמינל בכל פעם שהוא מתחבר למארח זה. משתנים כמו $HOST מתמלאים; קטע שמבקש קלט מדלג.",
-    "none": "אַף לֹא אֶחָד",
-    "removeQuickAction": "הסר פעולה מהירה"
-  },
-  "quickActions": {
-    "running": "מבצע {{name}}...",
-    "succeeded": "{{name}} הושלם בהצלחה",
-    "failed": "{{name}} נכשל",
-    "error": "נכשל בביצוע {{name}}"
-  },
-  "paletteHintPaste": "הדבק בכרטיסייה הפעילה של הטרמינל",
-  "targetTerminals": "לְהַרִיץ",
-  "targetTerminalsHint": "אופציונלי, אחרת הכרטיסייה הפעילה",
-  "selectAll": "כֹּל",
-  "selectNone": "אַף לֹא אֶחָד",
-  "plugin": {
-    "name": "קטעי טקסט"
-  }
-}
diff --git a/plugins/snippets/locales/translated/hi_IN.json b/plugins/snippets/locales/translated/hi_IN.json
deleted file mode 100644
index df0dcb65b..000000000
--- a/plugins/snippets/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "स्निपेट्स"
-  },
-  "onboarding": {
-    "feature_snippets": "स्निपेट्स",
-    "feature_snippets_desc": "उन कमांडों को सेव करें जिन्हें आप अक्सर चलाते हैं और उन्हें एक क्लिक में टर्मिनल पर भेजें।"
-  },
-  "permissions": {
-    "view": {
-      "title": "अंश देखें",
-      "description": "अपने खुद के अंश, नोट्स और साझा किए गए अंश देखें।"
-    },
-    "create": {
-      "title": "स्निपेट बनाएं",
-      "description": "नए स्निपेट, नोट्स और फोल्डर बनाएं।"
-    },
-    "edit": {
-      "title": "स्निपेट संपादित करें",
-      "description": "मौजूदा स्निपेट और फ़ोल्डरों का नाम बदलें या उनमें बदलाव करें।"
-    },
-    "delete": {
-      "title": "स्निपेट्स हटाएं",
-      "description": "स्निपेट और फ़ोल्डर हटाएं।"
-    },
-    "share": {
-      "title": "अंश साझा करें",
-      "description": "अन्य उपयोगकर्ताओं या भूमिकाओं के साथ स्निपेट और फ़ोल्डर साझा करें।"
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "डिफ़ॉल्ट रूप से फ़ोल्डर्स संकुचित करें",
-      "description": "स्निपेट्स पैनल खोलते समय प्रत्येक स्निपेट फ़ोल्डर को बंद अवस्था में प्रारंभ करें।"
-    },
-    "showCommands": {
-      "label": "कमांड दिखाएँ",
-      "description": "प्रत्येक स्निपेट के कमांड की पहली पंक्ति को उसके नाम के नीचे दिखाएँ।"
-    },
-    "confirmExecution": {
-      "label": "चलाने से पहले पुष्टि करें",
-      "description": "टर्मिनल में कमांड चलाने से पहले पूछ लें।"
-    }
-  },
-  "cancel": "रद्द करें",
-  "loading": "लोड हो रहा है...",
-  "searchPlaceholder": "खोज अंश",
-  "newFolder": "नया फ़ोल्डर",
-  "newSnippet": "नया अंश",
-  "noFolder": "कोई फ़ोल्डर नहीं",
-  "noSnippetsInFolder": "इस फ़ोल्डर में कोई स्निपेट नहीं है",
-  "noTerminalTabsOpen": "कोई टर्मिनल टैब खुला नहीं है",
-  "run": "चलाएं",
-  "pasteToTerminal": "टर्मिनल में पेस्ट करें",
-  "copySuccess": "क्लिपबोर्ड पर कॉपी किया गया",
-  "importExport": "आयात / निर्यात",
-  "importFailed": "स्निपेट आयात करने में विफल",
-  "nameLabel": "नाम",
-  "namePlaceholder": "स्निपेट का नाम",
-  "descriptionLabel": "विवरण",
-  "descriptionPlaceholder": "वैकल्पिक विवरण",
-  "folderLabel": "फ़ोल्डर",
-  "typeLabel": "प्रकार",
-  "typeCommand": "कमांड",
-  "typeNote": "टिप्पणी",
-  "commandLabel": "कमांड",
-  "commandPlaceholder": "चलाने के लिए कमांड, उदाहरण के लिए systemctl status $HOST",
-  "noteLabel": "टिप्पणी",
-  "notePlaceholder": "टर्मिनल में पेस्ट करने के लिए टेक्स्ट",
-  "createSnippetTitle": "स्निपेट बनाएं",
-  "createSnippetButton": "स्निपेट बनाएं",
-  "createSuccess": "स्निपेट बनाया गया",
-  "createFailed": "स्निपेट बनाने में विफल",
-  "editSnippetTitle": "स्निपेट संपादित करें",
-  "saveSnippetButton": "अंश सहेजें",
-  "updateSuccess": "अंश अपडेट किया गया",
-  "updateFailed": "स्निपेट अपडेट करने में विफल",
-  "deleteFailed": "स्निपेट हटाने में विफल",
-  "createFolderTitle": "फ़ोल्डर बनाएँ",
-  "createFolderButton": "फ़ोल्डर बनाएँ",
-  "folderCreateSuccess": "फ़ोल्डर बनाया गया",
-  "folderCreateFailed": "फ़ोल्डर बनाने में विफल",
-  "editFolderTitle": "फ़ोल्डर संपादित करें",
-  "saveFolderButton": "फ़ोल्डर सहेजें",
-  "folderEditSuccess": "फ़ोल्डर अपडेट हो गया",
-  "folderEditFailed": "फ़ोल्डर अपडेट करने में विफल",
-  "folderNameLabel": "फ़ोल्डर का नाम",
-  "folderNamePlaceholder": "फ़ोल्डर का नाम",
-  "folderIconLabel": "आइकन",
-  "folderDeleteSuccess": "फ़ोल्डर हटा दिया गया",
-  "folderDeleteFailed": "फ़ोल्डर हटाने में विफल",
-  "confirmRunMessage": "\"{{name}}\" चलाएँ?",
-  "confirmRunButton": "चलाएं",
-  "runSuccess": "Ran \"{{name}}\" on {{count}} terminal(s)",
-  "pasteSuccess": "\"{{name}}\" को {{count}} टर्मिनल(ओं) में पेस्ट किया गया",
-  "admin": {
-    "tabTitle": "स्निपेट्स",
-    "count": "{{count}} स्निपेट",
-    "add": "स्निपेट जोड़ें",
-    "namePlaceholder": "स्निपेट का नाम",
-    "contentPlaceholder": "कमांड सामग्री",
-    "folderPlaceholder": "फ़ोल्डर (वैकल्पिक)",
-    "empty": "इस उपयोगकर्ता के पास कोई स्निपेट नहीं है",
-    "deleteConfirm": "स्निपेट \"{{name}}\" हटाएं जो {{username}} का है?",
-    "deleted": "स्निपेट हटा दिया गया",
-    "deleteFailed": "स्निपेट हटाने में विफल",
-    "requiredFields": "स्निपेट का नाम और सामग्री आवश्यक हैं",
-    "saved": "स्निपेट सहेजा गया",
-    "saveFailed": "स्निपेट सहेजने में विफल",
-    "saving": "सहेजा जा रहा है...",
-    "save": "सहेजें"
-  },
-  "backToSnippets": "स्निपेट्स पर वापस जाएँ",
-  "settingsTitle": "स्निपेट सेटिंग्स",
-  "settingsDisplayTitle": "प्रदर्शन",
-  "settingsBehaviorTitle": "व्यवहार",
-  "typeCommandHint": "यह सक्रिय टर्मिनल में चलता है।",
-  "typeNoteHint": "यह सक्रिय टर्मिनल में बिना चलाए पेस्ट करता है।",
-  "variablesHint": "चर: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Label}",
-  "doubleClickToRun": "चलाने के लिए डबल क्लिक करें",
-  "sharedBadge": "साझा",
-  "copyToClipboard": "क्लिपबोर्ड पर कॉपी करें",
-  "copyFailed": "क्लिपबोर्ड पर कॉपी करने में विफल",
-  "moreOptions": "अधिक विकल्प",
-  "moreActions": "अधिक कार्रवाइयां",
-  "moveToFolder": "फ़ोल्डर में ले जाएँ",
-  "deleteSnippet": "स्निपेट हटाएं",
-  "deleteSnippetConfirm": "स्निपेट \"{{name}} \" हटाएं?",
-  "deleteSuccess": "स्निपेट हटा दिया गया",
-  "delete": "हटाएँ",
-  "folderActions": "फ़ोल्डर क्रियाएँ",
-  "addSnippetHere": "यहां नया अंश है",
-  "deleteFolder": "फ़ोल्डर हटाएं",
-  "deleteFolderConfirm": "फ़ोल्डर \"{{name}}\" हटाएं? इसके स्निपेट फ़ोल्डर से बाहर चले जाते हैं।",
-  "createFolderDescription": "संबंधित अंशों को एक साथ समूहित करें।",
-  "editFolderDescription": "इस फ़ोल्डर का नाम, रंग या आइकन बदलें।",
-  "folderColorLabel": "रंग",
-  "loadFailed": "स्निपेट लोड करने में विफल",
-  "importSkipExisting": "इम्पोर्ट करें (मौजूदा को छोड़ें)",
-  "importOverwrite": "आयात करें (मौजूदा को ओवरराइट करें)",
-  "importInvalidFile": "वह फ़ाइल वैध स्निपेट निर्यात नहीं है",
-  "importSuccess": "आयातित {{imported}}, अद्यतनित {{updated}}, छोड़ा गया {{skipped}}",
-  "exportSnippets": "निर्यात स्निपेट",
-  "exportSuccess": "निर्यात किए गए अंश",
-  "exportFailed": "स्निपेट निर्यात करने में विफल",
-  "expandAll": "सभी फ़ोल्डर विस्तृत करें",
-  "collapseAll": "सभी फ़ोल्डर संकुचित करें",
-  "docsLink": "प्रलेखन",
-  "clearSearch": "खोज साफ़ करें",
-  "noSearchResults": "आपकी खोज से मेल खाने वाले कोई अंश नहीं हैं",
-  "emptyTitle": "अभी तक कोई अंश उपलब्ध नहीं हैं",
-  "emptyDescription": "जिन कमांड्स को आप अक्सर चलाते हैं, उन्हें सेव कर लें और फिर उन्हें एक क्लिक में टर्मिनल में चलाएं।",
-  "shareSnippet": "अंश साझा करें",
-  "shareFolder": "फ़ोल्डर साझा करें",
-  "shareExpiry": "समाप्ति",
-  "shareExpiryOptions": {
-    "h0": "कभी नहीं",
-    "h1": "1 घंटे में",
-    "h24": "1 दिन में",
-    "h168": "7 दिनों में",
-    "h720": "30 दिनों में"
-  },
-  "shareButton": "साझा करें",
-  "shareSuccess": "{{count}} के साथ साझा किया गया",
-  "shareFailed": "साझा करने में विफल",
-  "shareLoadFailed": "शेयरिंग विवरण लोड करने में विफल",
-  "currentAccess": "वर्तमान पहुँच",
-  "notSharedYet": "अभी तक किसी के साथ साझा नहीं किया गया है",
-  "revokeAccess": "निरस्त करें",
-  "revokeSuccess": "पहुँच रद्द की गई",
-  "revokeFailed": "पहुँच रद्द करने में विफल",
-  "close": "बंद करें",
-  "targetHostsLabel": "लक्षित मेजबान",
-  "targetHostsHint": "इस कमांड को सीधे चलाने के लिए होस्ट चुनें, बिना टर्मिनल खोले। सक्रिय टर्मिनल में चलाने के लिए इसे खाली छोड़ दें।",
-  "clearTargetHosts": "साफ़ करें",
-  "noHostsAvailable": "कोई होस्ट उपलब्ध नहीं है",
-  "searchHosts": "होस्ट खोजें",
-  "runOnTargets": "लक्ष्य होस्ट पर चलाएँ",
-  "executionResultTitle": "\"{{name}} \" के लिए परिणाम",
-  "executionResultDescription": "प्रत्येक लक्ष्य होस्ट से आउटपुट।",
-  "executionSuccess": "सफल",
-  "executionFailed": "असफल",
-  "directRunSuccess": "\"{{name}}\" को {{count}} होस्ट पर चलाया गया",
-  "directRunPartialFail": "कुछ होस्ट पर \"{{name}}\" विफल रहा",
-  "reorderFailed": "स्निपेट्स को पुनर्व्यवस्थित करने में विफल",
-  "dropToRemoveFromFolder": "फोल्डर से बाहर निकलने के लिए यहां ड्रॉप करें",
-  "shareSnippetTitle": "शेयर करें \"{{name}}\"",
-  "shareFolderTitle": "फ़ोल्डर साझा करें \"{{name}}\"",
-  "shareWith": "के साथ साझा करें",
-  "usersTab": "उपयोगकर्ता",
-  "rolesTab": "भूमिकाएं",
-  "shareSearchPlaceholder": "उपयोगकर्ताओं या भूमिकाओं को खोजें",
-  "shareNoMatches": "कोई मेल नहीं",
-  "shareWithCount": "{{count}} के साथ साझा करें",
-  "shareFolderHint": "इस फ़ोल्डर में मौजूद सभी स्निपेट साझा करता है। बाद में जोड़े गए स्निपेट स्वचालित रूप से साझा नहीं होते हैं।",
-  "shareFolderSummary": "इस फ़ोल्डर में साझा किए गए {{count}} अंश",
-  "grantedBy": "प्रदानकर्ता",
-  "expired": "समाप्त",
-  "variablesDialogTitle": "रन \"{{name}}\"",
-  "variablesDialogDescription": "इस कोड स्निपेट को चलाने से पहले इसमें आवश्यक मान भरें।",
-  "variablesPreviewLabel": "पूर्वावलोकन",
-  "variablesConfirmButton": "चलाएं",
-  "keybindings": {
-    "runSnippet": "मौजूदा स्निपेट चलाएँ",
-    "snippetLabel": "टुकड़ा",
-    "selectSnippet": "एक अंश का चयन करें",
-    "snippetMissing": "अंश नहीं मिला",
-    "snippetRequired": "एक अंश का चयन करें"
-  },
-  "paletteHintRun": "सक्रिय टर्मिनल टैब में चलाएँ",
-  "host": {
-    "startupTitle": "स्टार्टअप स्निपेट",
-    "quickActionsTitle": "त्वरित कार्रवाइयाँ",
-    "quickActionsDescription": "त्वरित कार्रवाइयाँ एक-क्लिक कमांड निष्पादन के लिए होस्ट मेट्रिक्स टूलबार में बटन के रूप में दिखाई देती हैं।",
-    "noQuickActions": "अभी तक कोई त्वरित कार्रवाई नहीं।",
-    "buttonLabel": "बटन लेबल",
-    "selectSnippet": "स्निपेट चुनें...",
-    "addQuickAction": "कार्रवाई जोड़ें",
-    "tabTitle": "स्निपेट्स",
-    "startupDescription": "यह टर्मिनल में हर बार इस होस्ट से कनेक्ट होने पर चलता है। $HOST जैसे वैरिएबल भरे जाते हैं; इनपुट मांगने वाला एक अंश छोड़ दिया जाता है।",
-    "none": "कोई नहीं",
-    "removeQuickAction": "त्वरित कार्रवाई हटाएँ"
-  },
-  "quickActions": {
-    "running": "{{name}} निष्पादित हो रहा है...",
-    "succeeded": "{{name}} सफलतापूर्वक पूर्ण हुआ",
-    "failed": "{{name}} विफल रहा",
-    "error": "{{name}} निष्पादित करने में विफल"
-  },
-  "paletteHintPaste": "सक्रिय टर्मिनल टैब में पेस्ट करें",
-  "targetTerminals": "झगड़ा",
-  "targetTerminalsHint": "वैकल्पिक, अन्यथा सक्रिय टैब",
-  "selectAll": "सभी",
-  "selectNone": "कोई नहीं",
-  "plugin": {
-    "name": "स्निपेट्स"
-  }
-}
diff --git a/plugins/snippets/locales/translated/hu_HU.json b/plugins/snippets/locales/translated/hu_HU.json
deleted file mode 100644
index 0bc811c7d..000000000
--- a/plugins/snippets/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Kódrészletek"
-  },
-  "onboarding": {
-    "feature_snippets": "Kódrészletek",
-    "feature_snippets_desc": "Mentsd el a gyakran futtatott parancsokat, és küldd el őket egy terminálba egyetlen kattintással."
-  },
-  "permissions": {
-    "view": {
-      "title": "Kódrészletek megtekintése",
-      "description": "Tekintse meg saját részleteit, jegyzeteit és megosztott részleteit."
-    },
-    "create": {
-      "title": "Kódrészletek létrehozása",
-      "description": "Új kódrészletek, jegyzetek és mappák létrehozása."
-    },
-    "edit": {
-      "title": "Kódrészletek szerkesztése",
-      "description": "Nevezze át vagy módosítsa a meglévő kódrészleteket és mappákat."
-    },
-    "delete": {
-      "title": "Kódrészletek törlése",
-      "description": "Töröljön kódrészleteket és mappákat."
-    },
-    "share": {
-      "title": "Részletek megosztása",
-      "description": "Kódrészletek és mappák megosztása más felhasználókkal vagy szerepkörökkel."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Mappák összecsukása alapértelmezés szerint",
-      "description": "Minden kódrészletmappa összecsukott állapotban indul el a Kódrészletek panel megnyitásakor."
-    },
-    "showCommands": {
-      "label": "Parancsok megjelenítése",
-      "description": "Mutasd meg az egyes kódrészletek parancsának első sorát a neve alatt."
-    },
-    "confirmExecution": {
-      "label": "Futtatás előtti megerősítés",
-      "description": "Kérdezzen rá, mielőtt egy parancsrészlet fut a terminálban."
-    }
-  },
-  "cancel": "Mégsem",
-  "loading": "Terhelés...",
-  "searchPlaceholder": "Keresési kódrészletek",
-  "newFolder": "Új mappa",
-  "newSnippet": "Új részlet",
-  "noFolder": "Nincs mappa",
-  "noSnippetsInFolder": "Nincsenek kódrészletek ebben a mappában",
-  "noTerminalTabsOpen": "Nincs megnyitva terminálfül",
-  "run": "Fut",
-  "pasteToTerminal": "Beillesztés terminálba",
-  "copySuccess": "Vágólapra másolva",
-  "importExport": "Importálás / Exportálás",
-  "importFailed": "Nem sikerült importálni a kódrészleteket",
-  "nameLabel": "Név",
-  "namePlaceholder": "Kódrészlet neve",
-  "descriptionLabel": "Leírás",
-  "descriptionPlaceholder": "Opcionális leírás",
-  "folderLabel": "Mappa",
-  "typeLabel": "Típus",
-  "typeCommand": "Parancs",
-  "typeNote": "Jegyzet",
-  "commandLabel": "Parancs",
-  "commandPlaceholder": "Futtatandó parancs, pl. systemctl status $HOST",
-  "noteLabel": "Jegyzet",
-  "notePlaceholder": "A terminálba beillesztendő szöveg",
-  "createSnippetTitle": "Kódrészlet létrehozása",
-  "createSnippetButton": "Kódrészlet létrehozása",
-  "createSuccess": "Kódrészlet létrehozva",
-  "createFailed": "Nem sikerült létrehozni a kódrészletet",
-  "editSnippetTitle": "Kódrészlet szerkesztése",
-  "saveSnippetButton": "Kódrészlet mentése",
-  "updateSuccess": "Kódrészlet frissítve",
-  "updateFailed": "Nem sikerült frissíteni a kódrészletet",
-  "deleteFailed": "Nem sikerült törölni a részletet",
-  "createFolderTitle": "Mappa létrehozása",
-  "createFolderButton": "Mappa létrehozása",
-  "folderCreateSuccess": "Mappa létrehozva",
-  "folderCreateFailed": "Nem sikerült létrehozni a mappát",
-  "editFolderTitle": "Mappa szerkesztése",
-  "saveFolderButton": "Mappa mentése",
-  "folderEditSuccess": "Mappa frissítve",
-  "folderEditFailed": "Nem sikerült frissíteni a mappát",
-  "folderNameLabel": "Mappa neve",
-  "folderNamePlaceholder": "Mappa neve",
-  "folderIconLabel": "Ikon",
-  "folderDeleteSuccess": "Mappa törölve",
-  "folderDeleteFailed": "Nem sikerült törölni a mappát",
-  "confirmRunMessage": "Futtassa a \"{{name}} \" programot?",
-  "confirmRunButton": "Fut",
-  "runSuccess": "\"{{name}}\" futtatva {{count}} terminálon",
-  "pasteSuccess": "Beillesztve a(z) \"{{name}}\" elemet a(z) {{count}} terminál(ok)ba",
-  "admin": {
-    "tabTitle": "Kódrészletek",
-    "count": "{{count}} kódrészletek",
-    "add": "Kódrészlet hozzáadása",
-    "namePlaceholder": "Kódrészlet neve",
-    "contentPlaceholder": "Parancs tartalma",
-    "folderPlaceholder": "Mappa (opcionális)",
-    "empty": "Ennek a felhasználónak nincsenek kódrészletei",
-    "deleteConfirm": "Törölni kell a(z) {{username}}-hoz tartozó \"{{name}}\" kódrészletet?",
-    "deleted": "Kódrészlet törölve",
-    "deleteFailed": "Nem sikerült törölni a részletet",
-    "requiredFields": "A részlet nevének és tartalmának megadása kötelező",
-    "saved": "Kódrészlet mentve",
-    "saveFailed": "Nem sikerült menteni a részletet",
-    "saving": "Megtakarítás...",
-    "save": "Megtakarítás"
-  },
-  "backToSnippets": "Vissza a részletekhez",
-  "settingsTitle": "Kódrészlet beállításai",
-  "settingsDisplayTitle": "Kijelző",
-  "settingsBehaviorTitle": "Viselkedés",
-  "typeCommandHint": "Az aktív terminálban fut.",
-  "typeNoteHint": "Beilleszti az aktív terminálba futtatás nélkül.",
-  "variablesHint": "Változók: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Címke}",
-  "doubleClickToRun": "Dupla kattintás a futtatáshoz",
-  "sharedBadge": "Megosztott",
-  "copyToClipboard": "Másolás a vágólapra",
-  "copyFailed": "Nem sikerült a vágólapra másolni",
-  "moreOptions": "További lehetőségek",
-  "moreActions": "További műveletek",
-  "moveToFolder": "Áthelyezés mappába",
-  "deleteSnippet": "Kódrészlet törlése",
-  "deleteSnippetConfirm": "Törölni a(z) \"{{name}} \" kódrészletet?",
-  "deleteSuccess": "Kódrészlet törölve",
-  "delete": "Töröl",
-  "folderActions": "Mappaműveletek",
-  "addSnippetHere": "Új részlet itt",
-  "deleteFolder": "Mappa törlése",
-  "deleteFolderConfirm": "Törli a(z) „{{name}}” mappát? A benne lévő kódrészletek átkerülnek a mappából.",
-  "createFolderDescription": "Csoportosítsd a kapcsolódó kódrészleteket.",
-  "editFolderDescription": "Módosítsa a mappa nevét, színét vagy ikonját.",
-  "folderColorLabel": "Szín",
-  "loadFailed": "Nem sikerült betölteni a kódrészleteket",
-  "importSkipExisting": "Importálás (meglévő kihagyása)",
-  "importOverwrite": "Importálás (meglévő felülírása)",
-  "importInvalidFile": "Ez a fájl nem érvényes kódrészlet export.",
-  "importSuccess": "Importálva {{imported}}, frissítve {{updated}}, kihagyva {{skipped}}",
-  "exportSnippets": "Kódrészletek exportálása",
-  "exportSuccess": "Exportált kódrészletek",
-  "exportFailed": "Nem sikerült exportálni a kódrészleteket",
-  "expandAll": "Az összes mappa kibontása",
-  "collapseAll": "Az összes mappa összecsukása",
-  "docsLink": "Dokumentáció",
-  "clearSearch": "Keresés törlése",
-  "noSearchResults": "Egyik kódrészlet sem felel meg a keresésnek",
-  "emptyTitle": "Még nincsenek részletek",
-  "emptyDescription": "Mentsd el a gyakran futtatott parancsokat, majd futtasd őket egy terminálban egyetlen kattintással.",
-  "shareSnippet": "Kódrészlet megosztása",
-  "shareFolder": "Mappa megosztása",
-  "shareExpiry": "Lejár",
-  "shareExpiryOptions": {
-    "h0": "Soha",
-    "h1": "1 óra múlva",
-    "h24": "1 nap múlva",
-    "h168": "7 nap múlva",
-    "h720": "30 nap múlva"
-  },
-  "shareButton": "Részesedés",
-  "shareSuccess": "Megosztva {{count}} felhasználóval",
-  "shareFailed": "Nem sikerült megosztani",
-  "shareLoadFailed": "Nem sikerült betölteni a megosztási adatokat",
-  "currentAccess": "Jelenlegi hozzáférés",
-  "notSharedYet": "Még senkivel sincs megosztva",
-  "revokeAccess": "Visszavonás",
-  "revokeSuccess": "Hozzáférés visszavonva",
-  "revokeFailed": "Nem sikerült visszavonni a hozzáférést",
-  "close": "Közeli",
-  "targetHostsLabel": "Célzott hosztok",
-  "targetHostsHint": "Válassza ki azokat a gépeket, amelyeken közvetlenül, terminál megnyitása nélkül futtatni szeretné ezt a parancsot. Hagyja üresen, ha az aktív terminálon szeretné futtatni.",
-  "clearTargetHosts": "Világos",
-  "noHostsAvailable": "Nincsenek elérhető házigazdák",
-  "searchHosts": "Keresés hosztok",
-  "runOnTargets": "Futtatás a célállomásokon",
-  "executionResultTitle": "Eredmények a következőre: \"{{name}}\"",
-  "executionResultDescription": "Kimenet az egyes célállomásokról.",
-  "executionSuccess": "Siker",
-  "executionFailed": "Sikertelen",
-  "directRunSuccess": "\"{{name}}\" futtatva {{count}} gazdagépen",
-  "directRunPartialFail": "„{{name}}” hiba történt néhány gépen",
-  "reorderFailed": "Nem sikerült átrendezni a kódrészleteket",
-  "dropToRemoveFromFolder": "Húzd ide, ha ki szeretnél mozdulni a mappából",
-  "shareSnippetTitle": "Megosztás \"{{name}}\"",
-  "shareFolderTitle": "Mappa megosztása: \"{{name}}\"",
-  "shareWith": "Megosztás",
-  "usersTab": "Felhasználók",
-  "rolesTab": "Szerepkörök",
-  "shareSearchPlaceholder": "Felhasználók vagy szerepkörök keresése",
-  "shareNoMatches": "Nincs találat",
-  "shareWithCount": "Megosztás {{count}} felhasználóval",
-  "shareFolderHint": "Megosztja a mappában található összes kódrészletet. A később hozzáadott kódrészletek nem kerülnek automatikusan megosztásra.",
-  "shareFolderSummary": "Megosztott {{count}} kódrészlet(ek) ebben a mappában",
-  "grantedBy": "Megadta",
-  "expired": "Lejárt",
-  "variablesDialogTitle": "Futtassa a \"{{name}}\"",
-  "variablesDialogDescription": "Töltse ki a kódrészlet futtatása előtt szükséges értékeket.",
-  "variablesPreviewLabel": "Előnézet",
-  "variablesConfirmButton": "Fut",
-  "keybindings": {
-    "runSnippet": "Meglévő kódrészlet futtatása",
-    "snippetLabel": "Töredék",
-    "selectSnippet": "Válasszon ki egy részletet",
-    "snippetMissing": "részlet nem található",
-    "snippetRequired": "Válasszon ki egy részletet"
-  },
-  "paletteHintRun": "Futtatás az aktív terminálfülön",
-  "host": {
-    "startupTitle": "Indítási kódrészlet",
-    "quickActionsTitle": "Gyors műveletek",
-    "quickActionsDescription": "A gyors műveletek gombokként jelennek meg a Host Metrics eszköztáron, így egyetlen kattintással végrehajthatók a parancsok.",
-    "noQuickActions": "Még nincsenek gyors intézkedések.",
-    "buttonLabel": "Gombcímke",
-    "selectSnippet": "Válasszon részletet...",
-    "addQuickAction": "Művelet hozzáadása",
-    "tabTitle": "Kódrészletek",
-    "startupDescription": "Minden alkalommal lefut a terminálban, amikor csatlakozik ehhez a géphez. A $HOST -hoz hasonló változók kitöltődnek; a bemenetet kérő kódrészlet kimarad.",
-    "none": "Egyik sem",
-    "removeQuickAction": "Gyorsművelet eltávolítása"
-  },
-  "quickActions": {
-    "running": "{{name}} végrehajtása ...",
-    "succeeded": "{{name}} sikeresen befejeződött",
-    "failed": "{{name}} sikertelen",
-    "error": "Nem sikerült végrehajtani a {{name}} parancsot."
-  },
-  "paletteHintPaste": "Beillesztés az aktív terminálfülbe",
-  "targetTerminals": "Befutás",
-  "targetTerminalsHint": "opcionális, különben az aktív lap",
-  "selectAll": "Minden",
-  "selectNone": "Egyik sem",
-  "plugin": {
-    "name": "Kódrészletek"
-  }
-}
diff --git a/plugins/snippets/locales/translated/id_ID.json b/plugins/snippets/locales/translated/id_ID.json
deleted file mode 100644
index 2385f9070..000000000
--- a/plugins/snippets/locales/translated/id_ID.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Cuplikan"
-  },
-  "onboarding": {
-    "feature_snippets": "Cuplikan",
-    "feature_snippets_desc": "Simpan perintah yang sering Anda jalankan dan kirimkan ke terminal hanya dengan satu klik."
-  },
-  "permissions": {
-    "view": {
-      "title": "Lihat cuplikan",
-      "description": "Lihat cuplikan, catatan, dan cuplikan yang dibagikan milik Anda sendiri."
-    },
-    "create": {
-      "title": "Buat cuplikan",
-      "description": "Buat cuplikan, catatan, dan folder baru."
-    },
-    "edit": {
-      "title": "Edit cuplikan",
-      "description": "Ubah nama atau mengganti cuplikan dan folder yang sudah ada."
-    },
-    "delete": {
-      "title": "Hapus cuplikan",
-      "description": "Hapus cuplikan dan folder."
-    },
-    "share": {
-      "title": "Bagikan cuplikan",
-      "description": "Bagikan cuplikan dan folder dengan pengguna atau peran lain."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Secara default, folder akan diciutkan.",
-      "description": "Saat membuka panel Cuplikan, setiap folder cuplikan akan tertutup."
-    },
-    "showCommands": {
-      "label": "Tampilkan perintah",
-      "description": "Tampilkan baris pertama perintah setiap cuplikan di bawah namanya."
-    },
-    "confirmExecution": {
-      "label": "Konfirmasi sebelum menjalankan",
-      "description": "Tanyakan terlebih dahulu sebelum menjalankan cuplikan perintah di terminal."
-    }
-  },
-  "cancel": "Membatalkan",
-  "loading": "Memuat...",
-  "searchPlaceholder": "Cuplikan pencarian",
-  "newFolder": "Folder baru",
-  "newSnippet": "Cuplikan baru",
-  "noFolder": "Tidak ada folder",
-  "noSnippetsInFolder": "Tidak ada cuplikan di folder ini",
-  "noTerminalTabsOpen": "Tidak ada tab terminal yang terbuka.",
-  "run": "Berlari",
-  "pasteToTerminal": "Tempel ke terminal",
-  "copySuccess": "Disalin ke papan klip",
-  "importExport": "Impor / Ekspor",
-  "importFailed": "Gagal mengimpor cuplikan kode.",
-  "nameLabel": "Nama",
-  "namePlaceholder": "Nama cuplikan",
-  "descriptionLabel": "Keterangan",
-  "descriptionPlaceholder": "Deskripsi opsional",
-  "folderLabel": "Map",
-  "typeLabel": "Jenis",
-  "typeCommand": "Memerintah",
-  "typeNote": "Catatan",
-  "commandLabel": "Memerintah",
-  "commandPlaceholder": "Perintah yang akan dijalankan, misalnya systemctl status $HOST",
-  "noteLabel": "Catatan",
-  "notePlaceholder": "Teks yang akan ditempelkan ke terminal",
-  "createSnippetTitle": "Buat cuplikan",
-  "createSnippetButton": "Buat cuplikan",
-  "createSuccess": "Cuplikan dibuat",
-  "createFailed": "Gagal membuat cuplikan",
-  "editSnippetTitle": "Sunting cuplikan",
-  "saveSnippetButton": "Simpan cuplikan",
-  "updateSuccess": "Cuplikan diperbarui",
-  "updateFailed": "Gagal memperbarui cuplikan",
-  "deleteFailed": "Gagal menghapus cuplikan",
-  "createFolderTitle": "Buat folder",
-  "createFolderButton": "Buat folder",
-  "folderCreateSuccess": "Folder telah dibuat.",
-  "folderCreateFailed": "Gagal membuat folder",
-  "editFolderTitle": "Edit folder",
-  "saveFolderButton": "Simpan folder",
-  "folderEditSuccess": "Folder telah diperbarui.",
-  "folderEditFailed": "Gagal memperbarui folder",
-  "folderNameLabel": "Nama folder",
-  "folderNamePlaceholder": "Nama folder",
-  "folderIconLabel": "Ikon",
-  "folderDeleteSuccess": "Folder dihapus",
-  "folderDeleteFailed": "Gagal menghapus folder",
-  "confirmRunMessage": "Jalankan \"{{name}}\"?",
-  "confirmRunButton": "Berlari",
-  "runSuccess": "Menjalankan \"{{name}}\" pada {{count}} terminal",
-  "pasteSuccess": "\"{{name}}\" ditempelkan ke terminal {{count}}",
-  "admin": {
-    "tabTitle": "Cuplikan",
-    "count": "{{count}} cuplikan",
-    "add": "Tambahkan Cuplikan",
-    "namePlaceholder": "Nama cuplikan",
-    "contentPlaceholder": "Isi perintah",
-    "folderPlaceholder": "Folder (opsional)",
-    "empty": "Pengguna ini tidak memiliki cuplikan.",
-    "deleteConfirm": "Hapus cuplikan \"{{name}}\" milik {{username}}?",
-    "deleted": "Cuplikan dihapus",
-    "deleteFailed": "Gagal menghapus cuplikan",
-    "requiredFields": "Nama cuplikan dan konten wajib diisi.",
-    "saved": "Cuplikan tersimpan",
-    "saveFailed": "Gagal menyimpan cuplikan",
-    "saving": "Penghematan...",
-    "save": "Menyimpan"
-  },
-  "backToSnippets": "Kembali ke cuplikan",
-  "settingsTitle": "Pengaturan cuplikan",
-  "settingsDisplayTitle": "Menampilkan",
-  "settingsBehaviorTitle": "Perilaku",
-  "typeCommandHint": "Berjalan di terminal aktif.",
-  "typeNoteHint": "Menempelkan teks ke terminal aktif tanpa menjalankannya.",
-  "variablesHint": "Variabel: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Label}",
-  "doubleClickToRun": "Klik dua kali untuk menjalankan",
-  "sharedBadge": "Dibagikan",
-  "copyToClipboard": "Salin ke papan klip",
-  "copyFailed": "Gagal menyalin ke papan klip",
-  "moreOptions": "Opsi lainnya",
-  "moreActions": "Tindakan lainnya",
-  "moveToFolder": "Pindahkan ke folder",
-  "deleteSnippet": "Hapus cuplikan",
-  "deleteSnippetConfirm": "Hapus cuplikan \"{{name}}\"?",
-  "deleteSuccess": "Cuplikan dihapus",
-  "delete": "Menghapus",
-  "folderActions": "Tindakan folder",
-  "addSnippetHere": "Cuplikan baru di sini",
-  "deleteFolder": "Hapus folder",
-  "deleteFolderConfirm": "Hapus folder \"{{name}}\"? Cuplikan-cuplikannya akan dipindahkan keluar dari folder.",
-  "createFolderDescription": "Kelompokkan cuplikan yang terkait bersama-sama.",
-  "editFolderDescription": "Ubah nama, warna, atau ikon folder ini.",
-  "folderColorLabel": "Warna",
-  "loadFailed": "Gagal memuat cuplikan",
-  "importSkipExisting": "Impor (lewati yang sudah ada)",
-  "importOverwrite": "Impor (timpa yang sudah ada)",
-  "importInvalidFile": "File tersebut bukan ekspor cuplikan yang valid.",
-  "importSuccess": "Diimpor {{imported}}, diperbarui {{updated}}, dilewati {{skipped}}",
-  "exportSnippets": "Ekspor cuplikan",
-  "exportSuccess": "Cuplikan yang diekspor",
-  "exportFailed": "Gagal mengekspor cuplikan",
-  "expandAll": "Buka semua folder",
-  "collapseAll": "Tutup semua folder",
-  "docsLink": "Dokumentasi",
-  "clearSearch": "Hapus pencarian",
-  "noSearchResults": "Tidak ada cuplikan yang sesuai dengan pencarian Anda.",
-  "emptyTitle": "Belum ada cuplikan",
-  "emptyDescription": "Simpan perintah yang sering Anda jalankan, lalu jalankan di terminal dengan sekali klik.",
-  "shareSnippet": "Bagikan cuplikan",
-  "shareFolder": "Folder berbagi",
-  "shareExpiry": "Berakhir",
-  "shareExpiryOptions": {
-    "h0": "Tidak pernah",
-    "h1": "Dalam 1 jam",
-    "h24": "Dalam 1 hari",
-    "h168": "Dalam 7 hari",
-    "h720": "Dalam 30 hari"
-  },
-  "shareButton": "Membagikan",
-  "shareSuccess": "Dibagikan dengan {{count}}",
-  "shareFailed": "Gagal berbagi",
-  "shareLoadFailed": "Gagal memuat detail berbagi.",
-  "currentAccess": "Akses saat ini",
-  "notSharedYet": "Belum dibagikan kepada siapa pun",
-  "revokeAccess": "Menarik kembali",
-  "revokeSuccess": "Akses dicabut",
-  "revokeFailed": "Gagal mencabut akses",
-  "close": "Tutup",
-  "targetHostsLabel": "Host target",
-  "targetHostsHint": "Pilih host tempat perintah ini akan dijalankan secara langsung, tanpa terminal terbuka. Biarkan kosong untuk menjalankannya di terminal aktif.",
-  "clearTargetHosts": "Jernih",
-  "noHostsAvailable": "Tidak ada tuan rumah yang tersedia.",
-  "searchHosts": "Cari host",
-  "runOnTargets": "Jalankan pada host target",
-  "executionResultTitle": "Hasil untuk \"{{name}}\"",
-  "executionResultDescription": "Output dari setiap host target.",
-  "executionSuccess": "Kesuksesan",
-  "executionFailed": "Gagal",
-  "directRunSuccess": "Menjalankan \"{{name}}\" pada {{count}} host",
-  "directRunPartialFail": "\"{{name}}\" gagal pada beberapa host",
-  "reorderFailed": "Gagal menyusun ulang cuplikan",
-  "dropToRemoveFromFolder": "Seret di sini untuk keluar dari folder",
-  "shareSnippetTitle": "Bagikan \"{{name}}\"",
-  "shareFolderTitle": "Folder berbagi \"{{name}}\"",
-  "shareWith": "Bagikan dengan",
-  "usersTab": "Pengguna",
-  "rolesTab": "Peran",
-  "shareSearchPlaceholder": "Cari pengguna atau peran",
-  "shareNoMatches": "Tidak ada kecocokan",
-  "shareWithCount": "Bagikan dengan {{count}}",
-  "shareFolderHint": "Membagikan semua cuplikan kode dalam folder ini. Cuplikan kode yang ditambahkan kemudian tidak dibagikan secara otomatis.",
-  "shareFolderSummary": "Cuplikan {{count}} yang dibagikan di folder ini",
-  "grantedBy": "Diberikan oleh",
-  "expired": "Kedaluwarsa",
-  "variablesDialogTitle": "Jalankan \"{{name}}\"",
-  "variablesDialogDescription": "Isi nilai-nilai yang dibutuhkan cuplikan kode ini sebelum menjalankannya.",
-  "variablesPreviewLabel": "Pratinjau",
-  "variablesConfirmButton": "Berlari",
-  "keybindings": {
-    "runSnippet": "Jalankan cuplikan kode yang sudah ada.",
-    "snippetLabel": "Potongan",
-    "selectSnippet": "Pilih cuplikan",
-    "snippetMissing": "cuplikan tidak ditemukan",
-    "snippetRequired": "Pilih cuplikan"
-  },
-  "paletteHintRun": "Jalankan di tab terminal aktif",
-  "host": {
-    "startupTitle": "Cuplikan Startup",
-    "quickActionsTitle": "Tindakan Cepat",
-    "quickActionsDescription": "Tindakan cepat muncul sebagai tombol di bilah alat Metrik Host untuk eksekusi perintah sekali klik.",
-    "noQuickActions": "Belum ada tindakan cepat.",
-    "buttonLabel": "Label tombol",
-    "selectSnippet": "Pilih cuplikan...",
-    "addQuickAction": "Tambahkan Tindakan",
-    "tabTitle": "Cuplikan",
-    "startupDescription": "Berjalan di terminal setiap kali terhubung ke host ini. Variabel seperti $HOST diisi; cuplikan yang meminta input dilewati.",
-    "none": "Tidak ada",
-    "removeQuickAction": "Hapus tindakan cepat"
-  },
-  "quickActions": {
-    "running": "Menjalankan {{name}}...",
-    "succeeded": "{{name}} berhasil diselesaikan",
-    "failed": "{{name}} gagal",
-    "error": "Gagal mengeksekusi {{name}}"
-  },
-  "paletteHintPaste": "Tempelkan di tab terminal aktif",
-  "targetTerminals": "Berlari masuk",
-  "targetTerminalsHint": "opsional, jika tidak, tab aktif",
-  "selectAll": "Semua",
-  "selectNone": "Tidak ada",
-  "plugin": {
-    "name": "Cuplikan"
-  }
-}
diff --git a/plugins/snippets/locales/translated/it_IT.json b/plugins/snippets/locales/translated/it_IT.json
deleted file mode 100644
index 06b810ce2..000000000
--- a/plugins/snippets/locales/translated/it_IT.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Frammenti"
-  },
-  "onboarding": {
-    "feature_snippets": "Snippet",
-    "feature_snippets_desc": "Salva i comandi che esegui più spesso e inviali a un terminale con un solo clic."
-  },
-  "permissions": {
-    "view": {
-      "title": "Visualizza frammenti",
-      "description": "Visualizza i tuoi frammenti, le tue note e i frammenti condivisi."
-    },
-    "create": {
-      "title": "Crea frammenti",
-      "description": "Crea nuovi frammenti, note e cartelle."
-    },
-    "edit": {
-      "title": "Modifica frammenti",
-      "description": "Rinominare o modificare frammenti e cartelle esistenti."
-    },
-    "delete": {
-      "title": "Elimina frammenti",
-      "description": "Elimina frammenti e cartelle."
-    },
-    "share": {
-      "title": "Condividi frammenti",
-      "description": "Condividi frammenti e cartelle con altri utenti o ruoli."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Chiudi le cartelle per impostazione predefinita",
-      "description": "Quando apri il pannello Snippet, ogni cartella di snippet viene visualizzata compressa."
-    },
-    "showCommands": {
-      "label": "Mostra i tasti",
-      "description": "Mostra la prima riga di ogni comando dello snippet sotto il suo nome."
-    },
-    "confirmExecution": {
-      "label": "Conferma prima dell'esecuzione",
-      "description": "Chiedi conferma prima di eseguire un comando nel terminale."
-    }
-  },
-  "cancel": "Annulla",
-  "loading": "Caricamento in corso...",
-  "searchPlaceholder": "Cerca snippet",
-  "newFolder": "Nuova cartella",
-  "newSnippet": "Nuovo frammento",
-  "noFolder": "Nessuna cartella",
-  "noSnippetsInFolder": "Nessuno snippet in questa cartella",
-  "noTerminalTabsOpen": "Non è aperta alcuna scheda del terminale.",
-  "run": "Esegui",
-  "pasteToTerminal": "Incolla nel terminale",
-  "copySuccess": "Copiato negli appunti",
-  "importExport": "Importa / Esporta",
-  "importFailed": "Importazione snippet non riuscita",
-  "nameLabel": "Nome",
-  "namePlaceholder": "Nome snippet",
-  "descriptionLabel": "Descrizione",
-  "descriptionPlaceholder": "Descrizione opzionale",
-  "folderLabel": "Cartella",
-  "typeLabel": "Tipo",
-  "typeCommand": "Comando",
-  "typeNote": "Nota",
-  "commandLabel": "Comando",
-  "commandPlaceholder": "Comando da eseguire, ad esempio systemctl status $HOST",
-  "noteLabel": "Nota",
-  "notePlaceholder": "Testo da incollare nel terminale",
-  "createSnippetTitle": "Crea snippet",
-  "createSnippetButton": "Crea snippet",
-  "createSuccess": "Snippet creato",
-  "createFailed": "Impossibile creare lo snippet",
-  "editSnippetTitle": "Modifica frammento",
-  "saveSnippetButton": "Salva frammento",
-  "updateSuccess": "Snippet aggiornato",
-  "updateFailed": "Impossibile aggiornare lo snippet",
-  "deleteFailed": "Impossibile eliminare lo snippet",
-  "createFolderTitle": "Crea cartella",
-  "createFolderButton": "Crea cartella",
-  "folderCreateSuccess": "Cartella creata",
-  "folderCreateFailed": "Impossibile creare la cartella",
-  "editFolderTitle": "Modifica cartella",
-  "saveFolderButton": "Salva cartella",
-  "folderEditSuccess": "Cartella aggiornata",
-  "folderEditFailed": "Impossibile aggiornare la cartella",
-  "folderNameLabel": "Nome della cartella",
-  "folderNamePlaceholder": "Nome della cartella",
-  "folderIconLabel": "Icona",
-  "folderDeleteSuccess": "Cartella eliminata",
-  "folderDeleteFailed": "Impossibile eliminare la cartella",
-  "confirmRunMessage": "Eseguire \"{{name}}\"?",
-  "confirmRunButton": "Esegui",
-  "runSuccess": "Eseguito \"{{name}}\" sul/sui terminale/i {{count}}",
-  "pasteSuccess": "Incollato \"{{name}}\" nel/nei terminale/i {{count}}",
-  "admin": {
-    "tabTitle": "Snippet",
-    "count": "{{count}} snippet",
-    "add": "Aggiungi snippet",
-    "namePlaceholder": "Nome snippet",
-    "contentPlaceholder": "Contenuto comando",
-    "folderPlaceholder": "Cartella (opzionale)",
-    "empty": "Questo utente non ha snippet",
-    "deleteConfirm": "Eliminare lo snippet \"{{name}}\" appartenente a {{username}}?",
-    "deleted": "Snippet eliminato",
-    "deleteFailed": "Impossibile eliminare lo snippet",
-    "requiredFields": "Nome e contenuto dello snippet sono obbligatori",
-    "saved": "Snippet salvato",
-    "saveFailed": "Impossibile salvare lo snippet",
-    "saving": "Salvataggio in corso...",
-    "save": "Salva"
-  },
-  "backToSnippets": "Torna agli snippet",
-  "settingsTitle": "Impostazioni dello snippet",
-  "settingsDisplayTitle": "Display",
-  "settingsBehaviorTitle": "Comportamento",
-  "typeCommandHint": "Esegue nel terminale attivo.",
-  "typeNoteHint": "Incolla nel terminale attivo senza eseguirlo.",
-  "variablesHint": "Variabili: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Etichetta}",
-  "doubleClickToRun": "Doppio clic per eseguire",
-  "sharedBadge": "Condiviso",
-  "copyToClipboard": "Copia negli appunti",
-  "copyFailed": "Copia negli appunti non riuscita",
-  "moreOptions": "Altre opzioni",
-  "moreActions": "Altre azioni",
-  "moveToFolder": "Sposta nella cartella",
-  "deleteSnippet": "Elimina frammento",
-  "deleteSnippetConfirm": "Eliminare il frammento \"{{name}}\"?",
-  "deleteSuccess": "Snippet eliminato",
-  "delete": "Elimina",
-  "folderActions": "Azioni della cartella",
-  "addSnippetHere": "Nuovo frammento qui",
-  "deleteFolder": "Elimina cartella",
-  "deleteFolderConfirm": "Eliminare la cartella \"{{name}}\"? I suoi frammenti vengono spostati fuori dalla cartella.",
-  "createFolderDescription": "Raggruppa i frammenti di testo correlati.",
-  "editFolderDescription": "Modifica il nome, il colore o l'icona di questa cartella.",
-  "folderColorLabel": "Colore",
-  "loadFailed": "Impossibile caricare gli snippet",
-  "importSkipExisting": "Importa (salta esistenti)",
-  "importOverwrite": "Importa (sovrascrivi i dati esistenti)",
-  "importInvalidFile": "Quel file non è un'esportazione di snippet valida.",
-  "importSuccess": "Importato {{imported}}, aggiornato {{updated}}, saltato {{skipped}}",
-  "exportSnippets": "Esporta frammenti",
-  "exportSuccess": "Frammenti esportati",
-  "exportFailed": "Esportazione snippet non riuscita",
-  "expandAll": "Espandi tutte le cartelle",
-  "collapseAll": "Comprimi tutte le cartelle",
-  "docsLink": "Documentazione",
-  "clearSearch": "Cancella ricerca",
-  "noSearchResults": "Nessun frammento corrisponde alla tua ricerca",
-  "emptyTitle": "Ancora nessun frammento",
-  "emptyDescription": "Salva i comandi che usi spesso, poi eseguili in un terminale con un solo clic.",
-  "shareSnippet": "Condividi frammento",
-  "shareFolder": "Cartella condivisa",
-  "shareExpiry": "Scadenza",
-  "shareExpiryOptions": {
-    "h0": "Mai",
-    "h1": "Tra 1 ora",
-    "h24": "In 1 giorno",
-    "h168": "In 7 giorni",
-    "h720": "In 30 giorni"
-  },
-  "shareButton": "Condividi",
-  "shareSuccess": "Condiviso con {{count}}",
-  "shareFailed": "Impossibile condividere",
-  "shareLoadFailed": "Impossibile caricare i dettagli di condivisione",
-  "currentAccess": "Accesso corrente",
-  "notSharedYet": "Non ancora condiviso con nessuno.",
-  "revokeAccess": "Revoca",
-  "revokeSuccess": "Accesso revocato",
-  "revokeFailed": "Revoca accesso non riuscita",
-  "close": "Chiudi",
-  "targetHostsLabel": "Host di destinazione",
-  "targetHostsHint": "Seleziona gli host su cui eseguire questo comando direttamente, senza un terminale aperto. Lascia vuoto per eseguirlo nel terminale attivo.",
-  "clearTargetHosts": "Pulisci",
-  "noHostsAvailable": "Nessun host disponibile",
-  "searchHosts": "Cerca host",
-  "runOnTargets": "Eseguire sugli host di destinazione",
-  "executionResultTitle": "Risultati per \"{{name}}\"",
-  "executionResultDescription": "Output da ciascun host di destinazione.",
-  "executionSuccess": "Successo",
-  "executionFailed": "Fallito",
-  "directRunSuccess": "Eseguito \"{{name}}\" su {{count}} host",
-  "directRunPartialFail": "\"{{name}}\" non riuscito su alcuni host",
-  "reorderFailed": "Impossibile riordinare gli snippet",
-  "dropToRemoveFromFolder": "Trascina qui per spostare fuori dalla cartella",
-  "shareSnippetTitle": "Condividi \"{{name}}\"",
-  "shareFolderTitle": "Condividi la cartella \"{{name}}\"",
-  "shareWith": "Condividi con",
-  "usersTab": "Utenti",
-  "rolesTab": "Ruoli",
-  "shareSearchPlaceholder": "Cerca utenti o ruoli",
-  "shareNoMatches": "Nessuna partita",
-  "shareWithCount": "Condividi con {{count}}",
-  "shareFolderHint": "Condivide tutti gli snippet presenti in questa cartella. Gli snippet aggiunti successivamente non vengono condivisi automaticamente.",
-  "shareFolderSummary": "Frammenti condivisi {{count}} in questa cartella",
-  "grantedBy": "Concesso da",
-  "expired": "Scaduto",
-  "variablesDialogTitle": "Eseguire \"{{name}}\"",
-  "variablesDialogDescription": "Inserisci i valori richiesti da questo frammento di codice prima di eseguirlo.",
-  "variablesPreviewLabel": "Anteprima",
-  "variablesConfirmButton": "Esegui",
-  "keybindings": {
-    "runSnippet": "Esegui il frammento di codice esistente",
-    "snippetLabel": "Frammento",
-    "selectSnippet": "Seleziona un frammento",
-    "snippetMissing": "frammento non trovato",
-    "snippetRequired": "Seleziona un frammento"
-  },
-  "paletteHintRun": "Esegui nella scheda del terminale attiva",
-  "host": {
-    "startupTitle": "Frammento di avvio",
-    "quickActionsTitle": "Azioni rapide",
-    "quickActionsDescription": "Le azioni rapide appaiono come pulsanti nella barra delle metriche host per l'esecuzione di comandi con un clic.",
-    "noQuickActions": "Nessuna azione rapida ancora.",
-    "buttonLabel": "Etichetta pulsante",
-    "selectSnippet": "Seleziona snippet...",
-    "addQuickAction": "Aggiungi Azione",
-    "tabTitle": "Snippet",
-    "startupDescription": "Viene eseguito nel terminale ogni volta che si connette a questo host. Le variabili come $HOST vengono compilate; un frammento di codice che richiede input viene saltato.",
-    "none": "Nessuno",
-    "removeQuickAction": "Rimuovi azione rapida"
-  },
-  "quickActions": {
-    "running": "Esecuzione di {{name}}...",
-    "succeeded": "{{name}} completato con successo",
-    "failed": "{{name}} non riuscito",
-    "error": "Impossibile eseguire {{name}}"
-  },
-  "paletteHintPaste": "Incolla nella scheda del terminale attiva",
-  "targetTerminals": "Correre in",
-  "targetTerminalsHint": "facoltativo, altrimenti la scheda attiva",
-  "selectAll": "Tutte",
-  "selectNone": "Nessuno",
-  "plugin": {
-    "name": "Snippet"
-  }
-}
diff --git a/plugins/snippets/locales/translated/ja_JP.json b/plugins/snippets/locales/translated/ja_JP.json
deleted file mode 100644
index 24e8aae11..000000000
--- a/plugins/snippets/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "スニペット"
-  },
-  "onboarding": {
-    "feature_snippets": "スニペット",
-    "feature_snippets_desc": "よく使うコマンドを保存して、ワンクリックでターミナルに送信できます。"
-  },
-  "permissions": {
-    "view": {
-      "title": "抜粋を見る",
-      "description": "自分のスニペット、メモ、共有されたスニペットを確認できます。"
-    },
-    "create": {
-      "title": "スニペットを作成する",
-      "description": "新しいスニペット、メモ、フォルダーを作成します。"
-    },
-    "edit": {
-      "title": "スニペットを編集する",
-      "description": "既存のスニペットやフォルダの名前を変更または修正します。"
-    },
-    "delete": {
-      "title": "スニペットを削除する",
-      "description": "スニペットとフォルダを削除します。"
-    },
-    "share": {
-      "title": "抜粋を共有する",
-      "description": "スニペットやフォルダを他のユーザーやロールと共有します。"
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "デフォルトでフォルダを折りたたむ",
-      "description": "スニペットパネルを開いたとき、各スニペットフォルダは折りたたまれた状態で起動します。"
-    },
-    "showCommands": {
-      "label": "コマンドを表示する",
-      "description": "各スニペットのコマンドの最初の行を、その名前の下に表示します。"
-    },
-    "confirmExecution": {
-      "label": "実行前に確認してください",
-      "description": "ターミナルでコマンドを実行する前に、必ず許可を求めてください。"
-    }
-  },
-  "cancel": "キャンセル",
-  "loading": "読み込み中...",
-  "searchPlaceholder": "スニペットを検索",
-  "newFolder": "新規フォルダ",
-  "newSnippet": "新しいスニペット",
-  "noFolder": "フォルダーなし",
-  "noSnippetsInFolder": "このフォルダにスニペットはありません",
-  "noTerminalTabsOpen": "ターミナルタブが開いていません",
-  "run": "実行",
-  "pasteToTerminal": "ターミナルに貼り付けてください",
-  "copySuccess": "クリップボードにコピーしました",
-  "importExport": "インポート / エクスポート",
-  "importFailed": "スニペットのインポートに失敗しました",
-  "nameLabel": "名前",
-  "namePlaceholder": "スニペット名",
-  "descriptionLabel": "説明",
-  "descriptionPlaceholder": "任意の説明",
-  "folderLabel": "フォルダ",
-  "typeLabel": "タイプ",
-  "typeCommand": "コマンド",
-  "typeNote": "注記",
-  "commandLabel": "コマンド",
-  "commandPlaceholder": "実行するコマンド、例：systemctl status $HOST",
-  "noteLabel": "注記",
-  "notePlaceholder": "ターミナルに貼り付けるテキスト",
-  "createSnippetTitle": "スニペットを作成する",
-  "createSnippetButton": "スニペットを作成する",
-  "createSuccess": "スニペットが作成されました",
-  "createFailed": "スニペットの作成に失敗しました",
-  "editSnippetTitle": "スニペットを編集",
-  "saveSnippetButton": "スニペットを保存",
-  "updateSuccess": "スニペットが更新されました",
-  "updateFailed": "スニペットの更新に失敗しました",
-  "deleteFailed": "スニペットの削除に失敗しました",
-  "createFolderTitle": "フォルダの作成",
-  "createFolderButton": "フォルダの作成",
-  "folderCreateSuccess": "フォルダが作成されました",
-  "folderCreateFailed": "フォルダの作成に失敗しました",
-  "editFolderTitle": "フォルダを編集",
-  "saveFolderButton": "フォルダーを保存",
-  "folderEditSuccess": "フォルダが更新されました",
-  "folderEditFailed": "フォルダの更新に失敗しました",
-  "folderNameLabel": "フォルダ名",
-  "folderNamePlaceholder": "フォルダ名",
-  "folderIconLabel": "アイコン",
-  "folderDeleteSuccess": "フォルダが削除されました",
-  "folderDeleteFailed": "フォルダの削除に失敗しました",
-  "confirmRunMessage": "「{{name}}」を実行しますか？",
-  "confirmRunButton": "実行",
-  "runSuccess": "{{name}}を {{count}} 端末で実行しました",
-  "pasteSuccess": "「{{name}}」を {{count}} 端末に貼り付けました",
-  "admin": {
-    "tabTitle": "スニペット",
-    "count": "{{count}} 個のスニペット",
-    "add": "スニペットを追加",
-    "namePlaceholder": "スニペット名",
-    "contentPlaceholder": "コマンドの内容",
-    "folderPlaceholder": "フォルダー (任意)",
-    "empty": "このユーザーはスニペットを持っていません",
-    "deleteConfirm": "{{username}} に属するスニペット \"{{name}}\" を削除しますか？",
-    "deleted": "スニペットを削除しました",
-    "deleteFailed": "スニペットの削除に失敗しました",
-    "requiredFields": "スニペット名と内容は必須です",
-    "saved": "スニペットを保存しました",
-    "saveFailed": "スニペットの保存に失敗しました",
-    "saving": "保存中...",
-    "save": "保存"
-  },
-  "backToSnippets": "抜粋に戻る",
-  "settingsTitle": "スニペット設定",
-  "settingsDisplayTitle": "画面",
-  "settingsBehaviorTitle": "動作",
-  "typeCommandHint": "アクティブな端末で実行されます。",
-  "typeNoteHint": "実行せずにアクティブなターミナルに貼り付けます。",
-  "variablesHint": "変数: $HOST、 $USER、 $PORT、 $NAME、 ${INPUT_1:Label}",
-  "doubleClickToRun": "ダブルクリックして実行",
-  "sharedBadge": "共有済み",
-  "copyToClipboard": "クリップボードにコピー",
-  "copyFailed": "クリップボードへのコピーに失敗しました",
-  "moreOptions": "その他のオプション",
-  "moreActions": "その他の操作",
-  "moveToFolder": "フォルダに移動",
-  "deleteSnippet": "スニペットを削除",
-  "deleteSnippetConfirm": "スニペット「{{name}}」を削除しますか？",
-  "deleteSuccess": "スニペットを削除しました",
-  "delete": "削除",
-  "folderActions": "フォルダー操作",
-  "addSnippetHere": "新しいスニペットはこちら",
-  "deleteFolder": "フォルダを削除",
-  "deleteFolderConfirm": "フォルダ \"{{name}}\" を削除しますか？そのスニペットはフォルダから移動します。",
-  "createFolderDescription": "関連する断片をまとめてグループ化する。",
-  "editFolderDescription": "このフォルダの名前、色、またはアイコンを変更します。",
-  "folderColorLabel": "色",
-  "loadFailed": "スニペットの読み込みに失敗しました",
-  "importSkipExisting": "インポート (既存をスキップ)",
-  "importOverwrite": "インポート（既存のものを上書き）",
-  "importInvalidFile": "そのファイルは有効なスニペットエクスポートではありません",
-  "importSuccess": "インポート済み {{imported}}、更新済み {{updated}}、スキップ済み {{skipped}}",
-  "exportSnippets": "スニペットをエクスポートする",
-  "exportSuccess": "スニペットをエクスポートしました",
-  "exportFailed": "スニペットのエクスポートに失敗しました",
-  "expandAll": "すべてのフォルダーを展開",
-  "collapseAll": "すべてのフォルダーを折りたたむ",
-  "docsLink": "文書",
-  "clearSearch": "検索をクリアする",
-  "noSearchResults": "検索条件に一致するスニペットはありません",
-  "emptyTitle": "まだスニペットはありません",
-  "emptyDescription": "よく使うコマンドを保存しておけば、ワンクリックでターミナルから実行できます。",
-  "shareSnippet": "スニペットを共有",
-  "shareFolder": "共有フォルダ",
-  "shareExpiry": "有効期限",
-  "shareExpiryOptions": {
-    "h0": "なし",
-    "h1": "1時間後",
-    "h24": "1日で",
-    "h168": "7日後",
-    "h720": "30日後"
-  },
-  "shareButton": "共有",
-  "shareSuccess": "{{count}}と共有されています",
-  "shareFailed": "共有に失敗しました",
-  "shareLoadFailed": "共有情報の読み込みに失敗しました",
-  "currentAccess": "現在のアクセス",
-  "notSharedYet": "まだ誰にも共有されていません",
-  "revokeAccess": "無効化",
-  "revokeSuccess": "アクセスが取り消されました",
-  "revokeFailed": "アクセスの取り消しに失敗しました",
-  "close": "閉じる",
-  "targetHostsLabel": "対象ホスト",
-  "targetHostsHint": "このコマンドをターミナルを開かずに直接実行するホストを選択してください。空欄のままにすると、アクティブなターミナルで実行されます。",
-  "clearTargetHosts": "クリア",
-  "noHostsAvailable": "ホストがいません",
-  "searchHosts": "ホストを検索",
-  "runOnTargets": "ターゲットホスト上で実行",
-  "executionResultTitle": "「{{name}}」の検索結果",
-  "executionResultDescription": "各ターゲットホストからの出力。",
-  "executionSuccess": "成功",
-  "executionFailed": "失敗",
-  "directRunSuccess": "\"{{name}}\" を {{count}} 台のホストで実行しました",
-  "directRunPartialFail": "「{{name}}」が一部のホストで失敗しました",
-  "reorderFailed": "スニペットの並べ替えに失敗しました",
-  "dropToRemoveFromFolder": "フォルダから移動するには、ここにドロップしてください。",
-  "shareSnippetTitle": "「{{name}} を共有する」",
-  "shareFolderTitle": "共有フォルダ \"{{name}}\"",
-  "shareWith": "共有相手",
-  "usersTab": "ユーザー",
-  "rolesTab": "ロール",
-  "shareSearchPlaceholder": "ユーザーまたはロールを検索",
-  "shareNoMatches": "一致する項目はありません",
-  "shareWithCount": "{{count}}と共有する",
-  "shareFolderHint": "このフォルダ内のすべてのスニペットを共有します。後から追加されたスニペットは自動的に共有されません。",
-  "shareFolderSummary": "このフォルダには共有されたスニペットが {{count}} 個あります。",
-  "grantedBy": "付与者",
-  "expired": "期限切れ",
-  "variablesDialogTitle": "「{{name}} を実行」",
-  "variablesDialogDescription": "このコードスニペットを実行する前に、必要な値を入力してください。",
-  "variablesPreviewLabel": "プレビュー",
-  "variablesConfirmButton": "実行",
-  "keybindings": {
-    "runSnippet": "既存のスニペットを実行する",
-    "snippetLabel": "抜粋",
-    "selectSnippet": "抜粋を選択してください",
-    "snippetMissing": "スニペットが見つかりません",
-    "snippetRequired": "抜粋を選択してください"
-  },
-  "paletteHintRun": "アクティブなターミナルタブで実行します",
-  "host": {
-    "startupTitle": "起動時スニペット",
-    "quickActionsTitle": "クイックアクション",
-    "quickActionsDescription": "クイックアクションはホストメトリクスツールバーにボタンとして表示され、ワンクリックでコマンドを実行できます。",
-    "noQuickActions": "クイックアクションはまだありません",
-    "buttonLabel": "ボタンラベル",
-    "selectSnippet": "スニペットを選択...",
-    "addQuickAction": "アクションを追加",
-    "tabTitle": "スニペット",
-    "startupDescription": "このホストに接続するたびにターミナルで実行されます。 $HOST のような変数には値が入力され、入力を求めるスニペットはスキップされます。",
-    "none": "すべて解除",
-    "removeQuickAction": "クイックアクションを削除する"
-  },
-  "quickActions": {
-    "running": "{{name}} を実行中...",
-    "succeeded": "{{name}} が正常に完了しました",
-    "failed": "{{name}} が失敗しました",
-    "error": "{{name}} の実行に失敗しました"
-  },
-  "paletteHintPaste": "アクティブなターミナルタブに貼り付けてください",
-  "targetTerminals": "走る",
-  "targetTerminalsHint": "オプション、それ以外の場合はアクティブなタブ",
-  "selectAll": "すべて選択",
-  "selectNone": "すべて解除",
-  "plugin": {
-    "name": "スニペット"
-  }
-}
diff --git a/plugins/snippets/locales/translated/ko_KR.json b/plugins/snippets/locales/translated/ko_KR.json
deleted file mode 100644
index e5f1f4251..000000000
--- a/plugins/snippets/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "스니펫"
-  },
-  "onboarding": {
-    "feature_snippets": "스니펫",
-    "feature_snippets_desc": "자주 실행하는 명령어를 저장하고 한 번의 클릭으로 터미널에 전송하세요."
-  },
-  "permissions": {
-    "view": {
-      "title": "미리보기",
-      "description": "내가 작성한 코드 조각, 메모, 공유한 코드 조각을 확인하세요."
-    },
-    "create": {
-      "title": "코드 조각 만들기",
-      "description": "새로운 스니펫, 메모 및 폴더를 만드세요."
-    },
-    "edit": {
-      "title": "코드 조각 편집",
-      "description": "기존 코드 조각 및 폴더의 이름을 바꾸거나 변경하세요."
-    },
-    "delete": {
-      "title": "코드 조각을 삭제하세요",
-      "description": "스니펫과 폴더를 삭제하세요."
-    },
-    "share": {
-      "title": "짧은 글 공유하기",
-      "description": "다른 사용자 또는 역할과 코드 조각 및 폴더를 공유하세요."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "기본적으로 폴더 접기",
-      "description": "스니펫 패널을 열 때 각 스니펫 폴더가 접힌 상태로 시작됩니다."
-    },
-    "showCommands": {
-      "label": "명령 표시",
-      "description": "각 코드 조각의 명령 첫 번째 줄을 이름 아래에 표시합니다."
-    },
-    "confirmExecution": {
-      "label": "실행하기 전에 확인하세요",
-      "description": "터미널에서 명령어를 실행하기 전에 먼저 허락을 구하세요."
-    }
-  },
-  "cancel": "취소",
-  "loading": "로딩 중...",
-  "searchPlaceholder": "스니펫 검색",
-  "newFolder": "새 폴더",
-  "newSnippet": "새로운 스니펫",
-  "noFolder": "폴더 없음",
-  "noSnippetsInFolder": "이 폴더에 스니펫이 없습니다",
-  "noTerminalTabsOpen": "터미널 탭이 열려 있지 않습니다.",
-  "run": "실행",
-  "pasteToTerminal": "터미널에 붙여넣기",
-  "copySuccess": "클립보드에 복사됨",
-  "importExport": "가져오기 / 내보내기",
-  "importFailed": "스니펫 가져오기 실패",
-  "nameLabel": "이름",
-  "namePlaceholder": "스니펫 이름",
-  "descriptionLabel": "설명",
-  "descriptionPlaceholder": "선택 사항 설명",
-  "folderLabel": "폴더",
-  "typeLabel": "유형",
-  "typeCommand": "명령",
-  "typeNote": "메모",
-  "commandLabel": "명령",
-  "commandPlaceholder": "실행할 명령어 (예: systemctl status $HOST)",
-  "noteLabel": "메모",
-  "notePlaceholder": "터미널에 붙여넣을 텍스트",
-  "createSnippetTitle": "코드 조각 생성",
-  "createSnippetButton": "코드 조각 생성",
-  "createSuccess": "코드 조각이 생성되었습니다",
-  "createFailed": "스니펫 생성에 실패했습니다",
-  "editSnippetTitle": "코드 조각 편집",
-  "saveSnippetButton": "코드 조각 저장",
-  "updateSuccess": "스니펫이 업데이트되었습니다.",
-  "updateFailed": "스니펫 업데이트에 실패했습니다",
-  "deleteFailed": "스니펫 삭제에 실패했습니다",
-  "createFolderTitle": "폴더 생성",
-  "createFolderButton": "폴더 생성",
-  "folderCreateSuccess": "폴더가 생성되었습니다",
-  "folderCreateFailed": "폴더 생성에 실패했습니다",
-  "editFolderTitle": "폴더 편집",
-  "saveFolderButton": "폴더 저장",
-  "folderEditSuccess": "폴더가 업데이트되었습니다",
-  "folderEditFailed": "폴더 업데이트에 실패했습니다",
-  "folderNameLabel": "폴더 이름",
-  "folderNamePlaceholder": "폴더 이름",
-  "folderIconLabel": "아이콘",
-  "folderDeleteSuccess": "폴더가 삭제되었습니다",
-  "folderDeleteFailed": "폴더 삭제 실패",
-  "confirmRunMessage": "\"{{name}}\"을(를) 실행하시겠습니까?",
-  "confirmRunButton": "실행",
-  "runSuccess": "{{name}}\"을 {{count}} 터미널에서 실행했습니다.",
-  "pasteSuccess": "\"{{name}}\"을 {{count}} 터미널에 붙여넣었습니다.",
-  "admin": {
-    "tabTitle": "스니펫",
-    "count": "{{count}}개의 스니펫",
-    "add": "스니펫 추가",
-    "namePlaceholder": "스니펫 이름",
-    "contentPlaceholder": "명령 내용",
-    "folderPlaceholder": "폴더 (선택 사항)",
-    "empty": "이 사용자는 스니펫이 없습니다",
-    "deleteConfirm": "{{username}}님의 스니펫 \"{{name}}\"을 삭제하시겠습니까?",
-    "deleted": "스니펫이 삭제되었습니다",
-    "deleteFailed": "스니펫 삭제에 실패했습니다",
-    "requiredFields": "스니펫 이름과 내용이 필요합니다",
-    "saved": "스니펫이 저장되었습니다",
-    "saveFailed": "스니펫 저장에 실패했습니다",
-    "saving": "저장 중...",
-    "save": "저장"
-  },
-  "backToSnippets": "스니펫으로 돌아가기",
-  "settingsTitle": "스니펫 설정",
-  "settingsDisplayTitle": "표시하다",
-  "settingsBehaviorTitle": "동작",
-  "typeCommandHint": "현재 활성화된 터미널에서 실행됩니다.",
-  "typeNoteHint": "실행하지 않고 활성화된 터미널에 붙여넣습니다.",
-  "variablesHint": "변수: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Label}",
-  "doubleClickToRun": "두 번 클릭하여 실행하세요",
-  "sharedBadge": "공유됨",
-  "copyToClipboard": "클립보드에 복사",
-  "copyFailed": "클립보드로 복사하지 못했습니다.",
-  "moreOptions": "더 많은 옵션",
-  "moreActions": "더 보기",
-  "moveToFolder": "폴더로 이동",
-  "deleteSnippet": "코드 조각 삭제",
-  "deleteSnippetConfirm": "\"{{name}} \" 부분을 삭제하시겠습니까?",
-  "deleteSuccess": "스니펫이 삭제되었습니다",
-  "delete": "삭제",
-  "folderActions": "폴더 작업",
-  "addSnippetHere": "여기에 새로운 코드 조각이 있습니다.",
-  "deleteFolder": "폴더 삭제",
-  "deleteFolderConfirm": "\"{{name}}\" 폴더를 삭제하시겠습니까? 해당 폴더의 조각들이 폴더 밖으로 이동합니다.",
-  "createFolderDescription": "관련된 코드 조각들을 함께 그룹화하세요.",
-  "editFolderDescription": "이 폴더의 이름, 색상 또는 아이콘을 변경하세요.",
-  "folderColorLabel": "색상",
-  "loadFailed": "스니펫을 로드하는 데 실패했습니다.",
-  "importSkipExisting": "가져오기 (기존 건너뛰기)",
-  "importOverwrite": "가져오기(기존 파일 덮어쓰기)",
-  "importInvalidFile": "해당 파일은 유효한 스니펫 내보내기 파일이 아닙니다.",
-  "importSuccess": "{{imported}}가져오기 완료, {{updated}}업데이트 완료, {{skipped}} 건너뛰기 완료",
-  "exportSnippets": "내보내기 스니펫",
-  "exportSuccess": "내보낸 코드 조각",
-  "exportFailed": "스니펫 내보내기 실패",
-  "expandAll": "모든 폴더 펼치기",
-  "collapseAll": "모든 폴더 접기",
-  "docsLink": "문서",
-  "clearSearch": "검색 결과 지우기",
-  "noSearchResults": "검색 결과와 일치하는 스니펫이 없습니다.",
-  "emptyTitle": "아직 설정된 스니펫이 없습니다",
-  "emptyDescription": "자주 사용하는 명령어를 저장해 두었다가 터미널에서 한 번의 클릭으로 실행하세요.",
-  "shareSnippet": "스니펫 공유",
-  "shareFolder": "공유 폴더",
-  "shareExpiry": "만료",
-  "shareExpiryOptions": {
-    "h0": "없음",
-    "h1": "1시간 안에",
-    "h24": "하루 만에",
-    "h168": "7일 안에",
-    "h720": "30일 안에"
-  },
-  "shareButton": "공유",
-  "shareSuccess": "{{count}}와 공유됨",
-  "shareFailed": "공유에 실패했습니다",
-  "shareLoadFailed": "공유 세부 정보를 불러오는 데 실패했습니다.",
-  "currentAccess": "현재 접근 권한",
-  "notSharedYet": "아직 아무에게도 공유하지 않았습니다.",
-  "revokeAccess": "취소",
-  "revokeSuccess": "접근 권한이 취소되었습니다",
-  "revokeFailed": "접근 권한 취소 실패",
-  "close": "닫기",
-  "targetHostsLabel": "대상 호스트",
-  "targetHostsHint": "터미널 창을 열지 않고 이 명령을 직접 실행할 호스트를 선택하세요. 활성 터미널에서 실행하려면 비워 두세요.",
-  "clearTargetHosts": "비우기",
-  "noHostsAvailable": "사용 가능한 호스트가 없습니다.",
-  "searchHosts": "호스트 검색",
-  "runOnTargets": "대상 호스트에서 실행",
-  "executionResultTitle": "\"{{name}} \"에 대한 결과",
-  "executionResultDescription": "각 대상 호스트의 출력입니다.",
-  "executionSuccess": "성공",
-  "executionFailed": "실패",
-  "directRunSuccess": "\"{{name}}\"을(를) {{count}}개 호스트에서 실행했습니다",
-  "directRunPartialFail": "\"{{name}}\"가 일부 호스트에서 실패했습니다.",
-  "reorderFailed": "스니펫 순서 변경에 실패했습니다.",
-  "dropToRemoveFromFolder": "폴더 밖으로 이동하려면 여기에 드롭하세요.",
-  "shareSnippetTitle": "\"{{name}} \" 공유",
-  "shareFolderTitle": "공유 폴더 \"{{name}}\"",
-  "shareWith": "공유 대상",
-  "usersTab": "사용자",
-  "rolesTab": "역할",
-  "shareSearchPlaceholder": "사용자 또는 역할 검색",
-  "shareNoMatches": "일치하는 항목이 없습니다",
-  "shareWithCount": "{{count}}와 공유하세요",
-  "shareFolderHint": "이 폴더에 있는 모든 코드 조각을 공유합니다. 나중에 추가된 코드 조각은 자동으로 공유되지 않습니다.",
-  "shareFolderSummary": "이 폴더에 공유된 {{count}} 코드 조각",
-  "grantedBy": "공유자",
-  "expired": "만료됨",
-  "variablesDialogTitle": "\"{{name}} \" 실행",
-  "variablesDialogDescription": "이 코드 조각을 실행하기 전에 필요한 값을 입력하세요.",
-  "variablesPreviewLabel": "미리보기",
-  "variablesConfirmButton": "실행",
-  "keybindings": {
-    "runSnippet": "기존 코드 조각을 실행하세요",
-    "snippetLabel": "단편",
-    "selectSnippet": "코드 조각을 선택하세요",
-    "snippetMissing": "스니펫을 찾을 수 없습니다.",
-    "snippetRequired": "코드 조각을 선택하세요"
-  },
-  "paletteHintRun": "현재 활성화된 터미널 탭에서 실행하세요",
-  "host": {
-    "startupTitle": "시작 스니펫",
-    "quickActionsTitle": "빠른 작업",
-    "quickActionsDescription": "빠른 작업은 한 번의 클릭으로 명령을 실행할 수 있도록 호스트 메트릭 도구 모음에 버튼으로 표시됩니다.",
-    "noQuickActions": "아직 빠른 작업이 없습니다.",
-    "buttonLabel": "버튼 레이블",
-    "selectSnippet": "스니펫 선택...",
-    "addQuickAction": "작업 추가",
-    "tabTitle": "스니펫",
-    "startupDescription": "이 호스트에 연결될 때마다 터미널에서 실행됩니다. $HOST 와 같은 변수가 채워지고, 입력을 요청하는 부분은 건너뜁니다.",
-    "none": "전체 해제",
-    "removeQuickAction": "빠른 실행 제거"
-  },
-  "quickActions": {
-    "running": "{{name}} 실행 중...",
-    "succeeded": "{{name}}이(가) 성공적으로 완료되었습니다.",
-    "failed": "{{name}} 실패",
-    "error": "{{name}} 실행에 실패했습니다."
-  },
-  "paletteHintPaste": "활성화된 터미널 탭에 붙여넣으세요",
-  "targetTerminals": "달리기",
-  "targetTerminalsHint": "선택 사항이며, 그렇지 않으면 활성 탭이 표시됩니다.",
-  "selectAll": "모두",
-  "selectNone": "전체 해제",
-  "plugin": {
-    "name": "스니펫"
-  }
-}
diff --git a/plugins/snippets/locales/translated/nl_NL.json b/plugins/snippets/locales/translated/nl_NL.json
deleted file mode 100644
index 90a70c0c9..000000000
--- a/plugins/snippets/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Fragmenten"
-  },
-  "onboarding": {
-    "feature_snippets": "Fragmenten",
-    "feature_snippets_desc": "Sla de commando's die je vaak gebruikt op en stuur ze met één klik naar een terminal."
-  },
-  "permissions": {
-    "view": {
-      "title": "Bekijk fragmenten",
-      "description": "Bekijk je eigen fragmenten, notities en gedeelde fragmenten."
-    },
-    "create": {
-      "title": "Maak codefragmenten aan.",
-      "description": "Maak nieuwe fragmenten, notities en mappen aan."
-    },
-    "edit": {
-      "title": "Bewerk fragmenten",
-      "description": "Hernoem of wijzig bestaande codefragmenten en mappen."
-    },
-    "delete": {
-      "title": "Verwijder fragmenten",
-      "description": "Verwijder fragmenten en mappen."
-    },
-    "share": {
-      "title": "Deel fragmenten",
-      "description": "Deel fragmenten en mappen met andere gebruikers of rollen."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Mappen standaard inklappen",
-      "description": "Wanneer u het paneel 'Snippets' opent, wordt elke map met codefragmenten standaard ingeklapt weergegeven."
-    },
-    "showCommands": {
-      "label": "Toon commando's",
-      "description": "Toon de eerste regel van de opdracht van elk codefragment onder de naam ervan."
-    },
-    "confirmExecution": {
-      "label": "Controleer voordat u begint.",
-      "description": "Vraag toestemming voordat een commandofragment in een terminal wordt uitgevoerd."
-    }
-  },
-  "cancel": "Annuleren",
-  "loading": "Laden...",
-  "searchPlaceholder": "Zoekfragmenten",
-  "newFolder": "Nieuwe map",
-  "newSnippet": "Nieuw fragment",
-  "noFolder": "Geen map",
-  "noSnippetsInFolder": "Geen codefragmenten in deze map",
-  "noTerminalTabsOpen": "Er is geen terminaltabblad geopend",
-  "run": "Loop",
-  "pasteToTerminal": "Plak in de terminal",
-  "copySuccess": "Gekopieerd naar het klembord",
-  "importExport": "Import/Export",
-  "importFailed": "Het importeren van codefragmenten is mislukt.",
-  "nameLabel": "Naam",
-  "namePlaceholder": "Fragmentnaam",
-  "descriptionLabel": "Beschrijving",
-  "descriptionPlaceholder": "Optionele beschrijving",
-  "folderLabel": "Map",
-  "typeLabel": "Type",
-  "typeCommand": "Commando",
-  "typeNote": "Opmerking",
-  "commandLabel": "Commando",
-  "commandPlaceholder": "Commando om uit te voeren, bijvoorbeeld systemctl status $HOST",
-  "noteLabel": "Opmerking",
-  "notePlaceholder": "Tekst om in de terminal te plakken",
-  "createSnippetTitle": "Maak een codefragment aan",
-  "createSnippetButton": "Maak een codefragment aan",
-  "createSuccess": "Fragment gemaakt",
-  "createFailed": "Het is niet gelukt om een codefragment te maken.",
-  "editSnippetTitle": "Bewerk fragment",
-  "saveSnippetButton": "Bewaar fragment",
-  "updateSuccess": "Fragment bijgewerkt",
-  "updateFailed": "Het bijwerken van het codefragment is mislukt.",
-  "deleteFailed": "Het verwijderen van het fragment is mislukt.",
-  "createFolderTitle": "Map aanmaken",
-  "createFolderButton": "Map aanmaken",
-  "folderCreateSuccess": "Map aangemaakt",
-  "folderCreateFailed": "Map aanmaken mislukt",
-  "editFolderTitle": "Map bewerken",
-  "saveFolderButton": "Map opslaan",
-  "folderEditSuccess": "Map bijgewerkt",
-  "folderEditFailed": "Het bijwerken van de map is mislukt.",
-  "folderNameLabel": "Mapnaam",
-  "folderNamePlaceholder": "Mapnaam",
-  "folderIconLabel": "Icon",
-  "folderDeleteSuccess": "Map verwijderd",
-  "folderDeleteFailed": "Map verwijderen mislukt",
-  "confirmRunMessage": "Run \"{{name}}\"?",
-  "confirmRunButton": "Loop",
-  "runSuccess": "Voerde \"{{name}}\" uit op {{count}} terminal(s)",
-  "pasteSuccess": "\"{{name}}\" is geplakt in de terminal(s) {{count}}",
-  "admin": {
-    "tabTitle": "Fragmenten",
-    "count": "{{count}} fragmenten",
-    "add": "Voeg codefragment toe",
-    "namePlaceholder": "Fragmentnaam",
-    "contentPlaceholder": "Opdrachtinhoud",
-    "folderPlaceholder": "Map (optioneel)",
-    "empty": "Deze gebruiker heeft geen codefragmenten.",
-    "deleteConfirm": "Verwijder het fragment \"{{name}}\" dat bij {{username}} hoort.",
-    "deleted": "Fragment verwijderd",
-    "deleteFailed": "Het verwijderen van het fragment is mislukt.",
-    "requiredFields": "De naam en inhoud van het codefragment zijn verplicht.",
-    "saved": "Fragment opgeslagen",
-    "saveFailed": "Het opslaan van het codefragment is mislukt.",
-    "saving": "Besparing...",
-    "save": "Redden"
-  },
-  "backToSnippets": "Terug naar fragmenten",
-  "settingsTitle": "Snippet-instellingen",
-  "settingsDisplayTitle": "Weergave",
-  "settingsBehaviorTitle": "Gedrag",
-  "typeCommandHint": "Wordt uitgevoerd in de actieve terminal.",
-  "typeNoteHint": "Plakt in de actieve terminal zonder deze uit te voeren.",
-  "variablesHint": "Variabelen: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Label}",
-  "doubleClickToRun": "Dubbelklik om te starten",
-  "sharedBadge": "Gedeeld",
-  "copyToClipboard": "Kopiëren naar het klembord",
-  "copyFailed": "Kopiëren naar klembord mislukt",
-  "moreOptions": "Meer opties",
-  "moreActions": "Meer acties",
-  "moveToFolder": "Verplaatsen naar map",
-  "deleteSnippet": "Verwijder fragment",
-  "deleteSnippetConfirm": "Verwijder fragment \"{{name}}\"?",
-  "deleteSuccess": "Fragment verwijderd",
-  "delete": "Verwijderen",
-  "folderActions": "Mapacties",
-  "addSnippetHere": "Nieuw fragment hier",
-  "deleteFolder": "Map verwijderen",
-  "deleteFolderConfirm": "Map \"{{name}}\" verwijderen? De fragmenten ervan worden uit de map verplaatst.",
-  "createFolderDescription": "Groepeer verwante fragmenten bij elkaar.",
-  "editFolderDescription": "Wijzig de naam, kleur of het pictogram van deze map.",
-  "folderColorLabel": "Kleur",
-  "loadFailed": "Het laden van codefragmenten is mislukt.",
-  "importSkipExisting": "Importeren (bestaande overslaan)",
-  "importOverwrite": "Importeren (bestaande overschrijven)",
-  "importInvalidFile": "Dat bestand is geen geldige codefragmentexport.",
-  "importSuccess": "Geïmporteerd {{imported}}, bijgewerkt {{updated}}, overgeslagen {{skipped}}",
-  "exportSnippets": "Exporteer fragmenten",
-  "exportSuccess": "Uittreksels geëxporteerd",
-  "exportFailed": "Het exporteren van codefragmenten is mislukt.",
-  "expandAll": "Vouw alle mappen uit",
-  "collapseAll": "Alle mappen inklappen",
-  "docsLink": "Documentatie",
-  "clearSearch": "Zoekopdracht wissen",
-  "noSearchResults": "Er zijn geen resultaten gevonden die overeenkomen met uw zoekopdracht.",
-  "emptyTitle": "Nog geen fragmenten beschikbaar",
-  "emptyDescription": "Sla de commando's die je vaak gebruikt op, zodat je ze vervolgens met één klik in een terminal kunt uitvoeren.",
-  "shareSnippet": "Deel fragment",
-  "shareFolder": "Map delen",
-  "shareExpiry": "Verloopt",
-  "shareExpiryOptions": {
-    "h0": "Nooit",
-    "h1": "Over 1 uur",
-    "h24": "Binnen 1 dag",
-    "h168": "Over 7 dagen",
-    "h720": "Over 30 dagen"
-  },
-  "shareButton": "Deel",
-  "shareSuccess": "Gedeeld met {{count}}",
-  "shareFailed": "Delen mislukt",
-  "shareLoadFailed": "Het laden van de deelgegevens is mislukt.",
-  "currentAccess": "Huidige toegang",
-  "notSharedYet": "Nog met niemand gedeeld",
-  "revokeAccess": "Herroepen",
-  "revokeSuccess": "Toegang ingetrokken",
-  "revokeFailed": "Toegang intrekken is mislukt",
-  "close": "Dichtbij",
-  "targetHostsLabel": "Doelwithosts",
-  "targetHostsHint": "Selecteer de hosts waarop u deze opdracht direct wilt uitvoeren, zonder dat er een terminal open is. Laat dit veld leeg om de opdracht in de actieve terminal uit te voeren.",
-  "clearTargetHosts": "Duidelijk",
-  "noHostsAvailable": "Geen hosts beschikbaar",
-  "searchHosts": "Zoek hosts",
-  "runOnTargets": "Uitvoeren op doelhosts",
-  "executionResultTitle": "Resultaten voor \"{{name}}\"",
-  "executionResultDescription": "Uitvoer van elke doelhost.",
-  "executionSuccess": "Succes",
-  "executionFailed": "Mislukt",
-  "directRunSuccess": "Voerde \"{{name}}\" uit op {{count}} host(s)",
-  "directRunPartialFail": "\"{{name}}\" is op sommige hosts mislukt.",
-  "reorderFailed": "Het is niet gelukt om de fragmenten opnieuw te ordenen.",
-  "dropToRemoveFromFolder": "Sleep hierheen om de map te verlaten.",
-  "shareSnippetTitle": "Delen \"{{name}}\"",
-  "shareFolderTitle": "Map delen \"{{name}}\"",
-  "shareWith": "Delen met",
-  "usersTab": "Gebruikers",
-  "rolesTab": "Rollen",
-  "shareSearchPlaceholder": "Zoek gebruikers of rollen",
-  "shareNoMatches": "Geen overeenkomsten",
-  "shareWithCount": "Delen met {{count}}",
-  "shareFolderHint": "Deelt alle codefragmenten in deze map. Later toegevoegde fragmenten worden niet automatisch gedeeld.",
-  "shareFolderSummary": "Gedeelde {{count}} fragment(en) in deze map",
-  "grantedBy": "Toegekend door",
-  "expired": "Verlopen",
-  "variablesDialogTitle": "Uitvoeren \"{{name}}\"",
-  "variablesDialogDescription": "Vul de waarden in die dit codefragment nodig heeft voordat je het uitvoert.",
-  "variablesPreviewLabel": "Voorbeeld",
-  "variablesConfirmButton": "Loop",
-  "keybindings": {
-    "runSnippet": "Voer het bestaande codefragment uit.",
-    "snippetLabel": "Fragment",
-    "selectSnippet": "Selecteer een fragment",
-    "snippetMissing": "fragment niet gevonden",
-    "snippetRequired": "Selecteer een fragment"
-  },
-  "paletteHintRun": "Voer dit uit in het actieve terminaltabblad.",
-  "host": {
-    "startupTitle": "Opstartfragment",
-    "quickActionsTitle": "Snelle acties",
-    "quickActionsDescription": "Snelle acties verschijnen als knoppen in de Host Metrics-werkbalk, zodat u opdrachten met één klik kunt uitvoeren.",
-    "noQuickActions": "Nog geen snelle acties ondernomen.",
-    "buttonLabel": "Knoplabel",
-    "selectSnippet": "Selecteer fragment...",
-    "addQuickAction": "Actie toevoegen",
-    "tabTitle": "Fragmenten",
-    "startupDescription": "Wordt elke keer dat er verbinding wordt gemaakt met deze host in de terminal uitgevoerd. Variabelen zoals $HOST worden ingevuld; een codefragment dat om invoer vraagt, wordt overgeslagen.",
-    "none": "Geen",
-    "removeQuickAction": "Verwijder de snelle actie"
-  },
-  "quickActions": {
-    "running": "Het uitvoeren van {{name}}...",
-    "succeeded": "{{name}} succesvol voltooid",
-    "failed": "{{name}} mislukt",
-    "error": "Het uitvoeren van {{name}} is mislukt."
-  },
-  "paletteHintPaste": "Plak dit in het actieve terminaltabblad.",
-  "targetTerminals": "Ren binnen",
-  "targetTerminalsHint": "optioneel, anders het actieve tabblad",
-  "selectAll": "Alle",
-  "selectNone": "Geen",
-  "plugin": {
-    "name": "Fragmenten"
-  }
-}
diff --git a/plugins/snippets/locales/translated/no_NO.json b/plugins/snippets/locales/translated/no_NO.json
deleted file mode 100644
index c28caed19..000000000
--- a/plugins/snippets/locales/translated/no_NO.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Utdrag"
-  },
-  "onboarding": {
-    "feature_snippets": "Utdrag",
-    "feature_snippets_desc": "Lagre kommandoer du kjører ofte og send dem til en terminal med ett klikk."
-  },
-  "permissions": {
-    "view": {
-      "title": "Se utdrag",
-      "description": "Se dine egne utdrag, notater og delte utdrag."
-    },
-    "create": {
-      "title": "Lag utdrag",
-      "description": "Opprett nye utdrag, notater og mapper."
-    },
-    "edit": {
-      "title": "Rediger utdrag",
-      "description": "Gi nytt navn til eller endre eksisterende utdrag og mapper."
-    },
-    "delete": {
-      "title": "Slett utdrag",
-      "description": "Slett utdrag og mapper."
-    },
-    "share": {
-      "title": "Del utdrag",
-      "description": "Del utdrag og mapper med andre brukere eller roller."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Skjul mapper som standard",
-      "description": "Start hver utdragsmappe skjult når du åpner Utdragspanelet."
-    },
-    "showCommands": {
-      "label": "Vis kommandoer",
-      "description": "Vis den første linjen i hver kodebits kommando under navnet."
-    },
-    "confirmExecution": {
-      "label": "Bekreft før kjøring",
-      "description": "Spør før en kommandosnutt kjøres i en terminal."
-    }
-  },
-  "cancel": "Avbryt",
-  "loading": "Laster...",
-  "searchPlaceholder": "Søk i snippets",
-  "newFolder": "Ny mappe",
-  "newSnippet": "Nytt utdrag",
-  "noFolder": "Ingen mappe",
-  "noSnippetsInFolder": "Ingen utdrag i denne mappen",
-  "noTerminalTabsOpen": "Ingen terminalfane er åpen",
-  "run": "Kjør",
-  "pasteToTerminal": "Lim inn i terminalen",
-  "copySuccess": "Kopiert til utklippstavlen",
-  "importExport": "Import/eksport",
-  "importFailed": "Kunne ikke importere kodebiter",
-  "nameLabel": "Navn",
-  "namePlaceholder": "Navn på utdrag",
-  "descriptionLabel": "Beskrivelse",
-  "descriptionPlaceholder": "Valgfri beskrivelse",
-  "folderLabel": "Mappe",
-  "typeLabel": "Type",
-  "typeCommand": "Kommando",
-  "typeNote": "Note",
-  "commandLabel": "Kommando",
-  "commandPlaceholder": "Kommando som skal kjøres, f.eks. systemctl status $HOST",
-  "noteLabel": "Note",
-  "notePlaceholder": "Tekst som skal limes inn i terminalen",
-  "createSnippetTitle": "Opprett kodebit",
-  "createSnippetButton": "Opprett kodebit",
-  "createSuccess": "Kodeutdrag opprettet",
-  "createFailed": "Kunne ikke opprette snippet",
-  "editSnippetTitle": "Rediger utdrag",
-  "saveSnippetButton": "Lagre utdrag",
-  "updateSuccess": "Utdrag oppdatert",
-  "updateFailed": "Kunne ikke oppdatere snippet",
-  "deleteFailed": "Kunne ikke slette snippet",
-  "createFolderTitle": "Opprett mappe",
-  "createFolderButton": "Opprett mappe",
-  "folderCreateSuccess": "Mappe opprettet",
-  "folderCreateFailed": "Kunne ikke opprette mappe",
-  "editFolderTitle": "Rediger mappe",
-  "saveFolderButton": "Lagre mappe",
-  "folderEditSuccess": "Mappen er oppdatert",
-  "folderEditFailed": "Kunne ikke oppdatere mappen",
-  "folderNameLabel": "Mappenavn",
-  "folderNamePlaceholder": "Mappenavn",
-  "folderIconLabel": "Ikon",
-  "folderDeleteSuccess": "Mappen er slettet",
-  "folderDeleteFailed": "Kunne ikke slette mappen",
-  "confirmRunMessage": "Kjør \"{{name}}\"?",
-  "confirmRunButton": "Kjør",
-  "runSuccess": "Kjørte \"{{name}}\" på {{count}} terminal(er)",
-  "pasteSuccess": "Limte inn «{{name}}» i {{count}} terminal(er)",
-  "admin": {
-    "tabTitle": "Utdrag",
-    "count": "{{count}} utdrag",
-    "add": "Legg til utdrag",
-    "namePlaceholder": "Navn på utdrag",
-    "contentPlaceholder": "Kommandoinnhold",
-    "folderPlaceholder": "Mappe (valgfritt)",
-    "empty": "Denne brukeren har ingen utdrag",
-    "deleteConfirm": "Slett utdraget «{{name}}» som tilhører {{username}}?",
-    "deleted": "Utdrag slettet",
-    "deleteFailed": "Kunne ikke slette snippet",
-    "requiredFields": "Navn og innhold på kodebiten er obligatorisk",
-    "saved": "Kodestykket er lagret",
-    "saveFailed": "Kunne ikke lagre utdraget",
-    "saving": "Lagrer...",
-    "save": "Lagre"
-  },
-  "backToSnippets": "Tilbake til utdrag",
-  "settingsTitle": "Innstillinger for utdrag",
-  "settingsDisplayTitle": "Utstilling",
-  "settingsBehaviorTitle": "Oppførsel",
-  "typeCommandHint": "Kjører i den aktive terminalen.",
-  "typeNoteHint": "Limer inn i den aktive terminalen uten å kjøre.",
-  "variablesHint": "Variabler: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Etikett}",
-  "doubleClickToRun": "Dobbeltklikk for å kjøre",
-  "sharedBadge": "Delt",
-  "copyToClipboard": "Kopier til utklippstavlen",
-  "copyFailed": "Kunne ikke kopiere til utklippstavlen",
-  "moreOptions": "Flere alternativer",
-  "moreActions": "Flere handlinger",
-  "moveToFolder": "Flytt til mappe",
-  "deleteSnippet": "Slett utdrag",
-  "deleteSnippetConfirm": "Slette utdraget «{{name}}»?",
-  "deleteSuccess": "Utdrag slettet",
-  "delete": "Slett",
-  "folderActions": "Mappehandlinger",
-  "addSnippetHere": "Nytt utdrag her",
-  "deleteFolder": "Slett mappe",
-  "deleteFolderConfirm": "Slett mappen «{{name}}»? Skal utdragene flyttes ut av mappen.",
-  "createFolderDescription": "Grupper relaterte utdrag sammen.",
-  "editFolderDescription": "Endre navnet, fargen eller ikonet til denne mappen.",
-  "folderColorLabel": "Farge",
-  "loadFailed": "Kunne ikke laste inn utdrag",
-  "importSkipExisting": "Importer (hopp over eksisterende)",
-  "importOverwrite": "Importer (overskriv eksisterende)",
-  "importInvalidFile": "Den filen er ikke en gyldig eksport av snippets",
-  "importSuccess": "Importert {{imported}}, oppdatert {{updated}}, hoppet over {{skipped}}",
-  "exportSnippets": "Eksporter utdrag",
-  "exportSuccess": "Utdrag eksportert",
-  "exportFailed": "Kunne ikke eksportere utdrag",
-  "expandAll": "Utvid alle mapper",
-  "collapseAll": "Skjul alle mapper",
-  "docsLink": "Dokumentasjon",
-  "clearSearch": "Tøm søk",
-  "noSearchResults": "Ingen utdrag samsvarer med søket ditt",
-  "emptyTitle": "Ingen snippets ennå",
-  "emptyDescription": "Lagre kommandoer du kjører ofte, og kjør dem deretter i en terminal med ett klikk.",
-  "shareSnippet": "Del utdrag",
-  "shareFolder": "Del mappe",
-  "shareExpiry": "Utløper",
-  "shareExpiryOptions": {
-    "h0": "Aldri",
-    "h1": "Om 1 time",
-    "h24": "Om 1 dag",
-    "h168": "Om 7 dager",
-    "h720": "Om 30 dager"
-  },
-  "shareButton": "Dele",
-  "shareSuccess": "Delt med {{count}}",
-  "shareFailed": "Kunne ikke dele",
-  "shareLoadFailed": "Kunne ikke laste inn delingsdetaljene",
-  "currentAccess": "Nåværende tilgang",
-  "notSharedYet": "Ikke delt med noen ennå",
-  "revokeAccess": "Tilbakekalling",
-  "revokeSuccess": "Tilgang tilbakekalt",
-  "revokeFailed": "Kunne ikke tilbakekalle tilgang",
-  "close": "Lukk",
-  "targetHostsLabel": "Målverter",
-  "targetHostsHint": "Velg verter å kjøre denne kommandoen direkte på, uten en åpen terminal. La feltet stå tomt for å kjøre den i den aktive terminalen.",
-  "clearTargetHosts": "Tøm",
-  "noHostsAvailable": "Ingen verter tilgjengelig",
-  "searchHosts": "Søk etter verter",
-  "runOnTargets": "Kjør på målverter",
-  "executionResultTitle": "Resultater for «{{name}}»",
-  "executionResultDescription": "Utdata fra hver målvert.",
-  "executionSuccess": "Suksess",
-  "executionFailed": "Mislyktes",
-  "directRunSuccess": "Kjørte \"{{name}}\" på {{count}} vert(er)",
-  "directRunPartialFail": "«{{name}}» mislyktes på noen verter",
-  "reorderFailed": "Kunne ikke endre rekkefølgen på utdragene",
-  "dropToRemoveFromFolder": "Slipp her for å flytte ut av mappen",
-  "shareSnippetTitle": "Del «{{name}}»",
-  "shareFolderTitle": "Del mappen «{{name}}»",
-  "shareWith": "Del med",
-  "usersTab": "Brukere",
-  "rolesTab": "Roller",
-  "shareSearchPlaceholder": "Søk etter brukere eller roller",
-  "shareNoMatches": "Ingen treff",
-  "shareWithCount": "Del med {{count}}",
-  "shareFolderHint": "Deler alle utdrag i denne mappen. Utdrag som legges til senere deles ikke automatisk.",
-  "shareFolderSummary": "Delte {{count}} kodebiter i denne mappen",
-  "grantedBy": "Tildelt av",
-  "expired": "Utløpt",
-  "variablesDialogTitle": "Kjør «{{name}}»",
-  "variablesDialogDescription": "Fyll inn verdiene dette kodestykket trenger før du kjører det.",
-  "variablesPreviewLabel": "Forhåndsvis",
-  "variablesConfirmButton": "Kjør",
-  "keybindings": {
-    "runSnippet": "Kjør eksisterende kodebit",
-    "snippetLabel": "Utdrag",
-    "selectSnippet": "Velg et utdrag",
-    "snippetMissing": "utdraget ikke funnet",
-    "snippetRequired": "Velg et utdrag"
-  },
-  "paletteHintRun": "Kjør i den aktive terminalfanen",
-  "host": {
-    "startupTitle": "Oppstarts-snippet",
-    "quickActionsTitle": "Hurtighandlinger",
-    "quickActionsDescription": "Hurtighandlinger vises som knapper i verktøylinjen for vertsmålinger for utførelse av kommandoer med ett klikk.",
-    "noQuickActions": "Ingen hurtighandlinger ennå.",
-    "buttonLabel": "Knappetikett",
-    "selectSnippet": "Velg snippet...",
-    "addQuickAction": "Legg til handling",
-    "tabTitle": "Utdrag",
-    "startupDescription": "Kjører i terminalen hver gang den kobler seg til denne verten. Variabler som $HOST fylles ut; et kodeutdrag som ber om inndata hoppes over.",
-    "none": "Ingen",
-    "removeQuickAction": "Fjern hurtighandling"
-  },
-  "quickActions": {
-    "running": "Utfører {{name}}...",
-    "succeeded": "{{name}} fullført",
-    "failed": "{{name}} mislyktes",
-    "error": "Kunne ikke utføre {{name}}"
-  },
-  "paletteHintPaste": "Lim inn i den aktive terminalfanen",
-  "targetTerminals": "Løp inn",
-  "targetTerminalsHint": "valgfritt, ellers den aktive fanen",
-  "selectAll": "Alle",
-  "selectNone": "Ingen",
-  "plugin": {
-    "name": "Utdrag"
-  }
-}
diff --git a/plugins/snippets/locales/translated/pl_PL.json b/plugins/snippets/locales/translated/pl_PL.json
deleted file mode 100644
index 1b40d898e..000000000
--- a/plugins/snippets/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Snippety"
-  },
-  "onboarding": {
-    "feature_snippets": "Snippety",
-    "feature_snippets_desc": "Zapisuj często uruchamiane polecenia i wysyłaj je do terminala jednym kliknięciem."
-  },
-  "permissions": {
-    "view": {
-      "title": "Wyświetl fragmenty",
-      "description": "Zobacz własne fragmenty, notatki i udostępnione fragmenty."
-    },
-    "create": {
-      "title": "Utwórz fragmenty kodu",
-      "description": "Utwórz nowe fragmenty kodu, notatki i foldery."
-    },
-    "edit": {
-      "title": "Edytuj fragmenty",
-      "description": "Zmień nazwę lub zmodyfikuj istniejące fragmenty kodu i foldery."
-    },
-    "delete": {
-      "title": "Usuń fragmenty",
-      "description": "Usuń fragmenty kodu i foldery."
-    },
-    "share": {
-      "title": "Udostępnij fragmenty",
-      "description": "Udostępniaj fragmenty kodu i foldery innym użytkownikom lub rolom."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Domyślnie zwiń foldery",
-      "description": "Każdy folder fragmentów kodu powinien być zwinięty po otwarciu panelu Fragmenty kodu."
-    },
-    "showCommands": {
-      "label": "Pokaż polecenia",
-      "description": "Wyświetl pierwszy wiersz polecenia każdego fragmentu kodu pod jego nazwą."
-    },
-    "confirmExecution": {
-      "label": "Potwierdź przed uruchomieniem",
-      "description": "Zapytaj przed uruchomieniem fragmentu polecenia w terminalu."
-    }
-  },
-  "cancel": "Anuluj",
-  "loading": "Ładowanie...",
-  "searchPlaceholder": "Wyszukaj snippety",
-  "newFolder": "Nowy folder",
-  "newSnippet": "Nowy fragment kodu",
-  "noFolder": "Brak folderu",
-  "noSnippetsInFolder": "Brak snippetów w tym folderze",
-  "noTerminalTabsOpen": "Żadna zakładka terminala nie jest otwarta",
-  "run": "Uruchom",
-  "pasteToTerminal": "Wklej do terminala",
-  "copySuccess": "Skopiowano do schowka",
-  "importExport": "Import/Eksport",
-  "importFailed": "Nie udało się zaimportować snippetów",
-  "nameLabel": "Nazwa",
-  "namePlaceholder": "Nazwa snippetu",
-  "descriptionLabel": "Opis",
-  "descriptionPlaceholder": "Opis opcjonalny",
-  "folderLabel": "Folder",
-  "typeLabel": "Typ",
-  "typeCommand": "Polecenie",
-  "typeNote": "Notatka",
-  "commandLabel": "Polecenie",
-  "commandPlaceholder": "Polecenie do uruchomienia, np. systemctl status $HOST",
-  "noteLabel": "Notatka",
-  "notePlaceholder": "Tekst do wklejenia do terminala",
-  "createSnippetTitle": "Utwórz fragment kodu",
-  "createSnippetButton": "Utwórz fragment kodu",
-  "createSuccess": "Utworzono fragment kodu",
-  "createFailed": "Nie udało się utworzyć snippetu",
-  "editSnippetTitle": "Edytuj fragment",
-  "saveSnippetButton": "Zapisz fragment kodu",
-  "updateSuccess": "Zaktualizowano fragment kodu",
-  "updateFailed": "Nie udało się zaktualizować snippetu",
-  "deleteFailed": "Nie udało się usunąć snippetu",
-  "createFolderTitle": "Utwórz folder",
-  "createFolderButton": "Utwórz folder",
-  "folderCreateSuccess": "Utworzono folder",
-  "folderCreateFailed": "Nie udało się utworzyć folderu",
-  "editFolderTitle": "Edytuj folder",
-  "saveFolderButton": "Zapisz folder",
-  "folderEditSuccess": "Folder zaktualizowany",
-  "folderEditFailed": "Nie udało się zaktualizować folderu",
-  "folderNameLabel": "Nazwa folderu",
-  "folderNamePlaceholder": "Nazwa folderu",
-  "folderIconLabel": "Ikona",
-  "folderDeleteSuccess": "Folder usunięty",
-  "folderDeleteFailed": "Nie udało się usunąć folderu",
-  "confirmRunMessage": "Uruchomić „{{name}}”?",
-  "confirmRunButton": "Uruchom",
-  "runSuccess": "Uruchomiono „{{name}}” na terminalach {{count}}",
-  "pasteSuccess": "Wklejono „{{name}}” do {{count}} terminali",
-  "admin": {
-    "tabTitle": "Snippety",
-    "count": "{{count}} snippetów",
-    "add": "Dodaj snippet",
-    "namePlaceholder": "Nazwa snippetu",
-    "contentPlaceholder": "Treść polecenia",
-    "folderPlaceholder": "Folder (opcjonalnie)",
-    "empty": "Ten użytkownik nie ma żadnych snippetów",
-    "deleteConfirm": "Usunąć snippet „{{name}}” należący do {{username}}?",
-    "deleted": "Usunięto snippet",
-    "deleteFailed": "Nie udało się usunąć snippetu",
-    "requiredFields": "Nazwa i treść snippetu są wymagane",
-    "saved": "Zapisano snippet",
-    "saveFailed": "Nie udało się zapisać snippetu",
-    "saving": "Zapisywanie...",
-    "save": "Zapisz"
-  },
-  "backToSnippets": "Powrót do fragmentów",
-  "settingsTitle": "Ustawienia snippetów",
-  "settingsDisplayTitle": "Wyświetlanie",
-  "settingsBehaviorTitle": "Zachowanie",
-  "typeCommandHint": "Działa w aktywnym terminalu.",
-  "typeNoteHint": "Wkleja do aktywnego terminala bez uruchamiania.",
-  "variablesHint": "Zmienne: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Label}",
-  "doubleClickToRun": "Kliknij dwukrotnie, aby uruchomić",
-  "sharedBadge": "Udostępniony",
-  "copyToClipboard": "Kopiuj do schowka",
-  "copyFailed": "Nie udało się skopiować do schowka",
-  "moreOptions": "Więcej opcji",
-  "moreActions": "Więcej akcji",
-  "moveToFolder": "Przenieś do folderu",
-  "deleteSnippet": "Usuń fragment kodu",
-  "deleteSnippetConfirm": "Usunąć fragment „{{name}}”?",
-  "deleteSuccess": "Usunięto snippet",
-  "delete": "Usuń",
-  "folderActions": "Akcje folderów",
-  "addSnippetHere": "Nowy fragment tutaj",
-  "deleteFolder": "Usuń folder",
-  "deleteFolderConfirm": "Usunąć folder „{{name}}”? Jego fragmenty zostaną przeniesione poza folder.",
-  "createFolderDescription": "Połącz powiązane ze sobą fragmenty.",
-  "editFolderDescription": "Zmień nazwę, kolor lub ikonę tego folderu.",
-  "folderColorLabel": "Kolor",
-  "loadFailed": "Nie udało się załadować fragmentów kodu",
-  "importSkipExisting": "Importuj (pomiń istniejące)",
-  "importOverwrite": "Importuj (nadpisz istniejące)",
-  "importInvalidFile": "Ten plik nie jest prawidłowym eksportem fragmentów kodu",
-  "importSuccess": "Zaimportowano {{imported}}, zaktualizowano {{updated}}, pominięto {{skipped}}",
-  "exportSnippets": "Eksportuj fragmenty kodu",
-  "exportSuccess": "Wyeksportowano fragmenty kodu",
-  "exportFailed": "Nie udało się wyeksportować snippetów",
-  "expandAll": "Rozwiń wszystkie foldery",
-  "collapseAll": "Zwiń wszystkie foldery",
-  "docsLink": "Dokumentacja",
-  "clearSearch": "Wyczyść wyszukiwanie",
-  "noSearchResults": "Brak fragmentów odpowiadających Twojemu wyszukiwaniu",
-  "emptyTitle": "Brak fragmentów",
-  "emptyDescription": "Zapisz często uruchamiane polecenia, a następnie uruchom je w terminalu jednym kliknięciem.",
-  "shareSnippet": "Udostępnij fragment",
-  "shareFolder": "Udostępnij folder",
-  "shareExpiry": "Wygasa",
-  "shareExpiryOptions": {
-    "h0": "Nigdy",
-    "h1": "Za 1 godzinę",
-    "h24": "W 1 dzień",
-    "h168": "Za 7 dni",
-    "h720": "Za 30 dni"
-  },
-  "shareButton": "Udostępnij",
-  "shareSuccess": "Udostępniono {{count}}",
-  "shareFailed": "Nie udało się udostępnić",
-  "shareLoadFailed": "Nie udało się załadować szczegółów udostępniania",
-  "currentAccess": "Aktualny dostęp",
-  "notSharedYet": "Jeszcze nikomu nie udostępniono",
-  "revokeAccess": "Unieważnij",
-  "revokeSuccess": "Unieważniono dostęp",
-  "revokeFailed": "Nie udało się unieważnić dostępu",
-  "close": "Zamknij",
-  "targetHostsLabel": "Docelowi gospodarze",
-  "targetHostsHint": "Wybierz hosty, na których chcesz uruchomić to polecenie bezpośrednio, bez otwierania terminala. Pozostaw puste, aby uruchomić je w aktywnym terminalu.",
-  "clearTargetHosts": "Wyczyść",
-  "noHostsAvailable": "Brak dostępnych gospodarzy",
-  "searchHosts": "Wyszukaj hosty",
-  "runOnTargets": "Uruchom na hostach docelowych",
-  "executionResultTitle": "Wyniki dla „{{name}}”",
-  "executionResultDescription": "Dane wyjściowe z każdego hosta docelowego.",
-  "executionSuccess": "Powodzenie",
-  "executionFailed": "Niepowodzenie",
-  "directRunSuccess": "Uruchomiono „{{name}}” na {{count}} hostach",
-  "directRunPartialFail": "„{{name}}” nie powiodło się na niektórych hostach",
-  "reorderFailed": "Nie udało się zmienić kolejności fragmentów kodu",
-  "dropToRemoveFromFolder": "Upuść tutaj, aby wyjść z folderu",
-  "shareSnippetTitle": "Udostępnij „{{name}}”",
-  "shareFolderTitle": "Udostępnij folder „{{name}}”",
-  "shareWith": "Udostępnij",
-  "usersTab": "Użytkownicy",
-  "rolesTab": "Role",
-  "shareSearchPlaceholder": "Wyszukaj użytkowników lub role",
-  "shareNoMatches": "Brak dopasowań",
-  "shareWithCount": "Udostępnij za pomocą {{count}}",
-  "shareFolderHint": "Udostępnia każdy fragment kodu w tym folderze. Fragmenty dodane później nie są udostępniane automatycznie.",
-  "shareFolderSummary": "Udostępniono {{count}} fragmentów w tym folderze",
-  "grantedBy": "Przyznane przez",
-  "expired": "Wygasły",
-  "variablesDialogTitle": "Uruchom „{{name}}”",
-  "variablesDialogDescription": "Przed uruchomieniem snippetu wprowadź wymagane wartości.",
-  "variablesPreviewLabel": "Podgląd",
-  "variablesConfirmButton": "Uruchom",
-  "keybindings": {
-    "runSnippet": "Uruchom istniejący snippet",
-    "snippetLabel": "Snippet",
-    "selectSnippet": "Wybierz snippet",
-    "snippetMissing": "nie znaleziono snippetu",
-    "snippetRequired": "Wybierz snippet"
-  },
-  "paletteHintRun": "Uruchom w aktywnej karcie terminala",
-  "host": {
-    "startupTitle": "Snippet startowy",
-    "quickActionsTitle": "Szybkie akcje",
-    "quickActionsDescription": "Szybkie akcje pojawiają się jako przyciski na pasku narzędzi Metryki hosta, umożliwiając wykonanie polecenia jednym kliknięciem.",
-    "noQuickActions": "Brak szybkich akcji.",
-    "buttonLabel": "Etykieta przycisku",
-    "selectSnippet": "Wybierz snippet...",
-    "addQuickAction": "Dodaj akcję",
-    "tabTitle": "Snippety",
-    "startupDescription": "Działa w terminalu za każdym razem, gdy łączy się z tym hostem. Zmienne takie jak $HOST są wypełniane; fragment kodu, który prosi o dane wejściowe, jest pomijany.",
-    "none": "Żaden",
-    "removeQuickAction": "Usuń szybką akcję"
-  },
-  "quickActions": {
-    "running": "Wykonywanie {{name}}...",
-    "succeeded": "{{name}} ukończono pomyślnie",
-    "failed": "{{name}} nie powiodło się",
-    "error": "Nie udało się wykonać {{name}}"
-  },
-  "paletteHintPaste": "Wklej w aktywnej karcie terminala",
-  "targetTerminals": "Wbiec",
-  "targetTerminalsHint": "opcjonalnie, w przeciwnym razie aktywna karta",
-  "selectAll": "Wszystkie",
-  "selectNone": "Żaden",
-  "plugin": {
-    "name": "Snippety"
-  }
-}
diff --git a/plugins/snippets/locales/translated/pt_BR.json b/plugins/snippets/locales/translated/pt_BR.json
deleted file mode 100644
index 08d2d09ff..000000000
--- a/plugins/snippets/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Snippets"
-  },
-  "onboarding": {
-    "feature_snippets": "Snippets",
-    "feature_snippets_desc": "Salve os comandos que você executa com frequência e envie-os para um terminal com um único clique."
-  },
-  "permissions": {
-    "view": {
-      "title": "Ver trechos",
-      "description": "Veja seus próprios trechos, anotações e trechos compartilhados."
-    },
-    "create": {
-      "title": "Criar trechos",
-      "description": "Crie novos trechos de código, notas e pastas."
-    },
-    "edit": {
-      "title": "Editar trechos",
-      "description": "Renomeie ou altere trechos de código e pastas existentes."
-    },
-    "delete": {
-      "title": "Excluir trechos",
-      "description": "Exclua trechos de código e pastas."
-    },
-    "share": {
-      "title": "Compartilhar trechos",
-      "description": "Compartilhe trechos de código e pastas com outros usuários ou funções."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Recolher pastas por padrão",
-      "description": "Ao abrir o painel de Snippets, cada pasta de trechos deve estar recolhida."
-    },
-    "showCommands": {
-      "label": "Mostrar comandos",
-      "description": "Exiba a primeira linha do comando de cada trecho de código abaixo do seu nome."
-    },
-    "confirmExecution": {
-      "label": "Confirme antes de executar.",
-      "description": "Pergunte antes de executar um trecho de comando no terminal."
-    }
-  },
-  "cancel": "Cancelar",
-  "loading": "Carregando...",
-  "searchPlaceholder": "Trechos de pesquisa",
-  "newFolder": "Nova pasta",
-  "newSnippet": "Novo trecho",
-  "noFolder": "Sem pasta",
-  "noSnippetsInFolder": "Não há trechos de código nesta pasta.",
-  "noTerminalTabsOpen": "Nenhuma aba de terminal está aberta.",
-  "run": "Correr",
-  "pasteToTerminal": "Cole no terminal",
-  "copySuccess": "Copiado para a área de transferência",
-  "importExport": "Importação/Exportação",
-  "importFailed": "Falha ao importar trechos de código.",
-  "nameLabel": "Nome",
-  "namePlaceholder": "Nome do trecho",
-  "descriptionLabel": "Descrição",
-  "descriptionPlaceholder": "Descrição opcional",
-  "folderLabel": "Pasta",
-  "typeLabel": "Tipo",
-  "typeCommand": "Comando",
-  "typeNote": "Observação",
-  "commandLabel": "Comando",
-  "commandPlaceholder": "Comando a ser executado, por exemplo, systemctl status $HOST",
-  "noteLabel": "Observação",
-  "notePlaceholder": "Texto para colar no terminal",
-  "createSnippetTitle": "Criar trecho",
-  "createSnippetButton": "Criar trecho",
-  "createSuccess": "Trecho criado",
-  "createFailed": "Falha ao criar o trecho de código",
-  "editSnippetTitle": "Editar trecho",
-  "saveSnippetButton": "Salvar trecho",
-  "updateSuccess": "Trecho atualizado",
-  "updateFailed": "Falha ao atualizar o trecho de código",
-  "deleteFailed": "Falha ao excluir o trecho",
-  "createFolderTitle": "Criar pasta",
-  "createFolderButton": "Criar pasta",
-  "folderCreateSuccess": "Pasta criada",
-  "folderCreateFailed": "Falha ao criar a pasta",
-  "editFolderTitle": "Pasta de edição",
-  "saveFolderButton": "Pasta de salvamento",
-  "folderEditSuccess": "Pasta atualizada",
-  "folderEditFailed": "Falha ao atualizar a pasta",
-  "folderNameLabel": "Nome da pasta",
-  "folderNamePlaceholder": "Nome da pasta",
-  "folderIconLabel": "Ícone",
-  "folderDeleteSuccess": "Pasta excluída",
-  "folderDeleteFailed": "Falha ao excluir a pasta",
-  "confirmRunMessage": "Executar \"{{name}}\"?",
-  "confirmRunButton": "Correr",
-  "runSuccess": "Executado \"{{name}}\" em {{count}} terminal(is)",
-  "pasteSuccess": "Colado \"{{name}}\" em {{count}} terminal(is)",
-  "admin": {
-    "tabTitle": "Snippets",
-    "count": "{{count}} trechos",
-    "add": "Adicionar trecho de código",
-    "namePlaceholder": "Nome do trecho",
-    "contentPlaceholder": "Conteúdo do comando",
-    "folderPlaceholder": "Pasta (opcional)",
-    "empty": "Este usuário não possui trechos de código.",
-    "deleteConfirm": "Excluir trecho \"{{name}}\" pertencente a {{username}}?",
-    "deleted": "Trecho excluído",
-    "deleteFailed": "Falha ao excluir o trecho",
-    "requiredFields": "O nome e o conteúdo do snippet são obrigatórios.",
-    "saved": "Trecho salvo",
-    "saveFailed": "Falha ao salvar o trecho de código",
-    "saving": "Salvando...",
-    "save": "Salvar"
-  },
-  "backToSnippets": "Voltar aos trechos",
-  "settingsTitle": "Configurações de trechos de código",
-  "settingsDisplayTitle": "Mostrar",
-  "settingsBehaviorTitle": "Comportamento",
-  "typeCommandHint": "Executa no terminal ativo.",
-  "typeNoteHint": "Cola o texto no terminal ativo sem executá-lo.",
-  "variablesHint": "Variáveis: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Label}",
-  "doubleClickToRun": "Clique duas vezes para executar",
-  "sharedBadge": "Compartilhado",
-  "copyToClipboard": "Copiar para a área de transferência",
-  "copyFailed": "Falha ao copiar para área de transferência",
-  "moreOptions": "Mais opções",
-  "moreActions": "Mais ações",
-  "moveToFolder": "Mover para a pasta",
-  "deleteSnippet": "Excluir trecho",
-  "deleteSnippetConfirm": "Excluir trecho \"{{name}}\"?",
-  "deleteSuccess": "Trecho excluído",
-  "delete": "Apagar",
-  "folderActions": "Ações da pasta",
-  "addSnippetHere": "Novo trecho aqui",
-  "deleteFolder": "Excluir pasta",
-  "deleteFolderConfirm": "Excluir pasta \"{{name}}\"? Seus trechos de código serão movidos para fora da pasta.",
-  "createFolderDescription": "Agrupe trechos relacionados.",
-  "editFolderDescription": "Alterar o nome, a cor ou o ícone desta pasta.",
-  "folderColorLabel": "Cor",
-  "loadFailed": "Falha ao carregar os trechos de código.",
-  "importSkipExisting": "Importar (ignorar existente)",
-  "importOverwrite": "Importar (sobrescrever existente)",
-  "importInvalidFile": "Esse arquivo não é uma exportação de trechos válida.",
-  "importSuccess": "Importado {{imported}}, atualizado {{updated}}, ignorado {{skipped}}",
-  "exportSnippets": "Exportar trechos",
-  "exportSuccess": "Trechos exportados",
-  "exportFailed": "Falha ao exportar trechos de código.",
-  "expandAll": "Expandir todas as pastas",
-  "collapseAll": "Recolher todas as pastas",
-  "docsLink": "Documentação",
-  "clearSearch": "Limpar pesquisa",
-  "noSearchResults": "Nenhum trecho corresponde à sua pesquisa.",
-  "emptyTitle": "Ainda não há trechos de código.",
-  "emptyDescription": "Salve os comandos que você executa com frequência e, em seguida, execute-os em um terminal com um único clique.",
-  "shareSnippet": "Compartilhar trecho",
-  "shareFolder": "Pasta compartilhada",
-  "shareExpiry": "Expira",
-  "shareExpiryOptions": {
-    "h0": "Nunca",
-    "h1": "Em 1 hora",
-    "h24": "Em 1 dia",
-    "h168": "Em 7 dias",
-    "h720": "Em 30 dias"
-  },
-  "shareButton": "Compartilhar",
-  "shareSuccess": "Compartilhado com {{count}}",
-  "shareFailed": "Não foi possível compartilhar",
-  "shareLoadFailed": "Não foi possível carregar os detalhes de compartilhamento.",
-  "currentAccess": "Acesso atual",
-  "notSharedYet": "Ainda não compartilhei com ninguém.",
-  "revokeAccess": "Revogar",
-  "revokeSuccess": "Acesso revogado",
-  "revokeFailed": "Falha ao revogar o acesso",
-  "close": "Fechar",
-  "targetHostsLabel": "A Target hospeda",
-  "targetHostsHint": "Selecione os hosts nos quais deseja executar este comando diretamente, sem abrir um terminal. Deixe em branco para executá-lo no terminal ativo.",
-  "clearTargetHosts": "Limpar",
-  "noHostsAvailable": "Nenhum anfitrião disponível",
-  "searchHosts": "Pesquisar anfitriões",
-  "runOnTargets": "Executar em hosts de destino",
-  "executionResultTitle": "Resultados para \"{{name}}\"",
-  "executionResultDescription": "Saída de cada host de destino.",
-  "executionSuccess": "Sucesso",
-  "executionFailed": "Fracassado",
-  "directRunSuccess": "Executado \"{{name}}\" em {{count}} host(s)",
-  "directRunPartialFail": "\"{{name}}\" falhou em alguns hosts",
-  "reorderFailed": "Falha ao reordenar os trechos de código.",
-  "dropToRemoveFromFolder": "Solte aqui para sair da pasta.",
-  "shareSnippetTitle": "Compartilhar \"{{name}}\"",
-  "shareFolderTitle": "Pasta compartilhada \"{{name}}\"",
-  "shareWith": "Compartilhe com",
-  "usersTab": "Usuários",
-  "rolesTab": "Funções",
-  "shareSearchPlaceholder": "Pesquisar usuários ou funções",
-  "shareNoMatches": "Nenhuma correspondência",
-  "shareWithCount": "Compartilhe com {{count}}",
-  "shareFolderHint": "Compartilha todos os trechos de código nesta pasta. Trechos adicionados posteriormente não são compartilhados automaticamente.",
-  "shareFolderSummary": "Trechos compartilhados {{count}} nesta pasta",
-  "grantedBy": "Concedido por",
-  "expired": "Expirado",
-  "variablesDialogTitle": "Executar \"{{name}}\"",
-  "variablesDialogDescription": "Preencha os valores necessários para este trecho de código antes de executá-lo.",
-  "variablesPreviewLabel": "Pré-visualização",
-  "variablesConfirmButton": "Correr",
-  "keybindings": {
-    "runSnippet": "Executar trecho de código existente",
-    "snippetLabel": "Trecho",
-    "selectSnippet": "Selecione um trecho",
-    "snippetMissing": "trecho não encontrado",
-    "snippetRequired": "Selecione um trecho"
-  },
-  "paletteHintRun": "Execute na aba do terminal ativo",
-  "host": {
-    "startupTitle": "Snippet Inicial",
-    "quickActionsTitle": "Ações Rápidas",
-    "quickActionsDescription": "As ações rápidas aparecem como botões na barra de ferramentas do Host Metrics para execução de comandos com um único clique.",
-    "noQuickActions": "Nenhuma ação imediata ainda.",
-    "buttonLabel": "Rótulo do botão",
-    "selectSnippet": "Selecionar snippet...",
-    "addQuickAction": "Adicionar ação",
-    "tabTitle": "Snippets",
-    "startupDescription": "Executa no terminal sempre que se conecta a este host. Variáveis como $HOST são preenchidas; um trecho que solicita entradas é ignorado.",
-    "none": "Nenhum",
-    "removeQuickAction": "Remover ação rápida"
-  },
-  "quickActions": {
-    "running": "Executando {{name}}...",
-    "succeeded": "{{name}} concluído com sucesso",
-    "failed": "{{name}} falhou",
-    "error": "Falha ao executar {{name}}"
-  },
-  "paletteHintPaste": "Cole na aba do terminal ativo",
-  "targetTerminals": "Correr em",
-  "targetTerminalsHint": "Opcional, caso contrário, a aba ativa.",
-  "selectAll": "Todos",
-  "selectNone": "Nenhum",
-  "plugin": {
-    "name": "Snippets"
-  }
-}
diff --git a/plugins/snippets/locales/translated/pt_PT.json b/plugins/snippets/locales/translated/pt_PT.json
deleted file mode 100644
index 50e323565..000000000
--- a/plugins/snippets/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Fragmentos"
-  },
-  "onboarding": {
-    "feature_snippets": "Snippets",
-    "feature_snippets_desc": "Guarde os comandos que executa com frequência e envie-os para um terminal com um único clique."
-  },
-  "permissions": {
-    "view": {
-      "title": "Ver excertos",
-      "description": "Veja os seus próprios excertos, anotações e excertos partilhados."
-    },
-    "create": {
-      "title": "Criar excertos",
-      "description": "Crie novos excertos de código, notas e pastas."
-    },
-    "edit": {
-      "title": "Editar excertos",
-      "description": "Renomeie ou altere os excertos de código e pastas existentes."
-    },
-    "delete": {
-      "title": "Excluir trechos",
-      "description": "Apague trechos de código e pastas."
-    },
-    "share": {
-      "title": "Partilhar trechos",
-      "description": "Partilhe excertos de código e pastas com outros utilizadores ou funções."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Recolher pastas por predefinição",
-      "description": "Ao abrir o painel Snippets, cada pasta de snippets de código deve estar recolhida."
-    },
-    "showCommands": {
-      "label": "Mostrar comandos",
-      "description": "Apresente a primeira linha do comando de cada trecho de código abaixo do seu nome."
-    },
-    "confirmExecution": {
-      "label": "Confirme antes de executar.",
-      "description": "Pergunte antes de executar um trecho de comando no terminal."
-    }
-  },
-  "cancel": "Cancelar",
-  "loading": "A carregar...",
-  "searchPlaceholder": "Pesquisar snippets",
-  "newFolder": "Nova pasta",
-  "newSnippet": "Novo trecho",
-  "noFolder": "Sem pasta",
-  "noSnippetsInFolder": "Nenhum snippet nesta pasta",
-  "noTerminalTabsOpen": "Nenhuma patilha de terminal está aberta.",
-  "run": "Executar",
-  "pasteToTerminal": "Cole no terminal",
-  "copySuccess": "Copiado para a área de transferência.",
-  "importExport": "Importar / Exportar",
-  "importFailed": "Falha ao importar fragmentos",
-  "nameLabel": "Nome",
-  "namePlaceholder": "Nome do snippet",
-  "descriptionLabel": "Descrição",
-  "descriptionPlaceholder": "Descrição opcional",
-  "folderLabel": "Pasta",
-  "typeLabel": "Tipo",
-  "typeCommand": "Comando",
-  "typeNote": "Nota",
-  "commandLabel": "Comando",
-  "commandPlaceholder": "Comando a executar, por exemplo, systemctl status $HOST",
-  "noteLabel": "Nota",
-  "notePlaceholder": "Texto para colar no terminal",
-  "createSnippetTitle": "Criar excerto",
-  "createSnippetButton": "Criar excerto",
-  "createSuccess": "Trecho criado",
-  "createFailed": "Falha ao criar snippet",
-  "editSnippetTitle": "Editar trecho",
-  "saveSnippetButton": "Guardar trecho",
-  "updateSuccess": "Trecho atualizado",
-  "updateFailed": "Falha ao atualizar snippet",
-  "deleteFailed": "Falha ao eliminar snippet",
-  "createFolderTitle": "Criar pasta",
-  "createFolderButton": "Criar pasta",
-  "folderCreateSuccess": "Pasta criada",
-  "folderCreateFailed": "Falha ao criar pasta",
-  "editFolderTitle": "Editar pasta",
-  "saveFolderButton": "Guardar pasta",
-  "folderEditSuccess": "Pasta atualizada",
-  "folderEditFailed": "Falha ao atualizar pasta",
-  "folderNameLabel": "Nome da pasta",
-  "folderNamePlaceholder": "Nome da pasta",
-  "folderIconLabel": "Ícone",
-  "folderDeleteSuccess": "Pasta excluída",
-  "folderDeleteFailed": "Falha ao eliminar pasta",
-  "confirmRunMessage": "Executar \"{{name}}\"?",
-  "confirmRunButton": "Executar",
-  "runSuccess": "Executado \"{{name}}\" em {{count}} terminal(is)",
-  "pasteSuccess": "Colado \"{{name}}\" em {{count}} terminal(is)",
-  "admin": {
-    "tabTitle": "Snippets",
-    "count": "{{count}} snippets",
-    "add": "Adicionar snippet",
-    "namePlaceholder": "Nome do snippet",
-    "contentPlaceholder": "Conteúdo do comando",
-    "folderPlaceholder": "Pasta (opcional)",
-    "empty": "Este utilizador não tem snippets",
-    "deleteConfirm": "Eliminar snippet \"{{name}}\" de {{username}}?",
-    "deleted": "Snippet eliminado",
-    "deleteFailed": "Falha ao eliminar snippet",
-    "requiredFields": "O nome e o conteúdo do snippet são obrigatórios",
-    "saved": "Snippet guardado",
-    "saveFailed": "Falha ao guardar snippet",
-    "saving": "A guardar...",
-    "save": "Guardar"
-  },
-  "backToSnippets": "Voltar aos excertos",
-  "settingsTitle": "Configurações de excertos de código",
-  "settingsDisplayTitle": "Ecrã",
-  "settingsBehaviorTitle": "Comportamento",
-  "typeCommandHint": "Executa no terminal ativo.",
-  "typeNoteHint": "Cola o texto no terminal ativo sem o executar.",
-  "variablesHint": "Variáveis: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Label}",
-  "doubleClickToRun": "Clique duas vezes para executar",
-  "sharedBadge": "Partilhado",
-  "copyToClipboard": "Copiar para a área de transferência",
-  "copyFailed": "Falha ao copiar para a área de transferência",
-  "moreOptions": "Mais opções",
-  "moreActions": "Mais ações",
-  "moveToFolder": "Mover para a pasta",
-  "deleteSnippet": "Excluir trecho",
-  "deleteSnippetConfirm": "Apagar excerto \"{{name}}\"?",
-  "deleteSuccess": "Snippet eliminado",
-  "delete": "Eliminar",
-  "folderActions": "Ações da pasta",
-  "addSnippetHere": "Novo excerto aqui",
-  "deleteFolder": "Eliminar pasta",
-  "deleteFolderConfirm": "Apagar pasta \"{{name}}\"? Os seus trechos de código serão movidos para fora da pasta.",
-  "createFolderDescription": "Agrupe excertos relacionados.",
-  "editFolderDescription": "Alterar o nome, a cor ou o ícone desta pasta.",
-  "folderColorLabel": "Cor",
-  "loadFailed": "Falha ao carregar os excertos de código.",
-  "importSkipExisting": "Importar (ignorar existentes)",
-  "importOverwrite": "Importar (sobrescrever existente)",
-  "importInvalidFile": "Este ficheiro não é uma exportação de trechos válida.",
-  "importSuccess": "Importado {{imported}}, atualizado {{updated}}, ignorado {{skipped}}",
-  "exportSnippets": "Exportar trechos",
-  "exportSuccess": "Trechos exportados",
-  "exportFailed": "Falha ao exportar fragmentos",
-  "expandAll": "Expandir todas as pastas",
-  "collapseAll": "Recolher todas as pastas",
-  "docsLink": "Documentação",
-  "clearSearch": "Limpar pesquisa",
-  "noSearchResults": "Nenhum excerto corresponde à sua pesquisa.",
-  "emptyTitle": "Ainda não há excertos de código.",
-  "emptyDescription": "Guarde os comandos que executa com frequência e, em seguida, execute-os num terminal com um único clique.",
-  "shareSnippet": "Partilhar trecho",
-  "shareFolder": "Pasta partilhada",
-  "shareExpiry": "Expira",
-  "shareExpiryOptions": {
-    "h0": "Nunca",
-    "h1": "Em 1 hora",
-    "h24": "Em 1 dia",
-    "h168": "Em 7 dias",
-    "h720": "Em 30 dias"
-  },
-  "shareButton": "Partilhar",
-  "shareSuccess": "Partilhado com {{count}}",
-  "shareFailed": "Não foi possível partilhar",
-  "shareLoadFailed": "Não foi possível carregar os detalhes de partilha.",
-  "currentAccess": "Acesso atual",
-  "notSharedYet": "Ainda não partilhei com ninguém.",
-  "revokeAccess": "Revogar",
-  "revokeSuccess": "Acesso revogado",
-  "revokeFailed": "Falha ao revogar acesso",
-  "close": "Fechar",
-  "targetHostsLabel": "A Target hospeda",
-  "targetHostsHint": "Selecione os hosts nos quais pretende executar este comando diretamente, sem abrir um terminal. Deixe em branco para o executar no terminal ativo.",
-  "clearTargetHosts": "Limpar",
-  "noHostsAvailable": "Nenhum anfitrião disponível",
-  "searchHosts": "Pesquisar hosts",
-  "runOnTargets": "Executar em hosts de destino",
-  "executionResultTitle": "Resultados para \"{{name}}\"",
-  "executionResultDescription": "Saída de cada host de destino.",
-  "executionSuccess": "Sucesso",
-  "executionFailed": "Falhou",
-  "directRunSuccess": "Executou \"{{name}}\" em {{count}} máquina(s)",
-  "directRunPartialFail": "\"{{name}}\" falhou em alguns hosts",
-  "reorderFailed": "Falha ao reordenar os excertos de código.",
-  "dropToRemoveFromFolder": "Solte aqui para sair da pasta.",
-  "shareSnippetTitle": "Partilhar \"{{name}}\"",
-  "shareFolderTitle": "Pasta partilhada \"{{name}}\"",
-  "shareWith": "Partilhar com",
-  "usersTab": "Utilizadores",
-  "rolesTab": "Funções",
-  "shareSearchPlaceholder": "Procurar utilizadores ou funções",
-  "shareNoMatches": "Nenhuma correspondência",
-  "shareWithCount": "Partilhar com {{count}}",
-  "shareFolderHint": "Partilha todos os excertos de código nesta pasta. Os trechos adicionados posteriormente não são partilhados automaticamente.",
-  "shareFolderSummary": "Excertos partilhados {{count}} nesta pasta",
-  "grantedBy": "Concedido por",
-  "expired": "Expirado",
-  "variablesDialogTitle": "Executar \"{{name}}\"",
-  "variablesDialogDescription": "Preencha os valores necessários para este excerto de código antes de o executar.",
-  "variablesPreviewLabel": "Pré-visualizar",
-  "variablesConfirmButton": "Executar",
-  "keybindings": {
-    "runSnippet": "Executar excerto de código existente",
-    "snippetLabel": "Trecho",
-    "selectSnippet": "Selecione um excerto",
-    "snippetMissing": "trecho não encontrado",
-    "snippetRequired": "Selecione um excerto"
-  },
-  "paletteHintRun": "Execute no separador do terminal ativo",
-  "host": {
-    "startupTitle": "Fragmento de inicialização",
-    "quickActionsTitle": "Ações Rápidas",
-    "quickActionsDescription": "As ações rápidas aparecem como botões na barra de ferramentas de Métricas do Host para execução de comandos com um clique.",
-    "noQuickActions": "Ainda não existem ações rápidas.",
-    "buttonLabel": "Texto do botão",
-    "selectSnippet": "Selecionar snippet...",
-    "addQuickAction": "Adicionar Ação",
-    "tabTitle": "Snippets",
-    "startupDescription": "Executa no terminal sempre que se liga a este host. As variáveis como $HOST são preenchidas; um troço que solicita entradas é ignorado.",
-    "none": "Nenhuma",
-    "removeQuickAction": "Remover ação rápida"
-  },
-  "quickActions": {
-    "running": "A executar {{name}}...",
-    "succeeded": "{{name}} concluído com sucesso",
-    "failed": "{{name}} falhou",
-    "error": "Falha ao executar {{name}}"
-  },
-  "paletteHintPaste": "Cole no separador do terminal ativo",
-  "targetTerminals": "Correr em",
-  "targetTerminalsHint": "Opcional, caso contrário, o separador ativo.",
-  "selectAll": "Todas",
-  "selectNone": "Nenhuma",
-  "plugin": {
-    "name": "Snippets"
-  }
-}
diff --git a/plugins/snippets/locales/translated/ro_RO.json b/plugins/snippets/locales/translated/ro_RO.json
deleted file mode 100644
index 5ea3d4ab8..000000000
--- a/plugins/snippets/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Fragmente"
-  },
-  "onboarding": {
-    "feature_snippets": "Fragmente",
-    "feature_snippets_desc": "Salvează comenzile pe care le execuți des și trimite-le către un terminal cu un singur clic."
-  },
-  "permissions": {
-    "view": {
-      "title": "Vizualizați fragmente",
-      "description": "Vedeți propriile fragmente, notițe și fragmente partajate."
-    },
-    "create": {
-      "title": "Creați fragmente",
-      "description": "Creați fragmente, note și foldere noi."
-    },
-    "edit": {
-      "title": "Editați fragmentele",
-      "description": "Redenumiți sau modificați fragmentele și folderele existente."
-    },
-    "delete": {
-      "title": "Ștergeți fragmentele",
-      "description": "Ștergeți fragmente și foldere."
-    },
-    "share": {
-      "title": "Partajați fragmente",
-      "description": "Partajați fragmente și foldere cu alți utilizatori sau roluri."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Restrângeți folderele în mod implicit",
-      "description": "Pornește fiecare folder de fragmente restrâns când deschizi panoul Fragmente."
-    },
-    "showCommands": {
-      "label": "Afișați comenzile",
-      "description": "Afișează prima linie a comenzii fiecărui fragment de cod sub numele său."
-    },
-    "confirmExecution": {
-      "label": "Confirmați înainte de rulare",
-      "description": "Întreabă înainte ca un fragment de comandă să ruleze într-un terminal."
-    }
-  },
-  "cancel": "Anula",
-  "loading": "Încărcare...",
-  "searchPlaceholder": "Fragmente de căutare",
-  "newFolder": "Dosar nou",
-  "newSnippet": "Fragment nou",
-  "noFolder": "Niciun dosar",
-  "noSnippetsInFolder": "Niciun fragment în acest dosar",
-  "noTerminalTabsOpen": "Nicio filă de terminal nu este deschisă",
-  "run": "Aleargă",
-  "pasteToTerminal": "Lipire în terminal",
-  "copySuccess": "Copiat în clipboard",
-  "importExport": "Import / Export",
-  "importFailed": "Importarea fragmentelor a eșuat",
-  "nameLabel": "Nume",
-  "namePlaceholder": "Nume fragment",
-  "descriptionLabel": "Descriere",
-  "descriptionPlaceholder": "Descriere opțională",
-  "folderLabel": "Pliant",
-  "typeLabel": "Tip",
-  "typeCommand": "Comanda",
-  "typeNote": "Nota",
-  "commandLabel": "Comanda",
-  "commandPlaceholder": "Comandă de rulat, de exemplu, systemctl status $HOST",
-  "noteLabel": "Nota",
-  "notePlaceholder": "Text de lipit în terminal",
-  "createSnippetTitle": "Creați fragment",
-  "createSnippetButton": "Creați fragment",
-  "createSuccess": "Fragment creat",
-  "createFailed": "Nu s-a putut crea fragmentul",
-  "editSnippetTitle": "Editați fragmentul",
-  "saveSnippetButton": "Salvați fragmentul",
-  "updateSuccess": "Fragment actualizat",
-  "updateFailed": "Fragmentul nu a putut fi actualizat",
-  "deleteFailed": "Nu s-a putut șterge fragmentul",
-  "createFolderTitle": "Creați un folder",
-  "createFolderButton": "Creați un folder",
-  "folderCreateSuccess": "Dosar creat",
-  "folderCreateFailed": "Nu s-a putut crea folderul",
-  "editFolderTitle": "Editați folderul",
-  "saveFolderButton": "Salvați folderul",
-  "folderEditSuccess": "Dosar actualizat",
-  "folderEditFailed": "Nu s-a putut actualiza folderul",
-  "folderNameLabel": "Numele folderului",
-  "folderNamePlaceholder": "Numele folderului",
-  "folderIconLabel": "Pictogramă",
-  "folderDeleteSuccess": "Dosar șters",
-  "folderDeleteFailed": "Ștergerea folderului a eșuat",
-  "confirmRunMessage": "Executați „{{name}}”?",
-  "confirmRunButton": "Aleargă",
-  "runSuccess": "A rulat „{{name}}” pe terminalul(ele) {{count}}",
-  "pasteSuccess": "„{{name}}” a fost lipit în terminalul(ele) {{count}}",
-  "admin": {
-    "tabTitle": "Fragmente",
-    "count": "fragmente {{count}}",
-    "add": "Adăugați fragment",
-    "namePlaceholder": "Nume fragment",
-    "contentPlaceholder": "Conținutul comenzii",
-    "folderPlaceholder": "Dosar (opțional)",
-    "empty": "Acest utilizator nu are fragmente",
-    "deleteConfirm": "Ștergeți fragmentul „{{name}}” aparținând lui {{username}}?",
-    "deleted": "Fragment șters",
-    "deleteFailed": "Nu s-a putut șterge fragmentul",
-    "requiredFields": "Numele și conținutul fragmentului sunt obligatorii",
-    "saved": "Fragment salvat",
-    "saveFailed": "Nu s-a putut salva fragmentul",
-    "saving": "Economisire...",
-    "save": "Salva"
-  },
-  "backToSnippets": "Înapoi la fragmente",
-  "settingsTitle": "Setări fragment",
-  "settingsDisplayTitle": "Afişa",
-  "settingsBehaviorTitle": "Comportament",
-  "typeCommandHint": "Rulează în terminalul activ.",
-  "typeNoteHint": "Lipește în terminalul activ fără a rula.",
-  "variablesHint": "Variabile: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Etichetă}",
-  "doubleClickToRun": "Dublu clic pentru a rula",
-  "sharedBadge": "Partajat",
-  "copyToClipboard": "Copiați în clipboard",
-  "copyFailed": "Copierea în clipboard nu a reușit",
-  "moreOptions": "Mai multe opțiuni",
-  "moreActions": "Mai multe acțiuni",
-  "moveToFolder": "Mută în folder",
-  "deleteSnippet": "Ștergeți fragmentul",
-  "deleteSnippetConfirm": "Ștergeți fragmentul „{{name}}”?",
-  "deleteSuccess": "Fragment șters",
-  "delete": "Şterge",
-  "folderActions": "Acțiuni în folder",
-  "addSnippetHere": "Fragment nou aici",
-  "deleteFolder": "Ștergeți folderul",
-  "deleteFolderConfirm": "Ștergeți folderul „{{name}}”? Fragmentele sale sunt mutate în afara folderului.",
-  "createFolderDescription": "Grupează fragmentele corelate.",
-  "editFolderDescription": "Schimbă numele, culoarea sau pictograma acestui folder.",
-  "folderColorLabel": "Culoare",
-  "loadFailed": "Nu s-au putut încărca fragmentele",
-  "importSkipExisting": "Import (săriți peste elementele existente)",
-  "importOverwrite": "Import (suprascrierea existentă)",
-  "importInvalidFile": "Fișierul respectiv nu este un export valid de fragmente.",
-  "importSuccess": "Importat {{imported}}, actualizat {{updated}}, omis {{skipped}}",
-  "exportSnippets": "Exportați fragmente",
-  "exportSuccess": "Fragmente exportate",
-  "exportFailed": "Exportul fragmentelor a eșuat",
-  "expandAll": "Extindeți toate folderele",
-  "collapseAll": "Restrângeți toate folderele",
-  "docsLink": "Documentare",
-  "clearSearch": "Șterge căutarea",
-  "noSearchResults": "Niciun fragment nu corespunde căutării dvs.",
-  "emptyTitle": "Niciun fragment încă",
-  "emptyDescription": "Salvează comenzile pe care le execuți des, apoi rulează-le într-un terminal cu un singur clic.",
-  "shareSnippet": "Partajați fragmentul",
-  "shareFolder": "Partajați folderul",
-  "shareExpiry": "Expiră",
-  "shareExpiryOptions": {
-    "h0": "Nu",
-    "h1": "Într-o oră",
-    "h24": "Într-o zi",
-    "h168": "În 7 zile",
-    "h720": "În 30 de zile"
-  },
-  "shareButton": "Distribuie",
-  "shareSuccess": "Partajat cu {{count}}",
-  "shareFailed": "Partajarea nu a reușit",
-  "shareLoadFailed": "Nu s-au putut încărca detaliile de partajare",
-  "currentAccess": "Acces curent",
-  "notSharedYet": "Nu a fost încă distribuit nimănui",
-  "revokeAccess": "Revoca",
-  "revokeSuccess": "Acces revocat",
-  "revokeFailed": "Nu s-a putut revoca accesul",
-  "close": "Aproape",
-  "targetHostsLabel": "Gazde țintă",
-  "targetHostsHint": "Alegeți gazdele pe care să rulați această comandă direct, fără un terminal deschis. Lăsați câmpul gol pentru a o rula în terminalul activ.",
-  "clearTargetHosts": "Clar",
-  "noHostsAvailable": "Nicio gazdă disponibilă",
-  "searchHosts": "Căutați gazde",
-  "runOnTargets": "Executare pe gazdele țintă",
-  "executionResultTitle": "Rezultate pentru „{{name}}”",
-  "executionResultDescription": "Ieșire de la fiecare gazdă țintă.",
-  "executionSuccess": "Succes",
-  "executionFailed": "Eșuat",
-  "directRunSuccess": "A rulat „{{name}}” pe gazdă(e) {{count}}",
-  "directRunPartialFail": "„{{name}}” a eșuat pe unele gazde",
-  "reorderFailed": "Nu s-au putut reordona fragmentele",
-  "dropToRemoveFromFolder": "Plasați aici pentru a ieși din folder",
-  "shareSnippetTitle": "Distribuie „{{name}}”",
-  "shareFolderTitle": "Partajați folderul „{{name}}”",
-  "shareWith": "Distribuiți cu",
-  "usersTab": "Utilizatori",
-  "rolesTab": "Roluri",
-  "shareSearchPlaceholder": "Căutați utilizatori sau roluri",
-  "shareNoMatches": "Nicio potrivire",
-  "shareWithCount": "Distribuie cu {{count}}",
-  "shareFolderHint": "Partajează fiecare fragment din acest folder. Fragmentele adăugate ulterior nu sunt partajate automat.",
-  "shareFolderSummary": "Fragmente {{count}} partajate în acest folder",
-  "grantedBy": "Acordat de",
-  "expired": "Expirat",
-  "variablesDialogTitle": "Executați „{{name}}”",
-  "variablesDialogDescription": "Completați valorile necesare acestui fragment de cod înainte de a-l rula.",
-  "variablesPreviewLabel": "Previzualizare",
-  "variablesConfirmButton": "Aleargă",
-  "keybindings": {
-    "runSnippet": "Execută fragmentul existent",
-    "snippetLabel": "Fragment",
-    "selectSnippet": "Selectați un fragment",
-    "snippetMissing": "fragmentul nu a fost găsit",
-    "snippetRequired": "Selectați un fragment"
-  },
-  "paletteHintRun": "Execută în fila activă a terminalului",
-  "host": {
-    "startupTitle": "Fragment de pornire",
-    "quickActionsTitle": "Acțiuni rapide",
-    "quickActionsDescription": "Acțiunile rapide apar sub formă de butoane în bara de instrumente Host Metrics pentru executarea comenzilor cu un singur clic.",
-    "noQuickActions": "Nicio acțiune rapidă încă.",
-    "buttonLabel": "Etichetă buton",
-    "selectSnippet": "Selectați fragmentul...",
-    "addQuickAction": "Adăugați o acțiune",
-    "tabTitle": "Fragmente",
-    "startupDescription": "Rulează în terminal de fiecare dată când se conectează la această gazdă. Variabilele precum $HOST sunt completate; un fragment care solicită intrări este omis.",
-    "none": "Nici unul",
-    "removeQuickAction": "Eliminați acțiunea rapidă"
-  },
-  "quickActions": {
-    "running": "Se execută {{name}}...",
-    "succeeded": "{{name}} finalizat cu succes",
-    "failed": "{{name}} a eșuat",
-    "error": "Executarea {{name}} a eșuat"
-  },
-  "paletteHintPaste": "Lipiți în fila activă a terminalului",
-  "targetTerminals": "Rulare în",
-  "targetTerminalsHint": "opțional, altfel fila activă",
-  "selectAll": "Toate",
-  "selectNone": "Nici unul",
-  "plugin": {
-    "name": "Fragmente"
-  }
-}
diff --git a/plugins/snippets/locales/translated/ru_RU.json b/plugins/snippets/locales/translated/ru_RU.json
deleted file mode 100644
index da9066fe2..000000000
--- a/plugins/snippets/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Сниппеты"
-  },
-  "onboarding": {
-    "feature_snippets": "Сниппеты",
-    "feature_snippets_desc": "Сохраняйте часто выполняемые команды и отправляйте их на терминал одним щелчком мыши."
-  },
-  "permissions": {
-    "view": {
-      "title": "Просмотреть фрагменты",
-      "description": "Просматривайте свои собственные фрагменты текста, заметки и фрагменты текста, которыми поделились другие пользователи."
-    },
-    "create": {
-      "title": "Создавайте фрагменты текста",
-      "description": "Создавайте новые фрагменты текста, заметки и папки."
-    },
-    "edit": {
-      "title": "Редактировать фрагменты",
-      "description": "Переименуйте или измените существующие фрагменты кода и папки."
-    },
-    "delete": {
-      "title": "Удалить фрагменты",
-      "description": "Удалите фрагменты текста и папки."
-    },
-    "share": {
-      "title": "Делитесь фрагментами",
-      "description": "Делитесь фрагментами кода и папками с другими пользователями или ролями."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Сворачивать папки по умолчанию",
-      "description": "При открытии панели «Фрагменты» каждая папка с фрагментами кода должна быть свернута."
-    },
-    "showCommands": {
-      "label": "Показать команды",
-      "description": "Отобразите первую строку команды каждого фрагмента кода под его именем."
-    },
-    "confirmExecution": {
-      "label": "Перед запуском подтвердите.",
-      "description": "Перед запуском фрагмента команды в терминале необходимо запросить подтверждение."
-    }
-  },
-  "cancel": "Отмена",
-  "loading": "Загрузка...",
-  "searchPlaceholder": "Поиск сниппетов",
-  "newFolder": "Новая папка",
-  "newSnippet": "Новый фрагмент",
-  "noFolder": "Без папки",
-  "noSnippetsInFolder": "В этой папке нет сниппетов",
-  "noTerminalTabsOpen": "Вкладка терминала не открыта",
-  "run": "Запустить",
-  "pasteToTerminal": "Вставить в терминал",
-  "copySuccess": "Скопировано в буфер обмена",
-  "importExport": "Импорт / Экспорт",
-  "importFailed": "Не удалось импортировать сниппеты",
-  "nameLabel": "Название",
-  "namePlaceholder": "Имя сниппета",
-  "descriptionLabel": "Описание",
-  "descriptionPlaceholder": "Необязательное описание",
-  "folderLabel": "Папка",
-  "typeLabel": "Тип",
-  "typeCommand": "Команда",
-  "typeNote": "Примечание",
-  "commandLabel": "Команда",
-  "commandPlaceholder": "Команда для выполнения, например, systemctl status $HOST",
-  "noteLabel": "Примечание",
-  "notePlaceholder": "Текст для вставки в терминал",
-  "createSnippetTitle": "Создать фрагмент",
-  "createSnippetButton": "Создать фрагмент",
-  "createSuccess": "Создан фрагмент кода.",
-  "createFailed": "Не удалось создать сниппет",
-  "editSnippetTitle": "Редактировать фрагмент",
-  "saveSnippetButton": "Сохранить фрагмент",
-  "updateSuccess": "Фрагмент обновлен",
-  "updateFailed": "Не удалось обновить сниппет",
-  "deleteFailed": "Не удалось удалить сниппет",
-  "createFolderTitle": "Создать папку",
-  "createFolderButton": "Создать папку",
-  "folderCreateSuccess": "Создана папка",
-  "folderCreateFailed": "Не удалось создать папку",
-  "editFolderTitle": "Редактировать папку",
-  "saveFolderButton": "Сохранить папку",
-  "folderEditSuccess": "Папка обновлена",
-  "folderEditFailed": "Не удалось обновить папку",
-  "folderNameLabel": "Имя папки",
-  "folderNamePlaceholder": "Имя папки",
-  "folderIconLabel": "Значок",
-  "folderDeleteSuccess": "Папка удалена",
-  "folderDeleteFailed": "Не удалось удалить папку",
-  "confirmRunMessage": "Запустить \"{{name}}\"?",
-  "confirmRunButton": "Запустить",
-  "runSuccess": "Выполнено \"{{name}}\" на {{count}} терминале(ах)",
-  "pasteSuccess": "Вставлено \"{{name}}\" в {{count}} терминал(ы)",
-  "admin": {
-    "tabTitle": "Сниппеты",
-    "count": "{{count}} сниппетов",
-    "add": "Добавить сниппет",
-    "namePlaceholder": "Имя сниппета",
-    "contentPlaceholder": "Содержимое команды",
-    "folderPlaceholder": "Папка (необязательно)",
-    "empty": "У этого пользователя нет сниппетов",
-    "deleteConfirm": "Удалить сниппет \"{{name}}\", принадлежащий {{username}}?",
-    "deleted": "Сниппет удалён",
-    "deleteFailed": "Не удалось удалить сниппет",
-    "requiredFields": "Имя и содержимое сниппета обязательны",
-    "saved": "Сниппет сохранён",
-    "saveFailed": "Не удалось сохранить сниппет",
-    "saving": "Сохранение...",
-    "save": "Сохранить"
-  },
-  "backToSnippets": "Вернуться к фрагментам",
-  "settingsTitle": "Настройки фрагмента",
-  "settingsDisplayTitle": "Отображать",
-  "settingsBehaviorTitle": "Поведение",
-  "typeCommandHint": "Запускается в активном терминале.",
-  "typeNoteHint": "Вставляется в активный терминал без запуска.",
-  "variablesHint": "Переменные: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Label}",
-  "doubleClickToRun": "Двойной щелчок для запуска",
-  "sharedBadge": "Общий",
-  "copyToClipboard": "Скопировать в буфер обмена",
-  "copyFailed": "Не удалось скопировать в буфер обмена",
-  "moreOptions": "Больше вариантов",
-  "moreActions": "Дополнительные действия",
-  "moveToFolder": "Переместить в папку",
-  "deleteSnippet": "Удалить фрагмент",
-  "deleteSnippetConfirm": "Удалить фрагмент \"{{name}}\"?",
-  "deleteSuccess": "Сниппет удалён",
-  "delete": "Удалить",
-  "folderActions": "Действия с папками",
-  "addSnippetHere": "Новый фрагмент здесь",
-  "deleteFolder": "Удалить папку",
-  "deleteFolderConfirm": "Удалить папку \"{{name}}\"? Ее фрагменты перемещаются за пределы папки.",
-  "createFolderDescription": "Сгруппируйте связанные фрагменты текста вместе.",
-  "editFolderDescription": "Измените название, цвет или значок этой папки.",
-  "folderColorLabel": "Цвет",
-  "loadFailed": "Не удалось загрузить фрагменты.",
-  "importSkipExisting": "Импорт (пропустить существующие)",
-  "importOverwrite": "Импорт (замена существующего)",
-  "importInvalidFile": "Этот файл не является допустимым экспортом фрагментов кода.",
-  "importSuccess": "Импортировано {{imported}}, обновлено {{updated}}, пропущено {{skipped}}",
-  "exportSnippets": "Экспорт фрагментов",
-  "exportSuccess": "Экспорт фрагментов",
-  "exportFailed": "Не удалось экспортировать сниппеты",
-  "expandAll": "Развернуть все папки",
-  "collapseAll": "Свернуть все папки",
-  "docsLink": "Документация",
-  "clearSearch": "Очистить поиск",
-  "noSearchResults": "Поисковые запросы не дали результатов.",
-  "emptyTitle": "Пока нет фрагментов.",
-  "emptyDescription": "Сохраняйте часто используемые команды, а затем запускайте их в терминале одним щелчком мыши.",
-  "shareSnippet": "Поделиться фрагментом",
-  "shareFolder": "Общая папка",
-  "shareExpiry": "Истекает",
-  "shareExpiryOptions": {
-    "h0": "Никогда",
-    "h1": "Через 1 час",
-    "h24": "За 1 день",
-    "h168": "Через 7 дней",
-    "h720": "Через 30 дней"
-  },
-  "shareButton": "Поделиться",
-  "shareSuccess": "Поделились с {{count}}",
-  "shareFailed": "Не удалось поделиться",
-  "shareLoadFailed": "Не удалось загрузить данные о распределении нагрузки.",
-  "currentAccess": "Текущий доступ",
-  "notSharedYet": "Пока никому не сообщалось",
-  "revokeAccess": "Отозвать",
-  "revokeSuccess": "Доступ отозван",
-  "revokeFailed": "Не удалось отозвать доступ",
-  "close": "Закрыть",
-  "targetHostsLabel": "Целевые хосты",
-  "targetHostsHint": "Выберите хосты, на которых будет выполняться эта команда напрямую, без открытого терминала. Оставьте поле пустым, чтобы выполнить команду в активном терминале.",
-  "clearTargetHosts": "Очистить",
-  "noHostsAvailable": "Нет доступных хостов",
-  "searchHosts": "Поиск хостов",
-  "runOnTargets": "Запуск на целевых хостах",
-  "executionResultTitle": "Результаты поиска по запросу \"{{name}}\"",
-  "executionResultDescription": "Вывод с каждого целевого хоста.",
-  "executionSuccess": "Успех",
-  "executionFailed": "Ошибка",
-  "directRunSuccess": "Запущен \"{{name}}\" на {{count}} хосте(ах)",
-  "directRunPartialFail": "\"{{name}}\" не удалось на некоторых хостах",
-  "reorderFailed": "Не удалось изменить порядок фрагментов.",
-  "dropToRemoveFromFolder": "Перетащите курсор сюда, чтобы выйти из папки.",
-  "shareSnippetTitle": "Поделиться \"{{name}}\"",
-  "shareFolderTitle": "Общая папка \"{{name}}\"",
-  "shareWith": "Поделиться с",
-  "usersTab": "Пользователи",
-  "rolesTab": "Роли",
-  "shareSearchPlaceholder": "Поиск пользователей или ролей",
-  "shareNoMatches": "Совпадений нет",
-  "shareWithCount": "Поделитесь с {{count}}",
-  "shareFolderHint": "Предоставляет доступ ко всем фрагментам кода в этой папке. Фрагменты, добавленные позже, не передаются автоматически.",
-  "shareFolderSummary": "В этой папке находятся общие фрагменты кода {{count}}.",
-  "grantedBy": "Кем предоставлен",
-  "expired": "Истек",
-  "variablesDialogTitle": "Запустить \"{{name}}\"",
-  "variablesDialogDescription": "Перед запуском заполните необходимые для этого фрагмента значения.",
-  "variablesPreviewLabel": "Предпросмотр",
-  "variablesConfirmButton": "Запустить",
-  "keybindings": {
-    "runSnippet": "Запустить существующий фрагмент",
-    "snippetLabel": "Фрагмент",
-    "selectSnippet": "Выберите фрагмент",
-    "snippetMissing": "фрагмент не найден",
-    "snippetRequired": "Выберите фрагмент"
-  },
-  "paletteHintRun": "Запустите в активной вкладке терминала.",
-  "host": {
-    "startupTitle": "Фрагмент запуска",
-    "quickActionsTitle": "Быстрые действия",
-    "quickActionsDescription": "Быстрые действия отображаются в виде кнопок на панели инструментов метрик хоста для выполнения команд в один клик.",
-    "noQuickActions": "Пока нет быстрых действий.",
-    "buttonLabel": "Надпись кнопки",
-    "selectSnippet": "Выбрать сниппет...",
-    "addQuickAction": "Добавить действие",
-    "tabTitle": "Сниппеты",
-    "startupDescription": "Программа запускается в терминале каждый раз при подключении к этому хосту. Переменные типа $HOST заполняются; фрагмент кода, запрашивающий ввод, пропускается.",
-    "none": "Ни одного",
-    "removeQuickAction": "Удалить быстрое действие"
-  },
-  "quickActions": {
-    "running": "Выполняется {{name}}...",
-    "succeeded": "{{name}} успешно завершено",
-    "failed": "{{name}} не удалось",
-    "error": "Не удалось выполнить {{name}}"
-  },
-  "paletteHintPaste": "Вставьте текст во вкладку активного терминала.",
-  "targetTerminals": "Забег",
-  "targetTerminalsHint": "необязателен, в противном случае активная вкладка.",
-  "selectAll": "Все",
-  "selectNone": "Ни одного",
-  "plugin": {
-    "name": "Сниппеты"
-  }
-}
diff --git a/plugins/snippets/locales/translated/sr_SP.json b/plugins/snippets/locales/translated/sr_SP.json
deleted file mode 100644
index 5d104577f..000000000
--- a/plugins/snippets/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Исечци"
-  },
-  "onboarding": {
-    "feature_snippets": "Исечци",
-    "feature_snippets_desc": "Сачувајте команде које често покрећете и пошаљите их у терминал једним кликом."
-  },
-  "permissions": {
-    "view": {
-      "title": "Погледајте фрагменте",
-      "description": "Погледајте своје сопствене фрагменте, белешке и дељене фрагменте."
-    },
-    "create": {
-      "title": "Направите фрагменте",
-      "description": "Креирајте нове исечке, белешке и фасцикле."
-    },
-    "edit": {
-      "title": "Уреди фрагменте",
-      "description": "Преименујте или промените постојеће фрагменте и фасцикле."
-    },
-    "delete": {
-      "title": "Обриши фрагменте",
-      "description": "Обришите фрагменте и фасцикле."
-    },
-    "share": {
-      "title": "Делите фрагменте",
-      "description": "Делите фрагменте и фасцикле са другим корисницима или улогама."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Сажми фасцикле подразумевано",
-      "description": "Покрените сваку фасциклу исечака сакупљену када отворите панел Исечци."
-    },
-    "showCommands": {
-      "label": "Прикажи команде",
-      "description": "Прикажи први ред команде сваког фрагмента испод његовог имена."
-    },
-    "confirmExecution": {
-      "label": "Потврдите пре покретања",
-      "description": "Питај пре него што се фрагмент команде покрене у терминалу."
-    }
-  },
-  "cancel": "Откажи",
-  "loading": "Учитавање...",
-  "searchPlaceholder": "Претрага исечака",
-  "newFolder": "Нова фасцикла",
-  "newSnippet": "Нови исечак",
-  "noFolder": "Нема фасцикле",
-  "noSnippetsInFolder": "Нема фрагмената у овој фасцикли",
-  "noTerminalTabsOpen": "Ниједна картица терминала није отворена",
-  "run": "Трчи",
-  "pasteToTerminal": "Налепи у терминал",
-  "copySuccess": "Копирано у међуспремник",
-  "importExport": "Увоз / Извоз",
-  "importFailed": "Увоз фрагмената није успео",
-  "nameLabel": "Име",
-  "namePlaceholder": "Назив исечка",
-  "descriptionLabel": "Опис",
-  "descriptionPlaceholder": "Опциони опис",
-  "folderLabel": "Фасцикла",
-  "typeLabel": "Тип",
-  "typeCommand": "Команда",
-  "typeNote": "Напомена",
-  "commandLabel": "Команда",
-  "commandPlaceholder": "Команда за покретање, нпр. systemctl status $HOST",
-  "noteLabel": "Напомена",
-  "notePlaceholder": "Текст који треба налепити у терминал",
-  "createSnippetTitle": "Направи исечак",
-  "createSnippetButton": "Направи исечак",
-  "createSuccess": "Исечак је направљен",
-  "createFailed": "Није успело креирање фрагмента",
-  "editSnippetTitle": "Измени исечак",
-  "saveSnippetButton": "Сачувај исечак",
-  "updateSuccess": "Исечак је ажуриран",
-  "updateFailed": "Ажурирање исечка није успело",
-  "deleteFailed": "Брисање исечка није успело",
-  "createFolderTitle": "Направи фасциклу",
-  "createFolderButton": "Направи фасциклу",
-  "folderCreateSuccess": "Фасцикла је направљена",
-  "folderCreateFailed": "Није успело креирање фасцикле",
-  "editFolderTitle": "Уреди фасциклу",
-  "saveFolderButton": "Сачувај фасциклу",
-  "folderEditSuccess": "Фолдер је ажуриран",
-  "folderEditFailed": "Ажурирање фасцикле није успело",
-  "folderNameLabel": "Назив фасцикле",
-  "folderNamePlaceholder": "Назив фасцикле",
-  "folderIconLabel": "Икона",
-  "folderDeleteSuccess": "Фолдер је обрисан",
-  "folderDeleteFailed": "Брисање фасцикле није успело",
-  "confirmRunMessage": "Покрени „{{name}}“?",
-  "confirmRunButton": "Трчи",
-  "runSuccess": "Покренуто је „{{name}}“ на {{count}} терминалу(има)",
-  "pasteSuccess": "Налепљено је „{{name}}“ у {{count}} терминал(е)",
-  "admin": {
-    "tabTitle": "Исечци",
-    "count": "{{count}} исечци",
-    "add": "Додај исечак",
-    "namePlaceholder": "Назив исечка",
-    "contentPlaceholder": "Садржај команде",
-    "folderPlaceholder": "Фасцикла (опционо)",
-    "empty": "Овај корисник нема исечке кода",
-    "deleteConfirm": "Да ли желите да обришете исечак „{{name}}“ који припада {{username}}?",
-    "deleted": "Исечак је обрисан",
-    "deleteFailed": "Брисање исечка није успело",
-    "requiredFields": "Назив и садржај фрагмента су обавезни",
-    "saved": "Исечак је сачуван",
-    "saveFailed": "Чување фрагмента није успело",
-    "saving": "Чување...",
-    "save": "Сачувај"
-  },
-  "backToSnippets": "Назад на фрагменте",
-  "settingsTitle": "Подешавања исечка",
-  "settingsDisplayTitle": "Приказ",
-  "settingsBehaviorTitle": "Понашање",
-  "typeCommandHint": "Ради у активном терминалу.",
-  "typeNoteHint": "Лепи у активни терминал без покретања.",
-  "variablesHint": "Променљиве: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Ознака}",
-  "doubleClickToRun": "Двапут кликните да бисте покренули",
-  "sharedBadge": "Дељено",
-  "copyToClipboard": "Копирај у међуспремник",
-  "copyFailed": "Копирање у међуспремник није успело",
-  "moreOptions": "Више опција",
-  "moreActions": "Више акција",
-  "moveToFolder": "Премести у фасциклу",
-  "deleteSnippet": "Обриши исечак",
-  "deleteSnippetConfirm": "Обришите исечак „{{name}}“?",
-  "deleteSuccess": "Исечак је обрисан",
-  "delete": "Обриши",
-  "folderActions": "Радње са фасциклама",
-  "addSnippetHere": "Нови исечак овде",
-  "deleteFolder": "Обриши фасциклу",
-  "deleteFolderConfirm": "Обришите фасциклу „{{name}}“? Њени фрагменти се премештају ван фасцикле.",
-  "createFolderDescription": "Групишите повезане фрагменте заједно.",
-  "editFolderDescription": "Промените име, боју или икону ове фасцикле.",
-  "folderColorLabel": "Боја",
-  "loadFailed": "Учитавање фрагмената није успело",
-  "importSkipExisting": "Увези (прескочи постојеће)",
-  "importOverwrite": "Увези (пребриши постојеће)",
-  "importInvalidFile": "Та датотека није важећи извоз фрагмената",
-  "importSuccess": "Увезено {{imported}}, ажурирано {{updated}}, прескочено {{skipped}}",
-  "exportSnippets": "Извоз исечака",
-  "exportSuccess": "Извезени фрагменти",
-  "exportFailed": "Извоз фрагмената није успео",
-  "expandAll": "Прошири све фасцикле",
-  "collapseAll": "Скупи све фасцикле",
-  "docsLink": "Документација",
-  "clearSearch": "Обриши претрагу",
-  "noSearchResults": "Ниједан фрагмент не одговара вашој претрази",
-  "emptyTitle": "Још нема фрагмената",
-  "emptyDescription": "Сачувајте команде које често покрећете, а затим их покрените у терминалу једним кликом.",
-  "shareSnippet": "Дели исечак",
-  "shareFolder": "Дели фасциклу",
-  "shareExpiry": "Истиче",
-  "shareExpiryOptions": {
-    "h0": "Никад",
-    "h1": "За 1 сат",
-    "h24": "За 1 дан",
-    "h168": "За 7 дана",
-    "h720": "За 30 дана"
-  },
-  "shareButton": "Дели",
-  "shareSuccess": "Дељено са {{count}}",
-  "shareFailed": "Дељење није успело",
-  "shareLoadFailed": "Учитавање детаља о дељењу није успело",
-  "currentAccess": "Тренутни приступ",
-  "notSharedYet": "Још није дељено ни са ким",
-  "revokeAccess": "Поништи",
-  "revokeSuccess": "Приступ је опозван",
-  "revokeFailed": "Опозивање приступа није успело",
-  "close": "Затвори",
-  "targetHostsLabel": "Циљни хостови",
-  "targetHostsHint": "Изаберите хостове на којима ћете директно покренути ову команду, без отвореног терминала. Оставите празно да бисте је покренули у активном терминалу.",
-  "clearTargetHosts": "Јасно",
-  "noHostsAvailable": "Нема доступних хостова",
-  "searchHosts": "Претрага хостова",
-  "runOnTargets": "Покрени на циљним хостовима",
-  "executionResultTitle": "Резултати за „{{name}}“",
-  "executionResultDescription": "Излаз са сваког циљног хоста.",
-  "executionSuccess": "Успех",
-  "executionFailed": "Неуспешно",
-  "directRunSuccess": "Покренуто „{{name}}“ на {{count}} хосту(има)",
-  "directRunPartialFail": "„{{name}}“ није успело на неким хостовима",
-  "reorderFailed": "Промена редоследа фрагмената није успела",
-  "dropToRemoveFromFolder": "Отпустите овде да бисте изашли из фасцикле",
-  "shareSnippetTitle": "Подели „{{name}}“",
-  "shareFolderTitle": "Дели фасциклу „{{name}}“",
-  "shareWith": "Подели са",
-  "usersTab": "Корисници",
-  "rolesTab": "Улоге",
-  "shareSearchPlaceholder": "Претражите кориснике или улоге",
-  "shareNoMatches": "Нема подударања",
-  "shareWithCount": "Подели са {{count}}",
-  "shareFolderHint": "Дели сваки исечак у овој фасцикли. Исечци додати касније се не деле аутоматски.",
-  "shareFolderSummary": "Дељено {{count}} фрагмената у овој фасцикли",
-  "grantedBy": "Додељено од стране",
-  "expired": "Истекло",
-  "variablesDialogTitle": "Покрени „{{name}}“",
-  "variablesDialogDescription": "Унесите вредности које су потребне овом фрагменту пре него што га покренете.",
-  "variablesPreviewLabel": "Преглед",
-  "variablesConfirmButton": "Трчи",
-  "keybindings": {
-    "runSnippet": "Покрени постојећи исечак кода",
-    "snippetLabel": "Исечак",
-    "selectSnippet": "Изаберите исечак",
-    "snippetMissing": "фрагмент није пронађен",
-    "snippetRequired": "Изаберите исечак"
-  },
-  "paletteHintRun": "Покрени у активној картици терминала",
-  "host": {
-    "startupTitle": "Исечак за покретање",
-    "quickActionsTitle": "Брзе акције",
-    "quickActionsDescription": "Брзе акције се појављују као дугмад у траци са алаткама Host Metrics за извршавање команди једним кликом.",
-    "noQuickActions": "Још нема брзих акција.",
-    "buttonLabel": "Ознака дугмета",
-    "selectSnippet": "Изаберите исечак...",
-    "addQuickAction": "Додај акцију",
-    "tabTitle": "Исечци",
-    "startupDescription": "Покреће се у терминалу сваки пут када се повеже са овим хостом. Променљиве попут $HOST су попуњене; исечак који тражи уносе је прескочен.",
-    "none": "Ниједан",
-    "removeQuickAction": "Уклони брзу акцију"
-  },
-  "quickActions": {
-    "running": "Извршава се {{name}}...",
-    "succeeded": "{{name}} успешно завршено",
-    "failed": "{{name}} није успело",
-    "error": "Није успело извршавање {{name}}"
-  },
-  "paletteHintPaste": "Налепи у активну картицу терминала",
-  "targetTerminals": "Утрчавање",
-  "targetTerminalsHint": "опционо, иначе активна картица",
-  "selectAll": "Сви",
-  "selectNone": "Ниједан",
-  "plugin": {
-    "name": "Исечци"
-  }
-}
diff --git a/plugins/snippets/locales/translated/sv_SE.json b/plugins/snippets/locales/translated/sv_SE.json
deleted file mode 100644
index 5d14015ce..000000000
--- a/plugins/snippets/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Snuttar"
-  },
-  "onboarding": {
-    "feature_snippets": "Snuttar",
-    "feature_snippets_desc": "Spara kommandon du kör ofta och skicka dem till en terminal med ett enda klick."
-  },
-  "permissions": {
-    "view": {
-      "title": "Visa utdrag",
-      "description": "Se dina egna utdrag, anteckningar och delade utdrag."
-    },
-    "create": {
-      "title": "Skapa utdrag",
-      "description": "Skapa nya utdrag, anteckningar och mappar."
-    },
-    "edit": {
-      "title": "Redigera utdrag",
-      "description": "Byt namn på eller ändra befintliga utdrag och mappar."
-    },
-    "delete": {
-      "title": "Ta bort utdrag",
-      "description": "Ta bort utdrag och mappar."
-    },
-    "share": {
-      "title": "Dela utdrag",
-      "description": "Dela utdrag och mappar med andra användare eller roller."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Komprimera mappar som standard",
-      "description": "Börja varje kodavsnittsmapp hopfälld när du öppnar kodavsnittspanelen."
-    },
-    "showCommands": {
-      "label": "Visa kommandon",
-      "description": "Visa den första raden i varje kodavsnitts kommando under dess namn."
-    },
-    "confirmExecution": {
-      "label": "Bekräfta innan du kör",
-      "description": "Fråga innan ett kommandosnutt körs i en terminal."
-    }
-  },
-  "cancel": "Avboka",
-  "loading": "Belastning...",
-  "searchPlaceholder": "Sök utdrag",
-  "newFolder": "Ny mapp",
-  "newSnippet": "Nytt utdrag",
-  "noFolder": "Ingen mapp",
-  "noSnippetsInFolder": "Inga utdrag i den här mappen",
-  "noTerminalTabsOpen": "Ingen terminalflik är öppen",
-  "run": "Sikt",
-  "pasteToTerminal": "Klistra in i terminalen",
-  "copySuccess": "Kopierad till urklipp",
-  "importExport": "Importera / Exportera",
-  "importFailed": "Misslyckades med att importera utdrag",
-  "nameLabel": "Namn",
-  "namePlaceholder": "Utdragsnamn",
-  "descriptionLabel": "Beskrivning",
-  "descriptionPlaceholder": "Valfri beskrivning",
-  "folderLabel": "Mapp",
-  "typeLabel": "Typ",
-  "typeCommand": "Kommando",
-  "typeNote": "Notera",
-  "commandLabel": "Kommando",
-  "commandPlaceholder": "Kommando att köra, t.ex. systemctl status $HOST",
-  "noteLabel": "Notera",
-  "notePlaceholder": "Text att klistra in i terminalen",
-  "createSnippetTitle": "Skapa utdrag",
-  "createSnippetButton": "Skapa utdrag",
-  "createSuccess": "Utdrag skapat",
-  "createFailed": "Misslyckades med att skapa kodavsnittet",
-  "editSnippetTitle": "Redigera utdrag",
-  "saveSnippetButton": "Spara utdrag",
-  "updateSuccess": "Utdrag uppdaterat",
-  "updateFailed": "Misslyckades med att uppdatera utdraget",
-  "deleteFailed": "Misslyckades med att ta bort utdraget",
-  "createFolderTitle": "Skapa mapp",
-  "createFolderButton": "Skapa mapp",
-  "folderCreateSuccess": "Mapp skapad",
-  "folderCreateFailed": "Misslyckades med att skapa mappen",
-  "editFolderTitle": "Redigera mapp",
-  "saveFolderButton": "Spara mapp",
-  "folderEditSuccess": "Mappen uppdaterad",
-  "folderEditFailed": "Misslyckades med att uppdatera mappen",
-  "folderNameLabel": "Mappnamn",
-  "folderNamePlaceholder": "Mappnamn",
-  "folderIconLabel": "Ikon",
-  "folderDeleteSuccess": "Mappen raderad",
-  "folderDeleteFailed": "Misslyckades med att ta bort mappen",
-  "confirmRunMessage": "Kör \"{{name}}\"?",
-  "confirmRunButton": "Sikt",
-  "runSuccess": "Körde \"{{name}}\" på {{count}} terminal(er)",
-  "pasteSuccess": "Klistrade in \"{{name}}\" i {{count}} terminal(er)",
-  "admin": {
-    "tabTitle": "Snuttar",
-    "count": "{{count}} utdrag",
-    "add": "Lägg till utdrag",
-    "namePlaceholder": "Utdragsnamn",
-    "contentPlaceholder": "Kommandoinnehåll",
-    "folderPlaceholder": "Mapp (valfritt)",
-    "empty": "Den här användaren har inga utdrag",
-    "deleteConfirm": "Ta bort utdraget \"{{name}}\" som tillhör {{username}}?",
-    "deleted": "Utdraget raderat",
-    "deleteFailed": "Misslyckades med att ta bort utdraget",
-    "requiredFields": "Namn och innehåll på utdrag krävs",
-    "saved": "Utdrag sparat",
-    "saveFailed": "Kunde inte spara utdraget",
-    "saving": "Sparande...",
-    "save": "Spara"
-  },
-  "backToSnippets": "Tillbaka till utdrag",
-  "settingsTitle": "Inställningar för utdrag",
-  "settingsDisplayTitle": "Visa",
-  "settingsBehaviorTitle": "Beteende",
-  "typeCommandHint": "Körs i den aktiva terminalen.",
-  "typeNoteHint": "Klistrar in i den aktiva terminalen utan att köra.",
-  "variablesHint": "Variabler: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Etikett}",
-  "doubleClickToRun": "Dubbelklicka för att köra",
-  "sharedBadge": "Delad",
-  "copyToClipboard": "Kopiera till urklipp",
-  "copyFailed": "Misslyckades med att kopiera till urklipp",
-  "moreOptions": "Fler alternativ",
-  "moreActions": "Fler åtgärder",
-  "moveToFolder": "Flytta till mapp",
-  "deleteSnippet": "Ta bort utdrag",
-  "deleteSnippetConfirm": "Ta bort utdraget \"{{name}}\"?",
-  "deleteSuccess": "Utdraget raderat",
-  "delete": "Radera",
-  "folderActions": "Mappåtgärder",
-  "addSnippetHere": "Nytt utdrag här",
-  "deleteFolder": "Ta bort mapp",
-  "deleteFolderConfirm": "Ta bort mappen \"{{name}}\"? Dess utdrag flyttas ut ur mappen.",
-  "createFolderDescription": "Gruppera relaterade utdrag tillsammans.",
-  "editFolderDescription": "Ändra den här mappens namn, färg eller ikon.",
-  "folderColorLabel": "Färg",
-  "loadFailed": "Misslyckades med att ladda utdrag",
-  "importSkipExisting": "Importera (hoppa över befintliga)",
-  "importOverwrite": "Importera (skriv över befintlig)",
-  "importInvalidFile": "Den filen är inte en giltig exportkod för snippets",
-  "importSuccess": "Importerad {{imported}}, uppdaterad {{updated}}, hoppad över {{skipped}}",
-  "exportSnippets": "Exportera utdrag",
-  "exportSuccess": "Exporterade utdrag",
-  "exportFailed": "Misslyckades med att exportera utdrag",
-  "expandAll": "Expandera alla mappar",
-  "collapseAll": "Komprimera alla mappar",
-  "docsLink": "Dokumentation",
-  "clearSearch": "Rensa sökningen",
-  "noSearchResults": "Inga utdrag matchar din sökning",
-  "emptyTitle": "Inga utdrag ännu",
-  "emptyDescription": "Spara kommandon du kör ofta och kör dem sedan i en terminal med ett klick.",
-  "shareSnippet": "Dela utdrag",
-  "shareFolder": "Dela mapp",
-  "shareExpiry": "Utgår",
-  "shareExpiryOptions": {
-    "h0": "Aldrig",
-    "h1": "Om 1 timme",
-    "h24": "Om 1 dag",
-    "h168": "Om 7 dagar",
-    "h720": "Om 30 dagar"
-  },
-  "shareButton": "Dela",
-  "shareSuccess": "Delad med {{count}}",
-  "shareFailed": "Misslyckades med att dela",
-  "shareLoadFailed": "Det gick inte att läsa in delningsinformationen",
-  "currentAccess": "Nuvarande åtkomst",
-  "notSharedYet": "Inte delat med någon ännu",
-  "revokeAccess": "Återkalla",
-  "revokeSuccess": "Åtkomst återkallad",
-  "revokeFailed": "Misslyckades med att återkalla åtkomst",
-  "close": "Nära",
-  "targetHostsLabel": "Målvärdar",
-  "targetHostsHint": "Välj värdar att köra det här kommandot direkt på, utan att en terminal är öppen. Lämna tomt för att köra det i den aktiva terminalen.",
-  "clearTargetHosts": "Rensa",
-  "noHostsAvailable": "Inga värdar tillgängliga",
-  "searchHosts": "Sök värdar",
-  "runOnTargets": "Kör på målvärdar",
-  "executionResultTitle": "Resultat för \"{{name}}\"",
-  "executionResultDescription": "Utdata från varje målvärd.",
-  "executionSuccess": "Framgång",
-  "executionFailed": "Misslyckades",
-  "directRunSuccess": "Körde \"{{name}}\" på {{count}} värd(ar)",
-  "directRunPartialFail": "\"{{name}}\" misslyckades på vissa värdar",
-  "reorderFailed": "Misslyckades med att ändra ordningen på utdragen",
-  "dropToRemoveFromFolder": "Släpp här för att flytta ut ur mappen",
-  "shareSnippetTitle": "Dela \"{{name}}\"",
-  "shareFolderTitle": "Dela mappen \"{{name}}\"",
-  "shareWith": "Dela med",
-  "usersTab": "Användare",
-  "rolesTab": "Roller",
-  "shareSearchPlaceholder": "Sök användare eller roller",
-  "shareNoMatches": "Inga träffar",
-  "shareWithCount": "Dela med {{count}}",
-  "shareFolderHint": "Delar alla utdrag i den här mappen. Utdrag som läggs till senare delas inte automatiskt.",
-  "shareFolderSummary": "Delade {{count}} kodavsnitt i den här mappen",
-  "grantedBy": "Beviljad av",
-  "expired": "Utgången",
-  "variablesDialogTitle": "Kör \"{{name}}\"",
-  "variablesDialogDescription": "Fyll i de värden som detta kodavsnitt behöver innan du kör det.",
-  "variablesPreviewLabel": "Förhandsvisning",
-  "variablesConfirmButton": "Sikt",
-  "keybindings": {
-    "runSnippet": "Kör befintligt kodavsnitt",
-    "snippetLabel": "Utdrag",
-    "selectSnippet": "Välj ett utdrag",
-    "snippetMissing": "utdraget hittades inte",
-    "snippetRequired": "Välj ett utdrag"
-  },
-  "paletteHintRun": "Kör i den aktiva terminalfliken",
-  "host": {
-    "startupTitle": "Startkodavsnitt",
-    "quickActionsTitle": "Snabbåtgärder",
-    "quickActionsDescription": "Snabbåtgärder visas som knappar i verktygsfältet Host Metrics för att köra kommandon med ett klick.",
-    "noQuickActions": "Inga snabba åtgärder ännu.",
-    "buttonLabel": "Knappetikett",
-    "selectSnippet": "Välj utdrag...",
-    "addQuickAction": "Lägg till åtgärd",
-    "tabTitle": "Snuttar",
-    "startupDescription": "Körs i terminalen varje gång den ansluter till den här värden. Variabler som $HOST fylls i; ett kodavsnitt som ber om indata hoppas över.",
-    "none": "Ingen",
-    "removeQuickAction": "Ta bort snabbåtgärden"
-  },
-  "quickActions": {
-    "running": "Kör {{name}}...",
-    "succeeded": "{{name}} slutfört",
-    "failed": "{{name}} misslyckades",
-    "error": "Misslyckades med att köra {{name}}"
-  },
-  "paletteHintPaste": "Klistra in i den aktiva terminalfliken",
-  "targetTerminals": "Spring in",
-  "targetTerminalsHint": "valfritt, annars den aktiva fliken",
-  "selectAll": "Alla",
-  "selectNone": "Ingen",
-  "plugin": {
-    "name": "Snuttar"
-  }
-}
diff --git a/plugins/snippets/locales/translated/th_TH.json b/plugins/snippets/locales/translated/th_TH.json
deleted file mode 100644
index fadc37647..000000000
--- a/plugins/snippets/locales/translated/th_TH.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "เศษเสี้ยว"
-  },
-  "onboarding": {
-    "feature_snippets": "เศษเสี้ยว",
-    "feature_snippets_desc": "บันทึกคำสั่งที่คุณใช้งานบ่อยและส่งไปยังเทอร์มินัลได้ด้วยการคลิกเพียงครั้งเดียว"
-  },
-  "permissions": {
-    "view": {
-      "title": "ดูตัวอย่าง",
-      "description": "ดูข้อความย่อ บันทึก และข้อความย่อที่แชร์ของคุณเอง"
-    },
-    "create": {
-      "title": "สร้างโค้ดตัวอย่าง",
-      "description": "สร้างข้อความย่อ บันทึก และโฟลเดอร์ใหม่"
-    },
-    "edit": {
-      "title": "แก้ไขข้อความย่อ",
-      "description": "เปลี่ยนชื่อหรือแก้ไขโค้ดตัวอย่างและโฟลเดอร์ที่มีอยู่"
-    },
-    "delete": {
-      "title": "ลบส่วนย่อย",
-      "description": "ลบโค้ดตัวอย่างและโฟลเดอร์"
-    },
-    "share": {
-      "title": "แบ่งปันข้อความสั้นๆ",
-      "description": "แชร์โค้ดตัวอย่างและโฟลเดอร์กับผู้ใช้หรือบทบาทอื่นๆ"
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "ยุบโฟลเดอร์โดยค่าเริ่มต้น",
-      "description": "เมื่อเปิดแผง Snippets ให้เริ่มโดยที่โฟลเดอร์โค้ดตัวอย่างแต่ละโฟลเดอร์ยังอยู่ในสถานะพับอยู่"
-    },
-    "showCommands": {
-      "label": "แสดงคำสั่ง",
-      "description": "แสดงบรรทัดแรกของคำสั่งแต่ละส่วนย่อยไว้ใต้ชื่อของคำสั่งนั้น"
-    },
-    "confirmExecution": {
-      "label": "ยืนยันก่อนดำเนินการ",
-      "description": "ถามก่อนเรียกใช้คำสั่งในเทอร์มินัล"
-    }
-  },
-  "cancel": "ยกเลิก",
-  "loading": "กำลังโหลด...",
-  "searchPlaceholder": "ตัวอย่างการค้นหา",
-  "newFolder": "โฟลเดอร์ใหม่",
-  "newSnippet": "โค้ดตัวอย่างใหม่",
-  "noFolder": "ไม่มีโฟลเดอร์",
-  "noSnippetsInFolder": "ไม่มีไฟล์ตัวอย่างในโฟลเดอร์นี้",
-  "noTerminalTabsOpen": "ไม่มีแท็บเทอร์มินัลเปิดอยู่",
-  "run": "วิ่ง",
-  "pasteToTerminal": "วางลงในเทอร์มินัล",
-  "copySuccess": "คัดลอกไปยังคลิปบอร์ดแล้ว",
-  "importExport": "นำเข้า/ส่งออก",
-  "importFailed": "ไม่สามารถนำเข้าส่วนย่อยได้",
-  "nameLabel": "ชื่อ",
-  "namePlaceholder": "ชื่อส่วนย่อย",
-  "descriptionLabel": "คำอธิบาย",
-  "descriptionPlaceholder": "คำอธิบายเพิ่มเติม (ไม่บังคับ)",
-  "folderLabel": "โฟลเดอร์",
-  "typeLabel": "พิมพ์",
-  "typeCommand": "สั่งการ",
-  "typeNote": "บันทึก",
-  "commandLabel": "สั่งการ",
-  "commandPlaceholder": "คำสั่งที่จะเรียกใช้ เช่น systemctl status $HOST",
-  "noteLabel": "บันทึก",
-  "notePlaceholder": "ข้อความที่จะวางลงในเทอร์มินัล",
-  "createSnippetTitle": "สร้างโค้ดตัวอย่าง",
-  "createSnippetButton": "สร้างโค้ดตัวอย่าง",
-  "createSuccess": "สร้างตัวอย่างโค้ดแล้ว",
-  "createFailed": "ไม่สามารถสร้างโค้ดตัวอย่างได้",
-  "editSnippetTitle": "แก้ไขส่วนย่อย",
-  "saveSnippetButton": "บันทึกส่วนย่อ",
-  "updateSuccess": "อัปเดตส่วนย่อยแล้ว",
-  "updateFailed": "ไม่สามารถอัปเดตโค้ดตัวอย่างได้",
-  "deleteFailed": "ไม่สามารถลบส่วนย่อยได้",
-  "createFolderTitle": "สร้างโฟลเดอร์",
-  "createFolderButton": "สร้างโฟลเดอร์",
-  "folderCreateSuccess": "สร้างโฟลเดอร์แล้ว",
-  "folderCreateFailed": "ไม่สามารถสร้างโฟลเดอร์ได้",
-  "editFolderTitle": "แก้ไขโฟลเดอร์",
-  "saveFolderButton": "บันทึกโฟลเดอร์",
-  "folderEditSuccess": "โฟลเดอร์ได้รับการอัปเดตแล้ว",
-  "folderEditFailed": "ไม่สามารถอัปเดตโฟลเดอร์ได้",
-  "folderNameLabel": "ชื่อโฟลเดอร์",
-  "folderNamePlaceholder": "ชื่อโฟลเดอร์",
-  "folderIconLabel": "ไอคอน",
-  "folderDeleteSuccess": "โฟลเดอร์ถูกลบแล้ว",
-  "folderDeleteFailed": "ไม่สามารถลบโฟลเดอร์ได้",
-  "confirmRunMessage": "เรียกใช้ \"{{name}}\"?",
-  "confirmRunButton": "วิ่ง",
-  "runSuccess": "รัน \"{{name}}\" บนเทอร์มินัล {{count}} เครื่อง",
-  "pasteSuccess": "วาง \"{{name}}\" ลงในเทอร์มินัล {{count}} แล้ว",
-  "admin": {
-    "tabTitle": "เศษเสี้ยว",
-    "count": "{{count}} ตัวอย่างข้อความ",
-    "add": "เพิ่มโค้ดตัวอย่าง",
-    "namePlaceholder": "ชื่อส่วนย่อย",
-    "contentPlaceholder": "เนื้อหาคำสั่ง",
-    "folderPlaceholder": "โฟลเดอร์ (ไม่จำเป็น)",
-    "empty": "ผู้ใช้รายนี้ไม่มีตัวอย่างโค้ด",
-    "deleteConfirm": "ลบส่วนย่อย \"{{name}}\" ที่เป็นของ {{username}} หรือไม่?",
-    "deleted": "ข้อความบางส่วนถูกลบแล้ว",
-    "deleteFailed": "ไม่สามารถลบส่วนย่อยได้",
-    "requiredFields": "จำเป็นต้องระบุชื่อและเนื้อหาของโค้ดตัวอย่าง",
-    "saved": "บันทึกส่วนย่อยแล้ว",
-    "saveFailed": "ไม่สามารถบันทึกส่วนย่อยได้",
-    "saving": "ประหยัด...",
-    "save": "บันทึก"
-  },
-  "backToSnippets": "กลับไปที่ส่วนย่อ",
-  "settingsTitle": "การตั้งค่าสนิปเป็ต",
-  "settingsDisplayTitle": "แสดง",
-  "settingsBehaviorTitle": "พฤติกรรม",
-  "typeCommandHint": "ทำงานในเทอร์มินัลที่ใช้งานอยู่",
-  "typeNoteHint": "วางข้อความลงในเทอร์มินัลที่ใช้งานอยู่โดยไม่ต้องเรียกใช้โปรแกรม",
-  "variablesHint": "ตัวแปร: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Label}",
-  "doubleClickToRun": "ดับเบิ้ลคลิกเพื่อเรียกใช้งาน",
-  "sharedBadge": "แชร์",
-  "copyToClipboard": "คัดลอกไปยังคลิปบอร์ด",
-  "copyFailed": "ไม่สามารถคัดลอกไปยังคลิปบอร์ดได้",
-  "moreOptions": "ตัวเลือกเพิ่มเติม",
-  "moreActions": "การดำเนินการเพิ่มเติม",
-  "moveToFolder": "ย้ายไปยังโฟลเดอร์",
-  "deleteSnippet": "ลบส่วนย่อย",
-  "deleteSnippetConfirm": "ลบโค้ดส่วนย่อย \"{{name}}\"?",
-  "deleteSuccess": "ข้อความบางส่วนถูกลบแล้ว",
-  "delete": "ลบ",
-  "folderActions": "การดำเนินการโฟลเดอร์",
-  "addSnippetHere": "ข้อความใหม่ตรงนี้",
-  "deleteFolder": "ลบโฟลเดอร์",
-  "deleteFolderConfirm": "ลบโฟลเดอร์ \"{{name}}\"? โค้ดตัวอย่างจะถูกย้ายออกจากโฟลเดอร์",
-  "createFolderDescription": "จัดกลุ่มข้อความที่เกี่ยวข้องเข้าด้วยกัน",
-  "editFolderDescription": "เปลี่ยนชื่อ สี หรือไอคอนของโฟลเดอร์นี้",
-  "folderColorLabel": "สี",
-  "loadFailed": "ไม่สามารถโหลดส่วนย่อยได้",
-  "importSkipExisting": "นำเข้า (ข้ามรายการที่มีอยู่)",
-  "importOverwrite": "นำเข้า (เขียนทับข้อมูลที่มีอยู่)",
-  "importInvalidFile": "ไฟล์นั้นไม่ใช่ไฟล์ส่งออกโค้ดตัวอย่างที่ถูกต้อง",
-  "importSuccess": "นำเข้า {{imported}}, อัปเดต {{updated}}, ข้าม {{skipped}}",
-  "exportSnippets": "ส่งออกส่วนย่อย",
-  "exportSuccess": "ส่งออกข้อมูลตัวอย่าง",
-  "exportFailed": "ไม่สามารถส่งออกส่วนย่อยได้",
-  "expandAll": "ขยายโฟลเดอร์ทั้งหมด",
-  "collapseAll": "ยุบโฟลเดอร์ทั้งหมด",
-  "docsLink": "เอกสารประกอบ",
-  "clearSearch": "ล้างการค้นหา",
-  "noSearchResults": "ไม่มีตัวอย่างผลลัพธ์ใดตรงกับการค้นหาของคุณ",
-  "emptyTitle": "ยังไม่มีตัวอย่างโค้ด",
-  "emptyDescription": "บันทึกคำสั่งที่คุณใช้งานบ่อย แล้วเรียกใช้คำสั่งเหล่านั้นในเทอร์มินัลได้ด้วยการคลิกเพียงครั้งเดียว",
-  "shareSnippet": "แชร์ตัวอย่าง",
-  "shareFolder": "แชร์โฟลเดอร์",
-  "shareExpiry": "หมดอายุ",
-  "shareExpiryOptions": {
-    "h0": "ไม่เคย",
-    "h1": "ภายใน 1 ชั่วโมง",
-    "h24": "ภายใน 1 วัน",
-    "h168": "ภายใน 7 วัน",
-    "h720": "ภายใน 30 วัน"
-  },
-  "shareButton": "แบ่งปัน",
-  "shareSuccess": "แชร์กับ {{count}}",
-  "shareFailed": "ไม่สามารถแชร์ได้",
-  "shareLoadFailed": "ไม่สามารถโหลดรายละเอียดการแชร์ได้",
-  "currentAccess": "การเข้าถึงปัจจุบัน",
-  "notSharedYet": "ยังไม่ได้แชร์ให้ใครเลย",
-  "revokeAccess": "ถอน",
-  "revokeSuccess": "สิทธิ์การเข้าถึงถูกเพิกถอน",
-  "revokeFailed": "ไม่สามารถเพิกถอนสิทธิ์การเข้าถึงได้",
-  "close": "ปิด",
-  "targetHostsLabel": "เป้าหมายโฮสต์",
-  "targetHostsHint": "เลือกโฮสต์ที่จะรันคำสั่งนี้โดยตรง โดยไม่ต้องเปิดเทอร์มินัล หากต้องการรันในเทอร์มินัลที่ใช้งานอยู่ ให้เว้นว่างไว้",
-  "clearTargetHosts": "ชัดเจน",
-  "noHostsAvailable": "ไม่มีโฮสต์ให้บริการ",
-  "searchHosts": "ค้นหาโฮสต์",
-  "runOnTargets": "เรียกใช้งานบนโฮสต์เป้าหมาย",
-  "executionResultTitle": "ผลลัพธ์สำหรับ \"{{name}}\"",
-  "executionResultDescription": "ผลลัพธ์จากโฮสต์เป้าหมายแต่ละตัว",
-  "executionSuccess": "ความสำเร็จ",
-  "executionFailed": "ล้มเหลว",
-  "directRunSuccess": "Ran \"{{name}}\" บนโฮสต์ {{count}} เครื่อง",
-  "directRunPartialFail": "\"{{name}}\" ล้มเหลวบนโฮสต์บางตัว",
-  "reorderFailed": "ไม่สามารถเรียงลำดับส่วนย่อยใหม่ได้",
-  "dropToRemoveFromFolder": "ลากตรงนี้เพื่อย้ายออกจากโฟลเดอร์",
-  "shareSnippetTitle": "แชร์ \"{{name}}\"",
-  "shareFolderTitle": "แชร์โฟลเดอร์ \"{{name}}\"",
-  "shareWith": "แบ่งปันกับ",
-  "usersTab": "ผู้ใช้",
-  "rolesTab": "บทบาท",
-  "shareSearchPlaceholder": "ค้นหาผู้ใช้หรือบทบาท",
-  "shareNoMatches": "ไม่พบผลลัพธ์ใดๆ",
-  "shareWithCount": "แชร์กับ {{count}}",
-  "shareFolderHint": "แชร์โค้ดตัวอย่างทั้งหมดในโฟลเดอร์นี้ โค้ดตัวอย่างที่เพิ่มเข้ามาภายหลังจะไม่ถูกแชร์โดยอัตโนมัติ",
-  "shareFolderSummary": "โค้ดตัวอย่างที่แชร์ {{count}} ในโฟลเดอร์นี้",
-  "grantedBy": "ได้รับอนุญาตจาก",
-  "expired": "หมดอายุ",
-  "variablesDialogTitle": "วิ่ง \"{{name}}\"",
-  "variablesDialogDescription": "กรอกค่าที่จำเป็นสำหรับโค้ดส่วนนี้ก่อนที่จะเรียกใช้งาน",
-  "variablesPreviewLabel": "ตัวอย่าง",
-  "variablesConfirmButton": "วิ่ง",
-  "keybindings": {
-    "runSnippet": "เรียกใช้โค้ดตัวอย่างที่มีอยู่",
-    "snippetLabel": "ส่วนหนึ่ง",
-    "selectSnippet": "เลือกส่วนย่อย",
-    "snippetMissing": "ไม่พบโค้ดตัวอย่าง",
-    "snippetRequired": "เลือกส่วนย่อย"
-  },
-  "paletteHintRun": "เรียกใช้ในแท็บเทอร์มินัลที่ใช้งานอยู่",
-  "host": {
-    "startupTitle": "ตัวอย่างโค้ดสำหรับเริ่มต้น",
-    "quickActionsTitle": "การดำเนินการด่วน",
-    "quickActionsDescription": "การดำเนินการด่วนจะปรากฏเป็นปุ่มในแถบเครื่องมือ Host Metrics เพื่อให้สามารถเรียกใช้คำสั่งได้ด้วยการคลิกเพียงครั้งเดียว",
-    "noQuickActions": "ยังไม่มีการดำเนินการใดๆ อย่างเร่งด่วนในขณะนี้",
-    "buttonLabel": "ป้ายกำกับปุ่ม",
-    "selectSnippet": "เลือกส่วนย่อย...",
-    "addQuickAction": "เพิ่มการดำเนินการ",
-    "tabTitle": "เศษเสี้ยว",
-    "startupDescription": "โปรแกรมนี้จะทำงานในเทอร์มินัลทุกครั้งที่เชื่อมต่อกับโฮสต์นี้ ตัวแปรต่างๆ เช่น $HOST จะถูกเติมค่าลงไป และส่วนที่ขอข้อมูลป้อนเข้าจะถูกข้ามไป",
-    "none": "ไม่มี",
-    "removeQuickAction": "ลบการดำเนินการอย่างรวดเร็ว"
-  },
-  "quickActions": {
-    "running": "กำลังดำเนินการ {{name}}...",
-    "succeeded": "{{name}} เสร็จสมบูรณ์เรียบร้อยแล้ว",
-    "failed": "{{name}} ล้มเหลว",
-    "error": "ไม่สามารถดำเนินการ {{name}} ได้"
-  },
-  "paletteHintPaste": "วางลงในแท็บเทอร์มินัลที่ใช้งานอยู่",
-  "targetTerminals": "วิ่งใน",
-  "targetTerminalsHint": "ตัวเลือกเสริม มิฉะนั้นจะเป็นแท็บที่ใช้งานอยู่",
-  "selectAll": "ทั้งหมด",
-  "selectNone": "ไม่มี",
-  "plugin": {
-    "name": "เศษเสี้ยว"
-  }
-}
diff --git a/plugins/snippets/locales/translated/tr_TR.json b/plugins/snippets/locales/translated/tr_TR.json
deleted file mode 100644
index c7dd3ca8e..000000000
--- a/plugins/snippets/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Kod Parçacıkları"
-  },
-  "onboarding": {
-    "feature_snippets": "Parçacıklar",
-    "feature_snippets_desc": "Sık kullandığınız komutları kaydedin ve tek tıklamayla terminale gönderin."
-  },
-  "permissions": {
-    "view": {
-      "title": "Örnekleri görüntüle",
-      "description": "Kendi yazdığınız kısa metinleri, notları ve paylaşılan kısa metinleri görün."
-    },
-    "create": {
-      "title": "Kod parçacıkları oluşturun",
-      "description": "Yeni kod parçacıkları, notlar ve klasörler oluşturun."
-    },
-    "edit": {
-      "title": "Kod parçacıklarını düzenle",
-      "description": "Mevcut kod parçacıklarını ve klasörleri yeniden adlandırın veya değiştirin."
-    },
-    "delete": {
-      "title": "Parçacıkları sil",
-      "description": "Kod parçacıklarını ve klasörleri silin."
-    },
-    "share": {
-      "title": "Kısa özetleri paylaşın",
-      "description": "Kod parçacıklarını ve klasörleri diğer kullanıcılar veya rollerle paylaşın."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Klasörler varsayılan olarak kapalı olsun",
-      "description": "Kod parçacıkları panelini açtığınızda her bir kod parçacığı klasörü kapalı olarak başlar."
-    },
-    "showCommands": {
-      "label": "Komutları göster",
-      "description": "Her bir kod parçacığının komutunun ilk satırını adının altında gösterin."
-    },
-    "confirmExecution": {
-      "label": "Çalıştırmadan önce onaylayın.",
-      "description": "Terminalde bir komut parçacığı çalıştırılmadan önce izin isteyin."
-    }
-  },
-  "cancel": "İptal",
-  "loading": "Yükleniyor...",
-  "searchPlaceholder": "Parçacıkları ara",
-  "newFolder": "Yeni klasör",
-  "newSnippet": "Yeni kısa özet",
-  "noFolder": "Klasör yok",
-  "noSnippetsInFolder": "Bu klasörde parçacık yok",
-  "noTerminalTabsOpen": "Hiçbir terminal sekmesi açık değil.",
-  "run": "Çalıştır",
-  "pasteToTerminal": "Terminale yapıştır",
-  "copySuccess": "Panoya kopyalandı",
-  "importExport": "İçe / Dışa Aktar",
-  "importFailed": "Kod parçacıkları içe aktarılamadı",
-  "nameLabel": "Ad",
-  "namePlaceholder": "Kod parçası adı",
-  "descriptionLabel": "Açıklama",
-  "descriptionPlaceholder": "İsteğe bağlı açıklama",
-  "folderLabel": "Klasör",
-  "typeLabel": "Tür",
-  "typeCommand": "Komut",
-  "typeNote": "Not",
-  "commandLabel": "Komut",
-  "commandPlaceholder": "Çalıştırılacak komut, örneğin systemctl status $HOST",
-  "noteLabel": "Not",
-  "notePlaceholder": "Terminale yapıştırılacak metin",
-  "createSnippetTitle": "Kod parçacığı oluştur",
-  "createSnippetButton": "Kod parçacığı oluştur",
-  "createSuccess": "Oluşturulan kod parçası",
-  "createFailed": "Parçacık oluşturulamadı",
-  "editSnippetTitle": "Kod parçasını düzenle",
-  "saveSnippetButton": "Kod parçasını kaydet",
-  "updateSuccess": "Kod parçası güncellendi.",
-  "updateFailed": "Parçacık güncellenemedi",
-  "deleteFailed": "Parçacık silinemedi",
-  "createFolderTitle": "Klasör oluştur",
-  "createFolderButton": "Klasör oluştur",
-  "folderCreateSuccess": "Klasör oluşturuldu",
-  "folderCreateFailed": "Klasör oluşturulamadı",
-  "editFolderTitle": "Klasörü düzenle",
-  "saveFolderButton": "Klasörü kaydet",
-  "folderEditSuccess": "Klasör güncellendi",
-  "folderEditFailed": "Klasör güncellenemedi",
-  "folderNameLabel": "Klasör adı",
-  "folderNamePlaceholder": "Klasör adı",
-  "folderIconLabel": "Simge",
-  "folderDeleteSuccess": "Klasör silindi",
-  "folderDeleteFailed": "Klasör silinemedi",
-  "confirmRunMessage": "\"{{name}}\" çalıştırılsın mı?",
-  "confirmRunButton": "Çalıştır",
-  "runSuccess": "\"{{name}}\" komutunu {{count}} terminal(ler)inde çalıştırdı",
-  "pasteSuccess": "\"{{name}}\" ifadesi {{count}} terminal(ler)ine yapıştırıldı",
-  "admin": {
-    "tabTitle": "Parçacıklar",
-    "count": "{{count}} kod parçası",
-    "add": "Kod Parçası Ekle",
-    "namePlaceholder": "Kod parçası adı",
-    "contentPlaceholder": "Komut içeriği",
-    "folderPlaceholder": "Klasör (isteğe bağlı)",
-    "empty": "Bu kullanıcıya ait kod parçası yok",
-    "deleteConfirm": "{{username}} kullanıcısına ait \"{{name}}\" kod parçası silinsin mi?",
-    "deleted": "Kod parçası silindi",
-    "deleteFailed": "Parçacık silinemedi",
-    "requiredFields": "Kod parçası adı ve içeriği zorunludur",
-    "saved": "Kod parçası kaydedildi",
-    "saveFailed": "Kod parçası kaydedilemedi",
-    "saving": "Kaydediliyor...",
-    "save": "Kaydet"
-  },
-  "backToSnippets": "Özetlere geri dön",
-  "settingsTitle": "Kod parçacığı ayarları",
-  "settingsDisplayTitle": "Görüntülemek",
-  "settingsBehaviorTitle": "Davranış",
-  "typeCommandHint": "Etkin terminalde çalışır.",
-  "typeNoteHint": "Çalıştırmadan etkin terminale yapıştırır.",
-  "variablesHint": "Değişkenler: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Label}",
-  "doubleClickToRun": "Çalıştırmak için çift tıklayın.",
-  "sharedBadge": "Paylaşıldı",
-  "copyToClipboard": "Panoya kopyala",
-  "copyFailed": "Panoya kopyalanamadı",
-  "moreOptions": "Daha fazla seçenek",
-  "moreActions": "Diğer işlemler",
-  "moveToFolder": "Klasöre taşı",
-  "deleteSnippet": "Kod parçasını sil",
-  "deleteSnippetConfirm": "\"{{name}} \" kod parçasını silmek mi istiyorsunuz?",
-  "deleteSuccess": "Kod parçası silindi",
-  "delete": "Sil",
-  "folderActions": "Klasör işlemleri",
-  "addSnippetHere": "Yeni bir kesit burada.",
-  "deleteFolder": "Klasörü sil",
-  "deleteFolderConfirm": "\"{{name}}\" klasörünü silmek mi istiyorsunuz? İçindeki kod parçacıkları klasörün dışına taşınıyor.",
-  "createFolderDescription": "Birbiriyle ilgili kısa metin parçalarını gruplandırın.",
-  "editFolderDescription": "Bu klasörün adını, rengini veya simgesini değiştirin.",
-  "folderColorLabel": "Renk",
-  "loadFailed": "Kod parçacıkları yüklenemedi.",
-  "importSkipExisting": "İçe Aktar (mevcut olanları atla)",
-  "importOverwrite": "İçe aktar (mevcut olanın üzerine yaz)",
-  "importInvalidFile": "Bu dosya geçerli bir kod parçacığı dışa aktarımı değil.",
-  "importSuccess": "{{imported}}içe aktarıldı, {{updated}}güncellendi, {{skipped}} atlandı",
-  "exportSnippets": "Kod parçacıklarını dışa aktar",
-  "exportSuccess": "Dışa aktarılan kod parçacıkları",
-  "exportFailed": "Kod parçacıkları dışa aktarılamadı",
-  "expandAll": "Tüm klasörleri genişlet",
-  "collapseAll": "Tüm klasörleri daralt",
-  "docsLink": "Dokümantasyon",
-  "clearSearch": "Arama sonuçlarını temizle",
-  "noSearchResults": "Arama kriterlerinize uyan sonuç bulunamadı.",
-  "emptyTitle": "Henüz hiçbir kısa video yok.",
-  "emptyDescription": "Sık kullandığınız komutları kaydedin, ardından terminalde tek tıklamayla çalıştırın.",
-  "shareSnippet": "Özeti paylaş",
-  "shareFolder": "Paylaşılan klasör",
-  "shareExpiry": "Bitiş",
-  "shareExpiryOptions": {
-    "h0": "Süresiz",
-    "h1": "1 saat içinde",
-    "h24": "1 gün içinde",
-    "h168": "7 gün içinde",
-    "h720": "30 gün içinde"
-  },
-  "shareButton": "Paylaş",
-  "shareSuccess": "{{count}} ile paylaşıldı",
-  "shareFailed": "Paylaşılamadı",
-  "shareLoadFailed": "Paylaşım ayrıntıları yüklenemedi.",
-  "currentAccess": "Mevcut erişim",
-  "notSharedYet": "Henüz kimseyle paylaşılmadı.",
-  "revokeAccess": "İptal Et",
-  "revokeSuccess": "Erişim iptal edildi",
-  "revokeFailed": "Erişim iptal edilemedi",
-  "close": "Kapat",
-  "targetHostsLabel": "Hedef sunucular",
-  "targetHostsHint": "Bu komutu doğrudan, açık bir terminal olmadan çalıştırmak istediğiniz sunucuları seçin. Aktif terminalde çalıştırmak için boş bırakın.",
-  "clearTargetHosts": "Temizle",
-  "noHostsAvailable": "Hiç ev sahibi mevcut değil.",
-  "searchHosts": "Host ara",
-  "runOnTargets": "Hedef sunucularda çalıştırın",
-  "executionResultTitle": "\"{{name}} \" için sonuçlar",
-  "executionResultDescription": "Her hedef sunucudan gelen çıktı.",
-  "executionSuccess": "Başarılı",
-  "executionFailed": "Başarısız",
-  "directRunSuccess": "{{count}} sunucuda \"{{name}}\" çalıştırıldı",
-  "directRunPartialFail": "\"{{name}}\" bazı sunucularda başarısız oldu",
-  "reorderFailed": "Kod parçacıklarının yeniden sıralanması başarısız oldu.",
-  "dropToRemoveFromFolder": "Klasörden çıkmak için buraya sürükleyin.",
-  "shareSnippetTitle": "Paylaş \"{{name}}\"",
-  "shareFolderTitle": "Paylaşılan klasör \"{{name}}\"",
-  "shareWith": "Kimlerle paylaş",
-  "usersTab": "Kullanıcılar",
-  "rolesTab": "Roller",
-  "shareSearchPlaceholder": "Kullanıcı veya rol ara",
-  "shareNoMatches": "Eşleşme bulunamadı.",
-  "shareWithCount": "{{count}} ile paylaş",
-  "shareFolderHint": "Bu klasördeki tüm kod parçacıklarını paylaşır. Daha sonra eklenen kod parçacıkları otomatik olarak paylaşılmaz.",
-  "shareFolderSummary": "Bu klasörde paylaşılan {{count}} kod parçacığı(ları)",
-  "grantedBy": "Veren",
-  "expired": "Süresi dolmuş",
-  "variablesDialogTitle": "Çalıştır \"{{name}}\"",
-  "variablesDialogDescription": "Bu kod parçasını çalıştırmadan önce gerekli değerleri girin.",
-  "variablesPreviewLabel": "Önizle",
-  "variablesConfirmButton": "Çalıştır",
-  "keybindings": {
-    "runSnippet": "Mevcut kod parçasını çalıştır",
-    "snippetLabel": "Alıntı",
-    "selectSnippet": "Bir parça seçin",
-    "snippetMissing": "Kod parçası bulunamadı",
-    "snippetRequired": "Bir parça seçin"
-  },
-  "paletteHintRun": "Etkin terminal sekmesinde çalıştırın.",
-  "host": {
-    "startupTitle": "Başlangıç Betiği",
-    "quickActionsTitle": "Hızlı Eylemler",
-    "quickActionsDescription": "Hızlı eylemler, tek tıklamayla komut çalıştırmak için Ana Bilgisayar Metrikleri araç çubuğunda düğme olarak görünür.",
-    "noQuickActions": "Henüz hızlı eylem yok.",
-    "buttonLabel": "Düğme etiketi",
-    "selectSnippet": "Parçacık seç...",
-    "addQuickAction": "Eylem Ekle",
-    "tabTitle": "Parçacıklar",
-    "startupDescription": "Bu sunucuya her bağlandığında terminalde çalışır. $HOST gibi değişkenler doldurulur; girdi isteyen bir bölüm atlanır.",
-    "none": "Yok",
-    "removeQuickAction": "Hızlı işlemi kaldır"
-  },
-  "quickActions": {
-    "running": "{{name}} çalıştırılıyor...",
-    "succeeded": "{{name}} başarıyla tamamlandı",
-    "failed": "{{name}} başarısız oldu",
-    "error": "{{name}} çalıştırılamadı"
-  },
-  "paletteHintPaste": "Etkin terminal sekmesine yapıştırın.",
-  "targetTerminals": "Koşun",
-  "targetTerminalsHint": "isteğe bağlı, aksi takdirde aktif sekme",
-  "selectAll": "Tümü",
-  "selectNone": "Yok",
-  "plugin": {
-    "name": "Parçacıklar"
-  }
-}
diff --git a/plugins/snippets/locales/translated/uk_UA.json b/plugins/snippets/locales/translated/uk_UA.json
deleted file mode 100644
index 12521f201..000000000
--- a/plugins/snippets/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Фрагменти"
-  },
-  "onboarding": {
-    "feature_snippets": "Фрагменти",
-    "feature_snippets_desc": "Зберігайте команди, які ви часто виконуєте, та надсилайте їх у термінал одним клацанням миші."
-  },
-  "permissions": {
-    "view": {
-      "title": "Переглянути фрагменти",
-      "description": "Переглядайте власні фрагменти, нотатки та спільні фрагменти."
-    },
-    "create": {
-      "title": "Створити фрагменти",
-      "description": "Створюйте нові фрагменти, нотатки та папки."
-    },
-    "edit": {
-      "title": "Редагувати фрагменти",
-      "description": "Перейменуйте або змініть існуючі фрагменти та папки."
-    },
-    "delete": {
-      "title": "Видалити фрагменти",
-      "description": "Видалити фрагменти та папки."
-    },
-    "share": {
-      "title": "Поділитися фрагментами",
-      "description": "Надавати доступ до фрагментів коду та папок іншим користувачам або ролям."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Згортати папки за замовчуванням",
-      "description": "Згортати кожну папку фрагментів під час відкриття панелі «Фрагменти»."
-    },
-    "showCommands": {
-      "label": "Показати команди",
-      "description": "Показати перший рядок команди кожного фрагмента під його назвою."
-    },
-    "confirmExecution": {
-      "label": "Підтвердьте перед запуском",
-      "description": "Запитувати перед виконанням фрагмента команди в терміналі."
-    }
-  },
-  "cancel": "Скасувати",
-  "loading": "Завантаження...",
-  "searchPlaceholder": "Пошук фрагментів",
-  "newFolder": "Нова папка",
-  "newSnippet": "Новий фрагмент",
-  "noFolder": "Немає папки",
-  "noSnippetsInFolder": "У цій папці немає фрагментів",
-  "noTerminalTabsOpen": "Жодна вкладка термінала не відкрита",
-  "run": "Бігти",
-  "pasteToTerminal": "Вставити в термінал",
-  "copySuccess": "Скопійовано в буфер обміну",
-  "importExport": "Імпорт / Експорт",
-  "importFailed": "Не вдалося імпортувати фрагменти",
-  "nameLabel": "Ім'я",
-  "namePlaceholder": "Назва фрагмента",
-  "descriptionLabel": "Опис",
-  "descriptionPlaceholder": "Додатковий опис",
-  "folderLabel": "Папка",
-  "typeLabel": "Тип",
-  "typeCommand": "Команда",
-  "typeNote": "Примітка",
-  "commandLabel": "Команда",
-  "commandPlaceholder": "Команда для запуску, наприклад, systemctl status $HOST",
-  "noteLabel": "Примітка",
-  "notePlaceholder": "Текст для вставки в термінал",
-  "createSnippetTitle": "Створити фрагмент",
-  "createSnippetButton": "Створити фрагмент",
-  "createSuccess": "Фрагмент створено",
-  "createFailed": "Не вдалося створити фрагмент",
-  "editSnippetTitle": "Редагувати фрагмент",
-  "saveSnippetButton": "Зберегти фрагмент",
-  "updateSuccess": "Фрагмент оновлено",
-  "updateFailed": "Не вдалося оновити фрагмент",
-  "deleteFailed": "Не вдалося видалити фрагмент",
-  "createFolderTitle": "Створити папку",
-  "createFolderButton": "Створити папку",
-  "folderCreateSuccess": "Папку створено",
-  "folderCreateFailed": "Не вдалося створити папку",
-  "editFolderTitle": "Редагувати папку",
-  "saveFolderButton": "Зберегти папку",
-  "folderEditSuccess": "Папку оновлено",
-  "folderEditFailed": "Не вдалося оновити папку",
-  "folderNameLabel": "Назва папки",
-  "folderNamePlaceholder": "Назва папки",
-  "folderIconLabel": "Значок",
-  "folderDeleteSuccess": "Папку видалено",
-  "folderDeleteFailed": "Не вдалося видалити папку",
-  "confirmRunMessage": "Запустити \"{{name}}\"?",
-  "confirmRunButton": "Бігти",
-  "runSuccess": "Виконано \"{{name}}\" на терміналі(ах) {{count}}",
-  "pasteSuccess": "Вставлено \"{{name}}\" у термінал(и) {{count}}",
-  "admin": {
-    "tabTitle": "Фрагменти",
-    "count": "{{count}} фрагменти",
-    "add": "Додати фрагмент",
-    "namePlaceholder": "Назва фрагмента",
-    "contentPlaceholder": "Зміст команди",
-    "folderPlaceholder": "Папка (необов'язково)",
-    "empty": "Цей користувач не має фрагментів",
-    "deleteConfirm": "Видалити фрагмент \"{{name}}\", що належить {{username}}?",
-    "deleted": "Фрагмент видалено",
-    "deleteFailed": "Не вдалося видалити фрагмент",
-    "requiredFields": "Назва та вміст фрагмента обов'язкові",
-    "saved": "Фрагмент збережено",
-    "saveFailed": "Не вдалося зберегти фрагмент",
-    "saving": "Збереження...",
-    "save": "Зберегти"
-  },
-  "backToSnippets": "Повернутися до фрагментів",
-  "settingsTitle": "Налаштування фрагмента",
-  "settingsDisplayTitle": "Дисплей",
-  "settingsBehaviorTitle": "Поведінка",
-  "typeCommandHint": "Працює в активному терміналі.",
-  "typeNoteHint": "Вставляє в активний термінал без запуску.",
-  "variablesHint": "Змінні: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Мітка}",
-  "doubleClickToRun": "Двічі клацніть, щоб запустити",
-  "sharedBadge": "Спільний доступ",
-  "copyToClipboard": "Копіювати в буфер обміну",
-  "copyFailed": "Не вдалося скопіювати в буфер обміну",
-  "moreOptions": "Більше опцій",
-  "moreActions": "Більше дій",
-  "moveToFolder": "Перемістити до папки",
-  "deleteSnippet": "Видалити фрагмент",
-  "deleteSnippetConfirm": "Видалити фрагмент \"{{name}}\"?",
-  "deleteSuccess": "Фрагмент видалено",
-  "delete": "Видалити",
-  "folderActions": "Дії з папкою",
-  "addSnippetHere": "Новий фрагмент тут",
-  "deleteFolder": "Видалити папку",
-  "deleteFolderConfirm": "Видалити папку \"{{name}}\"? Її фрагменти перемістяться за межі папки.",
-  "createFolderDescription": "Згрупуйте пов'язані фрагменти разом.",
-  "editFolderDescription": "Змініть назву, колір або значок цієї папки.",
-  "folderColorLabel": "Колір",
-  "loadFailed": "Не вдалося завантажити фрагменти",
-  "importSkipExisting": "Імпорт (пропустити існуючі)",
-  "importOverwrite": "Імпорт (перезаписати існуюче)",
-  "importInvalidFile": "Цей файл не є дійсним експортом фрагментів",
-  "importSuccess": "Імпортовано {{imported}}, оновлено {{updated}}, пропущено {{skipped}}",
-  "exportSnippets": "Експортувати фрагменти",
-  "exportSuccess": "Експортовано фрагментів",
-  "exportFailed": "Не вдалося експортувати фрагменти",
-  "expandAll": "Розгорнути всі папки",
-  "collapseAll": "Згорнути всі папки",
-  "docsLink": "Документація",
-  "clearSearch": "Очистити пошук",
-  "noSearchResults": "Немає фрагментів, що відповідають вашому пошуковому запиту",
-  "emptyTitle": "Поки що немає фрагментів",
-  "emptyDescription": "Зберігайте команди, які ви часто виконуєте, а потім запускайте їх у терміналі одним клацанням миші.",
-  "shareSnippet": "Поділитися фрагментом",
-  "shareFolder": "Спільний доступ до папки",
-  "shareExpiry": "Термін дії закінчується",
-  "shareExpiryOptions": {
-    "h0": "Ніколи",
-    "h1": "Через 1 годину",
-    "h24": "Через 1 день",
-    "h168": "Через 7 днів",
-    "h720": "Через 30 днів"
-  },
-  "shareButton": "Поділитися",
-  "shareSuccess": "Спільно з {{count}}",
-  "shareFailed": "Не вдалося поділитися",
-  "shareLoadFailed": "Не вдалося завантажити деталі спільного доступу",
-  "currentAccess": "Поточний доступ",
-  "notSharedYet": "Ще ні з ким не поділилися",
-  "revokeAccess": "Скасувати",
-  "revokeSuccess": "Доступ скасовано",
-  "revokeFailed": "Не вдалося скасувати доступ",
-  "close": "Закрити",
-  "targetHostsLabel": "Цільові хости",
-  "targetHostsHint": "Виберіть хости, на яких потрібно виконати цю команду безпосередньо, без відкритого терміналу. Залиште поле порожнім, щоб запустити її в активному терміналі.",
-  "clearTargetHosts": "Очистити",
-  "noHostsAvailable": "Немає доступних хостів",
-  "searchHosts": "Пошук хостів",
-  "runOnTargets": "Запускати на цільових хостах",
-  "executionResultTitle": "Результати для запиту «{{name}}»",
-  "executionResultDescription": "Вихідні дані з кожного цільового хоста.",
-  "executionSuccess": "Успіх",
-  "executionFailed": "Не вдалося",
-  "directRunSuccess": "Виконано \"{{name}}\" на хості(ах) {{count}}",
-  "directRunPartialFail": "«{{name}}» не вдалося виконати на деяких хостах",
-  "reorderFailed": "Не вдалося змінити порядок фрагментів",
-  "dropToRemoveFromFolder": "Перетягніть сюди, щоб вийти за межі папки",
-  "shareSnippetTitle": "Поділитися «{{name}}»",
-  "shareFolderTitle": "Спільний доступ до папки «{{name}}»",
-  "shareWith": "Поділитися з",
-  "usersTab": "Користувачі",
-  "rolesTab": "Ролі",
-  "shareSearchPlaceholder": "Пошук користувачів або ролей",
-  "shareNoMatches": "Немає збігів",
-  "shareWithCount": "Поділитися з {{count}}",
-  "shareFolderHint": "Надає доступ до кожного фрагмента в цій папці. Фрагменти, додані пізніше, не надсилаються автоматично.",
-  "shareFolderSummary": "Спільні фрагменти {{count}} у цій папці",
-  "grantedBy": "Надано",
-  "expired": "Термін дії минув",
-  "variablesDialogTitle": "Виконати \"{{name}}\"",
-  "variablesDialogDescription": "Заповніть значення, необхідні цьому фрагменту, перш ніж запускати його.",
-  "variablesPreviewLabel": "Попередній перегляд",
-  "variablesConfirmButton": "Бігти",
-  "keybindings": {
-    "runSnippet": "Запустити існуючий фрагмент коду",
-    "snippetLabel": "Фрагмент",
-    "selectSnippet": "Виберіть фрагмент",
-    "snippetMissing": "фрагмент не знайдено",
-    "snippetRequired": "Виберіть фрагмент"
-  },
-  "paletteHintRun": "Запустити в активній вкладці терміналу",
-  "host": {
-    "startupTitle": "Фрагмент запуску",
-    "quickActionsTitle": "Швидкі дії",
-    "quickActionsDescription": "Швидкі дії відображаються як кнопки на панелі інструментів «Метрики хоста» для виконання команд одним клацанням миші.",
-    "noQuickActions": "Поки що жодних швидких дій.",
-    "buttonLabel": "Мітка кнопки",
-    "selectSnippet": "Вибрати фрагмент...",
-    "addQuickAction": "Додати дію",
-    "tabTitle": "Фрагменти",
-    "startupDescription": "Виконується в терміналі кожного разу, коли підключається до цього хоста. Змінні типу $HOST заповнюються; фрагмент коду, який запитує введення, пропускається.",
-    "none": "Жоден",
-    "removeQuickAction": "Видалити швидку дію"
-  },
-  "quickActions": {
-    "running": "Виконання {{name}}...",
-    "succeeded": "{{name}} успішно завершено",
-    "failed": "{{name}} не вдалося",
-    "error": "Не вдалося виконати {{name}}"
-  },
-  "paletteHintPaste": "Вставити в активну вкладку терміналу",
-  "targetTerminals": "Оббіг",
-  "targetTerminalsHint": "необов'язково, інакше активна вкладка",
-  "selectAll": "Усі",
-  "selectNone": "Жоден",
-  "plugin": {
-    "name": "Фрагменти"
-  }
-}
diff --git a/plugins/snippets/locales/translated/vi_VN.json b/plugins/snippets/locales/translated/vi_VN.json
deleted file mode 100644
index 34548afa2..000000000
--- a/plugins/snippets/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "Đoạn mã"
-  },
-  "onboarding": {
-    "feature_snippets": "Đoạn mã",
-    "feature_snippets_desc": "Lưu lại các lệnh bạn thường xuyên sử dụng và gửi chúng đến cửa sổ dòng lệnh chỉ với một cú nhấp chuột."
-  },
-  "permissions": {
-    "view": {
-      "title": "Xem đoạn trích",
-      "description": "Xem các đoạn trích, ghi chú và đoạn trích được chia sẻ của riêng bạn."
-    },
-    "create": {
-      "title": "Tạo đoạn mã",
-      "description": "Tạo đoạn văn bản, ghi chú và thư mục mới."
-    },
-    "edit": {
-      "title": "Chỉnh sửa đoạn mã",
-      "description": "Đổi tên hoặc thay đổi nội dung các đoạn mã và thư mục hiện có."
-    },
-    "delete": {
-      "title": "Xóa đoạn mã",
-      "description": "Xóa các đoạn mã và thư mục."
-    },
-    "share": {
-      "title": "Chia sẻ đoạn trích",
-      "description": "Chia sẻ các đoạn mã và thư mục với người dùng hoặc vai trò khác."
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "Mặc định thu gọn thư mục",
-      "description": "Khi mở bảng Điều khiển Đoạn mã, mỗi thư mục đoạn mã sẽ được thu gọn lại."
-    },
-    "showCommands": {
-      "label": "Hiển thị lệnh",
-      "description": "Hiển thị dòng đầu tiên của lệnh trong mỗi đoạn mã, ngay bên dưới tên của nó."
-    },
-    "confirmExecution": {
-      "label": "Xác nhận trước khi chạy.",
-      "description": "Hãy hỏi trước khi chạy một đoạn mã lệnh trong cửa sổ dòng lệnh."
-    }
-  },
-  "cancel": "Hủy",
-  "loading": "Đang tải...",
-  "searchPlaceholder": "Tìm kiếm snippet",
-  "newFolder": "Thư mục mới",
-  "newSnippet": "Đoạn mã mới",
-  "noFolder": "Không có thư mục",
-  "noSnippetsInFolder": "Không có snippet nào trong thư mục này",
-  "noTerminalTabsOpen": "Không có tab terminal nào đang mở.",
-  "run": "Chạy",
-  "pasteToTerminal": "Dán vào cửa sổ terminal",
-  "copySuccess": "Đã sao chép vào bộ nhớ tạm",
-  "importExport": "Nhập / Xuất",
-  "importFailed": "Nhập đoạn mã thất bại",
-  "nameLabel": "Tên",
-  "namePlaceholder": "Tên đoạn mã",
-  "descriptionLabel": "Mô tả",
-  "descriptionPlaceholder": "Mô tả tùy chọn",
-  "folderLabel": "Thư mục",
-  "typeLabel": "Loại",
-  "typeCommand": "Lệnh",
-  "typeNote": "Ghi chú",
-  "commandLabel": "Lệnh",
-  "commandPlaceholder": "Lệnh cần chạy, ví dụ: systemctl status $HOST",
-  "noteLabel": "Ghi chú",
-  "notePlaceholder": "Văn bản cần dán vào cửa sổ terminal",
-  "createSnippetTitle": "Tạo đoạn mã",
-  "createSnippetButton": "Tạo đoạn mã",
-  "createSuccess": "Đoạn mã được tạo",
-  "createFailed": "Tạo snippet thất bại",
-  "editSnippetTitle": "Chỉnh sửa đoạn mã",
-  "saveSnippetButton": "Lưu đoạn mã",
-  "updateSuccess": "Đoạn mã đã được cập nhật",
-  "updateFailed": "Cập nhật snippet thất bại",
-  "deleteFailed": "Xóa snippet thất bại",
-  "createFolderTitle": "Tạo thư mục",
-  "createFolderButton": "Tạo thư mục",
-  "folderCreateSuccess": "Thư mục đã được tạo",
-  "folderCreateFailed": "Tạo thư mục thất bại",
-  "editFolderTitle": "Sửa thư mục",
-  "saveFolderButton": "Lưu thư mục",
-  "folderEditSuccess": "Thư mục đã được cập nhật",
-  "folderEditFailed": "Cập nhật thư mục thất bại",
-  "folderNameLabel": "Tên thư mục",
-  "folderNamePlaceholder": "Tên thư mục",
-  "folderIconLabel": "Biểu tượng",
-  "folderDeleteSuccess": "Thư mục đã bị xóa",
-  "folderDeleteFailed": "Xóa thư mục thất bại",
-  "confirmRunMessage": "Chạy \"{{name}}\"?",
-  "confirmRunButton": "Chạy",
-  "runSuccess": "Ran \"{{name}}\" on {{count}} terminal(s)",
-  "pasteSuccess": "Đã dán \"{{name}}\" vào {{count}} thiết bị đầu cuối",
-  "admin": {
-    "tabTitle": "Đoạn mã",
-    "count": "{{count}} đoạn mã",
-    "add": "Thêm đoạn mã",
-    "namePlaceholder": "Tên đoạn mã",
-    "contentPlaceholder": "Nội dung lệnh",
-    "folderPlaceholder": "Thư mục (tùy chọn)",
-    "empty": "Người dùng này không có đoạn mã nào",
-    "deleteConfirm": "Xóa đoạn mã \"{{name}}\" của {{username}}?",
-    "deleted": "Đã xóa đoạn mã",
-    "deleteFailed": "Xóa snippet thất bại",
-    "requiredFields": "Cần tên và nội dung đoạn mã",
-    "saved": "Đã lưu đoạn mã",
-    "saveFailed": "Lưu đoạn mã thất bại",
-    "saving": "Đang lưu...",
-    "save": "Lưu"
-  },
-  "backToSnippets": "Quay lại các đoạn trích",
-  "settingsTitle": "Cài đặt đoạn mã",
-  "settingsDisplayTitle": "Trưng bày",
-  "settingsBehaviorTitle": "Hành vi",
-  "typeCommandHint": "Chạy trong cửa sổ dòng lệnh đang hoạt động.",
-  "typeNoteHint": "Sao chép vào cửa sổ terminal đang hoạt động mà không chạy.",
-  "variablesHint": "Biến: $HOST, $USER, $PORT, $NAME, ${INPUT_1:Label}",
-  "doubleClickToRun": "Nhấp đúp để chạy",
-  "sharedBadge": "Đã chia sẻ",
-  "copyToClipboard": "Sao chép vào clipboard",
-  "copyFailed": "Không thể sao chép vào bảng tạm",
-  "moreOptions": "Nhiều tùy chọn hơn",
-  "moreActions": "Thao tác khác",
-  "moveToFolder": "Di chuyển vào thư mục",
-  "deleteSnippet": "Xóa đoạn mã",
-  "deleteSnippetConfirm": "Xóa đoạn mã \"{{name}}\"?",
-  "deleteSuccess": "Đã xóa đoạn mã",
-  "delete": "Xóa",
-  "folderActions": "Thao tác thư mục",
-  "addSnippetHere": "Đoạn mã mới ở đây",
-  "deleteFolder": "Xóa thư mục",
-  "deleteFolderConfirm": "Xóa thư mục \"{{name}}\"? Các đoạn mã của nó sẽ được chuyển ra khỏi thư mục.",
-  "createFolderDescription": "Gom các đoạn văn bản có liên quan lại với nhau.",
-  "editFolderDescription": "Thay đổi tên, màu sắc hoặc biểu tượng của thư mục này.",
-  "folderColorLabel": "Màu sắc",
-  "loadFailed": "Không thể tải đoạn mã.",
-  "importSkipExisting": "Nhập (bỏ qua mục đã có)",
-  "importOverwrite": "Nhập khẩu (ghi đè lên nội dung hiện có)",
-  "importInvalidFile": "Tệp đó không phải là tệp xuất đoạn mã hợp lệ.",
-  "importSuccess": "Đã nhập {{imported}}, đã cập nhật {{updated}}, đã bỏ qua {{skipped}}",
-  "exportSnippets": "Xuất đoạn mã",
-  "exportSuccess": "Các đoạn mã đã xuất",
-  "exportFailed": "Xuất đoạn mã thất bại",
-  "expandAll": "Mở rộng tất cả thư mục",
-  "collapseAll": "Thu gọn tất cả thư mục",
-  "docsLink": "Tài liệu",
-  "clearSearch": "Xóa tìm kiếm",
-  "noSearchResults": "Không có kết quả nào phù hợp với tìm kiếm của bạn",
-  "emptyTitle": "Chưa có đoạn trích nào.",
-  "emptyDescription": "Lưu lại các lệnh bạn thường xuyên sử dụng, sau đó chạy chúng trong cửa sổ dòng lệnh chỉ với một cú nhấp chuột.",
-  "shareSnippet": "Chia sẻ đoạn trích",
-  "shareFolder": "Chia sẻ thư mục",
-  "shareExpiry": "Hết hạn",
-  "shareExpiryOptions": {
-    "h0": "Chưa bao giờ",
-    "h1": "Trong 1 giờ",
-    "h24": "Trong 1 ngày",
-    "h168": "Trong 7 ngày",
-    "h720": "Trong 30 ngày"
-  },
-  "shareButton": "Chia sẻ",
-  "shareSuccess": "Đã chia sẻ với {{count}}",
-  "shareFailed": "Không thể chia sẻ",
-  "shareLoadFailed": "Không thể tải thông tin chia sẻ.",
-  "currentAccess": "Truy cập hiện tại",
-  "notSharedYet": "Chưa chia sẻ với ai cả.",
-  "revokeAccess": "Thu hồi",
-  "revokeSuccess": "Đã thu hồi quyền truy cập",
-  "revokeFailed": "Thu hồi quyền truy cập thất bại",
-  "close": "Đóng",
-  "targetHostsLabel": "Mục tiêu chủ nhà",
-  "targetHostsHint": "Chọn các máy chủ để chạy lệnh này trực tiếp, không cần mở cửa sổ terminal. Để trống nếu muốn chạy lệnh trong cửa sổ terminal đang hoạt động.",
-  "clearTargetHosts": "Xóa",
-  "noHostsAvailable": "Hiện không có máy chủ nào khả dụng",
-  "searchHosts": "Tìm kiếm máy chủ",
-  "runOnTargets": "Chạy trên máy chủ mục tiêu",
-  "executionResultTitle": "Kết quả cho \"{{name}}\"",
-  "executionResultDescription": "Kết quả đầu ra từ mỗi máy chủ mục tiêu.",
-  "executionSuccess": "Thành công",
-  "executionFailed": "Thất bại",
-  "directRunSuccess": "Đã chạy \"{{name}}\" trên {{count}} máy chủ",
-  "directRunPartialFail": "\"{{name}}\" bị lỗi trên một số máy chủ",
-  "reorderFailed": "Không thể sắp xếp lại các đoạn mã.",
-  "dropToRemoveFromFolder": "Kéo thả vào đây để di chuyển ra khỏi thư mục.",
-  "shareSnippetTitle": "Chia sẻ \"{{name}}\"",
-  "shareFolderTitle": "Chia sẻ thư mục \"{{name}}\"",
-  "shareWith": "Chia sẻ với",
-  "usersTab": "Người dùng",
-  "rolesTab": "Vai trò",
-  "shareSearchPlaceholder": "Tìm kiếm người dùng hoặc vai trò",
-  "shareNoMatches": "Không có kết quả phù hợp",
-  "shareWithCount": "Chia sẻ với {{count}}",
-  "shareFolderHint": "Chia sẻ tất cả các đoạn mã trong thư mục này. Các đoạn mã được thêm vào sau sẽ không được chia sẻ tự động.",
-  "shareFolderSummary": "Đã chia sẻ {{count}} đoạn mã trong thư mục này",
-  "grantedBy": "Được cấp bởi",
-  "expired": "Đã hết hạn",
-  "variablesDialogTitle": "Chạy \"{{name}}\"",
-  "variablesDialogDescription": "Hãy điền đầy đủ các giá trị cần thiết cho đoạn mã này trước khi chạy.",
-  "variablesPreviewLabel": "Xem trước",
-  "variablesConfirmButton": "Chạy",
-  "keybindings": {
-    "runSnippet": "Chạy đoạn mã hiện có",
-    "snippetLabel": "Đoạn trích",
-    "selectSnippet": "Chọn một đoạn trích",
-    "snippetMissing": "Không tìm thấy đoạn mã.",
-    "snippetRequired": "Chọn một đoạn trích"
-  },
-  "paletteHintRun": "Chạy trong tab cửa sổ terminal đang hoạt động",
-  "host": {
-    "startupTitle": "Đoạn mã khởi động",
-    "quickActionsTitle": "Hành động nhanh",
-    "quickActionsDescription": "Hành động nhanh xuất hiện dưới dạng nút trên thanh công cụ Chỉ số máy để thực thi lệnh một lần nhấp.",
-    "noQuickActions": "Chưa có hành động nhanh nào.",
-    "buttonLabel": "Nhãn nút",
-    "selectSnippet": "Chọn đoạn mã...",
-    "addQuickAction": "Thêm hành động",
-    "tabTitle": "Đoạn mã",
-    "startupDescription": "Đoạn mã này chạy trong terminal mỗi khi kết nối với máy chủ này. Các biến như $HOST được điền vào; đoạn mã yêu cầu nhập liệu sẽ bị bỏ qua.",
-    "none": "Không chọn",
-    "removeQuickAction": "Loại bỏ thao tác nhanh"
-  },
-  "quickActions": {
-    "running": "Đang thực thi {{name}}...",
-    "succeeded": "{{name}} đã hoàn tất thành công",
-    "failed": "{{name}} thất bại",
-    "error": "Thực thi {{name}} thất bại"
-  },
-  "paletteHintPaste": "Dán vào tab cửa sổ terminal đang hoạt động.",
-  "targetTerminals": "Chạy vào",
-  "targetTerminalsHint": "tùy chọn, nếu không thì tab đang hoạt động",
-  "selectAll": "Tất cả",
-  "selectNone": "Không chọn",
-  "plugin": {
-    "name": "Đoạn mã"
-  }
-}
diff --git a/plugins/snippets/locales/translated/zh_CN.json b/plugins/snippets/locales/translated/zh_CN.json
deleted file mode 100644
index a6dbeab23..000000000
--- a/plugins/snippets/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "代码片段"
-  },
-  "onboarding": {
-    "feature_snippets": "代码片段",
-    "feature_snippets_desc": "保存常用命令，一键发送至终端执行。"
-  },
-  "permissions": {
-    "view": {
-      "title": "查看摘要",
-      "description": "查看您自己的代码片段、笔记和共享的代码片段。"
-    },
-    "create": {
-      "title": "创建代码片段",
-      "description": "创建新的代码片段、笔记和文件夹。"
-    },
-    "edit": {
-      "title": "编辑片段",
-      "description": "重命名或更改现有代码片段和文件夹。"
-    },
-    "delete": {
-      "title": "删除片段",
-      "description": "删除代码片段和文件夹。"
-    },
-    "share": {
-      "title": "分享片段",
-      "description": "与其他用户或角色共享代码片段和文件夹。"
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "默认折叠文件夹",
-      "description": "打开代码片段面板时，每个代码片段文件夹都默认折叠。"
-    },
-    "showCommands": {
-      "label": "显示命令",
-      "description": "在代码片段名称下方显示每个代码片段命令的第一行。"
-    },
-    "confirmExecution": {
-      "label": "运行前请确认",
-      "description": "在终端运行命令片段之前，请先询问。"
-    }
-  },
-  "cancel": "取消",
-  "loading": "加载中...",
-  "searchPlaceholder": "搜索代码片段",
-  "newFolder": "新建文件夹",
-  "newSnippet": "新片段",
-  "noFolder": "无文件夹",
-  "noSnippetsInFolder": "此文件夹中没有代码片段",
-  "noTerminalTabsOpen": "未打开任何终端标签页",
-  "run": "运行",
-  "pasteToTerminal": "粘贴到终端",
-  "copySuccess": "已复制到剪贴板",
-  "importExport": "导入 / 导出",
-  "importFailed": "导入代码片段失败",
-  "nameLabel": "名称",
-  "namePlaceholder": "代码片段名称",
-  "descriptionLabel": "描述",
-  "descriptionPlaceholder": "可选描述",
-  "folderLabel": "文件夹",
-  "typeLabel": "类型",
-  "typeCommand": "命令",
-  "typeNote": "笔记",
-  "commandLabel": "命令",
-  "commandPlaceholder": "要运行的命令，例如 systemctl status $HOST",
-  "noteLabel": "笔记",
-  "notePlaceholder": "要粘贴到终端中的文本",
-  "createSnippetTitle": "创建代码片段",
-  "createSnippetButton": "创建代码片段",
-  "createSuccess": "已创建代码片段",
-  "createFailed": "创建代码片段失败",
-  "editSnippetTitle": "编辑片段",
-  "saveSnippetButton": "保存代码片段",
-  "updateSuccess": "代码片段已更新",
-  "updateFailed": "更新代码片段失败",
-  "deleteFailed": "删除代码片段失败",
-  "createFolderTitle": "创建文件夹",
-  "createFolderButton": "创建文件夹",
-  "folderCreateSuccess": "已创建文件夹",
-  "folderCreateFailed": "创建文件夹失败",
-  "editFolderTitle": "编辑文件夹",
-  "saveFolderButton": "保存文件夹",
-  "folderEditSuccess": "文件夹已更新",
-  "folderEditFailed": "更新文件夹失败",
-  "folderNameLabel": "文件夹名称",
-  "folderNamePlaceholder": "文件夹名称",
-  "folderIconLabel": "图标",
-  "folderDeleteSuccess": "文件夹已删除",
-  "folderDeleteFailed": "删除文件夹失败",
-  "confirmRunMessage": "运行“{{name}}”？",
-  "confirmRunButton": "运行",
-  "runSuccess": "在 {{count}} 终端上运行“{{name}}”",
-  "pasteSuccess": "已将“{{name}}”粘贴到 {{count}} 终端中",
-  "admin": {
-    "tabTitle": "代码片段",
-    "count": "{{count}} 个代码片段",
-    "add": "添加代码片段",
-    "namePlaceholder": "代码片段名称",
-    "contentPlaceholder": "命令内容",
-    "folderPlaceholder": "文件夹（可选）",
-    "empty": "该用户没有代码片段",
-    "deleteConfirm": "删除属于 {{username}} 的代码片段 \"{{name}}\"？",
-    "deleted": "代码片段已删除",
-    "deleteFailed": "删除代码片段失败",
-    "requiredFields": "代码片段名称和内容为必填项",
-    "saved": "代码片段已保存",
-    "saveFailed": "保存代码片段失败",
-    "saving": "保存中...",
-    "save": "保存"
-  },
-  "backToSnippets": "返回片段",
-  "settingsTitle": "代码片段设置",
-  "settingsDisplayTitle": "展示",
-  "settingsBehaviorTitle": "交互",
-  "typeCommandHint": "在当前终端中运行。",
-  "typeNoteHint": "无需运行即可粘贴到活动终端中。",
-  "variablesHint": "变量：$HOST、$USER、$PORT、$NAME、${INPUT_1:Label}",
-  "doubleClickToRun": "双击运行",
-  "sharedBadge": "已共享",
-  "copyToClipboard": "复制到剪贴板",
-  "copyFailed": "复制到剪贴板失败",
-  "moreOptions": "更多选项",
-  "moreActions": "更多操作",
-  "moveToFolder": "移至文件夹",
-  "deleteSnippet": "删除片段",
-  "deleteSnippetConfirm": "删除代码片段“{{name}}”？",
-  "deleteSuccess": "代码片段已删除",
-  "delete": "删除",
-  "folderActions": "文件夹操作",
-  "addSnippetHere": "这里新增了一段代码片段。",
-  "deleteFolder": "删除文件夹",
-  "deleteFolderConfirm": "删除文件夹“{{name}}”？它的代码片段会移出该文件夹。",
-  "createFolderDescription": "将相关的片段归类在一起。",
-  "editFolderDescription": "更改此文件夹的名称、颜色或图标。",
-  "folderColorLabel": "颜色",
-  "loadFailed": "代码片段加载失败",
-  "importSkipExisting": "导入（跳过现有）",
-  "importOverwrite": "导入（覆盖现有内容）",
-  "importInvalidFile": "该文件不是有效的代码片段导出文件。",
-  "importSuccess": "已导入 {{imported}}，已更新 {{updated}}，已跳过 {{skipped}}",
-  "exportSnippets": "导出代码片段",
-  "exportSuccess": "导出的代码片段",
-  "exportFailed": "导出代码片段失败",
-  "expandAll": "展开所有文件夹",
-  "collapseAll": "收起所有文件夹",
-  "docsLink": "文档",
-  "clearSearch": "清除搜索",
-  "noSearchResults": "没有找到与您的搜索匹配的摘要",
-  "emptyTitle": "目前还没有代码片段",
-  "emptyDescription": "保存您经常运行的命令，然后一键在终端中运行它们。",
-  "shareSnippet": "分享片段",
-  "shareFolder": "共享文件夹",
-  "shareExpiry": "过期时间",
-  "shareExpiryOptions": {
-    "h0": "从未",
-    "h1": "1小时内",
-    "h24": "1天",
-    "h168": "7天后",
-    "h720": "30天后"
-  },
-  "shareButton": "共享",
-  "shareSuccess": "与 {{count}} 共享",
-  "shareFailed": "共享失败",
-  "shareLoadFailed": "共享详情加载失败",
-  "currentAccess": "当前访问权限",
-  "notSharedYet": "尚未与任何人分享",
-  "revokeAccess": "吊销",
-  "revokeSuccess": "访问权限已撤销",
-  "revokeFailed": "撤销访问权限失败",
-  "close": "关闭",
-  "targetHostsLabel": "目标主机",
-  "targetHostsHint": "选择要直接运行此命令的主机，无需打开终端。留空则在活动终端中运行。",
-  "clearTargetHosts": "清除",
-  "noHostsAvailable": "暂无可用主机",
-  "searchHosts": "搜索主机",
-  "runOnTargets": "在目标主机上运行",
-  "executionResultTitle": "搜索“{{name}}”的结果",
-  "executionResultDescription": "来自每个目标主机的输出。",
-  "executionSuccess": "成功",
-  "executionFailed": "失败",
-  "directRunSuccess": "已在 {{count}} 台主机上运行 \"{{name}}\"",
-  "directRunPartialFail": "在某些主机上，“{{name}}” 失败。",
-  "reorderFailed": "重新排序代码片段失败",
-  "dropToRemoveFromFolder": "从这里拖出文件夹",
-  "shareSnippetTitle": "分享“{{name}}",
-  "shareFolderTitle": "共享文件夹“{{name}}",
-  "shareWith": "共享给",
-  "usersTab": "用户",
-  "rolesTab": "角色",
-  "shareSearchPlaceholder": "搜索用户或角色",
-  "shareNoMatches": "没有匹配项",
-  "shareWithCount": "分享给 {{count}}",
-  "shareFolderHint": "共享此文件夹中的所有代码片段。之后添加的代码片段不会自动共享。",
-  "shareFolderSummary": "此文件夹中共享的 {{count}} 代码片段",
-  "grantedBy": "授权者",
-  "expired": "已过期",
-  "variablesDialogTitle": "运行“{{name}}”",
-  "variablesDialogDescription": "运行此代码片段之前，请填写所需的值。",
-  "variablesPreviewLabel": "预览",
-  "variablesConfirmButton": "运行",
-  "keybindings": {
-    "runSnippet": "运行现有代码片段",
-    "snippetLabel": "片段",
-    "selectSnippet": "选择代码片段",
-    "snippetMissing": "未找到代码片段",
-    "snippetRequired": "选择代码片段"
-  },
-  "paletteHintRun": "在活动终端标签页中运行",
-  "host": {
-    "startupTitle": "启动代码片段",
-    "quickActionsTitle": "快速操作",
-    "quickActionsDescription": "快速操作以按钮形式显示在主机指标工具栏中，以便一键执行命令。",
-    "noQuickActions": "尚无快速操作。",
-    "buttonLabel": "按钮标签",
-    "selectSnippet": "选择代码片段……",
-    "addQuickAction": "添加操作",
-    "tabTitle": "代码片段",
-    "startupDescription": "每次连接到此主机时，都会在终端中运行。诸如 $HOST 之类的变量会被填充；需要输入信息的代码片段会被跳过。",
-    "none": "全不选",
-    "removeQuickAction": "快速行动"
-  },
-  "quickActions": {
-    "running": "正在执行 {{name}}...",
-    "succeeded": "{{name}} 执行成功",
-    "failed": "{{name}} 执行失败",
-    "error": "执行 {{name}} 失败"
-  },
-  "paletteHintPaste": "粘贴到当前终端选项卡中",
-  "targetTerminals": "跑进",
-  "targetTerminalsHint": "可选，否则为活动选项卡",
-  "selectAll": "全部",
-  "selectNone": "全不选",
-  "plugin": {
-    "name": "代码片段"
-  }
-}
diff --git a/plugins/snippets/locales/translated/zh_TW.json b/plugins/snippets/locales/translated/zh_TW.json
deleted file mode 100644
index 6fb46eb17..000000000
--- a/plugins/snippets/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,238 +0,0 @@
-{
-  "nav": {
-    "snippets": "程式碼片段"
-  },
-  "onboarding": {
-    "feature_snippets": "指令片段",
-    "feature_snippets_desc": "儲存您經常執行的命令，並一鍵將其發送到終端。"
-  },
-  "permissions": {
-    "view": {
-      "title": "查看摘要",
-      "description": "查看您自己的程式碼片段、筆記和分享的程式碼片段。"
-    },
-    "create": {
-      "title": "建立程式碼片段",
-      "description": "建立新的程式碼片段、筆記和資料夾。"
-    },
-    "edit": {
-      "title": "編輯片段",
-      "description": "重新命名或更改現有程式碼片段和資料夾。"
-    },
-    "delete": {
-      "title": "刪除片段",
-      "description": "刪除程式碼片段和資料夾。"
-    },
-    "share": {
-      "title": "分享片段",
-      "description": "與其他使用者或角色共用程式碼片段和資料夾。"
-    }
-  },
-  "settings": {
-    "foldersCollapsed": {
-      "label": "預設收合資料夾",
-      "description": "打開程式碼片段面板時，每個程式碼片段資料夾預設為折疊狀態。"
-    },
-    "showCommands": {
-      "label": "顯示命令",
-      "description": "在程式碼片段名稱下方顯示每個程式碼片段指令的第一行。"
-    },
-    "confirmExecution": {
-      "label": "運行前請確認",
-      "description": "在終端機運行命令片段之前，請先詢問。"
-    }
-  },
-  "cancel": "取消",
-  "loading": "載入中...",
-  "searchPlaceholder": "搜尋指令片段",
-  "newFolder": "新資料夾",
-  "newSnippet": "新片段",
-  "noFolder": "無資料夾",
-  "noSnippetsInFolder": "此資料夾中無指令片段",
-  "noTerminalTabsOpen": "未開啟任何終端標籤頁",
-  "run": "執行",
-  "pasteToTerminal": "貼上到終端",
-  "copySuccess": "已複製到剪貼簿",
-  "importExport": "匯入 / 匯出",
-  "importFailed": "匯入片段失敗",
-  "nameLabel": "名稱",
-  "namePlaceholder": "片段名稱",
-  "descriptionLabel": "說明",
-  "descriptionPlaceholder": "選用說明",
-  "folderLabel": "資料夾",
-  "typeLabel": "類型",
-  "typeCommand": "指令",
-  "typeNote": "筆記",
-  "commandLabel": "指令",
-  "commandPlaceholder": "要執行的命令，例如 systemctl status $HOST",
-  "noteLabel": "筆記",
-  "notePlaceholder": "要貼上到終端中的文本",
-  "createSnippetTitle": "建立程式碼片段",
-  "createSnippetButton": "建立程式碼片段",
-  "createSuccess": "已建立程式碼片段",
-  "createFailed": "建立指令片段失敗",
-  "editSnippetTitle": "編輯片段",
-  "saveSnippetButton": "儲存程式碼片段",
-  "updateSuccess": "程式碼片段已更新",
-  "updateFailed": "更新指令片段失敗",
-  "deleteFailed": "刪除指令片段失敗",
-  "createFolderTitle": "建立資料夾",
-  "createFolderButton": "建立資料夾",
-  "folderCreateSuccess": "已建立資料夾",
-  "folderCreateFailed": "建立資料夾失敗",
-  "editFolderTitle": "編輯資料夾",
-  "saveFolderButton": "儲存資料夾",
-  "folderEditSuccess": "資料夾已更新",
-  "folderEditFailed": "更新資料夾失敗",
-  "folderNameLabel": "資料夾名稱",
-  "folderNamePlaceholder": "資料夾名稱",
-  "folderIconLabel": "圖示",
-  "folderDeleteSuccess": "資料夾已刪除",
-  "folderDeleteFailed": "刪除資料夾失敗",
-  "confirmRunMessage": "執行 \"{{name}}\"？",
-  "confirmRunButton": "執行",
-  "runSuccess": "在 {{count}} 終端機上執行“{{name}}”",
-  "pasteSuccess": "已將「{{name}}」貼到 {{count}} 終端機中",
-  "admin": {
-    "tabTitle": "指令片段",
-    "count": "{{count}} 個片段",
-    "add": "新增片段",
-    "namePlaceholder": "片段名稱",
-    "contentPlaceholder": "指令內容",
-    "folderPlaceholder": "資料夾（可選）",
-    "empty": "此使用者沒有任何片段",
-    "deleteConfirm": "刪除屬於 {{username}} 的片段「{{name}}」？",
-    "deleted": "片段已刪除",
-    "deleteFailed": "刪除指令片段失敗",
-    "requiredFields": "片段名稱與內容為必填",
-    "saved": "片段已儲存",
-    "saveFailed": "無法儲存片段",
-    "saving": "儲存中...",
-    "save": "儲存"
-  },
-  "backToSnippets": "返回片段",
-  "settingsTitle": "程式碼片段設定",
-  "settingsDisplayTitle": "展示",
-  "settingsBehaviorTitle": "行為",
-  "typeCommandHint": "在當前終端中運行。",
-  "typeNoteHint": "無需運行即可貼上到活動終端中。",
-  "variablesHint": "變數： $HOST、 $USER、 $PORT、 $NAME、${INPUT_1:Label}",
-  "doubleClickToRun": "按兩下運行",
-  "sharedBadge": "已分享",
-  "copyToClipboard": "複製到剪貼簿",
-  "copyFailed": "複製到剪貼簿失敗",
-  "moreOptions": "更多選項",
-  "moreActions": "更多動作",
-  "moveToFolder": "移至資料夾",
-  "deleteSnippet": "刪除片段",
-  "deleteSnippetConfirm": "刪除程式碼片段“{{name}}”？",
-  "deleteSuccess": "片段已刪除",
-  "delete": "刪除",
-  "folderActions": "資料夾操作",
-  "addSnippetHere": "這裡新增了一段程式碼片段。",
-  "deleteFolder": "刪除資料夾",
-  "deleteFolderConfirm": "刪除資料夾“{{name}}”？它的程式碼片段會移出該資料夾。",
-  "createFolderDescription": "將相關的片段歸類在一起。",
-  "editFolderDescription": "變更此資料夾的名稱、顏色或圖示。",
-  "folderColorLabel": "顏色",
-  "loadFailed": "程式碼片段載入失敗",
-  "importSkipExisting": "匯入（跳過已存在項目）",
-  "importOverwrite": "導入（覆蓋現有內容）",
-  "importInvalidFile": "該檔案不是有效的程式碼片段匯出檔案。",
-  "importSuccess": "已匯入 {{imported}}，已更新 {{updated}}，已跳過 {{skipped}}",
-  "exportSnippets": "匯出程式碼片段",
-  "exportSuccess": "導出的程式碼片段",
-  "exportFailed": "匯出片段失敗",
-  "expandAll": "展開所有資料夾",
-  "collapseAll": "收合所有資料夾",
-  "docsLink": "說明文件",
-  "clearSearch": "清除搜尋",
-  "noSearchResults": "沒有找到與您的搜尋相符的摘要",
-  "emptyTitle": "目前還沒有片段",
-  "emptyDescription": "儲存您經常執行的命令，然後一鍵在終端機中執行它們。",
-  "shareSnippet": "分享片段",
-  "shareFolder": "共享資料夾",
-  "shareExpiry": "到期",
-  "shareExpiryOptions": {
-    "h0": "從未",
-    "h1": "1小時內",
-    "h24": "1天",
-    "h168": "7天后",
-    "h720": "30天后"
-  },
-  "shareButton": "分享",
-  "shareSuccess": "與 {{count}} 分享",
-  "shareFailed": "分享失敗",
-  "shareLoadFailed": "共享詳情加載失敗",
-  "currentAccess": "目前存取權限",
-  "notSharedYet": "尚未與任何人分享",
-  "revokeAccess": "撤銷",
-  "revokeSuccess": "已撤銷存取權限",
-  "revokeFailed": "撤銷存取失敗",
-  "close": "關閉",
-  "targetHostsLabel": "目標主機",
-  "targetHostsHint": "選擇要直接執行此命令的主機，無需開啟終端機。留空則在活動終端機中運作。",
-  "clearTargetHosts": "清除",
-  "noHostsAvailable": "暫無可用主機",
-  "searchHosts": "搜尋主機",
-  "runOnTargets": "在目標主機上執行",
-  "executionResultTitle": "搜尋「{{name}}」的結果",
-  "executionResultDescription": "來自每個目標主機的輸出。",
-  "executionSuccess": "成功",
-  "executionFailed": "失敗",
-  "directRunSuccess": "已在 {{count}} 台主機上執行「{{name}}」",
-  "directRunPartialFail": "在某些主機上，“{{name}}” 失敗。",
-  "reorderFailed": "重新排序程式碼片段失敗",
-  "dropToRemoveFromFolder": "從這裡拖出資料夾",
-  "shareSnippetTitle": "分享「{{name}}",
-  "shareFolderTitle": "共用資料夾「{{name}}",
-  "shareWith": "分享對象",
-  "usersTab": "使用者",
-  "rolesTab": "角色",
-  "shareSearchPlaceholder": "搜尋使用者或角色",
-  "shareNoMatches": "沒有匹配項",
-  "shareWithCount": "分享給 {{count}}",
-  "shareFolderHint": "共用此資料夾中的所有程式碼片段。之後新增的程式碼片段不會自動共用。",
-  "shareFolderSummary": "此資料夾中共用的 {{count}} 程式碼片段",
-  "grantedBy": "授予者",
-  "expired": "已過期",
-  "variablesDialogTitle": "運行“{{name}}",
-  "variablesDialogDescription": "在運行此程式碼片段之前，請填寫所需的值。",
-  "variablesPreviewLabel": "預覽",
-  "variablesConfirmButton": "執行",
-  "keybindings": {
-    "runSnippet": "運行現有程式碼片段",
-    "snippetLabel": "片段",
-    "selectSnippet": "選擇一段文字",
-    "snippetMissing": "未找到程式碼片段",
-    "snippetRequired": "選擇一段文字"
-  },
-  "paletteHintRun": "在活動終端選項卡中運行",
-  "host": {
-    "startupTitle": "啟動程式碼片段",
-    "quickActionsTitle": "快速操作",
-    "quickActionsDescription": "快速動作會以按鈕形式顯示在主機計量工具列上，可一鍵執行指令。",
-    "noQuickActions": "尚無快速動作。",
-    "buttonLabel": "按鈕標籤",
-    "selectSnippet": "選取程式碼片段...",
-    "addQuickAction": "新增動作",
-    "tabTitle": "指令片段",
-    "startupDescription": "每次連接到此主機時，都會在終端機中執行。諸如 $HOST 之類的變數會被填入；需要輸入資訊的程式碼片段會被跳過。",
-    "none": "取消全選",
-    "removeQuickAction": "快速行動"
-  },
-  "quickActions": {
-    "running": "正在執行 {{name}}...",
-    "succeeded": "{{name}} 已成功完成",
-    "failed": "{{name}} 失敗",
-    "error": "無法執行 {{name}}"
-  },
-  "paletteHintPaste": "貼上到目前終端選項卡中",
-  "targetTerminals": "跑進",
-  "targetTerminalsHint": "可選，否則為活動選項卡",
-  "selectAll": "全選",
-  "selectNone": "取消全選",
-  "plugin": {
-    "name": "指令片段"
-  }
-}
diff --git a/plugins/snippets/manifest.json b/plugins/snippets/manifest.json
deleted file mode 100644
index 7f6a2ad76..000000000
--- a/plugins/snippets/manifest.json
+++ /dev/null
@@ -1,154 +0,0 @@
-{
-  "id": "snippets",
-  "name": "Snippets",
-  "version": "1.0.0",
-  "description": "Save commands and notes, then run or paste them into a terminal. Supports variables and sharing.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Productivity",
-  "icon": "Play",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "db:own",
-    "network:serve",
-    "ssh:connect",
-    "credentials:use",
-    "hosts:write",
-    "ui:surface",
-    "events:core",
-    "db:core-refs"
-  ],
-  "provides": [
-    {
-      "service": "snippets.access",
-      "version": "1.0.0",
-      "permission": "snippets.view"
-    }
-  ],
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"],
-  "contributes": {
-    "panels": [
-      {
-        "id": "snippets",
-        "titleKey": "nav.snippets",
-        "icon": "Play"
-      }
-    ],
-    "permissions": [
-      {
-        "name": "view",
-        "titleKey": "permissions.view.title",
-        "descriptionKey": "permissions.view.description",
-        "defaultRoles": ["user"]
-      },
-      {
-        "name": "create",
-        "titleKey": "permissions.create.title",
-        "descriptionKey": "permissions.create.description",
-        "defaultRoles": ["user"]
-      },
-      {
-        "name": "edit",
-        "titleKey": "permissions.edit.title",
-        "descriptionKey": "permissions.edit.description",
-        "defaultRoles": ["user"]
-      },
-      {
-        "name": "delete",
-        "titleKey": "permissions.delete.title",
-        "descriptionKey": "permissions.delete.description",
-        "defaultRoles": ["user"]
-      },
-      {
-        "name": "share",
-        "titleKey": "permissions.share.title",
-        "descriptionKey": "permissions.share.description",
-        "defaultRoles": ["user"]
-      }
-    ],
-    "settings": {
-      "user": [
-        {
-          "key": "foldersCollapsed",
-          "type": "boolean",
-          "labelKey": "settings.foldersCollapsed.label",
-          "descriptionKey": "settings.foldersCollapsed.description",
-          "default": true
-        },
-        {
-          "key": "showCommands",
-          "type": "boolean",
-          "labelKey": "settings.showCommands.label",
-          "descriptionKey": "settings.showCommands.description",
-          "default": true
-        },
-        {
-          "key": "confirmExecution",
-          "type": "boolean",
-          "labelKey": "settings.confirmExecution.label",
-          "descriptionKey": "settings.confirmExecution.description",
-          "default": false
-        }
-      ],
-      "host": {
-        "editorGroup": "ssh",
-        "editorOrder": 15,
-        "fields": [
-          {
-            "key": "startupSnippetId",
-            "type": "number",
-            "labelKey": "host.startupTitle",
-            "descriptionKey": "host.startupDescription",
-            "hidden": true,
-            "min": 1,
-            "shareRead": "view",
-            "defaultLevels": ["user", "folder"]
-          },
-          {
-            "key": "quickActions",
-            "type": "json",
-            "labelKey": "host.quickActionsTitle",
-            "descriptionKey": "host.quickActionsDescription",
-            "hidden": true,
-            "default": [],
-            "shareRead": "view",
-            "defaultLevels": ["user", "folder"]
-          }
-        ]
-      }
-    },
-    "syncEntities": ["snippetFolders", "snippets"],
-    "keybindingActions": [
-      {
-        "id": "runSnippet",
-        "params": {
-          "snippetId": {
-            "type": "string",
-            "pattern": "^[0-9]+$",
-            "maxLength": 20,
-            "syncEntity": "snippets"
-          },
-          "appendEnter": {
-            "type": "boolean"
-          }
-        }
-      }
-    ],
-    "http": {
-      "adminImpersonation": true
-    },
-    "uses": [
-      "host-metrics.toolbar",
-      "terminal.sendToActive",
-      "terminal.sendToSession",
-      "terminal.listSessions"
-    ]
-  }
-}
diff --git a/plugins/snippets/migrations/mysql/0001_adopt_snippets_tables.sql b/plugins/snippets/migrations/mysql/0001_adopt_snippets_tables.sql
deleted file mode 100644
index fa81ab2a9..000000000
--- a/plugins/snippets/migrations/mysql/0001_adopt_snippets_tables.sql
+++ /dev/null
@@ -1,43 +0,0 @@
--- snippets 0001: adopt_snippets_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `snippets` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `name` text NOT NULL,
-  `content` text NOT NULL,
-  `description` text,
-  `folder` text,
-  `order` int NOT NULL DEFAULT 0,
-  `sync_id` varchar(255) UNIQUE,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `host_filter` text,
-  `is_note` boolean NOT NULL DEFAULT false,
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `snippets` TO `p_snippets_snippets`;
-CREATE TABLE IF NOT EXISTS `snippet_folders` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `name` text NOT NULL,
-  `color` text,
-  `icon` text,
-  `sync_id` varchar(255) UNIQUE,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `snippet_folders` TO `p_snippets_snippet_folders`;
-CREATE TABLE IF NOT EXISTS `snippet_access` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `snippet_id` int NOT NULL,
-  `user_id` varchar(255),
-  `role_id` int,
-  `granted_by` varchar(255) NOT NULL,
-  `permission_level` text NOT NULL DEFAULT ('view'),
-  `expires_at` text,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`granted_by`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `snippet_access` TO `p_snippets_snippet_access`;
diff --git a/plugins/snippets/migrations/postgres/0001_adopt_snippets_tables.sql b/plugins/snippets/migrations/postgres/0001_adopt_snippets_tables.sql
deleted file mode 100644
index 7c7a0106a..000000000
--- a/plugins/snippets/migrations/postgres/0001_adopt_snippets_tables.sql
+++ /dev/null
@@ -1,47 +0,0 @@
--- snippets 0001: adopt_snippets_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "snippets" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "name" text NOT NULL,
-  "content" text NOT NULL,
-  "description" text,
-  "folder" text,
-  "order" integer NOT NULL DEFAULT 0,
-  "sync_id" varchar(255) UNIQUE,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "host_filter" text,
-  "is_note" boolean NOT NULL DEFAULT false,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_snippets_user_id" ON "snippets" ("user_id");
-ALTER TABLE "snippets" RENAME TO "p_snippets_snippets";
-CREATE TABLE IF NOT EXISTS "snippet_folders" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "name" text NOT NULL,
-  "color" text,
-  "icon" text,
-  "sync_id" varchar(255) UNIQUE,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "snippet_folders" RENAME TO "p_snippets_snippet_folders";
-CREATE TABLE IF NOT EXISTS "snippet_access" (
-  "id" serial PRIMARY KEY,
-  "snippet_id" integer NOT NULL,
-  "user_id" varchar(255),
-  "role_id" integer,
-  "granted_by" varchar(255) NOT NULL,
-  "permission_level" text NOT NULL DEFAULT 'view',
-  "expires_at" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("granted_by") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_snippet_access_user_id" ON "snippet_access" ("user_id");
-CREATE INDEX IF NOT EXISTS "idx_snippet_access_snippet_id" ON "snippet_access" ("snippet_id");
-CREATE INDEX IF NOT EXISTS "idx_snippet_access_role_id" ON "snippet_access" ("role_id");
-ALTER TABLE "snippet_access" RENAME TO "p_snippets_snippet_access";
diff --git a/plugins/snippets/migrations/snapshot.json b/plugins/snippets/migrations/snapshot.json
deleted file mode 100644
index 3f8f00f75..000000000
--- a/plugins/snippets/migrations/snapshot.json
+++ /dev/null
@@ -1,162 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "snippets": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "name": {
-          "type": "text",
-          "notNull": true
-        },
-        "content": {
-          "type": "text",
-          "notNull": true
-        },
-        "description": {
-          "type": "text"
-        },
-        "folder": {
-          "type": "text"
-        },
-        "order": {
-          "type": "integer",
-          "notNull": true,
-          "defaultValue": 0
-        },
-        "syncId": {
-          "type": "varchar",
-          "length": 255,
-          "unique": true
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "updatedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "hostFilter": {
-          "type": "text"
-        },
-        "isNote": {
-          "type": "boolean",
-          "notNull": true,
-          "defaultValue": false
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_snippets_user_id",
-          "columns": ["userId"]
-        }
-      ],
-      "adopts": "snippets"
-    },
-    "snippet_folders": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "name": {
-          "type": "text",
-          "notNull": true
-        },
-        "color": {
-          "type": "text"
-        },
-        "icon": {
-          "type": "text"
-        },
-        "syncId": {
-          "type": "varchar",
-          "length": 255,
-          "unique": true
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "updatedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [],
-      "adopts": "snippet_folders"
-    },
-    "snippet_access": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "snippetId": {
-          "type": "integer",
-          "notNull": true
-        },
-        "userId": {
-          "type": "varchar",
-          "length": 255
-        },
-        "roleId": {
-          "type": "integer"
-        },
-        "grantedBy": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "permissionLevel": {
-          "type": "text",
-          "notNull": true,
-          "defaultValue": "view"
-        },
-        "expiresAt": {
-          "type": "timestamp"
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_snippet_access_user_id",
-          "columns": ["userId"]
-        },
-        {
-          "name": "idx_snippet_access_snippet_id",
-          "columns": ["snippetId"]
-        },
-        {
-          "name": "idx_snippet_access_role_id",
-          "columns": ["roleId"]
-        }
-      ],
-      "adopts": "snippet_access"
-    }
-  }
-}
diff --git a/plugins/snippets/migrations/sqlite/0001_adopt_snippets_tables.sql b/plugins/snippets/migrations/sqlite/0001_adopt_snippets_tables.sql
deleted file mode 100644
index 545da73e4..000000000
--- a/plugins/snippets/migrations/sqlite/0001_adopt_snippets_tables.sql
+++ /dev/null
@@ -1,47 +0,0 @@
--- snippets 0001: adopt_snippets_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "snippets" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "name" text NOT NULL,
-  "content" text NOT NULL,
-  "description" text,
-  "folder" text,
-  "order" integer NOT NULL DEFAULT 0,
-  "sync_id" text UNIQUE,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "host_filter" text,
-  "is_note" integer NOT NULL DEFAULT 0,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_snippets_user_id" ON "snippets" ("user_id");
-ALTER TABLE "snippets" RENAME TO "p_snippets_snippets";
-CREATE TABLE IF NOT EXISTS "snippet_folders" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "name" text NOT NULL,
-  "color" text,
-  "icon" text,
-  "sync_id" text UNIQUE,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "snippet_folders" RENAME TO "p_snippets_snippet_folders";
-CREATE TABLE IF NOT EXISTS "snippet_access" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "snippet_id" integer NOT NULL,
-  "user_id" text,
-  "role_id" integer,
-  "granted_by" text NOT NULL,
-  "permission_level" text NOT NULL DEFAULT 'view',
-  "expires_at" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("granted_by") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_snippet_access_user_id" ON "snippet_access" ("user_id");
-CREATE INDEX IF NOT EXISTS "idx_snippet_access_snippet_id" ON "snippet_access" ("snippet_id");
-CREATE INDEX IF NOT EXISTS "idx_snippet_access_role_id" ON "snippet_access" ("role_id");
-ALTER TABLE "snippet_access" RENAME TO "p_snippets_snippet_access";
diff --git a/plugins/snippets/package.json b/plugins/snippets/package.json
deleted file mode 100644
index 57452fa3d..000000000
--- a/plugins/snippets/package.json
+++ /dev/null
@@ -1,34 +0,0 @@
-{
-  "name": "@termix-plugin/snippets",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "lucide-react": "^1.33.0"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "react": "^19.2.8",
-    "sonner": "^2.0.8",
-    "ssh2": "^1.17.0"
-  }
-}
diff --git a/plugins/snippets/src/backend/execution.ts b/plugins/snippets/src/backend/execution.ts
deleted file mode 100644
index 3fba5054a..000000000
--- a/plugins/snippets/src/backend/execution.ts
+++ /dev/null
@@ -1,32 +0,0 @@
-export interface SnippetExecutionResult {
-  success: boolean;
-  output: string;
-  error?: string;
-}
-
-export { resolveSnippetContent as resolveSnippetCommand } from "../shared/variables.js";
-export type { SnippetHostContext as SnippetHostVars } from "../shared/variables.js";
-
-export function getSnippetExecutionTimeoutMs(
-  value = process.env.SNIPPET_EXECUTION_TIMEOUT_SECONDS,
-): number | undefined {
-  if (value === undefined || value.trim() === "") return undefined;
-
-  const seconds = Number(value);
-  if (!Number.isFinite(seconds) || seconds <= 0) return undefined;
-
-  return seconds * 1000;
-}
-
-export function createSnippetExecutionResult(
-  exitCode: number | null,
-  output: string,
-  errorOutput: string,
-): SnippetExecutionResult {
-  const success = exitCode === 0 || (exitCode === null && !errorOutput);
-  return {
-    success,
-    output,
-    ...(errorOutput ? { error: errorOutput } : {}),
-  };
-}
diff --git a/plugins/snippets/src/backend/host-import.ts b/plugins/snippets/src/backend/host-import.ts
deleted file mode 100644
index 9af3cd611..000000000
--- a/plugins/snippets/src/backend/host-import.ts
+++ /dev/null
@@ -1,117 +0,0 @@
-import {
-  PLUGIN_ID,
-  readQuickActions,
-  readStartupSnippetId,
-} from "../shared/host-settings.js";
-
-/**
- * Registered as "snippets.hostImportNormalizer": a 2.8 or early 2.9 export
- * carried quick actions as a host field and the startup snippet inside
- * terminalConfig. An export that already carries this plugin's
- * pluginSettings has had them written by core.
- */
-export function hostImportNormalizer(
-  raw: Record<string, unknown>,
-): Record<string, unknown> | null {
-  const carried = (raw.pluginSettings as Record<string, unknown> | undefined)?.[
-    PLUGIN_ID
-  ];
-  if (
-    carried &&
-    typeof carried === "object" &&
-    Object.keys(carried).length > 0
-  ) {
-    return null;
-  }
-
-  const values: Record<string, unknown> = {};
-  const quickActions = readQuickActions(raw.quickActions);
-  if (quickActions.length > 0) values.quickActions = quickActions;
-
-  let terminalConfig = raw.terminalConfig;
-  if (typeof terminalConfig === "string") {
-    try {
-      terminalConfig = JSON.parse(terminalConfig);
-    } catch {
-      terminalConfig = null;
-    }
-  }
-  const startup = readStartupSnippetId(
-    (terminalConfig as { startupSnippetId?: unknown } | null)?.startupSnippetId,
-  );
-  if (startup !== null) values.startupSnippetId = startup;
-
-  return Object.keys(values).length > 0 ? values : null;
-}
-
-/**
- * Registered as "snippets.hostPayloadLegacy": quickActions and
- * terminalConfig.startupSnippetId in their 2.8 shape, for clients that
- * still read them (Termix-Mobile). Remove once the mobile app reads
- * pluginSettings.snippets.
- */
-export function hostPayloadLegacy(
-  values: Record<string, unknown>,
-): Record<string, unknown> {
-  const out: Record<string, unknown> = {
-    quickActions: readQuickActions(values.quickActions),
-  };
-  const startup = readStartupSnippetId(values.startupSnippetId);
-  if (startup !== null) out.terminalConfig = { startupSnippetId: startup };
-  return out;
-}
-
-/** What hostSettingsSync needs from the repository. */
-export interface SnippetSyncLookup {
-  findSyncIdById: (id: number) => Promise<string | null>;
-  findIdBySyncId: (syncId: string) => Promise<number | null>;
-}
-
-/**
- * Registered as "snippets.hostSettingsSync": both host settings hold local
- * snippet ids, so remote sync carries the snippets' sync ids instead, which
- * are the same on both sides.
- */
-export function createHostSettingsSync(lookup: SnippetSyncLookup) {
-  const toSyncId = async (id: number) => lookup.findSyncIdById(id);
-  const toId = async (value: unknown) =>
-    typeof value === "string" && value ? lookup.findIdBySyncId(value) : null;
-
-  return {
-    exportValue: async (key: string, value: unknown) => {
-      if (key === "startupSnippetId") {
-        const id = readStartupSnippetId(value);
-        return id === null ? null : await toSyncId(id);
-      }
-      if (key === "quickActions") {
-        const actions = readQuickActions(value);
-        const out = [];
-        for (const action of actions) {
-          const syncId = await toSyncId(action.snippetId);
-          if (syncId) out.push({ name: action.name, snippetId: syncId });
-        }
-        return out;
-      }
-      return value;
-    },
-    importValue: async (key: string, value: unknown) => {
-      if (key === "startupSnippetId") return await toId(value);
-      if (key === "quickActions") {
-        if (!Array.isArray(value)) return [];
-        const out = [];
-        for (const entry of value) {
-          const row = (entry ?? {}) as { name?: unknown; snippetId?: unknown };
-          const id = await toId(row.snippetId);
-          if (id !== null) {
-            out.push({
-              name: typeof row.name === "string" ? row.name : "",
-              snippetId: id,
-            });
-          }
-        }
-        return out;
-      }
-      return value;
-    },
-  };
-}
diff --git a/plugins/snippets/src/backend/index.ts b/plugins/snippets/src/backend/index.ts
deleted file mode 100644
index ec66438ea..000000000
--- a/plugins/snippets/src/backend/index.ts
+++ /dev/null
@@ -1,191 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { snippetAccess, snippetFolders, snippets } from "./tables.js";
-import { createSnippetRepository } from "./repository.js";
-import { registerSnippetRoutes } from "./routes.js";
-import {
-  extractSnippetInputs,
-  resolveSnippetContent,
-} from "../shared/variables.js";
-import {
-  createHostSettingsSync,
-  hostImportNormalizer,
-  hostPayloadLegacy,
-} from "./host-import.js";
-
-/** What other plugins get from ctx.services.get("snippets.access", {userId}). */
-export interface SnippetsService {
-  /** The calling user's own snippets (not shared ones), full content included. */
-  list: () => Promise<
-    Array<{
-      id: number;
-      name: string;
-      content: string;
-      description: string | null;
-      isNote: boolean;
-      folder: string | null;
-    }>
-  >;
-  /** A snippet the calling user owns or was shared with them. */
-  get: (id: number) => Promise<{
-    id: number;
-    name: string;
-    content: string;
-    isNote: boolean;
-  } | null>;
-  resolveCommand: (
-    id: number,
-    vars: { ip?: string; username?: string; port?: number; name?: string },
-    inputValues?: Record<string, string>,
-  ) => Promise<string | null>;
-  /** Creates a snippet owned by the calling user. */
-  create: (input: {
-    name: string;
-    content: string;
-    description?: string | null;
-    folder?: string | null;
-  }) => Promise<{ id: number; name: string }>;
-  /** Updates a snippet the calling user owns. Throws if not found. */
-  update: (
-    id: number,
-    changes: {
-      name?: string;
-      content?: string;
-      description?: string | null;
-      folder?: string | null;
-    },
-  ) => Promise<void>;
-  /** Deletes a snippet the calling user owns. Returns whether one was deleted. */
-  remove: (id: number) => Promise<boolean>;
-}
-
-export async function activate(ctx: PluginContext) {
-  const snippetsTable = await ctx.db.define(snippets);
-  const foldersTable = await ctx.db.define(snippetFolders);
-  const accessTable = await ctx.db.define(snippetAccess);
-
-  const repo = createSnippetRepository(
-    ctx.db,
-    snippetsTable,
-    foldersTable,
-    accessTable,
-  );
-
-  registerSnippetRoutes(ctx.http.router<Router>(), repo, ctx);
-
-  ctx.sync.registerEntity({
-    type: "snippetFolders",
-    table: foldersTable,
-    order: 40,
-  });
-  ctx.sync.registerEntity({
-    type: "snippets",
-    table: snippetsTable,
-    order: 60,
-  });
-
-  // Host settings that name a snippet by its local id, and the 2.8 host
-  // fields they came from. Keybindings name one through the runSnippet
-  // declaration in the manifest, which core translates over sync.
-  ctx.registry.provide("snippets.hostImportNormalizer", hostImportNormalizer);
-  ctx.registry.provide("snippets.hostPayloadLegacy", hostPayloadLegacy);
-  ctx.registry.provide(
-    "snippets.hostSettingsSync",
-    createHostSettingsSync(repo),
-  );
-
-  // $HOST and $INPUT_n handling for commands other plugins run (fleets). A
-  // pure function, so it goes through the registry rather than a service
-  // gated on snippets.view.
-  ctx.registry.provide("snippets.variables", {
-    resolve: resolveSnippetContent,
-    extractInputs: extractSnippetInputs,
-  });
-
-  // The user row survives a password-reset data wipe, so it never triggers
-  // our refUser() cascade; this topic is core's way of telling us to drop
-  // our copy of that user's data too.
-  ctx.events.on("user.data_wiped", (payload) => {
-    const userId = (payload as { userId?: string } | null)?.userId;
-    if (userId) void repo.deleteByUserId(userId);
-  });
-
-  async function findAccessible(userId: string, id: number) {
-    const owned = await repo.findOwnedById(userId, id);
-    if (owned) return owned;
-    const roleIds = await repo.listUserRoleIds(userId);
-    return repo.findAccessibleSharedSnippet(id, userId, roleIds);
-  }
-
-  // The service is gated on snippets.view; a write also needs the same
-  // permission its route requires, so a caller cannot write through here
-  // what the user could not write in the panel.
-  async function requirePermission(permission: string): Promise<void> {
-    if (!(await ctx.rbac.has(permission))) {
-      throw new Error(`Missing permission snippets.${permission}`);
-    }
-  }
-
-  const service: SnippetsService = {
-    list: async () => {
-      const userId = ctx.currentActor();
-      if (!userId) return [];
-      const owned = await repo.listOwnedSnippets(userId);
-      return owned.map((s) => ({
-        id: s.id,
-        name: s.name,
-        content: s.content,
-        description: s.description,
-        isNote: s.isNote,
-        folder: s.folder,
-      }));
-    },
-    get: async (id) => {
-      const userId = ctx.currentActor();
-      if (!userId) return null;
-      const snippet = await findAccessible(userId, id);
-      if (!snippet) return null;
-      return {
-        id: snippet.id,
-        name: snippet.name,
-        content: snippet.content,
-        isNote: snippet.isNote,
-      };
-    },
-    resolveCommand: async (id, vars, inputValues = {}) => {
-      const userId = ctx.currentActor();
-      if (!userId) return null;
-      const snippet = await findAccessible(userId, id);
-      if (!snippet) return null;
-      return resolveSnippetContent(snippet.content, vars, inputValues);
-    },
-    create: async (input) => {
-      const userId = ctx.currentActor();
-      if (!userId) throw new Error("snippets.access.create needs an actor");
-      await requirePermission("create");
-      const created = await repo.createSnippet(userId, input);
-      return { id: created.id, name: created.name };
-    },
-    update: async (id, changes) => {
-      const userId = ctx.currentActor();
-      if (!userId) throw new Error("snippets.access.update needs an actor");
-      await requirePermission("edit");
-      const result = await repo.updateSnippet(userId, id, changes);
-      if (!result) throw new Error("Snippet not found");
-    },
-    remove: async (id) => {
-      const userId = ctx.currentActor();
-      if (!userId) throw new Error("snippets.access.remove needs an actor");
-      await requirePermission("delete");
-      const existing = await repo.deleteSnippet(userId, id);
-      return !!existing;
-    },
-  };
-  ctx.services.provide("snippets.access", service);
-
-  ctx.log.info("Snippets routes mounted at /plugin-api/snippets");
-}
-
-export async function deactivate() {
-  // Everything above was registered through ctx and is disposed by core.
-}
diff --git a/plugins/snippets/src/backend/reorder.ts b/plugins/snippets/src/backend/reorder.ts
deleted file mode 100644
index 3bb74ee43..000000000
--- a/plugins/snippets/src/backend/reorder.ts
+++ /dev/null
@@ -1,29 +0,0 @@
-import type { SnippetReorderUpdate } from "./repository.js";
-
-type SnippetReorderRequestBody = {
-  snippets?: unknown;
-  updates?: unknown;
-};
-
-export function extractSnippetReorderUpdates(
-  body: unknown,
-): SnippetReorderUpdate[] | null {
-  if (!body || typeof body !== "object") {
-    return null;
-  }
-
-  const payload = body as SnippetReorderRequestBody;
-  // Keep accepting the legacy `updates` key so older clients do not break
-  // while the web and desktop helpers converge on `snippets`.
-  const snippetsUpdates = Array.isArray(payload.snippets)
-    ? payload.snippets
-    : Array.isArray(payload.updates)
-      ? payload.updates
-      : null;
-
-  if (!snippetsUpdates) {
-    return null;
-  }
-
-  return snippetsUpdates as SnippetReorderUpdate[];
-}
diff --git a/plugins/snippets/src/backend/repository.ts b/plugins/snippets/src/backend/repository.ts
deleted file mode 100644
index 290bf5e1b..000000000
--- a/plugins/snippets/src/backend/repository.ts
+++ /dev/null
@@ -1,917 +0,0 @@
-import { randomUUID } from "node:crypto";
-import {
-  and,
-  asc,
-  desc,
-  eq,
-  gte,
-  inArray,
-  isNull,
-  like,
-  or,
-  sql,
-} from "drizzle-orm";
-import type { PluginDatabase } from "@termix/plugin-sdk/backend";
-
-export interface SnippetRecord {
-  id: number;
-  userId: string;
-  name: string;
-  content: string;
-  description: string | null;
-  folder: string | null;
-  order: number;
-  syncId: string | null;
-  createdAt: string;
-  updatedAt: string;
-  hostFilter: string | null;
-  isNote: boolean;
-}
-
-export interface SnippetFolderRecord {
-  id: number;
-  userId: string;
-  name: string;
-  color: string | null;
-  icon: string | null;
-  syncId: string | null;
-  createdAt: string;
-  updatedAt: string;
-}
-
-export interface RenameSnippetFolderResult {
-  status: "renamed" | "missing" | "conflict";
-}
-
-export interface SnippetReorderUpdate {
-  id: number;
-  order: number;
-  folder?: string;
-}
-
-export interface NewSnippetInput {
-  name: string;
-  content: string;
-  description?: string | null;
-  folder?: string | null;
-  order?: number | null;
-  hostFilter?: unknown;
-  isNote?: boolean;
-}
-
-export interface SnippetUpdateInput {
-  name?: string;
-  content?: string;
-  description?: string | null;
-  folder?: string | null;
-  order?: number;
-  hostFilter?: unknown;
-  isNote?: boolean;
-}
-
-export interface UpdateSnippetResult {
-  existing: SnippetRecord;
-  updated: SnippetRecord;
-}
-
-export interface SnippetBulkImportResult {
-  snippetsImported: number;
-  snippetsSkipped: number;
-  snippetsUpdated: number;
-  foldersImported: number;
-  foldersSkipped: number;
-  failed: number;
-  errors: string[];
-}
-
-interface BulkImportSnippetInput {
-  name?: unknown;
-  content?: unknown;
-  description?: string | null;
-  folder?: string | null;
-  order?: unknown;
-  hostFilter?: string | null;
-}
-
-interface BulkImportFolderInput {
-  name?: unknown;
-  color?: string | null;
-  icon?: string | null;
-}
-
-export interface RbacAccessListItem {
-  id: number;
-  targetType: "user" | "role";
-  userId: string | null;
-  roleId: number | null;
-  username: string | null;
-  roleName: string | null;
-  roleDisplayName: string | null;
-  grantedBy: string;
-  grantedByUsername: string | null;
-  permissionLevel: string;
-  expiresAt: string | null;
-  createdAt: string;
-}
-
-export type SnippetAccessTarget =
-  | { targetType: "user"; targetUserId: string }
-  | { targetType: "role"; targetRoleId: number };
-
-export type UpsertSnippetAccessInput = SnippetAccessTarget & {
-  snippetId: number;
-  grantedBy: string;
-  expiresAt: string | null;
-};
-
-export interface RbacSharedSnippet {
-  id: number;
-  name: string;
-  content: string;
-  description: string | null;
-  folder: string | null;
-  ownerUsername: string;
-  permissionLevel: string;
-  expiresAt: string | null;
-}
-
-export interface RbacVisibleSharedSnippet extends RbacSharedSnippet {
-  userId: string;
-  order: number;
-  createdAt: string;
-  updatedAt: string;
-  isNote: boolean;
-}
-
-export interface RbacAccessibleSnippet extends RbacVisibleSharedSnippet {
-  hostFilter: string | null;
-}
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// The tables come from ctx.db.define/ctx.db.refs, which the SDK hands back
-// untyped, and the drizzle handle is the server's own. Typed at this module's
-// edge instead.
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-function isNonEmptyString(value: unknown): value is string {
-  return typeof value === "string" && value.trim().length > 0;
-}
-
-function toAccessListItem(
-  row: Omit<RbacAccessListItem, "targetType">,
-): RbacAccessListItem {
-  return { ...row, targetType: row.userId ? "user" : "role" };
-}
-
-export type SnippetRepository = ReturnType<typeof createSnippetRepository>;
-
-/**
- * Snippet, folder and sharing storage. Written without RETURNING so it runs
- * the same on all three engines: an insert or update is read back by id/sync
- * id rather than relying on `.returning()`.
- */
-export function createSnippetRepository(
-  db: PluginDatabase,
-  snippets: Table,
-  folders: Table,
-  access: Table,
-) {
-  const client = () => db.client<Drizzle>();
-  const refs = () =>
-    db.refs<{ users: Table; roles: Table; userRoles: Table }>();
-
-  async function findOwnedById(
-    userId: string,
-    snippetId: number,
-  ): Promise<SnippetRecord | null> {
-    const drizzle = await client();
-    const rows = await drizzle
-      .select()
-      .from(snippets)
-      .where(and(eq(snippets.id, snippetId), eq(snippets.userId, userId)))
-      .limit(1);
-    return rows[0] ?? null;
-  }
-
-  async function findFolderByName(
-    userId: string,
-    name: string,
-  ): Promise<SnippetFolderRecord | null> {
-    const drizzle = await client();
-    const rows = await drizzle
-      .select()
-      .from(folders)
-      .where(and(eq(folders.userId, userId), eq(folders.name, name)))
-      .limit(1);
-    return rows[0] ?? null;
-  }
-
-  async function maxOrderForFolder(
-    userId: string,
-    folder: string | null,
-  ): Promise<number> {
-    const drizzle = await client();
-    const result = await drizzle
-      .select({ maxOrder: sql<number>`MAX(${snippets.order})` })
-      .from(snippets)
-      .where(
-        and(
-          eq(snippets.userId, userId),
-          folder
-            ? eq(snippets.folder, folder)
-            : sql`(${snippets.folder} IS NULL OR ${snippets.folder} = '')`,
-        ),
-      );
-    return result[0]?.maxOrder ?? -1;
-  }
-
-  async function nextOrderForFolder(
-    userId: string,
-    folder: string,
-  ): Promise<number> {
-    return (await maxOrderForFolder(userId, folder || null)) + 1;
-  }
-
-  async function findByNameAndFolder(
-    userId: string,
-    name: string,
-    folder: string | null,
-  ): Promise<SnippetRecord | null> {
-    const drizzle = await client();
-    const rows = await drizzle
-      .select()
-      .from(snippets)
-      .where(
-        and(
-          eq(snippets.userId, userId),
-          eq(snippets.name, name),
-          folder
-            ? eq(snippets.folder, folder)
-            : sql`(${snippets.folder} IS NULL OR ${snippets.folder} = '')`,
-        ),
-      )
-      .limit(1);
-    return rows[0] ?? null;
-  }
-
-  function userOrRoleAccessFilter(userId: string, roleIds: number[]) {
-    if (roleIds.length === 0) return eq(access.userId, userId);
-    return or(eq(access.userId, userId), inArray(access.roleId, roleIds));
-  }
-
-  async function findSnippetAccess(
-    snippetId: number,
-    target: SnippetAccessTarget,
-  ) {
-    const drizzle = await client();
-    const rows = await drizzle
-      .select()
-      .from(access)
-      .where(
-        and(
-          eq(access.snippetId, snippetId),
-          target.targetType === "user"
-            ? eq(access.userId, target.targetUserId)
-            : eq(access.roleId, target.targetRoleId),
-        ),
-      )
-      .limit(1);
-    return rows[0] ?? null;
-  }
-
-  return {
-    findOwnedById,
-
-    async listFolders(userId: string): Promise<SnippetFolderRecord[]> {
-      const drizzle = await client();
-      return drizzle
-        .select()
-        .from(folders)
-        .where(eq(folders.userId, userId))
-        .orderBy(asc(folders.name));
-    },
-
-    async listSnippetsForExport(userId: string): Promise<SnippetRecord[]> {
-      const drizzle = await client();
-      return drizzle
-        .select()
-        .from(snippets)
-        .where(eq(snippets.userId, userId))
-        .orderBy(sql`coalesce(${snippets.folder}, '')`, asc(snippets.order));
-    },
-
-    async listFoldersForExport(userId: string): Promise<SnippetFolderRecord[]> {
-      const drizzle = await client();
-      return drizzle
-        .select()
-        .from(folders)
-        .where(eq(folders.userId, userId))
-        .orderBy(asc(folders.name));
-    },
-
-    async listOwnedSnippetsInFolder(
-      userId: string,
-      folder: string,
-    ): Promise<SnippetRecord[]> {
-      const drizzle = await client();
-      return drizzle
-        .select()
-        .from(snippets)
-        .where(
-          and(
-            eq(snippets.userId, userId),
-            or(
-              eq(snippets.folder, folder),
-              like(snippets.folder, `${folder} / %`),
-            ),
-          ),
-        );
-    },
-
-    async listOwnedSnippets(userId: string): Promise<SnippetRecord[]> {
-      const drizzle = await client();
-      return drizzle
-        .select()
-        .from(snippets)
-        .where(eq(snippets.userId, userId))
-        .orderBy(
-          sql`CASE WHEN ${snippets.folder} IS NULL OR ${snippets.folder} = '' THEN 0 ELSE 1 END`,
-          asc(snippets.folder),
-          asc(snippets.order),
-          sql`${snippets.updatedAt} DESC`,
-        );
-    },
-
-    async reorderSnippets(
-      userId: string,
-      updates: SnippetReorderUpdate[],
-    ): Promise<void> {
-      const drizzle = await client();
-      for (const update of updates) {
-        const { id, order, folder } = update;
-        if (!id || order === undefined) continue;
-
-        const updateFields: Partial<{ order: number; folder: string | null }> =
-          {
-            order,
-          };
-        if (folder !== undefined) updateFields.folder = folder?.trim() || null;
-
-        await drizzle
-          .update(snippets)
-          .set(updateFields)
-          .where(and(eq(snippets.id, id), eq(snippets.userId, userId)));
-      }
-      await db.persist();
-    },
-
-    async createSnippet(
-      userId: string,
-      input: NewSnippetInput,
-    ): Promise<SnippetRecord> {
-      const folderValue = input.folder?.trim() || "";
-      const order =
-        input.order === undefined || input.order === null
-          ? await nextOrderForFolder(userId, folderValue)
-          : input.order;
-
-      const syncId = randomUUID();
-      const drizzle = await client();
-      await drizzle.insert(snippets).values({
-        syncId,
-        userId,
-        name: input.name.trim(),
-        content: input.content.trim(),
-        description: input.description?.trim() || null,
-        folder: input.folder?.trim() || null,
-        order,
-        hostFilter: input.hostFilter ? JSON.stringify(input.hostFilter) : null,
-        isNote: input.isNote ?? false,
-      });
-      await db.persist();
-
-      const rows = await drizzle
-        .select()
-        .from(snippets)
-        .where(eq(snippets.syncId, syncId))
-        .limit(1);
-      return rows[0];
-    },
-
-    async updateSnippet(
-      userId: string,
-      snippetId: number,
-      input: SnippetUpdateInput,
-    ): Promise<UpdateSnippetResult | null> {
-      const existing = await findOwnedById(userId, snippetId);
-      if (!existing) return null;
-
-      const updateFields: Record<string, unknown> = {
-        updatedAt: sql`CURRENT_TIMESTAMP`,
-      };
-      if (input.name !== undefined) updateFields.name = input.name.trim();
-      if (input.content !== undefined)
-        updateFields.content = input.content.trim();
-      if (input.description !== undefined)
-        updateFields.description = input.description?.trim() || null;
-      if (input.folder !== undefined)
-        updateFields.folder = input.folder?.trim() || null;
-      if (input.order !== undefined) updateFields.order = input.order;
-      if (input.hostFilter !== undefined)
-        updateFields.hostFilter = input.hostFilter
-          ? JSON.stringify(input.hostFilter)
-          : null;
-      if (input.isNote !== undefined) updateFields.isNote = input.isNote;
-
-      const drizzle = await client();
-      await drizzle
-        .update(snippets)
-        .set(updateFields)
-        .where(and(eq(snippets.id, snippetId), eq(snippets.userId, userId)));
-      await db.persist();
-
-      const updated = await findOwnedById(userId, snippetId);
-      return { existing, updated: updated as SnippetRecord };
-    },
-
-    async deleteSnippet(
-      userId: string,
-      snippetId: number,
-    ): Promise<SnippetRecord | null> {
-      const existing = await findOwnedById(userId, snippetId);
-      if (!existing) return null;
-
-      const drizzle = await client();
-      await drizzle
-        .delete(snippets)
-        .where(and(eq(snippets.id, snippetId), eq(snippets.userId, userId)));
-      await db.persist();
-      return existing;
-    },
-
-    async bulkImport(
-      userId: string,
-      snippetsToImport: unknown[] | undefined,
-      foldersToImport: unknown[] | undefined,
-      overwrite: boolean,
-    ): Promise<SnippetBulkImportResult> {
-      const results: SnippetBulkImportResult = {
-        snippetsImported: 0,
-        snippetsSkipped: 0,
-        snippetsUpdated: 0,
-        foldersImported: 0,
-        foldersSkipped: 0,
-        failed: 0,
-        errors: [],
-      };
-
-      const drizzle = await client();
-      let changed = false;
-
-      if (Array.isArray(foldersToImport)) {
-        for (const rawFolder of foldersToImport) {
-          const folder = rawFolder as BulkImportFolderInput;
-          if (!isNonEmptyString(folder.name)) {
-            results.failed++;
-            results.errors.push(`Folder missing name`);
-            continue;
-          }
-
-          const existing = await findFolderByName(userId, folder.name);
-          if (existing) {
-            results.foldersSkipped++;
-            continue;
-          }
-
-          await drizzle.insert(folders).values({
-            syncId: randomUUID(),
-            userId,
-            name: folder.name.trim(),
-            color: folder.color?.trim() || null,
-            icon: folder.icon?.trim() || null,
-          });
-          changed = true;
-          results.foldersImported++;
-        }
-      }
-
-      if (Array.isArray(snippetsToImport)) {
-        for (let i = 0; i < snippetsToImport.length; i++) {
-          const snippet = snippetsToImport[i] as BulkImportSnippetInput;
-
-          if (
-            !isNonEmptyString(snippet.name) ||
-            !isNonEmptyString(snippet.content)
-          ) {
-            results.failed++;
-            results.errors.push(
-              `Snippet ${i + 1}: name and content are required`,
-            );
-            continue;
-          }
-
-          const folderVal = snippet.folder?.trim() || null;
-          const existing = await findByNameAndFolder(
-            userId,
-            snippet.name.trim(),
-            folderVal,
-          );
-
-          if (existing) {
-            if (!overwrite) {
-              results.snippetsSkipped++;
-              continue;
-            }
-
-            await drizzle
-              .update(snippets)
-              .set({
-                content: snippet.content.trim(),
-                description: snippet.description?.trim() || null,
-                folder: folderVal,
-                order:
-                  typeof snippet.order === "number"
-                    ? snippet.order
-                    : existing.order,
-                hostFilter: snippet.hostFilter || null,
-                updatedAt: sql`CURRENT_TIMESTAMP`,
-              })
-              .where(
-                and(eq(snippets.id, existing.id), eq(snippets.userId, userId)),
-              );
-            changed = true;
-            results.snippetsUpdated++;
-            continue;
-          }
-
-          const maxOrder = await maxOrderForFolder(userId, folderVal);
-          await drizzle.insert(snippets).values({
-            syncId: randomUUID(),
-            userId,
-            name: snippet.name.trim(),
-            content: snippet.content.trim(),
-            description: snippet.description?.trim() || null,
-            folder: folderVal,
-            order:
-              typeof snippet.order === "number" ? snippet.order : maxOrder + 1,
-            hostFilter: snippet.hostFilter || null,
-          });
-          changed = true;
-          results.snippetsImported++;
-        }
-      }
-
-      if (changed) await db.persist();
-      return results;
-    },
-
-    async createFolder(
-      userId: string,
-      name: string,
-      color: string | null | undefined,
-      icon: string | null | undefined,
-    ): Promise<SnippetFolderRecord | null> {
-      const existing = await findFolderByName(userId, name);
-      if (existing) return null;
-
-      const syncId = randomUUID();
-      const drizzle = await client();
-      await drizzle.insert(folders).values({
-        syncId,
-        userId,
-        name: name.trim(),
-        color: color?.trim() || null,
-        icon: icon?.trim() || null,
-      });
-      await db.persist();
-
-      const rows = await drizzle
-        .select()
-        .from(folders)
-        .where(eq(folders.syncId, syncId))
-        .limit(1);
-      return rows[0] ?? null;
-    },
-
-    async updateFolderMetadata(
-      userId: string,
-      name: string,
-      color: string | null | undefined,
-      icon: string | null | undefined,
-    ): Promise<SnippetFolderRecord | null> {
-      const existing = await findFolderByName(userId, name);
-      if (!existing) return null;
-
-      const updateFields: Record<string, unknown> = {
-        updatedAt: sql`CURRENT_TIMESTAMP`,
-      };
-      if (color !== undefined) updateFields.color = color?.trim() || null;
-      if (icon !== undefined) updateFields.icon = icon?.trim() || null;
-
-      const drizzle = await client();
-      await drizzle
-        .update(folders)
-        .set(updateFields)
-        .where(and(eq(folders.userId, userId), eq(folders.name, name)));
-      await db.persist();
-
-      return findFolderByName(userId, name);
-    },
-
-    async renameFolder(
-      userId: string,
-      oldName: string,
-      newName: string,
-    ): Promise<RenameSnippetFolderResult> {
-      const existing = await findFolderByName(userId, oldName);
-      if (!existing) return { status: "missing" };
-
-      const nameExists = await findFolderByName(userId, newName);
-      if (nameExists) return { status: "conflict" };
-
-      const drizzle = await client();
-      await drizzle
-        .update(folders)
-        .set({ name: newName, updatedAt: sql`CURRENT_TIMESTAMP` })
-        .where(and(eq(folders.userId, userId), eq(folders.name, oldName)));
-
-      await drizzle
-        .update(snippets)
-        .set({ folder: newName })
-        .where(and(eq(snippets.userId, userId), eq(snippets.folder, oldName)));
-
-      await db.persist();
-      return { status: "renamed" };
-    },
-
-    async deleteFolder(
-      userId: string,
-      name: string,
-    ): Promise<{ syncId: string | null } | null> {
-      const drizzle = await client();
-      await drizzle
-        .update(snippets)
-        .set({ folder: null })
-        .where(and(eq(snippets.userId, userId), eq(snippets.folder, name)));
-
-      const existing = await findFolderByName(userId, name);
-      if (!existing) {
-        await db.persist();
-        return null;
-      }
-
-      await drizzle
-        .delete(folders)
-        .where(and(eq(folders.userId, userId), eq(folders.name, name)));
-      await db.persist();
-      return { syncId: existing.syncId };
-    },
-
-    /** Wipes a user's snippets and folders, for the password-reset data-wipe flow. */
-    async deleteByUserId(userId: string): Promise<void> {
-      const drizzle = await client();
-      await drizzle.delete(snippets).where(eq(snippets.userId, userId));
-      await drizzle.delete(folders).where(eq(folders.userId, userId));
-      await db.persist();
-    },
-
-    // Sharing (moved from core's RbacAccessRepository)
-
-    async listSnippetAccess(snippetId: number): Promise<RbacAccessListItem[]> {
-      const drizzle = await client();
-      const { users, roles } = await refs();
-      const rows = await drizzle
-        .select({
-          id: access.id,
-          userId: access.userId,
-          roleId: access.roleId,
-          username: users.username,
-          roleName: roles.name,
-          roleDisplayName: roles.displayName,
-          grantedBy: access.grantedBy,
-          grantedByUsername: sql<
-            string | null
-          >`(SELECT username FROM users WHERE id = ${access.grantedBy})`,
-          permissionLevel: access.permissionLevel,
-          expiresAt: access.expiresAt,
-          createdAt: access.createdAt,
-        })
-        .from(access)
-        .leftJoin(users, eq(access.userId, users.id))
-        .leftJoin(roles, eq(access.roleId, roles.id))
-        .where(eq(access.snippetId, snippetId))
-        .orderBy(desc(access.createdAt));
-
-      return rows.map(toAccessListItem);
-    },
-
-    async upsertSnippetAccess(
-      input: UpsertSnippetAccessInput,
-    ): Promise<{ id: number; created: boolean }> {
-      const existing = await findSnippetAccess(input.snippetId, input);
-      const drizzle = await client();
-
-      if (existing) {
-        await drizzle
-          .update(access)
-          .set({ expiresAt: input.expiresAt })
-          .where(eq(access.id, existing.id));
-        await db.persist();
-        return { id: existing.id, created: false };
-      }
-
-      const now = new Date().toISOString();
-      await drizzle.insert(access).values({
-        snippetId: input.snippetId,
-        userId: input.targetType === "user" ? input.targetUserId : null,
-        roleId: input.targetType === "role" ? input.targetRoleId : null,
-        grantedBy: input.grantedBy,
-        permissionLevel: "view",
-        expiresAt: input.expiresAt,
-        createdAt: now,
-      });
-      await db.persist();
-
-      const created = await findSnippetAccess(input.snippetId, input);
-      return { id: created!.id, created: true };
-    },
-
-    async revokeSnippetAccess(
-      accessId: number,
-      snippetId: number,
-    ): Promise<void> {
-      const drizzle = await client();
-      await drizzle
-        .delete(access)
-        .where(and(eq(access.id, accessId), eq(access.snippetId, snippetId)));
-      await db.persist();
-    },
-
-    async listSharedSnippets(
-      userId: string,
-      roleIds: number[],
-      now = new Date().toISOString(),
-    ): Promise<RbacSharedSnippet[]> {
-      const drizzle = await client();
-      const { users } = await refs();
-
-      const directShared = await drizzle
-        .select({
-          id: snippets.id,
-          name: snippets.name,
-          content: snippets.content,
-          description: snippets.description,
-          folder: snippets.folder,
-          ownerUsername: users.username,
-          permissionLevel: access.permissionLevel,
-          expiresAt: access.expiresAt,
-        })
-        .from(access)
-        .innerJoin(snippets, eq(access.snippetId, snippets.id))
-        .innerJoin(users, eq(snippets.userId, users.id))
-        .where(
-          and(
-            eq(access.userId, userId),
-            or(isNull(access.expiresAt), gte(access.expiresAt, now)),
-          ),
-        );
-
-      if (roleIds.length === 0) return directShared;
-
-      const directIds = new Set(directShared.map((s: { id: number }) => s.id));
-      const roleShared = await drizzle
-        .select({
-          id: snippets.id,
-          name: snippets.name,
-          content: snippets.content,
-          description: snippets.description,
-          folder: snippets.folder,
-          ownerUsername: users.username,
-          permissionLevel: access.permissionLevel,
-          expiresAt: access.expiresAt,
-        })
-        .from(access)
-        .innerJoin(snippets, eq(access.snippetId, snippets.id))
-        .innerJoin(users, eq(snippets.userId, users.id))
-        .where(
-          and(
-            or(isNull(access.expiresAt), gte(access.expiresAt, now)),
-            inArray(access.roleId, roleIds),
-          ),
-        );
-
-      return [
-        ...directShared,
-        ...roleShared.filter((s: { id: number }) => !directIds.has(s.id)),
-      ];
-    },
-
-    async listVisibleSharedSnippets(
-      userId: string,
-      roleIds: number[],
-      now = new Date().toISOString(),
-    ): Promise<RbacVisibleSharedSnippet[]> {
-      const drizzle = await client();
-      const { users } = await refs();
-      return drizzle
-        .select({
-          id: snippets.id,
-          userId: snippets.userId,
-          name: snippets.name,
-          content: snippets.content,
-          description: snippets.description,
-          folder: snippets.folder,
-          order: snippets.order,
-          createdAt: snippets.createdAt,
-          updatedAt: snippets.updatedAt,
-          isNote: snippets.isNote,
-          ownerUsername: users.username,
-          permissionLevel: access.permissionLevel,
-          expiresAt: access.expiresAt,
-        })
-        .from(access)
-        .innerJoin(snippets, eq(access.snippetId, snippets.id))
-        .innerJoin(users, eq(snippets.userId, users.id))
-        .where(
-          and(
-            userOrRoleAccessFilter(userId, roleIds),
-            or(isNull(access.expiresAt), gte(access.expiresAt, now)),
-          ),
-        );
-    },
-
-    async findAccessibleSharedSnippet(
-      snippetId: number,
-      userId: string,
-      roleIds: number[],
-      now = new Date().toISOString(),
-    ): Promise<RbacAccessibleSnippet | null> {
-      const drizzle = await client();
-      const { users } = await refs();
-      const rows = await drizzle
-        .select({
-          id: snippets.id,
-          userId: snippets.userId,
-          name: snippets.name,
-          content: snippets.content,
-          description: snippets.description,
-          folder: snippets.folder,
-          order: snippets.order,
-          createdAt: snippets.createdAt,
-          updatedAt: snippets.updatedAt,
-          hostFilter: snippets.hostFilter,
-          isNote: snippets.isNote,
-          ownerUsername: users.username,
-          permissionLevel: access.permissionLevel,
-          expiresAt: access.expiresAt,
-        })
-        .from(access)
-        .innerJoin(snippets, eq(access.snippetId, snippets.id))
-        .innerJoin(users, eq(snippets.userId, users.id))
-        .where(
-          and(
-            eq(access.snippetId, snippetId),
-            userOrRoleAccessFilter(userId, roleIds),
-            or(isNull(access.expiresAt), gte(access.expiresAt, now)),
-          ),
-        )
-        .limit(1);
-
-      return rows[0] ?? null;
-    },
-
-    /** A snippet's sync id, for a host setting that names it over sync. */
-    async findSyncIdById(snippetId: number): Promise<string | null> {
-      const drizzle = await client();
-      const rows = await drizzle
-        .select({ syncId: snippets.syncId })
-        .from(snippets)
-        .where(eq(snippets.id, snippetId))
-        .limit(1);
-      return (rows[0]?.syncId as string | null | undefined) ?? null;
-    },
-
-    async findIdBySyncId(syncId: string): Promise<number | null> {
-      const drizzle = await client();
-      const rows = await drizzle
-        .select({ id: snippets.id })
-        .from(snippets)
-        .where(eq(snippets.syncId, syncId))
-        .limit(1);
-      return (rows[0]?.id as number | undefined) ?? null;
-    },
-
-    /** A user's role ids, for the sharing filters above. */
-    async listUserRoleIds(userId: string): Promise<number[]> {
-      const drizzle = await client();
-      const { userRoles } = await refs();
-      const rows = await drizzle
-        .select({ roleId: userRoles.roleId })
-        .from(userRoles)
-        .where(eq(userRoles.userId, userId));
-      return rows.map((r: { roleId: number }) => r.roleId);
-    },
-  };
-}
diff --git a/plugins/snippets/src/backend/routes.ts b/plugins/snippets/src/backend/routes.ts
deleted file mode 100644
index 84ef3e72e..000000000
--- a/plugins/snippets/src/backend/routes.ts
+++ /dev/null
@@ -1,1260 +0,0 @@
-import type { Request, Response, Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { SnippetRepository } from "./repository.js";
-import { extractSnippetReorderUpdates } from "./reorder.js";
-import {
-  createSnippetExecutionResult,
-  getSnippetExecutionTimeoutMs,
-  resolveSnippetCommand,
-} from "./execution.js";
-
-function isNonEmptyString(value: unknown): value is string {
-  return typeof value === "string" && value.trim().length > 0;
-}
-
-function paramId(raw: string | string[] | undefined): number {
-  const value = Array.isArray(raw) ? raw[0] : raw;
-  return value === undefined ? NaN : parseInt(value, 10);
-}
-
-function sortSnippets<
-  T extends { folder: string | null; order: number; updatedAt: string },
->(a: T, b: T): number {
-  const aFolder = a.folder || "";
-  const bFolder = b.folder || "";
-
-  if (!aFolder && bFolder) return -1;
-  if (aFolder && !bFolder) return 1;
-  if (aFolder !== bFolder) return aFolder.localeCompare(bFolder);
-  if (a.order !== b.order) return a.order - b.order;
-
-  return b.updatedAt.localeCompare(a.updatedAt);
-}
-
-function actor(ctx: PluginContext): string {
-  // Core's plugin router authenticates every request and runs it as that user.
-  return ctx.currentActor() as string;
-}
-
-function logError(
-  ctx: PluginContext,
-  message: string,
-  error: unknown,
-  operation: string,
-): void {
-  ctx.log.error(
-    `${message} (${operation})`,
-    error instanceof Error ? error : new Error(String(error)),
-  );
-}
-
-/**
- * Mounts every snippets route on the plugin's router, served at
- * /plugin-api/snippets. Most routes gate on their own permission; /execute
- * only needs auth plus an accessible snippet and host, matching how running a
- * snippet has never required a snippets.* grant.
- */
-export function registerSnippetRoutes(
-  router: Router,
-  repo: SnippetRepository,
-  ctx: PluginContext,
-): void {
-  async function getAccessibleSnippet(snippetId: number, userId: string) {
-    const owned = await repo.findOwnedById(userId, snippetId);
-    if (owned) return owned;
-
-    const roleIds = await repo.listUserRoleIds(userId);
-    return repo.findAccessibleSharedSnippet(snippetId, userId, roleIds);
-  }
-
-  /**
-   * @openapi
-   * /plugin-api/snippets/folders:
-   *   get:
-   *     summary: List the current user's snippet folders
-   *     tags:
-   *       - Snippets
-   *     responses:
-   *       200:
-   *         description: A list of snippet folders.
-   */
-  router.get(
-    "/folders",
-    ctx.rbac.require("view") as never,
-    async (_req: Request, res: Response) => {
-      const userId = actor(ctx);
-      try {
-        res.json(await repo.listFolders(userId));
-      } catch (err) {
-        logError(
-          ctx,
-          "Failed to fetch snippet folders",
-          err,
-          "snippet_folder_list_failed",
-        );
-        res.status(500).json({ error: "Failed to fetch snippet folders" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/snippets/folders:
-   *   post:
-   *     summary: Create a snippet folder
-   *     tags:
-   *       - Snippets
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               name:
-   *                 type: string
-   *               color:
-   *                 type: string
-   *               icon:
-   *                 type: string
-   *     responses:
-   *       201:
-   *         description: Snippet folder created.
-   *       400:
-   *         description: Folder name is required.
-   *       409:
-   *         description: A folder with this name already exists.
-   */
-  router.post(
-    "/folders",
-    ctx.rbac.require("create") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const { name, color, icon } = req.body ?? {};
-
-      if (!isNonEmptyString(name)) {
-        return res.status(400).json({ error: "Folder name is required" });
-      }
-
-      try {
-        const created = await repo.createFolder(userId, name, color, icon);
-        if (!created) {
-          return res
-            .status(409)
-            .json({ error: "Folder with this name already exists" });
-        }
-        res.status(201).json(created);
-      } catch (err) {
-        logError(
-          ctx,
-          "Failed to create snippet folder",
-          err,
-          "snippet_folder_create_failed",
-        );
-        res.status(500).json({ error: "Failed to create snippet folder" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/snippets/folders/{name}/metadata:
-   *   put:
-   *     summary: Update a snippet folder's color or icon
-   *     tags:
-   *       - Snippets
-   *     parameters:
-   *       - in: path
-   *         name: name
-   *         required: true
-   *         schema:
-   *           type: string
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               color:
-   *                 type: string
-   *               icon:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Snippet folder metadata updated.
-   *       400:
-   *         description: Invalid request.
-   *       404:
-   *         description: Folder not found.
-   */
-  router.put(
-    "/folders/:name/metadata",
-    ctx.rbac.require("edit") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const name = Array.isArray(req.params.name)
-        ? req.params.name[0]
-        : req.params.name;
-      const { color, icon } = req.body ?? {};
-
-      if (!name) return res.status(400).json({ error: "Invalid request" });
-
-      try {
-        const updated = await repo.updateFolderMetadata(
-          userId,
-          decodeURIComponent(name),
-          color,
-          icon,
-        );
-        if (!updated)
-          return res.status(404).json({ error: "Folder not found" });
-        res.json(updated);
-      } catch (err) {
-        logError(
-          ctx,
-          "Failed to update snippet folder metadata",
-          err,
-          "snippet_folder_metadata_update_failed",
-        );
-        res
-          .status(500)
-          .json({ error: "Failed to update snippet folder metadata" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/snippets/folders/rename:
-   *   put:
-   *     summary: Rename a snippet folder
-   *     tags:
-   *       - Snippets
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               oldName:
-   *                 type: string
-   *               newName:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Folder renamed.
-   *       400:
-   *         description: Invalid request.
-   *       404:
-   *         description: Folder not found.
-   *       409:
-   *         description: A folder with the new name already exists.
-   */
-  router.put(
-    "/folders/rename",
-    ctx.rbac.require("edit") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const { oldName, newName } = req.body ?? {};
-
-      if (!isNonEmptyString(oldName) || !isNonEmptyString(newName)) {
-        return res.status(400).json({ error: "Invalid request" });
-      }
-
-      try {
-        const result = await repo.renameFolder(userId, oldName, newName);
-        if (result.status === "missing") {
-          return res.status(404).json({ error: "Folder not found" });
-        }
-        if (result.status === "conflict") {
-          return res
-            .status(409)
-            .json({ error: "Folder with new name already exists" });
-        }
-        res.json({ success: true, oldName, newName });
-      } catch (err) {
-        logError(
-          ctx,
-          "Failed to rename snippet folder",
-          err,
-          "snippet_folder_rename_failed",
-        );
-        res.status(500).json({ error: "Failed to rename snippet folder" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/snippets/folders/{name}:
-   *   delete:
-   *     summary: Delete a snippet folder
-   *     description: Moves the folder's snippets to the root instead of deleting them.
-   *     tags:
-   *       - Snippets
-   *     parameters:
-   *       - in: path
-   *         name: name
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: Snippet folder deleted.
-   *       400:
-   *         description: Invalid request.
-   */
-  router.delete(
-    "/folders/:name",
-    ctx.rbac.require("delete") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const name = Array.isArray(req.params.name)
-        ? req.params.name[0]
-        : req.params.name;
-
-      if (!name) return res.status(400).json({ error: "Invalid request" });
-
-      try {
-        const folderName = decodeURIComponent(name);
-        await repo.deleteFolder(userId, folderName);
-        res.json({ success: true });
-      } catch (err) {
-        logError(
-          ctx,
-          "Failed to delete snippet folder",
-          err,
-          "snippet_folder_delete_failed",
-        );
-        res.status(500).json({ error: "Failed to delete snippet folder" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/snippets/reorder:
-   *   put:
-   *     summary: Bulk update the order and folder of snippets
-   *     description: Accepts a "snippets" array, and the legacy "updates" key.
-   *     tags:
-   *       - Snippets
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               snippets:
-   *                 type: array
-   *                 items:
-   *                   type: object
-   *                   properties:
-   *                     id:
-   *                       type: integer
-   *                     order:
-   *                       type: integer
-   *                     folder:
-   *                       type: string
-   *     responses:
-   *       200:
-   *         description: Snippets reordered.
-   *       400:
-   *         description: Invalid request.
-   */
-  router.put(
-    "/reorder",
-    ctx.rbac.require("edit") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const updates = extractSnippetReorderUpdates(req.body);
-
-      if (!updates || updates.length === 0) {
-        return res
-          .status(400)
-          .json({ error: "snippets array is required and must not be empty" });
-      }
-
-      try {
-        await repo.reorderSnippets(userId, updates);
-        res.json({ success: true, updated: updates.length });
-      } catch (err) {
-        logError(
-          ctx,
-          "Failed to reorder snippets",
-          err,
-          "snippet_reorder_failed",
-        );
-        res.status(500).json({ error: "Failed to reorder snippets" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/snippets/execute:
-   *   post:
-   *     summary: Run a snippet on a host over SSH
-   *     description: Needs no snippets.* permission beyond an accessible snippet and host - running one has never required a separate grant.
-   *     tags:
-   *       - Snippets
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               snippetId:
-   *                 type: integer
-   *               hostId:
-   *                 type: integer
-   *               inputValues:
-   *                 type: object
-   *                 description: >
-   *                   Resolved values for $INPUT_n placeholders, keyed by
-   *                   "INPUT_n". $HOST/$USER/$PORT/$NAME are resolved
-   *                   server-side from the target host.
-   *                 additionalProperties:
-   *                   type: string
-   *     responses:
-   *       200:
-   *         description: Snippet executed.
-   *       400:
-   *         description: Snippet ID and host ID are required, or the snippet is a note.
-   *       404:
-   *         description: Snippet or host not found.
-   */
-  router.post("/execute", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const { snippetId, hostId, inputValues } = req.body ?? {};
-
-    if (!snippetId || !hostId) {
-      return res
-        .status(400)
-        .json({ error: "Snippet ID and Host ID are required" });
-    }
-
-    let connection: Awaited<ReturnType<typeof ctx.ssh.connect>> | undefined;
-    try {
-      const snippet = await getAccessibleSnippet(
-        parseInt(snippetId, 10),
-        userId,
-      );
-      if (!snippet) return res.status(404).json({ error: "Snippet not found" });
-
-      if (snippet.isNote) {
-        return res
-          .status(400)
-          .json({ error: "Notes cannot be executed on a host" });
-      }
-
-      connection = await ctx.ssh.connect(parseInt(hostId, 10), {
-        purpose: "plugin",
-        timeoutMs: 30000,
-      });
-
-      const resolvedCommand = resolveSnippetCommand(
-        snippet.content,
-        {
-          ip: connection.host.ip,
-          username: connection.host.username,
-          port: connection.host.port,
-          name: connection.host.name as string | undefined,
-        },
-        inputValues && typeof inputValues === "object" ? inputValues : {},
-      );
-
-      const client = connection.client as import("ssh2").Client;
-      let output = "";
-      let errorOutput = "";
-
-      const result = await new Promise<
-        ReturnType<typeof createSnippetExecutionResult>
-      >((resolve, reject) => {
-        const timeoutMs = getSnippetExecutionTimeoutMs();
-        let timeout: NodeJS.Timeout | undefined;
-
-        client.on("error", (err) => {
-          clearTimeout(timeout);
-          reject(err);
-        });
-
-        client.exec(resolvedCommand, (err, stream) => {
-          if (err) return reject(err);
-
-          if (timeoutMs) {
-            timeout = setTimeout(() => {
-              stream.close();
-              reject(
-                new Error(`Command execution timeout (${timeoutMs / 1000}s)`),
-              );
-            }, timeoutMs);
-          }
-
-          stream.on("close", (exitCode: number | null) => {
-            clearTimeout(timeout);
-            resolve(
-              createSnippetExecutionResult(exitCode, output, errorOutput),
-            );
-          });
-          stream.on("data", (data: Buffer) => {
-            output += data.toString();
-          });
-          stream.stderr.on("data", (data: Buffer) => {
-            errorOutput += data.toString();
-          });
-        });
-      });
-
-      res.json(result);
-    } catch (err) {
-      logError(ctx, "Failed to execute snippet", err, "snippet_execute_failed");
-      res.status(500).json({ error: "Failed to execute snippet" });
-    } finally {
-      connection?.dispose();
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/snippets/export:
-   *   get:
-   *     summary: Export every snippet and folder as JSON
-   *     tags:
-   *       - Snippets
-   *     responses:
-   *       200:
-   *         description: Export object with snippets and folders arrays.
-   */
-  router.get(
-    "/export",
-    ctx.rbac.require("view") as never,
-    async (_req: Request, res: Response) => {
-      const userId = actor(ctx);
-      try {
-        const allSnippets = await repo.listSnippetsForExport(userId);
-        const allFolders = await repo.listFoldersForExport(userId);
-
-        res.json({
-          snippets: allSnippets.map((s) => ({
-            name: s.name,
-            content: s.content,
-            description: s.description,
-            folder: s.folder,
-            order: s.order,
-            hostFilter: s.hostFilter,
-          })),
-          folders: allFolders.map((f) => ({
-            name: f.name,
-            color: f.color,
-            icon: f.icon,
-          })),
-        });
-      } catch (err) {
-        logError(
-          ctx,
-          "Failed to export snippets",
-          err,
-          "snippet_export_failed",
-        );
-        res.status(500).json({ error: "Failed to export snippets" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/snippets/bulk-import:
-   *   post:
-   *     summary: Import snippets and folders from JSON
-   *     description: Existing folders are skipped. Existing snippets, matched by name and folder, are skipped or overwritten.
-   *     tags:
-   *       - Snippets
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               snippets:
-   *                 type: array
-   *               folders:
-   *                 type: array
-   *               overwrite:
-   *                 type: boolean
-   *     responses:
-   *       200:
-   *         description: Import results with counts.
-   *       400:
-   *         description: Invalid request body.
-   */
-  router.post(
-    "/bulk-import",
-    ctx.rbac.require("create") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const {
-        snippets: snippetsToImport,
-        folders: foldersToImport,
-        overwrite,
-      } = req.body ?? {};
-
-      if (!Array.isArray(snippetsToImport) && !Array.isArray(foldersToImport)) {
-        return res
-          .status(400)
-          .json({ error: "snippets or folders array is required" });
-      }
-
-      try {
-        const results = await repo.bulkImport(
-          userId,
-          snippetsToImport,
-          foldersToImport,
-          !!overwrite,
-        );
-        res.json({ success: true, ...results });
-      } catch (err) {
-        logError(
-          ctx,
-          "Failed to bulk import snippets",
-          err,
-          "snippet_bulk_import_failed",
-        );
-        res.status(500).json({ error: "Failed to import snippets" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/snippets:
-   *   get:
-   *     summary: List the current user's visible snippets
-   *     description: Owned snippets plus snippets shared with the caller directly or through a role, tagged with isShared.
-   *     tags:
-   *       - Snippets
-   *     responses:
-   *       200:
-   *         description: A list of snippets.
-   */
-  router.get(
-    "/",
-    ctx.rbac.require("view") as never,
-    async (_req: Request, res: Response) => {
-      const userId = actor(ctx);
-      try {
-        const owned = await repo.listOwnedSnippets(userId);
-        const roleIds = await repo.listUserRoleIds(userId);
-        const shared = await repo.listVisibleSharedSnippets(userId, roleIds);
-
-        const visible = new Map<number, Record<string, unknown>>();
-        for (const snippet of owned) {
-          visible.set(snippet.id, { ...snippet, isShared: false });
-        }
-        for (const snippet of shared) {
-          if (visible.has(snippet.id)) continue;
-          visible.set(snippet.id, { ...snippet, isShared: true });
-        }
-
-        res.json(
-          Array.from(visible.values()).sort((a, b) =>
-            sortSnippets(
-              a as { folder: string | null; order: number; updatedAt: string },
-              b as { folder: string | null; order: number; updatedAt: string },
-            ),
-          ),
-        );
-      } catch (err) {
-        logError(ctx, "Failed to fetch snippets", err, "snippet_list_failed");
-        res.status(500).json({ error: "Failed to fetch snippets" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/snippets/shared:
-   *   get:
-   *     summary: List snippets shared with the current user
-   *     description: Registered before /:id so the literal path "shared" is not swallowed by the id parameter.
-   *     tags:
-   *       - Snippets
-   *     responses:
-   *       200:
-   *         description: Snippets shared with the caller.
-   */
-  router.get("/shared", async (_req: Request, res: Response) => {
-    const userId = actor(ctx);
-    try {
-      const roleIds = await repo.listUserRoleIds(userId);
-      const sharedSnippets = await repo.listSharedSnippets(userId, roleIds);
-      res.json({ sharedSnippets });
-    } catch (err) {
-      logError(
-        ctx,
-        "Failed to get shared snippets",
-        err,
-        "shared_snippets_list_failed",
-      );
-      res.status(500).json({ error: "Failed to get shared snippets" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/snippets/{id}:
-   *   get:
-   *     summary: Get one snippet
-   *     tags:
-   *       - Snippets
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: The requested snippet.
-   *       400:
-   *         description: Invalid request parameters.
-   *       404:
-   *         description: Snippet not found.
-   */
-  router.get(
-    "/:id",
-    ctx.rbac.require("view") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const id = Array.isArray(req.params.id)
-        ? req.params.id[0]
-        : req.params.id;
-      const snippetId = parseInt(id, 10);
-
-      if (isNaN(snippetId)) {
-        return res.status(400).json({ error: "Invalid request parameters" });
-      }
-
-      try {
-        const result = await getAccessibleSnippet(snippetId, userId);
-        if (!result)
-          return res.status(404).json({ error: "Snippet not found" });
-        res.json(result);
-      } catch (err) {
-        logError(ctx, "Failed to fetch snippet", err, "snippet_get_failed");
-        res.status(500).json({ error: "Failed to fetch snippet" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/snippets:
-   *   post:
-   *     summary: Create a snippet
-   *     tags:
-   *       - Snippets
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               name:
-   *                 type: string
-   *               content:
-   *                 type: string
-   *               description:
-   *                 type: string
-   *               folder:
-   *                 type: string
-   *               order:
-   *                 type: integer
-   *               isNote:
-   *                 type: boolean
-   *                 description: When true, the snippet is a note (copy/paste only, not directly executable on a host).
-   *     responses:
-   *       201:
-   *         description: Snippet created.
-   *       400:
-   *         description: Name and content are required.
-   */
-  router.post(
-    "/",
-    ctx.rbac.require("create") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const { name, content, description, folder, order, hostFilter, isNote } =
-        req.body ?? {};
-
-      if (!isNonEmptyString(name) || !isNonEmptyString(content)) {
-        return res.status(400).json({ error: "Name and content are required" });
-      }
-
-      try {
-        const result = await repo.createSnippet(userId, {
-          name,
-          content,
-          description,
-          folder,
-          order,
-          hostFilter,
-          isNote,
-        });
-        res.status(201).json(result);
-      } catch (err) {
-        logError(ctx, "Failed to create snippet", err, "snippet_create_failed");
-        res.status(500).json({ error: "Failed to create snippet" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/snippets/{id}:
-   *   put:
-   *     summary: Update a snippet
-   *     tags:
-   *       - Snippets
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               name:
-   *                 type: string
-   *               content:
-   *                 type: string
-   *               description:
-   *                 type: string
-   *               folder:
-   *                 type: string
-   *               order:
-   *                 type: integer
-   *               isNote:
-   *                 type: boolean
-   *     responses:
-   *       200:
-   *         description: The updated snippet.
-   *       400:
-   *         description: Invalid request.
-   *       404:
-   *         description: Snippet not found.
-   */
-  router.put(
-    "/:id",
-    ctx.rbac.require("edit") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const id = Array.isArray(req.params.id)
-        ? req.params.id[0]
-        : req.params.id;
-      if (!id) return res.status(400).json({ error: "Invalid request" });
-
-      try {
-        const result = await repo.updateSnippet(
-          userId,
-          parseInt(id, 10),
-          req.body ?? {},
-        );
-        if (!result)
-          return res.status(404).json({ error: "Snippet not found" });
-        res.json(result.updated);
-      } catch (err) {
-        logError(ctx, "Failed to update snippet", err, "snippet_update_failed");
-        res.status(500).json({ error: "Failed to update snippet" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/snippets/{id}:
-   *   delete:
-   *     summary: Delete a snippet
-   *     tags:
-   *       - Snippets
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Snippet deleted.
-   *       400:
-   *         description: Invalid request.
-   *       404:
-   *         description: Snippet not found.
-   */
-  router.delete(
-    "/:id",
-    ctx.rbac.require("delete") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const id = Array.isArray(req.params.id)
-        ? req.params.id[0]
-        : req.params.id;
-      if (!id) return res.status(400).json({ error: "Invalid request" });
-
-      try {
-        const existing = await repo.deleteSnippet(userId, parseInt(id, 10));
-        if (!existing)
-          return res.status(404).json({ error: "Snippet not found" });
-        res.json({ success: true });
-      } catch (err) {
-        logError(ctx, "Failed to delete snippet", err, "snippet_delete_failed");
-        res.status(500).json({ error: "Failed to delete snippet" });
-      }
-    },
-  );
-
-  // Sharing (moved from core's /rbac/snippet* routes)
-
-  /**
-   * @openapi
-   * /plugin-api/snippets/share-targets/users:
-   *   get:
-   *     summary: Users the caller may share snippets with
-   *     tags:
-   *       - Snippets
-   *     responses:
-   *       200:
-   *         description: Users list.
-   *       500:
-   *         description: Failed to list users.
-   */
-  router.get(
-    "/share-targets/users",
-    ctx.rbac.require("share") as never,
-    async (_req: Request, res: Response) => {
-      try {
-        res.json({ users: await ctx.hosts.listUsers() });
-      } catch (err) {
-        logError(
-          ctx,
-          "Failed to list share target users",
-          err,
-          "snippet_share_targets_users_failed",
-        );
-        res.status(500).json({ error: "Failed to list users" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/snippets/share-targets/roles:
-   *   get:
-   *     summary: Non-system roles the caller may share snippets with
-   *     tags:
-   *       - Snippets
-   *     responses:
-   *       200:
-   *         description: Roles list.
-   *       500:
-   *         description: Failed to list roles.
-   */
-  router.get(
-    "/share-targets/roles",
-    ctx.rbac.require("share") as never,
-    async (_req: Request, res: Response) => {
-      try {
-        res.json({ roles: await ctx.hosts.listRoles() });
-      } catch (err) {
-        logError(
-          ctx,
-          "Failed to list share target roles",
-          err,
-          "snippet_share_targets_roles_failed",
-        );
-        res.status(500).json({ error: "Failed to list roles" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/snippets/{id}/share:
-   *   post:
-   *     summary: Share a snippet with a user or role
-   *     tags:
-   *       - Snippets
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               targetType:
-   *                 type: string
-   *                 enum: [user, role]
-   *               targetUserId:
-   *                 type: string
-   *               targetRoleId:
-   *                 type: integer
-   *               expiresAt:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Snippet access updated.
-   *       400:
-   *         description: Invalid request.
-   *       403:
-   *         description: Not the snippet's owner.
-   */
-  router.post(
-    "/:id/share",
-    ctx.rbac.require("share") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const id = Array.isArray(req.params.id)
-        ? req.params.id[0]
-        : req.params.id;
-      const snippetId = parseInt(id, 10);
-      if (isNaN(snippetId))
-        return res.status(400).json({ error: "Invalid snippet ID" });
-
-      const { targetType, targetUserId, targetRoleId, expiresAt } =
-        req.body ?? {};
-      if (targetType !== "user" && targetType !== "role") {
-        return res
-          .status(400)
-          .json({ error: "targetType must be user or role" });
-      }
-      if (targetType === "user" && !isNonEmptyString(targetUserId)) {
-        return res.status(400).json({ error: "targetUserId is required" });
-      }
-      if (targetType === "role" && typeof targetRoleId !== "number") {
-        return res.status(400).json({ error: "targetRoleId is required" });
-      }
-
-      try {
-        const snippet = await repo.findOwnedById(userId, snippetId);
-        if (!snippet)
-          return res.status(403).json({ error: "Not snippet owner" });
-
-        await repo.upsertSnippetAccess({
-          snippetId,
-          grantedBy: userId,
-          expiresAt: expiresAt ?? null,
-          ...(targetType === "user"
-            ? { targetType: "user" as const, targetUserId }
-            : { targetType: "role" as const, targetRoleId }),
-        });
-
-        res.json({
-          success: true,
-          message: `Snippet shared successfully with ${targetType}`,
-        });
-      } catch (err) {
-        logError(ctx, "Failed to share snippet", err, "snippet_share_failed");
-        res.status(500).json({ error: "Failed to share snippet" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/snippets/folder/share:
-   *   put:
-   *     summary: Share every owned snippet in a folder
-   *     description: Also shares snippets in subfolders ("Parent / Child").
-   *     tags:
-   *       - Snippets
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               folder:
-   *                 type: string
-   *               targetType:
-   *                 type: string
-   *                 enum: [user, role]
-   *               targetUserId:
-   *                 type: string
-   *               targetRoleId:
-   *                 type: integer
-   *               expiresAt:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Snippet folder shared.
-   *       400:
-   *         description: Invalid request.
-   */
-  router.put(
-    "/folder/share",
-    ctx.rbac.require("share") as never,
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const { folder, targetType, targetUserId, targetRoleId, expiresAt } =
-        req.body ?? {};
-
-      if (!isNonEmptyString(folder)) {
-        return res.status(400).json({ error: "folder is required" });
-      }
-      if (targetType !== "user" && targetType !== "role") {
-        return res
-          .status(400)
-          .json({ error: "targetType must be user or role" });
-      }
-      if (targetType === "user" && !isNonEmptyString(targetUserId)) {
-        return res.status(400).json({ error: "targetUserId is required" });
-      }
-      if (targetType === "role" && typeof targetRoleId !== "number") {
-        return res.status(400).json({ error: "targetRoleId is required" });
-      }
-
-      try {
-        const snippetsInFolder = await repo.listOwnedSnippetsInFolder(
-          userId,
-          folder,
-        );
-        for (const snippet of snippetsInFolder) {
-          await repo.upsertSnippetAccess({
-            snippetId: snippet.id,
-            grantedBy: userId,
-            expiresAt: expiresAt ?? null,
-            ...(targetType === "user"
-              ? { targetType: "user" as const, targetUserId }
-              : { targetType: "role" as const, targetRoleId }),
-          });
-        }
-
-        res.json({ success: true, snippetsShared: snippetsInFolder.length });
-      } catch (err) {
-        logError(
-          ctx,
-          "Failed to share snippet folder",
-          err,
-          "snippet_folder_share_failed",
-        );
-        res.status(500).json({ error: "Failed to share snippet folder" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/snippets/{id}/access/{accessId}:
-   *   delete:
-   *     summary: Revoke a snippet share
-   *     tags:
-   *       - Snippets
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *       - in: path
-   *         name: accessId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Snippet access revoked.
-   *       400:
-   *         description: Invalid request.
-   *       403:
-   *         description: Not the snippet's owner.
-   */
-  router.delete(
-    "/:id/access/:accessId",
-    async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const snippetId = paramId(req.params.id);
-      const accessId = paramId(req.params.accessId);
-      if (isNaN(snippetId) || isNaN(accessId)) {
-        return res.status(400).json({ error: "Invalid request" });
-      }
-
-      try {
-        const snippet = await repo.findOwnedById(userId, snippetId);
-        if (!snippet)
-          return res.status(403).json({ error: "Not snippet owner" });
-
-        await repo.revokeSnippetAccess(accessId, snippetId);
-        res.json({ success: true, message: "Snippet access revoked" });
-      } catch (err) {
-        logError(
-          ctx,
-          "Failed to revoke snippet access",
-          err,
-          "snippet_access_revoke_failed",
-        );
-        res.status(500).json({ error: "Failed to revoke snippet access" });
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/snippets/{id}/access:
-   *   get:
-   *     summary: List who a snippet is shared with
-   *     tags:
-   *       - Snippets
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: List of access grants.
-   *       400:
-   *         description: Invalid snippet ID.
-   *       403:
-   *         description: Not the snippet's owner.
-   */
-  router.get("/:id/access", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const snippetId = paramId(req.params.id);
-    if (isNaN(snippetId))
-      return res.status(400).json({ error: "Invalid snippet ID" });
-
-    try {
-      const snippet = await repo.findOwnedById(userId, snippetId);
-      if (!snippet) return res.status(403).json({ error: "Not snippet owner" });
-
-      res.json(await repo.listSnippetAccess(snippetId));
-    } catch (err) {
-      logError(
-        ctx,
-        "Failed to get snippet access list",
-        err,
-        "snippet_access_list_failed",
-      );
-      res.status(500).json({ error: "Failed to get snippet access list" });
-    }
-  });
-}
diff --git a/plugins/snippets/src/backend/tables.ts b/plugins/snippets/src/backend/tables.ts
deleted file mode 100644
index 629960447..000000000
--- a/plugins/snippets/src/backend/tables.ts
+++ /dev/null
@@ -1,73 +0,0 @@
-import {
-  adoptLegacyTable,
-  boolean,
-  defineTable,
-  id,
-  integer,
-  refUser,
-  text,
-  timestamp,
-  varchar,
-} from "@termix/plugin-sdk/db";
-
-export const snippets = adoptLegacyTable(
-  "snippets",
-  defineTable(
-    "snippets",
-    {
-      id: id(),
-      userId: refUser(),
-      name: text().notNull(),
-      content: text().notNull(),
-      description: text(),
-      folder: text(),
-      order: integer().notNull().default(0),
-      syncId: varchar().unique(),
-      createdAt: timestamp().notNull().defaultNow(),
-      updatedAt: timestamp().notNull().defaultNow(),
-      hostFilter: text(),
-      isNote: boolean().notNull().default(false),
-    },
-    { indexes: [{ name: "idx_snippets_user_id", columns: ["userId"] }] },
-  ),
-);
-
-export const snippetFolders = adoptLegacyTable(
-  "snippet_folders",
-  defineTable("snippet_folders", {
-    id: id(),
-    userId: refUser(),
-    name: text().notNull(),
-    color: text(),
-    icon: text(),
-    syncId: varchar().unique(),
-    createdAt: timestamp().notNull().defaultNow(),
-    updatedAt: timestamp().notNull().defaultNow(),
-  }),
-);
-
-export const snippetAccess = adoptLegacyTable(
-  "snippet_access",
-  defineTable(
-    "snippet_access",
-    {
-      id: id(),
-      snippetId: integer().notNull(),
-      userId: varchar(),
-      roleId: integer(),
-      grantedBy: refUser(),
-      permissionLevel: text().notNull().default("view"),
-      expiresAt: timestamp(),
-      createdAt: timestamp().notNull().defaultNow(),
-    },
-    {
-      indexes: [
-        { name: "idx_snippet_access_user_id", columns: ["userId"] },
-        { name: "idx_snippet_access_snippet_id", columns: ["snippetId"] },
-        { name: "idx_snippet_access_role_id", columns: ["roleId"] },
-      ],
-    },
-  ),
-);
-
-export const tables = [snippets, snippetFolders, snippetAccess];
diff --git a/plugins/snippets/src/frontend/AdminUserSnippets.tsx b/plugins/snippets/src/frontend/AdminUserSnippets.tsx
deleted file mode 100644
index 76418bbd7..000000000
--- a/plugins/snippets/src/frontend/AdminUserSnippets.tsx
+++ /dev/null
@@ -1,237 +0,0 @@
-import { useCallback, useEffect, useState } from "react";
-import { Pencil, Plus, RefreshCw, Trash2 } from "lucide-react";
-import { toast } from "sonner";
-import {
-  usePluginApi,
-  useTranslation,
-  type PluginApiClient,
-} from "@termix/plugin-sdk/frontend";
-import { Button, Input, useConfirmation } from "@termix/plugin-sdk/ui";
-
-// Core's admin routes act on another user's data when this header names them.
-export const ADMIN_TARGET_USER_HEADER = "X-Admin-Target-User";
-
-export function adminOptions(targetUserId: string) {
-  return { headers: { [ADMIN_TARGET_USER_HEADER]: targetUserId } };
-}
-
-interface ManagedSnippet {
-  id: number;
-  name: string;
-  content: string;
-  folder?: string | null;
-}
-
-export function mapSnippets(res: unknown): ManagedSnippet[] {
-  const list = Array.isArray(res)
-    ? res
-    : ((res as { snippets?: unknown[] })?.snippets ?? []);
-  return (list as Record<string, unknown>[]).map((s) => ({
-    id: Number(s.id),
-    name: String(s.name ?? ""),
-    content: String(s.content ?? ""),
-    folder: (s.folder as string | null) ?? null,
-  }));
-}
-
-function errorMessage(error: unknown, fallback: string): string {
-  return (
-    (error as { response?: { data?: { error?: string } } })?.response?.data
-      ?.error || fallback
-  );
-}
-
-async function load(api: PluginApiClient, userId: string) {
-  return mapSnippets((await api.get("/", adminOptions(userId))).data);
-}
-
-/** The Snippets tab of the admin "manage user" panel. */
-export function AdminUserSnippets({
-  user,
-}: {
-  user: { id: string; username: string };
-}) {
-  const { t } = useTranslation();
-  const api = usePluginApi();
-  const { confirmWithToast } = useConfirmation();
-  const [snippets, setSnippets] = useState<ManagedSnippet[]>([]);
-  const [loading, setLoading] = useState(true);
-  const [editing, setEditing] = useState<ManagedSnippet | "new" | null>(null);
-  const [form, setForm] = useState({ name: "", content: "", folder: "" });
-  const [saving, setSaving] = useState(false);
-
-  const reload = useCallback(() => {
-    setLoading(true);
-    load(api, user.id)
-      .then(setSnippets)
-      .catch(() => {})
-      .finally(() => setLoading(false));
-  }, [api, user.id]);
-
-  useEffect(() => {
-    reload();
-  }, [reload]);
-
-  async function save() {
-    if (!form.name.trim() || !form.content.trim()) {
-      toast.error(t("admin.requiredFields"));
-      return;
-    }
-    setSaving(true);
-    try {
-      const payload = {
-        name: form.name.trim(),
-        content: form.content,
-        folder: form.folder.trim() || null,
-      };
-      if (editing && editing !== "new") {
-        await api.put(`/${editing.id}`, payload, adminOptions(user.id));
-      } else {
-        await api.post("/", payload, adminOptions(user.id));
-      }
-      setEditing(null);
-      reload();
-      toast.success(t("admin.saved"));
-    } catch (error) {
-      toast.error(errorMessage(error, t("admin.saveFailed")));
-    } finally {
-      setSaving(false);
-    }
-  }
-
-  function remove(snippet: ManagedSnippet) {
-    confirmWithToast(
-      t("admin.deleteConfirm", { name: snippet.name, username: user.username }),
-      async () => {
-        try {
-          await api.delete(`/${snippet.id}`, adminOptions(user.id));
-          setSnippets((prev) => prev.filter((s) => s.id !== snippet.id));
-          toast.success(t("admin.deleted"));
-        } catch (error) {
-          toast.error(errorMessage(error, t("admin.deleteFailed")));
-        }
-      },
-    );
-  }
-
-  return (
-    <div className="flex flex-col">
-      <div className="flex items-center justify-between py-2 border-b border-border">
-        <span className="text-[10px] text-muted-foreground">
-          {t("admin.count", { count: snippets.length })}
-        </span>
-        <div className="flex items-center gap-1">
-          <Button
-            variant="ghost"
-            size="icon"
-            className="size-6 text-muted-foreground hover:text-foreground"
-            onClick={reload}
-          >
-            <RefreshCw className="size-3" />
-          </Button>
-          <Button
-            variant="outline"
-            size="sm"
-            className="h-6 text-[10px] border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-            onClick={() => {
-              setForm({ name: "", content: "", folder: "" });
-              setEditing("new");
-            }}
-          >
-            <Plus className="size-3" />
-            {t("admin.add")}
-          </Button>
-        </div>
-      </div>
-      {editing && (
-        <div className="flex flex-col gap-2.5 py-3 border-b border-border">
-          <Input
-            className="h-8 text-xs"
-            placeholder={t("admin.namePlaceholder")}
-            value={form.name}
-            onChange={(e) => setForm((p) => ({ ...p, name: e.target.value }))}
-          />
-          <textarea
-            rows={4}
-            placeholder={t("admin.contentPlaceholder")}
-            value={form.content}
-            onChange={(e) =>
-              setForm((p) => ({ ...p, content: e.target.value }))
-            }
-            className="w-full px-3 py-2 text-[10px] bg-background border border-border text-foreground placeholder:text-muted-foreground resize-none outline-none focus:ring-1 focus:ring-ring font-mono"
-          />
-          <Input
-            className="h-8 text-xs"
-            placeholder={t("admin.folderPlaceholder")}
-            value={form.folder}
-            onChange={(e) => setForm((p) => ({ ...p, folder: e.target.value }))}
-          />
-          <div className="flex justify-end gap-2">
-            <Button
-              variant="ghost"
-              size="sm"
-              className="h-6 text-[10px]"
-              onClick={() => setEditing(null)}
-            >
-              {t("cancel")}
-            </Button>
-            <Button
-              variant="outline"
-              size="sm"
-              className="h-6 text-[10px] border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-              disabled={saving}
-              onClick={save}
-            >
-              {saving ? t("admin.saving") : t("admin.save")}
-            </Button>
-          </div>
-        </div>
-      )}
-      {!loading && snippets.length === 0 && !editing && (
-        <span className="text-xs text-muted-foreground py-3">
-          {t("admin.empty")}
-        </span>
-      )}
-      {snippets.map((snippet) => (
-        <div
-          key={snippet.id}
-          className="flex items-center justify-between py-2.5 border-b border-border last:border-0"
-        >
-          <div className="flex flex-col gap-0.5 min-w-0">
-            <span className="text-xs font-semibold truncate max-w-[180px]">
-              {snippet.name}
-            </span>
-            <span className="text-[10px] font-mono text-muted-foreground truncate max-w-[220px]">
-              {snippet.content}
-            </span>
-          </div>
-          <div className="flex items-center gap-0.5 shrink-0">
-            <Button
-              variant="ghost"
-              size="icon"
-              className="size-6 text-muted-foreground hover:text-foreground"
-              onClick={() => {
-                setForm({
-                  name: snippet.name,
-                  content: snippet.content,
-                  folder: snippet.folder ?? "",
-                });
-                setEditing(snippet);
-              }}
-            >
-              <Pencil className="size-3" />
-            </Button>
-            <Button
-              variant="ghost"
-              size="icon"
-              className="size-6 text-muted-foreground hover:text-destructive"
-              onClick={() => remove(snippet)}
-            >
-              <Trash2 className="size-3" />
-            </Button>
-          </div>
-        </div>
-      ))}
-    </div>
-  );
-}
diff --git a/plugins/snippets/src/frontend/ExecutionResultsDialog.tsx b/plugins/snippets/src/frontend/ExecutionResultsDialog.tsx
deleted file mode 100644
index 96aa5804f..000000000
--- a/plugins/snippets/src/frontend/ExecutionResultsDialog.tsx
+++ /dev/null
@@ -1,85 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Loader2, Server } from "lucide-react";
-import {
-  Button,
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogFooter,
-  DialogHeader,
-  DialogTitle,
-} from "@termix/plugin-sdk/ui";
-
-export interface HostExecutionResult {
-  hostId: number;
-  hostLabel: string;
-  /** Null while the command is still running on this host. */
-  success: boolean | null;
-  output: string;
-  error?: string;
-}
-
-export function ExecutionResultsDialog({
-  snippetName,
-  results,
-  onClose,
-}: {
-  snippetName: string;
-  results: HostExecutionResult[];
-  onClose: () => void;
-}) {
-  const { t } = useTranslation();
-
-  return (
-    <Dialog open onOpenChange={(open) => !open && onClose()}>
-      <DialogContent className="sm:max-w-xl">
-        <DialogHeader>
-          <DialogTitle className="text-lg font-bold">
-            {t("executionResultTitle", { name: snippetName })}
-          </DialogTitle>
-          <DialogDescription className="text-xs text-muted-foreground">
-            {t("executionResultDescription")}
-          </DialogDescription>
-        </DialogHeader>
-        <div className="flex flex-col border border-border max-h-96 overflow-y-auto">
-          {results.map((result) => (
-            <div
-              key={result.hostId}
-              className="flex flex-col gap-1.5 p-2.5 border-b border-border/40 last:border-b-0"
-            >
-              <div className="flex items-center gap-2">
-                <Server className="size-3 shrink-0 text-muted-foreground" />
-                <span className="text-xs font-semibold truncate flex-1">
-                  {result.hostLabel}
-                </span>
-                {result.success === null ? (
-                  <Loader2 className="size-3.5 animate-spin text-muted-foreground" />
-                ) : (
-                  <span
-                    className={`text-[9px] px-1 py-px border uppercase tracking-wider shrink-0 ${
-                      result.success
-                        ? "border-green-500/30 bg-green-500/10 text-green-500"
-                        : "border-destructive/30 bg-destructive/10 text-destructive"
-                    }`}
-                  >
-                    {t(result.success ? "executionSuccess" : "executionFailed")}
-                  </span>
-                )}
-              </div>
-              {(result.output || result.error) && (
-                <pre className="text-[11px] bg-muted/30 p-2 overflow-x-auto whitespace-pre-wrap font-mono text-muted-foreground max-h-40">
-                  {result.error || result.output}
-                </pre>
-              )}
-            </div>
-          ))}
-        </div>
-        <DialogFooter>
-          <Button variant="ghost" onClick={onClose}>
-            {t("close")}
-          </Button>
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
-  );
-}
diff --git a/plugins/snippets/src/frontend/HostSnippetsSection.tsx b/plugins/snippets/src/frontend/HostSnippetsSection.tsx
deleted file mode 100644
index 130079d24..000000000
--- a/plugins/snippets/src/frontend/HostSnippetsSection.tsx
+++ /dev/null
@@ -1,187 +0,0 @@
-import { Plus, Play, Trash2, Zap } from "lucide-react";
-import {
-  useTranslation,
-  type HostEditorSectionProps,
-} from "@termix/plugin-sdk/frontend";
-import {
-  Button,
-  HostDefaultBadge,
-  HostDefaultField,
-  Input,
-  SectionCard,
-  Select2,
-} from "@termix/plugin-sdk/ui";
-import { PLUGIN_ID, readStartupSnippetId } from "../shared/host-settings.js";
-import { useSnippetOptions } from "./use-snippet-options";
-
-type PluginSettingsBag = Record<string, Record<string, unknown>>;
-
-/** A quick action row while it is being edited: the snippet may be unset. */
-interface QuickActionRow {
-  name: string;
-  snippetId: number | null;
-}
-
-function readRows(value: unknown): QuickActionRow[] {
-  if (!Array.isArray(value)) return [];
-  return value.map((entry) => {
-    const row = (entry ?? {}) as { name?: unknown; snippetId?: unknown };
-    const id = Number(row.snippetId);
-    return {
-      name: typeof row.name === "string" ? row.name : "",
-      snippetId: Number.isInteger(id) && id > 0 ? id : null,
-    };
-  });
-}
-
-/**
- * The host editor's Snippets tab: the snippet a terminal runs when it
- * connects, and the quick action buttons Host Metrics shows for the host.
- * Both are this plugin's host settings, saved with the host.
- */
-export function HostSnippetsSection({
-  form,
-  updateForm,
-  adminTargetUserId,
-}: HostEditorSectionProps) {
-  const { t } = useTranslation();
-  const { options } = useSnippetOptions(adminTargetUserId);
-  const own =
-    (form.pluginSettings as PluginSettingsBag | undefined)?.[PLUGIN_ID] ?? {};
-  const startupSnippetId = readStartupSnippetId(own.startupSnippetId);
-  const quickActions = readRows(own.quickActions);
-
-  const write = (values: Record<string, unknown>) =>
-    updateForm((current) => {
-      const all =
-        (current.pluginSettings as PluginSettingsBag | undefined) ?? {};
-      return {
-        ...current,
-        pluginSettings: {
-          ...all,
-          [PLUGIN_ID]: { ...(all[PLUGIN_ID] ?? {}), ...values },
-        },
-      };
-    });
-
-  const setQuickActions = (rows: QuickActionRow[]) =>
-    write({ quickActions: rows });
-
-  return (
-    <>
-      <HostDefaultField settingKey="startupSnippetId">
-        <SectionCard
-          title={t("host.startupTitle")}
-          icon={<Play className="size-3.5" />}
-        >
-          <div className="flex flex-col gap-1.5 py-3">
-            <p className="flex items-center gap-1.5 text-xs text-muted-foreground">
-              {t("host.startupDescription")}
-              <HostDefaultBadge settingKey="startupSnippetId" />
-            </p>
-            <Select2
-              aria-label={t("host.startupTitle")}
-              value={startupSnippetId ?? ""}
-              onChange={(e) =>
-                write({
-                  startupSnippetId: e.target.value
-                    ? Number(e.target.value)
-                    : null,
-                })
-              }
-              className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-            >
-              <option value="">{t("host.none")}</option>
-              {options.map((snippet) => (
-                <option key={snippet.id} value={snippet.id}>
-                  {snippet.name}
-                </option>
-              ))}
-            </Select2>
-          </div>
-        </SectionCard>
-      </HostDefaultField>
-      <HostDefaultField settingKey="quickActions">
-        <SectionCard
-          title={t("host.quickActionsTitle")}
-          icon={<Zap className="size-3.5" />}
-          action={
-            <Button
-              variant="outline"
-              size="sm"
-              className="h-6 text-[10px] px-2 border-accent-brand/40 text-accent-brand"
-              onClick={() =>
-                setQuickActions([
-                  ...quickActions,
-                  { name: "", snippetId: null },
-                ])
-              }
-            >
-              <Plus className="size-3 mr-1" /> {t("host.addQuickAction")}
-            </Button>
-          }
-        >
-          <div className="flex flex-col gap-3 py-3">
-            <p className="flex items-center gap-1.5 text-xs text-muted-foreground">
-              {t("host.quickActionsDescription")}
-              <HostDefaultBadge settingKey="quickActions" />
-            </p>
-            {quickActions.length === 0 && (
-              <div className="flex flex-col items-center justify-center py-4 text-muted-foreground/40 gap-1.5">
-                <Zap className="size-6" />
-                <span className="text-xs">{t("host.noQuickActions")}</span>
-              </div>
-            )}
-            {quickActions.map((row, index) => (
-              <div
-                key={index}
-                className="flex items-center gap-2 p-2 bg-muted/20 border border-border group"
-              >
-                <Input
-                  className="h-7 text-xs flex-1"
-                  placeholder={t("host.buttonLabel")}
-                  value={row.name}
-                  onChange={(e) => {
-                    const next = [...quickActions];
-                    next[index] = { ...row, name: e.target.value };
-                    setQuickActions(next);
-                  }}
-                />
-                <Select2
-                  aria-label={t("host.selectSnippet")}
-                  className="h-7 text-xs flex-1 border border-border bg-background px-2 outline-none focus:ring-1 focus:ring-ring"
-                  value={row.snippetId ?? ""}
-                  onChange={(e) => {
-                    const next = [...quickActions];
-                    next[index] = {
-                      ...row,
-                      snippetId: e.target.value ? Number(e.target.value) : null,
-                    };
-                    setQuickActions(next);
-                  }}
-                >
-                  <option value="">{t("host.selectSnippet")}</option>
-                  {options.map((snippet) => (
-                    <option key={snippet.id} value={snippet.id}>
-                      {snippet.name}
-                    </option>
-                  ))}
-                </Select2>
-                <button
-                  type="button"
-                  aria-label={t("host.removeQuickAction")}
-                  className="text-muted-foreground hover:text-destructive opacity-0 group-hover:opacity-100 transition-opacity"
-                  onClick={() =>
-                    setQuickActions(quickActions.filter((_, i) => i !== index))
-                  }
-                >
-                  <Trash2 className="size-3.5" />
-                </button>
-              </div>
-            ))}
-          </div>
-        </SectionCard>
-      </HostDefaultField>
-    </>
-  );
-}
diff --git a/plugins/snippets/src/frontend/QuickActionButtons.tsx b/plugins/snippets/src/frontend/QuickActionButtons.tsx
deleted file mode 100644
index f0bfaaffb..000000000
--- a/plugins/snippets/src/frontend/QuickActionButtons.tsx
+++ /dev/null
@@ -1,147 +0,0 @@
-import { useMemo, useState } from "react";
-import { RefreshCw } from "lucide-react";
-import { toast } from "sonner";
-import {
-  usePermission,
-  usePluginApi,
-  useTranslation,
-} from "@termix/plugin-sdk/frontend";
-import { Button, Separator } from "@termix/plugin-sdk/ui";
-import {
-  readQuickActions,
-  snippetHostSettings,
-  type QuickAction,
-} from "../shared/host-settings.js";
-import { hasSnippetInputs } from "../shared/variables.js";
-import { askForInputs, shouldConfirmExecution } from "./prompt-store";
-import { createSnippetsApi } from "./snippets-api";
-import { errorMessage } from "./types";
-
-interface ToolbarHost {
-  id?: number | string;
-  name?: string;
-  ip?: string;
-  username?: string;
-  port?: number;
-  pluginSettings?: Record<string, Record<string, unknown>>;
-}
-
-/**
- * The host's quick actions as buttons in the Host Metrics toolbar (the
- * host-metrics.toolbar slot). Each runs its snippet on the host over a fresh
- * SSH connection and reports the result in a toast.
- */
-export function QuickActionButtons(props: Record<string, unknown>) {
-  const host = props.host as ToolbarHost | undefined;
-  const { t } = useTranslation();
-  const api = usePluginApi();
-  const client = useMemo(() => createSnippetsApi(api), [api]);
-  const canView = usePermission("view");
-  const [running, setRunning] = useState<Set<number>>(new Set());
-  const actions = readQuickActions(snippetHostSettings(host).quickActions);
-  const hostId = Number(host?.id);
-
-  if (!canView || actions.length === 0 || !Number.isInteger(hostId)) {
-    return null;
-  }
-
-  const setBusy = (snippetId: number, busy: boolean) =>
-    setRunning((prev) => {
-      const next = new Set(prev);
-      if (busy) next.add(snippetId);
-      else next.delete(snippetId);
-      return next;
-    });
-
-  async function execute(
-    action: QuickAction,
-    inputValues: Record<string, string>,
-  ) {
-    const toastId = `quick-action-${hostId}-${action.snippetId}`;
-    setBusy(action.snippetId, true);
-    toast.loading(t("quickActions.running", { name: action.name }), {
-      id: toastId,
-    });
-    try {
-      const result = await client.execute(
-        action.snippetId,
-        hostId,
-        Object.keys(inputValues).length > 0 ? inputValues : undefined,
-      );
-      if (result.success) {
-        toast.success(t("quickActions.succeeded", { name: action.name }), {
-          id: toastId,
-          description: result.output?.substring(0, 200),
-          duration: 5000,
-        });
-      } else {
-        toast.error(t("quickActions.failed", { name: action.name }), {
-          id: toastId,
-          description: result.error || result.output,
-          duration: 5000,
-        });
-      }
-    } catch (error) {
-      toast.error(t("quickActions.error", { name: action.name }), {
-        id: toastId,
-        description: errorMessage(error, t("executionFailed")),
-        duration: 5000,
-      });
-    } finally {
-      setBusy(action.snippetId, false);
-    }
-  }
-
-  async function run(action: QuickAction) {
-    let inputValues: Record<string, string> = {};
-    const snippet = await client.get(action.snippetId).catch(() => null);
-    if (snippet && hasSnippetInputs(snippet.content)) {
-      const values = await askForInputs(
-        { name: action.name || snippet.name, content: snippet.content },
-        host
-          ? {
-              ip: host.ip,
-              username: host.username,
-              port: host.port,
-              name: host.name,
-            }
-          : null,
-      );
-      if (!values) return;
-      inputValues = values;
-    }
-    const go = () => void execute(action, inputValues);
-    if (!shouldConfirmExecution()) {
-      go();
-      return;
-    }
-    toast(t("confirmRunMessage", { name: action.name }), {
-      action: { label: t("confirmRunButton"), onClick: go },
-      duration: 6000,
-    });
-  }
-
-  return (
-    <>
-      <div className="mr-3 flex flex-wrap gap-2">
-        {actions.map((action, index) => {
-          const busy = running.has(action.snippetId);
-          return (
-            <Button
-              key={index}
-              variant="outline"
-              size="sm"
-              className="h-8 text-xs font-semibold"
-              disabled={busy}
-              onClick={() => void run(action)}
-            >
-              {busy && <RefreshCw className="mr-1 size-3 animate-spin" />}
-              {action.name}
-            </Button>
-          );
-        })}
-      </div>
-      <Separator orientation="vertical" className="mx-3 h-8" />
-    </>
-  );
-}
diff --git a/plugins/snippets/src/frontend/SnippetEditor.tsx b/plugins/snippets/src/frontend/SnippetEditor.tsx
deleted file mode 100644
index 80b6d0612..000000000
--- a/plugins/snippets/src/frontend/SnippetEditor.tsx
+++ /dev/null
@@ -1,288 +0,0 @@
-import { useMemo, useState } from "react";
-import { useHosts, useTranslation } from "@termix/plugin-sdk/frontend";
-import { ArrowLeft, Check, FileText, Search, Server, Zap } from "lucide-react";
-import { Button, Input, SectionCard, Select2 } from "@termix/plugin-sdk/ui";
-import { parseHostFilter, type Snippet, type SnippetFolder } from "./types";
-
-export interface SnippetFormValues {
-  name: string;
-  content: string;
-  description: string;
-  folder: string;
-  isNote: boolean;
-  hostIds: number[];
-}
-
-const labelClass =
-  "text-[10px] font-bold uppercase tracking-widest text-muted-foreground";
-
-export function SnippetEditor({
-  snippet,
-  defaultFolder,
-  folders,
-  onBack,
-  onSave,
-}: {
-  /** The snippet being edited, or null to create one. */
-  snippet: Snippet | null;
-  defaultFolder?: string;
-  folders: SnippetFolder[];
-  onBack: () => void;
-  onSave: (values: SnippetFormValues) => Promise<boolean>;
-}) {
-  const { t } = useTranslation();
-  const [values, setValues] = useState<SnippetFormValues>(() => ({
-    name: snippet?.name ?? "",
-    content: snippet?.content ?? "",
-    description: snippet?.description ?? "",
-    folder: snippet?.folder ?? defaultFolder ?? "",
-    isNote: snippet?.isNote ?? false,
-    hostIds: parseHostFilter(snippet?.hostFilter),
-  }));
-  const { hosts } = useHosts();
-  const [hostSearch, setHostSearch] = useState("");
-  const [saving, setSaving] = useState(false);
-
-  const set = <K extends keyof SnippetFormValues>(
-    key: K,
-    value: SnippetFormValues[K],
-  ) => setValues((prev) => ({ ...prev, [key]: value }));
-
-  const canSave = !!values.name.trim() && !!values.content.trim() && !saving;
-  // A snippet can point at a folder that has no metadata row yet.
-  const folderNames = Array.from(
-    new Set([
-      ...folders.map((f) => f.name),
-      ...(values.folder ? [values.folder] : []),
-    ]),
-  ).sort((a, b) => a.localeCompare(b));
-
-  const hostQuery = hostSearch.trim().toLowerCase();
-  const visibleHosts = useMemo(
-    () =>
-      hosts
-        .filter(
-          (host) =>
-            !hostQuery ||
-            host.name.toLowerCase().includes(hostQuery) ||
-            host.ip.toLowerCase().includes(hostQuery),
-        )
-        .sort((a, b) => a.name.localeCompare(b.name)),
-    [hosts, hostQuery],
-  );
-
-  function toggleHost(id: number) {
-    set(
-      "hostIds",
-      values.hostIds.includes(id)
-        ? values.hostIds.filter((h) => h !== id)
-        : [...values.hostIds, id],
-    );
-  }
-
-  async function handleSave() {
-    if (!canSave) return;
-    setSaving(true);
-    try {
-      await onSave(values);
-    } finally {
-      setSaving(false);
-    }
-  }
-
-  return (
-    <div className="flex flex-col flex-1 min-h-0">
-      <button
-        onClick={onBack}
-        className="flex items-center gap-2 px-3 py-2 shrink-0 text-xs text-muted-foreground hover:text-foreground hover:bg-muted/40 transition-colors border-b border-border"
-      >
-        <ArrowLeft className="size-3.5 shrink-0" />
-        <span>{t("backToSnippets")}</span>
-        {snippet && (
-          <span
-            className="ml-auto font-semibold text-foreground truncate max-w-[200px]"
-            title={snippet.name}
-          >
-            {snippet.name}
-          </span>
-        )}
-      </button>
-
-      <div className="flex-1 min-h-0 overflow-y-auto px-3 py-3 flex flex-col gap-3">
-        <SectionCard
-          title={t(snippet ? "editSnippetTitle" : "createSnippetTitle")}
-          icon={<FileText className="size-3.5" />}
-        >
-          <div className="flex flex-col gap-4 py-3">
-            <div className="flex flex-col gap-1.5">
-              <label className={labelClass}>
-                {t("nameLabel")} <span className="text-accent-brand">*</span>
-              </label>
-              <Input
-                autoFocus
-                value={values.name}
-                placeholder={t("namePlaceholder")}
-                onChange={(e) => set("name", e.target.value)}
-              />
-            </div>
-            <div className="flex flex-col gap-1.5">
-              <label className={labelClass}>{t("descriptionLabel")}</label>
-              <Input
-                value={values.description}
-                placeholder={t("descriptionPlaceholder")}
-                onChange={(e) => set("description", e.target.value)}
-              />
-            </div>
-            <div className="flex flex-col gap-1.5">
-              <label className={labelClass}>{t("folderLabel")}</label>
-              <Select2
-                value={values.folder}
-                onChange={(e) => set("folder", e.target.value)}
-              >
-                <option value="">{t("noFolder")}</option>
-                {folderNames.map((name) => (
-                  <option key={name} value={name}>
-                    {name}
-                  </option>
-                ))}
-              </Select2>
-            </div>
-            <div className="flex flex-col gap-1.5">
-              <label className={labelClass}>{t("typeLabel")}</label>
-              <div className="flex items-stretch border border-border">
-                {[false, true].map((isNote) => (
-                  <button
-                    key={String(isNote)}
-                    type="button"
-                    onClick={() => set("isNote", isNote)}
-                    className={`flex-1 h-8 text-xs transition-colors ${isNote ? "border-l border-border" : ""} ${
-                      values.isNote === isNote
-                        ? "bg-accent-brand/10 text-accent-brand"
-                        : "text-muted-foreground hover:text-foreground hover:bg-muted/40"
-                    }`}
-                  >
-                    {t(isNote ? "typeNote" : "typeCommand")}
-                  </button>
-                ))}
-              </div>
-              <span className="text-[11px] text-muted-foreground">
-                {t(values.isNote ? "typeNoteHint" : "typeCommandHint")}
-              </span>
-            </div>
-            <div className="flex flex-col gap-1.5">
-              <label className={labelClass}>
-                {t(values.isNote ? "noteLabel" : "commandLabel")}{" "}
-                <span className="text-accent-brand">*</span>
-              </label>
-              <textarea
-                value={values.content}
-                placeholder={t(
-                  values.isNote ? "notePlaceholder" : "commandPlaceholder",
-                )}
-                onChange={(e) => set("content", e.target.value)}
-                onKeyDown={(e) => {
-                  if (e.key === "Enter" && (e.ctrlKey || e.metaKey)) {
-                    e.preventDefault();
-                    void handleSave();
-                  }
-                }}
-                className="w-full min-h-36 px-3 py-2 text-xs bg-background border border-border text-foreground placeholder:text-muted-foreground resize-y outline-none focus:ring-1 focus:ring-ring font-mono"
-              />
-              <span className="text-[10px] text-muted-foreground/70 font-mono">
-                {t("variablesHint")}
-              </span>
-            </div>
-          </div>
-        </SectionCard>
-
-        {!values.isNote && (
-          <SectionCard
-            title={t("targetHostsLabel")}
-            icon={<Zap className="size-3.5" />}
-            action={
-              values.hostIds.length > 0 ? (
-                <button
-                  type="button"
-                  onClick={() => set("hostIds", [])}
-                  className="text-[10px] text-accent-brand hover:underline"
-                >
-                  {t("clearTargetHosts")}
-                </button>
-              ) : undefined
-            }
-          >
-            <div className="flex flex-col gap-2 py-3">
-              <span className="text-[11px] text-muted-foreground">
-                {t("targetHostsHint")}
-              </span>
-              {hosts.length === 0 ? (
-                <span className="text-[11px] text-muted-foreground/60">
-                  {t("noHostsAvailable")}
-                </span>
-              ) : (
-                <div className="flex flex-col border border-border">
-                  <div className="flex items-center gap-2 px-2.5 h-7 border-b border-border bg-muted/40">
-                    <Search className="size-3 text-muted-foreground/60 shrink-0" />
-                    <input
-                      value={hostSearch}
-                      onChange={(e) => setHostSearch(e.target.value)}
-                      placeholder={t("searchHosts")}
-                      className="flex-1 text-xs bg-transparent outline-none placeholder:text-muted-foreground/50 min-w-0"
-                    />
-                  </div>
-                  <div className="flex flex-col max-h-48 overflow-y-auto">
-                    {visibleHosts.map((host) => {
-                      const id = Number(host.id);
-                      const selected = values.hostIds.includes(id);
-                      return (
-                        <button
-                          key={host.id}
-                          type="button"
-                          onClick={() => toggleHost(id)}
-                          className={`flex items-center gap-2 px-2.5 py-1.5 text-left border-b border-border/40 last:border-b-0 transition-colors ${
-                            selected
-                              ? "bg-accent-brand/[0.07]"
-                              : "hover:bg-muted/40"
-                          }`}
-                        >
-                          <span
-                            className={`size-3.5 border-2 flex items-center justify-center shrink-0 transition-colors ${selected ? "border-accent-brand bg-accent-brand" : "border-border bg-background"}`}
-                          >
-                            {selected && (
-                              <Check className="size-2 text-background" />
-                            )}
-                          </span>
-                          <Server className="size-3 shrink-0 text-muted-foreground/60" />
-                          <span className="text-xs font-medium truncate flex-1">
-                            {host.name || host.ip}
-                          </span>
-                          <span className="text-[11px] text-muted-foreground/60 font-mono truncate shrink-0 max-w-[45%]">
-                            {host.ip}
-                          </span>
-                        </button>
-                      );
-                    })}
-                  </div>
-                </div>
-              )}
-            </div>
-          </SectionCard>
-        )}
-
-        <div className="flex justify-end gap-3">
-          <Button variant="ghost" onClick={onBack} disabled={saving}>
-            {t("cancel")}
-          </Button>
-          <Button
-            variant="outline"
-            className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand px-6"
-            disabled={!canSave}
-            onClick={() => void handleSave()}
-          >
-            {t(snippet ? "saveSnippetButton" : "createSnippetButton")}
-          </Button>
-        </div>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/snippets/src/frontend/SnippetFolderDialog.tsx b/plugins/snippets/src/frontend/SnippetFolderDialog.tsx
deleted file mode 100644
index 0ed312c02..000000000
--- a/plugins/snippets/src/frontend/SnippetFolderDialog.tsx
+++ /dev/null
@@ -1,141 +0,0 @@
-import { useState } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import {
-  Button,
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogFooter,
-  DialogHeader,
-  DialogTitle,
-  FOLDER_COLORS,
-  Input,
-} from "@termix/plugin-sdk/ui";
-import { FolderIcon } from "./folder-icons";
-import { FOLDER_ICONS, type FolderIconId, type SnippetFolder } from "./types";
-
-export interface FolderFormValues {
-  name: string;
-  color: string;
-  icon: FolderIconId;
-}
-
-export function SnippetFolderDialog({
-  folder,
-  onClose,
-  onSave,
-}: {
-  /** The folder being edited, or null to create one. */
-  folder: SnippetFolder | null;
-  onClose: () => void;
-  onSave: (values: FolderFormValues) => Promise<void>;
-}) {
-  const { t } = useTranslation();
-  const [name, setName] = useState(folder?.name ?? "");
-  const [color, setColor] = useState<string>(folder?.color ?? FOLDER_COLORS[0]);
-  const [icon, setIcon] = useState<FolderIconId>(
-    (folder?.icon as FolderIconId) ?? "folder",
-  );
-  const [saving, setSaving] = useState(false);
-
-  const isEdit = folder !== null;
-
-  async function handleSave() {
-    if (!name.trim()) return;
-    setSaving(true);
-    try {
-      await onSave({ name: name.trim(), color, icon });
-    } finally {
-      setSaving(false);
-    }
-  }
-
-  return (
-    <Dialog open onOpenChange={(open) => !open && onClose()}>
-      <DialogContent className="sm:max-w-md">
-        <DialogHeader>
-          <DialogTitle className="text-lg font-bold">
-            {t(isEdit ? "editFolderTitle" : "createFolderTitle")}
-          </DialogTitle>
-          <DialogDescription className="text-xs text-muted-foreground">
-            {t(isEdit ? "editFolderDescription" : "createFolderDescription")}
-          </DialogDescription>
-        </DialogHeader>
-        <div className="flex flex-col gap-4 mt-1">
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("folderNameLabel")}
-            </label>
-            <Input
-              autoFocus
-              value={name}
-              placeholder={t("folderNamePlaceholder")}
-              onChange={(e) => setName(e.target.value)}
-              onKeyDown={(e) => {
-                if (e.key === "Enter") void handleSave();
-              }}
-            />
-          </div>
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("folderColorLabel")}
-            </label>
-            <div className="grid grid-cols-8 gap-1.5">
-              {FOLDER_COLORS.map((c) => (
-                <button
-                  key={c}
-                  type="button"
-                  title={c}
-                  onClick={() => setColor(c)}
-                  className={`h-7 transition-all ${color === c ? "ring-2 ring-offset-2 ring-offset-background ring-foreground/50" : "opacity-75 hover:opacity-100"}`}
-                  style={{ backgroundColor: c }}
-                />
-              ))}
-            </div>
-          </div>
-          <div className="flex flex-col gap-1.5">
-            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("folderIconLabel")}
-            </label>
-            <div className="grid grid-cols-5 gap-1.5">
-              {FOLDER_ICONS.map((id) => (
-                <button
-                  key={id}
-                  type="button"
-                  title={id}
-                  onClick={() => setIcon(id)}
-                  className={`flex items-center justify-center h-9 border transition-colors ${
-                    icon === id
-                      ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand"
-                      : "border-border text-muted-foreground hover:text-foreground hover:border-muted-foreground"
-                  }`}
-                >
-                  <FolderIcon icon={id} className="size-4" />
-                </button>
-              ))}
-            </div>
-          </div>
-          <div className="flex items-center gap-2 px-2.5 py-2 border border-border bg-muted/20">
-            <FolderIcon icon={icon} className="size-4" style={{ color }} />
-            <span className="text-[13px] font-bold tracking-tight truncate">
-              {name.trim() || t("folderNamePlaceholder")}
-            </span>
-          </div>
-        </div>
-        <DialogFooter>
-          <Button variant="ghost" onClick={onClose}>
-            {t("cancel")}
-          </Button>
-          <Button
-            variant="outline"
-            className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-            disabled={saving || !name.trim()}
-            onClick={() => void handleSave()}
-          >
-            {t(isEdit ? "saveFolderButton" : "createFolderButton")}
-          </Button>
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
-  );
-}
diff --git a/plugins/snippets/src/frontend/SnippetOverlay.tsx b/plugins/snippets/src/frontend/SnippetOverlay.tsx
deleted file mode 100644
index 0a776a69a..000000000
--- a/plugins/snippets/src/frontend/SnippetOverlay.tsx
+++ /dev/null
@@ -1,32 +0,0 @@
-import { useEffect } from "react";
-import { useSettings } from "@termix/plugin-sdk/frontend";
-import { SnippetVariablesDialog } from "./SnippetVariablesDialog";
-import { readSnippetSettings } from "./settings";
-import { setConfirmExecution, usePendingPrompt } from "./prompt-store";
-
-/**
- * Always mounted at the shell's root (the shell.overlay slot), so a snippet
- * started from the command palette, a keybinding or a host button can ask
- * for its inputs after whatever started it has closed.
- */
-export function SnippetOverlay() {
-  const settings = useSettings("user");
-  const prompt = usePendingPrompt();
-  const confirmExecution = readSnippetSettings(
-    settings.values,
-  ).confirmExecution;
-
-  useEffect(() => {
-    setConfirmExecution(confirmExecution);
-  }, [confirmExecution]);
-
-  if (!prompt) return null;
-  return (
-    <SnippetVariablesDialog
-      snippet={prompt.snippet}
-      host={prompt.host}
-      onCancel={() => prompt.settle(null)}
-      onConfirm={(_resolved, values) => prompt.settle(values)}
-    />
-  );
-}
diff --git a/plugins/snippets/src/frontend/SnippetSettings.tsx b/plugins/snippets/src/frontend/SnippetSettings.tsx
deleted file mode 100644
index ea7322650..000000000
--- a/plugins/snippets/src/frontend/SnippetSettings.tsx
+++ /dev/null
@@ -1,77 +0,0 @@
-import {
-  useTranslation,
-  type SettingsState,
-} from "@termix/plugin-sdk/frontend";
-import { ArrowLeft, Rows3, SquareStack } from "lucide-react";
-import { FakeSwitch, SectionCard, SettingRow } from "@termix/plugin-sdk/ui";
-import { readSnippetSettings, type SnippetDisplaySettings } from "./settings";
-
-export function SnippetSettings({
-  settings,
-  onBack,
-}: {
-  settings: SettingsState;
-  onBack: () => void;
-}) {
-  const { t } = useTranslation();
-  const current = readSnippetSettings(settings.values);
-
-  const save = (patch: Partial<SnippetDisplaySettings>) =>
-    void settings.save({ ...settings.values, ...patch });
-
-  return (
-    <div className="flex flex-col flex-1 min-h-0">
-      <button
-        onClick={onBack}
-        className="flex items-center gap-2 px-3 py-2 shrink-0 text-xs text-muted-foreground hover:text-foreground hover:bg-muted/40 transition-colors border-b border-border"
-      >
-        <ArrowLeft className="size-3.5 shrink-0" />
-        <span>{t("backToSnippets")}</span>
-        <span className="ml-auto font-semibold text-foreground">
-          {t("settingsTitle")}
-        </span>
-      </button>
-
-      <div className="flex-1 min-h-0 overflow-y-auto px-3 py-3 flex flex-col gap-3">
-        <SectionCard
-          title={t("settingsDisplayTitle")}
-          icon={<Rows3 className="size-3.5" />}
-        >
-          <SettingRow
-            label={t("settings.foldersCollapsed.label")}
-            description={t("settings.foldersCollapsed.description")}
-          >
-            <FakeSwitch
-              checked={current.foldersCollapsed}
-              onChange={(v) => save({ foldersCollapsed: v })}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("settings.showCommands.label")}
-            description={t("settings.showCommands.description")}
-          >
-            <FakeSwitch
-              checked={current.showCommands}
-              onChange={(v) => save({ showCommands: v })}
-            />
-          </SettingRow>
-        </SectionCard>
-
-        <SectionCard
-          title={t("settingsBehaviorTitle")}
-          icon={<SquareStack className="size-3.5" />}
-        >
-          <SettingRow
-            label={t("settings.confirmExecution.label")}
-            description={t("settings.confirmExecution.description")}
-          >
-            <FakeSwitch
-              checked={current.confirmExecution}
-              onChange={(v) => save({ confirmExecution: v })}
-            />
-          </SettingRow>
-        </SectionCard>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/snippets/src/frontend/SnippetShareView.tsx b/plugins/snippets/src/frontend/SnippetShareView.tsx
deleted file mode 100644
index 25218ad0c..000000000
--- a/plugins/snippets/src/frontend/SnippetShareView.tsx
+++ /dev/null
@@ -1,429 +0,0 @@
-import { useCallback, useEffect, useMemo, useState } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { toast } from "sonner";
-import {
-  ArrowLeft,
-  Check,
-  ListChecks,
-  Search,
-  Share2,
-  Shield,
-  User,
-  Users,
-  X,
-} from "lucide-react";
-import {
-  Button,
-  DropdownMenu,
-  DropdownMenuContent,
-  DropdownMenuItem,
-  DropdownMenuTrigger,
-  Input,
-} from "@termix/plugin-sdk/ui";
-import type {
-  ShareableRole,
-  ShareableUser,
-  SnippetShareInput,
-  SnippetsApi,
-} from "./snippets-api";
-import { errorMessage, type Snippet, type SnippetAccessEntry } from "./types";
-
-export type ShareTarget =
-  { kind: "snippet"; snippet: Snippet } | { kind: "folder"; name: string };
-
-const EXPIRY_HOURS = [0, 1, 24, 168, 720] as const;
-
-const DOCS_URL = "https://docs.termix.site/features/authentication/rbac";
-
-export function SnippetShareView({
-  target,
-  client,
-  onBack,
-}: {
-  target: ShareTarget;
-  client: SnippetsApi;
-  onBack: () => void;
-}) {
-  const { t } = useTranslation();
-  const [users, setUsers] = useState<ShareableUser[]>([]);
-  const [roles, setRoles] = useState<ShareableRole[]>([]);
-  const [access, setAccess] = useState<SnippetAccessEntry[]>([]);
-  const [tab, setTab] = useState<"user" | "role">("user");
-  const [search, setSearch] = useState("");
-  const [selectedUsers, setSelectedUsers] = useState<Set<string>>(new Set());
-  const [selectedRoles, setSelectedRoles] = useState<Set<number>>(new Set());
-  const [expiryHours, setExpiryHours] = useState<number>(0);
-  const [loadError, setLoadError] = useState(false);
-  const [submitting, setSubmitting] = useState(false);
-  const [folderSummary, setFolderSummary] = useState<number | null>(null);
-
-  const snippetId = target.kind === "snippet" ? target.snippet.id : null;
-  const selectedCount = selectedUsers.size + selectedRoles.size;
-
-  const loadAccess = useCallback(async () => {
-    if (snippetId === null) return;
-    const list = await client.getAccess(snippetId);
-    setAccess(Array.isArray(list) ? list : []);
-  }, [client, snippetId]);
-
-  useEffect(() => {
-    let cancelled = false;
-    Promise.all([
-      client.shareTargetUsers(),
-      client.shareTargetRoles(),
-      loadAccess(),
-    ])
-      .then(([usersRes, rolesRes]) => {
-        if (cancelled) return;
-        setUsers(usersRes.users ?? []);
-        setRoles(rolesRes.roles ?? []);
-      })
-      .catch(() => {
-        if (!cancelled) setLoadError(true);
-      });
-    return () => {
-      cancelled = true;
-    };
-  }, [client, loadAccess]);
-
-  const query = search.trim().toLowerCase();
-  const filteredUsers = useMemo(
-    () => users.filter((u) => u.username.toLowerCase().includes(query)),
-    [users, query],
-  );
-  const filteredRoles = useMemo(
-    () =>
-      roles.filter((r) =>
-        (r.displayName || r.name).toLowerCase().includes(query),
-      ),
-    [roles, query],
-  );
-
-  function toggle<T>(set: Set<T>, value: T): Set<T> {
-    const next = new Set(set);
-    if (next.has(value)) next.delete(value);
-    else next.add(value);
-    return next;
-  }
-
-  async function handleShare() {
-    if (selectedCount === 0) return;
-    const expiresAt =
-      expiryHours > 0
-        ? new Date(Date.now() + expiryHours * 3600_000).toISOString()
-        : null;
-    const bodies: SnippetShareInput[] = [
-      ...[...selectedUsers].map((id) => ({
-        targetType: "user" as const,
-        targetUserId: id,
-        expiresAt,
-      })),
-      ...[...selectedRoles].map((id) => ({
-        targetType: "role" as const,
-        targetRoleId: id,
-        expiresAt,
-      })),
-    ];
-
-    setSubmitting(true);
-    try {
-      if (target.kind === "snippet") {
-        for (const body of bodies) await client.share(target.snippet.id, body);
-        await loadAccess();
-      } else {
-        let shared = 0;
-        for (const body of bodies) {
-          const result = await client.shareFolder(target.name, body);
-          shared = Math.max(shared, result.snippetsShared ?? 0);
-        }
-        setFolderSummary(shared);
-      }
-      toast.success(t("shareSuccess", { count: selectedCount }));
-      setSelectedUsers(new Set());
-      setSelectedRoles(new Set());
-    } catch (err) {
-      toast.error(errorMessage(err, t("shareFailed")));
-    } finally {
-      setSubmitting(false);
-    }
-  }
-
-  async function handleRevoke(entry: SnippetAccessEntry) {
-    if (snippetId === null) return;
-    try {
-      await client.revokeAccess(snippetId, entry.id);
-      setAccess((prev) => prev.filter((a) => a.id !== entry.id));
-      toast.success(t("revokeSuccess"));
-    } catch (err) {
-      toast.error(errorMessage(err, t("revokeFailed")));
-    }
-  }
-
-  const rowClass = (selected: boolean) =>
-    `flex items-center gap-2 px-2.5 py-1.5 text-xs text-left border-b border-border/50 last:border-0 transition-colors shrink-0 ${selected ? "bg-accent-brand/10 text-accent-brand" : "hover:bg-muted/40"}`;
-
-  const checkbox = (selected: boolean) => (
-    <div
-      className={`size-3.5 border flex items-center justify-center shrink-0 transition-colors ${selected ? "border-accent-brand bg-accent-brand" : "border-border bg-background"}`}
-    >
-      {selected && <Check className="size-2.5 text-background" />}
-    </div>
-  );
-
-  return (
-    <div className="flex flex-col flex-1 min-h-0">
-      <button
-        onClick={onBack}
-        className="flex items-center gap-2 px-3 py-2 shrink-0 border-b border-border text-xs text-muted-foreground hover:text-foreground transition-colors w-full text-left"
-      >
-        <ArrowLeft className="size-3.5 shrink-0" />
-        <span className="truncate">
-          {target.kind === "snippet"
-            ? t("shareSnippetTitle", { name: target.snippet.name })
-            : t("shareFolderTitle", { name: target.name })}
-        </span>
-      </button>
-
-      {loadError && (
-        <div className="flex items-start gap-2 px-3 py-2 shrink-0 border-b border-destructive/30 bg-destructive/5 text-xs text-destructive">
-          <Shield className="size-3.5 shrink-0 mt-0.5" />
-          <div>{t("shareLoadFailed")}</div>
-        </div>
-      )}
-
-      <div className="flex flex-col gap-2 p-3 shrink-0 border-b border-border">
-        <div className="flex items-center justify-between gap-2">
-          <div className="flex items-center gap-1.5 text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
-            <Users className="size-3.5" />
-            {t("shareWith")}
-          </div>
-          <a
-            href={DOCS_URL}
-            target="_blank"
-            rel="noreferrer"
-            className="text-[10px] text-accent-brand hover:underline shrink-0"
-          >
-            {t("docsLink")}
-          </a>
-        </div>
-
-        <div className="flex gap-1.5">
-          {(["user", "role"] as const).map((key) => {
-            const count =
-              key === "user" ? selectedUsers.size : selectedRoles.size;
-            return (
-              <button
-                key={key}
-                onClick={() => setTab(key)}
-                className={`flex-1 flex items-center justify-center gap-1 px-2 py-1.5 text-[10px] font-bold uppercase tracking-widest border transition-colors ${tab === key ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand" : "border-border text-muted-foreground hover:text-foreground"}`}
-              >
-                {key === "user" ? (
-                  <User className="size-3 shrink-0" />
-                ) : (
-                  <Shield className="size-3 shrink-0" />
-                )}
-                {t(key === "user" ? "usersTab" : "rolesTab")}
-                {count > 0 && <span>({count})</span>}
-              </button>
-            );
-          })}
-        </div>
-
-        <div className="relative">
-          <Search className="absolute left-2.5 top-1/2 -translate-y-1/2 size-3.5 text-muted-foreground/50" />
-          <Input
-            placeholder={t("shareSearchPlaceholder")}
-            value={search}
-            onChange={(e) => setSearch(e.target.value)}
-            className="pl-8"
-          />
-        </div>
-
-        <div className="flex flex-col border border-border h-28 overflow-y-auto">
-          {tab === "user" &&
-            (filteredUsers.length === 0 ? (
-              <div className="px-3 py-4 text-xs text-muted-foreground/50 text-center">
-                {t("shareNoMatches")}
-              </div>
-            ) : (
-              filteredUsers.map((user) => {
-                const selected = selectedUsers.has(user.id);
-                return (
-                  <button
-                    key={user.id}
-                    onClick={() =>
-                      setSelectedUsers((prev) => toggle(prev, user.id))
-                    }
-                    className={rowClass(selected)}
-                  >
-                    {checkbox(selected)}
-                    <User className="size-3 text-muted-foreground shrink-0" />
-                    <span className="truncate">{user.username}</span>
-                  </button>
-                );
-              })
-            ))}
-          {tab === "role" &&
-            (filteredRoles.length === 0 ? (
-              <div className="px-3 py-4 text-xs text-muted-foreground/50 text-center">
-                {t("shareNoMatches")}
-              </div>
-            ) : (
-              filteredRoles.map((role) => {
-                const selected = selectedRoles.has(role.id);
-                return (
-                  <button
-                    key={role.id}
-                    onClick={() =>
-                      setSelectedRoles((prev) => toggle(prev, role.id))
-                    }
-                    className={rowClass(selected)}
-                  >
-                    {checkbox(selected)}
-                    <Shield className="size-3 text-muted-foreground shrink-0" />
-                    <span className="truncate">
-                      {role.displayName || role.name}
-                    </span>
-                  </button>
-                );
-              })
-            ))}
-        </div>
-
-        <div className="flex items-end gap-2">
-          <DropdownMenu>
-            <DropdownMenuTrigger asChild>
-              <button className="flex flex-col gap-1 flex-1 min-w-0">
-                <span className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground text-left">
-                  {t("shareExpiry")}
-                </span>
-                <span className="h-8 flex items-center px-2.5 text-xs border border-border hover:bg-muted/40 transition-colors whitespace-nowrap">
-                  {t(`shareExpiryOptions.h${expiryHours}`)}
-                </span>
-              </button>
-            </DropdownMenuTrigger>
-            <DropdownMenuContent align="start" className="text-xs">
-              {EXPIRY_HOURS.map((hours) => (
-                <DropdownMenuItem
-                  key={hours}
-                  onClick={() => setExpiryHours(hours)}
-                >
-                  {expiryHours === hours ? (
-                    <Check className="size-3 mr-1.5" />
-                  ) : (
-                    <span className="size-3 mr-1.5" />
-                  )}
-                  {t(`shareExpiryOptions.h${hours}`)}
-                </DropdownMenuItem>
-              ))}
-            </DropdownMenuContent>
-          </DropdownMenu>
-
-          <Button
-            variant="outline"
-            className="h-8 shrink-0 border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-            disabled={selectedCount === 0 || submitting}
-            onClick={() => void handleShare()}
-          >
-            <Share2 className="size-3.5 mr-1.5" />
-            {selectedCount > 0
-              ? t("shareWithCount", { count: selectedCount })
-              : t("shareButton")}
-          </Button>
-        </div>
-
-        {target.kind === "folder" && (
-          <p className="text-[11px] text-muted-foreground leading-snug">
-            {t("shareFolderHint")}
-          </p>
-        )}
-      </div>
-
-      {target.kind === "folder" && folderSummary !== null && (
-        <div className="flex items-center gap-1.5 px-3 py-2 shrink-0 text-xs text-muted-foreground">
-          <ListChecks className="size-3.5 shrink-0" />
-          {t("shareFolderSummary", { count: folderSummary })}
-        </div>
-      )}
-
-      {target.kind === "snippet" && (
-        <div className="flex flex-col flex-1 min-h-0">
-          <div className="flex items-center gap-1.5 px-3 py-2 shrink-0 border-b border-border text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
-            <ListChecks className="size-3.5" />
-            {t("currentAccess")}
-            {access.length > 0 && (
-              <span className="text-muted-foreground/40">
-                ({access.length})
-              </span>
-            )}
-          </div>
-          <div className="flex-1 min-h-0 overflow-y-auto">
-            {access.length === 0 && (
-              <div className="px-3 py-6 text-xs text-muted-foreground/50 text-center">
-                {t("notSharedYet")}
-              </div>
-            )}
-            {access.map((entry) => {
-              const expired =
-                entry.expiresAt && new Date(entry.expiresAt) < new Date();
-              return (
-                <div
-                  key={entry.id}
-                  className="flex flex-col gap-1 px-3 py-2 border-b border-border/60 last:border-0 text-xs"
-                >
-                  <div className="flex items-center justify-between gap-2">
-                    <div className="flex items-center gap-1.5 min-w-0">
-                      {entry.targetType === "user" ? (
-                        <User className="size-3 text-muted-foreground shrink-0" />
-                      ) : (
-                        <Shield className="size-3 text-muted-foreground shrink-0" />
-                      )}
-                      <span className="font-semibold truncate">
-                        {entry.username ??
-                          entry.roleDisplayName ??
-                          entry.roleName ??
-                          entry.userId ??
-                          entry.roleId}
-                      </span>
-                    </div>
-                    <Button
-                      variant="ghost"
-                      size="sm"
-                      className="h-6 text-[10px] px-2 text-destructive hover:bg-destructive/10"
-                      onClick={() => void handleRevoke(entry)}
-                    >
-                      {t("revokeAccess")}
-                    </Button>
-                  </div>
-                  <div className="flex items-center gap-3 text-[10px] text-muted-foreground pl-4">
-                    <span>
-                      {t("grantedBy")}:{" "}
-                      <span className="text-foreground/70">
-                        {entry.grantedByUsername ?? "?"}
-                      </span>
-                    </span>
-                    <span className={expired ? "text-destructive" : ""}>
-                      {t("shareExpiry")}:{" "}
-                      {expired ? (
-                        <span className="inline-flex items-center gap-0.5 text-destructive">
-                          <X className="size-3" />
-                          {t("expired")}
-                        </span>
-                      ) : (
-                        <span className="text-foreground/70">
-                          {entry.expiresAt
-                            ? new Date(entry.expiresAt).toLocaleString()
-                            : t("shareExpiryOptions.h0")}
-                        </span>
-                      )}
-                    </span>
-                  </div>
-                </div>
-              );
-            })}
-          </div>
-        </div>
-      )}
-    </div>
-  );
-}
diff --git a/plugins/snippets/src/frontend/SnippetTree.tsx b/plugins/snippets/src/frontend/SnippetTree.tsx
deleted file mode 100644
index 7b66e0621..000000000
--- a/plugins/snippets/src/frontend/SnippetTree.tsx
+++ /dev/null
@@ -1,470 +0,0 @@
-import { useState, type ReactNode } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import {
-  ChevronRight,
-  ClipboardPaste,
-  Copy,
-  FolderInput,
-  GripVertical,
-  MoreHorizontal,
-  Pencil,
-  Play,
-  Plus,
-  Share2,
-  StickyNote,
-  Terminal,
-  Trash2,
-  Users,
-  Zap,
-} from "lucide-react";
-import {
-  DropdownMenu,
-  DropdownMenuContent,
-  DropdownMenuItem,
-  DropdownMenuSeparator,
-  DropdownMenuSub,
-  DropdownMenuSubContent,
-  DropdownMenuSubTrigger,
-  DropdownMenuTrigger,
-} from "@termix/plugin-sdk/ui";
-import { FolderIcon } from "./folder-icons";
-import type { Snippet, SnippetFolder } from "./types";
-
-const trayButtonClass =
-  "flex items-center justify-center size-[22.75px] text-muted-foreground/60 hover:text-foreground hover:bg-muted transition-colors";
-
-export type DropPosition = "above" | "below";
-
-export function SnippetRow({
-  snippet,
-  stripeIndex,
-  showCommand,
-  folderNames,
-  targetHostNames,
-  canEdit,
-  canDelete,
-  canShare,
-  draggable,
-  dragActive,
-  isDragging,
-  dropIndicator,
-  onRun,
-  onCopy,
-  onEdit,
-  onShare,
-  onMove,
-  onDelete,
-  onDragStart,
-  onDragEnd,
-  onDragOverRow,
-  onDropRow,
-}: {
-  snippet: Snippet;
-  stripeIndex: number;
-  showCommand: boolean;
-  folderNames: string[];
-  /** Hosts a command snippet runs on directly, instead of the active terminal. */
-  targetHostNames: string[];
-  canEdit: boolean;
-  canDelete: boolean;
-  canShare: boolean;
-  draggable: boolean;
-  /** True while any snippet is being dragged, so this row is a drop target. */
-  dragActive: boolean;
-  isDragging: boolean;
-  dropIndicator: DropPosition | null;
-  onRun: () => void;
-  onCopy: () => void;
-  onEdit: () => void;
-  onShare: () => void;
-  onMove: (folder: string | null) => void;
-  onDelete: () => void;
-  onDragStart: () => void;
-  onDragEnd: () => void;
-  onDragOverRow: (position: DropPosition) => void;
-  onDropRow: () => void;
-}) {
-  const { t } = useTranslation();
-  const [menuOpen, setMenuOpen] = useState(false);
-  const owned = !snippet.isShared;
-  const editable = canEdit && owned;
-  const deletable = canDelete && owned;
-  const shareable = canShare && owned;
-  const hasTargets = !snippet.isNote && targetHostNames.length > 0;
-  const TypeIcon = snippet.isNote ? StickyNote : Terminal;
-  const RunIcon = hasTargets ? Zap : snippet.isNote ? ClipboardPaste : Play;
-  const runLabel = t(
-    hasTargets ? "runOnTargets" : snippet.isNote ? "pasteToTerminal" : "run",
-  );
-
-  return (
-    <div
-      draggable={draggable}
-      onDragStart={(e) => {
-        e.dataTransfer.effectAllowed = "move";
-        onDragStart();
-      }}
-      onDragEnd={onDragEnd}
-      onDragOver={(e) => {
-        if (!dragActive) return;
-        e.preventDefault();
-        e.stopPropagation();
-        const rect = e.currentTarget.getBoundingClientRect();
-        onDragOverRow(
-          e.clientY < rect.top + rect.height / 2 ? "above" : "below",
-        );
-      }}
-      onDrop={(e) => {
-        if (!dragActive) return;
-        e.preventDefault();
-        e.stopPropagation();
-        onDropRow();
-      }}
-      onDoubleClick={onRun}
-      onContextMenu={(e) => {
-        e.preventDefault();
-        setMenuOpen(true);
-      }}
-      title={t("doubleClickToRun")}
-      className={`group relative flex items-stretch select-none border-b border-border/40 transition-colors hover:bg-muted/50 ${
-        draggable ? "cursor-grab active:cursor-grabbing" : ""
-      } ${
-        menuOpen ? "bg-muted/50" : stripeIndex % 2 === 1 ? "bg-muted/15" : ""
-      } ${isDragging ? "opacity-40" : ""}`}
-    >
-      {dropIndicator && (
-        <div
-          className={`absolute left-0 right-0 h-0.5 bg-accent-brand z-10 pointer-events-none ${dropIndicator === "above" ? "-top-px" : "-bottom-px"}`}
-        />
-      )}
-      <div
-        className={`w-[3px] shrink-0 ${snippet.isNote ? "bg-muted-foreground/30" : "bg-accent-brand/60"}`}
-      />
-      {draggable && (
-        <div className="flex items-center justify-center w-3.5 shrink-0 -mr-1.5 text-muted-foreground/30 group-hover:text-muted-foreground/70 transition-colors">
-          <GripVertical className="size-3" />
-        </div>
-      )}
-      <div className="flex flex-col flex-1 min-w-0 pl-[8.75px] pr-[7px] py-[7px] gap-[3.5px]">
-        <div className="flex items-center gap-1.5 min-w-0">
-          <TypeIcon className="size-3 shrink-0 text-muted-foreground/60" />
-          <span className="text-[13px] font-semibold truncate text-foreground leading-none tracking-tight">
-            {snippet.name}
-          </span>
-          {snippet.isNote && (
-            <span className="text-[9px] px-1 py-px border border-border bg-muted/40 text-muted-foreground shrink-0 leading-none uppercase tracking-wider">
-              {t("typeNote")}
-            </span>
-          )}
-          {snippet.isShared && (
-            <span className="flex items-center gap-0.5 text-[9px] px-1 py-px border border-accent-brand/30 bg-accent-brand/10 text-accent-brand shrink-0 leading-none uppercase tracking-wider">
-              <Users className="size-2.5" />
-              {t("sharedBadge")}
-            </span>
-          )}
-        </div>
-        {snippet.description && (
-          <span className="text-[11px] text-muted-foreground/80 truncate leading-tight">
-            {snippet.description}
-          </span>
-        )}
-        {showCommand && (
-          <span className="text-[11px] text-muted-foreground/60 truncate leading-tight font-mono">
-            {snippet.content.split("\n")[0]}
-          </span>
-        )}
-        {hasTargets && (
-          <div className="flex items-center gap-1 min-w-0 overflow-hidden">
-            <Zap className="size-2.5 shrink-0 text-accent-brand/70" />
-            {targetHostNames.slice(0, 3).map((name) => (
-              <span
-                key={name}
-                className="text-[9px] px-1.5 py-[1px] bg-accent-brand/10 text-accent-brand shrink-0 leading-[1.4] truncate max-w-28"
-              >
-                {name}
-              </span>
-            ))}
-            {targetHostNames.length > 3 && (
-              <span className="text-[9px] text-muted-foreground/50 shrink-0">
-                +{targetHostNames.length - 3}
-              </span>
-            )}
-          </div>
-        )}
-      </div>
-
-      <div
-        className={`absolute right-1.5 top-1.5 items-center border border-border bg-background shadow-sm ${
-          menuOpen ? "flex" : "hidden group-hover:flex pointer-coarse:flex"
-        }`}
-      >
-        <button
-          title={runLabel}
-          onClick={(e) => {
-            e.stopPropagation();
-            onRun();
-          }}
-          className={`${trayButtonClass} text-accent-brand/80 hover:text-accent-brand`}
-        >
-          <RunIcon className="size-3.5" />
-        </button>
-        <button
-          title={t("copyToClipboard")}
-          onClick={(e) => {
-            e.stopPropagation();
-            onCopy();
-          }}
-          className={trayButtonClass}
-        >
-          <Copy className="size-3.5" />
-        </button>
-        {editable && (
-          <button
-            title={t("editSnippetTitle")}
-            onClick={(e) => {
-              e.stopPropagation();
-              onEdit();
-            }}
-            className={trayButtonClass}
-          >
-            <Pencil className="size-3.5" />
-          </button>
-        )}
-        {shareable && (
-          <button
-            title={t("shareSnippet")}
-            onClick={(e) => {
-              e.stopPropagation();
-              onShare();
-            }}
-            className={trayButtonClass}
-          >
-            <Share2 className="size-3.5" />
-          </button>
-        )}
-        <DropdownMenu open={menuOpen} onOpenChange={setMenuOpen}>
-          <DropdownMenuTrigger asChild>
-            <button
-              title={t("moreOptions")}
-              onClick={(e) => e.stopPropagation()}
-              className={trayButtonClass}
-            >
-              <MoreHorizontal className="size-3.5" />
-            </button>
-          </DropdownMenuTrigger>
-          <DropdownMenuContent align="end" className="text-xs min-w-44">
-            <DropdownMenuItem onClick={onRun}>
-              <RunIcon className="size-3.5 mr-2" />
-              {runLabel}
-            </DropdownMenuItem>
-            <DropdownMenuItem onClick={onCopy}>
-              <Copy className="size-3.5 mr-2" />
-              {t("copyToClipboard")}
-            </DropdownMenuItem>
-            {editable && (
-              <DropdownMenuItem onClick={onEdit}>
-                <Pencil className="size-3.5 mr-2" />
-                {t("editSnippetTitle")}
-              </DropdownMenuItem>
-            )}
-            {shareable && (
-              <DropdownMenuItem onClick={onShare}>
-                <Share2 className="size-3.5 mr-2" />
-                {t("shareSnippet")}
-              </DropdownMenuItem>
-            )}
-            {editable && (
-              <DropdownMenuSub>
-                <DropdownMenuSubTrigger>
-                  <FolderInput className="size-3.5 mr-2" />
-                  {t("moveToFolder")}
-                </DropdownMenuSubTrigger>
-                <DropdownMenuSubContent className="text-xs max-w-72">
-                  <DropdownMenuItem
-                    disabled={!snippet.folder}
-                    onClick={() => onMove(null)}
-                  >
-                    {t("noFolder")}
-                  </DropdownMenuItem>
-                  {folderNames.map((name) => (
-                    <DropdownMenuItem
-                      key={name}
-                      disabled={snippet.folder === name}
-                      onClick={() => onMove(name)}
-                    >
-                      <span className="truncate">{name}</span>
-                    </DropdownMenuItem>
-                  ))}
-                </DropdownMenuSubContent>
-              </DropdownMenuSub>
-            )}
-            {deletable && (
-              <>
-                <DropdownMenuSeparator />
-                <DropdownMenuItem
-                  onClick={onDelete}
-                  className="text-destructive focus:text-destructive"
-                >
-                  <Trash2 className="size-3.5 mr-2" />
-                  {t("deleteSnippet")}
-                </DropdownMenuItem>
-              </>
-            )}
-          </DropdownMenuContent>
-        </DropdownMenu>
-      </div>
-    </div>
-  );
-}
-
-export function SnippetFolderRow({
-  name,
-  folder,
-  count,
-  open,
-  stripeIndex,
-  canCreate,
-  canEdit,
-  canDelete,
-  canShare,
-  acceptsDrop,
-  onToggle,
-  onAddSnippet,
-  onEdit,
-  onShare,
-  onDelete,
-  onDropSnippet,
-  children,
-}: {
-  name: string;
-  /** Null for a folder that only exists as a name on its snippets. */
-  folder: SnippetFolder | null;
-  count: number;
-  open: boolean;
-  stripeIndex: number;
-  canCreate: boolean;
-  canEdit: boolean;
-  canDelete: boolean;
-  canShare: boolean;
-  /** True while a snippet is being dragged that could move into this folder. */
-  acceptsDrop: boolean;
-  onToggle: () => void;
-  onAddSnippet: () => void;
-  onEdit: () => void;
-  onShare: () => void;
-  onDelete: () => void;
-  onDropSnippet: () => void;
-  children: ReactNode;
-}) {
-  const { t } = useTranslation();
-  const [dragOver, setDragOver] = useState(false);
-  const hasActions = canCreate || canEdit || canDelete || canShare;
-
-  return (
-    <div className="border-b border-border/40">
-      <div
-        role="button"
-        tabIndex={0}
-        onClick={onToggle}
-        onKeyDown={(e) => {
-          if (e.key === "Enter" || e.key === " ") {
-            e.preventDefault();
-            onToggle();
-          }
-        }}
-        onDragOver={(e) => {
-          if (!acceptsDrop) return;
-          e.preventDefault();
-          setDragOver(true);
-        }}
-        onDragLeave={(e) => {
-          if (e.currentTarget === e.target) setDragOver(false);
-        }}
-        onDrop={(e) => {
-          if (!acceptsDrop) return;
-          e.preventDefault();
-          setDragOver(false);
-          onDropSnippet();
-        }}
-        className={`group/folder flex items-center gap-2 w-full pl-2.5 pr-2 py-1.5 cursor-pointer select-none transition-colors ${
-          open ? "bg-muted/40" : "hover:bg-muted/30"
-        } ${stripeIndex % 2 === 1 && !open ? "bg-muted/[0.08]" : ""} ${
-          dragOver && acceptsDrop
-            ? "ring-1 ring-inset ring-accent-brand bg-accent-brand/10"
-            : ""
-        }`}
-      >
-        <ChevronRight
-          className={`size-3.5 shrink-0 text-muted-foreground/60 transition-transform ${open ? "rotate-90" : ""}`}
-        />
-        <FolderIcon
-          icon={folder?.icon}
-          className={`size-4 shrink-0 ${folder?.color ? "" : open ? "text-accent-brand" : "text-muted-foreground/70"}`}
-          style={folder?.color ? { color: folder.color } : undefined}
-        />
-        <span className="min-w-0 flex-1 truncate text-[13px] font-bold text-foreground tracking-tight">
-          {name}
-        </span>
-        <span className="text-[10px] tabular-nums shrink-0 px-1.5 py-[1px] bg-muted/70 text-muted-foreground/70">
-          {count}
-        </span>
-        {hasActions && (
-          <DropdownMenu>
-            <DropdownMenuTrigger asChild>
-              <button
-                title={t("folderActions")}
-                onClick={(e) => e.stopPropagation()}
-                className="flex items-center justify-center size-5 shrink-0 text-muted-foreground/60 hover:text-foreground hover:bg-muted opacity-0 group-hover/folder:opacity-100 focus:opacity-100 pointer-coarse:opacity-100 data-[state=open]:opacity-100 transition-opacity"
-              >
-                <MoreHorizontal className="size-3.5" />
-              </button>
-            </DropdownMenuTrigger>
-            <DropdownMenuContent align="end" className="text-xs min-w-40">
-              {canCreate && (
-                <DropdownMenuItem onClick={onAddSnippet}>
-                  <Plus className="size-3.5 mr-2" />
-                  {t("addSnippetHere")}
-                </DropdownMenuItem>
-              )}
-              {canEdit && (
-                <DropdownMenuItem onClick={onEdit}>
-                  <Pencil className="size-3.5 mr-2" />
-                  {t("editFolderTitle")}
-                </DropdownMenuItem>
-              )}
-              {canShare && count > 0 && (
-                <DropdownMenuItem onClick={onShare}>
-                  <Share2 className="size-3.5 mr-2" />
-                  {t("shareFolder")}
-                </DropdownMenuItem>
-              )}
-              {canDelete && (
-                <>
-                  <DropdownMenuSeparator />
-                  <DropdownMenuItem
-                    onClick={onDelete}
-                    className="text-destructive focus:text-destructive"
-                  >
-                    <Trash2 className="size-3.5 mr-2" />
-                    {t("deleteFolder")}
-                  </DropdownMenuItem>
-                </>
-              )}
-            </DropdownMenuContent>
-          </DropdownMenu>
-        )}
-      </div>
-      {open && (
-        <div className="border-l border-border/50 ml-[27px] border-t border-t-border/40 [&>*:last-child]:border-b-0">
-          {count === 0 ? (
-            <div className="px-3 py-2 text-[11px] text-muted-foreground/60">
-              {t("noSnippetsInFolder")}
-            </div>
-          ) : (
-            children
-          )}
-        </div>
-      )}
-    </div>
-  );
-}
diff --git a/plugins/snippets/src/frontend/SnippetVariablesDialog.tsx b/plugins/snippets/src/frontend/SnippetVariablesDialog.tsx
deleted file mode 100644
index 7d9a0fec4..000000000
--- a/plugins/snippets/src/frontend/SnippetVariablesDialog.tsx
+++ /dev/null
@@ -1,107 +0,0 @@
-import { useState, useEffect, useMemo } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import {
-  Button,
-  Input,
-  Dialog,
-  DialogContent,
-  DialogHeader,
-  DialogTitle,
-  DialogDescription,
-} from "@termix/plugin-sdk/ui";
-import {
-  extractSnippetInputs,
-  resolveSnippetContent,
-  type SnippetHostContext,
-} from "../shared/variables.js";
-
-/** Enough of a snippet to fill in its inputs. */
-export interface VariablesDialogSnippet {
-  name: string;
-  content: string;
-}
-
-/**
- * Shown before running a snippet that contains $INPUT_n placeholders:
- * collects a value per placeholder and previews the fully resolved command
- * (host vars and inputs) before handing the result back to the caller.
- */
-export function SnippetVariablesDialog({
-  snippet,
-  host,
-  onCancel,
-  onConfirm,
-}: {
-  snippet: VariablesDialogSnippet;
-  host: SnippetHostContext | null;
-  onCancel: () => void;
-  onConfirm: (
-    resolvedContent: string,
-    inputValues: Record<string, string>,
-  ) => void;
-}) {
-  const { t } = useTranslation();
-  const inputs = useMemo(
-    () => extractSnippetInputs(snippet.content),
-    [snippet.content],
-  );
-  const [values, setValues] = useState<Record<string, string>>({});
-
-  useEffect(() => {
-    setValues({});
-  }, [snippet]);
-
-  const preview = resolveSnippetContent(snippet.content, host, values);
-
-  return (
-    <Dialog open onOpenChange={(v) => !v && onCancel()}>
-      <DialogContent className="sm:max-w-lg">
-        <DialogHeader>
-          <DialogTitle className="text-lg font-bold">
-            {t("variablesDialogTitle", { name: snippet.name })}
-          </DialogTitle>
-          <DialogDescription className="text-xs text-muted-foreground">
-            {t("variablesDialogDescription")}
-          </DialogDescription>
-        </DialogHeader>
-        <div className="flex flex-col gap-4 mt-1">
-          {inputs.map((input) => (
-            <div key={input.key} className="flex flex-col gap-1.5">
-              <label className="text-xs font-semibold">{input.label}</label>
-              <Input
-                autoFocus={inputs[0]?.key === input.key}
-                value={values[input.key] ?? ""}
-                onChange={(e) =>
-                  setValues((prev) => ({
-                    ...prev,
-                    [input.key]: e.target.value,
-                  }))
-                }
-              />
-            </div>
-          ))}
-          <div className="flex flex-col gap-1.5">
-            <label className="text-xs font-semibold text-muted-foreground">
-              {t("variablesPreviewLabel")}
-            </label>
-            <span className="text-xs text-muted-foreground font-mono px-2.5 py-2 border border-border bg-muted/20 min-w-0 break-all whitespace-pre-wrap">
-              {preview}
-            </span>
-          </div>
-        </div>
-        <div className="flex items-center justify-end gap-2 mt-2">
-          <Button variant="ghost" onClick={onCancel}>
-            {t("cancel")}
-          </Button>
-          <Button
-            variant="outline"
-            className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-            onClick={() => onConfirm(preview, values)}
-          >
-            {t("variablesConfirmButton")}
-          </Button>
-        </div>
-      </DialogContent>
-    </Dialog>
-  );
-}
diff --git a/plugins/snippets/src/frontend/SnippetsPanel.tsx b/plugins/snippets/src/frontend/SnippetsPanel.tsx
deleted file mode 100644
index a4975a288..000000000
--- a/plugins/snippets/src/frontend/SnippetsPanel.tsx
+++ /dev/null
@@ -1,831 +0,0 @@
-import { useCallback, useEffect, useMemo, useRef, useState } from "react";
-import {
-  useHosts,
-  usePermission,
-  usePluginApi,
-  useSettings,
-  useTranslation,
-  type PanelProps,
-} from "@termix/plugin-sdk/frontend";
-import { toast } from "sonner";
-import {
-  ChevronsDownUp,
-  ChevronsUpDown,
-  Download,
-  ExternalLink,
-  FolderPlus,
-  MoreHorizontal,
-  Plus,
-  Search,
-  SlidersHorizontal,
-  Upload,
-  X,
-} from "lucide-react";
-import {
-  Button,
-  DropdownMenu,
-  DropdownMenuContent,
-  DropdownMenuItem,
-  DropdownMenuSeparator,
-  DropdownMenuTrigger,
-  copyToClipboard,
-  useConfirmation,
-} from "@termix/plugin-sdk/ui";
-import { createSnippetsApi } from "./snippets-api";
-import { useSnippetRunner, type TargetHost } from "./use-snippet-runner";
-import {
-  TargetTerminals,
-  toRunTargets,
-  useOpenTerminals,
-} from "./TargetTerminals";
-import { SnippetShareView, type ShareTarget } from "./SnippetShareView";
-import { SnippetEditor, type SnippetFormValues } from "./SnippetEditor";
-import { SnippetSettings } from "./SnippetSettings";
-import { readSnippetSettings } from "./settings";
-import {
-  SnippetFolderDialog,
-  type FolderFormValues,
-} from "./SnippetFolderDialog";
-import { SnippetFolderRow, SnippetRow, type DropPosition } from "./SnippetTree";
-import {
-  errorMessage,
-  parseHostFilter,
-  type Snippet,
-  type SnippetFolder,
-} from "./types";
-
-const DOCS_URL = "https://docs.termix.site/features/terminal/snippets";
-
-type View =
-  | { kind: "list" }
-  | { kind: "edit"; snippet: Snippet | null; folder?: string }
-  | { kind: "settings" }
-  | { kind: "share"; target: ShareTarget };
-
-interface FolderGroup {
-  name: string;
-  folder: SnippetFolder | null;
-  snippets: Snippet[];
-}
-
-function matchesQuery(snippet: Snippet, query: string): boolean {
-  return (
-    snippet.name.toLowerCase().includes(query) ||
-    (snippet.description ?? "").toLowerCase().includes(query) ||
-    snippet.content.toLowerCase().includes(query)
-  );
-}
-
-export function SnippetsPanel({ active: _active }: PanelProps) {
-  const { t } = useTranslation();
-  const api = usePluginApi();
-  const client = useMemo(() => createSnippetsApi(api), [api]);
-  const canView = usePermission("view");
-  const canCreate = usePermission("create");
-  const canEdit = usePermission("edit");
-  const canDelete = usePermission("delete");
-  const canShare = usePermission("share");
-  const settings = useSettings("user");
-  const display = readSnippetSettings(settings.values);
-  const {
-    runSnippet,
-    runOnActive,
-    runOnHosts,
-    dialog: runnerDialog,
-  } = useSnippetRunner(display.confirmExecution);
-  const openTerminals = useOpenTerminals();
-  const [selectedTerminals, setSelectedTerminals] = useState<Set<string>>(
-    () => new Set(),
-  );
-  useEffect(() => {
-    setSelectedTerminals((prev) => {
-      const open = new Set(openTerminals.map((terminal) => terminal.id));
-      const next = new Set([...prev].filter((id) => open.has(id)));
-      return next.size === prev.size ? prev : next;
-    });
-  }, [openTerminals]);
-  const { hosts } = useHosts();
-  const { confirmWithToast } = useConfirmation();
-
-  const [snippets, setSnippets] = useState<Snippet[]>([]);
-  const [folders, setFolders] = useState<SnippetFolder[]>([]);
-  const [loading, setLoading] = useState(true);
-  const [search, setSearch] = useState("");
-  const [view, setView] = useState<View>({ kind: "list" });
-  // Folders the user opened or closed by hand; the rest follow the setting.
-  const [folderOverrides, setFolderOverrides] = useState<Map<string, boolean>>(
-    new Map(),
-  );
-  const [folderDialog, setFolderDialog] = useState<{
-    folder: SnippetFolder | null;
-    /** The name being edited, set even when the folder has no metadata row. */
-    editName: string | null;
-  } | null>(null);
-  const [dragged, setDragged] = useState<Snippet | null>(null);
-  const [dropTarget, setDropTarget] = useState<{
-    id: number;
-    position: DropPosition;
-  } | null>(null);
-  const fileInputRef = useRef<HTMLInputElement>(null);
-  const importOverwriteRef = useRef(false);
-
-  const hostsById = useMemo(
-    () => new Map(hosts.map((host) => [Number(host.id), host])),
-    [hosts],
-  );
-
-  function targetHostsOf(snippet: Snippet): TargetHost[] {
-    if (snippet.isNote) return [];
-    return parseHostFilter(snippet.hostFilter).flatMap((id) => {
-      const host = hostsById.get(id);
-      return host
-        ? [
-            {
-              id,
-              name: host.name,
-              ip: host.ip,
-              username: host.username,
-              port: host.port,
-            },
-          ]
-        : [];
-    });
-  }
-
-  const load = useCallback(async () => {
-    if (!canView) {
-      setLoading(false);
-      return;
-    }
-    try {
-      const [snippetList, folderList] = await Promise.all([
-        client.list(),
-        client.listFolders(),
-      ]);
-      setSnippets(Array.isArray(snippetList) ? snippetList : []);
-      setFolders(Array.isArray(folderList) ? folderList : []);
-    } catch (err) {
-      toast.error(errorMessage(err, t("loadFailed")));
-    } finally {
-      setLoading(false);
-    }
-  }, [canView, client, t]);
-
-  useEffect(() => {
-    void load();
-  }, [load]);
-
-  const query = search.trim().toLowerCase();
-
-  const { groups, rootSnippets } = useMemo(() => {
-    const byFolder = new Map<string, FolderGroup>();
-    for (const folder of folders) {
-      byFolder.set(folder.name, {
-        name: folder.name,
-        folder,
-        snippets: [],
-      });
-    }
-    const root: Snippet[] = [];
-    for (const snippet of snippets) {
-      if (query && !matchesQuery(snippet, query)) continue;
-      if (!snippet.folder) {
-        root.push(snippet);
-        continue;
-      }
-      const group = byFolder.get(snippet.folder) ?? {
-        name: snippet.folder,
-        folder: null,
-        snippets: [],
-      };
-      group.snippets.push(snippet);
-      byFolder.set(snippet.folder, group);
-    }
-    const sorted = Array.from(byFolder.values())
-      .filter((group) => !query || group.snippets.length > 0)
-      .sort((a, b) => a.name.localeCompare(b.name));
-    return { groups: sorted, rootSnippets: root };
-  }, [folders, snippets, query]);
-
-  const folderNames = useMemo(
-    () =>
-      Array.from(
-        new Set([
-          ...folders.map((f) => f.name),
-          ...snippets.flatMap((s) => (s.folder ? [s.folder] : [])),
-        ]),
-      ).sort((a, b) => a.localeCompare(b)),
-    [folders, snippets],
-  );
-
-  function isOpen(name: string): boolean {
-    if (query) return true;
-    return folderOverrides.get(name) ?? !display.foldersCollapsed;
-  }
-
-  function toggleFolder(name: string) {
-    setFolderOverrides((prev) => {
-      const next = new Map(prev);
-      next.set(name, !isOpen(name));
-      return next;
-    });
-  }
-
-  function setAllFolders(open: boolean) {
-    setFolderOverrides(new Map(folderNames.map((name) => [name, open])));
-  }
-
-  async function handleSaveSnippet(values: SnippetFormValues) {
-    if (view.kind !== "edit") return false;
-    const body = {
-      name: values.name.trim(),
-      content: values.content.trim(),
-      description: values.description.trim() || null,
-      folder: values.folder || null,
-      isNote: values.isNote,
-      hostFilter:
-        !values.isNote && values.hostIds.length > 0 ? values.hostIds : null,
-    };
-    const editing = view.snippet;
-    try {
-      if (editing) {
-        await client.update(editing.id, body);
-        toast.success(t("updateSuccess"));
-      } else {
-        await client.create(body);
-        toast.success(t("createSuccess"));
-      }
-      if (body.folder) {
-        setFolderOverrides((prev) => new Map(prev).set(body.folder!, true));
-      }
-      setView({ kind: "list" });
-      await load();
-      return true;
-    } catch (err) {
-      toast.error(
-        errorMessage(err, t(editing ? "updateFailed" : "createFailed")),
-      );
-      return false;
-    }
-  }
-
-  function handleRun(snippet: Snippet) {
-    const targets = targetHostsOf(snippet);
-    const terminalTargets = toRunTargets(openTerminals, selectedTerminals);
-    if (targets.length > 0 && !snippet.isNote) runOnHosts(snippet, targets);
-    else if (terminalTargets.length > 0) runSnippet(snippet, terminalTargets);
-    else runOnActive(snippet, null);
-  }
-
-  function endDrag() {
-    setDragged(null);
-    setDropTarget(null);
-  }
-
-  // Drops the dragged snippet next to a row, taking that row's folder.
-  async function handleDropOnRow(target: Snippet) {
-    const source = dragged;
-    const position = dropTarget?.position ?? "below";
-    endDrag();
-    if (!source || source.id === target.id) return;
-
-    const folder = target.folder ?? null;
-    const group = snippets.filter(
-      (s) => (s.folder ?? null) === folder && s.id !== source.id,
-    );
-    const index = group.findIndex((s) => s.id === target.id);
-    group.splice(position === "above" ? index : index + 1, 0, {
-      ...source,
-      folder,
-    });
-    await saveOrder(group, folder);
-  }
-
-  async function handleDropOnFolder(folder: string) {
-    const source = dragged;
-    endDrag();
-    if (!source || source.folder === folder) return;
-    const group = [
-      ...snippets.filter((s) => s.folder === folder && s.id !== source.id),
-      { ...source, folder },
-    ];
-    setFolderOverrides((prev) => new Map(prev).set(folder, true));
-    await saveOrder(group, folder);
-  }
-
-  async function saveOrder(group: Snippet[], folder: string | null) {
-    const ordered = group.map((s, order) => ({ ...s, order }));
-    const byId = new Map(ordered.map((s) => [s.id, s]));
-    setSnippets((prev) => {
-      const rest = prev.filter((s) => !byId.has(s.id));
-      return [...rest, ...ordered];
-    });
-    try {
-      await client.reorder(
-        ordered.map((s) => ({
-          id: s.id,
-          order: s.order,
-          folder: folder ?? "",
-        })),
-      );
-    } catch (err) {
-      toast.error(errorMessage(err, t("reorderFailed")));
-      await load();
-    }
-  }
-
-  function handleDeleteSnippet(snippet: Snippet) {
-    void confirmWithToast(
-      t("deleteSnippetConfirm", { name: snippet.name }),
-      async () => {
-        try {
-          await client.remove(snippet.id);
-          toast.success(t("deleteSuccess"));
-          await load();
-        } catch (err) {
-          toast.error(errorMessage(err, t("deleteFailed")));
-        }
-      },
-      t("delete"),
-      t("cancel"),
-    );
-  }
-
-  async function handleMoveSnippet(snippet: Snippet, folder: string | null) {
-    try {
-      await client.update(snippet.id, { folder });
-      await load();
-    } catch (err) {
-      toast.error(errorMessage(err, t("updateFailed")));
-    }
-  }
-
-  async function handleCopy(snippet: Snippet) {
-    const ok = await copyToClipboard(snippet.content);
-    if (ok) toast.success(t("copySuccess"));
-    else toast.error(t("copyFailed"));
-  }
-
-  async function handleSaveFolder(values: FolderFormValues) {
-    const editName = folderDialog?.editName ?? null;
-    try {
-      if (editName === null) {
-        await client.createFolder(values);
-        toast.success(t("folderCreateSuccess"));
-      } else {
-        // A folder named only on its snippets gets a metadata row first.
-        if (!folderDialog?.folder) {
-          await client.createFolder({ name: editName });
-        }
-        if (values.name !== editName) {
-          await client.renameFolder(editName, values.name);
-          setFolderOverrides((prev) => {
-            const next = new Map(prev);
-            const wasOpen = next.get(editName);
-            next.delete(editName);
-            if (wasOpen !== undefined) next.set(values.name, wasOpen);
-            return next;
-          });
-        }
-        await client.updateFolderMetadata(values.name, {
-          color: values.color,
-          icon: values.icon,
-        });
-        toast.success(t("folderEditSuccess"));
-      }
-      setFolderDialog(null);
-      await load();
-    } catch (err) {
-      toast.error(
-        errorMessage(
-          err,
-          t(editName === null ? "folderCreateFailed" : "folderEditFailed"),
-        ),
-      );
-    }
-  }
-
-  function handleDeleteFolder(name: string) {
-    void confirmWithToast(
-      t("deleteFolderConfirm", { name }),
-      async () => {
-        try {
-          await client.deleteFolder(name);
-          toast.success(t("folderDeleteSuccess"));
-          await load();
-        } catch (err) {
-          toast.error(errorMessage(err, t("folderDeleteFailed")));
-        }
-      },
-      t("delete"),
-      t("cancel"),
-    );
-  }
-
-  async function handleExport() {
-    try {
-      const data = await client.export();
-      const blob = new Blob([JSON.stringify(data, null, 2)], {
-        type: "application/json",
-      });
-      const url = URL.createObjectURL(blob);
-      const link = document.createElement("a");
-      link.href = url;
-      link.download = "termix-snippets.json";
-      document.body.appendChild(link);
-      link.click();
-      document.body.removeChild(link);
-      URL.revokeObjectURL(url);
-      toast.success(t("exportSuccess"));
-    } catch (err) {
-      toast.error(errorMessage(err, t("exportFailed")));
-    }
-  }
-
-  async function handleImport(file: File) {
-    let parsed: { snippets?: unknown; folders?: unknown };
-    try {
-      parsed = JSON.parse(await file.text());
-    } catch {
-      toast.error(t("importInvalidFile"));
-      return;
-    }
-    if (
-      !parsed ||
-      typeof parsed !== "object" ||
-      (!Array.isArray(parsed.snippets) && !Array.isArray(parsed.folders))
-    ) {
-      toast.error(t("importInvalidFile"));
-      return;
-    }
-    try {
-      const result = (await client.bulkImport({
-        snippets: Array.isArray(parsed.snippets) ? parsed.snippets : [],
-        folders: Array.isArray(parsed.folders) ? parsed.folders : [],
-        overwrite: importOverwriteRef.current,
-      })) as {
-        snippetsImported?: number;
-        snippetsUpdated?: number;
-        snippetsSkipped?: number;
-      };
-      toast.success(
-        t("importSuccess", {
-          imported: result.snippetsImported ?? 0,
-          updated: result.snippetsUpdated ?? 0,
-          skipped: result.snippetsSkipped ?? 0,
-        }),
-      );
-      await load();
-    } catch (err) {
-      toast.error(errorMessage(err, t("importFailed")));
-    }
-  }
-
-  function startImport(overwrite: boolean) {
-    importOverwriteRef.current = overwrite;
-    fileInputRef.current?.click();
-  }
-
-  if (!canView) {
-    return null;
-  }
-
-  if (view.kind === "edit") {
-    return (
-      <div className="flex flex-col flex-1 min-h-0 overflow-hidden">
-        <SnippetEditor
-          snippet={view.snippet}
-          defaultFolder={view.folder}
-          folders={folders}
-          onBack={() => setView({ kind: "list" })}
-          onSave={handleSaveSnippet}
-        />
-        {runnerDialog}
-      </div>
-    );
-  }
-
-  if (view.kind === "share") {
-    return (
-      <div className="flex flex-col flex-1 min-h-0 overflow-hidden">
-        <SnippetShareView
-          target={view.target}
-          client={client}
-          onBack={() => setView({ kind: "list" })}
-        />
-      </div>
-    );
-  }
-
-  if (view.kind === "settings") {
-    return (
-      <div className="flex flex-col flex-1 min-h-0 overflow-hidden">
-        <SnippetSettings
-          settings={settings}
-          onBack={() => setView({ kind: "list" })}
-        />
-      </div>
-    );
-  }
-
-  let stripe = 0;
-  const renderSnippet = (snippet: Snippet) => (
-    <SnippetRow
-      key={snippet.id}
-      snippet={snippet}
-      stripeIndex={stripe++}
-      showCommand={display.showCommands}
-      folderNames={folderNames}
-      targetHostNames={targetHostsOf(snippet).map(
-        (host) => host.name || host.ip || String(host.id),
-      )}
-      canEdit={canEdit}
-      canDelete={canDelete}
-      canShare={canShare}
-      draggable={canEdit && !snippet.isShared && !query}
-      dragActive={dragged !== null}
-      isDragging={dragged?.id === snippet.id}
-      dropIndicator={
-        dropTarget?.id === snippet.id && dragged?.id !== snippet.id
-          ? dropTarget.position
-          : null
-      }
-      onRun={() => handleRun(snippet)}
-      onCopy={() => void handleCopy(snippet)}
-      onEdit={() => setView({ kind: "edit", snippet })}
-      onShare={() =>
-        setView({ kind: "share", target: { kind: "snippet", snippet } })
-      }
-      onMove={(folder) => void handleMoveSnippet(snippet, folder)}
-      onDelete={() => handleDeleteSnippet(snippet)}
-      onDragStart={() => setDragged(snippet)}
-      onDragEnd={endDrag}
-      onDragOverRow={(position) =>
-        setDropTarget((prev) =>
-          prev?.id === snippet.id && prev.position === position
-            ? prev
-            : { id: snippet.id, position },
-        )
-      }
-      onDropRow={() => void handleDropOnRow(snippet)}
-    />
-  );
-
-  const isEmpty = groups.length === 0 && rootSnippets.length === 0;
-
-  return (
-    <div className="flex flex-col flex-1 min-h-0 overflow-hidden">
-      <div className="flex flex-col px-2 py-1.5 shrink-0 border-b border-border/60 gap-1.5">
-        <div className="flex items-center gap-2 px-2.5 h-7 bg-muted/60 border border-border/60">
-          <Search className="size-3 text-muted-foreground/60 shrink-0" />
-          <input
-            value={search}
-            onChange={(e) => setSearch(e.target.value)}
-            placeholder={t("searchPlaceholder")}
-            className="flex-1 text-xs bg-transparent outline-none placeholder:text-muted-foreground/50 text-foreground min-w-0"
-          />
-          {search && (
-            <button
-              onClick={() => setSearch("")}
-              title={t("clearSearch")}
-              className="text-muted-foreground/60 hover:text-muted-foreground transition-colors"
-            >
-              <X className="size-3" />
-            </button>
-          )}
-        </div>
-
-        <TargetTerminals
-          terminals={openTerminals}
-          selected={selectedTerminals}
-          onChange={setSelectedTerminals}
-        />
-
-        <input
-          ref={fileInputRef}
-          type="file"
-          accept=".json,application/json"
-          className="hidden"
-          onChange={(e) => {
-            const file = e.target.files?.[0];
-            e.target.value = "";
-            if (file) void handleImport(file);
-          }}
-        />
-
-        <div className="flex items-center gap-1.5 overflow-x-auto overflow-y-hidden toolbar-scrollbar">
-          <div className="flex items-center border border-border shrink-0">
-            <DropdownMenu>
-              <DropdownMenuTrigger asChild>
-                <Button
-                  variant="ghost"
-                  size="icon"
-                  className="size-7 text-muted-foreground hover:text-foreground"
-                  title={t("importExport")}
-                >
-                  <Upload className="size-3.5" />
-                </Button>
-              </DropdownMenuTrigger>
-              <DropdownMenuContent align="start" className="text-xs">
-                {canCreate && (
-                  <>
-                    <DropdownMenuItem onClick={() => startImport(false)}>
-                      <Upload className="size-3.5 mr-2" />
-                      {t("importSkipExisting")}
-                    </DropdownMenuItem>
-                    <DropdownMenuItem onClick={() => startImport(true)}>
-                      <Upload className="size-3.5 mr-2" />
-                      {t("importOverwrite")}
-                    </DropdownMenuItem>
-                    <DropdownMenuSeparator />
-                  </>
-                )}
-                <DropdownMenuItem
-                  onClick={() => void handleExport()}
-                  disabled={snippets.length === 0}
-                >
-                  <Download className="size-3.5 mr-2" />
-                  {t("exportSnippets")}
-                </DropdownMenuItem>
-              </DropdownMenuContent>
-            </DropdownMenu>
-            <div className="w-px self-stretch bg-border" />
-            <DropdownMenu>
-              <DropdownMenuTrigger asChild>
-                <Button
-                  variant="ghost"
-                  size="icon"
-                  className="size-7 text-muted-foreground hover:text-foreground"
-                  title={t("moreActions")}
-                >
-                  <MoreHorizontal className="size-3.5" />
-                </Button>
-              </DropdownMenuTrigger>
-              <DropdownMenuContent align="start" className="text-xs min-w-44">
-                {canCreate && (
-                  <>
-                    <DropdownMenuItem
-                      onClick={() =>
-                        setFolderDialog({ folder: null, editName: null })
-                      }
-                    >
-                      <FolderPlus className="size-3.5 mr-2" />
-                      {t("newFolder")}
-                    </DropdownMenuItem>
-                    <DropdownMenuSeparator />
-                  </>
-                )}
-                <DropdownMenuItem onClick={() => setAllFolders(true)}>
-                  <ChevronsUpDown className="size-3.5 mr-2" />
-                  {t("expandAll")}
-                </DropdownMenuItem>
-                <DropdownMenuItem onClick={() => setAllFolders(false)}>
-                  <ChevronsDownUp className="size-3.5 mr-2" />
-                  {t("collapseAll")}
-                </DropdownMenuItem>
-              </DropdownMenuContent>
-            </DropdownMenu>
-            <div className="w-px self-stretch bg-border" />
-            <a
-              href={DOCS_URL}
-              target="_blank"
-              rel="noreferrer"
-              title={t("docsLink")}
-              className="flex items-center justify-center size-7 text-muted-foreground hover:text-foreground shrink-0 transition-colors"
-            >
-              <ExternalLink className="size-3.5" />
-            </a>
-          </div>
-          <div className="flex items-center border border-border shrink-0">
-            <button
-              onClick={() => setView({ kind: "settings" })}
-              title={t("settingsTitle")}
-              className="flex items-center justify-center size-7 text-muted-foreground hover:text-foreground hover:bg-muted transition-colors shrink-0"
-            >
-              <SlidersHorizontal className="size-3.5" />
-            </button>
-          </div>
-          {canCreate && (
-            <div className="flex items-center border border-accent-brand/30 ml-auto shrink-0">
-              <button
-                onClick={() => setView({ kind: "edit", snippet: null })}
-                title={t("newSnippet")}
-                className="flex items-center justify-center gap-1 h-7 px-2 text-[10px] font-medium text-accent-brand hover:bg-accent-brand/10 transition-colors"
-              >
-                <Plus className="size-3 shrink-0" />
-                <span className="hidden min-[280px]:inline">
-                  {t("newSnippet")}
-                </span>
-              </button>
-            </div>
-          )}
-        </div>
-      </div>
-
-      <div className="flex-1 min-h-0 overflow-y-auto">
-        {loading ? (
-          <div className="p-4 text-xs text-muted-foreground">
-            {t("loading")}
-          </div>
-        ) : isEmpty ? (
-          <div className="flex flex-col items-center gap-1 px-4 py-8 text-center">
-            <span className="text-xs font-medium text-muted-foreground">
-              {t(query ? "noSearchResults" : "emptyTitle")}
-            </span>
-            {!query && (
-              <span className="text-[11px] text-muted-foreground/60">
-                {t("emptyDescription")}
-              </span>
-            )}
-          </div>
-        ) : (
-          <>
-            {groups.map((group, index) => {
-              const open = isOpen(group.name);
-              return (
-                <SnippetFolderRow
-                  key={group.name}
-                  name={group.name}
-                  folder={group.folder}
-                  count={group.snippets.length}
-                  open={open}
-                  stripeIndex={index}
-                  canCreate={canCreate}
-                  canEdit={canEdit}
-                  canDelete={canDelete}
-                  canShare={canShare}
-                  acceptsDrop={
-                    dragged !== null && dragged.folder !== group.name
-                  }
-                  onToggle={() => toggleFolder(group.name)}
-                  onAddSnippet={() =>
-                    setView({
-                      kind: "edit",
-                      snippet: null,
-                      folder: group.name,
-                    })
-                  }
-                  onEdit={() =>
-                    setFolderDialog({
-                      folder: group.folder,
-                      editName: group.name,
-                    })
-                  }
-                  onShare={() =>
-                    setView({
-                      kind: "share",
-                      target: { kind: "folder", name: group.name },
-                    })
-                  }
-                  onDelete={() => handleDeleteFolder(group.name)}
-                  onDropSnippet={() => void handleDropOnFolder(group.name)}
-                >
-                  {open && group.snippets.map(renderSnippet)}
-                </SnippetFolderRow>
-              );
-            })}
-            {rootSnippets.map(renderSnippet)}
-            {dragged?.folder && (
-              <div
-                onDragOver={(e) => e.preventDefault()}
-                onDrop={(e) => {
-                  e.preventDefault();
-                  const source = dragged;
-                  endDrag();
-                  void saveOrder(
-                    [
-                      ...snippets.filter((s) => !s.folder),
-                      { ...source, folder: null },
-                    ],
-                    null,
-                  );
-                }}
-                className="m-2 px-3 py-3 text-center text-[11px] text-muted-foreground border border-dashed border-border"
-              >
-                {t("dropToRemoveFromFolder")}
-              </div>
-            )}
-          </>
-        )}
-      </div>
-
-      {folderDialog && (
-        <SnippetFolderDialog
-          folder={
-            folderDialog.folder ??
-            (folderDialog.editName
-              ? ({
-                  name: folderDialog.editName,
-                  color: null,
-                  icon: null,
-                } as SnippetFolder)
-              : null)
-          }
-          onClose={() => setFolderDialog(null)}
-          onSave={handleSaveFolder}
-        />
-      )}
-      {runnerDialog}
-    </div>
-  );
-}
diff --git a/plugins/snippets/src/frontend/TargetTerminals.tsx b/plugins/snippets/src/frontend/TargetTerminals.tsx
deleted file mode 100644
index 75ae17fa4..000000000
--- a/plugins/snippets/src/frontend/TargetTerminals.tsx
+++ /dev/null
@@ -1,148 +0,0 @@
-import { useEffect, useState } from "react";
-import { Terminal } from "lucide-react";
-import { invokeAction, useTranslation } from "@termix/plugin-sdk/frontend";
-import type { RunTarget } from "./use-snippet-runner";
-
-export interface OpenTerminal {
-  id: string;
-  label?: string;
-  hostName?: string;
-  ip?: string;
-  username?: string;
-  port?: number;
-}
-
-const POLL_MS = 1500;
-
-/** The open terminal sessions, refreshed while the panel is on screen. */
-export function useOpenTerminals(): OpenTerminal[] {
-  const [terminals, setTerminals] = useState<OpenTerminal[]>([]);
-  useEffect(() => {
-    let cancelled = false;
-    const load = () => {
-      void invokeAction("terminal.listSessions")
-        .then((result) => {
-          if (cancelled) return;
-          const next = Array.isArray(result) ? (result as OpenTerminal[]) : [];
-          setTerminals((prev) =>
-            prev.length === next.length &&
-            prev.every(
-              (item, i) =>
-                item.id === next[i].id && item.label === next[i].label,
-            )
-              ? prev
-              : next,
-          );
-        })
-        .catch(() => {
-          if (!cancelled) setTerminals([]);
-        });
-    };
-    load();
-    const timer = setInterval(load, POLL_MS);
-    return () => {
-      cancelled = true;
-      clearInterval(timer);
-    };
-  }, []);
-  return terminals;
-}
-
-export function toRunTargets(
-  terminals: OpenTerminal[],
-  selected: Set<string>,
-): RunTarget[] {
-  return terminals
-    .filter((terminal) => selected.has(terminal.id))
-    .map((terminal) => ({
-      sessionId: terminal.id,
-      host: {
-        name: terminal.hostName,
-        ip: terminal.ip,
-        username: terminal.username,
-        port: terminal.port,
-      },
-    }));
-}
-
-/** Pick terminals to run in; with none picked a snippet runs in the active one. */
-export function TargetTerminals({
-  terminals,
-  selected,
-  onChange,
-}: {
-  terminals: OpenTerminal[];
-  selected: Set<string>;
-  onChange: (next: Set<string>) => void;
-}) {
-  const { t } = useTranslation();
-  if (terminals.length < 2) return null;
-
-  const toggle = (id: string) => {
-    const next = new Set(selected);
-    if (next.has(id)) next.delete(id);
-    else next.add(id);
-    onChange(next);
-  };
-
-  return (
-    <div className="flex flex-col gap-1">
-      <div className="flex items-center justify-between px-0.5">
-        <span className="text-[10px] font-semibold uppercase tracking-wider text-muted-foreground">
-          {t("targetTerminals")}{" "}
-          <span className="font-normal normal-case tracking-normal text-muted-foreground/60">
-            ({t("targetTerminalsHint")})
-          </span>
-        </span>
-        <div className="flex items-center gap-2">
-          <button
-            type="button"
-            onClick={() => onChange(new Set(terminals.map((item) => item.id)))}
-            className="text-[10px] text-accent-brand hover:text-accent-brand/70"
-          >
-            {t("selectAll")}
-          </button>
-          <button
-            type="button"
-            onClick={() => onChange(new Set())}
-            className="text-[10px] text-accent-brand hover:text-accent-brand/70"
-          >
-            {t("selectNone")}
-          </button>
-        </div>
-      </div>
-      <div className="flex flex-col gap-0.5 max-h-32 overflow-y-auto thin-scrollbar">
-        {terminals.map((terminal) => {
-          const isSelected = selected.has(terminal.id);
-          return (
-            <button
-              type="button"
-              key={terminal.id}
-              aria-pressed={isSelected}
-              onClick={() => toggle(terminal.id)}
-              className={`flex items-center gap-2 px-2 py-1 border text-left transition-colors ${
-                isSelected
-                  ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand"
-                  : "border-border text-muted-foreground hover:text-foreground"
-              }`}
-            >
-              <span
-                className={`size-3 border-2 flex items-center justify-center shrink-0 ${
-                  isSelected
-                    ? "border-accent-brand bg-accent-brand"
-                    : "border-border/60"
-                }`}
-              >
-                {isSelected && <span className="size-1.5 bg-background" />}
-              </span>
-              <Terminal className="size-3 shrink-0 opacity-60" />
-              <span className="text-xs truncate flex-1">
-                {terminal.label || terminal.hostName || terminal.id}
-              </span>
-            </button>
-          );
-        })}
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/snippets/src/frontend/folder-icons.tsx b/plugins/snippets/src/frontend/folder-icons.tsx
deleted file mode 100644
index 72dd03759..000000000
--- a/plugins/snippets/src/frontend/folder-icons.tsx
+++ /dev/null
@@ -1,41 +0,0 @@
-import type { CSSProperties } from "react";
-import {
-  Box,
-  Cloud,
-  Copy,
-  Cpu,
-  Database,
-  Folder,
-  Globe,
-  Network,
-  Server,
-  Settings,
-  type LucideIcon,
-} from "lucide-react";
-import type { FolderIconId } from "./types";
-
-const ICONS: Record<FolderIconId, LucideIcon> = {
-  folder: Folder,
-  server: Server,
-  cloud: Cloud,
-  database: Database,
-  box: Box,
-  network: Network,
-  copy: Copy,
-  settings: Settings,
-  cpu: Cpu,
-  globe: Globe,
-};
-
-export function FolderIcon({
-  icon,
-  className,
-  style,
-}: {
-  icon: string | null | undefined;
-  className?: string;
-  style?: CSSProperties;
-}) {
-  const Icon = ICONS[(icon ?? "folder") as FolderIconId] ?? Folder;
-  return <Icon className={className} style={style} />;
-}
diff --git a/plugins/snippets/src/frontend/index.tsx b/plugins/snippets/src/frontend/index.tsx
deleted file mode 100644
index 326d43306..000000000
--- a/plugins/snippets/src/frontend/index.tsx
+++ /dev/null
@@ -1,182 +0,0 @@
-import { Clipboard, Play } from "lucide-react";
-import type {
-  PaletteItem,
-  PanelProps,
-  PluginHostRecord,
-  TermixApp,
-} from "@termix/plugin-sdk/frontend";
-import type { Snippet } from "./types";
-import { SnippetsPanel } from "./SnippetsPanel";
-import { createSnippetsApi } from "./snippets-api";
-import {
-  extractSnippetInputs,
-  resolveSnippetContent,
-  type SnippetHostContext,
-} from "../shared/variables.js";
-import {
-  readStartupSnippetId,
-  snippetHostSettings,
-} from "../shared/host-settings.js";
-import { AdminUserSnippets } from "./AdminUserSnippets";
-import { SnippetOverlay } from "./SnippetOverlay";
-import { HostSnippetsSection } from "./HostSnippetsSection";
-import { QuickActionButtons } from "./QuickActionButtons";
-import { resetPrompts } from "./prompt-store";
-import { fetchSnippet, runInSession } from "./run-flows";
-import {
-  RUN_SNIPPET_ACTION,
-  RunSnippetEditor,
-  RunSnippetSummary,
-  runSnippetBinding,
-  validateRunSnippet,
-} from "./keybinding";
-
-function hostContext(host: unknown): SnippetHostContext | null {
-  if (!host || typeof host !== "object") return null;
-  const record = host as Record<string, unknown>;
-  return {
-    ip: typeof record.ip === "string" ? record.ip : undefined,
-    username: typeof record.username === "string" ? record.username : undefined,
-    port:
-      typeof record.port === "number" || typeof record.port === "string"
-        ? record.port
-        : undefined,
-    name: typeof record.name === "string" ? record.name : undefined,
-  };
-}
-
-export function activate(app: TermixApp): void {
-  app.onDispose(resetPrompts);
-
-  app.registerRailItem({
-    id: "snippets",
-    icon: Play,
-    titleKey: "nav.snippets",
-    permission: "view",
-    // The most approachable power feature, so Simple keeps it.
-    simplePreset: true,
-  });
-
-  app.registerPanel("snippets", (props: PanelProps) => (
-    <SnippetsPanel {...props} />
-  ));
-
-  app.registerPaletteEntry({
-    id: "snippets.run",
-    titleKey: "nav.snippets",
-    scope: "global",
-    icon: Play,
-    run: async (shell) => {
-      shell.openRailView("snippets");
-    },
-  });
-
-  // Every snippet in the command palette, run in the terminal the user is
-  // working in.
-  app.registerPaletteGroup({
-    id: "snippets",
-    titleKey: "nav.snippets",
-    order: 10,
-    load: async (): Promise<PaletteItem[]> => {
-      if (!(await app.hasPermission("view"))) return [];
-      const snippets: Snippet[] = await createSnippetsApi(app.api)
-        .list()
-        .catch(() => []);
-      return snippets.map((snippet) => ({
-        id: String(snippet.id),
-        title: snippet.name,
-        description: snippet.content,
-        icon: snippet.isNote ? Clipboard : Play,
-        keywords: [snippet.description ?? ""],
-        needsTarget: true,
-        hint: app.t(snippet.isNote ? "paletteHintPaste" : "paletteHintRun"),
-        run: ({ targetTab }) => {
-          if (!targetTab) return;
-          void runInSession(
-            app,
-            snippet,
-            { sessionId: targetTab.id },
-            hostContext(targetTab.host),
-            { announce: true },
-          );
-        },
-      }));
-    },
-  });
-
-  // Keeps the input dialog and the confirm setting alive at the shell root.
-  app.registerSlotContribution("shell.overlay", {
-    actionId: "snippets.overlay",
-    titleKey: "nav.snippets",
-    kind: "component",
-    component: SnippetOverlay as never,
-  });
-
-  app.registerKeybindingAction({
-    id: RUN_SNIPPET_ACTION,
-    titleKey: "keybindings.runSnippet",
-    editor: RunSnippetEditor,
-    summary: RunSnippetSummary,
-    validate: validateRunSnippet,
-    run: (action, context) => runSnippetBinding(app, action, context),
-  });
-
-  app.registerHostEditorSection({
-    id: "snippets",
-    group: "ssh",
-    titleKey: "host.tabTitle",
-    icon: Play,
-    order: 15,
-    defaults: true,
-    component: HostSnippetsSection,
-  });
-
-  // Host Metrics shows a host's quick actions as toolbar buttons.
-  app.registerSlotContribution("host-metrics.toolbar", {
-    actionId: "snippets.quickActions",
-    titleKey: "host.quickActionsTitle",
-    kind: "component",
-    component: QuickActionButtons,
-  });
-
-  app.registerSlotContribution("onboarding.features", {
-    actionId: "snippets.feature",
-    titleKey: "onboarding.feature_snippets",
-    descriptionKey: "onboarding.feature_snippets_desc",
-    icon: Play,
-  });
-
-  // The admin "manage user" panel's Snippets tab.
-  app.registerSlotContribution("admin.userTabs", {
-    actionId: "snippets.adminUserTab",
-    titleKey: "admin.tabTitle",
-    kind: "component",
-    component: AdminUserSnippets as never,
-    order: 10,
-  });
-
-  // The command a terminal types when it connects to a host: the host's
-  // startup snippet with its variables filled in, or null.
-  app.registerAction("snippets.startupCommand", (async (
-    host: PluginHostRecord | null,
-    vars?: SnippetHostContext,
-  ) => {
-    const id = readStartupSnippetId(snippetHostSettings(host).startupSnippetId);
-    if (id === null) return null;
-    const snippet = await fetchSnippet(app, id);
-    if (!snippet) return null;
-    return resolveSnippetContent(snippet.content, vars ?? hostContext(host));
-  }) as never);
-
-  // For pickers in other plugins (the AI assistant's @-mentions): id and name.
-  app.registerAction("snippets.list", (async () => {
-    const snippets = await createSnippetsApi(app.api)
-      .list()
-      .catch(() => []);
-    return snippets.map((snippet) => ({ id: snippet.id, name: snippet.name }));
-  }) as never);
-
-  // Variable handling for commands other plugins run (fleets' run box).
-  app.registerAction("snippets.extractInputs", ((content: string) =>
-    extractSnippetInputs(typeof content === "string" ? content : "")) as never);
-}
diff --git a/plugins/snippets/src/frontend/keybinding.tsx b/plugins/snippets/src/frontend/keybinding.tsx
deleted file mode 100644
index bde972c84..000000000
--- a/plugins/snippets/src/frontend/keybinding.tsx
+++ /dev/null
@@ -1,89 +0,0 @@
-import {
-  useTranslation,
-  type KeybindingAction,
-  type KeybindingActionEditorProps,
-  type KeybindingRunContext,
-  type TermixApp,
-} from "@termix/plugin-sdk/frontend";
-import { fetchSnippet, runInSession } from "./run-flows";
-import { useSnippetOptions } from "./use-snippet-options";
-
-/** Stored as action.type; kept from 2.8 so saved bindings keep working. */
-export const RUN_SNIPPET_ACTION = "runSnippet";
-
-function snippetIdOf(action: KeybindingAction): string {
-  return typeof action.snippetId === "string" ? action.snippetId : "";
-}
-
-/** Picks the snippet a "Run snippet" binding runs. */
-export function RunSnippetEditor({
-  action,
-  onChange,
-}: KeybindingActionEditorProps) {
-  const { t } = useTranslation();
-  const { options } = useSnippetOptions();
-  return (
-    <div className="flex flex-col gap-1.5">
-      <label className="text-xs font-semibold">
-        {t("keybindings.snippetLabel")}
-      </label>
-      <select
-        aria-label={t("keybindings.snippetLabel")}
-        value={snippetIdOf(action)}
-        onChange={(e) =>
-          onChange({
-            type: RUN_SNIPPET_ACTION,
-            snippetId: e.target.value || undefined,
-            appendEnter: true,
-          })
-        }
-        className="h-8 border border-border bg-background px-2 text-xs outline-none focus:ring-1 focus:ring-ring"
-      >
-        <option value="">{t("keybindings.selectSnippet")}</option>
-        {options.map((snippet) => (
-          <option key={snippet.id} value={String(snippet.id)}>
-            {snippet.name}
-          </option>
-        ))}
-      </select>
-    </div>
-  );
-}
-
-/** The bound snippet's name in the binding list, or a warning once it is gone. */
-export function RunSnippetSummary({ action }: KeybindingActionEditorProps) {
-  const { t } = useTranslation();
-  const { options, loaded } = useSnippetOptions();
-  if (!loaded) return null;
-  const snippet = options.find((s) => String(s.id) === snippetIdOf(action));
-  if (snippet) return <span>({snippet.name})</span>;
-  return (
-    <span className="text-destructive">
-      ({t("keybindings.snippetMissing")})
-    </span>
-  );
-}
-
-export function validateRunSnippet(action: KeybindingAction): string | null {
-  return /^\d+$/.test(snippetIdOf(action))
-    ? null
-    : "keybindings.snippetRequired";
-}
-
-/** Runs a bound snippet in the terminal the key was pressed in. */
-export function runSnippetBinding(
-  app: Pick<TermixApp, "api" | "t">,
-  action: KeybindingAction,
-  context: KeybindingRunContext,
-): void {
-  void fetchSnippet(app, Number(snippetIdOf(action))).then((snippet) => {
-    if (!snippet) return;
-    void runInSession(
-      app,
-      { ...snippet, isNote: false },
-      { sessionId: context.sessionId, send: context.send },
-      context.host ?? null,
-      { pressEnter: action.appendEnter !== false },
-    );
-  });
-}
diff --git a/plugins/snippets/src/frontend/prompt-store.ts b/plugins/snippets/src/frontend/prompt-store.ts
deleted file mode 100644
index af4dfd33f..000000000
--- a/plugins/snippets/src/frontend/prompt-store.ts
+++ /dev/null
@@ -1,72 +0,0 @@
-import { useSyncExternalStore } from "react";
-import type { SnippetHostContext } from "../shared/variables.js";
-
-export interface PendingPrompt {
-  snippet: { name: string; content: string };
-  host: SnippetHostContext | null;
-  settle: (values: Record<string, string> | null) => void;
-}
-
-let pending: PendingPrompt | null = null;
-let confirmExecution = false;
-const listeners = new Set<() => void>();
-
-function notify(): void {
-  for (const listener of [...listeners]) listener();
-}
-
-function subscribe(listener: () => void): () => void {
-  listeners.add(listener);
-  return () => listeners.delete(listener);
-}
-
-/**
- * Asks for a snippet's $INPUT_n values through the dialog the overlay draws.
- * Resolves null when the user cancels. A second request cancels the first.
- */
-export function askForInputs(
-  snippet: { name: string; content: string },
-  host: SnippetHostContext | null,
-): Promise<Record<string, string> | null> {
-  pending?.settle(null);
-  return new Promise((resolve) => {
-    const prompt: PendingPrompt = {
-      snippet,
-      host,
-      settle: (values) => {
-        if (pending === prompt) {
-          pending = null;
-          notify();
-        }
-        resolve(values);
-      },
-    };
-    pending = prompt;
-    notify();
-  });
-}
-
-export function usePendingPrompt(): PendingPrompt | null {
-  return useSyncExternalStore(
-    subscribe,
-    () => pending,
-    () => pending,
-  );
-}
-
-/** Kept current by the overlay from the user's confirmExecution setting. */
-export function setConfirmExecution(value: boolean): void {
-  confirmExecution = value;
-}
-
-export function shouldConfirmExecution(): boolean {
-  return confirmExecution;
-}
-
-/** Cancels anything waiting, for deactivate. */
-export function resetPrompts(): void {
-  pending?.settle(null);
-  pending = null;
-  confirmExecution = false;
-  notify();
-}
diff --git a/plugins/snippets/src/frontend/run-flows.ts b/plugins/snippets/src/frontend/run-flows.ts
deleted file mode 100644
index 2de490468..000000000
--- a/plugins/snippets/src/frontend/run-flows.ts
+++ /dev/null
@@ -1,121 +0,0 @@
-import { toast } from "sonner";
-import { invokeAction, type TermixApp } from "@termix/plugin-sdk/frontend";
-import {
-  hasSnippetInputs,
-  resolveSnippetContent,
-  type SnippetHostContext,
-} from "../shared/variables.js";
-import { askForInputs, shouldConfirmExecution } from "./prompt-store";
-import { createSnippetsApi } from "./snippets-api";
-
-export interface RunnableSnippet {
-  id: number;
-  name: string;
-  content: string;
-  isNote?: boolean;
-}
-
-/** Where a run sends its text: a session by id, or a raw writer. */
-export interface RunTarget {
-  sessionId?: string;
-  send?: (data: string) => void;
-}
-
-/**
- * The snippet with its variables filled in, asking for $INPUT_n values when
- * it has any. Null when the user cancels.
- */
-export async function resolveForRun(
-  snippet: { name: string; content: string },
-  host: SnippetHostContext | null,
-): Promise<string | null> {
-  if (!hasSnippetInputs(snippet.content)) {
-    return resolveSnippetContent(snippet.content, host);
-  }
-  const values = await askForInputs(snippet, host);
-  if (!values) return null;
-  return resolveSnippetContent(snippet.content, host, values);
-}
-
-/** Runs `execute` now, or after the user confirms when they asked to. */
-export function confirmThenRun(
-  app: Pick<TermixApp, "t">,
-  name: string,
-  execute: () => void,
-): void {
-  if (!shouldConfirmExecution()) {
-    execute();
-    return;
-  }
-  toast(app.t("confirmRunMessage", { name }), {
-    action: { label: app.t("confirmRunButton"), onClick: execute },
-    duration: 6000,
-  });
-}
-
-/**
- * Types a snippet into a terminal session: resolves its variables, asks for
- * inputs and confirmation as the user's settings say, then sends it. A note
- * is pasted without running.
- */
-export async function runInSession(
-  app: Pick<TermixApp, "t">,
-  snippet: RunnableSnippet,
-  target: RunTarget,
-  host: SnippetHostContext | null,
-  options: { pressEnter?: boolean; announce?: boolean } = {},
-): Promise<void> {
-  const content = await resolveForRun(snippet, host);
-  if (content === null) return;
-  const run = !snippet.isNote && options.pressEnter !== false;
-  const send = async () => {
-    let sent = true;
-    if (target.send) {
-      target.send(content + (run ? "\r" : ""));
-    } else if (target.sessionId) {
-      sent =
-        (await invokeAction(
-          "terminal.sendToSession",
-          target.sessionId,
-          content,
-          {
-            run,
-          },
-        )) === true;
-    } else {
-      sent = false;
-    }
-    if (!options.announce) return;
-    if (!sent) {
-      toast.error(app.t("noTerminalTabsOpen"));
-      return;
-    }
-    toast.success(
-      app.t(snippet.isNote ? "pasteSuccess" : "runSuccess", {
-        name: snippet.name,
-        count: 1,
-      }),
-    );
-  };
-  if (snippet.isNote) void send();
-  else confirmThenRun(app, snippet.name, () => void send());
-}
-
-/** One snippet by id, or null when it is gone or unreadable. */
-export async function fetchSnippet(
-  app: Pick<TermixApp, "api">,
-  id: number,
-): Promise<RunnableSnippet | null> {
-  if (!Number.isInteger(id) || id <= 0) return null;
-  const snippet = await createSnippetsApi(app.api)
-    .get(id)
-    .catch(() => null);
-  return snippet
-    ? {
-        id: snippet.id,
-        name: snippet.name,
-        content: snippet.content,
-        isNote: snippet.isNote,
-      }
-    : null;
-}
diff --git a/plugins/snippets/src/frontend/settings.ts b/plugins/snippets/src/frontend/settings.ts
deleted file mode 100644
index 6f7e7a56b..000000000
--- a/plugins/snippets/src/frontend/settings.ts
+++ /dev/null
@@ -1,15 +0,0 @@
-export interface SnippetDisplaySettings {
-  foldersCollapsed: boolean;
-  showCommands: boolean;
-  confirmExecution: boolean;
-}
-
-export function readSnippetSettings(
-  values: Record<string, unknown>,
-): SnippetDisplaySettings {
-  return {
-    foldersCollapsed: values.foldersCollapsed !== false,
-    showCommands: values.showCommands !== false,
-    confirmExecution: values.confirmExecution === true,
-  };
-}
diff --git a/plugins/snippets/src/frontend/snippets-api.ts b/plugins/snippets/src/frontend/snippets-api.ts
deleted file mode 100644
index b96d72b56..000000000
--- a/plugins/snippets/src/frontend/snippets-api.ts
+++ /dev/null
@@ -1,140 +0,0 @@
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import type { Snippet, SnippetAccessEntry, SnippetFolder } from "./types";
-
-export interface NewSnippetInput {
-  name: string;
-  content: string;
-  description?: string | null;
-  folder?: string | null;
-  order?: number | null;
-  hostFilter?: unknown;
-  isNote?: boolean;
-}
-
-export interface SnippetUpdateInput {
-  name?: string;
-  content?: string;
-  description?: string | null;
-  folder?: string | null;
-  order?: number;
-  hostFilter?: unknown;
-  isNote?: boolean;
-}
-
-export interface SnippetReorderUpdate {
-  id: number;
-  order: number;
-  folder?: string;
-}
-
-export interface SnippetExecutionResult {
-  success: boolean;
-  output: string;
-  error?: string;
-}
-
-export interface ShareableUser {
-  id: string;
-  username: string;
-}
-
-export interface ShareableRole {
-  id: number;
-  name: string;
-  displayName: string | null;
-}
-
-export interface SnippetShareInput {
-  targetType: "user" | "role";
-  targetUserId?: string;
-  targetRoleId?: number;
-  expiresAt?: string | null;
-}
-
-/**
- * The snippets routes, through the plugin's own client. Paths are relative
- * to /plugin-api/snippets/, which the client already points at.
- */
-export function createSnippetsApi(api: PluginApiClient) {
-  const data = async <T>(request: Promise<{ data: T }>) => (await request).data;
-
-  return {
-    list: () => data(api.get<Snippet[]>("/")),
-    get: (id: number) => data(api.get<Snippet>(`/${id}`)),
-    create: (body: NewSnippetInput) => data(api.post<Snippet>("/", body)),
-    update: (id: number, body: SnippetUpdateInput) =>
-      data(api.put<Snippet>(`/${id}`, body)),
-    remove: (id: number) => data(api.delete<{ success: boolean }>(`/${id}`)),
-    execute: (
-      snippetId: number,
-      hostId: number,
-      inputValues?: Record<string, string>,
-    ) =>
-      data(
-        api.post<SnippetExecutionResult>("/execute", {
-          snippetId,
-          hostId,
-          inputValues,
-        }),
-      ),
-    reorder: (updates: SnippetReorderUpdate[]) =>
-      data(api.put<{ success: boolean }>("/reorder", { snippets: updates })),
-    export: () =>
-      data(api.get<{ snippets: unknown[]; folders: unknown[] }>("/export")),
-    bulkImport: (body: {
-      snippets?: unknown[];
-      folders?: unknown[];
-      overwrite?: boolean;
-    }) => data(api.post<{ success: boolean }>("/bulk-import", body)),
-
-    listFolders: () => data(api.get<SnippetFolder[]>("/folders")),
-    createFolder: (body: {
-      name: string;
-      color?: string | null;
-      icon?: string | null;
-    }) => data(api.post<SnippetFolder>("/folders", body)),
-    updateFolderMetadata: (
-      name: string,
-      body: { color?: string | null; icon?: string | null },
-    ) =>
-      data(
-        api.put<SnippetFolder>(
-          `/folders/${encodeURIComponent(name)}/metadata`,
-          body,
-        ),
-      ),
-    renameFolder: (oldName: string, newName: string) =>
-      data(
-        api.put<{ success: boolean }>("/folders/rename", { oldName, newName }),
-      ),
-    deleteFolder: (name: string) =>
-      data(
-        api.delete<{ success: boolean }>(
-          `/folders/${encodeURIComponent(name)}`,
-        ),
-      ),
-
-    share: (snippetId: number, body: SnippetShareInput) =>
-      data(api.post<{ success: boolean }>(`/${snippetId}/share`, body)),
-    shareFolder: (folder: string, body: SnippetShareInput) =>
-      data(
-        api.put<{ success: boolean; snippetsShared: number }>("/folder/share", {
-          folder,
-          ...body,
-        }),
-      ),
-    getAccess: (snippetId: number) =>
-      data(api.get<SnippetAccessEntry[]>(`/${snippetId}/access`)),
-    revokeAccess: (snippetId: number, accessId: number) =>
-      data(
-        api.delete<{ success: boolean }>(`/${snippetId}/access/${accessId}`),
-      ),
-    shareTargetUsers: () =>
-      data(api.get<{ users: ShareableUser[] }>("/share-targets/users")),
-    shareTargetRoles: () =>
-      data(api.get<{ roles: ShareableRole[] }>("/share-targets/roles")),
-    listShared: () => data(api.get<{ sharedSnippets: Snippet[] }>("/shared")),
-  };
-}
-
-export type SnippetsApi = ReturnType<typeof createSnippetsApi>;
diff --git a/plugins/snippets/src/frontend/types.ts b/plugins/snippets/src/frontend/types.ts
deleted file mode 100644
index 4425b76d0..000000000
--- a/plugins/snippets/src/frontend/types.ts
+++ /dev/null
@@ -1,84 +0,0 @@
-export const FOLDER_ICONS = [
-  "folder",
-  "server",
-  "cloud",
-  "database",
-  "box",
-  "network",
-  "copy",
-  "settings",
-  "cpu",
-  "globe",
-] as const;
-export type FolderIconId = (typeof FOLDER_ICONS)[number];
-
-export interface Snippet {
-  id: number;
-  userId: string;
-  name: string;
-  content: string;
-  description: string | null;
-  folder: string | null;
-  order: number;
-  hostFilter: string | null;
-  isNote: boolean;
-  isShared?: boolean;
-  createdAt: string;
-  updatedAt: string;
-}
-
-export interface SnippetFolder {
-  id: number;
-  userId: string;
-  name: string;
-  color: string | null;
-  icon: string | null;
-  createdAt: string;
-  updatedAt: string;
-}
-
-export interface SnippetAccessEntry {
-  id: number;
-  targetType: "user" | "role";
-  userId: string | null;
-  roleId: number | null;
-  username: string | null;
-  roleName: string | null;
-  roleDisplayName: string | null;
-  grantedBy: string;
-  grantedByUsername: string | null;
-  permissionLevel: string;
-  expiresAt: string | null;
-  createdAt: string;
-}
-
-/** The host ids a command snippet targets, from its stored JSON filter. */
-export function parseHostFilter(raw: string | null | undefined): number[] {
-  if (!raw) return [];
-  try {
-    const parsed: unknown = JSON.parse(raw);
-    return Array.isArray(parsed)
-      ? parsed.filter((id): id is number => typeof id === "number")
-      : [];
-  } catch {
-    return [];
-  }
-}
-
-export function errorMessage(error: unknown, fallback: string): string {
-  if (
-    error &&
-    typeof error === "object" &&
-    "response" in error &&
-    error.response &&
-    typeof error.response === "object" &&
-    "data" in error.response &&
-    error.response.data &&
-    typeof error.response.data === "object" &&
-    "error" in error.response.data &&
-    typeof error.response.data.error === "string"
-  ) {
-    return error.response.data.error;
-  }
-  return fallback;
-}
diff --git a/plugins/snippets/src/frontend/use-snippet-options.ts b/plugins/snippets/src/frontend/use-snippet-options.ts
deleted file mode 100644
index bb0d226c9..000000000
--- a/plugins/snippets/src/frontend/use-snippet-options.ts
+++ /dev/null
@@ -1,53 +0,0 @@
-import { useEffect, useState } from "react";
-import { usePluginApi } from "@termix/plugin-sdk/frontend";
-import { adminOptions } from "./AdminUserSnippets";
-
-export interface SnippetOption {
-  id: number;
-  name: string;
-}
-
-/**
- * The user's snippets as picker options: their own, or the target user's
- * while an admin edits that user's host. `loaded` turns true once the list
- * came back, so a picker can tell "no snippets" from "not loaded yet".
- */
-export function useSnippetOptions(targetUserId?: string): {
-  options: SnippetOption[];
-  loaded: boolean;
-} {
-  const api = usePluginApi();
-  const [state, setState] = useState<{
-    options: SnippetOption[];
-    loaded: boolean;
-  }>({ options: [], loaded: false });
-
-  useEffect(() => {
-    let cancelled = false;
-    const request = targetUserId
-      ? api.get("/", adminOptions(targetUserId))
-      : api.get("/");
-    request
-      .then((response) => {
-        const raw = response.data as unknown;
-        const list = Array.isArray(raw)
-          ? raw
-          : ((raw as { snippets?: unknown[] })?.snippets ?? []);
-        const options = (list as Array<{ id?: unknown; name?: unknown }>)
-          .filter((row) => typeof row.id === "number")
-          .map((row) => ({
-            id: row.id as number,
-            name: typeof row.name === "string" ? row.name : `#${row.id}`,
-          }));
-        if (!cancelled) setState({ options, loaded: true });
-      })
-      .catch(() => {
-        if (!cancelled) setState({ options: [], loaded: true });
-      });
-    return () => {
-      cancelled = true;
-    };
-  }, [api, targetUserId]);
-
-  return state;
-}
diff --git a/plugins/snippets/src/frontend/use-snippet-runner.tsx b/plugins/snippets/src/frontend/use-snippet-runner.tsx
deleted file mode 100644
index 2ddd82d7a..000000000
--- a/plugins/snippets/src/frontend/use-snippet-runner.tsx
+++ /dev/null
@@ -1,283 +0,0 @@
-import { useCallback, useMemo, useState } from "react";
-import {
-  invokeAction,
-  usePluginApi,
-  useTranslation,
-} from "@termix/plugin-sdk/frontend";
-import { toast } from "sonner";
-import {
-  hasSnippetInputs,
-  resolveSnippetContent,
-  type SnippetHostContext,
-} from "../shared/variables.js";
-import { SnippetVariablesDialog } from "./SnippetVariablesDialog";
-import { createSnippetsApi } from "./snippets-api";
-import {
-  ExecutionResultsDialog,
-  type HostExecutionResult,
-} from "./ExecutionResultsDialog";
-import { errorMessage, type Snippet } from "./types";
-
-export interface TargetHost {
-  id: number;
-  name?: string;
-  ip?: string;
-  username?: string;
-  port?: number;
-}
-
-export interface RunTarget {
-  sessionId: string;
-  host: SnippetHostContext | null;
-}
-
-/**
- * Shared "run this snippet against these terminal sessions" flow: resolves
- * $HOST-style vars per target, prompts once for $INPUT_n placeholders when
- * present, and gates on the confirm-before-running setting. Sends through
- * the ssh-terminal plugin's terminal.sendToActive/sendToSession actions
- * rather than touching a terminal ref directly, since core's tab state is
- * not part of the plugin surface. runOnHosts instead runs a command over a
- * fresh SSH connection to each of the snippet's target hosts.
- */
-export function useSnippetRunner(confirmExecution = false) {
-  const { t } = useTranslation();
-  const api = usePluginApi();
-  const client = useMemo(() => createSnippetsApi(api), [api]);
-  const [execution, setExecution] = useState<{
-    snippetName: string;
-    results: HostExecutionResult[];
-  } | null>(null);
-  const [runningSnippet, setRunningSnippet] = useState<{
-    snippet: Snippet;
-    host: SnippetHostContext | null;
-    onConfirm: (
-      resolvedContent: string,
-      inputValues: Record<string, string>,
-    ) => void;
-  } | null>(null);
-
-  const handleConfirmRun = useCallback(
-    (snippet: Snippet, execute: () => void) => {
-      if (!confirmExecution) {
-        execute();
-        return;
-      }
-      toast(t("confirmRunMessage", { name: snippet.name }), {
-        action: {
-          label: t("confirmRunButton"),
-          onClick: execute,
-        },
-        duration: 6000,
-      });
-    },
-    [confirmExecution, t],
-  );
-
-  async function sendResolvedToTarget(
-    target: RunTarget,
-    snippet: Snippet,
-    inputValues: Record<string, string>,
-  ) {
-    const content = resolveSnippetContent(
-      snippet.content,
-      target.host,
-      inputValues,
-    );
-    const run = !snippet.isNote;
-    await invokeAction("terminal.sendToSession", target.sessionId, content, {
-      run,
-    });
-  }
-
-  const runSnippet = useCallback(
-    (snippet: Snippet, targets: RunTarget[]) => {
-      const runWithInputs = (inputValues: Record<string, string>) => {
-        const doSend = () => {
-          Promise.all(
-            targets.map((target) =>
-              sendResolvedToTarget(target, snippet, inputValues),
-            ),
-          )
-            .then(() => {
-              toast.success(
-                t(snippet.isNote ? "pasteSuccess" : "runSuccess", {
-                  name: snippet.name,
-                  count: targets.length,
-                }),
-              );
-            })
-            .catch(() => {});
-        };
-        if (snippet.isNote) doSend();
-        else handleConfirmRun(snippet, doSend);
-      };
-
-      if (hasSnippetInputs(snippet.content)) {
-        setRunningSnippet({
-          snippet,
-          host: targets[0]?.host ?? null,
-          onConfirm: (_resolvedContent, inputValues) => {
-            setRunningSnippet(null);
-            runWithInputs(inputValues);
-          },
-        });
-      } else {
-        runWithInputs({});
-      }
-    },
-    [handleConfirmRun, t],
-  );
-
-  const runOnActive = useCallback(
-    (snippet: Snippet, host: SnippetHostContext | null) => {
-      const runWithInputs = (inputValues: Record<string, string>) => {
-        const doSend = () => {
-          const content = resolveSnippetContent(
-            snippet.content,
-            host,
-            inputValues,
-          );
-          void invokeAction("terminal.sendToActive", content, {
-            run: !snippet.isNote,
-          }).then((sent) => {
-            if (sent === false) {
-              toast.error(t("noTerminalTabsOpen"));
-              return;
-            }
-            toast.success(
-              t(snippet.isNote ? "pasteSuccess" : "runSuccess", {
-                name: snippet.name,
-                count: 1,
-              }),
-            );
-          });
-        };
-        if (snippet.isNote) doSend();
-        else handleConfirmRun(snippet, doSend);
-      };
-
-      if (hasSnippetInputs(snippet.content)) {
-        setRunningSnippet({
-          snippet,
-          host,
-          onConfirm: (_resolvedContent, inputValues) => {
-            setRunningSnippet(null);
-            runWithInputs(inputValues);
-          },
-        });
-      } else {
-        runWithInputs({});
-      }
-    },
-    [handleConfirmRun, t],
-  );
-
-  const runOnHosts = useCallback(
-    (snippet: Snippet, hosts: TargetHost[]) => {
-      if (hosts.length === 0) return;
-      const execute = (inputValues: Record<string, string>) => {
-        const label = (host: TargetHost) =>
-          host.name || host.ip || String(host.id);
-        setExecution({
-          snippetName: snippet.name,
-          results: hosts.map((host) => ({
-            hostId: host.id,
-            hostLabel: label(host),
-            success: null,
-            output: "",
-          })),
-        });
-        const update = (result: HostExecutionResult) =>
-          setExecution((prev) =>
-            prev
-              ? {
-                  ...prev,
-                  results: prev.results.map((r) =>
-                    r.hostId === result.hostId ? result : r,
-                  ),
-                }
-              : prev,
-          );
-        const inputs =
-          Object.keys(inputValues).length > 0 ? inputValues : undefined;
-        void Promise.all(
-          hosts.map(async (host) => {
-            try {
-              const result = await client.execute(snippet.id, host.id, inputs);
-              update({ hostId: host.id, hostLabel: label(host), ...result });
-              return result.success;
-            } catch (err) {
-              update({
-                hostId: host.id,
-                hostLabel: label(host),
-                success: false,
-                output: "",
-                error: errorMessage(err, t("executionFailed")),
-              });
-              return false;
-            }
-          }),
-        ).then((outcomes) => {
-          if (outcomes.every(Boolean)) {
-            toast.success(
-              t("directRunSuccess", {
-                name: snippet.name,
-                count: hosts.length,
-              }),
-            );
-          } else {
-            toast.error(t("directRunPartialFail", { name: snippet.name }));
-          }
-        });
-      };
-
-      const runWithInputs = (inputValues: Record<string, string>) =>
-        handleConfirmRun(snippet, () => execute(inputValues));
-
-      if (hasSnippetInputs(snippet.content)) {
-        const first = hosts[0];
-        setRunningSnippet({
-          snippet,
-          host: {
-            ip: first.ip,
-            username: first.username,
-            port: first.port,
-            name: first.name,
-          },
-          onConfirm: (_resolvedContent, inputValues) => {
-            setRunningSnippet(null);
-            runWithInputs(inputValues);
-          },
-        });
-      } else {
-        runWithInputs({});
-      }
-    },
-    [client, handleConfirmRun, t],
-  );
-
-  const variablesDialog = runningSnippet ? (
-    <SnippetVariablesDialog
-      snippet={runningSnippet.snippet}
-      host={runningSnippet.host}
-      onCancel={() => setRunningSnippet(null)}
-      onConfirm={runningSnippet.onConfirm}
-    />
-  ) : null;
-
-  const dialog = (
-    <>
-      {variablesDialog}
-      {execution && (
-        <ExecutionResultsDialog
-          snippetName={execution.snippetName}
-          results={execution.results}
-          onClose={() => setExecution(null)}
-        />
-      )}
-    </>
-  );
-
-  return { runSnippet, runOnActive, runOnHosts, handleConfirmRun, dialog };
-}
diff --git a/plugins/snippets/src/shared/host-settings.ts b/plugins/snippets/src/shared/host-settings.ts
deleted file mode 100644
index 0a1a9ce31..000000000
--- a/plugins/snippets/src/shared/host-settings.ts
+++ /dev/null
@@ -1,48 +0,0 @@
-/**
- * The snippets plugin's host settings: the startup snippet a terminal runs
- * when it connects, and the quick action buttons Host Metrics shows.
- */
-
-export const PLUGIN_ID = "snippets";
-
-export interface QuickAction {
-  name: string;
-  snippetId: number;
-}
-
-function snippetId(value: unknown): number | null {
-  const id = typeof value === "string" ? Number(value) : value;
-  return typeof id === "number" && Number.isInteger(id) && id > 0 ? id : null;
-}
-
-/** Quick actions in their stored shape, dropping any without a snippet. */
-export function readQuickActions(value: unknown): QuickAction[] {
-  let list = value;
-  if (typeof list === "string") {
-    try {
-      list = JSON.parse(list);
-    } catch {
-      return [];
-    }
-  }
-  if (!Array.isArray(list)) return [];
-  return list.flatMap((entry): QuickAction[] => {
-    if (!entry || typeof entry !== "object") return [];
-    const id = snippetId((entry as { snippetId?: unknown }).snippetId);
-    if (id === null) return [];
-    const name = (entry as { name?: unknown }).name;
-    return [{ name: typeof name === "string" ? name : "", snippetId: id }];
-  });
-}
-
-export function readStartupSnippetId(value: unknown): number | null {
-  return snippetId(value);
-}
-
-/** This plugin's slice of a host record's pluginSettings. */
-export function snippetHostSettings(host: unknown): Record<string, unknown> {
-  const all = (host as { pluginSettings?: Record<string, unknown> } | null)
-    ?.pluginSettings;
-  const own = all?.[PLUGIN_ID];
-  return own && typeof own === "object" ? (own as Record<string, unknown>) : {};
-}
diff --git a/plugins/snippets/src/shared/variables.ts b/plugins/snippets/src/shared/variables.ts
deleted file mode 100644
index 4f0a0869d..000000000
--- a/plugins/snippets/src/shared/variables.ts
+++ /dev/null
@@ -1,81 +0,0 @@
-/**
- * $HOST, $USER, $PORT, $NAME and $INPUT_n in a command. The one copy: the
- * frontend, the backend and other plugins (fleets, through the
- * "snippets.variables" registry entry and action) all use this.
- */
-
-export interface SnippetInput {
-  key: string;
-  label: string;
-}
-
-export interface SnippetHostContext {
-  ip?: string;
-  username?: string;
-  port?: number | string;
-  name?: string;
-}
-
-const INPUT_PATTERN =
-  /\$\{INPUT_(\d+)(?::([^}$]+))?\}|\$INPUT_(\d+)(?![a-zA-Z0-9_])/g;
-
-export function extractSnippetInputs(content: string): SnippetInput[] {
-  const seen = new Map<string, SnippetInput>();
-  let match: RegExpExecArray | null;
-  INPUT_PATTERN.lastIndex = 0;
-  while ((match = INPUT_PATTERN.exec(content)) !== null) {
-    const digits = match[1] ?? match[3];
-    const key = `INPUT_${digits}`;
-    if (!seen.has(key)) {
-      seen.set(key, { key, label: match[2]?.trim() || `Input ${digits}` });
-    }
-  }
-  return Array.from(seen.values());
-}
-
-export function hasSnippetInputs(content: string): boolean {
-  INPUT_PATTERN.lastIndex = 0;
-  return INPUT_PATTERN.test(content);
-}
-
-function replaceVar(
-  content: string,
-  name: string,
-  value: string | undefined,
-): string {
-  if (value === undefined) return content;
-  const pattern = new RegExp(`\\$\\{?${name}\\}?`, "g");
-  return content.replace(pattern, value);
-}
-
-export function resolveSnippetContent(
-  content: string,
-  host: SnippetHostContext | null,
-  inputValues: Record<string, string> = {},
-): string {
-  let resolved = content;
-
-  resolved = replaceVar(resolved, "HOST", host?.ip);
-  resolved = replaceVar(resolved, "USER", host?.username);
-  resolved = replaceVar(
-    resolved,
-    "PORT",
-    host?.port !== undefined ? String(host.port) : undefined,
-  );
-  resolved = replaceVar(resolved, "NAME", host?.name);
-
-  resolved = resolved.replace(
-    INPUT_PATTERN,
-    (
-      fullMatch,
-      braceDigits: string | undefined,
-      _label,
-      plainDigits: string | undefined,
-    ) => {
-      const key = `INPUT_${braceDigits ?? plainDigits}`;
-      return key in inputValues ? inputValues[key] : fullMatch;
-    },
-  );
-
-  return resolved;
-}
diff --git a/plugins/snippets/tests/backend/activate.test.ts b/plugins/snippets/tests/backend/activate.test.ts
deleted file mode 100644
index 1562280fc..000000000
--- a/plugins/snippets/tests/backend/activate.test.ts
+++ /dev/null
@@ -1,155 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import express from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import { PluginCapabilityError } from "@termix/plugin-sdk/backend";
-import { activate } from "../../src/backend/index.js";
-import { manifest, pluginDir, startServer, type TestServer } from "./helpers";
-
-let db: TestDb | null = null;
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  db?.close();
-  db = null;
-  await server?.close();
-  server = null;
-});
-
-describe("snippets activate", () => {
-  it("registers snippets and snippetFolders sync entities at the legacy order values", async () => {
-    server = await startServer();
-    const types = server.mock.syncEntities.map((e) => e.type);
-    expect(types).toContain("snippets");
-    expect(types).toContain("snippetFolders");
-
-    const snippetsEntity = server.mock.syncEntities.find(
-      (e) => e.type === "snippets",
-    );
-    const foldersEntity = server.mock.syncEntities.find(
-      (e) => e.type === "snippetFolders",
-    );
-    expect(snippetsEntity?.order).toBe(60);
-    expect(foldersEntity?.order).toBe(40);
-  });
-
-  it("offers the snippets.access service, scoped to the calling user", async () => {
-    server = await startServer();
-    await server.request("POST", "/", {
-      body: { name: "Deploy", content: "echo deploy" },
-    });
-
-    const service = server.mock.services.get("snippets.access") as {
-      list: () => Promise<unknown>;
-    };
-    const listed = await server.mock.actAs("user-1", () => service.list());
-    expect(listed).toEqual([
-      expect.objectContaining({ name: "Deploy", content: "echo deploy" }),
-    ]);
-
-    const otherUsersList = await server.mock.actAs("user-2", () =>
-      service.list(),
-    );
-    expect(otherUsersList).toEqual([]);
-  });
-
-  it("refuses service writes the user could not make in the panel", async () => {
-    server = await startServer({ permissions: ["snippets.view"] });
-    const service = server.mock.services.get("snippets.access") as {
-      create: (input: { name: string; content: string }) => Promise<unknown>;
-      update: (id: number, changes: { name: string }) => Promise<unknown>;
-      remove: (id: number) => Promise<unknown>;
-    };
-    const asUser = <T>(fn: () => Promise<T>) =>
-      server!.mock.actAs("user-1", fn);
-
-    await expect(
-      asUser(() => service.create({ name: "x", content: "ls" })),
-    ).rejects.toThrow("snippets.create");
-    await expect(
-      asUser(() => service.update(1, { name: "y" })),
-    ).rejects.toThrow("snippets.edit");
-    await expect(asUser(() => service.remove(1))).rejects.toThrow(
-      "snippets.delete",
-    );
-  });
-
-  it("wipes a user's snippets when user.data_wiped fires", async () => {
-    // events:core only to simulate core firing the topic in this test; the
-    // plugin's own manifest never declares it, since it only subscribes.
-    server = await startServer({
-      capabilities: [...manifest.capabilities, "events:core"],
-    });
-    await server.request("POST", "/", {
-      body: { name: "Deploy", content: "echo deploy" },
-    });
-
-    const before = (await server.request("GET", "/")).body;
-    expect(before).toHaveLength(1);
-
-    server.mock.ctx.events.emit("user.data_wiped", { userId: "user-1" });
-    // The listener's delete is fire-and-forget; give its microtasks a turn.
-    await new Promise((resolve) => setTimeout(resolve, 20));
-
-    const after = (await server.request("GET", "/")).body;
-    expect(after).toHaveLength(0);
-  });
-
-  it("registers its host settings hooks and the variables helper", async () => {
-    server = await startServer();
-    const registry = server.mock.ctx.registry;
-    for (const key of [
-      "snippets.hostImportNormalizer",
-      "snippets.hostPayloadLegacy",
-      "snippets.hostSettingsSync",
-    ]) {
-      expect(registry.consume(key), key).toBeDefined();
-    }
-    const variables = registry.consume<{
-      resolve: (c: string, h: { ip?: string } | null) => string;
-      extractInputs: (c: string) => Array<{ key: string }>;
-    }>("snippets.variables");
-    expect(variables?.resolve("ping $HOST", { ip: "10.0.0.1" })).toBe(
-      "ping 10.0.0.1",
-    );
-    expect(variables?.extractInputs("echo $INPUT_1")).toEqual([
-      { key: "INPUT_1", label: "Input 1" },
-    ]);
-  });
-
-  it("fails closed without db:own", async () => {
-    db = await createTestDb(pluginDir);
-    const mock = createMockCtx({
-      pluginId: manifest.id,
-      manifest,
-      capabilities: [
-        "network:serve",
-        "ssh:connect",
-        "credentials:use",
-        "ui:surface",
-      ],
-      db: db.database,
-      router: () => express.Router(),
-    });
-    await expect(activate(mock.ctx)).rejects.toBeInstanceOf(
-      PluginCapabilityError,
-    );
-  });
-
-  it("fails closed without network:serve", async () => {
-    db = await createTestDb(pluginDir);
-    const mock = createMockCtx({
-      pluginId: manifest.id,
-      manifest,
-      capabilities: ["db:own", "ssh:connect", "credentials:use", "ui:surface"],
-      db: db.database,
-      router: () => express.Router(),
-    });
-    await expect(activate(mock.ctx)).rejects.toBeInstanceOf(
-      PluginCapabilityError,
-    );
-  });
-});
diff --git a/plugins/snippets/tests/backend/execute.test.ts b/plugins/snippets/tests/backend/execute.test.ts
deleted file mode 100644
index a6a38509b..000000000
--- a/plugins/snippets/tests/backend/execute.test.ts
+++ /dev/null
@@ -1,129 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import express from "express";
-import { EventEmitter } from "node:events";
-import {
-  createMockCtx,
-  createTestDb,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import { manifest, pluginDir } from "./helpers";
-
-let db: TestDb | null = null;
-
-afterEach(async () => {
-  db?.close();
-  db = null;
-});
-
-function fakeSshClient(output: string, exitCode: number | null = 0) {
-  const client = new EventEmitter() as EventEmitter & {
-    exec: (
-      command: string,
-      cb: (err: Error | null, stream: unknown) => void,
-    ) => void;
-  };
-  client.exec = (command, cb) => {
-    const stream = new EventEmitter() as EventEmitter & {
-      stderr: EventEmitter;
-    };
-    stream.stderr = new EventEmitter();
-    cb(null, stream);
-    setImmediate(() => {
-      stream.emit("data", Buffer.from(output));
-      stream.emit("close", exitCode);
-    });
-  };
-  return client;
-}
-
-async function startExecuteServer(sshClient: unknown) {
-  db = await createTestDb(pluginDir);
-  db.sqlite
-    .prepare("INSERT INTO users (id, username) VALUES ('user-1', 'user-1')")
-    .run();
-
-  let router: import("express").Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    sshClient,
-    permissions: ["snippets.view", "snippets.create"],
-  });
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") ?? undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-
-  const http = await import("node:http");
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as import("node:net").AddressInfo;
-
-  return {
-    async request(method: string, path: string, body?: unknown) {
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        headers: {
-          "x-test-user": "user-1",
-          ...(body !== undefined ? { "content-type": "application/json" } : {}),
-        },
-        body: body !== undefined ? JSON.stringify(body) : undefined,
-      });
-      const text = await response.text();
-      return { status: response.status, body: text ? JSON.parse(text) : null };
-    },
-    async close() {
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-    },
-  };
-}
-
-describe("POST /execute", () => {
-  it("runs the resolved command over the ssh client and reports success", async () => {
-    const client = fakeSshClient("deployed ok", 0);
-    const server = await startExecuteServer(client);
-    try {
-      const created = await server.request("POST", "/", {
-        name: "Deploy",
-        content: "echo $HOST",
-      });
-      const result = await server.request("POST", "/execute", {
-        snippetId: created.body.id,
-        hostId: 42,
-      });
-      expect(result.status).toBe(200);
-      expect(result.body).toEqual({ success: true, output: "deployed ok" });
-    } finally {
-      await server.close();
-    }
-  });
-
-  it("reports failure from a nonzero exit code", async () => {
-    const client = fakeSshClient("", 1);
-    const server = await startExecuteServer(client);
-    try {
-      const created = await server.request("POST", "/", {
-        name: "Fails",
-        content: "exit 1",
-      });
-      const result = await server.request("POST", "/execute", {
-        snippetId: created.body.id,
-        hostId: 42,
-      });
-      expect(result.status).toBe(200);
-      expect(result.body.success).toBe(false);
-    } finally {
-      await server.close();
-    }
-  });
-});
diff --git a/plugins/snippets/tests/backend/helpers.ts b/plugins/snippets/tests/backend/helpers.ts
deleted file mode 100644
index e7685f934..000000000
--- a/plugins/snippets/tests/backend/helpers.ts
+++ /dev/null
@@ -1,98 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-export const manifest = manifestJson as unknown as PluginManifest;
-
-export interface TestServer {
-  db: TestDb;
-  mock: MockPluginContext;
-  request: (
-    method: string,
-    path: string,
-    options?: { user?: string; body?: unknown },
-  ) => Promise<{ status: number; body: any }>;
-  close: () => Promise<void>;
-}
-
-export async function startServer(
-  options: {
-    permissions?: string[];
-    users?: string[];
-    capabilities?: string[];
-    shareableUsers?: { id: string; username: string }[];
-    shareableRoles?: { id: number; name: string; displayName: string }[];
-  } = {},
-): Promise<TestServer> {
-  const db = await createTestDb(pluginDir);
-  for (const user of options.users ?? ["user-1", "user-2"]) {
-    db.sqlite
-      .prepare("INSERT INTO users (id, username) VALUES (?, ?)")
-      .run(user, user);
-  }
-
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: options.capabilities ?? manifest.capabilities,
-    db: db.database,
-    shareableUsers: options.shareableUsers,
-    shareableRoles: options.shareableRoles,
-    router: () => (router = express.Router()),
-    permissions: options.permissions ?? [
-      "snippets.view",
-      "snippets.create",
-      "snippets.edit",
-      "snippets.delete",
-      "snippets.share",
-    ],
-  });
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") ?? undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    db,
-    mock,
-    async request(method, path, { user = "user-1", body: given } = {}) {
-      const body = method === "GET" ? undefined : given;
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        headers: {
-          "x-test-user": user,
-          ...(body !== undefined ? { "content-type": "application/json" } : {}),
-        },
-        body: body !== undefined ? JSON.stringify(body) : undefined,
-      });
-      const text = await response.text();
-      return { status: response.status, body: text ? JSON.parse(text) : null };
-    },
-    async close() {
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-      db.close();
-    },
-  };
-}
diff --git a/plugins/snippets/tests/backend/host-import.test.ts b/plugins/snippets/tests/backend/host-import.test.ts
deleted file mode 100644
index 90cbfce32..000000000
--- a/plugins/snippets/tests/backend/host-import.test.ts
+++ /dev/null
@@ -1,79 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  createHostSettingsSync,
-  hostImportNormalizer,
-  hostPayloadLegacy,
-} from "../../src/backend/host-import.js";
-
-describe("hostImportNormalizer", () => {
-  it("reads a 2.8 export's quick actions and startup snippet", () => {
-    expect(
-      hostImportNormalizer({
-        quickActions: [
-          { name: "Restart", snippetId: "3" },
-          { name: "Broken", snippetId: "" },
-        ],
-        terminalConfig: JSON.stringify({ startupSnippetId: 5, fontSize: 12 }),
-      }),
-    ).toEqual({
-      quickActions: [{ name: "Restart", snippetId: 3 }],
-      startupSnippetId: 5,
-    });
-  });
-
-  it("leaves an export that carries this plugin's settings to core", () => {
-    expect(
-      hostImportNormalizer({
-        pluginSettings: { snippets: { startupSnippetId: 1 } },
-        terminalConfig: { startupSnippetId: 5 },
-      }),
-    ).toBeNull();
-  });
-
-  it("writes nothing for a host without either", () => {
-    expect(hostImportNormalizer({ name: "web" })).toBeNull();
-  });
-});
-
-describe("hostPayloadLegacy", () => {
-  it("puts the 2.8 fields back for older clients", () => {
-    expect(
-      hostPayloadLegacy({
-        quickActions: [{ name: "Up", snippetId: 2 }],
-        startupSnippetId: 7,
-      }),
-    ).toEqual({
-      quickActions: [{ name: "Up", snippetId: 2 }],
-      terminalConfig: { startupSnippetId: 7 },
-    });
-    expect(hostPayloadLegacy({})).toEqual({ quickActions: [] });
-  });
-});
-
-describe("hostSettingsSync", () => {
-  const sync = createHostSettingsSync({
-    findSyncIdById: async (id) => (id === 2 ? "sync-2" : null),
-    findIdBySyncId: async (syncId) => (syncId === "sync-2" ? 9 : null),
-  });
-
-  it("sends sync ids and drops what does not map", async () => {
-    expect(await sync.exportValue("startupSnippetId", 2)).toBe("sync-2");
-    expect(await sync.exportValue("startupSnippetId", 4)).toBeNull();
-    expect(
-      await sync.exportValue("quickActions", [
-        { name: "A", snippetId: 2 },
-        { name: "B", snippetId: 4 },
-      ]),
-    ).toEqual([{ name: "A", snippetId: "sync-2" }]);
-  });
-
-  it("maps sync ids back to this side's rows", async () => {
-    expect(await sync.importValue("startupSnippetId", "sync-2")).toBe(9);
-    expect(await sync.importValue("startupSnippetId", "missing")).toBeNull();
-    expect(
-      await sync.importValue("quickActions", [
-        { name: "A", snippetId: "sync-2" },
-      ]),
-    ).toEqual([{ name: "A", snippetId: 9 }]);
-  });
-});
diff --git a/plugins/snippets/tests/backend/migrations.test.ts b/plugins/snippets/tests/backend/migrations.test.ts
deleted file mode 100644
index 2b09e57ae..000000000
--- a/plugins/snippets/tests/backend/migrations.test.ts
+++ /dev/null
@@ -1,186 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { createTestDb, type TestDb } from "@termix/plugin-sdk/testing";
-import { pluginDir } from "./helpers";
-
-// snippets / snippet_folders / snippet_access as core's schema.ts declared
-// them before 2.9.0, plus the indexes performance-indexes.ts added.
-const LEGACY_DDL = `
-  CREATE TABLE snippets (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-    name TEXT NOT NULL,
-    content TEXT NOT NULL,
-    description TEXT,
-    folder TEXT,
-    "order" INTEGER NOT NULL DEFAULT 0,
-    sync_id TEXT UNIQUE,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    host_filter TEXT,
-    is_note INTEGER NOT NULL DEFAULT 0
-  );
-  CREATE INDEX idx_snippets_user_id ON snippets (user_id);
-
-  CREATE TABLE snippet_folders (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-    name TEXT NOT NULL,
-    color TEXT,
-    icon TEXT,
-    sync_id TEXT UNIQUE,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
-  );
-
-  CREATE TABLE snippet_access (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    snippet_id INTEGER NOT NULL REFERENCES snippets(id) ON DELETE CASCADE,
-    user_id TEXT REFERENCES users(id) ON DELETE CASCADE,
-    role_id INTEGER REFERENCES roles(id) ON DELETE CASCADE,
-    granted_by TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-    permission_level TEXT NOT NULL DEFAULT 'view',
-    expires_at TEXT,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
-  );
-  CREATE INDEX idx_snippet_access_user_id ON snippet_access (user_id);
-  CREATE INDEX idx_snippet_access_snippet_id ON snippet_access (snippet_id);
-  CREATE INDEX idx_snippet_access_role_id ON snippet_access (role_id);
-`;
-
-let db: TestDb | null = null;
-
-afterEach(() => {
-  db?.close();
-  db = null;
-});
-
-const tableExists = (name: string) =>
-  !!db!.sqlite
-    .prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?")
-    .get(name);
-
-const indexOn = (table: string) =>
-  (
-    db!.sqlite
-      .prepare(
-        "SELECT name FROM sqlite_master WHERE type = 'index' AND tbl_name = ? AND name NOT LIKE 'sqlite_%'",
-      )
-      .all(table) as { name: string }[]
-  ).map((row) => row.name);
-
-describe("adopting snippets, snippet_folders and snippet_access", () => {
-  it("keeps every existing row when the legacy tables are there", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1'), ('user-2')");
-        sqlite.exec(
-          "INSERT INTO roles (id, name, display_name) VALUES (7, 'ops', 'Operations')",
-        );
-        sqlite.exec(LEGACY_DDL);
-        sqlite
-          .prepare(
-            "INSERT INTO snippets (id, user_id, name, content, folder, sync_id) VALUES (?, ?, ?, ?, ?, ?)",
-          )
-          .run(99, "user-1", "Deploy", "echo deploy", "prod", "sync-snippet-a");
-        sqlite
-          .prepare(
-            "INSERT INTO snippet_folders (user_id, name, sync_id) VALUES (?, ?, ?)",
-          )
-          .run("user-1", "prod", "sync-folder-a");
-        sqlite
-          .prepare(
-            "INSERT INTO snippet_access (snippet_id, user_id, granted_by) VALUES (?, ?, ?)",
-          )
-          .run(99, "user-2", "user-1");
-      },
-    });
-
-    expect(db.applied).toEqual(["0001_adopt_snippets_tables"]);
-    expect(tableExists("snippets")).toBe(false);
-    expect(tableExists("snippet_folders")).toBe(false);
-    expect(tableExists("snippet_access")).toBe(false);
-    expect(tableExists("p_snippets_snippets")).toBe(true);
-    expect(tableExists("p_snippets_snippet_folders")).toBe(true);
-    expect(tableExists("p_snippets_snippet_access")).toBe(true);
-
-    const snippetRows = db.sqlite
-      .prepare(
-        "SELECT user_id, name, content, folder, sync_id FROM p_snippets_snippets",
-      )
-      .all();
-    expect(snippetRows).toEqual([
-      {
-        user_id: "user-1",
-        name: "Deploy",
-        content: "echo deploy",
-        folder: "prod",
-        sync_id: "sync-snippet-a",
-      },
-    ]);
-
-    const folderRows = db.sqlite
-      .prepare("SELECT user_id, name, sync_id FROM p_snippets_snippet_folders")
-      .all();
-    expect(folderRows).toEqual([
-      { user_id: "user-1", name: "prod", sync_id: "sync-folder-a" },
-    ]);
-
-    const accessRows = db.sqlite
-      .prepare(
-        "SELECT snippet_id, user_id, granted_by FROM p_snippets_snippet_access",
-      )
-      .all();
-    expect(accessRows).toEqual([
-      { snippet_id: 99, user_id: "user-2", granted_by: "user-1" },
-    ]);
-
-    expect(indexOn("p_snippets_snippets")).toEqual(["idx_snippets_user_id"]);
-    expect(indexOn("p_snippets_snippet_access").sort()).toEqual(
-      [
-        "idx_snippet_access_user_id",
-        "idx_snippet_access_snippet_id",
-        "idx_snippet_access_role_id",
-      ].sort(),
-    );
-  });
-
-  it("creates the tables fresh when there is no legacy one", async () => {
-    db = await createTestDb(pluginDir);
-
-    expect(tableExists("snippets")).toBe(false);
-    expect(tableExists("p_snippets_snippets")).toBe(true);
-    expect(tableExists("p_snippets_snippet_folders")).toBe(true);
-    expect(tableExists("p_snippets_snippet_access")).toBe(true);
-    expect(indexOn("p_snippets_snippets")).toEqual(["idx_snippets_user_id"]);
-    expect(
-      db.sqlite.prepare("SELECT * FROM p_snippets_snippets").all(),
-    ).toEqual([]);
-  });
-
-  it("cascades deletes when the owning user is removed", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1'), ('user-2')");
-      },
-    });
-    db.sqlite
-      .prepare(
-        "INSERT INTO p_snippets_snippets (user_id, name, content) VALUES (?, ?, ?)",
-      )
-      .run("user-1", "Mine", "echo mine");
-    db.sqlite
-      .prepare(
-        "INSERT INTO p_snippets_snippets (user_id, name, content) VALUES (?, ?, ?)",
-      )
-      .run("user-2", "Theirs", "echo theirs");
-
-    db.sqlite.exec("DELETE FROM users WHERE id = 'user-1'");
-
-    const names = (
-      db.sqlite.prepare("SELECT name FROM p_snippets_snippets").all() as {
-        name: string;
-      }[]
-    ).map((row) => row.name);
-    expect(names).toEqual(["Theirs"]);
-  });
-});
diff --git a/plugins/snippets/tests/backend/repository.test.ts b/plugins/snippets/tests/backend/repository.test.ts
deleted file mode 100644
index 7eae62902..000000000
--- a/plugins/snippets/tests/backend/repository.test.ts
+++ /dev/null
@@ -1,186 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import { createTestDb, type TestDb } from "@termix/plugin-sdk/testing";
-import {
-  snippetAccess,
-  snippetFolders,
-  snippets,
-} from "../../src/backend/tables.js";
-import {
-  createSnippetRepository,
-  type SnippetRepository,
-} from "../../src/backend/repository.js";
-import { pluginDir } from "./helpers";
-
-let db: TestDb;
-let repo: SnippetRepository;
-
-beforeEach(async () => {
-  db = await createTestDb(pluginDir, {
-    before: (sqlite) => {
-      sqlite.exec("INSERT INTO users (id) VALUES ('user-1'), ('user-2')");
-      sqlite.exec(
-        "INSERT INTO roles (id, name, display_name) VALUES (7, 'ops', 'Operations')",
-      );
-    },
-  });
-  repo = createSnippetRepository(
-    db.database,
-    await db.database.define(snippets),
-    await db.database.define(snippetFolders),
-    await db.database.define(snippetAccess),
-  );
-});
-
-afterEach(() => db.close());
-
-describe("snippet repository", () => {
-  it("reads a new row back by its own sync id", async () => {
-    const a = await repo.createSnippet("user-1", {
-      name: "A",
-      content: "echo a",
-    });
-    const b = await repo.createSnippet("user-1", {
-      name: "B",
-      content: "echo b",
-    });
-    expect(a.name).toBe("A");
-    expect(b.name).toBe("B");
-    expect(a.syncId).not.toBe(b.syncId);
-  });
-
-  it("auto-assigns the next order within a folder", async () => {
-    await repo.createSnippet("user-1", {
-      name: "A",
-      content: "a",
-      folder: "prod",
-    });
-    const second = await repo.createSnippet("user-1", {
-      name: "B",
-      content: "b",
-      folder: "prod",
-    });
-    const rootLevel = await repo.createSnippet("user-1", {
-      name: "C",
-      content: "c",
-    });
-    expect(second.order).toBe(1);
-    expect(rootLevel.order).toBe(0);
-  });
-
-  it("renames a folder and re-points its snippets, refusing a name collision", async () => {
-    await repo.createFolder("user-1", "prod", null, null);
-    await repo.createFolder("user-1", "staging", null, null);
-    const snippet = await repo.createSnippet("user-1", {
-      name: "A",
-      content: "a",
-      folder: "prod",
-    });
-
-    const conflict = await repo.renameFolder("user-1", "prod", "staging");
-    expect(conflict.status).toBe("conflict");
-
-    const missing = await repo.renameFolder("user-1", "ghost", "new");
-    expect(missing.status).toBe("missing");
-
-    const renamed = await repo.renameFolder("user-1", "prod", "production");
-    expect(renamed.status).toBe("renamed");
-
-    const updated = await repo.findOwnedById("user-1", snippet.id);
-    expect(updated?.folder).toBe("production");
-  });
-
-  it("moves snippets to the root when their folder is deleted", async () => {
-    await repo.createFolder("user-1", "prod", null, null);
-    const snippet = await repo.createSnippet("user-1", {
-      name: "A",
-      content: "a",
-      folder: "prod",
-    });
-
-    const result = await repo.deleteFolder("user-1", "prod");
-    expect(result).not.toBeNull();
-
-    const updated = await repo.findOwnedById("user-1", snippet.id);
-    expect(updated?.folder).toBeNull();
-  });
-
-  it("bulk imports, skipping existing snippets unless overwrite is set", async () => {
-    await repo.createSnippet("user-1", { name: "A", content: "old" });
-
-    const skipped = await repo.bulkImport(
-      "user-1",
-      [{ name: "A", content: "new" }],
-      [],
-      false,
-    );
-    expect(skipped.snippetsSkipped).toBe(1);
-    expect(skipped.snippetsImported).toBe(0);
-
-    const overwritten = await repo.bulkImport(
-      "user-1",
-      [{ name: "A", content: "new" }],
-      [],
-      true,
-    );
-    expect(overwritten.snippetsUpdated).toBe(1);
-
-    const list = await repo.listOwnedSnippets("user-1");
-    expect(list).toHaveLength(1);
-    expect(list[0].content).toBe("new");
-  });
-
-  it("shares a snippet and lists it for the recipient, then revokes it", async () => {
-    const snippet = await repo.createSnippet("user-1", {
-      name: "A",
-      content: "a",
-    });
-
-    const created = await repo.upsertSnippetAccess({
-      snippetId: snippet.id,
-      targetType: "user",
-      targetUserId: "user-2",
-      grantedBy: "user-1",
-      expiresAt: null,
-    });
-    expect(created.created).toBe(true);
-
-    const again = await repo.upsertSnippetAccess({
-      snippetId: snippet.id,
-      targetType: "user",
-      targetUserId: "user-2",
-      grantedBy: "user-1",
-      expiresAt: "2099-01-01T00:00:00.000Z",
-    });
-    expect(again.created).toBe(false);
-    expect(again.id).toBe(created.id);
-
-    const roleIds = await repo.listUserRoleIds("user-2");
-    const shared = await repo.listSharedSnippets("user-2", roleIds);
-    expect(shared).toEqual([
-      expect.objectContaining({ id: snippet.id, name: "A" }),
-    ]);
-
-    const accessible = await repo.findAccessibleSharedSnippet(
-      snippet.id,
-      "user-2",
-      roleIds,
-    );
-    expect(accessible?.id).toBe(snippet.id);
-
-    await repo.revokeSnippetAccess(created.id, snippet.id);
-    const afterRevoke = await repo.listSharedSnippets("user-2", roleIds);
-    expect(afterRevoke).toEqual([]);
-  });
-
-  it("wipes a user's snippets and folders on deleteByUserId", async () => {
-    await repo.createSnippet("user-1", { name: "A", content: "a" });
-    await repo.createFolder("user-1", "prod", null, null);
-    await repo.createSnippet("user-2", { name: "B", content: "b" });
-
-    await repo.deleteByUserId("user-1");
-
-    expect(await repo.listOwnedSnippets("user-1")).toEqual([]);
-    expect(await repo.listFolders("user-1")).toEqual([]);
-    expect(await repo.listOwnedSnippets("user-2")).toHaveLength(1);
-  });
-});
diff --git a/plugins/snippets/tests/backend/routes.test.ts b/plugins/snippets/tests/backend/routes.test.ts
deleted file mode 100644
index 70122efff..000000000
--- a/plugins/snippets/tests/backend/routes.test.ts
+++ /dev/null
@@ -1,235 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import { startServer, type TestServer } from "./helpers";
-
-let server: TestServer;
-
-beforeEach(async () => {
-  server = await startServer();
-});
-
-afterEach(async () => {
-  await server.close();
-});
-
-async function create(
-  overrides: Record<string, unknown> = {},
-  user = "user-1",
-) {
-  const res = await server.request("POST", "/", {
-    user,
-    body: { name: "Deploy", content: "echo deploy", ...overrides },
-  });
-  expect(res.status).toBe(201);
-  return res.body;
-}
-
-describe("snippet routes", () => {
-  it("creates and lists snippets, tagging owned ones as not shared", async () => {
-    const created = await create();
-    expect(created).toMatchObject({ name: "Deploy", content: "echo deploy" });
-    expect(created.syncId).toEqual(expect.any(String));
-
-    const list = await server.request("GET", "/");
-    expect(list.body).toEqual([
-      expect.objectContaining({ id: created.id, isShared: false }),
-    ]);
-  });
-
-  it("rejects a missing name or content", async () => {
-    expect(
-      (await server.request("POST", "/", { body: { content: "x" } })).status,
-    ).toBe(400);
-    expect(
-      (await server.request("POST", "/", { body: { name: "x" } })).status,
-    ).toBe(400);
-  });
-
-  it("gets, updates and deletes a snippet", async () => {
-    const created = await create();
-
-    const got = await server.request("GET", `/${created.id}`);
-    expect(got.status).toBe(200);
-    expect(got.body.id).toBe(created.id);
-
-    const updated = await server.request("PUT", `/${created.id}`, {
-      body: { content: "echo updated" },
-    });
-    expect(updated.status).toBe(200);
-    expect(updated.body.content).toBe("echo updated");
-
-    const deleted = await server.request("DELETE", `/${created.id}`);
-    expect(deleted.status).toBe(200);
-    expect((await server.request("GET", `/${created.id}`)).status).toBe(404);
-  });
-
-  it("keeps snippets isolated per user", async () => {
-    await create({ name: "Owner snippet" }, "user-1");
-    const list = await server.request("GET", "/", { user: "user-2" });
-    expect(list.body).toEqual([]);
-  });
-
-  it("creates, renames and deletes a folder, moving its snippets to the root", async () => {
-    const folder = await server.request("POST", "/folders", {
-      body: { name: "prod", color: "#fff", icon: "server" },
-    });
-    expect(folder.status).toBe(201);
-
-    const conflict = await server.request("POST", "/folders", {
-      body: { name: "prod" },
-    });
-    expect(conflict.status).toBe(409);
-
-    const rename = await server.request("PUT", "/folders/rename", {
-      body: { oldName: "prod", newName: "production" },
-    });
-    expect(rename.status).toBe(200);
-
-    const snippet = await create({ folder: "production" });
-    expect(snippet.folder).toBe("production");
-
-    const deleteFolder = await server.request("DELETE", "/folders/production");
-    expect(deleteFolder.status).toBe(200);
-
-    const afterDelete = await server.request("GET", `/${snippet.id}`);
-    expect(afterDelete.body.folder).toBeNull();
-  });
-
-  it("reorders snippets, accepting both the snippets and legacy updates keys", async () => {
-    const a = await create({ name: "a" });
-    const b = await create({ name: "b" });
-
-    const reordered = await server.request("PUT", "/reorder", {
-      body: {
-        snippets: [
-          { id: a.id, order: 2 },
-          { id: b.id, order: 1 },
-        ],
-      },
-    });
-    expect(reordered.status).toBe(200);
-
-    const legacy = await server.request("PUT", "/reorder", {
-      body: { updates: [{ id: a.id, order: 5 }] },
-    });
-    expect(legacy.status).toBe(200);
-
-    expect((await server.request("PUT", "/reorder", { body: {} })).status).toBe(
-      400,
-    );
-  });
-
-  it("exports and bulk-imports snippets and folders", async () => {
-    await create({ name: "Exportable" });
-    const exported = await server.request("GET", "/export");
-    expect(exported.status).toBe(200);
-    expect(exported.body.snippets).toHaveLength(1);
-
-    const imported = await server.request("POST", "/bulk-import", {
-      body: {
-        snippets: [{ name: "Imported", content: "echo hi" }],
-        folders: [],
-        overwrite: false,
-      },
-    });
-    expect(imported.status).toBe(200);
-    expect(imported.body.snippetsImported).toBe(1);
-  });
-
-  it("shares a snippet with another user, who can then read it as shared", async () => {
-    const snippet = await create();
-
-    const share = await server.request("POST", `/${snippet.id}/share`, {
-      body: { targetType: "user", targetUserId: "user-2" },
-    });
-    expect(share.status).toBe(200);
-
-    const sharedList = await server.request("GET", "/shared", {
-      user: "user-2",
-    });
-    expect(sharedList.body.sharedSnippets).toEqual([
-      expect.objectContaining({ id: snippet.id, name: snippet.name }),
-    ]);
-
-    const visibleToOwner = await server.request("GET", `/${snippet.id}/access`);
-    expect(visibleToOwner.status).toBe(200);
-    expect(visibleToOwner.body).toHaveLength(1);
-
-    const revoke = await server.request(
-      "DELETE",
-      `/${snippet.id}/access/${visibleToOwner.body[0].id}`,
-    );
-    expect(revoke.status).toBe(200);
-
-    const afterRevoke = await server.request("GET", "/shared", {
-      user: "user-2",
-    });
-    expect(afterRevoke.body.sharedSnippets).toEqual([]);
-  });
-
-  it("refuses sharing a snippet the caller does not own", async () => {
-    const snippet = await create({}, "user-1");
-    const attempt = await server.request("POST", `/${snippet.id}/share`, {
-      user: "user-2",
-      body: { targetType: "user", targetUserId: "user-1" },
-    });
-    expect(attempt.status).toBe(403);
-  });
-
-  it("shares every snippet in a folder at once", async () => {
-    await create({ name: "s1", folder: "team" });
-    await create({ name: "s2", folder: "team" });
-
-    const share = await server.request("PUT", "/folder/share", {
-      body: { folder: "team", targetType: "user", targetUserId: "user-2" },
-    });
-    expect(share.status).toBe(200);
-    expect(share.body.snippetsShared).toBe(2);
-  });
-
-  it("denies every route without its permission", async () => {
-    const denied = await startServer({ permissions: [] });
-    try {
-      expect((await denied.request("GET", "/")).status).toBe(403);
-      expect((await denied.request("POST", "/", { body: {} })).status).toBe(
-        403,
-      );
-      expect((await denied.request("GET", "/folders")).status).toBe(403);
-      expect(
-        (await denied.request("POST", "/folders", { body: { name: "x" } }))
-          .status,
-      ).toBe(403);
-    } finally {
-      await denied.close();
-    }
-  });
-
-  it("lets execute run without any snippets.* permission", async () => {
-    const noPerms = await startServer({ permissions: [] });
-    try {
-      const res = await noPerms.request("POST", "/execute", {
-        body: { snippetId: 999, hostId: 1 },
-      });
-      // 404 (no accessible snippet), not 403: execute needs no grant.
-      expect(res.status).toBe(404);
-    } finally {
-      await noPerms.close();
-    }
-  });
-
-  it("rejects executing a note", async () => {
-    const note = await server.request("POST", "/", {
-      body: { name: "Note", content: "remember this", isNote: true },
-    });
-    const res = await server.request("POST", "/execute", {
-      body: { snippetId: note.body.id, hostId: 1 },
-    });
-    expect(res.status).toBe(400);
-  });
-
-  it("404s executing a snippet the caller cannot see", async () => {
-    const res = await server.request("POST", "/execute", {
-      body: { snippetId: 999, hostId: 1 },
-    });
-    expect(res.status).toBe(404);
-  });
-});
diff --git a/plugins/snippets/tests/backend/share-targets.test.ts b/plugins/snippets/tests/backend/share-targets.test.ts
deleted file mode 100644
index cbab8b775..000000000
--- a/plugins/snippets/tests/backend/share-targets.test.ts
+++ /dev/null
@@ -1,43 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { manifest, startServer, type TestServer } from "./helpers";
-
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-});
-
-describe("share target routes", () => {
-  it("lists users and roles to share with", async () => {
-    server = await startServer({
-      shareableUsers: [{ id: "user-2", username: "bob" }],
-      shareableRoles: [{ id: 3, name: "ops", displayName: "Ops" }],
-    });
-    const users = await server.request("GET", "/share-targets/users");
-    expect(users.status).toBe(200);
-    expect(users.body).toEqual({ users: [{ id: "user-2", username: "bob" }] });
-
-    const roles = await server.request("GET", "/share-targets/roles");
-    expect(roles.status).toBe(200);
-    expect(roles.body).toEqual({
-      roles: [{ id: 3, name: "ops", displayName: "Ops" }],
-    });
-  });
-
-  it("needs the share permission", async () => {
-    server = await startServer({ permissions: ["snippets.view"] });
-    expect((await server.request("GET", "/share-targets/users")).status).toBe(
-      403,
-    );
-  });
-
-  it("fails without the hosts:write capability", async () => {
-    server = await startServer({
-      capabilities: manifest.capabilities.filter((c) => c !== "hosts:write"),
-    });
-    expect((await server.request("GET", "/share-targets/roles")).status).toBe(
-      500,
-    );
-  });
-});
diff --git a/plugins/snippets/tests/backend/variables.test.ts b/plugins/snippets/tests/backend/variables.test.ts
deleted file mode 100644
index bdf0e16ab..000000000
--- a/plugins/snippets/tests/backend/variables.test.ts
+++ /dev/null
@@ -1,79 +0,0 @@
-import { describe, it, expect } from "vitest";
-import {
-  extractSnippetInputs,
-  hasSnippetInputs,
-  resolveSnippetContent,
-} from "../../src/shared/variables.js";
-
-describe("extractSnippetInputs", () => {
-  it("extracts a single unlabeled input", () => {
-    expect(extractSnippetInputs("ping $INPUT_1")).toEqual([
-      { key: "INPUT_1", label: "Input 1" },
-    ]);
-  });
-
-  it("extracts a labeled input using brace syntax", () => {
-    expect(
-      extractSnippetInputs("nc -zv $HOST ${INPUT_1:Port to check}"),
-    ).toEqual([{ key: "INPUT_1", label: "Port to check" }]);
-  });
-
-  it("plain (non-braced) references have no label", () => {
-    expect(extractSnippetInputs("echo $INPUT_2")).toEqual([
-      { key: "INPUT_2", label: "Input 2" },
-    ]);
-  });
-
-  it("de-duplicates repeated references and preserves first-seen order", () => {
-    expect(
-      extractSnippetInputs("$INPUT_2 then $INPUT_1 then $INPUT_2 again"),
-    ).toEqual([
-      { key: "INPUT_2", label: "Input 2" },
-      { key: "INPUT_1", label: "Input 1" },
-    ]);
-  });
-
-  it("returns an empty array when there are no placeholders", () => {
-    expect(extractSnippetInputs("uptime")).toEqual([]);
-  });
-});
-
-describe("hasSnippetInputs", () => {
-  it("returns true when a snippet has an input placeholder", () => {
-    expect(hasSnippetInputs("echo $INPUT_1")).toBe(true);
-  });
-
-  it("returns false when a snippet has no input placeholder", () => {
-    expect(hasSnippetInputs("echo $HOST")).toBe(false);
-  });
-});
-
-describe("resolveSnippetContent", () => {
-  const host = { ip: "10.0.0.5", username: "root", port: 22, name: "web-01" };
-
-  it("substitutes host variables", () => {
-    expect(
-      resolveSnippetContent("ssh $USER@$HOST -p $PORT # $NAME", host),
-    ).toBe("ssh root@10.0.0.5 -p 22 # web-01");
-  });
-
-  it("supports brace syntax for host variables", () => {
-    expect(resolveSnippetContent("ping ${HOST}", host)).toBe("ping 10.0.0.5");
-  });
-
-  it("substitutes input placeholders", () => {
-    expect(
-      resolveSnippetContent("nc -zv $HOST ${INPUT_1:Port}", host, {
-        INPUT_1: "8080",
-      }),
-    ).toBe("nc -zv 10.0.0.5 8080");
-  });
-
-  it("leaves host variables literal when no host context is given", () => {
-    expect(resolveSnippetContent("ping $HOST", null)).toBe("ping $HOST");
-  });
-
-  it("leaves input placeholders literal when no value was supplied", () => {
-    expect(resolveSnippetContent("echo $INPUT_1", null)).toBe("echo $INPUT_1");
-  });
-});
diff --git a/plugins/snippets/tests/frontend/activate.test.tsx b/plugins/snippets/tests/frontend/activate.test.tsx
deleted file mode 100644
index 9dba7ba10..000000000
--- a/plugins/snippets/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,235 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { act, fireEvent, screen } from "@testing-library/react";
-import { runKeybindingAction } from "@termix/plugin-sdk/frontend";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-const declared = (views?: Array<{ id: string }>) =>
-  (views ?? []).map((view) => view.id).sort();
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe(`${manifest.id} activate`, () => {
-  it("activates and registers only views its manifest declares", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    const contributes = manifest.contributes as unknown as Record<
-      string,
-      Array<{ id: string }> | undefined
-    >;
-    const panels = declared(contributes.panels);
-    for (const id of rendered.registered.panels()) expect(panels).toContain(id);
-  });
-
-  it("registers the rail item gated on the view permission", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    const railItem = rendered.registered
-      .railItems()
-      .find((i) => i.id === "snippets");
-    expect(railItem).toBeDefined();
-    expect(railItem?.permission).toBe("snippets.view");
-  });
-
-  it("registers what other surfaces reach it through", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.actions()).toEqual(
-      expect.arrayContaining([
-        "snippets.startupCommand",
-        "snippets.list",
-        "snippets.extractInputs",
-      ]),
-    );
-    expect(rendered.registered.paletteGroups()).toEqual(["snippets"]);
-    expect(rendered.registered.keybindingActions()).toEqual(["runSnippet"]);
-    expect(rendered.registered.hostEditorSections()).toEqual(["snippets"]);
-    expect(rendered.registered.slot("host-metrics.toolbar")).toEqual([
-      "snippets.quickActions",
-    ]);
-    expect(rendered.registered.slot("shell.overlay")).toEqual([
-      "snippets.overlay",
-    ]);
-  });
-
-  it("removes everything it registered on deactivate", async () => {
-    const app = await renderWithApp(plugin, { manifest, locales });
-    await app.deactivate();
-    expect(app.registered.panels()).toEqual([]);
-    expect(app.registered.railItems()).toEqual([]);
-    expect(app.registered.actions()).toEqual([]);
-    expect(app.registered.paletteGroups()).toEqual([]);
-    expect(app.registered.keybindingActions()).toEqual([]);
-  });
-});
-
-const deploy = {
-  id: 3,
-  name: "Deploy",
-  content: "deploy $HOST",
-  description: null,
-  isNote: false,
-};
-
-describe("snippets in the command palette", () => {
-  it("lists snippets that run in the target tab", async () => {
-    const api = { get: vi.fn(async () => ({ data: [deploy] })) };
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: api as never,
-      permissions: ["snippets.view"],
-    });
-    const items = await rendered.loadPaletteGroup("snippets");
-    expect(items).toEqual([
-      expect.objectContaining({
-        id: "3",
-        title: "Deploy",
-        description: "deploy $HOST",
-        needsTarget: true,
-      }),
-    ]);
-  });
-
-  it("offers nothing without the view permission", async () => {
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      permissions: [],
-    });
-    expect(await rendered.loadPaletteGroup("snippets")).toEqual([]);
-  });
-});
-
-describe("the runSnippet keybinding", () => {
-  it("types the resolved snippet into the session it was pressed in", async () => {
-    const api = { get: vi.fn(async () => ({ data: deploy })) };
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: api as never,
-    });
-    const send = vi.fn();
-    const handled = runKeybindingAction(
-      { type: "runSnippet", snippetId: "3", appendEnter: true },
-      { host: { ip: "10.0.0.9" }, send },
-    );
-    expect(handled).toBe(true);
-    await vi.waitFor(() =>
-      expect(send).toHaveBeenCalledWith("deploy 10.0.0.9\r"),
-    );
-    expect(api.get).toHaveBeenCalledWith("/3");
-  });
-});
-
-describe("the startup command", () => {
-  it("resolves the host's startup snippet, or nothing without one", async () => {
-    const api = { get: vi.fn(async () => ({ data: deploy })) };
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: api as never,
-    });
-    const host = {
-      id: "1",
-      name: "web",
-      ip: "10.0.0.2",
-      port: 22,
-      pluginSettings: { snippets: { startupSnippetId: 3 } },
-    };
-    expect(
-      await rendered.app.invokeAction("snippets.startupCommand", host),
-    ).toBe("deploy 10.0.0.2");
-    expect(
-      await rendered.app.invokeAction("snippets.startupCommand", {
-        ...host,
-        pluginSettings: {},
-      }),
-    ).toBeNull();
-  });
-});
-
-describe("the host editor's Snippets tab", () => {
-  it("writes the startup snippet and quick actions into this plugin's settings", async () => {
-    const api = { get: vi.fn(async () => ({ data: [deploy] })) };
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: api as never,
-    });
-    let form: Record<string, unknown> = {
-      pluginSettings: { other: { keep: 1 } },
-    };
-    const updateForm = (
-      patch: (current: Record<string, unknown>) => Record<string, unknown>,
-    ) => {
-      form = patch(form);
-    };
-    rendered.renderHostEditorSection("snippets", { form, updateForm });
-    const startup = await screen.findByRole("combobox", {
-      name: "Startup Snippet",
-    });
-    await screen.findAllByRole("option", { name: "Deploy" });
-    act(() => {
-      fireEvent.change(startup, { target: { value: "3" } });
-    });
-    expect(form.pluginSettings).toEqual({
-      other: { keep: 1 },
-      snippets: { startupSnippetId: 3 },
-    });
-  });
-});
-
-describe("the Host Metrics quick action buttons", () => {
-  it("draws a button per quick action and nothing without any", async () => {
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      permissions: ["snippets.view"],
-    });
-    const host = {
-      id: 4,
-      pluginSettings: {
-        snippets: { quickActions: [{ name: "Restart", snippetId: 3 }] },
-      },
-    };
-    rendered.renderSlot("host-metrics.toolbar", { hostId: 4, host });
-    expect(await screen.findByRole("button", { name: "Restart" })).toBeTruthy();
-  });
-});
-
-describe("snippets panel", () => {
-  it("renders the empty state when the user has no snippets", async () => {
-    const api = {
-      get: vi.fn(async () => ({ data: [] })),
-    };
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: api as never,
-      permissions: ["snippets.view", "snippets.create"],
-    });
-    rendered.renderPanel("snippets", { active: true });
-    await expect(screen.findByPlaceholderText(/search/i)).resolves.toBeTruthy();
-  });
-
-  it("renders nothing without the view permission", async () => {
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      permissions: [],
-    });
-    const panel = rendered.renderPanel("snippets", { active: true });
-    expect(panel.textContent).toBe("");
-  });
-});
diff --git a/plugins/snippets/tests/frontend/admin-user-snippets.test.tsx b/plugins/snippets/tests/frontend/admin-user-snippets.test.tsx
deleted file mode 100644
index 75637d0a8..000000000
--- a/plugins/snippets/tests/frontend/admin-user-snippets.test.tsx
+++ /dev/null
@@ -1,86 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { fireEvent, screen, waitFor } from "@testing-library/react";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-const TARGET = { headers: { "X-Admin-Target-User": "u2" } };
-
-function fakeApi(rows: unknown[]) {
-  const api = {
-    get: vi.fn(async () => ({ data: rows })),
-    post: vi.fn(async () => ({ data: {} })),
-    put: vi.fn(async () => ({ data: {} })),
-    patch: vi.fn(async () => ({ data: {} })),
-    delete: vi.fn(async () => ({ data: {} })),
-  };
-  return api as typeof api & PluginApiClient;
-}
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe("snippet pickers while an admin edits another user's host", () => {
-  it("list the user's own snippets", async () => {
-    const api = fakeApi([{ id: 1, name: "a", content: "ls", isNote: true }]);
-    rendered = await renderWithApp(plugin, { manifest, locales, api });
-    rendered.renderHostEditorSection("snippets", { form: {} });
-    await screen.findAllByRole("option", { name: "a" });
-    expect(api.get).toHaveBeenCalledWith("/");
-  });
-
-  it("list the target user's snippets", async () => {
-    const api = fakeApi([]);
-    rendered = await renderWithApp(plugin, { manifest, locales, api });
-    rendered.renderHostEditorSection("snippets", {
-      form: {},
-      adminTargetUserId: "u2",
-    });
-    await waitFor(() => expect(api.get).toHaveBeenCalledWith("/", TARGET));
-  });
-});
-
-describe("admin user snippets tab", () => {
-  it("fills the admin.userTabs slot", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.slot("admin.userTabs")).toEqual([
-      "snippets.adminUserTab",
-    ]);
-  });
-
-  it("creates a snippet for the target user", async () => {
-    const api = fakeApi([]);
-    rendered = await renderWithApp(plugin, { manifest, locales, api });
-    rendered.renderSlot("admin.userTabs", {
-      user: { id: "u2", username: "bob" },
-    });
-
-    fireEvent.click(await screen.findByText("Add Snippet"));
-    fireEvent.change(screen.getByPlaceholderText("Snippet name"), {
-      target: { value: "restart" },
-    });
-    fireEvent.change(screen.getByPlaceholderText("Command content"), {
-      target: { value: "systemctl restart nginx" },
-    });
-    fireEvent.click(screen.getByText("Save"));
-
-    await waitFor(() =>
-      expect(api.post).toHaveBeenCalledWith(
-        "/",
-        { name: "restart", content: "systemctl restart nginx", folder: null },
-        TARGET,
-      ),
-    );
-  });
-});
diff --git a/plugins/snippets/tests/frontend/settings.test.ts b/plugins/snippets/tests/frontend/settings.test.ts
deleted file mode 100644
index 83117cb5c..000000000
--- a/plugins/snippets/tests/frontend/settings.test.ts
+++ /dev/null
@@ -1,26 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { readSnippetSettings } from "../../src/frontend/settings";
-
-describe("readSnippetSettings", () => {
-  it("falls back to the manifest defaults", () => {
-    expect(readSnippetSettings({})).toEqual({
-      foldersCollapsed: true,
-      showCommands: true,
-      confirmExecution: false,
-    });
-  });
-
-  it("reads saved values", () => {
-    expect(
-      readSnippetSettings({
-        foldersCollapsed: false,
-        showCommands: false,
-        confirmExecution: true,
-      }),
-    ).toEqual({
-      foldersCollapsed: false,
-      showCommands: false,
-      confirmExecution: true,
-    });
-  });
-});
diff --git a/plugins/snippets/tests/frontend/snippets-panel.test.tsx b/plugins/snippets/tests/frontend/snippets-panel.test.tsx
deleted file mode 100644
index fad4c2b02..000000000
--- a/plugins/snippets/tests/frontend/snippets-panel.test.tsx
+++ /dev/null
@@ -1,246 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { fireEvent, screen, waitFor } from "@testing-library/react";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-const PERMISSIONS = [
-  "snippets.view",
-  "snippets.create",
-  "snippets.edit",
-  "snippets.delete",
-  "snippets.share",
-];
-
-const HOSTS = [
-  { id: "5", name: "web-1", ip: "10.0.0.5", port: 22, username: "root" },
-];
-
-function snippet(overrides: Record<string, unknown>) {
-  return {
-    id: 1,
-    userId: "u1",
-    name: "List files",
-    content: "ls -la",
-    description: null,
-    folder: null,
-    order: 0,
-    hostFilter: null,
-    isNote: false,
-    createdAt: "",
-    updatedAt: "",
-    ...overrides,
-  };
-}
-
-function fakeApi(snippets: unknown[], folders: unknown[] = []) {
-  const api = {
-    get: vi.fn(async (path: string) => {
-      if (path === "/folders") return { data: folders };
-      if (path === "/share-targets/users")
-        return { data: { users: [{ id: "u2", username: "bob" }] } };
-      if (path === "/share-targets/roles") return { data: { roles: [] } };
-      if (path.endsWith("/access")) return { data: [] };
-      return { data: snippets };
-    }),
-    post: vi.fn(async (path: string) => ({
-      data: path === "/execute" ? { success: true, output: "up 3 days" } : {},
-    })),
-    put: vi.fn(async () => ({ data: {} })),
-    patch: vi.fn(async () => ({ data: {} })),
-    delete: vi.fn(async () => ({ data: {} })),
-  };
-  return api as typeof api & PluginApiClient;
-}
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-async function renderPanel(api: PluginApiClient) {
-  rendered = await renderWithApp(plugin, {
-    manifest,
-    locales,
-    api,
-    permissions: PERMISSIONS,
-    hosts: HOSTS as never,
-  });
-  rendered.renderPanel("snippets", { active: true });
-}
-
-describe("snippets panel", () => {
-  it("lists root snippets with their command", async () => {
-    await renderPanel(fakeApi([snippet({})]));
-    expect(await screen.findByText("List files")).toBeTruthy();
-    expect(screen.getByText("ls -la")).toBeTruthy();
-  });
-
-  it("shows empty folders and opens them on click", async () => {
-    const api = fakeApi(
-      [snippet({ id: 2, name: "Restart nginx", folder: "Web" })],
-      [
-        { id: 1, name: "Web", color: null, icon: "server" },
-        { id: 2, name: "Empty", color: null, icon: null },
-      ],
-    );
-    await renderPanel(api);
-    fireEvent.click(await screen.findByText("Web"));
-    expect(await screen.findByText("Restart nginx")).toBeTruthy();
-    expect(screen.getByText("Empty")).toBeTruthy();
-  });
-
-  it("filters by content and opens matching folders", async () => {
-    const api = fakeApi([
-      snippet({ id: 1, name: "One", content: "uptime" }),
-      snippet({ id: 2, name: "Two", content: "df -h", folder: "Disk" }),
-    ]);
-    await renderPanel(api);
-    await screen.findByText("One");
-    fireEvent.change(screen.getByPlaceholderText(/search snippets/i), {
-      target: { value: "df" },
-    });
-    expect(await screen.findByText("Two")).toBeTruthy();
-    expect(screen.queryByText("One")).toBeNull();
-  });
-
-  it("creates a snippet in the inline editor", async () => {
-    const api = fakeApi([]);
-    await renderPanel(api);
-    await screen.findByText(locales.emptyTitle);
-    fireEvent.click(screen.getByTitle(locales.newSnippet));
-    fireEvent.change(screen.getByPlaceholderText(locales.namePlaceholder), {
-      target: { value: "Uptime" },
-    });
-    fireEvent.change(screen.getByPlaceholderText(locales.commandPlaceholder), {
-      target: { value: "uptime" },
-    });
-    fireEvent.click(
-      screen.getByRole("button", { name: locales.createSnippetButton }),
-    );
-    await waitFor(() =>
-      expect(api.post).toHaveBeenCalledWith("/", {
-        name: "Uptime",
-        content: "uptime",
-        description: null,
-        folder: null,
-        isNote: false,
-        hostFilter: null,
-      }),
-    );
-    expect(await screen.findByPlaceholderText(/search snippets/i)).toBeTruthy();
-  });
-
-  it("opens the settings page and goes back", async () => {
-    await renderPanel(fakeApi([]));
-    await screen.findByText(locales.emptyTitle);
-    fireEvent.click(screen.getByTitle(locales.settingsTitle));
-    expect(
-      await screen.findByText(locales.settings.foldersCollapsed.label),
-    ).toBeTruthy();
-    fireEvent.click(screen.getByText(locales.backToSnippets));
-    expect(await screen.findByText(locales.emptyTitle)).toBeTruthy();
-  });
-
-  it("shares a snippet with a user", async () => {
-    const api = fakeApi([snippet({})]);
-    await renderPanel(api);
-    await screen.findByText("List files");
-    fireEvent.click(screen.getByTitle(locales.shareSnippet));
-    fireEvent.click(await screen.findByText("bob"));
-    fireEvent.click(screen.getByRole("button", { name: /share with 1/i }));
-    await waitFor(() =>
-      expect(api.post).toHaveBeenCalledWith("/1/share", {
-        targetType: "user",
-        targetUserId: "u2",
-        expiresAt: null,
-      }),
-    );
-    expect(await screen.findByText(locales.notSharedYet)).toBeTruthy();
-    fireEvent.click(screen.getByText(/share "list files"/i));
-    expect(await screen.findByText("List files")).toBeTruthy();
-  });
-
-  it("runs a snippet with target hosts on those hosts", async () => {
-    const api = fakeApi([snippet({ hostFilter: "[5]" })]);
-    await renderPanel(api);
-    expect(await screen.findByText("web-1")).toBeTruthy();
-    fireEvent.click(screen.getByTitle(locales.runOnTargets));
-    await waitFor(() =>
-      expect(api.post).toHaveBeenCalledWith("/execute", {
-        snippetId: 1,
-        hostId: 5,
-        inputValues: undefined,
-      }),
-    );
-    expect(await screen.findByText("up 3 days")).toBeTruthy();
-  });
-
-  it("reorders snippets by dragging", async () => {
-    const api = fakeApi([
-      snippet({ id: 1, name: "First", order: 0 }),
-      snippet({ id: 2, name: "Second", order: 1 }),
-    ]);
-    await renderPanel(api);
-    const row = (name: string) =>
-      screen.getByText(name).closest("[draggable]") as HTMLElement;
-    await screen.findByText("First");
-    // jsdom has no layout, so a drop always lands below the target row.
-    fireEvent.dragStart(row("First"), {
-      dataTransfer: { effectAllowed: "" },
-    });
-    fireEvent.dragOver(row("Second"));
-    fireEvent.drop(row("Second"));
-    await waitFor(() =>
-      expect(api.put).toHaveBeenCalledWith("/reorder", {
-        snippets: [
-          { id: 2, order: 0, folder: "" },
-          { id: 1, order: 1, folder: "" },
-        ],
-      }),
-    );
-  });
-});
-
-describe("snippet target terminals", () => {
-  it("runs a snippet in every picked terminal", async () => {
-    const sent: Array<[string, string]> = [];
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: fakeApi([snippet({})]),
-      permissions: PERMISSIONS,
-      hosts: HOSTS as never,
-    });
-    rendered.app.registerAction("terminal.listSessions", () => [
-      { id: "s1", label: "web-1", hostName: "web-1" },
-      { id: "s2", label: "web-2", hostName: "web-2" },
-    ]);
-    rendered.app.registerAction("terminal.sendToSession", ((
-      id: string,
-      text: string,
-    ) => {
-      sent.push([id, text]);
-      return true;
-    }) as never);
-    rendered.renderPanel("snippets", { active: true });
-
-    fireEvent.click(await screen.findByText(locales.selectAll));
-    fireEvent.click(screen.getAllByTitle(locales.run)[0]);
-    await waitFor(() =>
-      expect(sent).toEqual([
-        ["s1", "ls -la"],
-        ["s2", "ls -la"],
-      ]),
-    );
-  });
-});
diff --git a/plugins/snippets/tests/frontend/types.test.ts b/plugins/snippets/tests/frontend/types.test.ts
deleted file mode 100644
index 9882ddcc2..000000000
--- a/plugins/snippets/tests/frontend/types.test.ts
+++ /dev/null
@@ -1,16 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { parseHostFilter } from "../../src/frontend/types";
-
-describe("parseHostFilter", () => {
-  it("reads a stored list of host ids", () => {
-    expect(parseHostFilter("[1,5]")).toEqual([1, 5]);
-  });
-
-  it("treats empty, malformed or non-numeric values as no targets", () => {
-    expect(parseHostFilter(null)).toEqual([]);
-    expect(parseHostFilter("")).toEqual([]);
-    expect(parseHostFilter("not json")).toEqual([]);
-    expect(parseHostFilter('{"a":1}')).toEqual([]);
-    expect(parseHostFilter('[1,"x",2]')).toEqual([1, 2]);
-  });
-});
diff --git a/plugins/snippets/tsconfig.json b/plugins/snippets/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/snippets/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/snippets/vitest.config.ts b/plugins/snippets/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/snippets/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/ssh-terminal/CHANGELOG.md b/plugins/ssh-terminal/CHANGELOG.md
deleted file mode 100644
index fa20f92b8..000000000
--- a/plugins/ssh-terminal/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Adds SSH terminal sessions with jump hosts, host key checks, command history and a terminal toolbar. Sessions can stay alive after a disconnect, and the desktop app gets a local terminal.
diff --git a/plugins/ssh-terminal/README.md b/plugins/ssh-terminal/README.md
deleted file mode 100644
index 0f169082d..000000000
--- a/plugins/ssh-terminal/README.md
+++ /dev/null
@@ -1,60 +0,0 @@
-# SSH Terminal
-
-SSH terminal sessions with jump hosts, host key checks, command history and a local terminal in the desktop app.
-
-## Features
-
-- SSH terminal sessions with jump hosts and host key checks.
-- Keeps a session alive on the server after a disconnect, so reopening the tab picks up where you left off.
-- Command history with autocomplete.
-- A toolbar docked to the terminal with host tools and live stats.
-- Paste or upload images to the host from the terminal.
-- A local terminal in the desktop app.
-- Attaches to tmux sessions when Tmux Monitor is on.
-
-## Settings
-
-### Admin
-
-- Keep sessions after disconnect and Terminal Session Persistence: keep a disconnected terminal alive, and for how long.
-- Command History and Command history for new hosts: allow history, and whether new hosts start with it on.
-- Touch Input: options for using the terminal on a touch screen.
-- Image Storage: where pasted and uploaded images are kept, and how many and how large.
-
-### Host
-
-- Enable Terminal: offer an SSH terminal for this host.
-- Enable Terminal Toolbar: show the toolbar for this host.
-- Command History: record commands run on this host.
-
-## Permissions
-
-- `ssh-terminal.sessions`: Let other features, like session sharing and recording, reach your live terminal sessions. Admins and users have it by default.
-- `ssh-terminal.history`: Read command history. Admins and users have it by default.
-
-## Services
-
-Provides to other plugins:
-
-- `sessions.live` as `ssh`: find a live terminal session so it can be shared.
-- `terminal.history`: read a user's command history.
-
-Uses from other plugins:
-
-- `tmux.sessions` to attach to tmux. Optional.
-- `sessions.sharing` for shared sessions. Optional.
-- `recordings.writer` to record sessions. Optional.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
-
-## Reconnecting a workspace
-
-Use **Reconnect all disconnected terminals** from a tab's context menu or the command palette after a network interruption. It retries mounted SSH terminal tabs, including hidden tabs and split panes, through their existing manual reconnect flow. Connected terminals and terminals already connecting or waiting for an automatic retry are skipped. Invoking the action again does not interrupt an in-flight connection; failures in one tab do not stop the others. The notification counts reconnect attempts started, not successful connections.
-
-This is a manual workspace action. It does not add automatic SSH-error retries, resume/network listeners, tmux-session restoration or scrollback preservation. Existing authentication prompts, host-key validation and manual-reconnect behavior still apply. Other session plugins participate only if they expose the SDK's optional `reconnectIfDisconnected` handle method.
diff --git a/plugins/ssh-terminal/locales/en.json b/plugins/ssh-terminal/locales/en.json
deleted file mode 100644
index 6d762026f..000000000
--- a/plugins/ssh-terminal/locales/en.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Add",
-    "arrowDown": "Arrow Down",
-    "arrowLeft": "Arrow Left",
-    "arrowRight": "Arrow Right",
-    "arrowUp": "Arrow Up",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Del",
-    "done": "Done",
-    "editQuickKeys": "Edit quick keys",
-    "end": "End",
-    "esc": "Esc",
-    "home": "Home",
-    "pageDown": "PgDn",
-    "pageUp": "PgUp",
-    "paste": "Paste",
-    "quickKeyPlaceholder": "e.g. sudo ",
-    "quickKeysDesc": "Tap × to remove. Supports up to 8 characters.",
-    "quickKeysTitle": "Quick Keys",
-    "removeQuickKey": "Remove",
-    "resetDefaults": "Reset to defaults",
-    "shift": "Shift",
-    "tab": "Tab"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Failed to enable Auto-Tmux",
-    "autoTmuxEnabled": "Auto-Tmux enabled for {{host}}. It applies from the next connection.",
-    "clipboardHttpWarning": "Couldn't read the clipboard. Some browsers restrict clipboard access outside HTTPS - try Ctrl+V instead, or serve Termix over HTTPS.",
-    "closeTab": "Close",
-    "connecting": "Connecting...",
-    "connectionLost": "Connection lost",
-    "connectionRejected": "Connection rejected by server. Please check your authentication and network configuration.",
-    "connectionTimeout": "Connection timeout",
-    "enableAutoTmuxAction": "Enable Auto-Tmux",
-    "hostKeyRejected": "SSH host key verification rejected. Connection cancelled.",
-    "linkDialogCopy": "Copy",
-    "linkDialogOpen": "Open",
-    "linkDialogTitle": "Open Link",
-    "maxReconnectAttemptsReached": "Maximum reconnection attempts reached",
-    "noHostSelected": "No host selected",
-    "passwordPromptFillTitle": "Fill the saved password into this prompt?",
-    "reconnect": "Reconnect",
-    "reconnected": "Reconnected successfully",
-    "reconnecting": "Reconnecting... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Connection lost, reconnecting...",
-    "searchCaseSensitive": "Match Case",
-    "searchClose": "Close (Escape)",
-    "searchNext": "Next Match (Enter)",
-    "searchNoResults": "No results",
-    "searchPlaceholder": "Find",
-    "searchPrevious": "Previous Match (Shift+Enter)",
-    "searchRegex": "Use Regular Expression",
-    "searchResultCount": "{{index}} of {{count}}",
-    "searchWholeWord": "Match Whole Word",
-    "sessionExpiredNotice": "Your previous session on {{host}} expired after {{minutes}} minutes disconnected; the shell and anything running in it are gone. Enable Auto-Tmux on this host to keep sessions alive.",
-    "sessionExpiredNoticeNoMinutes": "Your previous session on {{host}} expired while disconnected; the shell and anything running in it are gone. Enable Auto-Tmux on this host to keep sessions alive.",
-    "sessionTakenOver": "Session was opened in another tab. Reconnecting...",
-    "tmuxAttached": "Attached clients",
-    "tmuxAttachedCount": "{{count}} attached",
-    "tmuxCopyHint": "Adjust selection and press Enter to copy to clipboard",
-    "tmuxCreateNew": "Start new session",
-    "tmuxDetached": "Detached from tmux session",
-    "tmuxLastActivity": "Last activity",
-    "tmuxSessionAttached": "tmux session attached: {{name}}",
-    "tmuxSessionCreated": "tmux session created: {{name}}",
-    "tmuxSessionPickerDesc": "Existing tmux sessions found on this host. Select one to reattach or create a new session.",
-    "tmuxSessionPickerTitle": "tmux Sessions",
-    "tmuxTimeDays": "{{count}}d ago",
-    "tmuxTimeHours": "{{count}}h ago",
-    "tmuxTimeJustNow": "just now",
-    "tmuxTimeMinutes": "{{count}}m ago",
-    "tmuxUnavailable": "tmux is not installed on the remote host, falling back to standard shell",
-    "tmuxWindowCount": "{{count}} window",
-    "tmuxWindows": "Windows",
-    "unknownError": "Unknown error occurred",
-    "websocketAbnormalClose": "Connection closed unexpectedly. This may be due to a reverse proxy or SSL configuration issue. Please check server logs.",
-    "websocketError": "WebSocket connection error",
-    "clipboardReadFailed": "Failed to read from clipboard. Make sure clipboard permissions are granted.",
-    "clipboardWriteFailed": "Failed to copy to clipboard. Make sure the page is served over HTTPS or localhost.",
-    "connected": "Connected",
-    "totpCodeLabel": "Verification Code",
-    "duplicateTab": "Duplicate tab",
-    "imageChooseFile": "Choose an image file",
-    "imageUploaded": "Image uploaded: {{path}}",
-    "imageClipboardUnavailable": "This browser cannot read images from the clipboard",
-    "imageClipboardEmpty": "No image found in the clipboard",
-    "localShell": "Local terminal shell",
-    "autocompleteHintComplete": "Tab or Enter to complete",
-    "autocompleteHintNavigate": "↑↓ to navigate",
-    "autocompleteHintClose": "Esc to close"
-  },
-  "terminalToolbar": {
-    "detachTmux": "Detach tmux",
-    "detachTmuxDescription": "Detach tmux session",
-    "dismissError": "Dismiss image error",
-    "hideToolbar": "Hide toolbar",
-    "image": "Image actions (images only)",
-    "imageActionFailed": "Image action failed",
-    "layout": "Toolbar display mode",
-    "layoutExpanded": "Expanded with metrics",
-    "layoutIcon": "Icon only",
-    "layoutLabeled": "Icons and labels",
-    "moveToolbar": "Move toolbar",
-    "moveToolbarHint": "Drag to reposition the toolbar",
-    "paste": "Paste image",
-    "pasteImage": "Paste image from clipboard (images only)",
-    "retry": "Retry",
-    "showToolbar": "Expand toolbar",
-    "upload": "Upload image",
-    "uploadImage": "Upload an image to the host",
-    "uploadingImage": "Uploading..."
-  },
-  "history": {
-    "noTerminalSelected": "No terminal selected",
-    "noTerminalSelectedHint": "Open an SSH terminal tab to view its command history",
-    "searchPlaceholder": "Search history...",
-    "clearAll": "Clear All",
-    "noHistoryEntries": "No history entries",
-    "trackingDisabled": "History tracking is disabled",
-    "trackingDisabledHint": "Turn on Command History in this host's SSH Terminal tab.",
-    "commandCount_one": "{{count}} command",
-    "commandCount_other": "{{count}} commands"
-  },
-  "touchInput": {
-    "enabled": "Enable Touch Input",
-    "enabledDesc": "Allow one-finger touch scrolling in terminals",
-    "momentumEnabled": "Enable Momentum",
-    "momentumEnabledDesc": "Continue scrolling briefly after a swipe",
-    "advanced": "Advanced",
-    "resetDefaults": "Reset to defaults",
-    "dragThreshold": "Drag threshold",
-    "maxWheelDelta": "Maximum wheel delta",
-    "momentumSampleWindow": "Momentum sample window",
-    "releaseGracePeriod": "Release grace period",
-    "minimumVelocity": "Minimum velocity",
-    "maximumVelocity": "Maximum velocity",
-    "maximumDuration": "Maximum duration",
-    "maximumTravel": "Maximum travel",
-    "decayTime": "Decay time",
-    "pixelsPerTick": "Pixels per tick",
-    "maximumFrameInterval": "Maximum frame interval",
-    "maximumTicksPerFrame": "Maximum ticks per frame"
-  },
-  "imageStorage": {
-    "instanceId": "Terminal session instance ID",
-    "instanceIdDesc": "Instance ID of one of your connected terminal tabs, used to test visibility.",
-    "selectedModeUnavailable": "Unavailable",
-    "test": "Test",
-    "testing": "Testing...",
-    "testFailed": "Failed to test image storage",
-    "testConnected": "Terminal session is connected.",
-    "testNotConnected": "No connected terminal session with this instance ID.",
-    "testSelectedMode": "An upload would use: {{mode}}",
-    "testLocalVisible": "The local directory is visible from the connected host.",
-    "testLocalNotVisible": "The local directory is NOT visible from the connected host."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Touch Input",
-        "images": "Image Storage",
-        "sessions": "Sessions",
-        "newHosts": "New Hosts"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Terminal Session Persistence",
-        "description": "How long a disconnected terminal is kept alive on the server before it is closed. Min 1, max 1440 minutes. For sessions that must outlive this, enable Auto-Tmux on the host."
-      },
-      "commandHistoryEnabled": {
-        "label": "Command History",
-        "description": "Allow command history recording. When disabled, history is not saved regardless of per-host settings."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "Command history for new hosts",
-        "description": "Whether new hosts start with command history on."
-      },
-      "imageStorageMode": {
-        "label": "Storage Mode",
-        "description": "Where pasted and uploaded terminal images are written. Auto picks by connection, Local and Remote (SFTP) are fixed.",
-        "auto": "Auto",
-        "local": "Local",
-        "remoteSftp": "Remote (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Local directory",
-        "description": "Absolute path on the Termix backend where local mode writes images. Never shown after saving. Empty uses TERMIX_IMAGE_DIR."
-      },
-      "imageHostPath": {
-        "label": "Host path",
-        "description": "The host-side view of the local directory that terminal agents receive."
-      },
-      "imageTtlMs": {
-        "label": "TTL (ms)",
-        "description": "How long an uploaded image is kept, in milliseconds. Empty uses TERMIX_IMAGE_TTL_MS or one hour."
-      },
-      "imageMaxCount": {
-        "label": "Max image count",
-        "description": "Most images kept at once. Empty uses TERMIX_MAX_IMAGE_COUNT or 100."
-      },
-      "imageMaxBytes": {
-        "label": "Max storage bytes",
-        "description": "Most bytes of images kept at once. Empty uses TERMIX_MAX_IMAGE_STORAGE_BYTES or 5 GiB."
-      },
-      "sessionPersistence": {
-        "label": "Keep sessions after disconnect",
-        "description": "Keep a disconnected terminal alive on the server for the time above, so reopening its tab picks up where it left off."
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "Run new hosts' terminals inside tmux so sessions survive disconnects (needs tmux on the host)"
-      },
-      "newHostTheme": {
-        "label": "Theme for new hosts",
-        "description": "The terminal theme a new host starts with."
-      },
-      "newHostFontFamily": {
-        "label": "Font for new hosts",
-        "description": "The terminal font a new host starts with."
-      },
-      "newHostFontSize": {
-        "label": "Font size for new hosts",
-        "description": "The terminal font size a new host starts with, in pixels."
-      },
-      "newHostCursorStyle": {
-        "label": "Cursor style for new hosts"
-      },
-      "newHostCursorBlink": {
-        "label": "Blinking cursor for new hosts"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Enable Terminal Toolbar",
-        "description": "Show a quick-access toolbar docked to the active terminal for this host's tools and live stats"
-      },
-      "terminalToolbarPosition": {
-        "label": "Toolbar Position",
-        "description": "Where the toolbar sits in the terminal. You can still drag it from there.",
-        "bottom": "Bottom center",
-        "bottomLeft": "Bottom left",
-        "bottomRight": "Bottom right",
-        "top": "Top center",
-        "topLeft": "Top left",
-        "topRight": "Top right"
-      },
-      "terminalToolbarStartState": {
-        "label": "Toolbar Start State",
-        "description": "Whether the toolbar opens expanded or minimized when the terminal connects",
-        "expanded": "Expanded",
-        "collapsed": "Minimized"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Toolbar Display Mode",
-        "description": "How toolbar buttons are shown. Last used keeps whatever you picked in the toolbar.",
-        "remember": "Last used",
-        "icon": "Icon only",
-        "labeled": "Icons and labels",
-        "expanded": "Expanded with stats"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Show Live Stats",
-        "description": "Show live host stats above the toolbar buttons in expanded mode"
-      },
-      "terminalToolbarFade": {
-        "label": "Fade When Idle",
-        "description": "Fade the toolbar out until you hover over it"
-      },
-      "enableCommandHistory": {
-        "label": "Command History",
-        "description": "Record commands run in this terminal for history and autocomplete"
-      },
-      "enableTerminal": {
-        "label": "Enable Terminal",
-        "description": "Offer an SSH terminal for this host."
-      },
-      "inheritAppearance": {
-        "label": "Use user defaults"
-      },
-      "theme": {
-        "label": "Theme"
-      },
-      "cursorBlink": {
-        "label": "Blinking cursor"
-      },
-      "cursorStyle": {
-        "label": "Cursor style"
-      },
-      "fontSize": {
-        "label": "Font size"
-      },
-      "fontFamily": {
-        "label": "Font"
-      },
-      "scrollback": {
-        "label": "Scrollback"
-      },
-      "letterSpacing": {
-        "label": "Letter spacing"
-      },
-      "lineHeight": {
-        "label": "Line height"
-      },
-      "bellStyle": {
-        "label": "Bell"
-      },
-      "minimumContrastRatio": {
-        "label": "Minimum contrast ratio"
-      },
-      "backgroundImage": {
-        "label": "Background image"
-      },
-      "backgroundImageOpacity": {
-        "label": "Background image opacity"
-      },
-      "customThemeColors": {
-        "label": "Custom theme colors"
-      },
-      "rightClickSelectsWord": {
-        "label": "Right click selects word"
-      },
-      "macOptionIsMeta": {
-        "label": "Option is Meta"
-      },
-      "fastScrollModifier": {
-        "label": "Fast scroll key"
-      },
-      "fastScrollSensitivity": {
-        "label": "Fast scroll speed"
-      },
-      "backspaceMode": {
-        "label": "Backspace"
-      },
-      "autoMosh": {
-        "label": "Auto mosh"
-      },
-      "moshCommand": {
-        "label": "Mosh command"
-      },
-      "autoTmux": {
-        "label": "Auto tmux"
-      },
-      "useSSHTitle": {
-        "label": "Use the SSH title"
-      },
-      "syntaxHighlighting": {
-        "label": "Syntax highlighting"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Syntax highlighting categories"
-      },
-      "linkClickBehavior": {
-        "label": "Link click"
-      },
-      "localEcho": {
-        "label": "Local echo"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Offer to fill password prompts"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Fill sudo prompts"
-      },
-      "autoReconnect": {
-        "label": "Reconnect automatically"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Command Autocomplete",
-        "description": "Show autocomplete while typing if you press tab"
-      },
-      "localEcho": {
-        "label": "Local Echo",
-        "description": "Reduce perceived input latency using safe local keystroke prediction"
-      },
-      "linkClickBehavior": {
-        "label": "Terminal Link Click",
-        "description": "Default behavior when clicking links in the terminal"
-      },
-      "customThemes": {
-        "label": "Saved themes"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Local Terminal"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Use live terminal sessions",
-      "description": "Lets other features, such as session sharing and recording, reach your live terminal sessions."
-    },
-    "history": {
-      "title": "Read command history",
-      "description": "Lets other features, such as the AI assistant, read your command history."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Terminal",
-    "addHost": "Add Host",
-    "applyGlobalThemeTooltip": "Apply this theme",
-    "backgroundImageDesc": "Optional URL for a terminal background image",
-    "backgroundImageLabel": "Background Image URL",
-    "backgroundImageOpacityLabel": "Background Image Opacity",
-    "backspaceMode": "Backspace Mode",
-    "backspaceModeControlH": "Control-H (BS)",
-    "backspaceModeLabel": "Backspace Mode",
-    "backspaceModeNormal": "Normal (DEL)",
-    "behaviorAndAdvanced": "Behavior & Advanced",
-    "bellStyle": "Bell Style",
-    "bellStyleBoth": "Both",
-    "bellStyleLabel": "Bell Style",
-    "bellStyleNone": "None",
-    "bellStyleSound": "Sound",
-    "bellStyleVisual": "Visual",
-    "colorTheme": "Color Theme",
-    "cursorBlink": "Cursor Blink",
-    "cursorBlinking": "Cursor Blinking",
-    "cursorBlinkingDesc": "Enable blinking animation for the terminal cursor",
-    "cursorStyle": "Cursor Style",
-    "cursorStyleBar": "Bar",
-    "cursorStyleBlock": "Block",
-    "cursorStyleLabel": "Cursor Style",
-    "cursorStyleUnderline": "Underline",
-    "customThemeAnsiColors": "ANSI Colors",
-    "customThemeBackground": "Background",
-    "customThemeBlack": "Black",
-    "customThemeBlue": "Blue",
-    "customThemeBrightBlack": "Bright Black",
-    "customThemeBrightBlue": "Bright Blue",
-    "customThemeBrightCyan": "Bright Cyan",
-    "customThemeBrightGreen": "Bright Green",
-    "customThemeBrightMagenta": "Bright Magenta",
-    "customThemeBrightRed": "Bright Red",
-    "customThemeBrightWhite": "Bright White",
-    "customThemeBrightYellow": "Bright Yellow",
-    "customThemeColors": "Custom Colors",
-    "customThemeCursor": "Cursor",
-    "customThemeCursorAccent": "Cursor Accent",
-    "customThemeCyan": "Cyan",
-    "customThemeForeground": "Foreground",
-    "customThemeGreen": "Green",
-    "customThemeMagenta": "Magenta",
-    "customThemeRed": "Red",
-    "customThemeResetTooltip": "Reset to defaults",
-    "customThemeSelection": "Selection",
-    "customThemeWhite": "White",
-    "customThemeYellow": "Yellow",
-    "deleteGlobalThemeTooltip": "Delete this theme",
-    "docsLink": "View docs",
-    "enableAutoMosh": "Enable Auto-Mosh",
-    "enableAutoMoshDesc": "Prefer Mosh over SSH if available",
-    "enableAutoTmux": "Enable Auto-Tmux",
-    "enableAutoTmuxDesc": "Keep your shell and anything running in it alive across disconnects and browser restarts by running inside tmux (tmux must be installed on the host)",
-    "fastScrollModifier": "Fast Scroll Modifier",
-    "fastScrollModifierAlt": "Alt",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Fast Scroll Modifier",
-    "fastScrollModifierShift": "Shift",
-    "fastScrollSensitivity": "Fast Scroll Sensitivity",
-    "fastScrollSensitivityLabel": "Fast Scroll Sensitivity",
-    "fontFamily": "Font Family",
-    "fontFamilyCustomHint": "Pick a bundled font, or choose Custom and type the exact name of a font already installed on your system (e.g. MesloLGS NF, Noto Sans Mono). Termix cannot install fonts for you, install it on your OS first.",
-    "fontFamilyCustomOption": "Custom...",
-    "fontFamilyCustomPlaceholder": "Exact font name, e.g. MesloLGS NF",
-    "fontFamilyLabel": "Font Family",
-    "fontSize": "Font Size",
-    "fontSizeLabel": "Font Size",
-    "hostNotFound": "Host not found",
-    "letterSpacing": "Letter Spacing",
-    "letterSpacingPx": "Letter Spacing (px)",
-    "lineHeight": "Line Height",
-    "lineHeightLabel": "Line Height",
-    "linkClickBehaviorConfirm": "Show popup to open or copy",
-    "linkClickBehaviorDesc": "Controls what happens when you click a link in the terminal. Use 'Default' to follow the app-level setting.",
-    "linkClickBehaviorDirect": "Open directly",
-    "linkClickBehaviorLabel": "Link Click Behavior",
-    "loadingHost": "Loading host...",
-    "localEchoAuto": "Automatic",
-    "localEchoDesc": "Predict safe printable keystrokes locally on slow connections. Password prompts and control input are never echoed.",
-    "localEchoLabel": "Local Echo",
-    "localEchoOff": "Off",
-    "localEchoOn": "Always on",
-    "macOptionIsMetaLabel": "Option Key Sends Meta",
-    "macOptionIsMetaShortDesc": "Disable to type special characters (like @ or |) with the Option/Alt key on macOS instead of sending Meta",
-    "moshCommand": "MOSH Command",
-    "moshCommandLabel": "Mosh Command",
-    "noSavedThemes": "No saved themes yet",
-    "none": "None",
-    "passwordPromptAutoFillDesc": "Offer to fill in the saved password when the terminal asks for one. Turn off to never auto-fill any password on this host.",
-    "passwordPromptAutoFillLabel": "Offer Password Auto-fill",
-    "autoReconnectLabel": "Auto Reconnect",
-    "autoReconnectDesc": "Reconnect on its own when the SSH connection drops, like after a network blip or sleep. Keeps the scrollback.",
-    "rightClickSelectsWord": "Right Click Selects Word",
-    "rightClickSelectsWordLabel": "Right-click Selects Word",
-    "rightClickSelectsWordShortDesc": "Select the word under cursor on right-click",
-    "saveAsGlobalTheme": "Save as Global Theme",
-    "saveGlobalThemeError": "Failed to save theme",
-    "saveGlobalThemeNamePrompt": "Enter a name for this theme",
-    "saveGlobalThemeSuccess": "Theme saved",
-    "savedThemesLabel": "Saved Themes",
-    "scrollbackBufferLabel": "Scrollback Buffer",
-    "scrollbackMaxLines": "Maximum number of lines kept in history",
-    "sudoPasswordAutoFill": "Sudo Password Auto-Fill",
-    "sudoPasswordAutoFillDesc": "Store a sudo password so host metrics, terminal prompts, and others can run privileged commands automatically.",
-    "sudoPasswordAutoFillLabel": "Sudo Password Auto-fill",
-    "syntaxCategoryIpAddresses": "IP Addresses",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Log Levels",
-    "syntaxCategoryLogLevelsDesc": "error, warn, info, debug, fatal",
-    "syntaxCategoryNumbers": "Labeled Numbers",
-    "syntaxCategoryNumbersDesc": "port 8080, exit 1, status 404",
-    "syntaxCategoryPaths": "File Paths",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "Timestamps",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 2024-01-15",
-    "syntaxCategoryUrls": "URLs",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "Colorize terminal output (errors, paths, IPs, timestamps)",
-    "syntaxHighlightingLabel": "Syntax Highlighting",
-    "terminalAppearance": "Terminal Appearance",
-    "theme": "Theme",
-    "themePreview": "Theme Preview",
-    "useSSHTitleDesc": "Update the tab title from the shell's window title instead of the host name",
-    "useSSHTitleLabel": "Use SSH Window Title",
-    "enableTunnel": "Enable Tunnel",
-    "enableFileManager": "Enable File Manager",
-    "enableDocker": "Enable Docker",
-    "startupSnippet": "Startup Snippet",
-    "quickActions": "Quick Actions",
-    "proxmoxLastSyncStatus": {
-      "success": "Success"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} skipped (no IP found)",
-    "proxmoxStatsUrlCopied": "Proxmox Stats URL copied to clipboard",
-    "rdpUrlCopied": "RDP URL copied",
-    "vncUrlCopied": "VNC URL copied",
-    "filterAuthStepca": "Step CA",
-    "guac": {
-      "noCredential": "No credential (direct credentials below)",
-      "authTypeDirect": "Direct",
-      "authTypeCredential": "Credential",
-      "authTypeNone": "None",
-      "recordingPath": "Recording Path",
-      "recordingName": "Recording Name",
-      "saveHostFirst": "Save the host first.",
-      "sharingOptionsAfterSave": "Sharing options are available after the host has been saved.",
-      "permissionLevel": "Permission Level",
-      "typeHeader": "Type",
-      "targetHeader": "Target",
-      "permissionHeader": "Permission",
-      "cancelBtn": "Cancel",
-      "savingBtn": "Saving...",
-      "updateHostBtn": "Update Host",
-      "addHostBtn": "Add Host"
-    },
-    "filterAuthVault": "Vault"
-  },
-  "nav": {
-    "history": "History",
-    "localTerminal": "Local Terminal",
-    "sshTools": "SSH Tools",
-    "terminal": "Terminal",
-    "macros": "Macros"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Type here to broadcast keystrokes...",
-    "copyOnSelect": "Copy selected text automatically",
-    "enableRightClickCopyPaste": "Enable right-click copy/paste",
-    "fillPassword": "Fill password",
-    "fillPasswordMissing": "No saved password for {{count}} selected terminal(s)",
-    "fillPasswordSuccess": "Filled password into {{count}} terminal(s)",
-    "keyRecordingTitle": "Key Recording",
-    "noTerminalTabsOpen": "No terminal tabs open",
-    "recordToTerminals": "Record to terminals",
-    "selectAll": "All",
-    "selectNone": "None",
-    "selectTerminalsAbove": "Select terminals above",
-    "settingsTitle": "Settings",
-    "startRecording": "Start Recording",
-    "stopRecording": "Stop Recording"
-  },
-  "keybindings": {
-    "copy": "Copy selection",
-    "paste": "Paste",
-    "sendControlCode": "Send Ctrl+letter signal",
-    "sendText": "Send text",
-    "controlCodeLabel": "Letter",
-    "textLabel": "Text to send",
-    "appendEnterLabel": "Press Enter after sending",
-    "clipboardPermissionNote": "May prompt for clipboard permission on first use in some browsers.",
-    "textRequired": "Enter the text to send",
-    "controlCodeRequired": "Enter a single letter for the control code",
-    "builtIn": {
-      "copyCtrlC": "Copy selection (Ctrl+C, only when text is selected)",
-      "copyCtrlShiftC": "Copy selection (Ctrl+Shift+C)",
-      "copyCmdC": "Copy selection (Cmd+C)",
-      "pasteCtrlShiftV": "Paste from clipboard (Ctrl+Shift+V)",
-      "ctrlW": "Send Ctrl+W to shell (blocked from closing browser tab)",
-      "ctrlT": "Send Ctrl+T to shell (blocked from opening browser tab)",
-      "ctrlN": "Send Ctrl+N to shell (blocked from opening browser window)",
-      "ctrlQ": "Send Ctrl+Q to shell (blocked from quitting browser)"
-    }
-  },
-  "macros": {
-    "title": "Macros",
-    "description": "Run a saved series of commands in a terminal, and react to what the server sends back.",
-    "target": "Target",
-    "noTerminal": "No terminal open",
-    "empty": "No macros yet",
-    "emptyHint": "Create a macro to automate a terminal flow, like logging in, restarting a service, or answering prompts.",
-    "create": "New macro",
-    "back": "Back to macros",
-    "name": "Name",
-    "namePlaceholder": "Restart web server",
-    "nameRequired": "Give the macro a name before saving",
-    "descriptionLabel": "Description",
-    "descriptionPlaceholder": "What this macro does (optional)",
-    "unsaved": "Unsaved changes",
-    "save": "Save",
-    "saved": "Macro saved",
-    "saveFailed": "Could not save the macro",
-    "delete": "Delete",
-    "deleteTitle": "Delete this macro?",
-    "deleteBody": "\"{{name}}\" will be permanently deleted. This cannot be undone.",
-    "deleted": "Macro deleted",
-    "cancel": "Cancel",
-    "run": "Run",
-    "stop": "Stop",
-    "running": "Running...",
-    "completed": "Macro finished",
-    "failed": "Macro failed",
-    "loadFailed": "Could not load macros",
-    "needTerminal": "Open and connect a terminal first",
-    "noSteps": "This macro has no steps yet. Add one below.",
-    "addStep": "Add step",
-    "stepNumber": "Step {{number}}",
-    "removeStep": "Remove step",
-    "confirmRunTitle": "Run this macro?",
-    "confirmRunBody": "\"{{name}}\" will send commands to {{host}}.",
-    "confirmRunAction": "Run macro",
-    "stepTypes": {
-      "send": {
-        "label": "Send command",
-        "help": "Types text into the terminal, the same as if you typed it."
-      },
-      "wait": {
-        "label": "Wait for output",
-        "help": "Pauses until the server prints the text you name, like a password prompt."
-      },
-      "delay": {
-        "label": "Pause",
-        "help": "Waits a fixed amount of time before the next step."
-      },
-      "if": {
-        "label": "If output contains",
-        "help": "Checks everything the server has printed so far, then runs one of two branches."
-      },
-      "repeat": {
-        "label": "Repeat",
-        "help": "Runs the steps inside it a set number of times."
-      }
-    },
-    "send": {
-      "text": "Command or text",
-      "textPlaceholder": "systemctl restart nginx",
-      "pressEnter": "Press Enter after sending",
-      "pressEnterHelp": "Turn this off to type text without submitting it."
-    },
-    "wait": {
-      "pattern": "Wait until the output contains",
-      "patternPlaceholder": "password:",
-      "timeout": "Give up after",
-      "onTimeout": "If it never appears",
-      "stop": "Stop the macro",
-      "continue": "Keep going anyway"
-    },
-    "delay": {
-      "duration": "Wait for"
-    },
-    "ifStep": {
-      "pattern": "If the output contains",
-      "patternPlaceholder": "Active: active (running)",
-      "then": "Then do this",
-      "else": "Otherwise do this",
-      "emptyBranch": "No steps"
-    },
-    "repeat": {
-      "count": "Number of times",
-      "times": "times"
-    },
-    "match": {
-      "useRegex": "Match with a regular expression",
-      "useRegexHelp": "Leave this off to match the text exactly as written.",
-      "invalidRegex": "Not a valid regular expression, it will be matched as plain text"
-    },
-    "seconds": "seconds",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "Remote server required. Connect a remote server in Settings to use this connection type."
-  },
-  "plugin": {
-    "name": "SSH Terminal"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/af_ZA.json b/plugins/ssh-terminal/locales/translated/af_ZA.json
deleted file mode 100644
index b41097c03..000000000
--- a/plugins/ssh-terminal/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Voeg by",
-    "arrowDown": "Pyltjie Af",
-    "arrowLeft": "Pyltjie links",
-    "arrowRight": "Pyltjie Regs",
-    "arrowUp": "Pyltjie Op",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Del",
-    "done": "Klaar",
-    "editQuickKeys": "Wysig vinnige sleutels",
-    "end": "Einde",
-    "esc": "Esc",
-    "home": "Tuis",
-    "pageDown": "PgDn",
-    "pageUp": "Bladsy Op",
-    "paste": "Plak",
-    "quickKeyPlaceholder": "bv. sudo ",
-    "quickKeysDesc": "Tik × om te verwyder. Ondersteun tot 8 karakters.",
-    "quickKeysTitle": "Vinnige sleutels",
-    "removeQuickKey": "Verwyder",
-    "resetDefaults": "Stel terug na verstekwaardes",
-    "shift": "Skof",
-    "tab": "Oortjie"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Kon nie Auto-Tmux aktiveer nie",
-    "autoTmuxEnabled": "Auto-Tmux geaktiveer vir {{host}}. Dit geld vanaf die volgende verbinding.",
-    "clipboardHttpWarning": "Kon nie die knipbord lees nie. Sommige blaaiers beperk toegang tot die knipbord buite HTTPS - probeer eerder Ctrl+V, of bedien Termix oor HTTPS.",
-    "closeTab": "Maak toe",
-    "connecting": "Verbind...",
-    "connectionLost": "Verbinding verloor",
-    "connectionRejected": "Verbinding deur bediener verwerp. Kontroleer asseblief u verifikasie en netwerkkonfigurasie.",
-    "connectionTimeout": "Verbindingstydverstryking",
-    "enableAutoTmuxAction": "Aktiveer Auto-Tmux",
-    "hostKeyRejected": "SSH-gasheersleutelverifikasie verwerp. Verbinding gekanselleer.",
-    "linkDialogCopy": "Kopieer",
-    "linkDialogOpen": "Oop",
-    "linkDialogTitle": "Maak skakel oop",
-    "maxReconnectAttemptsReached": "Maksimum herverbindingspogings bereik",
-    "noHostSelected": "Geen gasheer gekies nie",
-    "passwordPromptFillTitle": "Vul die gestoorde wagwoord in hierdie aanwysingsprompt in?",
-    "reconnect": "Herkoppel",
-    "reconnected": "Herverbind suksesvol",
-    "reconnecting": "Herverbind... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Verbinding verloor, herverbinding...",
-    "searchCaseSensitive": "Pasmaat",
-    "searchClose": "Maak toe (Escape)",
-    "searchNext": "Volgende Wedstryd (Enter)",
-    "searchNoResults": "Geen resultate nie",
-    "searchPlaceholder": "Vind",
-    "searchPrevious": "Vorige Wedersydse (Shift+Enter)",
-    "searchRegex": "Gebruik Gereelde Uitdrukking",
-    "searchResultCount": "{{index}} van {{count}}",
-    "searchWholeWord": "Pas die hele woord by",
-    "sessionExpiredNotice": "Jou vorige sessie op {{host}} het verval nadat {{minutes}} minute ontkoppel was; die dop en enigiets wat daarin loop, is weg. Aktiveer Auto-Tmux op hierdie gasheer om sessies aan die gang te hou.",
-    "sessionExpiredNoticeNoMinutes": "Jou vorige sessie op {{host}} het verval terwyl dit ontkoppel was; die dop en enigiets wat daarin loop, is weg. Aktiveer Auto-Tmux op hierdie gasheer om sessies aan die gang te hou.",
-    "sessionTakenOver": "Sessie is in 'n ander oortjie oopgemaak. Herverbind tans...",
-    "tmuxAttached": "Aangehegte kliënte",
-    "tmuxAttachedCount": "{{count}} aangeheg",
-    "tmuxCopyHint": "Pas seleksie aan en druk Enter om na knipbord te kopieer",
-    "tmuxCreateNew": "Begin nuwe sessie",
-    "tmuxDetached": "Losgemaak van tmux-sessie",
-    "tmuxLastActivity": "Laaste aktiwiteit",
-    "tmuxSessionAttached": "tmux-sessie aangeheg: {{name}}",
-    "tmuxSessionCreated": "tmux-sessie geskep: {{name}}",
-    "tmuxSessionPickerDesc": "Bestaande tmux-sessies is op hierdie gasheer gevind. Kies een om weer aan te heg of skep 'n nuwe sessie.",
-    "tmuxSessionPickerTitle": "tmux-sessies",
-    "tmuxTimeDays": "{{count}}dae gelede",
-    "tmuxTimeHours": "{{count}}uur gelede",
-    "tmuxTimeJustNow": "nou net",
-    "tmuxTimeMinutes": "{{count}}m gelede",
-    "tmuxUnavailable": "tmux is nie op die afgeleë gasheer geïnstalleer nie, en val terug na die standaard dop.",
-    "tmuxWindowCount": "{{count}} venster",
-    "tmuxWindows": "Vensters",
-    "unknownError": "Onbekende fout het voorgekom",
-    "websocketAbnormalClose": "Verbinding het onverwags gesluit. Dit kan wees as gevolg van 'n omgekeerde proxy- of SSL-konfigurasieprobleem. Gaan asseblief bedienerlogboeke na.",
-    "websocketError": "WebSocket-verbindingsfout",
-    "clipboardReadFailed": "Kon nie vanaf knipbord lees nie. Maak seker dat knipbordtoestemmings toegestaan is.",
-    "clipboardWriteFailed": "Kon nie na knipbord kopieer nie. Maak seker dat die bladsy oor HTTPS of localhost bedien word.",
-    "connected": "Verbonde",
-    "totpCodeLabel": "Verifikasiekode",
-    "duplicateTab": "Duplikaat-oortjie",
-    "imageChooseFile": "Kies 'n beeldlêer",
-    "imageUploaded": "Beeld opgelaai: {{path}}",
-    "imageClipboardUnavailable": "Hierdie blaaier kan nie beelde vanaf die knipbord lees nie",
-    "imageClipboardEmpty": "Geen beeld in die knipbord gevind nie",
-    "localShell": "Plaaslike terminaaldop",
-    "autocompleteHintComplete": "Tab of Enter om te voltooi",
-    "autocompleteHintNavigate": "↑↓ om te navigeer",
-    "autocompleteHintClose": "Esc om te sluit"
-  },
-  "terminalToolbar": {
-    "detachTmux": "Ontkoppel tmux",
-    "detachTmuxDescription": "Ontkoppel tmux-sessie",
-    "dismissError": "Maak beeldfout toe",
-    "hideToolbar": "Versteek nutsbalk",
-    "image": "Beeldaksies (slegs beelde)",
-    "imageActionFailed": "Beeldaksie het misluk",
-    "layout": "Nutsbalk-vertoonmodus",
-    "layoutExpanded": "Uitgebrei met statistieke",
-    "layoutIcon": "Slegs ikoon",
-    "layoutLabeled": "Ikone en etikette",
-    "moveToolbar": "Skuif nutsbalk",
-    "moveToolbarHint": "Sleep om die nutsbalk te herposisioneer",
-    "paste": "Plak beeld",
-    "pasteImage": "Plak beeld vanaf knipbord (slegs beelde)",
-    "retry": "Probeer weer",
-    "showToolbar": "Vou die nutsbalk uit",
-    "upload": "Laai beeld op",
-    "uploadImage": "Laai 'n beeld op na die gasheer",
-    "uploadingImage": "Laai tans op..."
-  },
-  "history": {
-    "noTerminalSelected": "Geen terminaal gekies nie",
-    "noTerminalSelectedHint": "Maak 'n SSH-terminaal-oortjie oop om die opdraggeskiedenis te sien",
-    "searchPlaceholder": "Soekgeskiedenis...",
-    "clearAll": "Vee alles uit",
-    "noHistoryEntries": "Geen geskiedenisinskrywings nie",
-    "trackingDisabled": "Geskiedenisopsporing is gedeaktiveer",
-    "trackingDisabledHint": "Skakel Opdraggeskiedenis aan in hierdie gasheer se SSH-terminale-oortjie.",
-    "commandCount_one": "{{count}} opdrag",
-    "commandCount_other": "{{count}} opdragte"
-  },
-  "touchInput": {
-    "enabled": "Aktiveer Aanraakinvoer",
-    "enabledDesc": "Laat eenvinger-aanraakblaai in terminale toe",
-    "momentumEnabled": "Aktiveer Momentum",
-    "momentumEnabledDesc": "Gaan voort met blaai kortliks na 'n swipe",
-    "advanced": "Gevorderd",
-    "resetDefaults": "Stel terug na verstekwaardes",
-    "dragThreshold": "Sleepdrempel",
-    "maxWheelDelta": "Maksimum wieldelta",
-    "momentumSampleWindow": "Momentum voorbeeldvenster",
-    "releaseGracePeriod": "Vrystellingsgrasietydperk",
-    "minimumVelocity": "Minimum snelheid",
-    "maximumVelocity": "Maksimum snelheid",
-    "maximumDuration": "Maksimum duur",
-    "maximumTravel": "Maksimum reis",
-    "decayTime": "Vervaltyd",
-    "pixelsPerTick": "Piksels per tik",
-    "maximumFrameInterval": "Maksimum raaminterval",
-    "maximumTicksPerFrame": "Maksimum aantal tikkies per raam"
-  },
-  "imageStorage": {
-    "instanceId": "Terminale sessie-instansie-ID",
-    "instanceIdDesc": "Instansie-ID van een van jou gekoppelde terminaal-oortjies, wat gebruik word om sigbaarheid te toets.",
-    "selectedModeUnavailable": "Nie beskikbaar nie",
-    "test": "Toets",
-    "testing": "Toetsing...",
-    "testFailed": "Kon nie beeldberging toets nie",
-    "testConnected": "Terminaalsessie is gekoppel.",
-    "testNotConnected": "Geen gekoppelde terminaalsessie met hierdie instansie-ID nie.",
-    "testSelectedMode": "'n Oplaai sal gebruik: {{mode}}",
-    "testLocalVisible": "Die plaaslike gids is sigbaar vanaf die gekoppelde gasheer.",
-    "testLocalNotVisible": "Die plaaslike gids is NIE sigbaar vanaf die gekoppelde gasheer nie."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Aanraakinvoer",
-        "images": "Beeldberging",
-        "sessions": "Sessies",
-        "newHosts": "Nuwe gashere"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Terminale Sessie Persistensie",
-        "description": "Hoe lank 'n ontkoppelde terminaal op die bediener aan die gang gehou word voordat dit gesluit word. Min 1, maksimum 1440 minute. Vir sessies wat dit moet oorleef, aktiveer Auto-Tmux op die gasheer."
-      },
-      "commandHistoryEnabled": {
-        "label": "Opdraggeskiedenis",
-        "description": "Laat die opname van opdraggeskiedenis toe. Wanneer dit gedeaktiveer is, word geskiedenis nie gestoor nie, ongeag die instellings per gasheer."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "Opdraggeskiedenis vir nuwe gashere",
-        "description": "Of nuwe gashere begin met opdraggeskiedenis aan."
-      },
-      "imageStorageMode": {
-        "label": "Bergingsmodus",
-        "description": "Waar geplakte en opgelaaide terminaalbeelde geskryf word. Outomatiese keuses per verbinding, Plaaslik en Afgeleë (SFTP) is reggestel.",
-        "auto": "Outomaties",
-        "local": "Plaaslik",
-        "remoteSftp": "Afstandsbediening (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Plaaslike gids",
-        "description": "Absolute pad op die Termix-agterkant waar plaaslike modus beelde skryf. Nooit getoon na stoor nie. Leeg gebruik TERMIX_IMAGE_DIR."
-      },
-      "imageHostPath": {
-        "label": "Gasheerpad",
-        "description": "Die gasheer-kant-aansig van die plaaslike gids wat terminaalagente ontvang."
-      },
-      "imageTtlMs": {
-        "label": "TTL (ms)",
-        "description": "Hoe lank 'n opgelaaide beeld gehou word, in millisekondes. Leeg gebruik TERMIX_IMAGE_TTL_MS of een uur."
-      },
-      "imageMaxCount": {
-        "label": "Maksimum beeldtelling",
-        "description": "Meeste beelde word gelyktydig gehou. Leeg gebruik TERMIX_MAX_IMAGE_COUNT of 100."
-      },
-      "imageMaxBytes": {
-        "label": "Maksimum stoorplekgrepe",
-        "description": "Meeste grepe beelde word gelyktydig gehou. Leeg gebruik TERMIX_MAX_IMAGE_STORAGE_BYTES of 5 GiB."
-      },
-      "sessionPersistence": {
-        "label": "Hou sessies na ontkoppeling",
-        "description": "Hou 'n ontkoppelde terminaal vir die bogenoemde tydperk op die bediener aan die gang, sodat die heropening van die oortjie voortgaan waar dit opgehou het."
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "Laat nuwe gashere se terminale binne tmux loop sodat sessies ontkoppelings oorleef (benodig tmux op die gasheer)"
-      },
-      "newHostTheme": {
-        "label": "Tema vir nuwe gashere",
-        "description": "Die terminaaltema waarmee 'n nuwe gasheer begin."
-      },
-      "newHostFontFamily": {
-        "label": "Lettertipe vir nuwe gashere",
-        "description": "Die terminaalfont waarmee 'n nuwe gasheer begin."
-      },
-      "newHostFontSize": {
-        "label": "Lettergrootte vir nuwe gashere",
-        "description": "Die terminaallettergrootte waarmee 'n nuwe gasheer begin, in pixels."
-      },
-      "newHostCursorStyle": {
-        "label": "Wyserstyl vir nuwe gashere"
-      },
-      "newHostCursorBlink": {
-        "label": "Knipperende wyser vir nuwe gashere"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Aktiveer Terminale-nutsbalk",
-        "description": "Wys 'n vinnige toegangsbalk wat aan die aktiewe terminaal gekoppel is vir hierdie gasheer se gereedskap en regstreekse statistieke."
-      },
-      "terminalToolbarPosition": {
-        "label": "Nutsbalkposisie",
-        "description": "Waar die nutsbalk in die terminaal is. Jy kan dit steeds van daar af sleep.",
-        "bottom": "Onderste middelpunt",
-        "bottomLeft": "Links onder",
-        "bottomRight": "Regs onder",
-        "top": "Boonste middelpunt",
-        "topLeft": "Links bo",
-        "topRight": "Regs bo"
-      },
-      "terminalToolbarStartState": {
-        "label": "Beginstatus van die nutsbalk",
-        "description": "Of die nutsbalk uitgebrei of geminimaliseerd oopmaak wanneer die terminaal verbind",
-        "expanded": "Uitgebrei",
-        "collapsed": "Geminimaliseer"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Nutsbalk-vertoonmodus",
-        "description": "Hoe nutsbalkknoppies vertoon word. Laas gebruik behou wat jy ook al in die nutsbalk gekies het.",
-        "remember": "Laas gebruik",
-        "icon": "Slegs ikoon",
-        "labeled": "Ikone en etikette",
-        "expanded": "Uitgebrei met statistieke"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Wys Regstreekse Statistiek",
-        "description": "Wys regstreekse gasheerstatistieke bo die nutsbalkknoppies in uitgebreide modus"
-      },
-      "terminalToolbarFade": {
-        "label": "Vervaag wanneer dit ledig is",
-        "description": "Vervaag die nutsbalk totdat jy daaroor beweeg"
-      },
-      "enableCommandHistory": {
-        "label": "Opdraggeskiedenis",
-        "description": "Rekordopdragte word in hierdie terminaal uitgevoer vir geskiedenis en outovoltooiing"
-      },
-      "enableTerminal": {
-        "label": "Aktiveer Terminaal",
-        "description": "Bied 'n SSH-terminaal vir hierdie gasheer aan."
-      },
-      "inheritAppearance": {
-        "label": "Gebruik gebruikersverstekwaardes"
-      },
-      "theme": {
-        "label": "Tema"
-      },
-      "cursorBlink": {
-        "label": "Knipperende wyser"
-      },
-      "cursorStyle": {
-        "label": "Wyserstyl"
-      },
-      "fontSize": {
-        "label": "Lettergrootte"
-      },
-      "fontFamily": {
-        "label": "Lettertipe"
-      },
-      "scrollback": {
-        "label": "Terugblaai"
-      },
-      "letterSpacing": {
-        "label": "Letterspasiëring"
-      },
-      "lineHeight": {
-        "label": "Lynhoogte"
-      },
-      "bellStyle": {
-        "label": "Klok"
-      },
-      "minimumContrastRatio": {
-        "label": "Minimum kontrasverhouding"
-      },
-      "backgroundImage": {
-        "label": "Agtergrondbeeld"
-      },
-      "backgroundImageOpacity": {
-        "label": "Agtergrondbeeld ondeursigtigheid"
-      },
-      "customThemeColors": {
-        "label": "Pasgemaakte temakleure"
-      },
-      "rightClickSelectsWord": {
-        "label": "Regskliek kies woord"
-      },
-      "macOptionIsMeta": {
-        "label": "Opsie is Meta"
-      },
-      "fastScrollModifier": {
-        "label": "Vinnige blaai-sleutel"
-      },
-      "fastScrollSensitivity": {
-        "label": "Vinnige blaaispoed"
-      },
-      "backspaceMode": {
-        "label": "Terugspasie"
-      },
-      "autoMosh": {
-        "label": "Outomatiese mosh"
-      },
-      "moshCommand": {
-        "label": "Mosh-opdrag"
-      },
-      "autoTmux": {
-        "label": "Outomatiese tmux"
-      },
-      "useSSHTitle": {
-        "label": "Gebruik die SSH-titel"
-      },
-      "syntaxHighlighting": {
-        "label": "Sintaksuitlig"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Sintaksis-uitligkategorieë"
-      },
-      "linkClickBehavior": {
-        "label": "Skakelklik"
-      },
-      "localEcho": {
-        "label": "Plaaslike eggo"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Aanbod om wagwoordaanwysings in te vul"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Vul sudo-aanwysings in"
-      },
-      "autoReconnect": {
-        "label": "Herkoppel outomaties"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Opdrag Outomatiese Voltooiing",
-        "description": "Wys outovoltooiing terwyl jy tik as jy Tab druk"
-      },
-      "localEcho": {
-        "label": "Plaaslike Eggo",
-        "description": "Verminder waargenome invoervertraging deur veilige plaaslike toetsaanslagvoorspelling te gebruik"
-      },
-      "linkClickBehavior": {
-        "label": "Klik op die terminaalskakel",
-        "description": "Standaardgedrag wanneer op skakels in die terminaal geklik word"
-      },
-      "customThemes": {
-        "label": "Gestoorde temas"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Plaaslike Terminaal"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Gebruik lewendige terminaalsessies",
-      "description": "Laat ander funksies, soos sessiedeling en -opname, jou regstreekse terminaalsessies bereik."
-    },
-    "history": {
-      "title": "Lees opdraggeskiedenis",
-      "description": "Laat ander funksies, soos die KI-assistent, jou opdraggeskiedenis lees."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Terminaal",
-    "addHost": "Voeg gasheer by",
-    "applyGlobalThemeTooltip": "Pas hierdie tema toe",
-    "backgroundImageDesc": "Opsionele URL vir 'n terminaal agtergrondbeeld",
-    "backgroundImageLabel": "Agtergrondprent-URL",
-    "backgroundImageOpacityLabel": "Agtergrondbeeld ondeursigtigheid",
-    "backspaceMode": "Terugspasie-modus",
-    "backspaceModeControlH": "Beheer-H (BS)",
-    "backspaceModeLabel": "Terugspasie-modus",
-    "backspaceModeNormal": "Normaal (DEL)",
-    "behaviorAndAdvanced": "Gedrag en Gevorderd",
-    "bellStyle": "Klokstyl",
-    "bellStyleBoth": "Beide",
-    "bellStyleLabel": "Klokstyl",
-    "bellStyleNone": "Geen",
-    "bellStyleSound": "Klank",
-    "bellStyleVisual": "Visueel",
-    "colorTheme": "Kleurtema",
-    "cursorBlink": "Wyserknip",
-    "cursorBlinking": "Wysertjie flikker",
-    "cursorBlinkingDesc": "Aktiveer flikkerende animasie vir die terminaalwyser",
-    "cursorStyle": "Wyserstyl",
-    "cursorStyleBar": "Kroeg",
-    "cursorStyleBlock": "Blok",
-    "cursorStyleLabel": "Wyserstyl",
-    "cursorStyleUnderline": "Onderstreep",
-    "customThemeAnsiColors": "ANSI-kleure",
-    "customThemeBackground": "Agtergrond",
-    "customThemeBlack": "Swart",
-    "customThemeBlue": "Blou",
-    "customThemeBrightBlack": "Helder Swart",
-    "customThemeBrightBlue": "Helderblou",
-    "customThemeBrightCyan": "Helder Siaan",
-    "customThemeBrightGreen": "Heldergroen",
-    "customThemeBrightMagenta": "Helder Magenta",
-    "customThemeBrightRed": "Helderrooi",
-    "customThemeBrightWhite": "Helderwit",
-    "customThemeBrightYellow": "Heldergeel",
-    "customThemeColors": "Pasgemaakte kleure",
-    "customThemeCursor": "Wysertjie",
-    "customThemeCursorAccent": "Wyseraksent",
-    "customThemeCyan": "Siaan",
-    "customThemeForeground": "Voorgrond",
-    "customThemeGreen": "Groen",
-    "customThemeMagenta": "Magenta",
-    "customThemeRed": "Rooi",
-    "customThemeResetTooltip": "Stel terug na verstekwaardes",
-    "customThemeSelection": "Seleksie",
-    "customThemeWhite": "Wit",
-    "customThemeYellow": "Geel",
-    "deleteGlobalThemeTooltip": "Vee hierdie tema uit",
-    "docsLink": "Bekyk dokumente",
-    "enableAutoMosh": "Aktiveer Auto-Mosh",
-    "enableAutoMoshDesc": "Verkies Mosh bo SSH indien beskikbaar",
-    "enableAutoTmux": "Aktiveer Auto-Tmux",
-    "enableAutoTmuxDesc": "Hou jou dop en enigiets wat daarin loop lewendig oor ontkoppelings en herbegin van blaaiers deur dit binne tmux te laat loop (tmux moet op die gasheer geïnstalleer wees)",
-    "fastScrollModifier": "Vinnige Blaai-wysiger",
-    "fastScrollModifierAlt": "Alt",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Vinnige Blaai-wysiger",
-    "fastScrollModifierShift": "Skof",
-    "fastScrollSensitivity": "Vinnige blaai-sensitiwiteit",
-    "fastScrollSensitivityLabel": "Vinnige blaai-sensitiwiteit",
-    "fontFamily": "Lettertipefamilie",
-    "fontFamilyCustomHint": "Kies 'n gebundelde lettertipe, of kies Pasgemaak en tik die presiese naam van 'n lettertipe wat reeds op jou stelsel geïnstalleer is (bv. MesloLGS NF, Noto Sans Mono). Termix kan nie lettertipes vir jou installeer nie, installeer dit eers op jou bedryfstelsel.",
-    "fontFamilyCustomOption": "Pasgemaakte...",
-    "fontFamilyCustomPlaceholder": "Presiese lettertipenaam, bv. MesloLGS NF",
-    "fontFamilyLabel": "Lettertipefamilie",
-    "fontSize": "Lettergrootte",
-    "fontSizeLabel": "Lettergrootte",
-    "hostNotFound": "Gasheer nie gevind nie",
-    "letterSpacing": "Letterspasiëring",
-    "letterSpacingPx": "Letterspasiëring (px)",
-    "lineHeight": "Lynhoogte",
-    "lineHeightLabel": "Lynhoogte",
-    "linkClickBehaviorConfirm": "Wys opspringvenster om oop te maak of te kopieer",
-    "linkClickBehaviorDesc": "Beheer wat gebeur wanneer jy op 'n skakel in die terminaal klik. Gebruik 'Standaard' om die programvlakinstelling te volg.",
-    "linkClickBehaviorDirect": "Maak direk oop",
-    "linkClickBehaviorLabel": "Skakelklikgedrag",
-    "loadingHost": "Laai gasheer...",
-    "localEchoAuto": "Outomaties",
-    "localEchoDesc": "Voorspel veilige drukbare toetsaanslagen plaaslik op stadige verbindings. Wagwoordaanwysings en beheerinvoer word nooit herhaal nie.",
-    "localEchoLabel": "Plaaslike Eggo",
-    "localEchoOff": "Af",
-    "localEchoOn": "Altyd aan",
-    "macOptionIsMetaLabel": "Opsiesleutel stuur Meta",
-    "macOptionIsMetaShortDesc": "Deaktiveer om spesiale karakters (soos @ of |) met die Opsie/Alt-sleutel op macOS te tik in plaas van Meta te stuur",
-    "moshCommand": "MOSH-opdrag",
-    "moshCommandLabel": "Mosh-opdrag",
-    "noSavedThemes": "Geen gestoorde temas nog nie",
-    "none": "Geen",
-    "passwordPromptAutoFillDesc": "Bied aan om die gestoorde wagwoord in te vul wanneer die terminaal daarvoor vra. Skakel af om nooit outomaties enige wagwoord op hierdie gasheer in te vul nie.",
-    "passwordPromptAutoFillLabel": "Aanbodwagwoord outomaties invul",
-    "autoReconnectLabel": "Outomatiese Herverbinding",
-    "autoReconnectDesc": "Koppel weer vanself wanneer die SSH-verbinding val, soos na 'n netwerkonderbreking of slaap. Behou die terugskrol.",
-    "rightClickSelectsWord": "Regskliek Kies Woord",
-    "rightClickSelectsWordLabel": "Regskliek Kies Woord",
-    "rightClickSelectsWordShortDesc": "Kies die woord onder die wyser met die regskliek",
-    "saveAsGlobalTheme": "Stoor as globale tema",
-    "saveGlobalThemeError": "Kon nie tema stoor nie",
-    "saveGlobalThemeNamePrompt": "Voer 'n naam vir hierdie tema in",
-    "saveGlobalThemeSuccess": "Tema gestoor",
-    "savedThemesLabel": "Gestoorde temas",
-    "scrollbackBufferLabel": "Terugrolbuffer",
-    "scrollbackMaxLines": "Maksimum aantal lyne wat in die geskiedenis gehou word",
-    "sudoPasswordAutoFill": "Sudo Wagwoord Outomatiese Vul",
-    "sudoPasswordAutoFillDesc": "Stoor 'n sudo-wagwoord sodat gasheermetrieke, terminaalprompts en ander outomaties bevoorregte opdragte kan uitvoer.",
-    "sudoPasswordAutoFillLabel": "Sudo Wagwoord Outomatiese Vul",
-    "syntaxCategoryIpAddresses": "IP-adresse",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Logvlakke",
-    "syntaxCategoryLogLevelsDesc": "fout, waarsku, inligting, ontfouting, noodlottig",
-    "syntaxCategoryNumbers": "Geëtiketteerde Nommers",
-    "syntaxCategoryNumbersDesc": "poort 8080, uitgang 1, status 404",
-    "syntaxCategoryPaths": "Lêerpaaie",
-    "syntaxCategoryPathsDesc": "/usr/deel/dok, ~/lêer.txt",
-    "syntaxCategoryTimestamps": "Tydstempels",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 2024-01-15",
-    "syntaxCategoryUrls": "URL'e",
-    "syntaxCategoryUrlsDesc": "https://voorbeeld.com",
-    "syntaxHighlightingDesc": "Kleur terminaaluitvoer in (foute, paaie, IP's, tydstempels)",
-    "syntaxHighlightingLabel": "Sintaksisuitlig",
-    "terminalAppearance": "Terminaalvoorkoms",
-    "theme": "Tema",
-    "themePreview": "Temavoorskou",
-    "useSSHTitleDesc": "Dateer die oortjietitel op vanaf die dop se venstertitel in plaas van die gasheernaam",
-    "useSSHTitleLabel": "Gebruik SSH-venstertitel",
-    "enableTunnel": "Aktiveer Tonnel",
-    "enableFileManager": "Aktiveer Lêerbestuurder",
-    "enableDocker": "Aktiveer Docker",
-    "startupSnippet": "Opstart-brokkie",
-    "quickActions": "Vinnige Aksies",
-    "proxmoxLastSyncStatus": {
-      "success": "Sukses"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} oorgeslaan (geen IP gevind nie)",
-    "proxmoxStatsUrlCopied": "Proxmox Statistiek URL na knipbord gekopieer",
-    "rdpUrlCopied": "RDP-URL gekopieer",
-    "vncUrlCopied": "VNC URL gekopieer",
-    "filterAuthStepca": "Stap CA",
-    "guac": {
-      "noCredential": "Geen geloofsbriewe nie (direkte geloofsbriewe hieronder)",
-      "authTypeDirect": "Direkte",
-      "authTypeCredential": "Geloofsbrief",
-      "authTypeNone": "Geen",
-      "recordingPath": "Opnamepad",
-      "recordingName": "Opnamenaam",
-      "saveHostFirst": "Stoor eers die gasheer.",
-      "sharingOptionsAfterSave": "Deelopsies is beskikbaar nadat die gasheer gestoor is.",
-      "permissionLevel": "Toestemmingsvlak",
-      "typeHeader": "Tipe",
-      "targetHeader": "Teiken",
-      "permissionHeader": "Toestemming",
-      "cancelBtn": "Kanselleer",
-      "savingBtn": "Stoor...",
-      "updateHostBtn": "Opdateer gasheer",
-      "addHostBtn": "Voeg gasheer by"
-    },
-    "filterAuthVault": "Kluis"
-  },
-  "nav": {
-    "history": "Geskiedenis",
-    "localTerminal": "Plaaslike Terminaal",
-    "sshTools": "SSH-gereedskap",
-    "terminal": "Terminaal",
-    "macros": "Makro's"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Tik hier om toetsaanslagen uit te saai...",
-    "copyOnSelect": "Kopieer geselekteerde teks outomaties",
-    "enableRightClickCopyPaste": "Aktiveer regskliek kopieer/plak",
-    "fillPassword": "Vul wagwoord in",
-    "fillPasswordMissing": "Geen gestoorde wagwoord vir {{count}} gekose terminaal(e) nie",
-    "fillPasswordSuccess": "Wagwoord ingevul in {{count}} terminaal(e)",
-    "keyRecordingTitle": "Sleutelopname",
-    "noTerminalTabsOpen": "Geen terminaal-oortjies oop nie",
-    "recordToTerminals": "Neem op na terminale",
-    "selectAll": "Alles",
-    "selectNone": "Geen",
-    "selectTerminalsAbove": "Kies terminale hierbo",
-    "settingsTitle": "Instellings",
-    "startRecording": "Begin Opname",
-    "stopRecording": "Stop opname"
-  },
-  "keybindings": {
-    "copy": "Kopieer seleksie",
-    "paste": "Plak",
-    "sendControlCode": "Stuur Ctrl+letter sein",
-    "sendText": "Stuur SMS",
-    "controlCodeLabel": "Brief",
-    "textLabel": "SMS om te stuur",
-    "appendEnterLabel": "Druk Enter na stuur",
-    "clipboardPermissionNote": "Kan in sommige blaaiers met die eerste gebruik vir knipbordtoestemming vra.",
-    "textRequired": "Voer die teks in om te stuur",
-    "controlCodeRequired": "Voer 'n enkele letter vir die beheerkode in",
-    "builtIn": {
-      "copyCtrlC": "Kopieer seleksie (Ctrl+C, slegs wanneer teks gekies is)",
-      "copyCtrlShiftC": "Kopieer seleksie (Ctrl+Shift+C)",
-      "copyCmdC": "Kopieer seleksie (Cmd+C)",
-      "pasteCtrlShiftV": "Plak vanaf knipbord (Ctrl+Shift+V)",
-      "ctrlW": "Stuur Ctrl+W na dop (geblokkeer om blaaier-oortjie te sluit)",
-      "ctrlT": "Stuur Ctrl+T na dop (geblokkeer om blaaier-oortjie oop te maak)",
-      "ctrlN": "Stuur Ctrl+N na shell (geblokkeer om blaaiervenster oop te maak)",
-      "ctrlQ": "Stuur Ctrl+Q na dop (geblokkeer om blaaier te sluit)"
-    }
-  },
-  "macros": {
-    "title": "Makro's",
-    "description": "Voer 'n gestoorde reeks opdragte in 'n terminaal uit en reageer op wat die bediener terugstuur.",
-    "target": "Teiken",
-    "noTerminal": "Geen terminaal oop nie",
-    "empty": "Geen makro's nog nie",
-    "emptyHint": "Skep 'n makro om 'n terminaalvloei te outomatiseer, soos om aan te meld, 'n diens te herbegin of aanwysings te beantwoord.",
-    "create": "Nuwe makro",
-    "back": "Terug na makro's",
-    "name": "Naam",
-    "namePlaceholder": "Herbegin die webbediener",
-    "nameRequired": "Gee die makro 'n naam voordat jy dit stoor",
-    "descriptionLabel": "Beskrywing",
-    "descriptionPlaceholder": "Wat hierdie makro doen (opsioneel)",
-    "unsaved": "Ongestoorde veranderinge",
-    "save": "Stoor",
-    "saved": "Makro gestoor",
-    "saveFailed": "Kon nie die makro stoor nie",
-    "delete": "Vee uit",
-    "deleteTitle": "Vee hierdie makro uit?",
-    "deleteBody": "\"{{name}}\" sal permanent verwyder word. Dit kan nie ongedaan gemaak word nie.",
-    "deleted": "Makro uitgevee",
-    "cancel": "Kanselleer",
-    "run": "Hardloop",
-    "stop": "Stop",
-    "running": "Hardloop...",
-    "completed": "Makro klaar",
-    "failed": "Makro het misluk",
-    "loadFailed": "Kon nie makro's laai nie",
-    "needTerminal": "Maak eers 'n terminaal oop en koppel dit",
-    "noSteps": "Hierdie makro het nog geen stappe nie. Voeg een hieronder by.",
-    "addStep": "Voeg stap by",
-    "stepNumber": "Stap {{number}}",
-    "removeStep": "Verwyder stap",
-    "confirmRunTitle": "Voer hierdie makro uit?",
-    "confirmRunBody": "\"{{name}}\" sal bevele stuur na {{host}}.",
-    "confirmRunAction": "Begin makro",
-    "stepTypes": {
-      "send": {
-        "label": "Stuur opdrag",
-        "help": "Tik teks in die terminaal, dieselfde asof jy dit getik het."
-      },
-      "wait": {
-        "label": "Wag vir uitvoer",
-        "help": "Pouseer totdat die bediener die teks wat jy noem, druk, soos 'n wagwoordaanwysing."
-      },
-      "delay": {
-        "label": "Pouseer",
-        "help": "Wag 'n vaste hoeveelheid tyd voor die volgende stap."
-      },
-      "if": {
-        "label": "Indien die uitvoer bevat",
-        "help": "Kontroleer alles wat die bediener tot dusver gedruk het, en voer dan een van twee takke uit."
-      },
-      "repeat": {
-        "label": "Herhaal",
-        "help": "Voer die stappe daarin 'n vasgestelde aantal kere uit."
-      }
-    },
-    "send": {
-      "text": "Opdrag of teks",
-      "textPlaceholder": "systemctl herbegin nginx",
-      "pressEnter": "Druk Enter na stuur",
-      "pressEnterHelp": "Skakel dit af om teks te tik sonder om dit in te dien."
-    },
-    "wait": {
-      "pattern": "Wag totdat die uitvoer bevat",
-      "patternPlaceholder": "wagwoord:",
-      "timeout": "Gee op daarna",
-      "onTimeout": "As dit nooit verskyn nie",
-      "stop": "Stop die makro",
-      "continue": "Gaan in elk geval voort"
-    },
-    "delay": {
-      "duration": "Wag vir"
-    },
-    "ifStep": {
-      "pattern": "Indien die uitvoer bevat",
-      "patternPlaceholder": "Aktief: aktief (hardloop)",
-      "then": "Doen dan hierdie",
-      "else": "Andersins doen dit",
-      "emptyBranch": "Geen stappe nie"
-    },
-    "repeat": {
-      "count": "Aantal kere",
-      "times": "tye"
-    },
-    "match": {
-      "useRegex": "Stem ooreen met 'n gereelde uitdrukking",
-      "useRegexHelp": "Los dit af om die teks presies soos geskryf te laat ooreenstem.",
-      "invalidRegex": "Nie 'n geldige gereelde uitdrukking nie, dit sal as gewone teks ooreenstem"
-    },
-    "seconds": "sekondes",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "Afstandbediener word benodig. Koppel 'n afstandbediener in Instellings om hierdie verbindingstipe te gebruik."
-  },
-  "plugin": {
-    "name": "SSH-terminaal"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/ar_SA.json b/plugins/ssh-terminal/locales/translated/ar_SA.json
deleted file mode 100644
index 62790b8a0..000000000
--- a/plugins/ssh-terminal/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "إضافة",
-    "arrowDown": "Arrow Down",
-    "arrowLeft": "Arrow Left",
-    "arrowRight": "Arrow Right",
-    "arrowUp": "Arrow Up",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Del",
-    "done": "تم",
-    "editQuickKeys": "تحرير المفاتيح السريعة",
-    "end": "End",
-    "esc": "Esc",
-    "home": "Home",
-    "pageDown": "PgDn",
-    "pageUp": "PgUp",
-    "paste": "لصق",
-    "quickKeyPlaceholder": "مثال: sudo ",
-    "quickKeysDesc": "اضغط × للإزالة. يدعم حتى 8 أحرف.",
-    "quickKeysTitle": "المفاتيح السريعة",
-    "removeQuickKey": "إزالة",
-    "resetDefaults": "استعادة الإعدادات الافتراضية",
-    "shift": "Shift",
-    "tab": "Tab"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "فشل تفعيل خاصية Auto-Tmux",
-    "autoTmuxEnabled": "تم تفعيل خاصية Auto-Tmux لـ {{host}}. وسيتم تطبيقها بدءًا من الاتصال التالي.",
-    "clipboardHttpWarning": "تعذر قراءة الحافظة. بعض المتصفحات تقيّد الوصول إلى الحافظة خارج بروتوكول HTTPS - جرّب Ctrl+V بدلاً من ذلك، أو شغّل Termix عبر HTTPS.",
-    "closeTab": "إغلاق",
-    "connecting": "جارٍ الاتصال...",
-    "connectionLost": "انقطع الاتصال",
-    "connectionRejected": "تم رفض الاتصال من قبل الخادم. يرجى التحقق من المصادقة وإعدادات الشبكة.",
-    "connectionTimeout": "انتهت مهلة الاتصال",
-    "enableAutoTmuxAction": "تمكين tmux التلقائي",
-    "hostKeyRejected": "تم رفض التحقق من مفتاح مضيف SSH. تم إلغاء الاتصال.",
-    "linkDialogCopy": "نسخ",
-    "linkDialogOpen": "فتح",
-    "linkDialogTitle": "فتح الرابط",
-    "maxReconnectAttemptsReached": "تم الوصول إلى الحد الأقصى لمحاولات إعادة الاتصال",
-    "noHostSelected": "لم يتم تحديد مضيف",
-    "passwordPromptFillTitle": "هل تريد ملء كلمة المرور المحفوظة في هذه النافذة؟",
-    "reconnect": "إعادة الاتصال",
-    "reconnected": "تمت إعادة الاتصال بنجاح",
-    "reconnecting": "جارٍ إعادة الاتصال... ({{attempt}}/{{max}})",
-    "autoReconnecting": "انقطع الاتصال، جارٍ إعادة الاتصال...",
-    "searchCaseSensitive": "علبة كبريت",
-    "searchClose": "إغلاق (الهروب)",
-    "searchNext": "المباراة التالية (إدخال)",
-    "searchNoResults": "لا توجد نتائج",
-    "searchPlaceholder": "يجد",
-    "searchPrevious": "المباراة السابقة (Shift+Enter)",
-    "searchRegex": "استخدم التعبير النمطي",
-    "searchResultCount": "{{index}} من {{count}}",
-    "searchWholeWord": "مطابقة الكلمة الكاملة",
-    "sessionExpiredNotice": "انتهت صلاحية جلستك السابقة على {{host}} بعد {{minutes}} دقيقة من قطع الاتصال؛ تم إغلاق نافذة الأوامر وأي شيء يعمل بداخلها. فعّل خاصية Auto-Tmux على هذا المضيف للحفاظ على استمرارية الجلسات.",
-    "sessionExpiredNoticeNoMinutes": "انتهت صلاحية جلستك السابقة على {{host}} أثناء انقطاع الاتصال؛ تم حذف واجهة سطر الأوامر وأي شيء كان يعمل بداخلها. فعّل خاصية Auto-Tmux على هذا المضيف للحفاظ على استمرارية الجلسات.",
-    "sessionTakenOver": "تم فتح الجلسة في علامة تبويب أخرى. جارٍ إعادة الاتصال...",
-    "tmuxAttached": "العملاء المتصلون",
-    "tmuxAttachedCount": "{{count}} متصل",
-    "tmuxCopyHint": "اضبط التحديد واضغط Enter للنسخ إلى الحافظة",
-    "tmuxCreateNew": "بدء جلسة جديدة",
-    "tmuxDetached": "تم الفصل من جلسة tmux",
-    "tmuxLastActivity": "آخر نشاط",
-    "tmuxSessionAttached": "تم الالتحاق بجلسة tmux: {{name}}",
-    "tmuxSessionCreated": "تم إنشاء جلسة tmux: {{name}}",
-    "tmuxSessionPickerDesc": "تم العثور على جلسات tmux موجودة على هذا المضيف. اختر واحدة لإعادة الاتصال أو أنشئ جلسة جديدة.",
-    "tmuxSessionPickerTitle": "جلسات tmux",
-    "tmuxTimeDays": "منذ {{count}}ي",
-    "tmuxTimeHours": "منذ {{count}}س",
-    "tmuxTimeJustNow": "الآن فقط",
-    "tmuxTimeMinutes": "منذ {{count}}د",
-    "tmuxUnavailable": "tmux غير مثبّت على المضيف البعيد، جارٍ الرجوع إلى الصدفة القياسية",
-    "tmuxWindowCount": "{{count}} نافذة",
-    "tmuxWindows": "النوافذ",
-    "unknownError": "حدث خطأ غير معروف",
-    "websocketAbnormalClose": "أُغلق الاتصال بشكل غير متوقع. قد يكون السبب مشكلة في الوكيل العكسي أو إعدادات SSL. يرجى مراجعة سجلات الخادم.",
-    "websocketError": "خطأ في اتصال WebSocket",
-    "clipboardReadFailed": "فشلت القراءة من الحافظة. تأكد من منح أذونات الحافظة.",
-    "clipboardWriteFailed": "فشل النسخ إلى الحافظة. تأكد من تقديم الصفحة عبر HTTPS أو localhost.",
-    "connected": "متصل",
-    "totpCodeLabel": "رمز التحقق",
-    "duplicateTab": "علامة تبويب مكررة",
-    "imageChooseFile": "اختر ملف صورة",
-    "imageUploaded": "تم تحميل الصورة: {{path}}",
-    "imageClipboardUnavailable": "لا يستطيع هذا المتصفح قراءة الصور من الحافظة",
-    "imageClipboardEmpty": "لم يتم العثور على أي صورة في الحافظة",
-    "localShell": "واجهة سطر الأوامر المحلية",
-    "autocompleteHintComplete": "اضغط على زر Tab أو Enter لإكمال العملية",
-    "autocompleteHintNavigate": "↑↓ للتنقل",
-    "autocompleteHintClose": "اضغط على زر Esc للإغلاق"
-  },
-  "terminalToolbar": {
-    "detachTmux": "افصل tmux",
-    "detachTmuxDescription": "فصل جلسة tmux",
-    "dismissError": "تجاهل خطأ الصورة",
-    "hideToolbar": "إخفاء شريط الأدوات",
-    "image": "إجراءات الصور (للصور فقط)",
-    "imageActionFailed": "فشلت عملية معالجة الصورة",
-    "layout": "وضع عرض شريط الأدوات",
-    "layoutExpanded": "تم توسيعه بمقاييس",
-    "layoutIcon": "أيقونة فقط",
-    "layoutLabeled": "الرموز والملصقات",
-    "moveToolbar": "نقل شريط الأدوات",
-    "moveToolbarHint": "اسحب لإعادة وضع شريط الأدوات",
-    "paste": "لصق الصورة",
-    "pasteImage": "لصق الصورة من الحافظة (الصور فقط)",
-    "retry": "إعادة المحاولة",
-    "showToolbar": "توسيع شريط الأدوات",
-    "upload": "تحميل صورة",
-    "uploadImage": "قم بتحميل صورة إلى المضيف",
-    "uploadingImage": "جارٍ الرفع..."
-  },
-  "history": {
-    "noTerminalSelected": "لا توجد طرفية محددة",
-    "noTerminalSelectedHint": "افتح علامة تبويب طرفية SSH لعرض سجل الأوامر الخاص بها",
-    "searchPlaceholder": "ابحث في السجل...",
-    "clearAll": "مسح الكل",
-    "noHistoryEntries": "لا توجد مدخلات سجل",
-    "trackingDisabled": "تتبع السجل معطل",
-    "trackingDisabledHint": "قم بتشغيل سجل الأوامر في علامة تبويب SSH Terminal الخاصة بهذا المضيف.",
-    "commandCount_one": "الأمر {{count}}",
-    "commandCount_other": "{{count}} أوامر"
-  },
-  "touchInput": {
-    "enabled": "تفعيل إدخال اللمس",
-    "enabledDesc": "السماح بالتمرير بلمسة إصبع واحدة في المحطات الطرفية",
-    "momentumEnabled": "تفعيل الزخم",
-    "momentumEnabledDesc": "استمر في التمرير لفترة وجيزة بعد التمرير السريع",
-    "advanced": "متقدم",
-    "resetDefaults": "استعادة الإعدادات الافتراضية",
-    "dragThreshold": "عتبة السحب",
-    "maxWheelDelta": "أقصى دلتا للعجلة",
-    "momentumSampleWindow": "نافذة عينة الزخم",
-    "releaseGracePeriod": "فترة السماح للإفراج",
-    "minimumVelocity": "الحد الأدنى للسرعة",
-    "maximumVelocity": "أقصى سرعة",
-    "maximumDuration": "أقصى مدة",
-    "maximumTravel": "أقصى قدر من السفر",
-    "decayTime": "وقت التحلل",
-    "pixelsPerTick": "بكسل لكل نبضة",
-    "maximumFrameInterval": "أقصى فاصل زمني بين الإطارات",
-    "maximumTicksPerFrame": "الحد الأقصى للنبضات لكل إطار"
-  },
-  "imageStorage": {
-    "instanceId": "معرّف مثيل جلسة الطرفية",
-    "instanceIdDesc": "معرف مثيل إحدى علامات تبويب الطرفية المتصلة، المستخدمة لاختبار الرؤية.",
-    "selectedModeUnavailable": "غير متاح",
-    "test": "اختبار",
-    "testing": "جارٍ الاختبار...",
-    "testFailed": "فشل اختبار تخزين الصور",
-    "testConnected": "تم الاتصال بجلسة الطرفية.",
-    "testNotConnected": "لا توجد جلسة طرفية متصلة بهذا المعرف.",
-    "testSelectedMode": "سيتم استخدام الأمر التالي للتحميل: {{mode}}",
-    "testLocalVisible": "الدليل المحلي مرئي من الجهاز المضيف المتصل.",
-    "testLocalNotVisible": "الدليل المحلي غير مرئي من الجهاز المضيف المتصل."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "إدخال اللمس",
-        "images": "تخزين الصور",
-        "sessions": "الجلسات",
-        "newHosts": "مضيفون جدد"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "استمرار جلسة الطرفية",
-        "description": "مدة بقاء طرفية غير متصلة على الخادم قبل إغلاقها. الحد الأدنى دقيقة واحدة، والحد الأقصى 1440 دقيقة. بالنسبة للجلسات التي يجب أن تستمر لفترة أطول من ذلك، فعّل خاصية Auto-Tmux على المضيف."
-      },
-      "commandHistoryEnabled": {
-        "label": "سجل الأوامر",
-        "description": "السماح بتسجيل سجل الأوامر. عند التعطيل، لا يتم حفظ السجل بغض النظر عن إعدادات كل جهاز."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "سجل الأوامر للمضيفين الجدد",
-        "description": "هل تبدأ الأجهزة المضيفة الجديدة بخاصية تفعيل سجل الأوامر؟"
-      },
-      "imageStorageMode": {
-        "label": "وضع التخزين",
-        "description": "يتم حفظ الصور الطرفية الملصقة والمرفوعة في هذا المكان. يتم تثبيت عمليات الاختيار التلقائي حسب الاتصال، سواء كان محليًا أو عن بُعد (SFTP).",
-        "auto": "تلقائي",
-        "local": "محلي",
-        "remoteSftp": "عن بعد (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "الدليل المحلي",
-        "description": "المسار المطلق في نظام Termix الخلفي حيث يتم كتابة الصور في الوضع المحلي. لا يظهر هذا المسار بعد الحفظ. يستخدم المسار الفارغ TERMIX_IMAGE_DIR."
-      },
-      "imageHostPath": {
-        "label": "مسار المضيف",
-        "description": "عرض الدليل المحلي من جانب المضيف الذي تتلقاه وكلاء المحطة الطرفية."
-      },
-      "imageTtlMs": {
-        "label": "مدة البقاء (بالمللي ثانية)",
-        "description": "مدة الاحتفاظ بالصورة المرفوعة، بالمللي ثانية. يستخدم الخيار الفارغ قيمة TERMIX_IMAGE_TTL_MS أو ساعة واحدة."
-      },
-      "imageMaxCount": {
-        "label": "الحد الأقصى لعدد الصور",
-        "description": "يتم الاحتفاظ بمعظم الصور دفعة واحدة. يستخدم الوضع الفارغ TERMIX_MAX_IMAGE_COUNT أو 100."
-      },
-      "imageMaxBytes": {
-        "label": "الحد الأقصى لحجم التخزين بالبايت",
-        "description": "يتم الاحتفاظ بمعظم بايتات الصور دفعة واحدة. يستخدم الملف الفارغ TERMIX_MAX_IMAGE_STORAGE_BYTES أو 5 جيجابايت."
-      },
-      "sessionPersistence": {
-        "label": "حافظ على جلساتك منفصلة",
-        "description": "أبقِ نافذة طرفية غير متصلة بالخادم مفتوحة للمدة المذكورة أعلاه، بحيث يؤدي إعادة فتح علامة التبويب الخاصة بها إلى استئناف العمل من حيث توقفت."
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "قم بتشغيل طرفيات المضيفين الجدد داخل tmux حتى تستمر الجلسات في حالة انقطاع الاتصال (يتطلب tmux على المضيف)."
-      },
-      "newHostTheme": {
-        "label": "قالب للمضيفين الجدد",
-        "description": "السمة الطرفية التي يبدأ بها المضيف الجديد."
-      },
-      "newHostFontFamily": {
-        "label": "خط المضيفين الجدد",
-        "description": "خط الطرفية الذي يبدأ به المضيف الجديد."
-      },
-      "newHostFontSize": {
-        "label": "حجم الخط للمضيفين الجدد",
-        "description": "حجم خط الطرفية الذي يبدأ به المضيف الجديد، بالبكسل."
-      },
-      "newHostCursorStyle": {
-        "label": "نمط المؤشر للمضيفين الجدد"
-      },
-      "newHostCursorBlink": {
-        "label": "مؤشر وامض للمضيفين الجدد"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "تفعيل شريط أدوات الطرفية",
-        "description": "اعرض شريط أدوات سريع الوصول مثبتًا على الطرفية النشطة لأدوات هذا المضيف وإحصائياته المباشرة."
-      },
-      "terminalToolbarPosition": {
-        "label": "موضع شريط الأدوات",
-        "description": "مكان وجود شريط الأدوات في الطرفية. لا يزال بإمكانك سحبه من هناك.",
-        "bottom": "أسفل المنتصف",
-        "bottomLeft": "أسفل اليسار",
-        "bottomRight": "أسفل اليمين",
-        "top": "أعلى المنتصف",
-        "topLeft": "أعلى اليسار",
-        "topRight": "أعلى اليمين"
-      },
-      "terminalToolbarStartState": {
-        "label": "حالة بدء شريط الأدوات",
-        "description": "سواء تم فتح شريط الأدوات موسعًا أو مصغرًا عند اتصال الجهاز الطرفي",
-        "expanded": "موسع",
-        "collapsed": "مُصغّر"
-      },
-      "terminalToolbarDisplay": {
-        "label": "وضع عرض شريط الأدوات",
-        "description": "كيفية عرض أزرار شريط الأدوات. آخر استخدام يحفظ ما تم تحديده في شريط الأدوات.",
-        "remember": "آخر استخدام",
-        "icon": "أيقونة فقط",
-        "labeled": "الرموز والملصقات",
-        "expanded": "مُوسّع بالإحصائيات"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "عرض الإحصائيات المباشرة",
-        "description": "عرض إحصائيات المضيف المباشرة أعلى أزرار شريط الأدوات في الوضع الموسع"
-      },
-      "terminalToolbarFade": {
-        "label": "يتلاشى عند الخمول",
-        "description": "قم بإخفاء شريط الأدوات حتى تُمرر مؤشر الماوس فوقه"
-      },
-      "enableCommandHistory": {
-        "label": "سجل الأوامر",
-        "description": "تسجيل الأوامر المنفذة في هذه الطرفية للسجل والإكمال التلقائي"
-      },
-      "enableTerminal": {
-        "label": "تفعيل الطرفية",
-        "description": "قم بتوفير طرفية SSH لهذا المضيف."
-      },
-      "inheritAppearance": {
-        "label": "استخدم الإعدادات الافتراضية للمستخدم"
-      },
-      "theme": {
-        "label": "المظهر"
-      },
-      "cursorBlink": {
-        "label": "مؤشر وامض"
-      },
-      "cursorStyle": {
-        "label": "نمط المؤشر"
-      },
-      "fontSize": {
-        "label": "حجم الخط"
-      },
-      "fontFamily": {
-        "label": "نوع الخط"
-      },
-      "scrollback": {
-        "label": "ارجع للخلف"
-      },
-      "letterSpacing": {
-        "label": "تباعد الأحرف"
-      },
-      "lineHeight": {
-        "label": "ارتفاع السطر"
-      },
-      "bellStyle": {
-        "label": "جرس"
-      },
-      "minimumContrastRatio": {
-        "label": "نسبة التباين الدنيا"
-      },
-      "backgroundImage": {
-        "label": "صورة الخلفية"
-      },
-      "backgroundImageOpacity": {
-        "label": "شفافية صورة الخلفية"
-      },
-      "customThemeColors": {
-        "label": "ألوان مخصصة للثيم"
-      },
-      "rightClickSelectsWord": {
-        "label": "النقر بزر الماوس الأيمن يحدد الكلمة"
-      },
-      "macOptionIsMeta": {
-        "label": "الخيار هو ميتا"
-      },
-      "fastScrollModifier": {
-        "label": "مفتاح التمرير السريع"
-      },
-      "fastScrollSensitivity": {
-        "label": "سرعة تمرير سريعة"
-      },
-      "backspaceMode": {
-        "label": "مسافة للخلف"
-      },
-      "autoMosh": {
-        "label": "أوتو موش"
-      },
-      "moshCommand": {
-        "label": "أمر موش"
-      },
-      "autoTmux": {
-        "label": "tmux تلقائي"
-      },
-      "useSSHTitle": {
-        "label": "استخدم عنوان SSH"
-      },
-      "syntaxHighlighting": {
-        "label": "تمييز بناء الجملة"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "فئات تمييز بناء الجملة"
-      },
-      "linkClickBehavior": {
-        "label": "انقر على الرابط"
-      },
-      "localEcho": {
-        "label": "صدى محلي"
-      },
-      "passwordPromptAutoFill": {
-        "label": "عرض المساعدة في ملء خانات إدخال كلمة المرور"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "املأ مطالبات sudo"
-      },
-      "autoReconnect": {
-        "label": "إعادة الاتصال تلقائياً"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "الإكمال التلقائي للأوامر",
-        "description": "إظهار الإكمال التلقائي أثناء الكتابة عند الضغط على زر Tab"
-      },
-      "localEcho": {
-        "label": "صدى محلي",
-        "description": "تقليل زمن استجابة الإدخال المُدرك باستخدام التنبؤ الآمن المحلي بضغطات المفاتيح"
-      },
-      "linkClickBehavior": {
-        "label": "سلوك النقر على الروابط في الطرفية",
-        "description": "السلوك الافتراضي عند النقر على الروابط في الطرفية"
-      },
-      "customThemes": {
-        "label": "السمات المحفوظة"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "المحطة المحلية"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "استخدم جلسات طرفية مباشرة",
-      "description": "يتيح ذلك لميزات أخرى، مثل مشاركة الجلسات وتسجيلها، الوصول إلى جلسات طرفية مباشرة."
-    },
-    "history": {
-      "title": "قراءة سجل الأوامر",
-      "description": "يتيح ذلك لميزات أخرى، مثل مساعد الذكاء الاصطناعي، قراءة سجل أوامرك."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "الطرفية",
-    "addHost": "إضافة مضيف",
-    "applyGlobalThemeTooltip": "قم بتطبيق هذا القالب",
-    "backgroundImageDesc": "رابط اختياري لصورة خلفية الطرفية",
-    "backgroundImageLabel": "رابط صورة الخلفية",
-    "backgroundImageOpacityLabel": "شفافية صورة الخلفية",
-    "backspaceMode": "نمط الحذف",
-    "backspaceModeControlH": "التحكم-H (BS)",
-    "backspaceModeLabel": "وضع المسح الخلفي",
-    "backspaceModeNormal": "عادي (حذف)",
-    "behaviorAndAdvanced": "السلوك والمتقدم",
-    "bellStyle": "نمط الجرس",
-    "bellStyleBoth": "كلاهما",
-    "bellStyleLabel": "نمط الجرس",
-    "bellStyleNone": "لا شيء",
-    "bellStyleSound": "صوت",
-    "bellStyleVisual": "مرئي",
-    "colorTheme": "نظام الألوان",
-    "cursorBlink": "وميض المؤشر",
-    "cursorBlinking": "وميض المؤشر",
-    "cursorBlinkingDesc": "تمكين تأثير وميض المؤشر في الطرفية",
-    "cursorStyle": "نمط المؤشر",
-    "cursorStyleBar": "حاجِز",
-    "cursorStyleBlock": "حاجز",
-    "cursorStyleLabel": "نمط المؤشر",
-    "cursorStyleUnderline": "ضع خطاً تحته",
-    "customThemeAnsiColors": "ألوان ANSI",
-    "customThemeBackground": "الخلفية",
-    "customThemeBlack": "أسود",
-    "customThemeBlue": "أزرق",
-    "customThemeBrightBlack": "أسود ساطع",
-    "customThemeBrightBlue": "أزرق ساطع",
-    "customThemeBrightCyan": "سماوي ساطع",
-    "customThemeBrightGreen": "أخضر ساطع",
-    "customThemeBrightMagenta": "ماجنتا ساطع",
-    "customThemeBrightRed": "أحمر ساطع",
-    "customThemeBrightWhite": "أبيض ساطع",
-    "customThemeBrightYellow": "أصفر ساطع",
-    "customThemeColors": "ألوان مخصصة",
-    "customThemeCursor": "المؤشر",
-    "customThemeCursorAccent": "تمييز المؤشر",
-    "customThemeCyan": "سماوي",
-    "customThemeForeground": "المقدمة",
-    "customThemeGreen": "أخضر",
-    "customThemeMagenta": "ماجنتا",
-    "customThemeRed": "أحمر",
-    "customThemeResetTooltip": "إعادة تعيين إلى الإعدادات الافتراضية",
-    "customThemeSelection": "التحديد",
-    "customThemeWhite": "أبيض",
-    "customThemeYellow": "أصفر",
-    "deleteGlobalThemeTooltip": "احذف هذا القالب",
-    "docsLink": "عرض المستندات",
-    "enableAutoMosh": "تمكين Mosh التلقائي",
-    "enableAutoMoshDesc": "تفضيل Mosh على SSH إذا كان متاحاً",
-    "enableAutoTmux": "تمكين tmux التلقائي",
-    "enableAutoTmuxDesc": "حافظ على تشغيل shell وأي شيء يعمل بداخله أثناء انقطاع الاتصال وإعادة تشغيل المتصفح عن طريق التشغيل داخل tmux (يجب تثبيت tmux على المضيف).",
-    "fastScrollModifier": "مُعدِّل التمرير السريع",
-    "fastScrollModifierAlt": "Alt",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "مفتاح التمرير السريع",
-    "fastScrollModifierShift": "Shift",
-    "fastScrollSensitivity": "حساسية التمرير السريع",
-    "fastScrollSensitivityLabel": "حساسية التمرير السريع",
-    "fontFamily": "عائلة الخط",
-    "fontFamilyCustomHint": "اختر خطًا مُضمّنًا، أو اختر \"مخصص\" واكتب الاسم الدقيق لخط مُثبّت مُسبقًا على نظامك (مثل MesloLGS NF أو Noto Sans Mono). لا يُمكن لبرنامج Termix تثبيت الخطوط نيابةً عنك، لذا ثبّته على نظام التشغيل أولًا.",
-    "fontFamilyCustomOption": "مخصص...",
-    "fontFamilyCustomPlaceholder": "اسم الخط بالضبط، على سبيل المثال MesloLGS NF",
-    "fontFamilyLabel": "عائلة الخط",
-    "fontSize": "حجم الخط",
-    "fontSizeLabel": "حجم الخط",
-    "hostNotFound": "المضيف غير موجود",
-    "letterSpacing": "تباعد الأحرف",
-    "letterSpacingPx": "تباعد الأحرف (بكسل)",
-    "lineHeight": "ارتفاع السطر",
-    "lineHeightLabel": "ارتفاع السطر",
-    "linkClickBehaviorConfirm": "إظهار نافذة منبثقة للفتح أو النسخ",
-    "linkClickBehaviorDesc": "يتحكم في ما يحدث عند النقر على رابط في الطرفية. استخدم 'افتراضي' لاتباع إعداد التطبيق العام.",
-    "linkClickBehaviorDirect": "فتح مباشرةً",
-    "linkClickBehaviorLabel": "سلوك النقر على الرابط",
-    "loadingHost": "جارٍ تحميل المضيف...",
-    "localEchoAuto": "معادلة",
-    "localEchoDesc": "توقع ضغطات المفاتيح الآمنة القابلة للطباعة محليًا على الاتصالات البطيئة. لا يتم عرض مطالبات كلمة المرور أو مدخلات التحكم على الشاشة.",
-    "localEchoLabel": "صدى محلي",
-    "localEchoOff": "غير مفعلة",
-    "localEchoOn": "متصل دائمًا",
-    "macOptionIsMetaLabel": "مفتاح الخيار يرسل البيانات الوصفية",
-    "macOptionIsMetaShortDesc": "تعطيل كتابة الأحرف الخاصة (مثل @ أو |) باستخدام مفتاح Option/Alt على نظام macOS بدلاً من إرسال Meta",
-    "moshCommand": "أمر MOSH",
-    "moshCommandLabel": "أمر Mosh",
-    "noSavedThemes": "لم يتم حفظ أي سمات بعد",
-    "none": "لا يوجد",
-    "passwordPromptAutoFillDesc": "اعرض إدخال كلمة المرور المحفوظة عندما يطلبها الجهاز. قم بإيقاف تشغيل هذه الخاصية لمنع إدخال أي كلمة مرور تلقائيًا على هذا الجهاز.",
-    "passwordPromptAutoFillLabel": "عرض خاصية التعبئة التلقائية لكلمة المرور",
-    "autoReconnectLabel": "إعادة الاتصال التلقائي",
-    "autoReconnectDesc": "يُعيد الاتصال تلقائيًا عند انقطاع اتصال SSH، كما يحدث بعد انقطاع مؤقت في الشبكة أو وضع السكون. ويحتفظ بسجل التمرير.",
-    "rightClickSelectsWord": "النقر باليمين يحدد الكلمة",
-    "rightClickSelectsWordLabel": "تحديد الكلمة بالنقر الأيمن",
-    "rightClickSelectsWordShortDesc": "تحديد الكلمة تحت المؤشر عند النقر بالزر الأيمن",
-    "saveAsGlobalTheme": "حفظ كقالب عام",
-    "saveGlobalThemeError": "فشل حفظ السمة",
-    "saveGlobalThemeNamePrompt": "أدخل اسمًا لهذا القالب",
-    "saveGlobalThemeSuccess": "حفظ السمة",
-    "savedThemesLabel": "السمات المحفوظة",
-    "scrollbackBufferLabel": "مخزن التمرير المؤقت",
-    "scrollbackMaxLines": "الحد الأقصى لعدد الأسطر المحفوظة في السجل",
-    "sudoPasswordAutoFill": "التعبئة التلقائية لكلمة مرور Sudo",
-    "sudoPasswordAutoFillDesc": "تخزين كلمة مرور sudo لتشغيل مقاييس المضيف ومطالبات الطرفية وغيرها من الأوامر المميزة تلقائياً.",
-    "sudoPasswordAutoFillLabel": "الملء التلقائي لكلمة مرور sudo",
-    "syntaxCategoryIpAddresses": "عناوين IP",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "مستويات السجل",
-    "syntaxCategoryLogLevelsDesc": "خطأ، تحذير، معلومات، تنقيح، فادح",
-    "syntaxCategoryNumbers": "أرقام معنونة",
-    "syntaxCategoryNumbersDesc": "port 8080, exit 1, status 404",
-    "syntaxCategoryPaths": "مسارات الملفات",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "الطوابع الزمنية",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 2024-01-15",
-    "syntaxCategoryUrls": "عناوين URL",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "تلوين مخرجات الطرفية (الأخطاء، المسارات، عناوين IP، الطوابع الزمنية)",
-    "syntaxHighlightingLabel": "تمييز الصيغة",
-    "terminalAppearance": "مظهر الطرفية",
-    "theme": "السمة",
-    "themePreview": "معاينة السمة",
-    "useSSHTitleDesc": "تحديث عنوان التبويب من عنوان نافذة الصدفة بدلاً من اسم المضيف",
-    "useSSHTitleLabel": "استخدام عنوان نافذة SSH",
-    "enableTunnel": "تمكين النفق",
-    "enableFileManager": "تمكين مدير الملفات",
-    "enableDocker": "تمكين Docker",
-    "startupSnippet": "مقتطف بدء التشغيل",
-    "quickActions": "إجراءات سريعة",
-    "proxmoxLastSyncStatus": {
-      "success": "نجاح"
-    },
-    "proxmoxResultSkippedNoIp": "تم تخطي {{count}} (لم يتم العثور على عنوان IP)",
-    "proxmoxStatsUrlCopied": "تم نسخ رابط إحصائيات Proxmox إلى الحافظة",
-    "rdpUrlCopied": "تم نسخ رابط RDP",
-    "vncUrlCopied": "تم نسخ رابط VNC",
-    "filterAuthStepca": "الخطوة ج",
-    "guac": {
-      "noCredential": "لا توجد بيانات اعتماد (بيانات اعتماد مباشرة أدناه)",
-      "authTypeDirect": "مباشر",
-      "authTypeCredential": "بيانات الاعتماد",
-      "authTypeNone": "لا شيء",
-      "recordingPath": "مسار التسجيل",
-      "recordingName": "اسم التسجيل",
-      "saveHostFirst": "احفظ المضيف أولاً.",
-      "sharingOptionsAfterSave": "خيارات المشاركة متاحة بعد حفظ المضيف.",
-      "permissionLevel": "مستوى الصلاحية",
-      "typeHeader": "النوع",
-      "targetHeader": "الهدف",
-      "permissionHeader": "الصلاحية",
-      "cancelBtn": "إلغاء",
-      "savingBtn": "جارٍ الحفظ...",
-      "updateHostBtn": "تحديث المضيف",
-      "addHostBtn": "إضافة مضيف"
-    },
-    "filterAuthVault": "قبو"
-  },
-  "nav": {
-    "history": "السجل",
-    "localTerminal": "المحطة المحلية",
-    "sshTools": "أدوات SSH",
-    "terminal": "الطرفية",
-    "macros": "وحدات الماكرو"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "اكتب هنا لبث ضغطات المفاتيح...",
-    "copyOnSelect": "يتم نسخ النص المحدد تلقائيًا",
-    "enableRightClickCopyPaste": "تمكين النسخ واللصق بالزر الأيمن",
-    "fillPassword": "املأ كلمة المرور",
-    "fillPasswordMissing": "لا توجد كلمة مرور محفوظة لـ {{count}} طرفية محددة",
-    "fillPasswordSuccess": "تم ملء كلمة المرور في {{count}} طرفية",
-    "keyRecordingTitle": "تسجيل المفاتيح",
-    "noTerminalTabsOpen": "لا توجد علامات تبويب طرفية مفتوحة",
-    "recordToTerminals": "التسجيل إلى الطرفيات",
-    "selectAll": "الكل",
-    "selectNone": "لا شيء",
-    "selectTerminalsAbove": "اختر الطرفيات أعلاه",
-    "settingsTitle": "الإعدادات",
-    "startRecording": "بدء التسجيل",
-    "stopRecording": "إيقاف التسجيل"
-  },
-  "keybindings": {
-    "copy": "تحديد النص",
-    "paste": "لصق",
-    "sendControlCode": "إرسال إشارة Ctrl+حرف",
-    "sendText": "أرسل رسالة نصية",
-    "controlCodeLabel": "خطاب",
-    "textLabel": "نص لإرساله",
-    "appendEnterLabel": "اضغط على زر الإدخال بعد الإرسال",
-    "clipboardPermissionNote": "قد يطلب منك بعض المتصفحات منح إذن الوصول إلى الحافظة عند الاستخدام الأول.",
-    "textRequired": "أدخل النص المراد إرساله",
-    "controlCodeRequired": "أدخل حرفًا واحدًا لرمز التحكم",
-    "builtIn": {
-      "copyCtrlC": "نسخ التحديد (Ctrl+C، فقط عند تحديد نص)",
-      "copyCtrlShiftC": "نسخ التحديد (Ctrl+Shift+C)",
-      "copyCmdC": "نسخ التحديد (Cmd+C)",
-      "pasteCtrlShiftV": "لصق من الحافظة (Ctrl+Shift+V)",
-      "ctrlW": "إرسال Ctrl+W إلى سطر الأوامر (محظور من إغلاق علامة تبويب المتصفح)",
-      "ctrlT": "إرسال Ctrl+T إلى سطر الأوامر (محظور من فتح علامة تبويب المتصفح)",
-      "ctrlN": "أرسل Ctrl+N إلى سطر الأوامر (محظور من فتح نافذة المتصفح)",
-      "ctrlQ": "أرسل Ctrl+Q إلى سطر الأوامر (تم منعك من إغلاق المتصفح)"
-    }
-  },
-  "macros": {
-    "title": "وحدات الماكرو",
-    "description": "قم بتشغيل سلسلة من الأوامر المحفوظة في طرفية، وتفاعل مع ما يرسله الخادم.",
-    "target": "الهدف",
-    "noTerminal": "لا يوجد طرفية مفتوحة",
-    "empty": "لا توجد وحدات ماكرو حتى الآن",
-    "emptyHint": "أنشئ ماكرو لأتمتة تدفق طرفية، مثل تسجيل الدخول أو إعادة تشغيل خدمة أو الإجابة على المطالبات.",
-    "create": "ماكرو جديد",
-    "back": "العودة إلى وحدات الماكرو",
-    "name": "الاسم",
-    "namePlaceholder": "أعد تشغيل خادم الويب",
-    "nameRequired": "قم بتسمية الماكرو قبل حفظه",
-    "descriptionLabel": "الوصف",
-    "descriptionPlaceholder": "ما يفعله هذا الماكرو (اختياري)",
-    "unsaved": "تغييرات غير محفوظة",
-    "save": "حفظ",
-    "saved": "تم حفظ الماكرو",
-    "saveFailed": "تعذر حفظ الماكرو",
-    "delete": "حذف",
-    "deleteTitle": "هل تريد حذف هذا الماكرو؟",
-    "deleteBody": "سيتم حذف \"{{name}}\" نهائياً. لا يمكن التراجع عن هذا الإجراء.",
-    "deleted": "تم حذف الماكرو",
-    "cancel": "إلغاء",
-    "run": "تشغيل",
-    "stop": "التوقف",
-    "running": "جري...",
-    "completed": "اللمسة النهائية الدقيقة",
-    "failed": "فشل الماكرو",
-    "loadFailed": "تعذر تحميل وحدات الماكرو",
-    "needTerminal": "افتح وقم بتوصيل طرفية أولاً",
-    "noSteps": "لا يحتوي هذا الماكرو على أي خطوات حتى الآن. أضف خطوة واحدة أدناه.",
-    "addStep": "خطوات إضافية",
-    "stepNumber": "الخطوة {{number}}",
-    "removeStep": "خطوة الإزالة",
-    "confirmRunTitle": "هل تريد تشغيل هذا الماكرو؟",
-    "confirmRunBody": "\"{{name}}\" سيرسل أوامر إلى {{host}}.",
-    "confirmRunAction": "تشغيل الماكرو",
-    "stepTypes": {
-      "send": {
-        "label": "إرسال الأمر",
-        "help": "يكتب النص في الطرفية، تمامًا كما لو كنت أنت من كتبته."
-      },
-      "wait": {
-        "label": "انتظر حتى يتم إخراج البيانات",
-        "help": "يتوقف مؤقتًا حتى يقوم الخادم بطباعة النص الذي تحدده، مثل مطالبة كلمة المرور."
-      },
-      "delay": {
-        "label": "يوقف",
-        "help": "ينتظر فترة زمنية محددة قبل الخطوة التالية."
-      },
-      "if": {
-        "label": "إذا احتوى الناتج",
-        "help": "يقوم بفحص كل ما طبعه الخادم حتى الآن، ثم يقوم بتشغيل أحد الفرعين."
-      },
-      "repeat": {
-        "label": "يكرر",
-        "help": "يقوم بتنفيذ الخطوات الموجودة بداخله لعدد محدد من المرات."
-      }
-    },
-    "send": {
-      "text": "أمر أو نص",
-      "textPlaceholder": "systemctl restart nginx",
-      "pressEnter": "اضغط على زر الإدخال بعد الإرسال",
-      "pressEnterHelp": "قم بإيقاف تشغيل هذا الخيار لكتابة نص دون إرساله."
-    },
-    "wait": {
-      "pattern": "انتظر حتى يحتوي الناتج على",
-      "patternPlaceholder": "كلمة مرور:",
-      "timeout": "الاستسلام بعد",
-      "onTimeout": "إذا لم يظهر أبداً",
-      "stop": "أوقف الماكرو",
-      "continue": "استمر على أي حال"
-    },
-    "delay": {
-      "duration": "انتظر"
-    },
-    "ifStep": {
-      "pattern": "إذا احتوى الناتج",
-      "patternPlaceholder": "نشط: نشط (قيد التشغيل)",
-      "then": "ثم افعل هذا",
-      "else": "وإلا فافعل هذا",
-      "emptyBranch": "لا توجد"
-    },
-    "repeat": {
-      "count": "عدد المرات",
-      "times": "أوقات"
-    },
-    "match": {
-      "useRegex": "مطابقة مع تعبير نمطي",
-      "useRegexHelp": "اترك هذا الخيار فارغًا لمطابقة النص تمامًا كما هو مكتوب.",
-      "invalidRegex": "هذا ليس تعبيرًا نمطيًا صالحًا، وسيتم مطابقته كنص عادي."
-    },
-    "seconds": "ثوانٍ",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "يلزم وجود خادم بعيد. قم بتوصيل خادم بعيد في الإعدادات لاستخدام نوع الاتصال هذا."
-  },
-  "plugin": {
-    "name": "طرفية SSH"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/bg_BG.json b/plugins/ssh-terminal/locales/translated/bg_BG.json
deleted file mode 100644
index 03f4689ce..000000000
--- a/plugins/ssh-terminal/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Добавяне",
-    "arrowDown": "Стрелка надолу",
-    "arrowLeft": "Стрелка наляво",
-    "arrowRight": "Стрелка надясно",
-    "arrowUp": "Стрелка нагоре",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Дел",
-    "done": "Готово",
-    "editQuickKeys": "Редактиране на бързи клавиши",
-    "end": "Край",
-    "esc": "Esc",
-    "home": "Дом",
-    "pageDown": "PgDn",
-    "pageUp": "PgUp",
-    "paste": "Паста",
-    "quickKeyPlaceholder": "например sudo ",
-    "quickKeysDesc": "Докоснете × за премахване. Поддържа до 8 знака.",
-    "quickKeysTitle": "Бързи клавиши",
-    "removeQuickKey": "Премахване",
-    "resetDefaults": "Възстановяване на фабричните настройки",
-    "shift": "Изместване",
-    "tab": "Раздел"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Неуспешно активиране на Auto-Tmux",
-    "autoTmuxEnabled": "Автоматичното Tmux управление е активирано за {{host}}. Прилага се от следващата връзка.",
-    "clipboardHttpWarning": "Не можах да прочета клипборда. Някои браузъри ограничават достъпа до клипборда извън HTTPS - опитайте Ctrl+V вместо това или използвайте Termix през HTTPS.",
-    "closeTab": "Затвори",
-    "connecting": "Свързване...",
-    "connectionLost": "Връзката е прекъсната",
-    "connectionRejected": "Връзката е отхвърлена от сървъра. Моля, проверете удостоверяването и мрежовата си конфигурация.",
-    "connectionTimeout": "Време за изчакване на връзката",
-    "enableAutoTmuxAction": "Активиране на Auto-Tmux",
-    "hostKeyRejected": "Проверката на SSH ключа за хост е отхвърлена. Връзката е прекратена.",
-    "linkDialogCopy": "Копиране",
-    "linkDialogOpen": "Отворено",
-    "linkDialogTitle": "Отвори линка",
-    "maxReconnectAttemptsReached": "Достигнат е максималният брой опити за повторно свързване",
-    "noHostSelected": "Няма избран хост",
-    "passwordPromptFillTitle": "Да се попълни ли запазената парола в този ред?",
-    "reconnect": "Свържете се отново",
-    "reconnected": "Успешно повторно свързване",
-    "reconnecting": "Повторно свързване... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Връзката е прекъсната, свързването е повторно...",
-    "searchCaseSensitive": "Съвпадение на регистъра",
-    "searchClose": "Затвори (Escape)",
-    "searchNext": "Следващ мач (Enter)",
-    "searchNoResults": "Няма резултати",
-    "searchPlaceholder": "Намерете",
-    "searchPrevious": "Предишно съвпадение (Shift+Enter)",
-    "searchRegex": "Използвайте регулярни изрази",
-    "searchResultCount": "{{index}} от {{count}}",
-    "searchWholeWord": "Съвпадение на цяла дума",
-    "sessionExpiredNotice": "Предишната ви сесия на {{host}} изтече след {{minutes}} минути прекъснато свързване; обвивката и всичко, което се изпълнява в нея, са изчезнали. Активирайте Auto-Tmux на този хост, за да поддържате сесиите активни.",
-    "sessionExpiredNoticeNoMinutes": "Предишната ви сесия на {{host}} изтече, докато бяхте прекъснати; обвивката и всичко, което се изпълняваше в нея, са изчезнали. Активирайте Auto-Tmux на този хост, за да поддържате сесиите активни.",
-    "sessionTakenOver": "Сесията беше отворена в друг раздел. Повторно свързване...",
-    "tmuxAttached": "Прикачени клиенти",
-    "tmuxAttachedCount": "{{count}} прикачен",
-    "tmuxCopyHint": "Променете селекцията и натиснете Enter, за да я копирате в клипборда",
-    "tmuxCreateNew": "Започнете нова сесия",
-    "tmuxDetached": "Отделен от tmux сесията",
-    "tmuxLastActivity": "Последна активност",
-    "tmuxSessionAttached": "Прикачена tmux сесия: {{name}}",
-    "tmuxSessionCreated": "tmux сесия, създадена: {{name}}",
-    "tmuxSessionPickerDesc": "На този хост са открити съществуващи tmux сесии. Изберете една, за да я свържете отново или да създадете нова сесия.",
-    "tmuxSessionPickerTitle": "tmux сесии",
-    "tmuxTimeDays": "преди {{count}}дни",
-    "tmuxTimeHours": "преди {{count}}ч",
-    "tmuxTimeJustNow": "точно сега",
-    "tmuxTimeMinutes": "преди {{count}}мин.",
-    "tmuxUnavailable": "tmux не е инсталиран на отдалечения хост, връща се към стандартната обвивка",
-    "tmuxWindowCount": "{{count}} window",
-    "tmuxWindows": "Прозорци",
-    "unknownError": "Възникна неизвестна грешка",
-    "websocketAbnormalClose": "Връзката се прекъсна неочаквано. Това може да се дължи на проблем с обратен прокси или SSL конфигурация. Моля, проверете лог файловете на сървъра.",
-    "websocketError": "Грешка при свързване с WebSocket",
-    "clipboardReadFailed": "Четенето от клипборда не бе успешно. Уверете се, че са предоставени разрешения за достъп до клипборда.",
-    "clipboardWriteFailed": "Копирането в клипборда не бе успешно. Уверете се, че страницата се предоставя през HTTPS или localhost.",
-    "connected": "Свързан",
-    "totpCodeLabel": "Код за потвърждение",
-    "duplicateTab": "Дублиран раздел",
-    "imageChooseFile": "Изберете файл с изображение",
-    "imageUploaded": "Качено изображение: {{path}}",
-    "imageClipboardUnavailable": "Този браузър не може да чете изображения от клипборда",
-    "imageClipboardEmpty": "Няма намерено изображение в клипборда",
-    "localShell": "Локална терминална обвивка",
-    "autocompleteHintComplete": "Tab или Enter за завършване",
-    "autocompleteHintNavigate": "↑↓ за навигация",
-    "autocompleteHintClose": "Esc за затваряне"
-  },
-  "terminalToolbar": {
-    "detachTmux": "Отделяне на tmux",
-    "detachTmuxDescription": "Отделяне на tmux сесия",
-    "dismissError": "Грешка при отхвърляне на изображението",
-    "hideToolbar": "Скриване на лентата с инструменти",
-    "image": "Действия с изображения (само с изображения)",
-    "imageActionFailed": "Действието с изображението не беше успешно",
-    "layout": "Режим на показване на лентата с инструменти",
-    "layoutExpanded": "Разширено с показатели",
-    "layoutIcon": "Само икона",
-    "layoutLabeled": "Икони и етикети",
-    "moveToolbar": "Преместване на лентата с инструменти",
-    "moveToolbarHint": "Плъзнете, за да преместите лентата с инструменти",
-    "paste": "Поставяне на изображение",
-    "pasteImage": "Поставяне на изображение от клипборда (само за изображения)",
-    "retry": "Опитай отново",
-    "showToolbar": "Разгъване на лентата с инструменти",
-    "upload": "Качване на изображение",
-    "uploadImage": "Качете изображение на хоста",
-    "uploadingImage": "Качване..."
-  },
-  "history": {
-    "noTerminalSelected": "Няма избран терминал",
-    "noTerminalSelectedHint": "Отворете раздел на SSH терминал, за да видите историята на командите му",
-    "searchPlaceholder": "История на търсенията...",
-    "clearAll": "Изчисти всички",
-    "noHistoryEntries": "Няма записи в историята",
-    "trackingDisabled": "Проследяването на историята е деактивирано",
-    "trackingDisabledHint": "Включете историята на командите в раздела SSH терминал на този хост.",
-    "commandCount_one": "команда {{count}}",
-    "commandCount_other": "{{count}} команди"
-  },
-  "touchInput": {
-    "enabled": "Активиране на сензорно въвеждане",
-    "enabledDesc": "Разрешаване на превъртане с един пръст в терминали",
-    "momentumEnabled": "Активиране на Momentum",
-    "momentumEnabledDesc": "Продължете да превъртате за кратко след плъзване",
-    "advanced": "Разширено",
-    "resetDefaults": "Възстановяване на фабричните настройки",
-    "dragThreshold": "Праг на плъзгане",
-    "maxWheelDelta": "Максимална делта на колелото",
-    "momentumSampleWindow": "Прозорец за пример на импулса",
-    "releaseGracePeriod": "Гратисен период за освобождаване",
-    "minimumVelocity": "Минимална скорост",
-    "maximumVelocity": "Максимална скорост",
-    "maximumDuration": "Максимална продължителност",
-    "maximumTravel": "Максимален ход",
-    "decayTime": "Време на разпад",
-    "pixelsPerTick": "Пиксели на такт",
-    "maximumFrameInterval": "Максимален интервал на кадрите",
-    "maximumTicksPerFrame": "Максимален брой отметки на кадър"
-  },
-  "imageStorage": {
-    "instanceId": "Идентификатор на екземпляр на терминална сесия",
-    "instanceIdDesc": "Идентификатор на екземпляр на един от свързаните ви терминални раздели, използван за тестване на видимостта.",
-    "selectedModeUnavailable": "Не е налично",
-    "test": "Тест",
-    "testing": "Тестване...",
-    "testFailed": "Тестването на съхранението на изображения не бе успешно",
-    "testConnected": "Терминалната сесия е свързана.",
-    "testNotConnected": "Няма свързана терминална сесия с този идентификатор на екземпляр.",
-    "testSelectedMode": "Качването ще използва: {{mode}}",
-    "testLocalVisible": "Локалната директория е видима от свързания хост.",
-    "testLocalNotVisible": "Локалната директория НЕ е видима от свързания хост."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Сензорно въвеждане",
-        "images": "Съхранение на изображения",
-        "sessions": "Сесии",
-        "newHosts": "Нови домакини"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Устойчивост на терминална сесия",
-        "description": "Колко дълго един прекъснат терминал се поддържа активен на сървъра, преди да бъде затворен. Мин. 1, макс. 1440 минути. За сесии, които трябва да преживеят това, активирайте Auto-Tmux на хоста."
-      },
-      "commandHistoryEnabled": {
-        "label": "История на командите",
-        "description": "Разрешаване на запис на историята на командите. Когато е деактивирано, историята не се запазва, независимо от настройките за всеки хост."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "История на командите за нови хостове",
-        "description": "Дали новите хостове започват с включена история на командите."
-      },
-      "imageStorageMode": {
-        "label": "Режим на съхранение",
-        "description": "Където се записват поставените и качени изображения на терминала. Автоматичното избиране по връзка, локално и отдалечено (SFTP) е поправено.",
-        "auto": "Автоматично",
-        "local": "Местно",
-        "remoteSftp": "Отдалечено (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Локален указател",
-        "description": "Абсолютен път в сървъра на Termix, където локалният режим записва изображения. Никога не се показва след запазване. Празният път използва TERMIX_IMAGE_DIR."
-      },
-      "imageHostPath": {
-        "label": "Път на хоста",
-        "description": "Изгледът от страна на хоста на локалната директория, която получават терминалните агенти."
-      },
-      "imageTtlMs": {
-        "label": "TTL (мсек)",
-        "description": "Колко дълго се съхранява каченото изображение, в милисекунди. Празно използва TERMIX_IMAGE_TTL_MS или един час."
-      },
-      "imageMaxCount": {
-        "label": "Максимален брой изображения",
-        "description": "Повечето изображения се съхраняват наведнъж. Празните изображения използват TERMIX_MAX_IMAGE_COUNT или 100."
-      },
-      "imageMaxBytes": {
-        "label": "Максимален брой байтове за съхранение",
-        "description": "Повечето байтове изображения се съхраняват едновременно. Празните изображения използват TERMIX_MAX_IMAGE_STORAGE_BYTES или 5 GiB."
-      },
-      "sessionPersistence": {
-        "label": "Запазване на сесиите след прекъсване",
-        "description": "Поддържайте несвързан терминал активен на сървъра за горепосоченото време, така че повторното отваряне на раздела му да продължи оттам, откъдето е спрял."
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "Стартирайте терминалите на новите хостове вътре в tmux, така че сесиите да оцелеят при прекъсвания (необходим е tmux на хоста)"
-      },
-      "newHostTheme": {
-        "label": "Тема за нови домакини",
-        "description": "Темата на терминала, с която започва нов хост."
-      },
-      "newHostFontFamily": {
-        "label": "Шрифт за нови хостове",
-        "description": "Шрифтът на терминала, с който започва новият хост."
-      },
-      "newHostFontSize": {
-        "label": "Размер на шрифта за нови хостове",
-        "description": "Размерът на шрифта на терминала, с който започва нов хост, в пиксели."
-      },
-      "newHostCursorStyle": {
-        "label": "Стил на курсора за нови хостове"
-      },
-      "newHostCursorBlink": {
-        "label": "Мигащ курсор за нови хостове"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Активиране на лентата с инструменти на терминала",
-        "description": "Показване на лента с инструменти за бърз достъп, закачена към активния терминал, за инструментите и статистиката в реално време на този хост"
-      },
-      "terminalToolbarPosition": {
-        "label": "Позиция на лентата с инструменти",
-        "description": "Мястото, където се намира лентата с инструменти в терминала. Все още можете да я плъзнете оттам.",
-        "bottom": "Долу в центъра",
-        "bottomLeft": "Долу вляво",
-        "bottomRight": "Долу вдясно",
-        "top": "Горе в центъра",
-        "topLeft": "Горе вляво",
-        "topRight": "Горе вдясно"
-      },
-      "terminalToolbarStartState": {
-        "label": "Начално състояние на лентата с инструменти",
-        "description": "Дали лентата с инструменти се отваря разгъната или минимизирана, когато терминалът се свърже",
-        "expanded": "Разширено",
-        "collapsed": "Минимизирано"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Режим на показване на лентата с инструменти",
-        "description": "Как се показват бутоните на лентата с инструменти. „Последно използвано“ запазва избраното от вас в лентата с инструменти.",
-        "remember": "Последно използвано",
-        "icon": "Само икона",
-        "labeled": "Икони и етикети",
-        "expanded": "Разширено със статистика"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Показване на статистика на живо",
-        "description": "Показване на статистика за хоста на живо над бутоните на лентата с инструменти в разгънат режим"
-      },
-      "terminalToolbarFade": {
-        "label": "Избледняване при неактивност",
-        "description": "Лентата с инструменти ще се скрива, докато задържите курсора на мишката върху нея."
-      },
-      "enableCommandHistory": {
-        "label": "История на командите",
-        "description": "Запис на команди, изпълнявани в този терминал, за история и автоматично довършване"
-      },
-      "enableTerminal": {
-        "label": "Активиране на терминала",
-        "description": "Предложете SSH терминал за този хост."
-      },
-      "inheritAppearance": {
-        "label": "Използване на потребителските настройки по подразбиране"
-      },
-      "theme": {
-        "label": "Тема"
-      },
-      "cursorBlink": {
-        "label": "Мигащ курсор"
-      },
-      "cursorStyle": {
-        "label": "Стил на курсора"
-      },
-      "fontSize": {
-        "label": "Размер на шрифта"
-      },
-      "fontFamily": {
-        "label": "Шрифт"
-      },
-      "scrollback": {
-        "label": "Превъртане назад"
-      },
-      "letterSpacing": {
-        "label": "Разстояние между буквите"
-      },
-      "lineHeight": {
-        "label": "Височина на реда"
-      },
-      "bellStyle": {
-        "label": "Бел"
-      },
-      "minimumContrastRatio": {
-        "label": "Минимално съотношение на контраста"
-      },
-      "backgroundImage": {
-        "label": "Фоново изображение"
-      },
-      "backgroundImageOpacity": {
-        "label": "Непрозрачност на фоновото изображение"
-      },
-      "customThemeColors": {
-        "label": "Персонализирани цветове на темата"
-      },
-      "rightClickSelectsWord": {
-        "label": "Щракване с десен бутон избира дума"
-      },
-      "macOptionIsMeta": {
-        "label": "Опцията е Мета"
-      },
-      "fastScrollModifier": {
-        "label": "Клавиш за бързо превъртане"
-      },
-      "fastScrollSensitivity": {
-        "label": "Бърза скорост на превъртане"
-      },
-      "backspaceMode": {
-        "label": "Назад"
-      },
-      "autoMosh": {
-        "label": "Автоматичен мош"
-      },
-      "moshCommand": {
-        "label": "Команда Mosh"
-      },
-      "autoTmux": {
-        "label": "Автоматичен tmux"
-      },
-      "useSSHTitle": {
-        "label": "Използвайте SSH заглавието"
-      },
-      "syntaxHighlighting": {
-        "label": "Подчертаване на синтаксиса"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Категории за осветяване на синтаксиса"
-      },
-      "linkClickBehavior": {
-        "label": "Кликване върху връзката"
-      },
-      "localEcho": {
-        "label": "Локално ехо"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Предложение за попълване на подканите за парола"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Попълнете sudo подканите"
-      },
-      "autoReconnect": {
-        "label": "Автоматично повторно свързване"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Автоматично довършване на команди",
-        "description": "Показване на автоматично довършване при въвеждане, ако натиснете Tab"
-      },
-      "localEcho": {
-        "label": "Локално ехо",
-        "description": "Намалете възприеманата латентност на входа, използвайки безопасно локално предсказване на натискането на клавиши"
-      },
-      "linkClickBehavior": {
-        "label": "Щракване върху връзката на терминала",
-        "description": "Поведение по подразбиране при кликване върху връзки в терминала"
-      },
-      "customThemes": {
-        "label": "Запазени теми"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Местен терминал"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Използвайте сесии на живо на терминал",
-      "description": "Позволява на други функции, като споделяне и запис на сесии, да достигнат до вашите сесии на живо в терминала."
-    },
-    "history": {
-      "title": "Прочетете историята на командите",
-      "description": "Позволява на други функции, като например асистента с изкуствен интелект, да четат историята на вашите команди."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Терминал",
-    "addHost": "Добавяне на хост",
-    "applyGlobalThemeTooltip": "Приложете тази тема",
-    "backgroundImageDesc": "Незадължителен URL адрес за фоново изображение на терминала",
-    "backgroundImageLabel": "URL адрес на фоновото изображение",
-    "backgroundImageOpacityLabel": "Непрозрачност на фоновото изображение",
-    "backspaceMode": "Режим на връщане назад",
-    "backspaceModeControlH": "Контрол-H (BS)",
-    "backspaceModeLabel": "Режим на връщане назад",
-    "backspaceModeNormal": "Нормално (DEL)",
-    "behaviorAndAdvanced": "Поведение и напреднали",
-    "bellStyle": "Стил на камбаната",
-    "bellStyleBoth": "И двете",
-    "bellStyleLabel": "Стил на камбаната",
-    "bellStyleNone": "Няма",
-    "bellStyleSound": "Звук",
-    "bellStyleVisual": "Визуално",
-    "colorTheme": "Цветова тема",
-    "cursorBlink": "Мигане на курсора",
-    "cursorBlinking": "Мигане на курсора",
-    "cursorBlinkingDesc": "Активиране на мигаща анимация за курсора на терминала",
-    "cursorStyle": "Стил на курсора",
-    "cursorStyleBar": "Бар",
-    "cursorStyleBlock": "Блок",
-    "cursorStyleLabel": "Стил на курсора",
-    "cursorStyleUnderline": "Подчертаване",
-    "customThemeAnsiColors": "ANSI цветове",
-    "customThemeBackground": "Предистория",
-    "customThemeBlack": "Черно",
-    "customThemeBlue": "Синьо",
-    "customThemeBrightBlack": "Ярко черно",
-    "customThemeBrightBlue": "Ярко синьо",
-    "customThemeBrightCyan": "Ярко циан",
-    "customThemeBrightGreen": "Ярко зелено",
-    "customThemeBrightMagenta": "Ярко пурпурно",
-    "customThemeBrightRed": "Ярко червено",
-    "customThemeBrightWhite": "Ярко бяло",
-    "customThemeBrightYellow": "Ярко жълто",
-    "customThemeColors": "Персонализирани цветове",
-    "customThemeCursor": "Курсор",
-    "customThemeCursorAccent": "Акцент на курсора",
-    "customThemeCyan": "Циан",
-    "customThemeForeground": "Преден план",
-    "customThemeGreen": "Зелено",
-    "customThemeMagenta": "Магента",
-    "customThemeRed": "Червено",
-    "customThemeResetTooltip": "Възстановяване на фабричните настройки",
-    "customThemeSelection": "Избор",
-    "customThemeWhite": "Бяло",
-    "customThemeYellow": "Жълто",
-    "deleteGlobalThemeTooltip": "Изтрий тази тема",
-    "docsLink": "Преглед на документи",
-    "enableAutoMosh": "Активиране на Auto-Mosh",
-    "enableAutoMoshDesc": "Предпочитайте Mosh пред SSH, ако е наличен",
-    "enableAutoTmux": "Активиране на Auto-Tmux",
-    "enableAutoTmuxDesc": "Поддържайте вашата обвивка и всичко, което се изпълнява в нея, активно при прекъсвания на връзката и рестартиране на браузъра, като я стартирате вътре в tmux (tmux трябва да е инсталиран на хоста)",
-    "fastScrollModifier": "Модификатор за бързо превъртане",
-    "fastScrollModifierAlt": "Алтернативно",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Модификатор за бързо превъртане",
-    "fastScrollModifierShift": "Изместване",
-    "fastScrollSensitivity": "Чувствителност на бързото превъртане",
-    "fastScrollSensitivityLabel": "Чувствителност на бързото превъртане",
-    "fontFamily": "Семейство шрифтове",
-    "fontFamilyCustomHint": "Изберете вграден шрифт или изберете „Персонализиран“ и въведете точното име на шрифт, който вече е инсталиран на вашата система (напр. MesloLGS NF, Noto Sans Mono). Termix не може да инсталира шрифтове вместо вас, първо го инсталирайте на вашата операционна система.",
-    "fontFamilyCustomOption": "Персонализирано...",
-    "fontFamilyCustomPlaceholder": "Точно име на шрифта, например MesloLGS NF",
-    "fontFamilyLabel": "Семейство шрифтове",
-    "fontSize": "Размер на шрифта",
-    "fontSizeLabel": "Размер на шрифта",
-    "hostNotFound": "Хостът не е намерен",
-    "letterSpacing": "Разстояние между буквите",
-    "letterSpacingPx": "Разстояние между буквите (px)",
-    "lineHeight": "Височина на реда",
-    "lineHeightLabel": "Височина на реда",
-    "linkClickBehaviorConfirm": "Показване на изскачащ прозорец за отваряне или копиране",
-    "linkClickBehaviorDesc": "Контролира какво се случва, когато щракнете върху връзка в терминала. Използвайте „По подразбиране“, за да следвате настройката на ниво приложение.",
-    "linkClickBehaviorDirect": "Отвори директно",
-    "linkClickBehaviorLabel": "Поведение при кликване върху връзки",
-    "loadingHost": "Зареждане на хоста...",
-    "localEchoAuto": "Автоматично",
-    "localEchoDesc": "Предсказвайте безопасни за печат натискания на клавиши локално при бавни връзки. Подканите за парола и контролните въведени команди никога не се повтарят.",
-    "localEchoLabel": "Локално ехо",
-    "localEchoOff": "Изключено",
-    "localEchoOn": "Винаги включено",
-    "macOptionIsMetaLabel": "Клавишът с опции изпраща мета данни",
-    "macOptionIsMetaShortDesc": "Деактивирайте въвеждането на специални символи (като @ или |) с клавиша Option/Alt в macOS, вместо изпращане на Meta",
-    "moshCommand": "MOSH команда",
-    "moshCommandLabel": "Команда Мош",
-    "noSavedThemes": "Все още няма запазени теми",
-    "none": "Няма",
-    "passwordPromptAutoFillDesc": "Предложете да попълните запазената парола, когато терминалът поиска такава. Изключете, за да не се попълва автоматично парола на този хост.",
-    "passwordPromptAutoFillLabel": "Автоматично попълване на парола за оферта",
-    "autoReconnectLabel": "Автоматично повторно свързване",
-    "autoReconnectDesc": "Свързва се отново самостоятелно, когато SSH връзката прекъсне, например след прекъсване на мрежата или заспиване. Запазва превъртането назад.",
-    "rightClickSelectsWord": "Щракване с десен бутон Избира дума",
-    "rightClickSelectsWordLabel": "Щракване с десен бутон Избира дума",
-    "rightClickSelectsWordShortDesc": "Изберете думата под курсора при щракване с десния бутон",
-    "saveAsGlobalTheme": "Запазване като глобална тема",
-    "saveGlobalThemeError": "Запазването на темата не бе успешно",
-    "saveGlobalThemeNamePrompt": "Въведете име за тази тема",
-    "saveGlobalThemeSuccess": "Темата е запазена",
-    "savedThemesLabel": "Запазени теми",
-    "scrollbackBufferLabel": "Буфер за превъртане назад",
-    "scrollbackMaxLines": "Максимален брой редове, съхранявани в историята",
-    "sudoPasswordAutoFill": "Автоматично попълване на парола за Sudo",
-    "sudoPasswordAutoFillDesc": "Съхранявайте парола за sudo, така че показателите за хоста, подканите на терминала и други да могат да изпълняват привилегировани команди автоматично.",
-    "sudoPasswordAutoFillLabel": "Автоматично попълване на парола за Sudo",
-    "syntaxCategoryIpAddresses": "IP адреси",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Нива на лог файлове",
-    "syntaxCategoryLogLevelsDesc": "грешка, предупреждение, информация, отстраняване на грешки, фатален",
-    "syntaxCategoryNumbers": "Етикетирани числа",
-    "syntaxCategoryNumbersDesc": "порт 8080, изход 1, статус 404",
-    "syntaxCategoryPaths": "Пътища до файлове",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "Времеви печати",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 15.01.2024 г.",
-    "syntaxCategoryUrls": "URL адреси",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "Оцветяване на изхода на терминала (грешки, пътища, IP адреси, времеви отпечатъци)",
-    "syntaxHighlightingLabel": "Подчертаване на синтаксиса",
-    "terminalAppearance": "Външен вид на терминала",
-    "theme": "Тема",
-    "themePreview": "Преглед на темата",
-    "useSSHTitleDesc": "Актуализирайте заглавието на раздела от заглавието на прозореца на обвивката, вместо от името на хоста.",
-    "useSSHTitleLabel": "Използване на заглавие на SSH прозорец",
-    "enableTunnel": "Активиране на тунел",
-    "enableFileManager": "Активиране на файловия мениджър",
-    "enableDocker": "Активиране на Докер",
-    "startupSnippet": "Стартов фрагмент",
-    "quickActions": "Бързи действия",
-    "proxmoxLastSyncStatus": {
-      "success": "Успех"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} пропуснато (не е намерен IP адрес)",
-    "proxmoxStatsUrlCopied": "URL адресът на статистиката на Proxmox е копиран в клипборда",
-    "rdpUrlCopied": "RDP URL адресът е копиран",
-    "vncUrlCopied": "VNC URL адресът е копиран",
-    "filterAuthStepca": "Стъпка CA",
-    "guac": {
-      "noCredential": "Нямате пълномощия (директни пълномощия по-долу)",
-      "authTypeDirect": "Директно",
-      "authTypeCredential": "Пълномощия",
-      "authTypeNone": "Няма",
-      "recordingPath": "Път на запис",
-      "recordingName": "Име на записа",
-      "saveHostFirst": "Първо запазете хоста.",
-      "sharingOptionsAfterSave": "Опциите за споделяне са налични след запазване на хоста.",
-      "permissionLevel": "Ниво на разрешение",
-      "typeHeader": "Тип",
-      "targetHeader": "Цел",
-      "permissionHeader": "Разрешение",
-      "cancelBtn": "Отказ",
-      "savingBtn": "Запазване...",
-      "updateHostBtn": "Актуализиране на хоста",
-      "addHostBtn": "Добавяне на хост"
-    },
-    "filterAuthVault": "Трезор"
-  },
-  "nav": {
-    "history": "История",
-    "localTerminal": "Местен терминал",
-    "sshTools": "SSH инструменти",
-    "terminal": "Терминал",
-    "macros": "Макроси"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Въведете тук, за да излъчвате натисканията на клавиши...",
-    "copyOnSelect": "Автоматично копиране на избрания текст",
-    "enableRightClickCopyPaste": "Активиране на копиране/поставяне чрез щракване с десен бутон",
-    "fillPassword": "Попълнете паролата",
-    "fillPasswordMissing": "Няма запазена парола за {{count}} избрани терминали",
-    "fillPasswordSuccess": "Паролата е попълнена в {{count}} терминал(и)",
-    "keyRecordingTitle": "Запис на ключове",
-    "noTerminalTabsOpen": "Няма отворени раздели на терминала",
-    "recordToTerminals": "Записване към терминали",
-    "selectAll": "Всички",
-    "selectNone": "Няма",
-    "selectTerminalsAbove": "Изберете терминали по-горе",
-    "settingsTitle": "Настройки",
-    "startRecording": "Стартиране на запис",
-    "stopRecording": "Спиране на записа"
-  },
-  "keybindings": {
-    "copy": "Копиране на селекцията",
-    "paste": "Паста",
-    "sendControlCode": "Изпрати сигнал Ctrl+буква",
-    "sendText": "Изпращане на текст",
-    "controlCodeLabel": "Писмо",
-    "textLabel": "Текст за изпращане",
-    "appendEnterLabel": "Натиснете Enter след изпращане",
-    "clipboardPermissionNote": "Може да поиска разрешение за достъп до клипборда при първото използване в някои браузъри.",
-    "textRequired": "Въведете текста за изпращане",
-    "controlCodeRequired": "Въведете една буква за контролния код",
-    "builtIn": {
-      "copyCtrlC": "Копиране на селекцията (Ctrl+C, само когато е избран текст)",
-      "copyCtrlShiftC": "Копиране на селекцията (Ctrl+Shift+C)",
-      "copyCmdC": "Копиране на селекцията (Cmd+C)",
-      "pasteCtrlShiftV": "Поставяне от клипборда (Ctrl+Shift+V)",
-      "ctrlW": "Изпращане на Ctrl+W към обвивката (блокирано е затварянето на раздела на браузъра)",
-      "ctrlT": "Изпращане на Ctrl+T към shell (блокирано е отварянето на раздел на браузъра)",
-      "ctrlN": "Изпращане на Ctrl+N към shell (блокирано е отварянето на прозорец на браузъра)",
-      "ctrlQ": "Изпращане на Ctrl+Q към shell (блокирано е затварянето на браузъра)"
-    }
-  },
-  "macros": {
-    "title": "Макроси",
-    "description": "Изпълнете запазена серия от команди в терминал и реагирайте на това, което сървърът изпраща обратно.",
-    "target": "Цел",
-    "noTerminal": "Няма отворен терминал",
-    "empty": "Все още няма макроси",
-    "emptyHint": "Създайте макрос за автоматизиране на процес в терминал, като например влизане в системата, рестартиране на услуга или отговаряне на подкани.",
-    "create": "Нов макрос",
-    "back": "Обратно към макросите",
-    "name": "Име",
-    "namePlaceholder": "Рестартирайте уеб сървъра",
-    "nameRequired": "Дайте име на макроса, преди да го запазите",
-    "descriptionLabel": "Описание",
-    "descriptionPlaceholder": "Какво прави този макрос (по избор)",
-    "unsaved": "Незапазени промени",
-    "save": "Запазване",
-    "saved": "Макросът е запазен",
-    "saveFailed": "Макросът не можа да се запази",
-    "delete": "Изтриване",
-    "deleteTitle": "Да се изтрие ли този макрос?",
-    "deleteBody": "„{{name}}“ ще бъде изтрито за постоянно. Това не може да бъде отменено.",
-    "deleted": "Макросът е изтрит",
-    "cancel": "Отказ",
-    "run": "Бягане",
-    "stop": "Спри",
-    "running": "Бягане...",
-    "completed": "Макрото е завършено",
-    "failed": "Макросът не беше успешен",
-    "loadFailed": "Не можаха да се заредят макроси",
-    "needTerminal": "Първо отворете и свържете терминал",
-    "noSteps": "Този макрос все още няма стъпки. Добавете една по-долу.",
-    "addStep": "Добавяне на стъпка",
-    "stepNumber": "Стъпка {{number}}",
-    "removeStep": "Премахване на стъпка",
-    "confirmRunTitle": "Да се изпълни ли този макрос?",
-    "confirmRunBody": "„{{name}}“ ще изпраща команди до {{host}}.",
-    "confirmRunAction": "Изпълнете макрос",
-    "stepTypes": {
-      "send": {
-        "label": "Изпрати команда",
-        "help": "Въвежда текст в терминала, по същия начин, както ако сте го написали."
-      },
-      "wait": {
-        "label": "Изчакайте изхода",
-        "help": "Пауза, докато сървърът отпечата текста, който посочите, като например подкана за парола."
-      },
-      "delay": {
-        "label": "Пауза",
-        "help": "Изчаква фиксирано време преди следващата стъпка."
-      },
-      "if": {
-        "label": "Ако изходът съдържа",
-        "help": "Проверява всичко, което сървърът е отпечатал досега, след което изпълнява един от двата клона."
-      },
-      "repeat": {
-        "label": "Повторете",
-        "help": "Изпълнява стъпките вътре в него определен брой пъти."
-      }
-    },
-    "send": {
-      "text": "Команда или текст",
-      "textPlaceholder": "systemctl рестартиране на nginx",
-      "pressEnter": "Натиснете Enter след изпращане",
-      "pressEnterHelp": "Изключете това, за да пишете текст, без да го изпращате."
-    },
-    "wait": {
-      "pattern": "Изчакайте, докато изходът съдържа",
-      "patternPlaceholder": "парола:",
-      "timeout": "Откажи се след",
-      "onTimeout": "Ако никога не се появи",
-      "stop": "Спиране на макроса",
-      "continue": "Продължавай все пак"
-    },
-    "delay": {
-      "duration": "Изчакайте"
-    },
-    "ifStep": {
-      "pattern": "Ако изходът съдържа",
-      "patternPlaceholder": "Активен: активен (работи)",
-      "then": "Тогава направете това",
-      "else": "В противен случай направете това",
-      "emptyBranch": "Без стъпала"
-    },
-    "repeat": {
-      "count": "Брой пъти",
-      "times": "пъти"
-    },
-    "match": {
-      "useRegex": "Съвпадение с регулярен израз",
-      "useRegexHelp": "Не включвайте това, за да съвпада текстът точно както е написан.",
-      "invalidRegex": "Не е валиден регулярен израз, ще бъде съпоставен като обикновен текст"
-    },
-    "seconds": "секунди",
-    "secondsShort": "{{count}}с"
-  },
-  "errors": {
-    "remoteServerRequired": "Изисква се отдалечен сървър. Свържете се с отдалечен сървър в „Настройки“, за да използвате този тип връзка."
-  },
-  "plugin": {
-    "name": "SSH терминал"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/bn_BD.json b/plugins/ssh-terminal/locales/translated/bn_BD.json
deleted file mode 100644
index fcc9ffe2a..000000000
--- a/plugins/ssh-terminal/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "যোগ করুন",
-    "arrowDown": "অ্যারো ডাউন",
-    "arrowLeft": "বাম তীর",
-    "arrowRight": "ডান তীরচিহ্ন",
-    "arrowUp": "তীর ঊর্ধ্বমুখী",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "ডেল",
-    "done": "সম্পন্ন হয়েছে",
-    "editQuickKeys": "দ্রুত কী সম্পাদনা করুন",
-    "end": "শেষ",
-    "esc": "এস্ক",
-    "home": "হোম",
-    "pageDown": "পিজিডিএন",
-    "pageUp": "পিজিআপ",
-    "paste": "পেস্ট",
-    "quickKeyPlaceholder": "যেমন sudo ",
-    "quickKeysDesc": "মুছে ফেলতে × চাপুন। সর্বোচ্চ ৮টি অক্ষর সমর্থন করে।",
-    "quickKeysTitle": "দ্রুত চাবি",
-    "removeQuickKey": "অপসারণ করুন",
-    "resetDefaults": "ডিফল্টে রিসেট করুন",
-    "shift": "শিফট",
-    "tab": "ট্যাব"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "অটো-টিমাক্স সক্রিয় করতে ব্যর্থ হয়েছে",
-    "autoTmuxEnabled": "{{host}}এর জন্য অটো-টিমাক্স সক্রিয় করা হয়েছে। এটি পরবর্তী সংযোগ থেকে প্রযোজ্য হবে।",
-    "clipboardHttpWarning": "ক্লিপবোর্ডটি পড়া যায়নি। কিছু ব্রাউজার HTTPS-এর বাইরে ক্লিপবোর্ড অ্যাক্সেস সীমাবদ্ধ করে - এর পরিবর্তে Ctrl+V ব্যবহার করে দেখুন, অথবা HTTPS-এর মাধ্যমে Termix পরিবেশন করুন।",
-    "closeTab": "বন্ধ করুন",
-    "connecting": "সংযোগ স্থাপন...",
-    "connectionLost": "সংযোগ বিচ্ছিন্ন",
-    "connectionRejected": "সার্ভার কর্তৃক সংযোগ প্রত্যাখ্যাত হয়েছে। অনুগ্রহ করে আপনার প্রমাণীকরণ এবং নেটওয়ার্ক কনফিগারেশন যাচাই করুন।",
-    "connectionTimeout": "সংযোগের সময়সীমা শেষ",
-    "enableAutoTmuxAction": "অটো-Tmux সক্রিয় করুন",
-    "hostKeyRejected": "SSH হোস্ট কী যাচাইকরণ প্রত্যাখ্যাত হয়েছে। সংযোগ বাতিল করা হয়েছে।",
-    "linkDialogCopy": "অনুলিপি",
-    "linkDialogOpen": "খোলা",
-    "linkDialogTitle": "লিঙ্ক খুলুন",
-    "maxReconnectAttemptsReached": "পুনঃসংযোগের সর্বোচ্চ প্রচেষ্টা শেষ হয়েছে",
-    "noHostSelected": "কোন হোস্ট নির্বাচন করা হয়নি",
-    "passwordPromptFillTitle": "সংরক্ষিত পাসওয়ার্ডটি এই প্রম্পটে পূরণ করবেন?",
-    "reconnect": "পুনরায় সংযোগ করুন",
-    "reconnected": "সফলভাবে পুনরায় সংযুক্ত হয়েছে",
-    "reconnecting": "পুনরায় সংযোগ স্থাপন করা হচ্ছে... ({{attempt}}/{{max}})",
-    "autoReconnecting": "সংযোগ বিচ্ছিন্ন, পুনরায় সংযোগ করা হচ্ছে...",
-    "searchCaseSensitive": "দেশলাইয়ের বাক্স",
-    "searchClose": "বন্ধ করুন (পলায়ন)",
-    "searchNext": "পরবর্তী ম্যাচ (প্রবেশ করুন)",
-    "searchNoResults": "কোন ফলাফল নেই",
-    "searchPlaceholder": "খুঁজুন",
-    "searchPrevious": "পূর্ববর্তী ম্যাচ (Shift+Enter)",
-    "searchRegex": "রেগুলার এক্সপ্রেশন ব্যবহার করুন",
-    "searchResultCount": "{{index}} এর {{count}}",
-    "searchWholeWord": "সম্পূর্ণ শব্দ মেলান",
-    "sessionExpiredNotice": "{{host}} -এ আপনার পূর্ববর্তী সেশনটি {{minutes}} মিনিট পর সংযোগ বিচ্ছিন্ন হয়ে মেয়াদোত্তীর্ণ হয়েছে; শেল এবং এর মধ্যে চলমান সবকিছু চলে গেছে। সেশনগুলো সচল রাখতে এই হোস্টে অটো-টিমাক্স (Auto-Tmux) সক্রিয় করুন।",
-    "sessionExpiredNoticeNoMinutes": "{{host}} -এ আপনার পূর্ববর্তী সেশনটি সংযোগ বিচ্ছিন্ন থাকাকালীন মেয়াদোত্তীর্ণ হয়ে গেছে; শেল এবং এর মধ্যে চলমান সবকিছু মুছে গেছে। সেশনগুলো সচল রাখতে এই হোস্টে অটো-টিমাক্স (Auto-Tmux) সক্রিয় করুন।",
-    "sessionTakenOver": "সেশনটি অন্য একটি ট্যাবে খোলা হয়েছিল। পুনরায় সংযোগ করা হচ্ছে...",
-    "tmuxAttached": "সংযুক্ত ক্লায়েন্ট",
-    "tmuxAttachedCount": "{{count}} সংযুক্ত",
-    "tmuxCopyHint": "নির্বাচনটি ঠিক করুন এবং ক্লিপবোর্ডে কপি করতে এন্টার চাপুন।",
-    "tmuxCreateNew": "নতুন সেশন শুরু করুন",
-    "tmuxDetached": "tmux সেশন থেকে বিচ্ছিন্ন",
-    "tmuxLastActivity": "শেষ কার্যকলাপ",
-    "tmuxSessionAttached": "tmux সেশন সংযুক্ত হয়েছে: {{name}}",
-    "tmuxSessionCreated": "tmux সেশন তৈরি হয়েছে: {{name}}",
-    "tmuxSessionPickerDesc": "এই হোস্টে বিদ্যমান tmux সেশন পাওয়া গেছে। পুনরায় সংযুক্ত হতে বা একটি নতুন সেশন তৈরি করতে যেকোনো একটি নির্বাচন করুন।",
-    "tmuxSessionPickerTitle": "tmux সেশন",
-    "tmuxTimeDays": "{{count}}দিন আগে",
-    "tmuxTimeHours": "{{count}}ঘণ্টা আগে",
-    "tmuxTimeJustNow": "এইমাত্র",
-    "tmuxTimeMinutes": "{{count}}মিনিট আগে",
-    "tmuxUnavailable": "রিমোট হোস্টে tmux ইনস্টল করা নেই, তাই স্ট্যান্ডার্ড শেল ব্যবহার করা হচ্ছে।",
-    "tmuxWindowCount": "{{count}} জানালা",
-    "tmuxWindows": "উইন্ডোজ",
-    "unknownError": "অজানা ত্রুটি ঘটেছে",
-    "websocketAbnormalClose": "সংযোগটি অপ্রত্যাশিতভাবে বন্ধ হয়ে গেছে। এটি রিভার্স প্রক্সি বা SSL কনফিগারেশন সংক্রান্ত সমস্যার কারণে হতে পারে। অনুগ্রহ করে সার্ভার লগ পরীক্ষা করুন।",
-    "websocketError": "ওয়েবসকেট সংযোগ ত্রুটি",
-    "clipboardReadFailed": "ক্লিপবোর্ড থেকে পড়তে ব্যর্থ হয়েছে। নিশ্চিত করুন যে ক্লিপবোর্ডের অনুমতি দেওয়া আছে।",
-    "clipboardWriteFailed": "ক্লিপবোর্ডে কপি করা সম্ভব হয়নি। নিশ্চিত করুন যে পৃষ্ঠাটি HTTPS বা লোকালহোস্টের মাধ্যমে পরিবেশিত হচ্ছে।",
-    "connected": "সংযুক্ত",
-    "totpCodeLabel": "যাচাইকরণ কোড",
-    "duplicateTab": "ডুপ্লিকেট ট্যাব",
-    "imageChooseFile": "একটি ইমেজ ফাইল নির্বাচন করুন",
-    "imageUploaded": "ছবি আপলোড করা হয়েছে: {{path}}",
-    "imageClipboardUnavailable": "এই ব্রাউজারটি ক্লিপবোর্ড থেকে ছবি পড়তে পারে না।",
-    "imageClipboardEmpty": "ক্লিপবোর্ডে কোনো ছবি পাওয়া যায়নি।",
-    "localShell": "স্থানীয় টার্মিনাল শেল",
-    "autocompleteHintComplete": "সম্পূর্ণ করতে ট্যাব বা এন্টার চাপুন",
-    "autocompleteHintNavigate": "↑↓ নেভিগেট করতে",
-    "autocompleteHintClose": "বন্ধ করতে Esc চাপুন"
-  },
-  "terminalToolbar": {
-    "detachTmux": "tmux বিচ্ছিন্ন করুন",
-    "detachTmuxDescription": "tmux সেশন বিচ্ছিন্ন করুন",
-    "dismissError": "ছবির ত্রুটি খারিজ করুন",
-    "hideToolbar": "টুলবার লুকান",
-    "image": "ছবির কার্যকলাপ (শুধুমাত্র ছবি)",
-    "imageActionFailed": "ছবির অ্যাকশন ব্যর্থ হয়েছে",
-    "layout": "টুলবার প্রদর্শন মোড",
-    "layoutExpanded": "মেট্রিক্স দিয়ে প্রসারিত",
-    "layoutIcon": "শুধুমাত্র আইকন",
-    "layoutLabeled": "আইকন এবং লেবেল",
-    "moveToolbar": "টুলবার সরান",
-    "moveToolbarHint": "টুলবারের অবস্থান পরিবর্তন করতে টেনে আনুন",
-    "paste": "ছবি পেস্ট করুন",
-    "pasteImage": "ক্লিপবোর্ড থেকে ছবি পেস্ট করুন (শুধুমাত্র ছবি)",
-    "retry": "পুনরায় চেষ্টা করুন",
-    "showToolbar": "টুলবার প্রসারিত করুন",
-    "upload": "ছবি আপলোড করুন",
-    "uploadImage": "হোস্টে একটি ছবি আপলোড করুন",
-    "uploadingImage": "আপলোড হচ্ছে..."
-  },
-  "history": {
-    "noTerminalSelected": "কোন টার্মিনাল নির্বাচন করা হয়নি",
-    "noTerminalSelectedHint": "এর কমান্ড হিস্ট্রি দেখতে একটি SSH টার্মিনাল ট্যাব খুলুন।",
-    "searchPlaceholder": "অনুসন্ধানের ইতিহাস...",
-    "clearAll": "সব পরিষ্কার করুন",
-    "noHistoryEntries": "ইতিহাসের কোন এন্ট্রি নেই",
-    "trackingDisabled": "ইতিহাস ট্র্যাকিং নিষ্ক্রিয় করা হয়েছে",
-    "trackingDisabledHint": "এই হোস্টের SSH টার্মিনাল ট্যাবে কমান্ড হিস্ট্রি চালু করুন।",
-    "commandCount_one": "{{count}} কমান্ড",
-    "commandCount_other": "{{count}} কমান্ড"
-  },
-  "touchInput": {
-    "enabled": "টাচ ইনপুট সক্রিয় করুন",
-    "enabledDesc": "টার্মিনালে এক আঙুলের স্পর্শে স্ক্রোলিং করার অনুমতি দিন",
-    "momentumEnabled": "গতি সঞ্চার করুন",
-    "momentumEnabledDesc": "সোয়াইপ করার পর কিছুক্ষণ স্ক্রোল করতে থাকুন।",
-    "advanced": "উন্নত",
-    "resetDefaults": "ডিফল্টে রিসেট করুন",
-    "dragThreshold": "ড্র্যাগ থ্রেশহোল্ড",
-    "maxWheelDelta": "সর্বোচ্চ চাকার ডেল্টা",
-    "momentumSampleWindow": "ভরবেগ নমুনা উইন্ডো",
-    "releaseGracePeriod": "মুক্তির জন্য অতিরিক্ত সময়সীমা",
-    "minimumVelocity": "সর্বনিম্ন বেগ",
-    "maximumVelocity": "সর্বোচ্চ বেগ",
-    "maximumDuration": "সর্বোচ্চ সময়কাল",
-    "maximumTravel": "সর্বোচ্চ ভ্রমণ",
-    "decayTime": "ক্ষয়ের সময়",
-    "pixelsPerTick": "প্রতি টিক পিক্সেল",
-    "maximumFrameInterval": "সর্বোচ্চ ফ্রেম ব্যবধান",
-    "maximumTicksPerFrame": "প্রতি ফ্রেমে সর্বোচ্চ টিক"
-  },
-  "imageStorage": {
-    "instanceId": "টার্মিনাল সেশন ইনস্ট্যান্স আইডি",
-    "instanceIdDesc": "আপনার সংযুক্ত টার্মিনাল ট্যাবগুলোর একটির ইনস্ট্যান্স আইডি, যা দৃশ্যমানতা পরীক্ষা করতে ব্যবহৃত হয়।",
-    "selectedModeUnavailable": "অনুপলব্ধ",
-    "test": "পরীক্ষা",
-    "testing": "পরীক্ষা চলছে...",
-    "testFailed": "ইমেজ স্টোরেজ পরীক্ষা করতে ব্যর্থ হয়েছে",
-    "testConnected": "টার্মিনাল সেশন সংযুক্ত আছে।",
-    "testNotConnected": "এই ইনস্ট্যান্স আইডির সাথে কোনো সংযুক্ত টার্মিনাল সেশন নেই।",
-    "testSelectedMode": "আপলোড করতে ব্যবহৃত হবে: {{mode}}",
-    "testLocalVisible": "সংযুক্ত হোস্ট থেকে স্থানীয় ডিরেক্টরিটি দেখা যায়।",
-    "testLocalNotVisible": "সংযুক্ত হোস্ট থেকে স্থানীয় ডিরেক্টরিটি দেখা যাচ্ছে না।"
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "টাচ ইনপুট",
-        "images": "ইমেজ স্টোরেজ",
-        "sessions": "অধিবেশন",
-        "newHosts": "নতুন হোস্ট"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "টার্মিনাল সেশন স্থায়িত্ব",
-        "description": "একটি সংযোগ বিচ্ছিন্ন টার্মিনাল বন্ধ হওয়ার আগে সার্ভারে কতক্ষণ চালু রাখা হয়। সর্বনিম্ন ১, সর্বোচ্চ ১৪৪০ মিনিট। যে সেশনগুলোকে এই সময়ের চেয়ে বেশি সময় ধরে চালু রাখতে হবে, সেগুলোর জন্য হোস্টে অটো-টিমাক্স (Auto-Tmux) সক্রিয় করুন।"
-      },
-      "commandHistoryEnabled": {
-        "label": "কমান্ডের ইতিহাস",
-        "description": "কমান্ড হিস্ট্রি রেকর্ডিংয়ের অনুমতি দিন। এটি নিষ্ক্রিয় করা থাকলে, হোস্ট-ভিত্তিক সেটিংস নির্বিশেষে হিস্ট্রি সংরক্ষিত হয় না।"
-      },
-      "commandHistoryForNewHosts": {
-        "label": "নতুন হোস্টের জন্য কমান্ডের ইতিহাস",
-        "description": "নতুন হোস্টগুলো কমান্ড হিস্ট্রি চালু রেখে শুরু হবে কিনা।"
-      },
-      "imageStorageMode": {
-        "label": "স্টোরেজ মোড",
-        "description": "যেখানে পেস্ট করা এবং আপলোড করা টার্মিনাল ইমেজগুলো লেখা হয়। কানেকশন অনুযায়ী অটো পিক, লোকাল এবং রিমোট (SFTP) নির্দিষ্ট করা আছে।",
-        "auto": "অটো",
-        "local": "স্থানীয়",
-        "remoteSftp": "রিমোট (এসএফটিপি)"
-      },
-      "imageLocalDir": {
-        "label": "স্থানীয় ডিরেক্টরি",
-        "description": "টারমিক্স ব্যাকএন্ডের পরম পাথ যেখানে লোকাল মোড ইমেজগুলো লেখে। সেভ করার পর এটি আর দেখানো হয় না। খালি থাকলে TERMIX_IMAGE_DIR ব্যবহৃত হয়।"
-      },
-      "imageHostPath": {
-        "label": "হোস্ট পাথ",
-        "description": "লোকাল ডিরেক্টরির হোস্ট-সাইড ভিউ, যা টার্মিনাল এজেন্টরা গ্রহণ করে।"
-      },
-      "imageTtlMs": {
-        "label": "টিটিএল (মিলিসেকেন্ড)",
-        "description": "আপলোড করা একটি ছবি কতক্ষণ রাখা হয়, তা মিলিসেকেন্ডে পরিমাপ করা হয়। খালি থাকলে TERMIX_IMAGE_TTL_MS বা এক ঘণ্টা সময় লাগে।"
-      },
-      "imageMaxCount": {
-        "label": "সর্বোচ্চ ছবির সংখ্যা",
-        "description": "অধিকাংশ ছবি একসাথে রাখা হয়। খালি থাকলে TERMIX_MAX_IMAGE_COUNT বা 100 ব্যবহৃত হয়।"
-      },
-      "imageMaxBytes": {
-        "label": "সর্বোচ্চ স্টোরেজ বাইট",
-        "description": "একসাথে সর্বাধিক সংখ্যক বাইট ইমেজ সংরক্ষণ করা হয়। খালি অবস্থায় TERMIX_MAX_IMAGE_STORAGE_BYTES বা ৫ GiB ব্যবহৃত হয়।"
-      },
-      "sessionPersistence": {
-        "label": "সংযোগ বিচ্ছিন্ন হওয়ার পরেও সেশনগুলি রাখুন",
-        "description": "উপরে উল্লিখিত সময় পর্যন্ত সার্ভারে একটি সংযোগ বিচ্ছিন্ন টার্মিনাল চালু রাখুন, যাতে এর ট্যাবটি পুনরায় খুললে আগের জায়গা থেকেই আবার শুরু করা যায়।"
-      },
-      "newHostAutoTmux": {
-        "label": "অটো-টিমাক্স",
-        "description": "নতুন হোস্টের টার্মিনালগুলো tmux-এর ভিতরে চালান, যাতে সংযোগ বিচ্ছিন্ন হলেও সেশনগুলো টিকে থাকে (এর জন্য হোস্টে tmux থাকা প্রয়োজন)।"
-      },
-      "newHostTheme": {
-        "label": "নতুন হোস্টদের জন্য থিম",
-        "description": "নতুন হোস্ট যে টার্মিনাল থিম দিয়ে চালু হয়।"
-      },
-      "newHostFontFamily": {
-        "label": "নতুন হোস্টদের জন্য ফন্ট",
-        "description": "নতুন হোস্ট যে টার্মিনাল ফন্ট দিয়ে শুরু করে।"
-      },
-      "newHostFontSize": {
-        "label": "নতুন হোস্টদের জন্য ফন্টের আকার",
-        "description": "নতুন হোস্টের ক্ষেত্রে টার্মিনালের ফন্ট সাইজ যা দিয়ে শুরু হয়, পিক্সেলে।"
-      },
-      "newHostCursorStyle": {
-        "label": "নতুন হোস্টদের জন্য কার্সার স্টাইল"
-      },
-      "newHostCursorBlink": {
-        "label": "নতুন হোস্টদের জন্য মিটমিট করা কার্সার"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "টার্মিনাল টুলবার সক্রিয় করুন",
-        "description": "এই হোস্টের টুলস এবং লাইভ পরিসংখ্যানের জন্য সক্রিয় টার্মিনালে ডক করা একটি কুইক-অ্যাক্সেস টুলবার দেখান।"
-      },
-      "terminalToolbarPosition": {
-        "label": "টুলবারের অবস্থান",
-        "description": "টার্মিনালে টুলবারটি যেখানে থাকে। আপনি সেখান থেকেও এটিকে টেনে নিয়ে যেতে পারেন।",
-        "bottom": "নীচের কেন্দ্র",
-        "bottomLeft": "নিচের বাম দিকে",
-        "bottomRight": "নিচের ডানদিকে",
-        "top": "উপরের কেন্দ্র",
-        "topLeft": "উপরের বাম দিকে",
-        "topRight": "উপরের ডানদিকে"
-      },
-      "terminalToolbarStartState": {
-        "label": "টুলবার শুরুর অবস্থা",
-        "description": "টার্মিনাল সংযোগ করার সময় টুলবারটি প্রসারিত অবস্থায় খোলে নাকি সংকুচিত অবস্থায় খোলে",
-        "expanded": "সম্প্রসারিত",
-        "collapsed": "ন্যূনতম করা হয়েছে"
-      },
-      "terminalToolbarDisplay": {
-        "label": "টুলবার প্রদর্শন মোড",
-        "description": "টুলবার বাটনগুলো যেভাবে দেখানো হয়। লাস্ট ইউজড (Last Used) টুলবারে আপনার বাছাই করা বিষয়গুলোই রাখে।",
-        "remember": "সর্বশেষ ব্যবহৃত",
-        "icon": "শুধুমাত্র আইকন",
-        "labeled": "আইকন এবং লেবেল",
-        "expanded": "পরিসংখ্যান দিয়ে প্রসারিত"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "লাইভ পরিসংখ্যান দেখান",
-        "description": "এক্সপান্ডেড মোডে টুলবার বাটনগুলোর উপরে লাইভ হোস্টের পরিসংখ্যান দেখান।"
-      },
-      "terminalToolbarFade": {
-        "label": "নিষ্ক্রিয় অবস্থায় ম্লান হয়ে যায়",
-        "description": "টুলবারটি ধীরে ধীরে মিলিয়ে যেতে থাকবে যতক্ষণ না আপনি এর উপর মাউস নিয়ে যান।"
-      },
-      "enableCommandHistory": {
-        "label": "কমান্ডের ইতিহাস",
-        "description": "ইতিহাস এবং স্বয়ংক্রিয় সম্পূর্ণতার জন্য এই টার্মিনালে চালানো কমান্ডগুলো রেকর্ড করুন।"
-      },
-      "enableTerminal": {
-        "label": "টার্মিনাল সক্রিয় করুন",
-        "description": "এই হোস্টের জন্য একটি SSH টার্মিনাল অফার করুন।"
-      },
-      "inheritAppearance": {
-        "label": "ব্যবহারকারীর ডিফল্ট ব্যবহার করুন"
-      },
-      "theme": {
-        "label": "থিম"
-      },
-      "cursorBlink": {
-        "label": "মিটমিট করা কার্সার"
-      },
-      "cursorStyle": {
-        "label": "কার্সার শৈলী"
-      },
-      "fontSize": {
-        "label": "ফন্টের আকার"
-      },
-      "fontFamily": {
-        "label": "ফন্ট"
-      },
-      "scrollback": {
-        "label": "স্ক্রোলব্যাক"
-      },
-      "letterSpacing": {
-        "label": "চিঠির ব্যবধান"
-      },
-      "lineHeight": {
-        "label": "লাইনের উচ্চতা"
-      },
-      "bellStyle": {
-        "label": "বেল"
-      },
-      "minimumContrastRatio": {
-        "label": "সর্বনিম্ন বৈসাদৃশ্য অনুপাত"
-      },
-      "backgroundImage": {
-        "label": "পটভূমির ছবি"
-      },
-      "backgroundImageOpacity": {
-        "label": "পটভূমির ছবির অস্বচ্ছতা"
-      },
-      "customThemeColors": {
-        "label": "কাস্টম থিম রং"
-      },
-      "rightClickSelectsWord": {
-        "label": "ডান ক্লিক করলে শব্দ নির্বাচিত হয়।"
-      },
-      "macOptionIsMeta": {
-        "label": "বিকল্পটি মেটা"
-      },
-      "fastScrollModifier": {
-        "label": "দ্রুত স্ক্রোল কী"
-      },
-      "fastScrollSensitivity": {
-        "label": "দ্রুত স্ক্রোল গতি"
-      },
-      "backspaceMode": {
-        "label": "ব্যাকস্পেস"
-      },
-      "autoMosh": {
-        "label": "অটো মোশ"
-      },
-      "moshCommand": {
-        "label": "মোশ কমান্ড"
-      },
-      "autoTmux": {
-        "label": "অটো টিএমইউএক্স"
-      },
-      "useSSHTitle": {
-        "label": "SSH শিরোনাম ব্যবহার করুন"
-      },
-      "syntaxHighlighting": {
-        "label": "সিনট্যাক্স হাইলাইটিং"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "সিনট্যাক্স হাইলাইটিং বিভাগগুলি"
-      },
-      "linkClickBehavior": {
-        "label": "লিঙ্কে ক্লিক করুন"
-      },
-      "localEcho": {
-        "label": "স্থানীয় প্রতিধ্বনি"
-      },
-      "passwordPromptAutoFill": {
-        "label": "পাসওয়ার্ড প্রম্পট পূরণ করার প্রস্তাব"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "sudo প্রম্পটগুলি পূরণ করুন"
-      },
-      "autoReconnect": {
-        "label": "স্বয়ংক্রিয়ভাবে পুনরায় সংযোগ করুন"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "কমান্ড অটোকমপ্লিট",
-        "description": "টাইপ করার সময় ট্যাব চাপলে অটোকমপ্লিট দেখান।"
-      },
-      "localEcho": {
-        "label": "স্থানীয় প্রতিধ্বনি",
-        "description": "নিরাপদ স্থানীয় কীস্ট্রোক পূর্বাভাস ব্যবহার করে অনুভূত ইনপুট লেটেন্সি হ্রাস করুন"
-      },
-      "linkClickBehavior": {
-        "label": "টার্মিনাল লিঙ্ক ক্লিক",
-        "description": "টার্মিনালে লিঙ্কে ক্লিক করার সময় ডিফল্ট আচরণ"
-      },
-      "customThemes": {
-        "label": "সংরক্ষিত থিম"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "স্থানীয় টার্মিনাল"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "লাইভ টার্মিনাল সেশন ব্যবহার করুন",
-      "description": "সেশন শেয়ারিং এবং রেকর্ডিং-এর মতো অন্যান্য ফিচারগুলোকে আপনার লাইভ টার্মিনাল সেশনগুলোতে অ্যাক্সেস করতে দিন।"
-    },
-    "history": {
-      "title": "কমান্ডের ইতিহাস পড়ুন",
-      "description": "এআই অ্যাসিস্ট্যান্টের মতো অন্যান্য ফিচারকে আপনার কমান্ড হিস্ট্রি পড়তে দিন।"
-    }
-  },
-  "hosts": {
-    "tabTerminal": "টার্মিনাল",
-    "addHost": "হোস্ট যোগ করুন",
-    "applyGlobalThemeTooltip": "এই থিমটি প্রয়োগ করুন",
-    "backgroundImageDesc": "টার্মিনালের ব্যাকগ্রাউন্ড ছবির জন্য ঐচ্ছিক ইউআরএল",
-    "backgroundImageLabel": "পটভূমির ছবির ইউআরএল",
-    "backgroundImageOpacityLabel": "পটভূমির ছবির অস্বচ্ছতা",
-    "backspaceMode": "ব্যাকস্পেস মোড",
-    "backspaceModeControlH": "নিয়ন্ত্রণ-এইচ (বিএস)",
-    "backspaceModeLabel": "ব্যাকস্পেস মোড",
-    "backspaceModeNormal": "স্বাভাবিক (ডেল)",
-    "behaviorAndAdvanced": "আচরণ ও উন্নত",
-    "bellStyle": "বেল স্টাইল",
-    "bellStyleBoth": "উভয়",
-    "bellStyleLabel": "বেল স্টাইল",
-    "bellStyleNone": "কোনোটিই না",
-    "bellStyleSound": "শব্দ",
-    "bellStyleVisual": "চাক্ষুষ",
-    "colorTheme": "রঙের থিম",
-    "cursorBlink": "কার্সার ব্লিঙ্ক",
-    "cursorBlinking": "কার্সার মিটমিট করা",
-    "cursorBlinkingDesc": "টার্মিনাল কার্সরের জন্য ব্লিংকিং অ্যানিমেশন সক্রিয় করুন।",
-    "cursorStyle": "কার্সার স্টাইল",
-    "cursorStyleBar": "বার",
-    "cursorStyleBlock": "ব্লক",
-    "cursorStyleLabel": "কার্সার স্টাইল",
-    "cursorStyleUnderline": "আন্ডারলাইন",
-    "customThemeAnsiColors": "ANSI রং",
-    "customThemeBackground": "পটভূমি",
-    "customThemeBlack": "কালো",
-    "customThemeBlue": "নীল",
-    "customThemeBrightBlack": "উজ্জ্বল কালো",
-    "customThemeBrightBlue": "উজ্জ্বল নীল",
-    "customThemeBrightCyan": "উজ্জ্বল সায়ান",
-    "customThemeBrightGreen": "উজ্জ্বল সবুজ",
-    "customThemeBrightMagenta": "উজ্জ্বল ম্যাজেন্টা",
-    "customThemeBrightRed": "উজ্জ্বল লাল",
-    "customThemeBrightWhite": "উজ্জ্বল সাদা",
-    "customThemeBrightYellow": "উজ্জ্বল হলুদ",
-    "customThemeColors": "কাস্টম রঙ",
-    "customThemeCursor": "কার্সার",
-    "customThemeCursorAccent": "কার্সার অ্যাকসেন্ট",
-    "customThemeCyan": "সায়ান",
-    "customThemeForeground": "সম্মুখভাগ",
-    "customThemeGreen": "সবুজ",
-    "customThemeMagenta": "ম্যাজেন্টা",
-    "customThemeRed": "লাল",
-    "customThemeResetTooltip": "ডিফল্টে রিসেট করুন",
-    "customThemeSelection": "নির্বাচন",
-    "customThemeWhite": "সাদা",
-    "customThemeYellow": "হলুদ",
-    "deleteGlobalThemeTooltip": "এই থিমটি মুছে ফেলুন",
-    "docsLink": "নথি দেখুন",
-    "enableAutoMosh": "অটো-মোশ সক্রিয় করুন",
-    "enableAutoMoshDesc": "উপলব্ধ থাকলে SSH-এর চেয়ে Mosh ব্যবহার করা শ্রেয়।",
-    "enableAutoTmux": "অটো-Tmux সক্রিয় করুন",
-    "enableAutoTmuxDesc": "সংযোগ বিচ্ছিন্ন হওয়া এবং ব্রাউজার পুনরায় চালু হওয়ার পরেও আপনার শেল এবং এর মধ্যে চলমান সবকিছু সচল রাখতে tmux-এর ভিতরে এটি চালান (tmux অবশ্যই হোস্টে ইনস্টল করা থাকতে হবে)।",
-    "fastScrollModifier": "দ্রুত স্ক্রোল মডিফায়ার",
-    "fastScrollModifierAlt": "বিকল্প",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "দ্রুত স্ক্রোল মডিফায়ার",
-    "fastScrollModifierShift": "শিফট",
-    "fastScrollSensitivity": "দ্রুত স্ক্রোল সংবেদনশীলতা",
-    "fastScrollSensitivityLabel": "দ্রুত স্ক্রোল সংবেদনশীলতা",
-    "fontFamily": "ফন্ট পরিবার",
-    "fontFamilyCustomHint": "বান্ডেল করা ফন্ট থেকে বেছে নিন, অথবা 'কাস্টম' (Custom) বিকল্পটি বেছে নিয়ে আপনার সিস্টেমে আগে থেকে ইনস্টল করা কোনো ফন্টের সঠিক নামটি টাইপ করুন (যেমন MesloLGS NF, Noto Sans Mono)। Termix আপনার জন্য ফন্ট ইনস্টল করতে পারে না, প্রথমে আপনার অপারেটিং সিস্টেমে এটি ইনস্টল করুন।",
-    "fontFamilyCustomOption": "কাস্টম...",
-    "fontFamilyCustomPlaceholder": "ফন্টের সঠিক নাম, যেমন MesloLGS NF",
-    "fontFamilyLabel": "ফন্ট পরিবার",
-    "fontSize": "ফন্ট সাইজ",
-    "fontSizeLabel": "ফন্ট সাইজ",
-    "hostNotFound": "হোস্ট খুঁজে পাওয়া যায়নি",
-    "letterSpacing": "চিঠির ব্যবধান",
-    "letterSpacingPx": "অক্ষরের ব্যবধান (পিক্সেল)",
-    "lineHeight": "লাইন উচ্চতা",
-    "lineHeightLabel": "লাইন উচ্চতা",
-    "linkClickBehaviorConfirm": "খুলতে বা কপি করতে পপআপ দেখান",
-    "linkClickBehaviorDesc": "টার্মিনালে কোনো লিঙ্কে ক্লিক করলে কী ঘটবে তা এটি নিয়ন্ত্রণ করে। অ্যাপ-স্তরের সেটিং অনুসরণ করতে 'ডিফল্ট' ব্যবহার করুন।",
-    "linkClickBehaviorDirect": "সরাসরি খুলুন",
-    "linkClickBehaviorLabel": "লিঙ্ক ক্লিকের আচরণ",
-    "loadingHost": "হোস্ট লোড হচ্ছে...",
-    "localEchoAuto": "স্বয়ংক্রিয়",
-    "localEchoDesc": "ধীরগতির সংযোগে স্থানীয়ভাবে নিরাপদ ও মুদ্রণযোগ্য কীস্ট্রোক অনুমান করুন। পাসওয়ার্ড প্রম্পট এবং কন্ট্রোল ইনপুট কখনও প্রতিধ্বনিত হয় না।",
-    "localEchoLabel": "স্থানীয় প্রতিধ্বনি",
-    "localEchoOff": "বন্ধ",
-    "localEchoOn": "সর্বদা চালু",
-    "macOptionIsMetaLabel": "অপশন কী মেটা পাঠায়",
-    "macOptionIsMetaShortDesc": "Meta পাঠানোর পরিবর্তে macOS-এ Option/Alt কী দিয়ে বিশেষ অক্ষর (যেমন @ বা |) টাইপ করা নিষ্ক্রিয় করুন।",
-    "moshCommand": "মোশ কমান্ড",
-    "moshCommandLabel": "মোশ কমান্ড",
-    "noSavedThemes": "এখনো কোনো থিম সংরক্ষণ করা হয়নি",
-    "none": "কোনোটিই না",
-    "passwordPromptAutoFillDesc": "টার্মিনাল পাসওয়ার্ড চাইলে সংরক্ষিত পাসওয়ার্ডটি পূরণ করার প্রস্তাব দিন। এই হোস্টে কোনো পাসওয়ার্ড স্বয়ংক্রিয়ভাবে পূরণ না করার জন্য এটি বন্ধ করুন।",
-    "passwordPromptAutoFillLabel": "পাসওয়ার্ড স্বয়ংক্রিয়ভাবে পূরণ করার সুবিধা",
-    "autoReconnectLabel": "স্বয়ংক্রিয় পুনঃসংযোগ",
-    "autoReconnectDesc": "SSH সংযোগ বিচ্ছিন্ন হয়ে গেলে, যেমন নেটওয়ার্কে সাময়িক সমস্যা বা স্লিপ মোডের পরে, এটি নিজে থেকেই পুনরায় সংযোগ স্থাপন করে। স্ক্রলব্যাকটি অক্ষুণ্ণ থাকে।",
-    "rightClickSelectsWord": "ডান ক্লিক করলে ওয়ার্ড নির্বাচিত হয়।",
-    "rightClickSelectsWordLabel": "ডান-ক্লিক করলে Word নির্বাচিত হয়।",
-    "rightClickSelectsWordShortDesc": "কার্সরের নিচে থাকা শব্দটি ডান-ক্লিক করে নির্বাচন করুন।",
-    "saveAsGlobalTheme": "গ্লোবাল থিম হিসেবে সংরক্ষণ করুন",
-    "saveGlobalThemeError": "থিম সংরক্ষণ করতে ব্যর্থ হয়েছে",
-    "saveGlobalThemeNamePrompt": "এই থিমের জন্য একটি নাম লিখুন",
-    "saveGlobalThemeSuccess": "থিম সংরক্ষিত",
-    "savedThemesLabel": "সংরক্ষিত থিম",
-    "scrollbackBufferLabel": "স্ক্রোলব্যাক বাফার",
-    "scrollbackMaxLines": "ইতিহাসে সংরক্ষিত সর্বাধিক সংখ্যক লাইন",
-    "sudoPasswordAutoFill": "সুডো পাসওয়ার্ড স্বয়ংক্রিয়ভাবে পূরণ",
-    "sudoPasswordAutoFillDesc": "একটি sudo পাসওয়ার্ড সংরক্ষণ করুন যাতে হোস্ট মেট্রিক্স, টার্মিনাল প্রম্পট এবং অন্যান্যরা স্বয়ংক্রিয়ভাবে বিশেষাধিকারপ্রাপ্ত কমান্ড চালাতে পারে।",
-    "sudoPasswordAutoFillLabel": "সুডো পাসওয়ার্ড স্বয়ংক্রিয়ভাবে পূরণ",
-    "syntaxCategoryIpAddresses": "আইপি ঠিকানা",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "লগ স্তর",
-    "syntaxCategoryLogLevelsDesc": "ত্রুটি, সতর্কীকরণ, তথ্য, ডিবাগ, মারাত্মক",
-    "syntaxCategoryNumbers": "লেবেলযুক্ত সংখ্যা",
-    "syntaxCategoryNumbersDesc": "পোর্ট ৮০৮০, প্রস্থান ১, অবস্থা ৪০৪",
-    "syntaxCategoryPaths": "ফাইল পাথ",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "টাইমস্ট্যাম্প",
-    "syntaxCategoryTimestampsDesc": "[১২:৩৪:৫৬], ২০২৪-০১-১৫",
-    "syntaxCategoryUrls": "ইউআরএল",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "টার্মিনাল আউটপুট রঙিন করুন (ত্রুটি, পাথ, আইপি, টাইমস্ট্যাম্প)",
-    "syntaxHighlightingLabel": "সিনট্যাক্স হাইলাইটিং",
-    "terminalAppearance": "টার্মিনাল চেহারা",
-    "theme": "থিম",
-    "themePreview": "থিম প্রিভিউ",
-    "useSSHTitleDesc": "হোস্ট নেমের পরিবর্তে শেলের উইন্ডো টাইটেল থেকে ট্যাব টাইটেলটি আপডেট করুন।",
-    "useSSHTitleLabel": "SSH উইন্ডোর শিরোনাম ব্যবহার করুন",
-    "enableTunnel": "টানেল সক্রিয় করুন",
-    "enableFileManager": "ফাইল ম্যানেজার সক্রিয় করুন",
-    "enableDocker": "ডকার সক্রিয় করুন",
-    "startupSnippet": "স্টার্টআপ স্নিপেট",
-    "quickActions": "দ্রুত পদক্ষেপ",
-    "proxmoxLastSyncStatus": {
-      "success": "সাফল্য"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} বাদ দেওয়া হয়েছে (কোন আইপি পাওয়া যায়নি)",
-    "proxmoxStatsUrlCopied": "Proxmox Stats URL ক্লিপবোর্ডে কপি করা হয়েছে",
-    "rdpUrlCopied": "RDP URL কপি করা হয়েছে",
-    "vncUrlCopied": "VNC URL কপি করা হয়েছে",
-    "filterAuthStepca": "স্টেপ সিএ",
-    "guac": {
-      "noCredential": "কোন পরিচয়পত্র নেই (সরাসরি পরিচয়পত্র নিচে দেওয়া হলো)",
-      "authTypeDirect": "সরাসরি",
-      "authTypeCredential": "শংসাপত্র",
-      "authTypeNone": "কোনোটিই না",
-      "recordingPath": "রেকর্ডিং পথ",
-      "recordingName": "রেকর্ডিং নাম",
-      "saveHostFirst": "প্রথমে হোস্টটি সংরক্ষণ করুন।",
-      "sharingOptionsAfterSave": "হোস্ট সংরক্ষণ করার পর শেয়ার করার বিকল্পগুলো পাওয়া যাবে।",
-      "permissionLevel": "অনুমতি স্তর",
-      "typeHeader": "প্রকার",
-      "targetHeader": "লক্ষ্য",
-      "permissionHeader": "অনুমতি",
-      "cancelBtn": "বাতিল করুন",
-      "savingBtn": "সঞ্চয়...",
-      "updateHostBtn": "হোস্ট আপডেট করুন",
-      "addHostBtn": "হোস্ট যোগ করুন"
-    },
-    "filterAuthVault": "ভল্ট"
-  },
-  "nav": {
-    "history": "ইতিহাস",
-    "localTerminal": "স্থানীয় টার্মিনাল",
-    "sshTools": "SSH টুলস",
-    "terminal": "টার্মিনাল",
-    "macros": "ম্যাক্রো"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "কীস্ট্রোক সম্প্রচার করতে এখানে টাইপ করুন...",
-    "copyOnSelect": "নির্বাচিত টেক্সট স্বয়ংক্রিয়ভাবে কপি করুন",
-    "enableRightClickCopyPaste": "ডান-ক্লিক কপি/পেস্ট সক্ষম করুন",
-    "fillPassword": "পাসওয়ার্ড পূরণ করুন",
-    "fillPasswordMissing": "{{count}} নির্বাচিত টার্মিনাল(গুলি)র জন্য কোনো সংরক্ষিত পাসওয়ার্ড নেই",
-    "fillPasswordSuccess": "{{count}} টার্মিনালে পাসওয়ার্ড পূরণ করা হয়েছে",
-    "keyRecordingTitle": "মূল রেকর্ডিং",
-    "noTerminalTabsOpen": "কোন টার্মিনাল ট্যাব খোলা নেই",
-    "recordToTerminals": "টার্মিনালে রেকর্ড",
-    "selectAll": "সব",
-    "selectNone": "কোনোটিই না",
-    "selectTerminalsAbove": "উপরের টার্মিনালগুলি নির্বাচন করুন",
-    "settingsTitle": "সেটিংস",
-    "startRecording": "রেকর্ডিং শুরু করুন",
-    "stopRecording": "রেকর্ডিং বন্ধ করুন"
-  },
-  "keybindings": {
-    "copy": "কপি নির্বাচন",
-    "paste": "পেস্ট",
-    "sendControlCode": "Ctrl+অক্ষর সংকেত পাঠান",
-    "sendText": "টেক্সট পাঠান",
-    "controlCodeLabel": "চিঠি",
-    "textLabel": "পাঠানোর জন্য টেক্সট",
-    "appendEnterLabel": "পাঠানোর পর এন্টার চাপুন",
-    "clipboardPermissionNote": "কিছু ব্রাউজারে প্রথমবার ব্যবহারের সময় ক্লিপবোর্ডের অনুমতি চাইতে পারে।",
-    "textRequired": "পাঠানোর জন্য টেক্সটটি লিখুন।",
-    "controlCodeRequired": "কন্ট্রোল কোডের জন্য একটি অক্ষর লিখুন।",
-    "builtIn": {
-      "copyCtrlC": "নির্বাচিত অংশ কপি করুন (Ctrl+C, শুধুমাত্র টেক্সট নির্বাচিত থাকলে)",
-      "copyCtrlShiftC": "নির্বাচিত অংশ কপি করুন (Ctrl+Shift+C)",
-      "copyCmdC": "নির্বাচিত অংশ কপি করুন (Cmd+C)",
-      "pasteCtrlShiftV": "ক্লিপবোর্ড থেকে পেস্ট করুন (Ctrl+Shift+V)",
-      "ctrlW": "শেল-এ যেতে Ctrl+W পাঠান (ব্রাউজার ট্যাব বন্ধ করা যাবে না)",
-      "ctrlT": "শেল-এ যেতে Ctrl+T পাঠান (ব্রাউজার ট্যাব খোলা ব্লক করা হয়েছে)",
-      "ctrlN": "শেল-এ Ctrl+N পাঠান (ব্রাউজার উইন্ডো খোলা ব্লক করা হয়েছে)",
-      "ctrlQ": "শেল-এ যেতে Ctrl+Q পাঠান (ব্রাউজার বন্ধ করা যাবে না)"
-    }
-  },
-  "macros": {
-    "title": "ম্যাক্রো",
-    "description": "টার্মিনালে সংরক্ষিত কমান্ডের একটি সিরিজ চালান এবং সার্ভার যা ফেরত পাঠায় তার উপর প্রতিক্রিয়া জানান।",
-    "target": "লক্ষ্য",
-    "noTerminal": "কোন টার্মিনাল খোলা নেই",
-    "empty": "এখনো কোনো ম্যাক্রো নেই",
-    "emptyHint": "টার্মিনালের কোনো কাজ, যেমন লগ ইন করা, কোনো সার্ভিস রিস্টার্ট করা বা প্রম্পটের উত্তর দেওয়া, স্বয়ংক্রিয় করতে একটি ম্যাক্রো তৈরি করুন।",
-    "create": "নতুন ম্যাক্রো",
-    "back": "ম্যাক্রোতে ফিরে যান",
-    "name": "নাম",
-    "namePlaceholder": "ওয়েব সার্ভার পুনরায় চালু করুন",
-    "nameRequired": "সংরক্ষণ করার আগে ম্যাক্রোটির একটি নাম দিন।",
-    "descriptionLabel": "বর্ণনা",
-    "descriptionPlaceholder": "এই ম্যাক্রোটি কী করে (ঐচ্ছিক)",
-    "unsaved": "সংরক্ষিত নয় এমন পরিবর্তন",
-    "save": "সংরক্ষণ করুন",
-    "saved": "ম্যাক্রো সংরক্ষিত",
-    "saveFailed": "ম্যাক্রোটি সংরক্ষণ করা যায়নি।",
-    "delete": "মুছে ফেলুন",
-    "deleteTitle": "এই ম্যাক্রোটি মুছে ফেলবেন?",
-    "deleteBody": "\"{{name}}\" স্থায়ীভাবে মুছে ফেলা হবে। এটি আর পূর্বাবস্থায় ফেরানো যাবে না।",
-    "deleted": "ম্যাক্রো মুছে ফেলা হয়েছে",
-    "cancel": "বাতিল করুন",
-    "run": "দৌড়",
-    "stop": "থামুন",
-    "running": "দৌড়াচ্ছে...",
-    "completed": "ম্যাক্রো শেষ হয়েছে",
-    "failed": "ম্যাক্রো ব্যর্থ হয়েছে",
-    "loadFailed": "ম্যাক্রো লোড করা যায়নি",
-    "needTerminal": "প্রথমে একটি টার্মিনাল খুলুন এবং সংযোগ করুন।",
-    "noSteps": "এই ম্যাক্রোতে এখনও কোনো ধাপ নেই। নিচে একটি যোগ করুন।",
-    "addStep": "ধাপ যোগ করুন",
-    "stepNumber": "ধাপ {{number}}",
-    "removeStep": "ধাপটি সরান",
-    "confirmRunTitle": "এই ম্যাক্রোটি চালাবেন?",
-    "confirmRunBody": "\"{{name}}\" {{host}} -এ কমান্ড পাঠাবে।",
-    "confirmRunAction": "ম্যাক্রো চালান",
-    "stepTypes": {
-      "send": {
-        "label": "কমান্ড পাঠান",
-        "help": "টার্মিনালে টেক্সট টাইপ করে, ঠিক যেন আপনি নিজেই টাইপ করেছেন।"
-      },
-      "wait": {
-        "label": "আউটপুটের জন্য অপেক্ষা করুন",
-        "help": "সার্ভার আপনার দেওয়া টেক্সটটি প্রিন্ট না করা পর্যন্ত এটি থেমে থাকে, অনেকটা পাসওয়ার্ড দেওয়ার সময়কার মতো।"
-      },
-      "delay": {
-        "label": "বিরতি",
-        "help": "পরবর্তী ধাপে যাওয়ার আগে একটি নির্দিষ্ট পরিমাণ সময় অপেক্ষা করে।"
-      },
-      "if": {
-        "label": "যদি আউটপুটে থাকে",
-        "help": "সার্ভার এ পর্যন্ত যা যা প্রিন্ট করেছে, তা যাচাই করে দুটি শাখার মধ্যে একটি চালায়।"
-      },
-      "repeat": {
-        "label": "পুনরাবৃত্তি",
-        "help": "এর ভেতরের ধাপগুলো একটি নির্দিষ্ট সংখ্যক বার চালায়।"
-      }
-    },
-    "send": {
-      "text": "কমান্ড বা টেক্সট",
-      "textPlaceholder": "systemctl restart nginx",
-      "pressEnter": "পাঠানোর পর এন্টার চাপুন",
-      "pressEnterHelp": "সাবমিট না করে টেক্সট টাইপ করতে এটি বন্ধ করুন।"
-    },
-    "wait": {
-      "pattern": "আউটপুটে থাকা পর্যন্ত অপেক্ষা করুন",
-      "patternPlaceholder": "পাসওয়ার্ড:",
-      "timeout": "হাল ছেড়ে দেওয়ার পর",
-      "onTimeout": "যদি এটি কখনও প্রদর্শিত না হয়",
-      "stop": "ম্যাক্রোটি বন্ধ করুন",
-      "continue": "তবুও এগিয়ে যান।"
-    },
-    "delay": {
-      "duration": "অপেক্ষা করুন"
-    },
-    "ifStep": {
-      "pattern": "যদি আউটপুটে থাকে",
-      "patternPlaceholder": "সক্রিয়: সক্রিয় (চলমান)",
-      "then": "তারপর এটা করুন",
-      "else": "অন্যথায় এটা করুন",
-      "emptyBranch": "কোন পদক্ষেপ নেই"
-    },
-    "repeat": {
-      "count": "সংখ্যা",
-      "times": "সময়"
-    },
-    "match": {
-      "useRegex": "রেগুলার এক্সপ্রেশনের সাথে মেলান",
-      "useRegexHelp": "লেখাটির সাথে হুবহু মিল রাখতে এটি বাদ দিন।",
-      "invalidRegex": "এটি একটি বৈধ রেগুলার এক্সপ্রেশন নয়, এটিকে সাধারণ টেক্সট হিসেবে মেলানো হবে।"
-    },
-    "seconds": "সেকেন্ড",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "রিমোট সার্ভার প্রয়োজন। এই সংযোগের ধরণটি ব্যবহার করতে সেটিংস-এ একটি রিমোট সার্ভার সংযুক্ত করুন।"
-  },
-  "plugin": {
-    "name": "এসএসএইচ টার্মিনাল"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/ca_ES.json b/plugins/ssh-terminal/locales/translated/ca_ES.json
deleted file mode 100644
index d2d741114..000000000
--- a/plugins/ssh-terminal/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Afegeix",
-    "arrowDown": "Fletxa avall",
-    "arrowLeft": "Fletxa esquerra",
-    "arrowRight": "Fletxa dreta",
-    "arrowUp": "Fletxa amunt",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Eliminar",
-    "done": "Fet",
-    "editQuickKeys": "Edita les tecles ràpides",
-    "end": "Final",
-    "esc": "Esc",
-    "home": "Inici",
-    "pageDown": "Av Pàg",
-    "pageUp": "Re Pàg",
-    "paste": "Enganxa",
-    "quickKeyPlaceholder": "p. ex. sudo ",
-    "quickKeysDesc": "Toca × per eliminar. Admet fins a 8 caràcters.",
-    "quickKeysTitle": "Tecles ràpides",
-    "removeQuickKey": "Elimina",
-    "resetDefaults": "Restableix els valors predeterminats",
-    "shift": "Majúscules",
-    "tab": "Pestanya"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "No s'ha pogut habilitar Auto-Tmux",
-    "autoTmuxEnabled": "Auto-Tmux habilitat per a {{host}}. S'aplica a partir de la següent connexió.",
-    "clipboardHttpWarning": "No s'ha pogut llegir el porta-retalls. Alguns navegadors restringeixen l'accés al porta-retalls fora d'HTTPS; proveu Ctrl+V o serviu Termix a través d'HTTPS.",
-    "closeTab": "Tanca",
-    "connecting": "Connectant...",
-    "connectionLost": "Connexió perduda",
-    "connectionRejected": "Connexió rebutjada pel servidor. Si us plau, comproveu l'autenticació i la configuració de xarxa.",
-    "connectionTimeout": "Temps d'espera de connexió",
-    "enableAutoTmuxAction": "Activa la transmissió automàtica",
-    "hostKeyRejected": "Verificació de la clau de l'amfitrió SSH rebutjada. Connexió cancel·lada.",
-    "linkDialogCopy": "Còpia",
-    "linkDialogOpen": "Obre",
-    "linkDialogTitle": "Obre l'enllaç",
-    "maxReconnectAttemptsReached": "S'ha arribat al màxim d'intents de reconnexió",
-    "noHostSelected": "No s'ha seleccionat cap amfitrió",
-    "passwordPromptFillTitle": "Voleu introduir la contrasenya desada en aquesta sol·licitud?",
-    "reconnect": "Reconnecta",
-    "reconnected": "S'ha reconnectat correctament",
-    "reconnecting": "Reconnectant... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Connexió perduda, s'està tornant a connectar...",
-    "searchCaseSensitive": "Coincideix amb el cas",
-    "searchClose": "Tanca (Escapada)",
-    "searchNext": "Pròxima coincidència (Intro)",
-    "searchNoResults": "Sense resultats",
-    "searchPlaceholder": "Troba",
-    "searchPrevious": "Coincidència anterior (Maj+Intro)",
-    "searchRegex": "Utilitza l'expressió regular",
-    "searchResultCount": "{{index}} de {{count}}",
-    "searchWholeWord": "Coincideix amb la paraula sencera",
-    "sessionExpiredNotice": "La sessió anterior a {{host}} ha caducat després de {{minutes}} minuts de desconnexió; l'intèrpret d'ordres i tot el que s'hi executa ha desaparegut. Activeu Auto-Tmux en aquest amfitrió per mantenir les sessions actives.",
-    "sessionExpiredNoticeNoMinutes": "La sessió anterior a {{host}} ha caducat mentre estava desconnectada; l'intèrpret d'ordres i tot el que s'hi executa ha desaparegut. Activeu Auto-Tmux en aquest host per mantenir les sessions actives.",
-    "sessionTakenOver": "La sessió s'ha obert en una altra pestanya. S'està tornant a connectar...",
-    "tmuxAttached": "Clients adjunts",
-    "tmuxAttachedCount": "{{count}} adjunt",
-    "tmuxCopyHint": "Ajusta la selecció i prem Intro per copiar al porta-retalls",
-    "tmuxCreateNew": "Inicia una nova sessió",
-    "tmuxDetached": "Desconnectat de la sessió tmux",
-    "tmuxLastActivity": "Darrera activitat",
-    "tmuxSessionAttached": "sessió tmux adjunta: {{name}}",
-    "tmuxSessionCreated": "Sessió tmux creada: {{name}}",
-    "tmuxSessionPickerDesc": "S'han trobat sessions tmux existents en aquest amfitrió. Seleccioneu-ne una per tornar-la a adjuntar o crear una sessió nova.",
-    "tmuxSessionPickerTitle": "Sessions de tmux",
-    "tmuxTimeDays": "fa {{count}}dies",
-    "tmuxTimeHours": "fa {{count}}h",
-    "tmuxTimeJustNow": "ara mateix",
-    "tmuxTimeMinutes": "fa {{count}}minuts",
-    "tmuxUnavailable": "tmux no està instal·lat a l'amfitrió remot, tornant a l'intèrpret d'ordres estàndard",
-    "tmuxWindowCount": "finestra {{count}}",
-    "tmuxWindows": "Finestres",
-    "unknownError": "S'ha produït un error desconegut",
-    "websocketAbnormalClose": "La connexió s'ha tancat inesperadament. Això pot ser degut a un problema de configuració del proxy invers o de l'SSL. Si us plau, reviseu els registres del servidor.",
-    "websocketError": "Error de connexió de WebSocket",
-    "clipboardReadFailed": "No s'ha pogut llegir del porta-retalls. Assegureu-vos que els permisos del porta-retalls estiguin concedits.",
-    "clipboardWriteFailed": "No s'ha pogut copiar al porta-retalls. Assegureu-vos que la pàgina es serveix per HTTPS o localhost.",
-    "connected": "Connectat",
-    "totpCodeLabel": "Codi de verificació",
-    "duplicateTab": "Pestanya duplicada",
-    "imageChooseFile": "Trieu un fitxer d'imatge",
-    "imageUploaded": "Imatge penjada: {{path}}",
-    "imageClipboardUnavailable": "Aquest navegador no pot llegir imatges del porta-retalls",
-    "imageClipboardEmpty": "No s'ha trobat cap imatge al porta-retalls",
-    "localShell": "Intèrpret d'ordres del terminal local",
-    "autocompleteHintComplete": "Tabulador o Intro per completar",
-    "autocompleteHintNavigate": "↑↓ per navegar",
-    "autocompleteHintClose": "Esc per tancar"
-  },
-  "terminalToolbar": {
-    "detachTmux": "Desconnecta tmux",
-    "detachTmuxDescription": "Desconnecta la sessió tmux",
-    "dismissError": "Error d'ignorar la imatge",
-    "hideToolbar": "Amaga la barra d'eines",
-    "image": "Accions d'imatge (només imatges)",
-    "imageActionFailed": "L'acció de la imatge ha fallat",
-    "layout": "Mode de visualització de la barra d'eines",
-    "layoutExpanded": "Ampliat amb mètriques",
-    "layoutIcon": "Només icona",
-    "layoutLabeled": "Icones i etiquetes",
-    "moveToolbar": "Mou la barra d'eines",
-    "moveToolbarHint": "Arrossega per reposicionar la barra d'eines",
-    "paste": "Enganxa la imatge",
-    "pasteImage": "Enganxa la imatge del porta-retalls (només imatges)",
-    "retry": "Torna-ho a intentar",
-    "showToolbar": "Expandeix la barra d'eines",
-    "upload": "Puja una imatge",
-    "uploadImage": "Puja una imatge a l'amfitrió",
-    "uploadingImage": "S'està carregant..."
-  },
-  "history": {
-    "noTerminalSelected": "No s'ha seleccionat cap terminal",
-    "noTerminalSelectedHint": "Obriu una pestanya de terminal SSH per veure el seu historial d'ordres",
-    "searchPlaceholder": "Historial de cerca...",
-    "clearAll": "Esborra-ho tot",
-    "noHistoryEntries": "Sense entrades a l'historial",
-    "trackingDisabled": "El seguiment de l'historial està desactivat",
-    "trackingDisabledHint": "Activa l'Historial d'ordres a la pestanya Terminal SSH d'aquest amfitrió.",
-    "commandCount_one": "Ordre {{count}}",
-    "commandCount_other": "Comandes {{count}}"
-  },
-  "touchInput": {
-    "enabled": "Activa l'entrada tàctil",
-    "enabledDesc": "Permetre el desplaçament tàctil amb un dit als terminals",
-    "momentumEnabled": "Activa l'impuls",
-    "momentumEnabledDesc": "Continua desplaçant-te breument després de lliscar el dit",
-    "advanced": "Avançat",
-    "resetDefaults": "Restableix els valors predeterminats",
-    "dragThreshold": "Llindar d'arrossegament",
-    "maxWheelDelta": "Delta màxim de roda",
-    "momentumSampleWindow": "Finestra de mostra de momentum",
-    "releaseGracePeriod": "Període de gràcia de llançament",
-    "minimumVelocity": "Velocitat mínima",
-    "maximumVelocity": "Velocitat màxima",
-    "maximumDuration": "Durada màxima",
-    "maximumTravel": "Recorregut màxim",
-    "decayTime": "Temps de decadència",
-    "pixelsPerTick": "Píxels per clic",
-    "maximumFrameInterval": "Interval màxim de fotograma",
-    "maximumTicksPerFrame": "Màxims de tics per fotograma"
-  },
-  "imageStorage": {
-    "instanceId": "ID d'instància de sessió de terminal",
-    "instanceIdDesc": "ID d'instància d'una de les pestanyes del terminal connectat, que s'utilitza per provar la visibilitat.",
-    "selectedModeUnavailable": "No disponible",
-    "test": "Prova",
-    "testing": "Proves...",
-    "testFailed": "No s'ha pogut provar l'emmagatzematge d'imatges",
-    "testConnected": "La sessió de terminal està connectada.",
-    "testNotConnected": "No hi ha cap sessió de terminal connectada amb aquest ID d'instància.",
-    "testSelectedMode": "Una càrrega utilitzaria: {{mode}}",
-    "testLocalVisible": "El directori local és visible des de l'amfitrió connectat.",
-    "testLocalNotVisible": "El directori local NO és visible des de l'amfitrió connectat."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Entrada tàctil",
-        "images": "Emmagatzematge d'imatges",
-        "sessions": "Sessions",
-        "newHosts": "Nous amfitrions"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Persistència de la sessió terminal",
-        "description": "Quant de temps es manté actiu un terminal desconnectat al servidor abans de tancar-lo. Mín 1, màxim 1440 minuts. Per a sessions que han de durar més temps, activeu Auto-Tmux a l'amfitrió."
-      },
-      "commandHistoryEnabled": {
-        "label": "Historial de comandaments",
-        "description": "Permet l'enregistrament de l'historial d'ordres. Quan està desactivat, l'historial no es desa independentment de la configuració de cada host."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "Historial d'ordres per a nous amfitrions",
-        "description": "Si els nous hosts comencen amb l'historial d'ordres activat."
-      },
-      "imageStorageMode": {
-        "label": "Mode d'emmagatzematge",
-        "description": "On s'escriuen les imatges de terminal enganxades i carregades. Les seleccions automàtiques per connexió, Local i Remota (SFTP) estan corregides.",
-        "auto": "Automàtic",
-        "local": "Local",
-        "remoteSftp": "Remot (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Directori local",
-        "description": "Ruta absoluta al backend de Termix on el mode local escriu les imatges. No es mostra mai després de desar. Un camp buit utilitza TERMIX_IMAGE_DIR."
-      },
-      "imageHostPath": {
-        "label": "Camí d'amfitrió",
-        "description": "La vista del costat de l'amfitrió del directori local que reben els agents del terminal."
-      },
-      "imageTtlMs": {
-        "label": "TTL (ms)",
-        "description": "Quant de temps es conserva una imatge carregada, en mil·lisegons. Si es buida, s'utilitza TERMIX_IMAGE_TTL_MS o una hora."
-      },
-      "imageMaxCount": {
-        "label": "Nombre màxim d'imatges",
-        "description": "La majoria de les imatges es conserven alhora. Si es buida, s'utilitza TERMIX_MAX_IMAGE_COUNT o 100."
-      },
-      "imageMaxBytes": {
-        "label": "Bytes d'emmagatzematge màxims",
-        "description": "La majoria dels bytes d'imatges es conserven alhora. Si es buida, s'utilitzen TERMIX_MAX_IMAGE_STORAGE_BYTES o 5 GiB."
-      },
-      "sessionPersistence": {
-        "label": "Mantenir les sessions després de la desconnexió",
-        "description": "Mantingueu un terminal desconnectat actiu al servidor durant el temps indicat anteriorment, de manera que la reobertura de la seva pestanya es reprengui on s'havia quedat."
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "Executa els terminals dels nous hosts dins de tmux perquè les sessions sobrevisquin a les desconnexions (necessita tmux al host)"
-      },
-      "newHostTheme": {
-        "label": "Tema per a nous amfitrions",
-        "description": "El tema del terminal amb què comença un nou amfitrió."
-      },
-      "newHostFontFamily": {
-        "label": "Font per a nous amfitrions",
-        "description": "La font de terminal amb què comença un nou host."
-      },
-      "newHostFontSize": {
-        "label": "Mida de la lletra per als nous amfitrions",
-        "description": "La mida de la lletra del terminal amb què comença un nou host, en píxels."
-      },
-      "newHostCursorStyle": {
-        "label": "Estil del cursor per a nous amfitrions"
-      },
-      "newHostCursorBlink": {
-        "label": "Cursor intermitent per a nous amfitrions"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Habilita la barra d'eines del terminal",
-        "description": "Mostra una barra d'eines d'accés ràpid acoblada al terminal actiu per a les eines i les estadístiques en directe d'aquest amfitrió"
-      },
-      "terminalToolbarPosition": {
-        "label": "Posició de la barra d'eines",
-        "description": "On es troba la barra d'eines al terminal. Encara la podeu arrossegar des d'allà.",
-        "bottom": "Centre inferior",
-        "bottomLeft": "A baix a l'esquerra",
-        "bottomRight": "A baix a la dreta",
-        "top": "Centre superior",
-        "topLeft": "A dalt a l'esquerra",
-        "topRight": "A dalt a la dreta"
-      },
-      "terminalToolbarStartState": {
-        "label": "Estat inicial de la barra d'eines",
-        "description": "Si la barra d'eines s'obre expandida o minimitzada quan el terminal es connecta",
-        "expanded": "Expandit",
-        "collapsed": "Minimitzat"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Mode de visualització de la barra d'eines",
-        "description": "Com es mostren els botons de la barra d'eines. L'opció \"Últim ús\" conserva el que heu seleccionat a la barra d'eines.",
-        "remember": "Últim ús",
-        "icon": "Només icona",
-        "labeled": "Icones i etiquetes",
-        "expanded": "Ampliat amb estadístiques"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Mostra les estadístiques en directe",
-        "description": "Mostra les estadístiques de l'amfitrió en directe a sobre dels botons de la barra d'eines en mode expandit"
-      },
-      "terminalToolbarFade": {
-        "label": "Esvaeix-se quan està inactiu",
-        "description": "Desapareix la barra d'eines fins que hi passes el cursor per sobre"
-      },
-      "enableCommandHistory": {
-        "label": "Historial de comandaments",
-        "description": "Enregistra les ordres executades en aquest terminal per a l'historial i l'autocompleció"
-      },
-      "enableTerminal": {
-        "label": "Habilita el terminal",
-        "description": "Ofereix un terminal SSH per a aquest host."
-      },
-      "inheritAppearance": {
-        "label": "Utilitza els valors predeterminats de l'usuari"
-      },
-      "theme": {
-        "label": "Tema"
-      },
-      "cursorBlink": {
-        "label": "Cursor intermitent"
-      },
-      "cursorStyle": {
-        "label": "Estil del cursor"
-      },
-      "fontSize": {
-        "label": "Mida de la lletra"
-      },
-      "fontFamily": {
-        "label": "Font"
-      },
-      "scrollback": {
-        "label": "Desplaçament enrere"
-      },
-      "letterSpacing": {
-        "label": "Espaiat de les lletres"
-      },
-      "lineHeight": {
-        "label": "Alçada de la línia"
-      },
-      "bellStyle": {
-        "label": "Campana"
-      },
-      "minimumContrastRatio": {
-        "label": "Relació de contrast mínima"
-      },
-      "backgroundImage": {
-        "label": "Imatge de fons"
-      },
-      "backgroundImageOpacity": {
-        "label": "Opacitat de la imatge de fons"
-      },
-      "customThemeColors": {
-        "label": "Colors de tema personalitzats"
-      },
-      "rightClickSelectsWord": {
-        "label": "Clic dret per seleccionar una paraula"
-      },
-      "macOptionIsMeta": {
-        "label": "L'opció és Meta"
-      },
-      "fastScrollModifier": {
-        "label": "Tecla de desplaçament ràpid"
-      },
-      "fastScrollSensitivity": {
-        "label": "Velocitat de desplaçament ràpida"
-      },
-      "backspaceMode": {
-        "label": "Retrocés"
-      },
-      "autoMosh": {
-        "label": "Mosh automàtic"
-      },
-      "moshCommand": {
-        "label": "Comandament Mosh"
-      },
-      "autoTmux": {
-        "label": "Multiplicador automàtic"
-      },
-      "useSSHTitle": {
-        "label": "Utilitzeu el títol SSH"
-      },
-      "syntaxHighlighting": {
-        "label": "Ressaltat de sintaxi"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Categories de ressaltat sintàctic"
-      },
-      "linkClickBehavior": {
-        "label": "Clic d'enllaç"
-      },
-      "localEcho": {
-        "label": "Eco local"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Oferiu-vos per omplir les sol·licituds de contrasenya"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Empleneu les instruccions de sudo"
-      },
-      "autoReconnect": {
-        "label": "Torna a connectar-se automàticament"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Autocompletar ordres",
-        "description": "Mostra l'autocompleció mentre escrius si premes el tabulador"
-      },
-      "localEcho": {
-        "label": "Eco local",
-        "description": "Reduir la latència d'entrada percebuda mitjançant la predicció segura de pulsacions de tecles locals"
-      },
-      "linkClickBehavior": {
-        "label": "Clic d'enllaç del terminal",
-        "description": "Comportament predeterminat en fer clic a enllaços al terminal"
-      },
-      "customThemes": {
-        "label": "Temes desats"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Terminal local"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Utilitza sessions de terminal en directe",
-      "description": "Permet que altres funcions, com ara compartir sessions i gravar, arribin a les sessions de terminal en directe."
-    },
-    "history": {
-      "title": "Llegeix l'historial d'ordres",
-      "description": "Permet que altres funcions, com ara l'assistent d'IA, llegeixin el teu historial d'ordres."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Terminal",
-    "addHost": "Afegeix amfitrió",
-    "applyGlobalThemeTooltip": "Aplica aquest tema",
-    "backgroundImageDesc": "URL opcional per a una imatge de fons del terminal",
-    "backgroundImageLabel": "URL de la imatge de fons",
-    "backgroundImageOpacityLabel": "Opacitat de la imatge de fons",
-    "backspaceMode": "Mode de retrocés",
-    "backspaceModeControlH": "Control-H (BS)",
-    "backspaceModeLabel": "Mode de retrocés",
-    "backspaceModeNormal": "Normal (SUP)",
-    "behaviorAndAdvanced": "Comportament i avançat",
-    "bellStyle": "Estil de campana",
-    "bellStyleBoth": "Tots dos",
-    "bellStyleLabel": "Estil de campana",
-    "bellStyleNone": "Cap",
-    "bellStyleSound": "So",
-    "bellStyleVisual": "Visual",
-    "colorTheme": "Tema de color",
-    "cursorBlink": "Parpelleig del cursor",
-    "cursorBlinking": "Cursor parpellejant",
-    "cursorBlinkingDesc": "Habilita l'animació intermitent per al cursor del terminal",
-    "cursorStyle": "Estil del cursor",
-    "cursorStyleBar": "Bar",
-    "cursorStyleBlock": "Bloc",
-    "cursorStyleLabel": "Estil del cursor",
-    "cursorStyleUnderline": "Subratllat",
-    "customThemeAnsiColors": "Colors ANSI",
-    "customThemeBackground": "Fons",
-    "customThemeBlack": "Negre",
-    "customThemeBlue": "Blau",
-    "customThemeBrightBlack": "Negre brillant",
-    "customThemeBrightBlue": "Blau brillant",
-    "customThemeBrightCyan": "Cian brillant",
-    "customThemeBrightGreen": "Verd brillant",
-    "customThemeBrightMagenta": "Magenta brillant",
-    "customThemeBrightRed": "Vermell brillant",
-    "customThemeBrightWhite": "Blanc brillant",
-    "customThemeBrightYellow": "Groc brillant",
-    "customThemeColors": "Colors personalitzats",
-    "customThemeCursor": "Cursor",
-    "customThemeCursorAccent": "Accent del cursor",
-    "customThemeCyan": "Cian",
-    "customThemeForeground": "Primer pla",
-    "customThemeGreen": "Verd",
-    "customThemeMagenta": "Magenta",
-    "customThemeRed": "Vermell",
-    "customThemeResetTooltip": "Restableix els valors predeterminats",
-    "customThemeSelection": "Selecció",
-    "customThemeWhite": "Blanc",
-    "customThemeYellow": "Groc",
-    "deleteGlobalThemeTooltip": "Suprimeix aquest tema",
-    "docsLink": "Veure documents",
-    "enableAutoMosh": "Activa l'Auto-Mosh",
-    "enableAutoMoshDesc": "Prefereix Mosh a SSH si està disponible",
-    "enableAutoTmux": "Activa la transmissió automàtica",
-    "enableAutoTmuxDesc": "Mantingueu actiu el vostre shell i tot el que s'hi executi després de desconnexions i reinicis del navegador executant-lo dins de tmux (tmux ha d'estar instal·lat a l'amfitrió)",
-    "fastScrollModifier": "Modificador de desplaçament ràpid",
-    "fastScrollModifierAlt": "Alt",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Modificador de desplaçament ràpid",
-    "fastScrollModifierShift": "Majúscules",
-    "fastScrollSensitivity": "Sensibilitat de desplaçament ràpid",
-    "fastScrollSensitivityLabel": "Sensibilitat de desplaçament ràpid",
-    "fontFamily": "Família tipogràfica",
-    "fontFamilyCustomHint": "Trieu una font inclosa o seleccioneu Personalitzada i escriviu el nom exacte d'una font ja instal·lada al vostre sistema (per exemple, MesloLGS NF, Noto Sans Mono). Termix no pot instal·lar fonts automàticament, instal·leu-la primer al vostre sistema operatiu.",
-    "fontFamilyCustomOption": "Personalitzat...",
-    "fontFamilyCustomPlaceholder": "Nom exacte de la font, p. ex. MesloLGS NF",
-    "fontFamilyLabel": "Família tipogràfica",
-    "fontSize": "Mida de la lletra",
-    "fontSizeLabel": "Mida de la lletra",
-    "hostNotFound": "No s'ha trobat l'amfitrió",
-    "letterSpacing": "Espaiat entre lletres",
-    "letterSpacingPx": "Espaiat entre lletres (px)",
-    "lineHeight": "Alçada de la línia",
-    "lineHeightLabel": "Alçada de la línia",
-    "linkClickBehaviorConfirm": "Mostra la finestra emergent per obrir o copiar",
-    "linkClickBehaviorDesc": "Controla què passa quan feu clic a un enllaç al terminal. Feu servir \"Per defecte\" per seguir la configuració del nivell d'aplicació.",
-    "linkClickBehaviorDirect": "Obre directament",
-    "linkClickBehaviorLabel": "Comportament dels clics d'enllaç",
-    "loadingHost": "S'està carregant l'amfitrió...",
-    "localEchoAuto": "Automàtic",
-    "localEchoDesc": "Prediu les pulsacions de tecles imprimibles de manera segura localment en connexions lentes. Les sol·licituds de contrasenya i l'entrada de control no es reprodueixen mai.",
-    "localEchoLabel": "Eco local",
-    "localEchoOff": "Desactivat",
-    "localEchoOn": "Sempre activat",
-    "macOptionIsMetaLabel": "La tecla d'opció envia metadades",
-    "macOptionIsMetaShortDesc": "Desactiva l'opció d'escriure caràcters especials (com ara @ o |) amb la tecla Opció/Alt a macOS en comptes d'enviar Meta",
-    "moshCommand": "Comandament MOSH",
-    "moshCommandLabel": "Comandament Mosh",
-    "noSavedThemes": "Encara no hi ha temes desats",
-    "none": "Cap",
-    "passwordPromptAutoFillDesc": "Ofereix-te a introduir la contrasenya desada quan el terminal te la demani. Desactiva aquesta opció per no introduir mai cap contrasenya automàticament en aquest host.",
-    "passwordPromptAutoFillLabel": "Ofereix l'emplenament automàtic de la contrasenya",
-    "autoReconnectLabel": "Reconnexió automàtica",
-    "autoReconnectDesc": "Es torna a connectar sol quan la connexió SSH cau, com ara després d'una fallada de xarxa o de la suspensió. Manté el desplaçament enrere.",
-    "rightClickSelectsWord": "Clic dret Selecciona Word",
-    "rightClickSelectsWordLabel": "Feu clic amb el botó dret Selecciona Word",
-    "rightClickSelectsWordShortDesc": "Seleccioneu la paraula sota el cursor en fer clic amb el botó dret",
-    "saveAsGlobalTheme": "Desa com a tema global",
-    "saveGlobalThemeError": "No s'ha pogut desar el tema",
-    "saveGlobalThemeNamePrompt": "Introdueix un nom per a aquest tema",
-    "saveGlobalThemeSuccess": "Tema desat",
-    "savedThemesLabel": "Temes desats",
-    "scrollbackBufferLabel": "Buffer de desplaçament enrere",
-    "scrollbackMaxLines": "Nombre màxim de línies que es conserven a l'historial",
-    "sudoPasswordAutoFill": "Emplenament automàtic de contrasenya de Sudo",
-    "sudoPasswordAutoFillDesc": "Emmagatzema una contrasenya sudo perquè les mètriques de l'amfitrió, les indicacions del terminal i altres puguin executar ordres privilegiades automàticament.",
-    "sudoPasswordAutoFillLabel": "Autoemplenament de contrasenya de Sudo",
-    "syntaxCategoryIpAddresses": "Adreces IP",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Nivells de registre",
-    "syntaxCategoryLogLevelsDesc": "error, avís, informació, depuració, fatal",
-    "syntaxCategoryNumbers": "Números etiquetats",
-    "syntaxCategoryNumbersDesc": "port 8080, sortida 1, estat 404",
-    "syntaxCategoryPaths": "Rutes de fitxer",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/fitxer.txt",
-    "syntaxCategoryTimestamps": "Marques de temps",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 15-01-2024",
-    "syntaxCategoryUrls": "URL",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "Coloritzar la sortida del terminal (errors, camins, IP, marques de temps)",
-    "syntaxHighlightingLabel": "Ressaltat de sintaxi",
-    "terminalAppearance": "Aspecte del terminal",
-    "theme": "Tema",
-    "themePreview": "Vista prèvia del tema",
-    "useSSHTitleDesc": "Actualitza el títol de la pestanya a partir del títol de la finestra de l'intèrpret d'ordres en comptes del nom de l'amfitrió",
-    "useSSHTitleLabel": "Utilitza el títol de la finestra SSH",
-    "enableTunnel": "Habilita el túnel",
-    "enableFileManager": "Habilita el gestor de fitxers",
-    "enableDocker": "Activa Docker",
-    "startupSnippet": "Fragment d'inici",
-    "quickActions": "Accions ràpides",
-    "proxmoxLastSyncStatus": {
-      "success": "Èxit"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} omès (no s'ha trobat cap IP)",
-    "proxmoxStatsUrlCopied": "URL de les estadístiques de Proxmox copiada al porta-retalls",
-    "rdpUrlCopied": "URL RDP copiada",
-    "vncUrlCopied": "URL de VNC copiada",
-    "filterAuthStepca": "Pas CA",
-    "guac": {
-      "noCredential": "Sense credencials (credencials directes a continuació)",
-      "authTypeDirect": "Directe",
-      "authTypeCredential": "Credencial",
-      "authTypeNone": "Cap",
-      "recordingPath": "Ruta d'enregistrament",
-      "recordingName": "Nom de l'enregistrament",
-      "saveHostFirst": "Primer desa l'amfitrió.",
-      "sharingOptionsAfterSave": "Les opcions de compartició estan disponibles després que s'hagi desat l'amfitrió.",
-      "permissionLevel": "Nivell de permís",
-      "typeHeader": "Tipus",
-      "targetHeader": "Objectiu",
-      "permissionHeader": "Permís",
-      "cancelBtn": "Cancel·la",
-      "savingBtn": "Desant...",
-      "updateHostBtn": "Actualitza l'amfitrió",
-      "addHostBtn": "Afegeix amfitrió"
-    },
-    "filterAuthVault": "Volta"
-  },
-  "nav": {
-    "history": "Història",
-    "localTerminal": "Terminal local",
-    "sshTools": "Eines SSH",
-    "terminal": "Terminal",
-    "macros": "Macros"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Escriu aquí per emetre les pulsacions de tecles...",
-    "copyOnSelect": "Copia el text seleccionat automàticament",
-    "enableRightClickCopyPaste": "Activa la funció de copiar/enganxar amb el clic dret",
-    "fillPassword": "Empleneu la contrasenya",
-    "fillPasswordMissing": "No hi ha cap contrasenya desada per al(s) terminal(s) seleccionat(s) {{count}}",
-    "fillPasswordSuccess": "Contrasenya introduïda al(s) terminal(s) {{count}}",
-    "keyRecordingTitle": "Enregistrament de claus",
-    "noTerminalTabsOpen": "No hi ha pestanyes de terminal obertes",
-    "recordToTerminals": "Registre als terminals",
-    "selectAll": "Tot",
-    "selectNone": "Cap",
-    "selectTerminalsAbove": "Seleccioneu els terminals anteriors",
-    "settingsTitle": "Configuració",
-    "startRecording": "Comença a gravar",
-    "stopRecording": "Atura l'enregistrament"
-  },
-  "keybindings": {
-    "copy": "Copia la selecció",
-    "paste": "Enganxa",
-    "sendControlCode": "Envia el senyal Ctrl+lletra",
-    "sendText": "Enviar text",
-    "controlCodeLabel": "Carta",
-    "textLabel": "Text per enviar",
-    "appendEnterLabel": "Premeu Intro després d'enviar",
-    "clipboardPermissionNote": "Pot demanar permisos al porta-retalls en el primer ús en alguns navegadors.",
-    "textRequired": "Introduïu el text per enviar",
-    "controlCodeRequired": "Introduïu una sola lletra per al codi de control",
-    "builtIn": {
-      "copyCtrlC": "Copiar la selecció (Ctrl+C, només quan hi ha text seleccionat)",
-      "copyCtrlShiftC": "Copiar la selecció (Ctrl+Maj+C)",
-      "copyCmdC": "Copiar la selecció (Cmd+C)",
-      "pasteCtrlShiftV": "Enganxa des del porta-retalls (Ctrl+Maj+V)",
-      "ctrlW": "Envia Ctrl+W a l'intèrpret d'ordres (bloquejat per tancar la pestanya del navegador)",
-      "ctrlT": "Envia Ctrl+T a l'intèrpret d'ordres (bloquejat per obrir la pestanya del navegador)",
-      "ctrlN": "Envia Ctrl+N a l'intèrpret d'ordres (bloquejat per obrir la finestra del navegador)",
-      "ctrlQ": "Envia Ctrl+Q a l'intèrpret d'ordres (bloquejat per tancar el navegador)"
-    }
-  },
-  "macros": {
-    "title": "Macros",
-    "description": "Executa una sèrie d'ordres desades en un terminal i reacciona al que el servidor envia de tornada.",
-    "target": "Objectiu",
-    "noTerminal": "Cap terminal obert",
-    "empty": "Encara no hi ha macros",
-    "emptyHint": "Crea una macro per automatitzar un flux de terminal, com ara iniciar la sessió, reiniciar un servei o respondre a les indicacions.",
-    "create": "Nova macro",
-    "back": "Torna a les macros",
-    "name": "Nom",
-    "namePlaceholder": "Reinicia el servidor web",
-    "nameRequired": "Doneu un nom a la macro abans de desar-la",
-    "descriptionLabel": "Descripció",
-    "descriptionPlaceholder": "Què fa aquesta macro (opcional)",
-    "unsaved": "Canvis no desats",
-    "save": "Desa",
-    "saved": "Macro desada",
-    "saveFailed": "No s'ha pogut desar la macro",
-    "delete": "Suprimeix",
-    "deleteTitle": "Voleu suprimir aquesta macro?",
-    "deleteBody": "«{{name}}» s'eliminarà permanentment. Això no es pot desfer.",
-    "deleted": "Macro suprimida",
-    "cancel": "Cancel·la",
-    "run": "Corre",
-    "stop": "Atura",
-    "running": "Corrent...",
-    "completed": "Macro acabada",
-    "failed": "La macro ha fallat",
-    "loadFailed": "No s'han pogut carregar les macros",
-    "needTerminal": "Obriu i connecteu primer un terminal",
-    "noSteps": "Aquesta macro encara no té cap pas. Afegeix-ne un a continuació.",
-    "addStep": "Afegeix un pas",
-    "stepNumber": "Pas {{number}}",
-    "removeStep": "Elimina el pas",
-    "confirmRunTitle": "Voleu executar aquesta macro?",
-    "confirmRunBody": "\"{{name}}\" enviarà ordres a {{host}}.",
-    "confirmRunAction": "Executa macro",
-    "stepTypes": {
-      "send": {
-        "label": "Envia l'ordre",
-        "help": "Escriu text al terminal, igual que si l'haguessis escrit."
-      },
-      "wait": {
-        "label": "Espera la sortida",
-        "help": "Es posa en pausa fins que el servidor imprimeix el text que anomeneu, com si fos una sol·licitud de contrasenya."
-      },
-      "delay": {
-        "label": "Pausa",
-        "help": "Espera un temps fix abans del següent pas."
-      },
-      "if": {
-        "label": "Si la sortida conté",
-        "help": "Comprova tot el que el servidor ha imprès fins ara i després executa una de les dues branques."
-      },
-      "repeat": {
-        "label": "Repetir",
-        "help": "Executa els passos que hi ha dins un nombre determinat de vegades."
-      }
-    },
-    "send": {
-      "text": "Ordre o text",
-      "textPlaceholder": "systemctl reinicia nginx",
-      "pressEnter": "Premeu Intro després d'enviar",
-      "pressEnterHelp": "Desactiva això per escriure text sense enviar-lo."
-    },
-    "wait": {
-      "pattern": "Espereu fins que la sortida contingui",
-      "patternPlaceholder": "contrasenya:",
-      "timeout": "Renunciar després",
-      "onTimeout": "Si mai apareix",
-      "stop": "Atura la macro",
-      "continue": "Continua igualment"
-    },
-    "delay": {
-      "duration": "Espera"
-    },
-    "ifStep": {
-      "pattern": "Si la sortida conté",
-      "patternPlaceholder": "Actiu: actiu (en funcionament)",
-      "then": "Aleshores fes això",
-      "else": "Si no, fes això",
-      "emptyBranch": "Sense esglaons"
-    },
-    "repeat": {
-      "count": "Nombre de vegades",
-      "times": "vegades"
-    },
-    "match": {
-      "useRegex": "Coincideix amb una expressió regular",
-      "useRegexHelp": "Deixa això desactivat perquè el text coincideixi exactament com està escrit.",
-      "invalidRegex": "No és una expressió regular vàlida, es trobarà com a text sense format."
-    },
-    "seconds": "segons",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "Cal un servidor remot. Connecteu un servidor remot a Configuració per utilitzar aquest tipus de connexió."
-  },
-  "plugin": {
-    "name": "Terminal SSH"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/cs_CZ.json b/plugins/ssh-terminal/locales/translated/cs_CZ.json
deleted file mode 100644
index 0e50bda8f..000000000
--- a/plugins/ssh-terminal/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Přidat",
-    "arrowDown": "Šipka dolů",
-    "arrowLeft": "Šipka vlevo",
-    "arrowRight": "Šipka vpravo",
-    "arrowUp": "Šipka nahoru",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Del",
-    "done": "Hotovo",
-    "editQuickKeys": "Upravit rychlé klávesy",
-    "end": "Konec",
-    "esc": "Esc",
-    "home": "Domov",
-    "pageDown": "PgDn",
-    "pageUp": "PgUp",
-    "paste": "Pasta",
-    "quickKeyPlaceholder": "např. sudo ",
-    "quickKeysDesc": "Klepnutím na × odstraníte. Podporuje až 8 znaků.",
-    "quickKeysTitle": "Rychlé klávesy",
-    "removeQuickKey": "Odstranit",
-    "resetDefaults": "Obnovit na výchozí nastavení",
-    "shift": "Posun",
-    "tab": "Záložka"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Nepodařilo se povolit Auto-Tmux",
-    "autoTmuxEnabled": "Auto-Tmux povolen pro {{host}}. Platí od dalšího připojení.",
-    "clipboardHttpWarning": "Nelze přečíst schránku. Některé prohlížeče omezují přístup ke schránce mimo HTTPS – zkuste Ctrl+V nebo přes HTTPS poskytněte Termix.",
-    "closeTab": "Blízko",
-    "connecting": "Spojovací...",
-    "connectionLost": "Spojení ztraceno",
-    "connectionRejected": "Server odmítl připojení. Zkontrolujte prosím ověření a konfiguraci sítě.",
-    "connectionTimeout": "Časový limit připojení",
-    "enableAutoTmuxAction": "Povolit Auto-Tmux",
-    "hostKeyRejected": "Ověření klíče hostitele SSH odmítnuto. Připojení zrušeno.",
-    "linkDialogCopy": "Kopie",
-    "linkDialogOpen": "OTEVŘENO",
-    "linkDialogTitle": "Otevřít odkaz",
-    "maxReconnectAttemptsReached": "Dosažen maximální počet pokusů o opětovné připojení",
-    "noHostSelected": "Nebyl vybrán žádný hostitel",
-    "passwordPromptFillTitle": "Vyplňte uložené heslo do tohoto řádku?",
-    "reconnect": "Znovu se připojte",
-    "reconnected": "Úspěšné opětovné připojení",
-    "reconnecting": "Znovu se připojuji... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Spojení přerušeno, znovu se připojuji...",
-    "searchCaseSensitive": "Zápasová karta",
-    "searchClose": "Zavřít (Escape)",
-    "searchNext": "Další zápas (Enter)",
-    "searchNoResults": "Žádné výsledky",
-    "searchPlaceholder": "Nalézt",
-    "searchPrevious": "Předchozí shoda (Shift+Enter)",
-    "searchRegex": "Použít regulární výraz",
-    "searchResultCount": "{{index}} z {{count}}",
-    "searchWholeWord": "Shoda celého slova",
-    "sessionExpiredNotice": "Vaše předchozí relace na {{host}} vypršela po {{minutes}} minutách odpojení; shell a vše, co v něm běží, je pryč. Povolte na tomto hostiteli Auto-Tmux, aby relace zůstaly aktivní.",
-    "sessionExpiredNoticeNoMinutes": "Vaše předchozí relace na {{host}} vypršela během odpojení; shell a vše, co v něm běží, je pryč. Povolte na tomto hostiteli Auto-Tmux, aby relace zůstaly aktivní.",
-    "sessionTakenOver": "Relace byla otevřena na jiné kartě. Znovu se připojuji...",
-    "tmuxAttached": "Připojení klienti",
-    "tmuxAttachedCount": "{{count}} připojen",
-    "tmuxCopyHint": "Upravte výběr a stiskněte Enter pro zkopírování do schránky",
-    "tmuxCreateNew": "Zahájit novou relaci",
-    "tmuxDetached": "Odpojeno od relace tmux",
-    "tmuxLastActivity": "Poslední aktivita",
-    "tmuxSessionAttached": "připojena relace tmux: {{name}}",
-    "tmuxSessionCreated": "Vytvořena relace tmux: {{name}}",
-    "tmuxSessionPickerDesc": "Na tomto hostiteli byly nalezeny existující relace tmux. Vyberte jednu, kterou chcete znovu připojit, nebo vytvořte novou relaci.",
-    "tmuxSessionPickerTitle": "Sezení tmux",
-    "tmuxTimeDays": "Před {{count}}dny",
-    "tmuxTimeHours": "{{count}}před hodinami",
-    "tmuxTimeJustNow": "právě teď",
-    "tmuxTimeMinutes": "{{count}}před m",
-    "tmuxUnavailable": "tmux není nainstalován na vzdáleném hostiteli, vrací se ke standardnímu shellu.",
-    "tmuxWindowCount": "{{count}} okno",
-    "tmuxWindows": "Okna",
-    "unknownError": "Došlo k neznámé chybě",
-    "websocketAbnormalClose": "Spojení se neočekávaně ukončilo. Může to být způsobeno problémem s reverzní proxy nebo konfigurací SSL. Zkontrolujte prosím protokoly serveru.",
-    "websocketError": "Chyba připojení k WebSocketu",
-    "clipboardReadFailed": "Čtení ze schránky se nezdařilo. Ujistěte se, že máte povolena přístup ke schránce.",
-    "clipboardWriteFailed": "Kopírování do schránky se nezdařilo. Ujistěte se, že stránka je zobrazována přes HTTPS nebo localhost.",
-    "connected": "Připojeno",
-    "totpCodeLabel": "Ověřovací kód",
-    "duplicateTab": "Duplikovat kartu",
-    "imageChooseFile": "Vyberte soubor s obrázkem",
-    "imageUploaded": "Nahraný obrázek: {{path}}",
-    "imageClipboardUnavailable": "Tento prohlížeč nemůže číst obrázky ze schránky.",
-    "imageClipboardEmpty": "Ve schránce nebyl nalezen žádný obrázek.",
-    "localShell": "Lokální terminálový shell",
-    "autocompleteHintComplete": "Dokončete klávesou Tab nebo Enter",
-    "autocompleteHintNavigate": "↑↓ pro navigaci",
-    "autocompleteHintClose": "Esc pro zavření"
-  },
-  "terminalToolbar": {
-    "detachTmux": "Odpojit tmux",
-    "detachTmuxDescription": "Odpojit relaci tmux",
-    "dismissError": "Chyba při zavírání obrázku",
-    "hideToolbar": "Skrýt panel nástrojů",
-    "image": "Akce s obrázky (pouze obrázky)",
-    "imageActionFailed": "Akce s obrázkem se nezdařila",
-    "layout": "Režim zobrazení panelu nástrojů",
-    "layoutExpanded": "Rozšířeno o metriky",
-    "layoutIcon": "Pouze ikona",
-    "layoutLabeled": "Ikony a štítky",
-    "moveToolbar": "Přesunout panel nástrojů",
-    "moveToolbarHint": "Přetažením změňte umístění panelu nástrojů",
-    "paste": "Vložit obrázek",
-    "pasteImage": "Vložit obrázek ze schránky (pouze obrázky)",
-    "retry": "Zkusit znovu",
-    "showToolbar": "Rozbalit panel nástrojů",
-    "upload": "Nahrát obrázek",
-    "uploadImage": "Nahrajte obrázek na hostitele",
-    "uploadingImage": "Nahrávání..."
-  },
-  "history": {
-    "noTerminalSelected": "Není vybrán žádný terminál",
-    "noTerminalSelectedHint": "Otevření karty terminálu SSH pro zobrazení historie jejích příkazů",
-    "searchPlaceholder": "Historie vyhledávání...",
-    "clearAll": "Vymazat vše",
-    "noHistoryEntries": "Žádné záznamy v historii",
-    "trackingDisabled": "Sledování historie je zakázáno",
-    "trackingDisabledHint": "Zapněte historii příkazů na kartě SSH Terminál tohoto hostitele.",
-    "commandCount_one": "příkaz {{count}}",
-    "commandCount_other": "příkazy {{count}}"
-  },
-  "touchInput": {
-    "enabled": "Povolit dotykový vstup",
-    "enabledDesc": "Povolit posouvání jedním prstem v terminálech",
-    "momentumEnabled": "Povolit hybnost",
-    "momentumEnabledDesc": "Po přejetí prstem krátce pokračujte v rolování",
-    "advanced": "Moderní",
-    "resetDefaults": "Obnovit na výchozí nastavení",
-    "dragThreshold": "Práh přetažení",
-    "maxWheelDelta": "Maximální delta kola",
-    "momentumSampleWindow": "Okno vzorku hybnosti",
-    "releaseGracePeriod": "Dodatečná lhůta",
-    "minimumVelocity": "Minimální rychlost",
-    "maximumVelocity": "Maximální rychlost",
-    "maximumDuration": "Maximální doba trvání",
-    "maximumTravel": "Maximální zdvih",
-    "decayTime": "Doba rozpadu",
-    "pixelsPerTick": "Pixely na tik",
-    "maximumFrameInterval": "Maximální interval snímků",
-    "maximumTicksPerFrame": "Maximální počet tiků na snímek"
-  },
-  "imageStorage": {
-    "instanceId": "ID instance terminálové relace",
-    "instanceIdDesc": "ID instance jedné z vašich připojených karet terminálu, používané k testování viditelnosti.",
-    "selectedModeUnavailable": "Nedostupné",
-    "test": "Test",
-    "testing": "Testování...",
-    "testFailed": "Nepodařilo se otestovat úložiště obrázků",
-    "testConnected": "Terminálová relace je připojena.",
-    "testNotConnected": "S tímto ID instance není připojena žádná terminálová relace.",
-    "testSelectedMode": "Nahrávání by použilo: {{mode}}",
-    "testLocalVisible": "Lokální adresář je viditelný z připojeného hostitele.",
-    "testLocalNotVisible": "Lokální adresář NENÍ viditelný z připojeného hostitele."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Dotykový vstup",
-        "images": "Ukládání obrázků",
-        "sessions": "Relace",
-        "newHosts": "Noví hostitelé"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Perzistence terminálové relace",
-        "description": "Jak dlouho je odpojený terminál udržován aktivní na serveru, než je uzavřen. Min. 1, max. 1440 minut. Pro relace, které musí tuto dobu přetrvávat, povolte na hostiteli Auto-Tmux."
-      },
-      "commandHistoryEnabled": {
-        "label": "Historie příkazů",
-        "description": "Povolit záznam historie příkazů. Pokud je tato možnost zakázána, historie se neukládá bez ohledu na nastavení pro jednotlivé hostitele."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "Historie příkazů pro nové hostitele",
-        "description": "Zda se u nových hostitelů má zapnout historie příkazů."
-      },
-      "imageStorageMode": {
-        "label": "Režim úložiště",
-        "description": "Kam se zapisují vložené a nahrané obrazy terminálu. Automatické výběry podle připojení, lokální a vzdálené (SFTP) jsou opraveny.",
-        "auto": "Auto",
-        "local": "Místní",
-        "remoteSftp": "Vzdálené (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Místní adresář",
-        "description": "Absolutní cesta na serveru Termix, kam lokální režim zapisuje obrazy. Po uložení se nikdy nezobrazí. Prázdná hodnota používá TERMIX_IMAGE_DIR."
-      },
-      "imageHostPath": {
-        "label": "Cesta hostitele",
-        "description": "Pohled na lokální adresář, který termináloví agenti přijímají, na straně hostitele."
-      },
-      "imageTtlMs": {
-        "label": "Doba trvání (ms)",
-        "description": "Jak dlouho je nahraný obrázek uchováván v milisekundách. Prázdná hodnota používá TERMIX_IMAGE_TTL_MS nebo jednu hodinu."
-      },
-      "imageMaxCount": {
-        "label": "Maximální počet obrázků",
-        "description": "Většina obrázků se uchovává najednou. Prázdné pole používá TERMIX_MAX_IMAGE_COUNT nebo 100."
-      },
-      "imageMaxBytes": {
-        "label": "Maximální počet bajtů úložiště",
-        "description": "Nejvíce bajtů obrázků se uchovává najednou. Prázdné obrázky používají TERMIX_MAX_IMAGE_STORAGE_BYTES nebo 5 GiB."
-      },
-      "sessionPersistence": {
-        "label": "Zachovat relace i po odpojení",
-        "description": "Udržujte odpojený terminál aktivní na serveru po výše uvedenou dobu, aby opětovné otevření jeho karty pokračovalo tam, kde skončilo."
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "Spouštět terminály nových hostitelů uvnitř tmuxu, aby relace přežily odpojení (vyžaduje tmux na hostiteli)"
-      },
-      "newHostTheme": {
-        "label": "Téma pro nové hostitele",
-        "description": "Terminální šablona, se kterou začíná nový hostitel."
-      },
-      "newHostFontFamily": {
-        "label": "Písmo pro nové hostitele",
-        "description": "Terminální písmo, se kterým začíná nový hostitel."
-      },
-      "newHostFontSize": {
-        "label": "Velikost písma pro nové hostitele",
-        "description": "Velikost písma terminálu, s níž začíná nový hostitel, v pixelech."
-      },
-      "newHostCursorStyle": {
-        "label": "Styl kurzoru pro nové hostitele"
-      },
-      "newHostCursorBlink": {
-        "label": "Blikající kurzor pro nové hostitele"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Povolit panel nástrojů terminálu",
-        "description": "Zobrazit panel nástrojů pro rychlý přístup ukotvený v aktivním terminálu pro nástroje a aktuální statistiky tohoto hostitele"
-      },
-      "terminalToolbarPosition": {
-        "label": "Pozice panelu nástrojů",
-        "description": "Místo, kde se v terminálu nachází panel nástrojů. Můžete ho odtud stále přetahovat.",
-        "bottom": "Dole uprostřed",
-        "bottomLeft": "Vlevo dole",
-        "bottomRight": "Vpravo dole",
-        "top": "Nahoře uprostřed",
-        "topLeft": "Vlevo nahoře",
-        "topRight": "Vpravo nahoře"
-      },
-      "terminalToolbarStartState": {
-        "label": "Počáteční stav panelu nástrojů",
-        "description": "Zda se panel nástrojů po připojení terminálu otevře rozbalený nebo minimalizovaný",
-        "expanded": "Rozšířený",
-        "collapsed": "Minimalizované"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Režim zobrazení panelu nástrojů",
-        "description": "Jak se zobrazují tlačítka panelu nástrojů. Možnost „Naposledy použité“ zachovává vše, co jste vybrali v panelu nástrojů.",
-        "remember": "Naposledy použito",
-        "icon": "Pouze ikona",
-        "labeled": "Ikony a popisky",
-        "expanded": "Rozšířeno o statistiky"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Zobrazit živé statistiky",
-        "description": "Zobrazit statistiky živého hostitele nad tlačítky panelu nástrojů v rozbaleném režimu"
-      },
-      "terminalToolbarFade": {
-        "label": "Ztlumení při nečinnosti",
-        "description": "Ztmavování panelu nástrojů, dokud na něj nenajedete myší"
-      },
-      "enableCommandHistory": {
-        "label": "Historie příkazů",
-        "description": "Zaznamenávejte příkazy spouštěné v tomto terminálu pro historii a automatické dokončování"
-      },
-      "enableTerminal": {
-        "label": "Povolit terminál",
-        "description": "Nabídněte SSH terminál pro tohoto hostitele."
-      },
-      "inheritAppearance": {
-        "label": "Použít výchozí nastavení uživatele"
-      },
-      "theme": {
-        "label": "Téma"
-      },
-      "cursorBlink": {
-        "label": "Blikající kurzor"
-      },
-      "cursorStyle": {
-        "label": "Styl kurzoru"
-      },
-      "fontSize": {
-        "label": "Velikost písma"
-      },
-      "fontFamily": {
-        "label": "Písmo"
-      },
-      "scrollback": {
-        "label": "Posunout zpět"
-      },
-      "letterSpacing": {
-        "label": "Rozteč písmen"
-      },
-      "lineHeight": {
-        "label": "Výška řádku"
-      },
-      "bellStyle": {
-        "label": "Zvonek"
-      },
-      "minimumContrastRatio": {
-        "label": "Minimální kontrastní poměr"
-      },
-      "backgroundImage": {
-        "label": "Obrázek na pozadí"
-      },
-      "backgroundImageOpacity": {
-        "label": "Neprůhlednost obrázku na pozadí"
-      },
-      "customThemeColors": {
-        "label": "Vlastní barvy motivu"
-      },
-      "rightClickSelectsWord": {
-        "label": "Kliknutím pravým tlačítkem myši vyberete slovo"
-      },
-      "macOptionIsMeta": {
-        "label": "Možnost je Meta"
-      },
-      "fastScrollModifier": {
-        "label": "Klávesa pro rychlé procházení"
-      },
-      "fastScrollSensitivity": {
-        "label": "Rychlá rychlost rolování"
-      },
-      "backspaceMode": {
-        "label": "Zpět"
-      },
-      "autoMosh": {
-        "label": "Auto mosh"
-      },
-      "moshCommand": {
-        "label": "Moshův příkaz"
-      },
-      "autoTmux": {
-        "label": "Automatický tmux"
-      },
-      "useSSHTitle": {
-        "label": "Použijte SSH titul"
-      },
-      "syntaxHighlighting": {
-        "label": "Zvýrazňování syntaxe"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Kategorie zvýrazňování syntaxe"
-      },
-      "linkClickBehavior": {
-        "label": "Kliknutí na odkaz"
-      },
-      "localEcho": {
-        "label": "Místní ozvěna"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Nabídnout vyplnění výzev k zadání hesla"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Vyplňte příkazy Sudo"
-      },
-      "autoReconnect": {
-        "label": "Automatické opětovné připojení"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Automatické dokončování příkazů",
-        "description": "Zobrazit automatické dokončování při psaní po stisknutí klávesy Tab"
-      },
-      "localEcho": {
-        "label": "Místní ozvěna",
-        "description": "Snižte vnímanou latenci vstupu pomocí bezpečné lokální predikce stisků kláves"
-      },
-      "linkClickBehavior": {
-        "label": "Kliknutí na odkaz terminálu",
-        "description": "Výchozí chování při kliknutí na odkazy v terminálu"
-      },
-      "customThemes": {
-        "label": "Uložená témata"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Místní terminál"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Používejte živé terminálové relace",
-      "description": "Umožňuje dalším funkcím, jako je sdílení a nahrávání relací, dosáhnout vašich živých terminálových relací."
-    },
-    "history": {
-      "title": "Číst historii příkazů",
-      "description": "Umožňuje dalším funkcím, jako je například asistent s umělou inteligencí, číst historii vašich příkazů."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Terminál",
-    "addHost": "Přidat hostitele",
-    "applyGlobalThemeTooltip": "Použít toto téma",
-    "backgroundImageDesc": "Volitelná URL adresa pro obrázek na pozadí terminálu",
-    "backgroundImageLabel": "URL adresa obrázku na pozadí",
-    "backgroundImageOpacityLabel": "Neprůhlednost obrázku na pozadí",
-    "backspaceMode": "Režim zpětného volání",
-    "backspaceModeControlH": "Control-H (BS)",
-    "backspaceModeLabel": "Režim zpětného volání",
-    "backspaceModeNormal": "Normální (DEL)",
-    "behaviorAndAdvanced": "Chování a pokročilé",
-    "bellStyle": "Styl zvonu",
-    "bellStyleBoth": "Obě",
-    "bellStyleLabel": "Styl zvonu",
-    "bellStyleNone": "Žádný",
-    "bellStyleSound": "Zvuk",
-    "bellStyleVisual": "Vizuální",
-    "colorTheme": "Barevný motiv",
-    "cursorBlink": "Blikání kurzoru",
-    "cursorBlinking": "Kurzor bliká",
-    "cursorBlinkingDesc": "Povolit blikající animaci kurzoru terminálu",
-    "cursorStyle": "Styl kurzoru",
-    "cursorStyleBar": "Bar",
-    "cursorStyleBlock": "Blok",
-    "cursorStyleLabel": "Styl kurzoru",
-    "cursorStyleUnderline": "Zdůraznit",
-    "customThemeAnsiColors": "Barvy ANSI",
-    "customThemeBackground": "Pozadí",
-    "customThemeBlack": "Černý",
-    "customThemeBlue": "Modrý",
-    "customThemeBrightBlack": "Jasně černá",
-    "customThemeBrightBlue": "Jasně modrá",
-    "customThemeBrightCyan": "Jasně azurová",
-    "customThemeBrightGreen": "Jasně zelená",
-    "customThemeBrightMagenta": "Světle purpurová",
-    "customThemeBrightRed": "Jasně červená",
-    "customThemeBrightWhite": "Jasně bílá",
-    "customThemeBrightYellow": "Jasně žlutá",
-    "customThemeColors": "Vlastní barvy",
-    "customThemeCursor": "Kurzor",
-    "customThemeCursorAccent": "Akcent kurzoru",
-    "customThemeCyan": "Azurová",
-    "customThemeForeground": "Popředí",
-    "customThemeGreen": "Zelený",
-    "customThemeMagenta": "Purpurová",
-    "customThemeRed": "Červený",
-    "customThemeResetTooltip": "Obnovit na výchozí nastavení",
-    "customThemeSelection": "Výběr",
-    "customThemeWhite": "Bílý",
-    "customThemeYellow": "Žluť",
-    "deleteGlobalThemeTooltip": "Smazat toto téma",
-    "docsLink": "Zobrazit dokumenty",
-    "enableAutoMosh": "Povolit Auto-Mosh",
-    "enableAutoMoshDesc": "Pokud je k dispozici, preferujte Mosh před SSH.",
-    "enableAutoTmux": "Povolit Auto-Tmux",
-    "enableAutoTmuxDesc": "Udržujte svůj shell a vše, co v něm běží, aktivní i po odpojení a restartu prohlížeče spuštěním uvnitř tmuxu (tmux musí být nainstalován na hostiteli).",
-    "fastScrollModifier": "Modifikátor rychlého rolování",
-    "fastScrollModifierAlt": "Alternativní",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Modifikátor rychlého rolování",
-    "fastScrollModifierShift": "Posun",
-    "fastScrollSensitivity": "Citlivost rychlého rolování",
-    "fastScrollSensitivityLabel": "Citlivost rychlého rolování",
-    "fontFamily": "Rodina písem",
-    "fontFamilyCustomHint": "Vyberte si dodané písmo nebo zvolte možnost Vlastní a zadejte přesný název písma, které je již ve vašem systému nainstalováno (např. MesloLGS NF, Noto Sans Mono). Termix písma za vás nainstalovat nemůže, nejprve si ho nainstalujte do svého operačního systému.",
-    "fontFamilyCustomOption": "Zvyk...",
-    "fontFamilyCustomPlaceholder": "Přesný název písma, např. MesloLGS NF",
-    "fontFamilyLabel": "Rodina písem",
-    "fontSize": "Velikost písma",
-    "fontSizeLabel": "Velikost písma",
-    "hostNotFound": "Hostitel nenalezen",
-    "letterSpacing": "Rozteč písmen",
-    "letterSpacingPx": "Rozteč písmen (px)",
-    "lineHeight": "Výška řádku",
-    "lineHeightLabel": "Výška řádku",
-    "linkClickBehaviorConfirm": "Zobrazit vyskakovací okno pro otevření nebo kopírování",
-    "linkClickBehaviorDesc": "Řídí, co se stane po kliknutí na odkaz v terminálu. Pro nastavení na úrovni aplikace použijte možnost „Výchozí“.",
-    "linkClickBehaviorDirect": "Otevřít přímo",
-    "linkClickBehaviorLabel": "Chování při kliknutí na odkaz",
-    "loadingHost": "Načítání hostitele...",
-    "localEchoAuto": "Automatický",
-    "localEchoDesc": "Předvídat bezpečně tisknutelné stisky kláves lokálně na pomalém připojení. Výzvy k zadání hesla a ovládací prvky se nikdy nezobrazují.",
-    "localEchoLabel": "Místní ozvěna",
-    "localEchoOff": "Vypnuto",
-    "localEchoOn": "Vždy zapnuto",
-    "macOptionIsMetaLabel": "Klávesa Option odesílá metadata",
-    "macOptionIsMetaShortDesc": "Zakázat psaní speciálních znaků (například @ nebo |) pomocí klávesy Option/Alt v systému macOS namísto odesílání Meta",
-    "moshCommand": "Příkaz MOSH",
-    "moshCommandLabel": "Mosh Command",
-    "noSavedThemes": "Zatím žádné uložené motivy",
-    "none": "Žádný",
-    "passwordPromptAutoFillDesc": "Nabídnout vyplnění uloženého hesla, když se o něj terminál zeptá. Vypněte tuto možnost, pokud chcete, aby se na tomto hostiteli heslo nikdy automaticky nevyplňovalo.",
-    "passwordPromptAutoFillLabel": "Automatické vyplnění hesla nabídky",
-    "autoReconnectLabel": "Automatické opětovné připojení",
-    "autoReconnectDesc": "Samovolně se znovu připojí, když SSH připojení přestane být připojeno, například po výpadku sítě nebo po uspání. Zachovává posun zpět.",
-    "rightClickSelectsWord": "Kliknutí pravým tlačítkem myši vybere slovo",
-    "rightClickSelectsWordLabel": "Kliknutí pravým tlačítkem myši Vybere slovo",
-    "rightClickSelectsWordShortDesc": "Vyberte slovo pod kurzorem kliknutím pravým tlačítkem myši",
-    "saveAsGlobalTheme": "Uložit jako globální motiv",
-    "saveGlobalThemeError": "Uložení motivu se nezdařilo",
-    "saveGlobalThemeNamePrompt": "Zadejte název tohoto motivu",
-    "saveGlobalThemeSuccess": "Téma uloženo",
-    "savedThemesLabel": "Uložená témata",
-    "scrollbackBufferLabel": "Vyrovnávací paměť pro rolování zpět",
-    "scrollbackMaxLines": "Maximální počet řádků uchovávaných v historii",
-    "sudoPasswordAutoFill": "Automatické vyplňování hesla Sudo",
-    "sudoPasswordAutoFillDesc": "Uložte heslo sudo, aby metriky hostitele, výzvy terminálu a další mohly automaticky spouštět privilegované příkazy.",
-    "sudoPasswordAutoFillLabel": "Automatické vyplňování hesla Sudo",
-    "syntaxCategoryIpAddresses": "IP adresy",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Úrovně protokolů",
-    "syntaxCategoryLogLevelsDesc": "chyba, varování, informace, ladění, fatální",
-    "syntaxCategoryNumbers": "Označená čísla",
-    "syntaxCategoryNumbersDesc": "port 8080, výstup 1, stav 404",
-    "syntaxCategoryPaths": "Cesty k souborům",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/soubor.txt",
-    "syntaxCategoryTimestamps": "Časová razítka",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 15. 1. 2024",
-    "syntaxCategoryUrls": "URL adresy",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "Obarvení výstupu terminálu (chyby, cesty, IP adresy, časová razítka)",
-    "syntaxHighlightingLabel": "Zvýrazňování syntaxe",
-    "terminalAppearance": "Vzhled terminálu",
-    "theme": "Téma",
-    "themePreview": "Náhled motivu",
-    "useSSHTitleDesc": "Aktualizujte název karty z názvu okna shellu namísto názvu hostitele",
-    "useSSHTitleLabel": "Použít název okna SSH",
-    "enableTunnel": "Povolit tunel",
-    "enableFileManager": "Povolit Správce souborů",
-    "enableDocker": "Povolit Docker",
-    "startupSnippet": "Spustit úryvek",
-    "quickActions": "Rychlé akce",
-    "proxmoxLastSyncStatus": {
-      "success": "Úspěch"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} přeskočeno (nenalezena žádná IP adresa)",
-    "proxmoxStatsUrlCopied": "URL statistik Proxmoxu zkopírována do schránky",
-    "rdpUrlCopied": "URL adresa RDP zkopírována",
-    "vncUrlCopied": "URL adresa VNC zkopírována",
-    "filterAuthStepca": "Krok CA",
-    "guac": {
-      "noCredential": "Žádné pověření (přímé pověření níže)",
-      "authTypeDirect": "Řídit",
-      "authTypeCredential": "Přihlašovací údaj",
-      "authTypeNone": "Žádný",
-      "recordingPath": "Cesta záznamu",
-      "recordingName": "Název nahrávky",
-      "saveHostFirst": "Nejprve uložte hostitele.",
-      "sharingOptionsAfterSave": "Možnosti sdílení jsou k dispozici po uložení hostitele.",
-      "permissionLevel": "Úroveň oprávnění",
-      "typeHeader": "Typ",
-      "targetHeader": "Cíl",
-      "permissionHeader": "Povolení",
-      "cancelBtn": "Zrušit",
-      "savingBtn": "Ukládání…",
-      "updateHostBtn": "Aktualizovat hostitele",
-      "addHostBtn": "Přidat hostitele"
-    },
-    "filterAuthVault": "Klenba"
-  },
-  "nav": {
-    "history": "Dějiny",
-    "localTerminal": "Místní terminál",
-    "sshTools": "SSH nástroje",
-    "terminal": "Terminál",
-    "macros": "Makra"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Zde napište pro vysílání stisknutí kláves...",
-    "copyOnSelect": "Automatické kopírování vybraného textu",
-    "enableRightClickCopyPaste": "Povolit kopírování/vkládání kliknutím pravým tlačítkem myši",
-    "fillPassword": "Vyplňte heslo",
-    "fillPasswordMissing": "Pro {{count}} vybraných terminálů není uloženo žádné heslo.",
-    "fillPasswordSuccess": "Heslo vyplněno do terminálu(ů) {{count}}",
-    "keyRecordingTitle": "Nahrávání klíčů",
-    "noTerminalTabsOpen": "Žádné otevřené karty terminálu",
-    "recordToTerminals": "Záznam do terminálů",
-    "selectAll": "Vše",
-    "selectNone": "Žádný",
-    "selectTerminalsAbove": "Vyberte terminály výše",
-    "settingsTitle": "Nastavení",
-    "startRecording": "Spustit nahrávání",
-    "stopRecording": "Zastavit nahrávání"
-  },
-  "keybindings": {
-    "copy": "Kopírovat výběr",
-    "paste": "Pasta",
-    "sendControlCode": "Odeslat signál Ctrl+písmeno",
-    "sendText": "Odeslat text",
-    "controlCodeLabel": "Dopis",
-    "textLabel": "Text k odeslání",
-    "appendEnterLabel": "Po odeslání stiskněte Enter",
-    "clipboardPermissionNote": "V některých prohlížečích se může při prvním použití zobrazit výzva k zadání povolení ke schránce.",
-    "textRequired": "Zadejte text k odeslání",
-    "controlCodeRequired": "Zadejte jedno písmeno pro kontrolní kód",
-    "builtIn": {
-      "copyCtrlC": "Kopírovat výběr (Ctrl+C, pouze když je vybraný text)",
-      "copyCtrlShiftC": "Kopírovat výběr (Ctrl+Shift+C)",
-      "copyCmdC": "Kopírovat výběr (Cmd+C)",
-      "pasteCtrlShiftV": "Vložit ze schránky (Ctrl+Shift+V)",
-      "ctrlW": "Odeslat Ctrl+W do shellu (blokováno zavírání karty prohlížeče)",
-      "ctrlT": "Odeslat Ctrl+T do shellu (blokováno otevírání karty prohlížeče)",
-      "ctrlN": "Odeslat Ctrl+N do shellu (blokováno otevírání okna prohlížeče)",
-      "ctrlQ": "Odeslat Ctrl+Q do shellu (blokováno ukončení prohlížeče)"
-    }
-  },
-  "macros": {
-    "title": "Makra",
-    "description": "Spusťte v terminálu uloženou sérii příkazů a reagujte na to, co server odešle zpět.",
-    "target": "Cíl",
-    "noTerminal": "Žádný otevřený terminál",
-    "empty": "Zatím žádná makra",
-    "emptyHint": "Vytvořte makro pro automatizaci procesů v terminálu, jako je přihlašování, restartování služby nebo odpovídání na výzvy.",
-    "create": "Nové makro",
-    "back": "Zpět k makrům",
-    "name": "Jméno",
-    "namePlaceholder": "Restartujte webový server",
-    "nameRequired": "Před uložením zadejte makro název",
-    "descriptionLabel": "Popis",
-    "descriptionPlaceholder": "Co toto makro dělá (volitelné)",
-    "unsaved": "Neuložené změny",
-    "save": "Uložit",
-    "saved": "Makro uloženo",
-    "saveFailed": "Makro se nepodařilo uložit.",
-    "delete": "Vymazat",
-    "deleteTitle": "Smazat toto makro?",
-    "deleteBody": "Soubor „{{name}}“ bude trvale smazán. Tuto akci nelze vrátit zpět.",
-    "deleted": "Makro smazáno",
-    "cancel": "Zrušit",
-    "run": "Běh",
-    "stop": "Zastávka",
-    "running": "Běh...",
-    "completed": "Makro dokončeno",
-    "failed": "Makro selhalo",
-    "loadFailed": "Nepodařilo se načíst makra",
-    "needTerminal": "Nejprve otevřete a připojte terminál",
-    "noSteps": "Toto makro zatím nemá žádné kroky. Přidejte jeden níže.",
-    "addStep": "Přidat krok",
-    "stepNumber": "Krok {{number}}",
-    "removeStep": "Odebrat krok",
-    "confirmRunTitle": "Spustit toto makro?",
-    "confirmRunBody": "„{{name}}“ odešle příkazy pro {{host}}.",
-    "confirmRunAction": "Spustit makro",
-    "stepTypes": {
-      "send": {
-        "label": "Odeslat příkaz",
-        "help": "Zadá text do terminálu, stejně jako byste ho napsali."
-      },
-      "wait": {
-        "label": "Počkejte na výstup",
-        "help": "Pozastaví se, dokud server nevypíše text, který pojmenujete, například výzvu k zadání hesla."
-      },
-      "delay": {
-        "label": "Pauza",
-        "help": "Čeká pevně stanovenou dobu před dalším krokem."
-      },
-      "if": {
-        "label": "Pokud výstup obsahuje",
-        "help": "Zkontroluje vše, co server dosud vytiskl, a poté spustí jednu ze dvou větví."
-      },
-      "repeat": {
-        "label": "Opakovat",
-        "help": "Spustí kroky uvnitř něj tolikrát, kolikrát je nastaveno."
-      }
-    },
-    "send": {
-      "text": "Příkaz nebo text",
-      "textPlaceholder": "restartování systemctl v Nginxu",
-      "pressEnter": "Po odeslání stiskněte Enter",
-      "pressEnterHelp": "Vypněte tuto funkci, chcete-li psát text bez jeho odesílání."
-    },
-    "wait": {
-      "pattern": "Počkejte, dokud výstup neobsahuje",
-      "patternPlaceholder": "heslo:",
-      "timeout": "Vzdej se po",
-      "onTimeout": "Pokud se to nikdy neobjeví",
-      "stop": "Zastavit makro",
-      "continue": "Stejně pokračuj"
-    },
-    "delay": {
-      "duration": "Čekat na"
-    },
-    "ifStep": {
-      "pattern": "Pokud výstup obsahuje",
-      "patternPlaceholder": "Aktivní: aktivní (běží)",
-      "then": "Pak udělej tohle",
-      "else": "Jinak to udělej",
-      "emptyBranch": "Žádné schody"
-    },
-    "repeat": {
-      "count": "Počet opakování",
-      "times": "krát"
-    },
-    "match": {
-      "useRegex": "Porovnání s regulárním výrazem",
-      "useRegexHelp": "Nechte toto vypnuté, aby text přesně odpovídal napsanému textu.",
-      "invalidRegex": "Není to platný regulární výraz, bude nalezen jako prostý text."
-    },
-    "seconds": "sekundy",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "Je vyžadován vzdálený server. Pro použití tohoto typu připojení se připojte ke vzdálenému serveru v Nastavení."
-  },
-  "plugin": {
-    "name": "SSH terminál"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/da_DK.json b/plugins/ssh-terminal/locales/translated/da_DK.json
deleted file mode 100644
index 93ba385d7..000000000
--- a/plugins/ssh-terminal/locales/translated/da_DK.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Tilføje",
-    "arrowDown": "Pil ned",
-    "arrowLeft": "Pil til venstre",
-    "arrowRight": "Pil til højre",
-    "arrowUp": "Pil op",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Del",
-    "done": "Færdig",
-    "editQuickKeys": "Rediger genvejstaster",
-    "end": "Ende",
-    "esc": "Esc",
-    "home": "Hjem",
-    "pageDown": "PgDn",
-    "pageUp": "Side op",
-    "paste": "Indsæt",
-    "quickKeyPlaceholder": "f.eks. sudo ",
-    "quickKeysDesc": "Tryk på × for at fjerne. Understøtter op til 8 tegn.",
-    "quickKeysTitle": "Hurtigtaster",
-    "removeQuickKey": "Fjerne",
-    "resetDefaults": "Nulstil til standardindstillinger",
-    "shift": "Flytte",
-    "tab": "Faneblad"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Kunne ikke aktivere Auto-Tmux",
-    "autoTmuxEnabled": "Auto-Tmux aktiveret for {{host}}. Det gælder fra den næste forbindelse.",
-    "clipboardHttpWarning": "Kunne ikke læse udklipsholderen. Nogle browsere begrænser adgang til udklipsholderen uden for HTTPS - prøv Ctrl+V i stedet, eller server Termix via HTTPS.",
-    "closeTab": "Tæt",
-    "connecting": "Forbinder...",
-    "connectionLost": "Forbindelse tabt",
-    "connectionRejected": "Forbindelsen blev afvist af serveren. Kontroller din godkendelse og netværkskonfiguration.",
-    "connectionTimeout": "Forbindelsestimeout",
-    "enableAutoTmuxAction": "Aktivér Auto-Tmux",
-    "hostKeyRejected": "SSH-værtsnøglebekræftelse afvist. Forbindelse afbrudt.",
-    "linkDialogCopy": "Kopi",
-    "linkDialogOpen": "Åben",
-    "linkDialogTitle": "Åbn link",
-    "maxReconnectAttemptsReached": "Maksimalt antal forsøg på genoprettelse nået",
-    "noHostSelected": "Ingen vært valgt",
-    "passwordPromptFillTitle": "Udfyld den gemte adgangskode i denne prompt?",
-    "reconnect": "Genopret forbindelse",
-    "reconnected": "Genoprettet forbindelse",
-    "reconnecting": "Genopretter forbindelse... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Forbindelse mistet, genopretter forbindelse...",
-    "searchCaseSensitive": "Match-sag",
-    "searchClose": "Luk (Escape)",
-    "searchNext": "Næste kamp (Enter)",
-    "searchNoResults": "Ingen resultater",
-    "searchPlaceholder": "Finde",
-    "searchPrevious": "Forrige match (Shift+Enter)",
-    "searchRegex": "Brug regulært udtryk",
-    "searchResultCount": "{{index}} af {{count}}",
-    "searchWholeWord": "Match hele ordet",
-    "sessionExpiredNotice": "Din forrige session på {{host}} udløb efter {{minutes}} minutters afbrydelse; shell'en og alt, der kører i den, er væk. Aktiver Auto-Tmux på denne vært for at holde sessionerne aktive.",
-    "sessionExpiredNoticeNoMinutes": "Din forrige session på {{host}} udløb, mens forbindelsen var afbrudt; skallen og alt, der kørte i den, er væk. Aktiver Auto-Tmux på denne vært for at holde sessionerne aktive.",
-    "sessionTakenOver": "Sessionen blev åbnet i en anden fane. Genopretter forbindelse...",
-    "tmuxAttached": "Tilknyttede klienter",
-    "tmuxAttachedCount": "{{count}} vedhæftet",
-    "tmuxCopyHint": "Juster valget, og tryk på Enter for at kopiere til udklipsholderen",
-    "tmuxCreateNew": "Start en ny session",
-    "tmuxDetached": "Afkoblet fra tmux-session",
-    "tmuxLastActivity": "Sidste aktivitet",
-    "tmuxSessionAttached": "tmux-session vedhæftet: {{name}}",
-    "tmuxSessionCreated": "tmux-session oprettet: {{name}}",
-    "tmuxSessionPickerDesc": "Eksisterende tmux-sessioner fundet på denne vært. Vælg en for at gentilknytte eller opret en ny session.",
-    "tmuxSessionPickerTitle": "tmux-sessioner",
-    "tmuxTimeDays": "for {{count}}dage siden",
-    "tmuxTimeHours": "For {{count}}timer siden",
-    "tmuxTimeJustNow": "lige nu",
-    "tmuxTimeMinutes": "For {{count}}minutter siden",
-    "tmuxUnavailable": "tmux er ikke installeret på den eksterne vært, og bruger standardshell",
-    "tmuxWindowCount": "{{count}} vindue",
-    "tmuxWindows": "Vinduer",
-    "unknownError": "Der opstod en ukendt fejl",
-    "websocketAbnormalClose": "Forbindelsen blev lukket uventet. Dette kan skyldes et problem med reverse proxy eller SSL-konfigurationen. Tjek venligst serverlogfilerne.",
-    "websocketError": "WebSocket-forbindelsesfejl",
-    "clipboardReadFailed": "Kunne ikke læse fra udklipsholderen. Sørg for, at der er givet tilladelse til udklipsholderen.",
-    "clipboardWriteFailed": "Kunne ikke kopiere til udklipsholder. Sørg for, at siden serveres via HTTPS eller localhost.",
-    "connected": "Forbundet",
-    "totpCodeLabel": "Bekræftelseskode",
-    "duplicateTab": "Dupliker fane",
-    "imageChooseFile": "Vælg en billedfil",
-    "imageUploaded": "Billede uploadet: {{path}}",
-    "imageClipboardUnavailable": "Denne browser kan ikke læse billeder fra udklipsholderen",
-    "imageClipboardEmpty": "Intet billede fundet i udklipsholderen",
-    "localShell": "Lokal terminalskal",
-    "autocompleteHintComplete": "Tab eller Enter for at fuldføre",
-    "autocompleteHintNavigate": "↑↓ for at navigere",
-    "autocompleteHintClose": "Esc for at lukke"
-  },
-  "terminalToolbar": {
-    "detachTmux": "Afmonter tmux",
-    "detachTmuxDescription": "Afbryd tmux-session",
-    "dismissError": "Afvis billedfejl",
-    "hideToolbar": "Skjul værktøjslinjen",
-    "image": "Billedhandlinger (kun billeder)",
-    "imageActionFailed": "Billedhandling mislykkedes",
-    "layout": "Værktøjslinjevisningstilstand",
-    "layoutExpanded": "Udvidet med metrikker",
-    "layoutIcon": "Kun ikon",
-    "layoutLabeled": "Ikoner og etiketter",
-    "moveToolbar": "Flyt værktøjslinjen",
-    "moveToolbarHint": "Træk for at flytte værktøjslinjen",
-    "paste": "Indsæt billede",
-    "pasteImage": "Indsæt billede fra udklipsholder (kun billeder)",
-    "retry": "Prøv igen",
-    "showToolbar": "Udvid værktøjslinjen",
-    "upload": "Upload billede",
-    "uploadImage": "Upload et billede til værten",
-    "uploadingImage": "Uploader..."
-  },
-  "history": {
-    "noTerminalSelected": "Ingen terminal valgt",
-    "noTerminalSelectedHint": "Åbn en SSH-terminalfane for at se dens kommandohistorik",
-    "searchPlaceholder": "Søgehistorik...",
-    "clearAll": "Ryd alt",
-    "noHistoryEntries": "Ingen historikposter",
-    "trackingDisabled": "Historiksporing er deaktiveret",
-    "trackingDisabledHint": "Slå Kommandohistorik til i denne værts SSH Terminal-fane.",
-    "commandCount_one": "{{count}} kommando",
-    "commandCount_other": "{{count}} kommandoer"
-  },
-  "touchInput": {
-    "enabled": "Aktivér berøringsinput",
-    "enabledDesc": "Tillad scrolling med én finger i terminaler",
-    "momentumEnabled": "Aktiver momentum",
-    "momentumEnabledDesc": "Fortsæt med at scrolle kort efter et swipe",
-    "advanced": "Fremskreden",
-    "resetDefaults": "Nulstil til standardindstillinger",
-    "dragThreshold": "Trækgrænse",
-    "maxWheelDelta": "Maksimal hjuldelta",
-    "momentumSampleWindow": "Momentum-eksempelvindue",
-    "releaseGracePeriod": "Frigivelsesperiode",
-    "minimumVelocity": "Minimumshastighed",
-    "maximumVelocity": "Maksimal hastighed",
-    "maximumDuration": "Maksimal varighed",
-    "maximumTravel": "Maksimal rejse",
-    "decayTime": "Henfaldstid",
-    "pixelsPerTick": "Pixels pr. tick",
-    "maximumFrameInterval": "Maksimalt billedinterval",
-    "maximumTicksPerFrame": "Maksimalt antal ticks pr. frame"
-  },
-  "imageStorage": {
-    "instanceId": "Terminalsessionsinstans-ID",
-    "instanceIdDesc": "Instans-ID for en af dine tilsluttede terminalfaner, der bruges til at teste synligheden.",
-    "selectedModeUnavailable": "Ikke tilgængelig",
-    "test": "Prøve",
-    "testing": "Testning...",
-    "testFailed": "Kunne ikke teste billedlagring",
-    "testConnected": "Terminalsessionen er forbundet.",
-    "testNotConnected": "Ingen forbundet terminalsession med dette instans-ID.",
-    "testSelectedMode": "En upload ville bruge: {{mode}}",
-    "testLocalVisible": "Den lokale mappe er synlig fra den tilsluttede vært.",
-    "testLocalNotVisible": "Den lokale mappe er IKKE synlig fra den tilsluttede vært."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Berøringsinput",
-        "images": "Billedlagring",
-        "sessions": "Sessioner",
-        "newHosts": "Nye værter"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Terminalsessionens persistens",
-        "description": "Hvor længe en frakoblet terminal holdes aktiv på serveren, før den lukkes. Min. 1, maks. 1440 minutter. For sessioner, der skal overleve dette, skal Auto-Tmux aktiveres på værten."
-      },
-      "commandHistoryEnabled": {
-        "label": "Kommandohistorik",
-        "description": "Tillad optagelse af kommandohistorik. Når den er deaktiveret, gemmes historikken ikke uanset indstillingerne for den enkelte vært."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "Kommandohistorik for nye værter",
-        "description": "Om nye værter starter med kommandohistorik aktiveret."
-      },
-      "imageStorageMode": {
-        "label": "Lagringstilstand",
-        "description": "Hvor indsatte og uploadede terminalbilleder skrives. Automatiske valg efter forbindelse, lokal og fjern (SFTP) er rettet.",
-        "auto": "Bil",
-        "local": "Lokal",
-        "remoteSftp": "Fjernbetjening (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Lokal mappe",
-        "description": "Absolut sti på Termix-backend'en, hvor lokal tilstand skriver billeder. Vises aldrig efter lagring. Tom bruger TERMIX_IMAGE_DIR."
-      },
-      "imageHostPath": {
-        "label": "Værtssti",
-        "description": "Værtsvisningen af den lokale mappe, som terminalagenter modtager."
-      },
-      "imageTtlMs": {
-        "label": "TTL (ms)",
-        "description": "Hvor længe et uploadet billede gemmes, i millisekunder. Tom bruger TERMIX_IMAGE_TTL_MS eller en time."
-      },
-      "imageMaxCount": {
-        "label": "Maksimalt antal billeder",
-        "description": "De fleste billeder gemmes på én gang. Tomme bruger TERMIX_MAX_IMAGE_COUNT eller 100."
-      },
-      "imageMaxBytes": {
-        "label": "Maks. lagerplads i bytes",
-        "description": "Flest bytes af billeder gemmes på én gang. Tomme filer bruger TERMIX_MAX_IMAGE_STORAGE_BYTES eller 5 GiB."
-      },
-      "sessionPersistence": {
-        "label": "Behold sessioner efter afbrydelse",
-        "description": "Hold en frakoblet terminal aktiv på serveren i ovenstående periode, så genåbning af fanen fortsætter, hvor den slap."
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "Kør nye værters terminaler inde i tmux, så sessioner overlever afbrydelser (kræver tmux på værten)"
-      },
-      "newHostTheme": {
-        "label": "Tema for nye værter",
-        "description": "Terminaltemaet en ny vært starter med."
-      },
-      "newHostFontFamily": {
-        "label": "Skrifttype til nye værter",
-        "description": "Terminalfonten, som en ny vært starter med."
-      },
-      "newHostFontSize": {
-        "label": "Skriftstørrelse for nye værter",
-        "description": "Terminalens skriftstørrelse, som en ny vært starter med, i pixels."
-      },
-      "newHostCursorStyle": {
-        "label": "Markørstil for nye værter"
-      },
-      "newHostCursorBlink": {
-        "label": "Blinkende markør for nye værter"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Aktivér Terminalværktøjslinjen",
-        "description": "Vis en værktøjslinje med hurtig adgang, der er docket til den aktive terminal for denne værts værktøjer og live statistikker"
-      },
-      "terminalToolbarPosition": {
-        "label": "Værktøjslinjeposition",
-        "description": "Hvor værktøjslinjen sidder i terminalen. Du kan stadig trække den derfra.",
-        "bottom": "Nederst i midten",
-        "bottomLeft": "Nederst til venstre",
-        "bottomRight": "Nederst til højre",
-        "top": "Øverste midtpunkt",
-        "topLeft": "Øverst til venstre",
-        "topRight": "Øverst til højre"
-      },
-      "terminalToolbarStartState": {
-        "label": "Værktøjslinjens starttilstand",
-        "description": "Om værktøjslinjen åbnes udvidet eller minimeret, når terminalen opretter forbindelse",
-        "expanded": "Udvidet",
-        "collapsed": "Minimeret"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Værktøjslinjevisningstilstand",
-        "description": "Sådan vises knapper på værktøjslinjen. Sidst brugt gemmer det, du valgte i værktøjslinjen.",
-        "remember": "Sidst brugt",
-        "icon": "Kun ikon",
-        "labeled": "Ikoner og etiketter",
-        "expanded": "Udvidet med statistikker"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Vis live statistikker",
-        "description": "Vis statistik for live værter over knapperne på værktøjslinjen i udvidet tilstand"
-      },
-      "terminalToolbarFade": {
-        "label": "Fade når den er inaktiv",
-        "description": "Fade værktøjslinjen ud, indtil du holder musen over den"
-      },
-      "enableCommandHistory": {
-        "label": "Kommandohistorik",
-        "description": "Optagelseskommandoer køres i denne terminal for historik og autofuldførelse"
-      },
-      "enableTerminal": {
-        "label": "Aktivér terminal",
-        "description": "Tilbyd en SSH-terminal til denne vært."
-      },
-      "inheritAppearance": {
-        "label": "Brug brugerstandarder"
-      },
-      "theme": {
-        "label": "Tema"
-      },
-      "cursorBlink": {
-        "label": "Blinkende markør"
-      },
-      "cursorStyle": {
-        "label": "Markørstil"
-      },
-      "fontSize": {
-        "label": "Skriftstørrelse"
-      },
-      "fontFamily": {
-        "label": "Skrifttype"
-      },
-      "scrollback": {
-        "label": "Rul tilbage"
-      },
-      "letterSpacing": {
-        "label": "Bogstavafstand"
-      },
-      "lineHeight": {
-        "label": "Linjehøjde"
-      },
-      "bellStyle": {
-        "label": "Klokke"
-      },
-      "minimumContrastRatio": {
-        "label": "Minimum kontrastforhold"
-      },
-      "backgroundImage": {
-        "label": "Baggrundsbillede"
-      },
-      "backgroundImageOpacity": {
-        "label": "Baggrundsbilledets opacitet"
-      },
-      "customThemeColors": {
-        "label": "Brugerdefinerede temafarver"
-      },
-      "rightClickSelectsWord": {
-        "label": "Højreklik markerer ord"
-      },
-      "macOptionIsMeta": {
-        "label": "Valgmuligheden er Meta"
-      },
-      "fastScrollModifier": {
-        "label": "Hurtig scroll-tast"
-      },
-      "fastScrollSensitivity": {
-        "label": "Hurtig scrollhastighed"
-      },
-      "backspaceMode": {
-        "label": "Tilbage"
-      },
-      "autoMosh": {
-        "label": "Automosh"
-      },
-      "moshCommand": {
-        "label": "Mosh-kommando"
-      },
-      "autoTmux": {
-        "label": "Auto tmux"
-      },
-      "useSSHTitle": {
-        "label": "Brug SSH-titlen"
-      },
-      "syntaxHighlighting": {
-        "label": "Syntaksfremhævning"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Syntaksfremhævningskategorier"
-      },
-      "linkClickBehavior": {
-        "label": "Klik på linket"
-      },
-      "localEcho": {
-        "label": "Lokalt ekko"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Tilbyd at udfylde adgangskodeprompter"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Udfyld sudo-prompter"
-      },
-      "autoReconnect": {
-        "label": "Genopret forbindelse automatisk"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Kommando Autofuldførelse",
-        "description": "Vis autofuldførelse under indtastning, hvis du trykker på tabulatortasten"
-      },
-      "localEcho": {
-        "label": "Lokalt ekko",
-        "description": "Reducer opfattet inputforsinkelse ved hjælp af sikker lokal tastetrykforudsigelse"
-      },
-      "linkClickBehavior": {
-        "label": "Klik på terminallink",
-        "description": "Standardadfærd ved klik på links i terminalen"
-      },
-      "customThemes": {
-        "label": "Gemte temaer"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Lokal terminal"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Brug live terminalsessioner",
-      "description": "Lader andre funktioner, såsom sessionsdeling og -optagelse, få adgang til dine live terminalsessioner."
-    },
-    "history": {
-      "title": "Læs kommandohistorik",
-      "description": "Lader andre funktioner, såsom AI-assistenten, læse din kommandohistorik."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Terminal",
-    "addHost": "Tilføj vært",
-    "applyGlobalThemeTooltip": "Anvend dette tema",
-    "backgroundImageDesc": "Valgfri URL til et baggrundsbillede i terminalen",
-    "backgroundImageLabel": "URL til baggrundsbillede",
-    "backgroundImageOpacityLabel": "Baggrundsbilledets opacitet",
-    "backspaceMode": "Backspace-tilstand",
-    "backspaceModeControlH": "Kontrol-H (BS)",
-    "backspaceModeLabel": "Backspace-tilstand",
-    "backspaceModeNormal": "Normal (DEL)",
-    "behaviorAndAdvanced": "Adfærd og avanceret",
-    "bellStyle": "Klokkestil",
-    "bellStyleBoth": "Begge",
-    "bellStyleLabel": "Klokkestil",
-    "bellStyleNone": "Ingen",
-    "bellStyleSound": "Sund",
-    "bellStyleVisual": "Visuel",
-    "colorTheme": "Farvetema",
-    "cursorBlink": "Markørblink",
-    "cursorBlinking": "Markøren blinker",
-    "cursorBlinkingDesc": "Aktivér blinkende animation for terminalmarkøren",
-    "cursorStyle": "Markørstil",
-    "cursorStyleBar": "Bar",
-    "cursorStyleBlock": "Blok",
-    "cursorStyleLabel": "Markørstil",
-    "cursorStyleUnderline": "Understrege",
-    "customThemeAnsiColors": "ANSI-farver",
-    "customThemeBackground": "Baggrund",
-    "customThemeBlack": "Sort",
-    "customThemeBlue": "Blå",
-    "customThemeBrightBlack": "Klar sort",
-    "customThemeBrightBlue": "Klarblå",
-    "customThemeBrightCyan": "Lys cyan",
-    "customThemeBrightGreen": "Klargrøn",
-    "customThemeBrightMagenta": "Lys magenta",
-    "customThemeBrightRed": "Klar rød",
-    "customThemeBrightWhite": "Klar hvid",
-    "customThemeBrightYellow": "Klar gul",
-    "customThemeColors": "Brugerdefinerede farver",
-    "customThemeCursor": "Markør",
-    "customThemeCursorAccent": "Markøraccent",
-    "customThemeCyan": "Cyan",
-    "customThemeForeground": "Forgrund",
-    "customThemeGreen": "Grøn",
-    "customThemeMagenta": "Magenta",
-    "customThemeRed": "Rød",
-    "customThemeResetTooltip": "Nulstil til standardindstillinger",
-    "customThemeSelection": "Udvælgelse",
-    "customThemeWhite": "Hvid",
-    "customThemeYellow": "Gul",
-    "deleteGlobalThemeTooltip": "Slet dette tema",
-    "docsLink": "Se dokumenter",
-    "enableAutoMosh": "Aktivér automatisk mosh",
-    "enableAutoMoshDesc": "Foretræk Mosh frem for SSH, hvis det er muligt",
-    "enableAutoTmux": "Aktivér Auto-Tmux",
-    "enableAutoTmuxDesc": "Hold din shell og alt, der kører i den, i live på tværs af afbrydelser og genstart af browseren ved at køre den inde i tmux (tmux skal være installeret på værten)",
-    "fastScrollModifier": "Hurtig scroll-modifikator",
-    "fastScrollModifierAlt": "Alt",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Hurtig scroll-modifikator",
-    "fastScrollModifierShift": "Flytte",
-    "fastScrollSensitivity": "Hurtig scrollfølsomhed",
-    "fastScrollSensitivityLabel": "Hurtig scrollfølsomhed",
-    "fontFamily": "Skrifttypefamilie",
-    "fontFamilyCustomHint": "Vælg en medfølgende skrifttype, eller vælg Brugerdefineret og skriv det nøjagtige navn på en skrifttype, der allerede er installeret på dit system (f.eks. MesloLGS NF, Noto Sans Mono). Termix kan ikke installere skrifttyper for dig, så installer det først på dit operativsystem.",
-    "fontFamilyCustomOption": "Skik...",
-    "fontFamilyCustomPlaceholder": "Præcis skrifttypenavn, f.eks. MesloLGS NF",
-    "fontFamilyLabel": "Skrifttypefamilie",
-    "fontSize": "Skriftstørrelse",
-    "fontSizeLabel": "Skriftstørrelse",
-    "hostNotFound": "Værten blev ikke fundet",
-    "letterSpacing": "Bogstavafstand",
-    "letterSpacingPx": "Bogstavafstand (px)",
-    "lineHeight": "Linjehøjde",
-    "lineHeightLabel": "Linjehøjde",
-    "linkClickBehaviorConfirm": "Vis pop op-vindue for at åbne eller kopiere",
-    "linkClickBehaviorDesc": "Styrer, hvad der sker, når du klikker på et link i terminalen. Brug 'Standard' for at følge indstillingen på appniveau.",
-    "linkClickBehaviorDirect": "Åbn direkte",
-    "linkClickBehaviorLabel": "Linkkliksadfærd",
-    "loadingHost": "Indlæser vært...",
-    "localEchoAuto": "Automatisk",
-    "localEchoDesc": "Forudsig sikre, udskrivbare tastetryk lokalt på langsomme forbindelser. Adgangskodeprompter og kontrolinput gentages aldrig.",
-    "localEchoLabel": "Lokalt ekko",
-    "localEchoOff": "Slukket",
-    "localEchoOn": "Altid tændt",
-    "macOptionIsMetaLabel": "Alternativtast sender meta",
-    "macOptionIsMetaShortDesc": "Deaktiver muligheden for at skrive specialtegn (som @ eller |) med Option/Alt-tasten på macOS i stedet for at sende Meta",
-    "moshCommand": "MOSH-kommando",
-    "moshCommandLabel": "Mosh-kommandoen",
-    "noSavedThemes": "Ingen gemte temaer endnu",
-    "none": "Ingen",
-    "passwordPromptAutoFillDesc": "Tilbyd at udfylde den gemte adgangskode, når terminalen beder om en. Slå fra for aldrig at udfylde en adgangskode automatisk på denne vært.",
-    "passwordPromptAutoFillLabel": "Automatisk udfyldning af tilbudsadgangskode",
-    "autoReconnectLabel": "Automatisk genoprettelse af forbindelse",
-    "autoReconnectDesc": "Genopretter forbindelsen af sig selv, når SSH-forbindelsen afbrydes, f.eks. efter et netværksfejl eller dvaletilstand. Bevarer scrollback-funktionen.",
-    "rightClickSelectsWord": "Højreklik markerer ord",
-    "rightClickSelectsWordLabel": "Højreklik markerer ord",
-    "rightClickSelectsWordShortDesc": "Vælg ordet under markøren ved højreklik",
-    "saveAsGlobalTheme": "Gem som globalt tema",
-    "saveGlobalThemeError": "Temaet kunne ikke gemmes",
-    "saveGlobalThemeNamePrompt": "Indtast et navn til dette tema",
-    "saveGlobalThemeSuccess": "Tema gemt",
-    "savedThemesLabel": "Gemte temaer",
-    "scrollbackBufferLabel": "Scrollback-buffer",
-    "scrollbackMaxLines": "Maksimalt antal linjer gemt i historikken",
-    "sudoPasswordAutoFill": "Sudo-adgangskode automatisk udfyldning",
-    "sudoPasswordAutoFillDesc": "Gem en sudo-adgangskode, så værtsmålinger, terminalprompter og andre kan køre privilegerede kommandoer automatisk.",
-    "sudoPasswordAutoFillLabel": "Sudo-adgangskode automatisk udfyldning",
-    "syntaxCategoryIpAddresses": "IP-adresser",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Logniveauer",
-    "syntaxCategoryLogLevelsDesc": "fejl, advarsel, info, fejlfinding, fatal",
-    "syntaxCategoryNumbers": "Mærkede tal",
-    "syntaxCategoryNumbersDesc": "port 8080, exit 1, status 404",
-    "syntaxCategoryPaths": "Filstier",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/fil.txt",
-    "syntaxCategoryTimestamps": "Tidsstempler",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 2024-01-15",
-    "syntaxCategoryUrls": "URL'er",
-    "syntaxCategoryUrlsDesc": "https://eksempel.com",
-    "syntaxHighlightingDesc": "Farvlæg terminaloutput (fejl, stier, IP'er, tidsstempler)",
-    "syntaxHighlightingLabel": "Syntaksfremhævning",
-    "terminalAppearance": "Terminalens udseende",
-    "theme": "Tema",
-    "themePreview": "Temaforhåndsvisning",
-    "useSSHTitleDesc": "Opdater fanetitlen fra skallens vinduestitel i stedet for værtsnavnet",
-    "useSSHTitleLabel": "Brug SSH-vinduestitel",
-    "enableTunnel": "Aktivér tunnel",
-    "enableFileManager": "Aktivér Filhåndtering",
-    "enableDocker": "Aktivér Docker",
-    "startupSnippet": "Opstartskodestykke",
-    "quickActions": "Hurtige handlinger",
-    "proxmoxLastSyncStatus": {
-      "success": "Succes"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} sprunget over (ingen IP fundet)",
-    "proxmoxStatsUrlCopied": "Proxmox Stats URL kopieret til udklipsholder",
-    "rdpUrlCopied": "RDP-URL kopieret",
-    "vncUrlCopied": "VNC-URL kopieret",
-    "filterAuthStepca": "Trin CA",
-    "guac": {
-      "noCredential": "Ingen legitimationsoplysninger (direkte legitimationsoplysninger nedenfor)",
-      "authTypeDirect": "Direkte",
-      "authTypeCredential": "Legitimationsoplysninger",
-      "authTypeNone": "Ingen",
-      "recordingPath": "Optagelsessti",
-      "recordingName": "Optagelsesnavn",
-      "saveHostFirst": "Gem værten først.",
-      "sharingOptionsAfterSave": "Delingsmuligheder er tilgængelige, når værten er blevet gemt.",
-      "permissionLevel": "Tilladelsesniveau",
-      "typeHeader": "Type",
-      "targetHeader": "Mål",
-      "permissionHeader": "Tilladelse",
-      "cancelBtn": "Ophæve",
-      "savingBtn": "Gemmer...",
-      "updateHostBtn": "Opdater vært",
-      "addHostBtn": "Tilføj vært"
-    },
-    "filterAuthVault": "Hvælving"
-  },
-  "nav": {
-    "history": "Historie",
-    "localTerminal": "Lokal terminal",
-    "sshTools": "SSH-værktøjer",
-    "terminal": "Terminal",
-    "macros": "Makroer"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Skriv her for at udsende tastetryk...",
-    "copyOnSelect": "Kopier automatisk den markerede tekst",
-    "enableRightClickCopyPaste": "Aktivér højreklik med kopiering/indsætning",
-    "fillPassword": "Udfyld adgangskode",
-    "fillPasswordMissing": "Ingen gemt adgangskode til {{count}} valgte terminal(er)",
-    "fillPasswordSuccess": "Udfyldt adgangskode i {{count}} terminal(er)",
-    "keyRecordingTitle": "Nøgleoptagelse",
-    "noTerminalTabsOpen": "Ingen terminalfaner åbne",
-    "recordToTerminals": "Optag til terminaler",
-    "selectAll": "Alle",
-    "selectNone": "Ingen",
-    "selectTerminalsAbove": "Vælg terminaler ovenfor",
-    "settingsTitle": "Indstillinger",
-    "startRecording": "Start optagelse",
-    "stopRecording": "Stop optagelse"
-  },
-  "keybindings": {
-    "copy": "Kopiér valg",
-    "paste": "Indsæt",
-    "sendControlCode": "Send Ctrl+bogstavsignal",
-    "sendText": "Send sms",
-    "controlCodeLabel": "Bogstav",
-    "textLabel": "Tekst der skal sendes",
-    "appendEnterLabel": "Tryk Enter efter afsendelse",
-    "clipboardPermissionNote": "Kan bede om tilladelse til udklipsholder ved første brug i nogle browsere.",
-    "textRequired": "Indtast den tekst, der skal sendes",
-    "controlCodeRequired": "Indtast et enkelt bogstav for kontrolkoden",
-    "builtIn": {
-      "copyCtrlC": "Kopiér det markerede (Ctrl+C, kun når teksten er markeret)",
-      "copyCtrlShiftC": "Kopiér markering (Ctrl+Shift+C)",
-      "copyCmdC": "Kopiér valg (Cmd+C)",
-      "pasteCtrlShiftV": "Indsæt fra udklipsholder (Ctrl+Shift+V)",
-      "ctrlW": "Send Ctrl+W til shell (blokeret fra at lukke browserfane)",
-      "ctrlT": "Send Ctrl+T til shell (blokeret fra at åbne browserfaneblad)",
-      "ctrlN": "Send Ctrl+N til shell (blokeret fra at åbne browservindue)",
-      "ctrlQ": "Send Ctrl+Q til shell (blokeret fra at afslutte browser)"
-    }
-  },
-  "macros": {
-    "title": "Makroer",
-    "description": "Kør en gemt række kommandoer i en terminal, og reager på, hvad serveren sender tilbage.",
-    "target": "Mål",
-    "noTerminal": "Ingen terminal åben",
-    "empty": "Ingen makroer endnu",
-    "emptyHint": "Opret en makro for at automatisere et terminalflow, f.eks. at logge ind, genstarte en tjeneste eller besvare prompts.",
-    "create": "Ny makro",
-    "back": "Tilbage til makroer",
-    "name": "Navn",
-    "namePlaceholder": "Genstart webserveren",
-    "nameRequired": "Giv makroen et navn, før du gemmer den",
-    "descriptionLabel": "Beskrivelse",
-    "descriptionPlaceholder": "Hvad denne makro gør (valgfrit)",
-    "unsaved": "Ikke-gemte ændringer",
-    "save": "Spare",
-    "saved": "Makro gemt",
-    "saveFailed": "Makroen kunne ikke gemmes",
-    "delete": "Slet",
-    "deleteTitle": "Slette denne makro?",
-    "deleteBody": "\"{{name}}\" vil blive slettet permanent. Dette kan ikke fortrydes.",
-    "deleted": "Makro slettet",
-    "cancel": "Ophæve",
-    "run": "Løbe",
-    "stop": "Stop",
-    "running": "Løber...",
-    "completed": "Makro færdig",
-    "failed": "Makro mislykkedes",
-    "loadFailed": "Makroer kunne ikke indlæses",
-    "needTerminal": "Åbn og tilslut først en terminal",
-    "noSteps": "Denne makro har endnu ingen trin. Tilføj et nedenfor.",
-    "addStep": "Tilføj trin",
-    "stepNumber": "Trin {{number}}",
-    "removeStep": "Fjern trin",
-    "confirmRunTitle": "Køre denne makro?",
-    "confirmRunBody": "\"{{name}}\" sender kommandoer til {{host}}.",
-    "confirmRunAction": "Kør makro",
-    "stepTypes": {
-      "send": {
-        "label": "Send kommando",
-        "help": "Skriver tekst i terminalen, på samme måde som hvis du havde skrevet den."
-      },
-      "wait": {
-        "label": "Vent på output",
-        "help": "Holder pause, indtil serveren udskriver den tekst, du navngiver, f.eks. en adgangskodeprompt."
-      },
-      "delay": {
-        "label": "Pause",
-        "help": "Venter et fast tidsrum før næste trin."
-      },
-      "if": {
-        "label": "Hvis outputtet indeholder",
-        "help": "Kontrollerer alt, hvad serveren har udskrevet indtil videre, og kører derefter en af to grene."
-      },
-      "repeat": {
-        "label": "Gentage",
-        "help": "Kører trinnene inde i den et bestemt antal gange."
-      }
-    },
-    "send": {
-      "text": "Kommando eller tekst",
-      "textPlaceholder": "systemctl genstart nginx",
-      "pressEnter": "Tryk Enter efter afsendelse",
-      "pressEnterHelp": "Slå dette fra for at skrive tekst uden at indsende den."
-    },
-    "wait": {
-      "pattern": "Vent indtil outputtet indeholder",
-      "patternPlaceholder": "adgangskode:",
-      "timeout": "Giv op efter",
-      "onTimeout": "Hvis det aldrig dukker op",
-      "stop": "Stop makroen",
-      "continue": "Fortsæt alligevel"
-    },
-    "delay": {
-      "duration": "Vent på"
-    },
-    "ifStep": {
-      "pattern": "Hvis outputtet indeholder",
-      "patternPlaceholder": "Aktiv: aktiv (løber)",
-      "then": "Så gør dette",
-      "else": "Ellers gør dette",
-      "emptyBranch": "Ingen trin"
-    },
-    "repeat": {
-      "count": "Antal gange",
-      "times": "gange"
-    },
-    "match": {
-      "useRegex": "Match med et regulært udtryk",
-      "useRegexHelp": "Slå dette fra for at teksten skal være præcis som den er skrevet.",
-      "invalidRegex": "Ikke et gyldigt regulært udtryk, det vil blive matchet som almindelig tekst"
-    },
-    "seconds": "sekunder",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "Fjernserver kræves. Opret forbindelse til en fjernserver i Indstillinger for at bruge denne forbindelsestype."
-  },
-  "plugin": {
-    "name": "SSH-terminal"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/de_DE.json b/plugins/ssh-terminal/locales/translated/de_DE.json
deleted file mode 100644
index d64e242e3..000000000
--- a/plugins/ssh-terminal/locales/translated/de_DE.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Hinzufügen",
-    "arrowDown": "Pfeil nach unten",
-    "arrowLeft": "Pfeil nach links",
-    "arrowRight": "Pfeil nach rechts",
-    "arrowUp": "Pfeil nach oben",
-    "backTab": "⇥",
-    "ctrl": "Strg",
-    "delete": "Entf",
-    "done": "Fertig",
-    "editQuickKeys": "Schnelltasten bearbeiten",
-    "end": "Ende",
-    "esc": "Esc",
-    "home": "Pos1",
-    "pageDown": "Bild ab",
-    "pageUp": "Bild auf",
-    "paste": "Einfügen",
-    "quickKeyPlaceholder": "z. B. sudo ",
-    "quickKeysDesc": "Tippen Sie auf × zum Entfernen. Unterstützt bis zu 8 Zeichen.",
-    "quickKeysTitle": "Schnelltasten",
-    "removeQuickKey": "Entfernen",
-    "resetDefaults": "Auf Standard zurücksetzen",
-    "shift": "Umschalt",
-    "tab": "Tab"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Auto-Tmux konnte nicht aktiviert werden.",
-    "autoTmuxEnabled": "Auto-Tmux ist für {{host}}aktiviert. Es gilt ab der nächsten Verbindung.",
-    "clipboardHttpWarning": "Die Zwischenablage konnte nicht gelesen werden. Einige Browser beschränken den Zugriff auf die Zwischenablage außerhalb von HTTPS – versuchen Sie stattdessen Strg+V oder verwenden Sie für Termix eine HTTPS-Verbindung.",
-    "closeTab": "Schließen",
-    "connecting": "Verbinde...",
-    "connectionLost": "Verbindung verloren",
-    "connectionRejected": "Verbindung vom Server abgelehnt. Bitte überprüfen Sie Ihre Authentifizierung und Netzwerkkonfiguration.",
-    "connectionTimeout": "Verbindungs-Timeout",
-    "enableAutoTmuxAction": "Auto-Tmux aktivieren",
-    "hostKeyRejected": "SSH-Hostschlüssel-Überprüfung abgelehnt. Verbindung abgebrochen.",
-    "linkDialogCopy": "Kopieren",
-    "linkDialogOpen": "Öffnen",
-    "linkDialogTitle": "Link öffnen",
-    "maxReconnectAttemptsReached": "Maximale Wiederverbindungsversuche erreicht",
-    "noHostSelected": "Kein Host ausgewählt",
-    "passwordPromptFillTitle": "Gespeichertes Passwort in diese Eingabeaufforderung einfügen?",
-    "reconnect": "Erneut verbinden",
-    "reconnected": "Erfolgreich wieder verbunden",
-    "reconnecting": "Wiederverbinden... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Verbindung unterbrochen, Verbindungsaufbau...",
-    "searchCaseSensitive": "Streichholzschachtel",
-    "searchClose": "Schließen (Flucht)",
-    "searchNext": "Nächstes Spiel (Eingabe)",
-    "searchNoResults": "Keine Ergebnisse",
-    "searchPlaceholder": "Finden",
-    "searchPrevious": "Vorheriges Spiel (Umschalt+Eingabe)",
-    "searchRegex": "Regulären Ausdruck verwenden",
-    "searchResultCount": "{{index}} von {{count}}",
-    "searchWholeWord": "Gleiches Wort aus",
-    "sessionExpiredNotice": "Ihre vorherige Sitzung auf {{host}} ist nach {{minutes}} Minuten Verbindungsabbruch abgelaufen; die Shell und alle darin laufenden Prozesse wurden gelöscht. Aktivieren Sie Auto-Tmux auf diesem Host, um Sitzungen aufrechtzuerhalten.",
-    "sessionExpiredNoticeNoMinutes": "Ihre vorherige Sitzung auf {{host}} ist während der Trennung abgelaufen; die Shell und alle darin laufenden Prozesse wurden gelöscht. Aktivieren Sie Auto-Tmux auf diesem Host, um Sitzungen aufrechtzuerhalten.",
-    "sessionTakenOver": "Sitzung wurde in einem anderen Tab geöffnet. Verbindung wird wiederhergestellt...",
-    "tmuxAttached": "Verbundene Clients",
-    "tmuxAttachedCount": "{{count}} verbunden",
-    "tmuxCopyHint": "Auswahl anpassen und Enter drücken, um in die Zwischenablage zu kopieren",
-    "tmuxCreateNew": "Neue Sitzung starten",
-    "tmuxDetached": "Von tmux-Sitzung getrennt",
-    "tmuxLastActivity": "Letzte Aktivität",
-    "tmuxSessionAttached": "tmux-Sitzung verbunden: {{name}}",
-    "tmuxSessionCreated": "tmux-Sitzung erstellt: {{name}}",
-    "tmuxSessionPickerDesc": "Bestehende tmux-Sitzungen auf diesem Host gefunden. Wählen Sie eine aus, um sie erneut zu verbinden, oder erstellen Sie eine neue.",
-    "tmuxSessionPickerTitle": "tmux-Sitzungen",
-    "tmuxTimeDays": "vor {{count}} Tagen",
-    "tmuxTimeHours": "vor {{count}} Std.",
-    "tmuxTimeJustNow": "Soeben",
-    "tmuxTimeMinutes": "vor {{count}} Min.",
-    "tmuxUnavailable": "tmux ist auf dem Remote-Host nicht installiert, Fallback auf die Standard-Shell",
-    "tmuxWindowCount": "{{count}} Fenster",
-    "tmuxWindows": "Fenster",
-    "unknownError": "Unbekannter Fehler aufgetreten",
-    "websocketAbnormalClose": "Verbindung unerwartet geschlossen. Dies kann auf ein Problem mit dem Reverse-Proxy oder der SSL-Konfiguration zurückzuführen sein. Bitte überprüfen Sie die Server-Logs.",
-    "websocketError": "WebSocket-Verbindungsfehler",
-    "clipboardReadFailed": "Lesen aus der Zwischenablage fehlgeschlagen. Stellen Sie sicher, dass die Zwischenablageberechtigungen erteilt wurden.",
-    "clipboardWriteFailed": "Kopieren in die Zwischenablage fehlgeschlagen. Stellen Sie sicher, dass die Seite über HTTPS oder localhost bereitgestellt wird.",
-    "connected": "Verbunden",
-    "totpCodeLabel": "Verifizierungscode",
-    "duplicateTab": "Doppelte Registerkarte",
-    "imageChooseFile": "Wählen Sie eine Bilddatei aus",
-    "imageUploaded": "Bild hochgeladen: {{path}}",
-    "imageClipboardUnavailable": "Dieser Browser kann keine Bilder aus der Zwischenablage lesen.",
-    "imageClipboardEmpty": "Es wurde kein Bild in der Zwischenablage gefunden.",
-    "localShell": "Lokale Terminal-Shell",
-    "autocompleteHintComplete": "Drücken Sie die Tabulatortaste oder die Eingabetaste, um den Vorgang abzuschließen.",
-    "autocompleteHintNavigate": "↑↓ zum Navigieren",
-    "autocompleteHintClose": "Zum Schließen Esc drücken."
-  },
-  "terminalToolbar": {
-    "detachTmux": "tmux trennen",
-    "detachTmuxDescription": "tmux-Sitzung trennen",
-    "dismissError": "Bildfehler ignorieren",
-    "hideToolbar": "Werkzeugleiste ausblenden",
-    "image": "Bildaktionen (nur Bilder)",
-    "imageActionFailed": "Bildaktion fehlgeschlagen",
-    "layout": "Symbolleistenanzeigemodus",
-    "layoutExpanded": "Erweitert um Kennzahlen",
-    "layoutIcon": "Nur Symbol",
-    "layoutLabeled": "Symbole und Beschriftungen",
-    "moveToolbar": "Verschieben Sie die Werkzeugleiste",
-    "moveToolbarHint": "Ziehen Sie, um die Symbolleiste neu zu positionieren.",
-    "paste": "Bild einfügen",
-    "pasteImage": "Bild aus der Zwischenablage einfügen (nur Bilder)",
-    "retry": "Erneut versuchen",
-    "showToolbar": "Symbolleiste ausklappen",
-    "upload": "Bild hochladen",
-    "uploadImage": "Laden Sie ein Bild auf den Host hoch.",
-    "uploadingImage": "Lade hoch..."
-  },
-  "history": {
-    "noTerminalSelected": "Kein Terminal ausgewählt",
-    "noTerminalSelectedHint": "Öffnen Sie einen SSH-Terminal-Tab, um den Befehlsverlauf anzuzeigen.",
-    "searchPlaceholder": "Verlauf durchsuchen...",
-    "clearAll": "Alle löschen",
-    "noHistoryEntries": "Keine Verlaufseinträge",
-    "trackingDisabled": "Verlaufsaufzeichnung ist deaktiviert",
-    "trackingDisabledHint": "Aktivieren Sie die Befehlshistorie im SSH-Terminal-Tab dieses Hosts.",
-    "commandCount_one": "{{count}} Befehl",
-    "commandCount_other": "{{count}} Befehle"
-  },
-  "touchInput": {
-    "enabled": "Touch-Eingabe aktivieren",
-    "enabledDesc": "Ein-Finger-Touch-Scrollen in Terminals ermöglichen",
-    "momentumEnabled": "Dynamik aktivieren",
-    "momentumEnabledDesc": "Nach dem Wischen kurz weiterscrollen.",
-    "advanced": "Fortschrittlich",
-    "resetDefaults": "Auf Standard zurücksetzen",
-    "dragThreshold": "Widerstandsschwelle",
-    "maxWheelDelta": "Maximale Rad-Delta",
-    "momentumSampleWindow": "Momentum-Abtastfenster",
-    "releaseGracePeriod": "Freigabefrist",
-    "minimumVelocity": "Minimale Geschwindigkeit",
-    "maximumVelocity": "Maximale Geschwindigkeit",
-    "maximumDuration": "Maximale Dauer",
-    "maximumTravel": "Maximale Reisegeschwindigkeit",
-    "decayTime": "Zerfallszeit",
-    "pixelsPerTick": "Pixel pro Tick",
-    "maximumFrameInterval": "Maximales Frame-Intervall",
-    "maximumTicksPerFrame": "Maximale Anzahl an Ticks pro Frame"
-  },
-  "imageStorage": {
-    "instanceId": "Terminal-Sitzungsinstanz-ID",
-    "instanceIdDesc": "Instanz-ID eines Ihrer verbundenen Terminal-Tabs, die zum Testen der Sichtbarkeit verwendet wird.",
-    "selectedModeUnavailable": "Nicht verfügbar",
-    "test": "Test",
-    "testing": "Testen...",
-    "testFailed": "Fehler beim Testen der Bildspeicherung",
-    "testConnected": "Die Terminal-Sitzung ist verbunden.",
-    "testNotConnected": "Es besteht keine verbundene Terminal-Sitzung mit dieser Instanz-ID.",
-    "testSelectedMode": "Ein Upload würde Folgendes verwenden: {{mode}}",
-    "testLocalVisible": "Das lokale Verzeichnis ist vom verbundenen Host aus sichtbar.",
-    "testLocalNotVisible": "Das lokale Verzeichnis ist vom verbundenen Host aus NICHT sichtbar."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Berührungseingabe",
-        "images": "Bildspeicherung",
-        "sessions": "Sitzungen",
-        "newHosts": "Neue Gastgeber"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Terminal-Sitzungspersistenz",
-        "description": "Wie lange ein getrenntes Terminal auf dem Server aktiv bleibt, bevor es geschlossen wird. Mindestens 1 Minute, maximal 1440 Minuten. Für Sitzungen, die länger als diese Zeitspanne bestehen bleiben sollen, aktivieren Sie Auto-Tmux auf dem Host."
-      },
-      "commandHistoryEnabled": {
-        "label": "Befehlshistorie",
-        "description": "Aufzeichnung des Befehlsverlaufs erlauben. Wenn deaktiviert, wird der Verlauf unabhängig von Host-Einstellungen nicht gespeichert."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "Befehlsverlauf für neue Hosts",
-        "description": "Ob neue Hosts mit aktiviertem Befehlsverlauf starten."
-      },
-      "imageStorageMode": {
-        "label": "Speichermodus",
-        "description": "Hier werden eingefügte und hochgeladene Terminalbilder gespeichert. Die automatische Auswahl anhand der Verbindung (lokal und remote (SFTP)) ist festgelegt.",
-        "auto": "Automatisch",
-        "local": "Lokal",
-        "remoteSftp": "Remote (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Lokales Verzeichnis",
-        "description": "Absoluter Pfad im Termix-Backend, in dem der lokale Modus Bilder speichert. Wird nach dem Speichern nicht mehr angezeigt. Bei einem leeren Wert wird TERMIX_IMAGE_DIR verwendet."
-      },
-      "imageHostPath": {
-        "label": "Hostpfad",
-        "description": "Die hostseitige Ansicht des lokalen Verzeichnisses, die Terminalagenten empfangen."
-      },
-      "imageTtlMs": {
-        "label": "TTL (ms)",
-        "description": "Wie lange ein hochgeladenes Bild gespeichert wird, in Millisekunden. Der Wert „leer“ verwendet TERMIX_IMAGE_TTL_MS oder eine Stunde."
-      },
-      "imageMaxCount": {
-        "label": "Maximale Bildanzahl",
-        "description": "Die meisten Bilder werden gleichzeitig gespeichert. Bei einem leeren System wird TERMIX_MAX_IMAGE_COUNT oder 100 verwendet."
-      },
-      "imageMaxBytes": {
-        "label": "Maximale Speicherkapazität in Bytes",
-        "description": "Die meisten Bildbytes werden gleichzeitig gespeichert. Die leere Einstellung verwendet TERMIX_MAX_IMAGE_STORAGE_BYTES oder 5 GiB."
-      },
-      "sessionPersistence": {
-        "label": "Sitzungen nach Verbindungsabbruch beibehalten",
-        "description": "Halten Sie ein getrenntes Terminal auf dem Server für die oben genannte Zeit aktiv, sodass beim erneuten Öffnen des zugehörigen Tabs genau dort weitergemacht wird, wo es unterbrochen wurde."
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "Neue Host-Terminals müssen innerhalb von tmux ausgeführt werden, damit die Sitzungen auch bei Verbindungsabbrüchen erhalten bleiben (tmux muss auf dem Host installiert sein)."
-      },
-      "newHostTheme": {
-        "label": "Thema für neue Gastgeber",
-        "description": "Das Terminal-Theme, mit dem ein neuer Host startet."
-      },
-      "newHostFontFamily": {
-        "label": "Schriftart für neue Hosts",
-        "description": "Die Terminal-Schriftart, mit der ein neuer Host startet."
-      },
-      "newHostFontSize": {
-        "label": "Schriftgröße für neue Hosts",
-        "description": "Die Terminal-Schriftgröße, mit der ein neuer Host startet, in Pixeln."
-      },
-      "newHostCursorStyle": {
-        "label": "Cursor-Stil für neue Hosts"
-      },
-      "newHostCursorBlink": {
-        "label": "Blinkender Cursor für neue Hosts"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Terminal-Symbolleiste aktivieren",
-        "description": "Zeigt eine Schnellzugriffsleiste an, die am aktiven Terminal angedockt ist und die Tools und Live-Statistiken dieses Hosts anzeigt."
-      },
-      "terminalToolbarPosition": {
-        "label": "Werkzeugleistenposition",
-        "description": "Dort, wo sich die Symbolleiste im Terminal befindet. Sie können sie weiterhin von dort verschieben.",
-        "bottom": "Mitte unten",
-        "bottomLeft": "Unten links",
-        "bottomRight": "Unten rechts",
-        "top": "Oben Mitte",
-        "topLeft": "Oben links",
-        "topRight": "Oben rechts"
-      },
-      "terminalToolbarStartState": {
-        "label": "Startzustand der Symbolleiste",
-        "description": "Ob die Symbolleiste beim Verbinden des Terminals erweitert oder minimiert geöffnet wird",
-        "expanded": "Erweiterte",
-        "collapsed": "Minimiert"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Symbolleistenanzeigemodus",
-        "description": "So werden die Schaltflächen der Symbolleiste angezeigt. Die Option „Zuletzt verwendet“ behält die zuletzt ausgewählte Schaltfläche in der Symbolleiste bei.",
-        "remember": "Zuletzt verwendet",
-        "icon": "Nur Symbol",
-        "labeled": "Symbole und Beschriftungen",
-        "expanded": "Erweiterte Version mit Statistiken"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Live-Statistiken anzeigen",
-        "description": "Im erweiterten Modus werden Live-Hoststatistiken oberhalb der Symbolleistenschaltflächen angezeigt."
-      },
-      "terminalToolbarFade": {
-        "label": "Ausblenden im Leerlauf",
-        "description": "Die Symbolleiste wird ausgeblendet, bis man mit der Maus darüberfährt."
-      },
-      "enableCommandHistory": {
-        "label": "Befehlshistorie",
-        "description": "In diesem Terminal ausgeführte Befehle für Verlauf und Autovervollständigung aufzeichnen"
-      },
-      "enableTerminal": {
-        "label": "Terminal aktivieren",
-        "description": "Bieten Sie ein SSH-Terminal für diesen Host an."
-      },
-      "inheritAppearance": {
-        "label": "Benutzereinstellungen verwenden"
-      },
-      "theme": {
-        "label": "Design"
-      },
-      "cursorBlink": {
-        "label": "Blinkender Cursor"
-      },
-      "cursorStyle": {
-        "label": "Cursor-Stil"
-      },
-      "fontSize": {
-        "label": "Schriftgröße"
-      },
-      "fontFamily": {
-        "label": "Schriftart"
-      },
-      "scrollback": {
-        "label": "Zurückscrollen"
-      },
-      "letterSpacing": {
-        "label": "Buchstabenabstand"
-      },
-      "lineHeight": {
-        "label": "Linienhöhe"
-      },
-      "bellStyle": {
-        "label": "Glocke"
-      },
-      "minimumContrastRatio": {
-        "label": "Minimales Kontrastverhältnis"
-      },
-      "backgroundImage": {
-        "label": "Hintergrundbild"
-      },
-      "backgroundImageOpacity": {
-        "label": "Deckkraft des Hintergrundbildes"
-      },
-      "customThemeColors": {
-        "label": "Benutzerdefinierte Designfarben"
-      },
-      "rightClickSelectsWord": {
-        "label": "Rechtsklick wählt Wort aus"
-      },
-      "macOptionIsMeta": {
-        "label": "Option ist Meta"
-      },
-      "fastScrollModifier": {
-        "label": "Schnellscrolltaste"
-      },
-      "fastScrollSensitivity": {
-        "label": "Hohe Scrollgeschwindigkeit"
-      },
-      "backspaceMode": {
-        "label": "Rücktaste"
-      },
-      "autoMosh": {
-        "label": "Auto-Mosh"
-      },
-      "moshCommand": {
-        "label": "Mosh-Befehl"
-      },
-      "autoTmux": {
-        "label": "Auto tmux"
-      },
-      "useSSHTitle": {
-        "label": "Verwenden Sie den SSH-Titel"
-      },
-      "syntaxHighlighting": {
-        "label": "Syntaxhervorhebung"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Syntaxhervorhebungskategorien"
-      },
-      "linkClickBehavior": {
-        "label": "Link anklicken"
-      },
-      "localEcho": {
-        "label": "Lokales Echo"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Bieten Sie an, Passwortabfragen auszufüllen"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Füllen Sie die sudo-Eingabeaufforderungen aus."
-      },
-      "autoReconnect": {
-        "label": "Automatische Wiederverbindung"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Befehlsautovervollständigung",
-        "description": "Die Autovervollständigung wird während der Eingabe durch Drücken der Tabulatortaste angezeigt."
-      },
-      "localEcho": {
-        "label": "Lokales Echo",
-        "description": "Reduzieren Sie die wahrgenommene Eingabeverzögerung durch sichere lokale Tastenanschlagvorhersage."
-      },
-      "linkClickBehavior": {
-        "label": "Terminal-Link-Klick",
-        "description": "Standardverhalten beim Klicken auf Links im Terminal"
-      },
-      "customThemes": {
-        "label": "Gespeicherte Designs"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Lokales Terminal"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Nutzen Sie Live-Terminalsitzungen",
-      "description": "Ermöglicht es anderen Funktionen, wie z. B. der Sitzungsfreigabe und -aufzeichnung, Ihre laufenden Terminalsitzungen zu erreichen."
-    },
-    "history": {
-      "title": "Befehlsverlauf lesen",
-      "description": "Ermöglicht es anderen Funktionen, wie beispielsweise dem KI-Assistenten, Ihre Befehlshistorie zu lesen."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Terminal",
-    "addHost": "Host hinzufügen",
-    "applyGlobalThemeTooltip": "Wenden Sie dieses Design an",
-    "backgroundImageDesc": "Optionale URL für ein Terminal-Hintergrundbild",
-    "backgroundImageLabel": "Hintergrundbild-URL",
-    "backgroundImageOpacityLabel": "Hintergrundbild-Deckkraft",
-    "backspaceMode": "Backspace-Modus",
-    "backspaceModeControlH": "Control-H (BS)",
-    "backspaceModeLabel": "Backspace-Modus",
-    "backspaceModeNormal": "Normal (DEL)",
-    "behaviorAndAdvanced": "Verhalten & Erweitert",
-    "bellStyle": "Signaltonart",
-    "bellStyleBoth": "Beide",
-    "bellStyleLabel": "Signalton-Stil",
-    "bellStyleNone": "Keine",
-    "bellStyleSound": "Klang",
-    "bellStyleVisual": "Visuell",
-    "colorTheme": "Farbschema",
-    "cursorBlink": "Cursor-Blinken",
-    "cursorBlinking": "Cursor-Blinken",
-    "cursorBlinkingDesc": "Blinkanimation für den Terminal-Cursor aktivieren",
-    "cursorStyle": "Cursor-Stil",
-    "cursorStyleBar": "Bar",
-    "cursorStyleBlock": "Block",
-    "cursorStyleLabel": "Cursor-Stil",
-    "cursorStyleUnderline": "Unterstreichen",
-    "customThemeAnsiColors": "ANSI-Farben",
-    "customThemeBackground": "Hintergrund",
-    "customThemeBlack": "Schwarz",
-    "customThemeBlue": "Blau",
-    "customThemeBrightBlack": "Hellschwarz",
-    "customThemeBrightBlue": "Hellblau",
-    "customThemeBrightCyan": "Hellcyan",
-    "customThemeBrightGreen": "Hellgrün",
-    "customThemeBrightMagenta": "Hellmagenta",
-    "customThemeBrightRed": "Hellrot",
-    "customThemeBrightWhite": "Hellweiß",
-    "customThemeBrightYellow": "Hellgelb",
-    "customThemeColors": "Benutzerdefinierte Farben",
-    "customThemeCursor": "Cursor",
-    "customThemeCursorAccent": "Cursor-Akzent",
-    "customThemeCyan": "Cyan",
-    "customThemeForeground": "Vordergrund",
-    "customThemeGreen": "Grün",
-    "customThemeMagenta": "Magenta",
-    "customThemeRed": "Rot",
-    "customThemeResetTooltip": "Auf Standardeinstellungen zurücksetzen",
-    "customThemeSelection": "Auswahl",
-    "customThemeWhite": "Weiß",
-    "customThemeYellow": "Gelb",
-    "deleteGlobalThemeTooltip": "Dieses Design löschen",
-    "docsLink": "Dokumentation anzeigen",
-    "enableAutoMosh": "Auto-Mosh aktivieren",
-    "enableAutoMoshDesc": "Mosh gegenüber SSH bevorzugen, falls verfügbar",
-    "enableAutoTmux": "Auto-Tmux aktivieren",
-    "enableAutoTmuxDesc": "Halten Sie Ihre Shell und alle darin laufenden Prozesse auch bei Verbindungsabbrüchen und Browserneustarts am Laufen, indem Sie den Befehl innerhalb von tmux ausführen (tmux muss auf dem Host installiert sein).",
-    "fastScrollModifier": "Schnellscroll-Modifikator",
-    "fastScrollModifierAlt": "Alt",
-    "fastScrollModifierCtrl": "Strg",
-    "fastScrollModifierLabel": "Schnellscroll-Modifikator",
-    "fastScrollModifierShift": "Umschalt",
-    "fastScrollSensitivity": "Schnellscroll-Empfindlichkeit",
-    "fastScrollSensitivityLabel": "Schnellscroll-Empfindlichkeit",
-    "fontFamily": "Schriftfamilie",
-    "fontFamilyCustomHint": "Wählen Sie eine der mitgelieferten Schriftarten oder wählen Sie „Benutzerdefiniert“ und geben Sie den genauen Namen einer bereits auf Ihrem System installierten Schriftart ein (z. B. MesloLGS NF, Noto Sans Mono). Termix kann keine Schriftarten für Sie installieren; installieren Sie diese zuerst auf Ihrem Betriebssystem.",
-    "fontFamilyCustomOption": "Brauch...",
-    "fontFamilyCustomPlaceholder": "Exakter Schriftname, z. B. MesloLGS NF",
-    "fontFamilyLabel": "Schriftfamilie",
-    "fontSize": "Schriftgröße",
-    "fontSizeLabel": "Schriftgröße",
-    "hostNotFound": "Host nicht gefunden",
-    "letterSpacing": "Zeichenabstand",
-    "letterSpacingPx": "Buchstabenabstand (px)",
-    "lineHeight": "Zeilenhöhe",
-    "lineHeightLabel": "Zeilenhöhe",
-    "linkClickBehaviorConfirm": "Popup zum Öffnen oder Kopieren anzeigen",
-    "linkClickBehaviorDesc": "Legt fest, was passiert, wenn Sie im Terminal auf einen Link klicken. Verwenden Sie 'Standard', um die App-Einstellung zu übernehmen.",
-    "linkClickBehaviorDirect": "Direkt öffnen",
-    "linkClickBehaviorLabel": "Verhalten beim Linkklick",
-    "loadingHost": "Host wird geladen...",
-    "localEchoAuto": "Automatisch",
-    "localEchoDesc": "Bei langsamen Verbindungen werden sichere, druckbare Tastatureingaben lokal vorhergesagt. Passwortabfragen und Steuereingaben werden niemals wiederholt.",
-    "localEchoLabel": "Lokales Echo",
-    "localEchoOff": "Aus",
-    "localEchoOn": "Immer eingeschaltet",
-    "macOptionIsMetaLabel": "Optionstaste sendet Meta",
-    "macOptionIsMetaShortDesc": "Deaktivieren Sie die Eingabe von Sonderzeichen (wie @ oder |) mit der Option-/Alt-Taste unter macOS, anstatt Metadaten zu senden.",
-    "moshCommand": "MOSH-Befehl",
-    "moshCommandLabel": "Mosh-Befehl",
-    "noSavedThemes": "Noch keine gespeicherten Designs",
-    "none": "Keine",
-    "passwordPromptAutoFillDesc": "Bieten Sie an, das gespeicherte Passwort automatisch einzutragen, wenn das Terminal danach fragt. Deaktivieren Sie diese Option, damit Passwörter auf diesem Host nie automatisch ausgefüllt werden.",
-    "passwordPromptAutoFillLabel": "Automatische Passwortausfüllung anbieten",
-    "autoReconnectLabel": "Automatische Wiederverbindung",
-    "autoReconnectDesc": "Stellt die Verbindung automatisch wieder her, wenn die SSH-Verbindung abbricht, beispielsweise nach einer kurzen Netzwerkstörung oder während des Ruhezustands. Der Scrollback bleibt erhalten.",
-    "rightClickSelectsWord": "Rechtsklick wählt Wort aus",
-    "rightClickSelectsWordLabel": "Rechtsklick wählt Wort aus",
-    "rightClickSelectsWordShortDesc": "Wort unter dem Cursor bei Rechtsklick auswählen",
-    "saveAsGlobalTheme": "Als globales Design speichern",
-    "saveGlobalThemeError": "Thema konnte nicht gespeichert werden",
-    "saveGlobalThemeNamePrompt": "Geben Sie einen Namen für dieses Thema ein.",
-    "saveGlobalThemeSuccess": "Thema gespeichert",
-    "savedThemesLabel": "Gespeicherte Designs",
-    "scrollbackBufferLabel": "Rückrollpuffer",
-    "scrollbackMaxLines": "Maximale Anzahl der im Verlauf gespeicherten Zeilen",
-    "sudoPasswordAutoFill": "Sudo-Passwort automatisch ausfüllen",
-    "sudoPasswordAutoFillDesc": "Sudo-Passwort speichern, damit Hostmetriken, Terminal-Eingabeaufforderungen und andere privilegierte Befehle automatisch ausgeführt werden können.",
-    "sudoPasswordAutoFillLabel": "Sudo-Passwort automatisch ausfüllen",
-    "syntaxCategoryIpAddresses": "IP-Adressen",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Log-Level",
-    "syntaxCategoryLogLevelsDesc": "error, warn, info, debug, fatal",
-    "syntaxCategoryNumbers": "Beschriftete Zahlen",
-    "syntaxCategoryNumbersDesc": "port 8080, exit 1, status 404",
-    "syntaxCategoryPaths": "Dateipfade",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "Zeitstempel",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 2024-01-15",
-    "syntaxCategoryUrls": "URLs",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "Terminalausgabe einfärben (Fehler, Pfade, IPs, Zeitstempel)",
-    "syntaxHighlightingLabel": "Syntaxhervorhebung",
-    "terminalAppearance": "Terminal-Erscheinungsbild",
-    "theme": "Design",
-    "themePreview": "Designvorschau",
-    "useSSHTitleDesc": "Aktualisieren Sie den Tab-Titel vom Fenstertitel der Shell anstelle des Hostnamens",
-    "useSSHTitleLabel": "SSH-Fenstertitel verwenden",
-    "enableTunnel": "Tunnel aktivieren",
-    "enableFileManager": "Dateimanager aktivieren",
-    "enableDocker": "Docker aktivieren",
-    "startupSnippet": "Start-Snippet",
-    "quickActions": "Schnellaktionen",
-    "proxmoxLastSyncStatus": {
-      "success": "Erfolg"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} übersprungen (keine IP-Adresse gefunden)",
-    "proxmoxStatsUrlCopied": "Proxmox-Statistik-URL in die Zwischenablage kopiert",
-    "rdpUrlCopied": "RDP-URL kopiert",
-    "vncUrlCopied": "VNC-URL kopiert",
-    "filterAuthStepca": "Schritt CA",
-    "guac": {
-      "noCredential": "Keine Anmeldeinformation (direkte Anmeldedaten unten)",
-      "authTypeDirect": "Direkt",
-      "authTypeCredential": "Anmeldeinformation",
-      "authTypeNone": "Keine",
-      "recordingPath": "Aufzeichnungspfad",
-      "recordingName": "Aufzeichnungsname",
-      "saveHostFirst": "Host zuerst speichern.",
-      "sharingOptionsAfterSave": "Freigabeoptionen stehen nach dem Speichern des Hosts zur Verfügung.",
-      "permissionLevel": "Berechtigungsstufe",
-      "typeHeader": "Typ",
-      "targetHeader": "Ziel",
-      "permissionHeader": "Berechtigung",
-      "cancelBtn": "Abbrechen",
-      "savingBtn": "Speichern...",
-      "updateHostBtn": "Host aktualisieren",
-      "addHostBtn": "Host hinzufügen"
-    },
-    "filterAuthVault": "Gewölbe"
-  },
-  "nav": {
-    "history": "Verlauf",
-    "localTerminal": "Lokales Terminal",
-    "sshTools": "SSH-Tools",
-    "terminal": "Terminal",
-    "macros": "Makros"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Hier tippen, um Tastenanschläge zu senden...",
-    "copyOnSelect": "Ausgewählten Text automatisch kopieren",
-    "enableRightClickCopyPaste": "Rechtsklick-Kopieren/Einfügen aktivieren",
-    "fillPassword": "Passwort einfügen",
-    "fillPasswordMissing": "Kein gespeichertes Passwort für {{count}} ausgewählte(s) Terminal(s)",
-    "fillPasswordSuccess": "Passwort in {{count}} Terminal(s) eingefügt",
-    "keyRecordingTitle": "Tastenaufzeichnung",
-    "noTerminalTabsOpen": "Keine Terminal-Tabs geöffnet",
-    "recordToTerminals": "Auf Terminals aufzeichnen",
-    "selectAll": "Alle",
-    "selectNone": "Keine",
-    "selectTerminalsAbove": "Oben angezeigte Terminals auswählen",
-    "settingsTitle": "Einstellungen",
-    "startRecording": "Aufzeichnung starten",
-    "stopRecording": "Aufzeichnung beenden"
-  },
-  "keybindings": {
-    "copy": "Auswahl kopieren",
-    "paste": "Einfügen",
-    "sendControlCode": "Sende das Signal Strg+Buchstabe",
-    "sendText": "SMS senden",
-    "controlCodeLabel": "Brief",
-    "textLabel": "Text zum Senden",
-    "appendEnterLabel": "Nach dem Absenden die Eingabetaste drücken",
-    "clipboardPermissionNote": "Bei einigen Browsern kann es bei der ersten Verwendung zu einer Anfrage nach der Berechtigung zum Ablegen der Zwischenablage kommen.",
-    "textRequired": "Geben Sie den zu sendenden Text ein.",
-    "controlCodeRequired": "Geben Sie einen einzelnen Buchstaben als Kontrollcode ein.",
-    "builtIn": {
-      "copyCtrlC": "Auswahl kopieren (Strg+C, nur wenn Text ausgewählt ist)",
-      "copyCtrlShiftC": "Auswahl kopieren (Strg+Umschalt+C)",
-      "copyCmdC": "Auswahl kopieren (Cmd+C)",
-      "pasteCtrlShiftV": "Aus der Zwischenablage einfügen (Strg+Umschalt+V)",
-      "ctrlW": "Senden Sie Strg+W an die Shell (verhindert durch Schließen des Browser-Tabs).",
-      "ctrlT": "Senden Sie Strg+T an die Shell (verhindert das Öffnen eines Browser-Tabs).",
-      "ctrlN": "Senden Sie Strg+N an die Shell (verhindert das Öffnen eines Browserfensters).",
-      "ctrlQ": "Senden Sie Strg+Q an die Shell (verhindert das Beenden des Browsers)."
-    }
-  },
-  "macros": {
-    "title": "Makros",
-    "description": "Führe eine gespeicherte Befehlsfolge in einem Terminal aus und reagiere auf die Antwort des Servers.",
-    "target": "Ziel",
-    "noTerminal": "Kein Terminal geöffnet",
-    "empty": "Noch keine Makros",
-    "emptyHint": "Erstellen Sie ein Makro, um einen Terminal-Workflow zu automatisieren, z. B. das Anmelden, das Neustarten eines Dienstes oder das Beantworten von Eingabeaufforderungen.",
-    "create": "Neues Makro",
-    "back": "Zurück zu den Makros",
-    "name": "Name",
-    "namePlaceholder": "Webserver neu starten",
-    "nameRequired": "Geben Sie dem Makro vor dem Speichern einen Namen.",
-    "descriptionLabel": "Beschreibung",
-    "descriptionPlaceholder": "Was dieses Makro bewirkt (optional)",
-    "unsaved": "Ungespeicherte Änderungen",
-    "save": "Speichern",
-    "saved": "Makro gespeichert",
-    "saveFailed": "Makro konnte nicht gespeichert werden",
-    "delete": "Löschen",
-    "deleteTitle": "Dieses Makro löschen?",
-    "deleteBody": "\"{{name}}\" wird endgültig gelöscht. Dies kann nicht rückgängig gemacht werden.",
-    "deleted": "Makro gelöscht",
-    "cancel": "Abbrechen",
-    "run": "Ausführen",
-    "stop": "Stoppen",
-    "running": "Läuft...",
-    "completed": "Makro beendet",
-    "failed": "Makro fehlgeschlagen",
-    "loadFailed": "Makros konnten nicht geladen werden.",
-    "needTerminal": "Öffnen und verbinden Sie zuerst ein Terminal.",
-    "noSteps": "Dieses Makro hat noch keine Schritte. Füge unten einen hinzu.",
-    "addStep": "Schritt hinzufügen",
-    "stepNumber": "Schritt {{number}}",
-    "removeStep": "Schritt entfernen",
-    "confirmRunTitle": "Dieses Makro ausführen?",
-    "confirmRunBody": "\"{{name}}\" sendet Befehle an {{host}}.",
-    "confirmRunAction": "Makro ausführen",
-    "stepTypes": {
-      "send": {
-        "label": "Befehl senden",
-        "help": "Gibt den Text im Terminal ein, genau so, als ob Sie ihn eingetippt hätten."
-      },
-      "wait": {
-        "label": "Auf Ausgabe warten",
-        "help": "Die Ausgabe wird so lange unterbrochen, bis der Server den von Ihnen angegebenen Text ausgibt, beispielsweise eine Passwortabfrage."
-      },
-      "delay": {
-        "label": "Pause",
-        "help": "Wartet eine festgelegte Zeitspanne, bevor der nächste Schritt ausgeführt wird."
-      },
-      "if": {
-        "label": "Wenn die Ausgabe enthält",
-        "help": "Prüft alles, was der Server bisher ausgegeben hat, und führt dann einen von zwei Zweigen aus."
-      },
-      "repeat": {
-        "label": "Wiederholen",
-        "help": "Führt die darin enthaltenen Schritte eine festgelegte Anzahl von Malen aus."
-      }
-    },
-    "send": {
-      "text": "Befehl oder Text",
-      "textPlaceholder": "systemctl restart nginx",
-      "pressEnter": "Nach dem Absenden die Eingabetaste drücken",
-      "pressEnterHelp": "Deaktivieren Sie diese Option, um Text einzugeben, ohne ihn abzusenden."
-    },
-    "wait": {
-      "pattern": "Warten Sie, bis die Ausgabe Folgendes enthält",
-      "patternPlaceholder": "passwort:",
-      "timeout": "Aufgeben nach",
-      "onTimeout": "Wenn es nie erscheint",
-      "stop": "Stoppe das Makro",
-      "continue": "Mach trotzdem weiter."
-    },
-    "delay": {
-      "duration": "Warten Sie auf"
-    },
-    "ifStep": {
-      "pattern": "Wenn die Ausgabe enthält",
-      "patternPlaceholder": "Aktiv: aktiv (läuft)",
-      "then": "Dann tu Folgendes:",
-      "else": "Andernfalls tun Sie Folgendes:",
-      "emptyBranch": "Keine Stufen"
-    },
-    "repeat": {
-      "count": "Anzahl der Male",
-      "times": "mal"
-    },
-    "match": {
-      "useRegex": "Übereinstimmung mit einem regulären Ausdruck",
-      "useRegexHelp": "Lassen Sie dies weg, damit der Text genau so bleibt, wie er geschrieben steht.",
-      "invalidRegex": "Kein gültiger regulärer Ausdruck, wird als Klartext erkannt."
-    },
-    "seconds": "Sekunden",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "Remote-Server erforderlich. Um diesen Verbindungstyp zu verwenden, verbinden Sie einen Remote-Server in den Einstellungen."
-  },
-  "plugin": {
-    "name": "SSH-Terminal"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/el_GR.json b/plugins/ssh-terminal/locales/translated/el_GR.json
deleted file mode 100644
index 2632bae93..000000000
--- a/plugins/ssh-terminal/locales/translated/el_GR.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Προσθέτω",
-    "arrowDown": "Βέλος προς τα κάτω",
-    "arrowLeft": "Βέλος αριστερά",
-    "arrowRight": "Βέλος δεξιά",
-    "arrowUp": "Βέλος προς τα πάνω",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Διαγραφή",
-    "done": "Γινώμενος",
-    "editQuickKeys": "Επεξεργασία γρήγορων πλήκτρων",
-    "end": "Τέλος",
-    "esc": "Esc",
-    "home": "Σπίτι",
-    "pageDown": "PgDn",
-    "pageUp": "PgUp",
-    "paste": "Πάστα",
-    "quickKeyPlaceholder": "π.χ. sudo ",
-    "quickKeysDesc": "Πατήστε × για κατάργηση. Υποστηρίζει έως και 8 χαρακτήρες.",
-    "quickKeysTitle": "Γρήγορα πλήκτρα",
-    "removeQuickKey": "Αφαιρώ",
-    "resetDefaults": "Επαναφορά στις προεπιλογές",
-    "shift": "Αλλαγή",
-    "tab": "Αυτί"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Αποτυχία ενεργοποίησης του Auto-Tmux",
-    "autoTmuxEnabled": "Το Auto-Tmux είναι ενεργοποιημένο για {{host}}. Εφαρμόζεται από την επόμενη σύνδεση.",
-    "clipboardHttpWarning": "Δεν ήταν δυνατή η ανάγνωση του πρόχειρου. Ορισμένα προγράμματα περιήγησης περιορίζουν την πρόσβαση στο πρόχειρο εκτός HTTPS - δοκιμάστε Ctrl+V ή προβάλετε το Termix μέσω HTTPS.",
-    "closeTab": "Κοντά",
-    "connecting": "Συνδετικός...",
-    "connectionLost": "Η σύνδεση χάθηκε",
-    "connectionRejected": "Η σύνδεση απορρίφθηκε από τον διακομιστή. Ελέγξτε τον έλεγχο ταυτότητας και τη διαμόρφωση δικτύου.",
-    "connectionTimeout": "Λήξη χρονικού ορίου σύνδεσης",
-    "enableAutoTmuxAction": "Ενεργοποίηση Auto-Tmux",
-    "hostKeyRejected": "Η επαλήθευση του κλειδιού κεντρικού υπολογιστή SSH απορρίφθηκε. Η σύνδεση ακυρώθηκε.",
-    "linkDialogCopy": "Αντίγραφο",
-    "linkDialogOpen": "Ανοιχτό",
-    "linkDialogTitle": "Άνοιγμα συνδέσμου",
-    "maxReconnectAttemptsReached": "Επιτεύχθηκε ο μέγιστος αριθμός προσπαθειών επανασύνδεσης",
-    "noHostSelected": "Δεν έχει επιλεγεί κεντρικός υπολογιστής",
-    "passwordPromptFillTitle": "Συμπληρώστε τον αποθηκευμένο κωδικό πρόσβασης σε αυτήν την ερώτηση;",
-    "reconnect": "Επανασύνδεση",
-    "reconnected": "Επανασύνδεση με επιτυχία",
-    "reconnecting": "Επανασύνδεση... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Χάθηκε η σύνδεση, επανασύνδεση...",
-    "searchCaseSensitive": "Ταίριασμα υπόθεσης",
-    "searchClose": "Κλείσιμο (Escape)",
-    "searchNext": "Επόμενος αγώνας (Είσοδος)",
-    "searchNoResults": "Δεν υπάρχουν αποτελέσματα",
-    "searchPlaceholder": "Εύρημα",
-    "searchPrevious": "Προηγούμενος αγώνας (Shift+Enter)",
-    "searchRegex": "Χρήση κανονικής έκφρασης",
-    "searchResultCount": "{{index}} από {{count}}",
-    "searchWholeWord": "Ταίριασμα ολόκληρης λέξης",
-    "sessionExpiredNotice": "Η προηγούμενη συνεδρία σας στο {{host}} έληξε μετά από {{minutes}} λεπτά αποσύνδεσης. Το κέλυφος και οτιδήποτε εκτελείται σε αυτό έχουν εξαφανιστεί. Ενεργοποιήστε το Auto-Tmux σε αυτόν τον κεντρικό υπολογιστή για να διατηρήσετε ενεργές τις συνεδρίες.",
-    "sessionExpiredNoticeNoMinutes": "Η προηγούμενη συνεδρία σας στο {{host}} έληξε κατά την αποσύνδεση. Το κέλυφος και οτιδήποτε εκτελείται σε αυτό έχουν χαθεί. Ενεργοποιήστε το Auto-Tmux σε αυτόν τον κεντρικό υπολογιστή για να διατηρήσετε ενεργές τις συνεδρίες.",
-    "sessionTakenOver": "Η συνεδρία άνοιξε σε άλλη καρτέλα. Επανασύνδεση...",
-    "tmuxAttached": "Συνδεδεμένοι πελάτες",
-    "tmuxAttachedCount": "{{count}} επισυνάπτεται",
-    "tmuxCopyHint": "Προσαρμόστε την επιλογή και πατήστε Enter για αντιγραφή στο πρόχειρο",
-    "tmuxCreateNew": "Έναρξη νέας συνεδρίας",
-    "tmuxDetached": "Αποσπάστηκε από την περίοδο λειτουργίας tmux",
-    "tmuxLastActivity": "Τελευταία δραστηριότητα",
-    "tmuxSessionAttached": "Συνεδρία tmux επισυνάπτεται: {{name}}",
-    "tmuxSessionCreated": "δημιουργήθηκε η συνεδρία tmux: {{name}}",
-    "tmuxSessionPickerDesc": "Βρέθηκαν υπάρχουσες συνεδρίες tmux σε αυτόν τον κεντρικό υπολογιστή. Επιλέξτε μία για να επανασυνδέσετε ή να δημιουργήσετε μια νέα συνεδρία.",
-    "tmuxSessionPickerTitle": "Συνεδρίες tmux",
-    "tmuxTimeDays": "{{count}}πριν από ημέρες",
-    "tmuxTimeHours": "{{count}}πριν από ώρες",
-    "tmuxTimeJustNow": "μόλις τώρα",
-    "tmuxTimeMinutes": "{{count}}πριν από λεπτά",
-    "tmuxUnavailable": "Το tmux δεν είναι εγκατεστημένο στον απομακρυσμένο κεντρικό υπολογιστή, επιστρέφοντας στο τυπικό κέλυφος",
-    "tmuxWindowCount": "παράθυρο {{count}}",
-    "tmuxWindows": "Παράθυρα",
-    "unknownError": "Παρουσιάστηκε άγνωστο σφάλμα",
-    "websocketAbnormalClose": "Η σύνδεση έκλεισε απροσδόκητα. Αυτό μπορεί να οφείλεται σε πρόβλημα αντίστροφης μεσολάβησης ή ρύθμισης παραμέτρων SSL. Ελέγξτε τα αρχεία καταγραφής διακομιστή.",
-    "websocketError": "Σφάλμα σύνδεσης WebSocket",
-    "clipboardReadFailed": "Αποτυχία ανάγνωσης από το πρόχειρο. Βεβαιωθείτε ότι έχουν εκχωρηθεί δικαιώματα στο πρόχειρο.",
-    "clipboardWriteFailed": "Αποτυχία αντιγραφής στο πρόχειρο. Βεβαιωθείτε ότι η σελίδα προβάλλεται μέσω HTTPS ή localhost.",
-    "connected": "Συνδεδεμένος",
-    "totpCodeLabel": "Κωδικός επαλήθευσης",
-    "duplicateTab": "Διπλότυπη καρτέλα",
-    "imageChooseFile": "Επιλέξτε ένα αρχείο εικόνας",
-    "imageUploaded": "Μεταφορτωμένη εικόνα: {{path}}",
-    "imageClipboardUnavailable": "Αυτό το πρόγραμμα περιήγησης δεν μπορεί να διαβάσει εικόνες από το πρόχειρο",
-    "imageClipboardEmpty": "Δεν βρέθηκε εικόνα στο πρόχειρο",
-    "localShell": "Τοπικό κέλυφος τερματικού",
-    "autocompleteHintComplete": "Πατήστε Tab ή Enter για ολοκλήρωση. Πατήστε Tab ή Enter για να ολοκληρώσετε.",
-    "autocompleteHintNavigate": "↑↓ για πλοήγηση",
-    "autocompleteHintClose": "Esc για κλείσιμο"
-  },
-  "terminalToolbar": {
-    "detachTmux": "Αποσύνδεση tmux",
-    "detachTmuxDescription": "Αποσύνδεση συνεδρίας tmux",
-    "dismissError": "Σφάλμα απόρριψης εικόνας",
-    "hideToolbar": "Απόκρυψη γραμμής εργαλείων",
-    "image": "Ενέργειες εικόνας (μόνο εικόνες)",
-    "imageActionFailed": "Η ενέργεια εικόνας απέτυχε",
-    "layout": "Λειτουργία εμφάνισης γραμμής εργαλείων",
-    "layoutExpanded": "Επεκτάθηκε με μετρήσεις",
-    "layoutIcon": "Μόνο εικονίδιο",
-    "layoutLabeled": "Εικονίδια και ετικέτες",
-    "moveToolbar": "Μετακίνηση γραμμής εργαλείων",
-    "moveToolbarHint": "Σύρετε για να αλλάξετε τη θέση της γραμμής εργαλείων",
-    "paste": "Επικόλληση εικόνας",
-    "pasteImage": "Επικόλληση εικόνας από το πρόχειρο (μόνο εικόνες)",
-    "retry": "Δοκιμάζω πάλι",
-    "showToolbar": "Ανάπτυξη γραμμής εργαλείων",
-    "upload": "Μεταφόρτωση εικόνας",
-    "uploadImage": "Μεταφορτώστε μια εικόνα στον κεντρικό υπολογιστή",
-    "uploadingImage": "Μεταφόρτωση..."
-  },
-  "history": {
-    "noTerminalSelected": "Δεν έχει επιλεγεί τερματικό",
-    "noTerminalSelectedHint": "Ανοίξτε μια καρτέλα τερματικού SSH για να δείτε το ιστορικό εντολών του",
-    "searchPlaceholder": "Ιστορικό αναζήτησης...",
-    "clearAll": "Εκκαθάριση όλων",
-    "noHistoryEntries": "Δεν υπάρχουν καταχωρήσεις ιστορικού",
-    "trackingDisabled": "Η παρακολούθηση ιστορικού είναι απενεργοποιημένη",
-    "trackingDisabledHint": "Ενεργοποιήστε το Ιστορικό εντολών στην καρτέλα Τερματικό SSH αυτού του κεντρικού υπολογιστή.",
-    "commandCount_one": "Εντολή {{count}}",
-    "commandCount_other": "{{count}} εντολές"
-  },
-  "touchInput": {
-    "enabled": "Ενεργοποίηση εισαγωγής αφής",
-    "enabledDesc": "Επιτρέψτε την κύλιση με ένα δάχτυλο σε τερματικά",
-    "momentumEnabled": "Ενεργοποίηση ορμής",
-    "momentumEnabledDesc": "Συνεχίστε σύντομα την κύλιση μετά από μια σάρωση",
-    "advanced": "Προχωρημένος",
-    "resetDefaults": "Επαναφορά στις προεπιλογές",
-    "dragThreshold": "Όριο οπισθέλκουσας",
-    "maxWheelDelta": "Μέγιστο δέλτα τροχού",
-    "momentumSampleWindow": "Παράθυρο δείγματος ορμής",
-    "releaseGracePeriod": "Περίοδος χάριτος αποδέσμευσης",
-    "minimumVelocity": "Ελάχιστη ταχύτητα",
-    "maximumVelocity": "Μέγιστη ταχύτητα",
-    "maximumDuration": "Μέγιστη διάρκεια",
-    "maximumTravel": "Μέγιστη διαδρομή",
-    "decayTime": "Χρόνος αποσύνθεσης",
-    "pixelsPerTick": "Pixel ανά tick",
-    "maximumFrameInterval": "Μέγιστο διάστημα καρέ",
-    "maximumTicksPerFrame": "Μέγιστος αριθμός τικ ανά καρέ"
-  },
-  "imageStorage": {
-    "instanceId": "Αναγνωριστικό παρουσίας περιόδου λειτουργίας τερματικού",
-    "instanceIdDesc": "Αναγνωριστικό παρουσίας μίας από τις συνδεδεμένες καρτέλες τερματικού σας, που χρησιμοποιείται για τον έλεγχο της ορατότητας.",
-    "selectedModeUnavailable": "Δυσεύρετος",
-    "test": "Δοκιμή",
-    "testing": "Δοκιμές...",
-    "testFailed": "Αποτυχία δοκιμής χώρου αποθήκευσης εικόνων",
-    "testConnected": "Η συνεδρία τερματικού είναι συνδεδεμένη.",
-    "testNotConnected": "Δεν υπάρχει συνδεδεμένη συνεδρία τερματικού με αυτό το αναγνωριστικό παρουσίας.",
-    "testSelectedMode": "Μια μεταφόρτωση θα χρησιμοποιούσε: {{mode}}",
-    "testLocalVisible": "Ο τοπικός κατάλογος είναι ορατός από τον συνδεδεμένο κεντρικό υπολογιστή.",
-    "testLocalNotVisible": "Ο τοπικός κατάλογος ΔΕΝ είναι ορατός από τον συνδεδεμένο κεντρικό υπολογιστή."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Εισαγωγή με άγγιγμα",
-        "images": "Αποθήκευση εικόνων",
-        "sessions": "Συνεδρίες",
-        "newHosts": "Νέοι οικοδεσπότες"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Διατήρηση Συνεδρίας Τερματικού",
-        "description": "Για πόσο χρονικό διάστημα διατηρείται ενεργό ένα αποσυνδεδεμένο τερματικό στον διακομιστή πριν κλείσει. Ελάχιστο 1, μέγιστο 1440 λεπτά. Για συνεδρίες που πρέπει να διαρκέσουν περισσότερο από αυτό, ενεργοποιήστε το Auto-Tmux στον κεντρικό υπολογιστή."
-      },
-      "commandHistoryEnabled": {
-        "label": "Ιστορικό εντολών",
-        "description": "Να επιτρέπεται η καταγραφή ιστορικού εντολών. Όταν είναι απενεργοποιημένη, το ιστορικό δεν αποθηκεύεται ανεξάρτητα από τις ρυθμίσεις ανά κεντρικό υπολογιστή."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "Ιστορικό εντολών για νέους κεντρικούς υπολογιστές",
-        "description": "Εάν οι νέοι κεντρικοί υπολογιστές ξεκινούν με ενεργοποιημένο το ιστορικό εντολών."
-      },
-      "imageStorageMode": {
-        "label": "Λειτουργία αποθήκευσης",
-        "description": "Πού εγγράφονται επικολλημένες και μεταφορτωμένες εικόνες τερματικού. Οι αυτόματες επιλογές ανά σύνδεση, Τοπικές και Απομακρυσμένες (SFTP) έχουν διορθωθεί.",
-        "auto": "Αυτο",
-        "local": "Τοπικός",
-        "remoteSftp": "Απομακρυσμένο (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Τοπικός κατάλογος",
-        "description": "Απόλυτη διαδρομή στο backend του Termix όπου η τοπική λειτουργία γράφει εικόνες. Δεν εμφανίζεται ποτέ μετά την αποθήκευση. Το κενό χρησιμοποιεί το TERMIX_IMAGE_DIR."
-      },
-      "imageHostPath": {
-        "label": "Διαδρομή κεντρικού υπολογιστή",
-        "description": "Η προβολή από την πλευρά του κεντρικού υπολογιστή του τοπικού καταλόγου που λαμβάνουν οι πράκτορες τερματικού."
-      },
-      "imageTtlMs": {
-        "label": "TTL (ms)",
-        "description": "Για πόσο χρονικό διάστημα διατηρείται μια μεταφορτωμένη εικόνα, σε χιλιοστά του δευτερολέπτου. Η τιμή \"Κενό\" χρησιμοποιεί TERMIX_IMAGE_TTL_MS ή μία ώρα."
-      },
-      "imageMaxCount": {
-        "label": "Μέγιστος αριθμός εικόνων",
-        "description": "Οι περισσότερες εικόνες διατηρούνται ταυτόχρονα. Η τιμή \"κενή\" χρησιμοποιεί TERMIX_MAX_IMAGE_COUNT ή 100."
-      },
-      "imageMaxBytes": {
-        "label": "Μέγιστος αριθμός byte αποθήκευσης",
-        "description": "Τα περισσότερα byte εικόνων διατηρούνται ταυτόχρονα. Το κενό χρησιμοποιεί TERMIX_MAX_IMAGE_STORAGE_BYTES ή 5 GiB."
-      },
-      "sessionPersistence": {
-        "label": "Διατήρηση περιόδων σύνδεσης μετά την αποσύνδεση",
-        "description": "Διατηρήστε ένα αποσυνδεδεμένο τερματικό ενεργό στον διακομιστή για το παραπάνω χρονικό διάστημα, έτσι ώστε η επανέναρξη της καρτέλας του να συνεχίζεται από εκεί που σταμάτησε."
-      },
-      "newHostAutoTmux": {
-        "label": "Αυτόματο Tmux",
-        "description": "Εκτελέστε τερματικά νέων κεντρικών υπολογιστών μέσα στο tmux, ώστε οι συνεδρίες να επιβιώσουν από αποσυνδέσεις (απαιτείται tmux στον κεντρικό υπολογιστή)"
-      },
-      "newHostTheme": {
-        "label": "Θέμα για νέους οικοδεσπότες",
-        "description": "Το θέμα τερματικού με το οποίο ξεκινά ένας νέος κεντρικός υπολογιστής."
-      },
-      "newHostFontFamily": {
-        "label": "Γραμματοσειρά για νέους κεντρικούς υπολογιστές",
-        "description": "Η γραμματοσειρά τερματικού με την οποία ξεκινά ένας νέος κεντρικός υπολογιστής."
-      },
-      "newHostFontSize": {
-        "label": "Μέγεθος γραμματοσειράς για νέους κεντρικούς υπολογιστές",
-        "description": "Το μέγεθος γραμματοσειράς τερματικού με το οποίο ξεκινά ένας νέος κεντρικός υπολογιστής, σε pixel."
-      },
-      "newHostCursorStyle": {
-        "label": "Στυλ δρομέα για νέους κεντρικούς υπολογιστές"
-      },
-      "newHostCursorBlink": {
-        "label": "Αναβοσβήνει ο κέρσορας για νέους κεντρικούς υπολογιστές"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Ενεργοποίηση γραμμής εργαλείων τερματικού",
-        "description": "Εμφάνιση μιας γραμμής εργαλείων γρήγορης πρόσβασης συνδεδεμένης στο ενεργό τερματικό για τα εργαλεία και τα ζωντανά στατιστικά αυτού του κεντρικού υπολογιστή"
-      },
-      "terminalToolbarPosition": {
-        "label": "Θέση γραμμής εργαλείων",
-        "description": "Πού βρίσκεται η γραμμή εργαλείων στο τερματικό. Μπορείτε ακόμα να τη σύρετε από εκεί.",
-        "bottom": "Κάτω κέντρο",
-        "bottomLeft": "Κάτω αριστερά",
-        "bottomRight": "Κάτω δεξιά",
-        "top": "Επάνω κέντρο",
-        "topLeft": "Επάνω αριστερά",
-        "topRight": "Επάνω δεξιά"
-      },
-      "terminalToolbarStartState": {
-        "label": "Κατάσταση έναρξης γραμμής εργαλείων",
-        "description": "Εάν η γραμμή εργαλείων ανοίγει εκτεταμένη ή ελαχιστοποιημένη όταν συνδέεται το τερματικό",
-        "expanded": "Αναπτυγμένος",
-        "collapsed": "Ελαχιστοποιημένο"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Λειτουργία εμφάνισης γραμμής εργαλείων",
-        "description": "Πώς εμφανίζονται τα κουμπιά της γραμμής εργαλείων. Η τελευταία χρήση διατηρεί ό,τι επιλέξατε στη γραμμή εργαλείων.",
-        "remember": "Τελευταία χρήση",
-        "icon": "Μόνο εικονίδιο",
-        "labeled": "Εικονίδια και ετικέτες",
-        "expanded": "Επεκτάθηκε με στατιστικά στοιχεία"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Εμφάνιση ζωντανών στατιστικών",
-        "description": "Εμφάνιση στατιστικών ζωντανών κεντρικών υπολογιστών πάνω από τα κουμπιά της γραμμής εργαλείων σε αναπτυγμένη λειτουργία"
-      },
-      "terminalToolbarFade": {
-        "label": "Σταδιακή εξασθένηση σε αδράνεια",
-        "description": "Σβήσιμο της γραμμής εργαλείων μέχρι να τοποθετήσετε τον δείκτη του ποντικιού πάνω από αυτήν"
-      },
-      "enableCommandHistory": {
-        "label": "Ιστορικό εντολών",
-        "description": "Οι εντολές εγγραφής εκτελούνται σε αυτό το τερματικό για ιστορικό και αυτόματη συμπλήρωση"
-      },
-      "enableTerminal": {
-        "label": "Ενεργοποίηση τερματικού",
-        "description": "Προσφέρετε ένα τερματικό SSH για αυτόν τον κεντρικό υπολογιστή."
-      },
-      "inheritAppearance": {
-        "label": "Χρήση προεπιλογών χρήστη"
-      },
-      "theme": {
-        "label": "Θέμα"
-      },
-      "cursorBlink": {
-        "label": "Αναβοσβήνει ο κέρσορας"
-      },
-      "cursorStyle": {
-        "label": "Στυλ δρομέα"
-      },
-      "fontSize": {
-        "label": "Μέγεθος γραμματοσειράς"
-      },
-      "fontFamily": {
-        "label": "Γραμματοσειρά"
-      },
-      "scrollback": {
-        "label": "Κύλιση προς τα πίσω"
-      },
-      "letterSpacing": {
-        "label": "Απόσταση γραμμάτων"
-      },
-      "lineHeight": {
-        "label": "Ύψος γραμμής"
-      },
-      "bellStyle": {
-        "label": "Κουδούνι"
-      },
-      "minimumContrastRatio": {
-        "label": "Ελάχιστη αναλογία αντίθεσης"
-      },
-      "backgroundImage": {
-        "label": "Εικόνα φόντου"
-      },
-      "backgroundImageOpacity": {
-        "label": "Αδιαφάνεια εικόνας φόντου"
-      },
-      "customThemeColors": {
-        "label": "Προσαρμοσμένα χρώματα θέματος"
-      },
-      "rightClickSelectsWord": {
-        "label": "Δεξί κλικ επιλέγει λέξη"
-      },
-      "macOptionIsMeta": {
-        "label": "Η επιλογή είναι Meta"
-      },
-      "fastScrollModifier": {
-        "label": "Πλήκτρο γρήγορης κύλισης"
-      },
-      "fastScrollSensitivity": {
-        "label": "Γρήγορη ταχύτητα κύλισης"
-      },
-      "backspaceMode": {
-        "label": "Backspace"
-      },
-      "autoMosh": {
-        "label": "Αυτόματο μοσχάρι"
-      },
-      "moshCommand": {
-        "label": "Εντολή Mosh"
-      },
-      "autoTmux": {
-        "label": "Αυτόματο tmux"
-      },
-      "useSSHTitle": {
-        "label": "Χρησιμοποιήστε τον τίτλο SSH"
-      },
-      "syntaxHighlighting": {
-        "label": "Επισήμανση σύνταξης"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Κατηγορίες επισήμανσης σύνταξης"
-      },
-      "linkClickBehavior": {
-        "label": "Κλικ στον σύνδεσμο"
-      },
-      "localEcho": {
-        "label": "Τοπική ηχώ"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Προσφέρομαι να συμπληρώσω προτροπές κωδικού πρόσβασης"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Συμπλήρωση προτροπών sudo"
-      },
-      "autoReconnect": {
-        "label": "Επανασύνδεση αυτόματα"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Αυτόματη συμπλήρωση εντολών",
-        "description": "Εμφάνιση αυτόματης συμπλήρωσης κατά την πληκτρολόγηση εάν πατήσετε το Tab"
-      },
-      "localEcho": {
-        "label": "Τοπική Ηχώ",
-        "description": "Μειώστε την αντιληπτή καθυστέρηση εισόδου χρησιμοποιώντας ασφαλή τοπική πρόβλεψη πληκτρολόγησης"
-      },
-      "linkClickBehavior": {
-        "label": "Κλικ στον σύνδεσμο τερματικού",
-        "description": "Προεπιλεγμένη συμπεριφορά κατά το κλικ σε συνδέσμους στο τερματικό"
-      },
-      "customThemes": {
-        "label": "Αποθηκευμένα θέματα"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Τοπικό τερματικό"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Χρήση ζωντανών συνεδριών τερματικού",
-      "description": "Επιτρέπει σε άλλες λειτουργίες, όπως η κοινή χρήση και η εγγραφή συνεδριών, να φτάνουν στις ζωντανές συνεδρίες τερματικού σας."
-    },
-    "history": {
-      "title": "Ανάγνωση ιστορικού εντολών",
-      "description": "Επιτρέπει σε άλλες λειτουργίες, όπως ο βοηθός τεχνητής νοημοσύνης, να διαβάζουν το ιστορικό εντολών σας."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Τερματικό",
-    "addHost": "Προσθήκη κεντρικού υπολογιστή",
-    "applyGlobalThemeTooltip": "Εφαρμογή αυτού του θέματος",
-    "backgroundImageDesc": "Προαιρετική διεύθυνση URL για εικόνα φόντου τερματικού",
-    "backgroundImageLabel": "URL εικόνας φόντου",
-    "backgroundImageOpacityLabel": "Αδιαφάνεια εικόνας φόντου",
-    "backspaceMode": "Λειτουργία Backspace",
-    "backspaceModeControlH": "Έλεγχος-H (BS)",
-    "backspaceModeLabel": "Λειτουργία Backspace",
-    "backspaceModeNormal": "Κανονικό (ΔΙΑΓΡΑΦΗ)",
-    "behaviorAndAdvanced": "Συμπεριφορά & Προχωρημένοι",
-    "bellStyle": "Στυλ καμπάνας",
-    "bellStyleBoth": "Και οι δύο",
-    "bellStyleLabel": "Στυλ καμπάνας",
-    "bellStyleNone": "Κανένας",
-    "bellStyleSound": "Ήχος",
-    "bellStyleVisual": "Οπτικός",
-    "colorTheme": "Θέμα χρώματος",
-    "cursorBlink": "Αναβοσβήσιμο δρομέα",
-    "cursorBlinking": "Δρομέας που αναβοσβήνει",
-    "cursorBlinkingDesc": "Ενεργοποίηση κινούμενης εικόνας που αναβοσβήνει για τον κέρσορα του τερματικού",
-    "cursorStyle": "Στυλ Δρομέα",
-    "cursorStyleBar": "Μπαρ",
-    "cursorStyleBlock": "Φραγμός",
-    "cursorStyleLabel": "Στυλ Δρομέα",
-    "cursorStyleUnderline": "Υπογραμμίζω",
-    "customThemeAnsiColors": "Χρώματα ANSI",
-    "customThemeBackground": "Φόντο",
-    "customThemeBlack": "Μαύρος",
-    "customThemeBlue": "Μπλε",
-    "customThemeBrightBlack": "Φωτεινό μαύρο",
-    "customThemeBrightBlue": "Φωτεινό Μπλε",
-    "customThemeBrightCyan": "Φωτεινό κυανό",
-    "customThemeBrightGreen": "Φωτεινό Πράσινο",
-    "customThemeBrightMagenta": "Φωτεινό Ματζέντα",
-    "customThemeBrightRed": "Φωτεινό κόκκινο",
-    "customThemeBrightWhite": "Φωτεινό λευκό",
-    "customThemeBrightYellow": "Φωτεινό κίτρινο",
-    "customThemeColors": "Προσαρμοσμένα χρώματα",
-    "customThemeCursor": "Δρομέας",
-    "customThemeCursorAccent": "Προφορά δρομέα",
-    "customThemeCyan": "Κυανό",
-    "customThemeForeground": "Προσκήνιο",
-    "customThemeGreen": "Πράσινος",
-    "customThemeMagenta": "Πορφύρα βαφή",
-    "customThemeRed": "Κόκκινος",
-    "customThemeResetTooltip": "Επαναφορά στις προεπιλογές",
-    "customThemeSelection": "Επιλογή",
-    "customThemeWhite": "Λευκό",
-    "customThemeYellow": "Κίτρινος",
-    "deleteGlobalThemeTooltip": "Διαγραφή αυτού του θέματος",
-    "docsLink": "Προβολή εγγράφων",
-    "enableAutoMosh": "Ενεργοποίηση Αυτόματης Μετατροπής",
-    "enableAutoMoshDesc": "Προτιμήστε το Mosh αντί για SSH, εάν είναι διαθέσιμο",
-    "enableAutoTmux": "Ενεργοποίηση Auto-Tmux",
-    "enableAutoTmuxDesc": "Διατηρήστε το κέλυφος (shell) και οτιδήποτε εκτελείται σε αυτό ενεργό σε αποσυνδέσεις και επανεκκινήσεις του προγράμματος περιήγησης, εκτελώντας το μέσα στο tmux (το tmux πρέπει να είναι εγκατεστημένο στον κεντρικό υπολογιστή)",
-    "fastScrollModifier": "Τροποποιητής γρήγορης κύλισης",
-    "fastScrollModifierAlt": "Εναλλακτική",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Τροποποιητής γρήγορης κύλισης",
-    "fastScrollModifierShift": "Αλλαγή",
-    "fastScrollSensitivity": "Ευαισθησία γρήγορης κύλισης",
-    "fastScrollSensitivityLabel": "Ευαισθησία γρήγορης κύλισης",
-    "fontFamily": "Οικογένεια γραμματοσειρών",
-    "fontFamilyCustomHint": "Επιλέξτε μια γραμματοσειρά που περιλαμβάνεται στο πακέτο ή επιλέξτε Προσαρμοσμένη και πληκτρολογήστε το ακριβές όνομα μιας γραμματοσειράς που είναι ήδη εγκατεστημένη στο σύστημά σας (π.χ. MesloLGS NF, Noto Sans Mono). Το Termix δεν μπορεί να εγκαταστήσει γραμματοσειρές για εσάς, εγκαταστήστε την πρώτα στο λειτουργικό σας σύστημα.",
-    "fontFamilyCustomOption": "Εθιμο...",
-    "fontFamilyCustomPlaceholder": "Ακριβές όνομα γραμματοσειράς, π.χ. MesloLGS NF",
-    "fontFamilyLabel": "Οικογένεια γραμματοσειρών",
-    "fontSize": "Μέγεθος γραμματοσειράς",
-    "fontSizeLabel": "Μέγεθος γραμματοσειράς",
-    "hostNotFound": "Δεν βρέθηκε κεντρικός υπολογιστής",
-    "letterSpacing": "Απόσταση γραμμάτων",
-    "letterSpacingPx": "Απόσταση γραμμάτων (px)",
-    "lineHeight": "Ύψος γραμμής",
-    "lineHeightLabel": "Ύψος γραμμής",
-    "linkClickBehaviorConfirm": "Εμφάνιση αναδυόμενου παραθύρου για άνοιγμα ή αντιγραφή",
-    "linkClickBehaviorDesc": "Ελέγχει τι συμβαίνει όταν κάνετε κλικ σε έναν σύνδεσμο στο τερματικό. Χρησιμοποιήστε την επιλογή \"Προεπιλογή\" για να ακολουθήσετε τη ρύθμιση σε επίπεδο εφαρμογής.",
-    "linkClickBehaviorDirect": "Άνοιγμα απευθείας",
-    "linkClickBehaviorLabel": "Συμπεριφορά κλικ σε σύνδεσμο",
-    "loadingHost": "Φόρτωση κεντρικού υπολογιστή...",
-    "localEchoAuto": "Αυτόματο",
-    "localEchoDesc": "Προβλέψτε ασφαλείς εκτυπώσιμες πληκτρολογήσεις τοπικά σε αργές συνδέσεις. Οι προτροπές κωδικού πρόσβασης και η εισαγωγή ελέγχου δεν επαναλαμβάνονται ποτέ.",
-    "localEchoLabel": "Τοπική Ηχώ",
-    "localEchoOff": "Μακριά από",
-    "localEchoOn": "Πάντα ενεργοποιημένο",
-    "macOptionIsMetaLabel": "Το πλήκτρο Option στέλνει μεταδεδομένα",
-    "macOptionIsMetaShortDesc": "Απενεργοποίηση της πληκτρολόγησης ειδικών χαρακτήρων (όπως @ ή |) με το πλήκτρο Option/Alt σε macOS αντί για την αποστολή Meta",
-    "moshCommand": "Εντολή MOSH",
-    "moshCommandLabel": "Διοίκηση Μος",
-    "noSavedThemes": "Δεν υπάρχουν ακόμη αποθηκευμένα θέματα",
-    "none": "Κανένας",
-    "passwordPromptAutoFillDesc": "Προσφέρετε να συμπληρώσετε τον αποθηκευμένο κωδικό πρόσβασης όταν το τερματικό σας τον ζητήσει. Απενεργοποιήστε την επιλογή για να μην συμπληρώνεται ποτέ αυτόματα κανένας κωδικός πρόσβασης σε αυτόν τον κεντρικό υπολογιστή.",
-    "passwordPromptAutoFillLabel": "Αυτόματη συμπλήρωση κωδικού πρόσβασης προσφοράς",
-    "autoReconnectLabel": "Αυτόματη επανασύνδεση",
-    "autoReconnectDesc": "Επανασυνδέεται από μόνο του όταν διακοπεί η σύνδεση SSH, όπως μετά από ένα σφάλμα δικτύου ή αναστολή λειτουργίας. Διατηρεί την κύλιση προς τα πίσω.",
-    "rightClickSelectsWord": "Δεξί κλικ για επιλογή Word",
-    "rightClickSelectsWordLabel": "Δεξί κλικ Επιλέγει το Word",
-    "rightClickSelectsWordShortDesc": "Επιλέξτε τη λέξη κάτω από τον κέρσορα με δεξί κλικ",
-    "saveAsGlobalTheme": "Αποθήκευση ως καθολικό θέμα",
-    "saveGlobalThemeError": "Η αποθήκευση του θέματος απέτυχε",
-    "saveGlobalThemeNamePrompt": "Εισαγάγετε ένα όνομα για αυτό το θέμα",
-    "saveGlobalThemeSuccess": "Το θέμα αποθηκεύτηκε",
-    "savedThemesLabel": "Αποθηκευμένα Θέματα",
-    "scrollbackBufferLabel": "Ενδιάμεσο buffer κύλισης προς τα πίσω",
-    "scrollbackMaxLines": "Μέγιστος αριθμός γραμμών που διατηρούνται στο ιστορικό",
-    "sudoPasswordAutoFill": "Αυτόματη συμπλήρωση κωδικού πρόσβασης Sudo",
-    "sudoPasswordAutoFillDesc": "Αποθηκεύστε έναν κωδικό πρόσβασης sudo, ώστε οι μετρήσεις του κεντρικού υπολογιστή, οι προτροπές του τερματικού και άλλα να μπορούν να εκτελούν αυτόματα προνομιακές εντολές.",
-    "sudoPasswordAutoFillLabel": "Αυτόματη συμπλήρωση κωδικού πρόσβασης Sudo",
-    "syntaxCategoryIpAddresses": "Διευθύνσεις IP",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Επίπεδα καταγραφής",
-    "syntaxCategoryLogLevelsDesc": "σφάλμα, προειδοποίηση, πληροφορίες, εντοπισμός σφαλμάτων, μοιραίο",
-    "syntaxCategoryNumbers": "Αριθμοί με ετικέτες",
-    "syntaxCategoryNumbersDesc": "θύρα 8080, έξοδος 1, κατάσταση 404",
-    "syntaxCategoryPaths": "Διαδρομές αρχείων",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "Χρονικές σημάνσεις",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 15-01-2024",
-    "syntaxCategoryUrls": "URL",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "Χρωματισμός εξόδου τερματικού (σφάλματα, διαδρομές, IP, χρονικές σημάνσεις)",
-    "syntaxHighlightingLabel": "Επισήμανση σύνταξης",
-    "terminalAppearance": "Εμφάνιση τερματικού",
-    "theme": "Θέμα",
-    "themePreview": "Προεπισκόπηση θέματος",
-    "useSSHTitleDesc": "Ενημερώστε τον τίτλο της καρτέλας από τον τίτλο του παραθύρου του κελύφους αντί για το όνομα του κεντρικού υπολογιστή",
-    "useSSHTitleLabel": "Χρήση τίτλου παραθύρου SSH",
-    "enableTunnel": "Ενεργοποίηση σήραγγας",
-    "enableFileManager": "Ενεργοποίηση Διαχείρισης Αρχείων",
-    "enableDocker": "Ενεργοποίηση Docker",
-    "startupSnippet": "Απόσπασμα εκκίνησης",
-    "quickActions": "Γρήγορες ενέργειες",
-    "proxmoxLastSyncStatus": {
-      "success": "Επιτυχία"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} παραλείφθηκε (δεν βρέθηκε IP)",
-    "proxmoxStatsUrlCopied": "Η διεύθυνση URL των στατιστικών του Proxmox αντιγράφηκε στο πρόχειρο",
-    "rdpUrlCopied": "Η διεύθυνση URL RDP αντιγράφηκε",
-    "vncUrlCopied": "Η διεύθυνση URL VNC αντιγράφηκε",
-    "filterAuthStepca": "Βήμα CA",
-    "guac": {
-      "noCredential": "Δεν υπάρχουν πιστοποιητικά (απευθείας πιστοποιητικά παρακάτω)",
-      "authTypeDirect": "Απευθείας",
-      "authTypeCredential": "Πιστοποιητικό",
-      "authTypeNone": "Κανένας",
-      "recordingPath": "Διαδρομή εγγραφής",
-      "recordingName": "Όνομα εγγραφής",
-      "saveHostFirst": "Αποθηκεύστε πρώτα τον οικοδεσπότη.",
-      "sharingOptionsAfterSave": "Οι επιλογές κοινής χρήσης είναι διαθέσιμες μετά την αποθήκευση του κεντρικού υπολογιστή.",
-      "permissionLevel": "Επίπεδο δικαιωμάτων",
-      "typeHeader": "Τύπος",
-      "targetHeader": "Στόχος",
-      "permissionHeader": "Αδεια",
-      "cancelBtn": "Ματαίωση",
-      "savingBtn": "Οικονομία...",
-      "updateHostBtn": "Ενημέρωση κεντρικού υπολογιστή",
-      "addHostBtn": "Προσθήκη κεντρικού υπολογιστή"
-    },
-    "filterAuthVault": "Θόλος"
-  },
-  "nav": {
-    "history": "Ιστορία",
-    "localTerminal": "Τοπικό τερματικό",
-    "sshTools": "Εργαλεία SSH",
-    "terminal": "Τερματικό",
-    "macros": "Μακροεντολές"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Πληκτρολογήστε εδώ για να μεταδώσετε πληκτρολογήσεις...",
-    "copyOnSelect": "Αυτόματη αντιγραφή επιλεγμένου κειμένου",
-    "enableRightClickCopyPaste": "Ενεργοποίηση αντιγραφής/επικόλλησης με δεξί κλικ",
-    "fillPassword": "Συμπληρώστε τον κωδικό πρόσβασης",
-    "fillPasswordMissing": "Δεν υπάρχει αποθηκευμένος κωδικός πρόσβασης για {{count}} επιλεγμένα τερματικά",
-    "fillPasswordSuccess": "Συμπληρώθηκε ο κωδικός πρόσβασης σε {{count}} τερματικό(α)",
-    "keyRecordingTitle": "Ηχογράφηση κλειδιών",
-    "noTerminalTabsOpen": "Δεν υπάρχουν ανοιχτές καρτέλες τερματικού",
-    "recordToTerminals": "Εγγραφή σε τερματικά",
-    "selectAll": "Ολοι",
-    "selectNone": "Κανένας",
-    "selectTerminalsAbove": "Επιλέξτε τερματικά παραπάνω",
-    "settingsTitle": "Ρυθμίσεις",
-    "startRecording": "Έναρξη εγγραφής",
-    "stopRecording": "Διακοπή εγγραφής"
-  },
-  "keybindings": {
-    "copy": "Αντιγραφή επιλογής",
-    "paste": "Πάστα",
-    "sendControlCode": "Αποστολή σήματος Ctrl+γράμμα",
-    "sendText": "Αποστολή κειμένου",
-    "controlCodeLabel": "Επιστολή",
-    "textLabel": "Μήνυμα προς αποστολή",
-    "appendEnterLabel": "Πατήστε Enter μετά την αποστολή",
-    "clipboardPermissionNote": "Ενδέχεται να ζητηθεί άδεια για το πρόχειρο κατά την πρώτη χρήση σε ορισμένα προγράμματα περιήγησης.",
-    "textRequired": "Εισαγάγετε το κείμενο που θέλετε να στείλετε",
-    "controlCodeRequired": "Εισαγάγετε ένα μόνο γράμμα για τον κωδικό ελέγχου",
-    "builtIn": {
-      "copyCtrlC": "Αντιγραφή επιλογής (Ctrl+C, μόνο όταν είναι επιλεγμένο κείμενο)",
-      "copyCtrlShiftC": "Αντιγραφή επιλογής (Ctrl+Shift+C)",
-      "copyCmdC": "Αντιγραφή επιλογής (Cmd+C)",
-      "pasteCtrlShiftV": "Επικόλληση από το πρόχειρο (Ctrl+Shift+V)",
-      "ctrlW": "Αποστολή Ctrl+W στο κέλυφος (αποκλεισμός από το κλείσιμο της καρτέλας του προγράμματος περιήγησης)",
-      "ctrlT": "Αποστολή Ctrl+T στο κέλυφος (αποκλεισμός από το άνοιγμα της καρτέλας του προγράμματος περιήγησης)",
-      "ctrlN": "Αποστολή Ctrl+N στο κέλυφος (αποκλεισμός από το άνοιγμα του παραθύρου του προγράμματος περιήγησης)",
-      "ctrlQ": "Αποστολή Ctrl+Q στο κέλυφος (αποκλεισμός από το κλείσιμο του προγράμματος περιήγησης)"
-    }
-  },
-  "macros": {
-    "title": "Μακροεντολές",
-    "description": "Εκτελέστε μια αποθηκευμένη σειρά εντολών σε ένα τερματικό και αντιδράστε σε ό,τι στέλνει πίσω ο διακομιστής.",
-    "target": "Στόχος",
-    "noTerminal": "Δεν υπάρχει ανοιχτό τερματικό",
-    "empty": "Δεν υπάρχουν ακόμη μακροεντολές",
-    "emptyHint": "Δημιουργήστε μια μακροεντολή για να αυτοματοποιήσετε μια ροή τερματικού, όπως σύνδεση, επανεκκίνηση μιας υπηρεσίας ή απάντηση σε μηνύματα.",
-    "create": "Νέα μακροεντολή",
-    "back": "Επιστροφή στις μακροεντολές",
-    "name": "Ονομα",
-    "namePlaceholder": "Επανεκκίνηση διακομιστή ιστού",
-    "nameRequired": "Δώστε ένα όνομα στη μακροεντολή πριν από την αποθήκευση",
-    "descriptionLabel": "Περιγραφή",
-    "descriptionPlaceholder": "Τι κάνει αυτή η μακροεντολή (προαιρετικό)",
-    "unsaved": "Μη αποθηκευμένες αλλαγές",
-    "save": "Εκτός",
-    "saved": "Η μακροεντολή αποθηκεύτηκε",
-    "saveFailed": "Δεν ήταν δυνατή η αποθήκευση της μακροεντολής",
-    "delete": "Διαγράφω",
-    "deleteTitle": "Διαγραφή αυτής της μακροεντολής;",
-    "deleteBody": "Το \"{{name}}\" θα διαγραφεί οριστικά. Δεν είναι δυνατή η αναίρεση αυτής της ενέργειας.",
-    "deleted": "Η μακροεντολή διαγράφηκε",
-    "cancel": "Ματαίωση",
-    "run": "Τρέξιμο",
-    "stop": "Στάση",
-    "running": "Τρέξιμο...",
-    "completed": "Η μακροεντολή ολοκληρώθηκε",
-    "failed": "Η μακροεντολή απέτυχε.",
-    "loadFailed": "Δεν ήταν δυνατή η φόρτωση μακροεντολών",
-    "needTerminal": "Ανοίξτε και συνδέστε πρώτα ένα τερματικό",
-    "noSteps": "Αυτή η μακροεντολή δεν έχει ακόμη βήματα. Προσθέστε ένα παρακάτω.",
-    "addStep": "Προσθήκη βήματος",
-    "stepNumber": "Βήμα {{number}}",
-    "removeStep": "Αφαίρεση βήματος",
-    "confirmRunTitle": "Εκτέλεση αυτής της μακροεντολής;",
-    "confirmRunBody": "Η εντολή \"{{name}}\" θα στείλει εντολές στον χρήστη {{host}}.",
-    "confirmRunAction": "Εκτέλεση μακροεντολής",
-    "stepTypes": {
-      "send": {
-        "label": "Αποστολή εντολής",
-        "help": "Πληκτρολογεί κείμενο στο τερματικό, όπως θα το γράφατε."
-      },
-      "wait": {
-        "label": "Περιμένετε για έξοδο",
-        "help": "Παύει μέχρι ο διακομιστής να εκτυπώσει το κείμενο που ονομάζετε, σαν να σας ζητείται κωδικός πρόσβασης."
-      },
-      "delay": {
-        "label": "Παύση",
-        "help": "Περιμένει ένα συγκεκριμένο χρονικό διάστημα πριν από το επόμενο βήμα."
-      },
-      "if": {
-        "label": "Εάν η έξοδος περιέχει",
-        "help": "Ελέγχει όλα όσα έχει εκτυπώσει μέχρι στιγμής ο διακομιστής και, στη συνέχεια, εκτελεί μία από τις δύο διακλαδώσεις."
-      },
-      "repeat": {
-        "label": "Επαναλαμβάνω",
-        "help": "Εκτελεί τα βήματα στο εσωτερικό του έναν καθορισμένο αριθμό φορών."
-      }
-    },
-    "send": {
-      "text": "Εντολή ή κείμενο",
-      "textPlaceholder": "επανεκκίνηση systemctl nginx",
-      "pressEnter": "Πατήστε Enter μετά την αποστολή",
-      "pressEnterHelp": "Απενεργοποιήστε αυτήν τη λειτουργία για να πληκτρολογείτε κείμενο χωρίς να το υποβάλλετε."
-    },
-    "wait": {
-      "pattern": "Περιμένετε μέχρι η έξοδος να περιέχει",
-      "patternPlaceholder": "σύνθημα:",
-      "timeout": "Παραιτήσου μετά",
-      "onTimeout": "Αν δεν εμφανιστεί ποτέ",
-      "stop": "Διακοπή της μακροεντολής",
-      "continue": "Συνέχισε ούτως ή άλλως"
-    },
-    "delay": {
-      "duration": "Περιμένω για"
-    },
-    "ifStep": {
-      "pattern": "Εάν η έξοδος περιέχει",
-      "patternPlaceholder": "Ενεργό: ενεργό (σε λειτουργία)",
-      "then": "Στη συνέχεια, κάντε αυτό",
-      "else": "Διαφορετικά, κάντε αυτό",
-      "emptyBranch": "Χωρίς σκαλοπάτια"
-    },
-    "repeat": {
-      "count": "Αριθμός φορών",
-      "times": "φορές"
-    },
-    "match": {
-      "useRegex": "Ταίριασμα με μια κανονική έκφραση",
-      "useRegexHelp": "Αφήστε το απενεργοποιημένο για να ταιριάζει ακριβώς με το κείμενο όπως είναι γραμμένο.",
-      "invalidRegex": "Δεν είναι έγκυρη κανονική έκφραση, θα αντιστοιχιστεί ως απλό κείμενο"
-    },
-    "seconds": "δευτερόλεπτα",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "Απαιτείται απομακρυσμένος διακομιστής. Συνδέστε έναν απομακρυσμένο διακομιστή στις Ρυθμίσεις για να χρησιμοποιήσετε αυτόν τον τύπο σύνδεσης."
-  },
-  "plugin": {
-    "name": "Τερματικό SSH"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/es_ES.json b/plugins/ssh-terminal/locales/translated/es_ES.json
deleted file mode 100644
index 44c7da810..000000000
--- a/plugins/ssh-terminal/locales/translated/es_ES.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Añadir",
-    "arrowDown": "Flecha abajo",
-    "arrowLeft": "Flecha izquierda",
-    "arrowRight": "Flecha derecha",
-    "arrowUp": "Flecha arriba",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Supr",
-    "done": "Hecho",
-    "editQuickKeys": "Editar teclas rápidas",
-    "end": "Fin",
-    "esc": "Esc",
-    "home": "Inicio",
-    "pageDown": "Re Pág",
-    "pageUp": "Av Pág",
-    "paste": "Pegar",
-    "quickKeyPlaceholder": "p. ej. sudo ",
-    "quickKeysDesc": "Toca × para eliminar. Admite hasta 8 caracteres.",
-    "quickKeysTitle": "Teclas rápidas",
-    "removeQuickKey": "Eliminar",
-    "resetDefaults": "Restablecer",
-    "shift": "Mayús",
-    "tab": "Tab"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "No se pudo habilitar Auto-Tmux.",
-    "autoTmuxEnabled": "Auto-Tmux habilitado para {{host}}. Se aplica a partir de la siguiente conexión.",
-    "clipboardHttpWarning": "No se pudo leer el portapapeles. Algunos navegadores restringen el acceso al portapapeles fuera de HTTPS; intente usar Ctrl+V o ejecute Termix a través de HTTPS.",
-    "closeTab": "Cerrar",
-    "connecting": "Conectando...",
-    "connectionLost": "Conexión perdida",
-    "connectionRejected": "Conexión rechazada por el servidor. Revisa tu autenticación y configuración de red.",
-    "connectionTimeout": "Timeout de conexión",
-    "enableAutoTmuxAction": "Habilitar Auto-Tmux",
-    "hostKeyRejected": "Verificación de clave de host SSH rechazada. Conexión cancelada.",
-    "linkDialogCopy": "Copiar",
-    "linkDialogOpen": "Abrir",
-    "linkDialogTitle": "Abrir enlace",
-    "maxReconnectAttemptsReached": "Número máximo de intentos de reconexión alcanzado",
-    "noHostSelected": "Ningún host seleccionado",
-    "passwordPromptFillTitle": "¿Rellenar este campo con la contraseña guardada?",
-    "reconnect": "Reconectar",
-    "reconnected": "Reconectado correctamente",
-    "reconnecting": "Reconectando... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Se perdió la conexión, reconectando...",
-    "searchCaseSensitive": "Caja de cerillas",
-    "searchClose": "Cerrar (Escape)",
-    "searchNext": "Siguiente partido (Entrar)",
-    "searchNoResults": "No hay resultados",
-    "searchPlaceholder": "Encontrar",
-    "searchPrevious": "Coincidencia anterior (Shift+Enter)",
-    "searchRegex": "Utilizar expresiones regulares",
-    "searchResultCount": "{{index}} de {{count}}",
-    "searchWholeWord": "Emparejar palabra completa",
-    "sessionExpiredNotice": "Tu sesión anterior en {{host}} expiró después de {{minutes}} minutos desconectada; la consola y todo lo que se ejecutaba en ella se han perdido. Habilita Auto-Tmux en este host para mantener las sesiones activas.",
-    "sessionExpiredNoticeNoMinutes": "Tu sesión anterior en {{host}} expiró mientras estabas desconectado; la consola y todo lo que se ejecutaba en ella se perdieron. Habilita Auto-Tmux en este host para mantener las sesiones activas.",
-    "sessionTakenOver": "La sesión se abrió en otra pestaña. Reconectando...",
-    "tmuxAttached": "Clientes adjuntos",
-    "tmuxAttachedCount": "{{count}} adjunto",
-    "tmuxCopyHint": "Ajuste la selección y pulse Intro para copiar al portapapeles",
-    "tmuxCreateNew": "Iniciar nueva sesión",
-    "tmuxDetached": "Desconectado de la sesión tmux",
-    "tmuxLastActivity": "Última actividad",
-    "tmuxSessionAttached": "Sesión tmux adjuntada: {{name}}",
-    "tmuxSessionCreated": "Sesión tmux creada: {{name}}",
-    "tmuxSessionPickerDesc": "Se encontraron sesiones tmux existentes en este host. Seleccione una para readjuntar o cree una nueva sesión.",
-    "tmuxSessionPickerTitle": "Sesiones tmux",
-    "tmuxTimeDays": "hace {{count}}d",
-    "tmuxTimeHours": "hace {{count}}h",
-    "tmuxTimeJustNow": "ahora mismo",
-    "tmuxTimeMinutes": "hace {{count}}m",
-    "tmuxUnavailable": "tmux no está instalado en el host remoto, recurriendo al intérprete de comandos estándar",
-    "tmuxWindowCount": "{{count}} ventana",
-    "tmuxWindows": "Ventanas",
-    "unknownError": "Se ha producido un error desconocido.",
-    "websocketAbnormalClose": "La conexión se cerró de forma inesperada. Esto puede deberse a un problema con el proxy inverso o la configuración SSL. Revisa los registros del servidor.",
-    "websocketError": "Error de conexión WebSocket",
-    "clipboardReadFailed": "No se pudo leer del portapapeles. Asegúrese de que los permisos del portapapeles estén concedidos.",
-    "clipboardWriteFailed": "Error al copiar al portapapeles. Asegúrese de que la página se sirva a través de HTTPS o en localhost.",
-    "connected": "Conectado",
-    "totpCodeLabel": "Código de verificación",
-    "duplicateTab": "Pestaña duplicada",
-    "imageChooseFile": "Seleccione un archivo de imagen",
-    "imageUploaded": "Imagen subida: {{path}}",
-    "imageClipboardUnavailable": "Este navegador no puede leer imágenes del portapapeles.",
-    "imageClipboardEmpty": "No se encontró ninguna imagen en el portapapeles.",
-    "localShell": "shell de terminal local",
-    "autocompleteHintComplete": "Presione Tabulador o Enter para completar",
-    "autocompleteHintNavigate": "↑↓ para navegar",
-    "autocompleteHintClose": "Presione Esc para cerrar"
-  },
-  "terminalToolbar": {
-    "detachTmux": "Desvincular tmux",
-    "detachTmuxDescription": "Desvincular sesión de tmux",
-    "dismissError": "Descartar error de imagen",
-    "hideToolbar": "Ocultar barra de herramientas",
-    "image": "Acciones de imagen (solo imágenes)",
-    "imageActionFailed": "La acción de la imagen falló.",
-    "layout": "Modo de visualización de la barra de herramientas",
-    "layoutExpanded": "Ampliado con métricas",
-    "layoutIcon": "Solo icono",
-    "layoutLabeled": "Iconos y etiquetas",
-    "moveToolbar": "Mover barra de herramientas",
-    "moveToolbarHint": "Arrastra para cambiar la posición de la barra de herramientas.",
-    "paste": "Pegar imagen",
-    "pasteImage": "Pegar imagen desde el portapapeles (solo imágenes)",
-    "retry": "Reintentar",
-    "showToolbar": "Expandir barra de herramientas",
-    "upload": "Subir imagen",
-    "uploadImage": "Sube una imagen al servidor.",
-    "uploadingImage": "Subiendo..."
-  },
-  "history": {
-    "noTerminalSelected": "Ningún terminal seleccionado",
-    "noTerminalSelectedHint": "Abra una pestaña de terminal SSH para ver su historial de comandos",
-    "searchPlaceholder": "Buscar en el historial...",
-    "clearAll": "Borrar todo",
-    "noHistoryEntries": "Sin entradas de historial",
-    "trackingDisabled": "El seguimiento del historial está desactivado",
-    "trackingDisabledHint": "Active el historial de comandos en la pestaña Terminal SSH de este host.",
-    "commandCount_one": "{{count}} comando",
-    "commandCount_other": "{{count}} comandos"
-  },
-  "touchInput": {
-    "enabled": "Habilitar la entrada táctil",
-    "enabledDesc": "Permitir el desplazamiento táctil con un solo dedo en terminales.",
-    "momentumEnabled": "Habilitar el impulso",
-    "momentumEnabledDesc": "Continúa desplazándote brevemente después de deslizar el dedo.",
-    "advanced": "Avanzado",
-    "resetDefaults": "Restablecer",
-    "dragThreshold": "Umbral de arrastre",
-    "maxWheelDelta": "Delta máximo de rueda",
-    "momentumSampleWindow": "Ventana de muestreo de Momentum",
-    "releaseGracePeriod": "Período de gracia de liberación",
-    "minimumVelocity": "Velocidad mínima",
-    "maximumVelocity": "Velocidad máxima",
-    "maximumDuration": "Duración máxima",
-    "maximumTravel": "Viaje máximo",
-    "decayTime": "Tiempo de decaimiento",
-    "pixelsPerTick": "Píxeles por tick",
-    "maximumFrameInterval": "Intervalo máximo de fotogramas",
-    "maximumTicksPerFrame": "Número máximo de ticks por fotograma"
-  },
-  "imageStorage": {
-    "instanceId": "ID de instancia de sesión de terminal",
-    "instanceIdDesc": "ID de instancia de una de las pestañas de terminal conectadas, utilizada para probar la visibilidad.",
-    "selectedModeUnavailable": "Indisponible",
-    "test": "Probar",
-    "testing": "Pruebas...",
-    "testFailed": "No se pudo probar el almacenamiento de imágenes.",
-    "testConnected": "La sesión de terminal está conectada.",
-    "testNotConnected": "No existe ninguna sesión de terminal conectada con este ID de instancia.",
-    "testSelectedMode": "Una carga usaría: {{mode}}",
-    "testLocalVisible": "El directorio local es visible desde el host conectado.",
-    "testLocalNotVisible": "El directorio local NO es visible desde el host conectado."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Entrada táctil",
-        "images": "Almacenamiento de imágenes",
-        "sessions": "Sesiones",
-        "newHosts": "Nuevos anfitriones"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Persistencia de sesión terminal",
-        "description": "¿Cuánto tiempo permanece activa una terminal desconectada en el servidor antes de cerrarse? Mínimo 1 minuto, máximo 1440 minutos. Para sesiones que deban superar este límite, active Auto-Tmux en el host."
-      },
-      "commandHistoryEnabled": {
-        "label": "Historial de comandos",
-        "description": "Permitir el registro del historial de comandos. Si se desactiva, el historial no se guarda independientemente de la configuración por host."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "Historial de comandos para nuevos hosts",
-        "description": "Si los nuevos hosts comienzan con el historial de comandos activado."
-      },
-      "imageStorageMode": {
-        "label": "Modo de almacenamiento",
-        "description": "Donde se escriben las imágenes de terminal pegadas y cargadas. La selección automática por conexión, local y remota (SFTP) es fija.",
-        "auto": "Automático",
-        "local": "Local",
-        "remoteSftp": "Remoto (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Directorio local",
-        "description": "Ruta absoluta en el backend de Termix donde el modo local escribe las imágenes. Nunca se muestra después de guardar. Si está vacío, usa TERMIX_IMAGE_DIR."
-      },
-      "imageHostPath": {
-        "label": "Ruta del host",
-        "description": "La vista del directorio local que reciben los agentes de terminal desde el lado del host."
-      },
-      "imageTtlMs": {
-        "label": "TTL (ms)",
-        "description": "Tiempo de conservación de una imagen subida, en milisegundos. Si está vacío, utiliza TERMIX_IMAGE_TTL_MS o una hora."
-      },
-      "imageMaxCount": {
-        "label": "Número máximo de imágenes",
-        "description": "La mayoría de las imágenes se conservan a la vez. Si está vacío, utiliza TERMIX_MAX_IMAGE_COUNT o 100."
-      },
-      "imageMaxBytes": {
-        "label": "Bytes de almacenamiento máximo",
-        "description": "La mayoría de los bytes de las imágenes se almacenan a la vez. El espacio vacío utiliza TERMIX_MAX_IMAGE_STORAGE_BYTES o 5 GiB."
-      },
-      "sessionPersistence": {
-        "label": "Conservar las sesiones después de la desconexión",
-        "description": "Mantén una terminal desconectada activa en el servidor durante el tiempo indicado anteriormente, de modo que al volver a abrir su pestaña se retome la tarea donde se interrumpió."
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "Ejecuta las terminales de los nuevos hosts dentro de tmux para que las sesiones sobrevivan a las desconexiones (requiere tmux en el host)."
-      },
-      "newHostTheme": {
-        "label": "Tema para nuevos anfitriones",
-        "description": "El tema de terminal con el que se inicia un nuevo host."
-      },
-      "newHostFontFamily": {
-        "label": "Fuente para nuevos anfitriones",
-        "description": "La fuente de terminal con la que se inicia un nuevo host."
-      },
-      "newHostFontSize": {
-        "label": "Tamaño de fuente para nuevos anfitriones",
-        "description": "El tamaño de fuente de la terminal con el que se inicia un nuevo host, en píxeles."
-      },
-      "newHostCursorStyle": {
-        "label": "Estilo del cursor para nuevos hosts"
-      },
-      "newHostCursorBlink": {
-        "label": "Cursor parpadeante para nuevos hosts"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Habilitar la barra de herramientas del terminal",
-        "description": "Mostrar una barra de herramientas de acceso rápido acoplada al terminal activo para las herramientas y estadísticas en tiempo real de este host."
-      },
-      "terminalToolbarPosition": {
-        "label": "Posición de la barra de herramientas",
-        "description": "Donde se ubica la barra de herramientas en la terminal. Aún puedes arrastrarla desde allí.",
-        "bottom": "Parte inferior central",
-        "bottomLeft": "Abajo a la izquierda",
-        "bottomRight": "Abajo a la derecha",
-        "top": "Centro superior",
-        "topLeft": "Arriba a la izquierda",
-        "topRight": "Arriba a la derecha"
-      },
-      "terminalToolbarStartState": {
-        "label": "Estado inicial de la barra de herramientas",
-        "description": "Si la barra de herramientas se abre expandida o minimizada cuando se conecta el terminal.",
-        "expanded": "Expandido",
-        "collapsed": "Minimizado"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Modo de visualización de la barra de herramientas",
-        "description": "Cómo se muestran los botones de la barra de herramientas. La última opción utilizada conserva la selección que hayas hecho en la barra de herramientas.",
-        "remember": "Último uso",
-        "icon": "Solo icono",
-        "labeled": "Iconos y etiquetas",
-        "expanded": "Ampliado con estadísticas"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Mostrar estadísticas en vivo",
-        "description": "Muestra las estadísticas del anfitrión en tiempo real encima de los botones de la barra de herramientas en modo expandido."
-      },
-      "terminalToolbarFade": {
-        "label": "Atenuarse cuando está inactivo",
-        "description": "Desvanezca la barra de herramientas hasta que pase el cursor sobre ella."
-      },
-      "enableCommandHistory": {
-        "label": "Historial de comandos",
-        "description": "Registrar los comandos ejecutados en este terminal para el historial y autocompletado"
-      },
-      "enableTerminal": {
-        "label": "Habilitar terminal",
-        "description": "Ofrezca un terminal SSH para este host."
-      },
-      "inheritAppearance": {
-        "label": "Usar valores predeterminados del usuario"
-      },
-      "theme": {
-        "label": "Tema"
-      },
-      "cursorBlink": {
-        "label": "cursor parpadeante"
-      },
-      "cursorStyle": {
-        "label": "Estilo del cursor"
-      },
-      "fontSize": {
-        "label": "Tamaño de fuente"
-      },
-      "fontFamily": {
-        "label": "Fuente"
-      },
-      "scrollback": {
-        "label": "Retroceder"
-      },
-      "letterSpacing": {
-        "label": "espaciado entre letras"
-      },
-      "lineHeight": {
-        "label": "Altura de línea"
-      },
-      "bellStyle": {
-        "label": "Campana"
-      },
-      "minimumContrastRatio": {
-        "label": "relación de contraste mínima"
-      },
-      "backgroundImage": {
-        "label": "Imagen de fondo"
-      },
-      "backgroundImageOpacity": {
-        "label": "opacidad de la imagen de fondo"
-      },
-      "customThemeColors": {
-        "label": "Colores de tema personalizados"
-      },
-      "rightClickSelectsWord": {
-        "label": "El clic derecho selecciona la palabra."
-      },
-      "macOptionIsMeta": {
-        "label": "La opción es Meta"
-      },
-      "fastScrollModifier": {
-        "label": "tecla de desplazamiento rápido"
-      },
-      "fastScrollSensitivity": {
-        "label": "Velocidad de desplazamiento rápida"
-      },
-      "backspaceMode": {
-        "label": "Retroceso"
-      },
-      "autoMosh": {
-        "label": "Mosh automático"
-      },
-      "moshCommand": {
-        "label": "Comando Mosh"
-      },
-      "autoTmux": {
-        "label": "tmux automático"
-      },
-      "useSSHTitle": {
-        "label": "Utilice el título SSH"
-      },
-      "syntaxHighlighting": {
-        "label": "Resaltado de sintaxis"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Categorías de resaltado de sintaxis"
-      },
-      "linkClickBehavior": {
-        "label": "Enlace clic"
-      },
-      "localEcho": {
-        "label": "Eco local"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Ofrecer rellenar las solicitudes de contraseña"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Rellene las indicaciones de sudo"
-      },
-      "autoReconnect": {
-        "label": "Volver a conectarse automáticamente"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Autocompletado de comandos",
-        "description": "Mostrar autocompletar mientras escribes si pulsas la tecla Tab"
-      },
-      "localEcho": {
-        "label": "Eco local",
-        "description": "Reduzca la latencia de entrada percibida mediante la predicción segura de pulsaciones de teclas locales."
-      },
-      "linkClickBehavior": {
-        "label": "Clic en enlace de terminal",
-        "description": "Comportamiento predeterminado al hacer clic en enlaces del terminal"
-      },
-      "customThemes": {
-        "label": "Temas guardados"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Terminal local"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Utilice sesiones de terminal en vivo",
-      "description": "Permite que otras funciones, como compartir y grabar sesiones, lleguen a tus sesiones de terminal en directo."
-    },
-    "history": {
-      "title": "Historial de comandos (Leer)",
-      "description": "Permite que otras funciones, como el asistente de IA, lean tu historial de comandos."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Terminal",
-    "addHost": "Añadir host",
-    "applyGlobalThemeTooltip": "Aplicar este tema",
-    "backgroundImageDesc": "URL opcional para una imagen de fondo del terminal",
-    "backgroundImageLabel": "URL de la imagen de fondo",
-    "backgroundImageOpacityLabel": "Opacidad de la imagen de fondo",
-    "backspaceMode": "Modo de retroceso",
-    "backspaceModeControlH": "Control-H (BS)",
-    "backspaceModeLabel": "Modo de retroceso",
-    "backspaceModeNormal": "Normal (DEL)",
-    "behaviorAndAdvanced": "Comportamiento y avanzado",
-    "bellStyle": "Estilo de campana",
-    "bellStyleBoth": "Ambos",
-    "bellStyleLabel": "Estilo de aviso sonoro",
-    "bellStyleNone": "Ninguna",
-    "bellStyleSound": "Sonido",
-    "bellStyleVisual": "Visual",
-    "colorTheme": "Tema de color",
-    "cursorBlink": "Parpadeo del cursor",
-    "cursorBlinking": "Parpadeo del cursor",
-    "cursorBlinkingDesc": "Activar la animación de parpadeo para el cursor del terminal",
-    "cursorStyle": "Estilo del cursor",
-    "cursorStyleBar": "Bar",
-    "cursorStyleBlock": "Bloquear",
-    "cursorStyleLabel": "Estilo del cursor",
-    "cursorStyleUnderline": "Subrayar",
-    "customThemeAnsiColors": "Colores ANSI",
-    "customThemeBackground": "Fondo",
-    "customThemeBlack": "Negro",
-    "customThemeBlue": "Azul",
-    "customThemeBrightBlack": "Negro brillante",
-    "customThemeBrightBlue": "Azul brillante",
-    "customThemeBrightCyan": "Cian brillante",
-    "customThemeBrightGreen": "Verde brillante",
-    "customThemeBrightMagenta": "Magenta brillante",
-    "customThemeBrightRed": "Rojo brillante",
-    "customThemeBrightWhite": "Blanco brillante",
-    "customThemeBrightYellow": "Amarillo brillante",
-    "customThemeColors": "Colores personalizados",
-    "customThemeCursor": "Cursor",
-    "customThemeCursorAccent": "Acento del cursor",
-    "customThemeCyan": "Cian",
-    "customThemeForeground": "Primer plano",
-    "customThemeGreen": "Verde",
-    "customThemeMagenta": "Magenta",
-    "customThemeRed": "Rojo",
-    "customThemeResetTooltip": "Restablecer valores predeterminados",
-    "customThemeSelection": "Selección",
-    "customThemeWhite": "Blanco",
-    "customThemeYellow": "Amarillo",
-    "deleteGlobalThemeTooltip": "Eliminar este tema",
-    "docsLink": "Ver documentación",
-    "enableAutoMosh": "Habilitar Auto-Mosh",
-    "enableAutoMoshDesc": "Preferir Mosh sobre SSH si está disponible",
-    "enableAutoTmux": "Habilitar Auto-Tmux",
-    "enableAutoTmuxDesc": "Mantén tu shell y todo lo que se esté ejecutando en él activo durante desconexiones y reinicios del navegador ejecutándolo dentro de tmux (tmux debe estar instalado en el host).",
-    "fastScrollModifier": "Modificador de desplazamiento rápido",
-    "fastScrollModifierAlt": "Alt",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Modificador de desplazamiento rápido",
-    "fastScrollModifierShift": "Mayús",
-    "fastScrollSensitivity": "Sensibilidad de desplazamiento rápido",
-    "fastScrollSensitivityLabel": "Sensibilidad de desplazamiento rápido",
-    "fontFamily": "Familia de fuentes",
-    "fontFamilyCustomHint": "Selecciona una fuente incluida o elige Personalizada e introduce el nombre exacto de una fuente ya instalada en tu sistema (por ejemplo, MesloLGS NF, Noto Sans Mono). Termix no puede instalar fuentes por ti; primero debes instalarlas en tu sistema operativo.",
-    "fontFamilyCustomOption": "Costumbre...",
-    "fontFamilyCustomPlaceholder": "Nombre exacto de la fuente, por ejemplo MesloLGS NF",
-    "fontFamilyLabel": "Familia de fuentes",
-    "fontSize": "Tamaño de fuente",
-    "fontSizeLabel": "Tamaño de fuente",
-    "hostNotFound": "Host no encontrado",
-    "letterSpacing": "Espaciado entre letras",
-    "letterSpacingPx": "Espaciado entre letras (px)",
-    "lineHeight": "Altura de línea",
-    "lineHeightLabel": "Altura de línea",
-    "linkClickBehaviorConfirm": "Mostrar ventana emergente para abrir o copiar",
-    "linkClickBehaviorDesc": "Controla lo que sucede al hacer clic en un enlace en el terminal. Use 'Predeterminado' para seguir la configuración de la aplicación.",
-    "linkClickBehaviorDirect": "Abrir directamente",
-    "linkClickBehaviorLabel": "Comportamiento al hacer clic en enlaces",
-    "loadingHost": "Cargando host...",
-    "localEchoAuto": "Automático",
-    "localEchoDesc": "Predice localmente las pulsaciones de teclas seguras para imprimir en conexiones lentas. Las solicitudes de contraseña y la entrada de control nunca se repiten.",
-    "localEchoLabel": "Eco local",
-    "localEchoOff": "Desactivado",
-    "localEchoOn": "Siempre encendido",
-    "macOptionIsMetaLabel": "La tecla de opción envía metadatos",
-    "macOptionIsMetaShortDesc": "Deshabilitar la escritura de caracteres especiales (como @ o |) con la tecla Opción/Alt en macOS en lugar de enviar Meta",
-    "moshCommand": "Comando MOSH",
-    "moshCommandLabel": "Comando Mosh",
-    "noSavedThemes": "Aún no hay temas guardados",
-    "none": "Ninguno",
-    "passwordPromptAutoFillDesc": "Ofrece rellenar automáticamente la contraseña guardada cuando el terminal la solicite. Desactiva esta opción para no rellenar automáticamente ninguna contraseña en este equipo.",
-    "passwordPromptAutoFillLabel": "Ofrecer autocompletado de contraseña",
-    "autoReconnectLabel": "Reconexión automática",
-    "autoReconnectDesc": "Se reconecta automáticamente cuando se pierde la conexión SSH, por ejemplo, tras una interrupción de la red o un período de inactividad. Conserva el historial de desplazamiento.",
-    "rightClickSelectsWord": "Clic derecho selecciona palabra",
-    "rightClickSelectsWordLabel": "Clic derecho selecciona palabra",
-    "rightClickSelectsWordShortDesc": "Selecciona la palabra bajo el cursor al hacer clic derecho",
-    "saveAsGlobalTheme": "Guardar como tema global",
-    "saveGlobalThemeError": "No se pudo guardar el tema.",
-    "saveGlobalThemeNamePrompt": "Introduce un nombre para este tema.",
-    "saveGlobalThemeSuccess": "Tema guardado",
-    "savedThemesLabel": "Temas guardados",
-    "scrollbackBufferLabel": "Búfer de retroceso",
-    "scrollbackMaxLines": "Número máximo de líneas conservadas en el historial",
-    "sudoPasswordAutoFill": "Autocompletado de contraseña de sudo",
-    "sudoPasswordAutoFillDesc": "Almacenar una contraseña sudo para que las métricas del host, las solicitudes del terminal y otros puedan ejecutar comandos privilegiados automáticamente.",
-    "sudoPasswordAutoFillLabel": "Autocompletado de contraseña sudo",
-    "syntaxCategoryIpAddresses": "Direcciones IP",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Niveles de registro",
-    "syntaxCategoryLogLevelsDesc": "error, warn, info, debug, fatal",
-    "syntaxCategoryNumbers": "Números etiquetados",
-    "syntaxCategoryNumbersDesc": "port 8080, exit 1, status 404",
-    "syntaxCategoryPaths": "Rutas de archivo",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "Marcas de tiempo",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 2024-01-15",
-    "syntaxCategoryUrls": "URLs",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "Colorear la salida del terminal (errores, rutas, IPs, marcas de tiempo)",
-    "syntaxHighlightingLabel": "Resaltado de sintaxis",
-    "terminalAppearance": "Apariencia del terminal",
-    "theme": "Tema",
-    "themePreview": "Vista previa del tema",
-    "useSSHTitleDesc": "Actualizar el título de la pestaña desde el título de la ventana del shell en lugar del nombre del host",
-    "useSSHTitleLabel": "Usar título de ventana SSH",
-    "enableTunnel": "Activar túnel",
-    "enableFileManager": "Activar gestor de archivos",
-    "enableDocker": "Activar Docker",
-    "startupSnippet": "Fragmento de inicio",
-    "quickActions": "Acciones rápidas",
-    "proxmoxLastSyncStatus": {
-      "success": "Correcto"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} omitido (no se encontró ninguna IP)",
-    "proxmoxStatsUrlCopied": "Se copió al portapapeles la URL de estadísticas de Proxmox.",
-    "rdpUrlCopied": "URL de RDP copiada",
-    "vncUrlCopied": "URL de VNC copiada",
-    "filterAuthStepca": "Paso CA",
-    "guac": {
-      "noCredential": "Sin credencial (credenciales directas a continuación)",
-      "authTypeDirect": "Directa",
-      "authTypeCredential": "Credencial",
-      "authTypeNone": "Ninguna",
-      "recordingPath": "Ruta de grabación",
-      "recordingName": "Nombre de la grabación",
-      "saveHostFirst": "Primero guarde el host.",
-      "sharingOptionsAfterSave": "Las opciones de compartición están disponibles después de guardar el host.",
-      "permissionLevel": "Nivel de permiso",
-      "typeHeader": "Tipo",
-      "targetHeader": "Destino",
-      "permissionHeader": "Permiso",
-      "cancelBtn": "Cancelar",
-      "savingBtn": "Guardando...",
-      "updateHostBtn": "Actualizar host",
-      "addHostBtn": "Añadir host"
-    },
-    "filterAuthVault": "Bóveda"
-  },
-  "nav": {
-    "history": "Historial",
-    "localTerminal": "Terminal local",
-    "sshTools": "Herramientas SSH",
-    "terminal": "Terminal",
-    "macros": "Macros"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Escriba aquí para transmitir pulsaciones...",
-    "copyOnSelect": "Copiar automáticamente el texto seleccionado",
-    "enableRightClickCopyPaste": "Activar copiar/pegar con clic derecho",
-    "fillPassword": "Rellenar contraseña",
-    "fillPasswordMissing": "No hay contraseña guardada para {{count}} terminal(es) seleccionado(s)",
-    "fillPasswordSuccess": "Contraseña rellenada en {{count}} terminal(es)",
-    "keyRecordingTitle": "Grabación de teclas",
-    "noTerminalTabsOpen": "Sin pestañas de terminal abiertas",
-    "recordToTerminals": "Grabar en terminales",
-    "selectAll": "Revocar todo",
-    "selectNone": "Ninguna",
-    "selectTerminalsAbove": "Seleccionar terminales arriba",
-    "settingsTitle": "Configuración",
-    "startRecording": "Iniciar grabación",
-    "stopRecording": "Detener grabación"
-  },
-  "keybindings": {
-    "copy": "Copiar selección",
-    "paste": "Pegar",
-    "sendControlCode": "Enviar señal Ctrl+letra",
-    "sendText": "Enviar mensaje de texto",
-    "controlCodeLabel": "Carta",
-    "textLabel": "Texto para enviar",
-    "appendEnterLabel": "Presione Enter después de enviar",
-    "clipboardPermissionNote": "En algunos navegadores, puede solicitar permiso para copiar y pegar el contenido del portapapeles la primera vez que se utilice.",
-    "textRequired": "Introduce el texto que deseas enviar",
-    "controlCodeRequired": "Introduzca una sola letra para el código de control.",
-    "builtIn": {
-      "copyCtrlC": "Copiar selección (Ctrl+C, solo cuando el texto esté seleccionado)",
-      "copyCtrlShiftC": "Copiar selección (Ctrl+Mayús+C)",
-      "copyCmdC": "Copiar selección (Cmd+C)",
-      "pasteCtrlShiftV": "Pegar desde el portapapeles (Ctrl+Mayús+V)",
-      "ctrlW": "Enviar Ctrl+W a la consola (bloqueado para cerrar la pestaña del navegador)",
-      "ctrlT": "Enviar Ctrl+T a la consola (bloqueado para abrir una pestaña del navegador)",
-      "ctrlN": "Enviar Ctrl+N a la consola (bloqueado para abrir la ventana del navegador)",
-      "ctrlQ": "Enviar Ctrl+Q a la consola (bloqueado para salir del navegador)"
-    }
-  },
-  "macros": {
-    "title": "Macros",
-    "description": "Ejecuta una serie de comandos guardados en una terminal y reacciona a la respuesta que envíe el servidor.",
-    "target": "Destino",
-    "noTerminal": "No hay terminal abierta",
-    "empty": "Aún no hay macros",
-    "emptyHint": "Crea una macro para automatizar un flujo de terminal, como iniciar sesión, reiniciar un servicio o responder a preguntas.",
-    "create": "Nueva macro",
-    "back": "Volver a las macros",
-    "name": "Nombre",
-    "namePlaceholder": "Reiniciar el servidor web",
-    "nameRequired": "Dale un nombre a la macro antes de guardarla.",
-    "descriptionLabel": "Descripción",
-    "descriptionPlaceholder": "Qué hace esta macro (opcional)",
-    "unsaved": "Cambios sin guardar",
-    "save": "Guardar",
-    "saved": "Macro guardada",
-    "saveFailed": "No se pudo guardar la macro",
-    "delete": "Eliminar",
-    "deleteTitle": "¿Eliminar esta macro?",
-    "deleteBody": "\"{{name}}\" se eliminará permanentemente. Esto no se puede deshacer.",
-    "deleted": "Macro eliminada",
-    "cancel": "Cancelar",
-    "run": "Ejecutar",
-    "stop": "Parada",
-    "running": "Correr...",
-    "completed": "Macro terminado",
-    "failed": "La macro falló",
-    "loadFailed": "No se pudieron cargar las macros",
-    "needTerminal": "Primero, abre y conecta una terminal.",
-    "noSteps": "Esta macro aún no tiene pasos. Añada uno a continuación.",
-    "addStep": "Agregar paso",
-    "stepNumber": "Paso {{number}}",
-    "removeStep": "Eliminar paso",
-    "confirmRunTitle": "¿Ejecutar esta macro?",
-    "confirmRunBody": "\"{{name}}\" enviará comandos a {{host}}.",
-    "confirmRunAction": "Ejecutar macro",
-    "stepTypes": {
-      "send": {
-        "label": "Enviar comando",
-        "help": "Escribe el texto en la terminal, igual que si lo hubieras escrito tú."
-      },
-      "wait": {
-        "label": "Espere la salida",
-        "help": "Hace una pausa hasta que el servidor imprime el texto que usted especifique, como si fuera una solicitud de contraseña."
-      },
-      "delay": {
-        "label": "Pausa",
-        "help": "Espera un tiempo fijo antes de pasar al siguiente paso."
-      },
-      "if": {
-        "label": "Si la salida contiene",
-        "help": "Comprueba todo lo que el servidor ha impreso hasta el momento y, a continuación, ejecuta una de las dos ramas."
-      },
-      "repeat": {
-        "label": "Repetir",
-        "help": "Reproduce los pasos que contiene un número determinado de veces."
-      }
-    },
-    "send": {
-      "text": "Comando o texto",
-      "textPlaceholder": "systemctl reiniciar nginx",
-      "pressEnter": "Presione Enter después de enviar",
-      "pressEnterHelp": "Desactive esta opción para escribir texto sin enviarlo."
-    },
-    "wait": {
-      "pattern": "Espere hasta que la salida contenga",
-      "patternPlaceholder": "contraseña:",
-      "timeout": "Rendirse después",
-      "onTimeout": "Si nunca aparece",
-      "stop": "Detén la macro",
-      "continue": "Sigue adelante de todos modos."
-    },
-    "delay": {
-      "duration": "Esperar"
-    },
-    "ifStep": {
-      "pattern": "Si la salida contiene",
-      "patternPlaceholder": "Activo: activo (corriendo)",
-      "then": "Entonces haz esto",
-      "else": "De lo contrario, haz esto",
-      "emptyBranch": "Sin escalones"
-    },
-    "repeat": {
-      "count": "Número de veces",
-      "times": "veces"
-    },
-    "match": {
-      "useRegex": "Coincidencia con una expresión regular",
-      "useRegexHelp": "Omita esta opción para que coincida exactamente con el texto escrito.",
-      "invalidRegex": "No es una expresión regular válida, se interpretará como texto plano."
-    },
-    "seconds": "segundos",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "Se requiere un servidor remoto. Conecte un servidor remoto en Configuración para usar este tipo de conexión."
-  },
-  "plugin": {
-    "name": "Terminal SSH"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/fi_FI.json b/plugins/ssh-terminal/locales/translated/fi_FI.json
deleted file mode 100644
index e073f1aa8..000000000
--- a/plugins/ssh-terminal/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Lisätä",
-    "arrowDown": "Nuoli alas",
-    "arrowLeft": "Nuoli vasemmalle",
-    "arrowRight": "Nuoli oikealle",
-    "arrowUp": "Nuoli ylös",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Poista",
-    "done": "Tehty",
-    "editQuickKeys": "Muokkaa pikanäppäimiä",
-    "end": "Loppu",
-    "esc": "Esc-näppäin",
-    "home": "Kotiin",
-    "pageDown": "PgDn",
-    "pageUp": "Sivu ylös",
-    "paste": "Liitä",
-    "quickKeyPlaceholder": "esim. sudo ",
-    "quickKeysDesc": "Poista napauttamalla ×. Tukee enintään 8 merkkiä.",
-    "quickKeysTitle": "Pikanäppäimet",
-    "removeQuickKey": "Poistaa",
-    "resetDefaults": "Palauta oletusasetukset",
-    "shift": "Siirtää",
-    "tab": "Välilehti"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Automaattisen Tmuxin käyttöönotto epäonnistui",
-    "autoTmuxEnabled": "Auto-Tmux käytössä kohteelle {{host}}. Se on voimassa seuraavasta yhteydestä alkaen.",
-    "clipboardHttpWarning": "Leikepöydän lukeminen epäonnistui. Jotkin selaimet rajoittavat leikepöydän käyttöä HTTPS-yhteyden ulkopuolella – kokeile Ctrl+V-näppäinyhdistelmää tai käytä Termixiä HTTPS-yhteyden kautta.",
-    "closeTab": "Lähellä",
-    "connecting": "Yhdistetään...",
-    "connectionLost": "Yhteys katkesi",
-    "connectionRejected": "Palvelin hylkäsi yhteyden. Tarkista todennus ja verkkoasetukset.",
-    "connectionTimeout": "Yhteyden aikakatkaisu",
-    "enableAutoTmuxAction": "Ota automaattinen Tmux käyttöön",
-    "hostKeyRejected": "SSH-isännän avaimen vahvistus hylättiin. Yhteys katkaistu.",
-    "linkDialogCopy": "Kopioida",
-    "linkDialogOpen": "Avata",
-    "linkDialogTitle": "Avaa linkki",
-    "maxReconnectAttemptsReached": "Yhteyden muodostamisen uudelleenyritysten enimmäismäärä saavutettu",
-    "noHostSelected": "Ei valittua isäntää",
-    "passwordPromptFillTitle": "Täytä tallennettu salasana tähän kehotteeseen?",
-    "reconnect": "Yhdistä uudelleen",
-    "reconnected": "Yhdistäminen uudelleen onnistui",
-    "reconnecting": "Yhdistetään uudelleen... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Yhteys katkennut, yhdistetään uudelleen...",
-    "searchCaseSensitive": "Ottelukotelo",
-    "searchClose": "Sulje (Esc)",
-    "searchNext": "Seuraava osuma (Enter)",
-    "searchNoResults": "Ei tuloksia",
-    "searchPlaceholder": "Löytää",
-    "searchPrevious": "Edellinen osuma (Vaihto+Enter)",
-    "searchRegex": "Käytä säännöllistä lauseketta",
-    "searchResultCount": "{{index}} / {{count}}",
-    "searchWholeWord": "Koko sanan täsmäys",
-    "sessionExpiredNotice": "Edellinen istuntosi kohdassa {{host}} päättyi {{minutes}} minuutin katkoksen jälkeen; komentotulkki ja kaikki siinä käynnissä oleva on poistettu. Ota automaattinen Tmux käyttöön tällä koneella pitääksesi istunnot toiminnassa.",
-    "sessionExpiredNoticeNoMinutes": "Edellinen istuntosi koneella {{host}} päättyi yhteyden katkettua; komentotulkki ja kaikki siinä käynnissä oleva on poissa. Ota automaattinen Tmux käyttöön tällä koneella pitääksesi istunnot toiminnassa.",
-    "sessionTakenOver": "Istunto avattiin toisella välilehdellä. Yhdistetään uudelleen...",
-    "tmuxAttached": "Liitetyt asiakkaat",
-    "tmuxAttachedCount": "{{count}} liitteenä",
-    "tmuxCopyHint": "Säädä valintaa ja kopioi leikepöydälle painamalla Enter",
-    "tmuxCreateNew": "Aloita uusi istunto",
-    "tmuxDetached": "Irrotettu tmux-istunnosta",
-    "tmuxLastActivity": "Viimeisin aktiviteetti",
-    "tmuxSessionAttached": "tmux-istunto liitetty: {{name}}",
-    "tmuxSessionCreated": "tmux-istunto luotu: {{name}}",
-    "tmuxSessionPickerDesc": "Tältä isännältä löytyi olemassa olevia tmux-istuntoja. Valitse yksi liittääksesi sen uudelleen tai luodaksesi uuden istunnon.",
-    "tmuxSessionPickerTitle": "tmux-istunnot",
-    "tmuxTimeDays": "{{count}}d sitten",
-    "tmuxTimeHours": "{{count}}tuntia sitten",
-    "tmuxTimeJustNow": "juuri nyt",
-    "tmuxTimeMinutes": "{{count}}minuuttia sitten",
-    "tmuxUnavailable": "tmuxia ei ole asennettu etäkoneeseen, vaan käytetään vakiokuorta.",
-    "tmuxWindowCount": "{{count}} ikkuna",
-    "tmuxWindows": "Ikkunat",
-    "unknownError": "Tuntematon virhe tapahtui",
-    "websocketAbnormalClose": "Yhteys katkesi odottamatta. Tämä voi johtua käänteisestä välityspalvelimesta tai SSL-määritysongelmasta. Tarkista palvelimen lokit.",
-    "websocketError": "WebSocket-yhteysvirhe",
-    "clipboardReadFailed": "Leikepöydän lukeminen epäonnistui. Varmista, että leikepöydän käyttöoikeudet on myönnetty.",
-    "clipboardWriteFailed": "Kopiointi leikepöydälle epäonnistui. Varmista, että sivua käytetään HTTPS:n tai paikallisen isännän kautta.",
-    "connected": "Yhdistetty",
-    "totpCodeLabel": "Vahvistuskoodi",
-    "duplicateTab": "Kopioi välilehti",
-    "imageChooseFile": "Valitse kuvatiedosto",
-    "imageUploaded": "Kuva ladattu: {{path}}",
-    "imageClipboardUnavailable": "Tämä selain ei voi lukea kuvia leikepöydältä",
-    "imageClipboardEmpty": "Leikepöydältä ei löytynyt kuvaa",
-    "localShell": "Paikallinen päätekuori",
-    "autocompleteHintComplete": "Vahvista painamalla Tab- tai Enter-näppäintä",
-    "autocompleteHintNavigate": "↑↓ navigoidaksesi",
-    "autocompleteHintClose": "Sulje Esc-näppäin"
-  },
-  "terminalToolbar": {
-    "detachTmux": "Irrota tmux",
-    "detachTmuxDescription": "Irrota tmux-istunto",
-    "dismissError": "Hylkää kuvavirhe",
-    "hideToolbar": "Piilota työkalupalkki",
-    "image": "Kuvatoiminnot (vain kuvat)",
-    "imageActionFailed": "Kuvatoiminto epäonnistui",
-    "layout": "Työkalurivin näyttötila",
-    "layoutExpanded": "Laajennettu mittareilla",
-    "layoutIcon": "Vain kuvake",
-    "layoutLabeled": "Kuvakkeet ja otsikot",
-    "moveToolbar": "Siirrä työkalupalkkia",
-    "moveToolbarHint": "Vedä työkalupalkin sijaintia",
-    "paste": "Liitä kuva",
-    "pasteImage": "Liitä kuva leikepöydältä (vain kuvat)",
-    "retry": "Yritä uudelleen",
-    "showToolbar": "Laajenna työkalupalkkia",
-    "upload": "Lataa kuva",
-    "uploadImage": "Lataa kuva isännöintipalveluun",
-    "uploadingImage": "Ladataan..."
-  },
-  "history": {
-    "noTerminalSelected": "Ei valittua päätettä",
-    "noTerminalSelectedHint": "Avaa SSH-päätevälilehti nähdäksesi sen komentohistorian",
-    "searchPlaceholder": "Hakuhistoria...",
-    "clearAll": "Tyhjennä kaikki",
-    "noHistoryEntries": "Ei historiamerkintöjä",
-    "trackingDisabled": "Historian seuranta on poistettu käytöstä",
-    "trackingDisabledHint": "Ota komentohistoria käyttöön tämän isännän SSH-pääte-välilehdellä.",
-    "commandCount_one": "{{count}} -komento",
-    "commandCount_other": "{{count}} -komennot"
-  },
-  "touchInput": {
-    "enabled": "Ota kosketussyöttö käyttöön",
-    "enabledDesc": "Salli yhden sormen kosketusvieritys päätteissä",
-    "momentumEnabled": "Ota vauhti käyttöön",
-    "momentumEnabledDesc": "Jatka vierittämistä lyhyesti pyyhkäisyn jälkeen",
-    "advanced": "Edistynyt",
-    "resetDefaults": "Palauta oletusasetukset",
-    "dragThreshold": "Vetokynnys",
-    "maxWheelDelta": "Suurin pyörän delta",
-    "momentumSampleWindow": "Momentumin näyteikkuna",
-    "releaseGracePeriod": "Vapautuksen lisäaika",
-    "minimumVelocity": "Miniminopeus",
-    "maximumVelocity": "Suurin nopeus",
-    "maximumDuration": "Enimmäiskesto",
-    "maximumTravel": "Maksimaalinen liikerata",
-    "decayTime": "Hajoamisaika",
-    "pixelsPerTick": "Pikseleitä rastia kohden",
-    "maximumFrameInterval": "Suurin kehysväli",
-    "maximumTicksPerFrame": "Maksimi tikit kehystä kohden"
-  },
-  "imageStorage": {
-    "instanceId": "Pääteistunnon instanssin tunnus",
-    "instanceIdDesc": "Yhdistetyn päätevälilehden instanssi-ID, jota käytetään näkyvyyden testaamiseen.",
-    "selectedModeUnavailable": "Ei saatavilla",
-    "test": "Testata",
-    "testing": "Testaus...",
-    "testFailed": "Kuvan tallennuksen testaus epäonnistui",
-    "testConnected": "Pääteistunto on yhdistetty.",
-    "testNotConnected": "Tällä instanssi-ID:llä ei ole yhdistettyä pääteistuntoa.",
-    "testSelectedMode": "Lataus käyttäisi: {{mode}}",
-    "testLocalVisible": "Paikallinen hakemisto on näkyvissä yhdistetyssä isännässä.",
-    "testLocalNotVisible": "Paikallinen hakemisto EI ole näkyvissä yhdistetyssä isännässä."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Kosketussyöttö",
-        "images": "Kuvien tallennus",
-        "sessions": "Istunnot",
-        "newHosts": "Uudet isännät"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Pääteistunnon pysyvyys",
-        "description": "Kuinka kauan irrotettua päätelaitetta pidetään toiminnassa palvelimella ennen sen sulkemista. Vähintään 1, enintään 1440 minuuttia. Jos istunnon on kestettävä tätä pidempään, ota automaattinen Tmux käyttöön isännässä."
-      },
-      "commandHistoryEnabled": {
-        "label": "Komentohistoria",
-        "description": "Salli komentohistorian tallennus. Kun tämä on poistettu käytöstä, historiaa ei tallenneta isäntäkohtaisista asetuksista riippumatta."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "Uusien isäntien komentohistoria",
-        "description": "Aloittavatko uudet isännät komentohistorian ollessa käytössä."
-      },
-      "imageStorageMode": {
-        "label": "Tallennustila",
-        "description": "Mihin liitetyt ja ladatut päätekuvat kirjoitetaan. Automaattiset valinnat yhteyden, paikallisen ja etäyhteyden (SFTP) mukaan on korjattu.",
-        "auto": "Auto",
-        "local": "Paikallinen",
-        "remoteSftp": "Etäkäyttö (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Paikallinen hakemisto",
-        "description": "Absoluuttinen polku Termix-taustajärjestelmässä, johon paikallinen tila kirjoittaa kuvat. Ei koskaan näytetä tallennuksen jälkeen. Tyhjänä käytetään TERMIX_IMAGE_DIR-hakemistoa."
-      },
-      "imageHostPath": {
-        "label": "Isäntäpolku",
-        "description": "Pääteagenttien vastaanottaman paikallisen hakemiston isäntäpuolen näkymä."
-      },
-      "imageTtlMs": {
-        "label": "TTL (ms)",
-        "description": "Kuinka kauan ladattua kuvaa säilytetään millisekunteina. Tyhjänä käytetään TERMIX_IMAGE_TTL_MS tai yksi tunti."
-      },
-      "imageMaxCount": {
-        "label": "Kuvien enimmäismäärä",
-        "description": "Useimmat kuvat tallennetaan kerralla. Tyhjinä käytetään TERMIX_MAX_IMAGE_COUNT tai 100."
-      },
-      "imageMaxBytes": {
-        "label": "Tallennustilan enimmäismäärä tavuja",
-        "description": "Suurin osa kuvista tallennetaan tavuittain kerralla. Tyhjä tallennustila käyttää TERMIX_MAX_IMAGE_STORAGE_BYTES-muistia tai 5 GiB."
-      },
-      "sessionPersistence": {
-        "label": "Säilytä istunnot katkaisun jälkeen",
-        "description": "Pidä irrotettu päätelaite toiminnassa palvelimella yllä mainitun ajan, jotta sen välilehden uudelleen avaaminen jatkaa siitä, mihin se jäi."
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "Aja uusien isäntien päätteitä tmuxin sisällä, jotta istunnot selviävät katkaisuista (tarvitsee tmuxin isännässä)"
-      },
-      "newHostTheme": {
-        "label": "Teema uusille isännille",
-        "description": "Pääteteema, jolla uusi isäntä aloittaa."
-      },
-      "newHostFontFamily": {
-        "label": "Fontti uusille isännille",
-        "description": "Uuden isännän aloittama päätefontti."
-      },
-      "newHostFontSize": {
-        "label": "Uusien isäntien fonttikoko",
-        "description": "Uuden isännän aloittama päätefonttikoko pikseleinä."
-      },
-      "newHostCursorStyle": {
-        "label": "Kohdistimen tyyli uusille isännille"
-      },
-      "newHostCursorBlink": {
-        "label": "Vilkkuva kursori uusille isännille"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Ota käyttöön päätetyökalurivi",
-        "description": "Näytä aktiiviseen terminaaliin kiinnitetty pikakäyttöinen työkalupalkki tämän isännän työkaluille ja reaaliaikaisille tilastoille"
-      },
-      "terminalToolbarPosition": {
-        "label": "Työkalurivin sijainti",
-        "description": "Missä työkalupalkki sijaitsee terminaalissa. Voit edelleen vetää sen sieltä pois.",
-        "bottom": "Alhaalla keskellä",
-        "bottomLeft": "Vasen alakulma",
-        "bottomRight": "Oikeassa alakulmassa",
-        "top": "Ylhäällä keskellä",
-        "topLeft": "Ylhäällä vasemmalla",
-        "topRight": "Oikeassa yläkulmassa"
-      },
-      "terminalToolbarStartState": {
-        "label": "Työkalurivin aloitustila",
-        "description": "Avautuuko työkalupalkki laajennettuna vai pienennettynä, kun päätelaite muodostaa yhteyden",
-        "expanded": "Laajennettu",
-        "collapsed": "Minimoitu"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Työkalurivin näyttötila",
-        "description": "Työkalurivin painikkeiden näyttötapa. Viimeksi käytetty säilyttää työkalurivillä tekemäsi valinnan.",
-        "remember": "Viimeksi käytetty",
-        "icon": "Vain kuvake",
-        "labeled": "Kuvakkeet ja otsikot",
-        "expanded": "Laajennettu tilastoilla"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Näytä reaaliaikaiset tilastot",
-        "description": "Näytä reaaliaikaiset isäntätilastot työkalupalkin painikkeiden yläpuolella laajennetussa tilassa"
-      },
-      "terminalToolbarFade": {
-        "label": "Häivytä, kun käytössä",
-        "description": "Häivytä työkalupalkki, kunnes viet hiiren osoittimen sen päälle"
-      },
-      "enableCommandHistory": {
-        "label": "Komentohistoria",
-        "description": "Tallenna tässä terminaalissa suoritettavat komennot historiaa ja automaattista täydennystä varten"
-      },
-      "enableTerminal": {
-        "label": "Ota terminaali käyttöön",
-        "description": "Tarjoa SSH-terminaalia tälle isännälle."
-      },
-      "inheritAppearance": {
-        "label": "Käytä käyttäjän oletusasetuksia"
-      },
-      "theme": {
-        "label": "Teema"
-      },
-      "cursorBlink": {
-        "label": "Vilkkuva kursori"
-      },
-      "cursorStyle": {
-        "label": "Kohdistimen tyyli"
-      },
-      "fontSize": {
-        "label": "Fonttikoko"
-      },
-      "fontFamily": {
-        "label": "Fontti"
-      },
-      "scrollback": {
-        "label": "Vieritä taaksepäin"
-      },
-      "letterSpacing": {
-        "label": "Kirjainväli"
-      },
-      "lineHeight": {
-        "label": "Viivan korkeus"
-      },
-      "bellStyle": {
-        "label": "Kello"
-      },
-      "minimumContrastRatio": {
-        "label": "Minimikontrastisuhde"
-      },
-      "backgroundImage": {
-        "label": "Taustakuva"
-      },
-      "backgroundImageOpacity": {
-        "label": "Taustakuvan läpinäkyvyys"
-      },
-      "customThemeColors": {
-        "label": "Mukautetut teeman värit"
-      },
-      "rightClickSelectsWord": {
-        "label": "Hiiren kakkospainikkeella valitaan sana"
-      },
-      "macOptionIsMeta": {
-        "label": "Vaihtoehto on Meta"
-      },
-      "fastScrollModifier": {
-        "label": "Pikavieritysnäppäin"
-      },
-      "fastScrollSensitivity": {
-        "label": "Nopea vieritysnopeus"
-      },
-      "backspaceMode": {
-        "label": "Askelpalautin"
-      },
-      "autoMosh": {
-        "label": "Auto mosh"
-      },
-      "moshCommand": {
-        "label": "Mosh-komento"
-      },
-      "autoTmux": {
-        "label": "Automaattinen tmux"
-      },
-      "useSSHTitle": {
-        "label": "Käytä SSH-otsikkoa"
-      },
-      "syntaxHighlighting": {
-        "label": "Syntaksikorostus"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Syntaksikorostusluokat"
-      },
-      "linkClickBehavior": {
-        "label": "Linkin klikkaus"
-      },
-      "localEcho": {
-        "label": "Paikallinen kaiku"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Tarjoudu täyttämään salasanakehotteet"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Täytä sudo-kehotteet"
-      },
-      "autoReconnect": {
-        "label": "Yhdistä uudelleen automaattisesti"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Komennon automaattinen täydennys",
-        "description": "Näytä automaattinen täydennys kirjoitettaessa, jos painat sarkainnäppäintä"
-      },
-      "localEcho": {
-        "label": "Paikallinen kaiku",
-        "description": "Vähennä havaittua syöttöviivettä käyttämällä turvallista paikallista näppäinpainalluksen ennustusta"
-      },
-      "linkClickBehavior": {
-        "label": "Päätelinkin napsautus",
-        "description": "Oletuskäyttäytyminen linkkejä napsautettaessa terminaalissa"
-      },
-      "customThemes": {
-        "label": "Tallennetut teemat"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Paikallinen terminaali"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Käytä reaaliaikaisia pääteistuntoja",
-      "description": "Sallii muiden ominaisuuksien, kuten istuntojen jakamisen ja tallennuksen, pääsyn reaaliaikaisiin pääteistuntoihin."
-    },
-    "history": {
-      "title": "Lue komentohistoria",
-      "description": "Antaa muiden ominaisuuksien, kuten tekoälyavustaja, lukea komentohistoriaasi."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Terminaali",
-    "addHost": "Lisää isäntä",
-    "applyGlobalThemeTooltip": "Käytä tätä teemaa",
-    "backgroundImageDesc": "Valinnainen URL-osoite päätelaitteen taustakuvalle",
-    "backgroundImageLabel": "Taustakuvan URL-osoite",
-    "backgroundImageOpacityLabel": "Taustakuvan läpinäkyvyys",
-    "backspaceMode": "Askelpalautintila",
-    "backspaceModeControlH": "Kontrolli-H (BS)",
-    "backspaceModeLabel": "Askelpalautintila",
-    "backspaceModeNormal": "Normaali (DEL)",
-    "behaviorAndAdvanced": "Käyttäytyminen ja edistyneet",
-    "bellStyle": "Kellotyyli",
-    "bellStyleBoth": "Molemmat",
-    "bellStyleLabel": "Kellotyyli",
-    "bellStyleNone": "Ei mitään",
-    "bellStyleSound": "Ääni",
-    "bellStyleVisual": "Visuaalinen",
-    "colorTheme": "Väriteema",
-    "cursorBlink": "Kohdistimen vilkkuminen",
-    "cursorBlinking": "Kohdistimen vilkkuminen",
-    "cursorBlinkingDesc": "Ota käyttöön päätekohdistimen vilkkuva animaatio",
-    "cursorStyle": "Kohdistimen tyyli",
-    "cursorStyleBar": "Baari",
-    "cursorStyleBlock": "Lohko",
-    "cursorStyleLabel": "Kohdistimen tyyli",
-    "cursorStyleUnderline": "Korostaa",
-    "customThemeAnsiColors": "ANSI-värit",
-    "customThemeBackground": "Tausta",
-    "customThemeBlack": "Musta",
-    "customThemeBlue": "Sininen",
-    "customThemeBrightBlack": "Kirkkaan musta",
-    "customThemeBrightBlue": "Kirkkaan sininen",
-    "customThemeBrightCyan": "Kirkkaan syaani",
-    "customThemeBrightGreen": "Kirkkaanvihreä",
-    "customThemeBrightMagenta": "Kirkkaan magenta",
-    "customThemeBrightRed": "Kirkkaanpunainen",
-    "customThemeBrightWhite": "Kirkkaan valkoinen",
-    "customThemeBrightYellow": "Kirkkaan keltainen",
-    "customThemeColors": "Mukautetut värit",
-    "customThemeCursor": "Kohdistin",
-    "customThemeCursorAccent": "Kohdistimen aksentti",
-    "customThemeCyan": "Syaani",
-    "customThemeForeground": "Etuala",
-    "customThemeGreen": "Vihreä",
-    "customThemeMagenta": "Purppura",
-    "customThemeRed": "Punainen",
-    "customThemeResetTooltip": "Palauta oletusasetukset",
-    "customThemeSelection": "Valinta",
-    "customThemeWhite": "Valkoinen",
-    "customThemeYellow": "Keltainen",
-    "deleteGlobalThemeTooltip": "Poista tämä teema",
-    "docsLink": "Näytä dokumentit",
-    "enableAutoMosh": "Ota automaattinen mosh käyttöön",
-    "enableAutoMoshDesc": "Suosi Moshia SSH:n sijaan, jos saatavilla",
-    "enableAutoTmux": "Ota automaattinen Tmux käyttöön",
-    "enableAutoTmuxDesc": "Pidä komentotulkkisi ja kaikki siinä käynnissä olevat toiminnot toiminnassa yhteyskatkosten ja selaimen uudelleenkäynnistysten aikana suorittamalla se tmuxin sisällä (tmuxin on oltava asennettuna isäntäkoneelle)",
-    "fastScrollModifier": "Nopea vieritysmuokkain",
-    "fastScrollModifierAlt": "Vaihtoehto",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Nopea vieritysmuokkain",
-    "fastScrollModifierShift": "Siirtää",
-    "fastScrollSensitivity": "Nopea vieritysherkkyys",
-    "fastScrollSensitivityLabel": "Nopea vieritysherkkyys",
-    "fontFamily": "Fonttiperhe",
-    "fontFamilyCustomHint": "Valitse pakettifontti tai valitse Mukautettu ja kirjoita järjestelmääsi jo asennetun fontin tarkka nimi (esim. MesloLGS NF, Noto Sans Mono). Termix ei voi asentaa fontteja puolestasi, asenna se ensin käyttöjärjestelmääsi.",
-    "fontFamilyCustomOption": "Mukautettu...",
-    "fontFamilyCustomPlaceholder": "Tarkka fontin nimi, esim. MesloLGS NF",
-    "fontFamilyLabel": "Fonttiperhe",
-    "fontSize": "Fonttikoko",
-    "fontSizeLabel": "Fonttikoko",
-    "hostNotFound": "Isäntää ei löydy",
-    "letterSpacing": "Kirjainväli",
-    "letterSpacingPx": "Kirjainväli (px)",
-    "lineHeight": "Viivan korkeus",
-    "lineHeightLabel": "Viivan korkeus",
-    "linkClickBehaviorConfirm": "Näytä ponnahdusikkuna avaamista tai kopioimista varten",
-    "linkClickBehaviorDesc": "Määrittää, mitä tapahtuu, kun napsautat linkkiä terminaalissa. Käytä 'Oletus'-asetusta noudattaaksesi sovellustason asetuksia.",
-    "linkClickBehaviorDirect": "Avaa suoraan",
-    "linkClickBehaviorLabel": "Linkin klikkauskäyttäytyminen",
-    "loadingHost": "Ladataan isäntää...",
-    "localEchoAuto": "Automaattinen",
-    "localEchoDesc": "Ennusta turvalliset tulostettavat näppäinpainallukset paikallisesti hitailla yhteyksillä. Salasanakehotteita ja ohjaussyötettä ei koskaan toisteta.",
-    "localEchoLabel": "Paikallinen kaiku",
-    "localEchoOff": "Pois",
-    "localEchoOn": "Aina päällä",
-    "macOptionIsMetaLabel": "Option Key lähettää metatiedot",
-    "macOptionIsMetaShortDesc": "Poista käytöstä erikoismerkkien (kuten @ tai |) kirjoittaminen Option/Alt-näppäimellä macOS:ssä Meta-viestin lähettämisen sijaan",
-    "moshCommand": "MOSH-komento",
-    "moshCommandLabel": "Moshin komento",
-    "noSavedThemes": "Ei vielä tallennettuja teemoja",
-    "none": "Ei mitään",
-    "passwordPromptAutoFillDesc": "Tarjoudu täyttämään tallennetun salasanan, kun pääte kysyy sitä. Poista käytöstä, jos et halua koskaan täyttää salasanaa automaattisesti tällä isännöintikoneella.",
-    "passwordPromptAutoFillLabel": "Tarjouksen salasanan automaattinen täyttö",
-    "autoReconnectLabel": "Automaattinen uudelleenyhdistämistoiminto",
-    "autoReconnectDesc": "Yhdistää uudelleen itsestään, kun SSH-yhteys katkeaa, esimerkiksi verkkokatkoksen tai nukkumistilan jälkeen. Säilyttää taaksepäin vierityksen.",
-    "rightClickSelectsWord": "Hiiren kakkospainikkeen napsautus valitsee sanan",
-    "rightClickSelectsWordLabel": "Napsauta hiiren kakkospainikkeella ja valitsee sanan",
-    "rightClickSelectsWordShortDesc": "Valitse kohdistimen alla oleva sana hiiren kakkospainikkeella",
-    "saveAsGlobalTheme": "Tallenna globaalina teemana",
-    "saveGlobalThemeError": "Teeman tallentaminen epäonnistui",
-    "saveGlobalThemeNamePrompt": "Anna teemalle nimi",
-    "saveGlobalThemeSuccess": "Teema tallennettu",
-    "savedThemesLabel": "Tallennetut teemat",
-    "scrollbackBufferLabel": "Vieroituspuskuri",
-    "scrollbackMaxLines": "Historiassa säilytettävien rivien enimmäismäärä",
-    "sudoPasswordAutoFill": "Sudo-salasanan automaattinen täyttö",
-    "sudoPasswordAutoFillDesc": "Tallenna sudo-salasana, jotta isäntämittarit, päätekehotteet ja muut voivat suorittaa etuoikeutettuja komentoja automaattisesti.",
-    "sudoPasswordAutoFillLabel": "Sudo-salasanan automaattinen täyttö",
-    "syntaxCategoryIpAddresses": "IP-osoitteet",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Lokitasot",
-    "syntaxCategoryLogLevelsDesc": "virhe, varoitus, tiedot, debug, kohtalokas",
-    "syntaxCategoryNumbers": "Merkityt numerot",
-    "syntaxCategoryNumbersDesc": "portti 8080, uloskäynti 1, tila 404",
-    "syntaxCategoryPaths": "Tiedostopolut",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/tiedosto.txt",
-    "syntaxCategoryTimestamps": "Aikaleimat",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 15.1.2024",
-    "syntaxCategoryUrls": "URL-osoitteet",
-    "syntaxCategoryUrlsDesc": "https://esimerkki.com",
-    "syntaxHighlightingDesc": "Väritä päätelaitteen tuloste (virheet, polut, IP-osoitteet, aikaleimat)",
-    "syntaxHighlightingLabel": "Syntaksin korostus",
-    "terminalAppearance": "Päätelaitteen ulkonäkö",
-    "theme": "Teema",
-    "themePreview": "Teeman esikatselu",
-    "useSSHTitleDesc": "Päivitä välilehden otsikko komentotulkin ikkunan otsikosta isäntänimen sijaan",
-    "useSSHTitleLabel": "Käytä SSH-ikkunan otsikkoa",
-    "enableTunnel": "Ota tunneli käyttöön",
-    "enableFileManager": "Ota tiedostonhallinta käyttöön",
-    "enableDocker": "Ota Docker käyttöön",
-    "startupSnippet": "Käynnistyskoodinpätkä",
-    "quickActions": "Pikatoiminnot",
-    "proxmoxLastSyncStatus": {
-      "success": "Menestys"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} ohitettu (IP-osoitetta ei löytynyt)",
-    "proxmoxStatsUrlCopied": "Proxmox-tilastojen URL-osoite kopioitu leikepöydälle",
-    "rdpUrlCopied": "RDP-URL-osoite kopioitu",
-    "vncUrlCopied": "VNC-URL-osoite kopioitu",
-    "filterAuthStepca": "Vaihe CA",
-    "guac": {
-      "noCredential": "Ei tunnistetietoja (suorat tunnistetiedot alla)",
-      "authTypeDirect": "Suoraan",
-      "authTypeCredential": "Valtakirja",
-      "authTypeNone": "Ei mitään",
-      "recordingPath": "Tallennuspolku",
-      "recordingName": "Tallenteen nimi",
-      "saveHostFirst": "Tallenna ensin isäntä.",
-      "sharingOptionsAfterSave": "Jakamisvaihtoehdot ovat käytettävissä isännän tallentamisen jälkeen.",
-      "permissionLevel": "Käyttöoikeustaso",
-      "typeHeader": "Tyyppi",
-      "targetHeader": "Kohde",
-      "permissionHeader": "Lupa",
-      "cancelBtn": "Peruuttaa",
-      "savingBtn": "Tallennetaan...",
-      "updateHostBtn": "Päivitä isäntä",
-      "addHostBtn": "Lisää isäntä"
-    },
-    "filterAuthVault": "Holvi"
-  },
-  "nav": {
-    "history": "Historia",
-    "localTerminal": "Paikallinen terminaali",
-    "sshTools": "SSH-työkalut",
-    "terminal": "Terminaali",
-    "macros": "Makrot"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Kirjoita tähän lähettääksesi näppäinpainalluksia...",
-    "copyOnSelect": "Kopioi valittu teksti automaattisesti",
-    "enableRightClickCopyPaste": "Ota käyttöön hiiren kakkospainikkeella kopiointi/liitäminen",
-    "fillPassword": "Täytä salasana",
-    "fillPasswordMissing": "Ei tallennettua salasanaa {{count}} valitulle päätteelle/päätteille",
-    "fillPasswordSuccess": "Salasana syötetty {{count}} terminaaliin/terminaaleihin",
-    "keyRecordingTitle": "Näppäinten tallennus",
-    "noTerminalTabsOpen": "Ei auki olevia päätevälilehtiä",
-    "recordToTerminals": "Tallenna terminaaleihin",
-    "selectAll": "Kaikki",
-    "selectNone": "Ei mitään",
-    "selectTerminalsAbove": "Valitse päätteet yllä",
-    "settingsTitle": "Asetukset",
-    "startRecording": "Aloita tallennus",
-    "stopRecording": "Lopeta tallennus"
-  },
-  "keybindings": {
-    "copy": "Kopioi valinta",
-    "paste": "Liitä",
-    "sendControlCode": "Lähetä Ctrl+kirjain-signaali",
-    "sendText": "Lähetä tekstiviesti",
-    "controlCodeLabel": "Kirje",
-    "textLabel": "Lähetettävä tekstiviesti",
-    "appendEnterLabel": "Paina Enter lähetyksen jälkeen",
-    "clipboardPermissionNote": "Saattaa pyytää leikepöydän käyttöoikeutta ensimmäisellä käyttökerralla joissakin selaimissa.",
-    "textRequired": "Kirjoita lähetettävä teksti",
-    "controlCodeRequired": "Syötä yksi kirjain ohjauskoodille",
-    "builtIn": {
-      "copyCtrlC": "Kopioi valinta (Ctrl+C, vain kun tekstiä on valittuna)",
-      "copyCtrlShiftC": "Kopioi valinta (Ctrl+Shift+C)",
-      "copyCmdC": "Kopioi valinta (Cmd+C)",
-      "pasteCtrlShiftV": "Liitä leikepöydältä (Ctrl+Shift+V)",
-      "ctrlW": "Lähetä Ctrl+W komentotulkkiin (estetty sulkemasta selainvälilehteä)",
-      "ctrlT": "Lähetä Ctrl+T komentotulkille (estetty avaamasta selainvälilehteä)",
-      "ctrlN": "Lähetä Ctrl+N komentotulkille (estetty avaamasta selainikkunaa)",
-      "ctrlQ": "Lähetä Ctrl+Q komentotulkille (estetty sulkemasta selainta)"
-    }
-  },
-  "macros": {
-    "title": "Makrot",
-    "description": "Suorita tallennettu komentosarja terminaalissa ja reagoi palvelimen lähettämiin komentoihin.",
-    "target": "Kohde",
-    "noTerminal": "Ei auki olevaa terminaalia",
-    "empty": "Ei vielä makroja",
-    "emptyHint": "Luo makro automatisoidaksesi päätetyönkulun, kuten sisäänkirjautumisen, palvelun uudelleenkäynnistyksen tai kehotteisiin vastaamisen.",
-    "create": "Uusi makro",
-    "back": "Takaisin makroihin",
-    "name": "Nimi",
-    "namePlaceholder": "Käynnistä web-palvelin uudelleen",
-    "nameRequired": "Anna makrolle nimi ennen tallentamista",
-    "descriptionLabel": "Kuvaus",
-    "descriptionPlaceholder": "Mitä tämä makro tekee (valinnainen)",
-    "unsaved": "Tallentamattomat muutokset",
-    "save": "Tallentaa",
-    "saved": "Makro tallennettu",
-    "saveFailed": "Makroa ei voitu tallentaa",
-    "delete": "Poistaa",
-    "deleteTitle": "Poistetaanko tämä makro?",
-    "deleteBody": "\"{{name}}\" poistetaan pysyvästi. Tätä ei voi perua.",
-    "deleted": "Makro poistettu",
-    "cancel": "Peruuttaa",
-    "run": "Juokse",
-    "stop": "Stop",
-    "running": "Juoksemassa...",
-    "completed": "Makro valmis",
-    "failed": "Makro epäonnistui",
-    "loadFailed": "Makrojen lataaminen epäonnistui",
-    "needTerminal": "Avaa ja kytke ensin päätelaite",
-    "noSteps": "Tällä makrolla ei ole vielä vaiheita. Lisää yksi alle.",
-    "addStep": "Lisää vaihe",
-    "stepNumber": "Vaihe {{number}}",
-    "removeStep": "Poista vaihe",
-    "confirmRunTitle": "Suoritetaanko tämä makro?",
-    "confirmRunBody": "\"{{name}}\" lähettää komentoja {{host}}:een.",
-    "confirmRunAction": "Suorita makro",
-    "stepTypes": {
-      "send": {
-        "label": "Lähetä komento",
-        "help": "Kirjoittaa tekstiä terminaaliin aivan kuin olisit kirjoittanut sen."
-      },
-      "wait": {
-        "label": "Odota tulostetta",
-        "help": "Pysähtyy, kunnes palvelin tulostaa nimeämäsi tekstin, kuten salasanakehotteen."
-      },
-      "delay": {
-        "label": "Tauko",
-        "help": "Odottaa tietyn ajan ennen seuraavaa vaihetta."
-      },
-      "if": {
-        "label": "Jos tuloste sisältää",
-        "help": "Tarkistaa kaiken, mitä palvelin on tähän mennessä tulostanut, ja suorittaa sitten toisen kahdesta haarasta."
-      },
-      "repeat": {
-        "label": "Toistaa",
-        "help": "Suorittaa sen sisällä olevat vaiheet tietyn määrän kertoja."
-      }
-    },
-    "send": {
-      "text": "Komento tai teksti",
-      "textPlaceholder": "systemctl käynnistä nginx uudelleen",
-      "pressEnter": "Paina Enter lähetyksen jälkeen",
-      "pressEnterHelp": "Poista tämä käytöstä kirjoittaaksesi tekstiä lähettämättä sitä."
-    },
-    "wait": {
-      "pattern": "Odota, kunnes tuloste sisältää",
-      "patternPlaceholder": "salasana:",
-      "timeout": "Luovuta jälkeenpäin",
-      "onTimeout": "Jos se ei koskaan ilmesty",
-      "stop": "Pysäytä makro",
-      "continue": "Jatka joka tapauksessa"
-    },
-    "delay": {
-      "duration": "Odota"
-    },
-    "ifStep": {
-      "pattern": "Jos tuloste sisältää",
-      "patternPlaceholder": "Aktiivinen: aktiivinen (käynnissä)",
-      "then": "Tee sitten tämä",
-      "else": "Muuten tee näin",
-      "emptyBranch": "Ei portaita"
-    },
-    "repeat": {
-      "count": "Kuinka monta kertaa",
-      "times": "kertaa"
-    },
-    "match": {
-      "useRegex": "Säännöllisen lausekkeen mukainen osuma",
-      "useRegexHelp": "Jätä tämä pois, jotta teksti vastaa täysin kirjoitettua tekstiä.",
-      "invalidRegex": "Ei kelvollinen säännöllinen lauseke, se tulkitaan pelkkänä tekstinä"
-    },
-    "seconds": "sekuntia",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "Etäpalvelin vaaditaan. Yhdistä etäpalvelin asetuksissa käyttääksesi tätä yhteystyyppiä."
-  },
-  "plugin": {
-    "name": "SSH-terminaali"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/fr_FR.json b/plugins/ssh-terminal/locales/translated/fr_FR.json
deleted file mode 100644
index 229635ed4..000000000
--- a/plugins/ssh-terminal/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Ajouter",
-    "arrowDown": "Flèche bas",
-    "arrowLeft": "Flèche gauche",
-    "arrowRight": "Flèche droite",
-    "arrowUp": "Flèche haut",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Suppr",
-    "done": "Terminé",
-    "editQuickKeys": "Modifier les touches rapides",
-    "end": "Fin",
-    "esc": "Échap",
-    "home": "Début",
-    "pageDown": "PgDn",
-    "pageUp": "PgUp",
-    "paste": "Coller",
-    "quickKeyPlaceholder": "ex. sudo ",
-    "quickKeysDesc": "Appuyez sur × pour supprimer. Prend en charge jusqu’à 8 caractères.",
-    "quickKeysTitle": "Touches rapides",
-    "removeQuickKey": "Supprimer",
-    "resetDefaults": "Rétablir les paramètres par défaut",
-    "shift": "Maj",
-    "tab": "Tab"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Échec de l'activation d'Auto-Tmux",
-    "autoTmuxEnabled": "Auto-Tmux activé pour {{host}}. Cela s'appliquera à partir de la prochaine connexion.",
-    "clipboardHttpWarning": "Impossible de lire le contenu du presse-papiers. Certains navigateurs restreignent l'accès au presse-papiers en dehors du protocole HTTPS ; essayez plutôt Ctrl+V ou utilisez Termix via HTTPS.",
-    "closeTab": "Fermer",
-    "connecting": "Connexion en cours...",
-    "connectionLost": "Connexion perdue",
-    "connectionRejected": "Connexion rejetée par le serveur. Veuillez vérifier votre authentification et votre configuration réseau.",
-    "connectionTimeout": "Délai de connexion dépassé",
-    "enableAutoTmuxAction": "Activer Auto-Tmux",
-    "hostKeyRejected": "Vérification de la clé de l'hôte SSH rejetée. Connexion annulée.",
-    "linkDialogCopy": "Copier",
-    "linkDialogOpen": "Ouvrir",
-    "linkDialogTitle": "Ouvrir le lien",
-    "maxReconnectAttemptsReached": "Nombre maximal de tentatives de reconnexion atteint",
-    "noHostSelected": "Aucun hôte sélectionné",
-    "passwordPromptFillTitle": "Remplir ce champ avec le mot de passe enregistré ?",
-    "reconnect": "Reconnecter",
-    "reconnected": "Reconnexion réussie",
-    "reconnecting": "Reconnexion... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Connexion perdue, reconnexion en cours...",
-    "searchCaseSensitive": "Boîte d'allumettes",
-    "searchClose": "Fermer (Échap)",
-    "searchNext": "Prochain match (Entrée)",
-    "searchNoResults": "Aucun résultat",
-    "searchPlaceholder": "Trouver",
-    "searchPrevious": "Match précédent (Maj+Entrée)",
-    "searchRegex": "Utilisez une expression régulière",
-    "searchResultCount": "{{index}} de {{count}}",
-    "searchWholeWord": "Associer le mot entier",
-    "sessionExpiredNotice": "Votre session précédente sur {{host}} a expiré après {{minutes}} minutes de déconnexion ; le shell et tous les processus en cours d'exécution ont été supprimés. Activez Auto-Tmux sur cet hôte pour maintenir les sessions actives.",
-    "sessionExpiredNoticeNoMinutes": "Votre session précédente sur {{host}} a expiré pendant la déconnexion ; le shell et tous les processus en cours d'exécution ont été supprimés. Activez Auto-Tmux sur cet hôte pour maintenir les sessions actives.",
-    "sessionTakenOver": "La session a été ouverte dans un autre onglet. Reconnexion en cours...",
-    "tmuxAttached": "Clients attachés",
-    "tmuxAttachedCount": "{{count}} attaché(s)",
-    "tmuxCopyHint": "Ajustez la sélection et appuyez sur Entrée pour copier dans le presse-papiers",
-    "tmuxCreateNew": "Créer une nouvelle session",
-    "tmuxDetached": "Détaché de la session tmux",
-    "tmuxLastActivity": "Dernière activité",
-    "tmuxSessionAttached": "Session tmux attachée : {{name}}",
-    "tmuxSessionCreated": "Session tmux créée : {{name}}",
-    "tmuxSessionPickerDesc": "Des sessions tmux existantes ont été trouvées sur cet hôte. Sélectionnez-en une pour vous y rattacher ou créez une nouvelle session.",
-    "tmuxSessionPickerTitle": "Sessions tmux",
-    "tmuxTimeDays": "il y a {{count}} j",
-    "tmuxTimeHours": "il y a {{count}} h",
-    "tmuxTimeJustNow": "à l'instant",
-    "tmuxTimeMinutes": "il y a {{count}} min",
-    "tmuxUnavailable": "tmux n'est pas installé sur l'hôte distant, retour au shell standard",
-    "tmuxWindowCount": "{{count}} fenêtre(s)",
-    "tmuxWindows": "Fenêtres",
-    "unknownError": "Une erreur inconnue s'est produite",
-    "websocketAbnormalClose": "Connexion fermée de manière inattendue. Cela peut être dû à un problème de proxy inverse ou de configuration SSL. Veuillez vérifier les journaux du serveur.",
-    "websocketError": "Erreur de connexion WebSocket",
-    "clipboardReadFailed": "Échec de la lecture du presse-papiers. Assurez-vous que les autorisations du presse-papiers sont accordées.",
-    "clipboardWriteFailed": "Échec de la copie dans le presse-papiers. Assurez-vous que la page est servie en HTTPS ou localhost.",
-    "connected": "Connecté",
-    "totpCodeLabel": "Code de vérification",
-    "duplicateTab": "Onglet dupliqué",
-    "imageChooseFile": "Choisissez un fichier image",
-    "imageUploaded": "Image téléchargée : {{path}}",
-    "imageClipboardUnavailable": "Ce navigateur ne peut pas lire les images du presse-papiers.",
-    "imageClipboardEmpty": "Aucune image trouvée dans le presse-papiers",
-    "localShell": "Terminal local",
-    "autocompleteHintComplete": "Tab ou Entrée pour terminer",
-    "autocompleteHintNavigate": "↑↓ pour naviguer",
-    "autocompleteHintClose": "Échap pour fermer"
-  },
-  "terminalToolbar": {
-    "detachTmux": "Détacher tmux",
-    "detachTmuxDescription": "Détacher la session tmux",
-    "dismissError": "Erreur d'image",
-    "hideToolbar": "Masquer la barre d'outils",
-    "image": "Actions sur les images (images uniquement)",
-    "imageActionFailed": "L'action sur l'image a échoué",
-    "layout": "mode d'affichage de la barre d'outils",
-    "layoutExpanded": "Développé avec des indicateurs",
-    "layoutIcon": "Icône uniquement",
-    "layoutLabeled": "Icônes et étiquettes",
-    "moveToolbar": "Déplacer la barre d'outils",
-    "moveToolbarHint": "Faites glisser pour repositionner la barre d'outils",
-    "paste": "Coller l'image",
-    "pasteImage": "Coller une image depuis le presse-papiers (images uniquement)",
-    "retry": "Réessayer",
-    "showToolbar": "Développer la barre d'outils",
-    "upload": "Télécharger une image",
-    "uploadImage": "Téléversez une image sur l'hôte",
-    "uploadingImage": "Téléversement..."
-  },
-  "history": {
-    "noTerminalSelected": "Aucun terminal sélectionné",
-    "noTerminalSelectedHint": "Ouvrez un onglet de terminal SSH pour voir son historique de commandes",
-    "searchPlaceholder": "Rechercher dans l'historique...",
-    "clearAll": "Tout effacer",
-    "noHistoryEntries": "Aucune entrée d'historique",
-    "trackingDisabled": "Le suivi de l'historique est désactivé",
-    "trackingDisabledHint": "Activez l'historique des commandes dans l'onglet Terminal SSH de cet hôte.",
-    "commandCount_one": "{{count}} commande",
-    "commandCount_other": "{{count}} commandes"
-  },
-  "touchInput": {
-    "enabled": "Activer l'entrée tactile",
-    "enabledDesc": "Autoriser le défilement tactile à un doigt dans les terminaux",
-    "momentumEnabled": "Activer l'élan",
-    "momentumEnabledDesc": "Continuez à faire défiler brièvement après un glissement.",
-    "advanced": "Avancé",
-    "resetDefaults": "Rétablir les paramètres par défaut",
-    "dragThreshold": "Seuil de glissement",
-    "maxWheelDelta": "Delta de roue maximal",
-    "momentumSampleWindow": "fenêtre d'échantillonnage de l'impulsion",
-    "releaseGracePeriod": "période de grâce pour la libération",
-    "minimumVelocity": "Vitesse minimale",
-    "maximumVelocity": "Vitesse maximale",
-    "maximumDuration": "Durée maximale",
-    "maximumTravel": "Voyage maximal",
-    "decayTime": "Temps de dégradation",
-    "pixelsPerTick": "Pixels par tick",
-    "maximumFrameInterval": "Intervalle d'images maximal",
-    "maximumTicksPerFrame": "Nombre maximal de ticks par image"
-  },
-  "imageStorage": {
-    "instanceId": "ID d'instance de session du terminal",
-    "instanceIdDesc": "ID d'instance de l'un de vos onglets de terminal connectés, utilisé pour tester la visibilité.",
-    "selectedModeUnavailable": "Indisponible",
-    "test": "Tester",
-    "testing": "Essai...",
-    "testFailed": "Échec du test du stockage d'images",
-    "testConnected": "La session terminal est connectée.",
-    "testNotConnected": "Aucune session de terminal connectée avec cet ID d'instance.",
-    "testSelectedMode": "Un téléchargement utiliserait : {{mode}}",
-    "testLocalVisible": "Le répertoire local est visible depuis l'hôte connecté.",
-    "testLocalNotVisible": "Le répertoire local n'est PAS visible depuis l'hôte connecté."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Entrée tactile",
-        "images": "Stockage d'images",
-        "sessions": "Sessions",
-        "newHosts": "Nouveaux hôtes"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Persistance de session terminale",
-        "description": "Durée pendant laquelle un terminal déconnecté reste actif sur le serveur avant d'être fermé. Minimum : 1 minute, maximum : 1 440 minutes. Pour les sessions qui doivent durer plus longtemps, activez Auto-Tmux sur l'hôte."
-      },
-      "commandHistoryEnabled": {
-        "label": "Historique des commandes",
-        "description": "Autoriser l'enregistrement de l'historique des commandes. Lorsque désactivé, l'historique n'est pas sauvegardé, indépendamment des paramètres par hôte."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "Historique des commandes pour les nouveaux hôtes",
-        "description": "Indique si les nouveaux hôtes doivent démarrer avec l'historique des commandes activé."
-      },
-      "imageStorageMode": {
-        "label": "Mode de stockage",
-        "description": "Emplacement où sont écrites les images du terminal collées et téléchargées. La sélection automatique par connexion (locale et distante [SFTP]) est fixe.",
-        "auto": "Auto",
-        "local": "Locale",
-        "remoteSftp": "Accès distant (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Répertoire local",
-        "description": "Chemin absolu sur le serveur Termix où le mode local enregistre les images. Jamais affiché après l'enregistrement. Un répertoire vide utilise TERMIX_IMAGE_DIR."
-      },
-      "imageHostPath": {
-        "label": "Chemin hôte",
-        "description": "Vue côté hôte du répertoire local reçu par les agents terminaux."
-      },
-      "imageTtlMs": {
-        "label": "TTL (ms)",
-        "description": "Durée de conservation d'une image téléchargée, en millisecondes. La valeur par défaut est TERMIX_IMAGE_TTL_MS, soit une heure."
-      },
-      "imageMaxCount": {
-        "label": "Nombre maximal d'images",
-        "description": "La plupart des images sont conservées simultanément. Un champ vide utilise TERMIX_MAX_IMAGE_COUNT ou 100."
-      },
-      "imageMaxBytes": {
-        "label": "Capacité de stockage maximale",
-        "description": "La plupart des octets d'images sont stockés simultanément. Un espace vide utilise TERMIX_MAX_IMAGE_STORAGE_BYTES ou 5 Gio."
-      },
-      "sessionPersistence": {
-        "label": "Conserver les sessions après la déconnexion",
-        "description": "Maintenez un terminal déconnecté actif sur le serveur pendant la durée indiquée ci-dessus, afin que la réouverture de son onglet reprenne là où elle s'était arrêtée."
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "Exécutez les terminaux des nouveaux hôtes à l'intérieur de tmux afin que les sessions persistent après les déconnexions (nécessite tmux sur l'hôte)."
-      },
-      "newHostTheme": {
-        "label": "Thème pour les nouveaux hôtes",
-        "description": "Le thème du terminal avec lequel un nouvel hôte démarre."
-      },
-      "newHostFontFamily": {
-        "label": "Police de caractères pour les nouveaux hôtes",
-        "description": "La police de caractères du terminal avec laquelle un nouvel hôte démarre."
-      },
-      "newHostFontSize": {
-        "label": "Taille de police pour les nouveaux hôtes",
-        "description": "La taille de la police du terminal par défaut d'un nouvel hôte, en pixels."
-      },
-      "newHostCursorStyle": {
-        "label": "Style de curseur pour les nouveaux hôtes"
-      },
-      "newHostCursorBlink": {
-        "label": "Curseur clignotant pour les nouveaux hôtes"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Activer la barre d'outils du terminal",
-        "description": "Afficher une barre d'outils d'accès rapide ancrée au terminal actif pour les outils et les statistiques en direct de cet hôte."
-      },
-      "terminalToolbarPosition": {
-        "label": "Position de la barre d'outils",
-        "description": "L'emplacement de la barre d'outils dans le terminal. Vous pouvez toujours la déplacer à partir de là.",
-        "bottom": "centre inférieur",
-        "bottomLeft": "En bas à gauche",
-        "bottomRight": "En bas à droite",
-        "top": "Centre supérieur",
-        "topLeft": "En haut à gauche",
-        "topRight": "En haut à droite"
-      },
-      "terminalToolbarStartState": {
-        "label": "État initial de la barre d'outils",
-        "description": "Que la barre d'outils s'ouvre en version développée ou réduite lors de la connexion au terminal",
-        "expanded": "Étendu",
-        "collapsed": "Minimisé"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Mode d'affichage de la barre d'outils",
-        "description": "Affichage des boutons de la barre d'outils. L'option « Dernier outil utilisé » conserve l'élément sélectionné dans la barre d'outils.",
-        "remember": "Dernière utilisation",
-        "icon": "Icône uniquement",
-        "labeled": "Icônes et étiquettes",
-        "expanded": "Statistiques ajoutées"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Afficher les statistiques en direct",
-        "description": "Afficher les statistiques de l'hôte en direct au-dessus des boutons de la barre d'outils en mode étendu"
-      },
-      "terminalToolbarFade": {
-        "label": "S'estomper lorsqu'on est inactif",
-        "description": "Faites disparaître la barre d'outils jusqu'à ce que vous la survoliez."
-      },
-      "enableCommandHistory": {
-        "label": "Historique des commandes",
-        "description": "Enregistrer les commandes exécutées dans ce terminal pour l'historique et l'autocomplétion"
-      },
-      "enableTerminal": {
-        "label": "Activer le terminal",
-        "description": "Fournir un terminal SSH pour cet hôte."
-      },
-      "inheritAppearance": {
-        "label": "Utiliser les paramètres par défaut de l'utilisateur"
-      },
-      "theme": {
-        "label": "Thème"
-      },
-      "cursorBlink": {
-        "label": "Curseur clignotant"
-      },
-      "cursorStyle": {
-        "label": "Style de curseur"
-      },
-      "fontSize": {
-        "label": "Taille de la police"
-      },
-      "fontFamily": {
-        "label": "Fonte"
-      },
-      "scrollback": {
-        "label": "Retour en arrière"
-      },
-      "letterSpacing": {
-        "label": "Espacement des lettres"
-      },
-      "lineHeight": {
-        "label": "Hauteur de ligne"
-      },
-      "bellStyle": {
-        "label": "Cloche"
-      },
-      "minimumContrastRatio": {
-        "label": "Rapport de contraste minimal"
-      },
-      "backgroundImage": {
-        "label": "Image de fond"
-      },
-      "backgroundImageOpacity": {
-        "label": "opacité de l'image de fond"
-      },
-      "customThemeColors": {
-        "label": "Couleurs de thème personnalisées"
-      },
-      "rightClickSelectsWord": {
-        "label": "Un clic droit sélectionne le mot"
-      },
-      "macOptionIsMeta": {
-        "label": "L'option est Meta"
-      },
-      "fastScrollModifier": {
-        "label": "Touche de défilement rapide"
-      },
-      "fastScrollSensitivity": {
-        "label": "Vitesse de défilement rapide"
-      },
-      "backspaceMode": {
-        "label": "Retour arrière"
-      },
-      "autoMosh": {
-        "label": "Auto mosh"
-      },
-      "moshCommand": {
-        "label": "Commandement Mosh"
-      },
-      "autoTmux": {
-        "label": "Auto tmux"
-      },
-      "useSSHTitle": {
-        "label": "Utilisez le titre SSH"
-      },
-      "syntaxHighlighting": {
-        "label": "coloration syntaxique"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "catégories de coloration syntaxique"
-      },
-      "linkClickBehavior": {
-        "label": "Lien à cliquer"
-      },
-      "localEcho": {
-        "label": "Écho local"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Proposer de remplir les invites de mot de passe"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Remplir les invites sudo"
-      },
-      "autoReconnect": {
-        "label": "Reconnexion automatique"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Autocomplétion des commandes",
-        "description": "Afficher la saisie semi-automatique pendant la saisie si vous appuyez sur Tab"
-      },
-      "localEcho": {
-        "label": "Écho local",
-        "description": "Réduisez la latence perçue grâce à une prédiction locale et sécurisée des frappes au clavier"
-      },
-      "linkClickBehavior": {
-        "label": "Clic lien terminal",
-        "description": "Comportement par défaut lors du clic sur un lien dans le terminal"
-      },
-      "customThemes": {
-        "label": "Thèmes enregistrés"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Terminal local"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Utilisez des sessions de terminal en direct",
-      "description": "Permet à d'autres fonctionnalités, telles que le partage et l'enregistrement de session, d'accéder à vos sessions de terminal en direct."
-    },
-    "history": {
-      "title": "Lire l'historique des commandes",
-      "description": "Permet à d'autres fonctionnalités, telles que l'assistant IA, de lire votre historique de commandes."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Terminal",
-    "addHost": "Ajouter un hôte",
-    "applyGlobalThemeTooltip": "Appliquer ce thème",
-    "backgroundImageDesc": "URL facultative pour une image d’arrière-plan du terminal",
-    "backgroundImageLabel": "URL de l’image d’arrière-plan",
-    "backgroundImageOpacityLabel": "Opacité de l’image d’arrière-plan",
-    "backspaceMode": "Mode Retour arrière",
-    "backspaceModeControlH": "Contrôle-H (BS)",
-    "backspaceModeLabel": "Mode de retour arrière",
-    "backspaceModeNormal": "Normal (DEL)",
-    "behaviorAndAdvanced": "Comportement et options avancées",
-    "bellStyle": "Style de sonnerie",
-    "bellStyleBoth": "Les deux",
-    "bellStyleLabel": "Style du bip",
-    "bellStyleNone": "Aucune",
-    "bellStyleSound": "Son",
-    "bellStyleVisual": "Visuel",
-    "colorTheme": "Thème de couleurs",
-    "cursorBlink": "Clignotement du curseur",
-    "cursorBlinking": "Clignotement du curseur",
-    "cursorBlinkingDesc": "Activer l’animation de clignotement pour le curseur du terminal",
-    "cursorStyle": "Style de curseur",
-    "cursorStyleBar": "Bar",
-    "cursorStyleBlock": "Bloc",
-    "cursorStyleLabel": "Style du curseur",
-    "cursorStyleUnderline": "Souligner",
-    "customThemeAnsiColors": "Couleurs ANSI",
-    "customThemeBackground": "Arrière-plan",
-    "customThemeBlack": "Noir",
-    "customThemeBlue": "Bleu",
-    "customThemeBrightBlack": "Noir brillant",
-    "customThemeBrightBlue": "Bleu brillant",
-    "customThemeBrightCyan": "Cyan brillant",
-    "customThemeBrightGreen": "Vert brillant",
-    "customThemeBrightMagenta": "Magenta brillant",
-    "customThemeBrightRed": "Rouge brillant",
-    "customThemeBrightWhite": "Blanc brillant",
-    "customThemeBrightYellow": "Jaune brillant",
-    "customThemeColors": "Couleurs personnalisées",
-    "customThemeCursor": "Curseur",
-    "customThemeCursorAccent": "Accent du curseur",
-    "customThemeCyan": "Cyan",
-    "customThemeForeground": "Premier plan",
-    "customThemeGreen": "Vert",
-    "customThemeMagenta": "Magenta",
-    "customThemeRed": "Rouge",
-    "customThemeResetTooltip": "Réinitialiser aux valeurs par défaut",
-    "customThemeSelection": "Sélection",
-    "customThemeWhite": "Blanc",
-    "customThemeYellow": "Jaune",
-    "deleteGlobalThemeTooltip": "Supprimer ce thème",
-    "docsLink": "Voir la documentation",
-    "enableAutoMosh": "Activer Auto-Mosh",
-    "enableAutoMoshDesc": "Préférer Mosh à SSH si disponible",
-    "enableAutoTmux": "Activer Auto-Tmux",
-    "enableAutoTmuxDesc": "Pour que votre shell et tout ce qui y est exécuté restent actifs malgré les déconnexions et les redémarrages du navigateur, exécutez la commande dans tmux (tmux doit être installé sur l'hôte).",
-    "fastScrollModifier": "Modificateur de défilement rapide",
-    "fastScrollModifierAlt": "Alt",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Modificateur de défilement rapide",
-    "fastScrollModifierShift": "Maj",
-    "fastScrollSensitivity": "Sensibilité du défilement rapide",
-    "fastScrollSensitivityLabel": "Sensibilité du défilement rapide",
-    "fontFamily": "Famille de polices",
-    "fontFamilyCustomHint": "Choisissez une police fournie ou sélectionnez « Personnalisée » et saisissez le nom exact d'une police déjà installée sur votre système (par exemple, MesloLGS NF, Noto Sans Mono). Termix ne peut pas installer de polices ; vous devez d'abord les installer sur votre système d'exploitation.",
-    "fontFamilyCustomOption": "Coutume...",
-    "fontFamilyCustomPlaceholder": "Nom exact de la police, par exemple MesloLGS NF",
-    "fontFamilyLabel": "Police de caractères",
-    "fontSize": "Taille de la police",
-    "fontSizeLabel": "Taille de police",
-    "hostNotFound": "Hôte introuvable",
-    "letterSpacing": "Espacement des lettres",
-    "letterSpacingPx": "Espacement des lettres (px)",
-    "lineHeight": "Hauteur de ligne",
-    "lineHeightLabel": "Hauteur de ligne",
-    "linkClickBehaviorConfirm": "Afficher une fenêtre contextuelle pour ouvrir ou copier",
-    "linkClickBehaviorDesc": "Contrôle ce qui se passe lorsque vous cliquez sur un lien dans le terminal. Utilisez « Par défaut » pour suivre le paramètre de l'application.",
-    "linkClickBehaviorDirect": "Ouvrir directement",
-    "linkClickBehaviorLabel": "Comportement au clic sur un lien",
-    "loadingHost": "Chargement de l'hôte...",
-    "localEchoAuto": "Automatique",
-    "localEchoDesc": "Prédiction locale des frappes au clavier imprimables en toute sécurité, même sur les connexions lentes. Les invites de mot de passe et les entrées de contrôle ne sont jamais affichées.",
-    "localEchoLabel": "Écho local",
-    "localEchoOff": "Désactivée",
-    "localEchoOn": "Toujours allumé",
-    "macOptionIsMetaLabel": "La touche Option envoie des métadonnées",
-    "macOptionIsMetaShortDesc": "Désactiver la saisie de caractères spéciaux (comme @ ou |) avec la touche Option/Alt sur macOS au lieu d'envoyer des métadonnées",
-    "moshCommand": "Commande MOSH",
-    "moshCommandLabel": "Commande Mosh",
-    "noSavedThemes": "Aucun thème enregistré pour le moment",
-    "none": "Aucun",
-    "passwordPromptAutoFillDesc": "Proposez de renseigner le mot de passe enregistré lorsque le terminal le demande. Désactivez cette option pour ne jamais renseigner automatiquement les mots de passe sur cet hôte.",
-    "passwordPromptAutoFillLabel": "Proposer le remplissage automatique du mot de passe",
-    "autoReconnectLabel": "Reconnexion automatique",
-    "autoReconnectDesc": "La connexion se rétablit automatiquement en cas de déconnexion SSH, par exemple après une brève interruption réseau ou une mise en veille. L'historique de défilement est conservé.",
-    "rightClickSelectsWord": "Sélection de mot par clic droit",
-    "rightClickSelectsWordLabel": "Clic droit sélectionne le mot",
-    "rightClickSelectsWordShortDesc": "Sélectionne le mot sous le curseur au clic droit",
-    "saveAsGlobalTheme": "Enregistrer comme thème global",
-    "saveGlobalThemeError": "Impossible d'enregistrer le thème",
-    "saveGlobalThemeNamePrompt": "Saisissez un nom pour ce thème",
-    "saveGlobalThemeSuccess": "Thème enregistré",
-    "savedThemesLabel": "Thèmes enregistrés",
-    "scrollbackBufferLabel": "Mémoire de défilement",
-    "scrollbackMaxLines": "Nombre maximal de lignes conservées dans l'historique",
-    "sudoPasswordAutoFill": "Remplissage automatique du mot de passe sudo",
-    "sudoPasswordAutoFillDesc": "Enregistrer un mot de passe sudo pour que les métriques de l'hôte, les invites du terminal et autres puissent exécuter automatiquement des commandes privilégiées.",
-    "sudoPasswordAutoFillLabel": "Remplissage automatique du mot de passe sudo",
-    "syntaxCategoryIpAddresses": "Adresses IP",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Niveaux de log",
-    "syntaxCategoryLogLevelsDesc": "error, warn, info, debug, fatal",
-    "syntaxCategoryNumbers": "Nombres étiquetés",
-    "syntaxCategoryNumbersDesc": "port 8080, exit 1, status 404",
-    "syntaxCategoryPaths": "Chemins de fichiers",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "Horodatages",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 2024-01-15",
-    "syntaxCategoryUrls": "URLs",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "Coloriser la sortie du terminal (erreurs, chemins, adresses IP, horodatages)",
-    "syntaxHighlightingLabel": "Coloration syntaxique",
-    "terminalAppearance": "Apparence du terminal",
-    "theme": "Thème",
-    "themePreview": "Aperçu du thème",
-    "useSSHTitleDesc": "Mettre à jour le titre de l'onglet à partir du titre de la fenêtre du shell au lieu du nom d'hôte",
-    "useSSHTitleLabel": "Utiliser le titre de la fenêtre SSH",
-    "enableTunnel": "Activer le tunnel",
-    "enableFileManager": "Activer le gestionnaire de fichiers",
-    "enableDocker": "Activer Docker",
-    "startupSnippet": "Extrait de démarrage",
-    "quickActions": "Actions rapides",
-    "proxmoxLastSyncStatus": {
-      "success": "Succès"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} ignoré (aucune adresse IP trouvée)",
-    "proxmoxStatsUrlCopied": "URL des statistiques Proxmox copiée dans le presse-papiers",
-    "rdpUrlCopied": "URL RDP copiée",
-    "vncUrlCopied": "URL VNC copiée",
-    "filterAuthStepca": "Étape CA",
-    "guac": {
-      "noCredential": "Aucun identifiant (saisie directe ci-dessous)",
-      "authTypeDirect": "Direct",
-      "authTypeCredential": "Identifiant",
-      "authTypeNone": "Aucune",
-      "recordingPath": "Chemin d'enregistrement",
-      "recordingName": "Nom de l'enregistrement",
-      "saveHostFirst": "Enregistrez d'abord l'hôte.",
-      "sharingOptionsAfterSave": "Les options de partage sont disponibles après l'enregistrement de l'hôte.",
-      "permissionLevel": "Niveau de permission",
-      "typeHeader": "Type",
-      "targetHeader": "Cible",
-      "permissionHeader": "Permission",
-      "cancelBtn": "Annuler",
-      "savingBtn": "Enregistrement...",
-      "updateHostBtn": "Mettre à jour l'hôte",
-      "addHostBtn": "Ajouter un hôte"
-    },
-    "filterAuthVault": "Sauter"
-  },
-  "nav": {
-    "history": "Historique",
-    "localTerminal": "Terminal local",
-    "sshTools": "Outils SSH",
-    "terminal": "Terminal",
-    "macros": "Macros"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Tapez ici pour diffuser les frappes...",
-    "copyOnSelect": "Copie automatique du texte sélectionné",
-    "enableRightClickCopyPaste": "Activer le copier/coller par clic droit",
-    "fillPassword": "Remplir le mot de passe",
-    "fillPasswordMissing": "Aucun mot de passe enregistré pour {{count}} terminal(s) sélectionné(s)",
-    "fillPasswordSuccess": "Mot de passe rempli dans {{count}} terminal(s)",
-    "keyRecordingTitle": "Enregistrement des touches",
-    "noTerminalTabsOpen": "Aucun onglet de terminal ouvert",
-    "recordToTerminals": "Enregistrer vers les terminaux",
-    "selectAll": "Tout",
-    "selectNone": "Aucune",
-    "selectTerminalsAbove": "Sélectionner les terminaux ci-dessus",
-    "settingsTitle": "Paramètres",
-    "startRecording": "Démarrer l'enregistrement",
-    "stopRecording": "Arrêter l'enregistrement"
-  },
-  "keybindings": {
-    "copy": "Copier la sélection",
-    "paste": "Coller",
-    "sendControlCode": "Envoyer le signal Ctrl+lettre",
-    "sendText": "Envoyer un SMS",
-    "controlCodeLabel": "Lettre",
-    "textLabel": "Texte à envoyer",
-    "appendEnterLabel": "Appuyez sur Entrée après l'envoi",
-    "clipboardPermissionNote": "Il se peut que certains navigateurs demandent l'autorisation d'accéder au presse-papiers lors de la première utilisation.",
-    "textRequired": "Saisissez le texte à envoyer",
-    "controlCodeRequired": "Saisissez une seule lettre pour le code de contrôle",
-    "builtIn": {
-      "copyCtrlC": "Copier la sélection (Ctrl+C, uniquement lorsque du texte est sélectionné)",
-      "copyCtrlShiftC": "Copier la sélection (Ctrl+Maj+C)",
-      "copyCmdC": "Copier la sélection (Cmd+C)",
-      "pasteCtrlShiftV": "Coller depuis le presse-papiers (Ctrl+Maj+V)",
-      "ctrlW": "Envoyer Ctrl+W à l'invite de commandes (empêche la fermeture de l'onglet du navigateur)",
-      "ctrlT": "Envoyer Ctrl+T à l'invite de commandes (empêche l'ouverture d'un onglet du navigateur)",
-      "ctrlN": "Envoyer Ctrl+N à l'invite de commandes (empêchement de l'ouverture d'une fenêtre de navigateur)",
-      "ctrlQ": "Envoyer Ctrl+Q à l'invite de commandes (empêchement de la fermeture du navigateur)"
-    }
-  },
-  "macros": {
-    "title": "Macros",
-    "description": "Exécutez une série de commandes enregistrées dans un terminal et réagissez à la réponse du serveur.",
-    "target": "Cible",
-    "noTerminal": "Aucun terminal ouvert",
-    "empty": "Pas encore de macros",
-    "emptyHint": "Créez une macro pour automatiser un flux de terminal, comme la connexion, le redémarrage d'un service ou la réponse à des invites.",
-    "create": "Nouvelle macro",
-    "back": "Retour aux macros",
-    "name": "Nom",
-    "namePlaceholder": "Redémarrer le serveur web",
-    "nameRequired": "Donnez un nom à la macro avant de l'enregistrer.",
-    "descriptionLabel": "Description",
-    "descriptionPlaceholder": "Fonctionnement de cette macro (facultatif)",
-    "unsaved": "Modifications non enregistrées",
-    "save": "Enregistrer",
-    "saved": "Macro enregistrée",
-    "saveFailed": "Impossible d'enregistrer la macro",
-    "delete": "Supprimer",
-    "deleteTitle": "Supprimer cette macro ?",
-    "deleteBody": "\"{{name}}\" sera définitivement supprimé. Cette action est irréversible.",
-    "deleted": "Macro supprimée",
-    "cancel": "Annuler",
-    "run": "Exécuter",
-    "stop": "Stop",
-    "running": "En cours d'exécution...",
-    "completed": "Macro terminé",
-    "failed": "Échec de la macro",
-    "loadFailed": "Impossible de charger les macros",
-    "needTerminal": "Ouvrez et connectez d'abord un terminal.",
-    "noSteps": "Cette macro ne comporte pas encore d'étapes. Ajoutez-en une ci-dessous.",
-    "addStep": "Ajouter une étape",
-    "stepNumber": "Étape {{number}}",
-    "removeStep": "Supprimer l'étape",
-    "confirmRunTitle": "Exécuter cette macro ?",
-    "confirmRunBody": "\"{{name}}\" enverra des commandes à {{host}}.",
-    "confirmRunAction": "Exécuter une macro",
-    "stepTypes": {
-      "send": {
-        "label": "Envoyer la commande",
-        "help": "Saisit du texte dans le terminal, comme si vous l'aviez saisi manuellement."
-      },
-      "wait": {
-        "label": "Attendez la sortie",
-        "help": "Il y a une pause jusqu'à ce que le serveur affiche le texte que vous avez indiqué, comme une invite de mot de passe."
-      },
-      "delay": {
-        "label": "Pause",
-        "help": "Attendre un laps de temps fixe avant de passer à l'étape suivante."
-      },
-      "if": {
-        "label": "Si la sortie contient",
-        "help": "Vérifie tout ce que le serveur a imprimé jusqu'à présent, puis exécute l'une des deux branches."
-      },
-      "repeat": {
-        "label": "Répéter",
-        "help": "Exécute les étapes qu'il contient un nombre de fois défini."
-      }
-    },
-    "send": {
-      "text": "Commande ou texte",
-      "textPlaceholder": "systemctl redémarrer nginx",
-      "pressEnter": "Appuyez sur Entrée après l'envoi",
-      "pressEnterHelp": "Désactivez cette option pour saisir du texte sans le soumettre."
-    },
-    "wait": {
-      "pattern": "Attendez que la sortie contienne",
-      "patternPlaceholder": "mot de passe:",
-      "timeout": "Abandonner après",
-      "onTimeout": "S'il n'apparaît jamais",
-      "stop": "Arrêtez la macro",
-      "continue": "Continuez quand même"
-    },
-    "delay": {
-      "duration": "Attendre"
-    },
-    "ifStep": {
-      "pattern": "Si la sortie contient",
-      "patternPlaceholder": "Actif : actif (en cours d'exécution)",
-      "then": "Ensuite, faites ceci",
-      "else": "Sinon, faites ceci.",
-      "emptyBranch": "Pas d'étapes"
-    },
-    "repeat": {
-      "count": "Nombre de fois",
-      "times": "fois"
-    },
-    "match": {
-      "useRegex": "Correspondance avec une expression régulière",
-      "useRegexHelp": "Laissez cette section de côté pour que le texte corresponde exactement à ce qui est écrit.",
-      "invalidRegex": "Il ne s'agit pas d'une expression régulière valide ; elle sera interprétée comme du texte brut."
-    },
-    "seconds": "secondes",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "Serveur distant requis. Connectez un serveur distant dans les paramètres pour utiliser ce type de connexion."
-  },
-  "plugin": {
-    "name": "Terminal SSH"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/he_IL.json b/plugins/ssh-terminal/locales/translated/he_IL.json
deleted file mode 100644
index ceea07287..000000000
--- a/plugins/ssh-terminal/locales/translated/he_IL.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "לְהוֹסִיף",
-    "arrowDown": "חץ למטה",
-    "arrowLeft": "חץ שמאלה",
-    "arrowRight": "חץ ימינה",
-    "arrowUp": "חץ למעלה",
-    "backTab": "⇥",
-    "ctrl": "קונטרול",
-    "delete": "דל",
-    "done": "נַעֲשָׂה",
-    "editQuickKeys": "עריכת מקשי מהירים",
-    "end": "סוֹף",
-    "esc": "Esc",
-    "home": "בַּיִת",
-    "pageDown": "PgDn",
-    "pageUp": "עמוד למעלה",
-    "paste": "לְהַדבִּיק",
-    "quickKeyPlaceholder": "למשל סודו ",
-    "quickKeysDesc": "הקש על × כדי להסיר. תומך בעד 8 תווים.",
-    "quickKeysTitle": "מקשי מהירים",
-    "removeQuickKey": "לְהַסִיר",
-    "resetDefaults": "איפוס להגדרות ברירת מחדל",
-    "shift": "מִשׁמֶרֶת",
-    "tab": "טאב"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "נכשל בהפעלת Auto-Tmux",
-    "autoTmuxEnabled": "Auto-Tmux מופעל עבור {{host}}. זה חל מהחיבור הבא.",
-    "clipboardHttpWarning": "לא ניתן היה לקרוא את הלוח. חלק מהדפדפנים מגבילים את הגישה ללוח מחוץ ל-HTTPS - נסה Ctrl+V במקום זאת, או שלח את Termix דרך HTTPS.",
-    "closeTab": "לִסְגוֹר",
-    "connecting": "מְקַשֵׁר...",
-    "connectionLost": "החיבור אבד",
-    "connectionRejected": "החיבור נדחה על ידי השרת. אנא בדוק את האימות ותצורת הרשת שלך.",
-    "connectionTimeout": "זמן קצוב לחיבור",
-    "enableAutoTmuxAction": "הפעל את Auto-Tmux",
-    "hostKeyRejected": "אימות מפתח מארח SSH נדחה. החיבור בוטל.",
-    "linkDialogCopy": "לְהַעְתִיק",
-    "linkDialogOpen": "לִפְתוֹחַ",
-    "linkDialogTitle": "פתח קישור",
-    "maxReconnectAttemptsReached": "הגעת למספר המקסימלי של ניסיונות חיבור מחדש",
-    "noHostSelected": "לא נבחר מארח",
-    "passwordPromptFillTitle": "למלא את הסיסמה השמורה בשורת הפקודה הזו?",
-    "reconnect": "התחבר מחדש",
-    "reconnected": "התחבר מחדש בהצלחה",
-    "reconnecting": "מתחבר מחדש... ({{attempt}}/{{max}})",
-    "autoReconnecting": "החיבור אבד, מתחבר מחדש...",
-    "searchCaseSensitive": "מארז התאמה",
-    "searchClose": "סגור (Escape)",
-    "searchNext": "המשחק הבא (Enter)",
-    "searchNoResults": "אין תוצאות",
-    "searchPlaceholder": "לִמצוֹא",
-    "searchPrevious": "התאמה קודמת (Shift+Enter)",
-    "searchRegex": "השתמש בביטוי רגולרי",
-    "searchResultCount": "{{index}} מתוך {{count}}",
-    "searchWholeWord": "התאמת מילה שלמה",
-    "sessionExpiredNotice": "הסשן הקודם שלך ב- {{host}} פג תוקפו לאחר {{minutes}} דקות של ניתוק; המעטפת וכל מה שפועל בה נעלם. הפעל את Auto-Tmux במארח זה כדי לשמור על הסשנים פעילים.",
-    "sessionExpiredNoticeNoMinutes": "הסשן הקודם שלך ב- {{host}} פג תוקפו בזמן ניתוק; המעטפת וכל מה שפועל בה נעלם. הפעל את Auto-Tmux במארח זה כדי לשמור על הסשנים פעילים.",
-    "sessionTakenOver": "הסשן נפתח בכרטיסייה אחרת. מתחבר מחדש...",
-    "tmuxAttached": "לקוחות מצורפים",
-    "tmuxAttachedCount": "{{count}} מצורף",
-    "tmuxCopyHint": "התאם את הבחירה ולחץ על Enter כדי להעתיק ללוח",
-    "tmuxCreateNew": "התחל סשן חדש",
-    "tmuxDetached": "מנותק מסשן tmux",
-    "tmuxLastActivity": "פעילות אחרונה",
-    "tmuxSessionAttached": "סשן tmux מצורף: {{name}}",
-    "tmuxSessionCreated": "נוצרה סשן tmux: {{name}}",
-    "tmuxSessionPickerDesc": "נמצאו הפעלות tmux קיימות במארח זה. בחר אחת לחיבור מחדש או צור הפעלות חדשה.",
-    "tmuxSessionPickerTitle": "מפגשי tmux",
-    "tmuxTimeDays": "{{count}}d ago",
-    "tmuxTimeHours": "{{count}}h ago",
-    "tmuxTimeJustNow": "זֶה עַתָה",
-    "tmuxTimeMinutes": "לפני {{count}}דקות",
-    "tmuxUnavailable": "tmux אינו מותקן על המארח המרוחק, חוזר למעטפת סטנדרטית",
-    "tmuxWindowCount": "חלון {{count}}",
-    "tmuxWindows": "חלונות",
-    "unknownError": "אירעה שגיאה לא ידועה",
-    "websocketAbnormalClose": "החיבור נסגר באופן בלתי צפוי. ייתכן שהדבר נובע מבעיית פרוקסי הפוך או מבעיית תצורת SSL. אנא בדוק את יומני השרת.",
-    "websocketError": "שגיאת חיבור WebSocket",
-    "clipboardReadFailed": "הקריאה מהלוח נכשלה. ודא שהרשאות הלוח ניתנות.",
-    "clipboardWriteFailed": "ההעתקה ללוח נכשלה. ודא שהדף מוגש דרך HTTPS או localhost.",
-    "connected": "מְחוּבָּר",
-    "totpCodeLabel": "קוד אימות",
-    "duplicateTab": "לשכפל את הכרטיסייה",
-    "imageChooseFile": "בחר קובץ תמונה",
-    "imageUploaded": "תמונה שהועלתה: {{path}}",
-    "imageClipboardUnavailable": "דפדפן זה אינו יכול לקרוא תמונות מהלוח",
-    "imageClipboardEmpty": "לא נמצאה תמונה בלוח",
-    "localShell": "מעטפת הטרמינל המקומית",
-    "autocompleteHintComplete": "Tab או Enter כדי להשלים",
-    "autocompleteHintNavigate": "↑↓ כדי לנווט",
-    "autocompleteHintClose": "Esc כדי לסגור"
-  },
-  "terminalToolbar": {
-    "detachTmux": "ניתוק tmux",
-    "detachTmuxDescription": "ניתוק סשן tmux",
-    "dismissError": "סגור שגיאת תמונה",
-    "hideToolbar": "הסתר את סרגל הכלים",
-    "image": "פעולות תמונה (תמונות בלבד)",
-    "imageActionFailed": "פעולת התמונה נכשלה",
-    "layout": "מצב תצוגה של סרגל הכלים",
-    "layoutExpanded": "מורחב עם מדדים",
-    "layoutIcon": "סמל בלבד",
-    "layoutLabeled": "סמלים ותוויות",
-    "moveToolbar": "הזזת סרגל הכלים",
-    "moveToolbarHint": "גרור כדי לשנות את מיקום סרגל הכלים",
-    "paste": "הדבקת תמונה",
-    "pasteImage": "הדבקת תמונה מהלוח (תמונות בלבד)",
-    "retry": "נסה שוב",
-    "showToolbar": "הרחב את סרגל הכלים",
-    "upload": "העלאת תמונה",
-    "uploadImage": "העלה תמונה למארח",
-    "uploadingImage": "מעלה..."
-  },
-  "history": {
-    "noTerminalSelected": "לא נבחר טרמינל",
-    "noTerminalSelectedHint": "פתח כרטיסיית מסוף SSH כדי להציג את היסטוריית הפקודות שלה",
-    "searchPlaceholder": "היסטוריית חיפוש...",
-    "clearAll": "נקה הכל",
-    "noHistoryEntries": "אין רשומות היסטוריה",
-    "trackingDisabled": "מעקב אחר היסטוריה מושבת",
-    "trackingDisabledHint": "הפעל את היסטוריית הפקודות בכרטיסייה מסוף SSH של מחשב מארח זה.",
-    "commandCount_one": "פקודה {{count}}",
-    "commandCount_other": "פקודות {{count}}"
-  },
-  "touchInput": {
-    "enabled": "הפעל קלט מגע",
-    "enabledDesc": "אפשר גלילה באמצעות מגע באצבע אחת במסופים",
-    "momentumEnabled": "לאפשר מומנטום",
-    "momentumEnabledDesc": "המשך גלילה קצרה לאחר החלקה",
-    "advanced": "מִתקַדֵם",
-    "resetDefaults": "איפוס להגדרות ברירת מחדל",
-    "dragThreshold": "סף גרירה",
-    "maxWheelDelta": "דלתא גלגל מקסימלית",
-    "momentumSampleWindow": "חלון דוגמת מומנטום",
-    "releaseGracePeriod": "תקופת חסד לשחרור",
-    "minimumVelocity": "מהירות מינימלית",
-    "maximumVelocity": "מהירות מקסימלית",
-    "maximumDuration": "משך זמן מקסימלי",
-    "maximumTravel": "נסיעה מקסימלית",
-    "decayTime": "זמן דעיכה",
-    "pixelsPerTick": "פיקסלים לכל טיק",
-    "maximumFrameInterval": "מרווח פריימים מקסימלי",
-    "maximumTicksPerFrame": "מספר מקסימלי של טיקים למסגרת"
-  },
-  "imageStorage": {
-    "instanceId": "מזהה מופע של סשן מסוף",
-    "instanceIdDesc": "מזהה מופע של אחת מכרטיסיות הטרמינל המחוברות שלך, המשמש לבדיקת נראות.",
-    "selectedModeUnavailable": "לא זמין",
-    "test": "מִבְחָן",
-    "testing": "בּוֹחֵן...",
-    "testFailed": "נכשלה בדיקת אחסון התמונה",
-    "testConnected": "סשן הטרמינל מחובר.",
-    "testNotConnected": "אין סשן מסוף מחובר עם מזהה מופע זה.",
-    "testSelectedMode": "העלאה תשתמש ב: {{mode}}",
-    "testLocalVisible": "הספרייה המקומית גלויה מהמארח המחובר.",
-    "testLocalNotVisible": "הספרייה המקומית אינה גלויה מהמארח המחובר."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "קלט מגע",
-        "images": "אחסון תמונות",
-        "sessions": "מפגשים",
-        "newHosts": "מארחים חדשים"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "התמדה של סשן מסוף",
-        "description": "כמה זמן מסוף מנותק נשאר פעיל בשרת לפני שהוא נסגר. מינימום 1, מקסימום 1440 דקות. עבור סשנים שחייבים לשרוד יותר מ-10 דקות, הפעל את Auto-Tmux במארח."
-      },
-      "commandHistoryEnabled": {
-        "label": "היסטוריית פקודות",
-        "description": "אפשר רישום היסטוריית פקודות. כאשר האפשרות מושבתת, ההיסטוריה לא נשמרת ללא קשר להגדרות של כל מחשב מארח."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "היסטוריית פקודות עבור מארחים חדשים",
-        "description": "האם מחשבי שרת חדשים מתחילים עם היסטוריית פקודות מופעלת."
-      },
-      "imageStorageMode": {
-        "label": "מצב אחסון",
-        "description": "היכן נכתבות תמונות טרמינל שהודבקו והועלו. בחירות אוטומטיות לפי חיבור, מקומי ומרוחק (SFTP) תוקנו.",
-        "auto": "אוטומטי",
-        "local": "מְקוֹמִי",
-        "remoteSftp": "מרחוק (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "ספרייה מקומית",
-        "description": "נתיב מוחלט בקצה האחורי של Termix שבו מצב מקומי כותב תמונות. לעולם לא מוצג לאחר שמירה. ריק משתמש ב-TERMIX_IMAGE_DIR."
-      },
-      "imageHostPath": {
-        "label": "נתיב המארח",
-        "description": "תצוגת המארח של הספרייה המקומית שמקבלים סוכני הטרמינל."
-      },
-      "imageTtlMs": {
-        "label": "TTL (אלפיות שנייה)",
-        "description": "כמה זמן נשמרת תמונה שהועלתה, במילישניות. ריק משתמש ב-TERMIX_IMAGE_TTL_MS או שעה אחת."
-      },
-      "imageMaxCount": {
-        "label": "ספירת תמונות מקסימלית",
-        "description": "רוב התמונות נשמרות בבת אחת. ריק משתמש ב-TERMIX_MAX_IMAGE_COUNT או 100."
-      },
-      "imageMaxBytes": {
-        "label": "מספר בייטים מקסימלי לאחסון",
-        "description": "רוב הבייטים של תמונות נשמרים בבת אחת. ריק משתמש ב-TERMIX_MAX_IMAGE_STORAGE_BYTES או 5 ג'יגה-בייט."
-      },
-      "sessionPersistence": {
-        "label": "שמירת סשנים לאחר ניתוק",
-        "description": "יש להשאיר מסוף מנותק פעיל בשרת למשך הזמן הנ\"ל, כך שפתיחה מחדש של הכרטיסייה שלו תמשיך מהנקודה שבה היא הפסיקה."
-      },
-      "newHostAutoTmux": {
-        "label": "אוטו-טימוקס",
-        "description": "הפעלת טרמינלים של מארחים חדשים בתוך tmux כך שההפעלות ישרדו ניתוקים (צריך tmux על המארח)"
-      },
-      "newHostTheme": {
-        "label": "ערכת נושא למארחים חדשים",
-        "description": "ערכת הנושא של הטרמינל שאיתה מתחיל מארח חדש."
-      },
-      "newHostFontFamily": {
-        "label": "גופן עבור מארחים חדשים",
-        "description": "גופן הטרמינל שבו מתחיל מארח חדש."
-      },
-      "newHostFontSize": {
-        "label": "גודל גופן עבור מארחים חדשים",
-        "description": "גודל הגופן של הטרמינל שבו מתחיל מארח חדש, בפיקסלים."
-      },
-      "newHostCursorStyle": {
-        "label": "סגנון סמן עבור מארחים חדשים"
-      },
-      "newHostCursorBlink": {
-        "label": "סמן מהבהב עבור מארחים חדשים"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "הפעלת סרגל הכלים של הטרמינל",
-        "description": "הצג סרגל כלים לגישה מהירה המעוגן למסוף הפעיל עבור הכלים והסטטיסטיקות החיות של מארח זה"
-      },
-      "terminalToolbarPosition": {
-        "label": "מיקום סרגל הכלים",
-        "description": "היכן שסרגל הכלים נמצא בטרמינל. עדיין ניתן לגרור אותו משם.",
-        "bottom": "מרכז תחתון",
-        "bottomLeft": "למטה משמאל",
-        "bottomRight": "למטה מימין",
-        "top": "מרכז עליון",
-        "topLeft": "למעלה משמאל",
-        "topRight": "למעלה מימין"
-      },
-      "terminalToolbarStartState": {
-        "label": "מצב התחלה של סרגל הכלים",
-        "description": "האם סרגל הכלים נפתח מורחב או ממוזער כאשר הטרמינל מתחבר",
-        "expanded": "מוּרחָב",
-        "collapsed": "ממוזער"
-      },
-      "terminalToolbarDisplay": {
-        "label": "מצב תצוגה בסרגל הכלים",
-        "description": "כיצד מוצגים כפתורי סרגל הכלים. האפשרות \"השימוש האחרון\" שומרת על כל מה שבחרת בסרגל הכלים.",
-        "remember": "בשימוש אחרון",
-        "icon": "סמל בלבד",
-        "labeled": "סמלים ותוויות",
-        "expanded": "מורחב עם סטטיסטיקות"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "הצג סטטיסטיקות בזמן אמת",
-        "description": "הצג סטטיסטיקות של מארח חי מעל לחצני סרגל הכלים במצב מורחב"
-      },
-      "terminalToolbarFade": {
-        "label": "דעיכה כאשר במצב סרק",
-        "description": "העמעם את סרגל הכלים עד שתעביר את העכבר מעליו"
-      },
-      "enableCommandHistory": {
-        "label": "היסטוריית פקודות",
-        "description": "פקודות הקלטה פועלות בטרמינל זה לצורך היסטוריה והשלמה אוטומטית"
-      },
-      "enableTerminal": {
-        "label": "הפעלת טרמינל",
-        "description": "הצע מסוף SSH עבור מארח זה."
-      },
-      "inheritAppearance": {
-        "label": "השתמש בברירות מחדל של המשתמש"
-      },
-      "theme": {
-        "label": "נוֹשֵׂא"
-      },
-      "cursorBlink": {
-        "label": "סמן מהבהב"
-      },
-      "cursorStyle": {
-        "label": "סגנון הסמן"
-      },
-      "fontSize": {
-        "label": "גודל גופן"
-      },
-      "fontFamily": {
-        "label": "גוֹפָן"
-      },
-      "scrollback": {
-        "label": "גלילה אחורה"
-      },
-      "letterSpacing": {
-        "label": "ריווח אותיות"
-      },
-      "lineHeight": {
-        "label": "גובה הקו"
-      },
-      "bellStyle": {
-        "label": "פַּעֲמוֹן"
-      },
-      "minimumContrastRatio": {
-        "label": "יחס ניגודיות מינימלי"
-      },
-      "backgroundImage": {
-        "label": "תמונת רקע"
-      },
-      "backgroundImageOpacity": {
-        "label": "אטימות תמונת הרקע"
-      },
-      "customThemeColors": {
-        "label": "צבעי ערכת נושא מותאמים אישית"
-      },
-      "rightClickSelectsWord": {
-        "label": "לחיצה ימנית בוחרת מילה"
-      },
-      "macOptionIsMeta": {
-        "label": "האפשרות היא מטא"
-      },
-      "fastScrollModifier": {
-        "label": "מקש גלילה מהירה"
-      },
-      "fastScrollSensitivity": {
-        "label": "מהירות גלילה מהירה"
-      },
-      "backspaceMode": {
-        "label": "Backspace"
-      },
-      "autoMosh": {
-        "label": "אוטו מוש"
-      },
-      "moshCommand": {
-        "label": "פקודת מוש"
-      },
-      "autoTmux": {
-        "label": "אוטומטי tmux"
-      },
-      "useSSHTitle": {
-        "label": "השתמש בכותרת SSH"
-      },
-      "syntaxHighlighting": {
-        "label": "הדגשת תחביר"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "קטגוריות של הדגשת תחביר"
-      },
-      "linkClickBehavior": {
-        "label": "לחיצה על קישור"
-      },
-      "localEcho": {
-        "label": "הד מקומי"
-      },
-      "passwordPromptAutoFill": {
-        "label": "הצעה למלא בקשות לסיסמה"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "מלאו הנחיות סודו"
-      },
-      "autoReconnect": {
-        "label": "התחבר מחדש באופן אוטומטי"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "השלמה אוטומטית של הפקודה",
-        "description": "הצג השלמה אוטומטית בעת הקלדה אם לוחצים על Tab"
-      },
-      "localEcho": {
-        "label": "הד מקומי",
-        "description": "הפחתת השהיית קלט נתפסת באמצעות חיזוי בטוח של הקשות מקומיות"
-      },
-      "linkClickBehavior": {
-        "label": "לחיצה על קישור הטרמינל",
-        "description": "אופן הפעולה המוגדר כברירת מחדל בעת לחיצה על קישורים בטרמינל"
-      },
-      "customThemes": {
-        "label": "ערכות נושא שנשמרו"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "מסוף מקומי"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "השתמש בהפעלות מסוף חיות",
-      "description": "מאפשר לתכונות אחרות, כגון שיתוף והקלטת סשנים, להגיע לסשנים החיים שלך במסוף."
-    },
-    "history": {
-      "title": "קרא היסטוריית פקודות",
-      "description": "מאפשר לתכונות אחרות, כגון עוזר הבינה המלאכותית, לקרוא את היסטוריית הפקודות שלך."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "מָסוֹף",
-    "addHost": "הוסף מארח",
-    "applyGlobalThemeTooltip": "החל ערכת נושא זו",
-    "backgroundImageDesc": "כתובת URL אופציונלית לתמונת רקע של הטרמינל",
-    "backgroundImageLabel": "כתובת אתר של תמונת רקע",
-    "backgroundImageOpacityLabel": "אטימות תמונת הרקע",
-    "backspaceMode": "מצב Backspace",
-    "backspaceModeControlH": "שליטה-H (BS)",
-    "backspaceModeLabel": "מצב Backspace",
-    "backspaceModeNormal": "רגיל (DEL)",
-    "behaviorAndAdvanced": "התנהגות ומתקדם",
-    "bellStyle": "סגנון בל",
-    "bellStyleBoth": "שְׁנֵיהֶם",
-    "bellStyleLabel": "סגנון בל",
-    "bellStyleNone": "אַף לֹא אֶחָד",
-    "bellStyleSound": "קוֹל",
-    "bellStyleVisual": "חָזוּתִי",
-    "colorTheme": "ערכת צבעים",
-    "cursorBlink": "מצמוץ סמן",
-    "cursorBlinking": "סמן מהבהב",
-    "cursorBlinkingDesc": "הפעל אנימציה מהבהבת עבור סמן הטרמינל",
-    "cursorStyle": "סגנון הסמן",
-    "cursorStyleBar": "בַּר",
-    "cursorStyleBlock": "לַחסוֹם",
-    "cursorStyleLabel": "סגנון הסמן",
-    "cursorStyleUnderline": "לָשִׂים דָגֵשׁ",
-    "customThemeAnsiColors": "צבעי ANSI",
-    "customThemeBackground": "רֶקַע",
-    "customThemeBlack": "שָׁחוֹר",
-    "customThemeBlue": "כְּחוֹל",
-    "customThemeBrightBlack": "שחור בהיר",
-    "customThemeBrightBlue": "כחול בהיר",
-    "customThemeBrightCyan": "ציאן בהיר",
-    "customThemeBrightGreen": "ירוק בהיר",
-    "customThemeBrightMagenta": "מגנטה בהירה",
-    "customThemeBrightRed": "אדום בוהק",
-    "customThemeBrightWhite": "לבן בהיר",
-    "customThemeBrightYellow": "צהוב בהיר",
-    "customThemeColors": "צבעים מותאמים אישית",
-    "customThemeCursor": "סַמָן",
-    "customThemeCursorAccent": "הדגשת סמן",
-    "customThemeCyan": "ציאן",
-    "customThemeForeground": "חֲזִית",
-    "customThemeGreen": "יָרוֹק",
-    "customThemeMagenta": "מַגֶנטָה",
-    "customThemeRed": "אָדוֹם",
-    "customThemeResetTooltip": "איפוס להגדרות ברירת מחדל",
-    "customThemeSelection": "בְּחִירָה",
-    "customThemeWhite": "לָבָן",
-    "customThemeYellow": "צָהוֹב",
-    "deleteGlobalThemeTooltip": "מחק את ערכת הנושא הזו",
-    "docsLink": "הצג מסמכים",
-    "enableAutoMosh": "הפעלת מודעות אוטומטית",
-    "enableAutoMoshDesc": "העדיפו Mosh על פני SSH אם זמין",
-    "enableAutoTmux": "הפעל את Auto-Tmux",
-    "enableAutoTmuxDesc": "שמרו על המעטפת שלכם וכל דבר שפועל בה בחיים גם לאחר ניתוקים והפעלות מחדש של הדפדפן על ידי הפעלתה בתוך tmux (tmux חייב להיות מותקן על המארח)",
-    "fastScrollModifier": "משנה גלילה מהירה",
-    "fastScrollModifierAlt": "אלט",
-    "fastScrollModifierCtrl": "קונטרול",
-    "fastScrollModifierLabel": "משנה גלילה מהירה",
-    "fastScrollModifierShift": "מִשׁמֶרֶת",
-    "fastScrollSensitivity": "רגישות גלילה מהירה",
-    "fastScrollSensitivityLabel": "רגישות גלילה מהירה",
-    "fontFamily": "משפחת גופנים",
-    "fontFamilyCustomHint": "בחרו גופן כלול, או בחרו באפשרות \"מותאם אישית\" והקלידו את השם המדויק של גופן שכבר מותקן במערכת שלכם (למשל, MesloLGS NF, Noto Sans Mono). Termix לא יכול להתקין גופנים עבורכם, התקינו אותו תחילה במערכת ההפעלה שלכם.",
-    "fontFamilyCustomOption": "מִנְהָג...",
-    "fontFamilyCustomPlaceholder": "שם גופן מדויק, לדוגמה MesloLGS NF",
-    "fontFamilyLabel": "משפחת גופנים",
-    "fontSize": "גודל גופן",
-    "fontSizeLabel": "גודל גופן",
-    "hostNotFound": "המארח לא נמצא",
-    "letterSpacing": "ריווח אותיות",
-    "letterSpacingPx": "ריווח בין אותיות (פיקסלים)",
-    "lineHeight": "גובה הקו",
-    "lineHeightLabel": "גובה הקו",
-    "linkClickBehaviorConfirm": "הצג קופץ לפתיחה או להעתקה",
-    "linkClickBehaviorDesc": "שולט במה שקורה כשלוחצים על קישור בטרמינל. השתמשו ב'ברירת מחדל' כדי לעקוב אחר ההגדרה ברמת האפליקציה.",
-    "linkClickBehaviorDirect": "פתח ישירות",
-    "linkClickBehaviorLabel": "התנהגות לחיצה על קישור",
-    "loadingHost": "טוען מארח...",
-    "localEchoAuto": "אוֹטוֹמָטִי",
-    "localEchoDesc": "חזה הקשות מקלדת להדפסה בטוחות באופן מקומי בחיבורים איטיים. בקשות סיסמה וקלט בקרה לעולם לא יוחזרו.",
-    "localEchoLabel": "הד מקומי",
-    "localEchoOff": "כבוי",
-    "localEchoOn": "תמיד דולק",
-    "macOptionIsMetaLabel": "מקש אפשרות שולח מטא",
-    "macOptionIsMetaShortDesc": "השבתת אפשרות הקלדת תווים מיוחדים (כגון @ או |) באמצעות מקש Option/Alt ב-macOS במקום לשלוח מטא",
-    "moshCommand": "פיקוד MOSH",
-    "moshCommandLabel": "פיקוד מוש",
-    "noSavedThemes": "עדיין אין ערכות נושא שנשמרו",
-    "none": "אַף לֹא אֶחָד",
-    "passwordPromptAutoFillDesc": "הצע למלא את הסיסמה השמורה כאשר הטרמינל מבקש אחת. כבה כדי שלא ימלאו אוטומטית אף סיסמה במארח זה.",
-    "passwordPromptAutoFillLabel": "מילוי אוטומטי של סיסמת ההצעה",
-    "autoReconnectLabel": "חיבור מחדש אוטומטי",
-    "autoReconnectDesc": "מתחבר מחדש מעצמו כאשר חיבור ה-SSH נותק, כמו לאחר תקלה ברשת או שינה. שומר על גלילה לאחור.",
-    "rightClickSelectsWord": "לחיצה ימנית בוחרת מילה",
-    "rightClickSelectsWordLabel": "לחיצה ימנית בוחרת מילה",
-    "rightClickSelectsWordShortDesc": "בחר את המילה שמתחת לסמן בלחיצה ימנית",
-    "saveAsGlobalTheme": "שמור כערכת נושא גלובלית",
-    "saveGlobalThemeError": "שמירת ערכת הנושא נכשלה",
-    "saveGlobalThemeNamePrompt": "הזן שם עבור ערכת נושא זו",
-    "saveGlobalThemeSuccess": "ערכת הנושא נשמרה",
-    "savedThemesLabel": "ערכות נושא שמורות",
-    "scrollbackBufferLabel": "מאגר גלילה לאחור",
-    "scrollbackMaxLines": "מספר השורות המרבי שנשמר בהיסטוריה",
-    "sudoPasswordAutoFill": "מילוי אוטומטי של סיסמאות Sudo",
-    "sudoPasswordAutoFillDesc": "אחסן סיסמת sudo כדי שמדדי מארח, הנחיות מסוף ואחרים יוכלו להריץ פקודות בעלות הרשאות באופן אוטומטי.",
-    "sudoPasswordAutoFillLabel": "מילוי אוטומטי של סיסמת סודו",
-    "syntaxCategoryIpAddresses": "כתובות IP",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "רמות יומן",
-    "syntaxCategoryLogLevelsDesc": "שגיאה, אזהרה, מידע, ניפוי שגיאות, חמור",
-    "syntaxCategoryNumbers": "מספרים מסומנים",
-    "syntaxCategoryNumbersDesc": "פורט 8080, יציאה 1, סטטוס 404",
-    "syntaxCategoryPaths": "נתיבי קבצים",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "חותמות זמן",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 15-01-2024",
-    "syntaxCategoryUrls": "כתובות URL",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "צבע את פלט הטרמינל (שגיאות, נתיבים, כתובות IP, חותמות זמן)",
-    "syntaxHighlightingLabel": "הדגשת תחביר",
-    "terminalAppearance": "מראה הטרמינל",
-    "theme": "נוֹשֵׂא",
-    "themePreview": "תצוגה מקדימה של ערכת נושא",
-    "useSSHTitleDesc": "עדכן את כותרת הכרטיסייה מכותרת החלון של המעטפת במקום שם המארח",
-    "useSSHTitleLabel": "השתמש בכותרת חלון SSH",
-    "enableTunnel": "הפעלת מנהרה",
-    "enableFileManager": "הפעל את מנהל הקבצים",
-    "enableDocker": "הפעל את Docker",
-    "startupSnippet": "קטע הפעלה",
-    "quickActions": "פעולות מהירות",
-    "proxmoxLastSyncStatus": {
-      "success": "הַצלָחָה"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} דילג (לא נמצאה כתובת IP)",
-    "proxmoxStatsUrlCopied": "כתובת האתר של סטטיסטיקות Proxmox הועתקה ללוח",
-    "rdpUrlCopied": "כתובת ה-URL של RDP הועתקה",
-    "vncUrlCopied": "כתובת האתר של VNC הועתקה",
-    "filterAuthStepca": "שלב CA",
-    "guac": {
-      "noCredential": "אין אישורים (אישורים ישירים מופיעים למטה)",
-      "authTypeDirect": "יָשִׁיר",
-      "authTypeCredential": "תְעוּדָה",
-      "authTypeNone": "אַף לֹא אֶחָד",
-      "recordingPath": "נתיב ההקלטה",
-      "recordingName": "שם ההקלטה",
-      "saveHostFirst": "שמור את המארח תחילה.",
-      "sharingOptionsAfterSave": "אפשרויות שיתוף זמינות לאחר שמירת המארח.",
-      "permissionLevel": "רמת הרשאה",
-      "typeHeader": "סוּג",
-      "targetHeader": "יַעַד",
-      "permissionHeader": "רְשׁוּת",
-      "cancelBtn": "לְבַטֵל",
-      "savingBtn": "חִסָכוֹן...",
-      "updateHostBtn": "עדכון מארח",
-      "addHostBtn": "הוסף מארח"
-    },
-    "filterAuthVault": "קִמרוֹן"
-  },
-  "nav": {
-    "history": "הִיסטוֹרִיָה",
-    "localTerminal": "מסוף מקומי",
-    "sshTools": "כלי SSH",
-    "terminal": "מָסוֹף",
-    "macros": "פקודות מאקרו"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "הקלד כאן כדי לשדר הקשות מקלדת...",
-    "copyOnSelect": "העתקת טקסט נבחר באופן אוטומטי",
-    "enableRightClickCopyPaste": "הפעלת העתקה/הדבקה באמצעות לחיצה ימנית",
-    "fillPassword": "מלא את הסיסמה",
-    "fillPasswordMissing": "אין סיסמה שמורה עבור {{count}} טרמינלים שנבחרו",
-    "fillPasswordSuccess": "מילאתי את הסיסמה במסוף/י {{count}}",
-    "keyRecordingTitle": "רישום מפתח",
-    "noTerminalTabsOpen": "אין לשוניות מסוף פתוחות",
-    "recordToTerminals": "הקלטה למסופים",
-    "selectAll": "כֹּל",
-    "selectNone": "אַף לֹא אֶחָד",
-    "selectTerminalsAbove": "בחר טרמינלים למעלה",
-    "settingsTitle": "הגדרות",
-    "startRecording": "התחל הקלטה",
-    "stopRecording": "הפסקת ההקלטה"
-  },
-  "keybindings": {
-    "copy": "העתקת הבחירה",
-    "paste": "לְהַדבִּיק",
-    "sendControlCode": "שלח אות Ctrl+אות",
-    "sendText": "שלח טקסט",
-    "controlCodeLabel": "מִכְתָב",
-    "textLabel": "טקסט לשליחה",
-    "appendEnterLabel": "לחץ על Enter לאחר השליחה",
-    "clipboardPermissionNote": "ייתכן שתבקש הרשאה ללוח בעת השימוש הראשון בדפדפנים מסוימים.",
-    "textRequired": "הזן את הטקסט לשליחה",
-    "controlCodeRequired": "הזן אות אחת עבור קוד הבקרה",
-    "builtIn": {
-      "copyCtrlC": "העתקת הבחירה (Ctrl+C, רק כאשר הטקסט נבחר)",
-      "copyCtrlShiftC": "העתקת בחירה (Ctrl+Shift+C)",
-      "copyCmdC": "העתקת בחירה (Cmd+C)",
-      "pasteCtrlShiftV": "הדבקה מהלוח (Ctrl+Shift+V)",
-      "ctrlW": "שלח Ctrl+W ל-shell (חסום מסגירת לשונית דפדפן)",
-      "ctrlT": "שלח Ctrl+T ל-shell (חסום פתיחת כרטיסיית דפדפן)",
-      "ctrlN": "שלח Ctrl+N ל-shell (חסום פתיחת חלון דפדפן)",
-      "ctrlQ": "שלח Ctrl+Q ל-shell (חסום את סגירת הדפדפן)"
-    }
-  },
-  "macros": {
-    "title": "פקודות מאקרו",
-    "description": "הפעל סדרה שמורה של פקודות בטרמינל, והגב למה שהשרת שולח בחזרה.",
-    "target": "יַעַד",
-    "noTerminal": "אין טרמינל פתוח",
-    "empty": "עדיין אין פקודות מאקרו",
-    "emptyHint": "צור מאקרו כדי להפוך זרימת מסוף לאוטומטית, כמו כניסה, הפעלה מחדש של שירות או מענה לבקשות.",
-    "create": "מאקרו חדש",
-    "back": "חזרה למאקרו",
-    "name": "שֵׁם",
-    "namePlaceholder": "הפעל מחדש את שרת האינטרנט",
-    "nameRequired": "תן שם למאקרו לפני השמירה",
-    "descriptionLabel": "תֵאוּר",
-    "descriptionPlaceholder": "מה המאקרו הזה עושה (אופציונלי)",
-    "unsaved": "שינויים שלא נשמרו",
-    "save": "לְהַצִיל",
-    "saved": "מאקרו נשמר",
-    "saveFailed": "לא ניתן היה לשמור את המאקרו",
-    "delete": "לִמְחוֹק",
-    "deleteTitle": "למחוק את המאקרו הזה?",
-    "deleteBody": "\"{{name}}\" יימחק לצמיתות. לא ניתן לבטל פעולה זו.",
-    "deleted": "מאקרו נמחק",
-    "cancel": "לְבַטֵל",
-    "run": "לָרוּץ",
-    "stop": "לְהַפְסִיק",
-    "running": "רִיצָה...",
-    "completed": "מאקרו הסתיים",
-    "failed": "מאקרו נכשל",
-    "loadFailed": "לא ניתן היה לטעון פקודות מאקרו",
-    "needTerminal": "פתח וחבר תחילה טרמינל",
-    "noSteps": "למאקרו הזה עדיין אין שלבים. הוסף אחד למטה.",
-    "addStep": "הוסף שלב",
-    "stepNumber": "שלב {{number}}",
-    "removeStep": "הסר שלב",
-    "confirmRunTitle": "להפעיל את המאקרו הזה?",
-    "confirmRunBody": "\"{{name}}\" ישלח פקודות אל {{host}}.",
-    "confirmRunAction": "הפעל מאקרו",
-    "stepTypes": {
-      "send": {
-        "label": "שלח פקודה",
-        "help": "מקליד טקסט לתוך הטרמינל, אותו הדבר כאילו הקלדת אותו."
-      },
-      "wait": {
-        "label": "המתן לפלט",
-        "help": "מושהה עד שהשרת ידפיס את הטקסט שציינת, כמו בקשת סיסמה."
-      },
-      "delay": {
-        "label": "הַפסָקָה",
-        "help": "ממתין פרק זמן קבוע לפני השלב הבא."
-      },
-      "if": {
-        "label": "אם הפלט מכיל",
-        "help": "בודק את כל מה שהשרת הדפיס עד כה, ולאחר מכן מפעיל אחד משני ענפים."
-      },
-      "repeat": {
-        "label": "לַחֲזוֹר עַל",
-        "help": "מריץ את השלבים בתוכו מספר קבוע של פעמים."
-      }
-    },
-    "send": {
-      "text": "פקודה או טקסט",
-      "textPlaceholder": "הפעל מחדש את nginx של systemctl",
-      "pressEnter": "לחץ על Enter לאחר השליחה",
-      "pressEnterHelp": "כבה אפשרות זו כדי להקליד טקסט מבלי לשלוח אותו."
-    },
-    "wait": {
-      "pattern": "המתן עד שהפלט יכיל",
-      "patternPlaceholder": "סִיסמָה:",
-      "timeout": "לוותר אחרי",
-      "onTimeout": "אם זה אף פעם לא מופיע",
-      "stop": "עצור את המאקרו",
-      "continue": "המשיכו בכל מקרה"
-    },
-    "delay": {
-      "duration": "חכה ל"
-    },
-    "ifStep": {
-      "pattern": "אם הפלט מכיל",
-      "patternPlaceholder": "פעיל: פעיל (רץ)",
-      "then": "אז תעשה את זה",
-      "else": "אחרת תעשו את זה",
-      "emptyBranch": "אין מדרגות"
-    },
-    "repeat": {
-      "count": "מספר פעמים",
-      "times": "פִּי"
-    },
-    "match": {
-      "useRegex": "התאמה עם ביטוי רגולרי",
-      "useRegexHelp": "השאר את זה כבוי כדי שהטקסט יתאים בדיוק כפי שנכתב.",
-      "invalidRegex": "ביטוי רגולרי לא תקין, הוא יתאים כטקסט רגיל"
-    },
-    "seconds": "שניות",
-    "secondsShort": "{{count}}ים"
-  },
-  "errors": {
-    "remoteServerRequired": "נדרש שרת מרוחק. יש להתחבר לשרת מרוחק בהגדרות כדי להשתמש בסוג חיבור זה."
-  },
-  "plugin": {
-    "name": "מסוף SSH"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/hi_IN.json b/plugins/ssh-terminal/locales/translated/hi_IN.json
deleted file mode 100644
index c6833266c..000000000
--- a/plugins/ssh-terminal/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "जोड़ें",
-    "arrowDown": "नीचे तीर",
-    "arrowLeft": "बाएँ तीर",
-    "arrowRight": "दाएँ तीर",
-    "arrowUp": "ऊपर तीर",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Del",
-    "done": "पूर्ण",
-    "editQuickKeys": "त्वरित कुंजियाँ संपादित करें",
-    "end": "एंड",
-    "esc": "Esc",
-    "home": "होम",
-    "pageDown": "PgDn",
-    "pageUp": "PgUp",
-    "paste": "चिपकाएँ",
-    "quickKeyPlaceholder": "उदा. sudo ",
-    "quickKeysDesc": "हटाने के लिए × पर टैप करें। अधिकतम 8 वर्ण समर्थित।",
-    "quickKeysTitle": "त्वरित कुंजियाँ",
-    "removeQuickKey": "हटाएँ",
-    "resetDefaults": "डिफ़ॉल्ट पर रीसेट करें",
-    "shift": "Shift",
-    "tab": "Tab"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "ऑटो-टीमक्स को सक्षम करने में विफल",
-    "autoTmuxEnabled": "{{host}}के लिए ऑटो-Tmux सक्षम किया गया है। यह अगले कनेक्शन से लागू होगा।",
-    "clipboardHttpWarning": "क्लिपबोर्ड पढ़ा नहीं जा सका। कुछ ब्राउज़र HTTPS के बाहर क्लिपबोर्ड एक्सेस को प्रतिबंधित करते हैं - इसके बजाय Ctrl+V का उपयोग करके देखें, या Termix को HTTPS पर चलाएं।",
-    "closeTab": "बंद करें",
-    "connecting": "कनेक्ट हो रहा है...",
-    "connectionLost": "कनेक्शन खो गया",
-    "connectionRejected": "सर्वर द्वारा कनेक्शन अस्वीकृत। कृपया अपनी प्रमाणीकरण और नेटवर्क कॉन्फ़िगरेशन जाँचें।",
-    "connectionTimeout": "कनेक्शन टाइमआउट",
-    "enableAutoTmuxAction": "ऑटो-tmux सक्षम करें",
-    "hostKeyRejected": "SSH होस्ट कुंजी सत्यापन अस्वीकृत। कनेक्शन रद्द किया गया।",
-    "linkDialogCopy": "कॉपी करें",
-    "linkDialogOpen": "खोलें",
-    "linkDialogTitle": "लिंक खोलें",
-    "maxReconnectAttemptsReached": "अधिकतम पुनः कनेक्ट प्रयास पूर्ण हो गए",
-    "noHostSelected": "कोई होस्ट चयनित नहीं",
-    "passwordPromptFillTitle": "क्या सहेजे गए पासवर्ड को इस प्रांप्ट में भरें?",
-    "reconnect": "पुनः कनेक्ट करें",
-    "reconnected": "पुनः कनेक्ट हुआ",
-    "reconnecting": "पुनः कनेक्ट हो रहा है... ({{attempt}}/{{max}})",
-    "autoReconnecting": "कनेक्शन टूट गया, पुनः कनेक्ट हो रहा है...",
-    "searchCaseSensitive": "मामले मिलाएं",
-    "searchClose": "बंद करें (एस्केप)",
-    "searchNext": "अगला मैच (प्रवेश करें)",
-    "searchNoResults": "कोई परिणाम नहीं",
-    "searchPlaceholder": "खोजो",
-    "searchPrevious": "पिछला मैच (शिफ्ट+एंटर)",
-    "searchRegex": "नियमित अभिव्यक्ति का उपयोग करें",
-    "searchResultCount": "{{index}} का {{count}}",
-    "searchWholeWord": "पूरे शब्द का मिलान करें",
-    "sessionExpiredNotice": "{{host}} पर आपका पिछला सत्र {{minutes}} मिनट बाद समाप्त हो गया; शेल और उसमें चल रही हर चीज़ समाप्त हो गई है। सत्रों को सक्रिय रखने के लिए इस होस्ट पर ऑटो-ट्मक्स सक्षम करें।",
-    "sessionExpiredNoticeNoMinutes": "{{host}} पर आपका पिछला सत्र डिस्कनेक्ट होने के दौरान समाप्त हो गया; शेल और उसमें चल रही हर चीज़ नष्ट हो गई है। सत्रों को सक्रिय रखने के लिए इस होस्ट पर ऑटो-ट्मक्स सक्षम करें।",
-    "sessionTakenOver": "सत्र किसी अन्य टैब में खोला गया था। पुनः कनेक्ट हो रहा है...",
-    "tmuxAttached": "अटैच किए गए क्लाइंट",
-    "tmuxAttachedCount": "{{count}} अटैच किए गए",
-    "tmuxCopyHint": "चयन समायोजित करें और क्लिपबोर्ड पर कॉपी करने के लिए Enter दबाएं",
-    "tmuxCreateNew": "नया सत्र प्रारंभ करें",
-    "tmuxDetached": "tmux सत्र से डिटैच हो गया",
-    "tmuxLastActivity": "अंतिम गतिविधि",
-    "tmuxSessionAttached": "tmux सत्र अटैच किया गया: {{name}}",
-    "tmuxSessionCreated": "tmux सत्र बनाया गया: {{name}}",
-    "tmuxSessionPickerDesc": "इस होस्ट पर मौजूदा tmux सत्र पाए गए। पुनः अटैच करने के लिए एक का चयन करें या नया सत्र बनाएं।",
-    "tmuxSessionPickerTitle": "tmux सत्र",
-    "tmuxTimeDays": "{{count}} दिन पहले",
-    "tmuxTimeHours": "{{count}} घंटे पहले",
-    "tmuxTimeJustNow": "अभी-अभी",
-    "tmuxTimeMinutes": "{{count}} मिनट पहले",
-    "tmuxUnavailable": "tmux रिमोट होस्ट पर स्थापित नहीं है, मानक शेल पर वापस लौट रहा है",
-    "tmuxWindowCount": "{{count}} विंडो",
-    "tmuxWindows": "विंडो",
-    "unknownError": "अज्ञात त्रुटि हुई",
-    "websocketAbnormalClose": "कनेक्शन अप्रत्याशित रूप से बंद हो गया। यह रिवर्स प्रॉक्सी या SSL कॉन्फ़िगरेशन समस्या के कारण हो सकता है। कृपया सर्वर लॉग जाँचें।",
-    "websocketError": "WebSocket कनेक्शन त्रुटि",
-    "clipboardReadFailed": "क्लिपबोर्ड से पढ़ने में विफल। सुनिश्चित करें कि क्लिपबोर्ड अनुमतियाँ दी गई हैं।",
-    "clipboardWriteFailed": "क्लिपबोर्ड पर कॉपी करने में विफल। सुनिश्चित करें कि पेज HTTPS या लोकलहोस्ट पर सर्व किया गया है।",
-    "connected": "कनेक्टेड",
-    "totpCodeLabel": "सत्यापन कोड",
-    "duplicateTab": "डुप्लिकेट टैब",
-    "imageChooseFile": "एक छवि फ़ाइल चुनें",
-    "imageUploaded": "छवि अपलोड की गई: {{path}}",
-    "imageClipboardUnavailable": "यह ब्राउज़र क्लिपबोर्ड से छवियों को नहीं पढ़ सकता है।",
-    "imageClipboardEmpty": "क्लिपबोर्ड में कोई छवि नहीं मिली",
-    "localShell": "स्थानीय टर्मिनल शेल",
-    "autocompleteHintComplete": "पूरा करने के लिए टैब या एंटर दबाएं",
-    "autocompleteHintNavigate": "ऊपर जाने के लिए ↑↓",
-    "autocompleteHintClose": "बंद करने के लिए Esc दबाएँ"
-  },
-  "terminalToolbar": {
-    "detachTmux": "tmux को अलग करें",
-    "detachTmuxDescription": "tmux सत्र को अलग करें",
-    "dismissError": "छवि त्रुटि को खारिज करें",
-    "hideToolbar": "उपकरण पट्टी छिपाओ",
-    "image": "छवि क्रियाएँ (केवल छवियाँ)",
-    "imageActionFailed": "छवि संबंधी कार्रवाई विफल रही",
-    "layout": "टूलबार डिस्प्ले मोड",
-    "layoutExpanded": "मैट्रिक्स के साथ विस्तारित",
-    "layoutIcon": "केवल आइकन",
-    "layoutLabeled": "आइकन और लेबल",
-    "moveToolbar": "टूलबार को स्थानांतरित करें",
-    "moveToolbarHint": "टूलबार की स्थिति बदलने के लिए उसे खींचें",
-    "paste": "छवि चिपकाएँ",
-    "pasteImage": "क्लिपबोर्ड से छवि पेस्ट करें (केवल छवियां)",
-    "retry": "पुनः प्रयास करें",
-    "showToolbar": "टूलबार विस्तारित करें",
-    "upload": "तस्विर अपलोड करना",
-    "uploadImage": "होस्ट पर एक छवि अपलोड करें",
-    "uploadingImage": "अपलोड हो रहा है..."
-  },
-  "history": {
-    "noTerminalSelected": "कोई टर्मिनल चयनित नहीं",
-    "noTerminalSelectedHint": "कमांड इतिहास देखने के लिए SSH टर्मिनल टैब खोलें",
-    "searchPlaceholder": "इतिहास खोजें...",
-    "clearAll": "सभी साफ़ करें",
-    "noHistoryEntries": "कोई इतिहास प्रविष्टियाँ नहीं",
-    "trackingDisabled": "इतिहास ट्रैकिंग अक्षम है",
-    "trackingDisabledHint": "इस होस्ट के SSH टर्मिनल टैब में कमांड हिस्ट्री चालू करें।",
-    "commandCount_one": "{{count}} कमांड",
-    "commandCount_other": "{{count}} आदेश"
-  },
-  "touchInput": {
-    "enabled": "टच इनपुट सक्षम करें",
-    "enabledDesc": "टर्मिनलों में एक उंगली से स्क्रॉल करने की सुविधा दें",
-    "momentumEnabled": "गति को सक्षम करें",
-    "momentumEnabledDesc": "स्वाइप करने के बाद थोड़ी देर स्क्रॉल करते रहें",
-    "advanced": "विकसित",
-    "resetDefaults": "डिफ़ॉल्ट पर रीसेट करें",
-    "dragThreshold": "ड्रैग थ्रेशहोल्ड",
-    "maxWheelDelta": "अधिकतम पहिया डेल्टा",
-    "momentumSampleWindow": "मोमेंटम सैंपल विंडो",
-    "releaseGracePeriod": "रिहाई की मोहलत",
-    "minimumVelocity": "न्यूनतम वेग",
-    "maximumVelocity": "अधिकतम वेग",
-    "maximumDuration": "अधिकतम अवधि",
-    "maximumTravel": "अधिकतम यात्रा",
-    "decayTime": "क्षय समय",
-    "pixelsPerTick": "पिक्सेल प्रति टिक",
-    "maximumFrameInterval": "अधिकतम फ्रेम अंतराल",
-    "maximumTicksPerFrame": "प्रति फ्रेम अधिकतम टिक"
-  },
-  "imageStorage": {
-    "instanceId": "टर्मिनल सत्र इंस्टेंस आईडी",
-    "instanceIdDesc": "आपके कनेक्टेड टर्मिनल टैब में से किसी एक का इंस्टेंस आईडी, जिसका उपयोग दृश्यता का परीक्षण करने के लिए किया जाता है।",
-    "selectedModeUnavailable": "अनुपलब्ध",
-    "test": "परीक्षण",
-    "testing": "परीक्षण...",
-    "testFailed": "इमेज स्टोरेज का परीक्षण विफल रहा",
-    "testConnected": "टर्मिनल सत्र कनेक्ट हो गया है।",
-    "testNotConnected": "इस इंस्टेंस आईडी के साथ कोई कनेक्टेड टर्मिनल सेशन नहीं है।",
-    "testSelectedMode": "अपलोड करने के लिए निम्न का उपयोग किया जाएगा: {{mode}}",
-    "testLocalVisible": "कनेक्टेड होस्ट से लोकल डायरेक्टरी दिखाई देती है।",
-    "testLocalNotVisible": "कनेक्टेड होस्ट से लोकल डायरेक्टरी दिखाई नहीं देती है।"
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "स्पर्श निवेश",
-        "images": "छवि संग्रहण",
-        "sessions": "सेशन",
-        "newHosts": "नए मेज़बान"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "टर्मिनल सत्र दृढ़ता",
-        "description": "सर्वर पर डिस्कनेक्ट होने के बाद टर्मिनल को बंद करने से पहले कितनी देर तक चालू रखा जाता है। न्यूनतम 1 मिनट, अधिकतम 1440 मिनट। इससे अधिक समय तक चलने वाले सेशन के लिए, होस्ट पर ऑटो-टीमक्स को सक्षम करें।"
-      },
-      "commandHistoryEnabled": {
-        "label": "कमांड इतिहास",
-        "description": "कमांड इतिहास रिकॉर्डिंग की अनुमति दें। अक्षम होने पर, प्रति-होस्ट सेटिंग्स की परवाह किए बिना इतिहास सहेजा नहीं जाता है।"
-      },
-      "commandHistoryForNewHosts": {
-        "label": "नए होस्ट के लिए कमांड इतिहास",
-        "description": "क्या नए होस्ट कमांड हिस्ट्री चालू होने के साथ शुरू होते हैं?"
-      },
-      "imageStorageMode": {
-        "label": "भंडारण मोड",
-        "description": "जहां पेस्ट और अपलोड की गई टर्मिनल इमेज लिखी जाती हैं। कनेक्शन के आधार पर ऑटो पिकिंग की सुविधा उपलब्ध है, लोकल और रिमोट (SFTP) कनेक्शन दोनों ही तय हैं।",
-        "auto": "स्वचालित",
-        "local": "स्थानीय",
-        "remoteSftp": "रिमोट (एसएफटीपी)"
-      },
-      "imageLocalDir": {
-        "label": "स्थानीय निर्देशिका",
-        "description": "Termix बैकएंड पर वह पूर्ण पथ जहाँ स्थानीय मोड छवियों को लिखता है। सहेजने के बाद कभी नहीं दिखाया जाता। खाली होने पर TERMIX_IMAGE_DIR का उपयोग होता है।"
-      },
-      "imageHostPath": {
-        "label": "होस्ट पथ",
-        "description": "टर्मिनल एजेंटों को प्राप्त होने वाली स्थानीय निर्देशिका का होस्ट-साइड दृश्य।"
-      },
-      "imageTtlMs": {
-        "label": "टीटीएल (मिलीमीटर)",
-        "description": "अपलोड की गई छवि को कितने समय तक रखा जाता है, मिलीसेकंड में। खाली मान TERMIX_IMAGE_TTL_MS या एक घंटे का उपयोग करता है।"
-      },
-      "imageMaxCount": {
-        "label": "अधिकतम छवि संख्या",
-        "description": "अधिकांश छवियां एक साथ रखी जाती हैं। खाली होने पर TERMIX_MAX_IMAGE_COUNT या 100 का उपयोग होता है।"
-      },
-      "imageMaxBytes": {
-        "label": "अधिकतम संग्रहण बाइट्स",
-        "description": "एक बार में संग्रहीत छवियों के अधिकतम बाइट्स। खाली स्थिति में TERMIX_MAX_IMAGE_STORAGE_BYTES या 5 GiB का उपयोग होता है।"
-      },
-      "sessionPersistence": {
-        "label": "डिस्कनेक्ट होने के बाद भी सेशन जारी रखें",
-        "description": "सर्वर पर डिस्कनेक्ट किए गए टर्मिनल को ऊपर बताए गए समय तक चालू रखें, ताकि उसका टैब दोबारा खोलने पर वहीं से काम शुरू हो सके जहां से रुका था।"
-      },
-      "newHostAutoTmux": {
-        "label": "ऑटो-टीमक्स",
-        "description": "नए होस्ट के टर्मिनलों को tmux के अंदर चलाएं ताकि डिस्कनेक्ट होने पर भी सेशन जारी रहें (इसके लिए होस्ट पर tmux होना आवश्यक है)।"
-      },
-      "newHostTheme": {
-        "label": "नए होस्ट के लिए थीम",
-        "description": "नए होस्ट के शुरू होने पर मिलने वाली टर्मिनल थीम।"
-      },
-      "newHostFontFamily": {
-        "label": "नए होस्ट के लिए फ़ॉन्ट",
-        "description": "वह टर्मिनल फॉन्ट जिससे कोई नया होस्ट शुरू होता है।"
-      },
-      "newHostFontSize": {
-        "label": "नए होस्ट के लिए फ़ॉन्ट आकार",
-        "description": "किसी नए होस्ट के शुरू होने पर टर्मिनल फॉन्ट का आकार, पिक्सल में।"
-      },
-      "newHostCursorStyle": {
-        "label": "नए होस्ट के लिए कर्सर शैली"
-      },
-      "newHostCursorBlink": {
-        "label": "नए होस्ट के लिए टिमटिमाता हुआ कर्सर"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "टर्मिनल टूलबार को सक्षम करें",
-        "description": "इस होस्ट के टूल्स और लाइव स्टैट्स के लिए सक्रिय टर्मिनल से जुड़ा एक त्वरित-पहुँच टूलबार दिखाएँ।"
-      },
-      "terminalToolbarPosition": {
-        "label": "टूलबार की स्थिति",
-        "description": "टर्मिनल में टूलबार जहां स्थित होता है, आप उसे वहां से भी खींच सकते हैं।",
-        "bottom": "निचला बीच का",
-        "bottomLeft": "तली छोड़ें",
-        "bottomRight": "नीचे दाएं",
-        "top": "शीर्ष केंद्र",
-        "topLeft": "बाएं से बाएं",
-        "topRight": "ठीक तरह से ऊपर"
-      },
-      "terminalToolbarStartState": {
-        "label": "टूलबार प्रारंभ स्थिति",
-        "description": "टर्मिनल कनेक्ट होने पर टूलबार विस्तारित रूप में खुलता है या न्यूनतम रूप में?",
-        "expanded": "विस्तारित",
-        "collapsed": "कम से कम"
-      },
-      "terminalToolbarDisplay": {
-        "label": "टूलबार डिस्प्ले मोड",
-        "description": "टूलबार बटन कैसे प्रदर्शित होते हैं। अंतिम बार उपयोग किए गए बटन टूलबार में आपके द्वारा चुने गए बटन को ही प्रदर्शित करते हैं।",
-        "remember": "अंतिम समय प्रयोग हुआ",
-        "icon": "केवल आइकन",
-        "labeled": "आइकन और लेबल",
-        "expanded": "आंकड़ों के साथ विस्तारित"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "लाइव आंकड़े दिखाएं",
-        "description": "विस्तारित मोड में टूलबार बटन के ऊपर लाइव होस्ट के आँकड़े दिखाएँ"
-      },
-      "terminalToolbarFade": {
-        "label": "निष्क्रिय होने पर धीरे-धीरे कम हो जाता है",
-        "description": "जब तक आप उस पर माउस नहीं ले जाते, तब तक टूलबार धीरे-धीरे गायब होता रहेगा।"
-      },
-      "enableCommandHistory": {
-        "label": "कमांड इतिहास",
-        "description": "इतिहास और स्वतः पूर्ण के लिए इस टर्मिनल में चलाए गए कमांड रिकॉर्ड करें"
-      },
-      "enableTerminal": {
-        "label": "टर्मिनल सक्षम करें",
-        "description": "इस होस्ट के लिए एक SSH टर्मिनल उपलब्ध कराएं।"
-      },
-      "inheritAppearance": {
-        "label": "उपयोगकर्ता डिफ़ॉल्ट का उपयोग करें"
-      },
-      "theme": {
-        "label": "थीम"
-      },
-      "cursorBlink": {
-        "label": "टिमटिमाता हुआ कर्सर"
-      },
-      "cursorStyle": {
-        "label": "कर्सर शैली"
-      },
-      "fontSize": {
-        "label": "फ़ॉन्ट आकार"
-      },
-      "fontFamily": {
-        "label": "फ़ॉन्ट"
-      },
-      "scrollback": {
-        "label": "स्क्रॉल बैक"
-      },
-      "letterSpacing": {
-        "label": "पत्र अंतराल"
-      },
-      "lineHeight": {
-        "label": "ऊंची लाईन"
-      },
-      "bellStyle": {
-        "label": "घंटी"
-      },
-      "minimumContrastRatio": {
-        "label": "न्यूनतम कंट्रास्ट अनुपात"
-      },
-      "backgroundImage": {
-        "label": "पृष्ठभूमि छवि"
-      },
-      "backgroundImageOpacity": {
-        "label": "पृष्ठभूमि छवि अपारदर्शिता"
-      },
-      "customThemeColors": {
-        "label": "कस्टम थीम रंग"
-      },
-      "rightClickSelectsWord": {
-        "label": "दायाँ क्लिक करने पर शब्द का चयन होता है"
-      },
-      "macOptionIsMeta": {
-        "label": "विकल्प मेटा है"
-      },
-      "fastScrollModifier": {
-        "label": "तेज़ स्क्रॉल कुंजी"
-      },
-      "fastScrollSensitivity": {
-        "label": "तेज़ स्क्रॉल गति"
-      },
-      "backspaceMode": {
-        "label": "बैकस्पेस"
-      },
-      "autoMosh": {
-        "label": "ऑटो मोश"
-      },
-      "moshCommand": {
-        "label": "मोश कमांड"
-      },
-      "autoTmux": {
-        "label": "ऑटो tmux"
-      },
-      "useSSHTitle": {
-        "label": "SSH शीर्षक का उपयोग करें"
-      },
-      "syntaxHighlighting": {
-        "label": "वाक्य - विन्यास पर प्रकाश डालना"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "सिंटैक्स हाइलाइटिंग श्रेणियाँ"
-      },
-      "linkClickBehavior": {
-        "label": "लिंक पर क्लिक करें"
-      },
-      "localEcho": {
-        "label": "स्थानीय प्रतिध्वनि"
-      },
-      "passwordPromptAutoFill": {
-        "label": "पासवर्ड भरने के लिए दिए गए निर्देशों का पालन करने का प्रस्ताव दें"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "sudo प्रॉम्प्ट भरें"
-      },
-      "autoReconnect": {
-        "label": "स्वचालित रूप से पुनः कनेक्ट करें"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "कमांड ऑटोकम्प्लीट",
-        "description": "टैब दबाने पर टाइप करते समय ऑटो-कंप्लीट दिखाएं"
-      },
-      "localEcho": {
-        "label": "स्थानीय प्रतिध्वनि",
-        "description": "सुरक्षित स्थानीय कीस्ट्रोक पूर्वानुमान का उपयोग करके इनपुट विलंबता को कम करें"
-      },
-      "linkClickBehavior": {
-        "label": "टर्मिनल लिंक क्लिक",
-        "description": "टर्मिनल में लिंक क्लिक करने पर डिफ़ॉल्ट व्यवहार"
-      },
-      "customThemes": {
-        "label": "सहेजे गए विषय"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "स्थानीय टर्मिनल"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "लाइव टर्मिनल सत्रों का उपयोग करें",
-      "description": "यह सेशन शेयरिंग और रिकॉर्डिंग जैसी अन्य सुविधाओं को आपके लाइव टर्मिनल सेशन तक पहुंचने की अनुमति देता है।"
-    },
-    "history": {
-      "title": "कमांड इतिहास पढ़ें",
-      "description": "इससे एआई असिस्टेंट जैसी अन्य सुविधाएं आपके कमांड इतिहास को पढ़ सकती हैं।"
-    }
-  },
-  "hosts": {
-    "tabTerminal": "टर्मिनल",
-    "addHost": "होस्ट जोड़ें",
-    "applyGlobalThemeTooltip": "इस थीम को लागू करें",
-    "backgroundImageDesc": "टर्मिनल पृष्ठभूमि छवि के लिए वैकल्पिक URL",
-    "backgroundImageLabel": "पृष्ठभूमि छवि URL",
-    "backgroundImageOpacityLabel": "पृष्ठभूमि छवि अपारदर्शिता",
-    "backspaceMode": "बैकस्पेस मोड",
-    "backspaceModeControlH": "कंट्रोल-एच (बीएस)",
-    "backspaceModeLabel": "बैकस्पेस मोड",
-    "backspaceModeNormal": "सामान्य (डीईएल)",
-    "behaviorAndAdvanced": "व्यवहार और उन्नत",
-    "bellStyle": "बेल शैली",
-    "bellStyleBoth": "दोनों",
-    "bellStyleLabel": "घंटी शैली",
-    "bellStyleNone": "कोई नहीं",
-    "bellStyleSound": "आवाज़",
-    "bellStyleVisual": "तस्वीर",
-    "colorTheme": "रंग थीम",
-    "cursorBlink": "कर्सर ब्लिंक",
-    "cursorBlinking": "कर्सर झपकना",
-    "cursorBlinkingDesc": "टर्मिनल कर्सर के लिए झपकने वाला एनीमेशन सक्षम करें",
-    "cursorStyle": "कर्सर शैली",
-    "cursorStyleBar": "छड़",
-    "cursorStyleBlock": "अवरोध पैदा करना",
-    "cursorStyleLabel": "कर्सर शैली",
-    "cursorStyleUnderline": "रेखांकन",
-    "customThemeAnsiColors": "ANSI रंग",
-    "customThemeBackground": "पृष्ठभूमि",
-    "customThemeBlack": "काला",
-    "customThemeBlue": "नीला",
-    "customThemeBrightBlack": "चमकदार काला",
-    "customThemeBrightBlue": "चमकदार नीला",
-    "customThemeBrightCyan": "चमकदार सियान",
-    "customThemeBrightGreen": "चमकदार हरा",
-    "customThemeBrightMagenta": "चमकदार मैजेंटा",
-    "customThemeBrightRed": "चमकदार लाल",
-    "customThemeBrightWhite": "चमकदार सफेद",
-    "customThemeBrightYellow": "चमकदार पीला",
-    "customThemeColors": "कस्टम रंग",
-    "customThemeCursor": "कर्सर",
-    "customThemeCursorAccent": "कर्सर एक्सेंट",
-    "customThemeCyan": "सियान",
-    "customThemeForeground": "अग्रभूमि",
-    "customThemeGreen": "हरा",
-    "customThemeMagenta": "मैजेंटा",
-    "customThemeRed": "लाल",
-    "customThemeResetTooltip": "डिफ़ॉल्ट पर रीसेट करें",
-    "customThemeSelection": "चयन",
-    "customThemeWhite": "सफेद",
-    "customThemeYellow": "पीला",
-    "deleteGlobalThemeTooltip": "इस थीम को हटाएँ",
-    "docsLink": "दस्तावेज़ देखें",
-    "enableAutoMosh": "ऑटो-मोश सक्षम करें",
-    "enableAutoMoshDesc": "यदि उपलब्ध हो तो SSH के बजाय Mosh को प्राथमिकता दें",
-    "enableAutoTmux": "ऑटो-tmux सक्षम करें",
-    "enableAutoTmuxDesc": "अपने शेल और उसमें चल रहे किसी भी चीज़ को डिस्कनेक्ट होने और ब्राउज़र के रीस्टार्ट होने पर भी चालू रखने के लिए, tmux के अंदर चलाएँ (होस्ट पर tmux इंस्टॉल होना चाहिए)।",
-    "fastScrollModifier": "फास्ट स्क्रॉल मॉडिफ़ायर",
-    "fastScrollModifierAlt": "Alt",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "तेज़ स्क्रॉल संशोधक",
-    "fastScrollModifierShift": "Shift",
-    "fastScrollSensitivity": "फास्ट स्क्रॉल संवेदनशीलता",
-    "fastScrollSensitivityLabel": "तेज़ स्क्रॉल संवेदनशीलता",
-    "fontFamily": "फ़ॉन्ट परिवार",
-    "fontFamilyCustomHint": "किसी पहले से इंस्टॉल किए गए फॉन्ट को चुनें, या कस्टम चुनें और अपने सिस्टम पर पहले से इंस्टॉल किए गए फॉन्ट का नाम लिखें (जैसे MesloLGS NF, Noto Sans Mono)। Termix आपके लिए फॉन्ट इंस्टॉल नहीं कर सकता, इसलिए पहले इसे अपने ऑपरेटिंग सिस्टम पर इंस्टॉल करें।",
-    "fontFamilyCustomOption": "रिवाज़...",
-    "fontFamilyCustomPlaceholder": "फ़ॉन्ट का सटीक नाम, उदाहरण के लिए MesloLGS NF",
-    "fontFamilyLabel": "फ़ॉन्ट परिवार",
-    "fontSize": "फ़ॉन्ट आकार",
-    "fontSizeLabel": "फ़ॉन्ट आकार",
-    "hostNotFound": "होस्ट नहीं मिला",
-    "letterSpacing": "अक्षर अंतराल",
-    "letterSpacingPx": "अक्षर अंतराल (px)",
-    "lineHeight": "पंक्ति ऊंचाई",
-    "lineHeightLabel": "पंक्ति ऊंचाई",
-    "linkClickBehaviorConfirm": "खोलने या कॉपी करने के लिए पॉपअप दिखाएं",
-    "linkClickBehaviorDesc": "टर्मिनल में लिंक क्लिक करने पर क्या होता है यह नियंत्रित करता है। ऐप-स्तरीय सेटिंग का अनुसरण करने के लिए 'डिफ़ॉल्ट' का उपयोग करें।",
-    "linkClickBehaviorDirect": "सीधे खोलें",
-    "linkClickBehaviorLabel": "लिंक क्लिक व्यवहार",
-    "loadingHost": "होस्ट लोड हो रहा है...",
-    "localEchoAuto": "स्वचालित",
-    "localEchoDesc": "धीमे कनेक्शन पर स्थानीय रूप से सुरक्षित और प्रिंट करने योग्य कीस्ट्रोक्स का अनुमान लगाएं। पासवर्ड प्रॉम्प्ट और नियंत्रण इनपुट कभी भी प्रदर्शित नहीं होते हैं।",
-    "localEchoLabel": "स्थानीय प्रतिध्वनि",
-    "localEchoOff": "बंद",
-    "localEchoOn": "हमेशा बने रहें",
-    "macOptionIsMetaLabel": "विकल्प कुंजी मेटा भेजती है",
-    "macOptionIsMetaShortDesc": "macOS पर Option/Alt कुंजी के साथ विशेष वर्ण (जैसे @ या |) टाइप करने को अक्षम करें, Meta भेजने के बजाय",
-    "moshCommand": "MOSH कमांड",
-    "moshCommandLabel": "Mosh कमांड",
-    "noSavedThemes": "अभी तक कोई थीम सेव नहीं की गई है",
-    "none": "कोई नहीं",
-    "passwordPromptAutoFillDesc": "जब टर्मिनल पासवर्ड मांगे तो सहेजा हुआ पासवर्ड भरने का विकल्प दें। इस होस्ट पर कभी भी पासवर्ड स्वतः न भरने के लिए इसे बंद कर दें।",
-    "passwordPromptAutoFillLabel": "पासवर्ड ऑटो-फिल की सुविधा प्रदान करें",
-    "autoReconnectLabel": "ऑटो जुड़े",
-    "autoReconnectDesc": "नेटवर्क में किसी तरह की गड़बड़ी या स्लीप मोड के बाद SSH कनेक्शन टूटने पर यह अपने आप फिर से कनेक्ट हो जाता है। स्क्रॉलबैक बरकरार रहता है।",
-    "rightClickSelectsWord": "राइट क्लिक शब्द चयन",
-    "rightClickSelectsWordLabel": "राइट-क्लिक शब्द चुनता है",
-    "rightClickSelectsWordShortDesc": "राइट-क्लिक पर कर्सर के नीचे का शब्द चुनें",
-    "saveAsGlobalTheme": "वैश्विक थीम के रूप में सहेजें",
-    "saveGlobalThemeError": "थीम सहेजने में विफल",
-    "saveGlobalThemeNamePrompt": "इस थीम के लिए एक नाम दर्ज करें",
-    "saveGlobalThemeSuccess": "थीम सहेजी गई",
-    "savedThemesLabel": "सहेजे गए विषय",
-    "scrollbackBufferLabel": "स्क्रॉलबैक बफ़र",
-    "scrollbackMaxLines": "इतिहास में रखी जाने वाली लाइनों की अधिकतम संख्या",
-    "sudoPasswordAutoFill": "sudo पासवर्ड ऑटो-फिल",
-    "sudoPasswordAutoFillDesc": "sudo पासवर्ड संग्रहीत करें ताकि होस्ट मेट्रिक्स, टर्मिनल संकेत और अन्य स्वचालित रूप से विशेषाधिकार प्राप्त कमांड चला सकें।",
-    "sudoPasswordAutoFillLabel": "sudo पासवर्ड स्वतः-भरण",
-    "syntaxCategoryIpAddresses": "IP पते",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "लॉग स्तर",
-    "syntaxCategoryLogLevelsDesc": "error, warn, info, debug, fatal",
-    "syntaxCategoryNumbers": "लेबल की गई संख्याएँ",
-    "syntaxCategoryNumbersDesc": "port 8080, exit 1, status 404",
-    "syntaxCategoryPaths": "फ़ाइल पथ",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "समय-चिह्न",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 2024-01-15",
-    "syntaxCategoryUrls": "URL",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "टर्मिनल आउटपुट को रंगीन करें (त्रुटियाँ, पथ, IP, समय-चिह्न)",
-    "syntaxHighlightingLabel": "सिंटैक्स हाइलाइटिंग",
-    "terminalAppearance": "टर्मिनल स्वरूप",
-    "theme": "थीम",
-    "themePreview": "थीम पूर्वावलोकन",
-    "useSSHTitleDesc": "टैब शीर्षक को होस्ट नाम के बजाय शेल की विंडो शीर्षक से अपडेट करें",
-    "useSSHTitleLabel": "SSH विंडो शीर्षक का उपयोग करें",
-    "enableTunnel": "टनल सक्षम करें",
-    "enableFileManager": "फ़ाइल प्रबंधक सक्षम करें",
-    "enableDocker": "Docker सक्षम करें",
-    "startupSnippet": "स्टार्टअप स्निपेट",
-    "quickActions": "त्वरित कार्रवाइयाँ",
-    "proxmoxLastSyncStatus": {
-      "success": "सफलता"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} को छोड़ दिया गया (कोई आईपी नहीं मिला)",
-    "proxmoxStatsUrlCopied": "Proxmox Stats URL क्लिपबोर्ड पर कॉपी हो गया है",
-    "rdpUrlCopied": "RDP URL कॉपी किया गया",
-    "vncUrlCopied": "VNC URL कॉपी किया गया",
-    "filterAuthStepca": "स्टेप सीए",
-    "guac": {
-      "noCredential": "कोई क्रेडेंशियल नहीं (नीचे सीधे क्रेडेंशियल)",
-      "authTypeDirect": "सीधा",
-      "authTypeCredential": "क्रेडेंशियल",
-      "authTypeNone": "कोई नहीं",
-      "recordingPath": "रिकॉर्डिंग पथ",
-      "recordingName": "रिकॉर्डिंग नाम",
-      "saveHostFirst": "पहले होस्ट सहेजें।",
-      "sharingOptionsAfterSave": "साझाकरण विकल्प होस्ट सहेजे जाने के बाद उपलब्ध हैं।",
-      "permissionLevel": "अनुमति स्तर",
-      "typeHeader": "प्रकार",
-      "targetHeader": "लक्ष्य",
-      "permissionHeader": "अनुमति",
-      "cancelBtn": "रद्द करें",
-      "savingBtn": "सहेज रहा है...",
-      "updateHostBtn": "होस्ट अपडेट करें",
-      "addHostBtn": "होस्ट जोड़ें"
-    },
-    "filterAuthVault": "मेहराब"
-  },
-  "nav": {
-    "history": "इतिहास",
-    "localTerminal": "स्थानीय टर्मिनल",
-    "sshTools": "SSH टूल्स",
-    "terminal": "टर्मिनल",
-    "macros": "मैक्रो"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "कीस्ट्रोक्स प्रसारित करने के लिए यहाँ टाइप करें...",
-    "copyOnSelect": "चयनित टेक्स्ट को स्वचालित रूप से कॉपी करें",
-    "enableRightClickCopyPaste": "राइट-क्लिक कॉपी/पेस्ट सक्षम करें",
-    "fillPassword": "पासवर्ड भरें",
-    "fillPasswordMissing": "{{count}} चयनित टर्मिनल(ों) के लिए कोई सहेजा गया पासवर्ड नहीं",
-    "fillPasswordSuccess": "{{count}} टर्मिनल(ों) में पासवर्ड भरा गया",
-    "keyRecordingTitle": "की रिकॉर्डिंग",
-    "noTerminalTabsOpen": "कोई टर्मिनल टैब खुला नहीं है",
-    "recordToTerminals": "टर्मिनलों में रिकॉर्ड करें",
-    "selectAll": "सभी",
-    "selectNone": "कोई नहीं",
-    "selectTerminalsAbove": "ऊपर के टर्मिनल चुनें",
-    "settingsTitle": "सेटिंग्स",
-    "startRecording": "रिकॉर्डिंग शुरू करें",
-    "stopRecording": "रिकॉर्डिंग रोकें"
-  },
-  "keybindings": {
-    "copy": "चयन की प्रतिलिपि बनाएँ",
-    "paste": "चिपकाएँ",
-    "sendControlCode": "Ctrl+अक्षर सिग्नल भेजें",
-    "sendText": "संदेश भेजें",
-    "controlCodeLabel": "पत्र",
-    "textLabel": "भेजने के लिए संदेश",
-    "appendEnterLabel": "भेजने के बाद एंटर दबाएँ",
-    "clipboardPermissionNote": "कुछ ब्राउज़रों में पहली बार उपयोग करने पर क्लिपबोर्ड की अनुमति मांगी जा सकती है।",
-    "textRequired": "भेजने के लिए टेक्स्ट दर्ज करें",
-    "controlCodeRequired": "नियंत्रण कोड के लिए एक अक्षर दर्ज करें",
-    "builtIn": {
-      "copyCtrlC": "चयनित सामग्री को कॉपी करें (Ctrl+C, केवल तभी जब टेक्स्ट चयनित हो)",
-      "copyCtrlShiftC": "चयनित सामग्री को कॉपी करें (Ctrl+Shift+C)",
-      "copyCmdC": "चयनित सामग्री को कॉपी करें (Cmd+C)",
-      "pasteCtrlShiftV": "क्लिपबोर्ड से पेस्ट करें (Ctrl+Shift+V)",
-      "ctrlW": "ब्राउज़र टैब बंद करने से प्रतिबंधित (शेल पर Ctrl+W भेजें)",
-      "ctrlT": "ब्राउज़र टैब खोलने से अवरुद्ध करने के लिए Ctrl+T को शेल पर भेजें",
-      "ctrlN": "शेल खोलने के लिए Ctrl+N भेजें (ब्राउज़र विंडो खोलने से अवरुद्ध)",
-      "ctrlQ": "ब्राउज़र बंद करने से रोकने के लिए Ctrl+Q दबाकर शेल खोलें।"
-    }
-  },
-  "macros": {
-    "title": "मैक्रो",
-    "description": "टर्मिनल में सहेजे गए कमांडों की एक श्रृंखला चलाएं, और सर्वर द्वारा वापस भेजे गए कमांडों पर प्रतिक्रिया दें।",
-    "target": "लक्ष्य",
-    "noTerminal": "कोई टर्मिनल खुला नहीं है",
-    "empty": "अभी तक कोई मैक्रो नहीं है",
-    "emptyHint": "लॉग इन करना, किसी सेवा को रीस्टार्ट करना या प्रॉम्प्ट का जवाब देना जैसे टर्मिनल कार्यों को स्वचालित करने के लिए एक मैक्रो बनाएं।",
-    "create": "नया मैक्रो",
-    "back": "मैक्रोज़ पर वापस जाएँ",
-    "name": "नाम",
-    "namePlaceholder": "वेब सर्वर को पुनः आरंभ करें",
-    "nameRequired": "मैक्रो को सेव करने से पहले उसे एक नाम दें।",
-    "descriptionLabel": "विवरण",
-    "descriptionPlaceholder": "यह मैक्रो क्या करता है (वैकल्पिक)",
-    "unsaved": "सहेजे न गए परिवर्तन",
-    "save": "सहेजें",
-    "saved": "मैक्रो सहेजा गया",
-    "saveFailed": "मैक्रो को सहेजा नहीं जा सका",
-    "delete": "हटाएँ",
-    "deleteTitle": "क्या इस मैक्रो को हटा दें?",
-    "deleteBody": "\"{{name}}\" को स्थायी रूप से हटा दिया जाएगा। इसे पूर्ववत नहीं किया जा सकता है।",
-    "deleted": "मैक्रो हटा दिया गया",
-    "cancel": "रद्द करें",
-    "run": "चलाएं",
-    "stop": "स्टॉप",
-    "running": "दौड़ना...",
-    "completed": "मैक्रो समाप्त हो गया",
-    "failed": "मैक्रो विफल रहा",
-    "loadFailed": "मैक्रो लोड नहीं हो सके",
-    "needTerminal": "सबसे पहले एक टर्मिनल खोलें और उससे कनेक्ट करें।",
-    "noSteps": "इस मैक्रो में अभी तक कोई चरण नहीं है। कृपया नीचे एक चरण जोड़ें।",
-    "addStep": "चरण जोड़ें",
-    "stepNumber": "चरण {{number}}",
-    "removeStep": "चरण हटाएँ",
-    "confirmRunTitle": "क्या आप इस मैक्रो को चलाना चाहते हैं?",
-    "confirmRunBody": "\"{{name}}\" {{host}} को कमांड भेजेगा।",
-    "confirmRunAction": "मैक्रो चलाएँ",
-    "stepTypes": {
-      "send": {
-        "label": "कमांड भेजें",
-        "help": "यह टर्मिनल में ठीक उसी तरह टेक्स्ट टाइप करता है जैसे आप उसे खुद टाइप करते हैं।"
-      },
-      "wait": {
-        "label": "आउटपुट की प्रतीक्षा करें",
-        "help": "यह तब तक रुका रहता है जब तक सर्वर आपके द्वारा बताए गए टेक्स्ट को प्रिंट नहीं कर देता, जैसे पासवर्ड प्रॉम्प्ट।"
-      },
-      "delay": {
-        "label": "विराम",
-        "help": "अगले चरण से पहले एक निश्चित समय तक प्रतीक्षा करता है।"
-      },
-      "if": {
-        "label": "यदि आउटपुट में शामिल है",
-        "help": "यह सर्वर द्वारा अब तक प्रिंट की गई हर चीज़ की जाँच करता है, फिर दो शाखाओं में से एक को चलाता है।"
-      },
-      "repeat": {
-        "label": "दोहराना",
-        "help": "इसके अंदर के चरणों को निर्धारित संख्या में बार-बार दोहराता है।"
-      }
-    },
-    "send": {
-      "text": "आदेश या पाठ",
-      "textPlaceholder": "systemctl restart nginx",
-      "pressEnter": "भेजने के बाद एंटर दबाएँ",
-      "pressEnterHelp": "इसे बंद करने पर आपको टेक्स्ट टाइप करने के बाद उसे सबमिट करने की आवश्यकता नहीं होगी।"
-    },
-    "wait": {
-      "pattern": "आउटपुट में यह जानकारी आने तक प्रतीक्षा करें",
-      "patternPlaceholder": "पासवर्ड:",
-      "timeout": "हार मान लो",
-      "onTimeout": "अगर यह कभी प्रकट नहीं होता",
-      "stop": "मैक्रो को रोकें",
-      "continue": "फिर भी आगे बढ़ते रहो।"
-    },
-    "delay": {
-      "duration": "के लिए प्रतीक्षा करें"
-    },
-    "ifStep": {
-      "pattern": "यदि आउटपुट में शामिल है",
-      "patternPlaceholder": "सक्रिय: सक्रिय (चल रहा)",
-      "then": "फिर ऐसा करें",
-      "else": "अन्यथा ऐसा करें",
-      "emptyBranch": "कोई कदम नहीं"
-    },
-    "repeat": {
-      "count": "कितनी बार",
-      "times": "टाइम्स"
-    },
-    "match": {
-      "useRegex": "नियमित अभिव्यक्ति के साथ मिलान करें",
-      "useRegexHelp": "इसे हटा दें ताकि यह लिखे गए पाठ से बिल्कुल मेल खाए।",
-      "invalidRegex": "यह एक मान्य रेगुलर एक्सप्रेशन नहीं है, इसे सादे टेक्स्ट के रूप में ही माना जाएगा।"
-    },
-    "seconds": "सेकंड",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "रिमोट सर्वर आवश्यक है। इस कनेक्शन प्रकार का उपयोग करने के लिए सेटिंग्स में जाकर रिमोट सर्वर कनेक्ट करें।"
-  },
-  "plugin": {
-    "name": "SSH टर्मिनल"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/hu_HU.json b/plugins/ssh-terminal/locales/translated/hu_HU.json
deleted file mode 100644
index 66be96735..000000000
--- a/plugins/ssh-terminal/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Hozzáadás",
-    "arrowDown": "Lefelé mutató nyíl",
-    "arrowLeft": "Balra nyíl",
-    "arrowRight": "Jobbra nyíl",
-    "arrowUp": "Felfelé nyíl",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Del",
-    "done": "Kész",
-    "editQuickKeys": "Gyorsbillentyűk szerkesztése",
-    "end": "Vége",
-    "esc": "Esc",
-    "home": "Otthon",
-    "pageDown": "PgDn",
-    "pageUp": "PgUp",
-    "paste": "Paszta",
-    "quickKeyPlaceholder": "pl. sudo ",
-    "quickKeysDesc": "Koppintson a × jelre az eltávolításhoz. Legfeljebb 8 karaktert támogat.",
-    "quickKeysTitle": "Gyorsbillentyűk",
-    "removeQuickKey": "Eltávolítás",
-    "resetDefaults": "Alapértelmezett beállítások visszaállítása",
-    "shift": "Váltás",
-    "tab": "Fül"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Nem sikerült engedélyezni az Auto-Tmux-ot",
-    "autoTmuxEnabled": "Auto-Tmux engedélyezve a {{host}}számára. A következő kapcsolattól érvényes.",
-    "clipboardHttpWarning": "Nem sikerült beolvasni a vágólapot. Néhány böngésző korlátozza a vágólap elérését HTTPS-en kívül - próbálja ki a Ctrl+V billentyűkombinációt, vagy HTTPS-en keresztül szolgáltassa ki a Termixet.",
-    "closeTab": "Közeli",
-    "connecting": "Kapcsolódás...",
-    "connectionLost": "Kapcsolat megszakadt",
-    "connectionRejected": "A szerver elutasította a kapcsolatot. Kérjük, ellenőrizze a hitelesítést és a hálózati konfigurációt.",
-    "connectionTimeout": "Kapcsolati időtúllépés",
-    "enableAutoTmuxAction": "Auto-Tmux engedélyezése",
-    "hostKeyRejected": "SSH host kulcs ellenőrzése elutasítva. Kapcsolat megszakítva.",
-    "linkDialogCopy": "Másolat",
-    "linkDialogOpen": "Nyitott",
-    "linkDialogTitle": "Link megnyitása",
-    "maxReconnectAttemptsReached": "Elérte az újracsatlakozási kísérletek maximális számát",
-    "noHostSelected": "Nincs kiválasztva gazdagép",
-    "passwordPromptFillTitle": "Írja be a mentett jelszót ebbe a mezőbe?",
-    "reconnect": "Újracsatlakozás",
-    "reconnected": "Sikeresen újrakapcsolódott",
-    "reconnecting": "Újracsatlakozás... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Kapcsolat megszakadt, újracsatlakozás...",
-    "searchCaseSensitive": "Gyufa tok",
-    "searchClose": "Bezárás (Escape)",
-    "searchNext": "Következő találat (Enter)",
-    "searchNoResults": "Nincs találat",
-    "searchPlaceholder": "Lelet",
-    "searchPrevious": "Előző találat (Shift+Enter)",
-    "searchRegex": "Reguláris kifejezés használata",
-    "searchResultCount": "{{index}} a {{count}}-ból",
-    "searchWholeWord": "Egész szó egyezése",
-    "sessionExpiredNotice": "Az előző munkameneted a következő helyen: {{host}} lejárt {{minutes}} perc leválasztás után; a shell és minden, ami benne fut, eltűnt. Kapcsold be az Auto-Tmux-ot ezen a gépen a munkamenetek életben tartásához.",
-    "sessionExpiredNoticeNoMinutes": "Az előző munkameneted a {{host}} gépen lejárt, miközben le voltál választva; a shell és minden benne futó dolog elveszett. Kapcsold be az Auto-Tmuxot ezen a gépen a munkamenetek életben tartásához.",
-    "sessionTakenOver": "A munkamenet egy másik lapon nyílt meg. Újrakapcsolódás...",
-    "tmuxAttached": "Csatlakoztatott ügyfelek",
-    "tmuxAttachedCount": "{{count}} csatolva",
-    "tmuxCopyHint": "Módosítsa a kijelölést, és nyomja meg az Enter billentyűt a vágólapra másoláshoz",
-    "tmuxCreateNew": "Új munkamenet indítása",
-    "tmuxDetached": "Leválasztva a tmux munkamenetről",
-    "tmuxLastActivity": "Utolsó tevékenység",
-    "tmuxSessionAttached": "tmux munkamenet csatolva: {{name}}",
-    "tmuxSessionCreated": "tmux munkamenet létrehozva: {{name}}",
-    "tmuxSessionPickerDesc": "Meglévő tmux munkamenetek találhatók ezen a gazdagépen. Válasszon ki egyet az újracsatlakozáshoz, vagy hozzon létre egy új munkamenetet.",
-    "tmuxSessionPickerTitle": "tmux munkamenetek",
-    "tmuxTimeDays": "{{count}}nappal ezelőtt",
-    "tmuxTimeHours": "{{count}}órával ezelőtt",
-    "tmuxTimeJustNow": "éppen most",
-    "tmuxTimeMinutes": "{{count}}perccel ezelőtt",
-    "tmuxUnavailable": "A tmux nincs telepítve a távoli gépre, a standard shell-t használja.",
-    "tmuxWindowCount": "{{count}} ablak",
-    "tmuxWindows": "Ablakok",
-    "unknownError": "Ismeretlen hiba történt",
-    "websocketAbnormalClose": "A kapcsolat váratlanul megszakadt. Ennek oka lehet fordított proxy vagy SSL konfigurációs probléma. Kérjük, ellenőrizze a szervernaplókat.",
-    "websocketError": "WebSocket csatlakozási hiba",
-    "clipboardReadFailed": "Nem sikerült beolvasni a vágólapról. Győződjön meg arról, hogy a vágólapra vonatkozó engedélyek meg vannak adva.",
-    "clipboardWriteFailed": "Nem sikerült a vágólapra másolni. Győződjön meg arról, hogy az oldal HTTPS vagy localhost protokollon keresztül jelenik meg.",
-    "connected": "Csatlakoztatva",
-    "totpCodeLabel": "Ellenőrző kód",
-    "duplicateTab": "Duplikált lap",
-    "imageChooseFile": "Válasszon egy képfájlt",
-    "imageUploaded": "Feltöltött kép: {{path}}",
-    "imageClipboardUnavailable": "Ez a böngésző nem tudja beolvasni a képeket a vágólapról",
-    "imageClipboardEmpty": "Nem található kép a vágólapon",
-    "localShell": "Helyi terminálhéj",
-    "autocompleteHintComplete": "Tab vagy Enter billentyűvel befejezheti",
-    "autocompleteHintNavigate": "↑↓ navigációhoz",
-    "autocompleteHintClose": "Esc a bezáráshoz"
-  },
-  "terminalToolbar": {
-    "detachTmux": "tmux leválasztása",
-    "detachTmuxDescription": "tmux munkamenet leválasztása",
-    "dismissError": "Képhiba elvetése",
-    "hideToolbar": "Eszköztár elrejtése",
-    "image": "Képműveletek (csak képek)",
-    "imageActionFailed": "Képművelet sikertelen",
-    "layout": "Eszköztár megjelenítési módja",
-    "layoutExpanded": "Metrikákkal bővítve",
-    "layoutIcon": "Csak ikon",
-    "layoutLabeled": "Ikonok és címkék",
-    "moveToolbar": "Eszköztár áthelyezése",
-    "moveToolbarHint": "Húzza az eszköztár áthelyezéséhez",
-    "paste": "Kép beillesztése",
-    "pasteImage": "Kép beillesztése a vágólapról (csak képek)",
-    "retry": "Újrapróbálkozás",
-    "showToolbar": "Eszköztár kibontása",
-    "upload": "Kép feltöltése",
-    "uploadImage": "Töltsön fel egy képet a tárhelyszolgáltatóra",
-    "uploadingImage": "Feltöltés..."
-  },
-  "history": {
-    "noTerminalSelected": "Nincs kiválasztva terminál",
-    "noTerminalSelectedHint": "Nyisson meg egy SSH terminálfület a parancselőzmények megtekintéséhez",
-    "searchPlaceholder": "Keresési előzmények...",
-    "clearAll": "Összes törlése",
-    "noHistoryEntries": "Nincsenek előzménybejegyzések",
-    "trackingDisabled": "Az előzmények követése le van tiltva",
-    "trackingDisabledHint": "Kapcsold be a Parancselőzményeket a gép SSH Terminál lapján.",
-    "commandCount_one": "{{count}} parancs",
-    "commandCount_other": "{{count}} parancsok"
-  },
-  "touchInput": {
-    "enabled": "Érintéses bevitel engedélyezése",
-    "enabledDesc": "Egyujjas görgetés engedélyezése a terminálokban",
-    "momentumEnabled": "Lendület engedélyezése",
-    "momentumEnabledDesc": "Görgessen tovább röviden egy húzás után",
-    "advanced": "Fejlett",
-    "resetDefaults": "Alapértelmezett beállítások visszaállítása",
-    "dragThreshold": "Húzási küszöb",
-    "maxWheelDelta": "Maximális kerékdelta",
-    "momentumSampleWindow": "Lendület mintavételi ablak",
-    "releaseGracePeriod": "Kiadási türelmi időszak",
-    "minimumVelocity": "Minimális sebesség",
-    "maximumVelocity": "Maximális sebesség",
-    "maximumDuration": "Maximális időtartam",
-    "maximumTravel": "Maximális mozgástartomány",
-    "decayTime": "Bomlási idő",
-    "pixelsPerTick": "Pixelek száma kullancsonként",
-    "maximumFrameInterval": "Maximális képkocka-intervallum",
-    "maximumTicksPerFrame": "Maximális tickek képkockánként"
-  },
-  "imageStorage": {
-    "instanceId": "Terminál munkamenet példányazonosítója",
-    "instanceIdDesc": "Az egyik csatlakoztatott terminálfül példányazonosítója, amelyet a láthatóság teszteléséhez használunk.",
-    "selectedModeUnavailable": "Nem elérhető",
-    "test": "Teszt",
-    "testing": "Tesztelés...",
-    "testFailed": "Nem sikerült tesztelni a képtárolást",
-    "testConnected": "A terminál munkamenet csatlakozva van.",
-    "testNotConnected": "Nincs csatlakoztatott terminál munkamenet ezzel a példányazonosítóval.",
-    "testSelectedMode": "Egy feltöltés ezt használná: {{mode}}",
-    "testLocalVisible": "A helyi könyvtár látható a csatlakoztatott gépről.",
-    "testLocalNotVisible": "A helyi könyvtár NEM látható a csatlakoztatott gépről."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Érintéses bevitel",
-        "images": "Képtárolás",
-        "sessions": "Munkamenetek",
-        "newHosts": "Új házigazdák"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Terminál munkamenet-megőrző",
-        "description": "Mennyi ideig marad életben egy leválasztott terminál a szerveren, mielőtt bezárásra kerül. Minimum 1, maximum 1440 perc. Azoknál a munkameneteknél, amelyeknek ezt az időtartamot túl kell élniük, engedélyezze az Auto-Tmux funkciót a gazdagépen."
-      },
-      "commandHistoryEnabled": {
-        "label": "Parancsnoki előzmények",
-        "description": "Parancselőzmények rögzítésének engedélyezése. Ha le van tiltva, az előzmények nem kerülnek mentésre, függetlenül a gazdagép beállításaitól."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "Új hosztok parancselőzményei",
-        "description": "Az új hosztok bekapcsolt parancselőzményekkel indulnak-e."
-      },
-      "imageStorageMode": {
-        "label": "Tárolási mód",
-        "description": "A beillesztett és feltöltött terminálképek írási helye. Kijavítottuk az automatikus kiválasztást kapcsolat, helyi és távoli (SFTP) alapján.",
-        "auto": "Autó",
-        "local": "Helyi",
-        "remoteSftp": "Távoli (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Helyi címtár",
-        "description": "Abszolút elérési út a Termix backend rendszeren, ahová a helyi mód képeket ír. Mentés után soha nem jelenik meg. Az üresen álló fájl a TERMIX_IMAGE_DIR-t használja."
-      },
-      "imageHostPath": {
-        "label": "Gazdagép elérési útja",
-        "description": "A terminálügynökök által fogadott helyi könyvtár hosztoldali nézete."
-      },
-      "imageTtlMs": {
-        "label": "TTL (ms)",
-        "description": "Mennyi ideig tárolja a rendszer a feltöltött képet milliszekundumban. Az üres kép TERMIX_IMAGE_TTL_MS-t vagy egy órát használ."
-      },
-      "imageMaxCount": {
-        "label": "Max. képszám",
-        "description": "A legtöbb kép egyszerre tárolódik. Az üres képek TERMIX_MAX_IMAGE_COUNT vagy 100 értéket használnak."
-      },
-      "imageMaxBytes": {
-        "label": "Max. tárhely byte-okban",
-        "description": "A képek legtöbb bájtja egyszerre tárolódik. Az üresen hagyott fájlok TERMIX_MAX_IMAGE_STORAGE_BYTES-t vagy 5 GiB-ot használnak."
-      },
-      "sessionPersistence": {
-        "label": "Munkamenetek megtartása a leválasztás után",
-        "description": "Tartsa életben a leválasztott terminált a szerveren a fenti ideig, így a fülének újranyitása ott folytatja, ahol abbahagyta."
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "Új hosztok termináljait a tmuxon belül kell futtatni, hogy a munkamenetek túléljék a kapcsolatmegszakadásokat (tmux szükséges a hoszton)"
-      },
-      "newHostTheme": {
-        "label": "Téma új házigazdáknak",
-        "description": "A termináltéma, amellyel egy új host indul."
-      },
-      "newHostFontFamily": {
-        "label": "Betűtípus új házigazdáknak",
-        "description": "Az új hoszt által használt terminálbetűtípus."
-      },
-      "newHostFontSize": {
-        "label": "Betűméret új házigazdáknak",
-        "description": "Az új hoszt kezdőbetűmérete pixelben."
-      },
-      "newHostCursorStyle": {
-        "label": "Kurzorstílus új házigazdáknak"
-      },
-      "newHostCursorBlink": {
-        "label": "Villogó kurzor új gazdagépek esetén"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Terminál eszköztár engedélyezése",
-        "description": "Gyorselérési eszköztár megjelenítése az aktív terminálhoz rögzítve a gazdagép eszközeihez és élő statisztikáihoz"
-      },
-      "terminalToolbarPosition": {
-        "label": "Eszköztár pozíciója",
-        "description": "Ahol az eszköztár található a terminálban. Továbbra is áthúzhatod onnan.",
-        "bottom": "Alul középen",
-        "bottomLeft": "Bal alsó sarokban",
-        "bottomRight": "Jobb alsó sarokban",
-        "top": "Felső középpont",
-        "topLeft": "Bal felső sarok",
-        "topRight": "Jobb felső sarokban"
-      },
-      "terminalToolbarStartState": {
-        "label": "Eszköztár indítási állapota",
-        "description": "Az eszköztár kibontva vagy kicsinyítve nyílik-e meg, amikor a terminál csatlakozik",
-        "expanded": "Kiterjesztett",
-        "collapsed": "Minimalizált"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Eszköztár megjelenítési módja",
-        "description": "Az eszköztár gombjainak megjelenítése. Az Utoljára használt megőrzi az eszköztáron kiválasztott elemeket.",
-        "remember": "Utolsó használat",
-        "icon": "Csak ikon",
-        "labeled": "Ikonok és címkék",
-        "expanded": "Statisztikákkal bővítve"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Élő statisztikák megjelenítése",
-        "description": "Élő host statisztikák megjelenítése az eszköztár gombjai felett kibontott módban"
-      },
-      "terminalToolbarFade": {
-        "label": "Elhalványulás tétlenségkor",
-        "description": "Eszköztár elhalványítása, amíg fölé nem viszi az egérmutatót"
-      },
-      "enableCommandHistory": {
-        "label": "Parancsnoki előzmények",
-        "description": "A terminálon futó parancsok rögzítése előzmények és automatikus kiegészítés céljából"
-      },
-      "enableTerminal": {
-        "label": "Terminál engedélyezése",
-        "description": "Kínálj fel egy SSH terminált ehhez a hoszthoz."
-      },
-      "inheritAppearance": {
-        "label": "Felhasználói alapértelmezett beállítások használata"
-      },
-      "theme": {
-        "label": "Téma"
-      },
-      "cursorBlink": {
-        "label": "Villogó kurzor"
-      },
-      "cursorStyle": {
-        "label": "Kurzor stílusa"
-      },
-      "fontSize": {
-        "label": "Betűméret"
-      },
-      "fontFamily": {
-        "label": "Betűtípus"
-      },
-      "scrollback": {
-        "label": "Visszagörgetés"
-      },
-      "letterSpacing": {
-        "label": "Betűköz"
-      },
-      "lineHeight": {
-        "label": "Vonalmagasság"
-      },
-      "bellStyle": {
-        "label": "Harang"
-      },
-      "minimumContrastRatio": {
-        "label": "Minimális kontrasztarány"
-      },
-      "backgroundImage": {
-        "label": "Háttérkép"
-      },
-      "backgroundImageOpacity": {
-        "label": "Háttérkép átlátszósága"
-      },
-      "customThemeColors": {
-        "label": "Egyéni témaszínek"
-      },
-      "rightClickSelectsWord": {
-        "label": "Jobb klikk kijelöli a szót"
-      },
-      "macOptionIsMeta": {
-        "label": "Az opció Meta"
-      },
-      "fastScrollModifier": {
-        "label": "Gyors görgetőgomb"
-      },
-      "fastScrollSensitivity": {
-        "label": "Gyors görgetési sebesség"
-      },
-      "backspaceMode": {
-        "label": "Visszatörlés"
-      },
-      "autoMosh": {
-        "label": "Autómosh"
-      },
-      "moshCommand": {
-        "label": "Mosh parancs"
-      },
-      "autoTmux": {
-        "label": "Automatikus tmux"
-      },
-      "useSSHTitle": {
-        "label": "Használd az SSH-címet"
-      },
-      "syntaxHighlighting": {
-        "label": "Szintaxis kiemelése"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Szintaxis kiemelés kategóriák"
-      },
-      "linkClickBehavior": {
-        "label": "Linkkattintás"
-      },
-      "localEcho": {
-        "label": "Helyi visszhang"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Jelszókérések kitöltésének felajánlása"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Sudo promptok kitöltése"
-      },
-      "autoReconnect": {
-        "label": "Automatikus újracsatlakozás"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Parancs automatikus kiegészítése",
-        "description": "Automatikus kiegészítés megjelenítése gépelés közben, ha megnyomja a Tab billentyűt"
-      },
-      "localEcho": {
-        "label": "Helyi visszhang",
-        "description": "Csökkentse az érzékelt bemeneti késleltetést biztonságos helyi billentyűleütés-előrejelzéssel"
-      },
-      "linkClickBehavior": {
-        "label": "Terminálkapcsolat kattintása",
-        "description": "Alapértelmezett viselkedés hivatkozásokra kattintva a terminálban"
-      },
-      "customThemes": {
-        "label": "Mentett témák"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Helyi terminál"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Élő terminál munkamenetek használata",
-      "description": "Lehetővé teszi más funkciók, például a munkamenet-megosztás és -rögzítés elérését az élő terminál-munkamenetek során."
-    },
-    "history": {
-      "title": "Parancselőzmények olvasása",
-      "description": "Lehetővé teszi más funkciók, például a mesterséges intelligencia asszisztens számára a parancsok előzményeinek beolvasását."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Terminál",
-    "addHost": "Gazdagép hozzáadása",
-    "applyGlobalThemeTooltip": "Alkalmazd ezt a témát",
-    "backgroundImageDesc": "Opcionális URL a terminál háttérképéhez",
-    "backgroundImageLabel": "Háttérkép URL-címe",
-    "backgroundImageOpacityLabel": "Háttérkép átlátszósága",
-    "backspaceMode": "Visszatörlés mód",
-    "backspaceModeControlH": "Kontroll-H (BS)",
-    "backspaceModeLabel": "Visszatörlés mód",
-    "backspaceModeNormal": "Normál (DEL)",
-    "behaviorAndAdvanced": "Viselkedés és haladó",
-    "bellStyle": "Harang stílus",
-    "bellStyleBoth": "Mindkét",
-    "bellStyleLabel": "Harang stílus",
-    "bellStyleNone": "Egyik sem",
-    "bellStyleSound": "Hang",
-    "bellStyleVisual": "Vizuális",
-    "colorTheme": "Színtéma",
-    "cursorBlink": "Kurzor villogása",
-    "cursorBlinking": "Kurzor villog",
-    "cursorBlinkingDesc": "Villogó animáció engedélyezése a terminálkurzorhoz",
-    "cursorStyle": "Kurzor stílusa",
-    "cursorStyleBar": "Bár",
-    "cursorStyleBlock": "Tömb",
-    "cursorStyleLabel": "Kurzor stílusa",
-    "cursorStyleUnderline": "Aláhúzás",
-    "customThemeAnsiColors": "ANSI színek",
-    "customThemeBackground": "Háttér",
-    "customThemeBlack": "Fekete",
-    "customThemeBlue": "Kék",
-    "customThemeBrightBlack": "Élénk fekete",
-    "customThemeBrightBlue": "Élénk kék",
-    "customThemeBrightCyan": "Élénk ciánkék",
-    "customThemeBrightGreen": "Élénkzöld",
-    "customThemeBrightMagenta": "Élénk bíbor",
-    "customThemeBrightRed": "Élénkpiros",
-    "customThemeBrightWhite": "Élénk fehér",
-    "customThemeBrightYellow": "Élénk sárga",
-    "customThemeColors": "Egyedi színek",
-    "customThemeCursor": "Kurzor",
-    "customThemeCursorAccent": "Kurzor ékezet",
-    "customThemeCyan": "Cián",
-    "customThemeForeground": "Előtér",
-    "customThemeGreen": "Zöld",
-    "customThemeMagenta": "Bíborvörös",
-    "customThemeRed": "Piros",
-    "customThemeResetTooltip": "Alapértelmezett beállítások visszaállítása",
-    "customThemeSelection": "Kiválasztás",
-    "customThemeWhite": "Fehér",
-    "customThemeYellow": "Sárga",
-    "deleteGlobalThemeTooltip": "Téma törlése",
-    "docsLink": "Dokumentumok megtekintése",
-    "enableAutoMosh": "Auto-Mosh engedélyezése",
-    "enableAutoMoshDesc": "Ha elérhető, akkor a Mosh-t részesítsd előnyben az SSH-val szemben.",
-    "enableAutoTmux": "Auto-Tmux engedélyezése",
-    "enableAutoTmuxDesc": "Tartsd életben a shell-edet és a benne futó dolgokat a lecsatlakozások és a böngésző újraindítása során a tmux-on belüli futtatással (a tmux-nak telepítve kell lennie a gazdagépen)",
-    "fastScrollModifier": "Gyors görgetési módosító",
-    "fastScrollModifierAlt": "Alt",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Gyors görgetési módosító",
-    "fastScrollModifierShift": "Váltás",
-    "fastScrollSensitivity": "Gyors görgetési érzékenység",
-    "fastScrollSensitivityLabel": "Gyors görgetési érzékenység",
-    "fontFamily": "Betűcsalád",
-    "fontFamilyCustomHint": "Válasszon egy csomagban található betűtípust, vagy válassza az Egyéni lehetőséget, és írja be a rendszerére már telepített betűtípus pontos nevét (pl. MesloLGS NF, Noto Sans Mono). A Termix nem tud betűtípusokat telepíteni, először telepítse az operációs rendszerére.",
-    "fontFamilyCustomOption": "Szokás...",
-    "fontFamilyCustomPlaceholder": "Pontos betűtípusnév, pl. MesloLGS NF",
-    "fontFamilyLabel": "Betűcsalád",
-    "fontSize": "Betűméret",
-    "fontSizeLabel": "Betűméret",
-    "hostNotFound": "Nem található gazdagép",
-    "letterSpacing": "Betűköz",
-    "letterSpacingPx": "Betűköz (px)",
-    "lineHeight": "Vonalmagasság",
-    "lineHeightLabel": "Vonalmagasság",
-    "linkClickBehaviorConfirm": "Felugró ablak megjelenítése megnyitáshoz vagy másoláshoz",
-    "linkClickBehaviorDesc": "Azt szabályozza, hogy mi történjen, ha egy hivatkozásra kattintasz a terminálban. Az „Alapértelmezett” érték használatával követheted az alkalmazásszintű beállításokat.",
-    "linkClickBehaviorDirect": "Közvetlen nyitás",
-    "linkClickBehaviorLabel": "Linkkattintási viselkedés",
-    "loadingHost": "Gazdagép betöltése...",
-    "localEchoAuto": "Automatikus",
-    "localEchoDesc": "Lassú kapcsolatok esetén is helyben előrejelzi a biztonságosan nyomtatható billentyűleütéseket. A jelszókérések és a vezérlőbevitel soha nem jelenik meg.",
-    "localEchoLabel": "Helyi visszhang",
-    "localEchoOff": "Le",
-    "localEchoOn": "Mindig bekapcsolva",
-    "macOptionIsMetaLabel": "Option Key küldi a metaadatokat",
-    "macOptionIsMetaShortDesc": "Tiltsa le a speciális karakterek (például @ vagy |) Option/Alt billentyűvel történő beírását macOS rendszeren a Meta küldése helyett",
-    "moshCommand": "MOSH parancs",
-    "moshCommandLabel": "Mosh parancsnokság",
-    "noSavedThemes": "Még nincsenek mentett témák",
-    "none": "Egyik sem",
-    "passwordPromptAutoFillDesc": "Ajánlja fel a mentett jelszó kitöltését, amikor a terminál kéri. Kapcsolja ki, ha soha nem szeretné automatikusan kitölteni a jelszót ezen a gépen.",
-    "passwordPromptAutoFillLabel": "Jelszó automatikus kitöltése ajánlatban",
-    "autoReconnectLabel": "Automatikus újracsatlakozás",
-    "autoReconnectDesc": "Magától újracsatlakozik, ha megszakad az SSH-kapcsolat, például hálózati kimaradás vagy alvó állapot után. Megtartja a visszagörgetést.",
-    "rightClickSelectsWord": "Jobb klikk kijelöli a szót",
-    "rightClickSelectsWordLabel": "Jobb klikk Kijelöli a szót",
-    "rightClickSelectsWordShortDesc": "Jobb klikk esetén jelölje ki a kurzor alatti szót",
-    "saveAsGlobalTheme": "Mentés globális témaként",
-    "saveGlobalThemeError": "Nem sikerült menteni a témát",
-    "saveGlobalThemeNamePrompt": "Adjon meg egy nevet ennek a témának",
-    "saveGlobalThemeSuccess": "Téma mentve",
-    "savedThemesLabel": "Mentett témák",
-    "scrollbackBufferLabel": "Görgetési puffer",
-    "scrollbackMaxLines": "A történetben tárolt sorok maximális száma",
-    "sudoPasswordAutoFill": "Sudo jelszó automatikus kitöltése",
-    "sudoPasswordAutoFillDesc": "Tároljon egy sudo jelszót, hogy a gazdagép metrikái, a terminálpromptok és mások automatikusan futtathassanak privilegizált parancsokat.",
-    "sudoPasswordAutoFillLabel": "Sudo jelszó automatikus kitöltése",
-    "syntaxCategoryIpAddresses": "IP-címek",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Naplózási szintek",
-    "syntaxCategoryLogLevelsDesc": "hiba, figyelmeztetés, információ, hibakeresés, végzetes",
-    "syntaxCategoryNumbers": "Címkézett számok",
-    "syntaxCategoryNumbersDesc": "8080-as port, 1-es kijárat, 404-es állapot",
-    "syntaxCategoryPaths": "Fájlútvonalak",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/fájl.txt",
-    "syntaxCategoryTimestamps": "Időbélyegek",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 2024-01-15",
-    "syntaxCategoryUrls": "URL-ek",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "Terminál kimenetének színezése (hibák, elérési utak, IP-címek, időbélyegek)",
-    "syntaxHighlightingLabel": "Szintaxis kiemelése",
-    "terminalAppearance": "Terminál megjelenése",
-    "theme": "Téma",
-    "themePreview": "Téma előnézete",
-    "useSSHTitleDesc": "A fül címének frissítése a shell ablakcíméből a gazdagépnév helyett",
-    "useSSHTitleLabel": "SSH ablakcím használata",
-    "enableTunnel": "Alagút engedélyezése",
-    "enableFileManager": "Fájlkezelő engedélyezése",
-    "enableDocker": "Docker engedélyezése",
-    "startupSnippet": "Indítási kódrészlet",
-    "quickActions": "Gyors műveletek",
-    "proxmoxLastSyncStatus": {
-      "success": "Siker"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} kihagyva (nem található IP cím)",
-    "proxmoxStatsUrlCopied": "Proxmox Statisztikai URL a vágólapra másolva",
-    "rdpUrlCopied": "RDP URL másolva",
-    "vncUrlCopied": "VNC URL másolva",
-    "filterAuthStepca": "CA lépés",
-    "guac": {
-      "noCredential": "Nincs hitelesítő adat (közvetlen hitelesítő adat lent)",
-      "authTypeDirect": "Közvetlen",
-      "authTypeCredential": "Hitelesítő adat",
-      "authTypeNone": "Egyik sem",
-      "recordingPath": "Felvételi útvonal",
-      "recordingName": "Felvétel neve",
-      "saveHostFirst": "Először mentsd el a gazdagépet.",
-      "sharingOptionsAfterSave": "A megosztási beállítások a gazdagép mentése után érhetők el.",
-      "permissionLevel": "Engedélyszint",
-      "typeHeader": "Típus",
-      "targetHeader": "Cél",
-      "permissionHeader": "Engedély",
-      "cancelBtn": "Mégsem",
-      "savingBtn": "Megtakarítás...",
-      "updateHostBtn": "Frissítse a gazdagépet",
-      "addHostBtn": "Gazdagép hozzáadása"
-    },
-    "filterAuthVault": "Boltozat"
-  },
-  "nav": {
-    "history": "Történelem",
-    "localTerminal": "Helyi terminál",
-    "sshTools": "SSH eszközök",
-    "terminal": "Terminál",
-    "macros": "Makrók"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Írjon ide a billentyűleütések sugárzásához...",
-    "copyOnSelect": "Kijelölt szöveg automatikus másolása",
-    "enableRightClickCopyPaste": "Jobb klikkes másolás/beillesztés engedélyezése",
-    "fillPassword": "Jelszó kitöltése",
-    "fillPasswordMissing": "No saved password for {{count}} selected terminal(s)",
-    "fillPasswordSuccess": "Jelszó beírva a {{count}} terminálba/terminálokba",
-    "keyRecordingTitle": "Kulcsfelvétel",
-    "noTerminalTabsOpen": "Nincsenek megnyitott terminálfülek",
-    "recordToTerminals": "Felvétel terminálokra",
-    "selectAll": "Minden",
-    "selectNone": "Egyik sem",
-    "selectTerminalsAbove": "Válassza ki a fenti terminálokat",
-    "settingsTitle": "Beállítások",
-    "startRecording": "Felvétel indítása",
-    "stopRecording": "Felvétel leállítása"
-  },
-  "keybindings": {
-    "copy": "Kijelölés másolása",
-    "paste": "Paszta",
-    "sendControlCode": "Ctrl+betűjel küldése",
-    "sendText": "SMS küldése",
-    "controlCodeLabel": "Levél",
-    "textLabel": "Küldendő szöveg",
-    "appendEnterLabel": "Küldés után nyomja meg az Enter billentyűt",
-    "clipboardPermissionNote": "Egyes böngészőkben első használatkor vágólap-engedélyt kérhet.",
-    "textRequired": "Írd be a küldendő szöveget",
-    "controlCodeRequired": "Írjon be egyetlen betűt az ellenőrző kódhoz",
-    "builtIn": {
-      "copyCtrlC": "Kijelölés másolása (Ctrl+C, csak szöveg kijelölése esetén)",
-      "copyCtrlShiftC": "Kijelölés másolása (Ctrl+Shift+C)",
-      "copyCmdC": "Kijelölés másolása (Cmd+C)",
-      "pasteCtrlShiftV": "Beillesztés a vágólapról (Ctrl+Shift+V)",
-      "ctrlW": "Ctrl+W küldése a parancsértelmezőnek (a böngészőfül bezárása blokkolva)",
-      "ctrlT": "Ctrl+T küldése a parancsértelmezőnek (a böngészőfül megnyitásának blokkolva)",
-      "ctrlN": "Ctrl+N küldése a parancsértelmezőnek (a böngészőablak megnyitása blokkolva)",
-      "ctrlQ": "Ctrl+Q küldése a parancsértelmezőnek (a böngészőből való kilépés blokkolva)"
-    }
-  },
-  "macros": {
-    "title": "Makrók",
-    "description": "Futtass egy mentett parancssorozatot egy terminálban, és reagálj a szerver által küldöttekre.",
-    "target": "Cél",
-    "noTerminal": "Nincs nyitva terminál",
-    "empty": "Még nincsenek makrók",
-    "emptyHint": "Hozz létre egy makrót egy terminálfolyamat automatizálásához, például bejelentkezéshez, szolgáltatás újraindításához vagy a kérdések megválaszolásához.",
-    "create": "Új makró",
-    "back": "Vissza a makrókhoz",
-    "name": "Név",
-    "namePlaceholder": "Indítsa újra a webszervert",
-    "nameRequired": "Mentés előtt adjon nevet a makrónak",
-    "descriptionLabel": "Leírás",
-    "descriptionPlaceholder": "Mit csinál ez a makró (opcionális)",
-    "unsaved": "Nem mentett változtatások",
-    "save": "Megtakarítás",
-    "saved": "Makró mentve",
-    "saveFailed": "Nem sikerült menteni a makrót",
-    "delete": "Töröl",
-    "deleteTitle": "Törli ezt a makrót?",
-    "deleteBody": "A(z) „{{name}}” véglegesen törlésre kerül. Ez a művelet nem vonható vissza.",
-    "deleted": "Makró törölve",
-    "cancel": "Mégsem",
-    "run": "Fut",
-    "stop": "Stop",
-    "running": "Futás...",
-    "completed": "Makró kész",
-    "failed": "Makró sikertelen",
-    "loadFailed": "Nem sikerült betölteni a makrókat",
-    "needTerminal": "Először nyiss meg és csatlakoztass egy terminált",
-    "noSteps": "Ennek a makrónak még nincsenek lépései. Adjon hozzá egyet alább.",
-    "addStep": "Lépés hozzáadása",
-    "stepNumber": "{{number}} lépés",
-    "removeStep": "Lépés eltávolítása",
-    "confirmRunTitle": "Futtassa ezt a makrót?",
-    "confirmRunBody": "A „{{name}}” parancsokat küld a {{host}} címre.",
-    "confirmRunAction": "Makró futtatása",
-    "stepTypes": {
-      "send": {
-        "label": "Parancs küldése",
-        "help": "Beírja a szöveget a terminálba, ugyanúgy, mintha beírta volna."
-      },
-      "wait": {
-        "label": "Várjon a kimenetre",
-        "help": "Szünetet tart, amíg a szerver ki nem írja a megnevezett szöveget, például egy jelszókérést."
-      },
-      "delay": {
-        "label": "Szünet",
-        "help": "Egy meghatározott ideig vár a következő lépés előtt."
-      },
-      "if": {
-        "label": "Ha a kimenet tartalmaz",
-        "help": "Ellenőrzi a szerver által eddig kinyomtatott összes adatot, majd lefuttatja a két ág egyikét."
-      },
-      "repeat": {
-        "label": "Ismétlés",
-        "help": "Meghatározott számú alkalommal futtatja le a benne található lépéseket."
-      }
-    },
-    "send": {
-      "text": "Parancs vagy szöveg",
-      "textPlaceholder": "systemctl újraindítja az nginx-et",
-      "pressEnter": "Küldés után nyomja meg az Enter billentyűt",
-      "pressEnterHelp": "Kapcsold ki ezt, ha beküldés nélkül szeretnél szöveget beírni."
-    },
-    "wait": {
-      "pattern": "Várjon, amíg a kimenet tartalmazza a",
-      "patternPlaceholder": "jelszó:",
-      "timeout": "Add fel utána",
-      "onTimeout": "Ha soha nem jelenik meg",
-      "stop": "A makró leállítása",
-      "continue": "Folytasd mindenképpen"
-    },
-    "delay": {
-      "duration": "Várj"
-    },
-    "ifStep": {
-      "pattern": "Ha a kimenet tartalmaz",
-      "patternPlaceholder": "Aktív: aktív (fut)",
-      "then": "Akkor csináld ezt",
-      "else": "Egyébként tedd ezt",
-      "emptyBranch": "Nincsenek lépcsők"
-    },
-    "repeat": {
-      "count": "Alkalmak száma",
-      "times": "alkalommal"
-    },
-    "match": {
-      "useRegex": "Egyezés reguláris kifejezéssel",
-      "useRegexHelp": "Hagyd ezt ki, hogy a szöveg pontosan úgy illeszkedjen, ahogy írva van.",
-      "invalidRegex": "Nem érvényes reguláris kifejezés, sima szövegként lesz egyezve."
-    },
-    "seconds": "másodperc",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "Távoli szerver szükséges. Csatlakoztasson egy távoli szervert a Beállításokban a kapcsolattípus használatához."
-  },
-  "plugin": {
-    "name": "SSH terminál"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/id_ID.json b/plugins/ssh-terminal/locales/translated/id_ID.json
deleted file mode 100644
index 78a5359f7..000000000
--- a/plugins/ssh-terminal/locales/translated/id_ID.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Menambahkan",
-    "arrowDown": "Panah ke Bawah",
-    "arrowLeft": "Panah Kiri",
-    "arrowRight": "Panah Kanan",
-    "arrowUp": "Panah Atas",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Del",
-    "done": "Selesai",
-    "editQuickKeys": "Edit tombol pintasan",
-    "end": "Akhir",
-    "esc": "Esc",
-    "home": "Rumah",
-    "pageDown": "PgDn",
-    "pageUp": "PgUp",
-    "paste": "Pasta",
-    "quickKeyPlaceholder": "misalnya sudo ",
-    "quickKeysDesc": "Ketuk × untuk menghapus. Mendukung hingga 8 karakter.",
-    "quickKeysTitle": "Tombol Pintas",
-    "removeQuickKey": "Menghapus",
-    "resetDefaults": "Kembalikan ke pengaturan default",
-    "shift": "Menggeser",
-    "tab": "Tab"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Gagal mengaktifkan Auto-Tmux",
-    "autoTmuxEnabled": "Auto-Tmux diaktifkan untuk {{host}}. Ini berlaku mulai koneksi berikutnya.",
-    "clipboardHttpWarning": "Tidak dapat membaca isi clipboard. Beberapa browser membatasi akses clipboard di luar HTTPS - coba tekan Ctrl+V, atau sajikan Termix melalui HTTPS.",
-    "closeTab": "Tutup",
-    "connecting": "Menghubungkan...",
-    "connectionLost": "Koneksi terputus",
-    "connectionRejected": "Koneksi ditolak oleh server. Harap periksa otentikasi dan konfigurasi jaringan Anda.",
-    "connectionTimeout": "Waktu habis koneksi",
-    "enableAutoTmuxAction": "Aktifkan Auto-Tmux",
-    "hostKeyRejected": "Verifikasi kunci host SSH ditolak. Koneksi dibatalkan.",
-    "linkDialogCopy": "Menyalin",
-    "linkDialogOpen": "Membuka",
-    "linkDialogTitle": "Buka Tautan",
-    "maxReconnectAttemptsReached": "Upaya penyambungan kembali maksimum telah tercapai.",
-    "noHostSelected": "Tidak ada pembawa acara yang dipilih.",
-    "passwordPromptFillTitle": "Masukkan kata sandi yang tersimpan ke dalam kolom ini?",
-    "reconnect": "Terhubung kembali",
-    "reconnected": "Berhasil terhubung kembali",
-    "reconnecting": "Menghubungkan kembali... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Koneksi terputus, sedang mencoba menyambungkan kembali...",
-    "searchCaseSensitive": "Kotak Korek Api",
-    "searchClose": "Tutup (Keluar)",
-    "searchNext": "Pertandingan Berikutnya (Masuk)",
-    "searchNoResults": "Tidak ada hasil",
-    "searchPlaceholder": "Menemukan",
-    "searchPrevious": "Pertandingan Sebelumnya (Shift+Enter)",
-    "searchRegex": "Gunakan Ekspresi Reguler",
-    "searchResultCount": "{{index}} dari {{count}}",
-    "searchWholeWord": "Cocokkan Seluruh Kata",
-    "sessionExpiredNotice": "Sesi Anda sebelumnya di {{host}} telah berakhir setelah {{minutes}} menit terputus; shell dan semua yang berjalan di dalamnya telah hilang. Aktifkan Auto-Tmux pada host ini untuk menjaga agar sesi tetap aktif.",
-    "sessionExpiredNoticeNoMinutes": "Sesi Anda sebelumnya di {{host}} telah berakhir saat terputus; shell dan semua yang berjalan di dalamnya telah hilang. Aktifkan Auto-Tmux pada host ini untuk menjaga agar sesi tetap aktif.",
-    "sessionTakenOver": "Sesi dibuka di tab lain. Sedang menyambungkan kembali...",
-    "tmuxAttached": "Client terhubung",
-    "tmuxAttachedCount": "{{count}} terhubung",
-    "tmuxCopyHint": "Sesuaikan seleksi lalu tekan Enter untuk salin ke clipboard",
-    "tmuxCreateNew": "Buat session baru",
-    "tmuxDetached": "Terputus dari sesi tmux",
-    "tmuxLastActivity": "Aktivitas terakhir",
-    "tmuxSessionAttached": "sesi tmux terhubung: {{name}}",
-    "tmuxSessionCreated": "tmux session dibuat: {{name}}",
-    "tmuxSessionPickerDesc": "Sesi tmux yang sudah ada ditemukan di host ini. Pilih salah satu untuk disambungkan kembali atau buat sesi baru.",
-    "tmuxSessionPickerTitle": "sesi tmux",
-    "tmuxTimeDays": "{{count}} detik lalu",
-    "tmuxTimeHours": "{{count}} jam lalu",
-    "tmuxTimeJustNow": "baru saja",
-    "tmuxTimeMinutes": "{{count}} menit lalu",
-    "tmuxUnavailable": "tmux tidak terinstal di host, beralih ke shell standar",
-    "tmuxWindowCount": "{{count}} window",
-    "tmuxWindows": "Windows",
-    "unknownError": "Terjadi kesalahan yang tidak diketahui.",
-    "websocketAbnormalClose": "Koneksi terputus secara tidak terduga. Ini mungkin disebabkan oleh masalah konfigurasi reverse proxy atau SSL. Silakan periksa log server.",
-    "websocketError": "Kesalahan koneksi WebSocket",
-    "clipboardReadFailed": "Gagal membaca dari clipboard. Pastikan izin clipboard telah diberikan.",
-    "clipboardWriteFailed": "Gagal menyalin ke papan klip. Pastikan halaman disajikan melalui HTTPS atau localhost.",
-    "connected": "Terhubung",
-    "totpCodeLabel": "Kode Verifikasi",
-    "duplicateTab": "Tab duplikat",
-    "imageChooseFile": "Pilih file gambar",
-    "imageUploaded": "Gambar diunggah: {{path}}",
-    "imageClipboardUnavailable": "Browser ini tidak dapat membaca gambar dari clipboard.",
-    "imageClipboardEmpty": "Tidak ada gambar yang ditemukan di papan klip.",
-    "localShell": "Shell terminal lokal",
-    "autocompleteHintComplete": "Tekan Tab atau Enter untuk menyelesaikan",
-    "autocompleteHintNavigate": "↑↓ untuk navigasi",
-    "autocompleteHintClose": "Tekan Esc untuk menutup"
-  },
-  "terminalToolbar": {
-    "detachTmux": "Lepaskan tmux",
-    "detachTmuxDescription": "Lepaskan sesi tmux",
-    "dismissError": "Abaikan kesalahan gambar",
-    "hideToolbar": "Sembunyikan bilah alat",
-    "image": "Aksi gambar (hanya gambar)",
-    "imageActionFailed": "Aksi gambar gagal",
-    "layout": "Mode tampilan bilah alat",
-    "layoutExpanded": "Dilengkapi dengan metrik",
-    "layoutIcon": "Hanya ikon",
-    "layoutLabeled": "Ikon dan label",
-    "moveToolbar": "Pindahkan bilah alat",
-    "moveToolbarHint": "Seret untuk memposisikan ulang bilah alat",
-    "paste": "Tempel gambar",
-    "pasteImage": "Tempel gambar dari clipboard (hanya gambar)",
-    "retry": "Mencoba kembali",
-    "showToolbar": "Perluas bilah alat",
-    "upload": "Unggah gambar",
-    "uploadImage": "Unggah gambar ke host",
-    "uploadingImage": "Sedang mengunggah..."
-  },
-  "history": {
-    "noTerminalSelected": "Tidak ada terminal yang dipilih",
-    "noTerminalSelectedHint": "Buka tab terminal SSH untuk melihat riwayat perintahnya.",
-    "searchPlaceholder": "Riwayat pencarian...",
-    "clearAll": "Hapus Semua",
-    "noHistoryEntries": "Tidak ada entri riwayat.",
-    "trackingDisabled": "Pelacakan riwayat dinonaktifkan",
-    "trackingDisabledHint": "Aktifkan Riwayat Perintah di tab Terminal SSH host ini.",
-    "commandCount_one": "{{count}} perintah",
-    "commandCount_other": "{{count}} perintah"
-  },
-  "touchInput": {
-    "enabled": "Aktifkan Input Sentuh",
-    "enabledDesc": "Izinkan pengguliran sentuh satu jari di terminal.",
-    "momentumEnabled": "Aktifkan Momentum",
-    "momentumEnabledDesc": "Lanjutkan menggulir sebentar setelah menggeser",
-    "advanced": "Canggih",
-    "resetDefaults": "Kembalikan ke pengaturan default",
-    "dragThreshold": "Ambang batas seret",
-    "maxWheelDelta": "Delta roda maksimum",
-    "momentumSampleWindow": "Jendela sampel momentum",
-    "releaseGracePeriod": "Masa tenggang pelepasan",
-    "minimumVelocity": "Kecepatan minimum",
-    "maximumVelocity": "Kecepatan maksimum",
-    "maximumDuration": "Durasi maksimum",
-    "maximumTravel": "Perjalanan maksimum",
-    "decayTime": "Waktu peluruhan",
-    "pixelsPerTick": "Piksel per detik",
-    "maximumFrameInterval": "Interval bingkai maksimum",
-    "maximumTicksPerFrame": "Jumlah tick maksimum per frame"
-  },
-  "imageStorage": {
-    "instanceId": "ID instance sesi terminal",
-    "instanceIdDesc": "ID instans dari salah satu tab terminal yang terhubung, digunakan untuk menguji visibilitas.",
-    "selectedModeUnavailable": "Tidak tersedia",
-    "test": "Tes",
-    "testing": "Pengujian...",
-    "testFailed": "Pengujian penyimpanan gambar gagal.",
-    "testConnected": "Sesi terminal terhubung.",
-    "testNotConnected": "Tidak ada sesi terminal yang terhubung dengan ID instance ini.",
-    "testSelectedMode": "Unggahan akan menggunakan: {{mode}}",
-    "testLocalVisible": "Direktori lokal tersebut dapat dilihat dari host yang terhubung.",
-    "testLocalNotVisible": "Direktori lokal TIDAK terlihat dari host yang terhubung."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Input Sentuh",
-        "images": "Penyimpanan Gambar",
-        "sessions": "Sesi",
-        "newHosts": "Pembawa Acara Baru"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Ketahanan Sesi Terminal",
-        "description": "Berapa lama terminal yang terputus tetap aktif di server sebelum ditutup. Minimal 1 menit, maksimal 1440 menit. Untuk sesi yang harus bertahan lebih lama dari ini, aktifkan Auto-Tmux pada host."
-      },
-      "commandHistoryEnabled": {
-        "label": "Riwayat Perintah",
-        "description": "Izinkan perekaman riwayat perintah. Jika dinonaktifkan, riwayat tidak akan disimpan terlepas dari pengaturan per host."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "Riwayat perintah untuk host baru",
-        "description": "Apakah host baru memulai dengan riwayat perintah diaktifkan."
-      },
-      "imageStorageMode": {
-        "label": "Mode Penyimpanan",
-        "description": "Di sinilah gambar terminal yang disalin dan diunggah ditulis. Pemilihan otomatis berdasarkan koneksi, Lokal dan Jarak Jauh (SFTP) telah ditetapkan.",
-        "auto": "Mobil",
-        "local": "Lokal",
-        "remoteSftp": "Jarak Jauh (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Direktori lokal",
-        "description": "Jalur absolut pada backend Termix tempat mode lokal menulis gambar. Tidak pernah ditampilkan setelah disimpan. Kosong menggunakan TERMIX_IMAGE_DIR."
-      },
-      "imageHostPath": {
-        "label": "Jalur host",
-        "description": "Tampilan sisi host dari direktori lokal yang diterima oleh agen terminal."
-      },
-      "imageTtlMs": {
-        "label": "TTL (ms)",
-        "description": "Berapa lama gambar yang diunggah disimpan, dalam milidetik. Kosong menggunakan TERMIX_IMAGE_TTL_MS atau satu jam."
-      },
-      "imageMaxCount": {
-        "label": "Jumlah gambar maksimum",
-        "description": "Sebagian besar gambar disimpan sekaligus. Kosong menggunakan TERMIX_MAX_IMAGE_COUNT atau 100."
-      },
-      "imageMaxBytes": {
-        "label": "Byte penyimpanan maksimum",
-        "description": "Sebagian besar byte gambar disimpan sekaligus. Kosong menggunakan TERMIX_MAX_IMAGE_STORAGE_BYTES atau 5 GiB."
-      },
-      "sessionPersistence": {
-        "label": "Pertahankan sesi setelah terputus.",
-        "description": "Pertahankan agar terminal yang terputus tetap aktif di server selama waktu yang disebutkan di atas, sehingga saat dibuka kembali, tab-nya akan melanjutkan dari tempat terakhir kali berhenti."
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "Jalankan terminal host baru di dalam tmux agar sesi tetap berjalan meskipun terjadi pemutusan koneksi (membutuhkan tmux pada host)."
-      },
-      "newHostTheme": {
-        "label": "Tema untuk host baru",
-        "description": "Tema terminal yang ditampilkan saat host baru dimulai."
-      },
-      "newHostFontFamily": {
-        "label": "Font untuk host baru",
-        "description": "Font terminal yang digunakan saat host baru pertama kali dijalankan."
-      },
-      "newHostFontSize": {
-        "label": "Ukuran font untuk host baru",
-        "description": "Ukuran font terminal yang digunakan oleh host baru saat pertama kali dijalankan, dalam piksel."
-      },
-      "newHostCursorStyle": {
-        "label": "Gaya kursor untuk host baru"
-      },
-      "newHostCursorBlink": {
-        "label": "Kursor berkedip untuk host baru"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Aktifkan Toolbar Terminal",
-        "description": "Tampilkan bilah alat akses cepat yang terpasang pada terminal aktif untuk alat dan statistik langsung host ini."
-      },
-      "terminalToolbarPosition": {
-        "label": "Posisi Toolbar",
-        "description": "Di situlah letak toolbar di terminal. Anda masih bisa menyeretnya dari sana.",
-        "bottom": "Bagian tengah bawah",
-        "bottomLeft": "Kiri bawah",
-        "bottomRight": "Kanan bawah",
-        "top": "Tengah atas",
-        "topLeft": "Kiri atas",
-        "topRight": "Kanan atas"
-      },
-      "terminalToolbarStartState": {
-        "label": "Status Awal Toolbar",
-        "description": "Apakah toolbar terbuka dalam keadaan diperluas atau diminimalkan saat terminal terhubung",
-        "expanded": "Diperluas",
-        "collapsed": "Diminimalkan"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Mode Tampilan Toolbar",
-        "description": "Cara tombol toolbar ditampilkan. Terakhir digunakan akan menyimpan pilihan Anda sebelumnya di toolbar.",
-        "remember": "Terakhir digunakan",
-        "icon": "Hanya ikon",
-        "labeled": "Ikon dan label",
-        "expanded": "Dilengkapi dengan statistik"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Tampilkan Statistik Langsung",
-        "description": "Tampilkan statistik host langsung di atas tombol toolbar dalam mode diperluas."
-      },
-      "terminalToolbarFade": {
-        "label": "Memudar Saat Diam",
-        "description": "Samarkan bilah alat hingga Anda mengarahkan kursor ke atasnya."
-      },
-      "enableCommandHistory": {
-        "label": "Riwayat Perintah",
-        "description": "Rekam perintah yang dijalankan di terminal ini untuk riwayat dan pelengkapan otomatis."
-      },
-      "enableTerminal": {
-        "label": "Aktifkan Terminal",
-        "description": "Sediakan terminal SSH untuk host ini."
-      },
-      "inheritAppearance": {
-        "label": "Gunakan pengaturan default pengguna."
-      },
-      "theme": {
-        "label": "Tema"
-      },
-      "cursorBlink": {
-        "label": "Kursor berkedip"
-      },
-      "cursorStyle": {
-        "label": "Gaya kursor"
-      },
-      "fontSize": {
-        "label": "Ukuran font"
-      },
-      "fontFamily": {
-        "label": "Font"
-      },
-      "scrollback": {
-        "label": "Gulir ke belakang"
-      },
-      "letterSpacing": {
-        "label": "Jarak antar huruf"
-      },
-      "lineHeight": {
-        "label": "Tinggi baris"
-      },
-      "bellStyle": {
-        "label": "Bel"
-      },
-      "minimumContrastRatio": {
-        "label": "Rasio kontras minimum"
-      },
-      "backgroundImage": {
-        "label": "Gambar latar belakang"
-      },
-      "backgroundImageOpacity": {
-        "label": "Opasitas gambar latar belakang"
-      },
-      "customThemeColors": {
-        "label": "Warna tema kustom"
-      },
-      "rightClickSelectsWord": {
-        "label": "Klik kanan memilih kata"
-      },
-      "macOptionIsMeta": {
-        "label": "Opsi adalah Meta"
-      },
-      "fastScrollModifier": {
-        "label": "Tombol gulir cepat"
-      },
-      "fastScrollSensitivity": {
-        "label": "Kecepatan gulir cepat"
-      },
-      "backspaceMode": {
-        "label": "Hapus"
-      },
-      "autoMosh": {
-        "label": "Auto mosh"
-      },
-      "moshCommand": {
-        "label": "Perintah mosh"
-      },
-      "autoTmux": {
-        "label": "Auto tmux"
-      },
-      "useSSHTitle": {
-        "label": "Gunakan judul SSH"
-      },
-      "syntaxHighlighting": {
-        "label": "Penyorotan sintaksis"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Kategori penyorotan sintaksis"
-      },
-      "linkClickBehavior": {
-        "label": "Klik tautan"
-      },
-      "localEcho": {
-        "label": "Gema lokal"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Tawarkan untuk mengisi kolom kata sandi."
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Isi perintah sudo"
-      },
-      "autoReconnect": {
-        "label": "Terhubung kembali secara otomatis"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Pelengkapan Otomatis Perintah",
-        "description": "Tampilkan fitur pelengkapan otomatis saat mengetik jika Anda menekan tombol Tab."
-      },
-      "localEcho": {
-        "label": "Gema Lokal",
-        "description": "Kurangi latensi input yang dirasakan menggunakan prediksi penekanan tombol lokal yang aman."
-      },
-      "linkClickBehavior": {
-        "label": "Klik Tautan Terminal",
-        "description": "Perilaku default saat mengklik tautan di terminal"
-      },
-      "customThemes": {
-        "label": "Tema yang tersimpan"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Terminal Lokal"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Gunakan sesi terminal langsung.",
-      "description": "Memungkinkan fitur lain, seperti berbagi sesi dan perekaman, untuk menjangkau sesi terminal langsung Anda."
-    },
-    "history": {
-      "title": "Baca riwayat perintah",
-      "description": "Memungkinkan fitur lain, seperti asisten AI, untuk membaca riwayat perintah Anda."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Terminal",
-    "addHost": "Tambahkan Host",
-    "applyGlobalThemeTooltip": "Terapkan tema ini",
-    "backgroundImageDesc": "URL opsional untuk gambar latar belakang terminal.",
-    "backgroundImageLabel": "URL Gambar Latar Belakang",
-    "backgroundImageOpacityLabel": "Opasitas Gambar Latar Belakang",
-    "backspaceMode": "Mode Hapus",
-    "backspaceModeControlH": "Kontrol-H (BS)",
-    "backspaceModeLabel": "Mode Hapus",
-    "backspaceModeNormal": "Normal (DEL)",
-    "behaviorAndAdvanced": "Perilaku & Tingkat Lanjut",
-    "bellStyle": "Gaya Lonceng",
-    "bellStyleBoth": "Keduanya",
-    "bellStyleLabel": "Gaya Lonceng",
-    "bellStyleNone": "Tidak ada",
-    "bellStyleSound": "Suara",
-    "bellStyleVisual": "Visual",
-    "colorTheme": "Tema Warna",
-    "cursorBlink": "Kedipan Kursor",
-    "cursorBlinking": "Kursor Berkedip",
-    "cursorBlinkingDesc": "Aktifkan animasi berkedip untuk kursor terminal.",
-    "cursorStyle": "Gaya Kursor",
-    "cursorStyleBar": "Batang",
-    "cursorStyleBlock": "Memblokir",
-    "cursorStyleLabel": "Gaya Kursor",
-    "cursorStyleUnderline": "Menggarisbawahi",
-    "customThemeAnsiColors": "Warna ANSI",
-    "customThemeBackground": "Latar belakang",
-    "customThemeBlack": "Hitam",
-    "customThemeBlue": "Biru",
-    "customThemeBrightBlack": "Hitam Terang",
-    "customThemeBrightBlue": "Biru Terang",
-    "customThemeBrightCyan": "Biru Muda Terang",
-    "customThemeBrightGreen": "Hijau Terang",
-    "customThemeBrightMagenta": "Magenta Terang",
-    "customThemeBrightRed": "Merah Terang",
-    "customThemeBrightWhite": "Putih Terang",
-    "customThemeBrightYellow": "Kuning Cerah",
-    "customThemeColors": "Warna Kustom",
-    "customThemeCursor": "Kursor",
-    "customThemeCursorAccent": "Aksen Kursor",
-    "customThemeCyan": "Biru muda",
-    "customThemeForeground": "Latar depan",
-    "customThemeGreen": "Hijau",
-    "customThemeMagenta": "Magenta",
-    "customThemeRed": "Merah",
-    "customThemeResetTooltip": "Kembalikan ke pengaturan default",
-    "customThemeSelection": "Pilihan",
-    "customThemeWhite": "Putih",
-    "customThemeYellow": "Kuning",
-    "deleteGlobalThemeTooltip": "Hapus tema ini",
-    "docsLink": "Lihat dokumen",
-    "enableAutoMosh": "Aktifkan Auto-Mosh",
-    "enableAutoMoshDesc": "Lebih baik menggunakan Mosh daripada SSH jika tersedia.",
-    "enableAutoTmux": "Aktifkan Auto-Tmux",
-    "enableAutoTmuxDesc": "Jaga agar shell Anda dan semua yang berjalan di dalamnya tetap aktif meskipun terjadi pemutusan koneksi dan restart browser dengan menjalankan perintah di dalam tmux (tmux harus diinstal pada host).",
-    "fastScrollModifier": "Pengubah Gulir Cepat",
-    "fastScrollModifierAlt": "Alternatif",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Pengubah Gulir Cepat",
-    "fastScrollModifierShift": "Menggeser",
-    "fastScrollSensitivity": "Sensitivitas Gulir Cepat",
-    "fastScrollSensitivityLabel": "Sensitivitas Gulir Cepat",
-    "fontFamily": "Keluarga Font",
-    "fontFamilyCustomHint": "Pilih font yang sudah tersedia, atau pilih Kustom dan ketik nama persis font yang sudah terpasang di sistem Anda (misalnya MesloLGS NF, Noto Sans Mono). Termix tidak dapat memasang font untuk Anda, pasang terlebih dahulu di sistem operasi Anda.",
-    "fontFamilyCustomOption": "Kebiasaan...",
-    "fontFamilyCustomPlaceholder": "Nama font yang tepat, misalnya MesloLGS NF",
-    "fontFamilyLabel": "Keluarga Font",
-    "fontSize": "Ukuran Huruf",
-    "fontSizeLabel": "Ukuran Huruf",
-    "hostNotFound": "Host tidak ditemukan",
-    "letterSpacing": "Jarak Antar Huruf",
-    "letterSpacingPx": "Jarak Antar Huruf (px)",
-    "lineHeight": "Tinggi Baris",
-    "lineHeightLabel": "Tinggi Baris",
-    "linkClickBehaviorConfirm": "Tampilkan jendela pop-up untuk membuka atau menyalin",
-    "linkClickBehaviorDesc": "Mengontrol apa yang terjadi saat Anda mengklik tautan di terminal. Gunakan 'Default' untuk mengikuti pengaturan tingkat aplikasi.",
-    "linkClickBehaviorDirect": "Buka langsung",
-    "linkClickBehaviorLabel": "Perilaku Klik Tautan",
-    "loadingHost": "Memuat host...",
-    "localEchoAuto": "Otomatis",
-    "localEchoDesc": "Memprediksi penekanan tombol yang aman dan dapat dicetak secara lokal pada koneksi lambat. Permintaan kata sandi dan input kontrol tidak pernah diulang.",
-    "localEchoLabel": "Gema Lokal",
-    "localEchoOff": "Mati",
-    "localEchoOn": "Selalu aktif",
-    "macOptionIsMetaLabel": "Tombol Opsi Mengirim Meta",
-    "macOptionIsMetaShortDesc": "Nonaktifkan pengetikan karakter khusus (seperti @ atau |) dengan tombol Option/Alt di macOS sebagai pengganti pengiriman Meta.",
-    "moshCommand": "Komando MOSH",
-    "moshCommandLabel": "Perintah Mosh",
-    "noSavedThemes": "Belum ada tema yang tersimpan.",
-    "none": "Tidak ada",
-    "passwordPromptAutoFillDesc": "Tawarkan untuk mengisi kata sandi yang tersimpan saat terminal memintanya. Matikan fitur ini agar tidak pernah mengisi kata sandi secara otomatis pada host ini.",
-    "passwordPromptAutoFillLabel": "Tawarkan fitur Isi Otomatis Kata Sandi",
-    "autoReconnectLabel": "Sambungkan Kembali Otomatis",
-    "autoReconnectDesc": "Terhubung kembali secara otomatis ketika koneksi SSH terputus, misalnya setelah gangguan jaringan atau mode tidur. Menyimpan riwayat penelusuran.",
-    "rightClickSelectsWord": "Klik kanan memilih Word",
-    "rightClickSelectsWordLabel": "Klik kanan Pilih Word",
-    "rightClickSelectsWordShortDesc": "Pilih kata di bawah kursor dengan klik kanan.",
-    "saveAsGlobalTheme": "Simpan sebagai Tema Global",
-    "saveGlobalThemeError": "Gagal menyimpan tema",
-    "saveGlobalThemeNamePrompt": "Masukkan nama untuk tema ini",
-    "saveGlobalThemeSuccess": "Tema tersimpan",
-    "savedThemesLabel": "Tema Tersimpan",
-    "scrollbackBufferLabel": "Buffer Gulir Balik",
-    "scrollbackMaxLines": "Jumlah maksimum baris yang disimpan dalam riwayat",
-    "sudoPasswordAutoFill": "Isi Otomatis Kata Sandi Sudo",
-    "sudoPasswordAutoFillDesc": "Simpan kata sandi sudo agar metrik host, perintah terminal, dan lainnya dapat menjalankan perintah istimewa secara otomatis.",
-    "sudoPasswordAutoFillLabel": "Isi Otomatis Kata Sandi Sudo",
-    "syntaxCategoryIpAddresses": "Alamat IP",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Tingkat Log",
-    "syntaxCategoryLogLevelsDesc": "kesalahan, peringatan, info, debug, fatal",
-    "syntaxCategoryNumbers": "Angka Berlabel",
-    "syntaxCategoryNumbersDesc": "port 8080, keluar 1, status 404",
-    "syntaxCategoryPaths": "Jalur File",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "Cap waktu",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 2024-01-15",
-    "syntaxCategoryUrls": "URL",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "Berikan warna pada output terminal (kesalahan, jalur, IP, stempel waktu)",
-    "syntaxHighlightingLabel": "Penyorotan Sintaksis",
-    "terminalAppearance": "Tampilan Terminal",
-    "theme": "Tema",
-    "themePreview": "Pratinjau Tema",
-    "useSSHTitleDesc": "Perbarui judul tab dari judul jendela shell, bukan nama host.",
-    "useSSHTitleLabel": "Gunakan Judul Jendela SSH",
-    "enableTunnel": "Aktifkan Tunnel",
-    "enableFileManager": "Aktifkan Pengelola File",
-    "enableDocker": "Aktifkan Docker",
-    "startupSnippet": "Cuplikan Startup",
-    "quickActions": "Tindakan Cepat",
-    "proxmoxLastSyncStatus": {
-      "success": "Kesuksesan"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} dilewati (tidak ditemukan IP)",
-    "proxmoxStatsUrlCopied": "URL Statistik Proxmox disalin ke papan klip",
-    "rdpUrlCopied": "URL RDP disalin",
-    "vncUrlCopied": "URL VNC disalin",
-    "filterAuthStepca": "Langkah CA",
-    "guac": {
-      "noCredential": "Tidak memerlukan kredensial (kredensial langsung di bawah)",
-      "authTypeDirect": "Langsung",
-      "authTypeCredential": "Mandat",
-      "authTypeNone": "Tidak ada",
-      "recordingPath": "Jalur Perekaman",
-      "recordingName": "Nama Rekaman",
-      "saveHostFirst": "Selamatkan tuan rumah terlebih dahulu.",
-      "sharingOptionsAfterSave": "Opsi berbagi tersedia setelah host disimpan.",
-      "permissionLevel": "Tingkat Izin",
-      "typeHeader": "Jenis",
-      "targetHeader": "Target",
-      "permissionHeader": "Izin",
-      "cancelBtn": "Membatalkan",
-      "savingBtn": "Penghematan...",
-      "updateHostBtn": "Perbarui Host",
-      "addHostBtn": "Tambahkan Host"
-    },
-    "filterAuthVault": "Kubah"
-  },
-  "nav": {
-    "history": "Sejarah",
-    "localTerminal": "Terminal Lokal",
-    "sshTools": "Alat SSH",
-    "terminal": "Terminal",
-    "macros": "Makro"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Ketik di sini untuk menyiarkan ketukan keyboard...",
-    "copyOnSelect": "Salin teks yang dipilih secara otomatis",
-    "enableRightClickCopyPaste": "Aktifkan salin/tempel dengan klik kanan",
-    "fillPassword": "Isi kata sandi",
-    "fillPasswordMissing": "Tidak ada kata sandi tersimpan untuk {{count}} terminal yang dipilih",
-    "fillPasswordSuccess": "Kata sandi dimasukkan ke dalam terminal {{count}}",
-    "keyRecordingTitle": "Rekaman Kunci",
-    "noTerminalTabsOpen": "Tidak ada tab terminal yang terbuka.",
-    "recordToTerminals": "Rekam ke terminal",
-    "selectAll": "Semua",
-    "selectNone": "Tidak ada",
-    "selectTerminalsAbove": "Pilih terminal di atas",
-    "settingsTitle": "Pengaturan",
-    "startRecording": "Mulai Merekam",
-    "stopRecording": "Hentikan Perekaman"
-  },
-  "keybindings": {
-    "copy": "Salin pilihan",
-    "paste": "Pasta",
-    "sendControlCode": "Kirim sinyal Ctrl+huruf",
-    "sendText": "Kirim pesan teks",
-    "controlCodeLabel": "Surat",
-    "textLabel": "Teks untuk dikirim",
-    "appendEnterLabel": "Tekan Enter setelah mengirim",
-    "clipboardPermissionNote": "Pada beberapa browser, mungkin akan meminta izin akses clipboard saat pertama kali digunakan.",
-    "textRequired": "Masukkan teks yang ingin dikirim",
-    "controlCodeRequired": "Masukkan satu huruf untuk kode kontrol.",
-    "builtIn": {
-      "copyCtrlC": "Salin pilihan (Ctrl+C, hanya jika teks dipilih)",
-      "copyCtrlShiftC": "Salin pilihan (Ctrl+Shift+C)",
-      "copyCmdC": "Salin pilihan (Cmd+C)",
-      "pasteCtrlShiftV": "Salin dari clipboard (Ctrl+Shift+V)",
-      "ctrlW": "Kirim Ctrl+W ke shell (diblokir agar tidak menutup tab browser)",
-      "ctrlT": "Kirim Ctrl+T ke shell (diblokir agar tidak membuka tab browser)",
-      "ctrlN": "Kirim Ctrl+N ke shell (diblokir agar tidak membuka jendela browser)",
-      "ctrlQ": "Kirim Ctrl+Q ke shell (diblokir agar tidak menutup browser)"
-    }
-  },
-  "macros": {
-    "title": "Makro",
-    "description": "Jalankan serangkaian perintah yang tersimpan di terminal, dan tanggapi apa yang dikirimkan kembali oleh server.",
-    "target": "Target",
-    "noTerminal": "Tidak ada terminal yang terbuka",
-    "empty": "Belum ada makro",
-    "emptyHint": "Buat makro untuk mengotomatiskan alur terminal, seperti masuk, memulai ulang layanan, atau menjawab perintah.",
-    "create": "Makro baru",
-    "back": "Kembali ke makro",
-    "name": "Nama",
-    "namePlaceholder": "Mulai ulang server web",
-    "nameRequired": "Beri nama makro sebelum menyimpannya.",
-    "descriptionLabel": "Keterangan",
-    "descriptionPlaceholder": "Fungsi makro ini (opsional)",
-    "unsaved": "Perubahan yang belum disimpan",
-    "save": "Menyimpan",
-    "saved": "Makro tersimpan",
-    "saveFailed": "Makro tidak dapat disimpan.",
-    "delete": "Menghapus",
-    "deleteTitle": "Hapus makro ini?",
-    "deleteBody": "\"{{name}}\" akan dihapus secara permanen. Ini tidak dapat dibatalkan.",
-    "deleted": "Makro dihapus",
-    "cancel": "Membatalkan",
-    "run": "Berlari",
-    "stop": "Berhenti",
-    "running": "Berlari...",
-    "completed": "Makro selesai",
-    "failed": "Makro gagal",
-    "loadFailed": "Makro tidak dapat dimuat",
-    "needTerminal": "Buka dan sambungkan terminal terlebih dahulu.",
-    "noSteps": "Makro ini belum memiliki langkah. Tambahkan langkah di bawah ini.",
-    "addStep": "Tambahkan langkah",
-    "stepNumber": "Langkah {{number}}",
-    "removeStep": "Hapus langkah",
-    "confirmRunTitle": "Jalankan makro ini?",
-    "confirmRunBody": "\"{{name}}\" akan mengirimkan perintah ke {{host}}.",
-    "confirmRunAction": "Jalankan makro",
-    "stepTypes": {
-      "send": {
-        "label": "Kirim perintah",
-        "help": "Mengetik teks ke terminal, sama seperti jika Anda mengetiknya."
-      },
-      "wait": {
-        "label": "Tunggu hingga muncul output.",
-        "help": "Akan berhenti sejenak hingga server menampilkan teks yang Anda sebutkan, seperti saat meminta kata sandi."
-      },
-      "delay": {
-        "label": "Berhenti sebentar",
-        "help": "Menunggu dalam jangka waktu tertentu sebelum melanjutkan ke langkah berikutnya."
-      },
-      "if": {
-        "label": "Jika output berisi",
-        "help": "Memeriksa semua yang telah dicetak server sejauh ini, lalu menjalankan salah satu dari dua cabang."
-      },
-      "repeat": {
-        "label": "Mengulang",
-        "help": "Menjalankan langkah-langkah di dalamnya sebanyak jumlah kali yang telah ditentukan."
-      }
-    },
-    "send": {
-      "text": "Perintah atau teks",
-      "textPlaceholder": "systemctl restart nginx",
-      "pressEnter": "Tekan Enter setelah mengirim",
-      "pressEnterHelp": "Matikan opsi ini untuk mengetik teks tanpa mengirimkannya."
-    },
-    "wait": {
-      "pattern": "Tunggu hingga output berisi",
-      "patternPlaceholder": "kata sandi:",
-      "timeout": "Menyerah setelah",
-      "onTimeout": "Jika itu tidak pernah muncul",
-      "stop": "Hentikan makro",
-      "continue": "Tetaplah melanjutkan"
-    },
-    "delay": {
-      "duration": "Tunggu"
-    },
-    "ifStep": {
-      "pattern": "Jika outputnya berisi",
-      "patternPlaceholder": "Aktif: aktif (berjalan)",
-      "then": "Kemudian lakukan ini",
-      "else": "Jika tidak, lakukan ini",
-      "emptyBranch": "Tidak ada tangga"
-    },
-    "repeat": {
-      "count": "Jumlah kali",
-      "times": "waktu"
-    },
-    "match": {
-      "useRegex": "Cocokkan dengan ekspresi reguler",
-      "useRegexHelp": "Hilangkan bagian ini agar sesuai persis dengan teks yang tertulis.",
-      "invalidRegex": "Bukan ekspresi reguler yang valid, akan dicocokkan sebagai teks biasa."
-    },
-    "seconds": "detik",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "Diperlukan server jarak jauh. Hubungkan server jarak jauh di Pengaturan untuk menggunakan jenis koneksi ini."
-  },
-  "plugin": {
-    "name": "Terminal SSH"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/it_IT.json b/plugins/ssh-terminal/locales/translated/it_IT.json
deleted file mode 100644
index 4ff58ff2d..000000000
--- a/plugins/ssh-terminal/locales/translated/it_IT.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Aggiungi",
-    "arrowDown": "Freccia Giù",
-    "arrowLeft": "Freccia Sinistra",
-    "arrowRight": "Freccia Destra",
-    "arrowUp": "Freccia Su",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Canc",
-    "done": "Fine",
-    "editQuickKeys": "Modifica tasti rapidi",
-    "end": "Fine",
-    "esc": "Esc",
-    "home": "Home",
-    "pageDown": "Pag Giù",
-    "pageUp": "Pag Su",
-    "paste": "Incolla",
-    "quickKeyPlaceholder": "ad es. sudo ",
-    "quickKeysDesc": "Tocca × per rimuovere. Supporta fino a 8 caratteri.",
-    "quickKeysTitle": "Tasti Rapidi",
-    "removeQuickKey": "Rimuovi",
-    "resetDefaults": "Ripristina impostazioni predefinite",
-    "shift": "Maiusc",
-    "tab": "Tab"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Impossibile abilitare Auto-Tmux",
-    "autoTmuxEnabled": "Auto-Tmux abilitato per {{host}}. Si applica dalla prossima connessione.",
-    "clipboardHttpWarning": "Impossibile leggere gli appunti. Alcuni browser limitano l'accesso agli appunti al di fuori del protocollo HTTPS: prova a usare Ctrl+V oppure a utilizzare Termix tramite HTTPS.",
-    "closeTab": "Chiudi",
-    "connecting": "Connessione in corso...",
-    "connectionLost": "Connessione persa",
-    "connectionRejected": "Connessione rifiutata dal server. Controlla l'autenticazione e la configurazione di rete.",
-    "connectionTimeout": "Timeout di connessione",
-    "enableAutoTmuxAction": "Abilita Auto-Tmux",
-    "hostKeyRejected": "Verifica della chiave host SSH rifiutata. Connessione annullata.",
-    "linkDialogCopy": "Copia",
-    "linkDialogOpen": "Apri",
-    "linkDialogTitle": "Apri collegamento",
-    "maxReconnectAttemptsReached": "Raggiunto il numero massimo di tentativi di riconnessione",
-    "noHostSelected": "Nessun host selezionato",
-    "passwordPromptFillTitle": "Inserire la password salvata in questa richiesta?",
-    "reconnect": "Riconnetti",
-    "reconnected": "Riconnesso con successo",
-    "reconnecting": "Riconnessione... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Connessione persa, tentativo di riconnessione in corso...",
-    "searchCaseSensitive": "Scatola di fiammiferi",
-    "searchClose": "Chiudi (Esc)",
-    "searchNext": "Prossima partita (Invio)",
-    "searchNoResults": "Nessun risultato",
-    "searchPlaceholder": "Trovare",
-    "searchPrevious": "Partita precedente (Maiusc+Invio)",
-    "searchRegex": "Utilizzare le espressioni regolari",
-    "searchResultCount": "{{index}} di {{count}}",
-    "searchWholeWord": "Abbina la parola intera",
-    "sessionExpiredNotice": "La tua sessione precedente su {{host}} è scaduta dopo {{minutes}} minuti di disconnessione; la shell e tutto ciò che era in esecuzione al suo interno sono stati terminati. Abilita Auto-Tmux su questo host per mantenere attive le sessioni.",
-    "sessionExpiredNoticeNoMinutes": "La tua sessione precedente su {{host}} è scaduta mentre eri disconnesso; la shell e tutto ciò che era in esecuzione al suo interno sono stati eliminati. Abilita Auto-Tmux su questo host per mantenere attive le sessioni.",
-    "sessionTakenOver": "La sessione è stata aperta in un'altra scheda. Riconnessione...",
-    "tmuxAttached": "Client collegati",
-    "tmuxAttachedCount": "{{count}} collegato",
-    "tmuxCopyHint": "Regola la selezione e premi Invio per copiare negli appunti",
-    "tmuxCreateNew": "Avvia nuova sessione",
-    "tmuxDetached": "Scollegato dalla sessione tmux",
-    "tmuxLastActivity": "Ultima attività",
-    "tmuxSessionAttached": "Sessione tmux collegata: {{name}}",
-    "tmuxSessionCreated": "Sessione tmux creata: {{name}}",
-    "tmuxSessionPickerDesc": "Sono state trovate sessioni tmux esistenti su questo host. Selezionane una per ricollegarti o crea una nuova sessione.",
-    "tmuxSessionPickerTitle": "Sessioni tmux",
-    "tmuxTimeDays": "{{count}}d fa",
-    "tmuxTimeHours": "{{count}}h fa",
-    "tmuxTimeJustNow": "Adesso",
-    "tmuxTimeMinutes": "{{count}}m fa",
-    "tmuxUnavailable": "tmux non è installato sull'host remoto, si utilizza la shell standard",
-    "tmuxWindowCount": "{{count}} finestra",
-    "tmuxWindows": "Finestre",
-    "unknownError": "Si è verificato un errore sconosciuto",
-    "websocketAbnormalClose": "La connessione si è chiusa in modo imprevisto. Potrebbe trattarsi di un problema di reverse proxy o configurazione SSL. Controlla i log del server.",
-    "websocketError": "Errore di connessione WebSocket",
-    "clipboardReadFailed": "Lettura dagli appunti non riuscita. Assicurati che i permessi degli appunti siano stati concessi.",
-    "clipboardWriteFailed": "Copia negli appunti non riuscita. Assicurati che la pagina sia servita via HTTPS o localhost.",
-    "connected": "Connesso",
-    "totpCodeLabel": "Codice di verifica",
-    "duplicateTab": "Scheda duplicata",
-    "imageChooseFile": "Seleziona un file immagine",
-    "imageUploaded": "Immagine caricata: {{path}}",
-    "imageClipboardUnavailable": "Questo browser non può leggere le immagini dagli appunti",
-    "imageClipboardEmpty": "Nessuna immagine trovata negli appunti",
-    "localShell": "Shell del terminale locale",
-    "autocompleteHintComplete": "Premi Tab o Invio per completare",
-    "autocompleteHintNavigate": "↑↓ per navigare",
-    "autocompleteHintClose": "Esc per chiudere"
-  },
-  "terminalToolbar": {
-    "detachTmux": "Scollega tmux",
-    "detachTmuxDescription": "Scollega la sessione tmux",
-    "dismissError": "Chiudi errore immagine",
-    "hideToolbar": "Nascondi la barra degli strumenti",
-    "image": "Azioni sulle immagini (solo immagini)",
-    "imageActionFailed": "L'azione sull'immagine non è riuscita.",
-    "layout": "Modalità di visualizzazione della barra degli strumenti",
-    "layoutExpanded": "Espandeto con metriche",
-    "layoutIcon": "Solo icona",
-    "layoutLabeled": "Icone ed etichette",
-    "moveToolbar": "Sposta la barra degli strumenti",
-    "moveToolbarHint": "Trascina per riposizionare la barra degli strumenti",
-    "paste": "Incolla l'immagine",
-    "pasteImage": "Incolla l'immagine dagli appunti (solo immagini)",
-    "retry": "Riprova",
-    "showToolbar": "Espandi barra degli strumenti",
-    "upload": "Carica immagine",
-    "uploadImage": "Carica un'immagine sull'host",
-    "uploadingImage": "Caricamento in corso..."
-  },
-  "history": {
-    "noTerminalSelected": "Nessun terminale selezionato",
-    "noTerminalSelectedHint": "Apri una scheda di terminale SSH per visualizzare la cronologia dei comandi",
-    "searchPlaceholder": "Cerca nella cronologia...",
-    "clearAll": "Cancella tutto",
-    "noHistoryEntries": "Nessuna voce nella cronologia",
-    "trackingDisabled": "Tracciamento cronologia disabilitato",
-    "trackingDisabledHint": "Attiva la cronologia dei comandi nella scheda Terminale SSH di questo host.",
-    "commandCount_one": "{{count}} comando",
-    "commandCount_other": "{{count}} comandi"
-  },
-  "touchInput": {
-    "enabled": "Abilita input tattile",
-    "enabledDesc": "Consenti lo scorrimento con un solo dito nei terminali",
-    "momentumEnabled": "Abilitare lo slancio",
-    "momentumEnabledDesc": "Continua a scorrere brevemente dopo uno swipe",
-    "advanced": "Avanzato",
-    "resetDefaults": "Ripristina impostazioni predefinite",
-    "dragThreshold": "Trascinamento",
-    "maxWheelDelta": "Delta massimo della ruota",
-    "momentumSampleWindow": "Finestra di campionamento del momento",
-    "releaseGracePeriod": "Periodo di grazia per il rilascio",
-    "minimumVelocity": "Velocità minima",
-    "maximumVelocity": "velocità massima",
-    "maximumDuration": "Durata massima",
-    "maximumTravel": "Viaggio massimo",
-    "decayTime": "tempo di decadimento",
-    "pixelsPerTick": "Pixel per tick",
-    "maximumFrameInterval": "Intervallo massimo tra i fotogrammi",
-    "maximumTicksPerFrame": "Numero massimo di tick per fotogramma"
-  },
-  "imageStorage": {
-    "instanceId": "ID sessione terminale",
-    "instanceIdDesc": "ID istanza di una delle schede del terminale a cui sei connesso, utilizzato per testare la visibilità.",
-    "selectedModeUnavailable": "Non disponibile",
-    "test": "Test",
-    "testing": "Test...",
-    "testFailed": "Impossibile testare l'archiviazione delle immagini",
-    "testConnected": "La sessione del terminale è connessa.",
-    "testNotConnected": "Nessuna sessione terminale connessa con questo ID istanza.",
-    "testSelectedMode": "Per caricare un file si utilizzerebbe: {{mode}}",
-    "testLocalVisible": "La directory locale è visibile dall'host connesso.",
-    "testLocalNotVisible": "La directory locale NON è visibile dall'host connesso."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Input tattile",
-        "images": "Archiviazione delle immagini",
-        "sessions": "Sessioni",
-        "newHosts": "Nuovi host"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Persistenza della sessione terminale",
-        "description": "Per quanto tempo un terminale disconnesso rimane attivo sul server prima di essere chiuso. Minimo 1 minuto, massimo 1440 minuti. Per le sessioni che devono durare più a lungo, abilitare Auto-Tmux sull'host."
-      },
-      "commandHistoryEnabled": {
-        "label": "Cronologia comandi",
-        "description": "Consenti la registrazione della cronologia comandi. Se disabilitato, la cronologia non viene salvata indipendentemente dalle impostazioni per host."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "Cronologia dei comandi per i nuovi host",
-        "description": "Indica se i nuovi host si avviano con la cronologia dei comandi attiva."
-      },
-      "imageStorageMode": {
-        "label": "Modalità di archiviazione",
-        "description": "Dove vengono scritte le immagini del terminale incollate e caricate. Le selezioni automatiche per connessione, locale e remota (SFTP), sono predefinite.",
-        "auto": "Auto",
-        "local": "Locale",
-        "remoteSftp": "Remoto (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Cartella locale",
-        "description": "Percorso assoluto sul backend di Termix in cui la modalità locale scrive le immagini. Non viene mai visualizzato dopo il salvataggio. Se vuoto, utilizza TERMIX_IMAGE_DIR."
-      },
-      "imageHostPath": {
-        "label": "Percorso host",
-        "description": "La visualizzazione lato host della directory locale ricevuta dagli agenti terminali."
-      },
-      "imageTtlMs": {
-        "label": "TTL (ms)",
-        "description": "Per quanto tempo, in millisecondi, viene conservata un'immagine caricata. Se il valore è vuoto, viene utilizzato TERMIX_IMAGE_TTL_MS, ovvero un'ora."
-      },
-      "imageMaxCount": {
-        "label": "Numero massimo di immagini",
-        "description": "La maggior parte delle immagini viene conservata contemporaneamente. Se il campo è vuoto, viene utilizzato TERMIX_MAX_IMAGE_COUNT o 100."
-      },
-      "imageMaxBytes": {
-        "label": "byte di archiviazione massimi",
-        "description": "La maggior parte dei byte delle immagini vengono conservati contemporaneamente. Se vuoto, viene utilizzato TERMIX_MAX_IMAGE_STORAGE_BYTES o 5 GiB."
-      },
-      "sessionPersistence": {
-        "label": "Mantieni le sessioni anche dopo la disconnessione",
-        "description": "Mantieni attivo un terminale disconnesso sul server per il tempo indicato sopra, in modo che alla riapertura della scheda la sessione riprenda da dove si era interrotta."
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "Eseguire i terminali dei nuovi host all'interno di tmux in modo che le sessioni sopravvivano alle disconnessioni (richiede tmux sull'host)."
-      },
-      "newHostTheme": {
-        "label": "Tema per i nuovi host",
-        "description": "Il tema del terminale con cui si avvia un nuovo host."
-      },
-      "newHostFontFamily": {
-        "label": "Carattere per i nuovi host",
-        "description": "Il font del terminale con cui si avvia un nuovo host."
-      },
-      "newHostFontSize": {
-        "label": "Dimensione del carattere per i nuovi host",
-        "description": "La dimensione del carattere del terminale con cui un nuovo host inizia, in pixel."
-      },
-      "newHostCursorStyle": {
-        "label": "Stile del cursore per i nuovi host"
-      },
-      "newHostCursorBlink": {
-        "label": "Cursore lampeggiante per i nuovi host"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Abilita la barra degli strumenti del terminale",
-        "description": "Mostra una barra degli strumenti ad accesso rapido ancorata al terminale attivo per gli strumenti e le statistiche in tempo reale di questo host."
-      },
-      "terminalToolbarPosition": {
-        "label": "Posizione della barra degli strumenti",
-        "description": "Dove si trova la barra degli strumenti nel terminale. Puoi ancora trascinarla da lì.",
-        "bottom": "In basso al centro",
-        "bottomLeft": "In basso a sinistra",
-        "bottomRight": "In basso o",
-        "top": "In alto al centro",
-        "topLeft": "In alto a sinistra",
-        "topRight": "In alto a destra"
-      },
-      "terminalToolbarStartState": {
-        "label": "Stato iniziale della barra degli strumenti",
-        "description": "Se la barra degli strumenti si apre espansa o ridotta a icona quando si connette il terminale",
-        "expanded": "Espandere",
-        "collapsed": "Ridotto al minimo"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Modalità di visualizzazione della barra degli strumenti",
-        "description": "Come vengono visualizzati i pulsanti della barra degli strumenti. L'ultima selezione mantiene invariato l'elemento scelto nella barra degli strumenti.",
-        "remember": "Ultimo utilizzo",
-        "icon": "Solo icona",
-        "labeled": "Icone ed etichette",
-        "expanded": "Espandeto con statistiche"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Mostra le statistiche in tempo reale",
-        "description": "Mostra le statistiche dell'host in tempo reale sopra i pulsanti della barra degli strumenti in modalità espansa"
-      },
-      "terminalToolbarFade": {
-        "label": "Dissolvenza in stato di inattività",
-        "description": "Fai scomparire gradualmente la barra degli strumenti finché non ci passi sopra con il mouse."
-      },
-      "enableCommandHistory": {
-        "label": "Cronologia comandi",
-        "description": "Registra i comandi eseguiti in questo terminale per la cronologia e il completamento automatico"
-      },
-      "enableTerminal": {
-        "label": "Abilita Terminal",
-        "description": "Offri un terminale SSH per questo host."
-      },
-      "inheritAppearance": {
-        "label": "Utilizza le impostazioni predefinite dell'utente"
-      },
-      "theme": {
-        "label": "Tema"
-      },
-      "cursorBlink": {
-        "label": "Cursore lampeggiante"
-      },
-      "cursorStyle": {
-        "label": "Stile del cursore"
-      },
-      "fontSize": {
-        "label": "dimensione del carattere"
-      },
-      "fontFamily": {
-        "label": "Font"
-      },
-      "scrollback": {
-        "label": "Torna indietro"
-      },
-      "letterSpacing": {
-        "label": "Spaziatura tra le lettere"
-      },
-      "lineHeight": {
-        "label": "Altezza della linea"
-      },
-      "bellStyle": {
-        "label": "Campana"
-      },
-      "minimumContrastRatio": {
-        "label": "Rapporto di contrasto minimo"
-      },
-      "backgroundImage": {
-        "label": "Immagine di sfondo"
-      },
-      "backgroundImageOpacity": {
-        "label": "opacità dell'immagine di sfondo"
-      },
-      "customThemeColors": {
-        "label": "Colori del tema personalizzati"
-      },
-      "rightClickSelectsWord": {
-        "label": "Il clic destro seleziona la parola"
-      },
-      "macOptionIsMeta": {
-        "label": "L'opzione è Meta"
-      },
-      "fastScrollModifier": {
-        "label": "Tasto di scorrimento rapido"
-      },
-      "fastScrollSensitivity": {
-        "label": "Velocità di scorrimento elevata"
-      },
-      "backspaceMode": {
-        "label": "Backspace"
-      },
-      "autoMosh": {
-        "label": "Auto mosh"
-      },
-      "moshCommand": {
-        "label": "comando Mosh"
-      },
-      "autoTmux": {
-        "label": "Auto tmux"
-      },
-      "useSSHTitle": {
-        "label": "Utilizzare il titolo SSH"
-      },
-      "syntaxHighlighting": {
-        "label": "Evidenziazione della sintassi"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Categorie di evidenziazione della sintassi"
-      },
-      "linkClickBehavior": {
-        "label": "Fare clic sul link"
-      },
-      "localEcho": {
-        "label": "Eco locale"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Offerta di compilare i campi della password"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Compila i prompt di sudo"
-      },
-      "autoReconnect": {
-        "label": "Riconnessione automatica"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Completamento comandi",
-        "description": "Mostra il completamento automatico durante la digitazione se premi il tasto Tab."
-      },
-      "localEcho": {
-        "label": "Eco locale",
-        "description": "Riduci la latenza di input percepita utilizzando la predizione sicura della pressione dei tasti a livello locale."
-      },
-      "linkClickBehavior": {
-        "label": "Clic su link nel terminale",
-        "description": "Comportamento predefinito quando si fa clic su un collegamento nel terminale"
-      },
-      "customThemes": {
-        "label": "Temi salvati"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Terminale locale"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Utilizzare sessioni di terminale live",
-      "description": "Consente ad altre funzionalità, come la condivisione e la registrazione delle sessioni, di raggiungere le sessioni del terminale in tempo reale."
-    },
-    "history": {
-      "title": "Leggi la cronologia dei comandi",
-      "description": "Consente ad altre funzionalità, come l'assistente AI, di leggere la cronologia dei comandi."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Terminale",
-    "addHost": "Aggiungi host",
-    "applyGlobalThemeTooltip": "Applica questo tema",
-    "backgroundImageDesc": "URL opzionale per un'immagine di sfondo del terminale",
-    "backgroundImageLabel": "URL immagine di sfondo",
-    "backgroundImageOpacityLabel": "Opacità immagine di sfondo",
-    "backspaceMode": "Modalità Backspace",
-    "backspaceModeControlH": "Controllo-H (BS)",
-    "backspaceModeLabel": "Modalità backspace",
-    "backspaceModeNormal": "Normale (DEL)",
-    "behaviorAndAdvanced": "Comportamento e avanzate",
-    "bellStyle": "Stile campanello",
-    "bellStyleBoth": "Entrambi",
-    "bellStyleLabel": "Stile segnale acustico",
-    "bellStyleNone": "Nessuno",
-    "bellStyleSound": "Suono",
-    "bellStyleVisual": "Visivo",
-    "colorTheme": "Tema colore",
-    "cursorBlink": "Lampeggio cursore",
-    "cursorBlinking": "Lampeggiamento cursore",
-    "cursorBlinkingDesc": "Abilita l'animazione lampeggiante per il cursore del terminale",
-    "cursorStyle": "Stile cursore",
-    "cursorStyleBar": "Sbarra",
-    "cursorStyleBlock": "Bloccare",
-    "cursorStyleLabel": "Stile cursore",
-    "cursorStyleUnderline": "Sottolineare",
-    "customThemeAnsiColors": "Colori ANSI",
-    "customThemeBackground": "Sfondo",
-    "customThemeBlack": "Nero",
-    "customThemeBlue": "Blu",
-    "customThemeBrightBlack": "Nero brillante",
-    "customThemeBrightBlue": "Blu brillante",
-    "customThemeBrightCyan": "Ciano brillante",
-    "customThemeBrightGreen": "Verde brillante",
-    "customThemeBrightMagenta": "Magenta brillante",
-    "customThemeBrightRed": "Rosso brillante",
-    "customThemeBrightWhite": "Bianco brillante",
-    "customThemeBrightYellow": "Giallo brillante",
-    "customThemeColors": "Colori personalizzati",
-    "customThemeCursor": "Cursore",
-    "customThemeCursorAccent": "Accento cursore",
-    "customThemeCyan": "Ciano",
-    "customThemeForeground": "Primo piano",
-    "customThemeGreen": "Verde",
-    "customThemeMagenta": "Magenta",
-    "customThemeRed": "Rosso",
-    "customThemeResetTooltip": "Ripristina predefiniti",
-    "customThemeSelection": "Selezione",
-    "customThemeWhite": "Bianco",
-    "customThemeYellow": "Giallo",
-    "deleteGlobalThemeTooltip": "Elimina questo tema",
-    "docsLink": "Visualizza documentazione",
-    "enableAutoMosh": "Abilita Auto-Mosh",
-    "enableAutoMoshDesc": "Preferisci Mosh rispetto a SSH se disponibile",
-    "enableAutoTmux": "Abilita Auto-Tmux",
-    "enableAutoTmuxDesc": "Mantieni la tua shell e tutto ciò che è in esecuzione al suo interno attivi anche in caso di disconnessioni e riavvii del browser, eseguendoli all'interno di tmux (tmux deve essere installato sull'host).",
-    "fastScrollModifier": "Modificatore scorrimento veloce",
-    "fastScrollModifierAlt": "Alt",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Modificatore scorrimento veloce",
-    "fastScrollModifierShift": "Maiusc",
-    "fastScrollSensitivity": "Sensibilità scorrimento veloce",
-    "fastScrollSensitivityLabel": "Sensibilità scorrimento veloce",
-    "fontFamily": "Famiglia di caratteri",
-    "fontFamilyCustomHint": "Scegli un font incluso nel pacchetto oppure seleziona Personalizzato e digita il nome esatto di un font già installato sul tuo sistema (ad esempio MesloLGS NF, Noto Sans Mono). Termix non può installare font per te, installalo prima sul tuo sistema operativo.",
-    "fontFamilyCustomOption": "Costume...",
-    "fontFamilyCustomPlaceholder": "Nome esatto del carattere, ad esempio MesloLGS NF",
-    "fontFamilyLabel": "Famiglia di caratteri",
-    "fontSize": "Dimensione carattere",
-    "fontSizeLabel": "Dimensione carattere",
-    "hostNotFound": "Host non trovato",
-    "letterSpacing": "Spaziatura caratteri",
-    "letterSpacingPx": "Spaziatura caratteri (px)",
-    "lineHeight": "Altezza riga",
-    "lineHeightLabel": "Interlinea",
-    "linkClickBehaviorConfirm": "Mostra popup per aprire o copiare",
-    "linkClickBehaviorDesc": "Controlla cosa succede quando fai clic su un link nel terminale. Usa 'Predefinito' per seguire l'impostazione a livello di app.",
-    "linkClickBehaviorDirect": "Apri direttamente",
-    "linkClickBehaviorLabel": "Comportamento al clic del link",
-    "loadingHost": "Caricamento host...",
-    "localEchoAuto": "Automatico",
-    "localEchoDesc": "Prevedi localmente le sequenze di tasti sicure e stampabili anche con connessioni lente. Le richieste di password e gli input di controllo non vengono mai ripetuti.",
-    "localEchoLabel": "Eco locale",
-    "localEchoOff": "Disattivo",
-    "localEchoOn": "Sempre acceso",
-    "macOptionIsMetaLabel": "Tasto Opzione Invia Meta",
-    "macOptionIsMetaShortDesc": "Disabilita la digitazione di caratteri speciali (come @ o |) con il tasto Opzione/Alt su macOS invece di inviare Meta",
-    "moshCommand": "Comando MOSH",
-    "moshCommandLabel": "Comando Mosh",
-    "noSavedThemes": "Nessun tema salvato al momento",
-    "none": "Nessuna",
-    "passwordPromptAutoFillDesc": "Offri la possibilità di inserire la password salvata quando il terminale la richiede. Disattiva l'opzione per non inserire mai automaticamente la password su questo host.",
-    "passwordPromptAutoFillLabel": "Offerta di compilazione automatica della password",
-    "autoReconnectLabel": "Riconnessione automatica",
-    "autoReconnectDesc": "Si riconnette automaticamente quando la connessione SSH si interrompe, ad esempio dopo un'interruzione di rete o durante la modalità di sospensione. Mantiene la funzione di scorrimento.",
-    "rightClickSelectsWord": "Clic destro seleziona la parola",
-    "rightClickSelectsWordLabel": "Clic destro seleziona la parola",
-    "rightClickSelectsWordShortDesc": "Seleziona la parola sotto il cursore con clic destro",
-    "saveAsGlobalTheme": "Salva come tema globale",
-    "saveGlobalThemeError": "Impossibile salvare il tema",
-    "saveGlobalThemeNamePrompt": "Inserisci un nome per questo tema",
-    "saveGlobalThemeSuccess": "Tema salvato",
-    "savedThemesLabel": "Temi salvati",
-    "scrollbackBufferLabel": "Buffer di scorrimento",
-    "scrollbackMaxLines": "Numero massimo di righe conservate nella cronologia",
-    "sudoPasswordAutoFill": "Compilazione automatica password sudo",
-    "sudoPasswordAutoFillDesc": "Memorizza una password sudo in modo che le metriche dell'host, i prompt del terminale e altro possano eseguire automaticamente comandi privilegiati.",
-    "sudoPasswordAutoFillLabel": "Compilazione automatica password sudo",
-    "syntaxCategoryIpAddresses": "Indirizzi IP",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Livelli di log",
-    "syntaxCategoryLogLevelsDesc": "error, warn, info, debug, fatal",
-    "syntaxCategoryNumbers": "Numeri con etichetta",
-    "syntaxCategoryNumbersDesc": "port 8080, exit 1, status 404",
-    "syntaxCategoryPaths": "Percorsi file",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "Timestamp",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 2024-01-15",
-    "syntaxCategoryUrls": "URL",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "Colora l'output del terminale (errori, percorsi, IP, timestamp)",
-    "syntaxHighlightingLabel": "Evidenziazione sintassi",
-    "terminalAppearance": "Aspetto del terminale",
-    "theme": "Tema",
-    "themePreview": "Anteprima tema",
-    "useSSHTitleDesc": "Aggiorna il titolo della scheda dal titolo della finestra del terminale invece del nome host",
-    "useSSHTitleLabel": "Usa il titolo della finestra SSH",
-    "enableTunnel": "Abilita Tunnel",
-    "enableFileManager": "Abilita File Manager",
-    "enableDocker": "Abilita Docker",
-    "startupSnippet": "Snippet di avvio",
-    "quickActions": "Azioni rapide",
-    "proxmoxLastSyncStatus": {
-      "success": "Riuscita"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} saltato (nessun IP trovato)",
-    "proxmoxStatsUrlCopied": "URL delle statistiche di Proxmox copiato negli appunti",
-    "rdpUrlCopied": "URL RDP copiato",
-    "vncUrlCopied": "URL VNC copiato",
-    "filterAuthStepca": "Passo CA",
-    "guac": {
-      "noCredential": "Nessuna credenziale (credenziali dirette di seguito)",
-      "authTypeDirect": "Diretta",
-      "authTypeCredential": "Credenziale",
-      "authTypeNone": "Nessuno",
-      "recordingPath": "Percorso registrazione",
-      "recordingName": "Nome registrazione",
-      "saveHostFirst": "Salva prima l'host",
-      "sharingOptionsAfterSave": "Le opzioni di condivisione sono disponibili dopo aver salvato l'host",
-      "permissionLevel": "Livello di autorizzazione",
-      "typeHeader": "Tipo",
-      "targetHeader": "Destinazione",
-      "permissionHeader": "Autorizzazione",
-      "cancelBtn": "Annulla",
-      "savingBtn": "Salvando...",
-      "updateHostBtn": "Aggiorna host",
-      "addHostBtn": "Aggiungi host"
-    },
-    "filterAuthVault": "Volta"
-  },
-  "nav": {
-    "history": "Cronologia",
-    "localTerminal": "Terminale locale",
-    "sshTools": "Strumenti SSH",
-    "terminal": "Terminale",
-    "macros": "Macro"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Digita qui per trasmettere le pressioni dei tasti...",
-    "copyOnSelect": "Copia automaticamente il testo selezionato",
-    "enableRightClickCopyPaste": "Abilita copia/incolla con clic destro",
-    "fillPassword": "Inserisci password",
-    "fillPasswordMissing": "Nessuna password salvata per {{count}} terminale/i selezionato/i",
-    "fillPasswordSuccess": "Password inserita in {{count}} terminale/i",
-    "keyRecordingTitle": "Registrazione tasti",
-    "noTerminalTabsOpen": "Nessuna scheda terminale aperta",
-    "recordToTerminals": "Registra sui terminali",
-    "selectAll": "Tutte",
-    "selectNone": "Nessuno",
-    "selectTerminalsAbove": "Seleziona i terminali sopra",
-    "settingsTitle": "Impostazioni",
-    "startRecording": "Avvia registrazione",
-    "stopRecording": "Interrompi registrazione"
-  },
-  "keybindings": {
-    "copy": "Copia selezione",
-    "paste": "Incolla",
-    "sendControlCode": "Invia il segnale Ctrl+lettera",
-    "sendText": "Invia testo",
-    "controlCodeLabel": "Lettera",
-    "textLabel": "Testo da inviare",
-    "appendEnterLabel": "Premi Invio dopo aver inviato",
-    "clipboardPermissionNote": "In alcuni browser potrebbe essere richiesta l'autorizzazione per l'apposizione degli appunti al primo utilizzo.",
-    "textRequired": "Inserisci il testo da inviare",
-    "controlCodeRequired": "Inserisci una sola lettera come codice di controllo",
-    "builtIn": {
-      "copyCtrlC": "Copia selezione (Ctrl+C, solo quando è selezionato del testo)",
-      "copyCtrlShiftC": "Copia selezione (Ctrl+Maiusc+C)",
-      "copyCmdC": "Copia selezione (Cmd+C)",
-      "pasteCtrlShiftV": "Incolla dagli appunti (Ctrl+Maiusc+V)",
-      "ctrlW": "Invia Ctrl+W alla shell (bloccato per chiudere la scheda del browser)",
-      "ctrlT": "Invia Ctrl+T alla shell (impossibile aprire una scheda del browser)",
-      "ctrlN": "Invia Ctrl+N alla shell (impossibile aprire la finestra del browser)",
-      "ctrlQ": "Invia Ctrl+Q alla shell (impossibile chiudere il browser)"
-    }
-  },
-  "macros": {
-    "title": "Macro",
-    "description": "Esegui una serie di comandi salvati in un terminale e reagisci a ciò che il server ti invia in risposta.",
-    "target": "Destinazione",
-    "noTerminal": "Nessun terminale aperto",
-    "empty": "Ancora nessuna macro",
-    "emptyHint": "Crea una macro per automatizzare un flusso di lavoro da terminale, come l'accesso, il riavvio di un servizio o la risposta a richieste.",
-    "create": "Nuova macro",
-    "back": "Torna alle macro",
-    "name": "Nome",
-    "namePlaceholder": "Riavvia il server web",
-    "nameRequired": "Assegna un nome alla macro prima di salvarla.",
-    "descriptionLabel": "Descrizione",
-    "descriptionPlaceholder": "Cosa fa questa macro (facoltativo)",
-    "unsaved": "Modifiche non salvate",
-    "save": "Salva",
-    "saved": "Macro salvata",
-    "saveFailed": "Impossibile salvare la macro",
-    "delete": "Elimina",
-    "deleteTitle": "Eliminare questa macro?",
-    "deleteBody": "\"{{name}}\" verrà eliminato definitivamente. Questa operazione non può essere annullata.",
-    "deleted": "Macro eliminato",
-    "cancel": "Annulla",
-    "run": "Esegui",
-    "stop": "Stop",
-    "running": "Corsa...",
-    "completed": "Macro terminato",
-    "failed": "Il fallimento di Macro",
-    "loadFailed": "Impossibile caricare le macro",
-    "needTerminal": "Aprire e collegare prima un terminale",
-    "noSteps": "Questa macro non ha ancora passaggi. Aggiungine uno qui sotto.",
-    "addStep": "Aggiungi passaggio",
-    "stepNumber": "Passo {{number}}",
-    "removeStep": "Rimuovere il passaggio",
-    "confirmRunTitle": "Eseguire questa macro?",
-    "confirmRunBody": "\"{{name}}\" invierà comandi a {{host}}.",
-    "confirmRunAction": "Esegui la macro",
-    "stepTypes": {
-      "send": {
-        "label": "inviare comando",
-        "help": "Digita il testo nel terminale, proprio come se lo avessi digitato tu."
-      },
-      "wait": {
-        "label": "Attendi l'output",
-        "help": "Si mette in pausa finché il server non stampa il testo che hai specificato, ad esempio una richiesta di password."
-      },
-      "delay": {
-        "label": "Pausa",
-        "help": "Attende un intervallo di tempo fisso prima di procedere al passo successivo."
-      },
-      "if": {
-        "label": "Se l'output contiene",
-        "help": "Controlla tutto ciò che il server ha stampato finora, quindi esegue uno dei due rami."
-      },
-      "repeat": {
-        "label": "Ripetere",
-        "help": "Esegue i passaggi al suo interno un numero prestabilito di volte."
-      }
-    },
-    "send": {
-      "text": "Comando o testo",
-      "textPlaceholder": "systemctl restart nginx",
-      "pressEnter": "Premi Invio dopo aver inviato",
-      "pressEnterHelp": "Disattiva questa opzione per digitare del testo senza inviarlo."
-    },
-    "wait": {
-      "pattern": "Attendi che l'output contenga",
-      "patternPlaceholder": "password:",
-      "timeout": "Rinunciare dopo",
-      "onTimeout": "Se non appare mai",
-      "stop": "Interrompi la macro",
-      "continue": "Continua comunque"
-    },
-    "delay": {
-      "duration": "Attendi"
-    },
-    "ifStep": {
-      "pattern": "Se l'output contiene",
-      "patternPlaceholder": "Attivo: attivo (in corsa)",
-      "then": "Poi fai questo",
-      "else": "Altrimenti fai così",
-      "emptyBranch": "Nessun gradino"
-    },
-    "repeat": {
-      "count": "Numero di volte",
-      "times": "volte"
-    },
-    "match": {
-      "useRegex": "Corrispondenza con un'espressione regolare",
-      "useRegexHelp": "Lasciare vuoto questo elemento per far sì che il testo corrisponda esattamente a come è stato scritto.",
-      "invalidRegex": "Non è un'espressione regolare valida, verrà interpretata come testo semplice."
-    },
-    "seconds": "secondi",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "È necessario un server remoto. Per utilizzare questo tipo di connessione, collega un server remoto nelle Impostazioni."
-  },
-  "plugin": {
-    "name": "Terminale SSH"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/ja_JP.json b/plugins/ssh-terminal/locales/translated/ja_JP.json
deleted file mode 100644
index f58162f99..000000000
--- a/plugins/ssh-terminal/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "追加",
-    "arrowDown": "↓",
-    "arrowLeft": "←",
-    "arrowRight": "→",
-    "arrowUp": "↑",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Del",
-    "done": "完了",
-    "editQuickKeys": "クイックキー編集",
-    "end": "エンド",
-    "esc": "Esc",
-    "home": "ホーム",
-    "pageDown": "PgDn",
-    "pageUp": "PgUp",
-    "paste": "貼り付け",
-    "quickKeyPlaceholder": "例: sudo ",
-    "quickKeysDesc": "× をタップして削除します。最大8文字まで対応。",
-    "quickKeysTitle": "クイックキー",
-    "removeQuickKey": "削除",
-    "resetDefaults": "デフォルトにリセット",
-    "shift": "Shift",
-    "tab": "Tab"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Auto-Tmux の有効化に失敗しました",
-    "autoTmuxEnabled": "{{host}}に対して Auto-Tmux が有効になりました。これは次回の接続時に適用されます。",
-    "clipboardHttpWarning": "クリップボードを読み取れませんでした。一部のブラウザはHTTPS接続以外でのクリップボードへのアクセスを制限しています。代わりにCtrl+Vを試すか、TermixをHTTPS経由で提供してみてください。",
-    "closeTab": "閉じる",
-    "connecting": "接続中...",
-    "connectionLost": "接続切断",
-    "connectionRejected": "サーバーによって接続が拒否されました。認証設定とネットワーク構成を確認してください。",
-    "connectionTimeout": "接続タイムアウト",
-    "enableAutoTmuxAction": "Auto-Tmux を有効にする",
-    "hostKeyRejected": "SSHホストキーの検証が拒否されました。接続がキャンセルされました。",
-    "linkDialogCopy": "コピー",
-    "linkDialogOpen": "開く",
-    "linkDialogTitle": "リンクを開く",
-    "maxReconnectAttemptsReached": "再接続の最大試行回数に達しました",
-    "noHostSelected": "ホストが選択されていません",
-    "passwordPromptFillTitle": "保存されたパスワードをこのプロンプトに入力しますか？",
-    "reconnect": "再接続",
-    "reconnected": "再接続完了",
-    "reconnecting": "再接続中... ({{attempt}}/{{max}})",
-    "autoReconnecting": "接続が切断されました。再接続中です。",
-    "searchCaseSensitive": "マッチケース",
-    "searchClose": "閉じる（Escキー）",
-    "searchNext": "次の試合（入場）",
-    "searchNoResults": "検索結果なし",
-    "searchPlaceholder": "探す",
-    "searchPrevious": "前の試合 (Shift+Enter)",
-    "searchRegex": "正規表現を使用する",
-    "searchResultCount": "{{index}} / {{count}}",
-    "searchWholeWord": "単語全体を一致させる",
-    "sessionExpiredNotice": "{{host}} での前回のセッションは {{minutes}} 分後に切断され、シェルおよびそこで実行されていたすべてのものが失われました。セッションを維持するには、このホストで Auto-Tmux を有効にしてください。",
-    "sessionExpiredNoticeNoMinutes": "{{host}} での前回のセッションは、接続が切断された状態で期限切れになりました。シェルおよびシェル内で実行されていたすべてのプロセスは失われています。セッションを維持するには、このホストで Auto-Tmux を有効にしてください。",
-    "sessionTakenOver": "セッションが別のタブで開かれました。再接続中...",
-    "tmuxAttached": "接続クライアント",
-    "tmuxAttachedCount": "{{count}} 接続",
-    "tmuxCopyHint": "選択範囲を調整してEnterでクリップボードにコピー",
-    "tmuxCreateNew": "新規セッションを開始",
-    "tmuxDetached": "tmuxセッションからデタッチしました",
-    "tmuxLastActivity": "最終アクティビティ",
-    "tmuxSessionAttached": "tmuxセッションに接続しました: {{name}}",
-    "tmuxSessionCreated": "tmuxセッションが作成されました: {{name}}",
-    "tmuxSessionPickerDesc": "このホストに既存のtmuxセッションがあります。再アタッチするか、新しいセッションを作成してください。",
-    "tmuxSessionPickerTitle": "tmuxセッション",
-    "tmuxTimeDays": "{{count}}日前",
-    "tmuxTimeHours": "{{count}}時間前",
-    "tmuxTimeJustNow": "たった今",
-    "tmuxTimeMinutes": "{{count}}分前",
-    "tmuxUnavailable": "リモートホストにtmuxがインストールされていません。標準シェルにフォールバックします。",
-    "tmuxWindowCount": "{{count}} ウィンドウ",
-    "tmuxWindows": "ウィンドウ",
-    "unknownError": "不明なエラーが発生しました",
-    "websocketAbnormalClose": "接続が予期せず切断されました。リバースプロキシまたはSSLの設定に問題がある可能性があります。サーバーログを確認してください。",
-    "websocketError": "WebSocket接続エラー",
-    "clipboardReadFailed": "クリップボードからの読み取りに失敗しました。クリップボードのアクセス許可が付与されていることを確認してください。",
-    "clipboardWriteFailed": "クリップボードへのコピーに失敗しました。ページがHTTPSまたはlocalhostで提供されていることを確認してください。",
-    "connected": "接続中",
-    "totpCodeLabel": "確認コード",
-    "duplicateTab": "重複タブ",
-    "imageChooseFile": "画像ファイルを選択してください",
-    "imageUploaded": "アップロードされた画像: {{path}}",
-    "imageClipboardUnavailable": "このブラウザはクリップボードから画像を読み取ることができません",
-    "imageClipboardEmpty": "クリップボードに画像が見つかりませんでした",
-    "localShell": "ローカル端末シェル",
-    "autocompleteHintComplete": "タブキーまたはエンターキーを押して完了",
-    "autocompleteHintNavigate": "↑↓でナビゲート",
-    "autocompleteHintClose": "Escキーを押して閉じる"
-  },
-  "terminalToolbar": {
-    "detachTmux": "tmuxをデタッチする",
-    "detachTmuxDescription": "tmuxセッションをデタッチする",
-    "dismissError": "画像エラーを非表示にする",
-    "hideToolbar": "ツールバーを非表示にする",
-    "image": "画像アクション（画像のみ）",
-    "imageActionFailed": "画像操作が失敗しました",
-    "layout": "ツールバー表示モード",
-    "layoutExpanded": "指標を追加して拡張",
-    "layoutIcon": "アイコンのみ",
-    "layoutLabeled": "アイコンとラベル",
-    "moveToolbar": "ツールバーを移動",
-    "moveToolbarHint": "ツールバーをドラッグして位置を変更します",
-    "paste": "画像を貼り付ける",
-    "pasteImage": "クリップボードから画像を貼り付ける（画像のみ）",
-    "retry": "再試行",
-    "showToolbar": "ツールバーを展開",
-    "upload": "画像をアップロード",
-    "uploadImage": "ホストに画像をアップロードする",
-    "uploadingImage": "アップロード中..."
-  },
-  "history": {
-    "noTerminalSelected": "ターミナルが選択されていません",
-    "noTerminalSelectedHint": "SSH ターミナルタブを開いてコマンド履歴を表示",
-    "searchPlaceholder": "履歴を検索...",
-    "clearAll": "すべてクリア",
-    "noHistoryEntries": "履歴エントリがありません",
-    "trackingDisabled": "履歴の追跡が無効です",
-    "trackingDisabledHint": "このホストのSSHターミナルタブでコマンド履歴を有効にしてください。",
-    "commandCount_one": "{{count}} コマンド",
-    "commandCount_other": "{{count}} コマンド"
-  },
-  "touchInput": {
-    "enabled": "タッチ入力を有効にする",
-    "enabledDesc": "端末で指一本でのスクロールを可能にする",
-    "momentumEnabled": "勢いを加速させる",
-    "momentumEnabledDesc": "スワイプ後、少しスクロールを続ける",
-    "advanced": "高度な",
-    "resetDefaults": "デフォルトにリセット",
-    "dragThreshold": "ドラッグしきい値",
-    "maxWheelDelta": "最大ホイールデルタ",
-    "momentumSampleWindow": "モメンタムサンプルウィンドウ",
-    "releaseGracePeriod": "釈放猶予期間",
-    "minimumVelocity": "最小速度",
-    "maximumVelocity": "最大速度",
-    "maximumDuration": "最大持続時間",
-    "maximumTravel": "最大移動距離",
-    "decayTime": "減衰時間",
-    "pixelsPerTick": "ピクセル/ティック",
-    "maximumFrameInterval": "最大フレーム間隔",
-    "maximumTicksPerFrame": "フレームあたりの最大ティック数"
-  },
-  "imageStorage": {
-    "instanceId": "端末セッションインスタンスID",
-    "instanceIdDesc": "接続されているターミナルタブのいずれかのインスタンスID。表示テストに使用されます。",
-    "selectedModeUnavailable": "利用不可",
-    "test": "テスト",
-    "testing": "テスト中...",
-    "testFailed": "画像ストレージのテストに失敗しました",
-    "testConnected": "端末セッションが接続されました。",
-    "testNotConnected": "このインスタンスIDで接続されている端末セッションはありません。",
-    "testSelectedMode": "アップロードには以下を使用します： {{mode}}",
-    "testLocalVisible": "ローカルディレクトリは、接続されているホストから参照可能です。",
-    "testLocalNotVisible": "ローカルディレクトリは、接続されているホストからアクセスできません。"
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "タッチ入力",
-        "images": "画像ストレージ",
-        "sessions": "セッション",
-        "newHosts": "新しいホスト"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "端末セッションの永続性",
-        "description": "切断された端末がサーバー上で閉じられるまでの時間。最小1分、最大1440分。この時間を超えてセッションを継続する必要がある場合は、ホスト上でAuto-Tmuxを有効にしてください。"
-      },
-      "commandHistoryEnabled": {
-        "label": "コマンド履歴",
-        "description": "コマンド履歴の記録を許可します。無効にすると、ホストごとの設定に関わらず履歴は保存されません。"
-      },
-      "commandHistoryForNewHosts": {
-        "label": "新規ホストのコマンド履歴",
-        "description": "新しいホストがコマンド履歴を有効にした状態で起動するかどうか。"
-      },
-      "imageStorageMode": {
-        "label": "ストレージモード",
-        "description": "貼り付けおよびアップロードされた端末イメージが書き込まれる場所。接続による自動選択、ローカルおよびリモート（SFTP）が固定されています。",
-        "auto": "自動",
-        "local": "ローカル",
-        "remoteSftp": "リモート（SFTP）"
-      },
-      "imageLocalDir": {
-        "label": "ローカルディレクトリ",
-        "description": "Termixバックエンド上の、ローカルモードが画像を書き込む絶対パス。保存後は表示されません。空欄の場合はTERMIX_IMAGE_DIRが使用されます。"
-      },
-      "imageHostPath": {
-        "label": "ホストパス",
-        "description": "端末エージェントが受信するローカルディレクトリのホスト側ビュー。"
-      },
-      "imageTtlMs": {
-        "label": "TTL（ミリ秒）",
-        "description": "アップロードされた画像が保持される期間（ミリ秒単位）。空欄の場合はTERMIX_IMAGE_TTL_MS（1時間）が使用されます。"
-      },
-      "imageMaxCount": {
-        "label": "最大画像数",
-        "description": "ほとんどの画像は一度に保持されます。空の場合はTERMIX_MAX_IMAGE_COUNTまたは100が使用されます。"
-      },
-      "imageMaxBytes": {
-        "label": "最大ストレージバイト数",
-        "description": "一度に保持される画像の最大バイト数。空の場合はTERMIX_MAX_IMAGE_STORAGE_BYTESまたは5 GiBを使用します。"
-      },
-      "sessionPersistence": {
-        "label": "切断後もセッションを維持する",
-        "description": "上記時間の間、サーバー上で切断された端末をアクティブな状態にしておくことで、そのタブを再度開いたときに、前回中断したところから作業が再開されます。"
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "tmux内で新しいホストのターミナルを実行することで、セッションが切断後も維持されます（ホストにtmuxがインストールされている必要があります）。"
-      },
-      "newHostTheme": {
-        "label": "新規ホスト向けテーマ",
-        "description": "新しいホストが起動時に使用するターミナルテーマ。"
-      },
-      "newHostFontFamily": {
-        "label": "新規ホスト用のフォント",
-        "description": "新しいホストが起動時に使用するターミナルフォント。"
-      },
-      "newHostFontSize": {
-        "label": "新規ホスト向けのフォントサイズ",
-        "description": "新しいホストが最初に使用する端末のフォントサイズ（ピクセル単位）。"
-      },
-      "newHostCursorStyle": {
-        "label": "新規ホスト向けのカーソルスタイル"
-      },
-      "newHostCursorBlink": {
-        "label": "新規ホストの場合はカーソルが点滅します"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "ターミナルツールバーを有効にする",
-        "description": "このホストのツールとリアルタイム統計情報に素早くアクセスできるツールバーを、アクティブなターミナルにドッキングして表示します。"
-      },
-      "terminalToolbarPosition": {
-        "label": "ツールバーの位置",
-        "description": "ターミナル内のツールバーの位置です。そこからドラッグして移動することもできます。",
-        "bottom": "下中央",
-        "bottomLeft": "左下",
-        "bottomRight": "右下",
-        "top": "中央上部",
-        "topLeft": "左上",
-        "topRight": "右上"
-      },
-      "terminalToolbarStartState": {
-        "label": "ツールバーの開始状態",
-        "description": "端末が接続されたときにツールバーが展開された状態で開くか、最小化された状態で開くか",
-        "expanded": "拡張版",
-        "collapsed": "最小化"
-      },
-      "terminalToolbarDisplay": {
-        "label": "ツールバー表示モード",
-        "description": "ツールバーボタンの表示方法。最後に使用したボタンは、ツールバーに保持されます。",
-        "remember": "最終使用日時",
-        "icon": "アイコンのみ",
-        "labeled": "アイコンとラベル",
-        "expanded": "統計情報を追加"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "ライブ統計を表示",
-        "description": "展開モードでツールバーボタンの上にホストのライブ統計情報を表示する"
-      },
-      "terminalToolbarFade": {
-        "label": "アイドル時にフェードアウト",
-        "description": "ツールバーをマウスオーバーするまでフェードアウトさせる"
-      },
-      "enableCommandHistory": {
-        "label": "コマンド履歴",
-        "description": "このターミナルで実行されたコマンドを履歴とオートコンプリート用に記録します"
-      },
-      "enableTerminal": {
-        "label": "ターミナルを有効化",
-        "description": "このホストにSSHターミナルを提供します。"
-      },
-      "inheritAppearance": {
-        "label": "ユーザーデフォルトを使用する"
-      },
-      "theme": {
-        "label": "テーマ"
-      },
-      "cursorBlink": {
-        "label": "点滅するカーソル"
-      },
-      "cursorStyle": {
-        "label": "カーソルスタイル"
-      },
-      "fontSize": {
-        "label": "フォントサイズ"
-      },
-      "fontFamily": {
-        "label": "フォント"
-      },
-      "scrollback": {
-        "label": "スクロールバック"
-      },
-      "letterSpacing": {
-        "label": "文字間隔"
-      },
-      "lineHeight": {
-        "label": "行の高さ"
-      },
-      "bellStyle": {
-        "label": "ベル"
-      },
-      "minimumContrastRatio": {
-        "label": "最小コントラスト比"
-      },
-      "backgroundImage": {
-        "label": "背景画像"
-      },
-      "backgroundImageOpacity": {
-        "label": "背景画像の不透明度"
-      },
-      "customThemeColors": {
-        "label": "カスタムテーマカラー"
-      },
-      "rightClickSelectsWord": {
-        "label": "右クリックで単語を選択"
-      },
-      "macOptionIsMeta": {
-        "label": "オプションはメタです"
-      },
-      "fastScrollModifier": {
-        "label": "高速スクロールキー"
-      },
-      "fastScrollSensitivity": {
-        "label": "高速スクロール速度"
-      },
-      "backspaceMode": {
-        "label": "バックスペース"
-      },
-      "autoMosh": {
-        "label": "オートモッシュ"
-      },
-      "moshCommand": {
-        "label": "モッシュコマンド"
-      },
-      "autoTmux": {
-        "label": "自動tmux"
-      },
-      "useSSHTitle": {
-        "label": "SSHタイトルを使用する"
-      },
-      "syntaxHighlighting": {
-        "label": "構文ハイライト"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "構文強調表示カテゴリ"
-      },
-      "linkClickBehavior": {
-        "label": "リンクをクリック"
-      },
-      "localEcho": {
-        "label": "ローカルエコー"
-      },
-      "passwordPromptAutoFill": {
-        "label": "パスワード入力欄への入力を代行する。"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "sudoプロンプトに記入してください"
-      },
-      "autoReconnect": {
-        "label": "自動的に再接続します"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "コマンド補完",
-        "description": "タブキーを押すと入力中にオートコンプリートを表示する"
-      },
-      "localEcho": {
-        "label": "ローカルエコー",
-        "description": "安全なローカルキーストローク予測を使用して、体感入力遅延を低減する"
-      },
-      "linkClickBehavior": {
-        "label": "ターミナルリンククリック",
-        "description": "ターミナル内のリンクをクリックしたときのデフォルト動作"
-      },
-      "customThemes": {
-        "label": "保存されたテーマ"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "ローカル端末"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "ライブターミナルセッションを使用する",
-      "description": "セッション共有や録画などの他の機能を、ライブのターミナルセッションで利用できるようにします。"
-    },
-    "history": {
-      "title": "コマンド履歴を読む",
-      "description": "AIアシスタントなどの他の機能が、あなたのコマンド履歴を読み取れるようにします。"
-    }
-  },
-  "hosts": {
-    "tabTerminal": "ターミナル",
-    "addHost": "ホストを追加",
-    "applyGlobalThemeTooltip": "このテーマを適用する",
-    "backgroundImageDesc": "ターミナルの背景画像のオプションURL",
-    "backgroundImageLabel": "背景画像 URL",
-    "backgroundImageOpacityLabel": "背景画像の不透明度",
-    "backspaceMode": "バックスペースモード",
-    "backspaceModeControlH": "コントロールH（BS）",
-    "backspaceModeLabel": "バックスペースモード",
-    "backspaceModeNormal": "通常（DEL）",
-    "behaviorAndAdvanced": "動作と詳細設定",
-    "bellStyle": "ベルスタイル",
-    "bellStyleBoth": "両方",
-    "bellStyleLabel": "ベルスタイル",
-    "bellStyleNone": "すべて解除",
-    "bellStyleSound": "音",
-    "bellStyleVisual": "ビジュアル",
-    "colorTheme": "カラーテーマ",
-    "cursorBlink": "カーソル点滅",
-    "cursorBlinking": "カーソル点滅",
-    "cursorBlinkingDesc": "ターミナルカーソルの点滅アニメーションを有効にします",
-    "cursorStyle": "カーソルスタイル",
-    "cursorStyleBar": "バー",
-    "cursorStyleBlock": "ブロック",
-    "cursorStyleLabel": "カーソルスタイル",
-    "cursorStyleUnderline": "下線",
-    "customThemeAnsiColors": "ANSIカラー",
-    "customThemeBackground": "背景",
-    "customThemeBlack": "黒",
-    "customThemeBlue": "ブルー",
-    "customThemeBrightBlack": "ブライトブラック",
-    "customThemeBrightBlue": "ブライトブルー",
-    "customThemeBrightCyan": "ブライトシアン",
-    "customThemeBrightGreen": "ブライトグリーン",
-    "customThemeBrightMagenta": "ブライトマゼンタ",
-    "customThemeBrightRed": "ブライトレッド",
-    "customThemeBrightWhite": "ブライトホワイト",
-    "customThemeBrightYellow": "ブライトイエロー",
-    "customThemeColors": "カスタムカラー",
-    "customThemeCursor": "カーソル",
-    "customThemeCursorAccent": "カーソルアクセント",
-    "customThemeCyan": "シアン",
-    "customThemeForeground": "前景",
-    "customThemeGreen": "緑",
-    "customThemeMagenta": "マゼンタ",
-    "customThemeRed": "赤",
-    "customThemeResetTooltip": "デフォルトにリセット",
-    "customThemeSelection": "選択",
-    "customThemeWhite": "ホワイト",
-    "customThemeYellow": "黄",
-    "deleteGlobalThemeTooltip": "このテーマを削除",
-    "docsLink": "ドキュメントを表示",
-    "enableAutoMosh": "Auto-Mosh を有効にする",
-    "enableAutoMoshDesc": "利用可能な場合、SSH よりも Mosh を優先します",
-    "enableAutoTmux": "Auto-Tmux を有効にする",
-    "enableAutoTmuxDesc": "tmux内で実行することで、接続切断やブラウザの再起動後もシェルとその中で実行されているすべての処理を正常に実行状態に保つことができます（ホストにtmuxがインストールされている必要があります）。",
-    "fastScrollModifier": "高速スクロール修飾キー",
-    "fastScrollModifierAlt": "Alt",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "高速スクロールの修飾キー",
-    "fastScrollModifierShift": "Shift",
-    "fastScrollSensitivity": "高速スクロール感度",
-    "fastScrollSensitivityLabel": "高速スクロールの感度",
-    "fontFamily": "フォントファミリー",
-    "fontFamilyCustomHint": "同梱のフォントを選択するか、「カスタム」を選択して、システムに既にインストールされているフォントの正確な名前を入力してください（例：MesloLGS NF、Noto Sans Mono）。Termixはフォントをインストールできませんので、まずTermixをOSにインストールしてください。",
-    "fontFamilyCustomOption": "カスタム...",
-    "fontFamilyCustomPlaceholder": "正確なフォント名（例：MesloLGS NF）",
-    "fontFamilyLabel": "フォントファミリー",
-    "fontSize": "フォントサイズ",
-    "fontSizeLabel": "フォントサイズ",
-    "hostNotFound": "ホストが見つかりません",
-    "letterSpacing": "文字間隔",
-    "letterSpacingPx": "文字間隔 (px)",
-    "lineHeight": "行の高さ",
-    "lineHeightLabel": "行の高さ",
-    "linkClickBehaviorConfirm": "開くまたはコピーするポップアップを表示",
-    "linkClickBehaviorDesc": "ターミナル内のリンクをクリックしたときの動作を制御します。「デフォルト」を選択することで、アプリ全体の設定に従います。",
-    "linkClickBehaviorDirect": "直接開く",
-    "linkClickBehaviorLabel": "リンククリック時の動作",
-    "loadingHost": "ホストを読み込み中...",
-    "localEchoAuto": "自動",
-    "localEchoDesc": "低速回線でも、印刷可能な安全なキー入力をローカルで予測します。パスワード入力や制御入力はエコーバックされません。",
-    "localEchoLabel": "ローカルエコー",
-    "localEchoOff": "オフ",
-    "localEchoOn": "常時接続",
-    "macOptionIsMetaLabel": "Optionキーでメタデータを送信",
-    "macOptionIsMetaShortDesc": "macOSで特殊文字（@や|など）を入力する際に、Metaを送信する代わりにOption/Altキーを使用するのを無効にする",
-    "moshCommand": "Mosh コマンド",
-    "moshCommandLabel": "Mosh コマンド",
-    "noSavedThemes": "まだ保存されたテーマはありません",
-    "none": "なし",
-    "passwordPromptAutoFillDesc": "端末でパスワードの入力を求められた際に、保存済みのパスワードを入力するよう促します。このホストではパスワードの自動入力を一切行わないようにするには、この設定を無効にします。",
-    "passwordPromptAutoFillLabel": "パスワードの自動入力機能を提供する",
-    "autoReconnectLabel": "自動再接続",
-    "autoReconnectDesc": "ネットワーク障害やスリープ状態などによりSSH接続が切断された場合、自動的に再接続します。スクロールバックした状態は保持されます。",
-    "rightClickSelectsWord": "右クリックで単語選択",
-    "rightClickSelectsWordLabel": "右クリックで単語選択",
-    "rightClickSelectsWordShortDesc": "右クリック時にカーソル下の単語を選択します",
-    "saveAsGlobalTheme": "グローバルテーマとして保存",
-    "saveGlobalThemeError": "テーマの保存に失敗しました",
-    "saveGlobalThemeNamePrompt": "このテーマの名前を入力してください",
-    "saveGlobalThemeSuccess": "テーマが保存されました",
-    "savedThemesLabel": "保存済みテーマ",
-    "scrollbackBufferLabel": "スクロールバッファ",
-    "scrollbackMaxLines": "履歴に保持する最大行数",
-    "sudoPasswordAutoFill": "Sudo パスワードの自動入力",
-    "sudoPasswordAutoFillDesc": "sudo パスワードを保存して、ホストメトリクス、ターミナルプロンプトなどが自動的に特権コマンドを実行できるようにします",
-    "sudoPasswordAutoFillLabel": "sudo パスワードの自動入力",
-    "syntaxCategoryIpAddresses": "IPアドレス",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "ログレベル",
-    "syntaxCategoryLogLevelsDesc": "error, warn, info, debug, fatal",
-    "syntaxCategoryNumbers": "ラベル付き数値",
-    "syntaxCategoryNumbersDesc": "port 8080, exit 1, status 404",
-    "syntaxCategoryPaths": "ファイルパス",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "タイムスタンプ",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 2024-01-15",
-    "syntaxCategoryUrls": "URL",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "ターミナル出力に色を付ける（エラー、パス、IP、タイムスタンプ）",
-    "syntaxHighlightingLabel": "シンタックスハイライト",
-    "terminalAppearance": "ターミナルの外観",
-    "theme": "テーマ",
-    "themePreview": "テーマプレビュー",
-    "useSSHTitleDesc": "タブのタイトルをホスト名ではなくシェルのウィンドウタイトルから更新する",
-    "useSSHTitleLabel": "SSHウィンドウタイトルを使用する",
-    "enableTunnel": "トンネルを有効にする",
-    "enableFileManager": "ファイルマネージャーを有効にする",
-    "enableDocker": "Dockerを有効にする",
-    "startupSnippet": "起動時スニペット",
-    "quickActions": "クイックアクション",
-    "proxmoxLastSyncStatus": {
-      "success": "成功"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} スキップしました（IPアドレスが見つかりませんでした）",
-    "proxmoxStatsUrlCopied": "Proxmox Stats URL がクリップボードにコピーされました",
-    "rdpUrlCopied": "RDP URL をコピーしました",
-    "vncUrlCopied": "VNC URL をコピーしました",
-    "filterAuthStepca": "ステップCA",
-    "guac": {
-      "noCredential": "認証情報なし (直接入力は以下)",
-      "authTypeDirect": "直接",
-      "authTypeCredential": "認証情報",
-      "authTypeNone": "すべて解除",
-      "recordingPath": "録画パス",
-      "recordingName": "録画名",
-      "saveHostFirst": "最初にホストを保存してください。",
-      "sharingOptionsAfterSave": "共有オプションはホストの保存後に利用可能です。",
-      "permissionLevel": "権限レベル",
-      "typeHeader": "タイプ",
-      "targetHeader": "ターゲット",
-      "permissionHeader": "権限",
-      "cancelBtn": "キャンセル",
-      "savingBtn": "保存中...",
-      "updateHostBtn": "ホストを更新",
-      "addHostBtn": "ホストを追加"
-    },
-    "filterAuthVault": "金庫"
-  },
-  "nav": {
-    "history": "履歴",
-    "localTerminal": "ローカル端末",
-    "sshTools": "SSHツール",
-    "terminal": "ターミナル",
-    "macros": "マクロ"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "ここに入力してキーをブロードキャスト...",
-    "copyOnSelect": "選択したテキストを自動的にコピーします",
-    "enableRightClickCopyPaste": "右クリックでのコピー/貼り付けを有効にする",
-    "fillPassword": "パスワードを自動入力",
-    "fillPasswordMissing": "選択した {{count}} 個のターミナルに保存されたパスワードがありません",
-    "fillPasswordSuccess": "{{count}} 個のターミナルにパスワードを入力しました",
-    "keyRecordingTitle": "キー記録",
-    "noTerminalTabsOpen": "開いている端末タブはありません",
-    "recordToTerminals": "ターミナルに記録",
-    "selectAll": "すべて選択",
-    "selectNone": "すべて解除",
-    "selectTerminalsAbove": "上のターミナルを選択",
-    "settingsTitle": "設定",
-    "startRecording": "記録開始",
-    "stopRecording": "記録停止"
-  },
-  "keybindings": {
-    "copy": "選択範囲をコピー",
-    "paste": "貼り付け",
-    "sendControlCode": "Ctrlキーと文字キーを同時に押して信号を送る",
-    "sendText": "テキストを送信",
-    "controlCodeLabel": "手紙",
-    "textLabel": "送信するテキスト",
-    "appendEnterLabel": "送信後にEnterキーを押してください。",
-    "clipboardPermissionNote": "一部のブラウザでは、初回使用時にクリップボードのアクセス許可を求められる場合があります。",
-    "textRequired": "送信するテキストを入力してください",
-    "controlCodeRequired": "制御コードとして1文字を入力してください",
-    "builtIn": {
-      "copyCtrlC": "選択範囲をコピーする（Ctrl+C、テキストが選択されている場合のみ）",
-      "copyCtrlShiftC": "選択範囲をコピーする（Ctrl+Shift+C）",
-      "copyCmdC": "選択範囲をコピーする（Cmd+C）",
-      "pasteCtrlShiftV": "クリップボードから貼り付け（Ctrl+Shift+V）",
-      "ctrlW": "Ctrl+Wをシェルに送信する（ブラウザタブを閉じることができない）",
-      "ctrlT": "Ctrl+T をシェルに送信してください（ブラウザのタブを開くことがブロックされます）。",
-      "ctrlN": "Ctrl+Nをシェルに送信する（ブラウザウィンドウを開くことがブロックされる）",
-      "ctrlQ": "Ctrl+Q をシェルに送信してください（ブラウザの終了がブロックされます）。"
-    }
-  },
-  "macros": {
-    "title": "マクロ",
-    "description": "ターミナルで保存済みのコマンド系列を実行し、サーバーからの応答に応じて処理を行います。",
-    "target": "ターゲット",
-    "noTerminal": "端末が開いていません",
-    "empty": "マクロはまだありません",
-    "emptyHint": "ログイン、サービスの再起動、プロンプトへの応答など、ターミナル操作の流れを自動化するマクロを作成します。",
-    "create": "新しいマクロ",
-    "back": "マクロに戻る",
-    "name": "名前",
-    "namePlaceholder": "ウェブサーバーを再起動します",
-    "nameRequired": "保存する前にマクロに名前を付けてください。",
-    "descriptionLabel": "説明",
-    "descriptionPlaceholder": "このマクロの機能（オプション）",
-    "unsaved": "保存されていない変更があります",
-    "save": "保存",
-    "saved": "マクロが保存されました",
-    "saveFailed": "マクロを保存できませんでした",
-    "delete": "削除",
-    "deleteTitle": "このマクロを削除しますか？",
-    "deleteBody": "\"{{name}}\" は完全に削除されます。元に戻すことはできません。",
-    "deleted": "マクロが削除されました",
-    "cancel": "キャンセル",
-    "run": "実行",
-    "stop": "ストップ",
-    "running": "実行中...",
-    "completed": "マクロ撮影終了",
-    "failed": "マクロが失敗しました",
-    "loadFailed": "マクロを読み込めませんでした",
-    "needTerminal": "まずターミナルを開いて接続します。",
-    "noSteps": "このマクロにはまだ手順がありません。以下に手順を追加してください。",
-    "addStep": "ステップを追加する",
-    "stepNumber": "ステップ {{number}}",
-    "removeStep": "削除手順",
-    "confirmRunTitle": "このマクロを実行しますか？",
-    "confirmRunBody": "\"{{name}}\" は {{host}} にコマンドを送信します。",
-    "confirmRunAction": "マクロを実行する",
-    "stepTypes": {
-      "send": {
-        "label": "コマンドを送信",
-        "help": "端末にテキストを入力します。まるで手入力したかのように表示されます。"
-      },
-      "wait": {
-        "label": "出力を待つ",
-        "help": "サーバーが指定したテキスト（パスワード入力画面など）を表示するまで一時停止します。"
-      },
-      "delay": {
-        "label": "一時停止",
-        "help": "次のステップに進む前に、一定時間待機します。"
-      },
-      "if": {
-        "label": "出力に以下が含まれる場合",
-        "help": "サーバーがこれまでに出力したすべての内容を確認し、その後、2つの分岐のうちいずれか1つを実行します。"
-      },
-      "repeat": {
-        "label": "繰り返す",
-        "help": "指定された回数だけ、その中の手順を実行します。"
-      }
-    },
-    "send": {
-      "text": "コマンドまたはテキスト",
-      "textPlaceholder": "systemctl restart nginx",
-      "pressEnter": "送信後にEnterキーを押してください。",
-      "pressEnterHelp": "テキストを送信せずに入力する場合は、これをオフにしてください。"
-    },
-    "wait": {
-      "pattern": "出力に以下が含まれるまで待機してください",
-      "patternPlaceholder": "パスワード:",
-      "timeout": "諦めた後",
-      "onTimeout": "それが決して現れない場合",
-      "stop": "マクロを停止する",
-      "continue": "とにかく続けて"
-    },
-    "delay": {
-      "duration": "待って"
-    },
-    "ifStep": {
-      "pattern": "出力に以下が含まれる場合",
-      "patternPlaceholder": "アクティブ：アクティブ（実行中）",
-      "then": "次にこれを実行してください",
-      "else": "そうでなければ、これを実行してください。",
-      "emptyBranch": "階段なし"
-    },
-    "repeat": {
-      "count": "回数",
-      "times": "タイムズ"
-    },
-    "match": {
-      "useRegex": "正規表現で一致させる",
-      "useRegexHelp": "原文と完全に一致させるには、この部分を削除してください。",
-      "invalidRegex": "有効な正規表現ではないため、プレーンテキストとしてマッチします。"
-    },
-    "seconds": "秒",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "リモートサーバーが必要です。この接続タイプを使用するには、設定でリモートサーバーを接続してください。"
-  },
-  "plugin": {
-    "name": "SSHターミナル"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/ko_KR.json b/plugins/ssh-terminal/locales/translated/ko_KR.json
deleted file mode 100644
index 80f03a963..000000000
--- a/plugins/ssh-terminal/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "추가",
-    "arrowDown": "아래쪽 화살표",
-    "arrowLeft": "왼쪽 화살표",
-    "arrowRight": "오른쪽 화살표",
-    "arrowUp": "위쪽 화살표",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Del",
-    "done": "완료",
-    "editQuickKeys": "빠른 키 편집",
-    "end": "End",
-    "esc": "Esc",
-    "home": "Home",
-    "pageDown": "PgDn",
-    "pageUp": "PgUp",
-    "paste": "붙여넣기",
-    "quickKeyPlaceholder": "예: sudo ",
-    "quickKeysDesc": "×를 탭하여 제거합니다. 최대 8자까지 지원합니다.",
-    "quickKeysTitle": "빠른 키",
-    "removeQuickKey": "제거",
-    "resetDefaults": "기본값으로 초기화",
-    "shift": "Shift",
-    "tab": "Tab"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "자동 Tmux를 활성화하는 데 실패했습니다.",
-    "autoTmuxEnabled": "{{host}}에 대해 자동 Tmux가 활성화되었습니다. 이는 다음 연결부터 적용됩니다.",
-    "clipboardHttpWarning": "클립보드를 읽을 수 없습니다. 일부 브라우저는 HTTPS 외부에서 클립보드 접근을 제한합니다. Ctrl+V를 눌러 V를 누르거나 Termix를 HTTPS로 실행해 보세요.",
-    "closeTab": "닫기",
-    "connecting": "연결 중...",
-    "connectionLost": "연결이 끊어졌습니다",
-    "connectionRejected": "서버에서 연결이 거부되었습니다. 인증 및 네트워크 구성을 확인하세요.",
-    "connectionTimeout": "연결 시간 초과",
-    "enableAutoTmuxAction": "Auto-Tmux 활성화",
-    "hostKeyRejected": "SSH 호스트 키 검증이 거부되었습니다. 연결이 취소되었습니다.",
-    "linkDialogCopy": "복사",
-    "linkDialogOpen": "열기",
-    "linkDialogTitle": "링크 열기",
-    "maxReconnectAttemptsReached": "최대 재연결 시도 횟수에 도달했습니다.",
-    "noHostSelected": "선택된 호스트가 없습니다.",
-    "passwordPromptFillTitle": "저장된 비밀번호를 이 프롬프트에 입력하시겠습니까?",
-    "reconnect": "재연결",
-    "reconnected": "재연결 성공",
-    "reconnecting": "재연결 중... ({{attempt}}/{{max}})",
-    "autoReconnecting": "연결이 끊어졌습니다. 다시 연결 중입니다...",
-    "searchCaseSensitive": "대소문자를 일치시키세요",
-    "searchClose": "닫기 (탈출)",
-    "searchNext": "다음 매치 (Enter)",
-    "searchNoResults": "결과가 없습니다",
-    "searchPlaceholder": "찾기",
-    "searchPrevious": "이전 일치 항목 (Shift+Enter)",
-    "searchRegex": "정규 표현식을 사용하세요",
-    "searchResultCount": "{{index}} {{count}}",
-    "searchWholeWord": "단어 전체 일치",
-    "sessionExpiredNotice": "{{host}} 호스트에서 진행 중이던 이전 세션이 {{minutes}} 분 후 연결이 끊어지면서 만료되었습니다. 셸과 셸에서 실행 중이던 모든 항목이 종료되었습니다. 세션을 유지하려면 이 호스트에서 자동 Tmux를 활성화하십시오.",
-    "sessionExpiredNoticeNoMinutes": "{{host}} 에서 이전 세션이 연결이 끊긴 상태에서 만료되었습니다. 셸과 그 안에서 실행 중이던 모든 항목이 사라졌습니다. 세션을 유지하려면 이 호스트에서 자동 Tmux를 활성화하십시오.",
-    "sessionTakenOver": "다른 탭에서 세션이 열렸습니다. 다시 연결 중...",
-    "tmuxAttached": "연결된 클라이언트",
-    "tmuxAttachedCount": "{{count}}개 연결됨",
-    "tmuxCopyHint": "선택 영역을 조정하고 Enter 키를 누르면 클립보드에 복사됩니다.",
-    "tmuxCreateNew": "새 세션 시작",
-    "tmuxDetached": "tmux 세션에서 분리됨",
-    "tmuxLastActivity": "마지막 활동",
-    "tmuxSessionAttached": "tmux 세션 연결됨: {{name}}",
-    "tmuxSessionCreated": "tmux 세션 생성됨: {{name}}",
-    "tmuxSessionPickerDesc": "이 호스트에서 기존 tmux 세션을 찾았습니다. 다시 연결할 세션을 선택하거나 새 세션을 만드세요.",
-    "tmuxSessionPickerTitle": "tmux 세션",
-    "tmuxTimeDays": "{{count}}일 전",
-    "tmuxTimeHours": "{{count}}시간 전",
-    "tmuxTimeJustNow": "방금",
-    "tmuxTimeMinutes": "{{count}}분 전",
-    "tmuxUnavailable": "원격 호스트에 tmux가 설치되어 있지 않아 표준 셸로 대체합니다.",
-    "tmuxWindowCount": "{{count}}개 윈도우",
-    "tmuxWindows": "윈도우",
-    "unknownError": "알 수 없는 오류가 발생했습니다.",
-    "websocketAbnormalClose": "연결이 예기치 않게 종료되었습니다. 리버스 프록시 또는 SSL 구성 문제일 수 있습니다. 서버 로그를 확인하세요.",
-    "websocketError": "WebSocket 연결 오류",
-    "clipboardReadFailed": "클립보드에서 읽지 못했습니다. 클립보드 권한이 허용되었는지 확인하세요.",
-    "clipboardWriteFailed": "클립보드에 복사하지 못했습니다. 페이지가 HTTPS 또는 localhost에서 제공되는지 확인하세요.",
-    "connected": "연결됨",
-    "totpCodeLabel": "인증 코드",
-    "duplicateTab": "탭 복제",
-    "imageChooseFile": "이미지 파일을 선택하세요",
-    "imageUploaded": "이미지 업로드됨: {{path}}",
-    "imageClipboardUnavailable": "이 브라우저는 클립보드에서 이미지를 읽을 수 없습니다.",
-    "imageClipboardEmpty": "클립보드에서 이미지를 찾을 수 없습니다.",
-    "localShell": "로컬 터미널 셸",
-    "autocompleteHintComplete": "탭 또는 엔터를 눌러 완료하세요.",
-    "autocompleteHintNavigate": "↑↓로 이동",
-    "autocompleteHintClose": "Esc 키를 눌러 닫으세요"
-  },
-  "terminalToolbar": {
-    "detachTmux": "tmux 분리",
-    "detachTmuxDescription": "tmux 세션 분리",
-    "dismissError": "이미지 오류를 닫습니다",
-    "hideToolbar": "툴바 숨기기",
-    "image": "이미지 관련 작업 (이미지에만 해당)",
-    "imageActionFailed": "이미지 작업이 실패했습니다.",
-    "layout": "툴바 표시 모드",
-    "layoutExpanded": "측정 지표를 추가하여 확장했습니다.",
-    "layoutIcon": "아이콘만",
-    "layoutLabeled": "아이콘 및 레이블",
-    "moveToolbar": "툴바 이동",
-    "moveToolbarHint": "드래그하여 툴바의 위치를 변경하세요.",
-    "paste": "이미지 붙여넣기",
-    "pasteImage": "클립보드에서 이미지 붙여넣기 (이미지만 해당)",
-    "retry": "재시도",
-    "showToolbar": "도구 모음 펼치기",
-    "upload": "이미지 업로드",
-    "uploadImage": "호스트에 이미지를 업로드하세요",
-    "uploadingImage": "업로드 중..."
-  },
-  "history": {
-    "noTerminalSelected": "선택된 터미널 없음",
-    "noTerminalSelectedHint": "SSH 터미널 탭을 열어 명령 기록을 확인하세요.",
-    "searchPlaceholder": "기록 검색...",
-    "clearAll": "모두 지우기",
-    "noHistoryEntries": "기록 항목 없음",
-    "trackingDisabled": "기록 추적이 비활성화됨",
-    "trackingDisabledHint": "이 호스트의 SSH 터미널 탭에서 명령 기록을 활성화하세요.",
-    "commandCount_one": "{{count}} 명령",
-    "commandCount_other": "{{count}} 명령"
-  },
-  "touchInput": {
-    "enabled": "터치 입력 활성화",
-    "enabledDesc": "단말기에서 한 손가락 터치 스크롤을 허용합니다.",
-    "momentumEnabled": "모멘텀을 활성화하세요",
-    "momentumEnabledDesc": "스와이프 후 잠시 스크롤을 더 하세요.",
-    "advanced": "고급",
-    "resetDefaults": "기본값으로 초기화",
-    "dragThreshold": "드래그 임계값",
-    "maxWheelDelta": "최대 휠 델타",
-    "momentumSampleWindow": "모멘텀 샘플 윈도우",
-    "releaseGracePeriod": "릴리스 유예 기간",
-    "minimumVelocity": "최소 속도",
-    "maximumVelocity": "최대 속도",
-    "maximumDuration": "최대 지속 시간",
-    "maximumTravel": "최대 이동",
-    "decayTime": "소멸 시간",
-    "pixelsPerTick": "틱당 픽셀",
-    "maximumFrameInterval": "최대 프레임 간격",
-    "maximumTicksPerFrame": "프레임당 최대 틱 수"
-  },
-  "imageStorage": {
-    "instanceId": "터미널 세션 인스턴스 ID",
-    "instanceIdDesc": "연결된 터미널 탭 중 하나의 인스턴스 ID입니다. 이는 가시성 테스트에 사용됩니다.",
-    "selectedModeUnavailable": "없는",
-    "test": "테스트",
-    "testing": "테스트 중...",
-    "testFailed": "이미지 저장소 테스트에 실패했습니다.",
-    "testConnected": "터미널 세션이 연결되었습니다.",
-    "testNotConnected": "이 인스턴스 ID로 연결된 터미널 세션이 없습니다.",
-    "testSelectedMode": "업로드 시에는 {{mode}}를 사용합니다.",
-    "testLocalVisible": "로컬 디렉터리는 연결된 호스트에서 볼 수 있습니다.",
-    "testLocalNotVisible": "연결된 호스트에서 로컬 디렉터리가 보이지 않습니다."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "터치 입력",
-        "images": "이미지 저장",
-        "sessions": "세션",
-        "newHosts": "새로운 호스트"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "터미널 세션 지속성",
-        "description": "연결이 끊긴 터미널이 서버에서 종료되기 전까지 유지되는 시간입니다. 최소 1분, 최대 1440분입니다. 이 시간보다 오래 세션을 유지해야 하는 경우 호스트에서 자동 Tmux를 활성화하십시오."
-      },
-      "commandHistoryEnabled": {
-        "label": "명령어 히스토리",
-        "description": "명령어 히스토리 기록 허용. 비활성화 시 호스트별 설정과 무관하게 히스토리가 저장되지 않습니다."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "새 호스트에 대한 명령 기록",
-        "description": "새 호스트가 명령 기록을 활성화한 상태로 시작할지 여부."
-      },
-      "imageStorageMode": {
-        "label": "저장 모드",
-        "description": "붙여넣거나 업로드한 터미널 이미지가 표시되는 위치입니다. 연결 유형에 따라 로컬 및 원격(SFTP) 이미지가 자동으로 선택됩니다.",
-        "auto": "자동",
-        "local": "로컬",
-        "remoteSftp": "원격(SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "로컬 디렉토리",
-        "description": "로컬 모드에서 이미지를 저장하는 Termix 백엔드의 절대 경로입니다. 저장 후에는 표시되지 않습니다. 비어 있는 경우 TERMIX_IMAGE_DIR이 사용됩니다."
-      },
-      "imageHostPath": {
-        "label": "호스트 경로",
-        "description": "터미널 에이전트가 수신하는 로컬 디렉터리의 호스트 측 보기입니다."
-      },
-      "imageTtlMs": {
-        "label": "TTL(밀리초)",
-        "description": "업로드된 이미지가 유지되는 시간(밀리초). 빈 이미지의 경우 TERMIX_IMAGE_TTL_MS 또는 1시간이 사용됩니다."
-      },
-      "imageMaxCount": {
-        "label": "최대 이미지 개수",
-        "description": "대부분의 이미지는 한 번에 보관됩니다. 빈 이미지는 TERMIX_MAX_IMAGE_COUNT 또는 100을 사용합니다."
-      },
-      "imageMaxBytes": {
-        "label": "최대 저장 용량(바이트)",
-        "description": "한 번에 저장되는 이미지의 최대 바이트 수입니다. 빈 이미지는 TERMIX_MAX_IMAGE_STORAGE_BYTES 또는 5GiB를 사용합니다."
-      },
-      "sessionPersistence": {
-        "label": "연결이 끊어진 후에도 세션을 유지합니다.",
-        "description": "위에 명시된 시간 동안 서버에서 연결이 끊긴 터미널을 활성화 상태로 유지하십시오. 그러면 해당 탭을 다시 열었을 때 이전에 작업하던 부분부터 이어서 작업할 수 있습니다."
-      },
-      "newHostAutoTmux": {
-        "label": "자동 Tmux",
-        "description": "새 호스트의 터미널을 tmux 내에서 실행하여 연결이 끊어져도 세션이 유지되도록 합니다(호스트에 tmux가 설치되어 있어야 함)."
-      },
-      "newHostTheme": {
-        "label": "새로운 호스트를 위한 테마",
-        "description": "새 호스트가 시작할 때 표시되는 터미널 테마입니다."
-      },
-      "newHostFontFamily": {
-        "label": "새 호스트를 위한 글꼴",
-        "description": "새 호스트가 시작할 때 사용하는 터미널 글꼴입니다."
-      },
-      "newHostFontSize": {
-        "label": "새 호스트의 글꼴 크기",
-        "description": "새 호스트가 시작할 때 사용하는 터미널 글꼴 크기(픽셀 단위)."
-      },
-      "newHostCursorStyle": {
-        "label": "새 호스트를 위한 커서 스타일"
-      },
-      "newHostCursorBlink": {
-        "label": "새로운 호스트를 위한 깜빡이는 커서"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "터미널 툴바 활성화",
-        "description": "현재 활성화된 터미널에 도킹된 빠른 액세스 툴바를 표시하여 해당 호스트의 도구 및 실시간 통계를 볼 수 있도록 합니다."
-      },
-      "terminalToolbarPosition": {
-        "label": "툴바 위치",
-        "description": "터미널에서 툴바가 위치하는 곳입니다. 거기서 드래그해서 옮길 수도 있습니다.",
-        "bottom": "하단 중앙",
-        "bottomLeft": "왼쪽 하단",
-        "bottomRight": "오른쪽 하단",
-        "top": "상단 중앙",
-        "topLeft": "왼쪽 상단",
-        "topRight": "오른쪽 상단"
-      },
-      "terminalToolbarStartState": {
-        "label": "툴바 시작 상태",
-        "description": "터미널 연결 시 툴바가 확장된 상태로 열리는지 또는 최소화된 상태로 열리는지 여부",
-        "expanded": "퍼지는",
-        "collapsed": "최소화됨"
-      },
-      "terminalToolbarDisplay": {
-        "label": "툴바 표시 모드",
-        "description": "툴바 버튼 표시 방식입니다. 마지막으로 선택한 버튼이 툴바에 유지됩니다.",
-        "remember": "마지막 사용",
-        "icon": "아이콘 전용",
-        "labeled": "아이콘 및 레이블",
-        "expanded": "통계 자료를 추가하여 확장했습니다."
-      },
-      "terminalToolbarShowStatus": {
-        "label": "실시간 통계 보기",
-        "description": "확장 모드에서 툴바 버튼 위에 호스트의 실시간 통계를 표시합니다."
-      },
-      "terminalToolbarFade": {
-        "label": "가만히 있으면 페이드 아웃",
-        "description": "마우스 커서를 올리기 전까지 툴바가 서서히 사라집니다."
-      },
-      "enableCommandHistory": {
-        "label": "명령어 히스토리",
-        "description": "히스토리 및 자동 완성을 위해 이 터미널에서 실행된 명령어를 기록합니다"
-      },
-      "enableTerminal": {
-        "label": "터미널 활성화",
-        "description": "이 호스트에 SSH 터미널을 제공하십시오."
-      },
-      "inheritAppearance": {
-        "label": "사용자 기본 설정을 사용합니다."
-      },
-      "theme": {
-        "label": "테마"
-      },
-      "cursorBlink": {
-        "label": "깜빡이는 커서"
-      },
-      "cursorStyle": {
-        "label": "커서 스타일"
-      },
-      "fontSize": {
-        "label": "글꼴 크기"
-      },
-      "fontFamily": {
-        "label": "세례반"
-      },
-      "scrollback": {
-        "label": "스크롤백"
-      },
-      "letterSpacing": {
-        "label": "글자 간격"
-      },
-      "lineHeight": {
-        "label": "선 높이"
-      },
-      "bellStyle": {
-        "label": "벨"
-      },
-      "minimumContrastRatio": {
-        "label": "최소 대비비"
-      },
-      "backgroundImage": {
-        "label": "배경 이미지"
-      },
-      "backgroundImageOpacity": {
-        "label": "배경 이미지 투명도"
-      },
-      "customThemeColors": {
-        "label": "사용자 지정 테마 색상"
-      },
-      "rightClickSelectsWord": {
-        "label": "마우스 오른쪽 버튼을 클릭하여 단어를 선택합니다."
-      },
-      "macOptionIsMeta": {
-        "label": "옵션은 메타입니다"
-      },
-      "fastScrollModifier": {
-        "label": "빠른 스크롤 키"
-      },
-      "fastScrollSensitivity": {
-        "label": "빠른 스크롤 속도"
-      },
-      "backspaceMode": {
-        "label": "역행 키이"
-      },
-      "autoMosh": {
-        "label": "자동 모쉬"
-      },
-      "moshCommand": {
-        "label": "모쉬 명령"
-      },
-      "autoTmux": {
-        "label": "자동 tmux"
-      },
-      "useSSHTitle": {
-        "label": "SSH 타이틀을 사용하세요"
-      },
-      "syntaxHighlighting": {
-        "label": "구문 강조 표시"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "구문 강조 표시 범주"
-      },
-      "linkClickBehavior": {
-        "label": "링크를 클릭하세요"
-      },
-      "localEcho": {
-        "label": "로컬 에코"
-      },
-      "passwordPromptAutoFill": {
-        "label": "비밀번호 입력 프롬프트에 자동으로 입력해 주는 서비스를 제공하세요."
-      },
-      "sudoPasswordAutoFill": {
-        "label": "sudo 프롬프트를 채우세요"
-      },
-      "autoReconnect": {
-        "label": "자동으로 다시 연결됩니다"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "명령어 자동 완성",
-        "description": "탭 키를 누르면 입력 중 자동 완성 기능이 표시됩니다."
-      },
-      "localEcho": {
-        "label": "로컬 에코",
-        "description": "안전한 로컬 키 입력 예측을 사용하여 인지되는 입력 지연 시간을 줄입니다."
-      },
-      "linkClickBehavior": {
-        "label": "터미널 링크 클릭",
-        "description": "터미널에서 링크 클릭 시 기본 동작"
-      },
-      "customThemes": {
-        "label": "저장된 테마"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "로컬 터미널"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "실시간 터미널 세션을 사용하세요",
-      "description": "세션 공유 및 녹화와 같은 다른 기능도 실시간 터미널 세션에서 사용할 수 있도록 합니다."
-    },
-    "history": {
-      "title": "명령 기록 읽기",
-      "description": "AI 비서와 같은 다른 기능이 사용자의 명령 기록을 읽을 수 있도록 합니다."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "터미널",
-    "addHost": "호스트 추가",
-    "applyGlobalThemeTooltip": "이 테마를 적용하세요",
-    "backgroundImageDesc": "터미널 배경 이미지를 위한 선택적인 URL입니다.",
-    "backgroundImageLabel": "배경 이미지 URL",
-    "backgroundImageOpacityLabel": "배경 이미지 불투명도",
-    "backspaceMode": "백스페이스 모드",
-    "backspaceModeControlH": "컨트롤-H(BS)",
-    "backspaceModeLabel": "백스페이스 모드",
-    "backspaceModeNormal": "정상(DEL)",
-    "behaviorAndAdvanced": "동작 및 고급",
-    "bellStyle": "벨 스타일",
-    "bellStyleBoth": "둘 다",
-    "bellStyleLabel": "벨 스타일",
-    "bellStyleNone": "없음",
-    "bellStyleSound": "소리",
-    "bellStyleVisual": "시각",
-    "colorTheme": "색상 테마",
-    "cursorBlink": "커서 깜빡임",
-    "cursorBlinking": "커서 깜박임",
-    "cursorBlinkingDesc": "터미널 커서의 깜박이는 애니메이션을 활성화합니다.",
-    "cursorStyle": "커서 스타일",
-    "cursorStyleBar": "바",
-    "cursorStyleBlock": "블록",
-    "cursorStyleLabel": "커서 스타일",
-    "cursorStyleUnderline": "밑줄",
-    "customThemeAnsiColors": "ANSI 색상",
-    "customThemeBackground": "배경",
-    "customThemeBlack": "검정",
-    "customThemeBlue": "파란색",
-    "customThemeBrightBlack": "밝은 검정색",
-    "customThemeBrightBlue": "밝은 파란색",
-    "customThemeBrightCyan": "밝은 시안",
-    "customThemeBrightGreen": "밝은 초록색",
-    "customThemeBrightMagenta": "밝은 마젠타",
-    "customThemeBrightRed": "밝은 빨간색",
-    "customThemeBrightWhite": "밝은 흰색",
-    "customThemeBrightYellow": "밝은 노란색",
-    "customThemeColors": "사용자 정의 색상",
-    "customThemeCursor": "커서",
-    "customThemeCursorAccent": "커서 강조색",
-    "customThemeCyan": "시안",
-    "customThemeForeground": "전경",
-    "customThemeGreen": "초록",
-    "customThemeMagenta": "마젠타",
-    "customThemeRed": "빨강",
-    "customThemeResetTooltip": "기본값으로 재설정",
-    "customThemeSelection": "선택 영역",
-    "customThemeWhite": "흰색",
-    "customThemeYellow": "노랑",
-    "deleteGlobalThemeTooltip": "이 테마를 삭제하세요",
-    "docsLink": "문서 보기",
-    "enableAutoMosh": "Auto-Mosh 활성화",
-    "enableAutoMoshDesc": "사용 가능한 경우 SSH보다 Mosh를 우선합니다",
-    "enableAutoTmux": "Auto-Tmux 활성화",
-    "enableAutoTmuxDesc": "tmux 내부에서 실행하면 연결이 끊기거나 브라우저가 다시 시작되더라도 셸과 그 안에서 실행 중인 모든 작업이 계속 유지됩니다(호스트에 tmux가 설치되어 있어야 함).",
-    "fastScrollModifier": "빠른 스크롤 수정 키",
-    "fastScrollModifierAlt": "Alt",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "빠른 스크롤 보조 키",
-    "fastScrollModifierShift": "Shift",
-    "fastScrollSensitivity": "빠른 스크롤 감도",
-    "fastScrollSensitivityLabel": "빠른 스크롤 감도",
-    "fontFamily": "글꼴",
-    "fontFamilyCustomHint": "기본 제공되는 글꼴을 선택하거나, '사용자 지정'을 선택하고 시스템에 이미 설치된 글꼴의 정확한 이름을 입력하세요(예: MesloLGS NF, Noto Sans Mono). Termix는 글꼴을 설치해 주지 않으므로, 먼저 운영체제에 글꼴을 설치해야 합니다.",
-    "fontFamilyCustomOption": "관습...",
-    "fontFamilyCustomPlaceholder": "글꼴 이름을 정확하게 입력하세요. 예: MesloLGS NF",
-    "fontFamilyLabel": "글꼴 패밀리",
-    "fontSize": "글꼴 크기",
-    "fontSizeLabel": "글꼴 크기",
-    "hostNotFound": "호스트를 찾을 수 없습니다",
-    "letterSpacing": "자간",
-    "letterSpacingPx": "글자 간격(px)",
-    "lineHeight": "줄 간격",
-    "lineHeightLabel": "줄 높이",
-    "linkClickBehaviorConfirm": "팝업을 표시하여 열거나 복사",
-    "linkClickBehaviorDesc": "터미널에서 링크를 클릭할 때의 동작을 제어합니다. 앱 수준 설정을 따르려면 '기본값'을 사용하세요",
-    "linkClickBehaviorDirect": "바로 열기",
-    "linkClickBehaviorLabel": "링크 클릭 동작",
-    "loadingHost": "호스트 로드 중...",
-    "localEchoAuto": "오토매틱",
-    "localEchoDesc": "연결 속도가 느린 환경에서도 안전하게 입력 가능한 키 입력을 로컬에서 예측합니다. 비밀번호 입력 및 제어 입력은 절대 화면에 표시되지 않습니다.",
-    "localEchoLabel": "로컬 에코",
-    "localEchoOff": "꺼짐",
-    "localEchoOn": "항상 켜져 있음",
-    "macOptionIsMetaLabel": "옵션 키를 누르면 메타 데이터가 전송됩니다.",
-    "macOptionIsMetaShortDesc": "macOS에서 Option/Alt 키를 눌러 특수 문자(예: @ 또는 |)를 입력하는 대신 Meta 메시지를 전송하도록 설정합니다.",
-    "moshCommand": "MOSH 명령어",
-    "moshCommandLabel": "Mosh 명령어",
-    "noSavedThemes": "아직 저장된 테마가 없습니다.",
-    "none": "없음",
-    "passwordPromptAutoFillDesc": "터미널에서 비밀번호를 입력하라는 메시지가 나타날 때 저장된 비밀번호를 자동으로 입력하도록 제안합니다. 이 호스트에서 비밀번호 자동 입력 기능을 끄려면 이 옵션을 해제하십시오.",
-    "passwordPromptAutoFillLabel": "비밀번호 자동 완성 기능을 제공합니다",
-    "autoReconnectLabel": "자동 재연결",
-    "autoReconnectDesc": "네트워크 오류나 절전 모드 등으로 SSH 연결이 끊어지면 자동으로 다시 연결합니다. 스크롤백도 유지합니다.",
-    "rightClickSelectsWord": "우클릭 단어 선택",
-    "rightClickSelectsWordLabel": "오른쪽 클릭으로 단어 선택",
-    "rightClickSelectsWordShortDesc": "오른쪽 클릭 시 커서 아래의 단어를 선택합니다.",
-    "saveAsGlobalTheme": "전역 테마로 저장",
-    "saveGlobalThemeError": "테마 저장에 실패했습니다",
-    "saveGlobalThemeNamePrompt": "이 테마의 이름을 입력하세요",
-    "saveGlobalThemeSuccess": "테마 저장됨",
-    "savedThemesLabel": "저장된 테마",
-    "scrollbackBufferLabel": "스크롤백 버퍼",
-    "scrollbackMaxLines": "기록에 유지할 최대 라인 수",
-    "sudoPasswordAutoFill": "Sudo 비밀번호 자동 완성",
-    "sudoPasswordAutoFillDesc": "sudo 비밀번호를 저장하여 호스트 메트릭, 터미널 프롬프트 등이 자동으로 권한 있는 명령을 실행할 수 있도록 합니다",
-    "sudoPasswordAutoFillLabel": "Sudo 비밀번호 자동 입력",
-    "syntaxCategoryIpAddresses": "IP 주소",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "로그 수준",
-    "syntaxCategoryLogLevelsDesc": "error, warn, info, debug, fatal",
-    "syntaxCategoryNumbers": "레이블이 지정된 숫자",
-    "syntaxCategoryNumbersDesc": "port 8080, exit 1, status 404",
-    "syntaxCategoryPaths": "파일 경로",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "타임스탬프",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 2024-01-15",
-    "syntaxCategoryUrls": "URL",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "터미널 출력에 색상 지정 (오류, 경로, IP, 타임스탬프)",
-    "syntaxHighlightingLabel": "구문 강조",
-    "terminalAppearance": "터미널 모양",
-    "theme": "테마",
-    "themePreview": "테마 미리보기",
-    "useSSHTitleDesc": "탭 제목을 호스트 이름 대신 셸 창 제목에서 업데이트합니다",
-    "useSSHTitleLabel": "SSH 창 제목 사용",
-    "enableTunnel": "터널 활성화",
-    "enableFileManager": "파일 관리자 활성화",
-    "enableDocker": "Docker 활성화",
-    "startupSnippet": "시작 스니펫",
-    "quickActions": "빠른 동작",
-    "proxmoxLastSyncStatus": {
-      "success": "성공"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} 건너뛰었습니다(IP 주소를 찾을 수 없음)",
-    "proxmoxStatsUrlCopied": "Proxmox 통계 URL이 클립보드에 복사되었습니다.",
-    "rdpUrlCopied": "RDP URL 복사됨",
-    "vncUrlCopied": "VNC URL 복사됨",
-    "filterAuthStepca": "스텝 CA",
-    "guac": {
-      "noCredential": "자격 증명 없음 (직접 자격 증명 사용)",
-      "authTypeDirect": "직접",
-      "authTypeCredential": "자격 증명",
-      "authTypeNone": "전체 해제",
-      "recordingPath": "녹화 경로",
-      "recordingName": "녹화 이름",
-      "saveHostFirst": "호스트를 먼저 저장하세요.",
-      "sharingOptionsAfterSave": "공유 옵션은 호스트가 저장된 후 사용할 수 있습니다.",
-      "permissionLevel": "권한 수준",
-      "typeHeader": "유형",
-      "targetHeader": "대상",
-      "permissionHeader": "권한",
-      "cancelBtn": "취소",
-      "savingBtn": "저장 중...",
-      "updateHostBtn": "호스트 업데이트",
-      "addHostBtn": "호스트 추가"
-    },
-    "filterAuthVault": "둥근 천장"
-  },
-  "nav": {
-    "history": "기록",
-    "localTerminal": "로컬 터미널",
-    "sshTools": "SSH 도구",
-    "terminal": "터미널",
-    "macros": "매크로"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "키 입력을 브로드캐스트하려면 여기에 입력...",
-    "copyOnSelect": "선택한 텍스트를 자동으로 복사합니다",
-    "enableRightClickCopyPaste": "오른쪽 클릭 복사/붙여넣기 활성화",
-    "fillPassword": "비밀번호 채우기",
-    "fillPasswordMissing": "선택된 {{count}}개 터미널에 저장된 비밀번호가 없습니다.",
-    "fillPasswordSuccess": "{{count}}개 터미널에 비밀번호를 채웠습니다.",
-    "keyRecordingTitle": "키 기록",
-    "noTerminalTabsOpen": "열린 터미널 탭 없음",
-    "recordToTerminals": "터미널에 기록",
-    "selectAll": "모두",
-    "selectNone": "전체 해제",
-    "selectTerminalsAbove": "위 터미널 선택",
-    "settingsTitle": "설정",
-    "startRecording": "기록 시작",
-    "stopRecording": "기록 중지"
-  },
-  "keybindings": {
-    "copy": "선택 복사",
-    "paste": "붙여넣기",
-    "sendControlCode": "Ctrl+문자 신호를 보냅니다",
-    "sendText": "문자 보내기",
-    "controlCodeLabel": "편지",
-    "textLabel": "보낼 텍스트",
-    "appendEnterLabel": "전송 후 Enter 키를 누르세요.",
-    "clipboardPermissionNote": "일부 브라우저에서는 처음 사용 시 클립보드 권한을 요청할 수 있습니다.",
-    "textRequired": "보낼 텍스트를 입력하세요",
-    "controlCodeRequired": "제어 코드에 한 글자를 입력하세요.",
-    "builtIn": {
-      "copyCtrlC": "선택 영역 복사(Ctrl+C, 텍스트가 선택된 경우에만 가능)",
-      "copyCtrlShiftC": "선택 영역 복사(Ctrl+Shift+C)",
-      "copyCmdC": "선택 영역 복사(Cmd+C)",
-      "pasteCtrlShiftV": "클립보드에서 붙여넣기(Ctrl+Shift+V)",
-      "ctrlW": "Ctrl+W를 눌러 셸로 이동합니다(브라우저 탭을 닫을 수 없도록 차단됨).",
-      "ctrlT": "Ctrl+T를 눌러 셸로 이동(브라우저 탭 열기 차단됨)",
-      "ctrlN": "Ctrl+N을 눌러 셸로 이동하세요 (브라우저 창 열기가 차단됨).",
-      "ctrlQ": "Ctrl+Q를 눌러 셸로 이동합니다(브라우저 종료가 차단됨)."
-    }
-  },
-  "macros": {
-    "title": "매크로",
-    "description": "터미널에서 저장된 일련의 명령어를 실행하고, 서버가 보내는 응답에 반응합니다.",
-    "target": "대상",
-    "noTerminal": "터미널이 열려 있지 않습니다",
-    "empty": "아직 매크로가 없습니다.",
-    "emptyHint": "터미널 로그인, 서비스 재시작 또는 프롬프트 응답과 같은 터미널 작업 흐름을 자동화하는 매크로를 만드세요.",
-    "create": "새로운 매크로",
-    "back": "매크로로 돌아가기",
-    "name": "이름",
-    "namePlaceholder": "웹 서버를 재시작하세요",
-    "nameRequired": "매크로를 저장하기 전에 이름을 지정하세요.",
-    "descriptionLabel": "설명",
-    "descriptionPlaceholder": "이 매크로의 기능 (선택 사항)",
-    "unsaved": "저장되지 않은 변경 사항",
-    "save": "저장",
-    "saved": "매크로 저장됨",
-    "saveFailed": "매크로를 저장할 수 없습니다.",
-    "delete": "삭제",
-    "deleteTitle": "이 매크로를 삭제하시겠습니까?",
-    "deleteBody": "\"{{name}}\"는 영구적으로 삭제됩니다. 이 작업은 되돌릴 수 없습니다.",
-    "deleted": "매크로 삭제됨",
-    "cancel": "취소",
-    "run": "실행",
-    "stop": "스톱",
-    "running": "달리기...",
-    "completed": "매크로 완료",
-    "failed": "매크로 실패",
-    "loadFailed": "매크로를 불러올 수 없습니다.",
-    "needTerminal": "먼저 터미널을 열고 연결하세요.",
-    "noSteps": "이 매크로는 아직 단계가 없습니다. 아래에 단계를 추가하세요.",
-    "addStep": "단계 추가",
-    "stepNumber": "단계 {{number}}",
-    "removeStep": "제거 단계",
-    "confirmRunTitle": "이 매크로를 실행하시겠습니까?",
-    "confirmRunBody": "\"{{name}}\"는 {{host}}로 명령을 보냅니다.",
-    "confirmRunAction": "매크로 실행",
-    "stepTypes": {
-      "send": {
-        "label": "명령을 보내세요",
-        "help": "터미널에 텍스트를 입력합니다. 마치 직접 타이핑하는 것과 같습니다."
-      },
-      "wait": {
-        "label": "출력이 나올 때까지 기다리세요",
-        "help": "서버가 사용자가 입력한 텍스트(예: 비밀번호 입력창)를 출력할 때까지 일시 중지됩니다."
-      },
-      "delay": {
-        "label": "일시 정지",
-        "help": "다음 단계로 넘어가기 전에 일정 시간 동안 기다립니다."
-      },
-      "if": {
-        "label": "출력에 다음 내용이 포함되어 있는 경우",
-        "help": "서버에서 지금까지 출력한 모든 내용을 확인한 후 두 가지 분기 중 하나를 실행합니다."
-      },
-      "repeat": {
-        "label": "반복하다",
-        "help": "그 안에 있는 단계들을 정해진 횟수만큼 실행합니다."
-      }
-    },
-    "send": {
-      "text": "명령 또는 텍스트",
-      "textPlaceholder": "systemctl restart nginx",
-      "pressEnter": "전송 후 Enter 키를 누르세요.",
-      "pressEnterHelp": "텍스트를 입력하되 제출하지 않으려면 이 기능을 끄세요."
-    },
-    "wait": {
-      "pattern": "출력 내용이 포함될 때까지 기다리세요",
-      "patternPlaceholder": "비밀번호:",
-      "timeout": "포기한 후에",
-      "onTimeout": "만약 전혀 나타나지 않는다면",
-      "stop": "매크로를 중지하세요",
-      "continue": "어쨌든 계속 가세요"
-    },
-    "delay": {
-      "duration": "기다리세요"
-    },
-    "ifStep": {
-      "pattern": "출력에 다음 내용이 포함되어 있는 경우",
-      "patternPlaceholder": "활성: 활성(실행 중)",
-      "then": "그럼 이렇게 하세요",
-      "else": "그렇지 않으면 이렇게 하세요.",
-      "emptyBranch": "단계 없음"
-    },
-    "repeat": {
-      "count": "횟수",
-      "times": "타임스"
-    },
-    "match": {
-      "useRegex": "정규 표현식과 일치",
-      "useRegexHelp": "원문과 정확히 일치하려면 이 부분을 삭제하세요.",
-      "invalidRegex": "유효한 정규 표현식이 아니므로 일반 텍스트로 처리됩니다."
-    },
-    "seconds": "초",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "원격 서버가 필요합니다. 이 연결 유형을 사용하려면 설정에서 원격 서버를 연결하세요."
-  },
-  "plugin": {
-    "name": "SSH 터미널"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/nl_NL.json b/plugins/ssh-terminal/locales/translated/nl_NL.json
deleted file mode 100644
index 3a8fc5c1a..000000000
--- a/plugins/ssh-terminal/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Toevoegen",
-    "arrowDown": "Pijl omlaag",
-    "arrowLeft": "Pijl naar links",
-    "arrowRight": "Pijl naar rechts",
-    "arrowUp": "Pijl omhoog",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Del",
-    "done": "Klaar",
-    "editQuickKeys": "Sneltoetsen bewerken",
-    "end": "Einde",
-    "esc": "Esc",
-    "home": "Thuis",
-    "pageDown": "PgDn",
-    "pageUp": "PgUp",
-    "paste": "Plakken",
-    "quickKeyPlaceholder": "bijv. sudo ",
-    "quickKeysDesc": "Tik op × om te verwijderen. Ondersteunt maximaal 8 tekens.",
-    "quickKeysTitle": "Sneltoetsen",
-    "removeQuickKey": "Verwijderen",
-    "resetDefaults": "Terugzetten naar standaardinstellingen",
-    "shift": "Verschuiving",
-    "tab": "Tab"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Auto-Tmux inschakelen is mislukt.",
-    "autoTmuxEnabled": "Auto-Tmux ingeschakeld voor {{host}}. Dit geldt vanaf de volgende verbinding.",
-    "clipboardHttpWarning": "Kon het klembord niet lezen. Sommige browsers beperken de toegang tot het klembord buiten HTTPS - probeer in plaats daarvan Ctrl+V, of serveer Termix via HTTPS.",
-    "closeTab": "Dichtbij",
-    "connecting": "Verbinden...",
-    "connectionLost": "Verbinding verbroken",
-    "connectionRejected": "Verbinding geweigerd door de server. Controleer uw authenticatie- en netwerkconfiguratie.",
-    "connectionTimeout": "Verbindingstime-out",
-    "enableAutoTmuxAction": "Auto-Tmux inschakelen",
-    "hostKeyRejected": "SSH-hostsleutelverificatie geweigerd. Verbinding verbroken.",
-    "linkDialogCopy": "Kopiëren",
-    "linkDialogOpen": "Open",
-    "linkDialogTitle": "Open link",
-    "maxReconnectAttemptsReached": "Maximaal aantal herverbindingspogingen bereikt",
-    "noHostSelected": "Geen host geselecteerd",
-    "passwordPromptFillTitle": "Voer het opgeslagen wachtwoord in op dit veld.",
-    "reconnect": "Opnieuw verbinding maken",
-    "reconnected": "De verbinding is succesvol hersteld.",
-    "reconnecting": "Opnieuw verbinding maken... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Verbinding verbroken, opnieuw verbinding maken...",
-    "searchCaseSensitive": "Lucifersdoosje",
-    "searchClose": "Sluiten (Escape)",
-    "searchNext": "Volgende wedstrijd (Invoeren)",
-    "searchNoResults": "Geen resultaten",
-    "searchPlaceholder": "Vinden",
-    "searchPrevious": "Vorige wedstrijd (Shift+Enter)",
-    "searchRegex": "Gebruik een reguliere expressie.",
-    "searchResultCount": "{{index}} van {{count}}",
-    "searchWholeWord": "Combineer het hele woord",
-    "sessionExpiredNotice": "Je vorige sessie op {{host}} is na {{minutes}} minuten verlopen; de shell en alles wat erin draaide, is verdwenen. Schakel Auto-Tmux op deze host in om sessies actief te houden.",
-    "sessionExpiredNoticeNoMinutes": "Je vorige sessie op {{host}} is verlopen terwijl de verbinding verbroken was; de shell en alles wat daarin draaide, is verdwenen. Schakel Auto-Tmux in op deze host om sessies actief te houden.",
-    "sessionTakenOver": "De sessie is in een ander tabblad geopend. Opnieuw verbinding maken...",
-    "tmuxAttached": "Aangesloten klanten",
-    "tmuxAttachedCount": "{{count}} bevestigd",
-    "tmuxCopyHint": "Pas je selectie aan en druk op Enter om naar het klembord te kopiëren.",
-    "tmuxCreateNew": "Start een nieuwe sessie",
-    "tmuxDetached": "Losgekoppeld van de tmux-sessie",
-    "tmuxLastActivity": "Laatste activiteit",
-    "tmuxSessionAttached": "tmux-sessie gekoppeld: {{name}}",
-    "tmuxSessionCreated": "tmux-sessie aangemaakt: {{name}}",
-    "tmuxSessionPickerDesc": "Bestaande tmux-sessies gevonden op deze host. Selecteer er een om opnieuw verbinding te maken of een nieuwe sessie te creëren.",
-    "tmuxSessionPickerTitle": "tmux-sessies",
-    "tmuxTimeDays": "{{count}}dagen geleden",
-    "tmuxTimeHours": "{{count}}uur geleden",
-    "tmuxTimeJustNow": "zojuist",
-    "tmuxTimeMinutes": "{{count}}m geleden",
-    "tmuxUnavailable": "Tmux is niet geïnstalleerd op de externe host, er wordt teruggevallen op de standaard shell.",
-    "tmuxWindowCount": "{{count}} venster",
-    "tmuxWindows": "Windows",
-    "unknownError": "Er is een onbekende fout opgetreden.",
-    "websocketAbnormalClose": "De verbinding is onverwacht verbroken. Dit kan te wijten zijn aan een probleem met de reverse proxy of de SSL-configuratie. Controleer de serverlogboeken.",
-    "websocketError": "WebSocket-verbindingsfout",
-    "clipboardReadFailed": "Het lezen van het klembord is mislukt. Zorg ervoor dat de juiste klembordrechten zijn verleend.",
-    "clipboardWriteFailed": "Kopiëren naar klembord mislukt. Zorg ervoor dat de pagina via HTTPS of localhost wordt aangeboden.",
-    "connected": "Aangesloten",
-    "totpCodeLabel": "Verificatiecode",
-    "duplicateTab": "Tabblad dupliceren",
-    "imageChooseFile": "Kies een afbeeldingsbestand",
-    "imageUploaded": "Afbeelding geüpload: {{path}}",
-    "imageClipboardUnavailable": "Deze browser kan geen afbeeldingen van het klembord lezen.",
-    "imageClipboardEmpty": "Er is geen afbeelding gevonden in het klembord.",
-    "localShell": "Lokale terminal shell",
-    "autocompleteHintComplete": "Tab of Enter om te voltooien",
-    "autocompleteHintNavigate": "↑↓ om te navigeren",
-    "autocompleteHintClose": "Esc om te sluiten"
-  },
-  "terminalToolbar": {
-    "detachTmux": "Ontkoppel tmux",
-    "detachTmuxDescription": "Ontkoppel de tmux-sessie",
-    "dismissError": "Afbeeldingsfout negeren",
-    "hideToolbar": "Werkbalk verbergen",
-    "image": "Acties met afbeeldingen (alleen afbeeldingen)",
-    "imageActionFailed": "Afbeeldingsactie mislukt",
-    "layout": "Werkbalkweergavemodus",
-    "layoutExpanded": "Uitgebreid met meetgegevens",
-    "layoutIcon": "Alleen pictogram",
-    "layoutLabeled": "Pictogrammen en labels",
-    "moveToolbar": "Verplaats de werkbalk",
-    "moveToolbarHint": "Sleep om de werkbalk te verplaatsen.",
-    "paste": "Plak afbeelding",
-    "pasteImage": "Plak een afbeelding vanuit het klembord (alleen afbeeldingen)",
-    "retry": "Opnieuw proberen",
-    "showToolbar": "Werkbalk uitklappen",
-    "upload": "Afbeelding uploaden",
-    "uploadImage": "Upload een afbeelding naar de host.",
-    "uploadingImage": "Bezig met uploaden..."
-  },
-  "history": {
-    "noTerminalSelected": "Geen terminal geselecteerd",
-    "noTerminalSelectedHint": "Open een SSH-terminaltabblad om de opdrachtgeschiedenis te bekijken.",
-    "searchPlaceholder": "Zoekgeschiedenis...",
-    "clearAll": "Alles wissen",
-    "noHistoryEntries": "Geen geschiedenisvermeldingen",
-    "trackingDisabled": "Geschiedenisregistratie is uitgeschakeld",
-    "trackingDisabledHint": "Schakel de opdrachtgeschiedenis in op het tabblad SSH-terminal van deze host.",
-    "commandCount_one": "{{count}} commando",
-    "commandCount_other": "{{count}} commando's"
-  },
-  "touchInput": {
-    "enabled": "Aanraakinvoer inschakelen",
-    "enabledDesc": "Schakel scrollen met één vinger in op terminals in.",
-    "momentumEnabled": "Activeer momentum",
-    "momentumEnabledDesc": "Scroll nog even kort verder na een veegbeweging.",
-    "advanced": "Geavanceerd",
-    "resetDefaults": "Terugzetten naar standaardinstellingen",
-    "dragThreshold": "Sleepdrempel",
-    "maxWheelDelta": "Maximale wieldelta",
-    "momentumSampleWindow": "Momentum-steekproefvenster",
-    "releaseGracePeriod": "Vrijlatingstermijn",
-    "minimumVelocity": "Minimale snelheid",
-    "maximumVelocity": "Maximale snelheid",
-    "maximumDuration": "Maximale duur",
-    "maximumTravel": "Maximale reis",
-    "decayTime": "Vervaltijd",
-    "pixelsPerTick": "Pixels per tik",
-    "maximumFrameInterval": "Maximale frame-interval",
-    "maximumTicksPerFrame": "Maximaal aantal ticks per frame"
-  },
-  "imageStorage": {
-    "instanceId": "Terminal sessie instantie-ID",
-    "instanceIdDesc": "Instantie-ID van een van uw verbonden terminaltabbladen, gebruikt om de zichtbaarheid te testen.",
-    "selectedModeUnavailable": "Niet beschikbaar",
-    "test": "Test",
-    "testing": "Testen...",
-    "testFailed": "Het testen van de beeldopslag is mislukt.",
-    "testConnected": "De terminalsessie is verbonden.",
-    "testNotConnected": "Er is geen verbonden terminalsessie met deze instantie-ID.",
-    "testSelectedMode": "Een upload zou het volgende gebruiken: {{mode}}",
-    "testLocalVisible": "De lokale map is zichtbaar vanaf de verbonden host.",
-    "testLocalNotVisible": "De lokale map is NIET zichtbaar vanaf de verbonden host."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Aanraakinvoer",
-        "images": "Afbeeldingsopslag",
-        "sessions": "Sessies",
-        "newHosts": "Nieuwe hosts"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Terminalsessiepersistentie",
-        "description": "Hoe lang een losgekoppelde terminal actief blijft op de server voordat deze wordt gesloten. Minimaal 1, maximaal 1440 minuten. Voor sessies die langer dan deze tijd actief moeten blijven, schakelt u Auto-Tmux in op de host."
-      },
-      "commandHistoryEnabled": {
-        "label": "Commandogeschiedenis",
-        "description": "Sta het vastleggen van de opdrachtgeschiedenis toe. Indien uitgeschakeld, wordt de geschiedenis niet opgeslagen, ongeacht de instellingen per host."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "Opdrachtgeschiedenis voor nieuwe hosts",
-        "description": "Of nieuwe hosts starten met de opdrachtgeschiedenis ingeschakeld."
-      },
-      "imageStorageMode": {
-        "label": "Opslagmodus",
-        "description": "Hier worden geplakte en geüploade terminalafbeeldingen opgeslagen. Automatische selectie op basis van de verbinding, lokaal en extern (SFTP) zijn vastgelegd.",
-        "auto": "Auto",
-        "local": "Lokaal",
-        "remoteSftp": "Op afstand (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Lokale map",
-        "description": "Het absolute pad in de Termix-backend waar de lokale modus afbeeldingen opslaat. Wordt na het opslaan nooit weergegeven. Een lege map gebruikt TERMIX_IMAGE_DIR."
-      },
-      "imageHostPath": {
-        "label": "Hostpad",
-        "description": "De weergave aan de hostzijde van de lokale directory die terminalagents ontvangen."
-      },
-      "imageTtlMs": {
-        "label": "TTL (ms)",
-        "description": "Hoe lang een geüploade afbeelding wordt bewaard, in milliseconden. Een lege afbeelding wordt bewaard in TERMIX_IMAGE_TTL_MS, oftewel één uur."
-      },
-      "imageMaxCount": {
-        "label": "Maximaal aantal afbeeldingen",
-        "description": "De meeste afbeeldingen worden tegelijk bewaard. Een lege afbeelding gebruikt TERMIX_MAX_IMAGE_COUNT of 100."
-      },
-      "imageMaxBytes": {
-        "label": "Maximale opslagcapaciteit in bytes",
-        "description": "De meeste bytes van afbeeldingen worden tegelijk bewaard. Een lege afbeelding gebruikt TERMIX_MAX_IMAGE_STORAGE_BYTES of 5 GiB."
-      },
-      "sessionPersistence": {
-        "label": "Sessies behouden na ontkoppeling",
-        "description": "Houd een losgekoppelde terminal gedurende de bovengenoemde tijd actief op de server, zodat het heropenen van het tabblad verdergaat waar het was gebleven."
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "Start de terminals van nieuwe hosts binnen tmux, zodat sessies behouden blijven bij verbroken verbindingen (tmux moet op de host geïnstalleerd zijn)."
-      },
-      "newHostTheme": {
-        "label": "Thema voor nieuwe hosts",
-        "description": "Het terminalthema waarmee een nieuwe host opstart."
-      },
-      "newHostFontFamily": {
-        "label": "Lettertype voor nieuwe hosts",
-        "description": "Het terminallettertype waarmee een nieuwe host opstart."
-      },
-      "newHostFontSize": {
-        "label": "Lettergrootte voor nieuwe hosts",
-        "description": "De lettergrootte waarmee een nieuwe host in de terminal begint, in pixels."
-      },
-      "newHostCursorStyle": {
-        "label": "Cursorstijl voor nieuwe hosts"
-      },
-      "newHostCursorBlink": {
-        "label": "Knipperende cursor voor nieuwe hosts"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Terminalwerkbalk inschakelen",
-        "description": "Toon een sneltoegangsbalk die is vastgezet aan de actieve terminal voor de tools en live statistieken van deze host."
-      },
-      "terminalToolbarPosition": {
-        "label": "Positie van de werkbalk",
-        "description": "De werkbalk bevindt zich normaal gesproken in de terminal. Je kunt hem daar nog steeds naartoe slepen.",
-        "bottom": "Onderste midden",
-        "bottomLeft": "Linksonder",
-        "bottomRight": "Rechtsonder",
-        "top": "Boven in het midden",
-        "topLeft": "Links boven",
-        "topRight": "Rechtsboven"
-      },
-      "terminalToolbarStartState": {
-        "label": "Werkbalk startstatus",
-        "description": "Of de werkbalk nu uitgeklapt of ingeklapt wordt geopend wanneer de terminal verbinding maakt.",
-        "expanded": "Uitgebreid",
-        "collapsed": "Geminimaliseerd"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Werkbalkweergavemodus",
-        "description": "Hoe de knoppen in de werkbalk worden weergegeven. De laatst gebruikte instelling behoudt de geselecteerde optie in de werkbalk.",
-        "remember": "Laatst gebruikt",
-        "icon": "Alleen pictogram",
-        "labeled": "Pictogrammen en labels",
-        "expanded": "Uitgebreid met statistieken"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Toon live statistieken",
-        "description": "Toon live hoststatistieken boven de knoppen in de werkbalk in de uitgevouwen modus."
-      },
-      "terminalToolbarFade": {
-        "label": "Vervagen bij inactiviteit",
-        "description": "Laat de werkbalk vervagen totdat je er met de muis overheen beweegt."
-      },
-      "enableCommandHistory": {
-        "label": "Commandogeschiedenis",
-        "description": "Sla de commando's die in deze terminal worden uitgevoerd op voor de geschiedenis en automatisch aanvullen."
-      },
-      "enableTerminal": {
-        "label": "Terminal inschakelen",
-        "description": "Bied een SSH-terminal aan voor deze host."
-      },
-      "inheritAppearance": {
-        "label": "Gebruik de standaardinstellingen van de gebruiker."
-      },
-      "theme": {
-        "label": "Thema"
-      },
-      "cursorBlink": {
-        "label": "Knipperende cursor"
-      },
-      "cursorStyle": {
-        "label": "Cursorstijl"
-      },
-      "fontSize": {
-        "label": "Lettergrootte"
-      },
-      "fontFamily": {
-        "label": "Lettertype"
-      },
-      "scrollback": {
-        "label": "Terugscrollen"
-      },
-      "letterSpacing": {
-        "label": "Letterafstand"
-      },
-      "lineHeight": {
-        "label": "Lijnhoogte"
-      },
-      "bellStyle": {
-        "label": "Klok"
-      },
-      "minimumContrastRatio": {
-        "label": "Minimale contrastverhouding"
-      },
-      "backgroundImage": {
-        "label": "Achtergrondafbeelding"
-      },
-      "backgroundImageOpacity": {
-        "label": "Dekking van de achtergrondafbeelding"
-      },
-      "customThemeColors": {
-        "label": "Aangepaste themakleuren"
-      },
-      "rightClickSelectsWord": {
-        "label": "Met de rechtermuisknop wordt het woord geselecteerd."
-      },
-      "macOptionIsMeta": {
-        "label": "Optie is Meta"
-      },
-      "fastScrollModifier": {
-        "label": "Snel scrolltoets"
-      },
-      "fastScrollSensitivity": {
-        "label": "Snelle scrollsnelheid"
-      },
-      "backspaceMode": {
-        "label": "Backspace"
-      },
-      "autoMosh": {
-        "label": "Auto mosh"
-      },
-      "moshCommand": {
-        "label": "Mosh-commando"
-      },
-      "autoTmux": {
-        "label": "Auto tmux"
-      },
-      "useSSHTitle": {
-        "label": "Gebruik de SSH-titel"
-      },
-      "syntaxHighlighting": {
-        "label": "Syntaxmarkering"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Syntaxmarkeringcategorieën"
-      },
-      "linkClickBehavior": {
-        "label": "Link klikken"
-      },
-      "localEcho": {
-        "label": "Lokale echo"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Bied aan om de wachtwoordprompts in te vullen."
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Vul de sudo-prompts in."
-      },
-      "autoReconnect": {
-        "label": "Automatisch opnieuw verbinding maken"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Opdracht automatisch aanvullen",
-        "description": "Toon automatisch aanvullen tijdens het typen als je op tab drukt."
-      },
-      "localEcho": {
-        "label": "Local Echo",
-        "description": "Verminder de waargenomen invoerlatentie met behulp van veilige lokale toetsaanslagvoorspelling."
-      },
-      "linkClickBehavior": {
-        "label": "Terminallink Klik",
-        "description": "Standaardgedrag bij het klikken op links in de terminal"
-      },
-      "customThemes": {
-        "label": "Opgeslagen thema's"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Lokale terminal"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Gebruik live terminalsessies",
-      "description": "Hiermee kunnen andere functies, zoals het delen en opnemen van sessies, uw live terminalsessies bereiken."
-    },
-    "history": {
-      "title": "Lees de opdrachtgeschiedenis",
-      "description": "Hiermee kunnen andere functies, zoals de AI-assistent, uw commando-geschiedenis lezen."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Terminal",
-    "addHost": "Voeg een host toe",
-    "applyGlobalThemeTooltip": "Pas dit thema toe",
-    "backgroundImageDesc": "Optionele URL voor een achtergrondafbeelding voor de terminal",
-    "backgroundImageLabel": "URL van de achtergrondafbeelding",
-    "backgroundImageOpacityLabel": "Dekking van de achtergrondafbeelding",
-    "backspaceMode": "Backspace-modus",
-    "backspaceModeControlH": "Controle-H (BS)",
-    "backspaceModeLabel": "Backspace-modus",
-    "backspaceModeNormal": "Normaal (DEL)",
-    "behaviorAndAdvanced": "Gedrag & Geavanceerd",
-    "bellStyle": "Klokstijl",
-    "bellStyleBoth": "Beide",
-    "bellStyleLabel": "Klokstijl",
-    "bellStyleNone": "Geen",
-    "bellStyleSound": "Geluid",
-    "bellStyleVisual": "Visueel",
-    "colorTheme": "Kleurenthema",
-    "cursorBlink": "Cursorknipperen",
-    "cursorBlinking": "Knipperende cursor",
-    "cursorBlinkingDesc": "Schakel de knipperanimatie voor de terminalcursor in.",
-    "cursorStyle": "Cursorstijl",
-    "cursorStyleBar": "Bar",
-    "cursorStyleBlock": "Blok",
-    "cursorStyleLabel": "Cursorstijl",
-    "cursorStyleUnderline": "Onderstrepen",
-    "customThemeAnsiColors": "ANSI-kleuren",
-    "customThemeBackground": "Achtergrond",
-    "customThemeBlack": "Zwart",
-    "customThemeBlue": "Blauw",
-    "customThemeBrightBlack": "Helderzwart",
-    "customThemeBrightBlue": "Helderblauw",
-    "customThemeBrightCyan": "Helder cyaan",
-    "customThemeBrightGreen": "Felgroen",
-    "customThemeBrightMagenta": "Fel magenta",
-    "customThemeBrightRed": "Felrood",
-    "customThemeBrightWhite": "Helder wit",
-    "customThemeBrightYellow": "Felgeel",
-    "customThemeColors": "Aangepaste kleuren",
-    "customThemeCursor": "Cursor",
-    "customThemeCursorAccent": "Cursoraccent",
-    "customThemeCyan": "Cyaan",
-    "customThemeForeground": "Voorgrond",
-    "customThemeGreen": "Groente",
-    "customThemeMagenta": "Magenta",
-    "customThemeRed": "Rood",
-    "customThemeResetTooltip": "Terugzetten naar standaardinstellingen",
-    "customThemeSelection": "Selectie",
-    "customThemeWhite": "Wit",
-    "customThemeYellow": "Geel",
-    "deleteGlobalThemeTooltip": "Verwijder dit thema",
-    "docsLink": "Documenten bekijken",
-    "enableAutoMosh": "Auto-Mosh inschakelen",
-    "enableAutoMoshDesc": "Geef de voorkeur aan Mosh boven SSH indien beschikbaar.",
-    "enableAutoTmux": "Auto-Tmux inschakelen",
-    "enableAutoTmuxDesc": "Zorg ervoor dat je shell en alles wat daarin draait, blijft functioneren, ook na een verbindingsoverbreking of een herstart van de browser, door tmux te gebruiken (tmux moet wel op de host geïnstalleerd zijn).",
-    "fastScrollModifier": "Snel scrollen-modifier",
-    "fastScrollModifierAlt": "Alt",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Snel scrollen-modifier",
-    "fastScrollModifierShift": "Verschuiving",
-    "fastScrollSensitivity": "Snel scrollen gevoeligheid",
-    "fastScrollSensitivityLabel": "Snel scrollen gevoeligheid",
-    "fontFamily": "Lettertypefamilie",
-    "fontFamilyCustomHint": "Kies een van de meegeleverde lettertypen, of selecteer 'Aangepast' en typ de exacte naam van een lettertype dat al op uw systeem is geïnstalleerd (bijv. MesloLGS NF, Noto Sans Mono). Termix kan geen lettertypen voor u installeren; installeer ze eerst op uw besturingssysteem.",
-    "fontFamilyCustomOption": "Aangepast...",
-    "fontFamilyCustomPlaceholder": "Exacte lettertypenaam, bijvoorbeeld MesloLGS NF",
-    "fontFamilyLabel": "Lettertypefamilie",
-    "fontSize": "Lettergrootte",
-    "fontSizeLabel": "Lettergrootte",
-    "hostNotFound": "Host niet gevonden",
-    "letterSpacing": "Letterafstand",
-    "letterSpacingPx": "Letterafstand (px)",
-    "lineHeight": "Lijnhoogte",
-    "lineHeightLabel": "Lijnhoogte",
-    "linkClickBehaviorConfirm": "Toon pop-up om te openen of te kopiëren",
-    "linkClickBehaviorDesc": "Hiermee bepaal je wat er gebeurt wanneer je op een link in de terminal klikt. Gebruik 'Standaard' om de instelling op app-niveau te volgen.",
-    "linkClickBehaviorDirect": "Direct openen",
-    "linkClickBehaviorLabel": "Klikgedrag op links",
-    "loadingHost": "Host wordt geladen...",
-    "localEchoAuto": "Automatisch",
-    "localEchoDesc": "Voorspel lokaal veilige toetsaanslagen, ook bij trage internetverbindingen. Wachtwoordprompts en besturingsinvoer worden nooit weergegeven.",
-    "localEchoLabel": "Local Echo",
-    "localEchoOff": "Uit",
-    "localEchoOn": "Altijd aan",
-    "macOptionIsMetaLabel": "Option-toets verzendt metadata",
-    "macOptionIsMetaShortDesc": "Schakel het typen van speciale tekens (zoals @ of |) met de Option/Alt-toets op macOS uit in plaats van Meta te verzenden.",
-    "moshCommand": "MOSH-commando",
-    "moshCommandLabel": "Mosh Command",
-    "noSavedThemes": "Nog geen opgeslagen thema's",
-    "none": "Geen",
-    "passwordPromptAutoFillDesc": "Bied aan om het opgeslagen wachtwoord in te vullen wanneer de terminal daarom vraagt. Schakel deze optie uit om nooit automatisch een wachtwoord in te vullen op deze host.",
-    "passwordPromptAutoFillLabel": "Automatisch wachtwoord invullen aanbieden",
-    "autoReconnectLabel": "Automatisch opnieuw verbinden",
-    "autoReconnectDesc": "Maakt automatisch opnieuw verbinding wanneer de SSH-verbinding wegvalt, bijvoorbeeld na een netwerkstoring of in de slaapstand. Behoudt de scrollback-functie.",
-    "rightClickSelectsWord": "Rechtsklikken selecteert Word",
-    "rightClickSelectsWordLabel": "Rechtsklikken selecteert Word",
-    "rightClickSelectsWordShortDesc": "Selecteer het woord onder de cursor door met de rechtermuisknop te klikken.",
-    "saveAsGlobalTheme": "Opslaan als globaal thema",
-    "saveGlobalThemeError": "Het opslaan van het thema is mislukt.",
-    "saveGlobalThemeNamePrompt": "Geef dit thema een naam.",
-    "saveGlobalThemeSuccess": "Thema opgeslagen",
-    "savedThemesLabel": "Opgeslagen thema's",
-    "scrollbackBufferLabel": "Terugscrollbuffer",
-    "scrollbackMaxLines": "Maximaal aantal regels dat in de geschiedenis wordt bewaard",
-    "sudoPasswordAutoFill": "Sudo-wachtwoord automatisch invullen",
-    "sudoPasswordAutoFillDesc": "Sla een sudo-wachtwoord op, zodat hoststatistieken, terminalprompts en andere programma's automatisch geprivilegieerde opdrachten kunnen uitvoeren.",
-    "sudoPasswordAutoFillLabel": "Sudo-wachtwoord automatisch invullen",
-    "syntaxCategoryIpAddresses": "IP-adressen",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Logniveaus",
-    "syntaxCategoryLogLevelsDesc": "fout, waarschuwing, info, debug, fataal",
-    "syntaxCategoryNumbers": "Gelabelde nummers",
-    "syntaxCategoryNumbersDesc": "poort 8080, uitgang 1, status 404",
-    "syntaxCategoryPaths": "Bestandspaden",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "Tijdstempels",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 2024-01-15",
-    "syntaxCategoryUrls": "URL's",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "Kleur de terminaluitvoer (fouten, paden, IP-adressen, tijdstempels) in.",
-    "syntaxHighlightingLabel": "Syntaxmarkering",
-    "terminalAppearance": "Terminale verschijning",
-    "theme": "Thema",
-    "themePreview": "Themavoorbeeld",
-    "useSSHTitleDesc": "Werk de tabtitel bij met de venstertitel van de shell in plaats van de hostnaam.",
-    "useSSHTitleLabel": "Gebruik SSH-venstertitel",
-    "enableTunnel": "Tunnel inschakelen",
-    "enableFileManager": "Bestandsbeheer inschakelen",
-    "enableDocker": "Docker inschakelen",
-    "startupSnippet": "Opstartfragment",
-    "quickActions": "Snelle acties",
-    "proxmoxLastSyncStatus": {
-      "success": "Succes"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} overgeslagen (geen IP-adres gevonden)",
-    "proxmoxStatsUrlCopied": "De URL van Proxmox Stats is naar het klembord gekopieerd.",
-    "rdpUrlCopied": "RDP-URL gekopieerd",
-    "vncUrlCopied": "VNC-URL gekopieerd",
-    "filterAuthStepca": "Stap CA",
-    "guac": {
-      "noCredential": "Geen inloggegevens (directe inloggegevens hieronder)",
-      "authTypeDirect": "Direct",
-      "authTypeCredential": "Referentie",
-      "authTypeNone": "Geen",
-      "recordingPath": "Opnamepad",
-      "recordingName": "Opnamenaam",
-      "saveHostFirst": "Sla eerst de host op.",
-      "sharingOptionsAfterSave": "Deelopties zijn beschikbaar nadat de host is opgeslagen.",
-      "permissionLevel": "Toegangsniveau",
-      "typeHeader": "Type",
-      "targetHeader": "Doel",
-      "permissionHeader": "Toestemming",
-      "cancelBtn": "Annuleren",
-      "savingBtn": "Besparing...",
-      "updateHostBtn": "Update Host",
-      "addHostBtn": "Voeg een host toe"
-    },
-    "filterAuthVault": "Kluis"
-  },
-  "nav": {
-    "history": "Geschiedenis",
-    "localTerminal": "Lokale terminal",
-    "sshTools": "SSH-tools",
-    "terminal": "Terminal",
-    "macros": "Macro's"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Typ hier om toetsaanslagen te verzenden...",
-    "copyOnSelect": "Geselecteerde tekst automatisch kopiëren",
-    "enableRightClickCopyPaste": "Schakel kopiëren/plakken via rechtermuisklik in.",
-    "fillPassword": "Voer het wachtwoord in",
-    "fillPasswordMissing": "Er is geen opgeslagen wachtwoord voor de geselecteerde terminal(s) {{count}}",
-    "fillPasswordSuccess": "Wachtwoord ingevuld in de terminal(s) {{count}}",
-    "keyRecordingTitle": "Toonopname",
-    "noTerminalTabsOpen": "Geen terminaltabbladen geopend",
-    "recordToTerminals": "Opnemen naar terminals",
-    "selectAll": "Alle",
-    "selectNone": "Geen",
-    "selectTerminalsAbove": "Selecteer de terminals hierboven",
-    "settingsTitle": "Instellingen",
-    "startRecording": "Start opnemen",
-    "stopRecording": "Stop met opnemen"
-  },
-  "keybindings": {
-    "copy": "Selectie kopiëren",
-    "paste": "Plakken",
-    "sendControlCode": "Verzend het Ctrl+letter-signaal",
-    "sendText": "Sms verzenden",
-    "controlCodeLabel": "Brief",
-    "textLabel": "Tekst om te verzenden",
-    "appendEnterLabel": "Druk op Enter na het verzenden.",
-    "clipboardPermissionNote": "In sommige browsers kan bij het eerste gebruik om toestemming voor het gebruik van het klembord worden gevraagd.",
-    "textRequired": "Voer de tekst in die u wilt verzenden",
-    "controlCodeRequired": "Voer één letter in als besturingscode.",
-    "builtIn": {
-      "copyCtrlC": "Selectie kopiëren (Ctrl+C, alleen als tekst is geselecteerd)",
-      "copyCtrlShiftC": "Selectie kopiëren (Ctrl+Shift+C)",
-      "copyCmdC": "Selectie kopiëren (Cmd+C)",
-      "pasteCtrlShiftV": "Plakken vanuit het klembord (Ctrl+Shift+V)",
-      "ctrlW": "Stuur Ctrl+W naar de shell (blokkeert het sluiten van het browsertabblad)",
-      "ctrlT": "Stuur Ctrl+T naar de shell (blokkeert het openen van een browsertabblad)",
-      "ctrlN": "Stuur Ctrl+N naar de shell (blokkeert het openen van een browservenster)",
-      "ctrlQ": "Stuur Ctrl+Q naar de shell (blokkeert het afsluiten van de browser)"
-    }
-  },
-  "macros": {
-    "title": "Macro's",
-    "description": "Voer een opgeslagen reeks commando's uit in een terminal en reageer op wat de server terugstuurt.",
-    "target": "Doel",
-    "noTerminal": "Geen terminal geopend",
-    "empty": "Nog geen macro's",
-    "emptyHint": "Maak een macro om een terminalproces te automatiseren, zoals inloggen, een service herstarten of prompts beantwoorden.",
-    "create": "Nieuwe macro",
-    "back": "Terug naar macro's",
-    "name": "Naam",
-    "namePlaceholder": "Webserver opnieuw opstarten",
-    "nameRequired": "Geef de macro een naam voordat je hem opslaat.",
-    "descriptionLabel": "Beschrijving",
-    "descriptionPlaceholder": "Wat deze macro doet (optioneel)",
-    "unsaved": "Niet-opgeslagen wijzigingen",
-    "save": "Redden",
-    "saved": "Macro opgeslagen",
-    "saveFailed": "Het lukte niet om de macro op te slaan.",
-    "delete": "Verwijderen",
-    "deleteTitle": "Deze macro verwijderen?",
-    "deleteBody": "\"{{name}}\" wordt permanent verwijderd. Dit kan niet ongedaan gemaakt worden.",
-    "deleted": "Macro verwijderd",
-    "cancel": "Annuleren",
-    "run": "Loop",
-    "stop": "Stop",
-    "running": "Rennen...",
-    "completed": "Macro voltooid",
-    "failed": "Macro mislukt",
-    "loadFailed": "Macro's konden niet worden geladen.",
-    "needTerminal": "Open en verbind eerst een terminal.",
-    "noSteps": "Deze macro bevat nog geen stappen. Voeg er hieronder een toe.",
-    "addStep": "Voeg stap toe",
-    "stepNumber": "Stap {{number}}",
-    "removeStep": "Verwijder stap",
-    "confirmRunTitle": "Voer deze macro uit?",
-    "confirmRunBody": "\"{{name}}\" zal commando's naar {{host}} sturen.",
-    "confirmRunAction": "Macro uitvoeren",
-    "stepTypes": {
-      "send": {
-        "label": "Verzend commando",
-        "help": "Typt tekst in de terminal, net alsof je die zelf hebt ingetypt."
-      },
-      "wait": {
-        "label": "Wacht op uitvoer",
-        "help": "Het programma pauzeert totdat de server de door u opgegeven tekst afdrukt, zoals bij een wachtwoordprompt."
-      },
-      "delay": {
-        "label": "Pauze",
-        "help": "Wacht een vaste tijdsduur voordat de volgende stap wordt uitgevoerd."
-      },
-      "if": {
-        "label": "Als de uitvoer het volgende bevat",
-        "help": "Controleert alles wat de server tot nu toe heeft afgedrukt en voert vervolgens een van de twee vertakkingen uit."
-      },
-      "repeat": {
-        "label": "Herhalen",
-        "help": "Voert de stappen binnenin een vast aantal keren uit."
-      }
-    },
-    "send": {
-      "text": "Opdracht of tekst",
-      "textPlaceholder": "systemctl restart nginx",
-      "pressEnter": "Druk op Enter na het verzenden.",
-      "pressEnterHelp": "Schakel deze optie uit om tekst te typen zonder deze te verzenden."
-    },
-    "wait": {
-      "pattern": "Wacht tot de uitvoer het volgende bevat:",
-      "patternPlaceholder": "wachtwoord:",
-      "timeout": "Geef het op na",
-      "onTimeout": "Als het nooit verschijnt",
-      "stop": "Stop de macro",
-      "continue": "Ga toch door."
-    },
-    "delay": {
-      "duration": "Wachten op"
-    },
-    "ifStep": {
-      "pattern": "Als de uitvoer het volgende bevat:",
-      "patternPlaceholder": "Actief: actief (lopend)",
-      "then": "Doe dan dit",
-      "else": "Doe anders dit",
-      "emptyBranch": "Geen treden"
-    },
-    "repeat": {
-      "count": "Aantal keren",
-      "times": "tijden"
-    },
-    "match": {
-      "useRegex": "Overeenkomst met een reguliere expressie",
-      "useRegexHelp": "Laat dit weg om de tekst exact over te nemen zoals die is geschreven.",
-      "invalidRegex": "Dit is geen geldige reguliere expressie; het wordt als platte tekst herkend."
-    },
-    "seconds": "seconden",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "Externe server vereist. Verbind een externe server in de instellingen om dit verbindingstype te gebruiken."
-  },
-  "plugin": {
-    "name": "SSH-terminal"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/no_NO.json b/plugins/ssh-terminal/locales/translated/no_NO.json
deleted file mode 100644
index aace6ecc8..000000000
--- a/plugins/ssh-terminal/locales/translated/no_NO.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Legg til",
-    "arrowDown": "Pil ned",
-    "arrowLeft": "Pil venstre",
-    "arrowRight": "Pil høyre",
-    "arrowUp": "Pil opp",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Del",
-    "done": "Ferdig",
-    "editQuickKeys": "Rediger hurtigtaster",
-    "end": "Slutt",
-    "esc": "Esc",
-    "home": "Hjem",
-    "pageDown": "PgDn",
-    "pageUp": "PgUp",
-    "paste": "Lim inn",
-    "quickKeyPlaceholder": "f.eks. sudo ",
-    "quickKeysDesc": "Trykk på × for å fjerne. Støtter opptil 8 tegn.",
-    "quickKeysTitle": "Hurtigtaster",
-    "removeQuickKey": "Fjern",
-    "resetDefaults": "Tilbakestill til standardinnstillinger",
-    "shift": "Skifte",
-    "tab": "Fane"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Kunne ikke aktivere Auto-Tmux",
-    "autoTmuxEnabled": "Auto-Tmux er aktivert for {{host}}. Det gjelder fra neste tilkobling.",
-    "clipboardHttpWarning": "Kunne ikke lese utklippstavlen. Noen nettlesere begrenser tilgang til utklippstavlen utenfor HTTPS – prøv Ctrl+V i stedet, eller server Termix over HTTPS.",
-    "closeTab": "Lukk",
-    "connecting": "Kobler til...",
-    "connectionLost": "Forbindelsen gikk tapt",
-    "connectionRejected": "Tilkoblingen ble avvist av serveren. Sjekk autentiseringen og nettverkskonfigurasjonen din.",
-    "connectionTimeout": "Tilkoblingstidsavbrudd",
-    "enableAutoTmuxAction": "Aktiver Auto-Tmux",
-    "hostKeyRejected": "Verifisering av SSH-vertsnøkkel avvist. Tilkoblingen ble avbrutt.",
-    "linkDialogCopy": "Kopier",
-    "linkDialogOpen": "Åpne",
-    "linkDialogTitle": "Åpne lenke",
-    "maxReconnectAttemptsReached": "Maks antall tilkoblingsforsøk nådd",
-    "noHostSelected": "Ingen vert valgt",
-    "passwordPromptFillTitle": "Skriv inn det lagrede passordet i denne meldingen?",
-    "reconnect": "Koble til på nytt",
-    "reconnected": "Tilkoblet på nytt",
-    "reconnecting": "Kobler til på nytt... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Forbindelsen ble brutt, kobler til på nytt...",
-    "searchCaseSensitive": "Match-saken",
-    "searchClose": "Lukk (Escape)",
-    "searchNext": "Neste kamp (Enter)",
-    "searchNoResults": "Ingen resultater",
-    "searchPlaceholder": "Finn",
-    "searchPrevious": "Forrige treff (Shift+Enter)",
-    "searchRegex": "Bruk regulært uttrykk",
-    "searchResultCount": "{{index}} av {{count}}",
-    "searchWholeWord": "Finn hele ordet",
-    "sessionExpiredNotice": "Din forrige økt på {{host}} utløp etter {{minutes}} minutter frakobling; skallet og alt som kjører i det er borte. Aktiver Auto-Tmux på denne verten for å holde øktene aktive.",
-    "sessionExpiredNoticeNoMinutes": "Din forrige økt på {{host}} utløp mens den var frakoblet; skallet og alt som kjører i det er borte. Aktiver Auto-Tmux på denne verten for å holde øktene aktive.",
-    "sessionTakenOver": "Økten ble åpnet i en annen fane. Kobler til igjen...",
-    "tmuxAttached": "Tilknyttede klienter",
-    "tmuxAttachedCount": "{{count}} vedlagt",
-    "tmuxCopyHint": "Juster valget og trykk Enter for å kopiere til utklippstavlen",
-    "tmuxCreateNew": "Start ny økt",
-    "tmuxDetached": "Frakoblet fra tmux-økten",
-    "tmuxLastActivity": "Siste aktivitet",
-    "tmuxSessionAttached": "tmux-økt vedlagt: {{name}}",
-    "tmuxSessionCreated": "tmux-økt opprettet: {{name}}",
-    "tmuxSessionPickerDesc": "Eksisterende tmux-økter funnet på denne verten. Velg én for å koble til på nytt eller opprett en ny økt.",
-    "tmuxSessionPickerTitle": "tmux-økter",
-    "tmuxTimeDays": "for {{count}}dager siden",
-    "tmuxTimeHours": "for {{count}}t siden",
-    "tmuxTimeJustNow": "akkurat nå",
-    "tmuxTimeMinutes": "For {{count}}minutter siden",
-    "tmuxUnavailable": "tmux er ikke installert på den eksterne verten, og går tilbake til standard skall",
-    "tmuxWindowCount": "{{count}} vindu",
-    "tmuxWindows": "Vinduer",
-    "unknownError": "Ukjent feil oppstod",
-    "websocketAbnormalClose": "Tilkoblingen ble avsluttet uventet. Dette kan skyldes et problem med omvendt proxy eller SSL-konfigurasjon. Sjekk serverloggene.",
-    "websocketError": "WebSocket-tilkoblingsfeil",
-    "clipboardReadFailed": "Kunne ikke lese fra utklippstavlen. Sørg for at utklippstavlen har tillatelser.",
-    "clipboardWriteFailed": "Kunne ikke kopiere til utklippstavlen. Sørg for at siden serveres via HTTPS eller localhost.",
-    "connected": "Tilkoblet",
-    "totpCodeLabel": "Verifiseringskode",
-    "duplicateTab": "Dupliser fane",
-    "imageChooseFile": "Velg en bildefil",
-    "imageUploaded": "Bilde lastet opp: {{path}}",
-    "imageClipboardUnavailable": "Denne nettleseren kan ikke lese bilder fra utklippstavlen",
-    "imageClipboardEmpty": "Fant ikke noe bilde på utklippstavlen",
-    "localShell": "Lokalt terminalskall",
-    "autocompleteHintComplete": "Tab eller Enter for å fullføre",
-    "autocompleteHintNavigate": "↑↓ for å navigere",
-    "autocompleteHintClose": "Esc for å lukke"
-  },
-  "terminalToolbar": {
-    "detachTmux": "Koble fra tmux",
-    "detachTmuxDescription": "Koble fra tmux-økten",
-    "dismissError": "Avvis bildefeil",
-    "hideToolbar": "Skjul verktøylinjen",
-    "image": "Bildehandlinger (kun bilder)",
-    "imageActionFailed": "Bildehandlingen mislyktes",
-    "layout": "Visningsmodus for verktøylinjen",
-    "layoutExpanded": "Utvidet med målinger",
-    "layoutIcon": "Kun ikon",
-    "layoutLabeled": "Ikoner og etiketter",
-    "moveToolbar": "Flytt verktøylinjen",
-    "moveToolbarHint": "Dra for å flytte verktøylinjen",
-    "paste": "Lim inn bilde",
-    "pasteImage": "Lim inn bilde fra utklippstavlen (kun bilder)",
-    "retry": "Prøv igjen",
-    "showToolbar": "Utvid verktøylinjen",
-    "upload": "Last opp bilde",
-    "uploadImage": "Last opp et bilde til verten",
-    "uploadingImage": "Laster opp..."
-  },
-  "history": {
-    "noTerminalSelected": "Ingen terminal valgt",
-    "noTerminalSelectedHint": "Åpne en SSH-terminalfane for å se kommandohistorikken",
-    "searchPlaceholder": "Søkelogg...",
-    "clearAll": "Fjern alt",
-    "noHistoryEntries": "Ingen historikkoppføringer",
-    "trackingDisabled": "Historikksporing er deaktivert",
-    "trackingDisabledHint": "Slå på kommandohistorikk i SSH-terminal-fanen til denne verten.",
-    "commandCount_one": "{{count}} kommando",
-    "commandCount_other": "{{count}} kommandoer"
-  },
-  "touchInput": {
-    "enabled": "Aktiver berøringsinndata",
-    "enabledDesc": "Tillat énfinger-berøringsrulling i terminaler",
-    "momentumEnabled": "Aktiver momentum",
-    "momentumEnabledDesc": "Fortsett å bla kort etter et sveip",
-    "advanced": "Avansert",
-    "resetDefaults": "Tilbakestill til standardinnstillinger",
-    "dragThreshold": "Dragterskel",
-    "maxWheelDelta": "Maksimal hjuldelta",
-    "momentumSampleWindow": "Momentum-eksempelvindu",
-    "releaseGracePeriod": "Frigivelsesfrist",
-    "minimumVelocity": "Minimumshastighet",
-    "maximumVelocity": "Maksimal hastighet",
-    "maximumDuration": "Maksimal varighet",
-    "maximumTravel": "Maksimal reise",
-    "decayTime": "Forfallstid",
-    "pixelsPerTick": "Piksler per tikk",
-    "maximumFrameInterval": "Maksimalt bildeintervall",
-    "maximumTicksPerFrame": "Maksimalt antall ticks per ramme"
-  },
-  "imageStorage": {
-    "instanceId": "Terminaløktforekomst-ID",
-    "instanceIdDesc": "Forekomst-ID for en av dine tilkoblede terminalfaner, brukt til å teste synlighet.",
-    "selectedModeUnavailable": "Utilgjengelig",
-    "test": "Test",
-    "testing": "Testing...",
-    "testFailed": "Kunne ikke teste bildelagring",
-    "testConnected": "Terminaløkten er tilkoblet.",
-    "testNotConnected": "Ingen tilkoblet terminaløkt med denne instans-ID-en.",
-    "testSelectedMode": "En opplasting ville bruke: {{mode}}",
-    "testLocalVisible": "Den lokale katalogen er synlig fra den tilkoblede verten.",
-    "testLocalNotVisible": "Den lokale katalogen er IKKE synlig fra den tilkoblede verten."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Berøringsinndata",
-        "images": "Bildelagring",
-        "sessions": "Økter",
-        "newHosts": "Nye verter"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Terminaløktpersistens",
-        "description": "Hvor lenge en frakoblet terminal holdes aktiv på serveren før den lukkes. Min 1, maks 1440 minutter. For økter som må overleve dette, aktiver Auto-Tmux på verten."
-      },
-      "commandHistoryEnabled": {
-        "label": "Kommandohistorikk",
-        "description": "Tillat opptak av kommandohistorikk. Når den er deaktivert, lagres ikke historikken uavhengig av innstillinger per vert."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "Kommandohistorikk for nye verter",
-        "description": "Om nye verter starter med kommandohistorikk aktivert."
-      },
-      "imageStorageMode": {
-        "label": "Lagringsmodus",
-        "description": "Der innlimte og opplastede terminalbilder skrives. Automatiske valg etter tilkobling, lokal og ekstern (SFTP) er fikset.",
-        "auto": "Bil",
-        "local": "Lokal",
-        "remoteSftp": "Fjernstyrt (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Lokal katalog",
-        "description": "Absolutt sti på Termix-backend der lokal modus skriver bilder. Vises aldri etter lagring. Tom bruker TERMIX_IMAGE_DIR."
-      },
-      "imageHostPath": {
-        "label": "Vertssti",
-        "description": "Vertsvisningen av den lokale katalogen som terminalagenter mottar."
-      },
-      "imageTtlMs": {
-        "label": "TTL (ms)",
-        "description": "Hvor lenge et opplastet bilde lagres, i millisekunder. Tomme bruker TERMIX_IMAGE_TTL_MS eller én time."
-      },
-      "imageMaxCount": {
-        "label": "Maksimalt antall bilder",
-        "description": "De fleste bildene lagres samtidig. Tomme bruker TERMIX_MAX_IMAGE_COUNT eller 100."
-      },
-      "imageMaxBytes": {
-        "label": "Maksimalt antall lagringsbyte",
-        "description": "Flest byte med bilder lagres samtidig. Tomme filer bruker TERMIX_MAX_IMAGE_STORAGE_BYTES eller 5 GiB."
-      },
-      "sessionPersistence": {
-        "label": "Behold økter etter frakobling",
-        "description": "Hold en frakoblet terminal aktiv på serveren i perioden ovenfor, slik at gjenåpning av fanen fortsetter der den slapp."
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "Kjør nye verters terminaler inne i tmux slik at økter overlever frakoblinger (trenger tmux på verten)"
-      },
-      "newHostTheme": {
-        "label": "Tema for nye verter",
-        "description": "Terminaltemaet en ny vert starter med."
-      },
-      "newHostFontFamily": {
-        "label": "Skrifttype for nye verter",
-        "description": "Terminalfonten en ny vert starter med."
-      },
-      "newHostFontSize": {
-        "label": "Skriftstørrelse for nye verter",
-        "description": "Terminalens skriftstørrelse en ny vert starter med, i piksler."
-      },
-      "newHostCursorStyle": {
-        "label": "Markørstil for nye verter"
-      },
-      "newHostCursorBlink": {
-        "label": "Blinkende markør for nye verter"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Aktiver terminalverktøylinjen",
-        "description": "Vis en verktøylinje for hurtig tilgang som er festet til den aktive terminalen for denne vertens verktøy og livestatistikk"
-      },
-      "terminalToolbarPosition": {
-        "label": "Verktøylinjeposisjon",
-        "description": "Der verktøylinjen er i terminalen. Du kan fortsatt dra den derfra.",
-        "bottom": "Nederst i midten",
-        "bottomLeft": "Nederst til venstre",
-        "bottomRight": "Nederst til høyre",
-        "top": "Øverst i midten",
-        "topLeft": "Øverst til venstre",
-        "topRight": "Øverst til høyre"
-      },
-      "terminalToolbarStartState": {
-        "label": "Verktøylinjens startstatus",
-        "description": "Om verktøylinjen åpnes utvidet eller minimert når terminalen kobler til",
-        "expanded": "Utvidet",
-        "collapsed": "Minimert"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Visningsmodus for verktøylinje",
-        "description": "Hvordan verktøylinjeknapper vises. Sist brukte beholder det du valgte i verktøylinjen.",
-        "remember": "Sist brukt",
-        "icon": "Kun ikon",
-        "labeled": "Ikoner og etiketter",
-        "expanded": "Utvidet med statistikk"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Vis livestatistikk",
-        "description": "Vis statistikk for direktesendte verter over knappene på verktøylinjen i utvidet modus"
-      },
-      "terminalToolbarFade": {
-        "label": "Fade når den er inaktiv",
-        "description": "Vis verktøylinjen ut til du holder musepekeren over den"
-      },
-      "enableCommandHistory": {
-        "label": "Kommandohistorikk",
-        "description": "Record-kommandoer kjøres i denne terminalen for historikk og autofullføring"
-      },
-      "enableTerminal": {
-        "label": "Aktiver terminal",
-        "description": "Tilby en SSH-terminal for denne verten."
-      },
-      "inheritAppearance": {
-        "label": "Bruk brukerstandarder"
-      },
-      "theme": {
-        "label": "Tema"
-      },
-      "cursorBlink": {
-        "label": "Blinkende markør"
-      },
-      "cursorStyle": {
-        "label": "Markørstil"
-      },
-      "fontSize": {
-        "label": "Skriftstørrelse"
-      },
-      "fontFamily": {
-        "label": "Skrifttype"
-      },
-      "scrollback": {
-        "label": "Bla tilbake"
-      },
-      "letterSpacing": {
-        "label": "Bokstavavstand"
-      },
-      "lineHeight": {
-        "label": "Linjehøyde"
-      },
-      "bellStyle": {
-        "label": "Klokke"
-      },
-      "minimumContrastRatio": {
-        "label": "Minimum kontrastforhold"
-      },
-      "backgroundImage": {
-        "label": "Bakgrunnsbilde"
-      },
-      "backgroundImageOpacity": {
-        "label": "Bakgrunnsbildets opasitet"
-      },
-      "customThemeColors": {
-        "label": "Tilpassede temafarger"
-      },
-      "rightClickSelectsWord": {
-        "label": "Høyreklikk velger ord"
-      },
-      "macOptionIsMeta": {
-        "label": "Alternativet er Meta"
-      },
-      "fastScrollModifier": {
-        "label": "Hurtigrullingstast"
-      },
-      "fastScrollSensitivity": {
-        "label": "Rask rullehastighet"
-      },
-      "backspaceMode": {
-        "label": "Tilbake"
-      },
-      "autoMosh": {
-        "label": "Automosh"
-      },
-      "moshCommand": {
-        "label": "Mosh-kommandoen"
-      },
-      "autoTmux": {
-        "label": "Auto tmux"
-      },
-      "useSSHTitle": {
-        "label": "Bruk SSH-tittelen"
-      },
-      "syntaxHighlighting": {
-        "label": "Syntaksutheving"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Syntaksuthevingskategorier"
-      },
-      "linkClickBehavior": {
-        "label": "Klikk på lenken"
-      },
-      "localEcho": {
-        "label": "Lokalt ekko"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Tilby å fylle ut passordforespørsler"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Fyll ut sudo-ledetekster"
-      },
-      "autoReconnect": {
-        "label": "Koble til automatisk på nytt"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Kommandoautofullføring",
-        "description": "Vis autofullføring mens du skriver hvis du trykker på tabulatortasten"
-      },
-      "localEcho": {
-        "label": "Lokalt ekko",
-        "description": "Reduser opplevd input latency ved hjelp av sikker lokal tastetrykkprediksjon"
-      },
-      "linkClickBehavior": {
-        "label": "Klikk på terminallenken",
-        "description": "Standardoppførsel når du klikker på lenker i terminalen"
-      },
-      "customThemes": {
-        "label": "Lagrede temaer"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Lokal terminal"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Bruk live terminaløkter",
-      "description": "Lar andre funksjoner, som deling og opptak av økter, nå dine direkte terminaløkter."
-    },
-    "history": {
-      "title": "Les kommandohistorikk",
-      "description": "Lar andre funksjoner, som for eksempel AI-assistenten, lese kommandohistorikken din."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Terminal",
-    "addHost": "Legg til vert",
-    "applyGlobalThemeTooltip": "Bruk dette temaet",
-    "backgroundImageDesc": "Valgfri URL for et bakgrunnsbilde i terminalen",
-    "backgroundImageLabel": "URL-adresse for bakgrunnsbilde",
-    "backgroundImageOpacityLabel": "Bakgrunnsbildets opasitet",
-    "backspaceMode": "Backspace-modus",
-    "backspaceModeControlH": "Kontroll-H (BS)",
-    "backspaceModeLabel": "Backspace-modus",
-    "backspaceModeNormal": "Normal (DEL)",
-    "behaviorAndAdvanced": "Atferd og avansert",
-    "bellStyle": "Varselstil",
-    "bellStyleBoth": "Begge",
-    "bellStyleLabel": "Varselstil",
-    "bellStyleNone": "Ingen",
-    "bellStyleSound": "Lyd",
-    "bellStyleVisual": "Visuell",
-    "colorTheme": "Fargetema",
-    "cursorBlink": "Blinkende markør",
-    "cursorBlinking": "Markør blinker",
-    "cursorBlinkingDesc": "Aktiver blinkende animasjon for terminalmarkøren",
-    "cursorStyle": "Markørstil",
-    "cursorStyleBar": "Linje",
-    "cursorStyleBlock": "Blokk",
-    "cursorStyleLabel": "Markørstil",
-    "cursorStyleUnderline": "Understrek",
-    "customThemeAnsiColors": "ANSI-farger",
-    "customThemeBackground": "Bakgrunn",
-    "customThemeBlack": "Svart",
-    "customThemeBlue": "Blå",
-    "customThemeBrightBlack": "Lys svart",
-    "customThemeBrightBlue": "Klar blå",
-    "customThemeBrightCyan": "Lys cyan",
-    "customThemeBrightGreen": "Lys grønn",
-    "customThemeBrightMagenta": "Lys magenta",
-    "customThemeBrightRed": "Lys rød",
-    "customThemeBrightWhite": "Klar hvit",
-    "customThemeBrightYellow": "Lys gul",
-    "customThemeColors": "Tilpassede farger",
-    "customThemeCursor": "Markør",
-    "customThemeCursorAccent": "Markøraksent",
-    "customThemeCyan": "Cyan",
-    "customThemeForeground": "Forgrunn",
-    "customThemeGreen": "Grønn",
-    "customThemeMagenta": "Magenta",
-    "customThemeRed": "Rød",
-    "customThemeResetTooltip": "Tilbakestill til standardinnstillinger",
-    "customThemeSelection": "Utvalg",
-    "customThemeWhite": "Hvit",
-    "customThemeYellow": "Gul",
-    "deleteGlobalThemeTooltip": "Slett dette temaet",
-    "docsLink": "Vis dokumenter",
-    "enableAutoMosh": "Aktiver automatisk moshing",
-    "enableAutoMoshDesc": "Foretrekker Mosh fremfor SSH hvis tilgjengelig",
-    "enableAutoTmux": "Aktiver Auto-Tmux",
-    "enableAutoTmuxDesc": "Hold skallet ditt og alt som kjører i det i live på tvers av frakoblinger og omstart av nettleseren ved å kjøre det i tmux (tmux må være installert på verten)",
-    "fastScrollModifier": "Modifikator for rask rulling",
-    "fastScrollModifierAlt": "Alt",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Modifikator for rask rulling",
-    "fastScrollModifierShift": "Skifte",
-    "fastScrollSensitivity": "Følsomhet for rask rulling",
-    "fastScrollSensitivityLabel": "Følsomhet for rask rulling",
-    "fontFamily": "Skrifttype",
-    "fontFamilyCustomHint": "Velg en medfølgende skrifttype, eller velg Tilpasset og skriv inn det nøyaktige navnet på en skrifttype som allerede er installert på systemet ditt (f.eks. MesloLGS NF, Noto Sans Mono). Termix kan ikke installere skrifter for deg, installer den på operativsystemet ditt først.",
-    "fontFamilyCustomOption": "Skikk...",
-    "fontFamilyCustomPlaceholder": "Nøyaktig skriftnavn, f.eks. MesloLGS NF",
-    "fontFamilyLabel": "Skrifttype",
-    "fontSize": "Skriftstørrelse",
-    "fontSizeLabel": "Skriftstørrelse",
-    "hostNotFound": "Verten ble ikke funnet",
-    "letterSpacing": "Bokstavavstand",
-    "letterSpacingPx": "Bokstavavstand (px)",
-    "lineHeight": "Linjehøyde",
-    "lineHeightLabel": "Linjehøyde",
-    "linkClickBehaviorConfirm": "Vis popup-vindu for å åpne eller kopiere",
-    "linkClickBehaviorDesc": "Styrer hva som skjer når du klikker på en lenke i terminalen. Bruk «Standard» for å følge innstillingen på appnivå.",
-    "linkClickBehaviorDirect": "Åpne direkte",
-    "linkClickBehaviorLabel": "Klikkatferd på lenker",
-    "loadingHost": "Laster inn vert ...",
-    "localEchoAuto": "Automatisk",
-    "localEchoDesc": "Forutsi trygge utskrivbare tastetrykk lokalt på trege tilkoblinger. Passordforespørsler og kontrollinndata gjentas aldri.",
-    "localEchoLabel": "Lokalt ekko",
-    "localEchoOff": "Av",
-    "localEchoOn": "Alltid på",
-    "macOptionIsMetaLabel": "Alternativtast sender meta",
-    "macOptionIsMetaShortDesc": "Deaktiver muligheten til å skrive spesialtegn (som @ eller |) med Tilvalg/Alt-tasten på macOS i stedet for å sende Meta",
-    "moshCommand": "MOSH-kommandoen",
-    "moshCommandLabel": "Mosh-kommandoen",
-    "noSavedThemes": "Ingen lagrede temaer ennå",
-    "none": "Ingen",
-    "passwordPromptAutoFillDesc": "Tilby å fylle ut det lagrede passordet når terminalen ber om det. Slå av for å aldri fylle ut noe passord automatisk på denne verten.",
-    "passwordPromptAutoFillLabel": "Automatisk utfylling av tilbudspassord",
-    "autoReconnectLabel": "Automatisk tilkobling på nytt",
-    "autoReconnectDesc": "Kobler til på nytt av seg selv når SSH-tilkoblingen faller ut, for eksempel etter et nettverksbrudd eller hvilemodus. Beholder tilbakeskrollingen.",
-    "rightClickSelectsWord": "Høyreklikk velger ord",
-    "rightClickSelectsWordLabel": "Høyreklikk Velger ord",
-    "rightClickSelectsWordShortDesc": "Merk ordet under markøren ved høyreklikk",
-    "saveAsGlobalTheme": "Lagre som globalt tema",
-    "saveGlobalThemeError": "Kunne ikke lagre temaet",
-    "saveGlobalThemeNamePrompt": "Skriv inn et navn for dette temaet",
-    "saveGlobalThemeSuccess": "Tema lagret",
-    "savedThemesLabel": "Lagrede temaer",
-    "scrollbackBufferLabel": "Tilbakerullebuffer",
-    "scrollbackMaxLines": "Maksimalt antall linjer lagret i historikken",
-    "sudoPasswordAutoFill": "Sudo-passord automatisk utfylling",
-    "sudoPasswordAutoFillDesc": "Lagre et sudo-passord slik at vertsmålinger, terminalledetekster og andre kan kjøre privilegerte kommandoer automatisk.",
-    "sudoPasswordAutoFillLabel": "Sudo-passord automatisk utfylling",
-    "syntaxCategoryIpAddresses": "IP-adresser",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Loggnivåer",
-    "syntaxCategoryLogLevelsDesc": "feil, advarsel, info, feilsøking, fatal",
-    "syntaxCategoryNumbers": "Merkede tall",
-    "syntaxCategoryNumbersDesc": "port 8080, avkjørsel 1, status 404",
-    "syntaxCategoryPaths": "Filstier",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "Tidsstempler",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 2024-01-15",
-    "syntaxCategoryUrls": "URL-er",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "Fargelegg terminalutdata (feil, stier, IP-adresser, tidsstempler)",
-    "syntaxHighlightingLabel": "Syntaksutheving",
-    "terminalAppearance": "Terminalens utseende",
-    "theme": "Tema",
-    "themePreview": "Temavisning",
-    "useSSHTitleDesc": "Oppdater fanetittelen fra skallets vindustittel i stedet for vertsnavnet",
-    "useSSHTitleLabel": "Bruk SSH-vindutittel",
-    "enableTunnel": "Aktiver tunnel",
-    "enableFileManager": "Aktiver filbehandler",
-    "enableDocker": "Aktiver Docker",
-    "startupSnippet": "Oppstarts-snippet",
-    "quickActions": "Hurtighandlinger",
-    "proxmoxLastSyncStatus": {
-      "success": "Suksess"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} hoppet over (ingen IP-adresse funnet)",
-    "proxmoxStatsUrlCopied": "Proxmox-statistikk-URL kopiert til utklippstavlen",
-    "rdpUrlCopied": "RDP-URL kopiert",
-    "vncUrlCopied": "VNC-URL kopiert",
-    "filterAuthStepca": "Trinn CA",
-    "guac": {
-      "noCredential": "Ingen legitimasjon (direkte legitimasjon nedenfor)",
-      "authTypeDirect": "Direkte",
-      "authTypeCredential": "Legitimasjon",
-      "authTypeNone": "Ingen",
-      "recordingPath": "Opptakssti",
-      "recordingName": "Opptaksnavn",
-      "saveHostFirst": "Lagre verten først.",
-      "sharingOptionsAfterSave": "Delingsalternativer er tilgjengelige etter at verten er lagret.",
-      "permissionLevel": "Tillatelsesnivå",
-      "typeHeader": "Type",
-      "targetHeader": "Mål",
-      "permissionHeader": "Tillatelse",
-      "cancelBtn": "Avbryt",
-      "savingBtn": "Lagrer...",
-      "updateHostBtn": "Oppdater vert",
-      "addHostBtn": "Legg til vert"
-    },
-    "filterAuthVault": "Hvelv"
-  },
-  "nav": {
-    "history": "Historikk",
-    "localTerminal": "Lokal terminal",
-    "sshTools": "SSH-verktøy",
-    "terminal": "Terminal",
-    "macros": "Makroer"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Skriv her for å kringkaste tastetrykk...",
-    "copyOnSelect": "Kopier merket tekst automatisk",
-    "enableRightClickCopyPaste": "Aktiver høyreklikk på kopiering/liming",
-    "fillPassword": "Fyll ut passord",
-    "fillPasswordMissing": "Ingen lagret passord for {{count}} valgte terminal(er)",
-    "fillPasswordSuccess": "Fyllte inn passord i {{count}} terminal(er)",
-    "keyRecordingTitle": "Tasteopptak",
-    "noTerminalTabsOpen": "Ingen terminalfaner åpne",
-    "recordToTerminals": "Opptak til terminaler",
-    "selectAll": "Alle",
-    "selectNone": "Ingen",
-    "selectTerminalsAbove": "Velg terminaler ovenfor",
-    "settingsTitle": "Innstillinger",
-    "startRecording": "Start opptak",
-    "stopRecording": "Stopp opptaket"
-  },
-  "keybindings": {
-    "copy": "Kopier valg",
-    "paste": "Lim inn",
-    "sendControlCode": "Send Ctrl+bokstavsignal",
-    "sendText": "Send tekstmelding",
-    "controlCodeLabel": "Brev",
-    "textLabel": "Tekst som skal sendes",
-    "appendEnterLabel": "Trykk Enter etter sending",
-    "clipboardPermissionNote": "Kan be om tillatelse til utklippstavlen ved første gangs bruk i noen nettlesere.",
-    "textRequired": "Skriv inn teksten som skal sendes",
-    "controlCodeRequired": "Skriv inn én bokstav for kontrollkoden",
-    "builtIn": {
-      "copyCtrlC": "Kopier valg (Ctrl+C, bare når tekst er valgt)",
-      "copyCtrlShiftC": "Kopier utvalg (Ctrl+Shift+C)",
-      "copyCmdC": "Kopier utvalg (Cmd+C)",
-      "pasteCtrlShiftV": "Lim inn fra utklippstavlen (Ctrl+Shift+V)",
-      "ctrlW": "Send Ctrl+W til skall (blokkert fra å lukke nettleserfanen)",
-      "ctrlT": "Send Ctrl+T til skall (blokkert fra å åpne nettleserfanen)",
-      "ctrlN": "Send Ctrl+N til skallet (blokkert fra å åpne nettleservinduet)",
-      "ctrlQ": "Send Ctrl+Q til skall (blokkert fra å avslutte nettleseren)"
-    }
-  },
-  "macros": {
-    "title": "Makroer",
-    "description": "Kjør en lagret serie med kommandoer i en terminal, og reager på det serveren sender tilbake.",
-    "target": "Mål",
-    "noTerminal": "Ingen terminal åpen",
-    "empty": "Ingen makroer ennå",
-    "emptyHint": "Opprett en makro for å automatisere en terminalflyt, som å logge inn, starte en tjeneste på nytt eller svare på forespørsler.",
-    "create": "Ny makro",
-    "back": "Tilbake til makroer",
-    "name": "Navn",
-    "namePlaceholder": "Start nettserveren på nytt",
-    "nameRequired": "Gi makroen et navn før du lagrer",
-    "descriptionLabel": "Beskrivelse",
-    "descriptionPlaceholder": "Hva denne makroen gjør (valgfritt)",
-    "unsaved": "Ulagrede endringer",
-    "save": "Lagre",
-    "saved": "Makro lagret",
-    "saveFailed": "Kunne ikke lagre makroen",
-    "delete": "Slett",
-    "deleteTitle": "Slette denne makroen?",
-    "deleteBody": "«{{name}}» vil bli slettet permanent. Dette kan ikke angres.",
-    "deleted": "Makro slettet",
-    "cancel": "Avbryt",
-    "run": "Kjør",
-    "stop": "Stopp",
-    "running": "Løping...",
-    "completed": "Makro ferdig",
-    "failed": "Makroen mislyktes",
-    "loadFailed": "Kunne ikke laste inn makroer",
-    "needTerminal": "Åpne og koble til en terminal først",
-    "noSteps": "Denne makroen har ingen trinn ennå. Legg til et nedenfor.",
-    "addStep": "Legg til trinn",
-    "stepNumber": "Trinn {{number}}",
-    "removeStep": "Fjern trinn",
-    "confirmRunTitle": "Kjøre denne makroen?",
-    "confirmRunBody": "\"{{name}}\" vil sende kommandoer til {{host}}.",
-    "confirmRunAction": "Kjør makro",
-    "stepTypes": {
-      "send": {
-        "label": "Send kommando",
-        "help": "Skriver tekst inn i terminalen, på samme måte som om du hadde skrevet den."
-      },
-      "wait": {
-        "label": "Vent på utdata",
-        "help": "Pauserer til serveren skriver ut teksten du oppgir, som en passordforespørsel."
-      },
-      "delay": {
-        "label": "Pause",
-        "help": "Venter en fast tid før neste trinn."
-      },
-      "if": {
-        "label": "Hvis utdataene inneholder",
-        "help": "Sjekker alt serveren har skrevet ut så langt, og kjører deretter en av to grener."
-      },
-      "repeat": {
-        "label": "Gjenta",
-        "help": "Kjører trinnene inni den et angitt antall ganger."
-      }
-    },
-    "send": {
-      "text": "Kommando eller tekst",
-      "textPlaceholder": "systemctl omstart nginx",
-      "pressEnter": "Trykk Enter etter sending",
-      "pressEnterHelp": "Slå av dette for å skrive tekst uten å sende den inn."
-    },
-    "wait": {
-      "pattern": "Vent til utdataene inneholder",
-      "patternPlaceholder": "passord:",
-      "timeout": "Gi opp etterpå",
-      "onTimeout": "Hvis den aldri dukker opp",
-      "stop": "Stopp makroen",
-      "continue": "Fortsett uansett"
-    },
-    "delay": {
-      "duration": "Vent på"
-    },
-    "ifStep": {
-      "pattern": "Hvis utdataene inneholder",
-      "patternPlaceholder": "Aktiv: aktiv (løper)",
-      "then": "Gjør så dette",
-      "else": "Ellers gjør dette",
-      "emptyBranch": "Ingen trinn"
-    },
-    "repeat": {
-      "count": "Antall ganger",
-      "times": "ganger"
-    },
-    "match": {
-      "useRegex": "Samsvar med et regulært uttrykk",
-      "useRegexHelp": "La dette være av for å få teksten til å se nøyaktig slik den er skrevet.",
-      "invalidRegex": "Ikke et gyldig regulært uttrykk, det vil bli matchet som ren tekst"
-    },
-    "seconds": "sekunder",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "Ekstern server kreves. Koble til en ekstern server i Innstillinger for å bruke denne tilkoblingstypen."
-  },
-  "plugin": {
-    "name": "SSH-terminal"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/pl_PL.json b/plugins/ssh-terminal/locales/translated/pl_PL.json
deleted file mode 100644
index 96270ff47..000000000
--- a/plugins/ssh-terminal/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Dodaj",
-    "arrowDown": "Strzałka w dół",
-    "arrowLeft": "Strzałka w lewo",
-    "arrowRight": "Strzałka w prawo",
-    "arrowUp": "Strzałka w górę",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Del",
-    "done": "Gotowe",
-    "editQuickKeys": "Edytuj szybkie klawisze",
-    "end": "End",
-    "esc": "Esc",
-    "home": "Home",
-    "pageDown": "PgDn",
-    "pageUp": "PgUp",
-    "paste": "Wklej",
-    "quickKeyPlaceholder": "np. sudo ",
-    "quickKeysDesc": "Dotknij ×, aby usunąć. Maksymalnie 8 znaków.",
-    "quickKeysTitle": "Szybkie klawisze",
-    "removeQuickKey": "Usuń",
-    "resetDefaults": "Przywróć ustawienia domyślne",
-    "shift": "Shift",
-    "tab": "Tab"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Nie udało się włączyć funkcji Auto-Tmux",
-    "autoTmuxEnabled": "Auto-Tmux włączony dla {{host}}. Ma zastosowanie od następnego połączenia.",
-    "clipboardHttpWarning": "Nie udało się odczytać schowka. Niektóre przeglądarki ograniczają dostęp do schowka poza HTTPS. Użyj Ctrl+V albo udostępniaj Termix przez HTTPS.",
-    "closeTab": "Zamknij",
-    "connecting": "Łączenie...",
-    "connectionLost": "Utracono połączenie",
-    "connectionRejected": "Połączenie odrzucone przez serwer. Sprawdź uwierzytelnianie i konfigurację sieci.",
-    "connectionTimeout": "Przekroczono limit czasu połączenia",
-    "enableAutoTmuxAction": "Włącz Auto-Tmux",
-    "hostKeyRejected": "Weryfikacja klucza hosta SSH odrzucona. Połączenie anulowane.",
-    "linkDialogCopy": "Kopiuj",
-    "linkDialogOpen": "Otwórz",
-    "linkDialogTitle": "Otwórz link",
-    "maxReconnectAttemptsReached": "Osiągnięto maksymalną liczbę prób ponownego połączenia",
-    "noHostSelected": "Nie wybrano hosta",
-    "passwordPromptFillTitle": "Czy wpisać zapisane hasło w tym monicie?",
-    "reconnect": "Połącz ponownie",
-    "reconnected": "Połączono ponownie pomyślnie",
-    "reconnecting": "Ponowne łączenie... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Utracono połączenie, łączę ponownie...",
-    "searchCaseSensitive": "Uwzględnij wielkość liter",
-    "searchClose": "Zamknij (Esc)",
-    "searchNext": "Następne dopasowanie (Enter)",
-    "searchNoResults": "Brak wyników",
-    "searchPlaceholder": "Znajdź",
-    "searchPrevious": "Poprzednie dopasowanie (Shift+Enter)",
-    "searchRegex": "Użyj wyrażenia regularnego",
-    "searchResultCount": "{{index}} z {{count}}",
-    "searchWholeWord": "Dopasuj całe słowo",
-    "sessionExpiredNotice": "Twoja poprzednia sesja z {{host}} wygasła po {{minutes}} minutach odłączenia. Powłoka i wszystko, co w niej działa, zniknęło. Włącz Auto-Tmux na tym hoście, aby sesje pozostały aktywne.",
-    "sessionExpiredNoticeNoMinutes": "Twoja poprzednia sesja na {{host}} wygasła podczas rozłączenia; powłoka i wszystko, co w niej działa, zniknęło. Włącz Auto-Tmux na tym hoście, aby sesje pozostały aktywne.",
-    "sessionTakenOver": "Sesja została otwarta w innej karcie. Ponowne łączenie...",
-    "tmuxAttached": "Dołączeni klienci",
-    "tmuxAttachedCount": "{{count}} dołączonych",
-    "tmuxCopyHint": "Dostosuj zaznaczenie i naciśnij Enter, aby skopiować do schowka",
-    "tmuxCreateNew": "Rozpocznij nową sesję",
-    "tmuxDetached": "Odłączono od sesji tmux",
-    "tmuxLastActivity": "Ostatnia aktywność",
-    "tmuxSessionAttached": "Dołączono do sesji tmux: {{name}}",
-    "tmuxSessionCreated": "Utworzono sesję tmux: {{name}}",
-    "tmuxSessionPickerDesc": "Znaleziono istniejące sesje tmux na tym hoście. Wybierz jedną, aby ponownie dołączyć lub utworzyć nową sesję.",
-    "tmuxSessionPickerTitle": "Sesje tmux",
-    "tmuxTimeDays": "{{count}} dni temu",
-    "tmuxTimeHours": "{{count}} godz. temu",
-    "tmuxTimeJustNow": "przed chwilą",
-    "tmuxTimeMinutes": "{{count}} min temu",
-    "tmuxUnavailable": "tmux nie jest zainstalowany na zdalnym hoście, następuje powrót do standardowej powłoki",
-    "tmuxWindowCount": "{{count}} okno",
-    "tmuxWindows": "Okna",
-    "unknownError": "Wystąpił nieznany błąd",
-    "websocketAbnormalClose": "Połączenie zostało nieoczekiwanie zamknięte. Przyczyną może być reverse proxy lub problem z konfiguracją SSL. Sprawdź logi serwera.",
-    "websocketError": "Błąd połączenia WebSocket",
-    "clipboardReadFailed": "Nie udało się odczytać danych ze schowka. Upewnij się, że uprawnienia do schowka zostały przyznane.",
-    "clipboardWriteFailed": "Nie udało się skopiować do schowka. Upewnij się, że strona jest serwowana przez HTTPS lub localhost.",
-    "connected": "Połączono",
-    "totpCodeLabel": "Kod weryfikacyjny",
-    "duplicateTab": "Duplikuj kartę",
-    "imageChooseFile": "Wybierz plik obrazu",
-    "imageUploaded": "Przesłano obraz: {{path}}",
-    "imageClipboardUnavailable": "Ta przeglądarka nie może odczytać obrazów ze schowka",
-    "imageClipboardEmpty": "Nie znaleziono obrazu w schowku",
-    "localShell": "Lokalna powłoka terminala",
-    "autocompleteHintComplete": "Aby zakończyć, naciśnij Tab lub Enter",
-    "autocompleteHintNavigate": "↑↓ aby nawigować",
-    "autocompleteHintClose": "Esc, aby zamknąć"
-  },
-  "terminalToolbar": {
-    "detachTmux": "Odłącz tmux",
-    "detachTmuxDescription": "Odłącz sesję tmux",
-    "dismissError": "Odrzuć błąd obrazu",
-    "hideToolbar": "Ukryj pasek narzędzi",
-    "image": "Akcje obrazu (tylko obrazy)",
-    "imageActionFailed": "Akcja obrazu nie powiodła się",
-    "layout": "Tryb wyświetlania paska narzędzi",
-    "layoutExpanded": "Rozszerzone o metryki",
-    "layoutIcon": "Tylko ikona",
-    "layoutLabeled": "Ikony i etykiety",
-    "moveToolbar": "Przenieś pasek narzędzi",
-    "moveToolbarHint": "Przeciągnij, aby zmienić położenie paska narzędzi",
-    "paste": "Wklej obraz",
-    "pasteImage": "Wklej obraz ze schowka (tylko obrazy)",
-    "retry": "Ponów",
-    "showToolbar": "Rozwiń pasek narzędzi",
-    "upload": "Prześlij obraz",
-    "uploadImage": "Prześlij obraz do hosta",
-    "uploadingImage": "Przesyłanie..."
-  },
-  "history": {
-    "noTerminalSelected": "Nie wybrano terminala",
-    "noTerminalSelectedHint": "Otwórz kartę terminala SSH, aby wyświetlić historię poleceń",
-    "searchPlaceholder": "Przeszukaj historię...",
-    "clearAll": "Wyczyść wszystko",
-    "noHistoryEntries": "Brak wpisów w historii",
-    "trackingDisabled": "Śledzenie historii jest wyłączone",
-    "trackingDisabledHint": "Włącz historię poleceń na karcie terminala SSH tego hosta.",
-    "commandCount_one": "polecenie {{count}}",
-    "commandCount_other": "polecenia {{count}}"
-  },
-  "touchInput": {
-    "enabled": "Włącz wprowadzanie dotykowe",
-    "enabledDesc": "Zezwól na przewijanie jednym palcem w terminalach",
-    "momentumEnabled": "Włącz Momentum",
-    "momentumEnabledDesc": "Kontynuuj przewijanie przez chwilę po przesunięciu",
-    "advanced": "Zaawansowany",
-    "resetDefaults": "Przywróć ustawienia domyślne",
-    "dragThreshold": "Próg przeciągania",
-    "maxWheelDelta": "Maksymalna delta koła",
-    "momentumSampleWindow": "Okno próbki pędu",
-    "releaseGracePeriod": "Okres karencji po puszczeniu",
-    "minimumVelocity": "Minimalna prędkość",
-    "maximumVelocity": "Maksymalna prędkość",
-    "maximumDuration": "Maksymalny czas trwania",
-    "maximumTravel": "Maksymalny dystans",
-    "decayTime": "Czas wygaszania",
-    "pixelsPerTick": "Pikseli na tick",
-    "maximumFrameInterval": "Maksymalny interwał klatek",
-    "maximumTicksPerFrame": "Maksymalna liczba tików na klatkę"
-  },
-  "imageStorage": {
-    "instanceId": "Identyfikator instancji sesji terminalowej",
-    "instanceIdDesc": "Identyfikator instancji jednej z podłączonych kart terminala, używany do testowania widoczności.",
-    "selectedModeUnavailable": "Niedostępny",
-    "test": "Test",
-    "testing": "Testowanie...",
-    "testFailed": "Nie udało się przetestować magazynu obrazów",
-    "testConnected": "Sesja terminalowa jest połączona.",
-    "testNotConnected": "Brak połączonej sesji terminala z tym identyfikatorem instancji.",
-    "testSelectedMode": "Przesyłanie użyłoby: {{mode}}",
-    "testLocalVisible": "Katalog lokalny jest widoczny z podłączonego hosta.",
-    "testLocalNotVisible": "Katalog lokalny NIE jest widoczny z podłączonego hosta."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Wprowadzanie dotykowe",
-        "images": "Przechowywanie obrazów",
-        "sessions": "Sesje",
-        "newHosts": "Nowi gospodarze"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Trwałość sesji terminalowej",
-        "description": "Jak długo odłączony terminal jest utrzymywany aktywny na serwerze przed jego zamknięciem. Min. 1, maks. 1440 minut. W przypadku sesji, które muszą przetrwać ten czas, włącz funkcję Auto-Tmux na hoście."
-      },
-      "commandHistoryEnabled": {
-        "label": "Historia poleceń",
-        "description": "Zezwól na rejestrowanie historii poleceń. Po wyłączeniu historia nie jest zapisywana, niezależnie od ustawień poszczególnych hostów."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "Historia poleceń dla nowych hostów",
-        "description": "Czy nowi gospodarze rozpoczynają pracę z włączoną historią poleceń."
-      },
-      "imageStorageMode": {
-        "label": "Tryb przechowywania",
-        "description": "Gdzie zapisywane są wklejone i przesłane obrazy z terminala. Auto wybiera według połączenia; Lokalny i Zdalny (SFTP) są stałe.",
-        "auto": "Auto",
-        "local": "Lokalne",
-        "remoteSftp": "Zdalny (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Katalog lokalny",
-        "description": "Ścieżka bezwzględna w zapleczu Termix, gdzie tryb lokalny zapisuje obrazy. Nigdy nie jest wyświetlana po zapisaniu. Pusta ścieżka używa TERMIX_IMAGE_DIR."
-      },
-      "imageHostPath": {
-        "label": "Ścieżka hosta",
-        "description": "Widok katalogu lokalnego od strony hosta, który otrzymują agenci terminalowi."
-      },
-      "imageTtlMs": {
-        "label": "Czas życia (ms)",
-        "description": "Czas przechowywania przesłanego obrazu (w milisekundach). Wartość „pusta” oznacza TERMIX_IMAGE_TTL_MS lub jedną godzinę."
-      },
-      "imageMaxCount": {
-        "label": "Maksymalna liczba obrazów",
-        "description": "Większość obrazów jest przechowywana jednocześnie. Puste używa TERMIX_MAX_IMAGE_COUNT lub 100."
-      },
-      "imageMaxBytes": {
-        "label": "Maksymalny rozmiar magazynu (bajty)",
-        "description": "Największa ilość bajtów obrazów przechowywana jednocześnie. Pusty zajmuje TERMIX_MAX_IMAGE_STORAGE_BYTES lub 5 GiB."
-      },
-      "sessionPersistence": {
-        "label": "Zachowaj sesje po rozłączeniu",
-        "description": "Utrzymuj odłączony terminal aktywny na serwerze przez podany powyżej czas, tak aby ponowne otwarcie jego karty powodowało kontynuację pracy od miejsca, w którym została przerwana."
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "Uruchom nowe terminale hostów w tmux, aby sesje przetrwały rozłączenia (wymaga tmux na hoście)"
-      },
-      "newHostTheme": {
-        "label": "Motyw dla nowych gospodarzy",
-        "description": "Motyw terminala, z którym rozpoczyna pracę nowy host."
-      },
-      "newHostFontFamily": {
-        "label": "Czcionka dla nowych gospodarzy",
-        "description": "Czcionka terminala, od której zaczyna nowy host."
-      },
-      "newHostFontSize": {
-        "label": "Rozmiar czcionki dla nowych gospodarzy",
-        "description": "Rozmiar czcionki terminala, od którego zaczyna nowy host (w pikselach)."
-      },
-      "newHostCursorStyle": {
-        "label": "Styl kursora dla nowych hostów"
-      },
-      "newHostCursorBlink": {
-        "label": "Migający kursor dla nowych hostów"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Włącz pasek narzędzi terminala",
-        "description": "Pokaż pasek narzędzi szybkiego dostępu zadokowany do aktywnego terminala, umożliwiający dostęp do narzędzi i statystyk na żywo tego hosta"
-      },
-      "terminalToolbarPosition": {
-        "label": "Pozycja paska narzędzi",
-        "description": "Miejsce, w którym znajduje się pasek narzędzi w terminalu. Nadal możesz go stamtąd przeciągnąć.",
-        "bottom": "Dolny środek",
-        "bottomLeft": "Lewy dolny róg",
-        "bottomRight": "Prawy dolny róg",
-        "top": "Środek góry",
-        "topLeft": "Lewy górny róg",
-        "topRight": "Prawy górny róg"
-      },
-      "terminalToolbarStartState": {
-        "label": "Stan początkowy paska narzędzi",
-        "description": "Czy pasek narzędzi otwiera się w formie rozwiniętej czy zminimalizowanej po nawiązaniu połączenia z terminalem",
-        "expanded": "Rozszerzony",
-        "collapsed": "Zminimalizowany"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Tryb wyświetlania paska narzędzi",
-        "description": "Jak wyświetlane są przyciski na pasku narzędzi. Ostatnio użyte przyciski zachowują to, co wybrałeś na pasku narzędzi.",
-        "remember": "Ostatnio używane",
-        "icon": "Tylko ikona",
-        "labeled": "Ikony i etykiety",
-        "expanded": "Rozszerzone o statystyki"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Pokaż statystyki na żywo",
-        "description": "Pokaż statystyki gospodarza na żywo nad przyciskami paska narzędzi w trybie rozszerzonym"
-      },
-      "terminalToolbarFade": {
-        "label": "Zanikanie w stanie bezczynności",
-        "description": "Wygasz pasek narzędzi, aż najedziesz na niego kursorem"
-      },
-      "enableCommandHistory": {
-        "label": "Historia poleceń",
-        "description": "Zapisuj polecenia uruchamiane w tym terminalu na potrzeby historii i autouzupełniania"
-      },
-      "enableTerminal": {
-        "label": "Włącz terminal",
-        "description": "Zaoferuj terminal SSH dla tego hosta."
-      },
-      "inheritAppearance": {
-        "label": "Użyj domyślnych ustawień użytkownika"
-      },
-      "theme": {
-        "label": "Motyw"
-      },
-      "cursorBlink": {
-        "label": "Migający kursor"
-      },
-      "cursorStyle": {
-        "label": "Styl kursora"
-      },
-      "fontSize": {
-        "label": "Rozmiar czcionki"
-      },
-      "fontFamily": {
-        "label": "Chrzcielnica"
-      },
-      "scrollback": {
-        "label": "Przewiń w tył"
-      },
-      "letterSpacing": {
-        "label": "Odstępy między literami"
-      },
-      "lineHeight": {
-        "label": "Wysokość linii"
-      },
-      "bellStyle": {
-        "label": "Dzwonek"
-      },
-      "minimumContrastRatio": {
-        "label": "Minimalny współczynnik kontrastu"
-      },
-      "backgroundImage": {
-        "label": "Obraz tła"
-      },
-      "backgroundImageOpacity": {
-        "label": "Krycie obrazu tła"
-      },
-      "customThemeColors": {
-        "label": "Niestandardowe kolory motywu"
-      },
-      "rightClickSelectsWord": {
-        "label": "Kliknięcie prawym przyciskiem myszy zaznacza słowo"
-      },
-      "macOptionIsMeta": {
-        "label": "Opcja jest Meta"
-      },
-      "fastScrollModifier": {
-        "label": "Klawisz szybkiego przewijania"
-      },
-      "fastScrollSensitivity": {
-        "label": "Szybka prędkość przewijania"
-      },
-      "backspaceMode": {
-        "label": "Backspace"
-      },
-      "autoMosh": {
-        "label": "Auto mosh"
-      },
-      "moshCommand": {
-        "label": "Komenda Mosh"
-      },
-      "autoTmux": {
-        "label": "Auto tmux"
-      },
-      "useSSHTitle": {
-        "label": "Użyj tytułu SSH"
-      },
-      "syntaxHighlighting": {
-        "label": "Podświetlanie składni"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Kategorie wyróżniania składni"
-      },
-      "linkClickBehavior": {
-        "label": "Kliknij link"
-      },
-      "localEcho": {
-        "label": "Lokalne echo"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Zaoferuj wypełnienie monitu o hasło"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Wypełnij monity sudo"
-      },
-      "autoReconnect": {
-        "label": "Połącz ponownie automatycznie"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Automatyczne uzupełnianie poleceń",
-        "description": "Pokazuj autouzupełnianie podczas pisania po naciśnięciu Tab"
-      },
-      "localEcho": {
-        "label": "Lokalne echo",
-        "description": "Zmniejsz odczuwalne opóźnienie wpisywania dzięki bezpiecznemu lokalnemu przewidywaniu naciśnięć klawiszy"
-      },
-      "linkClickBehavior": {
-        "label": "Kliknięcie linku w terminalu",
-        "description": "Domyślne zachowanie po kliknięciu linków w terminalu"
-      },
-      "customThemes": {
-        "label": "Zapisane motywy"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Terminal lokalny"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Korzystaj z sesji terminalowych na żywo",
-      "description": "Umożliwia innym funkcjom, takim jak udostępnianie sesji i nagrywanie, dostęp do sesji terminalowych na żywo."
-    },
-    "history": {
-      "title": "Przeczytaj historię poleceń",
-      "description": "Umożliwia innym funkcjom, takim jak asystent AI, odczytywanie historii poleceń."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Terminal",
-    "addHost": "Dodaj hosta",
-    "applyGlobalThemeTooltip": "Zastosuj ten motyw",
-    "backgroundImageDesc": "Opcjonalny adres URL obrazu tła terminala",
-    "backgroundImageLabel": "Adres URL obrazu tła",
-    "backgroundImageOpacityLabel": "Krycie obrazu tła",
-    "backspaceMode": "Tryb Backspace",
-    "backspaceModeControlH": "Sterowanie-H (BS)",
-    "backspaceModeLabel": "Tryb Backspace",
-    "backspaceModeNormal": "Normalny (DEL)",
-    "behaviorAndAdvanced": "Zachowanie i zaawansowane",
-    "bellStyle": "Styl dzwonka",
-    "bellStyleBoth": "Obydwa",
-    "bellStyleLabel": "Styl dzwonka",
-    "bellStyleNone": "Żaden",
-    "bellStyleSound": "Dźwięk",
-    "bellStyleVisual": "Wizualny",
-    "colorTheme": "Motyw kolorów",
-    "cursorBlink": "Miganie kursora",
-    "cursorBlinking": "Miganie kursora",
-    "cursorBlinkingDesc": "Włącz animację migania kursora terminala",
-    "cursorStyle": "Styl kursora",
-    "cursorStyleBar": "Bar",
-    "cursorStyleBlock": "Blok",
-    "cursorStyleLabel": "Styl kursora",
-    "cursorStyleUnderline": "Podkreślać",
-    "customThemeAnsiColors": "Kolory ANSI",
-    "customThemeBackground": "Tło",
-    "customThemeBlack": "Czarny",
-    "customThemeBlue": "Niebieski",
-    "customThemeBrightBlack": "Jasnoczarny",
-    "customThemeBrightBlue": "Jasnoniebieski",
-    "customThemeBrightCyan": "Jasny cyjan",
-    "customThemeBrightGreen": "Jasnozielony",
-    "customThemeBrightMagenta": "Jasna magenta",
-    "customThemeBrightRed": "Jasnoczerwony",
-    "customThemeBrightWhite": "Jasnobiały",
-    "customThemeBrightYellow": "Jasnożółty",
-    "customThemeColors": "Niestandardowe kolory",
-    "customThemeCursor": "Kursor",
-    "customThemeCursorAccent": "Akcent kursora",
-    "customThemeCyan": "Cyjan",
-    "customThemeForeground": "Pierwszy plan",
-    "customThemeGreen": "Zielony",
-    "customThemeMagenta": "Magenta",
-    "customThemeRed": "Czerwony",
-    "customThemeResetTooltip": "Przywróć ustawienia domyślne",
-    "customThemeSelection": "Zaznaczenie",
-    "customThemeWhite": "Biały",
-    "customThemeYellow": "Żółty",
-    "deleteGlobalThemeTooltip": "Usuń ten motyw",
-    "docsLink": "Zobacz dokumentację",
-    "enableAutoMosh": "Włącz Auto-Mosh",
-    "enableAutoMoshDesc": "Jeśli to możliwe, preferuj Mosh zamiast SSH",
-    "enableAutoTmux": "Włącz Auto-Tmux",
-    "enableAutoTmuxDesc": "Utrzymuj działanie powłoki i wszystkiego, co w niej działa, nawet po rozłączeniu i ponownym uruchomieniu przeglądarki, uruchamiając ją wewnątrz tmux (tmux musi być zainstalowany na hoście).",
-    "fastScrollModifier": "Modyfikator szybkiego przewijania",
-    "fastScrollModifierAlt": "Alt",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Modyfikator szybkiego przewijania",
-    "fastScrollModifierShift": "Shift",
-    "fastScrollSensitivity": "Czułość szybkiego przewijania",
-    "fastScrollSensitivityLabel": "Czułość szybkiego przewijania",
-    "fontFamily": "Rodzina czcionek",
-    "fontFamilyCustomHint": "Wybierz czcionkę z zestawu albo wskaż Niestandardowa i wpisz dokładną nazwę czcionki już zainstalowanej w systemie (np. MesloLGS NF, Noto Sans Mono). Termix nie zainstaluje czcionek za Ciebie, zainstaluj ją najpierw w systemie.",
-    "fontFamilyCustomOption": "Niestandardowa...",
-    "fontFamilyCustomPlaceholder": "Dokładna nazwa czcionki, np. MesloLGS NF",
-    "fontFamilyLabel": "Rodzina czcionek",
-    "fontSize": "Rozmiar czcionki",
-    "fontSizeLabel": "Rozmiar czcionki",
-    "hostNotFound": "Nie znaleziono hosta",
-    "letterSpacing": "Odstępy między literami",
-    "letterSpacingPx": "Odstępy między literami (px)",
-    "lineHeight": "Interlinia",
-    "lineHeightLabel": "Interlinia",
-    "linkClickBehaviorConfirm": "Pokaż wyskakujące okienko do otwarcia lub skopiowania",
-    "linkClickBehaviorDesc": "Kontroluje, co się dzieje po kliknięciu linku w terminalu. Użyj opcji „Domyślne”, aby zastosować ustawienia na poziomie aplikacji.",
-    "linkClickBehaviorDirect": "Otwórz bezpośrednio",
-    "linkClickBehaviorLabel": "Zachowanie kliknięcia linku",
-    "loadingHost": "Ładowanie hosta...",
-    "localEchoAuto": "Automatycznie",
-    "localEchoDesc": "Przewiduj lokalnie bezpieczne, drukowalne znaki na wolnych łączach. Monity o hasło i znaki sterujące nigdy nie są powtarzane.",
-    "localEchoLabel": "Lokalne echo",
-    "localEchoOff": "Wyłączone",
-    "localEchoOn": "Zawsze włączone",
-    "macOptionIsMetaLabel": "Klawisz opcji wysyła meta",
-    "macOptionIsMetaShortDesc": "Wyłącz, aby na macOS wpisywać znaki specjalne (jak @ czy |) klawiszem Option/Alt zamiast wysyłać Meta",
-    "moshCommand": "Polecenie MOSH",
-    "moshCommandLabel": "Polecenie Mosh",
-    "noSavedThemes": "Brak zapisanych motywów",
-    "none": "Brak",
-    "passwordPromptAutoFillDesc": "Zaproponuj wpisanie zapisanego hasła, gdy terminal o nie poprosi. Wyłącz tę opcję, aby nigdy nie wpisywać automatycznie żadnego hasła na tym hoście.",
-    "passwordPromptAutoFillLabel": "Oferta automatycznego uzupełniania hasła",
-    "autoReconnectLabel": "Automatyczne ponowne łączenie",
-    "autoReconnectDesc": "Ponowne połączenie następuje automatycznie po utracie połączenia SSH, np. po awarii sieci lub uśpieniu. Utrzymuje przewijanie.",
-    "rightClickSelectsWord": "Kliknięcie prawym przyciskiem myszy zaznacza słowo",
-    "rightClickSelectsWordLabel": "Kliknięcie prawym przyciskiem myszy powoduje zaznaczenie słowa",
-    "rightClickSelectsWordShortDesc": "Zaznacza słowo pod kursorem po kliknięciu prawym przyciskiem",
-    "saveAsGlobalTheme": "Zapisz jako motyw globalny",
-    "saveGlobalThemeError": "Nie udało się zapisać motywu",
-    "saveGlobalThemeNamePrompt": "Wprowadź nazwę tego motywu",
-    "saveGlobalThemeSuccess": "Zapisano motyw",
-    "savedThemesLabel": "Zapisane motywy",
-    "scrollbackBufferLabel": "Bufor przewijania",
-    "scrollbackMaxLines": "Maksymalna liczba wierszy przechowywanych w historii",
-    "sudoPasswordAutoFill": "Automatyczne uzupełnianie hasła sudo",
-    "sudoPasswordAutoFillDesc": "Przechowuj hasło sudo, aby metryki hosta, monity terminala i inne narzędzia mogły automatycznie uruchamiać polecenia uprzywilejowane.",
-    "sudoPasswordAutoFillLabel": "Automatyczne uzupełnianie hasła sudo",
-    "syntaxCategoryIpAddresses": "Adresy IP",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Poziomy logowania",
-    "syntaxCategoryLogLevelsDesc": "error, warn, info, debug, fatal",
-    "syntaxCategoryNumbers": "Oznaczone liczby",
-    "syntaxCategoryNumbersDesc": "port 8080, exit 1, status 404",
-    "syntaxCategoryPaths": "Ścieżki plików",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "Znaczniki czasu",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 2024-01-15",
-    "syntaxCategoryUrls": "Adresy URL",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "Koloruj wyjście terminala (błędy, ścieżki, adresy IP, znaczniki czasu)",
-    "syntaxHighlightingLabel": "Podświetlanie składni",
-    "terminalAppearance": "Wygląd terminala",
-    "theme": "Motyw",
-    "themePreview": "Podgląd motywu",
-    "useSSHTitleDesc": "Zaktualizuj tytuł karty na podstawie tytułu okna powłoki zamiast nazwy hosta",
-    "useSSHTitleLabel": "Użyj tytułu okna SSH",
-    "enableTunnel": "Włącz tunel",
-    "enableFileManager": "Włącz menedżer plików",
-    "enableDocker": "Włącz Docker",
-    "startupSnippet": "Snippet startowy",
-    "quickActions": "Szybkie akcje",
-    "proxmoxLastSyncStatus": {
-      "success": "Powodzenie"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} pominięto (nie znaleziono adresu IP)",
-    "proxmoxStatsUrlCopied": "Skopiowano adres URL statystyk Proxmox",
-    "rdpUrlCopied": "Skopiowano adres URL RDP",
-    "vncUrlCopied": "Skopiowano adres URL VNC",
-    "filterAuthStepca": "Krok CA",
-    "guac": {
-      "noCredential": "Brak poświadczenia (dane bezpośrednie poniżej)",
-      "authTypeDirect": "Bezpośredni",
-      "authTypeCredential": "Poświadczenie",
-      "authTypeNone": "Brak",
-      "recordingPath": "Ścieżka nagrywania",
-      "recordingName": "Nazwa nagrania",
-      "saveHostFirst": "Najpierw zapisz hosta.",
-      "sharingOptionsAfterSave": "Opcje udostępniania będą dostępne po zapisaniu hosta.",
-      "permissionLevel": "Poziom uprawnień",
-      "typeHeader": "Typ",
-      "targetHeader": "Cel",
-      "permissionHeader": "Uprawnienie",
-      "cancelBtn": "Anuluj",
-      "savingBtn": "Zapisywanie...",
-      "updateHostBtn": "Aktualizuj hosta",
-      "addHostBtn": "Dodaj hosta"
-    },
-    "filterAuthVault": "Sklepienie"
-  },
-  "nav": {
-    "history": "Historia",
-    "localTerminal": "Terminal lokalny",
-    "sshTools": "Narzędzia SSH",
-    "terminal": "Terminal",
-    "macros": "Makra"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Wpisz tutaj, aby rozesłać naciśnięcia klawiszy...",
-    "copyOnSelect": "Kopiuj zaznaczony tekst automatycznie",
-    "enableRightClickCopyPaste": "Włącz kopiowanie/wklejanie prawym przyciskiem myszy",
-    "fillPassword": "Wpisz hasło",
-    "fillPasswordMissing": "Brak zapisanego hasła dla {{count}} wybranych terminali",
-    "fillPasswordSuccess": "Wpisano hasło w {{count}} terminalach",
-    "keyRecordingTitle": "Nagrywanie klawiszy",
-    "noTerminalTabsOpen": "Brak otwartych kart terminala",
-    "recordToTerminals": "Nagrywaj do terminali",
-    "selectAll": "Wszystkie",
-    "selectNone": "Żaden",
-    "selectTerminalsAbove": "Wybierz terminale powyżej",
-    "settingsTitle": "Ustawienia",
-    "startRecording": "Rozpocznij nagrywanie",
-    "stopRecording": "Zatrzymaj nagrywanie"
-  },
-  "keybindings": {
-    "copy": "Kopiuj zaznaczenie",
-    "paste": "Wklej",
-    "sendControlCode": "Wyślij sygnał Ctrl+litera",
-    "sendText": "Wyślij tekst",
-    "controlCodeLabel": "Litera",
-    "textLabel": "Tekst do wysłania",
-    "appendEnterLabel": "Naciśnij Enter po wysłaniu",
-    "clipboardPermissionNote": "Przy pierwszym użyciu w niektórych przeglądarkach może zostać wyświetlony monit o zezwolenie na dostęp do schowka.",
-    "textRequired": "Wprowadź tekst do wysłania",
-    "controlCodeRequired": "Wprowadź pojedynczą literę kodu kontrolnego",
-    "builtIn": {
-      "copyCtrlC": "Kopiuj zaznaczenie (Ctrl+C, tylko gdy zaznaczony jest tekst)",
-      "copyCtrlShiftC": "Kopiuj zaznaczenie (Ctrl+Shift+C)",
-      "copyCmdC": "Kopiuj zaznaczenie (Cmd+C)",
-      "pasteCtrlShiftV": "Wklej ze schowka (Ctrl+Shift+V)",
-      "ctrlW": "Wyślij Ctrl+W do powłoki (zablokowano możliwość zamknięcia karty przeglądarki)",
-      "ctrlT": "Wyślij Ctrl+T do powłoki (zablokowano otwieranie karty przeglądarki)",
-      "ctrlN": "Wyślij Ctrl+N do powłoki (zablokowane otwieranie okna przeglądarki)",
-      "ctrlQ": "Wyślij Ctrl+Q do powłoki (zablokowane przed zamknięciem przeglądarki)"
-    }
-  },
-  "macros": {
-    "title": "Makra",
-    "description": "Uruchom zapisaną serię poleceń w terminalu i zareaguj na to, co odeśle serwer.",
-    "target": "Cel",
-    "noTerminal": "Brak otwartego terminala",
-    "empty": "Brak makr",
-    "emptyHint": "Utwórz makro, aby zautomatyzować pracę w terminalu: logowanie, restart usługi czy odpowiadanie na monity.",
-    "create": "Nowe makro",
-    "back": "Powrót do makr",
-    "name": "Nazwa",
-    "namePlaceholder": "Uruchom ponownie serwer WWW",
-    "nameRequired": "Przed zapisaniem nadaj makrze nazwę",
-    "descriptionLabel": "Opis",
-    "descriptionPlaceholder": "Co robi to makro (opcjonalnie)",
-    "unsaved": "Niezapisane zmiany",
-    "save": "Zapisz",
-    "saved": "Zapisano makro",
-    "saveFailed": "Nie udało się zapisać makra",
-    "delete": "Usuń",
-    "deleteTitle": "Usunąć to makro?",
-    "deleteBody": "„{{name}}” zostanie trwale usunięte. Nie można tego cofnąć.",
-    "deleted": "Usunięto makro",
-    "cancel": "Anuluj",
-    "run": "Uruchom",
-    "stop": "Zatrzymaj",
-    "running": "Działa...",
-    "completed": "Makro zakończone",
-    "failed": "Makro nie powiodło się",
-    "loadFailed": "Nie można załadować makr",
-    "needTerminal": "Najpierw otwórz i podłącz terminal",
-    "noSteps": "To makro nie ma jeszcze żadnych kroków. Dodaj krok poniżej.",
-    "addStep": "Dodaj krok",
-    "stepNumber": "Krok {{number}}",
-    "removeStep": "Usuń krok",
-    "confirmRunTitle": "Uruchomić to makro?",
-    "confirmRunBody": "„{{name}}” wyśle polecenia do {{host}}.",
-    "confirmRunAction": "Uruchom makro",
-    "stepTypes": {
-      "send": {
-        "label": "Wyślij polecenie",
-        "help": "Wpisuje tekst do terminala, tak samo, jakby wpisano go ręcznie."
-      },
-      "wait": {
-        "label": "Czekaj na wyjście",
-        "help": "Wstrzymuje wykonanie, aż serwer wypisze podany tekst, np. monit o hasło."
-      },
-      "delay": {
-        "label": "Pauza",
-        "help": "Czeka przez ustalony czas przed kolejnym krokiem."
-      },
-      "if": {
-        "label": "Jeśli wyjście zawiera",
-        "help": "Sprawdza wszystko, co serwer wypisał do tej pory, a potem uruchamia jedną z dwóch gałęzi."
-      },
-      "repeat": {
-        "label": "Powtórz",
-        "help": "Uruchamia zawarte w nim kroki ustaloną liczbę razy."
-      }
-    },
-    "send": {
-      "text": "Polecenie lub tekst",
-      "textPlaceholder": "systemctl restart nginx",
-      "pressEnter": "Naciśnij Enter po wysłaniu",
-      "pressEnterHelp": "Wyłącz tę opcję, aby wpisać tekst bez przesyłania go."
-    },
-    "wait": {
-      "pattern": "Czekaj, aż wyjście będzie zawierać",
-      "patternPlaceholder": "password:",
-      "timeout": "Przerwij po",
-      "onTimeout": "Jeśli nigdy się nie pojawi",
-      "stop": "Zatrzymaj makro",
-      "continue": "Kontynuuj mimo wszystko"
-    },
-    "delay": {
-      "duration": "Czekaj"
-    },
-    "ifStep": {
-      "pattern": "Jeśli wyjście zawiera",
-      "patternPlaceholder": "Active: active (running)",
-      "then": "Następnie zrób to",
-      "else": "W przeciwnym razie zrób to",
-      "emptyBranch": "Brak kroków"
-    },
-    "repeat": {
-      "count": "Liczba razy",
-      "times": "razy"
-    },
-    "match": {
-      "useRegex": "Dopasuj do wyrażenia regularnego",
-      "useRegexHelp": "Zostaw wyłączone, aby dopasować tekst dokładnie tak, jak został wpisany.",
-      "invalidRegex": "Nie jest to prawidłowe wyrażenie regularne, zostanie dopasowane jako zwykły tekst"
-    },
-    "seconds": "sekundy",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "Wymagany jest serwer zdalny. Połącz się z serwerem zdalnym w Ustawieniach, aby korzystać z tego typu połączenia."
-  },
-  "plugin": {
-    "name": "Terminal SSH"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/pt_BR.json b/plugins/ssh-terminal/locales/translated/pt_BR.json
deleted file mode 100644
index 5754ca063..000000000
--- a/plugins/ssh-terminal/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Adicionar",
-    "arrowDown": "Seta para baixo",
-    "arrowLeft": "Seta para a esquerda",
-    "arrowRight": "Seta para a direita",
-    "arrowUp": "Seta para cima",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Del",
-    "done": "Feito",
-    "editQuickKeys": "Editar teclas de atalho",
-    "end": "Fim",
-    "esc": "Esc",
-    "home": "Inicio",
-    "pageDown": "PgDn",
-    "pageUp": "PgUp",
-    "paste": "Colar",
-    "quickKeyPlaceholder": "por exemplo sudo ",
-    "quickKeysDesc": "Toque em × para remover. Suporta até 8 caracteres.",
-    "quickKeysTitle": "Teclas de atalho",
-    "removeQuickKey": "Remover",
-    "resetDefaults": "Restaurar padrões de fábrica",
-    "shift": "Mudança",
-    "tab": "Aba"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Falha ao ativar o Auto-Tmux",
-    "autoTmuxEnabled": "Auto-Tmux ativado para {{host}}. Aplica-se a partir da próxima conexão.",
-    "clipboardHttpWarning": "Não foi possível ler a área de transferência. Alguns navegadores restringem o acesso à área de transferência fora de HTTPS - tente Ctrl+V ou utilize HTTPS para acessar o Termix.",
-    "closeTab": "Fechar",
-    "connecting": "Conectando...",
-    "connectionLost": "Conexão perdida",
-    "connectionRejected": "Conexão rejeitada pelo servidor. Verifique sua autenticação e configuração de rede.",
-    "connectionTimeout": "Tempo limite de conexão",
-    "enableAutoTmuxAction": "Ativar Auto-Tmux",
-    "hostKeyRejected": "Verificação da chave SSH do host rejeitada. Conexão cancelada.",
-    "linkDialogCopy": "Copiar",
-    "linkDialogOpen": "Abrir",
-    "linkDialogTitle": "Abrir link",
-    "maxReconnectAttemptsReached": "Número máximo de tentativas de reconexão atingido",
-    "noHostSelected": "Nenhum host selecionado",
-    "passwordPromptFillTitle": "Digite a senha salva neste campo?",
-    "reconnect": "Reconectar",
-    "reconnected": "Reconectado com sucesso",
-    "reconnecting": "Reconectando... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Conexão perdida, reconectando...",
-    "searchCaseSensitive": "Caixa de fósforos",
-    "searchClose": "Fechar (Esc)",
-    "searchNext": "Próxima partida (Entrar)",
-    "searchNoResults": "Nenhum resultado",
-    "searchPlaceholder": "Encontrar",
-    "searchPrevious": "Partida anterior (Shift+Enter)",
-    "searchRegex": "Utilizar expressão regular",
-    "searchResultCount": "{{index}} de {{count}}",
-    "searchWholeWord": "Combine a palavra inteira",
-    "sessionExpiredNotice": "Sua sessão anterior em {{host}} expirou após {{minutes}} minutos desconectado; o shell e tudo o que estava sendo executado nele foram perdidos. Habilite o Auto-Tmux neste host para manter as sessões ativas.",
-    "sessionExpiredNoticeNoMinutes": "Sua sessão anterior em {{host}} expirou enquanto estava desconectada; o shell e tudo o que estava sendo executado nele foram perdidos. Habilite o Auto-Tmux neste host para manter as sessões ativas.",
-    "sessionTakenOver": "A sessão foi aberta em outra aba. Reconectando...",
-    "tmuxAttached": "Clientes vinculados",
-    "tmuxAttachedCount": "{{count}} anexado",
-    "tmuxCopyHint": "Ajuste a seleção e pressione Enter para copiar para a área de transferência.",
-    "tmuxCreateNew": "Iniciar nova sessão",
-    "tmuxDetached": "Sessão desconectada do tmux",
-    "tmuxLastActivity": "Última atividade",
-    "tmuxSessionAttached": "Sessão tmux anexada: {{name}}",
-    "tmuxSessionCreated": "Sessão tmux criada: {{name}}",
-    "tmuxSessionPickerDesc": "Foram encontradas sessões tmux existentes neste host. Selecione uma para reconectar ou crie uma nova sessão.",
-    "tmuxSessionPickerTitle": "Sessões tmux",
-    "tmuxTimeDays": "{{count}}há alguns dias",
-    "tmuxTimeHours": "{{count}}h atrás",
-    "tmuxTimeJustNow": "agora mesmo",
-    "tmuxTimeMinutes": "{{count}}m atrás",
-    "tmuxUnavailable": "O tmux não está instalado no host remoto, utilizando o shell padrão como alternativa.",
-    "tmuxWindowCount": "{{count}} janela",
-    "tmuxWindows": "Windows",
-    "unknownError": "Ocorreu um erro desconhecido.",
-    "websocketAbnormalClose": "A conexão foi encerrada inesperadamente. Isso pode ter ocorrido devido a um problema de configuração de proxy reverso ou SSL. Verifique os registros do servidor.",
-    "websocketError": "Erro de conexão WebSocket",
-    "clipboardReadFailed": "Não foi possível ler o conteúdo da área de transferência. Certifique-se de que as permissões de acesso à área de transferência estejam concedidas.",
-    "clipboardWriteFailed": "Falha ao copiar para a área de transferência. Certifique-se de que a página esteja sendo servida via HTTPS ou localhost.",
-    "connected": "Conectado",
-    "totpCodeLabel": "Código de verificação",
-    "duplicateTab": "Aba duplicada",
-    "imageChooseFile": "Escolha um arquivo de imagem",
-    "imageUploaded": "Imagem carregada: {{path}}",
-    "imageClipboardUnavailable": "Este navegador não consegue ler imagens da área de transferência.",
-    "imageClipboardEmpty": "Nenhuma imagem encontrada na área de transferência",
-    "localShell": "Shell do terminal local",
-    "autocompleteHintComplete": "Pressione Tab ou Enter para concluir",
-    "autocompleteHintNavigate": "↑↓ para navegar",
-    "autocompleteHintClose": "Pressione Esc para fechar"
-  },
-  "terminalToolbar": {
-    "detachTmux": "Desanexar tmux",
-    "detachTmuxDescription": "Desanexar sessão tmux",
-    "dismissError": "Ignorar erro de imagem",
-    "hideToolbar": "Ocultar barra de ferramentas",
-    "image": "Ações de imagem (somente imagens)",
-    "imageActionFailed": "A ação de imagem falhou",
-    "layout": "Modo de exibição da barra de ferramentas",
-    "layoutExpanded": "Expandido com métricas",
-    "layoutIcon": "Apenas o ícone",
-    "layoutLabeled": "Ícones e rótulos",
-    "moveToolbar": "Mover barra de ferramentas",
-    "moveToolbarHint": "Arraste para reposicionar a barra de ferramentas.",
-    "paste": "Colar imagem",
-    "pasteImage": "Colar imagem da área de transferência (somente imagens)",
-    "retry": "Tentar novamente",
-    "showToolbar": "Expandir barra de ferramentas",
-    "upload": "Carregar imagem",
-    "uploadImage": "Faça o upload de uma imagem para o host.",
-    "uploadingImage": "Carregando..."
-  },
-  "history": {
-    "noTerminalSelected": "Nenhum terminal selecionado",
-    "noTerminalSelectedHint": "Abra uma aba do terminal SSH para visualizar seu histórico de comandos.",
-    "searchPlaceholder": "Histórico de pesquisa...",
-    "clearAll": "Limpar tudo",
-    "noHistoryEntries": "Nenhuma entrada no histórico.",
-    "trackingDisabled": "O rastreamento do histórico está desativado.",
-    "trackingDisabledHint": "Ative o Histórico de Comandos na aba Terminal SSH deste host.",
-    "commandCount_one": "{{count}} comando",
-    "commandCount_other": "{{count}} comandos"
-  },
-  "touchInput": {
-    "enabled": "Ativar entrada por toque",
-    "enabledDesc": "Permitir rolagem com um único dedo em terminais.",
-    "momentumEnabled": "Ativar o impulso",
-    "momentumEnabledDesc": "Continue rolando brevemente após deslizar o dedo.",
-    "advanced": "Avançado",
-    "resetDefaults": "Restaurar padrões de fábrica",
-    "dragThreshold": "Limiar de arrasto",
-    "maxWheelDelta": "Delta máximo da roda",
-    "momentumSampleWindow": "Janela de amostra de momento",
-    "releaseGracePeriod": "Período de carência para lançamento",
-    "minimumVelocity": "Velocidade mínima",
-    "maximumVelocity": "Velocidade máxima",
-    "maximumDuration": "Duração máxima",
-    "maximumTravel": "Viagem máxima",
-    "decayTime": "Tempo de decaimento",
-    "pixelsPerTick": "Pixels por tick",
-    "maximumFrameInterval": "Intervalo máximo entre quadros",
-    "maximumTicksPerFrame": "Número máximo de ticks por quadro"
-  },
-  "imageStorage": {
-    "instanceId": "ID da instância da sessão do terminal",
-    "instanceIdDesc": "ID da instância de uma das suas abas de terminal conectadas, usada para testar a visibilidade.",
-    "selectedModeUnavailable": "Indisponível",
-    "test": "Teste",
-    "testing": "Testando...",
-    "testFailed": "Falha ao testar o armazenamento de imagens",
-    "testConnected": "A sessão do terminal está conectada.",
-    "testNotConnected": "Nenhuma sessão de terminal conectada com este ID de instância.",
-    "testSelectedMode": "Um upload usaria: {{mode}}",
-    "testLocalVisible": "O diretório local está visível a partir do host conectado.",
-    "testLocalNotVisible": "O diretório local NÃO está visível a partir do host conectado."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Entrada por toque",
-        "images": "Armazenamento de imagens",
-        "sessions": "Sessões",
-        "newHosts": "Novos anfitriões"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Persistência de sessão do terminal",
-        "description": "Tempo que um terminal desconectado permanece ativo no servidor antes de ser fechado. Mínimo de 1 minuto, máximo de 1440 minutos. Para sessões que precisam durar mais do que isso, habilite o Auto-Tmux no host."
-      },
-      "commandHistoryEnabled": {
-        "label": "Histórico de comandos",
-        "description": "Permitir o registro do histórico de comandos. Quando desativado, o histórico não é salvo, independentemente das configurações de cada host."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "Histórico de comandos para novos hosts",
-        "description": "Se os novos hosts iniciarem com o histórico de comandos ativado."
-      },
-      "imageStorageMode": {
-        "label": "Modo de armazenamento",
-        "description": "Local onde as imagens de terminal coladas e carregadas são exibidas. As seleções automáticas por conexão, Local e Remota (SFTP), foram corrigidas.",
-        "auto": "Auto",
-        "local": "Local",
-        "remoteSftp": "Remoto (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Diretório local",
-        "description": "Caminho absoluto no backend do Termix onde o modo local grava imagens. Nunca é exibido após o salvamento. Um valor vazio usa TERMIX_IMAGE_DIR."
-      },
-      "imageHostPath": {
-        "label": "Caminho do host",
-        "description": "Visão do diretório local recebida pelos agentes de terminal, do lado do host."
-      },
-      "imageTtlMs": {
-        "label": "TTL (ms)",
-        "description": "Tempo de armazenamento de uma imagem carregada, em milissegundos. O valor vazio usa TERMIX_IMAGE_TTL_MS ou uma hora."
-      },
-      "imageMaxCount": {
-        "label": "Contagem máxima de imagens",
-        "description": "A maioria das imagens é mantida simultaneamente. O parâmetro vazio usa TERMIX_MAX_IMAGE_COUNT ou 100."
-      },
-      "imageMaxBytes": {
-        "label": "Bytes de armazenamento máximo",
-        "description": "A maioria dos bytes das imagens são mantidos de uma só vez. Quando vazio, utiliza-se TERMIX_MAX_IMAGE_STORAGE_BYTES ou 5 GiB."
-      },
-      "sessionPersistence": {
-        "label": "Manter sessões após desconexão",
-        "description": "Mantenha um terminal desconectado ativo no servidor pelo tempo especificado acima, para que, ao reabrir a aba, a sessão continue de onde parou."
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "Execute os terminais dos novos hosts dentro do tmux para que as sessões sobrevivam a desconexões (requer tmux no host)."
-      },
-      "newHostTheme": {
-        "label": "Tema para novos anfitriões",
-        "description": "O tema do terminal com o qual um novo host inicia."
-      },
-      "newHostFontFamily": {
-        "label": "Fonte para novos anfitriões",
-        "description": "A fonte de terminal com a qual um novo host inicia."
-      },
-      "newHostFontSize": {
-        "label": "Tamanho da fonte para novos hosts",
-        "description": "O tamanho da fonte do terminal com o qual um novo host inicia, em pixels."
-      },
-      "newHostCursorStyle": {
-        "label": "Estilo de cursor para novos hosts"
-      },
-      "newHostCursorBlink": {
-        "label": "Cursor piscando para novos hosts"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Ativar a barra de ferramentas do terminal",
-        "description": "Exibir uma barra de ferramentas de acesso rápido acoplada ao terminal ativo com as ferramentas e estatísticas em tempo real deste host."
-      },
-      "terminalToolbarPosition": {
-        "label": "Posição da barra de ferramentas",
-        "description": "Onde a barra de ferramentas está localizada no terminal. Você ainda pode arrastá-la de lá.",
-        "bottom": "Centro inferior",
-        "bottomLeft": "Canto inferior esquerdo",
-        "bottomRight": "Canto inferior direito",
-        "top": "Centro superior",
-        "topLeft": "Canto superior esquerdo",
-        "topRight": "Canto superior direito"
-      },
-      "terminalToolbarStartState": {
-        "label": "Estado inicial da barra de ferramentas",
-        "description": "Se a barra de ferramentas abre expandida ou minimizada quando o terminal se conecta.",
-        "expanded": "Expandido",
-        "collapsed": "Minimizado"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Modo de exibição da barra de ferramentas",
-        "description": "Como os botões da barra de ferramentas são exibidos. O último botão usado mantém a seleção feita na barra de ferramentas.",
-        "remember": "Último uso",
-        "icon": "Apenas o ícone",
-        "labeled": "Ícones e rótulos",
-        "expanded": "Expandido com estatísticas"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Mostrar estatísticas ao vivo",
-        "description": "Exibir estatísticas do host ao vivo acima dos botões da barra de ferramentas no modo expandido."
-      },
-      "terminalToolbarFade": {
-        "label": "Desvanecer quando ocioso",
-        "description": "A barra de ferramentas desaparece gradualmente até que você passe o cursor sobre ela."
-      },
-      "enableCommandHistory": {
-        "label": "Histórico de comandos",
-        "description": "Registre os comandos executados neste terminal para histórico e preenchimento automático."
-      },
-      "enableTerminal": {
-        "label": "Ativar Terminal",
-        "description": "Disponibilize um terminal SSH para este host."
-      },
-      "inheritAppearance": {
-        "label": "Usar as configurações padrão do usuário"
-      },
-      "theme": {
-        "label": "Tema"
-      },
-      "cursorBlink": {
-        "label": "cursor piscando"
-      },
-      "cursorStyle": {
-        "label": "Estilo do cursor"
-      },
-      "fontSize": {
-        "label": "Tamanho da fonte"
-      },
-      "fontFamily": {
-        "label": "Fonte"
-      },
-      "scrollback": {
-        "label": "Voltar ao início"
-      },
-      "letterSpacing": {
-        "label": "Espaçamento entre letras"
-      },
-      "lineHeight": {
-        "label": "Altura da linha"
-      },
-      "bellStyle": {
-        "label": "Sino"
-      },
-      "minimumContrastRatio": {
-        "label": "Relação de contraste mínima"
-      },
-      "backgroundImage": {
-        "label": "Imagem de fundo"
-      },
-      "backgroundImageOpacity": {
-        "label": "Opacidade da imagem de fundo"
-      },
-      "customThemeColors": {
-        "label": "Cores de tema personalizadas"
-      },
-      "rightClickSelectsWord": {
-        "label": "Clicar com o botão direito do mouse seleciona a palavra."
-      },
-      "macOptionIsMeta": {
-        "label": "A opção é Meta"
-      },
-      "fastScrollModifier": {
-        "label": "Tecla de rolagem rápida"
-      },
-      "fastScrollSensitivity": {
-        "label": "Velocidade de rolagem rápida"
-      },
-      "backspaceMode": {
-        "label": "Apagar"
-      },
-      "autoMosh": {
-        "label": "Mosh automático"
-      },
-      "moshCommand": {
-        "label": "Comando Mosh"
-      },
-      "autoTmux": {
-        "label": "tmux automático"
-      },
-      "useSSHTitle": {
-        "label": "Use o título SSH"
-      },
-      "syntaxHighlighting": {
-        "label": "Realce de sintaxe"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Categorias de realce de sintaxe"
-      },
-      "linkClickBehavior": {
-        "label": "Clique no link"
-      },
-      "localEcho": {
-        "label": "Eco local"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Ofereça-se para preencher os campos de senha."
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Preencha os prompts do sudo"
-      },
-      "autoReconnect": {
-        "label": "Reconectar automaticamente"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Preenchimento automático de comandos",
-        "description": "Exibir o recurso de autocompletar enquanto digita ao pressionar a tecla Tab."
-      },
-      "localEcho": {
-        "label": "Eco Local",
-        "description": "Reduza a latência de entrada percebida usando a previsão segura de pressionamento de teclas local."
-      },
-      "linkClickBehavior": {
-        "label": "Clique no link do terminal",
-        "description": "Comportamento padrão ao clicar em links no terminal."
-      },
-      "customThemes": {
-        "label": "Temas salvos"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Terminal local"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Use sessões de terminal ao vivo",
-      "description": "Permite que outras funcionalidades, como o compartilhamento e a gravação de sessões, cheguem às suas sessões de terminal em tempo real."
-    },
-    "history": {
-      "title": "Leia o histórico de comandos",
-      "description": "Permite que outras funcionalidades, como o assistente de IA, leiam seu histórico de comandos."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Terminal",
-    "addHost": "Adicionar host",
-    "applyGlobalThemeTooltip": "Aplique este tema",
-    "backgroundImageDesc": "URL opcional para uma imagem de fundo do terminal",
-    "backgroundImageLabel": "URL da imagem de fundo",
-    "backgroundImageOpacityLabel": "Opacidade da imagem de fundo",
-    "backspaceMode": "Modo Backspace",
-    "backspaceModeControlH": "Controle-H (BS)",
-    "backspaceModeLabel": "Modo Backspace",
-    "backspaceModeNormal": "Normal (DEL)",
-    "behaviorAndAdvanced": "Comportamento e Avançado",
-    "bellStyle": "Estilo do Sino",
-    "bellStyleBoth": "Ambos",
-    "bellStyleLabel": "Estilo do Sino",
-    "bellStyleNone": "Nenhum",
-    "bellStyleSound": "Som",
-    "bellStyleVisual": "Visual",
-    "colorTheme": "Tema de cores",
-    "cursorBlink": "Piscar cursor",
-    "cursorBlinking": "Cursor Piscando",
-    "cursorBlinkingDesc": "Ativar animação piscante para o cursor do terminal",
-    "cursorStyle": "Estilo do Cursor",
-    "cursorStyleBar": "Bar",
-    "cursorStyleBlock": "Bloquear",
-    "cursorStyleLabel": "Estilo do Cursor",
-    "cursorStyleUnderline": "Sublinhado",
-    "customThemeAnsiColors": "Cores ANSI",
-    "customThemeBackground": "Fundo",
-    "customThemeBlack": "Preto",
-    "customThemeBlue": "Azul",
-    "customThemeBrightBlack": "Preto brilhante",
-    "customThemeBrightBlue": "Azul brilhante",
-    "customThemeBrightCyan": "Ciano brilhante",
-    "customThemeBrightGreen": "Verde brilhante",
-    "customThemeBrightMagenta": "Magenta brilhante",
-    "customThemeBrightRed": "Vermelho vivo",
-    "customThemeBrightWhite": "Branco brilhante",
-    "customThemeBrightYellow": "Amarelo brilhante",
-    "customThemeColors": "Cores personalizadas",
-    "customThemeCursor": "Cursor",
-    "customThemeCursorAccent": "Acento do cursor",
-    "customThemeCyan": "Ciano",
-    "customThemeForeground": "Primeiro plano",
-    "customThemeGreen": "Verde",
-    "customThemeMagenta": "Magenta",
-    "customThemeRed": "Vermelho",
-    "customThemeResetTooltip": "Restaurar padrões de fábrica",
-    "customThemeSelection": "Seleção",
-    "customThemeWhite": "Branco",
-    "customThemeYellow": "Amarelo",
-    "deleteGlobalThemeTooltip": "Excluir este tema",
-    "docsLink": "Documentação",
-    "enableAutoMosh": "Ativar Auto-Mosh",
-    "enableAutoMoshDesc": "Prefira Mosh a SSH, se disponível.",
-    "enableAutoTmux": "Ativar Auto-Tmux",
-    "enableAutoTmuxDesc": "Mantenha seu shell e tudo o que estiver sendo executado nele em funcionamento mesmo após desconexões e reinicializações do navegador, executando o comando dentro do tmux (o tmux precisa estar instalado no host).",
-    "fastScrollModifier": "Modificador de rolagem rápido",
-    "fastScrollModifierAlt": "Alternativa",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Modificador de rolagem rápido",
-    "fastScrollModifierShift": "Mudança",
-    "fastScrollSensitivity": "Sensibilidade de rolagem rápida",
-    "fastScrollSensitivityLabel": "Sensibilidade de rolagem rápida",
-    "fontFamily": "Família de Fontes",
-    "fontFamilyCustomHint": "Escolha uma fonte incluída ou selecione \"Personalizada\" e digite o nome exato de uma fonte já instalada no seu sistema (por exemplo, MesloLGS NF, Noto Sans Mono). O Termix não instala fontes automaticamente; instale-as primeiro no seu sistema operacional.",
-    "fontFamilyCustomOption": "Personalizado...",
-    "fontFamilyCustomPlaceholder": "Nome exato da fonte, por exemplo, MesloLGS NF",
-    "fontFamilyLabel": "Família da Fonte",
-    "fontSize": "Tamanho da Fonte",
-    "fontSizeLabel": "Tamanho da Fonte",
-    "hostNotFound": "Host não encontrado",
-    "letterSpacing": "Espaçamento entre Letras",
-    "letterSpacingPx": "Espaçamento das letras (px)",
-    "lineHeight": "Altura da Linha",
-    "lineHeightLabel": "Altura da Linha",
-    "linkClickBehaviorConfirm": "Exibir janela pop-up para abrir ou copiar",
-    "linkClickBehaviorDesc": "Controla o que acontece quando você clica em um link no terminal. Use 'Padrão' para seguir a configuração do aplicativo.",
-    "linkClickBehaviorDirect": "Abrir diretamente",
-    "linkClickBehaviorLabel": "Comportamento de clique em links",
-    "loadingHost": "Carregando host...",
-    "localEchoAuto": "Automático",
-    "localEchoDesc": "Preveja sequências de teclas seguras e imprimíveis localmente em conexões lentas. Os prompts de senha e as entradas de controle nunca são repetidos.",
-    "localEchoLabel": "Eco Local",
-    "localEchoOff": "Desligado",
-    "localEchoOn": "Sempre ligado",
-    "macOptionIsMetaLabel": "A tecla Option envia meta",
-    "macOptionIsMetaShortDesc": "Desative a digitação de caracteres especiais (como @ ou |) com a tecla Option/Alt no macOS em vez de enviar Meta",
-    "moshCommand": "Comando MOSH",
-    "moshCommandLabel": "Comando Mosh",
-    "noSavedThemes": "Ainda não há temas salvos.",
-    "none": "Nenhum",
-    "passwordPromptAutoFillDesc": "Ofereça a opção de preencher a senha salva quando o terminal solicitar. Desative para que o preenchimento automático de senhas neste host seja desativado.",
-    "passwordPromptAutoFillLabel": "Oferecer preenchimento automático de senha",
-    "autoReconnectLabel": "Reconexão automática",
-    "autoReconnectDesc": "Reconecta-se automaticamente quando a conexão SSH cai, como após uma interrupção na rede ou suspensão. Mantém o histórico de rolagem.",
-    "rightClickSelectsWord": "Clique com botão direito seleciona a palavra",
-    "rightClickSelectsWordLabel": "Clique com botão direito seleciona a palavra",
-    "rightClickSelectsWordShortDesc": "Selecione a palavra no botão direito do mouse",
-    "saveAsGlobalTheme": "Salvar como tema global",
-    "saveGlobalThemeError": "Falha ao salvar o tema",
-    "saveGlobalThemeNamePrompt": "Insira um nome para este tema.",
-    "saveGlobalThemeSuccess": "Tema salvo",
-    "savedThemesLabel": "Temas salvos",
-    "scrollbackBufferLabel": "Buffer de Rolagem",
-    "scrollbackMaxLines": "Número máximo de linhas mantidas no histórico",
-    "sudoPasswordAutoFill": "Auto-preenchimento de Senha Sudo",
-    "sudoPasswordAutoFillDesc": "Armazene uma senha de sudo para que as métricas do host, os prompts do terminal e outros possam executar comandos privilegiados automaticamente.",
-    "sudoPasswordAutoFillLabel": "Preenchimento automático de senha Sudo",
-    "syntaxCategoryIpAddresses": "Endereços IP",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Níveis de registro",
-    "syntaxCategoryLogLevelsDesc": "erro, aviso, informação, depuração, fatal",
-    "syntaxCategoryNumbers": "Números rotulados",
-    "syntaxCategoryNumbersDesc": "porta 8080, saída 1, status 404",
-    "syntaxCategoryPaths": "Caminhos de Arquivo",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "Carimbos de data/hora",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 15/01/2024",
-    "syntaxCategoryUrls": "URLs",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "Colorir a saída do terminal (erros, caminhos, IPs, registros de data e hora)",
-    "syntaxHighlightingLabel": "Destaque de sintaxe",
-    "terminalAppearance": "Aparência do Terminal",
-    "theme": "Tema",
-    "themePreview": "Preview do Tema",
-    "useSSHTitleDesc": "Atualize o título da aba com base no título da janela do shell, em vez do nome do host.",
-    "useSSHTitleLabel": "Usar o título da janela SSH",
-    "enableTunnel": "Ativar Túnel",
-    "enableFileManager": "Ativar Gerenciador de Arquivos",
-    "enableDocker": "Ativar Docker",
-    "startupSnippet": "Snippet Inicial",
-    "quickActions": "Ações Rápidas",
-    "proxmoxLastSyncStatus": {
-      "success": "Sucesso"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} ignorado (nenhum IP encontrado)",
-    "proxmoxStatsUrlCopied": "URL das estatísticas do Proxmox copiada para a área de transferência",
-    "rdpUrlCopied": "URL RDP copiada",
-    "vncUrlCopied": "URL VNC copiada",
-    "filterAuthStepca": "Etapa CA",
-    "guac": {
-      "noCredential": "Sem credenciais (credenciais diretas abaixo)",
-      "authTypeDirect": "Direto",
-      "authTypeCredential": "Credencial",
-      "authTypeNone": "Nenhum",
-      "recordingPath": "Caminho de gravação",
-      "recordingName": "Nome da gravação",
-      "saveHostFirst": "Primeiro, salve o host.",
-      "sharingOptionsAfterSave": "As opções de compartilhamento ficam disponíveis depois que o anfitrião for salvo.",
-      "permissionLevel": "Nível de permissão",
-      "typeHeader": "Tipo",
-      "targetHeader": "Alvo",
-      "permissionHeader": "Permissão",
-      "cancelBtn": "Cancelar",
-      "savingBtn": "Salvando...",
-      "updateHostBtn": "Atualizar Host",
-      "addHostBtn": "Adicionar host"
-    },
-    "filterAuthVault": "Cofre"
-  },
-  "nav": {
-    "history": "Histórico",
-    "localTerminal": "Terminal local",
-    "sshTools": "Ferramentas de SSH",
-    "terminal": "Terminal",
-    "macros": "Macros"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Digite aqui para transmitir as teclas pressionadas...",
-    "copyOnSelect": "Copiar texto selecionado automaticamente",
-    "enableRightClickCopyPaste": "Ativar copiar/colar com o botão direito do mouse",
-    "fillPassword": "Preencha a senha",
-    "fillPasswordMissing": "Nenhuma senha salva para {{count}} terminal(is) selecionado(s)",
-    "fillPasswordSuccess": "Senha inserida no(s) terminal(is) {{count}}",
-    "keyRecordingTitle": "Gravação principal",
-    "noTerminalTabsOpen": "Nenhuma aba do terminal aberta",
-    "recordToTerminals": "Gravar nos terminais",
-    "selectAll": "Todos",
-    "selectNone": "Nenhum",
-    "selectTerminalsAbove": "Selecione os terminais acima.",
-    "settingsTitle": "Configurações",
-    "startRecording": "Iniciar gravação",
-    "stopRecording": "Parar gravação"
-  },
-  "keybindings": {
-    "copy": "Copiar seleção",
-    "paste": "Colar",
-    "sendControlCode": "Enviar sinal Ctrl+letra",
-    "sendText": "Enviar mensagem de texto",
-    "controlCodeLabel": "Carta",
-    "textLabel": "Texto a enviar",
-    "appendEnterLabel": "Pressione Enter após enviar",
-    "clipboardPermissionNote": "Pode solicitar permissão para acessar a área de transferência no primeiro uso em alguns navegadores.",
-    "textRequired": "Digite o texto que deseja enviar.",
-    "controlCodeRequired": "Digite uma única letra para o código de controle.",
-    "builtIn": {
-      "copyCtrlC": "Copiar seleção (Ctrl+C, somente quando o texto estiver selecionado)",
-      "copyCtrlShiftC": "Copiar seleção (Ctrl+Shift+C)",
-      "copyCmdC": "Copiar seleção (Cmd+C)",
-      "pasteCtrlShiftV": "Colar da área de transferência (Ctrl+Shift+V)",
-      "ctrlW": "Enviar Ctrl+W para o shell (impede o fechamento da aba do navegador)",
-      "ctrlT": "Envie Ctrl+T para o shell (impede a abertura de novas abas do navegador).",
-      "ctrlN": "Envie Ctrl+N para o shell (impede a abertura da janela do navegador).",
-      "ctrlQ": "Enviar Ctrl+Q para o shell (impede o fechamento do navegador)"
-    }
-  },
-  "macros": {
-    "title": "Macros",
-    "description": "Execute uma série de comandos salvos em um terminal e reaja ao que o servidor envia de volta.",
-    "target": "Alvo",
-    "noTerminal": "Nenhum terminal aberto",
-    "empty": "Ainda não há macros.",
-    "emptyHint": "Crie uma macro para automatizar um fluxo de trabalho no terminal, como fazer login, reiniciar um serviço ou responder a solicitações.",
-    "create": "Nova macro",
-    "back": "Voltar às macros",
-    "name": "Nome",
-    "namePlaceholder": "Reinicie o servidor web.",
-    "nameRequired": "Dê um nome à macro antes de salvar.",
-    "descriptionLabel": "Descrição",
-    "descriptionPlaceholder": "O que esta macro faz (opcional)",
-    "unsaved": "Alterações não salvas",
-    "save": "Salvar",
-    "saved": "Macro salvo",
-    "saveFailed": "Não foi possível salvar a macro.",
-    "delete": "Apagar",
-    "deleteTitle": "Excluir esta macro?",
-    "deleteBody": "\"{{name}}\" será excluído permanentemente. Esta ação não pode ser desfeita.",
-    "deleted": "Macro excluída",
-    "cancel": "Cancelar",
-    "run": "Correr",
-    "stop": "Parar",
-    "running": "Correndo...",
-    "completed": "Macro finalizado",
-    "failed": "A macro falhou",
-    "loadFailed": "Não foi possível carregar as macros",
-    "needTerminal": "Primeiro, abra e conecte um terminal.",
-    "noSteps": "Esta macro ainda não possui etapas. Adicione uma abaixo.",
-    "addStep": "Adicionar etapa",
-    "stepNumber": "Passo {{number}}",
-    "removeStep": "Remover etapa",
-    "confirmRunTitle": "Executar esta macro?",
-    "confirmRunBody": "\"{{name}}\" enviará comandos para {{host}}.",
-    "confirmRunAction": "Executar macro",
-    "stepTypes": {
-      "send": {
-        "label": "Enviar comando",
-        "help": "Digita o texto no terminal, da mesma forma que se você o digitasse."
-      },
-      "wait": {
-        "label": "Aguarde a saída",
-        "help": "Aguarda até que o servidor imprima o texto que você digitou, como uma solicitação de senha."
-      },
-      "delay": {
-        "label": "Pausa",
-        "help": "Aguarda um período de tempo fixo antes da próxima etapa."
-      },
-      "if": {
-        "label": "Se a saída contiver",
-        "help": "Verifica tudo o que o servidor imprimiu até o momento e, em seguida, executa uma das duas ramificações."
-      },
-      "repeat": {
-        "label": "Repita",
-        "help": "Executa os passos internos um número definido de vezes."
-      }
-    },
-    "send": {
-      "text": "Comando ou texto",
-      "textPlaceholder": "systemctl restart nginx",
-      "pressEnter": "Pressione Enter após enviar",
-      "pressEnterHelp": "Desative esta opção para digitar texto sem enviá-lo."
-    },
-    "wait": {
-      "pattern": "Aguarde até que a saída contenha",
-      "patternPlaceholder": "senha:",
-      "timeout": "Desistir depois",
-      "onTimeout": "Se nunca aparecer",
-      "stop": "Pare a macro",
-      "continue": "Continue mesmo assim"
-    },
-    "delay": {
-      "duration": "Aguarde"
-    },
-    "ifStep": {
-      "pattern": "Se a saída contiver",
-      "patternPlaceholder": "Ativo: ativo (em execução)",
-      "then": "Então faça isso",
-      "else": "Caso contrário, faça isto",
-      "emptyBranch": "Sem degraus"
-    },
-    "repeat": {
-      "count": "Número de vezes",
-      "times": "vezes"
-    },
-    "match": {
-      "useRegex": "Combinar com uma expressão regular",
-      "useRegexHelp": "Deixe este campo em branco para que o texto corresponda exatamente ao que foi escrito.",
-      "invalidRegex": "Expressão regular inválida; será interpretada como texto simples."
-    },
-    "seconds": "segundos",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "É necessário um servidor remoto. Conecte um servidor remoto nas Configurações para usar este tipo de conexão."
-  },
-  "plugin": {
-    "name": "Terminal SSH"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/pt_PT.json b/plugins/ssh-terminal/locales/translated/pt_PT.json
deleted file mode 100644
index 3fe6e0357..000000000
--- a/plugins/ssh-terminal/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Adicionar",
-    "arrowDown": "Seta para Baixo",
-    "arrowLeft": "Seta para a Esquerda",
-    "arrowRight": "Seta para a Direita",
-    "arrowUp": "Seta para Cima",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Del",
-    "done": "Concluir",
-    "editQuickKeys": "Editar teclas rápidas",
-    "end": "Fim",
-    "esc": "Esc",
-    "home": "Início",
-    "pageDown": "PgDn",
-    "pageUp": "PgUp",
-    "paste": "Colar",
-    "quickKeyPlaceholder": "ex: sudo ",
-    "quickKeysDesc": "Toque no × para remover. Suporta até 8 caracteres.",
-    "quickKeysTitle": "Teclas Rápidas",
-    "removeQuickKey": "Remover",
-    "resetDefaults": "Restaurar predefinições",
-    "shift": "Shift",
-    "tab": "Tab"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Falha ao ativar o Auto-Tmux",
-    "autoTmuxEnabled": "Auto-Tmux ativado para {{host}}. Aplica-se a partir da ligação seguinte.",
-    "clipboardHttpWarning": "Não foi possível ler a área de transferência. Alguns browsers restringem o acesso à área de transferência fora de HTTPS - experimente Ctrl+V ou utilize HTTPS para aceder ao Termix.",
-    "closeTab": "Fechar",
-    "connecting": "A ligar...",
-    "connectionLost": "Ligação perdida",
-    "connectionRejected": "Ligação rejeitada pelo servidor. Verifique a sua autenticação e configuração de rede.",
-    "connectionTimeout": "Tempo limite da ligação",
-    "enableAutoTmuxAction": "Ativar Auto-Tmux",
-    "hostKeyRejected": "Verificação da chave de host SSH rejeitada. Ligação cancelada.",
-    "linkDialogCopy": "Copiar",
-    "linkDialogOpen": "Abrir",
-    "linkDialogTitle": "Abrir Ligação",
-    "maxReconnectAttemptsReached": "Número máximo de tentativas de restabelecimento de ligação atingido",
-    "noHostSelected": "Nenhum host selecionado",
-    "passwordPromptFillTitle": "Preencher a palavra-passe guardada neste pedido?",
-    "reconnect": "Reconectar",
-    "reconnected": "Ligação restabelecida com sucesso",
-    "reconnecting": "A restabelecer ligação... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Ligação perdida, reconectando...",
-    "searchCaseSensitive": "Caixa de fósforos",
-    "searchClose": "Fechar (Esc)",
-    "searchNext": "Próxima partida (Entrar)",
-    "searchNoResults": "Nenhum resultado",
-    "searchPlaceholder": "Encontrar",
-    "searchPrevious": "Partida anterior (Shift+Enter)",
-    "searchRegex": "Utilizar expressão regular",
-    "searchResultCount": "{{index}} de {{count}}",
-    "searchWholeWord": "Combine a palavra inteira",
-    "sessionExpiredNotice": "A sua sessão anterior em {{host}} expirou após {{minutes}} minutos desligado; o shell e tudo o que estava a ser executado nele foram perdidos. Active o Auto-Tmux neste host para manter as sessões ativas.",
-    "sessionExpiredNoticeNoMinutes": "A sua sessão anterior em {{host}} expirou enquanto estava desligada; o shell e tudo o que estava a ser executado nele foram perdidos. Active o Auto-Tmux neste host para manter as sessões ativas.",
-    "sessionTakenOver": "A sessão foi aberta noutro separador. A restabelecer ligação...",
-    "tmuxAttached": "Clientes anexados",
-    "tmuxAttachedCount": "{{count}} anexado",
-    "tmuxCopyHint": "Ajuste a seleção e prima Enter para copiar para a área de transferência",
-    "tmuxCreateNew": "Iniciar nova sessão",
-    "tmuxDetached": "Desanexado da sessão tmux",
-    "tmuxLastActivity": "Última atividade",
-    "tmuxSessionAttached": "Sessão tmux anexada: {{name}}",
-    "tmuxSessionCreated": "Sessão tmux criada: {{name}}",
-    "tmuxSessionPickerDesc": "Foram encontradas sessões tmux neste host. Selecione uma para retomar ou crie uma nova sessão.",
-    "tmuxSessionPickerTitle": "Sessões tmux",
-    "tmuxTimeDays": "há {{count}} d",
-    "tmuxTimeHours": "há {{count}} h",
-    "tmuxTimeJustNow": "agora mesmo",
-    "tmuxTimeMinutes": "há {{count}} min",
-    "tmuxUnavailable": "O tmux não está instalado no host remoto, a reverter para shell padrão",
-    "tmuxWindowCount": "{{count}} janela",
-    "tmuxWindows": "Janelas",
-    "unknownError": "Ocorreu um erro desconhecido.",
-    "websocketAbnormalClose": "A ligação foi fechada inesperadamente. Isto pode dever-se a um problema de configuração do proxy reverso ou SSL. Verifique os registos do servidor.",
-    "websocketError": "Erro de ligação WebSocket",
-    "clipboardReadFailed": "Erro ao ler da área de transferência. Certifique-se de que as permissões da área de transferência foram concedidas.",
-    "clipboardWriteFailed": "Erro ao copiar para a área de transferência. Certifique-se de que a página é servida via HTTPS ou localhost.",
-    "connected": "Ligado",
-    "totpCodeLabel": "Código de verificação",
-    "duplicateTab": "Aba duplicada",
-    "imageChooseFile": "Escolha um ficheiro de imagem",
-    "imageUploaded": "Imagem carregada: {{path}}",
-    "imageClipboardUnavailable": "Este browser não consegue ler imagens da área de transferência.",
-    "imageClipboardEmpty": "Nenhuma imagem encontrada na área de transferência",
-    "localShell": "Shell do terminal local",
-    "autocompleteHintComplete": "Prima Tab ou Enter para concluir",
-    "autocompleteHintNavigate": "↑↓ para navegar",
-    "autocompleteHintClose": "Prima Esc para fechar"
-  },
-  "terminalToolbar": {
-    "detachTmux": "Desanexar tmux",
-    "detachTmuxDescription": "Desanexar sessão tmux",
-    "dismissError": "Ignorar erro de imagem",
-    "hideToolbar": "Ocultar barra de ferramentas",
-    "image": "Ações de imagem (apenas imagens)",
-    "imageActionFailed": "A ação de imagem falhou",
-    "layout": "Modo de visualização da barra de ferramentas",
-    "layoutExpanded": "Expandido com métricas",
-    "layoutIcon": "Apenas o ícone",
-    "layoutLabeled": "Ícones e rótulos",
-    "moveToolbar": "Mover barra de ferramentas",
-    "moveToolbarHint": "Arraste para reposicionar a barra de ferramentas.",
-    "paste": "Colar imagem",
-    "pasteImage": "Colar imagem da área de transferência (apenas imagens)",
-    "retry": "Repetir",
-    "showToolbar": "Expandir barra",
-    "upload": "Carregar imagem",
-    "uploadImage": "Faça o upload de uma imagem para o host.",
-    "uploadingImage": "A enviar..."
-  },
-  "history": {
-    "noTerminalSelected": "Nenhum terminal selecionado",
-    "noTerminalSelectedHint": "Abra um separador de terminal SSH para ver o histórico de comandos",
-    "searchPlaceholder": "Pesquisar histórico...",
-    "clearAll": "Limpar Tudo",
-    "noHistoryEntries": "Sem entradas no histórico",
-    "trackingDisabled": "O rastreio do histórico está desativado",
-    "trackingDisabledHint": "Ative o Histórico de Comandos no separador Terminal SSH deste host.",
-    "commandCount_one": "{{count}} comando",
-    "commandCount_other": "{{count}} comandos"
-  },
-  "touchInput": {
-    "enabled": "Ativar entrada por toque",
-    "enabledDesc": "Permitir a rolagem com um único dedo nos terminais.",
-    "momentumEnabled": "Ativar o impulso",
-    "momentumEnabledDesc": "Continue a rolar brevemente após deslizar o dedo.",
-    "advanced": "Avançado",
-    "resetDefaults": "Restaurar predefinições",
-    "dragThreshold": "Limiar de arrasto",
-    "maxWheelDelta": "Delta máximo da roda",
-    "momentumSampleWindow": "Janela de amostra de momento",
-    "releaseGracePeriod": "Período de carência para lançamento",
-    "minimumVelocity": "Velocidade mínima",
-    "maximumVelocity": "Velocidade máxima",
-    "maximumDuration": "Duração máxima",
-    "maximumTravel": "Viagem máxima",
-    "decayTime": "Tempo de decaimento",
-    "pixelsPerTick": "Pixels por tick",
-    "maximumFrameInterval": "Intervalo máximo entre fotogramas",
-    "maximumTicksPerFrame": "Número máximo de ticks por frame"
-  },
-  "imageStorage": {
-    "instanceId": "ID da instância da sessão do terminal",
-    "instanceIdDesc": "ID da instância de uma das suas abas de terminal ligadas, utilizada para testar a visibilidade.",
-    "selectedModeUnavailable": "Indisponível",
-    "test": "Testar",
-    "testing": "Testando...",
-    "testFailed": "Falha ao testar o armazenamento de imagens",
-    "testConnected": "A sessão do terminal está ligada.",
-    "testNotConnected": "Nenhuma sessão de terminal ligada com este ID de instância.",
-    "testSelectedMode": "Um upload utilizaria: {{mode}}",
-    "testLocalVisible": "O diretório local está visível a partir do host ligado.",
-    "testLocalNotVisible": "O diretório local NÃO está visível a partir do host ligado."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Entrada por toque",
-        "images": "Armazenamento de imagens",
-        "sessions": "Sessões",
-        "newHosts": "Novos anfitriões"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Persistência de sessão do terminal",
-        "description": "Tempo que um terminal desligado permanece ativo no servidor antes de ser fechado. Mínimo de 1 minuto, máximo de 1440 minutos. Para sessões que necessitem de durar mais do que isso, ative o Auto-Tmux no host."
-      },
-      "commandHistoryEnabled": {
-        "label": "Histórico de Comandos",
-        "description": "Permitir o registo do histórico de comandos. Quando desativado, o histórico não é guardado independentemente das definições por máquina."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "Histórico de comandos para novos hosts",
-        "description": "Se os novos hosts arrancarem com o histórico de comandos ativado."
-      },
-      "imageStorageMode": {
-        "label": "Modo de armazenamento",
-        "description": "Local onde são apresentadas as imagens de terminal coladas e carregadas. As seleções automáticas por ligação, Local e Remota (SFTP), foram corrigidas.",
-        "auto": "Automático",
-        "local": "Local",
-        "remoteSftp": "Remoto (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Diretório local",
-        "description": "Caminho absoluto no backend do Termix onde o modo local grava imagens. Nunca é apresentado após o guardar. Um valor vazio utiliza TERMIX_IMAGE_DIR."
-      },
-      "imageHostPath": {
-        "label": "Caminho do host",
-        "description": "Vista do diretório local recebida pelos agentes de terminal, do lado do host."
-      },
-      "imageTtlMs": {
-        "label": "TTL (ms)",
-        "description": "Tempo de armazenamento de uma imagem carregada, em milissegundos. O valor vazio utiliza TERMIX_IMAGE_TTL_MS ou uma hora."
-      },
-      "imageMaxCount": {
-        "label": "Contagem máxima de imagens",
-        "description": "A maioria das imagens é mantida em simultâneo. O parâmetro vazio utiliza TERMIX_MAX_IMAGE_COUNT ou 100."
-      },
-      "imageMaxBytes": {
-        "label": "Bytes de armazenamento máximo",
-        "description": "A maioria dos bytes das imagens são guardados de uma só vez. Quando vazio, utiliza-se TERMIX_MAX_IMAGE_STORAGE_BYTES ou 5 GiB."
-      },
-      "sessionPersistence": {
-        "label": "Manter sessões após desconexão",
-        "description": "Mantenha um terminal desligado ativo no servidor durante o tempo acima especificado, para que, ao reabrir o separador, a sessão continue a partir do ponto onde parou."
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "Execute os terminais dos novos hosts dentro do tmux para que as sessões sobrevivam a desconexões (requer tmux no host)."
-      },
-      "newHostTheme": {
-        "label": "Tema para novos anfitriões",
-        "description": "O tema do terminal com o qual um novo host inicia."
-      },
-      "newHostFontFamily": {
-        "label": "Fonte para novos anfitriões",
-        "description": "A fonte de terminal com a qual um novo host inicia."
-      },
-      "newHostFontSize": {
-        "label": "Tamanho da fonte para novos hosts",
-        "description": "O tamanho da fonte do terminal com que um novo host é iniciado, em pixéis."
-      },
-      "newHostCursorStyle": {
-        "label": "Estilo de cursor para novos hosts"
-      },
-      "newHostCursorBlink": {
-        "label": "Cursor intermitente para novos hosts"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Ativar a barra de ferramentas do terminal",
-        "description": "Visualizar uma barra de ferramentas de acesso rápido acoplada ao terminal ativo com as ferramentas e estatísticas em tempo real deste host."
-      },
-      "terminalToolbarPosition": {
-        "label": "Posição da barra de ferramentas",
-        "description": "A barra de ferramentas está localizada no terminal. Pode ainda arrastá-la de lá.",
-        "bottom": "Centro inferior",
-        "bottomLeft": "Canto inferior esquerdo",
-        "bottomRight": "Canto inferior direito",
-        "top": "Centro superior",
-        "topLeft": "Canto superior esquerdo",
-        "topRight": "Canto superior direito"
-      },
-      "terminalToolbarStartState": {
-        "label": "Estado inicial da barra de ferramentas",
-        "description": "Se a barra de ferramentas abre expandida ou minimizada quando o terminal se liga.",
-        "expanded": "Expandido",
-        "collapsed": "Minimizado"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Modo de visualização da barra de ferramentas",
-        "description": "Como os botões da barra de ferramentas são apresentados. O último botão utilizado mantém a seleção feita na barra de ferramentas.",
-        "remember": "Último uso",
-        "icon": "Apenas o ícone",
-        "labeled": "Ícones e rótulos",
-        "expanded": "Expandido com estatísticas"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Mostrar estatísticas ao vivo",
-        "description": "Exibir estatísticas do host ao vivo acima dos botões da barra de ferramentas no modo expandido."
-      },
-      "terminalToolbarFade": {
-        "label": "Desvanecer quando ocioso",
-        "description": "A barra de ferramentas desaparece gradualmente até que passe o cursor sobre ela."
-      },
-      "enableCommandHistory": {
-        "label": "Histórico de Comandos",
-        "description": "Gravar comandos executados neste terminal para histórico e autocompletar"
-      },
-      "enableTerminal": {
-        "label": "Ativar Terminal",
-        "description": "Disponibilize um terminal SSH para este host."
-      },
-      "inheritAppearance": {
-        "label": "Usar as configurações padrão do utilizador"
-      },
-      "theme": {
-        "label": "Tema"
-      },
-      "cursorBlink": {
-        "label": "cursor intermitente"
-      },
-      "cursorStyle": {
-        "label": "Estilo do cursor"
-      },
-      "fontSize": {
-        "label": "Tamanho da fonte"
-      },
-      "fontFamily": {
-        "label": "Fonte"
-      },
-      "scrollback": {
-        "label": "Voltar ao início"
-      },
-      "letterSpacing": {
-        "label": "Espaçamento entre letras"
-      },
-      "lineHeight": {
-        "label": "Altura da linha"
-      },
-      "bellStyle": {
-        "label": "Sino"
-      },
-      "minimumContrastRatio": {
-        "label": "Relação de contraste mínima"
-      },
-      "backgroundImage": {
-        "label": "Imagem de fundo"
-      },
-      "backgroundImageOpacity": {
-        "label": "Opacidade da imagem de fundo"
-      },
-      "customThemeColors": {
-        "label": "Cores de tema personalizadas"
-      },
-      "rightClickSelectsWord": {
-        "label": "Clicar com o botão direito do rato seleciona a palavra."
-      },
-      "macOptionIsMeta": {
-        "label": "A opção é Meta"
-      },
-      "fastScrollModifier": {
-        "label": "Tecla de deslocamento rápido"
-      },
-      "fastScrollSensitivity": {
-        "label": "Velocidade de rolagem rápida"
-      },
-      "backspaceMode": {
-        "label": "Apagar"
-      },
-      "autoMosh": {
-        "label": "Mosh automático"
-      },
-      "moshCommand": {
-        "label": "Comando Mosh"
-      },
-      "autoTmux": {
-        "label": "tmux automático"
-      },
-      "useSSHTitle": {
-        "label": "Utilize o título SSH"
-      },
-      "syntaxHighlighting": {
-        "label": "Realce de sintaxe"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Categorias de realce de sintaxe"
-      },
-      "linkClickBehavior": {
-        "label": "Clique no link"
-      },
-      "localEcho": {
-        "label": "Eco local"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Ofereça-se para preencher os campos da palavra-passe."
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Preencha os prompts do sudo"
-      },
-      "autoReconnect": {
-        "label": "Reconectar automaticamente"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Autocompletar comandos",
-        "description": "Exibir a funcionalidade de autocompletar enquanto escreve ao premir a tecla Tab."
-      },
-      "localEcho": {
-        "label": "Eco Local",
-        "description": "Reduza a latência de entrada percebida utilizando a previsão segura de pressão de teclas local."
-      },
-      "linkClickBehavior": {
-        "label": "Clique em links do terminal",
-        "description": "Comportamento predefinido ao clicar em links no terminal"
-      },
-      "customThemes": {
-        "label": "Temas guardados"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Terminal local"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Utilize sessões de terminal ao vivo",
-      "description": "Permite que outras funcionalidades, como a partilha e a gravação de sessões, cheguem às suas sessões de terminal em tempo real."
-    },
-    "history": {
-      "title": "Leia o histórico de comandos",
-      "description": "Permite que outras funcionalidades, como o assistente de IA, leiam o seu histórico de comandos."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Terminal",
-    "addHost": "Adicionar máquina",
-    "applyGlobalThemeTooltip": "Aplique este tema",
-    "backgroundImageDesc": "URL opcional para uma imagem de fundo do terminal",
-    "backgroundImageLabel": "URL da Imagem de Fundo",
-    "backgroundImageOpacityLabel": "Opacidade da Imagem de Fundo",
-    "backspaceMode": "Modo de retrocesso",
-    "backspaceModeControlH": "Controlo-H (BS)",
-    "backspaceModeLabel": "Modo da Tecla Retrocesso",
-    "backspaceModeNormal": "Normal (DEL)",
-    "behaviorAndAdvanced": "Comportamento e Avançado",
-    "bellStyle": "Estilo da campainha",
-    "bellStyleBoth": "Ambos",
-    "bellStyleLabel": "Estilo do Alerta Sonoro",
-    "bellStyleNone": "Nenhuma",
-    "bellStyleSound": "Som",
-    "bellStyleVisual": "Visual",
-    "colorTheme": "Tema de Cores",
-    "cursorBlink": "Piscar do cursor",
-    "cursorBlinking": "Piscar do Cursor",
-    "cursorBlinkingDesc": "Ativar a animação de piscar para o cursor do terminal",
-    "cursorStyle": "Estilo do cursor",
-    "cursorStyleBar": "Bar",
-    "cursorStyleBlock": "Bloco",
-    "cursorStyleLabel": "Estilo do Cursor",
-    "cursorStyleUnderline": "Sublinhado",
-    "customThemeAnsiColors": "Cores ANSI",
-    "customThemeBackground": "Fundo",
-    "customThemeBlack": "Preto",
-    "customThemeBlue": "Azul",
-    "customThemeBrightBlack": "Preto Brilhante",
-    "customThemeBrightBlue": "Azul Brilhante",
-    "customThemeBrightCyan": "Ciano Brilhante",
-    "customThemeBrightGreen": "Verde Brilhante",
-    "customThemeBrightMagenta": "Magenta Brilhante",
-    "customThemeBrightRed": "Vermelho Brilhante",
-    "customThemeBrightWhite": "Branco Brilhante",
-    "customThemeBrightYellow": "Amarelo Brilhante",
-    "customThemeColors": "Cores Personalizadas",
-    "customThemeCursor": "Cursor",
-    "customThemeCursorAccent": "Destaque do Cursor",
-    "customThemeCyan": "Ciano",
-    "customThemeForeground": "Primeiro Plano",
-    "customThemeGreen": "Verde",
-    "customThemeMagenta": "Magenta",
-    "customThemeRed": "Vermelho",
-    "customThemeResetTooltip": "Repor predefinições",
-    "customThemeSelection": "Seleção",
-    "customThemeWhite": "Branco",
-    "customThemeYellow": "Amarelo",
-    "deleteGlobalThemeTooltip": "Apagar este tema",
-    "docsLink": "Ver documentação",
-    "enableAutoMosh": "Ativar Auto-Mosh",
-    "enableAutoMoshDesc": "Preferir Mosh a SSH, se disponível",
-    "enableAutoTmux": "Ativar Auto-Tmux",
-    "enableAutoTmuxDesc": "Mantenha o seu shell e tudo o que nele está a ser executado em funcionamento mesmo após desconexões e reinicializações do browser, executando o comando dentro do tmux (o tmux necessita de estar instalado no host).",
-    "fastScrollModifier": "Modificador de deslocamento rápido",
-    "fastScrollModifierAlt": "Alt",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Modificador de deslocamento rápido",
-    "fastScrollModifierShift": "Shift",
-    "fastScrollSensitivity": "Sensibilidade do deslocamento rápido",
-    "fastScrollSensitivityLabel": "Sensibilidade do deslocamento rápido",
-    "fontFamily": "Família da fonte",
-    "fontFamilyCustomHint": "Escolha uma fonte incluída ou selecione \"Personalizada\" e introduza o nome exato de uma fonte já instalada no seu sistema (por exemplo, MesloLGS NF, Noto Sans Mono). O Termix não instala fontes automaticamente; instale-as primeiro no seu sistema operativo.",
-    "fontFamilyCustomOption": "Personalizado...",
-    "fontFamilyCustomPlaceholder": "Nome exato da fonte, por exemplo, MesloLGS NF",
-    "fontFamilyLabel": "Família da Fonte",
-    "fontSize": "Tamanho da fonte",
-    "fontSizeLabel": "Tamanho da Fonte",
-    "hostNotFound": "Host não encontrado",
-    "letterSpacing": "Espaçamento de letras",
-    "letterSpacingPx": "Espaçamento entre Letras (px)",
-    "lineHeight": "Altura da linha",
-    "lineHeightLabel": "Altura da Linha",
-    "linkClickBehaviorConfirm": "Mostrar pop-up para abrir ou copiar",
-    "linkClickBehaviorDesc": "Controla o que acontece ao clicar numa ligação no terminal. Use 'Predefinido' para seguir a definição da aplicação.",
-    "linkClickBehaviorDirect": "Abrir diretamente",
-    "linkClickBehaviorLabel": "Comportamento ao clicar em ligações",
-    "loadingHost": "A carregar o host...",
-    "localEchoAuto": "Automático",
-    "localEchoDesc": "Preveja sequências de teclas seguras e imprimíveis localmente em ligações lentas. Os avisos de palavra-passe e as entradas de controlo nunca são repetidos.",
-    "localEchoLabel": "Eco Local",
-    "localEchoOff": "Desativado",
-    "localEchoOn": "Sempre ligado",
-    "macOptionIsMetaLabel": "A tecla Option envia meta",
-    "macOptionIsMetaShortDesc": "Desative a digitação de caracteres especiais (como @ ou |) com a tecla Option/Alt no macOS em vez de enviar Meta",
-    "moshCommand": "Comando MOSH",
-    "moshCommandLabel": "Comando Mosh",
-    "noSavedThemes": "Ainda não há temas guardados.",
-    "none": "Nenhum",
-    "passwordPromptAutoFillDesc": "Ofereça a opção de preencher a palavra-passe guardada quando o terminal o solicitar. Desative para que o preenchimento automático de palavras-passe neste host seja desativado.",
-    "passwordPromptAutoFillLabel": "Oferecer preenchimento automático de palavras-passe",
-    "autoReconnectLabel": "Reconexão automática",
-    "autoReconnectDesc": "Volta a ligar-se automaticamente quando a ligação SSH cai, como após uma interrupção na rede ou suspensão. Mantém o histórico de rolagem.",
-    "rightClickSelectsWord": "Clique direito seleciona palavra",
-    "rightClickSelectsWordLabel": "Clique Direito Seleciona Palavra",
-    "rightClickSelectsWordShortDesc": "Selecionar a palavra sob o cursor ao clicar com o botão direito",
-    "saveAsGlobalTheme": "Guardar como tema global",
-    "saveGlobalThemeError": "Falha ao guardar o tema",
-    "saveGlobalThemeNamePrompt": "Introduza um nome para este tema.",
-    "saveGlobalThemeSuccess": "Tema guardado",
-    "savedThemesLabel": "Temas guardados",
-    "scrollbackBufferLabel": "Buffer de Retrocesso",
-    "scrollbackMaxLines": "Número máximo de linhas guardadas no histórico",
-    "sudoPasswordAutoFill": "Preenchimento Automático da Palavra-passe Sudo",
-    "sudoPasswordAutoFillDesc": "Armazenar uma palavra-passe sudo para que as métricas do host, prompts do terminal e outros possam executar comandos com privilégios automaticamente.",
-    "sudoPasswordAutoFillLabel": "Preenchimento automático da palavra-passe sudo",
-    "syntaxCategoryIpAddresses": "Endereços IP",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Níveis de Registo",
-    "syntaxCategoryLogLevelsDesc": "erro, aviso, info, depuração, fatal",
-    "syntaxCategoryNumbers": "Números com Rótulo",
-    "syntaxCategoryNumbersDesc": "port 8080, exit 1, status 404",
-    "syntaxCategoryPaths": "Caminhos de Ficheiros",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "Marcas Temporais",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 2024-01-15",
-    "syntaxCategoryUrls": "URLs",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "Colorir a saída do terminal (erros, caminhos, IPs, marcas temporais)",
-    "syntaxHighlightingLabel": "Realce de Sintaxe",
-    "terminalAppearance": "Aparência do Terminal",
-    "theme": "Tema",
-    "themePreview": "Pré-visualização do tema",
-    "useSSHTitleDesc": "Atualizar o título do separador a partir do título da janela do shell em vez do nome do host",
-    "useSSHTitleLabel": "Usar o Título da Janela SSH",
-    "enableTunnel": "Ativar Túnel",
-    "enableFileManager": "Ativar Gestor de Ficheiros",
-    "enableDocker": "Ativar Docker",
-    "startupSnippet": "Snippet de arranque",
-    "quickActions": "Ações rápidas",
-    "proxmoxLastSyncStatus": {
-      "success": "Sucesso"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} ignorado (nenhum IP encontrado)",
-    "proxmoxStatsUrlCopied": "URL das estatísticas do Proxmox copiado para a área de transferência",
-    "rdpUrlCopied": "URL RDP copiado",
-    "vncUrlCopied": "URL VNC copiado",
-    "filterAuthStepca": "Etapa CA",
-    "guac": {
-      "noCredential": "Sem credencial (credenciais diretas abaixo)",
-      "authTypeDirect": "Direta",
-      "authTypeCredential": "Credencial",
-      "authTypeNone": "Nenhuma",
-      "recordingPath": "Caminho da gravação",
-      "recordingName": "Nome da gravação",
-      "saveHostFirst": "Guarde o host primeiro.",
-      "sharingOptionsAfterSave": "As opções de partilha estão disponíveis após o host ter sido guardado.",
-      "permissionLevel": "Nível de Permissão",
-      "typeHeader": "Tipo",
-      "targetHeader": "Destino",
-      "permissionHeader": "Permissão",
-      "cancelBtn": "Cancelar",
-      "savingBtn": "A guardar...",
-      "updateHostBtn": "Atualizar Host",
-      "addHostBtn": "Adicionar Host"
-    },
-    "filterAuthVault": "Cofre"
-  },
-  "nav": {
-    "history": "Histórico",
-    "localTerminal": "Terminal local",
-    "sshTools": "Ferramentas SSH",
-    "terminal": "Terminal",
-    "macros": "Macros"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Digite aqui para difundir as teclas premidas...",
-    "copyOnSelect": "Copiar texto selecionado automaticamente",
-    "enableRightClickCopyPaste": "Ativar copiar/colar com clique direito",
-    "fillPassword": "Preencher palavra-passe",
-    "fillPasswordMissing": "Nenhuma palavra-passe guardada para {{count}} terminal(is) selecionado(s)",
-    "fillPasswordSuccess": "Palavra-passe preenchida em {{count}} terminal(is)",
-    "keyRecordingTitle": "Gravação de Teclas",
-    "noTerminalTabsOpen": "Nenhum separador de terminal aberto",
-    "recordToTerminals": "Gravar para terminais",
-    "selectAll": "Todas",
-    "selectNone": "Nenhuma",
-    "selectTerminalsAbove": "Selecionar terminais acima",
-    "settingsTitle": "Definições",
-    "startRecording": "Iniciar Gravação",
-    "stopRecording": "Parar Gravação"
-  },
-  "keybindings": {
-    "copy": "Copiar seleção",
-    "paste": "Colar",
-    "sendControlCode": "Enviar sinal Ctrl+letra",
-    "sendText": "Enviar mensagem de texto",
-    "controlCodeLabel": "Carta",
-    "textLabel": "Texto a enviar",
-    "appendEnterLabel": "Prima Enter após enviar",
-    "clipboardPermissionNote": "Pode solicitar permissão para aceder à área de transferência na primeira utilização em alguns navegadores.",
-    "textRequired": "Introduza o texto que pretende enviar.",
-    "controlCodeRequired": "Introduza uma única letra para o código de controlo.",
-    "builtIn": {
-      "copyCtrlC": "Copiar seleção (Ctrl+C, apenas quando o texto está selecionado)",
-      "copyCtrlShiftC": "Copiar seleção (Ctrl+Shift+C)",
-      "copyCmdC": "Copiar seleção (Cmd+C)",
-      "pasteCtrlShiftV": "Colar da área de transferência (Ctrl+Shift+V)",
-      "ctrlW": "Enviar Ctrl+W para o shell (impede o fecho do separador do browser)",
-      "ctrlT": "Enviar Ctrl+T para o shell (impede a abertura de novos separadores do browser).",
-      "ctrlN": "Enviar Ctrl+N para o shell (impede a abertura da janela do browser).",
-      "ctrlQ": "Enviar Ctrl+Q para o shell (impede o fecho do browser)"
-    }
-  },
-  "macros": {
-    "title": "Macros",
-    "description": "Execute uma série de comandos guardados num terminal e reaja ao que o servidor envia de volta.",
-    "target": "Destino",
-    "noTerminal": "Nenhum terminal aberto",
-    "empty": "Ainda não existem macros.",
-    "emptyHint": "Crie uma macro para automatizar um fluxo de trabalho no terminal, como por exemplo, iniciar sessão, reiniciar um serviço ou responder a pedidos.",
-    "create": "Nova macro",
-    "back": "Voltar às macros",
-    "name": "Nome",
-    "namePlaceholder": "Reinicie o servidor web.",
-    "nameRequired": "Dê um nome à macro antes de guardar.",
-    "descriptionLabel": "Descrição",
-    "descriptionPlaceholder": "O que faz esta macro (opcional)",
-    "unsaved": "Alterações não guardadas",
-    "save": "Guardar",
-    "saved": "Macro salvo",
-    "saveFailed": "Não foi possível guardar a macro.",
-    "delete": "Eliminar",
-    "deleteTitle": "Apagar esta macro?",
-    "deleteBody": "\"{{name}}\" será eliminado permanentemente. Esta ação não pode ser anulada.",
-    "deleted": "Macro excluída",
-    "cancel": "Cancelar",
-    "run": "Executar",
-    "stop": "Stop",
-    "running": "Corrida...",
-    "completed": "Macro finalizado",
-    "failed": "A macro falhou",
-    "loadFailed": "Não foi possível carregar as macros",
-    "needTerminal": "Primeiro, abra e ligue um terminal.",
-    "noSteps": "Esta macro ainda não tem etapas. Adicione uma abaixo.",
-    "addStep": "Adicionar etapa",
-    "stepNumber": "Passo {{number}}",
-    "removeStep": "Remover etapa",
-    "confirmRunTitle": "Executar esta macro?",
-    "confirmRunBody": "\"{{name}}\" enviará comandos para {{host}}.",
-    "confirmRunAction": "Executar macro",
-    "stepTypes": {
-      "send": {
-        "label": "Enviar comando",
-        "help": "Digita o texto no terminal, da mesma forma que se o digitasse."
-      },
-      "wait": {
-        "label": "Aguarde a saída",
-        "help": "Aguarda até que o servidor imprima o texto que introduziu, como por exemplo um pedido de palavra-passe."
-      },
-      "delay": {
-        "label": "Pausa",
-        "help": "Aguarda um período de tempo fixo antes da etapa seguinte."
-      },
-      "if": {
-        "label": "Se a saída contiver",
-        "help": "Verifica tudo o que o servidor imprimiu até à data e, em seguida, executa uma das duas ramificações."
-      },
-      "repeat": {
-        "label": "Repetir",
-        "help": "Executa os passos internos um número definido de vezes."
-      }
-    },
-    "send": {
-      "text": "Comando ou texto",
-      "textPlaceholder": "systemctl restart nginx",
-      "pressEnter": "Prima Enter após enviar",
-      "pressEnterHelp": "Desative esta opção para digitar texto sem o enviar."
-    },
-    "wait": {
-      "pattern": "Aguarde até que a saída contenha",
-      "patternPlaceholder": "palavra-passe:",
-      "timeout": "Desistir depois",
-      "onTimeout": "Se nunca aparecer",
-      "stop": "Pare a macro",
-      "continue": "Continue mesmo assim"
-    },
-    "delay": {
-      "duration": "Aguarde"
-    },
-    "ifStep": {
-      "pattern": "Se a saída contiver",
-      "patternPlaceholder": "Ativo: ativo (em execução)",
-      "then": "Então faça isso",
-      "else": "Caso contrário, faça-o",
-      "emptyBranch": "Sem degraus"
-    },
-    "repeat": {
-      "count": "Número de vezes",
-      "times": "vezes"
-    },
-    "match": {
-      "useRegex": "Combinar com uma expressão regular",
-      "useRegexHelp": "Deixe este campo em branco para que o texto corresponda exatamente ao que foi escrito.",
-      "invalidRegex": "Expressão regular inválida; será interpretada como texto simples."
-    },
-    "seconds": "segundos",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "É necessário um servidor remoto. Ligue um servidor remoto nas Definições para utilizar este tipo de ligação."
-  },
-  "plugin": {
-    "name": "Terminal SSH"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/ro_RO.json b/plugins/ssh-terminal/locales/translated/ro_RO.json
deleted file mode 100644
index 37ad5bea9..000000000
--- a/plugins/ssh-terminal/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Adăuga",
-    "arrowDown": "Săgeată în jos",
-    "arrowLeft": "Săgeată stânga",
-    "arrowRight": "Săgeată dreapta",
-    "arrowUp": "Săgeată în sus",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Șterge",
-    "done": "Făcut",
-    "editQuickKeys": "Editați tastele rapide",
-    "end": "Sfârşit",
-    "esc": "Esc",
-    "home": "Acasă",
-    "pageDown": "Pagină următoare",
-    "pageUp": "PagUp",
-    "paste": "Pastă",
-    "quickKeyPlaceholder": "de exemplu sudo ",
-    "quickKeysDesc": "Atingeți × pentru a elimina. Acceptă până la 8 caractere.",
-    "quickKeysTitle": "Taste rapide",
-    "removeQuickKey": "Elimina",
-    "resetDefaults": "Resetare la setările implicite",
-    "shift": "Schimbare",
-    "tab": "Tab"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Nu s-a putut activa Auto-Tmux",
-    "autoTmuxEnabled": "Auto-Tmux activat pentru {{host}}. Se aplică de la următoarea conexiune.",
-    "clipboardHttpWarning": "Nu s-a putut citi clipboard-ul. Unele browsere restricționează accesul la clipboard în afara HTTPS - încercați Ctrl+V sau serviți Termix prin HTTPS.",
-    "closeTab": "Aproape",
-    "connecting": "Se conectează...",
-    "connectionLost": "Conexiune pierdută",
-    "connectionRejected": "Conexiune respinsă de server. Vă rugăm să verificați autentificarea și configurația rețelei.",
-    "connectionTimeout": "Expirare conexiune",
-    "enableAutoTmuxAction": "Activează Auto-Tmux",
-    "hostKeyRejected": "Verificarea cheii gazdei SSH a fost respinsă. Conexiunea a fost anulată.",
-    "linkDialogCopy": "Copie",
-    "linkDialogOpen": "Deschide",
-    "linkDialogTitle": "Deschideți linkul",
-    "maxReconnectAttemptsReached": "S-a atins numărul maxim de încercări de reconectare",
-    "noHostSelected": "Nicio gazdă selectată",
-    "passwordPromptFillTitle": "Introduceți parola salvată în această solicitare?",
-    "reconnect": "Reconectați-vă",
-    "reconnected": "Reconectare cu succes",
-    "reconnecting": "Se reconecta... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Conexiune pierdută, se reconectare...",
-    "searchCaseSensitive": "Potrivire caz",
-    "searchClose": "Închide (Escape)",
-    "searchNext": "Următorul meci (Introduce)",
-    "searchNoResults": "Niciun rezultat",
-    "searchPlaceholder": "Găsi",
-    "searchPrevious": "Potrivire anterioară (Shift+Enter)",
-    "searchRegex": "Folosește expresia regulată",
-    "searchResultCount": "{{index}} din {{count}}",
-    "searchWholeWord": "Potrivire cuvânt întreg",
-    "sessionExpiredNotice": "Sesiunea anterioară de pe {{host}} a expirat după {{minutes}} minute de deconectare; shell-ul și tot ce rulează în el au dispărut. Activați Auto-Tmux pe această gazdă pentru a menține sesiunile active.",
-    "sessionExpiredNoticeNoMinutes": "Sesiunea anterioară pe {{host}} a expirat în timp ce era deconectat; shell-ul și tot ce rulează în el au dispărut. Activați Auto-Tmux pe această gazdă pentru a menține sesiunile active.",
-    "sessionTakenOver": "Sesiunea a fost deschisă într-o altă filă. Se reconectare...",
-    "tmuxAttached": "Clienți atașați",
-    "tmuxAttachedCount": "{{count}} atașat",
-    "tmuxCopyHint": "Ajustați selecția și apăsați Enter pentru a copia în clipboard",
-    "tmuxCreateNew": "Începeți o sesiune nouă",
-    "tmuxDetached": "Detașat de sesiunea tmux",
-    "tmuxLastActivity": "Ultima activitate",
-    "tmuxSessionAttached": "sesiune tmux atașată: {{name}}",
-    "tmuxSessionCreated": "Sesiune tmux creată: {{name}}",
-    "tmuxSessionPickerDesc": "Au fost găsite sesiuni tmux existente pe această gazdă. Selectați una pentru a o reatașa sau pentru a crea o sesiune nouă.",
-    "tmuxSessionPickerTitle": "Sesiuni tmux",
-    "tmuxTimeDays": "{{count}}zile în urmă",
-    "tmuxTimeHours": "{{count}}acum o oră",
-    "tmuxTimeJustNow": "chiar acum",
-    "tmuxTimeMinutes": "{{count}}acum câteva minute",
-    "tmuxUnavailable": "tmux nu este instalat pe gazda la distanță, revenind la shell-ul standard",
-    "tmuxWindowCount": "fereastră {{count}}",
-    "tmuxWindows": "Ferestre",
-    "unknownError": "A apărut o eroare necunoscută",
-    "websocketAbnormalClose": "Conexiunea s-a închis pe neașteptate. Acest lucru se poate datora unei probleme de configurare a proxy-ului invers sau a SSL. Vă rugăm să verificați jurnalele serverului.",
-    "websocketError": "Eroare de conexiune WebSocket",
-    "clipboardReadFailed": "Citirea din clipboard nu a reușit. Asigurați-vă că permisiunile de acces la clipboard sunt acordate.",
-    "clipboardWriteFailed": "Copierea în clipboard nu a reușit. Asigurați-vă că pagina este servită prin HTTPS sau localhost.",
-    "connected": "Conectat",
-    "totpCodeLabel": "Cod de verificare",
-    "duplicateTab": "Filă duplicată",
-    "imageChooseFile": "Alegeți un fișier de imagine",
-    "imageUploaded": "Imagine încărcată: {{path}}",
-    "imageClipboardUnavailable": "Acest browser nu poate citi imagini din clipboard",
-    "imageClipboardEmpty": "Nu s-a găsit nicio imagine în clipboard",
-    "localShell": "Shell terminal local",
-    "autocompleteHintComplete": "Tab sau Enter pentru a finaliza",
-    "autocompleteHintNavigate": "↑↓ pentru navigare",
-    "autocompleteHintClose": "Esc pentru a închide"
-  },
-  "terminalToolbar": {
-    "detachTmux": "Detașați tmux",
-    "detachTmuxDescription": "Detașați sesiunea tmux",
-    "dismissError": "Eroare de închidere a imaginii",
-    "hideToolbar": "Ascunde bara de instrumente",
-    "image": "Acțiuni de imagine (doar imagini)",
-    "imageActionFailed": "Acțiunea imaginii a eșuat",
-    "layout": "Mod de afișare a barei de instrumente",
-    "layoutExpanded": "Extins cu valori metrice",
-    "layoutIcon": "Numai pictogramă",
-    "layoutLabeled": "Pictograme și etichete",
-    "moveToolbar": "Mută bara de instrumente",
-    "moveToolbarHint": "Trageți pentru a repoziționa bara de instrumente",
-    "paste": "Lipiți imaginea",
-    "pasteImage": "Lipiți imaginea din clipboard (doar imagini)",
-    "retry": "Reîncercați",
-    "showToolbar": "Extindeți bara de instrumente",
-    "upload": "Încărcați imaginea",
-    "uploadImage": "Încărcați o imagine către gazdă",
-    "uploadingImage": "Se încarcă..."
-  },
-  "history": {
-    "noTerminalSelected": "Niciun terminal selectat",
-    "noTerminalSelectedHint": "Deschideți o filă de terminal SSH pentru a vizualiza istoricul comenzilor sale",
-    "searchPlaceholder": "Istoricul căutărilor...",
-    "clearAll": "Ștergeți tot",
-    "noHistoryEntries": "Nicio intrare în istoric",
-    "trackingDisabled": "Urmărirea istoricului este dezactivată",
-    "trackingDisabledHint": "Activează Istoricul comenzilor în fila Terminal SSH a acestei gazde.",
-    "commandCount_one": "Comanda {{count}}",
-    "commandCount_other": "Comenzi {{count}}"
-  },
-  "touchInput": {
-    "enabled": "Activează introducerea tactilă",
-    "enabledDesc": "Permiteți derularea tactilă cu un singur deget în terminale",
-    "momentumEnabled": "Activează impulsul",
-    "momentumEnabledDesc": "Continuați derularea scurtă după o glisare",
-    "advanced": "Avansat",
-    "resetDefaults": "Resetare la setările implicite",
-    "dragThreshold": "Pragul de rezistență",
-    "maxWheelDelta": "Delta maximă a roții",
-    "momentumSampleWindow": "Fereastra de eșantionare a impulsului",
-    "releaseGracePeriod": "Perioada de grație a lansării",
-    "minimumVelocity": "Viteză minimă",
-    "maximumVelocity": "Viteză maximă",
-    "maximumDuration": "Durată maximă",
-    "maximumTravel": "Cursă maximă",
-    "decayTime": "Timp de descreștere",
-    "pixelsPerTick": "Pixeli per bifă",
-    "maximumFrameInterval": "Interval maxim de cadre",
-    "maximumTicksPerFrame": "Număr maxim de ticuri per cadru"
-  },
-  "imageStorage": {
-    "instanceId": "ID-ul instanței sesiunii terminale",
-    "instanceIdDesc": "ID-ul instanței uneia dintre filele terminalului conectat, folosit pentru a testa vizibilitatea.",
-    "selectedModeUnavailable": "Indisponibil",
-    "test": "Test",
-    "testing": "Testare...",
-    "testFailed": "Nu s-a putut testa stocarea imaginilor",
-    "testConnected": "Sesiunea terminalului este conectată.",
-    "testNotConnected": "Nicio sesiune de terminal conectată cu acest ID de instanță.",
-    "testSelectedMode": "O încărcare ar folosi: {{mode}}",
-    "testLocalVisible": "Directorul local este vizibil de pe gazda conectată.",
-    "testLocalNotVisible": "Directorul local NU este vizibil de pe gazda conectată."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Intrare tactilă",
-        "images": "Stocarea imaginilor",
-        "sessions": "Sesiuni",
-        "newHosts": "Gazde noi"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Persistența sesiunii terminale",
-        "description": "Cât timp este menținut activ pe server un terminal deconectat înainte de a fi închis. Min 1, max 1440 de minute. Pentru sesiunile care trebuie să depășească această durată, activați Auto-Tmux pe gazdă."
-      },
-      "commandHistoryEnabled": {
-        "label": "Istoricul comenzilor",
-        "description": "Permite înregistrarea istoricului comenzilor. Când este dezactivată, istoricul nu este salvat, indiferent de setările pentru fiecare gazdă."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "Istoricul comenzilor pentru gazde noi",
-        "description": "Dacă noile gazde încep cu istoricul comenzilor activat."
-      },
-      "imageStorageMode": {
-        "label": "Mod de stocare",
-        "description": "Unde sunt scrise imaginile terminalului lipite și încărcate. Selecțiile automate prin conexiune, Local și Remote (SFTP) sunt fixe.",
-        "auto": "Auto",
-        "local": "Local",
-        "remoteSftp": "La distanță (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Director local",
-        "description": "Calea absolută pe backend-ul Termix unde modul local scrie imagini. Nu este afișată niciodată după salvare. O valoare goală folosește TERMIX_IMAGE_DIR."
-      },
-      "imageHostPath": {
-        "label": "Calea gazdă",
-        "description": "Vizualizarea din partea gazdei a directorului local pe care îl primesc agenții terminalului."
-      },
-      "imageTtlMs": {
-        "label": "TTL (ms)",
-        "description": "Cât timp este păstrată o imagine încărcată, în milisecunde. Valoarea \"gol\" folosește TERMIX_IMAGE_TTL_MS sau o oră."
-      },
-      "imageMaxCount": {
-        "label": "Număr maxim de imagini",
-        "description": "Majoritatea imaginilor sunt păstrate simultan. Valoarea goală folosește TERMIX_MAX_IMAGE_COUNT sau 100."
-      },
-      "imageMaxBytes": {
-        "label": "Capacitate maximă de stocare în octeți",
-        "description": "Majoritatea octeților de imagini sunt păstrați simultan. Spațiul gol utilizează TERMIX_MAX_IMAGE_STORAGE_BYTES sau 5 GiB."
-      },
-      "sessionPersistence": {
-        "label": "Păstrați sesiunile după deconectare",
-        "description": "Mențineți un terminal deconectat activ pe server pentru timpul indicat mai sus, astfel încât redeschiderea filei sale să reia de unde a rămas."
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "Rulează terminalele noilor gazde în interiorul tmux, astfel încât sesiunile să supraviețuiască deconectărilor (necesită tmux pe gazdă)"
-      },
-      "newHostTheme": {
-        "label": "Temă pentru gazde noi",
-        "description": "Tema terminalului cu care începe o nouă gazdă."
-      },
-      "newHostFontFamily": {
-        "label": "Font pentru gazde noi",
-        "description": "Fontul terminalului cu care începe o nouă gazdă."
-      },
-      "newHostFontSize": {
-        "label": "Dimensiunea fontului pentru gazdele noi",
-        "description": "Dimensiunea fontului terminalului cu care începe o nouă gazdă, în pixeli."
-      },
-      "newHostCursorStyle": {
-        "label": "Stilul cursorului pentru gazde noi"
-      },
-      "newHostCursorBlink": {
-        "label": "Cursor intermitent pentru gazde noi"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Activează bara de instrumente Terminal",
-        "description": "Afișează o bară de instrumente cu acces rapid atașată la terminalul activ pentru instrumentele și statisticile live ale acestei gazde"
-      },
-      "terminalToolbarPosition": {
-        "label": "Poziția barei de instrumente",
-        "description": "Unde se află bara de instrumente în terminal. O puteți trage în continuare de acolo.",
-        "bottom": "Centru jos",
-        "bottomLeft": "Stânga jos",
-        "bottomRight": "Dreapta jos",
-        "top": "Centru sus",
-        "topLeft": "Stânga sus",
-        "topRight": "Dreapta sus"
-      },
-      "terminalToolbarStartState": {
-        "label": "Starea de pornire a barei de instrumente",
-        "description": "Dacă bara de instrumente se deschide extinsă sau minimizată atunci când terminalul se conectează",
-        "expanded": "Extins",
-        "collapsed": "Minimizat"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Mod de afișare a barei de instrumente",
-        "description": "Cum sunt afișate butoanele barei de instrumente. Ultima utilizare păstrează tot ce ați selectat în bara de instrumente.",
-        "remember": "Ultima utilizare",
-        "icon": "Numai pictogramă",
-        "labeled": "Pictograme și etichete",
-        "expanded": "Extins cu statistici"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Afișați statistici live",
-        "description": "Afișează statisticile gazdei live deasupra butoanelor barei de instrumente în modul extins"
-      },
-      "terminalToolbarFade": {
-        "label": "Estompare în timpul inactivității",
-        "description": "Atenuează bara de instrumente până când treci cu mouse-ul peste ea"
-      },
-      "enableCommandHistory": {
-        "label": "Istoricul comenzilor",
-        "description": "Înregistrați comenzile executate în acest terminal pentru istoric și completare automată"
-      },
-      "enableTerminal": {
-        "label": "Activează terminalul",
-        "description": "Oferiți un terminal SSH pentru această gazdă."
-      },
-      "inheritAppearance": {
-        "label": "Folosește setările implicite ale utilizatorului"
-      },
-      "theme": {
-        "label": "Temă"
-      },
-      "cursorBlink": {
-        "label": "Cursor intermitent"
-      },
-      "cursorStyle": {
-        "label": "Stilul cursorului"
-      },
-      "fontSize": {
-        "label": "Dimensiunea fontului"
-      },
-      "fontFamily": {
-        "label": "Font"
-      },
-      "scrollback": {
-        "label": "Derulare înapoi"
-      },
-      "letterSpacing": {
-        "label": "Spațierea literelor"
-      },
-      "lineHeight": {
-        "label": "Înălțimea liniei"
-      },
-      "bellStyle": {
-        "label": "Clopot"
-      },
-      "minimumContrastRatio": {
-        "label": "Raport minim de contrast"
-      },
-      "backgroundImage": {
-        "label": "Imagine de fundal"
-      },
-      "backgroundImageOpacity": {
-        "label": "Opacitatea imaginii de fundal"
-      },
-      "customThemeColors": {
-        "label": "Culori personalizate ale temei"
-      },
-      "rightClickSelectsWord": {
-        "label": "Clic dreapta selectează cuvântul"
-      },
-      "macOptionIsMeta": {
-        "label": "Opțiunea este Meta"
-      },
-      "fastScrollModifier": {
-        "label": "Tastă de derulare rapidă"
-      },
-      "fastScrollSensitivity": {
-        "label": "Viteză mare de derulare"
-      },
-      "backspaceMode": {
-        "label": "Backspace"
-      },
-      "autoMosh": {
-        "label": "Auto mosh"
-      },
-      "moshCommand": {
-        "label": "Comandă Mosh"
-      },
-      "autoTmux": {
-        "label": "Multiplicator automat"
-      },
-      "useSSHTitle": {
-        "label": "Folosește titlul SSH"
-      },
-      "syntaxHighlighting": {
-        "label": "Evidențierea sintaxei"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Categorii de evidențiere a sintaxei"
-      },
-      "linkClickBehavior": {
-        "label": "Clic pe link"
-      },
-      "localEcho": {
-        "label": "Ecou local"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Oferiți-vă să completați solicitările de parolă"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Completați solicitările sudo"
-      },
-      "autoReconnect": {
-        "label": "Reconectare automată"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Completare automată a comenzilor",
-        "description": "Afișează completarea automată în timpul tastării dacă apeși pe Tab"
-      },
-      "localEcho": {
-        "label": "Ecou local",
-        "description": "Reduceți latența percepută a intrării folosind predicția sigură a apăsărilor de taste locale"
-      },
-      "linkClickBehavior": {
-        "label": "Clic pe linkul terminalului",
-        "description": "Comportament implicit la clic pe linkuri în terminal"
-      },
-      "customThemes": {
-        "label": "Teme salvate"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Terminal local"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Folosește sesiuni de terminal live",
-      "description": "Permite ca alte funcții, cum ar fi partajarea sesiunilor și înregistrarea, să ajungă la sesiunile live ale terminalului."
-    },
-    "history": {
-      "title": "Citiți istoricul comenzilor",
-      "description": "Permite altor funcții, cum ar fi asistentul AI, să citească istoricul comenzilor tale."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Terminal",
-    "addHost": "Adăugați gazdă",
-    "applyGlobalThemeTooltip": "Aplică această temă",
-    "backgroundImageDesc": "URL opțional pentru o imagine de fundal a terminalului",
-    "backgroundImageLabel": "URL-ul imaginii de fundal",
-    "backgroundImageOpacityLabel": "Opacitatea imaginii de fundal",
-    "backspaceMode": "Mod Backspace",
-    "backspaceModeControlH": "Control-H (BS)",
-    "backspaceModeLabel": "Mod Backspace",
-    "backspaceModeNormal": "Normal (ȘTERGERE)",
-    "behaviorAndAdvanced": "Comportament și Avansat",
-    "bellStyle": "Stil clopot",
-    "bellStyleBoth": "Ambele",
-    "bellStyleLabel": "Stil clopot",
-    "bellStyleNone": "Nici unul",
-    "bellStyleSound": "Sunet",
-    "bellStyleVisual": "Vizual",
-    "colorTheme": "Temă de culoare",
-    "cursorBlink": "Clipire cursor",
-    "cursorBlinking": "Cursorul clipește",
-    "cursorBlinkingDesc": "Activează animația intermitentă pentru cursorul terminalului",
-    "cursorStyle": "Stilul cursorului",
-    "cursorStyleBar": "Bar",
-    "cursorStyleBlock": "Bloc",
-    "cursorStyleLabel": "Stilul cursorului",
-    "cursorStyleUnderline": "Subliniere",
-    "customThemeAnsiColors": "Culori ANSI",
-    "customThemeBackground": "Fundal",
-    "customThemeBlack": "Negru",
-    "customThemeBlue": "Albastru",
-    "customThemeBrightBlack": "Negru strălucitor",
-    "customThemeBrightBlue": "Albastru strălucitor",
-    "customThemeBrightCyan": "Cian strălucitor",
-    "customThemeBrightGreen": "Verde strălucitor",
-    "customThemeBrightMagenta": "Magenta strălucitor",
-    "customThemeBrightRed": "Roșu aprins",
-    "customThemeBrightWhite": "Alb strălucitor",
-    "customThemeBrightYellow": "Galben strălucitor",
-    "customThemeColors": "Culori personalizate",
-    "customThemeCursor": "Cursor",
-    "customThemeCursorAccent": "Accent cursor",
-    "customThemeCyan": "Cian",
-    "customThemeForeground": "Prim plan",
-    "customThemeGreen": "Verde",
-    "customThemeMagenta": "Magenta",
-    "customThemeRed": "Roşu",
-    "customThemeResetTooltip": "Resetare la setările implicite",
-    "customThemeSelection": "Selecţie",
-    "customThemeWhite": "Alb",
-    "customThemeYellow": "Galben",
-    "deleteGlobalThemeTooltip": "Ștergeți această temă",
-    "docsLink": "Vizualizați documentele",
-    "enableAutoMosh": "Activează Auto-Mosh",
-    "enableAutoMoshDesc": "Preferă Mosh în locul SSH dacă este disponibil",
-    "enableAutoTmux": "Activează Auto-Tmux",
-    "enableAutoTmuxDesc": "Mențineți shell-ul și tot ce rulează în el în funcțiune după deconectări și reporniri ale browserului, rulând în interiorul tmux (tmux trebuie să fie instalat pe gazdă).",
-    "fastScrollModifier": "Modificator de derulare rapidă",
-    "fastScrollModifierAlt": "Alt",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Modificator de derulare rapidă",
-    "fastScrollModifierShift": "Schimbare",
-    "fastScrollSensitivity": "Sensibilitate rapidă la derulare",
-    "fastScrollSensitivityLabel": "Sensibilitate rapidă la derulare",
-    "fontFamily": "Familie de fonturi",
-    "fontFamilyCustomHint": "Alegeți un font inclus în pachet sau alegeți Personalizat și introduceți numele exact al unui font deja instalat pe sistemul dvs. (de exemplu, MesloLGS NF, Noto Sans Mono). Termix nu poate instala fonturi automat, instalați-l mai întâi pe sistemul dvs. de operare.",
-    "fontFamilyCustomOption": "Personalizat...",
-    "fontFamilyCustomPlaceholder": "Numele exact al fontului, de exemplu MesloLGS NF",
-    "fontFamilyLabel": "Familie de fonturi",
-    "fontSize": "Dimensiunea fontului",
-    "fontSizeLabel": "Dimensiunea fontului",
-    "hostNotFound": "Gazdă negăsită",
-    "letterSpacing": "Spațierea literelor",
-    "letterSpacingPx": "Spațiere litere (px)",
-    "lineHeight": "Înălțimea liniei",
-    "lineHeightLabel": "Înălțimea liniei",
-    "linkClickBehaviorConfirm": "Afișează o fereastră pop-up pentru deschidere sau copiere",
-    "linkClickBehaviorDesc": "Controlează ce se întâmplă când dai clic pe un link în terminal. Folosește „Implicit” pentru a urma setarea la nivel de aplicație.",
-    "linkClickBehaviorDirect": "Deschideți direct",
-    "linkClickBehaviorLabel": "Comportamentul clicurilor pe linkuri",
-    "loadingHost": "Se încarcă gazda...",
-    "localEchoAuto": "Automat",
-    "localEchoDesc": "Preziceți local apăsările de taste imprimabile în siguranță pe conexiuni lente. Solicitările de parolă și intrările de control nu sunt niciodată reluate.",
-    "localEchoLabel": "Ecou local",
-    "localEchoOff": "Dezactivat",
-    "localEchoOn": "Mereu pornit",
-    "macOptionIsMetaLabel": "Tasta Opțiune Trimite Meta",
-    "macOptionIsMetaShortDesc": "Dezactivați tastarea caracterelor speciale (cum ar fi @ sau |) cu tasta Option/Alt pe macOS în loc să trimiteți Meta",
-    "moshCommand": "Comandamentul MOSH",
-    "moshCommandLabel": "Comandamentul Mosh",
-    "noSavedThemes": "Nicio temă salvată încă",
-    "none": "Nici unul",
-    "passwordPromptAutoFillDesc": "Oferiți-vă să completați parola salvată atunci când terminalul vă solicită una. Dezactivați pentru a nu completa niciodată automat nicio parolă pe această gazdă.",
-    "passwordPromptAutoFillLabel": "Completare automată parolă",
-    "autoReconnectLabel": "Reconectare automată",
-    "autoReconnectDesc": "Se reconectează automat când conexiunea SSH se întrerupe, de exemplu după o eroare de rețea sau o setare în repaus. Păstrează derularea înapoi.",
-    "rightClickSelectsWord": "Clic dreapta selectează cuvântul",
-    "rightClickSelectsWordLabel": "Clic dreapta Selectează Word",
-    "rightClickSelectsWordShortDesc": "Selectați cuvântul de sub cursor prin clic dreapta",
-    "saveAsGlobalTheme": "Salvați ca temă globală",
-    "saveGlobalThemeError": "Nu s-a putut salva tema",
-    "saveGlobalThemeNamePrompt": "Introduceți un nume pentru această temă",
-    "saveGlobalThemeSuccess": "Tema a fost salvată",
-    "savedThemesLabel": "Teme salvate",
-    "scrollbackBufferLabel": "Buffer de derulare înapoi",
-    "scrollbackMaxLines": "Numărul maxim de linii păstrate în istoric",
-    "sudoPasswordAutoFill": "Completare automată parolă Sudo",
-    "sudoPasswordAutoFillDesc": "Stocați o parolă sudo, astfel încât metricile gazdei, prompturile terminalului și alte funcții să poată executa automat comenzi privilegiate.",
-    "sudoPasswordAutoFillLabel": "Completare automată parolă Sudo",
-    "syntaxCategoryIpAddresses": "Adrese IP",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Niveluri de jurnal",
-    "syntaxCategoryLogLevelsDesc": "eroare, avertizare, informații, depanare, fatal",
-    "syntaxCategoryNumbers": "Numere etichetate",
-    "syntaxCategoryNumbersDesc": "portul 8080, ieșirea 1, starea 404",
-    "syntaxCategoryPaths": "Căi de fișiere",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "Marcaje temporale",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 15.01.2024",
-    "syntaxCategoryUrls": "URL-uri",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "Colorează ieșirea terminalului (erori, căi, IP-uri, timestamp-uri)",
-    "syntaxHighlightingLabel": "Evidențierea sintaxei",
-    "terminalAppearance": "Aspectul terminalului",
-    "theme": "Temă",
-    "themePreview": "Previzualizare temă",
-    "useSSHTitleDesc": "Actualizează titlul filei din titlul ferestrei shell-ului în loc de numele gazdei",
-    "useSSHTitleLabel": "Folosește titlul ferestrei SSH",
-    "enableTunnel": "Activează tunelul",
-    "enableFileManager": "Activează Managerul de fișiere",
-    "enableDocker": "Activează Docker",
-    "startupSnippet": "Fragment de pornire",
-    "quickActions": "Acțiuni rapide",
-    "proxmoxLastSyncStatus": {
-      "success": "Succes"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} omis (nu a fost găsită nicio adresă IP)",
-    "proxmoxStatsUrlCopied": "URL-ul statisticilor Proxmox a fost copiat în clipboard",
-    "rdpUrlCopied": "Adresa URL RDP copiată",
-    "vncUrlCopied": "Adresa URL VNC copiată",
-    "filterAuthStepca": "Pasul CA",
-    "guac": {
-      "noCredential": "Fără acreditări (acreditările directe sunt mai jos)",
-      "authTypeDirect": "Direct",
-      "authTypeCredential": "Acreditare",
-      "authTypeNone": "Nici unul",
-      "recordingPath": "Calea de înregistrare",
-      "recordingName": "Nume înregistrare",
-      "saveHostFirst": "Salvează mai întâi gazda.",
-      "sharingOptionsAfterSave": "Opțiunile de partajare sunt disponibile după ce gazda a fost salvată.",
-      "permissionLevel": "Nivel de permisiune",
-      "typeHeader": "Tip",
-      "targetHeader": "Ţintă",
-      "permissionHeader": "Permisiune",
-      "cancelBtn": "Anula",
-      "savingBtn": "Economisire...",
-      "updateHostBtn": "Actualizați gazda",
-      "addHostBtn": "Adăugați gazdă"
-    },
-    "filterAuthVault": "Seif"
-  },
-  "nav": {
-    "history": "Istorie",
-    "localTerminal": "Terminal local",
-    "sshTools": "Instrumente SSH",
-    "terminal": "Terminal",
-    "macros": "Macrocomenzi"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Tastați aici pentru a difuza apăsările de taste...",
-    "copyOnSelect": "Copiază automat textul selectat",
-    "enableRightClickCopyPaste": "Activează copierea/lipirea cu clic dreapta",
-    "fillPassword": "Completați parola",
-    "fillPasswordMissing": "Nu există o parolă salvată pentru {{count}} terminal(e) selectat(e)",
-    "fillPasswordSuccess": "Parola a fost introdusă în terminalul(ele) {{count}}",
-    "keyRecordingTitle": "Înregistrare cheie",
-    "noTerminalTabsOpen": "Nicio filă de terminal deschisă",
-    "recordToTerminals": "Înregistrare pe terminale",
-    "selectAll": "Toate",
-    "selectNone": "Nici unul",
-    "selectTerminalsAbove": "Selectați terminalele de mai sus",
-    "settingsTitle": "Setări",
-    "startRecording": "Începeți înregistrarea",
-    "stopRecording": "Opriți înregistrarea"
-  },
-  "keybindings": {
-    "copy": "Copiați selecția",
-    "paste": "Pastă",
-    "sendControlCode": "Trimite semnal Ctrl+literă",
-    "sendText": "Trimiteți mesaj",
-    "controlCodeLabel": "Scrisoare",
-    "textLabel": "Text de trimis",
-    "appendEnterLabel": "Apăsați Enter după trimitere",
-    "clipboardPermissionNote": "În unele browsere, este posibil să solicite permisiunea pentru clipboard la prima utilizare.",
-    "textRequired": "Introduceți textul de trimis",
-    "controlCodeRequired": "Introduceți o singură literă pentru codul de control",
-    "builtIn": {
-      "copyCtrlC": "Copiază selecția (Ctrl+C, numai când este selectat text)",
-      "copyCtrlShiftC": "Copiere selecție (Ctrl+Shift+C)",
-      "copyCmdC": "Copiere selecție (Cmd+C)",
-      "pasteCtrlShiftV": "Lipire din clipboard (Ctrl+Shift+V)",
-      "ctrlW": "Trimite Ctrl+W către shell (blocat de la închiderea filei browserului)",
-      "ctrlT": "Trimite Ctrl+T către shell (blocat la deschiderea filei browserului)",
-      "ctrlN": "Trimite Ctrl+N către shell (blocat de la deschiderea ferestrei browserului)",
-      "ctrlQ": "Trimite Ctrl+Q către shell (blocat la închiderea browserului)"
-    }
-  },
-  "macros": {
-    "title": "Macrocomenzi",
-    "description": "Executați o serie de comenzi salvate într-un terminal și reacționați la ceea ce serverul trimite înapoi.",
-    "target": "Ţintă",
-    "noTerminal": "Niciun terminal deschis",
-    "empty": "Încă nu există macrocomenzi",
-    "emptyHint": "Creați o macrocomandă pentru a automatiza un flux de operare în terminal, cum ar fi conectarea, repornirea unui serviciu sau răspunsul la solicitări.",
-    "create": "Macrocomandă nouă",
-    "back": "Înapoi la macrocomenzi",
-    "name": "Nume",
-    "namePlaceholder": "Reporniți serverul web",
-    "nameRequired": "Dați un nume macrocomenzii înainte de salvare",
-    "descriptionLabel": "Descriere",
-    "descriptionPlaceholder": "Ce face această macrocomandă (opțional)",
-    "unsaved": "Modificări nesalvate",
-    "save": "Salva",
-    "saved": "Macrocomandă salvată",
-    "saveFailed": "Nu s-a putut salva macrocomanda",
-    "delete": "Şterge",
-    "deleteTitle": "Ștergeți această macrocomandă?",
-    "deleteBody": "„{{name}}” va fi șters definitiv. Această acțiune nu poate fi anulată.",
-    "deleted": "Macrocomandă ștearsă",
-    "cancel": "Anula",
-    "run": "Aleargă",
-    "stop": "Stop",
-    "running": "Funcţionare...",
-    "completed": "Macrocomandă finalizată",
-    "failed": "Macrocomanda a eșuat",
-    "loadFailed": "Nu s-au putut încărca macrocomenzile",
-    "needTerminal": "Deschideți și conectați mai întâi un terminal",
-    "noSteps": "Această macrocomandă nu are încă pași. Adăugați unul mai jos.",
-    "addStep": "Adăugați un pas",
-    "stepNumber": "Pasul {{number}}",
-    "removeStep": "Eliminați pasul",
-    "confirmRunTitle": "Rulați această macrocomandă?",
-    "confirmRunBody": "„{{name}}” va trimite comenzi către {{host}}.",
-    "confirmRunAction": "Executare macrocomandă",
-    "stepTypes": {
-      "send": {
-        "label": "Trimiteți comanda",
-        "help": "Introduce text în terminal, la fel ca și cum l-ai fi tastat."
-      },
-      "wait": {
-        "label": "Așteptați ieșirea",
-        "help": "Se întrerupe până când serverul afișează textul pe care îl denumiți, ca o solicitare de parolă."
-      },
-      "delay": {
-        "label": "Pauză",
-        "help": "Așteaptă o perioadă fixă de timp înainte de pasul următor."
-      },
-      "if": {
-        "label": "Dacă ieșirea conține",
-        "help": "Verifică tot ce a imprimat serverul până acum, apoi rulează una dintre cele două ramificații."
-      },
-      "repeat": {
-        "label": "Repeta",
-        "help": "Execută pașii din interiorul său de un număr stabilit de ori."
-      }
-    },
-    "send": {
-      "text": "Comandă sau text",
-      "textPlaceholder": "repornirea systemctl a nginx",
-      "pressEnter": "Apăsați Enter după trimitere",
-      "pressEnterHelp": "Dezactivați această opțiune pentru a introduce text fără a-l trimite."
-    },
-    "wait": {
-      "pattern": "Așteptați până când ieșirea conține",
-      "patternPlaceholder": "parolă:",
-      "timeout": "Renunță după",
-      "onTimeout": "Dacă nu apare niciodată",
-      "stop": "Opriți macrocomanda",
-      "continue": "Continuă oricum"
-    },
-    "delay": {
-      "duration": "Așteptați"
-    },
-    "ifStep": {
-      "pattern": "Dacă ieșirea conține",
-      "patternPlaceholder": "Activ: activ (alergând)",
-      "then": "Apoi fă asta",
-      "else": "Altfel, fă asta",
-      "emptyBranch": "Fără trepte"
-    },
-    "repeat": {
-      "count": "Numărul de ori",
-      "times": "ori"
-    },
-    "match": {
-      "useRegex": "Potrivire cu o expresie regulată",
-      "useRegexHelp": "Omiteți această opțiune pentru a corespunde exact textului așa cum este scris.",
-      "invalidRegex": "Nu este o expresie regulată validă, va fi găsită ca text simplu."
-    },
-    "seconds": "secunde",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "Este necesar un server la distanță. Conectați un server la distanță în Setări pentru a utiliza acest tip de conexiune."
-  },
-  "plugin": {
-    "name": "Terminal SSH"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/ru_RU.json b/plugins/ssh-terminal/locales/translated/ru_RU.json
deleted file mode 100644
index 2ae40706a..000000000
--- a/plugins/ssh-terminal/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Добавить",
-    "arrowDown": "Вниз",
-    "arrowLeft": "Влево",
-    "arrowRight": "Вправо",
-    "arrowUp": "Вверх",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Del",
-    "done": "Готово",
-    "editQuickKeys": "Редактировать",
-    "end": "End",
-    "esc": "Esc",
-    "home": "Home",
-    "pageDown": "PgDn",
-    "pageUp": "PgUp",
-    "paste": "Вставить",
-    "quickKeyPlaceholder": "напр. sudo ",
-    "quickKeysDesc": "Нажмите × для удаления. Поддерживается до 8 символов.",
-    "quickKeysTitle": "Быстрые клавиши",
-    "removeQuickKey": "Удалить",
-    "resetDefaults": "Сбросить по умолчанию",
-    "shift": "Shift",
-    "tab": "Tab"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Не удалось включить Auto-Tmux.",
-    "autoTmuxEnabled": "Автоматический Tmux включен для {{host}}. Он применяется со следующего соединения.",
-    "clipboardHttpWarning": "Не удалось прочитать содержимое буфера обмена. Некоторые браузеры ограничивают доступ к буферу обмена вне протокола HTTPS — попробуйте использовать Ctrl+V или используйте Termix через HTTPS.",
-    "closeTab": "Закрыть",
-    "connecting": "Подключение...",
-    "connectionLost": "Соединение потеряно",
-    "connectionRejected": "Подключение отклонено сервером. Проверьте аутентификацию и сетевые настройки.",
-    "connectionTimeout": "Тайм-аут подключения",
-    "enableAutoTmuxAction": "Включить Auto-Tmux",
-    "hostKeyRejected": "Проверка ключа хоста SSH отклонена. Подключение отменено.",
-    "linkDialogCopy": "Копировать",
-    "linkDialogOpen": "Открыть",
-    "linkDialogTitle": "Открыть ссылку",
-    "maxReconnectAttemptsReached": "Достигнуто максимальное количество попыток переподключения",
-    "noHostSelected": "Не выбран хост",
-    "passwordPromptFillTitle": "Вставить сохраненный пароль в этот запрос?",
-    "reconnect": "Переподключиться",
-    "reconnected": "Успешно переподключено",
-    "reconnecting": "Переподключение... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Соединение потеряно, переподключение...",
-    "searchCaseSensitive": "Спичечный коробок",
-    "searchClose": "Закрыть (Выход)",
-    "searchNext": "Следующий матч (Вход)",
-    "searchNoResults": "Результаты отсутствуют",
-    "searchPlaceholder": "Находить",
-    "searchPrevious": "Предыдущий матч (Shift+Enter)",
-    "searchRegex": "Используйте регулярные выражения",
-    "searchResultCount": "{{index}} из {{count}}",
-    "searchWholeWord": "Сопоставьте целое слово",
-    "sessionExpiredNotice": "Ваша предыдущая сессия на {{host}} завершилась через {{minutes}} минут после разрыва соединения; оболочка и все запущенные в ней программы удалены. Включите Auto-Tmux на этом хосте, чтобы поддерживать сессии активными.",
-    "sessionExpiredNoticeNoMinutes": "Ваша предыдущая сессия на {{host}} завершилась во время отключения; оболочка и все запущенные в ней приложения удалены. Включите Auto-Tmux на этом хосте, чтобы поддерживать сессии активными.",
-    "sessionTakenOver": "Сеанс был открыт в другой вкладке. Переподключение...",
-    "tmuxAttached": "Подключённые клиенты",
-    "tmuxAttachedCount": "{{count}} подключено",
-    "tmuxCopyHint": "Скорректируйте выделение и нажмите Enter, чтобы скопировать в буфер обмена",
-    "tmuxCreateNew": "Начать новую сессию",
-    "tmuxDetached": "Отключён от сессии tmux",
-    "tmuxLastActivity": "Последняя активность",
-    "tmuxSessionAttached": "Сессия tmux подключена: {{name}}",
-    "tmuxSessionCreated": "Сессия tmux создана: {{name}}",
-    "tmuxSessionPickerDesc": "Найдены существующие сессии tmux на этом хосте. Выберите одну для переподключения или создайте новую сессию.",
-    "tmuxSessionPickerTitle": "Сессии tmux",
-    "tmuxTimeDays": "{{count}}д назад",
-    "tmuxTimeHours": "{{count}}ч назад",
-    "tmuxTimeJustNow": "только что",
-    "tmuxTimeMinutes": "{{count}}м назад",
-    "tmuxUnavailable": "tmux не установлен на удалённом хосте, переход на стандартную оболочку",
-    "tmuxWindowCount": "{{count}} окно",
-    "tmuxWindows": "Окна",
-    "unknownError": "Произошла неизвестная ошибка",
-    "websocketAbnormalClose": "Соединение неожиданно закрыто. Возможно, проблема с обратным прокси или конфигурацией SSL. Проверьте журналы сервера.",
-    "websocketError": "Ошибка подключения WebSocket",
-    "clipboardReadFailed": "Не удалось прочитать из буфера обмена. Убедитесь, что предоставлены разрешения на доступ к буферу обмена.",
-    "clipboardWriteFailed": "Не удалось скопировать в буфер обмена. Убедитесь, что страница загружена по HTTPS или с localhost.",
-    "connected": "Подключено",
-    "totpCodeLabel": "Код подтверждения",
-    "duplicateTab": "Дублировать вкладку",
-    "imageChooseFile": "Выберите файл изображения",
-    "imageUploaded": "Загруженное изображение: {{path}}",
-    "imageClipboardUnavailable": "Этот браузер не может считывать изображения из буфера обмена.",
-    "imageClipboardEmpty": "Изображение в буфере обмена не найдено",
-    "localShell": "Локальная терминальная оболочка",
-    "autocompleteHintComplete": "Нажмите клавишу Tab или Enter для завершения.",
-    "autocompleteHintNavigate": "↑↓ для навигации",
-    "autocompleteHintClose": "Нажмите Esc для закрытия"
-  },
-  "terminalToolbar": {
-    "detachTmux": "Отсоединить tmux",
-    "detachTmuxDescription": "Отключить сессию tmux",
-    "dismissError": "Отклонить ошибку изображения",
-    "hideToolbar": "Скрыть панель инструментов",
-    "image": "Действия с изображениями (только с изображениями)",
-    "imageActionFailed": "Операция с изображением не удалась.",
-    "layout": "режим отображения панели инструментов",
-    "layoutExpanded": "Дополнено метриками",
-    "layoutIcon": "Только иконка",
-    "layoutLabeled": "Иконки и подписи",
-    "moveToolbar": "Переместить панель инструментов",
-    "moveToolbarHint": "Перетащите панель инструментов, чтобы изменить ее положение.",
-    "paste": "Вставить изображение",
-    "pasteImage": "Вставить изображение из буфера обмена (только изображения)",
-    "retry": "Повторить",
-    "showToolbar": "Развернуть панель",
-    "upload": "Загрузить изображение",
-    "uploadImage": "Загрузите изображение на хостинг.",
-    "uploadingImage": "Загрузка..."
-  },
-  "history": {
-    "noTerminalSelected": "Терминал не выбран",
-    "noTerminalSelectedHint": "Откройте вкладку SSH-терминала, чтобы просмотреть историю команд",
-    "searchPlaceholder": "Поиск по истории...",
-    "clearAll": "Очистить всё",
-    "noHistoryEntries": "Нет записей в истории",
-    "trackingDisabled": "Отслеживание истории отключено",
-    "trackingDisabledHint": "Включите историю команд во вкладке SSH-терминала этого хоста.",
-    "commandCount_one": "{{count}} команда",
-    "commandCount_other": "{{count}} команд"
-  },
-  "touchInput": {
-    "enabled": "Включить сенсорный ввод",
-    "enabledDesc": "Разрешить прокрутку одним пальцем в терминалах",
-    "momentumEnabled": "Включить импульс",
-    "momentumEnabledDesc": "После свайпа продолжите прокрутку еще немного.",
-    "advanced": "Передовой",
-    "resetDefaults": "Сбросить по умолчанию",
-    "dragThreshold": "Порог сопротивления",
-    "maxWheelDelta": "Максимальная разница колес",
-    "momentumSampleWindow": "Окно выборки импульса",
-    "releaseGracePeriod": "Льготный период освобождения",
-    "minimumVelocity": "Минимальная скорость",
-    "maximumVelocity": "Максимальная скорость",
-    "maximumDuration": "Максимальная продолжительность",
-    "maximumTravel": "Максимальный ход",
-    "decayTime": "Время распада",
-    "pixelsPerTick": "Пикселей на такт",
-    "maximumFrameInterval": "Максимальный интервал кадров",
-    "maximumTicksPerFrame": "Максимальное количество тактов на кадр"
-  },
-  "imageStorage": {
-    "instanceId": "Идентификатор экземпляра терминальной сессии",
-    "instanceIdDesc": "Идентификатор экземпляра одной из подключенных вкладок терминала, используемый для проверки видимости.",
-    "selectedModeUnavailable": "Недоступно",
-    "test": "Проверить",
-    "testing": "Тестирование...",
-    "testFailed": "Не удалось проверить хранилище изображений.",
-    "testConnected": "Терминальная сессия подключена.",
-    "testNotConnected": "Нет подключенной терминальной сессии с этим идентификатором экземпляра.",
-    "testSelectedMode": "Для загрузки будет использоваться следующий синтаксис: {{mode}}",
-    "testLocalVisible": "Локальный каталог виден с подключенного хоста.",
-    "testLocalNotVisible": "Локальный каталог НЕ виден с подключенного хоста."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Сенсорный ввод",
-        "images": "Хранилище изображений",
-        "sessions": "Сессии",
-        "newHosts": "Новые хосты"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Сохранение сессии в терминале",
-        "description": "Как долго отключенный терминал остается активным на сервере до его закрытия. Мин. 1, макс. 1440 минут. Для сессий, которые должны длиться дольше этого времени, включите Auto-Tmux на хосте."
-      },
-      "commandHistoryEnabled": {
-        "label": "История команд",
-        "description": "Включить запись истории команд. При отключении история не сохраняется независимо от настроек хостов."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "История команд для новых хостов",
-        "description": "Включается ли история команд при запуске новых хостов."
-      },
-      "imageStorageMode": {
-        "label": "Режим хранения",
-        "description": "Где записываются и загружаются образы терминала. Автоматический выбор по типу подключения, локальному и удаленному (SFTP) — это фиксированная настройка.",
-        "auto": "Авто",
-        "local": "Локальная",
-        "remoteSftp": "Удаленный (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Локальный каталог",
-        "description": "Абсолютный путь в бэкэнде Termix, куда в локальном режиме записываются изображения. Никогда не отображается после сохранения. Пустой путь использует TERMIX_IMAGE_DIR."
-      },
-      "imageHostPath": {
-        "label": "Путь к хосту",
-        "description": "Представление локального каталога на стороне хоста, которое получают терминальные агенты."
-      },
-      "imageTtlMs": {
-        "label": "TTL (мс)",
-        "description": "Время хранения загруженного изображения в миллисекундах. В пустом случае используется значение TERMIX_IMAGE_TTL_MS, или один час."
-      },
-      "imageMaxCount": {
-        "label": "Максимальное количество изображений",
-        "description": "Большинство изображений сохраняется одновременно. В пустом режиме используется значение TERMIX_MAX_IMAGE_COUNT или 100."
-      },
-      "imageMaxBytes": {
-        "label": "Максимальный объем хранилища в байтах",
-        "description": "Максимальное количество байтов изображений, хранящихся одновременно. Пустой файл использует TERMIX_MAX_IMAGE_STORAGE_BYTES или 5 GiB."
-      },
-      "sessionPersistence": {
-        "label": "Сохраняйте сессии после отключения.",
-        "description": "Поддерживайте активность отключенного терминала на сервере в течение указанного выше времени, чтобы при повторном открытии его вкладки работа продолжалась с того места, где она остановилась."
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "Запускайте терминалы новых хостов внутри tmux, чтобы сессии сохранялись после разрывов соединения (для этого tmux должен быть установлен на хосте)."
-      },
-      "newHostTheme": {
-        "label": "Тема оформления для новых хостов",
-        "description": "Тема оформления терминала, с которой запускается новый хост."
-      },
-      "newHostFontFamily": {
-        "label": "Шрифт для новых хостов",
-        "description": "Шрифт терминала, используемый при запуске нового хоста."
-      },
-      "newHostFontSize": {
-        "label": "Размер шрифта для новых хостов",
-        "description": "Размер шрифта в пикселях, с которым запускается новый хост."
-      },
-      "newHostCursorStyle": {
-        "label": "Стиль курсора для новых хостов"
-      },
-      "newHostCursorBlink": {
-        "label": "Мигающий курсор для новых хостов"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Включить панель инструментов терминала",
-        "description": "Отобразить панель быстрого доступа, закрепленную на активном терминале, для отображения инструментов и статистики этого хоста в режиме реального времени."
-      },
-      "terminalToolbarPosition": {
-        "label": "Положение панели инструментов",
-        "description": "Там, где находится панель инструментов в терминале. Вы по-прежнему можете перетаскивать её оттуда.",
-        "bottom": "Нижний центр",
-        "bottomLeft": "Внизу слева",
-        "bottomRight": "Внизу справа",
-        "top": "Верхний центр",
-        "topLeft": "Вверху слева",
-        "topRight": "Вверху справа"
-      },
-      "terminalToolbarStartState": {
-        "label": "Начальное состояние панели инструментов",
-        "description": "Будет ли панель инструментов открываться в развернутом или свернутом виде при подключении терминала?",
-        "expanded": "Расширенный",
-        "collapsed": "Минимизированный"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Режим отображения панели инструментов",
-        "description": "Как отображаются кнопки на панели инструментов. Функция «Последнее использованное» сохраняет выбранные вами кнопки на панели инструментов.",
-        "remember": "Последнее использование",
-        "icon": "Только иконка",
-        "labeled": "Иконки и подписи",
-        "expanded": "Дополнено статистикой."
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Показать статистику в реальном времени",
-        "description": "В расширенном режиме отображайте статистику хоста в режиме реального времени над кнопками панели инструментов."
-      },
-      "terminalToolbarFade": {
-        "label": "Затухание в режиме ожидания",
-        "description": "Постепенно уменьшайте масштаб панели инструментов, пока не наведете на нее курсор мыши."
-      },
-      "enableCommandHistory": {
-        "label": "История команд",
-        "description": "Сохранять команды, выполняемые в этом терминале, для истории и автодополнения"
-      },
-      "enableTerminal": {
-        "label": "Включить терминал",
-        "description": "Предоставьте SSH-терминал для этого хоста."
-      },
-      "inheritAppearance": {
-        "label": "Использовать пользовательские настройки по умолчанию"
-      },
-      "theme": {
-        "label": "Тема"
-      },
-      "cursorBlink": {
-        "label": "Мигающий курсор"
-      },
-      "cursorStyle": {
-        "label": "Стиль курсора"
-      },
-      "fontSize": {
-        "label": "размер шрифта"
-      },
-      "fontFamily": {
-        "label": "Шрифт"
-      },
-      "scrollback": {
-        "label": "Прокрутка назад"
-      },
-      "letterSpacing": {
-        "label": "межбуквенный интервал"
-      },
-      "lineHeight": {
-        "label": "Высота строки"
-      },
-      "bellStyle": {
-        "label": "Белл"
-      },
-      "minimumContrastRatio": {
-        "label": "Минимальный коэффициент контрастности"
-      },
-      "backgroundImage": {
-        "label": "Фоновое изображение"
-      },
-      "backgroundImageOpacity": {
-        "label": "Прозрачность фонового изображения"
-      },
-      "customThemeColors": {
-        "label": "Пользовательские цвета темы"
-      },
-      "rightClickSelectsWord": {
-        "label": "Щелчок правой кнопкой мыши выделяет слово."
-      },
-      "macOptionIsMeta": {
-        "label": "Вариант — Мета"
-      },
-      "fastScrollModifier": {
-        "label": "Клавиша быстрой прокрутки"
-      },
-      "fastScrollSensitivity": {
-        "label": "Высокая скорость прокрутки"
-      },
-      "backspaceMode": {
-        "label": "Backspace"
-      },
-      "autoMosh": {
-        "label": "Автомош"
-      },
-      "moshCommand": {
-        "label": "Команда Мош"
-      },
-      "autoTmux": {
-        "label": "Автоматический tmux"
-      },
-      "useSSHTitle": {
-        "label": "Используйте заголовок SSH"
-      },
-      "syntaxHighlighting": {
-        "label": "Подсветка синтаксиса"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Категории подсветки синтаксиса"
-      },
-      "linkClickBehavior": {
-        "label": "Ссылка клик"
-      },
-      "localEcho": {
-        "label": "Локальное эхо"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Предложить заполнить поля для ввода пароля"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Заполните подсказки sudo"
-      },
-      "autoReconnect": {
-        "label": "Автоматическое переподключение"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Автодополнение команд",
-        "description": "При нажатии клавиши Tab будет отображаться автозаполнение во время набора текста."
-      },
-      "localEcho": {
-        "label": "Локальное эхо",
-        "description": "Снизьте воспринимаемую задержку ввода, используя безопасное локальное прогнозирование нажатий клавиш."
-      },
-      "linkClickBehavior": {
-        "label": "Клик по ссылке в терминале",
-        "description": "Поведение по умолчанию при клике по ссылкам в терминале"
-      },
-      "customThemes": {
-        "label": "Сохраненные темы"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Локальный терминал"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Используйте сеансы работы с терминалом в режиме реального времени.",
-      "description": "Позволяет использовать другие функции, такие как совместное использование сессий и запись, в режиме реального времени на вашем терминале."
-    },
-    "history": {
-      "title": "Прочитать историю команд",
-      "description": "Позволяет другим функциям, таким как ИИ-помощник, читать историю ваших команд."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Терминал",
-    "addHost": "Добавить хост",
-    "applyGlobalThemeTooltip": "Примените эту тему",
-    "backgroundImageDesc": "Необязательный URL для фонового изображения терминала",
-    "backgroundImageLabel": "URL фонового изображения",
-    "backgroundImageOpacityLabel": "Прозрачность фонового изображения",
-    "backspaceMode": "Режим Backspace",
-    "backspaceModeControlH": "Контроль-H (BS)",
-    "backspaceModeLabel": "Режим Backspace",
-    "backspaceModeNormal": "Нормальный (DEL)",
-    "behaviorAndAdvanced": "Поведение и дополнительные настройки",
-    "bellStyle": "Стиль звукового сигнала",
-    "bellStyleBoth": "Оба",
-    "bellStyleLabel": "Стиль сигнала",
-    "bellStyleNone": "Ни одного",
-    "bellStyleSound": "Звук",
-    "bellStyleVisual": "Визуальный",
-    "colorTheme": "Цветовая тема",
-    "cursorBlink": "Мигание курсора",
-    "cursorBlinking": "Мигание курсора",
-    "cursorBlinkingDesc": "Включить анимацию мигания курсора терминала",
-    "cursorStyle": "Стиль курсора",
-    "cursorStyleBar": "Бар",
-    "cursorStyleBlock": "Блокировать",
-    "cursorStyleLabel": "Стиль курсора",
-    "cursorStyleUnderline": "Подчеркнуть",
-    "customThemeAnsiColors": "Цвета ANSI",
-    "customThemeBackground": "Фон",
-    "customThemeBlack": "Чёрный",
-    "customThemeBlue": "Синий",
-    "customThemeBrightBlack": "Ярко-чёрный",
-    "customThemeBrightBlue": "Ярко-синий",
-    "customThemeBrightCyan": "Ярко-голубой",
-    "customThemeBrightGreen": "Ярко-зелёный",
-    "customThemeBrightMagenta": "Ярко-пурпурный",
-    "customThemeBrightRed": "Ярко-красный",
-    "customThemeBrightWhite": "Ярко-белый",
-    "customThemeBrightYellow": "Ярко-жёлтый",
-    "customThemeColors": "Пользовательские цвета",
-    "customThemeCursor": "Курсор",
-    "customThemeCursorAccent": "Акцент курсора",
-    "customThemeCyan": "Голубой",
-    "customThemeForeground": "Текст",
-    "customThemeGreen": "Зелёный",
-    "customThemeMagenta": "Пурпурный",
-    "customThemeRed": "Красный",
-    "customThemeResetTooltip": "Сбросить до значений по умолчанию",
-    "customThemeSelection": "Выделение",
-    "customThemeWhite": "Белый",
-    "customThemeYellow": "Жёлтый",
-    "deleteGlobalThemeTooltip": "Удалить эту тему",
-    "docsLink": "Документация",
-    "enableAutoMosh": "Включить Auto-Mosh",
-    "enableAutoMoshDesc": "Предпочитать Mosh вместо SSH, если доступен",
-    "enableAutoTmux": "Включить Auto-Tmux",
-    "enableAutoTmuxDesc": "Поддерживайте работоспособность вашей оболочки и всего, что в ней работает, даже при разрыве соединения и перезапуске браузера, запустив tmux (tmux должен быть установлен на хосте).",
-    "fastScrollModifier": "Модификатор быстрой прокрутки",
-    "fastScrollModifierAlt": "Alt",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Модификатор быстрой прокрутки",
-    "fastScrollModifierShift": "Shift",
-    "fastScrollSensitivity": "Чувствительность быстрой прокрутки",
-    "fastScrollSensitivityLabel": "Чувствительность быстрой прокрутки",
-    "fontFamily": "Семейство шрифтов",
-    "fontFamilyCustomHint": "Выберите шрифт из комплекта или выберите «Пользовательский» и введите точное название шрифта, уже установленного в вашей системе (например, MesloLGS NF, Noto Sans Mono). Termix не может установить шрифты автоматически, сначала установите его в свою операционную систему.",
-    "fontFamilyCustomOption": "Обычай...",
-    "fontFamilyCustomPlaceholder": "Точное название шрифта, например, MesloLGS NF",
-    "fontFamilyLabel": "Семейство шрифтов",
-    "fontSize": "Размер шрифта",
-    "fontSizeLabel": "Размер шрифта",
-    "hostNotFound": "Хост не найден",
-    "letterSpacing": "Межбуквенный интервал",
-    "letterSpacingPx": "Межбуквенное расстояние (px)",
-    "lineHeight": "Межстрочный интервал",
-    "lineHeightLabel": "Высота строки",
-    "linkClickBehaviorConfirm": "Показывать всплывающее окно для открытия или копирования",
-    "linkClickBehaviorDesc": "Определяет, что происходит при клике по ссылке в терминале. Используйте «По умолчанию», чтобы следовать настройкам приложения.",
-    "linkClickBehaviorDirect": "Открывать напрямую",
-    "linkClickBehaviorLabel": "Поведение при клике по ссылке",
-    "loadingHost": "Загрузка хоста...",
-    "localEchoAuto": "Автоматический",
-    "localEchoDesc": "Предсказывает безопасные нажатия клавиш для печати локально даже при медленном соединении. Запросы паролей и управляющий ввод никогда не отображаются.",
-    "localEchoLabel": "Локальное эхо",
-    "localEchoOff": "Отключено",
-    "localEchoOn": "Всегда включено",
-    "macOptionIsMetaLabel": "Клавиша Option отправляет метаданные",
-    "macOptionIsMetaShortDesc": "Отключите возможность ввода специальных символов (например, @ или |) с помощью клавиши Option/Alt в macOS вместо отправки Meta.",
-    "moshCommand": "Команда MOSH",
-    "moshCommandLabel": "Команда Mosh",
-    "noSavedThemes": "Сохранённых тем пока нет.",
-    "none": "Нет",
-    "passwordPromptAutoFillDesc": "Предлагается ввести сохраненный пароль, когда терминал запросит его. Отключите эту функцию, чтобы автоматическое заполнение паролей на этом хосте никогда не происходило.",
-    "passwordPromptAutoFillLabel": "Функция автозаполнения паролей",
-    "autoReconnectLabel": "Автоматическое переподключение",
-    "autoReconnectDesc": "При разрыве SSH-соединения, например, после сбоя сети или перехода в спящий режим, система автоматически переподключается. При этом сохраняется возможность прокрутки назад.",
-    "rightClickSelectsWord": "Выделять слово правой кнопкой",
-    "rightClickSelectsWordLabel": "Правый клик выделяет слово",
-    "rightClickSelectsWordShortDesc": "Выделять слово под курсором при правом клике",
-    "saveAsGlobalTheme": "Сохранить как глобальную тему",
-    "saveGlobalThemeError": "Не удалось сохранить тему.",
-    "saveGlobalThemeNamePrompt": "Введите название для этой темы.",
-    "saveGlobalThemeSuccess": "Тема сохранена",
-    "savedThemesLabel": "Сохраненные темы",
-    "scrollbackBufferLabel": "Буфер прокрутки",
-    "scrollbackMaxLines": "Максимальное количество строк, сохраняемых в истории",
-    "sudoPasswordAutoFill": "Автозаполнение пароля sudo",
-    "sudoPasswordAutoFillDesc": "Хранить пароль sudo, чтобы метрики хоста, запросы терминала и другие могли автоматически выполнять привилегированные команды.",
-    "sudoPasswordAutoFillLabel": "Автозаполнение пароля sudo",
-    "syntaxCategoryIpAddresses": "IP-адреса",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Уровни логирования",
-    "syntaxCategoryLogLevelsDesc": "error, warn, info, debug, fatal",
-    "syntaxCategoryNumbers": "Числа с метками",
-    "syntaxCategoryNumbersDesc": "port 8080, exit 1, status 404",
-    "syntaxCategoryPaths": "Пути к файлам",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "Временные метки",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 2024-01-15",
-    "syntaxCategoryUrls": "URLs",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "Раскрашивать вывод терминала (ошибки, пути, IP-адреса, временные метки)",
-    "syntaxHighlightingLabel": "Подсветка синтаксиса",
-    "terminalAppearance": "Внешний вид терминала",
-    "theme": "Тема",
-    "themePreview": "Предпросмотр темы",
-    "useSSHTitleDesc": "Обновлять заголовок вкладки из названия окна оболочки вместо имени хоста",
-    "useSSHTitleLabel": "Использовать заголовок окна SSH",
-    "enableTunnel": "Включить туннель",
-    "enableFileManager": "Включить файловый менеджер",
-    "enableDocker": "Включить Docker",
-    "startupSnippet": "Сниппет запуска",
-    "quickActions": "Быстрые действия",
-    "proxmoxLastSyncStatus": {
-      "success": "Успешно"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} пропущено (IP-адрес не найден)",
-    "proxmoxStatsUrlCopied": "URL-адрес статистики Proxmox скопирован в буфер обмена.",
-    "rdpUrlCopied": "Скопирован URL RDP",
-    "vncUrlCopied": "Скопирован URL VNC",
-    "filterAuthStepca": "Шаг CA",
-    "guac": {
-      "noCredential": "Нет учетных данных (прямые данные ниже)",
-      "authTypeDirect": "Прямой",
-      "authTypeCredential": "Учетные данные",
-      "authTypeNone": "Ни одного",
-      "recordingPath": "Путь записи",
-      "recordingName": "Имя записи",
-      "saveHostFirst": "Сначала сохраните хост.",
-      "sharingOptionsAfterSave": "Параметры общего доступа будут доступны после сохранения хоста.",
-      "permissionLevel": "Уровень разрешений",
-      "typeHeader": "Тип",
-      "targetHeader": "Цель",
-      "permissionHeader": "Разрешение",
-      "cancelBtn": "Отмена",
-      "savingBtn": "Сохранение...",
-      "updateHostBtn": "Обновить хост",
-      "addHostBtn": "Добавить хост"
-    },
-    "filterAuthVault": "Сейф"
-  },
-  "nav": {
-    "history": "История",
-    "localTerminal": "Локальный терминал",
-    "sshTools": "Инструменты SSH",
-    "terminal": "Терминал",
-    "macros": "Макросы"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Введите текст для трансляции нажатий...",
-    "copyOnSelect": "Автоматическое копирование выделенного текста",
-    "enableRightClickCopyPaste": "Включить копирование/вставку правой кнопкой мыши",
-    "fillPassword": "Заполнить пароль",
-    "fillPasswordMissing": "Нет сохранённого пароля для {{count}} выбранных терминалов",
-    "fillPasswordSuccess": "Пароль введён в {{count}} терминалах",
-    "keyRecordingTitle": "Запись клавиш",
-    "noTerminalTabsOpen": "Нет открытых вкладок терминала",
-    "recordToTerminals": "Записать в терминалы",
-    "selectAll": "Все",
-    "selectNone": "Ни одного",
-    "selectTerminalsAbove": "Выберите терминалы выше",
-    "settingsTitle": "Настройки",
-    "startRecording": "Начать запись",
-    "stopRecording": "Остановить запись"
-  },
-  "keybindings": {
-    "copy": "Скопировать выделенный фрагмент",
-    "paste": "Вставить",
-    "sendControlCode": "Отправить сигнал Ctrl+буква",
-    "sendText": "Отправить текст",
-    "controlCodeLabel": "Письмо",
-    "textLabel": "Текст для отправки",
-    "appendEnterLabel": "Нажмите Enter после отправки",
-    "clipboardPermissionNote": "В некоторых браузерах при первом использовании может запрашиваться разрешение на использование буфера обмена.",
-    "textRequired": "Введите текст для отправки",
-    "controlCodeRequired": "Введите одну букву в качестве управляющего кода.",
-    "builtIn": {
-      "copyCtrlC": "Скопировать выделенный фрагмент (Ctrl+C, только если выделен текст)",
-      "copyCtrlShiftC": "Скопировать выделенный фрагмент (Ctrl+Shift+C)",
-      "copyCmdC": "Скопировать выделенный фрагмент (Cmd+C)",
-      "pasteCtrlShiftV": "Вставить из буфера обмена (Ctrl+Shift+V)",
-      "ctrlW": "Отправьте Ctrl+W в командную оболочку (это заблокирует закрытие вкладки браузера).",
-      "ctrlT": "Отправьте Ctrl+T в командную оболочку (это заблокирует открытие вкладки браузера).",
-      "ctrlN": "Отправьте Ctrl+N в командную оболочку (это заблокирует открытие окна браузера).",
-      "ctrlQ": "Отправьте Ctrl+Q в командную оболочку (это заблокирует возможность закрытия браузера)."
-    }
-  },
-  "macros": {
-    "title": "Макросы",
-    "description": "Выполните сохраненную последовательность команд в терминале и отреагируйте на то, что сервер отправит вам в ответ.",
-    "target": "Цель",
-    "noTerminal": "Терминал не открыт",
-    "empty": "Макросы пока отсутствуют",
-    "emptyHint": "Создайте макрос для автоматизации действий в терминале, таких как вход в систему, перезапуск службы или ответ на запросы.",
-    "create": "Новый макрос",
-    "back": "Вернуться к макроэлементам",
-    "name": "Название",
-    "namePlaceholder": "Перезапустите веб-сервер",
-    "nameRequired": "Перед сохранением дайте макросу имя.",
-    "descriptionLabel": "Описание",
-    "descriptionPlaceholder": "Что делает этот макрос (необязательно)",
-    "unsaved": "Несохранённые изменения",
-    "save": "Сохранить",
-    "saved": "Макрос сохранен",
-    "saveFailed": "Не удалось сохранить макрос.",
-    "delete": "Удалить",
-    "deleteTitle": "Удалить этот макрос?",
-    "deleteBody": "\"{{name}}\" будет удалено навсегда. Этого нельзя будет отменить.",
-    "deleted": "Макрос удален",
-    "cancel": "Отмена",
-    "run": "Запустить",
-    "stop": "Остановить",
-    "running": "Бег...",
-    "completed": "Макро завершен",
-    "failed": "Макрос не сработал",
-    "loadFailed": "Не удалось загрузить макросы.",
-    "needTerminal": "Сначала откройте и подключите терминал.",
-    "noSteps": "В этом макросе пока нет шагов. Добавьте один ниже.",
-    "addStep": "Добавить шаг",
-    "stepNumber": "Шаг {{number}}",
-    "removeStep": "Удалить шаг",
-    "confirmRunTitle": "Запустить этот макрос?",
-    "confirmRunBody": "\"{{name}}\" будет отправлять команды {{host}}.",
-    "confirmRunAction": "Запустить макрос",
-    "stepTypes": {
-      "send": {
-        "label": "Отправить команду",
-        "help": "Вводит текст в терминал так же, как если бы вы его ввели вручную."
-      },
-      "wait": {
-        "label": "Дождитесь вывода",
-        "help": "Приостанавливается до тех пор, пока сервер не выведет указанный вами текст, как запрос пароля."
-      },
-      "delay": {
-        "label": "Пауза",
-        "help": "Перед следующим шагом выполняется ожидание в течение заданного промежутка времени."
-      },
-      "if": {
-        "label": "Если вывод содержит",
-        "help": "Проверяет все данные, выведенные сервером на экран, а затем запускает одну из двух ветвей выполнения."
-      },
-      "repeat": {
-        "label": "Повторить",
-        "help": "Выполняет все шаги, входящие в его состав, заданное количество раз."
-      }
-    },
-    "send": {
-      "text": "Команда или текст",
-      "textPlaceholder": "systemctl restart nginx",
-      "pressEnter": "Нажмите Enter после отправки",
-      "pressEnterHelp": "Отключите эту функцию, чтобы вводить текст без отправки."
-    },
-    "wait": {
-      "pattern": "Дождитесь, пока на выходе не появится",
-      "patternPlaceholder": "пароль:",
-      "timeout": "Сдаться после",
-      "onTimeout": "Если оно никогда не появится",
-      "stop": "Остановите макрос",
-      "continue": "Продолжайте в любом случае."
-    },
-    "delay": {
-      "duration": "Подождите"
-    },
-    "ifStep": {
-      "pattern": "Если в выходных данных содержится",
-      "patternPlaceholder": "Активный: активен (работает)",
-      "then": "Затем сделайте это.",
-      "else": "В противном случае сделайте это.",
-      "emptyBranch": "Без ступенек"
-    },
-    "repeat": {
-      "count": "Количество раз",
-      "times": "времена"
-    },
-    "match": {
-      "useRegex": "Сопоставление с использованием регулярного выражения",
-      "useRegexHelp": "Оставьте этот параметр отключенным, чтобы текст точно соответствовал написанному.",
-      "invalidRegex": "Не является допустимым регулярным выражением, будет сопоставлено как обычный текст."
-    },
-    "seconds": "секунды",
-    "secondsShort": "{{count}}с"
-  },
-  "errors": {
-    "remoteServerRequired": "Требуется удаленный сервер. Для использования этого типа подключения подключите удаленный сервер в настройках."
-  },
-  "plugin": {
-    "name": "SSH Терминал"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/sr_SP.json b/plugins/ssh-terminal/locales/translated/sr_SP.json
deleted file mode 100644
index 346bab0c2..000000000
--- a/plugins/ssh-terminal/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Додај",
-    "arrowDown": "Стрелица надоле",
-    "arrowLeft": "Стрелица лево",
-    "arrowRight": "Стрелица десно",
-    "arrowUp": "Стрелица нагоре",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Дел",
-    "done": "Готово",
-    "editQuickKeys": "Уреди брзе тастере",
-    "end": "Крај",
-    "esc": "Излаз",
-    "home": "Дом",
-    "pageDown": "ПгДн",
-    "pageUp": "PgUp",
-    "paste": "Залепи",
-    "quickKeyPlaceholder": "нпр. sudo ",
-    "quickKeysDesc": "Додирните × да бисте уклонили. Подржава до 8 знакова.",
-    "quickKeysTitle": "Брзи тастери",
-    "removeQuickKey": "Уклони",
-    "resetDefaults": "Ресетуј на подразумеване вредности",
-    "shift": "Померање",
-    "tab": "Таб"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Није успело омогућавање аутоматског Tmux-а",
-    "autoTmuxEnabled": "Аутоматски Tmux је омогућен за {{host}}. Примењује се од следећег повезивања.",
-    "clipboardHttpWarning": "Није могуће прочитати међуспремник. Неки прегледачи ограничавају приступ међуспремнику ван HTTPS-а - покушајте са Ctrl+V или покрените Termix преко HTTPS-а.",
-    "closeTab": "Затвори",
-    "connecting": "Повезивање...",
-    "connectionLost": "Веза је прекинута",
-    "connectionRejected": "Сервер је одбио везу. Проверите аутентификацију и конфигурацију мреже.",
-    "connectionTimeout": "Временско ограничење везе",
-    "enableAutoTmuxAction": "Омогући аутоматски Tmux",
-    "hostKeyRejected": "Верификација SSH кључа хоста је одбијена. Веза је отказана.",
-    "linkDialogCopy": "Копија",
-    "linkDialogOpen": "Отворено",
-    "linkDialogTitle": "Отвори линк",
-    "maxReconnectAttemptsReached": "Достигнут је максималан број покушаја поновног повезивања",
-    "noHostSelected": "Није изабран домаћин",
-    "passwordPromptFillTitle": "Унесите сачувану лозинку у овај промпт?",
-    "reconnect": "Поново се повежите",
-    "reconnected": "Поново повезано успешно",
-    "reconnecting": "Поновно повезивање... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Веза је прекинута, поново се повезује...",
-    "searchCaseSensitive": "Упаривање великог и малог дела",
-    "searchClose": "Затвори (Escape)",
-    "searchNext": "Следећи меч (Унесите)",
-    "searchNoResults": "Нема резултата",
-    "searchPlaceholder": "Пронађи",
-    "searchPrevious": "Претходно подударање (Shift+Enter)",
-    "searchRegex": "Користите регуларни израз",
-    "searchResultCount": "{{index}} од {{count}}",
-    "searchWholeWord": "Подударање целе речи",
-    "sessionExpiredNotice": "Ваша претходна сесија на {{host}} је истекла након {{minutes}} минута од прекида везе; љуска и све што је у њој покренуто су нестали. Омогућите Auto-Tmux на овом хосту да би сесије остале активне.",
-    "sessionExpiredNoticeNoMinutes": "Ваша претходна сесија на {{host}} је истекла док сте били одвојени; љуска и све што је у њој покренуто су нестали. Омогућите Auto-Tmux на овом хосту да би сесије остале активне.",
-    "sessionTakenOver": "Сесија је отворена у другој картици. Поновно повезивање...",
-    "tmuxAttached": "Прикључени клијенти",
-    "tmuxAttachedCount": "{{count}} приложено",
-    "tmuxCopyHint": "Прилагодите избор и притисните Ентер да бисте копирали у међуспремник",
-    "tmuxCreateNew": "Започни нову сесију",
-    "tmuxDetached": "Одвојено од tmux сесије",
-    "tmuxLastActivity": "Последња активност",
-    "tmuxSessionAttached": "приложена tmux сесија: {{name}}",
-    "tmuxSessionCreated": "tmux сесија креирана: {{name}}",
-    "tmuxSessionPickerDesc": "Постојеће tmux сесије пронађене су на овом хосту. Изаберите једну да бисте је поново повезали или креирали нову сесију.",
-    "tmuxSessionPickerTitle": "tmux сесије",
-    "tmuxTimeDays": "{{count}}пре д",
-    "tmuxTimeHours": "{{count}}пре сати",
-    "tmuxTimeJustNow": "управо сада",
-    "tmuxTimeMinutes": "{{count}}пре мин",
-    "tmuxUnavailable": "tmux није инсталиран на удаљеном хосту, враћа се на стандардну љуску",
-    "tmuxWindowCount": "{{count}} прозор",
-    "tmuxWindows": "Прозори",
-    "unknownError": "Дошло је до непознате грешке",
-    "websocketAbnormalClose": "Веза је неочекивано прекинута. Ово може бити због проблема са обрнутим проксијем или SSL конфигурацијом. Молимо вас да проверите логове сервера.",
-    "websocketError": "Грешка при повезивању са WebSocket-ом",
-    "clipboardReadFailed": "Читање из међуспремника није успело. Уверите се да су дозволе за међуспремник одобрене.",
-    "clipboardWriteFailed": "Копирање у међуспремник није успело. Уверите се да се страница приказује преко HTTPS-а или localhost-а.",
-    "connected": "Повезано",
-    "totpCodeLabel": "Верификациони код",
-    "duplicateTab": "Дуплирај картицу",
-    "imageChooseFile": "Изаберите датотеку слике",
-    "imageUploaded": "Отпремљена слика: {{path}}",
-    "imageClipboardUnavailable": "Овај прегледач не може да чита слике из међуспремника",
-    "imageClipboardEmpty": "Није пронађена слика у међуспремнику",
-    "localShell": "Локална терминална љуска",
-    "autocompleteHintComplete": "Таб или Ентер да бисте завршили",
-    "autocompleteHintNavigate": "↑↓ за навигацију",
-    "autocompleteHintClose": "Esc за затварање"
-  },
-  "terminalToolbar": {
-    "detachTmux": "Одвојите tmux",
-    "detachTmuxDescription": "Одвојите tmux сесију",
-    "dismissError": "Грешка при одбацивању слике",
-    "hideToolbar": "Сакриј траку са алаткама",
-    "image": "Радње са сликама (само слике)",
-    "imageActionFailed": "Акција са сликом није успела",
-    "layout": "Режим приказа алатне траке",
-    "layoutExpanded": "Проширено са метрикама",
-    "layoutIcon": "Само икона",
-    "layoutLabeled": "Иконе и ознаке",
-    "moveToolbar": "Помери траку са алаткама.",
-    "moveToolbarHint": "Превуците да бисте променили положај траке са алаткама",
-    "paste": "Налепи слику",
-    "pasteImage": "Налепи слику из међуспремника (само слике)",
-    "retry": "Покушај поново",
-    "showToolbar": "Прошири траку са алаткама",
-    "upload": "Отпреми слику",
-    "uploadImage": "Отпремите слику на хост",
-    "uploadingImage": "Отпремање..."
-  },
-  "history": {
-    "noTerminalSelected": "Није изабран терминал",
-    "noTerminalSelectedHint": "Отворите картицу SSH терминала да бисте видели историју његових команди",
-    "searchPlaceholder": "Историја претраге...",
-    "clearAll": "Обриши све",
-    "noHistoryEntries": "Нема уноса у историји",
-    "trackingDisabled": "Праћење историје је онемогућено",
-    "trackingDisabledHint": "Укључите историју команди на картици SSH терминала овог хоста.",
-    "commandCount_one": "{{count}} команда",
-    "commandCount_other": "{{count}} команде"
-  },
-  "touchInput": {
-    "enabled": "Омогући унос додиром",
-    "enabledDesc": "Дозволите скроловање једним прстом у терминалима",
-    "momentumEnabled": "Омогући Моментум",
-    "momentumEnabledDesc": "Наставите кратко да скролујете након превлачења прстом",
-    "advanced": "Напредно",
-    "resetDefaults": "Ресетуј на подразумеване вредности",
-    "dragThreshold": "Праг превлачења",
-    "maxWheelDelta": "Максимална делта точка",
-    "momentumSampleWindow": "Прозор узорка момента",
-    "releaseGracePeriod": "Грејс период за објављивање",
-    "minimumVelocity": "Минимална брзина",
-    "maximumVelocity": "Максимална брзина",
-    "maximumDuration": "Максимално трајање",
-    "maximumTravel": "Максимални ход",
-    "decayTime": "Време распада",
-    "pixelsPerTick": "Пиксела по тик-у",
-    "maximumFrameInterval": "Максимални интервал кадра",
-    "maximumTicksPerFrame": "Максималан број откуцаја по кадру"
-  },
-  "imageStorage": {
-    "instanceId": "ИД инстанце терминалне сесије",
-    "instanceIdDesc": "ИД инстанце једне од ваших повезаних картица терминала, која се користи за тестирање видљивости.",
-    "selectedModeUnavailable": "Недоступно",
-    "test": "Тест",
-    "testing": "Тестирање...",
-    "testFailed": "Тестирање складиштења слика није успело",
-    "testConnected": "Терминална сесија је повезана.",
-    "testNotConnected": "Нема повезане терминалне сесије са овим ID-ом инстанце.",
-    "testSelectedMode": "Отпремање би користило: {{mode}}",
-    "testLocalVisible": "Локални директоријум је видљив са повезаног хоста.",
-    "testLocalNotVisible": "Локални директоријум НИЈЕ видљив са повезаног хоста."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Унос додиром",
-        "images": "Складиштење слика",
-        "sessions": "Сесије",
-        "newHosts": "Нови домаћини"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Трајност терминалне сесије",
-        "description": "Колико дуго се искључени терминал одржава активним на серверу пре него што се затвори. Мин. 1, макс. 1440 минута. За сесије које морају да трају дуже од овог периода, омогућите Auto-Tmux на хосту."
-      },
-      "commandHistoryEnabled": {
-        "label": "Историја команди",
-        "description": "Дозволи снимање историје команди. Када је онемогућено, историја се не чува без обзира на подешавања за сваки хост."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "Историја команди за нове хостове",
-        "description": "Да ли нови хостови почињу са укљученом историјом команди."
-      },
-      "imageStorageMode": {
-        "label": "Режим складиштења",
-        "description": "Где се записују налепљене и отпремљене слике терминала. Аутоматски избори по конекцији, локални и удаљени (SFTP) су поправљени.",
-        "auto": "Аутоматски",
-        "local": "Локално",
-        "remoteSftp": "Удаљено (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Локални директоријум",
-        "description": "Апсолутна путања на Termix серверу где локални режим уписује слике. Никада се не приказује након чувања. Празно користи TERMIX_IMAGE_DIR."
-      },
-      "imageHostPath": {
-        "label": "Путања хоста",
-        "description": "Поглед са стране хоста на локални директоријум који терминални агенти примају."
-      },
-      "imageTtlMs": {
-        "label": "TTL (ms)",
-        "description": "Колико дуго се чува отпремљена слика, у милисекундама. Празно користи TERMIX_IMAGE_TTL_MS или један сат."
-      },
-      "imageMaxCount": {
-        "label": "Максималан број слика",
-        "description": "Већина слика се чува одједном. Празно користи TERMIX_MAX_IMAGE_COUNT или 100."
-      },
-      "imageMaxBytes": {
-        "label": "Максимални број бајтова за складиштење",
-        "description": "Већина бајтова слика се чува одједном. Празно користи TERMIX_MAX_IMAGE_STORAGE_BYTES или 5 GiB."
-      },
-      "sessionPersistence": {
-        "label": "Задржи сесије након прекида",
-        "description": "Држите искључени терминал активним на серверу током горе наведеног времена, тако да поновно отварање његове картице настави тамо где је стао."
-      },
-      "newHostAutoTmux": {
-        "label": "Ауто-Тмукс",
-        "description": "Покрећи терминале нових хостова унутар tmux-а како би сесије преживеле прекиде везе (потребан је tmux на хосту)"
-      },
-      "newHostTheme": {
-        "label": "Тема за нове домаћине",
-        "description": "Тема терминала са којом почиње нови домаћин."
-      },
-      "newHostFontFamily": {
-        "label": "Фонт за нове домаћине",
-        "description": "Фонт терминала са којим почиње нови хост."
-      },
-      "newHostFontSize": {
-        "label": "Величина фонта за нове хостове",
-        "description": "Величина фонта терминала са којом почиње нови хост, у пикселима."
-      },
-      "newHostCursorStyle": {
-        "label": "Стил курсора за нове хостове"
-      },
-      "newHostCursorBlink": {
-        "label": "Трепћући курсор за нове хостове"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Омогући траку са алаткама терминала",
-        "description": "Прикажи траку са алаткама за брзи приступ причвршћену за активни терминал за алате и статистику уживо овог хоста"
-      },
-      "terminalToolbarPosition": {
-        "label": "Положај алатне траке",
-        "description": "Где се налази трака са алаткама у терминалу. И даље је можете превући одатле.",
-        "bottom": "Доњи центар",
-        "bottomLeft": "Доле лево",
-        "bottomRight": "Доле десно",
-        "top": "Горњи центар",
-        "topLeft": "Горе лево",
-        "topRight": "Горе десно"
-      },
-      "terminalToolbarStartState": {
-        "label": "Почетно стање алатке",
-        "description": "Да ли се трака са алаткама отвара проширена или минимизирана када се терминал повеже",
-        "expanded": "Проширено",
-        "collapsed": "Минимизирано"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Режим приказа алатне траке",
-        "description": "Како се приказују дугмад на траци са алаткама. „Последње коришћено“ задржава оно што сте изабрали на траци са алаткама.",
-        "remember": "Последње коришћење",
-        "icon": "Само икона",
-        "labeled": "Иконе и ознаке",
-        "expanded": "Проширено са статистиком"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Прикажи статистику уживо",
-        "description": "Прикажи статистику домаћина уживо изнад дугмади на траци са алаткама у проширеном режиму"
-      },
-      "terminalToolbarFade": {
-        "label": "Блидење у стању мировања",
-        "description": "Трака са алаткама ће се постепено смањивати док се показивач миша не пређе преко ње"
-      },
-      "enableCommandHistory": {
-        "label": "Историја команди",
-        "description": "Снимање команди које се извршавају у овом терминалу за историју и аутоматско довршавање"
-      },
-      "enableTerminal": {
-        "label": "Омогући терминал",
-        "description": "Понудите SSH терминал за овај хост."
-      },
-      "inheritAppearance": {
-        "label": "Користи подразумеване вредности корисника"
-      },
-      "theme": {
-        "label": "Тема"
-      },
-      "cursorBlink": {
-        "label": "Трепћући курсор"
-      },
-      "cursorStyle": {
-        "label": "Стил курсора"
-      },
-      "fontSize": {
-        "label": "Величина фонта"
-      },
-      "fontFamily": {
-        "label": "Фонт"
-      },
-      "scrollback": {
-        "label": "Померање уназад"
-      },
-      "letterSpacing": {
-        "label": "Размак између слова"
-      },
-      "lineHeight": {
-        "label": "Висина линије"
-      },
-      "bellStyle": {
-        "label": "Звоно"
-      },
-      "minimumContrastRatio": {
-        "label": "Минимални контрастни однос"
-      },
-      "backgroundImage": {
-        "label": "Позадинска слика"
-      },
-      "backgroundImageOpacity": {
-        "label": "Непрозирност позадинске слике"
-      },
-      "customThemeColors": {
-        "label": "Прилагођене боје теме"
-      },
-      "rightClickSelectsWord": {
-        "label": "Десни клик бира реч"
-      },
-      "macOptionIsMeta": {
-        "label": "Опција је Мета"
-      },
-      "fastScrollModifier": {
-        "label": "Тастер за брзо скроловање"
-      },
-      "fastScrollSensitivity": {
-        "label": "Велика брзина скроловања"
-      },
-      "backspaceMode": {
-        "label": "Brisanje"
-      },
-      "autoMosh": {
-        "label": "Ауто мош"
-      },
-      "moshCommand": {
-        "label": "Мош команда"
-      },
-      "autoTmux": {
-        "label": "Аутоматски tmux"
-      },
-      "useSSHTitle": {
-        "label": "Користите SSH наслов"
-      },
-      "syntaxHighlighting": {
-        "label": "Истицање синтаксе"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Категорије истицања синтаксе"
-      },
-      "linkClickBehavior": {
-        "label": "Клик на линк"
-      },
-      "localEcho": {
-        "label": "Локални одјек"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Понуди попуњавање захтева за лозинку"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Попуните sudo упите"
-      },
-      "autoReconnect": {
-        "label": "Аутоматски се поново повежи"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Аутоматско довршавање команди",
-        "description": "Прикажи аутоматско довршавање током куцања ако притиснеш тастер Tab"
-      },
-      "localEcho": {
-        "label": "Локални одјек",
-        "description": "Смањите перципирану латенцију уноса користећи безбедно локално предвиђање откуцаја тастера"
-      },
-      "linkClickBehavior": {
-        "label": "Клик на линк терминала",
-        "description": "Подразумевано понашање при клику на линкове у терминалу"
-      },
-      "customThemes": {
-        "label": "Сачуване теме"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Локални терминал"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Користите сесије терминала уживо",
-      "description": "Омогућава другим функцијама, као што су дељење и снимање сесија, да досегну ваше терминалне сесије уживо."
-    },
-    "history": {
-      "title": "Прочитај историју команди",
-      "description": "Омогућава другим функцијама, као што је AI асистент, да читају вашу историју команди."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Терминал",
-    "addHost": "Додај хоста",
-    "applyGlobalThemeTooltip": "Примени ову тему",
-    "backgroundImageDesc": "Опциони URL за позадинску слику терминала",
-    "backgroundImageLabel": "URL адреса позадинске слике",
-    "backgroundImageOpacityLabel": "Непрозирност позадинске слике",
-    "backspaceMode": "Режим брзе плоче",
-    "backspaceModeControlH": "Контрола-Х (БС)",
-    "backspaceModeLabel": "Режим брзе плоче",
-    "backspaceModeNormal": "Нормално (DEL)",
-    "behaviorAndAdvanced": "Понашање и напредно",
-    "bellStyle": "Стил звона",
-    "bellStyleBoth": "Обоје",
-    "bellStyleLabel": "Стил звона",
-    "bellStyleNone": "Ниједан",
-    "bellStyleSound": "Звук",
-    "bellStyleVisual": "Визуелно",
-    "colorTheme": "Тема боја",
-    "cursorBlink": "Трептање курсора",
-    "cursorBlinking": "Курсор трепери",
-    "cursorBlinkingDesc": "Омогући трепћућу анимацију за курсор терминала",
-    "cursorStyle": "Стил курсора",
-    "cursorStyleBar": "Бар",
-    "cursorStyleBlock": "Блок",
-    "cursorStyleLabel": "Стил курсора",
-    "cursorStyleUnderline": "Подвучено",
-    "customThemeAnsiColors": "ANSI боје",
-    "customThemeBackground": "Позадина",
-    "customThemeBlack": "Црна",
-    "customThemeBlue": "Плава",
-    "customThemeBrightBlack": "Светло црна",
-    "customThemeBrightBlue": "Светлоплава",
-    "customThemeBrightCyan": "Светло цијан",
-    "customThemeBrightGreen": "Светло зелена",
-    "customThemeBrightMagenta": "Светло магента",
-    "customThemeBrightRed": "Светло црвена",
-    "customThemeBrightWhite": "Светло бела",
-    "customThemeBrightYellow": "Светло жута",
-    "customThemeColors": "Прилагођене боје",
-    "customThemeCursor": "Курсор",
-    "customThemeCursorAccent": "Акцент курсора",
-    "customThemeCyan": "Цијан",
-    "customThemeForeground": "Предњи план",
-    "customThemeGreen": "Зелено",
-    "customThemeMagenta": "Магента",
-    "customThemeRed": "Црвена",
-    "customThemeResetTooltip": "Ресетуј на подразумеване вредности",
-    "customThemeSelection": "Избор",
-    "customThemeWhite": "Бела",
-    "customThemeYellow": "Жута",
-    "deleteGlobalThemeTooltip": "Обриши ову тему",
-    "docsLink": "Прикажи документе",
-    "enableAutoMosh": "Омогући аутоматско покретање",
-    "enableAutoMoshDesc": "Преферирај Mosh у односу на SSH ако је доступан",
-    "enableAutoTmux": "Омогући аутоматски Tmux",
-    "enableAutoTmuxDesc": "Одржавајте своју шкољку и све што се у њој покреће активним након прекида везе и поновног покретања прегледача покретањем унутар tmux-а (tmux мора бити инсталиран на хосту)",
-    "fastScrollModifier": "Модификатор брзог скроловања",
-    "fastScrollModifierAlt": "Алтернативно",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Модификатор брзог скроловања",
-    "fastScrollModifierShift": "Померање",
-    "fastScrollSensitivity": "Осетљивост брзог скроловања",
-    "fastScrollSensitivityLabel": "Осетљивост брзог скроловања",
-    "fontFamily": "Породица фонтова",
-    "fontFamilyCustomHint": "Изаберите фонт из пакета или изаберите „Прилагођено“ и унесите тачно име фонта који је већ инсталиран на вашем систему (нпр. MesloLGS NF, Noto Sans Mono). Termix не може да инсталира фонтове уместо вас, прво га инсталирајте на ваш оперативни систем.",
-    "fontFamilyCustomOption": "Прилагођено...",
-    "fontFamilyCustomPlaceholder": "Тачан назив фонта, нпр. MesloLGS NF",
-    "fontFamilyLabel": "Породица фонтова",
-    "fontSize": "Величина фонта",
-    "fontSizeLabel": "Величина фонта",
-    "hostNotFound": "Хост није пронађен",
-    "letterSpacing": "Размак између слова",
-    "letterSpacingPx": "Размак између слова (px)",
-    "lineHeight": "Висина линије",
-    "lineHeightLabel": "Висина линије",
-    "linkClickBehaviorConfirm": "Прикажи искачући прозор за отварање или копирање",
-    "linkClickBehaviorDesc": "Контролише шта се дешава када кликнете на линк у терминалу. Користите „Подразумевано“ да бисте пратили подешавање на нивоу апликације.",
-    "linkClickBehaviorDirect": "Отвори директно",
-    "linkClickBehaviorLabel": "Понашање при клику на линк",
-    "loadingHost": "Учитавање хоста...",
-    "localEchoAuto": "Аутоматски",
-    "localEchoDesc": "Предвиди безбедне притиске тастера за штампање локално на спорим везама. Упити за лозинку и контролни уноси се никада не понављају.",
-    "localEchoLabel": "Локални одјек",
-    "localEchoOff": "Искључено",
-    "localEchoOn": "Увек укључено",
-    "macOptionIsMetaLabel": "Тастер са опцијама шаље метаподатке",
-    "macOptionIsMetaShortDesc": "Онемогућите куцање специјалних знакова (као што су @ или |) помоћу тастера Option/Alt на macOS-у уместо слања Meta",
-    "moshCommand": "MOSH команда",
-    "moshCommandLabel": "Мош команда",
-    "noSavedThemes": "Још нема сачуваних тема",
-    "none": "Ниједан",
-    "passwordPromptAutoFillDesc": "Понуди унос сачуване лозинке када терминал то затражи. Искључи ову опцију да се лозинка никада не би аутоматски попуњавала на овом хосту.",
-    "passwordPromptAutoFillLabel": "Аутоматско попуњавање лозинке за понуду",
-    "autoReconnectLabel": "Аутоматско поновно повезивање",
-    "autoReconnectDesc": "Самостално се поново повезује када SSH веза прекине, као након прекида мреже или спавања. Задржава померање уназад.",
-    "rightClickSelectsWord": "Десни клик бира реч",
-    "rightClickSelectsWordLabel": "Десни клик бира реч",
-    "rightClickSelectsWordShortDesc": "Изаберите реч испод курсора кликом десним тастером миша",
-    "saveAsGlobalTheme": "Сачувај као глобалну тему",
-    "saveGlobalThemeError": "Чување теме није успело",
-    "saveGlobalThemeNamePrompt": "Унесите име за ову тему",
-    "saveGlobalThemeSuccess": "Тема је сачувана",
-    "savedThemesLabel": "Сачуване теме",
-    "scrollbackBufferLabel": "Бафер за померање уназад",
-    "scrollbackMaxLines": "Максималан број линија сачуваних у историји",
-    "sudoPasswordAutoFill": "Аутоматско попуњавање лозинке за Судо",
-    "sudoPasswordAutoFillDesc": "Сачувајте лозинку за sudo како би метрике хоста, упити терминала и други могли аутоматски да покрећу привилеговане команде.",
-    "sudoPasswordAutoFillLabel": "Аутоматско попуњавање лозинке за Sudo",
-    "syntaxCategoryIpAddresses": "IP адресе",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Нивои логова",
-    "syntaxCategoryLogLevelsDesc": "грешка, упозорење, информације, дебаговање, фатално",
-    "syntaxCategoryNumbers": "Означени бројеви",
-    "syntaxCategoryNumbersDesc": "порт 8080, излаз 1, статус 404",
-    "syntaxCategoryPaths": "Путање датотека",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "Временске ознаке",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 15.01.2024.",
-    "syntaxCategoryUrls": "URL-ови",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "Обоји излаз терминала (грешке, путање, IP адресе, временске ознаке)",
-    "syntaxHighlightingLabel": "Истицање синтаксе",
-    "terminalAppearance": "Изглед терминала",
-    "theme": "Тема",
-    "themePreview": "Преглед теме",
-    "useSSHTitleDesc": "Ажурирајте наслов картице из наслова прозора љуске уместо имена хоста",
-    "useSSHTitleLabel": "Користи SSH наслов прозора",
-    "enableTunnel": "Омогући тунел",
-    "enableFileManager": "Омогући менаџер датотека",
-    "enableDocker": "Омогући Докер",
-    "startupSnippet": "Исечак за покретање",
-    "quickActions": "Брзе акције",
-    "proxmoxLastSyncStatus": {
-      "success": "Успех"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} прескочено (није пронађена IP адреса)",
-    "proxmoxStatsUrlCopied": "URL Proxmox статистике је копиран у међуспремник",
-    "rdpUrlCopied": "RDP URL је копиран",
-    "vncUrlCopied": "VNC URL је копиран",
-    "filterAuthStepca": "Корак CA",
-    "guac": {
-      "noCredential": "Без акредитива (директни акредитиви испод)",
-      "authTypeDirect": "Директно",
-      "authTypeCredential": "Акредитив",
-      "authTypeNone": "Ниједан",
-      "recordingPath": "Путања снимања",
-      "recordingName": "Назив снимка",
-      "saveHostFirst": "Прво сачувајте домаћина.",
-      "sharingOptionsAfterSave": "Опције дељења су доступне након што је хост сачуван.",
-      "permissionLevel": "Ниво дозволе",
-      "typeHeader": "Тип",
-      "targetHeader": "Циљ",
-      "permissionHeader": "Дозвола",
-      "cancelBtn": "Откажи",
-      "savingBtn": "Чување...",
-      "updateHostBtn": "Ажурирај хост",
-      "addHostBtn": "Додај хоста"
-    },
-    "filterAuthVault": "Трезор"
-  },
-  "nav": {
-    "history": "Историја",
-    "localTerminal": "Локални терминал",
-    "sshTools": "SSH алати",
-    "terminal": "Терминал",
-    "macros": "Макрои"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Куцајте овде да бисте емитовали притиске тастера...",
-    "copyOnSelect": "Аутоматски копирај изабрани текст",
-    "enableRightClickCopyPaste": "Омогући копирање/лепљење десним кликом",
-    "fillPassword": "Попуните лозинку",
-    "fillPasswordMissing": "Нема сачуване лозинке за {{count}} изабраних терминала",
-    "fillPasswordSuccess": "Лозинка је унета у {{count}} терминал(а)",
-    "keyRecordingTitle": "Снимање кључа",
-    "noTerminalTabsOpen": "Нема отворених картица терминала",
-    "recordToTerminals": "Снимање на терминале",
-    "selectAll": "Сви",
-    "selectNone": "Ниједан",
-    "selectTerminalsAbove": "Изаберите терминале изнад",
-    "settingsTitle": "Подешавања",
-    "startRecording": "Почни снимање",
-    "stopRecording": "Заустави снимање"
-  },
-  "keybindings": {
-    "copy": "Копирај избор",
-    "paste": "Залепи",
-    "sendControlCode": "Пошаљи сигнал Ctrl+слово",
-    "sendText": "Пошаљи текст",
-    "controlCodeLabel": "Писмо",
-    "textLabel": "Текст за слање",
-    "appendEnterLabel": "Притисните Ентер након слања",
-    "clipboardPermissionNote": "Може затражити дозволу за међуспремник при првој употреби у неким прегледачима.",
-    "textRequired": "Унесите текст за слање",
-    "controlCodeRequired": "Унесите једно слово за контролни код",
-    "builtIn": {
-      "copyCtrlC": "Копирај селекцију (Ctrl+C, само када је текст изабран)",
-      "copyCtrlShiftC": "Копирај селекцију (Ctrl+Shift+C)",
-      "copyCmdC": "Копирај селекцију (Cmd+C)",
-      "pasteCtrlShiftV": "Налепи из међуспремника (Ctrl+Shift+V)",
-      "ctrlW": "Пошаљи Ctrl+W у љуску (блокирано затварање картице прегледача)",
-      "ctrlT": "Пошаљи Ctrl+T у shell (блокирано отварање картице прегледача)",
-      "ctrlN": "Пошаљи Ctrl+N у shell (блокирано отварање прозора прегледача)",
-      "ctrlQ": "Пошаљи Ctrl+Q у shell (блокирано затварање прегледача)"
-    }
-  },
-  "macros": {
-    "title": "Макрои",
-    "description": "Покрените сачувану серију команди у терминалу и реагујте на оно што сервер пошаље назад.",
-    "target": "Циљ",
-    "noTerminal": "Ниједан терминал није отворен",
-    "empty": "Још нема макроа",
-    "emptyHint": "Направите макро за аутоматизацију тока рада терминала, као што је пријављивање, поновно покретање сервиса или одговарање на упите.",
-    "create": "Нови макро",
-    "back": "Назад на макрое",
-    "name": "Име",
-    "namePlaceholder": "Поново покрените веб сервер",
-    "nameRequired": "Дајте макроу име пре чувања",
-    "descriptionLabel": "Опис",
-    "descriptionPlaceholder": "Шта овај макро ради (опционо)",
-    "unsaved": "Несачуване промене",
-    "save": "Сачувај",
-    "saved": "Макро је сачуван",
-    "saveFailed": "Није могуће сачувати макро",
-    "delete": "Обриши",
-    "deleteTitle": "Да ли желите да обришете овај макро?",
-    "deleteBody": "„{{name}}“ ће бити трајно обрисано. Ова радња се не може поништити.",
-    "deleted": "Макро је обрисан",
-    "cancel": "Откажи",
-    "run": "Трчи",
-    "stop": "Заустави",
-    "running": "Трчи се...",
-    "completed": "Макро је завршен",
-    "failed": "Макро није успео",
-    "loadFailed": "Није могуће учитати макрое",
-    "needTerminal": "Прво отворите и повежите терминал",
-    "noSteps": "Овај макро још нема кораке. Додајте један испод.",
-    "addStep": "Додај корак",
-    "stepNumber": "Корак {{number}}",
-    "removeStep": "Уклони корак",
-    "confirmRunTitle": "Покрени овај макро?",
-    "confirmRunBody": "„{{name}}“ ће послати команде на {{host}}.",
-    "confirmRunAction": "Покрени макро",
-    "stepTypes": {
-      "send": {
-        "label": "Пошаљи команду",
-        "help": "Уноси текст у терминал, исто као да сте га откуцали."
-      },
-      "wait": {
-        "label": "Сачекајте излаз",
-        "help": "Паузира док сервер не одштампа текст који наведете, као што је захтев за лозинку."
-      },
-      "delay": {
-        "label": "Пауза",
-        "help": "Чека одређено време пре следећег корака."
-      },
-      "if": {
-        "label": "Ако излаз садржи",
-        "help": "Проверава све што је сервер до сада одштампао, а затим покреће једну од две гране."
-      },
-      "repeat": {
-        "label": "Понови",
-        "help": "Покреће кораке унутар њега одређени број пута."
-      }
-    },
-    "send": {
-      "text": "Команда или текст",
-      "textPlaceholder": "системцтл рестартовање нгинкса",
-      "pressEnter": "Притисните Ентер након слања",
-      "pressEnterHelp": "Искључите ово да бисте куцали текст без његовог слања."
-    },
-    "wait": {
-      "pattern": "Сачекајте док излаз не садржи",
-      "patternPlaceholder": "лозинка:",
-      "timeout": "Одустани после",
-      "onTimeout": "Ако се никада не појави",
-      "stop": "Зауставите макро",
-      "continue": "Настави у сваком случају"
-    },
-    "delay": {
-      "duration": "Сачекајте"
-    },
-    "ifStep": {
-      "pattern": "Ако излаз садржи",
-      "patternPlaceholder": "Активно: активно (покреће се)",
-      "then": "Онда уради ово",
-      "else": "У супротном, урадите ово",
-      "emptyBranch": "Без степеница"
-    },
-    "repeat": {
-      "count": "Број пута",
-      "times": "пута"
-    },
-    "match": {
-      "useRegex": "Упари се са регуларним изразом",
-      "useRegexHelp": "Оставите ово искључено да би текст тачно одговарао написаном тексту.",
-      "invalidRegex": "Није важећи регуларни израз, биће упарен као обичан текст"
-    },
-    "seconds": "секунде",
-    "secondsShort": "{{count}}с"
-  },
-  "errors": {
-    "remoteServerRequired": "Потребан је удаљени сервер. Повежите се са удаљеним сервером у Подешавањима да бисте користили овај тип везе."
-  },
-  "plugin": {
-    "name": "SSH терминал"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/sv_SE.json b/plugins/ssh-terminal/locales/translated/sv_SE.json
deleted file mode 100644
index 520b8e7ad..000000000
--- a/plugins/ssh-terminal/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Tillägga",
-    "arrowDown": "Pil nedåt",
-    "arrowLeft": "Pil vänster",
-    "arrowRight": "Pil höger",
-    "arrowUp": "Pil upp",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Del",
-    "done": "Gjort",
-    "editQuickKeys": "Redigera snabbknappar",
-    "end": "Avsluta",
-    "esc": "Esc",
-    "home": "Hem",
-    "pageDown": "PgDn",
-    "pageUp": "PgUp",
-    "paste": "Klistra",
-    "quickKeyPlaceholder": "t.ex. sudo ",
-    "quickKeysDesc": "Tryck på × för att ta bort. Stöder upp till 8 tecken.",
-    "quickKeysTitle": "Snabbtangenter",
-    "removeQuickKey": "Ta bort",
-    "resetDefaults": "Återställ till standardinställningarna",
-    "shift": "Flytta",
-    "tab": "Flik"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Misslyckades med att aktivera Auto-Tmux",
-    "autoTmuxEnabled": "Auto-Tmux aktiverat för {{host}}. Det gäller från nästa anslutning.",
-    "clipboardHttpWarning": "Kunde inte läsa urklippet. Vissa webbläsare begränsar åtkomst till urklipp utanför HTTPS - prova Ctrl+V istället, eller servera Termix över HTTPS.",
-    "closeTab": "Nära",
-    "connecting": "Ansluter...",
-    "connectionLost": "Anslutningen förlorades",
-    "connectionRejected": "Anslutningen avvisades av servern. Kontrollera din autentisering och nätverkskonfiguration.",
-    "connectionTimeout": "Anslutningstimeout",
-    "enableAutoTmuxAction": "Aktivera Auto-Tmux",
-    "hostKeyRejected": "Verifiering av SSH-värdnyckel avvisad. Anslutningen avbröts.",
-    "linkDialogCopy": "Kopiera",
-    "linkDialogOpen": "Öppna",
-    "linkDialogTitle": "Öppna länk",
-    "maxReconnectAttemptsReached": "Maximalt antal återanslutningsförsök uppnådda",
-    "noHostSelected": "Ingen värd vald",
-    "passwordPromptFillTitle": "Fyll i det sparade lösenordet i den här frågan?",
-    "reconnect": "Återanslut",
-    "reconnected": "Återansluten lyckades",
-    "reconnecting": "Återansluter... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Anslutningen bruten, återansluter...",
-    "searchCaseSensitive": "Matchfodral",
-    "searchClose": "Stäng (Escape)",
-    "searchNext": "Nästa match (Enter)",
-    "searchNoResults": "Inga resultat",
-    "searchPlaceholder": "Hitta",
-    "searchPrevious": "Föregående matchning (Shift+Enter)",
-    "searchRegex": "Använd reguljärt uttryck",
-    "searchResultCount": "{{index}} av {{count}}",
-    "searchWholeWord": "Matcha hela ordet",
-    "sessionExpiredNotice": "Din föregående session på {{host}} gick ut efter {{minutes}} minuters frånkoppling; skalet och allt som körs i det är borta. Aktivera Auto-Tmux på den här värden för att hålla sessionerna aktiva.",
-    "sessionExpiredNoticeNoMinutes": "Din föregående session på {{host}} upphörde medan den var frånkopplad; skalet och allt som körs i det är borta. Aktivera Auto-Tmux på den här värden för att hålla sessionerna aktiva.",
-    "sessionTakenOver": "Sessionen öppnades i en annan flik. Återansluter...",
-    "tmuxAttached": "Anslutna klienter",
-    "tmuxAttachedCount": "{{count}} bifogad",
-    "tmuxCopyHint": "Justera markeringen och tryck på Enter för att kopiera till urklipp",
-    "tmuxCreateNew": "Starta ny session",
-    "tmuxDetached": "Losskopplad från tmux-sessionen",
-    "tmuxLastActivity": "Senaste aktivitet",
-    "tmuxSessionAttached": "tmux-session bifogad: {{name}}",
-    "tmuxSessionCreated": "tmux-session skapad: {{name}}",
-    "tmuxSessionPickerDesc": "Befintliga tmux-sessioner hittades på den här värden. Välj en för att återansluta eller skapa en ny session.",
-    "tmuxSessionPickerTitle": "tmux-sessioner",
-    "tmuxTimeDays": "för {{count}}dagar sedan",
-    "tmuxTimeHours": "för {{count}}timmar sedan",
-    "tmuxTimeJustNow": "just nu",
-    "tmuxTimeMinutes": "för {{count}}minuter sedan",
-    "tmuxUnavailable": "tmux är inte installerat på fjärrdatorn, utan återgår till standardskal",
-    "tmuxWindowCount": "{{count}} fönster",
-    "tmuxWindows": "Fönster",
-    "unknownError": "Okänt fel inträffade",
-    "websocketAbnormalClose": "Anslutningen stängdes oväntat. Detta kan bero på ett problem med omvänd proxy eller SSL-konfigurationen. Kontrollera serverloggarna.",
-    "websocketError": "WebSocket-anslutningsfel",
-    "clipboardReadFailed": "Kunde inte läsa från urklipp. Kontrollera att behörigheter för urklipp är beviljade.",
-    "clipboardWriteFailed": "Kunde inte kopiera till urklipp. Kontrollera att sidan serveras via HTTPS eller localhost.",
-    "connected": "Ansluten",
-    "totpCodeLabel": "Verifieringskod",
-    "duplicateTab": "Duplicera fliken",
-    "imageChooseFile": "Välj en bildfil",
-    "imageUploaded": "Bild uppladdad: {{path}}",
-    "imageClipboardUnavailable": "Den här webbläsaren kan inte läsa bilder från urklipp",
-    "imageClipboardEmpty": "Ingen bild hittades i urklipp",
-    "localShell": "Lokalt terminalskal",
-    "autocompleteHintComplete": "Tab eller Enter för att slutföra",
-    "autocompleteHintNavigate": "↑↓ för att navigera",
-    "autocompleteHintClose": "Esc för att stänga"
-  },
-  "terminalToolbar": {
-    "detachTmux": "Lossa tmux",
-    "detachTmuxDescription": "Koppla bort tmux-session",
-    "dismissError": "Stäng bildfel",
-    "hideToolbar": "Dölj verktygsfältet",
-    "image": "Bildåtgärder (endast bilder)",
-    "imageActionFailed": "Bildåtgärden misslyckades",
-    "layout": "Verktygsfältets visningsläge",
-    "layoutExpanded": "Utökad med mätvärden",
-    "layoutIcon": "Endast ikon",
-    "layoutLabeled": "Ikoner och etiketter",
-    "moveToolbar": "Flytta verktygsfältet",
-    "moveToolbarHint": "Dra för att flytta verktygsfältet",
-    "paste": "Klistra in bild",
-    "pasteImage": "Klistra in bild från urklipp (endast bilder)",
-    "retry": "Försöka igen",
-    "showToolbar": "Expandera verktygsfältet",
-    "upload": "Ladda upp bild",
-    "uploadImage": "Ladda upp en bild till värden",
-    "uploadingImage": "Laddar upp..."
-  },
-  "history": {
-    "noTerminalSelected": "Ingen terminal vald",
-    "noTerminalSelectedHint": "Öppna en SSH-terminalflik för att visa dess kommandohistorik",
-    "searchPlaceholder": "Sökhistorik...",
-    "clearAll": "Rensa alla",
-    "noHistoryEntries": "Inga historikposter",
-    "trackingDisabled": "Historikspårning är inaktiverad",
-    "trackingDisabledHint": "Aktivera kommandohistorik på den här värdens SSH-terminalflik.",
-    "commandCount_one": "{{count}} kommando",
-    "commandCount_other": "{{count}} kommandon"
-  },
-  "touchInput": {
-    "enabled": "Aktivera pekinmatning",
-    "enabledDesc": "Tillåt scrollning med ett finger i terminaler",
-    "momentumEnabled": "Aktivera momentum",
-    "momentumEnabledDesc": "Fortsätt skrolla kort efter en svepning",
-    "advanced": "Avancerad",
-    "resetDefaults": "Återställ till standardinställningarna",
-    "dragThreshold": "Draggräns",
-    "maxWheelDelta": "Maximal hjuldelta",
-    "momentumSampleWindow": "Momentum-exempelfönster",
-    "releaseGracePeriod": "Frigivningsfrist",
-    "minimumVelocity": "Minsta hastighet",
-    "maximumVelocity": "Maximal hastighet",
-    "maximumDuration": "Maximal varaktighet",
-    "maximumTravel": "Maximal resa",
-    "decayTime": "Avklingningstid",
-    "pixelsPerTick": "Pixlar per tick",
-    "maximumFrameInterval": "Maximalt bildintervall",
-    "maximumTicksPerFrame": "Maximalt antal ticks per bildruta"
-  },
-  "imageStorage": {
-    "instanceId": "Terminalsessionsinstans-ID",
-    "instanceIdDesc": "Instans-ID för en av dina anslutna terminalflikar, används för att testa synligheten.",
-    "selectedModeUnavailable": "Inte tillgänglig",
-    "test": "Testa",
-    "testing": "Testning...",
-    "testFailed": "Misslyckades med att testa bildlagring",
-    "testConnected": "Terminalsessionen är ansluten.",
-    "testNotConnected": "Ingen ansluten terminalsession med detta instans-ID.",
-    "testSelectedMode": "En uppladdning skulle använda: {{mode}}",
-    "testLocalVisible": "Den lokala katalogen är synlig från den anslutna värden.",
-    "testLocalNotVisible": "Den lokala katalogen är INTE synlig från den anslutna värden."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Pekinmatning",
-        "images": "Bildlagring",
-        "sessions": "Sessioner",
-        "newHosts": "Nya värdar"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Terminalsessionens persistens",
-        "description": "Hur länge en frånkopplad terminal hålls aktiv på servern innan den stängs. Min 1, max 1440 minuter. För sessioner som måste överleva detta, aktivera Auto-Tmux på värden."
-      },
-      "commandHistoryEnabled": {
-        "label": "Kommandohistorik",
-        "description": "Tillåt inspelning av kommandohistorik. När det är inaktiverat sparas inte historiken oavsett inställningarna per värd."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "Kommandohistorik för nya värdar",
-        "description": "Om nya värdar börjar med kommandohistorik aktiverad."
-      },
-      "imageStorageMode": {
-        "label": "Lagringsläge",
-        "description": "Där inklistrade och uppladdade terminalbilder skrivs. Automatiska val via anslutning, lokal och fjärransluten (SFTP) är åtgärdade.",
-        "auto": "Bil",
-        "local": "Lokal",
-        "remoteSftp": "Fjärrstyrning (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Lokal katalog",
-        "description": "Absolut sökväg på Termix-backend där lokalt läge skriver bilder. Visas aldrig efter sparning. Tom använder TERMIX_IMAGE_DIR."
-      },
-      "imageHostPath": {
-        "label": "Värdsökväg",
-        "description": "Värdsidans vy av den lokala katalogen som terminalagenter tar emot."
-      },
-      "imageTtlMs": {
-        "label": "TTL (ms)",
-        "description": "Hur länge en uppladdad bild sparas, i millisekunder. Tom använder TERMIX_IMAGE_TTL_MS eller en timme."
-      },
-      "imageMaxCount": {
-        "label": "Max antal bilder",
-        "description": "De flesta bilder sparas samtidigt. Tomma alternativ använder TERMIX_MAX_IMAGE_COUNT eller 100."
-      },
-      "imageMaxBytes": {
-        "label": "Max antal lagringsbyte",
-        "description": "Flest byte av bilder lagras samtidigt. Tomma lagringsplatser använder TERMIX_MAX_IMAGE_STORAGE_BYTES eller 5 GiB."
-      },
-      "sessionPersistence": {
-        "label": "Behåll sessioner efter frånkoppling",
-        "description": "Håll en frånkopplad terminal aktiv på servern under ovanstående tid, så att öppnandet av fliken fortsätter där den slutade."
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "Kör nya värdars terminaler inuti tmux så att sessioner överlever frånkopplingar (kräver tmux på värden)"
-      },
-      "newHostTheme": {
-        "label": "Tema för nya värdar",
-        "description": "Terminaltemat som en ny värd börjar med."
-      },
-      "newHostFontFamily": {
-        "label": "Typsnitt för nya värdar",
-        "description": "Terminaltypsnittet som en ny värd börjar med."
-      },
-      "newHostFontSize": {
-        "label": "Teckenstorlek för nya värdar",
-        "description": "Terminalens teckenstorlek som en ny värd börjar med, i pixlar."
-      },
-      "newHostCursorStyle": {
-        "label": "Markörstil för nya värdar"
-      },
-      "newHostCursorBlink": {
-        "label": "Blinkande markör för nya värdar"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Aktivera terminalverktygsfältet",
-        "description": "Visa en snabbåtkomstverktygsfält dockad till den aktiva terminalen för den här värdens verktyg och livestatistik"
-      },
-      "terminalToolbarPosition": {
-        "label": "Verktygsfältets position",
-        "description": "Där verktygsfältet sitter i terminalen. Du kan fortfarande dra det därifrån.",
-        "bottom": "Nederst i mitten",
-        "bottomLeft": "Nederst till vänster",
-        "bottomRight": "Nederst till höger",
-        "top": "Övre mitten",
-        "topLeft": "Övre vänster",
-        "topRight": "Övre högra"
-      },
-      "terminalToolbarStartState": {
-        "label": "Verktygsfältets startläge",
-        "description": "Om verktygsfältet öppnas expanderat eller minimerat när terminalen ansluter",
-        "expanded": "Utökad",
-        "collapsed": "Minimerad"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Verktygsfältets visningsläge",
-        "description": "Hur knapparna i verktygsfältet visas. Senast använda sparar det du valde i verktygsfältet.",
-        "remember": "Senast använd",
-        "icon": "Endast ikon",
-        "labeled": "Ikoner och etiketter",
-        "expanded": "Utökad med statistik"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Visa livestatistik",
-        "description": "Visa statistik för livevärdar ovanför verktygsfältsknapparna i utökat läge"
-      },
-      "terminalToolbarFade": {
-        "label": "Tona vid inaktivitet",
-        "description": "Tona ut verktygsfältet tills du håller muspekaren över det"
-      },
-      "enableCommandHistory": {
-        "label": "Kommandohistorik",
-        "description": "Record-kommandon körs i den här terminalen för historik och autofullständig ifyllning"
-      },
-      "enableTerminal": {
-        "label": "Aktivera terminalen",
-        "description": "Erbjud en SSH-terminal för den här värden."
-      },
-      "inheritAppearance": {
-        "label": "Använd användarstandarder"
-      },
-      "theme": {
-        "label": "Tema"
-      },
-      "cursorBlink": {
-        "label": "Blinkande markör"
-      },
-      "cursorStyle": {
-        "label": "Markörstil"
-      },
-      "fontSize": {
-        "label": "Fontstorlek"
-      },
-      "fontFamily": {
-        "label": "Font"
-      },
-      "scrollback": {
-        "label": "Skrolla tillbaka"
-      },
-      "letterSpacing": {
-        "label": "Bokstavsavstånd"
-      },
-      "lineHeight": {
-        "label": "Linjehöjd"
-      },
-      "bellStyle": {
-        "label": "Klocka"
-      },
-      "minimumContrastRatio": {
-        "label": "Minsta kontrastförhållande"
-      },
-      "backgroundImage": {
-        "label": "Bakgrundsbild"
-      },
-      "backgroundImageOpacity": {
-        "label": "Bakgrundsbildens opacitet"
-      },
-      "customThemeColors": {
-        "label": "Anpassade temafärger"
-      },
-      "rightClickSelectsWord": {
-        "label": "Högerklicka markerar ord"
-      },
-      "macOptionIsMeta": {
-        "label": "Alternativet är Meta"
-      },
-      "fastScrollModifier": {
-        "label": "Snabb bläddringsknapp"
-      },
-      "fastScrollSensitivity": {
-        "label": "Snabb scrollhastighet"
-      },
-      "backspaceMode": {
-        "label": "Backsteg"
-      },
-      "autoMosh": {
-        "label": "Automosh"
-      },
-      "moshCommand": {
-        "label": "Mosh-kommandot"
-      },
-      "autoTmux": {
-        "label": "Auto tmux"
-      },
-      "useSSHTitle": {
-        "label": "Använd SSH-titeln"
-      },
-      "syntaxHighlighting": {
-        "label": "Syntaxmarkering"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Syntaxmarkeringskategorier"
-      },
-      "linkClickBehavior": {
-        "label": "Länkklick"
-      },
-      "localEcho": {
-        "label": "Lokalt eko"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Erbjud dig att fylla i lösenordsförfrågningar"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Fyll i sudo-prompter"
-      },
-      "autoReconnect": {
-        "label": "Återanslut automatiskt"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Kommando Autokomplettering",
-        "description": "Visa autokomplettering medan du skriver om du trycker på tabbtangenten"
-      },
-      "localEcho": {
-        "label": "Lokalt eko",
-        "description": "Minska upplevd inmatningsfördröjning med hjälp av säker lokal tangenttryckningsprediktion"
-      },
-      "linkClickBehavior": {
-        "label": "Klicka på terminallänken",
-        "description": "Standardbeteende vid klick på länkar i terminalen"
-      },
-      "customThemes": {
-        "label": "Sparade teman"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Lokal terminal"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Använd live-terminalsessioner",
-      "description": "Låter andra funktioner, som sessionsdelning och inspelning, nå dina live-terminalsessioner."
-    },
-    "history": {
-      "title": "Läs kommandohistorik",
-      "description": "Låter andra funktioner, som AI-assistenten, läsa din kommandohistorik."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Terminal",
-    "addHost": "Lägg till värd",
-    "applyGlobalThemeTooltip": "Använd detta tema",
-    "backgroundImageDesc": "Valfri URL för en bakgrundsbild i terminalen",
-    "backgroundImageLabel": "Bakgrundsbildens URL",
-    "backgroundImageOpacityLabel": "Bakgrundsbildens opacitet",
-    "backspaceMode": "Backstegsläge",
-    "backspaceModeControlH": "Kontroll-H (BS)",
-    "backspaceModeLabel": "Backstegsläge",
-    "backspaceModeNormal": "Normal (DEL)",
-    "behaviorAndAdvanced": "Beteende och avancerat",
-    "bellStyle": "Klockstil",
-    "bellStyleBoth": "Både",
-    "bellStyleLabel": "Klockstil",
-    "bellStyleNone": "Ingen",
-    "bellStyleSound": "Ljud",
-    "bellStyleVisual": "Visuell",
-    "colorTheme": "Färgtema",
-    "cursorBlink": "Markörblinkning",
-    "cursorBlinking": "Markören blinkar",
-    "cursorBlinkingDesc": "Aktivera blinkande animering för terminalmarkören",
-    "cursorStyle": "Markörstil",
-    "cursorStyleBar": "Bar",
-    "cursorStyleBlock": "Blockera",
-    "cursorStyleLabel": "Markörstil",
-    "cursorStyleUnderline": "Betona",
-    "customThemeAnsiColors": "ANSI-färger",
-    "customThemeBackground": "Bakgrund",
-    "customThemeBlack": "Svart",
-    "customThemeBlue": "Blå",
-    "customThemeBrightBlack": "Ljussvart",
-    "customThemeBrightBlue": "Klarblå",
-    "customThemeBrightCyan": "Ljus cyan",
-    "customThemeBrightGreen": "Ljusgrön",
-    "customThemeBrightMagenta": "Ljus magenta",
-    "customThemeBrightRed": "Klarröd",
-    "customThemeBrightWhite": "Klarvit",
-    "customThemeBrightYellow": "Klargul",
-    "customThemeColors": "Anpassade färger",
-    "customThemeCursor": "Markör",
-    "customThemeCursorAccent": "Marköraccent",
-    "customThemeCyan": "Cyan",
-    "customThemeForeground": "Förgrund",
-    "customThemeGreen": "Grön",
-    "customThemeMagenta": "Magenta",
-    "customThemeRed": "Röd",
-    "customThemeResetTooltip": "Återställ till standardinställningarna",
-    "customThemeSelection": "Urval",
-    "customThemeWhite": "Vit",
-    "customThemeYellow": "Gul",
-    "deleteGlobalThemeTooltip": "Ta bort det här temat",
-    "docsLink": "Visa dokument",
-    "enableAutoMosh": "Aktivera Auto-Mosh",
-    "enableAutoMoshDesc": "Föredra Mosh framför SSH om tillgängligt",
-    "enableAutoTmux": "Aktivera Auto-Tmux",
-    "enableAutoTmuxDesc": "Håll ditt skal och allt som körs i det vid liv även efter frånkopplingar och omstart av webbläsare genom att köra det inuti tmux (tmux måste vara installerat på värden)",
-    "fastScrollModifier": "Snabbrullningsmodifierare",
-    "fastScrollModifierAlt": "Alt",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Snabbrullningsmodifierare",
-    "fastScrollModifierShift": "Flytta",
-    "fastScrollSensitivity": "Snabb rullningskänslighet",
-    "fastScrollSensitivityLabel": "Snabb rullningskänslighet",
-    "fontFamily": "Typsnittsfamilj",
-    "fontFamilyCustomHint": "Välj ett paketerat teckensnitt, eller välj Anpassad och skriv det exakta namnet på ett teckensnitt som redan är installerat på ditt system (t.ex. MesloLGS NF, Noto Sans Mono). Termix kan inte installera teckensnitt åt dig, installera det på ditt operativsystem först.",
-    "fontFamilyCustomOption": "Beställnings...",
-    "fontFamilyCustomPlaceholder": "Exakt typsnittsnamn, t.ex. MesloLGS NF",
-    "fontFamilyLabel": "Typsnittsfamilj",
-    "fontSize": "Fontstorlek",
-    "fontSizeLabel": "Fontstorlek",
-    "hostNotFound": "Värden hittades inte",
-    "letterSpacing": "Bokstavsavstånd",
-    "letterSpacingPx": "Bokstavsavstånd (px)",
-    "lineHeight": "Linjehöjd",
-    "lineHeightLabel": "Linjehöjd",
-    "linkClickBehaviorConfirm": "Visa popup för att öppna eller kopiera",
-    "linkClickBehaviorDesc": "Styr vad som händer när du klickar på en länk i terminalen. Använd \"Standard\" för att följa inställningen på appnivå.",
-    "linkClickBehaviorDirect": "Öppna direkt",
-    "linkClickBehaviorLabel": "Länkklickbeteende",
-    "loadingHost": "Laddar värd...",
-    "localEchoAuto": "Automatisk",
-    "localEchoDesc": "Förutsäg säkra utskrivbara tangenttryckningar lokalt på långsamma anslutningar. Lösenordsförfrågningar och kontrollinmatning upprepas aldrig.",
-    "localEchoLabel": "Lokalt eko",
-    "localEchoOff": "Av",
-    "localEchoOn": "Alltid på",
-    "macOptionIsMetaLabel": "Alternativtangenten skickar meta",
-    "macOptionIsMetaShortDesc": "Inaktivera möjligheten att skriva specialtecken (som @ eller |) med Alternativ/Alt-tangenten på macOS istället för att skicka Meta",
-    "moshCommand": "MOSH-kommandot",
-    "moshCommandLabel": "Mosh-kommandot",
-    "noSavedThemes": "Inga sparade teman ännu",
-    "none": "Ingen",
-    "passwordPromptAutoFillDesc": "Erbjud dig att fylla i det sparade lösenordet när terminalen ber om det. Stäng av för att aldrig automatiskt fylla i något lösenord på den här värden.",
-    "passwordPromptAutoFillLabel": "Erbjudandelösenord automatiskt ifyllt",
-    "autoReconnectLabel": "Automatisk återanslutning",
-    "autoReconnectDesc": "Återansluter av sig själv när SSH-anslutningen bryts, till exempel efter ett nätverksavbrott eller viloläge. Behåller bakåtskrollningen.",
-    "rightClickSelectsWord": "Högerklicka markerar ord",
-    "rightClickSelectsWordLabel": "Högerklicka Markerar ord",
-    "rightClickSelectsWordShortDesc": "Markera ordet under markören vid högerklick",
-    "saveAsGlobalTheme": "Spara som globalt tema",
-    "saveGlobalThemeError": "Misslyckades med att spara temat",
-    "saveGlobalThemeNamePrompt": "Ange ett namn för detta tema",
-    "saveGlobalThemeSuccess": "Temat sparat",
-    "savedThemesLabel": "Sparade teman",
-    "scrollbackBufferLabel": "Scrollback-buffert",
-    "scrollbackMaxLines": "Maximalt antal rader som sparas i historiken",
-    "sudoPasswordAutoFill": "Sudo-lösenordsautomatik",
-    "sudoPasswordAutoFillDesc": "Lagra ett sudo-lösenord så att värdmätvärden, terminalprompter och annat kan köra privilegierade kommandon automatiskt.",
-    "sudoPasswordAutoFillLabel": "Sudo-lösenordsautomatik",
-    "syntaxCategoryIpAddresses": "IP-adresser",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Loggnivåer",
-    "syntaxCategoryLogLevelsDesc": "fel, varna, information, felsök, dödlig",
-    "syntaxCategoryNumbers": "Märkta nummer",
-    "syntaxCategoryNumbersDesc": "port 8080, utgång 1, status 404",
-    "syntaxCategoryPaths": "Filsökvägar",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/fil.txt",
-    "syntaxCategoryTimestamps": "Tidsstämplar",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 2024-01-15",
-    "syntaxCategoryUrls": "URL:er",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "Färglägg terminalutdata (fel, sökvägar, IP-adresser, tidsstämplar)",
-    "syntaxHighlightingLabel": "Syntaxmarkering",
-    "terminalAppearance": "Terminalens utseende",
-    "theme": "Tema",
-    "themePreview": "Förhandsvisning av tema",
-    "useSSHTitleDesc": "Uppdatera flikrubriken från skalets fönsterrubriken istället för värdnamnet",
-    "useSSHTitleLabel": "Använd SSH-fönstertitel",
-    "enableTunnel": "Aktivera tunnel",
-    "enableFileManager": "Aktivera filhanteraren",
-    "enableDocker": "Aktivera Docker",
-    "startupSnippet": "Startkodavsnitt",
-    "quickActions": "Snabbåtgärder",
-    "proxmoxLastSyncStatus": {
-      "success": "Framgång"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} hoppades över (ingen IP-adress hittades)",
-    "proxmoxStatsUrlCopied": "Proxmox Stats URL kopierad till urklipp",
-    "rdpUrlCopied": "RDP-URL kopierad",
-    "vncUrlCopied": "VNC-URL kopierad",
-    "filterAuthStepca": "Steg CA",
-    "guac": {
-      "noCredential": "Ingen referens (direkta referenser nedan)",
-      "authTypeDirect": "Direkt",
-      "authTypeCredential": "Referenser",
-      "authTypeNone": "Ingen",
-      "recordingPath": "Inspelningsväg",
-      "recordingName": "Inspelningsnamn",
-      "saveHostFirst": "Spara värden först.",
-      "sharingOptionsAfterSave": "Delningsalternativ är tillgängliga efter att värden har sparats.",
-      "permissionLevel": "Behörighetsnivå",
-      "typeHeader": "Typ",
-      "targetHeader": "Mål",
-      "permissionHeader": "Tillstånd",
-      "cancelBtn": "Avboka",
-      "savingBtn": "Sparande...",
-      "updateHostBtn": "Uppdatera värd",
-      "addHostBtn": "Lägg till värd"
-    },
-    "filterAuthVault": "Valv"
-  },
-  "nav": {
-    "history": "Historia",
-    "localTerminal": "Lokal terminal",
-    "sshTools": "SSH-verktyg",
-    "terminal": "Terminal",
-    "macros": "Makron"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Skriv här för att sända tangenttryckningar...",
-    "copyOnSelect": "Kopiera markerad text automatiskt",
-    "enableRightClickCopyPaste": "Aktivera högerklickskopiera/klistra in",
-    "fillPassword": "Fyll i lösenordet",
-    "fillPasswordMissing": "Inget sparat lösenord för {{count}} vald(a) terminal(er)",
-    "fillPasswordSuccess": "Ifyllt lösenord i {{count}} terminal(er)",
-    "keyRecordingTitle": "Nyckelinspelning",
-    "noTerminalTabsOpen": "Inga terminalflikar öppna",
-    "recordToTerminals": "Spela in till terminaler",
-    "selectAll": "Alla",
-    "selectNone": "Ingen",
-    "selectTerminalsAbove": "Välj terminaler ovan",
-    "settingsTitle": "Inställningar",
-    "startRecording": "Starta inspelning",
-    "stopRecording": "Stoppa inspelningen"
-  },
-  "keybindings": {
-    "copy": "Kopiera val",
-    "paste": "Klistra",
-    "sendControlCode": "Skicka Ctrl+bokstavssignal",
-    "sendText": "Skicka sms",
-    "controlCodeLabel": "Brev",
-    "textLabel": "SMS att skicka",
-    "appendEnterLabel": "Tryck Enter efter att du skickat",
-    "clipboardPermissionNote": "Kan be om behörighet för urklipp vid första användningen i vissa webbläsare.",
-    "textRequired": "Ange texten som ska skickas",
-    "controlCodeRequired": "Ange en enda bokstav för kontrollkoden",
-    "builtIn": {
-      "copyCtrlC": "Kopiera markering (Ctrl+C, endast när text är markerad)",
-      "copyCtrlShiftC": "Kopiera markering (Ctrl+Skift+C)",
-      "copyCmdC": "Kopiera markering (Cmd+C)",
-      "pasteCtrlShiftV": "Klistra in från urklipp (Ctrl+Shift+V)",
-      "ctrlW": "Skicka Ctrl+W till shell (blockeras från att stänga webbläsarfliken)",
-      "ctrlT": "Skicka Ctrl+T till shell (blockerad från att öppna webbläsarfliken)",
-      "ctrlN": "Skicka Ctrl+N till shell (blockeras från att öppna webbläsarfönster)",
-      "ctrlQ": "Skicka Ctrl+Q till shell (blockeras från att avsluta webbläsaren)"
-    }
-  },
-  "macros": {
-    "title": "Makron",
-    "description": "Kör en sparad serie kommandon i en terminal och reagera på vad servern skickar tillbaka.",
-    "target": "Mål",
-    "noTerminal": "Ingen terminal öppen",
-    "empty": "Inga makron ännu",
-    "emptyHint": "Skapa ett makro för att automatisera ett terminalflöde, som att logga in, starta om en tjänst eller svara på frågor.",
-    "create": "Nytt makro",
-    "back": "Tillbaka till makron",
-    "name": "Namn",
-    "namePlaceholder": "Starta om webbservern",
-    "nameRequired": "Ge makrot ett namn innan du sparar",
-    "descriptionLabel": "Beskrivning",
-    "descriptionPlaceholder": "Vad detta makro gör (valfritt)",
-    "unsaved": "Osparade ändringar",
-    "save": "Spara",
-    "saved": "Makrot sparat",
-    "saveFailed": "Kunde inte spara makrot",
-    "delete": "Radera",
-    "deleteTitle": "Ta bort det här makrot?",
-    "deleteBody": "\"{{name}}\" kommer att raderas permanent. Detta kan inte ångras.",
-    "deleted": "Makro borttaget",
-    "cancel": "Avboka",
-    "run": "Sikt",
-    "stop": "Stopp",
-    "running": "Spring...",
-    "completed": "Makro klart",
-    "failed": "Makrot misslyckades",
-    "loadFailed": "Kunde inte läsa in makron",
-    "needTerminal": "Öppna och anslut en terminal först",
-    "noSteps": "Det här makrot har inga steg ännu. Lägg till ett nedan.",
-    "addStep": "Lägg till steg",
-    "stepNumber": "Steg {{number}}",
-    "removeStep": "Ta bort steg",
-    "confirmRunTitle": "Köra det här makrot?",
-    "confirmRunBody": "\"{{name}}\" skickar kommandon till {{host}}.",
-    "confirmRunAction": "Kör makro",
-    "stepTypes": {
-      "send": {
-        "label": "Skicka kommando",
-        "help": "Skriver text i terminalen, på samma sätt som om du hade skrivit den."
-      },
-      "wait": {
-        "label": "Vänta på utdata",
-        "help": "Pausar tills servern skriver ut texten du anger, som en lösenordsfråga."
-      },
-      "delay": {
-        "label": "Paus",
-        "help": "Väntar en fastställd tid innan nästa steg."
-      },
-      "if": {
-        "label": "Om utdata innehåller",
-        "help": "Kontrollerar allt som servern har skrivit ut hittills och kör sedan en av två grenar."
-      },
-      "repeat": {
-        "label": "Upprepa",
-        "help": "Kör stegen inuti ett visst antal gånger."
-      }
-    },
-    "send": {
-      "text": "Kommando eller text",
-      "textPlaceholder": "systemctl starta om nginx",
-      "pressEnter": "Tryck Enter efter att du skickat",
-      "pressEnterHelp": "Stäng av detta för att skriva text utan att skicka in den."
-    },
-    "wait": {
-      "pattern": "Vänta tills utdata innehåller",
-      "patternPlaceholder": "lösenord:",
-      "timeout": "Ge upp efteråt",
-      "onTimeout": "Om det aldrig dyker upp",
-      "stop": "Stoppa makrot",
-      "continue": "Fortsätt ändå"
-    },
-    "delay": {
-      "duration": "Vänta på"
-    },
-    "ifStep": {
-      "pattern": "Om utdata innehåller",
-      "patternPlaceholder": "Aktiv: aktiv (löper)",
-      "then": "Gör sedan detta",
-      "else": "Annars gör så här",
-      "emptyBranch": "Inga steg"
-    },
-    "repeat": {
-      "count": "Antal gånger",
-      "times": "gånger"
-    },
-    "match": {
-      "useRegex": "Matcha med ett reguljärt uttryck",
-      "useRegexHelp": "Lämna detta av för att texten ska se exakt ut som den är skriven.",
-      "invalidRegex": "Inte ett giltigt reguljärt uttryck, det kommer att matchas som vanlig text"
-    },
-    "seconds": "sekunder",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "Fjärrserver krävs. Anslut en fjärrserver i Inställningar för att använda den här anslutningstypen."
-  },
-  "plugin": {
-    "name": "SSH-terminal"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/th_TH.json b/plugins/ssh-terminal/locales/translated/th_TH.json
deleted file mode 100644
index d2ef881aa..000000000
--- a/plugins/ssh-terminal/locales/translated/th_TH.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "เพิ่ม",
-    "arrowDown": "ลูกศรลง",
-    "arrowLeft": "ลูกศรซ้าย",
-    "arrowRight": "ลูกศรขวา",
-    "arrowUp": "ลูกศรขึ้น",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "เดล",
-    "done": "เสร็จแล้ว",
-    "editQuickKeys": "แก้ไขปุ่มลัด",
-    "end": "จบ",
-    "esc": "เอส",
-    "home": "บ้าน",
-    "pageDown": "พีจีดีเอ็น",
-    "pageUp": "พีจีอัพ",
-    "paste": "แปะ",
-    "quickKeyPlaceholder": "เช่น sudo ",
-    "quickKeysDesc": "แตะ × เพื่อลบ รองรับได้สูงสุด 8 ตัวอักษร",
-    "quickKeysTitle": "ปุ่มลัด",
-    "removeQuickKey": "ลบ",
-    "resetDefaults": "รีเซ็ตเป็นการตั้งค่าเริ่มต้น",
-    "shift": "กะ",
-    "tab": "แท็บ"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "ไม่สามารถเปิดใช้งาน Auto-Tmux ได้",
-    "autoTmuxEnabled": "เปิดใช้งาน Auto-Tmux สำหรับ {{host}}แล้ว จะมีผลตั้งแต่การเชื่อมต่อครั้งถัดไป",
-    "clipboardHttpWarning": "ไม่สามารถอ่านข้อมูลในคลิปบอร์ดได้ เบราว์เซอร์บางตัวจำกัดการเข้าถึงคลิปบอร์ดนอก HTTPS - ลองใช้ Ctrl+V แทน หรือใช้งาน Termix ผ่าน HTTPS",
-    "closeTab": "ปิด",
-    "connecting": "กำลังเชื่อมต่อ...",
-    "connectionLost": "การเชื่อมต่อขาดหาย",
-    "connectionRejected": "เซิร์ฟเวอร์ปฏิเสธการเชื่อมต่อ โปรดตรวจสอบการยืนยันตัวตนและการกำหนดค่าเครือข่ายของคุณ",
-    "connectionTimeout": "หมดเวลาการเชื่อมต่อ",
-    "enableAutoTmuxAction": "เปิดใช้งาน Auto-Tmux",
-    "hostKeyRejected": "การตรวจสอบคีย์โฮสต์ SSH ถูกปฏิเสธ การเชื่อมต่อถูกยกเลิก",
-    "linkDialogCopy": "สำเนา",
-    "linkDialogOpen": "เปิด",
-    "linkDialogTitle": "เปิดลิงก์",
-    "maxReconnectAttemptsReached": "จำนวนครั้งการเชื่อมต่อใหม่สูงสุดครบแล้ว",
-    "noHostSelected": "ไม่ได้เลือกโฮสต์",
-    "passwordPromptFillTitle": "กรอกรหัสผ่านที่บันทึกไว้ลงในช่องนี้ใช่หรือไม่?",
-    "reconnect": "เชื่อมต่อใหม่",
-    "reconnected": "เชื่อมต่อสำเร็จแล้ว",
-    "reconnecting": "กำลังเชื่อมต่อใหม่... ({{attempt}}/{{max}})",
-    "autoReconnecting": "การเชื่อมต่อขาดหาย กำลังเชื่อมต่อใหม่...",
-    "searchCaseSensitive": "กล่องไม้ขีดไฟ",
-    "searchClose": "ปิด (หนี)",
-    "searchNext": "การแข่งขันถัดไป (กดเข้าร่วม)",
-    "searchNoResults": "ไม่พบผลลัพธ์",
-    "searchPlaceholder": "หา",
-    "searchPrevious": "การแข่งขันครั้งก่อนหน้า (Shift+Enter)",
-    "searchRegex": "ใช้ Regular Expression",
-    "searchResultCount": "{{index}} ของ {{count}}",
-    "searchWholeWord": "จับคู่คำทั้งหมด",
-    "sessionExpiredNotice": "เซสชันก่อนหน้าของคุณบน {{host}} หมดอายุหลังจาก {{minutes}} นาทีถูกตัดการเชื่อมต่อ เชลล์และทุกสิ่งที่กำลังทำงานอยู่ภายในนั้นหายไปแล้ว โปรดเปิดใช้งาน Auto-Tmux บนโฮสต์นี้เพื่อรักษาสถานะเซสชันให้คงอยู่",
-    "sessionExpiredNoticeNoMinutes": "เซสชันก่อนหน้าของคุณบน {{host}} หมดอายุขณะที่ไม่ได้เชื่อมต่อ เชลล์และทุกอย่างที่กำลังทำงานอยู่ภายในนั้นหายไปแล้ว โปรดเปิดใช้งาน Auto-Tmux บนโฮสต์นี้เพื่อรักษาสถานะเซสชันให้คงอยู่",
-    "sessionTakenOver": "เซสชั่นนี้เปิดอยู่ในแท็บอื่น กำลังเชื่อมต่อใหม่...",
-    "tmuxAttached": "ลูกค้าที่แนบมาด้วย",
-    "tmuxAttachedCount": "{{count}} แนบมาด้วย",
-    "tmuxCopyHint": "ปรับตำแหน่งที่เลือกแล้วกด Enter เพื่อคัดลอกไปยังคลิปบอร์ด",
-    "tmuxCreateNew": "เริ่มเซสชั่นใหม่",
-    "tmuxDetached": "ตัดการเชื่อมต่อจากเซสชัน tmux แล้ว",
-    "tmuxLastActivity": "กิจกรรมล่าสุด",
-    "tmuxSessionAttached": "การเชื่อมต่อเซสชัน tmux: {{name}}",
-    "tmuxSessionCreated": "สร้างเซสชัน tmux แล้ว: {{name}}",
-    "tmuxSessionPickerDesc": "พบเซสชัน tmux ที่มีอยู่แล้วในโฮสต์นี้ เลือกหนึ่งเซสชันเพื่อเชื่อมต่อใหม่หรือสร้างเซสชันใหม่",
-    "tmuxSessionPickerTitle": "เซสชัน tmux",
-    "tmuxTimeDays": "{{count}}วันก่อน",
-    "tmuxTimeHours": "{{count}}ชั่วโมงที่แล้ว",
-    "tmuxTimeJustNow": "เมื่อสักครู่นี้เอง",
-    "tmuxTimeMinutes": "{{count}}นาทีที่แล้ว",
-    "tmuxUnavailable": "tmux ไม่ได้ติดตั้งอยู่บนโฮสต์ระยะไกล จึงใช้เชลล์มาตรฐานแทน",
-    "tmuxWindowCount": "{{count}} หน้าต่าง",
-    "tmuxWindows": "วินโดวส์",
-    "unknownError": "เกิดข้อผิดพลาดที่ไม่ทราบสาเหตุ",
-    "websocketAbnormalClose": "การเชื่อมต่อถูกตัดโดยไม่คาดคิด อาจเกิดจากปัญหาเกี่ยวกับรีเวิร์สพร็อกซีหรือการกำหนดค่า SSL โปรดตรวจสอบบันทึกของเซิร์ฟเวอร์",
-    "websocketError": "ข้อผิดพลาดในการเชื่อมต่อ WebSocket",
-    "clipboardReadFailed": "ไม่สามารถอ่านข้อมูลจากคลิปบอร์ดได้ โปรดตรวจสอบให้แน่ใจว่าได้ให้สิทธิ์การเข้าถึงคลิปบอร์ดแล้ว",
-    "clipboardWriteFailed": "ไม่สามารถคัดลอกไปยังคลิปบอร์ดได้ โปรดตรวจสอบให้แน่ใจว่าหน้าเว็บนั้นให้บริการผ่าน HTTPS หรือ localhost",
-    "connected": "เชื่อมต่อแล้ว",
-    "totpCodeLabel": "รหัสยืนยัน",
-    "duplicateTab": "แท็บซ้ำ",
-    "imageChooseFile": "เลือกไฟล์รูปภาพ",
-    "imageUploaded": "รูปภาพที่อัปโหลด: {{path}}",
-    "imageClipboardUnavailable": "เบราว์เซอร์นี้ไม่สามารถอ่านรูปภาพจากคลิปบอร์ดได้",
-    "imageClipboardEmpty": "ไม่พบรูปภาพในคลิปบอร์ด",
-    "localShell": "เชลล์เทอร์มินัลท้องถิ่น",
-    "autocompleteHintComplete": "กด Tab หรือ Enter เพื่อดำเนินการต่อ",
-    "autocompleteHintNavigate": "↑↓ เพื่อไปยังหน้าถัดไป",
-    "autocompleteHintClose": "กด Esc เพื่อปิด"
-  },
-  "terminalToolbar": {
-    "detachTmux": "ถอด tmux ออก",
-    "detachTmuxDescription": "ยกเลิกการเชื่อมต่อเซสชัน tmux",
-    "dismissError": "แก้ไขข้อผิดพลาดเกี่ยวกับรูปภาพ",
-    "hideToolbar": "ซ่อนแถบเครื่องมือ",
-    "image": "การดำเนินการกับรูปภาพ (เฉพาะรูปภาพ)",
-    "imageActionFailed": "การดำเนินการรูปภาพล้มเหลว",
-    "layout": "โหมดแสดงแถบเครื่องมือ",
-    "layoutExpanded": "ขยายเพิ่มเติมด้วยตัวชี้วัด",
-    "layoutIcon": "ไอคอนเท่านั้น",
-    "layoutLabeled": "ไอคอนและป้ายกำกับ",
-    "moveToolbar": "ย้ายแถบเครื่องมือ",
-    "moveToolbarHint": "ลากเพื่อจัดตำแหน่งแถบเครื่องมือใหม่",
-    "paste": "วางรูปภาพ",
-    "pasteImage": "วางภาพจากคลิปบอร์ด (เฉพาะภาพ)",
-    "retry": "ลองใหม่อีกครั้ง",
-    "showToolbar": "ขยายแถบเครื่องมือ",
-    "upload": "อัปโหลดรูปภาพ",
-    "uploadImage": "อัปโหลดรูปภาพไปยังโฮสต์",
-    "uploadingImage": "กำลังอัปโหลด..."
-  },
-  "history": {
-    "noTerminalSelected": "ไม่ได้เลือกเทอร์มินัล",
-    "noTerminalSelectedHint": "เปิดแท็บเทอร์มินัล SSH เพื่อดูประวัติคำสั่ง",
-    "searchPlaceholder": "ประวัติการค้นหา...",
-    "clearAll": "ล้างทั้งหมด",
-    "noHistoryEntries": "ไม่มีรายการประวัติ",
-    "trackingDisabled": "ปิดใช้งานการติดตามประวัติแล้ว",
-    "trackingDisabledHint": "เปิดใช้งานประวัติคำสั่งในแท็บเทอร์มินัล SSH ของโฮสต์นี้",
-    "commandCount_one": "คำสั่ง {{count}}",
-    "commandCount_other": "คำสั่ง {{count}}"
-  },
-  "touchInput": {
-    "enabled": "เปิดใช้งานการป้อนข้อมูลแบบสัมผัส",
-    "enabledDesc": "อนุญาตให้เลื่อนหน้าจอด้วยนิ้วเดียวในเทอร์มินัล",
-    "momentumEnabled": "เปิดใช้งานโมเมนตัม",
-    "momentumEnabledDesc": "เลื่อนหน้าจอต่ออีกสักครู่หลังจากปัดนิ้ว",
-    "advanced": "ขั้นสูง",
-    "resetDefaults": "รีเซ็ตเป็นการตั้งค่าเริ่มต้น",
-    "dragThreshold": "เกณฑ์การลาก",
-    "maxWheelDelta": "เดลต้าล้อสูงสุด",
-    "momentumSampleWindow": "หน้าต่างตัวอย่างโมเมนตัม",
-    "releaseGracePeriod": "ระยะเวลาผ่อนผันการปล่อยตัว",
-    "minimumVelocity": "ความเร็วต่ำสุด",
-    "maximumVelocity": "ความเร็วสูงสุด",
-    "maximumDuration": "ระยะเวลาสูงสุด",
-    "maximumTravel": "การเดินทางสูงสุด",
-    "decayTime": "เวลาการเสื่อมสภาพ",
-    "pixelsPerTick": "พิกเซลต่อติ๊ก",
-    "maximumFrameInterval": "ช่วงเวลาเฟรมสูงสุด",
-    "maximumTicksPerFrame": "จำนวนขีดสูงสุดต่อเฟรม"
-  },
-  "imageStorage": {
-    "instanceId": "รหัสอินสแตนซ์เซสชันเทอร์มินัล",
-    "instanceIdDesc": "รหัสอินสแตนซ์ของแท็บเทอร์มินัลที่เชื่อมต่ออยู่แท็บหนึ่ง ใช้สำหรับทดสอบการมองเห็น",
-    "selectedModeUnavailable": "ไม่พร้อมใช้งาน",
-    "test": "ทดสอบ",
-    "testing": "กำลังทดสอบ...",
-    "testFailed": "การทดสอบการจัดเก็บรูปภาพล้มเหลว",
-    "testConnected": "การเชื่อมต่อเซสชันเทอร์มินัลเสร็จสมบูรณ์แล้ว",
-    "testNotConnected": "ไม่มีเซสชันเทอร์มินัลที่เชื่อมต่อกับรหัสอินสแตนซ์นี้",
-    "testSelectedMode": "การอัปโหลดจะใช้รูปแบบ: {{mode}}",
-    "testLocalVisible": "ไดเร็กทอรีภายในเครื่องสามารถมองเห็นได้จากโฮสต์ที่เชื่อมต่ออยู่",
-    "testLocalNotVisible": "ไดเร็กทอรีภายในเครื่องจะไม่สามารถมองเห็นได้จากโฮสต์ที่เชื่อมต่ออยู่"
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "การป้อนข้อมูลด้วยระบบสัมผัส",
-        "images": "การจัดเก็บรูปภาพ",
-        "sessions": "การประชุม",
-        "newHosts": "โฮสต์ใหม่"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "การคงอยู่ของเซสชันเทอร์มินัล",
-        "description": "ระยะเวลาที่เทอร์มินัลที่ไม่ได้เชื่อมต่อจะยังคงทำงานอยู่บนเซิร์ฟเวอร์ก่อนที่จะถูกปิด ต่ำสุด 1 นาที สูงสุด 1440 นาที สำหรับเซสชันที่ต้องใช้งานนานกว่านี้ ให้เปิดใช้งาน Auto-Tmux บนโฮสต์"
-      },
-      "commandHistoryEnabled": {
-        "label": "ประวัติคำสั่ง",
-        "description": "อนุญาตให้บันทึกประวัติคำสั่ง เมื่อปิดใช้งาน ประวัติจะไม่ถูกบันทึกไม่ว่าการตั้งค่าต่อโฮสต์จะเป็นอย่างไรก็ตาม"
-      },
-      "commandHistoryForNewHosts": {
-        "label": "ประวัติคำสั่งสำหรับโฮสต์ใหม่",
-        "description": "ไม่ว่าโฮสต์ใหม่จะเริ่มต้นโดยเปิดใช้งานประวัติคำสั่งหรือไม่"
-      },
-      "imageStorageMode": {
-        "label": "โหมดจัดเก็บข้อมูล",
-        "description": "ตำแหน่งที่จะบันทึกภาพเทอร์มินัลที่คัดลอกและอัปโหลด การเลือกอัตโนมัติตามการเชื่อมต่อ ทั้งแบบโลคอลและรีโมต (SFTP) นั้นถูกกำหนดไว้แล้ว",
-        "auto": "อัตโนมัติ",
-        "local": "ท้องถิ่น",
-        "remoteSftp": "รีโมท (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "ไดเร็กทอรีท้องถิ่น",
-        "description": "เส้นทางสัมบูรณ์บนแบ็กเอนด์ของ Termix ที่โหมดโลคอลใช้เขียนรูปภาพ จะไม่แสดงหลังจากบันทึกแล้ว หากว่างเปล่าจะใช้ TERMIX_IMAGE_DIR"
-      },
-      "imageHostPath": {
-        "label": "เส้นทางโฮสต์",
-        "description": "มุมมองฝั่งโฮสต์ของไดเร็กทอรีท้องถิ่นที่เอเจนต์เทอร์มินัลได้รับ"
-      },
-      "imageTtlMs": {
-        "label": "ทีทีแอล (มิลลิวินาที)",
-        "description": "ระยะเวลาที่รูปภาพที่อัปโหลดจะถูกเก็บไว้ (หน่วยเป็นมิลลิวินาที) ค่าว่างจะใช้ค่า TERMIX_IMAGE_TTL_MS หรือหนึ่งชั่วโมง"
-      },
-      "imageMaxCount": {
-        "label": "จำนวนภาพสูงสุด",
-        "description": "รูปภาพส่วนใหญ่จะถูกเก็บไว้พร้อมกัน ค่าว่างจะใช้ TERMIX_MAX_IMAGE_COUNT หรือ 100"
-      },
-      "imageMaxBytes": {
-        "label": "พื้นที่จัดเก็บสูงสุด (ไบต์)",
-        "description": "รูปภาพส่วนใหญ่จะถูกเก็บไว้ในคราวเดียว หากว่างเปล่าจะใช้พื้นที่จัดเก็บสูงสุด TERMIX_MAX_IMAGE_STORAGE_BYTES หรือ 5 GiB"
-      },
-      "sessionPersistence": {
-        "label": "ยังคงใช้งานเซสชันต่อไปแม้หลังจากตัดการเชื่อมต่อแล้ว",
-        "description": "รักษาการเชื่อมต่อเทอร์มินัลที่ไม่ได้ตัดการเชื่อมต่อไว้บนเซิร์ฟเวอร์เป็นระยะเวลาตามที่ระบุไว้ข้างต้น เพื่อให้เมื่อเปิดแท็บนั้นขึ้นมาใหม่ จะสามารถดำเนินการต่อจากจุดที่หยุดไว้ได้"
-      },
-      "newHostAutoTmux": {
-        "label": "ออโต้-ทมักซ์",
-        "description": "เรียกใช้เทอร์มินัลของโฮสต์ใหม่ภายใน tmux เพื่อให้เซสชันยังคงใช้งานได้แม้การเชื่อมต่อถูกตัด (ต้องมี tmux บนโฮสต์)"
-      },
-      "newHostTheme": {
-        "label": "ธีมสำหรับโฮสต์ใหม่",
-        "description": "ธีมเทอร์มินัลที่โฮสต์ใหม่เริ่มต้นใช้งาน"
-      },
-      "newHostFontFamily": {
-        "label": "แบบอักษรสำหรับโฮสต์ใหม่",
-        "description": "ฟอนต์เทอร์มินัลที่โฮสต์ใหม่เริ่มต้นใช้งาน"
-      },
-      "newHostFontSize": {
-        "label": "ขนาดตัวอักษรสำหรับโฮสต์ใหม่",
-        "description": "ขนาดตัวอักษรของเทอร์มินัลที่โฮสต์ใหม่เริ่มต้นใช้งาน หน่วยเป็นพิกเซล"
-      },
-      "newHostCursorStyle": {
-        "label": "รูปแบบเคอร์เซอร์สำหรับโฮสต์ใหม่"
-      },
-      "newHostCursorBlink": {
-        "label": "เคอร์เซอร์กะพริบสำหรับโฮสต์ใหม่"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "เปิดใช้งานแถบเครื่องมือเทอร์มินัล",
-        "description": "แสดงแถบเครื่องมือเข้าถึงด่วนที่ตรึงอยู่กับเทอร์มินัลที่ใช้งานอยู่ สำหรับเครื่องมือและสถิติแบบเรียลไทม์ของโฮสต์นี้"
-      },
-      "terminalToolbarPosition": {
-        "label": "ตำแหน่งแถบเครื่องมือ",
-        "description": "ตรงตำแหน่งที่แถบเครื่องมืออยู่ในเทอร์มินัล คุณยังสามารถลากมันจากตรงนั้นได้",
-        "bottom": "ตรงกลางด้านล่าง",
-        "bottomLeft": "มุมล่างซ้าย",
-        "bottomRight": "มุมล่างขวา",
-        "top": "ด้านบนตรงกลาง",
-        "topLeft": "มุมบนซ้าย",
-        "topRight": "มุมบนขวา"
-      },
-      "terminalToolbarStartState": {
-        "label": "สถานะเริ่มต้นของแถบเครื่องมือ",
-        "description": "ไม่ว่าแถบเครื่องมือจะเปิดแบบขยายหรือย่อเมื่อเทอร์มินัลเชื่อมต่อ",
-        "expanded": "ขยาย",
-        "collapsed": "ลดขนาดลง"
-      },
-      "terminalToolbarDisplay": {
-        "label": "โหมดแสดงแถบเครื่องมือ",
-        "description": "วิธีการแสดงปุ่มบนแถบเครื่องมือ ปุ่มที่ใช้ล่าสุดจะคงปุ่มที่เลือกไว้ในแถบเครื่องมือ",
-        "remember": "ใช้งานครั้งล่าสุด",
-        "icon": "เฉพาะไอคอน",
-        "labeled": "ไอคอนและป้ายกำกับ",
-        "expanded": "ขยายความด้วยสถิติ"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "แสดงสถิติแบบเรียลไทม์",
-        "description": "แสดงสถิติโฮสต์แบบเรียลไทม์เหนือปุ่มแถบเครื่องมือในโหมดขยาย"
-      },
-      "terminalToolbarFade": {
-        "label": "ไฟจะค่อยๆ ดับลงเมื่อไม่ได้ใช้งาน",
-        "description": "แถบเครื่องมือจะค่อยๆ จางหายไปจนกว่าคุณจะวางเมาส์เหนือแถบนั้น"
-      },
-      "enableCommandHistory": {
-        "label": "ประวัติคำสั่ง",
-        "description": "บันทึกคำสั่งที่เรียกใช้ในเทอร์มินัลนี้เพื่อดูประวัติและฟังก์ชันเติมคำอัตโนมัติ"
-      },
-      "enableTerminal": {
-        "label": "เปิดใช้งานเทอร์มินัล",
-        "description": "จัดเตรียมเทอร์มินัล SSH สำหรับโฮสต์นี้"
-      },
-      "inheritAppearance": {
-        "label": "ใช้ค่าเริ่มต้นของผู้ใช้"
-      },
-      "theme": {
-        "label": "ธีม"
-      },
-      "cursorBlink": {
-        "label": "เคอร์เซอร์กะพริบ"
-      },
-      "cursorStyle": {
-        "label": "รูปแบบเคอร์เซอร์"
-      },
-      "fontSize": {
-        "label": "ขนาดตัวอักษร"
-      },
-      "fontFamily": {
-        "label": "ฟอนต์"
-      },
-      "scrollback": {
-        "label": "เลื่อนกลับ"
-      },
-      "letterSpacing": {
-        "label": "ระยะห่างระหว่างตัวอักษร"
-      },
-      "lineHeight": {
-        "label": "ความสูงของเส้น"
-      },
-      "bellStyle": {
-        "label": "กระดิ่ง"
-      },
-      "minimumContrastRatio": {
-        "label": "อัตราส่วนความคมชัดต่ำสุด"
-      },
-      "backgroundImage": {
-        "label": "ภาพพื้นหลัง"
-      },
-      "backgroundImageOpacity": {
-        "label": "ความโปร่งใสของภาพพื้นหลัง"
-      },
-      "customThemeColors": {
-        "label": "สีธีมที่กำหนดเอง"
-      },
-      "rightClickSelectsWord": {
-        "label": "คลิกขวาเพื่อเลือกคำ"
-      },
-      "macOptionIsMeta": {
-        "label": "ตัวเลือกคือ Meta"
-      },
-      "fastScrollModifier": {
-        "label": "ปุ่มเลื่อนเร็ว"
-      },
-      "fastScrollSensitivity": {
-        "label": "ความเร็วในการเลื่อนที่รวดเร็ว"
-      },
-      "backspaceMode": {
-        "label": "ลบ"
-      },
-      "autoMosh": {
-        "label": "ออโต้โมช"
-      },
-      "moshCommand": {
-        "label": "คำสั่งม็อช"
-      },
-      "autoTmux": {
-        "label": "ออโต้ tmux"
-      },
-      "useSSHTitle": {
-        "label": "ใช้ชื่อ SSH"
-      },
-      "syntaxHighlighting": {
-        "label": "การเน้นไวยากรณ์"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "หมวดหมู่การเน้นไวยากรณ์"
-      },
-      "linkClickBehavior": {
-        "label": "คลิกลิงก์"
-      },
-      "localEcho": {
-        "label": "เสียงสะท้อนในท้องถิ่น"
-      },
-      "passwordPromptAutoFill": {
-        "label": "เสนอให้กรอกรหัสผ่านเมื่อจำเป็น"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "กรอกข้อมูลตามคำสั่ง sudo"
-      },
-      "autoReconnect": {
-        "label": "เชื่อมต่อใหม่โดยอัตโนมัติ"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "การเติมคำสั่งอัตโนมัติ",
-        "description": "แสดงคำแนะนำอัตโนมัติขณะพิมพ์ หากคุณกดปุ่ม Tab"
-      },
-      "localEcho": {
-        "label": "เสียงสะท้อนในท้องถิ่น",
-        "description": "ลดความรู้สึกหน่วงในการป้อนข้อมูลโดยใช้การคาดเดาการกดแป้นพิมพ์ในพื้นที่อย่างปลอดภัย"
-      },
-      "linkClickBehavior": {
-        "label": "คลิกลิงก์เทอร์มินัล",
-        "description": "พฤติกรรมเริ่มต้นเมื่อคลิกลิงก์ในเทอร์มินัล"
-      },
-      "customThemes": {
-        "label": "ธีมที่บันทึกไว้"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "สถานีปลายทางท้องถิ่น"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "ใช้เซสชันเทอร์มินัลแบบเรียลไทม์",
-      "description": "ช่วยให้ฟีเจอร์อื่นๆ เช่น การแชร์เซสชันและการบันทึก สามารถเข้าถึงเซสชันเทอร์มินัลแบบเรียลไทม์ของคุณได้"
-    },
-    "history": {
-      "title": "อ่านประวัติคำสั่ง",
-      "description": "อนุญาตให้ฟีเจอร์อื่นๆ เช่น ผู้ช่วย AI อ่านประวัติคำสั่งของคุณได้"
-    }
-  },
-  "hosts": {
-    "tabTerminal": "เทอร์มินัล",
-    "addHost": "เพิ่มโฮสต์",
-    "applyGlobalThemeTooltip": "ใช้ธีมนี้",
-    "backgroundImageDesc": "URL สำหรับภาพพื้นหลังของเทอร์มินัล (ไม่บังคับ)",
-    "backgroundImageLabel": "URL ของภาพพื้นหลัง",
-    "backgroundImageOpacityLabel": "ความโปร่งใสของภาพพื้นหลัง",
-    "backspaceMode": "โหมดลบ",
-    "backspaceModeControlH": "คอนโทรล-เอช (บีเอส)",
-    "backspaceModeLabel": "โหมดลบ",
-    "backspaceModeNormal": "ปกติ (DEL)",
-    "behaviorAndAdvanced": "พฤติกรรมและขั้นสูง",
-    "bellStyle": "สไตล์เบลล์",
-    "bellStyleBoth": "ทั้งคู่",
-    "bellStyleLabel": "สไตล์เบลล์",
-    "bellStyleNone": "ไม่มี",
-    "bellStyleSound": "เสียง",
-    "bellStyleVisual": "ภาพ",
-    "colorTheme": "ธีมสี",
-    "cursorBlink": "เคอร์เซอร์กระพริบ",
-    "cursorBlinking": "เคอร์เซอร์กะพริบ",
-    "cursorBlinkingDesc": "เปิดใช้งานแอนิเมชั่นกระพริบสำหรับเคอร์เซอร์เทอร์มินัล",
-    "cursorStyle": "รูปแบบเคอร์เซอร์",
-    "cursorStyleBar": "บาร์",
-    "cursorStyleBlock": "ปิดกั้น",
-    "cursorStyleLabel": "รูปแบบเคอร์เซอร์",
-    "cursorStyleUnderline": "ขีดเส้นใต้",
-    "customThemeAnsiColors": "สี ANSI",
-    "customThemeBackground": "พื้นหลัง",
-    "customThemeBlack": "สีดำ",
-    "customThemeBlue": "สีฟ้า",
-    "customThemeBrightBlack": "สีดำสนิท",
-    "customThemeBrightBlue": "สีน้ำเงินสดใส",
-    "customThemeBrightCyan": "สีฟ้าสดใส",
-    "customThemeBrightGreen": "สีเขียวสดใส",
-    "customThemeBrightMagenta": "สีม่วงแดงสดใส",
-    "customThemeBrightRed": "สีแดงสด",
-    "customThemeBrightWhite": "สีขาวสว่าง",
-    "customThemeBrightYellow": "สีเหลืองสดใส",
-    "customThemeColors": "สีที่กำหนดเอง",
-    "customThemeCursor": "เคอร์เซอร์",
-    "customThemeCursorAccent": "เคอร์เซอร์เน้นเสียง",
-    "customThemeCyan": "สีฟ้าอมเขียว",
-    "customThemeForeground": "พื้นหน้า",
-    "customThemeGreen": "สีเขียว",
-    "customThemeMagenta": "แมเจนต้า",
-    "customThemeRed": "สีแดง",
-    "customThemeResetTooltip": "รีเซ็ตเป็นการตั้งค่าเริ่มต้น",
-    "customThemeSelection": "การคัดเลือก",
-    "customThemeWhite": "สีขาว",
-    "customThemeYellow": "สีเหลือง",
-    "deleteGlobalThemeTooltip": "ลบธีมนี้",
-    "docsLink": "ดูเอกสาร",
-    "enableAutoMosh": "เปิดใช้งาน Auto-Mosh",
-    "enableAutoMoshDesc": "หากมีตัวเลือก ให้เลือกใช้ Mosh แทน SSH",
-    "enableAutoTmux": "เปิดใช้งาน Auto-Tmux",
-    "enableAutoTmuxDesc": "รักษาการทำงานของเชลล์และโปรแกรมใดๆ ที่ทำงานอยู่ภายในเชลล์ให้คงอยู่ต่อไปแม้การตัดการเชื่อมต่อหรือการรีสตาร์ทเบราว์เซอร์ โดยการเรียกใช้คำสั่งภายใน tmux (ต้องติดตั้ง tmux บนเครื่องโฮสต์)",
-    "fastScrollModifier": "ตัวแก้ไขการเลื่อนเร็ว",
-    "fastScrollModifierAlt": "อัลท์",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "ตัวแก้ไขการเลื่อนเร็ว",
-    "fastScrollModifierShift": "กะ",
-    "fastScrollSensitivity": "ความไวในการเลื่อนเร็ว",
-    "fastScrollSensitivityLabel": "ความไวในการเลื่อนเร็ว",
-    "fontFamily": "ตระกูลฟอนต์",
-    "fontFamilyCustomHint": "เลือกฟอนต์ที่มีให้ในชุด หรือเลือกแบบกำหนดเอง แล้วพิมพ์ชื่อฟอนต์ที่ติดตั้งอยู่ในระบบของคุณให้ถูกต้อง (เช่น MesloLGS NF, Noto Sans Mono) Termix ไม่สามารถติดตั้งฟอนต์ให้คุณได้ คุณต้องติดตั้งฟอนต์ลงในระบบปฏิบัติการของคุณก่อน",
-    "fontFamilyCustomOption": "กำหนดเอง...",
-    "fontFamilyCustomPlaceholder": "ชื่อฟอนต์ที่ถูกต้อง เช่น MesloLGS NF",
-    "fontFamilyLabel": "ตระกูลฟอนต์",
-    "fontSize": "ขนาดตัวอักษร",
-    "fontSizeLabel": "ขนาดตัวอักษร",
-    "hostNotFound": "ไม่พบโฮสต์",
-    "letterSpacing": "ระยะห่างระหว่างตัวอักษร",
-    "letterSpacingPx": "ระยะห่างระหว่างตัวอักษร (พิกเซล)",
-    "lineHeight": "ความสูงของเส้น",
-    "lineHeightLabel": "ความสูงของเส้น",
-    "linkClickBehaviorConfirm": "แสดงหน้าต่างป๊อปอัพเพื่อเปิดหรือคัดลอก",
-    "linkClickBehaviorDesc": "ควบคุมสิ่งที่เกิดขึ้นเมื่อคุณคลิกลิงก์ในเทอร์มินัล ใช้ 'ค่าเริ่มต้น' เพื่อใช้การตั้งค่าระดับแอป",
-    "linkClickBehaviorDirect": "เปิดโดยตรง",
-    "linkClickBehaviorLabel": "พฤติกรรมการคลิกลิงก์",
-    "loadingHost": "กำลังโหลดโฮสต์...",
-    "localEchoAuto": "อัตโนมัติ",
-    "localEchoDesc": "คาดการณ์การกดแป้นพิมพ์ที่ปลอดภัยสำหรับการพิมพ์ในเครื่องบนการเชื่อมต่อที่ช้า ข้อความแจ้งให้ป้อนรหัสผ่านและการป้อนข้อมูลควบคุมจะไม่ถูกแสดงซ้ำ",
-    "localEchoLabel": "เสียงสะท้อนในท้องถิ่น",
-    "localEchoOff": "ปิด",
-    "localEchoOn": "เปิดใช้งานตลอดเวลา",
-    "macOptionIsMetaLabel": "ปุ่ม Option Key ส่งข้อมูล Meta",
-    "macOptionIsMetaShortDesc": "ปิดใช้งานการพิมพ์อักขระพิเศษ (เช่น @ หรือ |) ด้วยปุ่ม Option/Alt บน macOS แทนการส่งข้อมูล Meta",
-    "moshCommand": "กองบัญชาการ MOSH",
-    "moshCommandLabel": "ม็อช คอมมานโด",
-    "noSavedThemes": "ยังไม่มีธีมที่บันทึกไว้",
-    "none": "ไม่มี",
-    "passwordPromptAutoFillDesc": "เสนอให้กรอกรหัสผ่านที่บันทึกไว้เมื่อเทอร์มินัลขอให้ป้อนรหัสผ่าน ปิดใช้งานเพื่อไม่ให้มีการกรอกรหัสผ่านอัตโนมัติบนโฮสต์นี้",
-    "passwordPromptAutoFillLabel": "ข้อเสนอการกรอกรหัสผ่านอัตโนมัติ",
-    "autoReconnectLabel": "เชื่อมต่ออัตโนมัติ",
-    "autoReconnectDesc": "เชื่อมต่อใหม่โดยอัตโนมัติเมื่อการเชื่อมต่อ SSH หลุด เช่น หลังจากปัญหาเครือข่ายหรือโหมดพักเครื่อง และยังคงรักษาข้อมูลการเลื่อนดูย้อนหลังไว้",
-    "rightClickSelectsWord": "คลิกขวาแล้วเลือก Word",
-    "rightClickSelectsWordLabel": "คลิกขวา เลือก Word",
-    "rightClickSelectsWordShortDesc": "เลือกคำที่อยู่ใต้เคอร์เซอร์เมื่อคลิกขวา",
-    "saveAsGlobalTheme": "บันทึกเป็นธีมทั่วโลก",
-    "saveGlobalThemeError": "ไม่สามารถบันทึกธีมได้",
-    "saveGlobalThemeNamePrompt": "ตั้งชื่อให้กับธีมนี้",
-    "saveGlobalThemeSuccess": "บันทึกธีมแล้ว",
-    "savedThemesLabel": "ธีมที่บันทึกไว้",
-    "scrollbackBufferLabel": "บัฟเฟอร์การเลื่อนกลับ",
-    "scrollbackMaxLines": "จำนวนบรรทัดสูงสุดที่เก็บไว้ในประวัติ",
-    "sudoPasswordAutoFill": "การกรอกรหัสผ่านอัตโนมัติของ Sudo",
-    "sudoPasswordAutoFillDesc": "บันทึกรหัสผ่าน sudo เพื่อให้โปรแกรมตรวจสอบข้อมูลโฮสต์ ข้อความแจ้งเตือนในเทอร์มินัล และโปรแกรมอื่นๆ สามารถเรียกใช้คำสั่งที่มีสิทธิ์พิเศษได้โดยอัตโนมัติ",
-    "sudoPasswordAutoFillLabel": "การกรอกรหัสผ่านอัตโนมัติของ Sudo",
-    "syntaxCategoryIpAddresses": "ที่อยู่ IP",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "ระดับการบันทึก",
-    "syntaxCategoryLogLevelsDesc": "ข้อผิดพลาด, คำเตือน, ข้อมูล, ดีบัก, ร้ายแรง",
-    "syntaxCategoryNumbers": "หมายเลขกำกับ",
-    "syntaxCategoryNumbersDesc": "พอร์ต 8080 ทางออก 1 สถานะ 404",
-    "syntaxCategoryPaths": "เส้นทางไฟล์",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "ไทม์สแตมป์",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 15 มกราคม 2024",
-    "syntaxCategoryUrls": "URL",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "ใส่สีให้กับข้อมูลที่แสดงในเทอร์มินัล (ข้อผิดพลาด เส้นทาง ที่อยู่ IP และเวลา)",
-    "syntaxHighlightingLabel": "การเน้นไวยากรณ์",
-    "terminalAppearance": "ลักษณะปลายทาง",
-    "theme": "ธีม",
-    "themePreview": "ตัวอย่างธีม",
-    "useSSHTitleDesc": "เปลี่ยนชื่อแท็บโดยใช้ชื่อหน้าต่างของเชลล์แทนชื่อโฮสต์",
-    "useSSHTitleLabel": "ใช้ชื่อหน้าต่าง SSH",
-    "enableTunnel": "เปิดใช้งานอุโมงค์",
-    "enableFileManager": "เปิดใช้งานตัวจัดการไฟล์",
-    "enableDocker": "เปิดใช้งาน Docker",
-    "startupSnippet": "ตัวอย่างโค้ดสำหรับเริ่มต้น",
-    "quickActions": "การดำเนินการด่วน",
-    "proxmoxLastSyncStatus": {
-      "success": "ความสำเร็จ"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} ข้ามไป (ไม่พบ IP)",
-    "proxmoxStatsUrlCopied": "คัดลอก URL สถิติ Proxmox ไปยังคลิปบอร์ดแล้ว",
-    "rdpUrlCopied": "คัดลอก URL ของ RDP แล้ว",
-    "vncUrlCopied": "คัดลอก URL ของ VNC แล้ว",
-    "filterAuthStepca": "ขั้นตอน CA",
-    "guac": {
-      "noCredential": "ไม่มีข้อมูลประจำตัว (ข้อมูลประจำตัวโดยตรงอยู่ด้านล่าง)",
-      "authTypeDirect": "โดยตรง",
-      "authTypeCredential": "ใบรับรอง",
-      "authTypeNone": "ไม่มี",
-      "recordingPath": "เส้นทางการบันทึก",
-      "recordingName": "ชื่อการบันทึก",
-      "saveHostFirst": "บันทึกข้อมูลโฮสต์ก่อน",
-      "sharingOptionsAfterSave": "ตัวเลือกการแชร์จะพร้อมใช้งานหลังจากบันทึกโฮสต์แล้ว",
-      "permissionLevel": "ระดับการอนุญาต",
-      "typeHeader": "พิมพ์",
-      "targetHeader": "เป้า",
-      "permissionHeader": "การอนุญาต",
-      "cancelBtn": "ยกเลิก",
-      "savingBtn": "ประหยัด...",
-      "updateHostBtn": "อัปเดตโฮสต์",
-      "addHostBtn": "เพิ่มโฮสต์"
-    },
-    "filterAuthVault": "ห้องนิรภัย"
-  },
-  "nav": {
-    "history": "ประวัติศาสตร์",
-    "localTerminal": "สถานีปลายทางท้องถิ่น",
-    "sshTools": "เครื่องมือ SSH",
-    "terminal": "เทอร์มินัล",
-    "macros": "มาโคร"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "พิมพ์ที่นี่เพื่อถ่ายทอดการกดแป้นพิมพ์...",
-    "copyOnSelect": "คัดลอกข้อความที่เลือกโดยอัตโนมัติ",
-    "enableRightClickCopyPaste": "เปิดใช้งานการคัดลอก/วางโดยคลิกขวา",
-    "fillPassword": "กรอกรหัสผ่าน",
-    "fillPasswordMissing": "ไม่มีรหัสผ่านที่บันทึกไว้สำหรับเทอร์มินัลที่เลือก {{count}} เครื่อง",
-    "fillPasswordSuccess": "กรอกรหัสผ่านลงในเทอร์มินัล {{count}} แล้ว",
-    "keyRecordingTitle": "การบันทึกคีย์",
-    "noTerminalTabsOpen": "ไม่มีแท็บเทอร์มินัลเปิดอยู่",
-    "recordToTerminals": "บันทึกไปยังเทอร์มินัล",
-    "selectAll": "ทั้งหมด",
-    "selectNone": "ไม่มี",
-    "selectTerminalsAbove": "เลือกเทอร์มินัลด้านบน",
-    "settingsTitle": "การตั้งค่า",
-    "startRecording": "เริ่มบันทึก",
-    "stopRecording": "หยุดบันทึก"
-  },
-  "keybindings": {
-    "copy": "คัดลอกการเลือก",
-    "paste": "แปะ",
-    "sendControlCode": "ส่งสัญญาณ Ctrl+ตัวอักษร",
-    "sendText": "ส่งข้อความ",
-    "controlCodeLabel": "จดหมาย",
-    "textLabel": "ข้อความที่จะส่ง",
-    "appendEnterLabel": "กด Enter หลังจากส่งแล้ว",
-    "clipboardPermissionNote": "ในบางเบราว์เซอร์ อาจขออนุญาตคัดลอกและวางข้อมูลลงในคลิปบอร์ดเมื่อใช้งานครั้งแรก",
-    "textRequired": "ป้อนข้อความที่จะส่ง",
-    "controlCodeRequired": "ป้อนตัวอักษรตัวเดียวสำหรับรหัสควบคุม",
-    "builtIn": {
-      "copyCtrlC": "คัดลอกส่วนที่เลือก (กด Ctrl+C เฉพาะเมื่อเลือกข้อความอยู่)",
-      "copyCtrlShiftC": "คัดลอกส่วนที่เลือก (Ctrl+Shift+C)",
-      "copyCmdC": "คัดลอกส่วนที่เลือก (Cmd+C)",
-      "pasteCtrlShiftV": "วางจากคลิปบอร์ด (Ctrl+Shift+V)",
-      "ctrlW": "กด Ctrl+W เพื่อเข้าสู่เชลล์ (จะไม่สามารถปิดแท็บเบราว์เซอร์ได้)",
-      "ctrlT": "กด Ctrl+T เพื่อเข้าสู่เชลล์ (บล็อกไม่ให้เปิดแท็บเบราว์เซอร์)",
-      "ctrlN": "กด Ctrl+N เพื่อเข้าสู่เชลล์ (บล็อกไม่ให้เปิดหน้าต่างเบราว์เซอร์)",
-      "ctrlQ": "กด Ctrl+Q เพื่อเข้าสู่เชลล์ (บล็อกไม่ให้ปิดเบราว์เซอร์)"
-    }
-  },
-  "macros": {
-    "title": "มาโคร",
-    "description": "เรียกใช้ชุดคำสั่งที่บันทึกไว้ในเทอร์มินัล แล้วตอบสนองต่อสิ่งที่เซิร์ฟเวอร์ส่งกลับมา",
-    "target": "เป้า",
-    "noTerminal": "ไม่มีเทอร์มินัลเปิดอยู่",
-    "empty": "ยังไม่มีมาโคร",
-    "emptyHint": "สร้างมาโครเพื่อทำให้กระบวนการทำงานบนเทอร์มินัลเป็นไปโดยอัตโนมัติ เช่น การล็อกอิน การรีสตาร์ทบริการ หรือการตอบคำถามต่างๆ",
-    "create": "มาโครใหม่",
-    "back": "กลับไปที่มาโคร",
-    "name": "ชื่อ",
-    "namePlaceholder": "รีสตาร์ทเว็บเซิร์ฟเวอร์",
-    "nameRequired": "ตั้งชื่อมาโครก่อนบันทึก",
-    "descriptionLabel": "คำอธิบาย",
-    "descriptionPlaceholder": "มาโครนี้ทำอะไร (ไม่บังคับ)",
-    "unsaved": "การเปลี่ยนแปลงที่ยังไม่ได้บันทึก",
-    "save": "บันทึก",
-    "saved": "บันทึกมาโครแล้ว",
-    "saveFailed": "ไม่สามารถบันทึกมาโครได้",
-    "delete": "ลบ",
-    "deleteTitle": "ลบมาโครนี้?",
-    "deleteBody": "\"{{name}}\" จะถูกลบอย่างถาวร ไม่สามารถกู้คืนได้",
-    "deleted": "มาโครถูกลบแล้ว",
-    "cancel": "ยกเลิก",
-    "run": "วิ่ง",
-    "stop": "หยุด",
-    "running": "วิ่ง...",
-    "completed": "มาโครเสร็จสิ้น",
-    "failed": "มาโครล้มเหลว",
-    "loadFailed": "ไม่สามารถโหลดมาโครได้",
-    "needTerminal": "เปิดและเชื่อมต่อเทอร์มินัลก่อน",
-    "noSteps": "มาโครนี้ยังไม่มีขั้นตอนใดๆ เพิ่มขั้นตอนด้านล่าง",
-    "addStep": "เพิ่มขั้นตอน",
-    "stepNumber": "ขั้นตอน {{number}}",
-    "removeStep": "ลบขั้นตอน",
-    "confirmRunTitle": "เรียกใช้มาโครนี้หรือไม่?",
-    "confirmRunBody": "\"{{name}}\" จะส่งคำสั่งไปยัง {{host}}",
-    "confirmRunAction": "เรียกใช้มาโคร",
-    "stepTypes": {
-      "send": {
-        "label": "ส่งคำสั่ง",
-        "help": "พิมพ์ข้อความลงในเทอร์มินัล เหมือนกับที่คุณพิมพ์ข้อความนั้นด้วยตนเอง"
-      },
-      "wait": {
-        "label": "รอผลลัพธ์",
-        "help": "หยุดรอจนกว่าเซิร์ฟเวอร์จะแสดงข้อความที่คุณระบุ เช่นเดียวกับการขอให้ป้อนรหัสผ่าน"
-      },
-      "delay": {
-        "label": "หยุดชั่วคราว",
-        "help": "รอเป็นระยะเวลาที่กำหนดก่อนดำเนินการขั้นตอนต่อไป"
-      },
-      "if": {
-        "label": "หากผลลัพธ์ประกอบด้วย",
-        "help": "ตรวจสอบทุกอย่างที่เซิร์ฟเวอร์ได้พิมพ์ออกมาแล้ว จากนั้นจึงเลือกดำเนินการตามหนึ่งในสองทางเลือก"
-      },
-      "repeat": {
-        "label": "ทำซ้ำ",
-        "help": "ดำเนินการตามขั้นตอนภายในตามจำนวนครั้งที่กำหนด"
-      }
-    },
-    "send": {
-      "text": "คำสั่งหรือข้อความ",
-      "textPlaceholder": "systemctl restart nginx",
-      "pressEnter": "กด Enter หลังจากส่งแล้ว",
-      "pressEnterHelp": "ปิดตัวเลือกนี้เพื่อพิมพ์ข้อความโดยไม่ต้องกดส่ง"
-    },
-    "wait": {
-      "pattern": "รอจนกว่าผลลัพธ์จะประกอบด้วย",
-      "patternPlaceholder": "รหัสผ่าน:",
-      "timeout": "ยอมแพ้หลังจาก",
-      "onTimeout": "หากมันไม่ปรากฏเลย",
-      "stop": "หยุดมาโคร",
-      "continue": "อย่าหยุดแค่นี้"
-    },
-    "delay": {
-      "duration": "รอสักครู่"
-    },
-    "ifStep": {
-      "pattern": "หากผลลัพธ์ประกอบด้วย",
-      "patternPlaceholder": "สถานะ: กำลังทำกิจกรรม (วิ่ง)",
-      "then": "จากนั้นให้ทำแบบนี้",
-      "else": "มิเช่นนั้นให้ทำแบบนี้",
-      "emptyBranch": "ไม่มีขั้นตอน"
-    },
-    "repeat": {
-      "count": "จำนวนครั้ง",
-      "times": "ครั้ง"
-    },
-    "match": {
-      "useRegex": "จับคู่ด้วยนิพจน์ปกติ",
-      "useRegexHelp": "ไม่ต้องใส่ส่วนนี้เพื่อให้ตรงกับข้อความที่เขียนไว้ทุกประการ",
-      "invalidRegex": "ไม่ใช่รูปแบบนิพจน์ปกติที่ถูกต้อง ระบบจะถือว่าเป็นข้อความธรรมดา"
-    },
-    "seconds": "วินาที",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "จำเป็นต้องใช้เซิร์ฟเวอร์ระยะไกล เชื่อมต่อเซิร์ฟเวอร์ระยะไกลในการตั้งค่าเพื่อใช้ประเภทการเชื่อมต่อนี้"
-  },
-  "plugin": {
-    "name": "เทอร์มินัล SSH"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/tr_TR.json b/plugins/ssh-terminal/locales/translated/tr_TR.json
deleted file mode 100644
index 2fd709fa3..000000000
--- a/plugins/ssh-terminal/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Ekle",
-    "arrowDown": "Aşağı Ok",
-    "arrowLeft": "Sol Ok",
-    "arrowRight": "Sağ Ok",
-    "arrowUp": "Yukarı Ok",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Del",
-    "done": "Tamam",
-    "editQuickKeys": "Hızlı tuşları düzenle",
-    "end": "End",
-    "esc": "Esc",
-    "home": "Home",
-    "pageDown": "PgDn",
-    "pageUp": "PgUp",
-    "paste": "Yapıştır",
-    "quickKeyPlaceholder": "ör. sudo ",
-    "quickKeysDesc": "Kaldırmak için × işaretine dokunun. En fazla 8 karakter desteklenir.",
-    "quickKeysTitle": "Hızlı Tuşlar",
-    "removeQuickKey": "Kaldır",
-    "resetDefaults": "Varsayılanlara sıfırla",
-    "shift": "Shift",
-    "tab": "Tab"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Otomatik Tmux etkinleştirme başarısız oldu.",
-    "autoTmuxEnabled": "{{host}}için otomatik Tmux etkinleştirildi. Bu, sonraki bağlantıdan itibaren geçerli olacak.",
-    "clipboardHttpWarning": "Panoyu okuyamadım. Bazı tarayıcılar HTTPS dışında panoya erişimi kısıtlar; bunun yerine Ctrl+V tuş kombinasyonunu deneyin veya Termix'i HTTPS üzerinden sunun.",
-    "closeTab": "Kapat",
-    "connecting": "Bağlanıyor...",
-    "connectionLost": "Bağlantı kesildi",
-    "connectionRejected": "Bağlantı sunucu tarafından reddedildi. Lütfen kimlik doğrulamanızı ve ağ yapılandırmanızı kontrol edin.",
-    "connectionTimeout": "Bağlantı zaman aşımı",
-    "enableAutoTmuxAction": "Otomatik Tmux'u Etkinleştir",
-    "hostKeyRejected": "SSH sunucu anahtarı doğrulaması reddedildi. Bağlantı iptal edildi.",
-    "linkDialogCopy": "Kopyala",
-    "linkDialogOpen": "Aç",
-    "linkDialogTitle": "Bağlantıyı Aç",
-    "maxReconnectAttemptsReached": "Maksimum yeniden bağlanma denemesine ulaşıldı",
-    "noHostSelected": "Hiçbir sunucu seçilmedi",
-    "passwordPromptFillTitle": "Kayıtlı parola bu isteme doldurulsun mu?",
-    "reconnect": "Yeniden Bağlan",
-    "reconnected": "Başarıyla yeniden bağlandı",
-    "reconnecting": "Yeniden bağlanıyor... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Bağlantı kesildi, yeniden bağlanılıyor...",
-    "searchCaseSensitive": "Kibrit Kutusu",
-    "searchClose": "Kapat (Escape)",
-    "searchNext": "Sonraki Maç (Giriş)",
-    "searchNoResults": "Sonuç bulunamadı.",
-    "searchPlaceholder": "Bulmak",
-    "searchPrevious": "Önceki Maç (Shift+Enter)",
-    "searchRegex": "Düzenli İfade Kullanımı",
-    "searchResultCount": "{{index}} / {{count}}",
-    "searchWholeWord": "Kelimenin tamamını eşleştir",
-    "sessionExpiredNotice": "{{host}} üzerindeki önceki oturumunuz {{minutes}} dakika sonra sona erdi; kabuk ve içinde çalışan her şey kayboldu. Oturumların aktif kalması için bu sunucuda Auto-Tmux'u etkinleştirin.",
-    "sessionExpiredNoticeNoMinutes": "{{host}} üzerindeki önceki oturumunuz bağlantı kesikken sona erdi; kabuk ve içinde çalışan her şey kayboldu. Oturumların aktif kalması için bu sunucuda Auto-Tmux'u etkinleştirin.",
-    "sessionTakenOver": "Oturum başka bir sekmede açıldı. Yeniden bağlanılıyor...",
-    "tmuxAttached": "Bağlı istemciler",
-    "tmuxAttachedCount": "{{count}} bağlı",
-    "tmuxCopyHint": "Seçimi ayarlayın ve panoya kopyalamak için Enter tuşuna basın",
-    "tmuxCreateNew": "Yeni oturum başlat",
-    "tmuxDetached": "tmux oturumundan ayrıldı",
-    "tmuxLastActivity": "Son etkinlik",
-    "tmuxSessionAttached": "tmux oturumuna bağlanıldı: {{name}}",
-    "tmuxSessionCreated": "tmux oturumu oluşturuldu: {{name}}",
-    "tmuxSessionPickerDesc": "Bu sunucuda mevcut tmux oturumları bulundu. Yeniden bağlanmak için birini seçin veya yeni bir oturum oluşturun.",
-    "tmuxSessionPickerTitle": "tmux Oturumları",
-    "tmuxTimeDays": "{{count}}g önce",
-    "tmuxTimeHours": "{{count}}s önce",
-    "tmuxTimeJustNow": "az önce",
-    "tmuxTimeMinutes": "{{count}}dk önce",
-    "tmuxUnavailable": "Uzak sunucuda tmux yüklü değil, standart kabuğa dönülüyor",
-    "tmuxWindowCount": "{{count}} pencere",
-    "tmuxWindows": "Pencereler",
-    "unknownError": "Bilinmeyen bir hata oluştu",
-    "websocketAbnormalClose": "Bağlantı beklenmedik şekilde kapandı. Bu, ters proxy veya SSL yapılandırma sorunundan kaynaklanabilir. Lütfen sunucu günlüklerini kontrol edin.",
-    "websocketError": "WebSocket bağlantı hatası",
-    "clipboardReadFailed": "Panodan okuma başarısız oldu. Pano izinlerinin verildiğinden emin olun.",
-    "clipboardWriteFailed": "Panoya kopyalama başarısız oldu. Sayfanın HTTPS veya localhost üzerinden sunulduğundan emin olun.",
-    "connected": "Bağlandı",
-    "totpCodeLabel": "Doğrulama Kodu",
-    "duplicateTab": "Sekmeyi çoğalt",
-    "imageChooseFile": "Bir resim dosyası seçin",
-    "imageUploaded": "Yüklenen resim: {{path}}",
-    "imageClipboardUnavailable": "Bu tarayıcı panodan resim okuyamıyor.",
-    "imageClipboardEmpty": "Panoda hiçbir resim bulunamadı.",
-    "localShell": "Yerel terminal kabuğu",
-    "autocompleteHintComplete": "Tab veya Enter tuşuna basarak işlemi tamamlayın.",
-    "autocompleteHintNavigate": "↑↓ gezinmek için",
-    "autocompleteHintClose": "Esc tuşuyla kapatın"
-  },
-  "terminalToolbar": {
-    "detachTmux": "tmux'u ayır",
-    "detachTmuxDescription": "Tmux oturumunu ayır",
-    "dismissError": "Görüntü hatasını kapat",
-    "hideToolbar": "Araç çubuğunu gizle",
-    "image": "Görüntü işlemleri (yalnızca görüntüler)",
-    "imageActionFailed": "Görüntü işlemi başarısız oldu",
-    "layout": "Araç çubuğu görüntüleme modu",
-    "layoutExpanded": "Ölçütlerle genişletildi",
-    "layoutIcon": "Yalnızca simge",
-    "layoutLabeled": "Simgeler ve etiketler",
-    "moveToolbar": "Araç çubuğunu taşı",
-    "moveToolbarHint": "Araç çubuğunu yeniden konumlandırmak için sürükleyin.",
-    "paste": "Resmi yapıştır",
-    "pasteImage": "Panodan resim yapıştır (yalnızca resimler)",
-    "retry": "Yeniden dene",
-    "showToolbar": "Araç çubuğunu genişlet",
-    "upload": "Resim yükle",
-    "uploadImage": "Sunucuya bir resim yükleyin.",
-    "uploadingImage": "Yükleniyor..."
-  },
-  "history": {
-    "noTerminalSelected": "Terminal seçilmedi",
-    "noTerminalSelectedHint": "Komut geçmişini görüntülemek için bir SSH terminal sekmesi açın",
-    "searchPlaceholder": "Geçmişte ara...",
-    "clearAll": "Tümünü Temizle",
-    "noHistoryEntries": "Geçmiş girdisi yok",
-    "trackingDisabled": "Geçmiş takibi kapalı",
-    "trackingDisabledHint": "Bu sunucunun SSH Terminal sekmesinde Komut Geçmişini etkinleştirin.",
-    "commandCount_one": "{{count}} komutu",
-    "commandCount_other": "{{count}} komutları"
-  },
-  "touchInput": {
-    "enabled": "Dokunmatik Girişi Etkinleştir",
-    "enabledDesc": "Terminallerde tek parmakla dokunmatik kaydırmaya izin verin.",
-    "momentumEnabled": "İvme Kazandırın",
-    "momentumEnabledDesc": "Kaydırma işleminden sonra kısa bir süre daha aşağı kaydırmaya devam edin.",
-    "advanced": "Gelişmiş",
-    "resetDefaults": "Varsayılanlara sıfırla",
-    "dragThreshold": "Sürükleme eşiği",
-    "maxWheelDelta": "Maksimum tekerlek deltası",
-    "momentumSampleWindow": "Momentum örnek penceresi",
-    "releaseGracePeriod": "Serbest bırakma erteleme süresi",
-    "minimumVelocity": "Minimum hız",
-    "maximumVelocity": "Maksimum hız",
-    "maximumDuration": "Maksimum süre",
-    "maximumTravel": "Maksimum seyahat",
-    "decayTime": "Bozunma süresi",
-    "pixelsPerTick": "Piksel başına tik",
-    "maximumFrameInterval": "Maksimum kare aralığı",
-    "maximumTicksPerFrame": "Kare başına maksimum tik sayısı"
-  },
-  "imageStorage": {
-    "instanceId": "Terminal oturum örneği kimliği",
-    "instanceIdDesc": "Görünürlüğü test etmek için kullanılan, bağlı terminal sekmelerinizden birinin örnek kimliği.",
-    "selectedModeUnavailable": "Mevcut değil",
-    "test": "Test Et",
-    "testing": "Test...",
-    "testFailed": "Görüntü depolama testi başarısız oldu.",
-    "testConnected": "Terminal oturumu bağlandı.",
-    "testNotConnected": "Bu örnek kimliğiyle bağlantılı bir terminal oturumu bulunmamaktadır.",
-    "testSelectedMode": "Yükleme işlemi şu şekilde yapılır: {{mode}}",
-    "testLocalVisible": "Yerel dizin, bağlı sunucudan görülebilir.",
-    "testLocalNotVisible": "Yerel dizin, bağlı sunucudan görünmez."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Dokunmatik Giriş",
-        "images": "Görüntü Depolama",
-        "sessions": "Oturumlar",
-        "newHosts": "Yeni Sunucular"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Terminal Oturum Kalıcılığı",
-        "description": "Bağlantısı kesilmiş bir terminalin sunucuda kapatılmadan önce ne kadar süreyle aktif tutulacağı. Minimum 1, maksimum 1440 dakika. Bu süreyi aşması gereken oturumlar için, sunucuda Auto-Tmux'u etkinleştirin."
-      },
-      "commandHistoryEnabled": {
-        "label": "Komut Geçmişi",
-        "description": "Komut geçmişi kaydına izin ver. Devre dışı bırakıldığında, host başına ayarlara bakılmaksızın geçmiş kaydedilmez."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "Yeni sunucular için komut geçmişi",
-        "description": "Yeni sunucuların komut geçmişi açık olarak başlatılıp başlatılmadığı."
-      },
-      "imageStorageMode": {
-        "label": "Depolama Modu",
-        "description": "Yapıştırılan ve yüklenen terminal görüntülerinin yazıldığı yer. Bağlantı türüne göre otomatik seçim, Yerel ve Uzak (SFTP) ayarları düzeltildi.",
-        "auto": "Otomatik",
-        "local": "Yerel",
-        "remoteSftp": "Uzaktan (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Yerel dizin",
-        "description": "Termix arka ucunda yerel modun görüntüleri yazdığı mutlak yol. Kaydedildikten sonra asla gösterilmez. Boş bırakıldığında TERMIX_IMAGE_DIR kullanılır."
-      },
-      "imageHostPath": {
-        "label": "Ana bilgisayar yolu",
-        "description": "Terminal aracıların aldığı yerel dizinin sunucu tarafındaki görünümü."
-      },
-      "imageTtlMs": {
-        "label": "TTL (ms)",
-        "description": "Yüklenen bir görüntünün ne kadar süreyle (milisaniye cinsinden) saklanacağı. Boş değerler için TERMIX_IMAGE_TTL_MS veya bir saat kullanılır."
-      },
-      "imageMaxCount": {
-        "label": "Maksimum görüntü sayısı",
-        "description": "Çoğu resim aynı anda saklanır. Boş değer için TERMIX_MAX_IMAGE_COUNT veya 100 kullanılır."
-      },
-      "imageMaxBytes": {
-        "label": "Maksimum depolama baytları",
-        "description": "Görüntülerin en fazla baytlık kısmı aynı anda saklanır. Boş hali TERMIX_MAX_IMAGE_STORAGE_BYTES veya 5 GiB kullanır."
-      },
-      "sessionPersistence": {
-        "label": "Bağlantı kesildikten sonra oturumları sürdürün.",
-        "description": "Sunucuda bağlantısı kesilmiş bir terminali yukarıda belirtilen süre boyunca açık tutun, böylece sekme yeniden açıldığında kaldığı yerden devam eder."
-      },
-      "newHostAutoTmux": {
-        "label": "Otomatik Tmux",
-        "description": "Yeni sunucuların terminallerini tmux içinde çalıştırın, böylece oturumlar bağlantı kesintilerinden etkilenmeden devam eder (sunucuda tmux kurulu olması gerekir)."
-      },
-      "newHostTheme": {
-        "label": "Yeni ev sahipleri için tema",
-        "description": "Yeni bir sunucunun başlattığı terminal teması."
-      },
-      "newHostFontFamily": {
-        "label": "Yeni sunucular için yazı tipi",
-        "description": "Yeni bir sunucunun başlatıldığı terminal yazı tipi."
-      },
-      "newHostFontSize": {
-        "label": "Yeni sunucular için yazı tipi boyutu",
-        "description": "Yeni bir sunucunun başlangıçta kullandığı terminal yazı tipi boyutu, piksel cinsinden."
-      },
-      "newHostCursorStyle": {
-        "label": "Yeni sunucular için imleç stili"
-      },
-      "newHostCursorBlink": {
-        "label": "Yeni sunucular için yanıp sönen imleç"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Terminal Araç Çubuğunu Etkinleştir",
-        "description": "Etkin terminale sabitlenmiş, bu sunucunun araçlarına ve canlı istatistiklerine hızlı erişim sağlayan bir araç çubuğu gösterin."
-      },
-      "terminalToolbarPosition": {
-        "label": "Araç Çubuğu Konumu",
-        "description": "Araç çubuğunun terminalde bulunduğu yer. Oradan hala sürükleyebilirsiniz.",
-        "bottom": "Alt orta kısım",
-        "bottomLeft": "Sol alt",
-        "bottomRight": "Sağ alt",
-        "top": "Üst orta",
-        "topLeft": "Sol üst",
-        "topRight": "Sağ üstte"
-      },
-      "terminalToolbarStartState": {
-        "label": "Araç Çubuğu Başlangıç Durumu",
-        "description": "Terminal bağlandığında araç çubuğunun genişletilmiş mi yoksa simge durumuna küçültülmüş mü açılacağı",
-        "expanded": "Genişletilmiş",
-        "collapsed": "Minimize edildi"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Araç Çubuğu Görüntüleme Modu",
-        "description": "Araç çubuğu düğmelerinin nasıl gösterileceği. Son kullanılan seçenek, araç çubuğunda seçtiğiniz düğmeyi korur.",
-        "remember": "Son kullanım",
-        "icon": "Yalnızca simge",
-        "labeled": "Simgeler ve etiketler",
-        "expanded": "İstatistiklerle genişletildi"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Canlı İstatistikleri Göster",
-        "description": "Genişletilmiş modda, araç çubuğu düğmelerinin üstünde canlı sunucu istatistiklerini göster."
-      },
-      "terminalToolbarFade": {
-        "label": "Boşta Kalırken Solma",
-        "description": "Fare imlecini üzerine getirene kadar araç çubuğunu soluklaştırın."
-      },
-      "enableCommandHistory": {
-        "label": "Komut Geçmişi",
-        "description": "Geçmiş ve otomatik tamamlama için bu terminalde çalıştırılan komutları kaydet"
-      },
-      "enableTerminal": {
-        "label": "Terminali Etkinleştir",
-        "description": "Bu sunucu için bir SSH terminali sunun."
-      },
-      "inheritAppearance": {
-        "label": "Kullanıcı varsayılanlarını kullanın"
-      },
-      "theme": {
-        "label": "Tema"
-      },
-      "cursorBlink": {
-        "label": "Yanıp sönen imleç"
-      },
-      "cursorStyle": {
-        "label": "İmleç stili"
-      },
-      "fontSize": {
-        "label": "Yazı tipi boyutu"
-      },
-      "fontFamily": {
-        "label": "Yazı Tipi"
-      },
-      "scrollback": {
-        "label": "Geriye kaydır"
-      },
-      "letterSpacing": {
-        "label": "Harf aralığı"
-      },
-      "lineHeight": {
-        "label": "Çizgi yüksekliği"
-      },
-      "bellStyle": {
-        "label": "Zil"
-      },
-      "minimumContrastRatio": {
-        "label": "Minimum kontrast oranı"
-      },
-      "backgroundImage": {
-        "label": "Arka plan resmi"
-      },
-      "backgroundImageOpacity": {
-        "label": "Arka plan görüntüsünün saydamlığı"
-      },
-      "customThemeColors": {
-        "label": "Özel tema renkleri"
-      },
-      "rightClickSelectsWord": {
-        "label": "Sağ tıklama kelimeyi seçer."
-      },
-      "macOptionIsMeta": {
-        "label": "Seçenek Meta'dır"
-      },
-      "fastScrollModifier": {
-        "label": "Hızlı kaydırma tuşu"
-      },
-      "fastScrollSensitivity": {
-        "label": "Hızlı kaydırma hızı"
-      },
-      "backspaceMode": {
-        "label": "Geri tuşu"
-      },
-      "autoMosh": {
-        "label": "Otomatik mosh"
-      },
-      "moshCommand": {
-        "label": "Mosh komutu"
-      },
-      "autoTmux": {
-        "label": "Otomatik tmux"
-      },
-      "useSSHTitle": {
-        "label": "SSH başlığını kullanın."
-      },
-      "syntaxHighlighting": {
-        "label": "Sözdizimi vurgulama"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Sözdizimi vurgulama kategorileri"
-      },
-      "linkClickBehavior": {
-        "label": "Bağlantıya tıklama"
-      },
-      "localEcho": {
-        "label": "Yerel yankı"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Şifre istemlerini doldurmayı teklif edin"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "sudo komut istemlerini doldurun"
-      },
-      "autoReconnect": {
-        "label": "Otomatik olarak yeniden bağlan"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Komut Otomatik Tamamlama",
-        "description": "Sekme tuşuna bastığınızda yazarken otomatik tamamlama özelliğini göster."
-      },
-      "localEcho": {
-        "label": "Yerel Yankı",
-        "description": "Güvenli yerel tuş vuruşu tahmini kullanarak algılanan giriş gecikmesini azaltın."
-      },
-      "linkClickBehavior": {
-        "label": "Terminal Bağlantı Tıklama",
-        "description": "Terminalde bağlantılara tıklandığında varsayılan davranış"
-      },
-      "customThemes": {
-        "label": "Kaydedilen temalar"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Yerel Terminal"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Canlı terminal oturumlarını kullanın.",
-      "description": "Oturum paylaşımı ve kayıt gibi diğer özelliklerin canlı terminal oturumlarınıza ulaşmasını sağlar."
-    },
-    "history": {
-      "title": "Komut geçmişini oku",
-      "description": "Yapay zekâ asistanı gibi diğer özelliklerin komut geçmişinizi okumasına olanak tanır."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Terminal",
-    "addHost": "Ana Bilgisayar Ekle",
-    "applyGlobalThemeTooltip": "Bu temayı uygulayın",
-    "backgroundImageDesc": "Bir terminal arka plan resmi için isteğe bağlı URL",
-    "backgroundImageLabel": "Arka Plan Resmi URL",
-    "backgroundImageOpacityLabel": "Arka Plan Resmi Opaklığı",
-    "backspaceMode": "Geri Silme Modu",
-    "backspaceModeControlH": "Kontrol-H (BS)",
-    "backspaceModeLabel": "Backspace Modu",
-    "backspaceModeNormal": "Normal (DEL)",
-    "behaviorAndAdvanced": "Davranış ve Gelişmiş",
-    "bellStyle": "Zil Stili",
-    "bellStyleBoth": "İkisi birden",
-    "bellStyleLabel": "Zil Stili",
-    "bellStyleNone": "Yok",
-    "bellStyleSound": "Ses",
-    "bellStyleVisual": "Görsel",
-    "colorTheme": "Renk Teması",
-    "cursorBlink": "İmleç Yanıp Sönme",
-    "cursorBlinking": "İmleç Yanıp Sönmesi",
-    "cursorBlinkingDesc": "Terminal imleci için yanıp sönme animasyonunu etkinleştir",
-    "cursorStyle": "İmleç Stili",
-    "cursorStyleBar": "Çubuk",
-    "cursorStyleBlock": "Engellemek",
-    "cursorStyleLabel": "İmleç Stili",
-    "cursorStyleUnderline": "Altını çiz",
-    "customThemeAnsiColors": "ANSI Renkleri",
-    "customThemeBackground": "Arka Plan",
-    "customThemeBlack": "Siyah",
-    "customThemeBlue": "Mavi",
-    "customThemeBrightBlack": "Parlak Siyah",
-    "customThemeBrightBlue": "Parlak Mavi",
-    "customThemeBrightCyan": "Parlak Cyan",
-    "customThemeBrightGreen": "Parlak Yeşil",
-    "customThemeBrightMagenta": "Parlak Magenta",
-    "customThemeBrightRed": "Parlak Kırmızı",
-    "customThemeBrightWhite": "Parlak Beyaz",
-    "customThemeBrightYellow": "Parlak Sarı",
-    "customThemeColors": "Özel Renkler",
-    "customThemeCursor": "İmleç",
-    "customThemeCursorAccent": "İmleç Vurgusu",
-    "customThemeCyan": "Cyan",
-    "customThemeForeground": "Ön Plan",
-    "customThemeGreen": "Yeşil",
-    "customThemeMagenta": "Magenta",
-    "customThemeRed": "Kırmızı",
-    "customThemeResetTooltip": "Varsayılanlara sıfırla",
-    "customThemeSelection": "Seçim",
-    "customThemeWhite": "Beyaz",
-    "customThemeYellow": "Sarı",
-    "deleteGlobalThemeTooltip": "Bu temayı sil",
-    "docsLink": "Dokümanları görüntüle",
-    "enableAutoMosh": "Otomatik Mosh'u Etkinleştir",
-    "enableAutoMoshDesc": "Varsa, SSH yerine Mosh'u tercih et",
-    "enableAutoTmux": "Otomatik Tmux'u Etkinleştir",
-    "enableAutoTmuxDesc": "Kabuk uygulamanızı ve içinde çalışan her şeyi bağlantı kesintileri ve tarayıcı yeniden başlatmaları sırasında çalışır durumda tutmak için tmux içinde çalıştırın (tmux ana bilgisayarda kurulu olmalıdır).",
-    "fastScrollModifier": "Hızlı Kaydırma Değiştiricisi",
-    "fastScrollModifierAlt": "Alt",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Hızlı Kaydırma Değiştiricisi",
-    "fastScrollModifierShift": "Shift",
-    "fastScrollSensitivity": "Hızlı Kaydırma Hassasiyeti",
-    "fastScrollSensitivityLabel": "Hızlı Kaydırma Hassasiyeti",
-    "fontFamily": "Yazı Tipi Ailesi",
-    "fontFamilyCustomHint": "Hazır gelen yazı tiplerinden birini seçin veya Özel'i seçip sisteminizde zaten yüklü olan bir yazı tipinin tam adını yazın (örneğin MesloLGS NF, Noto Sans Mono). Termix sizin için yazı tiplerini yükleyemez, önce işletim sisteminize yükleyin.",
-    "fontFamilyCustomOption": "Gelenek...",
-    "fontFamilyCustomPlaceholder": "Tam yazı tipi adı, örneğin MesloLGS NF",
-    "fontFamilyLabel": "Yazı Tipi Ailesi",
-    "fontSize": "Yazı Tipi Boyutu",
-    "fontSizeLabel": "Yazı Tipi Boyutu",
-    "hostNotFound": "Host bulunamadı",
-    "letterSpacing": "Harf Boşluğu",
-    "letterSpacingPx": "Harf Aralığı (px)",
-    "lineHeight": "Satır Yüksekliği",
-    "lineHeightLabel": "Satır Yüksekliği",
-    "linkClickBehaviorConfirm": "Açmak veya kopyalamak için açılır pencere göster",
-    "linkClickBehaviorDesc": "Terminalde bir bağlantıya tıkladığınızda ne olacağını kontrol eder. Uygulama düzeyindeki ayarı takip etmek için 'Varsayılan'ı kullanın.",
-    "linkClickBehaviorDirect": "Doğrudan aç",
-    "linkClickBehaviorLabel": "Bağlantı Tıklama Davranışı",
-    "loadingHost": "Host yükleniyor...",
-    "localEchoAuto": "Otomatik",
-    "localEchoDesc": "Yavaş bağlantılarda bile yerel olarak güvenli yazdırılabilir tuş vuruşlarını tahmin edin. Parola istemleri ve kontrol girişleri asla tekrarlanmaz.",
-    "localEchoLabel": "Yerel Yankı",
-    "localEchoOff": "Kapalı",
-    "localEchoOn": "Her zaman açık",
-    "macOptionIsMetaLabel": "Seçenek Tuşu Meta Verilerini Gönderiyor",
-    "macOptionIsMetaShortDesc": "macOS'ta Option/Alt tuşuyla özel karakterler (örneğin @ veya |) yazmayı devre dışı bırakın, bunun yerine Meta gönderin.",
-    "moshCommand": "MOSH Komutu",
-    "moshCommandLabel": "Mosh Komutu",
-    "noSavedThemes": "Henüz kaydedilmiş tema yok.",
-    "none": "Hiçbiri",
-    "passwordPromptAutoFillDesc": "Terminal şifre istediğinde kaydedilmiş şifreyi girmeyi teklif edin. Bu sunucuda hiçbir zaman otomatik şifre doldurmayı devre dışı bırakın.",
-    "passwordPromptAutoFillLabel": "Şifre Otomatik Doldurma Teklifi",
-    "autoReconnectLabel": "Otomatik Yeniden Bağlantı",
-    "autoReconnectDesc": "Ağda bir aksaklık veya uyku modu gibi durumlarda SSH bağlantısı kesildiğinde otomatik olarak yeniden bağlanır. Geri kaydırma özelliğini korur.",
-    "rightClickSelectsWord": "Sağ Tık Kelimeyi Seçer",
-    "rightClickSelectsWordLabel": "Sağ Tık Kelime Seçer",
-    "rightClickSelectsWordShortDesc": "Sağ tıklandığında imlecin altındaki kelimeyi seç",
-    "saveAsGlobalTheme": "Küresel Tema Olarak Kaydet",
-    "saveGlobalThemeError": "Tema kaydedilemedi.",
-    "saveGlobalThemeNamePrompt": "Bu tema için bir ad girin.",
-    "saveGlobalThemeSuccess": "Tema kaydedildi",
-    "savedThemesLabel": "Kaydedilen Temalar",
-    "scrollbackBufferLabel": "Kaydırma Arabelleği",
-    "scrollbackMaxLines": "Geçmişte saklanan maksimum satır sayısı",
-    "sudoPasswordAutoFill": "Sudo Parolası Otomatik Doldurma",
-    "sudoPasswordAutoFillDesc": "Sudo parolasını saklayın; böylece ana bilgisayar metrikleri, terminal istemleri ve diğer bileşenler ayrıcalıklı komutları otomatik olarak çalıştırabilir.",
-    "sudoPasswordAutoFillLabel": "Sudo Parolası Otomatik Doldurma",
-    "syntaxCategoryIpAddresses": "IP Adresleri",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Günlük Düzeyleri",
-    "syntaxCategoryLogLevelsDesc": "error, warn, info, debug, fatal",
-    "syntaxCategoryNumbers": "Etiketli Sayılar",
-    "syntaxCategoryNumbersDesc": "port 8080, exit 1, status 404",
-    "syntaxCategoryPaths": "Dosya Yolları",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "Zaman Damgaları",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 2024-01-15",
-    "syntaxCategoryUrls": "URL'ler",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "Terminal çıktısını renklendir (hatalar, yollar, IP'ler, zaman damgaları)",
-    "syntaxHighlightingLabel": "Söz Dizimi Vurgulama",
-    "terminalAppearance": "Terminal Görünümü",
-    "theme": "Tema",
-    "themePreview": "Tema Önizlemesi",
-    "useSSHTitleDesc": "Sekme başlığını, ana bilgisayar adı yerine kabuğun pencere başlığından güncelle",
-    "useSSHTitleLabel": "SSH Pencere Başlığını Kullan",
-    "enableTunnel": "Tüneli Etkinleştir",
-    "enableFileManager": "Dosya Yöneticisini Etkinleştir",
-    "enableDocker": "Docker'ı Etkinleştir",
-    "startupSnippet": "Başlangıç Parçacığı",
-    "quickActions": "Hızlı Eylemler",
-    "proxmoxLastSyncStatus": {
-      "success": "Başarılı"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} atlandı (IP adresi bulunamadı)",
-    "proxmoxStatsUrlCopied": "Proxmox İstatistikleri URL'si panoya kopyalandı",
-    "rdpUrlCopied": "RDP URL kopyalandı",
-    "vncUrlCopied": "VNC URL kopyalandı",
-    "filterAuthStepca": "Adım CA",
-    "guac": {
-      "noCredential": "Kimlik bilgisi yok (aşağıda doğrudan kimlik bilgileri)",
-      "authTypeDirect": "Doğrudan",
-      "authTypeCredential": "Kimlik bilgisi",
-      "authTypeNone": "Yok",
-      "recordingPath": "Kayıt Yolu",
-      "recordingName": "Kayıt Adı",
-      "saveHostFirst": "Önce ana makineyi kaydedin.",
-      "sharingOptionsAfterSave": "Paylaşım seçenekleri ana makine kaydedildikten sonra kullanılabilir.",
-      "permissionLevel": "İzin Düzeyi",
-      "typeHeader": "Tür",
-      "targetHeader": "Hedef",
-      "permissionHeader": "İzin",
-      "cancelBtn": "İptal",
-      "savingBtn": "Kaydediliyor...",
-      "updateHostBtn": "Ana Makineyi Güncelle",
-      "addHostBtn": "Ana Makine Ekle"
-    },
-    "filterAuthVault": "Kasa"
-  },
-  "nav": {
-    "history": "Geçmiş",
-    "localTerminal": "Yerel Terminal",
-    "sshTools": "SSH Araçları",
-    "terminal": "Terminal",
-    "macros": "Makrolar"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Tuş vuruşlarını yayınlamak için buraya yazın...",
-    "copyOnSelect": "Seçilen metni otomatik olarak kopyala",
-    "enableRightClickCopyPaste": "Sağ tık kopyala/yapıştırmayı etkinleştir",
-    "fillPassword": "Parolayı doldur",
-    "fillPasswordMissing": "Seçili {{count}} terminal için kayıtlı parola yok",
-    "fillPasswordSuccess": "Parola {{count}} terminale dolduruldu",
-    "keyRecordingTitle": "Tuş Kaydı",
-    "noTerminalTabsOpen": "Açık terminal sekmesi yok",
-    "recordToTerminals": "Terminallere Kaydet",
-    "selectAll": "Tümü",
-    "selectNone": "Yok",
-    "selectTerminalsAbove": "Yukarıdaki terminalleri seç",
-    "settingsTitle": "Ayarlar",
-    "startRecording": "Kaydı Başlat",
-    "stopRecording": "Kaydı Durdur"
-  },
-  "keybindings": {
-    "copy": "Seçimi kopyala",
-    "paste": "Yapıştır",
-    "sendControlCode": "Ctrl+harf sinyali gönder",
-    "sendText": "Mesaj gönder",
-    "controlCodeLabel": "Mektup",
-    "textLabel": "Gönderilecek metin",
-    "appendEnterLabel": "Gönderdikten sonra Enter tuşuna basın.",
-    "clipboardPermissionNote": "Bazı tarayıcılarda ilk kullanımda panoya kopyalama izni isteyebilir.",
-    "textRequired": "Göndermek istediğiniz metni girin.",
-    "controlCodeRequired": "Kontrol kodu için tek bir harf girin.",
-    "builtIn": {
-      "copyCtrlC": "Seçimi kopyala (Ctrl+C, yalnızca metin seçiliyken)",
-      "copyCtrlShiftC": "Seçimi kopyala (Ctrl+Shift+C)",
-      "copyCmdC": "Seçimi kopyala (Cmd+C)",
-      "pasteCtrlShiftV": "Panodan yapıştır (Ctrl+Shift+V)",
-      "ctrlW": "Ctrl+W komutunu göndererek shell'e bağlanın (tarayıcı sekmesinin kapatılması engellendi).",
-      "ctrlT": "Ctrl+T komutunu göndererek shell komutuna komut verin (tarayıcı sekmesinin açılması engellendi).",
-      "ctrlN": "Ctrl+N tuşuna basarak shell'e geçin (tarayıcı penceresinin açılması engellendi).",
-      "ctrlQ": "Ctrl+Q tuşuna basarak kabuk moduna geçin (tarayıcıdan çıkmanız engellendi)."
-    }
-  },
-  "macros": {
-    "title": "Makrolar",
-    "description": "Önceden kaydedilmiş bir komut dizisini terminalde çalıştırın ve sunucunun geri gönderdiği yanıtlara göre hareket edin.",
-    "target": "Hedef",
-    "noTerminal": "Açık terminal yok.",
-    "empty": "Henüz makro yok",
-    "emptyHint": "Giriş yapma, bir hizmeti yeniden başlatma veya komut istemlerine yanıt verme gibi terminal işlemlerini otomatikleştirmek için bir makro oluşturun.",
-    "create": "Yeni makro",
-    "back": "Makrolara geri dön",
-    "name": "Ad",
-    "namePlaceholder": "Web sunucusunu yeniden başlatın.",
-    "nameRequired": "Kaydetmeden önce makroya bir ad verin.",
-    "descriptionLabel": "Açıklama",
-    "descriptionPlaceholder": "Bu makronun ne yaptığı (isteğe bağlı)",
-    "unsaved": "Kaydedilmemiş değişiklikler",
-    "save": "Kaydet",
-    "saved": "Makro kaydedildi.",
-    "saveFailed": "Makro kaydedilemedi.",
-    "delete": "Sil",
-    "deleteTitle": "Bu makroyu silmek ister misiniz?",
-    "deleteBody": "\"{{name}}\" kalıcı olarak silinecektir. Bu işlem geri alınamaz.",
-    "deleted": "Makro silindi",
-    "cancel": "İptal",
-    "run": "Çalıştır",
-    "stop": "Durdurma",
-    "running": "Koşma...",
-    "completed": "Makro tamamlandı",
-    "failed": "Makro başarısız oldu",
-    "loadFailed": "Makrolar yüklenemedi.",
-    "needTerminal": "Öncelikle bir terminal açın ve bağlayın.",
-    "noSteps": "Bu makronun henüz hiçbir adımı yok. Aşağıya bir adım ekleyin.",
-    "addStep": "Adım ekle",
-    "stepNumber": "Adım {{number}}",
-    "removeStep": "Adımı kaldır",
-    "confirmRunTitle": "Bu makroyu çalıştırayım mı?",
-    "confirmRunBody": "\"{{name}}\" {{host}} adresine komutlar gönderecektir.",
-    "confirmRunAction": "Makroyu çalıştır",
-    "stepTypes": {
-      "send": {
-        "label": "Komut gönder",
-        "help": "Terminale, sanki siz yazmışsınız gibi metin yazar."
-      },
-      "wait": {
-        "label": "Çıktıyı bekleyin",
-        "help": "Sunucu, belirttiğiniz metni (örneğin parola istemi gibi) yazdırana kadar bekler."
-      },
-      "delay": {
-        "label": "Duraklat",
-        "help": "Bir sonraki adıma geçmeden önce belirli bir süre bekler."
-      },
-      "if": {
-        "label": "Çıktı içeriyorsa",
-        "help": "Sunucunun şu ana kadar yazdırdığı her şeyi kontrol eder, ardından iki daldan birini çalıştırır."
-      },
-      "repeat": {
-        "label": "Tekrarlamak",
-        "help": "İçindeki adımları belirtilen sayıda tekrarlar."
-      }
-    },
-    "send": {
-      "text": "Komut veya metin",
-      "textPlaceholder": "systemctl restart nginx",
-      "pressEnter": "Gönderdikten sonra Enter tuşuna basın.",
-      "pressEnterHelp": "Göndermeden metin yazmak için bunu kapatın."
-    },
-    "wait": {
-      "pattern": "Çıktıyı oluşturana kadar bekleyin.",
-      "patternPlaceholder": "parola:",
-      "timeout": "Vazgeçtikten sonra",
-      "onTimeout": "Eğer hiç ortaya çıkmazsa",
-      "stop": "Makroyu durdur",
-      "continue": "Yine de devam edin."
-    },
-    "delay": {
-      "duration": "Bekleyin"
-    },
-    "ifStep": {
-      "pattern": "Çıktı şunları içeriyorsa:",
-      "patternPlaceholder": "Aktif: aktif (koşmak)",
-      "then": "O halde şunu yapın",
-      "else": "Aksi takdirde şunu yapın",
-      "emptyBranch": "Hiçbir adım yok"
-    },
-    "repeat": {
-      "count": "Sayısı",
-      "times": "kez"
-    },
-    "match": {
-      "useRegex": "Düzenli ifadeyle eşleştirin",
-      "useRegexHelp": "Metnin aynen yazıldığı gibi kalması için bunu atlayın.",
-      "invalidRegex": "Geçerli bir normal ifade değil, düz metin olarak eşleştirilecektir."
-    },
-    "seconds": "saniye",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "Uzak sunucu gereklidir. Bu bağlantı türünü kullanmak için Ayarlar'dan bir uzak sunucu bağlayın."
-  },
-  "plugin": {
-    "name": "SSH Terminali"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/uk_UA.json b/plugins/ssh-terminal/locales/translated/uk_UA.json
deleted file mode 100644
index 1cefe641e..000000000
--- a/plugins/ssh-terminal/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Додати",
-    "arrowDown": "Стрілка вниз",
-    "arrowLeft": "Стрілка ліворуч",
-    "arrowRight": "Стрілка праворуч",
-    "arrowUp": "Стрілка вгору",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Дел",
-    "done": "Готово",
-    "editQuickKeys": "Редагувати швидкі клавіші",
-    "end": "Кінець",
-    "esc": "Esc",
-    "home": "Дім",
-    "pageDown": "ПгДн",
-    "pageUp": "PgUp",
-    "paste": "Вставити",
-    "quickKeyPlaceholder": "наприклад, sudo ",
-    "quickKeysDesc": "Натисніть ×, щоб видалити. Підтримує до 8 символів.",
-    "quickKeysTitle": "Швидкі клавіші",
-    "removeQuickKey": "Видалити",
-    "resetDefaults": "Скинути до налаштувань за замовчуванням",
-    "shift": "Зсув",
-    "tab": "Вкладка"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Не вдалося ввімкнути Auto-Tmux",
-    "autoTmuxEnabled": "Автоматичне Tmux-змінення увімкнено для {{host}}. Застосовується з наступного підключення.",
-    "clipboardHttpWarning": "Не вдалося прочитати буфер обміну. Деякі браузери обмежують доступ до буфера обміну поза HTTPS — спробуйте Ctrl+V або обслуговуйте Termix через HTTPS.",
-    "closeTab": "Закрити",
-    "connecting": "Підключення...",
-    "connectionLost": "З’єднання втрачено",
-    "connectionRejected": "З’єднання відхилено сервером. Перевірте автентифікацію та конфігурацію мережі.",
-    "connectionTimeout": "Тайм-аут з'єднання",
-    "enableAutoTmuxAction": "Увімкнути автоматичне Tmux",
-    "hostKeyRejected": "Перевірку ключа хоста SSH відхилено. З'єднання скасовано.",
-    "linkDialogCopy": "Копіювати",
-    "linkDialogOpen": "ВІДЧИНЕНО",
-    "linkDialogTitle": "Відкрити посилання",
-    "maxReconnectAttemptsReached": "Досягнуто максимальної кількості спроб повторного підключення",
-    "noHostSelected": "Хост не вибрано",
-    "passwordPromptFillTitle": "Введіть збережений пароль у цей запит?",
-    "reconnect": "Знову підключитися",
-    "reconnected": "Успішно відновлено підключення",
-    "reconnecting": "Повторне підключення... ({{attempt}}/{{max}})",
-    "autoReconnecting": "З’єднання втрачено, під’єднання повторне...",
-    "searchCaseSensitive": "Зіставте регістр",
-    "searchClose": "Закрити (Escape)",
-    "searchNext": "Наступний матч (Enter)",
-    "searchNoResults": "Немає результатів",
-    "searchPlaceholder": "Знайти",
-    "searchPrevious": "Попередній збіг (Shift+Enter)",
-    "searchRegex": "Використовуйте регулярний вираз",
-    "searchResultCount": "{{index}} з {{count}}",
-    "searchWholeWord": "Зіставлення цілого слова",
-    "sessionExpiredNotice": "Ваш попередній сеанс на {{host}} завершився через {{minutes}} хвилин після відключення; оболонка та все, що в ній працює, зникли. Увімкніть Auto-Tmux на цьому хості, щоб підтримувати сеанси активними.",
-    "sessionExpiredNoticeNoMinutes": "Ваш попередній сеанс на {{host}} закінчився під час відключення; оболонка та все, що в ній працює, зникли. Увімкніть Auto-Tmux на цьому хості, щоб підтримувати сеанси активними.",
-    "sessionTakenOver": "Сеанс відкрито в іншій вкладці. Повторне підключення...",
-    "tmuxAttached": "Підключені клієнти",
-    "tmuxAttachedCount": "{{count}} додається",
-    "tmuxCopyHint": "Відрегулюйте виділення та натисніть Enter, щоб скопіювати його в буфер обміну",
-    "tmuxCreateNew": "Почати новий сеанс",
-    "tmuxDetached": "Від’єднано від сеансу tmux",
-    "tmuxLastActivity": "Остання активність",
-    "tmuxSessionAttached": "додано сеанс tmux: {{name}}",
-    "tmuxSessionCreated": "Створено сеанс tmux: {{name}}",
-    "tmuxSessionPickerDesc": "На цьому хості знайдено існуючі сеанси tmux. Виберіть один для повторного підключення або створення нового сеансу.",
-    "tmuxSessionPickerTitle": "Сесії tmux",
-    "tmuxTimeDays": "{{count}}днів тому",
-    "tmuxTimeHours": "{{count}}год тому",
-    "tmuxTimeJustNow": "щойно",
-    "tmuxTimeMinutes": "{{count}}хв тому",
-    "tmuxUnavailable": "tmux не встановлено на віддаленому хості, повертається до стандартної оболонки",
-    "tmuxWindowCount": "вікно {{count}}",
-    "tmuxWindows": "Вікна",
-    "unknownError": "Сталася невідома помилка",
-    "websocketAbnormalClose": "З’єднання несподівано завершилося. Можливо, це пов’язано зі зворотним проксі-сервером або проблемою конфігурації SSL. Перевірте журнали сервера.",
-    "websocketError": "Помилка підключення WebSocket",
-    "clipboardReadFailed": "Не вдалося прочитати з буфера обміну. Переконайтеся, що надано дозволи на доступ до буфера обміну.",
-    "clipboardWriteFailed": "Не вдалося скопіювати в буфер обміну. Переконайтеся, що сторінка обслуговується через HTTPS або localhost.",
-    "connected": "Підключено",
-    "totpCodeLabel": "Код підтвердження",
-    "duplicateTab": "Дублікат вкладки",
-    "imageChooseFile": "Виберіть файл зображення",
-    "imageUploaded": "Завантажене зображення: {{path}}",
-    "imageClipboardUnavailable": "Цей браузер не може читати зображення з буфера обміну",
-    "imageClipboardEmpty": "У буфері обміну не знайдено зображення",
-    "localShell": "Локальна термінальна оболонка",
-    "autocompleteHintComplete": "Tab або Enter для завершення",
-    "autocompleteHintNavigate": "↑↓ для навігації",
-    "autocompleteHintClose": "Esc для закриття"
-  },
-  "terminalToolbar": {
-    "detachTmux": "Від’єднати tmux",
-    "detachTmuxDescription": "Від’єднати сеанс tmux",
-    "dismissError": "Помилка відхилення зображення",
-    "hideToolbar": "Приховати панель інструментів",
-    "image": "Дії із зображеннями (лише зображення)",
-    "imageActionFailed": "Не вдалося виконати дію із зображенням",
-    "layout": "Режим відображення панелі інструментів",
-    "layoutExpanded": "Розширено показниками",
-    "layoutIcon": "Тільки значок",
-    "layoutLabeled": "Піктограми та мітки",
-    "moveToolbar": "Переміщення панелі інструментів",
-    "moveToolbarHint": "Перетягніть, щоб змінити положення панелі інструментів",
-    "paste": "Вставити зображення",
-    "pasteImage": "Вставити зображення з буфера обміну (лише зображення)",
-    "retry": "Повторити спробу",
-    "showToolbar": "Розгорнути панель інструментів",
-    "upload": "Завантажити зображення",
-    "uploadImage": "Завантажте зображення на хостинг",
-    "uploadingImage": "Завантаження..."
-  },
-  "history": {
-    "noTerminalSelected": "Термінал не вибрано",
-    "noTerminalSelectedHint": "Відкрийте вкладку терміналу SSH, щоб переглянути історію його команд",
-    "searchPlaceholder": "Історія пошуку...",
-    "clearAll": "Очистити все",
-    "noHistoryEntries": "Немає записів в історії",
-    "trackingDisabled": "Відстеження історії вимкнено",
-    "trackingDisabledHint": "Увімкніть історію команд на вкладці SSH-терміналу цього хоста.",
-    "commandCount_one": "команда {{count}}",
-    "commandCount_other": "команди {{count}}"
-  },
-  "touchInput": {
-    "enabled": "Увімкнути сенсорне введення",
-    "enabledDesc": "Дозволити прокручування одним пальцем у терміналах",
-    "momentumEnabled": "Увімкнути імпульс",
-    "momentumEnabledDesc": "Продовжуйте прокручувати ненадовго після проведення пальцем",
-    "advanced": "Розширений",
-    "resetDefaults": "Скинути до налаштувань за замовчуванням",
-    "dragThreshold": "Поріг перетягування",
-    "maxWheelDelta": "Максимальна дельта коліс",
-    "momentumSampleWindow": "Вікно вибірки імпульсу",
-    "releaseGracePeriod": "Пільговий період випуску",
-    "minimumVelocity": "Мінімальна швидкість",
-    "maximumVelocity": "Максимальна швидкість",
-    "maximumDuration": "Максимальна тривалість",
-    "maximumTravel": "Максимальний хід",
-    "decayTime": "Час розпаду",
-    "pixelsPerTick": "Пікселів на такт",
-    "maximumFrameInterval": "Максимальний інтервал кадру",
-    "maximumTicksPerFrame": "Максимальна кількість тиків на кадр"
-  },
-  "imageStorage": {
-    "instanceId": "Ідентифікатор екземпляра термінального сеансу",
-    "instanceIdDesc": "Ідентифікатор екземпляра однієї з ваших підключених вкладок терміналу, що використовується для перевірки видимості.",
-    "selectedModeUnavailable": "Недоступно",
-    "test": "Тест",
-    "testing": "Тестування...",
-    "testFailed": "Не вдалося перевірити сховище зображень",
-    "testConnected": "Термінальний сеанс підключено.",
-    "testNotConnected": "Немає підключеного термінального сеансу з цим ідентифікатором екземпляра.",
-    "testSelectedMode": "Для завантаження буде використано: {{mode}}",
-    "testLocalVisible": "Локальний каталог видно з підключеного хоста.",
-    "testLocalNotVisible": "Локальний каталог НЕ видно з підключеного хоста."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Сенсорний ввід",
-        "images": "Зберігання зображень",
-        "sessions": "Сесії",
-        "newHosts": "Нові господарі"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Збереження термінального сеансу",
-        "description": "Як довго відключений термінал залишається активним на сервері, перш ніж його буде закрито. Мін. 1, макс. 1440 хвилин. Для сеансів, які мають тривати довше цього часу, увімкніть Auto-Tmux на хості."
-      },
-      "commandHistoryEnabled": {
-        "label": "Історія команд",
-        "description": "Дозволити запис історії команд. Якщо вимкнено, історія не зберігається незалежно від налаштувань для кожного хоста."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "Історія команд для нових хостів",
-        "description": "Чи нові хости запускаються з увімкненою історією команд."
-      },
-      "imageStorageMode": {
-        "label": "Режим зберігання",
-        "description": "Куди записуються вставлені та завантажені образи терміналів. Виправлено автоматичний вибір за підключенням, локальним та віддаленим (SFTP).",
-        "auto": "Авто",
-        "local": "Місцевий",
-        "remoteSftp": "Віддалений (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Локальний каталог",
-        "description": "Абсолютний шлях на серверній частині Termix, де локальний режим записує зображення. Ніколи не відображається після збереження. Порожній шлях використовує TERMIX_IMAGE_DIR."
-      },
-      "imageHostPath": {
-        "label": "Шлях хоста",
-        "description": "Вигляд локального каталогу, який отримують агенти терміналів, з боку хоста."
-      },
-      "imageTtlMs": {
-        "label": "TTL (мс)",
-        "description": "Як довго зберігається завантажене зображення, у мілісекундах. Порожнє значення використовує TERMIX_IMAGE_TTL_MS або одну годину."
-      },
-      "imageMaxCount": {
-        "label": "Максимальна кількість зображень",
-        "description": "Більшість зображень зберігається одночасно. Порожнє значення використовує TERMIX_MAX_IMAGE_COUNT або 100."
-      },
-      "imageMaxBytes": {
-        "label": "Максимальна кількість байтів пам'яті",
-        "description": "Найбільше байтів зображень зберігається одночасно. Порожнє значення використовує TERMIX_MAX_IMAGE_STORAGE_BYTES або 5 ГіБ."
-      },
-      "sessionPersistence": {
-        "label": "Зберегти сеанси після відключення",
-        "description": "Зберігайте відключений термінал активним на сервері протягом зазначеного вище часу, щоб повторне відкриття його вкладки продовжило роботу з того місця, де вона була зупинена."
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "Запускати термінали нових хостів всередині tmux, щоб сесії пережили відключення (потрібен tmux на хості)"
-      },
-      "newHostTheme": {
-        "label": "Тема для нових хостів",
-        "description": "Тема терміналу, з якої починається новий хост."
-      },
-      "newHostFontFamily": {
-        "label": "Шрифт для нових хостів",
-        "description": "Шрифт терміналу, з якого починається новий хост."
-      },
-      "newHostFontSize": {
-        "label": "Розмір шрифту для нових хостів",
-        "description": "Розмір шрифту терміналу, з якого починається новий хост, у пікселях."
-      },
-      "newHostCursorStyle": {
-        "label": "Стиль курсора для нових хостів"
-      },
-      "newHostCursorBlink": {
-        "label": "Миготливий курсор для нових хостів"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Увімкнути панель інструментів термінала",
-        "description": "Показати панель швидкого доступу, прикріплену до активного терміналу, для інструментів цього хоста та статистики в реальному часі"
-      },
-      "terminalToolbarPosition": {
-        "label": "Положення панелі інструментів",
-        "description": "Там, де розташована панель інструментів у терміналі. Ви все ще можете перетягнути її звідти.",
-        "bottom": "Внизу по центру",
-        "bottomLeft": "Внизу ліворуч",
-        "bottomRight": "Внизу праворуч",
-        "top": "Верхній центр",
-        "topLeft": "Угорі ліворуч",
-        "topRight": "Угорі праворуч"
-      },
-      "terminalToolbarStartState": {
-        "label": "Початковий стан панелі інструментів",
-        "description": "Чи відкривається панель інструментів розгорнутим чи згорнутим під час підключення терміналу",
-        "expanded": "Розгорнуто",
-        "collapsed": "Згорнуто"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Режим відображення панелі інструментів",
-        "description": "Як відображаються кнопки панелі інструментів. «Останній використаний» зберігає вибрані вами кнопки на панелі інструментів.",
-        "remember": "Останнє використання",
-        "icon": "Тільки значок",
-        "labeled": "Піктограми та мітки",
-        "expanded": "Розширено статистикою"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Показати статистику в реальному часі",
-        "description": "Показувати статистику ведучого в реальному часі над кнопками панелі інструментів у розгорнутому режимі"
-      },
-      "terminalToolbarFade": {
-        "label": "Згасання під час очікування",
-        "description": "Зменшення масштабу панелі інструментів, доки не наведете на неї курсор"
-      },
-      "enableCommandHistory": {
-        "label": "Історія команд",
-        "description": "Запис команд, що виконуються в цьому терміналі, для історії та автозаповнення"
-      },
-      "enableTerminal": {
-        "label": "Увімкнути термінал",
-        "description": "Запропонуйте SSH-термінал для цього хоста."
-      },
-      "inheritAppearance": {
-        "label": "Використовувати налаштування користувача за замовчуванням"
-      },
-      "theme": {
-        "label": "Тема"
-      },
-      "cursorBlink": {
-        "label": "Миготливий курсор"
-      },
-      "cursorStyle": {
-        "label": "Стиль курсора"
-      },
-      "fontSize": {
-        "label": "Розмір шрифту"
-      },
-      "fontFamily": {
-        "label": "Шрифт"
-      },
-      "scrollback": {
-        "label": "Прокрутка назад"
-      },
-      "letterSpacing": {
-        "label": "Інтервал між літерами"
-      },
-      "lineHeight": {
-        "label": "Висота рядка"
-      },
-      "bellStyle": {
-        "label": "Дзвін"
-      },
-      "minimumContrastRatio": {
-        "label": "Мінімальний коефіцієнт контрастності"
-      },
-      "backgroundImage": {
-        "label": "Фонове зображення"
-      },
-      "backgroundImageOpacity": {
-        "label": "Непрозорість фонового зображення"
-      },
-      "customThemeColors": {
-        "label": "Кольори користувацьких тем"
-      },
-      "rightClickSelectsWord": {
-        "label": "Клацніть правою кнопкою миші, щоб вибрати слово"
-      },
-      "macOptionIsMeta": {
-        "label": "Варіант – це Meta"
-      },
-      "fastScrollModifier": {
-        "label": "Клавіша швидкого прокручування"
-      },
-      "fastScrollSensitivity": {
-        "label": "Швидка швидкість прокручування"
-      },
-      "backspaceMode": {
-        "label": "Назад"
-      },
-      "autoMosh": {
-        "label": "Авто мош"
-      },
-      "moshCommand": {
-        "label": "Команда Мош"
-      },
-      "autoTmux": {
-        "label": "Автоматичний tmux"
-      },
-      "useSSHTitle": {
-        "label": "Використовуйте заголовок SSH"
-      },
-      "syntaxHighlighting": {
-        "label": "Підсвічування синтаксису"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Категорії підсвічування синтаксису"
-      },
-      "linkClickBehavior": {
-        "label": "Клік по посиланню"
-      },
-      "localEcho": {
-        "label": "Локальне відлуння"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Пропонувати заповнити запити на введення пароля"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Заповніть запити sudo"
-      },
-      "autoReconnect": {
-        "label": "Автоматичне повторне підключення"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Автозаповнення команд",
-        "description": "Показувати автозаповнення під час введення тексту, якщо натиснути клавішу Tab"
-      },
-      "localEcho": {
-        "label": "Локальне відлуння",
-        "description": "Зменште сприйняту затримку введення за допомогою безпечного локального передбачення натискання клавіш"
-      },
-      "linkClickBehavior": {
-        "label": "Натисніть посилання терміналу",
-        "description": "Поведінка за замовчуванням під час натискання посилань у терміналі"
-      },
-      "customThemes": {
-        "label": "Збережені теми"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Місцевий термінал"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Використання термінальних сесій у реальному часі",
-      "description": "Дозволяє іншим функціям, таким як спільний доступ до сеансів та запис, отримувати доступ до ваших термінальних сеансів у реальному часі."
-    },
-    "history": {
-      "title": "Читати історію команд",
-      "description": "Дозволяє іншим функціям, таким як помічник зі штучним інтелектом, зчитувати історію ваших команд."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Термінал",
-    "addHost": "Додати хоста",
-    "applyGlobalThemeTooltip": "Застосувати цю тему",
-    "backgroundImageDesc": "Додаткова URL-адреса для фонового зображення терміналу",
-    "backgroundImageLabel": "URL-адреса фонового зображення",
-    "backgroundImageOpacityLabel": "Непрозорість фонового зображення",
-    "backspaceMode": "Режим повернення",
-    "backspaceModeControlH": "Контроль-H (BS)",
-    "backspaceModeLabel": "Режим повернення",
-    "backspaceModeNormal": "Звичайний (DEL)",
-    "behaviorAndAdvanced": "Поведінка та просунуті навички",
-    "bellStyle": "Стиль дзвона",
-    "bellStyleBoth": "Обидва",
-    "bellStyleLabel": "Стиль дзвона",
-    "bellStyleNone": "Жоден",
-    "bellStyleSound": "Звук",
-    "bellStyleVisual": "Візуальний",
-    "colorTheme": "Колірна тема",
-    "cursorBlink": "Блимання курсора",
-    "cursorBlinking": "Миготіння курсора",
-    "cursorBlinkingDesc": "Увімкнути миготливу анімацію для курсора терміналу",
-    "cursorStyle": "Стиль курсора",
-    "cursorStyleBar": "Бар",
-    "cursorStyleBlock": "Блок",
-    "cursorStyleLabel": "Стиль курсора",
-    "cursorStyleUnderline": "Підкреслення",
-    "customThemeAnsiColors": "Кольори ANSI",
-    "customThemeBackground": "Передісторія",
-    "customThemeBlack": "Чорний",
-    "customThemeBlue": "Синій",
-    "customThemeBrightBlack": "Яскраво-чорний",
-    "customThemeBrightBlue": "Яскраво-синій",
-    "customThemeBrightCyan": "Яскравий блакитний",
-    "customThemeBrightGreen": "Яскраво-зелений",
-    "customThemeBrightMagenta": "Яскраво-пурпуровий",
-    "customThemeBrightRed": "Яскраво-червоний",
-    "customThemeBrightWhite": "Яскраво-білий",
-    "customThemeBrightYellow": "Яскраво-жовтий",
-    "customThemeColors": "Користувацькі кольори",
-    "customThemeCursor": "Курсор",
-    "customThemeCursorAccent": "Акцент курсора",
-    "customThemeCyan": "Блакитний",
-    "customThemeForeground": "Передній план",
-    "customThemeGreen": "Зелений",
-    "customThemeMagenta": "Магента",
-    "customThemeRed": "Червоний",
-    "customThemeResetTooltip": "Скинути до налаштувань за замовчуванням",
-    "customThemeSelection": "Вибір",
-    "customThemeWhite": "Білий",
-    "customThemeYellow": "Жовтий",
-    "deleteGlobalThemeTooltip": "Видалити цю тему",
-    "docsLink": "Переглянути документи",
-    "enableAutoMosh": "Увімкнути Auto-Mosh",
-    "enableAutoMoshDesc": "Надавати перевагу Mosh над SSH, якщо доступно",
-    "enableAutoTmux": "Увімкнути автоматичне Tmux",
-    "enableAutoTmuxDesc": "Зберігайте вашу оболонку та все, що в ній працює, активними після відключень та перезапусків браузера, запускаючи її всередині tmux (tmux має бути встановлений на хості)",
-    "fastScrollModifier": "Модифікатор швидкої прокрутки",
-    "fastScrollModifierAlt": "Альтернативний",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Модифікатор швидкої прокрутки",
-    "fastScrollModifierShift": "Зсув",
-    "fastScrollSensitivity": "Чутливість швидкого прокручування",
-    "fastScrollSensitivityLabel": "Чутливість швидкого прокручування",
-    "fontFamily": "Сімейство шрифтів",
-    "fontFamilyCustomHint": "Виберіть шрифт зі списку або виберіть «Налаштування» та введіть точну назву шрифту, який уже встановлено у вашій системі (наприклад, MesloLGS NF, Noto Sans Mono). Termix не може встановити шрифти за вас, спочатку встановіть його у вашій ОС.",
-    "fontFamilyCustomOption": "Користувацькі...",
-    "fontFamilyCustomPlaceholder": "Точна назва шрифту, наприклад, MesloLGS NF",
-    "fontFamilyLabel": "Сімейство шрифтів",
-    "fontSize": "Розмір шрифту",
-    "fontSizeLabel": "Розмір шрифту",
-    "hostNotFound": "Хост не знайдено",
-    "letterSpacing": "Міжлітерний інтервал",
-    "letterSpacingPx": "Міжлітерний інтервал (пікселі)",
-    "lineHeight": "Висота рядка",
-    "lineHeightLabel": "Висота рядка",
-    "linkClickBehaviorConfirm": "Показати спливаюче вікно для відкриття або копіювання",
-    "linkClickBehaviorDesc": "Керує тим, що відбувається, коли ви натискаєте посилання в терміналі. Використовуйте «За замовчуванням», щоб дотримуватися налаштувань рівня програми.",
-    "linkClickBehaviorDirect": "Відкрити безпосередньо",
-    "linkClickBehaviorLabel": "Поведінка кліків посилань",
-    "loadingHost": "Завантаження хоста...",
-    "localEchoAuto": "Автоматичний",
-    "localEchoDesc": "Передбачати безпечні для друку натискання клавіш локально на повільних з'єднаннях. Запити на введення пароля та введені елементи керування ніколи не відображаються.",
-    "localEchoLabel": "Локальне відлуння",
-    "localEchoOff": "Вимкнено",
-    "localEchoOn": "Завжди увімкнено",
-    "macOptionIsMetaLabel": "Клавіша Option надсилає метадані",
-    "macOptionIsMetaShortDesc": "Вимкнути введення спеціальних символів (наприклад, @ або |) за допомогою клавіші Option/Alt у macOS замість надсилання Meta",
-    "moshCommand": "Команда MOSH",
-    "moshCommandLabel": "Команда Моша",
-    "noSavedThemes": "Ще немає збережених тем",
-    "none": "Жоден",
-    "passwordPromptAutoFillDesc": "Пропонувати ввести збережений пароль, коли термінал запитує його. Вимкніть, щоб ніколи не вводити пароль автоматично на цьому хості.",
-    "passwordPromptAutoFillLabel": "Автоматичне заповнення пароля пропозиції",
-    "autoReconnectLabel": "Автоматичне повторне підключення",
-    "autoReconnectDesc": "Самостійно перепідключається, коли SSH-з'єднання обривається, наприклад, після збою мережі або сну. Зберігає прокрутку назад.",
-    "rightClickSelectsWord": "Вибір слова клацанням правою кнопкою миші",
-    "rightClickSelectsWordLabel": "Клацання правою кнопкою миші Вибір слова",
-    "rightClickSelectsWordShortDesc": "Вибір слова під курсором при клацанні правою кнопкою миші",
-    "saveAsGlobalTheme": "Зберегти як глобальну тему",
-    "saveGlobalThemeError": "Не вдалося зберегти тему",
-    "saveGlobalThemeNamePrompt": "Введіть назву для цієї теми",
-    "saveGlobalThemeSuccess": "Тему збережено",
-    "savedThemesLabel": "Збережені теми",
-    "scrollbackBufferLabel": "Буфер прокручування",
-    "scrollbackMaxLines": "Максимальна кількість рядків, що зберігаються в історії",
-    "sudoPasswordAutoFill": "Автозаповнення пароля Sudo",
-    "sudoPasswordAutoFillDesc": "Зберігайте пароль sudo, щоб метрики хоста, запити терміналу та інші могли автоматично запускати привілейовані команди.",
-    "sudoPasswordAutoFillLabel": "Автозаповнення пароля Sudo",
-    "syntaxCategoryIpAddresses": "IP-адреси",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Рівні журналів",
-    "syntaxCategoryLogLevelsDesc": "помилка, попередження, інформація, налагодження, фатальний",
-    "syntaxCategoryNumbers": "Позначені числа",
-    "syntaxCategoryNumbersDesc": "порт 8080, вихід 1, статус 404",
-    "syntaxCategoryPaths": "Шляхи до файлів",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/файл.txt",
-    "syntaxCategoryTimestamps": "Позначки часу",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 15 січня 2024 р.",
-    "syntaxCategoryUrls": "URL-адреси",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "Розфарбувати вивід терміналу (помилки, шляхи, IP-адреси, позначки часу)",
-    "syntaxHighlightingLabel": "Підсвічування синтаксису",
-    "terminalAppearance": "Зовнішній вигляд терміналу",
-    "theme": "Тема",
-    "themePreview": "Попередній перегляд теми",
-    "useSSHTitleDesc": "Оновіть заголовок вкладки з заголовка вікна оболонки, а не з назви хоста.",
-    "useSSHTitleLabel": "Використовувати заголовок вікна SSH",
-    "enableTunnel": "Увімкнути тунель",
-    "enableFileManager": "Увімкнути файловий менеджер",
-    "enableDocker": "Увімкнути Докер",
-    "startupSnippet": "Фрагмент запуску",
-    "quickActions": "Швидкі дії",
-    "proxmoxLastSyncStatus": {
-      "success": "Успіх"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} пропущено (IP-адресу не знайдено)",
-    "proxmoxStatsUrlCopied": "URL-адресу статистики Proxmox скопійовано в буфер обміну",
-    "rdpUrlCopied": "URL-адресу RDP скопійовано",
-    "vncUrlCopied": "URL-адресу VNC скопійовано",
-    "filterAuthStepca": "Крок CA",
-    "guac": {
-      "noCredential": "Без посвідчень (прямі посвідчення нижче)",
-      "authTypeDirect": "Прямий",
-      "authTypeCredential": "Посвідчення",
-      "authTypeNone": "Жоден",
-      "recordingPath": "Шлях запису",
-      "recordingName": "Назва запису",
-      "saveHostFirst": "Спочатку збережіть хост.",
-      "sharingOptionsAfterSave": "Опції спільного доступу доступні після збереження хоста.",
-      "permissionLevel": "Рівень дозволів",
-      "typeHeader": "Тип",
-      "targetHeader": "Ціль",
-      "permissionHeader": "Дозвіл",
-      "cancelBtn": "Скасувати",
-      "savingBtn": "Збереження...",
-      "updateHostBtn": "Оновити хост",
-      "addHostBtn": "Додати хоста"
-    },
-    "filterAuthVault": "Сховище"
-  },
-  "nav": {
-    "history": "Історія",
-    "localTerminal": "Місцевий термінал",
-    "sshTools": "SSH-інструменти",
-    "terminal": "Термінал",
-    "macros": "Макроси"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Введіть тут, щоб транслювати натискання клавіш...",
-    "copyOnSelect": "Автоматичне копіювання вибраного тексту",
-    "enableRightClickCopyPaste": "Увімкнути копіювання/вставку, клацнувши правою кнопкою миші",
-    "fillPassword": "Заповніть пароль",
-    "fillPasswordMissing": "Немає збереженого пароля для {{count}} вибраних терміналів",
-    "fillPasswordSuccess": "Пароль введено в {{count}} термінал(и)",
-    "keyRecordingTitle": "Запис клавіш",
-    "noTerminalTabsOpen": "Немає відкритих вкладок терміналу",
-    "recordToTerminals": "Запис на термінали",
-    "selectAll": "Усі",
-    "selectNone": "Жоден",
-    "selectTerminalsAbove": "Виберіть термінали вище",
-    "settingsTitle": "Налаштування",
-    "startRecording": "Почати запис",
-    "stopRecording": "Зупинити запис"
-  },
-  "keybindings": {
-    "copy": "Копіювати виділення",
-    "paste": "Вставити",
-    "sendControlCode": "Надіслати сигнал Ctrl+літера",
-    "sendText": "Надіслати текст",
-    "controlCodeLabel": "Лист",
-    "textLabel": "Текст для надсилання",
-    "appendEnterLabel": "Натисніть Enter після відправлення",
-    "clipboardPermissionNote": "У деяких браузерах може запитуватися дозвіл на використання буфера обміну під час першого використання.",
-    "textRequired": "Введіть текст для надсилання",
-    "controlCodeRequired": "Введіть одну літеру для контрольного коду",
-    "builtIn": {
-      "copyCtrlC": "Копіювати виділення (Ctrl+C, лише якщо виділено текст)",
-      "copyCtrlShiftC": "Копіювати виділення (Ctrl+Shift+C)",
-      "copyCmdC": "Копіювати виділення (Cmd+C)",
-      "pasteCtrlShiftV": "Вставити з буфера обміну (Ctrl+Shift+V)",
-      "ctrlW": "Надіслати Ctrl+W до оболонки (блоковано закриття вкладки браузера)",
-      "ctrlT": "Надіслати Ctrl+T до оболонки (заблоковано відкриття вкладки браузера)",
-      "ctrlN": "Надіслати Ctrl+N до оболонки (заблоковано відкриття вікна браузера)",
-      "ctrlQ": "Надіслати Ctrl+Q до оболонки (заблоковано закриття браузера)"
-    }
-  },
-  "macros": {
-    "title": "Макроси",
-    "description": "Виконайте збережену серію команд у терміналі та відреагуйте на те, що надсилає сервер.",
-    "target": "Ціль",
-    "noTerminal": "Термінал не відкритий",
-    "empty": "Поки що немає макросів",
-    "emptyHint": "Створіть макрос для автоматизації процесу роботи термінала, такого як вхід у систему, перезапуск служби або відповідь на запити.",
-    "create": "Новий макрос",
-    "back": "Повернутися до макросів",
-    "name": "Ім'я",
-    "namePlaceholder": "Перезапустіть веб-сервер",
-    "nameRequired": "Дайте макросу ім'я перед збереженням",
-    "descriptionLabel": "Опис",
-    "descriptionPlaceholder": "Що робить цей макрос (необов'язково)",
-    "unsaved": "Незбережені зміни",
-    "save": "Зберегти",
-    "saved": "Макрос збережено",
-    "saveFailed": "Не вдалося зберегти макрос",
-    "delete": "Видалити",
-    "deleteTitle": "Видалити цей макрос?",
-    "deleteBody": "«{{name}}» буде видалено назавжди. Цю дію неможливо скасувати.",
-    "deleted": "Макрос видалено",
-    "cancel": "Скасувати",
-    "run": "Бігти",
-    "stop": "СТІЙ",
-    "running": "Біг...",
-    "completed": "Макрос завершено",
-    "failed": "Помилка макросу",
-    "loadFailed": "Не вдалося завантажити макроси",
-    "needTerminal": "Спочатку відкрийте та підключіть термінал",
-    "noSteps": "Цей макрос ще не має кроків. Додайте один нижче.",
-    "addStep": "Додати крок",
-    "stepNumber": "Крок {{number}}",
-    "removeStep": "Видалити крок",
-    "confirmRunTitle": "Запустити цей макрос?",
-    "confirmRunBody": "\"{{name}}\" надсилатиме команди до {{host}}.",
-    "confirmRunAction": "Запустити макрос",
-    "stepTypes": {
-      "send": {
-        "label": "Надіслати команду",
-        "help": "Вводить текст у термінал так само, як і надруковано."
-      },
-      "wait": {
-        "label": "Зачекайте на вивід",
-        "help": "Призупиняється, доки сервер не надрукує вказаний вами текст, наприклад, запит на пароль."
-      },
-      "delay": {
-        "label": "Пауза",
-        "help": "Очікує фіксований проміжок часу перед наступним кроком."
-      },
-      "if": {
-        "label": "Якщо вихід містить",
-        "help": "Перевіряє все, що сервер надрукував до цього часу, а потім запускає одну з двох гілок."
-      },
-      "repeat": {
-        "label": "Повторити",
-        "help": "Виконує кроки всередині нього задану кількість разів."
-      }
-    },
-    "send": {
-      "text": "Команда або текст",
-      "textPlaceholder": "перезапуск systemctl nginx",
-      "pressEnter": "Натисніть Enter після відправлення",
-      "pressEnterHelp": "Вимкніть цю функцію, щоб вводити текст, не надсилаючи його."
-    },
-    "wait": {
-      "pattern": "Зачекайте, поки вихідні дані міститимуть",
-      "patternPlaceholder": "пароль:",
-      "timeout": "Здайся після",
-      "onTimeout": "Якщо воно ніколи не з'явиться",
-      "stop": "Зупинити макрос",
-      "continue": "Продовжуй у будь-якому разі"
-    },
-    "delay": {
-      "duration": "Зачекайте"
-    },
-    "ifStep": {
-      "pattern": "Якщо вихід містить",
-      "patternPlaceholder": "Активний: активний (працює)",
-      "then": "Тоді зробіть це",
-      "else": "Інакше зробіть це",
-      "emptyBranch": "Без сходинок"
-    },
-    "repeat": {
-      "count": "Кількість разів",
-      "times": "рази"
-    },
-    "match": {
-      "useRegex": "Зіставлення з регулярним виразом",
-      "useRegexHelp": "Не виключайте це, щоб текст точно відповідав написаному.",
-      "invalidRegex": "Недійсний регулярний вираз, буде знайдено звичайний текст"
-    },
-    "seconds": "секунди",
-    "secondsShort": "{{count}}с"
-  },
-  "errors": {
-    "remoteServerRequired": "Потрібен віддалений сервер. Підключіться до віддаленого сервера в налаштуваннях, щоб використовувати цей тип підключення."
-  },
-  "plugin": {
-    "name": "SSH-термінал"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/vi_VN.json b/plugins/ssh-terminal/locales/translated/vi_VN.json
deleted file mode 100644
index bb4f813af..000000000
--- a/plugins/ssh-terminal/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "Thêm",
-    "arrowDown": "Mũi tên xuống",
-    "arrowLeft": "Mũi tên trái",
-    "arrowRight": "Mũi tên phải",
-    "arrowUp": "Mũi tên lên",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Del",
-    "done": "Xong",
-    "editQuickKeys": "Chỉnh sửa phím tắt",
-    "end": "End",
-    "esc": "Esc",
-    "home": "Home",
-    "pageDown": "PgDn",
-    "pageUp": "PgUp",
-    "paste": "Dán",
-    "quickKeyPlaceholder": "vd: sudo ",
-    "quickKeysDesc": "Nhấn × để xóa. Hỗ trợ tối đa 8 ký tự.",
-    "quickKeysTitle": "Phím tắt",
-    "removeQuickKey": "Xóa",
-    "resetDefaults": "Đặt lại mặc định",
-    "shift": "Shift",
-    "tab": "Tab"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "Không thể bật Auto-Tmux.",
-    "autoTmuxEnabled": "Tính năng Auto-Tmux đã được bật cho {{host}}. Tính năng này sẽ được áp dụng từ lần kết nối tiếp theo.",
-    "clipboardHttpWarning": "Không thể đọc nội dung clipboard. Một số trình duyệt hạn chế quyền truy cập clipboard khi không sử dụng HTTPS - hãy thử Ctrl+V hoặc sử dụng HTTPS để chạy Termix.",
-    "closeTab": "Đóng",
-    "connecting": "Đang kết nối...",
-    "connectionLost": "Mất kết nối",
-    "connectionRejected": "Kết nối bị máy chủ từ chối. Vui lòng kiểm tra xác thực và cấu hình mạng.",
-    "connectionTimeout": "Hết thời gian kết nối",
-    "enableAutoTmuxAction": "Kích hoạt Auto-Tmux",
-    "hostKeyRejected": "Xác minh khóa máy chủ SSH bị từ chối. Đã hủy kết nối.",
-    "linkDialogCopy": "Sao chép",
-    "linkDialogOpen": "Mở",
-    "linkDialogTitle": "Mở liên kết",
-    "maxReconnectAttemptsReached": "Đã đạt số lần kết nối lại tối đa",
-    "noHostSelected": "Chưa chọn máy chủ",
-    "passwordPromptFillTitle": "Điền mật khẩu đã lưu vào dòng nhắc này?",
-    "reconnect": "Kết nối lại",
-    "reconnected": "Đã kết nối lại thành công",
-    "reconnecting": "Đang kết nối lại... ({{attempt}}/{{max}})",
-    "autoReconnecting": "Mất kết nối, đang kết nối lại...",
-    "searchCaseSensitive": "Hộp diêm",
-    "searchClose": "Đóng (Thoát)",
-    "searchNext": "Trận đấu tiếp theo (Nhập)",
-    "searchNoResults": "Không có kết quả",
-    "searchPlaceholder": "Tìm thấy",
-    "searchPrevious": "Kết quả khớp trước đó (Shift+Enter)",
-    "searchRegex": "Sử dụng biểu thức chính quy",
-    "searchResultCount": "{{index}} của {{count}}",
-    "searchWholeWord": "Ghép toàn bộ từ",
-    "sessionExpiredNotice": "Phiên làm việc trước của bạn trên {{host}} đã hết hạn sau {{minutes}} phút bị ngắt kết nối; shell và mọi thứ đang chạy trong đó đều đã biến mất. Hãy bật Auto-Tmux trên máy chủ này để duy trì các phiên làm việc.",
-    "sessionExpiredNoticeNoMinutes": "Phiên làm việc trước của bạn trên {{host}} đã hết hạn khi bị ngắt kết nối; shell và mọi thứ đang chạy trong đó đều đã biến mất. Hãy bật Auto-Tmux trên máy chủ này để duy trì các phiên làm việc.",
-    "sessionTakenOver": "Phiên đã được mở trong tab khác. Đang kết nối lại...",
-    "tmuxAttached": "Các máy khách đã gắn kết",
-    "tmuxAttachedCount": "{{count}} đã gắn kết",
-    "tmuxCopyHint": "Điều chỉnh lựa chọn và nhấn Enter để sao chép vào clipboard",
-    "tmuxCreateNew": "Tạo phiên mới",
-    "tmuxDetached": "Đã ngắt khỏi phiên tmux",
-    "tmuxLastActivity": "Hoạt động cuối",
-    "tmuxSessionAttached": "Đã gắn vào phiên tmux: {{name}}",
-    "tmuxSessionCreated": "Đã tạo phiên tmux: {{name}}",
-    "tmuxSessionPickerDesc": "Các phiên tmux hiện có trên máy chủ này. Chọn một phiên để gắn lại hoặc tạo phiên mới.",
-    "tmuxSessionPickerTitle": "Phiên tmux",
-    "tmuxTimeDays": "{{count}} ngày trước",
-    "tmuxTimeHours": "{{count}} giờ trước",
-    "tmuxTimeJustNow": "vừa xong",
-    "tmuxTimeMinutes": "{{count}} phút trước",
-    "tmuxUnavailable": "tmux chưa được cài đặt trên máy chủ từ xa, chuyển sang shell tiêu chuẩn",
-    "tmuxWindowCount": "{{count}} cửa sổ",
-    "tmuxWindows": "Cửa sổ",
-    "unknownError": "Lỗi không xác định đã xảy ra",
-    "websocketAbnormalClose": "Kết nối đóng đột ngột. Có thể do sự cố cấu hình reverse proxy hoặc SSL. Vui lòng kiểm tra nhật ký máy chủ.",
-    "websocketError": "Lỗi kết nối WebSocket",
-    "clipboardReadFailed": "Đọc từ clipboard thất bại. Đảm bảo quyền truy cập clipboard đã được cấp.",
-    "clipboardWriteFailed": "Sao chép vào clipboard thất bại. Đảm bảo trang được phục vụ qua HTTPS hoặc localhost.",
-    "connected": "Đã kết nối",
-    "totpCodeLabel": "Mã xác minh",
-    "duplicateTab": "Tab trùng lặp",
-    "imageChooseFile": "Chọn một tệp hình ảnh",
-    "imageUploaded": "Ảnh đã tải lên: {{path}}",
-    "imageClipboardUnavailable": "Trình duyệt này không thể đọc hình ảnh từ clipboard",
-    "imageClipboardEmpty": "Không tìm thấy hình ảnh trong bộ nhớ tạm",
-    "localShell": "Vỏ thiết bị đầu cuối cục bộ",
-    "autocompleteHintComplete": "Nhấn phím Tab hoặc Enter để hoàn tất",
-    "autocompleteHintNavigate": "↑↓ để điều hướng",
-    "autocompleteHintClose": "Nhấn Esc để đóng"
-  },
-  "terminalToolbar": {
-    "detachTmux": "Tách tmux",
-    "detachTmuxDescription": "Tách phiên tmux",
-    "dismissError": "Bỏ qua lỗi hình ảnh",
-    "hideToolbar": "Ẩn thanh công cụ",
-    "image": "Thao tác với hình ảnh (chỉ áp dụng cho hình ảnh)",
-    "imageActionFailed": "Thao tác xử lý hình ảnh thất bại",
-    "layout": "Chế độ hiển thị thanh công cụ",
-    "layoutExpanded": "Đã mở rộng với các số liệu",
-    "layoutIcon": "Chỉ có biểu tượng",
-    "layoutLabeled": "Biểu tượng và nhãn",
-    "moveToolbar": "Di chuyển thanh công cụ",
-    "moveToolbarHint": "Kéo để định vị lại thanh công cụ",
-    "paste": "Dán hình ảnh",
-    "pasteImage": "Dán hình ảnh từ clipboard (chỉ áp dụng cho hình ảnh)",
-    "retry": "Thử lại",
-    "showToolbar": "Mở rộng thanh công cụ",
-    "upload": "Tải ảnh lên",
-    "uploadImage": "Tải ảnh lên máy chủ",
-    "uploadingImage": "Đang tải lên..."
-  },
-  "history": {
-    "noTerminalSelected": "Chưa chọn terminal",
-    "noTerminalSelectedHint": "Mở một tab terminal SSH để xem lịch sử lệnh",
-    "searchPlaceholder": "Tìm kiếm lịch sử...",
-    "clearAll": "Xóa tất cả",
-    "noHistoryEntries": "Không có mục lịch sử",
-    "trackingDisabled": "Tính năng ghi lịch sử đã bị tắt",
-    "trackingDisabledHint": "Bật Lịch sử lệnh trong tab Thiết bị đầu cuối SSH của máy chủ này.",
-    "commandCount_one": "{{count}} lệnh",
-    "commandCount_other": "{{count}} lệnh"
-  },
-  "touchInput": {
-    "enabled": "Cho phép nhập liệu cảm ứng",
-    "enabledDesc": "Cho phép cuộn bằng một ngón tay trong cửa sổ dòng lệnh.",
-    "momentumEnabled": "Tạo đà",
-    "momentumEnabledDesc": "Tiếp tục cuộn xuống một chút sau khi vuốt.",
-    "advanced": "Trình độ cao",
-    "resetDefaults": "Đặt lại mặc định",
-    "dragThreshold": "Ngưỡng kéo",
-    "maxWheelDelta": "Chênh lệch bánh xe tối đa",
-    "momentumSampleWindow": "Cửa sổ mẫu động lượng",
-    "releaseGracePeriod": "thời gian ân hạn thả",
-    "minimumVelocity": "Vận tốc tối thiểu",
-    "maximumVelocity": "Vận tốc tối đa",
-    "maximumDuration": "Thời gian tối đa",
-    "maximumTravel": "Hành trình tối đa",
-    "decayTime": "Thời gian phân rã",
-    "pixelsPerTick": "Số pixel trên mỗi tick",
-    "maximumFrameInterval": "Khoảng thời gian khung hình tối đa",
-    "maximumTicksPerFrame": "Số tick tối đa mỗi khung hình"
-  },
-  "imageStorage": {
-    "instanceId": "ID phiên bản phiên thiết bị đầu cuối",
-    "instanceIdDesc": "ID phiên bản của một trong các tab thiết bị đầu cuối được kết nối của bạn, được sử dụng để kiểm tra khả năng hiển thị.",
-    "selectedModeUnavailable": "Không khả dụng",
-    "test": "Kiểm tra",
-    "testing": "Đang thử nghiệm...",
-    "testFailed": "Không thể kiểm tra lưu trữ hình ảnh",
-    "testConnected": "Phiên kết nối terminal đã được thiết lập.",
-    "testNotConnected": "Không có phiên làm việc thiết bị đầu cuối nào được kết nối với ID phiên bản này.",
-    "testSelectedMode": "Quá trình tải lên sẽ sử dụng: {{mode}}",
-    "testLocalVisible": "Thư mục cục bộ có thể được nhìn thấy từ máy chủ được kết nối.",
-    "testLocalNotVisible": "Thư mục cục bộ KHÔNG hiển thị từ máy chủ được kết nối."
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "Nhập liệu cảm ứng",
-        "images": "Lưu trữ hình ảnh",
-        "sessions": "Phiên",
-        "newHosts": "Người dẫn chương trình mới"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "Duy trì phiên đầu cuối",
-        "description": "Thời gian duy trì kết nối của một thiết bị đầu cuối bị ngắt kết nối trên máy chủ trước khi nó bị đóng. Tối thiểu 1 phút, tối đa 1440 phút. Đối với các phiên cần duy trì lâu hơn thời gian này, hãy bật Auto-Tmux trên máy chủ."
-      },
-      "commandHistoryEnabled": {
-        "label": "Lịch sử lệnh",
-        "description": "Cho phép ghi lịch sử lệnh. Khi tắt, lịch sử sẽ không được lưu bất kể cài đặt từng máy chủ."
-      },
-      "commandHistoryForNewHosts": {
-        "label": "Lịch sử lệnh cho máy chủ mới",
-        "description": "Liệu các máy chủ mới có bật lịch sử lệnh ngay từ đầu hay không."
-      },
-      "imageStorageMode": {
-        "label": "Chế độ lưu trữ",
-        "description": "Nơi hiển thị hình ảnh từ thiết bị đầu cuối được dán và tải lên. Chức năng tự động chọn theo kết nối, cục bộ và từ xa (SFTP) được cố định.",
-        "auto": "Tự động",
-        "local": "Cục bộ",
-        "remoteSftp": "Từ xa (SFTP)"
-      },
-      "imageLocalDir": {
-        "label": "Thư mục cục bộ",
-        "description": "Đường dẫn tuyệt đối trên máy chủ Termix nơi chế độ cục bộ ghi hình ảnh. Không bao giờ được hiển thị sau khi lưu. Giá trị trống sử dụng TERMIX_IMAGE_DIR."
-      },
-      "imageHostPath": {
-        "label": "Đường dẫn máy chủ",
-        "description": "Đây là giao diện phía máy chủ của thư mục cục bộ mà các tác nhân đầu cuối nhận được."
-      },
-      "imageTtlMs": {
-        "label": "TTL (ms)",
-        "description": "Thời gian lưu giữ ảnh đã tải lên, tính bằng mili giây. Giá trị trống sử dụng TERMIX_IMAGE_TTL_MS hoặc một giờ."
-      },
-      "imageMaxCount": {
-        "label": "Số lượng ảnh tối đa",
-        "description": "Hầu hết các hình ảnh được lưu giữ cùng một lúc. Trường hợp trống thì sử dụng TERMIX_MAX_IMAGE_COUNT hoặc 100."
-      },
-      "imageMaxBytes": {
-        "label": "Số byte lưu trữ tối đa",
-        "description": "Số byte tối đa của hình ảnh được lưu trữ cùng một lúc. Khi trống, nó sử dụng TERMIX_MAX_IMAGE_STORAGE_BYTES hoặc 5 GiB."
-      },
-      "sessionPersistence": {
-        "label": "Giữ lại các phiên sau khi ngắt kết nối",
-        "description": "Giữ cho cửa sổ terminal đang kết nối với máy chủ hoạt động trong khoảng thời gian nêu trên, để khi mở lại tab đó sẽ tiếp tục từ chỗ đã dừng lại."
-      },
-      "newHostAutoTmux": {
-        "label": "Auto-Tmux",
-        "description": "Chạy các cửa sổ terminal của máy chủ mới bên trong tmux để đảm bảo phiên làm việc vẫn hoạt động sau khi ngắt kết nối (cần cài đặt tmux trên máy chủ)."
-      },
-      "newHostTheme": {
-        "label": "Giao diện dành cho người dẫn chương trình mới",
-        "description": "Giao diện dòng lệnh mà một máy chủ mới khởi động sử dụng."
-      },
-      "newHostFontFamily": {
-        "label": "Phông chữ dành cho máy chủ mới",
-        "description": "Phông chữ giao diện dòng lệnh mà một máy chủ mới khởi động."
-      },
-      "newHostFontSize": {
-        "label": "Kích thước phông chữ cho người dùng mới",
-        "description": "Kích thước phông chữ của thiết bị đầu cuối mà một máy chủ mới bắt đầu sử dụng, tính bằng pixel."
-      },
-      "newHostCursorStyle": {
-        "label": "Kiểu con trỏ dành cho máy chủ mới"
-      },
-      "newHostCursorBlink": {
-        "label": "Con trỏ nhấp nháy khi có máy chủ mới."
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "Kích hoạt thanh công cụ Terminal",
-        "description": "Hiển thị thanh công cụ truy cập nhanh được gắn vào cửa sổ terminal đang hoạt động để xem các công cụ và số liệu thống kê trực tiếp của máy chủ này."
-      },
-      "terminalToolbarPosition": {
-        "label": "Vị trí thanh công cụ",
-        "description": "Vị trí thanh công cụ trong cửa sổ terminal. Bạn vẫn có thể kéo nó từ đó.",
-        "bottom": "Phía dưới trung tâm",
-        "bottomLeft": "Góc dưới bên trái",
-        "bottomRight": "Góc dưới bên phải",
-        "top": "Trên cùng ở giữa",
-        "topLeft": "Góc trên bên trái",
-        "topRight": "Góc trên bên phải"
-      },
-      "terminalToolbarStartState": {
-        "label": "Trạng thái khởi động của thanh công cụ",
-        "description": "Liệu thanh công cụ có mở ở chế độ toàn màn hình hay thu nhỏ khi thiết bị đầu cuối kết nối hay không.",
-        "expanded": "Mở rộng",
-        "collapsed": "Giảm thiểu"
-      },
-      "terminalToolbarDisplay": {
-        "label": "Chế độ hiển thị thanh công cụ",
-        "description": "Cách hiển thị các nút trên thanh công cụ. Nút được sử dụng lần cuối sẽ giữ nguyên vị trí bạn đã chọn trên thanh công cụ.",
-        "remember": "Lần cuối sử dụng",
-        "icon": "Chỉ có biểu tượng",
-        "labeled": "Biểu tượng và nhãn",
-        "expanded": "Đã mở rộng với số liệu thống kê"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "Hiển thị số liệu thống kê trực tiếp",
-        "description": "Hiển thị số liệu thống kê trực tiếp của máy chủ phía trên các nút trên thanh công cụ ở chế độ mở rộng."
-      },
-      "terminalToolbarFade": {
-        "label": "Mờ dần khi không hoạt động",
-        "description": "Làm mờ thanh công cụ cho đến khi bạn di chuột qua nó."
-      },
-      "enableCommandHistory": {
-        "label": "Lịch sử lệnh",
-        "description": "Ghi lại các lệnh chạy trong terminal này để dùng cho lịch sử và tự động hoàn thành"
-      },
-      "enableTerminal": {
-        "label": "Bật Terminal",
-        "description": "Cung cấp giao diện dòng lệnh SSH cho máy chủ này."
-      },
-      "inheritAppearance": {
-        "label": "Sử dụng cài đặt mặc định của người dùng"
-      },
-      "theme": {
-        "label": "Giao diện"
-      },
-      "cursorBlink": {
-        "label": "Con trỏ nhấp nháy"
-      },
-      "cursorStyle": {
-        "label": "Kiểu con trỏ"
-      },
-      "fontSize": {
-        "label": "Kích thước phông chữ"
-      },
-      "fontFamily": {
-        "label": "Phông chữ"
-      },
-      "scrollback": {
-        "label": "Cuộn trở lại"
-      },
-      "letterSpacing": {
-        "label": "Khoảng cách chữ"
-      },
-      "lineHeight": {
-        "label": "Chiều cao dòng"
-      },
-      "bellStyle": {
-        "label": "Chuông"
-      },
-      "minimumContrastRatio": {
-        "label": "Tỷ lệ tương phản tối thiểu"
-      },
-      "backgroundImage": {
-        "label": "Hình nền"
-      },
-      "backgroundImageOpacity": {
-        "label": "Độ mờ của hình nền"
-      },
-      "customThemeColors": {
-        "label": "Màu sắc chủ đề tùy chỉnh"
-      },
-      "rightClickSelectsWord": {
-        "label": "Nhấp chuột phải chọn từ"
-      },
-      "macOptionIsMeta": {
-        "label": "Tùy chọn là Meta"
-      },
-      "fastScrollModifier": {
-        "label": "Phím cuộn nhanh"
-      },
-      "fastScrollSensitivity": {
-        "label": "Tốc độ cuộn nhanh"
-      },
-      "backspaceMode": {
-        "label": "Xóa"
-      },
-      "autoMosh": {
-        "label": "Tự động mosh"
-      },
-      "moshCommand": {
-        "label": "Lệnh Mosh"
-      },
-      "autoTmux": {
-        "label": "Auto tmux"
-      },
-      "useSSHTitle": {
-        "label": "Sử dụng tiêu đề SSH"
-      },
-      "syntaxHighlighting": {
-        "label": "Tô sáng cú pháp"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "Các danh mục tô sáng cú pháp"
-      },
-      "linkClickBehavior": {
-        "label": "Nhấp chuột vào liên kết"
-      },
-      "localEcho": {
-        "label": "Tiếng vọng cục bộ"
-      },
-      "passwordPromptAutoFill": {
-        "label": "Đề nghị điền thông tin mật khẩu khi được yêu cầu"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "Điền thông tin vào các lời nhắc sudo"
-      },
-      "autoReconnect": {
-        "label": "Tự động kết nối lại"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "Tự động hoàn thành lệnh",
-        "description": "Hiển thị tính năng tự động hoàn thành khi gõ nếu bạn nhấn phím Tab"
-      },
-      "localEcho": {
-        "label": "Tiếng vọng địa phương",
-        "description": "Giảm độ trễ đầu vào cảm nhận được bằng cách sử dụng tính năng dự đoán thao tác gõ phím cục bộ an toàn."
-      },
-      "linkClickBehavior": {
-        "label": "Hành vi khi nhấp liên kết trong Terminal",
-        "description": "Hành vi mặc định khi nhấp vào liên kết trong terminal"
-      },
-      "customThemes": {
-        "label": "Chủ đề đã lưu"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "Ga địa phương"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "Sử dụng các phiên thiết bị đầu cuối trực tiếp",
-      "description": "Cho phép các tính năng khác, chẳng hạn như chia sẻ và ghi lại phiên làm việc, được tích hợp vào các phiên làm việc trực tiếp trên thiết bị đầu cuối của bạn."
-    },
-    "history": {
-      "title": "Đọc lịch sử lệnh",
-      "description": "Cho phép các tính năng khác, chẳng hạn như trợ lý AI, đọc lịch sử lệnh của bạn."
-    }
-  },
-  "hosts": {
-    "tabTerminal": "Terminal",
-    "addHost": "Thêm máy chủ",
-    "applyGlobalThemeTooltip": "Áp dụng chủ đề này",
-    "backgroundImageDesc": "URL tùy chọn cho ảnh nền terminal",
-    "backgroundImageLabel": "URL ảnh nền",
-    "backgroundImageOpacityLabel": "Độ mờ ảnh nền",
-    "backspaceMode": "Chế độ Backspace",
-    "backspaceModeControlH": "Control-H (BS)",
-    "backspaceModeLabel": "Chế độ Backspace",
-    "backspaceModeNormal": "Bình thường (DEL)",
-    "behaviorAndAdvanced": "Hành vi & Nâng cao",
-    "bellStyle": "Kiểu chuông",
-    "bellStyleBoth": "Cả hai",
-    "bellStyleLabel": "Kiểu chuông",
-    "bellStyleNone": "Không chọn",
-    "bellStyleSound": "Âm thanh",
-    "bellStyleVisual": "Thị giác",
-    "colorTheme": "Chủ đề màu",
-    "cursorBlink": "Con trỏ nhấp nháy",
-    "cursorBlinking": "Nhấp nháy con trỏ",
-    "cursorBlinkingDesc": "Bật hiệu ứng nhấp nháy cho con trỏ terminal",
-    "cursorStyle": "Kiểu con trỏ",
-    "cursorStyleBar": "Thanh",
-    "cursorStyleBlock": "Khối",
-    "cursorStyleLabel": "Kiểu con trỏ",
-    "cursorStyleUnderline": "Gạch chân",
-    "customThemeAnsiColors": "Màu ANSI",
-    "customThemeBackground": "Nền",
-    "customThemeBlack": "Đen",
-    "customThemeBlue": "Xanh dương",
-    "customThemeBrightBlack": "Đen sáng",
-    "customThemeBrightBlue": "Xanh dương sáng",
-    "customThemeBrightCyan": "Xanh lơ sáng",
-    "customThemeBrightGreen": "Xanh lá sáng",
-    "customThemeBrightMagenta": "Đỏ tươi sáng",
-    "customThemeBrightRed": "Đỏ sáng",
-    "customThemeBrightWhite": "Trắng sáng",
-    "customThemeBrightYellow": "Vàng sáng",
-    "customThemeColors": "Màu tùy chỉnh",
-    "customThemeCursor": "Con trỏ",
-    "customThemeCursorAccent": "Điểm nhấn con trỏ",
-    "customThemeCyan": "Xanh lơ",
-    "customThemeForeground": "Màu chữ",
-    "customThemeGreen": "Xanh lục",
-    "customThemeMagenta": "Đỏ tươi",
-    "customThemeRed": "Đỏ",
-    "customThemeResetTooltip": "Đặt lại về mặc định",
-    "customThemeSelection": "Vùng chọn",
-    "customThemeWhite": "Trắng",
-    "customThemeYellow": "Vàng",
-    "deleteGlobalThemeTooltip": "Xóa chủ đề này",
-    "docsLink": "Xem tài liệu",
-    "enableAutoMosh": "Kích hoạt Auto-Mosh",
-    "enableAutoMoshDesc": "Ưu tiên Mosh hơn SSH nếu có",
-    "enableAutoTmux": "Kích hoạt Auto-Tmux",
-    "enableAutoTmuxDesc": "Giữ cho shell và mọi thứ đang chạy trong đó hoạt động bình thường ngay cả khi bị ngắt kết nối hoặc khởi động lại trình duyệt bằng cách chạy bên trong tmux (tmux phải được cài đặt trên máy chủ).",
-    "fastScrollModifier": "Phím bổ trợ cuộn nhanh",
-    "fastScrollModifierAlt": "Alt",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "Phím bổ trợ cuộn nhanh",
-    "fastScrollModifierShift": "Shift",
-    "fastScrollSensitivity": "Độ nhạy cuộn nhanh",
-    "fastScrollSensitivityLabel": "Độ nhạy cuộn nhanh",
-    "fontFamily": "Phông chữ",
-    "fontFamilyCustomHint": "Chọn một phông chữ có sẵn hoặc chọn Tùy chỉnh và nhập chính xác tên của một phông chữ đã được cài đặt trên hệ thống của bạn (ví dụ: MesloLGS NF, Noto Sans Mono). Termix không thể cài đặt phông chữ cho bạn, hãy cài đặt nó trên hệ điều hành của bạn trước.",
-    "fontFamilyCustomOption": "Phong tục...",
-    "fontFamilyCustomPlaceholder": "Tên phông chữ chính xác, ví dụ: MesloLGS NF",
-    "fontFamilyLabel": "Họ phông chữ",
-    "fontSize": "Cỡ chữ",
-    "fontSizeLabel": "Cỡ chữ",
-    "hostNotFound": "Không tìm thấy máy chủ",
-    "letterSpacing": "Khoảng cách ký tự",
-    "letterSpacingPx": "Khoảng cách chữ (px)",
-    "lineHeight": "Chiều cao dòng",
-    "lineHeightLabel": "Chiều cao dòng",
-    "linkClickBehaviorConfirm": "Hiển thị popup để mở hoặc sao chép",
-    "linkClickBehaviorDesc": "Điều khiển hành động khi nhấp liên kết trong terminal. Dùng 'Mặc định' để theo cài đặt cấp ứng dụng.",
-    "linkClickBehaviorDirect": "Mở trực tiếp",
-    "linkClickBehaviorLabel": "Hành vi nhấp liên kết",
-    "loadingHost": "Đang tải máy chủ...",
-    "localEchoAuto": "Tự động",
-    "localEchoDesc": "Dự đoán các thao tác gõ phím an toàn có thể in được cục bộ trên các kết nối chậm. Lời nhắc nhập mật khẩu và đầu vào điều khiển không bao giờ được hiển thị lại.",
-    "localEchoLabel": "Tiếng vọng địa phương",
-    "localEchoOff": "Tắt",
-    "localEchoOn": "Luôn bật",
-    "macOptionIsMetaLabel": "Phím Tùy chọn gửi dữ liệu meta",
-    "macOptionIsMetaShortDesc": "Tắt tính năng gõ các ký tự đặc biệt (như @ hoặc |) bằng phím Option/Alt trên macOS thay vì gửi dữ liệu Meta.",
-    "moshCommand": "Lệnh MOSH",
-    "moshCommandLabel": "Lệnh Mosh",
-    "noSavedThemes": "Chưa có chủ đề nào được lưu.",
-    "none": "Không có",
-    "passwordPromptAutoFillDesc": "Đề nghị điền mật khẩu đã lưu khi thiết bị đầu cuối yêu cầu. Tắt tùy chọn này để không bao giờ tự động điền bất kỳ mật khẩu nào trên máy chủ này.",
-    "passwordPromptAutoFillLabel": "Ưu đãi tự động điền mật khẩu",
-    "autoReconnectLabel": "Tự động kết nối lại",
-    "autoReconnectDesc": "Tự động kết nối lại khi kết nối SSH bị ngắt, ví dụ như sau sự cố mạng hoặc khi thiết bị ở chế độ ngủ. Giữ nguyên dữ liệu cuộn ngược lại.",
-    "rightClickSelectsWord": "Nhấp chuột phải chọn từ",
-    "rightClickSelectsWordLabel": "Nhấp chuột phải chọn từ",
-    "rightClickSelectsWordShortDesc": "Chọn từ dưới con trỏ khi nhấp chuột phải",
-    "saveAsGlobalTheme": "Lưu dưới dạng Chủ đề toàn cầu",
-    "saveGlobalThemeError": "Không thể lưu chủ đề",
-    "saveGlobalThemeNamePrompt": "Nhập tên cho chủ đề này",
-    "saveGlobalThemeSuccess": "Chủ đề đã được lưu",
-    "savedThemesLabel": "Chủ đề đã lưu",
-    "scrollbackBufferLabel": "Bộ đệm cuộn ngược",
-    "scrollbackMaxLines": "Số dòng tối đa được giữ trong lịch sử",
-    "sudoPasswordAutoFill": "Tự động điền mật khẩu Sudo",
-    "sudoPasswordAutoFillDesc": "Lưu trữ mật khẩu sudo để các số liệu máy chủ, lời nhắc terminal và các thành phần khác có thể chạy lệnh đặc quyền tự động.",
-    "sudoPasswordAutoFillLabel": "Tự động điền mật khẩu sudo",
-    "syntaxCategoryIpAddresses": "Địa chỉ IP",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "Mức log",
-    "syntaxCategoryLogLevelsDesc": "error, warn, info, debug, fatal",
-    "syntaxCategoryNumbers": "Số có nhãn",
-    "syntaxCategoryNumbersDesc": "port 8080, exit 1, status 404",
-    "syntaxCategoryPaths": "Đường dẫn tệp",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "Dấu thời gian",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 2024-01-15",
-    "syntaxCategoryUrls": "URL",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "Tô màu đầu ra terminal (lỗi, đường dẫn, IP, dấu thời gian)",
-    "syntaxHighlightingLabel": "Tô sáng cú pháp",
-    "terminalAppearance": "Giao diện terminal",
-    "theme": "Chủ đề",
-    "themePreview": "Xem trước chủ đề",
-    "useSSHTitleDesc": "Cập nhật tiêu đề tab từ tiêu đề cửa sổ shell thay vì tên máy chủ",
-    "useSSHTitleLabel": "Sử dụng tiêu đề cửa sổ SSH",
-    "enableTunnel": "Bật Tunnel",
-    "enableFileManager": "Bật Trình Quản Lý Tệp",
-    "enableDocker": "Bật Docker",
-    "startupSnippet": "Đoạn mã khởi động",
-    "quickActions": "Thao tác nhanh",
-    "proxmoxLastSyncStatus": {
-      "success": "Thành công"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} đã bỏ qua (không tìm thấy địa chỉ IP)",
-    "proxmoxStatsUrlCopied": "URL Thống kê Proxmox đã được sao chép vào clipboard",
-    "rdpUrlCopied": "Đã sao chép URL RDP",
-    "vncUrlCopied": "Đã sao chép URL VNC",
-    "filterAuthStepca": "Bước CA",
-    "guac": {
-      "noCredential": "Không có thông tin xác thực (thông tin trực tiếp bên dưới)",
-      "authTypeDirect": "Trực tiếp",
-      "authTypeCredential": "Thông tin xác thực",
-      "authTypeNone": "Không chọn",
-      "recordingPath": "Đường dẫn ghi",
-      "recordingName": "Tên bản ghi",
-      "saveHostFirst": "Lưu máy chủ trước.",
-      "sharingOptionsAfterSave": "Tùy chọn chia sẻ khả dụng sau khi máy chủ đã được lưu.",
-      "permissionLevel": "Mức quyền",
-      "typeHeader": "Loại",
-      "targetHeader": "Mục tiêu",
-      "permissionHeader": "Quyền",
-      "cancelBtn": "Hủy",
-      "savingBtn": "Đang lưu...",
-      "updateHostBtn": "Cập nhật máy chủ",
-      "addHostBtn": "Thêm máy chủ"
-    },
-    "filterAuthVault": "Kho tiền"
-  },
-  "nav": {
-    "history": "Lịch sử",
-    "localTerminal": "Ga địa phương",
-    "sshTools": "Công cụ SSH",
-    "terminal": "Terminal",
-    "macros": "Macro"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "Nhập vào đây để phát tán thao tác phím...",
-    "copyOnSelect": "Sao chép văn bản đã chọn tự động",
-    "enableRightClickCopyPaste": "Bật sao chép/dán bằng chuột phải",
-    "fillPassword": "Điền mật khẩu",
-    "fillPasswordMissing": "Không có mật khẩu đã lưu cho {{count}} terminal đã chọn",
-    "fillPasswordSuccess": "Đã điền mật khẩu vào {{count}} terminal",
-    "keyRecordingTitle": "Ghi phím",
-    "noTerminalTabsOpen": "Không có tab terminal nào mở",
-    "recordToTerminals": "Ghi vào các terminal",
-    "selectAll": "Tất cả",
-    "selectNone": "Không chọn",
-    "selectTerminalsAbove": "Chọn các terminal ở trên",
-    "settingsTitle": "Cài đặt",
-    "startRecording": "Bắt đầu ghi",
-    "stopRecording": "Dừng ghi"
-  },
-  "keybindings": {
-    "copy": "Sao chép lựa chọn",
-    "paste": "Dán",
-    "sendControlCode": "Gửi tín hiệu Ctrl+chữ cái",
-    "sendText": "Gửi tin nhắn",
-    "controlCodeLabel": "Thư",
-    "textLabel": "Văn bản để gửi",
-    "appendEnterLabel": "Nhấn Enter sau khi gửi",
-    "clipboardPermissionNote": "Một số trình duyệt có thể yêu cầu quyền truy cập clipboard khi sử dụng lần đầu.",
-    "textRequired": "Nhập văn bản cần gửi",
-    "controlCodeRequired": "Nhập một chữ cái duy nhất cho mã điều khiển.",
-    "builtIn": {
-      "copyCtrlC": "Sao chép vùng chọn (Ctrl+C, chỉ khi văn bản được chọn)",
-      "copyCtrlShiftC": "Sao chép vùng chọn (Ctrl+Shift+C)",
-      "copyCmdC": "Sao chép vùng chọn (Cmd+C)",
-      "pasteCtrlShiftV": "Sao chép từ clipboard (Ctrl+Shift+V)",
-      "ctrlW": "Gửi tổ hợp phím Ctrl+W đến cửa sổ dòng lệnh (chặn việc đóng tab trình duyệt)",
-      "ctrlT": "Gửi tổ hợp phím Ctrl+T để vào cửa sổ dòng lệnh (chặn việc mở tab trình duyệt)",
-      "ctrlN": "Gửi tổ hợp phím Ctrl+N để vào cửa sổ dòng lệnh (chặn việc mở cửa sổ trình duyệt)",
-      "ctrlQ": "Gửi tổ hợp phím Ctrl+Q để vào cửa sổ dòng lệnh (chặn không cho thoát trình duyệt)"
-    }
-  },
-  "macros": {
-    "title": "Macro",
-    "description": "Chạy một chuỗi lệnh đã lưu trong cửa sổ dòng lệnh và phản hồi lại những gì máy chủ gửi về.",
-    "target": "Đích",
-    "noTerminal": "Không có thiết bị đầu cuối nào đang mở",
-    "empty": "Chưa có macro nào.",
-    "emptyHint": "Tạo macro để tự động hóa quy trình trên thiết bị đầu cuối, chẳng hạn như đăng nhập, khởi động lại dịch vụ hoặc trả lời các lời nhắc.",
-    "create": "Macro mới",
-    "back": "Quay lại phần macro",
-    "name": "Tên",
-    "namePlaceholder": "Khởi động lại máy chủ web",
-    "nameRequired": "Hãy đặt tên cho macro trước khi lưu.",
-    "descriptionLabel": "Mô tả",
-    "descriptionPlaceholder": "Chức năng của macro này (tùy chọn)",
-    "unsaved": "Thay đổi chưa lưu",
-    "save": "Lưu",
-    "saved": "Macro đã được lưu",
-    "saveFailed": "Không thể lưu macro",
-    "delete": "Xóa",
-    "deleteTitle": "Xóa macro này?",
-    "deleteBody": "\"{{name}}\" sẽ bị xóa vĩnh viễn. Không thể hoàn tác.",
-    "deleted": "Macro đã bị xóa",
-    "cancel": "Hủy",
-    "run": "Chạy",
-    "stop": "Bit dừng",
-    "running": "Đang chạy...",
-    "completed": "Macro đã hoàn thành",
-    "failed": "Macro bị lỗi",
-    "loadFailed": "Không thể tải macro",
-    "needTerminal": "Trước tiên hãy mở và kết nối thiết bị đầu cuối.",
-    "noSteps": "Macro này chưa có bước nào. Hãy thêm một bước bên dưới.",
-    "addStep": "Thêm bước",
-    "stepNumber": "Bước {{number}}",
-    "removeStep": "Xóa bước",
-    "confirmRunTitle": "Chạy macro này?",
-    "confirmRunBody": "\"{{name}}\" sẽ gửi lệnh đến {{host}}.",
-    "confirmRunAction": "Chạy macro",
-    "stepTypes": {
-      "send": {
-        "label": "Gửi lệnh",
-        "help": "Nhập văn bản vào cửa sổ dòng lệnh, giống như khi bạn tự nhập văn bản."
-      },
-      "wait": {
-        "label": "Chờ kết quả đầu ra",
-        "help": "Tạm dừng cho đến khi máy chủ in ra đoạn văn bản bạn đã đặt tên, ví dụ như lời nhắc nhập mật khẩu."
-      },
-      "delay": {
-        "label": "Tạm dừng",
-        "help": "Chờ một khoảng thời gian cố định trước khi thực hiện bước tiếp theo."
-      },
-      "if": {
-        "label": "Nếu đầu ra chứa",
-        "help": "Kiểm tra tất cả những gì máy chủ đã in ra cho đến nay, sau đó chạy một trong hai nhánh."
-      },
-      "repeat": {
-        "label": "Lặp lại",
-        "help": "Thực thi các bước bên trong nó một số lần nhất định."
-      }
-    },
-    "send": {
-      "text": "Lệnh hoặc văn bản",
-      "textPlaceholder": "systemctl restart nginx",
-      "pressEnter": "Nhấn Enter sau khi gửi",
-      "pressEnterHelp": "Tắt tùy chọn này để nhập văn bản mà không cần gửi đi."
-    },
-    "wait": {
-      "pattern": "Chờ cho đến khi đầu ra chứa",
-      "patternPlaceholder": "mật khẩu:",
-      "timeout": "Bỏ cuộc sau",
-      "onTimeout": "Nếu nó không bao giờ xuất hiện",
-      "stop": "Dừng macro",
-      "continue": "Cứ tiếp tục đi nhé"
-    },
-    "delay": {
-      "duration": "Chờ đợi"
-    },
-    "ifStep": {
-      "pattern": "Nếu đầu ra chứa",
-      "patternPlaceholder": "Đang hoạt động: đang hoạt động (đang chạy)",
-      "then": "Sau đó hãy làm như thế này",
-      "else": "Nếu không thì hãy làm như thế này",
-      "emptyBranch": "Không có bước nào"
-    },
-    "repeat": {
-      "count": "Số lần",
-      "times": "lần"
-    },
-    "match": {
-      "useRegex": "So khớp với biểu thức chính quy",
-      "useRegexHelp": "Bỏ phần này đi để văn bản khớp chính xác với nội dung đã viết.",
-      "invalidRegex": "Đây không phải là biểu thức chính quy hợp lệ, nó sẽ được so khớp như văn bản thuần túy."
-    },
-    "seconds": "giây",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "Cần có máy chủ từ xa. Kết nối máy chủ từ xa trong Cài đặt để sử dụng loại kết nối này."
-  },
-  "plugin": {
-    "name": "SSH Terminal"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/zh_CN.json b/plugins/ssh-terminal/locales/translated/zh_CN.json
deleted file mode 100644
index 792699828..000000000
--- a/plugins/ssh-terminal/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "添加",
-    "arrowDown": "Arrow Down",
-    "arrowLeft": "Arrow Left",
-    "arrowRight": "Arrow Right",
-    "arrowUp": "Arrow Up",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Del",
-    "done": "完成",
-    "editQuickKeys": "编辑快速键",
-    "end": "End",
-    "esc": "Esc",
-    "home": "Home",
-    "pageDown": "PgDn",
-    "pageUp": "PgUp",
-    "paste": "粘贴",
-    "quickKeyPlaceholder": "例如 sudo ",
-    "quickKeysDesc": "点击 × 删除。最多支持 8 个字符。",
-    "quickKeysTitle": "快速键",
-    "removeQuickKey": "删除",
-    "resetDefaults": "重置为默认值",
-    "shift": "Shift",
-    "tab": "Tab"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "启用自动 Tmux 失败",
-    "autoTmuxEnabled": "对 {{host}}启用自动 Tmux。它从下一个连接开始生效。",
-    "clipboardHttpWarning": "无法读取剪贴板内容。部分浏览器限制在 HTTPS 协议之外访问剪贴板——请尝试使用 Ctrl+V 粘贴，或通过 HTTPS 协议访问 Termix。",
-    "closeTab": "关闭",
-    "connecting": "正在连接…",
-    "connectionLost": "连接丢失",
-    "connectionRejected": "服务器拒绝了连接。请检查您的身份验证和网络配置。",
-    "connectionTimeout": "连接超时",
-    "enableAutoTmuxAction": "启用自动 Tmux",
-    "hostKeyRejected": "SSH主机密钥验证被拒绝。连接已取消。",
-    "linkDialogCopy": "复制",
-    "linkDialogOpen": "打开",
-    "linkDialogTitle": "打开链接",
-    "maxReconnectAttemptsReached": "已达到最大重连尝试次数",
-    "noHostSelected": "未选择主机",
-    "passwordPromptFillTitle": "将保存的密码填入此提示？",
-    "reconnect": "重新连接",
-    "reconnected": "重新连接成功",
-    "reconnecting": "正在重新连接…（{{attempt}}/{{max}}）",
-    "autoReconnecting": "连接丢失，正在重新连接……",
-    "searchCaseSensitive": "区分大小写",
-    "searchClose": "关闭（Esc）",
-    "searchNext": "下一个匹配（Enter）",
-    "searchNoResults": "没有结果",
-    "searchPlaceholder": "搜索",
-    "searchPrevious": "上一个匹配（Shift+Enter）",
-    "searchRegex": "使用正则表达式",
-    "searchResultCount": "{{index}} 的 {{count}}",
-    "searchWholeWord": "全字匹配",
-    "sessionExpiredNotice": "您之前在 {{host}} 上的会话已在 {{minutes}} 分钟后断开连接并过期；shell 及其中运行的所有内容均已丢失。请在此主机上启用 Auto-Tmux 以保持会话连接。",
-    "sessionExpiredNoticeNoMinutes": "您之前在 {{host}} 上的会话已过期，且已断开连接；shell 及其中运行的所有内容均已丢失。请在此主机上启用 Auto-Tmux 以保持会话有效。",
-    "sessionTakenOver": "会话已在另一个标签页中打开。正在重新连接...",
-    "tmuxAttached": "已连接客户端",
-    "tmuxAttachedCount": "{{count}} 个已连接",
-    "tmuxCopyHint": "调整选择并按 Enter 复制到剪贴板",
-    "tmuxCreateNew": "启动新会话",
-    "tmuxDetached": "已从 tmux 会话分离",
-    "tmuxLastActivity": "最后活动",
-    "tmuxSessionAttached": "tmux 会话已附加：{{name}}",
-    "tmuxSessionCreated": "tmux 会话已创建：{{name}}",
-    "tmuxSessionPickerDesc": "在此主机上发现现有 tmux 会话。选择一个重新连接或创建新会话。",
-    "tmuxSessionPickerTitle": "tmux 会话",
-    "tmuxTimeDays": "{{count}} 天前",
-    "tmuxTimeHours": "{{count}} 小时前",
-    "tmuxTimeJustNow": "刚刚",
-    "tmuxTimeMinutes": "{{count}} 分钟前",
-    "tmuxUnavailable": "远程主机上未安装 tmux，回退到标准 shell",
-    "tmuxWindowCount": "{{count}} 个窗口",
-    "tmuxWindows": "窗口",
-    "unknownError": "发生未知错误",
-    "websocketAbnormalClose": "连接意外关闭。这可能是因为反向代理或SSL配置问题。请检查服务器日志。",
-    "websocketError": "WebSocket 连接错误",
-    "clipboardReadFailed": "从剪贴板读取失败。请确保已授予剪贴板权限。",
-    "clipboardWriteFailed": "复制到剪贴板失败。请确保页面通过 HTTPS 或 localhost 提供服务。",
-    "connected": "已连接",
-    "totpCodeLabel": "验证码",
-    "duplicateTab": "重复标签页",
-    "imageChooseFile": "选择图像文件",
-    "imageUploaded": "上传图片： {{path}}",
-    "imageClipboardUnavailable": "此浏览器无法读取剪贴板中的图像",
-    "imageClipboardEmpty": "剪贴板中未找到图像",
-    "localShell": "本地终端 shell",
-    "autocompleteHintComplete": "按 Tab 键或 Enter 键完成",
-    "autocompleteHintNavigate": "向上向下导航",
-    "autocompleteHintClose": "按 Esc 键关闭"
-  },
-  "terminalToolbar": {
-    "detachTmux": "分离 tmux",
-    "detachTmuxDescription": "分离 tmux 会话",
-    "dismissError": "忽略图像错误",
-    "hideToolbar": "隐藏工具栏",
-    "image": "图片操作（仅限图片）",
-    "imageActionFailed": "图片操作失败",
-    "layout": "工具栏显示模式",
-    "layoutExpanded": "扩展了指标",
-    "layoutIcon": "仅图标",
-    "layoutLabeled": "图标和标签",
-    "moveToolbar": "移动工具栏",
-    "moveToolbarHint": "拖动即可重新定位工具栏",
-    "paste": "粘贴图片",
-    "pasteImage": "从剪贴板粘贴图片（仅限图片）",
-    "retry": "重试",
-    "showToolbar": "展开工具栏",
-    "upload": "上传图片",
-    "uploadImage": "将图片上传到主机",
-    "uploadingImage": "上传中..."
-  },
-  "history": {
-    "noTerminalSelected": "未选择终端",
-    "noTerminalSelectedHint": "打开一个 SSH 终端标签页以查看其命令历史",
-    "searchPlaceholder": "搜索历史...",
-    "clearAll": "全部清除",
-    "noHistoryEntries": "无历史记录",
-    "trackingDisabled": "历史跟踪已禁用",
-    "trackingDisabledHint": "在该主机的 SSH 终端选项卡中启用命令历史记录。",
-    "commandCount_one": "{{count}} 命令",
-    "commandCount_other": "{{count}} 命令"
-  },
-  "touchInput": {
-    "enabled": "启用触摸输入",
-    "enabledDesc": "允许终端单指触摸滚动",
-    "momentumEnabled": "启用动能",
-    "momentumEnabledDesc": "滑动后继续短暂滚动。",
-    "advanced": "高级",
-    "resetDefaults": "重置为默认值",
-    "dragThreshold": "拖动阈值",
-    "maxWheelDelta": "最大滚轮增量",
-    "momentumSampleWindow": "动量样本窗口",
-    "releaseGracePeriod": "释放宽限期",
-    "minimumVelocity": "最小速度",
-    "maximumVelocity": "最大速度",
-    "maximumDuration": "最长持续时间",
-    "maximumTravel": "最大行程",
-    "decayTime": "衰减时间",
-    "pixelsPerTick": "每刻像素数",
-    "maximumFrameInterval": "最大帧间隔",
-    "maximumTicksPerFrame": "每帧最大刻度数"
-  },
-  "imageStorage": {
-    "instanceId": "终端会话实例 ID",
-    "instanceIdDesc": "用于测试可见性的已连接终端标签页的实例 ID。",
-    "selectedModeUnavailable": "不可用",
-    "test": "测试",
-    "testing": "测试中……",
-    "testFailed": "图像存储测试失败",
-    "testConnected": "终端会话已连接。",
-    "testNotConnected": "没有与此实例 ID 连接的终端会话。",
-    "testSelectedMode": "上传将使用：{{mode}}",
-    "testLocalVisible": "本地目录对连接的主机可见。",
-    "testLocalNotVisible": "从连接的主机上看不到本地目录。"
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "触摸输入",
-        "images": "图像存储",
-        "sessions": "会话",
-        "newHosts": "新主持人"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "终端会话持久性",
-        "description": "断开连接的终端在服务器上保持活动状态的时间，最短 1 分钟，最长 1440 分钟。对于必须保持活动状态超过此时间的会话，请在主机上启用自动终端复用 (Auto-Tmux)。"
-      },
-      "commandHistoryEnabled": {
-        "label": "命令历史",
-        "description": "允许记录命令历史。禁用后，无论各主机设置如何，均不保存历史记录。"
-      },
-      "commandHistoryForNewHosts": {
-        "label": "新主机的命令历史记录",
-        "description": "是否开启新主机的命令历史记录功能。"
-      },
-      "imageStorageMode": {
-        "label": "存储模式",
-        "description": "粘贴和上传的终端图片的写入位置。自动模式根据连接自动选择，本地和远程（SFTP）为固定模式。",
-        "auto": "自动",
-        "local": "本地",
-        "remoteSftp": "远程（SFTP）"
-      },
-      "imageLocalDir": {
-        "label": "本地目录",
-        "description": "Termix 后端本地模式写入图像的绝对路径。保存后不再显示。空路径使用 TERMIX_IMAGE_DIR。"
-      },
-      "imageHostPath": {
-        "label": "主机路径",
-        "description": "终端代理接收到的本地目录的主机端视图。"
-      },
-      "imageTtlMs": {
-        "label": "TTL（毫秒）",
-        "description": "上传的图片保留时间，以毫秒为单位。空图片使用 TERMIX_IMAGE_TTL_MS，即一小时。"
-      },
-      "imageMaxCount": {
-        "label": "最大图像数量",
-        "description": "一次保留大部分图像。空集使用 TERMIX_MAX_IMAGE_COUNT 或 100。"
-      },
-      "imageMaxBytes": {
-        "label": "最大存储字节",
-        "description": "一次性保存最多字节的图像。空图像使用 TERMIX_MAX_IMAGE_STORAGE_BYTES 或 5 GiB。"
-      },
-      "sessionPersistence": {
-        "label": "断开连接后仍保持会话",
-        "description": "在上述时间内，保持服务器上断开连接的终端处于活动状态，以便重新打开其标签页时可以从上次中断的地方继续操作。"
-      },
-      "newHostAutoTmux": {
-        "label": "自动 Tmux",
-        "description": "在 tmux 中运行新主机的终端，以便会话在断开连接后仍然存在（主机上需要安装 tmux）。"
-      },
-      "newHostTheme": {
-        "label": "新主持人主题",
-        "description": "新主机启动时使用的终端主题。"
-      },
-      "newHostFontFamily": {
-        "label": "新主机字体",
-        "description": "新主机启动时使用的终端字体。"
-      },
-      "newHostFontSize": {
-        "label": "新主机字体大小",
-        "description": "新主机启动时使用的终端字体大小，以像素为单位。"
-      },
-      "newHostCursorStyle": {
-        "label": "新主机的光标样式"
-      },
-      "newHostCursorBlink": {
-        "label": "新主机闪烁光标"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "启用终端工具栏",
-        "description": "在当前终端上显示该主机的工具和实时信息的 Dock栏"
-      },
-      "terminalToolbarPosition": {
-        "label": "工具栏位置",
-        "description": "工具栏位于终端中的位置。您仍然可以从那里拖动它。",
-        "bottom": "底部中心",
-        "bottomLeft": "左下角",
-        "bottomRight": "右下角",
-        "top": "顶部中心",
-        "topLeft": "左上",
-        "topRight": "右上角"
-      },
-      "terminalToolbarStartState": {
-        "label": "工具栏起始状态",
-        "description": "终端连接时工具栏是以展开形式还是最小化形式打开",
-        "expanded": "扩展",
-        "collapsed": "最小化"
-      },
-      "terminalToolbarDisplay": {
-        "label": "工具栏显示模式",
-        "description": "工具栏按钮的显示方式。“上次使用”选项会保留您在工具栏中选择的内容。",
-        "remember": "上次使用",
-        "icon": "仅图标",
-        "labeled": "图标和标签",
-        "expanded": "补充统计数据"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "显示实时统计数据",
-        "description": "在展开模式下，工具栏按钮上方显示实时主持人统计信息"
-      },
-      "terminalToolbarFade": {
-        "label": "空闲时淡出",
-        "description": "将工具栏淡出，直到鼠标悬停在其上方。"
-      },
-      "enableCommandHistory": {
-        "label": "命令历史",
-        "description": "记录此终端中运行的命令，用于历史记录和自动补全"
-      },
-      "enableTerminal": {
-        "label": "启用终端",
-        "description": "为该主机提供 SSH 终端。"
-      },
-      "inheritAppearance": {
-        "label": "使用用户默认设置"
-      },
-      "theme": {
-        "label": "主题"
-      },
-      "cursorBlink": {
-        "label": "闪烁的光标"
-      },
-      "cursorStyle": {
-        "label": "光标样式"
-      },
-      "fontSize": {
-        "label": "字体大小"
-      },
-      "fontFamily": {
-        "label": "字体"
-      },
-      "scrollback": {
-        "label": "返回"
-      },
-      "letterSpacing": {
-        "label": "字母间距"
-      },
-      "lineHeight": {
-        "label": "行高"
-      },
-      "bellStyle": {
-        "label": "钟"
-      },
-      "minimumContrastRatio": {
-        "label": "最小对比度"
-      },
-      "backgroundImage": {
-        "label": "背景图片"
-      },
-      "backgroundImageOpacity": {
-        "label": "背景图像不透明度"
-      },
-      "customThemeColors": {
-        "label": "自定义主题颜色"
-      },
-      "rightClickSelectsWord": {
-        "label": "右键单击选择单词"
-      },
-      "macOptionIsMeta": {
-        "label": "选项是 Meta"
-      },
-      "fastScrollModifier": {
-        "label": "快速滚动键"
-      },
-      "fastScrollSensitivity": {
-        "label": "快速滚动速度"
-      },
-      "backspaceMode": {
-        "label": "退格键"
-      },
-      "autoMosh": {
-        "label": "自动摇滚"
-      },
-      "moshCommand": {
-        "label": "Mosh 命令"
-      },
-      "autoTmux": {
-        "label": "自动 tmux"
-      },
-      "useSSHTitle": {
-        "label": "使用 SSH 标题"
-      },
-      "syntaxHighlighting": {
-        "label": "语法高亮"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "语法高亮类别"
-      },
-      "linkClickBehavior": {
-        "label": "点击链接"
-      },
-      "localEcho": {
-        "label": "本地回声"
-      },
-      "passwordPromptAutoFill": {
-        "label": "主动提供密码提示信息"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "填写 sudo 提示符"
-      },
-      "autoReconnect": {
-        "label": "自动重新连接"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "命令自动补全",
-        "description": "输入时按 Tab 键可显示自动完成功能。"
-      },
-      "localEcho": {
-        "label": "本地回声",
-        "description": "利用安全的本地按键预测来降低感知输入延迟"
-      },
-      "linkClickBehavior": {
-        "label": "终端链接点击",
-        "description": "点击终端内链接时的默认行为"
-      },
-      "customThemes": {
-        "label": "已保存的主题"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "本地终端"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "使用实时终端会话",
-      "description": "允许其他功能（例如会话共享和录制）访问您的实时终端会话。"
-    },
-    "history": {
-      "title": "读取命令历史记录",
-      "description": "允许其他功能（例如 AI 助手）读取您的命令历史记录。"
-    }
-  },
-  "hosts": {
-    "tabTerminal": "终端",
-    "addHost": "添加主机",
-    "applyGlobalThemeTooltip": "应用此主题",
-    "backgroundImageDesc": "终端背景图片的可选 URL",
-    "backgroundImageLabel": "背景图片 URL",
-    "backgroundImageOpacityLabel": "背景图片不透明度",
-    "backspaceMode": "退格模式",
-    "backspaceModeControlH": "Control-H（BS）",
-    "backspaceModeLabel": "退格模式",
-    "backspaceModeNormal": "标准（DEL）",
-    "behaviorAndAdvanced": "行为与高级设置",
-    "bellStyle": "响铃样式",
-    "bellStyleBoth": "两者皆有",
-    "bellStyleLabel": "响铃样式",
-    "bellStyleNone": "全不选",
-    "bellStyleSound": "声音",
-    "bellStyleVisual": "视觉",
-    "colorTheme": "颜色主题",
-    "cursorBlink": "光标闪烁",
-    "cursorBlinking": "光标闪烁",
-    "cursorBlinkingDesc": "为终端光标启用闪烁动画",
-    "cursorStyle": "光标样式",
-    "cursorStyleBar": "竖线形",
-    "cursorStyleBlock": "方块形",
-    "cursorStyleLabel": "光标样式",
-    "cursorStyleUnderline": "下划线形",
-    "customThemeAnsiColors": "ANSI 颜色",
-    "customThemeBackground": "背景色",
-    "customThemeBlack": "黑色",
-    "customThemeBlue": "蓝色",
-    "customThemeBrightBlack": "亮黑色",
-    "customThemeBrightBlue": "亮蓝色",
-    "customThemeBrightCyan": "亮青色",
-    "customThemeBrightGreen": "亮绿色",
-    "customThemeBrightMagenta": "亮品红",
-    "customThemeBrightRed": "亮红色",
-    "customThemeBrightWhite": "亮白色",
-    "customThemeBrightYellow": "亮黄色",
-    "customThemeColors": "自定义颜色",
-    "customThemeCursor": "光标颜色",
-    "customThemeCursorAccent": "光标强调色",
-    "customThemeCyan": "青色",
-    "customThemeForeground": "前景色",
-    "customThemeGreen": "绿色",
-    "customThemeMagenta": "品红",
-    "customThemeRed": "红色",
-    "customThemeResetTooltip": "重置为默认值",
-    "customThemeSelection": "选中色",
-    "customThemeWhite": "白色",
-    "customThemeYellow": "黄色",
-    "deleteGlobalThemeTooltip": "删除此主题",
-    "docsLink": "查看文档",
-    "enableAutoMosh": "启用自动 Mosh",
-    "enableAutoMoshDesc": "若可用，优先使用 Mosh 而非 SSH",
-    "enableAutoTmux": "启用自动 Tmux",
-    "enableAutoTmuxDesc": "通过在 tmux 中运行（tmux 必须安装在主机上），可以在断开连接和浏览器重启后保持 shell 及其中运行的所有内容处于活动状态。",
-    "fastScrollModifier": "快速滚动修饰键",
-    "fastScrollModifierAlt": "Alt",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "快速滚动修饰键",
-    "fastScrollModifierShift": "Shift",
-    "fastScrollSensitivity": "快速滚动灵敏度",
-    "fastScrollSensitivityLabel": "快速滚动灵敏度",
-    "fontFamily": "字体族",
-    "fontFamilyCustomHint": "您可以选择一个内置字体，或者选择“自定义”并输入系统中已安装字体的确切名称（例如 MesloLGS NF、Noto Sans Mono）。Termix 无法自动安装字体，请先在您的操作系统上安装字体。",
-    "fontFamilyCustomOption": "自定义...",
-    "fontFamilyCustomPlaceholder": "确切的字体名称，例如 MesloLGS NF",
-    "fontFamilyLabel": "字体",
-    "fontSize": "字体大小",
-    "fontSizeLabel": "字体大小",
-    "hostNotFound": "未找到主机",
-    "letterSpacing": "字母间距",
-    "letterSpacingPx": "字母间距 (px)",
-    "lineHeight": "行高",
-    "lineHeightLabel": "行高",
-    "linkClickBehaviorConfirm": "显示弹出窗口以打开或复制",
-    "linkClickBehaviorDesc": "控制点击终端中链接时的行为。选择“默认”以遵循应用级设置。",
-    "linkClickBehaviorDirect": "直接打开",
-    "linkClickBehaviorLabel": "链接点击行为",
-    "loadingHost": "正在加载主机...",
-    "localEchoAuto": "自动",
-    "localEchoDesc": "在连接速度较慢的情况下，本地预测可安全打印的按键操作。密码提示和控制输入永远不会被回显。",
-    "localEchoLabel": "本地回声",
-    "localEchoOff": "关闭",
-    "localEchoOn": "始终开启",
-    "macOptionIsMetaLabel": "选项键发送 Meta",
-    "macOptionIsMetaShortDesc": "禁用后，可在 macOS 上使用 Option/Alt 键输入特殊字符（例如 @ 或 |），而不是发送 Meta。",
-    "moshCommand": "MOSH 命令",
-    "moshCommandLabel": "Mosh 命令",
-    "noSavedThemes": "尚未保存任何主题",
-    "none": "无",
-    "passwordPromptAutoFillDesc": "当终端要求输入密码时，提示输入已保存的密码。关闭此选项可使此主机上的任何密码永不自动填充。",
-    "passwordPromptAutoFillLabel": "提供密码自动填充功能",
-    "autoReconnectLabel": "自动重新连接",
-    "autoReconnectDesc": "当 SSH 连接断开时（例如网络中断或睡眠后），会自动重新连接。保留滚动条。",
-    "rightClickSelectsWord": "右键单击选择单词",
-    "rightClickSelectsWordLabel": "右键选择单词",
-    "rightClickSelectsWordShortDesc": "右键点击时选中光标下的单词",
-    "saveAsGlobalTheme": "另存为全局主题",
-    "saveGlobalThemeError": "主题保存失败",
-    "saveGlobalThemeNamePrompt": "请为此主题输入名称",
-    "saveGlobalThemeSuccess": "主题已保存",
-    "savedThemesLabel": "已保存的主题",
-    "scrollbackBufferLabel": "回滚缓冲区",
-    "scrollbackMaxLines": "保留在历史记录中的最大行数",
-    "sudoPasswordAutoFill": "Sudo 密码自动填充",
-    "sudoPasswordAutoFillDesc": "存储 sudo 密码，以便主机指标、终端提示和其他操作可以自动运行特权命令。",
-    "sudoPasswordAutoFillLabel": "Sudo 密码自动填充",
-    "syntaxCategoryIpAddresses": "IP 地址",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "日志级别",
-    "syntaxCategoryLogLevelsDesc": "error, warn, info, debug, fatal",
-    "syntaxCategoryNumbers": "标记数字",
-    "syntaxCategoryNumbersDesc": "端口 8080, 退出 1, 状态 404",
-    "syntaxCategoryPaths": "文件路径",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "时间戳",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 2024-01-15",
-    "syntaxCategoryUrls": "URL",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "对终端输出着色（错误、路径、IP、时间戳）",
-    "syntaxHighlightingLabel": "语法高亮",
-    "terminalAppearance": "终端外观",
-    "theme": "主题",
-    "themePreview": "主题预览",
-    "useSSHTitleDesc": "使用 shell 的窗口标题更新标签页标题，而非主机名",
-    "useSSHTitleLabel": "使用 SSH 窗口标题",
-    "enableTunnel": "启用隧道",
-    "enableFileManager": "启用文件管理器",
-    "enableDocker": "启用 Docker",
-    "startupSnippet": "启动代码片段",
-    "quickActions": "快捷操作",
-    "proxmoxLastSyncStatus": {
-      "success": "成功"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} 已跳过（未找到 IP ）",
-    "proxmoxStatsUrlCopied": "Proxmox 统计信息 URL 已复制到剪贴板",
-    "rdpUrlCopied": "RDP URL 已复制",
-    "vncUrlCopied": "VNC URL 已复制",
-    "filterAuthStepca": "步骤 CA",
-    "guac": {
-      "noCredential": "无凭据（下方直接填写凭据）",
-      "authTypeDirect": "直接",
-      "authTypeCredential": "凭据",
-      "authTypeNone": "无",
-      "recordingPath": "录制路径",
-      "recordingName": "录制名称",
-      "saveHostFirst": "请先保存主机。",
-      "sharingOptionsAfterSave": "保存主机后，共享选项可用。",
-      "permissionLevel": "权限级别",
-      "typeHeader": "类型",
-      "targetHeader": "目标",
-      "permissionHeader": "权限",
-      "cancelBtn": "取消",
-      "savingBtn": "保存中...",
-      "updateHostBtn": "更新主机",
-      "addHostBtn": "添加主机"
-    },
-    "filterAuthVault": "保险库"
-  },
-  "nav": {
-    "history": "历史记录",
-    "localTerminal": "本地终端",
-    "sshTools": "SSH 工具",
-    "terminal": "终端",
-    "macros": "宏"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "在此输入以广播按键...",
-    "copyOnSelect": "自动复制选定文本",
-    "enableRightClickCopyPaste": "启用右键复制/粘贴",
-    "fillPassword": "填充密码",
-    "fillPasswordMissing": "{{count}} 个所选终端无保存的密码",
-    "fillPasswordSuccess": "已将密码填充到 {{count}} 个终端",
-    "keyRecordingTitle": "按键录制",
-    "noTerminalTabsOpen": "无打开的终端标签页",
-    "recordToTerminals": "录制到终端",
-    "selectAll": "全部",
-    "selectNone": "全不选",
-    "selectTerminalsAbove": "选择上方终端",
-    "settingsTitle": "设置",
-    "startRecording": "开始录制",
-    "stopRecording": "停止录制"
-  },
-  "keybindings": {
-    "copy": "复制选择",
-    "paste": "粘贴",
-    "sendControlCode": "发送 Ctrl+字母信号",
-    "sendText": "发送文本",
-    "controlCodeLabel": "字母",
-    "textLabel": "发送的文本",
-    "appendEnterLabel": "发送后按回车键",
-    "clipboardPermissionNote": "某些浏览器在首次使用时可能会提示授予剪贴板权限。",
-    "textRequired": "请输入要发送的文本",
-    "controlCodeRequired": "请输入单个字母作为控制码",
-    "builtIn": {
-      "copyCtrlC": "复制所选内容（Ctrl+C，仅当选中文本时可用）",
-      "copyCtrlShiftC": "复制所选内容（Ctrl+Shift+C）",
-      "copyCmdC": "复制选定内容（Cmd+C）",
-      "pasteCtrlShiftV": "从剪贴板粘贴（Ctrl+Shift+V）",
-      "ctrlW": "向 shell 发送 Ctrl+W（阻止关闭浏览器标签页）",
-      "ctrlT": "向 shell 发送 Ctrl+T（阻止打开浏览器标签页）",
-      "ctrlN": "向 shell 发送 Ctrl+N（阻止打开浏览器窗口）",
-      "ctrlQ": "向 shell 发送 Ctrl+Q（阻止退出浏览器）"
-    }
-  },
-  "macros": {
-    "title": "宏",
-    "description": "在终端中运行已保存的一系列命令，并对服务器返回的内容做出反应。",
-    "target": "目标",
-    "noTerminal": "没有终端打开",
-    "empty": "暂无宏",
-    "emptyHint": "创建宏来自动化终端流程，例如登录、重启服务或回答提示。",
-    "create": "新宏",
-    "back": "返回宏",
-    "name": "名称",
-    "namePlaceholder": "重启 Web 服务器",
-    "nameRequired": "保存之前，请给宏命名。",
-    "descriptionLabel": "描述",
-    "descriptionPlaceholder": "此宏的功能（可选）",
-    "unsaved": "未保存的更改",
-    "save": "保存",
-    "saved": "宏已保存",
-    "saveFailed": "无法保存宏",
-    "delete": "删除",
-    "deleteTitle": "删除这个宏？",
-    "deleteBody": "\"{{name}}\" 将被永久删除。此操作无法撤销。",
-    "deleted": "宏已删除",
-    "cancel": "取消",
-    "run": "运行",
-    "stop": "停止",
-    "running": "运行中...",
-    "completed": "宏已完成",
-    "failed": "宏失败",
-    "loadFailed": "无法加载宏。",
-    "needTerminal": "首先打开并连接终端。",
-    "noSteps": "此宏目前尚无步骤。请在下方添加步骤。",
-    "addStep": "添加步骤",
-    "stepNumber": "步骤 {{number}}",
-    "removeStep": "移除步骤",
-    "confirmRunTitle": "运行这个宏？",
-    "confirmRunBody": "\"{{name}}\" 将向 {{host}} 发送命令。",
-    "confirmRunAction": "运行宏",
-    "stepTypes": {
-      "send": {
-        "label": "发送命令",
-        "help": "在终端中输入文本，就像你手动输入一样。"
-      },
-      "wait": {
-        "label": "等待输出",
-        "help": "暂停，直到服务器打印出您指定的文本，例如密码提示。"
-      },
-      "delay": {
-        "label": "暂停",
-        "help": "等待一段固定时间后再执行下一步操作。"
-      },
-      "if": {
-        "label": "如果输出包含",
-        "help": "检查服务器目前为止打印的所有内容，然后运行两个分支中的一个。"
-      },
-      "repeat": {
-        "label": "重复",
-        "help": "将其中的步骤执行设定的次数。"
-      }
-    },
-    "send": {
-      "text": "命令或文本",
-      "textPlaceholder": "systemctl restart nginx",
-      "pressEnter": "发送后按回车键",
-      "pressEnterHelp": "关闭此功能即可输入文本而不提交。"
-    },
-    "wait": {
-      "pattern": "等待输出包含",
-      "patternPlaceholder": "密码:",
-      "timeout": "放弃",
-      "onTimeout": "如果它从未出现",
-      "stop": "停止宏",
-      "continue": "无论如何都继续"
-    },
-    "delay": {
-      "duration": "等待"
-    },
-    "ifStep": {
-      "pattern": "如果输出包含",
-      "patternPlaceholder": "活跃：正在运行",
-      "then": "然后这样做",
-      "else": "否则就这样做",
-      "emptyBranch": "没有步骤"
-    },
-    "repeat": {
-      "count": "次数",
-      "times": "次"
-    },
-    "match": {
-      "useRegex": "使用正则表达式进行匹配",
-      "useRegexHelp": "关闭此选项以完全按原文匹配文本。",
-      "invalidRegex": "这不是有效的正则表达式，它将被匹配为纯文本。"
-    },
-    "seconds": "秒",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "需要远程服务器。请在“设置”中连接远程服务器以使用此连接类型。"
-  },
-  "plugin": {
-    "name": "SSH 终端"
-  }
-}
diff --git a/plugins/ssh-terminal/locales/translated/zh_TW.json b/plugins/ssh-terminal/locales/translated/zh_TW.json
deleted file mode 100644
index 371dd7252..000000000
--- a/plugins/ssh-terminal/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,708 +0,0 @@
-{
-  "mobileKeyboard": {
-    "addQuickKey": "新增",
-    "arrowDown": "下箭頭",
-    "arrowLeft": "左箭頭",
-    "arrowRight": "右箭頭",
-    "arrowUp": "上箭頭",
-    "backTab": "⇥",
-    "ctrl": "Ctrl",
-    "delete": "Del",
-    "done": "完成",
-    "editQuickKeys": "編輯快捷鍵",
-    "end": "End",
-    "esc": "Esc",
-    "home": "Home",
-    "pageDown": "PgDn",
-    "pageUp": "PgUp",
-    "paste": "貼上",
-    "quickKeyPlaceholder": "例如：sudo ",
-    "quickKeysDesc": "點選 × 來移除。最多支援 8 個字元。",
-    "quickKeysTitle": "快捷鍵",
-    "removeQuickKey": "移除",
-    "resetDefaults": "重設為預設值",
-    "shift": "Shift",
-    "tab": "Tab"
-  },
-  "terminal": {
-    "autoTmuxEnableFailed": "啟用自動 Tmux 失敗",
-    "autoTmuxEnabled": "對 {{host}}啟用自動 Tmux。它從下一個連接開始生效。",
-    "clipboardHttpWarning": "無法讀取剪貼簿內容。部分瀏覽器限制在 HTTPS 協定之外存取剪貼簿－請嘗試使用 Ctrl+V 貼上，或透過 HTTPS 協定存取 Termix。",
-    "closeTab": "關閉",
-    "connecting": "連線中...",
-    "connectionLost": "連線中斷",
-    "connectionRejected": "連線被伺服器拒絕。請檢查您的驗證與網路設定。",
-    "connectionTimeout": "連線逾時",
-    "enableAutoTmuxAction": "啟用自動 Tmux",
-    "hostKeyRejected": "SSH 主機金鑰驗證被拒絕。連線已取消。",
-    "linkDialogCopy": "複製",
-    "linkDialogOpen": "開啟",
-    "linkDialogTitle": "開啟連結",
-    "maxReconnectAttemptsReached": "已達最大重新連線嘗試次數",
-    "noHostSelected": "未選取主機",
-    "passwordPromptFillTitle": "將已儲存的密碼填入此提示？",
-    "reconnect": "重新連線",
-    "reconnected": "已成功重新連線",
-    "reconnecting": "重新連線中... ({{attempt}}/{{max}})",
-    "autoReconnecting": "連線遺失，正在重新連線…",
-    "searchCaseSensitive": "火柴盒",
-    "searchClose": "關閉（退出）",
-    "searchNext": "下一場比賽（輸入）",
-    "searchNoResults": "沒有結果",
-    "searchPlaceholder": "尋找",
-    "searchPrevious": "最後一場比賽（Shift+Enter）",
-    "searchRegex": "使用正規表示式",
-    "searchResultCount": "{{index}} 的 {{count}}",
-    "searchWholeWord": "整詞匹配",
-    "sessionExpiredNotice": "您之前在 {{host}} 上的會話已在 {{minutes}} 分鐘後斷開連接並過期；shell 及其中運行的所有內容均已丟失。請在此主機上啟用 Auto-Tmux 以保持會話連線。",
-    "sessionExpiredNoticeNoMinutes": "您先前在 {{host}} 上的會話已過期，且已斷線；shell 及其中執行的所有內容均已遺失。請在此主機上啟用 Auto-Tmux 以保持會話有效。",
-    "sessionTakenOver": "工作階段已在另一個分頁中開啟。正在重新連線…",
-    "tmuxAttached": "已附加的用戶端",
-    "tmuxAttachedCount": "{{count}} 個已附加",
-    "tmuxCopyHint": "調整選取範圍並按下 Enter 以複製到剪貼簿",
-    "tmuxCreateNew": "開始新的工作階段",
-    "tmuxDetached": "已從 tmux 工作階段中斷連線",
-    "tmuxLastActivity": "上次活動",
-    "tmuxSessionAttached": "tmux 工作階段已附加：{{name}}",
-    "tmuxSessionCreated": "tmux 工作階段已建立：{{name}}",
-    "tmuxSessionPickerDesc": "在此主機上找到現有的 tmux 工作階段。選擇一個以重新附加或建立新的工作階段。",
-    "tmuxSessionPickerTitle": "tmux 工作階段",
-    "tmuxTimeDays": "{{count}} 天前",
-    "tmuxTimeHours": "{{count}} 小時前",
-    "tmuxTimeJustNow": "剛剛",
-    "tmuxTimeMinutes": "{{count}} 分鐘前",
-    "tmuxUnavailable": "遠端主機未安裝 tmux，切換回標準 shell",
-    "tmuxWindowCount": "{{count}} 個視窗",
-    "tmuxWindows": "視窗",
-    "unknownError": "發生未知錯誤",
-    "websocketAbnormalClose": "連線意外關閉。這可能是由於反向代理或 SSL 設定問題所導致。請檢查伺服器記錄。",
-    "websocketError": "WebSocket 連線錯誤",
-    "clipboardReadFailed": "從剪貼簿讀取失敗。請確認已授予剪貼簿權限。",
-    "clipboardWriteFailed": "複製到剪貼簿失敗。請確認頁面是透過 HTTPS 或 localhost 提供。",
-    "connected": "已連線",
-    "totpCodeLabel": "驗證碼",
-    "duplicateTab": "重複標籤頁",
-    "imageChooseFile": "選擇圖像文件",
-    "imageUploaded": "上傳圖片： {{path}}",
-    "imageClipboardUnavailable": "此瀏覽器無法讀取剪貼簿中的圖像",
-    "imageClipboardEmpty": "剪貼簿中未找到影像",
-    "localShell": "本地端 shell",
-    "autocompleteHintComplete": "按 Tab 鍵或 Enter 鍵完成",
-    "autocompleteHintNavigate": "向上向下導航",
-    "autocompleteHintClose": "按 Esc 鍵關閉"
-  },
-  "terminalToolbar": {
-    "detachTmux": "分離 tmux",
-    "detachTmuxDescription": "分離 tmux 會話",
-    "dismissError": "忽略圖像錯誤",
-    "hideToolbar": "隱藏工具列",
-    "image": "圖片操作（僅限圖片）",
-    "imageActionFailed": "圖片操作失敗",
-    "layout": "工具列顯示模式",
-    "layoutExpanded": "擴展了指標",
-    "layoutIcon": "僅圖示",
-    "layoutLabeled": "圖標和標籤",
-    "moveToolbar": "移動工具列",
-    "moveToolbarHint": "拖曳即可重新定位工具列",
-    "paste": "貼上圖片",
-    "pasteImage": "從剪貼簿貼上圖片（僅限圖片）",
-    "retry": "重試",
-    "showToolbar": "展開工具列",
-    "upload": "上傳圖片",
-    "uploadImage": "將圖片上傳到主機",
-    "uploadingImage": "上傳中..."
-  },
-  "history": {
-    "noTerminalSelected": "未選取終端機",
-    "noTerminalSelectedHint": "開啟 SSH 終端機分頁以檢視其命令歷史記錄",
-    "searchPlaceholder": "搜尋歷史記錄...",
-    "clearAll": "全部清除",
-    "noHistoryEntries": "無歷史記錄項目",
-    "trackingDisabled": "歷史記錄追蹤已停用",
-    "trackingDisabledHint": "在該主機的 SSH 終端機標籤中啟用命令歷史記錄。",
-    "commandCount_one": "{{count}} 指令",
-    "commandCount_other": "{{count}} 指令"
-  },
-  "touchInput": {
-    "enabled": "啟用觸控輸入",
-    "enabledDesc": "允許終端單指觸摸滾動",
-    "momentumEnabled": "啟用動能",
-    "momentumEnabledDesc": "滑動後繼續短暫滾動。",
-    "advanced": "進階",
-    "resetDefaults": "重設為預設值",
-    "dragThreshold": "阻力閾值",
-    "maxWheelDelta": "最大車輪增量",
-    "momentumSampleWindow": "動量樣本窗口",
-    "releaseGracePeriod": "發布寬限期",
-    "minimumVelocity": "最低速度",
-    "maximumVelocity": "最大速度",
-    "maximumDuration": "最長持續時間",
-    "maximumTravel": "最大行程",
-    "decayTime": "衰減時間",
-    "pixelsPerTick": "每刻像素數",
-    "maximumFrameInterval": "最大訊框間隔",
-    "maximumTicksPerFrame": "每格最大幀數"
-  },
-  "imageStorage": {
-    "instanceId": "終端機會話實例 ID",
-    "instanceIdDesc": "用於測試可見性的已連接終端選項卡的實例 ID。",
-    "selectedModeUnavailable": "不可用",
-    "test": "測試",
-    "testing": "測試中…",
-    "testFailed": "影像儲存測試失敗",
-    "testConnected": "終端會話已連線。",
-    "testNotConnected": "沒有與此實例 ID 連線的終端會話。",
-    "testSelectedMode": "上傳時請使用： {{mode}}",
-    "testLocalVisible": "本機目錄對連接的主機可見。",
-    "testLocalNotVisible": "從連線的主機上看不到本機目錄。"
-  },
-  "settings": {
-    "admin": {
-      "group": {
-        "touch": "觸摸輸入",
-        "images": "影像儲存",
-        "sessions": "工作階段",
-        "newHosts": "新主持人"
-      },
-      "sessionTimeoutMinutes": {
-        "label": "終端會話持久性",
-        "description": "斷開連線的終端機在伺服器上保持活動狀態的時間，最短 1 分鐘，最長 1440 分鐘。對於必須保持活動狀態超過此時間的會話，請在主機上啟用自動終端機重複使用 (Auto-Tmux)。"
-      },
-      "commandHistoryEnabled": {
-        "label": "指令歷程",
-        "description": "允許記錄指令歷史記錄。停用時，無論各主機設定如何，都不會儲存歷史記錄。"
-      },
-      "commandHistoryForNewHosts": {
-        "label": "新主機的命令歷史記錄",
-        "description": "是否開啟新主機的命令歷史記錄功能。"
-      },
-      "imageStorageMode": {
-        "label": "儲存模式",
-        "description": "終端鏡像貼上和上傳位置已設定。自動選擇連接、本機和遠端（SFTP）鏡像的功能已修復。",
-        "auto": "自動",
-        "local": "本機",
-        "remoteSftp": "遠端（SFTP）"
-      },
-      "imageLocalDir": {
-        "label": "本地目錄",
-        "description": "Termix 後端本機模式寫入映像的絕對路徑。儲存後不再顯示。空路徑使用 TERMIX_IMAGE_DIR。"
-      },
-      "imageHostPath": {
-        "label": "主機路徑",
-        "description": "終端代理接收到的本機目錄的主機端視圖。"
-      },
-      "imageTtlMs": {
-        "label": "TTL（毫秒）",
-        "description": "上傳的圖片保留時間，以毫秒為單位。空圖片使用 TERMIX_IMAGE_TTL_MS，即一小時。"
-      },
-      "imageMaxCount": {
-        "label": "最大影像數量",
-        "description": "一次保留大部分影像。空集合使用 TERMIX_MAX_IMAGE_COUNT 或 100。"
-      },
-      "imageMaxBytes": {
-        "label": "最大儲存位元組",
-        "description": "一次儲存最多位元組的圖像。空影像使用 TERMIX_MAX_IMAGE_STORAGE_BYTES 或 5 GiB。"
-      },
-      "sessionPersistence": {
-        "label": "斷開連線後仍保持會話",
-        "description": "在上述時間內，保持伺服器上斷開連線的終端機處於活動狀態，以便重新開啟其標籤頁時可以從上次中斷的地方繼續操作。"
-      },
-      "newHostAutoTmux": {
-        "label": "自動 Tmux",
-        "description": "在 tmux 中執行新主機的終端，以便在斷開連線後會話仍然存在（主機上需要安裝 tmux）。"
-      },
-      "newHostTheme": {
-        "label": "新主持人主題",
-        "description": "新主機啟動時所使用的終端主題。"
-      },
-      "newHostFontFamily": {
-        "label": "新主機字體",
-        "description": "新主機啟動時所使用的終端字體。"
-      },
-      "newHostFontSize": {
-        "label": "新主機字體大小",
-        "description": "新主機啟動時所使用的終端字體大小，以像素為單位。"
-      },
-      "newHostCursorStyle": {
-        "label": "新主機的遊標樣式"
-      },
-      "newHostCursorBlink": {
-        "label": "新主機閃爍遊標"
-      }
-    },
-    "host": {
-      "enableTerminalToolbar": {
-        "label": "啟用終端機工具列",
-        "description": "在目前終端上顯示一個快速存取工具列，用於存取該主機的工具和即時統計資訊。"
-      },
-      "terminalToolbarPosition": {
-        "label": "工具列位置",
-        "description": "工具列位於終端機中的位置。您仍然可以從那裡拖曳它。",
-        "bottom": "底部中心",
-        "bottomLeft": "左下角",
-        "bottomRight": "右下角",
-        "top": "頂部中心",
-        "topLeft": "左上",
-        "topRight": "右上角"
-      },
-      "terminalToolbarStartState": {
-        "label": "工具列起始狀態",
-        "description": "終端連接時工具列是以展開形式還是最小化形式打開",
-        "expanded": "擴充",
-        "collapsed": "最小化"
-      },
-      "terminalToolbarDisplay": {
-        "label": "工具列顯示模式",
-        "description": "工具列按鈕的顯示方式。 「上次使用」選項會保留您在工具列中選擇的內容。",
-        "remember": "上次使用",
-        "icon": "僅圖示",
-        "labeled": "圖標和標籤",
-        "expanded": "補充統計數據"
-      },
-      "terminalToolbarShowStatus": {
-        "label": "顯示即時統計數據",
-        "description": "在展開模式下，工具列按鈕上方顯示即時主持人統計訊息"
-      },
-      "terminalToolbarFade": {
-        "label": "空閒時淡出",
-        "description": "將工具列淡出，直到滑鼠懸停在其上方。"
-      },
-      "enableCommandHistory": {
-        "label": "指令歷程",
-        "description": "記錄在此終端機中執行的命令，用於歷史記錄與自動完成"
-      },
-      "enableTerminal": {
-        "label": "啟用終端機",
-        "description": "為該主機提供 SSH 終端。"
-      },
-      "inheritAppearance": {
-        "label": "使用用戶預設設定"
-      },
-      "theme": {
-        "label": "主題"
-      },
-      "cursorBlink": {
-        "label": "閃爍的遊標"
-      },
-      "cursorStyle": {
-        "label": "遊標樣式"
-      },
-      "fontSize": {
-        "label": "字體大小"
-      },
-      "fontFamily": {
-        "label": "字體"
-      },
-      "scrollback": {
-        "label": "返回"
-      },
-      "letterSpacing": {
-        "label": "字母間距"
-      },
-      "lineHeight": {
-        "label": "行高"
-      },
-      "bellStyle": {
-        "label": "鐘"
-      },
-      "minimumContrastRatio": {
-        "label": "最小對比度"
-      },
-      "backgroundImage": {
-        "label": "背景圖片"
-      },
-      "backgroundImageOpacity": {
-        "label": "背景圖像不透明度"
-      },
-      "customThemeColors": {
-        "label": "自訂主題顏色"
-      },
-      "rightClickSelectsWord": {
-        "label": "右鍵單擊選擇單字"
-      },
-      "macOptionIsMeta": {
-        "label": "選項是 Meta"
-      },
-      "fastScrollModifier": {
-        "label": "快速滾動鍵"
-      },
-      "fastScrollSensitivity": {
-        "label": "快速滾動速度"
-      },
-      "backspaceMode": {
-        "label": "退格鍵"
-      },
-      "autoMosh": {
-        "label": "自動衝撞"
-      },
-      "moshCommand": {
-        "label": "Mosh 指令"
-      },
-      "autoTmux": {
-        "label": "自動 tmux"
-      },
-      "useSSHTitle": {
-        "label": "使用 SSH 標題"
-      },
-      "syntaxHighlighting": {
-        "label": "語法高亮"
-      },
-      "syntaxHighlightingOptions": {
-        "label": "語法高亮類別"
-      },
-      "linkClickBehavior": {
-        "label": "點擊連結"
-      },
-      "localEcho": {
-        "label": "本地迴聲"
-      },
-      "passwordPromptAutoFill": {
-        "label": "主動提供密碼提示訊息"
-      },
-      "sudoPasswordAutoFill": {
-        "label": "填寫 sudo 提示符"
-      },
-      "autoReconnect": {
-        "label": "自動重新連接"
-      }
-    },
-    "user": {
-      "commandAutocomplete": {
-        "label": "指令自動完成",
-        "description": "輸入時按 Tab 鍵可顯示自動完成功能。"
-      },
-      "localEcho": {
-        "label": "本地迴聲",
-        "description": "利用安全的本地按鍵預測來降低感知輸入延遲"
-      },
-      "linkClickBehavior": {
-        "label": "終端機連結點選",
-        "description": "在終端機中點選連結時的預設行為"
-      },
-      "customThemes": {
-        "label": "已儲存的主題"
-      }
-    }
-  },
-  "palette": {
-    "localTerminal": "本地端"
-  },
-  "permissions": {
-    "sessions": {
-      "title": "使用即時終端會話",
-      "description": "允許其他功能（例如會話共享和錄製）存取您的即時終端會話。"
-    },
-    "history": {
-      "title": "讀取命令歷史記錄",
-      "description": "允許其他功能（例如 AI 助理）讀取您的命令歷史記錄。"
-    }
-  },
-  "hosts": {
-    "tabTerminal": "終端機",
-    "addHost": "新增主機",
-    "applyGlobalThemeTooltip": "應用此主題",
-    "backgroundImageDesc": "選用的終端機背景圖片 URL",
-    "backgroundImageLabel": "背景圖片 URL",
-    "backgroundImageOpacityLabel": "背景圖片不透明度",
-    "backspaceMode": "退格鍵模式",
-    "backspaceModeControlH": "Control-H（BS）",
-    "backspaceModeLabel": "退格鍵模式",
-    "backspaceModeNormal": "正常（DEL）",
-    "behaviorAndAdvanced": "行為與進階",
-    "bellStyle": "鈴聲樣式",
-    "bellStyleBoth": "兩個都",
-    "bellStyleLabel": "鈴聲樣式",
-    "bellStyleNone": "沒有",
-    "bellStyleSound": "聲音",
-    "bellStyleVisual": "視覺的",
-    "colorTheme": "色彩主題",
-    "cursorBlink": "游標閃爍",
-    "cursorBlinking": "游標閃爍",
-    "cursorBlinkingDesc": "啟用終端機游標的閃爍動畫",
-    "cursorStyle": "游標樣式",
-    "cursorStyleBar": "直線",
-    "cursorStyleBlock": "方塊",
-    "cursorStyleLabel": "游標樣式",
-    "cursorStyleUnderline": "底線",
-    "customThemeAnsiColors": "ANSI 色彩",
-    "customThemeBackground": "背景",
-    "customThemeBlack": "黑色",
-    "customThemeBlue": "藍色",
-    "customThemeBrightBlack": "亮黑色",
-    "customThemeBrightBlue": "亮藍色",
-    "customThemeBrightCyan": "亮青色",
-    "customThemeBrightGreen": "亮綠色",
-    "customThemeBrightMagenta": "亮洋紅色",
-    "customThemeBrightRed": "亮紅色",
-    "customThemeBrightWhite": "亮白色",
-    "customThemeBrightYellow": "亮黃色",
-    "customThemeColors": "自訂色彩",
-    "customThemeCursor": "游標",
-    "customThemeCursorAccent": "游標強調色",
-    "customThemeCyan": "青色",
-    "customThemeForeground": "前景",
-    "customThemeGreen": "綠色",
-    "customThemeMagenta": "洋紅色",
-    "customThemeRed": "紅色",
-    "customThemeResetTooltip": "重設為預設值",
-    "customThemeSelection": "選取範圍",
-    "customThemeWhite": "白色",
-    "customThemeYellow": "黃色",
-    "deleteGlobalThemeTooltip": "刪除此主題",
-    "docsLink": "檢視文件",
-    "enableAutoMosh": "啟用自動 Mosh",
-    "enableAutoMoshDesc": "如果可用，優先使用 Mosh 而非 SSH",
-    "enableAutoTmux": "啟用自動 Tmux",
-    "enableAutoTmuxDesc": "透過在 tmux 中執行（tmux 必須安裝在主機上），可以在斷開連線和瀏覽器重新啟動後保持 shell 及其中執行的所有內容處於活動狀態。",
-    "fastScrollModifier": "快速捲動修飾鍵",
-    "fastScrollModifierAlt": "Alt",
-    "fastScrollModifierCtrl": "Ctrl",
-    "fastScrollModifierLabel": "快速捲動修飾鍵",
-    "fastScrollModifierShift": "Shift",
-    "fastScrollSensitivity": "快速捲動靈敏度",
-    "fastScrollSensitivityLabel": "快速捲動靈敏度",
-    "fontFamily": "字型系列",
-    "fontFamilyCustomHint": "您可以選擇內建字體，或選擇「自訂」並輸入系統中已安裝字體的確切名稱（例如 MesloLGS NF、Noto Sans Mono）。 Termix 無法自動安裝字體，請先在您的作業系統上安裝字體。",
-    "fontFamilyCustomOption": "風俗...",
-    "fontFamilyCustomPlaceholder": "確切的字體名稱，例如 MesloLGS NF",
-    "fontFamilyLabel": "字型系列",
-    "fontSize": "字型大小",
-    "fontSizeLabel": "字型大小",
-    "hostNotFound": "找不到主機",
-    "letterSpacing": "字母間距",
-    "letterSpacingPx": "字元間距 (px)",
-    "lineHeight": "行高",
-    "lineHeightLabel": "行高",
-    "linkClickBehaviorConfirm": "顯示彈出視窗以開啟或複製",
-    "linkClickBehaviorDesc": "控制在終端機中點擊連結時的行為。使用「預設」將遵循應用程式級別的設定。",
-    "linkClickBehaviorDirect": "直接開啟",
-    "linkClickBehaviorLabel": "連結點擊行為",
-    "loadingHost": "正在載入主機...",
-    "localEchoAuto": "自動的",
-    "localEchoDesc": "在連線速度較慢的情況下，本地預測可安全列印的按鍵操作。密碼提示和控制輸入永遠不會被回顯。",
-    "localEchoLabel": "本地迴聲",
-    "localEchoOff": "關閉",
-    "localEchoOn": "始終開啟",
-    "macOptionIsMetaLabel": "選項鍵發送元數據",
-    "macOptionIsMetaShortDesc": "停用在 macOS 上使用 Option/Alt 鍵輸入特殊字元（例如 @ 或 |）而不是傳送 Meta 訊息的功能。",
-    "moshCommand": "MOSH 指令",
-    "moshCommandLabel": "Mosh 命令",
-    "noSavedThemes": "尚未儲存任何主題",
-    "none": "無",
-    "passwordPromptAutoFillDesc": "當終端機要求輸入密碼時，提示輸入已儲存的密碼。關閉此選項可使此主機上的任何密碼永不自動填入。",
-    "passwordPromptAutoFillLabel": "提供密碼自動填入功能",
-    "autoReconnectLabel": "自動重新連接",
-    "autoReconnectDesc": "當 SSH 連線中斷時（例如網路中斷或睡眠後），會自動重新連線。保留滾動條。",
-    "rightClickSelectsWord": "按右鍵選取單字",
-    "rightClickSelectsWordLabel": "右鍵選取單字",
-    "rightClickSelectsWordShortDesc": "右鍵點擊時選取游標下的單字",
-    "saveAsGlobalTheme": "另存為全域主題",
-    "saveGlobalThemeError": "主題保存失敗",
-    "saveGlobalThemeNamePrompt": "請為此主題輸入名稱",
-    "saveGlobalThemeSuccess": "主題已儲存",
-    "savedThemesLabel": "已儲存的主題",
-    "scrollbackBufferLabel": "回滾緩衝區",
-    "scrollbackMaxLines": "歷史記錄保留的最大行數",
-    "sudoPasswordAutoFill": "Sudo 密碼自動填寫",
-    "sudoPasswordAutoFillDesc": "儲存 sudo 密碼，以便主機指標、終端機提示及其他功能能自動執行特權命令。",
-    "sudoPasswordAutoFillLabel": "Sudo 密碼自動填入",
-    "syntaxCategoryIpAddresses": "IP 位址",
-    "syntaxCategoryIpAddressesDesc": "192.168.1.1, 10.0.0.1:8080",
-    "syntaxCategoryLogLevels": "日誌層級",
-    "syntaxCategoryLogLevelsDesc": "error, warn, info, debug, fatal",
-    "syntaxCategoryNumbers": "帶標籤的數字",
-    "syntaxCategoryNumbersDesc": "port 8080, exit 1, status 404",
-    "syntaxCategoryPaths": "檔案路徑",
-    "syntaxCategoryPathsDesc": "/usr/share/doc, ~/file.txt",
-    "syntaxCategoryTimestamps": "時間戳記",
-    "syntaxCategoryTimestampsDesc": "[12:34:56], 2024-01-15",
-    "syntaxCategoryUrls": "URL",
-    "syntaxCategoryUrlsDesc": "https://example.com",
-    "syntaxHighlightingDesc": "為終端機輸出上色（錯誤、路徑、IP、時間戳記）",
-    "syntaxHighlightingLabel": "語法突顯",
-    "terminalAppearance": "終端機外觀",
-    "theme": "主題",
-    "themePreview": "主題預覽",
-    "useSSHTitleDesc": "從 shell 視窗標題更新頁籤標題，而非主機名稱",
-    "useSSHTitleLabel": "使用 SSH 視窗標題",
-    "enableTunnel": "啟用通道",
-    "enableFileManager": "啟用檔案管理員",
-    "enableDocker": "啟用 Docker",
-    "startupSnippet": "啟動程式碼片段",
-    "quickActions": "快速動作",
-    "proxmoxLastSyncStatus": {
-      "success": "成功"
-    },
-    "proxmoxResultSkippedNoIp": "{{count}} 已跳過（找不到 IP 位址）",
-    "proxmoxStatsUrlCopied": "Proxmox 統計資料 URL 已複製到剪貼簿",
-    "rdpUrlCopied": "RDP URL 已複製",
-    "vncUrlCopied": "VNC URL 已複製",
-    "filterAuthStepca": "步驟 CA",
-    "guac": {
-      "noCredential": "無憑證（下方直接輸入憑證）",
-      "authTypeDirect": "直接",
-      "authTypeCredential": "憑證",
-      "authTypeNone": "取消全選",
-      "recordingPath": "錄製路徑",
-      "recordingName": "錄製名稱",
-      "saveHostFirst": "請先儲存主機。",
-      "sharingOptionsAfterSave": "主機儲存後即可使用分享選項。",
-      "permissionLevel": "權限等級",
-      "typeHeader": "類型",
-      "targetHeader": "目標",
-      "permissionHeader": "權限",
-      "cancelBtn": "取消",
-      "savingBtn": "儲存中…",
-      "updateHostBtn": "更新主機",
-      "addHostBtn": "新增主機"
-    },
-    "filterAuthVault": "保險庫"
-  },
-  "nav": {
-    "history": "歷史記錄",
-    "localTerminal": "本地端",
-    "sshTools": "SSH 工具",
-    "terminal": "終端機",
-    "macros": "宏"
-  },
-  "sshTools": {
-    "broadcastInputPlaceholder": "在此輸入以廣播按鍵輸入...",
-    "copyOnSelect": "自動複製選取文本",
-    "enableRightClickCopyPaste": "啟用右鍵複製/貼上",
-    "fillPassword": "填入密碼",
-    "fillPasswordMissing": "選取的 {{count}} 個終端機沒有已儲存的密碼",
-    "fillPasswordSuccess": "已將密碼填入 {{count}} 個終端機",
-    "keyRecordingTitle": "按鍵錄製",
-    "noTerminalTabsOpen": "無終端機分頁開啟",
-    "recordToTerminals": "錄製至終端機",
-    "selectAll": "全選",
-    "selectNone": "取消全選",
-    "selectTerminalsAbove": "選取上方的終端機",
-    "settingsTitle": "設定",
-    "startRecording": "開始錄製",
-    "stopRecording": "停止錄製"
-  },
-  "keybindings": {
-    "copy": "複製選擇",
-    "paste": "貼上",
-    "sendControlCode": "發送 Ctrl+字母訊號",
-    "sendText": "傳簡訊",
-    "controlCodeLabel": "信",
-    "textLabel": "發送的文字",
-    "appendEnterLabel": "發送後按回車鍵",
-    "clipboardPermissionNote": "某些瀏覽器在首次使用時可能會提示授予剪貼簿權限。",
-    "textRequired": "請輸入要發送的文字",
-    "controlCodeRequired": "請輸入單一字母作為控制碼",
-    "builtIn": {
-      "copyCtrlC": "複製所選內容（Ctrl+C，僅在選取文字時可用）",
-      "copyCtrlShiftC": "複製所選內容（Ctrl+Shift+C）",
-      "copyCmdC": "複製選定內容（Cmd+C）",
-      "pasteCtrlShiftV": "從剪貼簿貼上（Ctrl+Shift+V）",
-      "ctrlW": "向 shell 發送 Ctrl+W（阻止關閉瀏覽器標籤頁）",
-      "ctrlT": "向 shell 發送 Ctrl+T（阻止開啟瀏覽器標籤頁）",
-      "ctrlN": "向 shell 發送 Ctrl+N（阻止開啟瀏覽器視窗）",
-      "ctrlQ": "向 shell 發送 Ctrl+Q（阻止退出瀏覽器）"
-    }
-  },
-  "macros": {
-    "title": "宏",
-    "description": "在終端機中執行已儲存的一系列命令，並對伺服器傳回的內容做出反應。",
-    "target": "目標",
-    "noTerminal": "沒有終端機打開",
-    "empty": "暫無宏",
-    "emptyHint": "建立一個巨集來自動化終端流程，例如登入、重新啟動服務或回答提示。",
-    "create": "新宏",
-    "back": "回傳宏",
-    "name": "名稱",
-    "namePlaceholder": "重啟Web伺服器",
-    "nameRequired": "儲存之前，請先為巨集命名。",
-    "descriptionLabel": "說明",
-    "descriptionPlaceholder": "此巨集的功能（選用）",
-    "unsaved": "未儲存的變更",
-    "save": "儲存",
-    "saved": "巨集已儲存",
-    "saveFailed": "無法保存巨集",
-    "delete": "刪除",
-    "deleteTitle": "刪除這個巨集？",
-    "deleteBody": "“{{name}}”將永久刪除。此操作無法撤銷。",
-    "deleted": "巨集已刪除",
-    "cancel": "取消",
-    "run": "執行",
-    "stop": "停止位元",
-    "running": "跑步...",
-    "completed": "巨集已完成",
-    "failed": "巨集失敗",
-    "loadFailed": "無法載入巨集。",
-    "needTerminal": "首先打開並連接終端。",
-    "noSteps": "此巨集目前尚無步驟。請在下方新增步驟。",
-    "addStep": "新增步驟",
-    "stepNumber": "步驟 {{number}}",
-    "removeStep": "移除步驟",
-    "confirmRunTitle": "運行這個巨集？",
-    "confirmRunBody": "\"{{name}}\" 將向 {{host}} 傳送指令。",
-    "confirmRunAction": "運行巨集",
-    "stepTypes": {
-      "send": {
-        "label": "發送命令",
-        "help": "在終端機中輸入文本，就像你手動輸入一樣。"
-      },
-      "wait": {
-        "label": "等待輸出",
-        "help": "暫停，直到伺服器列印您指定的文本，例如密碼提示。"
-      },
-      "delay": {
-        "label": "暫停",
-        "help": "等待一段固定時間後再執行下一步操作。"
-      },
-      "if": {
-        "label": "如果輸出包含",
-        "help": "檢查伺服器目前為止列印的所有內容，然後執行兩個分支中的一個。"
-      },
-      "repeat": {
-        "label": "重複",
-        "help": "將其中的步驟執行設定的次數。"
-      }
-    },
-    "send": {
-      "text": "命令或文字",
-      "textPlaceholder": "systemctl restart nginx",
-      "pressEnter": "發送後按回車鍵",
-      "pressEnterHelp": "關閉此功能即可輸入文字而不提交。"
-    },
-    "wait": {
-      "pattern": "等待輸出包含",
-      "patternPlaceholder": "密碼:",
-      "timeout": "放棄",
-      "onTimeout": "如果它從未出現",
-      "stop": "停止宏",
-      "continue": "無論如何，繼續前進。"
-    },
-    "delay": {
-      "duration": "等待"
-    },
-    "ifStep": {
-      "pattern": "如果輸出包含",
-      "patternPlaceholder": "活躍：正在運行",
-      "then": "然後這樣做",
-      "else": "否則就這樣做",
-      "emptyBranch": "沒有步驟"
-    },
-    "repeat": {
-      "count": "次數",
-      "times": "時代"
-    },
-    "match": {
-      "useRegex": "使用正規表示式進行匹配",
-      "useRegexHelp": "請刪除此行以完全按照原文填寫。",
-      "invalidRegex": "這不是有效的正規表示式，它將被匹配為純文字。"
-    },
-    "seconds": "秒",
-    "secondsShort": "{{count}}s"
-  },
-  "errors": {
-    "remoteServerRequired": "需要遠端伺服器。請在「設定」中連接遠端伺服器以使用此連線類型。"
-  },
-  "plugin": {
-    "name": "SSH 終端機"
-  }
-}
diff --git a/plugins/ssh-terminal/manifest.json b/plugins/ssh-terminal/manifest.json
deleted file mode 100644
index 1684e7ddc..000000000
--- a/plugins/ssh-terminal/manifest.json
+++ /dev/null
@@ -1,832 +0,0 @@
-{
-  "id": "ssh-terminal",
-  "name": "SSH Terminal",
-  "version": "1.0.0",
-  "description": "SSH terminal sessions with jump hosts, host key checks, command history and a local terminal in the desktop app.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Terminal",
-  "icon": "SquareTerminal",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "hosts:read",
-    "credentials:use",
-    "credentials:read",
-    "ssh:connect",
-    "network:serve",
-    "db:own",
-    "events:core",
-    "ui:surface"
-  ],
-  "provides": [
-    {
-      "service": "sessions.live",
-      "version": "1.0.0",
-      "permission": "ssh-terminal.sessions",
-      "names": ["ssh"]
-    },
-    {
-      "service": "terminal.history",
-      "version": "1.0.0",
-      "permission": "ssh-terminal.history"
-    }
-  ],
-  "requires": [
-    {
-      "service": "tmux.sessions",
-      "versionRange": "^1.0.0",
-      "optional": true
-    },
-    {
-      "service": "sessions.sharing",
-      "versionRange": "^1.0.0",
-      "optional": true
-    },
-    {
-      "service": "recordings.writer",
-      "versionRange": "^1.0.0",
-      "optional": true
-    }
-  ],
-  "contributes": {
-    "tabs": [
-      {
-        "id": "terminal",
-        "titleKey": "nav.terminal",
-        "icon": "SquareTerminal",
-        "openFrom": ["host-context-menu", "palette"]
-      },
-      {
-        "id": "local-terminal",
-        "titleKey": "nav.localTerminal",
-        "icon": "Laptop",
-        "openFrom": ["rail", "palette"]
-      }
-    ],
-    "panels": [
-      {
-        "id": "history",
-        "titleKey": "nav.history",
-        "icon": "History"
-      },
-      {
-        "id": "ssh-tools",
-        "titleKey": "nav.sshTools",
-        "icon": "Hammer"
-      },
-      {
-        "id": "macros",
-        "titleKey": "nav.macros",
-        "icon": "Braces"
-      }
-    ],
-    "actionSlots": [
-      {
-        "id": "terminal.toolbar",
-        "accepts": ["button"]
-      },
-      {
-        "id": "terminal.toolbarStatus",
-        "accepts": ["component"]
-      },
-      {
-        "id": "terminal.sidePanel",
-        "accepts": ["component"]
-      },
-      {
-        "id": "terminal.overlay",
-        "accepts": ["component"]
-      }
-    ],
-    "permissions": [
-      {
-        "name": "sessions",
-        "titleKey": "permissions.sessions.title",
-        "descriptionKey": "permissions.sessions.description",
-        "defaultRoles": ["admin", "user"]
-      },
-      {
-        "name": "history",
-        "titleKey": "permissions.history.title",
-        "descriptionKey": "permissions.history.description",
-        "defaultRoles": ["admin", "user"]
-      }
-    ],
-    "settings": {
-      "admin": [
-        {
-          "key": "sessionTimeoutMinutes",
-          "type": "number",
-          "labelKey": "settings.admin.sessionTimeoutMinutes.label",
-          "descriptionKey": "settings.admin.sessionTimeoutMinutes.description",
-          "group": "settings.admin.group.sessions",
-          "min": 1,
-          "max": 1440,
-          "default": 30
-        },
-        {
-          "key": "sessionPersistence",
-          "type": "boolean",
-          "labelKey": "settings.admin.sessionPersistence.label",
-          "descriptionKey": "settings.admin.sessionPersistence.description",
-          "group": "settings.admin.group.sessions",
-          "default": true
-        },
-        {
-          "key": "commandHistoryEnabled",
-          "type": "boolean",
-          "labelKey": "settings.admin.commandHistoryEnabled.label",
-          "descriptionKey": "settings.admin.commandHistoryEnabled.description",
-          "group": "settings.admin.group.sessions",
-          "default": true
-        },
-        {
-          "key": "commandHistoryForNewHosts",
-          "type": "boolean",
-          "labelKey": "settings.admin.commandHistoryForNewHosts.label",
-          "descriptionKey": "settings.admin.commandHistoryForNewHosts.description",
-          "default": true,
-          "hidden": true
-        },
-        {
-          "key": "newHostTheme",
-          "type": "custom",
-          "component": "newHostTheme",
-          "group": "settings.admin.group.newHosts",
-          "default": "termix",
-          "hidden": true
-        },
-        {
-          "key": "newHostFontFamily",
-          "type": "custom",
-          "component": "newHostFontFamily",
-          "group": "settings.admin.group.newHosts",
-          "default": "Caskaydia Cove Nerd Font Mono",
-          "hidden": true
-        },
-        {
-          "key": "newHostFontSize",
-          "type": "number",
-          "labelKey": "settings.admin.newHostFontSize.label",
-          "descriptionKey": "settings.admin.newHostFontSize.description",
-          "group": "settings.admin.group.newHosts",
-          "min": 8,
-          "max": 36,
-          "default": 14,
-          "hidden": true
-        },
-        {
-          "key": "newHostCursorStyle",
-          "type": "select",
-          "labelKey": "settings.admin.newHostCursorStyle.label",
-          "group": "settings.admin.group.newHosts",
-          "default": "bar",
-          "options": [
-            {
-              "value": "block",
-              "labelKey": "hosts.cursorStyleBlock"
-            },
-            {
-              "value": "underline",
-              "labelKey": "hosts.cursorStyleUnderline"
-            },
-            {
-              "value": "bar",
-              "labelKey": "hosts.cursorStyleBar"
-            }
-          ],
-          "hidden": true
-        },
-        {
-          "key": "newHostCursorBlink",
-          "type": "boolean",
-          "labelKey": "settings.admin.newHostCursorBlink.label",
-          "group": "settings.admin.group.newHosts",
-          "default": true,
-          "hidden": true
-        },
-        {
-          "key": "newHostAutoTmux",
-          "type": "boolean",
-          "labelKey": "settings.admin.newHostAutoTmux.label",
-          "descriptionKey": "settings.admin.newHostAutoTmux.description",
-          "group": "settings.admin.group.newHosts",
-          "default": false,
-          "hidden": true
-        },
-        {
-          "key": "touchInput",
-          "type": "custom",
-          "component": "touchInput",
-          "group": "settings.admin.group.touch"
-        },
-        {
-          "key": "imageStorageMode",
-          "type": "select",
-          "labelKey": "settings.admin.imageStorageMode.label",
-          "descriptionKey": "settings.admin.imageStorageMode.description",
-          "group": "settings.admin.group.images",
-          "options": [
-            {
-              "value": "auto",
-              "labelKey": "settings.admin.imageStorageMode.auto"
-            },
-            {
-              "value": "local",
-              "labelKey": "settings.admin.imageStorageMode.local"
-            },
-            {
-              "value": "remote-sftp",
-              "labelKey": "settings.admin.imageStorageMode.remoteSftp"
-            }
-          ]
-        },
-        {
-          "key": "imageLocalDir",
-          "type": "secret",
-          "labelKey": "settings.admin.imageLocalDir.label",
-          "descriptionKey": "settings.admin.imageLocalDir.description",
-          "group": "settings.admin.group.images"
-        },
-        {
-          "key": "imageHostPath",
-          "type": "string",
-          "labelKey": "settings.admin.imageHostPath.label",
-          "descriptionKey": "settings.admin.imageHostPath.description",
-          "group": "settings.admin.group.images"
-        },
-        {
-          "key": "imageTtlMs",
-          "type": "number",
-          "labelKey": "settings.admin.imageTtlMs.label",
-          "descriptionKey": "settings.admin.imageTtlMs.description",
-          "group": "settings.admin.group.images",
-          "min": 0
-        },
-        {
-          "key": "imageMaxCount",
-          "type": "number",
-          "labelKey": "settings.admin.imageMaxCount.label",
-          "descriptionKey": "settings.admin.imageMaxCount.description",
-          "group": "settings.admin.group.images",
-          "min": 1
-        },
-        {
-          "key": "imageMaxBytes",
-          "type": "number",
-          "labelKey": "settings.admin.imageMaxBytes.label",
-          "descriptionKey": "settings.admin.imageMaxBytes.description",
-          "group": "settings.admin.group.images",
-          "min": 1048576
-        },
-        {
-          "key": "imageStorageTest",
-          "type": "custom",
-          "component": "imageStorageTest",
-          "group": "settings.admin.group.images"
-        }
-      ],
-      "host": {
-        "editorGroup": "ssh",
-        "editorOrder": 12,
-        "enableKey": "enableTerminal",
-        "enableLabelKey": "settings.host.enableTerminal.label",
-        "enableDescriptionKey": "settings.host.enableTerminal.description",
-        "enableDefault": true,
-        "fields": [
-          {
-            "key": "enableTerminalToolbar",
-            "type": "boolean",
-            "labelKey": "settings.host.enableTerminalToolbar.label",
-            "descriptionKey": "settings.host.enableTerminalToolbar.description",
-            "default": true
-          },
-          {
-            "key": "terminalToolbarPosition",
-            "type": "select",
-            "labelKey": "settings.host.terminalToolbarPosition.label",
-            "descriptionKey": "settings.host.terminalToolbarPosition.description",
-            "requires": "enableTerminalToolbar",
-            "default": "bottom",
-            "options": [
-              {
-                "value": "bottom",
-                "labelKey": "settings.host.terminalToolbarPosition.bottom"
-              },
-              {
-                "value": "bottom-left",
-                "labelKey": "settings.host.terminalToolbarPosition.bottomLeft"
-              },
-              {
-                "value": "bottom-right",
-                "labelKey": "settings.host.terminalToolbarPosition.bottomRight"
-              },
-              {
-                "value": "top",
-                "labelKey": "settings.host.terminalToolbarPosition.top"
-              },
-              {
-                "value": "top-left",
-                "labelKey": "settings.host.terminalToolbarPosition.topLeft"
-              },
-              {
-                "value": "top-right",
-                "labelKey": "settings.host.terminalToolbarPosition.topRight"
-              }
-            ]
-          },
-          {
-            "key": "terminalToolbarStartState",
-            "type": "select",
-            "labelKey": "settings.host.terminalToolbarStartState.label",
-            "descriptionKey": "settings.host.terminalToolbarStartState.description",
-            "requires": "enableTerminalToolbar",
-            "default": "expanded",
-            "options": [
-              {
-                "value": "expanded",
-                "labelKey": "settings.host.terminalToolbarStartState.expanded"
-              },
-              {
-                "value": "collapsed",
-                "labelKey": "settings.host.terminalToolbarStartState.collapsed"
-              }
-            ]
-          },
-          {
-            "key": "terminalToolbarDisplay",
-            "type": "select",
-            "labelKey": "settings.host.terminalToolbarDisplay.label",
-            "descriptionKey": "settings.host.terminalToolbarDisplay.description",
-            "requires": "enableTerminalToolbar",
-            "default": "remember",
-            "options": [
-              {
-                "value": "remember",
-                "labelKey": "settings.host.terminalToolbarDisplay.remember"
-              },
-              {
-                "value": "icon",
-                "labelKey": "settings.host.terminalToolbarDisplay.icon"
-              },
-              {
-                "value": "labeled",
-                "labelKey": "settings.host.terminalToolbarDisplay.labeled"
-              },
-              {
-                "value": "expanded",
-                "labelKey": "settings.host.terminalToolbarDisplay.expanded"
-              }
-            ]
-          },
-          {
-            "key": "terminalToolbarShowStatus",
-            "type": "boolean",
-            "labelKey": "settings.host.terminalToolbarShowStatus.label",
-            "descriptionKey": "settings.host.terminalToolbarShowStatus.description",
-            "requires": "enableTerminalToolbar",
-            "default": true
-          },
-          {
-            "key": "terminalToolbarFade",
-            "type": "boolean",
-            "labelKey": "settings.host.terminalToolbarFade.label",
-            "descriptionKey": "settings.host.terminalToolbarFade.description",
-            "requires": "enableTerminalToolbar",
-            "default": true
-          },
-          {
-            "key": "enableCommandHistory",
-            "type": "boolean",
-            "labelKey": "settings.host.enableCommandHistory.label",
-            "descriptionKey": "settings.host.enableCommandHistory.description",
-            "default": true
-          },
-          {
-            "key": "inheritAppearance",
-            "type": "boolean",
-            "labelKey": "settings.host.inheritAppearance.label",
-            "hidden": true,
-            "default": true,
-            "defaultable": false
-          },
-          {
-            "key": "theme",
-            "type": "string",
-            "labelKey": "settings.host.theme.label",
-            "hidden": true,
-            "default": "termix",
-            "personal": true
-          },
-          {
-            "key": "cursorBlink",
-            "type": "boolean",
-            "labelKey": "settings.host.cursorBlink.label",
-            "hidden": true,
-            "default": true,
-            "personal": true
-          },
-          {
-            "key": "cursorStyle",
-            "type": "select",
-            "labelKey": "settings.host.cursorStyle.label",
-            "hidden": true,
-            "default": "bar",
-            "options": [
-              {
-                "value": "block",
-                "labelKey": "hosts.cursorStyleBlock"
-              },
-              {
-                "value": "underline",
-                "labelKey": "hosts.cursorStyleUnderline"
-              },
-              {
-                "value": "bar",
-                "labelKey": "hosts.cursorStyleBar"
-              }
-            ],
-            "personal": true
-          },
-          {
-            "key": "fontSize",
-            "type": "number",
-            "labelKey": "settings.host.fontSize.label",
-            "hidden": true,
-            "default": 14,
-            "personal": true
-          },
-          {
-            "key": "fontFamily",
-            "type": "string",
-            "labelKey": "settings.host.fontFamily.label",
-            "hidden": true,
-            "default": "Caskaydia Cove Nerd Font Mono",
-            "personal": true
-          },
-          {
-            "key": "scrollback",
-            "type": "number",
-            "labelKey": "settings.host.scrollback.label",
-            "hidden": true,
-            "default": 10000,
-            "personal": true
-          },
-          {
-            "key": "letterSpacing",
-            "type": "number",
-            "labelKey": "settings.host.letterSpacing.label",
-            "hidden": true,
-            "default": 0,
-            "personal": true
-          },
-          {
-            "key": "lineHeight",
-            "type": "number",
-            "labelKey": "settings.host.lineHeight.label",
-            "hidden": true,
-            "default": 1,
-            "personal": true
-          },
-          {
-            "key": "bellStyle",
-            "type": "select",
-            "labelKey": "settings.host.bellStyle.label",
-            "hidden": true,
-            "default": "none",
-            "options": [
-              {
-                "value": "none",
-                "labelKey": "hosts.bellStyleNone"
-              },
-              {
-                "value": "sound",
-                "labelKey": "hosts.bellStyleSound"
-              },
-              {
-                "value": "visual",
-                "labelKey": "hosts.bellStyleVisual"
-              },
-              {
-                "value": "both",
-                "labelKey": "hosts.bellStyleBoth"
-              }
-            ],
-            "personal": true
-          },
-          {
-            "key": "minimumContrastRatio",
-            "type": "number",
-            "labelKey": "settings.host.minimumContrastRatio.label",
-            "hidden": true,
-            "default": 1,
-            "personal": true
-          },
-          {
-            "key": "backgroundImage",
-            "type": "string",
-            "labelKey": "settings.host.backgroundImage.label",
-            "hidden": true,
-            "default": "",
-            "personal": true
-          },
-          {
-            "key": "backgroundImageOpacity",
-            "type": "number",
-            "labelKey": "settings.host.backgroundImageOpacity.label",
-            "hidden": true,
-            "default": 0.15,
-            "personal": true
-          },
-          {
-            "key": "customThemeColors",
-            "type": "json",
-            "labelKey": "settings.host.customThemeColors.label",
-            "hidden": true,
-            "personal": true
-          },
-          {
-            "key": "rightClickSelectsWord",
-            "type": "boolean",
-            "labelKey": "settings.host.rightClickSelectsWord.label",
-            "hidden": true,
-            "default": false
-          },
-          {
-            "key": "macOptionIsMeta",
-            "type": "boolean",
-            "labelKey": "settings.host.macOptionIsMeta.label",
-            "hidden": true,
-            "default": false
-          },
-          {
-            "key": "fastScrollModifier",
-            "type": "select",
-            "labelKey": "settings.host.fastScrollModifier.label",
-            "hidden": true,
-            "default": "alt",
-            "options": [
-              {
-                "value": "alt",
-                "labelKey": "hosts.fastScrollModifierAlt"
-              },
-              {
-                "value": "ctrl",
-                "labelKey": "hosts.fastScrollModifierCtrl"
-              },
-              {
-                "value": "shift",
-                "labelKey": "hosts.fastScrollModifierShift"
-              }
-            ]
-          },
-          {
-            "key": "fastScrollSensitivity",
-            "type": "number",
-            "labelKey": "settings.host.fastScrollSensitivity.label",
-            "hidden": true,
-            "default": 5
-          },
-          {
-            "key": "backspaceMode",
-            "type": "select",
-            "labelKey": "settings.host.backspaceMode.label",
-            "hidden": true,
-            "default": "normal",
-            "options": [
-              {
-                "value": "normal",
-                "labelKey": "hosts.backspaceModeNormal"
-              },
-              {
-                "value": "control-h",
-                "labelKey": "hosts.backspaceModeControlH"
-              }
-            ]
-          },
-          {
-            "key": "autoMosh",
-            "type": "boolean",
-            "labelKey": "settings.host.autoMosh.label",
-            "hidden": true,
-            "default": false
-          },
-          {
-            "key": "moshCommand",
-            "type": "string",
-            "labelKey": "settings.host.moshCommand.label",
-            "hidden": true,
-            "default": ""
-          },
-          {
-            "key": "autoTmux",
-            "type": "boolean",
-            "labelKey": "settings.host.autoTmux.label",
-            "hidden": true,
-            "default": false
-          },
-          {
-            "key": "useSSHTitle",
-            "type": "boolean",
-            "labelKey": "settings.host.useSSHTitle.label",
-            "hidden": true,
-            "default": false
-          },
-          {
-            "key": "syntaxHighlighting",
-            "type": "boolean",
-            "labelKey": "settings.host.syntaxHighlighting.label",
-            "hidden": true,
-            "default": true
-          },
-          {
-            "key": "syntaxHighlightingOptions",
-            "type": "json",
-            "labelKey": "settings.host.syntaxHighlightingOptions.label",
-            "hidden": true
-          },
-          {
-            "key": "linkClickBehavior",
-            "type": "select",
-            "labelKey": "settings.host.linkClickBehavior.label",
-            "hidden": true,
-            "default": "confirm",
-            "options": [
-              {
-                "value": "confirm",
-                "labelKey": "hosts.linkClickBehaviorConfirm"
-              },
-              {
-                "value": "direct",
-                "labelKey": "hosts.linkClickBehaviorDirect"
-              }
-            ]
-          },
-          {
-            "key": "localEcho",
-            "type": "select",
-            "labelKey": "settings.host.localEcho.label",
-            "hidden": true,
-            "default": "auto",
-            "options": [
-              {
-                "value": "off",
-                "labelKey": "hosts.localEchoOff"
-              },
-              {
-                "value": "auto",
-                "labelKey": "hosts.localEchoAuto"
-              },
-              {
-                "value": "on",
-                "labelKey": "hosts.localEchoOn"
-              }
-            ]
-          },
-          {
-            "key": "passwordPromptAutoFill",
-            "type": "boolean",
-            "labelKey": "settings.host.passwordPromptAutoFill.label",
-            "hidden": true,
-            "default": true
-          },
-          {
-            "key": "sudoPasswordAutoFill",
-            "type": "boolean",
-            "labelKey": "settings.host.sudoPasswordAutoFill.label",
-            "hidden": true,
-            "default": false
-          },
-          {
-            "key": "autoReconnect",
-            "type": "boolean",
-            "labelKey": "settings.host.autoReconnect.label",
-            "hidden": true,
-            "default": false
-          }
-        ]
-      },
-      "user": [
-        {
-          "key": "terminalDefaults",
-          "type": "custom",
-          "component": "terminalDefaults",
-          "default": {},
-          "hidden": true
-        },
-        {
-          "key": "customThemes",
-          "type": "json",
-          "labelKey": "settings.user.customThemes.label",
-          "hidden": true,
-          "default": []
-        },
-        {
-          "key": "commandAutocomplete",
-          "type": "boolean",
-          "labelKey": "settings.user.commandAutocomplete.label",
-          "descriptionKey": "settings.user.commandAutocomplete.description",
-          "default": false
-        },
-        {
-          "key": "localEcho",
-          "type": "select",
-          "labelKey": "settings.user.localEcho.label",
-          "descriptionKey": "settings.user.localEcho.description",
-          "default": "auto",
-          "options": [
-            {
-              "value": "off",
-              "labelKey": "hosts.localEchoOff"
-            },
-            {
-              "value": "auto",
-              "labelKey": "hosts.localEchoAuto"
-            },
-            {
-              "value": "on",
-              "labelKey": "hosts.localEchoOn"
-            }
-          ],
-          "hidden": true
-        },
-        {
-          "key": "linkClickBehavior",
-          "type": "select",
-          "labelKey": "settings.user.linkClickBehavior.label",
-          "descriptionKey": "settings.user.linkClickBehavior.description",
-          "default": "confirm",
-          "options": [
-            {
-              "value": "confirm",
-              "labelKey": "hosts.linkClickBehaviorConfirm"
-            },
-            {
-              "value": "direct",
-              "labelKey": "hosts.linkClickBehaviorDirect"
-            }
-          ],
-          "hidden": true
-        },
-        {
-          "key": "macros",
-          "type": "json",
-          "labelKey": "macros.title",
-          "hidden": true,
-          "default": []
-        }
-      ]
-    },
-    "keybindingActions": [
-      {
-        "id": "copy"
-      },
-      {
-        "id": "paste"
-      },
-      {
-        "id": "sendControlCode",
-        "params": {
-          "controlCode": {
-            "type": "string",
-            "required": true,
-            "pattern": "^[a-zA-Z]$"
-          }
-        }
-      },
-      {
-        "id": "sendText",
-        "params": {
-          "text": {
-            "type": "string",
-            "maxLength": 65536,
-            "required": true
-          },
-          "appendEnter": {
-            "type": "boolean"
-          }
-        }
-      }
-    ],
-    "uiPresets": {
-      "simple": {
-        "toolbarDensity": "icon"
-      },
-      "balanced": {
-        "toolbarDensity": "labeled"
-      },
-      "advanced": {
-        "toolbarDensity": "expanded"
-      }
-    },
-    "uses": ["files.openEditor", "files.openHost", "snippets.startupCommand"]
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"]
-}
diff --git a/plugins/ssh-terminal/migrations/mysql/0001_adopt_command_history.sql b/plugins/ssh-terminal/migrations/mysql/0001_adopt_command_history.sql
deleted file mode 100644
index ca3e5f6eb..000000000
--- a/plugins/ssh-terminal/migrations/mysql/0001_adopt_command_history.sql
+++ /dev/null
@@ -1,13 +0,0 @@
--- ssh-terminal 0001: adopt_command_history
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `command_history` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `host_id` int NOT NULL,
-  `command` text NOT NULL,
-  `executed_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `command_history` TO `p_ssh_terminal_command_history`;
diff --git a/plugins/ssh-terminal/migrations/postgres/0001_adopt_command_history.sql b/plugins/ssh-terminal/migrations/postgres/0001_adopt_command_history.sql
deleted file mode 100644
index 11d93383d..000000000
--- a/plugins/ssh-terminal/migrations/postgres/0001_adopt_command_history.sql
+++ /dev/null
@@ -1,14 +0,0 @@
--- ssh-terminal 0001: adopt_command_history
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "command_history" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "host_id" integer NOT NULL,
-  "command" text NOT NULL,
-  "executed_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_command_history_user_host" ON "command_history" ("user_id", "host_id");
-ALTER TABLE "command_history" RENAME TO "p_ssh_terminal_command_history";
diff --git a/plugins/ssh-terminal/migrations/snapshot.json b/plugins/ssh-terminal/migrations/snapshot.json
deleted file mode 100644
index 3aa6f08f1..000000000
--- a/plugins/ssh-terminal/migrations/snapshot.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "command_history": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "hostId": {
-          "type": "refHost",
-          "notNull": true
-        },
-        "command": {
-          "type": "text",
-          "notNull": true
-        },
-        "executedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_command_history_user_host",
-          "columns": ["userId", "hostId"]
-        }
-      ],
-      "adopts": "command_history"
-    }
-  }
-}
diff --git a/plugins/ssh-terminal/migrations/sqlite/0001_adopt_command_history.sql b/plugins/ssh-terminal/migrations/sqlite/0001_adopt_command_history.sql
deleted file mode 100644
index 6d987fe65..000000000
--- a/plugins/ssh-terminal/migrations/sqlite/0001_adopt_command_history.sql
+++ /dev/null
@@ -1,14 +0,0 @@
--- ssh-terminal 0001: adopt_command_history
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "command_history" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "host_id" integer NOT NULL,
-  "command" text NOT NULL,
-  "executed_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_command_history_user_host" ON "command_history" ("user_id", "host_id");
-ALTER TABLE "command_history" RENAME TO "p_ssh_terminal_command_history";
diff --git a/plugins/ssh-terminal/package.json b/plugins/ssh-terminal/package.json
deleted file mode 100644
index 2064cb0b4..000000000
--- a/plugins/ssh-terminal/package.json
+++ /dev/null
@@ -1,57 +0,0 @@
-{
-  "name": "@termix-plugin/ssh-terminal",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "@xterm/addon-clipboard": "^0.2.0",
-    "@xterm/addon-fit": "^0.11.0",
-    "@xterm/addon-search": "^0.16.0",
-    "@xterm/addon-unicode11": "^0.9.0",
-    "@xterm/addon-web-links": "^0.12.0",
-    "@xterm/xterm": "^6.0.0",
-    "lucide-react": "^1.33.0",
-    "react-xtermjs": "^1.0.10"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/jest-dom": "^7.0.1",
-    "@testing-library/react": "^16.3.3",
-    "@testing-library/user-event": "^14.6.7",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "multer": "^2.3.0",
-    "react": "^19.2.8",
-    "react-dom": "^19.2.8",
-    "sharp": "^0.35.4",
-    "sonner": "^2.0.8",
-    "ssh2": "^1.17.0",
-    "ws": "^8.21.3"
-  },
-  "termix": {
-    "patches": [
-      "xterm-android-ime"
-    ]
-  },
-  "overrides": {
-    "react-xtermjs": {
-      "@xterm/xterm": "$@xterm/xterm"
-    }
-  }
-}
diff --git a/plugins/ssh-terminal/src/backend/helpers.ts b/plugins/ssh-terminal/src/backend/helpers.ts
deleted file mode 100644
index fd0b7b16e..000000000
--- a/plugins/ssh-terminal/src/backend/helpers.ts
+++ /dev/null
@@ -1,295 +0,0 @@
-import dns from "dns/promises";
-import net from "net";
-import type { RawData } from "ws";
-import ssh2Pkg, {
-  type GetStreamCallback,
-  type IdentityCallback,
-  type ParsedKey,
-  type SignCallback,
-  type SigningRequestOptions,
-} from "ssh2";
-import type { PluginLogger } from "@termix/plugin-sdk/backend";
-
-const { AgentProtocol, BaseAgent } = ssh2Pkg;
-
-export function getErrorMessage(
-  error: unknown,
-  fallback = "Unknown error",
-): string {
-  return error instanceof Error ? error.message : fallback;
-}
-
-/** The terminal's structured logging, on top of ctx.log. */
-export interface TerminalLogger {
-  info: (message: string, meta?: Record<string, unknown>) => void;
-  success: (message: string, meta?: Record<string, unknown>) => void;
-  warn: (message: string, meta?: Record<string, unknown>) => void;
-  error: (
-    message: string,
-    error?: unknown,
-    meta?: Record<string, unknown>,
-  ) => void;
-}
-
-function withMeta(message: string, meta?: Record<string, unknown>): string {
-  if (!meta || Object.keys(meta).length === 0) return message;
-  try {
-    return `${message} ${JSON.stringify(meta)}`;
-  } catch {
-    return message;
-  }
-}
-
-export function createTerminalLogger(log: PluginLogger): TerminalLogger {
-  return {
-    info: (message, meta) => log.info(withMeta(message, meta)),
-    success: (message, meta) => log.info(withMeta(message, meta)),
-    warn: (message, meta) => log.warn(withMeta(message, meta)),
-    error: (message, error, meta) => {
-      // Some call sites pass the meta object where the error goes.
-      if (error && !(error instanceof Error) && typeof error === "object") {
-        log.error(withMeta(message, error as Record<string, unknown>));
-        return;
-      }
-      log.error(
-        withMeta(message, meta),
-        error instanceof Error
-          ? error
-          : error
-            ? new Error(String(error))
-            : undefined,
-      );
-    },
-  };
-}
-
-// Cap on a single decoded text frame. Legitimate control messages are tiny,
-// and terminal input is bounded by what a user can type or paste.
-export const MAX_WS_MESSAGE_BYTES = 1024 * 1024;
-
-export class WsMessageError extends Error {}
-
-function rawByteLength(raw: RawData): number {
-  if (Buffer.isBuffer(raw)) return raw.length;
-  if (Array.isArray(raw))
-    return raw.reduce((sum, part) => sum + part.length, 0);
-  if (raw instanceof ArrayBuffer) return raw.byteLength;
-  return 0;
-}
-
-/** Parses a frame into `{ type, data }`, throwing WsMessageError on anything else. */
-export function parseWsMessage(raw: RawData): {
-  type: string;
-  data: unknown;
-} {
-  if (rawByteLength(raw) > MAX_WS_MESSAGE_BYTES) {
-    throw new WsMessageError("Message too large");
-  }
-
-  let parsed: unknown;
-  try {
-    parsed = JSON.parse(raw.toString());
-  } catch {
-    throw new WsMessageError("Invalid JSON");
-  }
-
-  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
-    throw new WsMessageError("Message must be a JSON object");
-  }
-
-  const { type, data } = parsed as { type?: unknown; data?: unknown };
-  if (typeof type !== "string") {
-    throw new WsMessageError("Message type must be a string");
-  }
-
-  return { type, data };
-}
-
-export function asObject(data: unknown): Record<string, unknown> {
-  return data !== null && typeof data === "object" && !Array.isArray(data)
-    ? (data as Record<string, unknown>)
-    : {};
-}
-
-export function asString(value: unknown): string {
-  return typeof value === "string" ? value : "";
-}
-
-/** A sane integer width or height, or 0 when the value is unusable. */
-export function toTerminalDimension(value: unknown): number {
-  const n = typeof value === "number" ? value : Number(value);
-  if (!Number.isFinite(n)) return 0;
-  const rounded = Math.floor(n);
-  if (rounded < 1) return 0;
-  return Math.min(rounded, 10000);
-}
-
-export function isWindowsSftpPath(path: string): boolean {
-  const normalized = path.replace(/\\/g, "/");
-  return /^[A-Za-z]:\//.test(normalized) || /^\/[A-Za-z]:\//.test(normalized);
-}
-
-export function sftpPathToLocalPath(sftpPath: string): string {
-  const normalized = sftpPath.replace(/\\/g, "/");
-  if (/^\/[A-Za-z]:\//.test(normalized)) {
-    return normalized.slice(1).replace(/\//g, "\\");
-  }
-  if (/^[A-Za-z]:\//.test(normalized)) {
-    return normalized.replace(/\//g, "\\");
-  }
-  return sftpPath;
-}
-
-export const SSH_DNS_RETRY_DELAYS_MS = [250, 750, 1500];
-
-type Lookup = typeof dns.lookup;
-type Sleep = (ms: number) => Promise<void>;
-const sleep: Sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
-
-export function isRetriableDnsError(error: unknown): boolean {
-  const err = error as { code?: unknown; message?: unknown };
-  return (
-    err.code === "EAI_AGAIN" ||
-    (typeof err.message === "string" && err.message.includes("EAI_AGAIN"))
-  );
-}
-
-type LookupResult = { address: string; family: number };
-
-// Prefer IPv4: ssh2 gets one address and has no fallback, and a name that
-// also has an AAAA record often points at a v6 address sshd is not bound to.
-export function pickSshAddress(result: LookupResult | LookupResult[]): string {
-  const list = Array.isArray(result) ? result : [result];
-  if (list.length === 0)
-    throw Object.assign(new Error("No address found"), { code: "ENOTFOUND" });
-  return (list.find((entry) => entry.family === 4) ?? list[0]).address;
-}
-
-/** Resolves a hostname up front, retrying transient container DNS failures. */
-export async function resolveHostForSshConnect(
-  host: string,
-  lookup: Lookup = dns.lookup,
-  retryDelaysMs = SSH_DNS_RETRY_DELAYS_MS,
-  wait: Sleep = sleep,
-): Promise<{ host: string; resolvedAddress?: string; attempts: number }> {
-  const normalized = host.replace(/^\[|\]$/g, "").trim();
-  if (!normalized || net.isIP(normalized) !== 0) {
-    return { host: normalized || host, attempts: 0 };
-  }
-
-  for (let attempt = 0; ; attempt += 1) {
-    try {
-      const address = pickSshAddress(await lookup(normalized, { all: true }));
-      return {
-        host: address,
-        resolvedAddress: address,
-        attempts: attempt + 1,
-      };
-    } catch (error) {
-      if (!isRetriableDnsError(error) || attempt >= retryDelaysMs.length) {
-        throw error;
-      }
-      await wait(retryDelaysMs[attempt]);
-    }
-  }
-}
-
-function normalizeHostAddress(value: unknown): string {
-  if (typeof value !== "string") return "";
-  return value
-    .replace(/^\[|\]$/g, "")
-    .trim()
-    .toLowerCase();
-}
-
-/**
- * Whether a numeric host id resolved to a different machine than the client
- * meant. Ids from the desktop app and a sync server drift apart, and the
- * resolved row supplies the credentials, so a mismatch must be refused.
- */
-export function hostAddressMismatch(
-  clientAddress: unknown,
-  resolvedAddress: unknown,
-): boolean {
-  const resolved = normalizeHostAddress(resolvedAddress);
-  if (!resolved) return false;
-  return resolved !== normalizeHostAddress(clientAddress);
-}
-
-export const HOST_ADDRESS_MISMATCH_MESSAGE =
-  "Host mismatch: this server resolved the selected host to a different machine, so the connection was refused. " +
-  "The host ids on this device and on the sync server have drifted apart. " +
-  'Set the connection origin to "This device" for this host, or re-run a full sync, then try again.';
-
-export const HOST_NOT_ON_THIS_SERVER_MESSAGE =
-  "This host does not exist on the sync server, so the connection was refused. " +
-  'Run a sync so the server knows about it, or set the connection origin to "This device" for this host.';
-
-export function resolveServerJumpHosts(
-  clientJumpHosts: Array<{ hostId: number }> | undefined,
-  serverJumpHosts: Array<{ hostId: number }> | undefined,
-  hostSyncId?: string | null,
-): Array<{ hostId: number }> | undefined {
-  if (hostSyncId) return serverJumpHosts ?? [];
-  return clientJumpHosts?.length ? clientJumpHosts : serverJumpHosts;
-}
-
-export function resolveServerHostId(
-  clientHostId: number | null,
-  resolvedHost: { id?: unknown } | null,
-): number | null {
-  return typeof resolvedHost?.id === "number" ? resolvedHost.id : clientHostId;
-}
-
-/** An in-memory SSH agent holding one key, for agent forwarding. */
-export class MemoryAgent extends BaseAgent {
-  private key: ParsedKey;
-
-  constructor(key: ParsedKey) {
-    super();
-    this.key = key;
-  }
-
-  getIdentities(cb: IdentityCallback<ParsedKey>): void {
-    cb(null, [this.key]);
-  }
-
-  getStream(cb: GetStreamCallback): void {
-    const protocol = new AgentProtocol(false);
-
-    protocol.on("identities", (request) => {
-      protocol.getIdentitiesReply(request, [this.key]);
-    });
-
-    protocol.on("sign", (request, publicKey, data, options) => {
-      this.sign(publicKey, data, options, (error, signature) => {
-        if (error || !signature) return protocol.failureReply(request);
-        protocol.signReply(request, signature);
-      });
-    });
-
-    cb(null, protocol);
-  }
-
-  sign(
-    _pubKey: ParsedKey | Buffer | string,
-    data: Buffer,
-    optionsOrCb: SigningRequestOptions | SignCallback,
-    cb?: SignCallback,
-  ): void {
-    const callback = typeof optionsOrCb === "function" ? optionsOrCb : cb!;
-    const options = typeof optionsOrCb === "function" ? {} : optionsOrCb;
-    try {
-      const algo =
-        options.hash === "sha256"
-          ? "rsa-sha2-256"
-          : options.hash === "sha512"
-            ? "rsa-sha2-512"
-            : undefined;
-      const signature = this.key.sign(data, algo);
-      callback(null, signature);
-    } catch (err) {
-      callback(err instanceof Error ? err : new Error(String(err)));
-    }
-  }
-}
diff --git a/plugins/ssh-terminal/src/backend/history-repository.ts b/plugins/ssh-terminal/src/backend/history-repository.ts
deleted file mode 100644
index f6894b00d..000000000
--- a/plugins/ssh-terminal/src/backend/history-repository.ts
+++ /dev/null
@@ -1,91 +0,0 @@
-import { and, desc, eq, sql } from "drizzle-orm";
-import type { PluginDatabase } from "@termix/plugin-sdk/backend";
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// The table comes from ctx.db.define, which the SDK hands back untyped, and
-// the drizzle handle is the server's own. Typed at this module's edge instead.
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export type HistoryRepository = ReturnType<typeof createHistoryRepository>;
-
-/** Command history storage. Writes are followed by persist(), reads are not. */
-export function createHistoryRepository(db: PluginDatabase, table: Table) {
-  const client = () => db.client<Drizzle>();
-
-  return {
-    async create(
-      userId: string,
-      hostId: number,
-      command: string,
-      executedAt = new Date().toISOString(),
-    ): Promise<void> {
-      const drizzle = await client();
-      await drizzle
-        .insert(table)
-        .values({ userId, hostId, command, executedAt });
-      await db.persist();
-    },
-
-    async listUniqueCommandsForHost(
-      userId: string,
-      hostId: number,
-      limit = 500,
-    ): Promise<string[]> {
-      const drizzle = await client();
-      const rows = await drizzle
-        .select({
-          command: table.command,
-          maxExecutedAt: sql<number>`MAX(${table.executedAt})`,
-        })
-        .from(table)
-        .where(and(eq(table.userId, userId), eq(table.hostId, hostId)))
-        .groupBy(table.command)
-        .orderBy(desc(sql`MAX(${table.executedAt})`))
-        .limit(limit);
-      return rows.map((row: { command: string }) => row.command);
-    },
-
-    async listCommandsForHost(
-      userId: string,
-      hostId: number,
-      limit = 200,
-    ): Promise<Array<{ command: string; executedAt: string }>> {
-      const drizzle = await client();
-      const rows = await drizzle
-        .select({ command: table.command, executedAt: table.executedAt })
-        .from(table)
-        .where(and(eq(table.userId, userId), eq(table.hostId, hostId)))
-        .orderBy(desc(table.executedAt))
-        .limit(limit);
-      return rows as Array<{ command: string; executedAt: string }>;
-    },
-
-    async deleteCommandForHost(
-      userId: string,
-      hostId: number,
-      command: string,
-    ): Promise<void> {
-      const drizzle = await client();
-      await drizzle
-        .delete(table)
-        .where(
-          and(
-            eq(table.userId, userId),
-            eq(table.hostId, hostId),
-            eq(table.command, command),
-          ),
-        );
-      await db.persist();
-    },
-
-    async deleteByUserAndHost(userId: string, hostId: number): Promise<void> {
-      const drizzle = await client();
-      await drizzle
-        .delete(table)
-        .where(and(eq(table.userId, userId), eq(table.hostId, hostId)));
-      await db.persist();
-    },
-  };
-}
diff --git a/plugins/ssh-terminal/src/backend/host-import.ts b/plugins/ssh-terminal/src/backend/host-import.ts
deleted file mode 100644
index e1b0a946d..000000000
--- a/plugins/ssh-terminal/src/backend/host-import.ts
+++ /dev/null
@@ -1,50 +0,0 @@
-import {
-  hostSettingsFromTerminalConfig,
-  terminalConfigFromHostSettings,
-} from "../shared/terminal-settings.js";
-
-const SWITCH_KEYS = [
-  "enableTerminal",
-  "enableTerminalToolbar",
-  "enableCommandHistory",
-] as const;
-
-/**
- * Registered as ctx.registry.provide("ssh-terminal.hostImportNormalizer", ...)
- * so a Termix-JSON host import keeps its terminal switches, which used to be
- * host columns, and its terminal look and behavior, which a 2.8 or early 2.9
- * export carried in terminalConfig. An export that already carries this
- * plugin's pluginSettings has had them written by core, so terminalConfig is
- * only read without them.
- */
-export function hostImportNormalizer(
-  raw: Record<string, unknown>,
-): Record<string, unknown> | null {
-  const values: Record<string, unknown> = {};
-  for (const key of SWITCH_KEYS) {
-    if (raw[key] !== undefined) values[key] = raw[key] !== false;
-  }
-
-  const carried = (raw.pluginSettings as Record<string, unknown> | undefined)?.[
-    "ssh-terminal"
-  ];
-  const hasCarried =
-    !!carried && typeof carried === "object" && Object.keys(carried).length > 0;
-  if (!hasCarried) {
-    Object.assign(values, hostSettingsFromTerminalConfig(raw.terminalConfig));
-  }
-
-  return Object.keys(values).length > 0 ? values : null;
-}
-
-/**
- * Registered as "ssh-terminal.hostPayloadLegacy": the terminal keys of the
- * 2.8 terminalConfig, for clients that still read it (Termix-Mobile). Core
- * merges them into the terminalConfig it sends, never over a key it set.
- * Remove once the mobile app reads pluginSettings["ssh-terminal"].
- */
-export function hostPayloadLegacy(
-  values: Record<string, unknown>,
-): Record<string, unknown> {
-  return { terminalConfig: terminalConfigFromHostSettings(values) };
-}
diff --git a/plugins/ssh-terminal/src/backend/images/image-storage-settings.ts b/plugins/ssh-terminal/src/backend/images/image-storage-settings.ts
deleted file mode 100644
index 1ec3f3470..000000000
--- a/plugins/ssh-terminal/src/backend/images/image-storage-settings.ts
+++ /dev/null
@@ -1,262 +0,0 @@
-import path from "path";
-
-/**
- * Terminal image storage modes.
- *
- * - `local`: always write to the backend's mapped local storage. Deterministic:
- *   never falls back to the remote SFTP path.
- * - `remote-sftp`: always write to the connected terminal's SSH host over SFTP.
- *   Deterministic: never falls back to local storage.
- * - `auto`: pick by capability only — remote SFTP when a connected terminal
- *   session exists, local storage otherwise. Configuration never influences
- *   this choice.
- */
-export const TERMINAL_IMAGE_STORAGE_MODES = [
-  "auto",
-  "local",
-  "remote-sftp",
-] as const;
-
-export type TerminalImageStorageMode =
-  (typeof TERMINAL_IMAGE_STORAGE_MODES)[number];
-
-export interface TerminalImageStorageSettings {
-  mode: TerminalImageStorageMode;
-  /** Absolute path on the Termix backend where local-mode files are written. */
-  localDir: string;
-  /**
-   * Absolute path handed to the terminal agent in local mode. This is the
-   * host-side view of `localDir` (e.g. /tmp mapped into the container); it is
-   * the only path ever exposed to callers.
-   */
-  hostPath: string;
-  ttlMs: number;
-  maxCount: number;
-  maxBytes: number;
-  /** Both localDir and hostPath were explicitly configured and must be probed. */
-  localMappingConfigured: boolean;
-}
-
-/** Settings-table keys. Persisted values always win over environment. */
-export const TERMINAL_IMAGE_STORAGE_KEYS = {
-  mode: "terminal_image_storage_mode",
-  localDir: "terminal_image_local_dir",
-  hostPath: "terminal_image_host_path",
-  ttlMs: "terminal_image_ttl_ms",
-  maxCount: "terminal_image_max_count",
-  maxBytes: "terminal_image_max_storage_bytes",
-} as const;
-
-/**
- * Legacy environment variables from the original env-only configuration. They
- * seed defaults only when no database value exists for the same field.
- */
-export const TERMINAL_IMAGE_STORAGE_ENV = {
-  mode: "TERMIX_IMAGE_STORAGE_MODE",
-  localDir: "TERMIX_IMAGE_DIR",
-  hostPath: "TERMIX_IMAGE_HOST_PATH",
-  ttlMs: "TERMIX_IMAGE_TTL_MS",
-  maxCount: "TERMIX_MAX_IMAGE_COUNT",
-  maxBytes: "TERMIX_MAX_IMAGE_STORAGE_BYTES",
-} as const;
-
-export const DEFAULT_IMAGE_TTL_MS = 3_600_000;
-export const DEFAULT_IMAGE_MAX_COUNT = 100;
-export const DEFAULT_IMAGE_MAX_BYTES = 5_368_709_120;
-export const DEFAULT_IMAGE_HOST_PATH = "/tmp/termix-image-v0";
-export const MIN_IMAGE_MAX_BYTES = 1_048_576;
-
-export function defaultImageLocalDir(env: NodeJS.ProcessEnv): string {
-  return path.resolve(
-    path.join(env.DATA_DIR || "./db/data", "termix-image-v0"),
-  );
-}
-
-export function parseTerminalImageStorageMode(
-  value: unknown,
-): TerminalImageStorageMode | null {
-  if (typeof value !== "string") return null;
-  const normalized = value.trim().toLowerCase();
-  return (TERMINAL_IMAGE_STORAGE_MODES as readonly string[]).includes(
-    normalized,
-  )
-    ? (normalized as TerminalImageStorageMode)
-    : null;
-}
-
-/**
- * Local write directory must be an absolute path without NUL bytes. Relative
- * values are rejected rather than resolved: a relative entry silently depends
- * on the process cwd, which differs between Docker, systemd and dev runs.
- */
-export function parseImageLocalDir(value: unknown): string | null {
-  if (typeof value !== "string") return null;
-  const trimmed = value.trim();
-  if (!trimmed || hasUnsafePathSyntax(trimmed)) return null;
-  if (!path.isAbsolute(trimmed)) return null;
-  return path.resolve(trimmed);
-}
-
-/** Agent-visible path. Always POSIX-style and absolute. */
-export function parseImageHostPath(value: unknown): string | null {
-  if (typeof value !== "string") return null;
-  const trimmed = value.trim();
-  if (!trimmed || hasUnsafePathSyntax(trimmed)) return null;
-  if (!path.posix.isAbsolute(trimmed)) return null;
-  return path.posix.normalize(trimmed);
-}
-
-/**
- * Numeric fields: unparseable values are rejected (caller falls through to the
- * next source); parseable but out-of-range values are clamped, matching the
- * original env-only behavior.
- */
-function parseClampedInt(value: unknown, min: number): number | null {
-  if (typeof value !== "string" && typeof value !== "number") return null;
-  const parsed =
-    typeof value === "number" ? value : Number.parseInt(value.trim(), 10);
-  if (!Number.isFinite(parsed)) return null;
-  return Math.max(min, Math.trunc(parsed));
-}
-
-export interface SettingSource {
-  get(key: string): Promise<string | null>;
-  /** Told about a stored or environment value that was ignored. */
-  warn?: (message: string) => void;
-}
-
-function hasUnsafePathSyntax(value: string): boolean {
-  return (
-    /[\u0000-\u001f\u007f]/.test(value) ||
-    value.split(/[\\/]+/).some((segment) => segment === "..") ||
-    value.includes("//") ||
-    value.includes("\\")
-  );
-}
-
-/**
- * Resolves the effective image storage settings.
- *
- * Per-field precedence: a valid persisted database value wins; a legacy
- * TERMIX_IMAGE_* variable seeds the default only when no database value
- * exists; otherwise the built-in default applies. Invalid values are skipped
- * with a warning and resolution falls through to the next source.
- *
- * Mode compatibility: with no mode in the database or environment, an explicit
- * legacy local mapping (TERMIX_IMAGE_DIR) keeps old deployments on `local`;
- * everything else defaults to `auto`.
- */
-export async function resolveTerminalImageStorageSettings(
-  settings: SettingSource,
-  env: NodeJS.ProcessEnv = process.env,
-): Promise<TerminalImageStorageSettings> {
-  const warnInvalid = (key: string, source: string) =>
-    settings.warn?.(
-      `Ignoring invalid terminal image storage setting ${key} from ${source}`,
-    );
-
-  async function pick<T>(
-    key: string,
-    envName: string,
-    parse: (value: unknown) => T | null,
-    fallback: T,
-  ): Promise<T> {
-    const stored = await settings.get(key);
-    if (stored !== null) {
-      const parsed = parse(stored);
-      if (parsed !== null) return parsed;
-      warnInvalid(key, "database");
-    }
-    const fromEnv = env[envName];
-    if (fromEnv !== undefined) {
-      const parsed = parse(fromEnv);
-      if (parsed !== null) return parsed;
-      warnInvalid(key, "environment");
-    }
-    return fallback;
-  }
-
-  const dbModeRaw = await settings.get(TERMINAL_IMAGE_STORAGE_KEYS.mode);
-  let mode: TerminalImageStorageMode | null = null;
-  if (dbModeRaw !== null) {
-    mode = parseTerminalImageStorageMode(dbModeRaw);
-    if (mode === null)
-      warnInvalid(TERMINAL_IMAGE_STORAGE_KEYS.mode, "database");
-  }
-  if (mode === null) {
-    const envModeRaw = env[TERMINAL_IMAGE_STORAGE_ENV.mode];
-    if (envModeRaw !== undefined) {
-      mode = parseTerminalImageStorageMode(envModeRaw);
-      if (mode === null)
-        warnInvalid(TERMINAL_IMAGE_STORAGE_KEYS.mode, "environment");
-    }
-  }
-  if (mode === null) {
-    // Legacy deployments configured local storage purely through
-    // TERMIX_IMAGE_DIR; keep them on local mode unless a database value says
-    // otherwise.
-    mode =
-      env[TERMINAL_IMAGE_STORAGE_ENV.localDir] !== undefined ? "local" : "auto";
-  }
-
-  const legacyLocalDir = parseImageLocalDir(
-    env[TERMINAL_IMAGE_STORAGE_ENV.localDir],
-  );
-  const [localDir, hostPath, ttlMs, maxCount, maxBytes] = await Promise.all([
-    pick(
-      TERMINAL_IMAGE_STORAGE_KEYS.localDir,
-      TERMINAL_IMAGE_STORAGE_ENV.localDir,
-      parseImageLocalDir,
-      defaultImageLocalDir(env),
-    ),
-    pick(
-      TERMINAL_IMAGE_STORAGE_KEYS.hostPath,
-      TERMINAL_IMAGE_STORAGE_ENV.hostPath,
-      parseImageHostPath,
-      legacyLocalDir ?? DEFAULT_IMAGE_HOST_PATH,
-    ),
-    pick(
-      TERMINAL_IMAGE_STORAGE_KEYS.ttlMs,
-      TERMINAL_IMAGE_STORAGE_ENV.ttlMs,
-      (value) => parseClampedInt(value, 0),
-      DEFAULT_IMAGE_TTL_MS,
-    ),
-    pick(
-      TERMINAL_IMAGE_STORAGE_KEYS.maxCount,
-      TERMINAL_IMAGE_STORAGE_ENV.maxCount,
-      (value) => parseClampedInt(value, 1),
-      DEFAULT_IMAGE_MAX_COUNT,
-    ),
-    pick(
-      TERMINAL_IMAGE_STORAGE_KEYS.maxBytes,
-      TERMINAL_IMAGE_STORAGE_ENV.maxBytes,
-      (value) => parseClampedInt(value, MIN_IMAGE_MAX_BYTES),
-      DEFAULT_IMAGE_MAX_BYTES,
-    ),
-  ]);
-
-  const persistedLocalDir = await settings.get(
-    TERMINAL_IMAGE_STORAGE_KEYS.localDir,
-  );
-  const persistedHostPath = await settings.get(
-    TERMINAL_IMAGE_STORAGE_KEYS.hostPath,
-  );
-  const localMappingConfigured =
-    ((persistedLocalDir !== null &&
-      parseImageLocalDir(persistedLocalDir) !== null) ||
-      parseImageLocalDir(env[TERMINAL_IMAGE_STORAGE_ENV.localDir]) !== null) &&
-    ((persistedHostPath !== null &&
-      parseImageHostPath(persistedHostPath) !== null) ||
-      parseImageHostPath(env[TERMINAL_IMAGE_STORAGE_ENV.hostPath]) !== null ||
-      legacyLocalDir !== null);
-
-  return {
-    mode,
-    localDir,
-    hostPath,
-    ttlMs,
-    maxCount,
-    maxBytes,
-    localMappingConfigured,
-  };
-}
diff --git a/plugins/ssh-terminal/src/backend/images/image-storage.ts b/plugins/ssh-terminal/src/backend/images/image-storage.ts
deleted file mode 100644
index 3d4b6d253..000000000
--- a/plugins/ssh-terminal/src/backend/images/image-storage.ts
+++ /dev/null
@@ -1,675 +0,0 @@
-import fs from "fs/promises";
-import path from "path";
-import { randomUUID } from "crypto";
-import {
-  exceedsImageStorageLimit,
-  isExpiredImage,
-  isImageFilename,
-} from "./image-utils.js";
-import type { TerminalImageStorageSettings } from "./image-storage-settings.js";
-
-/**
- * Stable error codes for image storage failures. These are part of the upload
- * route's contract; `IMAGE_REMOTE_WRITE_FAILED` predates this module and must
- * not change.
- */
-export type TerminalImageStorageErrorCode =
-  | "IMAGE_STORAGE_LIMIT_REACHED"
-  | "IMAGE_LOCAL_WRITE_FAILED"
-  | "IMAGE_LOCAL_INSPECTION_FAILED"
-  | "IMAGE_REMOTE_QUOTA_UNAVAILABLE"
-  | "IMAGE_REMOTE_WRITE_FAILED";
-
-export class TerminalImageStorageError extends Error {
-  constructor(
-    readonly code: TerminalImageStorageErrorCode,
-    message: string,
-    readonly cause?: unknown,
-  ) {
-    super(message);
-    this.name = "TerminalImageStorageError";
-  }
-}
-
-export interface StoredTerminalImage {
-  id: string;
-  filename: string;
-  /** Agent-visible path; never a backend-internal path. */
-  shellPath: string;
-  storage: "local" | "remote-sftp";
-}
-
-/**
- * Mode selection for one upload. Explicit modes are deterministic — they are
- * returned regardless of capability and the route reports the failure; only
- * `auto` falls back, and only on capability (a connected terminal session
- * with SFTP), never on configuration.
- */
-export function selectImageStorageMode(
-  settings: Pick<
-    TerminalImageStorageSettings,
-    "mode" | "localMappingConfigured"
-  >,
-  capability: { remoteSftpAvailable: boolean; localHostVisible?: boolean },
-): "local" | "remote-sftp" | "unavailable" {
-  if (settings.mode === "local") return "local";
-  if (settings.mode === "remote-sftp") return "remote-sftp";
-  if (settings.localMappingConfigured && capability.localHostVisible === true) {
-    return "local";
-  }
-  return capability.remoteSftpAvailable ? "remote-sftp" : "unavailable";
-}
-
-// Capacity checks and writes are serialized so concurrent uploads cannot
-// bypass the count or byte limits.
-let imageStorageQueue: Promise<unknown> = Promise.resolve();
-
-function withImageStorageLock<T>(operation: () => Promise<T>): Promise<T> {
-  const result = imageStorageQueue.then(operation, operation);
-  imageStorageQueue = result.then(
-    () => undefined,
-    () => undefined,
-  );
-  return result;
-}
-
-async function cleanupExpiredImages(
-  localDir: string,
-  ttlMs: number,
-): Promise<void> {
-  const entries = await fs.readdir(localDir, { withFileTypes: true });
-  const now = Date.now();
-  await Promise.all(
-    entries
-      .filter((entry) => entry.isFile() && isImageFilename(entry.name))
-      .map(async (entry) => {
-        const filePath = path.join(localDir, entry.name);
-        const stat = await fs.stat(filePath);
-        if (stat && isExpiredImage(stat.mtimeMs, now, ttlMs)) {
-          await fs.unlink(filePath).catch(() => undefined);
-        }
-      }),
-  );
-}
-
-async function getActiveImageStorageUsage(
-  localDir: string,
-  ttlMs: number,
-): Promise<{ fileCount: number; totalBytes: number }> {
-  const entries = await fs.readdir(localDir, { withFileTypes: true });
-  const now = Date.now();
-  const stats = await Promise.all(
-    entries
-      .filter((entry) => entry.isFile() && isImageFilename(entry.name))
-      .map(async (entry) => {
-        const stat = await fs.stat(path.join(localDir, entry.name));
-        return !isExpiredImage(stat.mtimeMs, now, ttlMs) ? stat : null;
-      }),
-  );
-
-  return stats.reduce(
-    (usage, stat) => {
-      if (stat) {
-        usage.fileCount += 1;
-        usage.totalBytes += stat.size;
-      }
-      return usage;
-    },
-    { fileCount: 0, totalBytes: 0 },
-  );
-}
-
-/**
- * Local mapped-storage adapter. Enforces the TTL/count/byte policy and raises
- * `IMAGE_STORAGE_LIMIT_REACHED` (HTTP 507 at the route) when the caps are hit.
- * The returned shellPath is built from the agent-visible hostPath — the
- * backend's own localDir is never exposed.
- */
-export async function storeImageLocally(
-  image: Buffer,
-  settings: TerminalImageStorageSettings,
-): Promise<StoredTerminalImage> {
-  return withImageStorageLock(async () => {
-    let usage: { fileCount: number; totalBytes: number };
-    try {
-      await fs.mkdir(settings.localDir, { recursive: true });
-      await cleanupExpiredImages(settings.localDir, settings.ttlMs);
-      usage = await getActiveImageStorageUsage(
-        settings.localDir,
-        settings.ttlMs,
-      );
-    } catch (error) {
-      throw new TerminalImageStorageError(
-        "IMAGE_LOCAL_INSPECTION_FAILED",
-        "Unable to inspect local image storage",
-        error,
-      );
-    }
-    if (
-      exceedsImageStorageLimit(
-        usage.fileCount,
-        usage.totalBytes,
-        image.length,
-        settings.maxCount,
-        settings.maxBytes,
-      )
-    ) {
-      throw new TerminalImageStorageError(
-        "IMAGE_STORAGE_LIMIT_REACHED",
-        "Image storage limit reached",
-      );
-    }
-
-    const id = randomUUID();
-    const filename = `${id}.png`;
-    try {
-      await fs.writeFile(path.join(settings.localDir, filename), image);
-    } catch (error) {
-      await fs
-        .rm(path.join(settings.localDir, filename), { force: true })
-        .catch(() => undefined);
-      throw new TerminalImageStorageError(
-        "IMAGE_LOCAL_WRITE_FAILED",
-        "Failed to write image to local storage",
-        error,
-      );
-    }
-
-    return {
-      id,
-      filename,
-      shellPath: path.posix.join(settings.hostPath, filename),
-      storage: "local",
-    };
-  });
-}
-
-// Remote directory (on the SSH host the terminal is connected to) that
-// uploaded/pasted images are written into. Always POSIX-style: this is a
-// path on the remote shell, not on the Termix backend's own filesystem.
-export const REMOTE_IMAGE_DIR = "/tmp/termix-images";
-
-/** Minimal SFTP surface the remote adapter needs (satisfied by ssh2). */
-export interface ImageSftpClient {
-  mkdir(
-    dir: string,
-    attrsOrCallback: { mode?: number } | ((err?: Error) => void),
-    callback?: (err?: Error) => void,
-  ): void;
-  createWriteStream(
-    remotePath: string,
-    options?: { mode?: number },
-  ): NodeJS.WritableStream;
-  stat?: (
-    dir: string,
-    callback: (
-      error: Error | undefined,
-      attrs?: { mode?: number; mtime?: number },
-    ) => void,
-  ) => void;
-  lstat?: (
-    dir: string,
-    callback: (
-      error: Error | undefined,
-      attrs?: { mode?: number; mtime?: number },
-    ) => void,
-  ) => void;
-  chmod?: (
-    dir: string,
-    mode: number,
-    callback: (error?: Error) => void,
-  ) => void;
-  readdir?: (
-    dir: string,
-    callback: (error: Error | undefined, entries: ImageSftpEntry[]) => void,
-  ) => void;
-  unlink?: (remotePath: string, callback: (error?: Error) => void) => void;
-  rmdir?: (dir: string, callback: (error?: Error) => void) => void;
-  end?: () => void;
-}
-
-interface ImageSftpEntry {
-  filename: string;
-  attrs?: { mtime?: number; size?: number };
-}
-
-export interface ImageSshExecClient {
-  exec(
-    command: string,
-    callback: (error: Error | undefined, stream?: ImageExecStream) => void,
-  ): void;
-}
-
-interface ImageExecStream {
-  on(event: "close", listener: (code: number | null) => void): this;
-  on(event: "error", listener: (error: Error) => void): this;
-  resume(): void;
-}
-
-function quoteRemotePath(value: string): string {
-  return `'${value.replace(/'/g, `'"'"'`)}'`;
-}
-
-function execBounded(
-  sshConn: ImageSshExecClient,
-  command: string,
-  timeoutMs = 3_000,
-): Promise<boolean> {
-  return new Promise((resolve) => {
-    let settled = false;
-    const finish = (result: boolean) => {
-      if (settled) return;
-      settled = true;
-      resolve(result);
-    };
-    const timer = setTimeout(() => finish(false), timeoutMs);
-    sshConn.exec(command, (error, stream) => {
-      if (error || !stream) {
-        clearTimeout(timer);
-        finish(false);
-        return;
-      }
-      stream.on("close", (code) => {
-        clearTimeout(timer);
-        finish(code === 0);
-      });
-      stream.on("error", () => {
-        clearTimeout(timer);
-        finish(false);
-      });
-      stream.resume();
-    });
-  });
-}
-
-function withTimeout<T>(
-  operation: Promise<T>,
-  timeoutMs: number,
-  message: string,
-): Promise<T> {
-  return new Promise<T>((resolve, reject) => {
-    const timer = setTimeout(() => reject(new Error(message)), timeoutMs);
-    operation.then(
-      (value) => {
-        clearTimeout(timer);
-        resolve(value);
-      },
-      (error) => {
-        clearTimeout(timer);
-        reject(error);
-      },
-    );
-  });
-}
-
-/** Verify a configured local mapping from the currently connected SSH session. */
-export async function probeLocalImageVisibility(
-  sshConn: ImageSshExecClient,
-  settings: Pick<TerminalImageStorageSettings, "localDir" | "hostPath">,
-): Promise<boolean> {
-  const filename = `.termix-image-probe-${randomUUID()}`;
-  const localProbe = path.join(settings.localDir, filename);
-  const remoteProbe = path.posix.join(settings.hostPath, filename);
-  await fs.mkdir(settings.localDir, { recursive: true });
-  await fs.writeFile(localProbe, "termix-image-probe", { flag: "wx" });
-  try {
-    return await execBounded(
-      sshConn,
-      `test -f -- ${quoteRemotePath(remoteProbe)}`,
-    );
-  } finally {
-    await fs.unlink(localProbe).catch(() => undefined);
-    await execBounded(sshConn, `rm -f -- ${quoteRemotePath(remoteProbe)}`);
-  }
-}
-
-function sftpMkdir(sftp: ImageSftpClient, dir: string): Promise<void> {
-  return new Promise((resolve, reject) => {
-    sftp.mkdir(dir, { mode: 0o700 }, (err) => {
-      if (!err) {
-        resolve();
-        return;
-      }
-      const inspect = (sftp.lstat ?? sftp.stat)?.bind(sftp);
-      if (!inspect) {
-        reject(err);
-        return;
-      }
-      inspect(dir, (inspectError, attrs) => {
-        if (inspectError || !attrs) {
-          reject(inspectError ?? err);
-          return;
-        }
-        if (attrs.mode !== undefined && (attrs.mode & 0o170000) !== 0o040000) {
-          reject(new Error("Remote image path is not a directory"));
-          return;
-        }
-        if (!sftp.chmod) {
-          reject(
-            new Error("Remote image directory permissions cannot be verified"),
-          );
-          return;
-        }
-        sftp.chmod(dir, 0o700, (chmodError) => {
-          if (chmodError) reject(chmodError);
-          else resolve();
-        });
-      });
-    });
-  });
-}
-
-const REMOTE_IMAGE_LOCK_DIR = `${REMOTE_IMAGE_DIR}/.termix-write-lock`;
-const REMOTE_IMAGE_LOCK_LEASE_MS = 60_000;
-
-function waitForRemoteImageLock(
-  sftp: ImageSftpClient,
-  attempts = 60,
-): Promise<() => Promise<void>> {
-  if (!sftp.rmdir) {
-    return Promise.reject(
-      new TerminalImageStorageError(
-        "IMAGE_REMOTE_QUOTA_UNAVAILABLE",
-        "Remote image storage lock cannot be verified",
-      ),
-    );
-  }
-
-  return new Promise((resolve, reject) => {
-    let remaining = attempts;
-    const tryAcquire = () => {
-      sftp.mkdir(REMOTE_IMAGE_LOCK_DIR, { mode: 0o700 }, (error) => {
-        if (!error) {
-          resolve(
-            () =>
-              new Promise<void>((releaseResolve, releaseReject) => {
-                sftp.rmdir!(REMOTE_IMAGE_LOCK_DIR, (releaseError) =>
-                  releaseError ? releaseReject(releaseError) : releaseResolve(),
-                );
-              }),
-          );
-          return;
-        }
-
-        const inspect = (sftp.lstat ?? sftp.stat)?.bind(sftp);
-        if (!inspect) {
-          reject(
-            new TerminalImageStorageError(
-              "IMAGE_REMOTE_QUOTA_UNAVAILABLE",
-              "Remote image storage lock cannot be verified",
-              error,
-            ),
-          );
-          return;
-        }
-        inspect(REMOTE_IMAGE_LOCK_DIR, (inspectError, attrs) => {
-          const stale =
-            !inspectError &&
-            typeof attrs?.mtime === "number" &&
-            Date.now() - attrs.mtime * 1000 > REMOTE_IMAGE_LOCK_LEASE_MS;
-          if (stale) {
-            sftp.rmdir!(REMOTE_IMAGE_LOCK_DIR, (removeError) => {
-              if (removeError) {
-                if (--remaining <= 0) {
-                  reject(
-                    new TerminalImageStorageError(
-                      "IMAGE_REMOTE_QUOTA_UNAVAILABLE",
-                      "Stale remote image storage lock cannot be removed",
-                      removeError,
-                    ),
-                  );
-                  return;
-                }
-                setTimeout(tryAcquire, 50);
-                return;
-              }
-              tryAcquire();
-            });
-            return;
-          }
-          if (--remaining <= 0) {
-            reject(
-              new TerminalImageStorageError(
-                "IMAGE_REMOTE_QUOTA_UNAVAILABLE",
-                "Remote image storage lock is unavailable",
-                error,
-              ),
-            );
-            return;
-          }
-          setTimeout(tryAcquire, 50);
-        });
-      });
-    };
-    tryAcquire();
-  });
-}
-
-function sftpWriteFile(
-  sftp: ImageSftpClient,
-  remotePath: string,
-  data: Buffer,
-  timeoutMs = 10_000,
-): Promise<void> {
-  return new Promise((resolve, reject) => {
-    const stream = sftp.createWriteStream(remotePath, {
-      mode: 0o600,
-    }) as NodeJS.WritableStream & {
-      destroy?: () => void;
-    };
-    let settled = false;
-    const timer = setTimeout(() => {
-      if (settled) return;
-      settled = true;
-      stream.destroy?.();
-      reject(new Error("SFTP image write timed out"));
-    }, timeoutMs);
-    const finish = (error?: Error) => {
-      if (settled) return;
-      settled = true;
-      clearTimeout(timer);
-      if (error) reject(error);
-      else resolve();
-    };
-    stream.on("error", (error: Error) => finish(error));
-    stream.on("close", () => finish());
-    stream.end(data);
-  });
-}
-
-async function cleanupExpiredRemoteImages(
-  sftp: ImageSftpClient,
-  ttlMs: number | undefined,
-  nowMs = Date.now(),
-): Promise<void> {
-  if (!ttlMs || ttlMs <= 0 || !sftp.readdir || !sftp.unlink) return;
-  const entries = await new Promise<ImageSftpEntry[]>((resolve) => {
-    sftp.readdir!(REMOTE_IMAGE_DIR, (error, result) => {
-      resolve(error ? [] : result);
-    });
-  });
-  const cutoffSeconds = (nowMs - ttlMs) / 1000;
-  const uuidPng =
-    /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}\.png$/i;
-  await Promise.all(
-    entries
-      .filter(
-        (entry) =>
-          uuidPng.test(entry.filename) &&
-          typeof entry.attrs?.mtime === "number" &&
-          entry.attrs.mtime < cutoffSeconds,
-      )
-      .map((entry) =>
-        withTimeout(
-          new Promise<void>((resolve) => {
-            sftp.unlink!(`${REMOTE_IMAGE_DIR}/${entry.filename}`, () =>
-              resolve(),
-            );
-          }),
-          3_000,
-          "SFTP cleanup operation timed out",
-        ).catch(() => undefined),
-      ),
-  );
-}
-
-const REMOTE_UUID_PNG_PATTERN =
-  /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}\.png$/i;
-
-async function enforceRemoteImageLimits(
-  sftp: ImageSftpClient,
-  imageBytes: number,
-  maxCount: number,
-  maxBytes: number,
-): Promise<void> {
-  if (!sftp.readdir) {
-    throw new TerminalImageStorageError(
-      "IMAGE_REMOTE_QUOTA_UNAVAILABLE",
-      "Remote image storage limits cannot be verified",
-    );
-  }
-  let entries: ImageSftpEntry[];
-  try {
-    entries = await new Promise<ImageSftpEntry[]>((resolve, reject) => {
-      sftp.readdir!(REMOTE_IMAGE_DIR, (error, result) => {
-        if (error) reject(error);
-        else resolve(result);
-      });
-    });
-  } catch (error) {
-    throw new TerminalImageStorageError(
-      "IMAGE_REMOTE_QUOTA_UNAVAILABLE",
-      "Remote image storage limits cannot be verified",
-      error,
-    );
-  }
-  const images = entries.filter((entry) =>
-    REMOTE_UUID_PNG_PATTERN.test(entry.filename),
-  );
-  const totalBytes = images.reduce((sum, entry) => {
-    if (typeof entry.attrs?.size !== "number") {
-      throw new TerminalImageStorageError(
-        "IMAGE_REMOTE_QUOTA_UNAVAILABLE",
-        "Remote image storage limits cannot be verified",
-      );
-    }
-    return sum + entry.attrs.size;
-  }, 0);
-  if (images.length >= maxCount || totalBytes + imageBytes > maxBytes) {
-    throw new TerminalImageStorageError(
-      "IMAGE_STORAGE_LIMIT_REACHED",
-      "Image storage limit reached",
-    );
-  }
-}
-async function storeImageViaSftpUnlocked(
-  sftp: ImageSftpClient,
-  image: Buffer,
-  options: {
-    writeTimeoutMs?: number;
-    ttlMs?: number;
-    maxCount?: number;
-    maxBytes?: number;
-    nowMs?: number;
-  } = {},
-): Promise<StoredTerminalImage> {
-  const id = randomUUID();
-  const filename = `${id}.png`;
-  const remotePath = `${REMOTE_IMAGE_DIR}/${filename}`;
-
-  let releaseRemoteLock: (() => Promise<void>) | undefined;
-  let operationError: TerminalImageStorageError | undefined;
-  try {
-    await withTimeout(
-      sftpMkdir(sftp, REMOTE_IMAGE_DIR),
-      3_000,
-      "SFTP directory operation timed out",
-    );
-    releaseRemoteLock = await withTimeout(
-      waitForRemoteImageLock(sftp),
-      10_000,
-      "SFTP lock operation timed out",
-    );
-    await withTimeout(
-      cleanupExpiredRemoteImages(sftp, options.ttlMs, options.nowMs),
-      5_000,
-      "SFTP cleanup operation timed out",
-    );
-    if (options.maxCount !== undefined || options.maxBytes !== undefined) {
-      await withTimeout(
-        enforceRemoteImageLimits(
-          sftp,
-          image.length,
-          options.maxCount ?? 100,
-          options.maxBytes ?? 5_368_709_120,
-        ),
-        5_000,
-        "SFTP quota operation timed out",
-      );
-    }
-    await sftpWriteFile(sftp, remotePath, image, options.writeTimeoutMs);
-  } catch (error) {
-    if (sftp.unlink) {
-      await withTimeout(
-        new Promise<void>((resolve) => {
-          sftp.unlink!(remotePath, () => resolve());
-        }),
-        3_000,
-        "SFTP cleanup operation timed out",
-      ).catch(() => undefined);
-    }
-    operationError =
-      error instanceof TerminalImageStorageError
-        ? error
-        : new TerminalImageStorageError(
-            "IMAGE_REMOTE_WRITE_FAILED",
-            "Failed to write image to the remote host",
-            error,
-          );
-  }
-
-  if (releaseRemoteLock) {
-    try {
-      await withTimeout(
-        releaseRemoteLock(),
-        3_000,
-        "SFTP lock release timed out",
-      );
-    } catch (releaseError) {
-      if (!operationError) {
-        if (sftp.unlink) {
-          await withTimeout(
-            new Promise<void>((resolve) => {
-              sftp.unlink!(remotePath, () => resolve());
-            }),
-            3_000,
-            "SFTP cleanup operation timed out",
-          ).catch(() => undefined);
-        }
-        operationError = new TerminalImageStorageError(
-          "IMAGE_REMOTE_WRITE_FAILED",
-          "Failed to release remote image storage lock",
-          releaseError,
-        );
-      }
-    }
-  }
-
-  if (operationError) throw operationError;
-
-  return { id, filename, shellPath: remotePath, storage: "remote-sftp" };
-}
-
-export function storeImageViaSftp(
-  sftp: ImageSftpClient,
-  image: Buffer,
-  options: Parameters<typeof storeImageViaSftpUnlocked>[2] = {},
-): Promise<StoredTerminalImage> {
-  return withImageStorageLock(() =>
-    withTimeout(
-      storeImageViaSftpUnlocked(sftp, image, options),
-      20_000,
-      "SFTP image operation timed out",
-    ),
-  );
-}
diff --git a/plugins/ssh-terminal/src/backend/images/image-utils.ts b/plugins/ssh-terminal/src/backend/images/image-utils.ts
deleted file mode 100644
index f6eb00466..000000000
--- a/plugins/ssh-terminal/src/backend/images/image-utils.ts
+++ /dev/null
@@ -1,100 +0,0 @@
-// Accepted decoded input formats; uploads are normalized to PNG by the route.
-export const IMAGE_FORMAT_EXTENSIONS: Record<string, string> = {
-  avif: "avif",
-  gif: "gif",
-  heif: "heif",
-  jpeg: "jpg",
-  jp2: "jp2",
-  jxl: "jxl",
-  png: "png",
-  tiff: "tiff",
-  webp: "webp",
-};
-
-export function imageExtensionForFormat(
-  format: string | undefined,
-): string | undefined {
-  return format ? IMAGE_FORMAT_EXTENSIONS[format] : undefined;
-}
-
-export const MAX_NORMALIZED_IMAGE_BYTES = 10 * 1024 * 1024;
-
-export function exceedsNormalizedImageSize(
-  byteLength: number,
-  maxBytes = MAX_NORMALIZED_IMAGE_BYTES,
-): boolean {
-  return byteLength > maxBytes;
-}
-
-export function createConcurrencyLimiter(
-  limit: number,
-  maxQueued = Number.POSITIVE_INFINITY,
-): {
-  acquire: () => Promise<() => void>;
-  readonly active: number;
-  readonly queued: number;
-} {
-  const max = Math.max(1, Math.floor(limit));
-  const queueLimit = Math.max(0, Math.floor(maxQueued));
-  let active = 0;
-  const waiters: Array<() => void> = [];
-
-  const startNext = () => {
-    if (active >= max || waiters.length === 0) return;
-    active += 1;
-    waiters.shift()!();
-  };
-
-  return {
-    acquire: () =>
-      new Promise<() => void>((resolve, reject) => {
-        if (active >= max && waiters.length >= queueLimit) {
-          reject(new Error("Concurrency admission queue is full"));
-          return;
-        }
-        waiters.push(() => {
-          let released = false;
-          resolve(() => {
-            if (released) return;
-            released = true;
-            active -= 1;
-            startNext();
-          });
-        });
-        startNext();
-      }),
-    get active() {
-      return active;
-    },
-    get queued() {
-      return waiters.length;
-    },
-  };
-}
-
-export const IMAGE_FILENAME_PATTERN = /^[0-9a-f-]{36}\.[a-z0-9]+$/i;
-
-export function isImageFilename(filename: string): boolean {
-  return IMAGE_FILENAME_PATTERN.test(filename);
-}
-
-export function isExpiredImage(
-  modifiedAtMs: number,
-  nowMs: number,
-  ttlMs: number,
-): boolean {
-  if (ttlMs <= 0) return false;
-  return nowMs - modifiedAtMs > ttlMs;
-}
-
-export function exceedsImageStorageLimit(
-  fileCount: number,
-  totalBytes: number,
-  incomingBytes: number,
-  maxFileCount: number,
-  maxStorageBytes: number,
-): boolean {
-  return (
-    fileCount >= maxFileCount || totalBytes + incomingBytes > maxStorageBytes
-  );
-}
diff --git a/plugins/ssh-terminal/src/backend/index.ts b/plugins/ssh-terminal/src/backend/index.ts
deleted file mode 100644
index 387240591..000000000
--- a/plugins/ssh-terminal/src/backend/index.ts
+++ /dev/null
@@ -1,187 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { createTerminalLogger } from "./helpers.js";
-import { hostImportNormalizer, hostPayloadLegacy } from "./host-import.js";
-import { createHistoryRepository } from "./history-repository.js";
-import { registerTerminalRoutes } from "./routes.js";
-import {
-  DEFAULT_TIMEOUT_MINUTES,
-  TerminalSessionManager,
-  type TerminalSession,
-} from "./session-manager.js";
-import {
-  SESSION_GUESTS_KEY,
-  type LiveSessionInfo,
-  type LiveSessionsV1,
-  type RecordingsWriterV1,
-  type SessionGuestsV1,
-  type SessionSharingV1,
-  type TerminalHistoryV1,
-  type TmuxSessionsV1,
-} from "./services.js";
-import { ADMIN_KEYS } from "./settings.js";
-import { commandHistory } from "./tables.js";
-import { createTerminalSocket } from "./terminal-socket.js";
-import {
-  validateAdminSettings,
-  validateUserSettings,
-} from "./settings-validation.js";
-
-function toInfo(session: TerminalSession): LiveSessionInfo {
-  return {
-    id: session.id,
-    userId: session.userId,
-    hostId: session.hostId,
-    hostName: session.hostName,
-    isConnected: session.isConnected,
-    createdAt: session.createdAt,
-    lastDetachedAt: session.lastDetachedAt,
-    tabInstanceId:
-      session.attachedTabInstanceId ?? session.tabInstanceId ?? null,
-    tmuxSessionName: session.tmuxSessionName,
-    cols: session.cols,
-    rows: session.rows,
-  };
-}
-
-/**
- * A service another plugin may or may not provide. The handle always exists;
- * whether its provider is up is asked through the proxy's `in` check.
- */
-function optionalService<T extends object>(
-  ctx: PluginContext,
-  service: string,
-  probe: keyof T & string,
-): T | null {
-  const handle = ctx.services.get<T>(service);
-  return probe in handle ? handle : null;
-}
-
-export async function activate(ctx: PluginContext) {
-  const log = createTerminalLogger(ctx.log);
-  ctx.settings.onValidate("admin", validateAdminSettings);
-  ctx.settings.onValidate("user", validateUserSettings);
-
-  const table = await ctx.db.define(commandHistory);
-  const history = createHistoryRepository(ctx.db, table);
-
-  // Read on every detach, so it is kept current rather than awaited there.
-  let timeoutMinutes = DEFAULT_TIMEOUT_MINUTES;
-  const applyTimeout = (value: unknown) => {
-    const minutes = Number(value);
-    timeoutMinutes =
-      Number.isFinite(minutes) && minutes > 0
-        ? minutes
-        : DEFAULT_TIMEOUT_MINUTES;
-  };
-  const refreshTimeout = async () =>
-    applyTimeout(await ctx.settings.get(ADMIN_KEYS.sessionTimeoutMinutes));
-  await refreshTimeout();
-  ctx.settings.onChange(ADMIN_KEYS.sessionTimeoutMinutes, applyTimeout);
-
-  const sessionManager = new TerminalSessionManager({
-    log,
-    getTimeoutMinutes: () => timeoutMinutes,
-    getRecordings: () =>
-      optionalService<RecordingsWriterV1>(ctx, "recordings.writer", "open"),
-  });
-  ctx.disposables.add(() => sessionManager.destroyAll());
-
-  const socket = createTerminalSocket({
-    ctx,
-    log,
-    sessionManager,
-    getTmux: () =>
-      optionalService<TmuxSessionsV1>(ctx, "tmux.sessions", "detect"),
-    getSharing: () =>
-      optionalService<SessionSharingV1>(
-        ctx,
-        "sessions.sharing",
-        "authorizeJoin",
-      ),
-    getGuests: () =>
-      ctx.registry.consume<SessionGuestsV1>(SESSION_GUESTS_KEY) ?? null,
-  });
-
-  // Public with optional auth: a share-link guest arrives with a share token
-  // instead of a session, so that check happens where the token is understood.
-  ctx.ws.route(
-    "/terminal",
-    (connection) => {
-      // Also picks up a value the boot migration wrote after activation.
-      void refreshTimeout().catch(() => {});
-      return socket.handleConnection(connection);
-    },
-    {
-      public: true,
-      optionalAuth: true,
-    },
-  );
-  ctx.disposables.add(() => socket.closeAll());
-
-  registerTerminalRoutes(ctx.http.router<Router>({ rawBody: true }), {
-    ctx,
-    log,
-    sessionManager,
-    history,
-  });
-
-  const liveSessions: LiveSessionsV1 = {
-    getSession: (sessionId) => {
-      const session = sessionManager.getSession(sessionId);
-      return session ? toInfo(session) : null;
-    },
-    listForUser: (userId) => {
-      // A plugin caller only ever sees its actor's sessions; core calls this
-      // outside any actor, for the user its own route authenticated.
-      const actor = ctx.currentActor();
-      if (actor && actor !== userId) return [];
-      return sessionManager.getUserSessions(userId).map(toInfo);
-    },
-    ownerEndSession: (sessionId, reason) =>
-      sessionManager.ownerEndSession(sessionId, reason),
-    disconnectParticipants: (sessionId, shareId, options) =>
-      sessionManager.disconnectShareParticipants(sessionId, shareId, options),
-    listGuests: (sessionId, shareId) =>
-      sessionManager.listShareGuests(sessionId, shareId),
-    setRoomShareControl: (sessionId, shareId, controllerUserId) =>
-      sessionManager.setRoomShareControl(sessionId, shareId, controllerUserId),
-    subscribe: (sessionId, onData) => {
-      const session = sessionManager.getSession(sessionId);
-      if (!session) return () => {};
-      session.dataListeners.add(onData);
-      return () => session.dataListeners.delete(onData);
-    },
-    write: (sessionId, data) => {
-      const session = sessionManager.getSession(sessionId);
-      if (!session?.sshStream || session.sshStream.destroyed) return false;
-      sessionManager.bufferInput(sessionId, data);
-      session.sshStream.write(data);
-      return true;
-    },
-    idleTimeoutMinutes: () => timeoutMinutes,
-  };
-  // sessions.live is keyed by session type; remote desktop provides the others.
-  ctx.services.provide("sessions.live", liveSessions, { name: "ssh" });
-
-  const terminalHistory: TerminalHistoryV1 = {
-    list: async (hostId, limit = 200) => {
-      const userId = ctx.currentActor();
-      if (!userId) return [];
-      return history.listCommandsForHost(userId, hostId, limit);
-    },
-  };
-  ctx.services.provide("terminal.history", terminalHistory);
-
-  ctx.registry.provide(
-    "ssh-terminal.hostImportNormalizer",
-    hostImportNormalizer,
-  );
-  ctx.registry.provide("ssh-terminal.hostPayloadLegacy", hostPayloadLegacy);
-
-  ctx.log.info("SSH terminal mounted at /plugin-ws/ssh-terminal/terminal");
-}
-
-export async function deactivate() {
-  // Everything above was registered through ctx and is disposed by core.
-}
diff --git a/plugins/ssh-terminal/src/backend/keyboard-prompt.ts b/plugins/ssh-terminal/src/backend/keyboard-prompt.ts
deleted file mode 100644
index 5408fc944..000000000
--- a/plugins/ssh-terminal/src/backend/keyboard-prompt.ts
+++ /dev/null
@@ -1,310 +0,0 @@
-/**
- * Keyboard-interactive answering over the terminal WebSocket.
- *
- * Core's classifier (ctx.ssh.classifyKeyboardInteractive) decides what a
- * round is; this keeps the terminal's message protocol (totp_required,
- * totp_retry, password_required, "<handler>_auth_required" for a browser
- * sign-in round) and its timeouts exactly as the client expects.
- */
-
-import type { WebSocket } from "ws";
-import type {
-  PluginBrowserSignInRound,
-  PluginKeyboardInteractivePrompt,
-  PluginSsh,
-  PluginSshHost,
-} from "@termix/plugin-sdk/backend";
-import type { TerminalLogger } from "./helpers.js";
-
-type KeyboardInteractivePrompt = PluginKeyboardInteractivePrompt;
-
-const PASSWORD_PATTERN = /password/i;
-
-/** The answer at one index, the stored password for password prompts, else empty. */
-export function responsesWithAnswer(
-  prompts: KeyboardInteractivePrompt[],
-  answerIndex: number,
-  answer: string,
-  password: string | null | undefined,
-): string[] {
-  return prompts.map((p, index) => {
-    if (index === answerIndex) return answer;
-    if (PASSWORD_PATTERN.test(p.prompt) && password) return password;
-    return "";
-  });
-}
-
-interface ResolvedCredentials {
-  username: string;
-  password?: string;
-  authType?: string;
-}
-
-interface HostFlags {
-  [key: string]: unknown;
-}
-
-interface AuthContext {
-  ssh: Pick<PluginSsh, "classifyKeyboardInteractive">;
-  log: TerminalLogger;
-  userId: string;
-  ws: WebSocket;
-  hostId: number;
-  isKeyboardInteractive: boolean;
-  keyboardInteractiveResponded: boolean;
-  keyboardInteractiveFinish: ((responses: string[]) => void) | null;
-  totpPromptSent: boolean;
-  /** The handler whose browser round is waiting for "<id>_auth_continue". */
-  browserSignInId: string | null;
-  totpTimeout: NodeJS.Timeout | null;
-  browserSignInTimeout: NodeJS.Timeout | null;
-  totpAttempts: number;
-}
-
-const TOTP_TIMEOUT_MS = 180000;
-const PUSH_TIMEOUT_MS = 300000;
-const BROWSER_SIGN_IN_TIMEOUT_MS = 300000;
-
-export class SSHAuthManager {
-  public context: AuthContext;
-
-  constructor(context: AuthContext) {
-    this.context = context;
-  }
-
-  handleKeyboardInteractive(
-    name: string,
-    instructions: string,
-    _instructionsLang: string,
-    prompts: KeyboardInteractivePrompt[],
-    finish: (responses: string[]) => void,
-    resolvedCredentials: ResolvedCredentials,
-    hostConfig?: HostFlags,
-  ): void {
-    this.context.isKeyboardInteractive = true;
-
-    const host = {
-      ...(hostConfig ?? {}),
-      id: this.context.hostId,
-      ip: "",
-      port: 22,
-      username: resolvedCredentials.username,
-      password: resolvedCredentials.password,
-      authType: resolvedCredentials.authType,
-    } as PluginSshHost;
-
-    const decision = this.context.ssh.classifyKeyboardInteractive(
-      { name, instructions, prompts },
-      host,
-    );
-
-    switch (decision.kind) {
-      case "auto":
-        finish(decision.responses);
-        return;
-      case "browser":
-        this.handleBrowserSignIn(decision, finish);
-        return;
-      case "totp":
-        this.handleTotp(
-          prompts,
-          decision.promptIndex,
-          finish,
-          host.password as string | undefined,
-        );
-        return;
-      case "input":
-        this.handleInput(
-          prompts,
-          decision.promptIndex,
-          decision.isPush,
-          finish,
-          host.password as string | undefined,
-        );
-        return;
-    }
-  }
-
-  /**
-   * A round finished in a browser. The message is named after the handler
-   * that claimed it (Termix-Mobile listens for these names), and the client
-   * answers with "<id>_auth_continue".
-   */
-  private handleBrowserSignIn(
-    round: PluginBrowserSignInRound,
-    finish: (responses: string[]) => void,
-  ): void {
-    this.context.keyboardInteractiveFinish = () => {
-      finish([""]);
-    };
-    this.context.browserSignInId = round.id;
-    this.sendLog("auth", "info", `${round.label} sign-in required`);
-    this.context.ws.send(
-      JSON.stringify({
-        type: `${round.id}_auth_required`,
-        kind: "browser",
-        label: round.label,
-        url: round.url,
-        securityKey: round.code,
-        instructions: round.instructions,
-      }),
-    );
-
-    this.context.browserSignInTimeout = setTimeout(() => {
-      if (this.context.keyboardInteractiveFinish) {
-        this.context.keyboardInteractiveFinish = null;
-        this.context.browserSignInId = null;
-        this.context.log.warn("Browser sign-in timeout", {
-          operation: "browser_sign_in_timeout",
-          handler: round.id,
-          hostId: this.context.hostId,
-        });
-        this.context.ws.send(
-          JSON.stringify({
-            type: "error",
-            message: `${round.label} sign-in timed out. Please reconnect.`,
-          }),
-        );
-      }
-    }, BROWSER_SIGN_IN_TIMEOUT_MS);
-  }
-
-  private handleTotp(
-    prompts: KeyboardInteractivePrompt[],
-    promptIndex: number,
-    finish: (responses: string[]) => void,
-    password: string | undefined,
-  ): void {
-    if (this.context.totpPromptSent) {
-      this.context.log.warn("TOTP prompt asked again - invalid code", {
-        operation: "ssh_keyboard_interactive_totp_retry",
-        hostId: this.context.hostId,
-      });
-      this.context.log.warn("TOTP verification failed for SSH session", {
-        operation: "terminal_totp_failed",
-        userId: this.context.userId,
-        hostId: this.context.hostId,
-      });
-      this.sendLog("auth", "warning", "Invalid TOTP code");
-      this.context.ws.send(JSON.stringify({ type: "totp_retry" }));
-      return;
-    }
-
-    this.context.totpPromptSent = true;
-    this.context.keyboardInteractiveResponded = true;
-    this.context.keyboardInteractiveFinish = (answers: string[]) => {
-      finish(
-        responsesWithAnswer(
-          prompts,
-          promptIndex,
-          (answers[0] || "").trim(),
-          password,
-        ),
-      );
-    };
-
-    this.armTimeout(TOTP_TIMEOUT_MS, "totp");
-    this.sendLog("auth", "info", "TOTP verification required");
-    this.context.log.info("TOTP verification prompt sent to client", {
-      operation: "terminal_totp_prompt",
-      userId: this.context.userId,
-      hostId: this.context.hostId,
-    });
-    this.context.ws.send(
-      JSON.stringify({
-        type: "totp_required",
-        prompt: prompts[promptIndex].prompt,
-      }),
-    );
-  }
-
-  private handleInput(
-    prompts: KeyboardInteractivePrompt[],
-    promptIndex: number,
-    isPush: boolean,
-    finish: (responses: string[]) => void,
-    password: string | undefined,
-  ): void {
-    if (this.context.keyboardInteractiveResponded) return;
-    this.context.keyboardInteractiveResponded = true;
-
-    this.context.keyboardInteractiveFinish = (answers: string[]) => {
-      finish(
-        responsesWithAnswer(
-          prompts,
-          promptIndex,
-          (answers[0] || "").trim(),
-          password,
-        ),
-      );
-    };
-
-    this.armTimeout(isPush ? PUSH_TIMEOUT_MS : TOTP_TIMEOUT_MS, "password");
-    this.sendLog("auth", "info", "Password authentication required");
-    this.context.ws.send(
-      JSON.stringify({
-        type: "password_required",
-        prompt: prompts[promptIndex].prompt,
-        echo: prompts[promptIndex].echo,
-      }),
-    );
-  }
-
-  private armTimeout(ms: number, kind: "totp" | "password"): void {
-    if (this.context.totpTimeout) clearTimeout(this.context.totpTimeout);
-    this.context.totpTimeout = setTimeout(() => {
-      if (!this.context.keyboardInteractiveFinish) return;
-      this.context.keyboardInteractiveFinish = null;
-      if (kind === "totp") {
-        this.context.totpPromptSent = false;
-      } else {
-        this.context.keyboardInteractiveResponded = false;
-      }
-      this.context.log.warn(
-        `${kind === "totp" ? "TOTP" : "Password"} prompt timeout`,
-        {
-          operation: `${kind}_timeout`,
-          hostId: this.context.hostId,
-        },
-      );
-      this.context.ws.send(
-        JSON.stringify({
-          type: "error",
-          message:
-            kind === "totp"
-              ? "TOTP verification timeout. Please reconnect."
-              : "Password verification timeout. Please reconnect.",
-        }),
-      );
-    }, ms);
-  }
-
-  sendLog(
-    stage: string,
-    level: string,
-    message: string,
-    details?: Record<string, unknown>,
-  ): void {
-    this.context.ws.send(
-      JSON.stringify({
-        type: "connection_log",
-        data: { stage, level, message, details },
-      }),
-    );
-  }
-
-  cleanup(): void {
-    if (this.context.totpTimeout) {
-      clearTimeout(this.context.totpTimeout);
-      this.context.totpTimeout = null;
-    }
-    if (this.context.browserSignInTimeout) {
-      clearTimeout(this.context.browserSignInTimeout);
-      this.context.browserSignInTimeout = null;
-    }
-    this.context.keyboardInteractiveFinish = null;
-    this.context.totpPromptSent = false;
-    this.context.browserSignInId = null;
-    this.context.keyboardInteractiveResponded = false;
-  }
-}
diff --git a/plugins/ssh-terminal/src/backend/routes.ts b/plugins/ssh-terminal/src/backend/routes.ts
deleted file mode 100644
index 457948764..000000000
--- a/plugins/ssh-terminal/src/backend/routes.ts
+++ /dev/null
@@ -1,895 +0,0 @@
-import express, {
-  type NextFunction,
-  type Request,
-  type Response,
-  type Router,
-} from "express";
-import { randomUUID } from "crypto";
-import multer from "multer";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { getErrorMessage, type TerminalLogger } from "./helpers.js";
-import type { HistoryRepository } from "./history-repository.js";
-import type { TerminalSessionManager } from "./session-manager.js";
-import {
-  ADMIN_KEYS,
-  HOST_KEYS,
-  MOVABLE_USER_KEYS,
-  readClientSettings,
-  readImageStorageSettings,
-} from "./settings.js";
-import {
-  createConcurrencyLimiter,
-  exceedsNormalizedImageSize,
-  imageExtensionForFormat,
-} from "./images/image-utils.js";
-import {
-  selectImageStorageMode,
-  probeLocalImageVisibility,
-  storeImageLocally,
-  storeImageViaSftp,
-  TerminalImageStorageError,
-  type ImageSftpClient,
-} from "./images/image-storage.js";
-
-function isNonEmptyString(val: unknown): val is string {
-  return typeof val === "string" && val.trim().length > 0;
-}
-
-export const SENSITIVE_COMMAND_PATTERNS = [
-  /passw(or)?d/i,
-  /\bsecret\b/i,
-  /\btoken\b/i,
-  /\bapi.?key\b/i,
-  /PASS(WORD)?=/i,
-  /AWS_SECRET/i,
-  /mysql\b.*-p/i,
-  /sudo\s+-S\b/,
-  /htpasswd/i,
-  /sshpass/i,
-  /curl\b.*-u\s/i,
-  /export\b.*(?:PASSWORD|SECRET|TOKEN|KEY)=/i,
-];
-
-type SharpFactory = typeof import("sharp").default;
-
-export interface TerminalRouteDeps {
-  ctx: PluginContext;
-  log: TerminalLogger;
-  sessionManager: TerminalSessionManager;
-  history: HistoryRepository;
-}
-
-/**
- * The terminal's HTTP routes, on a router core mounts at
- * /plugin-api/ssh-terminal/. It is created with rawBody so multer can read
- * the upload stream; JSON routes parse their own body.
- */
-export function registerTerminalRoutes(
-  router: Router,
-  { ctx, log, sessionManager, history }: TerminalRouteDeps,
-): void {
-  const json = express.json({ limit: "2mb" });
-
-  // Browser image handoff for local terminal-agent workflows.
-  const imageUpload = multer({
-    storage: multer.memoryStorage(),
-    limits: {
-      fileSize: 50 * 1024 * 1024,
-      fields: 4,
-      fieldSize: 64 * 1024,
-      files: 1,
-      parts: 5,
-      headerPairs: 200,
-    },
-  });
-  const imageUploadMiddleware = imageUpload.single("image");
-
-  let sharpFactory: SharpFactory | null = null;
-  let sharpLoadFailure: string | null = null;
-
-  // A static import of sharp takes the plugin down with it when the native
-  // binary for the running architecture is missing. Resolve on first use so
-  // only image upload is lost.
-  async function loadSharp(): Promise<SharpFactory> {
-    if (sharpFactory) return sharpFactory;
-    if (sharpLoadFailure !== null) throw new Error(sharpLoadFailure);
-    try {
-      sharpFactory = (await import("sharp")).default;
-      return sharpFactory;
-    } catch (error) {
-      sharpLoadFailure = getErrorMessage(error, "unknown");
-      throw new Error(sharpLoadFailure);
-    }
-  }
-
-  const imageProcessingLimiter = createConcurrencyLimiter(4, 4);
-  const imageMultipartAdmissionLimiter = createConcurrencyLimiter(4, 4);
-  let imageUploadSequence = 0;
-
-  async function handleImageUploadMiddleware(
-    req: Request,
-    res: Response,
-    next: NextFunction,
-  ): Promise<void> {
-    let releaseAdmission: (() => void) | undefined;
-    try {
-      releaseAdmission = await imageMultipartAdmissionLimiter.acquire();
-    } catch {
-      res.status(503).json({
-        error: "Image upload capacity is temporarily unavailable",
-        code: "IMAGE_UPLOAD_CAPACITY_EXCEEDED",
-      });
-      return;
-    }
-
-    imageUploadMiddleware(req, res, (error: unknown) => {
-      try {
-        if (!error) {
-          next();
-          return;
-        }
-        if (error instanceof multer.MulterError) {
-          log.warn("Image upload multipart request rejected", {
-            operation: "terminal_image_upload_multipart_rejected",
-            code: error.code,
-            field: error.field,
-            contentType: req.headers["content-type"]?.split(";", 1)[0],
-          });
-          res.status(400).json({
-            error: "Image upload request rejected",
-            code: error.code,
-            field: error.field,
-          });
-          return;
-        }
-        log.warn("Image upload multipart request malformed", {
-          operation: "terminal_image_upload_multipart_invalid",
-          contentType: req.headers["content-type"]?.split(";", 1)[0],
-        });
-        res.status(400).json({
-          error: "Malformed image upload request",
-          code: "IMAGE_MULTIPART_INVALID",
-        });
-      } finally {
-        releaseAdmission?.();
-      }
-    });
-  }
-
-  function findTerminalSession(userId: string, instanceId: string) {
-    return sessionManager
-      .getUserSessions(userId)
-      .find(
-        (session) =>
-          (session.attachedTabInstanceId ?? session.tabInstanceId) ===
-            instanceId && session.isConnected,
-      );
-  }
-
-  /**
-   * @openapi
-   * /plugin-api/ssh-terminal/image-upload:
-   *   post:
-   *     summary: Upload an image into a terminal session
-   *     description: Normalizes an uploaded or pasted image to PNG and stores it where the terminal's programs can read it, over SFTP on the connected host or in the backend's mapped local storage, depending on the image storage settings. Returns the path to hand to the program.
-   *     tags:
-   *       - Terminal
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         multipart/form-data:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               image:
-   *                 type: string
-   *                 format: binary
-   *               instanceId:
-   *                 type: string
-   *               source:
-   *                 type: string
-   *                 enum: [file, clipboard]
-   *               clientUploadTimestamp:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: The stored image's path.
-   *       400:
-   *         description: Missing or invalid image or session.
-   *       409:
-   *         description: The terminal is not connected.
-   *       413:
-   *         description: The normalized image is too large.
-   *       502:
-   *         description: Writing to the remote host failed.
-   *       503:
-   *         description: Image storage or processing is unavailable.
-   *       507:
-   *         description: The image storage limit was reached.
-   */
-  router.post(
-    "/image-upload",
-    handleImageUploadMiddleware,
-    async (req: Request, res: Response) => {
-      const userId = ctx.currentActor();
-      const instanceId = req.body?.instanceId;
-      if (!req.file) {
-        return res.status(400).json({
-          error: "Image required",
-          code: "IMAGE_FILE_MISSING",
-        });
-      }
-      if (!isNonEmptyString(userId)) {
-        return res.status(400).json({
-          error: "Missing terminal session",
-          code: "IMAGE_SESSION_MISSING",
-        });
-      }
-
-      const requestId = randomUUID();
-      const sequence = ++imageUploadSequence;
-      const source =
-        req.body?.source === "file" || req.body?.source === "clipboard"
-          ? req.body.source
-          : undefined;
-      const clientUploadTimestamp =
-        typeof req.body?.clientUploadTimestamp === "string" &&
-        !Number.isNaN(Date.parse(req.body.clientUploadTimestamp))
-          ? req.body.clientUploadTimestamp
-          : undefined;
-      const serverReceivedAt = new Date().toISOString();
-      log.info("Terminal image upload received", {
-        operation: "terminal_image_upload_received",
-        requestId,
-        sequence,
-        source,
-        clientUploadTimestamp,
-        serverReceivedAt,
-        bytes: req.file.size,
-      });
-
-      const storageSettings = await readImageStorageSettings(ctx);
-      const session = isNonEmptyString(instanceId)
-        ? findTerminalSession(userId, instanceId)
-        : undefined;
-      let localHostVisible = false;
-      if (storageSettings.localMappingConfigured && session?.sshConn) {
-        localHostVisible = await probeLocalImageVisibility(
-          session.sshConn,
-          storageSettings,
-        ).catch(() => false);
-      }
-      const storageMode = selectImageStorageMode(storageSettings, {
-        remoteSftpAvailable: !!session?.sshConn,
-        localHostVisible,
-      });
-
-      if (storageMode === "unavailable") {
-        return res.status(503).json({
-          error: "Image storage is unavailable",
-          code: "IMAGE_STORAGE_UNAVAILABLE",
-        });
-      }
-
-      if (storageMode === "local" && !storageSettings.localMappingConfigured) {
-        return res.status(503).json({
-          error: "Local image storage is not configured",
-          code: "IMAGE_LOCAL_STORAGE_NOT_CONFIGURED",
-        });
-      }
-
-      if (storageMode === "remote-sftp") {
-        if (!isNonEmptyString(instanceId)) {
-          return res.status(400).json({
-            error: "Missing terminal session",
-            code: "IMAGE_SESSION_MISSING",
-          });
-        }
-        if (!session || !session.sshConn) {
-          return res.status(409).json({
-            error: "Terminal is not connected",
-            code: "IMAGE_TERMINAL_NOT_CONNECTED",
-          });
-        }
-      }
-
-      let sharp: SharpFactory;
-      try {
-        sharp = await loadSharp();
-      } catch (error) {
-        log.error("Image processing unavailable: sharp failed to load", error, {
-          operation: "terminal_image_upload_sharp_unavailable",
-          reason: getErrorMessage(error, "unknown"),
-        });
-        return res.status(503).json({
-          error: "Image processing is unavailable on this installation",
-          code: "IMAGE_PROCESSING_UNAVAILABLE",
-        });
-      }
-
-      let normalizedImage: Buffer;
-      let releaseImageProcessingSlot: (() => void) | undefined;
-      try {
-        releaseImageProcessingSlot = await imageProcessingLimiter.acquire();
-      } catch {
-        return res.status(503).json({
-          error: "Image upload capacity is temporarily exhausted",
-          code: "IMAGE_UPLOAD_CAPACITY_EXCEEDED",
-        });
-      }
-      try {
-        const image = sharp(req.file.buffer, {
-          failOn: "error",
-          limitInputPixels: 40_000_000,
-        });
-        const { format } = await image.metadata();
-        if (!imageExtensionForFormat(format)) {
-          return res.status(400).json({
-            error: "Unsupported image format",
-            code: "IMAGE_FORMAT_UNSUPPORTED",
-          });
-        }
-        normalizedImage = await image.rotate().png().toBuffer();
-        if (exceedsNormalizedImageSize(normalizedImage.length)) {
-          return res.status(413).json({
-            error: "Normalized image is too large",
-            code: "IMAGE_NORMALIZED_SIZE_LIMIT",
-          });
-        }
-      } catch (error) {
-        log.warn("Image upload failed image decoding", {
-          operation: "terminal_image_upload_decode",
-          mimeType: req.file.mimetype,
-          bytes: req.file.size,
-          reason: getErrorMessage(error, "unknown"),
-        });
-        return res.status(400).json({
-          error: "Invalid image data",
-          code: "IMAGE_DECODE_FAILED",
-        });
-      } finally {
-        releaseImageProcessingSlot?.();
-      }
-
-      let remoteSftp: ImageSftpClient | undefined;
-      try {
-        const stored =
-          storageMode === "remote-sftp"
-            ? await (async () => {
-                remoteSftp = await new Promise<ImageSftpClient>(
-                  (resolve, reject) => {
-                    let settled = false;
-                    const timer = setTimeout(() => {
-                      settled = true;
-                      reject(new Error("SFTP channel acquisition timed out"));
-                    }, 3_000);
-                    session!.sshConn!.sftp((err, sftp) => {
-                      if (settled) {
-                        sftp?.end?.();
-                        return;
-                      }
-                      settled = true;
-                      clearTimeout(timer);
-                      if (err) return reject(err);
-                      resolve(sftp);
-                    });
-                  },
-                );
-                return storeImageViaSftp(remoteSftp, normalizedImage, {
-                  ttlMs: storageSettings.ttlMs,
-                  maxCount: storageSettings.maxCount,
-                  maxBytes: storageSettings.maxBytes,
-                });
-              })()
-            : await storeImageLocally(normalizedImage, storageSettings);
-
-        res.json(stored);
-      } catch (error) {
-        if (error instanceof TerminalImageStorageError) {
-          const status =
-            error.code === "IMAGE_STORAGE_LIMIT_REACHED"
-              ? 507
-              : error.code === "IMAGE_REMOTE_WRITE_FAILED"
-                ? 502
-                : error.code === "IMAGE_REMOTE_QUOTA_UNAVAILABLE"
-                  ? 503
-                  : error.code === "IMAGE_LOCAL_INSPECTION_FAILED"
-                    ? 503
-                    : 500;
-          log.warn("Image upload storage write failed", {
-            operation:
-              error.code === "IMAGE_REMOTE_WRITE_FAILED"
-                ? "terminal_image_upload_sftp_failed"
-                : "terminal_image_upload_local_failed",
-            code: error.code,
-            userId,
-            instanceId,
-            reason: getErrorMessage(error.cause ?? error, "unknown"),
-          });
-          return res.status(status).json({
-            error: error.message,
-            code: error.code,
-          });
-        }
-        log.warn("Image upload failed to acquire remote channel", {
-          operation: "terminal_image_upload_sftp_failed",
-          code: "IMAGE_REMOTE_WRITE_FAILED",
-          userId,
-          instanceId,
-          reason: getErrorMessage(error, "unknown"),
-        });
-        return res.status(502).json({
-          error: "Failed to write image to the remote host",
-          code: "IMAGE_REMOTE_WRITE_FAILED",
-        });
-      } finally {
-        remoteSftp?.end?.();
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/ssh-terminal/image-storage/test:
-   *   post:
-   *     summary: Test image storage visibility (admin only)
-   *     description: Reports which storage mode an upload would take for one of the caller's already-connected terminal sessions. Uses the bounded local-mapping probe only; it never opens new connections.
-   *     tags:
-   *       - Terminal
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               instanceId:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Visibility test result.
-   *       400:
-   *         description: Missing terminal session instanceId.
-   *       403:
-   *         description: Admin access required.
-   *       500:
-   *         description: Failed to run the test.
-   */
-  router.post("/image-storage/test", json, async (req, res) => {
-    if (!(await ctx.rbac.has("admin.plugins.manage"))) {
-      return res.status(403).json({ error: "Admin access required" });
-    }
-    const userId = ctx.currentActor() ?? "";
-    const instanceId = req.body?.instanceId;
-    if (typeof instanceId !== "string" || instanceId.trim().length === 0) {
-      return res.status(400).json({
-        error: "Missing terminal session",
-        code: "IMAGE_SESSION_MISSING",
-      });
-    }
-
-    try {
-      const settings = await readImageStorageSettings(ctx);
-      const session = findTerminalSession(userId, instanceId);
-      const remoteSftpAvailable = !!session?.sshConn;
-
-      let localHostVisible: boolean | null = null;
-      if (settings.localMappingConfigured && session?.sshConn) {
-        localHostVisible = await probeLocalImageVisibility(
-          session.sshConn,
-          settings,
-        ).catch(() => false);
-      }
-
-      const selectedMode = selectImageStorageMode(settings, {
-        remoteSftpAvailable,
-        ...(localHostVisible !== null ? { localHostVisible } : {}),
-      });
-
-      res.json({
-        mode: settings.mode,
-        connected: !!session,
-        remoteSftpAvailable,
-        localHostVisible,
-        selectedMode,
-        localMappingConfigured: settings.localMappingConfigured,
-      });
-    } catch (err) {
-      log.error("Failed to test image storage visibility", err);
-      res
-        .status(500)
-        .json({ error: "Failed to test image storage visibility" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/ssh-terminal/client-settings:
-   *   get:
-   *     summary: Terminal settings every user's terminal needs
-   *     description: The admin-set session timeout and persistence flag, whether command history is on, and the touch input tuning. Readable by any signed-in user; changing them goes through the plugin's admin settings.
-   *     tags:
-   *       - Terminal
-   *     responses:
-   *       200:
-   *         description: The settings.
-   *       500:
-   *         description: Failed to load settings.
-   */
-  router.get("/client-settings", async (_req, res) => {
-    try {
-      res.json(await readClientSettings(ctx));
-    } catch (err) {
-      log.error("Failed to load terminal client settings", err);
-      res.status(500).json({ error: "Failed to load settings" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/ssh-terminal/user-settings:
-   *   put:
-   *     summary: Save some of the caller's terminal settings
-   *     description: Writes the caller's local echo, link click and command autocomplete settings. The terminal uses it once, to move values a browser kept before 2.9.0.
-   *     tags:
-   *       - Terminal
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               localEcho:
-   *                 type: string
-   *               linkClickBehavior:
-   *                 type: string
-   *               commandAutocomplete:
-   *                 type: boolean
-   *     responses:
-   *       200:
-   *         description: Saved.
-   *       400:
-   *         description: A value the setting does not accept.
-   */
-  router.put("/user-settings", json, async (req, res) => {
-    const userId = ctx.currentActor();
-    if (!userId) return res.status(401).json({ error: "Sign in first" });
-    const body = (req.body ?? {}) as Record<string, unknown>;
-    try {
-      for (const key of MOVABLE_USER_KEYS) {
-        if (body[key] !== undefined) {
-          await ctx.settings.setUser(userId, key, body[key]);
-        }
-      }
-      res.json({ success: true });
-    } catch (err) {
-      res.status(400).json({ error: getErrorMessage(err, "Invalid setting") });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/ssh-terminal/hosts/{hostId}/auto-tmux:
-   *   put:
-   *     summary: Turn auto tmux on or off for a host
-   *     description: Sets the host's autoTmux terminal setting. Used by the "enable Auto-Tmux" action shown when a persisted session expires. Needs edit access to the host.
-   *     tags:
-   *       - Terminal
-   *     parameters:
-   *       - in: path
-   *         name: hostId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               enabled:
-   *                 type: boolean
-   *     responses:
-   *       200:
-   *         description: Saved.
-   *       400:
-   *         description: Invalid host id or value.
-   *       403:
-   *         description: No edit access to the host.
-   */
-  router.put("/hosts/:hostId/auto-tmux", json, async (req, res) => {
-    const hostId = Number(req.params.hostId);
-    const enabled = (req.body ?? {}).enabled;
-    if (!Number.isInteger(hostId) || typeof enabled !== "boolean") {
-      return res.status(400).json({ error: "Invalid host or value" });
-    }
-    try {
-      const access = await ctx.hosts.checkAccess(hostId, "edit");
-      if (!access.hasAccess) {
-        return res.status(403).json({ error: "Access denied to host" });
-      }
-      await ctx.settings.setHost(hostId, HOST_KEYS.autoTmux, enabled);
-      res.json({ success: true, autoTmux: enabled });
-    } catch (err) {
-      log.error("Failed to update auto tmux", err);
-      res.status(500).json({ error: "Failed to update auto tmux" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/ssh-terminal/command-history:
-   *   post:
-   *     summary: Save command to history
-   *     description: Saves a command to the caller's history for a host. Commands that look like they carry a secret, and anything while command history is off globally or for the host, are acknowledged but not stored.
-   *     tags:
-   *       - Terminal
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               hostId:
-   *                 type: integer
-   *               command:
-   *                 type: string
-   *     responses:
-   *       201:
-   *         description: Command saved, or skipped on purpose.
-   *       400:
-   *         description: Missing required parameters.
-   *       500:
-   *         description: Failed to save command.
-   */
-  router.post("/command-history", json, async (req, res) => {
-    const userId = ctx.currentActor();
-    const { hostId, command } = req.body ?? {};
-
-    if (!isNonEmptyString(userId) || !hostId || !isNonEmptyString(command)) {
-      log.warn("Invalid command history save request", {
-        operation: "command_history_save",
-        userId,
-        hasHostId: !!hostId,
-        hasCommand: !!command,
-      });
-      return res.status(400).json({ error: "Missing required parameters" });
-    }
-
-    const hostIdNum = parseInt(hostId, 10);
-    const trimmedCommand = command.trim();
-    const skipped = {
-      id: 0,
-      userId,
-      hostId: hostIdNum,
-      command: trimmedCommand,
-      executedAt: new Date().toISOString(),
-    };
-
-    if (SENSITIVE_COMMAND_PATTERNS.some((p) => p.test(trimmedCommand))) {
-      return res.status(201).json(skipped);
-    }
-    if ((await ctx.settings.get(ADMIN_KEYS.commandHistoryEnabled)) === false) {
-      return res.status(201).json(skipped);
-    }
-    if (
-      (await ctx.settings.getHost(
-        hostIdNum,
-        HOST_KEYS.enableCommandHistory,
-      )) === false
-    ) {
-      return res.status(201).json(skipped);
-    }
-
-    try {
-      const executedAt = new Date().toISOString();
-      await history.create(userId, hostIdNum, trimmedCommand, executedAt);
-      res.status(201).json({
-        userId,
-        hostId: hostIdNum,
-        command: trimmedCommand,
-        executedAt,
-      });
-    } catch (err) {
-      log.error("Failed to save command to history", err);
-      res.status(500).json({
-        error: getErrorMessage(err, "Failed to save command"),
-      });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/ssh-terminal/command-history/{hostId}:
-   *   get:
-   *     summary: Get command history
-   *     description: The caller's distinct commands on a host, most recently used first, for autocomplete.
-   *     tags:
-   *       - Terminal
-   *     parameters:
-   *       - in: path
-   *         name: hostId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: A list of commands.
-   *       400:
-   *         description: Invalid request parameters.
-   *       500:
-   *         description: Failed to fetch history.
-   */
-  router.get("/command-history/:hostId", async (req, res) => {
-    const userId = ctx.currentActor();
-    const hostIdNum = parseInt(String(req.params.hostId), 10);
-
-    if (!isNonEmptyString(userId) || isNaN(hostIdNum)) {
-      log.warn("Invalid command history fetch request", {
-        userId,
-        hostId: hostIdNum,
-      });
-      return res.status(400).json({ error: "Invalid request parameters" });
-    }
-
-    try {
-      res.json(await history.listUniqueCommandsForHost(userId, hostIdNum));
-    } catch (err) {
-      log.error("Failed to fetch command history", err);
-      res.status(500).json({
-        error: getErrorMessage(err, "Failed to fetch history"),
-      });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/ssh-terminal/command-history/{hostId}/recent:
-   *   get:
-   *     summary: Get recent command history
-   *     description: The caller's commands on a host, newest first, duplicates included. Needs hosts.view.
-   *     tags:
-   *       - Terminal
-   *     parameters:
-   *       - in: path
-   *         name: hostId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: A list of commands.
-   *       400:
-   *         description: Invalid host id.
-   *       403:
-   *         description: Missing the hosts.view permission.
-   *       500:
-   *         description: Failed to fetch command history.
-   */
-  router.get("/command-history/:hostId/recent", async (req, res) => {
-    if (!(await ctx.rbac.has("hosts.view"))) {
-      return res.status(403).json({ error: "Insufficient permissions" });
-    }
-    const userId = ctx.currentActor();
-    const hostIdNum = parseInt(String(req.params.hostId), 10);
-    if (!isNonEmptyString(userId) || !hostIdNum) {
-      return res.status(400).json({ error: "Invalid userId or hostId" });
-    }
-    try {
-      const rows = await history.listCommandsForHost(userId, hostIdNum);
-      res.json(rows.map((row) => row.command));
-    } catch (err) {
-      log.error("Failed to fetch command history from database", err, {
-        operation: "command_history_fetch",
-        hostId: hostIdNum,
-      });
-      res.status(500).json({ error: "Failed to fetch command history" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/ssh-terminal/command-history/delete:
-   *   post:
-   *     summary: Delete a specific command from history
-   *     description: Deletes one command from the caller's history for a host.
-   *     tags:
-   *       - Terminal
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               hostId:
-   *                 type: integer
-   *               command:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Command deleted successfully.
-   *       400:
-   *         description: Missing required parameters.
-   *       500:
-   *         description: Failed to delete command.
-   */
-  router.post("/command-history/delete", json, async (req, res) => {
-    const userId = ctx.currentActor();
-    const { hostId, command } = req.body ?? {};
-
-    if (!isNonEmptyString(userId) || !hostId || !isNonEmptyString(command)) {
-      log.warn("Invalid command delete request", {
-        operation: "command_history_delete",
-        userId,
-        hasHostId: !!hostId,
-        hasCommand: !!command,
-      });
-      return res.status(400).json({ error: "Missing required parameters" });
-    }
-
-    try {
-      await history.deleteCommandForHost(
-        userId,
-        parseInt(hostId, 10),
-        command.trim(),
-      );
-      res.json({ success: true });
-    } catch (err) {
-      log.error("Failed to delete command from history", err);
-      res.status(500).json({
-        error: getErrorMessage(err, "Failed to delete command"),
-      });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/ssh-terminal/command-history/{hostId}:
-   *   delete:
-   *     summary: Clear command history
-   *     description: Clears the caller's whole command history for a host.
-   *     tags:
-   *       - Terminal
-   *     parameters:
-   *       - in: path
-   *         name: hostId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Command history cleared successfully.
-   *       400:
-   *         description: Invalid request.
-   *       500:
-   *         description: Failed to clear history.
-   */
-  router.delete("/command-history/:hostId", async (req, res) => {
-    const userId = ctx.currentActor();
-    const hostIdNum = parseInt(String(req.params.hostId), 10);
-
-    if (!isNonEmptyString(userId) || isNaN(hostIdNum)) {
-      log.warn("Invalid command history clear request");
-      return res.status(400).json({ error: "Invalid request" });
-    }
-
-    try {
-      await history.deleteByUserAndHost(userId, hostIdNum);
-      log.info("Terminal history cleared", {
-        operation: "terminal_history_clear",
-        userId,
-        hostId: hostIdNum,
-      });
-      res.json({ success: true });
-    } catch (err) {
-      log.error("Failed to clear command history", err);
-      res.status(500).json({
-        error: getErrorMessage(err, "Failed to clear history"),
-      });
-    }
-  });
-}
diff --git a/plugins/ssh-terminal/src/backend/services.ts b/plugins/ssh-terminal/src/backend/services.ts
deleted file mode 100644
index de36ceec9..000000000
--- a/plugins/ssh-terminal/src/backend/services.ts
+++ /dev/null
@@ -1,159 +0,0 @@
-/**
- * The services this plugin provides and consumes.
- *
- * Provided: "sessions.live" as its "ssh" provider (live SSH sessions, for
- * session sharing, collab rooms and recording; remote desktop provides the
- * other session types) and "terminal.history" (command history, for the AI
- * assistant). Consumed, all optional: "tmux.sessions" (tmux-monitor),
- * "sessions.sharing" (session-sharing) and "recordings.writer" (B13). The
- * terminal keeps working without any of them: no tmux attach, no shared
- * joins, no recording.
- */
-
-export interface LiveSessionInfo {
-  id: string;
-  userId: string;
-  hostId: number;
-  hostName: string;
-  isConnected: boolean;
-  createdAt: number;
-  lastDetachedAt: number | null;
-  tabInstanceId: string | null;
-  tmuxSessionName: string | null;
-  cols: number;
-  rows: number;
-}
-
-export interface LiveSessionsV1 {
-  getSession: (sessionId: string) => LiveSessionInfo | null;
-  /** The caller's own sessions. A plugin caller only ever gets its actor's. */
-  listForUser: (userId: string) => LiveSessionInfo[];
-  /** Tells every guest the owner ended it, then closes the session. */
-  ownerEndSession: (sessionId: string, reason: string) => void;
-  /** Removes the participants that joined through one share. */
-  disconnectParticipants: (
-    sessionId: string,
-    shareId: string,
-    options: { reason: string; userId?: string | null },
-  ) => number;
-  /** The anonymous link guests watching through one share. */
-  listGuests: (
-    sessionId: string,
-    shareId: string,
-  ) => { label: string | null }[];
-  /** Hands input control of a room share to one member, or back to the owner. */
-  setRoomShareControl: (
-    sessionId: string,
-    shareId: string,
-    controllerUserId: string | null,
-  ) => void;
-  /** Output as it arrives. Returns the unsubscribe. */
-  subscribe: (sessionId: string, onData: (data: string) => void) => () => void;
-  /** Types into the session. False when it is not live. */
-  write: (sessionId: string, data: string) => boolean;
-  /** How long a detached session is kept, in minutes. */
-  idleTimeoutMinutes: () => number;
-}
-
-export interface CommandHistoryEntry {
-  command: string;
-  executedAt: string;
-}
-
-export interface TerminalHistoryV1 {
-  /** The acting user's most recent commands on one host, newest first. */
-  list: (hostId: number, limit?: number) => Promise<CommandHistoryEntry[]>;
-}
-
-export interface TmuxSessionInfo {
-  name: string;
-  created: number;
-  lastActivity: number;
-  windows: number;
-  attachedClients: number;
-}
-
-export interface TmuxDetection {
-  available: boolean;
-  sessions: TmuxSessionInfo[];
-}
-
-/**
- * What the terminal asks of the tmux plugin. Clients are ssh2 objects. Every
- * method is async to a consumer: a service call goes through the permission
- * check and the audit line first.
- */
-export interface TmuxSessionsV1 {
-  detect: (client: unknown) => Promise<TmuxDetection>;
-  /** Writes the attach (or new-session) command into a shell stream. */
-  attachOrCreate: (
-    stream: unknown,
-    name?: string,
-    newName?: string,
-    hostId?: number,
-  ) => Promise<void>;
-  /** Waits for a new session to exist and returns its confirmed name. */
-  waitForSession: (client: unknown, name: string) => Promise<string>;
-}
-
-export interface SharedSessionRef {
-  id: string;
-  sessionId: string;
-  permissionLevel: "read-write" | "read-only";
-}
-
-/** For signed-in members; every call runs as the acting user. */
-export interface SessionSharingV1 {
-  /** A user share targeting the actor, or a room stage they are a member of. */
-  authorizeJoin: (
-    shareId: string,
-  ) => Promise<{ share: SharedSessionRef; displayName: string } | null>;
-  recordJoin: (shareId: string) => Promise<void>;
-  /** Joins the socket to a collab room's event fan-out. False when not a member. */
-  subscribeRoom: (roomId: string, socket: unknown) => Promise<boolean>;
-  unsubscribeRoom: (socket: unknown, roomId?: string) => Promise<void>;
-}
-
-/**
- * Guest joins through a share link or a room guest link. A guest has no user,
- * so the per-call RBAC check a service runs cannot apply: the token is the
- * authority. Published on ctx.registry as SESSION_GUESTS_KEY instead.
- */
-export interface SessionGuestsV1 {
-  resolve: (request: {
-    shareToken?: string;
-    roomGuestToken?: string;
-    clientIp: string;
-  }) => Promise<
-    { ok: true; share: SharedSessionRef } | { ok: false; reason: string }
-  >;
-  recordJoin: (shareId: string) => Promise<void>;
-}
-
-export const SESSION_GUESTS_KEY = "session-sharing.guests";
-
-export interface RecordingSink {
-  /** Appends one batch; the first batch starts with the asciicast header. */
-  append: (chunk: string) => Promise<void>;
-  /** Writes or updates the recording row. */
-  persist: (summary: {
-    endedAt: number;
-    durationSeconds: number;
-    terminatedByOwner: boolean;
-    terminationReason: string | null;
-  }) => Promise<void>;
-  /** Nothing was recorded; drop whatever was set up. */
-  discard: () => void;
-}
-
-export interface RecordingsWriterV1 {
-  /** Null when recording is off for this user or host. */
-  open: (meta: {
-    sessionId: string;
-    hostId: number;
-    userId: string;
-    protocol: "ssh";
-    format: "asciicast";
-    startedAt: number;
-  }) => Promise<RecordingSink | null>;
-}
diff --git a/plugins/ssh-terminal/src/backend/session-manager.ts b/plugins/ssh-terminal/src/backend/session-manager.ts
deleted file mode 100644
index 4b5ac36ac..000000000
--- a/plugins/ssh-terminal/src/backend/session-manager.ts
+++ /dev/null
@@ -1,993 +0,0 @@
-import { randomUUID } from "crypto";
-import { type Client, type ClientChannel } from "ssh2";
-import { WebSocket } from "ws";
-import type { TerminalLogger } from "./helpers.js";
-import type { RecordingSink, RecordingsWriterV1 } from "./services.js";
-
-const MAX_BUFFER_BYTES = 512 * 1024;
-export const DEFAULT_TIMEOUT_MINUTES = 30;
-const HEALTH_CHECK_INTERVAL_MS = 60_000;
-const MAX_SESSIONS_PER_USER = 10;
-// Coalesces recording writes: a chatty SSH stream can emit dozens of "data"
-// events per second, and appending to disk on every single one saturates the
-// libuv threadpool (default size 4), starving unrelated fs/DNS/crypto work
-// and stalling the WS ping/pong health check enough to look like connection
-// drops. Batch pending lines and flush on a short trailing edge instead.
-const RECORDING_FLUSH_INTERVAL_MS = 300;
-
-export interface SessionParticipant {
-  ws: WebSocket;
-  userId: string | null; // null for anonymous link guests
-  permissionLevel: "read-write" | "read-only";
-  isOwner: boolean;
-  displayName?: string;
-  guestLabel?: string;
-  tabInstanceId?: string;
-  joinedViaShareId?: string;
-}
-
-export interface TerminalSession {
-  id: string;
-  userId: string;
-  hostId: number;
-  hostName: string;
-  tabInstanceId?: string;
-  attachedTabInstanceId?: string;
-
-  sshConn: Client | null;
-  sshStream: ClientChannel | null;
-  jumpClient: Client | null;
-
-  cols: number;
-  rows: number;
-  isConnected: boolean;
-  createdAt: number;
-
-  participants: Map<string, SessionParticipant>;
-  lastDetachedAt: number | null;
-  detachTimeout: NodeJS.Timeout | null;
-
-  outputBuffer: string[];
-  outputBufferBytes: number;
-  /** Output listeners from the sessions.live service. */
-  dataListeners: Set<(data: string) => void>;
-  /** Resolves once the recordings service answered; null when off. */
-  recordingSink: Promise<RecordingSink | null> | null;
-  recordingHeader: string | null;
-  recordingBytes: number;
-  recordingWriteChain: Promise<void>;
-  recordingPersistChain: Promise<void>;
-  pendingRecordingData: string;
-  recordingFlushTimer: NodeJS.Timeout | null;
-  tmuxSessionName: string | null;
-  sessionLoggingEnabled: boolean;
-  sessionStartedAt: number;
-  lastPersistedBytes: number;
-  terminatedByOwner: boolean;
-  terminationReason: string | null;
-}
-
-/** Message types a non-owner participant may legally send. */
-const NON_OWNER_ALLOWED_MESSAGE_TYPES = new Set([
-  "input",
-  "ping",
-  "disconnect",
-]);
-
-/**
- * Server-side gate for whether a participant may send a given WS message
- * type. The owner may send anything; non-owners are limited to input (if
- * read-write), ping, and disconnect. Pure function so read-only enforcement
- * is unit-testable without a real WebSocketServer.
- */
-export function isMessageAllowedForParticipant(
-  participant: Pick<SessionParticipant, "isOwner" | "permissionLevel"> | null,
-  messageType: string,
-): boolean {
-  if (!participant || participant.isOwner) return true;
-  if (!NON_OWNER_ALLOWED_MESSAGE_TYPES.has(messageType)) return false;
-  if (messageType === "input" && participant.permissionLevel === "read-only") {
-    return false;
-  }
-  return true;
-}
-
-export interface SessionManagerDeps {
-  log: TerminalLogger;
-  /** Minutes a detached session is kept; read on every detach. */
-  getTimeoutMinutes: () => number;
-  /** The recordings.writer service, when a plugin provides it. */
-  getRecordings: () => RecordingsWriterV1 | null;
-}
-
-export class TerminalSessionManager {
-  private sessions = new Map<string, TerminalSession>();
-  private healthCheckTimer: NodeJS.Timeout | null = null;
-  private readonly log: TerminalLogger;
-
-  constructor(private readonly deps: SessionManagerDeps) {
-    this.log = deps.log;
-    this.healthCheckTimer = setInterval(
-      () => this.healthCheck(),
-      HEALTH_CHECK_INTERVAL_MS,
-    );
-  }
-
-  createSession(
-    userId: string,
-    hostId: number,
-    hostName: string,
-    cols: number,
-    rows: number,
-    tabInstanceId?: string,
-    sessionLoggingEnabled = true,
-  ): string {
-    const userSessions = this.getUserSessions(userId);
-    if (userSessions.length >= MAX_SESSIONS_PER_USER) {
-      const detached = userSessions
-        .filter((s) => this.getOwnerParticipant(s) === null)
-        .sort(
-          (a, b) =>
-            (a.lastDetachedAt ?? a.createdAt) -
-            (b.lastDetachedAt ?? b.createdAt),
-        );
-      if (detached.length > 0) {
-        this.destroySession(detached[0].id);
-      }
-    }
-
-    if (tabInstanceId) {
-      const tabSessions = userSessions.filter(
-        (s) => s.tabInstanceId === tabInstanceId,
-      );
-      for (const existing of tabSessions) {
-        const isLiveSession =
-          existing.isConnected &&
-          existing.sshStream != null &&
-          !existing.sshStream.destroyed;
-        if (isLiveSession) {
-          // Don't destroy a live session (even if detached) — the caller should attach instead
-          this.log.warn(
-            "Tab instance has live session, skipping duplicate create",
-            {
-              operation: "session_tab_duplicate_skip",
-              existingSessionId: existing.id,
-              tabInstanceId,
-              hasAttachedWs: this.getOwnerParticipant(existing) !== null,
-            },
-          );
-          return existing.id;
-        }
-        this.log.warn("Tab instance already has session, destroying old", {
-          operation: "session_tab_duplicate_cleanup",
-          existingSessionId: existing.id,
-          tabInstanceId,
-        });
-        this.destroySession(existing.id);
-      }
-    }
-
-    const id = randomUUID();
-    const now = Date.now();
-    let recordingSink: Promise<RecordingSink | null> | null = null;
-    let recordingHeader: string | null = null;
-    const recordings = sessionLoggingEnabled ? this.deps.getRecordings() : null;
-    if (recordings) {
-      // Events recorded before this resolves wait in pendingRecordingData.
-      recordingSink = Promise.resolve()
-        .then(() =>
-          recordings.open({
-            sessionId: id,
-            hostId,
-            userId,
-            protocol: "ssh",
-            format: "asciicast",
-            startedAt: now,
-          }),
-        )
-        .catch((err) => {
-          this.log.warn("Could not start a session recording", {
-            operation: "session_recording_open_error",
-            sessionId: id,
-            error: err instanceof Error ? err.message : String(err),
-          });
-          return null;
-        });
-    }
-    if (recordingSink) {
-      recordingHeader = `${JSON.stringify({
-        version: 2,
-        width: cols,
-        height: rows,
-        timestamp: Math.floor(now / 1000),
-        env: { TERM: "xterm-256color", SHELL: "/bin/sh" },
-      })}\n`;
-    }
-    const session: TerminalSession = {
-      id,
-      userId,
-      hostId,
-      hostName,
-      tabInstanceId,
-      sshConn: null,
-      sshStream: null,
-      jumpClient: null,
-      cols,
-      rows,
-      isConnected: false,
-      createdAt: now,
-      participants: new Map(),
-      lastDetachedAt: null,
-      detachTimeout: null,
-      outputBuffer: [],
-      outputBufferBytes: 0,
-      dataListeners: new Set(),
-      recordingSink,
-      recordingHeader,
-      recordingBytes: 0,
-      recordingWriteChain: Promise.resolve(),
-      recordingPersistChain: Promise.resolve(),
-      pendingRecordingData: "",
-      recordingFlushTimer: null,
-      tmuxSessionName: null,
-      sessionLoggingEnabled: !!recordingSink,
-      sessionStartedAt: now,
-      lastPersistedBytes: 0,
-      terminatedByOwner: false,
-      terminationReason: null,
-    };
-    this.sessions.set(id, session);
-
-    this.log.info("Terminal session created", {
-      operation: "session_created",
-      sessionId: id,
-      userId,
-      hostId,
-    });
-
-    return id;
-  }
-
-  getSession(sessionId: string | null): TerminalSession | null {
-    if (!sessionId) return null;
-    return this.sessions.get(sessionId) ?? null;
-  }
-
-  setSSHState(
-    sessionId: string,
-    conn: Client,
-    stream: ClientChannel,
-    jumpClient?: Client | null,
-  ): void {
-    const session = this.sessions.get(sessionId);
-    if (!session) return;
-
-    session.sshConn = conn;
-    session.sshStream = stream;
-    session.jumpClient = jumpClient ?? null;
-    session.isConnected = true;
-  }
-
-  /** Finds the owner's participant entry, if currently attached. */
-  private getOwnerParticipant(
-    session: TerminalSession,
-  ): SessionParticipant | null {
-    for (const participant of session.participants.values()) {
-      if (participant.isOwner) return participant;
-    }
-    return null;
-  }
-
-  private getOwnerEntry(
-    session: TerminalSession,
-  ): [string, SessionParticipant] | null {
-    for (const entry of session.participants.entries()) {
-      if (entry[1].isOwner) return entry;
-    }
-    return null;
-  }
-
-  attachWs(
-    sessionId: string,
-    userId: string,
-    ws: WebSocket,
-    tabInstanceId?: string,
-  ): TerminalSession | null {
-    const session = this.sessions.get(sessionId);
-    if (!session) {
-      this.log.warn("Session not found for attachment", {
-        operation: "session_attach_not_found",
-        sessionId,
-        userId,
-      });
-      return null;
-    }
-    if (session.userId !== userId) {
-      this.log.warn("Session userId mismatch", {
-        operation: "session_attach_user_mismatch",
-        sessionId,
-        expectedUserId: session.userId,
-        providedUserId: userId,
-      });
-      return null;
-    }
-    if (!session.isConnected) {
-      this.log.warn("Session not connected", {
-        operation: "session_attach_not_connected",
-        sessionId,
-        userId,
-        createdAt: session.createdAt,
-        elapsed: Date.now() - session.createdAt,
-      });
-      return null;
-    }
-
-    const ownerParticipant = this.getOwnerParticipant(session);
-    const isDetached =
-      !ownerParticipant || ownerParticipant.ws.readyState !== WebSocket.OPEN;
-    const isOriginalTab =
-      (session.attachedTabInstanceId ?? session.tabInstanceId) ===
-      tabInstanceId;
-
-    if (
-      !isDetached &&
-      !isOriginalTab &&
-      session.tabInstanceId &&
-      tabInstanceId
-    ) {
-      this.log.warn("Session actively attached to different tab instance", {
-        operation: "session_attach_instance_conflict",
-        sessionId,
-        sessionInstanceId: session.tabInstanceId,
-        providedInstanceId: tabInstanceId,
-      });
-      try {
-        ws.send(
-          JSON.stringify({
-            type: "sessionExpired",
-            sessionId,
-            message: "Session belongs to a different tab instance",
-          }),
-        );
-      } catch {
-        /* ignore */
-      }
-      return null;
-    }
-
-    if (
-      session.tabInstanceId &&
-      tabInstanceId &&
-      session.tabInstanceId !== tabInstanceId
-    ) {
-      this.log.info(
-        "Session attached to different tab instance (split-screen)",
-        {
-          operation: "session_attach_split_screen",
-          originalInstanceId: session.tabInstanceId,
-          newInstanceId: tabInstanceId,
-          sessionId,
-        },
-      );
-    }
-
-    const ownerEntry = this.getOwnerEntry(session);
-    if (ownerEntry && ownerEntry[1].ws !== ws) {
-      try {
-        ownerEntry[1].ws.send(
-          JSON.stringify({
-            type: "sessionTakenOver",
-            sessionId,
-            message: "Session was attached from another tab",
-          }),
-        );
-      } catch {
-        /* ignore */
-      }
-      session.participants.delete(ownerEntry[0]);
-    }
-
-    if (session.detachTimeout) {
-      clearTimeout(session.detachTimeout);
-      session.detachTimeout = null;
-    }
-
-    const participantId = randomUUID();
-    session.participants.set(participantId, {
-      ws,
-      userId,
-      permissionLevel: "read-write",
-      isOwner: true,
-      tabInstanceId,
-    });
-    session.attachedTabInstanceId = tabInstanceId;
-    session.lastDetachedAt = null;
-    this.broadcastParticipants(sessionId);
-
-    this.log.info("WebSocket attached to session", {
-      operation: "session_attach",
-      sessionId,
-      userId,
-      tabInstanceId,
-    });
-
-    return session;
-  }
-
-  /**
-   * Adds a non-owner participant (in-app share join or anonymous link guest).
-   * Purely additive - never evicts the owner or any other participant.
-   */
-  joinAsParticipant(
-    sessionId: string,
-    ws: WebSocket,
-    opts: {
-      userId: string | null;
-      permissionLevel: "read-write" | "read-only";
-      displayName?: string;
-      guestLabel?: string;
-      tabInstanceId?: string;
-      shareId?: string;
-    },
-  ): TerminalSession | null {
-    const session = this.sessions.get(sessionId);
-    if (!session || !session.isConnected) return null;
-
-    const participantId = randomUUID();
-    session.participants.set(participantId, {
-      ws,
-      userId: opts.userId,
-      permissionLevel: opts.permissionLevel,
-      isOwner: false,
-      displayName: opts.displayName,
-      guestLabel: opts.guestLabel,
-      tabInstanceId: opts.tabInstanceId,
-      joinedViaShareId: opts.shareId,
-    });
-    if (ws.readyState === WebSocket.OPEN) {
-      ws.send(
-        JSON.stringify({
-          type: "resized",
-          cols: session.cols,
-          rows: session.rows,
-        }),
-      );
-    }
-    this.broadcastParticipants(sessionId);
-
-    this.log.info("Participant joined shared session", {
-      operation: "session_join_participant",
-      sessionId,
-      userId: opts.userId,
-      permissionLevel: opts.permissionLevel,
-      shareId: opts.shareId,
-    });
-
-    return session;
-  }
-
-  /**
-   * Tells everyone in a shared session who is present. Sent on join and
-   * leave, and only while someone besides the owner is (or just was) in the
-   * room - a solo owner never receives presence traffic.
-   */
-  private broadcastParticipants(sessionId: string, includeSolo = false): void {
-    const session = this.sessions.get(sessionId);
-    if (!session) return;
-    const participants = Array.from(session.participants.values()).map(
-      (participant) => ({
-        isOwner: participant.isOwner,
-        permissionLevel: participant.permissionLevel,
-        label: participant.displayName ?? participant.guestLabel ?? null,
-      }),
-    );
-    if (
-      !includeSolo &&
-      participants.every((participant) => participant.isOwner)
-    )
-      return;
-    // Link guests are anonymous viewers; they do not get the roster.
-    this.broadcast(
-      sessionId,
-      { type: "participants", participants },
-      (participant) => participant.userId !== null,
-    );
-  }
-
-  /** The anonymous link guests watching through one share. */
-  listShareGuests(
-    sessionId: string,
-    shareId: string,
-  ): { label: string | null }[] {
-    const session = this.sessions.get(sessionId);
-    if (!session) return [];
-    return Array.from(session.participants.values())
-      .filter(
-        (participant) =>
-          participant.userId === null &&
-          participant.joinedViaShareId === shareId,
-      )
-      .map((participant) => ({ label: participant.guestLabel ?? null }));
-  }
-
-  /**
-   * Grants stage control: participants joined via this share become
-   * read-write only while they are the controller. The owner is untouched.
-   */
-  setRoomShareControl(
-    sessionId: string,
-    shareId: string,
-    controllerUserId: string | null,
-  ): void {
-    const session = this.sessions.get(sessionId);
-    if (!session) return;
-    for (const participant of session.participants.values()) {
-      if (participant.isOwner || participant.joinedViaShareId !== shareId)
-        continue;
-      participant.permissionLevel =
-        controllerUserId && participant.userId === controllerUserId
-          ? "read-write"
-          : "read-only";
-    }
-  }
-
-  /**
-   * Disconnects non-owner participants that joined through one share.
-   * Supplying userId narrows the kick to that authenticated user; null targets
-   * anonymous guests. Omitting it revokes the share for every participant.
-   */
-  disconnectShareParticipants(
-    sessionId: string,
-    shareId: string,
-    options: { userId?: string | null; reason: string },
-  ): number {
-    const session = this.sessions.get(sessionId);
-    if (!session) return 0;
-    const filterByUser = Object.hasOwn(options, "userId");
-    let disconnected = 0;
-    for (const [id, participant] of session.participants.entries()) {
-      if (
-        participant.isOwner ||
-        participant.joinedViaShareId !== shareId ||
-        (filterByUser && participant.userId !== options.userId)
-      ) {
-        continue;
-      }
-      session.participants.delete(id);
-      disconnected += 1;
-      if (participant.ws.readyState === WebSocket.OPEN) {
-        try {
-          participant.ws.send(
-            JSON.stringify({
-              type: "sessionExpired",
-              sessionId,
-              message: options.reason,
-            }),
-          );
-          participant.ws.close(1008, options.reason);
-        } catch {
-          participant.ws.terminate();
-        }
-      }
-    }
-    if (disconnected > 0) this.broadcastParticipants(sessionId, true);
-    return disconnected;
-  }
-
-  /** Fans out a message to every OPEN participant socket; skips closed ones and send failures. */
-  broadcast(
-    sessionId: string,
-    message: object,
-    include?: (participant: SessionParticipant) => boolean,
-  ): void {
-    const session = this.sessions.get(sessionId);
-    if (!session) return;
-    const payload = JSON.stringify(message);
-    for (const participant of session.participants.values()) {
-      if (participant.ws.readyState !== WebSocket.OPEN) continue;
-      if (include && !include(participant)) continue;
-      try {
-        participant.ws.send(payload);
-      } catch {
-        /* ignore individual send failures, keep broadcasting to the rest */
-      }
-    }
-  }
-
-  /** Finds the participant entry (owner or not) for a given socket. */
-  getParticipantForWs(
-    session: TerminalSession,
-    ws: WebSocket,
-  ): SessionParticipant | null {
-    for (const participant of session.participants.values()) {
-      if (participant.ws === ws) return participant;
-    }
-    return null;
-  }
-
-  /**
-   * Removes a non-owner participant's socket. No detach timeout or session
-   * destruction side effects - a guest leaving must never end the session.
-   */
-  removeParticipant(sessionId: string, ws: WebSocket): void {
-    const session = this.sessions.get(sessionId);
-    if (!session) return;
-    for (const [id, participant] of session.participants.entries()) {
-      if (participant.ws === ws && !participant.isOwner) {
-        session.participants.delete(id);
-        this.broadcastParticipants(sessionId, true);
-        this.log.info("Participant left shared session", {
-          operation: "session_leave_participant",
-          sessionId,
-          userId: participant.userId,
-        });
-        return;
-      }
-    }
-  }
-
-  /** Broadcasts termination to all guests, then destroys the session. */
-  ownerEndSession(sessionId: string, reason: string): void {
-    const session = this.sessions.get(sessionId);
-    if (!session) return;
-
-    this.broadcast(sessionId, { type: "sessionTerminatedByOwner", reason });
-    session.terminatedByOwner = true;
-    session.terminationReason = reason;
-
-    this.log.info("Owner ended shared session", {
-      operation: "session_owner_end",
-      sessionId,
-      reason,
-    });
-
-    this.destroySession(sessionId);
-  }
-
-  detachWs(sessionId: string): void {
-    const session = this.sessions.get(sessionId);
-    if (!session) return;
-
-    if (session.detachTimeout) {
-      clearTimeout(session.detachTimeout);
-      session.detachTimeout = null;
-    }
-
-    const ownerEntry = this.getOwnerEntry(session);
-    if (ownerEntry) {
-      session.participants.delete(ownerEntry[0]);
-    }
-    session.lastDetachedAt = Date.now();
-
-    // Persist log immediately when the user detaches so it appears right away,
-    // regardless of whether the session is later reattached or times out.
-    this.maybePersistLog(session);
-
-    const timeoutMs = this.getTimeoutMs();
-
-    session.detachTimeout = setTimeout(() => {
-      this.log.info("Session idle timeout expired", {
-        operation: "session_idle_timeout",
-        sessionId,
-        userId: session.userId,
-      });
-      this.destroySession(sessionId);
-    }, timeoutMs);
-
-    this.log.info("WebSocket detached from session", {
-      operation: "session_detach",
-      sessionId,
-      userId: session.userId,
-      timeoutMinutes: timeoutMs / 60_000,
-    });
-  }
-
-  destroySession(sessionId: string): void {
-    const session = this.sessions.get(sessionId);
-    if (!session) return;
-
-    if (session.detachTimeout) {
-      clearTimeout(session.detachTimeout);
-      session.detachTimeout = null;
-    }
-
-    this.maybePersistLog(session, true);
-    if (session.recordingSink && session.recordingBytes === 0) {
-      void session.recordingSink.then((sink) => sink?.discard());
-    }
-    session.dataListeners.clear();
-
-    for (const participant of session.participants.values()) {
-      if (participant.isOwner) continue;
-      if (participant.ws.readyState !== WebSocket.OPEN) continue;
-      try {
-        participant.ws.send(
-          JSON.stringify({
-            type: "sessionExpired",
-            sessionId,
-            message: "Session has ended",
-          }),
-        );
-      } catch {
-        /* ignore */
-      }
-    }
-    session.participants.clear();
-
-    if (session.sshStream) {
-      try {
-        session.sshStream.end();
-      } catch {
-        /* ignore */
-      }
-      session.sshStream = null;
-    }
-
-    if (session.sshConn) {
-      try {
-        session.sshConn.end();
-      } catch {
-        /* ignore */
-      }
-      session.sshConn = null;
-    }
-
-    if (session.jumpClient) {
-      try {
-        session.jumpClient.end();
-      } catch {
-        /* ignore */
-      }
-      session.jumpClient = null;
-    }
-
-    session.isConnected = false;
-    session.outputBuffer = [];
-    session.outputBufferBytes = 0;
-
-    this.sessions.delete(sessionId);
-
-    this.log.info("Terminal session destroyed", {
-      operation: "session_destroyed",
-      sessionId,
-      userId: session.userId,
-      hostId: session.hostId,
-    });
-  }
-
-  private maybePersistLog(session: TerminalSession, force = false): void {
-    if (!session.sessionLoggingEnabled) return;
-    if (session.recordingFlushTimer) {
-      clearTimeout(session.recordingFlushTimer);
-      session.recordingFlushTimer = null;
-      this.flushRecording(session);
-    }
-    if (session.recordingBytes === 0) return;
-    if (!force && session.recordingBytes === session.lastPersistedBytes) return;
-    session.lastPersistedBytes = session.recordingBytes;
-    session.recordingPersistChain = session.recordingPersistChain
-      .then(() => this.persistSessionLog(session))
-      .catch((err) => {
-        this.log.warn("Failed to persist session log", {
-          operation: "session_log_persist_error",
-          sessionId: session.id,
-          error: err instanceof Error ? err.message : String(err),
-        });
-      });
-  }
-
-  private async persistSessionLog(session: TerminalSession): Promise<void> {
-    if (!session.recordingSink) return;
-    await session.recordingWriteChain;
-    const sink = await session.recordingSink;
-    if (!sink) return;
-    const endedAt = Date.now();
-    const duration = Math.floor((endedAt - session.sessionStartedAt) / 1000);
-
-    try {
-      await sink.persist({
-        endedAt,
-        durationSeconds: duration,
-        terminatedByOwner: session.terminatedByOwner,
-        terminationReason: session.terminationReason,
-      });
-    } catch (err) {
-      this.log.warn("Failed to insert session recording row", {
-        operation: "session_recording_insert_error",
-        sessionId: session.id,
-        error: err instanceof Error ? err.message : String(err),
-      });
-    }
-
-    this.log.info("Session log persisted", {
-      operation: "session_log_persisted",
-      sessionId: session.id,
-      userId: session.userId,
-      hostId: session.hostId,
-      duration,
-      bytes: session.recordingBytes,
-    });
-  }
-
-  getUserSessions(userId: string): TerminalSession[] {
-    const result: TerminalSession[] = [];
-    for (const session of this.sessions.values()) {
-      if (session.userId === userId) {
-        result.push(session);
-      }
-    }
-    return result;
-  }
-
-  bufferOutput(sessionId: string, data: string): void {
-    const session = this.sessions.get(sessionId);
-    if (!session) return;
-
-    session.outputBuffer.push(data);
-    session.outputBufferBytes += data.length;
-
-    while (
-      session.outputBufferBytes > MAX_BUFFER_BYTES &&
-      session.outputBuffer.length > 0
-    ) {
-      const removed = session.outputBuffer.shift();
-      if (removed) session.outputBufferBytes -= removed.length;
-    }
-
-    for (const listener of session.dataListeners) {
-      try {
-        listener(data);
-      } catch {
-        // A listener that throws must not break the session.
-      }
-    }
-
-    this.recordSessionEvent(session, "o", data);
-  }
-
-  bufferInput(sessionId: string, data: string): void {
-    const session = this.sessions.get(sessionId);
-    if (!session) return;
-    this.recordSessionEvent(session, "i", data);
-  }
-
-  resizeSession(sessionId: string, cols: number, rows: number): void {
-    const session = this.sessions.get(sessionId);
-    if (!session) return;
-    session.cols = cols;
-    session.rows = rows;
-    this.broadcast(sessionId, { type: "resized", cols, rows });
-    this.bufferResize(sessionId, cols, rows);
-  }
-
-  bufferResize(sessionId: string, cols: number, rows: number): void {
-    const session = this.sessions.get(sessionId);
-    if (!session) return;
-    this.recordSessionEvent(session, "r", `${cols}x${rows}`);
-  }
-
-  private recordSessionEvent(
-    session: TerminalSession,
-    type: "i" | "o" | "r",
-    data: string,
-  ): void {
-    if (!session.sessionLoggingEnabled || !session.recordingSink || !data)
-      return;
-    const elapsed = (Date.now() - session.sessionStartedAt) / 1000;
-    const line = `${JSON.stringify([elapsed, type, data])}\n`;
-    session.recordingBytes += Buffer.byteLength(line);
-    session.pendingRecordingData += line;
-
-    if (!session.recordingFlushTimer) {
-      session.recordingFlushTimer = setTimeout(() => {
-        session.recordingFlushTimer = null;
-        this.flushRecording(session);
-      }, RECORDING_FLUSH_INTERVAL_MS);
-    }
-  }
-
-  /**
-   * Coalesces buffered recording lines into one write, chained so they land
-   * in order. Never one write per chunk: that starved the libuv threadpool
-   * (issue #1049).
-   */
-  private flushRecording(session: TerminalSession): void {
-    const pendingSink = session.recordingSink;
-    if (!pendingSink || !session.pendingRecordingData) return;
-    const chunk = session.pendingRecordingData;
-    session.pendingRecordingData = "";
-    const firstWrite = session.recordingBytes === Buffer.byteLength(chunk);
-
-    session.recordingWriteChain = session.recordingWriteChain
-      .then(async () => {
-        const sink = await pendingSink;
-        if (!sink) return;
-        await sink.append(
-          firstWrite ? `${session.recordingHeader}${chunk}` : chunk,
-        );
-      })
-      .catch((err) => {
-        this.log.warn("Failed to write session recording", {
-          operation: "session_recording_write_error",
-          sessionId: session.id,
-          error: err instanceof Error ? err.message : String(err),
-        });
-      });
-  }
-
-  flushBuffer(session: TerminalSession): string | null {
-    if (session.outputBuffer.length === 0) return null;
-    const data = session.outputBuffer.join("");
-    session.outputBuffer = [];
-    session.outputBufferBytes = 0;
-    return data;
-  }
-
-  getBuffer(session: TerminalSession): string | null {
-    if (session.outputBuffer.length === 0) return null;
-    return session.outputBuffer.join("");
-  }
-
-  private getTimeoutMs(): number {
-    const minutes = this.deps.getTimeoutMinutes();
-    return (
-      (Number.isFinite(minutes) && minutes > 0
-        ? minutes
-        : DEFAULT_TIMEOUT_MINUTES) * 60_000
-    );
-  }
-
-  private healthCheck(): void {
-    const toDestroy: string[] = [];
-    const now = Date.now();
-    const GRACE_PERIOD_MS = 10_000;
-
-    for (const [id, session] of this.sessions) {
-      if (!session.isConnected) continue;
-
-      const hasOpenParticipant = Array.from(session.participants.values()).some(
-        (p) => p.ws.readyState === WebSocket.OPEN,
-      );
-      if (hasOpenParticipant) {
-        continue;
-      }
-
-      if (session.sshStream?.destroyed) {
-        const detachedDuration = session.lastDetachedAt
-          ? now - session.lastDetachedAt
-          : 0;
-
-        if (detachedDuration > GRACE_PERIOD_MS) {
-          this.log.info(
-            "SSH stream destroyed during detach window, cleaning up",
-            {
-              operation: "session_health_check_stream_destroyed",
-              sessionId: id,
-              userId: session.userId,
-              detachedFor: detachedDuration,
-            },
-          );
-          toDestroy.push(id);
-        }
-      }
-
-      if (!session.sshConn) {
-        toDestroy.push(id);
-      }
-    }
-
-    for (const id of toDestroy) {
-      this.destroySession(id);
-    }
-  }
-
-  destroyAll(): void {
-    for (const id of [...this.sessions.keys()]) {
-      this.destroySession(id);
-    }
-    if (this.healthCheckTimer) {
-      clearInterval(this.healthCheckTimer);
-      this.healthCheckTimer = null;
-    }
-  }
-}
diff --git a/plugins/ssh-terminal/src/backend/settings-validation.ts b/plugins/ssh-terminal/src/backend/settings-validation.ts
deleted file mode 100644
index 65363b77c..000000000
--- a/plugins/ssh-terminal/src/backend/settings-validation.ts
+++ /dev/null
@@ -1,67 +0,0 @@
-import {
-  parseImageHostPath,
-  parseImageLocalDir,
-} from "./images/image-storage-settings.js";
-import { ADMIN_KEYS } from "./settings.js";
-
-/**
- * Save-time checks for the admin settings: the image storage paths must be
- * absolute, since a relative one silently depends on the server's cwd.
- */
-export function validateAdminSettings(
-  values: Record<string, unknown>,
-): Record<string, string> {
-  const errors: Record<string, string> = {};
-  const localDir = values[ADMIN_KEYS.imageLocalDir];
-  if (
-    typeof localDir === "string" &&
-    localDir.trim() !== "" &&
-    parseImageLocalDir(localDir) === null
-  ) {
-    errors[ADMIN_KEYS.imageLocalDir] = "Use an absolute path";
-  }
-  const hostPath = values[ADMIN_KEYS.imageHostPath];
-  if (
-    typeof hostPath === "string" &&
-    hostPath.trim() !== "" &&
-    parseImageHostPath(hostPath) === null
-  ) {
-    errors[ADMIN_KEYS.imageHostPath] = "Use an absolute path";
-  }
-  return errors;
-}
-
-const MAX_MACROS = 100;
-const MAX_MACROS_BYTES = 512 * 1024;
-
-/** Save-time checks for the user settings: macros stay bounded. */
-export function validateUserSettings(
-  values: Record<string, unknown>,
-): Record<string, string> {
-  const errors: Record<string, string> = {};
-  if (values.macros === undefined || values.macros === null) return errors;
-  let macros = values.macros;
-  if (typeof macros === "string") {
-    try {
-      macros = JSON.parse(macros);
-    } catch {
-      macros = null;
-    }
-  }
-  const valid =
-    Array.isArray(macros) &&
-    macros.length <= MAX_MACROS &&
-    JSON.stringify(macros).length <= MAX_MACROS_BYTES &&
-    macros.every(
-      (macro) =>
-        !!macro &&
-        typeof macro === "object" &&
-        typeof (macro as { id?: unknown }).id === "string" &&
-        typeof (macro as { name?: unknown }).name === "string" &&
-        Array.isArray((macro as { steps?: unknown }).steps),
-    );
-  if (!valid) {
-    errors.macros = `Macros must be a list of at most ${MAX_MACROS} valid macros`;
-  }
-  return errors;
-}
diff --git a/plugins/ssh-terminal/src/backend/settings.ts b/plugins/ssh-terminal/src/backend/settings.ts
deleted file mode 100644
index afc84699d..000000000
--- a/plugins/ssh-terminal/src/backend/settings.ts
+++ /dev/null
@@ -1,113 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import {
-  normalizeTouchInputSettings,
-  type TouchInputSettings,
-} from "../shared/touch-input-settings.js";
-import {
-  resolveTerminalImageStorageSettings,
-  TERMINAL_IMAGE_STORAGE_KEYS,
-  type TerminalImageStorageSettings,
-} from "./images/image-storage-settings.js";
-import { DEFAULT_TIMEOUT_MINUTES } from "./session-manager.js";
-import {
-  readUserSettings,
-  type TerminalUserSettings,
-} from "../shared/terminal-settings.js";
-
-/**
- * Admin setting keys, as declared in manifest.json. The image storage fields
- * have no default on purpose: an unset field falls through to the old
- * TERMIX_IMAGE_* environment variables, the way the settings table did.
- */
-export const ADMIN_KEYS = {
-  sessionTimeoutMinutes: "sessionTimeoutMinutes",
-  sessionPersistence: "sessionPersistence",
-  commandHistoryEnabled: "commandHistoryEnabled",
-  touchInput: "touchInput",
-  imageStorageMode: "imageStorageMode",
-  imageLocalDir: "imageLocalDir",
-  imageHostPath: "imageHostPath",
-  imageTtlMs: "imageTtlMs",
-  imageMaxCount: "imageMaxCount",
-  imageMaxBytes: "imageMaxBytes",
-} as const;
-
-export const HOST_KEYS = {
-  enableTerminal: "enableTerminal",
-  enableTerminalToolbar: "enableTerminalToolbar",
-  terminalToolbarPosition: "terminalToolbarPosition",
-  terminalToolbarStartState: "terminalToolbarStartState",
-  terminalToolbarDisplay: "terminalToolbarDisplay",
-  terminalToolbarShowStatus: "terminalToolbarShowStatus",
-  terminalToolbarFade: "terminalToolbarFade",
-  enableCommandHistory: "enableCommandHistory",
-  autoTmux: "autoTmux",
-} as const;
-
-/** User settings a browser kept in localStorage before 2.9.0. */
-export const MOVABLE_USER_KEYS = [
-  "localEcho",
-  "linkClickBehavior",
-  "commandAutocomplete",
-] as const;
-
-const IMAGE_FIELD_BY_LEGACY_KEY: Record<string, string> = {
-  [TERMINAL_IMAGE_STORAGE_KEYS.mode]: ADMIN_KEYS.imageStorageMode,
-  [TERMINAL_IMAGE_STORAGE_KEYS.localDir]: ADMIN_KEYS.imageLocalDir,
-  [TERMINAL_IMAGE_STORAGE_KEYS.hostPath]: ADMIN_KEYS.imageHostPath,
-  [TERMINAL_IMAGE_STORAGE_KEYS.ttlMs]: ADMIN_KEYS.imageTtlMs,
-  [TERMINAL_IMAGE_STORAGE_KEYS.maxCount]: ADMIN_KEYS.imageMaxCount,
-  [TERMINAL_IMAGE_STORAGE_KEYS.maxBytes]: ADMIN_KEYS.imageMaxBytes,
-};
-
-export async function readImageStorageSettings(
-  ctx: PluginContext,
-): Promise<TerminalImageStorageSettings> {
-  return resolveTerminalImageStorageSettings({
-    get: async (legacyKey) => {
-      const field = IMAGE_FIELD_BY_LEGACY_KEY[legacyKey];
-      if (!field) return null;
-      const value = await ctx.settings.get(field);
-      if (value === undefined || value === null || value === "") return null;
-      return String(value);
-    },
-    warn: (message) => ctx.log.warn(message),
-  });
-}
-
-export interface ClientSettings {
-  sessionTimeoutMinutes: number;
-  sessionPersistence: boolean;
-  commandHistoryEnabled: boolean;
-  touchInput: TouchInputSettings;
-  /** The caller's own terminal settings. */
-  user: TerminalUserSettings;
-}
-
-/** What every signed-in user's terminal needs, whether or not they are an admin. */
-export async function readClientSettings(
-  ctx: PluginContext,
-): Promise<ClientSettings> {
-  const all = await ctx.settings.getAll("admin");
-  const timeout = Number(all[ADMIN_KEYS.sessionTimeoutMinutes]);
-  let touch: unknown = all[ADMIN_KEYS.touchInput];
-  if (typeof touch === "string") {
-    try {
-      touch = JSON.parse(touch);
-    } catch {
-      touch = null;
-    }
-  }
-  const actor = ctx.currentActor();
-  const user = actor ? await ctx.settings.getAll("user", actor) : {};
-  return {
-    sessionTimeoutMinutes:
-      Number.isFinite(timeout) && timeout > 0
-        ? timeout
-        : DEFAULT_TIMEOUT_MINUTES,
-    sessionPersistence: all[ADMIN_KEYS.sessionPersistence] !== false,
-    commandHistoryEnabled: all[ADMIN_KEYS.commandHistoryEnabled] !== false,
-    touchInput: normalizeTouchInputSettings(touch),
-    user: readUserSettings(user),
-  };
-}
diff --git a/plugins/ssh-terminal/src/backend/tables.ts b/plugins/ssh-terminal/src/backend/tables.ts
deleted file mode 100644
index 7636e88ad..000000000
--- a/plugins/ssh-terminal/src/backend/tables.ts
+++ /dev/null
@@ -1,39 +0,0 @@
-import {
-  adoptLegacyTable,
-  defineTable,
-  id,
-  refHost,
-  refUser,
-  text,
-  timestamp,
-} from "@termix/plugin-sdk/db";
-
-/**
- * Commands typed into terminal sessions, per user and host.
- *
- * Adopted from core's command_history, so the column and index names are the
- * legacy ones: the rename carries the existing rows and index across.
- */
-export const commandHistory = adoptLegacyTable(
-  "command_history",
-  defineTable(
-    "command_history",
-    {
-      id: id(),
-      userId: refUser(),
-      hostId: refHost(),
-      command: text().notNull(),
-      executedAt: timestamp().notNull().defaultNow(),
-    },
-    {
-      indexes: [
-        {
-          name: "idx_command_history_user_host",
-          columns: ["userId", "hostId"],
-        },
-      ],
-    },
-  ),
-);
-
-export const tables = [commandHistory];
diff --git a/plugins/ssh-terminal/src/backend/terminal-socket.ts b/plugins/ssh-terminal/src/backend/terminal-socket.ts
deleted file mode 100644
index f6b4ceeee..000000000
--- a/plugins/ssh-terminal/src/backend/terminal-socket.ts
+++ /dev/null
@@ -1,2971 +0,0 @@
-import { AsyncResource } from "async_hooks";
-import { StringDecoder } from "string_decoder";
-import { WebSocket, type RawData } from "ws";
-import ssh2Pkg, {
-  type Client as SSHClientType,
-  type ClientChannel,
-  type PseudoTtyOptions,
-} from "ssh2";
-import {
-  PluginSshInteractionError,
-  type HostSshOptions,
-  type PluginContext,
-  type PluginSshHost,
-  type PluginSshPrepared,
-  type PluginSshPromptChannel,
-  type PluginWebSocketConnection,
-} from "@termix/plugin-sdk/backend";
-import {
-  asObject,
-  asString,
-  getErrorMessage,
-  hostAddressMismatch,
-  HOST_ADDRESS_MISMATCH_MESSAGE,
-  HOST_NOT_ON_THIS_SERVER_MESSAGE,
-  isRetriableDnsError,
-  isWindowsSftpPath,
-  MemoryAgent,
-  parseWsMessage,
-  resolveHostForSshConnect,
-  resolveServerHostId,
-  resolveServerJumpHosts,
-  sftpPathToLocalPath,
-  toTerminalDimension,
-  type TerminalLogger,
-} from "./helpers.js";
-import { SSHAuthManager } from "./keyboard-prompt.js";
-import { HOST_KEYS } from "./settings.js";
-import {
-  isMessageAllowedForParticipant,
-  type TerminalSessionManager,
-} from "./session-manager.js";
-import type {
-  SessionGuestsV1,
-  SessionSharingV1,
-  SharedSessionRef,
-  TmuxSessionsV1,
-} from "./services.js";
-
-const { Client, utils: ssh2Utils } = ssh2Pkg;
-
-interface ConnectToHostData {
-  cols: number;
-  rows: number;
-  hostConfig: {
-    id: number;
-    /** Names the host across a sync pair; `id` only names it locally. */
-    syncId?: string | null;
-    instanceId?: string;
-    ip: string;
-    port: number;
-    username: string;
-    password?: string;
-    key?: string;
-    keyPassword?: string;
-    keyType?: string;
-    authType?: string;
-    credentialId?: number;
-    userId?: string;
-    forceKeyboardInteractive?: boolean;
-    jumpHosts?: Array<{ hostId: number }>;
-    useSocks5?: boolean;
-    socks5Host?: string;
-    socks5Port?: number;
-    socks5Username?: string;
-    socks5Password?: string;
-    socks5ProxyChain?: unknown;
-    portKnockSequence?: Array<{
-      port: number;
-      protocol?: "tcp" | "udp";
-      delay?: number;
-    }>;
-    /** Keepalive, legacy algorithms, agent and environment options. */
-    sshOptions?: HostSshOptions | null;
-    /** When true, ignore key material and force password auth (fallback path). */
-    passwordFallbackOnly?: boolean;
-  };
-  initialPath?: string;
-  executeCommand?: string;
-  /** Attach straight to this tmux session once the shell is ready
-   * (tmux monitor opens its panes through a real PTY this way). */
-  tmuxAttachSession?: string;
-}
-
-interface ResizeData {
-  cols: number;
-  rows: number;
-}
-
-interface TOTPResponseData {
-  code?: string;
-}
-
-export interface TerminalSocketDeps {
-  ctx: PluginContext;
-  log: TerminalLogger;
-  sessionManager: TerminalSessionManager;
-  /** The optional tmux.sessions service, as the acting user. */
-  getTmux: () => TmuxSessionsV1 | null;
-  /** The optional sessions.sharing service, as the acting user. */
-  getSharing: () => SessionSharingV1 | null;
-  /** Guest link resolution, published on ctx.registry by session sharing. */
-  getGuests: () => SessionGuestsV1 | null;
-}
-
-/**
- * Serves /plugin-ws/ssh-terminal/terminal.
- *
- * The route is public with optional auth: a signed-in user arrives with a
- * token core verifies, and a share-link or room guest arrives with a token of
- * its own that is resolved here. Socket and ssh2 listeners are bound with
- * AsyncResource so every ctx call inside them still runs as the socket's user.
- */
-export function createTerminalSocket(deps: TerminalSocketDeps) {
-  const { ctx, log: sshLogger, sessionManager } = deps;
-  const authLogger = sshLogger;
-  const bind = <A extends unknown[], R>(fn: (...args: A) => R) =>
-    AsyncResource.bind(fn);
-  const sockets = new Set<WebSocket>();
-
-  function closeAll(): void {
-    for (const ws of sockets) {
-      try {
-        ws.close(1001, "Terminal plugin disabled");
-      } catch {
-        // Already gone.
-      }
-    }
-    sockets.clear();
-  }
-
-  /** Joins an anonymous guest socket to a live shared session, read-only or not per the share. */
-  async function attachShareGuest(
-    ws: WebSocket,
-    share: SharedSessionRef,
-    guests: SessionGuestsV1,
-  ): Promise<void> {
-    const session = sessionManager.getSession(share.sessionId);
-    if (!session || !session.isConnected) {
-      ws.close(1008, "Session has ended");
-      return;
-    }
-
-    const joined = sessionManager.joinAsParticipant(share.sessionId, ws, {
-      userId: null,
-      permissionLevel: share.permissionLevel,
-      guestLabel: "Guest",
-      shareId: share.id,
-    });
-    if (!joined) {
-      ws.close(1008, "Session is no longer active");
-      return;
-    }
-
-    guests.recordJoin(share.id).catch(() => {});
-
-    const buffered = sessionManager.getBuffer(joined);
-    if (buffered) {
-      ws.send(JSON.stringify({ type: "data", data: buffered }));
-    }
-    ws.send(
-      JSON.stringify({ type: "sessionAttached", sessionId: share.sessionId }),
-    );
-    ws.send(JSON.stringify({ type: "connected", message: "Joined session" }));
-
-    const currentSessionId: string = share.sessionId;
-
-    let wsAlive = true;
-    ws.on("pong", () => {
-      wsAlive = true;
-    });
-    const wsPingInterval = setInterval(() => {
-      if (ws.readyState === WebSocket.OPEN) {
-        if (!wsAlive) {
-          ws.terminate();
-          return;
-        }
-        wsAlive = false;
-        ws.ping();
-      } else {
-        clearInterval(wsPingInterval);
-      }
-    }, 30000);
-
-    ws.on("close", () => {
-      clearInterval(wsPingInterval);
-      sessionManager.removeParticipant(currentSessionId, ws);
-      sshLogger.info("Guest left shared terminal session", {
-        operation: "terminal_guest_disconnect",
-        sessionId: currentSessionId,
-        shareId: share.id,
-      });
-    });
-
-    ws.on("message", (msg: RawData) => {
-      let type: string;
-      let data: unknown;
-      try {
-        ({ type, data } = parseWsMessage(msg));
-      } catch {
-        return;
-      }
-
-      const liveSession = sessionManager.getSession(currentSessionId);
-      const participant = liveSession
-        ? sessionManager.getParticipantForWs(liveSession, ws)
-        : null;
-      // A guest is only ever a participant. Once it has left (or was never
-      // added) it may send nothing, or a read-only guest could "disconnect"
-      // and then type into the owner's shell as nobody in particular.
-      if (!participant || !isMessageAllowedForParticipant(participant, type)) {
-        return;
-      }
-
-      switch (type) {
-        case "input": {
-          if (typeof data !== "string") break;
-          const inputData = data;
-          sessionManager.bufferInput(currentSessionId, inputData);
-          const inputStream = liveSession?.sshStream;
-          if (inputStream) {
-            try {
-              inputStream.write(Buffer.from(inputData, "utf8"));
-            } catch {
-              inputStream.write(Buffer.from(inputData, "latin1"));
-            }
-          }
-          break;
-        }
-        case "ping":
-          ws.send(JSON.stringify({ type: "pong" }));
-          break;
-        case "disconnect":
-          sessionManager.removeParticipant(currentSessionId, ws);
-          ws.close(1000, "Left the session");
-          break;
-        default:
-          break;
-      }
-    });
-  }
-
-  /**
-   * A share-link (?shareToken) or collab room (?roomGuestToken) guest. Never
-   * touches user credentials: guests join an already-live stream. Session
-   * sharing resolves the token; without it guest links are refused.
-   */
-  async function handleGuestConnection(
-    ws: WebSocket,
-    connection: PluginWebSocketConnection,
-    tokens: { shareToken?: string; roomGuestToken?: string },
-  ): Promise<void> {
-    const guests = deps.getGuests();
-    if (!guests) {
-      ws.close(1008, "Session sharing is not available");
-      return;
-    }
-    const resolved = await guests.resolve({
-      ...tokens,
-      clientIp: connection.clientIp,
-    });
-    if ("reason" in resolved) {
-      ws.close(1008, resolved.reason);
-      return;
-    }
-    return attachShareGuest(ws, resolved.share, guests);
-  }
-
-  async function handleConnection(
-    connection: PluginWebSocketConnection,
-  ): Promise<void> {
-    const ws = connection.socket as WebSocket;
-    const req = connection.request as import("http").IncomingMessage;
-    const sessionId: string | undefined = undefined;
-    sockets.add(ws);
-    ws.once("close", () => sockets.delete(ws));
-
-    ws.on("error", (error) => {
-      sshLogger.error("WebSocket connection error", error, {
-        operation: "ws_error",
-        sessionId,
-      });
-    });
-
-    const urlObj = new URL(req.url || "", "http://localhost");
-    const shareToken = urlObj.searchParams.get("shareToken");
-
-    if (shareToken) {
-      await handleGuestConnection(ws, connection, { shareToken });
-      return;
-    }
-    const roomGuestToken = urlObj.searchParams.get("roomGuestToken");
-    if (roomGuestToken) {
-      await handleGuestConnection(ws, connection, { roomGuestToken });
-      return;
-    }
-
-    if (!connection.userId) {
-      ws.close(1008, "Authentication required");
-      return;
-    }
-    const userId = connection.userId;
-
-    if (!connection.isDataUnlocked()) {
-      ws.send(
-        JSON.stringify({
-          type: "error",
-          message: "Data locked - re-authenticate with password",
-          code: "DATA_LOCKED",
-        }),
-      );
-      ws.close(1008, "Data access required");
-      return;
-    }
-
-    sshLogger.info("Terminal WebSocket connection established", {
-      operation: "terminal_ws_connect",
-      sessionId,
-      userId,
-    });
-
-    let currentSessionId: string | null = null;
-    let sshConn: SSHClientType | null = null;
-    let sshStream: ClientChannel | null = null;
-    let lastJumpClient: SSHClientType | null = null;
-    let keyboardInteractiveFinish: ((responses: string[]) => void) | null =
-      null;
-    let totpPromptSent = false;
-    let totpTimeout: NodeJS.Timeout | null = null;
-    let isKeyboardInteractive = false;
-    let keyboardInteractiveResponded = false;
-    let isConnecting = false;
-    let isConnected = false;
-    let isCleaningUp = false;
-    let isShellInitializing = false;
-    let isDuplicateConnDiscarded = false;
-    // The keyboard-interactive handler whose browser sign-in is pending.
-    let browserSignInId: string | null = null;
-    let browserSignInTimeout: NodeJS.Timeout | null = null;
-    let isAwaitingAuthCredentials = false;
-
-    let wsAlive = true;
-
-    ws.on("pong", () => {
-      wsAlive = true;
-    });
-
-    const wsPingInterval = setInterval(() => {
-      if (ws.readyState === WebSocket.OPEN) {
-        if (!wsAlive) {
-          sshLogger.warn(
-            "WebSocket pong timeout - terminating zombie connection",
-            {
-              operation: "ws_pong_timeout",
-              userId,
-              sessionId: currentSessionId,
-            },
-          );
-          ws.terminate();
-          return;
-        }
-        wsAlive = false;
-        ws.ping();
-      }
-    }, 30000);
-
-    ws.on(
-      "close",
-      bind(() => {
-        clearInterval(wsPingInterval);
-        void deps
-          .getSharing()
-          ?.unsubscribeRoom(ws)
-          .catch(() => {});
-        sshLogger.info("Terminal WebSocket disconnected", {
-          operation: "terminal_ws_disconnect",
-          sessionId,
-          userId,
-        });
-
-        if (currentSessionId) {
-          const session = sessionManager.getSession(currentSessionId);
-          if (session?.isConnected) {
-            const participant = sessionManager.getParticipantForWs(session, ws);
-            if (participant && !participant.isOwner) {
-              sessionManager.removeParticipant(currentSessionId, ws);
-            } else {
-              // Only detach if this WS is still the owner's attached socket, or
-              // no owner is currently attached. If a refresh reconnected and
-              // reattached a new WS before this close event fired, we must not
-              // clobber that new attachment.
-              const ownerStillAttached = Array.from(
-                session.participants.values(),
-              ).some((p) => p.isOwner && p.ws !== ws);
-              if (!ownerStillAttached) {
-                sessionManager.detachWs(currentSessionId);
-              }
-            }
-          } else {
-            sessionManager.destroySession(currentSessionId);
-            currentSessionId = null;
-          }
-        }
-        cleanupAuthState();
-      }),
-    );
-
-    function resetConnectionState() {
-      isConnecting = false;
-      isConnected = false;
-      isKeyboardInteractive = false;
-      keyboardInteractiveResponded = false;
-      keyboardInteractiveFinish = null;
-      totpPromptSent = false;
-      browserSignInId = null;
-    }
-
-    ws.on(
-      "message",
-      bind(async (msg: RawData) => {
-        if (!connection.isDataUnlocked()) {
-          ws.send(
-            JSON.stringify({
-              type: "error",
-              message: "Data access expired - please re-authenticate",
-              code: "DATA_EXPIRED",
-            }),
-          );
-          ws.close(1008, "Data access expired");
-          return;
-        }
-
-        let type: string;
-        let data: unknown;
-        try {
-          ({ type, data } = parseWsMessage(msg));
-        } catch (e) {
-          sshLogger.warn("Rejected malformed WebSocket message", {
-            operation: "websocket_message_invalid",
-            userId,
-            error: getErrorMessage(e),
-          });
-          ws.send(
-            JSON.stringify({ type: "error", message: "Invalid message" }),
-          );
-          return;
-        }
-
-        // Server-side gate: non-owner participants (read-only or read-write
-        // guests/joiners) may only send input/ping/disconnect - everything else
-        // (auth flows, tmux, resize, etc.) is owner-only and silently ignored.
-        if (type !== "joinSharedSession") {
-          const gateSession = currentSessionId
-            ? sessionManager.getSession(currentSessionId)
-            : null;
-          const gateParticipant = gateSession
-            ? sessionManager.getParticipantForWs(gateSession, ws)
-            : null;
-          if (!isMessageAllowedForParticipant(gateParticipant, type)) {
-            return;
-          }
-        }
-
-        try {
-          switch (type) {
-            case "connectToHost": {
-              const connectData = data as ConnectToHostData;
-              if (!connectData?.hostConfig) {
-                ws.send(
-                  JSON.stringify({
-                    type: "error",
-                    message: "Missing host configuration",
-                  }),
-                );
-                break;
-              }
-              connectData.hostConfig.userId = userId;
-              handleConnectToHost(connectData).catch((error) => {
-                const errMsg = getErrorMessage(error);
-                if (
-                  errMsg.includes("Cannot parse privateKey") &&
-                  errMsg.includes("no passphrase")
-                ) {
-                  isAwaitingAuthCredentials = true;
-                  ws.send(
-                    JSON.stringify({
-                      type: "passphrase_required",
-                      message:
-                        "The SSH key is encrypted. Please enter the passphrase to unlock it.",
-                    }),
-                  );
-                  return;
-                }
-                sshLogger.error("Failed to connect to host", error, {
-                  operation: "ssh_connect",
-                  userId,
-                  hostId: connectData.hostConfig?.id,
-                  ip: connectData.hostConfig?.ip,
-                });
-                ws.send(
-                  JSON.stringify({
-                    type: "error",
-                    message: "Failed to connect to host: " + errMsg,
-                  }),
-                );
-              });
-              break;
-            }
-
-            case "attachSession": {
-              const attachData = data as {
-                sessionId: string;
-                cols: number;
-                rows: number;
-                tabInstanceId?: string;
-              };
-              sshLogger.info("Attempting to attach session", {
-                operation: "terminal_attach_session",
-                sessionId: attachData.sessionId,
-                tabInstanceId: attachData.tabInstanceId,
-                userId,
-                requestedCols: attachData.cols,
-                requestedRows: attachData.rows,
-              });
-              const session = sessionManager.attachWs(
-                attachData.sessionId,
-                userId,
-                ws,
-                attachData.tabInstanceId,
-              );
-              if (session) {
-                sshLogger.success("Session attached successfully", {
-                  operation: "terminal_attach_success",
-                  sessionId: attachData.sessionId,
-                  sessionCreatedAt: session.createdAt,
-                  wasDetached: !!session.lastDetachedAt,
-                  detachedDuration: session.lastDetachedAt
-                    ? Date.now() - session.lastDetachedAt
-                    : 0,
-                });
-                currentSessionId = attachData.sessionId;
-                sshStream = session.sshStream;
-                sshConn = session.sshConn;
-                isConnecting = false;
-                isConnected = true;
-                const buffered = sessionManager.getBuffer(session);
-                if (buffered) {
-                  ws.send(JSON.stringify({ type: "data", data: buffered }));
-                }
-                const attachCols = toTerminalDimension(attachData.cols);
-                const attachRows = toTerminalDimension(attachData.rows);
-                if (
-                  attachCols &&
-                  attachRows &&
-                  (attachCols !== session.cols || attachRows !== session.rows)
-                ) {
-                  session.sshStream?.setWindow(
-                    attachRows,
-                    attachCols,
-                    attachRows,
-                    attachCols,
-                  );
-                  sessionManager.resizeSession(
-                    session.id,
-                    attachCols,
-                    attachRows,
-                  );
-                }
-
-                ws.send(
-                  JSON.stringify({
-                    type: "sessionAttached",
-                    sessionId: attachData.sessionId,
-                  }),
-                );
-                ws.send(
-                  JSON.stringify({
-                    type: "connected",
-                    message: "Session reattached",
-                  }),
-                );
-              } else {
-                sshLogger.warn(
-                  "Session attachment failed - will create new connection",
-                  {
-                    operation: "terminal_attach_failed",
-                    sessionId: attachData.sessionId,
-                    tabInstanceId: attachData.tabInstanceId,
-                    userId,
-                    reason: "session_not_found_or_invalid",
-                  },
-                );
-                ws.send(
-                  JSON.stringify({
-                    type: "sessionExpired",
-                    sessionId: attachData.sessionId,
-                  }),
-                );
-              }
-              break;
-            }
-
-            case "listSessions": {
-              const sessions = sessionManager.getUserSessions(userId);
-              ws.send(
-                JSON.stringify({
-                  type: "sessionList",
-                  sessions: sessions.map((s) => ({
-                    id: s.id,
-                    hostId: s.hostId,
-                    hostName: s.hostName,
-                    createdAt: s.createdAt,
-                    lastDetachedAt: s.lastDetachedAt,
-                    tmuxSessionName: s.tmuxSessionName,
-                  })),
-                }),
-              );
-              break;
-            }
-
-            case "resize": {
-              const resizeData = data as ResizeData;
-              handleResize(resizeData);
-              break;
-            }
-
-            case "disconnect": {
-              const disconnectSession = currentSessionId
-                ? sessionManager.getSession(currentSessionId)
-                : null;
-              const disconnectParticipant = disconnectSession
-                ? sessionManager.getParticipantForWs(disconnectSession, ws)
-                : null;
-              if (disconnectParticipant && !disconnectParticipant.isOwner) {
-                if (currentSessionId) {
-                  sessionManager.removeParticipant(currentSessionId, ws);
-                  currentSessionId = null;
-                }
-                break;
-              }
-              if (currentSessionId) {
-                sessionManager.destroySession(currentSessionId);
-                currentSessionId = null;
-              }
-              cleanupAuthState();
-              sshConn = null;
-              sshStream = null;
-              break;
-            }
-
-            case "get_cwd": {
-              const activeConn =
-                sessionManager.getSession(currentSessionId)?.sshConn ?? sshConn;
-              if (!activeConn) {
-                ws.send(JSON.stringify({ type: "cwd", path: "/" }));
-                break;
-              }
-              activeConn.exec("pwd", (err, execStream) => {
-                if (err) {
-                  ws.send(JSON.stringify({ type: "cwd", path: "/" }));
-                  return;
-                }
-                let stdout = "";
-                execStream.on("data", (chunk: Buffer) => {
-                  stdout += chunk.toString("utf-8");
-                });
-                execStream.stderr.on("data", () => {});
-                execStream.on("close", () => {
-                  const cwd = stdout.trim() || "/";
-                  if (ws.readyState === WebSocket.OPEN) {
-                    ws.send(JSON.stringify({ type: "cwd", path: cwd }));
-                  }
-                });
-              });
-              break;
-            }
-
-            case "open_file_in_editor": {
-              const requestedPath = asString(asObject(data).path);
-              const activeConn =
-                sessionManager.getSession(currentSessionId)?.sshConn ?? sshConn;
-              if (!activeConn || !requestedPath) {
-                ws.send(
-                  JSON.stringify({
-                    type: "open_file_in_editor",
-                    path: requestedPath || "/",
-                  }),
-                );
-                break;
-              }
-              const escapedPath = requestedPath.replace(/'/g, "'\\''");
-              activeConn.exec(
-                `realpath '${escapedPath}' 2>/dev/null || echo '${escapedPath}'`,
-                (err, execStream) => {
-                  if (err) {
-                    ws.send(
-                      JSON.stringify({
-                        type: "open_file_in_editor",
-                        path: requestedPath,
-                      }),
-                    );
-                    return;
-                  }
-                  let stdout = "";
-                  execStream.on("data", (chunk: Buffer) => {
-                    stdout += chunk.toString("utf-8");
-                  });
-                  execStream.stderr.on("data", () => {});
-                  execStream.on("close", () => {
-                    const resolvedPath = stdout.trim() || requestedPath;
-                    if (ws.readyState === WebSocket.OPEN) {
-                      ws.send(
-                        JSON.stringify({
-                          type: "open_file_in_editor",
-                          path: resolvedPath,
-                        }),
-                      );
-                    }
-                  });
-                },
-              );
-              break;
-            }
-
-            case "input": {
-              if (typeof data !== "string") break;
-              const inputData = data;
-              if (currentSessionId) {
-                sessionManager.bufferInput(currentSessionId, inputData);
-              }
-              const inputStream =
-                sessionManager.getSession(currentSessionId)?.sshStream ??
-                sshStream;
-              if (inputStream) {
-                if (inputData === "\t") {
-                  inputStream.write(inputData);
-                } else if (
-                  typeof inputData === "string" &&
-                  inputData.startsWith("\x1b")
-                ) {
-                  inputStream.write(inputData);
-                } else {
-                  try {
-                    inputStream.write(Buffer.from(inputData, "utf8"));
-                  } catch (error) {
-                    sshLogger.error(
-                      "Error writing input to SSH stream",
-                      error,
-                      {
-                        operation: "ssh_input_encoding",
-                        userId,
-                        dataLength: inputData.length,
-                      },
-                    );
-                    inputStream.write(Buffer.from(inputData, "latin1"));
-                  }
-                }
-              }
-              break;
-            }
-
-            case "ping":
-              ws.send(JSON.stringify({ type: "pong" }));
-              break;
-
-            case "tmux_attach": {
-              const tmuxData = data as { sessionName: string };
-              const session = currentSessionId
-                ? sessionManager.getSession(currentSessionId)
-                : null;
-              const tmux = deps.getTmux();
-              if (session?.sshStream && tmux) {
-                const existingName = tmuxData.sessionName || undefined;
-                if (existingName) {
-                  void tmux
-                    .attachOrCreate(
-                      session.sshStream,
-                      existingName,
-                      undefined,
-                      session.hostId,
-                    )
-                    .catch(() => {});
-                  session.tmuxSessionName = existingName;
-                  sshLogger.info("User selected tmux session to attach", {
-                    operation: "tmux_user_attach",
-                    sessionName: existingName,
-                    hostId: session.hostId,
-                  });
-                  ws.send(
-                    JSON.stringify({
-                      type: "tmux_session_attached",
-                      sessionName: existingName,
-                    }),
-                  );
-                } else {
-                  const newName = `termix-${session.hostId}-${Date.now().toString(36).slice(-4)}`;
-                  void tmux
-                    .attachOrCreate(
-                      session.sshStream,
-                      undefined,
-                      newName,
-                      session.hostId,
-                    )
-                    .catch(() => {});
-                  const sshConn = session.sshConn;
-                  if (sshConn) {
-                    (async () => {
-                      const confirmed = await tmux.waitForSession(
-                        sshConn,
-                        newName,
-                      );
-                      session.tmuxSessionName = confirmed;
-                      sshLogger.info("User requested new tmux session", {
-                        operation: "tmux_user_create",
-                        sessionName: confirmed,
-                        hostId: session.hostId,
-                      });
-                      ws.send(
-                        JSON.stringify({
-                          type: "tmux_session_created",
-                          sessionName: confirmed,
-                        }),
-                      );
-                    })();
-                  }
-                }
-              }
-              break;
-            }
-
-            case "tmux_detach": {
-              const session = currentSessionId
-                ? sessionManager.getSession(currentSessionId)
-                : null;
-              if (session?.sshConn && session.tmuxSessionName) {
-                const tmuxName = session.tmuxSessionName;
-                session.sshStream?.write("\x02d");
-                session.tmuxSessionName = null;
-                sshLogger.info("User detached from tmux session", {
-                  operation: "tmux_user_detach",
-                  sessionName: tmuxName,
-                  hostId: session.hostId,
-                });
-                ws.send(
-                  JSON.stringify({
-                    type: "tmux_detached",
-                    sessionName: tmuxName,
-                  }),
-                );
-              }
-              break;
-            }
-
-            case "totp_response": {
-              const totpData = data as TOTPResponseData;
-              if (keyboardInteractiveFinish && totpData?.code) {
-                if (totpTimeout) {
-                  clearTimeout(totpTimeout);
-                  totpTimeout = null;
-                }
-                const totpCode = totpData.code;
-                keyboardInteractiveFinish([totpCode]);
-                keyboardInteractiveFinish = null;
-                totpPromptSent = false;
-              } else {
-                sshLogger.warn(
-                  "TOTP response received but no callback available",
-                  {
-                    operation: "totp_response_error",
-                    userId,
-                    hasCallback: !!keyboardInteractiveFinish,
-                    hasCode: !!totpData?.code,
-                  },
-                );
-                ws.send(
-                  JSON.stringify({
-                    type: "error",
-                    message:
-                      "TOTP authentication state lost. Please reconnect.",
-                  }),
-                );
-              }
-              break;
-            }
-
-            case "password_response": {
-              const passwordData = data as TOTPResponseData;
-              if (keyboardInteractiveFinish && passwordData?.code) {
-                if (totpTimeout) {
-                  clearTimeout(totpTimeout);
-                  totpTimeout = null;
-                }
-                const password = passwordData.code;
-                keyboardInteractiveFinish([password]);
-                keyboardInteractiveFinish = null;
-              } else {
-                sshLogger.warn(
-                  "Password response received but no callback available",
-                  {
-                    operation: "password_response_error",
-                    userId,
-                    hasCallback: !!keyboardInteractiveFinish,
-                    hasCode: !!passwordData?.code,
-                  },
-                );
-                ws.send(
-                  JSON.stringify({
-                    type: "error",
-                    message:
-                      "Password authentication state lost. Please reconnect.",
-                  }),
-                );
-              }
-              break;
-            }
-
-            case "reconnect_with_credentials": {
-              const credentialsData = data as {
-                cols: number;
-                rows: number;
-                hostConfig: ConnectToHostData["hostConfig"];
-                password?: string;
-                sshKey?: string;
-                keyPassword?: string;
-              };
-
-              if (!credentialsData?.hostConfig) {
-                ws.send(
-                  JSON.stringify({
-                    type: "error",
-                    message: "Missing host configuration",
-                  }),
-                );
-                break;
-              }
-
-              if (credentialsData.password) {
-                credentialsData.hostConfig.password = credentialsData.password;
-                credentialsData.hostConfig.authType = "password";
-                (
-                  credentialsData.hostConfig as Record<string, unknown>
-                ).userProvidedPassword = true;
-              } else if (credentialsData.sshKey) {
-                credentialsData.hostConfig.key = credentialsData.sshKey;
-                credentialsData.hostConfig.keyPassword =
-                  credentialsData.keyPassword;
-                credentialsData.hostConfig.authType = "key";
-              } else if (credentialsData.keyPassword) {
-                credentialsData.hostConfig.keyPassword =
-                  credentialsData.keyPassword;
-              }
-
-              isAwaitingAuthCredentials = false;
-              if (currentSessionId) {
-                sessionManager.destroySession(currentSessionId);
-                currentSessionId = null;
-              }
-              cleanupAuthState();
-              sshConn = null;
-              sshStream = null;
-
-              const reconnectData: ConnectToHostData = {
-                cols: credentialsData.cols,
-                rows: credentialsData.rows,
-                hostConfig: credentialsData.hostConfig,
-              };
-
-              handleConnectToHost(reconnectData).catch((error) => {
-                const errMsg = getErrorMessage(error);
-                if (
-                  errMsg.includes("Cannot parse privateKey") &&
-                  errMsg.includes("no passphrase")
-                ) {
-                  isAwaitingAuthCredentials = true;
-                  ws.send(
-                    JSON.stringify({
-                      type: "passphrase_required",
-                      message:
-                        "The SSH key is encrypted. Please enter the passphrase to unlock it.",
-                    }),
-                  );
-                  return;
-                }
-                sshLogger.error("Failed to reconnect with credentials", error, {
-                  operation: "ssh_reconnect_with_credentials",
-                  userId,
-                  hostId: credentialsData.hostConfig?.id,
-                  ip: credentialsData.hostConfig?.ip,
-                });
-                ws.send(
-                  JSON.stringify({
-                    type: "error",
-                    message:
-                      "Failed to connect with provided credentials: " + errMsg,
-                  }),
-                );
-              });
-              break;
-            }
-
-            case "collab_subscribe": {
-              const { roomId } = (data ?? {}) as { roomId?: string };
-              if (typeof roomId !== "string" || !roomId) break;
-              try {
-                const sharing = deps.getSharing();
-                const joined = sharing
-                  ? await sharing.subscribeRoom(roomId, ws)
-                  : false;
-                if (!joined) {
-                  ws.send(
-                    JSON.stringify({
-                      type: "error",
-                      message: "Room not found",
-                    }),
-                  );
-                }
-              } catch (error) {
-                sshLogger.error("Failed to subscribe to collab room", error, {
-                  operation: "collab_subscribe_error",
-                  userId,
-                });
-              }
-              break;
-            }
-
-            case "collab_unsubscribe": {
-              const { roomId } = (data ?? {}) as { roomId?: string };
-              void deps
-                .getSharing()
-                ?.unsubscribeRoom(
-                  ws,
-                  typeof roomId === "string" ? roomId : undefined,
-                )
-                .catch(() => {});
-              break;
-            }
-
-            case "joinSharedSession": {
-              const joinData = data as {
-                shareId: string;
-                tabInstanceId?: string;
-              };
-              try {
-                const sharing = deps.getSharing();
-                const authorized = sharing
-                  ? await sharing.authorizeJoin(joinData.shareId)
-                  : null;
-                if (!sharing || !authorized) {
-                  ws.send(
-                    JSON.stringify({
-                      type: "error",
-                      message: "Share not found or not accessible",
-                    }),
-                  );
-                  break;
-                }
-                const { share, displayName } = authorized;
-
-                const joinedSession = sessionManager.joinAsParticipant(
-                  share.sessionId,
-                  ws,
-                  {
-                    userId,
-                    permissionLevel: share.permissionLevel,
-                    displayName,
-                    tabInstanceId: joinData.tabInstanceId,
-                    shareId: share.id,
-                  },
-                );
-                if (!joinedSession) {
-                  ws.send(
-                    JSON.stringify({
-                      type: "error",
-                      message: "Shared session is no longer active",
-                    }),
-                  );
-                  break;
-                }
-
-                currentSessionId = share.sessionId;
-                sshStream = joinedSession.sshStream;
-                sshConn = joinedSession.sshConn;
-                isConnecting = false;
-                isConnected = true;
-
-                sharing.recordJoin(share.id).catch(() => {});
-
-                const buffered = sessionManager.getBuffer(joinedSession);
-                if (buffered) {
-                  ws.send(JSON.stringify({ type: "data", data: buffered }));
-                }
-                ws.send(
-                  JSON.stringify({
-                    type: "sessionAttached",
-                    sessionId: share.sessionId,
-                  }),
-                );
-                ws.send(
-                  JSON.stringify({
-                    type: "connected",
-                    message: "Joined session",
-                  }),
-                );
-              } catch (error) {
-                sshLogger.error("Failed to join shared session", error, {
-                  operation: "terminal_join_shared_session_error",
-                  userId,
-                  shareId: joinData.shareId,
-                });
-                ws.send(
-                  JSON.stringify({
-                    type: "error",
-                    message: "Failed to join shared session",
-                  }),
-                );
-              }
-              break;
-            }
-
-            default:
-              if (await handleSignInMessage(type, data)) break;
-              sshLogger.warn("Unknown message type received", {
-                operation: "websocket_message_unknown_type",
-                userId,
-                messageType: type,
-              });
-          }
-        } catch (error) {
-          // A malformed payload must never escape into the process-level
-          // unhandledRejection handler, which exits the server.
-          sshLogger.error("Error handling WebSocket message", error, {
-            operation: "websocket_message_handler_error",
-            userId,
-            messageType: type,
-          });
-          if (ws.readyState === WebSocket.OPEN) {
-            ws.send(
-              JSON.stringify({
-                type: "error",
-                message: "Failed to process message",
-              }),
-            );
-          }
-        }
-      }),
-    );
-
-    /**
-     * Starts the browser sign-in behind an "<interaction>_auth_required"
-     * message. The provider for the host's auth type wins; otherwise the first
-     * provider that owns this interaction.
-     */
-    async function startAuthInteraction(
-      interaction: string,
-      hostId: number,
-      payload: unknown,
-    ): Promise<void> {
-      await ctx.ssh.startInteraction(interaction, {
-        hostId,
-        socket: ws,
-        requestOrigin: connection.requestOrigin,
-        payload: (payload ?? {}) as Record<string, unknown>,
-      });
-    }
-
-    /**
-     * Messages a sign-in's UI sends: "<interaction>_start_auth", "_cancel"
-     * and "_auth_completed" for a provider's browser step, and
-     * "<handler>_auth_continue" for a pending keyboard-interactive browser
-     * round. False for anything else.
-     */
-    async function handleSignInMessage(
-      type: string,
-      data: unknown,
-    ): Promise<boolean> {
-      const match =
-        /^([a-z0-9-]+)_(start_auth|cancel|auth_completed|auth_continue)$/.exec(
-          type,
-        );
-      if (!match) return false;
-      const [, name, action] = match;
-      const payload = (data ?? {}) as Record<string, unknown>;
-      const hostId = Number(payload.hostId);
-
-      if (action === "start_auth") {
-        try {
-          await startAuthInteraction(name, hostId, payload);
-        } catch (error) {
-          sshLogger.error("Failed to start sign-in", error, {
-            operation: "sign_in_start_error",
-            interaction: name,
-            userId,
-            hostId,
-          });
-          ws.send(
-            JSON.stringify({
-              type: `${name}_error`,
-              requestId: "",
-              hostId,
-              error:
-                error instanceof PluginSshInteractionError
-                  ? error.message
-                  : getErrorMessage(error, "Failed to start authentication"),
-            }),
-          );
-        }
-        return true;
-      }
-
-      if (action === "cancel") {
-        try {
-          await ctx.ssh.cancelInteraction(name, {
-            requestId:
-              typeof payload.requestId === "string"
-                ? payload.requestId
-                : undefined,
-            hostId: Number.isInteger(hostId) ? hostId : undefined,
-          });
-          resetConnectionState();
-        } catch (error) {
-          sshLogger.error("Failed to cancel sign-in", error, {
-            operation: "sign_in_cancel_error",
-            interaction: name,
-            userId,
-          });
-        }
-        return true;
-      }
-
-      if (action === "auth_continue") {
-        if (name === browserSignInId && keyboardInteractiveFinish) {
-          if (browserSignInTimeout) {
-            clearTimeout(browserSignInTimeout);
-            browserSignInTimeout = null;
-          }
-          keyboardInteractiveFinish([""]);
-          keyboardInteractiveFinish = null;
-          browserSignInId = null;
-        }
-        return true;
-      }
-
-      const completed = payload as {
-        hostId: number;
-        cols?: number;
-        rows?: number;
-        hostConfig?: ConnectToHostData["hostConfig"];
-      };
-      resetConnectionState();
-      const reconnectConfig: ConnectToHostData = {
-        cols: completed.cols || 80,
-        rows: completed.rows || 24,
-        hostConfig:
-          completed.hostConfig ||
-          ({
-            id: completed.hostId,
-            ip: "",
-            port: 22,
-            username: "",
-            userId,
-          } as ConnectToHostData["hostConfig"]),
-      };
-      handleConnectToHost(reconnectConfig).catch((error) => {
-        sshLogger.error("Failed to reconnect after sign-in", error, {
-          operation: "sign_in_reconnect_error",
-          interaction: name,
-          userId,
-          hostId: completed.hostId,
-        });
-        ws.send(
-          JSON.stringify({
-            type: "error",
-            message:
-              "Failed to connect after authentication: " +
-              getErrorMessage(error),
-          }),
-        );
-      });
-      return true;
-    }
-
-    async function handleConnectToHost(data: ConnectToHostData) {
-      const { hostConfig, initialPath, executeCommand, tmuxAttachSession } =
-        data;
-      const {
-        id,
-        syncId: hostSyncId,
-        ip: rawIp,
-        port: clientPort,
-        username: clientUsername,
-        password,
-        key,
-        keyPassword,
-        keyType,
-        authType,
-        credentialId,
-      } = hostConfig;
-      const clientIp = rawIp?.replace(/^\[|\]$/g, "").trim() || rawIp;
-      let ip = clientIp;
-      let port = clientPort;
-      let username = clientUsername;
-      sshLogger.info("Resolving SSH host configuration", {
-        operation: "terminal_host_resolve",
-        sessionId,
-        userId,
-        hostId: id,
-      });
-
-      const sendLog = (
-        stage: string,
-        level: string,
-        message: string,
-        details?: Record<string, unknown>,
-      ) => {
-        ws.send(
-          JSON.stringify({
-            type: "connection_log",
-            data: { stage, level, message, details },
-          }),
-        );
-      };
-
-      if (!username || typeof username !== "string" || username.trim() === "") {
-        sshLogger.error("Invalid username provided", undefined, {
-          operation: "ssh_connect",
-          hostId: id,
-          ip,
-        });
-        ws.send(
-          JSON.stringify({
-            type: "error",
-            message: "Invalid username provided",
-          }),
-        );
-        return;
-      }
-
-      if (!ip || typeof ip !== "string" || ip.trim() === "") {
-        sshLogger.error("Invalid IP provided", undefined, {
-          operation: "ssh_connect",
-          hostId: id,
-          username,
-        });
-        ws.send(
-          JSON.stringify({ type: "error", message: "Invalid IP provided" }),
-        );
-        return;
-      }
-
-      if (!port || typeof port !== "number" || port <= 0) {
-        sshLogger.error("Invalid port provided", undefined, {
-          operation: "ssh_connect",
-          hostId: id,
-          ip,
-          username,
-          port,
-        });
-        ws.send(
-          JSON.stringify({ type: "error", message: "Invalid port provided" }),
-        );
-        return;
-      }
-
-      if (isConnecting || isConnected) {
-        sshLogger.warn("Connection already in progress or established", {
-          operation: "ssh_connect",
-          hostId: id,
-          isConnecting,
-          isConnected,
-        });
-        ws.send(
-          JSON.stringify({
-            type: "error",
-            message: "Connection already in progress",
-            code: "DUPLICATE_CONNECTION",
-          }),
-        );
-        return;
-      }
-
-      isConnecting = true;
-      sshConn = new Client();
-
-      sendLog("dns", "info", `Starting address resolution of ${ip}`);
-      sendLog("tcp", "info", `Connecting to ${ip} port ${port}`);
-
-      const onConnectionTimeout = () => {
-        if (sshConn && isConnecting && !isConnected) {
-          sshLogger.error("SSH connection timeout", undefined, {
-            operation: "ssh_connect",
-            hostId: id,
-            ip,
-            port,
-            username,
-          });
-          ws.send(
-            JSON.stringify({
-              type: "error",
-              message: "SSH connection timeout",
-            }),
-          );
-          if (currentSessionId) {
-            sessionManager.destroySession(currentSessionId);
-            currentSessionId = null;
-          }
-          cleanupAuthState(connectionTimeout);
-        }
-      };
-
-      // Reassigned when an auth provider's onBanner holds the connection open
-      // (Tailscale SSH check mode), so the short connect timeout does not tear
-      // down a connection the server is deliberately waiting on.
-      let connectionTimeout = setTimeout(onConnectionTimeout, 120000);
-
-      let bannerHoldPending = false;
-      let authRetries = 0;
-      let isAuthRetrying = false;
-      let prepared: PluginSshPrepared | null = null;
-      let connectTarget: PluginSshHost | null = null;
-      let clearOnlineStatus: (() => void) | null = null;
-
-      let resolvedHostData:
-        | (Record<string, unknown> & {
-            id?: number;
-            ip?: string;
-            port?: number;
-            username?: string;
-            password?: string;
-            key?: string;
-            keyPassword?: string;
-            keyType?: string;
-            authType?: string;
-            jumpHosts?: Array<{ hostId: number }>;
-            useSocks5?: boolean;
-            socks5Host?: string;
-            socks5Port?: number;
-            socks5Username?: string;
-            socks5Password?: string;
-            socks5ProxyChain?: unknown;
-            portKnockSequence?: ConnectToHostData["hostConfig"]["portKnockSequence"];
-            sshOptions?: HostSshOptions | null;
-          })
-        | null = null;
-
-      if (id && userId) {
-        try {
-          // Prefer the sync identity. A numeric id belongs to whichever database
-          // produced it, so on a sync server it names a different host than the
-          // desktop app meant; syncId is the same string on both sides.
-          resolvedHostData = (await ctx.ssh.resolveHost(id, {
-            syncId: hostSyncId,
-          })) as unknown as typeof resolvedHostData | null;
-
-          if (hostSyncId && !resolvedHostData) {
-            sshLogger.error(
-              "Refusing to connect: host is not known to this server",
-              undefined,
-              {
-                operation: "ssh_connect_host_sync_id_unknown",
-                hostId: id,
-                userId,
-              },
-            );
-            ws.send(
-              JSON.stringify({
-                type: "error",
-                message: HOST_NOT_ON_THIS_SERVER_MESSAGE,
-              }),
-            );
-            cleanupAuthState(connectionTimeout);
-            return;
-          }
-
-          // Older clients send only the numeric id, which cannot be trusted to
-          // mean the same host here. Everything below is taken from the row it
-          // lands on -- the address, the credentials, the jump hosts, the stored
-          // host key -- so compare the address before using any of it.
-          if (
-            !hostSyncId &&
-            hostAddressMismatch(clientIp, resolvedHostData?.ip)
-          ) {
-            sshLogger.error(
-              "Refusing to connect: host id resolves to a different address here",
-              undefined,
-              {
-                operation: "ssh_connect_host_id_mismatch",
-                hostId: id,
-                userId,
-                clientIp,
-                resolvedIp: resolvedHostData?.ip,
-              },
-            );
-            ws.send(
-              JSON.stringify({
-                type: "error",
-                message: HOST_ADDRESS_MISMATCH_MESSAGE,
-              }),
-            );
-            cleanupAuthState(connectionTimeout);
-            return;
-          }
-
-          if (resolvedHostData) {
-            const resolvedJumpHosts = resolveServerJumpHosts(
-              hostConfig.jumpHosts,
-              resolvedHostData.jumpHosts,
-              hostSyncId,
-            );
-            if (resolvedJumpHosts !== hostConfig.jumpHosts) {
-              hostConfig.jumpHosts = resolvedJumpHosts;
-              sendLog(
-                "jump",
-                "info",
-                `Loaded ${resolvedJumpHosts?.length ?? 0} jump host(s) from server-side host data`,
-              );
-            }
-
-            if (resolvedHostData.useSocks5) {
-              hostConfig.useSocks5 = resolvedHostData.useSocks5;
-              hostConfig.socks5Host = resolvedHostData.socks5Host;
-              hostConfig.socks5Port = resolvedHostData.socks5Port;
-              hostConfig.socks5Username = resolvedHostData.socks5Username;
-              hostConfig.socks5Password = resolvedHostData.socks5Password;
-              hostConfig.socks5ProxyChain = resolvedHostData.socks5ProxyChain;
-            }
-
-            if (!hostConfig.sshOptions && resolvedHostData.sshOptions) {
-              hostConfig.sshOptions = resolvedHostData.sshOptions;
-            }
-
-            if (
-              (!hostConfig.portKnockSequence ||
-                hostConfig.portKnockSequence.length === 0) &&
-              resolvedHostData.portKnockSequence &&
-              resolvedHostData.portKnockSequence.length > 0
-            ) {
-              hostConfig.portKnockSequence = resolvedHostData.portKnockSequence;
-              sendLog(
-                "port_knock",
-                "info",
-                `Loaded ${resolvedHostData.portKnockSequence.length} port knock(s) from server-side host data`,
-              );
-            }
-          }
-        } catch (error) {
-          sshLogger.warn(`Failed to resolve server-side host data for ${id}`, {
-            operation: "ssh_host_data",
-            hostId: id,
-            error: getErrorMessage(error),
-          });
-        }
-      }
-
-      const serverHostId = resolveServerHostId(id, resolvedHostData);
-
-      let autoTmuxEnabled = false;
-      if (serverHostId != null) {
-        try {
-          autoTmuxEnabled =
-            (await ctx.settings.getHost(serverHostId, HOST_KEYS.autoTmux)) ===
-            true;
-        } catch {
-          autoTmuxEnabled = false;
-        }
-      }
-
-      // Resolve credentials server-side when frontend doesn't provide them
-      let resolvedCredentials = {
-        username,
-        password,
-        key,
-        keyPassword,
-        keyType,
-        authType,
-        certPublicKey: undefined as string | undefined,
-      };
-      const authMethodNotAvailable = false;
-      if (id && userId && !password && !key) {
-        try {
-          if (resolvedHostData) {
-            ip = resolvedHostData.ip || ip;
-            port = resolvedHostData.port || port;
-            username = resolvedHostData.username || username;
-            resolvedCredentials = {
-              username: resolvedHostData.username || username,
-              password: resolvedHostData.password,
-              key: resolvedHostData.key,
-              keyPassword: keyPassword || resolvedHostData.keyPassword,
-              keyType: resolvedHostData.keyType,
-              authType: resolvedHostData.authType,
-              certPublicKey: resolvedHostData.certPublicKey as
-                string | undefined,
-            };
-            sendLog(
-              "auth",
-              "info",
-              "Credentials resolved from server-side host data",
-            );
-          }
-        } catch (error) {
-          sshLogger.warn(`Failed to resolve host credentials for ${id}`, {
-            operation: "ssh_credentials",
-            hostId: id,
-            error: getErrorMessage(error),
-          });
-        }
-      } else if (credentialId && id && userId) {
-        try {
-          if (resolvedHostData) {
-            ip = resolvedHostData.ip || ip;
-            port = resolvedHostData.port || port;
-            username = resolvedHostData.username || username;
-            resolvedCredentials = {
-              username: resolvedHostData.username || username,
-              password: resolvedHostData.password,
-              key: resolvedHostData.key,
-              // Preserve user-supplied keyPassword (e.g. from passphrase dialog) over the empty DB value
-              keyPassword: keyPassword || resolvedHostData.keyPassword,
-              keyType: resolvedHostData.keyType,
-              authType: resolvedHostData.authType,
-              certPublicKey: resolvedHostData.certPublicKey as
-                string | undefined,
-            };
-          }
-        } catch (error) {
-          sshLogger.warn(`Failed to resolve credentials for host ${id}`, {
-            operation: "ssh_credentials",
-            hostId: id,
-            credentialId,
-            error: getErrorMessage(error),
-          });
-        }
-      }
-
-      if (hostConfig.passwordFallbackOnly && resolvedCredentials.password) {
-        resolvedCredentials = {
-          ...resolvedCredentials,
-          key: undefined,
-          keyPassword: undefined,
-          keyType: undefined,
-          certPublicKey: undefined,
-          authType: "password",
-        };
-      }
-
-      const connectsViaJumpHosts = !!(
-        hostConfig.jumpHosts &&
-        hostConfig.jumpHosts.length > 0 &&
-        hostConfig.userId
-      );
-
-      let connectHost = ip;
-      if (connectsViaJumpHosts) {
-        // The target is only reachable through the jump host's network (e.g. a
-        // VPN-only address), so DNS must be resolved there, not on this host.
-        sendLog(
-          "dns",
-          "info",
-          `Skipping local address resolution of ${ip} (resolved by jump host)`,
-        );
-      } else {
-        sendLog("dns", "info", `Starting address resolution of ${ip}`);
-        try {
-          const resolution = await resolveHostForSshConnect(ip);
-          connectHost = resolution.host;
-          if (resolution.resolvedAddress && resolution.resolvedAddress !== ip) {
-            sendLog(
-              "dns",
-              "success",
-              `Resolved ${ip} to ${resolution.resolvedAddress}`,
-              { attempts: resolution.attempts },
-            );
-          }
-        } catch (error) {
-          const message = getErrorMessage(error);
-          sshLogger.error("SSH hostname resolution failed", error, {
-            operation: "terminal_dns_resolve",
-            hostId: id,
-            ip,
-            port,
-            transient: isRetriableDnsError(error),
-          });
-          sendLog(
-            "dns",
-            "error",
-            `DNS resolution failed for ${ip}: ${message}`,
-          );
-          ws.send(
-            JSON.stringify({
-              type: "error",
-              message: isRetriableDnsError(error)
-                ? "SSH error: DNS lookup temporarily failed. Check the Docker/container DNS configuration or try again."
-                : "SSH error: Could not resolve hostname from the Termix server container.",
-            }),
-          );
-          cleanupAuthState(connectionTimeout);
-          return;
-        }
-      }
-      sendLog("tcp", "info", `Connecting to ${ip} port ${port}`);
-
-      // A provider can hold the handshake open pending an out-of-band step
-      // (Tailscale SSH check mode delivers its re-auth URL as an auth banner,
-      // then blocks while the user logs in via the browser).
-      sshConn.on(
-        "banner",
-        bind((banner: string) => {
-          if (!prepared?.onBanner) return;
-          const decision = prepared.onBanner(banner);
-          if (!decision) return;
-
-          const authType = prepared.authType;
-
-          if (decision.action === "hold") {
-            bannerHoldPending = true;
-            clearTimeout(connectionTimeout);
-            connectionTimeout = setTimeout(
-              onConnectionTimeout,
-              decision.timeoutMs,
-            );
-            sendLog("auth", "info", decision.message);
-            ws.send(
-              JSON.stringify({
-                type: `${authType}_check_required`,
-                hostId: id,
-                ...decision.details,
-              }),
-            );
-            return;
-          }
-
-          if (bannerHoldPending) {
-            bannerHoldPending = false;
-            sendLog("auth", "info", `${authType} check completed`);
-            ws.send(
-              JSON.stringify({
-                type: `${authType}_check_completed`,
-                hostId: id,
-                ...decision.details,
-              }),
-            );
-          }
-        }),
-      );
-
-      sshConn.on(
-        "ready",
-        bind(() => {
-          if (serverHostId != null) {
-            clearOnlineStatus ??= ctx.hosts.trackSession(serverHostId);
-          }
-          clearTimeout(connectionTimeout);
-          isAuthRetrying = false;
-          if (bannerHoldPending) {
-            bannerHoldPending = false;
-            ws.send(
-              JSON.stringify({
-                type: `${prepared?.authType}_check_completed`,
-                hostId: id,
-              }),
-            );
-          }
-          sshLogger.success("SSH connection established", {
-            operation: "terminal_ssh_connected",
-            sessionId,
-            userId,
-            hostId: id,
-            ip,
-          });
-
-          void ctx.audit.record({
-            action: "ssh_connect",
-            resourceType: "host",
-            resourceId: String(id),
-            resourceName: `${username}@${ip}:${port}`,
-            success: true,
-          });
-          if (totpPromptSent) {
-            authLogger.success("TOTP verification successful for SSH session", {
-              operation: "terminal_totp_success",
-              sessionId,
-              userId,
-              hostId: id,
-            });
-          }
-          sendLog("handshake", "success", "SSH handshake completed");
-          sendLog(
-            "auth",
-            "success",
-            `Authentication successful for ${username}`,
-          );
-          sendLog("connected", "success", "Connection established");
-
-          const hostDisplayName = `${username}@${ip}:${port}`;
-          const tabInstanceId = hostConfig.instanceId;
-          // The recordings.writer provider decides per host and user.
-          const sessionLoggingEnabled = true;
-          currentSessionId = sessionManager.createSession(
-            userId,
-            id,
-            hostDisplayName,
-            data.cols,
-            data.rows,
-            tabInstanceId,
-            sessionLoggingEnabled,
-          );
-
-          // If createSession returned an existing live session (duplicate tabInstanceId),
-          // close the newly-established SSH connection and attach this WS to the live session instead.
-          const existingSession = sessionManager.getSession(currentSessionId);
-          if (
-            existingSession &&
-            existingSession.sshStream &&
-            !existingSession.sshStream.destroyed &&
-            existingSession.sshConn !== sshConn
-          ) {
-            const reusedSessionId = currentSessionId;
-            sshLogger.info(
-              "Reusing existing live session after duplicate connectToHost, closing new SSH conn",
-              {
-                operation: "terminal_reuse_existing_session",
-                sessionId: reusedSessionId,
-                tabInstanceId,
-                userId,
-              },
-            );
-            // Null out currentSessionId before ending the duplicate connection so
-            // the sshConn "close" handler does not destroy the reused session.
-            // Set isDuplicateConnDiscarded so the close handler does not send a
-            // "disconnected" message to the new WS that is now attached to the live session.
-            // Null out currentSessionId before ending the duplicate connection so
-            // the sshConn "close" handler does not destroy the reused session.
-            // Set isDuplicateConnDiscarded so the close handler exits without
-            // sending a "disconnected" message to the new WS.
-            currentSessionId = null;
-            isDuplicateConnDiscarded = true;
-            clearTimeout(connectionTimeout);
-            try {
-              sshConn?.end();
-            } catch {
-              /* ignore */
-            }
-            sshConn = null;
-            sshStream = null;
-
-            // Point this WS handler's closure at the live session so the input
-            // handler can forward keystrokes via currentSessionId.
-            currentSessionId = reusedSessionId;
-            sshStream = existingSession.sshStream;
-            sshConn = existingSession.sshConn;
-            isConnecting = false;
-            isConnected = true;
-            sessionManager.attachWs(reusedSessionId, userId, ws, tabInstanceId);
-
-            const buffered = sessionManager.getBuffer(existingSession);
-            if (buffered) {
-              ws.send(JSON.stringify({ type: "data", data: buffered }));
-            }
-            ws.send(
-              JSON.stringify({
-                type: "sessionCreated",
-                sessionId: reusedSessionId,
-              }),
-            );
-            ws.send(
-              JSON.stringify({
-                type: "sessionAttached",
-                sessionId: reusedSessionId,
-              }),
-            );
-            ws.send(
-              JSON.stringify({
-                type: "connected",
-                message: "Session reattached",
-              }),
-            );
-            return;
-          }
-
-          sshLogger.info("Terminal session created after SSH ready", {
-            operation: "terminal_session_created",
-            sessionId: currentSessionId,
-            userId,
-            hostId: id,
-            tabInstanceId,
-            ip,
-            port,
-          });
-
-          const conn = sshConn;
-
-          if (!conn || isCleaningUp || !sshConn) {
-            sshLogger.warn(
-              "SSH connection was cleaned up before shell could be created",
-              {
-                operation: "ssh_shell",
-                hostId: id,
-                ip,
-                port,
-                username,
-                isCleaningUp,
-                connNull: !conn,
-                sshConnNull: !sshConn,
-              },
-            );
-            ws.send(
-              JSON.stringify({
-                type: "error",
-                message:
-                  "SSH connection was closed before terminal could be created",
-              }),
-            );
-            if (currentSessionId) {
-              sessionManager.destroySession(currentSessionId);
-              currentSessionId = null;
-            }
-            cleanupAuthState(connectionTimeout);
-            return;
-          }
-
-          isShellInitializing = true;
-          isConnecting = false;
-          isConnected = true;
-
-          if (!sshConn) {
-            sshLogger.error(
-              "SSH connection became null right before shell creation",
-              {
-                operation: "ssh_shell",
-                hostId: id,
-              },
-            );
-            ws.send(
-              JSON.stringify({
-                type: "error",
-                message: "SSH connection lost during setup",
-              }),
-            );
-            isShellInitializing = false;
-            if (currentSessionId) {
-              sessionManager.destroySession(currentSessionId);
-              currentSessionId = null;
-            }
-            cleanupAuthState(connectionTimeout);
-            return;
-          }
-
-          sshLogger.info("Creating shell", {
-            operation: "ssh_shell_start",
-            hostId: id,
-            ip,
-            port,
-            username,
-          });
-
-          let shellCallbackReceived = false;
-          const shellTimeout = setTimeout(() => {
-            if (!shellCallbackReceived && isShellInitializing) {
-              sshLogger.error(
-                "Shell creation timeout - no response from server",
-                {
-                  operation: "ssh_shell_timeout",
-                  hostId: id,
-                  ip,
-                  port,
-                  username,
-                },
-              );
-              isShellInitializing = false;
-              ws.send(
-                JSON.stringify({
-                  type: "error",
-                  message:
-                    "Shell creation timeout. The server may not support interactive shells or the connection was interrupted.",
-                }),
-              );
-              if (currentSessionId) {
-                sessionManager.destroySession(currentSessionId);
-                currentSessionId = null;
-              }
-              cleanupAuthState(connectionTimeout);
-            }
-          }, 15000);
-
-          conn.shell(
-            {
-              rows: data.rows,
-              cols: data.cols,
-              term: "xterm-256color",
-            } as PseudoTtyOptions,
-            bind((err: Error | undefined, stream: ClientChannel) => {
-              shellCallbackReceived = true;
-              clearTimeout(shellTimeout);
-              isShellInitializing = false;
-
-              if (err) {
-                sshLogger.error("Shell error", err, {
-                  operation: "ssh_shell",
-                  hostId: id,
-                  ip,
-                  port,
-                  username,
-                });
-                ws.send(
-                  JSON.stringify({
-                    type: "error",
-                    message: "Shell error: " + err.message,
-                  }),
-                );
-                if (currentSessionId) {
-                  sessionManager.destroySession(currentSessionId);
-                  currentSessionId = null;
-                }
-                cleanupAuthState(connectionTimeout);
-                return;
-              }
-
-              sshStream = stream;
-              sshLogger.success("Terminal shell channel opened", {
-                operation: "terminal_shell_opened",
-                sessionId,
-                userId,
-                hostId: id,
-                termType: "xterm-256color",
-              });
-
-              if (currentSessionId) {
-                sessionManager.setSSHState(
-                  currentSessionId,
-                  sshConn!,
-                  stream,
-                  lastJumpClient,
-                );
-                sessionManager.attachWs(currentSessionId, userId, ws);
-
-                ws.send(
-                  JSON.stringify({
-                    type: "sessionCreated",
-                    sessionId: currentSessionId,
-                  }),
-                );
-
-                sshLogger.info("Session ready for persistence", {
-                  operation: "session_ready",
-                  sessionId: currentSessionId,
-                  userId,
-                  hostId: id,
-                });
-              }
-
-              const boundSessionId = currentSessionId;
-              // A single TCP/SSH packet boundary can split a multi-byte UTF-8
-              // character (e.g. the box-drawing glyphs mc/htop use for borders).
-              // Buffer.toString("utf-8") on each chunk independently replaces the
-              // split bytes with U+FFFD, which shows up as corrupted/inserted
-              // characters. StringDecoder carries incomplete trailing bytes over
-              // to the next chunk so multi-byte characters decode correctly.
-              const decoder = new StringDecoder("utf-8");
-
-              stream.on("data", (data: Buffer) => {
-                try {
-                  const utf8String = decoder.write(data);
-
-                  if (!utf8String) return;
-
-                  const session = sessionManager.getSession(boundSessionId);
-                  if (session) {
-                    sessionManager.bufferOutput(boundSessionId!, utf8String);
-                    sessionManager.broadcast(boundSessionId!, {
-                      type: "data",
-                      data: utf8String,
-                    });
-                  }
-                } catch (error) {
-                  sshLogger.error("Error encoding terminal data", error, {
-                    operation: "terminal_data_encoding",
-                    hostId: id,
-                    dataLength: data.length,
-                  });
-                  const fallback = data.toString("latin1");
-                  const session = sessionManager.getSession(boundSessionId);
-                  if (session) {
-                    sessionManager.bufferOutput(boundSessionId!, fallback);
-                    sessionManager.broadcast(boundSessionId!, {
-                      type: "data",
-                      data: fallback,
-                    });
-                  }
-                }
-              });
-
-              stream.on("close", (code: number | null) => {
-                const session = sessionManager.getSession(boundSessionId);
-                if (session) {
-                  if (code != null) {
-                    sessionManager.broadcast(boundSessionId!, {
-                      type: "session_ended",
-                      code,
-                    });
-                  } else {
-                    sessionManager.broadcast(boundSessionId!, {
-                      type: "disconnected",
-                      message: "Connection lost",
-                      graceful: true,
-                    });
-                  }
-                }
-                if (boundSessionId) {
-                  sessionManager.destroySession(boundSessionId);
-                  if (currentSessionId === boundSessionId) {
-                    currentSessionId = null;
-                  }
-                }
-              });
-
-              stream.on("error", (err: Error) => {
-                sshLogger.error("SSH stream error", err, {
-                  operation: "ssh_stream",
-                  hostId: id,
-                  ip,
-                  port,
-                  username,
-                });
-                const session = sessionManager.getSession(boundSessionId);
-                if (session) {
-                  sessionManager.broadcast(boundSessionId!, {
-                    type: "error",
-                    message: "SSH stream error: " + err.message,
-                  });
-                }
-              });
-
-              const autoTmux = autoTmuxEnabled;
-
-              // Helper to run initialPath/executeCommand after the shell
-              // (or tmux session) is ready
-              const runPostShellCommands = (delay: number) => {
-                setTimeout(() => {
-                  if (initialPath && initialPath.trim() !== "") {
-                    let cdCommand: string;
-                    if (isWindowsSftpPath(initialPath)) {
-                      const winPath = sftpPathToLocalPath(initialPath);
-                      const escaped = winPath.replace(/"/g, '""');
-                      cdCommand = `cd "${escaped}"\r`;
-                    } else {
-                      cdCommand = `cd "${initialPath.replace(/"/g, '\\"')}"\r`;
-                    }
-                    stream.write(cdCommand);
-                  }
-                  if (executeCommand && executeCommand.trim() !== "") {
-                    setTimeout(() => {
-                      stream.write(`${executeCommand}\r`);
-                    }, 300);
-                  }
-                }, delay);
-              };
-
-              const tmux = deps.getTmux();
-              if (tmuxAttachSession && conn && tmux) {
-                // Direct attach (tmux monitor): the session is known to exist, so
-                // skip detection and reuse the same path as the manual
-                // "tmux_attach" websocket message.
-                void tmux
-                  .attachOrCreate(stream, tmuxAttachSession, undefined, id)
-                  .catch(() => {});
-                {
-                  const session = sessionManager.getSession(boundSessionId);
-                  if (session) session.tmuxSessionName = tmuxAttachSession;
-                }
-                sshLogger.info("Attached to requested tmux session", {
-                  operation: "tmux_direct_attach",
-                  sessionName: tmuxAttachSession,
-                  hostId: id,
-                });
-                ws.send(
-                  JSON.stringify({
-                    type: "tmux_session_attached",
-                    sessionName: tmuxAttachSession,
-                  }),
-                );
-              } else if (autoTmux && conn && tmux) {
-                (async () => {
-                  try {
-                    const detection = await tmux.detect(conn);
-                    if (!detection.available) {
-                      sshLogger.warn("tmux not found on remote host", {
-                        operation: "tmux_detection",
-                        hostId: id,
-                      });
-                      ws.send(
-                        JSON.stringify({
-                          type: "tmux_unavailable",
-                          message:
-                            "tmux is not installed on the remote host. Falling back to standard shell.",
-                        }),
-                      );
-                      runPostShellCommands(0);
-                    } else if (detection.sessions.length === 0) {
-                      const newName = `termix-${id}-${Date.now().toString(36).slice(-4)}`;
-                      void tmux
-                        .attachOrCreate(stream, undefined, newName, id)
-                        .catch(() => {});
-                      const confirmed = await tmux.waitForSession(
-                        conn,
-                        newName,
-                      );
-                      const session = sessionManager.getSession(boundSessionId);
-                      if (session) {
-                        session.tmuxSessionName = confirmed;
-                      }
-                      sshLogger.info("Created new tmux session", {
-                        operation: "tmux_new_session",
-                        sessionName: confirmed,
-                        hostId: id,
-                      });
-                      ws.send(
-                        JSON.stringify({
-                          type: "tmux_session_created",
-                          sessionName: confirmed,
-                        }),
-                      );
-                      runPostShellCommands(0);
-                    } else {
-                      sshLogger.info(
-                        "Multiple tmux sessions found, sending list to frontend",
-                        {
-                          operation: "tmux_sessions_available",
-                          sessions: detection.sessions,
-                          hostId: id,
-                        },
-                      );
-                      ws.send(
-                        JSON.stringify({
-                          type: "tmux_sessions_available",
-                          sessions: detection.sessions,
-                        }),
-                      );
-                      // Commands deferred until user picks a session
-                    }
-                  } catch (error) {
-                    sshLogger.error("tmux detection failed", error, {
-                      operation: "tmux_detection_error",
-                      hostId: id,
-                    });
-                    // Fallback: run commands in plain shell
-                    runPostShellCommands(0);
-                  }
-                })();
-              } else {
-                // No tmux -- run commands directly as before
-                runPostShellCommands(0);
-              }
-
-              ws.send(
-                JSON.stringify({ type: "connected", message: "SSH connected" }),
-              );
-
-              if (id && hostConfig.userId) {
-                try {
-                  ctx.events.emit("host.login", {
-                    hostId: id,
-                    userId: hostConfig.userId,
-                    sshUser: username,
-                    fromIp: connection.clientIp,
-                  });
-                } catch (error) {
-                  sshLogger.warn("Failed to dispatch login event", {
-                    operation: "login_event_dispatch_error",
-                    hostId: id,
-                    error: getErrorMessage(error),
-                  });
-                }
-
-                const hostName =
-                  resolvedHostData?.userId === hostConfig.userId &&
-                  typeof resolvedHostData?.name === "string" &&
-                  resolvedHostData.name
-                    ? resolvedHostData.name
-                    : `${username}@${ip}:${port}`;
-                ctx.hosts
-                  .recordActivity(id, "terminal", hostName)
-                  .catch((error) => {
-                    sshLogger.warn("Failed to log terminal activity", {
-                      operation: "activity_log_error",
-                      userId: hostConfig.userId,
-                      hostId: id,
-                      error: getErrorMessage(error),
-                    });
-                  });
-              }
-            }),
-          );
-        }),
-      );
-
-      sshConn.on(
-        "error",
-        bind((err: Error) => {
-          clearTimeout(connectionTimeout);
-
-          sendLog("error", "error", `Connection error: ${err.message}`);
-
-          sshLogger.error("SSH connection error", err, {
-            operation: "ssh_connect",
-            hostId: id,
-            ip,
-            port,
-            username,
-            authType: resolvedCredentials.authType,
-            browserSignInId,
-            isKeyboardInteractive,
-            hasKeyboardInteractiveFinish: !!keyboardInteractiveFinish,
-            keyboardInteractiveResponded,
-          });
-
-          // The provider decides what an auth failure means: clear a cached
-          // certificate and ask for a new sign-in, retry once, or give up with
-          // its own message.
-          const authFollowUp = prepared?.onAuthFailed
-            ? prepared.onAuthFailed({
-                error: err,
-                retries: authRetries,
-                canRetry: !connectConfig.sock && !bannerHoldPending,
-                methodNotAvailable: authMethodNotAvailable,
-              })
-            : undefined;
-
-          if (authFollowUp?.status === "interaction-required") {
-            if (currentSessionId) {
-              sessionManager.destroySession(currentSessionId);
-              currentSessionId = null;
-            }
-            cleanupAuthState(connectionTimeout);
-            sendLog("auth", "error", authFollowUp.message);
-            ws.send(
-              JSON.stringify({
-                type: `${authFollowUp.interaction}_auth_required`,
-                hostId: id,
-                message: authFollowUp.message,
-              }),
-            );
-            return;
-          }
-
-          if (
-            err.message.includes("Cannot parse privateKey") &&
-            err.message.includes("no passphrase")
-          ) {
-            sendLog(
-              "auth",
-              "error",
-              "SSH key is encrypted but no passphrase was provided",
-            );
-            isAwaitingAuthCredentials = true;
-            if (currentSessionId) {
-              sessionManager.destroySession(currentSessionId);
-              currentSessionId = null;
-            }
-            cleanupAuthState(connectionTimeout);
-            ws.send(
-              JSON.stringify({
-                type: "passphrase_required",
-                message:
-                  "The SSH key is encrypted. Please enter the passphrase to unlock it.",
-              }),
-            );
-            return;
-          }
-
-          if (authFollowUp?.status === "retry") {
-            authRetries++;
-            sendLog("auth", "info", authFollowUp.message);
-            sshLogger.info("Retrying SSH auth with provider changes", {
-              operation: "ssh_auth_retry",
-              hostId: id,
-              userId,
-            });
-
-            clearTimeout(connectionTimeout);
-            connectionTimeout = setTimeout(
-              onConnectionTimeout,
-              (connectConfig.readyTimeout as number | undefined) ?? 120000,
-            );
-
-            Object.assign(connectConfig, authFollowUp.patch);
-
-            // ssh2's connect() ends an open socket and reconnects on close, keeping
-            // every listener attached, so the same client can be reused here.
-            isAuthRetrying = true;
-            sshConn.connect(connectConfig);
-            return;
-          }
-
-          if (authFollowUp?.status === "error") {
-            sendLog("auth", "error", authFollowUp.message);
-            if (currentSessionId) {
-              sessionManager.destroySession(currentSessionId);
-              currentSessionId = null;
-            }
-            cleanupAuthState(connectionTimeout);
-            ws.send(
-              JSON.stringify({ type: "error", message: authFollowUp.message }),
-            );
-            return;
-          }
-
-          if (
-            authMethodNotAvailable &&
-            resolvedCredentials.authType === "none" &&
-            !isKeyboardInteractive
-          ) {
-            sendLog(
-              "auth",
-              "error",
-              "Server does not support keyboard-interactive authentication",
-            );
-            isAwaitingAuthCredentials = true;
-            if (currentSessionId) {
-              sessionManager.destroySession(currentSessionId);
-              currentSessionId = null;
-            }
-            cleanupAuthState(connectionTimeout);
-            ws.send(
-              JSON.stringify({
-                type: "auth_method_not_available",
-                message:
-                  "The server does not support keyboard-interactive authentication. Please provide credentials.",
-              }),
-            );
-            return;
-          }
-
-          if (
-            resolvedCredentials.authType === "none" &&
-            err.message.includes(
-              "All configured authentication methods failed",
-            ) &&
-            !isKeyboardInteractive &&
-            !keyboardInteractiveResponded
-          ) {
-            isAwaitingAuthCredentials = true;
-            if (currentSessionId) {
-              sessionManager.destroySession(currentSessionId);
-              currentSessionId = null;
-            }
-            cleanupAuthState(connectionTimeout);
-            ws.send(
-              JSON.stringify({
-                type: "auth_method_not_available",
-                message:
-                  "The server does not support keyboard-interactive authentication. Please provide credentials.",
-              }),
-            );
-            return;
-          }
-
-          if (
-            isKeyboardInteractive &&
-            keyboardInteractiveFinish &&
-            err.message.includes("All configured authentication methods failed")
-          ) {
-            sshLogger.warn(
-              "Authentication error during keyboard-interactive - SKIPPING cleanup, waiting for user response",
-              {
-                operation: "ssh_error_during_keyboard_interactive_skip_cleanup",
-                hostId: id,
-                error: err.message,
-              },
-            );
-            resetConnectionState();
-            return;
-          }
-
-          sshLogger.error("Proceeding with cleanup after error", {
-            operation: "ssh_error_cleanup",
-            hostId: id,
-            error: err.message,
-          });
-
-          if (
-            err.message.includes("authentication") ||
-            err.message.includes("Authentication")
-          ) {
-            authLogger.error("SSH authentication failed", err, {
-              operation: "terminal_ssh_auth_failed",
-              sessionId,
-              userId,
-              hostId: id,
-              authType: resolvedCredentials.authType,
-            });
-            sendLog("auth", "error", `Authentication failed: ${err.message}`);
-          } else {
-            sendLog("error", "error", `Connection failed: ${err.message}`);
-          }
-
-          let errorMessage = "SSH error: " + err.message;
-          if (err.message.includes("No matching key exchange algorithm")) {
-            errorMessage =
-              "SSH error: No compatible key exchange algorithm found. This may be due to an older SSH server or network device.";
-          } else if (err.message.includes("No matching cipher")) {
-            errorMessage =
-              "SSH error: No compatible cipher found. This may be due to an older SSH server or network device.";
-          } else if (err.message.includes("No matching MAC")) {
-            errorMessage =
-              "SSH error: No compatible MAC algorithm found. This may be due to an older SSH server or network device.";
-          } else if (
-            err.message.includes("ENOTFOUND") ||
-            err.message.includes("ENOENT")
-          ) {
-            errorMessage =
-              "SSH error: Could not resolve hostname or connect to server.";
-          } else if (err.message.includes("ECONNREFUSED")) {
-            errorMessage =
-              "SSH error: Connection refused. The server may not be running or the port may be incorrect.";
-          } else if (err.message.includes("ENETUNREACH")) {
-            const isIPv6 = ip && ip.includes(":");
-            errorMessage = isIPv6
-              ? "SSH error: Network unreachable. IPv6 may not be available in this environment. If running in Docker, enable IPv6 in the Docker daemon and network configuration."
-              : "SSH error: Network unreachable. Check your network configuration and routing.";
-          } else if (err.message.includes("ETIMEDOUT")) {
-            errorMessage =
-              "SSH error: Connection timed out. Check your network connection and server availability.";
-          } else if (
-            err.message.includes("ECONNRESET") ||
-            err.message.includes("EPIPE")
-          ) {
-            errorMessage =
-              "SSH error: Connection was reset. This may be due to network issues or server timeout.";
-          } else if (
-            err.message.includes("authentication failed") ||
-            err.message.includes("Permission denied")
-          ) {
-            errorMessage =
-              "SSH error: Authentication failed. Please check your username and password/key.";
-          }
-
-          ws.send(JSON.stringify({ type: "error", message: errorMessage }));
-          if (currentSessionId) {
-            sessionManager.destroySession(currentSessionId);
-            currentSessionId = null;
-          }
-          cleanupAuthState(connectionTimeout);
-        }),
-      );
-
-      sshConn.on(
-        "close",
-        bind(() => {
-          // The +password retry ends the socket before reconnecting; that close is
-          // part of the retry, not a disconnect.
-          if (isAuthRetrying) {
-            return;
-          }
-
-          clearOnlineStatus?.();
-          clearOnlineStatus = null;
-
-          clearTimeout(connectionTimeout);
-          sshLogger.info("SSH connection closed", {
-            operation: "terminal_ssh_disconnected",
-            sessionId,
-            userId,
-            hostId: id,
-          });
-
-          if (isDuplicateConnDiscarded) {
-            cleanupAuthState(connectionTimeout);
-            return;
-          }
-
-          if (isAwaitingAuthCredentials) {
-            if (currentSessionId) {
-              sessionManager.destroySession(currentSessionId);
-              currentSessionId = null;
-            }
-            cleanupAuthState(connectionTimeout);
-            return;
-          }
-
-          if (isShellInitializing || (isConnected && !sshStream)) {
-            sshLogger.warn(
-              "SSH connection closed during shell initialization",
-              {
-                operation: "ssh_close_during_init",
-                hostId: id,
-                ip,
-                port,
-                username,
-                isShellInitializing,
-                hasStream: !!sshStream,
-              },
-            );
-            if (ws.readyState === WebSocket.OPEN) {
-              ws.send(
-                JSON.stringify({
-                  type: "error",
-                  message:
-                    "Connection closed during shell initialization. The server may have rejected the shell request.",
-                }),
-              );
-            }
-          } else {
-            if (ws.readyState === WebSocket.OPEN) {
-              ws.send(
-                JSON.stringify({
-                  type: "disconnected",
-                  message: "Connection closed",
-                }),
-              );
-            }
-          }
-          if (currentSessionId) {
-            sessionManager.destroySession(currentSessionId);
-            currentSessionId = null;
-          }
-          cleanupAuthState(connectionTimeout);
-        }),
-      );
-
-      const sshAuthManager = new SSHAuthManager({
-        ssh: ctx.ssh,
-        log: sshLogger,
-        userId,
-        ws,
-        hostId: id || 0,
-        isKeyboardInteractive,
-        keyboardInteractiveResponded,
-        keyboardInteractiveFinish,
-        totpPromptSent,
-        browserSignInId,
-        totpTimeout,
-        browserSignInTimeout,
-        totpAttempts: 0,
-      });
-
-      sshConn.on(
-        "keyboard-interactive",
-        bind(
-          (
-            name: string,
-            instructions: string,
-            instructionsLang: string,
-            prompts: Array<{ prompt: string; echo: boolean }>,
-            finish: (responses: string[]) => void,
-          ) => {
-            if (connectionTimeout) {
-              clearTimeout(connectionTimeout);
-            }
-
-            sshAuthManager.handleKeyboardInteractive(
-              name,
-              instructions,
-              instructionsLang,
-              prompts,
-              finish,
-              resolvedCredentials as unknown as Parameters<
-                typeof sshAuthManager.handleKeyboardInteractive
-              >[5],
-              // The resolved host carries the plugin host settings that
-              // keyboard-interactive handlers read.
-              connectTarget ?? hostConfig,
-            );
-
-            isKeyboardInteractive =
-              sshAuthManager.context.isKeyboardInteractive;
-            keyboardInteractiveResponded =
-              sshAuthManager.context.keyboardInteractiveResponded;
-            keyboardInteractiveFinish =
-              sshAuthManager.context.keyboardInteractiveFinish;
-            totpPromptSent = sshAuthManager.context.totpPromptSent;
-            browserSignInId = sshAuthManager.context.browserSignInId;
-            totpTimeout = sshAuthManager.context.totpTimeout;
-            browserSignInTimeout = sshAuthManager.context.browserSignInTimeout;
-          },
-        ),
-      );
-
-      const effectiveAuthType =
-        resolvedCredentials.authType ||
-        (resolvedCredentials.key
-          ? "key"
-          : resolvedCredentials.password
-            ? "password"
-            : undefined);
-      if (!effectiveAuthType) {
-        sshLogger.error("No valid authentication method provided");
-        ws.send(
-          JSON.stringify({
-            type: "error",
-            message: "No valid authentication method provided",
-          }),
-        );
-        return;
-      }
-
-      connectTarget = {
-        ...(resolvedHostData ?? {}),
-        id: serverHostId ?? id,
-        ip,
-        port,
-        username,
-        userId: hostConfig.userId,
-        authType: effectiveAuthType,
-        password: resolvedCredentials.password,
-        key: resolvedCredentials.key,
-        keyPassword: resolvedCredentials.keyPassword,
-        keyType: resolvedCredentials.keyType,
-        certPublicKey: resolvedCredentials.certPublicKey,
-        forceKeyboardInteractive: hostConfig.forceKeyboardInteractive,
-        sshOptions: hostConfig.sshOptions,
-        jumpHosts: hostConfig.jumpHosts,
-        useSocks5: hostConfig.useSocks5,
-        socks5Host: hostConfig.socks5Host,
-        socks5Port: hostConfig.socks5Port,
-        socks5Username: hostConfig.socks5Username,
-        socks5Password: hostConfig.socks5Password,
-        socks5ProxyChain: hostConfig.socks5ProxyChain,
-        portKnockSequence: hostConfig.portKnockSequence,
-      } as PluginSshHost;
-
-      const built = await ctx.ssh.prepare(connectTarget, {
-        purpose: "terminal",
-        profile: "terminal",
-        client: sshConn,
-        serverHostId: serverHostId ?? undefined,
-        hostKeySocket: ws,
-        interactive: true,
-        log: (level, message) => sendLog("auth", level, message),
-      });
-      const connectConfig = built.config;
-      // DNS was resolved above, and skipped when jump hosts do it instead.
-      connectConfig.host = connectHost;
-      prepared = built;
-
-      if (built.outcome.status !== "ready") {
-        const outcome = built.outcome;
-        if (outcome.status === "interaction-required") {
-          ws.send(
-            JSON.stringify({
-              type: `${outcome.interaction}_auth_required`,
-              hostId: id,
-            }),
-          );
-          return;
-        }
-        if (
-          outcome.status === "error" &&
-          outcome.code === "passphrase-required"
-        ) {
-          sendLog(
-            "auth",
-            "error",
-            "SSH key is encrypted but no passphrase was provided",
-          );
-          isAwaitingAuthCredentials = true;
-          cleanupAuthState(connectionTimeout);
-          ws.send(
-            JSON.stringify({
-              type: "passphrase_required",
-              message: outcome.message,
-            }),
-          );
-          return;
-        }
-        sshLogger.error("SSH auth could not be prepared", {
-          operation: "terminal_auth_prepare",
-          hostId: id,
-          authType: effectiveAuthType,
-          error: outcome.message,
-        });
-        sendLog("auth", "error", outcome.message);
-        ws.send(JSON.stringify({ type: "error", message: outcome.message }));
-        return;
-      }
-
-      if (hostConfig.sshOptions?.agentForwarding) {
-        if (connectConfig.privateKey) {
-          try {
-            const parsed = ssh2Utils.parseKey(
-              connectConfig.privateKey as Buffer,
-              connectConfig.passphrase as string | undefined,
-            );
-            if (parsed && !(parsed instanceof Error)) {
-              connectConfig.agent = new MemoryAgent(parsed);
-              connectConfig.agentForward = true;
-              sendLog("auth", "info", "SSH agent forwarding enabled");
-            }
-          } catch {
-            sshLogger.warn("Failed to set up agent forwarding", {
-              operation: "agent_forward_setup",
-              hostId: id,
-            });
-          }
-        } else if (connectConfig.agent) {
-          connectConfig.agentForward = true;
-          sendLog(
-            "auth",
-            "info",
-            "SSH agent forwarding enabled (external agent)",
-          );
-        }
-      }
-
-      const proxyChain = Array.isArray(connectTarget.socks5ProxyChain)
-        ? connectTarget.socks5ProxyChain
-        : [];
-      const viaProxy =
-        !!connectTarget.useSocks5 &&
-        (!!connectTarget.socks5Host || proxyChain.length > 0);
-
-      // A jump host asking for TOTP or input uses the same messages as the
-      // target host, answered through totp_response / password_response.
-      const jumpHostPrompt: PluginSshPromptChannel = {
-        ask: (request) =>
-          new Promise((resolve) => {
-            if (
-              (request.kind !== "totp" && request.kind !== "input") ||
-              ws.readyState !== WebSocket.OPEN
-            ) {
-              resolve(null);
-              return;
-            }
-            if (totpTimeout) clearTimeout(totpTimeout);
-            totpTimeout = setTimeout(() => {
-              keyboardInteractiveFinish = null;
-              totpPromptSent = false;
-              resolve(null);
-            }, 180000);
-            keyboardInteractiveFinish = (answers) =>
-              resolve((answers[0] ?? "").trim());
-            if (request.kind === "totp") {
-              totpPromptSent = true;
-              sendLog("auth", "info", "Jump host TOTP verification required");
-              ws.send(
-                JSON.stringify(
-                  request.retry
-                    ? { type: "totp_retry" }
-                    : { type: "totp_required", prompt: request.prompt },
-                ),
-              );
-            } else {
-              ws.send(
-                JSON.stringify({
-                  type: "password_required",
-                  prompt: request.prompt,
-                  echo: request.echo,
-                }),
-              );
-            }
-          }),
-      };
-
-      let transport: Awaited<ReturnType<typeof ctx.ssh.openTransport>>;
-      try {
-        transport = await ctx.ssh.openTransport(connectTarget, connectConfig, {
-          // Resolved above, or deliberately left to the jump host.
-          resolveDns: false,
-          log: (level, message) => sendLog("handshake", level, message),
-          prompt: jumpHostPrompt,
-        });
-      } catch (error) {
-        sshLogger.error("SSH transport failed", error, {
-          operation: "ssh_transport",
-          hostId: id,
-          ip,
-          port,
-        });
-        ws.send(
-          JSON.stringify({
-            type: "error",
-            message:
-              error instanceof Error && error.name === "JumpHostChainError"
-                ? `Failed to connect through jump hosts: ${error.message}`
-                : getErrorMessage(error),
-          }),
-        );
-        if (currentSessionId) {
-          sessionManager.destroySession(currentSessionId);
-          currentSessionId = null;
-        }
-        cleanupAuthState(connectionTimeout);
-        return;
-      }
-      lastJumpClient = transport.jumpClient as SSHClientType | null;
-
-      sendLog(
-        "handshake",
-        "info",
-        transport.via === "jump"
-          ? "Starting SSH session through jump host" +
-              (viaProxy ? " (via proxy)" : "")
-          : transport.via === "proxy"
-            ? "Starting SSH session (via proxy)"
-            : "Starting SSH session",
-      );
-      sendLog("auth", "info", `Authenticating as ${username}`);
-      sshLogger.info("Initiating SSH connection", {
-        operation: "terminal_ssh_connect_attempt",
-        sessionId,
-        userId,
-        hostId: id,
-        ip,
-        port,
-        username,
-        authType: resolvedCredentials.authType,
-        via: transport.via,
-      });
-      sshConn.connect(connectConfig);
-    }
-
-    function handleResize(data: ResizeData) {
-      const cols = toTerminalDimension(data?.cols);
-      const rows = toTerminalDimension(data?.rows);
-      if (!cols || !rows) return;
-
-      const resizeStream =
-        sessionManager.getSession(currentSessionId)?.sshStream ?? sshStream;
-      if (resizeStream && resizeStream.setWindow) {
-        resizeStream.setWindow(rows, cols, rows, cols);
-        const session = sessionManager.getSession(currentSessionId);
-        if (session) {
-          sessionManager.resizeSession(session.id, cols, rows);
-        }
-      }
-    }
-
-    function cleanupAuthState(timeoutId?: NodeJS.Timeout) {
-      if (timeoutId) {
-        clearTimeout(timeoutId);
-      }
-
-      if (totpTimeout) {
-        clearTimeout(totpTimeout);
-        totpTimeout = null;
-      }
-
-      if (browserSignInTimeout) {
-        clearTimeout(browserSignInTimeout);
-        browserSignInTimeout = null;
-      }
-
-      sshStream = null;
-      sshConn = null;
-      lastJumpClient = null;
-
-      resetConnectionState();
-      isCleaningUp = false;
-      isAwaitingAuthCredentials = false;
-    }
-
-    // Note: PTY-level keepalive (writing \x00 to the stream) was removed.
-    // It was causing ^@ characters to appear in terminals with echoctl enabled.
-    // SSH-level keepalive is configured via connectConfig (keepaliveInterval,
-    // keepaliveCountMax, tcpKeepAlive), which handles connection health monitoring
-    // without producing visible output on the terminal.
-    //
-    // See: https://github.com/Termix-SSH/Support/issues/232
-    // See: https://github.com/Termix-SSH/Support/issues/309
-  }
-
-  return { handleConnection, closeAll };
-}
diff --git a/plugins/ssh-terminal/src/frontend/TerminalTabWithRegistry.tsx b/plugins/ssh-terminal/src/frontend/TerminalTabWithRegistry.tsx
deleted file mode 100644
index dc84d6bfe..000000000
--- a/plugins/ssh-terminal/src/frontend/TerminalTabWithRegistry.tsx
+++ /dev/null
@@ -1,65 +0,0 @@
-import { useEffect, useRef } from "react";
-import type { TabProps } from "@termix/plugin-sdk/frontend";
-import { TerminalTabContent } from "./terminal/TerminalTabContent";
-import type { TerminalHandle } from "./terminal/terminal-types";
-import { registerSession, setActiveSession } from "./session-registry";
-
-/**
- * Registers the tab's terminal handle in the session registry, so
- * terminal.sendToActive/sendToSession (used by the snippets plugin, among
- * others) can reach a live session.
- */
-export function TerminalTabWithRegistry(props: TabProps) {
-  const tabRecord = props.tab as { id: string };
-  const handle = props.handleRef as { current: TerminalHandle | null } | null;
-  const host = props.host as
-    | {
-        id: string;
-        name?: string;
-        ip?: string;
-        username?: string;
-        port?: number;
-      }
-    | undefined;
-  const registeredRef = useRef<(() => void) | null>(null);
-
-  useEffect(() => {
-    let cancelled = false;
-    let attempts = 0;
-
-    const tryRegister = () => {
-      if (cancelled || registeredRef.current) return;
-      const ref = handle?.current;
-      if (!ref) {
-        if (attempts++ < 40) setTimeout(tryRegister, 250);
-        return;
-      }
-      registeredRef.current = registerSession(
-        {
-          id: tabRecord.id,
-          hostId: host ? Number(host.id) || null : null,
-          hostName: host?.name,
-          label: props.label,
-          ip: host?.ip,
-          username: host?.username,
-          port: host?.port,
-        },
-        ref,
-      );
-    };
-    tryRegister();
-
-    return () => {
-      cancelled = true;
-      registeredRef.current?.();
-      registeredRef.current = null;
-    };
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [tabRecord.id]);
-
-  useEffect(() => {
-    if (props.isFocusedPane) setActiveSession(tabRecord.id);
-  }, [props.isFocusedPane, tabRecord.id]);
-
-  return <TerminalTabContent {...props} />;
-}
diff --git a/plugins/ssh-terminal/src/frontend/TerminalView.tsx b/plugins/ssh-terminal/src/frontend/TerminalView.tsx
deleted file mode 100644
index 5551c305b..000000000
--- a/plugins/ssh-terminal/src/frontend/TerminalView.tsx
+++ /dev/null
@@ -1,38 +0,0 @@
-import { Suspense, lazy, type Ref } from "react";
-import type { TerminalHandle } from "./terminal/terminal-types";
-
-const CommandHistoryProvider = lazy(() =>
-  import("./terminal/command-history/CommandHistoryContext").then((m) => ({
-    default: m.CommandHistoryProvider,
-  })),
-);
-const Terminal = lazy(() =>
-  import("./terminal/Terminal").then((m) => ({ default: m.Terminal })),
-);
-
-/**
- * The terminal as other code embeds it, registered as "terminal.view".
- *
- * Props are the terminal's own (hostConfig, isVisible, title, splitScreen,
- * executeCommand and the rest), plus `handleRef` for the TerminalHandle
- * (connect, disconnect, sendInput, fit), since a registered component cannot
- * take a React ref across the plugin boundary.
- */
-export function TerminalView({
-  handleRef,
-  ...props
-}: {
-  handleRef?: Ref<TerminalHandle>;
-  [prop: string]: unknown;
-}) {
-  return (
-    <Suspense fallback={null}>
-      <CommandHistoryProvider>
-        <Terminal
-          ref={handleRef}
-          {...(props as unknown as React.ComponentProps<typeof Terminal>)}
-        />
-      </CommandHistoryProvider>
-    </Suspense>
-  );
-}
diff --git a/plugins/ssh-terminal/src/frontend/history/HistoryPanel.tsx b/plugins/ssh-terminal/src/frontend/history/HistoryPanel.tsx
deleted file mode 100644
index c2b62320e..000000000
--- a/plugins/ssh-terminal/src/frontend/history/HistoryPanel.tsx
+++ /dev/null
@@ -1,167 +0,0 @@
-import { useState, useEffect } from "react";
-import { Copy, Search, Terminal, Trash2 } from "lucide-react";
-import { copyToClipboard, Button, Input } from "@termix/plugin-sdk/ui";
-import {
-  usePluginApi,
-  useTranslation,
-  type PanelProps,
-} from "@termix/plugin-sdk/frontend";
-import {
-  clearCommandHistory,
-  deleteCommandFromHistory,
-  getCommandHistory,
-  hostSetting,
-} from "../terminal-api";
-
-/** Command history for the terminal the user is working in. */
-export function HistoryPanel({ targetTab }: PanelProps) {
-  const { t } = useTranslation();
-  const api = usePluginApi();
-  const [search, setSearch] = useState("");
-  const [commands, setCommands] = useState<string[]>([]);
-
-  const activeTab = targetTab;
-  const activeIsTerminal = !!activeTab;
-  const hostId = activeTab?.host?.id ? parseInt(activeTab.host.id, 10) : null;
-  const trackingEnabled = hostSetting(
-    activeTab?.host,
-    "enableCommandHistory",
-    true,
-  );
-
-  useEffect(() => {
-    if (!hostId || !trackingEnabled) {
-      setCommands([]);
-      return;
-    }
-    getCommandHistory(api, hostId)
-      .then(setCommands)
-      .catch(() => setCommands([]));
-  }, [api, hostId, trackingEnabled]);
-
-  if (activeIsTerminal && !trackingEnabled) {
-    return (
-      <div className="flex flex-col items-center justify-center flex-1 gap-3 p-6 text-center">
-        <div className="size-10 rounded-full bg-muted/40 flex items-center justify-center">
-          <Terminal className="size-5 text-muted-foreground/30" />
-        </div>
-        <div className="flex flex-col gap-1">
-          <span className="text-sm font-semibold text-muted-foreground/60">
-            {t("history.trackingDisabled")}
-          </span>
-          <span className="text-xs text-muted-foreground/40">
-            {t("history.trackingDisabledHint")}
-          </span>
-        </div>
-      </div>
-    );
-  }
-
-  if (!activeIsTerminal) {
-    return (
-      <div className="flex flex-col items-center justify-center flex-1 gap-3 p-6 text-center">
-        <div className="size-10 rounded-full bg-muted/40 flex items-center justify-center">
-          <Terminal className="size-5 text-muted-foreground/30" />
-        </div>
-        <div className="flex flex-col gap-1">
-          <span className="text-sm font-semibold text-muted-foreground/60">
-            {t("history.noTerminalSelected")}
-          </span>
-          <span className="text-xs text-muted-foreground/40">
-            {t("history.noTerminalSelectedHint")}
-          </span>
-        </div>
-      </div>
-    );
-  }
-
-  const filtered = search
-    ? commands.filter((c) => c.toLowerCase().includes(search.toLowerCase()))
-    : commands;
-
-  async function handleDelete(cmd: string) {
-    if (!hostId) return;
-    try {
-      await deleteCommandFromHistory(api, hostId, cmd);
-      setCommands((prev) => prev.filter((c) => c !== cmd));
-    } catch {
-      /* ignore */
-    }
-  }
-
-  return (
-    <div className="flex flex-col gap-3 p-3">
-      <div className="flex items-center gap-1.5 px-2.5 py-1.5 bg-muted/30 border border-border/60">
-        <Terminal className="size-3 shrink-0 text-accent-brand" />
-        <span className="text-xs font-medium truncate text-foreground">
-          {activeTab.label}
-        </span>
-      </div>
-      <div className="relative">
-        <Search className="absolute left-2.5 top-1/2 -translate-y-1/2 size-3.5 text-muted-foreground" />
-        <Input
-          placeholder={t("history.searchPlaceholder")}
-          value={search}
-          onChange={(e) => setSearch(e.target.value)}
-          className="pl-8"
-        />
-      </div>
-      <div className="flex items-center justify-between">
-        <span className="text-xs text-muted-foreground">
-          {t("history.commandCount", { count: filtered.length })}
-        </span>
-        <button
-          onClick={async () => {
-            if (!hostId) return;
-            try {
-              await clearCommandHistory(api, hostId);
-            } catch {
-              /* ignore */
-            }
-            setCommands([]);
-          }}
-          className="text-xs text-accent-brand hover:text-accent-brand/70"
-        >
-          {t("history.clearAll")}
-        </button>
-      </div>
-      <div className="flex flex-col gap-1">
-        {filtered.length === 0 && (
-          <span className="text-xs text-muted-foreground/60 text-center py-8">
-            {t("history.noHistoryEntries")}
-          </span>
-        )}
-        {filtered.map((cmd, i) => (
-          <div
-            key={i}
-            className="group flex flex-col gap-1 px-2.5 py-2 border border-border bg-background hover:border-muted-foreground/30 transition-colors"
-          >
-            <div className="flex items-start justify-between gap-2">
-              <span className="text-xs font-mono text-foreground break-all leading-relaxed">
-                {cmd}
-              </span>
-              <div className="flex items-center gap-0.5 shrink-0 md:opacity-0 group-hover:opacity-100 transition-opacity">
-                <Button
-                  variant="ghost"
-                  size="icon"
-                  className="size-6 text-muted-foreground hover:text-foreground"
-                  onClick={() => copyToClipboard(cmd)}
-                >
-                  <Copy className="size-3" />
-                </Button>
-                <Button
-                  variant="ghost"
-                  size="icon"
-                  className="size-6 text-muted-foreground hover:text-destructive"
-                  onClick={() => handleDelete(cmd)}
-                >
-                  <Trash2 className="size-3" />
-                </Button>
-              </div>
-            </div>
-          </div>
-        ))}
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/ssh-terminal/src/frontend/index.tsx b/plugins/ssh-terminal/src/frontend/index.tsx
deleted file mode 100644
index 93a72dcb8..000000000
--- a/plugins/ssh-terminal/src/frontend/index.tsx
+++ /dev/null
@@ -1,345 +0,0 @@
-// The terminal surfaces need xterm's own stylesheet.
-import "@xterm/xterm/css/xterm.css";
-import { lazy, Suspense, type ComponentType } from "react";
-import {
-  Braces,
-  Copy,
-  Hammer,
-  History,
-  Laptop,
-  SquareTerminal,
-  Terminal,
-} from "lucide-react";
-import type {
-  PanelProps,
-  PluginHostRecord,
-  PluginTabRecord,
-  StandaloneViewProps,
-  TabProps,
-  TermixApp,
-} from "@termix/plugin-sdk/frontend";
-import { isElectron } from "@termix/plugin-sdk/ui";
-import { loadTerminal } from "./terminal/TerminalTabContent";
-import TerminalApp from "./terminal/TerminalApp";
-import {
-  TERMINAL_OVERLAY_SLOT,
-  TERMINAL_SIDE_PANEL_SLOT,
-  TERMINAL_TOOLBAR_SLOT,
-  TERMINAL_TOOLBAR_STATUS_SLOT,
-} from "./terminal/terminal-slots";
-import { TerminalTabWithRegistry } from "./TerminalTabWithRegistry";
-import { listSessions, sendToActive, sendToSession } from "./session-registry";
-import { TerminalView } from "./TerminalView";
-import { HistoryPanel } from "./history/HistoryPanel";
-import { TouchInputSettings } from "./settings/TouchInputSettings";
-import { ImageStorageTest } from "./settings/ImageStorageTest";
-import { HostTerminalSection } from "./settings/HostTerminalSection";
-import { resetTouchInputSettingsCache } from "./terminal/touch-input-settings-store";
-import { hostSetting } from "./terminal-api";
-import { SshToolsPanel } from "./ssh-tools/SshToolsPanel";
-import { MacrosPanel } from "./macros/MacrosPanel";
-import {
-  TERMINAL_KEYBINDING_DEFAULTS,
-  validateSendControlCode,
-  validateSendText,
-} from "./lib/keybinding-dispatch";
-import {
-  PasteNote,
-  SendControlCodeEditor,
-  SendTextEditor,
-} from "./lib/keybinding-editors";
-import { TerminalPreview } from "./look/TerminalPreview";
-import { installTerminalGlobalStyles } from "./look/terminal-global-styles";
-import {
-  listTerminalThemes,
-  resolveTerminalLook,
-  type ResolveLookRequest,
-} from "./look/look-actions";
-import {
-  invalidateTerminalClientSettings,
-  resetTerminalClientSettings,
-} from "./terminal-settings";
-import { moveLocalTerminalPreferences } from "./settings/local-preferences-migration";
-
-const LocalTerminal = lazy(() =>
-  import("./local-terminal/LocalTerminal").then((m) => ({
-    default: m.LocalTerminal,
-  })),
-);
-
-interface TerminalOpenOptions {
-  path?: string;
-  joinSharedSessionId?: string;
-  joinShareId?: string;
-  label?: string;
-}
-
-/** `?view=terminal` full-screen links. */
-function TerminalStandalone({ hostId, params }: StandaloneViewProps) {
-  return (
-    <TerminalApp
-      hostId={hostId}
-      tmuxSession={params.get("tmuxSession") ?? undefined}
-    />
-  );
-}
-
-/** The desktop app's own shell, one tab per open. */
-function LocalTerminalTab({ tab, isVisible }: TabProps) {
-  return (
-    <Suspense fallback={null}>
-      <LocalTerminal
-        instanceId={(tab.instanceId as string | undefined) ?? tab.id}
-        isVisible={isVisible}
-      />
-    </Suspense>
-  );
-}
-
-/**
- * The SSH terminal: its tab, the desktop app's local terminal, the command
- * history panel and the places other plugins can plug into a session.
- */
-export function activate(app: TermixApp): void {
-  app.onDispose(installTerminalGlobalStyles());
-  app.registerTab(
-    "terminal",
-    TerminalTabWithRegistry as unknown as ComponentType<TabProps>,
-    {
-      icon: Terminal,
-      titleKey: "nav.terminal",
-      persistent: true,
-      session: true,
-      commandTarget: true,
-      ownBackground: true,
-      restore: (host) => !!host.enableSsh,
-      activityTypes: ["terminal"],
-      standalone: TerminalStandalone,
-      preload: loadTerminal,
-    },
-  );
-
-  app.registerAction(
-    "terminal.duplicateTab",
-    ((_handle: unknown, tab?: PluginTabRecord) => {
-      if (tab?.type === "terminal" && tab.host) {
-        app.tabs.openTab(tab.host, "terminal", { forceNewTab: true });
-      }
-    }) as never,
-    { permission: "use" },
-  );
-  app.registerSlotContribution("tab.menu", {
-    actionId: "terminal.duplicateTab",
-    titleKey: "terminal.duplicateTab",
-    icon: Copy,
-    kind: "button",
-    when: ({ tab }) => {
-      const target = tab as PluginTabRecord | undefined;
-      return target?.type === "terminal" && !!target.host;
-    },
-  });
-
-  app.registerHostAction({
-    id: "terminal",
-    titleKey: "nav.terminal",
-    icon: Terminal,
-    kind: "connect",
-    priority: 100,
-    order: 10,
-    tabType: "terminal",
-    copyUrlView: "terminal",
-    when: (host) =>
-      !!host.enableSsh && hostSetting(host, "enableTerminal", true),
-  });
-
-  app.registerHostEditorSection({
-    id: "terminal",
-    group: "ssh",
-    titleKey: "hosts.tabTerminal",
-    icon: SquareTerminal,
-    order: 10,
-    defaults: true,
-    component: HostTerminalSection,
-  });
-
-  if (isElectron()) {
-    app.registerTab("local-terminal", LocalTerminalTab, {
-      icon: Laptop,
-      titleKey: "nav.localTerminal",
-      hostless: true,
-      session: true,
-      ownBackground: true,
-      multiInstance: true,
-      inLayouts: false,
-    });
-    app.registerRailItem({
-      id: "local-terminal",
-      icon: Laptop,
-      titleKey: "nav.localTerminal",
-      kind: "tab",
-      electronOnly: true,
-      hideable: true,
-      separatorAfter: true,
-    });
-    app.registerPaletteEntry({
-      id: "local-terminal",
-      titleKey: "palette.localTerminal",
-      icon: Laptop,
-      keywords: ["local", "shell", "terminal"],
-      scope: "global",
-      run: (shell) => shell.openSingletonTab("local-terminal"),
-    });
-  }
-
-  app.registerPanel(
-    "history",
-    HistoryPanel as unknown as ComponentType<PanelProps>,
-  );
-  app.registerRailItem({
-    id: "history",
-    icon: History,
-    titleKey: "nav.history",
-    hideable: true,
-    promotable: true,
-    rightDockable: true,
-    separatorAfter: true,
-  });
-
-  app.registerPanel(
-    "ssh-tools",
-    SshToolsPanel as unknown as ComponentType<PanelProps>,
-  );
-  app.registerRailItem({
-    id: "ssh-tools",
-    icon: Hammer,
-    titleKey: "nav.sshTools",
-    after: "quick-connect",
-    hideable: true,
-    mobilePrimary: true,
-    promotable: true,
-    rightDockable: true,
-    separatorAfter: true,
-  });
-
-  app.registerPanel(
-    "macros",
-    MacrosPanel as unknown as ComponentType<PanelProps>,
-  );
-  app.registerRailItem({
-    id: "macros",
-    icon: Braces,
-    titleKey: "nav.macros",
-    after: "ssh-tools",
-    hideable: true,
-    promotable: true,
-    rightDockable: true,
-    separatorAfter: true,
-  });
-
-  // The keys a user can bind to the terminal's own actions, and its
-  // built-in keys they can rebind. The terminal runs these itself.
-  app.registerKeybindingAction({ id: "copy", titleKey: "keybindings.copy" });
-  app.registerKeybindingAction({
-    id: "paste",
-    titleKey: "keybindings.paste",
-    editor: PasteNote,
-  });
-  app.registerKeybindingAction({
-    id: "sendControlCode",
-    titleKey: "keybindings.sendControlCode",
-    editor: SendControlCodeEditor,
-    validate: validateSendControlCode,
-  });
-  app.registerKeybindingAction({
-    id: "sendText",
-    titleKey: "keybindings.sendText",
-    editor: SendTextEditor,
-    validate: validateSendText,
-  });
-  for (const binding of TERMINAL_KEYBINDING_DEFAULTS) {
-    app.registerKeybindingDefault(binding);
-  }
-
-  // Places other plugins can fill: toolbar buttons and readouts, a side
-  // panel and overlays that follow the session's connection flow.
-  app.declareActionSlot({ id: TERMINAL_TOOLBAR_SLOT, accepts: ["button"] });
-  app.declareActionSlot({
-    id: TERMINAL_TOOLBAR_STATUS_SLOT,
-    accepts: ["component"],
-  });
-  app.declareActionSlot({
-    id: TERMINAL_SIDE_PANEL_SLOT,
-    accepts: ["component"],
-  });
-  app.declareActionSlot({ id: TERMINAL_OVERLAY_SLOT, accepts: ["component"] });
-
-  // A terminal other code can embed (collab rooms, the homepage widget, the
-  // tmux monitor, the file manager's window) without importing this plugin.
-  app.registerComponent(
-    "terminal.view",
-    TerminalView as unknown as ComponentType<Record<string, unknown>>,
-  );
-
-  // Lets another plugin (snippets) push text into a live terminal session
-  // without reaching into the shell's tab state itself.
-  app.registerAction("terminal.listSessions", () => listSessions());
-  app.registerAction("terminal.sendToActive", ((
-    text: string,
-    opts?: { run?: boolean },
-  ) => sendToActive(text, opts)) as never);
-  app.registerAction("terminal.sendToSession", ((
-    sessionId: string,
-    text: string,
-    opts?: { run?: boolean },
-  ) => sendToSession(sessionId, text, opts)) as never);
-  // Opens a new terminal tab on a host: at a path (the file manager), or
-  // joining someone else's shared session (the connections panel).
-  app.registerAction("terminal.open", ((
-    host: Parameters<TermixApp["tabs"]["openTab"]>[0],
-    options: TerminalOpenOptions = {},
-  ) =>
-    app.tabs.openTab(host, "terminal", {
-      forceNewTab: true,
-      label: options.label,
-      data: {
-        ...(options.path ? { initialPath: options.path } : {}),
-        ...(options.joinSharedSessionId
-          ? {
-              joinSharedSessionId: options.joinSharedSessionId,
-              joinShareId: options.joinShareId ?? null,
-            }
-          : {}),
-      },
-    })) as never);
-
-  // The terminal look for other terminal-like surfaces (docker, serial,
-  // proxmox), which must not import this plugin. Each answers undefined
-  // while this plugin is off, and the caller falls back to plain colors.
-  app.registerComponent(
-    "terminal.preview",
-    TerminalPreview as unknown as ComponentType<Record<string, unknown>>,
-  );
-  app.registerAction("terminal.resolveTheme", (async (
-    request: ResolveLookRequest & { hostId?: number | string } = {},
-  ) => {
-    let host: PluginHostRecord | null | undefined = request.host;
-    if (!host && request.hostId !== undefined) {
-      host =
-        app.getHost(request.hostId) ??
-        (await app.listHosts().catch(() => [])).find(
-          (entry) => String(entry.id) === String(request.hostId),
-        );
-    }
-    return resolveTerminalLook({ ...request, host });
-  }) as never);
-  app.registerAction("terminal.themes", () => listTerminalThemes());
-
-  app.registerSettingsComponent("touchInput", TouchInputSettings);
-  app.registerSettingsComponent("imageStorageTest", ImageStorageTest);
-
-  app.onSettingsChanged(() => invalidateTerminalClientSettings());
-  if (!app.guest) void moveLocalTerminalPreferences(app);
-
-  app.onDispose(resetTouchInputSettingsCache);
-  app.onDispose(resetTerminalClientSettings);
-}
diff --git a/plugins/ssh-terminal/src/frontend/lib/keybinding-dispatch.ts b/plugins/ssh-terminal/src/frontend/lib/keybinding-dispatch.ts
deleted file mode 100644
index 7e9aa79cb..000000000
--- a/plugins/ssh-terminal/src/frontend/lib/keybinding-dispatch.ts
+++ /dev/null
@@ -1,149 +0,0 @@
-import type { Terminal } from "@xterm/xterm";
-import type {
-  KeybindingAction,
-  KeybindingDefaultContribution,
-} from "@termix/plugin-sdk/frontend";
-
-export interface KeybindingDispatchContext {
-  terminal: Terminal;
-  webSocketRef: React.MutableRefObject<WebSocket | null>;
-  writeTextToClipboard: (text: string) => Promise<boolean>;
-  readTextFromClipboard: () => Promise<string>;
-}
-
-/** The keybinding actions the terminal runs itself. */
-export const TERMINAL_KEYBINDING_ACTIONS = [
-  "copy",
-  "paste",
-  "sendControlCode",
-  "sendText",
-] as const;
-
-export function isTerminalKeybindingAction(type: string): boolean {
-  return (TERMINAL_KEYBINDING_ACTIONS as readonly string[]).includes(type);
-}
-
-export function sendRawToSocket(
-  webSocketRef: React.MutableRefObject<WebSocket | null>,
-  data: string,
-): void {
-  if (webSocketRef.current?.readyState === 1) {
-    webSocketRef.current.send(JSON.stringify({ type: "input", data }));
-  }
-}
-
-function text(action: KeybindingAction, key: string): string {
-  const value = action[key];
-  return typeof value === "string" ? value : "";
-}
-
-/**
- * Runs one of the terminal's own bound actions. False for any other type,
- * which the terminal hands on to whoever registered it.
- */
-export function dispatchKeybindingAction(
-  action: KeybindingAction,
-  ctx: KeybindingDispatchContext,
-): boolean {
-  const sendRaw = (data: string) => sendRawToSocket(ctx.webSocketRef, data);
-
-  switch (action.type) {
-    case "copy": {
-      const selection = ctx.terminal.getSelection();
-      if (selection) {
-        ctx.writeTextToClipboard(selection);
-        ctx.terminal.clearSelection();
-      }
-      return true;
-    }
-    case "paste": {
-      ctx.readTextFromClipboard().then((value) => {
-        if (value) ctx.terminal.paste(value);
-      });
-      return true;
-    }
-    case "sendControlCode": {
-      const letter = text(action, "controlCode");
-      if (!letter) return true;
-      const code = letter.toLowerCase().charCodeAt(0) - 96;
-      if (code >= 1 && code <= 26) sendRaw(String.fromCharCode(code));
-      return true;
-    }
-    case "sendText": {
-      sendRaw(text(action, "text") + (action.appendEnter === true ? "\r" : ""));
-      return true;
-    }
-    default:
-      return false;
-  }
-}
-
-export function validateSendText(action: KeybindingAction): string | null {
-  return text(action, "text").trim() ? null : "keybindings.textRequired";
-}
-
-export function validateSendControlCode(
-  action: KeybindingAction,
-): string | null {
-  return /^[a-zA-Z]$/.test(text(action, "controlCode"))
-    ? null
-    : "keybindings.controlCodeRequired";
-}
-
-function combo(
-  key: string,
-  modifiers: { ctrl?: boolean; alt?: boolean; shift?: boolean; meta?: boolean },
-) {
-  return {
-    key,
-    isCode: false,
-    ctrl: !!modifiers.ctrl,
-    alt: !!modifiers.alt,
-    shift: !!modifiers.shift,
-    meta: !!modifiers.meta,
-  };
-}
-
-/** The terminal's built-in keys, listed so a user can rebind them. */
-export const TERMINAL_KEYBINDING_DEFAULTS: KeybindingDefaultContribution[] = [
-  {
-    id: "default-copy-ctrlc",
-    combo: combo("c", { ctrl: true }),
-    descriptionKey: "keybindings.builtIn.copyCtrlC",
-  },
-  {
-    id: "default-copy-ctrlshiftc",
-    combo: combo("c", { ctrl: true, shift: true }),
-    descriptionKey: "keybindings.builtIn.copyCtrlShiftC",
-  },
-  {
-    id: "default-copy-cmdc",
-    combo: combo("c", { meta: true }),
-    descriptionKey: "keybindings.builtIn.copyCmdC",
-  },
-  {
-    id: "default-paste-ctrlshiftv",
-    combo: combo("v", { ctrl: true, shift: true }),
-    descriptionKey: "keybindings.builtIn.pasteCtrlShiftV",
-  },
-  {
-    id: "default-ctrlaltw",
-    combo: combo("w", { ctrl: true, alt: true }),
-    descriptionKey: "keybindings.builtIn.ctrlW",
-  },
-  {
-    id: "default-ctrlaltt",
-    combo: combo("t", { ctrl: true, alt: true }),
-    descriptionKey: "keybindings.builtIn.ctrlT",
-  },
-  {
-    id: "default-ctrlaltn",
-    combo: combo("n", { ctrl: true, alt: true }),
-    descriptionKey: "keybindings.builtIn.ctrlN",
-  },
-  {
-    id: "default-ctrlaltq",
-    combo: combo("q", { ctrl: true, alt: true }),
-    descriptionKey: "keybindings.builtIn.ctrlQ",
-  },
-];
diff --git a/plugins/ssh-terminal/src/frontend/lib/keybinding-editors.tsx b/plugins/ssh-terminal/src/frontend/lib/keybinding-editors.tsx
deleted file mode 100644
index 52d614176..000000000
--- a/plugins/ssh-terminal/src/frontend/lib/keybinding-editors.tsx
+++ /dev/null
@@ -1,81 +0,0 @@
-import {
-  useTranslation,
-  type KeybindingActionEditorProps,
-} from "@termix/plugin-sdk/frontend";
-import { Input } from "@termix/plugin-sdk/ui";
-
-export function PasteNote() {
-  const { t } = useTranslation();
-  return (
-    <span className="text-xs text-muted-foreground">
-      {t("keybindings.clipboardPermissionNote")}
-    </span>
-  );
-}
-
-export function SendControlCodeEditor({
-  action,
-  onChange,
-}: KeybindingActionEditorProps) {
-  const { t } = useTranslation();
-  const value =
-    typeof action.controlCode === "string" ? action.controlCode : "";
-  return (
-    <div className="flex flex-col gap-1.5">
-      <label className="text-xs font-semibold">
-        {t("keybindings.controlCodeLabel")}
-      </label>
-      <Input
-        aria-label={t("keybindings.controlCodeLabel")}
-        value={value}
-        maxLength={1}
-        onChange={(e) =>
-          onChange({
-            type: action.type,
-            controlCode: e.target.value.toLowerCase() || undefined,
-          })
-        }
-        placeholder="w"
-        className="w-16 font-mono"
-      />
-    </div>
-  );
-}
-
-export function SendTextEditor({
-  action,
-  onChange,
-}: KeybindingActionEditorProps) {
-  const { t } = useTranslation();
-  const text = typeof action.text === "string" ? action.text : "";
-  const appendEnter = action.appendEnter === true;
-  return (
-    <div className="flex flex-col gap-1.5">
-      <label className="text-xs font-semibold">
-        {t("keybindings.textLabel")}
-      </label>
-      <textarea
-        aria-label={t("keybindings.textLabel")}
-        value={text}
-        onChange={(e) =>
-          onChange({ type: action.type, text: e.target.value, appendEnter })
-        }
-        className="w-full h-24 px-3 py-2 text-xs bg-background border border-border text-foreground placeholder:text-muted-foreground resize-none outline-none focus:ring-1 focus:ring-ring font-mono"
-      />
-      <label className="flex items-center gap-2 text-xs text-muted-foreground">
-        <input
-          type="checkbox"
-          checked={appendEnter}
-          onChange={(e) =>
-            onChange({
-              type: action.type,
-              text,
-              appendEnter: e.target.checked,
-            })
-          }
-        />
-        {t("keybindings.appendEnterLabel")}
-      </label>
-    </div>
-  );
-}
diff --git a/plugins/ssh-terminal/src/frontend/lib/mac-line-navigation.ts b/plugins/ssh-terminal/src/frontend/lib/mac-line-navigation.ts
deleted file mode 100644
index 91669d6e7..000000000
--- a/plugins/ssh-terminal/src/frontend/lib/mac-line-navigation.ts
+++ /dev/null
@@ -1,15 +0,0 @@
-import { isMacPlatform } from "@termix/plugin-sdk/ui";
-
-export function getMacLineNavigationSequence(e: KeyboardEvent): string | null {
-  if (e.type !== "keydown" || !isMacPlatform()) return null;
-  if (!e.metaKey || e.ctrlKey || e.altKey || e.shiftKey) return null;
-
-  switch (e.code) {
-    case "ArrowLeft":
-      return "\x01";
-    case "ArrowRight":
-      return "\x05";
-    default:
-      return null;
-  }
-}
diff --git a/plugins/ssh-terminal/src/frontend/lib/terminal-local-echo.ts b/plugins/ssh-terminal/src/frontend/lib/terminal-local-echo.ts
deleted file mode 100644
index 5cecee3eb..000000000
--- a/plugins/ssh-terminal/src/frontend/lib/terminal-local-echo.ts
+++ /dev/null
@@ -1,104 +0,0 @@
-export type LocalEchoMode = "off" | "auto" | "on";
-
-const PASSWORD_PROMPT =
-  /(?:password|passphrase|verification code|one[- ]time|otp|token)(?:[^\r\n:：]{0,160})?[:：]\s*$/i;
-const SAFE_INPUT = /^[\x20-\x7e]$/;
-
-type PendingCharacter = { value: string; sentAt: number; predicted: boolean };
-
-export class TerminalLocalEcho {
-  private pending: PendingCharacter[] = [];
-  private slowSamples = 0;
-  private secretInput = false;
-  private outputTail = "";
-
-  constructor(
-    private readonly mode: LocalEchoMode,
-    private readonly now: () => number = () => performance.now(),
-    private readonly latencyThreshold = 120,
-  ) {}
-
-  handleInput(data: string): string {
-    if (data === "\r" || data === "\n") {
-      return "";
-    }
-    if (this.secretInput || !SAFE_INPUT.test(data)) return "";
-
-    // Do not draw newer input ahead of characters still awaiting remote echo.
-    const predicted =
-      (this.mode === "on" || (this.mode === "auto" && this.slowSamples >= 2)) &&
-      this.pending.every((item) => item.predicted);
-    this.pending.push({ value: data, sentAt: this.now(), predicted });
-    return predicted ? data : "";
-  }
-
-  handleOutput(data: string): string {
-    if (!data) return "";
-    const plainOutput = this.stripAnsi(data);
-    this.outputTail = (this.outputTail + plainOutput).slice(-128);
-    if (PASSWORD_PROMPT.test(this.outputTail)) {
-      const rollback = this.rollback();
-      this.secretInput = true;
-      return rollback + data;
-    }
-
-    if (this.secretInput) {
-      if (data.includes("\n") || data.includes("\r")) this.secretInput = false;
-      return data;
-    }
-
-    if (this.pending.length === 0) return data;
-
-    let consumed = 0;
-    while (
-      consumed < data.length &&
-      consumed < this.pending.length &&
-      data[consumed] === this.pending[consumed].value
-    ) {
-      const item = this.pending[consumed];
-      if (
-        !item.predicted &&
-        this.now() - item.sentAt >= this.latencyThreshold
-      ) {
-        this.slowSamples += 1;
-      }
-      consumed += 1;
-    }
-
-    if (consumed > 0) {
-      const matched = this.pending.splice(0, consumed);
-      const predictedCount = matched.filter((item) => item.predicted).length;
-      const rollback = consumed < data.length ? this.rollback() : "";
-      return rollback + data.slice(predictedCount);
-    }
-
-    return this.rollback() + data;
-  }
-
-  reset() {
-    this.pending = [];
-    this.slowSamples = 0;
-    this.secretInput = false;
-    this.outputTail = "";
-  }
-
-  private rollback() {
-    const count = this.pending.filter((item) => item.predicted).length;
-    this.pending = [];
-    return count > 0 ? `\x1b[${count}D\x1b[${count}X` : "";
-  }
-
-  private stripAnsi(value: string) {
-    return value.replace(/\x1b(?:[@-Z\\-_]|\[[0-9:;<=>?!]*[@-~])/g, "");
-  }
-}
-
-export function resolveLocalEchoMode(
-  hostMode: "default" | LocalEchoMode | undefined,
-  storedMode: string | null,
-): LocalEchoMode {
-  if (hostMode && hostMode !== "default") return hostMode;
-  return storedMode === "on" || storedMode === "off" || storedMode === "auto"
-    ? storedMode
-    : "auto";
-}
diff --git a/plugins/ssh-terminal/src/frontend/lib/terminal-syntax-highlighter.ts b/plugins/ssh-terminal/src/frontend/lib/terminal-syntax-highlighter.ts
deleted file mode 100644
index d8a3e6341..000000000
--- a/plugins/ssh-terminal/src/frontend/lib/terminal-syntax-highlighter.ts
+++ /dev/null
@@ -1,507 +0,0 @@
-const ANSI = {
-  reset: "\x1b[0m",
-  red: "\x1b[31m",
-  green: "\x1b[32m",
-  yellow: "\x1b[33m",
-  blue: "\x1b[34m",
-  magenta: "\x1b[35m",
-  cyan: "\x1b[36m",
-  brightBlack: "\x1b[90m",
-  brightRed: "\x1b[91m",
-  brightGreen: "\x1b[92m",
-  brightYellow: "\x1b[93m",
-  brightBlue: "\x1b[94m",
-  brightCyan: "\x1b[96m",
-  bold: "\x1b[1m",
-  underline: "\x1b[4m",
-} as const;
-
-export interface SyntaxHighlightOptions {
-  logLevels?: boolean;
-  paths?: boolean;
-  timestamps?: boolean;
-  ipAddresses?: boolean;
-  urls?: boolean;
-  numbers?: boolean;
-}
-
-interface HighlightPattern {
-  name: string;
-  regex: RegExp;
-  ansiCode: string;
-  priority: number;
-  category: keyof SyntaxHighlightOptions;
-}
-
-interface MatchResult {
-  start: number;
-  end: number;
-  ansiCode: string;
-  priority: number;
-  // capture group offset: some patterns capture a sub-group rather than whole match
-  captureStart?: number;
-  captureEnd?: number;
-}
-
-interface TextSegment {
-  isAnsi: boolean;
-  content: string;
-  // the last active SGR code before this segment (for state restoration)
-  activeSgr?: string;
-}
-
-interface ProtectedRange {
-  start: number;
-  end: number;
-}
-
-const MAX_LINE_LENGTH = 2000;
-
-// Cursor-positioning, erase, and private mode sequences used by TUI apps
-// (mc, nano, vim, htop). If a chunk contains these, highlighting can inject
-// extra SGR bytes into a full-screen redraw and corrupt xterm's cursor state.
-const TUI_SEQUENCE = /\x1b\[(?:[\d;]*[ABCDEFGHJKST]|\?[\d;]*[hl])/;
-const TUI_FRAME_SEQUENCE = /[\u2500-\u257f]|\x1b[()][0B]|\x1b\[[0-9;]*[~`]/;
-const CONTROL_STRING_SEQUENCE = /\x1b[\]P^_]/;
-
-// A bare \r (not immediately followed by \n) means the terminal is overwriting
-// the current line (shell prompts, progress bars). Highlighting mid-rewrite
-// chunks corrupts the cursor state, so we skip the whole chunk.
-const MID_LINE_CR = /\r(?!\n)/;
-
-// Detects shell prompt lines (user@host:/path$ or similar) after stripping ANSI.
-// These should not be highlighted — the server already colored them, and injecting
-// additional ANSI codes into the prompt fragments causes display corruption.
-//
-// The parameter-byte class (0-9;?>=!) intentionally also includes `<` and `:` —
-// SGR mouse-tracking reports (`ESC[<Cb;Cx;CyM`) use `<` as their private-mode
-// marker. Without it, mouse reports from TUI apps (especially through a
-// multiplexer like screen) aren't recognized as escape sequences and leak
-// through as literal "35;191;1M" text on screen.
-const STRIP_ANSI_RE = /\x1b(?:[@-Z\\-_]|\[[0-9:;<=>?!]*[@-~])/g;
-const SSH_BRACKET_HEADING_RE =
-  /(?:(?<=^)|(?<=\s))\[[\w.-]+@[\w.-]+(?:[^\]\r\n]*)?\]/g;
-
-function isShellPromptLine(bare: string): boolean {
-  const plain = bare.replace(STRIP_ANSI_RE, "");
-  // Matches a trailing prompt: "user@host:~$ ", "root@pi:/home/pi# ", "[user@host dir]$ "
-  if (/(?:[\w.-]+@[\w.-]+|[\w.-]+).*?[$#%>]\s*$/.test(plain)) return true;
-  // Matches a leading prompt followed by a command: "user@host:/path$ cmd arg"
-  // This is the echoed command line — the shell colors the prompt prefix itself,
-  // so injecting extra ANSI codes into it causes visual corruption / doubled paths.
-  if (/^(?:\[?[\w.-]+@[\w.-]+[\w./ ~-]*\]?|[\w.-]+).*?[$#%>]\s+\S/.test(plain))
-    return true;
-  return false;
-}
-
-// Matches any complete ANSI escape sequence
-const ANSI_REGEX = /\x1b(?:[@-Z\\-_]|\[[0-9:;<=>?!]*[@-~])/g;
-
-// Matches SGR sequences (color/style setters) specifically — used to track active color state
-const SGR_REGEX = /\x1b\[[0-9;]*m/;
-
-// All patterns, ordered roughly by specificity. Priority determines which wins on overlap.
-const ALL_PATTERNS: HighlightPattern[] = [
-  // IPv4 with optional :port — well-bounded, very specific
-  {
-    name: "ipv4",
-    regex:
-      /(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])(?::\d{1,5})?/g,
-    ansiCode: ANSI.magenta,
-    priority: 10,
-    category: "ipAddresses",
-  },
-
-  // Bracket timestamps [HH:MM] or [HH:MM:SS] — tight range checks prevent false positives
-  {
-    name: "timestamp-bracket",
-    regex: /\[(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d)?\]/g,
-    ansiCode: ANSI.brightBlack,
-    priority: 9,
-    category: "timestamps",
-  },
-
-  // ISO 8601 date with optional time. Require non-digit before to avoid matching
-  // inside version strings like "1.2024.3". The \b on the right ensures we don't
-  // match partial tokens.
-  {
-    name: "timestamp-iso",
-    regex:
-      /(?<![0-9])\b\d{4}-(?:0[1-9]|1[0-2])-(?:0[1-9]|[12]\d|3[01])(?:[T ]\d{2}:\d{2}(?::\d{2})?(?:\.\d+)?(?:Z|[+-]\d{2}:?\d{2})?)?\b/g,
-    ansiCode: ANSI.brightBlack,
-    priority: 9,
-    category: "timestamps",
-  },
-
-  // Error-level keywords — case-insensitive, catches "Error", "error", "FAILED", etc.
-  {
-    name: "log-error",
-    regex:
-      /\b(?:error|fatal|critical|fail(?:ed)?|denied|exception)\b|\[(?:error|fatal|critical)\]/gi,
-    ansiCode: ANSI.brightRed,
-    priority: 9,
-    category: "logLevels",
-  },
-
-  // Warning-level keywords — case-insensitive
-  {
-    name: "log-warn",
-    regex: /\b(?:warn(?:ing)?|alert|caution)\b|\[warn(?:ing)?\]/gi,
-    ansiCode: ANSI.brightYellow,
-    priority: 9,
-    category: "logLevels",
-  },
-
-  // Success keywords — kept conservative to avoid noise.
-  // Negative lookahead prevents matching when directly followed by a path separator
-  // (e.g. shell `cd` output that prints "success~/new/dir").
-  {
-    name: "log-success",
-    regex:
-      /\b(?:success(?:ful(?:ly)?)?|pass(?:ed)?|complete(?:d)?|ok\b)\b(?![\\/~])/gi,
-    ansiCode: ANSI.brightGreen,
-    priority: 8,
-    category: "logLevels",
-  },
-
-  // URLs — blue + underline
-  {
-    name: "url",
-    regex: /https?:\/\/[^\s\])}>"']+/g,
-    ansiCode: `${ANSI.blue}${ANSI.underline}`,
-    priority: 8,
-    category: "urls",
-  },
-
-  // Absolute paths — permissive character class that allows *, ?, [], globs, etc.
-  // Requires at least one slash after the root segment so we don't match bare /dev or /tmp.
-  // Boundary: must start at beginning of text or after whitespace/colon/comma/paren.
-  {
-    name: "path-absolute",
-    regex:
-      /(?:(?<=^)|(?<=[\s:,;('"]))\/[^\s"'`|<>&;\\]+(?:\/[^\s"'`|<>&;\\]+)+/g,
-    ansiCode: ANSI.cyan,
-    priority: 7,
-    category: "paths",
-  },
-
-  // Home-relative paths
-  {
-    name: "path-home",
-    regex: /~\/[^\s"'`|<>&;(){}[\]\\]+/g,
-    ansiCode: ANSI.cyan,
-    priority: 7,
-    category: "paths",
-  },
-
-  // Info keyword
-  {
-    name: "log-info",
-    regex: /\binfo\b|\[info\]/gi,
-    ansiCode: ANSI.blue,
-    priority: 6,
-    category: "logLevels",
-  },
-
-  // Debug/trace
-  {
-    name: "log-debug",
-    regex: /\b(?:debug|trace|verbose)\b|\[(?:debug|trace)\]/gi,
-    ansiCode: ANSI.brightBlack,
-    priority: 6,
-    category: "logLevels",
-  },
-
-  // Labeled numbers: port 8080, exit 1, code 127, status 404, signal 9, returned 0
-  // Captures just the number portion so only the digit is highlighted.
-  {
-    name: "number-labeled",
-    regex: /\b(?:port|exit|code|status|signal|returned?)\s+(\d+)\b/gi,
-    ansiCode: ANSI.brightCyan,
-    priority: 5,
-    category: "numbers",
-  },
-];
-
-function hasIncompleteAnsiSequence(text: string): boolean {
-  return /\x1b\[[0-9:;<=>?!]*$/.test(text);
-}
-
-/**
- * Tracks whether the stream is inside a control string (OSC/DCS/APC/PM) across
- * chunk boundaries.
- *
- * A control string carries text that must never reach the screen — an OSC 0
- * title, for instance, contains the user, host and path. Its opening `ESC ]`
- * and its terminator often land in different websocket frames, and the
- * continuation frame contains no escape byte at all, so every single-chunk
- * guard here misses it. Highlighting that continuation injects an SGR sequence
- * into the middle of the string, which aborts it early in xterm.js and dumps
- * the rest of the payload on screen as ordinary text.
- *
- * A trailing lone ESC counts as active for the same reason: its intent is only
- * knowable from the next chunk.
- */
-export function updateControlStringMode(
-  output: string,
-  currentMode: boolean,
-): { isActive: boolean; wasActive: boolean } {
-  const wasActive = currentMode;
-  let isActive = currentMode;
-
-  for (let i = 0; i < output.length; i++) {
-    const char = output[i];
-
-    if (isActive) {
-      if (char === "\x07") {
-        isActive = false;
-      } else if (char === "\x1b") {
-        // ST (ESC \) closes it; any other ESC aborts it.
-        isActive = false;
-        if (output[i + 1] === "\\") i++;
-      }
-      continue;
-    }
-
-    if (char !== "\x1b") continue;
-
-    const next = output[i + 1];
-    if (next === undefined) return { isActive: true, wasActive };
-    if (next === "]" || next === "P" || next === "^" || next === "_") {
-      isActive = true;
-      i++;
-    }
-  }
-
-  return { isActive, wasActive };
-}
-
-function parseAnsiSegments(text: string): TextSegment[] {
-  const segments: TextSegment[] = [];
-  ANSI_REGEX.lastIndex = 0;
-  let lastIndex = 0;
-  let activeSgr = "";
-  let match;
-
-  while ((match = ANSI_REGEX.exec(text)) !== null) {
-    if (match.index > lastIndex) {
-      segments.push({
-        isAnsi: false,
-        content: text.slice(lastIndex, match.index),
-        activeSgr,
-      });
-    }
-    const seq = match[0];
-    segments.push({ isAnsi: true, content: seq });
-    // Track the active SGR state so we can restore it after a highlight reset
-    if (SGR_REGEX.test(seq)) {
-      activeSgr = seq === ANSI.reset ? "" : seq;
-    }
-    lastIndex = ANSI_REGEX.lastIndex;
-  }
-
-  if (lastIndex < text.length) {
-    segments.push({ isAnsi: false, content: text.slice(lastIndex), activeSgr });
-  }
-
-  return segments;
-}
-
-function highlightPlainText(
-  text: string,
-  activePatterns: HighlightPattern[],
-  activeSgr: string,
-  protectedRanges: ProtectedRange[],
-): string {
-  if (text.length > MAX_LINE_LENGTH || !text.trim()) return text;
-
-  const matches: MatchResult[] = [];
-
-  for (const pattern of activePatterns) {
-    pattern.regex.lastIndex = 0;
-    let m;
-    while ((m = pattern.regex.exec(text)) !== null) {
-      // For patterns with a capture group (labeled numbers), highlight only the capture
-      if (m[1] !== undefined) {
-        const captureOffset = m[0].indexOf(m[1], m[0].search(/\d/));
-        const captureStart = m.index + captureOffset;
-        const captureEnd = captureStart + m[1].length;
-        if (isProtectedRange(captureStart, captureEnd, protectedRanges)) {
-          continue;
-        }
-        matches.push({
-          start: m.index,
-          end: m.index + m[0].length,
-          ansiCode: pattern.ansiCode,
-          priority: pattern.priority,
-          captureStart,
-          captureEnd,
-        });
-      } else {
-        if (isProtectedRange(m.index, m.index + m[0].length, protectedRanges)) {
-          continue;
-        }
-        matches.push({
-          start: m.index,
-          end: m.index + m[0].length,
-          ansiCode: pattern.ansiCode,
-          priority: pattern.priority,
-        });
-      }
-    }
-  }
-
-  if (matches.length === 0) return text;
-
-  // Highest priority wins; ties broken by earlier start position
-  matches.sort((a, b) =>
-    a.priority !== b.priority ? b.priority - a.priority : a.start - b.start,
-  );
-
-  const used: Array<{ start: number; end: number }> = [];
-  const final = matches.filter((m) => {
-    const overlaps = used.some(
-      (r) =>
-        (m.start >= r.start && m.start < r.end) ||
-        (m.end > r.start && m.end <= r.end) ||
-        (m.start <= r.start && m.end >= r.end),
-    );
-    if (!overlaps) {
-      used.push({ start: m.start, end: m.end });
-      return true;
-    }
-    return false;
-  });
-
-  // Apply in reverse order so indices stay valid as we insert escape codes
-  final.sort((a, b) => a.start - b.start).reverse();
-
-  let result = text;
-  for (const m of final) {
-    const hs = m.captureStart ?? m.start;
-    const he = m.captureEnd ?? m.end;
-
-    // After reset, re-emit the SGR that was active before this plain-text segment
-    // so we don't clobber colors set by the server earlier in the line.
-    const restore = activeSgr || "";
-    result =
-      result.slice(0, hs) +
-      m.ansiCode +
-      result.slice(hs, he) +
-      ANSI.reset +
-      restore +
-      result.slice(he);
-  }
-
-  return result;
-}
-
-function getProtectedRanges(text: string): ProtectedRange[] {
-  const ranges: ProtectedRange[] = [];
-  SSH_BRACKET_HEADING_RE.lastIndex = 0;
-
-  let match;
-  while ((match = SSH_BRACKET_HEADING_RE.exec(text)) !== null) {
-    ranges.push({
-      start: match.index,
-      end: match.index + match[0].length,
-    });
-  }
-
-  return ranges;
-}
-
-function isProtectedRange(
-  start: number,
-  end: number,
-  ranges: ProtectedRange[],
-): boolean {
-  return ranges.some((range) => start < range.end && end > range.start);
-}
-
-function buildActivePatterns(
-  options: SyntaxHighlightOptions,
-): HighlightPattern[] {
-  return ALL_PATTERNS.filter((p) => options[p.category] !== false);
-}
-
-function highlightLine(
-  line: string,
-  activePatterns: HighlightPattern[],
-): string {
-  const cr = line.endsWith("\r");
-  const bare = cr ? line.slice(0, -1) : line;
-
-  if (!bare.trim()) return line;
-  if (bare.length > MAX_LINE_LENGTH) return line;
-  if (isShellPromptLine(bare)) return line;
-
-  // Compute protected ranges (e.g. SSH bracket headings) against the fully
-  // stripped line rather than per-ANSI-segment text. A colored prompt theme
-  // (e.g. "[<color>user<reset>@<color>host<reset>]") splits the heading across
-  // multiple plain-text segments, so matching per-segment would miss it and
-  // let a username like "warning" get wrongly highlighted as a log level.
-  const plainLine = bare.replace(STRIP_ANSI_RE, "");
-  const lineProtectedRanges = getProtectedRanges(plainLine);
-
-  const segments = parseAnsiSegments(bare);
-  let plainOffset = 0;
-  const result = segments
-    .map((s) => {
-      if (s.isAnsi) return s.content;
-      const segmentStart = plainOffset;
-      plainOffset += s.content.length;
-      const localRanges = lineProtectedRanges
-        .map((r) => ({
-          start: r.start - segmentStart,
-          end: r.end - segmentStart,
-        }))
-        .filter((r) => r.start < s.content.length && r.end > 0);
-      return highlightPlainText(
-        s.content,
-        activePatterns,
-        s.activeSgr ?? "",
-        localRanges,
-      );
-    })
-    .join("");
-
-  return cr ? result + "\r" : result;
-}
-
-export function highlightTerminalOutput(
-  text: string,
-  options: SyntaxHighlightOptions = {},
-): string {
-  if (!text || !text.trim()) return text;
-  if (hasIncompleteAnsiSequence(text)) return text;
-
-  if (TUI_SEQUENCE.test(text)) return text;
-  if (TUI_FRAME_SEQUENCE.test(text)) return text;
-  if (CONTROL_STRING_SEQUENCE.test(text)) return text;
-  if (MID_LINE_CR.test(text)) return text;
-
-  const activePatterns = buildActivePatterns(options);
-  if (activePatterns.length === 0) return text;
-
-  const lines = text.split("\n");
-  const endsWithNewline = text.endsWith("\n");
-  const hasMultipleLines = lines.length > 1;
-
-  // When a multi-line chunk has a trailing fragment without \n, that fragment
-  // could be a live readline input line that bash will redraw with \r +
-  // cursor-positioning sequences. Injecting ANSI bytes into it adds invisible
-  // chars that bash doesn't count, so bash's cursor arithmetic diverges from
-  // xterm's actual column position — causing the cursor to jump and text to
-  // shift when the user types or navigates with arrow keys.
-  // Only skip the last fragment when the chunk already has complete lines
-  // before it (single-line chunks with no \n are plain output, not input).
-  const highlightCount =
-    hasMultipleLines && !endsWithNewline ? lines.length - 1 : lines.length;
-
-  return lines
-    .map((line, i) =>
-      i < highlightCount ? highlightLine(line, activePatterns) : line,
-    )
-    .join("\n");
-}
diff --git a/plugins/ssh-terminal/src/frontend/local-terminal/LocalTerminal.tsx b/plugins/ssh-terminal/src/frontend/local-terminal/LocalTerminal.tsx
deleted file mode 100644
index 1fc677c85..000000000
--- a/plugins/ssh-terminal/src/frontend/local-terminal/LocalTerminal.tsx
+++ /dev/null
@@ -1,203 +0,0 @@
-import { useCallback, useEffect, useRef, useState } from "react";
-import { FitAddon } from "@xterm/addon-fit";
-import { ClipboardAddon } from "@xterm/addon-clipboard";
-import { useXTerm } from "react-xtermjs";
-import { toast } from "sonner";
-import { getMacLineNavigationSequence } from "../lib/mac-line-navigation";
-import {
-  handleTerminalClipboardKeyEvent,
-  createTerminalContextMenuHandler,
-} from "../terminal/terminal-clipboard";
-import {
-  useAppTheme as useTheme,
-  RobustClipboardProvider,
-  copyToClipboard,
-  readFromClipboard,
-} from "@termix/plugin-sdk/ui";
-import { resolveTermixThemeColors } from "../look/terminal-theme";
-import {
-  DEFAULT_TERMINAL_CONFIG,
-  TERMINAL_FONTS,
-} from "../look/terminal-themes";
-import { ensureTerminalFontsLoaded } from "../look/terminal-global-styles";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-export function LocalTerminal({
-  instanceId,
-  isVisible,
-}: {
-  instanceId: string;
-  isVisible: boolean;
-}) {
-  const { t } = useTranslation();
-  // Read via a ref inside the session-lifecycle effect below so a language
-  // change (which gives react-i18next a new `t` identity) doesn't tear down
-  // the running local shell and spawn a new session.
-  const tRef = useRef(t);
-  tRef.current = t;
-  const { theme: appTheme } = useTheme();
-  const { instance: terminal, ref: xtermRef } = useXTerm();
-  const fitAddonRef = useRef<FitAddon | null>(null);
-  const sessionIdRef = useRef<string | null>(null);
-  const [isWindows, setIsWindows] = useState(false);
-  const [shell, setShell] = useState<"default" | "wsl">("default");
-
-  useEffect(() => {
-    window.electronAPI?.getPlatform().then((platform) => {
-      setIsWindows(platform === "win32");
-    });
-  }, []);
-
-  const fit = useCallback(() => {
-    const fitAddon = fitAddonRef.current;
-    const sessionId = sessionIdRef.current;
-    if (!terminal || !fitAddon) return;
-    fitAddon.fit();
-    if (sessionId) {
-      window.electronAPI.resizeLocalTerminal(
-        sessionId,
-        terminal.cols,
-        terminal.rows,
-      );
-    }
-  }, [terminal]);
-
-  useEffect(() => {
-    if (!terminal) return;
-    const colors = resolveTermixThemeColors("termix", appTheme);
-    const font = TERMINAL_FONTS.find(
-      (item) => item.value === DEFAULT_TERMINAL_CONFIG.fontFamily,
-    );
-    ensureTerminalFontsLoaded(font?.value ?? TERMINAL_FONTS[0].value);
-    terminal.options.theme = colors;
-    terminal.options.fontFamily = font?.fallback ?? TERMINAL_FONTS[0].fallback;
-    terminal.options.fontSize = DEFAULT_TERMINAL_CONFIG.fontSize;
-  }, [appTheme, terminal]);
-
-  useEffect(() => {
-    if (!terminal || !window.electronAPI?.isElectron) return;
-    const fitAddon = new FitAddon();
-    const clipboardProvider = new RobustClipboardProvider();
-    const clipboardAddon = new ClipboardAddon(undefined, clipboardProvider);
-    fitAddonRef.current = fitAddon;
-    terminal.loadAddon(fitAddon);
-    terminal.loadAddon(clipboardAddon);
-    fitAddon.fit();
-
-    async function writeTextToClipboard(text: string): Promise<boolean> {
-      const ok = await copyToClipboard(text);
-      if (!ok) toast.error(tRef.current("terminal.clipboardWriteFailed"));
-      return ok;
-    }
-
-    async function readTextFromClipboard(): Promise<string> {
-      const text = await readFromClipboard();
-      if (!text) toast.error(tRef.current("terminal.clipboardReadFailed"));
-      return text;
-    }
-
-    const clipboardActions = { writeTextToClipboard, readTextFromClipboard };
-
-    terminal.attachCustomKeyEventHandler((e: KeyboardEvent): boolean => {
-      if (e.type !== "keydown") return true;
-      const sequence = getMacLineNavigationSequence(e);
-      if (sequence) {
-        e.preventDefault();
-        e.stopPropagation();
-        terminal.input(sequence, true);
-        return false;
-      }
-      // No native "paste" event listener here (unlike the SSH terminal), so
-      // plain Ctrl/Cmd+V reads the clipboard explicitly rather than relying
-      // on the browser's own paste event.
-      return handleTerminalClipboardKeyEvent(e, terminal, clipboardActions, {
-        plainPasteMode: "explicit",
-      });
-    });
-
-    const handleContextMenu = createTerminalContextMenuHandler(
-      terminal,
-      clipboardActions,
-    );
-    const element = xtermRef.current;
-    element?.addEventListener("contextmenu", handleContextMenu);
-
-    let disposed = false;
-    let removeData = () => {};
-    let removeExit = () => {};
-    const input = terminal.onData((data) => {
-      const sessionId = sessionIdRef.current;
-      if (sessionId) window.electronAPI.writeLocalTerminal(sessionId, data);
-    });
-
-    window.electronAPI
-      .startLocalTerminal({ cols: terminal.cols, rows: terminal.rows, shell })
-      .then(({ sessionId }) => {
-        if (disposed) {
-          window.electronAPI.closeLocalTerminal(sessionId);
-          return;
-        }
-        sessionIdRef.current = sessionId;
-        removeData = window.electronAPI.onLocalTerminalData(sessionId, (data) =>
-          terminal.write(data),
-        );
-        removeExit = window.electronAPI.onLocalTerminalExit(
-          sessionId,
-          (exitCode) => {
-            sessionIdRef.current = null;
-            terminal.write(
-              `\r\n\x1b[33mProcess exited (${exitCode})\x1b[0m\r\n`,
-            );
-          },
-        );
-        return window.electronAPI.readyLocalTerminal(sessionId);
-      })
-      .catch((error: unknown) => {
-        const message = error instanceof Error ? error.message : String(error);
-        terminal.write(`\r\n\x1b[31m${message}\x1b[0m\r\n`);
-      });
-
-    const observer = new ResizeObserver(() => fit());
-    if (xtermRef.current) observer.observe(xtermRef.current);
-    return () => {
-      disposed = true;
-      terminal.attachCustomKeyEventHandler(() => true);
-      observer.disconnect();
-      input.dispose();
-      removeData();
-      removeExit();
-      element?.removeEventListener("contextmenu", handleContextMenu);
-      clipboardProvider.dispose();
-      const sessionId = sessionIdRef.current;
-      sessionIdRef.current = null;
-      if (sessionId) window.electronAPI.closeLocalTerminal(sessionId);
-      fitAddonRef.current = null;
-      fitAddon.dispose();
-    };
-  }, [fit, instanceId, shell, terminal, xtermRef]);
-
-  useEffect(() => {
-    if (isVisible) requestAnimationFrame(fit);
-  }, [fit, isVisible]);
-
-  return (
-    <div className="flex h-full w-full flex-col bg-background">
-      {isWindows && (
-        <div className="flex justify-end border-b border-border px-2 py-1">
-          <select
-            aria-label={t("terminal.localShell")}
-            className="rounded border border-border bg-background px-2 py-1 text-xs text-foreground"
-            value={shell}
-            onChange={(event) =>
-              setShell(event.target.value === "wsl" ? "wsl" : "default")
-            }
-          >
-            <option value="default">PowerShell</option>
-            <option value="wsl">WSL</option>
-          </select>
-        </div>
-      )}
-      <div ref={xtermRef} className="min-h-0 flex-1 p-2" />
-    </div>
-  );
-}
diff --git a/plugins/ssh-terminal/src/frontend/look/TerminalPreview.tsx b/plugins/ssh-terminal/src/frontend/look/TerminalPreview.tsx
deleted file mode 100644
index 7c16a9b1a..000000000
--- a/plugins/ssh-terminal/src/frontend/look/TerminalPreview.tsx
+++ /dev/null
@@ -1,129 +0,0 @@
-import { useAppTheme } from "@termix/plugin-sdk/ui";
-import { TERMINAL_THEMES, resolveTerminalFontFamily } from "./terminal-themes";
-import type { TerminalThemeColors } from "../../shared/terminal-settings";
-
-/**
- * A few lines of sample output in a terminal look. Also registered as the
- * "terminal.preview" component for other plugins' pickers.
- */
-export interface TerminalPreviewProps {
-  theme: string;
-  fontSize?: number;
-  fontFamily?: string;
-  cursorStyle?: "block" | "underline" | "bar";
-  cursorBlink?: boolean;
-  letterSpacing?: number;
-  lineHeight?: number;
-  customThemeColors?: TerminalThemeColors | null;
-}
-
-export function TerminalPreview({
-  theme = "termix",
-  fontSize = 14,
-  fontFamily = "Caskaydia Cove Nerd Font Mono",
-  cursorStyle = "bar",
-  cursorBlink = true,
-  letterSpacing = 0,
-  lineHeight = 1.0,
-  customThemeColors,
-}: TerminalPreviewProps) {
-  const { theme: appTheme } = useAppTheme();
-
-  const resolvedTheme =
-    theme === "termix"
-      ? appTheme === "dark" ||
-        (appTheme === "system" &&
-          window.matchMedia("(prefers-color-scheme: dark)").matches)
-        ? "termixDark"
-        : "termixLight"
-      : theme;
-
-  const colors =
-    theme === "custom" && customThemeColors
-      ? customThemeColors
-      : TERMINAL_THEMES[resolvedTheme]?.colors;
-  const fontFallback = resolveTerminalFontFamily(fontFamily);
-
-  return (
-    <div className="border border-input overflow-hidden">
-      <div
-        className="p-3"
-        style={{
-          fontSize: `${fontSize}px`,
-          fontFamily: fontFallback,
-          letterSpacing: `${letterSpacing}px`,
-          lineHeight,
-          background: colors?.background || "var(--bg-base)",
-          color: colors?.foreground || "var(--foreground)",
-        }}
-      >
-        <div>
-          <span style={{ color: colors?.green }}>deploy@web-01</span>
-          <span style={{ color: colors?.brightBlack }}>:</span>
-          <span style={{ color: colors?.blue }}>~</span>
-          <span style={{ color: colors?.brightBlack }}>$</span>
-          <span> ls -la</span>
-        </div>
-        <div style={{ color: colors?.brightBlack }}>total 48</div>
-        <div>
-          <span style={{ color: colors?.cyan }}>drwxr-xr-x</span>
-          <span style={{ color: colors?.brightBlack }}>
-            {" "}
-            5 deploy deploy 4096 May 1 09:12{" "}
-          </span>
-          <span style={{ color: colors?.blue }}>.</span>
-        </div>
-        <div>
-          <span style={{ color: colors?.cyan }}>drwxr-xr-x</span>
-          <span style={{ color: colors?.brightBlack }}>
-            {" "}
-            3 root root 4096 Apr 15 18:44{" "}
-          </span>
-          <span style={{ color: colors?.blue }}>..</span>
-        </div>
-        <div>
-          <span style={{ color: colors?.cyan }}>-rw-r--r--</span>
-          <span style={{ color: colors?.brightBlack }}>
-            {" "}
-            1 deploy deploy 220 Apr 15 18:44{" "}
-          </span>
-          <span>.bash_logout</span>
-        </div>
-        <div>
-          <span style={{ color: colors?.cyan }}>-rwxr-xr-x</span>
-          <span style={{ color: colors?.brightBlack }}>
-            {" "}
-            1 deploy deploy 8192 May 1 08:55{" "}
-          </span>
-          <span style={{ color: colors?.green }}>deploy.sh</span>
-        </div>
-        <div className="flex items-center gap-0.5 mt-0.5">
-          <span style={{ color: colors?.green }}>deploy@web-01</span>
-          <span style={{ color: colors?.brightBlack }}>:</span>
-          <span style={{ color: colors?.blue }}>~</span>
-          <span style={{ color: colors?.brightBlack }}>$</span>
-          <span> </span>
-          <span
-            className="inline-block"
-            style={{
-              width: cursorStyle === "block" ? "0.6em" : "0.12em",
-              height: cursorStyle === "underline" ? "0.12em" : `${fontSize}px`,
-              background: colors?.cursor || colors?.foreground || "#f7f7f7",
-              animation: cursorBlink
-                ? "termPreviewBlink 1s step-end infinite"
-                : "none",
-              verticalAlign:
-                cursorStyle === "underline" ? "bottom" : "text-bottom",
-            }}
-          />
-        </div>
-      </div>
-      <style>{`
-        @keyframes termPreviewBlink {
-          0%, 49% { opacity: 1; }
-          50%, 100% { opacity: 0; }
-        }
-      `}</style>
-    </div>
-  );
-}
diff --git a/plugins/ssh-terminal/src/frontend/look/look-actions.ts b/plugins/ssh-terminal/src/frontend/look/look-actions.ts
deleted file mode 100644
index c82e1bc88..000000000
--- a/plugins/ssh-terminal/src/frontend/look/look-actions.ts
+++ /dev/null
@@ -1,83 +0,0 @@
-import type { PluginHostRecord } from "@termix/plugin-sdk/frontend";
-import {
-  TERMINAL_THEMES,
-  resolveTerminalFontFamily,
-  type TerminalTheme,
-} from "./terminal-themes";
-import { resolveTermixThemeColors } from "./terminal-theme";
-import { ensureTerminalFontsLoaded } from "./terminal-global-styles";
-import { resolveForHost } from "../terminal-settings";
-import type {
-  CursorStyle,
-  TerminalThemeColors,
-} from "../../shared/terminal-settings";
-
-/**
- * What `terminal.resolveTheme` answers: an xterm theme and the font options
- * a terminal-like surface (a docker console, a serial console) should use to
- * look like the SSH terminal on the same host.
- */
-export interface ResolvedTerminalLook {
-  themeId: string;
-  colors: TerminalThemeColors;
-  /** A CSS font stack, ready for xterm's fontFamily option. */
-  fontFamily: string;
-  fontSize: number;
-  cursorStyle: CursorStyle;
-  cursorBlink: boolean;
-  letterSpacing: number;
-  lineHeight: number;
-  scrollback: number;
-  minimumContrastRatio: number;
-  backgroundImage: string;
-  backgroundImageOpacity: number;
-}
-
-export interface ResolveLookRequest {
-  /** A host record from the shell; its terminal settings decide the look. */
-  host?: PluginHostRecord | null;
-  /** Force a theme id instead of the host's. */
-  theme?: string;
-  /** The app theme ("dark", "light", "system" or a named theme). */
-  appTheme?: string;
-}
-
-export function resolveTerminalLook(
-  request: ResolveLookRequest,
-): ResolvedTerminalLook {
-  const config = resolveForHost(request.host ?? null);
-  const themeId = request.theme || config.theme;
-  ensureTerminalFontsLoaded(config.fontFamily);
-  return {
-    themeId,
-    colors: resolveTermixThemeColors(
-      themeId,
-      request.appTheme ?? "dark",
-      config.customThemeColors,
-    ),
-    fontFamily: resolveTerminalFontFamily(config.fontFamily),
-    fontSize: config.fontSize,
-    cursorStyle: config.cursorStyle,
-    cursorBlink: config.cursorBlink,
-    letterSpacing: config.letterSpacing,
-    lineHeight: config.lineHeight,
-    scrollback: config.scrollback,
-    minimumContrastRatio: config.minimumContrastRatio,
-    backgroundImage: config.backgroundImage,
-    backgroundImageOpacity: config.backgroundImageOpacity,
-  };
-}
-
-/** What `terminal.themes` answers: every built-in theme, for a picker. */
-export function listTerminalThemes(): Array<
-  { id: string } & Pick<TerminalTheme, "name" | "category" | "colors">
-> {
-  return Object.entries(TERMINAL_THEMES)
-    .filter(([id]) => id !== "termixDark" && id !== "termixLight")
-    .map(([id, theme]) => ({
-      id,
-      name: theme.name,
-      category: theme.category,
-      colors: theme.colors,
-    }));
-}
diff --git a/plugins/ssh-terminal/src/frontend/look/terminal-font-zoom.ts b/plugins/ssh-terminal/src/frontend/look/terminal-font-zoom.ts
deleted file mode 100644
index 72dd66760..000000000
--- a/plugins/ssh-terminal/src/frontend/look/terminal-font-zoom.ts
+++ /dev/null
@@ -1,37 +0,0 @@
-export const TERMINAL_FONT_ZOOM_MIN = 8;
-export const TERMINAL_FONT_ZOOM_MAX = 36;
-
-type ZoomKeyEvent = Pick<
-  KeyboardEvent,
-  "altKey" | "code" | "ctrlKey" | "key" | "metaKey"
->;
-
-export function getTerminalFontZoomDirection(event: ZoomKeyEvent): -1 | 0 | 1 {
-  if ((!event.ctrlKey && !event.metaKey) || event.altKey) return 0;
-
-  if (
-    event.key === "+" ||
-    event.code === "Equal" ||
-    event.code === "NumpadAdd"
-  ) {
-    return 1;
-  }
-  if (
-    event.key === "-" ||
-    event.code === "Minus" ||
-    event.code === "NumpadSubtract"
-  ) {
-    return -1;
-  }
-  return 0;
-}
-
-export function getNextTerminalFontSize(
-  currentFontSize: number,
-  direction: -1 | 1,
-): number {
-  return Math.min(
-    TERMINAL_FONT_ZOOM_MAX,
-    Math.max(TERMINAL_FONT_ZOOM_MIN, currentFontSize + direction),
-  );
-}
diff --git a/plugins/ssh-terminal/src/frontend/look/terminal-global-styles.ts b/plugins/ssh-terminal/src/frontend/look/terminal-global-styles.ts
deleted file mode 100644
index 9a9ecb54b..000000000
--- a/plugins/ssh-terminal/src/frontend/look/terminal-global-styles.ts
+++ /dev/null
@@ -1,107 +0,0 @@
-const TERMINAL_STYLES = `
-@font-face {
-  font-family: 'Caskaydia Cove Nerd Font Mono';
-  src: url('./fonts/CaskaydiaCoveNerdFontMono-Regular.ttf') format('truetype');
-  font-weight: normal;
-  font-style: normal;
-  font-display: swap;
-}
-
-@font-face {
-  font-family: 'Caskaydia Cove Nerd Font Mono';
-  src: url('./fonts/CaskaydiaCoveNerdFontMono-Bold.ttf') format('truetype');
-  font-weight: bold;
-  font-style: normal;
-  font-display: swap;
-}
-
-@font-face {
-  font-family: 'Caskaydia Cove Nerd Font Mono';
-  src: url('./fonts/CaskaydiaCoveNerdFontMono-Italic.ttf') format('truetype');
-  font-weight: normal;
-  font-style: italic;
-  font-display: swap;
-}
-
-@font-face {
-  font-family: 'Caskaydia Cove Nerd Font Mono';
-  src: url('./fonts/CaskaydiaCoveNerdFontMono-BoldItalic.ttf') format('truetype');
-  font-weight: bold;
-  font-style: italic;
-  font-display: swap;
-}
-
-.xterm .xterm-viewport::-webkit-scrollbar {
-  width: 8px;
-  background: transparent;
-}
-.xterm .xterm-viewport::-webkit-scrollbar-thumb {
-  background: rgba(0,0,0,0.3);
-  border-radius: 4px;
-}
-.xterm .xterm-viewport::-webkit-scrollbar-thumb:hover {
-  background: rgba(0,0,0,0.5);
-}
-.xterm .xterm-viewport {
-  scrollbar-width: thin;
-  scrollbar-color: rgba(0,0,0,0.3) transparent;
-  background-color: transparent !important;
-}
-
-.dark .xterm .xterm-viewport::-webkit-scrollbar-thumb {
-  background: rgba(255,255,255,0.3);
-}
-.dark .xterm .xterm-viewport::-webkit-scrollbar-thumb:hover {
-  background: rgba(255,255,255,0.5);
-}
-.dark .xterm .xterm-viewport {
-  scrollbar-color: rgba(255,255,255,0.3) transparent;
-}
-
-.xterm {
-  font-feature-settings: "liga" 0, "calt" 0;
-  text-rendering: optimizeLegibility;
-  -webkit-font-smoothing: antialiased;
-  -moz-osx-font-smoothing: grayscale;
-}
-
-.xterm .xterm-screen {
-  font-variant-ligatures: none;
-}
-
-.xterm .xterm-screen .xterm-char {
-  font-feature-settings: "liga" 0, "calt" 0;
-}
-`;
-
-/**
- * The terminal font faces and xterm scrollbar rules, added to the page while
- * this plugin is active. Returns the disposer.
- */
-export function installTerminalGlobalStyles(): () => void {
-  if (typeof document === "undefined") return () => {};
-  const style = document.createElement("style");
-  style.dataset.termixTerminalStyles = "";
-  style.innerHTML = TERMINAL_STYLES;
-  document.head.appendChild(style);
-  return () => style.remove();
-}
-
-// Canvas fillText() does not reliably trigger @font-face fetches on every
-// browser engine (notably Android WebView) the way rendering real DOM text
-// does. xterm.js draws glyphs to a <canvas>, so without an explicit load the
-// terminal can keep painting the fallback font's tofu boxes even after
-// document.fonts.ready resolves. Forcing the load here ensures the glyph
-// data is actually fetched before the terminal renders with it.
-export function ensureTerminalFontsLoaded(fontFamily: string): void {
-  if (typeof document === "undefined" || !document.fonts) return;
-  const specs = [
-    `400 16px "${fontFamily}"`,
-    `700 16px "${fontFamily}"`,
-    `italic 400 16px "${fontFamily}"`,
-    `italic 700 16px "${fontFamily}"`,
-  ];
-  for (const spec of specs) {
-    document.fonts.load(spec).catch(() => {});
-  }
-}
diff --git a/plugins/ssh-terminal/src/frontend/look/terminal-theme.ts b/plugins/ssh-terminal/src/frontend/look/terminal-theme.ts
deleted file mode 100644
index 0751017e0..000000000
--- a/plugins/ssh-terminal/src/frontend/look/terminal-theme.ts
+++ /dev/null
@@ -1,55 +0,0 @@
-import { TERMINAL_THEMES, type TerminalTheme } from "./terminal-themes";
-import type { TerminalThemeColors } from "../../shared/terminal-settings";
-
-// Background/foreground per UI theme for "Termix Default" - must match index.css
-const TERMIX_DEFAULT_COLORS: Record<
-  string,
-  { background: string; foreground: string }
-> = {
-  dark: { background: "#0c0d0b", foreground: "#fafafa" },
-  light: { background: "#ffffff", foreground: "#111210" },
-  dracula: { background: "#282a36", foreground: "#f8f8f2" },
-  catppuccin: { background: "#1e1e2e", foreground: "#cdd6f4" },
-  nord: { background: "#2e3440", foreground: "#eceff4" },
-  solarized: { background: "#002b36", foreground: "#839496" },
-  "tokyo-night": { background: "#1a1b26", foreground: "#a9b1d6" },
-  "one-dark": { background: "#282c34", foreground: "#abb2bf" },
-  gruvbox: { background: "#282828", foreground: "#ebdbb2" },
-};
-
-export function resolveTermixThemeColors(
-  activeTheme: string,
-  appTheme: string,
-  customThemeColors?: TerminalThemeColors | null,
-): TerminalTheme["colors"] {
-  if (activeTheme === "custom") {
-    if (customThemeColors) {
-      return customThemeColors;
-    }
-    return TERMINAL_THEMES.termixDark.colors;
-  }
-  if (activeTheme !== "termix") {
-    return (
-      TERMINAL_THEMES[activeTheme]?.colors || TERMINAL_THEMES.termixDark.colors
-    );
-  }
-  let resolvedUiTheme = appTheme;
-  if (appTheme === "system") {
-    resolvedUiTheme = window.matchMedia("(prefers-color-scheme: dark)").matches
-      ? "dark"
-      : "light";
-  }
-  const uiColors =
-    TERMIX_DEFAULT_COLORS[resolvedUiTheme] ?? TERMIX_DEFAULT_COLORS.dark;
-  const base =
-    resolvedUiTheme === "light"
-      ? TERMINAL_THEMES.termixLight.colors
-      : TERMINAL_THEMES.termixDark.colors;
-  return {
-    ...base,
-    background: uiColors.background,
-    foreground: uiColors.foreground,
-    cursor: uiColors.foreground,
-    cursorAccent: uiColors.background,
-  };
-}
diff --git a/plugins/ssh-terminal/src/frontend/look/terminal-themes.ts b/plugins/ssh-terminal/src/frontend/look/terminal-themes.ts
deleted file mode 100644
index c1e5e191f..000000000
--- a/plugins/ssh-terminal/src/frontend/look/terminal-themes.ts
+++ /dev/null
@@ -1,831 +0,0 @@
-import {
-  DEFAULT_APPEARANCE,
-  DEFAULT_BEHAVIOR,
-  DEFAULT_MOSH_COMMAND,
-  type TerminalThemeColors,
-} from "../../shared/terminal-settings";
-
-export interface TerminalTheme {
-  name: string;
-  category: "dark" | "light" | "colorful";
-  colors: TerminalThemeColors;
-}
-
-export const TERMINAL_THEMES: Record<string, TerminalTheme> = {
-  termix: {
-    name: "Termix Default",
-    category: "dark",
-    colors: {
-      background: "#0c0d0b",
-      foreground: "#f7f7f7",
-      cursor: "#f7f7f7",
-      cursorAccent: "#0c0d0b",
-      selectionBackground: "#3a3a3d",
-      black: "#2e3436",
-      red: "#cc0000",
-      green: "#4e9a06",
-      yellow: "#c4a000",
-      blue: "#3465a4",
-      magenta: "#75507b",
-      cyan: "#06989a",
-      white: "#d3d7cf",
-      brightBlack: "#555753",
-      brightRed: "#ef2929",
-      brightGreen: "#8ae234",
-      brightYellow: "#fce94f",
-      brightBlue: "#729fcf",
-      brightMagenta: "#ad7fa8",
-      brightCyan: "#34e2e2",
-      brightWhite: "#eeeeec",
-    },
-  },
-
-  termixDark: {
-    name: "Termix Dark",
-    category: "dark",
-    colors: {
-      background: "#0c0d0b",
-      foreground: "#f7f7f7",
-      cursor: "#f7f7f7",
-      cursorAccent: "#0c0d0b",
-      selectionBackground: "#3a3a3d",
-      black: "#2e3436",
-      red: "#cc0000",
-      green: "#4e9a06",
-      yellow: "#c4a000",
-      blue: "#3465a4",
-      magenta: "#75507b",
-      cyan: "#06989a",
-      white: "#d3d7cf",
-      brightBlack: "#555753",
-      brightRed: "#ef2929",
-      brightGreen: "#8ae234",
-      brightYellow: "#fce94f",
-      brightBlue: "#729fcf",
-      brightMagenta: "#ad7fa8",
-      brightCyan: "#34e2e2",
-      brightWhite: "#eeeeec",
-    },
-  },
-
-  termixLight: {
-    name: "Termix Light",
-    category: "light",
-    colors: {
-      background: "#ffffff",
-      foreground: "#18181b",
-      cursor: "#18181b",
-      cursorAccent: "#ffffff",
-      selectionBackground: "#d1d5db",
-      black: "#18181b",
-      red: "#dc2626",
-      green: "#16a34a",
-      yellow: "#ca8a04",
-      blue: "#2563eb",
-      magenta: "#9333ea",
-      cyan: "#0891b2",
-      white: "#f4f4f5",
-      brightBlack: "#71717a",
-      brightRed: "#ef4444",
-      brightGreen: "#22c55e",
-      brightYellow: "#eab308",
-      brightBlue: "#3b82f6",
-      brightMagenta: "#a855f7",
-      brightCyan: "#06b6d4",
-      brightWhite: "#ffffff",
-    },
-  },
-
-  dracula: {
-    name: "Dracula",
-    category: "dark",
-    colors: {
-      background: "#282a36",
-      foreground: "#f8f8f2",
-      cursor: "#f8f8f2",
-      cursorAccent: "#282a36",
-      selectionBackground: "#44475a",
-      black: "#21222c",
-      red: "#ff5555",
-      green: "#50fa7b",
-      yellow: "#f1fa8c",
-      blue: "#bd93f9",
-      magenta: "#ff79c6",
-      cyan: "#8be9fd",
-      white: "#f8f8f2",
-      brightBlack: "#6272a4",
-      brightRed: "#ff6e6e",
-      brightGreen: "#69ff94",
-      brightYellow: "#ffffa5",
-      brightBlue: "#d6acff",
-      brightMagenta: "#ff92df",
-      brightCyan: "#a4ffff",
-      brightWhite: "#ffffff",
-    },
-  },
-
-  monokai: {
-    name: "Monokai",
-    category: "dark",
-    colors: {
-      background: "#272822",
-      foreground: "#f8f8f2",
-      cursor: "#f8f8f0",
-      cursorAccent: "#272822",
-      selectionBackground: "#49483e",
-      black: "#272822",
-      red: "#f92672",
-      green: "#a6e22e",
-      yellow: "#f4bf75",
-      blue: "#66d9ef",
-      magenta: "#ae81ff",
-      cyan: "#a1efe4",
-      white: "#f8f8f2",
-      brightBlack: "#75715e",
-      brightRed: "#f92672",
-      brightGreen: "#a6e22e",
-      brightYellow: "#f4bf75",
-      brightBlue: "#66d9ef",
-      brightMagenta: "#ae81ff",
-      brightCyan: "#a1efe4",
-      brightWhite: "#f9f8f5",
-    },
-  },
-
-  nord: {
-    name: "Nord",
-    category: "dark",
-    colors: {
-      background: "#2e3440",
-      foreground: "#d8dee9",
-      cursor: "#d8dee9",
-      cursorAccent: "#2e3440",
-      selectionBackground: "#434c5e",
-      black: "#3b4252",
-      red: "#bf616a",
-      green: "#a3be8c",
-      yellow: "#ebcb8b",
-      blue: "#81a1c1",
-      magenta: "#b48ead",
-      cyan: "#88c0d0",
-      white: "#e5e9f0",
-      brightBlack: "#4c566a",
-      brightRed: "#bf616a",
-      brightGreen: "#a3be8c",
-      brightYellow: "#ebcb8b",
-      brightBlue: "#81a1c1",
-      brightMagenta: "#b48ead",
-      brightCyan: "#8fbcbb",
-      brightWhite: "#eceff4",
-    },
-  },
-
-  gruvboxDark: {
-    name: "Gruvbox Dark",
-    category: "dark",
-    colors: {
-      background: "#282828",
-      foreground: "#ebdbb2",
-      cursor: "#ebdbb2",
-      cursorAccent: "#282828",
-      selectionBackground: "#504945",
-      black: "#282828",
-      red: "#cc241d",
-      green: "#98971a",
-      yellow: "#d79921",
-      blue: "#458588",
-      magenta: "#b16286",
-      cyan: "#689d6a",
-      white: "#a89984",
-      brightBlack: "#928374",
-      brightRed: "#fb4934",
-      brightGreen: "#b8bb26",
-      brightYellow: "#fabd2f",
-      brightBlue: "#83a598",
-      brightMagenta: "#d3869b",
-      brightCyan: "#8ec07c",
-      brightWhite: "#ebdbb2",
-    },
-  },
-
-  gruvboxLight: {
-    name: "Gruvbox Light",
-    category: "light",
-    colors: {
-      background: "#fbf1c7",
-      foreground: "#3c3836",
-      cursor: "#3c3836",
-      cursorAccent: "#fbf1c7",
-      selectionBackground: "#d5c4a1",
-      black: "#fbf1c7",
-      red: "#cc241d",
-      green: "#98971a",
-      yellow: "#d79921",
-      blue: "#458588",
-      magenta: "#b16286",
-      cyan: "#689d6a",
-      white: "#7c6f64",
-      brightBlack: "#928374",
-      brightRed: "#9d0006",
-      brightGreen: "#79740e",
-      brightYellow: "#b57614",
-      brightBlue: "#076678",
-      brightMagenta: "#8f3f71",
-      brightCyan: "#427b58",
-      brightWhite: "#3c3836",
-    },
-  },
-
-  solarizedDark: {
-    name: "Solarized Dark",
-    category: "dark",
-    colors: {
-      background: "#002b36",
-      foreground: "#839496",
-      cursor: "#839496",
-      cursorAccent: "#002b36",
-      selectionBackground: "#073642",
-      black: "#073642",
-      red: "#dc322f",
-      green: "#859900",
-      yellow: "#b58900",
-      blue: "#268bd2",
-      magenta: "#d33682",
-      cyan: "#2aa198",
-      white: "#eee8d5",
-      brightBlack: "#002b36",
-      brightRed: "#cb4b16",
-      brightGreen: "#586e75",
-      brightYellow: "#657b83",
-      brightBlue: "#839496",
-      brightMagenta: "#6c71c4",
-      brightCyan: "#93a1a1",
-      brightWhite: "#fdf6e3",
-    },
-  },
-
-  solarizedLight: {
-    name: "Solarized Light",
-    category: "light",
-    colors: {
-      background: "#fdf6e3",
-      foreground: "#657b83",
-      cursor: "#657b83",
-      cursorAccent: "#fdf6e3",
-      selectionBackground: "#eee8d5",
-      black: "#073642",
-      red: "#dc322f",
-      green: "#859900",
-      yellow: "#b58900",
-      blue: "#268bd2",
-      magenta: "#d33682",
-      cyan: "#2aa198",
-      white: "#eee8d5",
-      brightBlack: "#002b36",
-      brightRed: "#cb4b16",
-      brightGreen: "#586e75",
-      brightYellow: "#657b83",
-      brightBlue: "#839496",
-      brightMagenta: "#6c71c4",
-      brightCyan: "#93a1a1",
-      brightWhite: "#fdf6e3",
-    },
-  },
-
-  oneDark: {
-    name: "One Dark",
-    category: "dark",
-    colors: {
-      background: "#282c34",
-      foreground: "#abb2bf",
-      cursor: "#528bff",
-      cursorAccent: "#282c34",
-      selectionBackground: "#3e4451",
-      black: "#282c34",
-      red: "#e06c75",
-      green: "#98c379",
-      yellow: "#e5c07b",
-      blue: "#61afef",
-      magenta: "#c678dd",
-      cyan: "#56b6c2",
-      white: "#abb2bf",
-      brightBlack: "#5c6370",
-      brightRed: "#e06c75",
-      brightGreen: "#98c379",
-      brightYellow: "#e5c07b",
-      brightBlue: "#61afef",
-      brightMagenta: "#c678dd",
-      brightCyan: "#56b6c2",
-      brightWhite: "#ffffff",
-    },
-  },
-
-  tokyoNight: {
-    name: "Tokyo Night",
-    category: "dark",
-    colors: {
-      background: "#1a1b26",
-      foreground: "#a9b1d6",
-      cursor: "#a9b1d6",
-      cursorAccent: "#1a1b26",
-      selectionBackground: "#283457",
-      black: "#15161e",
-      red: "#f7768e",
-      green: "#9ece6a",
-      yellow: "#e0af68",
-      blue: "#7aa2f7",
-      magenta: "#bb9af7",
-      cyan: "#7dcfff",
-      white: "#a9b1d6",
-      brightBlack: "#414868",
-      brightRed: "#f7768e",
-      brightGreen: "#9ece6a",
-      brightYellow: "#e0af68",
-      brightBlue: "#7aa2f7",
-      brightMagenta: "#bb9af7",
-      brightCyan: "#7dcfff",
-      brightWhite: "#c0caf5",
-    },
-  },
-
-  ayuDark: {
-    name: "Ayu Dark",
-    category: "dark",
-    colors: {
-      background: "#0a0e14",
-      foreground: "#b3b1ad",
-      cursor: "#e6b450",
-      cursorAccent: "#0a0e14",
-      selectionBackground: "#253340",
-      black: "#01060e",
-      red: "#ea6c73",
-      green: "#91b362",
-      yellow: "#f9af4f",
-      blue: "#53bdfa",
-      magenta: "#fae994",
-      cyan: "#90e1c6",
-      white: "#c7c7c7",
-      brightBlack: "#686868",
-      brightRed: "#f07178",
-      brightGreen: "#c2d94c",
-      brightYellow: "#ffb454",
-      brightBlue: "#59c2ff",
-      brightMagenta: "#ffee99",
-      brightCyan: "#95e6cb",
-      brightWhite: "#ffffff",
-    },
-  },
-
-  ayuLight: {
-    name: "Ayu Light",
-    category: "light",
-    colors: {
-      background: "#fafafa",
-      foreground: "#5c6166",
-      cursor: "#ff9940",
-      cursorAccent: "#fafafa",
-      selectionBackground: "#d1e4f4",
-      black: "#000000",
-      red: "#f51818",
-      green: "#86b300",
-      yellow: "#f2ae49",
-      blue: "#399ee6",
-      magenta: "#a37acc",
-      cyan: "#4cbf99",
-      white: "#c7c7c7",
-      brightBlack: "#686868",
-      brightRed: "#ff3333",
-      brightGreen: "#b8e532",
-      brightYellow: "#ffc849",
-      brightBlue: "#59c2ff",
-      brightMagenta: "#bf7ce0",
-      brightCyan: "#5cf7a0",
-      brightWhite: "#ffffff",
-    },
-  },
-
-  materialTheme: {
-    name: "Material Theme",
-    category: "dark",
-    colors: {
-      background: "#263238",
-      foreground: "#eeffff",
-      cursor: "#ffcc00",
-      cursorAccent: "#263238",
-      selectionBackground: "#546e7a",
-      black: "#000000",
-      red: "#e53935",
-      green: "#91b859",
-      yellow: "#ffb62c",
-      blue: "#6182b8",
-      magenta: "#7c4dff",
-      cyan: "#39adb5",
-      white: "#ffffff",
-      brightBlack: "#546e7a",
-      brightRed: "#ff5370",
-      brightGreen: "#c3e88d",
-      brightYellow: "#ffcb6b",
-      brightBlue: "#82aaff",
-      brightMagenta: "#c792ea",
-      brightCyan: "#89ddff",
-      brightWhite: "#ffffff",
-    },
-  },
-
-  palenight: {
-    name: "Palenight",
-    category: "dark",
-    colors: {
-      background: "#292d3e",
-      foreground: "#a6accd",
-      cursor: "#ffcc00",
-      cursorAccent: "#292d3e",
-      selectionBackground: "#676e95",
-      black: "#292d3e",
-      red: "#f07178",
-      green: "#c3e88d",
-      yellow: "#ffcb6b",
-      blue: "#82aaff",
-      magenta: "#c792ea",
-      cyan: "#89ddff",
-      white: "#d0d0d0",
-      brightBlack: "#434758",
-      brightRed: "#ff8b92",
-      brightGreen: "#ddffa7",
-      brightYellow: "#ffe585",
-      brightBlue: "#9cc4ff",
-      brightMagenta: "#e1acff",
-      brightCyan: "#a3f7ff",
-      brightWhite: "#ffffff",
-    },
-  },
-
-  oceanicNext: {
-    name: "Oceanic Next",
-    category: "dark",
-    colors: {
-      background: "#1b2b34",
-      foreground: "#cdd3de",
-      cursor: "#c0c5ce",
-      cursorAccent: "#1b2b34",
-      selectionBackground: "#343d46",
-      black: "#343d46",
-      red: "#ec5f67",
-      green: "#99c794",
-      yellow: "#fac863",
-      blue: "#6699cc",
-      magenta: "#c594c5",
-      cyan: "#5fb3b3",
-      white: "#cdd3de",
-      brightBlack: "#65737e",
-      brightRed: "#ec5f67",
-      brightGreen: "#99c794",
-      brightYellow: "#fac863",
-      brightBlue: "#6699cc",
-      brightMagenta: "#c594c5",
-      brightCyan: "#5fb3b3",
-      brightWhite: "#d8dee9",
-    },
-  },
-
-  nightOwl: {
-    name: "Night Owl",
-    category: "dark",
-    colors: {
-      background: "#011627",
-      foreground: "#d6deeb",
-      cursor: "#80a4c2",
-      cursorAccent: "#011627",
-      selectionBackground: "#1d3b53",
-      black: "#011627",
-      red: "#ef5350",
-      green: "#22da6e",
-      yellow: "#c5e478",
-      blue: "#82aaff",
-      magenta: "#c792ea",
-      cyan: "#21c7a8",
-      white: "#ffffff",
-      brightBlack: "#575656",
-      brightRed: "#ef5350",
-      brightGreen: "#22da6e",
-      brightYellow: "#ffeb95",
-      brightBlue: "#82aaff",
-      brightMagenta: "#c792ea",
-      brightCyan: "#7fdbca",
-      brightWhite: "#ffffff",
-    },
-  },
-
-  synthwave84: {
-    name: "Synthwave '84",
-    category: "colorful",
-    colors: {
-      background: "#241b2f",
-      foreground: "#f92aad",
-      cursor: "#f92aad",
-      cursorAccent: "#241b2f",
-      selectionBackground: "#495495",
-      black: "#000000",
-      red: "#f6188f",
-      green: "#1eff8e",
-      yellow: "#ffe261",
-      blue: "#03edf9",
-      magenta: "#f10596",
-      cyan: "#03edf9",
-      white: "#ffffff",
-      brightBlack: "#5a5a5a",
-      brightRed: "#ff1a8e",
-      brightGreen: "#1eff8e",
-      brightYellow: "#ffff00",
-      brightBlue: "#00d8ff",
-      brightMagenta: "#ff00d4",
-      brightCyan: "#00ffff",
-      brightWhite: "#ffffff",
-    },
-  },
-
-  cobalt2: {
-    name: "Cobalt2",
-    category: "dark",
-    colors: {
-      background: "#193549",
-      foreground: "#ffffff",
-      cursor: "#f0cc09",
-      cursorAccent: "#193549",
-      selectionBackground: "#0050a4",
-      black: "#000000",
-      red: "#ff0000",
-      green: "#38de21",
-      yellow: "#ffe50a",
-      blue: "#1460d2",
-      magenta: "#ff005d",
-      cyan: "#00bbbb",
-      white: "#bbbbbb",
-      brightBlack: "#555555",
-      brightRed: "#f40e17",
-      brightGreen: "#3bd01d",
-      brightYellow: "#edc809",
-      brightBlue: "#5555ff",
-      brightMagenta: "#ff55ff",
-      brightCyan: "#6ae3fa",
-      brightWhite: "#ffffff",
-    },
-  },
-
-  snazzy: {
-    name: "Snazzy",
-    category: "dark",
-    colors: {
-      background: "#282a36",
-      foreground: "#eff0eb",
-      cursor: "#97979b",
-      cursorAccent: "#282a36",
-      selectionBackground: "#97979b",
-      black: "#282a36",
-      red: "#ff5c57",
-      green: "#5af78e",
-      yellow: "#f3f99d",
-      blue: "#57c7ff",
-      magenta: "#ff6ac1",
-      cyan: "#9aedfe",
-      white: "#f1f1f0",
-      brightBlack: "#686868",
-      brightRed: "#ff5c57",
-      brightGreen: "#5af78e",
-      brightYellow: "#f3f99d",
-      brightBlue: "#57c7ff",
-      brightMagenta: "#ff6ac1",
-      brightCyan: "#9aedfe",
-      brightWhite: "#eff0eb",
-    },
-  },
-
-  atomOneDark: {
-    name: "Atom One Dark",
-    category: "dark",
-    colors: {
-      background: "#1e2127",
-      foreground: "#abb2bf",
-      cursor: "#528bff",
-      cursorAccent: "#1e2127",
-      selectionBackground: "#3e4451",
-      black: "#000000",
-      red: "#e06c75",
-      green: "#98c379",
-      yellow: "#d19a66",
-      blue: "#61afef",
-      magenta: "#c678dd",
-      cyan: "#56b6c2",
-      white: "#abb2bf",
-      brightBlack: "#5c6370",
-      brightRed: "#e06c75",
-      brightGreen: "#98c379",
-      brightYellow: "#d19a66",
-      brightBlue: "#61afef",
-      brightMagenta: "#c678dd",
-      brightCyan: "#56b6c2",
-      brightWhite: "#ffffff",
-    },
-  },
-
-  catppuccinMocha: {
-    name: "Catppuccin Mocha",
-    category: "dark",
-    colors: {
-      background: "#1e1e2e",
-      foreground: "#cdd6f4",
-      cursor: "#f5e0dc",
-      cursorAccent: "#1e1e2e",
-      selectionBackground: "#585b70",
-      black: "#45475a",
-      red: "#f38ba8",
-      green: "#a6e3a1",
-      yellow: "#f9e2af",
-      blue: "#89b4fa",
-      magenta: "#f5c2e7",
-      cyan: "#94e2d5",
-      white: "#bac2de",
-      brightBlack: "#585b70",
-      brightRed: "#f38ba8",
-      brightGreen: "#a6e3a1",
-      brightYellow: "#f9e2af",
-      brightBlue: "#89b4fa",
-      brightMagenta: "#f5c2e7",
-      brightCyan: "#94e2d5",
-      brightWhite: "#a6adc8",
-    },
-  },
-
-  gentlemansChoice: {
-    name: "Gentleman's Choice",
-    category: "dark",
-    colors: {
-      background: "#1a1c1a",
-      foreground: "#d1c7a3",
-      cursor: "#d1c7a3",
-      cursorAccent: "#1a1c1a",
-      selectionBackground: "#3e4437",
-      black: "#1a1c1a",
-      red: "#9d3a3a",
-      green: "#5a7a3a",
-      yellow: "#b39a3a",
-      blue: "#3a5a7a",
-      magenta: "#7a3a5a",
-      cyan: "#3a7a7a",
-      white: "#d1c7a3",
-      brightBlack: "#3e4437",
-      brightRed: "#bf4a4a",
-      brightGreen: "#7a9a4a",
-      brightYellow: "#d1b34a",
-      brightBlue: "#4a7abf",
-      brightMagenta: "#9a4abf",
-      brightCyan: "#4abfbf",
-      brightWhite: "#e3dbc3",
-    },
-  },
-
-  midnightEspresso: {
-    name: "Midnight Espresso",
-    category: "dark",
-    colors: {
-      background: "#120f0d",
-      foreground: "#ceb195",
-      cursor: "#ceb195",
-      cursorAccent: "#120f0d",
-      selectionBackground: "#3d2b1f",
-      black: "#120f0d",
-      red: "#a05a4a",
-      green: "#7a8a5a",
-      yellow: "#b08a4a",
-      blue: "#5a7a9a",
-      magenta: "#8a5a7a",
-      cyan: "#5a8a8a",
-      white: "#ceb195",
-      brightBlack: "#3d2b1f",
-      brightRed: "#c07a6a",
-      brightGreen: "#9aaa7a",
-      brightYellow: "#d0aa6a",
-      brightBlue: "#7a9aba",
-      brightMagenta: "#aa7aba",
-      brightCyan: "#7ababa",
-      brightWhite: "#e0cbb5",
-    },
-  },
-
-  custom: {
-    name: "Custom",
-    category: "dark",
-    colors: {
-      background: "#0c0d0b",
-      foreground: "#f7f7f7",
-      cursor: "#f7f7f7",
-      cursorAccent: "#0c0d0b",
-      selectionBackground: "#3a3a3d",
-      black: "#2e3436",
-      red: "#cc0000",
-      green: "#4e9a06",
-      yellow: "#c4a000",
-      blue: "#3465a4",
-      magenta: "#75507b",
-      cyan: "#06989a",
-      white: "#d3d7cf",
-      brightBlack: "#555753",
-      brightRed: "#ef2929",
-      brightGreen: "#8ae234",
-      brightYellow: "#fce94f",
-      brightBlue: "#729fcf",
-      brightMagenta: "#ad7fa8",
-      brightCyan: "#34e2e2",
-      brightWhite: "#eeeeec",
-    },
-  },
-};
-
-export const TERMINAL_FONTS = [
-  {
-    value: "Caskaydia Cove Nerd Font Mono",
-    label: "Caskaydia Cove Nerd Font Mono",
-    fallback:
-      '"Caskaydia Cove Nerd Font Mono", "SF Mono", Consolas, "Liberation Mono", monospace',
-  },
-  {
-    value: "JetBrains Mono",
-    label: "JetBrains Mono",
-    fallback:
-      '"JetBrains Mono", "SF Mono", Consolas, "Liberation Mono", monospace',
-  },
-  {
-    value: "Fira Code",
-    label: "Fira Code",
-    fallback: '"Fira Code", "SF Mono", Consolas, "Liberation Mono", monospace',
-  },
-  {
-    value: "Cascadia Code",
-    label: "Cascadia Code",
-    fallback:
-      '"Cascadia Code", "SF Mono", Consolas, "Liberation Mono", monospace',
-  },
-  {
-    value: "Source Code Pro",
-    label: "Source Code Pro",
-    fallback:
-      '"Source Code Pro", "SF Mono", Consolas, "Liberation Mono", monospace',
-  },
-  {
-    value: "SF Mono",
-    label: "SF Mono",
-    fallback: '"SF Mono", Consolas, "Liberation Mono", monospace',
-  },
-  {
-    value: "Consolas",
-    label: "Consolas",
-    fallback: 'Consolas, "Liberation Mono", monospace',
-  },
-  {
-    value: "Monaco",
-    label: "Monaco",
-    fallback: 'Monaco, "Liberation Mono", monospace',
-  },
-];
-
-// Unknown values are treated as a custom font installed on the user's system.
-export function resolveTerminalFontFamily(fontFamily?: string): string {
-  const known = TERMINAL_FONTS.find((f) => f.value === fontFamily);
-  if (known) return known.fallback;
-  if (fontFamily && fontFamily.trim()) {
-    return `"${fontFamily.trim()}", "SF Mono", Consolas, "Liberation Mono", monospace`;
-  }
-  return TERMINAL_FONTS[0].fallback;
-}
-
-export const CURSOR_STYLES = [
-  { value: "block", label: "Block", labelKey: "hosts.cursorStyleBlock" },
-  {
-    value: "underline",
-    label: "Underline",
-    labelKey: "hosts.cursorStyleUnderline",
-  },
-  { value: "bar", label: "Bar", labelKey: "hosts.cursorStyleBar" },
-] as const;
-
-export const BELL_STYLES = [
-  { value: "none", label: "None", labelKey: "hosts.bellStyleNone" },
-  { value: "sound", label: "Sound", labelKey: "hosts.bellStyleSound" },
-  { value: "visual", label: "Visual", labelKey: "hosts.bellStyleVisual" },
-  { value: "both", label: "Both", labelKey: "hosts.bellStyleBoth" },
-] as const;
-
-export const FAST_SCROLL_MODIFIERS = [
-  { value: "alt", label: "Alt", labelKey: "hosts.fastScrollModifierAlt" },
-  { value: "ctrl", label: "Ctrl", labelKey: "hosts.fastScrollModifierCtrl" },
-  { value: "shift", label: "Shift", labelKey: "hosts.fastScrollModifierShift" },
-] as const;
-
-/** A terminal's full configuration before anything is overridden. */
-export const DEFAULT_TERMINAL_CONFIG = {
-  ...DEFAULT_APPEARANCE,
-  ...DEFAULT_BEHAVIOR,
-  moshCommand: DEFAULT_MOSH_COMMAND,
-};
-
-export type TerminalConfigType = typeof DEFAULT_TERMINAL_CONFIG;
diff --git a/plugins/ssh-terminal/src/frontend/look/theme-preview.ts b/plugins/ssh-terminal/src/frontend/look/theme-preview.ts
deleted file mode 100644
index 72c1e2e05..000000000
--- a/plugins/ssh-terminal/src/frontend/look/theme-preview.ts
+++ /dev/null
@@ -1,30 +0,0 @@
-import { useSyncExternalStore } from "react";
-
-/**
- * The terminal theme the host editor is previewing, so an open terminal for
- * that host can show it before the host is saved. Null when nothing is being
- * previewed.
- */
-let preview: string | null = null;
-const listeners = new Set<() => void>();
-
-export function setThemePreview(theme: string | null): void {
-  if (theme === preview) return;
-  preview = theme;
-  for (const listener of listeners) listener();
-}
-
-function subscribe(listener: () => void): () => void {
-  listeners.add(listener);
-  return () => {
-    listeners.delete(listener);
-  };
-}
-
-export function useThemePreview(): string | null {
-  return useSyncExternalStore(
-    subscribe,
-    () => preview,
-    () => preview,
-  );
-}
diff --git a/plugins/ssh-terminal/src/frontend/macros/MacrosPanel.tsx b/plugins/ssh-terminal/src/frontend/macros/MacrosPanel.tsx
deleted file mode 100644
index 3be0fb144..000000000
--- a/plugins/ssh-terminal/src/frontend/macros/MacrosPanel.tsx
+++ /dev/null
@@ -1,864 +0,0 @@
-import {
-  useCallback,
-  useEffect,
-  useMemo,
-  useRef,
-  useState,
-  useSyncExternalStore,
-} from "react";
-import {
-  useSettings,
-  useTranslation,
-  type PanelProps,
-} from "@termix/plugin-sdk/frontend";
-import {
-  ArrowLeft,
-  Braces,
-  ChevronDown,
-  Clock,
-  CornerDownRight,
-  GitBranch,
-  Plus,
-  Repeat,
-  Save,
-  Square,
-  Terminal as TerminalIcon,
-  Trash2,
-  Play,
-} from "lucide-react";
-import { toast } from "sonner";
-import {
-  Button,
-  Input,
-  Textarea,
-  Checkbox,
-  EmptyState,
-  AlertDialog,
-  AlertDialogAction,
-  AlertDialogCancel,
-  AlertDialogContent,
-  AlertDialogDescription,
-  AlertDialogFooter,
-  AlertDialogHeader,
-  AlertDialogTitle,
-  DropdownMenu,
-  DropdownMenuContent,
-  DropdownMenuItem,
-  DropdownMenuTrigger,
-} from "@termix/plugin-sdk/ui";
-import {
-  mergeLocalMacros,
-  sanitizeTerminalMacros,
-  runTerminalMacro,
-  type MacroStep,
-  type TerminalMacro,
-} from "./terminal-macros";
-import {
-  getSessionHandle,
-  sessionsSnapshot,
-  subscribeSessions,
-} from "../session-registry";
-
-function getErrorMessage(error: unknown): string {
-  return error instanceof Error ? error.message : "";
-}
-
-const STEP_TYPES = ["send", "wait", "delay", "if", "repeat"] as const;
-
-const STEP_ICONS = {
-  send: TerminalIcon,
-  wait: CornerDownRight,
-  delay: Clock,
-  if: GitBranch,
-  repeat: Repeat,
-} as const;
-
-function id(): string {
-  return typeof crypto.randomUUID === "function"
-    ? crypto.randomUUID()
-    : `${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}`;
-}
-
-function createStep(type: MacroStep["type"]): MacroStep {
-  const stepId = id();
-  switch (type) {
-    case "send":
-      return { id: stepId, type, text: "", pressEnter: true };
-    case "delay":
-      return { id: stepId, type, milliseconds: 1000 };
-    case "wait":
-      return {
-        id: stepId,
-        type,
-        pattern: "",
-        isRegex: false,
-        timeoutMs: 10_000,
-        onTimeout: "stop",
-      };
-    case "if":
-      return {
-        id: stepId,
-        type,
-        pattern: "",
-        isRegex: false,
-        then: [],
-        else: [],
-      };
-    case "repeat":
-      return { id: stepId, type, count: 2, steps: [] };
-  }
-}
-
-function isValidRegex(pattern: string): boolean {
-  try {
-    new RegExp(pattern);
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-/** Milliseconds are an implementation detail, so the editor works in seconds. */
-function SecondsInput({
-  valueMs,
-  onChangeMs,
-  minMs,
-  label,
-}: {
-  valueMs: number;
-  onChangeMs: (ms: number) => void;
-  minMs: number;
-  label: string;
-}) {
-  const { t } = useTranslation();
-  return (
-    <label className="flex items-center gap-2 text-xs">
-      <span className="text-muted-foreground">{label}</span>
-      <Input
-        className="h-7 w-20 rounded-none text-xs"
-        type="number"
-        min={minMs / 1000}
-        max={300}
-        step={0.5}
-        value={valueMs / 1000}
-        onChange={(event) => {
-          const seconds = Number(event.target.value);
-          onChangeMs(
-            Number.isFinite(seconds)
-              ? Math.max(minMs, Math.min(300_000, Math.round(seconds * 1000)))
-              : minMs,
-          );
-        }}
-      />
-      <span className="text-muted-foreground">{t("macros.seconds")}</span>
-    </label>
-  );
-}
-
-/** Shared text/regex matcher field used by both "wait" and "if". */
-function MatchField({
-  pattern,
-  isRegex,
-  label,
-  placeholder,
-  onChange,
-}: {
-  pattern: string;
-  isRegex: boolean;
-  label: string;
-  placeholder: string;
-  onChange: (next: { pattern?: string; isRegex?: boolean }) => void;
-}) {
-  const { t } = useTranslation();
-  const badRegex = isRegex && pattern.length > 0 && !isValidRegex(pattern);
-
-  return (
-    <div className="space-y-1.5">
-      <div className="text-xs text-muted-foreground">{label}</div>
-      <Input
-        className={`h-8 rounded-none font-mono text-xs ${
-          badRegex ? "border-destructive" : ""
-        }`}
-        placeholder={placeholder}
-        value={pattern}
-        onChange={(event) => onChange({ pattern: event.target.value })}
-      />
-      {badRegex && (
-        <div className="text-[11px] text-destructive">
-          {t("macros.match.invalidRegex")}
-        </div>
-      )}
-      <label className="flex items-center gap-2 text-[11px] text-muted-foreground">
-        <Checkbox
-          checked={isRegex}
-          onCheckedChange={(checked) => onChange({ isRegex: checked === true })}
-        />
-        {t("macros.match.useRegex")}
-      </label>
-    </div>
-  );
-}
-
-function AddStepMenu({
-  onAdd,
-  compact,
-}: {
-  onAdd: (type: MacroStep["type"]) => void;
-  compact?: boolean;
-}) {
-  const { t } = useTranslation();
-  return (
-    <DropdownMenu>
-      <DropdownMenuTrigger asChild>
-        <Button
-          size="sm"
-          variant="outline"
-          className={`rounded-none ${compact ? "h-7 text-[11px]" : "h-8 w-full text-xs"}`}
-        >
-          <Plus className="mr-1 size-3" />
-          {t("macros.addStep")}
-          <ChevronDown className="ml-1 size-3" />
-        </Button>
-      </DropdownMenuTrigger>
-      <DropdownMenuContent align="start" className="w-72 rounded-none">
-        {STEP_TYPES.map((type) => {
-          const Icon = STEP_ICONS[type];
-          return (
-            <DropdownMenuItem
-              key={type}
-              className="flex-col items-start gap-0.5 rounded-none"
-              onSelect={() => onAdd(type)}
-            >
-              <span className="flex items-center gap-2 text-xs font-medium">
-                <Icon className="size-3.5" />
-                {t(`macros.stepTypes.${type}.label`)}
-              </span>
-              <span className="pl-5 text-[11px] leading-snug text-muted-foreground">
-                {t(`macros.stepTypes.${type}.help`)}
-              </span>
-            </DropdownMenuItem>
-          );
-        })}
-      </DropdownMenuContent>
-    </DropdownMenu>
-  );
-}
-
-function StepList({
-  steps,
-  onChange,
-  depth = 0,
-}: {
-  steps: MacroStep[];
-  onChange: (steps: MacroStep[]) => void;
-  depth?: number;
-}) {
-  const { t } = useTranslation();
-
-  const update = (index: number, step: MacroStep) => {
-    const next = [...steps];
-    next[index] = step;
-    onChange(next);
-  };
-
-  return (
-    <div className="flex flex-col gap-2">
-      {steps.map((step, index) => {
-        const Icon = STEP_ICONS[step.type];
-        return (
-          <div key={step.id} className="border border-border bg-muted/20">
-            <div className="flex items-center gap-2 border-b border-border/60 px-2 py-1.5">
-              <Icon className="size-3.5 shrink-0 text-muted-foreground" />
-              <span className="text-xs font-medium">
-                {t(`macros.stepTypes.${step.type}.label`)}
-              </span>
-              <Button
-                size="icon"
-                variant="ghost"
-                className="ml-auto size-6 rounded-none"
-                aria-label={t("macros.removeStep")}
-                onClick={() => onChange(steps.filter((_, i) => i !== index))}
-              >
-                <Trash2 className="size-3" />
-              </Button>
-            </div>
-
-            <div className="space-y-2 p-2">
-              {step.type === "send" && (
-                <div className="space-y-2">
-                  <Textarea
-                    className="min-h-16 rounded-none font-mono text-xs"
-                    placeholder={t("macros.send.textPlaceholder")}
-                    value={step.text}
-                    onChange={(event) =>
-                      update(index, { ...step, text: event.target.value })
-                    }
-                  />
-                  <label className="flex items-center gap-2 text-[11px] text-muted-foreground">
-                    <Checkbox
-                      checked={step.pressEnter}
-                      onCheckedChange={(checked) =>
-                        update(index, { ...step, pressEnter: checked === true })
-                      }
-                    />
-                    {t("macros.send.pressEnter")}
-                  </label>
-                </div>
-              )}
-
-              {step.type === "delay" && (
-                <SecondsInput
-                  label={t("macros.delay.duration")}
-                  valueMs={step.milliseconds}
-                  minMs={0}
-                  onChangeMs={(milliseconds) =>
-                    update(index, { ...step, milliseconds })
-                  }
-                />
-              )}
-
-              {step.type === "wait" && (
-                <div className="space-y-2">
-                  <MatchField
-                    pattern={step.pattern}
-                    isRegex={step.isRegex !== false}
-                    label={t("macros.wait.pattern")}
-                    placeholder={t("macros.wait.patternPlaceholder")}
-                    onChange={(next) => update(index, { ...step, ...next })}
-                  />
-                  <SecondsInput
-                    label={t("macros.wait.timeout")}
-                    valueMs={step.timeoutMs}
-                    minMs={100}
-                    onChangeMs={(timeoutMs) =>
-                      update(index, { ...step, timeoutMs })
-                    }
-                  />
-                  <div className="space-y-1">
-                    <div className="text-xs text-muted-foreground">
-                      {t("macros.wait.onTimeout")}
-                    </div>
-                    <div className="flex gap-1">
-                      {(["stop", "continue"] as const).map((mode) => (
-                        <Button
-                          key={mode}
-                          size="sm"
-                          variant={
-                            step.onTimeout === mode ? "default" : "outline"
-                          }
-                          className="h-7 flex-1 rounded-none text-[11px]"
-                          onClick={() =>
-                            update(index, { ...step, onTimeout: mode })
-                          }
-                        >
-                          {t(`macros.wait.${mode}`)}
-                        </Button>
-                      ))}
-                    </div>
-                  </div>
-                </div>
-              )}
-
-              {step.type === "if" && (
-                <div className="space-y-3">
-                  <MatchField
-                    pattern={step.pattern}
-                    isRegex={step.isRegex !== false}
-                    label={t("macros.ifStep.pattern")}
-                    placeholder={t("macros.ifStep.patternPlaceholder")}
-                    onChange={(next) => update(index, { ...step, ...next })}
-                  />
-                  <div className="border-l-2 border-emerald-500/40 pl-2">
-                    <div className="mb-1 text-[11px] font-medium text-emerald-500">
-                      {t("macros.ifStep.then")}
-                    </div>
-                    <StepList
-                      steps={step.then}
-                      depth={depth + 1}
-                      onChange={(then) => update(index, { ...step, then })}
-                    />
-                  </div>
-                  <div className="border-l-2 border-amber-500/40 pl-2">
-                    <div className="mb-1 text-[11px] font-medium text-amber-500">
-                      {t("macros.ifStep.else")}
-                    </div>
-                    <StepList
-                      steps={step.else}
-                      depth={depth + 1}
-                      onChange={(elseSteps) =>
-                        update(index, { ...step, else: elseSteps })
-                      }
-                    />
-                  </div>
-                </div>
-              )}
-
-              {step.type === "repeat" && (
-                <div className="space-y-2">
-                  <label className="flex items-center gap-2 text-xs">
-                    <span className="text-muted-foreground">
-                      {t("macros.repeat.count")}
-                    </span>
-                    <Input
-                      className="h-7 w-20 rounded-none text-xs"
-                      type="number"
-                      min={1}
-                      max={100}
-                      value={step.count}
-                      onChange={(event) =>
-                        update(index, {
-                          ...step,
-                          count: Math.max(
-                            1,
-                            Math.min(100, Number(event.target.value) || 1),
-                          ),
-                        })
-                      }
-                    />
-                    <span className="text-muted-foreground">
-                      {t("macros.repeat.times")}
-                    </span>
-                  </label>
-                  <div className="border-l-2 border-border pl-2">
-                    <StepList
-                      steps={step.steps}
-                      depth={depth + 1}
-                      onChange={(nested) =>
-                        update(index, { ...step, steps: nested })
-                      }
-                    />
-                  </div>
-                </div>
-              )}
-            </div>
-          </div>
-        );
-      })}
-
-      {depth < 4 && (
-        <AddStepMenu
-          compact={depth > 0}
-          onAdd={(type) => onChange([...steps, createStep(type)])}
-        />
-      )}
-    </div>
-  );
-}
-
-/**
- * Macros: a saved series of steps typed into the terminal the user is
- * working in, waiting for and branching on what the server sends back.
- * They are the user's own setting, so they follow them to every browser.
- */
-export function MacrosPanel({ targetTab }: PanelProps) {
-  const { t } = useTranslation();
-  const settings = useSettings("user");
-  const [draft, setDraft] = useState<TerminalMacro | null>(null);
-  const [dirty, setDirty] = useState(false);
-  const [runningId, setRunningId] = useState<string | null>(null);
-  const [pendingDelete, setPendingDelete] = useState<TerminalMacro | null>(
-    null,
-  );
-  const [pendingRun, setPendingRun] = useState<TerminalMacro | null>(null);
-  const abortRef = useRef<AbortController | null>(null);
-  const confirmedRef = useRef<Set<string>>(new Set());
-  const movedLocalRef = useRef(false);
-  const sessions = useSyncExternalStore(subscribeSessions, sessionsSnapshot);
-
-  const macros = useMemo(
-    () => sanitizeTerminalMacros(settings.values.macros),
-    [settings.values.macros],
-  );
-  const { save: saveSettings } = settings;
-
-  useEffect(() => () => abortRef.current?.abort(), []);
-
-  // Macros a browser kept before 2.9.0 move into the setting once.
-  useEffect(() => {
-    if (!settings.loaded || movedLocalRef.current) return;
-    movedLocalRef.current = true;
-    const merged = mergeLocalMacros(macros);
-    if (!merged) return;
-    saveSettings({ macros: merged.macros })
-      .then(merged.clear)
-      .catch(() => toast.error(t("macros.saveFailed")));
-  }, [settings.loaded, macros, saveSettings, t]);
-
-  const target = useMemo(
-    () =>
-      sessions.find((session) => session.id === targetTab?.id) ?? sessions[0],
-    [sessions, targetTab?.id],
-  );
-
-  const updateDraft = useCallback((next: TerminalMacro) => {
-    setDraft(next);
-    setDirty(true);
-  }, []);
-
-  const createMacro = () => {
-    const now = new Date().toISOString();
-    setDraft({
-      id: id(),
-      name: "",
-      description: "",
-      steps: [],
-      createdAt: now,
-      updatedAt: now,
-    });
-    setDirty(true);
-  };
-
-  const persist = async (next: TerminalMacro[]) => {
-    await saveSettings({ macros: next });
-  };
-
-  const save = async () => {
-    if (!draft) return;
-    if (!draft.name.trim()) {
-      toast.error(t("macros.nameRequired"));
-      return;
-    }
-    const saved: TerminalMacro = {
-      ...draft,
-      name: draft.name.trim(),
-      updatedAt: new Date().toISOString(),
-    };
-    try {
-      await persist(
-        macros.some((macro) => macro.id === saved.id)
-          ? macros.map((macro) => (macro.id === saved.id ? saved : macro))
-          : [...macros, saved],
-      );
-      setDraft(saved);
-      setDirty(false);
-      toast.success(t("macros.saved"));
-    } catch (error) {
-      toast.error(getErrorMessage(error) || t("macros.saveFailed"));
-    }
-  };
-
-  const confirmDelete = async () => {
-    if (!pendingDelete) return;
-    const next = macros.filter((macro) => macro.id !== pendingDelete.id);
-    try {
-      await persist(next);
-      if (draft?.id === pendingDelete.id) {
-        setDraft(null);
-        setDirty(false);
-      }
-      toast.success(t("macros.deleted"));
-    } catch (error) {
-      toast.error(getErrorMessage(error) || t("macros.saveFailed"));
-    } finally {
-      setPendingDelete(null);
-    }
-  };
-
-  const execute = useCallback(
-    async (macro: TerminalMacro) => {
-      const terminal = target ? getSessionHandle(target.id) : null;
-      if (!terminal?.sendInput || !terminal.subscribeOutput) {
-        toast.error(t("macros.needTerminal"));
-        return;
-      }
-      const controller = new AbortController();
-      abortRef.current = controller;
-      setRunningId(macro.id);
-      try {
-        await runTerminalMacro(
-          macro,
-          { send: terminal.sendInput, subscribe: terminal.subscribeOutput },
-          { signal: controller.signal },
-        );
-        toast.success(t("macros.completed"));
-      } catch (error) {
-        if (!(error instanceof DOMException && error.name === "AbortError")) {
-          toast.error(getErrorMessage(error) || t("macros.failed"));
-        }
-      } finally {
-        abortRef.current = null;
-        setRunningId(null);
-      }
-    },
-    [target, t],
-  );
-
-  const requestRun = (macro: TerminalMacro) => {
-    if (!target || !getSessionHandle(target.id)?.sendInput) {
-      toast.error(t("macros.needTerminal"));
-      return;
-    }
-    if (confirmedRef.current.has(macro.id)) {
-      void execute(macro);
-      return;
-    }
-    setPendingRun(macro);
-  };
-
-  const targetLabel = target?.label ?? t("macros.noTerminal");
-
-  return (
-    <div className="flex h-full min-h-0 flex-col">
-      <div className="flex items-center gap-2 border-b border-border p-3">
-        {draft ? (
-          <Button
-            size="icon"
-            variant="ghost"
-            className="size-7 rounded-none"
-            aria-label={t("macros.back")}
-            onClick={() => {
-              setDraft(null);
-              setDirty(false);
-            }}
-          >
-            <ArrowLeft className="size-4" />
-          </Button>
-        ) : (
-          <Braces className="size-4 shrink-0" />
-        )}
-        <div className="min-w-0 flex-1">
-          <div className="text-sm font-semibold">{t("macros.title")}</div>
-          <div className="truncate text-[11px] text-muted-foreground">
-            {t("macros.target")}: {targetLabel}
-          </div>
-          {!draft && (
-            <a
-              href="https://docs.termix.site/features/terminal/macros"
-              target="_blank"
-              rel="noreferrer"
-              className="text-[10px] text-accent-brand hover:underline"
-            >
-              {t("hosts.docsLink")}
-            </a>
-          )}
-        </div>
-        {!draft && (
-          <Button
-            size="icon"
-            variant="outline"
-            className="size-7 rounded-none"
-            aria-label={t("macros.create")}
-            onClick={createMacro}
-          >
-            <Plus className="size-3.5" />
-          </Button>
-        )}
-      </div>
-
-      <div className="min-h-0 flex-1 overflow-y-auto p-3">
-        {!draft ? (
-          macros.length === 0 ? (
-            <EmptyState
-              icon={Braces}
-              title={t("macros.empty")}
-              hint={t("macros.emptyHint")}
-              action={
-                <Button
-                  size="sm"
-                  variant="outline"
-                  className="mt-1 rounded-none"
-                  onClick={createMacro}
-                >
-                  <Plus className="mr-1 size-3" />
-                  {t("macros.create")}
-                </Button>
-              }
-            />
-          ) : (
-            <div className="flex flex-col gap-1">
-              {macros.map((macro) => {
-                const isRunning = runningId === macro.id;
-                return (
-                  <div
-                    key={macro.id}
-                    className="group flex items-center gap-2 border border-border bg-muted/20 px-2 py-1.5 hover:bg-muted/40"
-                  >
-                    <button
-                      type="button"
-                      className="min-w-0 flex-1 text-left"
-                      onClick={() => {
-                        setDraft(structuredClone(macro));
-                        setDirty(false);
-                      }}
-                    >
-                      <div className="truncate text-xs font-medium">
-                        {macro.name}
-                      </div>
-                      {macro.description && (
-                        <div className="truncate text-[11px] text-muted-foreground">
-                          {macro.description}
-                        </div>
-                      )}
-                    </button>
-                    <Button
-                      size="icon"
-                      variant="ghost"
-                      className="size-6 shrink-0 rounded-none"
-                      aria-label={
-                        isRunning ? t("macros.stop") : t("macros.run")
-                      }
-                      onClick={() =>
-                        isRunning
-                          ? abortRef.current?.abort()
-                          : requestRun(macro)
-                      }
-                    >
-                      {isRunning ? (
-                        <Square className="size-3" />
-                      ) : (
-                        <Play className="size-3" />
-                      )}
-                    </Button>
-                  </div>
-                );
-              })}
-            </div>
-          )
-        ) : (
-          <div className="space-y-3">
-            <div className="space-y-1.5">
-              <div className="text-xs text-muted-foreground">
-                {t("macros.name")}
-              </div>
-              <Input
-                className="h-8 rounded-none text-xs"
-                value={draft.name}
-                placeholder={t("macros.namePlaceholder")}
-                onChange={(event) =>
-                  updateDraft({ ...draft, name: event.target.value })
-                }
-              />
-            </div>
-            <div className="space-y-1.5">
-              <div className="text-xs text-muted-foreground">
-                {t("macros.descriptionLabel")}
-              </div>
-              <Textarea
-                className="min-h-14 rounded-none text-xs"
-                value={draft.description ?? ""}
-                placeholder={t("macros.descriptionPlaceholder")}
-                onChange={(event) =>
-                  updateDraft({ ...draft, description: event.target.value })
-                }
-              />
-            </div>
-
-            {draft.steps.length === 0 && (
-              <div className="border border-dashed border-border px-3 py-4 text-center text-[11px] text-muted-foreground">
-                {t("macros.noSteps")}
-              </div>
-            )}
-            <StepList
-              steps={draft.steps}
-              onChange={(steps) => updateDraft({ ...draft, steps })}
-            />
-
-            <div className="flex items-center gap-2 border-t border-border pt-3">
-              <Button
-                size="sm"
-                variant="destructive"
-                className="rounded-none"
-                onClick={() => setPendingDelete(draft)}
-              >
-                <Trash2 className="mr-1 size-3" />
-                {t("macros.delete")}
-              </Button>
-              <Button
-                size="sm"
-                variant="outline"
-                className="rounded-none"
-                onClick={save}
-              >
-                <Save className="mr-1 size-3" />
-                {t("macros.save")}
-              </Button>
-              <Button
-                size="sm"
-                className="ml-auto rounded-none"
-                onClick={() =>
-                  runningId === draft.id
-                    ? abortRef.current?.abort()
-                    : requestRun(draft)
-                }
-              >
-                {runningId === draft.id ? (
-                  <>
-                    <Square className="mr-1 size-3" />
-                    {t("macros.stop")}
-                  </>
-                ) : (
-                  <>
-                    <Play className="mr-1 size-3" />
-                    {t("macros.run")}
-                  </>
-                )}
-              </Button>
-            </div>
-            {dirty && (
-              <div className="text-[11px] text-amber-500">
-                {t("macros.unsaved")}
-              </div>
-            )}
-          </div>
-        )}
-      </div>
-
-      <AlertDialog
-        open={pendingDelete !== null}
-        onOpenChange={(open) => !open && setPendingDelete(null)}
-      >
-        <AlertDialogContent className="rounded-none">
-          <AlertDialogHeader>
-            <AlertDialogTitle>{t("macros.deleteTitle")}</AlertDialogTitle>
-            <AlertDialogDescription>
-              {t("macros.deleteBody", { name: pendingDelete?.name ?? "" })}
-            </AlertDialogDescription>
-          </AlertDialogHeader>
-          <AlertDialogFooter>
-            <AlertDialogCancel className="rounded-none">
-              {t("macros.cancel")}
-            </AlertDialogCancel>
-            <AlertDialogAction className="rounded-none" onClick={confirmDelete}>
-              {t("macros.delete")}
-            </AlertDialogAction>
-          </AlertDialogFooter>
-        </AlertDialogContent>
-      </AlertDialog>
-
-      <AlertDialog
-        open={pendingRun !== null}
-        onOpenChange={(open) => !open && setPendingRun(null)}
-      >
-        <AlertDialogContent className="rounded-none">
-          <AlertDialogHeader>
-            <AlertDialogTitle>{t("macros.confirmRunTitle")}</AlertDialogTitle>
-            <AlertDialogDescription>
-              {t("macros.confirmRunBody", {
-                name: pendingRun?.name ?? "",
-                host: targetLabel,
-              })}
-            </AlertDialogDescription>
-          </AlertDialogHeader>
-          <AlertDialogFooter>
-            <AlertDialogCancel className="rounded-none">
-              {t("macros.cancel")}
-            </AlertDialogCancel>
-            <AlertDialogAction
-              className="rounded-none"
-              onClick={() => {
-                const macro = pendingRun;
-                setPendingRun(null);
-                if (macro) {
-                  confirmedRef.current.add(macro.id);
-                  void execute(macro);
-                }
-              }}
-            >
-              {t("macros.confirmRunAction")}
-            </AlertDialogAction>
-          </AlertDialogFooter>
-        </AlertDialogContent>
-      </AlertDialog>
-    </div>
-  );
-}
diff --git a/plugins/ssh-terminal/src/frontend/macros/terminal-macros.ts b/plugins/ssh-terminal/src/frontend/macros/terminal-macros.ts
deleted file mode 100644
index a99c5a393..000000000
--- a/plugins/ssh-terminal/src/frontend/macros/terminal-macros.ts
+++ /dev/null
@@ -1,341 +0,0 @@
-export type MacroStep =
-  | { id: string; type: "send"; text: string; pressEnter: boolean }
-  | { id: string; type: "delay"; milliseconds: number }
-  | {
-      id: string;
-      type: "wait";
-      pattern: string;
-      isRegex?: boolean;
-      flags?: string;
-      timeoutMs: number;
-      onTimeout: "stop" | "continue";
-    }
-  | {
-      id: string;
-      type: "if";
-      pattern: string;
-      isRegex?: boolean;
-      flags?: string;
-      then: MacroStep[];
-      else: MacroStep[];
-    }
-  | { id: string; type: "repeat"; count: number; steps: MacroStep[] };
-
-export interface TerminalMacro {
-  id: string;
-  name: string;
-  description?: string;
-  steps: MacroStep[];
-  createdAt: string;
-  updatedAt: string;
-}
-
-export interface MacroTerminalAdapter {
-  send(data: string): void;
-  subscribe(listener: (data: string) => void): () => void;
-}
-
-export type MacroRunEvent =
-  | { type: "step"; stepId: string }
-  | { type: "matched"; stepId: string; match: string }
-  | { type: "timeout"; stepId: string }
-  | { type: "complete" };
-
-const MAX_OUTPUT = 100_000;
-
-function bounded(value: number, minimum: number, maximum: number): number {
-  return Number.isFinite(value)
-    ? Math.min(maximum, Math.max(minimum, Math.floor(value)))
-    : minimum;
-}
-
-function escapeLiteral(value: string): string {
-  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
-
-function regex(pattern: string, flags = "", isRegex = true): RegExp {
-  const source = isRegex ? pattern : escapeLiteral(pattern);
-  return new RegExp(source, flags.replace(/[gy]/g, ""));
-}
-
-// Literal text is the default in the editor, so a bad regex should never kill a
-// run. Fall back to matching the pattern literally instead.
-function safeRegex(pattern: string, flags = "", isRegex = true): RegExp {
-  try {
-    return regex(pattern, flags, isRegex);
-  } catch {
-    return new RegExp(escapeLiteral(pattern), flags.replace(/[gy]/g, ""));
-  }
-}
-
-function abortError(): DOMException {
-  return new DOMException("Macro cancelled", "AbortError");
-}
-
-function delay(milliseconds: number, signal?: AbortSignal): Promise<void> {
-  if (signal?.aborted) return Promise.reject(abortError());
-  return new Promise((resolve, reject) => {
-    const timer = setTimeout(resolve, milliseconds);
-    signal?.addEventListener(
-      "abort",
-      () => {
-        clearTimeout(timer);
-        reject(abortError());
-      },
-      { once: true },
-    );
-  });
-}
-
-export async function runTerminalMacro(
-  macro: TerminalMacro,
-  terminal: MacroTerminalAdapter,
-  options: {
-    signal?: AbortSignal;
-    onEvent?: (event: MacroRunEvent) => void;
-  } = {},
-): Promise<void> {
-  let output = "";
-  let scanFrom = 0;
-  let wake: (() => void) | null = null;
-  const unsubscribe = terminal.subscribe((data) => {
-    const combined = output + data;
-    const removed = Math.max(0, combined.length - MAX_OUTPUT);
-    output = combined.slice(removed);
-    scanFrom = Math.max(0, scanFrom - removed);
-    wake?.();
-  });
-
-  const runSteps = async (steps: MacroStep[]): Promise<void> => {
-    for (const step of steps) {
-      if (options.signal?.aborted) throw abortError();
-      options.onEvent?.({ type: "step", stepId: step.id });
-
-      if (step.type === "send") {
-        scanFrom = output.length;
-        terminal.send(step.text + (step.pressEnter ? "\r" : ""));
-        continue;
-      }
-      if (step.type === "delay") {
-        await delay(bounded(step.milliseconds, 0, 300_000), options.signal);
-        continue;
-      }
-      if (step.type === "if") {
-        await runSteps(
-          safeRegex(step.pattern, step.flags, step.isRegex !== false).test(
-            output,
-          )
-            ? step.then
-            : step.else,
-        );
-        continue;
-      }
-      if (step.type === "repeat") {
-        const count = bounded(step.count, 1, 100);
-        for (let index = 0; index < count; index += 1) {
-          await runSteps(step.steps);
-        }
-        continue;
-      }
-
-      const matcher = safeRegex(
-        step.pattern,
-        step.flags,
-        step.isRegex !== false,
-      );
-      const deadline = Date.now() + bounded(step.timeoutMs, 100, 300_000);
-      let match = matcher.exec(output.slice(scanFrom));
-      while (!match && Date.now() < deadline) {
-        await Promise.race([
-          new Promise<void>((resolve) => {
-            wake = resolve;
-          }),
-          delay(Math.min(250, deadline - Date.now()), options.signal),
-        ]);
-        wake = null;
-        match = matcher.exec(output.slice(scanFrom));
-      }
-      if (match) {
-        scanFrom += match.index + match[0].length;
-        options.onEvent?.({
-          type: "matched",
-          stepId: step.id,
-          match: match[0],
-        });
-      } else {
-        options.onEvent?.({ type: "timeout", stepId: step.id });
-        if (step.onTimeout === "stop") {
-          throw new Error(`Timed out waiting for /${step.pattern}/`);
-        }
-      }
-    }
-  };
-
-  try {
-    await runSteps(macro.steps);
-    options.onEvent?.({ type: "complete" });
-  } finally {
-    unsubscribe();
-  }
-}
-
-/** Stored macros, bounded and cleaned; accepts the array or its JSON. */
-export function sanitizeTerminalMacros(value: unknown): TerminalMacro[] {
-  if (value === null || value === undefined || value === "") return [];
-  try {
-    const parsed = typeof value === "string" ? JSON.parse(value) : value;
-    if (!Array.isArray(parsed)) return [];
-    let remainingSteps = 500;
-    const sanitizeSteps = (input: unknown, depth: number): MacroStep[] => {
-      if (!Array.isArray(input) || depth > 4 || remainingSteps <= 0) return [];
-      return input.flatMap((raw): MacroStep[] => {
-        if (!raw || typeof raw !== "object" || remainingSteps-- <= 0) return [];
-        const step = raw as Record<string, unknown>;
-        const stepId =
-          typeof step.id === "string" ? step.id : `step-${remainingSteps}`;
-        if (step.type === "send") {
-          return [
-            {
-              id: stepId,
-              type: "send",
-              text:
-                typeof step.text === "string" ? step.text.slice(0, 65_536) : "",
-              pressEnter: step.pressEnter !== false,
-            },
-          ];
-        }
-        if (step.type === "delay") {
-          return [
-            {
-              id: stepId,
-              type: "delay",
-              milliseconds: bounded(Number(step.milliseconds), 0, 300_000),
-            },
-          ];
-        }
-        if (step.type === "wait") {
-          return [
-            {
-              id: stepId,
-              type: "wait",
-              pattern:
-                typeof step.pattern === "string"
-                  ? step.pattern.slice(0, 1000)
-                  : "",
-              isRegex: step.isRegex !== false,
-              flags:
-                typeof step.flags === "string"
-                  ? step.flags.replace(/[^imsu]/g, "")
-                  : undefined,
-              timeoutMs: bounded(Number(step.timeoutMs), 100, 300_000),
-              onTimeout: step.onTimeout === "continue" ? "continue" : "stop",
-            },
-          ];
-        }
-        if (step.type === "if") {
-          return [
-            {
-              id: stepId,
-              type: "if",
-              pattern:
-                typeof step.pattern === "string"
-                  ? step.pattern.slice(0, 1000)
-                  : "",
-              isRegex: step.isRegex !== false,
-              flags:
-                typeof step.flags === "string"
-                  ? step.flags.replace(/[^imsu]/g, "")
-                  : undefined,
-              then: sanitizeSteps(step.then, depth + 1),
-              else: sanitizeSteps(step.else, depth + 1),
-            },
-          ];
-        }
-        if (step.type === "repeat") {
-          return [
-            {
-              id: stepId,
-              type: "repeat",
-              count: bounded(Number(step.count), 1, 100),
-              steps: sanitizeSteps(step.steps, depth + 1),
-            },
-          ];
-        }
-        return [];
-      });
-    };
-    return parsed.slice(0, 100).flatMap((raw): TerminalMacro[] => {
-      if (!raw || typeof raw !== "object") return [];
-      const macro = raw as Record<string, unknown>;
-      if (typeof macro.id !== "string" || typeof macro.name !== "string")
-        return [];
-      const now = new Date().toISOString();
-      return [
-        {
-          id: macro.id,
-          name: macro.name.slice(0, 200),
-          description:
-            typeof macro.description === "string"
-              ? macro.description.slice(0, 2000)
-              : undefined,
-          steps: sanitizeSteps(macro.steps, 0),
-          createdAt:
-            typeof macro.createdAt === "string" ? macro.createdAt : now,
-          updatedAt:
-            typeof macro.updatedAt === "string" ? macro.updatedAt : now,
-        },
-      ];
-    });
-  } catch {
-    return [];
-  }
-}
-
-export function parseTerminalMacros(value?: string | null): TerminalMacro[] {
-  return sanitizeTerminalMacros(value);
-}
-
-/** Where 2.8 kept macros for a user whose storage mode was local. */
-export const LOCAL_MACROS_KEY = "terminalMacros";
-
-/**
- * The saved macros plus any this browser kept on its own before 2.9.0 that
- * the saved list does not already have, or null when there is nothing to
- * move. `clear` removes the browser copy once the merged list is saved.
- */
-export function mergeLocalMacros(
-  saved: TerminalMacro[],
-  storage: Pick<Storage, "getItem" | "removeItem"> | null = safeStorage(),
-): { macros: TerminalMacro[]; clear: () => void } | null {
-  let raw: string | null = null;
-  try {
-    raw = storage?.getItem(LOCAL_MACROS_KEY) ?? null;
-  } catch {
-    return null;
-  }
-  if (raw === null) return null;
-  const clear = () => {
-    try {
-      storage?.removeItem(LOCAL_MACROS_KEY);
-    } catch {
-      // storage unavailable
-    }
-  };
-  const known = new Set(saved.map((macro) => macro.id));
-  const extra = sanitizeTerminalMacros(raw).filter(
-    (macro) => !known.has(macro.id),
-  );
-  if (extra.length === 0) {
-    clear();
-    return null;
-  }
-  return { macros: [...saved, ...extra].slice(0, 100), clear };
-}
-
-function safeStorage(): Storage | null {
-  try {
-    return typeof localStorage === "undefined" ? null : localStorage;
-  } catch {
-    return null;
-  }
-}
diff --git a/plugins/ssh-terminal/src/frontend/session-registry.ts b/plugins/ssh-terminal/src/frontend/session-registry.ts
deleted file mode 100644
index 00763cfe6..000000000
--- a/plugins/ssh-terminal/src/frontend/session-registry.ts
+++ /dev/null
@@ -1,88 +0,0 @@
-import type { TerminalHandle } from "./terminal/terminal-types";
-
-export interface TerminalSessionInfo {
-  id: string;
-  hostId: number | null;
-  hostName?: string;
-  /** The tab's title. */
-  label?: string;
-  ip?: string;
-  username?: string;
-  port?: number;
-}
-
-interface Session extends TerminalSessionInfo {
-  ref: TerminalHandle;
-}
-
-const sessions = new Map<string, Session>();
-let activeId: string | null = null;
-const listeners = new Set<() => void>();
-let snapshot: TerminalSessionInfo[] = [];
-
-function notify(): void {
-  snapshot = listSessions();
-  for (const listener of [...listeners]) listener();
-}
-
-/** The open sessions, the same array until one opens or closes. */
-export function sessionsSnapshot(): TerminalSessionInfo[] {
-  return snapshot;
-}
-
-/** Called by the terminal tab wrapper on mount/unmount and focus change. */
-export function registerSession(
-  info: TerminalSessionInfo,
-  ref: TerminalHandle,
-): () => void {
-  sessions.set(info.id, { ...info, ref });
-  notify();
-  return () => {
-    sessions.delete(info.id);
-    if (activeId === info.id) activeId = null;
-    notify();
-  };
-}
-
-/** Called whenever a session opens or closes. Returns the unsubscribe. */
-export function subscribeSessions(listener: () => void): () => void {
-  listeners.add(listener);
-  return () => listeners.delete(listener);
-}
-
-/** The live terminal of a session, for tools that type into several at once. */
-export function getSessionHandle(sessionId: string): TerminalHandle | null {
-  return sessions.get(sessionId)?.ref ?? null;
-}
-
-export function setActiveSession(id: string | null): void {
-  activeId = id;
-}
-
-export function listSessions(): TerminalSessionInfo[] {
-  return [...sessions.values()].map(({ ref: _ref, ...info }) => info);
-}
-
-function send(session: Session, text: string, run?: boolean): void {
-  if (run) session.ref.sendInput(text + "\r");
-  else session.ref.paste(text);
-}
-
-export function sendToActive(text: string, opts?: { run?: boolean }): boolean {
-  if (!activeId) return false;
-  const session = sessions.get(activeId);
-  if (!session) return false;
-  send(session, text, opts?.run);
-  return true;
-}
-
-export function sendToSession(
-  sessionId: string,
-  text: string,
-  opts?: { run?: boolean },
-): boolean {
-  const session = sessions.get(sessionId);
-  if (!session) return false;
-  send(session, text, opts?.run);
-  return true;
-}
diff --git a/plugins/ssh-terminal/src/frontend/settings/HostTerminalSection.tsx b/plugins/ssh-terminal/src/frontend/settings/HostTerminalSection.tsx
deleted file mode 100644
index 87d1dfd08..000000000
--- a/plugins/ssh-terminal/src/frontend/settings/HostTerminalSection.tsx
+++ /dev/null
@@ -1,23 +0,0 @@
-import type { HostEditorSectionProps } from "@termix/plugin-sdk/frontend";
-import { HostFeatureFields } from "@termix/plugin-sdk/ui";
-import { HostTerminalSettings } from "./HostTerminalSettings";
-
-/** The host editor's Terminal tab: this plugin's switches, then the look. */
-export function HostTerminalSection({
-  form,
-  setField,
-  updateForm,
-  host,
-}: HostEditorSectionProps) {
-  return (
-    <>
-      <HostFeatureFields form={form} updateForm={updateForm} />
-      <HostTerminalSettings
-        form={form}
-        setField={setField}
-        updateForm={updateForm}
-        host={host}
-      />
-    </>
-  );
-}
diff --git a/plugins/ssh-terminal/src/frontend/settings/HostTerminalSettings.tsx b/plugins/ssh-terminal/src/frontend/settings/HostTerminalSettings.tsx
deleted file mode 100644
index 191ec6344..000000000
--- a/plugins/ssh-terminal/src/frontend/settings/HostTerminalSettings.tsx
+++ /dev/null
@@ -1,866 +0,0 @@
-import { useMemo, useState, useEffect } from "react";
-import { setThemePreview } from "../look/theme-preview";
-import { Info, Palette, X, Zap } from "lucide-react";
-import { toast } from "sonner";
-import {
-  Button,
-  FakeSwitch,
-  HostDefaultBadge,
-  Input,
-  SectionCard,
-  Select2,
-  SettingRow,
-  Slider,
-  Tooltip,
-  TooltipContent,
-  TooltipProvider,
-  TooltipTrigger,
-} from "@termix/plugin-sdk/ui";
-import {
-  useSettings,
-  useTranslation,
-  type HostEditorSectionProps,
-} from "@termix/plugin-sdk/frontend";
-import { TerminalPreview } from "../look/TerminalPreview";
-import {
-  TERMINAL_THEMES,
-  TERMINAL_FONTS,
-  BELL_STYLES,
-  FAST_SCROLL_MODIFIERS,
-  CURSOR_STYLES,
-} from "../look/terminal-themes";
-import {
-  TERMINAL_FONT_ZOOM_MIN,
-  TERMINAL_FONT_ZOOM_MAX,
-} from "../look/terminal-font-zoom";
-import {
-  readHostTerminalSettings,
-  readUserSettings,
-  type BackspaceMode,
-  type BellStyle,
-  type CursorStyle,
-  type FastScrollModifier,
-  type HostTerminalSettings as HostTerminalValues,
-  type SavedCustomTheme,
-} from "../../shared/terminal-settings";
-import { invalidateTerminalClientSettings } from "../terminal-settings";
-
-const PLUGIN_ID = "ssh-terminal";
-const CUSTOM_FONT_OPTION = "__custom__";
-
-type HostPluginSettings = Record<string, Record<string, unknown>>;
-
-/**
- * The host editor's terminal appearance and behavior cards. The values are
- * this plugin's host settings, kept on the editor form under pluginSettings
- * and saved with the host.
- */
-export function HostTerminalSettings({
-  form: editorForm,
-  updateForm,
-}: Pick<HostEditorSectionProps, "form" | "setField" | "updateForm" | "host">) {
-  const { t } = useTranslation();
-  const userSettings = useSettings("user");
-  // The preview ends when the editor section goes away.
-  useEffect(() => () => setThemePreview(null), []);
-
-  const stored = ((editorForm?.pluginSettings as HostPluginSettings)?.[
-    PLUGIN_ID
-  ] ?? {}) as Record<string, unknown>;
-  // The form holds what the host follows, so this is what it will look like.
-  const form = readHostTerminalSettings(stored) as HostTerminalValues;
-
-  const writeValues = (values: Record<string, unknown>) =>
-    updateForm((current) => {
-      const all = (current.pluginSettings ?? {}) as HostPluginSettings;
-      return {
-        ...current,
-        pluginSettings: {
-          ...all,
-          [PLUGIN_ID]: { ...(all[PLUGIN_ID] ?? {}), ...values },
-        },
-      };
-    });
-
-  const setField = <K extends keyof HostTerminalValues>(
-    key: K,
-    value: HostTerminalValues[K],
-  ) => writeValues({ [key]: value });
-
-  const [isCustomFont, setIsCustomFont] = useState(
-    () => !TERMINAL_FONTS.some((f) => f.value === form.fontFamily),
-  );
-  const savedThemes: SavedCustomTheme[] = useMemo(
-    () => readUserSettings(userSettings.values).customThemes,
-    [userSettings.values],
-  );
-  const [savingTheme, setSavingTheme] = useState(false);
-
-  const saveThemes = async (updated: SavedCustomTheme[]) => {
-    await userSettings.save({ customThemes: updated });
-    invalidateTerminalClientSettings();
-  };
-
-  const handleSaveAsGlobalTheme = async () => {
-    const colors = form.customThemeColors;
-    if (!colors) return;
-    const name = window.prompt(t("hosts.saveGlobalThemeNamePrompt"));
-    if (!name || !name.trim()) return;
-    setSavingTheme(true);
-    try {
-      await saveThemes([
-        ...savedThemes,
-        {
-          id:
-            "theme-" +
-            Date.now() +
-            "-" +
-            Math.random().toString(36).slice(2, 8),
-          name: name.trim(),
-          colors,
-        },
-      ]);
-      toast.success(t("hosts.saveGlobalThemeSuccess"));
-    } catch {
-      toast.error(t("hosts.saveGlobalThemeError"));
-    } finally {
-      setSavingTheme(false);
-    }
-  };
-
-  const handleDeleteGlobalTheme = async (id: string) => {
-    try {
-      await saveThemes(savedThemes.filter((theme) => theme.id !== id));
-    } catch {
-      toast.error(t("hosts.saveGlobalThemeError"));
-    }
-  };
-
-  const handleApplyGlobalTheme = (id: string) => {
-    const theme = savedThemes.find((entry) => entry.id === id);
-    if (!theme) return;
-    setField("customThemeColors", { ...theme.colors });
-  };
-
-  return (
-    <>
-      <SectionCard
-        title={t("hosts.terminalAppearance")}
-        icon={<Palette className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <>
-            <div className="space-y-2">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.themePreview")}
-              </label>
-              <TerminalPreview
-                theme={form.theme}
-                fontSize={form.fontSize}
-                fontFamily={form.fontFamily}
-                cursorStyle={form.cursorStyle}
-                cursorBlink={form.cursorBlink}
-                letterSpacing={form.letterSpacing}
-                lineHeight={form.lineHeight}
-                customThemeColors={form.customThemeColors ?? undefined}
-              />
-            </div>
-            <div className="grid grid-cols-1 md:grid-cols-2 gap-4">
-              <div className="flex flex-col gap-1.5">
-                <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                  {t("hosts.colorTheme")}
-                  <HostDefaultBadge settingKey="theme" />
-                </label>
-                <Select2
-                  value={form.theme}
-                  onChange={(e) => {
-                    const newTheme = e.target.value;
-                    setField("theme", newTheme);
-                    setThemePreview(newTheme);
-                    if (newTheme === "custom" && !form.customThemeColors) {
-                      setField("customThemeColors", {
-                        ...TERMINAL_THEMES.termixDark.colors,
-                      });
-                    }
-                  }}
-                  className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-                >
-                  {Object.entries(TERMINAL_THEMES)
-                    .filter(
-                      ([key]) => key !== "termixDark" && key !== "termixLight",
-                    )
-                    .map(([key, theme]) => (
-                      <option key={key} value={key}>
-                        {theme.name}
-                      </option>
-                    ))}
-                </Select2>
-              </div>
-              <div className="flex flex-col gap-1.5">
-                <div className="flex items-center gap-1">
-                  <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                    {t("hosts.fontFamilyLabel")}
-                    <HostDefaultBadge settingKey="fontFamily" />
-                  </label>
-                  <TooltipProvider delayDuration={200}>
-                    <Tooltip>
-                      <TooltipTrigger asChild>
-                        <Info className="size-3 text-muted-foreground" />
-                      </TooltipTrigger>
-                      <TooltipContent side="top">
-                        {t("hosts.fontFamilyCustomHint")}
-                      </TooltipContent>
-                    </Tooltip>
-                  </TooltipProvider>
-                </div>
-                <Select2
-                  value={isCustomFont ? CUSTOM_FONT_OPTION : form.fontFamily}
-                  onChange={(e) => {
-                    if (e.target.value === CUSTOM_FONT_OPTION) {
-                      setIsCustomFont(true);
-                      setField("fontFamily", "");
-                    } else {
-                      setIsCustomFont(false);
-                      setField("fontFamily", e.target.value);
-                    }
-                  }}
-                  className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring font-mono"
-                >
-                  {TERMINAL_FONTS.map((f) => (
-                    <option key={f.value} value={f.value}>
-                      {f.label}
-                    </option>
-                  ))}
-                  <option value={CUSTOM_FONT_OPTION}>
-                    {t("hosts.fontFamilyCustomOption")}
-                  </option>
-                </Select2>
-                {isCustomFont && (
-                  <Input
-                    value={form.fontFamily}
-                    onChange={(e) => setField("fontFamily", e.target.value)}
-                    placeholder={t("hosts.fontFamilyCustomPlaceholder")}
-                    className="h-9 text-xs font-mono"
-                  />
-                )}
-              </div>
-              <div className="flex flex-col gap-1.5">
-                <div className="flex items-center justify-between">
-                  <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                    {t("hosts.fontSizeLabel")}
-                    <HostDefaultBadge settingKey="fontSize" />
-                  </label>
-                  <span className="text-[10px] text-muted-foreground tabular-nums">
-                    {form.fontSize}px
-                  </span>
-                </div>
-                <Slider
-                  min={TERMINAL_FONT_ZOOM_MIN}
-                  max={TERMINAL_FONT_ZOOM_MAX}
-                  step={1}
-                  value={[form.fontSize]}
-                  onValueChange={([v]) => setField("fontSize", v)}
-                />
-              </div>
-              <div className="flex flex-col gap-1.5">
-                <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                  {t("hosts.cursorStyleLabel")}
-                  <HostDefaultBadge settingKey="cursorStyle" />
-                </label>
-                <Select2
-                  value={form.cursorStyle}
-                  onChange={(e) =>
-                    setField("cursorStyle", e.target.value as CursorStyle)
-                  }
-                  className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-                >
-                  {CURSOR_STYLES.map((s) => (
-                    <option key={s.value} value={s.value}>
-                      {t(s.labelKey)}
-                    </option>
-                  ))}
-                </Select2>
-              </div>
-              <div className="flex flex-col gap-1.5">
-                <div className="flex items-center justify-between">
-                  <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                    {t("hosts.letterSpacingPx")}
-                    <HostDefaultBadge settingKey="letterSpacing" />
-                  </label>
-                  <span className="text-[10px] text-muted-foreground tabular-nums">
-                    {form.letterSpacing}px
-                  </span>
-                </div>
-                <Slider
-                  min={-2}
-                  max={10}
-                  step={0.5}
-                  value={[form.letterSpacing]}
-                  onValueChange={([v]) => setField("letterSpacing", v)}
-                />
-              </div>
-              <div className="flex flex-col gap-1.5">
-                <div className="flex items-center justify-between">
-                  <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                    {t("hosts.lineHeightLabel")}
-                    <HostDefaultBadge settingKey="lineHeight" />
-                  </label>
-                  <span className="text-[10px] text-muted-foreground tabular-nums">
-                    {form.lineHeight.toFixed(1)}
-                  </span>
-                </div>
-                <Slider
-                  min={1.0}
-                  max={2.0}
-                  step={0.1}
-                  value={[form.lineHeight]}
-                  onValueChange={([v]) => setField("lineHeight", v)}
-                />
-              </div>
-              <div className="flex flex-col gap-1.5">
-                <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                  {t("hosts.bellStyleLabel")}
-                  <HostDefaultBadge settingKey="bellStyle" />
-                </label>
-                <Select2
-                  value={form.bellStyle}
-                  onChange={(e) =>
-                    setField("bellStyle", e.target.value as BellStyle)
-                  }
-                  className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-                >
-                  {BELL_STYLES.map((b) => (
-                    <option key={b.value} value={b.value}>
-                      {t(b.labelKey)}
-                    </option>
-                  ))}
-                </Select2>
-              </div>
-              <div className="flex flex-col gap-1.5">
-                <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                  {t("hosts.backspaceModeLabel")}
-                  <HostDefaultBadge settingKey="backspaceMode" />
-                </label>
-                <Select2
-                  value={form.backspaceMode}
-                  onChange={(e) =>
-                    setField("backspaceMode", e.target.value as BackspaceMode)
-                  }
-                  className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-                >
-                  <option value="normal">
-                    {t("hosts.backspaceModeNormal")}
-                  </option>
-                  <option value="control-h">
-                    {t("hosts.backspaceModeControlH")}
-                  </option>
-                </Select2>
-              </div>
-            </div>
-          </>
-          {form.theme === "custom" && (
-            <div className="flex flex-col gap-3">
-              <div className="flex flex-col gap-1.5">
-                <div className="flex items-center justify-between">
-                  <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                    {t("hosts.savedThemesLabel")}
-                  </label>
-                  <Button
-                    type="button"
-                    variant="outline"
-                    size="sm"
-                    className="h-7 text-[10px]"
-                    disabled={savingTheme || !form.customThemeColors}
-                    onClick={handleSaveAsGlobalTheme}
-                  >
-                    {t("hosts.saveAsGlobalTheme")}
-                  </Button>
-                </div>
-                {savedThemes.length === 0 ? (
-                  <p className="text-[10px] text-muted-foreground">
-                    {t("hosts.noSavedThemes")}
-                  </p>
-                ) : (
-                  <div className="flex flex-col gap-1">
-                    {savedThemes.map((theme) => (
-                      <div
-                        key={theme.id}
-                        className="flex items-center justify-between gap-2 border border-border px-2 py-1"
-                      >
-                        <button
-                          type="button"
-                          title={t("hosts.applyGlobalThemeTooltip")}
-                          onClick={() => handleApplyGlobalTheme(theme.id)}
-                          className="flex items-center gap-2 text-xs text-left flex-1 min-w-0 hover:text-foreground transition-colors"
-                        >
-                          <span
-                            className="size-3.5 shrink-0 border border-border"
-                            style={{
-                              background: theme.colors.background,
-                            }}
-                          />
-                          <span className="truncate">{theme.name}</span>
-                        </button>
-                        <button
-                          type="button"
-                          title={t("hosts.deleteGlobalThemeTooltip")}
-                          onClick={() => handleDeleteGlobalTheme(theme.id)}
-                          className="text-muted-foreground hover:text-destructive transition-colors shrink-0"
-                        >
-                          <X className="size-3.5" />
-                        </button>
-                      </div>
-                    ))}
-                  </div>
-                )}
-              </div>
-              <div className="flex items-center justify-between">
-                <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                  {t("hosts.customThemeColors")}
-                  <HostDefaultBadge settingKey="customThemeColors" />
-                </label>
-                <button
-                  type="button"
-                  title={t("hosts.customThemeResetTooltip")}
-                  onClick={() =>
-                    setField("customThemeColors", {
-                      ...TERMINAL_THEMES.termixDark.colors,
-                    })
-                  }
-                  className="text-[10px] text-muted-foreground hover:text-foreground transition-colors"
-                >
-                  {t("hosts.customThemeResetTooltip")}
-                </button>
-              </div>
-              {(
-                [
-                  ["background", "customThemeBackground"],
-                  ["foreground", "customThemeForeground"],
-                  ["cursor", "customThemeCursor"],
-                  ["cursorAccent", "customThemeCursorAccent"],
-                  ["selectionBackground", "customThemeSelection"],
-                ] as const
-              ).map(([key, labelKey]) => (
-                <div
-                  key={key}
-                  className="flex items-center justify-between gap-2"
-                >
-                  <label className="text-xs text-muted-foreground min-w-0 flex-1">
-                    {t(`hosts.${labelKey}`)}
-                  </label>
-                  <div className="flex items-center gap-1.5">
-                    <input
-                      type="color"
-                      value={
-                        form.customThemeColors?.[key] ??
-                        TERMINAL_THEMES.termixDark.colors[key]
-                      }
-                      onChange={(e) =>
-                        setField("customThemeColors", {
-                          ...(form.customThemeColors ??
-                            TERMINAL_THEMES.termixDark.colors),
-                          [key]: e.target.value,
-                        })
-                      }
-                      className="h-7 w-10 cursor-pointer border border-border bg-background p-0.5"
-                    />
-                    <span className="text-[10px] font-mono text-muted-foreground w-16 tabular-nums">
-                      {form.customThemeColors?.[key] ??
-                        TERMINAL_THEMES.termixDark.colors[key]}
-                    </span>
-                  </div>
-                </div>
-              ))}
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground mt-1">
-                {t("hosts.customThemeAnsiColors")}
-              </label>
-              <div className="grid grid-cols-2 gap-x-4 gap-y-2">
-                {(
-                  [
-                    ["black", "customThemeBlack"],
-                    ["brightBlack", "customThemeBrightBlack"],
-                    ["red", "customThemeRed"],
-                    ["brightRed", "customThemeBrightRed"],
-                    ["green", "customThemeGreen"],
-                    ["brightGreen", "customThemeBrightGreen"],
-                    ["yellow", "customThemeYellow"],
-                    ["brightYellow", "customThemeBrightYellow"],
-                    ["blue", "customThemeBlue"],
-                    ["brightBlue", "customThemeBrightBlue"],
-                    ["magenta", "customThemeMagenta"],
-                    ["brightMagenta", "customThemeBrightMagenta"],
-                    ["cyan", "customThemeCyan"],
-                    ["brightCyan", "customThemeBrightCyan"],
-                    ["white", "customThemeWhite"],
-                    ["brightWhite", "customThemeBrightWhite"],
-                  ] as const
-                ).map(([key, labelKey]) => (
-                  <div
-                    key={key}
-                    className="flex items-center justify-between gap-2"
-                  >
-                    <label className="text-xs text-muted-foreground min-w-0 flex-1 truncate">
-                      {t(`hosts.${labelKey}`)}
-                    </label>
-                    <div className="flex items-center gap-1.5">
-                      <input
-                        type="color"
-                        value={
-                          form.customThemeColors?.[key] ??
-                          TERMINAL_THEMES.termixDark.colors[key]
-                        }
-                        onChange={(e) =>
-                          setField("customThemeColors", {
-                            ...(form.customThemeColors ??
-                              TERMINAL_THEMES.termixDark.colors),
-                            [key]: e.target.value,
-                          })
-                        }
-                        className="h-7 w-10 cursor-pointer border border-border bg-background p-0.5"
-                      />
-                      <span className="text-[10px] font-mono text-muted-foreground w-16 tabular-nums">
-                        {form.customThemeColors?.[key] ??
-                          TERMINAL_THEMES.termixDark.colors[key]}
-                      </span>
-                    </div>
-                  </div>
-                ))}
-              </div>
-            </div>
-          )}
-          <SettingRow
-            label={t("hosts.cursorBlinking")}
-            defaultKey="cursorBlink"
-            description={t("hosts.cursorBlinkingDesc")}
-          >
-            <FakeSwitch
-              checked={form.cursorBlink}
-              onChange={(v) => setField("cursorBlink", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.rightClickSelectsWordLabel")}
-            defaultKey="rightClickSelectsWord"
-            description={t("hosts.rightClickSelectsWordShortDesc")}
-          >
-            <FakeSwitch
-              checked={form.rightClickSelectsWord}
-              onChange={(v) => setField("rightClickSelectsWord", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.macOptionIsMetaLabel")}
-            defaultKey="macOptionIsMeta"
-            description={t("hosts.macOptionIsMetaShortDesc")}
-          >
-            <FakeSwitch
-              checked={form.macOptionIsMeta}
-              onChange={(v) => setField("macOptionIsMeta", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.syntaxHighlightingLabel")}
-            defaultKey="syntaxHighlighting"
-            description={t("hosts.syntaxHighlightingDesc")}
-          >
-            <FakeSwitch
-              checked={form.syntaxHighlighting}
-              onChange={(v) => setField("syntaxHighlighting", v)}
-            />
-          </SettingRow>
-          {form.syntaxHighlighting && (
-            <div className="flex flex-col ml-4">
-              {(
-                [
-                  [
-                    "logLevels",
-                    "syntaxCategoryLogLevels",
-                    "syntaxCategoryLogLevelsDesc",
-                  ],
-                  ["paths", "syntaxCategoryPaths", "syntaxCategoryPathsDesc"],
-                  [
-                    "timestamps",
-                    "syntaxCategoryTimestamps",
-                    "syntaxCategoryTimestampsDesc",
-                  ],
-                  [
-                    "ipAddresses",
-                    "syntaxCategoryIpAddresses",
-                    "syntaxCategoryIpAddressesDesc",
-                  ],
-                  ["urls", "syntaxCategoryUrls", "syntaxCategoryUrlsDesc"],
-                  [
-                    "numbers",
-                    "syntaxCategoryNumbers",
-                    "syntaxCategoryNumbersDesc",
-                  ],
-                ] as const
-              ).map(([key, labelKey, descKey]) => (
-                <SettingRow
-                  key={key}
-                  defaultKey="syntaxHighlightingOptions"
-                  label={t(`hosts.${labelKey}`)}
-                  description={t(`hosts.${descKey}`)}
-                >
-                  <FakeSwitch
-                    checked={form.syntaxHighlightingOptions?.[key] ?? true}
-                    onChange={(v) =>
-                      setField("syntaxHighlightingOptions", {
-                        ...form.syntaxHighlightingOptions,
-                        [key]: v,
-                      })
-                    }
-                  />
-                </SettingRow>
-              ))}
-            </div>
-          )}
-          <div className="flex flex-col gap-1.5">
-            <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.backgroundImageLabel")}
-              <HostDefaultBadge settingKey="backgroundImage" />
-            </label>
-            <p className="text-[10px] text-muted-foreground">
-              {t("hosts.backgroundImageDesc")}
-            </p>
-            <input
-              type="url"
-              value={form.backgroundImage}
-              onChange={(e) => setField("backgroundImage", e.target.value)}
-              placeholder="https://example.com/image.jpg"
-              className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring font-mono"
-            />
-          </div>
-          {form.backgroundImage && (
-            <div className="flex flex-col gap-1.5">
-              <div className="flex items-center justify-between">
-                <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                  {t("hosts.backgroundImageOpacityLabel")}
-                  <HostDefaultBadge settingKey="backgroundImageOpacity" />
-                </label>
-                <span className="text-[10px] text-muted-foreground tabular-nums">
-                  {Math.round(form.backgroundImageOpacity * 100)}%
-                </span>
-              </div>
-              <Slider
-                min={0.05}
-                max={1}
-                step={0.05}
-                value={[form.backgroundImageOpacity]}
-                onValueChange={([v]) => setField("backgroundImageOpacity", v)}
-              />
-            </div>
-          )}
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("hosts.behaviorAndAdvanced")}
-        icon={<Zap className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <div className="flex flex-col gap-1.5">
-            <div className="flex items-center justify-between">
-              <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.scrollbackBufferLabel")}
-                <HostDefaultBadge settingKey="scrollback" />
-              </label>
-              <span className="text-[10px] text-muted-foreground tabular-nums">
-                {form.scrollback.toLocaleString()}{" "}
-                {t("hosts.scrollbackMaxLines")}
-              </span>
-            </div>
-            <Slider
-              min={1000}
-              max={100000}
-              step={1000}
-              value={[form.scrollback]}
-              onValueChange={([v]) => setField("scrollback", v)}
-            />
-          </div>
-          <SettingRow
-            label={t("hosts.enableAutoTmux")}
-            defaultKey="autoTmux"
-            description={
-              <>
-                {t("hosts.enableAutoTmuxDesc")}{" "}
-                <a
-                  href="https://docs.termix.site/features/terminal/tmux"
-                  target="_blank"
-                  rel="noreferrer"
-                  className="text-accent-brand hover:underline"
-                >
-                  {t("hosts.docsLink")}
-                </a>
-              </>
-            }
-          >
-            <FakeSwitch
-              checked={form.autoTmux}
-              onChange={(v) => setField("autoTmux", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.useSSHTitleLabel")}
-            defaultKey="useSSHTitle"
-            description={t("hosts.useSSHTitleDesc")}
-          >
-            <FakeSwitch
-              checked={form.useSSHTitle}
-              onChange={(v) => setField("useSSHTitle", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.enableAutoMosh")}
-            defaultKey="autoMosh"
-            description={t("hosts.enableAutoMoshDesc")}
-          >
-            <FakeSwitch
-              checked={form.autoMosh}
-              onChange={(v) => setField("autoMosh", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.autoReconnectLabel")}
-            defaultKey="autoReconnect"
-            description={t("hosts.autoReconnectDesc")}
-          >
-            <FakeSwitch
-              checked={form.autoReconnect}
-              onChange={(v) => setField("autoReconnect", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.passwordPromptAutoFillLabel")}
-            defaultKey="passwordPromptAutoFill"
-            description={t("hosts.passwordPromptAutoFillDesc")}
-          >
-            <FakeSwitch
-              checked={form.passwordPromptAutoFill}
-              onChange={(v) => setField("passwordPromptAutoFill", v)}
-            />
-          </SettingRow>
-          <SettingRow
-            label={t("hosts.sudoPasswordAutoFillLabel")}
-            defaultKey="sudoPasswordAutoFill"
-            description={t("hosts.sudoPasswordAutoFillDesc")}
-          >
-            <FakeSwitch
-              checked={form.sudoPasswordAutoFill}
-              onChange={(v) => setField("sudoPasswordAutoFill", v)}
-            />
-          </SettingRow>
-          <div className="flex flex-col gap-1.5">
-            <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.localEchoLabel")}
-              <HostDefaultBadge settingKey="localEcho" />
-            </label>
-            <Select2
-              value={form.localEcho}
-              onChange={(e) =>
-                setField("localEcho", e.target.value as "off" | "auto" | "on")
-              }
-              className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-            >
-              <option value="off">{t("hosts.localEchoOff")}</option>
-              <option value="auto">{t("hosts.localEchoAuto")}</option>
-              <option value="on">{t("hosts.localEchoOn")}</option>
-            </Select2>
-            <p className="text-[10px] text-muted-foreground">
-              {t("hosts.localEchoDesc")}{" "}
-              <a
-                href="https://docs.termix.site/features/terminal/appearance"
-                target="_blank"
-                rel="noreferrer"
-                className="text-accent-brand hover:underline"
-              >
-                {t("hosts.docsLink")}
-              </a>
-            </p>
-          </div>
-          <div className="flex flex-col gap-1.5">
-            <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("hosts.linkClickBehaviorLabel")}
-              <HostDefaultBadge settingKey="linkClickBehavior" />
-            </label>
-            <Select2
-              value={form.linkClickBehavior}
-              onChange={(e) =>
-                setField(
-                  "linkClickBehavior",
-                  e.target.value as "confirm" | "direct",
-                )
-              }
-              className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-            >
-              <option value="confirm">
-                {t("hosts.linkClickBehaviorConfirm")}
-              </option>
-              <option value="direct">
-                {t("hosts.linkClickBehaviorDirect")}
-              </option>
-            </Select2>
-            <p className="text-[10px] text-muted-foreground">
-              {t("hosts.linkClickBehaviorDesc")}
-            </p>
-          </div>
-          <div className="grid grid-cols-1 md:grid-cols-2 gap-4 border-t border-border pt-4">
-            <div className="flex flex-col gap-1.5">
-              <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.fastScrollModifierLabel")}
-                <HostDefaultBadge settingKey="fastScrollModifier" />
-              </label>
-              <Select2
-                value={form.fastScrollModifier}
-                onChange={(e) =>
-                  setField(
-                    "fastScrollModifier",
-                    e.target.value as FastScrollModifier,
-                  )
-                }
-                className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-              >
-                {FAST_SCROLL_MODIFIERS.map((m) => (
-                  <option key={m.value} value={m.value}>
-                    {t(m.labelKey)}
-                  </option>
-                ))}
-              </Select2>
-            </div>
-            <div className="flex flex-col gap-1.5">
-              <div className="flex items-center justify-between">
-                <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                  {t("hosts.fastScrollSensitivityLabel")}
-                  <HostDefaultBadge settingKey="fastScrollSensitivity" />
-                </label>
-                <span className="text-[10px] text-muted-foreground tabular-nums">
-                  {form.fastScrollSensitivity}
-                </span>
-              </div>
-              <Slider
-                min={1}
-                max={10}
-                step={1}
-                value={[form.fastScrollSensitivity]}
-                onValueChange={([v]) => setField("fastScrollSensitivity", v)}
-              />
-            </div>
-          </div>
-          {form.autoMosh && (
-            <div className="flex flex-col gap-1.5">
-              <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("hosts.moshCommandLabel")}
-                <HostDefaultBadge settingKey="moshCommand" />
-              </label>
-              <Input
-                placeholder="mosh"
-                value={form.moshCommand}
-                onChange={(e) => setField("moshCommand", e.target.value)}
-              />
-            </div>
-          )}
-        </div>
-      </SectionCard>
-    </>
-  );
-}
diff --git a/plugins/ssh-terminal/src/frontend/settings/ImageStorageTest.tsx b/plugins/ssh-terminal/src/frontend/settings/ImageStorageTest.tsx
deleted file mode 100644
index 7a2cb5124..000000000
--- a/plugins/ssh-terminal/src/frontend/settings/ImageStorageTest.tsx
+++ /dev/null
@@ -1,100 +0,0 @@
-import { useState } from "react";
-import { toast } from "sonner";
-import { Button, Input } from "@termix/plugin-sdk/ui";
-import {
-  usePluginApi,
-  useTranslation,
-  type SettingsComponentProps,
-} from "@termix/plugin-sdk/frontend";
-
-interface TestResult {
-  mode: string;
-  connected: boolean;
-  remoteSftpAvailable: boolean;
-  localHostVisible: boolean | null;
-  selectedMode: "local" | "remote-sftp" | "unavailable";
-  localMappingConfigured: boolean;
-}
-
-const SELECTED_MODE_LABEL_KEYS: Record<TestResult["selectedMode"], string> = {
-  local: "settings.admin.imageStorageMode.local",
-  "remote-sftp": "settings.admin.imageStorageMode.remoteSftp",
-  unavailable: "imageStorage.selectedModeUnavailable",
-};
-
-/**
- * Checks which storage an image upload would use for one of the admin's own
- * connected terminals, against the saved settings.
- */
-export function ImageStorageTest(_props: SettingsComponentProps) {
-  const { t } = useTranslation();
-  const api = usePluginApi();
-  const [instanceId, setInstanceId] = useState("");
-  const [testing, setTesting] = useState(false);
-  const [result, setResult] = useState<TestResult | null>(null);
-
-  const runTest = async () => {
-    setTesting(true);
-    setResult(null);
-    try {
-      const { data } = await api.post<TestResult>("/image-storage/test", {
-        instanceId: instanceId.trim(),
-      });
-      setResult(data);
-    } catch {
-      toast.error(t("imageStorage.testFailed"));
-    } finally {
-      setTesting(false);
-    }
-  };
-
-  return (
-    <div className="flex flex-col gap-2 py-3">
-      <div className="flex flex-col gap-0.5">
-        <span className="text-sm font-medium leading-snug">
-          {t("imageStorage.instanceId")}
-        </span>
-        <span className="text-xs text-muted-foreground leading-snug">
-          {t("imageStorage.instanceIdDesc")}
-        </span>
-      </div>
-      <Input
-        aria-label={t("imageStorage.instanceId")}
-        value={instanceId}
-        onChange={(event) => setInstanceId(event.target.value)}
-        className="h-8 w-full @md:w-64 text-xs"
-      />
-      {result && (
-        <div className="text-xs text-muted-foreground">
-          <div>
-            {result.connected
-              ? t("imageStorage.testConnected")
-              : t("imageStorage.testNotConnected")}
-          </div>
-          <div>
-            {t("imageStorage.testSelectedMode", {
-              mode: t(SELECTED_MODE_LABEL_KEYS[result.selectedMode]),
-            })}
-          </div>
-          {result.localHostVisible !== null && (
-            <div>
-              {result.localHostVisible
-                ? t("imageStorage.testLocalVisible")
-                : t("imageStorage.testLocalNotVisible")}
-            </div>
-          )}
-        </div>
-      )}
-      <div>
-        <Button
-          size="sm"
-          variant="outline"
-          disabled={testing || !instanceId.trim()}
-          onClick={() => void runTest()}
-        >
-          {testing ? t("imageStorage.testing") : t("imageStorage.test")}
-        </Button>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/ssh-terminal/src/frontend/settings/TouchInputSettings.tsx b/plugins/ssh-terminal/src/frontend/settings/TouchInputSettings.tsx
deleted file mode 100644
index dd364f8ec..000000000
--- a/plugins/ssh-terminal/src/frontend/settings/TouchInputSettings.tsx
+++ /dev/null
@@ -1,156 +0,0 @@
-import { useState } from "react";
-import { ChevronDown } from "lucide-react";
-import {
-  normalizeTouchInputSettings,
-  TOUCH_INPUT_DEFAULTS,
-  TOUCH_INPUT_NUMERIC_BOUNDS,
-  type TouchInputNumericKey,
-  type TouchInputSettings as TouchInputValues,
-} from "../../shared/touch-input-settings";
-import { Button, Input, SettingRow, Switch } from "@termix/plugin-sdk/ui";
-import {
-  useTranslation,
-  type SettingsComponentProps,
-} from "@termix/plugin-sdk/frontend";
-import { cacheTouchInputSettings } from "../terminal/touch-input-settings-store";
-
-const fields: Array<{
-  key: TouchInputNumericKey;
-  label: string;
-  unit: string;
-}> = [
-  { key: "dragThresholdPx", label: "dragThreshold", unit: "px" },
-  { key: "maxWheelDeltaPx", label: "maxWheelDelta", unit: "px" },
-  {
-    key: "momentumSampleWindowMs",
-    label: "momentumSampleWindow",
-    unit: "ms",
-  },
-  {
-    key: "releaseGracePeriodMs",
-    label: "releaseGracePeriod",
-    unit: "ms",
-  },
-  {
-    key: "minimumVelocityPxPerMs",
-    label: "minimumVelocity",
-    unit: "px/ms",
-  },
-  {
-    key: "maximumVelocityPxPerMs",
-    label: "maximumVelocity",
-    unit: "px/ms",
-  },
-  { key: "maximumDurationMs", label: "maximumDuration", unit: "ms" },
-  { key: "maximumTravelPx", label: "maximumTravel", unit: "px" },
-  { key: "decayTimeMs", label: "decayTime", unit: "ms" },
-  { key: "pixelsPerTick", label: "pixelsPerTick", unit: "px" },
-  {
-    key: "maximumFrameIntervalMs",
-    label: "maximumFrameInterval",
-    unit: "ms",
-  },
-  {
-    key: "maximumTicksPerFrame",
-    label: "maximumTicksPerFrame",
-    unit: "",
-  },
-];
-
-/**
- * Touch scrolling tuning for terminals on touch screens, stored as one
- * object in the "touchInput" admin setting.
- */
-export function TouchInputSettings({
-  values,
-  setValue,
-}: SettingsComponentProps) {
-  const { t } = useTranslation();
-  const [advancedOpen, setAdvancedOpen] = useState(false);
-  const settings = normalizeTouchInputSettings(values.touchInput);
-  const setSettings = (next: TouchInputValues) => {
-    const normalized = normalizeTouchInputSettings(next);
-    cacheTouchInputSettings(normalized);
-    setValue("touchInput", normalized);
-  };
-
-  return (
-    <div className="flex flex-col gap-0">
-      <SettingRow
-        label={t("touchInput.enabled")}
-        description={t("touchInput.enabledDesc")}
-      >
-        <Switch
-          checked={settings.enabled}
-          onCheckedChange={(enabled) => setSettings({ ...settings, enabled })}
-        />
-      </SettingRow>
-      <SettingRow
-        label={t("touchInput.momentumEnabled")}
-        description={t("touchInput.momentumEnabledDesc")}
-      >
-        <Switch
-          checked={settings.momentumEnabled}
-          disabled={!settings.enabled}
-          onCheckedChange={(momentumEnabled) =>
-            setSettings({ ...settings, momentumEnabled })
-          }
-        />
-      </SettingRow>
-
-      <button
-        type="button"
-        className="flex items-center gap-2 py-3 text-left text-xs font-semibold text-foreground"
-        onClick={() => setAdvancedOpen((value) => !value)}
-      >
-        <ChevronDown
-          className={`size-3.5 transition-transform ${advancedOpen ? "rotate-180" : ""}`}
-        />
-        {t("touchInput.advanced")}
-      </button>
-      {advancedOpen && (
-        <div className="grid grid-cols-1 gap-3 pb-3">
-          {fields.map(({ key, label, unit }) => {
-            const bounds = TOUCH_INPUT_NUMERIC_BOUNDS[key];
-            return (
-              <label key={key} className="flex flex-col gap-1 text-xs">
-                <span className="font-medium text-foreground">
-                  {t(`touchInput.${label}`)}
-                </span>
-                <div className="flex items-center gap-2">
-                  <Input
-                    aria-label={t(`touchInput.${label}`)}
-                    type="number"
-                    min={bounds.min}
-                    max={bounds.max}
-                    step={bounds.step}
-                    value={settings[key]}
-                    onChange={(event) =>
-                      setSettings({
-                        ...settings,
-                        [key]: Number(event.target.value),
-                      })
-                    }
-                    className="h-8 text-xs"
-                  />
-                  {unit && (
-                    <span className="w-10 text-muted-foreground">{unit}</span>
-                  )}
-                </div>
-              </label>
-            );
-          })}
-        </div>
-      )}
-      <div className="flex gap-2 border-t border-border pt-3">
-        <Button
-          size="sm"
-          variant="outline"
-          onClick={() => setSettings({ ...TOUCH_INPUT_DEFAULTS })}
-        >
-          {t("touchInput.resetDefaults")}
-        </Button>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/ssh-terminal/src/frontend/settings/local-preferences-migration.ts b/plugins/ssh-terminal/src/frontend/settings/local-preferences-migration.ts
deleted file mode 100644
index fb8718c0b..000000000
--- a/plugins/ssh-terminal/src/frontend/settings/local-preferences-migration.ts
+++ /dev/null
@@ -1,89 +0,0 @@
-import type { TermixApp } from "@termix/plugin-sdk/frontend";
-import {
-  invalidateTerminalClientSettings,
-  loadTerminalClientSettings,
-} from "../terminal-settings";
-import { DEFAULT_USER_SETTINGS } from "../../shared/terminal-settings";
-
-/**
- * Browser-only terminal preferences from before 2.9.0, and the user setting
- * each became. Read once: the key is removed after it is saved.
- */
-const LOCAL_KEYS: Array<{
-  storageKey: string;
-  setting: string;
-  parse: (raw: string) => unknown;
-}> = [
-  {
-    storageKey: "terminalLocalEchoMode",
-    setting: "localEcho",
-    parse: (raw) => (["off", "auto", "on"].includes(raw) ? raw : undefined),
-  },
-  {
-    storageKey: "terminalLinkClickBehavior",
-    setting: "linkClickBehavior",
-    parse: (raw) => (["confirm", "direct"].includes(raw) ? raw : undefined),
-  },
-  {
-    storageKey: "commandAutocomplete",
-    setting: "commandAutocomplete",
-    parse: (raw) =>
-      raw === "true" ? true : raw === "false" ? false : undefined,
-  },
-];
-
-function readStorage(key: string): string | null {
-  try {
-    return localStorage.getItem(key);
-  } catch {
-    return null;
-  }
-}
-
-/**
- * Moves the old localStorage values into this plugin's user settings, the
- * first time this browser runs the plugin. A value the user already changed
- * on the server wins: the browser's value only replaces a default.
- */
-export async function moveLocalTerminalPreferences(
-  app: Pick<TermixApp, "api">,
-): Promise<void> {
-  const found = LOCAL_KEYS.map((entry) => ({
-    ...entry,
-    raw: readStorage(entry.storageKey),
-  })).filter((entry) => entry.raw !== null);
-  if (found.length === 0) return;
-
-  try {
-    const { user } = await loadTerminalClientSettings(app.api);
-    const current = user as unknown as Record<string, unknown>;
-    const defaults = DEFAULT_USER_SETTINGS as unknown as Record<
-      string,
-      unknown
-    >;
-    const values: Record<string, unknown> = {};
-    for (const entry of found) {
-      const value = entry.parse(entry.raw as string);
-      if (
-        value !== undefined &&
-        value !== current[entry.setting] &&
-        current[entry.setting] === defaults[entry.setting]
-      ) {
-        values[entry.setting] = value;
-      }
-    }
-    if (Object.keys(values).length > 0) {
-      await app.api.put("/user-settings", values);
-      invalidateTerminalClientSettings();
-    }
-    for (const entry of found) {
-      try {
-        localStorage.removeItem(entry.storageKey);
-      } catch {
-        // storage unavailable
-      }
-    }
-  } catch {
-    // Try again next time the plugin starts.
-  }
-}
diff --git a/plugins/ssh-terminal/src/frontend/ssh-tools/SshToolsPanel.tsx b/plugins/ssh-terminal/src/frontend/ssh-tools/SshToolsPanel.tsx
deleted file mode 100644
index 21212fe6c..000000000
--- a/plugins/ssh-terminal/src/frontend/ssh-tools/SshToolsPanel.tsx
+++ /dev/null
@@ -1,387 +0,0 @@
-import { useState, useRef, useEffect, useSyncExternalStore } from "react";
-import { KeyRound, Terminal } from "lucide-react";
-import { toast } from "sonner";
-import { Button, Separator } from "@termix/plugin-sdk/ui";
-import {
-  getClientPreference,
-  getHostPassword,
-  setClientPreference,
-  useTranslation,
-  type PanelProps,
-} from "@termix/plugin-sdk/frontend";
-import {
-  getSessionHandle,
-  sessionsSnapshot,
-  subscribeSessions,
-} from "../session-registry";
-
-/**
- * SSH Tools: type into several open terminals at once, fill their saved
- * passwords, and the terminal's clipboard preferences.
- */
-export function SshToolsPanel({ targetTab }: PanelProps) {
-  const { t } = useTranslation();
-  const terminalTabs = useSyncExternalStore(
-    subscribeSessions,
-    sessionsSnapshot,
-  );
-  const activeTabId = targetTab?.id ?? "";
-  const [keyRecording, setKeyRecording] = useState(false);
-  const [rightClickPaste, setRightClickPaste] = useState(
-    () => getClientPreference("rightClickCopyPaste") !== "false",
-  );
-  const [copyOnSelect, setCopyOnSelect] = useState(
-    () => getClientPreference("copyOnSelect") === "true",
-  );
-  const [selectedTabIds, setSelectedTabIds] = useState<Set<string>>(
-    () =>
-      new Set(
-        activeTabId && terminalTabs.some((tab) => tab.id === activeTabId)
-          ? [activeTabId]
-          : [],
-      ),
-  );
-  const inputRef = useRef<HTMLInputElement>(null);
-
-  useEffect(() => {
-    if (keyRecording) inputRef.current?.focus();
-  }, [keyRecording]);
-
-  function toggleTab(id: string) {
-    setSelectedTabIds((prev) => {
-      const next = new Set(prev);
-      if (next.has(id)) {
-        next.delete(id);
-      } else {
-        next.add(id);
-      }
-      return next;
-    });
-  }
-
-  function selectAll() {
-    setSelectedTabIds(new Set(terminalTabs.map((tab) => tab.id)));
-  }
-
-  function deselectAll() {
-    setSelectedTabIds(new Set());
-  }
-
-  function broadcast(data: string) {
-    for (const tabId of selectedTabIds) {
-      getSessionHandle(tabId)?.sendInput(data);
-    }
-  }
-
-  async function fillPassword() {
-    let filled = 0;
-    let missing = 0;
-
-    for (const tabId of selectedTabIds) {
-      const tab = terminalTabs.find((session) => session.id === tabId);
-      const hostId = tab?.hostId ?? null;
-      const ref = getSessionHandle(tabId);
-      if (!hostId || !ref) {
-        missing++;
-        continue;
-      }
-
-      const password = await getHostPassword(hostId, "password");
-      if (!password) {
-        missing++;
-        continue;
-      }
-
-      ref.sendInput(password + "\r");
-      filled++;
-    }
-
-    if (filled > 0) {
-      toast.success(t("sshTools.fillPasswordSuccess", { count: filled }));
-    }
-    if (missing > 0) {
-      toast.error(t("sshTools.fillPasswordMissing", { count: missing }));
-    }
-  }
-
-  function broadcastArrow(normalSeq: string, appSeq: string) {
-    for (const tabId of selectedTabIds) {
-      const ref = getSessionHandle(tabId);
-      if (!ref) continue;
-      const appMode = ref.getApplicationCursorKeysMode?.() ?? false;
-      ref.sendInput(appMode ? appSeq : normalSeq);
-    }
-  }
-
-  function handlePaste(e: React.ClipboardEvent<HTMLInputElement>) {
-    e.preventDefault();
-    e.stopPropagation();
-    const text = e.clipboardData.getData("text");
-    if (text) broadcast(text);
-  }
-
-  function handleKeyDown(e: React.KeyboardEvent<HTMLInputElement>) {
-    const ctrl = e.ctrlKey;
-    const { key } = e;
-
-    // Let Ctrl/Cmd+V fall through so the browser fires a paste event
-    // instead of being swallowed by the preventDefault() below.
-    if ((ctrl || e.metaKey) && key.toLowerCase() === "v") {
-      return;
-    }
-
-    e.preventDefault();
-    e.stopPropagation();
-
-    if (ctrl) {
-      const ctrlMap: Record<string, string> = {
-        c: "\x03",
-        d: "\x04",
-        l: "\x0C",
-        u: "\x15",
-        k: "\x0B",
-        a: "\x01",
-        e: "\x05",
-        w: "\x17",
-        z: "\x1A",
-        r: "\x12",
-      };
-      const seq = ctrlMap[key.toLowerCase()];
-      if (seq) {
-        broadcast(seq);
-        return;
-      }
-    }
-
-    if (key === "ArrowUp") {
-      broadcastArrow("\x1B[A", "\x1BOA");
-      return;
-    }
-    if (key === "ArrowDown") {
-      broadcastArrow("\x1B[B", "\x1BOB");
-      return;
-    }
-    if (key === "ArrowRight") {
-      broadcastArrow("\x1B[C", "\x1BOC");
-      return;
-    }
-    if (key === "ArrowLeft") {
-      broadcastArrow("\x1B[D", "\x1BOD");
-      return;
-    }
-
-    const specialMap: Record<string, string> = {
-      Enter: "\r",
-      Backspace: "\x7F",
-      Delete: "\x1B[3~",
-      Tab: "\t",
-      Escape: "\x1B",
-      Home: "\x1B[H",
-      End: "\x1B[F",
-      PageUp: "\x1B[5~",
-      PageDown: "\x1B[6~",
-      Insert: "\x1B[2~",
-      F1: "\x1BOP",
-      F2: "\x1BOQ",
-      F3: "\x1BOR",
-      F4: "\x1BOS",
-      F5: "\x1B[15~",
-      F6: "\x1B[17~",
-      F7: "\x1B[18~",
-      F8: "\x1B[19~",
-      F9: "\x1B[20~",
-      F10: "\x1B[21~",
-      F11: "\x1B[23~",
-      F12: "\x1B[24~",
-    };
-
-    const seq = specialMap[key];
-    if (seq) {
-      broadcast(seq);
-      return;
-    }
-
-    if (!ctrl && !e.altKey && !e.metaKey && key.length === 1) {
-      broadcast(key);
-    }
-  }
-
-  function toggleRecording() {
-    const next = !keyRecording;
-    if (!next) {
-      // clear the phantom text when stopping
-      if (inputRef.current) inputRef.current.value = "";
-    }
-    setKeyRecording(next);
-  }
-
-  return (
-    <div className="flex flex-col gap-3 p-3">
-      <div className="flex flex-col gap-2">
-        <span className="text-xs font-bold uppercase tracking-widest">
-          {t("sshTools.keyRecordingTitle")}
-        </span>
-
-        {/* Terminal selector */}
-        <div className="flex flex-col gap-1">
-          <div className="flex items-center justify-between">
-            <span className="text-xs text-muted-foreground">
-              {t("sshTools.recordToTerminals")}
-            </span>
-            <div className="flex items-center gap-2">
-              <button
-                onClick={selectAll}
-                className="text-[10px] text-accent-brand hover:text-accent-brand/70"
-              >
-                {t("sshTools.selectAll")}
-              </button>
-              <button
-                onClick={deselectAll}
-                className="text-[10px] text-accent-brand hover:text-accent-brand/70"
-              >
-                {t("sshTools.selectNone")}
-              </button>
-            </div>
-          </div>
-
-          {terminalTabs.length === 0 ? (
-            <div className="flex items-center gap-1.5 px-2.5 py-2 border border-dashed border-border/60 text-muted-foreground/40">
-              <Terminal className="size-3 shrink-0" />
-              <span className="text-xs">
-                {t("sshTools.noTerminalTabsOpen")}
-              </span>
-            </div>
-          ) : (
-            <div className="flex flex-col gap-1">
-              {terminalTabs.map((tab) => {
-                const selected = selectedTabIds.has(tab.id);
-                return (
-                  <button
-                    key={tab.id}
-                    onClick={() => toggleTab(tab.id)}
-                    className={`flex items-center gap-2 px-2.5 py-1.5 border text-left transition-colors ${
-                      selected
-                        ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand"
-                        : "border-border text-muted-foreground hover:text-foreground hover:border-muted-foreground/40"
-                    }`}
-                  >
-                    <div
-                      className={`size-3 border-2 flex items-center justify-center shrink-0 transition-colors ${
-                        selected
-                          ? "border-accent-brand bg-accent-brand"
-                          : "border-border/60"
-                      }`}
-                    >
-                      {selected && <div className="size-1.5 bg-background" />}
-                    </div>
-                    <Terminal className="size-3 shrink-0 opacity-60" />
-                    <span className="text-xs font-medium truncate flex-1">
-                      {tab.label || tab.hostName || tab.ip}
-                    </span>
-                  </button>
-                );
-              })}
-            </div>
-          )}
-        </div>
-
-        <Button
-          variant="outline"
-          disabled={selectedTabIds.size === 0}
-          className={`w-full ${keyRecording ? "border-accent-brand/40 text-accent-brand bg-accent-brand/10 hover:bg-accent-brand/20 hover:text-accent-brand" : ""}`}
-          onClick={toggleRecording}
-        >
-          {keyRecording
-            ? `${t("sshTools.stopRecording")} (${selectedTabIds.size})`
-            : selectedTabIds.size === 0
-              ? t("sshTools.selectTerminalsAbove")
-              : `${t("sshTools.startRecording")} (${selectedTabIds.size})`}
-        </Button>
-
-        {keyRecording && (
-          <input
-            ref={inputRef}
-            onKeyDown={handleKeyDown}
-            onPaste={handlePaste}
-            onChange={(e) => {
-              // Keystrokes are broadcast directly via handleKeyDown; the
-              // field itself must stay empty. This also catches paste
-              // insertion on browsers that fire "input" before we can
-              // intercept it in onPaste.
-              e.target.value = "";
-            }}
-            placeholder={t("sshTools.broadcastInputPlaceholder")}
-            className="w-full px-2.5 py-2 text-xs bg-background border border-accent-brand/40 text-foreground placeholder:text-muted-foreground/40 outline-none focus:border-accent-brand/70 caret-transparent"
-          />
-        )}
-
-        <Button
-          variant="outline"
-          disabled={selectedTabIds.size === 0}
-          className="w-full"
-          onClick={() => {
-            void fillPassword();
-          }}
-        >
-          <KeyRound className="size-3.5 mr-2" />
-          {selectedTabIds.size === 0
-            ? t("sshTools.selectTerminalsAbove")
-            : `${t("sshTools.fillPassword")} (${selectedTabIds.size})`}
-        </Button>
-      </div>
-
-      <Separator />
-
-      <div className="flex flex-col gap-2">
-        <span className="text-xs font-bold uppercase tracking-widest">
-          {t("sshTools.settingsTitle")}
-        </span>
-        <div className="flex items-center justify-between gap-4">
-          <span className="text-sm text-muted-foreground">
-            {t("sshTools.enableRightClickCopyPaste")}
-          </span>
-          <button
-            onClick={() => {
-              const next = !rightClickPaste;
-              setRightClickPaste(next);
-              setClientPreference(
-                "rightClickCopyPaste",
-                next ? "true" : "false",
-              );
-            }}
-            className={`relative inline-flex h-5 w-9 shrink-0 cursor-pointer items-center border-2 transition-colors ${
-              rightClickPaste
-                ? "bg-accent-brand border-accent-brand"
-                : "bg-muted border-border"
-            }`}
-          >
-            <span
-              className={`pointer-events-none inline-block h-3 w-3 bg-background shadow-sm transition-transform ${rightClickPaste ? "translate-x-4" : "translate-x-0.5"}`}
-            />
-          </button>
-        </div>
-        <div className="flex items-center justify-between gap-4">
-          <span className="text-sm text-muted-foreground">
-            {t("sshTools.copyOnSelect")}
-          </span>
-          <button
-            onClick={() => {
-              const next = !copyOnSelect;
-              setCopyOnSelect(next);
-              setClientPreference("copyOnSelect", next ? "true" : "false");
-            }}
-            className={`relative inline-flex h-5 w-9 shrink-0 cursor-pointer items-center border-2 transition-colors ${
-              copyOnSelect
-                ? "bg-accent-brand border-accent-brand"
-                : "bg-muted border-border"
-            }`}
-          >
-            <span
-              className={`pointer-events-none inline-block h-3 w-3 bg-background shadow-sm transition-transform ${copyOnSelect ? "translate-x-4" : "translate-x-0.5"}`}
-            />
-          </button>
-        </div>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/ssh-terminal/src/frontend/terminal-api.ts b/plugins/ssh-terminal/src/frontend/terminal-api.ts
deleted file mode 100644
index ac8dc4a37..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal-api.ts
+++ /dev/null
@@ -1,82 +0,0 @@
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import {
-  normalizeTouchInputSettings,
-  type TouchInputSettings,
-} from "../shared/touch-input-settings";
-import {
-  readUserSettings,
-  type TerminalUserSettings,
-} from "../shared/terminal-settings";
-
-/** Calls to this plugin's own routes under /plugin-api/ssh-terminal/. */
-
-export interface TerminalClientSettings {
-  sessionTimeoutMinutes: number;
-  sessionPersistence: boolean;
-  commandHistoryEnabled: boolean;
-  touchInput: TouchInputSettings;
-  user: TerminalUserSettings;
-}
-
-export async function getClientSettings(
-  api: PluginApiClient,
-): Promise<TerminalClientSettings> {
-  const { data } = await api.get<TerminalClientSettings>("/client-settings");
-  return {
-    ...data,
-    touchInput: normalizeTouchInputSettings(data?.touchInput),
-    user: readUserSettings(data?.user as unknown as Record<string, unknown>),
-  };
-}
-
-/** Turns auto tmux on for a host (its terminal host setting). */
-export async function enableHostAutoTmux(
-  api: PluginApiClient,
-  hostId: number,
-): Promise<void> {
-  await api.put(`/hosts/${hostId}/auto-tmux`, { enabled: true });
-}
-
-export async function saveCommandToHistory(
-  api: PluginApiClient,
-  hostId: number,
-  command: string,
-): Promise<void> {
-  await api.post("/command-history", { hostId, command });
-}
-
-export async function getCommandHistory(
-  api: PluginApiClient,
-  hostId: number,
-): Promise<string[]> {
-  const { data } = await api.get<string[]>(`/command-history/${hostId}`);
-  return Array.isArray(data) ? data : [];
-}
-
-export async function deleteCommandFromHistory(
-  api: PluginApiClient,
-  hostId: number,
-  command: string,
-): Promise<void> {
-  await api.post("/command-history/delete", { hostId, command });
-}
-
-export async function clearCommandHistory(
-  api: PluginApiClient,
-  hostId: number,
-): Promise<void> {
-  await api.delete(`/command-history/${hostId}`);
-}
-
-/** A host-scope setting of this plugin, as the host payload carries it. */
-export function hostSetting(
-  host: object | null | undefined,
-  key: string,
-  fallback: boolean,
-): boolean {
-  const settings = (
-    host as { pluginSettings?: Record<string, Record<string, unknown>> } | null
-  )?.pluginSettings;
-  const value = settings?.["ssh-terminal"]?.[key];
-  return typeof value === "boolean" ? value : fallback;
-}
diff --git a/plugins/ssh-terminal/src/frontend/terminal-settings.ts b/plugins/ssh-terminal/src/frontend/terminal-settings.ts
deleted file mode 100644
index 80106944d..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal-settings.ts
+++ /dev/null
@@ -1,130 +0,0 @@
-import { useEffect, useMemo, useRef, useState } from "react";
-import {
-  usePluginApi,
-  type PluginApiClient,
-} from "@termix/plugin-sdk/frontend";
-import { getClientSettings, type TerminalClientSettings } from "./terminal-api";
-import {
-  DEFAULT_MOSH_COMMAND,
-  DEFAULT_USER_SETTINGS,
-  readHostTerminalSettings,
-  resolveTerminalSettings,
-  type TerminalAppearance,
-  type TerminalBehavior,
-  type TerminalUserSettings,
-} from "../shared/terminal-settings";
-
-/**
- * The signed-in user's terminal settings, fetched once and shared by every
- * terminal. Invalidated when one of this plugin's settings is saved.
- */
-
-let cached: TerminalClientSettings | null = null;
-let pending: Promise<TerminalClientSettings> | null = null;
-const listeners = new Set<() => void>();
-
-export function loadTerminalClientSettings(
-  api: PluginApiClient,
-): Promise<TerminalClientSettings> {
-  if (cached) return Promise.resolve(cached);
-  if (!pending) {
-    const request = getClientSettings(api)
-      .then((settings) => {
-        if (pending === request) cached = settings;
-        return settings;
-      })
-      .finally(() => {
-        if (pending === request) pending = null;
-      });
-    pending = request;
-  }
-  return pending;
-}
-
-export function peekTerminalClientSettings(): TerminalClientSettings | null {
-  return cached;
-}
-
-/** Drops the cache and has every mounted terminal read the settings again. */
-export function invalidateTerminalClientSettings(): void {
-  cached = null;
-  pending = null;
-  for (const listener of [...listeners]) listener();
-}
-
-export function resetTerminalClientSettings(): void {
-  cached = null;
-  pending = null;
-  listeners.clear();
-}
-
-export function useTerminalClientSettings(): TerminalClientSettings | null {
-  const api = usePluginApi();
-  const apiRef = useRef(api);
-  apiRef.current = api;
-  const [value, setValue] = useState<TerminalClientSettings | null>(cached);
-
-  useEffect(() => {
-    let active = true;
-    const load = () => {
-      loadTerminalClientSettings(apiRef.current)
-        .then((settings) => {
-          if (active) setValue(settings);
-        })
-        .catch(() => {
-          // A guest on a share link has no account to read settings for.
-        });
-    };
-    load();
-    listeners.add(load);
-    return () => {
-      active = false;
-      listeners.delete(load);
-    };
-  }, []);
-
-  return value;
-}
-
-export type ResolvedTerminalConfig = TerminalAppearance & TerminalBehavior;
-
-export interface TerminalSettingsForHost {
-  config: ResolvedTerminalConfig;
-  user: TerminalUserSettings;
-}
-
-/** This plugin's host values off a host record, as the host payload carries them. */
-export function hostTerminalValues(
-  host: object | null | undefined,
-): Record<string, unknown> | undefined {
-  const settings = (
-    host as { pluginSettings?: Record<string, Record<string, unknown>> } | null
-  )?.pluginSettings;
-  return settings?.["ssh-terminal"];
-}
-
-export function resolveForHost(
-  host: object | null | undefined,
-): ResolvedTerminalConfig {
-  const resolved = resolveTerminalSettings(
-    readHostTerminalSettings(hostTerminalValues(host)),
-  );
-  return {
-    ...resolved,
-    moshCommand: resolved.moshCommand || DEFAULT_MOSH_COMMAND,
-  };
-}
-
-/** What a terminal on this host runs with, kept current as settings change. */
-export function useTerminalSettings(
-  host: object | null | undefined,
-): TerminalSettingsForHost {
-  const client = useTerminalClientSettings();
-  const own = hostTerminalValues(host);
-  const ownKey = own ? JSON.stringify(own) : "";
-  return useMemo(() => {
-    const user = client?.user ?? DEFAULT_USER_SETTINGS;
-    return { config: resolveForHost(host), user };
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [ownKey, client]);
-}
diff --git a/plugins/ssh-terminal/src/frontend/terminal/MobileTerminalKeyboard.tsx b/plugins/ssh-terminal/src/frontend/terminal/MobileTerminalKeyboard.tsx
deleted file mode 100644
index 45bdba85e..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/MobileTerminalKeyboard.tsx
+++ /dev/null
@@ -1,525 +0,0 @@
-import { useEffect, useRef, useState } from "react";
-import {
-  ChevronUp,
-  ChevronDown,
-  ChevronLeft,
-  ChevronRight,
-  Clipboard,
-  Pencil,
-  X,
-  Plus,
-  RotateCcw,
-} from "lucide-react";
-import { toast } from "sonner";
-import type { TerminalHandle } from "./terminal-types";
-import {
-  cn,
-  Button,
-  Input,
-  Sheet,
-  SheetContent,
-  SheetDescription,
-  SheetFooter,
-  SheetHeader,
-  SheetTitle,
-} from "@termix/plugin-sdk/ui";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-interface MobileTerminalKeyboardProps {
-  terminalRef: React.RefObject<TerminalHandle | null>;
-}
-
-const CTRL_MAP: Record<string, string> = {
-  a: "\x01",
-  c: "\x03",
-  d: "\x04",
-  k: "\x0B",
-  l: "\x0C",
-  r: "\x12",
-  u: "\x15",
-  w: "\x17",
-  z: "\x1A",
-};
-
-const DEFAULT_QUICK_KEYS = [
-  "/",
-  "|",
-  "~",
-  "-",
-  "_",
-  "#",
-  "\\",
-  '"',
-  "'",
-  ";",
-  ":",
-  "!",
-  "&",
-];
-
-const LS_KEY = "termix:mobileQuickKeys";
-
-function loadQuickKeys(): string[] {
-  try {
-    const raw = localStorage.getItem(LS_KEY);
-    if (raw) {
-      const parsed = JSON.parse(raw);
-      if (Array.isArray(parsed) && parsed.every((v) => typeof v === "string"))
-        return parsed;
-    }
-  } catch {
-    /* ignore */
-  }
-  return DEFAULT_QUICK_KEYS;
-}
-
-function saveQuickKeys(keys: string[]) {
-  try {
-    localStorage.setItem(LS_KEY, JSON.stringify(keys));
-  } catch {
-    /* ignore */
-  }
-}
-
-// Shared button styles
-const KEY_BASE =
-  "flex items-center justify-center rounded border transition-colors select-none touch-none active:scale-95 shrink-0";
-const KEY_NORMAL = "border-border bg-muted/50 text-foreground hover:bg-muted";
-const KEY_ACTIVE =
-  "border-accent-brand bg-accent-brand/20 text-accent-brand shadow-[0_0_0_1px_color-mix(in_oklab,var(--accent-brand)_30%,transparent)]";
-const KEY_MD = "h-9 px-3 min-w-[2.75rem] text-xs font-medium";
-const KEY_SM = "h-9 w-9";
-const SEP = "w-px h-5 bg-border mx-0.5 shrink-0";
-
-// --- QuickKeysSheet ---
-
-interface QuickKeysSheetProps {
-  open: boolean;
-  onOpenChange: (open: boolean) => void;
-  quickKeys: string[];
-  onUpdateKeys: (keys: string[]) => void;
-}
-
-function QuickKeysSheet({
-  open,
-  onOpenChange,
-  quickKeys,
-  onUpdateKeys,
-}: QuickKeysSheetProps) {
-  const { t } = useTranslation();
-  const [newSymbol, setNewSymbol] = useState("");
-  const inputRef = useRef<HTMLInputElement>(null);
-
-  useEffect(() => {
-    if (!open) setNewSymbol("");
-  }, [open]);
-
-  function addKey() {
-    const sym = newSymbol.trim();
-    if (!sym || quickKeys.includes(sym) || sym.length > 8) {
-      setNewSymbol("");
-      return;
-    }
-    onUpdateKeys([...quickKeys, sym]);
-    setNewSymbol("");
-    inputRef.current?.focus();
-  }
-
-  function removeKey(index: number) {
-    onUpdateKeys(quickKeys.filter((_, i) => i !== index));
-  }
-
-  function resetDefaults() {
-    onUpdateKeys(DEFAULT_QUICK_KEYS);
-  }
-
-  return (
-    <Sheet open={open} onOpenChange={onOpenChange}>
-      <SheetContent
-        side="bottom"
-        className="max-h-[70vh] flex flex-col border-border"
-      >
-        <SheetHeader className="flex-row items-start justify-between pr-8">
-          <div>
-            <SheetTitle>{t("mobileKeyboard.quickKeysTitle")}</SheetTitle>
-            <SheetDescription>
-              {t("mobileKeyboard.quickKeysDesc")}
-            </SheetDescription>
-          </div>
-          <Button
-            variant="ghost"
-            size="sm"
-            className="text-xs"
-            onClick={resetDefaults}
-          >
-            <RotateCcw className="size-3 mr-1" />
-            {t("mobileKeyboard.resetDefaults")}
-          </Button>
-        </SheetHeader>
-
-        <div className="flex-1 overflow-y-auto px-4 py-2">
-          <div className="flex flex-wrap gap-2">
-            {quickKeys.map((sym, i) => (
-              <div
-                key={i}
-                className="flex items-center gap-1 h-8 pl-3 pr-1 rounded border border-border bg-muted/50 text-xs font-medium text-foreground"
-              >
-                <span className="font-mono">{sym}</span>
-                <button
-                  className="size-5 flex items-center justify-center rounded hover:bg-destructive hover:text-destructive-foreground transition-colors"
-                  onClick={() => removeKey(i)}
-                  title={t("mobileKeyboard.removeQuickKey")}
-                >
-                  <X className="size-3" />
-                </button>
-              </div>
-            ))}
-          </div>
-        </div>
-
-        <div className="flex gap-2 px-4 py-2 border-t border-border">
-          <Input
-            ref={inputRef}
-            value={newSymbol}
-            onChange={(e) => setNewSymbol(e.target.value)}
-            onKeyDown={(e) => {
-              if (e.key === "Enter") addKey();
-            }}
-            maxLength={8}
-            placeholder={t("mobileKeyboard.quickKeyPlaceholder")}
-            className="h-9 text-xs font-mono"
-          />
-          <Button
-            variant="outline"
-            size="sm"
-            className="h-9 shrink-0"
-            onClick={addKey}
-            disabled={!newSymbol.trim() || quickKeys.includes(newSymbol.trim())}
-          >
-            <Plus className="size-3.5 mr-1" />
-            {t("mobileKeyboard.addQuickKey")}
-          </Button>
-        </div>
-
-        <SheetFooter className="pt-0">
-          <Button className="w-full" onClick={() => onOpenChange(false)}>
-            {t("mobileKeyboard.done")}
-          </Button>
-        </SheetFooter>
-      </SheetContent>
-    </Sheet>
-  );
-}
-
-// --- CtrlPanel ---
-
-interface CtrlPanelProps {
-  onSend: (letter: string) => void;
-}
-
-function CtrlPanel({ onSend }: CtrlPanelProps) {
-  const CTRL_KEYS = ["c", "d", "l", "u", "z", "a", "r", "w", "k"];
-
-  return (
-    <div className="flex items-center gap-1 px-2 py-1 bg-muted/30 border-t border-border overflow-x-auto">
-      {CTRL_KEYS.map((k) => (
-        <button
-          key={k}
-          className={cn(KEY_BASE, KEY_NORMAL, KEY_MD, "font-mono")}
-          onPointerDown={(e) => {
-            e.preventDefault();
-            onSend(k);
-          }}
-          title={`Ctrl+${k.toUpperCase()}`}
-        >
-          ^{k.toUpperCase()}
-        </button>
-      ))}
-    </div>
-  );
-}
-
-// --- MobileTerminalKeyboard ---
-
-export function MobileTerminalKeyboard({
-  terminalRef,
-}: MobileTerminalKeyboardProps) {
-  const { t } = useTranslation();
-  const [ctrlActive, setCtrlActive] = useState(false);
-  const [shiftActive, setShiftActive] = useState(false);
-  const [quickKeys, setQuickKeys] = useState<string[]>(loadQuickKeys);
-  const [sheetOpen, setSheetOpen] = useState(false);
-
-  function send(seq: string) {
-    terminalRef.current?.sendInput?.(seq);
-  }
-
-  async function handlePaste() {
-    try {
-      const text = window.electronClipboard
-        ? await window.electronClipboard.readText()
-        : ((await navigator.clipboard?.readText?.()) ?? "");
-      if (text) terminalRef.current?.paste?.(text);
-      else toast.error(t("terminal.clipboardReadFailed"));
-    } catch {
-      toast.error(t("terminal.clipboardReadFailed"));
-    }
-  }
-
-  function toggleCtrl() {
-    setCtrlActive((v) => !v);
-    setShiftActive(false);
-  }
-
-  function toggleShift() {
-    setShiftActive((v) => !v);
-    setCtrlActive(false);
-  }
-
-  function sendArrow(normalSeq: string, appSeq: string, shiftSeq: string) {
-    if (shiftActive) {
-      send(shiftSeq);
-      setShiftActive(false);
-      return;
-    }
-    const appMode =
-      terminalRef.current?.getApplicationCursorKeysMode?.() ?? false;
-    send(appMode ? appSeq : normalSeq);
-  }
-
-  function handleTab() {
-    send(shiftActive ? "\x1b[Z" : "\t");
-    setShiftActive(false);
-  }
-
-  function handleCtrlKey(letter: string) {
-    const seq = CTRL_MAP[letter];
-    if (seq) send(seq);
-    setCtrlActive(false);
-  }
-
-  function updateQuickKeys(next: string[]) {
-    setQuickKeys(next);
-    saveQuickKeys(next);
-  }
-
-  return (
-    <div className="md:hidden flex flex-col bg-sidebar border-t border-border shrink-0">
-      {/* Row 1 — special keys */}
-      <div className="flex items-center gap-1 px-2 py-1.5 overflow-x-auto">
-        {/* ESC */}
-        <button
-          className={cn(KEY_BASE, KEY_NORMAL, KEY_MD)}
-          onPointerDown={(e) => {
-            e.preventDefault();
-            send("\x1b");
-          }}
-          title={t("mobileKeyboard.esc")}
-        >
-          {t("mobileKeyboard.esc")}
-        </button>
-
-        {/* Tab / back-tab */}
-        <button
-          className={cn(
-            KEY_BASE,
-            KEY_NORMAL,
-            KEY_MD,
-            shiftActive && "ring-1 ring-accent-brand/50",
-          )}
-          onPointerDown={(e) => {
-            e.preventDefault();
-            handleTab();
-          }}
-          title={shiftActive ? "Shift+Tab" : t("mobileKeyboard.tab")}
-        >
-          {shiftActive ? t("mobileKeyboard.backTab") : t("mobileKeyboard.tab")}
-        </button>
-
-        {/* Paste */}
-        <button
-          className={cn(KEY_BASE, KEY_NORMAL, KEY_SM)}
-          onPointerDown={(e) => {
-            e.preventDefault();
-            handlePaste();
-          }}
-          title={t("mobileKeyboard.paste")}
-        >
-          <Clipboard className="size-4" />
-        </button>
-
-        <div className={SEP} />
-
-        {/* Ctrl */}
-        <button
-          className={cn(KEY_BASE, KEY_MD, ctrlActive ? KEY_ACTIVE : KEY_NORMAL)}
-          onPointerDown={(e) => {
-            e.preventDefault();
-            toggleCtrl();
-          }}
-          title={t("mobileKeyboard.ctrl")}
-        >
-          {t("mobileKeyboard.ctrl")}
-        </button>
-
-        {/* Shift */}
-        <button
-          className={cn(
-            KEY_BASE,
-            KEY_MD,
-            shiftActive ? KEY_ACTIVE : KEY_NORMAL,
-          )}
-          onPointerDown={(e) => {
-            e.preventDefault();
-            toggleShift();
-          }}
-          title={t("mobileKeyboard.shift")}
-        >
-          {t("mobileKeyboard.shift")}
-        </button>
-
-        <div className={SEP} />
-
-        {/* Arrow keys */}
-        <button
-          className={cn(KEY_BASE, KEY_NORMAL, KEY_SM)}
-          onPointerDown={(e) => {
-            e.preventDefault();
-            sendArrow("\x1b[A", "\x1bOA", "\x1b[1;2A");
-          }}
-          title={t("mobileKeyboard.arrowUp")}
-        >
-          <ChevronUp className="size-4" />
-        </button>
-        <button
-          className={cn(KEY_BASE, KEY_NORMAL, KEY_SM)}
-          onPointerDown={(e) => {
-            e.preventDefault();
-            sendArrow("\x1b[B", "\x1bOB", "\x1b[1;2B");
-          }}
-          title={t("mobileKeyboard.arrowDown")}
-        >
-          <ChevronDown className="size-4" />
-        </button>
-        <button
-          className={cn(KEY_BASE, KEY_NORMAL, KEY_SM)}
-          onPointerDown={(e) => {
-            e.preventDefault();
-            sendArrow("\x1b[D", "\x1bOD", "\x1b[1;2D");
-          }}
-          title={t("mobileKeyboard.arrowLeft")}
-        >
-          <ChevronLeft className="size-4" />
-        </button>
-        <button
-          className={cn(KEY_BASE, KEY_NORMAL, KEY_SM)}
-          onPointerDown={(e) => {
-            e.preventDefault();
-            sendArrow("\x1b[C", "\x1bOC", "\x1b[1;2C");
-          }}
-          title={t("mobileKeyboard.arrowRight")}
-        >
-          <ChevronRight className="size-4" />
-        </button>
-
-        <div className={SEP} />
-
-        {/* Home / End */}
-        <button
-          className={cn(KEY_BASE, KEY_NORMAL, KEY_MD)}
-          onPointerDown={(e) => {
-            e.preventDefault();
-            send("\x1b[H");
-          }}
-          title={t("mobileKeyboard.home")}
-        >
-          {t("mobileKeyboard.home")}
-        </button>
-        <button
-          className={cn(KEY_BASE, KEY_NORMAL, KEY_MD)}
-          onPointerDown={(e) => {
-            e.preventDefault();
-            send("\x1b[F");
-          }}
-          title={t("mobileKeyboard.end")}
-        >
-          {t("mobileKeyboard.end")}
-        </button>
-
-        <div className={SEP} />
-
-        {/* PgUp / PgDn / Del */}
-        <button
-          className={cn(KEY_BASE, KEY_NORMAL, KEY_MD)}
-          onPointerDown={(e) => {
-            e.preventDefault();
-            send("\x1b[5~");
-          }}
-          title={t("mobileKeyboard.pageUp")}
-        >
-          {t("mobileKeyboard.pageUp")}
-        </button>
-        <button
-          className={cn(KEY_BASE, KEY_NORMAL, KEY_MD)}
-          onPointerDown={(e) => {
-            e.preventDefault();
-            send("\x1b[6~");
-          }}
-          title={t("mobileKeyboard.pageDown")}
-        >
-          {t("mobileKeyboard.pageDown")}
-        </button>
-        <button
-          className={cn(KEY_BASE, KEY_NORMAL, KEY_MD)}
-          onPointerDown={(e) => {
-            e.preventDefault();
-            send("\x1b[3~");
-          }}
-          title={t("mobileKeyboard.delete")}
-        >
-          {t("mobileKeyboard.delete")}
-        </button>
-      </div>
-
-      {/* Ctrl combos panel */}
-      {ctrlActive && <CtrlPanel onSend={handleCtrlKey} />}
-
-      {/* Row 2 — quick keys */}
-      <div className="flex items-center gap-1 px-2 pb-1.5 overflow-x-auto">
-        {quickKeys.map((sym, i) => (
-          <button
-            key={i}
-            className={cn(KEY_BASE, KEY_NORMAL, KEY_MD, "font-mono")}
-            onPointerDown={(e) => {
-              e.preventDefault();
-              send(sym);
-            }}
-            title={sym}
-          >
-            {sym}
-          </button>
-        ))}
-
-        <div className="ml-auto shrink-0">
-          <button
-            className={cn(KEY_BASE, KEY_NORMAL, KEY_SM)}
-            onPointerDown={(e) => {
-              e.preventDefault();
-              setSheetOpen(true);
-            }}
-            title={t("mobileKeyboard.editQuickKeys")}
-          >
-            <Pencil className="size-3.5" />
-          </button>
-        </div>
-      </div>
-
-      <QuickKeysSheet
-        open={sheetOpen}
-        onOpenChange={setSheetOpen}
-        quickKeys={quickKeys}
-        onUpdateKeys={updateQuickKeys}
-      />
-    </div>
-  );
-}
diff --git a/plugins/ssh-terminal/src/frontend/terminal/Terminal.tsx b/plugins/ssh-terminal/src/frontend/terminal/Terminal.tsx
deleted file mode 100644
index 1d50b78bd..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/Terminal.tsx
+++ /dev/null
@@ -1,4027 +0,0 @@
-import {
-  fontSizeStorageKey as getFontSizeStorageKey,
-  readFontSize,
-  saveFontSize,
-} from "./font-size-storage";
-import { getErrorMessage } from "./terminal-helpers";
-/* eslint-disable react-hooks/exhaustive-deps */
-import {
-  useEffect,
-  useRef,
-  useState,
-  useImperativeHandle,
-  forwardRef,
-  useCallback,
-  useMemo,
-} from "react";
-import { createPortal } from "react-dom";
-import { useXTerm } from "react-xtermjs";
-import { FitAddon } from "@xterm/addon-fit";
-import { ClipboardAddon } from "@xterm/addon-clipboard";
-import {
-  resolveTerminalContextMenuAction,
-  selectedTextToCopy,
-} from "./terminal-clipboard-actions";
-import { Unicode11Addon } from "@xterm/addon-unicode11";
-import { WebLinksAddon } from "@xterm/addon-web-links";
-import { SearchAddon } from "@xterm/addon-search";
-import {
-  deleteCommandFromHistory,
-  enableHostAutoTmux,
-  getClientSettings,
-  getCommandHistory,
-  hostSetting,
-} from "../terminal-api";
-import { useTerminalSettings } from "../terminal-settings";
-import {
-  DEFAULT_TERMINAL_CONFIG,
-  TERMINAL_FONTS,
-  resolveTerminalFontFamily,
-} from "../look/terminal-themes";
-import { resolveTermixThemeColors } from "../look/terminal-theme";
-import { ensureTerminalFontsLoaded } from "../look/terminal-global-styles";
-import {
-  getNextTerminalFontSize,
-  getTerminalFontZoomDirection,
-} from "../look/terminal-font-zoom";
-import { TmuxSessionPicker } from "./TmuxSessionPicker";
-import { getTerminalBufferText } from "./terminal-buffer-text.ts";
-import { getMacLineNavigationSequence } from "../lib/mac-line-navigation";
-import { useCommandTracker } from "./command-history/useCommandTracker";
-import {
-  highlightTerminalOutput,
-  updateControlStringMode,
-} from "../lib/terminal-syntax-highlighter";
-import { useCommandHistory } from "./command-history/CommandHistoryContext";
-import { getAndroidHardwareKeySequence } from "./android-hardware-keyboard";
-import {
-  buildImageUploadFormData,
-  type TerminalImageUploadSource,
-} from "./terminal-image-upload";
-import { TerminalSearchBar } from "./search/TerminalSearchBar.tsx";
-import {
-  CommandAutocomplete,
-  CommandAutosuggestion,
-} from "./command-history/CommandAutocomplete.tsx";
-import {
-  TERMINAL_SIDE_PANEL_SLOT,
-  TERMINAL_OVERLAY_SLOT,
-  type TerminalOverlayProps,
-  type TerminalSessionMessage,
-  type TerminalSlotApi,
-} from "./terminal-slots";
-import { toast } from "sonner";
-import { Save } from "lucide-react";
-import { TerminalToolbar } from "./TerminalToolbar.tsx";
-import type { TerminalHandle, TerminalHostConfig } from "./terminal-types.ts";
-import type { Host, TabType } from "../types";
-import { isTabKeyEvent } from "./terminal-key-event.ts";
-import { installTouchWheelCoordinator } from "./touch-wheel-coordinator.ts";
-import { loadTouchInputSettings } from "./touch-input-settings-store.ts";
-import {
-  handleTerminalClipboardKeyEvent,
-  getUseRightClickCopyPaste,
-} from "./terminal-clipboard.ts";
-import { quoteTerminalImagePath } from "./terminal-image-path.ts";
-import {
-  dispatchKeybindingAction,
-  isTerminalKeybindingAction,
-  sendRawToSocket,
-} from "../lib/keybinding-dispatch";
-import {
-  TerminalLocalEcho,
-  resolveLocalEchoMode,
-} from "../lib/terminal-local-echo";
-export type { TerminalHandle, TerminalHostConfig } from "./terminal-types.ts";
-import {
-  RobustClipboardProvider,
-  copyToClipboard,
-  readFromClipboard,
-  resolveConnectionOrigin,
-  pluginWsUrl,
-  TOTPDialog,
-  SSHAuthDialog,
-  PassphraseDialog,
-  BrowserSignInDialog,
-  HostKeyVerificationDialog,
-  useAppTheme as useTheme,
-  globalShortcutHandler,
-  isTabJumpHotkey,
-  useConfirmation,
-  ComponentSlot,
-  ConnectionLogProvider,
-  useConnectionLog,
-  ConnectionScreen,
-  Button,
-  hydrateLocalSharedHostAuth,
-  findMatchingKeybinding,
-  type CustomKeybinding,
-  isElectron,
-} from "@termix/plugin-sdk/ui";
-import {
-  notifyHostsChanged,
-  useTranslation,
-  invokeAction,
-  usePluginApi,
-  useSlotContributions,
-  getCustomKeybindings,
-  runKeybindingAction,
-  getClientPreference,
-  logActivity,
-  getHostPassword,
-  patchOpenTab,
-  useHost,
-} from "@termix/plugin-sdk/frontend";
-
-type HostKeyVerificationData = Omit<
-  React.ComponentProps<typeof HostKeyVerificationDialog>,
-  "isOpen" | "scenario" | "onAccept" | "onReject" | "backgroundColor"
->;
-
-interface SSHTerminalProps {
-  hostConfig: TerminalHostConfig;
-  isVisible: boolean;
-  title?: string;
-  showTitle?: boolean;
-  splitScreen?: boolean;
-  onClose?: () => void;
-  onTitleChange?: (title: string) => void;
-  initialPath?: string;
-  executeCommand?: string;
-  /** Attach to this tmux session right after connecting (tmux monitor). */
-  tmuxAttachSession?: string;
-  onOpenFileManager?: (path?: string) => void;
-  onOpenFileInEditor?: (filePath: string) => void;
-  previewTheme?: string | null;
-  /** When true, suppress automatic focus on connect/visibility change. */
-  disableAutoFocus?: boolean;
-  isQuickConnect?: boolean;
-  onSaveQuickConnect?: () => Promise<void>;
-  /** Full host record, used to drive the context-aware terminal toolbar. */
-  host?: Host;
-  onOpenTab?: (type: TabType) => void;
-  /** False when this terminal sits in an unfocused split pane. */
-  isFocusedPane?: boolean;
-  /** Fires when the backend reports the created session id (collab presenting). */
-  onSessionReady?: (sessionId: string) => void;
-}
-
-const ALTERNATE_SCREEN_SEQUENCE = /\x1b\[\?(47|1047|1049)([hl])/g;
-
-function updateAlternateScreenMode(output: string, currentMode: boolean) {
-  ALTERNATE_SCREEN_SEQUENCE.lastIndex = 0;
-  let isActive = currentMode;
-  let sawSequence = false;
-  let match: RegExpExecArray | null;
-
-  while ((match = ALTERNATE_SCREEN_SEQUENCE.exec(output)) !== null) {
-    sawSequence = true;
-    isActive = match[2] === "h";
-  }
-
-  return { isActive, sawSequence };
-}
-
-const TerminalInner = forwardRef<TerminalHandle, SSHTerminalProps>(
-  function SSHTerminal(
-    {
-      hostConfig,
-      isVisible,
-      onSessionReady,
-      splitScreen = false,
-      onClose,
-      onTitleChange,
-      initialPath,
-      executeCommand,
-      tmuxAttachSession,
-      onOpenFileManager,
-      onOpenFileInEditor,
-      previewTheme,
-      disableAutoFocus = false,
-      isQuickConnect = false,
-      onSaveQuickConnect,
-      host,
-      isFocusedPane = true,
-    },
-    ref,
-  ) {
-    const { t } = useTranslation();
-    const api = usePluginApi();
-    const { instance: terminal, ref: xtermRef } = useXTerm();
-    const commandHistoryContext = useCommandHistory();
-    const { confirmWithToast } = useConfirmation();
-    const { theme: appTheme } = useTheme();
-    const { addLog } = useConnectionLog();
-    // An embedded terminal (a widget, another plugin's window) gets only a
-    // connect config; the shell's record for the host carries its settings.
-    const shellHost = useHost(host ? undefined : hostConfig.id);
-    const settingsHost: object = host ?? shellHost ?? hostConfig;
-    const { config: termSettings, user: termUser } =
-      useTerminalSettings(settingsHost);
-    // Callbacks bound once (socket handlers, xterm hooks) read these.
-    const termSettingsRef = useRef(termSettings);
-    termSettingsRef.current = termSettings;
-    const termUserRef = useRef(termUser);
-    termUserRef.current = termUser;
-    const showToolbar = hostSetting(host, "enableTerminalToolbar", true);
-    const outputListenersRef = useRef(new Set<(data: string) => void>());
-
-    const savedTheme = localStorage.getItem(
-      `terminal_theme_host_${hostConfig.id}`,
-    );
-    const config = {
-      ...termSettings,
-      theme: savedTheme || termSettings.theme || DEFAULT_TERMINAL_CONFIG.theme,
-    };
-
-    // Ctrl+/- / Ctrl+wheel terminal zoom is persisted per-host and takes
-    // precedence over the configured font size, so it survives the periodic
-    // option refreshes (keepalive/refit/reconnect) that would otherwise snap
-    // the size back to config.fontSize.
-    const fontSizeStorageKey = getFontSizeStorageKey(
-      hostConfig.syncId ?? hostConfig.id,
-    );
-    const configuredFontSize = config.fontSize;
-    const fontSizePersistenceRef = useRef({
-      key: fontSizeStorageKey,
-      configured: configuredFontSize,
-    });
-    fontSizePersistenceRef.current = {
-      key: fontSizeStorageKey,
-      configured: configuredFontSize,
-    };
-    const readFontSizeOverride = () => {
-      try {
-        return readFontSize(
-          localStorage,
-          fontSizeStorageKey,
-          configuredFontSize,
-        );
-      } catch {
-        return null;
-      }
-    };
-    const fontSizeOverride = readFontSizeOverride();
-    if (fontSizeOverride !== null) {
-      config.fontSize = fontSizeOverride;
-    }
-
-    const activeTheme = previewTheme || config.theme;
-    const themeColors = resolveTermixThemeColors(
-      activeTheme,
-      appTheme,
-      config.customThemeColors,
-    );
-    const backgroundImage = config.backgroundImage || "";
-    const backgroundImageOpacity = config.backgroundImageOpacity ?? 0.15;
-    const backgroundColor = backgroundImage
-      ? "transparent"
-      : themeColors.background;
-    const fitAddonRef = useRef<FitAddon | null>(null);
-    const webSocketRef = useRef<WebSocket | null>(null);
-    const terminalInputDisposableRef = useRef<{ dispose(): void } | null>(null);
-    const localEchoRef = useRef<TerminalLocalEcho | null>(null);
-    const sessionOriginRef = useRef<"local" | "remote">("local");
-    // Set while an auto reconnect runs, so the old output stays on screen.
-    const keepScrollbackRef = useRef(false);
-    const customKeybindingsRef = useRef<CustomKeybinding[]>([]);
-    const resizeTimeout = useRef<NodeJS.Timeout | null>(null);
-    const wasDisconnectedBySSH = useRef(false);
-    const pingIntervalRef = useRef<NodeJS.Timeout | null>(null);
-    const pongReceivedRef = useRef(true);
-    const pongTimeoutRef = useRef<NodeJS.Timeout | null>(null);
-    const [isConnected, setIsConnected] = useState(false);
-
-    const [isSavingQuickConnect, setIsSavingQuickConnect] = useState(false);
-    const [isQuickConnectSaved, setIsQuickConnectSaved] = useState(false);
-    const [isImageUploading, setIsImageUploading] = useState(false);
-    const [isConnecting, setIsConnecting] = useState(false);
-    const [isFitted, setIsFitted] = useState(false);
-    const [connectionError, setConnectionError] = useState<string | null>(null);
-    const connectionErrorRef = useRef<string | null>(null);
-    const [showDisconnectedOverlay, setShowDisconnectedOverlay] =
-      useState(false);
-
-    const updateConnectionError = useCallback((error: string | null) => {
-      connectionErrorRef.current = error;
-      setConnectionError(error);
-    }, []);
-
-    const [, setIsAuthenticated] = useState(false);
-    const [totpRequired, setTotpRequired] = useState(false);
-    const [totpPrompt, setTotpPrompt] = useState<string>("");
-    const [isPasswordPrompt, setIsPasswordPrompt] = useState(false);
-    const [mfaPromptMode, setMfaPromptMode] = useState<
-      "totp" | "password" | "menu" | "push"
-    >("totp");
-    const [mfaWaiting, setMfaWaiting] = useState(false);
-    const [showAuthDialog, setShowAuthDialog] = useState(false);
-    const [authDialogReason, setAuthDialogReason] = useState<
-      "no_keyboard" | "auth_failed" | "timeout"
-    >("no_keyboard");
-    const [showPassphraseDialog, setShowPassphraseDialog] = useState(false);
-    const [, setKeyboardInteractiveDetected] = useState(false);
-    // A keyboard-interactive round finished in a browser, named after the
-    // handler that claimed it (see "<id>_auth_required").
-    const [browserSignIn, setBrowserSignIn] = useState<{
-      id: string;
-      label: string;
-      url: string;
-      code: string;
-    } | null>(null);
-    const browserSignInTimeoutRef = useRef<NodeJS.Timeout | null>(null);
-
-    // Overlays contributed by plugins (a Tailscale check, say) hear the
-    // session's messages and may hold the connect timeout while they wait.
-    const sessionListenersRef = useRef(
-      new Set<(message: TerminalSessionMessage) => void>(),
-    );
-    const connectTimeoutHoldsRef = useRef(0);
-    const emitSessionMessage = (message: TerminalSessionMessage) => {
-      for (const listener of sessionListenersRef.current) {
-        try {
-          listener(message);
-        } catch (error) {
-          console.error("[terminal] overlay listener threw", error);
-        }
-      }
-    };
-
-    const currentHostIdRef = useRef<number | null>(null);
-    const currentHostConfigRef = useRef<TerminalHostConfig | null>(null);
-
-    const [hostKeyVerification, setHostKeyVerification] = useState<{
-      isOpen: boolean;
-      scenario: "new" | "changed";
-      data: HostKeyVerificationData;
-    } | null>(null);
-
-    const sessionIdRef = useRef<string | null>(null);
-    const isAttachingSessionRef = useRef<boolean>(false);
-    // Consumed on first connectToHost call so retries don't re-attempt a stale session
-    const pendingRestoredSessionIdRef = useRef<string | null>(
-      hostConfig.restoredSessionId ?? null,
-    );
-    const [linkClickDialog, setLinkClickDialog] = useState<{
-      url: string;
-    } | null>(null);
-
-    useEffect(() => {
-      if (!linkClickDialog) return;
-
-      const handleKeyDown = (event: KeyboardEvent) => {
-        if (event.key !== "Escape") return;
-        event.preventDefault();
-        event.stopPropagation();
-        setLinkClickDialog(null);
-      };
-
-      window.addEventListener("keydown", handleKeyDown, true);
-      return () => window.removeEventListener("keydown", handleKeyDown, true);
-    }, [linkClickDialog]);
-
-    const [tmuxSessionPicker, setTmuxSessionPicker] = useState<{
-      sessions: Array<{
-        name: string;
-        created: number;
-        lastActivity: number;
-        windows: number;
-        attachedClients: number;
-      }>;
-    } | null>(null);
-    const tmuxSessionNameRef = useRef<string | null>(null);
-    const [isTmuxAttached, setIsTmuxAttached] = useState(false);
-    const tmuxCopyModeHintShownRef = useRef(false);
-
-    const isVisibleRef = useRef<boolean>(false);
-    const isFittingRef = useRef(false);
-    const reconnectTimeoutRef = useRef<NodeJS.Timeout | null>(null);
-    const reconnectAttempts = useRef(0);
-    const maxReconnectAttempts = 8;
-    const isUnmountingRef = useRef(false);
-    const shouldNotReconnectRef = useRef(false);
-    const isReconnectingRef = useRef(false);
-    const isConnectingRef = useRef(false);
-    const wasConnectedRef = useRef(false);
-    const wasSessionExpiredRef = useRef(false);
-
-    useEffect(() => {
-      isUnmountingRef.current = false;
-      shouldNotReconnectRef.current = false;
-      isReconnectingRef.current = false;
-      isConnectingRef.current = false;
-      reconnectAttempts.current = 0;
-      wasConnectedRef.current = false;
-      isAttachingSessionRef.current = false;
-
-      return () => {};
-    }, [hostConfig.id, hostConfig.instanceId]);
-    const connectionAttemptIdRef = useRef(0);
-    const totpTimeoutRef = useRef<NodeJS.Timeout | null>(null);
-    const connectionTimeoutRef = useRef<NodeJS.Timeout | null>(null);
-    const activityLoggedRef = useRef(false);
-    const commandHistoryTrackingEnabled = hostSetting(
-      hostConfig,
-      "enableCommandHistory",
-      true,
-    );
-
-    const { trackInput, getCurrentCommand, updateCurrentCommand } =
-      useCommandTracker({
-        hostId: hostConfig.id,
-        enabled: commandHistoryTrackingEnabled,
-        onCommandExecuted: (command) => {
-          if (!autocompleteHistory.current.includes(command)) {
-            autocompleteHistory.current = [
-              command,
-              ...autocompleteHistory.current,
-            ];
-          }
-        },
-      });
-
-    const getCurrentCommandRef = useRef(getCurrentCommand);
-    const updateCurrentCommandRef = useRef(updateCurrentCommand);
-
-    useEffect(() => {
-      getCurrentCommandRef.current = getCurrentCommand;
-      updateCurrentCommandRef.current = updateCurrentCommand;
-    }, [getCurrentCommand, updateCurrentCommand]);
-
-    const [showAutocomplete, setShowAutocomplete] = useState(false);
-    const [autocompleteSuggestions, setAutocompleteSuggestions] = useState<
-      string[]
-    >([]);
-    const [autocompleteSelectedIndex, setAutocompleteSelectedIndex] =
-      useState(0);
-    const [autocompletePosition, setAutocompletePosition] = useState({
-      top: 0,
-      left: 0,
-    });
-    const [autosuggestion, setAutosuggestion] = useState("");
-    const [autosuggestionPosition, setAutosuggestionPosition] = useState({
-      top: 0,
-      left: 0,
-    });
-    const [autosuggestionStyle, setAutosuggestionStyle] =
-      useState<React.CSSProperties>({});
-    const [dock, setDock] = useState<{
-      id: string;
-      props: Record<string, unknown>;
-    } | null>(null);
-    const dockContributions = useSlotContributions(TERMINAL_SIDE_PANEL_SLOT, {
-      host,
-    });
-    const hasDock = dockContributions.length > 0;
-    const autocompleteHistory = useRef<string[]>([]);
-    const currentAutocompleteCommand = useRef<string>("");
-    const currentAutosuggestionCommand = useRef<string>("");
-
-    const showAutocompleteRef = useRef(false);
-    const autocompleteSuggestionsRef = useRef<string[]>([]);
-    const autocompleteSelectedIndexRef = useRef(0);
-    const autosuggestionRef = useRef("");
-    const autosuggestionSuppressedRef = useRef(false);
-
-    const searchAddonRef = useRef<SearchAddon | null>(null);
-    const searchInputRef = useRef<HTMLInputElement | null>(null);
-    const [showSearch, setShowSearch] = useState(false);
-    const [searchQuery, setSearchQuery] = useState("");
-    const [searchCaseSensitive, setSearchCaseSensitive] = useState(false);
-    const [searchWholeWord, setSearchWholeWord] = useState(false);
-    const [searchRegex, setSearchRegex] = useState(false);
-    const [searchResultIndex, setSearchResultIndex] = useState(-1);
-    const [searchResultCount, setSearchResultCount] = useState(0);
-
-    const showSearchRef = useRef(false);
-    const searchQueryRef = useRef("");
-    const searchCaseSensitiveRef = useRef(false);
-    const searchWholeWordRef = useRef(false);
-    const searchRegexRef = useRef(false);
-
-    const [showHistoryDialog] = useState(false);
-    const [, setCommandHistory] = useState<string[]>([]);
-    const [, setIsLoadingHistory] = useState(false);
-
-    const setIsLoadingRef = useRef(commandHistoryContext.setIsLoading);
-    const setCommandHistoryContextRef = useRef(
-      commandHistoryContext.setCommandHistory,
-    );
-
-    useEffect(() => {
-      setIsLoadingRef.current = commandHistoryContext.setIsLoading;
-      setCommandHistoryContextRef.current =
-        commandHistoryContext.setCommandHistory;
-    }, [
-      commandHistoryContext.setIsLoading,
-      commandHistoryContext.setCommandHistory,
-    ]);
-
-    useEffect(() => {
-      if (showHistoryDialog && hostConfig.id) {
-        setIsLoadingHistory(true);
-        setIsLoadingRef.current(true);
-        getCommandHistory(api, hostConfig.id!)
-          .then((history) => {
-            setCommandHistory(history);
-            setCommandHistoryContextRef.current(history);
-          })
-          .catch((error) => {
-            console.error("Failed to load command history:", error);
-            setCommandHistory([]);
-            setCommandHistoryContextRef.current([]);
-          })
-          .finally(() => {
-            setIsLoadingHistory(false);
-            setIsLoadingRef.current(false);
-          });
-      }
-    }, [showHistoryDialog, hostConfig.id]);
-
-    useEffect(() => {
-      const autocompleteEnabled = termUser.commandAutocomplete;
-
-      if (hostConfig.id && autocompleteEnabled) {
-        getCommandHistory(api, hostConfig.id!)
-          .then((history) => {
-            autocompleteHistory.current = history;
-          })
-          .catch((error) => {
-            console.error("Failed to load autocomplete history:", error);
-            autocompleteHistory.current = [];
-          });
-      } else {
-        autocompleteHistory.current = [];
-      }
-    }, [hostConfig.id, termUser.commandAutocomplete]);
-
-    useEffect(() => {
-      showAutocompleteRef.current = showAutocomplete;
-    }, [showAutocomplete]);
-
-    useEffect(() => {
-      autocompleteSuggestionsRef.current = autocompleteSuggestions;
-    }, [autocompleteSuggestions]);
-
-    useEffect(() => {
-      autocompleteSelectedIndexRef.current = autocompleteSelectedIndex;
-    }, [autocompleteSelectedIndex]);
-
-    useEffect(() => {
-      showSearchRef.current = showSearch;
-    }, [showSearch]);
-
-    useEffect(() => {
-      searchQueryRef.current = searchQuery;
-    }, [searchQuery]);
-
-    useEffect(() => {
-      searchCaseSensitiveRef.current = searchCaseSensitive;
-    }, [searchCaseSensitive]);
-
-    useEffect(() => {
-      searchWholeWordRef.current = searchWholeWord;
-    }, [searchWholeWord]);
-
-    useEffect(() => {
-      searchRegexRef.current = searchRegex;
-    }, [searchRegex]);
-
-    useEffect(() => {
-      if (showSearch) {
-        searchInputRef.current?.focus();
-        searchInputRef.current?.select();
-      }
-    }, [showSearch]);
-
-    useEffect(() => {
-      autosuggestionRef.current = autosuggestion;
-    }, [autosuggestion]);
-
-    const isAutocompleteEnabled = useCallback(
-      () => termUserRef.current.commandAutocomplete,
-      [],
-    );
-
-    const getCursorScreenPosition = useCallback(() => {
-      if (!terminal || !xtermRef.current) return null;
-
-      const screen =
-        xtermRef.current.querySelector<HTMLElement>(".xterm-screen") ??
-        xtermRef.current;
-      const rows =
-        xtermRef.current.querySelector<HTMLElement>(".xterm-rows") ?? screen;
-      const screenRect = screen.getBoundingClientRect();
-      const rowsRect = rows.getBoundingClientRect();
-      const computedStyle = window.getComputedStyle(rows);
-      const terminalWithCore = terminal as typeof terminal & {
-        _core?: {
-          _renderService?: {
-            dimensions?: {
-              css?: {
-                cell?: {
-                  width?: number;
-                  height?: number;
-                };
-              };
-            };
-          };
-        };
-      };
-      const measuredCell =
-        terminalWithCore._core?._renderService?.dimensions?.css?.cell;
-      const fallbackCellWidth =
-        terminal.cols > 0 ? rowsRect.width / terminal.cols : 10;
-      const fallbackCellHeight =
-        terminal.rows > 0 ? rowsRect.height / terminal.rows : 20;
-      const cellWidth = measuredCell?.width || fallbackCellWidth;
-      const cellHeight = measuredCell?.height || fallbackCellHeight;
-      const fontSize =
-        typeof terminal.options.fontSize === "number"
-          ? `${terminal.options.fontSize}px`
-          : computedStyle.fontSize;
-      const lineHeight =
-        typeof terminal.options.lineHeight === "number"
-          ? `${cellHeight}px`
-          : computedStyle.lineHeight;
-      const fontFamily =
-        typeof terminal.options.fontFamily === "string"
-          ? terminal.options.fontFamily
-          : computedStyle.fontFamily;
-
-      return {
-        top: Math.max(
-          0,
-          screenRect.top + terminal.buffer.active.cursorY * cellHeight,
-        ),
-        left: Math.max(
-          0,
-          screenRect.left + terminal.buffer.active.cursorX * cellWidth,
-        ),
-        style: {
-          fontFamily,
-          fontSize,
-          lineHeight,
-          letterSpacing: `${terminal.options.letterSpacing ?? 0}px`,
-        },
-      };
-    }, [terminal, xtermRef]);
-
-    const clearAutosuggestion = useCallback(() => {
-      autosuggestionRef.current = "";
-      currentAutosuggestionCommand.current = "";
-      setAutosuggestion("");
-    }, []);
-
-    const updateAutosuggestion = useCallback(() => {
-      if (!isAutocompleteEnabled() || autosuggestionSuppressedRef.current) {
-        clearAutosuggestion();
-        return;
-      }
-
-      const currentCommand = getCurrentCommandRef.current().trim();
-      if (!currentCommand || showAutocompleteRef.current) {
-        clearAutosuggestion();
-        return;
-      }
-
-      const suggestion = autocompleteHistory.current.find(
-        (command) =>
-          command.startsWith(currentCommand) &&
-          command !== currentCommand &&
-          command.length > currentCommand.length,
-      );
-
-      if (!suggestion) {
-        clearAutosuggestion();
-        return;
-      }
-
-      const position = getCursorScreenPosition();
-      if (!position) {
-        clearAutosuggestion();
-        return;
-      }
-
-      const suffix = suggestion.substring(currentCommand.length);
-      currentAutosuggestionCommand.current = currentCommand;
-      autosuggestionRef.current = suffix;
-      setAutosuggestion(suffix);
-      setAutosuggestionPosition({ top: position.top, left: position.left });
-      setAutosuggestionStyle(position.style);
-    }, [clearAutosuggestion, getCursorScreenPosition, isAutocompleteEnabled]);
-
-    const scheduleAutosuggestionUpdate = useCallback(() => {
-      window.requestAnimationFrame(() => {
-        updateAutosuggestion();
-      });
-    }, [updateAutosuggestion]);
-
-    const acceptAutosuggestion = useCallback(() => {
-      const suffix = autosuggestionRef.current;
-      if (!suffix || webSocketRef.current?.readyState !== 1) return false;
-
-      for (const char of suffix) {
-        webSocketRef.current.send(
-          JSON.stringify({ type: "input", data: char }),
-        );
-      }
-
-      updateCurrentCommandRef.current(
-        `${currentAutosuggestionCommand.current}${suffix}`,
-      );
-      autosuggestionSuppressedRef.current = false;
-      clearAutosuggestion();
-      return true;
-    }, [clearAutosuggestion]);
-
-    const firstDockId = dockContributions[0]?.actionId;
-    // Ctrl+Shift+A and the floating button toggle the first docked panel.
-    const toggleDock = useCallback(() => {
-      setDock((open) =>
-        open || !firstDockId ? null : { id: firstDockId, props: {} },
-      );
-    }, [firstDockId]);
-
-    const closeDock = useCallback(() => {
-      setDock(null);
-      setTimeout(() => terminal?.focus(), 50);
-    }, [terminal]);
-
-    const handleRunCommandInTerminal = useCallback(
-      (command: string) => {
-        const trimmedCommand = command.trim();
-        if (
-          !trimmedCommand ||
-          webSocketRef.current?.readyState !== WebSocket.OPEN
-        ) {
-          return;
-        }
-
-        clearAutosuggestion();
-        trackInput(trimmedCommand);
-        webSocketRef.current.send(
-          JSON.stringify({ type: "input", data: `${trimmedCommand}\r` }),
-        );
-        setTimeout(() => terminal?.focus(), 50);
-      },
-      [clearAutosuggestion, terminal, trackInput],
-    );
-
-    const slotApiRef = useRef<TerminalSlotApi | null>(null);
-    const slotApi = useMemo<TerminalSlotApi>(
-      () => ({
-        host,
-        getBufferText: () => getTerminalBufferText(terminal),
-        sessionId: () => sessionIdRef.current,
-        openSidePanel: (panelId, props) =>
-          setDock({ id: panelId, props: props ?? {} }),
-        runCommand: handleRunCommandInTerminal,
-        getShareTarget: () =>
-          isConnected &&
-          !isQuickConnect &&
-          !hostConfig.joinShareId &&
-          typeof hostConfig.id === "number" &&
-          sessionIdRef.current
-            ? {
-                hostId: hostConfig.id,
-                sessionId: sessionIdRef.current,
-                protocol: "ssh" as const,
-                tabInstanceId: hostConfig.instanceId,
-                origin: sessionOriginRef.current,
-              }
-            : null,
-      }),
-      [
-        host,
-        terminal,
-        handleRunCommandInTerminal,
-        isConnected,
-        isQuickConnect,
-        hostConfig.joinShareId,
-        hostConfig.id,
-        hostConfig.instanceId,
-      ],
-    );
-    slotApiRef.current = slotApi;
-
-    const overlayProps = useMemo<TerminalOverlayProps>(
-      () => ({
-        host,
-        backgroundColor,
-        subscribe: (listener) => {
-          sessionListenersRef.current.add(listener);
-          return () => {
-            sessionListenersRef.current.delete(listener);
-          };
-        },
-        holdConnectTimeout: (held) => {
-          if (held) {
-            connectTimeoutHoldsRef.current += 1;
-            if (connectionTimeoutRef.current) {
-              clearTimeout(connectionTimeoutRef.current);
-              connectionTimeoutRef.current = null;
-            }
-          } else {
-            connectTimeoutHoldsRef.current = Math.max(
-              0,
-              connectTimeoutHoldsRef.current - 1,
-            );
-          }
-        },
-        fail: (message) => {
-          updateConnectionError(message);
-          webSocketRef.current?.close();
-        },
-        disconnect: () => webSocketRef.current?.close(),
-        send: (type, data) => {
-          if (webSocketRef.current?.readyState === WebSocket.OPEN) {
-            webSocketRef.current.send(JSON.stringify({ type, data }));
-          }
-        },
-        connectPayload: () => ({
-          hostId: currentHostIdRef.current,
-          cols: terminal?.cols || 80,
-          rows: terminal?.rows || 24,
-          hostConfig: currentHostConfigRef.current,
-        }),
-      }),
-      [host, backgroundColor, updateConnectionError, terminal],
-    );
-
-    const activityLoggingRef = useRef(false);
-    const passwordPromptShownRef = useRef(false);
-    const passwordPromptBufferRef = useRef("");
-    const alternateScreenModeRef = useRef(false);
-    const controlStringModeRef = useRef(false);
-
-    const lastSentSizeRef = useRef<{ cols: number; rows: number } | null>(null);
-    const pendingSizeRef = useRef<{ cols: number; rows: number } | null>(null);
-    const notifyTimerRef = useRef<NodeJS.Timeout | null>(null);
-    const lastFittedSizeRef = useRef<{ cols: number; rows: number } | null>(
-      null,
-    );
-    const terminalFontSizeRef = useRef(config.fontSize);
-    const DEBOUNCE_MS = 140;
-
-    const logTerminalActivity = async () => {
-      if (
-        !hostConfig.id ||
-        activityLoggedRef.current ||
-        activityLoggingRef.current
-      ) {
-        return;
-      }
-
-      activityLoggingRef.current = true;
-      activityLoggedRef.current = true;
-
-      try {
-        const hostName =
-          hostConfig.name || `${hostConfig.username}@${hostConfig.ip}`;
-        await logActivity("terminal", hostConfig.id, hostName);
-      } catch (err) {
-        console.warn("Failed to log terminal activity:", err);
-        activityLoggedRef.current = false;
-      } finally {
-        activityLoggingRef.current = false;
-      }
-    };
-
-    useEffect(() => {
-      isVisibleRef.current = isVisible;
-    }, [isVisible]);
-
-    useEffect(() => {
-      // One-shot: historical code polled every 5s but only ever flipped false→true.
-      setIsAuthenticated(true);
-    }, []);
-
-    function hardRefresh() {
-      try {
-        if (
-          terminal &&
-          typeof (
-            terminal as { refresh?: (start: number, end: number) => void }
-          ).refresh === "function"
-        ) {
-          (
-            terminal as { refresh?: (start: number, end: number) => void }
-          ).refresh(0, terminal.rows - 1);
-        }
-      } catch (error) {
-        console.error("Terminal operation failed:", error);
-      }
-    }
-
-    const sharedSizeRef = useRef<{ cols: number; rows: number } | null>(null);
-
-    function applySharedSize(msg: { cols?: unknown; rows?: unknown }) {
-      if (!hostConfig.joinShareId || !terminal) return;
-      const { cols, rows } = msg;
-      if (
-        typeof cols !== "number" ||
-        typeof rows !== "number" ||
-        !Number.isInteger(cols) ||
-        !Number.isInteger(rows) ||
-        cols < 1 ||
-        rows < 1
-      )
-        return;
-      sharedSizeRef.current = { cols, rows };
-      terminal.resize(cols, rows);
-    }
-
-    function fitTerminal() {
-      const size = sharedSizeRef.current;
-      if (hostConfig.joinShareId && size) {
-        terminal?.resize(size.cols, size.rows);
-      } else {
-        fitAddonRef.current?.fit();
-      }
-    }
-
-    function performFit() {
-      if (
-        !fitAddonRef.current ||
-        !terminal ||
-        !isVisible ||
-        isFittingRef.current
-      ) {
-        return;
-      }
-
-      isFittingRef.current = true;
-
-      try {
-        fitTerminal();
-        if (terminal && terminal.cols > 0 && terminal.rows > 0) {
-          const lastSize = lastFittedSizeRef.current;
-          if (
-            !lastSize ||
-            lastSize.cols !== terminal.cols ||
-            lastSize.rows !== terminal.rows
-          ) {
-            scheduleNotify(terminal.cols, terminal.rows);
-            lastFittedSizeRef.current = {
-              cols: terminal.cols,
-              rows: terminal.rows,
-            };
-          }
-        }
-        setIsFitted(true);
-      } finally {
-        isFittingRef.current = false;
-      }
-    }
-
-    function changeTerminalFontSize(direction: -1 | 1) {
-      const currentFontSize =
-        terminal.options.fontSize ??
-        terminalFontSizeRef.current ??
-        DEFAULT_TERMINAL_CONFIG.fontSize;
-      const nextFontSize = getNextTerminalFontSize(currentFontSize, direction);
-
-      if (nextFontSize === currentFontSize) {
-        return;
-      }
-
-      terminalFontSizeRef.current = nextFontSize;
-      terminal.options.fontSize = nextFontSize;
-      try {
-        saveFontSize(
-          localStorage,
-          fontSizePersistenceRef.current.key,
-          fontSizePersistenceRef.current.configured,
-          nextFontSize,
-        );
-      } catch {
-        // ignore persistence failures (private mode, disabled storage)
-      }
-      performFit();
-      hardRefresh();
-    }
-
-    function getSearchOptions() {
-      return {
-        caseSensitive: searchCaseSensitiveRef.current,
-        wholeWord: searchWholeWordRef.current,
-        regex: searchRegexRef.current,
-        incremental: true,
-        decorations: {
-          matchBackground: `${themeColors.yellow}55`,
-          matchBorder: themeColors.yellow,
-          matchOverviewRuler: themeColors.yellow,
-          activeMatchBackground: `${themeColors.foreground}33`,
-          activeMatchBorder: themeColors.foreground,
-          activeMatchColorOverviewRuler: themeColors.foreground,
-        },
-      };
-    }
-
-    function runSearch(direction: "next" | "previous", term?: string) {
-      const searchAddon = searchAddonRef.current;
-      const query = term ?? searchQueryRef.current;
-      if (!searchAddon || !query) return;
-
-      if (direction === "next") {
-        searchAddon.findNext(query, getSearchOptions());
-      } else {
-        searchAddon.findPrevious(query, {
-          ...getSearchOptions(),
-          incremental: false,
-        });
-      }
-    }
-
-    function openSearch() {
-      setShowSearch(true);
-      if (searchQueryRef.current) {
-        runSearch("next", searchQueryRef.current);
-      }
-    }
-
-    function closeSearch() {
-      searchAddonRef.current?.clearDecorations();
-      setShowSearch(false);
-      setSearchResultIndex(-1);
-      setSearchResultCount(0);
-      setTimeout(() => terminal?.focus(), 0);
-    }
-
-    function handleSearchQueryChange(value: string) {
-      setSearchQuery(value);
-      searchQueryRef.current = value;
-
-      if (!value) {
-        searchAddonRef.current?.clearDecorations();
-        setSearchResultIndex(-1);
-        setSearchResultCount(0);
-        return;
-      }
-
-      runSearch("next", value);
-    }
-
-    function toggleSearchCaseSensitive() {
-      searchCaseSensitiveRef.current = !searchCaseSensitiveRef.current;
-      setSearchCaseSensitive(searchCaseSensitiveRef.current);
-      runSearch("next");
-    }
-
-    function toggleSearchWholeWord() {
-      searchWholeWordRef.current = !searchWholeWordRef.current;
-      setSearchWholeWord(searchWholeWordRef.current);
-      runSearch("next");
-    }
-
-    function toggleSearchRegex() {
-      searchRegexRef.current = !searchRegexRef.current;
-      setSearchRegex(searchRegexRef.current);
-      runSearch("next");
-    }
-
-    function handleTotpSubmit(code: string) {
-      const isPushMode = mfaPromptMode === "push";
-      if (webSocketRef.current && (code || isPushMode)) {
-        webSocketRef.current.send(
-          JSON.stringify({
-            type: isPasswordPrompt ? "password_response" : "totp_response",
-            data: { code },
-          }),
-        );
-        if (isPushMode) {
-          // Server blocks until the phone approval completes; keep the dialog
-          // open in a waiting state rather than closing it immediately. The
-          // existing timeout continues running until "connected" or "error".
-          setMfaWaiting(true);
-          return;
-        }
-        if (totpTimeoutRef.current) {
-          clearTimeout(totpTimeoutRef.current);
-          totpTimeoutRef.current = null;
-        }
-        setTotpRequired(false);
-        setTotpPrompt("");
-        setIsPasswordPrompt(false);
-      }
-    }
-
-    function handleTotpCancel() {
-      if (totpTimeoutRef.current) {
-        clearTimeout(totpTimeoutRef.current);
-        totpTimeoutRef.current = null;
-      }
-      setTotpRequired(false);
-      setTotpPrompt("");
-      setIsPasswordPrompt(false);
-      setMfaPromptMode("totp");
-      setMfaWaiting(false);
-      if (onClose) onClose();
-    }
-
-    function clearBrowserSignIn() {
-      if (browserSignInTimeoutRef.current) {
-        clearTimeout(browserSignInTimeoutRef.current);
-        browserSignInTimeoutRef.current = null;
-      }
-      setBrowserSignIn(null);
-    }
-
-    function handleBrowserSignInContinue() {
-      if (!browserSignIn || !webSocketRef.current) return;
-      webSocketRef.current.send(
-        JSON.stringify({
-          type: `${browserSignIn.id}_auth_continue`,
-          data: {},
-        }),
-      );
-      clearBrowserSignIn();
-    }
-
-    function handleBrowserSignInCancel() {
-      clearBrowserSignIn();
-      if (onClose) onClose();
-    }
-
-    function handleBrowserSignInOpenUrl() {
-      if (browserSignIn?.url) {
-        window.open(browserSignIn.url, "_blank", "noopener,noreferrer");
-      }
-    }
-
-    function handleAuthDialogSubmit(credentials: {
-      password?: string;
-      sshKey?: string;
-      keyPassword?: string;
-    }) {
-      if (webSocketRef.current && terminal) {
-        webSocketRef.current.send(
-          JSON.stringify({
-            type: "reconnect_with_credentials",
-            data: {
-              cols: terminal.cols,
-              rows: terminal.rows,
-              password: credentials.password,
-              sshKey: credentials.sshKey,
-              keyPassword: credentials.keyPassword,
-              hostConfig: {
-                ...hostConfig,
-                password: credentials.password,
-                key: credentials.sshKey,
-                keyPassword: credentials.keyPassword,
-              },
-            },
-          }),
-        );
-        setShowAuthDialog(false);
-        setIsConnecting(true);
-      }
-    }
-
-    function handleAuthDialogCancel() {
-      setShowAuthDialog(false);
-      if (onClose) onClose();
-    }
-
-    function handlePassphraseSubmit(passphrase: string) {
-      if (webSocketRef.current && terminal) {
-        webSocketRef.current.send(
-          JSON.stringify({
-            type: "reconnect_with_credentials",
-            data: {
-              cols: terminal.cols,
-              rows: terminal.rows,
-              keyPassword: passphrase,
-              hostConfig: {
-                ...hostConfig,
-                keyPassword: passphrase,
-              },
-            },
-          }),
-        );
-        setShowPassphraseDialog(false);
-        setIsConnecting(true);
-      }
-    }
-
-    function handlePassphraseCancel() {
-      setShowPassphraseDialog(false);
-      if (onClose) onClose();
-    }
-
-    function scheduleNotify(cols: number, rows: number) {
-      if (hostConfig.joinShareId) return;
-      if (!(cols > 0 && rows > 0)) return;
-      pendingSizeRef.current = { cols, rows };
-      if (notifyTimerRef.current) clearTimeout(notifyTimerRef.current);
-      notifyTimerRef.current = setTimeout(() => {
-        const next = pendingSizeRef.current;
-        const last = lastSentSizeRef.current;
-        if (!next) return;
-        if (last && last.cols === next.cols && last.rows === next.rows) return;
-        if (webSocketRef.current?.readyState === WebSocket.OPEN) {
-          webSocketRef.current.send(
-            JSON.stringify({ type: "resize", data: next }),
-          );
-          lastSentSizeRef.current = next;
-        }
-      }, DEBOUNCE_MS);
-    }
-
-    function formatTerminalOutput(output: string): string {
-      const alternateScreen = updateAlternateScreenMode(
-        output,
-        alternateScreenModeRef.current,
-      );
-      alternateScreenModeRef.current = alternateScreen.isActive;
-
-      // Must run for every chunk, including ones we go on to skip, or the
-      // control-string state stops tracking the stream.
-      const controlString = updateControlStringMode(
-        output,
-        controlStringModeRef.current,
-      );
-      controlStringModeRef.current = controlString.isActive;
-
-      const syntaxHighlightingEnabled =
-        termSettingsRef.current.syntaxHighlighting !== false;
-      if (
-        !syntaxHighlightingEnabled ||
-        alternateScreen.sawSequence ||
-        alternateScreen.isActive ||
-        controlString.wasActive ||
-        controlString.isActive
-      ) {
-        return output;
-      }
-
-      return highlightTerminalOutput(
-        output,
-        termSettingsRef.current.syntaxHighlightingOptions,
-      );
-    }
-
-    function applyLocalEchoToOutput(output: string): string {
-      const alternateScreen = updateAlternateScreenMode(
-        output,
-        alternateScreenModeRef.current,
-      );
-      if (
-        alternateScreenModeRef.current ||
-        alternateScreen.isActive ||
-        alternateScreen.sawSequence
-      ) {
-        if (!alternateScreenModeRef.current && alternateScreen.isActive) {
-          localEchoRef.current?.reset();
-        }
-        return output;
-      }
-      return localEchoRef.current?.handleOutput(output) ?? output;
-    }
-
-    async function resolvePasswordForPrompt(isSudoPrompt: boolean) {
-      const sudoPassword = hostConfig.sudoPassword as string | undefined;
-      let passwordToFill = isSudoPrompt
-        ? sudoPassword || hostConfig.password
-        : hostConfig.password || sudoPassword;
-
-      if (!passwordToFill && hostConfig.id) {
-        passwordToFill = isSudoPrompt
-          ? (await getHostPassword(hostConfig.id, "sudoPassword")) ||
-            (await getHostPassword(hostConfig.id, "password")) ||
-            undefined
-          : (await getHostPassword(hostConfig.id, "password")) ||
-            (await getHostPassword(hostConfig.id, "sudoPassword")) ||
-            undefined;
-      }
-
-      return passwordToFill;
-    }
-
-    function maybeOfferPasswordFill(strippedData: string) {
-      if (termSettingsRef.current.passwordPromptAutoFill === false) return;
-
-      // PTY output can split a short prompt like "[sudo] password for user: "
-      // across multiple WebSocket chunks, so match against a rolling buffer
-      // of recent output rather than each chunk in isolation.
-      const buffered = (passwordPromptBufferRef.current + strippedData).slice(
-        -200,
-      );
-      passwordPromptBufferRef.current = buffered;
-
-      const passwordPromptPattern =
-        /(?:\[sudo\][^\n\r]*:\s*$|sudo:[^\n\r]*password[^\n\r]*required|password for [^\n\r]*:\s*$|Password:\s*$|password:\s*$)/im;
-      if (!passwordPromptPattern.test(buffered)) return;
-
-      const isSudoPrompt = /(?:\[sudo\]|sudo:)/i.test(buffered);
-
-      // Sudo autofill is opt-in: the saved sudo password must not be sent
-      // to a privilege-escalation prompt unless the host explicitly enables it.
-      if (isSudoPrompt && !termSettingsRef.current.sudoPasswordAutoFill) {
-        return;
-      }
-
-      const hasStoredPassword =
-        hostConfig.sudoPassword ||
-        hostConfig.password ||
-        hostConfig.hasSudoPassword ||
-        hostConfig.hasPassword;
-      if (!hasStoredPassword || passwordPromptShownRef.current) return;
-
-      passwordPromptShownRef.current = true;
-      passwordPromptBufferRef.current = "";
-
-      confirmWithToast(
-        t("terminal.passwordPromptFillTitle"),
-        async () => {
-          const passwordToFill = await resolvePasswordForPrompt(isSudoPrompt);
-          if (
-            passwordToFill &&
-            webSocketRef.current &&
-            webSocketRef.current.readyState === WebSocket.OPEN
-          ) {
-            webSocketRef.current.send(
-              JSON.stringify({
-                type: "input",
-                data: passwordToFill + "\n",
-              }),
-            );
-          }
-          setTimeout(() => {
-            passwordPromptShownRef.current = false;
-          }, 3000);
-        },
-        t("common.confirm"),
-        t("common.cancel"),
-        { confirmOnEnter: true },
-      );
-      setTimeout(() => {
-        passwordPromptShownRef.current = false;
-      }, 15000);
-    }
-
-    function reconnectTerminal() {
-      isUnmountingRef.current = false;
-      shouldNotReconnectRef.current = false;
-      isReconnectingRef.current = false;
-      isConnectingRef.current = false;
-      reconnectAttempts.current = 0;
-      wasDisconnectedBySSH.current = false;
-      wasConnectedRef.current = false;
-      updateConnectionError(null);
-      setShowDisconnectedOverlay(false);
-      if (terminal) {
-        terminal.clear();
-        const cols = terminal.cols;
-        const rows = terminal.rows;
-        connectToHost(cols, rows);
-      }
-    }
-
-    useImperativeHandle(
-      ref,
-      () => ({
-        disconnect: () => {
-          isUnmountingRef.current = true;
-          shouldNotReconnectRef.current = true;
-          isReconnectingRef.current = false;
-          if (pingIntervalRef.current) {
-            clearInterval(pingIntervalRef.current);
-            pingIntervalRef.current = null;
-          }
-          if (pongTimeoutRef.current) {
-            clearTimeout(pongTimeoutRef.current);
-            pongTimeoutRef.current = null;
-          }
-          if (reconnectTimeoutRef.current) {
-            clearTimeout(reconnectTimeoutRef.current);
-            reconnectTimeoutRef.current = null;
-          }
-          if (connectionTimeoutRef.current) {
-            clearTimeout(connectionTimeoutRef.current);
-            connectionTimeoutRef.current = null;
-          }
-          if (totpTimeoutRef.current) {
-            clearTimeout(totpTimeoutRef.current);
-            totpTimeoutRef.current = null;
-          }
-          if (browserSignInTimeoutRef.current) {
-            clearTimeout(browserSignInTimeoutRef.current);
-            browserSignInTimeoutRef.current = null;
-          }
-          if (webSocketRef.current?.readyState === WebSocket.OPEN) {
-            webSocketRef.current.send(JSON.stringify({ type: "disconnect" }));
-          }
-          sessionIdRef.current = null;
-          webSocketRef.current?.close();
-          setIsConnected(false);
-          setIsConnecting(false);
-        },
-        reconnect: reconnectTerminal,
-        reconnectIfDisconnected: () => {
-          if (
-            !terminal ||
-            isConnected ||
-            isUnmountingRef.current ||
-            isConnectingRef.current ||
-            isReconnectingRef.current ||
-            reconnectTimeoutRef.current !== null
-          )
-            return false;
-          reconnectTerminal();
-          return true;
-        },
-        isConnected: () => isConnected,
-        fit: () => {
-          if (!fitAddonRef.current || !terminal || isFittingRef.current) return;
-          isFittingRef.current = true;
-          try {
-            fitTerminal();
-            if (terminal.cols > 0 && terminal.rows > 0) {
-              const lastSize = lastFittedSizeRef.current;
-              if (
-                !lastSize ||
-                lastSize.cols !== terminal.cols ||
-                lastSize.rows !== terminal.rows
-              ) {
-                scheduleNotify(terminal.cols, terminal.rows);
-                lastFittedSizeRef.current = {
-                  cols: terminal.cols,
-                  rows: terminal.rows,
-                };
-              }
-            }
-            setIsFitted(true);
-          } finally {
-            isFittingRef.current = false;
-          }
-        },
-        focus: () => terminal?.focus(),
-        sendInput: (data: string) => {
-          if (webSocketRef.current?.readyState === 1) {
-            webSocketRef.current.send(JSON.stringify({ type: "input", data }));
-          }
-        },
-        subscribeOutput: (listener: (data: string) => void) => {
-          outputListenersRef.current.add(listener);
-          return () => outputListenersRef.current.delete(listener);
-        },
-        paste: (text: string) => {
-          terminal?.paste(text);
-        },
-        notifyResize: () => {
-          try {
-            const cols = terminal?.cols ?? undefined;
-            const rows = terminal?.rows ?? undefined;
-            if (typeof cols === "number" && typeof rows === "number") {
-              scheduleNotify(cols, rows);
-              hardRefresh();
-            }
-          } catch (error) {
-            console.error("Terminal operation failed:", error);
-          }
-        },
-        refresh: () => hardRefresh(),
-        getApplicationCursorKeysMode: () =>
-          terminal?.modes?.applicationCursorKeysMode ?? false,
-        // What the tab menu's share entry needs, read at call time.
-        getShareTarget: () => slotApiRef.current?.getShareTarget() ?? null,
-        openFileManager: () => openFilesAtCwd(),
-      }),
-      [isConnected, terminal],
-    );
-
-    function getCopyOnSelect() {
-      return getClientPreference("copyOnSelect") === "true";
-    }
-
-    function openFilesAtCwd() {
-      if (webSocketRef.current?.readyState === WebSocket.OPEN) {
-        webSocketRef.current.send(JSON.stringify({ type: "get_cwd" }));
-      } else {
-        onOpenFileManager?.("/");
-      }
-    }
-
-    function attemptReconnection() {
-      if (
-        isUnmountingRef.current ||
-        shouldNotReconnectRef.current ||
-        isReconnectingRef.current ||
-        isConnectingRef.current ||
-        wasDisconnectedBySSH.current ||
-        reconnectTimeoutRef.current !== null
-      ) {
-        return;
-      }
-
-      if (reconnectAttempts.current >= maxReconnectAttempts) {
-        setIsConnecting(false);
-        keepScrollbackRef.current = false;
-        shouldNotReconnectRef.current = true;
-        setShowDisconnectedOverlay(true);
-        addLog({
-          type: "error",
-          stage: "connection",
-          message: t("terminal.maxReconnectAttemptsReached"),
-        });
-        return;
-      }
-
-      isReconnectingRef.current = true;
-
-      if (
-        terminal &&
-        !isAttachingSessionRef.current &&
-        !keepScrollbackRef.current
-      ) {
-        terminal.clear();
-      }
-
-      reconnectAttempts.current++;
-
-      addLog({
-        type: "info",
-        stage: "connection",
-        message: t("terminal.reconnecting", {
-          attempt: reconnectAttempts.current,
-          max: maxReconnectAttempts,
-        }),
-      });
-
-      const delay = Math.min(
-        2000 * Math.pow(2, reconnectAttempts.current - 1),
-        8000,
-      );
-
-      reconnectTimeoutRef.current = setTimeout(() => {
-        reconnectTimeoutRef.current = null;
-
-        if (
-          isUnmountingRef.current ||
-          shouldNotReconnectRef.current ||
-          wasDisconnectedBySSH.current
-        ) {
-          isReconnectingRef.current = false;
-          return;
-        }
-
-        if (reconnectAttempts.current > maxReconnectAttempts) {
-          isReconnectingRef.current = false;
-          return;
-        }
-
-        if (terminal && hostConfig) {
-          if (!isAttachingSessionRef.current && !keepScrollbackRef.current) {
-            terminal.clear();
-          }
-          const cols = terminal.cols;
-          const rows = terminal.rows;
-          connectToHost(cols, rows);
-        }
-
-        isReconnectingRef.current = false;
-      }, delay);
-    }
-
-    // A persisted session that timed out reconnects to a fresh shell below.
-    // Say so, and offer the setting that would have kept it alive.
-    async function explainSessionExpiry() {
-      const hostLabel = hostConfig.name || hostConfig.ip;
-      let minutes: number | null = null;
-      try {
-        minutes = (await getClientSettings(api)).sessionTimeoutMinutes;
-      } catch {
-        /* the notice still makes sense without the number */
-      }
-      const notice = minutes
-        ? t("terminal.sessionExpiredNotice", { host: hostLabel, minutes })
-        : t("terminal.sessionExpiredNoticeNoMinutes", { host: hostLabel });
-      addLog({ type: "warning", stage: "connection", message: notice });
-
-      const canEnable =
-        typeof hostConfig.id === "number" &&
-        !termSettingsRef.current.autoTmux &&
-        !hostConfig.joinShareId;
-      toast.warning(notice, {
-        duration: 15000,
-        ...(canEnable
-          ? {
-              action: {
-                label: t("terminal.enableAutoTmuxAction"),
-                onClick: () => {
-                  void enableHostAutoTmux(api, hostConfig.id as number)
-                    .then(() => {
-                      notifyHostsChanged();
-                      toast.success(
-                        t("terminal.autoTmuxEnabled", { host: hostLabel }),
-                      );
-                    })
-                    .catch(() =>
-                      toast.error(t("terminal.autoTmuxEnableFailed")),
-                    );
-                },
-              },
-            }
-          : {}),
-      });
-    }
-
-    async function connectToHost(cols: number, rows: number) {
-      if (isConnectingRef.current) {
-        return;
-      }
-
-      isConnectingRef.current = true;
-      connectionAttemptIdRef.current++;
-      wasConnectedRef.current = false;
-
-      if (!isReconnectingRef.current) {
-        reconnectAttempts.current = 0;
-        shouldNotReconnectRef.current = false;
-      }
-
-      let baseWsUrl: string;
-      let wsProtocols: string[] = [];
-      let outboundHostConfig = hostConfig;
-
-      {
-        const origin = isElectron()
-          ? await resolveConnectionOrigin({
-              connectionOrigin: hostConfig.connectionOrigin as
-                "local" | "remote" | null | undefined,
-            })
-          : "local";
-        sessionOriginRef.current = origin === "remote" ? "remote" : "local";
-        const resolvedUrl = await pluginWsUrl("ssh-terminal", "/terminal", {
-          origin,
-        });
-        if (!resolvedUrl) {
-          setIsConnected(false);
-          setIsConnecting(false);
-          updateConnectionError(t("errors.remoteServerRequired"));
-          isConnectingRef.current = false;
-          return;
-        }
-        if (isElectron() && origin === "local") {
-          try {
-            outboundHostConfig = await hydrateLocalSharedHostAuth(hostConfig);
-          } catch (error) {
-            const message = getErrorMessage(
-              error,
-              "Failed to load shared SSH authentication",
-            );
-            setIsConnected(false);
-            setIsConnecting(false);
-            updateConnectionError(message);
-            addLog({ type: "error", stage: "auth", message });
-            isConnectingRef.current = false;
-            return;
-          }
-        }
-        baseWsUrl = resolvedUrl.url;
-        wsProtocols = resolvedUrl.protocols;
-      }
-
-      if (
-        webSocketRef.current &&
-        webSocketRef.current.readyState !== WebSocket.CLOSED
-      ) {
-        terminalInputDisposableRef.current?.dispose();
-        terminalInputDisposableRef.current = null;
-        webSocketRef.current.close();
-      }
-
-      if (pingIntervalRef.current) {
-        clearInterval(pingIntervalRef.current);
-        pingIntervalRef.current = null;
-      }
-      if (connectionTimeoutRef.current) {
-        clearTimeout(connectionTimeoutRef.current);
-        connectionTimeoutRef.current = null;
-      }
-
-      const ws = new WebSocket(baseWsUrl, wsProtocols);
-      webSocketRef.current = ws;
-      wasDisconnectedBySSH.current = false;
-      updateConnectionError(null);
-      shouldNotReconnectRef.current = false;
-      isReconnectingRef.current = false;
-      setIsConnecting(true);
-
-      setupWebSocketListeners(ws, cols, rows, outboundHostConfig);
-    }
-
-    function setupWebSocketListeners(
-      ws: WebSocket,
-      cols: number,
-      rows: number,
-      outboundHostConfig: TerminalHostConfig,
-    ) {
-      ws.addEventListener("open", () => {
-        alternateScreenModeRef.current = false;
-        controlStringModeRef.current = false;
-        connectionTimeoutRef.current = setTimeout(() => {
-          if (
-            !isConnected &&
-            !totpRequired &&
-            !isPasswordPrompt &&
-            connectTimeoutHoldsRef.current === 0 &&
-            !connectionErrorRef.current
-          ) {
-            if (terminal) {
-              terminal.clear();
-            }
-            const timeoutMessage = t("terminal.connectionTimeout");
-            updateConnectionError(timeoutMessage);
-            addLog({
-              type: "error",
-              stage: "connection",
-              message: timeoutMessage,
-            });
-            if (webSocketRef.current) {
-              webSocketRef.current.close();
-            }
-            if (reconnectAttempts.current > 0) {
-              attemptReconnection();
-            } else {
-              setIsConnecting(false);
-              shouldNotReconnectRef.current = true;
-            }
-          }
-        }, 35000);
-
-        currentHostIdRef.current = hostConfig.id;
-        currentHostConfigRef.current = hostConfig;
-
-        // Consume the pending restored session ID once; retries get null so they create fresh connections
-        const restoredSessionId = pendingRestoredSessionIdRef.current;
-        pendingRestoredSessionIdRef.current = null;
-
-        if (hostConfig.joinShareId) {
-          isAttachingSessionRef.current = true;
-
-          ws.send(
-            JSON.stringify({
-              type: "joinSharedSession",
-              data: {
-                shareId: hostConfig.joinShareId,
-                tabInstanceId: hostConfig.instanceId,
-              },
-            }),
-          );
-        } else if (restoredSessionId) {
-          sessionIdRef.current = restoredSessionId;
-          isAttachingSessionRef.current = true;
-
-          ws.send(
-            JSON.stringify({
-              type: "attachSession",
-              data: {
-                sessionId: restoredSessionId,
-                cols,
-                rows,
-                tabInstanceId: hostConfig.instanceId,
-              },
-            }),
-          );
-        } else {
-          isAttachingSessionRef.current = false;
-          ws.send(
-            JSON.stringify({
-              type: "connectToHost",
-              data: {
-                cols,
-                rows,
-                hostConfig: outboundHostConfig,
-                initialPath,
-                executeCommand,
-                tmuxAttachSession,
-              },
-            }),
-          );
-        }
-        terminalInputDisposableRef.current?.dispose();
-        localEchoRef.current = new TerminalLocalEcho(
-          resolveLocalEchoMode(
-            termSettingsRef.current.localEcho,
-            termUserRef.current.localEcho,
-          ),
-        );
-        terminalInputDisposableRef.current = terminal.onData((data) => {
-          if (ws.readyState !== WebSocket.OPEN) return;
-          if (data === "\r" || data === "\n") {
-            const currentCmd = getCurrentCommand().trim();
-            const termixMatch = currentCmd.match(/^termix\s+(.+)$/);
-            if (termixMatch && onOpenFileInEditor) {
-              const filePath = termixMatch[1].trim();
-              trackInput(data);
-              clearAutosuggestion();
-              terminal.write("\r\n");
-              if (ws.readyState === WebSocket.OPEN) {
-                ws.send(
-                  JSON.stringify({
-                    type: "open_file_in_editor",
-                    path: filePath,
-                  }),
-                );
-              }
-              return;
-            }
-          }
-          trackInput(data);
-          const predicted = alternateScreenModeRef.current
-            ? ""
-            : localEchoRef.current?.handleInput(data);
-          if (predicted) terminal.write(predicted);
-
-          const resetsCurrentCommand =
-            data === "\r" ||
-            data === "\n" ||
-            data.includes("\x03") ||
-            data.includes("\x04") ||
-            data.includes("\x15");
-          const isCursorNavigation = data.includes("\x1b");
-          const isCommandEdit =
-            data.includes("\x08") ||
-            data.includes("\x7f") ||
-            Array.from(data).some((char) => {
-              const charCode = char.charCodeAt(0);
-              return charCode >= 32 && charCode <= 126;
-            });
-
-          if (resetsCurrentCommand) {
-            autosuggestionSuppressedRef.current = false;
-            clearAutosuggestion();
-          } else if (isCursorNavigation) {
-            autosuggestionSuppressedRef.current = true;
-            clearAutosuggestion();
-          } else if (isCommandEdit) {
-            // Don't recompute here - cursorX isn't updated until the
-            // server echoes the input back and it's written to the
-            // terminal (see the "data" message handler below). Recomputing
-            // now reads a stale cursor position and misplaces the ghost text.
-            clearAutosuggestion();
-          }
-
-          ws.send(JSON.stringify({ type: "input", data }));
-        });
-
-        pongReceivedRef.current = true;
-        pingIntervalRef.current = setInterval(() => {
-          if (ws.readyState === WebSocket.OPEN) {
-            if (!pongReceivedRef.current) {
-              console.warn(
-                "[WebSocket] Pong timeout - connection appears dead, closing",
-              );
-              ws.close();
-              return;
-            }
-            pongReceivedRef.current = false;
-            ws.send(JSON.stringify({ type: "ping" }));
-          }
-        }, 30000);
-      });
-
-      ws.addEventListener("message", (event) => {
-        try {
-          const msg = JSON.parse(event.data);
-          if (msg.type !== "data" && msg.type !== "pong") {
-            emitSessionMessage(msg);
-          }
-          if (msg.type === "pong") {
-            pongReceivedRef.current = true;
-            return;
-          }
-          if (msg.type === "resized") {
-            applySharedSize(msg);
-          } else if (msg.type === "data") {
-            if (typeof msg.data === "string") {
-              outputListenersRef.current.forEach((listener) =>
-                listener(msg.data),
-              );
-              if (showAutocompleteRef.current) {
-                showAutocompleteRef.current = false;
-                setShowAutocomplete(false);
-                setAutocompleteSuggestions([]);
-                currentAutocompleteCommand.current = "";
-              }
-
-              const output = applyLocalEchoToOutput(msg.data);
-              terminal.write(formatTerminalOutput(output));
-              scheduleAutosuggestionUpdate();
-              // Strip ANSI escape codes before testing — newer sudo versions (Ubuntu 26.04+)
-              // emit colored prompts with embedded escape sequences that break the regex.
-              const strippedData = msg.data.replace(
-                /\x1b(?:[@-Z\\-_]|\[[0-9:;<=>?!]*[@-~])/g,
-                "",
-              );
-              maybeOfferPasswordFill(strippedData);
-            } else {
-              const stringData = String(msg.data);
-              const output = applyLocalEchoToOutput(stringData);
-              terminal.write(formatTerminalOutput(output));
-              scheduleAutosuggestionUpdate();
-            }
-          } else if (msg.type === "error") {
-            const errorMessage = msg.message || t("terminal.unknownError");
-
-            addLog({
-              type: "error",
-              stage: "connection",
-              message: errorMessage,
-            });
-
-            if (
-              errorMessage.toLowerCase().includes("connection") ||
-              errorMessage.toLowerCase().includes("timeout") ||
-              errorMessage.toLowerCase().includes("network")
-            ) {
-              if (keepScrollbackRef.current && !isUnmountingRef.current) {
-                // The host is still unreachable; try again after the backoff.
-                isConnectingRef.current = false;
-                wasDisconnectedBySSH.current = false;
-                attemptReconnection();
-                return;
-              }
-              updateConnectionError(errorMessage);
-              setIsConnected(false);
-              if (terminal) {
-                terminal.clear();
-              }
-              setIsConnecting(false);
-              wasDisconnectedBySSH.current = false;
-              return;
-            }
-
-            if (
-              (errorMessage.toLowerCase().includes("auth") &&
-                errorMessage.toLowerCase().includes("failed")) ||
-              errorMessage.toLowerCase().includes("permission denied") ||
-              (errorMessage.toLowerCase().includes("invalid") &&
-                (errorMessage.toLowerCase().includes("password") ||
-                  errorMessage.toLowerCase().includes("key"))) ||
-              errorMessage.toLowerCase().includes("incorrect password")
-            ) {
-              keepScrollbackRef.current = false;
-              updateConnectionError(errorMessage);
-              setIsConnecting(false);
-              shouldNotReconnectRef.current = true;
-              if (webSocketRef.current) {
-                webSocketRef.current.close();
-              }
-              return;
-            }
-
-            updateConnectionError(errorMessage);
-            setIsConnecting(false);
-          } else if (msg.type === "connected") {
-            if (keepScrollbackRef.current) {
-              keepScrollbackRef.current = false;
-              reconnectAttempts.current = 0;
-            }
-            wasConnectedRef.current = true;
-            setIsConnected(true);
-            setIsConnecting(false);
-            isConnectingRef.current = false;
-            updateConnectionError(null);
-            if (connectionTimeoutRef.current) {
-              clearTimeout(connectionTimeoutRef.current);
-              connectionTimeoutRef.current = null;
-            }
-            if (reconnectAttempts.current > 0) {
-              addLog({
-                type: "success",
-                stage: "connection",
-                message: t("terminal.reconnected"),
-              });
-            } else {
-              addLog({
-                type: "success",
-                stage: "connection",
-                message: t("terminal.connected"),
-              });
-            }
-            reconnectAttempts.current = 0;
-            isReconnectingRef.current = false;
-
-            logTerminalActivity();
-
-            setTimeout(async () => {
-              const settings = termSettingsRef.current;
-              const environmentVariables =
-                (
-                  hostConfig.sshOptions as
-                    | {
-                        environmentVariables?: { key: string; value: string }[];
-                      }
-                    | null
-                    | undefined
-                )?.environmentVariables ?? [];
-
-              if (environmentVariables.length > 0) {
-                for (const envVar of environmentVariables) {
-                  if (envVar.key && envVar.value && ws.readyState === 1) {
-                    ws.send(
-                      JSON.stringify({
-                        type: "input",
-                        data: `export ${envVar.key}="${envVar.value}"\n`,
-                      }),
-                    );
-                  }
-                }
-              }
-
-              // The snippets plugin owns a host's startup command; while it
-              // is off nothing runs.
-              try {
-                const startup = await invokeAction(
-                  "snippets.startupCommand",
-                  settingsHost,
-                  {
-                    ip: hostConfig.ip,
-                    username: hostConfig.username,
-                    port: hostConfig.port,
-                    name: hostConfig.name,
-                  },
-                );
-                if (typeof startup === "string" && ws.readyState === 1) {
-                  ws.send(
-                    JSON.stringify({ type: "input", data: startup + "\n" }),
-                  );
-                }
-              } catch (err) {
-                console.warn("Failed to run the startup command:", err);
-              }
-
-              if (settings.autoMosh && ws.readyState === 1) {
-                ws.send(
-                  JSON.stringify({
-                    type: "input",
-                    data: settings.moshCommand + "\n",
-                  }),
-                );
-              }
-            }, 100);
-          } else if (msg.type === "session_ended") {
-            wasDisconnectedBySSH.current = true;
-            setIsConnected(false);
-            setIsConnecting(false);
-            shouldNotReconnectRef.current = true;
-            if (onClose) {
-              onClose();
-            }
-          } else if (msg.type === "disconnected") {
-            wasDisconnectedBySSH.current = true;
-            shouldNotReconnectRef.current = true;
-            setIsConnected(false);
-            setIsConnecting(false);
-            if (msg.graceful) {
-              wasConnectedRef.current = false;
-              if (onClose) onClose();
-            } else if (wasConnectedRef.current) {
-              wasConnectedRef.current = false;
-              if (
-                termSettingsRef.current.autoReconnect &&
-                !isUnmountingRef.current
-              ) {
-                wasDisconnectedBySSH.current = false;
-                shouldNotReconnectRef.current = false;
-                reconnectAttempts.current = 0;
-                keepScrollbackRef.current = true;
-                terminal?.write(
-                  `
-${t("terminal.autoReconnecting")}
-`,
-                );
-                attemptReconnection();
-              } else {
-                setShowDisconnectedOverlay(true);
-              }
-            } else if (!connectionErrorRef.current) {
-              updateConnectionError(
-                msg.message || t("terminal.connectionRejected"),
-              );
-            }
-          } else if (msg.type === "totp_required") {
-            setTotpRequired(true);
-            setTotpPrompt(msg.prompt || t("terminal.totpCodeLabel"));
-            setIsPasswordPrompt(false);
-            setMfaPromptMode("totp");
-            setMfaWaiting(false);
-            if (connectionTimeoutRef.current) {
-              clearTimeout(connectionTimeoutRef.current);
-              connectionTimeoutRef.current = null;
-            }
-            if (totpTimeoutRef.current) {
-              clearTimeout(totpTimeoutRef.current);
-            }
-            totpTimeoutRef.current = setTimeout(() => {
-              setTotpRequired(false);
-              if (webSocketRef.current) {
-                webSocketRef.current.close();
-              }
-            }, 180000);
-          } else if (msg.type === "totp_retry") {
-            // Existing prompt remains visible while the backend asks for another code.
-            setMfaWaiting(false);
-          } else if (msg.type === "password_required") {
-            const promptText: string = msg.prompt || "";
-            const pushPromptPattern =
-              /choose.*push.*totp|press enter.*(push|send)|push notification|authentication by phone/i;
-            const isPush = pushPromptPattern.test(promptText);
-            const isMenu = !isPush && msg.echo === true;
-            const mode: "menu" | "push" | "password" = isPush
-              ? "push"
-              : isMenu
-                ? "menu"
-                : "password";
-
-            setTotpRequired(true);
-            setTotpPrompt(promptText || t("common.password"));
-            setIsPasswordPrompt(true);
-            setMfaPromptMode(mode);
-            setMfaWaiting(false);
-            if (connectionTimeoutRef.current) {
-              clearTimeout(connectionTimeoutRef.current);
-              connectionTimeoutRef.current = null;
-            }
-            if (totpTimeoutRef.current) {
-              clearTimeout(totpTimeoutRef.current);
-            }
-            totpTimeoutRef.current = setTimeout(
-              () => {
-                setTotpRequired(false);
-                if (webSocketRef.current) {
-                  webSocketRef.current.close();
-                }
-              },
-              isPush ? 300000 : 180000,
-            );
-          } else if (
-            msg.kind === "browser" &&
-            typeof msg.type === "string" &&
-            msg.type.endsWith("_auth_required")
-          ) {
-            setBrowserSignIn({
-              id: msg.type.slice(0, -"_auth_required".length),
-              label: typeof msg.label === "string" ? msg.label : "",
-              url: msg.url || "",
-              code: msg.securityKey || "",
-            });
-            if (connectionTimeoutRef.current) {
-              clearTimeout(connectionTimeoutRef.current);
-              connectionTimeoutRef.current = null;
-            }
-            if (browserSignInTimeoutRef.current) {
-              clearTimeout(browserSignInTimeoutRef.current);
-            }
-            browserSignInTimeoutRef.current = setTimeout(() => {
-              setBrowserSignIn(null);
-              if (webSocketRef.current) {
-                webSocketRef.current.close();
-              }
-            }, 300000);
-          } else if (msg.type === "keyboard_interactive_available") {
-            setKeyboardInteractiveDetected(true);
-            setIsConnecting(false);
-            if (connectionTimeoutRef.current) {
-              clearTimeout(connectionTimeoutRef.current);
-              connectionTimeoutRef.current = null;
-            }
-          } else if (msg.type === "auth_method_not_available") {
-            setAuthDialogReason("no_keyboard");
-            setShowAuthDialog(true);
-            setIsConnecting(false);
-            if (connectionTimeoutRef.current) {
-              clearTimeout(connectionTimeoutRef.current);
-              connectionTimeoutRef.current = null;
-            }
-          } else if (msg.type === "cwd") {
-            onOpenFileManager?.(msg.path as string);
-          } else if (msg.type === "open_file_in_editor") {
-            onOpenFileInEditor?.(msg.path as string);
-          } else if (msg.type === "passphrase_required") {
-            setShowPassphraseDialog(true);
-            setIsConnecting(false);
-            if (connectionTimeoutRef.current) {
-              clearTimeout(connectionTimeoutRef.current);
-              connectionTimeoutRef.current = null;
-            }
-          } else if (msg.type === "host_key_verification_required") {
-            setHostKeyVerification({
-              isOpen: true,
-              scenario: "new",
-              data: msg.data,
-            });
-            if (connectionTimeoutRef.current) {
-              clearTimeout(connectionTimeoutRef.current);
-              connectionTimeoutRef.current = null;
-            }
-          } else if (msg.type === "host_key_changed") {
-            setHostKeyVerification({
-              isOpen: true,
-              scenario: "changed",
-              data: msg.data,
-            });
-            if (connectionTimeoutRef.current) {
-              clearTimeout(connectionTimeoutRef.current);
-              connectionTimeoutRef.current = null;
-            }
-          } else if (msg.type === "sessionCreated") {
-            sessionIdRef.current = msg.sessionId;
-            onSessionReady?.(msg.sessionId);
-            if (hostConfig.instanceId) {
-              patchOpenTab(hostConfig.instanceId!, {
-                backendSessionId: msg.sessionId,
-              }).catch(() => {});
-            }
-          } else if (msg.type === "sessionAttached") {
-            isAttachingSessionRef.current = false;
-            wasConnectedRef.current = true;
-            setIsConnected(true);
-            setIsConnecting(false);
-            isConnectingRef.current = false;
-            shouldNotReconnectRef.current = false;
-            updateConnectionError(null);
-            if (connectionTimeoutRef.current) {
-              clearTimeout(connectionTimeoutRef.current);
-              connectionTimeoutRef.current = null;
-            }
-            if (reconnectTimeoutRef.current) {
-              clearTimeout(reconnectTimeoutRef.current);
-              reconnectTimeoutRef.current = null;
-            }
-            reconnectAttempts.current = 0;
-            isReconnectingRef.current = false;
-
-            logTerminalActivity();
-
-            addLog({
-              type: "success",
-              stage: "connection",
-              message: t("terminal.reconnected"),
-            });
-          } else if (msg.type === "sessionExpired") {
-            isAttachingSessionRef.current = false;
-            sessionIdRef.current = null;
-            wasSessionExpiredRef.current = true;
-            void explainSessionExpiry();
-            if (hostConfig.instanceId) {
-              patchOpenTab(hostConfig.instanceId!, {
-                backendSessionId: null,
-              }).catch(() => {});
-            }
-            if (webSocketRef.current) {
-              webSocketRef.current.close();
-            }
-          } else if (msg.type === "sessionTakenOver") {
-            sessionIdRef.current = null;
-
-            if (terminal) {
-              terminal.clear();
-            }
-            setIsConnected(false);
-            setIsConnecting(true);
-
-            addLog({
-              type: "warning",
-              stage: "connection",
-              message: t("terminal.sessionTakenOver"),
-            });
-
-            const cols = terminal?.cols || 80;
-            const rows = terminal?.rows || 24;
-            connectToHost(cols, rows);
-          } else if (msg.type === "tmux_sessions_available") {
-            setTmuxSessionPicker({
-              sessions: msg.sessions,
-            });
-          } else if (
-            msg.type === "tmux_session_created" ||
-            msg.type === "tmux_session_attached"
-          ) {
-            const sessionName =
-              typeof msg.sessionName === "string" ? msg.sessionName : "";
-            tmuxSessionNameRef.current = sessionName || "(active)";
-            setIsTmuxAttached(true);
-            addLog({
-              type: "info",
-              stage: "connection",
-              message:
-                msg.type === "tmux_session_created"
-                  ? t("terminal.tmuxSessionCreated", {
-                      name: sessionName || "new",
-                    })
-                  : t("terminal.tmuxSessionAttached", {
-                      name: sessionName,
-                    }),
-            });
-          } else if (msg.type === "tmux_unavailable") {
-            setTimeout(() => {
-              toast.warning(t("terminal.tmuxUnavailable"), {
-                duration: 8000,
-              });
-            }, 500);
-            addLog({
-              type: "warning",
-              stage: "connection",
-              message: t("terminal.tmuxUnavailable"),
-            });
-          } else if (msg.type === "tmux_detached") {
-            tmuxSessionNameRef.current = null;
-            setIsTmuxAttached(false);
-            toast.info(t("terminal.tmuxDetached"), { duration: 3000 });
-          } else if (msg.type === "connection_log") {
-            if (msg.data) {
-              addLog({
-                type: msg.data.level || "info",
-                stage: msg.data.stage || "auth",
-                message: msg.data.message,
-                details: msg.data.details,
-              });
-            }
-          }
-        } catch (error) {
-          console.error("WebSocket message handler error:", error);
-        }
-      });
-
-      const currentAttemptId = connectionAttemptIdRef.current;
-
-      ws.addEventListener("close", (event) => {
-        if (currentAttemptId !== connectionAttemptIdRef.current) {
-          return;
-        }
-
-        terminalInputDisposableRef.current?.dispose();
-        terminalInputDisposableRef.current = null;
-
-        setIsConnected(false);
-        isConnectingRef.current = false;
-
-        if (pingIntervalRef.current) {
-          clearInterval(pingIntervalRef.current);
-          pingIntervalRef.current = null;
-        }
-
-        if (pongTimeoutRef.current) {
-          clearTimeout(pongTimeoutRef.current);
-          pongTimeoutRef.current = null;
-        }
-
-        if (totpTimeoutRef.current) {
-          clearTimeout(totpTimeoutRef.current);
-          totpTimeoutRef.current = null;
-        }
-
-        connectTimeoutHoldsRef.current = 0;
-        emitSessionMessage({ type: "session_closed" });
-
-        if (wasSessionExpiredRef.current) {
-          wasSessionExpiredRef.current = false;
-          const cols = terminal?.cols || 80;
-          const rows = terminal?.rows || 24;
-          connectToHost(cols, rows);
-          return;
-        }
-
-        if (event.code === 1006) {
-          console.warn(
-            "[WebSocket] Abnormal closure detected - attempting reconnection",
-          );
-          addLog({
-            type: "warning",
-            stage: "connection",
-            message: t("terminal.websocketAbnormalClose"),
-          });
-
-          if (wasConnectedRef.current) {
-            attemptReconnection();
-          } else {
-            updateConnectionError(t("terminal.websocketAbnormalClose"));
-            setIsConnecting(false);
-          }
-          return;
-        }
-
-        if (event.code === 1008) {
-          console.error("WebSocket authentication failed:", event.reason);
-          addLog({
-            type: "error",
-            stage: "auth",
-            message: "Authentication failed - please re-login",
-          });
-          updateConnectionError("Authentication failed - please re-login");
-          setIsConnecting(false);
-          shouldNotReconnectRef.current = true;
-
-          return;
-        }
-
-        if (
-          !wasConnectedRef.current &&
-          !isAttachingSessionRef.current &&
-          !keepScrollbackRef.current &&
-          event.wasClean &&
-          (event.code === 1005 || event.code === 1000)
-        ) {
-          console.error("[WebSocket] Connection rejected by server");
-          addLog({
-            type: "error",
-            stage: "connection",
-            message: t("terminal.connectionRejected"),
-          });
-          updateConnectionError(t("terminal.connectionRejected"));
-          setIsConnecting(false);
-          shouldNotReconnectRef.current = true;
-          return;
-        }
-
-        const shouldAttemptReconnection =
-          !wasDisconnectedBySSH.current &&
-          !isUnmountingRef.current &&
-          !shouldNotReconnectRef.current &&
-          !isConnectingRef.current;
-
-        if (shouldAttemptReconnection) {
-          wasDisconnectedBySSH.current = false;
-          attemptReconnection();
-        } else {
-          setIsConnecting(false);
-        }
-      });
-
-      ws.addEventListener("error", (event) => {
-        if (currentAttemptId !== connectionAttemptIdRef.current) {
-          return;
-        }
-
-        console.error("[WebSocket] Error:", event);
-
-        setIsConnected(false);
-        isConnectingRef.current = false;
-        updateConnectionError(t("terminal.websocketError"));
-        if (terminal) {
-          terminal.clear();
-        }
-        setIsConnecting(false);
-
-        if (pingIntervalRef.current) {
-          clearInterval(pingIntervalRef.current);
-          pingIntervalRef.current = null;
-        }
-
-        if (totpTimeoutRef.current) {
-          clearTimeout(totpTimeoutRef.current);
-          totpTimeoutRef.current = null;
-        }
-      });
-    }
-
-    async function writeTextToClipboard(text: string): Promise<boolean> {
-      const ok = await copyToClipboard(text);
-      if (!ok) toast.error(t("terminal.clipboardWriteFailed"));
-      return ok;
-    }
-
-    async function readTextFromClipboard(): Promise<string> {
-      const text = await readFromClipboard();
-      if (!text && window.location.protocol !== "https:" && !isElectron()) {
-        toast.error(t("terminal.clipboardHttpWarning"));
-      }
-      return text;
-    }
-
-    const handleSelectCommand = useCallback(
-      (command: string) => {
-        if (!terminal || !webSocketRef.current) return;
-
-        for (const char of command) {
-          webSocketRef.current.send(
-            JSON.stringify({ type: "input", data: char }),
-          );
-        }
-
-        setTimeout(() => {
-          terminal.focus();
-        }, 100);
-      },
-      [terminal],
-    );
-
-    useEffect(() => {
-      commandHistoryContext.setOnSelectCommand(handleSelectCommand);
-    }, [handleSelectCommand]);
-
-    const handleAutocompleteSelect = useCallback(
-      (selectedCommand: string) => {
-        if (!webSocketRef.current) return;
-
-        const currentCmd = currentAutocompleteCommand.current;
-        const completion = selectedCommand.substring(currentCmd.length);
-
-        for (const char of completion) {
-          webSocketRef.current.send(
-            JSON.stringify({ type: "input", data: char }),
-          );
-        }
-
-        updateCurrentCommand(selectedCommand);
-
-        setShowAutocomplete(false);
-        setAutocompleteSuggestions([]);
-        currentAutocompleteCommand.current = "";
-        clearAutosuggestion();
-
-        setTimeout(() => {
-          terminal?.focus();
-        }, 50);
-      },
-      [clearAutosuggestion, terminal, updateCurrentCommand],
-    );
-
-    const handleDeleteCommand = useCallback(
-      async (command: string) => {
-        if (!hostConfig.id) return;
-
-        try {
-          await deleteCommandFromHistory(api, hostConfig.id, command);
-
-          setCommandHistory((prev) => {
-            const newHistory = prev.filter((cmd) => cmd !== command);
-            setCommandHistoryContextRef.current(newHistory);
-            return newHistory;
-          });
-
-          autocompleteHistory.current = autocompleteHistory.current.filter(
-            (cmd) => cmd !== command,
-          );
-        } catch (error) {
-          console.error("Failed to delete command from history:", error);
-        }
-      },
-      [hostConfig.id],
-    );
-
-    useEffect(() => {
-      commandHistoryContext.setOnDeleteCommand(handleDeleteCommand);
-    }, [handleDeleteCommand]);
-
-    // Separate theme and options updates to avoid terminal re-initialization flashes
-    useEffect(() => {
-      if (!terminal) return;
-
-      const config = termSettingsRef.current;
-
-      const activeTheme = previewTheme || config.theme;
-      const themeColors = resolveTermixThemeColors(
-        activeTheme,
-        appTheme,
-        config.customThemeColors,
-      );
-
-      const fontFamily = resolveTerminalFontFamily(config.fontFamily);
-      ensureTerminalFontsLoaded(config.fontFamily || TERMINAL_FONTS[0].value);
-
-      // Resolve the effective font size: a persisted zoom override wins, but if
-      // the configured font size itself changed (e.g. user edited it in
-      // Settings) drop the override so the new configured value takes effect.
-      const effectiveFontSize = readFontSizeOverride() ?? configuredFontSize;
-
-      // Update terminal options individually to avoid re-initialization flashes
-      terminal.options.cursorBlink = config.cursorBlink;
-      terminal.options.cursorStyle = config.cursorStyle;
-      terminal.options.scrollback = config.scrollback;
-      terminal.options.fontSize = effectiveFontSize;
-      terminalFontSizeRef.current = effectiveFontSize;
-      terminal.options.fontFamily = fontFamily;
-      terminal.options.rightClickSelectsWord = config.rightClickSelectsWord;
-      terminal.options.macOptionIsMeta = config.macOptionIsMeta;
-      terminal.options.fastScrollSensitivity = config.fastScrollSensitivity;
-      terminal.options.minimumContrastRatio = config.minimumContrastRatio;
-      terminal.options.letterSpacing = config.letterSpacing;
-      terminal.options.lineHeight = config.lineHeight;
-
-      terminal.options.theme = {
-        background: config.backgroundImage
-          ? "transparent"
-          : themeColors.background,
-        foreground: themeColors.foreground,
-        cursor: themeColors.cursor,
-        cursorAccent: themeColors.cursorAccent,
-        selectionBackground: themeColors.selectionBackground,
-        selectionForeground: themeColors.selectionForeground,
-        black: themeColors.black,
-        red: themeColors.red,
-        green: themeColors.green,
-        yellow: themeColors.yellow,
-        blue: themeColors.blue,
-        magenta: themeColors.magenta,
-        cyan: themeColors.cyan,
-        white: themeColors.white,
-        brightBlack: themeColors.brightBlack,
-        brightRed: themeColors.brightRed,
-        brightGreen: themeColors.brightGreen,
-        brightYellow: themeColors.brightYellow,
-        brightBlue: themeColors.brightBlue,
-        brightMagenta: themeColors.brightMagenta,
-        brightCyan: themeColors.brightCyan,
-        brightWhite: themeColors.brightWhite,
-      };
-
-      // Ensure terminal is correctly fitted if font-related options change
-      if (fitAddonRef.current && isFitted) {
-        performFit();
-      }
-
-      // Refresh terminal to apply new theme colors to existing buffer content
-      hardRefresh();
-    }, [terminal, termSettings, previewTheme, appTheme, isFitted]);
-
-    useEffect(() => {
-      if (!terminal || !xtermRef.current) return;
-
-      const config = termSettingsRef.current;
-
-      const fontFamily = resolveTerminalFontFamily(config.fontFamily);
-      ensureTerminalFontsLoaded(config.fontFamily || TERMINAL_FONTS[0].value);
-
-      const activeTheme = previewTheme || config.theme;
-      const themeColors = resolveTermixThemeColors(
-        activeTheme,
-        appTheme,
-        config.customThemeColors,
-      );
-
-      // Honor a persisted zoom override for the initial font size too.
-      const initialFontSize = readFontSizeOverride() ?? config.fontSize;
-
-      // Set initial options before opening the terminal
-      terminal.options = {
-        cursorBlink: config.cursorBlink,
-        cursorStyle: config.cursorStyle,
-        scrollback: config.scrollback,
-        fontSize: initialFontSize,
-        fontFamily,
-        allowTransparency: true, // MUST be set before open()
-        convertEol: false,
-        macOptionIsMeta: config.macOptionIsMeta,
-        macOptionClickForcesSelection: false,
-        rightClickSelectsWord: config.rightClickSelectsWord,
-        fastScrollSensitivity: config.fastScrollSensitivity,
-        allowProposedApi: true,
-        minimumContrastRatio: config.minimumContrastRatio,
-        letterSpacing: config.letterSpacing,
-        lineHeight: config.lineHeight,
-        theme: {
-          background: config.backgroundImage
-            ? "transparent"
-            : themeColors.background,
-          foreground: themeColors.foreground,
-          cursor: themeColors.cursor,
-          cursorAccent: themeColors.cursorAccent,
-          selectionBackground: themeColors.selectionBackground,
-          selectionForeground: themeColors.selectionForeground,
-          black: themeColors.black,
-          red: themeColors.red,
-          green: themeColors.green,
-          yellow: themeColors.yellow,
-          blue: themeColors.blue,
-          magenta: themeColors.magenta,
-          cyan: themeColors.cyan,
-          white: themeColors.white,
-          brightBlack: themeColors.brightBlack,
-          brightRed: themeColors.brightRed,
-          brightGreen: themeColors.brightGreen,
-          brightYellow: themeColors.brightYellow,
-          brightBlue: themeColors.brightBlue,
-          brightMagenta: themeColors.brightMagenta,
-          brightCyan: themeColors.brightCyan,
-          brightWhite: themeColors.brightWhite,
-        },
-      };
-
-      const fitAddon = new FitAddon();
-      const clipboardProvider = new RobustClipboardProvider();
-      const clipboardAddon = new ClipboardAddon(undefined, clipboardProvider);
-      const unicode11Addon = new Unicode11Addon();
-      const searchAddon = new SearchAddon();
-      const webLinksAddon = new WebLinksAddon((_event, uri) => {
-        const url =
-          uri.startsWith("http://") || uri.startsWith("https://")
-            ? uri
-            : `https://${uri}`;
-
-        const hostBehavior = termSettingsRef.current.linkClickBehavior;
-        const behavior =
-          hostBehavior && hostBehavior !== "default"
-            ? hostBehavior
-            : termUserRef.current.linkClickBehavior;
-
-        if (behavior === "direct") {
-          window.open(url, "_blank");
-        } else {
-          setLinkClickDialog({ url });
-        }
-      });
-
-      fitAddonRef.current = fitAddon;
-      searchAddonRef.current = searchAddon;
-      terminal.loadAddon(fitAddon);
-      terminal.loadAddon(clipboardAddon);
-      terminal.loadAddon(unicode11Addon);
-      terminal.loadAddon(webLinksAddon);
-      terminal.loadAddon(searchAddon);
-
-      searchAddon.onDidChangeResults(({ resultIndex, resultCount }) => {
-        setSearchResultIndex(resultIndex);
-        setSearchResultCount(resultCount);
-      });
-
-      terminal.unicode.activeVersion = "11";
-
-      terminal.open(xtermRef.current);
-
-      const xtermTextarea = xtermRef.current.querySelector("textarea");
-      if (xtermTextarea) {
-        xtermTextarea.setAttribute("autocomplete", "off");
-        xtermTextarea.setAttribute("autocorrect", "off");
-        xtermTextarea.setAttribute("autocapitalize", "none");
-        xtermTextarea.setAttribute("spellcheck", "false");
-        xtermTextarea.setAttribute("data-gramm", "false");
-        xtermTextarea.setAttribute("data-gramm_editor", "false");
-        xtermTextarea.setAttribute("data-enable-grammarly", "false");
-      }
-
-      terminal.onTitleChange((title) => {
-        if (title) onTitleChange?.(title);
-      });
-      document.fonts.ready.then(() => {
-        terminal.refresh(0, terminal.rows - 1);
-        fitTerminal();
-      });
-
-      terminal.attachCustomWheelEventHandler((ev) => {
-        if (ev.ctrlKey || ev.metaKey) {
-          changeTerminalFontSize(ev.deltaY < 0 ? 1 : -1);
-          return false;
-        }
-
-        const cfg = termSettingsRef.current;
-        const mod = cfg.fastScrollModifier;
-        const modHeld =
-          (mod === "alt" && ev.altKey) ||
-          (mod === "ctrl" && ev.ctrlKey) ||
-          (mod === "shift" && ev.shiftKey);
-        if (modHeld) {
-          const lines = Math.round(
-            (Math.abs(ev.deltaY) / 100) * (cfg.fastScrollSensitivity ?? 5),
-          );
-          terminal.scrollLines(ev.deltaY > 0 ? lines : -lines);
-          return false;
-        }
-        return true;
-      });
-
-      fitTerminal();
-      // Double-rAF ensures layout is fully settled (fonts, flexbox, etc.) before
-      // committing the fitted size, preventing the "terminal too short" glitch.
-      requestAnimationFrame(() => {
-        requestAnimationFrame(() => {
-          fitTerminal();
-          setIsFitted(true);
-        });
-      });
-
-      // Send one-finger drags through xterm's real wheel DOM path. This keeps
-      // scrollback, alternate-buffer/tmux, mouse reporting and wheel remainder
-      // handling identical to desktop wheel input.
-      let disposeTouchWheel = () => {};
-      let touchWheelDisposed = false;
-      loadTouchInputSettings(api).then((settings) => {
-        if (!touchWheelDisposed && xtermRef.current) {
-          disposeTouchWheel = installTouchWheelCoordinator(
-            xtermRef.current,
-            undefined,
-            settings,
-          );
-        }
-      });
-      const element = xtermRef.current;
-      const handleContextMenu = (e: MouseEvent) => {
-        if (e.ctrlKey && onOpenFileManager) {
-          e.preventDefault();
-          e.stopPropagation();
-          onOpenFileManager();
-          return;
-        }
-
-        const action = resolveTerminalContextMenuAction({
-          rightClickCopyPaste: getUseRightClickCopyPaste(),
-          copyOnSelect: getCopyOnSelect(),
-          hasSelection: terminal.hasSelection(),
-        });
-        if (action !== "native") {
-          e.preventDefault();
-          e.stopPropagation();
-          if (action === "copy") {
-            const text = terminal.getSelection();
-            writeTextToClipboard(text).then(() => terminal.clearSelection());
-          } else {
-            readTextFromClipboard().then((text) => {
-              if (text) terminal.paste(text);
-            });
-          }
-          return;
-        }
-      };
-      element?.addEventListener("contextmenu", handleContextMenu);
-
-      const handleSelectionMouseUp = (e: MouseEvent) => {
-        const text = selectedTextToCopy({
-          copyOnSelect: getCopyOnSelect(),
-          button: e.button,
-          selection: terminal.getSelection(),
-        });
-        if (text) void writeTextToClipboard(text);
-      };
-      element?.addEventListener("mouseup", handleSelectionMouseUp);
-
-      const handleMiddleClick = (e: MouseEvent) => {
-        if (
-          e.button !== 1 ||
-          !getCopyOnSelect() ||
-          !getUseRightClickCopyPaste()
-        ) {
-          return;
-        }
-        e.preventDefault();
-        e.stopPropagation();
-        readTextFromClipboard().then((text) => {
-          if (text) terminal.paste(text);
-        });
-      };
-      element?.addEventListener("auxclick", handleMiddleClick);
-
-      const handlePaste = (e: ClipboardEvent) => {
-        const text = e.clipboardData?.getData("text");
-        if (text) {
-          e.preventDefault();
-          e.stopPropagation();
-          terminal.paste(text);
-        }
-      };
-      element?.addEventListener("paste", handlePaste);
-
-      let tmuxDragTracking = false;
-      const handleTmuxDragStart = (e: MouseEvent) => {
-        if (e.button !== 0) return;
-        if (!tmuxSessionNameRef.current) return;
-        tmuxDragTracking = true;
-      };
-      const handleTmuxDragMove = () => {
-        if (!tmuxDragTracking) return;
-        tmuxDragTracking = false;
-        if (tmuxCopyModeHintShownRef.current) return;
-        tmuxCopyModeHintShownRef.current = true;
-        toast.info(t("terminal.tmuxCopyHint"), { duration: 5000 });
-      };
-      const handleTmuxDragEnd = () => {
-        tmuxDragTracking = false;
-      };
-      element?.addEventListener("mousedown", handleTmuxDragStart);
-      element?.addEventListener("mousemove", handleTmuxDragMove);
-      element?.addEventListener("mouseup", handleTmuxDragEnd);
-
-      const handleBackspaceMode = (e: KeyboardEvent) => {
-        if (e.key !== "Backspace") return;
-        if (e.ctrlKey || e.metaKey || e.altKey) return;
-
-        if (termSettingsRef.current.backspaceMode !== "control-h") return;
-
-        e.preventDefault();
-        e.stopPropagation();
-
-        if (webSocketRef.current?.readyState === 1) {
-          webSocketRef.current.send(
-            JSON.stringify({ type: "input", data: "\x08" }),
-          );
-        }
-        return false;
-      };
-
-      // On macOS Electron, Tab key events can be swallowed by Chromium's focus
-      // traversal system before xterm.js sees them. Calling preventDefault() in
-      // the capture phase blocks that traversal while still allowing the event to
-      // reach xterm.js's internal handler (which fires our attachCustomKeyEventHandler).
-      const handleTabCapture = (e: KeyboardEvent) => {
-        if (isTabKeyEvent(e)) {
-          e.preventDefault();
-        }
-      };
-
-      element?.addEventListener("keydown", handleBackspaceMode, true);
-      element?.addEventListener("keydown", handleTabCapture, true);
-
-      const resizeObserver = new ResizeObserver(() => {
-        // Background keep-alive tabs still observe layout; skip fit work.
-        if (!isVisibleRef.current) return;
-        if (resizeTimeout.current) clearTimeout(resizeTimeout.current);
-        resizeTimeout.current = setTimeout(() => {
-          if (isVisibleRef.current) {
-            performFit();
-          }
-        }, 50);
-      });
-
-      const observeTarget = xtermRef.current.parentElement ?? xtermRef.current;
-      resizeObserver.observe(observeTarget);
-
-      return () => {
-        touchWheelDisposed = true;
-        isFittingRef.current = false;
-        resizeObserver.disconnect();
-        clipboardProvider.dispose();
-        element?.removeEventListener("contextmenu", handleContextMenu);
-        element?.removeEventListener("mouseup", handleSelectionMouseUp);
-        element?.removeEventListener("auxclick", handleMiddleClick);
-        element?.removeEventListener("paste", handlePaste);
-        element?.removeEventListener("mousedown", handleTmuxDragStart);
-        element?.removeEventListener("mousemove", handleTmuxDragMove);
-        element?.removeEventListener("mouseup", handleTmuxDragEnd);
-        element?.removeEventListener("keydown", handleBackspaceMode, true);
-        element?.removeEventListener("keydown", handleTabCapture, true);
-        disposeTouchWheel();
-        if (notifyTimerRef.current) clearTimeout(notifyTimerRef.current);
-        if (resizeTimeout.current) clearTimeout(resizeTimeout.current);
-      };
-    }, [xtermRef, terminal]);
-
-    const isMountedRef = useRef(false);
-
-    useEffect(
-      () => () => {
-        terminalInputDisposableRef.current?.dispose();
-        terminalInputDisposableRef.current = null;
-      },
-      [],
-    );
-
-    useEffect(() => {
-      isMountedRef.current = true;
-
-      return () => {
-        if (!isMountedRef.current) {
-          return;
-        }
-
-        isUnmountingRef.current = true;
-        shouldNotReconnectRef.current = true;
-        isReconnectingRef.current = false;
-        setIsConnecting(false);
-        if (reconnectTimeoutRef.current)
-          clearTimeout(reconnectTimeoutRef.current);
-        if (connectionTimeoutRef.current)
-          clearTimeout(connectionTimeoutRef.current);
-        if (totpTimeoutRef.current) clearTimeout(totpTimeoutRef.current);
-        if (pingIntervalRef.current) {
-          clearInterval(pingIntervalRef.current);
-          pingIntervalRef.current = null;
-        }
-        if (pongTimeoutRef.current) {
-          clearTimeout(pongTimeoutRef.current);
-          pongTimeoutRef.current = null;
-        }
-
-        if (webSocketRef.current) {
-          webSocketRef.current.close();
-        }
-
-        isMountedRef.current = false;
-      };
-    }, [hostConfig.id, hostConfig.instanceId]);
-
-    useEffect(() => {
-      let cancelled = false;
-      const loadKeybindings = () => {
-        getCustomKeybindings()
-          .then((bindings) => {
-            if (!cancelled) {
-              customKeybindingsRef.current = bindings.filter(
-                (kb) => kb.enabled,
-              );
-            }
-          })
-          .catch(() => {
-            // keep previous/empty bindings on failure, non-fatal
-          });
-      };
-      loadKeybindings();
-      window.addEventListener("customKeybindingsChanged", loadKeybindings);
-      return () => {
-        cancelled = true;
-        window.removeEventListener("customKeybindingsChanged", loadKeybindings);
-      };
-    }, []);
-
-    useEffect(() => {
-      if (!terminal) return;
-
-      const handleCustomKey = (e: KeyboardEvent): boolean => {
-        if (e.type !== "keydown") {
-          return true;
-        }
-
-        // Custom user keybindings take priority over built-in defaults, but
-        // never override autocomplete popup navigation while it is open.
-        if (!showAutocompleteRef.current) {
-          const matched = findMatchingKeybinding(
-            e,
-            customKeybindingsRef.current,
-          );
-          // The terminal's own actions run here; anything else goes to
-          // whoever registered it (the shell, or another plugin), and the key
-          // passes through while nothing does.
-          const handled =
-            !!matched &&
-            (isTerminalKeybindingAction(matched.action.type)
-              ? dispatchKeybindingAction(matched.action, {
-                  terminal,
-                  webSocketRef,
-                  writeTextToClipboard,
-                  readTextFromClipboard,
-                })
-              : runKeybindingAction(matched.action, {
-                  host: {
-                    ip: hostConfig.ip,
-                    username: hostConfig.username,
-                    port: hostConfig.port,
-                    name: hostConfig.name,
-                  },
-                  send: (data) => sendRawToSocket(webSocketRef, data),
-                }));
-          if (handled) {
-            e.preventDefault();
-            e.stopPropagation();
-            return false;
-          }
-        }
-
-        if (
-          showSearchRef.current &&
-          e.key === "Escape" &&
-          !e.ctrlKey &&
-          !e.altKey &&
-          !e.metaKey &&
-          !e.shiftKey
-        ) {
-          e.preventDefault();
-          e.stopPropagation();
-          closeSearch();
-          return false;
-        }
-
-        if (
-          (e.ctrlKey || e.metaKey) &&
-          !e.altKey &&
-          !e.shiftKey &&
-          e.key.toLowerCase() === "f"
-        ) {
-          e.preventDefault();
-          e.stopPropagation();
-          openSearch();
-          return false;
-        }
-
-        if (navigator.userAgent.includes("Android")) {
-          const sequence = getAndroidHardwareKeySequence(
-            e,
-            terminal.modes.applicationCursorKeysMode,
-            termSettingsRef.current.backspaceMode,
-          );
-          if (sequence) {
-            e.preventDefault();
-            e.stopPropagation();
-            if (webSocketRef.current?.readyState === WebSocket.OPEN) {
-              webSocketRef.current.send(
-                JSON.stringify({ type: "input", data: sequence }),
-              );
-            }
-            return false;
-          }
-        }
-
-        if (
-          hasDock &&
-          e.ctrlKey &&
-          e.shiftKey &&
-          !e.altKey &&
-          !e.metaKey &&
-          e.key.toLowerCase() === "a"
-        ) {
-          e.preventDefault();
-          e.stopPropagation();
-          toggleDock();
-          return false;
-        }
-        const macLineNav = getMacLineNavigationSequence(e);
-        if (macLineNav) {
-          e.preventDefault();
-          e.stopPropagation();
-          if (webSocketRef.current?.readyState === WebSocket.OPEN) {
-            webSocketRef.current.send(
-              JSON.stringify({ type: "input", data: macLineNav }),
-            );
-          }
-          return false;
-        }
-
-        // Forward global app shortcuts to AppShell directly — xterm swallows
-        // all keydown events and synthetic re-dispatch is unreliable.
-        // stopPropagation prevents the same event from also firing the window listener.
-        if (e.ctrlKey && e.shiftKey && !e.altKey && !e.metaKey) {
-          const globalCodes = [
-            "BracketRight",
-            "BracketLeft",
-            "Backslash",
-            "Minus",
-            "Enter",
-          ];
-          if (globalCodes.includes(e.code)) {
-            e.stopPropagation();
-            globalShortcutHandler.current?.(e);
-            return false;
-          }
-        }
-
-        if (e.altKey && !e.ctrlKey && !e.shiftKey && !e.metaKey) {
-          const arrowCodes = [
-            "ArrowLeft",
-            "ArrowRight",
-            "ArrowUp",
-            "ArrowDown",
-          ];
-          if (arrowCodes.includes(e.code)) {
-            e.stopPropagation();
-            globalShortcutHandler.current?.(e);
-            return false;
-          }
-        }
-
-        if (isTabJumpHotkey(e)) {
-          e.stopPropagation();
-          globalShortcutHandler.current?.(e);
-          return false;
-        }
-
-        const fontZoomDirection = getTerminalFontZoomDirection(e);
-        if (fontZoomDirection !== 0) {
-          e.preventDefault();
-          e.stopPropagation();
-          changeTerminalFontSize(fontZoomDirection);
-          return false;
-        }
-
-        if (
-          !handleTerminalClipboardKeyEvent(
-            e,
-            terminal,
-            { writeTextToClipboard, readTextFromClipboard },
-            { plainPasteMode: "native" },
-          )
-        ) {
-          return false;
-        }
-
-        if (e.ctrlKey && e.altKey && !e.metaKey && !e.shiftKey) {
-          const key = e.key.toLowerCase();
-          const blockedKeys = ["w", "t", "n", "q"];
-          if (blockedKeys.includes(key)) {
-            e.preventDefault();
-            e.stopPropagation();
-            const ctrlCode = key.charCodeAt(0) - 96;
-            if (webSocketRef.current?.readyState === 1) {
-              webSocketRef.current.send(
-                JSON.stringify({
-                  type: "input",
-                  data: String.fromCharCode(ctrlCode),
-                }),
-              );
-            }
-            return false;
-          }
-        }
-
-        if (showAutocompleteRef.current) {
-          if (e.key === "Escape") {
-            e.preventDefault();
-            e.stopPropagation();
-            setShowAutocomplete(false);
-            setAutocompleteSuggestions([]);
-            currentAutocompleteCommand.current = "";
-            return false;
-          }
-
-          if (e.key === "ArrowDown" || e.key === "ArrowUp") {
-            e.preventDefault();
-            e.stopPropagation();
-
-            const currentIndex = autocompleteSelectedIndexRef.current;
-            const suggestionsLength = autocompleteSuggestionsRef.current.length;
-
-            if (e.key === "ArrowDown") {
-              const newIndex =
-                currentIndex < suggestionsLength - 1 ? currentIndex + 1 : 0;
-              setAutocompleteSelectedIndex(newIndex);
-            } else if (e.key === "ArrowUp") {
-              const newIndex =
-                currentIndex > 0 ? currentIndex - 1 : suggestionsLength - 1;
-              setAutocompleteSelectedIndex(newIndex);
-            }
-            return false;
-          }
-
-          if (
-            e.key === "Enter" &&
-            autocompleteSuggestionsRef.current.length > 0
-          ) {
-            e.preventDefault();
-            e.stopPropagation();
-
-            const selectedCommand =
-              autocompleteSuggestionsRef.current[
-                autocompleteSelectedIndexRef.current
-              ];
-            const currentCmd = currentAutocompleteCommand.current;
-            const completion = selectedCommand.substring(currentCmd.length);
-
-            if (webSocketRef.current?.readyState === 1) {
-              for (const char of completion) {
-                webSocketRef.current.send(
-                  JSON.stringify({ type: "input", data: char }),
-                );
-              }
-            }
-
-            updateCurrentCommandRef.current(selectedCommand);
-
-            setShowAutocomplete(false);
-            setAutocompleteSuggestions([]);
-            currentAutocompleteCommand.current = "";
-
-            return false;
-          }
-
-          if (
-            isTabKeyEvent(e) &&
-            !e.ctrlKey &&
-            !e.altKey &&
-            !e.metaKey &&
-            !e.shiftKey
-          ) {
-            e.preventDefault();
-            e.stopPropagation();
-            const currentIndex = autocompleteSelectedIndexRef.current;
-            const suggestionsLength = autocompleteSuggestionsRef.current.length;
-            const newIndex =
-              currentIndex < suggestionsLength - 1 ? currentIndex + 1 : 0;
-            setAutocompleteSelectedIndex(newIndex);
-            return false;
-          }
-
-          setShowAutocomplete(false);
-          setAutocompleteSuggestions([]);
-          currentAutocompleteCommand.current = "";
-          return true;
-        }
-
-        const shouldAcceptAutosuggestion =
-          autosuggestionRef.current &&
-          ((e.key === "ArrowRight" &&
-            !e.ctrlKey &&
-            !e.altKey &&
-            !e.metaKey &&
-            !e.shiftKey) ||
-            (e.key === "End" &&
-              !e.ctrlKey &&
-              !e.altKey &&
-              !e.metaKey &&
-              !e.shiftKey) ||
-            (e.ctrlKey &&
-              !e.altKey &&
-              !e.metaKey &&
-              !e.shiftKey &&
-              e.key.toLowerCase() === "f"));
-
-        if (shouldAcceptAutosuggestion) {
-          e.preventDefault();
-          e.stopPropagation();
-          acceptAutosuggestion();
-          return false;
-        }
-
-        if (
-          isTabKeyEvent(e) &&
-          e.shiftKey &&
-          !e.ctrlKey &&
-          !e.altKey &&
-          !e.metaKey
-        ) {
-          e.preventDefault();
-          e.stopPropagation();
-          if (webSocketRef.current?.readyState === 1) {
-            webSocketRef.current.send(
-              JSON.stringify({ type: "input", data: "\x1b[Z" }),
-            );
-          }
-          return false;
-        }
-
-        if (
-          isTabKeyEvent(e) &&
-          !e.ctrlKey &&
-          !e.altKey &&
-          !e.metaKey &&
-          !e.shiftKey
-        ) {
-          e.preventDefault();
-          e.stopPropagation();
-
-          const sendTabToShell = () => {
-            if (webSocketRef.current?.readyState === 1) {
-              webSocketRef.current.send(
-                JSON.stringify({ type: "input", data: "\t" }),
-              );
-            }
-          };
-
-          const autocompleteEnabled = termUserRef.current.commandAutocomplete;
-
-          if (!autocompleteEnabled) {
-            clearAutosuggestion();
-            sendTabToShell();
-            return false;
-          }
-
-          const currentCmd = getCurrentCommandRef.current().trim();
-          if (currentCmd.length === 0) {
-            clearAutosuggestion();
-            sendTabToShell();
-            return false;
-          }
-
-          if (webSocketRef.current?.readyState === 1) {
-            const matches = autocompleteHistory.current
-              .filter(
-                (cmd) =>
-                  cmd.startsWith(currentCmd) &&
-                  cmd !== currentCmd &&
-                  cmd.length > currentCmd.length,
-              )
-              .slice(0, 5);
-
-            if (matches.length === 1) {
-              const completedCommand = matches[0];
-              const completion = completedCommand.substring(currentCmd.length);
-
-              for (const char of completion) {
-                webSocketRef.current.send(
-                  JSON.stringify({ type: "input", data: char }),
-                );
-              }
-
-              updateCurrentCommandRef.current(completedCommand);
-              clearAutosuggestion();
-            } else if (matches.length > 1) {
-              currentAutocompleteCommand.current = currentCmd;
-              setAutocompleteSuggestions(matches);
-              setAutocompleteSelectedIndex(0);
-              clearAutosuggestion();
-
-              const cursorY = terminal.buffer.active.cursorY;
-              const cursorX = terminal.buffer.active.cursorX;
-              const rect = xtermRef.current?.getBoundingClientRect();
-
-              if (rect) {
-                const cellHeight =
-                  terminal.rows > 0 ? rect.height / terminal.rows : 20;
-                const cellWidth =
-                  terminal.cols > 0 ? rect.width / terminal.cols : 10;
-
-                const itemHeight = 32;
-                const footerHeight = 32;
-                const maxMenuHeight = 240;
-                const estimatedMenuHeight = Math.min(
-                  matches.length * itemHeight + footerHeight,
-                  maxMenuHeight,
-                );
-                const cursorBottomY = rect.top + (cursorY + 1) * cellHeight;
-                const cursorTopY = rect.top + cursorY * cellHeight;
-                const spaceBelow = window.innerHeight - cursorBottomY;
-                const spaceAbove = cursorTopY;
-
-                const showAbove =
-                  spaceBelow < estimatedMenuHeight && spaceAbove > spaceBelow;
-
-                setAutocompletePosition({
-                  top: showAbove
-                    ? Math.max(0, cursorTopY - estimatedMenuHeight)
-                    : cursorBottomY,
-                  left: Math.max(0, rect.left + cursorX * cellWidth),
-                });
-              }
-
-              setShowAutocomplete(true);
-            } else {
-              clearAutosuggestion();
-              sendTabToShell();
-            }
-          }
-          return false;
-        }
-
-        return true;
-      };
-
-      terminal.attachCustomKeyEventHandler(handleCustomKey);
-    }, [hasDock, toggleDock, terminal]);
-
-    useEffect(() => {
-      if (!terminal || !hostConfig || !isVisible) return;
-      if (isConnected || isConnecting) return;
-
-      if (isReconnectingRef.current || reconnectTimeoutRef.current !== null) {
-        return;
-      }
-
-      if (shouldNotReconnectRef.current) {
-        return;
-      }
-
-      if (
-        webSocketRef.current &&
-        (webSocketRef.current.readyState === WebSocket.OPEN ||
-          webSocketRef.current.readyState === WebSocket.CONNECTING)
-      ) {
-        return;
-      }
-
-      setIsConnecting(true);
-      fitTerminal();
-      requestAnimationFrame(() => {
-        requestAnimationFrame(() => {
-          fitTerminal();
-          if (terminal.cols > 0 && terminal.rows > 0) {
-            scheduleNotify(terminal.cols, terminal.rows);
-            connectToHost(terminal.cols, terminal.rows);
-          }
-        });
-      });
-    }, [terminal, hostConfig.id, isVisible, isConnected, isConnecting]);
-
-    useEffect(() => {
-      if (!terminal || !fitAddonRef.current) return;
-
-      if (!isVisible) {
-        lastFittedSizeRef.current = null;
-        lastSentSizeRef.current = null;
-        return;
-      }
-
-      const fitTimeoutId = setTimeout(() => {
-        if (!isFittingRef.current && terminal.cols > 0 && terminal.rows > 0) {
-          performFit();
-          if (!splitScreen && !isConnecting && !disableAutoFocus) {
-            requestAnimationFrame(() => terminal.focus());
-          }
-        }
-      }, 50);
-
-      return () => clearTimeout(fitTimeoutId);
-    }, [terminal, isVisible, splitScreen, isConnecting]);
-
-    const hasConnectionError = !!connectionError;
-
-    function getImageUploadErrorMessage(error: unknown): string {
-      if (error instanceof Error && error.message) return error.message;
-      const response = (
-        error as {
-          response?: {
-            data?: { error?: string; message?: string };
-          };
-        }
-      )?.response;
-      return (
-        response?.data?.error ||
-        response?.data?.message ||
-        "Image upload failed"
-      );
-    }
-
-    async function handleImageUpload(
-      file: File,
-      source: TerminalImageUploadSource,
-    ) {
-      if (file.type && !file.type.startsWith("image/")) {
-        toast.error(t("terminal.imageChooseFile"));
-        return;
-      }
-      setIsImageUploading(true);
-      try {
-        const form = buildImageUploadFormData(
-          file,
-          hostConfig.instanceId ?? "",
-          source,
-        );
-        const response = await api.post("/image-upload", form, {
-          headers: { "Content-Type": undefined },
-        });
-        const { shellPath } = response.data as {
-          shellPath: string;
-        };
-        const pathInserted =
-          webSocketRef.current?.readyState === WebSocket.OPEN;
-        if (pathInserted) {
-          webSocketRef.current?.send(
-            JSON.stringify({
-              type: "input",
-              data: quoteTerminalImagePath(shellPath),
-            }),
-          );
-          toast.success(t("terminal.imageUploaded", { path: shellPath }));
-        } else {
-          toast.warning(
-            `Image uploaded, but the terminal was not available to paste it: ${shellPath}`,
-          );
-        }
-      } catch (error) {
-        const response = (error as { response?: { data?: { code?: string } } })
-          ?.response;
-        const code = response?.data?.code;
-        const message = getImageUploadErrorMessage(error);
-        toast.error(code ? `${message} (${code})` : message);
-      } finally {
-        setIsImageUploading(false);
-      }
-    }
-
-    async function handleClipboardImage() {
-      if (!navigator.clipboard?.read) {
-        toast.error(t("terminal.imageClipboardUnavailable"));
-        return;
-      }
-      setIsImageUploading(true);
-      try {
-        const items = await navigator.clipboard.read();
-        for (const item of items) {
-          const imageType = item.types.find((type) =>
-            type.startsWith("image/"),
-          );
-          if (!imageType) continue;
-          const blob = await item.getType(imageType);
-          let clipboardFile = new File([blob], "clipboard-image.png", {
-            type: imageType,
-          });
-          // Preserve native PNG clipboard bytes. Some browser/platform
-          // clipboard implementations decode transparent PNGs incorrectly
-          // through canvas, producing an all-black/transparent re-encode.
-          // Only rasterize formats that need conversion; Sharp validates the
-          // resulting image server-side.
-          if (
-            imageType !== "image/png" &&
-            typeof createImageBitmap === "function"
-          ) {
-            try {
-              const bitmap = await createImageBitmap(blob);
-              try {
-                const canvas = document.createElement("canvas");
-                canvas.width = bitmap.width;
-                canvas.height = bitmap.height;
-                const context = canvas.getContext("2d");
-                if (!context) throw new Error("Canvas unavailable");
-                context.drawImage(bitmap, 0, 0);
-                const png = await new Promise<Blob>((resolve, reject) => {
-                  canvas.toBlob((result) => {
-                    if (result) resolve(result);
-                    else reject(new Error("Clipboard image conversion failed"));
-                  }, "image/png");
-                });
-                clipboardFile = new File([png], "clipboard-image.png", {
-                  type: "image/png",
-                });
-              } finally {
-                bitmap.close();
-              }
-            } catch {
-              // Fall back to the original clipboard blob.
-            }
-          }
-          await handleImageUpload(clipboardFile, "clipboard");
-          return;
-        }
-        toast.error(t("terminal.imageClipboardEmpty"));
-      } catch (error) {
-        toast.error(getErrorMessage(error, "Clipboard read failed"));
-      } finally {
-        setIsImageUploading(false);
-      }
-    }
-
-    return (
-      <div
-        className="h-full w-full relative"
-        style={{
-          backgroundColor: backgroundImage ? "transparent" : backgroundColor,
-          ...(backgroundImage && {
-            backgroundImage: `url(${backgroundImage})`,
-            backgroundSize: "cover",
-            backgroundPosition: "center",
-            backgroundRepeat: "no-repeat",
-          }),
-        }}
-      >
-        {backgroundImage && (
-          <div
-            className="absolute inset-0 pointer-events-none"
-            style={{
-              backgroundColor: themeColors.background,
-              opacity: 1 - backgroundImageOpacity,
-            }}
-          />
-        )}
-        <div
-          ref={xtermRef}
-          className="h-full w-full relative"
-          style={{
-            pointerEvents: isVisible ? "auto" : "none",
-            visibility:
-              isConnected && isFitted && !connectionError
-                ? "visible"
-                : "hidden",
-          }}
-          onClick={() => {
-            if (terminal && !splitScreen) {
-              terminal.focus();
-            }
-          }}
-        />
-
-        {isConnected &&
-          host &&
-          !showToolbar &&
-          dockContributions.map((contribution, index) => {
-            const Icon = contribution.icon;
-            return (
-              <Button
-                key={contribution.actionId}
-                type="button"
-                size="icon"
-                variant="secondary"
-                onClick={() =>
-                  setDock((open) =>
-                    open?.id === contribution.actionId
-                      ? null
-                      : { id: contribution.actionId, props: {} },
-                  )
-                }
-                title={
-                  t(contribution.titleKey) +
-                  (index === 0 ? " (Ctrl+Shift+A)" : "")
-                }
-                className="absolute top-2 z-[110] size-8 bg-black/60 text-white/75 hover:bg-black/80 hover:text-white"
-                style={{ right: 8 + index * 40 }}
-              >
-                {Icon && <Icon className="size-4" />}
-              </Button>
-            );
-          })}
-
-        {host && showToolbar && (
-          <TerminalToolbar
-            host={host}
-            isConnected={isConnected}
-            isTmuxAttached={isTmuxAttached}
-            onTmuxDetach={() => {
-              if (webSocketRef.current?.readyState === WebSocket.OPEN) {
-                webSocketRef.current.send(
-                  JSON.stringify({ type: "tmux_detach" }),
-                );
-              }
-            }}
-            isImageUploading={isImageUploading}
-            onUploadImage={(file) => void handleImageUpload(file, "file")}
-            onPasteImage={() => void handleClipboardImage()}
-            isFocused={isFocusedPane}
-            slotApi={slotApi}
-            onOpenFiles={onOpenFileManager ? openFilesAtCwd : undefined}
-          />
-        )}
-
-        {dock &&
-          (() => {
-            const contribution = dockContributions.find(
-              (item) => item.actionId === dock.id,
-            );
-            const Panel = contribution?.component;
-            if (!Panel) return null;
-            return (
-              <Panel
-                host={host}
-                hostId={hostConfig.id}
-                hostLabel={`${hostConfig.username}@${hostConfig.name || hostConfig.ip}`}
-                panelProps={dock.props}
-                onClose={closeDock}
-                onRunInTerminal={handleRunCommandInTerminal}
-              />
-            );
-          })()}
-
-        {isQuickConnect &&
-          isConnected &&
-          !isQuickConnectSaved &&
-          onSaveQuickConnect && (
-            <Button
-              size="sm"
-              variant="secondary"
-              disabled={isSavingQuickConnect}
-              onClick={async () => {
-                setIsSavingQuickConnect(true);
-                try {
-                  await onSaveQuickConnect();
-                  setIsQuickConnectSaved(true);
-                } catch {
-                  // The shell reports the failure with a toast.
-                } finally {
-                  setIsSavingQuickConnect(false);
-                }
-              }}
-              className="absolute top-2 left-2 z-[110] h-7 gap-1.5 bg-black/60 text-white/80 hover:bg-black/80 hover:text-white"
-            >
-              <Save className="size-3.5" />
-              {t("hosts.addHost")}
-            </Button>
-          )}
-
-        <ConnectionScreen
-          status={
-            showDisconnectedOverlay
-              ? "disconnected"
-              : isConnecting
-                ? "connecting"
-                : hasConnectionError
-                  ? "error"
-                  : "connected"
-          }
-          message={t("terminal.connecting")}
-          backgroundColor={backgroundColor}
-          attempt={reconnectAttempts.current}
-          maxAttempts={maxReconnectAttempts}
-          disconnectedMessage={t("terminal.connectionLost")}
-          retryLabel={t("terminal.reconnect")}
-          onManualRetry={() => {
-            setShowDisconnectedOverlay(false);
-            isUnmountingRef.current = false;
-            shouldNotReconnectRef.current = false;
-            isReconnectingRef.current = false;
-            isConnectingRef.current = false;
-            reconnectAttempts.current = 0;
-            wasDisconnectedBySSH.current = false;
-            wasConnectedRef.current = false;
-            updateConnectionError(null);
-            if (terminal) {
-              terminal.clear();
-              connectToHost(terminal.cols, terminal.rows);
-            }
-          }}
-          extraActions={
-            onClose && (
-              <Button variant="outline" onClick={onClose}>
-                {t("terminal.closeTab")}
-              </Button>
-            )
-          }
-          logPosition={hasConnectionError ? "top" : "bottom"}
-        />
-
-        <TOTPDialog
-          isOpen={totpRequired}
-          prompt={totpPrompt}
-          mode={mfaPromptMode}
-          waiting={mfaWaiting}
-          onSubmit={handleTotpSubmit}
-          onCancel={handleTotpCancel}
-          backgroundColor={backgroundColor}
-        />
-
-        <SSHAuthDialog
-          isOpen={showAuthDialog}
-          reason={authDialogReason}
-          onSubmit={handleAuthDialogSubmit}
-          onCancel={handleAuthDialogCancel}
-          hostInfo={{
-            ip: hostConfig.ip,
-            port: hostConfig.port,
-            username: hostConfig.username,
-            name: hostConfig.name,
-          }}
-          backgroundColor={backgroundColor}
-        />
-
-        <PassphraseDialog
-          isOpen={showPassphraseDialog}
-          onSubmit={handlePassphraseSubmit}
-          onCancel={handlePassphraseCancel}
-          hostInfo={{
-            ip: hostConfig.ip,
-            port: hostConfig.port,
-            username: hostConfig.username,
-            name: hostConfig.name,
-          }}
-          backgroundColor={backgroundColor}
-        />
-
-        <BrowserSignInDialog
-          isOpen={browserSignIn !== null}
-          label={browserSignIn?.label ?? ""}
-          url={browserSignIn?.url ?? ""}
-          code={browserSignIn?.code ?? ""}
-          onContinue={handleBrowserSignInContinue}
-          onCancel={handleBrowserSignInCancel}
-          onOpenUrl={handleBrowserSignInOpenUrl}
-          backgroundColor={backgroundColor}
-        />
-
-        <ComponentSlot
-          slotId={TERMINAL_OVERLAY_SLOT}
-          when={{ host }}
-          props={overlayProps as unknown as Record<string, unknown>}
-        />
-
-        {hostKeyVerification?.isOpen && (
-          <HostKeyVerificationDialog
-            isOpen={true}
-            scenario={hostKeyVerification.scenario}
-            {...hostKeyVerification.data}
-            onAccept={() => {
-              if (webSocketRef.current) {
-                webSocketRef.current.send(
-                  JSON.stringify({
-                    type: "host_key_verification_response",
-                    data: { action: "accept" },
-                  }),
-                );
-              }
-              setHostKeyVerification(null);
-            }}
-            onReject={() => {
-              if (webSocketRef.current) {
-                webSocketRef.current.send(
-                  JSON.stringify({
-                    type: "host_key_verification_response",
-                    data: { action: "reject" },
-                  }),
-                );
-              }
-              setHostKeyVerification(null);
-              setIsConnecting(false);
-              updateConnectionError(t("terminal.hostKeyRejected"));
-            }}
-            backgroundColor={backgroundColor}
-          />
-        )}
-
-        {tmuxSessionPicker && (
-          <TmuxSessionPicker
-            isOpen={true}
-            sessions={tmuxSessionPicker.sessions}
-            onSelect={(sessionName) => {
-              setTmuxSessionPicker(null);
-              if (webSocketRef.current?.readyState === WebSocket.OPEN) {
-                webSocketRef.current.send(
-                  JSON.stringify({
-                    type: "tmux_attach",
-                    data: { sessionName },
-                  }),
-                );
-              }
-              setTimeout(() => terminal?.focus(), 50);
-            }}
-            onCreateNew={() => {
-              setTmuxSessionPicker(null);
-              if (webSocketRef.current?.readyState === WebSocket.OPEN) {
-                webSocketRef.current.send(
-                  JSON.stringify({
-                    type: "tmux_attach",
-                    data: { sessionName: "" },
-                  }),
-                );
-              }
-              setTimeout(() => terminal?.focus(), 50);
-            }}
-            onCancel={() => setTmuxSessionPicker(null)}
-            backgroundColor={backgroundColor}
-          />
-        )}
-
-        <CommandAutocomplete
-          visible={showAutocomplete}
-          suggestions={autocompleteSuggestions}
-          selectedIndex={autocompleteSelectedIndex}
-          position={autocompletePosition}
-          onSelect={handleAutocompleteSelect}
-        />
-        <CommandAutosuggestion
-          visible={!showAutocomplete && Boolean(autosuggestion)}
-          suggestion={autosuggestion}
-          position={autosuggestionPosition}
-          style={autosuggestionStyle}
-        />
-
-        <TerminalSearchBar
-          visible={showSearch}
-          query={searchQuery}
-          onQueryChange={handleSearchQueryChange}
-          onFindNext={() => runSearch("next")}
-          onFindPrevious={() => runSearch("previous")}
-          onClose={closeSearch}
-          caseSensitive={searchCaseSensitive}
-          onToggleCaseSensitive={toggleSearchCaseSensitive}
-          wholeWord={searchWholeWord}
-          onToggleWholeWord={toggleSearchWholeWord}
-          regex={searchRegex}
-          onToggleRegex={toggleSearchRegex}
-          resultIndex={searchResultIndex}
-          resultCount={searchResultCount}
-          inputRef={searchInputRef}
-        />
-
-        {linkClickDialog &&
-          createPortal(
-            <div
-              className="fixed inset-0 flex items-center justify-center z-[10000]"
-              style={{ backgroundColor: "rgba(0,0,0,0.5)" }}
-              onClick={() => setLinkClickDialog(null)}
-            >
-              <div
-                className="flex flex-col gap-3 p-4 rounded shadow-lg max-w-sm w-full mx-4"
-                style={{ backgroundColor }}
-                onClick={(event) => event.stopPropagation()}
-              >
-                <p className="text-xs font-bold uppercase tracking-widest text-muted-foreground">
-                  {t("terminal.linkDialogTitle")}
-                </p>
-                <p className="text-sm break-all text-foreground select-all">
-                  {linkClickDialog.url}
-                </p>
-                <div className="flex gap-2 justify-end">
-                  <Button
-                    variant="outline"
-                    size="sm"
-                    onClick={() => {
-                      writeTextToClipboard(linkClickDialog.url);
-                      setLinkClickDialog(null);
-                    }}
-                  >
-                    {t("terminal.linkDialogCopy")}
-                  </Button>
-                  <Button
-                    size="sm"
-                    onClick={() => {
-                      window.open(
-                        linkClickDialog.url,
-                        "_blank",
-                        "noopener,noreferrer",
-                      );
-                      setLinkClickDialog(null);
-                    }}
-                  >
-                    {t("terminal.linkDialogOpen")}
-                  </Button>
-                  <Button
-                    variant="outline"
-                    size="sm"
-                    onClick={() => setLinkClickDialog(null)}
-                  >
-                    {t("common.cancel")}
-                  </Button>
-                </div>
-              </div>
-            </div>,
-            document.body,
-          )}
-      </div>
-    );
-  },
-);
-
-export const Terminal = forwardRef<TerminalHandle, SSHTerminalProps>(
-  function Terminal(props, ref) {
-    return (
-      <ConnectionLogProvider>
-        <TerminalInner {...props} ref={ref} />
-      </ConnectionLogProvider>
-    );
-  },
-);
diff --git a/plugins/ssh-terminal/src/frontend/terminal/TerminalApp.tsx b/plugins/ssh-terminal/src/frontend/terminal/TerminalApp.tsx
deleted file mode 100644
index 1555ec6fb..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/TerminalApp.tsx
+++ /dev/null
@@ -1,63 +0,0 @@
-import React from "react";
-import { Terminal } from "./Terminal";
-import { FullScreenAppWrapper, ConnectionScreen } from "@termix/plugin-sdk/ui";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-interface TerminalAppProps {
-  hostId?: string;
-  /** tmux session to attach to once the shell is ready (tmux monitor "Attach"). */
-  tmuxSession?: string;
-}
-
-// Only the session name travels in the URL (never a raw command), so a crafted
-// link cannot execute arbitrary input. `=` forces exact-name matching in tmux.
-function tmuxAttachCommand(session: string): string {
-  return `tmux attach-session -t '=${session.replace(/'/g, "'\\''")}'`;
-}
-
-const TerminalApp: React.FC<TerminalAppProps> = ({ hostId, tmuxSession }) => {
-  const { t } = useTranslation();
-  return (
-    <FullScreenAppWrapper hostId={hostId}>
-      {(hostConfig, phase) => {
-        if (phase === "loading") {
-          return (
-            <div className="relative h-full w-full">
-              <ConnectionScreen
-                status="connecting"
-                message={t("hosts.loadingHost")}
-              />
-            </div>
-          );
-        }
-
-        if (!hostConfig) {
-          return (
-            <div className="relative h-full w-full">
-              <ConnectionScreen
-                status="disconnected"
-                message={t("hosts.hostNotFound")}
-              />
-            </div>
-          );
-        }
-
-        return (
-          <Terminal
-            hostConfig={hostConfig}
-            isVisible={true}
-            title={hostConfig.name || `${hostConfig.username}@${hostConfig.ip}`}
-            showTitle={false}
-            splitScreen={false}
-            onClose={() => {}}
-            executeCommand={
-              tmuxSession ? tmuxAttachCommand(tmuxSession) : undefined
-            }
-          />
-        );
-      }}
-    </FullScreenAppWrapper>
-  );
-};
-
-export default TerminalApp;
diff --git a/plugins/ssh-terminal/src/frontend/terminal/TerminalTabContent.tsx b/plugins/ssh-terminal/src/frontend/terminal/TerminalTabContent.tsx
deleted file mode 100644
index 33bc7c2c7..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/TerminalTabContent.tsx
+++ /dev/null
@@ -1,142 +0,0 @@
-import { lazy, Suspense } from "react";
-import { useThemePreview } from "../look/theme-preview";
-import { TerminalSquare } from "lucide-react";
-import type { TerminalHandle, TerminalHostConfig } from "./Terminal";
-import { useIsMobile } from "@termix/plugin-sdk/ui";
-import {
-  useTranslation,
-  invokeAction,
-  type TabProps,
-} from "@termix/plugin-sdk/frontend";
-import type { Host } from "../types";
-import { hostTerminalValues } from "../terminal-settings";
-import { readHostTerminalSettings } from "../../shared/terminal-settings";
-
-/** The session fields the shell keeps on a terminal tab. */
-interface TerminalTabRecord {
-  id: string;
-  instanceId?: string;
-  restoredSessionId?: string | null;
-  joinSharedSessionId?: string | null;
-  joinShareId?: string | null;
-  initialFilePath?: string;
-  data?: {
-    initialPath?: string;
-    joinSharedSessionId?: string | null;
-    joinShareId?: string | null;
-  };
-}
-
-const CommandHistoryProvider = lazy(() =>
-  import("./command-history/CommandHistoryContext").then((m) => ({
-    default: m.CommandHistoryProvider,
-  })),
-);
-export const loadTerminal = () =>
-  import("./Terminal").then((m) => ({ default: m.Terminal }));
-const TerminalFeature = lazy(loadTerminal);
-const MobileTerminalKeyboard = lazy(() =>
-  import("./MobileTerminalKeyboard").then((m) => ({
-    default: m.MobileTerminalKeyboard,
-  })),
-);
-
-function TabChunkFallback() {
-  return (
-    <div className="flex h-full w-full items-center justify-center bg-background">
-      <div className="size-5 rounded-full border-2 border-muted-foreground/30 border-t-muted-foreground/70 animate-spin" />
-    </div>
-  );
-}
-
-/** The SSH terminal as a tab. */
-export function TerminalTabContent({
-  tab: tabRecord,
-  host: hostRecord,
-  sshHost,
-  label,
-  isVisible,
-  isFocusedPane,
-  inSplit = false,
-  handleRef,
-  shell,
-}: TabProps) {
-  const tab = tabRecord as unknown as TerminalTabRecord;
-  const host = hostRecord as unknown as Host | undefined;
-  const { t } = useTranslation();
-  const previewTerminalTheme = useThemePreview();
-  const isMobile = useIsMobile();
-  const useSshTitle = readHostTerminalSettings(
-    hostTerminalValues(host),
-  ).useSSHTitle;
-
-  if (!host) {
-    return (
-      <div className="flex flex-col items-center justify-center flex-1 gap-3 p-6 text-center">
-        <TerminalSquare className="size-5 text-muted-foreground/30" />
-        <span className="text-sm font-semibold text-muted-foreground/60">
-          {t("terminal.noHostSelected")}
-        </span>
-      </div>
-    );
-  }
-
-  return (
-    <Suspense fallback={<TabChunkFallback />}>
-      <CommandHistoryProvider>
-        <div className="flex flex-col h-full w-full">
-          <div className="flex-1 min-h-0">
-            <TerminalFeature
-              ref={handleRef as React.Ref<TerminalHandle>}
-              hostConfig={
-                {
-                  ...sshHost,
-                  sshPort: host.sshPort ?? host.port,
-                  instanceId: tab.instanceId ?? tab.id,
-                  restoredSessionId: tab.restoredSessionId ?? null,
-                  joinSharedSessionId:
-                    tab.data?.joinSharedSessionId ??
-                    tab.joinSharedSessionId ??
-                    null,
-                  joinShareId: tab.data?.joinShareId ?? tab.joinShareId ?? null,
-                } as unknown as TerminalHostConfig
-              }
-              isVisible={isVisible}
-              initialPath={tab.data?.initialPath ?? tab.initialFilePath}
-              title={label}
-              showTitle={false}
-              splitScreen={inSplit}
-              onClose={() => shell.closeTab(tab.id)}
-              onTitleChange={
-                useSshTitle
-                  ? (title) => shell.renameTab(tab.id, title)
-                  : undefined
-              }
-              previewTheme={previewTerminalTheme}
-              onOpenFileInEditor={(filePath) =>
-                void invokeAction("files.openEditor", host, filePath)
-              }
-              onOpenFileManager={(path) =>
-                void invokeAction("files.openHost", host, path)
-              }
-              isQuickConnect={String(host.id).startsWith("quick-connect-")}
-              onSaveQuickConnect={
-                shell.saveQuickConnect && hostRecord?.quickConnectSavable
-                  ? () => shell.saveQuickConnect!(tabRecord, hostRecord!)
-                  : undefined
-              }
-              host={host}
-              onOpenTab={(type) => shell.openTab(hostRecord!, type)}
-              isFocusedPane={isFocusedPane}
-            />
-          </div>
-          {isMobile && (
-            <MobileTerminalKeyboard
-              terminalRef={handleRef as React.RefObject<TerminalHandle | null>}
-            />
-          )}
-        </div>
-      </CommandHistoryProvider>
-    </Suspense>
-  );
-}
diff --git a/plugins/ssh-terminal/src/frontend/terminal/TerminalToolbar.tsx b/plugins/ssh-terminal/src/frontend/terminal/TerminalToolbar.tsx
deleted file mode 100644
index 94bfa7e6d..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/TerminalToolbar.tsx
+++ /dev/null
@@ -1,807 +0,0 @@
-import React, {
-  useEffect,
-  useId,
-  useLayoutEffect,
-  useMemo,
-  useRef,
-  useState,
-} from "react";
-import {
-  ChevronDown,
-  ClipboardPaste,
-  GripVertical,
-  ImagePlus,
-  LayoutGrid,
-  LogOut,
-  Maximize2,
-  Minimize2,
-  X,
-} from "lucide-react";
-
-import {
-  TERMINAL_TOOLBAR_SLOT,
-  TERMINAL_TOOLBAR_STATUS_SLOT,
-  type TerminalSlotApi,
-} from "./terminal-slots";
-import type { Host } from "../types";
-import {
-  clampToolbarPosition,
-  getResponsiveToolbarDensity,
-  persistToolbarPosition,
-  readStoredToolbarPosition,
-  type ToolbarPosition,
-  type ToolbarDensity,
-} from "./toolbar-geometry";
-import {
-  isLeftAnchor,
-  readToolbarSettings,
-  toolbarAnchorClasses,
-} from "./toolbar-settings";
-import {
-  Select,
-  SelectContent,
-  SelectItem,
-  SelectTrigger,
-  cn,
-  ActionSlot,
-  ComponentSlot,
-  useIsMobile,
-} from "@termix/plugin-sdk/ui";
-import {
-  usePluginUiPreferences,
-  useHostActions,
-  useTabs,
-  useTranslation,
-  useSlotContributions,
-  type PluginHostRecord,
-  type ShellApi,
-} from "@termix/plugin-sdk/frontend";
-type SelectedToolbarDensity = ToolbarDensity;
-
-/** Plugins contribute toolbar buttons here. Declared by the ssh-terminal plugin. */
-const TOOLBAR_SLOT_ID = TERMINAL_TOOLBAR_SLOT;
-
-const DENSITY_OPTIONS: { value: ToolbarDensity }[] = [
-  { value: "icon" },
-  { value: "labeled" },
-  { value: "expanded" },
-];
-const DENSITIES = DENSITY_OPTIONS.map((option) => option.value);
-
-const LEGACY_DENSITY_KEY = "termix-terminal-toolbar-density";
-
-function asDensity(value: unknown): ToolbarDensity {
-  return DENSITIES.includes(value as ToolbarDensity)
-    ? (value as ToolbarDensity)
-    : "labeled";
-}
-
-const CONTROL =
-  "inline-flex min-h-8 min-w-8 items-center justify-center gap-1.5 rounded-sm px-2 text-xs font-medium text-muted-foreground transition-colors hover:bg-muted hover:text-foreground active:translate-y-px active:bg-muted/80 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 focus-visible:ring-offset-background disabled:pointer-events-none disabled:opacity-40 data-[state=open]:bg-muted data-[state=open]:text-foreground";
-const SEPARATOR = "mx-0.5 h-5 w-px shrink-0 bg-border";
-
-interface TerminalToolbarProps {
-  host: Host;
-  terminalIdentity?: string;
-  isConnected: boolean;
-  isTmuxAttached: boolean;
-  onTmuxDetach: () => void;
-  isImageUploading: boolean;
-  onUploadImage: (file: File) => void | Promise<void>;
-  onPasteImage: () => void | Promise<void>;
-  isFocused: boolean;
-  /** Opens the file manager at the shell's working directory. */
-  onOpenFiles?: () => void;
-  /** Hides every contributed action, e.g. while the toolbar is measuring. */
-  actionsEnabled?: boolean;
-  /** Handed to contributed actions when they are invoked. */
-  slotApi?: TerminalSlotApi;
-}
-
-export const TerminalToolbar: React.FC<TerminalToolbarProps> = ({
-  host,
-  terminalIdentity,
-  isConnected,
-  isTmuxAttached,
-  onTmuxDetach,
-  isImageUploading,
-  onUploadImage,
-  onPasteImage,
-  isFocused,
-  actionsEnabled = true,
-  slotApi,
-  onOpenFiles,
-}) => {
-  const { t } = useTranslation();
-  // Drives both the measurement copy and the separator, so the toolbar sizes
-  // itself correctly whether or not anything contributed.
-  const allSlotContributions = useSlotContributions(TOOLBAR_SLOT_ID, { host });
-  const statusContributions = useSlotContributions(
-    TERMINAL_TOOLBAR_STATUS_SLOT,
-    { host },
-  );
-  const slotContributions = useMemo(
-    () =>
-      allSlotContributions.filter(
-        (contribution) => contribution.kind !== "component",
-      ),
-    [allSlotContributions],
-  );
-  // Quick links to the other tools a plugin offers for this host (tmux
-  // monitor, docker, tunnels, host metrics), from their host actions.
-  const hostActions = useHostActions();
-  const tabs = useTabs();
-  const hostLinks = useMemo(() => {
-    const record = host as unknown as PluginHostRecord;
-    return hostActions.filter(
-      (action) =>
-        action.kind === "open" &&
-        !action.items &&
-        (action.run || action.tabType) &&
-        action.when(record),
-    );
-  }, [hostActions, host]);
-  const openHostLink = (action: (typeof hostLinks)[number]) => {
-    const record = host as unknown as PluginHostRecord;
-    // The file manager opens where the shell is, as in 2.8.
-    if (action.tabType === "files" && onOpenFiles) onOpenFiles();
-    else if (action.run) action.run(record, tabs as unknown as ShellApi);
-    else if (action.tabType) tabs.openTab(record, action.tabType);
-  };
-  const settings = useMemo(() => readToolbarSettings(host), [host]);
-  const { anchor } = settings;
-  const rememberDensity = settings.density === null;
-  // The remembered density is this plugin's UI preference, so an interface
-  // preset sets it too.
-  const { values: uiPrefs, set: setUiPref } = usePluginUiPreferences<{
-    toolbarDensity: ToolbarDensity;
-  }>();
-  const preferredDensity = asDensity(uiPrefs.toolbarDensity);
-  useEffect(() => {
-    // Before 2.9 the density lived in this browser's localStorage.
-    try {
-      const legacy = window.localStorage.getItem(LEGACY_DENSITY_KEY);
-      if (legacy === null) return;
-      window.localStorage.removeItem(LEGACY_DENSITY_KEY);
-      if (DENSITIES.includes(legacy as ToolbarDensity)) {
-        setUiPref("toolbarDensity", legacy as ToolbarDensity);
-      }
-    } catch {
-      // Storage can be unavailable in hardened browser contexts.
-    }
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, []);
-  const [density, setDensity] = useState<SelectedToolbarDensity>(
-    () => settings.density ?? preferredDensity,
-  );
-  const [responsiveDensity, setResponsiveDensity] =
-    useState<SelectedToolbarDensity>(() => density);
-  const [position, setPosition] = useState<ToolbarPosition>(() =>
-    readStoredToolbarPosition(anchor),
-  );
-  const positionRef = useRef(position);
-  const [collapsed, setCollapsed] = useState(settings.startCollapsed);
-  const [densityOpen, setDensityOpen] = useState(false);
-  const [imageError, setImageError] = useState<string | null>(null);
-  const [retryImageAction, setRetryImageAction] = useState<(() => void) | null>(
-    null,
-  );
-  const fileInputRef = useRef<HTMLInputElement>(null);
-  const hideToolbarRef = useRef<HTMLButtonElement>(null);
-  const pendingExpansionFocusRef = useRef(false);
-  // Keeps the anchored edge still when the toolbar grows or shrinks.
-  const pendingEdgeRef = useRef<number | null>(null);
-  const mountedRef = useRef(false);
-  const imageGenerationRef = useRef(0);
-  const hostRef = useRef<HTMLDivElement>(null);
-  const toolbarRef = useRef<HTMLDivElement>(null);
-  const measurementRef = useRef<HTMLDivElement>(null);
-  const dragRef = useRef<{
-    pointerId: number;
-    startX: number;
-    startY: number;
-    basePosition: ToolbarPosition;
-  } | null>(null);
-  const capturedPointerIdRef = useRef<number | null>(null);
-  const dragMovedRef = useRef(false);
-  const densityId = useId();
-  const [desktopViewportReady, setDesktopViewportReady] = useState<boolean>();
-  const hostIdentity = terminalIdentity ?? `${host.id ?? "unknown"}`;
-  positionRef.current = position;
-  const effectiveDensity: ToolbarDensity = isFocused
-    ? responsiveDensity
-    : "icon";
-  const showStats =
-    settings.showStatus &&
-    effectiveDensity === "expanded" &&
-    statusContributions.length > 0;
-  const isMobile = useIsMobile();
-
-  useLayoutEffect(() => {
-    setDesktopViewportReady(
-      typeof window !== "undefined" && window.innerWidth >= 768,
-    );
-  }, []);
-
-  useEffect(() => {
-    if (isMobile === false) setDesktopViewportReady(true);
-  }, [isMobile]);
-
-  useEffect(() => {
-    if (settings.density) setDensity(settings.density);
-  }, [settings.density]);
-
-  useEffect(() => {
-    const next = readStoredToolbarPosition(anchor);
-    positionRef.current = next;
-    setPosition(next);
-  }, [anchor]);
-
-  // A preset (or another tab) changing the saved density applies here too.
-  useEffect(() => {
-    if (!rememberDensity) return;
-    if (desktopViewportReady !== true || isMobile !== false) return;
-    setDensity(preferredDensity);
-  }, [preferredDensity, desktopViewportReady, isMobile, rememberDensity]);
-  useEffect(() => {
-    if (desktopViewportReady !== true || isMobile !== false) return;
-    const measurement = measurementRef.current;
-    const host = hostRef.current;
-    if (!measurement || !host) return;
-    let frameId: number | null = null;
-    let remeasurements = 0;
-    const measure = () => {
-      frameId = null;
-      const available = host.getBoundingClientRect().width;
-      const required = measurement.getBoundingClientRect().width;
-      if (available > 0 && required > 0) {
-        setResponsiveDensity((current) =>
-          getResponsiveToolbarDensity(density, current, available, required),
-        );
-        remeasurements = 0;
-      } else if (remeasurements < 2) {
-        remeasurements += 1;
-        frameId = window.requestAnimationFrame(measure);
-      }
-    };
-    const schedule = () => {
-      if (frameId == null) frameId = window.requestAnimationFrame(measure);
-    };
-    schedule();
-    const observer =
-      typeof ResizeObserver === "undefined"
-        ? null
-        : new ResizeObserver(schedule);
-    observer?.observe(host);
-    observer?.observe(measurement);
-    return () => {
-      if (frameId != null) window.cancelAnimationFrame(frameId);
-      observer?.disconnect();
-    };
-  }, [
-    density,
-    desktopViewportReady,
-    isConnected,
-    isMobile,
-    isTmuxAttached,
-    actionsEnabled,
-    slotContributions,
-    hostLinks,
-    t,
-  ]);
-
-  useEffect(() => {
-    mountedRef.current = true;
-    return () => {
-      mountedRef.current = false;
-      imageGenerationRef.current += 1;
-      dragRef.current = null;
-      capturedPointerIdRef.current = null;
-    };
-  }, []);
-
-  useLayoutEffect(() => {
-    if (desktopViewportReady !== true || isMobile !== false) return;
-    const toolbar = toolbarRef.current;
-    const host = hostRef.current;
-    if (!toolbar || !host || dragRef.current) return;
-    const hostRect = host.getBoundingClientRect();
-    const toolbarRect = toolbar.getBoundingClientRect();
-    const extremeOffset =
-      hostRect.width > 0 &&
-      hostRect.height > 0 &&
-      Math.max(
-        Math.abs(positionRef.current.x),
-        Math.abs(positionRef.current.y),
-      ) >
-        Math.max(hostRect.width, hostRect.height) * 4;
-    if (extremeOffset) {
-      positionRef.current = { x: 0, y: 0 };
-      setPosition({ x: 0, y: 0 });
-      persistToolbarPosition({ x: 0, y: 0 }, anchor);
-      return;
-    }
-    if (toolbarRect.width > 0 && toolbarRect.height > 0) {
-      const pendingEdge = pendingEdgeRef.current;
-      pendingEdgeRef.current = null;
-      const baseEdge =
-        (isLeftAnchor(anchor) ? toolbarRect.left : toolbarRect.right) -
-        positionRef.current.x;
-      const next = clampToolbarPosition(
-        {
-          x:
-            pendingEdge == null
-              ? positionRef.current.x
-              : pendingEdge - baseEdge,
-          y: positionRef.current.y,
-        },
-        toolbarRect,
-        hostRect,
-        positionRef.current,
-      );
-      if (
-        next.x !== positionRef.current.x ||
-        next.y !== positionRef.current.y
-      ) {
-        positionRef.current = next;
-        setPosition(next);
-        persistToolbarPosition(next, anchor);
-      }
-    }
-    if (!collapsed && pendingExpansionFocusRef.current) {
-      pendingExpansionFocusRef.current = false;
-      hideToolbarRef.current?.focus();
-    }
-  }, [
-    anchor,
-    collapsed,
-    density,
-    desktopViewportReady,
-    effectiveDensity,
-    isConnected,
-    isMobile,
-    isTmuxAttached,
-    responsiveDensity,
-  ]);
-
-  useEffect(() => {
-    imageGenerationRef.current += 1;
-    setImageError(null);
-    setRetryImageAction(null);
-  }, [isConnected, hostIdentity]);
-
-  useEffect(() => {
-    if (collapsed || !pendingExpansionFocusRef.current) return;
-    pendingExpansionFocusRef.current = false;
-    hideToolbarRef.current?.focus();
-  }, [collapsed]);
-
-  if (!isConnected || desktopViewportReady !== true || isMobile !== false)
-    return null;
-
-  const setAndStoreDensity = (next: ToolbarDensity) => {
-    setDensity(next);
-    if (rememberDensity) setUiPref("toolbarDensity", next);
-  };
-  const reportImageResult = (
-    action: () => void | Promise<void>,
-    retry: () => void,
-  ) => {
-    const generation = ++imageGenerationRef.current;
-    let result: void | Promise<void>;
-    try {
-      result = action();
-    } catch (error) {
-      result = Promise.reject(error);
-    }
-    void Promise.resolve(result).then(
-      () => {
-        if (!mountedRef.current || generation !== imageGenerationRef.current)
-          return;
-        setImageError(null);
-        setRetryImageAction(null);
-      },
-      (error: unknown) => {
-        if (!mountedRef.current || generation !== imageGenerationRef.current)
-          return;
-        setImageError(
-          error instanceof Error
-            ? error.message
-            : t("terminalToolbar.imageActionFailed"),
-        );
-        setRetryImageAction(() => retry);
-      },
-    );
-  };
-  const uploadFile = (file: File) => {
-    setImageError(null);
-    reportImageResult(
-      () => onUploadImage(file),
-      () => uploadFile(file),
-    );
-  };
-  const pasteImage = () => {
-    setImageError(null);
-    // Invoke clipboard access in this click's user-activation call chain.
-    reportImageResult(onPasteImage, pasteImage);
-  };
-  const chooseFile = () => fileInputRef.current?.click();
-  const anchoredEdge = () => {
-    const rect = toolbarRef.current?.getBoundingClientRect();
-    if (!rect) return null;
-    return isLeftAnchor(anchor) ? rect.left : rect.right;
-  };
-  const handleGrabPointerDown = (
-    event: React.PointerEvent<HTMLButtonElement>,
-  ) => {
-    if (event.button !== 0 || event.pointerType === "touch") return;
-    event.currentTarget.setPointerCapture?.(event.pointerId);
-    capturedPointerIdRef.current = event.pointerId;
-    dragMovedRef.current = false;
-    dragRef.current = {
-      pointerId: event.pointerId,
-      startX: event.clientX,
-      startY: event.clientY,
-      basePosition: positionRef.current,
-    };
-  };
-  const handleGrabPointerMove = (
-    event: React.PointerEvent<HTMLButtonElement>,
-  ) => {
-    const drag = dragRef.current;
-    if (!drag || drag.pointerId !== event.pointerId) return;
-    const deltaX = event.clientX - drag.startX;
-    const deltaY = event.clientY - drag.startY;
-    const toolbar = toolbarRef.current;
-    const host = hostRef.current;
-    if (!toolbar || !host) return;
-    const next = clampToolbarPosition(
-      {
-        x: drag.basePosition.x + deltaX,
-        y: drag.basePosition.y + deltaY,
-      },
-      toolbar.getBoundingClientRect(),
-      host.getBoundingClientRect(),
-      positionRef.current,
-    );
-    if (event.clientX !== drag.startX || event.clientY !== drag.startY) {
-      dragMovedRef.current = true;
-    }
-    positionRef.current = next;
-    setPosition(next);
-  };
-  const handleGrabPointerEnd = (
-    event: React.PointerEvent<HTMLButtonElement>,
-  ) => {
-    const drag = dragRef.current;
-    if (!drag || drag.pointerId !== event.pointerId) return;
-    persistToolbarPosition(positionRef.current, anchor);
-    dragRef.current = null;
-    if (capturedPointerIdRef.current === event.pointerId) {
-      capturedPointerIdRef.current = null;
-      if (event.type !== "lostpointercapture") {
-        try {
-          event.currentTarget.releasePointerCapture?.(event.pointerId);
-        } catch {
-          // The browser may have already released capture for this pointer.
-        }
-      }
-    }
-  };
-  const densityLabels: Record<ToolbarDensity, string> = {
-    icon: t("terminalToolbar.layoutIcon"),
-    labeled: t("terminalToolbar.layoutLabeled"),
-    expanded: t("terminalToolbar.layoutExpanded"),
-  };
-
-  const densitySelect = (
-    <Select
-      value={density}
-      open={densityOpen}
-      onOpenChange={setDensityOpen}
-      onValueChange={(value) => setAndStoreDensity(value as ToolbarDensity)}
-    >
-      <SelectTrigger
-        id={densityId}
-        size="sm"
-        aria-label={t("terminalToolbar.layout")}
-        title={t("terminalToolbar.layout")}
-        className={cn(
-          CONTROL,
-          "h-8 border-0 bg-transparent px-2 shadow-none dark:bg-transparent dark:hover:bg-muted",
-        )}
-      >
-        <LayoutGrid className="size-4 shrink-0" />
-      </SelectTrigger>
-      <SelectContent>
-        {DENSITY_OPTIONS.map((option) => (
-          <SelectItem key={option.value} value={option.value}>
-            {densityLabels[option.value]}
-          </SelectItem>
-        ))}
-      </SelectContent>
-    </Select>
-  );
-
-  const imageButtons = (
-    <>
-      <button
-        type="button"
-        className={CONTROL}
-        aria-label={t("terminalToolbar.uploadImage")}
-        title={t("terminalToolbar.uploadImage")}
-        disabled={isImageUploading}
-        onClick={chooseFile}
-      >
-        <ImagePlus className="size-4 shrink-0" />
-        {effectiveDensity !== "icon" && t("terminalToolbar.upload")}
-      </button>
-      <button
-        type="button"
-        className={CONTROL}
-        aria-label={t("terminalToolbar.pasteImage")}
-        title={t("terminalToolbar.pasteImage")}
-        disabled={isImageUploading}
-        onClick={pasteImage}
-      >
-        <ClipboardPaste className="size-4 shrink-0" />
-        {effectiveDensity !== "icon" && t("terminalToolbar.paste")}
-      </button>
-    </>
-  );
-  const expandButton = (
-    <button
-      type="button"
-      className={CONTROL}
-      aria-label={t("terminalToolbar.showToolbar")}
-      title={t("terminalToolbar.showToolbar")}
-      onClick={() => {
-        pendingEdgeRef.current = anchoredEdge();
-        pendingExpansionFocusRef.current = true;
-        setCollapsed(false);
-      }}
-    >
-      <Maximize2 className="size-4" />
-      <span className="sr-only">{t("terminalToolbar.showToolbar")}</span>
-    </button>
-  );
-  const grabButton = () => (
-    <button
-      type="button"
-      className={cn(CONTROL, "cursor-grab active:cursor-grabbing")}
-      aria-label={t("terminalToolbar.moveToolbar")}
-      title={t("terminalToolbar.moveToolbarHint")}
-      onPointerDown={handleGrabPointerDown}
-      onPointerMove={handleGrabPointerMove}
-      onPointerUp={handleGrabPointerEnd}
-      onPointerCancel={handleGrabPointerEnd}
-      onLostPointerCapture={handleGrabPointerEnd}
-    >
-      <GripVertical className="size-4" />
-    </button>
-  );
-
-  return (
-    <>
-      <div
-        ref={hostRef}
-        data-terminal-toolbar-host
-        data-anchor={anchor}
-        className={cn(
-          "pointer-events-none @container absolute inset-0 z-[110] flex",
-          toolbarAnchorClasses(anchor),
-        )}
-      >
-        <input
-          ref={fileInputRef}
-          type="file"
-          accept="image/*"
-          className="sr-only"
-          tabIndex={-1}
-          disabled={isImageUploading}
-          aria-hidden="true"
-          onChange={(event) => {
-            const file = event.target.files?.[0];
-            event.target.value = "";
-            if (file) uploadFile(file);
-          }}
-        />
-        <span role="status" aria-live="polite" className="sr-only">
-          {isImageUploading ? t("terminalToolbar.uploadingImage") : ""}
-        </span>
-        {imageError && (
-          <div
-            role="alert"
-            className="pointer-events-auto absolute bottom-full mb-2 flex min-h-11 max-w-sm items-center gap-2 rounded-sm border border-destructive bg-background p-2 text-xs text-destructive shadow-lg"
-          >
-            <span>{imageError}</span>
-            {retryImageAction && (
-              <button
-                type="button"
-                className={cn(CONTROL, "text-foreground")}
-                title={t("terminalToolbar.retry")}
-                disabled={isImageUploading}
-                onClick={retryImageAction}
-              >
-                {t("terminalToolbar.retry")}
-              </button>
-            )}
-            <button
-              type="button"
-              className={cn(CONTROL, "px-2")}
-              aria-label={t("terminalToolbar.dismissError")}
-              title={t("terminalToolbar.dismissError")}
-              onClick={() => {
-                setImageError(null);
-                setRetryImageAction(null);
-              }}
-            >
-              <X className="size-4" />
-            </button>
-          </div>
-        )}
-
-        <div
-          ref={measurementRef}
-          aria-hidden="true"
-          className="pointer-events-none invisible absolute left-0 top-0 flex whitespace-nowrap"
-        >
-          {isTmuxAttached && (
-            <span className={CONTROL}>
-              <LogOut className="size-4" />
-              {density !== "icon" && t("terminalToolbar.detachTmux")}
-            </span>
-          )}
-          <span className={CONTROL}>
-            <ImagePlus className="size-4" />
-            {density !== "icon" && t("terminalToolbar.upload")}
-          </span>
-          <span className={CONTROL}>
-            <ClipboardPaste className="size-4" />
-            {density !== "icon" && t("terminalToolbar.paste")}
-          </span>
-          {actionsEnabled &&
-            slotContributions.map((contribution) => (
-              <span key={contribution.actionId} className={CONTROL}>
-                {contribution.icon && <contribution.icon className="size-4" />}
-                {density !== "icon" && t(contribution.titleKey)}
-              </span>
-            ))}
-          {actionsEnabled &&
-            hostLinks.map((action) => (
-              <span key={action.id} className={CONTROL}>
-                <action.icon className="size-4" />
-                {density !== "icon" && t(action.titleKey)}
-              </span>
-            ))}
-          <span className={cn(CONTROL, "h-8 px-2")}>
-            <LayoutGrid className="size-4" />
-            <ChevronDown className="size-4" />
-          </span>
-          <span className={CONTROL}>
-            <Minimize2 className="size-4" />
-          </span>
-          <span className={CONTROL}>
-            <GripVertical className="size-4" />
-          </span>
-        </div>
-        <div
-          ref={toolbarRef}
-          data-terminal-toolbar-wide
-          className={cn(
-            "pointer-events-auto transition-opacity duration-300 hover:duration-0 focus-within:duration-0 hover:opacity-100 focus-within:opacity-100",
-            collapsed || densityOpen || !settings.fadeWhenIdle
-              ? "opacity-100"
-              : "opacity-30",
-          )}
-          style={{
-            transform: `translate(${position.x}px, ${position.y}px)`,
-          }}
-        >
-          {collapsed ? (
-            <div
-              data-toolbar-collapsed
-              className="relative flex rounded-sm border border-border bg-background/90 p-0.5 shadow-lg backdrop-blur-sm"
-            >
-              {expandButton}
-              {grabButton()}
-            </div>
-          ) : (
-            <div className="flex flex-col overflow-hidden rounded-sm border border-border bg-background/90 shadow-lg backdrop-blur-sm">
-              {showStats && (
-                <div className="flex flex-wrap items-center justify-center gap-x-1 border-b border-border px-1.5 py-0.5">
-                  <ComponentSlot
-                    slotId={TERMINAL_TOOLBAR_STATUS_SLOT}
-                    when={{ host }}
-                    props={{
-                      host,
-                      isConnected,
-                      active:
-                        isConnected &&
-                        desktopViewportReady === true &&
-                        isMobile === false,
-                    }}
-                  />
-                </div>
-              )}
-              <div className={cn("flex gap-0.5 p-0.5", "items-center")}>
-                {isTmuxAttached && (
-                  <button
-                    type="button"
-                    className={CONTROL}
-                    aria-label={t("terminalToolbar.detachTmuxDescription")}
-                    title={t("terminalToolbar.detachTmuxDescription")}
-                    onClick={onTmuxDetach}
-                  >
-                    <LogOut className="size-4" />
-                    {effectiveDensity !== "icon" &&
-                      t("terminalToolbar.detachTmux")}
-                  </button>
-                )}
-                {isTmuxAttached && <div className={SEPARATOR} />}
-                <div
-                  role="group"
-                  aria-label={t("terminalToolbar.image")}
-                  className="flex items-center gap-0.5"
-                >
-                  {imageButtons}
-                </div>
-                {actionsEnabled && slotContributions.length > 0 && (
-                  <>
-                    <div className={SEPARATOR} />
-                    <ActionSlot
-                      slotId={TOOLBAR_SLOT_ID}
-                      className={CONTROL}
-                      enabled={actionsEnabled}
-                      hideLabels={effectiveDensity === "icon"}
-                      when={{ host }}
-                      context={() => [slotApi]}
-                    />
-                  </>
-                )}
-                {actionsEnabled && hostLinks.length > 0 && (
-                  <>
-                    <div className={SEPARATOR} />
-                    {hostLinks.map((action) => (
-                      <button
-                        key={action.id}
-                        type="button"
-                        className={CONTROL}
-                        aria-label={t(action.titleKey)}
-                        title={t(action.titleKey)}
-                        onClick={() => openHostLink(action)}
-                      >
-                        <action.icon className="size-4" />
-                        {effectiveDensity !== "icon" && t(action.titleKey)}
-                      </button>
-                    ))}
-                  </>
-                )}
-                <div className={SEPARATOR} />
-                {densitySelect}
-                <button
-                  ref={hideToolbarRef}
-                  type="button"
-                  className={CONTROL}
-                  aria-label={t("terminalToolbar.hideToolbar")}
-                  title={t("terminalToolbar.hideToolbar")}
-                  onClick={() => {
-                    pendingEdgeRef.current = anchoredEdge();
-                    setCollapsed(true);
-                  }}
-                >
-                  <Minimize2 className="size-4" />
-                  <span className="sr-only">
-                    {t("terminalToolbar.hideToolbar")}
-                  </span>
-                </button>
-                <div className={SEPARATOR} />
-                {grabButton()}
-              </div>
-            </div>
-          )}
-        </div>
-      </div>
-    </>
-  );
-};
diff --git a/plugins/ssh-terminal/src/frontend/terminal/TmuxSessionPicker.tsx b/plugins/ssh-terminal/src/frontend/terminal/TmuxSessionPicker.tsx
deleted file mode 100644
index 95666f326..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/TmuxSessionPicker.tsx
+++ /dev/null
@@ -1,129 +0,0 @@
-import React from "react";
-import { Terminal, Monitor, Users, Clock } from "lucide-react";
-import { Button } from "@termix/plugin-sdk/ui";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-interface TmuxSessionInfo {
-  name: string;
-  created: number;
-  lastActivity: number;
-  windows: number;
-  attachedClients: number;
-}
-
-interface TmuxSessionPickerProps {
-  isOpen: boolean;
-  sessions: TmuxSessionInfo[];
-  onSelect: (sessionName: string) => void;
-  onCreateNew: () => void;
-  onCancel: () => void;
-  backgroundColor?: string;
-}
-
-function formatTimestamp(
-  unix: number,
-  t: (key: string, opts?: Record<string, unknown>) => string,
-): string {
-  if (!unix) return "---";
-  const date = new Date(unix * 1000);
-  const now = new Date();
-  const diffMs = now.getTime() - date.getTime();
-  const diffMin = Math.floor(diffMs / 60000);
-  const diffHr = Math.floor(diffMin / 60);
-  const diffDays = Math.floor(diffHr / 24);
-
-  if (diffMin < 1) return t("terminal.tmuxTimeJustNow");
-  if (diffMin < 60) return t("terminal.tmuxTimeMinutes", { count: diffMin });
-  if (diffHr < 24) return t("terminal.tmuxTimeHours", { count: diffHr });
-  if (diffDays < 7) return t("terminal.tmuxTimeDays", { count: diffDays });
-  return date.toLocaleDateString();
-}
-
-export function TmuxSessionPicker({
-  isOpen,
-  sessions,
-  onSelect,
-  onCreateNew,
-  onCancel,
-  backgroundColor,
-}: TmuxSessionPickerProps) {
-  const { t } = useTranslation();
-
-  if (!isOpen) return null;
-
-  return (
-    <div className="absolute inset-0 flex items-center justify-center z-500 animate-in fade-in duration-200">
-      <div
-        className="absolute inset-0 bg-canvas rounded-md"
-        style={{ backgroundColor: backgroundColor || undefined }}
-      />
-      <div className="bg-card border border-border w-full max-w-sm mx-4 relative z-10 animate-in fade-in zoom-in-95 duration-200">
-        <div className="p-4 border-b border-border">
-          <div className="flex items-center gap-2">
-            <Terminal className="size-4 text-accent-brand" />
-            <h3 className="text-xs font-bold uppercase tracking-widest">
-              {t("terminal.tmuxSessionPickerTitle")}
-            </h3>
-          </div>
-          <p className="text-[10px] font-bold uppercase tracking-tight text-muted-foreground mt-1">
-            {t("terminal.tmuxSessionPickerDesc")}
-          </p>
-        </div>
-        <div className="flex flex-col max-h-60 overflow-y-auto">
-          {sessions.map((session) => (
-            <button
-              key={session.name}
-              onClick={() => onSelect(session.name)}
-              className="w-full text-left px-4 py-3 border-b border-border hover:bg-muted/50 transition-colors last:border-b-0"
-            >
-              <div className="font-mono text-xs font-bold">{session.name}</div>
-              <div className="flex gap-3 mt-1 text-[10px] text-muted-foreground">
-                <span
-                  className="flex items-center gap-1"
-                  title={t("terminal.tmuxWindows")}
-                >
-                  <Monitor className="size-3" />
-                  {t("terminal.tmuxWindowCount", { count: session.windows })}
-                </span>
-                {session.attachedClients > 0 && (
-                  <span
-                    className="flex items-center gap-1"
-                    title={t("terminal.tmuxAttached")}
-                  >
-                    <Users className="size-3" />
-                    {t("terminal.tmuxAttachedCount", {
-                      count: session.attachedClients,
-                    })}
-                  </span>
-                )}
-                <span
-                  className="flex items-center gap-1"
-                  title={t("terminal.tmuxLastActivity")}
-                >
-                  <Clock className="size-3" />
-                  {formatTimestamp(session.lastActivity, t)}
-                </span>
-              </div>
-            </button>
-          ))}
-        </div>
-        <div className="p-4 border-t border-border flex justify-end gap-2">
-          <Button
-            onClick={onCancel}
-            variant="ghost"
-            className="rounded-none text-[10px] font-bold uppercase tracking-widest"
-          >
-            {t("common.cancel")}
-          </Button>
-          <Button
-            onClick={onCreateNew}
-            variant="outline"
-            className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 rounded-none text-[10px] font-bold uppercase tracking-widest"
-          >
-            {t("terminal.tmuxCreateNew")}
-          </Button>
-        </div>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/ssh-terminal/src/frontend/terminal/android-hardware-keyboard.ts b/plugins/ssh-terminal/src/frontend/terminal/android-hardware-keyboard.ts
deleted file mode 100644
index 69c7cddc9..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/android-hardware-keyboard.ts
+++ /dev/null
@@ -1,30 +0,0 @@
-import type { HostBackspaceMode } from "../types";
-
-const CURSOR_SEQUENCES: Record<string, [normal: string, application: string]> =
-  {
-    ArrowUp: ["\x1b[A", "\x1bOA"],
-    ArrowDown: ["\x1b[B", "\x1bOB"],
-    ArrowRight: ["\x1b[C", "\x1bOC"],
-    ArrowLeft: ["\x1b[D", "\x1bOD"],
-  };
-
-export function getAndroidHardwareKeySequence(
-  event: Pick<
-    KeyboardEvent,
-    "key" | "ctrlKey" | "altKey" | "metaKey" | "shiftKey"
-  >,
-  applicationCursorKeys: boolean,
-  backspaceMode: HostBackspaceMode | undefined,
-): string | null {
-  if (event.ctrlKey || event.altKey || event.metaKey || event.shiftKey) {
-    return null;
-  }
-
-  const cursor = CURSOR_SEQUENCES[event.key];
-  if (cursor) return cursor[applicationCursorKeys ? 1 : 0];
-  if (event.key === "Delete") return "\x1b[3~";
-  if (event.key === "Backspace" && backspaceMode !== "control-h") {
-    return "\x7f";
-  }
-  return null;
-}
diff --git a/plugins/ssh-terminal/src/frontend/terminal/command-history/CommandAutocomplete.tsx b/plugins/ssh-terminal/src/frontend/terminal/command-history/CommandAutocomplete.tsx
deleted file mode 100644
index b7b0da935..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/command-history/CommandAutocomplete.tsx
+++ /dev/null
@@ -1,116 +0,0 @@
-import React, { useEffect, useRef } from "react";
-import { cn } from "@termix/plugin-sdk/ui";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-interface CommandAutocompleteProps {
-  suggestions: string[];
-  selectedIndex: number;
-  onSelect: (command: string) => void;
-  position: { top: number; left: number };
-  visible: boolean;
-}
-
-interface CommandAutosuggestionProps {
-  suggestion: string;
-  position: { top: number; left: number };
-  style?: React.CSSProperties;
-  visible: boolean;
-}
-
-export function CommandAutosuggestion({
-  suggestion,
-  position,
-  style,
-  visible,
-}: CommandAutosuggestionProps) {
-  if (!visible || !suggestion) {
-    return null;
-  }
-
-  return (
-    <div
-      className="pointer-events-none fixed z-[9998] whitespace-pre text-muted-foreground/45"
-      style={{
-        top: `${position.top}px`,
-        left: `${position.left}px`,
-        fontVariantLigatures: "none",
-        fontFeatureSettings: '"liga" 0, "calt" 0',
-        textRendering: "optimizeLegibility",
-        WebkitFontSmoothing: "antialiased",
-        transition: "opacity 80ms ease-out",
-        willChange: "contents",
-        ...style,
-      }}
-    >
-      {suggestion}
-    </div>
-  );
-}
-
-export function CommandAutocomplete({
-  suggestions,
-  selectedIndex,
-  onSelect,
-  position,
-  visible,
-}: CommandAutocompleteProps) {
-  const { t } = useTranslation();
-  const containerRef = useRef<HTMLDivElement>(null);
-  const selectedRef = useRef<HTMLDivElement>(null);
-
-  useEffect(() => {
-    if (selectedRef.current && containerRef.current) {
-      selectedRef.current.scrollIntoView({
-        block: "nearest",
-        behavior: "smooth",
-      });
-    }
-  }, [selectedIndex]);
-
-  if (!visible || suggestions.length === 0) {
-    return null;
-  }
-
-  const footerHeight = 32;
-  const maxSuggestionsHeight = 240 - footerHeight;
-
-  return (
-    <div
-      ref={containerRef}
-      className="fixed z-[9999] bg-popover border border-border shadow-lg min-w-[200px] max-w-[600px] flex flex-col"
-      style={{
-        top: `${position.top}px`,
-        left: `${position.left}px`,
-        maxHeight: "240px",
-      }}
-    >
-      <div
-        className="overflow-y-auto thin-scrollbar"
-        style={{ maxHeight: `${maxSuggestionsHeight}px` }}
-      >
-        {suggestions.map((suggestion, index) => (
-          <div
-            key={index}
-            ref={index === selectedIndex ? selectedRef : null}
-            className={cn(
-              "px-3 py-1.5 text-sm font-mono cursor-pointer transition-colors text-foreground",
-              "hover:bg-muted",
-              index === selectedIndex && "bg-accent text-accent-foreground",
-            )}
-            onClick={() => onSelect(suggestion)}
-            onMouseEnter={() => {}}
-          >
-            {suggestion}
-          </div>
-        ))}
-      </div>
-      <div className="px-3 py-1 text-xs text-muted-foreground border-t border-border bg-muted/50 shrink-0">
-        <span className="flex flex-wrap gap-x-3">
-          <span>{t("terminal.autocompleteHintComplete")}</span>
-          <span>{t("terminal.autocompleteHintNavigate")}</span>
-          <span>{t("terminal.autocompleteHintClose")}</span>
-        </span>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/ssh-terminal/src/frontend/terminal/command-history/CommandHistoryContext.tsx b/plugins/ssh-terminal/src/frontend/terminal/command-history/CommandHistoryContext.tsx
deleted file mode 100644
index b8025e320..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/command-history/CommandHistoryContext.tsx
+++ /dev/null
@@ -1,86 +0,0 @@
-/* eslint-disable react-refresh/only-export-components */
-import React, {
-  createContext,
-  useContext,
-  useState,
-  useCallback,
-  type ReactNode,
-} from "react";
-
-interface CommandHistoryContextType {
-  commandHistory: string[];
-  isLoading: boolean;
-  setCommandHistory: (history: string[]) => void;
-  setIsLoading: (loading: boolean) => void;
-  onSelectCommand?: (command: string) => void;
-  setOnSelectCommand: (callback: (command: string) => void) => void;
-  onDeleteCommand?: (command: string) => void;
-  setOnDeleteCommand: (callback: (command: string) => void) => void;
-  openCommandHistory: () => void;
-  setOpenCommandHistory: (callback: () => void) => void;
-}
-
-const CommandHistoryContext = createContext<
-  CommandHistoryContextType | undefined
->(undefined);
-
-export function CommandHistoryProvider({ children }: { children: ReactNode }) {
-  const [commandHistory, setCommandHistory] = useState<string[]>([]);
-  const [isLoading, setIsLoading] = useState(false);
-  const [onSelectCommand, setOnSelectCommand] = useState<
-    ((command: string) => void) | undefined
-  >(undefined);
-  const [onDeleteCommand, setOnDeleteCommand] = useState<
-    ((command: string) => void) | undefined
-  >(undefined);
-  const [openCommandHistory, setOpenCommandHistory] = useState<
-    (() => void) | undefined
-  >(() => () => {});
-
-  const handleSetOnSelectCommand = useCallback(
-    (callback: (command: string) => void) => {
-      setOnSelectCommand(() => callback);
-    },
-    [],
-  );
-
-  const handleSetOnDeleteCommand = useCallback(
-    (callback: (command: string) => void) => {
-      setOnDeleteCommand(() => callback);
-    },
-    [],
-  );
-
-  const handleSetOpenCommandHistory = useCallback((callback: () => void) => {
-    setOpenCommandHistory(() => callback);
-  }, []);
-
-  return (
-    <CommandHistoryContext.Provider
-      value={{
-        commandHistory,
-        isLoading,
-        setCommandHistory,
-        setIsLoading,
-        onSelectCommand,
-        setOnSelectCommand: handleSetOnSelectCommand,
-        onDeleteCommand,
-        setOnDeleteCommand: handleSetOnDeleteCommand,
-        openCommandHistory: openCommandHistory || (() => {}),
-        setOpenCommandHistory: handleSetOpenCommandHistory,
-      }}
-    >
-      {children}
-    </CommandHistoryContext.Provider>
-  );
-}
-
-export function useCommandHistory() {
-  const context = useContext(CommandHistoryContext);
-  if (context === undefined) {
-    throw new Error(
-      "useCommandHistory must be used within a CommandHistoryProvider",
-    );
-  }
-  return context;
-}
diff --git a/plugins/ssh-terminal/src/frontend/terminal/command-history/useCommandTracker.ts b/plugins/ssh-terminal/src/frontend/terminal/command-history/useCommandTracker.ts
deleted file mode 100644
index 7fb7005e2..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/command-history/useCommandTracker.ts
+++ /dev/null
@@ -1,132 +0,0 @@
-import { useRef, useCallback } from "react";
-import { usePluginApi } from "@termix/plugin-sdk/frontend";
-import { saveCommandToHistory } from "../../terminal-api";
-
-const SENSITIVE_PATTERNS = [
-  /\bpassw(or)?d\b/i,
-  /\bsecret\b/i,
-  /\btoken\b/i,
-  /\bapi.?key\b/i,
-  /\bPASS(WORD)?=/i,
-  /\bAWS_SECRET/i,
-  /\bmysql\b.*-p/i,
-  /\bsudo\s+-S\b/,
-  /\bhtpasswd\b/i,
-  /\bsshpass\b/i,
-  /\bcurl\b.*-u\s/i,
-  /\bexport\b.*(?:PASSWORD|SECRET|TOKEN|KEY)=/i,
-];
-
-interface UseCommandTrackerOptions {
-  hostId?: number;
-  enabled?: boolean;
-  onCommandExecuted?: (command: string) => void;
-}
-
-interface CommandTrackerResult {
-  trackInput: (data: string) => void;
-  getCurrentCommand: () => string;
-  clearCurrentCommand: () => void;
-  updateCurrentCommand: (command: string) => void;
-}
-
-export function useCommandTracker({
-  hostId,
-  enabled = true,
-  onCommandExecuted,
-}: UseCommandTrackerOptions): CommandTrackerResult {
-  const api = usePluginApi();
-  const currentCommandRef = useRef<string>("");
-  const isInEscapeSequenceRef = useRef<boolean>(false);
-
-  const trackInput = useCallback(
-    (data: string) => {
-      if (!enabled || !hostId) {
-        return;
-      }
-
-      for (let i = 0; i < data.length; i++) {
-        const char = data[i];
-        const charCode = char.charCodeAt(0);
-
-        if (charCode === 27) {
-          isInEscapeSequenceRef.current = true;
-          continue;
-        }
-
-        if (isInEscapeSequenceRef.current) {
-          if (
-            (charCode >= 65 && charCode <= 90) ||
-            (charCode >= 97 && charCode <= 122) ||
-            charCode === 126
-          ) {
-            isInEscapeSequenceRef.current = false;
-          }
-          continue;
-        }
-
-        if (charCode === 13 || charCode === 10) {
-          const command = currentCommandRef.current.trim();
-
-          if (command.length > 0) {
-            const isSensitive = SENSITIVE_PATTERNS.some((p) => p.test(command));
-
-            if (!isSensitive) {
-              saveCommandToHistory(api, hostId, command).catch((error) => {
-                console.error("Failed to save command to history:", error);
-              });
-            }
-
-            if (onCommandExecuted) {
-              onCommandExecuted(command);
-            }
-          }
-
-          currentCommandRef.current = "";
-          continue;
-        }
-
-        if (charCode === 8 || charCode === 127) {
-          if (currentCommandRef.current.length > 0) {
-            currentCommandRef.current = currentCommandRef.current.slice(0, -1);
-          }
-          continue;
-        }
-
-        if (charCode === 3 || charCode === 4) {
-          currentCommandRef.current = "";
-          continue;
-        }
-
-        if (charCode === 21) {
-          currentCommandRef.current = "";
-          continue;
-        }
-
-        if (charCode >= 32 && charCode <= 126) {
-          currentCommandRef.current += char;
-        }
-      }
-    },
-    [enabled, hostId, onCommandExecuted],
-  );
-
-  const getCurrentCommand = useCallback(() => {
-    return currentCommandRef.current;
-  }, []);
-
-  const clearCurrentCommand = useCallback(() => {
-    currentCommandRef.current = "";
-  }, []);
-
-  const updateCurrentCommand = useCallback((command: string) => {
-    currentCommandRef.current = command;
-  }, []);
-
-  return {
-    trackInput,
-    getCurrentCommand,
-    clearCurrentCommand,
-    updateCurrentCommand,
-  };
-}
diff --git a/plugins/ssh-terminal/src/frontend/terminal/font-size-storage.ts b/plugins/ssh-terminal/src/frontend/terminal/font-size-storage.ts
deleted file mode 100644
index 6c1e2169c..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/font-size-storage.ts
+++ /dev/null
@@ -1,40 +0,0 @@
-export function fontSizeStorageKey(identity: unknown): string | null {
-  return typeof identity === "string" || typeof identity === "number"
-    ? `terminal_fontsize_host_${identity}`
-    : null;
-}
-
-export function readFontSize(
-  storage: Storage,
-  key: string | null,
-  configured: number,
-): number | null {
-  if (!key) return null;
-  try {
-    const value = JSON.parse(storage.getItem(key) || "null");
-    if (
-      value?.configured === configured &&
-      Number.isFinite(value.size) &&
-      value.size > 0
-    )
-      return value.size;
-    storage.removeItem(key);
-  } catch {
-    /* Storage may be unavailable. */
-  }
-  return null;
-}
-
-export function saveFontSize(
-  storage: Storage,
-  key: string | null,
-  configured: number,
-  size: number,
-): void {
-  if (!key) return;
-  try {
-    storage.setItem(key, JSON.stringify({ configured, size }));
-  } catch {
-    /* Storage may be unavailable. */
-  }
-}
diff --git a/plugins/ssh-terminal/src/frontend/terminal/search/TerminalSearchBar.tsx b/plugins/ssh-terminal/src/frontend/terminal/search/TerminalSearchBar.tsx
deleted file mode 100644
index 406f76767..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/search/TerminalSearchBar.tsx
+++ /dev/null
@@ -1,249 +0,0 @@
-import React from "react";
-import { ChevronDown, ChevronUp, X } from "lucide-react";
-import {
-  Input,
-  Button,
-  Separator,
-  Tooltip,
-  TooltipContent,
-  TooltipProvider,
-  TooltipTrigger,
-  cn,
-} from "@termix/plugin-sdk/ui";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-interface TerminalSearchBarProps {
-  visible: boolean;
-  query: string;
-  onQueryChange: (query: string) => void;
-  onFindNext: () => void;
-  onFindPrevious: () => void;
-  onClose: () => void;
-  caseSensitive: boolean;
-  onToggleCaseSensitive: () => void;
-  wholeWord: boolean;
-  onToggleWholeWord: () => void;
-  regex: boolean;
-  onToggleRegex: () => void;
-  resultIndex: number;
-  resultCount: number;
-  inputRef: React.RefObject<HTMLInputElement | null>;
-}
-
-interface SearchToggleProps {
-  label: string;
-  active: boolean;
-  onClick: () => void;
-  className?: string;
-  children: React.ReactNode;
-}
-
-function SearchToggle({
-  label,
-  active,
-  onClick,
-  className,
-  children,
-}: SearchToggleProps) {
-  return (
-    <Tooltip>
-      <TooltipTrigger asChild>
-        <Button
-          type="button"
-          variant="ghost"
-          size="icon-xs"
-          aria-label={label}
-          aria-pressed={active}
-          onClick={onClick}
-          className={cn(
-            "font-mono text-[11px] leading-none text-muted-foreground",
-            active &&
-              "border-border bg-muted text-foreground hover:bg-muted dark:bg-muted/60",
-            className,
-          )}
-        >
-          {children}
-        </Button>
-      </TooltipTrigger>
-      <TooltipContent side="bottom" sideOffset={6}>
-        {label}
-      </TooltipContent>
-    </Tooltip>
-  );
-}
-
-export function TerminalSearchBar({
-  visible,
-  query,
-  onQueryChange,
-  onFindNext,
-  onFindPrevious,
-  onClose,
-  caseSensitive,
-  onToggleCaseSensitive,
-  wholeWord,
-  onToggleWholeWord,
-  regex,
-  onToggleRegex,
-  resultIndex,
-  resultCount,
-  inputRef,
-}: TerminalSearchBarProps) {
-  const { t } = useTranslation();
-
-  if (!visible) {
-    return null;
-  }
-
-  const handleKeyDown = (e: React.KeyboardEvent<HTMLInputElement>) => {
-    if (e.key === "Enter") {
-      e.preventDefault();
-      if (e.shiftKey) {
-        onFindPrevious();
-      } else {
-        onFindNext();
-      }
-      return;
-    }
-
-    if (e.key === "Escape") {
-      e.preventDefault();
-      onClose();
-      return;
-    }
-
-    // Stop keys like Ctrl+C/Ctrl+V from bubbling up to xterm's document-level
-    // paste/clipboard handling while the search input is focused.
-    e.stopPropagation();
-  };
-
-  const hasQuery = query.length > 0;
-  const noResults = hasQuery && resultCount === 0;
-  const resultLabel = !hasQuery
-    ? ""
-    : resultCount === 0
-      ? t("terminal.searchNoResults")
-      : t("terminal.searchResultCount", {
-          index: resultIndex + 1,
-          count: resultCount,
-        });
-
-  return (
-    <TooltipProvider delayDuration={500}>
-      <div
-        className="absolute top-2 right-2 z-[130] flex items-center gap-1 border border-border bg-background/95 p-1 shadow-lg backdrop-blur-sm"
-        onMouseDown={(e) => e.stopPropagation()}
-      >
-        <div className="relative flex items-center">
-          <Input
-            ref={inputRef}
-            value={query}
-            onChange={(e) => onQueryChange(e.target.value)}
-            onKeyDown={handleKeyDown}
-            placeholder={t("terminal.searchPlaceholder")}
-            aria-label={t("terminal.searchPlaceholder")}
-            className={cn(
-              "h-7 w-48 pr-16 font-mono",
-              noResults &&
-                "border-destructive focus-visible:border-destructive focus-visible:ring-destructive/20",
-            )}
-            autoComplete="off"
-            autoCorrect="off"
-            autoCapitalize="none"
-            spellCheck={false}
-          />
-          <span
-            className={cn(
-              "pointer-events-none absolute right-2 font-mono text-[11px] tabular-nums select-none",
-              noResults ? "text-destructive" : "text-muted-foreground",
-            )}
-          >
-            {resultLabel}
-          </span>
-        </div>
-
-        <Separator orientation="vertical" className="mx-0.5 !h-5" />
-
-        <div className="flex items-center gap-0.5">
-          <SearchToggle
-            label={t("terminal.searchCaseSensitive")}
-            active={caseSensitive}
-            onClick={onToggleCaseSensitive}
-          >
-            Aa
-          </SearchToggle>
-          <SearchToggle
-            label={t("terminal.searchWholeWord")}
-            active={wholeWord}
-            onClick={onToggleWholeWord}
-            className="underline underline-offset-2"
-          >
-            ab
-          </SearchToggle>
-          <SearchToggle
-            label={t("terminal.searchRegex")}
-            active={regex}
-            onClick={onToggleRegex}
-          >
-            .*
-          </SearchToggle>
-        </div>
-
-        <Separator orientation="vertical" className="mx-0.5 !h-5" />
-
-        <div className="flex items-center gap-0.5">
-          <Tooltip>
-            <TooltipTrigger asChild>
-              <Button
-                type="button"
-                variant="ghost"
-                size="icon-xs"
-                aria-label={t("terminal.searchPrevious")}
-                disabled={!hasQuery || resultCount === 0}
-                onClick={onFindPrevious}
-              >
-                <ChevronUp />
-              </Button>
-            </TooltipTrigger>
-            <TooltipContent side="bottom" sideOffset={6}>
-              {t("terminal.searchPrevious")}
-            </TooltipContent>
-          </Tooltip>
-          <Tooltip>
-            <TooltipTrigger asChild>
-              <Button
-                type="button"
-                variant="ghost"
-                size="icon-xs"
-                aria-label={t("terminal.searchNext")}
-                disabled={!hasQuery || resultCount === 0}
-                onClick={onFindNext}
-              >
-                <ChevronDown />
-              </Button>
-            </TooltipTrigger>
-            <TooltipContent side="bottom" sideOffset={6}>
-              {t("terminal.searchNext")}
-            </TooltipContent>
-          </Tooltip>
-          <Tooltip>
-            <TooltipTrigger asChild>
-              <Button
-                type="button"
-                variant="ghost"
-                size="icon-xs"
-                aria-label={t("terminal.searchClose")}
-                onClick={onClose}
-              >
-                <X />
-              </Button>
-            </TooltipTrigger>
-            <TooltipContent side="bottom" sideOffset={6}>
-              {t("terminal.searchClose")}
-            </TooltipContent>
-          </Tooltip>
-        </div>
-      </div>
-    </TooltipProvider>
-  );
-}
diff --git a/plugins/ssh-terminal/src/frontend/terminal/terminal-buffer-text.ts b/plugins/ssh-terminal/src/frontend/terminal/terminal-buffer-text.ts
deleted file mode 100644
index 9326c29e2..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/terminal-buffer-text.ts
+++ /dev/null
@@ -1,47 +0,0 @@
-import type { Terminal } from "@xterm/xterm";
-
-/**
- * How much scrollback to hand out by default. Bounded on purpose: a
- * long-running session holds megabytes, and nothing consuming this wants all
- * of it.
- */
-export const DEFAULT_BUFFER_CONTEXT_LINES = 200;
-
-/**
- * Serializes the tail of a terminal's buffer to plain text.
- *
- * Wrapped rows are joined back onto the line they continue. xterm splits one
- * logical line across several buffer rows when it wraps, so emitting a newline
- * per row would chop long commands in half.
- */
-export function getTerminalBufferText(
-  terminal: Terminal | null | undefined,
-  maxLines: number = DEFAULT_BUFFER_CONTEXT_LINES,
-): string {
-  if (!terminal || maxLines <= 0) return "";
-
-  try {
-    const buffer = terminal.buffer.active;
-    const end = buffer.baseY + terminal.rows;
-    const start = Math.max(0, end - maxLines);
-
-    const lines: string[] = [];
-    for (let i = start; i < end; i++) {
-      const line = buffer.getLine(i);
-      if (!line) continue;
-      const text = line.translateToString(true);
-      if (line.isWrapped && lines.length > 0) {
-        lines[lines.length - 1] += text;
-      } else {
-        lines.push(text);
-      }
-    }
-
-    while (lines.length > 0 && lines[lines.length - 1] === "") lines.pop();
-    return lines.join("\n");
-  } catch {
-    // Called from a click handler. A disposed terminal returns nothing
-    // rather than breaking the click.
-    return "";
-  }
-}
diff --git a/plugins/ssh-terminal/src/frontend/terminal/terminal-clipboard-actions.ts b/plugins/ssh-terminal/src/frontend/terminal/terminal-clipboard-actions.ts
deleted file mode 100644
index a44691343..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/terminal-clipboard-actions.ts
+++ /dev/null
@@ -1,26 +0,0 @@
-export type TerminalContextMenuAction = "native" | "copy" | "paste";
-
-export function resolveTerminalContextMenuAction({
-  rightClickCopyPaste,
-  copyOnSelect,
-  hasSelection,
-}: {
-  rightClickCopyPaste: boolean;
-  copyOnSelect: boolean;
-  hasSelection: boolean;
-}): TerminalContextMenuAction {
-  if (!rightClickCopyPaste) return "native";
-  return hasSelection && !copyOnSelect ? "copy" : "paste";
-}
-
-export function selectedTextToCopy({
-  copyOnSelect,
-  button,
-  selection,
-}: {
-  copyOnSelect: boolean;
-  button: number;
-  selection: string;
-}): string | null {
-  return copyOnSelect && button === 0 && selection ? selection : null;
-}
diff --git a/plugins/ssh-terminal/src/frontend/terminal/terminal-clipboard.ts b/plugins/ssh-terminal/src/frontend/terminal/terminal-clipboard.ts
deleted file mode 100644
index 13f952311..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/terminal-clipboard.ts
+++ /dev/null
@@ -1,152 +0,0 @@
-import { getClientPreference } from "@termix/plugin-sdk/frontend";
-import type { Terminal } from "@xterm/xterm";
-import { isPhysicalShortcutKey } from "./terminal-key-event";
-
-export function getUseRightClickCopyPaste(): boolean {
-  return getClientPreference("rightClickCopyPaste") !== "false";
-}
-
-export interface TerminalClipboardActions {
-  writeTextToClipboard: (text: string) => Promise<unknown>;
-  readTextFromClipboard: () => Promise<string>;
-}
-
-export interface TerminalClipboardKeyOptions {
-  /**
-   * How a plain Ctrl/Cmd+V with no other modifiers is handled.
-   * "native" (default, matches the SSH terminal) leaves the key alone so the
-   * browser's own paste event fires - this avoids re-triggering the OS
-   * clipboard permission prompt on every keystroke, but requires the caller
-   * to also listen for the DOM "paste" event.
-   * "explicit" reads the clipboard directly instead, for terminals with no
-   * such paste event listener of their own.
-   */
-  plainPasteMode?: "native" | "explicit";
-}
-
-/**
- * Shared copy/paste keyboard shortcuts for xterm-based terminals:
- * Ctrl/Cmd+C copies the current selection (Ctrl+C also clears it, matching
- * its dual use as SIGINT when nothing is selected), Ctrl+Insert copies
- * without clearing, and Ctrl+Shift+C / Ctrl+Shift+V always copy/paste
- * regardless of selection state. Returns false (having called
- * preventDefault/stopPropagation) once it has handled the event, true
- * otherwise so callers can keep processing the keydown.
- */
-export function handleTerminalClipboardKeyEvent(
-  e: KeyboardEvent,
-  terminal: Terminal,
-  { writeTextToClipboard, readTextFromClipboard }: TerminalClipboardActions,
-  { plainPasteMode = "native" }: TerminalClipboardKeyOptions = {},
-): boolean {
-  const isCopyKey = isPhysicalShortcutKey(e, "KeyC", "c");
-  const isPasteKey = isPhysicalShortcutKey(e, "KeyV", "v");
-
-  if (
-    e.ctrlKey &&
-    !e.shiftKey &&
-    !e.altKey &&
-    !e.metaKey &&
-    isCopyKey &&
-    terminal.hasSelection()
-  ) {
-    const selection = terminal.getSelection();
-    if (selection) {
-      e.preventDefault();
-      e.stopPropagation();
-      writeTextToClipboard(selection);
-      terminal.clearSelection();
-      return false;
-    }
-  }
-
-  if (
-    (e.metaKey && !e.shiftKey && !e.ctrlKey && !e.altKey && isCopyKey) ||
-    (e.ctrlKey && !e.shiftKey && !e.altKey && !e.metaKey && e.key === "Insert")
-  ) {
-    const selection = terminal.getSelection();
-    if (selection) {
-      e.preventDefault();
-      e.stopPropagation();
-      writeTextToClipboard(selection);
-      return false;
-    }
-  }
-
-  if (e.ctrlKey && e.shiftKey && !e.altKey && !e.metaKey && isCopyKey) {
-    const selection = terminal.getSelection();
-    if (selection) {
-      e.preventDefault();
-      e.stopPropagation();
-      writeTextToClipboard(selection);
-      terminal.clearSelection();
-      return false;
-    }
-  }
-
-  if (e.ctrlKey && e.shiftKey && !e.altKey && !e.metaKey && isPasteKey) {
-    e.preventDefault();
-    e.stopPropagation();
-    readTextFromClipboard().then((text) => {
-      if (text) terminal.paste(text);
-    });
-    return false;
-  }
-
-  const plainModPaste =
-    ((e.ctrlKey && !e.metaKey) || (e.metaKey && !e.ctrlKey)) &&
-    !e.shiftKey &&
-    !e.altKey &&
-    isPasteKey;
-  if (plainModPaste) {
-    if (plainPasteMode === "explicit") {
-      e.preventDefault();
-      e.stopPropagation();
-      readTextFromClipboard().then((text) => {
-        if (text) terminal.paste(text);
-      });
-    }
-    // "native": leave the event alone so the browser's own paste event fires.
-    return false;
-  }
-
-  return true;
-}
-
-export interface TerminalContextMenuOptions {
-  /** Optional Ctrl+right-click passthrough, e.g. to open a file manager. */
-  onCtrlClick?: () => void;
-}
-
-/**
- * Builds a "contextmenu" listener implementing right-click copy/paste:
- * copies the selection if one exists, otherwise pastes. Gated behind the
- * user's "rightClickCopyPaste" preference cookie.
- */
-export function createTerminalContextMenuHandler(
-  terminal: Terminal,
-  { writeTextToClipboard, readTextFromClipboard }: TerminalClipboardActions,
-  { onCtrlClick }: TerminalContextMenuOptions = {},
-): (e: MouseEvent) => void {
-  return (e: MouseEvent) => {
-    if (e.ctrlKey && onCtrlClick) {
-      e.preventDefault();
-      e.stopPropagation();
-      onCtrlClick();
-      return;
-    }
-
-    if (!getUseRightClickCopyPaste()) return;
-
-    e.preventDefault();
-    e.stopPropagation();
-    if (terminal.hasSelection()) {
-      const text = terminal.getSelection();
-      writeTextToClipboard(text).then(() => terminal.clearSelection());
-    } else {
-      readTextFromClipboard().then((text) => {
-        if (text) terminal.paste(text);
-      });
-    }
-  };
-}
diff --git a/plugins/ssh-terminal/src/frontend/terminal/terminal-helpers.ts b/plugins/ssh-terminal/src/frontend/terminal/terminal-helpers.ts
deleted file mode 100644
index 6ef95453a..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/terminal-helpers.ts
+++ /dev/null
@@ -1,6 +0,0 @@
-export function getErrorMessage(
-  error: unknown,
-  fallback = "Unknown error",
-): string {
-  return error instanceof Error ? error.message : fallback;
-}
diff --git a/plugins/ssh-terminal/src/frontend/terminal/terminal-image-path.ts b/plugins/ssh-terminal/src/frontend/terminal/terminal-image-path.ts
deleted file mode 100644
index 4eea2e61d..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/terminal-image-path.ts
+++ /dev/null
@@ -1,10 +0,0 @@
-/**
- * Return an absolute POSIX path as one safe shell argument for terminal input.
- *
- * The backend already constrains this to an absolute agent-visible path. This
- * helper handles spaces and shell metacharacters at the final terminal-input
- * boundary so configured paths cannot become shell syntax.
- */
-export function quoteTerminalImagePath(value: string): string {
-  return `'${value.replace(/'/g, `'\\''`)}'`;
-}
diff --git a/plugins/ssh-terminal/src/frontend/terminal/terminal-image-upload.ts b/plugins/ssh-terminal/src/frontend/terminal/terminal-image-upload.ts
deleted file mode 100644
index e92688c3d..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/terminal-image-upload.ts
+++ /dev/null
@@ -1,15 +0,0 @@
-export type TerminalImageUploadSource = "file" | "clipboard";
-
-export function buildImageUploadFormData(
-  file: File,
-  instanceId: string,
-  source: TerminalImageUploadSource,
-  clientUploadTimestamp = new Date().toISOString(),
-): FormData {
-  const form = new FormData();
-  form.append("image", file);
-  form.append("instanceId", instanceId);
-  form.append("source", source);
-  form.append("clientUploadTimestamp", clientUploadTimestamp);
-  return form;
-}
diff --git a/plugins/ssh-terminal/src/frontend/terminal/terminal-key-event.ts b/plugins/ssh-terminal/src/frontend/terminal/terminal-key-event.ts
deleted file mode 100644
index 4aa0acb50..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/terminal-key-event.ts
+++ /dev/null
@@ -1,13 +0,0 @@
-export function isTabKeyEvent(event: KeyboardEvent): boolean {
-  return event.key === "Tab" || event.code === "Tab" || event.keyCode === 9;
-}
-
-export function isPhysicalShortcutKey(
-  event: Pick<KeyboardEvent, "code" | "key">,
-  code: string,
-  fallbackKey: string,
-): boolean {
-  return event.code
-    ? event.code === code
-    : event.key.toLowerCase() === fallbackKey;
-}
diff --git a/plugins/ssh-terminal/src/frontend/terminal/terminal-slots.ts b/plugins/ssh-terminal/src/frontend/terminal/terminal-slots.ts
deleted file mode 100644
index f4653df96..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/terminal-slots.ts
+++ /dev/null
@@ -1,90 +0,0 @@
-import type { Host } from "../types";
-
-/**
- * The slots the terminal offers plugins, and what it hands them.
- *
- * - "terminal.toolbar" (buttons): actions are invoked with a TerminalSlotApi.
- * - "terminal.toolbarStatus" (components): small live readouts at the end
- *   of the toolbar (host metrics), rendered with TerminalToolbarStatusProps.
- * - "terminal.sidePanel" (components): a side panel an action opens with
- *   `openSidePanel(id)`, rendered with TerminalSidePanelProps.
- * - "terminal.overlay" (components): always mounted over the terminal and
- *   given the session's server messages, for connection flows a plugin owns
- *   (a Tailscale check, an OPKSSH sign-in). It can answer on the socket.
- *
- * Every contribution's `when` sees `{ host }`.
- */
-export const TERMINAL_TOOLBAR_SLOT = "terminal.toolbar";
-export const TERMINAL_TOOLBAR_STATUS_SLOT = "terminal.toolbarStatus";
-export const TERMINAL_SIDE_PANEL_SLOT = "terminal.sidePanel";
-export const TERMINAL_OVERLAY_SLOT = "terminal.overlay";
-
-export interface TerminalSlotApi {
-  host: Host | undefined;
-  /** The visible scrollback, read at call time. */
-  getBufferText: () => string;
-  /** The live session's id, once the server created it. */
-  sessionId: () => string | null;
-  /** Opens a "terminal.sidePanel" contribution by its actionId. */
-  openSidePanel: (panelId: string, props?: Record<string, unknown>) => void;
-  /** Types a command into the session and runs it. */
-  runCommand: (command: string) => void;
-  /**
-   * What sharing this session needs, or null while there is nothing to share
-   * (not connected yet, a quick connect, or a session joined from a share).
-   */
-  getShareTarget: () => {
-    hostId: number;
-    sessionId: string;
-    protocol: "ssh";
-    tabInstanceId?: string;
-    origin?: "local" | "remote";
-  } | null;
-}
-
-export interface TerminalToolbarStatusProps {
-  host: Host;
-  isConnected: boolean;
-  /** Visible on a desktop viewport and connected: poll only while true. */
-  active: boolean;
-}
-
-export interface TerminalSidePanelProps {
-  host: Host | undefined;
-  hostId: number | undefined;
-  hostLabel: string;
-  /** Whatever the opening action passed to openSidePanel. */
-  panelProps: Record<string, unknown>;
-  onClose: () => void;
-  onRunInTerminal: (command: string) => void;
-}
-
-export interface TerminalSessionMessage {
-  type: string;
-  [key: string]: unknown;
-}
-
-export interface TerminalOverlayProps {
-  host: Host | undefined;
-  backgroundColor?: string;
-  /** Server messages for this session, plus a local "session_closed". */
-  subscribe: (
-    listener: (message: TerminalSessionMessage) => void,
-  ) => () => void;
-  /**
-   * Holds the connect timeout while the overlay waits on the user, e.g. an
-   * approval in another window. Release it when done.
-   */
-  holdConnectTimeout: (held: boolean) => void;
-  /** Ends the attempt with an error shown in the terminal. */
-  fail: (message: string) => void;
-  /** Closes the session's connection. */
-  disconnect: () => void;
-  /** Sends a message on the session's socket, as { type, data }. */
-  send: (type: string, data?: unknown) => void;
-  /**
-   * What the server needs to connect again after a sign-in finished: send it
-   * as the data of "<interaction>_auth_completed".
-   */
-  connectPayload: () => Record<string, unknown>;
-}
diff --git a/plugins/ssh-terminal/src/frontend/terminal/terminal-types.ts b/plugins/ssh-terminal/src/frontend/terminal/terminal-types.ts
deleted file mode 100644
index 8c71f9535..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/terminal-types.ts
+++ /dev/null
@@ -1,37 +0,0 @@
-import type { HostSshOptions } from "@termix/plugin-sdk/frontend";
-
-export interface TerminalHostConfig {
-  id?: number;
-  instanceId?: string;
-  restoredSessionId?: string | null;
-  /** Set when this tab joins someone else's live shared SSH session instead of connecting/attaching. */
-  joinSharedSessionId?: string | null;
-  joinShareId?: string | null;
-  name?: string;
-  ip: string;
-  port: number;
-  username: string;
-  password?: string;
-  key?: string;
-  keyPassword?: string;
-  keyType?: string;
-  authType?: string;
-  credentialId?: number;
-  sshOptions?: HostSshOptions | null;
-  [key: string]: unknown;
-}
-
-export interface TerminalHandle {
-  disconnect: () => void;
-  reconnect: () => void;
-  reconnectIfDisconnected: () => boolean;
-  isConnected: () => boolean;
-  fit: () => void;
-  focus: () => void;
-  sendInput: (data: string) => void;
-  subscribeOutput: (listener: (data: string) => void) => () => void;
-  paste: (text: string) => void;
-  notifyResize: () => void;
-  refresh: () => void;
-  getApplicationCursorKeysMode: () => boolean;
-}
diff --git a/plugins/ssh-terminal/src/frontend/terminal/toolbar-geometry.ts b/plugins/ssh-terminal/src/frontend/terminal/toolbar-geometry.ts
deleted file mode 100644
index 199451eff..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/toolbar-geometry.ts
+++ /dev/null
@@ -1,128 +0,0 @@
-export interface ToolbarPosition {
-  x: number;
-  y: number;
-}
-
-export interface RectLike {
-  left: number;
-  right: number;
-  top: number;
-  bottom: number;
-  width: number;
-  height: number;
-}
-
-export type ToolbarDensity = "icon" | "labeled" | "expanded";
-
-export const TOOLBAR_POSITION_STORAGE_KEY =
-  "termix-terminal-toolbar-position-v2";
-const TOOLBAR_MARGIN = 8;
-const RECOVERY_SIZE = 44;
-
-export function getDefaultToolbarPosition(): ToolbarPosition {
-  return { x: 0, y: 0 };
-}
-
-export function sanitizeToolbarPosition(value: unknown): ToolbarPosition {
-  if (!value || typeof value !== "object") return getDefaultToolbarPosition();
-  const candidate = value as Partial<ToolbarPosition>;
-  return Number.isFinite(candidate.x) && Number.isFinite(candidate.y)
-    ? { x: Number(candidate.x), y: Number(candidate.y) }
-    : getDefaultToolbarPosition();
-}
-
-function readStoredPosition(storageKey: string): ToolbarPosition {
-  if (typeof window === "undefined") return getDefaultToolbarPosition();
-  try {
-    return sanitizeToolbarPosition(
-      JSON.parse(window.localStorage.getItem(storageKey) ?? "null"),
-    );
-  } catch {
-    return getDefaultToolbarPosition();
-  }
-}
-
-function persistPosition(storageKey: string, position: ToolbarPosition): void {
-  try {
-    window.localStorage.setItem(
-      storageKey,
-      JSON.stringify(sanitizeToolbarPosition(position)),
-    );
-  } catch {
-    // Storage may be unavailable in hardened browser contexts.
-  }
-}
-
-/** Each anchor keeps its own drag offset; bottom keeps the original key. */
-export function toolbarPositionStorageKey(anchor = "bottom"): string {
-  return anchor === "bottom"
-    ? TOOLBAR_POSITION_STORAGE_KEY
-    : `${TOOLBAR_POSITION_STORAGE_KEY}-${anchor}`;
-}
-
-export function readStoredToolbarPosition(anchor?: string): ToolbarPosition {
-  return readStoredPosition(toolbarPositionStorageKey(anchor));
-}
-
-export function persistToolbarPosition(
-  position: ToolbarPosition,
-  anchor?: string,
-): void {
-  persistPosition(toolbarPositionStorageKey(anchor), position);
-}
-
-export function clampToolbarPosition(
-  position: ToolbarPosition,
-  toolbarRect: RectLike,
-  hostRect: RectLike,
-  renderedPosition: ToolbarPosition = position,
-): ToolbarPosition {
-  if (
-    !toolbarRect.width ||
-    !toolbarRect.height ||
-    !hostRect.width ||
-    !hostRect.height
-  )
-    return sanitizeToolbarPosition(position);
-  const left = hostRect.left + TOOLBAR_MARGIN;
-  const right = hostRect.right - TOOLBAR_MARGIN;
-  const top = hostRect.top + TOOLBAR_MARGIN;
-  const bottom = hostRect.bottom - TOOLBAR_MARGIN;
-  const baseLeft = toolbarRect.left - renderedPosition.x;
-  const baseRight = toolbarRect.right - renderedPosition.x;
-  const baseTop = toolbarRect.top - renderedPosition.y;
-  const baseBottom = toolbarRect.bottom - renderedPosition.y;
-  const clamp = (min: number, max: number, value: number) =>
-    Math.min(max, Math.max(min, value));
-  const xMin =
-    toolbarRect.width <= right - left
-      ? left - baseLeft
-      : left + RECOVERY_SIZE - baseRight;
-  const xMax = right - baseRight;
-  const yMin =
-    toolbarRect.height <= bottom - top
-      ? top - baseTop
-      : top + RECOVERY_SIZE - baseBottom;
-  const yMax = bottom - baseBottom;
-  return { x: clamp(xMin, xMax, position.x), y: clamp(yMin, yMax, position.y) };
-}
-
-export function getResponsiveToolbarDensity(
-  selectedDensity: ToolbarDensity,
-  currentDensity: ToolbarDensity,
-  availableInlineSize: number,
-  requiredInlineSize: number,
-): ToolbarDensity {
-  if (selectedDensity === "icon") return "icon";
-  if (!Number.isFinite(availableInlineSize) || availableInlineSize <= 0)
-    return currentDensity;
-  if (!Number.isFinite(requiredInlineSize) || requiredInlineSize <= 0)
-    return currentDensity;
-  if (currentDensity === "icon")
-    return availableInlineSize >= requiredInlineSize * 1.15
-      ? selectedDensity
-      : currentDensity;
-  return availableInlineSize < requiredInlineSize * 1.1
-    ? "icon"
-    : selectedDensity;
-}
diff --git a/plugins/ssh-terminal/src/frontend/terminal/toolbar-settings.ts b/plugins/ssh-terminal/src/frontend/terminal/toolbar-settings.ts
deleted file mode 100644
index f4c344087..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/toolbar-settings.ts
+++ /dev/null
@@ -1,82 +0,0 @@
-import type { ToolbarDensity } from "./toolbar-geometry";
-
-export const TOOLBAR_ANCHORS = [
-  "bottom",
-  "bottom-left",
-  "bottom-right",
-  "top",
-  "top-left",
-  "top-right",
-] as const;
-export type ToolbarAnchor = (typeof TOOLBAR_ANCHORS)[number];
-
-export interface ToolbarSettings {
-  anchor: ToolbarAnchor;
-  startCollapsed: boolean;
-  /** null keeps whatever mode the user last picked in the toolbar. */
-  density: ToolbarDensity | null;
-  showStatus: boolean;
-  fadeWhenIdle: boolean;
-}
-
-export const DEFAULT_TOOLBAR_SETTINGS: ToolbarSettings = {
-  anchor: "bottom",
-  startCollapsed: false,
-  density: null,
-  showStatus: true,
-  fadeWhenIdle: true,
-};
-
-const DENSITIES: ToolbarDensity[] = ["icon", "labeled", "expanded"];
-
-/** The toolbar's host settings, as the host payload carries them. */
-export function readToolbarSettings(
-  host: object | null | undefined,
-): ToolbarSettings {
-  const values =
-    (
-      host as {
-        pluginSettings?: Record<string, Record<string, unknown>>;
-      } | null
-    )?.pluginSettings?.["ssh-terminal"] ?? {};
-  const anchor = values.terminalToolbarPosition;
-  const density = values.terminalToolbarDisplay;
-  const bool = (value: unknown, fallback: boolean) =>
-    typeof value === "boolean" ? value : fallback;
-  return {
-    anchor: TOOLBAR_ANCHORS.includes(anchor as ToolbarAnchor)
-      ? (anchor as ToolbarAnchor)
-      : DEFAULT_TOOLBAR_SETTINGS.anchor,
-    startCollapsed: values.terminalToolbarStartState === "collapsed",
-    density: DENSITIES.includes(density as ToolbarDensity)
-      ? (density as ToolbarDensity)
-      : null,
-    showStatus: bool(
-      values.terminalToolbarShowStatus,
-      DEFAULT_TOOLBAR_SETTINGS.showStatus,
-    ),
-    fadeWhenIdle: bool(
-      values.terminalToolbarFade,
-      DEFAULT_TOOLBAR_SETTINGS.fadeWhenIdle,
-    ),
-  };
-}
-
-export function isLeftAnchor(anchor: ToolbarAnchor): boolean {
-  return anchor.endsWith("-left");
-}
-
-export function isTopAnchor(anchor: ToolbarAnchor): boolean {
-  return anchor.startsWith("top");
-}
-
-/** Flex placement for the full-size overlay that holds the toolbar. */
-export function toolbarAnchorClasses(anchor: ToolbarAnchor): string {
-  const vertical = isTopAnchor(anchor) ? "items-start pt-2" : "items-end pb-2";
-  const horizontal = anchor.endsWith("-left")
-    ? "justify-start pl-2"
-    : anchor.endsWith("-right")
-      ? "justify-end pr-2"
-      : "justify-center";
-  return `${vertical} ${horizontal}`;
-}
diff --git a/plugins/ssh-terminal/src/frontend/terminal/touch-input-settings-store.ts b/plugins/ssh-terminal/src/frontend/terminal/touch-input-settings-store.ts
deleted file mode 100644
index a571842b6..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/touch-input-settings-store.ts
+++ /dev/null
@@ -1,31 +0,0 @@
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import { getClientSettings } from "../terminal-api";
-import {
-  TOUCH_INPUT_DEFAULTS,
-  type TouchInputSettings,
-} from "../../shared/touch-input-settings";
-
-let cached: TouchInputSettings | undefined;
-let pending: Promise<TouchInputSettings> | undefined;
-
-export function loadTouchInputSettings(
-  api: PluginApiClient,
-): Promise<TouchInputSettings> {
-  if (cached) return Promise.resolve(cached);
-  pending ??= getClientSettings(api)
-    .then((settings) => (cached = settings.touchInput))
-    .catch(() => (cached = { ...TOUCH_INPUT_DEFAULTS }))
-    .finally(() => {
-      pending = undefined;
-    });
-  return pending;
-}
-
-export function cacheTouchInputSettings(settings: TouchInputSettings): void {
-  cached = settings;
-}
-
-export function resetTouchInputSettingsCache(): void {
-  cached = undefined;
-  pending = undefined;
-}
diff --git a/plugins/ssh-terminal/src/frontend/terminal/touch-wheel-coordinator.ts b/plugins/ssh-terminal/src/frontend/terminal/touch-wheel-coordinator.ts
deleted file mode 100644
index 64f30763d..000000000
--- a/plugins/ssh-terminal/src/frontend/terminal/touch-wheel-coordinator.ts
+++ /dev/null
@@ -1,335 +0,0 @@
-import {
-  TOUCH_INPUT_DEFAULTS,
-  type TouchInputSettings,
-} from "../../shared/touch-input-settings";
-
-export interface TouchWheelPoint {
-  clientX: number;
-  clientY: number;
-}
-
-export interface SyntheticWheelInput extends TouchWheelPoint {
-  deltaY: number;
-  deltaMode: number;
-}
-
-interface TouchWheelTiming {
-  now: () => number;
-  requestFrame: (callback: FrameRequestCallback) => number;
-  cancelFrame: (handle: number) => void;
-  momentumAllowed: () => boolean;
-}
-
-const defaultTiming: TouchWheelTiming = {
-  now: () => performance.now(),
-  requestFrame: (callback) => requestAnimationFrame(callback),
-  cancelFrame: (handle) => cancelAnimationFrame(handle),
-  momentumAllowed: () => true,
-};
-
-interface VelocitySample {
-  deltaY: number;
-  durationMs: number;
-  endedAt: number;
-}
-
-export class TouchWheelCoordinator {
-  private startY: number | undefined;
-  private lastPoint: TouchWheelPoint | undefined;
-  private pendingDeltaY = 0;
-  private scrolling = false;
-  private cancelled = false;
-  private velocitySamples: VelocitySample[] = [];
-  private lastMoveTime: number | undefined;
-  private momentumFrame: number | undefined;
-  private momentumRemainderY = 0;
-
-  constructor(
-    private readonly emitWheel: (input: SyntheticWheelInput) => void,
-    private readonly dragThresholdPx: number = TOUCH_INPUT_DEFAULTS.dragThresholdPx,
-    private readonly maxWheelDeltaPx: number = TOUCH_INPUT_DEFAULTS.maxWheelDeltaPx,
-    private readonly timing: TouchWheelTiming = defaultTiming,
-    private readonly settings: TouchInputSettings = TOUCH_INPUT_DEFAULTS,
-  ) {}
-
-  start(point: TouchWheelPoint | undefined, time = this.timing.now()): void {
-    this.reset();
-    if (!point) {
-      this.cancelled = true;
-      return;
-    }
-    this.startY = point.clientY;
-    this.lastPoint = point;
-    this.lastMoveTime = time;
-  }
-
-  move(point: TouchWheelPoint | undefined, time = this.timing.now()): boolean {
-    if (this.cancelled || !point || !this.lastPoint) {
-      if (!point) this.cancel();
-      return false;
-    }
-
-    const deltaY = this.lastPoint.clientY - point.clientY;
-    this.pendingDeltaY += deltaY;
-    this.lastPoint = point;
-    if (this.lastMoveTime !== undefined && time > this.lastMoveTime) {
-      this.velocitySamples.push({
-        deltaY,
-        durationMs: time - this.lastMoveTime,
-        endedAt: time,
-      });
-      this.velocitySamples = this.velocitySamples.filter(
-        (sample) =>
-          time - sample.endedAt <= this.settings.momentumSampleWindowMs,
-      );
-    }
-    this.lastMoveTime = time;
-
-    if (!this.scrolling) {
-      if (Math.abs(point.clientY - this.startY!) < this.dragThresholdPx) {
-        return true;
-      }
-      this.scrolling = true;
-    }
-
-    this.flush(point);
-    return true;
-  }
-
-  end(time = this.timing.now()): void {
-    const point = this.lastPoint;
-    const velocity = this.scrolling ? this.recentVelocity(time) : 0;
-    this.clearGesture();
-    if (
-      point &&
-      this.timing.momentumAllowed() &&
-      Math.abs(velocity) >= this.settings.minimumVelocityPxPerMs
-    ) {
-      this.startMomentum(point, velocity, time);
-    }
-  }
-
-  cancel(): void {
-    this.reset();
-    this.cancelled = true;
-  }
-
-  private flush(point: TouchWheelPoint): void {
-    while (Math.abs(this.pendingDeltaY) > this.maxWheelDeltaPx) {
-      const deltaY = Math.sign(this.pendingDeltaY) * this.maxWheelDeltaPx;
-      this.emitWheel({
-        ...point,
-        deltaY,
-        deltaMode: WheelEvent.DOM_DELTA_PIXEL,
-      });
-      this.pendingDeltaY -= deltaY;
-    }
-    if (this.pendingDeltaY !== 0) {
-      this.emitWheel({
-        ...point,
-        deltaY: this.pendingDeltaY,
-        deltaMode: WheelEvent.DOM_DELTA_PIXEL,
-      });
-      this.pendingDeltaY = 0;
-    }
-  }
-
-  private reset(): void {
-    this.stopMomentum();
-    this.clearGesture();
-    this.cancelled = false;
-  }
-
-  private clearGesture(): void {
-    this.startY = undefined;
-    this.lastPoint = undefined;
-    this.pendingDeltaY = 0;
-    this.scrolling = false;
-    this.velocitySamples = [];
-    this.lastMoveTime = undefined;
-  }
-
-  private recentVelocity(time: number): number {
-    const newestSampleTime = this.velocitySamples.at(-1)?.endedAt;
-    if (
-      newestSampleTime === undefined ||
-      time - newestSampleTime > this.settings.releaseGracePeriodMs
-    ) {
-      return 0;
-    }
-    const samples = this.velocitySamples.filter(
-      (sample) =>
-        newestSampleTime - sample.endedAt <=
-        this.settings.momentumSampleWindowMs,
-    );
-    const duration = samples.reduce(
-      (total, sample) => total + sample.durationMs,
-      0,
-    );
-    if (duration === 0) return 0;
-    const distance = samples.reduce(
-      (total, sample) => total + sample.deltaY,
-      0,
-    );
-    return Math.max(
-      -this.settings.maximumVelocityPxPerMs,
-      Math.min(this.settings.maximumVelocityPxPerMs, distance / duration),
-    );
-  }
-
-  private startMomentum(
-    point: TouchWheelPoint,
-    initialVelocity: number,
-    startedAt: number,
-  ): void {
-    let lastTime = startedAt;
-    let travelled = 0;
-
-    const step = (time: number) => {
-      if (!this.timing.momentumAllowed()) {
-        this.momentumFrame = undefined;
-        this.momentumRemainderY = 0;
-        return;
-      }
-
-      const elapsed = Math.max(0, time - startedAt);
-      const remainingTravel = this.settings.maximumTravelPx - travelled;
-      if (elapsed > this.settings.maximumDurationMs || remainingTravel <= 0) {
-        this.momentumFrame = undefined;
-        return;
-      }
-
-      const duration = Math.min(
-        Math.max(0, time - lastTime),
-        this.settings.maximumFrameIntervalMs,
-      );
-      if (duration > 0) {
-        const frameStart = Math.max(0, elapsed - duration);
-        const distance =
-          Math.abs(initialVelocity) *
-          this.settings.decayTimeMs *
-          (Math.exp(-frameStart / this.settings.decayTimeMs) -
-            Math.exp(-elapsed / this.settings.decayTimeMs));
-        const deltaY =
-          Math.sign(initialVelocity) * Math.min(distance, remainingTravel);
-        this.flushMomentum(point, deltaY);
-        travelled += Math.abs(deltaY);
-      }
-
-      lastTime = time;
-      if (
-        elapsed < this.settings.maximumDurationMs &&
-        travelled < this.settings.maximumTravelPx
-      ) {
-        this.momentumFrame = this.timing.requestFrame(step);
-      } else {
-        this.momentumFrame = undefined;
-      }
-    };
-
-    this.momentumFrame = this.timing.requestFrame(step);
-  }
-
-  private flushMomentum(point: TouchWheelPoint, deltaY: number): void {
-    this.momentumRemainderY += deltaY;
-    const availableTicks = Math.trunc(
-      Math.abs(this.momentumRemainderY) / this.settings.pixelsPerTick,
-    );
-    const tickCount = Math.min(
-      availableTicks,
-      this.settings.maximumTicksPerFrame,
-    );
-    const direction = Math.sign(this.momentumRemainderY);
-    for (let index = 0; index < tickCount; index++) {
-      this.emitWheel({
-        ...point,
-        deltaY: direction,
-        deltaMode: WheelEvent.DOM_DELTA_LINE,
-      });
-    }
-    this.momentumRemainderY -=
-      direction * tickCount * this.settings.pixelsPerTick;
-  }
-
-  private stopMomentum(): void {
-    if (this.momentumFrame !== undefined) {
-      this.timing.cancelFrame(this.momentumFrame);
-      this.momentumFrame = undefined;
-    }
-    this.momentumRemainderY = 0;
-  }
-}
-
-export function installTouchWheelCoordinator(
-  terminalElement: HTMLElement,
-  momentumAllowed: () => boolean = () => true,
-  settings: TouchInputSettings = TOUCH_INPUT_DEFAULTS,
-): () => void {
-  if (!settings.enabled) return () => {};
-  const wheelElement = terminalElement.querySelector<HTMLElement>(
-    ".xterm-scrollable-element",
-  );
-  if (!wheelElement) return () => {};
-
-  const coordinator = new TouchWheelCoordinator(
-    ({ deltaY, deltaMode, clientX, clientY }) => {
-      wheelElement.dispatchEvent(
-        new WheelEvent("wheel", {
-          bubbles: true,
-          cancelable: true,
-          composed: true,
-          clientX,
-          clientY,
-          deltaMode,
-          deltaY,
-        }),
-      );
-    },
-    settings.dragThresholdPx,
-    settings.maxWheelDeltaPx,
-    {
-      ...defaultTiming,
-      momentumAllowed: () =>
-        settings.momentumEnabled &&
-        momentumAllowed() &&
-        !window.matchMedia?.("(prefers-reduced-motion: reduce)").matches,
-    },
-    settings,
-  );
-
-  const getSingleTouch = (event: TouchEvent): Touch | undefined =>
-    event.touches.length === 1
-      ? (event.touches.item(0) ?? undefined)
-      : undefined;
-
-  const handleTouchStart = (event: TouchEvent) => {
-    const touch = getSingleTouch(event);
-    coordinator.start(touch);
-  };
-  const handleTouchMove = (event: TouchEvent) => {
-    if (coordinator.move(getSingleTouch(event))) event.preventDefault();
-  };
-  const handleTouchEnd = () => coordinator.end();
-  const handleTouchCancel = () => coordinator.cancel();
-
-  terminalElement.addEventListener("touchstart", handleTouchStart, {
-    passive: true,
-  });
-  terminalElement.addEventListener("touchmove", handleTouchMove, {
-    passive: false,
-  });
-  terminalElement.addEventListener("touchend", handleTouchEnd, {
-    passive: true,
-  });
-  terminalElement.addEventListener("touchcancel", handleTouchCancel, {
-    passive: true,
-  });
-
-  return () => {
-    coordinator.cancel();
-    terminalElement.removeEventListener("touchstart", handleTouchStart);
-    terminalElement.removeEventListener("touchmove", handleTouchMove);
-    terminalElement.removeEventListener("touchend", handleTouchEnd);
-    terminalElement.removeEventListener("touchcancel", handleTouchCancel);
-  };
-}
diff --git a/plugins/ssh-terminal/src/frontend/types.ts b/plugins/ssh-terminal/src/frontend/types.ts
deleted file mode 100644
index b03743a92..000000000
--- a/plugins/ssh-terminal/src/frontend/types.ts
+++ /dev/null
@@ -1,33 +0,0 @@
-import type { HostSshOptions } from "@termix/plugin-sdk/frontend";
-
-/**
- * Host shapes as the terminal reads them. The plugin keeps its
- * own copy instead of importing core's types; only the fields it uses matter,
- * and the index signatures let the rest of a host record through.
- */
-
-export type { BackspaceMode as HostBackspaceMode } from "../shared/terminal-settings";
-
-/** A host as the shell hands it to a tab. */
-export interface Host {
-  id: number | string;
-  name?: string;
-  ip: string;
-  port: number;
-  username: string;
-  sshOptions?: HostSshOptions | null;
-  pluginSettings?: Record<string, Record<string, unknown>>;
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  [key: string]: any;
-}
-
-/** Enough of a snippet for the variables dialog. */
-export interface Snippet {
-  id: number;
-  name: string;
-  content: string;
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  [key: string]: any;
-}
-
-export type TabType = string;
diff --git a/plugins/ssh-terminal/src/shared/terminal-settings.ts b/plugins/ssh-terminal/src/shared/terminal-settings.ts
deleted file mode 100644
index d64fb96d7..000000000
--- a/plugins/ssh-terminal/src/shared/terminal-settings.ts
+++ /dev/null
@@ -1,399 +0,0 @@
-/**
- * The terminal's look and behavior: this plugin's host, user and admin
- * settings, and the 2.8 `terminalConfig` shape they replaced.
- *
- * Shared by the backend (import, the 2.8 host payload) and the frontend (the
- * terminal and the host editor), so both read one list of keys.
- */
-
-export interface TerminalThemeColors {
-  background: string;
-  foreground: string;
-  cursor?: string;
-  cursorAccent?: string;
-  selectionBackground?: string;
-  selectionForeground?: string;
-  black: string;
-  red: string;
-  green: string;
-  yellow: string;
-  blue: string;
-  magenta: string;
-  cyan: string;
-  white: string;
-  brightBlack: string;
-  brightRed: string;
-  brightGreen: string;
-  brightYellow: string;
-  brightBlue: string;
-  brightMagenta: string;
-  brightCyan: string;
-  brightWhite: string;
-}
-
-export interface SyntaxHighlightingOptions {
-  logLevels: boolean;
-  paths: boolean;
-  timestamps: boolean;
-  ipAddresses: boolean;
-  urls: boolean;
-  numbers: boolean;
-}
-
-export type CursorStyle = "block" | "underline" | "bar";
-export type BellStyle = "none" | "sound" | "visual" | "both";
-export type FastScrollModifier = "alt" | "ctrl" | "shift";
-export type BackspaceMode = "normal" | "control-h";
-export type HostLocalEcho = "default" | "off" | "auto" | "on";
-export type HostLinkClickBehavior = "default" | "confirm" | "direct";
-
-/** How a terminal looks. Each value follows the host defaults unless the host sets it. */
-export interface TerminalAppearance {
-  theme: string;
-  cursorBlink: boolean;
-  cursorStyle: CursorStyle;
-  fontSize: number;
-  fontFamily: string;
-  scrollback: number;
-  letterSpacing: number;
-  lineHeight: number;
-  bellStyle: BellStyle;
-  minimumContrastRatio: number;
-  backgroundImage: string;
-  backgroundImageOpacity: number;
-  customThemeColors: TerminalThemeColors | null;
-}
-
-/** How a terminal behaves on one host. */
-export interface TerminalBehavior {
-  rightClickSelectsWord: boolean;
-  macOptionIsMeta: boolean;
-  fastScrollModifier: FastScrollModifier;
-  fastScrollSensitivity: number;
-  backspaceMode: BackspaceMode;
-  autoMosh: boolean;
-  moshCommand: string;
-  autoTmux: boolean;
-  useSSHTitle: boolean;
-  syntaxHighlighting: boolean;
-  syntaxHighlightingOptions: SyntaxHighlightingOptions;
-  linkClickBehavior: HostLinkClickBehavior;
-  localEcho: HostLocalEcho;
-  passwordPromptAutoFill: boolean;
-  sudoPasswordAutoFill: boolean;
-  autoReconnect: boolean;
-}
-
-/** Everything the host editor's Terminal tab edits. */
-export interface HostTerminalSettings
-  extends TerminalAppearance, TerminalBehavior {
-  inheritAppearance: boolean;
-}
-
-export const APPEARANCE_KEYS = [
-  "theme",
-  "cursorBlink",
-  "cursorStyle",
-  "fontSize",
-  "fontFamily",
-  "scrollback",
-  "letterSpacing",
-  "lineHeight",
-  "bellStyle",
-  "minimumContrastRatio",
-  "backgroundImage",
-  "backgroundImageOpacity",
-  "customThemeColors",
-] as const satisfies readonly (keyof TerminalAppearance)[];
-
-export const BEHAVIOR_KEYS = [
-  "rightClickSelectsWord",
-  "macOptionIsMeta",
-  "fastScrollModifier",
-  "fastScrollSensitivity",
-  "backspaceMode",
-  "autoMosh",
-  "moshCommand",
-  "autoTmux",
-  "useSSHTitle",
-  "syntaxHighlighting",
-  "syntaxHighlightingOptions",
-  "linkClickBehavior",
-  "localEcho",
-  "passwordPromptAutoFill",
-  "sudoPasswordAutoFill",
-  "autoReconnect",
-] as const satisfies readonly (keyof TerminalBehavior)[];
-
-export const INHERIT_APPEARANCE_KEY = "inheritAppearance";
-
-export const DEFAULT_MOSH_COMMAND = "mosh-server new -s -l LANG=en_US.UTF-8";
-export const DEFAULT_FONT_FAMILY = "Caskaydia Cove Nerd Font Mono";
-
-export const DEFAULT_SYNTAX_HIGHLIGHTING: SyntaxHighlightingOptions = {
-  logLevels: true,
-  paths: true,
-  timestamps: true,
-  ipAddresses: true,
-  urls: true,
-  numbers: true,
-};
-
-export const DEFAULT_APPEARANCE: TerminalAppearance = {
-  theme: "termix",
-  cursorBlink: true,
-  cursorStyle: "bar",
-  fontSize: 14,
-  fontFamily: DEFAULT_FONT_FAMILY,
-  scrollback: 10000,
-  letterSpacing: 0,
-  lineHeight: 1,
-  bellStyle: "none",
-  minimumContrastRatio: 1,
-  backgroundImage: "",
-  backgroundImageOpacity: 0.15,
-  customThemeColors: null,
-};
-
-export const DEFAULT_BEHAVIOR: TerminalBehavior = {
-  rightClickSelectsWord: false,
-  macOptionIsMeta: false,
-  fastScrollModifier: "alt",
-  fastScrollSensitivity: 5,
-  backspaceMode: "normal",
-  autoMosh: false,
-  moshCommand: "",
-  autoTmux: false,
-  useSSHTitle: false,
-  syntaxHighlighting: true,
-  syntaxHighlightingOptions: DEFAULT_SYNTAX_HIGHLIGHTING,
-  linkClickBehavior: "confirm",
-  localEcho: "auto",
-  passwordPromptAutoFill: true,
-  sudoPasswordAutoFill: false,
-  autoReconnect: false,
-};
-
-export const DEFAULT_HOST_TERMINAL_SETTINGS: HostTerminalSettings = {
-  ...DEFAULT_APPEARANCE,
-  ...DEFAULT_BEHAVIOR,
-  inheritAppearance: true,
-};
-
-export interface SavedCustomTheme {
-  id: string;
-  name: string;
-  colors: TerminalThemeColors;
-}
-
-/** The ssh-terminal user settings the terminal reads. */
-export interface TerminalUserSettings {
-  customThemes: SavedCustomTheme[];
-  commandAutocomplete: boolean;
-  localEcho: "off" | "auto" | "on";
-  linkClickBehavior: "confirm" | "direct";
-}
-
-export const DEFAULT_USER_SETTINGS: TerminalUserSettings = {
-  customThemes: [],
-  commandAutocomplete: false,
-  localEcho: "auto",
-  linkClickBehavior: "confirm",
-};
-
-const ENUMS: Record<string, readonly string[]> = {
-  cursorStyle: ["block", "underline", "bar"],
-  bellStyle: ["none", "sound", "visual", "both"],
-  fastScrollModifier: ["alt", "ctrl", "shift"],
-  backspaceMode: ["normal", "control-h"],
-  linkClickBehavior: ["default", "confirm", "direct"],
-  localEcho: ["default", "off", "auto", "on"],
-};
-
-function isObject(value: unknown): value is Record<string, unknown> {
-  return !!value && typeof value === "object" && !Array.isArray(value);
-}
-
-/** A JSON string or an object as an object, anything else as null. */
-export function asObject(value: unknown): Record<string, unknown> | null {
-  let parsed = value;
-  if (typeof parsed === "string") {
-    if (!parsed) return null;
-    try {
-      parsed = JSON.parse(parsed);
-    } catch {
-      return null;
-    }
-  }
-  return isObject(parsed) ? parsed : null;
-}
-
-function finite(value: unknown): number | undefined {
-  if (value === null || value === undefined || value === "") return undefined;
-  const parsed = Number(value);
-  return Number.isFinite(parsed) ? parsed : undefined;
-}
-
-/** One key's value, typed, or undefined when it does not fit the key. */
-function pick(key: string, value: unknown): unknown {
-  if (value === undefined) return undefined;
-  if (ENUMS[key]) {
-    return typeof value === "string" && ENUMS[key].includes(value)
-      ? value
-      : undefined;
-  }
-  switch (key) {
-    case "theme":
-      if (typeof value !== "string" || !value) return undefined;
-      // 2.8 spelled the app-following theme several ways.
-      return [
-        "Termix Dark",
-        "Termix Light",
-        "termixDark",
-        "termixLight",
-      ].includes(value)
-        ? "termix"
-        : value;
-    case "fontFamily":
-      return typeof value === "string" && value ? value : undefined;
-    case "backgroundImage":
-    case "moshCommand":
-      return value === null
-        ? ""
-        : typeof value === "string"
-          ? value
-          : undefined;
-    case "customThemeColors":
-      return value === null ? null : isObject(value) ? value : undefined;
-    case "syntaxHighlightingOptions":
-      return isObject(value)
-        ? { ...DEFAULT_SYNTAX_HIGHLIGHTING, ...value }
-        : undefined;
-    case "fontSize":
-    case "scrollback":
-    case "letterSpacing":
-    case "lineHeight":
-    case "minimumContrastRatio":
-    case "backgroundImageOpacity":
-    case "fastScrollSensitivity":
-      return finite(value);
-    default:
-      return typeof value === "boolean" ? value : undefined;
-  }
-}
-
-/** The keys of an object that fit, typed, with everything else dropped. */
-export function pickTerminalValues(
-  source: Record<string, unknown> | null | undefined,
-  keys: readonly string[],
-): Record<string, unknown> {
-  const values: Record<string, unknown> = {};
-  if (!source) return values;
-  for (const key of keys) {
-    const value = pick(key, source[key]);
-    if (value !== undefined) values[key] = value;
-  }
-  return values;
-}
-
-/**
- * The host settings a 2.8 `terminalConfig` carried: every behavior key it
- * set, and the appearance keys only when it set any, which is also what
- * turns `inheritAppearance` off (2.8 stripped them to follow the user).
- */
-export function hostSettingsFromTerminalConfig(
-  terminalConfig: unknown,
-): Record<string, unknown> {
-  const config = asObject(terminalConfig);
-  if (!config) return {};
-  const behavior = pickTerminalValues(config, BEHAVIOR_KEYS);
-  const appearance = pickTerminalValues(config, APPEARANCE_KEYS);
-  const values: Record<string, unknown> = { ...behavior };
-  if (APPEARANCE_KEYS.some((key) => key in config)) {
-    Object.assign(values, appearance, { [INHERIT_APPEARANCE_KEY]: false });
-  }
-  return values;
-}
-
-/** Stored host values over the defaults, each one typed. */
-export function readHostTerminalSettings(
-  values: Record<string, unknown> | null | undefined,
-): HostTerminalSettings {
-  const typed = pickTerminalValues(values, [
-    ...APPEARANCE_KEYS,
-    ...BEHAVIOR_KEYS,
-  ]);
-  const inherit = values?.[INHERIT_APPEARANCE_KEY];
-  return {
-    ...DEFAULT_HOST_TERMINAL_SETTINGS,
-    ...typed,
-    inheritAppearance: typeof inherit === "boolean" ? inherit : true,
-  } as HostTerminalSettings;
-}
-
-export function readUserSettings(
-  values: Record<string, unknown> | null | undefined,
-): TerminalUserSettings {
-  const source = values ?? {};
-  const themes = Array.isArray(source.customThemes)
-    ? source.customThemes
-    : typeof source.customThemes === "string"
-      ? (() => {
-          try {
-            const parsed = JSON.parse(source.customThemes as string);
-            return Array.isArray(parsed) ? parsed : [];
-          } catch {
-            return [];
-          }
-        })()
-      : [];
-  return {
-    customThemes: themes.filter(
-      (theme): theme is SavedCustomTheme =>
-        isObject(theme) &&
-        typeof theme.id === "string" &&
-        typeof theme.name === "string" &&
-        isObject(theme.colors),
-    ),
-    commandAutocomplete: source.commandAutocomplete === true,
-    localEcho:
-      source.localEcho === "off" || source.localEcho === "on"
-        ? source.localEcho
-        : "auto",
-    linkClickBehavior:
-      source.linkClickBehavior === "direct" ? "direct" : "confirm",
-  };
-}
-
-/**
- * What a terminal on a host runs with: the host's values over the built-in
- * ones. The host's values already follow its host defaults, and for a host
- * shared with this user its look follows theirs.
- */
-export function resolveTerminalSettings(
-  host: HostTerminalSettings | null | undefined,
-): TerminalAppearance & TerminalBehavior {
-  const own = host ?? DEFAULT_HOST_TERMINAL_SETTINGS;
-  const resolved = {} as Record<string, unknown>;
-  for (const key of APPEARANCE_KEYS) {
-    resolved[key] = own[key] ?? DEFAULT_APPEARANCE[key];
-  }
-  for (const key of BEHAVIOR_KEYS) resolved[key] = own[key];
-  return resolved as unknown as TerminalAppearance & TerminalBehavior;
-}
-
-/**
- * The host's settings in the 2.8 `terminalConfig` shape, for clients that
- * still read it (Termix-Mobile).
- */
-export function terminalConfigFromHostSettings(
-  values: Record<string, unknown>,
-): Record<string, unknown> {
-  const settings = readHostTerminalSettings(values);
-  const config: Record<string, unknown> = {};
-  for (const key of BEHAVIOR_KEYS) config[key] = settings[key];
-  for (const key of APPEARANCE_KEYS) config[key] = settings[key];
-  if (config.linkClickBehavior === "default") delete config.linkClickBehavior;
-  if (config.localEcho === "default") delete config.localEcho;
-  return config;
-}
diff --git a/plugins/ssh-terminal/src/shared/touch-input-settings.ts b/plugins/ssh-terminal/src/shared/touch-input-settings.ts
deleted file mode 100644
index bd98b0c17..000000000
--- a/plugins/ssh-terminal/src/shared/touch-input-settings.ts
+++ /dev/null
@@ -1,127 +0,0 @@
-export const TOUCH_INPUT_SETTING_KEY = "touch_input_settings";
-
-export interface TouchInputSettings {
-  enabled: boolean;
-  momentumEnabled: boolean;
-  dragThresholdPx: number;
-  maxWheelDeltaPx: number;
-  momentumSampleWindowMs: number;
-  releaseGracePeriodMs: number;
-  minimumVelocityPxPerMs: number;
-  maximumVelocityPxPerMs: number;
-  maximumDurationMs: number;
-  maximumTravelPx: number;
-  decayTimeMs: number;
-  pixelsPerTick: number;
-  maximumFrameIntervalMs: number;
-  maximumTicksPerFrame: number;
-}
-
-export const TOUCH_INPUT_DEFAULTS: TouchInputSettings = {
-  enabled: true,
-  momentumEnabled: true,
-  dragThresholdPx: 6,
-  maxWheelDeltaPx: 120,
-  momentumSampleWindowMs: 100,
-  releaseGracePeriodMs: 120,
-  minimumVelocityPxPerMs: 0.15,
-  maximumVelocityPxPerMs: 2.5,
-  maximumDurationMs: 1_000,
-  maximumTravelPx: 720,
-  decayTimeMs: 300,
-  pixelsPerTick: 12,
-  maximumFrameIntervalMs: 32,
-  maximumTicksPerFrame: 4,
-};
-
-export type TouchInputNumericKey = Exclude<
-  keyof TouchInputSettings,
-  "enabled" | "momentumEnabled"
->;
-
-export const TOUCH_INPUT_NUMERIC_BOUNDS: Record<
-  TouchInputNumericKey,
-  { min: number; max: number; step: number }
-> = {
-  dragThresholdPx: { min: 0, max: 100, step: 1 },
-  maxWheelDeltaPx: { min: 1, max: 1_000, step: 1 },
-  momentumSampleWindowMs: { min: 10, max: 1_000, step: 10 },
-  releaseGracePeriodMs: { min: 0, max: 2_000, step: 10 },
-  minimumVelocityPxPerMs: { min: 0, max: 10, step: 0.01 },
-  maximumVelocityPxPerMs: { min: 0.01, max: 20, step: 0.01 },
-  maximumDurationMs: { min: 0, max: 10_000, step: 100 },
-  maximumTravelPx: { min: 0, max: 10_000, step: 10 },
-  decayTimeMs: { min: 1, max: 5_000, step: 10 },
-  pixelsPerTick: { min: 1, max: 500, step: 1 },
-  maximumFrameIntervalMs: { min: 1, max: 1_000, step: 1 },
-  maximumTicksPerFrame: { min: 1, max: 100, step: 1 },
-};
-
-export function normalizeTouchInputSettings(
-  value: unknown,
-): TouchInputSettings {
-  if (!value || typeof value !== "object" || Array.isArray(value)) {
-    return { ...TOUCH_INPUT_DEFAULTS };
-  }
-
-  const input = value as Record<string, unknown>;
-  const normalized: TouchInputSettings = { ...TOUCH_INPUT_DEFAULTS };
-  for (const key of ["enabled", "momentumEnabled"] as const) {
-    if (typeof input[key] === "boolean") normalized[key] = input[key];
-  }
-  for (const [key, bounds] of Object.entries(TOUCH_INPUT_NUMERIC_BOUNDS) as [
-    TouchInputNumericKey,
-    { min: number; max: number },
-  ][]) {
-    const candidate = input[key];
-    if (
-      typeof candidate === "number" &&
-      Number.isFinite(candidate) &&
-      candidate >= bounds.min &&
-      candidate <= bounds.max
-    ) {
-      normalized[key] = candidate;
-    }
-  }
-  return normalized;
-}
-
-export function validateTouchInputSettingsUpdate(
-  value: unknown,
-): string | null {
-  if (!value || typeof value !== "object" || Array.isArray(value)) {
-    return "settings must be an object";
-  }
-  const input = value as Record<string, unknown>;
-  const validKeys = new Set(Object.keys(TOUCH_INPUT_DEFAULTS));
-  const unknownKey = Object.keys(input).find((key) => !validKeys.has(key));
-  if (unknownKey) return `Unknown touch input setting: ${unknownKey}`;
-  for (const key of ["enabled", "momentumEnabled"] as const) {
-    if (key in input && typeof input[key] !== "boolean") {
-      return `${key} must be a boolean`;
-    }
-  }
-  for (const [key, bounds] of Object.entries(TOUCH_INPUT_NUMERIC_BOUNDS) as [
-    TouchInputNumericKey,
-    { min: number; max: number },
-  ][]) {
-    if (!(key in input)) continue;
-    const candidate = input[key];
-    if (
-      typeof candidate !== "number" ||
-      !Number.isFinite(candidate) ||
-      candidate < bounds.min ||
-      candidate > bounds.max
-    ) {
-      return `${key} must be a number between ${bounds.min} and ${bounds.max}`;
-    }
-  }
-  if (
-    typeof input.minimumVelocityPxPerMs === "number" &&
-    typeof input.maximumVelocityPxPerMs === "number" &&
-    input.minimumVelocityPxPerMs > input.maximumVelocityPxPerMs
-  ) {
-    return "minimumVelocityPxPerMs must not exceed maximumVelocityPxPerMs";
-  }
-  return null;
-}
diff --git a/plugins/ssh-terminal/tests/backend/activate.test.ts b/plugins/ssh-terminal/tests/backend/activate.test.ts
deleted file mode 100644
index 6fe042878..000000000
--- a/plugins/ssh-terminal/tests/backend/activate.test.ts
+++ /dev/null
@@ -1,110 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import express from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import { PluginCapabilityError } from "@termix/plugin-sdk/backend";
-import { activate } from "../../src/backend/index.js";
-import { hostImportNormalizer } from "../../src/backend/host-import.js";
-import type {
-  LiveSessionsV1,
-  TerminalHistoryV1,
-} from "../../src/backend/services.js";
-import { manifest, pluginDir, startServer, type TestServer } from "./helpers";
-
-let db: TestDb | null = null;
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  db?.close();
-  db = null;
-  await server?.close();
-  server = null;
-});
-
-describe("ssh-terminal activate", () => {
-  it("serves the terminal socket", async () => {
-    server = await startServer();
-    expect(server.mock.wsRoutes).toMatchObject([
-      { path: "/terminal", raw: false },
-    ]);
-  });
-
-  it("provides sessions.live as ssh and terminal.history", async () => {
-    server = await startServer();
-    const live = server.mock.services.get(
-      "sessions.live#ssh",
-    ) as LiveSessionsV1;
-    expect(live.getSession("missing")).toBeNull();
-    expect(live.listForUser("user-1")).toEqual([]);
-    expect(live.write("missing", "ls\r")).toBe(false);
-    expect(live.idleTimeoutMinutes()).toBe(30);
-
-    await server.request("POST", "/command-history", {
-      body: { hostId: 1, command: "df -h" },
-    });
-    const history = server.mock.services.get(
-      "terminal.history",
-    ) as TerminalHistoryV1;
-    const listed = await server.mock.actAs("user-1", () => history.list(1, 10));
-    expect(listed.map((entry) => entry.command)).toEqual(["df -h"]);
-  });
-
-  it("keeps a plugin caller to its own actor's sessions", async () => {
-    server = await startServer();
-    const live = server.mock.services.get(
-      "sessions.live#ssh",
-    ) as LiveSessionsV1;
-    const other = await server.mock.actAs("user-2", async () =>
-      live.listForUser("user-1"),
-    );
-    expect(other).toEqual([]);
-  });
-
-  it("uses the admin session timeout for detached sessions", async () => {
-    server = await startServer({ settings: { sessionTimeoutMinutes: 90 } });
-    const live = server.mock.services.get(
-      "sessions.live#ssh",
-    ) as LiveSessionsV1;
-    expect(live.idleTimeoutMinutes()).toBe(90);
-  });
-
-  it("offers a host import normalizer", async () => {
-    server = await startServer();
-    expect(
-      server.mock.ctx.registry.consume("ssh-terminal.hostImportNormalizer"),
-    ).toBe(hostImportNormalizer);
-  });
-
-  it.each(["db:own", "network:serve"])(
-    "fails closed without %s",
-    async (capability) => {
-      db = await createTestDb(pluginDir);
-      const mock = createMockCtx({
-        pluginId: manifest.id,
-        manifest,
-        capabilities: manifest.capabilities.filter((c) => c !== capability),
-        db: db.database,
-        router: () => express.Router(),
-      });
-      await expect(activate(mock.ctx)).rejects.toBeInstanceOf(
-        PluginCapabilityError,
-      );
-      for (const dispose of [...mock.disposals].reverse()) await dispose();
-    },
-  );
-});
-
-describe("host import", () => {
-  it("carries the terminal switches of an imported host", () => {
-    expect(hostImportNormalizer({ name: "web" })).toBeNull();
-    expect(
-      hostImportNormalizer({
-        enableTerminal: false,
-        enableCommandHistory: true,
-      }),
-    ).toEqual({ enableTerminal: false, enableCommandHistory: true });
-  });
-});
diff --git a/plugins/ssh-terminal/tests/backend/guest-socket.test.ts b/plugins/ssh-terminal/tests/backend/guest-socket.test.ts
deleted file mode 100644
index a8bae3557..000000000
--- a/plugins/ssh-terminal/tests/backend/guest-socket.test.ts
+++ /dev/null
@@ -1,126 +0,0 @@
-/**
- * A share-link guest only ever acts as a participant. Once it has left the
- * session it can send nothing, so a read-only guest cannot "disconnect" and
- * then type into the owner's shell.
- */
-
-import { EventEmitter } from "node:events";
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { createTerminalSocket } from "../../src/backend/terminal-socket.js";
-
-class FakeSocket extends EventEmitter {
-  readyState = 1;
-  sent: string[] = [];
-  closedWith: number | null = null;
-  send(message: string) {
-    this.sent.push(message);
-  }
-  close(code = 1000) {
-    this.closedWith = code;
-    this.readyState = 3;
-    this.emit("close");
-  }
-  ping() {}
-  terminate() {
-    this.close(1006);
-  }
-  message(type: string, data?: unknown) {
-    this.emit("message", Buffer.from(JSON.stringify({ type, data })));
-  }
-}
-
-function fakeSessions(permissionLevel: "read-only" | "read-write") {
-  const written: string[] = [];
-  const participants = new Map<
-    unknown,
-    { isOwner: boolean; permissionLevel: string }
-  >();
-  const session = {
-    isConnected: true,
-    sshStream: { write: (chunk: Buffer) => written.push(chunk.toString()) },
-  };
-  const manager = {
-    getSession: (id: string) => (id === "s1" ? session : null),
-    joinAsParticipant: (_id: string, ws: unknown) => {
-      participants.set(ws, { isOwner: false, permissionLevel });
-      return "s1";
-    },
-    getBuffer: () => "",
-    getParticipantForWs: (_session: unknown, ws: unknown) =>
-      participants.get(ws) ?? null,
-    removeParticipant: (_id: string, ws: unknown) => {
-      participants.delete(ws);
-    },
-    bufferInput: () => {},
-  };
-  return { manager, written };
-}
-
-function socketFor(permissionLevel: "read-only" | "read-write") {
-  const sessions = fakeSessions(permissionLevel);
-  const log = { info: vi.fn(), warn: vi.fn(), error: vi.fn(), debug: vi.fn() };
-  const terminal = createTerminalSocket({
-    ctx: {} as never,
-    log: log as never,
-    sessionManager: sessions.manager as never,
-    getTmux: () => null,
-    getSharing: () => null,
-    getGuests: () => ({
-      resolve: async () => ({
-        ok: true,
-        share: { id: "share-1", sessionId: "s1", permissionLevel },
-      }),
-      recordJoin: async () => {},
-    }),
-  } as never);
-  return { terminal, written: sessions.written };
-}
-
-async function joinAsGuest(terminal: ReturnType<typeof socketFor>["terminal"]) {
-  const ws = new FakeSocket();
-  await terminal.handleConnection({
-    socket: ws,
-    request: { url: "/terminal?shareToken=abc", headers: {} },
-    userId: "",
-    clientIp: "10.0.0.1",
-    requestOrigin: "",
-    isDataUnlocked: () => false,
-  } as never);
-  return ws;
-}
-
-let cleanup: Array<() => void> = [];
-afterEach(() => {
-  cleanup.forEach((fn) => fn());
-  cleanup = [];
-});
-
-describe("share-link guests", () => {
-  it("cannot type into a read-only session", async () => {
-    const { terminal, written } = socketFor("read-only");
-    const ws = await joinAsGuest(terminal);
-    cleanup.push(() => terminal.closeAll());
-    ws.message("input", "rm -rf ~\n");
-    expect(written).toEqual([]);
-  });
-
-  it("cannot type after leaving the session", async () => {
-    const { terminal, written } = socketFor("read-only");
-    const ws = await joinAsGuest(terminal);
-    cleanup.push(() => terminal.closeAll());
-    ws.message("disconnect");
-    ws.message("input", "rm -rf ~\n");
-    expect(written).toEqual([]);
-    expect(ws.closedWith).toBe(1000);
-  });
-
-  it("a read-write guest types until it leaves", async () => {
-    const { terminal, written } = socketFor("read-write");
-    const ws = await joinAsGuest(terminal);
-    cleanup.push(() => terminal.closeAll());
-    ws.message("input", "ls\n");
-    ws.message("disconnect");
-    ws.message("input", "whoami\n");
-    expect(written).toEqual(["ls\n"]);
-  });
-});
diff --git a/plugins/ssh-terminal/tests/backend/helpers.ts b/plugins/ssh-terminal/tests/backend/helpers.ts
deleted file mode 100644
index ef1b3dfee..000000000
--- a/plugins/ssh-terminal/tests/backend/helpers.ts
+++ /dev/null
@@ -1,98 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import type { PluginHostSummary } from "@termix/plugin-sdk/backend";
-import manifestJson from "../../manifest.json";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-export const manifest = manifestJson as unknown as PluginManifest;
-
-export interface TestServer {
-  db: TestDb;
-  mock: MockPluginContext;
-  request: (
-    method: string,
-    path: string,
-    options?: { user?: string; body?: unknown },
-    // Route bodies vary per test; asserting on them is the point.
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any }>;
-  close: () => Promise<void>;
-}
-
-/**
- * The plugin activated against a real in-memory database, its router mounted
- * the way core mounts it, with the acting user taken from a test header.
- */
-export async function startServer(
-  options: {
-    permissions?: string[];
-    settings?: Record<string, unknown>;
-    hosts?: PluginHostSummary[];
-  } = {},
-): Promise<TestServer> {
-  const db = await createTestDb(pluginDir);
-  for (const user of ["user-1", "user-2"]) {
-    db.sqlite
-      .prepare("INSERT INTO users (id, username) VALUES (?, ?)")
-      .run(user, user);
-  }
-  db.sqlite.exec("INSERT INTO ssh_data (id) VALUES (1), (2)");
-
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    permissions: options.permissions,
-    settings: options.settings,
-    hosts: options.hosts,
-  });
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") ?? undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    db,
-    mock,
-    async request(method, path, { user = "user-1", body: given } = {}) {
-      const body = method === "GET" ? undefined : given;
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        headers: {
-          "x-test-user": user,
-          ...(body !== undefined ? { "content-type": "application/json" } : {}),
-        },
-        body: body !== undefined ? JSON.stringify(body) : undefined,
-      });
-      const text = await response.text();
-      return { status: response.status, body: text ? JSON.parse(text) : null };
-    },
-    async close() {
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-      for (const dispose of [...mock.disposals].reverse()) await dispose();
-      db.close();
-    },
-  };
-}
diff --git a/plugins/ssh-terminal/tests/backend/host-import.test.ts b/plugins/ssh-terminal/tests/backend/host-import.test.ts
deleted file mode 100644
index 83e2a3e48..000000000
--- a/plugins/ssh-terminal/tests/backend/host-import.test.ts
+++ /dev/null
@@ -1,70 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  hostImportNormalizer,
-  hostPayloadLegacy,
-} from "../../src/backend/host-import";
-
-describe("hostImportNormalizer", () => {
-  it("reads a 2.8 export's terminalConfig into the host settings", () => {
-    expect(
-      hostImportNormalizer({
-        enableTerminal: false,
-        terminalConfig: {
-          fontSize: 16,
-          autoTmux: true,
-          keepaliveInterval: 30,
-          startupSnippetId: 2,
-        },
-      }),
-    ).toEqual({
-      enableTerminal: false,
-      inheritAppearance: false,
-      fontSize: 16,
-      autoTmux: true,
-    });
-  });
-
-  it("reads the raw JSON a SQLite export carries", () => {
-    expect(
-      hostImportNormalizer({
-        terminalConfig: JSON.stringify({ localEcho: "on" }),
-      }),
-    ).toEqual({ localEcho: "on" });
-  });
-
-  it("leaves terminalConfig alone when the export carries the plugin's own values", () => {
-    expect(
-      hostImportNormalizer({
-        pluginSettings: { "ssh-terminal": { autoTmux: false } },
-        terminalConfig: { autoTmux: true },
-      }),
-    ).toBeNull();
-  });
-
-  it("imports nothing from a row without terminal values", () => {
-    expect(hostImportNormalizer({ name: "x" })).toBeNull();
-  });
-});
-
-describe("hostPayloadLegacy", () => {
-  it("puts the settings back in the 2.8 terminalConfig shape", () => {
-    const { terminalConfig } = hostPayloadLegacy({
-      autoTmux: true,
-      inheritAppearance: true,
-      fontSize: 20,
-    }) as { terminalConfig: Record<string, unknown> };
-    expect(terminalConfig.autoTmux).toBe(true);
-    // The values already follow the host defaults, so the look is included.
-    expect(terminalConfig.fontSize).toBe(20);
-    expect(terminalConfig.localEcho).toBe("auto");
-  });
-
-  it("includes the look of a host that has its own", () => {
-    const { terminalConfig } = hostPayloadLegacy({
-      inheritAppearance: false,
-      fontSize: 20,
-    }) as { terminalConfig: Record<string, unknown> };
-    expect(terminalConfig.fontSize).toBe(20);
-    expect(terminalConfig.theme).toBe("termix");
-  });
-});
diff --git a/plugins/ssh-terminal/tests/backend/images/image-storage-settings.test.ts b/plugins/ssh-terminal/tests/backend/images/image-storage-settings.test.ts
deleted file mode 100644
index 66bd1b969..000000000
--- a/plugins/ssh-terminal/tests/backend/images/image-storage-settings.test.ts
+++ /dev/null
@@ -1,191 +0,0 @@
-import path from "node:path";
-import { describe, expect, it } from "vitest";
-import {
-  DEFAULT_IMAGE_HOST_PATH,
-  DEFAULT_IMAGE_MAX_BYTES,
-  DEFAULT_IMAGE_MAX_COUNT,
-  DEFAULT_IMAGE_TTL_MS,
-  defaultImageLocalDir,
-  parseImageHostPath,
-  parseImageLocalDir,
-  parseTerminalImageStorageMode,
-  resolveTerminalImageStorageSettings,
-  TERMINAL_IMAGE_STORAGE_KEYS,
-} from "../../../src/backend/images/image-storage-settings.js";
-import { createFakeContext } from "@termix/plugin-sdk/testing";
-import { readImageStorageSettings } from "../../../src/backend/settings.js";
-
-// parseImageLocalDir resolves against the host platform, so a POSIX literal
-// becomes a drive-rooted path on Windows. Compare against the same resolution.
-function localDir(posixPath: string): string {
-  return path.resolve(posixPath);
-}
-
-function stubSettings(values: Record<string, string> = {}) {
-  return {
-    get: async (key: string) => values[key] ?? null,
-  };
-}
-
-const EMPTY_ENV: NodeJS.ProcessEnv = {};
-
-describe("terminal image storage settings", () => {
-  describe("mode parsing", () => {
-    it("accepts the three documented modes case-insensitively", () => {
-      expect(parseTerminalImageStorageMode("auto")).toBe("auto");
-      expect(parseTerminalImageStorageMode("LOCAL")).toBe("local");
-      expect(parseTerminalImageStorageMode(" remote-sftp ")).toBe(
-        "remote-sftp",
-      );
-    });
-
-    it("rejects unknown modes and non-strings", () => {
-      expect(parseTerminalImageStorageMode("s3")).toBeNull();
-      expect(parseTerminalImageStorageMode("")).toBeNull();
-      expect(parseTerminalImageStorageMode(undefined)).toBeNull();
-    });
-  });
-
-  describe("path validation", () => {
-    it("accepts absolute local directories and normalizes them", () => {
-      expect(parseImageLocalDir("/var/lib/termix/images")).toBe(
-        localDir("/var/lib/termix/images"),
-      );
-      expect(parseImageLocalDir("/var/lib/termix/../termix/images")).toBeNull();
-    });
-
-    it("rejects relative, empty and NUL-containing local directories", () => {
-      expect(parseImageLocalDir("images")).toBeNull();
-      expect(parseImageLocalDir("./db/data/images")).toBeNull();
-      expect(parseImageLocalDir("")).toBeNull();
-      expect(parseImageLocalDir("/tmp/a\0b")).toBeNull();
-    });
-
-    it("requires the agent-visible host path to be POSIX-absolute", () => {
-      expect(parseImageHostPath("/tmp/termix-image-v0")).toBe(
-        "/tmp/termix-image-v0",
-      );
-      expect(parseImageHostPath("tmp/termix-image-v0")).toBeNull();
-      expect(parseImageHostPath("C:\\images")).toBeNull();
-      expect(parseImageHostPath("/tmp/a\0b")).toBeNull();
-    });
-  });
-
-  describe("resolution precedence", () => {
-    it("uses built-in defaults when neither the database nor env has values", async () => {
-      const resolved = await resolveTerminalImageStorageSettings(
-        stubSettings(),
-        EMPTY_ENV,
-      );
-      expect(resolved.mode).toBe("auto");
-      expect(resolved.localDir).toBe(defaultImageLocalDir(EMPTY_ENV));
-      expect(resolved.hostPath).toBe(DEFAULT_IMAGE_HOST_PATH);
-      expect(resolved.ttlMs).toBe(DEFAULT_IMAGE_TTL_MS);
-      expect(resolved.maxCount).toBe(DEFAULT_IMAGE_MAX_COUNT);
-      expect(resolved.maxBytes).toBe(DEFAULT_IMAGE_MAX_BYTES);
-    });
-
-    it("seeds defaults from legacy TERMIX_IMAGE_* env when no DB value exists", async () => {
-      const resolved = await resolveTerminalImageStorageSettings(
-        stubSettings(),
-        {
-          TERMIX_IMAGE_DIR: "/host-tmp/images",
-          TERMIX_IMAGE_HOST_PATH: "/tmp/images",
-          TERMIX_IMAGE_TTL_MS: "60000",
-          TERMIX_MAX_IMAGE_COUNT: "5",
-          TERMIX_MAX_IMAGE_STORAGE_BYTES: "10485760",
-        },
-      );
-      expect(resolved.localDir).toBe(localDir("/host-tmp/images"));
-      expect(resolved.hostPath).toBe("/tmp/images");
-      expect(resolved.ttlMs).toBe(60_000);
-      expect(resolved.maxCount).toBe(5);
-      expect(resolved.maxBytes).toBe(10_485_760);
-    });
-
-    it("lets persisted DB values win over legacy env values", async () => {
-      const resolved = await resolveTerminalImageStorageSettings(
-        stubSettings({
-          [TERMINAL_IMAGE_STORAGE_KEYS.localDir]: "/db/images",
-          [TERMINAL_IMAGE_STORAGE_KEYS.ttlMs]: "1000",
-          [TERMINAL_IMAGE_STORAGE_KEYS.maxCount]: "7",
-        }),
-        {
-          TERMIX_IMAGE_DIR: "/host-tmp/images",
-          TERMIX_IMAGE_TTL_MS: "60000",
-          TERMIX_MAX_IMAGE_COUNT: "5",
-        },
-      );
-      expect(resolved.localDir).toBe(localDir("/db/images"));
-      expect(resolved.ttlMs).toBe(1_000);
-      expect(resolved.maxCount).toBe(7);
-    });
-
-    it("falls through to env and defaults when the DB value is invalid", async () => {
-      const resolved = await resolveTerminalImageStorageSettings(
-        stubSettings({
-          [TERMINAL_IMAGE_STORAGE_KEYS.localDir]: "relative/path",
-          [TERMINAL_IMAGE_STORAGE_KEYS.ttlMs]: "not-a-number",
-        }),
-        { TERMIX_IMAGE_DIR: "/host-tmp/images" },
-      );
-      expect(resolved.localDir).toBe(localDir("/host-tmp/images"));
-      expect(resolved.ttlMs).toBe(DEFAULT_IMAGE_TTL_MS);
-    });
-
-    it("keeps legacy explicit local mappings on local mode", async () => {
-      const resolved = await resolveTerminalImageStorageSettings(
-        stubSettings(),
-        { TERMIX_IMAGE_DIR: "/host-tmp/images" },
-      );
-      expect(resolved.mode).toBe("local");
-      // hostPath falls back to the legacy local dir, which resolves natively.
-      expect(resolved.hostPath).toBe(localDir("/host-tmp/images"));
-      expect(resolved.localMappingConfigured).toBe(true);
-    });
-
-    it("lets a persisted DB mode override the legacy local mapping", async () => {
-      const resolved = await resolveTerminalImageStorageSettings(
-        stubSettings({
-          [TERMINAL_IMAGE_STORAGE_KEYS.mode]: "remote-sftp",
-        }),
-        { TERMIX_IMAGE_DIR: "/host-tmp/images" },
-      );
-      expect(resolved.mode).toBe("remote-sftp");
-    });
-
-    it("clamps out-of-range numeric values like the legacy env parsing did", async () => {
-      const resolved = await resolveTerminalImageStorageSettings(
-        stubSettings(),
-        {
-          TERMIX_IMAGE_TTL_MS: "-5",
-          TERMIX_MAX_IMAGE_COUNT: "0",
-          TERMIX_MAX_IMAGE_STORAGE_BYTES: "10",
-        },
-      );
-      expect(resolved.ttlMs).toBe(0);
-      expect(resolved.maxCount).toBe(1);
-      expect(resolved.maxBytes).toBe(1_048_576);
-    });
-
-    it("reads the plugin's admin settings, and treats unset fields as unset", async () => {
-      const { ctx } = createFakeContext({
-        settings: {
-          imageStorageMode: "local",
-          imageLocalDir: "/persisted/images",
-        },
-      });
-      const resolved = await readImageStorageSettings(ctx);
-      expect(resolved.mode).toBe("local");
-      expect(resolved.localDir).toBe(localDir("/persisted/images"));
-      // Nothing stored and no environment: the built-in default.
-      expect(resolved.maxCount).toBe(DEFAULT_IMAGE_MAX_COUNT);
-    });
-
-    it("keeps TERMINAL_IMAGE_STORAGE_KEYS as the lookup names", () => {
-      expect(TERMINAL_IMAGE_STORAGE_KEYS.mode).toBe(
-        "terminal_image_storage_mode",
-      );
-    });
-  });
-});
diff --git a/plugins/ssh-terminal/tests/backend/images/image-storage.test.ts b/plugins/ssh-terminal/tests/backend/images/image-storage.test.ts
deleted file mode 100644
index 318459ff4..000000000
--- a/plugins/ssh-terminal/tests/backend/images/image-storage.test.ts
+++ /dev/null
@@ -1,571 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import { EventEmitter } from "events";
-import fs from "fs/promises";
-import os from "os";
-import path from "path";
-import { randomUUID } from "crypto";
-import {
-  REMOTE_IMAGE_DIR,
-  selectImageStorageMode,
-  storeImageLocally,
-  storeImageViaSftp,
-  TerminalImageStorageError,
-  type ImageSftpClient,
-} from "../../../src/backend/images/image-storage.js";
-import type { TerminalImageStorageSettings } from "../../../src/backend/images/image-storage-settings.js";
-
-const PNG_BYTES = Buffer.from([0x89, 0x50, 0x4e, 0x47]);
-
-function settings(
-  overrides: Partial<TerminalImageStorageSettings>,
-): TerminalImageStorageSettings {
-  return {
-    mode: "local",
-    localDir: "/nonexistent",
-    hostPath: "/tmp/termix-image-v0",
-    ttlMs: 3_600_000,
-    maxCount: 100,
-    maxBytes: 5_368_709_120,
-    localMappingConfigured: false,
-    ...overrides,
-  };
-}
-
-describe("selectImageStorageMode", () => {
-  it("keeps explicit modes deterministic regardless of capability", () => {
-    expect(
-      selectImageStorageMode(settings({ mode: "local" }), {
-        remoteSftpAvailable: true,
-      }),
-    ).toBe("local");
-    expect(
-      selectImageStorageMode(settings({ mode: "remote-sftp" }), {
-        remoteSftpAvailable: false,
-      }),
-    ).toBe("remote-sftp");
-  });
-
-  it("falls back on capability only in auto mode", () => {
-    expect(
-      selectImageStorageMode(settings({ mode: "auto" }), {
-        remoteSftpAvailable: true,
-      }),
-    ).toBe("remote-sftp");
-    expect(
-      selectImageStorageMode(settings({ mode: "auto" }), {
-        remoteSftpAvailable: false,
-      }),
-    ).toBe("unavailable");
-    expect(
-      selectImageStorageMode(
-        settings({ mode: "auto", localMappingConfigured: true }),
-        { remoteSftpAvailable: false, localHostVisible: true },
-      ),
-    ).toBe("local");
-  });
-});
-
-describe("storeImageLocally", () => {
-  let dir: string;
-
-  beforeEach(async () => {
-    dir = await fs.mkdtemp(path.join(os.tmpdir(), "termix-images-test-"));
-  });
-
-  afterEach(async () => {
-    await fs.rm(dir, { recursive: true, force: true });
-  });
-
-  async function seedFile(bytes: number, mtimeMs?: number): Promise<string> {
-    const name = `${randomUUID()}.png`;
-    const filePath = path.join(dir, name);
-    await fs.writeFile(filePath, Buffer.alloc(bytes));
-    if (mtimeMs !== undefined) {
-      const date = new Date(mtimeMs);
-      await fs.utimes(filePath, date, date);
-    }
-    return name;
-  }
-
-  it("writes a UUID-named PNG and returns the agent-visible host path", async () => {
-    const stored = await storeImageLocally(
-      PNG_BYTES,
-      settings({ localDir: dir, hostPath: "/host-view/images" }),
-    );
-
-    expect(stored.storage).toBe("local");
-    expect(stored.filename).toBe(`${stored.id}.png`);
-    expect(stored.shellPath).toBe(
-      path.posix.join("/host-view/images", stored.filename),
-    );
-    expect(stored.shellPath).not.toContain(dir);
-    await expect(fs.readFile(path.join(dir, stored.filename))).resolves.toEqual(
-      PNG_BYTES,
-    );
-  });
-
-  it("rejects with IMAGE_STORAGE_LIMIT_REACHED when the count cap is full", async () => {
-    await seedFile(10);
-    const error = await storeImageLocally(
-      PNG_BYTES,
-      settings({ localDir: dir, maxCount: 1 }),
-    ).catch((caught: unknown) => caught);
-
-    expect(error).toBeInstanceOf(TerminalImageStorageError);
-    expect((error as TerminalImageStorageError).code).toBe(
-      "IMAGE_STORAGE_LIMIT_REACHED",
-    );
-  });
-
-  it("rejects with IMAGE_STORAGE_LIMIT_REACHED when the byte cap is full", async () => {
-    await seedFile(900);
-    const error = await storeImageLocally(
-      Buffer.alloc(200),
-      settings({ localDir: dir, maxBytes: 1_000 }),
-    ).catch((caught: unknown) => caught);
-
-    expect((error as TerminalImageStorageError).code).toBe(
-      "IMAGE_STORAGE_LIMIT_REACHED",
-    );
-  });
-
-  it("cleans expired files during upload so they no longer count", async () => {
-    await seedFile(10, Date.now() - 2 * 3_600_000);
-    const stored = await storeImageLocally(
-      PNG_BYTES,
-      settings({ localDir: dir, maxCount: 1, ttlMs: 3_600_000 }),
-    );
-
-    expect(stored.storage).toBe("local");
-    const remaining = await fs.readdir(dir);
-    expect(remaining).toEqual([stored.filename]);
-  });
-
-  it("fails closed when local storage inspection is unavailable", async () => {
-    const blocked = path.join(dir, "blocked-file");
-    await fs.writeFile(blocked, "not a directory");
-
-    const error = await storeImageLocally(
-      PNG_BYTES,
-      settings({ localDir: blocked }),
-    ).catch((caught: unknown) => caught);
-
-    expect(error).toBeInstanceOf(TerminalImageStorageError);
-    expect((error as TerminalImageStorageError).code).toBe(
-      "IMAGE_LOCAL_INSPECTION_FAILED",
-    );
-  });
-  it("reports inspection failures before attempting a write", async () => {
-    const blocked = path.join(dir, "blocked");
-    await fs.writeFile(blocked, "not a directory");
-
-    const error = await storeImageLocally(
-      PNG_BYTES,
-      settings({ localDir: path.join(blocked, "images") }),
-    ).catch((caught: unknown) => caught);
-
-    expect(error).toBeInstanceOf(TerminalImageStorageError);
-    expect((error as TerminalImageStorageError).code).toBe(
-      "IMAGE_LOCAL_INSPECTION_FAILED",
-    );
-  });
-});
-
-describe("storeImageViaSftp", () => {
-  function fakeSftp(behavior: {
-    mkdirError?: Error;
-    writeError?: Error;
-    stallWrite?: boolean;
-    stallLock?: boolean;
-    stallReaddir?: boolean;
-    stallRmdir?: boolean;
-    stallUnlink?: boolean;
-    readdirEntries?: Array<{ filename: string; mtime?: number; size?: number }>;
-    readdirError?: Error;
-    statMode?: number;
-  }): {
-    sftp: ImageSftpClient;
-    written: Map<string, Buffer>;
-    calls: {
-      mkdir: Array<{ dir: string; mode?: number }>;
-      createWriteStream: Array<{ path: string; mode?: number }>;
-    };
-    streams: Array<
-      NodeJS.WritableStream & { destroy: () => void; destroyed: boolean }
-    >;
-  } {
-    const written = new Map<string, Buffer>();
-    const streams: Array<
-      NodeJS.WritableStream & { destroy: () => void; destroyed: boolean }
-    > = [];
-    const calls = { mkdir: [], createWriteStream: [] } as {
-      mkdir: Array<{ dir: string; mode?: number }>;
-      createWriteStream: Array<{ path: string; mode?: number }>;
-    };
-    const sftp = {
-      mkdir: (
-        dir: string,
-        attrsOrCallback: { mode?: number } | ((err?: Error) => void),
-        maybeCallback?: (err?: Error) => void,
-      ) => {
-        const callback =
-          typeof attrsOrCallback === "function"
-            ? attrsOrCallback
-            : maybeCallback!;
-        calls.mkdir.push({
-          dir,
-          mode:
-            typeof attrsOrCallback === "function"
-              ? undefined
-              : attrsOrCallback.mode,
-        });
-        if (
-          behavior.stallLock &&
-          dir === `${REMOTE_IMAGE_DIR}/.termix-write-lock`
-        ) {
-          return;
-        }
-        callback(dir === REMOTE_IMAGE_DIR ? behavior.mkdirError : undefined);
-      },
-      stat: (
-        _dir: string,
-        callback: (error: Error | undefined, attrs?: { mode?: number }) => void,
-      ) => callback(undefined, { mode: behavior.statMode ?? 0o40700 }),
-      chmod: (_dir: string, _mode: number, callback: (error?: Error) => void) =>
-        callback(),
-      readdir: (
-        _dir: string,
-        callback: (
-          error: Error | undefined,
-          entries: Array<{
-            filename: string;
-            attrs?: { mtime?: number; size?: number };
-          }>,
-        ) => void,
-      ) => {
-        if (behavior.stallReaddir) return;
-        callback(
-          behavior.readdirError,
-          behavior.readdirEntries?.map((entry) => ({
-            filename: entry.filename,
-            attrs: entry,
-          })) ?? [],
-        );
-      },
-      createWriteStream: (remotePath: string, options?: { mode?: number }) => {
-        calls.createWriteStream.push({ path: remotePath, mode: options?.mode });
-        const stream = new EventEmitter() as NodeJS.WritableStream & {
-          end: (data: Buffer) => void;
-          destroy: () => void;
-          destroyed: boolean;
-        };
-        stream.destroyed = false;
-        stream.destroy = () => {
-          stream.destroyed = true;
-        };
-        streams.push(stream);
-        (stream as { end: unknown }).end = (data: Buffer) => {
-          if (behavior.stallWrite) return;
-          queueMicrotask(() => {
-            if (behavior.writeError) {
-              stream.emit("error", behavior.writeError);
-              return;
-            }
-            written.set(remotePath, data);
-            stream.emit("close");
-          });
-        };
-        return stream;
-      },
-      unlink: (_remotePath: string, callback: (error?: Error) => void) => {
-        if (behavior.stallUnlink) return;
-        callback();
-      },
-      rmdir: (_dir: string, callback: (error?: Error) => void) => {
-        if (behavior.stallRmdir) return;
-        callback();
-      },
-    } as unknown as ImageSftpClient;
-    return { sftp, written, calls, streams };
-  }
-
-  it("writes into the remote image directory and returns its POSIX path", async () => {
-    const { sftp, written } = fakeSftp({});
-    const stored = await storeImageViaSftp(sftp, PNG_BYTES);
-
-    expect(stored.storage).toBe("remote-sftp");
-    expect(stored.shellPath).toBe(`${REMOTE_IMAGE_DIR}/${stored.id}.png`);
-    expect(written.get(stored.shellPath)).toEqual(PNG_BYTES);
-  });
-
-  it("requests restrictive modes for the remote directory and file", async () => {
-    const { sftp, calls } = fakeSftp({});
-    const stored = await storeImageViaSftp(sftp, PNG_BYTES);
-
-    expect(stored.storage).toBe("remote-sftp");
-    expect(calls.mkdir).toEqual([
-      { dir: REMOTE_IMAGE_DIR, mode: 0o700 },
-      { dir: `${REMOTE_IMAGE_DIR}/.termix-write-lock`, mode: 0o700 },
-    ]);
-    expect(calls.createWriteStream).toEqual([
-      { path: stored.shellPath, mode: 0o600 },
-    ]);
-  });
-  it("removes expired UUID PNGs with best-effort remote retention", async () => {
-    const nowMs = 10_000_000;
-    const expiredName = `${randomUUID()}.png`;
-    const freshName = `${randomUUID()}.png`;
-    const unlinked: string[] = [];
-    const base = fakeSftp({});
-    const sftp = base.sftp as ImageSftpClient & {
-      readdir: (
-        dir: string,
-        callback: (
-          err: Error | undefined,
-          entries: Array<{ filename: string; attrs?: { mtime?: number } }>,
-        ) => void,
-      ) => void;
-      unlink: (remotePath: string, callback: (err?: Error) => void) => void;
-    };
-    sftp.readdir = (_dir, callback) =>
-      callback(undefined, [
-        { filename: expiredName, attrs: { mtime: (nowMs - 7_200_000) / 1000 } },
-        { filename: freshName, attrs: { mtime: nowMs / 1000 } },
-        { filename: "other.txt", attrs: { mtime: 0 } },
-      ]);
-    sftp.unlink = (remotePath, callback) => {
-      unlinked.push(remotePath);
-      callback();
-    };
-
-    await storeImageViaSftp(sftp, PNG_BYTES, {
-      ttlMs: 3_600_000,
-      nowMs,
-    });
-
-    expect(unlinked).toEqual([`${REMOTE_IMAGE_DIR}/${expiredName}`]);
-  });
-  it("fails closed when remote quota inspection fails", async () => {
-    const { sftp } = fakeSftp({
-      readdirError: new Error("remote listing failed"),
-    });
-    const error = await storeImageViaSftp(sftp, PNG_BYTES, {
-      maxCount: 10,
-      maxBytes: 1024,
-    }).catch((caught: unknown) => caught);
-    expect(error).toBeInstanceOf(TerminalImageStorageError);
-    expect((error as TerminalImageStorageError).code).toBe(
-      "IMAGE_REMOTE_QUOTA_UNAVAILABLE",
-    );
-  });
-
-  it("rejects remote writes at the configured count limit", async () => {
-    const { sftp } = fakeSftp({
-      readdirEntries: [{ filename: `${randomUUID()}.png`, size: 12 }],
-    });
-    const error = await storeImageViaSftp(sftp, PNG_BYTES, {
-      maxCount: 1,
-      maxBytes: 1024,
-    }).catch((caught: unknown) => caught);
-    expect(error).toBeInstanceOf(TerminalImageStorageError);
-    expect((error as TerminalImageStorageError).code).toBe(
-      "IMAGE_STORAGE_LIMIT_REACHED",
-    );
-  });
-
-  it("destroys a stalled SFTP write after its timeout", async () => {
-    const { sftp, streams } = fakeSftp({ stallWrite: true });
-    const error = await storeImageViaSftp(sftp, PNG_BYTES, {
-      writeTimeoutMs: 25,
-    }).catch((caught: unknown) => caught);
-
-    expect(error).toBeInstanceOf(TerminalImageStorageError);
-    expect((error as TerminalImageStorageError).code).toBe(
-      "IMAGE_REMOTE_WRITE_FAILED",
-    );
-    expect(streams[0]!.destroyed).toBe(true);
-  });
-  it("rejects an existing remote path that is not a directory", async () => {
-    const { sftp } = fakeSftp({
-      mkdirError: new Error("Failure: file already exists"),
-      statMode: 0o100644,
-    });
-    const error = await storeImageViaSftp(sftp, PNG_BYTES).catch(
-      (caught: unknown) => caught,
-    );
-    expect(error).toBeInstanceOf(TerminalImageStorageError);
-    expect((error as TerminalImageStorageError).code).toBe(
-      "IMAGE_REMOTE_WRITE_FAILED",
-    );
-  });
-
-  it("preserves SFTP client context for directory inspection", async () => {
-    const base = fakeSftp({ mkdirError: new Error("already exists") });
-    const sftp = base.sftp;
-    sftp.lstat = function (
-      this: ImageSftpClient,
-      _dir: string,
-      callback: (error: Error | undefined, attrs?: { mode?: number }) => void,
-    ) {
-      if (this !== sftp) {
-        callback(new Error("SFTP context lost"));
-        return;
-      }
-      callback(undefined, { mode: 0o40700 });
-    };
-    const result = await storeImageViaSftp(sftp, PNG_BYTES);
-    expect(result.storage).toBe("remote-sftp");
-  });
-
-  it("tolerates mkdir failures for an already-existing directory", async () => {
-    const { sftp } = fakeSftp({
-      mkdirError: new Error("Failure: file already exists"),
-    });
-    await expect(storeImageViaSftp(sftp, PNG_BYTES)).resolves.toMatchObject({
-      storage: "remote-sftp",
-    });
-  });
-
-  it("cleans up a partially created remote file after a write failure", async () => {
-    const { sftp } = fakeSftp({ writeError: new Error("write failed") });
-    const unlinked: string[] = [];
-    (sftp as ImageSftpClient).unlink = (remotePath, callback) => {
-      unlinked.push(remotePath);
-      callback();
-    };
-
-    const error = await storeImageViaSftp(sftp, PNG_BYTES).catch(
-      (caught: unknown) => caught,
-    );
-
-    expect(error).toBeInstanceOf(TerminalImageStorageError);
-    expect(unlinked).toHaveLength(1);
-    expect(unlinked[0]).toMatch(
-      new RegExp(`${REMOTE_IMAGE_DIR}/[0-9a-f-]+\\.png`),
-    );
-  });
-
-  it("preserves the write error when partial-file cleanup stalls", async () => {
-    const { sftp } = fakeSftp({
-      writeError: new Error("write failed"),
-      stallUnlink: true,
-    });
-    const error = await storeImageViaSftp(sftp, PNG_BYTES).catch(
-      (caught: unknown) => caught,
-    );
-    expect(error).toBeInstanceOf(TerminalImageStorageError);
-    expect((error as TerminalImageStorageError).code).toBe(
-      "IMAGE_REMOTE_WRITE_FAILED",
-    );
-  }, 5_000);
-
-  it("recovers a stale remote lock before writing", async () => {
-    const base = fakeSftp({});
-    const sftp = base.sftp as ImageSftpClient;
-    const lockPath = `${REMOTE_IMAGE_DIR}/.termix-write-lock`;
-    let lockAttempt = 0;
-    const removed: string[] = [];
-    const originalMkdir = sftp.mkdir.bind(sftp);
-    sftp.mkdir = (dir, attrs, callback) => {
-      if (dir === lockPath && lockAttempt++ === 0) {
-        (typeof attrs === "function" ? attrs : callback!)(new Error("exists"));
-        return;
-      }
-      originalMkdir(dir, attrs, callback);
-    };
-    sftp.lstat = (_dir, callback) =>
-      callback(undefined, {
-        mode: 0o40700,
-        mtime: (Date.now() - 60_000) / 1000,
-      });
-    sftp.rmdir = (dir, callback) => {
-      removed.push(dir);
-      callback();
-    };
-
-    await expect(storeImageViaSftp(sftp, PNG_BYTES)).resolves.toMatchObject({
-      storage: "remote-sftp",
-    });
-    expect(removed).toContain(lockPath);
-  });
-
-  it("does not replace a successful write with an unlock failure", async () => {
-    const base = fakeSftp({});
-    const sftp = base.sftp as ImageSftpClient;
-    const lockPath = `${REMOTE_IMAGE_DIR}/.termix-write-lock`;
-    const originalMkdir = sftp.mkdir.bind(sftp);
-    sftp.mkdir = (dir, attrs, callback) => originalMkdir(dir, attrs, callback);
-    sftp.rmdir = (dir, callback) => {
-      if (dir === lockPath) callback(new Error("unlock failed"));
-      else callback();
-    };
-
-    const error = await storeImageViaSftp(sftp, PNG_BYTES).catch(
-      (caught: unknown) => caught,
-    );
-    expect(error).toBeInstanceOf(TerminalImageStorageError);
-    expect((error as TerminalImageStorageError).code).toBe(
-      "IMAGE_REMOTE_WRITE_FAILED",
-    );
-  });
-
-  it("fails closed when remote lock acquisition stalls", async () => {
-    const { sftp } = fakeSftp({ stallLock: true });
-    const error = await storeImageViaSftp(sftp, PNG_BYTES).catch(
-      (caught: unknown) => caught,
-    );
-    expect(error).toBeInstanceOf(TerminalImageStorageError);
-    expect((error as TerminalImageStorageError).code).toBe(
-      "IMAGE_REMOTE_WRITE_FAILED",
-    );
-  }, 12_000);
-
-  it("fails closed when remote quota inspection stalls", async () => {
-    const { sftp } = fakeSftp({ stallReaddir: true });
-    const error = await storeImageViaSftp(sftp, PNG_BYTES, {
-      maxCount: 10,
-      maxBytes: 1024,
-    }).catch((caught: unknown) => caught);
-    expect(error).toBeInstanceOf(TerminalImageStorageError);
-    expect((error as TerminalImageStorageError).code).toBe(
-      "IMAGE_REMOTE_WRITE_FAILED",
-    );
-  }, 7_000);
-
-  it("fails closed when remote expiry cleanup stalls", async () => {
-    const { sftp } = fakeSftp({ stallReaddir: true });
-    const error = await storeImageViaSftp(sftp, PNG_BYTES, {
-      ttlMs: 1_000,
-    }).catch((caught: unknown) => caught);
-    expect(error).toBeInstanceOf(TerminalImageStorageError);
-    expect((error as TerminalImageStorageError).code).toBe(
-      "IMAGE_REMOTE_WRITE_FAILED",
-    );
-  }, 7_000);
-
-  it("fails closed when remote lock release stalls", async () => {
-    const { sftp } = fakeSftp({ stallRmdir: true });
-    const error = await storeImageViaSftp(sftp, PNG_BYTES).catch(
-      (caught: unknown) => caught,
-    );
-    expect(error).toBeInstanceOf(TerminalImageStorageError);
-    expect((error as TerminalImageStorageError).code).toBe(
-      "IMAGE_REMOTE_WRITE_FAILED",
-    );
-  }, 5_000);
-
-  it("maps SFTP failures to IMAGE_REMOTE_WRITE_FAILED", async () => {
-    const { sftp } = fakeSftp({ writeError: new Error("Permission denied") });
-    const error = await storeImageViaSftp(sftp, PNG_BYTES).catch(
-      (caught: unknown) => caught,
-    );
-
-    expect(error).toBeInstanceOf(TerminalImageStorageError);
-    expect((error as TerminalImageStorageError).code).toBe(
-      "IMAGE_REMOTE_WRITE_FAILED",
-    );
-    expect((error as TerminalImageStorageError).message).toBe(
-      "Failed to write image to the remote host",
-    );
-  });
-});
diff --git a/plugins/ssh-terminal/tests/backend/images/image-utils.test.ts b/plugins/ssh-terminal/tests/backend/images/image-utils.test.ts
deleted file mode 100644
index 4157bf9ad..000000000
--- a/plugins/ssh-terminal/tests/backend/images/image-utils.test.ts
+++ /dev/null
@@ -1,76 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  exceedsImageStorageLimit,
-  exceedsNormalizedImageSize,
-  imageExtensionForFormat,
-  createConcurrencyLimiter,
-  isExpiredImage,
-  isImageFilename,
-} from "../../../src/backend/images/image-utils.js";
-
-describe("terminal image utilities", () => {
-  it("accepts UUID-based image filenames", () => {
-    expect(isImageFilename("b797234d-eb5d-4b1b-b7f3-17c26f257506.jpeg")).toBe(
-      true,
-    );
-  });
-
-  it("rejects unsafe or unrelated filenames", () => {
-    expect(isImageFilename("../secrets.txt")).toBe(false);
-    expect(isImageFilename("not-an-image.jpeg")).toBe(false);
-    expect(isImageFilename("b797234d-eb5d-4b1b-b7f3-17c26f257506")).toBe(false);
-  });
-
-  it("maps decoded raster formats while excluding SVG", () => {
-    expect(imageExtensionForFormat("jpeg")).toBe("jpg");
-    expect(imageExtensionForFormat("heif")).toBe("heif");
-    expect(imageExtensionForFormat("tiff")).toBe("tiff");
-    expect(imageExtensionForFormat("svg")).toBeUndefined();
-    expect(imageExtensionForFormat(undefined)).toBeUndefined();
-  });
-
-  it("rejects normalized output beyond the byte ceiling", () => {
-    expect(exceedsNormalizedImageSize(10_000_001, 10_000_000)).toBe(true);
-    expect(exceedsNormalizedImageSize(10_000_000, 10_000_000)).toBe(false);
-  });
-  it("expires files older than the configured TTL", () => {
-    expect(isExpiredImage(1_000, 3_000, 1_000)).toBe(true);
-    expect(isExpiredImage(2_500, 3_000, 1_000)).toBe(false);
-  });
-
-  it("treats a zero TTL as retention disabled", () => {
-    expect(isExpiredImage(1_000, 999_999, 0)).toBe(false);
-  });
-
-  it("bounds the admission queue", async () => {
-    const limiter = createConcurrencyLimiter(1, 0);
-    const release = await limiter.acquire();
-    await expect(limiter.acquire()).rejects.toThrow("queue is full");
-    release();
-  });
-
-  it("rejects uploads that exceed the count or byte limit", () => {
-    expect(exceedsImageStorageLimit(100, 10, 1, 100, 1000)).toBe(true);
-    expect(exceedsImageStorageLimit(1, 900, 101, 100, 1000)).toBe(true);
-    expect(exceedsImageStorageLimit(1, 900, 100, 100, 1000)).toBe(false);
-  });
-
-  it("bounds concurrent work", async () => {
-    const limiter = createConcurrencyLimiter(1);
-    let active = 0;
-    let peak = 0;
-    const task = async () => {
-      const release = await limiter.acquire();
-      active += 1;
-      peak = Math.max(peak, active);
-      await new Promise((resolve) => setTimeout(resolve, 5));
-      active -= 1;
-      release();
-    };
-
-    await Promise.all([task(), task(), task()]);
-
-    expect(peak).toBe(1);
-    expect(limiter.active).toBe(0);
-  });
-});
diff --git a/plugins/ssh-terminal/tests/backend/keyboard-prompt.test.ts b/plugins/ssh-terminal/tests/backend/keyboard-prompt.test.ts
deleted file mode 100644
index 94aebefee..000000000
--- a/plugins/ssh-terminal/tests/backend/keyboard-prompt.test.ts
+++ /dev/null
@@ -1,298 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-import type {
-  PluginKeyboardInteractiveDecision,
-  PluginKeyboardInteractivePrompt,
-  PluginSshHost,
-} from "@termix/plugin-sdk/backend";
-import { SSHAuthManager } from "../../src/backend/keyboard-prompt.js";
-
-/**
- * Stands in for core's classifier (ctx.ssh.classifyKeyboardInteractive),
- * which core's own tests cover. These tests are about what the terminal does
- * with each decision: the socket messages, the answers and the timeouts.
- */
-const PASSWORD = /password/i;
-const FORTI = /type\s+['"]?push['"]?/i;
-const PUSH =
-  /choose.*push.*totp|press enter.*(push|send)|push notification|authentication by phone/i;
-const TOTP =
-  /verification code|verification_code|token|otp|2fa|authenticator|google.*auth/i;
-
-function classify(
-  round: {
-    name: string;
-    instructions: string;
-    prompts: PluginKeyboardInteractivePrompt[];
-  },
-  host: PluginSshHost,
-): PluginKeyboardInteractiveDecision {
-  // Stands in for a plugin's keyboard-interactive handler.
-  if (/gateway sign-in/i.test(round.name)) {
-    return {
-      kind: "browser",
-      id: "gateway",
-      label: "Gateway",
-      url: round.instructions.match(/https?:\/\/\S+/)?.[0] ?? null,
-      code: round.instructions.match(/Security key: (\S+)/)?.[1] ?? "",
-      instructions: round.instructions,
-    };
-  }
-  const texts = round.prompts.map((p) => p.prompt);
-  const isPush =
-    !texts.some((t) => FORTI.test(t)) && texts.some((t) => PUSH.test(t));
-  if (!isPush) {
-    const totp = round.prompts.findIndex((p) => TOTP.test(p.prompt));
-    if (totp !== -1) return { kind: "totp", promptIndex: totp };
-  }
-  const stored = !!host.password && host.authType !== "none";
-  const first = round.prompts.findIndex(
-    (p) => !(PASSWORD.test(p.prompt) && stored),
-  );
-  if (first === -1) {
-    return {
-      kind: "auto",
-      responses: round.prompts.map((p) =>
-        PASSWORD.test(p.prompt) ? String(host.password) : "",
-      ),
-    };
-  }
-  return { kind: "input", promptIndex: first, isPush: PUSH.test(texts[first]) };
-}
-
-const log = { info: vi.fn(), success: vi.fn(), warn: vi.fn(), error: vi.fn() };
-
-function createManager() {
-  const sent: Record<string, unknown>[] = [];
-  const ws = { send: (data: string) => sent.push(JSON.parse(data)) } as any;
-  const manager = new SSHAuthManager({
-    ssh: { classifyKeyboardInteractive: classify },
-    log,
-    userId: "user-1",
-    ws,
-    hostId: 1,
-    isKeyboardInteractive: false,
-    keyboardInteractiveResponded: false,
-    keyboardInteractiveFinish: null,
-    totpPromptSent: false,
-    browserSignInId: null,
-    totpTimeout: null,
-    browserSignInTimeout: null,
-    totpAttempts: 0,
-  });
-  return { manager, sent };
-}
-
-describe("SSHAuthManager.handleKeyboardInteractive", () => {
-  beforeEach(() => {
-    vi.useRealTimers();
-  });
-
-  it("routes a TOTP verification prompt to the totp flow", () => {
-    const { manager, sent } = createManager();
-    const finish = vi.fn();
-
-    manager.handleKeyboardInteractive(
-      "",
-      "",
-      "",
-      [{ prompt: "Verification code: ", echo: true }],
-      finish,
-      { username: "root", authType: "none" },
-    );
-
-    expect(sent).toEqual([
-      {
-        type: "connection_log",
-        data: {
-          stage: "auth",
-          level: "info",
-          message: "TOTP verification required",
-        },
-      },
-      { type: "totp_required", prompt: "Verification code: " },
-    ]);
-    expect(finish).not.toHaveBeenCalled();
-  });
-
-  it("forwards echo:true for a JumpCloud-style push/TOTP menu prompt", () => {
-    const { manager, sent } = createManager();
-    const finish = vi.fn();
-
-    manager.handleKeyboardInteractive(
-      "",
-      "",
-      "",
-      [{ prompt: "Choose [1] Push, or [2] TOTP: ", echo: true }],
-      finish,
-      { username: "root", authType: "none" },
-    );
-
-    expect(sent).toEqual([
-      {
-        type: "connection_log",
-        data: {
-          stage: "auth",
-          level: "info",
-          message: "Password authentication required",
-        },
-      },
-      {
-        type: "password_required",
-        prompt: "Choose [1] Push, or [2] TOTP: ",
-        echo: true,
-      },
-    ]);
-  });
-
-  it("silently auto-answers a plain password prompt when a stored password exists", () => {
-    const { manager, sent } = createManager();
-    const finish = vi.fn();
-
-    manager.handleKeyboardInteractive(
-      "",
-      "",
-      "",
-      [{ prompt: "Password: ", echo: false }],
-      finish,
-      { username: "root", password: "hunter2", authType: "password" },
-    );
-
-    expect(finish).toHaveBeenCalledWith(["hunter2"]);
-    expect(sent).toEqual([]);
-  });
-
-  it("prompts the user for a push-confirm prompt and accepts an empty response", () => {
-    const { manager, sent } = createManager();
-    const finish = vi.fn();
-
-    manager.handleKeyboardInteractive(
-      "",
-      "",
-      "",
-      [{ prompt: "Press enter to send Push request: ", echo: true }],
-      finish,
-      { username: "root", authType: "none" },
-    );
-
-    expect(sent).toEqual([
-      {
-        type: "connection_log",
-        data: {
-          stage: "auth",
-          level: "info",
-          message: "Password authentication required",
-        },
-      },
-      {
-        type: "password_required",
-        prompt: "Press enter to send Push request: ",
-        echo: true,
-      },
-    ]);
-
-    manager.context.keyboardInteractiveFinish?.([""]);
-
-    expect(finish).toHaveBeenCalledWith([""]);
-  });
-
-  it("uses a longer timeout for push-style prompts than generic prompts", () => {
-    vi.useFakeTimers();
-    try {
-      const { manager, sent } = createManager();
-      const finish = vi.fn();
-
-      manager.handleKeyboardInteractive(
-        "",
-        "",
-        "",
-        [{ prompt: "Press enter to send Push request: ", echo: true }],
-        finish,
-        { username: "root", authType: "none" },
-      );
-
-      vi.advanceTimersByTime(180001);
-      expect(sent.some((m) => m.type === "error")).toBe(false);
-
-      vi.advanceTimersByTime(120000);
-      expect(sent.some((m) => m.type === "error")).toBe(true);
-    } finally {
-      vi.useRealTimers();
-    }
-  });
-
-  it("routes a FortiToken prompt to the totp flow instead of the push-confirm flow", () => {
-    const { manager, sent } = createManager();
-    const finish = vi.fn();
-
-    manager.handleKeyboardInteractive(
-      "",
-      "",
-      "",
-      [
-        {
-          prompt:
-            "Enter your Token or type 'push' to receive a push notification: ",
-          echo: true,
-        },
-      ],
-      finish,
-      { username: "root", authType: "none" },
-    );
-
-    expect(sent).toEqual([
-      {
-        type: "connection_log",
-        data: {
-          stage: "auth",
-          level: "info",
-          message: "TOTP verification required",
-        },
-      },
-      {
-        type: "totp_required",
-        prompt:
-          "Enter your Token or type 'push' to receive a push notification: ",
-      },
-    ]);
-
-    manager.context.keyboardInteractiveFinish?.(["push"]);
-
-    expect(finish).toHaveBeenCalledWith(["push"]);
-  });
-
-  it("sends a claimed browser round under its handler's name", () => {
-    const { manager, sent } = createManager();
-    const finish = vi.fn();
-
-    manager.handleKeyboardInteractive(
-      "Gateway sign-in",
-      "Visit https://gateway.example.com/auth to continue. Security key: AB12",
-      "",
-      [{ prompt: "Press enter once done: ", echo: true }],
-      finish,
-      { username: "root", authType: "none" },
-    );
-
-    expect(sent).toEqual([
-      {
-        type: "connection_log",
-        data: {
-          stage: "auth",
-          level: "info",
-          message: "Gateway sign-in required",
-        },
-      },
-      {
-        type: "gateway_auth_required",
-        kind: "browser",
-        label: "Gateway",
-        url: "https://gateway.example.com/auth",
-        securityKey: "AB12",
-        instructions:
-          "Visit https://gateway.example.com/auth to continue. Security key: AB12",
-      },
-    ]);
-    expect(manager.context.browserSignInId).toBe("gateway");
-  });
-});
diff --git a/plugins/ssh-terminal/tests/backend/memory-agent.test.ts b/plugins/ssh-terminal/tests/backend/memory-agent.test.ts
deleted file mode 100644
index ebf7049af..000000000
--- a/plugins/ssh-terminal/tests/backend/memory-agent.test.ts
+++ /dev/null
@@ -1,105 +0,0 @@
-import { describe, it, expect, vi } from "vitest";
-import { generateKeyPairSync } from "crypto";
-import ssh2Pkg, { type ParsedKey } from "ssh2";
-import { MemoryAgent } from "../../src/backend/helpers.js";
-
-describe("MemoryAgent", () => {
-  it("serves identities and signatures over the agent protocol", async () => {
-    const { privateKey } = generateKeyPairSync("rsa", { modulusLength: 2048 });
-    const parsed = ssh2Pkg.utils.parseKey(
-      privateKey.export({ type: "pkcs1", format: "pem" }),
-    );
-    expect(parsed).not.toBeInstanceOf(Error);
-
-    const agent = new MemoryAgent(parsed as ParsedKey);
-    const stream = await new Promise<NodeJS.ReadWriteStream>(
-      (resolve, reject) => {
-        agent.getStream((error, result) => {
-          if (error || !result)
-            reject(error ?? new Error("Missing agent stream"));
-          else resolve(result);
-        });
-      },
-    );
-    const client = new ssh2Pkg.AgentProtocol(true);
-    client.pipe(stream).pipe(client);
-
-    const identities = await new Promise<ParsedKey[]>((resolve, reject) => {
-      client.getIdentities((error, keys) => {
-        if (error || !keys) reject(error ?? new Error("Missing identities"));
-        else resolve(keys);
-      });
-    });
-    expect(identities).toHaveLength(1);
-    expect(identities[0].getPublicSSH()).toEqual(
-      (parsed as ParsedKey).getPublicSSH(),
-    );
-
-    const data = Buffer.from("forwarded-agent-test");
-    const signature = await new Promise<Buffer>((resolve, reject) => {
-      client.sign(identities[0], data, (error, result) => {
-        if (error || !result) reject(error ?? new Error("Missing signature"));
-        else resolve(result);
-      });
-    });
-    expect((parsed as ParsedKey).verify(data, signature)).toBe(true);
-
-    client.destroy();
-    (stream as unknown as { destroy: () => void }).destroy();
-  });
-});
-
-describe("MemoryAgent unsupported extension framing", () => {
-  it.each([false, true])(
-    "can enumerate keys after rejecting session-bind (fragmented=%s)",
-    async (fragmented) => {
-      const { privateKey } = generateKeyPairSync("rsa", {
-        modulusLength: 2048,
-      });
-      const key = ssh2Pkg.utils.parseKey(
-        privateKey.export({ type: "pkcs1", format: "pem" }),
-      ) as ParsedKey;
-      const agent = new MemoryAgent(key);
-      const stream = await new Promise<NodeJS.ReadWriteStream>(
-        (resolve, reject) => {
-          agent.getStream((error, result) =>
-            error || !result ? reject(error) : resolve(result),
-          );
-        },
-      );
-      const replies: Buffer[] = [];
-      let buffered = Buffer.alloc(0);
-      stream.on("data", (data: Buffer) => {
-        buffered = Buffer.concat([buffered, data]);
-        while (
-          buffered.length >= 4 &&
-          buffered.length >= buffered.readUInt32BE(0) + 4
-        ) {
-          const end = buffered.readUInt32BE(0) + 4;
-          replies.push(buffered.subarray(4, end));
-          buffered = buffered.subarray(end);
-        }
-      });
-      const extension = Buffer.from("session-bind@openssh.com");
-      const request = Buffer.alloc(4 + 1 + 4 + extension.length);
-      request.writeUInt32BE(request.length - 4, 0);
-      request[4] = 27;
-      request.writeUInt32BE(extension.length, 5);
-      extension.copy(request, 9);
-      const identities = Buffer.from([0, 0, 0, 1, 11]);
-      try {
-        const requests = Buffer.concat([request, identities]);
-        if (fragmented) {
-          stream.write(requests.subarray(0, 7));
-          stream.write(requests.subarray(7));
-        } else stream.write(requests);
-        await vi.waitFor(() => expect(replies).toHaveLength(2));
-        expect(replies[0][0]).toBe(5); // Unsupported extension remains refused.
-        expect(replies[1][0]).toBe(12); // The following identities request succeeds.
-        expect(replies[1].readUInt32BE(1)).toBe(1);
-      } finally {
-        (stream as unknown as { destroy: () => void }).destroy();
-      }
-    },
-  );
-});
diff --git a/plugins/ssh-terminal/tests/backend/migrations.test.ts b/plugins/ssh-terminal/tests/backend/migrations.test.ts
deleted file mode 100644
index fde9d472e..000000000
--- a/plugins/ssh-terminal/tests/backend/migrations.test.ts
+++ /dev/null
@@ -1,110 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { createTestDb, type TestDb } from "@termix/plugin-sdk/testing";
-import { pluginDir } from "./helpers";
-
-// command_history as core's SQLite bootstrap created it before 2.9.0, plus the
-// index performance-indexes.ts added.
-const LEGACY_DDL = `
-  CREATE TABLE command_history (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL,
-    host_id INTEGER NOT NULL,
-    command TEXT NOT NULL,
-    executed_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE,
-    FOREIGN KEY (host_id) REFERENCES ssh_data (id) ON DELETE CASCADE
-  );
-  CREATE INDEX idx_command_history_user_host ON command_history (user_id, host_id);
-`;
-
-let db: TestDb | null = null;
-
-afterEach(() => {
-  db?.close();
-  db = null;
-});
-
-const tableExists = (name: string) =>
-  !!db!.sqlite
-    .prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?")
-    .get(name);
-
-const indexesOn = (table: string) =>
-  (
-    db!.sqlite
-      .prepare(
-        "SELECT name FROM sqlite_master WHERE type = 'index' AND tbl_name = ? AND name NOT LIKE 'sqlite_%'",
-      )
-      .all(table) as { name: string }[]
-  ).map((row) => row.name);
-
-describe("adopting command_history", () => {
-  it("keeps every existing row and its index when the legacy table is there", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1'), ('user-2')");
-        sqlite.exec("INSERT INTO ssh_data (id) VALUES (1), (2)");
-        sqlite.exec(LEGACY_DDL);
-        sqlite.exec(`
-          INSERT INTO command_history (user_id, host_id, command, executed_at)
-          VALUES ('user-1', 1, 'ls -la', '2026-01-01T00:00:00.000Z'),
-                 ('user-2', 2, 'uptime', '2026-01-02T00:00:00.000Z');
-        `);
-      },
-    });
-
-    expect(db.applied).toEqual(["0001_adopt_command_history"]);
-    expect(tableExists("command_history")).toBe(false);
-    expect(
-      db.sqlite
-        .prepare(
-          "SELECT user_id, host_id, command, executed_at FROM p_ssh_terminal_command_history ORDER BY id",
-        )
-        .all(),
-    ).toEqual([
-      {
-        user_id: "user-1",
-        host_id: 1,
-        command: "ls -la",
-        executed_at: "2026-01-01T00:00:00.000Z",
-      },
-      {
-        user_id: "user-2",
-        host_id: 2,
-        command: "uptime",
-        executed_at: "2026-01-02T00:00:00.000Z",
-      },
-    ]);
-    expect(indexesOn("p_ssh_terminal_command_history")).toEqual([
-      "idx_command_history_user_host",
-    ]);
-  });
-
-  it("creates a fresh table when there is no legacy one", async () => {
-    db = await createTestDb(pluginDir);
-    expect(tableExists("p_ssh_terminal_command_history")).toBe(true);
-    expect(indexesOn("p_ssh_terminal_command_history")).toEqual([
-      "idx_command_history_user_host",
-    ]);
-  });
-
-  it("cascades when the user or the host is deleted", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1'), ('user-2')");
-        sqlite.exec("INSERT INTO ssh_data (id) VALUES (1), (2)");
-      },
-    });
-    db.sqlite.exec(`
-      INSERT INTO p_ssh_terminal_command_history (user_id, host_id, command)
-      VALUES ('user-1', 1, 'a'), ('user-2', 1, 'b'), ('user-2', 2, 'c');
-    `);
-    db.sqlite.exec("DELETE FROM users WHERE id = 'user-1'");
-    db.sqlite.exec("DELETE FROM ssh_data WHERE id = 2");
-    expect(
-      db.sqlite
-        .prepare("SELECT command FROM p_ssh_terminal_command_history")
-        .all(),
-    ).toEqual([{ command: "b" }]);
-  });
-});
diff --git a/plugins/ssh-terminal/tests/backend/routes.test.ts b/plugins/ssh-terminal/tests/backend/routes.test.ts
deleted file mode 100644
index 6759949ba..000000000
--- a/plugins/ssh-terminal/tests/backend/routes.test.ts
+++ /dev/null
@@ -1,203 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { startServer, type TestServer } from "./helpers";
-
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-});
-
-const history = (s: TestServer) =>
-  s.db.sqlite
-    .prepare(
-      "SELECT user_id, host_id, command FROM p_ssh_terminal_command_history ORDER BY id",
-    )
-    .all();
-
-describe("command history routes", () => {
-  it("saves, lists newest first without duplicates, deletes and clears", async () => {
-    server = await startServer();
-    for (const command of ["ls", "pwd", "ls"]) {
-      const saved = await server.request("POST", "/command-history", {
-        body: { hostId: 1, command },
-      });
-      expect(saved.status).toBe(201);
-    }
-    await server.request("POST", "/command-history", {
-      user: "user-2",
-      body: { hostId: 1, command: "whoami" },
-    });
-
-    const listed = await server.request("GET", "/command-history/1");
-    expect(listed.body).toEqual(["ls", "pwd"]);
-
-    await server.request("POST", "/command-history/delete", {
-      body: { hostId: 1, command: "pwd" },
-    });
-    expect((await server.request("GET", "/command-history/1")).body).toEqual([
-      "ls",
-    ]);
-
-    await server.request("DELETE", "/command-history/1");
-    expect(history(server)).toEqual([
-      { user_id: "user-2", host_id: 1, command: "whoami" },
-    ]);
-    expect(server.db.persisted).toBeGreaterThan(0);
-  });
-
-  it("acknowledges but never stores a command that looks like a secret", async () => {
-    server = await startServer();
-    const saved = await server.request("POST", "/command-history", {
-      body: { hostId: 1, command: "export API_TOKEN=abc" },
-    });
-    expect(saved.status).toBe(201);
-    expect(history(server)).toEqual([]);
-  });
-
-  it("stores nothing while command history is off globally", async () => {
-    server = await startServer({ settings: { commandHistoryEnabled: false } });
-    await server.request("POST", "/command-history", {
-      body: { hostId: 1, command: "ls" },
-    });
-    expect(history(server)).toEqual([]);
-  });
-
-  it("stores nothing for a host that turned command history off", async () => {
-    server = await startServer();
-    await server.mock.ctx.settings.setHost(2, "enableCommandHistory", false);
-    await server.request("POST", "/command-history", {
-      body: { hostId: 2, command: "ls" },
-    });
-    await server.request("POST", "/command-history", {
-      body: { hostId: 1, command: "ls" },
-    });
-    expect(history(server)).toEqual([
-      { user_id: "user-1", host_id: 1, command: "ls" },
-    ]);
-  });
-
-  it("rejects a request missing its fields", async () => {
-    server = await startServer();
-    const saved = await server.request("POST", "/command-history", {
-      body: { hostId: 1 },
-    });
-    expect(saved.status).toBe(400);
-  });
-
-  it("needs hosts.view for the recent list", async () => {
-    server = await startServer({ permissions: [] });
-    const denied = await server.request("GET", "/command-history/1/recent");
-    expect(denied.status).toBe(403);
-  });
-
-  it("lists recent commands with duplicates for a hosts.view holder", async () => {
-    server = await startServer({ permissions: ["hosts.view"] });
-    for (const command of ["uptime", "uptime"]) {
-      await server.request("POST", "/command-history", {
-        body: { hostId: 1, command },
-      });
-    }
-    const allowed = await server.request("GET", "/command-history/1/recent");
-    expect(allowed.body).toEqual(["uptime", "uptime"]);
-  });
-});
-
-describe("client settings and image storage", () => {
-  it("serves the terminal's settings to any signed-in user", async () => {
-    server = await startServer({
-      settings: { sessionTimeoutMinutes: 45, sessionPersistence: false },
-    });
-    const { body } = await server.request("GET", "/client-settings");
-    expect(body.sessionTimeoutMinutes).toBe(45);
-    expect(body.sessionPersistence).toBe(false);
-    expect(body.commandHistoryEnabled).toBe(true);
-    expect(body.touchInput.enabled).toBe(true);
-  });
-
-  it("refuses the image storage test to a non-admin", async () => {
-    server = await startServer({ permissions: [] });
-    const denied = await server.request("POST", "/image-storage/test", {
-      body: { instanceId: "tab-1" },
-    });
-    expect(denied.status).toBe(403);
-  });
-
-  it("reports an unconnected session to an admin", async () => {
-    server = await startServer({ permissions: ["admin.plugins.manage"] });
-    const result = await server.request("POST", "/image-storage/test", {
-      body: { instanceId: "tab-1" },
-    });
-    expect(result.status).toBe(200);
-    expect(result.body.connected).toBe(false);
-  });
-});
-
-describe("terminal settings routes", () => {
-  const host = (id: number, userId = "user-1") => ({
-    id,
-    userId,
-    name: `h${id}`,
-    ip: "10.0.0.1",
-    port: 22,
-    username: "root",
-    tags: null,
-    folder: null,
-    authType: "password",
-  });
-
-  it("hands every user their own terminal settings", async () => {
-    server = await startServer();
-    await server.mock.ctx.settings.setUser(
-      "user-1",
-      "commandAutocomplete",
-      true,
-    );
-    const { body } = await server.request("GET", "/client-settings");
-    expect(body.user).toMatchObject({
-      commandAutocomplete: true,
-      localEcho: "auto",
-      linkClickBehavior: "confirm",
-    });
-    expect(body).not.toHaveProperty("newHostDefaults");
-    const other = await server.request("GET", "/client-settings", {
-      user: "user-2",
-    });
-    expect(other.body.user.commandAutocomplete).toBe(false);
-  });
-
-  it("saves the browser preferences a user moves over, for that user only", async () => {
-    server = await startServer();
-    const saved = await server.request("PUT", "/user-settings", {
-      body: { localEcho: "on", linkClickBehavior: "direct", theme: "x" },
-    });
-    expect(saved.status).toBe(200);
-    expect(await server.mock.ctx.settings.getUser("user-1", "localEcho")).toBe(
-      "on",
-    );
-    expect(
-      await server.mock.ctx.settings.getUser("user-2", "localEcho"),
-    ).not.toBe("on");
-  });
-
-  it("turns auto tmux on for a host the user can edit", async () => {
-    server = await startServer({ hosts: [host(1)] });
-    const saved = await server.request("PUT", "/hosts/1/auto-tmux", {
-      body: { enabled: true },
-    });
-    expect(saved.status).toBe(200);
-    expect(await server.mock.ctx.settings.getHost(1, "autoTmux")).toBe(true);
-  });
-
-  it("refuses auto tmux on a host the user cannot reach, or a bad body", async () => {
-    server = await startServer({ hosts: [host(1)] });
-    const unknown = await server.request("PUT", "/hosts/2/auto-tmux", {
-      body: { enabled: true },
-    });
-    expect(unknown.status).toBe(403);
-    const bad = await server.request("PUT", "/hosts/1/auto-tmux", {
-      body: { enabled: "yes" },
-    });
-    expect(bad.status).toBe(400);
-  });
-});
diff --git a/plugins/ssh-terminal/tests/backend/session-manager.test.ts b/plugins/ssh-terminal/tests/backend/session-manager.test.ts
deleted file mode 100644
index 913b6144a..000000000
--- a/plugins/ssh-terminal/tests/backend/session-manager.test.ts
+++ /dev/null
@@ -1,584 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
-import {
-  TerminalSessionManager,
-  isMessageAllowedForParticipant,
-} from "../../src/backend/session-manager.js";
-import type { RecordingSink } from "../../src/backend/services.js";
-
-// A recordings.writer provider that keeps what it was given.
-const appends = vi.fn<(chunk: string) => Promise<void>>();
-const persists = vi.fn<RecordingSink["persist"]>();
-const discards = vi.fn();
-const opens = vi.fn();
-
-const log = { info: vi.fn(), success: vi.fn(), warn: vi.fn(), error: vi.fn() };
-const sessionManager = new TerminalSessionManager({
-  log,
-  getTimeoutMinutes: () => 30,
-  getRecordings: () => ({
-    open: async (meta) => {
-      opens(meta);
-      return { append: appends, persist: persists, discard: discards };
-    },
-  }),
-});
-
-// Minimal fake WebSocket - only the surface session-manager touches.
-function makeFakeWs(readyState = 1 /* OPEN */) {
-  return {
-    readyState,
-    send: vi.fn(),
-    close: vi.fn(),
-    terminate: vi.fn(),
-  } as unknown as import("ws").WebSocket;
-}
-const WS_OPEN = 1;
-const WS_CLOSED = 3;
-
-describe("TerminalSessionManager - session logging", () => {
-  beforeEach(() => {
-    vi.clearAllMocks();
-    appends.mockResolvedValue(undefined);
-    persists.mockResolvedValue(undefined);
-  });
-
-  it("createSession stores sessionLoggingEnabled=true by default", () => {
-    const id = sessionManager.createSession("u1", 1, "host", 80, 24);
-    const session = sessionManager.getSession(id);
-    expect(session?.sessionLoggingEnabled).toBe(true);
-    sessionManager.destroySession(id);
-  });
-
-  it("createSession stores sessionLoggingEnabled=false when passed", () => {
-    const id = sessionManager.createSession(
-      "u1",
-      1,
-      "host",
-      80,
-      24,
-      undefined,
-      false,
-    );
-    const session = sessionManager.getSession(id);
-    expect(session?.sessionLoggingEnabled).toBe(false);
-    sessionManager.destroySession(id);
-  });
-
-  it("does not record when sessionLoggingEnabled=false", async () => {
-    const id = sessionManager.createSession(
-      "u1",
-      1,
-      "host",
-      80,
-      24,
-      undefined,
-      false,
-    );
-    sessionManager.bufferOutput(id, "some output");
-    sessionManager.destroySession(id);
-    await new Promise((r) => setTimeout(r, 20));
-    expect(opens).not.toHaveBeenCalled();
-    expect(appends).not.toHaveBeenCalled();
-  });
-
-  it("hands the recording to the recordings service in one batch, then persists it", async () => {
-    const id = sessionManager.createSession(
-      "u1",
-      1,
-      "host",
-      80,
-      24,
-      undefined,
-      true,
-    );
-    sessionManager.bufferOutput(id, "terminal output data");
-    sessionManager.bufferOutput(id, "more output");
-    sessionManager.bufferInput(id, "ls\r");
-    sessionManager.destroySession(id);
-    await new Promise((r) => setTimeout(r, 20));
-    // One write for the whole burst, never one per chunk (issue #1049).
-    expect(appends).toHaveBeenCalledOnce();
-    const chunk = appends.mock.calls[0][0];
-    expect(chunk.split("\n")[0]).toContain('"version":2');
-    expect(chunk).toContain("terminal output data");
-    expect(chunk).toContain("more output");
-    expect(persists).toHaveBeenCalledOnce();
-    expect(opens).toHaveBeenCalledWith(
-      expect.objectContaining({ hostId: 1, userId: "u1", protocol: "ssh" }),
-    );
-  });
-
-  it("does not write log file when buffer is empty", async () => {
-    const id = sessionManager.createSession(
-      "u1",
-      1,
-      "host",
-      80,
-      24,
-      undefined,
-      true,
-    );
-    sessionManager.destroySession(id);
-    await new Promise((r) => setTimeout(r, 20));
-    expect(appends).not.toHaveBeenCalled();
-    expect(discards).toHaveBeenCalledOnce();
-  });
-
-  it("records nothing when no recordings service is running", async () => {
-    const withoutRecordings = new TerminalSessionManager({
-      log,
-      getTimeoutMinutes: () => 30,
-      getRecordings: () => null,
-    });
-    const id = withoutRecordings.createSession("u1", 1, "host", 80, 24);
-    expect(withoutRecordings.getSession(id)?.sessionLoggingEnabled).toBe(false);
-    withoutRecordings.bufferOutput(id, "output");
-    withoutRecordings.destroySession(id);
-    await new Promise((r) => setTimeout(r, 20));
-    expect(appends).not.toHaveBeenCalled();
-    withoutRecordings.destroyAll();
-  });
-
-  it("bufferOutput trims old data when exceeding 512KB", () => {
-    const id = sessionManager.createSession(
-      "u1",
-      1,
-      "host",
-      80,
-      24,
-      undefined,
-      false,
-    );
-    const chunk = "x".repeat(300 * 1024);
-    sessionManager.bufferOutput(id, chunk);
-    sessionManager.bufferOutput(id, chunk);
-    const session = sessionManager.getSession(id);
-    expect(session!.outputBufferBytes).toBeLessThanOrEqual(512 * 1024);
-    sessionManager.destroySession(id);
-  });
-});
-
-describe("TerminalSessionManager - multiplayer participants", () => {
-  beforeEach(() => {
-    vi.clearAllMocks();
-    appends.mockResolvedValue(undefined);
-    persists.mockResolvedValue(undefined);
-  });
-
-  function createConnectedSession(): string {
-    const id = sessionManager.createSession(
-      "owner-1",
-      1,
-      "host",
-      80,
-      24,
-      undefined,
-      false,
-    );
-    // Mark connected without a real ssh2 stream - only isConnected is read
-    // by attachWs/joinAsParticipant.
-    const session = sessionManager.getSession(id)!;
-    session.isConnected = true;
-    return id;
-  }
-
-  it("sends the presenter dimensions before a participant replays output", () => {
-    const id = createConnectedSession();
-    const session = sessionManager.getSession(id)!;
-    session.cols = 132;
-    session.rows = 40;
-    const ws = makeFakeWs();
-    sessionManager.joinAsParticipant(id, ws, {
-      userId: "viewer",
-      permissionLevel: "read-only",
-    });
-    expect(JSON.parse(vi.mocked(ws.send).mock.calls[0][0] as string)).toEqual({
-      type: "resized",
-      cols: 132,
-      rows: 40,
-    });
-    sessionManager.destroySession(id);
-  });
-
-  it("broadcasts later size changes and retains them for new participants", () => {
-    const id = createConnectedSession();
-    const owner = makeFakeWs();
-    const viewer = makeFakeWs();
-    sessionManager.attachWs(id, "owner-1", owner);
-    sessionManager.joinAsParticipant(id, viewer, {
-      userId: "viewer",
-      permissionLevel: "read-only",
-    });
-    sessionManager.resizeSession(id, 100, 35);
-    const message = JSON.stringify({ type: "resized", cols: 100, rows: 35 });
-    expect(owner.send).toHaveBeenCalledWith(message);
-    expect(viewer.send).toHaveBeenCalledWith(message);
-    const newcomer = makeFakeWs();
-    sessionManager.joinAsParticipant(id, newcomer, {
-      userId: null,
-      permissionLevel: "read-only",
-    });
-    expect(vi.mocked(newcomer.send).mock.calls[0][0]).toBe(message);
-    sessionManager.destroySession(id);
-  });
-
-  it("joinAsParticipant adds a participant without evicting the owner", () => {
-    const id = createConnectedSession();
-    const ownerWs = makeFakeWs();
-    sessionManager.attachWs(id, "owner-1", ownerWs);
-
-    const guestWs = makeFakeWs();
-    const session = sessionManager.joinAsParticipant(id, guestWs, {
-      userId: null,
-      permissionLevel: "read-only",
-      guestLabel: "Guest",
-    });
-
-    expect(session).not.toBeNull();
-    expect(session!.participants.size).toBe(2);
-    const ownerParticipant = sessionManager.getParticipantForWs(
-      session!,
-      ownerWs,
-    );
-    expect(ownerParticipant?.isOwner).toBe(true);
-    // The join is announced to everyone already in the session - and that is
-    // the only unsolicited message the owner receives.
-    expect(ownerWs.send).toHaveBeenCalledTimes(1);
-    const announced = JSON.parse(
-      (ownerWs.send as ReturnType<typeof vi.fn>).mock.calls[0][0] as string,
-    );
-    expect(announced.type).toBe("participants");
-    expect(announced.participants).toHaveLength(2);
-
-    sessionManager.destroySession(id);
-  });
-
-  it("keeps the roster from link guests and lists them per share", () => {
-    const id = createConnectedSession();
-    const ownerWs = makeFakeWs();
-    sessionManager.attachWs(id, "owner-1", ownerWs);
-
-    const guestWs = makeFakeWs();
-    sessionManager.joinAsParticipant(id, guestWs, {
-      userId: null,
-      permissionLevel: "read-only",
-      guestLabel: "Guest 1",
-      shareId: "share-a",
-    });
-    const memberWs = makeFakeWs();
-    sessionManager.joinAsParticipant(id, memberWs, {
-      userId: "alice",
-      permissionLevel: "read-only",
-      shareId: "share-a",
-    });
-
-    const sentTypes = (ws: ReturnType<typeof makeFakeWs>) =>
-      (ws.send as ReturnType<typeof vi.fn>).mock.calls.map(
-        (call) => JSON.parse(call[0] as string).type,
-      );
-    expect(sentTypes(guestWs)).not.toContain("participants");
-    expect(sentTypes(memberWs)).toContain("participants");
-    expect(sessionManager.listShareGuests(id, "share-a")).toEqual([
-      { label: "Guest 1" },
-    ]);
-    expect(sessionManager.listShareGuests(id, "share-b")).toEqual([]);
-
-    sessionManager.destroySession(id);
-  });
-
-  it("setRoomShareControl makes only the controller read-write and never touches the owner", () => {
-    const id = createConnectedSession();
-    const ownerWs = makeFakeWs();
-    sessionManager.attachWs(id, "owner-1", ownerWs);
-    const aliceWs = makeFakeWs();
-    const bobWs = makeFakeWs();
-    const session = sessionManager.joinAsParticipant(id, aliceWs, {
-      userId: "alice",
-      permissionLevel: "read-only",
-      shareId: "stage-share",
-    })!;
-    sessionManager.joinAsParticipant(id, bobWs, {
-      userId: "bob",
-      permissionLevel: "read-only",
-      shareId: "stage-share",
-    });
-
-    sessionManager.setRoomShareControl(id, "stage-share", "alice");
-    expect(
-      sessionManager.getParticipantForWs(session, aliceWs)?.permissionLevel,
-    ).toBe("read-write");
-    expect(
-      sessionManager.getParticipantForWs(session, bobWs)?.permissionLevel,
-    ).toBe("read-only");
-    expect(
-      sessionManager.getParticipantForWs(session, ownerWs)?.permissionLevel,
-    ).toBe("read-write");
-
-    sessionManager.setRoomShareControl(id, "stage-share", null);
-    expect(
-      sessionManager.getParticipantForWs(session, aliceWs)?.permissionLevel,
-    ).toBe("read-only");
-
-    sessionManager.destroySession(id);
-  });
-
-  it("disconnectShareParticipants revokes only the selected share participants", () => {
-    const id = createConnectedSession();
-    const ownerWs = makeFakeWs();
-    const aliceWs = makeFakeWs();
-    const guestWs = makeFakeWs();
-    sessionManager.attachWs(id, "owner-1", ownerWs);
-    const session = sessionManager.joinAsParticipant(id, aliceWs, {
-      userId: "alice",
-      permissionLevel: "read-only",
-      shareId: "stage-share",
-    })!;
-    sessionManager.joinAsParticipant(id, guestWs, {
-      userId: null,
-      permissionLevel: "read-only",
-      shareId: "stage-share",
-    });
-
-    expect(
-      sessionManager.disconnectShareParticipants(id, "stage-share", {
-        userId: "alice",
-        reason: "Removed",
-      }),
-    ).toBe(1);
-    expect(sessionManager.getParticipantForWs(session, aliceWs)).toBeNull();
-    expect(sessionManager.getParticipantForWs(session, guestWs)).not.toBeNull();
-    expect(sessionManager.getParticipantForWs(session, ownerWs)?.isOwner).toBe(
-      true,
-    );
-    expect(aliceWs.close).toHaveBeenCalledWith(1008, "Removed");
-
-    sessionManager.destroySession(id);
-  });
-
-  it("joinAsParticipant returns null for a nonexistent or unconnected session", () => {
-    expect(
-      sessionManager.joinAsParticipant("does-not-exist", makeFakeWs(), {
-        userId: null,
-        permissionLevel: "read-only",
-      }),
-    ).toBeNull();
-  });
-
-  it("broadcast sends to all OPEN participant sockets and skips CLOSED ones", () => {
-    const id = createConnectedSession();
-    const ownerWs = makeFakeWs(WS_OPEN);
-    sessionManager.attachWs(id, "owner-1", ownerWs);
-
-    const openGuestWs = makeFakeWs(WS_OPEN);
-    const closedGuestWs = makeFakeWs(WS_CLOSED);
-    sessionManager.joinAsParticipant(id, openGuestWs, {
-      userId: null,
-      permissionLevel: "read-only",
-    });
-    sessionManager.joinAsParticipant(id, closedGuestWs, {
-      userId: null,
-      permissionLevel: "read-only",
-    });
-
-    sessionManager.broadcast(id, { type: "data", data: "hello" });
-
-    expect(ownerWs.send).toHaveBeenCalledWith(
-      JSON.stringify({ type: "data", data: "hello" }),
-    );
-    expect(openGuestWs.send).toHaveBeenCalledWith(
-      JSON.stringify({ type: "data", data: "hello" }),
-    );
-    expect(closedGuestWs.send).not.toHaveBeenCalled();
-
-    sessionManager.destroySession(id);
-  });
-
-  it("broadcast does not throw if a socket's send throws", () => {
-    const id = createConnectedSession();
-    const throwingWs = makeFakeWs(WS_OPEN);
-    (throwingWs.send as ReturnType<typeof vi.fn>).mockImplementation(() => {
-      throw new Error("send failed");
-    });
-    sessionManager.attachWs(id, "owner-1", throwingWs);
-
-    expect(() =>
-      sessionManager.broadcast(id, { type: "data", data: "x" }),
-    ).not.toThrow();
-
-    sessionManager.destroySession(id);
-  });
-
-  it("broadcast is a no-op for a nonexistent session", () => {
-    expect(() =>
-      sessionManager.broadcast("does-not-exist", { type: "data" }),
-    ).not.toThrow();
-  });
-
-  it("owner detach arms the idle timeout (existing behavior)", () => {
-    vi.useFakeTimers();
-    try {
-      const id = createConnectedSession();
-      const ownerWs = makeFakeWs();
-      sessionManager.attachWs(id, "owner-1", ownerWs);
-
-      sessionManager.detachWs(id);
-      const session = sessionManager.getSession(id);
-      expect(session?.detachTimeout).not.toBeNull();
-      expect(session?.lastDetachedAt).not.toBeNull();
-
-      sessionManager.destroySession(id);
-    } finally {
-      vi.useRealTimers();
-    }
-  });
-
-  it("removeParticipant on a non-owner does not arm a timeout or destroy the session", () => {
-    const id = createConnectedSession();
-    const ownerWs = makeFakeWs();
-    sessionManager.attachWs(id, "owner-1", ownerWs);
-
-    const guestWs = makeFakeWs();
-    sessionManager.joinAsParticipant(id, guestWs, {
-      userId: null,
-      permissionLevel: "read-write",
-    });
-
-    sessionManager.removeParticipant(id, guestWs);
-
-    const session = sessionManager.getSession(id);
-    expect(session).not.toBeNull();
-    expect(session?.detachTimeout).toBeNull();
-    expect(session?.participants.size).toBe(1);
-    expect(sessionManager.getParticipantForWs(session!, guestWs)).toBeNull();
-    expect(
-      JSON.parse(
-        (ownerWs.send as ReturnType<typeof vi.fn>).mock.lastCall![0] as string,
-      ),
-    ).toMatchObject({
-      type: "participants",
-      participants: [{ isOwner: true }],
-    });
-
-    sessionManager.destroySession(id);
-  });
-
-  it("removeParticipant is a no-op when the ws belongs to the owner", () => {
-    const id = createConnectedSession();
-    const ownerWs = makeFakeWs();
-    sessionManager.attachWs(id, "owner-1", ownerWs);
-
-    sessionManager.removeParticipant(id, ownerWs);
-
-    const session = sessionManager.getSession(id);
-    expect(session?.participants.size).toBe(1);
-    expect(sessionManager.getParticipantForWs(session!, ownerWs)?.isOwner).toBe(
-      true,
-    );
-
-    sessionManager.destroySession(id);
-  });
-
-  it("destroySession cleans up all participants, not just the owner", () => {
-    const id = createConnectedSession();
-    const ownerWs = makeFakeWs();
-    sessionManager.attachWs(id, "owner-1", ownerWs);
-
-    const guestWs = makeFakeWs();
-    sessionManager.joinAsParticipant(id, guestWs, {
-      userId: null,
-      permissionLevel: "read-only",
-    });
-
-    sessionManager.destroySession(id);
-
-    expect(guestWs.send).toHaveBeenCalled();
-    expect(sessionManager.getSession(id)).toBeNull();
-  });
-
-  it("ownerEndSession notifies non-owner participants and destroys the session", () => {
-    const id = createConnectedSession();
-    const ownerWs = makeFakeWs();
-    sessionManager.attachWs(id, "owner-1", ownerWs);
-
-    const guestWs = makeFakeWs();
-    sessionManager.joinAsParticipant(id, guestWs, {
-      userId: null,
-      permissionLevel: "read-write",
-    });
-
-    sessionManager.ownerEndSession(id, "owner ended the session");
-
-    expect(guestWs.send).toHaveBeenCalledWith(
-      JSON.stringify({
-        type: "sessionTerminatedByOwner",
-        reason: "owner ended the session",
-      }),
-    );
-    expect(sessionManager.getSession(id)).toBeNull();
-  });
-});
-
-describe("isMessageAllowedForParticipant", () => {
-  it("allows any message type for the owner or when there is no participant", () => {
-    expect(isMessageAllowedForParticipant(null, "connectToHost")).toBe(true);
-    expect(
-      isMessageAllowedForParticipant(
-        { isOwner: true, permissionLevel: "read-write" },
-        "resize",
-      ),
-    ).toBe(true);
-  });
-
-  it("drops input from a read-only participant", () => {
-    expect(
-      isMessageAllowedForParticipant(
-        { isOwner: false, permissionLevel: "read-only" },
-        "input",
-      ),
-    ).toBe(false);
-  });
-
-  it("allows input from a read-write non-owner participant", () => {
-    expect(
-      isMessageAllowedForParticipant(
-        { isOwner: false, permissionLevel: "read-write" },
-        "input",
-      ),
-    ).toBe(true);
-  });
-
-  it("allows ping and disconnect for any non-owner participant", () => {
-    expect(
-      isMessageAllowedForParticipant(
-        { isOwner: false, permissionLevel: "read-only" },
-        "ping",
-      ),
-    ).toBe(true);
-    expect(
-      isMessageAllowedForParticipant(
-        { isOwner: false, permissionLevel: "read-only" },
-        "disconnect",
-      ),
-    ).toBe(true);
-  });
-
-  it("blocks resize and auth/tmux message types for non-owner participants regardless of permission level", () => {
-    for (const type of [
-      "resize",
-      "totp_response",
-      "password_response",
-      "tmux_attach",
-      "tmux_detach",
-      "get_cwd",
-      "vault_start_auth",
-      "opkssh_start_auth",
-    ]) {
-      expect(
-        isMessageAllowedForParticipant(
-          { isOwner: false, permissionLevel: "read-write" },
-          type,
-        ),
-      ).toBe(false);
-    }
-  });
-});
diff --git a/plugins/ssh-terminal/tests/backend/settings-validation.test.ts b/plugins/ssh-terminal/tests/backend/settings-validation.test.ts
deleted file mode 100644
index a1b941c56..000000000
--- a/plugins/ssh-terminal/tests/backend/settings-validation.test.ts
+++ /dev/null
@@ -1,49 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  validateAdminSettings,
-  validateUserSettings,
-} from "../../src/backend/settings-validation.js";
-
-describe("validateAdminSettings", () => {
-  it("rejects relative image paths", () => {
-    expect(
-      Object.keys(
-        validateAdminSettings({
-          imageLocalDir: "images",
-          imageHostPath: "tmp/images",
-        }),
-      ).sort(),
-    ).toEqual(["imageHostPath", "imageLocalDir"]);
-  });
-
-  it("accepts absolute paths and empty values", () => {
-    expect(
-      validateAdminSettings({ imageLocalDir: "", imageHostPath: "/tmp/img" }),
-    ).toEqual({});
-  });
-});
-
-describe("validateUserSettings", () => {
-  const macro = { id: "m", name: "M", steps: [] };
-
-  it("accepts bounded macros and a save without them", () => {
-    expect(validateUserSettings({ macros: [macro] })).toEqual({});
-    expect(validateUserSettings({ macros: JSON.stringify([macro]) })).toEqual(
-      {},
-    );
-    expect(validateUserSettings({ localEcho: "on" })).toEqual({});
-  });
-
-  it("refuses malformed or too many macros", () => {
-    expect(validateUserSettings({ macros: [{ id: 1 }] }).macros).toBeTruthy();
-    expect(validateUserSettings({ macros: "{" }).macros).toBeTruthy();
-    expect(
-      validateUserSettings({
-        macros: Array.from({ length: 101 }, (_, i) => ({
-          ...macro,
-          id: `${i}`,
-        })),
-      }).macros,
-    ).toBeTruthy();
-  });
-});
diff --git a/plugins/ssh-terminal/tests/backend/ssh-dns.test.ts b/plugins/ssh-terminal/tests/backend/ssh-dns.test.ts
deleted file mode 100644
index 334c4a517..000000000
--- a/plugins/ssh-terminal/tests/backend/ssh-dns.test.ts
+++ /dev/null
@@ -1,22 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import {
-  pickSshAddress,
-  resolveHostForSshConnect,
-} from "../../src/backend/helpers.js";
-
-describe("resolveHostForSshConnect", () => {
-  it("prefers IPv4 over IPv6", async () => {
-    const lookup = vi.fn().mockResolvedValue([
-      { address: "fe80::1", family: 6 },
-      { address: "192.168.1.20", family: 4 },
-    ]);
-    const result = await resolveHostForSshConnect("nas", lookup);
-    expect(result.host).toBe("192.168.1.20");
-  });
-
-  it("keeps an IPv6-only answer", () => {
-    expect(pickSshAddress({ address: "2001:db8::5", family: 6 })).toBe(
-      "2001:db8::5",
-    );
-  });
-});
diff --git a/plugins/ssh-terminal/tests/backend/terminal-settings.test.ts b/plugins/ssh-terminal/tests/backend/terminal-settings.test.ts
deleted file mode 100644
index 398102194..000000000
--- a/plugins/ssh-terminal/tests/backend/terminal-settings.test.ts
+++ /dev/null
@@ -1,77 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  DEFAULT_HOST_TERMINAL_SETTINGS,
-  hostSettingsFromTerminalConfig,
-  readHostTerminalSettings,
-  readUserSettings,
-  resolveTerminalSettings,
-} from "../../src/shared/terminal-settings";
-
-describe("hostSettingsFromTerminalConfig", () => {
-  it("keeps behavior and leaves a look-less host following the user", () => {
-    expect(
-      hostSettingsFromTerminalConfig({
-        autoMosh: true,
-        fastScrollModifier: "ctrl",
-        keepaliveInterval: 5,
-      }),
-    ).toEqual({ autoMosh: true, fastScrollModifier: "ctrl" });
-  });
-
-  it("drops values a select field would refuse", () => {
-    expect(
-      hostSettingsFromTerminalConfig({ bellStyle: "loud", cursorStyle: "bar" }),
-    ).toEqual({ inheritAppearance: false, cursorStyle: "bar" });
-  });
-
-  it("reads nothing from garbage", () => {
-    expect(hostSettingsFromTerminalConfig("{")).toEqual({});
-  });
-});
-
-describe("resolveTerminalSettings", () => {
-  it("runs with the host's values, which already follow its defaults", () => {
-    const host = readHostTerminalSettings({ fontSize: 30, autoTmux: true });
-    const resolved = resolveTerminalSettings(host);
-    expect(resolved.fontSize).toBe(30);
-    expect(resolved.autoTmux).toBe(true);
-  });
-
-  it("ignores the old follow-the-user switch", () => {
-    const host = readHostTerminalSettings({
-      inheritAppearance: true,
-      fontSize: 22,
-    });
-    expect(resolveTerminalSettings(host).fontSize).toBe(22);
-  });
-
-  it("defaults echo and link clicks to concrete modes", () => {
-    const resolved = resolveTerminalSettings(readHostTerminalSettings({}));
-    expect(resolved.localEcho).toBe("auto");
-    expect(resolved.linkClickBehavior).toBe("confirm");
-  });
-
-  it("falls back to the built-in defaults", () => {
-    expect(resolveTerminalSettings(null).theme).toBe(
-      DEFAULT_HOST_TERMINAL_SETTINGS.theme,
-    );
-  });
-});
-
-describe("readUserSettings", () => {
-  it("types what it reads and drops broken saved themes", () => {
-    expect(
-      readUserSettings({
-        terminalDefaults: { fontSize: "16", junk: 1 },
-        customThemes: [{ id: "a", name: "A", colors: {} }, { id: 1 }],
-        localEcho: "sideways",
-        linkClickBehavior: "direct",
-      }),
-    ).toEqual({
-      customThemes: [{ id: "a", name: "A", colors: {} }],
-      commandAutocomplete: false,
-      localEcho: "auto",
-      linkClickBehavior: "direct",
-    });
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/activate.test.tsx b/plugins/ssh-terminal/tests/frontend/activate.test.tsx
deleted file mode 100644
index 12b684872..000000000
--- a/plugins/ssh-terminal/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,197 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-const declared = (views?: Array<{ id: string }>) =>
-  (views ?? []).map((view) => view.id).sort();
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe(`${manifest.id} activate`, () => {
-  it("activates and registers only views its manifest declares", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    const contributes = manifest.contributes as unknown as Record<
-      string,
-      Array<{ id: string }> | undefined
-    >;
-    const tabs = declared(contributes.tabs);
-    // A rail panel may reuse one of the plugin's tab ids.
-    const panels = [...declared(contributes.panels), ...tabs];
-    const cards = declared(contributes.dashboardCards);
-    for (const id of rendered.registered.tabs()) expect(tabs).toContain(id);
-    for (const id of rendered.registered.panels()) expect(panels).toContain(id);
-    for (const id of rendered.registered.dashboardCards()) {
-      expect(cards).toContain(id);
-    }
-  });
-
-  it("removes everything it registered on deactivate", async () => {
-    const app = await renderWithApp(plugin, { manifest, locales });
-    await app.deactivate();
-    expect(app.registered.tabs()).toEqual([]);
-    expect(app.registered.panels()).toEqual([]);
-    expect(app.registered.railItems()).toEqual([]);
-    expect(app.registered.hostActions()).toEqual([]);
-    expect(app.registered.hostEditorSections()).toEqual([]);
-    expect(app.registered.dashboardCards()).toEqual([]);
-    expect(app.registered.settingsComponents()).toEqual([]);
-    expect(app.registered.actions()).toEqual([]);
-  });
-
-  it("registers the terminal session actions snippets and other plugins call into", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.actions()).toEqual(
-      expect.arrayContaining([
-        "terminal.listSessions",
-        "terminal.sendToActive",
-        "terminal.sendToSession",
-        "terminal.open",
-      ]),
-    );
-  });
-
-  it("duplicates only the SSH connection configuration into a fresh tab", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    const host = { id: 7, name: "server", ip: "192.0.2.1", port: 22 };
-    expect(rendered.registered.slot("tab.menu")).toContain(
-      "terminal.duplicateTab",
-    );
-    await rendered.app.invokeAction("terminal.duplicateTab", undefined, {
-      id: "old-tab",
-      type: "terminal",
-      host,
-      instanceId: "old-instance",
-      data: { initialPath: "/tmp", joinSharedSessionId: "shared-session" },
-    });
-    expect(rendered.shellCalls).toEqual([
-      {
-        method: "openTab",
-        args: [
-          { ...host, pluginSettings: {} },
-          "terminal",
-          { forceNewTab: true },
-        ],
-      },
-    ]);
-    await rendered.app.invokeAction("terminal.duplicateTab", undefined, {
-      id: "local",
-      type: "local-terminal",
-    });
-    expect(rendered.shellCalls).toHaveLength(1);
-  });
-
-  it("owns the host editor's Terminal tab in the SSH group", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.hostEditorSections()).toEqual(["terminal"]);
-  });
-
-  it("registers the command history panel and its rail item", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.panels()).toContain("history");
-    expect(rendered.registered.railItems().map((item) => item.id)).toContain(
-      "history",
-    );
-  });
-
-  it("offers the local terminal only in the desktop app", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.tabs()).not.toContain("local-terminal");
-    await rendered.deactivate();
-
-    (window as { IS_ELECTRON?: boolean }).IS_ELECTRON = true;
-    try {
-      rendered = await renderWithApp(plugin, { manifest, locales });
-      expect(rendered.registered.tabs()).toContain("local-terminal");
-      expect(rendered.registered.railItems().map((item) => item.id)).toContain(
-        "local-terminal",
-      );
-    } finally {
-      delete (window as { IS_ELECTRON?: boolean }).IS_ELECTRON;
-    }
-  });
-
-  it("terminal.sendToActive and terminal.listSessions report no session when none is registered", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    await expect(
-      rendered.app.invokeAction("terminal.listSessions"),
-    ).resolves.toEqual([]);
-    await expect(
-      rendered.app.invokeAction("terminal.sendToActive", "echo hi", {
-        run: true,
-      }),
-    ).resolves.toBe(false);
-  });
-
-  it("owns the SSH Tools panel and its rail item", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.panels()).toContain("ssh-tools");
-    expect(rendered.registered.railItems().map((item) => item.id)).toContain(
-      "ssh-tools",
-    );
-  });
-
-  it("registers its settings components", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.settingsComponents()).toEqual(
-      expect.arrayContaining(["touchInput", "imageStorageTest"]),
-    );
-    // Terminal defaults are host defaults now, set in the host editor.
-    expect(rendered.registered.settingsComponents()).not.toContain(
-      "terminalDefaults",
-    );
-  });
-
-  it("offers the terminal look to other plugins through actions", async () => {
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: {
-        get: async () => ({ data: { user: { terminalDefaults: {} } } }),
-      } as never,
-    });
-    const look = (await rendered.app.invokeAction("terminal.resolveTheme", {
-      host: {
-        id: "1",
-        name: "h",
-        ip: "10.0.0.1",
-        port: 22,
-        pluginSettings: {
-          "ssh-terminal": { inheritAppearance: false, theme: "dracula" },
-        },
-      },
-      appTheme: "dark",
-    })) as { themeId: string; colors: { background: string } };
-    expect(look.themeId).toBe("dracula");
-    expect(look.colors.background).toBe("#282a36");
-
-    const themes = (await rendered.app.invokeAction("terminal.themes")) as {
-      id: string;
-    }[];
-    expect(themes.map((theme) => theme.id)).toContain("dracula");
-    expect(themes.map((theme) => theme.id)).not.toContain("termixDark");
-  });
-
-  it("adds the terminal font faces while active and removes them on deactivate", async () => {
-    const app = await renderWithApp(plugin, { manifest, locales });
-    expect(
-      document.head.querySelector("style[data-termix-terminal-styles]"),
-    ).not.toBeNull();
-    await app.deactivate();
-    expect(
-      document.head.querySelector("style[data-termix-terminal-styles]"),
-    ).toBeNull();
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/lib/keybinding-dispatch.test.ts b/plugins/ssh-terminal/tests/frontend/lib/keybinding-dispatch.test.ts
deleted file mode 100644
index b348ca0ce..000000000
--- a/plugins/ssh-terminal/tests/frontend/lib/keybinding-dispatch.test.ts
+++ /dev/null
@@ -1,127 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
-import {
-  dispatchKeybindingAction,
-  isTerminalKeybindingAction,
-  validateSendControlCode,
-  validateSendText,
-} from "../../../src/frontend/lib/keybinding-dispatch";
-import type { Terminal } from "@xterm/xterm";
-import type { KeybindingDispatchContext } from "../../../src/frontend/lib/keybinding-dispatch";
-
-function makeContext(
-  overrides: Partial<KeybindingDispatchContext> = {},
-): KeybindingDispatchContext & {
-  sentData: string[];
-} {
-  const sentData: string[] = [];
-  const ws = {
-    readyState: 1,
-    send: vi.fn((raw: string) => {
-      sentData.push(JSON.parse(raw).data);
-    }),
-  };
-
-  const ctx: KeybindingDispatchContext & { sentData: string[] } = {
-    terminal: {
-      getSelection: vi.fn(() => ""),
-      clearSelection: vi.fn(),
-      paste: vi.fn(),
-    } as unknown as Terminal,
-    webSocketRef: { current: ws as unknown as WebSocket },
-    writeTextToClipboard: vi.fn().mockResolvedValue(true),
-    readTextFromClipboard: vi.fn().mockResolvedValue(""),
-    sentData,
-    ...overrides,
-  };
-  return ctx;
-}
-
-describe("dispatchKeybindingAction", () => {
-  beforeEach(() => {
-    vi.restoreAllMocks();
-  });
-
-  it("copy writes the selection to clipboard and clears it", () => {
-    const ctx = makeContext();
-    (ctx.terminal.getSelection as ReturnType<typeof vi.fn>).mockReturnValue(
-      "hello",
-    );
-    dispatchKeybindingAction({ type: "copy" }, ctx);
-    expect(ctx.writeTextToClipboard).toHaveBeenCalledWith("hello");
-    expect(ctx.terminal.clearSelection).toHaveBeenCalled();
-  });
-
-  it("copy does nothing when there is no selection", () => {
-    const ctx = makeContext();
-    dispatchKeybindingAction({ type: "copy" }, ctx);
-    expect(ctx.writeTextToClipboard).not.toHaveBeenCalled();
-    expect(ctx.terminal.clearSelection).not.toHaveBeenCalled();
-  });
-
-  it("paste reads the clipboard and pastes into the terminal", async () => {
-    const ctx = makeContext({
-      readTextFromClipboard: vi.fn().mockResolvedValue("pasted text"),
-    });
-    dispatchKeybindingAction({ type: "paste" }, ctx);
-    await Promise.resolve();
-    await Promise.resolve();
-    expect(ctx.terminal.paste).toHaveBeenCalledWith("pasted text");
-  });
-
-  it("sendControlCode sends the corresponding control byte", () => {
-    const ctx = makeContext();
-    dispatchKeybindingAction(
-      { type: "sendControlCode", controlCode: "c" },
-      ctx,
-    );
-    expect(ctx.sentData).toEqual(["\x03"]);
-  });
-
-  it("sendText sends literal text without a trailing return by default", () => {
-    const ctx = makeContext();
-    dispatchKeybindingAction({ type: "sendText", text: "ls -la" }, ctx);
-    expect(ctx.sentData).toEqual(["ls -la"]);
-  });
-
-  it("sendText appends \\r when appendEnter is true", () => {
-    const ctx = makeContext();
-    dispatchKeybindingAction(
-      { type: "sendText", text: "ls -la", appendEnter: true },
-      ctx,
-    );
-    expect(ctx.sentData).toEqual(["ls -la\r"]);
-  });
-
-  it("leaves any other action to whoever registered it", () => {
-    const ctx = makeContext();
-    expect(
-      dispatchKeybindingAction({ type: "runSnippet", snippetId: "1" }, ctx),
-    ).toBe(false);
-    expect(dispatchKeybindingAction({ type: "nextTab" }, ctx)).toBe(false);
-    expect(dispatchKeybindingAction({ type: "copy" }, ctx)).toBe(true);
-    expect(ctx.sentData).toEqual([]);
-  });
-
-  it("knows which actions are its own", () => {
-    expect(isTerminalKeybindingAction("sendText")).toBe(true);
-    expect(isTerminalKeybindingAction("runSnippet")).toBe(false);
-  });
-});
-
-describe("keybinding validators", () => {
-  it("needs text to send", () => {
-    expect(validateSendText({ type: "sendText", text: " " })).toBe(
-      "keybindings.textRequired",
-    );
-    expect(validateSendText({ type: "sendText", text: "ls" })).toBeNull();
-  });
-
-  it("needs a single letter for a control code", () => {
-    expect(
-      validateSendControlCode({ type: "sendControlCode", controlCode: "ab" }),
-    ).toBe("keybindings.controlCodeRequired");
-    expect(
-      validateSendControlCode({ type: "sendControlCode", controlCode: "w" }),
-    ).toBeNull();
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/lib/mac-line-navigation.test.ts b/plugins/ssh-terminal/tests/frontend/lib/mac-line-navigation.test.ts
deleted file mode 100644
index 4bd7a3402..000000000
--- a/plugins/ssh-terminal/tests/frontend/lib/mac-line-navigation.test.ts
+++ /dev/null
@@ -1,50 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import { getMacLineNavigationSequence } from "../../../src/frontend/lib/mac-line-navigation";
-
-function keyEvent(
-  init: Partial<KeyboardEvent> & Pick<KeyboardEvent, "code">,
-): KeyboardEvent {
-  return {
-    type: "keydown",
-    altKey: false,
-    ctrlKey: false,
-    metaKey: false,
-    shiftKey: false,
-    ...init,
-  } as KeyboardEvent;
-}
-
-describe("getMacLineNavigationSequence", () => {
-  it("maps Cmd+arrow keys on macOS", () => {
-    vi.stubGlobal("navigator", { platform: "MacIntel" });
-    expect(
-      getMacLineNavigationSequence(
-        keyEvent({ code: "ArrowLeft", metaKey: true }),
-      ),
-    ).toBe("\x01");
-    expect(
-      getMacLineNavigationSequence(
-        keyEvent({ code: "ArrowRight", metaKey: true }),
-      ),
-    ).toBe("\x05");
-    vi.unstubAllGlobals();
-  });
-
-  it("ignores modified and non-mac shortcuts", () => {
-    vi.stubGlobal("navigator", { platform: "MacIntel" });
-    expect(
-      getMacLineNavigationSequence(
-        keyEvent({ code: "ArrowLeft", metaKey: true, shiftKey: true }),
-      ),
-    ).toBeNull();
-    vi.unstubAllGlobals();
-
-    vi.stubGlobal("navigator", { platform: "Win32" });
-    expect(
-      getMacLineNavigationSequence(
-        keyEvent({ code: "ArrowLeft", metaKey: true }),
-      ),
-    ).toBeNull();
-    vi.unstubAllGlobals();
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/lib/terminal-local-echo.test.ts b/plugins/ssh-terminal/tests/frontend/lib/terminal-local-echo.test.ts
deleted file mode 100644
index cff65fbb5..000000000
--- a/plugins/ssh-terminal/tests/frontend/lib/terminal-local-echo.test.ts
+++ /dev/null
@@ -1,101 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  TerminalLocalEcho,
-  resolveLocalEchoMode,
-} from "../../../src/frontend/lib/terminal-local-echo";
-
-describe("TerminalLocalEcho", () => {
-  it("renders immediately and suppresses the matching remote echo", () => {
-    const echo = new TerminalLocalEcho("on");
-    expect(echo.handleInput("a")).toBe("a");
-    expect(echo.handleOutput("a")).toBe("");
-  });
-
-  it("rolls back a prediction when remote output differs", () => {
-    const echo = new TerminalLocalEcho("on");
-    echo.handleInput("a");
-    expect(echo.handleOutput("z")).toBe("\x1b[1D\x1b[1Xz");
-  });
-
-  it("only erases the predicted cells during rollback", () => {
-    const echo = new TerminalLocalEcho("on");
-    echo.handleInput("a");
-    echo.handleInput("b");
-    expect(echo.handleOutput("\x1b[C")).toBe("\x1b[2D\x1b[2X\x1b[C");
-  });
-
-  it.each([
-    ["split prompt", ["Pass", "word: "]],
-    ["sudo prompt", ["[sudo] password for alice: "]],
-    ["ssh-keygen prompt", ["Enter passphrase (empty for no passphrase): "]],
-    ["passwd prompt", ["New password: "]],
-  ])("does not expose input after a %s", (_name, chunks) => {
-    const echo = new TerminalLocalEcho("on");
-    for (const chunk of chunks) expect(echo.handleOutput(chunk)).toBe(chunk);
-    expect(echo.handleInput("s")).toBe("");
-  });
-
-  it("does not treat ordinary password text as a hidden-input prompt", () => {
-    const echo = new TerminalLocalEcho("on");
-    expect(echo.handleOutput("Your password has expired\r\n$ ")).toBe(
-      "Your password has expired\r\n$ ",
-    );
-    expect(echo.handleInput("s")).toBe("s");
-  });
-
-  it("does not predict control input, paste, or wide characters", () => {
-    const echo = new TerminalLocalEcho("on");
-    expect(echo.handleInput("\t")).toBe("");
-    expect(echo.handleInput("paste")).toBe("");
-    expect(echo.handleInput("界")).toBe("");
-  });
-
-  it("enables automatic prediction after repeated slow echoes", () => {
-    let now = 0;
-    const echo = new TerminalLocalEcho("auto", () => now, 100);
-    expect(echo.handleInput("a")).toBe("");
-    now = 150;
-    expect(echo.handleOutput("a")).toBe("a");
-    expect(echo.handleInput("b")).toBe("");
-    now = 300;
-    expect(echo.handleOutput("b")).toBe("b");
-    expect(echo.handleInput("c")).toBe("c");
-  });
-
-  it("waits for outstanding unpredicted input before enabling auto prediction", () => {
-    let now = 0;
-    const echo = new TerminalLocalEcho("auto", () => now, 100);
-    expect(echo.handleInput("d")).toBe("");
-    now = 150;
-    expect(echo.handleOutput("d")).toBe("d");
-    expect(echo.handleInput("o")).toBe("");
-    expect(echo.handleInput("c")).toBe("");
-    now = 300;
-    expect(echo.handleOutput("o")).toBe("o");
-    expect(echo.handleInput("k")).toBe("");
-    expect(echo.handleOutput("ck")).toBe("ck");
-    expect(echo.handleInput("e")).toBe("e");
-    expect(echo.handleInput("r")).toBe("r");
-    expect(echo.handleOutput("er")).toBe("");
-  });
-
-  it("rolls back the unmatched suffix after a partially matching output chunk", () => {
-    const echo = new TerminalLocalEcho("on");
-    for (const character of "abc") echo.handleInput(character);
-    expect(echo.handleOutput("abZ")).toBe("\x1b[1D\x1b[1XZ");
-    expect(echo.handleOutput("c")).toBe("c");
-  });
-
-  it("keeps pending predictions across an empty output chunk", () => {
-    const echo = new TerminalLocalEcho("on");
-    expect(echo.handleInput("a")).toBe("a");
-    expect(echo.handleOutput("")).toBe("");
-    expect(echo.handleOutput("a")).toBe("");
-  });
-
-  it("uses an explicit host mode before the global mode", () => {
-    expect(resolveLocalEchoMode("off", "on")).toBe("off");
-    expect(resolveLocalEchoMode("default", "on")).toBe("on");
-    expect(resolveLocalEchoMode(undefined, null)).toBe("auto");
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/lib/terminal-local-echo.xterm.test.ts b/plugins/ssh-terminal/tests/frontend/lib/terminal-local-echo.xterm.test.ts
deleted file mode 100644
index 2a6914918..000000000
--- a/plugins/ssh-terminal/tests/frontend/lib/terminal-local-echo.xterm.test.ts
+++ /dev/null
@@ -1,53 +0,0 @@
-import { Terminal } from "@xterm/xterm";
-import { afterEach, describe, expect, it } from "vitest";
-import { TerminalLocalEcho } from "../../../src/frontend/lib/terminal-local-echo";
-
-let terminal: Terminal | undefined;
-afterEach(() => terminal?.dispose());
-
-const write = (data: string) =>
-  new Promise<void>((resolve) => terminal!.write(data, resolve));
-
-function line() {
-  return terminal!.buffer.active.getLine(0)?.translateToString(true);
-}
-
-describe("local echo with xterm", () => {
-  it("keeps fast typing in order when auto prediction activates with input in flight", async () => {
-    terminal = new Terminal({ cols: 80, rows: 5 });
-    let now = 0;
-    const echo = new TerminalLocalEcho("auto", () => now, 100);
-    const input = async (data: string) => {
-      for (const character of data) await write(echo.handleInput(character));
-    };
-    await input("d");
-    now = 150;
-    await write(echo.handleOutput("d"));
-    await input("oc");
-    now = 300;
-    await write(echo.handleOutput("o"));
-    await input("k");
-    await write(echo.handleOutput("ck"));
-    await input("er ps");
-    await write(echo.handleOutput("er ps"));
-    expect(line()).toBe("docker ps");
-    expect(terminal.buffer.active.cursorX).toBe(9);
-  });
-
-  it.each(["abZ", "ab\r\n$ "])(
-    "reconciles a matching prefix followed by remote output %j",
-    async (output) => {
-      terminal = new Terminal({ cols: 80, rows: 5 });
-      const echo = new TerminalLocalEcho("on");
-      for (const character of "abc") await write(echo.handleInput(character));
-      await write(echo.handleOutput(output));
-      expect(line()).toBe(output.startsWith("abZ") ? "abZ" : "ab");
-      if (output.includes("\n")) {
-        expect(terminal.buffer.active.getLine(1)?.translateToString(true)).toBe(
-          "$ ",
-        );
-        expect(terminal.buffer.active.cursorX).toBe(2);
-      }
-    },
-  );
-});
diff --git a/plugins/ssh-terminal/tests/frontend/lib/terminal-syntax-highlighter.test.ts b/plugins/ssh-terminal/tests/frontend/lib/terminal-syntax-highlighter.test.ts
deleted file mode 100644
index 81f999f27..000000000
--- a/plugins/ssh-terminal/tests/frontend/lib/terminal-syntax-highlighter.test.ts
+++ /dev/null
@@ -1,441 +0,0 @@
-import { describe, it, expect } from "vitest";
-import {
-  highlightTerminalOutput,
-  updateControlStringMode,
-} from "../../../src/frontend/lib/terminal-syntax-highlighter";
-
-const ESC = "\x1b";
-
-describe("highlightTerminalOutput", () => {
-  it("returns empty/whitespace text unchanged", () => {
-    expect(highlightTerminalOutput("")).toBe("");
-    expect(highlightTerminalOutput("   ")).toBe("   ");
-  });
-
-  it("wraps ERROR in bright red", () => {
-    const out = highlightTerminalOutput("Something ERROR happened");
-    expect(out).toContain(ESC + "[91m");
-    expect(out).toContain("ERROR");
-  });
-
-  it("wraps lowercase error in bright red (case-insensitive)", () => {
-    const out = highlightTerminalOutput("something error happened");
-    expect(out).toContain(ESC + "[91m");
-  });
-
-  it("wraps Error (mixed case) in bright red", () => {
-    const out = highlightTerminalOutput("Error: connection refused");
-    expect(out).toContain(ESC + "[91m");
-  });
-
-  it("wraps warn (lowercase) in bright yellow", () => {
-    const out = highlightTerminalOutput("warn: disk almost full");
-    expect(out).toContain(ESC + "[93m");
-  });
-
-  it("wraps warning (lowercase) in bright yellow", () => {
-    const out = highlightTerminalOutput("warning: something is off");
-    expect(out).toContain(ESC + "[93m");
-  });
-
-  it("highlights IPv4 addresses in magenta", () => {
-    const out = highlightTerminalOutput("connect to 192.168.1.10 now");
-    expect(out).toContain("192.168.1.10");
-    expect(out).toContain(ESC + "[35m");
-  });
-
-  it("leaves text with no matchable tokens unchanged", () => {
-    const plain = "just a normal sentence here";
-    expect(highlightTerminalOutput(plain)).toBe(plain);
-  });
-
-  it("leaves text ending in an incomplete ANSI escape untouched", () => {
-    const partial = `loading${ESC}[`;
-    expect(highlightTerminalOutput(partial)).toBe(partial);
-  });
-
-  it("skips TUI cursor-positioning frames (nano/vim protection)", () => {
-    const tuiFrame = `${ESC}[H${ESC}[2J some nano content`;
-    expect(highlightTerminalOutput(tuiFrame)).toBe(tuiFrame);
-  });
-
-  it("skips private TUI mode sequences", () => {
-    const tuiFrame = `${ESC}[?1049h${ESC}[?25lERROR at /var/log/app.log`;
-    expect(highlightTerminalOutput(tuiFrame)).toBe(tuiFrame);
-  });
-
-  it("skips bracketed paste mode sequences", () => {
-    const chunk = `${ESC}[?2004hERROR: enabled paste mode`;
-    expect(highlightTerminalOutput(chunk)).toBe(chunk);
-  });
-
-  it("skips TUI frames with box-drawing characters", () => {
-    const chunk = `┌─ /var/log ─┐\n│ ERROR file │`;
-    expect(highlightTerminalOutput(chunk)).toBe(chunk);
-  });
-
-  it("skips DEC line-drawing charset frames", () => {
-    const chunk = `${ESC}(0lqq /var/log qk${ESC}(B`;
-    expect(highlightTerminalOutput(chunk)).toBe(chunk);
-  });
-
-  it("skips OSC current-directory sequences used by fish prompts", () => {
-    const chunk = `${ESC}]7;file://server/home/user/docker/sonarr\x07user@server ~/docker/sonarr> `;
-    expect(highlightTerminalOutput(chunk)).toBe(chunk);
-  });
-
-  it("skips OSC title sequences", () => {
-    const chunk = `${ESC}]0;user@server:/var/log\x07ERROR after title`;
-    expect(highlightTerminalOutput(chunk)).toBe(chunk);
-  });
-
-  it("highlights text that already has ANSI codes", () => {
-    let heavy = "";
-    for (let i = 0; i < 12; i++) heavy += `${ESC}[32mgreen${ESC}[0m `;
-    heavy += "ERROR at line 5";
-    const out = highlightTerminalOutput(heavy);
-    expect(out).toContain(ESC + "[91m");
-  });
-
-  it("does not process lines exceeding MAX_LINE_LENGTH", () => {
-    const huge = "ERROR " + "x".repeat(3000);
-    expect(highlightTerminalOutput(huge)).toBe(huge);
-  });
-
-  it("highlights simple absolute paths in cyan", () => {
-    const out = highlightTerminalOutput("log at /var/log/nginx/access.log");
-    expect(out).toContain(ESC + "[36m");
-    expect(out).toContain("/var/log/nginx/access.log");
-  });
-
-  it("highlights absolute paths with glob wildcards in cyan", () => {
-    const out = highlightTerminalOutput("files: /usr/share/doc/*/copyright");
-    expect(out).toContain(ESC + "[36m");
-    expect(out).toContain("/usr/share/doc/*/copyright");
-  });
-
-  it("highlights home paths in cyan", () => {
-    const out = highlightTerminalOutput("file: ~/documents/notes.txt");
-    expect(out).toContain(ESC + "[36m");
-    expect(out).toContain("~/documents/notes.txt");
-  });
-
-  it("highlights bracket timestamps in bright black", () => {
-    const out = highlightTerminalOutput("[12:34:56] server started");
-    expect(out).toContain(ESC + "[90m");
-    expect(out).toContain("[12:34:56]");
-  });
-
-  it("does not highlight out-of-range bracket timestamps", () => {
-    // [99:99] is not a valid time
-    const out = highlightTerminalOutput("[99:99] something");
-    expect(out).not.toContain(ESC + "[90m");
-  });
-
-  it("highlights ISO date timestamps in bright black", () => {
-    const out = highlightTerminalOutput("2024-01-15 event occurred");
-    expect(out).toContain(ESC + "[90m");
-    expect(out).toContain("2024-01-15");
-  });
-
-  it("does not highlight version strings as ISO dates", () => {
-    // 2.4.0 or 1.2024.3 should not trigger ISO date
-    const out = highlightTerminalOutput("version 2.4.0 released");
-    expect(out).toBe("version 2.4.0 released");
-  });
-
-  it("highlights labeled numbers (port)", () => {
-    const out = highlightTerminalOutput("listening on port 8080");
-    expect(out).toContain(ESC + "[96m");
-    expect(out).toContain("8080");
-  });
-
-  it("highlights labeled numbers (exit)", () => {
-    const out = highlightTerminalOutput("process exited with exit 1");
-    expect(out).toContain(ESC + "[96m");
-  });
-
-  it("highlights labeled numbers (status)", () => {
-    const out = highlightTerminalOutput("returned status 404");
-    expect(out).toContain(ESC + "[96m");
-  });
-
-  it("does not highlight standalone numbers outside labeled context", () => {
-    const out = highlightTerminalOutput("there are 42 files here");
-    expect(out).toBe("there are 42 files here");
-  });
-
-  it("does not highlight 'up' or 'active' as success", () => {
-    const out = highlightTerminalOutput("service is up and running");
-    expect(out).not.toContain(ESC + "[92m");
-  });
-
-  it("highlights unambiguous success keywords (case-insensitive)", () => {
-    const out = highlightTerminalOutput("Test passed successfully");
-    expect(out).toContain(ESC + "[92m");
-  });
-
-  it("highlights URLs with blue+underline", () => {
-    const out = highlightTerminalOutput("visit https://example.com now");
-    expect(out).toContain(ESC + "[34m");
-    expect(out).toContain(ESC + "[4m");
-  });
-
-  it("preserves \\r in CRLF terminal output", () => {
-    const out = highlightTerminalOutput("ERROR occurred\r\n");
-    expect(out).toContain("\r\n");
-  });
-
-  it("processes multi-line text line by line", () => {
-    const text = "some output\nERROR: failed\n";
-    const out = highlightTerminalOutput(text);
-    expect(out).toContain(ESC + "[91m");
-  });
-
-  it("respects category options - disabling logLevels skips error highlight", () => {
-    const out = highlightTerminalOutput("ERROR occurred", { logLevels: false });
-    expect(out).not.toContain(ESC + "[91m");
-  });
-
-  it("respects category options - disabling paths skips path highlight", () => {
-    const out = highlightTerminalOutput("at /usr/share/doc/something/file", {
-      paths: false,
-    });
-    expect(out).not.toContain(ESC + "[36m");
-  });
-
-  it("respects category options - disabling urls skips url highlight", () => {
-    const out = highlightTerminalOutput("see https://example.com", {
-      urls: false,
-    });
-    expect(out).not.toContain(ESC + "[34m");
-  });
-
-  it("respects category options - disabling ipAddresses skips IP highlight", () => {
-    const out = highlightTerminalOutput("connect to 192.168.1.1", {
-      ipAddresses: false,
-    });
-    expect(out).not.toContain(ESC + "[35m");
-  });
-
-  it("respects category options - disabling timestamps skips ISO date highlight", () => {
-    const out = highlightTerminalOutput("2024-01-15 something", {
-      timestamps: false,
-    });
-    expect(out).not.toContain(ESC + "[90m");
-  });
-
-  it("respects category options - disabling numbers skips port highlight", () => {
-    const out = highlightTerminalOutput("listening on port 8080", {
-      numbers: false,
-    });
-    expect(out).not.toContain(ESC + "[96m");
-  });
-
-  it("skips highlighting when chunk contains a mid-line carriage return", () => {
-    // Progress bars and shell prompt redraws use \r to overwrite the current line
-    const chunk = "downloading...\rdownloading [====] 100%";
-    expect(highlightTerminalOutput(chunk)).toBe(chunk);
-  });
-
-  it("still processes CRLF line endings (\\r\\n is fine)", () => {
-    const out = highlightTerminalOutput("ERROR occurred\r\n");
-    expect(out).toContain(ESC + "[91m");
-  });
-
-  it("does not highlight shell prompt lines (user@host:path$)", () => {
-    const prompt = `${ESC}[01;32mpi@raspberrypi${ESC}[00m:${ESC}[01;34m/home/pi${ESC}[00m$ `;
-    const out = highlightTerminalOutput(prompt);
-    expect(out).toBe(prompt);
-  });
-
-  it("does not highlight plain-text shell prompt line", () => {
-    const prompt = "pi@raspberrypi:/home/pi$ ";
-    const out = highlightTerminalOutput(prompt);
-    expect(out).toBe(prompt);
-  });
-
-  it("does not highlight log keywords inside bracketed SSH headings", () => {
-    const out = highlightTerminalOutput("[info@archlinux] command output");
-    expect(out).toBe("[info@archlinux] command output");
-  });
-
-  it("still highlights log keywords after a bracketed SSH heading", () => {
-    const out = highlightTerminalOutput("[warning@host] command ERROR");
-    expect(out).not.toContain(`${ESC}[93mwarning`);
-    expect(out).toContain(`${ESC}[91mERROR`);
-  });
-
-  it("does not highlight a log-level-like username split across ANSI segments in a colored SSH heading", () => {
-    // Prompt themes often color the user and host portions of "[user@host]"
-    // separately, so the heading is not one contiguous plain-text segment.
-    const chunk = `[${ESC}[1;33mwarning${ESC}[0m@host] some command output`;
-    const out = highlightTerminalOutput(chunk);
-    expect(out).toBe(chunk);
-  });
-
-  it("does not highlight 'success' when immediately followed by a path (cd output)", () => {
-    // Some shells print "success~/new/dir" or "success/path" after a cd command
-    const out = highlightTerminalOutput("success~/home/user/projects");
-    expect(out).not.toContain(ESC + "[92m");
-  });
-
-  it("still highlights 'success' when not followed by a path separator", () => {
-    const out = highlightTerminalOutput("Build success: all tests passed");
-    expect(out).toContain(ESC + "[92m");
-  });
-
-  it("highlights output lines but not the prompt in a mixed chunk", () => {
-    const chunk = `ERROR: disk full\npi@raspberrypi:~$ `;
-    const out = highlightTerminalOutput(chunk);
-    // The error line should be highlighted
-    expect(out).toContain(ESC + "[91m");
-    // The prompt line should be unchanged
-    expect(out).toContain("pi@raspberrypi:~$ ");
-    const promptLine = out.split("\n")[1];
-    expect(promptLine).toBe("pi@raspberrypi:~$ ");
-  });
-
-  it("does not highlight paths inside a command-echo line (prompt + command)", () => {
-    // When the shell echoes the user's command, it prefixes the prompt.
-    // The path in the prompt portion (/home/user) must not be highlighted —
-    // the shell already colored it, and re-coloring it causes the doubled-path bug.
-    const echo = "user@host:/home/user$ cd /opt/app/bin/files";
-    const out = highlightTerminalOutput(echo);
-    expect(out).toBe(echo);
-  });
-
-  it("does not highlight paths in colored command-echo lines (root prompt)", () => {
-    const echo = `${ESC}[01;32mroot@host${ESC}[00m:${ESC}[01;34m/home/user${ESC}[00m# cd /opt/app/bin/files`;
-    const out = highlightTerminalOutput(echo);
-    expect(out).toBe(echo);
-  });
-
-  it("does not highlight the last line of a multi-line chunk with no trailing newline", () => {
-    // In a multi-line chunk, the trailing fragment without \n could be a live
-    // readline input line. Injecting ANSI bytes there breaks bash's cursor
-    // arithmetic (causes cursor jump / text shift when using arrow keys).
-    const chunk = "ERROR: disk full\nuser@host:/path$ cd /var/log";
-    const out = highlightTerminalOutput(chunk);
-    // First line (terminated by \n) gets highlighted
-    expect(out.split("\n")[0]).toContain(ESC + "[91m");
-    // Last unterminated fragment is left verbatim
-    expect(out.split("\n")[1]).toBe("user@host:/path$ cd /var/log");
-  });
-
-  it("still highlights a single-line chunk with no trailing newline", () => {
-    // A single-line chunk with no \n is plain command output, not a readline
-    // input fragment — highlight it normally.
-    const out = highlightTerminalOutput("ERROR: something failed");
-    expect(out).toContain(ESC + "[91m");
-  });
-
-  it("highlights all lines when the chunk ends with a newline", () => {
-    // When a chunk ends with \n every line is complete output — highlight them all.
-    const chunk = "ERROR: disk full\nconnect to /var/run/app.sock\n";
-    const out = highlightTerminalOutput(chunk);
-    expect(out.split("\n")[0]).toContain(ESC + "[91m");
-    expect(out.split("\n")[1]).toContain(ESC + "[36m");
-  });
-});
-
-describe("updateControlStringMode", () => {
-  const BEL = "\x07";
-
-  it("stays inactive for output with no control string", () => {
-    expect(updateControlStringMode("total 4\nfile.txt\n", false)).toEqual({
-      isActive: false,
-      wasActive: false,
-    });
-  });
-
-  it("goes active when a control string is left open at the chunk end", () => {
-    // What PROMPT_COMMAND emits: ESC ] 0 ; <title>, terminator not yet sent.
-    const chunk = `${ESC}]0;user@host:~/path/current-dir`;
-
-    expect(updateControlStringMode(chunk, false)).toEqual({
-      isActive: true,
-      wasActive: false,
-    });
-  });
-
-  it("clears on the continuation chunk that carries the terminator", () => {
-    // The continuation has no escape byte at all, which is why every
-    // single-chunk guard misses it.
-    const continuation = `${BEL}[user@host current-dir]$ `;
-
-    expect(updateControlStringMode(continuation, true)).toEqual({
-      isActive: false,
-      wasActive: true,
-    });
-  });
-
-  it("reports a chunk that opens and closes a control string as inactive", () => {
-    const chunk = `${ESC}]0;title${BEL}ready\n`;
-
-    expect(updateControlStringMode(chunk, false)).toEqual({
-      isActive: false,
-      wasActive: false,
-    });
-  });
-
-  it("accepts ST as a terminator", () => {
-    expect(
-      updateControlStringMode(`${ESC}]7;file:///tmp${ESC}\\`, false),
-    ).toEqual({
-      isActive: false,
-      wasActive: false,
-    });
-  });
-
-  it("treats a trailing lone ESC as active, since its meaning is in the next chunk", () => {
-    expect(updateControlStringMode(`done${ESC}`, false)).toEqual({
-      isActive: true,
-      wasActive: false,
-    });
-  });
-
-  it("recognises DCS, APC and PM openers too", () => {
-    for (const opener of ["P", "^", "_"]) {
-      expect(
-        updateControlStringMode(`${ESC}${opener}payload`, false).isActive,
-      ).toBe(true);
-    }
-  });
-
-  it("does not treat CSI as a control string", () => {
-    expect(updateControlStringMode(`${ESC}[31mred${ESC}[0m`, false)).toEqual({
-      isActive: false,
-      wasActive: false,
-    });
-  });
-
-  it("leaves a continuation chunk unhighlighted", () => {
-    // The bug: this chunk highlights cleanly on its own, and injecting SGR
-    // bytes into an open OSC string dumps the payload onto the screen.
-    const continuation = `${BEL}connect to 10.0.0.11 failed`;
-    expect(highlightTerminalOutput(continuation)).not.toBe(continuation);
-
-    const state = updateControlStringMode(continuation, true);
-    expect(state.wasActive).toBe(true);
-  });
-
-  it("passes through SGR mouse-tracking reports untouched (issue #1023)", () => {
-    // ESC[<Cb;Cx;CyM is the SGR (1006) mouse-report format. The `<` marker
-    // byte was missing from the parameter-byte character class, so these
-    // sequences weren't recognised as ANSI escapes and their raw digits
-    // leaked onto the screen as visible text inside `screen`/tmux sessions.
-    const report = `${ESC}[<35;191;1M`;
-    expect(highlightTerminalOutput(report)).toBe(report);
-  });
-
-  it("passes through a burst of SGR mouse reports untouched", () => {
-    const burst = `${ESC}[<35;191;1M${ESC}[<35;186;2M${ESC}[<35;46;21M`;
-    expect(highlightTerminalOutput(burst)).toBe(burst);
-  });
-
-  it("treats a chunk ending mid SGR-mouse-report as incomplete", () => {
-    const partial = `foo${ESC}[<35;191`;
-    expect(highlightTerminalOutput(partial)).toBe(partial);
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/look/terminal-font-zoom.test.ts b/plugins/ssh-terminal/tests/frontend/look/terminal-font-zoom.test.ts
deleted file mode 100644
index bce8939b5..000000000
--- a/plugins/ssh-terminal/tests/frontend/look/terminal-font-zoom.test.ts
+++ /dev/null
@@ -1,74 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  getNextTerminalFontSize,
-  getTerminalFontZoomDirection,
-} from "../../../src/frontend/look/terminal-font-zoom";
-
-function keyEvent(
-  overrides: Partial<KeyboardEvent>,
-): Pick<KeyboardEvent, "altKey" | "code" | "ctrlKey" | "key" | "metaKey"> {
-  return {
-    altKey: false,
-    code: "",
-    ctrlKey: false,
-    key: "",
-    metaKey: false,
-    ...overrides,
-  };
-}
-
-describe("getTerminalFontZoomDirection", () => {
-  it("recognizes Ctrl+Plus and Ctrl+Minus", () => {
-    expect(
-      getTerminalFontZoomDirection(
-        keyEvent({ ctrlKey: true, code: "Equal", key: "+" }),
-      ),
-    ).toBe(1);
-    expect(
-      getTerminalFontZoomDirection(
-        keyEvent({ ctrlKey: true, code: "Minus", key: "-" }),
-      ),
-    ).toBe(-1);
-  });
-
-  it("recognizes unshifted equal, numpad, and macOS shortcuts", () => {
-    expect(
-      getTerminalFontZoomDirection(
-        keyEvent({ ctrlKey: true, code: "Equal", key: "=" }),
-      ),
-    ).toBe(1);
-    expect(
-      getTerminalFontZoomDirection(
-        keyEvent({ ctrlKey: true, code: "NumpadAdd", key: "+" }),
-      ),
-    ).toBe(1);
-    expect(
-      getTerminalFontZoomDirection(
-        keyEvent({ metaKey: true, code: "NumpadSubtract", key: "-" }),
-      ),
-    ).toBe(-1);
-  });
-
-  it("ignores unmodified and Alt-modified keys", () => {
-    expect(
-      getTerminalFontZoomDirection(keyEvent({ code: "Equal", key: "+" })),
-    ).toBe(0);
-    expect(
-      getTerminalFontZoomDirection(
-        keyEvent({ altKey: true, ctrlKey: true, code: "Minus", key: "-" }),
-      ),
-    ).toBe(0);
-  });
-});
-
-describe("getNextTerminalFontSize", () => {
-  it("changes the font size one pixel at a time", () => {
-    expect(getNextTerminalFontSize(14, 1)).toBe(15);
-    expect(getNextTerminalFontSize(14, -1)).toBe(13);
-  });
-
-  it("keeps the existing zoom limits", () => {
-    expect(getNextTerminalFontSize(36, 1)).toBe(36);
-    expect(getNextTerminalFontSize(8, -1)).toBe(8);
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/look/terminal-global-styles.test.ts b/plugins/ssh-terminal/tests/frontend/look/terminal-global-styles.test.ts
deleted file mode 100644
index f080b8063..000000000
--- a/plugins/ssh-terminal/tests/frontend/look/terminal-global-styles.test.ts
+++ /dev/null
@@ -1,89 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import {
-  ensureTerminalFontsLoaded,
-  installTerminalGlobalStyles,
-} from "../../../src/frontend/look/terminal-global-styles";
-
-describe("installTerminalGlobalStyles", () => {
-  it("adds the font faces while the plugin runs and removes them after", () => {
-    const dispose = installTerminalGlobalStyles();
-    const style = document.head.querySelector(
-      "style[data-termix-terminal-styles]",
-    );
-    expect(style?.innerHTML).toContain("Caskaydia Cove Nerd Font Mono");
-    dispose();
-    expect(
-      document.head.querySelector("style[data-termix-terminal-styles]"),
-    ).toBeNull();
-  });
-});
-
-describe("ensureTerminalFontsLoaded", () => {
-  it("requests regular, bold, italic, and bold-italic variants for the given font", () => {
-    const load = vi.fn().mockResolvedValue([]);
-    const originalFonts = document.fonts;
-    Object.defineProperty(document, "fonts", {
-      configurable: true,
-      value: { load },
-    });
-
-    try {
-      ensureTerminalFontsLoaded("Caskaydia Cove Nerd Font Mono");
-
-      expect(load).toHaveBeenCalledWith(
-        '400 16px "Caskaydia Cove Nerd Font Mono"',
-      );
-      expect(load).toHaveBeenCalledWith(
-        '700 16px "Caskaydia Cove Nerd Font Mono"',
-      );
-      expect(load).toHaveBeenCalledWith(
-        'italic 400 16px "Caskaydia Cove Nerd Font Mono"',
-      );
-      expect(load).toHaveBeenCalledWith(
-        'italic 700 16px "Caskaydia Cove Nerd Font Mono"',
-      );
-      expect(load).toHaveBeenCalledTimes(4);
-    } finally {
-      Object.defineProperty(document, "fonts", {
-        configurable: true,
-        value: originalFonts,
-      });
-    }
-  });
-
-  it("does not throw when document.fonts is unavailable", () => {
-    const originalFonts = document.fonts;
-    Object.defineProperty(document, "fonts", {
-      configurable: true,
-      value: undefined,
-    });
-
-    try {
-      expect(() => ensureTerminalFontsLoaded("JetBrains Mono")).not.toThrow();
-    } finally {
-      Object.defineProperty(document, "fonts", {
-        configurable: true,
-        value: originalFonts,
-      });
-    }
-  });
-
-  it("swallows rejected font load promises", async () => {
-    const load = vi.fn().mockRejectedValue(new Error("network error"));
-    const originalFonts = document.fonts;
-    Object.defineProperty(document, "fonts", {
-      configurable: true,
-      value: { load },
-    });
-
-    try {
-      expect(() => ensureTerminalFontsLoaded("Fira Code")).not.toThrow();
-      await new Promise((resolve) => setTimeout(resolve, 0));
-    } finally {
-      Object.defineProperty(document, "fonts", {
-        configurable: true,
-        value: originalFonts,
-      });
-    }
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/look/terminal-theme.test.ts b/plugins/ssh-terminal/tests/frontend/look/terminal-theme.test.ts
deleted file mode 100644
index 07e55c3e3..000000000
--- a/plugins/ssh-terminal/tests/frontend/look/terminal-theme.test.ts
+++ /dev/null
@@ -1,21 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { resolveTermixThemeColors } from "../../../src/frontend/look/terminal-theme";
-import { TERMINAL_THEMES } from "../../../src/frontend/look/terminal-themes";
-
-describe("resolveTermixThemeColors", () => {
-  it("uses the light selection color with the light UI theme", () => {
-    const colors = resolveTermixThemeColors("termix", "light");
-    expect(colors.background).toBe("#ffffff");
-    expect(colors.selectionBackground).toBe(
-      TERMINAL_THEMES.termixLight.colors.selectionBackground,
-    );
-  });
-
-  it("keeps the dark selection color with dark UI themes", () => {
-    const colors = resolveTermixThemeColors("termix", "dracula");
-    expect(colors.background).toBe("#282a36");
-    expect(colors.selectionBackground).toBe(
-      TERMINAL_THEMES.termixDark.colors.selectionBackground,
-    );
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/macros/terminal-macros.test.ts b/plugins/ssh-terminal/tests/frontend/macros/terminal-macros.test.ts
deleted file mode 100644
index ecff473af..000000000
--- a/plugins/ssh-terminal/tests/frontend/macros/terminal-macros.test.ts
+++ /dev/null
@@ -1,232 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import {
-  mergeLocalMacros,
-  parseTerminalMacros,
-  sanitizeTerminalMacros,
-  runTerminalMacro,
-  type MacroStep,
-  type TerminalMacro,
-} from "../../../src/frontend/macros/terminal-macros";
-
-function macro(steps: MacroStep[]): TerminalMacro {
-  return {
-    id: "macro-1",
-    name: "Test",
-    steps,
-    createdAt: "2026-01-01T00:00:00.000Z",
-    updatedAt: "2026-01-01T00:00:00.000Z",
-  };
-}
-
-describe("terminal macro runner", () => {
-  it("runs send, delay, regex wait, condition, and repeat steps", async () => {
-    vi.useFakeTimers();
-    const sent: string[] = [];
-    let listener = (_data: string) => {};
-    const run = runTerminalMacro(
-      macro([
-        { id: "send", type: "send", text: "status", pressEnter: true },
-        {
-          id: "wait",
-          type: "wait",
-          pattern: "READY\\s+42",
-          timeoutMs: 1000,
-          onTimeout: "stop",
-        },
-        {
-          id: "if",
-          type: "if",
-          pattern: "READY",
-          then: [
-            {
-              id: "repeat",
-              type: "repeat",
-              count: 2,
-              steps: [
-                { id: "ok", type: "send", text: "ok", pressEnter: false },
-              ],
-            },
-          ],
-          else: [],
-        },
-      ]),
-      {
-        send: (data) => sent.push(data),
-        subscribe: (next) => {
-          listener = next;
-          return () => {};
-        },
-      },
-    );
-    await vi.advanceTimersByTimeAsync(1);
-    listener("READY 42");
-    await run;
-    expect(sent).toEqual(["status\r", "ok", "ok"]);
-    vi.useRealTimers();
-  });
-
-  it("stops when a required regex times out", async () => {
-    vi.useFakeTimers();
-    const run = runTerminalMacro(
-      macro([
-        {
-          id: "wait",
-          type: "wait",
-          pattern: "never",
-          timeoutMs: 100,
-          onTimeout: "stop",
-        },
-      ]),
-      { send: () => {}, subscribe: () => () => {} },
-    );
-    const rejection = expect(run).rejects.toThrow("Timed out");
-    await vi.advanceTimersByTimeAsync(101);
-    await rejection;
-    vi.useRealTimers();
-  });
-
-  it("sanitizes persisted macro bounds and drops unknown steps", () => {
-    const parsed = parseTerminalMacros(
-      JSON.stringify([
-        {
-          id: "m",
-          name: "Macro",
-          steps: [
-            { id: "d", type: "delay", milliseconds: 999_999 },
-            { id: "r", type: "repeat", count: 1000, steps: [] },
-            { id: "bad", type: "execute-javascript", code: "nope" },
-          ],
-        },
-      ]),
-    );
-    expect(parsed[0].steps).toEqual([
-      { id: "d", type: "delay", milliseconds: 300_000 },
-      { id: "r", type: "repeat", count: 100, steps: [] },
-    ]);
-  });
-  it("matches literal text without regex escaping when isRegex is false", async () => {
-    vi.useFakeTimers();
-    const sent: string[] = [];
-    let listener = (_data: string) => {};
-    const run = runTerminalMacro(
-      macro([
-        {
-          id: "wait",
-          type: "wait",
-          pattern: "progress (1/2)",
-          isRegex: false,
-          timeoutMs: 1000,
-          onTimeout: "stop",
-        },
-        { id: "send", type: "send", text: "done", pressEnter: false },
-      ]),
-      {
-        send: (data) => sent.push(data),
-        subscribe: (next) => {
-          listener = next;
-          return () => {};
-        },
-      },
-    );
-    await vi.advanceTimersByTimeAsync(1);
-    listener("progress (1/2)");
-    await run;
-    expect(sent).toEqual(["done"]);
-    vi.useRealTimers();
-  });
-
-  it("falls back to literal matching when a regex is invalid", async () => {
-    vi.useFakeTimers();
-    const sent: string[] = [];
-    let listener = (_data: string) => {};
-    const run = runTerminalMacro(
-      macro([
-        {
-          id: "wait",
-          type: "wait",
-          pattern: "oops(",
-          isRegex: true,
-          timeoutMs: 1000,
-          onTimeout: "stop",
-        },
-        { id: "send", type: "send", text: "ok", pressEnter: false },
-      ]),
-      {
-        send: (data) => sent.push(data),
-        subscribe: (next) => {
-          listener = next;
-          return () => {};
-        },
-      },
-    );
-    await vi.advanceTimersByTimeAsync(1);
-    listener("oops(");
-    await run;
-    expect(sent).toEqual(["ok"]);
-    vi.useRealTimers();
-  });
-
-  it("branches on literal if-step text", async () => {
-    const sent: string[] = [];
-    await runTerminalMacro(
-      macro([
-        {
-          id: "if",
-          type: "if",
-          pattern: "a.b",
-          isRegex: false,
-          then: [{ id: "y", type: "send", text: "yes", pressEnter: false }],
-          else: [{ id: "n", type: "send", text: "no", pressEnter: false }],
-        },
-      ]),
-      { send: (data) => sent.push(data), subscribe: () => () => {} },
-    );
-    // "a.b" as a literal must not match "axb"
-    expect(sent).toEqual(["no"]);
-  });
-});
-
-describe("mergeLocalMacros", () => {
-  function storage(value: string | null) {
-    const store = new Map<string, string>();
-    if (value !== null) store.set("terminalMacros", value);
-    return {
-      store,
-      getItem: (key: string) => store.get(key) ?? null,
-      removeItem: (key: string) => void store.delete(key),
-    };
-  }
-  const saved = (id: string): TerminalMacro => ({ ...macro([]), id });
-
-  it("returns null when the browser kept nothing", () => {
-    expect(mergeLocalMacros([saved("a")], storage(null))).toBeNull();
-  });
-
-  it("adds the browser's macros the saved list does not have", () => {
-    const local = storage(
-      JSON.stringify([
-        { id: "a", name: "Dupe", steps: [] },
-        { id: "b", name: "Local", steps: [] },
-      ]),
-    );
-    const merged = mergeLocalMacros([saved("a")], local);
-    expect(merged?.macros.map((m) => m.id)).toEqual(["a", "b"]);
-    expect(local.store.has("terminalMacros")).toBe(true);
-    merged?.clear();
-    expect(local.store.has("terminalMacros")).toBe(false);
-  });
-
-  it("clears the key when everything is already saved", () => {
-    const local = storage(JSON.stringify([{ id: "a", name: "A", steps: [] }]));
-    expect(mergeLocalMacros([saved("a")], local)).toBeNull();
-    expect(local.store.has("terminalMacros")).toBe(false);
-  });
-
-  it("reads a stored array as well as its JSON", () => {
-    expect(
-      sanitizeTerminalMacros([{ id: "x", name: "X", steps: [] }]).map(
-        (m) => m.id,
-      ),
-    ).toEqual(["x"]);
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/settings/HostTerminalSettings.test.tsx b/plugins/ssh-terminal/tests/frontend/settings/HostTerminalSettings.test.tsx
deleted file mode 100644
index 7133ea78f..000000000
--- a/plugins/ssh-terminal/tests/frontend/settings/HostTerminalSettings.test.tsx
+++ /dev/null
@@ -1,83 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { cleanup, fireEvent, render, screen } from "@testing-library/react";
-import { HostTerminalSettings } from "../../../src/frontend/settings/HostTerminalSettings";
-
-globalThis.ResizeObserver ??= class {
-  observe() {}
-  unobserve() {}
-  disconnect() {}
-} as unknown as typeof ResizeObserver;
-
-afterEach(cleanup);
-
-type Form = Record<string, unknown>;
-
-/** The switch on the setting row labelled with this key. */
-function switchFor(label: string): HTMLElement {
-  const row = screen.getByText(label).closest("div.justify-between")!;
-  return row.querySelector("button")!;
-}
-
-function renderSettings(form: Form = { pluginSettings: {} }) {
-  let current: Form = form;
-  const setField = vi.fn();
-  const updateForm = vi.fn((patch: (form: Form) => Form) => {
-    current = patch(current);
-  });
-  render(
-    <HostTerminalSettings
-      form={form}
-      setField={setField}
-      updateForm={updateForm}
-      host={{ id: "1", name: "box", ip: "10.0.0.1", port: 22 }}
-    />,
-  );
-  return { setField, updateForm, current: () => current };
-}
-
-describe("HostTerminalSettings", () => {
-  it("renders the appearance and behavior cards", () => {
-    renderSettings();
-    expect(screen.getByText("hosts.terminalAppearance")).toBeTruthy();
-    expect(screen.getByText("hosts.behaviorAndAdvanced")).toBeTruthy();
-  });
-
-  it("leaves the SSH connection options to the core SSH tab", () => {
-    renderSettings();
-    expect(screen.queryByText("hosts.keepaliveIntervalLabel")).toBeNull();
-    expect(screen.queryByText("hosts.environmentVariablesLabel")).toBeNull();
-    expect(screen.queryByText("hosts.sshAgentForwardingLabel")).toBeNull();
-  });
-
-  it("draws the auto-fill switches that left the SSH tab", () => {
-    renderSettings();
-    expect(screen.getByText("hosts.passwordPromptAutoFillLabel")).toBeTruthy();
-    expect(screen.getByText("hosts.sudoPasswordAutoFillLabel")).toBeTruthy();
-  });
-
-  it("no longer draws the startup snippet, which is the snippets plugin's", () => {
-    renderSettings();
-    expect(screen.queryByText("hosts.startupSnippetLabel")).toBeNull();
-  });
-
-  it("writes its values into the host's ssh-terminal settings", () => {
-    const { current } = renderSettings({
-      pluginSettings: { other: { keep: true } },
-    });
-    fireEvent.click(switchFor("hosts.enableAutoMosh"));
-    expect(current().pluginSettings).toEqual({
-      other: { keep: true },
-      "ssh-terminal": { autoMosh: true },
-    });
-  });
-
-  it("takes the host off the user's look when the look changes", () => {
-    const { current } = renderSettings({
-      pluginSettings: { "ssh-terminal": { inheritAppearance: false } },
-    });
-    fireEvent.click(switchFor("hosts.cursorBlinking"));
-    expect(
-      (current().pluginSettings as Record<string, Form>)["ssh-terminal"],
-    ).toMatchObject({ cursorBlink: false, inheritAppearance: false });
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/settings/TouchInputSettings.test.tsx b/plugins/ssh-terminal/tests/frontend/settings/TouchInputSettings.test.tsx
deleted file mode 100644
index 869e12985..000000000
--- a/plugins/ssh-terminal/tests/frontend/settings/TouchInputSettings.test.tsx
+++ /dev/null
@@ -1,52 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import { render, screen } from "@testing-library/react";
-import userEvent from "@testing-library/user-event";
-import { TouchInputSettings } from "../../../src/frontend/settings/TouchInputSettings";
-import { TOUCH_INPUT_DEFAULTS } from "../../../src/shared/touch-input-settings";
-
-function renderSettings(values: Record<string, unknown> = {}) {
-  const setValue = vi.fn();
-  render(
-    <TouchInputSettings
-      pluginId="ssh-terminal"
-      values={values}
-      setValue={setValue}
-      running
-    />,
-  );
-  return setValue;
-}
-
-describe("TouchInputSettings", () => {
-  it("shows simple defaults, keeps tunables collapsed, and resets", async () => {
-    const user = userEvent.setup();
-    const setValue = renderSettings({
-      touchInput: { ...TOUCH_INPUT_DEFAULTS, dragThresholdPx: 20 },
-    });
-
-    expect(screen.getByText("touchInput.enabled")).toBeTruthy();
-    expect(screen.queryByLabelText("touchInput.dragThreshold")).toBeNull();
-    await user.click(screen.getByText("touchInput.advanced"));
-    expect(
-      (screen.getByLabelText("touchInput.dragThreshold") as HTMLInputElement)
-        .value,
-    ).toBe("20");
-    expect(
-      (
-        screen.getByLabelText(
-          "touchInput.maximumTicksPerFrame",
-        ) as HTMLInputElement
-      ).value,
-    ).toBe("4");
-
-    await user.click(screen.getByText("touchInput.resetDefaults"));
-    expect(setValue).toHaveBeenLastCalledWith("touchInput", {
-      ...TOUCH_INPUT_DEFAULTS,
-    });
-  });
-
-  it("falls back to the defaults when nothing is stored", () => {
-    renderSettings();
-    expect(screen.getByText("touchInput.momentumEnabled")).toBeTruthy();
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/settings/local-preferences-migration.test.ts b/plugins/ssh-terminal/tests/frontend/settings/local-preferences-migration.test.ts
deleted file mode 100644
index f6497ff16..000000000
--- a/plugins/ssh-terminal/tests/frontend/settings/local-preferences-migration.test.ts
+++ /dev/null
@@ -1,62 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { moveLocalTerminalPreferences } from "../../../src/frontend/settings/local-preferences-migration";
-import { resetTerminalClientSettings } from "../../../src/frontend/terminal-settings";
-
-function api(user: Record<string, unknown>) {
-  return {
-    get: vi.fn(async () => ({ data: { user } })),
-    put: vi.fn(async () => ({ data: {} })),
-  };
-}
-
-beforeEach(() => {
-  localStorage.clear();
-  resetTerminalClientSettings();
-});
-
-afterEach(() => resetTerminalClientSettings());
-
-describe("moveLocalTerminalPreferences", () => {
-  it("does nothing when the browser kept nothing", async () => {
-    const client = api({});
-    await moveLocalTerminalPreferences({ api: client as never });
-    expect(client.get).not.toHaveBeenCalled();
-  });
-
-  it("moves the browser's values into settings still at their default, once", async () => {
-    localStorage.setItem("terminalLocalEchoMode", "on");
-    localStorage.setItem("terminalLinkClickBehavior", "direct");
-    localStorage.setItem("commandAutocomplete", "true");
-    const client = api({ commandAutocomplete: false });
-
-    await moveLocalTerminalPreferences({ api: client as never });
-
-    expect(client.put).toHaveBeenCalledWith("/user-settings", {
-      localEcho: "on",
-      linkClickBehavior: "direct",
-      commandAutocomplete: true,
-    });
-    expect(localStorage.getItem("terminalLocalEchoMode")).toBeNull();
-    expect(localStorage.getItem("commandAutocomplete")).toBeNull();
-  });
-
-  it("keeps a value the user already changed on the server", async () => {
-    localStorage.setItem("terminalLocalEchoMode", "off");
-    const client = api({ localEcho: "on" });
-    await moveLocalTerminalPreferences({ api: client as never });
-    expect(client.put).not.toHaveBeenCalled();
-    expect(localStorage.getItem("terminalLocalEchoMode")).toBeNull();
-  });
-
-  it("keeps the browser values for next time when the server is unreachable", async () => {
-    localStorage.setItem("terminalLocalEchoMode", "on");
-    const client = {
-      get: vi.fn(async () => {
-        throw new Error("offline");
-      }),
-      put: vi.fn(),
-    };
-    await moveLocalTerminalPreferences({ api: client as never });
-    expect(localStorage.getItem("terminalLocalEchoMode")).toBe("on");
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/ssh-tools/SshToolsPanel.test.tsx b/plugins/ssh-terminal/tests/frontend/ssh-tools/SshToolsPanel.test.tsx
deleted file mode 100644
index e821874ea..000000000
--- a/plugins/ssh-terminal/tests/frontend/ssh-tools/SshToolsPanel.test.tsx
+++ /dev/null
@@ -1,67 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import {
-  act,
-  cleanup,
-  fireEvent,
-  render,
-  screen,
-} from "@testing-library/react";
-import { SshToolsPanel } from "../../../src/frontend/ssh-tools/SshToolsPanel";
-import { registerSession } from "../../../src/frontend/session-registry";
-import type { TerminalHandle } from "../../../src/frontend/terminal/terminal-types";
-
-const disposers: Array<() => void> = [];
-
-afterEach(() => {
-  cleanup();
-  for (const dispose of disposers.splice(0)) dispose();
-});
-
-function openSession(id: string, label: string) {
-  const handle = { sendInput: vi.fn() } as unknown as TerminalHandle;
-  act(() => {
-    disposers.push(registerSession({ id, hostId: 1, label }, handle));
-  });
-  return handle;
-}
-
-function renderPanel(targetTab?: { id: string }) {
-  return render(
-    <SshToolsPanel
-      targetTab={targetTab as never}
-      active
-      shell={{} as never}
-      setEditing={() => {}}
-      placement="left"
-    />,
-  );
-}
-
-describe("SshToolsPanel", () => {
-  it("says so when no terminal is open", () => {
-    renderPanel();
-    expect(screen.getByText("sshTools.noTerminalTabsOpen")).toBeTruthy();
-  });
-
-  it("lists open terminals and follows sessions opening later", () => {
-    openSession("tab-1", "web-01");
-    renderPanel();
-    expect(screen.getByText("web-01")).toBeTruthy();
-    openSession("tab-2", "db-01");
-    expect(screen.getByText("db-01")).toBeTruthy();
-  });
-
-  it("types into the selected terminals only", () => {
-    const first = openSession("tab-1", "web-01");
-    const second = openSession("tab-2", "db-01");
-    renderPanel({ id: "tab-1" });
-
-    fireEvent.click(screen.getByText(/sshTools.startRecording/));
-    fireEvent.keyDown(
-      screen.getByPlaceholderText("sshTools.broadcastInputPlaceholder"),
-      { key: "a" },
-    );
-    expect(first.sendInput).toHaveBeenCalledWith("a");
-    expect(second.sendInput).not.toHaveBeenCalled();
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/terminal/TerminalTabContent.test.tsx b/plugins/ssh-terminal/tests/frontend/terminal/TerminalTabContent.test.tsx
deleted file mode 100644
index 9972e0397..000000000
--- a/plugins/ssh-terminal/tests/frontend/terminal/TerminalTabContent.test.tsx
+++ /dev/null
@@ -1,66 +0,0 @@
-import { cleanup, render, waitFor } from "@testing-library/react";
-import { afterEach, describe, expect, it, vi } from "vitest";
-import type { ReactNode } from "react";
-import type { TabProps } from "@termix/plugin-sdk/frontend";
-
-const captured = vi.hoisted(() => ({ props: [] as Record<string, unknown>[] }));
-
-vi.mock("../../../src/frontend/terminal/Terminal", () => ({
-  Terminal: (props: Record<string, unknown>) => {
-    captured.props.push(props);
-    return null;
-  },
-}));
-
-vi.mock(
-  "../../../src/frontend/terminal/command-history/CommandHistoryContext",
-  () => ({
-    CommandHistoryProvider: ({ children }: { children: ReactNode }) => (
-      <>{children}</>
-    ),
-  }),
-);
-
-vi.mock("@termix/plugin-sdk/ui", () => ({
-  useIsMobile: () => false,
-}));
-
-import { TerminalTabContent } from "../../../src/frontend/terminal/TerminalTabContent";
-
-afterEach(() => {
-  cleanup();
-  captured.props = [];
-});
-
-function renderTab(inSplit?: boolean) {
-  const props = {
-    tab: { id: "t1", instanceId: "i1", type: "terminal", label: "web-01" },
-    host: { id: "1", name: "web-01", ip: "10.0.0.1", port: 22 },
-    sshHost: { id: 1 },
-    label: "web-01",
-    isVisible: true,
-    isFocusedPane: true,
-    inSplit,
-    handleRef: null,
-    shell: {
-      closeTab: vi.fn(),
-      renameTab: vi.fn(),
-      openTab: vi.fn(),
-    },
-  } as unknown as TabProps;
-  render(<TerminalTabContent {...props} />);
-}
-
-describe("TerminalTabContent in a split", () => {
-  it("tells the terminal it is in a split, so it does not grab focus", async () => {
-    renderTab(true);
-    await waitFor(() => expect(captured.props.length).toBeGreaterThan(0));
-    expect(captured.props.at(-1)?.splitScreen).toBe(true);
-  });
-
-  it("lets a terminal on its own take focus as before", async () => {
-    renderTab(undefined);
-    await waitFor(() => expect(captured.props.length).toBeGreaterThan(0));
-    expect(captured.props.at(-1)?.splitScreen).toBe(false);
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/terminal/TerminalToolbar.test.tsx b/plugins/ssh-terminal/tests/frontend/terminal/TerminalToolbar.test.tsx
deleted file mode 100644
index 9be3f98ef..000000000
--- a/plugins/ssh-terminal/tests/frontend/terminal/TerminalToolbar.test.tsx
+++ /dev/null
@@ -1,1083 +0,0 @@
-import {
-  act,
-  cleanup,
-  fireEvent,
-  render,
-  screen,
-  waitFor,
-} from "@testing-library/react";
-import "@testing-library/jest-dom/vitest";
-import userEvent from "@testing-library/user-event";
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { StrictMode } from "react";
-import type { Host } from "../../../src/frontend/types";
-
-const mobileApi = vi.hoisted(() => ({
-  isMobile: false as boolean | undefined,
-}));
-const slots = vi.hoisted(() => ({
-  toolbar: [] as Array<{ actionId: string; titleKey: string }>,
-  invoked: [] as unknown[][],
-  hostActions: [] as Array<Record<string, unknown>>,
-  tabs: { openTab: vi.fn(), openSingletonTab: vi.fn() },
-}));
-
-const labels: Record<string, string> = {
-  "terminalToolbar.detachTmux": "Detach tmux",
-  "terminalToolbar.detachTmuxDescription": "Detach tmux session",
-  "terminalToolbar.image": "Image actions (images only)",
-  "terminalToolbar.upload": "Upload image",
-  "terminalToolbar.uploadImage": "Upload an image to the host",
-  "terminalToolbar.uploadingImage": "Uploading image…",
-  "terminalToolbar.paste": "Paste image",
-  "terminalToolbar.pasteImage": "Paste image from clipboard (images only)",
-  "terminalToolbar.showActions": "Show toolbar",
-  "terminalToolbar.showToolbar": "Expand toolbar",
-  "terminalToolbar.hideToolbar": "Hide toolbar",
-  "terminalToolbar.layout": "Toolbar display mode",
-  "terminalToolbar.layoutIcon": "Icon only",
-  "terminalToolbar.layoutLabeled": "Icons and labels",
-  "terminalToolbar.layoutExpanded": "Expanded with metrics",
-  "terminalToolbar.moveToolbar": "Move toolbar",
-  "terminalToolbar.moveToolbarHint": "Drag to reposition the toolbar",
-  "terminalToolbar.imageActionFailed": "Image action failed",
-  "terminalToolbar.retry": "Retry",
-  "terminalToolbar.dismissError": "Dismiss image error",
-  "ai.assistant": "AI Assistant",
-};
-
-vi.mock("@termix/plugin-sdk/frontend", async (importOriginal) => ({
-  ...(await importOriginal<Record<string, unknown>>()),
-  useTranslation: () => ({
-    t: (key: string) => labels[key] ?? key,
-    language: "en",
-  }),
-  useSlotContributions: (slotId: string) =>
-    slotId === "terminal.toolbar" ? slots.toolbar : [],
-  useHostActions: () => slots.hostActions,
-  useTabs: () => slots.tabs,
-  usePluginUiPreferences: () => ({
-    values: uiPrefs.values,
-    set: uiPrefs.set,
-  }),
-}));
-
-const uiPrefs = vi.hoisted(() => {
-  const values: Record<string, unknown> = {};
-  return {
-    values,
-    set: vi.fn((key: string, value: unknown) => {
-      values[key] = value;
-    }),
-  };
-});
-
-vi.mock("@termix/plugin-sdk/ui", async (importOriginal) => ({
-  ...(await importOriginal<Record<string, unknown>>()),
-  useIsMobile: () => mobileApi.isMobile,
-  // The real slot reads the action registry; the toolbar only decides where
-  // it goes and what it is handed.
-  ActionSlot: ({
-    context,
-    enabled,
-  }: {
-    context: () => unknown[];
-    enabled?: boolean;
-  }) =>
-    enabled === false
-      ? null
-      : slots.toolbar.map((contribution) => (
-          <button
-            key={contribution.actionId}
-            type="button"
-            onClick={() => slots.invoked.push(context())}
-          >
-            {labels[contribution.titleKey] ?? contribution.titleKey}
-          </button>
-        )),
-  ComponentSlot: () => null,
-}));
-
-import { TerminalToolbar } from "../../../src/frontend/terminal/TerminalToolbar";
-import {
-  clampToolbarPosition,
-  getResponsiveToolbarDensity,
-} from "../../../src/frontend/terminal/toolbar-geometry";
-
-const host = { id: 7, connectionType: "ssh" } as unknown as Host;
-
-function renderToolbar(
-  overrides: Partial<React.ComponentProps<typeof TerminalToolbar>> = {},
-) {
-  const props: React.ComponentProps<typeof TerminalToolbar> = {
-    host,
-    isConnected: true,
-    isTmuxAttached: true,
-    onTmuxDetach: vi.fn(),
-    isImageUploading: false,
-    onUploadImage: vi.fn(),
-    onPasteImage: vi.fn(),
-    isFocused: true,
-    ...overrides,
-  };
-  return { ...render(<TerminalToolbar {...props} />), props };
-}
-
-// jsdom lacks the pointer APIs Radix Select needs to open its popup.
-beforeEach(() => {
-  for (const key of Object.keys(uiPrefs.values)) delete uiPrefs.values[key];
-  uiPrefs.set.mockClear();
-  Element.prototype.hasPointerCapture ??= () => false;
-  Element.prototype.setPointerCapture ??= () => {};
-  Element.prototype.releasePointerCapture ??= () => {};
-  Element.prototype.scrollIntoView ??= () => {};
-  vi.clearAllMocks();
-  mobileApi.isMobile = false;
-  Object.defineProperty(window, "innerWidth", {
-    configurable: true,
-    value: 1024,
-  });
-  localStorage.clear();
-  slots.toolbar = [];
-  slots.invoked = [];
-  slots.hostActions = [];
-});
-
-afterEach(() => {
-  cleanup();
-  vi.restoreAllMocks();
-  vi.unstubAllGlobals();
-});
-
-describe("toolbar host links", () => {
-  it("opens the file manager at the shell directory instead of a plain tab", () => {
-    const run = vi.fn();
-    slots.hostActions = [
-      {
-        id: "files",
-        kind: "open",
-        tabType: "files",
-        titleKey: "Files",
-        icon: () => null,
-        when: () => true,
-        run,
-      },
-    ];
-    const onOpenFiles = vi.fn();
-    renderToolbar({ onOpenFiles });
-    fireEvent.click(screen.getAllByRole("button", { name: "Files" })[0]);
-    expect(onOpenFiles).toHaveBeenCalledOnce();
-    expect(run).not.toHaveBeenCalled();
-  });
-});
-
-describe("responsive toolbar density", () => {
-  it("enters below 110 percent and restores at 115 percent", () => {
-    expect(getResponsiveToolbarDensity("labeled", "labeled", 1099, 1000)).toBe(
-      "icon",
-    );
-    expect(getResponsiveToolbarDensity("labeled", "labeled", 1100, 1000)).toBe(
-      "labeled",
-    );
-    expect(getResponsiveToolbarDensity("labeled", "icon", 1149, 1000)).toBe(
-      "icon",
-    );
-    expect(getResponsiveToolbarDensity("labeled", "icon", 1150, 1000)).toBe(
-      "labeled",
-    );
-  });
-
-  it("never falls back when Icon is explicitly selected", () => {
-    expect(getResponsiveToolbarDensity("icon", "icon", 10, 1000)).toBe("icon");
-    expect(getResponsiveToolbarDensity("icon", "icon", 2000, 1000)).toBe(
-      "icon",
-    );
-  });
-
-  it("retains the prior effective state while measurement is unavailable", () => {
-    expect(getResponsiveToolbarDensity("expanded", "expanded", 0, 1000)).toBe(
-      "expanded",
-    );
-    expect(getResponsiveToolbarDensity("expanded", "icon", 0, 1000)).toBe(
-      "icon",
-    );
-  });
-});
-
-describe("TerminalToolbar Phase 1", () => {
-  it("clamps vertical movement and preserves over-tall recovery", () => {
-    const hostRect = {
-      left: 0,
-      right: 400,
-      top: 0,
-      bottom: 200,
-      width: 400,
-      height: 200,
-    };
-    const toolbarRect = {
-      left: 100,
-      right: 300,
-      top: 140,
-      bottom: 190,
-      width: 200,
-      height: 50,
-    };
-    expect(
-      clampToolbarPosition({ x: 0, y: -999 }, toolbarRect, hostRect, {
-        x: 0,
-        y: 0,
-      }).y,
-    ).toBe(-132);
-    expect(
-      clampToolbarPosition({ x: 0, y: 999 }, toolbarRect, hostRect, {
-        x: 0,
-        y: 0,
-      }).y,
-    ).toBe(2);
-    expect(
-      clampToolbarPosition(
-        { x: 0, y: -999 },
-        { ...toolbarRect, top: 150, bottom: 350, height: 200 },
-        hostRect,
-        { x: 0, y: 0 },
-      ).y,
-    ).toBe(-298);
-  });
-
-  it("keeps horizontal outputs unchanged during simultaneous movement", () => {
-    const hostRect = {
-      left: 100,
-      right: 500,
-      top: 50,
-      bottom: 350,
-      width: 400,
-      height: 300,
-    };
-    const toolbarRect = {
-      left: 250,
-      right: 450,
-      top: 280,
-      bottom: 330,
-      width: 200,
-      height: 50,
-    };
-    expect(
-      clampToolbarPosition({ x: -999, y: -100 }, toolbarRect, hostRect, {
-        x: 0,
-        y: 0,
-      }),
-    ).toEqual({ x: -142, y: -100 });
-    expect(
-      clampToolbarPosition({ x: 999, y: 12 }, toolbarRect, hostRect, {
-        x: 0,
-        y: 0,
-      }),
-    ).toEqual({ x: 42, y: 12 });
-  });
-
-  it("fills the full terminal surface while remaining bottom-centered and pointer transparent", () => {
-    const { container } = renderToolbar();
-    const toolbarHost = container.querySelector("[data-terminal-toolbar-host]");
-    const toolbar = container.querySelector("[data-terminal-toolbar-wide]");
-    expect(toolbarHost).toHaveClass(
-      "absolute",
-      "inset-0",
-      "flex",
-      "items-end",
-      "justify-center",
-      "pointer-events-none",
-      "pb-2",
-    );
-    expect(toolbarHost).not.toHaveClass("inset-x-2", "bottom-2");
-    expect(toolbar).toHaveClass("pointer-events-auto");
-    expect(toolbar).toHaveStyle({ transform: "translate(0px, 0px)" });
-  });
-
-  it("clamps every edge and preserves recovery for an over-wide toolbar", () => {
-    const hostRect = {
-      left: 100,
-      right: 500,
-      top: 50,
-      bottom: 350,
-      width: 400,
-      height: 300,
-    };
-    const toolbar = {
-      left: 250,
-      right: 450,
-      top: 280,
-      bottom: 330,
-      width: 200,
-      height: 50,
-    };
-    expect(
-      clampToolbarPosition({ x: -500, y: 0 }, toolbar, hostRect, {
-        x: 0,
-        y: 0,
-      }),
-    ).toEqual({
-      x: -142,
-      y: 0,
-    });
-    expect(
-      clampToolbarPosition({ x: 500, y: 0 }, toolbar, hostRect, { x: 0, y: 0 }),
-    ).toEqual({
-      x: 42,
-      y: 0,
-    });
-    expect(
-      clampToolbarPosition({ x: 0, y: -500 }, toolbar, hostRect, {
-        x: 0,
-        y: 0,
-      }),
-    ).toEqual({
-      x: 0,
-      y: -222,
-    });
-    expect(
-      clampToolbarPosition({ x: 0, y: 500 }, toolbar, hostRect, { x: 0, y: 0 }),
-    ).toEqual({
-      x: 0,
-      y: 12,
-    });
-    expect(
-      clampToolbarPosition(
-        { x: -999, y: 0 },
-        { ...toolbar, left: -100, right: 600, width: 700 },
-        hostRect,
-        { x: 0, y: 0 },
-      ).x,
-    ).toBe(-448);
-  });
-
-  it("clamps an off-screen restored position to actual host bounds", async () => {
-    localStorage.setItem(
-      "termix-terminal-toolbar-position-v2",
-      JSON.stringify({ x: 9000, y: -9000 }),
-    );
-    const original = HTMLElement.prototype.getBoundingClientRect;
-    vi.spyOn(HTMLElement.prototype, "getBoundingClientRect").mockImplementation(
-      function () {
-        if (this.hasAttribute("data-terminal-toolbar-host")) {
-          return DOMRect.fromRect({ x: 100, y: 50, width: 500, height: 300 });
-        }
-        if (this.hasAttribute("data-terminal-toolbar-wide")) {
-          const match = this.style.transform.match(
-            /translate\(([-\d.]+)px, ([-\d.]+)px\)/,
-          );
-          const x = Number(match?.[1] ?? 0);
-          const y = Number(match?.[2] ?? 0);
-          return DOMRect.fromRect({
-            x: 250 + x,
-            y: 250 + y,
-            width: 250,
-            height: 50,
-          });
-        }
-        return original.call(this);
-      },
-    );
-    const { container } = renderToolbar();
-    await waitFor(() =>
-      expect(
-        (container.querySelector("[data-terminal-toolbar-wide]") as HTMLElement)
-          .style.transform,
-      ).toBe("translate(0px, 0px)"),
-    );
-  });
-
-  it("renders the PC toolbar and Image group with adjacent actions", () => {
-    const { container } = renderToolbar();
-    expect(container.querySelector("[data-terminal-toolbar-host]")).toHaveClass(
-      "@container",
-    );
-    expect(container.querySelector("[data-terminal-toolbar-wide]")).toHaveClass(
-      "pointer-events-auto",
-    );
-    expect(
-      container.querySelector("[data-terminal-toolbar-narrow]"),
-    ).toBeNull();
-
-    const imageGroup = screen.getAllByRole("group", {
-      name: "Image actions (images only)",
-    })[0];
-    expect(imageGroup.querySelectorAll("button, label")).toHaveLength(2);
-    expect(
-      screen.getAllByRole("button", { name: "Upload an image to the host" })[0],
-    ).toBeVisible();
-    expect(
-      screen.getAllByRole("button", {
-        name: "Paste image from clipboard (images only)",
-      })[0],
-    ).toBeVisible();
-  });
-
-  it("uses explicit labels, conditional tmux, and compact interactive targets", () => {
-    const { rerender, props } = renderToolbar();
-    expect(
-      screen.getAllByRole("button", { name: "Detach tmux session" })[0],
-    ).toHaveTextContent("Detach tmux");
-    expect(
-      screen.getAllByRole("button", { name: "Detach tmux session" })[0],
-    ).toHaveClass("min-h-8", "min-w-8");
-    rerender(<TerminalToolbar {...props} isTmuxAttached={false} />);
-    expect(
-      screen.queryByRole("button", { name: "Detach tmux session" }),
-    ).not.toBeInTheDocument();
-  });
-
-  it("exposes density as a select and applies the chosen mode", async () => {
-    const user = userEvent.setup();
-    renderToolbar();
-    const trigger = screen.getByRole("combobox", {
-      name: "Toolbar display mode",
-    });
-    expect(trigger).toHaveTextContent("");
-    await user.click(trigger);
-    const options = await screen.findAllByRole("option");
-    expect(options.map((option) => option.textContent)).toEqual([
-      "Icon only",
-      "Icons and labels",
-      "Expanded with metrics",
-    ]);
-    await user.click(
-      screen.getByRole("option", { name: "Expanded with metrics" }),
-    );
-    await waitFor(() =>
-      expect(uiPrefs.set).toHaveBeenCalledWith("toolbarDensity", "expanded"),
-    );
-  });
-
-  it("keeps one file input mounted, resets repeated selections, and exposes loading", () => {
-    const onUploadImage = vi.fn();
-    const { container, rerender, props } = renderToolbar({ onUploadImage });
-    const input = container.querySelector(
-      'input[type="file"]',
-    ) as HTMLInputElement;
-    expect(container.querySelectorAll('input[type="file"]')).toHaveLength(1);
-    const file = new File(["image"], "same.png", { type: "image/png" });
-    fireEvent.change(input, { target: { files: [file] } });
-    fireEvent.change(input, { target: { files: [file] } });
-    expect(onUploadImage).toHaveBeenCalledTimes(2);
-    rerender(<TerminalToolbar {...props} isImageUploading />);
-    expect(container.querySelector('input[type="file"]')).toBe(input);
-    expect(screen.getByRole("status")).toHaveTextContent("Uploading image…");
-    expect(
-      screen.getAllByRole("button", { name: "Upload an image to the host" })[0],
-    ).toBeDisabled();
-    expect(
-      screen.getAllByRole("button", {
-        name: "Paste image from clipboard (images only)",
-      })[0],
-    ).toBeDisabled();
-  });
-
-  it("hides clearly, leaves recovery, and closes open UI on disconnect", async () => {
-    const user = userEvent.setup();
-    const { rerender, props } = renderToolbar();
-    await user.click(screen.getByRole("button", { name: "Hide toolbar" }));
-    const collapsedMover = screen.getByRole("button", {
-      name: "Move toolbar",
-    });
-    expect(collapsedMover).toHaveAttribute("aria-label", "Move toolbar");
-    await user.click(screen.getByRole("button", { name: "Expand toolbar" }));
-    expect(
-      screen.getByRole("combobox", { name: "Toolbar display mode" }),
-    ).toBeInTheDocument();
-    rerender(<TerminalToolbar {...props} isConnected={false} />);
-    expect(
-      screen.queryByRole("combobox", { name: "Toolbar display mode" }),
-    ).not.toBeInTheDocument();
-  });
-
-  it("calls paste synchronously in the activation handler and does not cancel outside pointerdown", () => {
-    const onPasteImage = vi.fn();
-    renderToolbar({ onPasteImage });
-    const paste = screen.getAllByRole("button", {
-      name: "Paste image from clipboard (images only)",
-    })[0];
-    fireEvent.click(paste);
-    expect(onPasteImage).toHaveBeenCalledOnce();
-    const outside = new PointerEvent("pointerdown", {
-      bubbles: true,
-      cancelable: true,
-    });
-    document.body.dispatchEvent(outside);
-    expect(outside.defaultPrevented).toBe(false);
-  });
-
-  it("shows an actionable image error and retries the failed activation", async () => {
-    const user = userEvent.setup();
-    const onPasteImage = vi
-      .fn<() => Promise<void>>()
-      .mockRejectedValueOnce(new Error("Clipboard permission denied"))
-      .mockResolvedValueOnce();
-    renderToolbar({ onPasteImage });
-    await user.click(
-      screen.getAllByRole("button", {
-        name: "Paste image from clipboard (images only)",
-      })[0],
-    );
-    expect(await screen.findByRole("alert")).toHaveTextContent(
-      "Clipboard permission denied",
-    );
-    await user.click(screen.getByRole("button", { name: "Retry" }));
-    expect(onPasteImage).toHaveBeenCalledTimes(2);
-    await waitFor(() =>
-      expect(screen.queryByRole("alert")).not.toBeInTheDocument(),
-    );
-  });
-
-  it("routes synchronous image failures through the alert flow", async () => {
-    renderToolbar({
-      onPasteImage: vi.fn(() => {
-        throw new Error("Synchronous clipboard failure");
-      }),
-    });
-    fireEvent.click(
-      screen.getByRole("button", {
-        name: "Paste image from clipboard (images only)",
-      }),
-    );
-    expect(await screen.findByRole("alert")).toHaveTextContent(
-      "Synchronous clipboard failure",
-    );
-  });
-
-  it("orders desktop actions and keeps the grab handle persistent", () => {
-    const { container } = renderToolbar();
-    const labels = Array.from(
-      container.querySelectorAll("[data-terminal-toolbar-wide] button"),
-    ).map((button) => button.getAttribute("aria-label"));
-    expect(labels).toEqual([
-      "Detach tmux session",
-      "Upload an image to the host",
-      "Paste image from clipboard (images only)",
-      "Toolbar display mode",
-      "Hide toolbar",
-      "Move toolbar",
-    ]);
-  });
-
-  it("shows three modes and fades the expanded toolbar", async () => {
-    const user = userEvent.setup();
-    const { container } = renderToolbar();
-    const toolbar = container.querySelector(
-      "[data-terminal-toolbar-wide]",
-    ) as HTMLElement;
-    expect(toolbar).toHaveClass(
-      "opacity-30",
-      "transition-opacity",
-      "hover:opacity-100",
-      "focus-within:opacity-100",
-    );
-    await user.click(
-      screen.getByRole("combobox", { name: "Toolbar display mode" }),
-    );
-    expect(await screen.findAllByRole("option")).toHaveLength(3);
-  });
-
-  it("gives the collapsed toolbar idle opacity and keyboard recovery", async () => {
-    const user = userEvent.setup();
-    const { container } = renderToolbar();
-    await user.click(screen.getByRole("button", { name: "Hide toolbar" }));
-    const toolbar = container.querySelector(
-      "[data-terminal-toolbar-wide]",
-    ) as HTMLElement;
-    expect(toolbar).toHaveClass(
-      "opacity-100",
-      "hover:opacity-100",
-      "focus-within:opacity-100",
-    );
-    expect(
-      screen.getByRole("button", { name: "Expand toolbar" }),
-    ).toBeVisible();
-    const collapsedMover = screen.getByRole("button", {
-      name: "Move toolbar",
-    });
-    expect(collapsedMover).toBeVisible();
-    expect(
-      container.querySelector("[data-toolbar-collapsed]"),
-    ).toBeInTheDocument();
-    collapsedMover.focus();
-    expect(toolbar).toHaveClass("focus-within:opacity-100");
-    const expandButton = screen.getByRole("button", {
-      name: "Expand toolbar",
-    });
-    expandButton.focus();
-    await user.keyboard("{Enter}");
-    await waitFor(() =>
-      expect(
-        screen.getByRole("button", { name: "Hide toolbar" }),
-      ).toHaveFocus(),
-    );
-  }, 15_000);
-
-  it("keeps the mover on the right edge across collapse and expansion", async () => {
-    const original = HTMLElement.prototype.getBoundingClientRect;
-    vi.spyOn(HTMLElement.prototype, "getBoundingClientRect").mockImplementation(
-      function () {
-        if (this.hasAttribute("data-terminal-toolbar-host")) {
-          return DOMRect.fromRect({ x: 100, y: 50, width: 500, height: 300 });
-        }
-        if (this.hasAttribute("data-terminal-toolbar-wide")) {
-          const match = this.style.transform.match(
-            /translate\(([-\d.]+)px, ([-\d.]+)px\)/,
-          );
-          const collapsed = !this.querySelector(
-            'button[aria-label="Hide toolbar"]',
-          );
-          return DOMRect.fromRect({
-            x: 225 + Number(match?.[1] ?? 0),
-            y: 290 + Number(match?.[2] ?? 0),
-            width: collapsed ? 44 : 250,
-            height: collapsed ? 44 : 50,
-          });
-        }
-        return original.call(this);
-      },
-    );
-    localStorage.setItem(
-      "termix-terminal-toolbar-position-v2",
-      JSON.stringify({ x: 117, y: 2 }),
-    );
-    const { container } = renderToolbar();
-    const toolbar = container.querySelector(
-      "[data-terminal-toolbar-wide]",
-    ) as HTMLElement;
-    await userEvent
-      .setup()
-      .click(screen.getByRole("button", { name: "Hide toolbar" }));
-    expect(toolbar.style.transform).toBe("translate(323px, 2px)");
-    await userEvent
-      .setup()
-      .click(screen.getByRole("button", { name: "Expand toolbar" }));
-    expect(toolbar.style.transform).toBe("translate(117px, 2px)");
-  });
-
-  it("moves and persists the toolbar position, then stops after pointerup", () => {
-    const { container, unmount } = renderToolbar();
-    const grab = screen.getByRole("button", { name: "Move toolbar" });
-    const toolbar = container.querySelector(
-      "[data-terminal-toolbar-wide]",
-    ) as HTMLElement;
-    fireEvent.pointerDown(grab, {
-      pointerId: 1,
-      button: 0,
-      clientX: 100,
-      clientY: 100,
-    });
-    fireEvent.pointerMove(grab, {
-      pointerId: 1,
-      clientX: 140,
-      clientY: 90,
-    });
-    expect(toolbar.style.transform).toBe("translate(40px, -10px)");
-    fireEvent.pointerUp(grab, { pointerId: 1 });
-    expect(
-      JSON.parse(localStorage.getItem("termix-terminal-toolbar-position-v2")!),
-    ).toEqual({ x: 40, y: -10 });
-    fireEvent.pointerMove(grab, {
-      pointerId: 1,
-      clientX: 500,
-      clientY: 500,
-    });
-    expect(toolbar.style.transform).toBe("translate(40px, -10px)");
-    unmount();
-    const second = renderToolbar();
-    expect(
-      (
-        second.container.querySelector(
-          "[data-terminal-toolbar-wide]",
-        ) as HTMLElement
-      ).style.transform,
-    ).toBe("translate(40px, -10px)");
-  });
-
-  it("moves on both axes, clamps safely, ignores a different pointer ID, and persists", () => {
-    const original = HTMLElement.prototype.getBoundingClientRect;
-    vi.spyOn(HTMLElement.prototype, "getBoundingClientRect").mockImplementation(
-      function () {
-        if (this.hasAttribute("data-terminal-toolbar-host")) {
-          return DOMRect.fromRect({ x: 100, y: 50, width: 500, height: 300 });
-        }
-        if (this.hasAttribute("data-terminal-toolbar-wide")) {
-          const match = this.style.transform.match(
-            /translate\(([-\d.]+)px, ([-\d.]+)px\)/,
-          );
-          return DOMRect.fromRect({
-            x: 225 + Number(match?.[1] ?? 0),
-            y: 290 + Number(match?.[2] ?? 0),
-            width: 250,
-            height: 50,
-          });
-        }
-        return original.call(this);
-      },
-    );
-    const { container } = renderToolbar();
-    const grab = screen.getByRole("button", { name: "Move toolbar" });
-    const toolbar = container.querySelector(
-      "[data-terminal-toolbar-wide]",
-    ) as HTMLElement;
-    fireEvent.pointerDown(grab, {
-      pointerId: 11,
-      button: 0,
-      clientX: 10,
-      clientY: 100,
-    });
-    fireEvent.pointerMove(grab, {
-      pointerId: 12,
-      clientX: 30,
-      clientY: -500,
-    });
-    expect(toolbar).toHaveStyle({ transform: "translate(0px, 0px)" });
-    fireEvent.pointerMove(grab, {
-      pointerId: 11,
-      clientX: 30,
-      clientY: 120,
-    });
-    expect(toolbar.style.transform).toBe("translate(20px, 2px)");
-    fireEvent.pointerMove(grab, {
-      pointerId: 11,
-      clientX: 500,
-      clientY: 500,
-    });
-    expect(toolbar.style.transform).toBe("translate(117px, 2px)");
-    fireEvent.pointerMove(grab, {
-      pointerId: 11,
-      clientX: 500,
-      clientY: 500,
-    });
-    expect(toolbar.style.transform).toBe("translate(117px, 2px)");
-    fireEvent.pointerUp(grab, { pointerId: 11 });
-    expect(
-      JSON.parse(localStorage.getItem("termix-terminal-toolbar-position-v2")!),
-    ).toEqual({ x: 117, y: 2 });
-  });
-
-  it("avoids ResizeObserver write churn and writes one real reclamp", async () => {
-    let resizeCallback: ResizeObserverCallback | undefined;
-    class ControlledResizeObserver {
-      constructor(callback: ResizeObserverCallback) {
-        resizeCallback = callback;
-      }
-      observe() {}
-      disconnect() {}
-      unobserve() {}
-    }
-    vi.stubGlobal("ResizeObserver", ControlledResizeObserver);
-    let hostWidth = 500;
-    const original = HTMLElement.prototype.getBoundingClientRect;
-    vi.spyOn(HTMLElement.prototype, "getBoundingClientRect").mockImplementation(
-      function () {
-        if (this.hasAttribute("data-terminal-toolbar-host")) {
-          return DOMRect.fromRect({
-            x: 0,
-            y: 0,
-            width: hostWidth,
-            height: 300,
-          });
-        }
-        if (this.hasAttribute("data-terminal-toolbar-wide")) {
-          const match = this.style.transform.match(
-            /translate\(([-\d.]+)px, ([-\d.]+)px\)/,
-          );
-          return DOMRect.fromRect({
-            x: 125 + Number(match?.[1] ?? 0),
-            y: 242 + Number(match?.[2] ?? 0),
-            width: 250,
-            height: 50,
-          });
-        }
-        return original.call(this);
-      },
-    );
-    const writes = vi.spyOn(Storage.prototype, "setItem");
-    renderToolbar();
-    writes.mockClear();
-    act(() => {
-      resizeCallback?.([], {} as ResizeObserver);
-      resizeCallback?.([], {} as ResizeObserver);
-    });
-    expect(writes).not.toHaveBeenCalledWith(
-      "termix-terminal-toolbar-position-v2",
-      expect.any(String),
-    );
-    hostWidth = 200;
-    act(() => resizeCallback?.([], {} as ResizeObserver));
-    expect(writes).not.toHaveBeenCalledWith(
-      "termix-terminal-toolbar-position-v2",
-      expect.any(String),
-    );
-    expect(
-      writes.mock.calls.filter(
-        ([key]) => key === "termix-terminal-toolbar-position-v2",
-      ),
-    ).toHaveLength(0);
-  });
-
-  it.each([undefined, true])(
-    "does not mount or run desktop side effects when mobile is %s",
-    (isMobile) => {
-      mobileApi.isMobile = isMobile;
-      localStorage.setItem("termix-terminal-toolbar-density", "expanded");
-      const writes = vi.spyOn(Storage.prototype, "setItem");
-      const addWindowListener = vi.spyOn(window, "addEventListener");
-      const resizeObserver = vi.fn();
-      vi.stubGlobal("ResizeObserver", resizeObserver);
-
-      const { container } = renderToolbar();
-
-      expect(
-        container.querySelector("[data-terminal-toolbar-host]"),
-      ).not.toBeInTheDocument();
-      expect(writes).not.toHaveBeenCalled();
-      expect(resizeObserver).not.toHaveBeenCalled();
-      expect(addWindowListener).not.toHaveBeenCalledWith(
-        "resize",
-        expect.any(Function),
-      );
-    },
-  );
-
-  it("ends dragging on pointer cancellation and lost capture, and rejects touch", () => {
-    const { container } = renderToolbar();
-    const grab = screen.getByRole("button", { name: "Move toolbar" });
-    const toolbar = container.querySelector(
-      "[data-terminal-toolbar-wide]",
-    ) as HTMLElement;
-    fireEvent.pointerDown(grab, {
-      pointerId: 2,
-      pointerType: "touch",
-      button: 0,
-      clientX: 10,
-      clientY: 10,
-    });
-    fireEvent.pointerMove(grab, { pointerId: 2, clientX: 50, clientY: 50 });
-    expect(toolbar.style.transform).toBe("translate(0px, 0px)");
-
-    fireEvent.pointerDown(grab, {
-      pointerId: 3,
-      button: 0,
-      clientX: 10,
-      clientY: 10,
-    });
-    fireEvent.pointerCancel(grab, { pointerId: 3 });
-    fireEvent.pointerMove(grab, { pointerId: 3, clientX: 50, clientY: 50 });
-    expect(toolbar.style.transform).toBe("translate(0px, 0px)");
-
-    fireEvent.pointerDown(grab, {
-      pointerId: 4,
-      button: 0,
-      clientX: 10,
-      clientY: 10,
-    });
-    fireEvent.lostPointerCapture(grab, { pointerId: 4 });
-    fireEvent.pointerMove(grab, { pointerId: 4, clientX: 50, clientY: 50 });
-    expect(toolbar.style.transform).toBe("translate(0px, 0px)");
-  });
-
-  it("ignores stale image completions after an instance change in Strict Mode", async () => {
-    let reject!: (error: Error) => void;
-    const pending = new Promise<void>((_, rejectPromise) => {
-      reject = rejectPromise;
-    });
-    const props = {
-      host,
-      isConnected: true,
-      isTmuxAttached: false,
-      onTmuxDetach: vi.fn(),
-      isImageUploading: false,
-      onUploadImage: vi.fn(),
-      onPasteImage: vi.fn(() => pending),
-      isFocused: true,
-    };
-    const { rerender } = render(
-      <StrictMode>
-        <TerminalToolbar {...props} />
-      </StrictMode>,
-    );
-    fireEvent.click(
-      screen.getByRole("button", {
-        name: "Paste image from clipboard (images only)",
-      }),
-    );
-    rerender(
-      <StrictMode>
-        <TerminalToolbar
-          {...props}
-          host={{ ...host, id: 8 } as unknown as Host}
-        />
-      </StrictMode>,
-    );
-    reject(new Error("old instance"));
-    await Promise.resolve();
-    expect(screen.queryByRole("alert")).not.toBeInTheDocument();
-  });
-
-  describe("host quick links", () => {
-    const Icon = () => null;
-
-    it("offers other plugins' open actions for this host", async () => {
-      const run = vi.fn();
-      slots.hostActions = [
-        {
-          id: "docker",
-          titleKey: "Docker",
-          icon: Icon,
-          kind: "open",
-          when: () => true,
-          run,
-        },
-        {
-          id: "gone",
-          titleKey: "Hidden",
-          icon: Icon,
-          kind: "open",
-          when: () => false,
-          run,
-        },
-        {
-          id: "terminal",
-          titleKey: "Terminal",
-          icon: Icon,
-          kind: "connect",
-          when: () => true,
-          tabType: "terminal",
-        },
-        {
-          id: "tunnel",
-          titleKey: "Tunnels",
-          icon: Icon,
-          kind: "open",
-          when: () => true,
-          tabType: "tunnel",
-        },
-      ];
-      renderToolbar();
-
-      expect(screen.queryByRole("button", { name: "Hidden" })).toBeNull();
-      expect(screen.queryByRole("button", { name: "Terminal" })).toBeNull();
-      await userEvent.click(screen.getByRole("button", { name: "Docker" }));
-      expect(run).toHaveBeenCalledTimes(1);
-      await userEvent.click(screen.getByRole("button", { name: "Tunnels" }));
-      expect(slots.tabs.openTab).toHaveBeenCalledWith(
-        expect.anything(),
-        "tunnel",
-      );
-    });
-  });
-
-  describe("contributed toolbar actions", () => {
-    it("shows no contributed button and no stray separator when nothing contributed", () => {
-      const { container } = renderToolbar();
-      expect(screen.queryByRole("button", { name: "AI Assistant" })).toBeNull();
-      const separatorsWithout = container.querySelectorAll(".w-px").length;
-
-      cleanup();
-      slots.toolbar = [
-        { actionId: "ai.openWithContext", titleKey: "ai.assistant" },
-      ];
-      const withButton = renderToolbar().container;
-      expect(withButton.querySelectorAll(".w-px").length).toBe(
-        separatorsWithout + 1,
-      );
-    });
-
-    it("hands the action the terminal slot api", async () => {
-      slots.toolbar = [
-        { actionId: "ai.openWithContext", titleKey: "ai.assistant" },
-      ];
-      const slotApi = {
-        host: undefined,
-        getBufferText: vi.fn(() => "$ whoami\nroot"),
-        sessionId: () => null,
-        openSidePanel: vi.fn(),
-        runCommand: vi.fn(),
-        getShareTarget: () => null,
-      };
-      renderToolbar({ slotApi });
-      await userEvent.click(
-        screen.getByRole("button", { name: "AI Assistant" }),
-      );
-      expect(slots.invoked).toEqual([[slotApi]]);
-    });
-
-    it("hides the slot when the host has contributed actions disabled", () => {
-      slots.toolbar = [
-        { actionId: "ai.openWithContext", titleKey: "ai.assistant" },
-      ];
-      renderToolbar({ actionsEnabled: false });
-      expect(screen.queryByRole("button", { name: "AI Assistant" })).toBeNull();
-    });
-  });
-  describe("host toolbar settings", () => {
-    const withSettings = (values: Record<string, unknown>) =>
-      ({
-        ...host,
-        pluginSettings: { "ssh-terminal": values },
-      }) as unknown as Host;
-
-    it("anchors the toolbar where the host asks", () => {
-      const { container } = renderToolbar({
-        host: withSettings({ terminalToolbarPosition: "top-right" }),
-      });
-      const toolbarHost = container.querySelector(
-        "[data-terminal-toolbar-host]",
-      );
-      expect(toolbarHost).toHaveClass("items-start", "justify-end", "pt-2");
-      expect(toolbarHost).not.toHaveClass("items-end", "justify-center");
-    });
-
-    it("keeps a separate drag offset per anchor", () => {
-      localStorage.setItem(
-        "termix-terminal-toolbar-position-v2",
-        JSON.stringify({ x: 0, y: -40 }),
-      );
-      const { container } = renderToolbar({
-        host: withSettings({ terminalToolbarPosition: "top-left" }),
-      });
-      expect(
-        container.querySelector("[data-terminal-toolbar-wide]"),
-      ).toHaveStyle({ transform: "translate(0px, 0px)" });
-    });
-
-    it("starts minimized when the host asks", () => {
-      renderToolbar({
-        host: withSettings({ terminalToolbarStartState: "collapsed" }),
-      });
-      expect(
-        screen.getByRole("button", { name: "Expand toolbar" }),
-      ).toBeInTheDocument();
-      expect(screen.queryByRole("button", { name: "Hide toolbar" })).toBeNull();
-    });
-
-    it("uses the host display mode without overwriting the saved one", () => {
-      uiPrefs.values.toolbarDensity = "labeled";
-      uiPrefs.set.mockClear();
-      renderToolbar({ host: withSettings({ terminalToolbarDisplay: "icon" }) });
-      expect(screen.queryByText("Upload image")).toBeNull();
-      expect(uiPrefs.set).not.toHaveBeenCalled();
-    });
-
-    it("moves a density saved in this browser into the plugin preferences", () => {
-      localStorage.setItem("termix-terminal-toolbar-density", "icon");
-      uiPrefs.set.mockClear();
-      renderToolbar();
-      expect(uiPrefs.set).toHaveBeenCalledWith("toolbarDensity", "icon");
-      expect(
-        localStorage.getItem("termix-terminal-toolbar-density"),
-      ).toBeNull();
-    });
-
-    it("stays fully visible when fading is off", () => {
-      const { container } = renderToolbar({
-        host: withSettings({ terminalToolbarFade: false }),
-      });
-      const toolbar = container.querySelector("[data-terminal-toolbar-wide]");
-      expect(toolbar).toHaveClass("opacity-100");
-      expect(toolbar).not.toHaveClass("opacity-30");
-    });
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/terminal/android-hardware-keyboard.test.ts b/plugins/ssh-terminal/tests/frontend/terminal/android-hardware-keyboard.test.ts
deleted file mode 100644
index ae4003300..000000000
--- a/plugins/ssh-terminal/tests/frontend/terminal/android-hardware-keyboard.test.ts
+++ /dev/null
@@ -1,50 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { getAndroidHardwareKeySequence } from "../../../src/frontend/terminal/android-hardware-keyboard";
-
-const key = (
-  value: string,
-  modifiers: Partial<KeyboardEvent> = {},
-): Pick<
-  KeyboardEvent,
-  "key" | "ctrlKey" | "altKey" | "metaKey" | "shiftKey"
-> => ({
-  key: value,
-  ctrlKey: false,
-  altKey: false,
-  metaKey: false,
-  shiftKey: false,
-  ...modifiers,
-});
-
-describe("getAndroidHardwareKeySequence", () => {
-  it("maps cursor keys in normal and application modes", () => {
-    expect(
-      getAndroidHardwareKeySequence(key("ArrowUp"), false, undefined),
-    ).toBe("\x1b[A");
-    expect(getAndroidHardwareKeySequence(key("ArrowUp"), true, undefined)).toBe(
-      "\x1bOA",
-    );
-  });
-
-  it("maps Delete and the default Backspace mode", () => {
-    expect(getAndroidHardwareKeySequence(key("Delete"), false, undefined)).toBe(
-      "\x1b[3~",
-    );
-    expect(
-      getAndroidHardwareKeySequence(key("Backspace"), false, undefined),
-    ).toBe("\x7f");
-  });
-
-  it("leaves control-h Backspace and modified keys to existing handlers", () => {
-    expect(
-      getAndroidHardwareKeySequence(key("Backspace"), false, "control-h"),
-    ).toBeNull();
-    expect(
-      getAndroidHardwareKeySequence(
-        key("ArrowLeft", { ctrlKey: true }),
-        false,
-        undefined,
-      ),
-    ).toBeNull();
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/terminal/android-ime.test.ts b/plugins/ssh-terminal/tests/frontend/terminal/android-ime.test.ts
deleted file mode 100644
index 54e1ba415..000000000
--- a/plugins/ssh-terminal/tests/frontend/terminal/android-ime.test.ts
+++ /dev/null
@@ -1,76 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { Terminal } from "@xterm/xterm";
-
-const tick = () => new Promise((resolve) => setTimeout(resolve, 0));
-
-describe("Android IME composition", () => {
-  let terminal: Terminal | undefined;
-  let container: HTMLDivElement | undefined;
-
-  afterEach(() => {
-    terminal?.dispose();
-    container?.remove();
-    terminal = undefined;
-    container = undefined;
-  });
-
-  it("forwards a shorter Vietnamese replacement to the shell", async () => {
-    container = document.createElement("div");
-    document.body.appendChild(container);
-    terminal = new Terminal();
-    terminal.open(container);
-
-    const input: string[] = [];
-    terminal.onData((data) => input.push(data));
-
-    const textarea = terminal.textarea!;
-    textarea.value = "Hoar";
-    textarea.selectionStart = textarea.value.length;
-    textarea.selectionEnd = textarea.value.length;
-    textarea.dispatchEvent(new CompositionEvent("compositionstart"));
-    textarea.dispatchEvent(
-      new CompositionEvent("compositionupdate", { data: "Hoar" }),
-    );
-    await tick();
-
-    textarea.value = "Hỏa";
-    textarea.selectionStart = textarea.value.length;
-    textarea.selectionEnd = textarea.value.length;
-    textarea.dispatchEvent(
-      new CompositionEvent("compositionupdate", { data: "Hỏa" }),
-    );
-    await tick();
-    textarea.dispatchEvent(new CompositionEvent("compositionend"));
-    await tick();
-
-    expect(input.join("")).toBe("\x7f\x7f\x7fỏa");
-  });
-
-  it("coalesces rapid textarea changes without dropping or duplicating input", async () => {
-    container = document.createElement("div");
-    document.body.appendChild(container);
-    terminal = new Terminal();
-    terminal.open(container);
-
-    const input: string[] = [];
-    terminal.onData((data) => input.push(data));
-
-    const textarea = terminal.textarea!;
-    const type = (value: string) => {
-      textarea.dispatchEvent(
-        new KeyboardEvent("keydown", { keyCode: 229 } as KeyboardEventInit),
-      );
-      textarea.value = value;
-      textarea.selectionStart = value.length;
-      textarea.selectionEnd = value.length;
-    };
-
-    type("t");
-    type("te");
-    type("ter");
-    type("termix");
-    await tick();
-
-    expect(input.join("")).toBe("termix");
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/terminal/auto-reconnect.test.ts b/plugins/ssh-terminal/tests/frontend/terminal/auto-reconnect.test.ts
deleted file mode 100644
index c738ed229..000000000
--- a/plugins/ssh-terminal/tests/frontend/terminal/auto-reconnect.test.ts
+++ /dev/null
@@ -1,64 +0,0 @@
-// @vitest-environment node
-import fs from "node:fs";
-import vm from "node:vm";
-import { describe, expect, it, vi } from "vitest";
-
-const source = fs.readFileSync(
-  new URL("../../../src/frontend/terminal/Terminal.tsx", import.meta.url),
-  "utf8",
-);
-const attempt = source.slice(
-  source.indexOf("    function attemptReconnection()"),
-  source.indexOf("    // A persisted session that timed out"),
-);
-
-function run(keepScrollback: boolean, attempts = 0) {
-  const timers: Array<() => void> = [];
-  const context = {
-    terminal: { cols: 100, rows: 30, clear: vi.fn() },
-    hostConfig: { id: 1 },
-    isUnmountingRef: { current: false },
-    shouldNotReconnectRef: { current: false },
-    isReconnectingRef: { current: false },
-    isConnectingRef: { current: false },
-    isAttachingSessionRef: { current: false },
-    wasDisconnectedBySSH: { current: false },
-    reconnectTimeoutRef: { current: null as unknown },
-    reconnectAttempts: { current: attempts },
-    keepScrollbackRef: { current: keepScrollback },
-    maxReconnectAttempts: 8,
-    setIsConnecting: vi.fn(),
-    setShowDisconnectedOverlay: vi.fn(),
-    addLog: vi.fn(),
-    t: (key: string) => key,
-    connectToHost: vi.fn(),
-    setTimeout: (fn: () => void) => {
-      timers.push(fn);
-      return 1;
-    },
-    Math,
-  };
-  vm.runInNewContext(`${attempt}\nattemptReconnection();`, context);
-  timers.forEach((fn) => fn());
-  return context;
-}
-
-describe("terminal auto reconnect", () => {
-  it("keeps the scrollback while reconnecting after a drop", () => {
-    const context = run(true);
-    expect(context.terminal.clear).not.toHaveBeenCalled();
-    expect(context.connectToHost).toHaveBeenCalledWith(100, 30);
-  });
-
-  it("still clears the screen on an ordinary reconnect", () => {
-    const context = run(false);
-    expect(context.terminal.clear).toHaveBeenCalled();
-  });
-
-  it("gives up after the last attempt and stops keeping scrollback", () => {
-    const context = run(true, 8);
-    expect(context.connectToHost).not.toHaveBeenCalled();
-    expect(context.setShowDisconnectedOverlay).toHaveBeenCalledWith(true);
-    expect(context.keepScrollbackRef.current).toBe(false);
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/terminal/font-size-storage.test.ts b/plugins/ssh-terminal/tests/frontend/terminal/font-size-storage.test.ts
deleted file mode 100644
index 7e42a02c4..000000000
--- a/plugins/ssh-terminal/tests/frontend/terminal/font-size-storage.test.ts
+++ /dev/null
@@ -1,32 +0,0 @@
-import { beforeEach, describe, expect, it } from "vitest";
-import {
-  fontSizeStorageKey,
-  readFontSize,
-  saveFontSize,
-} from "../../../src/frontend/terminal/font-size-storage";
-
-beforeEach(() => localStorage.clear());
-describe("persistent terminal zoom", () => {
-  it("survives repeated mounts and option refreshes", () => {
-    const key = fontSizeStorageKey("host-sync-id");
-    saveFontSize(localStorage, key, 14, 18);
-    for (let mount = 0; mount < 3; mount++)
-      expect(readFontSize(localStorage, key, 14)).toBe(18);
-  });
-  it("invalidates an override when defaults change while unmounted", () => {
-    const key = fontSizeStorageKey(1);
-    saveFontSize(localStorage, key, 14, 18);
-    expect(readFontSize(localStorage, key, 16)).toBeNull();
-    expect(readFontSize(localStorage, key, 14)).toBeNull();
-  });
-  it("does not share storage for missing host identities", () => {
-    const key = fontSizeStorageKey(undefined);
-    saveFontSize(localStorage, key, 14, 18);
-    expect(readFontSize(localStorage, key, 14)).toBeNull();
-    expect(localStorage.length).toBe(0);
-  });
-  it("ignores legacy values without a known configured size", () => {
-    localStorage.setItem("legacy", "18");
-    expect(readFontSize(localStorage, "legacy", 14)).toBeNull();
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/terminal/ios-rapid-typing.test.ts b/plugins/ssh-terminal/tests/frontend/terminal/ios-rapid-typing.test.ts
deleted file mode 100644
index 8f644682e..000000000
--- a/plugins/ssh-terminal/tests/frontend/terminal/ios-rapid-typing.test.ts
+++ /dev/null
@@ -1,60 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { Terminal } from "@xterm/xterm";
-
-const tick = () => new Promise((resolve) => setTimeout(resolve, 0));
-
-function setTextareaValue(textarea: HTMLTextAreaElement, value: string) {
-  textarea.value = value;
-  textarea.selectionStart = value.length;
-  textarea.selectionEnd = value.length;
-}
-
-// iOS Safari/WKWebView reports keyCode 229 for ordinary software-keyboard
-// input, not just true IME composition, so xterm routes typing through
-// CompositionHelper.keydown -> _handleAnyTextareaChanges instead of the
-// normal keypress path. That handler snapshots the textarea value on
-// keydown, then diffs it against the value a setTimeout(0) later.
-function dispatchIOSKeydown(textarea: HTMLTextAreaElement) {
-  textarea.dispatchEvent(
-    new KeyboardEvent("keydown", { keyCode: 229 } as KeyboardEventInit),
-  );
-}
-
-describe("iOS rapid typing (keyCode 229 outside composition)", () => {
-  let terminal: Terminal | undefined;
-  let container: HTMLDivElement | undefined;
-
-  afterEach(() => {
-    terminal?.dispose();
-    container?.remove();
-    terminal = undefined;
-    container = undefined;
-  });
-
-  it("forwards a mid-word autocorrect rewrite instead of dropping it", async () => {
-    container = document.createElement("div");
-    document.body.appendChild(container);
-    terminal = new Terminal();
-    terminal.open(container);
-
-    const input: string[] = [];
-    terminal.onData((data) => input.push(data));
-
-    const textarea = terminal.textarea!;
-
-    // keydown fires while the textarea still holds the pre-keystroke value;
-    // the browser (or, on iOS, autocorrect) mutates the value afterward.
-    // Autocorrect can rewrite characters earlier in the word, not just
-    // append at the cursor, so the old value is no longer a literal
-    // substring of the new one.
-    dispatchIOSKeydown(textarea);
-    setTextareaValue(textarea, "wrold");
-    await tick();
-
-    dispatchIOSKeydown(textarea);
-    setTextareaValue(textarea, "world");
-    await tick();
-
-    expect(input.join("")).toBe("wrold" + "orld");
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/terminal/reconnect-disconnected.test.ts b/plugins/ssh-terminal/tests/frontend/terminal/reconnect-disconnected.test.ts
deleted file mode 100644
index 3203a6f3d..000000000
--- a/plugins/ssh-terminal/tests/frontend/terminal/reconnect-disconnected.test.ts
+++ /dev/null
@@ -1,72 +0,0 @@
-// @vitest-environment node
-import fs from "node:fs";
-import vm from "node:vm";
-import { describe, expect, it, vi } from "vitest";
-
-const source = fs.readFileSync(
-  new URL("../../../src/frontend/terminal/Terminal.tsx", import.meta.url),
-  "utf8",
-);
-const reconnect = source.slice(
-  source.indexOf("    function reconnectTerminal()"),
-  source.indexOf("    useImperativeHandle("),
-);
-const methods = source.slice(
-  source.indexOf("        reconnect: reconnectTerminal,"),
-  source.indexOf("        isConnected: () => isConnected,"),
-);
-
-function createHandle(overrides: Record<string, unknown> = {}) {
-  const context = {
-    terminal: { cols: 80, rows: 24, clear: vi.fn() },
-    isConnected: false,
-    isUnmountingRef: { current: false },
-    shouldNotReconnectRef: { current: true },
-    isReconnectingRef: { current: false },
-    isConnectingRef: { current: false },
-    reconnectTimeoutRef: { current: null },
-    reconnectAttempts: { current: 8 },
-    wasDisconnectedBySSH: { current: true },
-    wasConnectedRef: { current: false },
-    updateConnectionError: vi.fn(),
-    setShowDisconnectedOverlay: vi.fn(),
-    connectToHost: vi.fn(() => {
-      context.isConnectingRef.current = true;
-    }),
-    ...overrides,
-  };
-  const handle = vm.runInNewContext(
-    reconnect + `\n({${methods}})`,
-    context,
-  ) as { reconnectIfDisconnected: () => boolean; reconnect: () => void };
-  return { handle, context };
-}
-
-describe("terminal bulk reconnect handle", () => {
-  it("uses the manual reconnect flow after a dropped SSH session and rejects duplicate requests", () => {
-    const { handle, context } = createHandle();
-    expect(handle.reconnectIfDisconnected()).toBe(true);
-    expect(context.connectToHost).toHaveBeenCalledWith(80, 24);
-    expect(context.shouldNotReconnectRef.current).toBe(false);
-    expect(context.reconnectAttempts.current).toBe(0);
-    expect(context.wasDisconnectedBySSH.current).toBe(false);
-    expect(handle.reconnectIfDisconnected()).toBe(false);
-    expect(context.connectToHost).toHaveBeenCalledOnce();
-  });
-  it.each([
-    { isConnected: true },
-    { isConnectingRef: { current: true } },
-    { isReconnectingRef: { current: true } },
-    { reconnectTimeoutRef: { current: 1 } },
-    { isUnmountingRef: { current: true } },
-    { terminal: null },
-  ])(
-    "does not interrupt a connected, busy or unavailable terminal: %j",
-    (overrides) => {
-      const { handle, context } = createHandle(overrides);
-      expect(handle.reconnectIfDisconnected()).toBe(false);
-      expect(context.connectToHost).not.toHaveBeenCalled();
-      expect(context.shouldNotReconnectRef.current).toBe(true);
-    },
-  );
-});
diff --git a/plugins/ssh-terminal/tests/frontend/terminal/shared-terminal-size.test.ts b/plugins/ssh-terminal/tests/frontend/terminal/shared-terminal-size.test.ts
deleted file mode 100644
index 0dd01be81..000000000
--- a/plugins/ssh-terminal/tests/frontend/terminal/shared-terminal-size.test.ts
+++ /dev/null
@@ -1,110 +0,0 @@
-/// <reference types="vite/client" />
-import ts from "typescript";
-import { describe, expect, it, vi } from "vitest";
-import sourceText from "../../../src/frontend/terminal/Terminal.tsx?raw";
-
-const source = ts.createSourceFile(
-  "Terminal.tsx",
-  sourceText,
-  ts.ScriptTarget.Latest,
-  true,
-  ts.ScriptKind.TSX,
-);
-const names = [
-  "setupWebSocketListeners",
-  "applySharedSize",
-  "fitTerminal",
-  "scheduleNotify",
-];
-const functions: string[] = [];
-function visit(node: ts.Node) {
-  if (
-    ts.isFunctionDeclaration(node) &&
-    node.name &&
-    names.includes(node.name.text)
-  )
-    functions.push(node.getText(source));
-  ts.forEachChild(node, visit);
-}
-visit(source);
-if (functions.length !== names.length)
-  throw new Error("Missing terminal size handlers");
-const create = new Function(
-  "state",
-  ts.transpileModule(
-    `
-  const { terminal, hostConfig, sharedSizeRef, fitAddonRef, webSocketRef, emitSessionMessage } = state;
-  const connectionAttemptIdRef = { current: 1 };
-  ${functions.join("\n")}
-  setupWebSocketListeners(webSocketRef.current, 80, 24, hostConfig);
-  return { fit: fitTerminal, notify: scheduleNotify };
-`,
-    { compilerOptions: { target: ts.ScriptTarget.ES2022 } },
-  ).outputText,
-) as (state: Record<string, unknown>) => {
-  fit: () => void;
-  notify: (cols: number, rows: number) => void;
-};
-
-function fixture(shared = true) {
-  const events = new Map<string, (event: { data: string }) => void>();
-  const terminal = {
-    cols: 80,
-    rows: 24,
-    resize: vi.fn((cols: number, rows: number) => {
-      terminal.cols = cols;
-      terminal.rows = rows;
-    }),
-  };
-  const fit = vi.fn(() => {
-    terminal.cols = 80;
-    terminal.rows = 24;
-  });
-  const socket = {
-    addEventListener: (name: string, fn: (event: { data: string }) => void) =>
-      events.set(name, fn),
-    send: vi.fn(),
-  };
-  const handlers = create({
-    terminal,
-    hostConfig: shared ? { joinShareId: "share" } : {},
-    sharedSizeRef: { current: null },
-    fitAddonRef: { current: { fit } },
-    webSocketRef: { current: socket },
-    emitSessionMessage: vi.fn(),
-  });
-  const resize = (cols: unknown, rows: unknown) =>
-    events.get("message")!({
-      data: JSON.stringify({ type: "resized", cols, rows }),
-    });
-  return { terminal, fit, handlers, socket, resize };
-}
-
-describe("in-app shared terminal sizing", () => {
-  it("uses presenter sizes and does not refit or resize the remote shell from the viewer", () => {
-    const f = fixture();
-    f.resize(132, 40);
-    expect([f.terminal.cols, f.terminal.rows]).toEqual([132, 40]);
-    f.handlers.fit();
-    expect(f.fit).not.toHaveBeenCalled();
-    expect([f.terminal.cols, f.terminal.rows]).toEqual([132, 40]);
-    f.handlers.notify(80, 24);
-    expect(f.socket.send).not.toHaveBeenCalled();
-    f.resize(100, 30);
-    expect([f.terminal.cols, f.terminal.rows]).toEqual([100, 30]);
-  });
-
-  it("continues fitting the owner's terminal normally", () => {
-    const f = fixture(false);
-    f.resize(132, 40);
-    expect(f.terminal.resize).not.toHaveBeenCalled();
-    f.handlers.fit();
-    expect(f.fit).toHaveBeenCalledOnce();
-  });
-
-  it.each([0, -1, 1.5, "132"])("rejects an invalid column count %s", (cols) => {
-    const f = fixture();
-    f.resize(cols, 24);
-    expect(f.terminal.resize).not.toHaveBeenCalled();
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/terminal/terminal-buffer-text.test.ts b/plugins/ssh-terminal/tests/frontend/terminal/terminal-buffer-text.test.ts
deleted file mode 100644
index e0b77ba6e..000000000
--- a/plugins/ssh-terminal/tests/frontend/terminal/terminal-buffer-text.test.ts
+++ /dev/null
@@ -1,99 +0,0 @@
-import { describe, expect, it } from "vitest";
-import type { Terminal } from "@xterm/xterm";
-import { getTerminalBufferText } from "../../../src/frontend/terminal/terminal-buffer-text";
-
-interface FakeLine {
-  text: string;
-  wrapped?: boolean;
-}
-
-/** Minimal stand-in for the parts of xterm this reads. */
-function fakeTerminal(lines: FakeLine[], rows = lines.length): Terminal {
-  return {
-    rows,
-    buffer: {
-      active: {
-        baseY: Math.max(0, lines.length - rows),
-        getLine: (i: number) => {
-          const line = lines[i];
-          if (!line) return undefined;
-          return {
-            isWrapped: !!line.wrapped,
-            translateToString: () => line.text,
-          };
-        },
-      },
-    },
-  } as unknown as Terminal;
-}
-
-describe("getTerminalBufferText", () => {
-  it("returns an empty string for a missing terminal", () => {
-    expect(getTerminalBufferText(null)).toBe("");
-    expect(getTerminalBufferText(undefined)).toBe("");
-  });
-
-  it("joins buffer rows with newlines", () => {
-    const terminal = fakeTerminal([{ text: "$ whoami" }, { text: "root" }]);
-
-    expect(getTerminalBufferText(terminal)).toBe("$ whoami\nroot");
-  });
-
-  it("joins a wrapped row onto the line it continues", () => {
-    const terminal = fakeTerminal([
-      { text: "$ echo start" },
-      { text: "a-very-long-command " },
-      { text: "that-wrapped", wrapped: true },
-    ]);
-
-    expect(getTerminalBufferText(terminal)).toBe(
-      "$ echo start\na-very-long-command that-wrapped",
-    );
-  });
-
-  it("drops trailing blank lines", () => {
-    const terminal = fakeTerminal([
-      { text: "output" },
-      { text: "" },
-      { text: "" },
-    ]);
-
-    expect(getTerminalBufferText(terminal)).toBe("output");
-  });
-
-  it("keeps blank lines in the middle", () => {
-    const terminal = fakeTerminal([
-      { text: "one" },
-      { text: "" },
-      { text: "two" },
-    ]);
-
-    expect(getTerminalBufferText(terminal)).toBe("one\n\ntwo");
-  });
-
-  it("bounds the result to maxLines, keeping the tail", () => {
-    const lines = Array.from({ length: 50 }, (_, i) => ({ text: `line ${i}` }));
-    const terminal = fakeTerminal(lines, 50);
-
-    const result = getTerminalBufferText(terminal, 3);
-
-    expect(result).toBe("line 47\nline 48\nline 49");
-  });
-
-  it("returns an empty string for a non-positive maxLines", () => {
-    const terminal = fakeTerminal([{ text: "anything" }]);
-
-    expect(getTerminalBufferText(terminal, 0)).toBe("");
-  });
-
-  it("returns an empty string when the buffer throws", () => {
-    const disposed = {
-      rows: 1,
-      get buffer(): never {
-        throw new Error("terminal disposed");
-      },
-    } as unknown as Terminal;
-
-    expect(getTerminalBufferText(disposed)).toBe("");
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/terminal/terminal-clipboard-actions.test.ts b/plugins/ssh-terminal/tests/frontend/terminal/terminal-clipboard-actions.test.ts
deleted file mode 100644
index 8837fed48..000000000
--- a/plugins/ssh-terminal/tests/frontend/terminal/terminal-clipboard-actions.test.ts
+++ /dev/null
@@ -1,47 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  resolveTerminalContextMenuAction,
-  selectedTextToCopy,
-} from "../../../src/frontend/terminal/terminal-clipboard-actions";
-
-describe("terminal clipboard actions", () => {
-  it("copies a completed left-button selection when enabled", () => {
-    expect(
-      selectedTextToCopy({
-        copyOnSelect: true,
-        button: 0,
-        selection: "selected output",
-      }),
-    ).toBe("selected output");
-    expect(
-      selectedTextToCopy({ copyOnSelect: false, button: 0, selection: "x" }),
-    ).toBeNull();
-  });
-
-  it("pastes on right-click after copy-on-select", () => {
-    expect(
-      resolveTerminalContextMenuAction({
-        rightClickCopyPaste: true,
-        copyOnSelect: true,
-        hasSelection: true,
-      }),
-    ).toBe("paste");
-  });
-
-  it("preserves existing right-click and native-menu behavior", () => {
-    expect(
-      resolveTerminalContextMenuAction({
-        rightClickCopyPaste: true,
-        copyOnSelect: false,
-        hasSelection: true,
-      }),
-    ).toBe("copy");
-    expect(
-      resolveTerminalContextMenuAction({
-        rightClickCopyPaste: false,
-        copyOnSelect: true,
-        hasSelection: true,
-      }),
-    ).toBe("native");
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/terminal/terminal-clipboard.test.ts b/plugins/ssh-terminal/tests/frontend/terminal/terminal-clipboard.test.ts
deleted file mode 100644
index 35ac2442e..000000000
--- a/plugins/ssh-terminal/tests/frontend/terminal/terminal-clipboard.test.ts
+++ /dev/null
@@ -1,332 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
-import type { Terminal } from "@xterm/xterm";
-
-const getCookieMock = vi.fn<(name: string) => string | undefined>();
-
-vi.mock("@termix/plugin-sdk/frontend", () => ({
-  getClientPreference: (name: string) => getCookieMock(name),
-}));
-
-import {
-  getUseRightClickCopyPaste,
-  handleTerminalClipboardKeyEvent,
-  createTerminalContextMenuHandler,
-} from "../../../src/frontend/terminal/terminal-clipboard";
-
-function createFakeTerminal({ selection = "" }: { selection?: string } = {}) {
-  return {
-    hasSelection: vi.fn(() => selection.length > 0),
-    getSelection: vi.fn(() => selection),
-    clearSelection: vi.fn(),
-    paste: vi.fn(),
-  };
-}
-
-function createActions() {
-  return {
-    writeTextToClipboard: vi.fn().mockResolvedValue(true),
-    readTextFromClipboard: vi.fn().mockResolvedValue("clipboard-text"),
-  };
-}
-
-function createKeyEvent(init: {
-  ctrlKey?: boolean;
-  shiftKey?: boolean;
-  altKey?: boolean;
-  metaKey?: boolean;
-  key?: string;
-  code?: string;
-}) {
-  return {
-    type: "keydown",
-    ctrlKey: false,
-    shiftKey: false,
-    altKey: false,
-    metaKey: false,
-    key: "",
-    code: "",
-    preventDefault: vi.fn(),
-    stopPropagation: vi.fn(),
-    ...init,
-  } as unknown as KeyboardEvent;
-}
-
-function createMouseEvent(init: { ctrlKey?: boolean } = {}) {
-  return {
-    ctrlKey: false,
-    preventDefault: vi.fn(),
-    stopPropagation: vi.fn(),
-    ...init,
-  } as unknown as MouseEvent;
-}
-
-beforeEach(() => {
-  getCookieMock.mockReset();
-  getCookieMock.mockReturnValue(undefined);
-});
-
-describe("getUseRightClickCopyPaste", () => {
-  it("defaults to enabled when the cookie is unset", () => {
-    getCookieMock.mockReturnValue(undefined);
-    expect(getUseRightClickCopyPaste()).toBe(true);
-  });
-
-  it('is disabled only when the cookie is explicitly "false"', () => {
-    getCookieMock.mockReturnValue("false");
-    expect(getUseRightClickCopyPaste()).toBe(false);
-
-    getCookieMock.mockReturnValue("true");
-    expect(getUseRightClickCopyPaste()).toBe(true);
-  });
-});
-
-describe("handleTerminalClipboardKeyEvent", () => {
-  it("copies the selection on Ctrl+C and clears it", () => {
-    const terminal = createFakeTerminal({ selection: "hello" });
-    const actions = createActions();
-    const e = createKeyEvent({ ctrlKey: true, code: "KeyC", key: "c" });
-
-    const handled = handleTerminalClipboardKeyEvent(
-      e,
-      terminal as unknown as Terminal,
-      actions,
-    );
-
-    expect(handled).toBe(false);
-    expect(e.preventDefault).toHaveBeenCalled();
-    expect(e.stopPropagation).toHaveBeenCalled();
-    expect(actions.writeTextToClipboard).toHaveBeenCalledWith("hello");
-    expect(terminal.clearSelection).toHaveBeenCalled();
-  });
-
-  it("leaves Ctrl+C alone (SIGINT) when there is no selection", () => {
-    const terminal = createFakeTerminal({ selection: "" });
-    const actions = createActions();
-    const e = createKeyEvent({ ctrlKey: true, code: "KeyC", key: "c" });
-
-    const handled = handleTerminalClipboardKeyEvent(
-      e,
-      terminal as unknown as Terminal,
-      actions,
-    );
-
-    expect(handled).toBe(true);
-    expect(e.preventDefault).not.toHaveBeenCalled();
-    expect(actions.writeTextToClipboard).not.toHaveBeenCalled();
-  });
-
-  it("copies via Ctrl+Insert without clearing the selection", () => {
-    const terminal = createFakeTerminal({ selection: "hello" });
-    const actions = createActions();
-    const e = createKeyEvent({ ctrlKey: true, key: "Insert" });
-
-    const handled = handleTerminalClipboardKeyEvent(
-      e,
-      terminal as unknown as Terminal,
-      actions,
-    );
-
-    expect(handled).toBe(false);
-    expect(actions.writeTextToClipboard).toHaveBeenCalledWith("hello");
-    expect(terminal.clearSelection).not.toHaveBeenCalled();
-  });
-
-  it("copies and clears the selection on Ctrl+Shift+C", () => {
-    const terminal = createFakeTerminal({ selection: "hello" });
-    const actions = createActions();
-    const e = createKeyEvent({
-      ctrlKey: true,
-      shiftKey: true,
-      code: "KeyC",
-      key: "C",
-    });
-
-    const handled = handleTerminalClipboardKeyEvent(
-      e,
-      terminal as unknown as Terminal,
-      actions,
-    );
-
-    expect(handled).toBe(false);
-    expect(actions.writeTextToClipboard).toHaveBeenCalledWith("hello");
-    expect(terminal.clearSelection).toHaveBeenCalled();
-  });
-
-  it("is a no-op for Ctrl+Shift+C without a selection", () => {
-    const terminal = createFakeTerminal({ selection: "" });
-    const actions = createActions();
-    const e = createKeyEvent({
-      ctrlKey: true,
-      shiftKey: true,
-      code: "KeyC",
-      key: "C",
-    });
-
-    const handled = handleTerminalClipboardKeyEvent(
-      e,
-      terminal as unknown as Terminal,
-      actions,
-    );
-
-    expect(handled).toBe(true);
-    expect(actions.writeTextToClipboard).not.toHaveBeenCalled();
-  });
-
-  it("always pastes on Ctrl+Shift+V regardless of selection", async () => {
-    const terminal = createFakeTerminal({ selection: "irrelevant" });
-    const actions = createActions();
-    const e = createKeyEvent({
-      ctrlKey: true,
-      shiftKey: true,
-      code: "KeyV",
-      key: "V",
-    });
-
-    const handled = handleTerminalClipboardKeyEvent(
-      e,
-      terminal as unknown as Terminal,
-      actions,
-    );
-    await Promise.resolve();
-
-    expect(handled).toBe(false);
-    expect(e.preventDefault).toHaveBeenCalled();
-    expect(actions.readTextFromClipboard).toHaveBeenCalled();
-    expect(terminal.paste).toHaveBeenCalledWith("clipboard-text");
-  });
-
-  it("leaves plain Ctrl+V to the browser's native paste event by default", () => {
-    const terminal = createFakeTerminal();
-    const actions = createActions();
-    const e = createKeyEvent({ ctrlKey: true, code: "KeyV", key: "v" });
-
-    const handled = handleTerminalClipboardKeyEvent(
-      e,
-      terminal as unknown as Terminal,
-      actions,
-    );
-
-    expect(handled).toBe(false);
-    expect(e.preventDefault).not.toHaveBeenCalled();
-    expect(e.stopPropagation).not.toHaveBeenCalled();
-    expect(actions.readTextFromClipboard).not.toHaveBeenCalled();
-  });
-
-  it("reads the clipboard explicitly for plain Ctrl+V when configured", async () => {
-    const terminal = createFakeTerminal();
-    const actions = createActions();
-    const e = createKeyEvent({ ctrlKey: true, code: "KeyV", key: "v" });
-
-    const handled = handleTerminalClipboardKeyEvent(
-      e,
-      terminal as unknown as Terminal,
-      actions,
-      { plainPasteMode: "explicit" },
-    );
-    await Promise.resolve();
-
-    expect(handled).toBe(false);
-    expect(e.preventDefault).toHaveBeenCalled();
-    expect(actions.readTextFromClipboard).toHaveBeenCalled();
-    expect(terminal.paste).toHaveBeenCalledWith("clipboard-text");
-  });
-
-  it("ignores keys with no clipboard shortcut", () => {
-    const terminal = createFakeTerminal();
-    const actions = createActions();
-    const e = createKeyEvent({ key: "a", code: "KeyA" });
-
-    const handled = handleTerminalClipboardKeyEvent(
-      e,
-      terminal as unknown as Terminal,
-      actions,
-    );
-
-    expect(handled).toBe(true);
-    expect(actions.writeTextToClipboard).not.toHaveBeenCalled();
-    expect(actions.readTextFromClipboard).not.toHaveBeenCalled();
-  });
-});
-
-describe("createTerminalContextMenuHandler", () => {
-  it("routes Ctrl+right-click to the passthrough callback instead of the clipboard", () => {
-    const terminal = createFakeTerminal({ selection: "hello" });
-    const actions = createActions();
-    const onCtrlClick = vi.fn();
-    const handler = createTerminalContextMenuHandler(
-      terminal as unknown as Terminal,
-      actions,
-      { onCtrlClick },
-    );
-    const e = createMouseEvent({ ctrlKey: true });
-
-    handler(e);
-
-    expect(onCtrlClick).toHaveBeenCalledTimes(1);
-    expect(e.preventDefault).toHaveBeenCalled();
-    expect(actions.writeTextToClipboard).not.toHaveBeenCalled();
-  });
-
-  it("falls back to normal right-click behavior when Ctrl is held with no passthrough configured", () => {
-    const terminal = createFakeTerminal({ selection: "hello" });
-    const actions = createActions();
-    const handler = createTerminalContextMenuHandler(
-      terminal as unknown as Terminal,
-      actions,
-    );
-    const e = createMouseEvent({ ctrlKey: true });
-
-    handler(e);
-
-    expect(actions.writeTextToClipboard).toHaveBeenCalledWith("hello");
-  });
-
-  it("does nothing when the right-click preference is disabled", () => {
-    getCookieMock.mockReturnValue("false");
-    const terminal = createFakeTerminal({ selection: "hello" });
-    const actions = createActions();
-    const handler = createTerminalContextMenuHandler(
-      terminal as unknown as Terminal,
-      actions,
-    );
-    const e = createMouseEvent();
-
-    handler(e);
-
-    expect(e.preventDefault).not.toHaveBeenCalled();
-    expect(actions.writeTextToClipboard).not.toHaveBeenCalled();
-  });
-
-  it("copies the current selection when right-click copy/paste is enabled", async () => {
-    const terminal = createFakeTerminal({ selection: "hello" });
-    const actions = createActions();
-    const handler = createTerminalContextMenuHandler(
-      terminal as unknown as Terminal,
-      actions,
-    );
-    const e = createMouseEvent();
-
-    handler(e);
-    await Promise.resolve();
-
-    expect(e.preventDefault).toHaveBeenCalled();
-    expect(actions.writeTextToClipboard).toHaveBeenCalledWith("hello");
-    expect(terminal.clearSelection).toHaveBeenCalled();
-  });
-
-  it("pastes when there is no selection", async () => {
-    const terminal = createFakeTerminal({ selection: "" });
-    const actions = createActions();
-    const handler = createTerminalContextMenuHandler(
-      terminal as unknown as Terminal,
-      actions,
-    );
-    const e = createMouseEvent();
-
-    handler(e);
-    await Promise.resolve();
-
-    expect(actions.readTextFromClipboard).toHaveBeenCalled();
-    expect(terminal.paste).toHaveBeenCalledWith("clipboard-text");
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/terminal/terminal-image-path.test.ts b/plugins/ssh-terminal/tests/frontend/terminal/terminal-image-path.test.ts
deleted file mode 100644
index 687c4c4ec..000000000
--- a/plugins/ssh-terminal/tests/frontend/terminal/terminal-image-path.test.ts
+++ /dev/null
@@ -1,20 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { quoteTerminalImagePath } from "../../../src/frontend/terminal/terminal-image-path";
-
-describe("quoteTerminalImagePath", () => {
-  it("preserves spaces as one shell argument", () => {
-    expect(quoteTerminalImagePath("/mnt/my images/clipboard.png")).toBe(
-      "'/mnt/my images/clipboard.png'",
-    );
-  });
-
-  it("does not expose shell metacharacters as syntax", () => {
-    expect(
-      quoteTerminalImagePath("/tmp/$(touch /tmp/pwned);`id`; 'quoted'.png"),
-    ).toBe("'/tmp/$(touch /tmp/pwned);`id`; '\\''quoted'\\''.png'");
-  });
-
-  it("quotes an empty path instead of returning executable input", () => {
-    expect(quoteTerminalImagePath("")).toBe("''");
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/terminal/terminal-image-upload-metadata.test.ts b/plugins/ssh-terminal/tests/frontend/terminal/terminal-image-upload-metadata.test.ts
deleted file mode 100644
index c0576f02f..000000000
--- a/plugins/ssh-terminal/tests/frontend/terminal/terminal-image-upload-metadata.test.ts
+++ /dev/null
@@ -1,40 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { buildImageUploadFormData } from "../../../src/frontend/terminal/terminal-image-upload";
-
-describe("buildImageUploadFormData", () => {
-  it("tags a picked-file upload with source=file and a client timestamp", () => {
-    const file = new File(["png-bytes"], "photo.png", { type: "image/png" });
-
-    const form = buildImageUploadFormData(file, "tab-1", "file");
-
-    expect(form.get("image")).toBe(file);
-    expect(form.get("instanceId")).toBe("tab-1");
-    expect(form.get("source")).toBe("file");
-    const timestamp = form.get("clientUploadTimestamp");
-    expect(typeof timestamp).toBe("string");
-    expect(Number.isNaN(Date.parse(timestamp as string))).toBe(false);
-  });
-
-  it("tags a clipboard upload with source=clipboard", () => {
-    const file = new File(["png-bytes"], "clipboard-image.png", {
-      type: "image/png",
-    });
-
-    const form = buildImageUploadFormData(file, "tab-1", "clipboard");
-
-    expect(form.get("source")).toBe("clipboard");
-  });
-
-  it("uses the caller-provided client timestamp unchanged", () => {
-    const file = new File(["png-bytes"], "photo.png", { type: "image/png" });
-
-    const form = buildImageUploadFormData(
-      file,
-      "tab-1",
-      "file",
-      "2026-08-15T12:00:00.000Z",
-    );
-
-    expect(form.get("clientUploadTimestamp")).toBe("2026-08-15T12:00:00.000Z");
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/terminal/terminal-key-event.test.ts b/plugins/ssh-terminal/tests/frontend/terminal/terminal-key-event.test.ts
deleted file mode 100644
index 2aebc9b57..000000000
--- a/plugins/ssh-terminal/tests/frontend/terminal/terminal-key-event.test.ts
+++ /dev/null
@@ -1,47 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  isPhysicalShortcutKey,
-  isTabKeyEvent,
-} from "../../../src/frontend/terminal/terminal-key-event";
-
-describe("isTabKeyEvent", () => {
-  it.each([
-    ["key", new KeyboardEvent("keydown", { key: "Tab" })],
-    ["code", new KeyboardEvent("keydown", { code: "Tab" })],
-    [
-      "legacy keyCode",
-      new KeyboardEvent("keydown", { keyCode: 9 } as KeyboardEventInit),
-    ],
-  ])("recognizes Tab from %s", (_source, event) => {
-    expect(isTabKeyEvent(event)).toBe(true);
-  });
-
-  it("does not treat another key as Tab", () => {
-    expect(isTabKeyEvent(new KeyboardEvent("keydown", { key: "Enter" }))).toBe(
-      false,
-    );
-  });
-});
-
-describe("isPhysicalShortcutKey", () => {
-  it("matches copy and paste by physical code under a Cyrillic layout", () => {
-    expect(isPhysicalShortcutKey({ key: "с", code: "KeyC" }, "KeyC", "c")).toBe(
-      true,
-    );
-    expect(isPhysicalShortcutKey({ key: "м", code: "KeyV" }, "KeyV", "v")).toBe(
-      true,
-    );
-  });
-
-  it("does not confuse another physical key with a translated character", () => {
-    expect(isPhysicalShortcutKey({ key: "c", code: "KeyV" }, "KeyC", "c")).toBe(
-      false,
-    );
-  });
-
-  it("falls back to key when code is unavailable", () => {
-    expect(isPhysicalShortcutKey({ key: "C", code: "" }, "KeyC", "c")).toBe(
-      true,
-    );
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/terminal/terminal-unmount.test.ts b/plugins/ssh-terminal/tests/frontend/terminal/terminal-unmount.test.ts
deleted file mode 100644
index 6460a2882..000000000
--- a/plugins/ssh-terminal/tests/frontend/terminal/terminal-unmount.test.ts
+++ /dev/null
@@ -1,76 +0,0 @@
-/// <reference types="vite/client" />
-import ts from "typescript";
-import { afterEach, describe, expect, it, vi } from "vitest";
-import sourceText from "../../../src/frontend/terminal/Terminal.tsx?raw";
-
-const source = ts.createSourceFile(
-  "Terminal.tsx",
-  sourceText,
-  ts.ScriptTarget.Latest,
-  true,
-  ts.ScriptKind.TSX,
-);
-let effect: string | undefined;
-function visit(node: ts.Node) {
-  if (
-    ts.isCallExpression(node) &&
-    node.expression.getText(source) === "useEffect" &&
-    node.arguments[0]?.getText(source).includes("isMountedRef.current = true")
-  ) {
-    effect = node.arguments[0].getText(source);
-  }
-  ts.forEachChild(node, visit);
-}
-visit(source);
-if (!effect) throw new Error("Missing terminal lifecycle effect");
-const mount = new Function(
-  "state",
-  ts.transpileModule(
-    `
-  const { isMountedRef, hostConfig, currentHostIdRef, isUnmountingRef,
-    shouldNotReconnectRef, isReconnectingRef, setIsConnecting,
-    reconnectTimeoutRef, connectionTimeoutRef, totpTimeoutRef,
-    pingIntervalRef, pongTimeoutRef, webSocketRef } = state;
-  return (${effect})();
-`,
-    { compilerOptions: { target: ts.ScriptTarget.ES2022 } },
-  ).outputText,
-) as (state: Record<string, unknown>) => () => void;
-
-afterEach(() => vi.useRealTimers());
-
-describe("terminal unmount", () => {
-  it.each([1, 2, null])(
-    "closes the socket when current host is %s",
-    (currentHost) => {
-      vi.useFakeTimers();
-      const timeout = () => ({ current: setTimeout(() => {}, 10000) });
-      const state = {
-        isMountedRef: { current: false },
-        hostConfig: { id: 1, instanceId: "collab-present-room" },
-        currentHostIdRef: { current: currentHost },
-        isUnmountingRef: { current: false },
-        shouldNotReconnectRef: { current: false },
-        isReconnectingRef: { current: true },
-        setIsConnecting: vi.fn(),
-        reconnectTimeoutRef: timeout(),
-        connectionTimeoutRef: timeout(),
-        totpTimeoutRef: timeout(),
-        pongTimeoutRef: timeout(),
-        pingIntervalRef: { current: setInterval(() => {}, 1000) },
-        webSocketRef: { current: { close: vi.fn() } },
-      };
-      const unmount = mount(state);
-      expect(state.isMountedRef.current).toBe(true);
-      unmount();
-      expect(state.webSocketRef.current.close).toHaveBeenCalledOnce();
-      expect(state.shouldNotReconnectRef.current).toBe(true);
-      expect(state.isUnmountingRef.current).toBe(true);
-      expect(state.isReconnectingRef.current).toBe(false);
-      expect(state.isMountedRef.current).toBe(false);
-      expect(vi.getTimerCount()).toBe(0);
-      unmount();
-      expect(state.webSocketRef.current.close).toHaveBeenCalledOnce();
-    },
-  );
-});
diff --git a/plugins/ssh-terminal/tests/frontend/terminal/toolbar-settings.test.ts b/plugins/ssh-terminal/tests/frontend/terminal/toolbar-settings.test.ts
deleted file mode 100644
index 9ecf93dd4..000000000
--- a/plugins/ssh-terminal/tests/frontend/terminal/toolbar-settings.test.ts
+++ /dev/null
@@ -1,74 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  DEFAULT_TOOLBAR_SETTINGS,
-  readToolbarSettings,
-  toolbarAnchorClasses,
-} from "../../../src/frontend/terminal/toolbar-settings";
-import { toolbarPositionStorageKey } from "../../../src/frontend/terminal/toolbar-geometry";
-
-const hostWith = (values: Record<string, unknown>) => ({
-  pluginSettings: { "ssh-terminal": values },
-});
-
-describe("readToolbarSettings", () => {
-  it("falls back to defaults for a host without settings", () => {
-    expect(readToolbarSettings({})).toEqual(DEFAULT_TOOLBAR_SETTINGS);
-    expect(readToolbarSettings(null)).toEqual(DEFAULT_TOOLBAR_SETTINGS);
-  });
-
-  it("reads saved values", () => {
-    expect(
-      readToolbarSettings(
-        hostWith({
-          terminalToolbarPosition: "top-left",
-          terminalToolbarStartState: "collapsed",
-          terminalToolbarDisplay: "expanded",
-          terminalToolbarShowStatus: false,
-          terminalToolbarFade: false,
-        }),
-      ),
-    ).toEqual({
-      anchor: "top-left",
-      startCollapsed: true,
-      density: "expanded",
-      showStatus: false,
-      fadeWhenIdle: false,
-    });
-  });
-
-  it("ignores unknown values", () => {
-    const settings = readToolbarSettings(
-      hostWith({
-        terminalToolbarPosition: "middle",
-        terminalToolbarDisplay: "remember",
-        terminalToolbarShowStatus: "no",
-      }),
-    );
-    expect(settings.anchor).toBe("bottom");
-    expect(settings.density).toBeNull();
-    expect(settings.showStatus).toBe(true);
-  });
-});
-
-describe("toolbar anchors", () => {
-  it("maps anchors to flex placement", () => {
-    expect(toolbarAnchorClasses("bottom")).toBe(
-      "items-end pb-2 justify-center",
-    );
-    expect(toolbarAnchorClasses("top-left")).toBe(
-      "items-start pt-2 justify-start pl-2",
-    );
-    expect(toolbarAnchorClasses("bottom-right")).toBe(
-      "items-end pb-2 justify-end pr-2",
-    );
-  });
-
-  it("keeps the original storage key for the bottom anchor", () => {
-    expect(toolbarPositionStorageKey()).toBe(
-      "termix-terminal-toolbar-position-v2",
-    );
-    expect(toolbarPositionStorageKey("top")).toBe(
-      "termix-terminal-toolbar-position-v2-top",
-    );
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/terminal/touch-wheel-coordinator.test.ts b/plugins/ssh-terminal/tests/frontend/terminal/touch-wheel-coordinator.test.ts
deleted file mode 100644
index 74e301b1b..000000000
--- a/plugins/ssh-terminal/tests/frontend/terminal/touch-wheel-coordinator.test.ts
+++ /dev/null
@@ -1,417 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import {
-  installTouchWheelCoordinator,
-  TouchWheelCoordinator,
-} from "../../../src/frontend/terminal/touch-wheel-coordinator";
-import { TOUCH_INPUT_DEFAULTS } from "../../../src/shared/touch-input-settings";
-
-const point = (clientY: number, clientX = 10) => ({ clientX, clientY });
-
-const touchEvent = (type: string, clientYValues: number[]) => {
-  const event = new Event(type, { bubbles: true, cancelable: true });
-  const touches = clientYValues.map((clientY) => ({ clientX: 10, clientY }));
-  Object.defineProperty(event, "touches", {
-    value: Object.assign(touches, {
-      item: (index: number) => touches[index] ?? null,
-    }),
-  });
-  return event;
-};
-
-const createTiming = (momentumAllowed = true) => {
-  let now = 0;
-  let nextHandle = 1;
-  const callbacks = new Map<number, FrameRequestCallback>();
-  return {
-    timing: {
-      now: () => now,
-      requestFrame: (callback: FrameRequestCallback) => {
-        const handle = nextHandle++;
-        callbacks.set(handle, callback);
-        return handle;
-      },
-      cancelFrame: (handle: number) => callbacks.delete(handle),
-      momentumAllowed: () => momentumAllowed,
-    },
-    advance(milliseconds: number) {
-      now += milliseconds;
-      const pending = [...callbacks.values()];
-      callbacks.clear();
-      pending.forEach((callback) => callback(now));
-    },
-    pendingFrames: () => callbacks.size,
-  };
-};
-
-describe("TouchWheelCoordinator", () => {
-  it("consumes configured drag and wheel limits", () => {
-    const emit = vi.fn();
-    const coordinator = new TouchWheelCoordinator(emit, 2, 3, undefined, {
-      ...TOUCH_INPUT_DEFAULTS,
-      dragThresholdPx: 2,
-      maxWheelDeltaPx: 3,
-    });
-    coordinator.start(point(20));
-    coordinator.move(point(10));
-    expect(emit.mock.calls.map(([event]) => event.deltaY)).toEqual([
-      3, 3, 3, 1,
-    ]);
-  });
-
-  it("accumulates the drag threshold and preserves delta direction", () => {
-    const emit = vi.fn();
-    const coordinator = new TouchWheelCoordinator(emit);
-
-    coordinator.start(point(100));
-    expect(coordinator.move(point(97.5))).toBe(true);
-    expect(coordinator.move(point(93))).toBe(true);
-    coordinator.move(point(101));
-
-    expect(emit.mock.calls.map(([event]) => event.deltaY)).toEqual([7, -8]);
-  });
-
-  it("keeps movement below the tap threshold from scrolling", () => {
-    const emit = vi.fn();
-    const coordinator = new TouchWheelCoordinator(emit);
-
-    coordinator.start(point(100));
-    expect(coordinator.move(point(95))).toBe(true);
-    coordinator.end();
-
-    expect(emit).not.toHaveBeenCalled();
-  });
-
-  it("cancels the gesture when more than one touch is represented", () => {
-    const emit = vi.fn();
-    const coordinator = new TouchWheelCoordinator(emit);
-
-    coordinator.start(point(100));
-    coordinator.move(undefined);
-    expect(coordinator.move(point(80))).toBe(false);
-
-    expect(emit).not.toHaveBeenCalled();
-  });
-
-  it("cleans up cancelled state before the next gesture", () => {
-    const emit = vi.fn();
-    const coordinator = new TouchWheelCoordinator(emit);
-
-    coordinator.start(point(100));
-    coordinator.cancel();
-    coordinator.start(point(50));
-    expect(coordinator.move(point(43.5))).toBe(true);
-
-    expect(emit).toHaveBeenCalledOnce();
-    expect(emit.mock.calls[0][0].deltaY).toBe(6.5);
-  });
-
-  it.each([
-    { start: 100, end: 20, direction: 1 },
-    { start: 20, end: 100, direction: -1 },
-  ])(
-    "emits multiple $direction line ticks after release",
-    ({ start, end, direction }) => {
-      const emit = vi.fn();
-      const clock = createTiming();
-      const coordinator = new TouchWheelCoordinator(
-        emit,
-        undefined,
-        undefined,
-        clock.timing,
-      );
-
-      coordinator.start(point(start));
-      clock.advance(20);
-      coordinator.move(point((start + end) / 2));
-      clock.advance(20);
-      coordinator.move(point(end));
-      coordinator.end();
-      const dragCallCount = emit.mock.calls.length;
-
-      for (let index = 0; index < 12; index++) clock.advance(16);
-      const momentum = emit.mock.calls
-        .slice(dragCallCount)
-        .map(([event]) => event);
-
-      expect(momentum.length).toBeGreaterThan(3);
-      expect(
-        momentum.every(
-          (event) =>
-            event.deltaMode === WheelEvent.DOM_DELTA_LINE &&
-            event.deltaY === direction,
-        ),
-      ).toBe(true);
-    },
-  );
-
-  it("decays the number of line ticks emitted over time", () => {
-    const emit = vi.fn();
-    const clock = createTiming();
-    const coordinator = new TouchWheelCoordinator(
-      emit,
-      undefined,
-      undefined,
-      clock.timing,
-    );
-    coordinator.start(point(200));
-    clock.advance(20);
-    coordinator.move(point(100));
-    coordinator.end();
-    const dragCalls = emit.mock.calls.length;
-
-    const frameCounts: number[] = [];
-    for (let index = 0; index < 24; index++) {
-      const before = emit.mock.calls.length;
-      clock.advance(16);
-      frameCounts.push(emit.mock.calls.length - before);
-    }
-
-    expect(emit.mock.calls.length - dragCalls).toBeGreaterThan(3);
-    expect(frameCounts.slice(0, 8).reduce((a, b) => a + b, 0)).toBeGreaterThan(
-      frameCounts.slice(-8).reduce((a, b) => a + b, 0),
-    );
-  });
-
-  it("uses the recent movement window despite a short touchend delay", () => {
-    const emit = vi.fn();
-    const clock = createTiming();
-    const coordinator = new TouchWheelCoordinator(
-      emit,
-      undefined,
-      undefined,
-      clock.timing,
-    );
-    coordinator.start(point(100));
-    clock.advance(20);
-    coordinator.move(point(50));
-    clock.advance(80);
-    coordinator.end();
-
-    expect(clock.pendingFrames()).toBe(1);
-  });
-
-  it("bounds momentum velocity, duration, and total travel", () => {
-    const emit = vi.fn();
-    const clock = createTiming();
-    const coordinator = new TouchWheelCoordinator(
-      emit,
-      undefined,
-      undefined,
-      clock.timing,
-    );
-
-    coordinator.start(point(1000));
-    clock.advance(1);
-    coordinator.move(point(0));
-    coordinator.end();
-    const dragCallCount = emit.mock.calls.length;
-    clock.advance(200);
-    const firstFrameTicks = emit.mock.calls.length - dragCallCount;
-    for (let index = 0; index < 30; index++) clock.advance(20);
-    expect(clock.pendingFrames()).toBe(1);
-    for (let index = 0; index < 10; index++) clock.advance(20);
-    const totalTicks = emit.mock.calls.length - dragCallCount;
-
-    expect(firstFrameTicks).toBeLessThanOrEqual(4);
-    expect(totalTicks).toBeLessThanOrEqual(Math.floor(720 / 12));
-    expect(clock.pendingFrames()).toBe(0);
-  });
-
-  it("cancels momentum on a new touch or cancellation", () => {
-    const emit = vi.fn();
-    const clock = createTiming();
-    const coordinator = new TouchWheelCoordinator(
-      emit,
-      undefined,
-      undefined,
-      clock.timing,
-    );
-
-    coordinator.start(point(100));
-    clock.advance(20);
-    coordinator.move(point(50));
-    coordinator.end();
-    expect(clock.pendingFrames()).toBe(1);
-    coordinator.start(point(60));
-    expect(clock.pendingFrames()).toBe(0);
-
-    clock.advance(20);
-    coordinator.move(point(20));
-    coordinator.end();
-    expect(clock.pendingFrames()).toBe(1);
-    coordinator.cancel();
-    expect(clock.pendingFrames()).toBe(0);
-  });
-
-  it("disables momentum when reduced motion is requested", () => {
-    const emit = vi.fn();
-    const clock = createTiming(false);
-    const coordinator = new TouchWheelCoordinator(
-      emit,
-      undefined,
-      undefined,
-      clock.timing,
-    );
-
-    coordinator.start(point(100));
-    clock.advance(20);
-    coordinator.move(point(50));
-    coordinator.end();
-
-    expect(clock.pendingFrames()).toBe(0);
-    expect(emit).toHaveBeenCalledOnce();
-  });
-
-  it("stops momentum if the active terminal mode changes", () => {
-    const emit = vi.fn();
-    let momentumAllowed = true;
-    const clock = createTiming();
-    const coordinator = new TouchWheelCoordinator(emit, undefined, undefined, {
-      ...clock.timing,
-      momentumAllowed: () => momentumAllowed,
-    });
-
-    coordinator.start(point(100));
-    clock.advance(20);
-    coordinator.move(point(50));
-    coordinator.end();
-    momentumAllowed = false;
-    clock.advance(20);
-
-    expect(emit).toHaveBeenCalledOnce();
-    expect(clock.pendingFrames()).toBe(0);
-  });
-
-  it("retains fractional pixel distance until it forms a whole line tick", () => {
-    const emit = vi.fn();
-    const clock = createTiming();
-    const coordinator = new TouchWheelCoordinator(
-      emit,
-      undefined,
-      undefined,
-      clock.timing,
-    );
-
-    coordinator.start(point(100));
-    clock.advance(100);
-    coordinator.move(point(80));
-    coordinator.end();
-    const dragCallCount = emit.mock.calls.length;
-    for (let index = 0; index < 4; index++) clock.advance(16);
-    expect(emit.mock.calls.length).toBe(dragCallCount);
-    clock.advance(16);
-    expect(emit.mock.calls.length).toBeGreaterThan(dragCallCount);
-    expect(emit.mock.calls[dragCallCount][0]).toMatchObject({
-      deltaY: 1,
-      deltaMode: WheelEvent.DOM_DELTA_LINE,
-    });
-  });
-});
-
-describe("installTouchWheelCoordinator", () => {
-  it("claims the first single-touch move but preserves taps and multi-touch", () => {
-    const terminalElement = document.createElement("div");
-    const scrollableElement = document.createElement("div");
-    scrollableElement.className = "xterm-scrollable-element";
-    const screenElement = document.createElement("div");
-    screenElement.className = "xterm-screen";
-    scrollableElement.append(screenElement);
-    terminalElement.append(scrollableElement);
-    const dispose = installTouchWheelCoordinator(terminalElement);
-
-    terminalElement.dispatchEvent(touchEvent("touchstart", [100]));
-    const earlyMove = touchEvent("touchmove", [99]);
-    terminalElement.dispatchEvent(earlyMove);
-    expect(earlyMove.defaultPrevented).toBe(true);
-
-    terminalElement.dispatchEvent(touchEvent("touchend", []));
-    const tapEnd = touchEvent("touchend", []);
-    terminalElement.dispatchEvent(tapEnd);
-    expect(tapEnd.defaultPrevented).toBe(false);
-
-    terminalElement.dispatchEvent(touchEvent("touchstart", [100]));
-    const multiTouchMove = touchEvent("touchmove", [90, 80]);
-    terminalElement.dispatchEvent(multiTouchMove);
-    expect(multiTouchMove.defaultPrevented).toBe(false);
-    dispose();
-  });
-
-  it("dispatches wheel events at xterm's normal scrollback seam", () => {
-    const terminalElement = document.createElement("div");
-    const scrollableElement = document.createElement("div");
-    scrollableElement.className = "xterm-scrollable-element";
-    const screenElement = document.createElement("div");
-    const canvas = document.createElement("canvas");
-    screenElement.className = "xterm-screen";
-    screenElement.append(canvas);
-    scrollableElement.append(screenElement);
-    terminalElement.append(scrollableElement);
-    const scrollableWheel = vi.fn();
-    const canvasWheel = vi.fn();
-    scrollableElement.addEventListener("wheel", scrollableWheel);
-    canvas.addEventListener("wheel", canvasWheel);
-    const dispose = installTouchWheelCoordinator(terminalElement);
-
-    canvas.dispatchEvent(touchEvent("touchstart", [100]));
-    canvas.dispatchEvent(touchEvent("touchmove", [90]));
-
-    expect(scrollableWheel).toHaveBeenCalledOnce();
-    expect(canvasWheel).not.toHaveBeenCalled();
-    expect((scrollableWheel.mock.calls[0][0] as WheelEvent).deltaY).toBe(10);
-    expect((scrollableWheel.mock.calls[0][0] as WheelEvent).deltaMode).toBe(
-      WheelEvent.DOM_DELTA_PIXEL,
-    );
-    dispose();
-  });
-
-  it("dispatches momentum as line-mode wheel ticks from the scrollback seam", () => {
-    let now = 0;
-    let nextHandle = 1;
-    const callbacks = new Map<number, FrameRequestCallback>();
-    vi.spyOn(performance, "now").mockImplementation(() => now);
-    vi.stubGlobal("requestAnimationFrame", (callback: FrameRequestCallback) => {
-      const handle = nextHandle++;
-      callbacks.set(handle, callback);
-      return handle;
-    });
-    vi.stubGlobal("cancelAnimationFrame", (handle: number) => {
-      callbacks.delete(handle);
-    });
-
-    const terminalElement = document.createElement("div");
-    const scrollableElement = document.createElement("div");
-    scrollableElement.className = "xterm-scrollable-element";
-    const screenElement = document.createElement("div");
-    const canvas = document.createElement("canvas");
-    screenElement.className = "xterm-screen";
-    screenElement.append(canvas);
-    scrollableElement.append(screenElement);
-    terminalElement.append(scrollableElement);
-    const wheels: WheelEvent[] = [];
-    scrollableElement.addEventListener("wheel", (event) =>
-      wheels.push(event as WheelEvent),
-    );
-    const dispose = installTouchWheelCoordinator(terminalElement);
-
-    canvas.dispatchEvent(touchEvent("touchstart", [100]));
-    now = 20;
-    canvas.dispatchEvent(touchEvent("touchmove", [40]));
-    canvas.dispatchEvent(touchEvent("touchend", []));
-    for (let index = 0; index < 8; index++) {
-      now += 16;
-      const pending = [...callbacks.values()];
-      callbacks.clear();
-      pending.forEach((callback) => callback(now));
-    }
-
-    const momentum = wheels.filter(
-      (event) => event.deltaMode === WheelEvent.DOM_DELTA_LINE,
-    );
-    expect(momentum.length).toBeGreaterThan(1);
-    expect(momentum.every((event) => event.deltaY === 1)).toBe(true);
-    expect(wheels.every((event) => event.currentTarget === null)).toBe(true);
-    dispose();
-    vi.unstubAllGlobals();
-    vi.restoreAllMocks();
-  });
-});
diff --git a/plugins/ssh-terminal/tests/frontend/terminal/touch-wheel-coordinator.xterm.test.ts b/plugins/ssh-terminal/tests/frontend/terminal/touch-wheel-coordinator.xterm.test.ts
deleted file mode 100644
index 485aa2902..000000000
--- a/plugins/ssh-terminal/tests/frontend/terminal/touch-wheel-coordinator.xterm.test.ts
+++ /dev/null
@@ -1,140 +0,0 @@
-import { Terminal } from "@xterm/xterm";
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { installTouchWheelCoordinator } from "../../../src/frontend/terminal/touch-wheel-coordinator";
-
-const touchEvent = (type: string, clientYValues: number[]) => {
-  const event = new Event(type, { bubbles: true, cancelable: true });
-  const touches = clientYValues.map((clientY) => ({ clientX: 10, clientY }));
-  Object.defineProperty(event, "touches", {
-    value: Object.assign(touches, {
-      item: (index: number) => touches[index] ?? null,
-    }),
-  });
-  return event;
-};
-
-const write = (terminal: Terminal, data: string) =>
-  new Promise<void>((resolve) => terminal.write(data, resolve));
-
-describe("touch wheel coordinator with xterm", () => {
-  let terminal: Terminal | undefined;
-  let container: HTMLDivElement | undefined;
-
-  afterEach(() => {
-    terminal?.dispose();
-    container?.remove();
-    terminal = undefined;
-    container = undefined;
-    vi.unstubAllGlobals();
-  });
-
-  const installXtermCharacterMeasurements = () => {
-    vi.spyOn(HTMLCanvasElement.prototype, "getContext").mockReturnValue({
-      clearRect: vi.fn(),
-      fillRect: vi.fn(),
-      fillStyle: "",
-      lineWidth: 1,
-    } as unknown as CanvasRenderingContext2D);
-    vi.spyOn(HTMLElement.prototype, "offsetWidth", "get").mockImplementation(
-      function (this: HTMLElement) {
-        return this.classList.contains("xterm-char-measure-element")
-          ? 32 * 9
-          : 0;
-      },
-    );
-    vi.spyOn(HTMLElement.prototype, "offsetHeight", "get").mockImplementation(
-      function (this: HTMLElement) {
-        return this.classList.contains("xterm-char-measure-element") ? 18 : 0;
-      },
-    );
-  };
-
-  it("moves real normal-buffer scrollback during a drag and momentum", async () => {
-    installXtermCharacterMeasurements();
-    let now = 0;
-    let nextHandle = 1;
-    const frames = new Map<number, FrameRequestCallback>();
-    vi.spyOn(performance, "now").mockImplementation(() => now);
-    vi.stubGlobal("requestAnimationFrame", (callback: FrameRequestCallback) => {
-      const handle = nextHandle++;
-      frames.set(handle, callback);
-      return handle;
-    });
-    vi.stubGlobal("cancelAnimationFrame", (handle: number) => {
-      frames.delete(handle);
-    });
-
-    container = document.createElement("div");
-    document.body.appendChild(container);
-    terminal = new Terminal({ cols: 80, rows: 10, scrollback: 1_000 });
-    terminal.open(container);
-    await write(
-      terminal,
-      Array.from({ length: 500 }, (_, index) => `${index + 1}\r\n`).join(""),
-    );
-
-    const element = terminal.element!;
-    const dispose = installTouchWheelCoordinator(element);
-    terminal.scrollToBottom();
-    const bottom = terminal.buffer.active.viewportY;
-
-    element.dispatchEvent(touchEvent("touchstart", [20]));
-    now = 20;
-    element.dispatchEvent(touchEvent("touchmove", [100]));
-    const afterDrag = terminal.buffer.active.viewportY;
-    element.dispatchEvent(touchEvent("touchend", []));
-    for (let index = 0; index < 8; index++) {
-      now += 16;
-      const pending = [...frames.values()];
-      frames.clear();
-      pending.forEach((callback) => callback(now));
-    }
-
-    expect(bottom).toBeGreaterThan(400);
-    expect(afterDrag).toBeLessThan(bottom);
-    expect(terminal.buffer.active.viewportY).toBeLessThan(afterDrag);
-    dispose();
-  });
-
-  it("preserves alternate-buffer wheel line ticks", async () => {
-    installXtermCharacterMeasurements();
-    let now = 0;
-    let nextHandle = 1;
-    const frames = new Map<number, FrameRequestCallback>();
-    vi.spyOn(performance, "now").mockImplementation(() => now);
-    vi.stubGlobal("requestAnimationFrame", (callback: FrameRequestCallback) => {
-      const handle = nextHandle++;
-      frames.set(handle, callback);
-      return handle;
-    });
-    vi.stubGlobal("cancelAnimationFrame", (handle: number) => {
-      frames.delete(handle);
-    });
-    container = document.createElement("div");
-    document.body.appendChild(container);
-    terminal = new Terminal({ cols: 80, rows: 10 });
-    terminal.open(container);
-    const data: string[] = [];
-    terminal.onData((value) => data.push(value));
-    await write(terminal, "\x1b[?1049h");
-
-    const element = terminal.element!;
-    const dispose = installTouchWheelCoordinator(element);
-    element.dispatchEvent(touchEvent("touchstart", [100]));
-    now = 20;
-    element.dispatchEvent(touchEvent("touchmove", [0]));
-    data.length = 0;
-    element.dispatchEvent(touchEvent("touchend", []));
-    for (let index = 0; index < 8; index++) {
-      now += 16;
-      const pending = [...frames.values()];
-      frames.clear();
-      pending.forEach((callback) => callback(now));
-    }
-
-    expect(terminal.buffer.active.type).toBe("alternate");
-    expect(data.length).toBeGreaterThan(1);
-    expect(data.every((value) => value === "\x1b[B")).toBe(true);
-    dispose();
-  });
-});
diff --git a/plugins/ssh-terminal/tsconfig.json b/plugins/ssh-terminal/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/ssh-terminal/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/ssh-terminal/vitest.config.ts b/plugins/ssh-terminal/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/ssh-terminal/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/sso/CHANGELOG.md b/plugins/sso/CHANGELOG.md
deleted file mode 100644
index 481314832..000000000
--- a/plugins/sso/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Lets users sign in with an OpenID Connect provider, GitHub or Google. Each provider gets its own login button, and group claims can make users admins.
diff --git a/plugins/sso/README.md b/plugins/sso/README.md
deleted file mode 100644
index 2daad778b..000000000
--- a/plugins/sso/README.md
+++ /dev/null
@@ -1,28 +0,0 @@
-# Single sign-on
-
-Sign in with an OpenID Connect provider, GitHub or Google. Each provider gets its own button on the login screen.
-
-## Features
-
-- Sign in with any OpenID Connect provider, GitHub or Google.
-- Each provider gets its own button on the login screen.
-- Make members of an admin group Termix admins, read from a group claim.
-- Supports back-channel logout.
-
-## Settings
-
-### Admin
-
-- Providers: add a provider, then register the redirect URI it shows with your identity provider. Providers set up before 2.9 keep the old redirect URI until you turn it off.
-
-## Permissions
-
-- `sso.manage`: Add, edit and remove SSO providers. Only admins have it by default.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/sso/locales/en.json b/plugins/sso/locales/en.json
deleted file mode 100644
index 87a46292a..000000000
--- a/plugins/sso/locales/en.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Sign in with SSO",
-  "loginWithProvider": "Login with {{name}}",
-  "loading": "Loading...",
-  "permissions": {
-    "manage": {
-      "title": "Manage SSO providers",
-      "description": "Add, change and remove the SSO providers people can sign in with."
-    }
-  },
-  "providers": {
-    "docsLink": "View docs",
-    "none": "No SSO providers configured.",
-    "add": "Add Provider",
-    "edit": "Edit Provider",
-    "delete": "Delete Provider",
-    "deleteConfirm": "Delete this provider? Associated users will be unable to login.",
-    "name": "Display Name",
-    "namePlaceholder": "My SSO provider",
-    "nameRequired": "A display name is required",
-    "type": "Provider Type",
-    "enabled": "Enabled",
-    "enabledDesc": "Show a sign in button for this provider on the login screen.",
-    "dialogDesc": "Connect an identity provider so users can sign in with it.",
-    "sectionGeneral": "General",
-    "sectionCredentials": "Client",
-    "sectionClaims": "Claims",
-    "sectionAccess": "Access",
-    "save": "Save Provider",
-    "saving": "Saving...",
-    "saved": "Saved",
-    "saveFailed": "Failed to save",
-    "deleted": "Deleted",
-    "deleteFailed": "Failed to delete",
-    "loadFailed": "Failed to load SSO providers",
-    "cancel": "Cancel",
-    "copy": "Copy",
-    "copied": "Copied",
-    "redirectUri": "Redirect URI",
-    "redirectUriDesc": "Register this URL as the redirect or callback URL in your identity provider.",
-    "legacyCallback": "Keep the old redirect URI",
-    "legacyCallbackDesc": "This provider was set up before Termix 2.9 and still uses the old redirect URI, which keeps working. To move to the new one, add {{uri}} in your identity provider first, then turn this off.",
-    "authorizationUrl": "Authorization URL: {{url}}"
-  },
-  "fields": {
-    "clientId": "Client ID",
-    "clientSecret": "Client Secret",
-    "secretKeep": "A secret is saved. Leave this empty to keep it.",
-    "issuerUrl": "Issuer URL",
-    "authUrl": "Authorization URL",
-    "tokenUrl": "Token URL",
-    "userIdentifier": "User Identifier Path",
-    "displayName": "Display Name Path",
-    "scopes": "Scopes",
-    "userinfoUrl": "Override Userinfo URL",
-    "groupClaim": "Group Claim",
-    "groupClaimDesc": "Optional. The claim path that contains the user's groups. Defaults to groups, roles, then group. Use this for providers with a custom claim (e.g. Zitadel).",
-    "allowedUsers": "Allowed Users",
-    "allowedUsersDesc": "One email per line. Leave empty to allow all.",
-    "adminGroup": "Admin Group",
-    "adminGroupDesc": "Users in this group are granted admin. Leave empty to disable group sync.",
-    "caCert": "Custom CA Certificate",
-    "caCertDesc": "Optional. PEM-encoded CA certificate for OIDC providers using a private or self-signed CA. Leave empty to use the system trust store."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Sign in with SSO automatically",
-      "description": "Send visitors straight to the first SSO provider instead of showing the login form. The OIDC_SILENT_LOGIN_DEFAULT environment variable overrides this."
-    }
-  },
-  "plugin": {
-    "name": "Single sign-on"
-  }
-}
diff --git a/plugins/sso/locales/translated/af_ZA.json b/plugins/sso/locales/translated/af_ZA.json
deleted file mode 100644
index a8815df0a..000000000
--- a/plugins/sso/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Teken aan met SSO",
-  "loginWithProvider": "Teken aan met {{name}}",
-  "loading": "Laai tans...",
-  "permissions": {
-    "manage": {
-      "title": "Bestuur SSO-verskaffers",
-      "description": "Voeg die SSO-verskaffers by, verander en verwyder waarmee mense kan aanmeld."
-    }
-  },
-  "providers": {
-    "docsLink": "Bekyk dokumente",
-    "none": "Geen SSO-verskaffers gekonfigureer nie.",
-    "add": "Voeg Verskaffer by",
-    "edit": "Wysig Verskaffer",
-    "delete": "Vee Verskaffer uit",
-    "deleteConfirm": "Vee hierdie verskaffer uit? Geassosieerde gebruikers sal nie kan aanmeld nie.",
-    "name": "Vertoonnaam",
-    "namePlaceholder": "My SSO-verskaffer",
-    "nameRequired": "'n Vertoonnaam word vereis",
-    "type": "Verskaffertipe",
-    "enabled": "Geaktiveer",
-    "enabledDesc": "Wys 'n aanmeldknoppie vir hierdie verskaffer op die aanmeldskerm.",
-    "dialogDesc": "Koppel 'n identiteitsverskaffer sodat gebruikers daarmee kan aanmeld.",
-    "sectionGeneral": "Algemeen",
-    "sectionCredentials": "Kliënt",
-    "sectionClaims": "Eise",
-    "sectionAccess": "Toegang",
-    "save": "Stoor Verskaffer",
-    "saving": "Stoor...",
-    "saved": "Gestoor",
-    "saveFailed": "Kon nie stoor nie",
-    "deleted": "Verwyder",
-    "deleteFailed": "Kon nie verwyder nie",
-    "loadFailed": "Kon nie SSO-verskaffers laai nie",
-    "cancel": "Kanselleer",
-    "copy": "Kopieer",
-    "copied": "Gekopieer",
-    "redirectUri": "Herlei URI",
-    "redirectUriDesc": "Registreer hierdie URL as die aanstuur- of terugbel-URL in jou identiteitsverskaffer.",
-    "legacyCallback": "Behou die ou aanstuur-URI",
-    "legacyCallbackDesc": "Hierdie verskaffer is voor Termix 2.9 opgestel en gebruik steeds die ou aanstuur-URI, wat steeds werk. Om na die nuwe een oor te skakel, voeg eers {{uri}} by jou identiteitsverskaffer, en skakel dit dan af.",
-    "authorizationUrl": "Magtigings-URL: {{url}}"
-  },
-  "fields": {
-    "clientId": "Kliënt-ID",
-    "clientSecret": "Kliëntgeheim",
-    "secretKeep": "'n Geheim is gestoor. Los dit leeg om dit te behou.",
-    "issuerUrl": "Uitreiker-URL",
-    "authUrl": "Magtigings-URL",
-    "tokenUrl": "Teken-URL",
-    "userIdentifier": "Gebruikersidentifiseerderpad",
-    "displayName": "Vertoonnaampad",
-    "scopes": "Omvangsgebiede",
-    "userinfoUrl": "Oorskryf Gebruikersinligting URL",
-    "groupClaim": "Groep Eis",
-    "groupClaimDesc": "Opsioneel. Die eispad wat die gebruiker se groepe bevat. Standaard is groepe, rolle, dan groep. Gebruik dit vir verskaffers met 'n persoonlike eis (bv. Zitadel).",
-    "allowedUsers": "Toegelate Gebruikers",
-    "allowedUsersDesc": "Een e-pos per reël. Los leeg om alles toe te laat.",
-    "adminGroup": "Admingroep",
-    "adminGroupDesc": "Gebruikers in hierdie groep kry administrasie. Los leeg om groepsinchronisasie te deaktiveer.",
-    "caCert": "Pasgemaakte CA-sertifikaat",
-    "caCertDesc": "Opsioneel. PEM-geënkodeerde CA-sertifikaat vir OIDC-verskaffers wat 'n private of selfgetekende CA gebruik. Los leeg om die stelselvertrouensberging te gebruik."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Meld outomaties aan met SSO",
-      "description": "Stuur besoekers direk na die eerste SSO-verskaffer in plaas daarvan om die aanmeldvorm te wys. Die OIDC_SILENT_LOGIN_DEFAULT omgewingveranderlike oorskryf dit."
-    }
-  },
-  "plugin": {
-    "name": "Enkele aanmelding"
-  }
-}
diff --git a/plugins/sso/locales/translated/ar_SA.json b/plugins/sso/locales/translated/ar_SA.json
deleted file mode 100644
index 5eb8cb223..000000000
--- a/plugins/sso/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "سجّل الدخول باستخدام تسجيل الدخول الموحد (SSO)",
-  "loginWithProvider": "تسجيل الدخول باستخدام {{name}}",
-  "loading": "جارٍ التحميل...",
-  "permissions": {
-    "manage": {
-      "title": "إدارة موفري تسجيل الدخول الموحد (SSO)",
-      "description": "أضف، غيّر، واحذف مزودي خدمة تسجيل الدخول الموحد (SSO) الذين يمكن للأشخاص تسجيل الدخول باستخدامهم."
-    }
-  },
-  "providers": {
-    "docsLink": "عرض المستندات",
-    "none": "لم يتم تكوين أي مزود SSO.",
-    "add": "إضافة مزود",
-    "edit": "تعديل المزود",
-    "delete": "حذف المزود",
-    "deleteConfirm": "حذف هذا المزود؟ لن يتمكن المستخدمون المرتبطون من تسجيل الدخول.",
-    "name": "اسم العرض",
-    "namePlaceholder": "موفر خدمة تسجيل الدخول الموحد الخاص بي",
-    "nameRequired": "اسم العرض مطلوب",
-    "type": "نوع المزود",
-    "enabled": "مُمكّن",
-    "enabledDesc": "اعرض زر تسجيل الدخول لهذا المزود على شاشة تسجيل الدخول.",
-    "dialogDesc": "قم بتوصيل موفر الهوية حتى يتمكن المستخدمون من تسجيل الدخول باستخدامه.",
-    "sectionGeneral": "عام",
-    "sectionCredentials": "عميل",
-    "sectionClaims": "المطالبات",
-    "sectionAccess": "وصول",
-    "save": "حفظ المزود",
-    "saving": "جارٍ الحفظ...",
-    "saved": "محفوظ",
-    "saveFailed": "فشل في الحفظ",
-    "deleted": "محذوف",
-    "deleteFailed": "فشل في الحذف",
-    "loadFailed": "فشل تحميل موفري تسجيل الدخول الموحد",
-    "cancel": "إلغاء",
-    "copy": "نسخ",
-    "copied": "تم النسخ",
-    "redirectUri": "عنوان إعادة التوجيه",
-    "redirectUriDesc": "قم بتسجيل عنوان URL هذا كعنوان URL لإعادة التوجيه أو عنوان URL للرد في موفر الهوية الخاص بك.",
-    "legacyCallback": "احتفظ بمعرف إعادة التوجيه القديم",
-    "legacyCallbackDesc": "تم إعداد هذا المزوّد قبل إصدار Termix 2.9، ولا يزال يستخدم عنوان إعادة التوجيه القديم، والذي يعمل بشكل سليم. للانتقال إلى العنوان الجديد، أضف {{uri}} إلى مزوّد الهوية الخاص بك أولاً، ثم عطّل هذا الخيار.",
-    "authorizationUrl": "رابط التفويض: {{url}}"
-  },
-  "fields": {
-    "clientId": "معرف العميل",
-    "clientSecret": "سر العميل",
-    "secretKeep": "تم حفظ السر. اترك هذا الحقل فارغاً للحفاظ عليه.",
-    "issuerUrl": "رابط المُصدر",
-    "authUrl": "رابط التفويض",
-    "tokenUrl": "رابط الرمز المميز",
-    "userIdentifier": "مسار معرّف المستخدم",
-    "displayName": "مسار اسم العرض",
-    "scopes": "النطاقات",
-    "userinfoUrl": "تجاوز رابط Userinfo",
-    "groupClaim": "مطالبة المجموعة",
-    "groupClaimDesc": "اختياري. مسار المطالبة الذي يحتوي على مجموعات المستخدم. القيمة الافتراضية هي groups، ثم roles، ثم group. استخدم هذا للموفّرين الذين لديهم مطالبة مخصصة (مثل Zitadel).",
-    "allowedUsers": "المستخدمون المسموح لهم",
-    "allowedUsersDesc": "بريد إلكتروني واحد في كل سطر. اتركه فارغًا للسماح للجميع.",
-    "adminGroup": "مجموعة المسؤولين",
-    "adminGroupDesc": "يُمنح المستخدمون في هذه المجموعة صلاحيات المسؤول. اتركه فارغًا لتعطيل مزامنة المجموعة.",
-    "caCert": "شهادة CA مخصصة",
-    "caCertDesc": "اختياري. شهادة CA بترميز PEM لموفّري OIDC الذين يستخدمون شهادة CA خاصة أو موقّعة ذاتيًا. اتركه فارغًا لاستخدام مخزن الثقة في النظام."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "تسجيل الدخول باستخدام تسجيل الدخول الموحد (SSO) تلقائيًا",
-      "description": "قم بتوجيه الزوار مباشرةً إلى أول مزود خدمة تسجيل دخول موحد (SSO) بدلاً من عرض نموذج تسجيل الدخول. يُمكن تجاوز هذا الإعداد باستخدام متغير البيئة OIDC_SILENT_LOGIN_DEFAULT."
-    }
-  },
-  "plugin": {
-    "name": "تسجيل دخول موحد"
-  }
-}
diff --git a/plugins/sso/locales/translated/bg_BG.json b/plugins/sso/locales/translated/bg_BG.json
deleted file mode 100644
index eb0f80788..000000000
--- a/plugins/sso/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Влизане с SSO",
-  "loginWithProvider": "Влезте с {{name}}",
-  "loading": "Зареждане...",
-  "permissions": {
-    "manage": {
-      "title": "Управление на доставчици на SSO",
-      "description": "Добавяне, промяна и премахване на доставчици на SSO, с които хората могат да влизат."
-    }
-  },
-  "providers": {
-    "docsLink": "Преглед на документи",
-    "none": "Няма конфигурирани доставчици на SSO.",
-    "add": "Добавяне на доставчик",
-    "edit": "Редактиране на доставчик",
-    "delete": "Изтриване на доставчик",
-    "deleteConfirm": "Да се изтрие ли този доставчик? Свързаните потребители няма да могат да влязат.",
-    "name": "Показвано име",
-    "namePlaceholder": "Моят доставчик на SSO",
-    "nameRequired": "Изисква се показвано име",
-    "type": "Тип доставчик",
-    "enabled": "Активирано",
-    "enabledDesc": "Показване на бутон за вход за този доставчик на екрана за вход.",
-    "dialogDesc": "Свържете доставчик на самоличност, за да могат потребителите да влизат с него.",
-    "sectionGeneral": "Общи",
-    "sectionCredentials": "Клиент",
-    "sectionClaims": "Твърдения",
-    "sectionAccess": "Достъп",
-    "save": "Запазване на доставчика",
-    "saving": "Запазване...",
-    "saved": "Запазено",
-    "saveFailed": "Запазването не бе успешно",
-    "deleted": "Изтрито",
-    "deleteFailed": "Изтриването не бе успешно",
-    "loadFailed": "Зареждането на доставчиците на SSO не бе успешно",
-    "cancel": "Отказ",
-    "copy": "Копиране",
-    "copied": "Копирано",
-    "redirectUri": "URI адрес за пренасочване",
-    "redirectUriDesc": "Регистрирайте този URL адрес като URL адрес за пренасочване или обратно извикване във вашия доставчик на идентичност.",
-    "legacyCallback": "Запазете стария URI адрес за пренасочване",
-    "legacyCallbackDesc": "Този доставчик е настроен преди Termix 2.9 и все още използва стария URI за пренасочване, който продължава да работи. За да преминете към новия, първо добавете {{uri}} към вашия доставчик на идентичност, след което го изключете.",
-    "authorizationUrl": "URL адрес за оторизация: {{url}}"
-  },
-  "fields": {
-    "clientId": "Идентификационен номер на клиента",
-    "clientSecret": "Клиентска тайна",
-    "secretKeep": "Тайната е запазена. Оставете това празно, за да я запазите.",
-    "issuerUrl": "URL адрес на издателя",
-    "authUrl": "URL адрес за оторизация",
-    "tokenUrl": "URL адрес на токена",
-    "userIdentifier": "Път на потребителския идентификатор",
-    "displayName": "Път на показваното име",
-    "scopes": "Обхвати",
-    "userinfoUrl": "Замяна на URL адреса на потребителската информация",
-    "groupClaim": "Групово искане",
-    "groupClaimDesc": "Незадължително. Пътят на твърдението, който съдържа групите на потребителя. По подразбиране са групи, роли и след това група. Използвайте това за доставчици с персонализирано твърдение (напр. Zitadel).",
-    "allowedUsers": "Разрешени потребители",
-    "allowedUsersDesc": "По един имейл на ред. Оставете празно, за да разрешите всички.",
-    "adminGroup": "Административна група",
-    "adminGroupDesc": "Потребителите в тази група са с администраторски права. Оставете празно, за да деактивирате синхронизирането на групата.",
-    "caCert": "Персонализиран CA сертификат",
-    "caCertDesc": "Незадължително. PEM-кодиран CA сертификат за OIDC доставчици, използващи частен или самоподписан CA. Оставете празно, за да използвате хранилището за доверени сертификати на системата."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Влизане с SSO автоматично",
-      "description": "Изпращайте посетителите директно към първия SSO доставчик, вместо да показвате формата за вход. Променливата на средата OIDC_SILENT_LOGIN_DEFAULT отменя това."
-    }
-  },
-  "plugin": {
-    "name": "Единичен вход"
-  }
-}
diff --git a/plugins/sso/locales/translated/bn_BD.json b/plugins/sso/locales/translated/bn_BD.json
deleted file mode 100644
index 3680f0a07..000000000
--- a/plugins/sso/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "SSO দিয়ে সাইন ইন করুন",
-  "loginWithProvider": "{{name}} দিয়ে লগইন করুন",
-  "loading": "লোড হচ্ছে...",
-  "permissions": {
-    "manage": {
-      "title": "SSO প্রোভাইডারদের পরিচালনা করুন",
-      "description": "ব্যবহারকারীরা যেসব SSO প্রোভাইডারের মাধ্যমে সাইন ইন করতে পারবেন, সেগুলো যোগ করুন, পরিবর্তন করুন এবং সরিয়ে ফেলুন।"
-    }
-  },
-  "providers": {
-    "docsLink": "নথি দেখুন",
-    "none": "কোনো SSO প্রদানকারী কনফিগার করা নেই।",
-    "add": "প্রদানকারী যোগ করুন",
-    "edit": "সম্পাদনা প্রদানকারী",
-    "delete": "প্রোভাইডার মুছুন",
-    "deleteConfirm": "এই প্রোভাইডারটি মুছে ফেললে সংশ্লিষ্ট ব্যবহারকারীরা লগইন করতে পারবেন না।",
-    "name": "প্রদর্শনের নাম",
-    "namePlaceholder": "আমার SSO প্রদানকারী",
-    "nameRequired": "একটি প্রদর্শনের নাম প্রয়োজন",
-    "type": "প্রদানকারীর ধরণ",
-    "enabled": "সক্ষম করা হয়েছে",
-    "enabledDesc": "লগইন স্ক্রিনে এই প্রোভাইডারের জন্য একটি সাইন ইন বাটন দেখান।",
-    "dialogDesc": "একটি আইডেন্টিটি প্রোভাইডার সংযুক্ত করুন যাতে ব্যবহারকারীরা এর মাধ্যমে সাইন ইন করতে পারেন।",
-    "sectionGeneral": "সাধারণ",
-    "sectionCredentials": "ক্লায়েন্ট",
-    "sectionClaims": "দাবি",
-    "sectionAccess": "অ্যাক্সেস",
-    "save": "সরবরাহকারীকে সংরক্ষণ করুন",
-    "saving": "সঞ্চয়...",
-    "saved": "সংরক্ষিত",
-    "saveFailed": "সংরক্ষণ করতে ব্যর্থ হয়েছে",
-    "deleted": "মুছে ফেলা হয়েছে",
-    "deleteFailed": "মুছে ফেলতে ব্যর্থ হয়েছে",
-    "loadFailed": "SSO প্রোভাইডার লোড করতে ব্যর্থ হয়েছে",
-    "cancel": "বাতিল করুন",
-    "copy": "অনুলিপি",
-    "copied": "অনুলিপি করা হয়েছে",
-    "redirectUri": "পুনঃনির্দেশ URI",
-    "redirectUriDesc": "আপনার আইডেন্টিটি প্রোভাইডারে এই URL-টিকে রিডাইরেক্ট বা কলব্যাক URL হিসেবে রেজিস্টার করুন।",
-    "legacyCallback": "পুরানো রিডাইরেক্ট ইউআরআই রাখুন",
-    "legacyCallbackDesc": "এই প্রোভাইডারটি Termix 2.9-এর আগে সেট আপ করা হয়েছিল এবং এখনও পুরানো রিডাইরেক্ট URI ব্যবহার করে, যা এখনও কাজ করছে। নতুনটিতে যেতে, প্রথমে আপনার আইডেন্টিটি প্রোভাইডারে {{uri}} যোগ করুন, তারপর এটি বন্ধ করে দিন।",
-    "authorizationUrl": "অনুমোদন ইউআরএল: {{url}}"
-  },
-  "fields": {
-    "clientId": "ক্লায়েন্ট আইডি",
-    "clientSecret": "ক্লায়েন্ট গোপনীয়",
-    "secretKeep": "একটি গোপন বিষয় সংরক্ষিত আছে। এটি গোপন রাখতে এই অংশটি খালি রাখুন।",
-    "issuerUrl": "ইস্যুকারী ইউআরএল",
-    "authUrl": "অনুমোদন ইউআরএল",
-    "tokenUrl": "টোকেন ইউআরএল",
-    "userIdentifier": "ব্যবহারকারী শনাক্তকারী পথ",
-    "displayName": "ডিসপ্লে নেম পাথ",
-    "scopes": "স্কোপ",
-    "userinfoUrl": "ব্যবহারকারীর তথ্য ইউআরএল ওভাররাইড করুন",
-    "groupClaim": "গোষ্ঠী দাবি",
-    "groupClaimDesc": "ঐচ্ছিক। এটি হলো সেই ক্লেইম পাথ যেখানে ব্যবহারকারীর গ্রুপগুলো থাকে। ডিফল্ট হিসেবে প্রথমে গ্রুপ, তারপর রোল, এবং সবশেষে গ্রুপ থাকে। কাস্টম ক্লেইম আছে এমন প্রোভাইডারদের (যেমন জিটাডেল) জন্য এটি ব্যবহার করুন।",
-    "allowedUsers": "অনুমোদিত ব্যবহারকারী",
-    "allowedUsersDesc": "প্রতি লাইনে একটি ইমেল। সবগুলো দেখানোর জন্য খালি রাখুন।",
-    "adminGroup": "অ্যাডমিন গ্রুপ",
-    "adminGroupDesc": "এই গ্রুপের ব্যবহারকারীদের অ্যাডমিন অ্যাক্সেস দেওয়া হয়েছে। গ্রুপ সিঙ্ক নিষ্ক্রিয় করতে এটি খালি রাখুন।",
-    "caCert": "কাস্টম সিএ সার্টিফিকেট",
-    "caCertDesc": "ঐচ্ছিক। প্রাইভেট বা সেলফ-সাইন্ড CA ব্যবহারকারী OIDC প্রোভাইডারদের জন্য PEM-এনকোডেড CA সার্টিফিকেট। সিস্টেম ট্রাস্ট স্টোর ব্যবহার করতে এটি খালি রাখুন।"
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "SSO দিয়ে স্বয়ংক্রিয়ভাবে সাইন ইন করুন",
-      "description": "লগইন ফর্ম দেখানোর পরিবর্তে ভিজিটরদের সরাসরি প্রথম SSO প্রোভাইডারের কাছে পাঠান। OIDC_SILENT_LOGIN_DEFAULT এনভায়রনমেন্ট ভেরিয়েবলটি এই প্রক্রিয়াটিকে ওভাররাইড করে।"
-    }
-  },
-  "plugin": {
-    "name": "একক সাইন-অন"
-  }
-}
diff --git a/plugins/sso/locales/translated/ca_ES.json b/plugins/sso/locales/translated/ca_ES.json
deleted file mode 100644
index 832514c0c..000000000
--- a/plugins/sso/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Inicia la sessió amb SSO",
-  "loginWithProvider": "Inicia la sessió amb {{name}}",
-  "loading": "S'està carregant...",
-  "permissions": {
-    "manage": {
-      "title": "Gestionar proveïdors d'SSO",
-      "description": "Afegiu, canvieu i elimineu els proveïdors d'SSO amb què els usuaris poden iniciar la sessió."
-    }
-  },
-  "providers": {
-    "docsLink": "Veure documents",
-    "none": "No hi ha cap proveïdor d'SSO configurat.",
-    "add": "Afegeix un proveïdor",
-    "edit": "Edita el proveïdor",
-    "delete": "Suprimeix el proveïdor",
-    "deleteConfirm": "Voleu suprimir aquest proveïdor? Els usuaris associats no podran iniciar la sessió.",
-    "name": "Nom de visualització",
-    "namePlaceholder": "El meu proveïdor d'SSO",
-    "nameRequired": "Cal un nom de visualització",
-    "type": "Tipus de proveïdor",
-    "enabled": "Activat",
-    "enabledDesc": "Mostra un botó d'inici de sessió per a aquest proveïdor a la pantalla d'inici de sessió.",
-    "dialogDesc": "Connecteu un proveïdor d'identitat perquè els usuaris puguin iniciar la sessió amb ell.",
-    "sectionGeneral": "General",
-    "sectionCredentials": "Client",
-    "sectionClaims": "Reclamacions",
-    "sectionAccess": "Accés",
-    "save": "Desa el proveïdor",
-    "saving": "Desant...",
-    "saved": "Desat",
-    "saveFailed": "No s'ha pogut desar",
-    "deleted": "Suprimit",
-    "deleteFailed": "No s'ha pogut suprimir",
-    "loadFailed": "No s'han pogut carregar els proveïdors d'SSO",
-    "cancel": "Cancel·la",
-    "copy": "Còpia",
-    "copied": "Copiat",
-    "redirectUri": "URI de redirecció",
-    "redirectUriDesc": "Registra aquesta URL com a URL de redirecció o de devolució de trucada al teu proveïdor d'identitat.",
-    "legacyCallback": "Mantingueu l'URI de redirecció antiga",
-    "legacyCallbackDesc": "Aquest proveïdor es va configurar abans de Termix 2.9 i encara utilitza l'URI de redirecció antic, que continua funcionant. Per canviar al nou, afegiu primer {{uri}} al vostre proveïdor d'identitat i després desactiveu-lo.",
-    "authorizationUrl": "URL d'autorització: {{url}}"
-  },
-  "fields": {
-    "clientId": "ID de client",
-    "clientSecret": "Secret del client",
-    "secretKeep": "S'ha desat un secret. Deixa aquest espai buit per conservar-lo.",
-    "issuerUrl": "URL de l'emissor",
-    "authUrl": "URL d'autorització",
-    "tokenUrl": "URL del testimoni",
-    "userIdentifier": "Ruta d'identificació d'usuari",
-    "displayName": "Camí del nom de visualització",
-    "scopes": "Àmbits",
-    "userinfoUrl": "Substitueix l'URL d'informació de l'usuari",
-    "groupClaim": "Reclamació de grup",
-    "groupClaimDesc": "Opcional. La ruta de reclamació que conté els grups de l'usuari. Per defecte, s'utilitzen grups, rols i, a continuació, grup. Feu servir això per a proveïdors amb una reclamació personalitzada (per exemple, Zitadel).",
-    "allowedUsers": "Usuaris permesos",
-    "allowedUsersDesc": "Un correu electrònic per línia. Deixeu-ho en blanc per permetre-ho tot.",
-    "adminGroup": "Grup d'administradors",
-    "adminGroupDesc": "Els usuaris d'aquest grup tenen dret d'administrador. Deixeu-ho en blanc per desactivar la sincronització del grup.",
-    "caCert": "Certificat CA personalitzat",
-    "caCertDesc": "Opcional. Certificat CA codificat amb PEM per a proveïdors OIDC que utilitzen una CA privada o autosignada. Deixeu-ho en blanc per utilitzar el magatzem de confiança del sistema."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Inicia la sessió amb SSO automàticament",
-      "description": "Envia els visitants directament al primer proveïdor d'SSO en comptes de mostrar el formulari d'inici de sessió. La variable d'entorn OIDC_SILENT_LOGIN_DEFAULT ho anul·la."
-    }
-  },
-  "plugin": {
-    "name": "Inici de sessió únic"
-  }
-}
diff --git a/plugins/sso/locales/translated/cs_CZ.json b/plugins/sso/locales/translated/cs_CZ.json
deleted file mode 100644
index 0ef85efd1..000000000
--- a/plugins/sso/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Přihlásit se pomocí SSO",
-  "loginWithProvider": "Přihlaste se pomocí {{name}}",
-  "loading": "Načítání...",
-  "permissions": {
-    "manage": {
-      "title": "Správa poskytovatelů jednotného přihlašování (SSO)",
-      "description": "Přidávat, měnit a odebírat poskytovatele SSO, přes které se lidé mohou přihlašovat."
-    }
-  },
-  "providers": {
-    "docsLink": "Zobrazit dokumenty",
-    "none": "Nejsou nakonfigurováni žádní poskytovatelé jednotného přihlašování (SSO).",
-    "add": "Přidat poskytovatele",
-    "edit": "Upravit poskytovatele",
-    "delete": "Smazat poskytovatele",
-    "deleteConfirm": "Smazat tohoto poskytovatele? Přidružení uživatelé se nebudou moci přihlásit.",
-    "name": "Zobrazovaný název",
-    "namePlaceholder": "Můj poskytovatel SSO",
-    "nameRequired": "Je vyžadováno zobrazované jméno",
-    "type": "Typ poskytovatele",
-    "enabled": "Povoleno",
-    "enabledDesc": "Zobrazit na přihlašovací obrazovce tlačítko pro přihlášení k tomuto poskytovateli.",
-    "dialogDesc": "Připojte poskytovatele identity, aby se s ním uživatelé mohli přihlašovat.",
-    "sectionGeneral": "Obecné",
-    "sectionCredentials": "Klient",
-    "sectionClaims": "Nároky",
-    "sectionAccess": "Přístup",
-    "save": "Uložit poskytovatele",
-    "saving": "Ukládání…",
-    "saved": "Uloženo",
-    "saveFailed": "Uložení se nezdařilo",
-    "deleted": "Smazáno",
-    "deleteFailed": "Smazání se nezdařilo",
-    "loadFailed": "Načtení poskytovatelů SSO se nezdařilo",
-    "cancel": "Zrušit",
-    "copy": "Kopie",
-    "copied": "Zkopírováno",
-    "redirectUri": "URI přesměrování",
-    "redirectUriDesc": "Zaregistrujte tuto URL adresu jako URL adresu pro přesměrování nebo zpětné volání u svého poskytovatele identity.",
-    "legacyCallback": "Zachovat starý identifikátor URI přesměrování",
-    "legacyCallbackDesc": "Tento poskytovatel byl nastaven před verzí Termix 2.9 a stále používá starý URI pro přesměrování, který funguje. Chcete-li přejít na nového, nejprve přidejte do svého poskytovatele identity {{uri}} a poté tuto možnost vypněte.",
-    "authorizationUrl": "Autorizační URL: {{url}}"
-  },
-  "fields": {
-    "clientId": "ID klienta",
-    "clientSecret": "Tajemství klienta",
-    "secretKeep": "Tajný kód je uložen. Pro jeho zachování nechte toto pole prázdné.",
-    "issuerUrl": "URL vydavatele",
-    "authUrl": "Autorizační URL",
-    "tokenUrl": "URL tokenu",
-    "userIdentifier": "Cesta k identifikátoru uživatele",
-    "displayName": "Cesta k zobrazovanému názvu",
-    "scopes": "Rozsahy",
-    "userinfoUrl": "Přepsat URL s uživatelskými informacemi",
-    "groupClaim": "Skupinový nárok",
-    "groupClaimDesc": "Volitelné. Cesta k deklaraci identity, která obsahuje skupiny uživatele. Výchozí nastavení je skupiny, role a poté skupina. Použijte pro poskytovatele s vlastní deklarací identity (např. Zitadel).",
-    "allowedUsers": "Povolení uživatelé",
-    "allowedUsersDesc": "Jeden e-mail na řádek. Pro povolení všech ponechte prázdné.",
-    "adminGroup": "Skupina administrátorů",
-    "adminGroupDesc": "Uživatelé v této skupině mají oprávnění k administraci. Pro deaktivaci synchronizace skupiny ponechte pole prázdné.",
-    "caCert": "Vlastní certifikát certifikační autority",
-    "caCertDesc": "Volitelné. Certifikát certifikační autority s kódováním PEM pro poskytovatele OIDC používající soukromou nebo samopodepsanou certifikační autoritu. Pro použití systémového úložiště důvěryhodných certifikátů ponechte pole prázdné."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Automatické přihlášení pomocí SSO",
-      "description": "Odesílejte návštěvníky přímo k prvnímu poskytovateli SSO namísto zobrazení přihlašovacího formuláře. Proměnná prostředí OIDC_SILENT_LOGIN_DEFAULT toto přepíše."
-    }
-  },
-  "plugin": {
-    "name": "Jednotné přihlašování"
-  }
-}
diff --git a/plugins/sso/locales/translated/da_DK.json b/plugins/sso/locales/translated/da_DK.json
deleted file mode 100644
index 743c23acc..000000000
--- a/plugins/sso/locales/translated/da_DK.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Log ind med SSO",
-  "loginWithProvider": "Log ind med {{name}}",
-  "loading": "Indlæser...",
-  "permissions": {
-    "manage": {
-      "title": "Administrer SSO-udbydere",
-      "description": "Tilføj, rediger og fjern de SSO-udbydere, som folk kan logge ind med."
-    }
-  },
-  "providers": {
-    "docsLink": "Se dokumenter",
-    "none": "Ingen SSO-udbydere er konfigureret.",
-    "add": "Tilføj udbyder",
-    "edit": "Rediger udbyder",
-    "delete": "Slet udbyder",
-    "deleteConfirm": "Vil du slette denne udbyder? Tilknyttede brugere vil ikke kunne logge ind.",
-    "name": "Vist navn",
-    "namePlaceholder": "Min SSO-udbyder",
-    "nameRequired": "Et visningsnavn er påkrævet",
-    "type": "Udbydertype",
-    "enabled": "Aktiveret",
-    "enabledDesc": "Vis en loginknap for denne udbyder på loginskærmen.",
-    "dialogDesc": "Tilslut en identitetsudbyder, så brugerne kan logge ind med den.",
-    "sectionGeneral": "Generel",
-    "sectionCredentials": "Klient",
-    "sectionClaims": "Krav",
-    "sectionAccess": "Adgang",
-    "save": "Gem udbyder",
-    "saving": "Gemmer...",
-    "saved": "Gemt",
-    "saveFailed": "Kunne ikke gemme",
-    "deleted": "Slettet",
-    "deleteFailed": "Kunne ikke slette",
-    "loadFailed": "Kunne ikke indlæse SSO-udbydere",
-    "cancel": "Ophæve",
-    "copy": "Kopi",
-    "copied": "Kopieret",
-    "redirectUri": "Omdirigerings-URI",
-    "redirectUriDesc": "Registrer denne URL som omdirigerings- eller tilbagekalds-URL i din identitetsudbyder.",
-    "legacyCallback": "Behold den gamle omdirigerings-URI",
-    "legacyCallbackDesc": "Denne udbyder blev oprettet før Termix 2.9 og bruger stadig den gamle omdirigerings-URI, som fortsat fungerer. For at skifte til den nye skal du først tilføje {{uri}} i din identitetsudbyder og derefter slå dette fra.",
-    "authorizationUrl": "Autorisations-URL: {{url}}"
-  },
-  "fields": {
-    "clientId": "Klient-ID",
-    "clientSecret": "Klienthemmelighed",
-    "secretKeep": "En hemmelighed er gemt. Lad dette felt være tomt for at beholde den.",
-    "issuerUrl": "Udsteders URL",
-    "authUrl": "Autorisations-URL",
-    "tokenUrl": "Token-URL",
-    "userIdentifier": "Brugeridentifikatorsti",
-    "displayName": "Sti til visningsnavn",
-    "scopes": "Omfang",
-    "userinfoUrl": "Tilsidesæt brugerinfo-URL",
-    "groupClaim": "Gruppekrav",
-    "groupClaimDesc": "Valgfrit. Kravsstien, der indeholder brugerens grupper. Standardindstillingen er grupper, roller og derefter gruppe. Brug dette til udbydere med et brugerdefineret krav (f.eks. Zitadel).",
-    "allowedUsers": "Tilladte brugere",
-    "allowedUsersDesc": "Én e-mail pr. linje. Lad feltet stå tomt for at tillade alle.",
-    "adminGroup": "Admingruppe",
-    "adminGroupDesc": "Brugere i denne gruppe har administratorrettigheder. Lad feltet stå tomt for at deaktivere gruppesynkronisering.",
-    "caCert": "Brugerdefineret CA-certifikat",
-    "caCertDesc": "Valgfrit. PEM-kodet CA-certifikat til OIDC-udbydere, der bruger en privat eller selvsigneret CA. Lad feltet stå tomt for at bruge systemets tillidslager."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Log automatisk ind med SSO",
-      "description": "Send besøgende direkte til den første SSO-udbyder i stedet for at vise loginformularen. Miljøvariablen OIDC_SILENT_LOGIN_DEFAULT tilsidesætter dette."
-    }
-  },
-  "plugin": {
-    "name": "Enkelt login"
-  }
-}
diff --git a/plugins/sso/locales/translated/de_DE.json b/plugins/sso/locales/translated/de_DE.json
deleted file mode 100644
index 7f370f7d3..000000000
--- a/plugins/sso/locales/translated/de_DE.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Mit SSO anmelden",
-  "loginWithProvider": "Anmeldung mit {{name}}",
-  "loading": "Laden...",
-  "permissions": {
-    "manage": {
-      "title": "SSO-Anbieter verwalten",
-      "description": "Fügen Sie SSO-Anbieter hinzu, ändern oder entfernen Sie diese, mit denen sich Benutzer anmelden können."
-    }
-  },
-  "providers": {
-    "docsLink": "Dokumentation ansehen",
-    "none": "Keine SSO-Anbieter konfiguriert.",
-    "add": "Anbieter hinzufügen",
-    "edit": "Anbieter bearbeiten",
-    "delete": "Anbieter löschen",
-    "deleteConfirm": "Diesen Anbieter löschen? Zugehörige Benutzer können sich nicht mehr anmelden.",
-    "name": "Anzeigename",
-    "namePlaceholder": "Mein SSO-Anbieter",
-    "nameRequired": "Ein Anzeigename ist erforderlich.",
-    "type": "Anbietertyp",
-    "enabled": "Aktiviert",
-    "enabledDesc": "Zeigen Sie auf dem Anmeldebildschirm eine Anmeldeschaltfläche für diesen Anbieter an.",
-    "dialogDesc": "Verbinden Sie einen Identitätsanbieter, damit sich Benutzer damit anmelden können.",
-    "sectionGeneral": "Allgemein",
-    "sectionCredentials": "Kunde",
-    "sectionClaims": "Ansprüche",
-    "sectionAccess": "Zugang",
-    "save": "Anbieter speichern",
-    "saving": "Wird gespeichert …",
-    "saved": "Gespeichert",
-    "saveFailed": "Speichern fehlgeschlagen",
-    "deleted": "Gelöscht",
-    "deleteFailed": "Löschen fehlgeschlagen",
-    "loadFailed": "SSO-Anbieter konnten nicht geladen werden",
-    "cancel": "Abbrechen",
-    "copy": "Kopieren",
-    "copied": "Kopiert",
-    "redirectUri": "Umleitungs-URI",
-    "redirectUriDesc": "Registrieren Sie diese URL als Weiterleitungs- oder Rückruf-URL bei Ihrem Identitätsanbieter.",
-    "legacyCallback": "Behalte die alte Umleitungs-URI bei.",
-    "legacyCallbackDesc": "Dieser Anbieter wurde vor Termix 2.9 eingerichtet und verwendet noch die alte Umleitungs-URI, die weiterhin funktioniert. Um zur neuen URI zu wechseln, fügen Sie zunächst {{uri}} in Ihrem Identitätsanbieter hinzu und deaktivieren Sie diese Option anschließend.",
-    "authorizationUrl": "Autorisierungs-URL: {{url}}"
-  },
-  "fields": {
-    "clientId": "Client-ID",
-    "clientSecret": "Client-Secret",
-    "secretKeep": "Ein Geheimnis ist gewahrt. Lassen Sie dieses Feld leer, um es zu bewahren.",
-    "issuerUrl": "Issuer-URL",
-    "authUrl": "Autorisierungs-URL",
-    "tokenUrl": "Token-URL",
-    "userIdentifier": "Benutzerkennungspfad",
-    "displayName": "Anzeigename-Pfad",
-    "scopes": "Scopes",
-    "userinfoUrl": "Userinfo-URL überschreiben",
-    "groupClaim": "Gruppen-Claim",
-    "groupClaimDesc": "Optional. Der Claim-Pfad, der die Gruppen des Benutzers enthält. Standardmäßig groups, roles, dann group. Verwenden Sie dies für Anbieter mit einem benutzerdefinierten Claim (z. B. Zitadel).",
-    "allowedUsers": "Zugelassene Benutzer",
-    "allowedUsersDesc": "Eine E-Mail pro Zeile. Leer lassen, um alle zuzulassen.",
-    "adminGroup": "Admin-Gruppe",
-    "adminGroupDesc": "Benutzer in dieser Gruppe erhalten Admin-Berechtigungen. Leer lassen, um die Gruppensynchronisierung zu deaktivieren.",
-    "caCert": "Benutzerdefiniertes CA-Zertifikat",
-    "caCertDesc": "Optional. PEM-kodiertes CA-Zertifikat für OIDC-Anbieter, die eine private oder selbstsignierte Zertifizierungsstelle verwenden. Leer lassen, um den System-Vertrauensspeicher zu verwenden."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Automatische Anmeldung mit SSO",
-      "description": "Besucher werden direkt zum ersten SSO-Anbieter weitergeleitet, anstatt das Anmeldeformular anzuzeigen. Die Umgebungsvariable OIDC_SILENT_LOGIN_DEFAULT überschreibt dies."
-    }
-  },
-  "plugin": {
-    "name": "Single Sign-On"
-  }
-}
diff --git a/plugins/sso/locales/translated/el_GR.json b/plugins/sso/locales/translated/el_GR.json
deleted file mode 100644
index 754504c93..000000000
--- a/plugins/sso/locales/translated/el_GR.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Σύνδεση με SSO",
-  "loginWithProvider": "Σύνδεση με {{name}}",
-  "loading": "Φόρτωση...",
-  "permissions": {
-    "manage": {
-      "title": "Διαχείριση παρόχων SSO",
-      "description": "Προσθέστε, αλλάξτε και καταργήστε τους παρόχους SSO με τους οποίους μπορούν να συνδεθούν οι χρήστες."
-    }
-  },
-  "providers": {
-    "docsLink": "Προβολή εγγράφων",
-    "none": "Δεν έχουν ρυθμιστεί πάροχοι SSO.",
-    "add": "Προσθήκη παρόχου",
-    "edit": "Επεξεργασία παρόχου",
-    "delete": "Διαγραφή παρόχου",
-    "deleteConfirm": "Διαγραφή αυτού του παρόχου; Οι συνδεδεμένοι χρήστες δεν θα μπορούν να συνδεθούν.",
-    "name": "Εμφανιζόμενο όνομα",
-    "namePlaceholder": "Ο πάροχος SSO μου",
-    "nameRequired": "Απαιτείται εμφανιζόμενο όνομα",
-    "type": "Τύπος παρόχου",
-    "enabled": "Ενεργοποιημένο",
-    "enabledDesc": "Εμφάνιση ενός κουμπιού σύνδεσης για αυτόν τον πάροχο στην οθόνη σύνδεσης.",
-    "dialogDesc": "Συνδέστε έναν πάροχο ταυτότητας, ώστε οι χρήστες να μπορούν να συνδεθούν με αυτόν.",
-    "sectionGeneral": "Γενικός",
-    "sectionCredentials": "Πελάτης",
-    "sectionClaims": "Αξιώσεις",
-    "sectionAccess": "Πρόσβαση",
-    "save": "Αποθήκευση παρόχου",
-    "saving": "Οικονομία...",
-    "saved": "Αποθηκεύτηκε",
-    "saveFailed": "Η αποθήκευση απέτυχε",
-    "deleted": "Διαγράφηκε",
-    "deleteFailed": "Η διαγραφή απέτυχε",
-    "loadFailed": "Αποτυχία φόρτωσης παρόχων SSO",
-    "cancel": "Ματαίωση",
-    "copy": "Αντίγραφο",
-    "copied": "Αντιγράφηκε",
-    "redirectUri": "URI ανακατεύθυνσης",
-    "redirectUriDesc": "Καταχωρίστε αυτήν τη διεύθυνση URL ως διεύθυνση URL ανακατεύθυνσης ή επανάκλησης στον πάροχο ταυτότητάς σας.",
-    "legacyCallback": "Διατηρήστε το παλιό URI ανακατεύθυνσης",
-    "legacyCallbackDesc": "Αυτός ο πάροχος είχε ρυθμιστεί πριν από το Termix 2.9 και εξακολουθεί να χρησιμοποιεί το παλιό URI ανακατεύθυνσης, το οποίο συνεχίζει να λειτουργεί. Για να μεταβείτε στον νέο, προσθέστε πρώτα το {{uri}} στον πάροχο ταυτότητάς σας και, στη συνέχεια, απενεργοποιήστε αυτήν τη λειτουργία.",
-    "authorizationUrl": "URL εξουσιοδότησης: {{url}}"
-  },
-  "fields": {
-    "clientId": "Αναγνωριστικό πελάτη",
-    "clientSecret": "Μυστικό Πελάτη",
-    "secretKeep": "Ένα μυστικό αποθηκεύτηκε. Αφήστε το κενό για να το διατηρήσετε.",
-    "issuerUrl": "URL εκδότη",
-    "authUrl": "URL εξουσιοδότησης",
-    "tokenUrl": "URL διακριτικού",
-    "userIdentifier": "Διαδρομή αναγνωριστικού χρήστη",
-    "displayName": "Διαδρομή ονόματος εμφάνισης",
-    "scopes": "Πεδία",
-    "userinfoUrl": "Παράκαμψη URL πληροφοριών χρήστη",
-    "groupClaim": "Ομαδική αξίωση",
-    "groupClaimDesc": "Προαιρετικό. Η διαδρομή αξίωσης που περιέχει τις ομάδες του χρήστη. Η προεπιλεγμένη τιμή είναι ομάδες, ρόλοι και στη συνέχεια ομάδα. Χρησιμοποιήστε αυτήν τη διαδρομή για παρόχους με προσαρμοσμένη αξίωση (π.χ. Zitadel).",
-    "allowedUsers": "Επιτρεπόμενοι χρήστες",
-    "allowedUsersDesc": "Ένα email ανά γραμμή. Αφήστε το κενό για να επιτρέπονται όλα.",
-    "adminGroup": "Ομάδα Διαχειριστών",
-    "adminGroupDesc": "Οι χρήστες σε αυτήν την ομάδα έχουν παραχωρηθεί ως διαχειριστές. Αφήστε το κενό για να απενεργοποιήσετε τον συγχρονισμό ομάδας.",
-    "caCert": "Προσαρμοσμένο Πιστοποιητικό CA",
-    "caCertDesc": "Προαιρετικό. Πιστοποιητικό CA με κωδικοποίηση PEM για παρόχους OIDC που χρησιμοποιούν ιδιωτική ή αυτο-υπογεγραμμένη αρχή έκδοσης πιστοποιητικών. Αφήστε το κενό για να χρησιμοποιήσετε τον χώρο αποθήκευσης αξιοπιστίας του συστήματος."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Αυτόματη σύνδεση με SSO",
-      "description": "Στέλνει τους επισκέπτες απευθείας στον πρώτο πάροχο SSO αντί να εμφανίζει τη φόρμα σύνδεσης. Η μεταβλητή περιβάλλοντος OIDC_SILENT_LOGIN_DEFAULT παρακάμπτει αυτό."
-    }
-  },
-  "plugin": {
-    "name": "Μοναδική σύνδεση"
-  }
-}
diff --git a/plugins/sso/locales/translated/es_ES.json b/plugins/sso/locales/translated/es_ES.json
deleted file mode 100644
index ddf2a8d39..000000000
--- a/plugins/sso/locales/translated/es_ES.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Iniciar sesión con SSO",
-  "loginWithProvider": "Iniciar sesión con {{name}}",
-  "loading": "Cargando...",
-  "permissions": {
-    "manage": {
-      "title": "Gestionar proveedores de inicio de sesión único (SSO)",
-      "description": "Agregue, cambie y elimine los proveedores de inicio de sesión único (SSO) con los que las personas pueden iniciar sesión."
-    }
-  },
-  "providers": {
-    "docsLink": "Ver documentación",
-    "none": "No hay proveedores SSO configurados.",
-    "add": "Añadir proveedor",
-    "edit": "Editar proveedor",
-    "delete": "Eliminar proveedor",
-    "deleteConfirm": "¿Eliminar este proveedor? Los usuarios asociados no podrán iniciar sesión.",
-    "name": "Nombre para mostrar",
-    "namePlaceholder": "Mi proveedor de SSO",
-    "nameRequired": "Se requiere un nombre para mostrar.",
-    "type": "Tipo de proveedor",
-    "enabled": "Activado",
-    "enabledDesc": "Mostrar un botón de inicio de sesión para este proveedor en la pantalla de inicio de sesión.",
-    "dialogDesc": "Conecta un proveedor de identidad para que los usuarios puedan iniciar sesión con él.",
-    "sectionGeneral": "General",
-    "sectionCredentials": "Cliente",
-    "sectionClaims": "Reclamos",
-    "sectionAccess": "Acceso",
-    "save": "Guardar proveedor",
-    "saving": "Guardando...",
-    "saved": "Guardado",
-    "saveFailed": "Error al guardar",
-    "deleted": "Eliminado",
-    "deleteFailed": "Error al eliminar",
-    "loadFailed": "No se pudieron cargar los proveedores de SSO.",
-    "cancel": "Cancelar",
-    "copy": "Copiar",
-    "copied": "Copiado",
-    "redirectUri": "URI de redirección",
-    "redirectUriDesc": "Registra esta URL como URL de redireccionamiento o de devolución de llamada en tu proveedor de identidad.",
-    "legacyCallback": "Mantén la URI de redireccionamiento antigua.",
-    "legacyCallbackDesc": "Este proveedor se configuró antes de Termix 2.9 y aún utiliza la URI de redireccionamiento antigua, que sigue funcionando. Para cambiar a la nueva, primero añade {{uri}} a tu proveedor de identidad y luego desactiva esta opción.",
-    "authorizationUrl": "URL de autorización: {{url}}"
-  },
-  "fields": {
-    "clientId": "ID de cliente",
-    "clientSecret": "Secreto de cliente",
-    "secretKeep": "Un secreto está guardado. Deja esto en blanco para conservarlo.",
-    "issuerUrl": "URL del emisor",
-    "authUrl": "URL de autorización",
-    "tokenUrl": "URL del token",
-    "userIdentifier": "Ruta del identificador de usuario",
-    "displayName": "Ruta del nombre para mostrar",
-    "scopes": "Ámbitos",
-    "userinfoUrl": "Sobrescribir URL de Userinfo",
-    "groupClaim": "Claim de grupo",
-    "groupClaimDesc": "Opcional. La ruta del claim que contiene los grupos del usuario. Por defecto, se usan 'groups', 'roles' y luego 'group'. Úselo para proveedores con un claim personalizado (p. ej. Zitadel).",
-    "allowedUsers": "Usuarios permitidos",
-    "allowedUsersDesc": "Un correo electrónico por línea. Déjelo vacío para permitir todos.",
-    "adminGroup": "Grupo de administradores",
-    "adminGroupDesc": "Los usuarios de este grupo reciben permisos de administrador. Déjelo vacío para desactivar la sincronización de grupos.",
-    "caCert": "Certificado CA personalizado",
-    "caCertDesc": "Opcional. Certificado CA codificado en PEM para proveedores OIDC que utilicen una CA privada o autofirmada. Déjelo vacío para usar el almacén de confianza del sistema."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Inicia sesión automáticamente con SSO.",
-      "description": "En lugar de mostrar el formulario de inicio de sesión, redirige a los visitantes directamente al primer proveedor de SSO. La variable de entorno OIDC_SILENT_LOGIN_DEFAULT anula esta configuración."
-    }
-  },
-  "plugin": {
-    "name": "Inicio de sesión único"
-  }
-}
diff --git a/plugins/sso/locales/translated/fi_FI.json b/plugins/sso/locales/translated/fi_FI.json
deleted file mode 100644
index eed050731..000000000
--- a/plugins/sso/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Kirjaudu sisään kertakirjautumisella",
-  "loginWithProvider": "Kirjaudu sisään tunnuksella {{name}}",
-  "loading": "Ladataan...",
-  "permissions": {
-    "manage": {
-      "title": "Hallinnoi kertakirjautumispalveluntarjoajia",
-      "description": "Lisää, muuta ja poista kertakirjautumisen tarjoajia, joilla käyttäjät voivat kirjautua sisään."
-    }
-  },
-  "providers": {
-    "docsLink": "Näytä dokumentit",
-    "none": "SSO-palveluntarjoajia ei ole määritetty.",
-    "add": "Lisää palveluntarjoaja",
-    "edit": "Muokkaa palveluntarjoajaa",
-    "delete": "Poista palveluntarjoaja",
-    "deleteConfirm": "Poistetaanko tämä palveluntarjoaja? Liitännäiset käyttäjät eivät voi kirjautua sisään.",
-    "name": "Näyttönimi",
-    "namePlaceholder": "SSO-palveluntarjoajani",
-    "nameRequired": "Näyttönimi on pakollinen",
-    "type": "Palveluntarjoajan tyyppi",
-    "enabled": "Käytössä",
-    "enabledDesc": "Näytä tämän palveluntarjoajan kirjautumispainike kirjautumisnäytössä.",
-    "dialogDesc": "Yhdistä identiteetintarjoaja, jotta käyttäjät voivat kirjautua sisään sillä.",
-    "sectionGeneral": "Yleistä",
-    "sectionCredentials": "Asiakas",
-    "sectionClaims": "Vaatimukset",
-    "sectionAccess": "Pääsy",
-    "save": "Tallenna palveluntarjoaja",
-    "saving": "Tallennetaan...",
-    "saved": "Tallennettu",
-    "saveFailed": "Tallennus epäonnistui",
-    "deleted": "Poistettu",
-    "deleteFailed": "Poistaminen epäonnistui",
-    "loadFailed": "SSO-palveluntarjoajien lataaminen epäonnistui",
-    "cancel": "Peruuttaa",
-    "copy": "Kopioida",
-    "copied": "Kopioitu",
-    "redirectUri": "Uudelleenohjauksen URI",
-    "redirectUriDesc": "Rekisteröi tämä URL-osoite uudelleenohjaus- tai takaisinkutsuosoitteeksi identiteetintarjoajassasi.",
-    "legacyCallback": "Säilytä vanha uudelleenohjaus-URI",
-    "legacyCallbackDesc": "Tämä palveluntarjoaja määritettiin ennen Termix 2.9:ää ja käyttää edelleen vanhaa uudelleenohjaus-URI:a, joka toimii edelleen. Siirry uuteen lisäämällä ensin {{uri}} identiteetintarjoajaasi ja poistamalla tämä sitten käytöstä.",
-    "authorizationUrl": "Valtuutus-URL-osoite: {{url}}"
-  },
-  "fields": {
-    "clientId": "Asiakastunnus",
-    "clientSecret": "Asiakkaan salaisuus",
-    "secretKeep": "Salaisuus on tallennettu. Jätä tämä tyhjäksi, jos haluat sen säilyvän.",
-    "issuerUrl": "Liikkeeseenlaskijan URL-osoite",
-    "authUrl": "Valtuutus-URL-osoite",
-    "tokenUrl": "Tunnuksen URL-osoite",
-    "userIdentifier": "Käyttäjätunnisteen polku",
-    "displayName": "Näyttönimen polku",
-    "scopes": "Laajuusalueet",
-    "userinfoUrl": "Käyttäjätietojen URL-osoitteen ohitus",
-    "groupClaim": "Ryhmävaatimus",
-    "groupClaimDesc": "Valinnainen. Vaatimuspolku, joka sisältää käyttäjän ryhmät. Oletusarvo on ryhmät, roolit ja lopuksi ryhmä. Käytä tätä palveluntarjoajille, joilla on mukautettu vaatimus (esim. Zitadel).",
-    "allowedUsers": "Sallitut käyttäjät",
-    "allowedUsersDesc": "Yksi sähköpostiosoite riviä kohden. Jätä tyhjäksi salliaksesi kaikki.",
-    "adminGroup": "Hallintaryhmä",
-    "adminGroupDesc": "Tämän ryhmän käyttäjille on myönnetty järjestelmänvalvojan oikeudet. Jätä tyhjäksi, jos haluat poistaa ryhmän synkronoinnin käytöstä.",
-    "caCert": "Mukautettu CA-varmenne",
-    "caCertDesc": "Valinnainen. PEM-koodattu CA-varmenne OIDC-palveluntarjoajille, jotka käyttävät yksityistä tai itse allekirjoitettua CA:ta. Jätä tyhjäksi, jos haluat käyttää järjestelmän luotettavuussäilöä."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Kirjaudu sisään automaattisesti kertakirjautumisella",
-      "description": "Ohjaa kävijät suoraan ensimmäiselle SSO-palveluntarjoajalle kirjautumislomakkeen näyttämisen sijaan. OIDC_SILENT_LOGIN_DEFAULT-ympäristömuuttuja korvaa tämän."
-    }
-  },
-  "plugin": {
-    "name": "Kertakirjautuminen"
-  }
-}
diff --git a/plugins/sso/locales/translated/fr_FR.json b/plugins/sso/locales/translated/fr_FR.json
deleted file mode 100644
index 57ac45159..000000000
--- a/plugins/sso/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Se connecter avec l'authentification unique",
-  "loginWithProvider": "Se connecter avec {{name}}",
-  "loading": "Chargement...",
-  "permissions": {
-    "manage": {
-      "title": "Gérer les fournisseurs SSO",
-      "description": "Ajouter, modifier et supprimer les fournisseurs d'authentification unique (SSO) avec lesquels les utilisateurs peuvent se connecter."
-    }
-  },
-  "providers": {
-    "docsLink": "Voir la documentation",
-    "none": "Aucun fournisseur SSO configuré.",
-    "add": "Ajouter un fournisseur",
-    "edit": "Modifier le fournisseur",
-    "delete": "Supprimer le fournisseur",
-    "deleteConfirm": "Supprimer ce fournisseur ? Les utilisateurs associés ne pourront plus se connecter.",
-    "name": "Nom affiché",
-    "namePlaceholder": "Mon fournisseur SSO",
-    "nameRequired": "Un nom d'affichage est requis.",
-    "type": "Type de fournisseur",
-    "enabled": "Activé",
-    "enabledDesc": "Afficher un bouton de connexion pour ce fournisseur sur l'écran de connexion.",
-    "dialogDesc": "Connectez un fournisseur d'identité pour que les utilisateurs puissent se connecter avec celui-ci.",
-    "sectionGeneral": "Général",
-    "sectionCredentials": "Client",
-    "sectionClaims": "Réclamations",
-    "sectionAccess": "Accéder",
-    "save": "Enregistrer le fournisseur",
-    "saving": "Enregistrement…",
-    "saved": "Enregistré",
-    "saveFailed": "Échec de l'enregistrement",
-    "deleted": "Supprimé",
-    "deleteFailed": "Échec de la suppression",
-    "loadFailed": "Échec du chargement des fournisseurs SSO",
-    "cancel": "Annuler",
-    "copy": "Copier",
-    "copied": "Copié",
-    "redirectUri": "URI de redirection",
-    "redirectUriDesc": "Enregistrez cette URL comme URL de redirection ou de rappel auprès de votre fournisseur d'identité.",
-    "legacyCallback": "Conserver l'ancienne URI de redirection",
-    "legacyCallbackDesc": "Ce fournisseur a été configuré avant Termix 2.9 et utilise toujours l'ancienne URI de redirection, qui reste fonctionnelle. Pour passer à la nouvelle, ajoutez d'abord {{uri}} à votre fournisseur d'identité, puis désactivez-le.",
-    "authorizationUrl": "URL d'autorisation : {{url}}"
-  },
-  "fields": {
-    "clientId": "ID client",
-    "clientSecret": "Secret client",
-    "secretKeep": "Un secret est préservé. Laissez cet emplacement vide pour le conserver.",
-    "issuerUrl": "URL de l'émetteur",
-    "authUrl": "URL d'autorisation",
-    "tokenUrl": "URL du jeton",
-    "userIdentifier": "Chemin de l'identifiant utilisateur",
-    "displayName": "Chemin du nom affiché",
-    "scopes": "Scopes",
-    "userinfoUrl": "URL Userinfo personnalisée",
-    "groupClaim": "Revendication de groupe",
-    "groupClaimDesc": "Facultatif. Chemin de la revendication contenant les groupes de l'utilisateur. Par défaut : groups, roles, puis group. Utilisez ce champ pour les fournisseurs avec une revendication personnalisée (ex. Zitadel).",
-    "allowedUsers": "Utilisateurs autorisés",
-    "allowedUsersDesc": "Une adresse e-mail par ligne. Laissez vide pour autoriser tout le monde.",
-    "adminGroup": "Groupe administrateur",
-    "adminGroupDesc": "Les utilisateurs de ce groupe ont les droits administrateur. Laissez vide pour désactiver la synchronisation de groupe.",
-    "caCert": "Certificat CA personnalisé",
-    "caCertDesc": "Facultatif. Certificat CA au format PEM pour les fournisseurs OIDC utilisant une CA privée ou auto-signée. Laissez vide pour utiliser le magasin de confiance du système."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Connectez-vous automatiquement avec l'authentification unique (SSO).",
-      "description": "Dirigez les visiteurs directement vers le premier fournisseur d'authentification unique (SSO) au lieu d'afficher le formulaire de connexion. La variable d'environnement OIDC_SILENT_LOGIN_DEFAULT remplace ce comportement."
-    }
-  },
-  "plugin": {
-    "name": "Authentification unique"
-  }
-}
diff --git a/plugins/sso/locales/translated/he_IL.json b/plugins/sso/locales/translated/he_IL.json
deleted file mode 100644
index ea2ffeb3e..000000000
--- a/plugins/sso/locales/translated/he_IL.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "כניסה באמצעות כניסה יחידה (SSO)",
-  "loginWithProvider": "התחברות באמצעות {{name}}",
-  "loading": "טְעִינָה...",
-  "permissions": {
-    "manage": {
-      "title": "ניהול ספקי SSO",
-      "description": "הוספה, שינוי והסרה של ספקי SSO שאנשים יכולים להתחבר איתם."
-    }
-  },
-  "providers": {
-    "docsLink": "הצג מסמכים",
-    "none": "לא הוגדרו ספקי SSO.",
-    "add": "הוסף ספק",
-    "edit": "עריכת ספק",
-    "delete": "מחיקת ספק",
-    "deleteConfirm": "למחוק ספק זה? משתמשים משויכים לא יוכלו להתחבר.",
-    "name": "שם תצוגה",
-    "namePlaceholder": "ספק ה-SSO שלי",
-    "nameRequired": "נדרש שם תצוגה",
-    "type": "סוג ספק",
-    "enabled": "מופעל",
-    "enabledDesc": "הצג כפתור כניסה עבור ספק זה במסך הכניסה.",
-    "dialogDesc": "חבר ספק זהויות כדי שמשתמשים יוכלו להתחבר באמצעותו.",
-    "sectionGeneral": "כְּלָלִי",
-    "sectionCredentials": "לָקוּחַ",
-    "sectionClaims": "תביעות",
-    "sectionAccess": "גִישָׁה",
-    "save": "שמור ספק",
-    "saving": "חִסָכוֹן...",
-    "saved": "נשמר",
-    "saveFailed": "השמירה נכשלה",
-    "deleted": "נמחק",
-    "deleteFailed": "המחיקה נכשלה",
-    "loadFailed": "נכשלה טעינת ספקי SSO",
-    "cancel": "לְבַטֵל",
-    "copy": "לְהַעְתִיק",
-    "copied": "מוּעֲתָק",
-    "redirectUri": "כתובת URL להפניה מחדש",
-    "redirectUriDesc": "רשום כתובת URL זו ככתובת URL להפניה או לקריאה חוזרת בספק הזהויות שלך.",
-    "legacyCallback": "שמור את כתובת ה-URI הישנה להפניה",
-    "legacyCallbackDesc": "ספק זה הוגדר לפני Termix 2.9 ועדיין משתמש ב-URI להפניה מחדש הישן, שממשיך לעבוד. כדי לעבור ל-URI החדש, הוסף תחילה {{uri}} לספק הזהויות שלך, ולאחר מכן כבה אפשרות זו.",
-    "authorizationUrl": "כתובת אתר לאימות: {{url}}"
-  },
-  "fields": {
-    "clientId": "מזהה לקוח",
-    "clientSecret": "סוד הלקוח",
-    "secretKeep": "סוד נשמר. השאר שדה זה ריק כדי לשמור אותו.",
-    "issuerUrl": "כתובת URL של המנפיק",
-    "authUrl": "כתובת אתר להרשאה",
-    "tokenUrl": "כתובת אתר של אסימון",
-    "userIdentifier": "נתיב מזהה המשתמש",
-    "displayName": "נתיב שם התצוגה",
-    "scopes": "טווחים",
-    "userinfoUrl": "עקיפת כתובת URL של פרטי משתמש",
-    "groupClaim": "תביעה קבוצתית",
-    "groupClaimDesc": "אופציונלי. נתיב התביעה המכיל את קבוצות המשתמש. ברירת המחדל היא קבוצות, תפקידים ולאחר מכן קבוצה. השתמש באפשרות זו עבור ספקים עם תביעה מותאמת אישית (למשל Zitadel).",
-    "allowedUsers": "משתמשים מורשים",
-    "allowedUsersDesc": "אימייל אחד בכל שורה. יש להשאיר ריק כדי לאפשר את כולם.",
-    "adminGroup": "קבוצת ניהול",
-    "adminGroupDesc": "למשתמשים בקבוצה זו יש הרשאה לניהול. יש להשאיר ריק כדי להשבית את סנכרון הקבוצה.",
-    "caCert": "תעודת CA מותאמת אישית",
-    "caCertDesc": "אופציונלי. אישור CA מקודד PEM עבור ספקי OIDC המשתמשים באישור CA פרטי או חתום עצמית. השאר ריק כדי להשתמש במאגר האמון של המערכת."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "כניסה אוטומטית באמצעות SSO",
-      "description": "שלח מבקרים ישירות לספק ה-SSO הראשון במקום להציג את טופס ההתחברות. משתנה הסביבה OIDC_SILENT_LOGIN_DEFAULT עוקף זאת."
-    }
-  },
-  "plugin": {
-    "name": "כניסה יחידה"
-  }
-}
diff --git a/plugins/sso/locales/translated/hi_IN.json b/plugins/sso/locales/translated/hi_IN.json
deleted file mode 100644
index d720de1ac..000000000
--- a/plugins/sso/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "एसएसओ के साथ साइन इन करें",
-  "loginWithProvider": "{{name}} से लॉगिन करें",
-  "loading": "लोड हो रहा है...",
-  "permissions": {
-    "manage": {
-      "title": "एसएसओ प्रदाताओं का प्रबंधन करें",
-      "description": "उन एसएसओ प्रदाताओं को जोड़ें, बदलें और हटाएं जिनके माध्यम से लोग साइन इन कर सकते हैं।"
-    }
-  },
-  "providers": {
-    "docsLink": "दस्तावेज़ देखें",
-    "none": "कोई SSO प्रदाता कॉन्फ़िगर नहीं है।",
-    "add": "प्रदाता जोड़ें",
-    "edit": "प्रदाता संपादित करें",
-    "delete": "प्रदाता हटाएँ",
-    "deleteConfirm": "इस प्रदाता को हटाएँ? इससे जुड़े उपयोगकर्ता लॉगिन नहीं कर पाएंगे।",
-    "name": "प्रदर्शन नाम",
-    "namePlaceholder": "मेरा एसएसओ प्रदाता",
-    "nameRequired": "एक डिस्प्ले नाम आवश्यक है",
-    "type": "प्रदाता प्रकार",
-    "enabled": "सक्षम",
-    "enabledDesc": "लॉगिन स्क्रीन पर इस प्रदाता के लिए साइन इन बटन दिखाएं।",
-    "dialogDesc": "एक पहचान प्रदाता को कनेक्ट करें ताकि उपयोगकर्ता इसके साथ साइन इन कर सकें।",
-    "sectionGeneral": "सामान्य",
-    "sectionCredentials": "ग्राहक",
-    "sectionClaims": "दावा",
-    "sectionAccess": "पहुँच",
-    "save": "प्रदाता सहेजें",
-    "saving": "सहेजा जा रहा है...",
-    "saved": "सहेजा गया",
-    "saveFailed": "सहेजने में विफल",
-    "deleted": "हटाया गया",
-    "deleteFailed": "हटाने में विफल",
-    "loadFailed": "एसएसओ प्रदाताओं को लोड करने में विफल।",
-    "cancel": "रद्द करें",
-    "copy": "कॉपी",
-    "copied": "कॉपी किया गया",
-    "redirectUri": "रीडायरेक्ट यूआरआई",
-    "redirectUriDesc": "इस यूआरएल को अपने आइडेंटिटी प्रोवाइडर में रीडायरेक्ट या कॉलबैक यूआरएल के रूप में रजिस्टर करें।",
-    "legacyCallback": "पुराने रीडायरेक्ट यूआरआई को बनाए रखें",
-    "legacyCallbackDesc": "यह प्रोवाइडर Termix 2.9 से पहले स्थापित किया गया था और अभी भी पुराने रीडायरेक्ट URI का उपयोग करता है, जो काम करता रहता है। नए URI पर जाने के लिए, पहले अपने आइडेंटिटी प्रोवाइडर में {{uri}} जोड़ें, फिर इसे बंद कर दें।",
-    "authorizationUrl": "प्राधिकरण यूआरएल: {{url}}"
-  },
-  "fields": {
-    "clientId": "क्लाइंट आईडी",
-    "clientSecret": "क्लाइंट सीक्रेट",
-    "secretKeep": "एक राज़ सुरक्षित रखा गया है। इसे सुरक्षित रखने के लिए इसे खाली छोड़ दें।",
-    "issuerUrl": "जारीकर्ता URL",
-    "authUrl": "प्राधिकरण URL",
-    "tokenUrl": "टोकन URL",
-    "userIdentifier": "उपयोगकर्ता पहचानकर्ता पथ",
-    "displayName": "प्रदर्शन नाम पथ",
-    "scopes": "स्कोप",
-    "userinfoUrl": "Userinfo URL ओवरराइड करें",
-    "groupClaim": "समूह दावा",
-    "groupClaimDesc": "वैकल्पिक। वह दावा पथ जिसमें उपयोगकर्ता के समूह शामिल हैं। डिफ़ॉल्ट रूप से groups, roles, फिर group होता है। कस्टम दावे वाले प्रदाताओं के लिए इसका उपयोग करें (जैसे Zitadel)।",
-    "allowedUsers": "अनुमत उपयोगकर्ता",
-    "allowedUsersDesc": "प्रति पंक्ति एक ईमेल। सभी को अनुमति देने के लिए खाली छोड़ें।",
-    "adminGroup": "व्यवस्थापक समूह",
-    "adminGroupDesc": "इस समूह के उपयोगकर्ताओं को व्यवस्थापक अधिकार दिए जाते हैं। समूह सिंक अक्षम करने के लिए खाली छोड़ें।",
-    "caCert": "कस्टम CA प्रमाणपत्र",
-    "caCertDesc": "वैकल्पिक। निजी या स्व-हस्ताक्षरित CA का उपयोग करने वाले OIDC प्रदाताओं के लिए PEM-एन्कोडेड CA प्रमाणपत्र। सिस्टम ट्रस्ट स्टोर का उपयोग करने के लिए खाली छोड़ें।"
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "एसएसओ के साथ स्वचालित रूप से साइन इन करें",
-      "description": "लॉगिन फ़ॉर्म दिखाने के बजाय आगंतुकों को सीधे पहले एसएसओ प्रदाता पर भेजें। OIDC_SILENT_LOGIN_DEFAULT पर्यावरण चर इसे ओवरराइड करता है।"
-    }
-  },
-  "plugin": {
-    "name": "केवल हस्ताक्षर के ऊपर"
-  }
-}
diff --git a/plugins/sso/locales/translated/hu_HU.json b/plugins/sso/locales/translated/hu_HU.json
deleted file mode 100644
index 24848555f..000000000
--- a/plugins/sso/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Bejelentkezés egyszeri bejelentkezéssel",
-  "loginWithProvider": "Bejelentkezés {{name}} használatával",
-  "loading": "Terhelés...",
-  "permissions": {
-    "manage": {
-      "title": "SSO-szolgáltatók kezelése",
-      "description": "Hozzáadhatja, módosíthatja és eltávolíthatja azokat az SSO-szolgáltatókat, amelyekkel a felhasználók bejelentkezhetnek."
-    }
-  },
-  "providers": {
-    "docsLink": "Dokumentumok megtekintése",
-    "none": "Nincsenek konfigurálva SSO-szolgáltatók.",
-    "add": "Szolgáltató hozzáadása",
-    "edit": "Szolgáltató szerkesztése",
-    "delete": "Szolgáltató törlése",
-    "deleteConfirm": "Törli ezt a szolgáltatót? A társított felhasználók nem fognak tudni bejelentkezni.",
-    "name": "Megjelenített név",
-    "namePlaceholder": "Az SSO-szolgáltatóm",
-    "nameRequired": "Megjelenített név megadása kötelező",
-    "type": "Szolgáltató típusa",
-    "enabled": "Engedélyezve",
-    "enabledDesc": "Jelenítsen meg egy bejelentkezési gombot ehhez a szolgáltatóhoz a bejelentkezési képernyőn.",
-    "dialogDesc": "Csatlakoztasson egy identitásszolgáltatót, hogy a felhasználók bejelentkezhessenek vele.",
-    "sectionGeneral": "Általános",
-    "sectionCredentials": "Ügyfél",
-    "sectionClaims": "Követelések",
-    "sectionAccess": "Hozzáférés",
-    "save": "Szolgáltató mentése",
-    "saving": "Megtakarítás...",
-    "saved": "Mentett",
-    "saveFailed": "Nem sikerült menteni",
-    "deleted": "Törölt",
-    "deleteFailed": "Nem sikerült törölni",
-    "loadFailed": "Nem sikerült betölteni az SSO-szolgáltatókat",
-    "cancel": "Mégsem",
-    "copy": "Másolat",
-    "copied": "Másolva",
-    "redirectUri": "Átirányítási URI",
-    "redirectUriDesc": "Regisztrálja ezt az URL-címet átirányítási vagy visszahívási URL-címként az identitásszolgáltatójában.",
-    "legacyCallback": "Tartsa meg a régi átirányítási URI-t",
-    "legacyCallbackDesc": "Ez a szolgáltató a Termix 2.9 előtt lett beállítva, és továbbra is a régi átirányítási URI-t használja, amely továbbra is működik. Az újra való áttéréshez először add hozzá a {{uri}} karakterláncot az identitásszolgáltatódhoz, majd kapcsold ki ezt.",
-    "authorizationUrl": "Engedélyezési URL: {{url}}"
-  },
-  "fields": {
-    "clientId": "Ügyfél-azonosító",
-    "clientSecret": "Ügyféltitkos kód",
-    "secretKeep": "Egy titok elmentve. Hagyd ezt üresen, hogy megmaradjon.",
-    "issuerUrl": "Kibocsátó URL-címe",
-    "authUrl": "Engedélyezési URL",
-    "tokenUrl": "Token URL",
-    "userIdentifier": "Felhasználói azonosító útvonala",
-    "displayName": "Megjelenített név útvonala",
-    "scopes": "Hatókör",
-    "userinfoUrl": "Felhasználói adatok URL-címének felülbírálása",
-    "groupClaim": "Csoportos követelés",
-    "groupClaimDesc": "Opcionális. A felhasználó csoportjait tartalmazó igénylési útvonal. Alapértelmezés szerint csoportok, szerepkörök, majd csoport. Ezt egyéni igényléssel rendelkező szolgáltatóknál használja (pl. Zitadel).",
-    "allowedUsers": "Engedélyezett felhasználók",
-    "allowedUsersDesc": "Egy e-mail cím soronként. Hagyja üresen, ha az összeset engedélyezi.",
-    "adminGroup": "Adminisztrátori csoport",
-    "adminGroupDesc": "A csoport felhasználói adminisztrátori jogosultsággal rendelkeznek. Hagyja üresen a csoport szinkronizálásának letiltásához.",
-    "caCert": "Egyéni CA tanúsítvány",
-    "caCertDesc": "Opcionális. PEM-kódolású CA-tanúsítvány OIDC-szolgáltatók számára, privát vagy önaláírt CA-t használva. Hagyja üresen a rendszer megbízható tárolójának használatához."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Automatikus bejelentkezés egyszeri bejelentkezéssel",
-      "description": "A látogatókat közvetlenül az első SSO-szolgáltatóhoz irányítsa a bejelentkezési űrlap megjelenítése helyett. Az OIDC_SILENT_LOGIN_DEFAULT környezeti változó felülírja ezt."
-    }
-  },
-  "plugin": {
-    "name": "Egyszeri bejelentkezés"
-  }
-}
diff --git a/plugins/sso/locales/translated/id_ID.json b/plugins/sso/locales/translated/id_ID.json
deleted file mode 100644
index eb1379f36..000000000
--- a/plugins/sso/locales/translated/id_ID.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Masuk dengan SSO",
-  "loginWithProvider": "Masuk dengan {{name}}",
-  "loading": "Memuat...",
-  "permissions": {
-    "manage": {
-      "title": "Kelola penyedia SSO",
-      "description": "Tambahkan, ubah, dan hapus penyedia SSO yang dapat digunakan pengguna untuk masuk."
-    }
-  },
-  "providers": {
-    "docsLink": "Lihat dokumen",
-    "none": "Tidak ada penyedia SSO yang dikonfigurasi.",
-    "add": "Tambahkan Penyedia",
-    "edit": "Edit Penyedia",
-    "delete": "Hapus Penyedia",
-    "deleteConfirm": "Hapus penyedia ini? Pengguna terkait tidak akan dapat masuk.",
-    "name": "Nama Tampilan",
-    "namePlaceholder": "Penyedia SSO saya",
-    "nameRequired": "Nama tampilan wajib diisi.",
-    "type": "Jenis Penyedia",
-    "enabled": "Diaktifkan",
-    "enabledDesc": "Tampilkan tombol masuk untuk penyedia ini di layar login.",
-    "dialogDesc": "Hubungkan penyedia identitas agar pengguna dapat masuk menggunakan penyedia tersebut.",
-    "sectionGeneral": "Umum",
-    "sectionCredentials": "Klien",
-    "sectionClaims": "Klaim",
-    "sectionAccess": "Mengakses",
-    "save": "Simpan Penyedia",
-    "saving": "Penghematan...",
-    "saved": "Tersimpan",
-    "saveFailed": "Gagal menyimpan",
-    "deleted": "Dihapus",
-    "deleteFailed": "Gagal menghapus",
-    "loadFailed": "Gagal memuat penyedia SSO",
-    "cancel": "Membatalkan",
-    "copy": "Menyalin",
-    "copied": "Disalin",
-    "redirectUri": "URI Pengalihan",
-    "redirectUriDesc": "Daftarkan URL ini sebagai URL pengalihan atau panggilan balik di penyedia identitas Anda.",
-    "legacyCallback": "Pertahankan URI pengalihan lama.",
-    "legacyCallbackDesc": "Penyedia ini diatur sebelum Termix 2.9 dan masih menggunakan URI pengalihan lama, yang masih berfungsi. Untuk beralih ke yang baru, tambahkan {{uri}} di penyedia identitas Anda terlebih dahulu, lalu matikan ini.",
-    "authorizationUrl": "URL Otorisasi: {{url}}"
-  },
-  "fields": {
-    "clientId": "ID Klien",
-    "clientSecret": "Rahasia Klien",
-    "secretKeep": "Sebuah rahasia telah tersimpan. Biarkan kosong untuk menyimpannya.",
-    "issuerUrl": "URL Penerbit",
-    "authUrl": "URL Otorisasi",
-    "tokenUrl": "URL Token",
-    "userIdentifier": "Jalur Pengidentifikasi Pengguna",
-    "displayName": "Jalur Nama Tampilan",
-    "scopes": "Lingkup",
-    "userinfoUrl": "Ganti URL Informasi Pengguna",
-    "groupClaim": "Klaim Kelompok",
-    "groupClaimDesc": "Opsional. Jalur klaim yang berisi grup pengguna. Secara default berupa grup, peran, lalu grup. Gunakan ini untuk penyedia dengan klaim khusus (misalnya Zitadel).",
-    "allowedUsers": "Pengguna yang Diizinkan",
-    "allowedUsersDesc": "Satu email per baris. Biarkan kosong untuk mengizinkan semua email.",
-    "adminGroup": "Grup Admin",
-    "adminGroupDesc": "Pengguna dalam grup ini diberikan hak admin. Biarkan kosong untuk menonaktifkan sinkronisasi grup.",
-    "caCert": "Sertifikat CA Kustom",
-    "caCertDesc": "Opsional. Sertifikat CA berkode PEM untuk penyedia OIDC yang menggunakan CA pribadi atau yang ditandatangani sendiri. Biarkan kosong untuk menggunakan penyimpanan kepercayaan sistem."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Masuk dengan SSO secara otomatis",
-      "description": "Arahkan pengunjung langsung ke penyedia SSO pertama alih-alih menampilkan formulir login. Variabel lingkungan OIDC_SILENT_LOGIN_DEFAULT mengesampingkan hal ini."
-    }
-  },
-  "plugin": {
-    "name": "Masuk tunggal"
-  }
-}
diff --git a/plugins/sso/locales/translated/it_IT.json b/plugins/sso/locales/translated/it_IT.json
deleted file mode 100644
index c07e4926c..000000000
--- a/plugins/sso/locales/translated/it_IT.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Accedi con SSO",
-  "loginWithProvider": "Accedi con {{name}}",
-  "loading": "Caricamento...",
-  "permissions": {
-    "manage": {
-      "title": "Gestire i provider SSO",
-      "description": "Aggiungi, modifica e rimuovi i provider SSO con cui gli utenti possono accedere."
-    }
-  },
-  "providers": {
-    "docsLink": "Vedi documenti",
-    "none": "Nessun provider SSO configurato.",
-    "add": "Aggiungi provider",
-    "edit": "Modifica provider",
-    "delete": "Elimina provider",
-    "deleteConfirm": "Eliminare questo provider? Gli utenti associati non potranno più accedere.",
-    "name": "Nome visualizzato",
-    "namePlaceholder": "Il mio provider SSO",
-    "nameRequired": "È richiesto un nome visualizzato",
-    "type": "Tipo provider",
-    "enabled": "Abilitato",
-    "enabledDesc": "Mostra un pulsante di accesso per questo provider nella schermata di login.",
-    "dialogDesc": "Collega un provider di identità in modo che gli utenti possano accedere tramite esso.",
-    "sectionGeneral": "Generale",
-    "sectionCredentials": "Cliente",
-    "sectionClaims": "Affermazioni",
-    "sectionAccess": "Accesso",
-    "save": "Salva provider",
-    "saving": "Salvando...",
-    "saved": "Salvato",
-    "saveFailed": "Salvataggio non riuscito",
-    "deleted": "Eliminato",
-    "deleteFailed": "Eliminazione non riuscita",
-    "loadFailed": "Impossibile caricare i provider SSO",
-    "cancel": "Annulla",
-    "copy": "Copia",
-    "copied": "Copiato",
-    "redirectUri": "URI di reindirizzamento",
-    "redirectUriDesc": "Registra questo URL come URL di reindirizzamento o di callback nel tuo provider di identità.",
-    "legacyCallback": "Mantieni il vecchio URI di reindirizzamento",
-    "legacyCallbackDesc": "Questo provider è stato configurato prima di Termix 2.9 e utilizza ancora il vecchio URI di reindirizzamento, che continua a funzionare. Per passare a quello nuovo, aggiungi prima {{uri}} al tuo provider di identità, quindi disattiva questa opzione.",
-    "authorizationUrl": "URL di autorizzazione: {{url}}"
-  },
-  "fields": {
-    "clientId": "ID client",
-    "clientSecret": "Segreto client",
-    "secretKeep": "Un segreto è stato custodito. Lascia questo campo vuoto per mantenerlo.",
-    "issuerUrl": "URL dell'emittente",
-    "authUrl": "URL di autorizzazione",
-    "tokenUrl": "URL token",
-    "userIdentifier": "Percorso identificatore utente",
-    "displayName": "Percorso nome visualizzato",
-    "scopes": "Ambiti",
-    "userinfoUrl": "Sovrascrivi URL Userinfo",
-    "groupClaim": "Attributo gruppo",
-    "groupClaimDesc": "Opzionale. Il percorso dell'attributo contenente i gruppi dell'utente. Il valore predefinito è groups, roles, quindi group. Da utilizzare per provider con un attributo personalizzato (es. Zitadel).",
-    "allowedUsers": "Utenti consentiti",
-    "allowedUsersDesc": "Un'email per riga. Lascia vuoto per consentire a tutti.",
-    "adminGroup": "Gruppo amministratori",
-    "adminGroupDesc": "Gli utenti di questo gruppo ottengono i diritti di amministratore. Lascia vuoto per disabilitare la sincronizzazione dei gruppi.",
-    "caCert": "Certificato CA personalizzato",
-    "caCertDesc": "Opzionale. Certificato CA in formato PEM per provider OIDC che utilizzano una CA privata o autofirmata. Lascia vuoto per usare l'archivio dei certificati attendibili di sistema."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Accedi automaticamente con SSO",
-      "description": "Indirizza i visitatori direttamente al primo provider SSO anziché mostrare il modulo di accesso. La variabile d'ambiente OIDC_SILENT_LOGIN_DEFAULT sovrascrive questa impostazione."
-    }
-  },
-  "plugin": {
-    "name": "Accesso unico"
-  }
-}
diff --git a/plugins/sso/locales/translated/ja_JP.json b/plugins/sso/locales/translated/ja_JP.json
deleted file mode 100644
index ac33d2892..000000000
--- a/plugins/sso/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "SSOでサインイン",
-  "loginWithProvider": "{{name}}でログイン",
-  "loading": "読み込み中...",
-  "permissions": {
-    "manage": {
-      "title": "SSOプロバイダーを管理する",
-      "description": "ユーザーがサインインに使用できるSSOプロバイダーを追加、変更、削除します。"
-    }
-  },
-  "providers": {
-    "docsLink": "ドキュメントを見る",
-    "none": "SSOプロバイダーが設定されていません。",
-    "add": "追加",
-    "edit": "編集",
-    "delete": "削除",
-    "deleteConfirm": "このプロバイダーを削除しますか？関連付けられているユーザーはログインできなくなります。",
-    "name": "表示名",
-    "namePlaceholder": "私のSSOプロバイダー",
-    "nameRequired": "表示名は必須です",
-    "type": "プロバイダータイプ",
-    "enabled": "有効",
-    "enabledDesc": "ログイン画面に、このプロバイダーのサインインボタンを表示する。",
-    "dialogDesc": "ユーザーがIDプロバイダーを使ってログインできるように、IDプロバイダーを接続します。",
-    "sectionGeneral": "全般",
-    "sectionCredentials": "クライアント",
-    "sectionClaims": "クレーム",
-    "sectionAccess": "アクセス",
-    "save": "保存",
-    "saving": "保存中...",
-    "saved": "保存しました",
-    "saveFailed": "保存に失敗しました",
-    "deleted": "削除しました",
-    "deleteFailed": "削除に失敗しました",
-    "loadFailed": "SSOプロバイダーの読み込みに失敗しました",
-    "cancel": "キャンセル",
-    "copy": "コピー",
-    "copied": "コピーしました",
-    "redirectUri": "リダイレクトURI",
-    "redirectUriDesc": "このURLを、ご利用のIDプロバイダーのリダイレクトURLまたはコールバックURLとして登録してください。",
-    "legacyCallback": "古いリダイレクトURIを保持する",
-    "legacyCallbackDesc": "このプロバイダはTermix 2.9より前に設定されたもので、古いリダイレクトURIがまだ使用されていますが、これは引き続き機能します。新しいURIに移行するには、まずIDプロバイダに {{uri}} を追加し、その後この設定を無効にしてください。",
-    "authorizationUrl": "認証URL: {{url}}"
-  },
-  "fields": {
-    "clientId": "クライアントID",
-    "clientSecret": "クライアントシークレット",
-    "secretKeep": "秘密が守られました。秘密を守るには、この欄を空欄のままにしてください。",
-    "issuerUrl": "発行者URL",
-    "authUrl": "認証URL",
-    "tokenUrl": "トークンURL",
-    "userIdentifier": "ユーザー識別子パス",
-    "displayName": "表示名パス",
-    "scopes": "スコープ",
-    "userinfoUrl": "Userinfo URLの上書き",
-    "groupClaim": "グループクレーム",
-    "groupClaimDesc": "オプション。ユーザーのグループを含むクレームパス。デフォルトは groups, roles, group の順。カスタムクレームを使うプロバイダー用 (例: Zitadel)。",
-    "allowedUsers": "許可ユーザー",
-    "allowedUsersDesc": "1行に1つのメールアドレス。空の場合は全員許可。",
-    "adminGroup": "管理者グループ",
-    "adminGroupDesc": "このグループのユーザーは管理者権限が付与されます。空にするとグループ同期は無効です。",
-    "caCert": "カスタムCA証明書",
-    "caCertDesc": "オプション。プライベートまたは自己署名CAを使用するOIDCプロバイダー用のPEMエンコードCA証明書。空の場合はシステムの信頼ストアを使用。"
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "SSOで自動的にサインイン",
-      "description": "ログインフォームを表示せずに、訪問者を最初のSSOプロバイダーに直接誘導します。この設定は、環境変数OIDC_SILENT_LOGIN_DEFAULTで上書きされます。"
-    }
-  },
-  "plugin": {
-    "name": "シングルサインオン"
-  }
-}
diff --git a/plugins/sso/locales/translated/ko_KR.json b/plugins/sso/locales/translated/ko_KR.json
deleted file mode 100644
index 50c5d060b..000000000
--- a/plugins/sso/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "SSO로 로그인",
-  "loginWithProvider": "{{name}}으로 로그인",
-  "loading": "로딩 중...",
-  "permissions": {
-    "manage": {
-      "title": "SSO 제공업체 관리",
-      "description": "사용자가 로그인할 수 있는 SSO 제공업체를 추가, 변경 및 삭제할 수 있습니다."
-    }
-  },
-  "providers": {
-    "docsLink": "문서 보기",
-    "none": "설정된 SSO 제공자가 없습니다.",
-    "add": "제공자 추가",
-    "edit": "제공자 편집",
-    "delete": "제공자 삭제",
-    "deleteConfirm": "이 제공자를 삭제하시겠습니까? 연결된 사용자는 로그인할 수 없습니다.",
-    "name": "표시 이름",
-    "namePlaceholder": "내 SSO 제공업체",
-    "nameRequired": "표시 이름은 필수입니다.",
-    "type": "제공자 유형",
-    "enabled": "사용",
-    "enabledDesc": "로그인 화면에 해당 제공업체의 로그인 버튼을 표시합니다.",
-    "dialogDesc": "사용자가 로그인할 수 있도록 ID 공급자를 연결하세요.",
-    "sectionGeneral": "일반",
-    "sectionCredentials": "고객",
-    "sectionClaims": "청구",
-    "sectionAccess": "입장",
-    "save": "제공자 저장",
-    "saving": "저장 중...",
-    "saved": "저장됨",
-    "saveFailed": "저장 실패",
-    "deleted": "삭제됨",
-    "deleteFailed": "삭제 실패",
-    "loadFailed": "SSO 공급자를 로드하는 데 실패했습니다.",
-    "cancel": "취소",
-    "copy": "복사",
-    "copied": "복사됨",
-    "redirectUri": "리디렉션 URI",
-    "redirectUriDesc": "이 URL을 ID 공급자에서 리디렉션 또는 콜백 URL로 등록하세요.",
-    "legacyCallback": "기존 리디렉션 URI를 유지하세요",
-    "legacyCallbackDesc": "이 공급자는 Termix 2.9 이전에 설정되었으며 여전히 이전 리디렉션 URI를 사용하고 있지만 정상적으로 작동합니다. 새 URI로 전환하려면 먼저 ID 공급자에 {{uri}} 를 추가한 다음 이 기능을 비활성화하십시오.",
-    "authorizationUrl": "인증 URL: {{url}}"
-  },
-  "fields": {
-    "clientId": "클라이언트 ID",
-    "clientSecret": "클라이언트 시크릿",
-    "secretKeep": "비밀이 저장되었습니다. 비밀을 지키려면 이 칸을 비워 두세요.",
-    "issuerUrl": "Issuer URL",
-    "authUrl": "인증 URL",
-    "tokenUrl": "토큰 URL",
-    "userIdentifier": "사용자 식별자 경로",
-    "displayName": "표시 이름 경로",
-    "scopes": "스코프",
-    "userinfoUrl": "Userinfo URL 재정의",
-    "groupClaim": "그룹 클레임",
-    "groupClaimDesc": "선택 사항입니다. 사용자 그룹이 포함된 클레임 경로입니다. 기본값은 groups, roles, group 순서로 검색됩니다. 사용자 정의 클레임이 있는 제공자(예: Zitadel)의 경우 이 값을 사용하세요.",
-    "allowedUsers": "허용 사용자",
-    "allowedUsersDesc": "한 줄에 이메일 하나씩 입력하세요. 비워두면 모두 허용됩니다.",
-    "adminGroup": "관리자 그룹",
-    "adminGroupDesc": "이 그룹의 사용자에게 관리자 권한이 부여됩니다. 비워두면 그룹 동기화가 비활성화됩니다.",
-    "caCert": "사용자 정의 CA 인증서",
-    "caCertDesc": "선택 사항입니다. 개인 또는 자체 서명 CA를 사용하는 OIDC 제공자를 위한 PEM 인코딩 CA 인증서입니다. 비워두면 시스템 신뢰 저장소가 사용됩니다."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "SSO로 자동 로그인",
-      "description": "방문자를 로그인 양식을 표시하는 대신 첫 번째 SSO 제공업체로 바로 보냅니다. OIDC_SILENT_LOGIN_DEFAULT 환경 변수는 이 설정을 재정의합니다."
-    }
-  },
-  "plugin": {
-    "name": "싱글 사인온"
-  }
-}
diff --git a/plugins/sso/locales/translated/nl_NL.json b/plugins/sso/locales/translated/nl_NL.json
deleted file mode 100644
index 6bfeffc52..000000000
--- a/plugins/sso/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Aanmelden met SSO",
-  "loginWithProvider": "Inloggen met {{name}}",
-  "loading": "Laden...",
-  "permissions": {
-    "manage": {
-      "title": "Beheer SSO-providers",
-      "description": "Voeg SSO-providers toe, wijzig ze en verwijder ze waarmee mensen zich kunnen aanmelden."
-    }
-  },
-  "providers": {
-    "docsLink": "Documenten bekijken",
-    "none": "Er zijn geen SSO-providers geconfigureerd.",
-    "add": "Aanbieder toevoegen",
-    "edit": "Bewerk provider",
-    "delete": "Provider verwijderen",
-    "deleteConfirm": "Deze provider verwijderen? Gekoppelde gebruikers kunnen dan niet meer inloggen.",
-    "name": "Weergavenaam",
-    "namePlaceholder": "Mijn SSO-provider",
-    "nameRequired": "Een weergavenaam is vereist.",
-    "type": "Aanbiedertype",
-    "enabled": "Ingeschakeld",
-    "enabledDesc": "Toon een aanmeldknop voor deze provider op het inlogscherm.",
-    "dialogDesc": "Koppel een identiteitsprovider zodat gebruikers zich daarmee kunnen aanmelden.",
-    "sectionGeneral": "Algemeen",
-    "sectionCredentials": "Cliënt",
-    "sectionClaims": "Beweringen",
-    "sectionAccess": "Toegang",
-    "save": "Aanbieder opslaan",
-    "saving": "Besparing...",
-    "saved": "Opgeslagen",
-    "saveFailed": "Opslaan mislukt",
-    "deleted": "Verwijderd",
-    "deleteFailed": "Verwijderen mislukt",
-    "loadFailed": "Het laden van SSO-providers is mislukt.",
-    "cancel": "Annuleren",
-    "copy": "Kopiëren",
-    "copied": "Gekopieerd",
-    "redirectUri": "Omleidings-URI",
-    "redirectUriDesc": "Registreer deze URL als de redirect- of callback-URL in uw identiteitsprovider.",
-    "legacyCallback": "Behoud de oude omleidings-URI",
-    "legacyCallbackDesc": "Deze provider is ingesteld vóór Termix 2.9 en gebruikt nog steeds de oude omleidings-URI, die nog steeds werkt. Om over te stappen naar de nieuwe, voeg eerst {{uri}} toe aan uw identiteitsprovider en schakel dit vervolgens uit.",
-    "authorizationUrl": "Autorisatie-URL: {{url}}"
-  },
-  "fields": {
-    "clientId": "Klant-ID",
-    "clientSecret": "Klantgeheim",
-    "secretKeep": "Een geheim wordt bewaard. Laat dit veld leeg om het geheim te houden.",
-    "issuerUrl": "URL van de uitgever",
-    "authUrl": "Autorisatie-URL",
-    "tokenUrl": "Token-URL",
-    "userIdentifier": "Gebruikersidentificatiepad",
-    "displayName": "Weergavenaam Pad",
-    "scopes": "Scopes",
-    "userinfoUrl": "Gebruikersinfo-URL overschrijven",
-    "groupClaim": "Groepsclaim",
-    "groupClaimDesc": "Optioneel. Het pad naar de claim dat de groepen van de gebruiker bevat. Standaard is dit: groepen, rollen, vervolgens groep. Gebruik dit voor providers met een aangepaste claim (bijv. Zitadel).",
-    "allowedUsers": "Toegestane gebruikers",
-    "allowedUsersDesc": "Eén e-mailadres per regel. Laat dit veld leeg om alle e-mailadressen toe te staan.",
-    "adminGroup": "Beheerdersgroep",
-    "adminGroupDesc": "Gebruikers in deze groep hebben beheerdersrechten. Laat dit veld leeg om groepssynchronisatie uit te schakelen.",
-    "caCert": "Aangepast CA-certificaat",
-    "caCertDesc": "Optioneel. PEM-gecodeerd CA-certificaat voor OIDC-providers die gebruikmaken van een privé- of zelfondertekende CA. Laat dit veld leeg om het systeemvertrouwensarchief te gebruiken."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Meld u automatisch aan met SSO.",
-      "description": "Stuur bezoekers direct door naar de eerste SSO-provider in plaats van het inlogformulier weer te geven. De omgevingsvariabele OIDC_SILENT_LOGIN_DEFAULT overschrijft dit."
-    }
-  },
-  "plugin": {
-    "name": "Single sign-on"
-  }
-}
diff --git a/plugins/sso/locales/translated/no_NO.json b/plugins/sso/locales/translated/no_NO.json
deleted file mode 100644
index bb7df247c..000000000
--- a/plugins/sso/locales/translated/no_NO.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Logg inn med SSO",
-  "loginWithProvider": "Logg inn med {{name}}",
-  "loading": "Laster...",
-  "permissions": {
-    "manage": {
-      "title": "Administrer SSO-leverandører",
-      "description": "Legg til, endre og fjern SSO-leverandørene som folk kan logge på med."
-    }
-  },
-  "providers": {
-    "docsLink": "Vis dokumenter",
-    "none": "Ingen SSO-leverandører er konfigurert.",
-    "add": "Legg til leverandør",
-    "edit": "Rediger leverandør",
-    "delete": "Slett leverandør",
-    "deleteConfirm": "Vil du slette denne leverandøren? Tilknyttede brukere vil ikke kunne logge inn.",
-    "name": "Visningsnavn",
-    "namePlaceholder": "Min SSO-leverandør",
-    "nameRequired": "Et visningsnavn er obligatorisk",
-    "type": "Leverandørtype",
-    "enabled": "Aktivert",
-    "enabledDesc": "Vis en påloggingsknapp for denne leverandøren på påloggingsskjermen.",
-    "dialogDesc": "Koble til en identitetsleverandør slik at brukere kan logge på med den.",
-    "sectionGeneral": "Generelt",
-    "sectionCredentials": "Klient",
-    "sectionClaims": "Krav",
-    "sectionAccess": "Adgang",
-    "save": "Lagre leverandør",
-    "saving": "Lagrer...",
-    "saved": "Lagret",
-    "saveFailed": "Kunne ikke lagre",
-    "deleted": "Slettet",
-    "deleteFailed": "Kunne ikke slette",
-    "loadFailed": "Kunne ikke laste inn SSO-leverandører",
-    "cancel": "Avbryt",
-    "copy": "Kopier",
-    "copied": "Kopiert",
-    "redirectUri": "Omdirigerings-URI",
-    "redirectUriDesc": "Registrer denne URL-en som omdirigerings- eller tilbakeringings-URL hos identitetsleverandøren din.",
-    "legacyCallback": "Behold den gamle omdirigerings-URI-en",
-    "legacyCallbackDesc": "Denne leverandøren ble satt opp før Termix 2.9 og bruker fortsatt den gamle omdirigerings-URI-en, som fortsatt fungerer. For å gå over til den nye, legg først til {{uri}} i identitetsleverandøren din, og slå deretter av dette.",
-    "authorizationUrl": "Autorisasjons-URL: {{url}}"
-  },
-  "fields": {
-    "clientId": "Klient-ID",
-    "clientSecret": "Klienthemmelighet",
-    "secretKeep": "En hemmelighet er lagret. La dette feltet stå tomt for å beholde den.",
-    "issuerUrl": "Utsteder-URL",
-    "authUrl": "Autorisasjons-URL",
-    "tokenUrl": "Token-URL",
-    "userIdentifier": "Sti til brukeridentifikator",
-    "displayName": "Sti til visningsnavn",
-    "scopes": "Omfang",
-    "userinfoUrl": "Overstyr brukerinfo-URL",
-    "groupClaim": "Gruppekrav",
-    "groupClaimDesc": "Valgfritt. Kravbanen som inneholder brukerens grupper. Standardinnstillingen er grupper, roller og deretter gruppe. Bruk dette for leverandører med et tilpasset krav (f.eks. Zitadel).",
-    "allowedUsers": "Tillatte brukere",
-    "allowedUsersDesc": "Én e-post per linje. La stå tomt for å tillate alle.",
-    "adminGroup": "Admingruppe",
-    "adminGroupDesc": "Brukere i denne gruppen har administratorrettigheter. La feltet stå tomt for å deaktivere gruppesynkronisering.",
-    "caCert": "Tilpasset CA-sertifikat",
-    "caCertDesc": "Valgfritt. PEM-kodet CA-sertifikat for OIDC-leverandører som bruker en privat eller selvsignert CA. La stå tomt for å bruke systemets klareringslager."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Logg inn med SSO automatisk",
-      "description": "Send besøkende direkte til den første SSO-leverandøren i stedet for å vise innloggingsskjemaet. Miljøvariabelen OIDC_SILENT_LOGIN_DEFAULT overstyrer dette."
-    }
-  },
-  "plugin": {
-    "name": "Enkel pålogging"
-  }
-}
diff --git a/plugins/sso/locales/translated/pl_PL.json b/plugins/sso/locales/translated/pl_PL.json
deleted file mode 100644
index 68e219417..000000000
--- a/plugins/sso/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Zaloguj się za pomocą SSO",
-  "loginWithProvider": "Zaloguj się za pomocą {{name}}",
-  "loading": "Ładowanie...",
-  "permissions": {
-    "manage": {
-      "title": "Zarządzaj dostawcami SSO",
-      "description": "Dodaj, zmień i usuń dostawców SSO, u których użytkownicy mogą się logować."
-    }
-  },
-  "providers": {
-    "docsLink": "Zobacz dokumentację",
-    "none": "Nie skonfigurowano dostawców SSO.",
-    "add": "Dodaj dostawcę",
-    "edit": "Edytuj dostawcę",
-    "delete": "Usuń dostawcę",
-    "deleteConfirm": "Usunąć tego dostawcę? Powiązani użytkownicy nie będą mogli się zalogować.",
-    "name": "Nazwa wyświetlana",
-    "namePlaceholder": "Mój dostawca SSO",
-    "nameRequired": "Wymagana jest nazwa wyświetlana",
-    "type": "Typ dostawcy",
-    "enabled": "Włączona",
-    "enabledDesc": "Pokaż przycisk logowania dla tego dostawcy na ekranie logowania.",
-    "dialogDesc": "Połącz się z dostawcą tożsamości, aby użytkownicy mogli się za jego pomocą logować.",
-    "sectionGeneral": "Ogólne",
-    "sectionCredentials": "Klient",
-    "sectionClaims": "Roszczenia",
-    "sectionAccess": "Dostęp",
-    "save": "Zapisz dostawcę",
-    "saving": "Zapisywanie...",
-    "saved": "Zapisano",
-    "saveFailed": "Nie udało się zapisać",
-    "deleted": "Usunięto",
-    "deleteFailed": "Nie udało się usunąć",
-    "loadFailed": "Nie udało się załadować dostawców SSO",
-    "cancel": "Anuluj",
-    "copy": "Kopiuj",
-    "copied": "Skopiowano",
-    "redirectUri": "Przekieruj URI",
-    "redirectUriDesc": "Zarejestruj ten adres URL jako adres przekierowania lub adres URL wywołania zwrotnego u swojego dostawcy tożsamości.",
-    "legacyCallback": "Zachowaj stary adres URI przekierowania",
-    "legacyCallbackDesc": "Ten dostawca został skonfigurowany przed wersją Termix 2.9 i nadal korzysta ze starego adresu URI przekierowania, który nadal działa. Aby przejść na nowy, najpierw dodaj {{uri}} w swoim dostawcy tożsamości, a następnie wyłącz go.",
-    "authorizationUrl": "Adres URL autoryzacji: {{url}}"
-  },
-  "fields": {
-    "clientId": "Identyfikator klienta",
-    "clientSecret": "Sekret klienta",
-    "secretKeep": "Sekret został zapisany. Pozostaw to pole puste, aby go zachować.",
-    "issuerUrl": "Adres URL wystawcy",
-    "authUrl": "Adres URL autoryzacji",
-    "tokenUrl": "Adres URL tokena",
-    "userIdentifier": "Ścieżka identyfikatora użytkownika",
-    "displayName": "Ścieżka nazwy wyświetlanej",
-    "scopes": "Zakresy",
-    "userinfoUrl": "Zastąp adres URL informacji o użytkowniku",
-    "groupClaim": "Claim grupy",
-    "groupClaimDesc": "Opcjonalnie. Ścieżka claimu zawierającego grupy użytkownika. Domyślnie: groups, roles, potem group. Użyj tego dla dostawców z niestandardowym claimem (np. Zitadel).",
-    "allowedUsers": "Dozwoleni użytkownicy",
-    "allowedUsersDesc": "Jeden adres e-mail w każdym wierszu. Pozostaw puste, aby zezwolić na wszystkie.",
-    "adminGroup": "Grupa administratorów",
-    "adminGroupDesc": "Użytkownicy w tej grupie otrzymują uprawnienia administratora. Pozostaw puste, aby wyłączyć synchronizację grupy.",
-    "caCert": "Niestandardowy certyfikat CA",
-    "caCertDesc": "Opcjonalnie. Certyfikat CA w formacie PEM dla dostawców OIDC korzystających z prywatnego lub samopodpisanego CA. Pozostaw puste, aby użyć systemowego magazynu zaufanych certyfikatów."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Zaloguj się automatycznie za pomocą SSO",
-      "description": "Zamiast wyświetlać formularz logowania, przekieruj odwiedzających bezpośrednio do pierwszego dostawcy SSO. Zmienna środowiskowa OIDC_SILENT_LOGIN_DEFAULT zastępuje to ustawienie."
-    }
-  },
-  "plugin": {
-    "name": "Pojedyncze logowanie"
-  }
-}
diff --git a/plugins/sso/locales/translated/pt_BR.json b/plugins/sso/locales/translated/pt_BR.json
deleted file mode 100644
index 445f2dad4..000000000
--- a/plugins/sso/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Entrar com SSO",
-  "loginWithProvider": "Faça login com {{name}}",
-  "loading": "Carregando...",
-  "permissions": {
-    "manage": {
-      "title": "Gerenciar provedores de SSO",
-      "description": "Adicione, altere e remova os provedores de SSO que os usuários podem usar para fazer login."
-    }
-  },
-  "providers": {
-    "docsLink": "Documentação",
-    "none": "Nenhum provedor de SSO configurado.",
-    "add": "Adicionar provedor",
-    "edit": "Editar provedor",
-    "delete": "Excluir provedor",
-    "deleteConfirm": "Excluir este provedor? Os usuários associados não poderão fazer login.",
-    "name": "Nome de exibição",
-    "namePlaceholder": "Meu provedor de SSO",
-    "nameRequired": "É necessário um nome de exibição.",
-    "type": "Tipo de provedor",
-    "enabled": "Habilitado",
-    "enabledDesc": "Exibir um botão de login para este provedor na tela de login.",
-    "dialogDesc": "Conecte um provedor de identidade para que os usuários possam fazer login com ele.",
-    "sectionGeneral": "Geral",
-    "sectionCredentials": "Cliente",
-    "sectionClaims": "Reivindicações",
-    "sectionAccess": "Acesso",
-    "save": "Salvar provedor",
-    "saving": "Salvando...",
-    "saved": "Salvo",
-    "saveFailed": "Falha ao salvar",
-    "deleted": "Apagado",
-    "deleteFailed": "Falha ao apagar",
-    "loadFailed": "Falha ao carregar os provedores de SSO",
-    "cancel": "Cancelar",
-    "copy": "Copiar",
-    "copied": "Copiado",
-    "redirectUri": "URI de redirecionamento",
-    "redirectUriDesc": "Registre este URL como URL de redirecionamento ou de retorno de chamada em seu provedor de identidade.",
-    "legacyCallback": "Mantenha o URI de redirecionamento antigo.",
-    "legacyCallbackDesc": "Este provedor foi configurado antes do Termix 2.9 e ainda usa o URI de redirecionamento antigo, que continua funcionando. Para migrar para o novo, adicione {{uri}} no seu provedor de identidade primeiro e depois desative-o.",
-    "authorizationUrl": "URL de autorização: {{url}}"
-  },
-  "fields": {
-    "clientId": "ID do cliente",
-    "clientSecret": "Segredo do cliente",
-    "secretKeep": "Um segredo foi guardado. Deixe este campo vazio para mantê-lo.",
-    "issuerUrl": "URL do emissor",
-    "authUrl": "URL de autorização",
-    "tokenUrl": "URL do token",
-    "userIdentifier": "Caminho do identificador do usuário",
-    "displayName": "Nome de exibição Caminho",
-    "scopes": "Escopos",
-    "userinfoUrl": "Substituir URL de informações do usuário",
-    "groupClaim": "Reivindicação de grupo",
-    "groupClaimDesc": "Opcional. O caminho da declaração que contém os grupos do usuário. O padrão é grupos, funções e, em seguida, grupo. Use isso para provedores com uma declaração personalizada (por exemplo, Zitadel).",
-    "allowedUsers": "Usuários autorizados",
-    "allowedUsersDesc": "Um e-mail por linha. Deixe em branco para permitir todos.",
-    "adminGroup": "Grupo de Administração",
-    "adminGroupDesc": "Os usuários deste grupo têm privilégios de administrador. Deixe em branco para desativar a sincronização do grupo.",
-    "caCert": "Certificado CA personalizado",
-    "caCertDesc": "Opcional. Certificado CA codificado em PEM para provedores OIDC que utilizam uma CA privada ou autoassinada. Deixe em branco para usar o repositório de certificados confiáveis do sistema."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Faça login automaticamente com SSO.",
-      "description": "Direcione os visitantes diretamente para o primeiro provedor de SSO em vez de exibir o formulário de login. A variável de ambiente OIDC_SILENT_LOGIN_DEFAULT substitui essa configuração."
-    }
-  },
-  "plugin": {
-    "name": "Autenticação única"
-  }
-}
diff --git a/plugins/sso/locales/translated/pt_PT.json b/plugins/sso/locales/translated/pt_PT.json
deleted file mode 100644
index ac3814ec0..000000000
--- a/plugins/sso/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Entrar com SSO",
-  "loginWithProvider": "Iniciar sessão com {{name}}",
-  "loading": "A carregar...",
-  "permissions": {
-    "manage": {
-      "title": "Gerir fornecedores de SSO",
-      "description": "Adicione, altere e remova os fornecedores de SSO que os utilizadores podem utilizar para iniciar sessão."
-    }
-  },
-  "providers": {
-    "docsLink": "Ver docs",
-    "none": "Nenhum provedor de SSO configurado.",
-    "add": "Adicionar Provedor",
-    "edit": "Editar Provedor",
-    "delete": "Eliminar Provedor",
-    "deleteConfirm": "Eliminar este provedor? Os utilizadores associados não poderão iniciar sessão.",
-    "name": "Nome de exibição",
-    "namePlaceholder": "O meu provedor de SSO",
-    "nameRequired": "É necessário um nome de utilizador.",
-    "type": "Tipo de Provedor",
-    "enabled": "Ativado",
-    "enabledDesc": "Exibir um botão de login para este fornecedor no ecrã de login.",
-    "dialogDesc": "Ligue um fornecedor de identidade para que os utilizadores possam fazer login com ele.",
-    "sectionGeneral": "Geral",
-    "sectionCredentials": "Cliente",
-    "sectionClaims": "Reivindicações",
-    "sectionAccess": "Acesso",
-    "save": "Guardar Provedor",
-    "saving": "A guardar...",
-    "saved": "Guardado",
-    "saveFailed": "Falha ao guardar",
-    "deleted": "Eliminado",
-    "deleteFailed": "Falha ao eliminar",
-    "loadFailed": "Falha ao carregar os fornecedores de SSO",
-    "cancel": "Cancelar",
-    "copy": "Copiar",
-    "copied": "Copiado",
-    "redirectUri": "URI de redireccionamento",
-    "redirectUriDesc": "Registe este URL como URL de redireccionamento ou de retorno de chamada no seu fornecedor de identidade.",
-    "legacyCallback": "Mantenha o URI de redireccionamento antigo.",
-    "legacyCallbackDesc": "Este fornecedor foi configurado antes do Termix 2.9 e ainda utiliza o URI de redireccionamento antigo, que continua a funcionar. Para migrar para o novo, adicione {{uri}} no seu fornecedor de identidade primeiro e depois desative-o.",
-    "authorizationUrl": "URL de autorização: {{url}}"
-  },
-  "fields": {
-    "clientId": "ID do cliente",
-    "clientSecret": "Segredo do cliente",
-    "secretKeep": "Um segredo foi guardado. Deixe este campo vazio para o manter.",
-    "issuerUrl": "URL do emissor",
-    "authUrl": "URL de autorização",
-    "tokenUrl": "URL do token",
-    "userIdentifier": "Caminho do identificador do utilizador",
-    "displayName": "Caminho do nome de exibição",
-    "scopes": "Âmbitos",
-    "userinfoUrl": "Substituir URL do Userinfo",
-    "groupClaim": "Atributo de grupo",
-    "groupClaimDesc": "Opcional. O caminho do atributo que contém os grupos do utilizador. Predefinido para groups, roles e depois group. Utilize para fornecedores com um atributo personalizado (ex.: Zitadel).",
-    "allowedUsers": "Utilizadores permitidos",
-    "allowedUsersDesc": "Um email por linha. Deixe em branco para permitir todos.",
-    "adminGroup": "Grupo de administração",
-    "adminGroupDesc": "Os utilizadores neste grupo recebem privilégios de administrador. Deixe em branco para desativar a sincronização de grupos.",
-    "caCert": "Certificado CA personalizado",
-    "caCertDesc": "Opcional. Certificado CA codificado em PEM para fornecedores OIDC que utilizam uma CA privada ou autoassinada. Deixe em branco para utilizar o repositório de confiança do sistema."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Faça login automaticamente com o SSO.",
-      "description": "Dirija os visitantes diretamente para o primeiro fornecedor de SSO em vez de apresentar o formulário de início de sessão. A variável de ambiente OIDC_SILENT_LOGIN_DEFAULT substitui esta definição."
-    }
-  },
-  "plugin": {
-    "name": "Autenticação única"
-  }
-}
diff --git a/plugins/sso/locales/translated/ro_RO.json b/plugins/sso/locales/translated/ro_RO.json
deleted file mode 100644
index 0099a272c..000000000
--- a/plugins/sso/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Conectați-vă cu SSO",
-  "loginWithProvider": "Autentificare cu {{name}}",
-  "loading": "Încărcare...",
-  "permissions": {
-    "manage": {
-      "title": "Gestionați furnizorii SSO",
-      "description": "Adăugați, modificați și eliminați furnizorii SSO cu care utilizatorii se pot conecta."
-    }
-  },
-  "providers": {
-    "docsLink": "Vizualizați documentele",
-    "none": "Nu sunt configurați furnizori SSO.",
-    "add": "Adăugați furnizor",
-    "edit": "Editați furnizorul",
-    "delete": "Ștergeți furnizorul",
-    "deleteConfirm": "Ștergeți acest furnizor? Utilizatorii asociați nu se vor putea conecta.",
-    "name": "Numele de afișare",
-    "namePlaceholder": "Furnizorul meu SSO",
-    "nameRequired": "Este obligatoriu un nume afișat",
-    "type": "Tipul furnizorului",
-    "enabled": "Activat",
-    "enabledDesc": "Afișați un buton de conectare pentru acest furnizor pe ecranul de conectare.",
-    "dialogDesc": "Conectați un furnizor de identitate, astfel încât utilizatorii să se poată conecta cu acesta.",
-    "sectionGeneral": "General",
-    "sectionCredentials": "Client",
-    "sectionClaims": "Revendicări",
-    "sectionAccess": "Acces",
-    "save": "Salvați furnizorul",
-    "saving": "Economisire...",
-    "saved": "Salvat",
-    "saveFailed": "Salvarea nu a reușit",
-    "deleted": "Șters",
-    "deleteFailed": "Ștergerea nu a reușit",
-    "loadFailed": "Furnizorii SSO nu au putut fi încărcați.",
-    "cancel": "Anula",
-    "copy": "Copie",
-    "copied": "Copiat",
-    "redirectUri": "URI de redirecționare",
-    "redirectUriDesc": "Înregistrați această adresă URL ca adresă URL de redirecționare sau de apel invers în furnizorul dvs. de identitate.",
-    "legacyCallback": "Păstrați vechiul URI de redirecționare",
-    "legacyCallbackDesc": "Acest furnizor a fost configurat înainte de Termix 2.9 și folosește în continuare vechiul URI de redirecționare, care funcționează în continuare. Pentru a trece la cel nou, adăugați mai întâi {{uri}} în furnizorul de identitate, apoi dezactivați-l.",
-    "authorizationUrl": "URL de autorizare: {{url}}"
-  },
-  "fields": {
-    "clientId": "ID client",
-    "clientSecret": "Secretul clientului",
-    "secretKeep": "Un secret este salvat. Lăsați acest câmp gol pentru a-l păstra.",
-    "issuerUrl": "URL-ul emitentului",
-    "authUrl": "URL de autorizare",
-    "tokenUrl": "Adresa URL a jetonului",
-    "userIdentifier": "Calea de identificare a utilizatorului",
-    "displayName": "Calea numelui afișat",
-    "scopes": "Scopuri",
-    "userinfoUrl": "Suprascrieți adresa URL a informațiilor utilizatorului",
-    "groupClaim": "Revendicare de grup",
-    "groupClaimDesc": "Opțional. Calea de revendicare care conține grupurile utilizatorului. Implicit, se utilizează grupuri, roluri, apoi grup. Folosiți această opțiune pentru furnizorii cu o revendicare personalizată (de exemplu, Zitadel).",
-    "allowedUsers": "Utilizatori permiși",
-    "allowedUsersDesc": "Un e-mail pe rând. Lăsați necompletat pentru a permite accesul tuturor.",
-    "adminGroup": "Grup de administratori",
-    "adminGroupDesc": "Utilizatorii din acest grup au drepturi de administrator. Lăsați câmpul gol pentru a dezactiva sincronizarea grupului.",
-    "caCert": "Certificat CA personalizat",
-    "caCertDesc": "Opțional. Certificat CA codificat PEM pentru furnizorii OIDC care utilizează un CA privat sau autosemnat. Lăsați câmpul gol pentru a utiliza depozitul de încredere al sistemului."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Conectați-vă automat cu SSO",
-      "description": "Trimiteți vizitatorii direct către primul furnizor SSO în loc să afișați formularul de conectare. Variabila de mediu OIDC_SILENT_LOGIN_DEFAULT are prioritate față de această opțiune."
-    }
-  },
-  "plugin": {
-    "name": "Autentificare unică"
-  }
-}
diff --git a/plugins/sso/locales/translated/ru_RU.json b/plugins/sso/locales/translated/ru_RU.json
deleted file mode 100644
index 86e5ae731..000000000
--- a/plugins/sso/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Вход с помощью единого входа (SSO)",
-  "loginWithProvider": "Войти через {{name}}",
-  "loading": "Загрузка...",
-  "permissions": {
-    "manage": {
-      "title": "Управление поставщиками SSO",
-      "description": "Добавляйте, изменяйте и удаляйте поставщиков единого входа (SSO), с помощью которых пользователи могут входить в систему."
-    }
-  },
-  "providers": {
-    "docsLink": "Документация",
-    "none": "Нет настроенных провайдеров SSO.",
-    "add": "Добавить провайдера",
-    "edit": "Редактировать провайдера",
-    "delete": "Удалить провайдера",
-    "deleteConfirm": "Удалить провайдера? Связанные пользователи не смогут войти.",
-    "name": "Отображаемое имя",
-    "namePlaceholder": "Мой поставщик SSO",
-    "nameRequired": "Необходимо указать отображаемое имя.",
-    "type": "Тип провайдера",
-    "enabled": "Включено",
-    "enabledDesc": "Отобразить кнопку входа для этого провайдера на экране авторизации.",
-    "dialogDesc": "Подключите поставщика идентификационных данных, чтобы пользователи могли входить в систему с его помощью.",
-    "sectionGeneral": "Общие",
-    "sectionCredentials": "Клиент",
-    "sectionClaims": "Претензии",
-    "sectionAccess": "Доступ",
-    "save": "Сохранить провайдера",
-    "saving": "Сохранение…",
-    "saved": "Сохранено",
-    "saveFailed": "Не удалось сохранить",
-    "deleted": "Удалено",
-    "deleteFailed": "Не удалось удалить",
-    "loadFailed": "Не удалось загрузить поставщиков SSO.",
-    "cancel": "Отмена",
-    "copy": "Копировать",
-    "copied": "Скопировано",
-    "redirectUri": "URI перенаправления",
-    "redirectUriDesc": "Зарегистрируйте этот URL-адрес в качестве URL-адреса перенаправления или обратного вызова в вашем поставщике идентификации.",
-    "legacyCallback": "Сохраните старый URI перенаправления.",
-    "legacyCallbackDesc": "Этот провайдер был настроен до Termix 2.9 и до сих пор использует старый URI перенаправления, который продолжает работать. Чтобы перейти на новый, сначала добавьте {{uri}} в свой провайдер идентификации, а затем отключите эту функцию.",
-    "authorizationUrl": "URL авторизации: {{url}}"
-  },
-  "fields": {
-    "clientId": "Client ID",
-    "clientSecret": "Client Secret",
-    "secretKeep": "Секрет сохранен. Оставьте это поле пустым, чтобы сохранить его.",
-    "issuerUrl": "URL издателя",
-    "authUrl": "URL авторизации",
-    "tokenUrl": "URL токена",
-    "userIdentifier": "Путь к идентификатору пользователя",
-    "displayName": "Путь к отображаемому имени",
-    "scopes": "Области",
-    "userinfoUrl": "Переопределить URL Userinfo",
-    "groupClaim": "Утверждение группы",
-    "groupClaimDesc": "Необязательно. Путь к утверждению, содержащему группы пользователя. По умолчанию проверяются groups, roles, затем group. Используйте для провайдеров с настраиваемым утверждением (например, Zitadel).",
-    "allowedUsers": "Разрешенные пользователи",
-    "allowedUsersDesc": "По одному email на строку. Оставьте пустым, чтобы разрешить всем.",
-    "adminGroup": "Группа администраторов",
-    "adminGroupDesc": "Пользователи в этой группе получают права администратора. Оставьте пустым, чтобы отключить синхронизацию групп.",
-    "caCert": "Пользовательский сертификат ЦС",
-    "caCertDesc": "Необязательно. Сертификат ЦС в формате PEM для провайдеров OIDC, использующих частный или самоподписанный ЦС. Оставьте пустым, чтобы использовать системное хранилище доверенных сертификатов."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Автоматический вход через SSO.",
-      "description": "Вместо отображения формы входа, посетители будут направляться непосредственно к первому поставщику единого входа (SSO). Это определяется переменной среды OIDC_SILENT_LOGIN_DEFAULT."
-    }
-  },
-  "plugin": {
-    "name": "Единый вход"
-  }
-}
diff --git a/plugins/sso/locales/translated/sr_SP.json b/plugins/sso/locales/translated/sr_SP.json
deleted file mode 100644
index f2c9f4daf..000000000
--- a/plugins/sso/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Пријавите се помоћу SSO-а",
-  "loginWithProvider": "Пријавите се са {{name}}",
-  "loading": "Учитавање...",
-  "permissions": {
-    "manage": {
-      "title": "Управљајте добављачима SSO",
-      "description": "Додајте, промените и уклоните добављаче SSO помоћу којих се људи могу пријавити."
-    }
-  },
-  "providers": {
-    "docsLink": "Прикажи документе",
-    "none": "Није конфигурисан ниједан SSO добављач.",
-    "add": "Додај добављача",
-    "edit": "Измени добављача",
-    "delete": "Обриши добављача",
-    "deleteConfirm": "Да ли желите да обришете овог добављача? Повезани корисници неће моћи да се пријаве.",
-    "name": "Приказано име",
-    "namePlaceholder": "Мој добављач SSO-а",
-    "nameRequired": "Потребно је приказано име",
-    "type": "Тип добављача",
-    "enabled": "Омогућено",
-    "enabledDesc": "Прикажи дугме за пријаву за овог добављача на екрану за пријаву.",
-    "dialogDesc": "Повежите добављача идентитета како би се корисници могли пријавити помоћу њега.",
-    "sectionGeneral": "Опште",
-    "sectionCredentials": "Клијент",
-    "sectionClaims": "Потраживања",
-    "sectionAccess": "Приступ",
-    "save": "Сачувај добављача",
-    "saving": "Чување...",
-    "saved": "Сачувано",
-    "saveFailed": "Чување није успело",
-    "deleted": "Избрисано",
-    "deleteFailed": "Брисање није успело",
-    "loadFailed": "Учитавање добављача SSO није успело",
-    "cancel": "Откажи",
-    "copy": "Копија",
-    "copied": "Копирано",
-    "redirectUri": "URI за преусмеравање",
-    "redirectUriDesc": "Региструјте ову URL адресу као URL адресу за преусмеравање или повратни позив код вашег добављача идентитета.",
-    "legacyCallback": "Задржи стари URI преусмеравања",
-    "legacyCallbackDesc": "Овај провајдер је подешен пре Termix-а 2.9 и још увек користи стари URI за преусмеравање, који и даље ради. Да бисте прешли на нови, прво додајте {{uri}} у свом провајдеру идентитета, а затим га искључите.",
-    "authorizationUrl": "URL адреса за ауторизацију: {{url}}"
-  },
-  "fields": {
-    "clientId": "ИД клијента",
-    "clientSecret": "Тајна порука клијента",
-    "secretKeep": "Тајна је сачувана. Оставите ово празно да бисте је задржали.",
-    "issuerUrl": "URL издаваоца",
-    "authUrl": "URL за ауторизацију",
-    "tokenUrl": "URL адреса токена",
-    "userIdentifier": "Путања идентификатора корисника",
-    "displayName": "Путања приказаног имена",
-    "scopes": "Опсези",
-    "userinfoUrl": "Замени URL са корисничким информацијама",
-    "groupClaim": "Групни захтев",
-    "groupClaimDesc": "Опционо. Путања захтева која садржи групе корисника. Подразумевано је да су групе, улоге, па група. Користите ово за добављаче са прилагођеним захтевом (нпр. Zitadel).",
-    "allowedUsers": "Дозвољени корисници",
-    "allowedUsersDesc": "Једна имејл адреса по реду. Оставите празно да бисте дозволили све.",
-    "adminGroup": "Администраторска група",
-    "adminGroupDesc": "Корисницима у овој групи је додељена администраторска позиција. Оставите празно да бисте онемогућили синхронизацију групе.",
-    "caCert": "Прилагођени CA сертификат",
-    "caCertDesc": "Опционо. PEM-кодирани CA сертификат за OIDC добављаче који користе приватни или самопотписани CA. Оставите празно да бисте користили складиште поверења система."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Аутоматски се пријавите помоћу SSO-а",
-      "description": "Шаљите посетиоце директно првом SSO провајдеру уместо приказивања формулара за пријаву. Променљива окружења OIDC_SILENT_LOGIN_DEFAULT ово поништава."
-    }
-  },
-  "plugin": {
-    "name": "Једнократно пријављивање"
-  }
-}
diff --git a/plugins/sso/locales/translated/sv_SE.json b/plugins/sso/locales/translated/sv_SE.json
deleted file mode 100644
index 5f5618cd0..000000000
--- a/plugins/sso/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Logga in med SSO",
-  "loginWithProvider": "Logga in med {{name}}",
-  "loading": "Belastning...",
-  "permissions": {
-    "manage": {
-      "title": "Hantera SSO-leverantörer",
-      "description": "Lägg till, ändra och ta bort de SSO-leverantörer som personer kan logga in med."
-    }
-  },
-  "providers": {
-    "docsLink": "Visa dokument",
-    "none": "Inga SSO-leverantörer har konfigurerats.",
-    "add": "Lägg till leverantör",
-    "edit": "Redigera leverantör",
-    "delete": "Ta bort leverantör",
-    "deleteConfirm": "Vill du ta bort den här leverantören? Associerade användare kommer inte att kunna logga in.",
-    "name": "Visningsnamn",
-    "namePlaceholder": "Min SSO-leverantör",
-    "nameRequired": "Ett visningsnamn krävs",
-    "type": "Leverantörstyp",
-    "enabled": "Aktiverad",
-    "enabledDesc": "Visa en inloggningsknapp för den här leverantören på inloggningsskärmen.",
-    "dialogDesc": "Anslut en identitetsleverantör så att användare kan logga in med den.",
-    "sectionGeneral": "Allmän",
-    "sectionCredentials": "Klient",
-    "sectionClaims": "Anspråk",
-    "sectionAccess": "Tillträde",
-    "save": "Spara leverantör",
-    "saving": "Sparande...",
-    "saved": "Sparad",
-    "saveFailed": "Misslyckades med att spara",
-    "deleted": "Borttagen",
-    "deleteFailed": "Misslyckades med att radera",
-    "loadFailed": "Det gick inte att läsa in SSO-leverantörer",
-    "cancel": "Avboka",
-    "copy": "Kopiera",
-    "copied": "Kopierad",
-    "redirectUri": "Omdirigerings-URI",
-    "redirectUriDesc": "Registrera den här URL:en som omdirigerings- eller återuppringnings-URL i din identitetsleverantör.",
-    "legacyCallback": "Behåll den gamla omdirigerings-URI:n",
-    "legacyCallbackDesc": "Denna leverantör konfigurerades före Termix 2.9 och använder fortfarande den gamla omdirigerings-URI:n, som fortsätter att fungera. För att byta till den nya, lägg först till {{uri}} i din identitetsleverantör och stäng sedan av den.",
-    "authorizationUrl": "Auktoriserings-URL: {{url}}"
-  },
-  "fields": {
-    "clientId": "Klient-ID",
-    "clientSecret": "Klienthemlighet",
-    "secretKeep": "En hemlighet är sparad. Lämna detta tomt för att behålla den.",
-    "issuerUrl": "Utgivarens URL",
-    "authUrl": "Auktoriserings-URL",
-    "tokenUrl": "Token-URL",
-    "userIdentifier": "Sökväg till användaridentifierare",
-    "displayName": "Sökväg för visningsnamn",
-    "scopes": "Omfattningar",
-    "userinfoUrl": "Åsidosätt användarinformations-URL",
-    "groupClaim": "Gruppanspråk",
-    "groupClaimDesc": "Valfritt. Anspråkssökvägen som innehåller användarens grupper. Standardinställningen är grupper, roller och sedan grupp. Använd detta för leverantörer med ett anpassat anspråk (t.ex. Zitadel).",
-    "allowedUsers": "Tillåtna användare",
-    "allowedUsersDesc": "Ett e-postmeddelande per rad. Lämna tomt för att tillåta alla.",
-    "adminGroup": "Administratörsgrupp",
-    "adminGroupDesc": "Användare i den här gruppen har administratörsrättigheter. Lämna tomt för att inaktivera gruppsynkronisering.",
-    "caCert": "Anpassat CA-certifikat",
-    "caCertDesc": "Valfritt. PEM-kodat CA-certifikat för OIDC-leverantörer som använder en privat eller självsignerad CA. Lämna tomt för att använda systemets förtroendearkiv."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Logga in med SSO automatiskt",
-      "description": "Skicka besökare direkt till den första SSO-leverantören istället för att visa inloggningsformuläret. Miljövariabeln OIDC_SILENT_LOGIN_DEFAULT åsidosätter detta."
-    }
-  },
-  "plugin": {
-    "name": "Enkel inloggning"
-  }
-}
diff --git a/plugins/sso/locales/translated/th_TH.json b/plugins/sso/locales/translated/th_TH.json
deleted file mode 100644
index d9e545bc4..000000000
--- a/plugins/sso/locales/translated/th_TH.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "ลงชื่อเข้าใช้ด้วย SSO",
-  "loginWithProvider": "เข้าสู่ระบบด้วย {{name}}",
-  "loading": "กำลังโหลด...",
-  "permissions": {
-    "manage": {
-      "title": "จัดการผู้ให้บริการ SSO",
-      "description": "เพิ่ม เปลี่ยนแปลง และลบผู้ให้บริการ SSO ที่ผู้ใช้สามารถเข้าสู่ระบบได้"
-    }
-  },
-  "providers": {
-    "docsLink": "ดูเอกสาร",
-    "none": "ไม่ได้กำหนดค่าผู้ให้บริการ SSO ใดๆ ไว้",
-    "add": "เพิ่มผู้ให้บริการ",
-    "edit": "แก้ไขผู้ให้บริการ",
-    "delete": "ลบผู้ให้บริการ",
-    "deleteConfirm": "ลบผู้ให้บริการนี้หรือไม่? ผู้ใช้ที่เกี่ยวข้องจะไม่สามารถเข้าสู่ระบบได้",
-    "name": "ชื่อที่แสดง",
-    "namePlaceholder": "ผู้ให้บริการ SSO ของฉัน",
-    "nameRequired": "จำเป็นต้องระบุชื่อที่แสดง",
-    "type": "ประเภทผู้ให้บริการ",
-    "enabled": "เปิดใช้งาน",
-    "enabledDesc": "แสดงปุ่มเข้าสู่ระบบสำหรับผู้ให้บริการรายนี้บนหน้าจอเข้าสู่ระบบ",
-    "dialogDesc": "เชื่อมต่อผู้ให้บริการยืนยันตัวตนเพื่อให้ผู้ใช้สามารถลงชื่อเข้าใช้ได้",
-    "sectionGeneral": "ทั่วไป",
-    "sectionCredentials": "ลูกค้า",
-    "sectionClaims": "การเรียกร้อง",
-    "sectionAccess": "เข้าถึง",
-    "save": "บันทึกผู้ให้บริการ",
-    "saving": "ประหยัด...",
-    "saved": "บันทึกแล้ว",
-    "saveFailed": "บันทึกไม่สำเร็จ",
-    "deleted": "ลบแล้ว",
-    "deleteFailed": "ลบไม่สำเร็จ",
-    "loadFailed": "ไม่สามารถโหลดผู้ให้บริการ SSO ได้",
-    "cancel": "ยกเลิก",
-    "copy": "สำเนา",
-    "copied": "คัดลอกแล้ว",
-    "redirectUri": "URI การเปลี่ยนเส้นทาง",
-    "redirectUriDesc": "ลงทะเบียน URL นี้เป็น URL สำหรับการเปลี่ยนเส้นทางหรือ URL เรียกกลับในผู้ให้บริการยืนยันตัวตนของคุณ",
-    "legacyCallback": "คงค่า URI การเปลี่ยนเส้นทางเดิมไว้",
-    "legacyCallbackDesc": "ผู้ให้บริการนี้ถูกตั้งค่าไว้ก่อน Termix เวอร์ชัน 2.9 และยังคงใช้ URI การเปลี่ยนเส้นทางแบบเก่า ซึ่งยังคงใช้งานได้ หากต้องการเปลี่ยนไปใช้แบบใหม่ ให้เพิ่ม {{uri}} ในผู้ให้บริการข้อมูลประจำตัวของคุณก่อน จากนั้นจึงปิดใช้งาน",
-    "authorizationUrl": "URL สำหรับการอนุญาต: {{url}}"
-  },
-  "fields": {
-    "clientId": "รหัสลูกค้า",
-    "clientSecret": "ความลับของลูกค้า",
-    "secretKeep": "ความลับถูกเก็บรักษาไว้แล้ว เว้นช่องว่างนี้ไว้เพื่อรักษาความลับนั้นไว้",
-    "issuerUrl": "URL ของผู้ออก",
-    "authUrl": "URL การอนุญาต",
-    "tokenUrl": "URL โทเค็น",
-    "userIdentifier": "เส้นทางตัวระบุผู้ใช้",
-    "displayName": "ชื่อที่แสดง เส้นทาง",
-    "scopes": "กล้องส่องทางไกล",
-    "userinfoUrl": "แทนที่ URL ข้อมูลผู้ใช้",
-    "groupClaim": "การเรียกร้องค่าสินไหมทดแทนแบบกลุ่ม",
-    "groupClaimDesc": "ตัวเลือกเสริม เส้นทางการอ้างสิทธิ์ที่ประกอบด้วยกลุ่มของผู้ใช้ ค่าเริ่มต้นคือ กลุ่ม บทบาท แล้วจึงเป็นกลุ่ม ใช้สำหรับผู้ให้บริการที่มีการอ้างสิทธิ์แบบกำหนดเอง (เช่น Zitadel)",
-    "allowedUsers": "ผู้ใช้ที่ได้รับอนุญาต",
-    "allowedUsersDesc": "อีเมลหนึ่งฉบับต่อหนึ่งบรรทัด หากเว้นว่างไว้จะอนุญาตให้ใช้ทั้งหมด",
-    "adminGroup": "กลุ่มผู้ดูแลระบบ",
-    "adminGroupDesc": "ผู้ใช้ในกลุ่มนี้จะได้รับสิทธิ์ผู้ดูแลระบบ เว้นว่างไว้เพื่อปิดใช้งานการซิงค์กลุ่ม",
-    "caCert": "ใบรับรอง CA แบบกำหนดเอง",
-    "caCertDesc": "ตัวเลือกเสริม ใบรับรอง CA ที่เข้ารหัสแบบ PEM สำหรับผู้ให้บริการ OIDC ที่ใช้ CA ส่วนตัวหรือ CA ที่ลงนามด้วยตนเอง เว้นว่างไว้เพื่อใช้ที่เก็บใบรับรองความเชื่อถือของระบบ"
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "ลงชื่อเข้าใช้ด้วย SSO โดยอัตโนมัติ",
-      "description": "ส่งผู้เข้าชมไปยังผู้ให้บริการ SSO ตัวแรกโดยตรงแทนที่จะแสดงแบบฟอร์มล็อกอิน ตัวแปรสภาพแวดล้อม OIDC_SILENT_LOGIN_DEFAULT จะแทนที่การตั้งค่านี้"
-    }
-  },
-  "plugin": {
-    "name": "การเข้าสู่ระบบครั้งเดียว"
-  }
-}
diff --git a/plugins/sso/locales/translated/tr_TR.json b/plugins/sso/locales/translated/tr_TR.json
deleted file mode 100644
index 0dd195564..000000000
--- a/plugins/sso/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "SSO ile giriş yapın",
-  "loginWithProvider": "{{name}} ile giriş yap",
-  "loading": "Yükleniyor...",
-  "permissions": {
-    "manage": {
-      "title": "SSO sağlayıcılarını yönetin",
-      "description": "Kullanıcıların oturum açabileceği SSO sağlayıcılarını ekleyin, değiştirin ve kaldırın."
-    }
-  },
-  "providers": {
-    "docsLink": "Belgelere bak",
-    "none": "Hiçbir SSO sağlayıcısı yapılandırılmamış.",
-    "add": "Sağlayıcı Ekle",
-    "edit": "Sağlayıcıyı Düzenle",
-    "delete": "Sağlayıcıyı Sil",
-    "deleteConfirm": "Bu sağlayıcı silinsin mi? İlişkili kullanıcılar oturum açamaz.",
-    "name": "Görünen Ad",
-    "namePlaceholder": "SSO sağlayıcım",
-    "nameRequired": "Görünen ad gereklidir.",
-    "type": "Sağlayıcı Türü",
-    "enabled": "Etkin",
-    "enabledDesc": "Giriş ekranında bu sağlayıcı için bir oturum açma düğmesi gösterin.",
-    "dialogDesc": "Kullanıcıların oturum açabilmesi için bir kimlik sağlayıcısı bağlayın.",
-    "sectionGeneral": "Genel",
-    "sectionCredentials": "Müşteri",
-    "sectionClaims": "İddialar",
-    "sectionAccess": "Erişim",
-    "save": "Sağlayıcıyı Kaydet",
-    "saving": "Kaydediliyor...",
-    "saved": "Kaydedildi",
-    "saveFailed": "Kaydedilemedi",
-    "deleted": "Silindi",
-    "deleteFailed": "Silinemedi",
-    "loadFailed": "SSO sağlayıcıları yüklenemedi.",
-    "cancel": "İptal",
-    "copy": "Kopyala",
-    "copied": "Kopyalandı",
-    "redirectUri": "Yönlendirme URI'si",
-    "redirectUriDesc": "Bu URL'yi kimlik sağlayıcınızda yönlendirme veya geri çağırma URL'si olarak kaydedin.",
-    "legacyCallback": "Eski yönlendirme URI'sini koruyun.",
-    "legacyCallbackDesc": "Bu sağlayıcı Termix 2.9'dan önce kuruldu ve hala çalışmaya devam eden eski yönlendirme URI'sini kullanıyor. Yenisine geçmek için önce kimlik sağlayıcınıza {{uri}} ekleyin, ardından bunu devre dışı bırakın.",
-    "authorizationUrl": "Yetkilendirme URL'si: {{url}}"
-  },
-  "fields": {
-    "clientId": "İstemci Kimliği",
-    "clientSecret": "İstemci Sırrı",
-    "secretKeep": "Bir sır saklanıyor. Sırrı korumak için burayı boş bırakın.",
-    "issuerUrl": "Sağlayıcı URL'si",
-    "authUrl": "Yetkilendirme URL'si",
-    "tokenUrl": "Belirteç URL'si",
-    "userIdentifier": "Kullanıcı Tanımlayıcı Yolu",
-    "displayName": "Görünen Ad Yolu",
-    "scopes": "Kapsamlar",
-    "userinfoUrl": "Userinfo URL'sini Geçersiz Kıl",
-    "groupClaim": "Grup Talebi",
-    "groupClaimDesc": "İsteğe bağlı. Kullanıcının gruplarını içeren talep yolu. Varsayılan olarak groups, roles, ardından group kullanılır. Özel talep kullanan sağlayıcılar için bunu kullanın (örn. Zitadel).",
-    "allowedUsers": "İzin Verilen Kullanıcılar",
-    "allowedUsersDesc": "Her satıra bir e-posta. Tümüne izin vermek için boş bırakın.",
-    "adminGroup": "Yönetici Grubu",
-    "adminGroupDesc": "Bu gruptaki kullanıcılara yönetici yetkisi verilir. Grup eşitlemeyi devre dışı bırakmak için boş bırakın.",
-    "caCert": "Özel CA Sertifikası",
-    "caCertDesc": "İsteğe bağlı. Özel veya kendinden imzalı CA kullanan OIDC sağlayıcıları için PEM kodlu CA sertifikası. Sistem güven deposunu kullanmak için boş bırakın."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "SSO ile otomatik olarak giriş yap",
-      "description": "Ziyaretçileri giriş formunu göstermek yerine doğrudan ilk SSO sağlayıcısına yönlendirin. OIDC_SILENT_LOGIN_DEFAULT ortam değişkeni bunu geçersiz kılar."
-    }
-  },
-  "plugin": {
-    "name": "Tek oturum açma"
-  }
-}
diff --git a/plugins/sso/locales/translated/uk_UA.json b/plugins/sso/locales/translated/uk_UA.json
deleted file mode 100644
index 902bcd2c0..000000000
--- a/plugins/sso/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Увійти за допомогою єдиного входу",
-  "loginWithProvider": "Увійти за допомогою {{name}}",
-  "loading": "Завантаження...",
-  "permissions": {
-    "manage": {
-      "title": "Керування постачальниками SSO",
-      "description": "Додавайте, змінюйте та видаляйте постачальників SSO, за допомогою яких користувачі можуть входити в систему."
-    }
-  },
-  "providers": {
-    "docsLink": "Переглянути документи",
-    "none": "Постачальників SSO не налаштовано.",
-    "add": "Додати постачальника",
-    "edit": "Редагувати постачальника",
-    "delete": "Видалити постачальника",
-    "deleteConfirm": "Видалити цього постачальника? Пов’язані користувачі не зможуть увійти.",
-    "name": "Відображуване ім'я",
-    "namePlaceholder": "Мій постачальник SSO",
-    "nameRequired": "Потрібне відображуване ім'я",
-    "type": "Тип постачальника",
-    "enabled": "Увімкнено",
-    "enabledDesc": "Показувати кнопку входу для цього постачальника на екрані входу.",
-    "dialogDesc": "Підключіть постачальника ідентифікаційних даних, щоб користувачі могли входити за його допомогою.",
-    "sectionGeneral": "Загальне",
-    "sectionCredentials": "Клієнт",
-    "sectionClaims": "Претензії",
-    "sectionAccess": "Доступ",
-    "save": "Зберегти постачальника",
-    "saving": "Збереження...",
-    "saved": "Збережено",
-    "saveFailed": "Не вдалося зберегти",
-    "deleted": "Видалено",
-    "deleteFailed": "Не вдалося видалити",
-    "loadFailed": "Не вдалося завантажити постачальників SSO",
-    "cancel": "Скасувати",
-    "copy": "Копіювати",
-    "copied": "Скопійовано",
-    "redirectUri": "URI перенаправлення",
-    "redirectUriDesc": "Зареєструйте цю URL-адресу як URL-адресу перенаправлення або зворотного виклику у вашому постачальнику ідентифікаційних даних.",
-    "legacyCallback": "Зберегти старий URI перенаправлення",
-    "legacyCallbackDesc": "Цей провайдер було налаштовано до версії Termix 2.9 і досі використовує старий URI перенаправлення, який продовжує працювати. Щоб перейти на новий, спочатку додайте {{uri}} до свого провайдера ідентифікації, а потім вимкніть його.",
-    "authorizationUrl": "URL-адреса авторизації: {{url}}"
-  },
-  "fields": {
-    "clientId": "Ідентифікатор клієнта",
-    "clientSecret": "Секрет клієнта",
-    "secretKeep": "Секрет збережено. Залиште це поле порожнім, щоб зберегти його.",
-    "issuerUrl": "URL-адреса емітента",
-    "authUrl": "URL-адреса авторизації",
-    "tokenUrl": "URL-адреса токена",
-    "userIdentifier": "Шлях ідентифікатора користувача",
-    "displayName": "Шлях до відображуваного імені",
-    "scopes": "Області застосування",
-    "userinfoUrl": "Перевизначити URL-адресу інформації користувача",
-    "groupClaim": "Групова претензія",
-    "groupClaimDesc": "Необов'язково. Шлях до заяви, що містить групи користувача. За замовчуванням використовуються групи, ролі, а потім група. Використовуйте це для постачальників із власною заявою (наприклад, Zitadel).",
-    "allowedUsers": "Дозволені користувачі",
-    "allowedUsersDesc": "Одна електронна адреса на рядок. Залиште поле порожнім, щоб дозволити всім.",
-    "adminGroup": "Група адміністраторів",
-    "adminGroupDesc": "Користувачам у цій групі надано права адміністратора. Залиште поле порожнім, щоб вимкнути синхронізацію групи.",
-    "caCert": "Спеціальний сертифікат CA",
-    "caCertDesc": "Необов’язково. Сертифікат CA з PEM-кодуванням для постачальників OIDC, які використовують приватний або самопідписаний CA. Залиште поле порожнім, щоб використовувати системне сховище довірених сертифікатів."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Автоматичний вхід за допомогою єдиного входу",
-      "description": "Надсилати відвідувачів безпосередньо до першого постачальника SSO замість відображення форми входу. Змінна середовища OIDC_SILENT_LOGIN_DEFAULT замінює це."
-    }
-  },
-  "plugin": {
-    "name": "Єдиний вхід"
-  }
-}
diff --git a/plugins/sso/locales/translated/vi_VN.json b/plugins/sso/locales/translated/vi_VN.json
deleted file mode 100644
index 64e67d5e3..000000000
--- a/plugins/sso/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "Đăng nhập bằng SSO",
-  "loginWithProvider": "Đăng nhập bằng {{name}}",
-  "loading": "Đang tải...",
-  "permissions": {
-    "manage": {
-      "title": "Quản lý các nhà cung cấp SSO",
-      "description": "Thêm, thay đổi và xóa các nhà cung cấp SSO mà người dùng có thể sử dụng để đăng nhập."
-    }
-  },
-  "providers": {
-    "docsLink": "Xem tài liệu",
-    "none": "Chưa có nhà cung cấp SSO.",
-    "add": "Thêm nhà cung cấp",
-    "edit": "Chỉnh sửa nhà cung cấp",
-    "delete": "Xóa nhà cung cấp",
-    "deleteConfirm": "Xóa nhà cung cấp này? Người dùng liên kết sẽ không thể đăng nhập.",
-    "name": "Tên hiển thị",
-    "namePlaceholder": "Nhà cung cấp SSO của tôi",
-    "nameRequired": "Tên hiển thị là bắt buộc",
-    "type": "Loại nhà cung cấp",
-    "enabled": "Đã bật",
-    "enabledDesc": "Hiển thị nút đăng nhập cho nhà cung cấp này trên màn hình đăng nhập.",
-    "dialogDesc": "Kết nối với nhà cung cấp danh tính để người dùng có thể đăng nhập bằng tài khoản đó.",
-    "sectionGeneral": "Chung",
-    "sectionCredentials": "Khách hàng",
-    "sectionClaims": "Yêu cầu bồi thường",
-    "sectionAccess": "Truy cập",
-    "save": "Lưu nhà cung cấp",
-    "saving": "Đang lưu...",
-    "saved": "Đã lưu",
-    "saveFailed": "Không thể lưu",
-    "deleted": "Đã xóa",
-    "deleteFailed": "Không thể xóa",
-    "loadFailed": "Không thể tải nhà cung cấp SSO",
-    "cancel": "Hủy",
-    "copy": "Sao chép",
-    "copied": "Đã sao chép",
-    "redirectUri": "URI chuyển hướng",
-    "redirectUriDesc": "Hãy đăng ký URL này làm URL chuyển hướng hoặc URL gọi lại trong nhà cung cấp định danh của bạn.",
-    "legacyCallback": "Giữ nguyên URI chuyển hướng cũ.",
-    "legacyCallbackDesc": "Nhà cung cấp này được thiết lập trước Termix 2.9 và vẫn sử dụng URI chuyển hướng cũ, vẫn hoạt động bình thường. Để chuyển sang URI mới, trước tiên hãy thêm {{uri}} vào nhà cung cấp định danh của bạn, sau đó tắt chức năng này đi.",
-    "authorizationUrl": "URL xác thực: {{url}}"
-  },
-  "fields": {
-    "clientId": "Client ID",
-    "clientSecret": "Client Secret",
-    "secretKeep": "Một bí mật đã được giữ kín. Hãy để trống phần này để bảo vệ nó.",
-    "issuerUrl": "Issuer URL",
-    "authUrl": "URL ủy quyền",
-    "tokenUrl": "Token URL",
-    "userIdentifier": "Đường dẫn định danh người dùng",
-    "displayName": "Đường dẫn tên hiển thị",
-    "scopes": "Phạm vi",
-    "userinfoUrl": "Ghi đè URL Userinfo",
-    "groupClaim": "Group Claim",
-    "groupClaimDesc": "Tùy chọn. Đường dẫn claim chứa các nhóm của người dùng. Mặc định là groups, roles, rồi group. Sử dụng cho các nhà cung cấp có claim tùy chỉnh (ví dụ: Zitadel).",
-    "allowedUsers": "Người dùng được phép",
-    "allowedUsersDesc": "Mỗi email một dòng. Để trống để cho phép tất cả.",
-    "adminGroup": "Nhóm Admin",
-    "adminGroupDesc": "Người dùng trong nhóm này được cấp quyền admin. Để trống để tắt đồng bộ nhóm.",
-    "caCert": "Chứng chỉ CA tùy chỉnh",
-    "caCertDesc": "Tùy chọn. Chứng chỉ CA mã hóa PEM cho các nhà cung cấp OIDC sử dụng CA riêng hoặc tự ký. Để trống để sử dụng kho tin cậy hệ thống."
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "Đăng nhập tự động bằng SSO",
-      "description": "Hãy chuyển hướng khách truy cập trực tiếp đến nhà cung cấp SSO đầu tiên thay vì hiển thị biểu mẫu đăng nhập. Biến môi trường OIDC_SILENT_LOGIN_DEFAULT sẽ ghi đè lên cài đặt này."
-    }
-  },
-  "plugin": {
-    "name": "Đăng nhập một lần"
-  }
-}
diff --git a/plugins/sso/locales/translated/zh_CN.json b/plugins/sso/locales/translated/zh_CN.json
deleted file mode 100644
index 1707987f1..000000000
--- a/plugins/sso/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "使用 SSO 登录",
-  "loginWithProvider": "使用{{name}}登录",
-  "loading": "加载中...",
-  "permissions": {
-    "manage": {
-      "title": "管理 SSO 提供商",
-      "description": "添加、更改和删除用户可用于登录的 SSO 提供商。"
-    }
-  },
-  "providers": {
-    "docsLink": "查看文档",
-    "none": "未配置 SSO 提供商。",
-    "add": "添加提供商",
-    "edit": "编辑提供商",
-    "delete": "删除提供商",
-    "deleteConfirm": "删除此提供商？关联用户将无法登录。",
-    "name": "显示名称",
-    "namePlaceholder": "我的 SSO 提供商",
-    "nameRequired": "必须填写显示名称。",
-    "type": "提供商类型",
-    "enabled": "已启用",
-    "enabledDesc": "在登录界面显示该提供商的登录按钮。",
-    "dialogDesc": "连接身份提供商，以便用户可以使用该身份提供商登录。",
-    "sectionGeneral": "常规",
-    "sectionCredentials": "客户",
-    "sectionClaims": "索赔",
-    "sectionAccess": "使用权",
-    "save": "保存提供商",
-    "saving": "保存中...",
-    "saved": "已保存",
-    "saveFailed": "保存失败",
-    "deleted": "已删除",
-    "deleteFailed": "删除失败",
-    "loadFailed": "加载 SSO 提供程序失败",
-    "cancel": "取消",
-    "copy": "复制",
-    "copied": "已复制",
-    "redirectUri": "重定向 URI",
-    "redirectUriDesc": "将此 URL 注册为身份提供商中的重定向或回调 URL。",
-    "legacyCallback": "保留旧的重定向 URI",
-    "legacyCallbackDesc": "此身份提供程序是在 Termix 2.9 版本之前设置的，目前仍使用旧的重定向 URI，该 URI 仍然有效。要迁移到新的重定向 URI，请先在身份提供程序中添加 {{uri}} ，然后再将其关闭。",
-    "authorizationUrl": "授权网址： {{url}}"
-  },
-  "fields": {
-    "clientId": "客户端 ID",
-    "clientSecret": "客户端密钥",
-    "secretKeep": "一个秘密被保守。留空即可保密。",
-    "issuerUrl": "颁发者 URL",
-    "authUrl": "授权 URL",
-    "tokenUrl": "令牌 URL",
-    "userIdentifier": "用户标识符路径",
-    "displayName": "显示名称路径",
-    "scopes": "作用域",
-    "userinfoUrl": "覆盖 Userinfo URL",
-    "groupClaim": "组声明",
-    "groupClaimDesc": "可选。包含用户组的声明路径。默认依次使用 groups、roles、group。用于具有自定义声明的提供商（如 Zitadel）。",
-    "allowedUsers": "允许的用户",
-    "allowedUsersDesc": "每行一个邮箱。留空表示允许所有用户。",
-    "adminGroup": "管理员组",
-    "adminGroupDesc": "此组的用户将被授予管理员权限。留空可禁用组同步。",
-    "caCert": "自定义 CA 证书",
-    "caCertDesc": "可选。PEM 编码的 CA 证书，用于使用私有或自签名 CA 的 OIDC 提供商。留空则使用系统信任存储。"
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "使用 SSO 自动登录",
-      "description": "将访客直接引导至第一个单点登录 (SSO) 提供商，而不是显示登录表单。环境变量 OIDC_SILENT_LOGIN_DEFAULT 会覆盖此设置。"
-    }
-  },
-  "plugin": {
-    "name": "单点登录"
-  }
-}
diff --git a/plugins/sso/locales/translated/zh_TW.json b/plugins/sso/locales/translated/zh_TW.json
deleted file mode 100644
index 15c568e8a..000000000
--- a/plugins/sso/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "loginWithSso": "使用 SSO 登入",
-  "loginWithProvider": "使用 {{name}} 登入",
-  "loading": "載入中...",
-  "permissions": {
-    "manage": {
-      "title": "管理 SSO 提供者",
-      "description": "新增、變更和刪除使用者可用於登入的 SSO 提供者。"
-    }
-  },
-  "providers": {
-    "docsLink": "檢視文件",
-    "none": "尚未設定 SSO 提供者。",
-    "add": "新增提供者",
-    "edit": "編輯提供者",
-    "delete": "刪除提供者",
-    "deleteConfirm": "刪除此提供者？相關使用者將無法登入。",
-    "name": "顯示名稱",
-    "namePlaceholder": "我的 SSO 提供者",
-    "nameRequired": "必須填寫顯示名稱。",
-    "type": "提供者類型",
-    "enabled": "已啟用",
-    "enabledDesc": "在登入介面顯示該提供者的登入按鈕。",
-    "dialogDesc": "連接身分提供者，以便使用者可以使用該身分提供者登入。",
-    "sectionGeneral": "一般",
-    "sectionCredentials": "客戶",
-    "sectionClaims": "索賠",
-    "sectionAccess": "使用權",
-    "save": "儲存提供者",
-    "saving": "儲存中…",
-    "saved": "已儲存",
-    "saveFailed": "儲存失敗",
-    "deleted": "已刪除",
-    "deleteFailed": "刪除失敗",
-    "loadFailed": "載入 SSO 提供者失敗",
-    "cancel": "取消",
-    "copy": "複製",
-    "copied": "已複製",
-    "redirectUri": "重定向 URI",
-    "redirectUriDesc": "將此 URL 註冊為身分提供者中的重新導向或回調 URL。",
-    "legacyCallback": "保留舊的重定向 URI",
-    "legacyCallbackDesc": "此身分提供者是在 Termix 2.9 版本之前設定的，目前仍使用舊的重定向 URI，該 URI 仍然有效。若要遷移到新的重定向 URI，請先在身分提供者中新增 {{uri}} ，然後再將其關閉。",
-    "authorizationUrl": "授權網址： {{url}}"
-  },
-  "fields": {
-    "clientId": "用戶端 ID",
-    "clientSecret": "用戶端密鑰",
-    "secretKeep": "一個秘密被保守。留空即可保密。",
-    "issuerUrl": "發行者 URL",
-    "authUrl": "授權 URL",
-    "tokenUrl": "權杖 URL",
-    "userIdentifier": "使用者識別碼路徑",
-    "displayName": "顯示名稱路徑",
-    "scopes": "範圍",
-    "userinfoUrl": "覆寫使用者資訊 URL",
-    "groupClaim": "群組宣告",
-    "groupClaimDesc": "選用。包含使用者群組的宣告路徑。預設為 groups、roles、group。用於自訂宣告的提供者（例如 Zitadel）。",
-    "allowedUsers": "允許的使用者",
-    "allowedUsersDesc": "每行一個電子郵件。留空以允許全部。",
-    "adminGroup": "管理員群組",
-    "adminGroupDesc": "此群組中的使用者將被授予管理員權限。留空以停用群組同步。",
-    "caCert": "自訂 CA 憑證",
-    "caCertDesc": "選用。PEM 編碼的 CA 憑證，用於使用私有或自簽 CA 的 OIDC 提供者。留空以使用系統信任儲存區。"
-  },
-  "settings": {
-    "silentLoginDefault": {
-      "label": "使用 SSO 自動登入",
-      "description": "將訪客直接引導至第一個單一登入 (SSO) 供應商，而不是顯示登入表單。環境變數 OIDC_SILENT_LOGIN_DEFAULT 會覆寫此設定。"
-    }
-  },
-  "plugin": {
-    "name": "單一登入"
-  }
-}
diff --git a/plugins/sso/manifest.json b/plugins/sso/manifest.json
deleted file mode 100644
index dc0eb7c5d..000000000
--- a/plugins/sso/manifest.json
+++ /dev/null
@@ -1,77 +0,0 @@
-{
-  "id": "sso",
-  "name": "Single sign-on",
-  "version": "1.0.0",
-  "description": "Sign in with an OpenID Connect provider, GitHub or Google. Each provider gets its own button on the login screen.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Access & Security",
-  "icon": "KeyRound",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "db:own",
-    "kv:own",
-    "secrets:own",
-    "network:serve",
-    "auth:provide",
-    "ui:surface"
-  ],
-  "contributes": {
-    "auth": {
-      "loginMethods": ["oidc"]
-    },
-    "permissions": [
-      {
-        "name": "manage",
-        "titleKey": "permissions.manage.title",
-        "descriptionKey": "permissions.manage.description",
-        "defaultRoles": ["admin"]
-      }
-    ],
-    "settings": {
-      "admin": [
-        {
-          "key": "providers",
-          "type": "custom",
-          "component": "providers",
-          "permission": "manage"
-        },
-        {
-          "key": "silentLoginDefault",
-          "type": "boolean",
-          "labelKey": "settings.silentLoginDefault.label",
-          "descriptionKey": "settings.silentLoginDefault.description",
-          "default": false,
-          "permission": "manage"
-        }
-      ]
-    },
-    "http": {
-      "legacyRedirects": [
-        {
-          "from": "/users/oidc-config",
-          "to": "/config"
-        },
-        {
-          "from": "/users/oidc/callback",
-          "to": "/callback",
-          "status": 308
-        },
-        {
-          "from": "/users/oidc/backchannel-logout",
-          "to": "/backchannel-logout",
-          "status": 308
-        }
-      ]
-    }
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"],
-  "desktop": "server"
-}
diff --git a/plugins/sso/migrations/mysql/0001_adopt_sso_providers.sql b/plugins/sso/migrations/mysql/0001_adopt_sso_providers.sql
deleted file mode 100644
index a1b185bad..000000000
--- a/plugins/sso/migrations/mysql/0001_adopt_sso_providers.sql
+++ /dev/null
@@ -1,14 +0,0 @@
--- sso 0001: adopt_sso_providers
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `sso_providers` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `name` text NOT NULL,
-  `type` text NOT NULL,
-  `enabled` boolean NOT NULL DEFAULT true,
-  `display_order` int NOT NULL DEFAULT 0,
-  `config` text NOT NULL,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP)
-);
-RENAME TABLE `sso_providers` TO `p_sso_providers`;
diff --git a/plugins/sso/migrations/mysql/0002_legacy_callback.sql b/plugins/sso/migrations/mysql/0002_legacy_callback.sql
deleted file mode 100644
index 20e444a20..000000000
--- a/plugins/sso/migrations/mysql/0002_legacy_callback.sql
+++ /dev/null
@@ -1,7 +0,0 @@
--- sso 0002: legacy_callback
--- Generated by termix-plugin migrations. Review before committing.
-
-ALTER TABLE `p_sso_providers` ADD COLUMN `legacy_callback` boolean NOT NULL DEFAULT false;
--- Providers that existed before 2.9 were registered with the identity
--- provider under /users/oidc/callback, so they keep sending that URI.
-UPDATE `p_sso_providers` SET `legacy_callback` = true;
diff --git a/plugins/sso/migrations/postgres/0001_adopt_sso_providers.sql b/plugins/sso/migrations/postgres/0001_adopt_sso_providers.sql
deleted file mode 100644
index 0a8284f42..000000000
--- a/plugins/sso/migrations/postgres/0001_adopt_sso_providers.sql
+++ /dev/null
@@ -1,14 +0,0 @@
--- sso 0001: adopt_sso_providers
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "sso_providers" (
-  "id" serial PRIMARY KEY,
-  "name" text NOT NULL,
-  "type" text NOT NULL,
-  "enabled" boolean NOT NULL DEFAULT true,
-  "display_order" integer NOT NULL DEFAULT 0,
-  "config" text NOT NULL,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP
-);
-ALTER TABLE "sso_providers" RENAME TO "p_sso_providers";
diff --git a/plugins/sso/migrations/postgres/0002_legacy_callback.sql b/plugins/sso/migrations/postgres/0002_legacy_callback.sql
deleted file mode 100644
index c0b60956a..000000000
--- a/plugins/sso/migrations/postgres/0002_legacy_callback.sql
+++ /dev/null
@@ -1,7 +0,0 @@
--- sso 0002: legacy_callback
--- Generated by termix-plugin migrations. Review before committing.
-
-ALTER TABLE "p_sso_providers" ADD COLUMN "legacy_callback" boolean NOT NULL DEFAULT false;
--- Providers that existed before 2.9 were registered with the identity
--- provider under /users/oidc/callback, so they keep sending that URI.
-UPDATE "p_sso_providers" SET "legacy_callback" = true;
diff --git a/plugins/sso/migrations/snapshot.json b/plugins/sso/migrations/snapshot.json
deleted file mode 100644
index 5665de72e..000000000
--- a/plugins/sso/migrations/snapshot.json
+++ /dev/null
@@ -1,53 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "providers": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "name": {
-          "type": "text",
-          "notNull": true
-        },
-        "type": {
-          "type": "text",
-          "notNull": true
-        },
-        "enabled": {
-          "type": "boolean",
-          "notNull": true,
-          "defaultValue": true
-        },
-        "displayOrder": {
-          "type": "integer",
-          "notNull": true,
-          "defaultValue": 0
-        },
-        "config": {
-          "type": "text",
-          "notNull": true
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "updatedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "legacyCallback": {
-          "type": "boolean",
-          "notNull": true,
-          "defaultValue": false
-        }
-      },
-      "indexes": [],
-      "adopts": "sso_providers"
-    }
-  }
-}
diff --git a/plugins/sso/migrations/sqlite/0001_adopt_sso_providers.sql b/plugins/sso/migrations/sqlite/0001_adopt_sso_providers.sql
deleted file mode 100644
index 63086970c..000000000
--- a/plugins/sso/migrations/sqlite/0001_adopt_sso_providers.sql
+++ /dev/null
@@ -1,14 +0,0 @@
--- sso 0001: adopt_sso_providers
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "sso_providers" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "name" text NOT NULL,
-  "type" text NOT NULL,
-  "enabled" integer NOT NULL DEFAULT 1,
-  "display_order" integer NOT NULL DEFAULT 0,
-  "config" text NOT NULL,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP
-);
-ALTER TABLE "sso_providers" RENAME TO "p_sso_providers";
diff --git a/plugins/sso/migrations/sqlite/0002_legacy_callback.sql b/plugins/sso/migrations/sqlite/0002_legacy_callback.sql
deleted file mode 100644
index 81b2ff5c4..000000000
--- a/plugins/sso/migrations/sqlite/0002_legacy_callback.sql
+++ /dev/null
@@ -1,7 +0,0 @@
--- sso 0002: legacy_callback
--- Generated by termix-plugin migrations. Review before committing.
-
-ALTER TABLE "p_sso_providers" ADD COLUMN "legacy_callback" integer NOT NULL DEFAULT 0;
--- Providers that existed before 2.9 were registered with the identity
--- provider under /users/oidc/callback, so they keep sending that URI.
-UPDATE "p_sso_providers" SET "legacy_callback" = 1;
diff --git a/plugins/sso/package.json b/plugins/sso/package.json
deleted file mode 100644
index d80b5bdd2..000000000
--- a/plugins/sso/package.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "name": "@termix-plugin/sso",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "jose": "^6.2.12",
-    "lucide-react": "^1.33.0",
-    "undici": "^8.10.2"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "react": "^19.2.8",
-    "sonner": "^2.0.8"
-  }
-}
diff --git a/plugins/sso/src/backend/index.ts b/plugins/sso/src/backend/index.ts
deleted file mode 100644
index 04c2c45b9..000000000
--- a/plugins/sso/src/backend/index.ts
+++ /dev/null
@@ -1,52 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { providers } from "./tables.js";
-import { createProviderStore } from "./providers.js";
-import { createSsoLogin, METHOD_ID } from "./login.js";
-import { PUBLIC_PATHS, registerSsoRoutes } from "./routes.js";
-
-/**
- * Whether the login page starts the first provider without a click. The
- * OIDC_SILENT_LOGIN_DEFAULT environment variable pins it either way.
- */
-export async function silentLoginDefault(ctx: PluginContext): Promise<boolean> {
-  const pinned = process.env.OIDC_SILENT_LOGIN_DEFAULT;
-  if (pinned !== undefined) return pinned.trim().toLowerCase() === "true";
-  return (await ctx.settings.get("silentLoginDefault")) === true;
-}
-
-export async function activate(ctx: PluginContext) {
-  const table = await ctx.db.define(providers);
-  const store = createProviderStore(ctx, table);
-  const login = createSsoLogin(ctx, store);
-
-  // One button per enabled provider.
-  ctx.auth.registerLoginMethod({
-    id: METHOD_ID,
-    labelKey: "loginWithSso",
-    icon: "key-round",
-    kind: "redirect",
-    external: true,
-    describe: async () => {
-      const autoStart = await silentLoginDefault(ctx);
-      return (await store.listInstances()).map((instance, index) => ({
-        ...instance,
-        enabled: true,
-        ...(autoStart && index === 0 ? { autoStart: true } : {}),
-      }));
-    },
-    start: login.start,
-    callback: login.callback,
-  });
-
-  registerSsoRoutes(
-    ctx.http.router<Router>({ public: PUBLIC_PATHS }),
-    ctx,
-    store,
-    login,
-  );
-}
-
-export async function deactivate() {
-  // Everything above was registered through ctx and is disposed by core.
-}
diff --git a/plugins/sso/src/backend/login.ts b/plugins/sso/src/backend/login.ts
deleted file mode 100644
index 321f87094..000000000
--- a/plugins/sso/src/backend/login.ts
+++ /dev/null
@@ -1,486 +0,0 @@
-/**
- * The OIDC, GitHub and Google sign-in. start builds the provider's authorize
- * URL; callback turns the provider's answer into a verified identity. Core
- * finds or provisions the user and issues the session.
- */
-
-import crypto from "node:crypto";
-import {
-  LoginMethodError,
-  type PluginContext,
-  type PluginLoginRequest,
-  type PluginVerifiedIdentity,
-} from "@termix/plugin-sdk/backend";
-import {
-  OIDCTokenFormatError,
-  buildFetchOptions,
-  extractOidcGroupsFromSources,
-  generatePkceCodeChallenge,
-  generatePkceCodeVerifier,
-  getDesktopCallbackUrl,
-  getNestedValue,
-  parseOidcRoleMap,
-  resolveOidcMappedRoles,
-  verifyOIDCToken,
-} from "./oidc-protocol.js";
-import {
-  ENV_INSTANCE_ID,
-  ENV_PROVIDER_ID,
-  type ProviderStore,
-} from "./providers.js";
-import type { OidcConfig, ResolvedProvider } from "./types.js";
-
-export const METHOD_ID = "oidc";
-export const CALLBACK_PATH = "/plugin-api/sso/callback";
-/** The redirect URI identity providers were set up with before 2.9. */
-export const LEGACY_CALLBACK_PATH = "/users/oidc/callback";
-
-const STATE_TTL_MS = 10 * 60 * 1000;
-const STATE_PREFIX = "state:";
-
-/** An error raised after the return address is known redirects there. */
-export class RedirectLoginError extends LoginMethodError {
-  constructor(
-    message: string,
-    readonly returnTo: string,
-    status = 400,
-    code?: string,
-  ) {
-    super(message, status, code);
-    this.name = "RedirectLoginError";
-  }
-}
-
-interface PendingState {
-  nonce: string;
-  backendCallback: string;
-  frontendOrigin: string;
-  rememberMe: boolean;
-  providerId: number | null;
-  codeVerifier: string;
-  createdAt: number;
-}
-
-function nonEmpty(value: unknown): value is string {
-  return typeof value === "string" && value.trim().length > 0;
-}
-
-function header(request: PluginLoginRequest, name: string): string {
-  const value = request.headers[name];
-  return typeof (Array.isArray(value) ? value[0] : value) === "string"
-    ? String(Array.isArray(value) ? value[0] : value)
-    : "";
-}
-
-export function redirectUriFor(
-  baseUrl: string,
-  provider: Pick<ResolvedProvider, "legacyCallback">,
-): string {
-  return `${baseUrl}${provider.legacyCallback ? LEGACY_CALLBACK_PATH : CALLBACK_PATH}`;
-}
-
-export type SsoLogin = ReturnType<typeof createSsoLogin>;
-
-export function createSsoLogin(ctx: PluginContext, store: ProviderStore) {
-  async function saveState(state: string, pending: PendingState) {
-    // Drop anything abandoned so the store does not grow.
-    const now = Date.now();
-    for (const key of await ctx.kv.list()) {
-      if (!key.startsWith(STATE_PREFIX)) continue;
-      const entry = (await ctx.kv.get(key)) as PendingState | undefined;
-      if (!entry || now - entry.createdAt > STATE_TTL_MS) {
-        await ctx.kv.delete(key);
-      }
-    }
-    await ctx.kv.set(`${STATE_PREFIX}${state}`, pending);
-  }
-
-  async function takeState(state: string): Promise<PendingState | null> {
-    const key = `${STATE_PREFIX}${state}`;
-    const entry = (await ctx.kv.get(key)) as PendingState | undefined;
-    if (!entry) return null;
-    await ctx.kv.delete(key);
-    return Date.now() - entry.createdAt > STATE_TTL_MS ? null : entry;
-  }
-
-  function frontendOriginFor(
-    request: PluginLoginRequest,
-    baseUrl: string,
-  ): string {
-    const { desktopCallbackPort, appCallbackUrl } = request.query;
-    if (desktopCallbackPort !== undefined && desktopCallbackPort !== "") {
-      const url = getDesktopCallbackUrl(desktopCallbackPort);
-      if (!url) {
-        throw new LoginMethodError("Invalid desktop callback port", 400);
-      }
-      return url;
-    }
-    if (typeof appCallbackUrl === "string" && appCallbackUrl) {
-      let callbackUrl: URL;
-      try {
-        callbackUrl = new URL(appCallbackUrl);
-      } catch {
-        throw new LoginMethodError("Invalid app callback URL", 400);
-      }
-      if (callbackUrl.protocol !== "termix-mobile:") {
-        throw new LoginMethodError("Unsupported app callback URL", 400);
-      }
-      return callbackUrl.toString();
-    }
-    const referer = header(request, "referer");
-    if (referer) {
-      try {
-        const refererUrl = new URL(referer);
-        return `${refererUrl.protocol}//${refererUrl.host}`;
-      } catch {
-        // fall through to the request's own origin
-      }
-    }
-    return new URL(baseUrl).origin;
-  }
-
-  async function start(
-    request: PluginLoginRequest,
-    instanceId: string | null,
-  ): Promise<{ redirectUrl: string }> {
-    const requested =
-      instanceId ??
-      (typeof request.query.providerId === "string"
-        ? request.query.providerId
-        : null);
-    const rowId =
-      requested && requested !== ENV_INSTANCE_ID
-        ? Number.parseInt(requested, 10)
-        : null;
-    if (rowId !== null && !Number.isInteger(rowId)) {
-      throw new LoginMethodError("OIDC not configured", 404);
-    }
-    const provider = await store.resolve(rowId);
-    if (!provider) throw new LoginMethodError("OIDC not configured", 404);
-
-    const baseUrl = ctx.http.baseUrl(request);
-    const backendCallback = redirectUriFor(baseUrl, provider);
-    const frontendOrigin = frontendOriginFor(request, baseUrl);
-    const state = crypto.randomUUID();
-    const nonce = crypto.randomUUID();
-    const codeVerifier = generatePkceCodeVerifier();
-
-    await saveState(state, {
-      nonce,
-      backendCallback,
-      frontendOrigin,
-      rememberMe: String(request.query.rememberMe) === "true",
-      providerId: provider.rowId,
-      codeVerifier,
-      createdAt: Date.now(),
-    });
-
-    const authUrl = new URL(provider.config.authorization_url);
-    authUrl.searchParams.set("client_id", provider.config.client_id);
-    authUrl.searchParams.set("redirect_uri", backendCallback);
-    authUrl.searchParams.set("response_type", "code");
-    authUrl.searchParams.set("scope", provider.config.scopes);
-    authUrl.searchParams.set("state", state);
-    authUrl.searchParams.set("nonce", nonce);
-    authUrl.searchParams.set(
-      "code_challenge",
-      generatePkceCodeChallenge(codeVerifier),
-    );
-    authUrl.searchParams.set("code_challenge_method", "S256");
-    return { redirectUrl: authUrl.toString() };
-  }
-
-  async function exchangeCode(
-    config: OidcConfig,
-    code: string,
-    pending: PendingState,
-  ): Promise<Record<string, unknown>> {
-    const response = await fetch(config.token_url, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/x-www-form-urlencoded",
-        Accept: "application/json",
-      },
-      body: new URLSearchParams({
-        grant_type: "authorization_code",
-        client_id: config.client_id,
-        client_secret: config.client_secret,
-        code,
-        redirect_uri: pending.backendCallback,
-        code_verifier: pending.codeVerifier,
-      }),
-      ...buildFetchOptions(config.ca_cert),
-    } as RequestInit);
-    if (!response.ok) {
-      ctx.log.error(
-        "Token exchange failed",
-        new Error(`HTTP ${response.status}: ${await response.text()}`),
-      );
-      throw new LoginMethodError("Failed to exchange authorization code", 400);
-    }
-    return (await response.json()) as Record<string, unknown>;
-  }
-
-  function providerKey(provider: ResolvedProvider): string {
-    return provider.rowId === null ? ENV_PROVIDER_ID : String(provider.rowId);
-  }
-
-  async function githubIdentity(
-    provider: ResolvedProvider,
-    code: string,
-    pending: PendingState,
-  ): Promise<PluginVerifiedIdentity> {
-    const tokenData = await exchangeCode(provider.config, code, pending);
-    const fetchOptions = buildFetchOptions(provider.config.ca_cert);
-    const headers = {
-      Authorization: `Bearer ${tokenData.access_token}`,
-      Accept: "application/json",
-      "User-Agent": "Termix",
-    };
-    const userInfoResponse = await fetch("https://api.github.com/user", {
-      headers,
-      ...fetchOptions,
-    } as RequestInit);
-    if (!userInfoResponse.ok) {
-      throw new LoginMethodError("Failed to get GitHub user information", 400);
-    }
-    const userInfo = (await userInfoResponse.json()) as Record<string, unknown>;
-
-    const emailResponse = await fetch("https://api.github.com/user/emails", {
-      headers,
-    });
-    if (emailResponse.ok) {
-      const emails = (await emailResponse.json()) as Array<{
-        email: string;
-        primary: boolean;
-        verified: boolean;
-      }>;
-      const primary = emails.find((e) => e.primary && e.verified);
-      if (primary) userInfo.email = primary.email;
-    }
-
-    const subject = String(userInfo.id ?? userInfo.login);
-    const legacyIdentifier = `github:${provider.rowId}:${subject}`;
-    return {
-      kind: "external",
-      provider: providerKey(provider),
-      subject,
-      email: (userInfo.email as string | undefined) ?? null,
-      name: ((userInfo.name || userInfo.login) as string) || legacyIdentifier,
-      allowedUsers: provider.config.allowed_users ?? null,
-      legacy: { identifier: legacyIdentifier, providerRowId: provider.rowId },
-      returnTo: pending.frontendOrigin,
-      rememberMe: pending.rememberMe,
-    };
-  }
-
-  async function fetchUserInfo(
-    config: OidcConfig,
-    accessToken: unknown,
-    userInfo: Record<string, unknown> | null,
-    claimSources: Record<string, unknown>[],
-  ): Promise<Record<string, unknown> | null> {
-    const fetchOptions = buildFetchOptions(config.ca_cert);
-    const issuer = config.issuer_url.endsWith("/")
-      ? config.issuer_url.slice(0, -1)
-      : config.issuer_url;
-    const base = issuer.replace(/\/application\/o\/[^/]+$/, "");
-    const urls: string[] = [];
-
-    try {
-      const discovery = await fetch(
-        `${issuer}/.well-known/openid-configuration`,
-        fetchOptions as RequestInit,
-      );
-      if (discovery.ok) {
-        const document = (await discovery.json()) as Record<string, unknown>;
-        if (typeof document.userinfo_endpoint === "string") {
-          urls.push(document.userinfo_endpoint);
-        }
-      }
-    } catch (error) {
-      ctx.log.warn(`OIDC discovery failed: ${String(error)}`);
-    }
-
-    if (config.userinfo_url) urls.unshift(config.userinfo_url);
-    urls.push(
-      `${base}/userinfo/`,
-      `${base}/userinfo`,
-      `${issuer}/userinfo/`,
-      `${issuer}/userinfo`,
-      `${base}/oauth2/userinfo/`,
-      `${base}/oauth2/userinfo`,
-      `${issuer}/oauth2/userinfo/`,
-      `${issuer}/oauth2/userinfo`,
-    );
-
-    if (!accessToken) return userInfo;
-    for (const url of urls) {
-      try {
-        const response = await fetch(url, {
-          headers: { Authorization: `Bearer ${accessToken}` },
-          ...fetchOptions,
-        } as RequestInit);
-        if (response.ok) {
-          const fetched = (await response.json()) as Record<string, unknown>;
-          claimSources.push(fetched);
-          return { ...userInfo, ...fetched };
-        }
-        ctx.log.warn(`Userinfo endpoint ${url} answered ${response.status}`);
-      } catch (error) {
-        ctx.log.warn(`Userinfo endpoint ${url} failed: ${String(error)}`);
-      }
-    }
-    return userInfo;
-  }
-
-  async function oidcIdentity(
-    provider: ResolvedProvider,
-    code: string,
-    pending: PendingState,
-  ): Promise<PluginVerifiedIdentity> {
-    const { config } = provider;
-    const tokenData = await exchangeCode(config, code, pending);
-
-    let userInfo: Record<string, unknown> | null = null;
-    const claimSources: Record<string, unknown>[] = [];
-
-    if (typeof tokenData.id_token === "string") {
-      try {
-        userInfo = await verifyOIDCToken(
-          tokenData.id_token,
-          config.issuer_url,
-          config.client_id,
-          config.ca_cert,
-        );
-        if (userInfo.nonce !== pending.nonce) {
-          ctx.log.warn("OIDC ID token nonce mismatch");
-          throw new LoginMethodError("Invalid OIDC token nonce", 401);
-        }
-        claimSources.push(userInfo);
-      } catch (error) {
-        // A token that is not a JWS carries no claims we could trust; fall
-        // through to userinfo. Signature and claim failures still reject.
-        if (!(error instanceof OIDCTokenFormatError)) throw error;
-        userInfo = null;
-        ctx.log.warn(
-          `OIDC ID token cannot be verified, using userinfo: ${error.message}`,
-        );
-      }
-    }
-
-    userInfo = await fetchUserInfo(
-      config,
-      tokenData.access_token,
-      userInfo,
-      claimSources,
-    );
-    if (!userInfo) {
-      throw new LoginMethodError("Failed to get user information", 400);
-    }
-
-    const identifier = (getNestedValue(userInfo, config.identifier_path) ||
-      userInfo[config.identifier_path] ||
-      userInfo.sub ||
-      userInfo.email ||
-      userInfo.preferred_username) as string;
-    const name = (getNestedValue(userInfo, config.name_path) ||
-      userInfo[config.name_path] ||
-      userInfo.name ||
-      userInfo.given_name ||
-      identifier) as string;
-    if (!identifier) {
-      throw new LoginMethodError(
-        `User identifier not found at path: ${config.identifier_path}. Available fields: ${Object.keys(userInfo).join(", ")}`,
-        400,
-      );
-    }
-
-    const groups = extractOidcGroupsFromSources(
-      claimSources,
-      config.group_claim,
-    );
-    const isAdmin = config.admin_group
-      ? groups.includes(config.admin_group)
-      : undefined;
-
-    let roles: { desired: string[]; managed: string[] } | undefined;
-    const roleMap = parseOidcRoleMap(
-      config.role_map ?? process.env.OIDC_ROLE_MAP,
-    );
-    if (roleMap.size > 0) {
-      const { desired, managed } = resolveOidcMappedRoles(groups, roleMap);
-      roles = { desired: [...desired], managed: [...managed] };
-    }
-
-    return {
-      kind: "external",
-      provider: providerKey(provider),
-      subject: String(identifier),
-      // An address the provider says it has not verified does not count
-      // toward the allowed list.
-      email:
-        userInfo.email_verified === false || userInfo.email_verified === "false"
-          ? null
-          : ((userInfo.email as string | undefined) ?? null),
-      name,
-      groups,
-      isAdmin,
-      allowedUsers: config.allowed_users ?? null,
-      roles,
-      logoutClaims: {
-        providerId: provider.rowId,
-        sub: typeof userInfo.sub === "string" ? userInfo.sub : null,
-        sid: typeof userInfo.sid === "string" ? userInfo.sid : null,
-      },
-      legacy: { identifier: String(identifier), providerRowId: provider.rowId },
-      returnTo: pending.frontendOrigin,
-      rememberMe: pending.rememberMe,
-    };
-  }
-
-  /**
-   * The provider's callback. Throws RedirectLoginError once the return
-   * address is known, and a plain LoginMethodError (answered as JSON) before.
-   */
-  async function callback(
-    request: PluginLoginRequest,
-  ): Promise<PluginVerifiedIdentity> {
-    const source = { ...request.query, ...(request.body ?? {}) };
-    const { code, state } = source as Record<string, unknown>;
-    if (!nonEmpty(code) || !nonEmpty(state)) {
-      throw new LoginMethodError("Code and state are required", 400);
-    }
-    const pending = await takeState(state);
-    if (!pending) throw new LoginMethodError("Invalid state parameter", 400);
-
-    try {
-      const provider = await store.resolve(pending.providerId);
-      if (!provider) throw new LoginMethodError("OIDC not configured", 500);
-      // GitHub does not issue OIDC id_tokens; it has its own token exchange.
-      return provider.type === "github"
-        ? await githubIdentity(provider, code, pending)
-        : await oidcIdentity(provider, code, pending);
-    } catch (error) {
-      if (error instanceof LoginMethodError) {
-        throw new RedirectLoginError(
-          error.message,
-          pending.frontendOrigin,
-          error.status,
-          error.code,
-        );
-      }
-      ctx.log.error(
-        "OIDC callback failed",
-        error instanceof Error ? error : new Error(String(error)),
-      );
-      throw new RedirectLoginError(
-        "OIDC authentication failed",
-        pending.frontendOrigin,
-        500,
-      );
-    }
-  }
-
-  return { start, callback };
-}
diff --git a/plugins/sso/src/backend/oidc-protocol.ts b/plugins/sso/src/backend/oidc-protocol.ts
deleted file mode 100644
index 40e81fc34..000000000
--- a/plugins/sso/src/backend/oidc-protocol.ts
+++ /dev/null
@@ -1,463 +0,0 @@
-/**
- * OpenID Connect protocol helpers: token verification, groups and the role
- * map, back-channel logout tokens and the provider defaults. Nothing here
- * touches storage.
- */
-
-import crypto from "node:crypto";
-import { Agent } from "undici";
-import type { OidcConfig } from "./types.js";
-
-const BACKCHANNEL_LOGOUT_EVENT =
-  "http://schemas.openid.net/event/backchannel-logout";
-
-/**
- * Raised when a token cannot be verified because it is not a compact JWS,
- * as opposed to a signature or claim check that actually failed.
- */
-export class OIDCTokenFormatError extends Error {
-  constructor(message: string) {
-    super(message);
-    this.name = "OIDCTokenFormatError";
-  }
-}
-
-export function normalizeIssuer(url: string): string {
-  return url
-    .trim()
-    .replace(/\/+$/, "")
-    .replace(/\/\.well-known\/openid-configuration$/, "");
-}
-
-export function buildFetchOptions(caCert?: string): Record<string, unknown> {
-  if (!caCert || !caCert.trim()) return {};
-  return { dispatcher: new Agent({ connect: { ca: caCert } }) };
-}
-
-/**
- * Renders why a fetch failed in a form an administrator can act on.
- *
- * undici reports every transport failure as the same "fetch failed" message
- * and puts the reason that actually matters -- ENOTFOUND, ECONNREFUSED,
- * UNABLE_TO_VERIFY_LEAF_SIGNATURE, a timeout -- on the cause. Reporting only
- * the outer message says nothing at all.
- */
-export function describeFetchFailure(error: unknown): string {
-  if (!(error instanceof Error)) return String(error);
-  const cause = (error as { cause?: unknown }).cause;
-  if (cause instanceof Error) {
-    const code = (cause as { code?: unknown }).code;
-    return code
-      ? `${error.message}: ${cause.message} (${code})`
-      : `${error.message}: ${cause.message}`;
-  }
-  return cause ? `${error.message}: ${String(cause)}` : error.message;
-}
-
-export function getOidcConfigFromEnv(): OidcConfig | null {
-  const client_id = process.env.OIDC_CLIENT_ID;
-  const client_secret = process.env.OIDC_CLIENT_SECRET;
-  const issuer_url = process.env.OIDC_ISSUER_URL;
-  const authorization_url = process.env.OIDC_AUTHORIZATION_URL;
-  const token_url = process.env.OIDC_TOKEN_URL;
-
-  if (
-    !client_id ||
-    !client_secret ||
-    !issuer_url ||
-    !authorization_url ||
-    !token_url
-  ) {
-    return null;
-  }
-
-  return {
-    client_id,
-    client_secret,
-    issuer_url,
-    authorization_url,
-    token_url,
-    userinfo_url: process.env.OIDC_USERINFO_URL || "",
-    identifier_path: process.env.OIDC_IDENTIFIER_PATH || "sub",
-    name_path: process.env.OIDC_NAME_PATH || "name",
-    scopes: process.env.OIDC_SCOPES || "openid email profile",
-    allowed_users: process.env.OIDC_ALLOWED_USERS || "",
-    admin_group: process.env.OIDC_ADMIN_GROUP || "",
-    group_claim: process.env.OIDC_GROUP_CLAIM || "",
-    role_map: process.env.OIDC_ROLE_MAP || "",
-  };
-}
-
-export function isOIDCEnvOverrideEnabled(): boolean {
-  return process.env.OIDC_ENV_OVERRIDE?.toLowerCase() === "true";
-}
-
-/**
- * Normalizes a group name for comparison. Providers are inconsistent about
- * whether they emit bare names (`devops-interns`) or full paths
- * (`/devops-interns`, Keycloak's "Full group path" option), so leading slashes
- * are stripped and case is ignored.
- */
-function normalizeGroupName(group: string): string {
-  return group.trim().replace(/^\/+/, "").toLowerCase();
-}
-
-/**
- * Parses `OIDC_ROLE_MAP` into a group -> role-name lookup.
- *
- * Format is a comma- or newline-separated list of `group:role` pairs, e.g.
- * `devops-interns:devops-intern,devops-seniors:devops-senior`. Group keys are
- * normalized via {@link normalizeGroupName}; role names are passed through
- * verbatim because they must match `roles.name` exactly.
- *
- * Malformed entries are skipped rather than throwing - a typo in one pair must
- * not lock every user out of login.
- */
-export function parseOidcRoleMap(raw?: string | null): Map<string, string> {
-  const map = new Map<string, string>();
-  if (!raw || !raw.trim()) return map;
-
-  for (const entry of raw.split(/[\n,]/)) {
-    const trimmed = entry.trim();
-    if (!trimmed) continue;
-
-    // rsplit on the last ":" so group names containing a colon still work.
-    const separator = trimmed.lastIndexOf(":");
-    if (separator <= 0 || separator === trimmed.length - 1) continue;
-
-    const group = normalizeGroupName(trimmed.slice(0, separator));
-    const roleName = trimmed.slice(separator + 1).trim();
-    if (!group || !roleName) continue;
-
-    map.set(group, roleName);
-  }
-
-  return map;
-}
-
-/**
- * Resolves which mapped roles a user should hold, given their provider groups.
- *
- * Returns both the `desired` roles (mapped groups the user is actually in) and
- * the full set of `managed` roles (every role named in the map). Callers must
- * only ever add/remove roles within `managed` - roles assigned by hand in
- * Termix, and the `admin`/`user` roles maintained by the admin-group sync, are
- * deliberately left alone.
- */
-export function resolveOidcMappedRoles(
-  groups: string[],
-  roleMap: Map<string, string>,
-): { desired: Set<string>; managed: Set<string> } {
-  const managed = new Set(roleMap.values());
-  const desired = new Set<string>();
-
-  for (const group of groups) {
-    const roleName = roleMap.get(normalizeGroupName(group));
-    if (roleName) desired.add(roleName);
-  }
-
-  return { desired, managed };
-}
-
-/**
- * Extracts the list of group/role names from an OIDC userInfo payload.
- *
- * When `groupClaim` is set, that claim is read first (useful for providers like
- * Zitadel that nest roles under a custom path such as
- * `urn:zitadel:iam:org:project:roles`). Otherwise the common `groups`, `roles`
- * and `group` claims are tried. Values may be an array, a comma-separated
- * string, or an object whose keys are the group names.
- */
-export function extractOidcGroups(
-  userInfo: Record<string, unknown>,
-  groupClaim?: string,
-): string[] {
-  let raw: unknown;
-  if (groupClaim && groupClaim.trim()) {
-    raw = userInfo[groupClaim.trim()];
-  }
-  if (raw === undefined || raw === null) {
-    raw = userInfo.groups ?? userInfo.roles ?? userInfo.group;
-  }
-
-  if (Array.isArray(raw)) {
-    return raw.map(String);
-  }
-  if (typeof raw === "string") {
-    return raw
-      .split(",")
-      .map((s) => s.trim())
-      .filter(Boolean);
-  }
-  if (raw && typeof raw === "object") {
-    return Object.keys(raw as Record<string, unknown>);
-  }
-  return [];
-}
-
-/**
- * OIDC providers may return group claims in the ID token, userinfo response,
- * or both. Keep every verified source authoritative instead of letting a
- * sparse userinfo payload overwrite claims from the ID token.
- */
-export function extractOidcGroupsFromSources(
-  sources: Record<string, unknown>[],
-  groupClaim?: string,
-): string[] {
-  return [
-    ...new Set(
-      sources.flatMap((source) => extractOidcGroups(source, groupClaim)),
-    ),
-  ];
-}
-
-export async function verifyOIDCToken(
-  idToken: string,
-  issuerUrl: string,
-  clientId: string,
-  caCert?: string,
-): Promise<Record<string, unknown>> {
-  const segments = idToken.split(".");
-  if (segments.length !== 3) {
-    throw new OIDCTokenFormatError(
-      segments.length === 5
-        ? "Token is a JWE (encrypted). Termix cannot verify encrypted tokens; disable token encryption for this client in your OIDC provider."
-        : `Token is not a compact JWS: expected 3 segments, got ${segments.length}.`,
-    );
-  }
-
-  const fetchOptions = buildFetchOptions(caCert);
-  const configuredIssuerUrl = issuerUrl.trim().replace(/\/+$/, "");
-  const normalizedIssuerUrl = normalizeIssuer(issuerUrl);
-  const possibleIssuers = [
-    normalizedIssuerUrl,
-    normalizedIssuerUrl.replace(/\/application\/o\/[^/]+$/, ""),
-    ...(configuredIssuerUrl === normalizedIssuerUrl ? [issuerUrl] : []),
-  ];
-
-  const jwksUrls = [
-    `${normalizedIssuerUrl}/.well-known/jwks.json`,
-    `${normalizedIssuerUrl}/jwks/`,
-    `${normalizedIssuerUrl.replace(/\/application\/o\/[^/]+$/, "")}/.well-known/jwks.json`,
-  ];
-
-  // Every attempt records why it failed. Without this the only thing an
-  // administrator ever sees is "Failed to fetch JWKS from any URL", which
-  // does not distinguish an issuer URL typo from a proxy, a private CA, or
-  // a provider outage.
-  const attempts: string[] = [];
-
-  const discoveryUrl = `${normalizedIssuerUrl}/.well-known/openid-configuration`;
-  try {
-    const discoveryResponse = await fetch(discoveryUrl, fetchOptions);
-    if (!discoveryResponse.ok) {
-      attempts.push(`${discoveryUrl}: HTTP ${discoveryResponse.status}`);
-    } else {
-      const discovery = (await discoveryResponse.json()) as Record<
-        string,
-        unknown
-      >;
-      if (typeof discovery.jwks_uri === "string" && discovery.jwks_uri) {
-        jwksUrls.unshift(discovery.jwks_uri);
-      } else {
-        attempts.push(`${discoveryUrl}: no jwks_uri in the discovery document`);
-      }
-    }
-  } catch (discoveryError) {
-    attempts.push(`${discoveryUrl}: ${describeFetchFailure(discoveryError)}`);
-  }
-
-  let jwks: Record<string, unknown> | null = null;
-
-  for (const url of jwksUrls) {
-    try {
-      const response = await fetch(url, fetchOptions);
-      if (!response.ok) {
-        attempts.push(`${url}: HTTP ${response.status}`);
-        continue;
-      }
-      const jwksData = (await response.json()) as Record<string, unknown>;
-      if (jwksData && Array.isArray(jwksData.keys)) {
-        jwks = jwksData;
-        break;
-      }
-      attempts.push(`${url}: response contains no "keys" array`);
-    } catch (error) {
-      attempts.push(`${url}: ${describeFetchFailure(error)}`);
-    }
-  }
-
-  if (!jwks) {
-    throw new Error(
-      `Failed to fetch JWKS from any URL. Attempts:\n  ${attempts.join("\n  ")}`,
-    );
-  }
-
-  if (!jwks.keys || !Array.isArray(jwks.keys)) {
-    throw new Error(
-      `Invalid JWKS response structure. Expected 'keys' array, got: ${JSON.stringify(jwks)}`,
-    );
-  }
-
-  const { decodeProtectedHeader, importJWK, jwtVerify } = await import("jose");
-  const header = decodeProtectedHeader(idToken);
-  const keyId = header.kid;
-
-  const publicKey = jwks.keys.find(
-    (key: Record<string, unknown>) => key.kid === keyId,
-  );
-  if (!publicKey) {
-    throw new Error(
-      `No matching public key found for key ID: ${keyId}. Available keys: ${jwks.keys.map((k: Record<string, unknown>) => k.kid).join(", ")}`,
-    );
-  }
-
-  const algorithm =
-    typeof publicKey.alg === "string" ? publicKey.alg : header.alg;
-  const key = await importJWK(publicKey, algorithm);
-
-  const { payload } = await jwtVerify(idToken, key, {
-    issuer: possibleIssuers,
-    audience: clientId,
-  });
-
-  return payload;
-}
-
-const GOOGLE_DEFAULTS = {
-  issuer_url: "https://accounts.google.com",
-  authorization_url: "https://accounts.google.com/o/oauth2/v2/auth",
-  token_url: "https://oauth2.googleapis.com/token",
-  userinfo_url: "https://openidconnect.googleapis.com/v1/userinfo",
-  identifier_path: "sub",
-  name_path: "name",
-  scopes: "openid email profile",
-};
-
-const GITHUB_DEFAULTS = {
-  issuer_url: "https://token.actions.githubusercontent.com",
-  authorization_url: "https://github.com/login/oauth/authorize",
-  token_url: "https://github.com/login/oauth/access_token",
-  userinfo_url: "https://api.github.com/user",
-  identifier_path: "id",
-  name_path: "name",
-  scopes: "read:user user:email",
-};
-
-export function applyProviderDefaults(
-  config: OidcConfig,
-  providerType: string,
-): OidcConfig {
-  const defaults =
-    providerType === "google"
-      ? GOOGLE_DEFAULTS
-      : providerType === "github"
-        ? GITHUB_DEFAULTS
-        : null;
-  if (!defaults) return config;
-  return {
-    ...config,
-    issuer_url: config.issuer_url || defaults.issuer_url,
-    authorization_url: config.authorization_url || defaults.authorization_url,
-    token_url: config.token_url || defaults.token_url,
-    userinfo_url: config.userinfo_url || defaults.userinfo_url,
-    identifier_path: config.identifier_path || defaults.identifier_path,
-    name_path: config.name_path || defaults.name_path,
-    scopes: config.scopes || defaults.scopes,
-  };
-}
-
-export type LogoutTokenClaims = {
-  sub: string | null;
-  sid: string | null;
-  jti: string;
-};
-
-export function validateLogoutTokenClaims(
-  payload: Record<string, unknown>,
-): LogoutTokenClaims {
-  if ("nonce" in payload) {
-    throw new Error("logout_token must not contain a nonce claim");
-  }
-
-  const event = (payload.events as Record<string, unknown> | undefined)?.[
-    BACKCHANNEL_LOGOUT_EVENT
-  ];
-  if (!event || typeof event !== "object" || Array.isArray(event)) {
-    throw new Error("logout_token missing back-channel logout event");
-  }
-
-  if (!Number.isInteger(payload.iat)) {
-    throw new Error("logout_token missing iat claim");
-  }
-
-  const jti = typeof payload.jti === "string" ? payload.jti.trim() : "";
-  if (!jti) {
-    throw new Error("logout_token missing jti claim");
-  }
-
-  const sub = typeof payload.sub === "string" ? payload.sub : null;
-  const sid = typeof payload.sid === "string" ? payload.sid : null;
-  if (!sub && !sid) {
-    throw new Error("logout_token must contain sub and/or sid");
-  }
-
-  return { sub, sid, jti };
-}
-
-export async function validateLogoutToken(
-  logoutToken: string,
-  config: OidcConfig,
-): Promise<LogoutTokenClaims> {
-  const payload = await verifyOIDCToken(
-    logoutToken,
-    config.issuer_url,
-    config.client_id,
-    config.ca_cert,
-  );
-
-  return validateLogoutTokenClaims(payload);
-}
-
-export function isValidOidcIssuer(value: unknown): boolean {
-  if (typeof value !== "string") return false;
-  try {
-    const url = new URL(value);
-    return (
-      ["http:", "https:"].includes(url.protocol) &&
-      !/\/userinfo\/?$/i.test(url.pathname)
-    );
-  } catch {
-    return false;
-  }
-}
-
-export function getNestedValue(
-  obj: Record<string, unknown>,
-  path: string,
-): unknown {
-  if (!path || !obj) return null;
-  return path
-    .split(".")
-    .reduce<unknown>(
-      (current, key) => (current as Record<string, unknown>)?.[key],
-      obj,
-    );
-}
-
-// RFC 7636 PKCE: 43-128 char unreserved-character string.
-export function generatePkceCodeVerifier(): string {
-  return crypto.randomBytes(64).toString("base64url");
-}
-
-export function generatePkceCodeChallenge(verifier: string): string {
-  return crypto.createHash("sha256").update(verifier).digest("base64url");
-}
-
-/** The desktop app's loopback listener for a callback port it sent. */
-export function getDesktopCallbackUrl(value: unknown): string | null {
-  if (typeof value !== "string" || !/^\d+$/.test(value)) return null;
-  const port = Number(value);
-  if (!Number.isInteger(port) || port < 1 || port > 65535) return null;
-  return `http://localhost:${port}/oidc-callback`;
-}
diff --git a/plugins/sso/src/backend/providers.ts b/plugins/sso/src/backend/providers.ts
deleted file mode 100644
index 8221099bb..000000000
--- a/plugins/sso/src/backend/providers.ts
+++ /dev/null
@@ -1,278 +0,0 @@
-import { and, asc, desc, eq } from "drizzle-orm";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { applyProviderDefaults, normalizeIssuer } from "./oidc-protocol.js";
-import {
-  SSO_PROVIDER_TYPES,
-  type OidcConfig,
-  type ProviderRow,
-  type ResolvedProvider,
-  type SsoProviderType,
-} from "./types.js";
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// ctx.db.define hands the table back untyped and the drizzle handle is the
-// server's own, so both are typed at this module's edge.
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-/** Identities from the env-configured provider use this provider id. */
-export const ENV_PROVIDER_ID = "legacy-oidc";
-/** The login instance id of the env-configured provider. */
-export const ENV_INSTANCE_ID = "0";
-
-const SECRET_FIELDS = ["client_secret"] as const;
-const LEGACY_PREFIXES = ["encoded:", "encrypted:"];
-
-export function isSsoType(type: unknown): type is SsoProviderType {
-  return SSO_PROVIDER_TYPES.includes(type as SsoProviderType);
-}
-
-export function getOidcConfigFromEnv(): OidcConfig | null {
-  const client_id = process.env.OIDC_CLIENT_ID;
-  const client_secret = process.env.OIDC_CLIENT_SECRET;
-  const issuer_url = process.env.OIDC_ISSUER_URL;
-  const authorization_url = process.env.OIDC_AUTHORIZATION_URL;
-  const token_url = process.env.OIDC_TOKEN_URL;
-  if (
-    !client_id ||
-    !client_secret ||
-    !issuer_url ||
-    !authorization_url ||
-    !token_url
-  ) {
-    return null;
-  }
-  return {
-    client_id,
-    client_secret,
-    issuer_url,
-    authorization_url,
-    token_url,
-    userinfo_url: process.env.OIDC_USERINFO_URL || "",
-    identifier_path: process.env.OIDC_IDENTIFIER_PATH || "sub",
-    name_path: process.env.OIDC_NAME_PATH || "name",
-    scopes: process.env.OIDC_SCOPES || "openid email profile",
-    allowed_users: process.env.OIDC_ALLOWED_USERS || "",
-    admin_group: process.env.OIDC_ADMIN_GROUP || "",
-    group_claim: process.env.OIDC_GROUP_CLAIM || "",
-    role_map: process.env.OIDC_ROLE_MAP || "",
-  };
-}
-
-export function isEnvOverrideEnabled(): boolean {
-  return process.env.OIDC_ENV_OVERRIDE?.toLowerCase() === "true";
-}
-
-function envProvider(config: OidcConfig): ResolvedProvider {
-  // Env providers were set up against the 2.8 callback and cannot be edited.
-  return { config, type: "oidc", rowId: null, legacyCallback: true };
-}
-
-export type ProviderStore = ReturnType<typeof createProviderStore>;
-
-export function createProviderStore(ctx: PluginContext, table: Table) {
-  const client = () => ctx.db.client<Drizzle>();
-
-  /** Opens a stored secret: sealed, or the 2.8 base64 forms. */
-  async function openSecret(value: string): Promise<string> {
-    const prefix = LEGACY_PREFIXES.find((p) => value.startsWith(p));
-    if (prefix) {
-      try {
-        return Buffer.from(value.slice(prefix.length), "base64").toString(
-          "utf8",
-        );
-      } catch {
-        return "";
-      }
-    }
-    const opened = await ctx.secrets.unseal(value);
-    // A value seal() never wrote was stored in the clear by hand.
-    return opened ?? value;
-  }
-
-  async function parseConfig(raw: string): Promise<Record<string, unknown>> {
-    let config: Record<string, unknown>;
-    try {
-      config = JSON.parse(raw);
-    } catch {
-      return {};
-    }
-    for (const field of SECRET_FIELDS) {
-      const value = config[field];
-      if (typeof value === "string" && value) {
-        config[field] = await openSecret(value);
-      }
-    }
-    return config;
-  }
-
-  async function sealConfig(config: Record<string, unknown>): Promise<string> {
-    const out = { ...config };
-    for (const field of SECRET_FIELDS) {
-      const value = out[field];
-      if (typeof value === "string" && value) {
-        out[field] = await ctx.secrets.seal(value);
-      }
-    }
-    return JSON.stringify(out);
-  }
-
-  async function listRows(): Promise<ProviderRow[]> {
-    const drizzle = await client();
-    const rows = (await drizzle
-      .select()
-      .from(table)
-      .orderBy(asc(table.displayOrder), asc(table.id))) as ProviderRow[];
-    return rows.filter((row) => isSsoType(row.type));
-  }
-
-  async function findRow(id: number): Promise<ProviderRow | null> {
-    const drizzle = await client();
-    const rows = (await drizzle
-      .select()
-      .from(table)
-      .where(eq(table.id, id))
-      .limit(1)) as ProviderRow[];
-    const row = rows[0];
-    return row && isSsoType(row.type) ? row : null;
-  }
-
-  async function resolveRow(row: ProviderRow): Promise<ResolvedProvider> {
-    const type = row.type as SsoProviderType;
-    const config = applyProviderDefaults(
-      (await parseConfig(row.config)) as unknown as OidcConfig,
-      type,
-    );
-    return {
-      config,
-      type,
-      rowId: row.id,
-      legacyCallback: !!row.legacyCallback,
-    };
-  }
-
-  return {
-    parseConfig,
-    sealConfig,
-    listRows,
-    findRow,
-
-    /** Login instances: env override, rows, or the env provider alone. */
-    async listInstances(): Promise<
-      Array<{ id: string; label: string; type: SsoProviderType }>
-    > {
-      const env = getOidcConfigFromEnv();
-      const envInstance = {
-        id: ENV_INSTANCE_ID,
-        label: "SSO",
-        type: "oidc" as const,
-      };
-      if (env && isEnvOverrideEnabled()) return [envInstance];
-      const rows = (await listRows()).filter((row) => row.enabled);
-      const instances = rows.map((row) => ({
-        id: String(row.id),
-        label: row.name,
-        type: row.type as SsoProviderType,
-      }));
-      if (instances.length === 0 && env) instances.push(envInstance);
-      return instances;
-    },
-
-    /**
-     * The provider for a login. With no id, the env provider or the first
-     * enabled row, as 2.8 did.
-     */
-    async resolve(rowId: number | null): Promise<ResolvedProvider | null> {
-      const env = getOidcConfigFromEnv();
-      if (env && isEnvOverrideEnabled()) return envProvider(env);
-      if (rowId != null) {
-        const row = await findRow(rowId);
-        return row?.enabled ? resolveRow(row) : null;
-      }
-      if (env) return envProvider(env);
-      const first = (await listRows()).find((row) => row.enabled);
-      return first ? resolveRow(first) : null;
-    },
-
-    /** The provider a back-channel logout token's issuer belongs to. */
-    async resolveByIssuer(issuer: string): Promise<ResolvedProvider | null> {
-      const target = normalizeIssuer(issuer);
-      const env = getOidcConfigFromEnv();
-      const envMatches =
-        !!env?.issuer_url && normalizeIssuer(env.issuer_url) === target;
-      if (envMatches && isEnvOverrideEnabled()) return envProvider(env!);
-      for (const row of await listRows()) {
-        if (!row.enabled) continue;
-        const resolved = await resolveRow(row);
-        if (
-          resolved.config.issuer_url &&
-          normalizeIssuer(resolved.config.issuer_url) === target
-        ) {
-          return resolved;
-        }
-      }
-      return envMatches ? envProvider(env!) : null;
-    },
-
-    async create(input: {
-      name: string;
-      type: SsoProviderType;
-      enabled: boolean;
-      displayOrder: number;
-      config: Record<string, unknown>;
-    }): Promise<ProviderRow> {
-      const drizzle = await client();
-      const now = new Date().toISOString();
-      await drizzle.insert(table).values({
-        name: input.name,
-        type: input.type,
-        enabled: input.enabled,
-        displayOrder: input.displayOrder,
-        config: await sealConfig(input.config),
-        legacyCallback: false,
-        createdAt: now,
-        updatedAt: now,
-      });
-      await ctx.db.persist();
-      // No returning() on every engine: find the row by what was written.
-      const rows = (await drizzle
-        .select()
-        .from(table)
-        .where(and(eq(table.name, input.name), eq(table.createdAt, now)))
-        .orderBy(desc(table.id))
-        .limit(1)) as ProviderRow[];
-      return rows[0];
-    },
-
-    async update(
-      id: number,
-      values: Partial<{
-        name: string;
-        enabled: boolean;
-        displayOrder: number;
-        config: Record<string, unknown>;
-        legacyCallback: boolean;
-      }>,
-    ): Promise<ProviderRow | null> {
-      const drizzle = await client();
-      const { config, ...rest } = values;
-      await drizzle
-        .update(table)
-        .set({
-          ...rest,
-          ...(config ? { config: await sealConfig(config) } : {}),
-          updatedAt: new Date().toISOString(),
-        })
-        .where(eq(table.id, id));
-      await ctx.db.persist();
-      return findRow(id);
-    },
-
-    async remove(id: number): Promise<void> {
-      const drizzle = await client();
-      await drizzle.delete(table).where(eq(table.id, id));
-      await ctx.db.persist();
-    },
-  };
-}
diff --git a/plugins/sso/src/backend/routes.ts b/plugins/sso/src/backend/routes.ts
deleted file mode 100644
index 137d23054..000000000
--- a/plugins/sso/src/backend/routes.ts
+++ /dev/null
@@ -1,502 +0,0 @@
-import type { Request, Response, Router } from "express";
-import {
-  LoginMethodError,
-  type PluginContext,
-} from "@termix/plugin-sdk/backend";
-import {
-  applyProviderDefaults,
-  isValidOidcIssuer,
-  validateLogoutToken,
-} from "./oidc-protocol.js";
-import { isSsoType, type ProviderStore } from "./providers.js";
-import { METHOD_ID, redirectUriFor, type SsoLogin } from "./login.js";
-import type { OidcConfig, ProviderRow, SsoProviderType } from "./types.js";
-
-export const PUBLIC_PATHS = [
-  "/start",
-  "/callback",
-  "/backchannel-logout",
-  "/config",
-];
-
-const LOGOUT_JTI_TTL_MS = 5 * 60 * 1000;
-const REQUIRED_OIDC_FIELDS = [
-  "client_id",
-  "client_secret",
-  "issuer_url",
-  "authorization_url",
-  "token_url",
-] as const;
-
-function fail(
-  ctx: PluginContext,
-  res: Response,
-  message: string,
-  error: unknown,
-) {
-  ctx.log.error(
-    message,
-    error instanceof Error ? error : new Error(String(error)),
-  );
-  res.status(500).json({ error: message });
-}
-
-export function registerSsoRoutes(
-  router: Router,
-  ctx: PluginContext,
-  store: ProviderStore,
-  login: SsoLogin,
-): void {
-  // Replayed logout tokens are answered but not acted on twice.
-  const seenLogoutJti = new Map<string, number>();
-
-  async function present(req: Request, row: ProviderRow) {
-    const config = await store.parseConfig(row.config);
-    const { client_secret: secret, ...rest } = config;
-    return {
-      id: row.id,
-      name: row.name,
-      type: row.type,
-      enabled: !!row.enabled,
-      displayOrder: row.displayOrder,
-      legacyCallback: !!row.legacyCallback,
-      config: rest,
-      hasClientSecret: typeof secret === "string" && secret.length > 0,
-      redirectUri: redirectUriFor(ctx.http.baseUrl(req), {
-        legacyCallback: !!row.legacyCallback,
-      }),
-    };
-  }
-
-  /** Checks a full provider config; returns the error to show, if any. */
-  function validate(type: SsoProviderType, config: Partial<OidcConfig>) {
-    if (type === "oidc") {
-      const missing = REQUIRED_OIDC_FIELDS.filter((field) => !config[field]);
-      if (missing.length > 0) {
-        return `Missing required OIDC fields: ${missing.join(", ")}`;
-      }
-    } else if (!config.client_id || !config.client_secret) {
-      return "Client ID and Client Secret are required";
-    }
-    if (config.issuer_url && !isValidOidcIssuer(config.issuer_url)) {
-      return "Issuer URL must be an HTTP(S) issuer and not a userinfo endpoint";
-    }
-    return null;
-  }
-
-  /**
-   * @openapi
-   * /plugin-api/sso/start:
-   *   get:
-   *     summary: Start an SSO login in the browser
-   *     description: Public. Sends the browser straight to the provider, so a link can start a login. The provider is picked by the provider query parameter, or the default one.
-   *     tags:
-   *       - SSO
-   *     parameters:
-   *       - in: query
-   *         name: provider
-   *         schema:
-   *           type: string
-   *     responses:
-   *       302:
-   *         description: Redirect to the identity provider.
-   *       404:
-   *         description: SSO is not configured.
-   */
-  router.get("/start", async (req: Request, res: Response) => {
-    try {
-      const instance =
-        typeof req.query.provider === "string" ? req.query.provider : null;
-      const { redirectUrl } = await login.start(req as never, instance);
-      res.redirect(redirectUrl);
-    } catch (error) {
-      if (error instanceof LoginMethodError) {
-        res.status(error.status).json({ error: error.message });
-        return;
-      }
-      fail(ctx, res, "Failed to start SSO login", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/sso/callback:
-   *   get:
-   *     summary: SSO callback
-   *     description: Public. The redirect URI to register with an identity provider. Exchanges the code and redirects back to the app with a session, a second-factor step or an error.
-   *     tags:
-   *       - SSO
-   *     responses:
-   *       302:
-   *         description: Back to the app.
-   *   post:
-   *     summary: SSO callback (form post)
-   *     description: Same as the GET form, for providers that post their answer.
-   *     tags:
-   *       - SSO
-   *     responses:
-   *       302:
-   *         description: Back to the app.
-   */
-  const callback = (req: Request, res: Response) =>
-    ctx.auth.completeRedirectLogin(METHOD_ID, req, res);
-  router.get("/callback", callback);
-  router.post("/callback", callback);
-
-  /**
-   * @openapi
-   * /plugin-api/sso/backchannel-logout:
-   *   post:
-   *     summary: OIDC back-channel logout
-   *     description: Public. Where an identity provider sends a signed logout token. Ends the Termix sessions that came from the matching provider login.
-   *     tags:
-   *       - SSO
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/x-www-form-urlencoded:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               logout_token:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Logout processed.
-   *       400:
-   *         description: Missing, invalid or unknown logout token.
-   */
-  router.post("/backchannel-logout", async (req: Request, res: Response) => {
-    res.setHeader("Cache-Control", "no-store");
-    const logoutToken = (req.body as Record<string, unknown> | undefined)
-      ?.logout_token;
-    if (typeof logoutToken !== "string" || !logoutToken) {
-      res.status(400).json({ error: "missing logout_token" });
-      return;
-    }
-
-    let issuer: string | null = null;
-    try {
-      const parts = logoutToken.split(".");
-      if (parts.length === 3) {
-        const claims = JSON.parse(Buffer.from(parts[1], "base64").toString());
-        issuer = typeof claims.iss === "string" ? claims.iss : null;
-      }
-    } catch {
-      issuer = null;
-    }
-    if (!issuer) {
-      res.status(400).json({ error: "invalid logout_token" });
-      return;
-    }
-
-    try {
-      const provider = await store.resolveByIssuer(issuer);
-      if (!provider) {
-        ctx.log.warn(`Back-channel logout for unknown issuer ${issuer}`);
-        res.status(400).json({ error: "unknown issuer" });
-        return;
-      }
-      const claims = await validateLogoutToken(logoutToken, provider.config);
-
-      const now = Date.now();
-      for (const [key, expiry] of seenLogoutJti) {
-        if (expiry <= now) seenLogoutJti.delete(key);
-      }
-      if (seenLogoutJti.has(claims.jti)) {
-        res.status(200).json({ ok: true });
-        return;
-      }
-
-      try {
-        await ctx.auth.revokeSessions({
-          providerId: provider.rowId,
-          sub: claims.sub,
-          sid: claims.sid,
-        });
-      } catch (error) {
-        fail(ctx, res, "logout processing failed", error);
-        return;
-      }
-      seenLogoutJti.set(claims.jti, now + LOGOUT_JTI_TTL_MS);
-      res.status(200).json({ ok: true });
-    } catch (error) {
-      ctx.log.warn(`Back-channel logout failed: ${String(error)}`);
-      res.status(400).json({ error: "invalid logout_token" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/sso/config:
-   *   get:
-   *     summary: Default provider's public configuration
-   *     description: Public, for 2.8 clients. The client id, issuer, authorization URL and scopes of the default provider, or null.
-   *     tags:
-   *       - SSO
-   *     responses:
-   *       200:
-   *         description: Public configuration, or null.
-   */
-  router.get("/config", async (_req: Request, res: Response) => {
-    try {
-      const provider = await store.resolve(null);
-      if (!provider) {
-        res.json(null);
-        return;
-      }
-      const { config } = provider;
-      res.json({
-        client_id: config.client_id,
-        issuer_url: config.issuer_url,
-        authorization_url: config.authorization_url,
-        scopes: config.scopes,
-      });
-    } catch (error) {
-      fail(ctx, res, "Failed to get OIDC config", error);
-    }
-  });
-
-  // Everything below manages providers.
-  const manage = ctx.rbac.require("manage") as never;
-
-  /**
-   * @openapi
-   * /plugin-api/sso/providers:
-   *   get:
-   *     summary: List SSO providers
-   *     description: Every OIDC, GitHub and Google provider with its redirect URI. Secrets are never sent, only whether one is set. Needs sso.manage.
-   *     tags:
-   *       - SSO
-   *     responses:
-   *       200:
-   *         description: Providers.
-   *       403:
-   *         description: Missing permission.
-   */
-  router.get("/providers", manage, async (req: Request, res: Response) => {
-    try {
-      const rows = await store.listRows();
-      res.json({
-        providers: await Promise.all(rows.map((row) => present(req, row))),
-        newRedirectUri: redirectUriFor(ctx.http.baseUrl(req), {
-          legacyCallback: false,
-        }),
-      });
-    } catch (error) {
-      fail(ctx, res, "Failed to list SSO providers", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/sso/providers:
-   *   post:
-   *     summary: Add an SSO provider
-   *     description: Adds an OIDC, GitHub or Google provider. GitHub and Google fill in their own endpoints. Needs sso.manage.
-   *     tags:
-   *       - SSO
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               name:
-   *                 type: string
-   *               type:
-   *                 type: string
-   *                 enum: [oidc, github, google]
-   *               enabled:
-   *                 type: boolean
-   *               config:
-   *                 type: object
-   *     responses:
-   *       201:
-   *         description: Provider added.
-   *       400:
-   *         description: Missing or invalid fields.
-   *       403:
-   *         description: Missing permission.
-   */
-  router.post("/providers", manage, async (req: Request, res: Response) => {
-    try {
-      const {
-        name,
-        type,
-        enabled = true,
-        displayOrder = 0,
-        config = {},
-      } = req.body ?? {};
-      if (typeof name !== "string" || !name.trim()) {
-        res.status(400).json({ error: "Provider name is required" });
-        return;
-      }
-      if (!isSsoType(type)) {
-        res.status(400).json({ error: "Invalid provider type" });
-        return;
-      }
-      const full = applyProviderDefaults(config as OidcConfig, type);
-      const invalid = validate(type, full);
-      if (invalid) {
-        res.status(400).json({ error: invalid });
-        return;
-      }
-      const row = await store.create({
-        name: name.trim(),
-        type,
-        enabled: !!enabled,
-        displayOrder: Number(displayOrder) || 0,
-        config: { ...(config as Record<string, unknown>) },
-      });
-      await ctx.audit.record({
-        action: "sso_provider_create",
-        resourceType: "sso_provider",
-        resourceId: String(row.id),
-        resourceName: row.name,
-        success: true,
-      });
-      res.status(201).json(await present(req, row));
-    } catch (error) {
-      fail(ctx, res, "Failed to create SSO provider", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/sso/providers/{id}:
-   *   put:
-   *     summary: Update an SSO provider
-   *     description: Changes a provider. Config fields are merged over the stored ones; an empty client secret keeps the stored secret. legacyCallback false moves it to the new redirect URI. Needs sso.manage.
-   *     tags:
-   *       - SSO
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Provider updated.
-   *       400:
-   *         description: Invalid fields.
-   *       403:
-   *         description: Missing permission.
-   *       404:
-   *         description: Provider not found.
-   */
-  router.put("/providers/:id", manage, async (req: Request, res: Response) => {
-    try {
-      const id = Number.parseInt(String(req.params.id), 10);
-      const row = Number.isInteger(id) ? await store.findRow(id) : null;
-      if (!row) {
-        res.status(404).json({ error: "Provider not found" });
-        return;
-      }
-      const { name, enabled, displayOrder, config, legacyCallback } =
-        req.body ?? {};
-      const values: Parameters<ProviderStore["update"]>[1] = {};
-      if (name !== undefined) {
-        if (typeof name !== "string" || !name.trim()) {
-          res.status(400).json({ error: "Provider name is required" });
-          return;
-        }
-        values.name = name.trim();
-      }
-      if (enabled !== undefined) values.enabled = !!enabled;
-      if (displayOrder !== undefined) {
-        values.displayOrder = Number(displayOrder) || 0;
-      }
-      if (legacyCallback !== undefined) {
-        values.legacyCallback = !!legacyCallback;
-      }
-      if (config && typeof config === "object") {
-        const incoming = { ...(config as Record<string, unknown>) };
-        if (!incoming.client_secret) delete incoming.client_secret;
-        const merged = {
-          ...(await store.parseConfig(row.config)),
-          ...incoming,
-        };
-        const invalid = validate(
-          row.type as SsoProviderType,
-          applyProviderDefaults(merged as unknown as OidcConfig, row.type),
-        );
-        if (invalid) {
-          res.status(400).json({ error: invalid });
-          return;
-        }
-        values.config = merged;
-      }
-      const updated = await store.update(id, values);
-      await ctx.audit.record({
-        action: "sso_provider_update",
-        resourceType: "sso_provider",
-        resourceId: String(id),
-        resourceName: updated?.name ?? row.name,
-        success: true,
-      });
-      res.json(await present(req, updated ?? row));
-    } catch (error) {
-      fail(ctx, res, "Failed to update SSO provider", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/sso/providers/{id}:
-   *   delete:
-   *     summary: Delete an SSO provider
-   *     description: Refused while users still sign in with it. Needs sso.manage.
-   *     tags:
-   *       - SSO
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Provider deleted.
-   *       403:
-   *         description: Missing permission.
-   *       404:
-   *         description: Provider not found.
-   *       409:
-   *         description: Users are still linked to it.
-   */
-  router.delete(
-    "/providers/:id",
-    manage,
-    async (req: Request, res: Response) => {
-      try {
-        const id = Number.parseInt(String(req.params.id), 10);
-        const row = Number.isInteger(id) ? await store.findRow(id) : null;
-        if (!row) {
-          res.status(404).json({ error: "Provider not found" });
-          return;
-        }
-        if ((await ctx.auth.countLinkedUsers(String(id))) > 0) {
-          res.status(409).json({
-            error:
-              "Users still sign in with this provider. Disable it instead, or remove those users first.",
-          });
-          return;
-        }
-        await store.remove(id);
-        await ctx.audit.record({
-          action: "sso_provider_delete",
-          resourceType: "sso_provider",
-          resourceId: String(id),
-          resourceName: row.name,
-          success: true,
-        });
-        res.json({ message: "SSO provider deleted" });
-      } catch (error) {
-        fail(ctx, res, "Failed to delete SSO provider", error);
-      }
-    },
-  );
-}
diff --git a/plugins/sso/src/backend/tables.ts b/plugins/sso/src/backend/tables.ts
deleted file mode 100644
index e20156c58..000000000
--- a/plugins/sso/src/backend/tables.ts
+++ /dev/null
@@ -1,32 +0,0 @@
-import {
-  adoptLegacyTable,
-  boolean,
-  defineTable,
-  id,
-  integer,
-  text,
-  timestamp,
-} from "@termix/plugin-sdk/db";
-
-/**
- * Adopted from core's sso_providers, so the column names are the legacy ones
- * and the rename carries every provider across. LDAP rows are moved out to
- * the ldap plugin by core's boot migration; until then they are ignored here.
- */
-export const providers = adoptLegacyTable(
-  "sso_providers",
-  defineTable("providers", {
-    id: id(),
-    name: text().notNull(),
-    type: text().notNull(),
-    enabled: boolean().notNull().default(true),
-    displayOrder: integer().notNull().default(0),
-    config: text().notNull(),
-    createdAt: timestamp().notNull().defaultNow(),
-    updatedAt: timestamp().notNull().defaultNow(),
-    // Providers from before 2.9 keep sending the old redirect URI.
-    legacyCallback: boolean().notNull().default(false),
-  }),
-);
-
-export const tables = [providers];
diff --git a/plugins/sso/src/backend/types.ts b/plugins/sso/src/backend/types.ts
deleted file mode 100644
index 0bbdec896..000000000
--- a/plugins/sso/src/backend/types.ts
+++ /dev/null
@@ -1,46 +0,0 @@
-export type SsoProviderType = "oidc" | "github" | "google";
-
-export const SSO_PROVIDER_TYPES: readonly SsoProviderType[] = [
-  "oidc",
-  "github",
-  "google",
-];
-
-export interface OidcConfig {
-  client_id: string;
-  client_secret: string;
-  issuer_url: string;
-  authorization_url: string;
-  token_url: string;
-  userinfo_url: string;
-  identifier_path: string;
-  name_path: string;
-  scopes: string;
-  allowed_users: string;
-  admin_group: string;
-  group_claim?: string;
-  role_map?: string;
-  ca_cert?: string;
-}
-
-/** A provider ready to sign someone in: secrets opened, defaults applied. */
-export interface ResolvedProvider {
-  config: OidcConfig;
-  type: SsoProviderType;
-  /** The row id, or null for the provider configured through OIDC_* env vars. */
-  rowId: number | null;
-  /** Sends the 2.8 redirect URI, /users/oidc/callback, which core forwards. */
-  legacyCallback: boolean;
-}
-
-export interface ProviderRow {
-  id: number;
-  name: string;
-  type: string;
-  enabled: boolean;
-  displayOrder: number;
-  config: string;
-  legacyCallback: boolean;
-  createdAt: string;
-  updatedAt: string;
-}
diff --git a/plugins/sso/src/frontend/OidcLoginButtons.tsx b/plugins/sso/src/frontend/OidcLoginButtons.tsx
deleted file mode 100644
index 16debd01e..000000000
--- a/plugins/sso/src/frontend/OidcLoginButtons.tsx
+++ /dev/null
@@ -1,39 +0,0 @@
-import { useState } from "react";
-import { Button } from "@termix/plugin-sdk/ui";
-import {
-  useTranslation,
-  type LoginMethodUIProps,
-} from "@termix/plugin-sdk/frontend";
-
-/** One button per enabled provider. */
-export function OidcLoginButtons({
-  instances,
-  disabled,
-  startRedirect,
-}: LoginMethodUIProps) {
-  const { t } = useTranslation();
-  const [loadingId, setLoadingId] = useState<string | null>(null);
-  return (
-    <>
-      {instances.map((instance) => (
-        <Button
-          key={instance.id}
-          onClick={async () => {
-            setLoadingId(instance.id);
-            try {
-              await startRedirect(instance.id);
-            } finally {
-              setLoadingId(null);
-            }
-          }}
-          disabled={disabled || loadingId !== null}
-          className="w-full bg-accent-brand hover:bg-accent-brand/90 text-background font-bold"
-        >
-          {loadingId === instance.id
-            ? t("loading")
-            : t("loginWithProvider", { name: instance.label })}
-        </Button>
-      ))}
-    </>
-  );
-}
diff --git a/plugins/sso/src/frontend/ProvidersSetting.tsx b/plugins/sso/src/frontend/ProvidersSetting.tsx
deleted file mode 100644
index 13340c23b..000000000
--- a/plugins/sso/src/frontend/ProvidersSetting.tsx
+++ /dev/null
@@ -1,568 +0,0 @@
-import { useCallback, useEffect, useState, type ReactNode } from "react";
-import { Copy, Pencil, Plus, Trash2 } from "lucide-react";
-import { toast } from "sonner";
-import {
-  Button,
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogHeader,
-  DialogTitle,
-  FakeSwitch,
-  Input,
-  PasswordInput,
-  Select2,
-  SettingRow,
-  Textarea,
-  copyToClipboard,
-} from "@termix/plugin-sdk/ui";
-import { usePluginApi, useTranslation } from "@termix/plugin-sdk/frontend";
-import {
-  createSsoApi,
-  type SsoProvider,
-  type SsoProviderInput,
-  type SsoProviderType,
-} from "./sso-api";
-
-const TYPE_LABELS: Record<SsoProviderType, string> = {
-  oidc: "OIDC",
-  github: "GitHub",
-  google: "Google",
-};
-
-const AUTHORIZATION_URLS: Record<"github" | "google", string> = {
-  github: "https://github.com/login/oauth/authorize",
-  google: "https://accounts.google.com/o/oauth2/v2/auth",
-};
-
-type Fields = {
-  client_id: string;
-  client_secret: string;
-  issuer_url: string;
-  authorization_url: string;
-  token_url: string;
-  userinfo_url: string;
-  identifier_path: string;
-  name_path: string;
-  scopes: string;
-  allowed_users: string;
-  admin_group: string;
-  group_claim: string;
-  ca_cert: string;
-};
-
-const EMPTY_FIELDS: Fields = {
-  client_id: "",
-  client_secret: "",
-  issuer_url: "",
-  authorization_url: "",
-  token_url: "",
-  userinfo_url: "",
-  identifier_path: "sub",
-  name_path: "name",
-  scopes: "openid email profile",
-  allowed_users: "",
-  admin_group: "",
-  group_claim: "",
-  ca_cert: "",
-};
-
-function errorMessage(error: unknown, fallback: string): string {
-  const err = error as {
-    response?: { data?: { error?: string } };
-    message?: string;
-  };
-  return err.response?.data?.error || err.message || fallback;
-}
-
-function Field({
-  label,
-  required,
-  hint,
-  children,
-}: {
-  label: string;
-  required?: boolean;
-  hint?: string;
-  children: ReactNode;
-}) {
-  return (
-    <div className="flex flex-col gap-1.5 min-w-0">
-      <label className="text-xs font-semibold">
-        {label}
-        {required && <span className="text-accent-brand ml-1">*</span>}
-      </label>
-      {children}
-      {hint && (
-        <p className="text-[10px] text-muted-foreground leading-snug">{hint}</p>
-      )}
-    </div>
-  );
-}
-
-function Section({ title, children }: { title: string; children: ReactNode }) {
-  return (
-    <div className="flex flex-col gap-3">
-      <span className="text-[10px] font-semibold text-muted-foreground uppercase tracking-widest">
-        {title}
-      </span>
-      {children}
-    </div>
-  );
-}
-
-function RedirectUri({ uri }: { uri: string }) {
-  const { t } = useTranslation();
-  return (
-    <div className="flex items-center gap-1 min-w-0 border border-border bg-muted/30">
-      <code className="flex-1 min-w-0 truncate text-[11px] font-mono text-muted-foreground px-2 py-1.5">
-        {uri}
-      </code>
-      <Button
-        variant="ghost"
-        size="sm"
-        className="h-7 w-7 p-0 shrink-0 text-muted-foreground hover:text-foreground"
-        title={t("providers.copy")}
-        onClick={async () => {
-          await copyToClipboard(uri);
-          toast.success(t("providers.copied"));
-        }}
-      >
-        <Copy className="size-3" />
-      </Button>
-    </div>
-  );
-}
-
-function ProviderDialog({
-  open,
-  onOpenChange,
-  provider,
-  newRedirectUri,
-  onSaved,
-}: {
-  open: boolean;
-  onOpenChange: (open: boolean) => void;
-  provider: SsoProvider | null;
-  newRedirectUri: string;
-  onSaved: () => void;
-}) {
-  const { t } = useTranslation();
-  const api = createSsoApi(usePluginApi());
-  const isEdit = provider !== null;
-  const [name, setName] = useState("");
-  const [type, setType] = useState<SsoProviderType>("oidc");
-  const [enabled, setEnabled] = useState(true);
-  const [legacyCallback, setLegacyCallback] = useState(false);
-  const [fields, setFields] = useState<Fields>(EMPTY_FIELDS);
-  const [saving, setSaving] = useState(false);
-
-  useEffect(() => {
-    if (!open) return;
-    setName(provider?.name ?? "");
-    setType(provider?.type ?? "oidc");
-    setEnabled(provider?.enabled ?? true);
-    setLegacyCallback(provider?.legacyCallback ?? false);
-    const config = provider?.config ?? {};
-    const next = { ...EMPTY_FIELDS };
-    for (const key of Object.keys(next) as Array<keyof Fields>) {
-      const value = config[key];
-      if (typeof value === "string") next[key] = value;
-    }
-    next.client_secret = "";
-    setFields(next);
-  }, [open, provider]);
-
-  const set = (key: keyof Fields) => (value: string) =>
-    setFields((prev) => ({ ...prev, [key]: value }));
-  const simplified = type !== "oidc";
-
-  async function save() {
-    if (!name.trim()) {
-      toast.error(t("providers.nameRequired"));
-      return;
-    }
-    const config: Record<string, string> = {};
-    for (const [key, value] of Object.entries(fields)) {
-      if (value.trim()) config[key] = value.trim();
-    }
-    const input: SsoProviderInput = {
-      name: name.trim(),
-      type,
-      enabled,
-      config,
-      ...(isEdit ? { legacyCallback } : {}),
-    };
-    setSaving(true);
-    try {
-      if (provider) await api.update(provider.id, input);
-      else await api.create(input);
-      toast.success(t("providers.saved"));
-      onSaved();
-      onOpenChange(false);
-    } catch (error) {
-      toast.error(errorMessage(error, t("providers.saveFailed")));
-    } finally {
-      setSaving(false);
-    }
-  }
-
-  const secretHint = provider?.hasClientSecret
-    ? t("fields.secretKeep")
-    : undefined;
-  const redirectUri = legacyCallback
-    ? (provider?.redirectUri ?? newRedirectUri)
-    : newRedirectUri;
-
-  const text = (
-    key: keyof Fields,
-    label: string,
-    placeholder: string,
-    options: { required?: boolean; hint?: string } = {},
-  ) => (
-    <Field label={label} required={options.required} hint={options.hint}>
-      <Input
-        value={fields[key]}
-        onChange={(e) => set(key)(e.target.value)}
-        placeholder={placeholder}
-      />
-    </Field>
-  );
-
-  return (
-    <Dialog open={open} onOpenChange={onOpenChange}>
-      <DialogContent className="flex flex-col gap-0 p-0 overflow-hidden w-[calc(100vw-2rem)] sm:max-w-xl max-h-[calc(100dvh-2rem)]">
-        <DialogHeader className="px-4 pt-4 pb-3 pr-10 border-b border-border shrink-0">
-          <DialogTitle className="text-lg font-bold">
-            {isEdit ? t("providers.edit") : t("providers.add")}
-          </DialogTitle>
-          <DialogDescription className="text-xs text-muted-foreground">
-            {t("providers.dialogDesc")}{" "}
-            <a
-              href={
-                simplified
-                  ? "https://docs.termix.site/features/authentication/github-google"
-                  : "https://docs.termix.site/features/authentication/oidc"
-              }
-              target="_blank"
-              rel="noreferrer"
-              className="text-accent-brand hover:underline"
-            >
-              {t("providers.docsLink")}
-            </a>
-          </DialogDescription>
-        </DialogHeader>
-
-        <div className="flex-1 min-h-0 overflow-y-auto px-4 py-4 flex flex-col gap-6">
-          <Section title={t("providers.sectionGeneral")}>
-            <div className="grid grid-cols-1 sm:grid-cols-2 gap-3">
-              <Field label={t("providers.name")} required>
-                <Input
-                  value={name}
-                  onChange={(e) => setName(e.target.value)}
-                  placeholder={t("providers.namePlaceholder")}
-                />
-              </Field>
-              <Field label={t("providers.type")}>
-                <Select2
-                  value={type}
-                  disabled={isEdit}
-                  onChange={(e) => setType(e.target.value as SsoProviderType)}
-                  className="w-full"
-                >
-                  {(Object.keys(TYPE_LABELS) as SsoProviderType[]).map(
-                    (value) => (
-                      <option key={value} value={value}>
-                        {TYPE_LABELS[value]}
-                      </option>
-                    ),
-                  )}
-                </Select2>
-              </Field>
-            </div>
-            <div className="border border-border px-3">
-              <SettingRow
-                label={t("providers.enabled")}
-                description={t("providers.enabledDesc")}
-              >
-                <FakeSwitch checked={enabled} onChange={setEnabled} />
-              </SettingRow>
-            </div>
-          </Section>
-
-          <Section title={t("providers.redirectUri")}>
-            <div className="flex flex-col gap-1.5">
-              <RedirectUri uri={redirectUri} />
-              <p className="text-[10px] text-muted-foreground leading-snug">
-                {t("providers.redirectUriDesc")}
-              </p>
-            </div>
-            {isEdit && provider.legacyCallback && (
-              <div className="border border-border px-3">
-                <SettingRow
-                  label={t("providers.legacyCallback")}
-                  description={t("providers.legacyCallbackDesc", {
-                    uri: newRedirectUri,
-                  })}
-                >
-                  <FakeSwitch
-                    checked={legacyCallback}
-                    onChange={setLegacyCallback}
-                  />
-                </SettingRow>
-              </div>
-            )}
-          </Section>
-
-          <Section title={t("providers.sectionCredentials")}>
-            <div className="grid grid-cols-1 sm:grid-cols-2 gap-3">
-              {text("client_id", t("fields.clientId"), "your-client-id", {
-                required: true,
-              })}
-              <Field
-                label={t("fields.clientSecret")}
-                required={!provider?.hasClientSecret}
-                hint={secretHint}
-              >
-                <PasswordInput
-                  value={fields.client_secret}
-                  onChange={(e) => set("client_secret")(e.target.value)}
-                  placeholder="your-client-secret"
-                />
-              </Field>
-            </div>
-            {simplified ? (
-              <p className="text-[10px] text-muted-foreground break-all">
-                {t("providers.authorizationUrl", {
-                  url: AUTHORIZATION_URLS[type as "github" | "google"],
-                })}
-              </p>
-            ) : (
-              <>
-                {text("issuer_url", t("fields.issuerUrl"), "https://provider", {
-                  required: true,
-                })}
-                {text(
-                  "authorization_url",
-                  t("fields.authUrl"),
-                  "https://provider/oauth2/auth",
-                  { required: true },
-                )}
-                {text(
-                  "token_url",
-                  t("fields.tokenUrl"),
-                  "https://provider/oauth2/token",
-                  { required: true },
-                )}
-                {text(
-                  "userinfo_url",
-                  t("fields.userinfoUrl"),
-                  "https://provider/oauth2/userinfo",
-                )}
-              </>
-            )}
-          </Section>
-
-          {!simplified && (
-            <Section title={t("providers.sectionClaims")}>
-              <div className="grid grid-cols-1 sm:grid-cols-2 gap-3">
-                {text("identifier_path", t("fields.userIdentifier"), "sub", {
-                  required: true,
-                })}
-                {text("name_path", t("fields.displayName"), "name", {
-                  required: true,
-                })}
-              </div>
-              {text("scopes", t("fields.scopes"), "openid email profile", {
-                required: true,
-              })}
-              {text("group_claim", t("fields.groupClaim"), "groups", {
-                hint: t("fields.groupClaimDesc"),
-              })}
-            </Section>
-          )}
-
-          <Section title={t("providers.sectionAccess")}>
-            <Field
-              label={t("fields.allowedUsers")}
-              hint={t("fields.allowedUsersDesc")}
-            >
-              <Textarea
-                value={fields.allowed_users}
-                onChange={(e) => set("allowed_users")(e.target.value)}
-                placeholder={"user@example.com\nanother@example.com"}
-                rows={3}
-                className="font-mono resize-y"
-              />
-            </Field>
-            {text("admin_group", t("fields.adminGroup"), "admin", {
-              hint: t("fields.adminGroupDesc"),
-            })}
-            <Field label={t("fields.caCert")} hint={t("fields.caCertDesc")}>
-              <Textarea
-                value={fields.ca_cert}
-                onChange={(e) => set("ca_cert")(e.target.value)}
-                placeholder={
-                  "-----BEGIN CERTIFICATE-----\n...\n-----END CERTIFICATE-----"
-                }
-                rows={4}
-                className="font-mono resize-y"
-              />
-            </Field>
-          </Section>
-        </div>
-
-        <div className="flex items-center justify-end gap-2 px-4 py-3 border-t border-border shrink-0">
-          <Button variant="ghost" onClick={() => onOpenChange(false)}>
-            {t("providers.cancel")}
-          </Button>
-          <Button
-            variant="outline"
-            className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-            onClick={save}
-            disabled={saving}
-          >
-            {saving ? t("providers.saving") : t("providers.save")}
-          </Button>
-        </div>
-      </DialogContent>
-    </Dialog>
-  );
-}
-
-/**
- * The "providers" custom field on the plugin's admin settings page: the
- * provider list with an editor, which a schema field cannot express.
- */
-export function ProvidersSetting() {
-  const { t } = useTranslation();
-  const api = createSsoApi(usePluginApi());
-  const [providers, setProviders] = useState<SsoProvider[] | null>(null);
-  const [newRedirectUri, setNewRedirectUri] = useState("");
-  const [dialogOpen, setDialogOpen] = useState(false);
-  const [editing, setEditing] = useState<SsoProvider | null>(null);
-
-  const load = useCallback(async () => {
-    try {
-      const result = await api.list();
-      setProviders(result.providers);
-      setNewRedirectUri(result.newRedirectUri);
-    } catch (error) {
-      setProviders([]);
-      toast.error(errorMessage(error, t("providers.loadFailed")));
-    }
-    // api is rebuilt each render from the same client.
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, []);
-
-  useEffect(() => {
-    void load();
-  }, [load]);
-
-  async function toggleEnabled(provider: SsoProvider) {
-    try {
-      await api.update(provider.id, { enabled: !provider.enabled });
-      await load();
-    } catch (error) {
-      toast.error(errorMessage(error, t("providers.saveFailed")));
-    }
-  }
-
-  async function remove(provider: SsoProvider) {
-    if (!window.confirm(t("providers.deleteConfirm"))) return;
-    try {
-      await api.remove(provider.id);
-      toast.success(t("providers.deleted"));
-      await load();
-    } catch (error) {
-      toast.error(errorMessage(error, t("providers.deleteFailed")));
-    }
-  }
-
-  if (providers === null) return null;
-
-  return (
-    <div className="flex flex-col gap-3 py-3 border-b border-border last:border-0">
-      <span className="text-[10px] text-muted-foreground">
-        <a
-          href="https://docs.termix.site/features/authentication/sso-providers"
-          target="_blank"
-          rel="noreferrer"
-          className="text-accent-brand hover:underline"
-        >
-          {t("providers.docsLink")}
-        </a>
-      </span>
-      {providers.length === 0 ? (
-        <span className="text-xs text-muted-foreground">
-          {t("providers.none")}
-        </span>
-      ) : (
-        <div className="flex flex-col gap-2">
-          {providers.map((provider) => (
-            <div
-              key={provider.id}
-              className="flex flex-col gap-2 p-3 border border-border bg-background"
-            >
-              <div className="flex items-center gap-2">
-                <div className="flex-1 min-w-0 flex items-center gap-1.5">
-                  <span className="text-sm font-medium truncate">
-                    {provider.name}
-                  </span>
-                  <span className="text-[9px] px-1 py-0.5 bg-muted text-muted-foreground font-mono uppercase shrink-0">
-                    {TYPE_LABELS[provider.type] ?? provider.type}
-                  </span>
-                </div>
-                <FakeSwitch
-                  checked={provider.enabled}
-                  onChange={() => void toggleEnabled(provider)}
-                />
-                <Button
-                  variant="ghost"
-                  size="sm"
-                  className="h-7 w-7 p-0 text-muted-foreground hover:text-foreground"
-                  onClick={() => {
-                    setEditing(provider);
-                    setDialogOpen(true);
-                  }}
-                  title={t("providers.edit")}
-                >
-                  <Pencil className="size-3" />
-                </Button>
-                <Button
-                  variant="ghost"
-                  size="sm"
-                  className="h-7 w-7 p-0 text-muted-foreground hover:text-destructive"
-                  onClick={() => void remove(provider)}
-                  title={t("providers.delete")}
-                >
-                  <Trash2 className="size-3" />
-                </Button>
-              </div>
-              <RedirectUri uri={provider.redirectUri} />
-            </div>
-          ))}
-        </div>
-      )}
-      <Button
-        variant="outline"
-        size="sm"
-        className="self-start text-xs border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-        onClick={() => {
-          setEditing(null);
-          setDialogOpen(true);
-        }}
-      >
-        <Plus className="size-3" />
-        {t("providers.add")}
-      </Button>
-      <ProviderDialog
-        open={dialogOpen}
-        onOpenChange={setDialogOpen}
-        provider={editing}
-        newRedirectUri={newRedirectUri}
-        onSaved={() => void load()}
-      />
-    </div>
-  );
-}
diff --git a/plugins/sso/src/frontend/index.tsx b/plugins/sso/src/frontend/index.tsx
deleted file mode 100644
index 16fbec242..000000000
--- a/plugins/sso/src/frontend/index.tsx
+++ /dev/null
@@ -1,12 +0,0 @@
-import type { TermixApp } from "@termix/plugin-sdk/frontend";
-import { OidcLoginButtons } from "./OidcLoginButtons";
-import { ProvidersSetting } from "./ProvidersSetting";
-
-export function activate(app: TermixApp): void {
-  app.registerLoginMethod({
-    id: "oidc",
-    titleKey: "loginWithSso",
-    component: OidcLoginButtons,
-  });
-  app.registerSettingsComponent("providers", ProvidersSetting);
-}
diff --git a/plugins/sso/src/frontend/sso-api.ts b/plugins/sso/src/frontend/sso-api.ts
deleted file mode 100644
index 98850214a..000000000
--- a/plugins/sso/src/frontend/sso-api.ts
+++ /dev/null
@@ -1,45 +0,0 @@
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-
-export type SsoProviderType = "oidc" | "github" | "google";
-
-export interface SsoProvider {
-  id: number;
-  name: string;
-  type: SsoProviderType;
-  enabled: boolean;
-  displayOrder: number;
-  legacyCallback: boolean;
-  config: Record<string, unknown>;
-  hasClientSecret: boolean;
-  redirectUri: string;
-}
-
-export interface SsoProviderInput {
-  name?: string;
-  type?: SsoProviderType;
-  enabled?: boolean;
-  legacyCallback?: boolean;
-  config?: Record<string, unknown>;
-}
-
-/** Paths are relative to /plugin-api/sso/. */
-export function createSsoApi(api: PluginApiClient) {
-  return {
-    async list() {
-      const { data } = await api.get<{
-        providers: SsoProvider[];
-        newRedirectUri: string;
-      }>("/providers");
-      return data;
-    },
-    async create(input: SsoProviderInput) {
-      return (await api.post<SsoProvider>("/providers", input)).data;
-    },
-    async update(id: number, input: SsoProviderInput) {
-      return (await api.put<SsoProvider>(`/providers/${id}`, input)).data;
-    },
-    async remove(id: number) {
-      await api.delete(`/providers/${id}`);
-    },
-  };
-}
diff --git a/plugins/sso/tests/backend/helpers.ts b/plugins/sso/tests/backend/helpers.ts
deleted file mode 100644
index 1aca58fd1..000000000
--- a/plugins/sso/tests/backend/helpers.ts
+++ /dev/null
@@ -1,222 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import { vi } from "vitest";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-export const manifest = manifestJson as unknown as PluginManifest;
-
-/** Core's 2.8 sso_providers, as db/index.ts created it. */
-export const LEGACY_DDL = `
-  CREATE TABLE IF NOT EXISTS sso_providers (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    name TEXT NOT NULL,
-    type TEXT NOT NULL,
-    enabled INTEGER NOT NULL DEFAULT 1,
-    display_order INTEGER NOT NULL DEFAULT 0,
-    config TEXT NOT NULL,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
-  );
-`;
-
-export interface TestServer {
-  db: TestDb;
-  mock: MockPluginContext;
-  request: (
-    method: string,
-    path: string,
-    options?: {
-      user?: string;
-      body?: unknown;
-      form?: Record<string, string>;
-      headers?: Record<string, string>;
-    },
-    // Route bodies vary per test; asserting on them is the point.
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any; location: string | null }>;
-  close: () => Promise<void>;
-}
-
-// The IdP is stubbed through the global fetch; calls to the test server
-// itself still go out for real.
-const realFetch = globalThis.fetch;
-
-export async function startServer(
-  options: {
-    capabilities?: string[];
-    permissions?: string[];
-    linkedUsers?: Record<string, number>;
-    before?: (sqlite: TestDb["sqlite"]) => void;
-    settings?: Record<string, unknown>;
-  } = {},
-): Promise<TestServer> {
-  const db = await createTestDb(pluginDir, { before: options.before });
-  db.sqlite
-    .prepare("INSERT INTO users (id, username, is_admin) VALUES (?, ?, 1)")
-    .run("admin", "admin");
-
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: options.capabilities ?? manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    permissions: options.permissions,
-    linkedUsers: options.linkedUsers,
-    baseUrl: "https://termix.test",
-    settings: options.settings,
-  });
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use(express.json());
-  app.use(express.urlencoded({ extended: false }));
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") || undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    db,
-    mock,
-    async request(
-      method,
-      path,
-      { user = "admin", body, form, headers = {} } = {},
-    ) {
-      const payload =
-        form !== undefined
-          ? new URLSearchParams(form).toString()
-          : body !== undefined && method !== "GET"
-            ? JSON.stringify(body)
-            : undefined;
-      const response = await realFetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        redirect: "manual",
-        headers: {
-          "x-test-user": user,
-          ...(form !== undefined
-            ? { "content-type": "application/x-www-form-urlencoded" }
-            : payload !== undefined
-              ? { "content-type": "application/json" }
-              : {}),
-          ...headers,
-        },
-        body: payload,
-      });
-      const text = await response.text();
-      let parsed: unknown = null;
-      try {
-        parsed = text ? JSON.parse(text) : null;
-      } catch {
-        parsed = text;
-      }
-      return {
-        status: response.status,
-        body: parsed,
-        location: response.headers.get("location"),
-      };
-    },
-    async close() {
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-      db.close();
-    },
-  };
-}
-
-export const ISSUER = "https://idp.example";
-
-export interface FakeIdp {
-  /** Claims the next id_token carries. */
-  claims: Record<string, unknown>;
-  /** Form bodies the token endpoint received. */
-  tokenRequests: URLSearchParams[];
-  /** Signs any payload with the IdP's key, for logout tokens. */
-  sign: (payload: Record<string, unknown>) => Promise<string>;
-  /** Extra handlers, checked first. */
-  routes: Map<string, () => Response>;
-}
-
-/**
- * A minimal OpenID provider behind the global fetch: discovery, JWKS, a
- * token endpoint that issues a signed id_token and a userinfo endpoint.
- */
-export async function installIdp(): Promise<FakeIdp> {
-  const { exportJWK, generateKeyPair, SignJWT } = await import("jose");
-  const { privateKey, publicKey } = await generateKeyPair("RS256");
-  const jwk = { ...(await exportJWK(publicKey)), kid: "k1", alg: "RS256" };
-
-  const idp: FakeIdp = {
-    claims: {},
-    tokenRequests: [],
-    routes: new Map(),
-    sign: (payload) =>
-      new SignJWT(payload)
-        .setProtectedHeader({ alg: "RS256", kid: "k1" })
-        .setIssuer(ISSUER)
-        .setAudience("termix")
-        .setIssuedAt()
-        .setExpirationTime("5m")
-        .sign(privateKey),
-  };
-
-  vi.stubGlobal(
-    "fetch",
-    vi.fn(async (input: string | URL, init?: RequestInit) => {
-      const url = String(input);
-      const custom = idp.routes.get(url);
-      if (custom) return custom();
-      if (url.startsWith("http://127.0.0.1")) return realFetch(input, init);
-      if (url === `${ISSUER}/.well-known/openid-configuration`) {
-        return Response.json({
-          jwks_uri: `${ISSUER}/jwks`,
-          userinfo_endpoint: `${ISSUER}/userinfo`,
-        });
-      }
-      if (url === `${ISSUER}/jwks`) return Response.json({ keys: [jwk] });
-      if (url === `${ISSUER}/token`) {
-        idp.tokenRequests.push(new URLSearchParams(String(init?.body)));
-        return Response.json({
-          access_token: "access",
-          id_token: await idp.sign(idp.claims),
-        });
-      }
-      if (url === `${ISSUER}/userinfo`) {
-        return Response.json({ email: "alice@example.com" });
-      }
-      return new Response("not found", { status: 404 });
-    }),
-  );
-  return idp;
-}
-
-export const OIDC_CONFIG = {
-  client_id: "termix",
-  client_secret: "shhh",
-  issuer_url: ISSUER,
-  authorization_url: `${ISSUER}/authorize`,
-  token_url: `${ISSUER}/token`,
-  identifier_path: "sub",
-  name_path: "name",
-  scopes: "openid email profile",
-  admin_group: "termix-admins",
-  role_map: "ops-team:ops",
-};
diff --git a/plugins/sso/tests/backend/legacy-urls.test.ts b/plugins/sso/tests/backend/legacy-urls.test.ts
deleted file mode 100644
index 630de1b7e..000000000
--- a/plugins/sso/tests/backend/legacy-urls.test.ts
+++ /dev/null
@@ -1,35 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { validateManifest } from "@termix/plugin-sdk/manifest";
-import manifest from "../../manifest.json";
-
-// Old URLs something outside Termix still calls keep reaching the plugin.
-const redirects = manifest.contributes.http.legacyRedirects as unknown[];
-
-describe("legacy URLs", () => {
-  it("declares them in a manifest that validates", () => {
-    expect(validateManifest(manifest)).toEqual([]);
-  });
-
-  it("redirects /users/oidc-config, which 2.8 clients read", () => {
-    expect(redirects).toContainEqual({
-      from: "/users/oidc-config",
-      to: "/config",
-    });
-  });
-
-  it("redirects /users/oidc/callback, which identity providers were set up with before 2.9", () => {
-    expect(redirects).toContainEqual({
-      from: "/users/oidc/callback",
-      to: "/callback",
-      status: 308,
-    });
-  });
-
-  it("redirects /users/oidc/backchannel-logout, which identity providers send back-channel logouts to", () => {
-    expect(redirects).toContainEqual({
-      from: "/users/oidc/backchannel-logout",
-      to: "/backchannel-logout",
-      status: 308,
-    });
-  });
-});
diff --git a/plugins/sso/tests/backend/oidc-protocol.test.ts b/plugins/sso/tests/backend/oidc-protocol.test.ts
deleted file mode 100644
index 4e7e513a4..000000000
--- a/plugins/sso/tests/backend/oidc-protocol.test.ts
+++ /dev/null
@@ -1,533 +0,0 @@
-import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
-
-import {
-  describeFetchFailure,
-  extractOidcGroups,
-  extractOidcGroupsFromSources,
-  parseOidcRoleMap,
-  resolveOidcMappedRoles,
-  validateLogoutTokenClaims,
-  verifyOIDCToken,
-} from "../../src/backend/oidc-protocol.js";
-import {
-  getOidcConfigFromEnv as getOIDCConfigFromEnv,
-  isEnvOverrideEnabled as isOIDCEnvOverrideEnabled,
-} from "../../src/backend/providers.js";
-
-const BACKCHANNEL_LOGOUT_EVENT =
-  "http://schemas.openid.net/event/backchannel-logout";
-
-afterEach(() => {
-  vi.restoreAllMocks();
-});
-
-describe("describeFetchFailure", () => {
-  it("unwraps the undici cause, which carries the reason that matters", () => {
-    // Every transport failure surfaces as this same outer message.
-    const error = new TypeError("fetch failed", {
-      cause: Object.assign(new Error("getaddrinfo ENOTFOUND idp.example"), {
-        code: "ENOTFOUND",
-      }),
-    });
-    expect(describeFetchFailure(error)).toBe(
-      "fetch failed: getaddrinfo ENOTFOUND idp.example (ENOTFOUND)",
-    );
-  });
-
-  it("falls back to the outer message when there is no cause", () => {
-    expect(describeFetchFailure(new Error("boom"))).toBe("boom");
-  });
-
-  it("handles a non-Error throw", () => {
-    expect(describeFetchFailure("nope")).toBe("nope");
-  });
-});
-
-describe("verifyOIDCToken JWKS diagnostics", () => {
-  const issuer = "https://login.microsoftonline.com/example/v2.0";
-  const token = "header.payload.signature";
-
-  it("reports every attempted URL and why it failed", async () => {
-    vi.spyOn(globalThis, "fetch").mockResolvedValue(
-      new Response("not found", { status: 404 }),
-    );
-
-    const error = await verifyOIDCToken(token, issuer, "client").catch(
-      (e) => e as Error,
-    );
-    expect(error.message).toMatch(/^Failed to fetch JWKS from any URL/);
-    expect(error.message).toContain(
-      `${issuer}/.well-known/openid-configuration: HTTP 404`,
-    );
-    expect(error.message).toContain(
-      `${issuer}/.well-known/jwks.json: HTTP 404`,
-    );
-    expect(error.message).toContain(`${issuer}/jwks/: HTTP 404`);
-  });
-
-  it("reports a transport failure with its underlying cause", async () => {
-    vi.spyOn(globalThis, "fetch").mockRejectedValue(
-      new TypeError("fetch failed", {
-        cause: Object.assign(new Error("self-signed certificate"), {
-          code: "SELF_SIGNED_CERT_IN_CHAIN",
-        }),
-      }),
-    );
-
-    const error = await verifyOIDCToken(token, issuer, "client").catch(
-      (e) => e as Error,
-    );
-    expect(error.message).toContain(
-      "self-signed certificate (SELF_SIGNED_CERT_IN_CHAIN)",
-    );
-  });
-
-  it("says so when discovery succeeds but advertises no jwks_uri", async () => {
-    vi.spyOn(globalThis, "fetch")
-      .mockResolvedValueOnce(
-        new Response(JSON.stringify({ issuer }), { status: 200 }),
-      )
-      .mockResolvedValue(new Response("not found", { status: 404 }));
-
-    const error = await verifyOIDCToken(token, issuer, "client").catch(
-      (e) => e as Error,
-    );
-    expect(error.message).toContain("no jwks_uri in the discovery document");
-  });
-
-  it("says so when a JWKS response carries no keys array", async () => {
-    vi.spyOn(globalThis, "fetch")
-      .mockResolvedValueOnce(
-        new Response(JSON.stringify({ jwks_uri: "https://idp.example/keys" }), {
-          status: 200,
-        }),
-      )
-      .mockResolvedValue(
-        new Response(JSON.stringify({ error: "unauthorized" }), {
-          status: 200,
-        }),
-      );
-
-    const error = await verifyOIDCToken(token, issuer, "client").catch(
-      (e) => e as Error,
-    );
-    expect(error.message).toContain(
-      'https://idp.example/keys: response contains no "keys" array',
-    );
-  });
-});
-
-describe("verifyOIDCToken", () => {
-  it("accepts a discovery document URL as the configured issuer", async () => {
-    const { exportJWK, generateKeyPair, SignJWT } = await import("jose");
-    const { publicKey, privateKey } = await generateKeyPair("RS256");
-    const jwk = await exportJWK(publicKey);
-    jwk.kid = "google-key";
-
-    const issuer = "https://accounts.google.com";
-    const clientId = "termix-client";
-    const token = await new SignJWT({ sub: "user-1" })
-      .setProtectedHeader({ alg: "RS256", kid: jwk.kid })
-      .setIssuer(issuer)
-      .setAudience(clientId)
-      .setExpirationTime("5m")
-      .sign(privateKey);
-
-    const fetchMock = vi
-      .spyOn(globalThis, "fetch")
-      .mockResolvedValueOnce(
-        new Response(JSON.stringify({ jwks_uri: `${issuer}/keys` }), {
-          status: 200,
-        }),
-      )
-      .mockResolvedValueOnce(
-        new Response(JSON.stringify({ keys: [jwk] }), { status: 200 }),
-      );
-
-    const payload = await verifyOIDCToken(
-      token,
-      `${issuer}/.well-known/openid-configuration`,
-      clientId,
-    );
-
-    expect(payload.sub).toBe("user-1");
-    expect(fetchMock).toHaveBeenNthCalledWith(
-      1,
-      `${issuer}/.well-known/openid-configuration`,
-      {},
-    );
-  });
-
-  it("uses the protected-header algorithm when the provider JWK omits alg", async () => {
-    const { exportJWK, generateKeyPair, SignJWT } = await import("jose");
-    const { publicKey, privateKey } = await generateKeyPair("RS256");
-    const jwk = await exportJWK(publicKey);
-    jwk.kid = "entra-key";
-
-    const issuer = "https://login.microsoftonline.com/example/v2.0";
-    const clientId = "termix-client";
-    const token = await new SignJWT({ sub: "user-1" })
-      .setProtectedHeader({ alg: "RS256", kid: jwk.kid })
-      .setIssuer(issuer)
-      .setAudience(clientId)
-      .setExpirationTime("5m")
-      .sign(privateKey);
-
-    const fetchMock = vi
-      .spyOn(globalThis, "fetch")
-      .mockResolvedValueOnce(
-        new Response(JSON.stringify({ jwks_uri: "https://idp.example/keys" }), {
-          status: 200,
-        }),
-      )
-      .mockResolvedValueOnce(
-        new Response(JSON.stringify({ keys: [jwk] }), { status: 200 }),
-      );
-
-    const payload = await verifyOIDCToken(token, issuer, clientId);
-
-    expect(payload.sub).toBe("user-1");
-    expect(fetchMock).toHaveBeenCalledTimes(2);
-  });
-});
-
-describe("getOIDCConfigFromEnv", () => {
-  const REQUIRED = [
-    "OIDC_CLIENT_ID",
-    "OIDC_CLIENT_SECRET",
-    "OIDC_ISSUER_URL",
-    "OIDC_AUTHORIZATION_URL",
-    "OIDC_TOKEN_URL",
-  ];
-  const OPTIONAL = [
-    "OIDC_USERINFO_URL",
-    "OIDC_IDENTIFIER_PATH",
-    "OIDC_NAME_PATH",
-    "OIDC_SCOPES",
-    "OIDC_ALLOWED_USERS",
-    "OIDC_ADMIN_GROUP",
-    "OIDC_ENV_OVERRIDE",
-  ];
-  const saved: Record<string, string | undefined> = {};
-
-  beforeEach(() => {
-    for (const key of [...REQUIRED, ...OPTIONAL]) {
-      saved[key] = process.env[key];
-      delete process.env[key];
-    }
-  });
-
-  afterEach(() => {
-    for (const key of [...REQUIRED, ...OPTIONAL]) {
-      if (saved[key] === undefined) delete process.env[key];
-      else process.env[key] = saved[key];
-    }
-  });
-
-  it("returns null when any required variable is missing", () => {
-    process.env.OIDC_CLIENT_ID = "id";
-    process.env.OIDC_CLIENT_SECRET = "secret";
-    // issuer/authorization/token urls intentionally missing
-    expect(getOIDCConfigFromEnv()).toBeNull();
-  });
-
-  it("builds a config with defaults when all required vars are present", () => {
-    process.env.OIDC_CLIENT_ID = "id";
-    process.env.OIDC_CLIENT_SECRET = "secret";
-    process.env.OIDC_ISSUER_URL = "https://idp.example";
-    process.env.OIDC_AUTHORIZATION_URL = "https://idp.example/auth";
-    process.env.OIDC_TOKEN_URL = "https://idp.example/token";
-
-    const config = getOIDCConfigFromEnv();
-    expect(config).not.toBeNull();
-    expect(config?.client_id).toBe("id");
-    expect(config?.identifier_path).toBe("sub");
-    expect(config?.name_path).toBe("name");
-    expect(config?.scopes).toBe("openid email profile");
-    expect(config?.userinfo_url).toBe("");
-  });
-
-  it("honors overrides for optional vars", () => {
-    process.env.OIDC_CLIENT_ID = "id";
-    process.env.OIDC_CLIENT_SECRET = "secret";
-    process.env.OIDC_ISSUER_URL = "https://idp.example";
-    process.env.OIDC_AUTHORIZATION_URL = "https://idp.example/auth";
-    process.env.OIDC_TOKEN_URL = "https://idp.example/token";
-    process.env.OIDC_IDENTIFIER_PATH = "email";
-    process.env.OIDC_SCOPES = "openid";
-
-    const config = getOIDCConfigFromEnv();
-    expect(config?.identifier_path).toBe("email");
-    expect(config?.scopes).toBe("openid");
-  });
-
-  it("only enables database recovery override when explicitly requested", () => {
-    expect(isOIDCEnvOverrideEnabled()).toBe(false);
-    process.env.OIDC_ENV_OVERRIDE = "true";
-    expect(isOIDCEnvOverrideEnabled()).toBe(true);
-  });
-});
-
-describe("extractOidcGroups", () => {
-  it("reads the standard groups claim as an array", () => {
-    expect(extractOidcGroups({ groups: ["admin", "user"] })).toEqual([
-      "admin",
-      "user",
-    ]);
-  });
-
-  it("splits a comma-separated string claim", () => {
-    expect(extractOidcGroups({ roles: "admin, user" })).toEqual([
-      "admin",
-      "user",
-    ]);
-  });
-
-  it("falls back through groups, roles, then group", () => {
-    expect(extractOidcGroups({ group: "ops" })).toEqual(["ops"]);
-  });
-
-  it("reads a custom claim path when provided", () => {
-    const userInfo = {
-      "zitadel:grants:groups:123": ["user", "admin"],
-      groups: ["ignored"],
-    };
-    expect(extractOidcGroups(userInfo, "zitadel:grants:groups:123")).toEqual([
-      "user",
-      "admin",
-    ]);
-  });
-
-  it("uses object keys as group names (Zitadel roles object)", () => {
-    const userInfo = {
-      "urn:zitadel:iam:org:project:roles": { admin: {}, user: {} },
-    };
-    expect(
-      extractOidcGroups(userInfo, "urn:zitadel:iam:org:project:roles"),
-    ).toEqual(["admin", "user"]);
-  });
-
-  it("falls back to defaults when the custom claim is absent", () => {
-    expect(extractOidcGroups({ groups: ["admin"] }, "missing")).toEqual([
-      "admin",
-    ]);
-  });
-
-  it("returns an empty array when no groups are present", () => {
-    expect(extractOidcGroups({})).toEqual([]);
-  });
-});
-
-describe("extractOidcGroupsFromSources", () => {
-  it("preserves ID token groups when userinfo omits them", () => {
-    expect(
-      extractOidcGroupsFromSources([
-        { groups: ["admins", "users"] },
-        { sub: "user-1", name: "Example User" },
-      ]),
-    ).toEqual(["admins", "users"]);
-  });
-
-  it("combines and deduplicates groups from both verified sources", () => {
-    expect(
-      extractOidcGroupsFromSources([
-        { roles: ["users", "operators"] },
-        { roles: ["operators", "admins"] },
-      ]),
-    ).toEqual(["users", "operators", "admins"]);
-  });
-
-  it("supports a configured group claim across sources", () => {
-    expect(
-      extractOidcGroupsFromSources(
-        [{ custom_groups: ["admins"] }, { custom_groups: ["users"] }],
-        "custom_groups",
-      ),
-    ).toEqual(["admins", "users"]);
-  });
-});
-
-describe("validateLogoutTokenClaims", () => {
-  const validClaims = {
-    sub: "subject-1",
-    sid: "session-1",
-    iat: 1_783_641_600,
-    jti: "logout-1",
-    events: { [BACKCHANNEL_LOGOUT_EVENT]: {} },
-  };
-
-  it("accepts a spec-compliant back-channel logout payload", () => {
-    expect(validateLogoutTokenClaims(validClaims)).toEqual({
-      sub: "subject-1",
-      sid: "session-1",
-      jti: "logout-1",
-    });
-  });
-
-  it("requires the logout event to contain an object", () => {
-    expect(() =>
-      validateLogoutTokenClaims({
-        ...validClaims,
-        events: { [BACKCHANNEL_LOGOUT_EVENT]: true },
-      }),
-    ).toThrow("missing back-channel logout event");
-  });
-
-  it("requires iat and jti claims", () => {
-    expect(() =>
-      validateLogoutTokenClaims({ ...validClaims, iat: undefined }),
-    ).toThrow("missing iat claim");
-    expect(() =>
-      validateLogoutTokenClaims({ ...validClaims, jti: "" }),
-    ).toThrow("missing jti claim");
-  });
-
-  it("rejects nonce and requires sub or sid", () => {
-    expect(() =>
-      validateLogoutTokenClaims({ ...validClaims, nonce: "forbidden" }),
-    ).toThrow("must not contain a nonce");
-    expect(() =>
-      validateLogoutTokenClaims({ ...validClaims, sub: null, sid: null }),
-    ).toThrow("must contain sub and/or sid");
-  });
-});
-
-describe("parseOidcRoleMap", () => {
-  it("returns an empty map for blank input", () => {
-    expect(parseOidcRoleMap(undefined).size).toBe(0);
-    expect(parseOidcRoleMap(null).size).toBe(0);
-    expect(parseOidcRoleMap("   ").size).toBe(0);
-  });
-
-  it("parses comma-separated group:role pairs", () => {
-    const map = parseOidcRoleMap(
-      "devops-interns:devops-intern,devops-seniors:devops-senior",
-    );
-    expect(map.get("devops-interns")).toBe("devops-intern");
-    expect(map.get("devops-seniors")).toBe("devops-senior");
-    expect(map.size).toBe(2);
-  });
-
-  it("parses newline-separated pairs and trims whitespace", () => {
-    const map = parseOidcRoleMap("  a : role-a \n b:role-b \n");
-    expect(map.get("a")).toBe("role-a");
-    expect(map.get("b")).toBe("role-b");
-  });
-
-  it("normalizes leading slashes and case in group names", () => {
-    const map = parseOidcRoleMap("/DevOps-Interns:devops-intern");
-    expect(map.get("devops-interns")).toBe("devops-intern");
-  });
-
-  it("skips malformed entries instead of throwing", () => {
-    const map = parseOidcRoleMap("no-colon,:missing-group,missing-role:,ok:r");
-    expect(map.size).toBe(1);
-    expect(map.get("ok")).toBe("r");
-  });
-
-  it("splits on the last colon so group names may contain colons", () => {
-    const map = parseOidcRoleMap("ns:team:role-x");
-    expect(map.get("ns:team")).toBe("role-x");
-  });
-
-  it("preserves role-name case verbatim", () => {
-    // Role names must match roles.name exactly, so they are not lowercased.
-    expect(parseOidcRoleMap("g:DevOps_Senior").get("g")).toBe("DevOps_Senior");
-  });
-});
-
-describe("resolveOidcMappedRoles", () => {
-  const roleMap = parseOidcRoleMap(
-    "devops-interns:devops-intern,devops-seniors:devops-senior",
-  );
-
-  it("reports every mapped role as managed regardless of membership", () => {
-    const { managed } = resolveOidcMappedRoles([], roleMap);
-    expect([...managed].sort()).toEqual(["devops-intern", "devops-senior"]);
-  });
-
-  it("desires only the roles whose groups the user is in", () => {
-    const { desired } = resolveOidcMappedRoles(["devops-interns"], roleMap);
-    expect([...desired]).toEqual(["devops-intern"]);
-  });
-
-  it("matches full group paths emitted by Keycloak", () => {
-    const { desired } = resolveOidcMappedRoles(["/devops-seniors"], roleMap);
-    expect([...desired]).toEqual(["devops-senior"]);
-  });
-
-  it("ignores groups that are not mapped", () => {
-    const { desired } = resolveOidcMappedRoles(
-      ["finance", "devops-interns"],
-      roleMap,
-    );
-    expect([...desired]).toEqual(["devops-intern"]);
-  });
-
-  it("supports a user in multiple mapped groups", () => {
-    const { desired } = resolveOidcMappedRoles(
-      ["devops-interns", "devops-seniors"],
-      roleMap,
-    );
-    expect([...desired].sort()).toEqual(["devops-intern", "devops-senior"]);
-  });
-
-  it("desires nothing when the map is empty", () => {
-    const { desired, managed } = resolveOidcMappedRoles(
-      ["devops-interns"],
-      new Map(),
-    );
-    expect(desired.size).toBe(0);
-    expect(managed.size).toBe(0);
-  });
-});
-
-// Imported as a namespace rather than destructured into the shared block at the
-// top of the file, so this suite stays independent of what that block binds.
-const oidcUtils = await import("../../src/backend/oidc-protocol.js");
-
-describe("verifyOIDCToken token shape", () => {
-  const issuer = "https://idp.example.com/application/o/termix";
-
-  // The shape check runs before any network call, so no fetch stub is needed.
-  const fetchSpy = vi.fn();
-  beforeEach(() => {
-    vi.stubGlobal("fetch", fetchSpy);
-  });
-  afterEach(() => {
-    vi.unstubAllGlobals();
-    fetchSpy.mockReset();
-  });
-
-  it("reports an encrypted (JWE) token as a format error", async () => {
-    const jwe = ["header", "key", "iv", "ciphertext", "tag"].join(".");
-
-    await expect(
-      oidcUtils.verifyOIDCToken(jwe, issuer, "client"),
-    ).rejects.toThrow(oidcUtils.OIDCTokenFormatError);
-    await expect(
-      oidcUtils.verifyOIDCToken(jwe, issuer, "client"),
-    ).rejects.toThrow(/JWE \(encrypted\)/);
-    expect(fetchSpy).not.toHaveBeenCalled();
-  });
-
-  it("reports any other non-JWS segment count as a format error", async () => {
-    await expect(
-      oidcUtils.verifyOIDCToken("header.payload", issuer, "client"),
-    ).rejects.toThrow(/expected 3 segments, got 2/);
-    await expect(
-      oidcUtils.verifyOIDCToken("opaque", issuer, "client"),
-    ).rejects.toThrow(/expected 3 segments, got 1/);
-    expect(fetchSpy).not.toHaveBeenCalled();
-  });
-
-  it("lets a three-segment token through to key resolution", async () => {
-    fetchSpy.mockResolvedValue({ ok: false });
-
-    // Reaches JWKS fetching, so it fails on the key lookup rather than the shape.
-    await expect(
-      oidcUtils.verifyOIDCToken("header.payload.signature", issuer, "client"),
-    ).rejects.not.toThrow(oidcUtils.OIDCTokenFormatError);
-    expect(fetchSpy).toHaveBeenCalled();
-  });
-});
diff --git a/plugins/sso/tests/backend/sso.test.ts b/plugins/sso/tests/backend/sso.test.ts
deleted file mode 100644
index 0b6251557..000000000
--- a/plugins/sso/tests/backend/sso.test.ts
+++ /dev/null
@@ -1,462 +0,0 @@
-import { createHash } from "node:crypto";
-import { afterEach, describe, expect, it, vi } from "vitest";
-import {
-  LEGACY_DDL,
-  OIDC_CONFIG,
-  installIdp,
-  startServer,
-  type TestServer,
-} from "./helpers.js";
-
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-  vi.unstubAllGlobals();
-  vi.unstubAllEnvs();
-});
-
-/** A 2.8 database: one OIDC provider and one LDAP directory in one table. */
-function legacyRows(
-  sqlite: Parameters<
-    NonNullable<Parameters<typeof startServer>[0]>["before"]
-  >[0],
-) {
-  sqlite.exec(LEGACY_DDL);
-  const insert = sqlite.prepare(
-    "INSERT INTO sso_providers (id, name, type, enabled, config) VALUES (?, ?, ?, ?, ?)",
-  );
-  insert.run(3, "Keycloak", "oidc", 1, JSON.stringify(OIDC_CONFIG));
-  insert.run(4, "Corp LDAP", "ldap", 1, '{"host":"ldap.example"}');
-}
-
-async function startLegacy(options: Parameters<typeof startServer>[0] = {}) {
-  server = await startServer({ before: legacyRows, ...options });
-  return server;
-}
-
-/** Runs /start and returns the state the provider would echo back. */
-async function beginLogin(s: TestServer, query = "provider=3") {
-  const started = await s.request("GET", `/start?${query}`, {
-    headers: { referer: "https://app.termix.test/login" },
-  });
-  expect(started.status).toBe(302);
-  return new URL(started.location!);
-}
-
-describe("adopting sso_providers", () => {
-  it("keeps every provider and marks the old ones for the 2.8 redirect URI", async () => {
-    const s = await startLegacy();
-    const rows = s.db.sqlite
-      .prepare(
-        "SELECT id, type, legacy_callback FROM p_sso_providers ORDER BY id",
-      )
-      .all();
-    expect(rows).toEqual([
-      { id: 3, type: "oidc", legacy_callback: 1 },
-      { id: 4, type: "ldap", legacy_callback: 1 },
-    ]);
-
-    const listed = await s.request("GET", "/providers");
-    expect(listed.status).toBe(200);
-    // LDAP rows are the ldap plugin's; they are not listed here.
-    expect(listed.body.providers).toHaveLength(1);
-    expect(listed.body.providers[0]).toMatchObject({
-      id: 3,
-      name: "Keycloak",
-      legacyCallback: true,
-      hasClientSecret: true,
-      redirectUri: "https://termix.test/users/oidc/callback",
-    });
-    expect(listed.body.providers[0].config.client_secret).toBeUndefined();
-    expect(listed.body.newRedirectUri).toBe(
-      "https://termix.test/plugin-api/sso/callback",
-    );
-  });
-
-  it("creates a fresh table on a new install", async () => {
-    server = await startServer();
-    const created = await server.request("POST", "/providers", {
-      body: { name: "Keycloak", type: "oidc", config: OIDC_CONFIG },
-    });
-    expect(created.status).toBe(201);
-    expect(created.body).toMatchObject({
-      legacyCallback: false,
-      redirectUri: "https://termix.test/plugin-api/sso/callback",
-    });
-    const stored = server.db.sqlite
-      .prepare("SELECT config FROM p_sso_providers")
-      .get() as { config: string };
-    expect(JSON.parse(stored.config).client_secret).toMatch(/^sealed:/);
-  });
-
-  it("reads secrets 2.8 stored base64 encoded", async () => {
-    server = await startServer({
-      before: (sqlite) => {
-        sqlite.exec(LEGACY_DDL);
-        sqlite
-          .prepare(
-            "INSERT INTO sso_providers (id, name, type, config) VALUES (1, 'Old', 'oidc', ?)",
-          )
-          .run(
-            JSON.stringify({
-              ...OIDC_CONFIG,
-              client_secret: `encoded:${Buffer.from("old-secret").toString("base64")}`,
-            }),
-          );
-      },
-    });
-    const idp = await installIdp();
-    idp.claims = { sub: "sub-1" };
-    const url = await beginLogin(server, "provider=1");
-    idp.claims.nonce = url.searchParams.get("nonce");
-    await server.request(
-      "GET",
-      `/callback?code=c&state=${url.searchParams.get("state")}`,
-    );
-    expect(idp.tokenRequests[0].get("client_secret")).toBe("old-secret");
-  });
-});
-
-describe("provider admin routes", () => {
-  it("need sso.manage", async () => {
-    const s = await startLegacy({ permissions: [] });
-    for (const [method, path] of [
-      ["GET", "/providers"],
-      ["POST", "/providers"],
-      ["PUT", "/providers/3"],
-      ["DELETE", "/providers/3"],
-    ]) {
-      expect((await s.request(method, path, { body: {} })).status).toBe(403);
-    }
-    // The public routes stay reachable.
-    expect((await s.request("GET", "/config")).status).toBe(200);
-  });
-
-  it("keeps a secret that is not sent again and can leave the old redirect URI", async () => {
-    const s = await startLegacy();
-    const updated = await s.request("PUT", "/providers/3", {
-      body: { legacyCallback: false, config: { client_secret: "" } },
-    });
-    expect(updated.body).toMatchObject({
-      legacyCallback: false,
-      hasClientSecret: true,
-      redirectUri: "https://termix.test/plugin-api/sso/callback",
-    });
-  });
-
-  it("validates a new provider", async () => {
-    const s = await startLegacy();
-    const missing = await s.request("POST", "/providers", {
-      body: { name: "X", type: "oidc", config: { client_id: "a" } },
-    });
-    expect(missing.status).toBe(400);
-    const userinfo = await s.request("POST", "/providers", {
-      body: {
-        name: "X",
-        type: "oidc",
-        config: { ...OIDC_CONFIG, issuer_url: "https://idp.example/userinfo" },
-      },
-    });
-    expect(userinfo.status).toBe(400);
-    const ldap = await s.request("POST", "/providers", {
-      body: { name: "X", type: "ldap", config: {} },
-    });
-    expect(ldap.status).toBe(400);
-  });
-
-  it("will not delete a provider people still sign in with", async () => {
-    const s = await startLegacy({ linkedUsers: { "3": 2 } });
-    expect((await s.request("DELETE", "/providers/3")).status).toBe(409);
-  });
-});
-
-describe("the login method", () => {
-  it("offers one button per enabled provider", async () => {
-    const s = await startLegacy();
-    const method = s.mock.auth.loginMethods[0];
-    expect(method).toMatchObject({
-      id: "oidc",
-      kind: "redirect",
-      external: true,
-    });
-    expect(await method.describe!()).toEqual([
-      { id: "3", label: "Keycloak", type: "oidc", enabled: true },
-    ]);
-  });
-
-  it("marks the first provider to start on its own with silent sign-in on", async () => {
-    const s = await startLegacy({ settings: { silentLoginDefault: true } });
-    expect(await s.mock.auth.loginMethods[0].describe!()).toEqual([
-      {
-        id: "3",
-        label: "Keycloak",
-        type: "oidc",
-        enabled: true,
-        autoStart: true,
-      },
-    ]);
-  });
-
-  it("lets OIDC_SILENT_LOGIN_DEFAULT override the setting", async () => {
-    const s = await startLegacy({ settings: { silentLoginDefault: true } });
-    vi.stubEnv("OIDC_SILENT_LOGIN_DEFAULT", "false");
-    const [instance] = await s.mock.auth.loginMethods[0].describe!();
-    expect(instance.autoStart).toBeUndefined();
-    vi.stubEnv("OIDC_SILENT_LOGIN_DEFAULT", "true");
-    s.mock.settings.clear();
-    expect((await s.mock.auth.loginMethods[0].describe!())[0].autoStart).toBe(
-      true,
-    );
-  });
-
-  it("falls back to the provider configured through the environment", async () => {
-    server = await startServer();
-    vi.stubEnv("OIDC_CLIENT_ID", "env-client");
-    vi.stubEnv("OIDC_CLIENT_SECRET", "env-secret");
-    vi.stubEnv("OIDC_ISSUER_URL", "https://idp.example");
-    vi.stubEnv("OIDC_AUTHORIZATION_URL", "https://idp.example/authorize");
-    vi.stubEnv("OIDC_TOKEN_URL", "https://idp.example/token");
-    expect(await server.mock.auth.loginMethods[0].describe!()).toEqual([
-      { id: "0", label: "SSO", type: "oidc", enabled: true },
-    ]);
-    const url = await beginLogin(server, "provider=0");
-    expect(url.searchParams.get("redirect_uri")).toBe(
-      "https://termix.test/users/oidc/callback",
-    );
-  });
-
-  it("starts with PKCE and the redirect URI the provider was set up with", async () => {
-    const s = await startLegacy();
-    const url = await beginLogin(s);
-    expect(url.origin + url.pathname).toBe("https://idp.example/authorize");
-    expect(url.searchParams.get("redirect_uri")).toBe(
-      "https://termix.test/users/oidc/callback",
-    );
-    expect(url.searchParams.get("code_challenge_method")).toBe("S256");
-    expect(url.searchParams.get("code_challenge")).toBeTruthy();
-    expect([...s.mock.kv.keys()]).toEqual([
-      `state:${url.searchParams.get("state")}`,
-    ]);
-  });
-
-  it("answers 404 for a provider that does not exist", async () => {
-    const s = await startLegacy();
-    expect((await s.request("GET", "/start?provider=99")).status).toBe(404);
-    // An LDAP row is not an SSO provider.
-    expect((await s.request("GET", "/start?provider=4")).status).toBe(404);
-  });
-});
-
-describe("the callback", () => {
-  it("verifies the id token and hands core the identity", async () => {
-    const s = await startLegacy();
-    const idp = await installIdp();
-    const url = await beginLogin(s);
-    idp.claims = {
-      sub: "sub-1",
-      sid: "sid-1",
-      name: "Alice",
-      nonce: url.searchParams.get("nonce"),
-      groups: ["termix-admins", "ops-team"],
-    };
-
-    const callback = await s.request(
-      "GET",
-      `/callback?code=abc&state=${url.searchParams.get("state")}`,
-    );
-    expect(callback.status).toBe(200);
-    expect(callback.body.identity).toMatchObject({
-      kind: "external",
-      provider: "3",
-      subject: "sub-1",
-      name: "Alice",
-      email: "alice@example.com",
-      isAdmin: true,
-      roles: { desired: ["ops"], managed: ["ops"] },
-      logoutClaims: { providerId: 3, sub: "sub-1", sid: "sid-1" },
-      legacy: { identifier: "sub-1", providerRowId: 3 },
-      returnTo: "https://app.termix.test",
-    });
-
-    const token = idp.tokenRequests[0];
-    expect(token.get("redirect_uri")).toBe(
-      "https://termix.test/users/oidc/callback",
-    );
-    expect(token.get("code_verifier")).toBeTruthy();
-    // The state is used up.
-    expect(s.mock.kv.size).toBe(0);
-  });
-
-  it("accepts the provider's answer as a form post", async () => {
-    const s = await startLegacy();
-    const idp = await installIdp();
-    const url = await beginLogin(s);
-    idp.claims = { sub: "sub-1", nonce: url.searchParams.get("nonce") };
-    const callback = await s.request("POST", "/callback", {
-      form: { code: "abc", state: url.searchParams.get("state")! },
-    });
-    expect(callback.body.identity.subject).toBe("sub-1");
-  });
-
-  it("sends the user back with an error on a nonce mismatch", async () => {
-    const s = await startLegacy();
-    const idp = await installIdp();
-    const url = await beginLogin(s);
-    idp.claims = { sub: "sub-1", nonce: "someone-elses" };
-    const callback = await s.request(
-      "GET",
-      `/callback?code=abc&state=${url.searchParams.get("state")}`,
-    );
-    expect(callback.status).toBe(302);
-    expect(callback.location).toMatch(/^https:\/\/app\.termix\.test\/\?error=/);
-    expect(s.mock.auth.completedLogins).toHaveLength(0);
-  });
-
-  it("refuses an unknown or replayed state", async () => {
-    const s = await startLegacy();
-    const idp = await installIdp();
-    const url = await beginLogin(s);
-    idp.claims = { sub: "sub-1", nonce: url.searchParams.get("nonce") };
-    const state = url.searchParams.get("state");
-    expect(
-      (await s.request("GET", `/callback?code=a&state=${state}`)).status,
-    ).toBe(200);
-    expect(
-      (await s.request("GET", `/callback?code=a&state=${state}`)).status,
-    ).toBe(400);
-    expect((await s.request("GET", "/callback?code=a&state=nope")).status).toBe(
-      400,
-    );
-  });
-
-  it("signs GitHub users in by their numeric id", async () => {
-    server = await startServer();
-    const created = await server.request("POST", "/providers", {
-      body: {
-        name: "GitHub",
-        type: "github",
-        config: { client_id: "gh", client_secret: "gh-secret" },
-      },
-    });
-    const idp = await installIdp();
-    idp.routes.set("https://github.com/login/oauth/access_token", () =>
-      Response.json({ access_token: "gh-token" }),
-    );
-    idp.routes.set("https://api.github.com/user", () =>
-      Response.json({ id: 42, login: "octo" }),
-    );
-    idp.routes.set("https://api.github.com/user/emails", () =>
-      Response.json([
-        { email: "octo@example.com", primary: true, verified: true },
-      ]),
-    );
-    const url = await beginLogin(server, `provider=${created.body.id}`);
-    const callback = await server.request(
-      "GET",
-      `/callback?code=abc&state=${url.searchParams.get("state")}`,
-    );
-    const exchange = vi
-      .mocked(fetch)
-      .mock.calls.find(
-        ([url]) =>
-          String(url) === "https://github.com/login/oauth/access_token",
-      );
-    const token = new URLSearchParams(String(exchange?.[1]?.body));
-    const verifier = token.get("code_verifier");
-    expect(verifier).toBeTruthy();
-    expect(url.searchParams.get("code_challenge_method")).toBe("S256");
-    expect(createHash("sha256").update(verifier!).digest("base64url")).toBe(
-      url.searchParams.get("code_challenge"),
-    );
-    expect(callback.body.identity).toMatchObject({
-      provider: String(created.body.id),
-      subject: "42",
-      name: "octo",
-      email: "octo@example.com",
-      legacy: { identifier: `github:${created.body.id}:42` },
-    });
-  });
-});
-
-describe("back-channel logout", () => {
-  const event = {
-    "http://schemas.openid.net/event/backchannel-logout": {},
-  };
-
-  it("ends the sessions from that provider login, once per token", async () => {
-    const s = await startLegacy();
-    const idp = await installIdp();
-    const token = await idp.sign({ sid: "sid-1", jti: "j1", events: event });
-
-    const first = await s.request("POST", "/backchannel-logout", {
-      form: { logout_token: token },
-    });
-    expect(first.status).toBe(200);
-    expect(s.mock.auth.revokedSessions).toEqual([
-      { providerId: 3, sub: null, sid: "sid-1" },
-    ]);
-
-    const replay = await s.request("POST", "/backchannel-logout", {
-      form: { logout_token: token },
-    });
-    expect(replay.status).toBe(200);
-    expect(s.mock.auth.revokedSessions).toHaveLength(1);
-  });
-
-  it("refuses a token that is missing, unsigned or from an unknown issuer", async () => {
-    const s = await startLegacy();
-    const idp = await installIdp();
-    expect(
-      (await s.request("POST", "/backchannel-logout", { form: {} })).status,
-    ).toBe(400);
-    const withNonce = await idp.sign({
-      sid: "s",
-      jti: "j2",
-      nonce: "n",
-      events: event,
-    });
-    expect(
-      (
-        await s.request("POST", "/backchannel-logout", {
-          form: { logout_token: withNonce },
-        })
-      ).status,
-    ).toBe(400);
-    const header = Buffer.from('{"alg":"none"}').toString("base64url");
-    const body = Buffer.from('{"iss":"https://elsewhere.example"}').toString(
-      "base64url",
-    );
-    expect(
-      (
-        await s.request("POST", "/backchannel-logout", {
-          form: { logout_token: `${header}.${body}.x` },
-        })
-      ).status,
-    ).toBe(400);
-    expect(s.mock.auth.revokedSessions).toHaveLength(0);
-  });
-});
-
-describe("capabilities", () => {
-  it.each(["db:own", "auth:provide", "network:serve"])(
-    "activate fails closed without %s",
-    async (capability) => {
-      const { manifest } = await import("./helpers.js");
-      await expect(
-        startServer({
-          capabilities: manifest.capabilities.filter((c) => c !== capability),
-        }),
-      ).rejects.toThrow();
-    },
-  );
-
-  it("cannot start a login without kv:own", async () => {
-    const { manifest } = await import("./helpers.js");
-    const s = await startLegacy({
-      capabilities: manifest.capabilities.filter((c) => c !== "kv:own"),
-    });
-    expect((await s.request("GET", "/start?provider=3")).status).toBe(500);
-  });
-});
diff --git a/plugins/sso/tests/frontend/activate.test.tsx b/plugins/sso/tests/frontend/activate.test.tsx
deleted file mode 100644
index a0875ad69..000000000
--- a/plugins/sso/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,112 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { fireEvent, screen, waitFor } from "@testing-library/react";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-const providers = {
-  providers: [
-    {
-      id: 3,
-      name: "Keycloak",
-      type: "oidc",
-      enabled: true,
-      displayOrder: 0,
-      legacyCallback: true,
-      config: { client_id: "termix" },
-      hasClientSecret: true,
-      redirectUri: "https://termix.test/users/oidc/callback",
-    },
-  ],
-  newRedirectUri: "https://termix.test/plugin-api/sso/callback",
-};
-
-describe(`${manifest.id} activate`, () => {
-  it("registers the login buttons and the provider settings", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.loginMethods()).toEqual(["oidc"]);
-    expect(rendered.registered.settingsComponents()).toEqual(["providers"]);
-  });
-
-  it("draws a button per provider that starts the redirect", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    const startRedirect = vi.fn(async () => {});
-    rendered.renderLoginMethod("oidc", {
-      instances: [
-        { id: "3", label: "Keycloak" },
-        { id: "5", label: "Google" },
-      ],
-      startRedirect,
-    });
-    fireEvent.click(screen.getByText("Login with Google"));
-    await waitFor(() => expect(startRedirect).toHaveBeenCalledWith("5"));
-    expect(screen.getByText("Login with Keycloak")).toBeTruthy();
-  });
-
-  it("lists providers with the redirect URI to register", async () => {
-    const get = vi.fn(async () => ({ data: providers }));
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: { get } as never,
-    });
-    rendered.renderSettingsComponent("providers");
-    expect(await screen.findByText("Keycloak")).toBeTruthy();
-    expect(
-      screen.getByText("https://termix.test/users/oidc/callback"),
-    ).toBeTruthy();
-    expect(get).toHaveBeenCalledWith("/providers");
-  });
-
-  it("adds a provider and never sends an empty secret", async () => {
-    const get = vi.fn(async () => ({
-      data: { providers: [], newRedirectUri: providers.newRedirectUri },
-    }));
-    const post = vi.fn(async () => ({ data: {} }));
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: { get, post } as never,
-    });
-    rendered.renderSettingsComponent("providers");
-    fireEvent.click(await screen.findByText(locales.providers.add));
-    fireEvent.change(
-      screen.getByPlaceholderText(locales.providers.namePlaceholder),
-      { target: { value: "Corp" } },
-    );
-    fireEvent.change(screen.getByPlaceholderText("your-client-id"), {
-      target: { value: "termix" },
-    });
-    fireEvent.click(screen.getByText(locales.providers.save));
-    await waitFor(() => expect(post).toHaveBeenCalled());
-    const [path, body] = post.mock.calls[0] as unknown as [
-      string,
-      { name: string; type: string; config: Record<string, string> },
-    ];
-    expect(path).toBe("/providers");
-    expect(body).toMatchObject({ name: "Corp", type: "oidc" });
-    expect(body.config.client_id).toBe("termix");
-    expect(body.config).not.toHaveProperty("client_secret");
-  });
-
-  it("removes everything on deactivate", async () => {
-    const app = await renderWithApp(plugin, { manifest, locales });
-    await app.deactivate();
-    expect(app.registered.loginMethods()).toEqual([]);
-    expect(app.registered.settingsComponents()).toEqual([]);
-  });
-});
diff --git a/plugins/sso/tsconfig.json b/plugins/sso/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/sso/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/sso/vitest.config.ts b/plugins/sso/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/sso/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/step-ca/CHANGELOG.md b/plugins/step-ca/CHANGELOG.md
deleted file mode 100644
index d2c370f96..000000000
--- a/plugins/step-ca/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Adds the Step CA login type. Termix signs you in through a smallstep step-ca OIDC provisioner and gets a short-lived SSH certificate from the CA.
diff --git a/plugins/step-ca/README.md b/plugins/step-ca/README.md
deleted file mode 100644
index 26ad7f607..000000000
--- a/plugins/step-ca/README.md
+++ /dev/null
@@ -1,31 +0,0 @@
-# Step CA
-
-Connect to hosts with short-lived SSH certificates from a smallstep step-ca server, after signing in through its OIDC provisioner.
-
-## Features
-
-- Adds the Step CA login type to the host editor.
-- Signs you in through the identity provider behind a [smallstep step-ca](https://smallstep.com/docs/step-ca/) OIDC provisioner.
-- Has the CA sign a fresh key and keeps the certificate until it expires.
-- Talks to the CA's HTTPS API directly, so the `step` binary is never needed.
-
-## Setup
-
-When `REDIS_URL` is set and you run more than one Termix instance, a callback that reaches the wrong instance is handed to the one that started the sign-in. `TERMIX_STEP_CA_REDIS_PREFIX` changes the key prefix, which defaults to `termix:step-ca`.
-
-## Settings
-
-### Admin
-
-- CA URL, Root fingerprint and OIDC provisioner name: leave all three empty to turn Step CA off.
-- Allowed private Step CA hosts: the CA and, if it is internal, the identity provider. Private hosts not on this list are refused.
-- Redirect URI: register `<base URL>/plugin-api/step-ca/callback` with your identity provider.
-- Use the old redirect URI: keep sending the 2.8 URI `<base URL>/host/step-ca-callback`. Upgraded installs keep this on until you turn it off.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/step-ca/locales/en.json b/plugins/step-ca/locales/en.json
deleted file mode 100644
index d9a0d69e2..000000000
--- a/plugins/step-ca/locales/en.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Step CA"
-  },
-  "editor": {
-    "label": "Step CA",
-    "description": "Sign in through your identity provider and let your Step CA issue a short-lived SSH certificate for this host. The CA URL, root fingerprint and OIDC provisioner are set by an administrator in the Step CA section of Admin Settings.",
-    "docs": "View docs"
-  },
-  "dialog": {
-    "title": "Step CA Authentication Required",
-    "description": "Complete authentication in your browser to continue. The certificate stays valid for as long as your CA allows.",
-    "openBrowser": "Open Browser to Authenticate",
-    "waiting": "Waiting for authentication in browser...",
-    "authenticating": "Processing authentication..."
-  },
-  "errors": {
-    "authFailed": "Authentication failed. Please check your credentials and try again.",
-    "timeout": "Authentication timed out. Please try again."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "CA URL",
-      "description": "The https URL of your smallstep CA. Leave the CA URL, fingerprint and provisioner empty to turn Step CA off.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Root fingerprint (SHA-256)",
-      "description": "The root certificate fingerprint, as shown by step ca bootstrap."
-    },
-    "provisioner": {
-      "label": "OIDC provisioner name",
-      "description": "The name of the CA's OIDC provisioner. Then choose \"Step CA\" as a host's authentication type."
-    },
-    "privateEndpoints": {
-      "label": "Allowed private Step CA hosts",
-      "description": "Private hosts the Step CA certificate flow may contact: the CA itself and, if internal, your identity provider. Separate them with commas or new lines."
-    },
-    "redirectUri": {
-      "label": "Redirect URI",
-      "description": "Register this URL as an allowed redirect URI with the identity provider behind the OIDC provisioner."
-    },
-    "legacyCallback": {
-      "label": "Use the old redirect URI",
-      "description": "Keep sending /host/step-ca-callback, the redirect URI used before 2.9. Turn this off once your identity provider allows the new one."
-    }
-  },
-  "plugin": {
-    "name": "Step CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/af_ZA.json b/plugins/step-ca/locales/translated/af_ZA.json
deleted file mode 100644
index 44dce4668..000000000
--- a/plugins/step-ca/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Stap CA"
-  },
-  "editor": {
-    "label": "Stap CA",
-    "description": "Meld aan deur jou identiteitsverskaffer en laat jou Stap-CA 'n kortstondige SSH-sertifikaat vir hierdie gasheer uitreik. Die CA-URL, wortelvingerafdruk en OIDC-voorsiening word deur 'n administrateur in die Stap-CA-afdeling van Admin-instellings gestel.",
-    "docs": "Bekyk dokumente"
-  },
-  "dialog": {
-    "title": "Stap CA-verifikasie vereis",
-    "description": "Voltooi verifikasie in jou blaaier om voort te gaan. Die sertifikaat bly geldig solank jou CA dit toelaat.",
-    "openBrowser": "Maak blaaier oop om te verifieer",
-    "waiting": "Wag vir verifikasie in blaaier...",
-    "authenticating": "Verwerk verifikasie..."
-  },
-  "errors": {
-    "authFailed": "Verifikasie het misluk. Kontroleer asseblief jou geloofsbriewe en probeer weer.",
-    "timeout": "Verifikasie het verstryk. Probeer asseblief weer."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "CA-URL",
-      "description": "Die https-URL van jou smallstep CA. Los die CA-URL, vingerafdruk en voorsiener leeg om Step CA af te skakel.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Wortelvingerafdruk (SHA-256)",
-      "description": "Die wortelsertifikaat se vingerafdruk, soos getoon deur stap ca bootstrap."
-    },
-    "provisioner": {
-      "label": "OIDC-voorsieningsnaam",
-      "description": "Die naam van die CA se OIDC-voorsieningsverskaffer. Kies dan \"Stap CA\" as 'n gasheer se verifikasietipe."
-    },
-    "privateEndpoints": {
-      "label": "Toegelate private Step CA-gashere",
-      "description": "Privaat gashere, die Step CA-sertifikaatvloei, mag kontak maak met: die CA self en, indien intern, jou identiteitsverskaffer. Skei hulle met kommas of nuwe reëls."
-    },
-    "redirectUri": {
-      "label": "Herlei URI",
-      "description": "Registreer hierdie URL as 'n toegelate herleidings-URI by die identiteitsverskaffer agter die OIDC-voorsieningsverskaffer."
-    },
-    "legacyCallback": {
-      "label": "Gebruik die ou aanstuur-URI",
-      "description": "Hou aan om /host/step-ca-callback te stuur, die aanstuur-URI wat voor 2.9 gebruik is. Skakel dit af sodra jou identiteitsverskaffer die nuwe een toelaat."
-    }
-  },
-  "plugin": {
-    "name": "Stap CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/ar_SA.json b/plugins/step-ca/locales/translated/ar_SA.json
deleted file mode 100644
index 84774cf61..000000000
--- a/plugins/step-ca/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "الخطوة ج"
-  },
-  "editor": {
-    "label": "الخطوة ج",
-    "description": "سجّل الدخول باستخدام موفر الهوية الخاص بك، ودع جهة إصدار الشهادات المعتمدة (SA) التابعة لـ Step CA تُصدر شهادة SSH مؤقتة لهذا المضيف. يتم تحديد عنوان URL الخاص بجهة إصدار الشهادات المعتمدة، وبصمة الجذر، وموفر OIDC بواسطة مسؤول النظام في قسم Step CA ضمن إعدادات المسؤول.",
-    "docs": "عرض المستندات"
-  },
-  "dialog": {
-    "title": "الخطوة: مطلوب مصادقة CA",
-    "description": "أكمل عملية المصادقة في متصفحك للمتابعة. تبقى الشهادة صالحة طالما سمحت جهة إصدار الشهادات بذلك.",
-    "openBrowser": "افتح المتصفح للمصادقة",
-    "waiting": "في انتظار المصادقة في المتصفح...",
-    "authenticating": "جارٍ معالجة المصادقة..."
-  },
-  "errors": {
-    "authFailed": "فشلت المصادقة. يرجى التحقق من بيانات الاعتماد والمحاولة مرة أخرى.",
-    "timeout": "انتهت مهلة المصادقة. يرجى المحاولة مرة أخرى."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "عنوان URL لهيئة التصديق",
-      "description": "عنوان URL الخاص بـ HTTPS لشهادة المصادقة الصغيرة (Stallstep CA). اترك عنوان URL الخاص بشهادة المصادقة، وبصمة الإصبع، وموفر البيانات فارغة لإيقاف تشغيل شهادة المصادقة الصغيرة (Stall CA).",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "بصمة الجذر (SHA-256)",
-      "description": "بصمة الشهادة الجذرية، كما هو موضح في خطوة ca bootstrap."
-    },
-    "provisioner": {
-      "label": "اسم موفر OIDC",
-      "description": "اسم مُزوّد OIDC الخاص بـ CA. ثم اختر \"Step CA\" كنوع مصادقة المضيف."
-    },
-    "privateEndpoints": {
-      "label": "مضيفو شهادات الخطوة الخاصة المسموح بها",
-      "description": "قد تتصل جهات الاستضافة الخاصة بعملية شهادة Step CA بما يلي: جهة إصدار الشهادة نفسها، وإذا كانت داخلية، مزود الهوية الخاص بك. افصل بينهما بفواصل أو أسطر جديدة."
-    },
-    "redirectUri": {
-      "label": "عنوان إعادة التوجيه",
-      "description": "قم بتسجيل عنوان URL هذا كعنوان URI مسموح بإعادة التوجيه مع موفر الهوية الذي يقف وراء موفر OIDC."
-    },
-    "legacyCallback": {
-      "label": "استخدم عنوان URI القديم لإعادة التوجيه",
-      "description": "استمر في إرسال /host/step-ca-callback، وهو عنوان إعادة التوجيه المستخدم قبل الإصدار 2.9. قم بإيقاف تشغيل هذا بمجرد أن يسمح موفر الهوية الخاص بك بالعنوان الجديد."
-    }
-  },
-  "plugin": {
-    "name": "الخطوة ج"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/bg_BG.json b/plugins/step-ca/locales/translated/bg_BG.json
deleted file mode 100644
index 2237d74c0..000000000
--- a/plugins/step-ca/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Стъпка CA"
-  },
-  "editor": {
-    "label": "Стъпка CA",
-    "description": "Влезте чрез вашия доставчик на самоличност и позволете на вашия Step CA да издаде краткотраен SSH сертификат за този хост. URL адресът на CA, root пръстовият отпечатък и OIDC provisioner се задават от администратор в секцията Step CA в администраторските настройки.",
-    "docs": "Преглед на документи"
-  },
-  "dialog": {
-    "title": "Изисква се удостоверяване на CA от стъпка 1",
-    "description": "За да продължите, завършете удостоверяването в браузъра си. Сертификатът остава валиден толкова дълго, колкото позволява вашият CA.",
-    "openBrowser": "Отворете браузъра за удостоверяване",
-    "waiting": "Чака се удостоверяване в браузъра...",
-    "authenticating": "Обработва се удостоверяване..."
-  },
-  "errors": {
-    "authFailed": "Удостоверяването не бе успешно. Моля, проверете идентификационните си данни и опитайте отново.",
-    "timeout": "Времето за изчакване на удостоверяването изтече. Моля, опитайте отново."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "URL адрес в Калифорния",
-      "description": "https URL адресът на вашия smallstep CA. Оставете URL адреса на CA, пръстовия отпечатък и провайдъра празни, за да изключите Step CA.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Коренен пръстов отпечатък (SHA-256)",
-      "description": "Пръстовият отпечатък на коренния сертификат, както е показано от стъпка ca bootstrap."
-    },
-    "provisioner": {
-      "label": "Име на доставчика на OIDC",
-      "description": "Името на OIDC доставчика на CA. След това изберете „Step CA“ като тип удостоверяване на хоста."
-    },
-    "privateEndpoints": {
-      "label": "Разрешени частни хостове на Step CA",
-      "description": "Частни хостове, с които потокът от сертификати на Step CA може да се свърже: самия CA и, ако е вътрешен, вашият доставчик на самоличност. Разделете ги със запетаи или нови редове."
-    },
-    "redirectUri": {
-      "label": "URI адрес за пренасочване",
-      "description": "Регистрирайте този URL адрес като разрешен URI адрес за пренасочване при доставчика на самоличност зад OIDC provisioner-а."
-    },
-    "legacyCallback": {
-      "label": "Използвайте стария URI адрес за пренасочване",
-      "description": "Продължавайте да изпращате /host/step-ca-callback, URI адресът за пренасочване, използван преди версия 2.9. Изключете това, след като вашият доставчик на идентичност разреши новия."
-    }
-  },
-  "plugin": {
-    "name": "Стъпка CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/bn_BD.json b/plugins/step-ca/locales/translated/bn_BD.json
deleted file mode 100644
index aaeb58333..000000000
--- a/plugins/step-ca/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "স্টেপ সিএ"
-  },
-  "editor": {
-    "label": "স্টেপ সিএ",
-    "description": "আপনার আইডেন্টিটি প্রোভাইডারের মাধ্যমে সাইন ইন করুন এবং আপনার স্টেপ সিএ-কে এই হোস্টের জন্য একটি স্বল্পস্থায়ী এসএসএইচ সার্টিফিকেট ইস্যু করতে দিন। সিএ ইউআরএল, রুট ফিঙ্গারপ্রিন্ট এবং ওআইডিসি প্রোভিশনার একজন অ্যাডমিনিস্ট্রেটর দ্বারা অ্যাডমিন সেটিংস-এর স্টেপ সিএ সেকশনে সেট করা হয়।",
-    "docs": "নথি দেখুন"
-  },
-  "dialog": {
-    "title": "ধাপ CA প্রমাণীকরণ আবশ্যক",
-    "description": "চালিয়ে যাওয়ার জন্য আপনার ব্রাউজারে প্রমাণীকরণ সম্পন্ন করুন। আপনার CA যতক্ষণ অনুমতি দেয়, ততক্ষণ সার্টিফিকেটটি বৈধ থাকবে।",
-    "openBrowser": "প্রমাণীকরণের জন্য ব্রাউজার খুলুন",
-    "waiting": "ব্রাউজারে প্রমাণীকরণের জন্য অপেক্ষা করা হচ্ছে...",
-    "authenticating": "প্রমাণীকরণ প্রক্রিয়া চলছে..."
-  },
-  "errors": {
-    "authFailed": "প্রমাণীকরণ ব্যর্থ হয়েছে। অনুগ্রহ করে আপনার পরিচয়পত্র যাচাই করে আবার চেষ্টা করুন।",
-    "timeout": "প্রমাণীকরণের সময়সীমা শেষ হয়ে গেছে। অনুগ্রহ করে আবার চেষ্টা করুন।"
-  },
-  "settings": {
-    "caUrl": {
-      "label": "CA URL",
-      "description": "আপনার smallstep CA-এর https URL। Step CA বন্ধ করতে CA URL, fingerprint এবং provisioner খালি রাখুন।",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "রুট ফিঙ্গারপ্রিন্ট (SHA-256)",
-      "description": "রুট সার্টিফিকেটের ফিঙ্গারপ্রিন্ট, যা ca bootstrap ধাপে দেখানো হয়েছে।"
-    },
-    "provisioner": {
-      "label": "OIDC সরবরাহকারীর নাম",
-      "description": "CA-এর OIDC প্রোভিশনারের নাম। তারপর হোস্টের অথেনটিকেশন টাইপ হিসেবে \"স্টেপ CA\" বেছে নিন।"
-    },
-    "privateEndpoints": {
-      "label": "ব্যক্তিগত স্টেপ সিএ হোস্টদের অনুমতি দেওয়া হয়েছে",
-      "description": "স্টেপ সিএ সার্টিফিকেট ফ্লো যেসব প্রাইভেট হোস্টের সাথে যোগাযোগ করতে পারে, সেগুলো হলো: স্বয়ং সিএ (CA) এবং, যদি অভ্যন্তরীণ হয়, আপনার আইডেন্টিটি প্রোভাইডার। এদেরকে কমা অথবা নতুন লাইন দিয়ে আলাদা করুন।"
-    },
-    "redirectUri": {
-      "label": "পুনঃনির্দেশ URI",
-      "description": "OIDC প্রোভিশনারের পেছনের আইডেন্টিটি প্রোভাইডারের কাছে এই URL-টিকে একটি অনুমোদিত রিডাইরেক্ট URI হিসেবে নিবন্ধন করুন।"
-    },
-    "legacyCallback": {
-      "label": "পুরানো রিডাইরেক্ট ইউআরআই ব্যবহার করুন",
-      "description": "/host/step-ca-callback, অর্থাৎ ২.৯-এর আগে ব্যবহৃত রিডাইরেক্ট ইউআরআইটি পাঠানো চালিয়ে যান। আপনার আইডেন্টিটি প্রোভাইডার নতুনটির অনুমতি দিলে এটি বন্ধ করে দিন।"
-    }
-  },
-  "plugin": {
-    "name": "স্টেপ সিএ"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/ca_ES.json b/plugins/step-ca/locales/translated/ca_ES.json
deleted file mode 100644
index c1c561293..000000000
--- a/plugins/step-ca/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Pas CA"
-  },
-  "editor": {
-    "label": "Pas CA",
-    "description": "Inicieu la sessió a través del vostre proveïdor d'identitat i deixeu que la vostra Step CA emeti un certificat SSH de curta durada per a aquest amfitrió. L'URL de la CA, l'empremta digital arrel i el proveïdor OIDC els defineix un administrador a la secció Step CA de la Configuració de l'administrador.",
-    "docs": "Veure documents"
-  },
-  "dialog": {
-    "title": "Autenticació de CA requerida",
-    "description": "Completeu l'autenticació al navegador per continuar. El certificat continua sent vàlid mentre ho permeti la vostra autoritat de certificació.",
-    "openBrowser": "Obre el navegador per autenticar-te",
-    "waiting": "Esperant l'autenticació al navegador...",
-    "authenticating": "Processant l'autenticació..."
-  },
-  "errors": {
-    "authFailed": "L'autenticació ha fallat. Si us plau, comproveu les vostres credencials i torneu-ho a intentar.",
-    "timeout": "S'ha esgotat el temps d'autenticació. Torna-ho a provar."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "URL de CA",
-      "description": "L'URL https de la vostra CA Smallstep. Deixeu l'URL de la CA, l'empremta digital i el proveïdor buits per desactivar la CA de Step.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Empremta digital arrel (SHA-256)",
-      "description": "L'empremta digital del certificat arrel, tal com es mostra al pas de bootstrap de CA."
-    },
-    "provisioner": {
-      "label": "Nom del proveïdor OIDC",
-      "description": "El nom del proveïdor OIDC de la CA. A continuació, trieu \"Step CA\" com a tipus d'autenticació de l'amfitrió."
-    },
-    "privateEndpoints": {
-      "label": "Amfitrions privats permesos de Step CA",
-      "description": "Amfitrions privats amb els quals el flux de certificats de la CA de Step pot contactar: la mateixa CA i, si és intern, el vostre proveïdor d'identitat. Separeu-los amb comes o noves línies."
-    },
-    "redirectUri": {
-      "label": "URI de redirecció",
-      "description": "Registra aquesta URL com a URI de redirecció permesa amb el proveïdor d'identitat darrere del proveidor OIDC."
-    },
-    "legacyCallback": {
-      "label": "Utilitza l'URI de redirecció antiga",
-      "description": "Continua enviant /host/step-ca-callback, l'URI de redirecció utilitzat abans de la versió 2.9. Desactiva-ho un cop el proveïdor d'identitat permeti el nou."
-    }
-  },
-  "plugin": {
-    "name": "Pas CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/cs_CZ.json b/plugins/step-ca/locales/translated/cs_CZ.json
deleted file mode 100644
index cee1ae13c..000000000
--- a/plugins/step-ca/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Krok CA"
-  },
-  "editor": {
-    "label": "Krok CA",
-    "description": "Přihlaste se prostřednictvím svého poskytovatele identity a nechte svou certifikační autoritu Step CA vydat krátkodobý SSH certifikát pro tohoto hostitele. URL certifikační autority CA, kořenový otisk prstu a zřizovatel OIDC nastavuje administrátor v sekci Step CA v Nastavení administrátora.",
-    "docs": "Zobrazit dokumenty"
-  },
-  "dialog": {
-    "title": "Krok Vyžadováno ověření CA",
-    "description": "Pro pokračování dokončete ověření ve vašem prohlížeči. Certifikát zůstává platný tak dlouho, jak to vaše certifikační autorita dovolí.",
-    "openBrowser": "Otevřít prohlížeč pro ověření",
-    "waiting": "Čekání na ověření v prohlížeči...",
-    "authenticating": "Zpracování ověřování..."
-  },
-  "errors": {
-    "authFailed": "Ověření se nezdařilo. Zkontrolujte prosím své přihlašovací údaje a zkuste to znovu.",
-    "timeout": "Časový limit ověření vypršel. Zkuste to prosím znovu."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "URL adresa CA",
-      "description": "URL adresa https vaší certifikační autority SmallStep. Chcete-li Step CA vypnout, ponechte URL adresu certifikační autority, otisk prstu a zřizovatel prázdné.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Kořenový otisk (SHA-256)",
-      "description": "Otisk kořenového certifikátu, jak je znázorněno v kroku ca bootstrap."
-    },
-    "provisioner": {
-      "label": "Název zřizovatele OIDC",
-      "description": "Název zřizovatele OIDC certifikační autority. Poté jako typ ověřování hostitele vyberte „Krok CA“."
-    },
-    "privateEndpoints": {
-      "label": "Povolení soukromí hostitelé Step CA",
-      "description": "Soukromí hostitelé, se kterými se může tok certifikátů Step CA spojit: samotná CA a v případě interního přístupu také váš poskytovatel identity. Oddělte je čárkami nebo novými řádky."
-    },
-    "redirectUri": {
-      "label": "URI přesměrování",
-      "description": "Zaregistrujte tuto URL jako povolený URI pro přesměrování u poskytovatele identity za zřizovatelem OIDC."
-    },
-    "legacyCallback": {
-      "label": "Použít starý identifikátor URI pro přesměrování",
-      "description": "Pokračujte v odesílání /host/step-ca-callback, což je URI pro přesměrování používané před verzí 2.9. Jakmile váš poskytovatel identity nový URI povolí, vypněte ho."
-    }
-  },
-  "plugin": {
-    "name": "Krok CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/da_DK.json b/plugins/step-ca/locales/translated/da_DK.json
deleted file mode 100644
index c9621bed2..000000000
--- a/plugins/step-ca/locales/translated/da_DK.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Trin CA"
-  },
-  "editor": {
-    "label": "Trin CA",
-    "description": "Log ind via din identitetsudbyder, og lad din Step CA udstede et kortvarigt SSH-certifikat til denne vært. CA-URL'en, rodfingeraftrykket og OIDC-provisioneren indstilles af en administrator i afsnittet Step CA i administratorindstillinger.",
-    "docs": "Se dokumenter"
-  },
-  "dialog": {
-    "title": "Trin CA-godkendelse påkrævet",
-    "description": "Fuldfør godkendelsen i din browser for at fortsætte. Certifikatet forbliver gyldigt, så længe din CA tillader det.",
-    "openBrowser": "Åbn browseren for at godkende",
-    "waiting": "Venter på godkendelse i browseren...",
-    "authenticating": "Behandler godkendelse..."
-  },
-  "errors": {
-    "authFailed": "Godkendelse mislykkedes. Tjek dine loginoplysninger, og prøv igen.",
-    "timeout": "Godkendelsen udløb. Prøv igen."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "CA-URL",
-      "description": "https-URL'en for din smallstep CA. Lad CA-URL'en, fingeraftrykket og provisioneren være tomme for at slå Step CA fra.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Rodfingeraftryk (SHA-256)",
-      "description": "Rodcertifikatets fingeraftryk, som vist i trin ca. bootstrap."
-    },
-    "provisioner": {
-      "label": "OIDC-provisioneringsnavn",
-      "description": "Navnet på CA'ens OIDC-provisioner. Vælg derefter \"Step CA\" som værtens godkendelsestype."
-    },
-    "privateEndpoints": {
-      "label": "Tilladte private Step CA-værter",
-      "description": "Private værter, som Step CA-certifikatflowet kan kontakte: selve CA'en og, hvis den er intern, din identitetsudbyder. Adskil dem med kommaer eller nye linjer."
-    },
-    "redirectUri": {
-      "label": "Omdirigerings-URI",
-      "description": "Registrer denne URL som en tilladt omdirigerings-URI hos identitetsudbyderen bag OIDC-provisioneren."
-    },
-    "legacyCallback": {
-      "label": "Brug den gamle omdirigerings-URI",
-      "description": "Fortsæt med at sende /host/step-ca-callback, den omdirigerings-URI, der blev brugt før 2.9. Slå dette fra, når din identitetsudbyder tillader den nye."
-    }
-  },
-  "plugin": {
-    "name": "Trin CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/de_DE.json b/plugins/step-ca/locales/translated/de_DE.json
deleted file mode 100644
index 118ee1be3..000000000
--- a/plugins/step-ca/locales/translated/de_DE.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Schritt CA"
-  },
-  "editor": {
-    "label": "Schritt CA",
-    "description": "Melden Sie sich über Ihren Identitätsanbieter an und lassen Sie Ihre Step-Zertifizierungsstelle ein kurzlebiges SSH-Zertifikat für diesen Host ausstellen. Die CA-URL, der Root-Fingerabdruck und der OIDC-Provisioner werden von einem Administrator im Step-CA-Bereich der Administratoreinstellungen festgelegt.",
-    "docs": "Dokumentation ansehen"
-  },
-  "dialog": {
-    "title": "Schritt CA-Authentifizierung erforderlich",
-    "description": "Schließen Sie die Authentifizierung in Ihrem Browser ab, um fortzufahren. Das Zertifikat bleibt so lange gültig, wie Ihre Zertifizierungsstelle dies zulässt.",
-    "openBrowser": "Browser zum Authentifizieren öffnen",
-    "waiting": "Warten auf Authentifizierung im Browser...",
-    "authenticating": "Authentifizierung wird verarbeitet..."
-  },
-  "errors": {
-    "authFailed": "Authentifizierung fehlgeschlagen. Bitte überprüfen Sie Ihre Anmeldeinformationen und versuchen Sie es erneut.",
-    "timeout": "Authentifizierung abgelaufen. Bitte versuchen Sie es erneut."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "CA-URL",
-      "description": "Die HTTPS-URL Ihrer Smallstep-Zertifizierungsstelle. Lassen Sie die Felder für die Zertifizierungsstellen-URL, den Fingerabdruck und den Provisioner leer, um die Step-Zertifizierungsstelle zu deaktivieren.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Root-Fingerabdruck (SHA-256)",
-      "description": "Der Fingerabdruck des Stammzertifikats, wie er durch den Schritt CA-Bootstrap angezeigt wird."
-    },
-    "provisioner": {
-      "label": "OIDC-Provisionername",
-      "description": "Der Name des OIDC-Provisioners der Zertifizierungsstelle. Wählen Sie anschließend „Step CA“ als Authentifizierungstyp des Hosts aus."
-    },
-    "privateEndpoints": {
-      "label": "Zulässige private Step CA-Hosts",
-      "description": "Private Hosts, die vom Step CA-Zertifikatsfluss kontaktiert werden, können Folgendes kontaktieren: die Zertifizierungsstelle selbst und, falls intern, Ihren Identitätsanbieter. Trennen Sie diese durch Kommas oder Zeilenumbrüche."
-    },
-    "redirectUri": {
-      "label": "Umleitungs-URI",
-      "description": "Registrieren Sie diese URL als zulässige Umleitungs-URI beim Identitätsanbieter hinter dem OIDC-Provisioner."
-    },
-    "legacyCallback": {
-      "label": "Verwenden Sie die alte Umleitungs-URI.",
-      "description": "Senden Sie weiterhin /host/step-ca-callback, die Umleitungs-URI, die vor Version 2.9 verwendet wurde. Deaktivieren Sie diese Funktion, sobald Ihr Identitätsanbieter die neue URI zulässt."
-    }
-  },
-  "plugin": {
-    "name": "Schritt CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/el_GR.json b/plugins/step-ca/locales/translated/el_GR.json
deleted file mode 100644
index 8aee448d7..000000000
--- a/plugins/step-ca/locales/translated/el_GR.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Βήμα CA"
-  },
-  "editor": {
-    "label": "Βήμα CA",
-    "description": "Συνδεθείτε μέσω του παρόχου ταυτότητας και αφήστε την Step CA σας να εκδώσει ένα βραχύβιο πιστοποιητικό SSH για αυτόν τον κεντρικό υπολογιστή. Η διεύθυνση URL CA, το δακτυλικό αποτύπωμα root και ο πάροχος OIDC ορίζονται από έναν διαχειριστή στην ενότητα Step CA των Ρυθμίσεων Διαχειριστή.",
-    "docs": "Προβολή εγγράφων"
-  },
-  "dialog": {
-    "title": "Απαιτείται έλεγχος ταυτότητας CA βήμα",
-    "description": "Ολοκληρώστε τον έλεγχο ταυτότητας στο πρόγραμμα περιήγησής σας για να συνεχίσετε. Το πιστοποιητικό παραμένει έγκυρο για όσο διάστημα το επιτρέπει η CA σας.",
-    "openBrowser": "Άνοιγμα προγράμματος περιήγησης για έλεγχο ταυτότητας",
-    "waiting": "Αναμονή για έλεγχο ταυτότητας στο πρόγραμμα περιήγησης...",
-    "authenticating": "Επεξεργασία ελέγχου ταυτότητας..."
-  },
-  "errors": {
-    "authFailed": "Ο έλεγχος ταυτότητας απέτυχε. Ελέγξτε τα διαπιστευτήριά σας και προσπαθήστε ξανά.",
-    "timeout": "Το χρονικό όριο ελέγχου ταυτότητας έληξε. Δοκιμάστε ξανά."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "URL CA",
-      "description": "Η διεύθυνση URL https της smallstep CA σας. Αφήστε τη διεύθυνση URL CA, το δακτυλικό αποτύπωμα και τον provisioner κενά για να απενεργοποιήσετε την Step CA.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Δακτυλικό αποτύπωμα ρίζας (SHA-256)",
-      "description": "Το δακτυλικό αποτύπωμα του πιστοποιητικού ρίζας, όπως φαίνεται στο βήμα ca bootstrap."
-    },
-    "provisioner": {
-      "label": "Όνομα παρόχου OIDC",
-      "description": "Το όνομα του παρόχου OIDC της CA. Στη συνέχεια, επιλέξτε \"Step CA\" ως τύπο ελέγχου ταυτότητας κεντρικού υπολογιστή."
-    },
-    "privateEndpoints": {
-      "label": "Επιτρεπόμενοι ιδιωτικοί κεντρικοί υπολογιστές Step CA",
-      "description": "Οι ιδιωτικοί κεντρικοί υπολογιστές που επικοινωνούν με τη ροή πιστοποιητικών Step CA ενδέχεται να επικοινωνήσουν με: την ίδια την CA και, εάν είναι εσωτερική, τον πάροχο ταυτότητάς σας. Διαχωρίστε τα με κόμματα ή νέες γραμμές."
-    },
-    "redirectUri": {
-      "label": "URI ανακατεύθυνσης",
-      "description": "Καταχωρίστε αυτήν τη διεύθυνση URL ως επιτρεπόμενο URI ανακατεύθυνσης στον πάροχο ταυτότητας πίσω από τον παροχέα OIDC."
-    },
-    "legacyCallback": {
-      "label": "Χρησιμοποιήστε το παλιό URI ανακατεύθυνσης",
-      "description": "Συνεχίστε να στέλνετε το /host/step-ca-callback, το URI ανακατεύθυνσης που χρησιμοποιήθηκε πριν από την έκδοση 2.9. Απενεργοποιήστε αυτήν τη λειτουργία μόλις ο πάροχος ταυτότητάς σας επιτρέψει το νέο."
-    }
-  },
-  "plugin": {
-    "name": "Βήμα CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/es_ES.json b/plugins/step-ca/locales/translated/es_ES.json
deleted file mode 100644
index 77bd2692d..000000000
--- a/plugins/step-ca/locales/translated/es_ES.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Paso CA"
-  },
-  "editor": {
-    "label": "Paso CA",
-    "description": "Inicie sesión a través de su proveedor de identidad y permita que Step CA emita un certificado SSH de corta duración para este host. La URL de la CA, la huella digital raíz y el proveedor OIDC los configura un administrador en la sección Step CA de la configuración de administración.",
-    "docs": "Ver documentación"
-  },
-  "dialog": {
-    "title": "Se requiere autenticación de CA.",
-    "description": "Para continuar, complete la autenticación en su navegador. El certificado seguirá siendo válido mientras su autoridad de certificación lo permita.",
-    "openBrowser": "Abrir navegador para autenticarse",
-    "waiting": "Esperando autenticación en el navegador...",
-    "authenticating": "Procesando autenticación..."
-  },
-  "errors": {
-    "authFailed": "La autenticación falló. Revisa tus credenciales e inténtalo de nuevo.",
-    "timeout": "La autenticación expiró. Inténtalo de nuevo."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "URL de CA",
-      "description": "La URL HTTPS de su CA de Smallstep. Deje la URL de la CA, la huella digital y el aprovisionador vacíos para desactivar Step CA.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Huella digital de la raíz (SHA-256)",
-      "description": "La huella digital del certificado raíz, como se muestra en el paso ca bootstrap."
-    },
-    "provisioner": {
-      "label": "nombre del proveedor OIDC",
-      "description": "Nombre del proveedor OIDC de la CA. A continuación, seleccione \"Step CA\" como tipo de autenticación del host."
-    },
-    "privateEndpoints": {
-      "label": "Hosts de CA de paso privado permitidos",
-      "description": "Los hosts privados con los que puede contactar el flujo de certificados de Step CA son: la propia CA y, si es interna, su proveedor de identidad. Sepárelos con comas o saltos de línea."
-    },
-    "redirectUri": {
-      "label": "URI de redirección",
-      "description": "Registre esta URL como una URI de redireccionamiento permitida con el proveedor de identidad que se encuentra detrás del aprovisionador OIDC."
-    },
-    "legacyCallback": {
-      "label": "Utilice la URI de redireccionamiento antigua",
-      "description": "Sigue enviando /host/step-ca-callback, la URI de redireccionamiento que se usaba antes de la versión 2.9. Desactívala una vez que tu proveedor de identidad permita la nueva."
-    }
-  },
-  "plugin": {
-    "name": "Paso CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/fi_FI.json b/plugins/step-ca/locales/translated/fi_FI.json
deleted file mode 100644
index 46073985b..000000000
--- a/plugins/step-ca/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Vaihe CA"
-  },
-  "editor": {
-    "label": "Vaihe CA",
-    "description": "Kirjaudu sisään identiteetintarjoajasi kautta ja anna vaiheittaisen varmentajan myöntää lyhytaikainen SSH-varmenne tälle isännälle. Järjestelmänvalvojan on määritettävä varmentajan URL-osoite, pääkäyttäjän sormenjälki ja OIDC-varmenne järjestelmävalvojan asetuksissa olevassa vaiheittaisen varmentajan osiossa.",
-    "docs": "Näytä dokumentit"
-  },
-  "dialog": {
-    "title": "Vaiheen CA-todennus vaaditaan",
-    "description": "Jatka suorittamalla todennus selaimessasi. Varmenne on voimassa niin kauan kuin varmenteen myöntäjäsi sallii.",
-    "openBrowser": "Avaa selain todennusta varten",
-    "waiting": "Odotetaan selaimen todennusta...",
-    "authenticating": "Todennusta käsitellään..."
-  },
-  "errors": {
-    "authFailed": "Todennus epäonnistui. Tarkista tunnistetietosi ja yritä uudelleen.",
-    "timeout": "Todennus aikakatkaistiin. Yritä uudelleen."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "Kalifornian URL-osoite",
-      "description": "Smallstep-CA:n https-URL-osoite. Jätä CA:n URL-osoite, sormenjälki ja tarjoaja tyhjiksi poistaaksesi Step CA:n käytöstä.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Juurisormenjälki (SHA-256)",
-      "description": "Juurivarmenteen sormenjälki, kuten vaiheessa ca bootstrap näyttää."
-    },
-    "provisioner": {
-      "label": "OIDC-palveluntarjoajan nimi",
-      "description": "Varmentajan OIDC-palveluntarjoajan nimi. Valitse sitten isännän todennustyypiksi \"Vaiheen varmentaja\"."
-    },
-    "privateEndpoints": {
-      "label": "Sallitut yksityiset Step CA -isännät",
-      "description": "Yksityiset isännöitsijät, joilla Step CA -varmennetyönkulku voi ottaa yhteyttä: itse CA:han ja, jos kyseessä on sisäinen varmenne, identiteetintarjoajaasi. Erota ne pilkuilla tai rivinvaihdolla."
-    },
-    "redirectUri": {
-      "label": "Uudelleenohjauksen URI",
-      "description": "Rekisteröi tämä URL-osoite sallituksi uudelleenohjauksen URI:ksi OIDC-tarjoajan takana olevalle identiteetintarjoajalle."
-    },
-    "legacyCallback": {
-      "label": "Käytä vanhaa uudelleenohjaus-URI:ta",
-      "description": "Lähetä edelleen /host/step-ca-callback, ennen versiota 2.9 käytetty uudelleenohjaus-URI. Poista tämä käytöstä, kun identiteetintarjoajasi sallii uuden."
-    }
-  },
-  "plugin": {
-    "name": "Vaihe CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/fr_FR.json b/plugins/step-ca/locales/translated/fr_FR.json
deleted file mode 100644
index deb72db5a..000000000
--- a/plugins/step-ca/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Étape CA"
-  },
-  "editor": {
-    "label": "Étape CA",
-    "description": "Connectez-vous via votre fournisseur d'identité et laissez votre autorité de certification Step CA émettre un certificat SSH temporaire pour cet hôte. L'URL de l'autorité de certification, l'empreinte racine et le provisionneur OIDC sont configurés par un administrateur dans la section « Autorité de certification Step CA » des paramètres d'administration.",
-    "docs": "Voir la documentation"
-  },
-  "dialog": {
-    "title": "Étape : Authentification CA requise",
-    "description": "Veuillez vous authentifier complètement dans votre navigateur pour continuer. Le certificat reste valide aussi longtemps que votre autorité de certification le permet.",
-    "openBrowser": "Ouvrir le navigateur pour s'authentifier",
-    "waiting": "En attente de l'authentification dans le navigateur...",
-    "authenticating": "Traitement de l'authentification..."
-  },
-  "errors": {
-    "authFailed": "Échec de l'authentification. Veuillez vérifier vos identifiants et réessayer.",
-    "timeout": "L'authentification a expiré. Veuillez réessayer."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "URL CA",
-      "description": "L'URL HTTPS de votre autorité de certification SmallStep. Laissez les champs URL de l'autorité de certification, empreinte digitale et provisionneur vides pour désactiver l'autorité de certification de Step.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Empreinte racine (SHA-256)",
-      "description": "L'empreinte du certificat racine, telle qu'elle apparaît lors de l'étape d'amorçage du certificat racine."
-    },
-    "provisioner": {
-      "label": "Nom du fournisseur OIDC",
-      "description": "Le nom du fournisseur OIDC de l'autorité de certification. Choisissez ensuite « Autorité de certification par étapes » comme type d'authentification de l'hôte."
-    },
-    "privateEndpoints": {
-      "label": "Hôtes d'autorité de certification privés autorisés",
-      "description": "Les hôtes privés pour lesquels le flux de certificats Step CA peut être sollicité peuvent contacter : l’autorité de certification elle-même et, si elle est interne, votre fournisseur d’identité. Séparez ces contacts par des virgules ou des sauts de ligne."
-    },
-    "redirectUri": {
-      "label": "URI de redirection",
-      "description": "Enregistrez cette URL comme URI de redirection autorisée auprès du fournisseur d'identité qui gère le provisionneur OIDC."
-    },
-    "legacyCallback": {
-      "label": "Utilisez l'ancienne URI de redirection",
-      "description": "Continuez à envoyer /host/step-ca-callback, l'URI de redirection utilisée avant la version 2.9. Désactivez-la une fois que votre fournisseur d'identité autorisera la nouvelle."
-    }
-  },
-  "plugin": {
-    "name": "Étape CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/he_IL.json b/plugins/step-ca/locales/translated/he_IL.json
deleted file mode 100644
index 80b77396e..000000000
--- a/plugins/step-ca/locales/translated/he_IL.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "שלב CA"
-  },
-  "editor": {
-    "label": "שלב CA",
-    "description": "היכנס דרך ספק הזהויות שלך ותן ל-Step CA שלך להנפיק אישור SSH קצר מועד עבור מארח זה. כתובת ה-URL של CA, טביעת האצבע של הבסיס וספק ה-OIDC מוגדרים על ידי מנהל מערכת במקטע Step CA בהגדרות המנהל.",
-    "docs": "הצג מסמכים"
-  },
-  "dialog": {
-    "title": "נדרש אימות CA של שלב",
-    "description": "השלם את האימות בדפדפן שלך כדי להמשיך. האישור נשאר בתוקף כל עוד רשות האישור שלך מאפשרת זאת.",
-    "openBrowser": "פתח את הדפדפן כדי לאמת",
-    "waiting": "ממתין לאימות בדפדפן...",
-    "authenticating": "מעבד אימות..."
-  },
-  "errors": {
-    "authFailed": "האימות נכשל. אנא בדוק את פרטי הגישה שלך ונסה שוב.",
-    "timeout": "הזמן שהוקצב לאימות הסתיים. אנא נסה שוב."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "כתובת URL של CA",
-      "description": "כתובת ה-https של רשות האישור של smallstep שלך. השאר את כתובת ה-URL של רשות האישור, טביעת האצבע והספק ריקים כדי לכבות את רשות האישור של Step.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "טביעת אצבע של שורש (SHA-256)",
-      "description": "טביעת האצבע של תעודת השורש, כפי שמוצג בשלב ca bootstrap."
-    },
-    "provisioner": {
-      "label": "שם ספק OIDC",
-      "description": "שם ספק האימות של ה-OIDC של רשות האישור. לאחר מכן בחר \"שלב רשות אישורים\" כסוג האימות של המארח."
-    },
-    "privateEndpoints": {
-      "label": "מארחים פרטיים של Step CA מורשים",
-      "description": "מארחים פרטיים, זרימת האישורים של Step CA עשויה ליצור קשר עם: רשות האישורים עצמה, ואם היא פנימית, עם ספק הזהויות שלך. הפרידו ביניהם באמצעות פסיקים או שורות חדשות."
-    },
-    "redirectUri": {
-      "label": "כתובת URL להפניה מחדש",
-      "description": "רשום כתובת URL זו כ-URI להפניה מחדש מותרת אצל ספק הזהויות שמאחורי ספק ה-OIDC."
-    },
-    "legacyCallback": {
-      "label": "השתמש ב-URI להפניה הישן",
-      "description": "המשך לשלוח את /host/step-ca-callback, URI ההפניה שהיה בשימוש לפני גרסה 2.9. כבה אפשרות זו לאחר שספק הזהויות שלך יאפשר את ה-URI החדש."
-    }
-  },
-  "plugin": {
-    "name": "שלב CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/hi_IN.json b/plugins/step-ca/locales/translated/hi_IN.json
deleted file mode 100644
index 7d4a58202..000000000
--- a/plugins/step-ca/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "स्टेप सीए"
-  },
-  "editor": {
-    "label": "स्टेप सीए",
-    "description": "अपने आइडेंटिटी प्रोवाइडर के माध्यम से साइन इन करें और अपने स्टेप सीए को इस होस्ट के लिए एक अल्पकालिक एसएसएच प्रमाणपत्र जारी करने दें। सीए यूआरएल, रूट फिंगरप्रिंट और ओआईडीसी प्रोविजनर को एडमिनिस्ट्रेटर द्वारा एडमिन सेटिंग्स के स्टेप सीए सेक्शन में सेट किया जाता है।",
-    "docs": "दस्तावेज़ देखें"
-  },
-  "dialog": {
-    "title": "चरण CA प्रमाणीकरण आवश्यक है",
-    "description": "आगे बढ़ने के लिए अपने ब्राउज़र में प्रमाणीकरण पूरा करें। प्रमाणपत्र तब तक वैध रहेगा जब तक आपका CA इसकी अनुमति देता है।",
-    "openBrowser": "प्रमाणीकरण के लिए ब्राउज़र खोलें",
-    "waiting": "ब्राउज़र में प्रमाणीकरण की प्रतीक्षा हो रही है...",
-    "authenticating": "प्रमाणीकरण प्रक्रिया में है..."
-  },
-  "errors": {
-    "authFailed": "प्रमाणीकरण विफल। कृपया अपने क्रेडेंशियल जाँचें और पुनः प्रयास करें।",
-    "timeout": "प्रमाणीकरण का समय समाप्त हो गया। कृपया पुनः प्रयास करें।"
-  },
-  "settings": {
-    "caUrl": {
-      "label": "सीए यूआरएल",
-      "description": "आपके SmallStep CA का HTTPS URL। Step CA को बंद करने के लिए CA URL, फिंगरप्रिंट और प्रोविज़नर को खाली छोड़ दें।",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "रूट फिंगरप्रिंट (SHA-256)",
-      "description": "रूट सर्टिफिकेट फिंगरप्रिंट, जैसा कि स्टेप सीए बूटस्ट्रैप द्वारा दिखाया गया है।"
-    },
-    "provisioner": {
-      "label": "OIDC प्रोविज़नर नाम",
-      "description": "सीए के ओआईडीसी प्रोविजनर का नाम। फिर होस्ट के प्रमाणीकरण प्रकार के रूप में \"स्टेप सीए\" चुनें।"
-    },
-    "privateEndpoints": {
-      "label": "निजी स्टेप सीए होस्ट की अनुमति है",
-      "description": "निजी होस्ट, स्टेप सीए प्रमाणपत्र प्रवाह के दौरान निम्नलिखित से संपर्क कर सकते हैं: सीए स्वयं और, यदि आंतरिक है, तो आपका पहचान प्रदाता। इन्हें अल्पविराम या नई पंक्तियों से अलग करें।"
-    },
-    "redirectUri": {
-      "label": "रीडायरेक्ट यूआरआई",
-      "description": "इस यूआरएल को ओआईडीसी प्रोविजनर के पीछे स्थित आइडेंटिटी प्रोवाइडर के साथ एक अनुमत रीडायरेक्ट यूआरआई के रूप में पंजीकृत करें।"
-    },
-    "legacyCallback": {
-      "label": "पुराने रीडायरेक्ट यूआरआई का उपयोग करें",
-      "description": "पहले 2.9 से पहले इस्तेमाल होने वाले रीडायरेक्ट यूआरआई /host/step-ca-callback को भेजते रहें। जब आपका आइडेंटिटी प्रोवाइडर नए यूआरआई की अनुमति दे दे, तो इसे बंद कर दें।"
-    }
-  },
-  "plugin": {
-    "name": "स्टेप सीए"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/hu_HU.json b/plugins/step-ca/locales/translated/hu_HU.json
deleted file mode 100644
index 6ae81fc61..000000000
--- a/plugins/step-ca/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "CA lépés"
-  },
-  "editor": {
-    "label": "CA lépés",
-    "description": "Jelentkezzen be az identitásszolgáltatóján keresztül, és hagyja, hogy a Step CA rövid életű SSH-tanúsítványt állítson ki ehhez a gazdagéphez. A CA URL-címét, a root ujjlenyomatát és az OIDC-kiszolgálót a rendszergazda állítja be az Adminisztrátori beállítások Step CA szakaszában.",
-    "docs": "Dokumentumok megtekintése"
-  },
-  "dialog": {
-    "title": "Lépés CA hitelesítés szükséges",
-    "description": "A folytatáshoz fejezze be a hitelesítést a böngészőjében. A tanúsítvány mindaddig érvényes, ameddig a hitelesítésszolgáltató engedélyezi.",
-    "openBrowser": "Böngésző megnyitása a hitelesítéshez",
-    "waiting": "Várakozás a böngésző hitelesítésére...",
-    "authenticating": "Hitelesítés feldolgozása..."
-  },
-  "errors": {
-    "authFailed": "Sikertelen hitelesítés. Kérjük, ellenőrizze a hitelesítő adatait, és próbálja újra.",
-    "timeout": "A hitelesítés időtúllépést okozott. Kérjük, próbálja újra."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "Kaliforniai URL",
-      "description": "A smallstep CA https URL-címe. A Step CA kikapcsolásához hagyja üresen a CA URL-címét, az ujjlenyomatot és a kibocsátót.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Gyökér ujjlenyomat (SHA-256)",
-      "description": "A főtanúsítvány ujjlenyomata, ahogyan azt a ca. lépés bootstrap mutatja."
-    },
-    "provisioner": {
-      "label": "OIDC-szolgáltató neve",
-      "description": "A hitelesítésszolgáltató OIDC-szolgáltatójának neve. Ezután válassza a „Step CA” lehetőséget a gazdagép hitelesítési típusaként."
-    },
-    "privateEndpoints": {
-      "label": "Engedélyezett privát Step CA-hosztok",
-      "description": "A Step CA tanúsítványfolyamat által érintett privát hosztok a következőkkel vehetik fel a kapcsolatot: magával a CA-val, és ha belső, akkor az identitásszolgáltatóval. Válaszd el őket vesszővel vagy új sorral."
-    },
-    "redirectUri": {
-      "label": "Átirányítási URI",
-      "description": "Regisztrálja ezt az URL-címet engedélyezett átirányítási URI-ként az OIDC-kiszolgáló mögötti identitásszolgáltatónál."
-    },
-    "legacyCallback": {
-      "label": "Használja a régi átirányítási URI-t",
-      "description": "Továbbra is küldd a /host/step-ca-callback átirányítási URI-t, amely a 2.9 előtt használt. Kapcsold ki ezt, amint az identitásszolgáltatód engedélyezi az újat."
-    }
-  },
-  "plugin": {
-    "name": "CA lépés"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/id_ID.json b/plugins/step-ca/locales/translated/id_ID.json
deleted file mode 100644
index 01037dd21..000000000
--- a/plugins/step-ca/locales/translated/id_ID.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Langkah CA"
-  },
-  "editor": {
-    "label": "Langkah CA",
-    "description": "Masuk melalui penyedia identitas Anda dan biarkan Step CA menerbitkan sertifikat SSH berumur pendek untuk host ini. URL CA, sidik jari root, dan penyedia OIDC diatur oleh administrator di bagian Step CA pada Pengaturan Admin.",
-    "docs": "Lihat dokumen"
-  },
-  "dialog": {
-    "title": "Langkah Otentikasi CA Diperlukan",
-    "description": "Selesaikan otentikasi di browser Anda untuk melanjutkan. Sertifikat tetap berlaku selama Otoritas Sertifikasi (CA) Anda mengizinkan.",
-    "openBrowser": "Buka Browser untuk Melakukan Otentikasi",
-    "waiting": "Menunggu otentikasi di browser...",
-    "authenticating": "Memproses otentikasi..."
-  },
-  "errors": {
-    "authFailed": "Autentikasi gagal. Silakan periksa kredensial Anda dan coba lagi.",
-    "timeout": "Autentikasi habis waktu. Silakan coba lagi."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "URL CA",
-      "description": "URL https CA SmallStep Anda. Biarkan URL CA, fingerprint, dan provisioner kosong untuk menonaktifkan Step CA.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Sidik jari akar (SHA-256)",
-      "description": "Sidik jari sertifikat root, seperti yang ditunjukkan oleh langkah ca bootstrap."
-    },
-    "provisioner": {
-      "label": "Nama penyedia OIDC",
-      "description": "Nama penyedia OIDC CA. Kemudian pilih \"Step CA\" sebagai tipe otentikasi host."
-    },
-    "privateEndpoints": {
-      "label": "Host CA Langkah pribadi yang diizinkan",
-      "description": "Host privat yang dapat dihubungi oleh alur sertifikat Step CA adalah: CA itu sendiri dan, jika internal, penyedia identitas Anda. Pisahkan mereka dengan koma atau baris baru."
-    },
-    "redirectUri": {
-      "label": "URI Pengalihan",
-      "description": "Daftarkan URL ini sebagai URI pengalihan yang diizinkan dengan penyedia identitas di balik penyedia OIDC."
-    },
-    "legacyCallback": {
-      "label": "Gunakan URI pengalihan lama.",
-      "description": "Tetap kirimkan /host/step-ca-callback, URI pengalihan yang digunakan sebelum versi 2.9. Matikan ini setelah penyedia identitas Anda mengizinkan yang baru."
-    }
-  },
-  "plugin": {
-    "name": "Langkah CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/it_IT.json b/plugins/step-ca/locales/translated/it_IT.json
deleted file mode 100644
index 53985411c..000000000
--- a/plugins/step-ca/locales/translated/it_IT.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Passo CA"
-  },
-  "editor": {
-    "label": "Passo CA",
-    "description": "Accedi tramite il tuo provider di identità e lascia che la tua CA Step rilasci un certificato SSH temporaneo per questo host. L'URL della CA, l'impronta digitale della radice e il provisioner OIDC vengono impostati da un amministratore nella sezione CA Step delle Impostazioni di amministrazione.",
-    "docs": "Vedi documenti"
-  },
-  "dialog": {
-    "title": "Passaggio: Autenticazione CA richiesta",
-    "description": "Completa l'autenticazione nel tuo browser per continuare. Il certificato rimarrà valido finché consentito dalla tua CA.",
-    "openBrowser": "Apri il browser per autenticarti",
-    "waiting": "In attesa dell'autenticazione nel browser...",
-    "authenticating": "Autenticazione in corso..."
-  },
-  "errors": {
-    "authFailed": "Autenticazione fallita. Controlla le credenziali e riprova.",
-    "timeout": "Autenticazione scaduta. Riprova."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "URL CA",
-      "description": "L'URL HTTPS della tua CA di smallstep. Lascia vuoti i campi URL CA, fingerprint e provisioner per disattivare Step CA.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Impronta digitale radice (SHA-256)",
-      "description": "L'impronta digitale del certificato radice, come mostrato dal passaggio ca bootstrap."
-    },
-    "provisioner": {
-      "label": "Nome del fornitore OIDC",
-      "description": "Il nome del provisioner OIDC dell'autorità di certificazione (CA). Quindi, selezionare \"Step CA\" come tipo di autenticazione dell'host."
-    },
-    "privateEndpoints": {
-      "label": "Host Step CA privati consentiti",
-      "description": "Gli host privati che utilizzano il flusso di certificati Step CA potrebbero contattare: la CA stessa e, se interna, il provider di identità. Separarli con virgole o a capo."
-    },
-    "redirectUri": {
-      "label": "URI di reindirizzamento",
-      "description": "Registra questo URL come URI di reindirizzamento consentito presso il provider di identità dietro il provisioner OIDC."
-    },
-    "legacyCallback": {
-      "label": "Utilizzare il vecchio URI di reindirizzamento",
-      "description": "Continua a inviare /host/step-ca-callback, l'URI di reindirizzamento utilizzato prima della versione 2.9. Disattivalo non appena il tuo provider di identità consentirà l'utilizzo del nuovo URI."
-    }
-  },
-  "plugin": {
-    "name": "Passo CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/ja_JP.json b/plugins/step-ca/locales/translated/ja_JP.json
deleted file mode 100644
index fd60740a7..000000000
--- a/plugins/step-ca/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "ステップCA"
-  },
-  "editor": {
-    "label": "ステップCA",
-    "description": "IDプロバイダー経由でサインインし、Step CAにこのホスト用の有効期限の短いSSH証明書を発行させてください。CA URL、ルートフィンガープリント、およびOIDCプロビジョナーは、管理者が管理設定のStep CAセクションで設定します。",
-    "docs": "ドキュメントを見る"
-  },
-  "dialog": {
-    "title": "ステップCA認証が必要です",
-    "description": "続行するには、ブラウザで認証を完了してください。証明書は、認証局が許可する限り有効です。",
-    "openBrowser": "ブラウザを開いて認証",
-    "waiting": "ブラウザでの認証を待機中...",
-    "authenticating": "認証を処理中..."
-  },
-  "errors": {
-    "authFailed": "認証に失敗しました。資格情報を確認して再試行してください。",
-    "timeout": "認証がタイムアウトしました。もう一度お試しください。"
-  },
-  "settings": {
-    "caUrl": {
-      "label": "CA URL",
-      "description": "SmallStep CAのHTTPS URL。Step CAを無効にするには、CA URL、フィンガープリント、プロビジョナーを空欄のままにしてください。",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "ルートフィンガープリント（SHA-256）",
-      "description": "ステップ ca bootstrap で示されるルート証明書のフィンガープリント。"
-    },
-    "provisioner": {
-      "label": "OIDCプロビジョナー名",
-      "description": "CAのOIDCプロビジョナーの名前を指定します。次に、ホストの認証タイプとして「ステップCA」を選択します。"
-    },
-    "privateEndpoints": {
-      "label": "許可されたプライベートStep CAホスト",
-      "description": "プライベートホストの場合、Step CA証明書フローは、認証局自体、および内部の場合はIDプロバイダーと連絡を取る可能性があります。これらはカンマまたは改行で区切ってください。"
-    },
-    "redirectUri": {
-      "label": "リダイレクトURI",
-      "description": "このURLを、OIDCプロビジョナーの背後にあるIDプロバイダーに、許可されたリダイレクトURIとして登録してください。"
-    },
-    "legacyCallback": {
-      "label": "古いリダイレクトURIを使用する",
-      "description": "バージョン2.9以前に使用されていたリダイレクトURIである/host/step-ca-callbackを送信し続けてください。IDプロバイダーが新しいURIを許可したら、この設定を無効にしてください。"
-    }
-  },
-  "plugin": {
-    "name": "ステップCA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/ko_KR.json b/plugins/step-ca/locales/translated/ko_KR.json
deleted file mode 100644
index 13d7cf136..000000000
--- a/plugins/step-ca/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "스텝 CA"
-  },
-  "editor": {
-    "label": "스텝 CA",
-    "description": "ID 공급자를 통해 로그인하고 Step CA에서 이 호스트에 대한 단기 SSH 인증서를 발급받으세요. CA URL, 루트 지문 및 OIDC 프로비저너는 관리자가 관리 설정의 Step CA 섹션에서 설정합니다.",
-    "docs": "문서 보기"
-  },
-  "dialog": {
-    "title": "단계 CA 인증 필요",
-    "description": "계속하려면 브라우저에서 인증을 완료하십시오. 인증서는 CA(인증 기관)에서 허용하는 기간 동안 유효합니다.",
-    "openBrowser": "브라우저로 인증하기",
-    "waiting": "브라우저에서 인증 대기 중...",
-    "authenticating": "인증 처리 중..."
-  },
-  "errors": {
-    "authFailed": "인증에 실패했습니다. 자격 증명을 확인하고 다시 시도하세요.",
-    "timeout": "인증 시간이 초과되었습니다. 다시 시도하세요."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "CA URL",
-      "description": "SmallStep CA의 HTTPS URL을 입력하십시오. Step CA를 비활성화하려면 CA URL, 지문 및 프로비저너 필드를 비워 두십시오.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "루트 지문(SHA-256)",
-      "description": "루트 인증서 지문은 CA 부트스트랩 단계에서 확인할 수 있습니다."
-    },
-    "provisioner": {
-      "label": "OIDC 프로비저너 이름",
-      "description": "CA의 OIDC 프로비저너 이름을 입력합니다. 그런 다음 호스트의 인증 유형으로 \"단계별 CA\"를 선택합니다."
-    },
-    "privateEndpoints": {
-      "label": "허용된 개인 Step CA 호스트",
-      "description": "Step CA 인증서 흐름이 접촉할 수 있는 개인 호스트는 CA 자체와 (내부 호스트인 경우) ID 공급자입니다. 쉼표 또는 줄 바꿈으로 구분하십시오."
-    },
-    "redirectUri": {
-      "label": "리디렉션 URI",
-      "description": "이 URL을 OIDC 프로비저너 뒤에 있는 ID 공급자에게 허용된 리디렉션 URI로 등록하십시오."
-    },
-    "legacyCallback": {
-      "label": "이전 리디렉션 URI를 사용하세요",
-      "description": "2.9 이전 버전에서 사용했던 리디렉션 URI인 /host/step-ca-callback을 계속 전송하세요. ID 공급자가 새 URI를 허용하면 이 기능을 비활성화하십시오."
-    }
-  },
-  "plugin": {
-    "name": "스텝 CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/nl_NL.json b/plugins/step-ca/locales/translated/nl_NL.json
deleted file mode 100644
index 2d63d5f0b..000000000
--- a/plugins/step-ca/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Stap CA"
-  },
-  "editor": {
-    "label": "Stap CA",
-    "description": "Meld u aan via uw identiteitsprovider en laat uw Step CA een kortstondig SSH-certificaat voor deze host uitgeven. De CA-URL, root-fingerprint en OIDC-provisioner worden door een beheerder ingesteld in het Step CA-gedeelte van de beheerdersinstellingen.",
-    "docs": "Documenten bekijken"
-  },
-  "dialog": {
-    "title": "Stap CA-authenticatie vereist",
-    "description": "Voltooi de authenticatie in uw browser om verder te gaan. Het certificaat blijft geldig zolang uw certificeringsinstantie dit toestaat.",
-    "openBrowser": "Open de browser om te authenticeren.",
-    "waiting": "Wachten op authenticatie in de browser...",
-    "authenticating": "Authenticatie wordt verwerkt..."
-  },
-  "errors": {
-    "authFailed": "Authenticatie mislukt. Controleer uw inloggegevens en probeer het opnieuw.",
-    "timeout": "De authenticatie is mislukt vanwege een time-out. Probeer het opnieuw."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "CA URL",
-      "description": "De https-URL van uw Smallstep CA. Laat de CA-URL, vingerafdruk en provisioner leeg om Step CA uit te schakelen.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Root-vingerafdruk (SHA-256)",
-      "description": "De vingerafdruk van het rootcertificaat, zoals weergegeven in stap ca bootstrap."
-    },
-    "provisioner": {
-      "label": "Naam van de OIDC-leverancier",
-      "description": "De naam van de OIDC-provisioner van de CA. Kies vervolgens \"Step CA\" als authenticatietype voor de host."
-    },
-    "privateEndpoints": {
-      "label": "Toegestane privé Step CA-hosts",
-      "description": "De private hosts waarmee de Step CA-certificaatstroom contact kan opnemen, zijn: de certificeringsinstantie zelf en, indien intern, uw identiteitsprovider. Scheid deze met komma's of nieuwe regels."
-    },
-    "redirectUri": {
-      "label": "Omleidings-URI",
-      "description": "Registreer deze URL als een toegestane omleidings-URI bij de identiteitsprovider achter de OIDC-provisioner."
-    },
-    "legacyCallback": {
-      "label": "Gebruik de oude omleidings-URI",
-      "description": "Blijf /host/step-ca-callback verzenden, de omleidings-URI die vóór versie 2.9 werd gebruikt. Schakel dit uit zodra uw identiteitsprovider de nieuwe URI toestaat."
-    }
-  },
-  "plugin": {
-    "name": "Stap CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/no_NO.json b/plugins/step-ca/locales/translated/no_NO.json
deleted file mode 100644
index a5fc53c3a..000000000
--- a/plugins/step-ca/locales/translated/no_NO.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Trinn CA"
-  },
-  "editor": {
-    "label": "Trinn CA",
-    "description": "Logg på via identitetsleverandøren din, og la Step CA utstede et kortvarig SSH-sertifikat for denne verten. CA-URL-en, rotfingeravtrykket og OIDC-provisioneren angis av en administrator i Step CA-delen av administratorinnstillingene.",
-    "docs": "Vis dokumenter"
-  },
-  "dialog": {
-    "title": "Trinn CA-autentisering kreves",
-    "description": "Fullfør autentiseringen i nettleseren din for å fortsette. Sertifikatet forblir gyldig så lenge CA-en din tillater det.",
-    "openBrowser": "Åpne nettleseren for å autentisere",
-    "waiting": "Venter på autentisering i nettleseren...",
-    "authenticating": "Behandler autentisering ..."
-  },
-  "errors": {
-    "authFailed": "Autentiseringen mislyktes. Sjekk legitimasjonen din og prøv på nytt.",
-    "timeout": "Autentiseringen ble tidsavbrutt. Prøv på nytt."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "CA-URL",
-      "description": "https-URL-en til din smallstep CA. La CA-URL-en, fingeravtrykket og provisioneren stå tomme for å slå av Step CA.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Rotfingeravtrykk (SHA-256)",
-      "description": "Rotsertifikatets fingeravtrykk, som vist i trinn ca. bootstrap."
-    },
-    "provisioner": {
-      "label": "OIDC-provisionernavn",
-      "description": "Navnet på CA-ens OIDC-provisioner. Velg deretter «Step CA» som verts autentiseringstype."
-    },
-    "privateEndpoints": {
-      "label": "Tillatte private Step CA-verter",
-      "description": "Private verter som Step CA-sertifikatflyten kan kontakte: selve CA-en og, hvis intern, identitetsleverandøren din. Skill dem med komma eller nye linjer."
-    },
-    "redirectUri": {
-      "label": "Omdirigerings-URI",
-      "description": "Registrer denne URL-en som en tillatt omdirigerings-URI hos identitetsleverandøren bak OIDC-klargjøreren."
-    },
-    "legacyCallback": {
-      "label": "Bruk den gamle omdirigerings-URI-en",
-      "description": "Fortsett å sende /host/step-ca-callback, omdirigerings-URI-en som ble brukt før 2.9. Slå av dette når identitetsleverandøren din tillater den nye."
-    }
-  },
-  "plugin": {
-    "name": "Trinn CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/pl_PL.json b/plugins/step-ca/locales/translated/pl_PL.json
deleted file mode 100644
index c82d1d666..000000000
--- a/plugins/step-ca/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Krok CA"
-  },
-  "editor": {
-    "label": "Krok CA",
-    "description": "Zaloguj się za pomocą swojego dostawcy tożsamości i pozwól, aby urząd certyfikacji Step CA wydał tymczasowy certyfikat SSH dla tego hosta. Adres URL urzędu certyfikacji, odcisk palca głównego i dostawca OIDC są ustawiane przez administratora w sekcji Step CA w Ustawieniach administratora.",
-    "docs": "Zobacz dokumentację"
-  },
-  "dialog": {
-    "title": "Wymagane uwierzytelnienie CA",
-    "description": "Aby kontynuować, dokończ uwierzytelnianie w przeglądarce. Certyfikat pozostaje ważny tak długo, jak pozwala na to Twój urząd certyfikacji.",
-    "openBrowser": "Otwórz przeglądarkę, aby uwierzytelnić",
-    "waiting": "Oczekiwanie na uwierzytelnienie w przeglądarce...",
-    "authenticating": "Przetwarzanie uwierzytelniania..."
-  },
-  "errors": {
-    "authFailed": "Uwierzytelnienie nie powiodło się. Sprawdź poświadczenia i spróbuj ponownie.",
-    "timeout": "Upłynął limit czasu uwierzytelniania. Spróbuj ponownie."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "Adres URL CA",
-      "description": "Adres URL https Twojego urzędu certyfikacji SmallStep. Pozostaw puste pola adresu URL urzędu certyfikacji, odcisku palca i provisionera, aby wyłączyć urząd certyfikacji Step CA.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Odcisk palca głównego (SHA-256)",
-      "description": "Odcisk palca certyfikatu głównego, jak pokazano w kroku ca bootstrap."
-    },
-    "provisioner": {
-      "label": "Nazwa dostawcy OIDC",
-      "description": "Nazwa dostawcy OIDC urzędu certyfikacji. Następnie wybierz „Urząd certyfikacji krok po kroku” jako typ uwierzytelniania hosta."
-    },
-    "privateEndpoints": {
-      "label": "Dozwolone prywatne hosty Step CA",
-      "description": "Prywatni hosty, z których przepływ certyfikatów Step CA może się kontaktować: z samym CA oraz, jeśli jest wewnętrzny, z dostawcą tożsamości. Rozdziel je przecinkami lub znakami nowej linii."
-    },
-    "redirectUri": {
-      "label": "Przekieruj URI",
-      "description": "Zarejestruj ten adres URL jako dozwolony adres URI przekierowania u dostawcy tożsamości stojącego za programem OIDC."
-    },
-    "legacyCallback": {
-      "label": "Użyj starego adresu URI przekierowania",
-      "description": "Nadal wysyłaj /host/step-ca-callback, czyli URI przekierowania używane przed wersją 2.9. Wyłącz tę opcję, gdy Twój dostawca tożsamości zezwoli na nową."
-    }
-  },
-  "plugin": {
-    "name": "Krok CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/pt_BR.json b/plugins/step-ca/locales/translated/pt_BR.json
deleted file mode 100644
index 2b6f296f4..000000000
--- a/plugins/step-ca/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Etapa CA"
-  },
-  "editor": {
-    "label": "Etapa CA",
-    "description": "Faça login através do seu provedor de identidade e permita que sua Autoridade Certificadora (CA) Step emita um certificado SSH de curta duração para este host. O URL da CA, a impressão digital da raiz e o provisionador OIDC são definidos por um administrador na seção CA Step das Configurações de Administração.",
-    "docs": "Documentação"
-  },
-  "dialog": {
-    "title": "Etapa: Autenticação CA necessária",
-    "description": "Para continuar, complete a autenticação no seu navegador. O certificado permanecerá válido enquanto sua Autoridade Certificadora (CA) permitir.",
-    "openBrowser": "Abra o navegador para autenticar.",
-    "waiting": "Aguardando autenticação no navegador...",
-    "authenticating": "Processando autenticação..."
-  },
-  "errors": {
-    "authFailed": "A autenticação falhou. Verifique suas credenciais e tente novamente.",
-    "timeout": "A autenticação expirou. Tente novamente."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "URL CA",
-      "description": "O URL https da sua CA Smallstep. Deixe o URL da CA, a impressão digital e o provisionador em branco para desativar a CA da Step.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Impressão digital raiz (SHA-256)",
-      "description": "A impressão digital do certificado raiz, conforme mostrado pela etapa ca bootstrap."
-    },
-    "provisioner": {
-      "label": "nome do provisionador OIDC",
-      "description": "O nome do provisionador OIDC da CA. Em seguida, escolha \"CA de Etapa\" como o tipo de autenticação do host."
-    },
-    "privateEndpoints": {
-      "label": "Hosts CA privados permitidos",
-      "description": "Para hosts privados, o fluxo de certificados da Step CA pode contatar: a própria CA e, se interna, seu provedor de identidade. Separe-os com vírgulas ou novas linhas."
-    },
-    "redirectUri": {
-      "label": "URI de redirecionamento",
-      "description": "Registre este URL como um URI de redirecionamento permitido junto ao provedor de identidade por trás do provisionador OIDC."
-    },
-    "legacyCallback": {
-      "label": "Use o URI de redirecionamento antigo",
-      "description": "Continue enviando /host/step-ca-callback, o URI de redirecionamento usado antes da versão 2.9. Desative-o assim que seu provedor de identidade permitir o novo."
-    }
-  },
-  "plugin": {
-    "name": "Etapa CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/pt_PT.json b/plugins/step-ca/locales/translated/pt_PT.json
deleted file mode 100644
index 082a87bfd..000000000
--- a/plugins/step-ca/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Etapa CA"
-  },
-  "editor": {
-    "label": "Etapa CA",
-    "description": "Faça login através do seu fornecedor de identidade e permita que a sua Autoridade Certificadora (CA) Step emita um certificado SSH de curta duração para este host. O URL da CA, a impressão digital da raiz e o provisionador OIDC são definidos por um administrador na secção CA Step das Definições de Administração.",
-    "docs": "Ver docs"
-  },
-  "dialog": {
-    "title": "Passo: Autenticação CA necessária",
-    "description": "Para continuar, complete a autenticação no seu browser. O certificado permanecerá válido enquanto a sua Autoridade Certificadora (CA) o permitir.",
-    "openBrowser": "Abrir navegador para autenticar",
-    "waiting": "A aguardar autenticação no navegador...",
-    "authenticating": "A processar autenticação..."
-  },
-  "errors": {
-    "authFailed": "A autenticação falhou. Verifique as suas credenciais e tente novamente.",
-    "timeout": "A autenticação expirou. Tente novamente."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "URL CA",
-      "description": "O URL https da sua CA Smallstep. Deixe o URL da AC, a impressão digital e o provisionador em branco para desativar a AC da Step.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Impressão digital de raiz (SHA-256)",
-      "description": "A impressão digital do certificado raiz, conforme mostrado pela etapa ca bootstrap."
-    },
-    "provisioner": {
-      "label": "nome do provisionador OIDC",
-      "description": "O nome do provisionador OIDC da CA. Em seguida, escolha \"CA de Passo\" como tipo de autenticação do host."
-    },
-    "privateEndpoints": {
-      "label": "Hosts CA privados permitidos",
-      "description": "Para hosts privados, o fluxo de certificados da AC (Autoridade Certificadora) pode contactar: a própria AC e, se for interna, o seu fornecedor de identidade. Separe-os com vírgulas ou com novas linhas."
-    },
-    "redirectUri": {
-      "label": "URI de redireccionamento",
-      "description": "Registe este URL como um URI de redireccionamento permitido junto do fornecedor de identidade por trás do provisionador OIDC."
-    },
-    "legacyCallback": {
-      "label": "Utilize o URI de redirecionamento antigo",
-      "description": "Continue a enviar /host/step-ca-callback, o URI de redireccionamento utilizado antes da versão 2.9. Desative-o assim que o seu fornecedor de identidade permitir o novo."
-    }
-  },
-  "plugin": {
-    "name": "Etapa CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/ro_RO.json b/plugins/step-ca/locales/translated/ro_RO.json
deleted file mode 100644
index ac6599c66..000000000
--- a/plugins/step-ca/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Pasul CA"
-  },
-  "editor": {
-    "label": "Pasul CA",
-    "description": "Conectați-vă prin intermediul furnizorului de identitate și permiteți ca autoritatea de certificare Step CA să emită un certificat SSH de scurtă durată pentru această gazdă. Adresa URL a autorității de certificare, amprenta rădăcină și furnizorul OIDC sunt setate de un administrator în secțiunea Step CA din Setări administrator.",
-    "docs": "Vizualizați documentele"
-  },
-  "dialog": {
-    "title": "Pasul Autentificare CA necesară",
-    "description": "Finalizați autentificarea în browser pentru a continua. Certificatul rămâne valabil atât timp cât permite autoritatea de certificare (CA).",
-    "openBrowser": "Deschideți browserul pentru autentificare",
-    "waiting": "Se așteaptă autentificarea în browser...",
-    "authenticating": "Se procesează autentificarea..."
-  },
-  "errors": {
-    "authFailed": "Autentificarea a eșuat. Verificați acreditările și încercați din nou.",
-    "timeout": "Autentificarea a expirat. Vă rugăm să încercați din nou."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "URL-ul CA",
-      "description": "URL-ul https al autorității dvs. de certificare Smallstep. Lăsați URL-ul CA, amprenta și aprovizionatorul necompletate pentru a dezactiva Step CA.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Amprentă digitală rădăcină (SHA-256)",
-      "description": "Amprenta electronică a certificatului rădăcină, așa cum se arată în pasul ca bootstrap."
-    },
-    "provisioner": {
-      "label": "Numele furnizorului OIDC",
-      "description": "Numele furnizorului OIDC al CA. Apoi, alegeți „Step CA” ca tip de autentificare al gazdei."
-    },
-    "privateEndpoints": {
-      "label": "Gazde private permise de Step CA",
-      "description": "Gazde private pe care fluxul de certificate Step CA le poate contacta: CA-ul în sine și, dacă este intern, furnizorul dvs. de identitate. Separați-le prin virgule sau linii noi."
-    },
-    "redirectUri": {
-      "label": "URI de redirecționare",
-      "description": "Înregistrați această adresă URL ca URI de redirecționare permisă la furnizorul de identitate din spatele furnizorului OIDC."
-    },
-    "legacyCallback": {
-      "label": "Folosește vechiul URI de redirecționare",
-      "description": "Continuă să trimiți /host/step-ca-callback, URI-ul de redirecționare folosit înainte de versiunea 2.9. Dezactivează această opțiune odată ce furnizorul de identitate îl permite pe cel nou."
-    }
-  },
-  "plugin": {
-    "name": "Pasul CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/ru_RU.json b/plugins/step-ca/locales/translated/ru_RU.json
deleted file mode 100644
index 8bb3e4414..000000000
--- a/plugins/step-ca/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Шаг CA"
-  },
-  "editor": {
-    "label": "Шаг CA",
-    "description": "Войдите в систему через своего поставщика идентификации и позвольте вашему центру сертификации Step CA выдать краткосрочный SSH-сертификат для этого хоста. URL-адрес центра сертификации, отпечаток корневого сертификата и средство подготовки OIDC задаются администратором в разделе Step CA в настройках администратора.",
-    "docs": "Документация"
-  },
-  "dialog": {
-    "title": "Требуется аутентификация центра сертификации (CA) на этапе Step.",
-    "description": "Для продолжения необходимо пройти полную аутентификацию в браузере. Сертификат остается действительным до тех пор, пока это разрешает ваш центр сертификации.",
-    "openBrowser": "Открыть браузер для аутентификации",
-    "waiting": "Ожидание аутентификации в браузере...",
-    "authenticating": "Обработка аутентификации..."
-  },
-  "errors": {
-    "authFailed": "Аутентификация не удалась. Проверьте учётные данные и попробуйте снова.",
-    "timeout": "Время аутентификации истекло. Попробуйте снова."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "CA URL",
-      "description": "URL-адрес вашего центра сертификации smallstep с протоколом HTTPS. Оставьте поля URL-адреса центра сертификации, отпечатка и инициализатора пустыми, чтобы отключить центр сертификации step.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Отпечаток корневого ключа (SHA-256)",
-      "description": "Отпечаток корневого сертификата, как показано на шаге загрузки ca."
-    },
-    "provisioner": {
-      "label": "имя поставщика OIDC",
-      "description": "Имя средства подготовки OIDC центра сертификации. Затем выберите \"Step CA\" в качестве типа аутентификации хоста."
-    },
-    "privateEndpoints": {
-      "label": "Разрешены частные хосты Step CA",
-      "description": "Частные хосты, для которых процесс сертификации Step CA может взаимодействовать с центром сертификации, могут связываться с самим центром сертификации и, если он внутренний, с вашим поставщиком идентификации. Разделяйте их запятыми или переносами строк."
-    },
-    "redirectUri": {
-      "label": "URI перенаправления",
-      "description": "Зарегистрируйте этот URL-адрес в качестве разрешенного URI перенаправления у поставщика идентификационных данных, стоящего за устройством предоставления OIDC."
-    },
-    "legacyCallback": {
-      "label": "Используйте старый URI перенаправления.",
-      "description": "Продолжайте отправлять /host/step-ca-callback, URI перенаправления, использовавшийся до версии 2.9. Отключите эту функцию, как только ваш поставщик идентификации разрешит использование нового URI."
-    }
-  },
-  "plugin": {
-    "name": "Шаг CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/sr_SP.json b/plugins/step-ca/locales/translated/sr_SP.json
deleted file mode 100644
index c43cf450e..000000000
--- a/plugins/step-ca/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Корак CA"
-  },
-  "editor": {
-    "label": "Корак CA",
-    "description": "Пријавите се преко свог добављача идентитета и дозволите свом Step CA да изда краткотрајни SSH сертификат за овај хост. CA URL, root отисак прста и OIDC provisioner подешава администратор у одељку Step CA у администраторским подешавањима.",
-    "docs": "Прикажи документе"
-  },
-  "dialog": {
-    "title": "Потребна је аутентификација CA корака",
-    "description": "Завршите аутентификацију у прегледачу да бисте наставили. Сертификат остаје важећи онолико дуго колико вам то дозвољава ваш ЦА.",
-    "openBrowser": "Отворите прегледач за аутентификацију",
-    "waiting": "Чекање аутентификације у прегледачу...",
-    "authenticating": "Обрада аутентификације..."
-  },
-  "errors": {
-    "authFailed": "Аутентификација није успела. Проверите своје акредитиве и покушајте поново.",
-    "timeout": "Временско ограничење за аутентификацију је истекло. Молимо покушајте поново."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "URL адреса у Калифорнији",
-      "description": "https URL вашег smallstep CA. Оставите CA URL, отисак прста и provisioner празне да бисте искључили Step CA.",
-      "placeholder": "хттпс://ца.интернал:9000"
-    },
-    "fingerprint": {
-      "label": "Отисак коренског идентификатора (SHA-256)",
-      "description": "Отисак прста коренског сертификата, као што је приказано у кораку ca bootstrap."
-    },
-    "provisioner": {
-      "label": "Име OIDC провизора",
-      "description": "Име OIDC провизора CA. Затим изаберите „Корак CA“ као тип аутентификације хоста."
-    },
-    "privateEndpoints": {
-      "label": "Дозвољени приватни хостови Step CA",
-      "description": "Приватни хостови које ток сертификата Step CA може контактирати: сам CA и, ако је интерно, ваш добављач идентитета. Раздвојите их зарезима или новим редовима."
-    },
-    "redirectUri": {
-      "label": "URI за преусмеравање",
-      "description": "Региструјте ову URL адресу као дозвољени URI за преусмеравање код добављача идентитета иза OIDC провизора."
-    },
-    "legacyCallback": {
-      "label": "Користите стари URI за преусмеравање",
-      "description": "Наставите да шаљете /host/step-ca-callback, URI за преусмеравање који је коришћен пре верзије 2.9. Искључите ово када ваш добављач идентитета дозволи нови."
-    }
-  },
-  "plugin": {
-    "name": "Корак CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/sv_SE.json b/plugins/step-ca/locales/translated/sv_SE.json
deleted file mode 100644
index 6dfdb4207..000000000
--- a/plugins/step-ca/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Steg CA"
-  },
-  "editor": {
-    "label": "Steg CA",
-    "description": "Logga in via din identitetsleverantör och låt din Step CA utfärda ett kortlivat SSH-certifikat för den här värden. CA-URL:en, rotfingeravtrycket och OIDC-provisionern ställs in av en administratör i avsnittet Step CA i administratörsinställningarna.",
-    "docs": "Visa dokument"
-  },
-  "dialog": {
-    "title": "Steg CA-autentisering krävs",
-    "description": "Slutför autentiseringen i din webbläsare för att fortsätta. Certifikatet är giltigt så länge din certifikatutfärdare tillåter det.",
-    "openBrowser": "Öppna webbläsaren för att autentisera",
-    "waiting": "Väntar på autentisering i webbläsaren...",
-    "authenticating": "Bearbetar autentisering..."
-  },
-  "errors": {
-    "authFailed": "Autentiseringen misslyckades. Kontrollera dina inloggningsuppgifter och försök igen.",
-    "timeout": "Autentiseringen har gått ut. Försök igen."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "CA-URL",
-      "description": "https-URL:en för din smallstep CA. Lämna CA-URL:en, fingeravtrycket och provisionern tomma för att inaktivera Step CA.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Rotfingeravtryck (SHA-256)",
-      "description": "Rotcertifikatets fingeravtryck, som visas i steg ca bootstrap."
-    },
-    "provisioner": {
-      "label": "OIDC-provisioneringsnamn",
-      "description": "Namnet på CA:s OIDC-provisionerare. Välj sedan \"Step CA\" som värdens autentiseringstyp."
-    },
-    "privateEndpoints": {
-      "label": "Tillåtna privata Step CA-värdar",
-      "description": "Privata värdar som Step CA-certifikatflödet kan kontakta: själva CA:n och, om den är intern, din identitetsleverantör. Separera dem med kommatecken eller radskift."
-    },
-    "redirectUri": {
-      "label": "Omdirigerings-URI",
-      "description": "Registrera den här URL:en som en tillåten omdirigerings-URI hos identitetsleverantören bakom OIDC-provisioneraren."
-    },
-    "legacyCallback": {
-      "label": "Använd den gamla omdirigerings-URI:n",
-      "description": "Fortsätt skicka /host/step-ca-callback, den omdirigerings-URI som användes före version 2.9. Stäng av detta när din identitetsleverantör tillåter den nya."
-    }
-  },
-  "plugin": {
-    "name": "Steg CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/th_TH.json b/plugins/step-ca/locales/translated/th_TH.json
deleted file mode 100644
index 8e730351a..000000000
--- a/plugins/step-ca/locales/translated/th_TH.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "ขั้นตอน CA"
-  },
-  "editor": {
-    "label": "ขั้นตอน CA",
-    "description": "ลงชื่อเข้าใช้ผ่านผู้ให้บริการยืนยันตัวตนของคุณ และให้ Step CA ออกใบรับรอง SSH ที่มีอายุสั้นสำหรับโฮสต์นี้ URL ของ CA, ลายนิ้วมือรูท และตัวจัดเตรียม OIDC จะถูกตั้งค่าโดยผู้ดูแลระบบในส่วน Step CA ของการตั้งค่าผู้ดูแลระบบ",
-    "docs": "ดูเอกสาร"
-  },
-  "dialog": {
-    "title": "ต้องมีการตรวจสอบสิทธิ์ CA ในขั้นตอนนี้",
-    "description": "โปรดยืนยันตัวตนในเบราว์เซอร์ของคุณเพื่อดำเนินการต่อ ใบรับรองจะยังคงใช้งานได้ตราบเท่าที่หน่วยงานออกใบรับรอง (CA) ของคุณอนุญาต",
-    "openBrowser": "เปิดเบราว์เซอร์เพื่อยืนยันตัวตน",
-    "waiting": "กำลังรอการยืนยันตัวตนในเบราว์เซอร์...",
-    "authenticating": "กำลังตรวจสอบสิทธิ์..."
-  },
-  "errors": {
-    "authFailed": "การตรวจสอบสิทธิ์ล้มเหลว โปรดตรวจสอบข้อมูลประจำตัวของคุณและลองอีกครั้ง",
-    "timeout": "การตรวจสอบสิทธิ์หมดเวลา โปรดลองอีกครั้ง"
-  },
-  "settings": {
-    "caUrl": {
-      "label": "แคลิฟอร์เนีย URL",
-      "description": "URL https ของ CA smallstep ของคุณ เว้นว่าง URL ของ CA, ลายนิ้วมือ และ provisioner ไว้เพื่อปิดใช้งาน Step CA",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "ลายนิ้วมือราก (SHA-256)",
-      "description": "ลายนิ้วมือของใบรับรองราก ดังที่แสดงโดยขั้นตอน ca bootstrap"
-    },
-    "provisioner": {
-      "label": "ชื่อผู้จัดเตรียม OIDC",
-      "description": "ชื่อของตัวจัดเตรียม OIDC ของ CA จากนั้นเลือก \"Step CA\" เป็นประเภทการตรวจสอบสิทธิ์ของโฮสต์"
-    },
-    "privateEndpoints": {
-      "label": "อนุญาตให้โฮสต์ Step CA ส่วนตัว",
-      "description": "สำหรับโฮสต์ส่วนตัว กระบวนการขอใบรับรอง Step CA อาจติดต่อกับ: CA เอง และหากเป็นโฮสต์ภายใน ก็อาจติดต่อกับผู้ให้บริการยืนยันตัวตนของคุณด้วย คั่นด้วยเครื่องหมายจุลภาคหรือขึ้นบรรทัดใหม่"
-    },
-    "redirectUri": {
-      "label": "URI การเปลี่ยนเส้นทาง",
-      "description": "ลงทะเบียน URL นี้เป็น URI ที่อนุญาตให้เปลี่ยนเส้นทางได้กับผู้ให้บริการข้อมูลประจำตัวที่อยู่เบื้องหลังตัวจัดเตรียม OIDC"
-    },
-    "legacyCallback": {
-      "label": "ใช้ URI การเปลี่ยนเส้นทางแบบเดิม",
-      "description": "ส่ง /host/step-ca-callback ต่อไป ซึ่งเป็น URI สำหรับการเปลี่ยนเส้นทางที่ใช้ก่อนเวอร์ชัน 2.9 ปิดใช้งานเมื่อผู้ให้บริการยืนยันตัวตนของคุณอนุญาตให้ใช้ URI ใหม่แล้ว"
-    }
-  },
-  "plugin": {
-    "name": "ขั้นตอน CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/tr_TR.json b/plugins/step-ca/locales/translated/tr_TR.json
deleted file mode 100644
index b877d9e21..000000000
--- a/plugins/step-ca/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Adım CA"
-  },
-  "editor": {
-    "label": "Adım CA",
-    "description": "Kimlik sağlayıcınız aracılığıyla oturum açın ve Step CA'nızın bu sunucu için kısa süreli bir SSH sertifikası düzenlemesine izin verin. CA URL'si, kök parmak izi ve OIDC sağlayıcısı, Yönetici Ayarları'nın Step CA bölümünde bir yönetici tarafından ayarlanır.",
-    "docs": "Belgelere bak"
-  },
-  "dialog": {
-    "title": "CA Kimlik Doğrulaması Gerekli Adım",
-    "description": "Devam etmek için tarayıcınızda kimlik doğrulamasını tamamlayın. Sertifika, sertifika yetkilinizin izin verdiği süre boyunca geçerli kalır.",
-    "openBrowser": "Kimlik Doğrulaması için Tarayıcı Aç",
-    "waiting": "Tarayıcıda kimlik doğrulaması bekleniyor...",
-    "authenticating": "Kimlik doğrulaması işleniyor..."
-  },
-  "errors": {
-    "authFailed": "Kimlik doğrulaması başarısız oldu. Lütfen kimlik bilgilerinizi kontrol edip tekrar deneyin.",
-    "timeout": "Kimlik doğrulaması zaman aşımına uğradı. Lütfen tekrar deneyin."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "CA URL",
-      "description": "Smallstep CA'nızın https URL'si. Step CA'yı devre dışı bırakmak için CA URL'sini, parmak izini ve provizyon sağlayıcısını boş bırakın.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Kök parmak izi (SHA-256)",
-      "description": "Kök sertifika parmak izi, ca bootstrap adımı tarafından gösterildiği gibidir."
-    },
-    "provisioner": {
-      "label": "OIDC tedarikçi adı",
-      "description": "CA'nın OIDC sağlayıcısının adını girin. Ardından, ana bilgisayarın kimlik doğrulama türü olarak \"Adım CA\"yı seçin."
-    },
-    "privateEndpoints": {
-      "label": "Özel Step CA sunucularına izin verildi.",
-      "description": "Özel sunucular, Step CA sertifika akışı kapsamında şu kuruluşlarla iletişime geçebilir: CA'nın kendisi ve (dahili ise) kimlik sağlayıcınız. Bunları virgül veya yeni satırlarla ayırın."
-    },
-    "redirectUri": {
-      "label": "Yönlendirme URI'si",
-      "description": "Bu URL'yi, OIDC sağlayıcısının arkasındaki kimlik sağlayıcısında izin verilen yönlendirme URI'si olarak kaydedin."
-    },
-    "legacyCallback": {
-      "label": "Eski yönlendirme URI'sini kullanın.",
-      "description": "2.9 öncesinde kullanılan yönlendirme URI'si olan /host/step-ca-callback'i göndermeye devam edin. Kimlik sağlayıcınız yenisine izin verdiğinde bunu kapatın."
-    }
-  },
-  "plugin": {
-    "name": "Adım CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/uk_UA.json b/plugins/step-ca/locales/translated/uk_UA.json
deleted file mode 100644
index f0e754c16..000000000
--- a/plugins/step-ca/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Крок CA"
-  },
-  "editor": {
-    "label": "Крок CA",
-    "description": "Увійдіть через свого постачальника ідентифікаційних даних і дозвольте вашому центру сертифікації Step CA видати короткочасний SSH-сертифікат для цього хоста. URL-адресу центру сертифікації CA, кореневий відбиток і постачальник OIDC встановлює адміністратор у розділі «Центральна сертифікація Step» у налаштуваннях адміністратора.",
-    "docs": "Переглянути документи"
-  },
-  "dialog": {
-    "title": "Крок автентифікації CA Потрібна",
-    "description": "Щоб продовжити, завершіть автентифікацію у вашому браузері. Сертифікат залишається дійсним стільки, скільки дозволяє ваш центр сертифікації.",
-    "openBrowser": "Відкрийте браузер для автентифікації",
-    "waiting": "Очікування автентифікації у браузері...",
-    "authenticating": "Обробка автентифікації..."
-  },
-  "errors": {
-    "authFailed": "Помилка автентифікації. Перевірте свої облікові дані та спробуйте ще раз.",
-    "timeout": "Час очікування автентифікації минув. Спробуйте ще раз."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "URL-адреса Каліфорнії",
-      "description": "URL-адреса https вашого центру сертифікації SmallStep. Залиште поля URL-адреса центру сертифікації, відбиток пальця та провайдер порожніми, щоб вимкнути Step CA.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Кореневий відбиток (SHA-256)",
-      "description": "Відбиток кореневого сертифіката, як показано на кроці ca bootstrap."
-    },
-    "provisioner": {
-      "label": "Ім'я постачальника OIDC",
-      "description": "Ім'я постачальника OIDC CA. Потім виберіть \"Step CA\" як тип автентифікації хоста."
-    },
-    "privateEndpoints": {
-      "label": "Дозволені приватні хости Step CA",
-      "description": "Приватні хости, з якими може зв’язатися потік сертифікатів Step CA: сам CA та, якщо внутрішній, ваш постачальник ідентифікаційних даних. Розділяйте їх комами або переведіть у новий рядок."
-    },
-    "redirectUri": {
-      "label": "URI перенаправлення",
-      "description": "Зареєструйте цю URL-адресу як дозволений URI перенаправлення у постачальника ідентифікаційних даних, що стоїть за провайдером OIDC."
-    },
-    "legacyCallback": {
-      "label": "Використовувати старий URI перенаправлення",
-      "description": "Продовжуйте надсилати /host/step-ca-callback, URI перенаправлення, який використовувався до версії 2.9. Вимкніть цю функцію, щойно ваш постачальник ідентифікаційних даних дозволить новий."
-    }
-  },
-  "plugin": {
-    "name": "Крок CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/vi_VN.json b/plugins/step-ca/locales/translated/vi_VN.json
deleted file mode 100644
index 6d2b3b588..000000000
--- a/plugins/step-ca/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "Bước CA"
-  },
-  "editor": {
-    "label": "Bước CA",
-    "description": "Đăng nhập thông qua nhà cung cấp danh tính của bạn và cho phép Step CA cấp chứng chỉ SSH có thời hạn ngắn cho máy chủ này. URL CA, dấu vân tay gốc và trình cung cấp OIDC được quản trị viên thiết lập trong phần Step CA của Cài đặt quản trị.",
-    "docs": "Xem tài liệu"
-  },
-  "dialog": {
-    "title": "Bước xác thực CA bắt buộc",
-    "description": "Hoàn tất xác thực trên trình duyệt của bạn để tiếp tục. Chứng chỉ sẽ có hiệu lực miễn là CA của bạn cho phép.",
-    "openBrowser": "Mở trình duyệt để xác thực",
-    "waiting": "Đang chờ xác thực trên trình duyệt...",
-    "authenticating": "Đang xử lý xác thực..."
-  },
-  "errors": {
-    "authFailed": "Xác thực thất bại. Vui lòng kiểm tra thông tin đăng nhập và thử lại.",
-    "timeout": "Xác thực đã hết thời gian chờ. Vui lòng thử lại."
-  },
-  "settings": {
-    "caUrl": {
-      "label": "URL CA",
-      "description": "URL HTTPS của CA Smallstep của bạn. Để trống URL CA, dấu vân tay và trình cung cấp để tắt CA Smallstep.",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "Dấu vân tay gốc (SHA-256)",
-      "description": "Dấu vân tay của chứng chỉ gốc, như được hiển thị bởi bước ca bootstrap."
-    },
-    "provisioner": {
-      "label": "Tên trình cung cấp OIDC",
-      "description": "Tên của trình cung cấp OIDC của CA. Sau đó chọn \"Step CA\" làm loại xác thực của máy chủ."
-    },
-    "privateEndpoints": {
-      "label": "Cho phép máy chủ Step CA riêng tư",
-      "description": "Các máy chủ riêng mà quy trình chứng chỉ CA từng bước có thể liên hệ: chính CA và, nếu là máy chủ nội bộ, nhà cung cấp danh tính của bạn. Phân tách chúng bằng dấu phẩy hoặc xuống dòng."
-    },
-    "redirectUri": {
-      "label": "URI chuyển hướng",
-      "description": "Đăng ký URL này như một URI chuyển hướng được cho phép với nhà cung cấp danh tính đứng sau trình cung cấp OIDC."
-    },
-    "legacyCallback": {
-      "label": "Sử dụng URI chuyển hướng cũ.",
-      "description": "Tiếp tục gửi /host/step-ca-callback, URI chuyển hướng được sử dụng trước phiên bản 2.9. Tắt chức năng này khi nhà cung cấp định danh của bạn cho phép sử dụng URI mới."
-    }
-  },
-  "plugin": {
-    "name": "Bước CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/zh_CN.json b/plugins/step-ca/locales/translated/zh_CN.json
deleted file mode 100644
index d6e74af81..000000000
--- a/plugins/step-ca/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "步骤 CA"
-  },
-  "editor": {
-    "label": "步骤 CA",
-    "description": "通过您的身份提供商登录，并让您的 Step CA 为此主机颁发一个短期 SSH 证书。CA URL、根指纹和 OIDC 配置器由管理员在“管理设置”的 Step CA 部分中设置。",
-    "docs": "查看文档"
-  },
-  "dialog": {
-    "title": "步骤 CA 身份验证是必需的",
-    "description": "请在浏览器中完成身份验证以继续。证书的有效期取决于您的证书颁发机构 (CA) 的许可期限。",
-    "openBrowser": "打开浏览器进行认证",
-    "waiting": "等待浏览器认证...",
-    "authenticating": "正在处理认证..."
-  },
-  "errors": {
-    "authFailed": "认证失败，请检查凭据并重试。",
-    "timeout": "认证超时，请重试。"
-  },
-  "settings": {
-    "caUrl": {
-      "label": "CA URL",
-      "description": "您的 SmallStep CA 的 HTTPS URL。如果将 CA URL、指纹和配置器留空，则禁用 Step CA。",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "根指纹（SHA-256）",
-      "description": "根证书指纹，如步骤 ca bootstrap 所示。"
-    },
-    "provisioner": {
-      "label": "OIDC配置器名称",
-      "description": "CA 的 OIDC 配置器的名称。然后选择“步骤 CA”作为主机的身份验证类型。"
-    },
-    "privateEndpoints": {
-      "label": "允许的私有步骤 CA 主机",
-      "description": "步骤 CA 证书流程中的私有主机可能会联系：CA 本身，以及（如果是内部）您的身份提供商。请用逗号或换行符分隔它们。"
-    },
-    "redirectUri": {
-      "label": "重定向 URI",
-      "description": "将此 URL 注册为 OIDC 配置器后面的身份提供商允许的重定向 URI。"
-    },
-    "legacyCallback": {
-      "label": "使用旧的重定向 URI",
-      "description": "继续发送 /host/step-ca-callback，这是 2.9 版本之前使用的重定向 URI。一旦您的身份提供商允许使用新的重定向 URI，就将其关闭。"
-    }
-  },
-  "plugin": {
-    "name": "步骤 CA"
-  }
-}
diff --git a/plugins/step-ca/locales/translated/zh_TW.json b/plugins/step-ca/locales/translated/zh_TW.json
deleted file mode 100644
index 4195855d0..000000000
--- a/plugins/step-ca/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "hosts": {
-    "filterAuthStepca": "步驟 CA"
-  },
-  "editor": {
-    "label": "步驟 CA",
-    "description": "透過您的身分提供者登錄，並讓您的 Step CA 為此主機頒發短期 SSH 憑證。 CA URL、根指紋和 OIDC 配置器由管理員在「管理設定」的 Step CA 部分中設定。",
-    "docs": "檢視文件"
-  },
-  "dialog": {
-    "title": "步驟 CA 身份驗證是必需的",
-    "description": "請在瀏覽器中完成身份驗證以繼續。憑證的有效期限取決於您的憑證授權單位 (CA) 的許可期限。",
-    "openBrowser": "開啟瀏覽器以進行驗證",
-    "waiting": "正在等待瀏覽器中的驗證…",
-    "authenticating": "正在處理驗證…"
-  },
-  "errors": {
-    "authFailed": "驗證失敗。請檢查您的憑證並再試一次。",
-    "timeout": "驗證逾時。請再試一次。"
-  },
-  "settings": {
-    "caUrl": {
-      "label": "CA URL",
-      "description": "您的 SmallStep CA 的 HTTPS URL。如果將 CA URL、指紋和配置器留空，則停用 Step CA。",
-      "placeholder": "https://ca.internal:9000"
-    },
-    "fingerprint": {
-      "label": "根指紋（SHA-256）",
-      "description": "根證書指紋，如步驟 ca bootstrap 所示。"
-    },
-    "provisioner": {
-      "label": "OIDC配置器名稱",
-      "description": "CA 的 OIDC 配置器的名稱。然後選擇“步驟 CA”作為主機的身份驗證類型。"
-    },
-    "privateEndpoints": {
-      "label": "允許的私有步驟 CA 主機",
-      "description": "步驟 CA 憑證流程中的私人主機可能會聯絡：CA 本身，以及（如果是內部）您的身分提供者。請用逗號或換行符號分隔它們。"
-    },
-    "redirectUri": {
-      "label": "重定向 URI",
-      "description": "將此 URL 註冊為 OIDC 配置器後面的身分提供者允許的重定向 URI。"
-    },
-    "legacyCallback": {
-      "label": "使用舊的重定向 URI",
-      "description": "繼續發送 /host/step-ca-callback，這是 2.9 版本之前使用的重定向 URI。一旦您的身分提供者允許使用新的重定向 URI，就將其關閉。"
-    }
-  },
-  "plugin": {
-    "name": "步驟 CA"
-  }
-}
diff --git a/plugins/step-ca/manifest.json b/plugins/step-ca/manifest.json
deleted file mode 100644
index 26f888767..000000000
--- a/plugins/step-ca/manifest.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "id": "step-ca",
-  "name": "Step CA",
-  "version": "1.0.0",
-  "description": "Connect to hosts with short-lived SSH certificates from a smallstep step-ca server, after signing in through its OIDC provisioner.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Access & Security",
-  "icon": "ShieldCheck",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "db:own",
-    "secrets:own",
-    "network:outbound",
-    "network:serve",
-    "auth:provide",
-    "ui:surface"
-  ],
-  "contributes": {
-    "auth": {
-      "sshAuthTypes": ["stepca"]
-    },
-    "settings": {
-      "admin": [
-        {
-          "key": "caUrl",
-          "type": "string",
-          "labelKey": "settings.caUrl.label",
-          "descriptionKey": "settings.caUrl.description",
-          "placeholderKey": "settings.caUrl.placeholder",
-          "default": ""
-        },
-        {
-          "key": "fingerprint",
-          "type": "string",
-          "labelKey": "settings.fingerprint.label",
-          "descriptionKey": "settings.fingerprint.description",
-          "default": ""
-        },
-        {
-          "key": "provisioner",
-          "type": "string",
-          "labelKey": "settings.provisioner.label",
-          "descriptionKey": "settings.provisioner.description",
-          "default": ""
-        },
-        {
-          "key": "privateEndpoints",
-          "type": "textarea",
-          "labelKey": "settings.privateEndpoints.label",
-          "descriptionKey": "settings.privateEndpoints.description",
-          "default": ""
-        },
-        {
-          "key": "redirectUri",
-          "type": "custom",
-          "component": "redirectUri"
-        },
-        {
-          "key": "legacyCallback",
-          "type": "boolean",
-          "labelKey": "settings.legacyCallback.label",
-          "descriptionKey": "settings.legacyCallback.description",
-          "default": false
-        }
-      ]
-    },
-    "http": {
-      "legacyRedirects": [
-        {
-          "from": "/host/step-ca-callback",
-          "to": "/callback"
-        }
-      ]
-    },
-    "uses": ["terminal.overlay"]
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"]
-}
diff --git a/plugins/step-ca/migrations/mysql/0001_create_certs.sql b/plugins/step-ca/migrations/mysql/0001_create_certs.sql
deleted file mode 100644
index f37e8e92c..000000000
--- a/plugins/step-ca/migrations/mysql/0001_create_certs.sql
+++ /dev/null
@@ -1,16 +0,0 @@
--- step-ca 0001: create_certs
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `p_step_ca_certs` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `host_id` int NOT NULL,
-  `ssh_cert` text NOT NULL,
-  `private_key` text NOT NULL,
-  `email` text,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `expires_at` varchar(255) NOT NULL,
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX `idx_step_ca_certs_user_host` ON `p_step_ca_certs` (`user_id`, `host_id`);
diff --git a/plugins/step-ca/migrations/postgres/0001_create_certs.sql b/plugins/step-ca/migrations/postgres/0001_create_certs.sql
deleted file mode 100644
index 5b3e48c03..000000000
--- a/plugins/step-ca/migrations/postgres/0001_create_certs.sql
+++ /dev/null
@@ -1,16 +0,0 @@
--- step-ca 0001: create_certs
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "p_step_ca_certs" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "host_id" integer NOT NULL,
-  "ssh_cert" text NOT NULL,
-  "private_key" text NOT NULL,
-  "email" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "expires_at" varchar(255) NOT NULL,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_step_ca_certs_user_host" ON "p_step_ca_certs" ("user_id", "host_id");
diff --git a/plugins/step-ca/migrations/snapshot.json b/plugins/step-ca/migrations/snapshot.json
deleted file mode 100644
index c90de0e8e..000000000
--- a/plugins/step-ca/migrations/snapshot.json
+++ /dev/null
@@ -1,51 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "certs": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "hostId": {
-          "type": "refHost",
-          "notNull": true
-        },
-        "sshCert": {
-          "type": "text",
-          "notNull": true
-        },
-        "privateKey": {
-          "type": "text",
-          "notNull": true
-        },
-        "email": {
-          "type": "text"
-        },
-        "createdAt": {
-          "type": "text",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "expiresAt": {
-          "type": "varchar",
-          "length": 255,
-          "notNull": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_step_ca_certs_user_host",
-          "columns": ["userId", "hostId"],
-          "unique": true
-        }
-      ]
-    }
-  }
-}
diff --git a/plugins/step-ca/migrations/sqlite/0001_create_certs.sql b/plugins/step-ca/migrations/sqlite/0001_create_certs.sql
deleted file mode 100644
index 68aa897c8..000000000
--- a/plugins/step-ca/migrations/sqlite/0001_create_certs.sql
+++ /dev/null
@@ -1,16 +0,0 @@
--- step-ca 0001: create_certs
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "p_step_ca_certs" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "host_id" integer NOT NULL,
-  "ssh_cert" text NOT NULL,
-  "private_key" text NOT NULL,
-  "email" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "expires_at" text NOT NULL,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_step_ca_certs_user_host" ON "p_step_ca_certs" ("user_id", "host_id");
diff --git a/plugins/step-ca/package.json b/plugins/step-ca/package.json
deleted file mode 100644
index 28828bd1f..000000000
--- a/plugins/step-ca/package.json
+++ /dev/null
@@ -1,34 +0,0 @@
-{
-  "name": "@termix-plugin/step-ca",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "lucide-react": "^1.33.0",
-    "redis": "^6.2.1"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "react": "^19.2.8",
-    "sonner": "^2.0.8"
-  }
-}
diff --git a/plugins/step-ca/src/backend/auth-session.ts b/plugins/step-ca/src/backend/auth-session.ts
deleted file mode 100644
index 9b02efd3f..000000000
--- a/plugins/step-ca/src/backend/auth-session.ts
+++ /dev/null
@@ -1,378 +0,0 @@
-import { randomBytes } from "node:crypto";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { CertStore } from "./cert-store.js";
-import type { CallbackQuery, CallbackResult, Runtime } from "./runtime.js";
-import {
-  buildAuthorizationUrl,
-  createPkce,
-  decodeJwtClaims,
-  discoverOidcEndpoints,
-  exchangeCodeForIdToken,
-  fetchRootCertificate,
-  findOidcProvisioner,
-  generateSshKeyPair,
-  parseSshCertificate,
-  signSshCertificate,
-  type StepCaTarget,
-} from "./client.js";
-
-/** The redirect URI 2.8 registered with identity providers. */
-export const LEGACY_CALLBACK_PATH = "/host/step-ca-callback";
-export const CALLBACK_PATH = "/plugin-api/step-ca/callback";
-
-const AUTH_TIMEOUT_MS = 5 * 60 * 1000;
-const REMOTE_CALLBACK_WAIT_MS = 30_000;
-const REMOTE_POLL_MS = 250;
-
-/** The terminal socket, as far as a sign-in needs it. */
-export interface SignInSocket {
-  send: (data: string) => void;
-  on: (event: "close", listener: () => void) => void;
-}
-
-export interface StartRequest {
-  userId: string;
-  hostId: number;
-  username: string;
-  socket: SignInSocket;
-  requestOrigin: string;
-}
-
-interface Session {
-  state: string;
-  userId: string;
-  hostId: number;
-  username: string;
-  socket: SignInSocket;
-  target: StepCaTarget;
-  rootPem: string;
-  clientId: string;
-  clientSecret?: string;
-  tokenEndpoint: string;
-  redirectUri: string;
-  codeVerifier: string;
-  nonce: string;
-  keyPair: { publicKeyLine: string; privateKeyPem: string };
-  timeout: ReturnType<typeof setTimeout>;
-  commandPoll: ReturnType<typeof setInterval> | null;
-  processing: boolean;
-  completed: boolean;
-}
-
-export interface StepCaSettings {
-  caUrl: string;
-  fingerprint: string;
-  provisioner: string;
-  privateEndpoints: string[];
-}
-
-/** Comma or newline separated hosts, lower-cased. */
-export function parseHostList(raw: unknown): string[] {
-  if (typeof raw !== "string") return [];
-  return raw
-    .split(/[\s,]+/)
-    .map((entry) => entry.trim().toLowerCase())
-    .filter(Boolean);
-}
-
-function send(socket: SignInSocket, message: Record<string, unknown>): void {
-  try {
-    socket.send(JSON.stringify(message));
-  } catch {
-    // socket already gone
-  }
-}
-
-function errorMessage(error: unknown): string {
-  return error instanceof Error ? error.message : String(error);
-}
-
-export type AuthSessions = ReturnType<typeof createAuthSessions>;
-
-/**
- * Step CA sign-ins in flight: the OIDC authorization-code flow against the
- * CA's provisioner, then the CA signs a fresh key. Created per activation.
- */
-export function createAuthSessions(
-  ctx: PluginContext,
-  deps: { certs: CertStore; runtime: Runtime },
-) {
-  const sessions = new Map<string, Session>();
-
-  async function readSettings(): Promise<StepCaSettings | null> {
-    const [caUrl, fingerprint, provisioner, privateEndpoints] =
-      await Promise.all([
-        ctx.settings.get<string>("caUrl"),
-        ctx.settings.get<string>("fingerprint"),
-        ctx.settings.get<string>("provisioner"),
-        ctx.settings.get<string>("privateEndpoints"),
-      ]);
-    if (!caUrl?.trim() || !fingerprint?.trim() || !provisioner?.trim()) {
-      return null;
-    }
-    return {
-      caUrl: caUrl.trim(),
-      fingerprint: fingerprint.trim(),
-      provisioner: provisioner.trim(),
-      privateEndpoints: parseHostList(privateEndpoints),
-    };
-  }
-
-  async function callbackPath(): Promise<string> {
-    const legacy = await ctx.settings.get<boolean>("legacyCallback");
-    return legacy ? LEGACY_CALLBACK_PATH : CALLBACK_PATH;
-  }
-
-  function end(session: Session, removeRuntime = true): void {
-    clearTimeout(session.timeout);
-    if (session.commandPoll) clearInterval(session.commandPoll);
-    sessions.delete(session.state);
-    if (removeRuntime) void deps.runtime.remove(session.state);
-  }
-
-  async function finish(
-    session: Session,
-    query: CallbackQuery,
-    removeRuntime = true,
-  ): Promise<CallbackResult> {
-    if (query.error || !query.code) {
-      const message =
-        query.error_description || query.error || "Sign-in failed";
-      send(session.socket, {
-        type: "stepca_error",
-        requestId: session.state,
-        error: `Step CA: ${message}`,
-      });
-      end(session, removeRuntime);
-      return { ok: false, message };
-    }
-
-    try {
-      send(session.socket, {
-        type: "stepca_status",
-        requestId: session.state,
-        stage: "authenticating",
-      });
-      const idToken = await exchangeCodeForIdToken({
-        fetch: ctx.fetch,
-        tokenEndpoint: session.tokenEndpoint,
-        clientId: session.clientId,
-        clientSecret: session.clientSecret,
-        code: query.code,
-        redirectUri: session.redirectUri,
-        codeVerifier: session.codeVerifier,
-        allowedPrivateHosts: session.target.allowedPrivateHosts,
-      });
-      const claims = decodeJwtClaims(idToken);
-      if (claims.nonce !== session.nonce) {
-        throw new Error("The identity token does not match this sign-in");
-      }
-      const email = typeof claims.email === "string" ? claims.email : undefined;
-
-      const certificate = await signSshCertificate(
-        session.target,
-        session.rootPem,
-        {
-          publicKeyLine: session.keyPair.publicKeyLine,
-          ott: idToken,
-          principals: [session.username],
-          keyId: email ?? session.username,
-        },
-      );
-
-      const info = parseSshCertificate(certificate);
-      if (info.publicKeyLine !== session.keyPair.publicKeyLine) {
-        throw new Error("The CA returned a certificate for a different key");
-      }
-      if (!info.principals.includes(session.username)) {
-        throw new Error(
-          "The CA certificate does not include the host username",
-        );
-      }
-      const now = Date.now();
-      if (
-        info.validBefore.getTime() <= now ||
-        info.validAfter.getTime() > now + 60_000
-      ) {
-        throw new Error(
-          "The CA returned a certificate outside its validity window",
-        );
-      }
-
-      await deps.certs.save(
-        session.userId,
-        session.hostId,
-        { sshCert: certificate, privateKey: session.keyPair.privateKeyPem },
-        info.validBefore,
-        email,
-      );
-
-      session.completed = true;
-      send(session.socket, {
-        type: "stepca_completed",
-        requestId: session.state,
-        expiresAt: info.validBefore.toISOString(),
-      });
-      end(session, removeRuntime);
-      return { ok: true, message: "Signed in. You can close this window." };
-    } catch (error) {
-      const message = errorMessage(error);
-      ctx.log.error(`Step CA certificate issuance failed: ${message}`);
-      send(session.socket, {
-        type: "stepca_error",
-        requestId: session.state,
-        error: `Step CA: ${message}`,
-      });
-      end(session, removeRuntime);
-      return { ok: false, message };
-    }
-  }
-
-  return {
-    async start(request: StartRequest): Promise<void> {
-      const settings = await readSettings();
-      if (!settings) {
-        send(request.socket, {
-          type: "stepca_config_error",
-          requestId: "",
-          error:
-            "Step CA is not configured. An administrator must set the CA URL, root fingerprint and OIDC provisioner in the Step CA plugin settings.",
-        });
-        return;
-      }
-
-      const state = randomBytes(24).toString("base64url");
-      try {
-        const target: StepCaTarget = {
-          fetch: ctx.fetch,
-          caUrl: settings.caUrl,
-          fingerprint: settings.fingerprint,
-          allowedPrivateHosts: settings.privateEndpoints,
-        };
-        const rootPem = await fetchRootCertificate(target);
-        const provisioner = await findOidcProvisioner(
-          target,
-          rootPem,
-          settings.provisioner,
-        );
-        const endpoints = await discoverOidcEndpoints(
-          ctx.fetch,
-          provisioner.configurationEndpoint,
-          target.allowedPrivateHosts,
-        );
-        const pkce = createPkce();
-        const nonce = randomBytes(16).toString("base64url");
-        const redirectUri = `${request.requestOrigin}${await callbackPath()}`;
-
-        const session: Session = {
-          state,
-          userId: request.userId,
-          hostId: request.hostId,
-          username: request.username,
-          socket: request.socket,
-          target,
-          rootPem,
-          clientId: provisioner.clientID,
-          clientSecret: provisioner.clientSecret,
-          tokenEndpoint: endpoints.tokenEndpoint,
-          redirectUri,
-          codeVerifier: pkce.verifier,
-          nonce,
-          keyPair: generateSshKeyPair(),
-          processing: false,
-          completed: false,
-          commandPoll: null,
-          timeout: setTimeout(() => {
-            const current = sessions.get(state);
-            if (!current || current.completed || current.processing) return;
-            send(request.socket, { type: "stepca_timeout", requestId: state });
-            end(current);
-          }, AUTH_TIMEOUT_MS),
-        };
-        sessions.set(state, session);
-        await deps.runtime.register(state);
-        // Another instance may receive the callback and queue it for us.
-        session.commandPoll = setInterval(() => {
-          if (session.processing || session.completed) return;
-          void deps.runtime.takeCommand(state).then(async (query) => {
-            if (!query || session.processing || session.completed) return;
-            session.processing = true;
-            const result = await finish(session, query, false);
-            await deps.runtime.complete(state, result);
-          });
-        }, REMOTE_POLL_MS);
-        session.commandPoll.unref?.();
-        request.socket.on("close", () => {
-          const current = sessions.get(state);
-          if (current && !current.completed) end(current);
-        });
-
-        send(request.socket, {
-          type: "stepca_status",
-          requestId: state,
-          stage: "chooser",
-          url: buildAuthorizationUrl({
-            authorizationEndpoint: endpoints.authorizationEndpoint,
-            clientId: provisioner.clientID,
-            redirectUri,
-            state,
-            nonce,
-            codeChallenge: pkce.challenge,
-          }),
-        });
-      } catch (error) {
-        ctx.log.error(
-          `Failed to start Step CA authentication: ${errorMessage(error)}`,
-        );
-        send(request.socket, {
-          type: "stepca_error",
-          requestId: state,
-          error: `Step CA: ${errorMessage(error)}`,
-        });
-      }
-    },
-
-    cancel(requestId: string): boolean {
-      const session = sessions.get(requestId);
-      if (!session) return false;
-      end(session);
-      return true;
-    },
-
-    /**
-     * The identity provider's redirect: exchanges the code, has the CA sign
-     * the key and stores the certificate. A sign-in another instance started
-     * is handed to it through the runtime.
-     */
-    async complete(query: CallbackQuery): Promise<CallbackResult> {
-      const session = query.state ? sessions.get(query.state) : undefined;
-      if (!session) {
-        if (!query.state || !(await deps.runtime.submit(query.state, query))) {
-          return {
-            ok: false,
-            message: "This sign-in request is no longer active.",
-          };
-        }
-        const deadline = Date.now() + REMOTE_CALLBACK_WAIT_MS;
-        while (Date.now() < deadline) {
-          const result = await deps.runtime.takeResult(query.state);
-          if (result) return result;
-          await new Promise((resolve) => setTimeout(resolve, REMOTE_POLL_MS));
-        }
-        return {
-          ok: false,
-          message: "The Termix instance handling this sign-in did not respond.",
-        };
-      }
-      if (session.processing || session.completed) {
-        return { ok: false, message: "This sign-in request was already used." };
-      }
-      session.processing = true;
-      return finish(session, query);
-    },
-
-    closeAll(): void {
-      for (const session of [...sessions.values()]) end(session);
-    },
-  };
-}
diff --git a/plugins/step-ca/src/backend/cert-store.ts b/plugins/step-ca/src/backend/cert-store.ts
deleted file mode 100644
index c69797e30..000000000
--- a/plugins/step-ca/src/backend/cert-store.ts
+++ /dev/null
@@ -1,96 +0,0 @@
-import { and, eq } from "drizzle-orm";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// ctx.db.define hands the table back untyped and the drizzle handle is the
-// server's own, so both are typed at this module's edge.
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export interface IssuedCertificate {
-  sshCert: string;
-  privateKey: string;
-}
-
-export type CertStore = ReturnType<typeof createCertStore>;
-
-export function createCertStore(ctx: PluginContext, table: Table) {
-  const client = () => ctx.db.client<Drizzle>();
-  const byUserAndHost = (userId: string, hostId: number) =>
-    and(eq(table.userId, userId), eq(table.hostId, hostId));
-
-  async function find(userId: string, hostId: number) {
-    const rows = await (
-      await client()
-    )
-      .select()
-      .from(table)
-      .where(byUserAndHost(userId, hostId))
-      .limit(1);
-    return rows[0] ?? null;
-  }
-
-  async function remove(userId: string, hostId: number): Promise<boolean> {
-    if (!(await find(userId, hostId))) return false;
-    await (await client()).delete(table).where(byUserAndHost(userId, hostId));
-    await ctx.db.persist();
-    return true;
-  }
-
-  return {
-    async save(
-      userId: string,
-      hostId: number,
-      certificate: IssuedCertificate,
-      expiresAt: Date,
-      email?: string,
-    ): Promise<void> {
-      const values = {
-        sshCert: await ctx.secrets.seal(certificate.sshCert),
-        privateKey: await ctx.secrets.seal(certificate.privateKey),
-        email: email ?? null,
-        createdAt: new Date().toISOString(),
-        expiresAt: expiresAt.toISOString(),
-      };
-      if (await find(userId, hostId)) {
-        await (
-          await client()
-        )
-          .update(table)
-          .set(values)
-          .where(byUserAndHost(userId, hostId));
-      } else {
-        await (
-          await client()
-        )
-          .insert(table)
-          .values({ userId, hostId, ...values });
-      }
-      await ctx.db.persist();
-    },
-
-    /** The usable certificate, or null. Expired or unreadable rows are deleted. */
-    async get(
-      userId: string,
-      hostId: number,
-    ): Promise<IssuedCertificate | null> {
-      const row = await find(userId, hostId);
-      if (!row) return null;
-      const expiresAt = new Date(row.expiresAt).getTime();
-      if (!Number.isFinite(expiresAt) || expiresAt <= Date.now()) {
-        await remove(userId, hostId);
-        return null;
-      }
-      const sshCert = await ctx.secrets.unseal(row.sshCert);
-      const privateKey = await ctx.secrets.unseal(row.privateKey);
-      if (!sshCert || !privateKey) {
-        await remove(userId, hostId);
-        return null;
-      }
-      return { sshCert, privateKey };
-    },
-
-    remove,
-  };
-}
diff --git a/plugins/step-ca/src/backend/client.ts b/plugins/step-ca/src/backend/client.ts
deleted file mode 100644
index d79b97f32..000000000
--- a/plugins/step-ca/src/backend/client.ts
+++ /dev/null
@@ -1,417 +0,0 @@
-import crypto from "node:crypto";
-import type { PluginFetch } from "@termix/plugin-sdk/backend";
-
-/**
- * A minimal client for smallstep's step-ca SSH user-certificate flow, done
- * over its HTTP API rather than the `step` binary:
- *
- *   1. bootstrap the CA's root certificate by fingerprint (GET /root/{fp})
- *   2. read the OIDC provisioner's client settings (GET /provisioners)
- *   3. run the OIDC authorization-code flow against the provider
- *   4. POST the id_token as the one-time token to /1.0/ssh/sign
- */
-
-export interface StepCaTarget {
-  /** ctx.fetch: core's SSRF guard. */
-  fetch: PluginFetch;
-  caUrl: string;
-  fingerprint: string;
-  /** Hosts the SSRF guard may reach even when they resolve to private ranges. */
-  allowedPrivateHosts: readonly string[];
-}
-
-export interface StepCaOidcProvisioner {
-  name: string;
-  clientID: string;
-  clientSecret?: string;
-  configurationEndpoint: string;
-}
-
-export interface OidcEndpoints {
-  authorizationEndpoint: string;
-  tokenEndpoint: string;
-}
-
-const FETCH_TIMEOUT_MS = 15_000;
-
-/** Display-only claims; the CA is the component that verifies the token. */
-export function decodeJwtClaims(token: string): Record<string, unknown> {
-  const payload = token.split(".")[1];
-  if (!payload) return {};
-  try {
-    return JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
-  } catch {
-    return {};
-  }
-}
-
-export function normalizeCaUrl(raw: string): string {
-  const url = new URL(raw.trim());
-  if (url.protocol !== "https:") {
-    throw new Error("Step CA URL must use https");
-  }
-  return url.toString().replace(/\/+$/, "");
-}
-
-export function normalizeFingerprint(raw: string): string {
-  const hex = raw.replace(/[^0-9a-fA-F]/g, "").toLowerCase();
-  if (hex.length !== 64) {
-    throw new Error("CA fingerprint must be a SHA-256 hex digest");
-  }
-  return hex;
-}
-
-export function pemToDer(pem: string): Buffer {
-  const body = pem
-    .replace(/-----BEGIN [^-]+-----/g, "")
-    .replace(/-----END [^-]+-----/g, "")
-    .replace(/\s+/g, "");
-  return Buffer.from(body, "base64");
-}
-
-export function certificateFingerprint(pem: string): string {
-  return crypto.createHash("sha256").update(pemToDer(pem)).digest("hex");
-}
-
-async function readJson<T>(response: Response, what: string): Promise<T> {
-  if (!response.ok) {
-    throw new Error(`${what} failed: HTTP ${response.status}`);
-  }
-  return (await response.json()) as T;
-}
-
-/**
- * The root endpoint is served under the CA's own TLS certificate, which
- * nothing trusts yet - so this one request skips verification and trusts
- * the fingerprint instead, exactly like `step ca bootstrap`.
- */
-export async function fetchRootCertificate(
-  target: StepCaTarget,
-): Promise<string> {
-  const fingerprint = normalizeFingerprint(target.fingerprint);
-  const response = await target.fetch(
-    `${normalizeCaUrl(target.caUrl)}/root/${fingerprint}`,
-    {
-      timeoutMs: FETCH_TIMEOUT_MS,
-      allowPrivateHosts: target.allowedPrivateHosts,
-      tls: { rejectUnauthorized: false },
-    },
-  );
-  const { ca } = await readJson<{ ca?: string }>(
-    response,
-    "Fetching the CA root",
-  );
-  if (!ca || certificateFingerprint(ca) !== fingerprint) {
-    throw new Error("CA root certificate does not match the fingerprint");
-  }
-  return ca;
-}
-
-export async function findOidcProvisioner(
-  target: StepCaTarget,
-  rootPem: string,
-  name: string,
-): Promise<StepCaOidcProvisioner> {
-  const base = normalizeCaUrl(target.caUrl);
-  let cursor = "";
-  for (let page = 0; page < 20; page++) {
-    const response = await target.fetch(
-      `${base}/provisioners?limit=100${cursor ? `&cursor=${encodeURIComponent(cursor)}` : ""}`,
-      {
-        timeoutMs: FETCH_TIMEOUT_MS,
-        allowPrivateHosts: target.allowedPrivateHosts,
-        tls: { ca: rootPem },
-      },
-    );
-    const body = await readJson<{
-      provisioners?: Array<Record<string, unknown>>;
-      nextCursor?: string;
-    }>(response, "Listing CA provisioners");
-    const match = (body.provisioners ?? []).find(
-      (p) => p.name === name && p.type === "OIDC",
-    );
-    if (match) {
-      if (
-        typeof match.clientID !== "string" ||
-        typeof match.configurationEndpoint !== "string"
-      ) {
-        throw new Error("The OIDC provisioner is missing its client settings");
-      }
-      return {
-        name,
-        clientID: match.clientID,
-        clientSecret:
-          typeof match.clientSecret === "string"
-            ? match.clientSecret
-            : undefined,
-        configurationEndpoint: match.configurationEndpoint,
-      };
-    }
-    if (!body.nextCursor) break;
-    cursor = body.nextCursor;
-  }
-  throw new Error(`OIDC provisioner "${name}" not found on the CA`);
-}
-
-export async function discoverOidcEndpoints(
-  fetch: PluginFetch,
-  configurationEndpoint: string,
-  allowedPrivateHosts: readonly string[],
-): Promise<OidcEndpoints> {
-  const response = await fetch(configurationEndpoint, {
-    timeoutMs: FETCH_TIMEOUT_MS,
-    allowPrivateHosts: allowedPrivateHosts,
-  });
-  const doc = await readJson<{
-    authorization_endpoint?: string;
-    token_endpoint?: string;
-  }>(response, "OIDC discovery");
-  if (!doc.authorization_endpoint || !doc.token_endpoint) {
-    throw new Error("OIDC discovery document is incomplete");
-  }
-  return {
-    authorizationEndpoint: doc.authorization_endpoint,
-    tokenEndpoint: doc.token_endpoint,
-  };
-}
-
-export function createPkce(): { verifier: string; challenge: string } {
-  const verifier = crypto.randomBytes(48).toString("base64url");
-  const challenge = crypto
-    .createHash("sha256")
-    .update(verifier)
-    .digest("base64url");
-  return { verifier, challenge };
-}
-
-export function buildAuthorizationUrl(input: {
-  authorizationEndpoint: string;
-  clientId: string;
-  redirectUri: string;
-  state: string;
-  nonce: string;
-  codeChallenge: string;
-}): string {
-  const url = new URL(input.authorizationEndpoint);
-  url.searchParams.set("response_type", "code");
-  url.searchParams.set("client_id", input.clientId);
-  url.searchParams.set("redirect_uri", input.redirectUri);
-  url.searchParams.set("scope", "openid email profile");
-  url.searchParams.set("state", input.state);
-  url.searchParams.set("nonce", input.nonce);
-  url.searchParams.set("code_challenge", input.codeChallenge);
-  url.searchParams.set("code_challenge_method", "S256");
-  return url.toString();
-}
-
-export async function exchangeCodeForIdToken(input: {
-  fetch: PluginFetch;
-  tokenEndpoint: string;
-  clientId: string;
-  clientSecret?: string;
-  code: string;
-  redirectUri: string;
-  codeVerifier: string;
-  allowedPrivateHosts: readonly string[];
-}): Promise<string> {
-  const form = new URLSearchParams({
-    grant_type: "authorization_code",
-    code: input.code,
-    redirect_uri: input.redirectUri,
-    client_id: input.clientId,
-    code_verifier: input.codeVerifier,
-  });
-  if (input.clientSecret) form.set("client_secret", input.clientSecret);
-  const response = await input.fetch(input.tokenEndpoint, {
-    method: "POST",
-    headers: { "Content-Type": "application/x-www-form-urlencoded" },
-    body: form.toString(),
-    timeoutMs: FETCH_TIMEOUT_MS,
-    allowPrivateHosts: input.allowedPrivateHosts,
-  });
-  const body = await readJson<{ id_token?: string }>(
-    response,
-    "OIDC token exchange",
-  );
-  if (!body.id_token) {
-    throw new Error("The identity provider returned no id_token");
-  }
-  return body.id_token;
-}
-
-// --- SSH keys and certificates ---------------------------------------------
-
-function sshString(value: Buffer | string): Buffer {
-  const data = Buffer.isBuffer(value) ? value : Buffer.from(value, "utf8");
-  const len = Buffer.alloc(4);
-  len.writeUInt32BE(data.length, 0);
-  return Buffer.concat([len, data]);
-}
-
-export function generateSshKeyPair(): {
-  publicKeyLine: string;
-  privateKeyPem: string;
-} {
-  const { publicKey, privateKey } = crypto.generateKeyPairSync("ed25519");
-  const jwk = publicKey.export({ format: "jwk" }) as { x: string };
-  const raw = Buffer.from(jwk.x, "base64url");
-  const blob = Buffer.concat([sshString("ssh-ed25519"), sshString(raw)]);
-  return {
-    publicKeyLine: `ssh-ed25519 ${blob.toString("base64")}`,
-    privateKeyPem: privateKey
-      .export({ format: "pem", type: "pkcs8" })
-      .toString(),
-  };
-}
-
-export async function signSshCertificate(
-  target: StepCaTarget,
-  rootPem: string,
-  input: {
-    publicKeyLine: string;
-    ott: string;
-    principals: string[];
-    keyId: string;
-  },
-): Promise<string> {
-  const blob = input.publicKeyLine.trim().split(/\s+/)[1];
-  if (!blob) throw new Error("Invalid public key line");
-  const response = await target.fetch(
-    `${normalizeCaUrl(target.caUrl)}/1.0/ssh/sign`,
-    {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({
-        publicKey: blob,
-        ott: input.ott,
-        certType: "user",
-        principals: input.principals,
-        keyID: input.keyId,
-      }),
-      timeoutMs: FETCH_TIMEOUT_MS,
-      allowPrivateHosts: target.allowedPrivateHosts,
-      tls: { ca: rootPem },
-    },
-  );
-  if (!response.ok) {
-    let detail = "";
-    try {
-      const err = (await response.json()) as { message?: string };
-      detail = err.message ? `: ${err.message}` : "";
-    } catch {
-      /* no body */
-    }
-    throw new Error(
-      `The CA refused to sign the key (HTTP ${response.status})${detail}`,
-    );
-  }
-  const body = (await response.json()) as { crt?: string };
-  if (!body.crt) throw new Error("The CA returned no certificate");
-  return body.crt.trim();
-}
-
-export interface SshCertificateInfo {
-  keyType: string;
-  publicKeyLine: string;
-  keyId: string;
-  principals: string[];
-  validAfter: Date;
-  validBefore: Date;
-}
-
-/** Reads the identity and validity window out of an OpenSSH certificate line. */
-export function parseSshCertificate(line: string): SshCertificateInfo {
-  const blob = Buffer.from(line.trim().split(/\s+/)[1] ?? "", "base64");
-  if (blob.length === 0) throw new Error("Invalid SSH certificate");
-  let offset = 0;
-  const readString = (): Buffer => {
-    if (offset + 4 > blob.length) throw new Error("Truncated SSH certificate");
-    const len = blob.readUInt32BE(offset);
-    offset += 4;
-    if (offset + len > blob.length) {
-      throw new Error("Truncated SSH certificate");
-    }
-    const value = blob.subarray(offset, offset + len);
-    offset += len;
-    return value;
-  };
-  const readUint64 = (): bigint => {
-    if (offset + 8 > blob.length) throw new Error("Truncated SSH certificate");
-    const value = blob.readBigUInt64BE(offset);
-    offset += 8;
-    return value;
-  };
-
-  const keyType = readString().toString();
-  if (!keyType.endsWith("-cert-v01@openssh.com")) {
-    throw new Error("The CA returned a public key instead of a certificate");
-  }
-  readString(); // nonce
-  // Public key fields differ by algorithm; consume them by shape.
-  const publicKeyParts: Buffer[] = [];
-  let plainKeyType: string;
-  if (keyType.startsWith("ssh-rsa")) {
-    plainKeyType = "ssh-rsa";
-    publicKeyParts.push(readString(), readString()); // e, n
-  } else if (keyType.startsWith("ecdsa-")) {
-    plainKeyType = keyType.replace(/-cert-v01@openssh\.com$/, "");
-    publicKeyParts.push(readString(), readString()); // curve, Q
-  } else {
-    plainKeyType = keyType.replace(/-cert-v01@openssh\.com$/, "");
-    publicKeyParts.push(readString()); // ed25519 pk
-  }
-  const publicKeyBlob = Buffer.concat([
-    sshString(plainKeyType),
-    ...publicKeyParts.map(sshString),
-  ]);
-  readUint64(); // serial
-  offset += 4; // type
-  const keyId = readString().toString();
-  const principalsBlob = readString();
-  const principals: string[] = [];
-  for (let p = 0; p < principalsBlob.length;) {
-    if (p + 4 > principalsBlob.length) {
-      throw new Error("Invalid SSH certificate principals");
-    }
-    const len = principalsBlob.readUInt32BE(p);
-    if (p + 4 + len > principalsBlob.length) {
-      throw new Error("Invalid SSH certificate principals");
-    }
-    principals.push(principalsBlob.subarray(p + 4, p + 4 + len).toString());
-    p += 4 + len;
-  }
-  const validAfter = readUint64();
-  const validBefore = readUint64();
-  const toDate = (seconds: bigint) =>
-    new Date(
-      Number(seconds > 8_640_000_000_000n ? 8_640_000_000_000n : seconds) *
-        1000,
-    );
-  return {
-    keyType,
-    publicKeyLine: `${plainKeyType} ${publicKeyBlob.toString("base64")}`,
-    keyId,
-    principals,
-    validAfter: toDate(validAfter),
-    validBefore: toDate(validBefore),
-  };
-}
-
-/** Save-time checks for the admin page: a bad URL or fingerprint says so there. */
-export function validateCaSettings(
-  values: Record<string, unknown>,
-): Record<string, string> {
-  const errors: Record<string, string> = {};
-  const check = (key: string, normalize: (raw: string) => string) => {
-    const value = values[key];
-    if (typeof value !== "string" || value.trim() === "") return;
-    try {
-      normalize(value);
-    } catch (error) {
-      errors[key] = error instanceof Error ? error.message : String(error);
-    }
-  };
-  check("caUrl", normalizeCaUrl);
-  check("fingerprint", normalizeFingerprint);
-  return errors;
-}
diff --git a/plugins/step-ca/src/backend/index.ts b/plugins/step-ca/src/backend/index.ts
deleted file mode 100644
index 5aecbe22d..000000000
--- a/plugins/step-ca/src/backend/index.ts
+++ /dev/null
@@ -1,30 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { certs as certsTable } from "./tables.js";
-import { createCertStore } from "./cert-store.js";
-import { createRuntime } from "./runtime.js";
-import { createAuthSessions } from "./auth-session.js";
-import { createStepCaProvider } from "./provider.js";
-import { PUBLIC_PATHS, registerRoutes } from "./routes.js";
-import { validateCaSettings } from "./client.js";
-
-export async function activate(ctx: PluginContext) {
-  ctx.settings.onValidate("admin", validateCaSettings);
-  const table = await ctx.db.define(certsTable);
-  const certs = createCertStore(ctx, table);
-
-  const runtime = createRuntime(ctx);
-  const sessions = createAuthSessions(ctx, { certs, runtime });
-  ctx.disposables.add(async () => {
-    sessions.closeAll();
-    await runtime.close();
-  });
-
-  ctx.auth.registerSshAuthProvider(createStepCaProvider(ctx, certs, sessions));
-
-  registerRoutes(ctx.http.router<Router>({ public: PUBLIC_PATHS }), sessions);
-}
-
-export async function deactivate() {
-  // Everything above was registered through ctx and is disposed by core.
-}
diff --git a/plugins/step-ca/src/backend/provider.ts b/plugins/step-ca/src/backend/provider.ts
deleted file mode 100644
index 146241b9c..000000000
--- a/plugins/step-ca/src/backend/provider.ts
+++ /dev/null
@@ -1,88 +0,0 @@
-import type {
-  PluginContext,
-  PluginSshAuthProvider,
-} from "@termix/plugin-sdk/backend";
-import { applyCertificateAuth } from "@termix/plugin-sdk/ssh-certs";
-import type { AuthSessions, SignInSocket } from "./auth-session.js";
-import type { CertStore } from "./cert-store.js";
-
-export const AUTH_TYPE = "stepca";
-
-const REQUIRED_MESSAGE =
-  "Step CA authentication required. Please open a Terminal connection to this host first to complete browser-based authentication.";
-
-const AUTH_FAILED_PATTERN = /All configured authentication methods failed/i;
-
-/**
- * Hosts with auth type "stepca" connect with the certificate the CA issued.
- * Without one, the terminal is asked for a browser sign-in
- * ("stepca_auth_required"), which startInteraction runs.
- */
-export function createStepCaProvider(
-  ctx: PluginContext,
-  certs: CertStore,
-  sessions: AuthSessions,
-): PluginSshAuthProvider {
-  return {
-    type: AUTH_TYPE,
-    labelKey: "hosts.filterAuthStepca",
-    needsUserInteraction: true,
-    supportsBackground: false,
-    interaction: AUTH_TYPE,
-    prepare: async (config, host, env) => {
-      const certificate = await certs.get(env.userId, env.hostId);
-      if (!certificate) {
-        env.log("info", "No valid certificate found, requesting sign-in");
-        return {
-          status: "interaction-required",
-          interaction: AUTH_TYPE,
-          message: REQUIRED_MESSAGE,
-        };
-      }
-      try {
-        await applyCertificateAuth(
-          config as never,
-          env.client as never,
-          {
-            privateKey: certificate.privateKey,
-            certificate: certificate.sshCert,
-          },
-          host.username,
-        );
-      } catch (error) {
-        return {
-          status: "error",
-          code: "failed",
-          message:
-            "Step CA authentication failed: " +
-            (error instanceof Error ? error.message : String(error)),
-        };
-      }
-      env.log("info", "Using cached SSH certificate");
-      return { status: "ready" };
-    },
-    onAuthFailed: (_host, env, context) => {
-      if (!AUTH_FAILED_PATTERN.test(context.error.message)) return undefined;
-      ctx.log.warn("Step CA authentication failed, forgetting the certificate");
-      void certs.remove(env.userId, env.hostId).catch(() => undefined);
-      return {
-        status: "interaction-required",
-        interaction: AUTH_TYPE,
-        message:
-          "Step CA authentication failed or expired. Please authenticate again.",
-      };
-    },
-    startInteraction: async (request) => {
-      await sessions.start({
-        userId: request.userId,
-        hostId: request.hostId,
-        username: request.host.username,
-        socket: request.socket as SignInSocket,
-        requestOrigin: request.requestOrigin,
-      });
-    },
-    cancelInteraction: async (request) => {
-      if (request.requestId) sessions.cancel(request.requestId);
-    },
-  };
-}
diff --git a/plugins/step-ca/src/backend/routes.ts b/plugins/step-ca/src/backend/routes.ts
deleted file mode 100644
index 54bac32b0..000000000
--- a/plugins/step-ca/src/backend/routes.ts
+++ /dev/null
@@ -1,65 +0,0 @@
-import type { Request, Response, Router } from "express";
-import type { AuthSessions } from "./auth-session.js";
-
-/**
- * The identity provider redirects here without a Termix session: the sign-in
- * may finish in another browser, so it is matched by the OAuth state.
- */
-export const PUBLIC_PATHS = ["/callback"];
-
-export function escapeHtml(value: string): string {
-  return value
-    .replace(/&/g, "&amp;")
-    .replace(/</g, "&lt;")
-    .replace(/>/g, "&gt;")
-    .replace(/"/g, "&quot;")
-    .replace(/'/g, "&#39;");
-}
-
-export function resultPage(ok: boolean, message: string): string {
-  return `<!doctype html><html><head><meta charset="utf-8"><title>Termix</title>
-<style>body{font-family:system-ui,sans-serif;background:#111;color:#eee;display:flex;align-items:center;justify-content:center;height:100vh;margin:0}
-main{max-width:28rem;padding:2rem;border:1px solid #333;background:#181818}h1{font-size:1.1rem;margin:0 0 .5rem}p{margin:0;color:#aaa}</style></head>
-<body><main><h1>${ok ? "Signed in" : "Sign-in failed"}</h1><p>${escapeHtml(message)}</p></main></body></html>`;
-}
-
-export function registerRoutes(router: Router, sessions: AuthSessions): void {
-  /**
-   * @openapi
-   * /plugin-api/step-ca/callback:
-   *   get:
-   *     summary: OIDC callback for a Step CA sign-in
-   *     description: Public. The redirect URI registered with the identity provider behind the CA's OIDC provisioner. Exchanges the code, has the CA sign the key and tells the terminal to reconnect. The 2.8 URI /host/step-ca-callback redirects here.
-   *     tags: [Step CA]
-   *     parameters:
-   *       - name: state
-   *         in: query
-   *         schema:
-   *           type: string
-   *       - name: code
-   *         in: query
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: Signed in; an HTML page the browser can close.
-   *       400:
-   *         description: The sign-in failed or is no longer active.
-   */
-  router.get("/callback", async (req: Request, res: Response) => {
-    const query = (name: string): string | undefined => {
-      const value = req.query[name];
-      return typeof value === "string" ? value : undefined;
-    };
-    const result = await sessions.complete({
-      state: query("state"),
-      code: query("code"),
-      error: query("error"),
-      error_description: query("error_description"),
-    });
-    res
-      .status(result.ok ? 200 : 400)
-      .type("html")
-      .send(resultPage(result.ok, result.message));
-  });
-}
diff --git a/plugins/step-ca/src/backend/runtime.ts b/plugins/step-ca/src/backend/runtime.ts
deleted file mode 100644
index 4c5603eae..000000000
--- a/plugins/step-ca/src/backend/runtime.ts
+++ /dev/null
@@ -1,164 +0,0 @@
-import { createClient } from "redis";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-
-export interface CallbackQuery {
-  state?: string;
-  code?: string;
-  error?: string;
-  error_description?: string;
-}
-
-export interface CallbackResult {
-  ok: boolean;
-  message: string;
-}
-
-const SESSION_TTL_SECONDS = 5 * 60;
-const RESULT_TTL_SECONDS = 60;
-const CONNECT_RETRY_MS = 15_000;
-
-export type Runtime = ReturnType<typeof createRuntime>;
-
-/**
- * Hands an identity provider callback to the Termix instance that started
- * the sign-in, through Redis when REDIS_URL is set. With one instance, or no
- * Redis, every call is a no-op and the callback is handled locally.
- */
-export function createRuntime(ctx: PluginContext) {
-  const prefix =
-    process.env.TERMIX_STEP_CA_REDIS_PREFIX?.trim() || "termix:step-ca";
-  let client: ReturnType<typeof createClient> | null = null;
-  let connecting: Promise<boolean> | null = null;
-  let nextConnectAttempt = 0;
-
-  const routeKey = (state: string) => `${prefix}:route:${state}`;
-  const commandKey = (state: string) => `${prefix}:command:${state}`;
-  const resultKey = (state: string) => `${prefix}:result:${state}`;
-
-  function logFailure(operation: string, error: unknown): void {
-    ctx.log.warn(
-      `Step CA Redis runtime unavailable (${operation}): ${error instanceof Error ? error.message : String(error)}`,
-    );
-  }
-
-  async function seal(value: unknown): Promise<string> {
-    return ctx.secrets.seal(JSON.stringify(value));
-  }
-
-  async function unseal<T>(raw: string): Promise<T | null> {
-    const plain = await ctx.secrets.unseal(raw);
-    if (!plain) return null;
-    try {
-      return JSON.parse(plain) as T;
-    } catch {
-      return null;
-    }
-  }
-
-  async function connect(url: string): Promise<boolean> {
-    try {
-      client = createClient({
-        url,
-        socket: { connectTimeout: 1500, reconnectStrategy: false },
-      });
-      client.on("error", (error) => logFailure("client", error));
-      await client.connect();
-      nextConnectAttempt = 0;
-      return true;
-    } catch (error) {
-      nextConnectAttempt = Date.now() + CONNECT_RETRY_MS;
-      logFailure("connect", error);
-      await client?.disconnect().catch(() => {});
-      client = null;
-      return false;
-    }
-  }
-
-  async function ready(): Promise<boolean> {
-    const url = process.env.REDIS_URL?.trim();
-    if (!url) return false;
-    if (client?.isReady) return true;
-    if (Date.now() < nextConnectAttempt) return false;
-    if (connecting) return connecting;
-    connecting = connect(url).finally(() => {
-      connecting = null;
-    });
-    return connecting;
-  }
-
-  return {
-    async register(state: string): Promise<void> {
-      if (!(await ready()) || !client) return;
-      await client
-        .set(routeKey(state), "active", { EX: SESSION_TTL_SECONDS })
-        .catch((error) => logFailure("register", error));
-    },
-
-    /** Queues a callback for the instance that owns the sign-in. */
-    async submit(state: string, query: CallbackQuery): Promise<boolean> {
-      if (!(await ready()) || !client) return false;
-      try {
-        if (!(await client.exists(routeKey(state)))) return false;
-        const stored = await client.set(commandKey(state), await seal(query), {
-          EX: SESSION_TTL_SECONDS,
-          NX: true,
-        });
-        return stored === "OK";
-      } catch (error) {
-        logFailure("submit", error);
-        return false;
-      }
-    },
-
-    async takeCommand(state: string): Promise<CallbackQuery | null> {
-      if (!(await ready()) || !client) return null;
-      try {
-        const raw = await client.getDel(commandKey(state));
-        return raw ? unseal<CallbackQuery>(raw.toString()) : null;
-      } catch (error) {
-        logFailure("take_command", error);
-        return null;
-      }
-    },
-
-    async complete(state: string, result: CallbackResult): Promise<void> {
-      if (!(await ready()) || !client) return;
-      try {
-        await client
-          .multi()
-          .set(resultKey(state), await seal(result), {
-            EX: RESULT_TTL_SECONDS,
-          })
-          .del(routeKey(state))
-          .del(commandKey(state))
-          .exec();
-      } catch (error) {
-        logFailure("complete", error);
-      }
-    },
-
-    async takeResult(state: string): Promise<CallbackResult | null> {
-      if (!(await ready()) || !client) return null;
-      try {
-        const raw = await client.getDel(resultKey(state));
-        return raw ? unseal<CallbackResult>(raw.toString()) : null;
-      } catch (error) {
-        logFailure("take_result", error);
-        return null;
-      }
-    },
-
-    async remove(state: string): Promise<void> {
-      if (!(await ready()) || !client) return;
-      await client
-        .del([routeKey(state), commandKey(state), resultKey(state)])
-        .catch((error) => logFailure("remove", error));
-    },
-
-    async close(): Promise<void> {
-      const current = client;
-      client = null;
-      if (current?.isOpen) await current.quit().catch(() => {});
-    },
-  };
-}
diff --git a/plugins/step-ca/src/backend/tables.ts b/plugins/step-ca/src/backend/tables.ts
deleted file mode 100644
index 6a8737e4a..000000000
--- a/plugins/step-ca/src/backend/tables.ts
+++ /dev/null
@@ -1,34 +0,0 @@
-import {
-  defineTable,
-  id,
-  refHost,
-  refUser,
-  text,
-  varchar,
-} from "@termix/plugin-sdk/db";
-
-/**
- * One issued certificate per user and host. sshCert and privateKey are
- * sealed with ctx.secrets.seal. 2.8 kept Step CA certificates in
- * opkssh_tokens; those are left to expire.
- */
-export const certs = defineTable(
-  "certs",
-  {
-    id: id(),
-    userId: refUser(),
-    hostId: refHost(),
-    sshCert: text().notNull(),
-    privateKey: text().notNull(),
-    email: text(),
-    createdAt: text().notNull().defaultNow(),
-    expiresAt: varchar().notNull(),
-  },
-  {
-    uniques: [
-      { name: "idx_step_ca_certs_user_host", columns: ["userId", "hostId"] },
-    ],
-  },
-);
-
-export const tables = [certs];
diff --git a/plugins/step-ca/src/frontend/RedirectUriSetting.tsx b/plugins/step-ca/src/frontend/RedirectUriSetting.tsx
deleted file mode 100644
index c8b7ce053..000000000
--- a/plugins/step-ca/src/frontend/RedirectUriSetting.tsx
+++ /dev/null
@@ -1,54 +0,0 @@
-import { toast } from "sonner";
-import {
-  useTranslation,
-  type SettingsComponentProps,
-} from "@termix/plugin-sdk/frontend";
-import { Button, Input, copyToClipboard } from "@termix/plugin-sdk/ui";
-
-const CALLBACK_PATH = "plugin-api/step-ca/callback";
-const LEGACY_CALLBACK_PATH = "host/step-ca-callback";
-
-/** The callback URI to register with the provisioner's identity provider. */
-export function redirectUri(
-  legacy: boolean,
-  baseUri = document.baseURI,
-): string {
-  return new URL(
-    legacy ? LEGACY_CALLBACK_PATH : CALLBACK_PATH,
-    baseUri,
-  ).toString();
-}
-
-export function RedirectUriSetting({ values }: SettingsComponentProps) {
-  const { t } = useTranslation();
-  const uri = redirectUri(values.legacyCallback === true);
-
-  return (
-    <div className="flex flex-col gap-2">
-      <span className="text-xs font-medium">
-        {t("settings.redirectUri.label")}
-      </span>
-      <div className="flex gap-2">
-        <Input
-          value={uri}
-          readOnly
-          className="min-w-0 flex-1 rounded-none font-mono text-xs"
-        />
-        <Button
-          type="button"
-          variant="outline"
-          className="rounded-none"
-          onClick={async () => {
-            if (await copyToClipboard(uri)) toast.success(t("common.copied"));
-            else toast.error(t("common.copyFailed"));
-          }}
-        >
-          {t("common.copy")}
-        </Button>
-      </div>
-      <p className="text-[10px] text-muted-foreground">
-        {t("settings.redirectUri.description")}
-      </p>
-    </div>
-  );
-}
diff --git a/plugins/step-ca/src/frontend/StepCaAuthEditor.tsx b/plugins/step-ca/src/frontend/StepCaAuthEditor.tsx
deleted file mode 100644
index 2aa75ab04..000000000
--- a/plugins/step-ca/src/frontend/StepCaAuthEditor.tsx
+++ /dev/null
@@ -1,29 +0,0 @@
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-const DOCS_URL =
-  "https://smallstep.com/docs/step-ca/provisioners/#oauthoidc-single-sign-on";
-
-/** The host editor's "stepca" auth method: nothing to fill in, just a pointer. */
-export function StepCaAuthEditor() {
-  const { t } = useTranslation();
-  return (
-    <div className="flex flex-col gap-2 border-t border-border pt-3">
-      <div className="flex items-center justify-between">
-        <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-          {t("editor.label")}
-        </span>
-        <a
-          href={DOCS_URL}
-          target="_blank"
-          rel="noreferrer"
-          className="text-[10px] text-accent-brand hover:underline"
-        >
-          {t("editor.docs")}
-        </a>
-      </div>
-      <p className="text-[10px] text-muted-foreground">
-        {t("editor.description")}
-      </p>
-    </div>
-  );
-}
diff --git a/plugins/step-ca/src/frontend/StepCaDialog.tsx b/plugins/step-ca/src/frontend/StepCaDialog.tsx
deleted file mode 100644
index fb8fde4b4..000000000
--- a/plugins/step-ca/src/frontend/StepCaDialog.tsx
+++ /dev/null
@@ -1,102 +0,0 @@
-import { Shield, ExternalLink, Loader2, AlertCircle } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Button } from "@termix/plugin-sdk/ui";
-
-export type SignInStage = "chooser" | "waiting" | "authenticating" | "error";
-
-interface StepCaDialogProps {
-  stage: SignInStage;
-  error?: string;
-  onCancel: () => void;
-  onOpenUrl: () => void;
-  backgroundColor?: string;
-}
-
-const actionButton =
-  "border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 rounded-none text-[10px] font-bold uppercase tracking-widest w-full flex items-center gap-2";
-const footerButton =
-  "rounded-none text-[10px] font-bold uppercase tracking-widest";
-
-/** The browser sign-in the terminal shows while Step CA waits. */
-export function StepCaDialog({
-  stage,
-  error,
-  onCancel,
-  onOpenUrl,
-  backgroundColor,
-}: StepCaDialogProps) {
-  const { t } = useTranslation();
-
-  return (
-    <div className="absolute inset-0 flex items-center justify-center z-500 animate-in fade-in duration-200">
-      <div
-        className="absolute inset-0 bg-canvas"
-        style={{ backgroundColor: backgroundColor || undefined }}
-      />
-      <div className="bg-card border border-border w-full max-w-md mx-4 relative z-10 animate-in fade-in zoom-in-95 duration-200">
-        <div className="p-4 border-b border-border">
-          <div className="flex items-center gap-2">
-            <Shield className="size-4 text-accent-brand" />
-            <h3 className="text-xs font-bold uppercase tracking-widest">
-              {t("dialog.title")}
-            </h3>
-          </div>
-          {stage === "chooser" && (
-            <p className="text-[10px] font-bold uppercase tracking-tight text-muted-foreground mt-1">
-              {t("dialog.description")}
-            </p>
-          )}
-        </div>
-        <div className="p-4 flex flex-col gap-4">
-          {stage === "chooser" && (
-            <Button
-              type="button"
-              variant="outline"
-              onClick={onOpenUrl}
-              className={actionButton}
-            >
-              <ExternalLink className="size-3.5" />
-              {t("dialog.openBrowser")}
-            </Button>
-          )}
-
-          {(stage === "waiting" || stage === "authenticating") && (
-            <div className="flex items-center gap-3 py-2">
-              <Loader2 className="size-4 animate-spin text-accent-brand shrink-0" />
-              <p className="text-xs text-muted-foreground">
-                {stage === "waiting"
-                  ? t("dialog.waiting")
-                  : t("dialog.authenticating")}
-              </p>
-            </div>
-          )}
-
-          {stage === "error" && error && (
-            <div className="flex items-start gap-3 p-3 border border-destructive/20 bg-destructive/10">
-              <AlertCircle className="size-4 text-destructive shrink-0 mt-0.5" />
-              <div className="flex-1 min-w-0">
-                <p className="text-[10px] font-bold uppercase tracking-widest text-destructive">
-                  {t("common.error")}
-                </p>
-                <p className="text-xs text-destructive/90 mt-1 whitespace-pre-wrap break-words">
-                  {error}
-                </p>
-              </div>
-            </div>
-          )}
-
-          <div className="flex justify-end">
-            <Button
-              type="button"
-              variant="ghost"
-              onClick={onCancel}
-              className={footerButton}
-            >
-              {stage === "error" ? t("common.close") : t("common.cancel")}
-            </Button>
-          </div>
-        </div>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/step-ca/src/frontend/StepCaOverlay.tsx b/plugins/step-ca/src/frontend/StepCaOverlay.tsx
deleted file mode 100644
index e1f34712e..000000000
--- a/plugins/step-ca/src/frontend/StepCaOverlay.tsx
+++ /dev/null
@@ -1,187 +0,0 @@
-import { useEffect, useRef, useState } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { StepCaDialog, type SignInStage } from "./StepCaDialog";
-
-/** What the ssh-terminal plugin hands a "terminal.overlay" component. */
-export interface TerminalOverlayProps {
-  host: { id: number | string; [key: string]: unknown } | undefined;
-  backgroundColor?: string;
-  subscribe: (
-    listener: (message: { type: string; [key: string]: unknown }) => void,
-  ) => () => void;
-  holdConnectTimeout: (held: boolean) => void;
-  fail: (message: string) => void;
-  disconnect: () => void;
-  send: (type: string, data?: unknown) => void;
-  connectPayload: () => Record<string, unknown>;
-}
-
-interface DialogState {
-  authUrl: string;
-  requestId: string;
-  stage: SignInStage;
-  error?: string;
-}
-
-/** How long the sign-in dialog waits before giving up on the connection. */
-const DIALOG_TIMEOUT_MS = 300_000;
-
-/**
- * Runs the Step CA browser sign-in for a terminal: asks the server to start
- * it, opens the identity provider, and reconnects once the CA has issued the
- * certificate.
- */
-export function StepCaOverlay({
-  subscribe,
-  holdConnectTimeout,
-  fail,
-  disconnect,
-  send,
-  connectPayload,
-  backgroundColor,
-}: TerminalOverlayProps) {
-  const { t } = useTranslation();
-  const [dialog, setDialog] = useState<DialogState | null>(null);
-  const timerRef = useRef<ReturnType<typeof setTimeout> | null>(null);
-  const heldRef = useRef(false);
-  // A second "auth required" after a sign-in means the certificate did not work.
-  const failedRef = useRef(false);
-
-  useEffect(() => {
-    const clearTimer = () => {
-      if (timerRef.current) clearTimeout(timerRef.current);
-      timerRef.current = null;
-    };
-    const hold = (held: boolean) => {
-      if (heldRef.current === held) return;
-      heldRef.current = held;
-      holdConnectTimeout(held);
-    };
-    const showError = (requestId: unknown, error: string) => {
-      clearTimer();
-      setDialog((current) =>
-        current
-          ? { ...current, stage: "error", error }
-          : {
-              authUrl: "",
-              requestId: typeof requestId === "string" ? requestId : "",
-              stage: "error",
-              error,
-            },
-      );
-    };
-
-    const unsubscribe = subscribe((message) => {
-      switch (message.type) {
-        case "stepca_auth_required":
-          hold(true);
-          if (failedRef.current) {
-            clearTimer();
-            setDialog(null);
-            hold(false);
-            fail(t("errors.authFailed"));
-          } else {
-            failedRef.current = true;
-            send("stepca_start_auth", { hostId: message.hostId });
-          }
-          break;
-        case "stepca_status":
-          if (message.stage === "chooser") {
-            setDialog({
-              authUrl: typeof message.url === "string" ? message.url : "",
-              requestId:
-                typeof message.requestId === "string" ? message.requestId : "",
-              stage: "chooser",
-            });
-            clearTimer();
-            timerRef.current = setTimeout(() => {
-              setDialog(null);
-              hold(false);
-              disconnect();
-            }, DIALOG_TIMEOUT_MS);
-          } else {
-            setDialog((current) =>
-              current
-                ? { ...current, stage: message.stage as SignInStage }
-                : null,
-            );
-          }
-          break;
-        case "stepca_completed":
-          clearTimer();
-          setDialog(null);
-          send("stepca_auth_completed", connectPayload());
-          break;
-        case "stepca_error":
-          failedRef.current = true;
-          showError(message.requestId, String(message.error ?? ""));
-          break;
-        case "stepca_timeout":
-          failedRef.current = true;
-          showError(message.requestId, t("errors.timeout"));
-          break;
-        case "stepca_config_error":
-          showError(message.requestId, String(message.error ?? ""));
-          break;
-        case "connected":
-        case "sessionAttached":
-          failedRef.current = false;
-          hold(false);
-          break;
-        case "session_closed":
-          clearTimer();
-          setDialog(null);
-          hold(false);
-          break;
-      }
-    });
-
-    return () => {
-      unsubscribe();
-      clearTimer();
-      if (heldRef.current) {
-        heldRef.current = false;
-        holdConnectTimeout(false);
-      }
-    };
-  }, [
-    subscribe,
-    holdConnectTimeout,
-    fail,
-    disconnect,
-    send,
-    connectPayload,
-    t,
-  ]);
-
-  if (!dialog) return null;
-
-  const close = () => {
-    if (timerRef.current) clearTimeout(timerRef.current);
-    timerRef.current = null;
-    if (dialog.requestId) {
-      send("stepca_cancel", { requestId: dialog.requestId });
-    }
-    setDialog(null);
-    if (heldRef.current) {
-      heldRef.current = false;
-      holdConnectTimeout(false);
-    }
-  };
-
-  return (
-    <StepCaDialog
-      stage={dialog.stage}
-      error={dialog.error}
-      onCancel={close}
-      onOpenUrl={() => {
-        if (!dialog.authUrl) return;
-        window.open(dialog.authUrl, "_blank");
-        setDialog((current) =>
-          current ? { ...current, stage: "waiting" } : null,
-        );
-      }}
-      backgroundColor={backgroundColor}
-    />
-  );
-}
diff --git a/plugins/step-ca/src/frontend/index.tsx b/plugins/step-ca/src/frontend/index.tsx
deleted file mode 100644
index a207d6d7d..000000000
--- a/plugins/step-ca/src/frontend/index.tsx
+++ /dev/null
@@ -1,29 +0,0 @@
-import type { ComponentType } from "react";
-import type { TermixApp } from "@termix/plugin-sdk/frontend";
-import { StepCaAuthEditor } from "./StepCaAuthEditor";
-import { StepCaOverlay } from "./StepCaOverlay";
-import { RedirectUriSetting } from "./RedirectUriSetting";
-
-export function activate(app: TermixApp): void {
-  app.registerSshAuthEditor({
-    authType: "stepca",
-    titleKey: "hosts.filterAuthStepca",
-    component: StepCaAuthEditor,
-  });
-
-  // The browser sign-in while a terminal connects to a Step CA host.
-  app.registerSlotContribution("terminal.overlay", {
-    actionId: "step-ca.signIn",
-    titleKey: "dialog.title",
-    kind: "component",
-    component: StepCaOverlay as unknown as ComponentType<
-      Record<string, unknown>
-    >,
-  });
-
-  app.registerSettingsComponent("redirectUri", RedirectUriSetting);
-}
-
-export function deactivate(): void {
-  // Registrations through app are disposed by core.
-}
diff --git a/plugins/step-ca/tests/backend/client.test.ts b/plugins/step-ca/tests/backend/client.test.ts
deleted file mode 100644
index a7f9e033e..000000000
--- a/plugins/step-ca/tests/backend/client.test.ts
+++ /dev/null
@@ -1,136 +0,0 @@
-import crypto from "node:crypto";
-import { describe, expect, it } from "vitest";
-import {
-  buildAuthorizationUrl,
-  certificateFingerprint,
-  createPkce,
-  decodeJwtClaims,
-  fetchRootCertificate,
-  findOidcProvisioner,
-  generateSshKeyPair,
-  normalizeCaUrl,
-  normalizeFingerprint,
-  parseSshCertificate,
-} from "../../src/backend/client.js";
-import { parseHostList } from "../../src/backend/auth-session.js";
-import { CA_URL, createFakeCa, createSshCa, fakeRoot } from "./fake-ca.js";
-
-describe("step-ca client helpers", () => {
-  it("normalizes the CA url and fingerprint the way step does", () => {
-    expect(normalizeCaUrl(" https://ca.internal:9000/ ")).toBe(
-      "https://ca.internal:9000",
-    );
-    expect(() => normalizeCaUrl("http://ca.internal")).toThrow(/https/);
-    const fp = "AB:cd".repeat(16).replace(/:/g, "");
-    expect(normalizeFingerprint("AB:cd".repeat(16))).toBe(fp.toLowerCase());
-    expect(() => normalizeFingerprint("abcd")).toThrow(/SHA-256/);
-  });
-
-  it("fingerprints a PEM certificate by the sha256 of its DER", () => {
-    const root = fakeRoot();
-    expect(certificateFingerprint(root.pem)).toBe(root.fingerprint);
-  });
-
-  it("builds a PKCE authorization request", () => {
-    const { verifier, challenge } = createPkce();
-    expect(challenge).toBe(
-      crypto.createHash("sha256").update(verifier).digest("base64url"),
-    );
-    const url = new URL(
-      buildAuthorizationUrl({
-        authorizationEndpoint: "https://idp.example/auth?tenant=x",
-        clientId: "cid",
-        redirectUri: "https://termix.example/callback",
-        state: "s",
-        nonce: "n",
-        codeChallenge: challenge,
-      }),
-    );
-    expect(url.searchParams.get("tenant")).toBe("x");
-    expect(url.searchParams.get("response_type")).toBe("code");
-    expect(url.searchParams.get("code_challenge_method")).toBe("S256");
-    expect(url.searchParams.get("scope")).toContain("openid");
-  });
-
-  it("generates an ed25519 key a CA can certify, and reads the cert back", () => {
-    const { publicKeyLine, privateKeyPem } = generateSshKeyPair();
-    expect(publicKeyLine).toMatch(/^ssh-ed25519 [A-Za-z0-9+/=]+$/);
-    expect(privateKeyPem).toContain("BEGIN PRIVATE KEY");
-
-    const cert = createSshCa().sign({
-      publicKeyBlob: publicKeyLine.split(" ")[1],
-      keyId: "alice@example",
-      principals: ["alice", "ops"],
-      validAfter: 1_700_000_000,
-      validBefore: 1_700_057_600,
-    });
-    const info = parseSshCertificate(cert);
-    expect(info).toMatchObject({
-      keyType: "ssh-ed25519-cert-v01@openssh.com",
-      publicKeyLine,
-      keyId: "alice@example",
-      principals: ["alice", "ops"],
-    });
-    expect(info.validAfter.toISOString()).toBe("2023-11-14T22:13:20.000Z");
-    expect(info.validBefore.getTime() - info.validAfter.getTime()).toBe(
-      16 * 3600 * 1000,
-    );
-    expect(() => parseSshCertificate(publicKeyLine)).toThrow(/certificate/);
-    expect(() =>
-      parseSshCertificate("ssh-ed25519-cert-v01@openssh.com AAAA"),
-    ).toThrow(/certificate/);
-  });
-
-  it("reads the private endpoint list with commas or new lines", () => {
-    expect(parseHostList("ca.internal, SSO.internal\nidp.lan")).toEqual([
-      "ca.internal",
-      "sso.internal",
-      "idp.lan",
-    ]);
-    expect(parseHostList(undefined)).toEqual([]);
-  });
-});
-
-describe("talking to the CA", () => {
-  it("refuses a root whose fingerprint does not match", async () => {
-    const ca = createFakeCa({ nonce: () => "" });
-    await expect(
-      fetchRootCertificate({
-        fetch: ca.fetch,
-        caUrl: CA_URL,
-        fingerprint: "b".repeat(64),
-        allowedPrivateHosts: [],
-      }),
-    ).rejects.toThrow();
-  });
-
-  it("finds the OIDC provisioner by name and passes the private hosts", async () => {
-    const ca = createFakeCa({ nonce: () => "" });
-    const target = {
-      fetch: ca.fetch,
-      caUrl: CA_URL,
-      fingerprint: ca.root.fingerprint,
-      allowedPrivateHosts: ["ca.test"],
-    };
-    const root = await fetchRootCertificate(target);
-    const provisioner = await findOidcProvisioner(target, root, "oidc");
-    expect(provisioner.clientID).toBe("termix");
-    expect(ca.calls.every((call) => call.init?.allowPrivateHosts)).toBe(true);
-    await expect(findOidcProvisioner(target, root, "jwk")).rejects.toThrow(
-      /not found/,
-    );
-  });
-});
-
-describe("decodeJwtClaims", () => {
-  it("reads the payload without verifying and tolerates junk", () => {
-    const payload = Buffer.from(
-      JSON.stringify({ email: "a@b.c", nonce: "n1" }),
-    ).toString("base64url");
-    expect(decodeJwtClaims(`x.${payload}.y`)).toEqual({
-      email: "a@b.c",
-      nonce: "n1",
-    });
-    expect(decodeJwtClaims("not-a-jwt")).toEqual({});
-  });
-});
diff --git a/plugins/step-ca/tests/backend/fake-ca.ts b/plugins/step-ca/tests/backend/fake-ca.ts
deleted file mode 100644
index 47a76f6c9..000000000
--- a/plugins/step-ca/tests/backend/fake-ca.ts
+++ /dev/null
@@ -1,160 +0,0 @@
-import crypto from "node:crypto";
-import type { PluginFetchInit } from "@termix/plugin-sdk/backend";
-
-const CERT_TYPE = "ssh-ed25519-cert-v01@openssh.com";
-
-function sshString(value: Buffer | string): Buffer {
-  const data = Buffer.isBuffer(value) ? value : Buffer.from(value, "utf8");
-  const len = Buffer.alloc(4);
-  len.writeUInt32BE(data.length, 0);
-  return Buffer.concat([len, data]);
-}
-
-function uint64(value: bigint): Buffer {
-  const out = Buffer.alloc(8);
-  out.writeBigUInt64BE(value, 0);
-  return out;
-}
-
-function uint32(value: number): Buffer {
-  const out = Buffer.alloc(4);
-  out.writeUInt32BE(value, 0);
-  return out;
-}
-
-/** An ed25519 CA that signs OpenSSH user certificates, like step-ca does. */
-export function createSshCa() {
-  const { publicKey, privateKey } = crypto.generateKeyPairSync("ed25519");
-  const raw = Buffer.from(
-    (publicKey.export({ format: "jwk" }) as { x: string }).x,
-    "base64url",
-  );
-  const caBlob = Buffer.concat([sshString("ssh-ed25519"), sshString(raw)]);
-
-  return {
-    sign(input: {
-      publicKeyBlob: string;
-      keyId: string;
-      principals: string[];
-      validAfter: number;
-      validBefore: number;
-    }): string {
-      const userBlob = Buffer.from(input.publicKeyBlob, "base64");
-      // ssh-ed25519 blob: string type, string pk
-      const pk = userBlob.subarray(4 + 11 + 4);
-      const body = Buffer.concat([
-        sshString(CERT_TYPE),
-        sshString(crypto.randomBytes(32)),
-        sshString(pk),
-        uint64(1n),
-        uint32(1),
-        sshString(input.keyId),
-        sshString(Buffer.concat(input.principals.map((p) => sshString(p)))),
-        uint64(BigInt(input.validAfter)),
-        uint64(BigInt(input.validBefore)),
-        sshString(Buffer.alloc(0)),
-        sshString(Buffer.alloc(0)),
-        sshString(Buffer.alloc(0)),
-        sshString(caBlob),
-      ]);
-      const signature = Buffer.concat([
-        sshString("ssh-ed25519"),
-        sshString(crypto.sign(null, body, privateKey)),
-      ]);
-      return `${CERT_TYPE} ${Buffer.concat([body, sshString(signature)]).toString("base64")}`;
-    },
-  };
-}
-
-/** A root "certificate" the client fingerprints by the sha256 of its DER. */
-export function fakeRoot() {
-  const der = crypto.randomBytes(128);
-  return {
-    pem: `-----BEGIN CERTIFICATE-----\n${der.toString("base64")}\n-----END CERTIFICATE-----\n`,
-    fingerprint: crypto.createHash("sha256").update(der).digest("hex"),
-  };
-}
-
-export function jwt(claims: Record<string, unknown>): string {
-  const part = (value: object) =>
-    Buffer.from(JSON.stringify(value)).toString("base64url");
-  return `${part({ alg: "none" })}.${part(claims)}.sig`;
-}
-
-export const CA_URL = "https://ca.test";
-export const DISCOVERY_URL =
-  "https://idp.test/.well-known/openid-configuration";
-
-export interface FakeCaOptions {
-  /** Principals the CA puts on the certificate; defaults to what was asked. */
-  principals?: string[];
-  /** Nonce the identity provider puts in the id token. */
-  nonce: () => string;
-  /** Status for /1.0/ssh/sign. */
-  signStatus?: number;
-}
-
-/**
- * Answers ctx.fetch as a step-ca server plus its identity provider would.
- * Records every call so a test can check the TLS options.
- */
-export function createFakeCa(options: FakeCaOptions) {
-  const root = fakeRoot();
-  const ca = createSshCa();
-  const calls: Array<{ url: string; init?: PluginFetchInit }> = [];
-  const json = (body: unknown, status = 200) =>
-    new Response(JSON.stringify(body), {
-      status,
-      headers: { "content-type": "application/json" },
-    });
-
-  const fetch = async (url: string, init?: PluginFetchInit) => {
-    calls.push({ url, init });
-    if (url === `${CA_URL}/root/${root.fingerprint}`) {
-      return json({ ca: root.pem });
-    }
-    if (url.startsWith(`${CA_URL}/provisioners`)) {
-      return json({
-        provisioners: [
-          { name: "jwk", type: "JWK" },
-          {
-            name: "oidc",
-            type: "OIDC",
-            clientID: "termix",
-            configurationEndpoint: DISCOVERY_URL,
-          },
-        ],
-      });
-    }
-    if (url === DISCOVERY_URL) {
-      return json({
-        authorization_endpoint: "https://idp.test/authorize",
-        token_endpoint: "https://idp.test/token",
-      });
-    }
-    if (url === "https://idp.test/token") {
-      return json({
-        id_token: jwt({ email: "alice@example.com", nonce: options.nonce() }),
-      });
-    }
-    if (url === `${CA_URL}/1.0/ssh/sign`) {
-      if (options.signStatus && options.signStatus !== 200) {
-        return json({ message: "not allowed" }, options.signStatus);
-      }
-      const body = JSON.parse(init?.body ?? "{}");
-      const now = Math.floor(Date.now() / 1000);
-      return json({
-        crt: ca.sign({
-          publicKeyBlob: body.publicKey,
-          keyId: body.keyID,
-          principals: options.principals ?? body.principals,
-          validAfter: now - 60,
-          validBefore: now + 16 * 3600,
-        }),
-      });
-    }
-    return new Response("not found", { status: 404 });
-  };
-
-  return { fetch, calls, root, ca };
-}
diff --git a/plugins/step-ca/tests/backend/helpers.ts b/plugins/step-ca/tests/backend/helpers.ts
deleted file mode 100644
index 9a740cfa1..000000000
--- a/plugins/step-ca/tests/backend/helpers.ts
+++ /dev/null
@@ -1,105 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import type {
-  PluginFetchInit,
-  PluginSshAuthProvider,
-} from "@termix/plugin-sdk/backend";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-export const manifest = manifestJson as unknown as PluginManifest;
-
-/** A fake terminal socket that records what it was sent. */
-export function fakeSocket() {
-  const sent: Array<Record<string, unknown>> = [];
-  const closers: Array<() => void> = [];
-  return {
-    sent,
-    socket: {
-      send: (data: string) => sent.push(JSON.parse(data)),
-      on: (_event: "close", listener: () => void) => closers.push(listener),
-    },
-    close: () => closers.forEach((listener) => listener()),
-  };
-}
-
-export interface TestServer {
-  db: TestDb;
-  mock: MockPluginContext;
-  provider: () => PluginSshAuthProvider;
-  get: (path: string) => Promise<{ status: number; body: string }>;
-  close: () => Promise<void>;
-}
-
-export async function startServer(
-  options: {
-    settings?: Record<string, unknown>;
-    fetch?: (url: string, init?: PluginFetchInit) => Promise<Response>;
-  } = {},
-): Promise<TestServer> {
-  const db = await createTestDb(pluginDir);
-  db.sqlite
-    .prepare("INSERT OR IGNORE INTO users (id) VALUES (?)")
-    .run("user-1");
-  db.sqlite.prepare("INSERT OR IGNORE INTO ssh_data (id) VALUES (?)").run(7);
-
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    settings: options.settings,
-    fetch: options.fetch,
-    baseUrl: "https://termix.test",
-  });
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use((req, res, next) => router!(req, res, next));
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    db,
-    mock,
-    provider: () =>
-      mock.auth.sshAuthProviders.find(
-        (provider) => provider.type === "stepca",
-      )!,
-    async get(path) {
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        redirect: "manual",
-      });
-      return { status: response.status, body: await response.text() };
-    },
-    async close() {
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-      db.close();
-    },
-  };
-}
-
-export const env = (hostId = 7) => ({
-  client: {},
-  userId: "user-1",
-  hostId,
-  purpose: "terminal",
-  interactive: true,
-  log: () => {},
-});
-
-export const HOST = { id: 7, ip: "10.0.0.7", port: 22, username: "root" };
diff --git a/plugins/step-ca/tests/backend/legacy-urls.test.ts b/plugins/step-ca/tests/backend/legacy-urls.test.ts
deleted file mode 100644
index a4fc4336e..000000000
--- a/plugins/step-ca/tests/backend/legacy-urls.test.ts
+++ /dev/null
@@ -1,19 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { validateManifest } from "@termix/plugin-sdk/manifest";
-import manifest from "../../manifest.json";
-
-// Old URLs something outside Termix still calls keep reaching the plugin.
-const redirects = manifest.contributes.http.legacyRedirects as unknown[];
-
-describe("legacy URLs", () => {
-  it("declares them in a manifest that validates", () => {
-    expect(validateManifest(manifest)).toEqual([]);
-  });
-
-  it("redirects /host/step-ca-callback, which Step CA identity providers were set up with before 2.9", () => {
-    expect(redirects).toContainEqual({
-      from: "/host/step-ca-callback",
-      to: "/callback",
-    });
-  });
-});
diff --git a/plugins/step-ca/tests/backend/settings-validation.test.ts b/plugins/step-ca/tests/backend/settings-validation.test.ts
deleted file mode 100644
index 1a46d60a5..000000000
--- a/plugins/step-ca/tests/backend/settings-validation.test.ts
+++ /dev/null
@@ -1,25 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { validateCaSettings } from "../../src/backend/client.js";
-
-describe("validateCaSettings", () => {
-  it("accepts an https URL and a SHA-256 fingerprint", () => {
-    expect(
-      validateCaSettings({
-        caUrl: "https://ca.example.com:9000/",
-        fingerprint: "ab".repeat(32),
-      }),
-    ).toEqual({});
-  });
-
-  it("rejects a plain http URL and a short fingerprint at save time", () => {
-    const errors = validateCaSettings({
-      caUrl: "http://ca.example.com",
-      fingerprint: "abcd",
-    });
-    expect(Object.keys(errors).sort()).toEqual(["caUrl", "fingerprint"]);
-  });
-
-  it("leaves empty fields to the not-configured message", () => {
-    expect(validateCaSettings({ caUrl: "", fingerprint: " " })).toEqual({});
-  });
-});
diff --git a/plugins/step-ca/tests/backend/step-ca.test.ts b/plugins/step-ca/tests/backend/step-ca.test.ts
deleted file mode 100644
index 69164bffe..000000000
--- a/plugins/step-ca/tests/backend/step-ca.test.ts
+++ /dev/null
@@ -1,295 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { PluginCapabilityError } from "@termix/plugin-sdk/backend";
-import { createMockCtx, createTestDb } from "@termix/plugin-sdk/testing";
-import { CA_URL, createFakeCa } from "./fake-ca.js";
-import {
-  HOST,
-  env,
-  fakeSocket,
-  manifest,
-  pluginDir,
-  startServer,
-  type TestServer,
-} from "./helpers.js";
-
-const certs = vi.hoisted(() => ({ applyCertificateAuth: vi.fn() }));
-vi.mock("@termix/plugin-sdk/ssh-certs", () => certs);
-
-let server: TestServer | null = null;
-let nonce = "";
-
-beforeEach(() => {
-  certs.applyCertificateAuth.mockReset();
-  nonce = "";
-});
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-});
-
-async function startWithCa(
-  options: {
-    principals?: string[];
-    signStatus?: number;
-    wrongNonce?: boolean;
-    settings?: Record<string, unknown>;
-  } = {},
-) {
-  const ca = createFakeCa({
-    principals: options.principals,
-    signStatus: options.signStatus,
-    nonce: () => (options.wrongNonce ? "other" : nonce),
-  });
-  server = await startServer({
-    fetch: ca.fetch,
-    settings: {
-      caUrl: CA_URL,
-      fingerprint: ca.root.fingerprint,
-      provisioner: "oidc",
-      ...options.settings,
-    },
-  });
-  return ca;
-}
-
-/** Starts a sign-in and returns the socket and the authorization URL. */
-async function startSignIn() {
-  const socket = fakeSocket();
-  await server!.provider().startInteraction!({
-    userId: "user-1",
-    hostId: 7,
-    host: { name: "box", ip: "10.0.0.7", username: "root" },
-    socket: socket.socket,
-    requestOrigin: "https://termix.test",
-    payload: {},
-  });
-  const chooser = socket.sent.find((m) => m.stage === "chooser");
-  const url = chooser ? new URL(String(chooser.url)) : null;
-  nonce = url?.searchParams.get("nonce") ?? "";
-  return { socket, url, state: url?.searchParams.get("state") ?? "" };
-}
-
-describe("the certs table", () => {
-  it("is created on a fresh install", async () => {
-    const db = await createTestDb(pluginDir);
-    expect(
-      db.sqlite
-        .prepare(
-          "SELECT name FROM sqlite_master WHERE name = 'p_step_ca_certs'",
-        )
-        .get(),
-    ).toBeTruthy();
-    db.close();
-  });
-});
-
-describe("activate", () => {
-  it("registers the stepca auth type and its callback route", async () => {
-    server = await startServer();
-    expect(server.provider()).toMatchObject({
-      type: "stepca",
-      interaction: "stepca",
-      supportsBackground: false,
-    });
-    expect(server.mock.httpRouters).toHaveLength(1);
-  });
-
-  it.each(["db:own", "auth:provide", "network:serve"])(
-    "fails closed without %s",
-    async (capability) => {
-      const mock = createMockCtx({
-        pluginId: manifest.id,
-        manifest,
-        capabilities: manifest.capabilities.filter((c) => c !== capability),
-        db: (await createTestDb(pluginDir)).database,
-      });
-      const { activate } = await import("../../src/backend/index.js");
-      await expect(activate(mock.ctx)).rejects.toThrow(PluginCapabilityError);
-    },
-  );
-});
-
-describe("issuing a certificate", () => {
-  it("runs the OIDC flow against the CA and stores the certificate sealed", async () => {
-    const ca = await startWithCa();
-    const { socket, url, state } = await startSignIn();
-
-    expect(url?.origin + url?.pathname).toBe("https://idp.test/authorize");
-    expect(url?.searchParams.get("client_id")).toBe("termix");
-    expect(url?.searchParams.get("redirect_uri")).toBe(
-      "https://termix.test/plugin-api/step-ca/callback",
-    );
-    expect(url?.searchParams.get("code_challenge_method")).toBe("S256");
-
-    // The root is fetched unverified and checked by fingerprint, then pinned.
-    expect(ca.calls[0].init?.tls).toEqual({ rejectUnauthorized: false });
-    expect(ca.calls[1].init?.tls).toEqual({ ca: ca.root.pem });
-
-    const response = await server!.get(`/callback?state=${state}&code=abc`);
-    expect(response.status).toBe(200);
-    expect(response.body).toContain("Signed in");
-    expect(socket.sent.at(-1)).toMatchObject({
-      type: "stepca_completed",
-      requestId: state,
-    });
-
-    const sign = ca.calls.find((call) => call.url.endsWith("/1.0/ssh/sign"));
-    expect(JSON.parse(sign!.init!.body!)).toMatchObject({
-      certType: "user",
-      principals: ["root"],
-      keyID: "alice@example.com",
-    });
-    expect(sign!.init!.tls).toEqual({ ca: ca.root.pem });
-
-    const row = server!.db.sqlite
-      .prepare("SELECT * FROM p_step_ca_certs")
-      .get() as Record<string, string>;
-    expect(row.user_id).toBe("user-1");
-    expect(row.email).toBe("alice@example.com");
-    expect(row.ssh_cert).toMatch(/^sealed:/);
-    expect(row.private_key).toMatch(/^sealed:/);
-  });
-
-  it("answers a second use of the same callback with an error", async () => {
-    await startWithCa();
-    const { state } = await startSignIn();
-    await server!.get(`/callback?state=${state}&code=abc`);
-    const again = await server!.get(`/callback?state=${state}&code=abc`);
-    expect(again.status).toBe(400);
-    expect(again.body).toContain("no longer active");
-  });
-
-  it("refuses an id token issued for another sign-in", async () => {
-    await startWithCa({ wrongNonce: true });
-    const { socket, state } = await startSignIn();
-    const response = await server!.get(`/callback?state=${state}&code=abc`);
-    expect(response.status).toBe(400);
-    expect(socket.sent.at(-1)).toMatchObject({
-      type: "stepca_error",
-      error: expect.stringContaining("does not match"),
-    });
-    expect(
-      server!.db.sqlite.prepare("SELECT * FROM p_step_ca_certs").all(),
-    ).toHaveLength(0);
-  });
-
-  it("reports the CA refusing to sign", async () => {
-    await startWithCa({ signStatus: 403 });
-    const { socket, state } = await startSignIn();
-    await server!.get(`/callback?state=${state}&code=abc`);
-    expect(socket.sent.at(-1)).toMatchObject({
-      type: "stepca_error",
-      error: expect.stringContaining("HTTP 403"),
-    });
-  });
-
-  it("rejects a certificate without the host username", async () => {
-    await startWithCa({ principals: ["someone-else"] });
-    const { socket, state } = await startSignIn();
-    await server!.get(`/callback?state=${state}&code=abc`);
-    expect(socket.sent.at(-1)).toMatchObject({
-      type: "stepca_error",
-      error: expect.stringContaining("host username"),
-    });
-  });
-
-  it("passes an identity provider error through", async () => {
-    await startWithCa();
-    const { socket, state } = await startSignIn();
-    const response = await server!.get(
-      `/callback?state=${state}&error=access_denied&error_description=Denied`,
-    );
-    expect(response.status).toBe(400);
-    expect(socket.sent.at(-1)).toMatchObject({
-      type: "stepca_error",
-      error: "Step CA: Denied",
-    });
-  });
-
-  it("sends the 2.8 redirect URI while legacyCallback is on", async () => {
-    await startWithCa({ settings: { legacyCallback: true } });
-    const { url } = await startSignIn();
-    expect(url?.searchParams.get("redirect_uri")).toBe(
-      "https://termix.test/host/step-ca-callback",
-    );
-  });
-
-  it("tells the terminal when Step CA is not configured", async () => {
-    server = await startServer();
-    const { socket } = await startSignIn();
-    expect(socket.sent).toEqual([
-      expect.objectContaining({ type: "stepca_config_error" }),
-    ]);
-  });
-
-  it("lets a pending sign-in be cancelled", async () => {
-    await startWithCa();
-    const { state } = await startSignIn();
-    await server!.provider().cancelInteraction!({
-      userId: "user-1",
-      requestId: state,
-    });
-    const response = await server!.get(`/callback?state=${state}&code=abc`);
-    expect(response.status).toBe(400);
-  });
-});
-
-describe("the stepca provider", () => {
-  it("asks for a sign-in without a certificate", async () => {
-    server = await startServer();
-    const outcome = await server.provider().prepare({}, HOST, env());
-    expect(outcome).toMatchObject({
-      status: "interaction-required",
-      interaction: "stepca",
-    });
-    expect(certs.applyCertificateAuth).not.toHaveBeenCalled();
-  });
-
-  it("connects with the issued certificate", async () => {
-    await startWithCa();
-    const { state } = await startSignIn();
-    await server!.get(`/callback?state=${state}&code=abc`);
-
-    const config: Record<string, unknown> = {};
-    const outcome = await server!.provider().prepare(config, HOST, env());
-    expect(outcome).toEqual({ status: "ready" });
-    const [passedConfig, , credentials, username] =
-      certs.applyCertificateAuth.mock.calls[0];
-    expect(passedConfig).toBe(config);
-    expect(username).toBe("root");
-    expect(credentials.certificate).toMatch(
-      /^ssh-ed25519-cert-v01@openssh\.com /,
-    );
-    expect(credentials.privateKey).toContain("BEGIN PRIVATE KEY");
-  });
-
-  it("forgets an expired certificate", async () => {
-    await startWithCa();
-    const { state } = await startSignIn();
-    await server!.get(`/callback?state=${state}&code=abc`);
-    server!.db.sqlite
-      .prepare("UPDATE p_step_ca_certs SET expires_at = ?")
-      .run("2000-01-01T00:00:00.000Z");
-    const outcome = await server!.provider().prepare({}, HOST, env());
-    expect(outcome.status).toBe("interaction-required");
-    expect(
-      server!.db.sqlite.prepare("SELECT * FROM p_step_ca_certs").all(),
-    ).toHaveLength(0);
-  });
-
-  it("drops the certificate when the host rejects it", async () => {
-    await startWithCa();
-    const { state } = await startSignIn();
-    await server!.get(`/callback?state=${state}&code=abc`);
-    const decision = server!.provider().onAuthFailed!(HOST, env(), {
-      error: new Error("All configured authentication methods failed"),
-    } as never);
-    expect(decision).toMatchObject({ status: "interaction-required" });
-    await vi.waitFor(() =>
-      expect(
-        server!.db.sqlite.prepare("SELECT * FROM p_step_ca_certs").all(),
-      ).toHaveLength(0),
-    );
-  });
-});
diff --git a/plugins/step-ca/tests/frontend/activate.test.tsx b/plugins/step-ca/tests/frontend/activate.test.tsx
deleted file mode 100644
index b9d8852da..000000000
--- a/plugins/step-ca/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,137 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { act, fireEvent, render, screen } from "@testing-library/react";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import { StepCaOverlay } from "../../src/frontend/StepCaOverlay";
-import { redirectUri } from "../../src/frontend/RedirectUriSetting";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-vi.mock("@termix/plugin-sdk/frontend", async (importOriginal) => ({
-  ...(await importOriginal<typeof import("@termix/plugin-sdk/frontend")>()),
-  useTranslation: () => ({ t: (key: string) => key }),
-}));
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe("step-ca activate", () => {
-  it("registers the auth editor, the terminal overlay and the settings field", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.settingsComponents()).toEqual(["redirectUri"]);
-    expect(rendered.registered.slot("terminal.overlay")).toEqual([
-      "step-ca.signIn",
-    ]);
-    await rendered.deactivate();
-    expect(rendered.registered.settingsComponents()).toEqual([]);
-    expect(rendered.registered.slot("terminal.overlay")).toEqual([]);
-    rendered = null;
-  });
-});
-
-describe("redirectUri", () => {
-  it("names the plugin callback, or the 2.8 one", () => {
-    expect(redirectUri(false, "https://t.example/app/")).toBe(
-      "https://t.example/app/plugin-api/step-ca/callback",
-    );
-    expect(redirectUri(true, "https://t.example/")).toBe(
-      "https://t.example/host/step-ca-callback",
-    );
-  });
-});
-
-describe("StepCaOverlay", () => {
-  function setup() {
-    let listener: (message: {
-      type: string;
-      [key: string]: unknown;
-    }) => void = () => {};
-    const props = {
-      host: { id: 7 },
-      subscribe: vi.fn((next: typeof listener) => {
-        listener = next;
-        return () => {};
-      }),
-      holdConnectTimeout: vi.fn(),
-      fail: vi.fn(),
-      disconnect: vi.fn(),
-      send: vi.fn(),
-      connectPayload: vi.fn(() => ({ hostId: 7, cols: 80, rows: 24 })),
-    };
-    render(<StepCaOverlay {...props} />);
-    const emit = (message: { type: string; [key: string]: unknown }) =>
-      act(() => listener(message));
-    return { props, emit };
-  }
-
-  it("starts the sign-in once, then reports a second request as a failure", () => {
-    const { props, emit } = setup();
-    emit({ type: "stepca_auth_required", hostId: 7 });
-    expect(props.send).toHaveBeenCalledWith("stepca_start_auth", { hostId: 7 });
-    expect(props.holdConnectTimeout).toHaveBeenCalledWith(true);
-
-    emit({ type: "stepca_auth_required", hostId: 7 });
-    expect(props.fail).toHaveBeenCalledWith("errors.authFailed");
-  });
-
-  it("opens the identity provider, waits, and reconnects once signed in", () => {
-    const open = vi.spyOn(window, "open").mockReturnValue(null);
-    const { props, emit } = setup();
-    emit({ type: "stepca_auth_required", hostId: 7 });
-    emit({
-      type: "stepca_status",
-      stage: "chooser",
-      requestId: "req-1",
-      url: "https://idp.test/authorize?state=req-1",
-    });
-    fireEvent.click(screen.getByText("dialog.openBrowser"));
-    expect(open).toHaveBeenCalledWith(
-      "https://idp.test/authorize?state=req-1",
-      "_blank",
-    );
-    expect(screen.getByText("dialog.waiting")).toBeTruthy();
-
-    emit({ type: "stepca_completed", requestId: "req-1" });
-    expect(props.send).toHaveBeenCalledWith("stepca_auth_completed", {
-      hostId: 7,
-      cols: 80,
-      rows: 24,
-    });
-    expect(screen.queryByText("dialog.title")).toBeNull();
-    open.mockRestore();
-  });
-
-  it("cancels a pending sign-in", () => {
-    const { props, emit } = setup();
-    emit({
-      type: "stepca_status",
-      stage: "chooser",
-      requestId: "req-2",
-      url: "https://idp.test/authorize",
-    });
-    fireEvent.click(screen.getByText("common.cancel"));
-    expect(props.send).toHaveBeenCalledWith("stepca_cancel", {
-      requestId: "req-2",
-    });
-  });
-
-  it("shows a config error", () => {
-    const { emit } = setup();
-    emit({
-      type: "stepca_config_error",
-      requestId: "",
-      error: "Step CA is not configured.",
-    });
-    expect(screen.getByText("Step CA is not configured.")).toBeTruthy();
-  });
-});
diff --git a/plugins/step-ca/tsconfig.json b/plugins/step-ca/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/step-ca/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/step-ca/vitest.config.ts b/plugins/step-ca/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/step-ca/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/tailscale/CHANGELOG.md b/plugins/tailscale/CHANGELOG.md
deleted file mode 100644
index ec3d7e98f..000000000
--- a/plugins/tailscale/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Lets you browse devices on your tailnet and pick one when adding a host. Also shows the Tailscale SSH sign-in check when a host asks for it.
diff --git a/plugins/tailscale/README.md b/plugins/tailscale/README.md
deleted file mode 100644
index e85eee27b..000000000
--- a/plugins/tailscale/README.md
+++ /dev/null
@@ -1,30 +0,0 @@
-# Tailscale
-
-Browse and connect to devices on your tailnet, and handle Tailscale SSH sign-in checks.
-
-## Features
-
-- Browse the devices on your Tailscale or Headscale tailnet.
-- Pick a device when adding a host to fill in its address.
-- Shows the Tailscale SSH sign-in check when a host asks for it.
-- Adds a Tailscale tool to Host Metrics.
-
-## Settings
-
-### Admin
-
-- API key: a Tailscale or Headscale API key for your tailnet.
-- API base URL: leave empty for Tailscale, or point it at a Headscale instance.
-- Device list: check that the key works and see how many devices are reachable.
-
-## Permissions
-
-- `tailscale.devices.view`: See the devices on the tailnet. Only admins have it by default.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/tailscale/locales/en.json b/plugins/tailscale/locales/en.json
deleted file mode 100644
index 51d373edf..000000000
--- a/plugins/tailscale/locales/en.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "View tailnet devices",
-      "description": "See the devices on the connected tailnet."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "Tailscale API",
-      "devices": "Tailnet"
-    },
-    "apiKey": {
-      "label": "API key",
-      "description": "Used to list the devices on your tailnet. Works with a Tailscale or Headscale key.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "API base URL",
-      "description": "Leave empty for Tailscale. Set this to point at a Headscale instance.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Device list",
-      "checking": "Checking the tailnet...",
-      "noKey": "No API key set yet.",
-      "error": "Could not reach the tailnet. Check the API key.",
-      "count": "{{count}} device reachable",
-      "count_other": "{{count}} devices reachable",
-      "refresh": "Check"
-    }
-  },
-  "nav": {
-    "tailscale": "Tailscale"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "This must be a Unix user your Tailscale identity is granted in the tailnet's SSH ACL, not necessarily root.",
-    "tailscaleDeviceSelect": "Select Tailscale device",
-    "tailscaleDeviceSelectPlaceholder": "Select a device...",
-    "tailscaleNoApiKey": "No Tailscale API key configured. Add one in Admin Settings to enable device discovery.",
-    "tailscaleDocsLink": "View docs",
-    "tailscaleLoadingDevices": "Loading devices...",
-    "tailscaleDeviceLoadFailed": "Failed to load Tailscale devices. Check the API URL and network connection.",
-    "tailscaleNoDevices": "No devices found in your tailnet.",
-    "tailscaleDeviceAutoFill": "Selecting a device will auto-fill the host IP address.",
-    "tailscaleAddHost": "Add host",
-    "tailscaleCopyIp": "Copy Tailscale IP",
-    "tailscaleIpCopied": "IP copied",
-    "tailscaleIpCopyFailed": "Could not copy the IP",
-    "filterAuthTailscale": "Tailscale"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Tailscale Authentication Required",
-    "tailscaleCheckDescription": "Tailscale SSH requires an additional check. Authenticate in your browser to continue.",
-    "tailscaleCheckOpenBrowser": "Open Browser to Authenticate",
-    "tailscaleCheckWaiting": "Waiting for Tailscale authentication...",
-    "tailscaleCheckTimeout": "Tailscale authentication timed out. Please try again."
-  },
-  "manager": {
-    "title": "Tailscale",
-    "refresh": "Refresh",
-    "retry": "Retry",
-    "sudoHint": "Set a sudo password for this host to allow elevated actions.",
-    "noData": "No data available",
-    "filter": "Filter...",
-    "tsNotInstalled": "Tailscale is not installed on this host",
-    "tsRunning": "Running",
-    "tsStopped": "Stopped",
-    "tsEnable": "Connect",
-    "tsDisable": "Disconnect",
-    "tsEnabling": "Connecting to Tailscale...",
-    "tsDisabling": "Disconnecting from Tailscale...",
-    "tsEnabled": "Tailscale connected",
-    "tsDisabled": "Tailscale disconnected",
-    "tsExitNode": "Exit node",
-    "tsExitNodeActive": "Exit node active"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Connect to Terminal",
-        "usernameLabel": "Username"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Tailscale"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/af_ZA.json b/plugins/tailscale/locales/translated/af_ZA.json
deleted file mode 100644
index 19a405a8d..000000000
--- a/plugins/tailscale/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Bekyk tailnet-toestelle",
-      "description": "Sien die toestelle op die gekoppelde stertnet."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "Tailscale API",
-      "devices": "Stertnet"
-    },
-    "apiKey": {
-      "label": "API-sleutel",
-      "description": "Word gebruik om die toestelle op jou tailnet te lys. Werk met 'n Tailscale- of Headscale-sleutel.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "API-basis-URL",
-      "description": "Los leeg vir Stertskaal. Stel dit om na 'n Hoofskaal-instansie te wys.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Toestellys",
-      "checking": "Kontroleer die stertnet...",
-      "noKey": "Geen API-sleutel nog gestel nie.",
-      "error": "Kon nie die tailnet bereik nie. Kontroleer die API-sleutel.",
-      "count": "{{count}} toestel bereikbaar",
-      "count_other": "{{count}} toestelle bereikbaar",
-      "refresh": "Kontroleer"
-    }
-  },
-  "nav": {
-    "tailscale": "Stertskaal"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Dit moet 'n Unix-gebruiker wees aan wie jou Tailscale-identiteit in die tailnet se SSH ACL toegestaan word, nie noodwendig root nie.",
-    "tailscaleDeviceSelect": "Kies Tailscale-toestel",
-    "tailscaleDeviceSelectPlaceholder": "Kies 'n toestel...",
-    "tailscaleNoApiKey": "Geen Tailscale API-sleutel gekonfigureer nie. Voeg een by in Admin-instellings om toestelontdekking te aktiveer.",
-    "tailscaleDocsLink": "Bekyk dokumente",
-    "tailscaleLoadingDevices": "Laai toestelle...",
-    "tailscaleDeviceLoadFailed": "Kon nie Tailscale-toestelle laai nie. Kontroleer die API-URL en netwerkverbinding.",
-    "tailscaleNoDevices": "Geen toestelle in jou tailnet gevind nie.",
-    "tailscaleDeviceAutoFill": "As jy 'n toestel kies, sal die gasheer-IP-adres outomaties ingevul word.",
-    "tailscaleAddHost": "Voeg gasheer by",
-    "tailscaleCopyIp": "Kopieer Tailskaal IP",
-    "tailscaleIpCopied": "IP gekopieer",
-    "tailscaleIpCopyFailed": "Kon nie die IP-adres kopieer nie",
-    "filterAuthTailscale": "Stertskaal"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Stertskaal-verifikasie vereis",
-    "tailscaleCheckDescription": "Tailscale SSH vereis 'n bykomende kontrole. Verifieer in jou blaaier om voort te gaan.",
-    "tailscaleCheckOpenBrowser": "Maak blaaier oop om te verifieer",
-    "tailscaleCheckWaiting": "Wag vir Tailscale-verifikasie...",
-    "tailscaleCheckTimeout": "Tailscale-verifikasie het verstryk. Probeer asseblief weer."
-  },
-  "manager": {
-    "title": "Stertskaal",
-    "refresh": "Verfris",
-    "retry": "Probeer weer",
-    "sudoHint": "Stel 'n sudo-wagwoord vir hierdie gasheer om verhoogde aksies toe te laat.",
-    "noData": "Geen data beskikbaar nie",
-    "filter": "Filter...",
-    "tsNotInstalled": "Tailscale is nie op hierdie gasheer geïnstalleer nie",
-    "tsRunning": "Hardloop",
-    "tsStopped": "Gestop",
-    "tsEnable": "Verbind",
-    "tsDisable": "Ontkoppel",
-    "tsEnabling": "Verbind met Tailscale...",
-    "tsDisabling": "Ontkoppel tans van Tailscale...",
-    "tsEnabled": "Stertskaal gekoppel",
-    "tsDisabled": "Stertskaal ontkoppel",
-    "tsExitNode": "Uitgangsknoop",
-    "tsExitNodeActive": "Uitgangsknoop aktief"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Koppel aan terminaal",
-        "usernameLabel": "Gebruikersnaam"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Stertskaal"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/ar_SA.json b/plugins/tailscale/locales/translated/ar_SA.json
deleted file mode 100644
index 60f0a4b95..000000000
--- a/plugins/tailscale/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "عرض أجهزة Tailnet",
-      "description": "اطلع على الأجهزة الموجودة على شبكة الاتصال اللاسلكية."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "واجهة برمجة تطبيقات Tailscale",
-      "devices": "شبكة الذيل"
-    },
-    "apiKey": {
-      "label": "مفتاح API",
-      "description": "يُستخدم لعرض قائمة الأجهزة الموجودة على شبكتك المحلية. يعمل مع مفتاح Tailscale أو Headscale.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "عنوان URL الأساسي لواجهة برمجة التطبيقات",
-      "description": "اترك حقل \"مقياس الذيل\" فارغًا. اضبط هذا الحقل ليشير إلى مثيل \"مقياس الرأس\".",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "قائمة الأجهزة",
-      "checking": "فحص شبكة الذيل...",
-      "noKey": "لم يتم تعيين مفتاح API بعد.",
-      "error": "تعذر الوصول إلى شبكة الوصول. يرجى التحقق من مفتاح واجهة برمجة التطبيقات (API).",
-      "count": "{{count}} الجهاز قابل للوصول",
-      "count_other": "{{count}} الأجهزة التي يمكن الوصول إليها",
-      "refresh": "يفحص"
-    }
-  },
-  "nav": {
-    "tailscale": "Tailscale"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "يجب أن يكون هذا مستخدمًا لنظام Unix، حيث يتم منح هوية Tailscale الخاصة بك في قائمة التحكم بالوصول SSH الخاصة بشبكة tailnet، وليس بالضرورة المستخدم الجذر.",
-    "tailscaleDeviceSelect": "اختيار جهاز Tailscale",
-    "tailscaleDeviceSelectPlaceholder": "اختر جهازًا...",
-    "tailscaleNoApiKey": "لم يتم تكوين مفتاح API لـ Tailscale. أضف واحدًا في إعدادات المسؤول لتمكين اكتشاف الأجهزة.",
-    "tailscaleDocsLink": "عرض المستندات",
-    "tailscaleLoadingDevices": "جارٍ تحميل الأجهزة...",
-    "tailscaleDeviceLoadFailed": "فشل تحميل أجهزة Tailscale. يرجى التحقق من عنوان URL الخاص بواجهة برمجة التطبيقات (API) واتصال الشبكة.",
-    "tailscaleNoDevices": "لم يتم العثور على أجهزة في tailnet الخاص بك.",
-    "tailscaleDeviceAutoFill": "سيؤدي تحديد جهاز إلى تعبئة عنوان IP للمضيف تلقائيًا.",
-    "tailscaleAddHost": "إضافة مضيف",
-    "tailscaleCopyIp": "نسخ عنوان IP الخاص بـ Tailscale",
-    "tailscaleIpCopied": "تم نسخ عنوان IP",
-    "tailscaleIpCopyFailed": "تعذر نسخ عنوان IP",
-    "filterAuthTailscale": "Tailscale"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "يلزم التحقق من الهوية على مستوى الذيل",
-    "tailscaleCheckDescription": "يتطلب Tailscale SSH إجراء فحص إضافي. قم بتسجيل الدخول إلى متصفحك للمتابعة.",
-    "tailscaleCheckOpenBrowser": "افتح المتصفح للمصادقة",
-    "tailscaleCheckWaiting": "في انتظار مصادقة Tailscale...",
-    "tailscaleCheckTimeout": "انتهت مهلة مصادقة Tailscale. يرجى المحاولة مرة أخرى."
-  },
-  "manager": {
-    "title": "Tailscale",
-    "refresh": "تحديث",
-    "retry": "إعادة المحاولة",
-    "sudoHint": "قم بتعيين كلمة مرور sudo لهذا المضيف للسماح بإجراءات ذات صلاحيات إدارية.",
-    "noData": "لا توجد بيانات",
-    "filter": "تصفية...",
-    "tsNotInstalled": "Tailscale غير مثبت على هذا المضيف",
-    "tsRunning": "قيد التشغيل",
-    "tsStopped": "متوقف",
-    "tsEnable": "اتصال",
-    "tsDisable": "افصل",
-    "tsEnabling": "جارٍ الاتصال بـ Tailscale...",
-    "tsDisabling": "جارٍ قطع الاتصال بـ Tailscale...",
-    "tsEnabled": "Tailscale متصل",
-    "tsDisabled": "Tailscale غير متصل",
-    "tsExitNode": "عقدة خروج",
-    "tsExitNodeActive": "عقدة خروج نشطة"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "اتصل بالطرفية",
-        "usernameLabel": "اسم المستخدم"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Tailscale"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/bg_BG.json b/plugins/tailscale/locales/translated/bg_BG.json
deleted file mode 100644
index 17032e43c..000000000
--- a/plugins/tailscale/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Вижте устройствата за мрежата на задната част",
-      "description": "Вижте устройствата в свързаната мрежа за пренос на данни (tailnet)."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "API за Tailscale",
-      "devices": "Опашка"
-    },
-    "apiKey": {
-      "label": "API ключ",
-      "description": "Използва се за изброяване на устройствата във вашата tailnet мрежа. Работи с ключ Tailscale или Headscale.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "Базов URL адрес на API",
-      "description": "Оставете празно за Tailscale. Задайте това да сочи към екземпляр на Headscale.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Списък с устройства",
-      "checking": "Проверка на мрежата на опашката...",
-      "noKey": "Все още не е зададен API ключ.",
-      "error": "Не можа да се достигне tailnet. Проверете API ключа.",
-      "count": "{{count}} устройство е достъпно",
-      "count_other": "{{count}} устройства са достъпни",
-      "refresh": "Проверете"
-    }
-  },
-  "nav": {
-    "tailscale": "Задна скала"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Това трябва да е Unix потребител, чиято самоличност на Tailscale е предоставена в SSH ACL на tailnet, не е задължително root.",
-    "tailscaleDeviceSelect": "Изберете устройство за Tailscale",
-    "tailscaleDeviceSelectPlaceholder": "Изберете устройство...",
-    "tailscaleNoApiKey": "Няма конфигуриран ключ за Tailscale API. Добавете такъв в настройките на администратора, за да активирате откриването на устройства.",
-    "tailscaleDocsLink": "Преглед на документи",
-    "tailscaleLoadingDevices": "Зареждане на устройства...",
-    "tailscaleDeviceLoadFailed": "Зареждането на устройствата Tailscale не бе успешно. Проверете URL адреса на API и мрежовата връзка.",
-    "tailscaleNoDevices": "Няма намерени устройства във вашата мрежа за контакт.",
-    "tailscaleDeviceAutoFill": "Избирането на устройство ще попълни автоматично IP адреса на хоста.",
-    "tailscaleAddHost": "Добавяне на хост",
-    "tailscaleCopyIp": "Копиране на IP адрес на Tailscale",
-    "tailscaleIpCopied": "IP адресът е копиран",
-    "tailscaleIpCopyFailed": "Не можа да се копира IP адресът",
-    "filterAuthTailscale": "Задна скала"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Изисква се удостоверяване на Tailscale",
-    "tailscaleCheckDescription": "Tailscale SSH изисква допълнителна проверка. Удостоверете се в браузъра си, за да продължите.",
-    "tailscaleCheckOpenBrowser": "Отворете браузъра за удостоверяване",
-    "tailscaleCheckWaiting": "Чака се удостоверяване на Tailscale...",
-    "tailscaleCheckTimeout": "Времето за изчакване на удостоверяването на Tailscale изтече. Моля, опитайте отново."
-  },
-  "manager": {
-    "title": "Задна скала",
-    "refresh": "Обновяване",
-    "retry": "Опитай отново",
-    "sudoHint": "Задайте парола за sudo за този хост, за да разрешите действия с повишени права.",
-    "noData": "Няма налични данни",
-    "filter": "Филтър...",
-    "tsNotInstalled": "Tailscale не е инсталиран на този хост",
-    "tsRunning": "Бягане",
-    "tsStopped": "Спряно",
-    "tsEnable": "Свържете се",
-    "tsDisable": "Изключване",
-    "tsEnabling": "Свързване с Tailscale...",
-    "tsDisabling": "Изключване от Tailscale...",
-    "tsEnabled": "Свързана опашка",
-    "tsDisabled": "Задната скала е изключена",
-    "tsExitNode": "Изходен възел",
-    "tsExitNodeActive": "Изходният възел е активен"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Свързване с терминала",
-        "usernameLabel": "Потребителско име"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Задна скала"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/bn_BD.json b/plugins/tailscale/locales/translated/bn_BD.json
deleted file mode 100644
index 65489c008..000000000
--- a/plugins/tailscale/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "টেইলনেট ডিভাইসগুলি দেখুন",
-      "description": "সংযুক্ত টেইলনেটে থাকা ডিভাইসগুলো দেখুন।"
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "টেইলস্কেল এপিআই",
-      "devices": "লেজজাল"
-    },
-    "apiKey": {
-      "label": "এপিআই কী",
-      "description": "আপনার টেইলনেটে থাকা ডিভাইসগুলোর তালিকা করতে ব্যবহৃত হয়। এটি টেইলস্কেল বা হেডস্কেল কী-এর সাথে কাজ করে।",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "এপিআই বেস ইউআরএল",
-      "description": "টেইলস্কেলের জন্য খালি রাখুন। এটিকে একটি হেডস্কেল ইনস্ট্যান্সের দিকে নির্দেশ করতে সেট করুন।",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "ডিভাইসের তালিকা",
-      "checking": "টেলনেট পরীক্ষা করা হচ্ছে...",
-      "noKey": "এখনো কোনো এপিআই কী সেট করা হয়নি।",
-      "error": "টেইলনেটে পৌঁছানো যায়নি। এপিআই কী যাচাই করুন।",
-      "count": "{{count}} ডিভাইসটি পৌঁছানো সম্ভব",
-      "count_other": "{{count}} ডিভাইস পৌঁছানো সম্ভব",
-      "refresh": "চেক"
-    }
-  },
-  "nav": {
-    "tailscale": "লেজের স্কেল"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "এটি অবশ্যই একজন ইউনিক্স ব্যবহারকারী হতে হবে, যার মাধ্যমে আপনার টেইলনেট-এর SSH ACL-এ আপনার টেইলস্কেল পরিচয়কে অনুমতি দেওয়া হয়; এটি রুট হওয়া আবশ্যক নয়।",
-    "tailscaleDeviceSelect": "টেইলস্কেল ডিভাইস নির্বাচন করুন",
-    "tailscaleDeviceSelectPlaceholder": "একটি ডিভাইস নির্বাচন করুন...",
-    "tailscaleNoApiKey": "কোনো টেইলস্কেল এপিআই কী কনফিগার করা নেই। ডিভাইস ডিসকভারি সক্ষম করতে অ্যাডমিন সেটিংসে একটি যোগ করুন।",
-    "tailscaleDocsLink": "নথি দেখুন",
-    "tailscaleLoadingDevices": "ডিভাইস লোড হচ্ছে...",
-    "tailscaleDeviceLoadFailed": "টেইলস্কেল ডিভাইসগুলো লোড করা সম্ভব হয়নি। এপিআই ইউআরএল এবং নেটওয়ার্ক সংযোগ যাচাই করুন।",
-    "tailscaleNoDevices": "আপনার টেইলনেটে কোনো ডিভাইস খুঁজে পাওয়া যায়নি।",
-    "tailscaleDeviceAutoFill": "ডিভাইস নির্বাচন করলে হোস্ট আইপি অ্যাড্রেসটি স্বয়ংক্রিয়ভাবে পূরণ হয়ে যাবে।",
-    "tailscaleAddHost": "হোস্ট যোগ করুন",
-    "tailscaleCopyIp": "টেইলস্কেল আইপি কপি করুন",
-    "tailscaleIpCopied": "আইপি কপি করা হয়েছে",
-    "tailscaleIpCopyFailed": "আইপি কপি করা যায়নি",
-    "filterAuthTailscale": "লেজের স্কেল"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "টেইলস্কেল প্রমাণীকরণ আবশ্যক",
-    "tailscaleCheckDescription": "টেইলস্কেল SSH-এর জন্য একটি অতিরিক্ত যাচাইকরণ প্রয়োজন। চালিয়ে যাওয়ার জন্য আপনার ব্রাউজারে প্রমাণীকরণ করুন।",
-    "tailscaleCheckOpenBrowser": "প্রমাণীকরণের জন্য ব্রাউজার খুলুন",
-    "tailscaleCheckWaiting": "টেইলস্কেল প্রমাণীকরণের জন্য অপেক্ষা করা হচ্ছে...",
-    "tailscaleCheckTimeout": "টেইলস্কেল প্রমাণীকরণের সময়সীমা শেষ হয়ে গেছে। অনুগ্রহ করে আবার চেষ্টা করুন।"
-  },
-  "manager": {
-    "title": "লেজের স্কেল",
-    "refresh": "রিফ্রেশ",
-    "retry": "পুনরায় চেষ্টা করুন",
-    "sudoHint": "উচ্চতর কার্যক্রমের অনুমতি দেওয়ার জন্য এই হোস্টের জন্য একটি sudo পাসওয়ার্ড সেট করুন।",
-    "noData": "কোন ডেটা উপলব্ধ নেই",
-    "filter": "ফিল্টার...",
-    "tsNotInstalled": "এই হোস্টে টেইলস্কেল ইনস্টল করা নেই।",
-    "tsRunning": "দৌড়ানো",
-    "tsStopped": "থামানো হয়েছে",
-    "tsEnable": "সংযোগ করুন",
-    "tsDisable": "সংযোগ বিচ্ছিন্ন করুন",
-    "tsEnabling": "টেইলস্কেলের সাথে সংযোগ স্থাপন করা হচ্ছে...",
-    "tsDisabling": "টেইলস্কেল থেকে সংযোগ বিচ্ছিন্ন হচ্ছে...",
-    "tsEnabled": "টেলস্কেল সংযুক্ত",
-    "tsDisabled": "টেলস্কেল সংযোগ বিচ্ছিন্ন",
-    "tsExitNode": "প্রস্থান নোড",
-    "tsExitNodeActive": "প্রস্থান নোড সক্রিয়"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "টার্মিনালের সাথে সংযোগ করুন",
-        "usernameLabel": "ব্যবহারকারীর নাম"
-      }
-    }
-  },
-  "plugin": {
-    "name": "লেজের স্কেল"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/ca_ES.json b/plugins/tailscale/locales/translated/ca_ES.json
deleted file mode 100644
index 71951fde3..000000000
--- a/plugins/tailscale/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Veure dispositius de xarxa de cua",
-      "description": "Veureu els dispositius de la xarxa de cua connectada."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "API de tailscal",
-      "devices": "Xarxa de cua"
-    },
-    "apiKey": {
-      "label": "Clau API",
-      "description": "S'utilitza per llistar els dispositius de la xarxa de tailnet. Funciona amb una clau Tailscale o Headscale.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "URL base de l'API",
-      "description": "Deixeu-ho en blanc per a Tailscale. Defineu-ho perquè apunti a una instància de Headscale.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Llista de dispositius",
-      "checking": "Revisant la xarxa de cua...",
-      "noKey": "Encara no s'ha definit cap clau API.",
-      "error": "No s'ha pogut accedir a la xarxa de cua. Comproveu la clau API.",
-      "count": "dispositiu {{count}} accessible",
-      "count_other": "dispositius accessibles {{count}}",
-      "refresh": "Comprovar"
-    }
-  },
-  "nav": {
-    "tailscale": "Escala de cua"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Aquest ha de ser un usuari d'Unix; la teva identitat Tailscale està atorgada a l'ACL SSH de la xarxa principal, no necessàriament un usuari root.",
-    "tailscaleDeviceSelect": "Selecciona el dispositiu Tailscale",
-    "tailscaleDeviceSelectPlaceholder": "Selecciona un dispositiu...",
-    "tailscaleNoApiKey": "No hi ha cap clau d'API de Tailscale configurada. Afegeix-ne una a la configuració de l'administrador per habilitar la detecció de dispositius.",
-    "tailscaleDocsLink": "Veure documents",
-    "tailscaleLoadingDevices": "S'estan carregant els dispositius...",
-    "tailscaleDeviceLoadFailed": "No s'han pogut carregar els dispositius Tailscale. Comproveu l'URL de l'API i la connexió de xarxa.",
-    "tailscaleNoDevices": "No s'han trobat dispositius a la xarxa de cua.",
-    "tailscaleDeviceAutoFill": "En seleccionar un dispositiu, l'adreça IP de l'amfitrió s'omplirà automàticament.",
-    "tailscaleAddHost": "Afegeix un amfitrió",
-    "tailscaleCopyIp": "Copia IP de tailscal",
-    "tailscaleIpCopied": "IP copiada",
-    "tailscaleIpCopyFailed": "No s'ha pogut copiar la IP",
-    "filterAuthTailscale": "Escala de cua"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Autenticació a escala final requerida",
-    "tailscaleCheckDescription": "L'SSH a escala de punta requereix una comprovació addicional. Autentiqueu-vos al navegador per continuar.",
-    "tailscaleCheckOpenBrowser": "Obre el navegador per autenticar-te",
-    "tailscaleCheckWaiting": "Esperant l'autenticació de Tailscale...",
-    "tailscaleCheckTimeout": "S'ha esgotat el temps d'espera de l'autenticació a escala final. Torna-ho a provar."
-  },
-  "manager": {
-    "title": "Escala de cua",
-    "refresh": "Actualitza",
-    "retry": "Torna-ho a intentar",
-    "sudoHint": "Estableix una contrasenya sudo per a aquest host per permetre accions amb privilegis elevats.",
-    "noData": "No hi ha dades disponibles",
-    "filter": "Filtra...",
-    "tsNotInstalled": "Tailscale no està instal·lat en aquest amfitrió",
-    "tsRunning": "Córrer",
-    "tsStopped": "Aturat",
-    "tsEnable": "Connecta",
-    "tsDisable": "Desconnecta",
-    "tsEnabling": "Connectant a Tailscale...",
-    "tsDisabling": "Desconnectant de Tailscale...",
-    "tsEnabled": "Escala de cua connectada",
-    "tsDisabled": "Escala de cua desconnectada",
-    "tsExitNode": "Node de sortida",
-    "tsExitNodeActive": "Node de sortida actiu"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Connecta't al terminal",
-        "usernameLabel": "Nom d'usuari"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Escala de cua"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/cs_CZ.json b/plugins/tailscale/locales/translated/cs_CZ.json
deleted file mode 100644
index 23fa24d14..000000000
--- a/plugins/tailscale/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Zobrazit zařízení pro zadní část vozu",
-      "description": "Podívejte se na zařízení v připojené koncové síti (tailnet)."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "API pro koncové systémy",
-      "devices": "Tailnet"
-    },
-    "apiKey": {
-      "label": "Klíč API",
-      "description": "Používá se k zobrazení seznamu zařízení v síti Tailnet. Funguje s klíčem Tailscale nebo Headscale.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "Základní URL API",
-      "description": "Pro Tailscale nechte prázdné. Nastavte tak, aby ukazovalo na instanci Headscale.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Seznam zařízení",
-      "checking": "Kontrola zadní sítě...",
-      "noKey": "Zatím nebyl nastaven žádný klíč API.",
-      "error": "Nepodařilo se dosáhnout sítě Tailnet. Zkontrolujte klíč API.",
-      "count": "{{count}} zařízení je dosažitelné",
-      "count_other": "{{count}} zařízení dosažitelných",
-      "refresh": "Kontrola"
-    }
-  },
-  "nav": {
-    "tailscale": "Koncová stupnice"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Musí se jednat o uživatele Unixu, kterému je vaše identita Tailscale udělena v SSH ACL tailnetu, nikoli nutně o uživatele root.",
-    "tailscaleDeviceSelect": "Vyberte zařízení Tailscale",
-    "tailscaleDeviceSelectPlaceholder": "Vyberte zařízení...",
-    "tailscaleNoApiKey": "Není nakonfigurován žádný klíč Tailscale API. Přidejte jej v nastavení správce, abyste povolili vyhledávání zařízení.",
-    "tailscaleDocsLink": "Zobrazit dokumenty",
-    "tailscaleLoadingDevices": "Načítání zařízení...",
-    "tailscaleDeviceLoadFailed": "Nepodařilo se načíst zařízení Tailscale. Zkontrolujte URL API a síťové připojení.",
-    "tailscaleNoDevices": "Ve vaší koncové síti nebyla nalezena žádná zařízení.",
-    "tailscaleDeviceAutoFill": "Výběrem zařízení se automaticky vyplní IP adresa hostitele.",
-    "tailscaleAddHost": "Přidat hostitele",
-    "tailscaleCopyIp": "Kopírovat IP adresu Tailscale",
-    "tailscaleIpCopied": "IP adresa zkopírována",
-    "tailscaleIpCopyFailed": "Nepodařilo se zkopírovat IP adresu",
-    "filterAuthTailscale": "Koncová stupnice"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Vyžadováno ověřování Tailscale",
-    "tailscaleCheckDescription": "Tailscale SSH vyžaduje dodatečnou kontrolu. Pro pokračování se ověřte ve svém prohlížeči.",
-    "tailscaleCheckOpenBrowser": "Otevřít prohlížeč pro ověření",
-    "tailscaleCheckWaiting": "Čekání na ověření Tailscale...",
-    "tailscaleCheckTimeout": "Časový limit pro ověřování Tailscale vypršel. Zkuste to prosím znovu."
-  },
-  "manager": {
-    "title": "Koncová stupnice",
-    "refresh": "Obnovit",
-    "retry": "Zkusit znovu",
-    "sudoHint": "Nastavte pro tento hostitel heslo sudo, abyste povolili akce se zvýšenými oprávněními.",
-    "noData": "Nejsou k dispozici žádná data",
-    "filter": "Filtr...",
-    "tsNotInstalled": "Tailscale není na tomto hostiteli nainstalován",
-    "tsRunning": "Běh",
-    "tsStopped": "Zastaveno",
-    "tsEnable": "Připojit",
-    "tsDisable": "Odpojit",
-    "tsEnabling": "Připojování k Tailscale...",
-    "tsDisabling": "Odpojování od Tailscale...",
-    "tsEnabled": "Koncová váha připojena",
-    "tsDisabled": "Tailscale odpojeno",
-    "tsExitNode": "Východový uzel",
-    "tsExitNodeActive": "Výstupní uzel je aktivní"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Připojení k terminálu",
-        "usernameLabel": "Uživatelské jméno"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Koncová stupnice"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/da_DK.json b/plugins/tailscale/locales/translated/da_DK.json
deleted file mode 100644
index 0d78f8cca..000000000
--- a/plugins/tailscale/locales/translated/da_DK.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Se tailnet-enheder",
-      "description": "Se enhederne på det tilsluttede halenet."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "Tailscale API",
-      "devices": "Halenet"
-    },
-    "apiKey": {
-      "label": "API-nøgle",
-      "description": "Bruges til at liste enhederne på dit tailnet. Fungerer med en Tailscale- eller Headscale-nøgle.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "API-basis-URL",
-      "description": "Lad være tom for Tailscale. Indstil dette til at pege på en Headscale-instans.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Enhedsliste",
-      "checking": "Tjekker bagnettet...",
-      "noKey": "Ingen API-nøgle angivet endnu.",
-      "error": "Kunne ikke nå tailnet. Tjek API-nøglen.",
-      "count": "{{count}} enhed tilgængelig",
-      "count_other": "{{count}} enheder tilgængelige",
-      "refresh": "Check"
-    }
-  },
-  "nav": {
-    "tailscale": "Haleskala"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Dette skal være en Unix-bruger, som din Tailscale-identitet er tildelt i tailnets SSH ACL, ikke nødvendigvis root.",
-    "tailscaleDeviceSelect": "Vælg Tailscale-enhed",
-    "tailscaleDeviceSelectPlaceholder": "Vælg en enhed...",
-    "tailscaleNoApiKey": "Ingen Tailscale API-nøgle konfigureret. Tilføj en i administratorindstillinger for at aktivere enhedsregistrering.",
-    "tailscaleDocsLink": "Se dokumenter",
-    "tailscaleLoadingDevices": "Indlæser enheder...",
-    "tailscaleDeviceLoadFailed": "Kunne ikke indlæse Tailscale-enheder. Kontroller API-URL'en og netværksforbindelsen.",
-    "tailscaleNoDevices": "Ingen enheder fundet i dit tailnet.",
-    "tailscaleDeviceAutoFill": "Hvis du vælger en enhed, udfyldes værtens IP-adresse automatisk.",
-    "tailscaleAddHost": "Tilføj vært",
-    "tailscaleCopyIp": "Kopiér Tailscale IP",
-    "tailscaleIpCopied": "IP kopieret",
-    "tailscaleIpCopyFailed": "Kunne ikke kopiere IP-adressen",
-    "filterAuthTailscale": "Haleskala"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Tailscale-godkendelse påkrævet",
-    "tailscaleCheckDescription": "Tailscale SSH kræver en yderligere kontrol. Godkend i din browser for at fortsætte.",
-    "tailscaleCheckOpenBrowser": "Åbn browseren for at godkende",
-    "tailscaleCheckWaiting": "Venter på Tailscale-godkendelse...",
-    "tailscaleCheckTimeout": "Tailscale-godkendelsen er udløbet. Prøv igen."
-  },
-  "manager": {
-    "title": "Haleskala",
-    "refresh": "Opfriske",
-    "retry": "Prøv igen",
-    "sudoHint": "Indstil en sudo-adgangskode til denne vært for at tillade handlinger med administratorrettigheder.",
-    "noData": "Ingen data tilgængelige",
-    "filter": "Filter...",
-    "tsNotInstalled": "Tailscale er ikke installeret på denne vært",
-    "tsRunning": "Løb",
-    "tsStopped": "Stoppet",
-    "tsEnable": "Forbinde",
-    "tsDisable": "Afbryde",
-    "tsEnabling": "Forbinder til Tailscale...",
-    "tsDisabling": "Afbryder forbindelsen til Tailscale...",
-    "tsEnabled": "Haleskala forbundet",
-    "tsDisabled": "Haleskalaen er afbrudt",
-    "tsExitNode": "Udgangsnode",
-    "tsExitNodeActive": "Afslut node aktiv"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Opret forbindelse til terminalen",
-        "usernameLabel": "Brugernavn"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Haleskala"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/de_DE.json b/plugins/tailscale/locales/translated/de_DE.json
deleted file mode 100644
index d2f731eac..000000000
--- a/plugins/tailscale/locales/translated/de_DE.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Tailnet-Geräte anzeigen",
-      "description": "Sehen Sie sich die Geräte im verbundenen Netzwerk an."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "Tailscale API",
-      "devices": "Tailnet"
-    },
-    "apiKey": {
-      "label": "API-Schlüssel",
-      "description": "Dient zur Auflistung der Geräte in Ihrem Tailscale-Netzwerk. Funktioniert mit einem Tailscale- oder Headscale-Schlüssel.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "API-Basis-URL",
-      "description": "Lassen Sie das Feld „Tailscale“ leer. Stellen Sie diesen Wert so ein, dass er auf eine „Headscale“-Instanz verweist.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Geräteliste",
-      "checking": "Überprüfung des Rücknetzes...",
-      "noKey": "Es wurde noch kein API-Schlüssel festgelegt.",
-      "error": "Das Tailnet konnte nicht erreicht werden. Bitte überprüfen Sie den API-Schlüssel.",
-      "count": "{{count}} erreichbares Gerät",
-      "count_other": "{{count}} erreichbare Geräte",
-      "refresh": "Überprüfen"
-    }
-  },
-  "nav": {
-    "tailscale": "Tailscale"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Dies muss ein Unix-Benutzer sein, dem Ihre Tailscale-Identität in der SSH-ACL des Tailnets gewährt wird, nicht unbedingt root.",
-    "tailscaleDeviceSelect": "Tailscale-Gerät auswählen",
-    "tailscaleDeviceSelectPlaceholder": "Gerät auswählen...",
-    "tailscaleNoApiKey": "Kein Tailscale API-Schlüssel konfiguriert. Fügen Sie einen in den Admin-Einstellungen hinzu, um die Geräteerkennung zu aktivieren.",
-    "tailscaleDocsLink": "Dokumentation anzeigen",
-    "tailscaleLoadingDevices": "Geräte werden geladen...",
-    "tailscaleDeviceLoadFailed": "Die Tailscale-Geräte konnten nicht geladen werden. Bitte überprüfen Sie die API-URL und die Netzwerkverbindung.",
-    "tailscaleNoDevices": "Keine Geräte in Ihrem Tailnet gefunden.",
-    "tailscaleDeviceAutoFill": "Die Auswahl eines Geräts füllt die Host-IP-Adresse automatisch aus.",
-    "tailscaleAddHost": "Host hinzufügen",
-    "tailscaleCopyIp": "Tailscale IP kopieren",
-    "tailscaleIpCopied": "IP kopiert",
-    "tailscaleIpCopyFailed": "Die IP-Adresse konnte nicht kopiert werden.",
-    "filterAuthTailscale": "Tailscale"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Tailscale-Authentifizierung erforderlich",
-    "tailscaleCheckDescription": "Tailscale SSH erfordert eine zusätzliche Überprüfung. Authentifizieren Sie sich in Ihrem Browser, um fortzufahren.",
-    "tailscaleCheckOpenBrowser": "Browser zum Authentifizieren öffnen",
-    "tailscaleCheckWaiting": "Warten auf Tailscale-Authentifizierung...",
-    "tailscaleCheckTimeout": "Die Tailscale-Authentifizierung ist fehlgeschlagen. Bitte versuchen Sie es erneut."
-  },
-  "manager": {
-    "title": "Tailscale",
-    "refresh": "Aktualisieren",
-    "retry": "Erneut versuchen",
-    "sudoHint": "Legen Sie ein sudo-Passwort für diesen Host fest, um erhöhte Aktionen zu ermöglichen.",
-    "noData": "Keine Daten verfügbar",
-    "filter": "Filtern...",
-    "tsNotInstalled": "Tailscale ist auf diesem Host nicht installiert",
-    "tsRunning": "Läuft",
-    "tsStopped": "Gestoppt",
-    "tsEnable": "Verbinden",
-    "tsDisable": "Trennen",
-    "tsEnabling": "Verbinde mit Tailscale...",
-    "tsDisabling": "Trenne von Tailscale...",
-    "tsEnabled": "Tailscale verbunden",
-    "tsDisabled": "Tailscale getrennt",
-    "tsExitNode": "Exit-Knoten",
-    "tsExitNodeActive": "Exit-Knoten aktiv"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Mit Terminal verbinden",
-        "usernameLabel": "Benutzername"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Tailscale"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/el_GR.json b/plugins/tailscale/locales/translated/el_GR.json
deleted file mode 100644
index f05b80645..000000000
--- a/plugins/tailscale/locales/translated/el_GR.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Προβολή συσκευών tailnet",
-      "description": "Δείτε τις συσκευές στο συνδεδεμένο tailnet."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "API κλίμακας ουράς",
-      "devices": "Tailnet"
-    },
-    "apiKey": {
-      "label": "Κλειδί API",
-      "description": "Χρησιμοποιείται για την καταχώριση των συσκευών στο tailnet σας. Λειτουργεί με πλήκτρο Tailscale ή Headscale.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "URL βάσης API",
-      "description": "Αφήστε το κενό για το Tailscale. Ορίστε το ώστε να δείχνει σε μια παρουσία Headscale.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Λίστα συσκευών",
-      "checking": "Έλεγχος του διχτυού...",
-      "noKey": "Δεν έχει οριστεί ακόμη κλειδί API.",
-      "error": "Δεν ήταν δυνατή η επικοινωνία με το tailnet. Ελέγξτε το κλειδί API.",
-      "count": "{{count}} συσκευή προσβάσιμη",
-      "count_other": "{{count}} προσβάσιμες συσκευές",
-      "refresh": "Ελεγχος"
-    }
-  },
-  "nav": {
-    "tailscale": "Κλίμακα ουράς"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Αυτός πρέπει να είναι χρήστης Unix. Η ταυτότητα Tailscale σας έχει εκχωρηθεί στο SSH ACL του tailnet, όχι απαραίτητα root.",
-    "tailscaleDeviceSelect": "Επιλογή συσκευής κλίμακας ουράς",
-    "tailscaleDeviceSelectPlaceholder": "Επιλέξτε μια συσκευή...",
-    "tailscaleNoApiKey": "Δεν έχει ρυθμιστεί κλειδί API Tailscale. Προσθέστε ένα στις Ρυθμίσεις διαχειριστή για να ενεργοποιήσετε την ανακάλυψη συσκευών.",
-    "tailscaleDocsLink": "Προβολή εγγράφων",
-    "tailscaleLoadingDevices": "Φόρτωση συσκευών...",
-    "tailscaleDeviceLoadFailed": "Αποτυχία φόρτωσης συσκευών Tailscale. Ελέγξτε τη διεύθυνση URL του API και τη σύνδεση δικτύου.",
-    "tailscaleNoDevices": "Δεν βρέθηκαν συσκευές στο tailnet σας.",
-    "tailscaleDeviceAutoFill": "Η επιλογή μιας συσκευής θα συμπληρώσει αυτόματα τη διεύθυνση IP του κεντρικού υπολογιστή.",
-    "tailscaleAddHost": "Προσθήκη κεντρικού υπολογιστή",
-    "tailscaleCopyIp": "Αντιγραφή IP κλίμακας ουράς",
-    "tailscaleIpCopied": "Η διεύθυνση IP αντιγράφηκε",
-    "tailscaleIpCopyFailed": "Δεν ήταν δυνατή η αντιγραφή της IP",
-    "filterAuthTailscale": "Κλίμακα ουράς"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Απαιτείται έλεγχος ταυτότητας κλίμακας ουράς",
-    "tailscaleCheckDescription": "Το Tailscale SSH απαιτεί έναν επιπλέον έλεγχο. Επαληθεύστε τον κωδικό σας στο πρόγραμμα περιήγησής σας για να συνεχίσετε.",
-    "tailscaleCheckOpenBrowser": "Άνοιγμα προγράμματος περιήγησης για έλεγχο ταυτότητας",
-    "tailscaleCheckWaiting": "Αναμονή για έλεγχο ταυτότητας Tailscale...",
-    "tailscaleCheckTimeout": "Το χρονικό όριο ελέγχου ταυτότητας κλίμακας έληξε. Δοκιμάστε ξανά."
-  },
-  "manager": {
-    "title": "Κλίμακα ουράς",
-    "refresh": "Φρεσκάρω",
-    "retry": "Δοκιμάζω πάλι",
-    "sudoHint": "Ορίστε έναν κωδικό πρόσβασης sudo για αυτόν τον κεντρικό υπολογιστή για να επιτρέψετε ενέργειες με αυξημένα δικαιώματα.",
-    "noData": "Δεν υπάρχουν διαθέσιμα δεδομένα",
-    "filter": "Φίλτρο...",
-    "tsNotInstalled": "Το Tailscale δεν είναι εγκατεστημένο σε αυτόν τον κεντρικό υπολογιστή",
-    "tsRunning": "Τρέξιμο",
-    "tsStopped": "Σταμάτησε",
-    "tsEnable": "Συνδέω",
-    "tsDisable": "Αποσυνδέω",
-    "tsEnabling": "Σύνδεση με το Tailscale...",
-    "tsDisabling": "Αποσύνδεση από το Tailscale...",
-    "tsEnabled": "Συνδεδεμένο με κλίμακα ουράς",
-    "tsDisabled": "Η κλίμακα ουράς αποσυνδέθηκε",
-    "tsExitNode": "Κόμβος εξόδου",
-    "tsExitNodeActive": "Κόμβος εξόδου ενεργός"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Σύνδεση με τερματικό",
-        "usernameLabel": "Όνομα χρήστη"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Κλίμακα ουράς"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/es_ES.json b/plugins/tailscale/locales/translated/es_ES.json
deleted file mode 100644
index 1c93cc603..000000000
--- a/plugins/tailscale/locales/translated/es_ES.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Ver dispositivos de red de cola",
-      "description": "Vea los dispositivos en la red de cola conectada."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "API de Tailscale",
-      "devices": "Tailnet"
-    },
-    "apiKey": {
-      "label": "clave API",
-      "description": "Se utiliza para listar los dispositivos en su red de seguimiento. Funciona con una clave Tailscale o Headscale.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "URL base de la API",
-      "description": "Déjelo vacío para Tailscale. Configure esto para que apunte a una instancia de Headscale.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Lista de dispositivos",
-      "checking": "Comprobando la red de cola...",
-      "noKey": "Aún no se ha configurado ninguna clave API.",
-      "error": "No se pudo acceder a la red de cola. Compruebe la clave API.",
-      "count": "{{count}} dispositivo alcanzable",
-      "count_other": "{{count}} dispositivos alcanzables",
-      "refresh": "Controlar"
-    }
-  },
-  "nav": {
-    "tailscale": "Tailscale"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Debe tratarse de un usuario de Unix cuya identidad de Tailscale se concede en la ACL SSH de tailnet, no necesariamente como root.",
-    "tailscaleDeviceSelect": "Seleccionar dispositivo Tailscale",
-    "tailscaleDeviceSelectPlaceholder": "Seleccione un dispositivo...",
-    "tailscaleNoApiKey": "No se ha configurado ninguna clave de API de Tailscale. Añada una en Ajustes de administración para habilitar el descubrimiento de dispositivos.",
-    "tailscaleDocsLink": "Ver documentación",
-    "tailscaleLoadingDevices": "Cargando dispositivos...",
-    "tailscaleDeviceLoadFailed": "No se pudieron cargar los dispositivos Tailscale. Compruebe la URL de la API y la conexión de red.",
-    "tailscaleNoDevices": "No se han encontrado dispositivos en tu tailnet.",
-    "tailscaleDeviceAutoFill": "Al seleccionar un dispositivo se rellenará automáticamente la dirección IP del host.",
-    "tailscaleAddHost": "Agregar host",
-    "tailscaleCopyIp": "Copiar propiedad intelectual de Tailscale",
-    "tailscaleIpCopied": "IP copiada",
-    "tailscaleIpCopyFailed": "No se pudo copiar la IP",
-    "filterAuthTailscale": "Tailscale"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Se requiere autenticación de Tailscale.",
-    "tailscaleCheckDescription": "Tailscale SSH requiere una verificación adicional. Autentícate en tu navegador para continuar.",
-    "tailscaleCheckOpenBrowser": "Abrir navegador para autenticarse",
-    "tailscaleCheckWaiting": "Esperando la autenticación de Tailscale...",
-    "tailscaleCheckTimeout": "La autenticación de Tailscale ha caducado. Inténtalo de nuevo."
-  },
-  "manager": {
-    "title": "Tailscale",
-    "refresh": "Actualizar",
-    "retry": "Reintentar",
-    "sudoHint": "Establezca una contraseña de sudo para este host para permitir acciones con privilegios elevados.",
-    "noData": "Sin datos disponibles",
-    "filter": "Filtrar...",
-    "tsNotInstalled": "Tailscale no está instalado en este host",
-    "tsRunning": "En ejecución",
-    "tsStopped": "Detenido",
-    "tsEnable": "Conectar",
-    "tsDisable": "Desconectar",
-    "tsEnabling": "Conectando a Tailscale...",
-    "tsDisabling": "Desconectando de Tailscale...",
-    "tsEnabled": "Tailscale conectado",
-    "tsDisabled": "Tailscale desconectado",
-    "tsExitNode": "Nodo de salida",
-    "tsExitNodeActive": "Nodo de salida activo"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Conectar a Terminal",
-        "usernameLabel": "Nombre de usuario"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Tailscale"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/fi_FI.json b/plugins/tailscale/locales/translated/fi_FI.json
deleted file mode 100644
index 55e7add56..000000000
--- a/plugins/tailscale/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Näytä häntäverkon laitteet",
-      "description": "Katso laitteet yhdistetyssä häntäverkossa."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "Tailscale-API",
-      "devices": "Hännänverkko"
-    },
-    "apiKey": {
-      "label": "API-avain",
-      "description": "Käytetään laitettasi listaamaan häntäverkossasi. Toimii Tailscale- tai Headscale-näppäimellä.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "API-perus-URL",
-      "description": "Jätä tyhjäksi Tailscale-kohdassa. Aseta tämä osoittamaan Headscale-instanssiin.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Laiteluettelo",
-      "checking": "Hännänverkon tarkistus...",
-      "noKey": "API-avainta ei ole vielä asetettu.",
-      "error": "Hälytysverkkoon ei saatu yhteyttä. Tarkista API-avain.",
-      "count": "{{count}} laite tavoitettavissa",
-      "count_other": "{{count}} laitteita tavoitettavissa",
-      "refresh": "Tarkista"
-    }
-  },
-  "nav": {
-    "tailscale": "Tailscale"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Tämän on oltava Unix-käyttäjä, jolle Tailscale-identiteettisi on myönnetty tailnetin SSH ACL:ssä, ei välttämättä pääkäyttäjä.",
-    "tailscaleDeviceSelect": "Valitse Tailscale-laite",
-    "tailscaleDeviceSelectPlaceholder": "Valitse laite...",
-    "tailscaleNoApiKey": "Tailscale API -avainta ei ole määritetty. Lisää sellainen järjestelmänvalvojan asetuksissa, jotta laitteiden löytäminen on mahdollista.",
-    "tailscaleDocsLink": "Näytä dokumentit",
-    "tailscaleLoadingDevices": "Laitteita ladataan...",
-    "tailscaleDeviceLoadFailed": "Tailscale-laitteiden lataus epäonnistui. Tarkista API-URL-osoite ja verkkoyhteys.",
-    "tailscaleNoDevices": "Hätäverkostasi ei löytynyt laitteita.",
-    "tailscaleDeviceAutoFill": "Laitteen valinta täyttää isännän IP-osoitteen automaattisesti.",
-    "tailscaleAddHost": "Lisää isäntä",
-    "tailscaleCopyIp": "Kopioi Tailscale IP-osoite",
-    "tailscaleIpCopied": "IP-osoite kopioitu",
-    "tailscaleIpCopyFailed": "IP-osoitteen kopiointi epäonnistui",
-    "filterAuthTailscale": "Tailscale"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Tailscale-todennus vaaditaan",
-    "tailscaleCheckDescription": "Tailscale SSH vaatii lisätarkistuksen. Jatka tunnistautumalla selaimessasi.",
-    "tailscaleCheckOpenBrowser": "Avaa selain todennusta varten",
-    "tailscaleCheckWaiting": "Odotetaan Tailscale-todennusta...",
-    "tailscaleCheckTimeout": "Tailscale-todennus aikakatkaistiin. Yritä uudelleen."
-  },
-  "manager": {
-    "title": "Tailscale",
-    "refresh": "Päivitä",
-    "retry": "Yritä uudelleen",
-    "sudoHint": "Aseta tälle isännälle sudo-salasana, jotta voit sallia toiminnot laajentuneilla oikeuksilla.",
-    "noData": "Ei tietoja saatavilla",
-    "filter": "Suodattaa...",
-    "tsNotInstalled": "Tailscalea ei ole asennettu tälle isännälle",
-    "tsRunning": "Juoksu",
-    "tsStopped": "Pysähtynyt",
-    "tsEnable": "Yhdistä",
-    "tsDisable": "Katkaise yhteys",
-    "tsEnabling": "Yhdistetään Tailscaleen...",
-    "tsDisabling": "Yhteyden katkaiseminen Tailscaleen...",
-    "tsEnabled": "Tailscale yhdistetty",
-    "tsDisabled": "Tailscale irrotettu",
-    "tsExitNode": "Poistumissolmu",
-    "tsExitNodeActive": "Poistumissolmu aktiivinen"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Yhdistä terminaaliin",
-        "usernameLabel": "Käyttäjätunnus"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Tailscale"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/fr_FR.json b/plugins/tailscale/locales/translated/fr_FR.json
deleted file mode 100644
index 671748d21..000000000
--- a/plugins/tailscale/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Afficher les dispositifs tailnet",
-      "description": "Consultez les appareils connectés au réseau."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "API Tailscale",
-      "devices": "Tailnet"
-    },
-    "apiKey": {
-      "label": "Clé API",
-      "description": "Permet de lister les appareils connectés à votre réseau. Fonctionne avec une clé Tailscale ou Headscale.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "URL de base de l'API",
-      "description": "Laisser vide pour Tailscale. Configurez ce champ pour qu'il pointe vers une instance Headscale.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Liste des appareils",
-      "checking": "Vérification du filet arrière...",
-      "noKey": "Aucune clé API n'a encore été définie.",
-      "error": "Impossible de contacter le serveur de queue. Vérifiez la clé API.",
-      "count": "{{count}} appareil joignable",
-      "count_other": "{{count}} appareils joignables",
-      "refresh": "Vérifier"
-    }
-  },
-  "nav": {
-    "tailscale": "Tailscale"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Il doit s'agir d'un utilisateur Unix auquel votre identité Tailscale est attribuée dans la liste de contrôle d'accès SSH du réseau Tailnet, pas nécessairement root.",
-    "tailscaleDeviceSelect": "Sélectionner un appareil Tailscale",
-    "tailscaleDeviceSelectPlaceholder": "Sélectionner un appareil...",
-    "tailscaleNoApiKey": "Aucune clé API Tailscale configurée. Ajoutez-en une dans les paramètres d'administration pour activer la découverte d'appareils.",
-    "tailscaleDocsLink": "Voir la documentation",
-    "tailscaleLoadingDevices": "Chargement des appareils...",
-    "tailscaleDeviceLoadFailed": "Impossible de charger les périphériques Tailscale. Vérifiez l'URL de l'API et votre connexion réseau.",
-    "tailscaleNoDevices": "Aucun appareil trouvé dans votre tailnet.",
-    "tailscaleDeviceAutoFill": "La sélection d’un appareil remplira automatiquement l’adresse IP de l’hôte.",
-    "tailscaleAddHost": "Ajouter l'hôte",
-    "tailscaleCopyIp": "Copie de l'adresse IP de Tailscale",
-    "tailscaleIpCopied": "Adresse IP copiée",
-    "tailscaleIpCopyFailed": "Impossible de copier l'adresse IP",
-    "filterAuthTailscale": "Tailscale"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Authentification Tailscale requise",
-    "tailscaleCheckDescription": "Tailscale SSH requiert une vérification supplémentaire. Authentifiez-vous dans votre navigateur pour continuer.",
-    "tailscaleCheckOpenBrowser": "Ouvrir le navigateur pour s'authentifier",
-    "tailscaleCheckWaiting": "En attente de l'authentification Tailscale...",
-    "tailscaleCheckTimeout": "L'authentification Tailscale a expiré. Veuillez réessayer."
-  },
-  "manager": {
-    "title": "Tailscale",
-    "refresh": "Actualiser",
-    "retry": "Réessayer",
-    "sudoHint": "Définissez un mot de passe sudo pour cet hôte afin d'autoriser les actions avec privilèges élevés.",
-    "noData": "Aucune donnée disponible",
-    "filter": "Filtrer...",
-    "tsNotInstalled": "Tailscale n’est pas installé sur cet hôte",
-    "tsRunning": "En cours d’exécution",
-    "tsStopped": "Arrêté",
-    "tsEnable": "Se connecter",
-    "tsDisable": "Déconnecter",
-    "tsEnabling": "Connexion à Tailscale...",
-    "tsDisabling": "Déconnexion de Tailscale...",
-    "tsEnabled": "Tailscale connecté",
-    "tsDisabled": "Tailscale déconnecté",
-    "tsExitNode": "Nœud de sortie",
-    "tsExitNodeActive": "Nœud de sortie actif"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Se connecter au terminal",
-        "usernameLabel": "Nom d’utilisateur"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Tailscale"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/he_IL.json b/plugins/tailscale/locales/translated/he_IL.json
deleted file mode 100644
index 8c1ce7cbe..000000000
--- a/plugins/tailscale/locales/translated/he_IL.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "הצג התקני רשת אחורית",
-      "description": "ראה את המכשירים ברשת הזנב המחוברת."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "ממשק ה-API של Tailscale",
-      "devices": "טיילנט"
-    },
-    "apiKey": {
-      "label": "מפתח API",
-      "description": "משמש לרישום המכשירים ברשת הזנב שלך. עובד עם מפתח Tailscale או Headscale.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "כתובת אתר בסיסית של ה-API",
-      "description": "השאר ריק עבור Tailscale. הגדר זאת כך שיפנה אל מופע Headscale.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "רשימת המכשירים",
-      "checking": "בודקים את רשת הזנב...",
-      "noKey": "עדיין לא הוגדר מפתח API.",
-      "error": "לא ניתן היה להגיע לרשת הזנב. בדוק את מפתח ה-API.",
-      "count": "ניתן להגיע למכשיר {{count}}",
-      "count_other": "{{count}} מכשירים נגישים",
-      "refresh": "לִבדוֹק"
-    }
-  },
-  "nav": {
-    "tailscale": "קנה מידה זנב"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "זה חייב להיות משתמש יוניקס שזהות Tailscale שלך מוענקת לו ב-SSH ACL של tailnet, לאו דווקא root.",
-    "tailscaleDeviceSelect": "בחר מכשיר Tailscale",
-    "tailscaleDeviceSelectPlaceholder": "בחר מכשיר...",
-    "tailscaleNoApiKey": "לא הוגדר מפתח API של Tailscale. הוסף אחד בהגדרות הניהול כדי לאפשר גילוי מכשירים.",
-    "tailscaleDocsLink": "הצג מסמכים",
-    "tailscaleLoadingDevices": "טוען מכשירים...",
-    "tailscaleDeviceLoadFailed": "טעינת התקני Tailscale נכשלה. בדוק את כתובת ה-URL של ה-API ואת חיבור הרשת.",
-    "tailscaleNoDevices": "לא נמצאו מכשירים ברשת הזנב שלך.",
-    "tailscaleDeviceAutoFill": "בחירת מכשיר תמלא אוטומטית את כתובת ה-IP של המארח.",
-    "tailscaleAddHost": "הוסף מארח",
-    "tailscaleCopyIp": "העתקת כתובת IP של Tailscale",
-    "tailscaleIpCopied": "כתובת ה-IP הועתקה",
-    "tailscaleIpCopyFailed": "לא ניתן היה להעתיק את ה-IP",
-    "filterAuthTailscale": "קנה מידה זנב"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "נדרש אימות Tailscale",
-    "tailscaleCheckDescription": "‏SSH של Tailscale דורש בדיקה נוספת. יש לבצע אימות בדפדפן כדי להמשיך.",
-    "tailscaleCheckOpenBrowser": "פתח את הדפדפן כדי לאמת",
-    "tailscaleCheckWaiting": "ממתין לאימות Tailscale...",
-    "tailscaleCheckTimeout": "אימות Tailscale הסתיים. אנא נסה שוב."
-  },
-  "manager": {
-    "title": "קנה מידה זנב",
-    "refresh": "לְרַעֲנֵן",
-    "retry": "נסה שוב",
-    "sudoHint": "הגדר סיסמת sudo עבור מחשב מארח זה כדי לאפשר פעולות מוגברות.",
-    "noData": "אין נתונים זמינים",
-    "filter": "לְסַנֵן...",
-    "tsNotInstalled": "Tailscale אינו מותקן על מחשב אחסון זה",
-    "tsRunning": "רִיצָה",
-    "tsStopped": "נֶעצָר",
-    "tsEnable": "לְחַבֵּר",
-    "tsDisable": "לְנַתֵק",
-    "tsEnabling": "מתחבר ל-Tailscale...",
-    "tsDisabling": "מתנתק מ-Tailscale...",
-    "tsEnabled": "זנבסקאלה מחוברת",
-    "tsDisabled": "סולם הזנב מנותק",
-    "tsExitNode": "צומת יציאה",
-    "tsExitNodeActive": "צומת יציאה פעיל"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "התחברות לטרמינל",
-        "usernameLabel": "שם משתמש"
-      }
-    }
-  },
-  "plugin": {
-    "name": "קנה מידה זנב"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/hi_IN.json b/plugins/tailscale/locales/translated/hi_IN.json
deleted file mode 100644
index 835baf0f1..000000000
--- a/plugins/tailscale/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "टेलनेट उपकरणों को देखें",
-      "description": "कनेक्टेड टेलनेट पर मौजूद डिवाइस देखें।"
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "टेलस्केल एपीआई",
-      "devices": "टेलनेट"
-    },
-    "apiKey": {
-      "label": "एपीआई कुंजी",
-      "description": "इसका उपयोग टेलनेट पर मौजूद उपकरणों की सूची बनाने के लिए किया जाता है। यह टेलस्केल या हेडस्केल कुंजी के साथ काम करता है।",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "एपीआई आधारित यूआरएल",
-      "description": "टेलस्केल के लिए इसे खाली छोड़ दें। इसे हेडस्केल इंस्टेंस की ओर इंगित करने के लिए सेट करें।",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "डिवाइस सूची",
-      "checking": "टेलनेट की जाँच कर रहा हूँ...",
-      "noKey": "अभी तक कोई एपीआई कुंजी सेट नहीं की गई है।",
-      "error": "टेलनेट तक नहीं पहुंच सका। कृपया एपीआई कुंजी की जांच करें।",
-      "count": "{{count}} डिवाइस पहुंच योग्य है",
-      "count_other": "{{count}} पहुंच योग्य उपकरण",
-      "refresh": "जाँच करना"
-    }
-  },
-  "nav": {
-    "tailscale": "Tailscale"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "यह एक यूनिक्स उपयोगकर्ता होना चाहिए जिसे टेलनेट के एसएसएच एसीएल में आपकी टेलस्केल पहचान प्रदान की गई हो, जरूरी नहीं कि यह रूट हो।",
-    "tailscaleDeviceSelect": "Tailscale डिवाइस चुनें",
-    "tailscaleDeviceSelectPlaceholder": "एक डिवाइस चुनें...",
-    "tailscaleNoApiKey": "कोई Tailscale API कुंजी कॉन्फ़िगर नहीं की गई है। डिवाइस खोज सक्षम करने के लिए व्यवस्थापक सेटिंग में एक जोड़ें।",
-    "tailscaleDocsLink": "दस्तावेज़ देखें",
-    "tailscaleLoadingDevices": "उपकरण लोड हो रहे हैं...",
-    "tailscaleDeviceLoadFailed": "टेलस्केल डिवाइस लोड करने में विफल। कृपया एपीआई यूआरएल और नेटवर्क कनेक्शन की जांच करें।",
-    "tailscaleNoDevices": "आपके टेलनेट में कोई उपकरण नहीं मिला।",
-    "tailscaleDeviceAutoFill": "डिवाइस चुनने पर होस्ट IP पता स्वतः भर जाएगा।",
-    "tailscaleAddHost": "होस्ट जोड़ें",
-    "tailscaleCopyIp": "टेलस्केल आईपी कॉपी करें",
-    "tailscaleIpCopied": "आईपी कॉपी हो गया",
-    "tailscaleIpCopyFailed": "आईपी कॉपी नहीं हो सकी",
-    "filterAuthTailscale": "Tailscale"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "टेलस्केल प्रमाणीकरण आवश्यक है",
-    "tailscaleCheckDescription": "Tailscale SSH के लिए एक अतिरिक्त जांच की आवश्यकता है। जारी रखने के लिए अपने ब्राउज़र में प्रमाणीकरण करें।",
-    "tailscaleCheckOpenBrowser": "प्रमाणीकरण के लिए ब्राउज़र खोलें",
-    "tailscaleCheckWaiting": "टेलस्केल प्रमाणीकरण की प्रतीक्षा की जा रही है...",
-    "tailscaleCheckTimeout": "टेलस्केल प्रमाणीकरण का समय समाप्त हो गया। कृपया पुनः प्रयास करें।"
-  },
-  "manager": {
-    "title": "Tailscale",
-    "refresh": "रीफ़्रेश",
-    "retry": "पुनः प्रयास करें",
-    "sudoHint": "इस होस्ट के लिए एक सूडो पासवर्ड सेट करें ताकि उच्च स्तरीय कार्रवाई की अनुमति मिल सके।",
-    "noData": "कोई डेटा उपलब्ध नहीं",
-    "filter": "फ़िल्टर...",
-    "tsNotInstalled": "Tailscale इस होस्ट पर स्थापित नहीं है",
-    "tsRunning": "चालू",
-    "tsStopped": "बंद",
-    "tsEnable": "कनेक्ट",
-    "tsDisable": "डिस्कनेक्ट करें",
-    "tsEnabling": "Tailscale से कनेक्ट हो रहा है...",
-    "tsDisabling": "Tailscale से डिस्कनेक्ट हो रहा है...",
-    "tsEnabled": "Tailscale कनेक्टेड",
-    "tsDisabled": "Tailscale डिस्कनेक्टेड",
-    "tsExitNode": "एक्जिट नोड",
-    "tsExitNodeActive": "एक्जिट नोड सक्रिय"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "टर्मिनल से कनेक्ट करें",
-        "usernameLabel": "उपयोगकर्ता नाम"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Tailscale"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/hu_HU.json b/plugins/tailscale/locales/translated/hu_HU.json
deleted file mode 100644
index 3e2e381b3..000000000
--- a/plugins/tailscale/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Tailnet eszközök megtekintése",
-      "description": "Tekintse meg a csatlakoztatott hátsó hálózaton lévő eszközöket."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "Tailscale API",
-      "devices": "Farokháló"
-    },
-    "apiKey": {
-      "label": "API-kulcs",
-      "description": "A farokhálózaton lévő eszközök listázására szolgál. Tailscale vagy Headscale kulccsal működik.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "API alap URL",
-      "description": "Tailscale esetén hagyja üresen. Állítsa be úgy, hogy egy Headscale példányra mutasson.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Eszközlista",
-      "checking": "A farokháló ellenőrzése...",
-      "noKey": "Még nincs beállítva API-kulcs.",
-      "error": "Nem sikerült elérni a farokhálózatot. Ellenőrizze az API-kulcsot.",
-      "count": "{{count}} eszköz elérhető",
-      "count_other": "{{count}} elérhető eszközök",
-      "refresh": "Ellenőrzés"
-    }
-  },
-  "nav": {
-    "tailscale": "Farokskála"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Ennek Unix felhasználónak kell lennie, akinek a Tailscale identitását a tailnet SSH ACL-jében adták meg, nem feltétlenül root felhasználónak.",
-    "tailscaleDeviceSelect": "Tailscale eszköz kiválasztása",
-    "tailscaleDeviceSelectPlaceholder": "Válasszon egy eszközt...",
-    "tailscaleNoApiKey": "Nincs konfigurálva Tailscale API-kulcs. Adjon hozzá egyet az adminisztrátori beállításokban az eszközfelderítés engedélyezéséhez.",
-    "tailscaleDocsLink": "Dokumentumok megtekintése",
-    "tailscaleLoadingDevices": "Eszközök betöltése...",
-    "tailscaleDeviceLoadFailed": "Nem sikerült betölteni a Tailscale eszközöket. Ellenőrizze az API URL-t és a hálózati kapcsolatot.",
-    "tailscaleNoDevices": "Nem találhatók eszközök a hátsó hálózatban.",
-    "tailscaleDeviceAutoFill": "Egy eszköz kiválasztása automatikusan kitölti a gazdagép IP-címét.",
-    "tailscaleAddHost": "Gazdagép hozzáadása",
-    "tailscaleCopyIp": "Tailscale IP másolása",
-    "tailscaleIpCopied": "IP-cím lemásolva",
-    "tailscaleIpCopyFailed": "Nem sikerült másolni az IP-címet",
-    "filterAuthTailscale": "Farokskála"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Tailscale hitelesítés szükséges",
-    "tailscaleCheckDescription": "A Tailscale SSH további ellenőrzést igényel. A folytatáshoz hitelesítse magát a böngészőjében.",
-    "tailscaleCheckOpenBrowser": "Böngésző megnyitása a hitelesítéshez",
-    "tailscaleCheckWaiting": "Tailscale hitelesítésre várunk...",
-    "tailscaleCheckTimeout": "A farokskálázási hitelesítés időtúllépést okozott. Próbálja újra."
-  },
-  "manager": {
-    "title": "Farokskála",
-    "refresh": "Frissítés",
-    "retry": "Újrapróbálkozás",
-    "sudoHint": "Állítson be egy sudo jelszót ehhez a gazdagéphez a magasabb szintű műveletek engedélyezéséhez.",
-    "noData": "Nincsenek elérhető adatok",
-    "filter": "Szűrő...",
-    "tsNotInstalled": "A Tailscale nincs telepítve erre a gazdagépre",
-    "tsRunning": "Futás",
-    "tsStopped": "Leállítva",
-    "tsEnable": "Csatlakozás",
-    "tsDisable": "Leválasztás",
-    "tsEnabling": "Kapcsolódás a Tailscale-hez...",
-    "tsDisabling": "Lecsatlakozás a Tailscale-ről...",
-    "tsEnabled": "Farokméret csatlakoztatva",
-    "tsDisabled": "Farokváz leválasztva",
-    "tsExitNode": "Kilépési csomópont",
-    "tsExitNodeActive": "Kilépési csomópont aktív"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Csatlakozás a terminálhoz",
-        "usernameLabel": "Felhasználónév"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Farokskála"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/id_ID.json b/plugins/tailscale/locales/translated/id_ID.json
deleted file mode 100644
index 72fbee5c0..000000000
--- a/plugins/tailscale/locales/translated/id_ID.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Lihat perangkat tailnet.",
-      "description": "Lihat perangkat-perangkat yang terhubung ke tailnet."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "API Tailscale",
-      "devices": "Jaring ekor"
-    },
-    "apiKey": {
-      "label": "Kunci API",
-      "description": "Digunakan untuk menampilkan daftar perangkat pada tailnet Anda. Bekerja dengan tombol Tailscale atau Headscale.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "URL dasar API",
-      "description": "Biarkan Tailscale kosong. Atur ini agar mengarah ke instance Headscale.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Daftar perangkat",
-      "checking": "Memeriksa jaring ekor...",
-      "noKey": "Kunci API belum diatur.",
-      "error": "Tidak dapat terhubung ke tailnet. Periksa kunci API.",
-      "count": "{{count}} perangkat dapat dijangkau",
-      "count_other": "{{count}} perangkat yang dapat dijangkau",
-      "refresh": "Memeriksa"
-    }
-  },
-  "nav": {
-    "tailscale": "Skala ekor"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Ini harus berupa pengguna Unix yang identitas Tailscale Anda diberikan dalam ACL SSH tailnet, tidak harus root.",
-    "tailscaleDeviceSelect": "Pilih perangkat Tailscale",
-    "tailscaleDeviceSelectPlaceholder": "Pilih perangkat...",
-    "tailscaleNoApiKey": "Belum ada kunci API Tailscale yang dikonfigurasi. Tambahkan satu di Pengaturan Admin untuk mengaktifkan penemuan perangkat.",
-    "tailscaleDocsLink": "Lihat dokumen",
-    "tailscaleLoadingDevices": "Memuat perangkat...",
-    "tailscaleDeviceLoadFailed": "Gagal memuat perangkat Tailscale. Periksa URL API dan koneksi jaringan.",
-    "tailscaleNoDevices": "Tidak ada perangkat yang terdeteksi di tailnet Anda.",
-    "tailscaleDeviceAutoFill": "Memilih perangkat akan secara otomatis mengisi alamat IP host.",
-    "tailscaleAddHost": "Tambahkan host",
-    "tailscaleCopyIp": "Salin IP Tailscale",
-    "tailscaleIpCopied": "IP disalin",
-    "tailscaleIpCopyFailed": "IP tidak dapat disalin",
-    "filterAuthTailscale": "Skala ekor"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Diperlukan Otentikasi Sisik Ekor",
-    "tailscaleCheckDescription": "Tailscale SSH memerlukan pemeriksaan tambahan. Lakukan otentikasi di browser Anda untuk melanjutkan.",
-    "tailscaleCheckOpenBrowser": "Buka Browser untuk Melakukan Otentikasi",
-    "tailscaleCheckWaiting": "Menunggu autentikasi Tailscale...",
-    "tailscaleCheckTimeout": "Autentikasi Tailscale habis waktu. Silakan coba lagi."
-  },
-  "manager": {
-    "title": "Skala ekor",
-    "refresh": "Menyegarkan",
-    "retry": "Mencoba kembali",
-    "sudoHint": "Tetapkan kata sandi sudo untuk host ini agar memungkinkan tindakan dengan hak akses administrator.",
-    "noData": "Tidak ada data yang tersedia",
-    "filter": "Menyaring...",
-    "tsNotInstalled": "Tailscale tidak terpasang pada host ini.",
-    "tsRunning": "Berlari",
-    "tsStopped": "Berhenti",
-    "tsEnable": "Menghubungkan",
-    "tsDisable": "Memutuskan",
-    "tsEnabling": "Menghubungkan ke Tailscale...",
-    "tsDisabling": "Memutus koneksi dari Tailscale...",
-    "tsEnabled": "Sisik ekor terhubung",
-    "tsDisabled": "Sisik ekor terputus",
-    "tsExitNode": "Node keluar",
-    "tsExitNodeActive": "Node keluar aktif"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Hubungkan ke Terminal",
-        "usernameLabel": "Nama pengguna"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Skala ekor"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/it_IT.json b/plugins/tailscale/locales/translated/it_IT.json
deleted file mode 100644
index 57eea6d81..000000000
--- a/plugins/tailscale/locales/translated/it_IT.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Visualizza i dispositivi tailnet",
-      "description": "Visualizza i dispositivi sulla tailnet connessa."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "API di Tailscale",
-      "devices": "Tailnet"
-    },
-    "apiKey": {
-      "label": "Chiave API",
-      "description": "Utilizzato per elencare i dispositivi presenti nella tua rete di coda. Funziona con una chiave Tailscale o Headscale.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "URL di base dell'API",
-      "description": "Lascia vuoto per Tailscale. Imposta questo campo in modo che punti a un'istanza di Headscale.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Elenco dei dispositivi",
-      "checking": "Controllo della rete di coda...",
-      "noKey": "Non è ancora stata impostata alcuna chiave API.",
-      "error": "Impossibile raggiungere la rete locale. Verificare la chiave API.",
-      "count": "{{count}} dispositivo raggiungibile",
-      "count_other": "{{count}} dispositivi raggiungibili",
-      "refresh": "Controllo"
-    }
-  },
-  "nav": {
-    "tailscale": "Tailscale"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Deve trattarsi di un utente Unix a cui è concessa l'identità Tailscale nell'ACL SSH di Tailnet, non necessariamente root.",
-    "tailscaleDeviceSelect": "Seleziona dispositivo Tailscale",
-    "tailscaleDeviceSelectPlaceholder": "Seleziona un dispositivo...",
-    "tailscaleNoApiKey": "Nessuna chiave API Tailscale configurata. Aggiungine una in Impostazioni amministratore per abilitare il rilevamento dispositivi.",
-    "tailscaleDocsLink": "Visualizza documentazione",
-    "tailscaleLoadingDevices": "Caricamento dispositivi...",
-    "tailscaleDeviceLoadFailed": "Impossibile caricare i dispositivi Tailscale. Verificare l'URL dell'API e la connessione di rete.",
-    "tailscaleNoDevices": "Nessun dispositivo trovato nel tuo tailnet.",
-    "tailscaleDeviceAutoFill": "Selezionando un dispositivo l'indirizzo IP dell'host verrà compilato automaticamente.",
-    "tailscaleAddHost": "Aggiungi host",
-    "tailscaleCopyIp": "Copia la proprietà intellettuale di Tailscale",
-    "tailscaleIpCopied": "IP copiato",
-    "tailscaleIpCopyFailed": "Impossibile copiare l'indirizzo IP",
-    "filterAuthTailscale": "Tailscale"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Autenticazione Tailscale richiesta",
-    "tailscaleCheckDescription": "Tailscale SSH richiede un controllo aggiuntivo. Autenticati nel tuo browser per continuare.",
-    "tailscaleCheckOpenBrowser": "Apri il browser per autenticarti",
-    "tailscaleCheckWaiting": "In attesa dell'autenticazione di Tailscale...",
-    "tailscaleCheckTimeout": "Autenticazione di Tailscale scaduta. Riprova."
-  },
-  "manager": {
-    "title": "Tailscale",
-    "refresh": "Aggiorna",
-    "retry": "Riprova",
-    "sudoHint": "Imposta una password sudo per questo host per consentire azioni con privilegi elevati.",
-    "noData": "Nessun dato disponibile",
-    "filter": "Filtra...",
-    "tsNotInstalled": "Tailscale non è installato su questo host",
-    "tsRunning": "In esecuzione",
-    "tsStopped": "Arrestato",
-    "tsEnable": "Connetti",
-    "tsDisable": "Disconnetti",
-    "tsEnabling": "Connessione a Tailscale in corso...",
-    "tsDisabling": "Disconnessione da Tailscale in corso...",
-    "tsEnabled": "Tailscale connesso",
-    "tsDisabled": "Tailscale disconnesso",
-    "tsExitNode": "Nodo di uscita",
-    "tsExitNodeActive": "Nodo di uscita attivo"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Connetti al terminale",
-        "usernameLabel": "Nome utente"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Tailscale"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/ja_JP.json b/plugins/tailscale/locales/translated/ja_JP.json
deleted file mode 100644
index 5137349da..000000000
--- a/plugins/tailscale/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "テールネットデバイスを表示する",
-      "description": "接続されているテールネット上のデバイスを確認してください。"
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "テールスケールAPI",
-      "devices": "テールネット"
-    },
-    "apiKey": {
-      "label": "APIキー",
-      "description": "テールネット上のデバイスを一覧表示するために使用します。TailscaleキーまたはHeadscaleキーと連携して動作します。",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "APIベースURL",
-      "description": "テールスケールの場合は空欄のままにしてください。ヘッドスケールインスタンスを指定する場合は、こちらを設定してください。",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "デバイスリスト",
-      "checking": "テールネットをチェック中...",
-      "noKey": "APIキーはまだ設定されていません。",
-      "error": "テールネットに接続できませんでした。APIキーを確認してください。",
-      "count": "{{count}} デバイスに到達可能",
-      "count_other": "{{count}} デバイスに到達可能",
-      "refresh": "チェック"
-    }
-  },
-  "nav": {
-    "tailscale": "Tailscale"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "これは、tailnetのSSH ACLでTailscaleのIDが付与されているUnixユーザーである必要があり、必ずしもrootである必要はありません。",
-    "tailscaleDeviceSelect": "Tailscaleデバイスを選択",
-    "tailscaleDeviceSelectPlaceholder": "デバイスを選択...",
-    "tailscaleNoApiKey": "Tailscale APIキーが設定されていません。デバイス検出を有効にするには、管理者設定で追加してください。",
-    "tailscaleDocsLink": "ドキュメントを表示",
-    "tailscaleLoadingDevices": "デバイスを読み込み中...",
-    "tailscaleDeviceLoadFailed": "Tailscaleデバイスの読み込みに失敗しました。API URLとネットワーク接続を確認してください。",
-    "tailscaleNoDevices": "テールネットにデバイスが見つかりません。",
-    "tailscaleDeviceAutoFill": "デバイスを選択するとホストIPアドレスが自動入力されます。",
-    "tailscaleAddHost": "ホストを追加",
-    "tailscaleCopyIp": "Tailscale IPをコピーする",
-    "tailscaleIpCopied": "IPアドレスがコピーされました",
-    "tailscaleIpCopyFailed": "IPアドレスをコピーできませんでした",
-    "filterAuthTailscale": "Tailscale"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "テールスケール認証が必要です",
-    "tailscaleCheckDescription": "TailscaleのSSH接続には追加の認証が必要です。ブラウザで認証を行ってから続行してください。",
-    "tailscaleCheckOpenBrowser": "ブラウザを開いて認証",
-    "tailscaleCheckWaiting": "Tailscaleの認証を待っています...",
-    "tailscaleCheckTimeout": "Tailscaleの認証がタイムアウトしました。もう一度お試しください。"
-  },
-  "manager": {
-    "title": "Tailscale",
-    "refresh": "再読み込み",
-    "retry": "再試行",
-    "sudoHint": "このホストに対してsudoパスワードを設定し、管理者権限での操作を許可してください。",
-    "noData": "利用可能なデータはありません",
-    "filter": "フィルター...",
-    "tsNotInstalled": "このホストにTailscaleがインストールされていません",
-    "tsRunning": "実行中",
-    "tsStopped": "停止中",
-    "tsEnable": "接続",
-    "tsDisable": "切断",
-    "tsEnabling": "Tailscaleに接続中...",
-    "tsDisabling": "Tailscaleから切断中...",
-    "tsEnabled": "Tailscale接続済み",
-    "tsDisabled": "Tailscale切断済み",
-    "tsExitNode": "Exitノード",
-    "tsExitNodeActive": "Exitノード有効"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "ターミナルに接続",
-        "usernameLabel": "ユーザー名"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Tailscale"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/ko_KR.json b/plugins/tailscale/locales/translated/ko_KR.json
deleted file mode 100644
index b5c79b077..000000000
--- a/plugins/tailscale/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "테일넷 장치 보기",
-      "description": "연결된 테일넷에서 장치를 확인하세요."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "테일스케일 API",
-      "devices": "테일넷"
-    },
-    "apiKey": {
-      "label": "API 키",
-      "description": "테일넷에 연결된 장치 목록을 표시하는 데 사용됩니다. Tailscale 또는 Headscale 키와 함께 작동합니다.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "API 기본 URL",
-      "description": "Tailscale을 사용하려면 비워 두십시오. Headscale 인스턴스를 가리키도록 설정하십시오.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "기기 목록",
-      "checking": "테일넷을 확인하는 중...",
-      "noKey": "아직 API 키가 설정되지 않았습니다.",
-      "error": "테일넷에 연결할 수 없습니다. API 키를 확인하세요.",
-      "count": "{{count}} 장치에 연결 가능",
-      "count_other": "{{count}} 기기 연결 가능",
-      "refresh": "확인하다"
-    }
-  },
-  "nav": {
-    "tailscale": "Tailscale"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "이 값은 Tailscale ID가 Tailnet의 SSH ACL에 부여된 Unix 사용자여야 하며, 반드시 root일 필요는 없습니다.",
-    "tailscaleDeviceSelect": "Tailscale 기기 선택",
-    "tailscaleDeviceSelectPlaceholder": "기기 선택...",
-    "tailscaleNoApiKey": "Tailscale API 키가 구성되지 않았습니다. 기기 검색을 활성화하려면 관리자 설정에서 추가하세요.",
-    "tailscaleDocsLink": "문서 보기",
-    "tailscaleLoadingDevices": "장치를 불러오는 중...",
-    "tailscaleDeviceLoadFailed": "Tailscale 장치를 불러오는 데 실패했습니다. API URL과 네트워크 연결을 확인하세요.",
-    "tailscaleNoDevices": "테일넷에서 장치를 찾을 수 없습니다.",
-    "tailscaleDeviceAutoFill": "장치를 선택하면 호스트 IP 주소가 자동으로 채워집니다.",
-    "tailscaleAddHost": "호스트 추가",
-    "tailscaleCopyIp": "Tailscale IP 복사",
-    "tailscaleIpCopied": "IP 복사됨",
-    "tailscaleIpCopyFailed": "IP 주소를 복사할 수 없습니다.",
-    "filterAuthTailscale": "Tailscale"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Tailscale 인증이 필요합니다.",
-    "tailscaleCheckDescription": "Tailscale SSH는 추가 인증이 필요합니다. 계속하려면 브라우저에서 인증하십시오.",
-    "tailscaleCheckOpenBrowser": "브라우저로 인증하기",
-    "tailscaleCheckWaiting": "Tailscale 인증을 기다리는 중...",
-    "tailscaleCheckTimeout": "Tailscale 인증 시간이 초과되었습니다. 다시 시도해 주세요."
-  },
-  "manager": {
-    "title": "Tailscale",
-    "refresh": "새로 고침",
-    "retry": "재시도",
-    "sudoHint": "관리자 권한으로 작업을 수행할 수 있도록 이 호스트에 sudo 암호를 설정하십시오.",
-    "noData": "데이터 없음",
-    "filter": "필터...",
-    "tsNotInstalled": "이 호스트에 Tailscale이 설치되어 있지 않습니다",
-    "tsRunning": "실행 중",
-    "tsStopped": "중지됨",
-    "tsEnable": "연결",
-    "tsDisable": "연결 끊기",
-    "tsEnabling": "Tailscale에 연결 중...",
-    "tsDisabling": "Tailscale 연결 해제 중...",
-    "tsEnabled": "Tailscale 연결됨",
-    "tsDisabled": "Tailscale 연결 해제됨",
-    "tsExitNode": "출구 노드",
-    "tsExitNodeActive": "출구 노드 활성"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "터미널에 연결",
-        "usernameLabel": "사용자 이름"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Tailscale"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/nl_NL.json b/plugins/tailscale/locales/translated/nl_NL.json
deleted file mode 100644
index 2975cda53..000000000
--- a/plugins/tailscale/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Bekijk tailnet-apparaten",
-      "description": "Bekijk de apparaten op het aangesloten netwerk."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "Tailscale API",
-      "devices": "Tailnet"
-    },
-    "apiKey": {
-      "label": "API-sleutel",
-      "description": "Wordt gebruikt om de apparaten op uw tailnet weer te geven. Werkt met een Tailscale- of Headscale-sleutel.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "API-basis-URL",
-      "description": "Laat dit veld leeg voor Tailscale. Stel dit in om naar een Headscale-instantie te verwijzen.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Apparatenlijst",
-      "checking": "Het staartnet controleren...",
-      "noKey": "Er is nog geen API-sleutel ingesteld.",
-      "error": "Kon geen verbinding maken met het tailnet. Controleer de API-sleutel.",
-      "count": "{{count}} apparaat bereikbaar",
-      "count_other": "{{count}} apparaten bereikbaar",
-      "refresh": "Rekening"
-    }
-  },
-  "nav": {
-    "tailscale": "Staartschaal"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Dit moet een Unix-gebruiker zijn die aan uw Tailscale-identiteit is toegekend in de SSH-toegangsregel van het tailnet, niet per se root.",
-    "tailscaleDeviceSelect": "Selecteer het Tailscale-apparaat",
-    "tailscaleDeviceSelectPlaceholder": "Selecteer een apparaat...",
-    "tailscaleNoApiKey": "Er is geen Tailscale API-sleutel geconfigureerd. Voeg er een toe in de beheerdersinstellingen om apparaatdetectie in te schakelen.",
-    "tailscaleDocsLink": "Documenten bekijken",
-    "tailscaleLoadingDevices": "Apparaten laden...",
-    "tailscaleDeviceLoadFailed": "Het laden van Tailscale-apparaten is mislukt. Controleer de API-URL en de netwerkverbinding.",
-    "tailscaleNoDevices": "Geen apparaten gevonden in uw achternet.",
-    "tailscaleDeviceAutoFill": "Als je een apparaat selecteert, wordt het IP-adres van de host automatisch ingevuld.",
-    "tailscaleAddHost": "Voeg een host toe",
-    "tailscaleCopyIp": "Kopieer het Tailscale IP-adres",
-    "tailscaleIpCopied": "IP-adres gekopieerd",
-    "tailscaleIpCopyFailed": "Het IP-adres kon niet worden gekopieerd.",
-    "filterAuthTailscale": "Staartschaal"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Tailscale-authenticatie vereist",
-    "tailscaleCheckDescription": "Tailscale SSH vereist een extra controle. Authenticeer in uw browser om verder te gaan.",
-    "tailscaleCheckOpenBrowser": "Open de browser om te authenticeren.",
-    "tailscaleCheckWaiting": "Wachten op Tailscale-authenticatie...",
-    "tailscaleCheckTimeout": "De authenticatie bij Tailscale is mislukt vanwege een time-out. Probeer het opnieuw."
-  },
-  "manager": {
-    "title": "Staartschaal",
-    "refresh": "Vernieuwen",
-    "retry": "Opnieuw proberen",
-    "sudoHint": "Stel een sudo-wachtwoord in voor deze host om acties met verhoogde bevoegdheden toe te staan.",
-    "noData": "Geen gegevens beschikbaar",
-    "filter": "Filter...",
-    "tsNotInstalled": "Tailscale is niet geïnstalleerd op deze host.",
-    "tsRunning": "Rennen",
-    "tsStopped": "Gestopt",
-    "tsEnable": "Verbinden",
-    "tsDisable": "Verbinding verbreken",
-    "tsEnabling": "Verbinding maken met Tailscale...",
-    "tsDisabling": "Verbinding met Tailscale verbreken...",
-    "tsEnabled": "Aangesloten staartschaal",
-    "tsDisabled": "Staartschaal losgekoppeld",
-    "tsExitNode": "Uitgangsknooppunt",
-    "tsExitNodeActive": "Uitgangsknooppunt actief"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Verbinden met de terminal",
-        "usernameLabel": "Gebruikersnaam"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Staartschaal"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/no_NO.json b/plugins/tailscale/locales/translated/no_NO.json
deleted file mode 100644
index 13963e56a..000000000
--- a/plugins/tailscale/locales/translated/no_NO.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Vis halenettenheter",
-      "description": "Se enhetene på det tilkoblede halenettet."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "Tailscale API",
-      "devices": "Halenett"
-    },
-    "apiKey": {
-      "label": "API-nøkkel",
-      "description": "Brukes til å liste opp enhetene på tailnet-en din. Fungerer med en Tailscale- eller Headscale-nøkkel.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "API-basis-URL",
-      "description": "La stå tomt for Tailscale. Sett dette til å peke mot en Headscale-instans.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Enhetsliste",
-      "checking": "Sjekker baknettet...",
-      "noKey": "Ingen API-nøkkel angitt ennå.",
-      "error": "Kunne ikke nå tailnet. Sjekk API-nøkkelen.",
-      "count": "{{count}} enhet tilgjengelig",
-      "count_other": "{{count}} enheter tilgjengelige",
-      "refresh": "Sjekke"
-    }
-  },
-  "nav": {
-    "tailscale": "Haleskala"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Dette må være en Unix-bruker som Tailscale-identiteten din er gitt i tailnets SSH ACL, ikke nødvendigvis root.",
-    "tailscaleDeviceSelect": "Velg Tailscale-enhet",
-    "tailscaleDeviceSelectPlaceholder": "Velg en enhet...",
-    "tailscaleNoApiKey": "Ingen Tailscale API-nøkkel konfigurert. Legg til en i administratorinnstillingene for å aktivere enhetsgjenkjenning.",
-    "tailscaleDocsLink": "Vis dokumenter",
-    "tailscaleLoadingDevices": "Laster inn enheter ...",
-    "tailscaleDeviceLoadFailed": "Kunne ikke laste inn Tailscale-enheter. Sjekk API-URL-en og nettverkstilkoblingen.",
-    "tailscaleNoDevices": "Ingen enheter funnet i halenettverket ditt.",
-    "tailscaleDeviceAutoFill": "Hvis du velger en enhet, fylles verts-IP-adressen automatisk ut.",
-    "tailscaleAddHost": "Legg til vert",
-    "tailscaleCopyIp": "Kopier Tailscale-IP",
-    "tailscaleIpCopied": "IP-adressen er kopiert",
-    "tailscaleIpCopyFailed": "Kunne ikke kopiere IP-adressen",
-    "filterAuthTailscale": "Haleskala"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Tailscale-autentisering kreves",
-    "tailscaleCheckDescription": "Tailscale SSH krever en ekstra sjekk. Autentiser i nettleseren din for å fortsette.",
-    "tailscaleCheckOpenBrowser": "Åpne nettleseren for å autentisere",
-    "tailscaleCheckWaiting": "Venter på Tailscale-autentisering...",
-    "tailscaleCheckTimeout": "Tailscale-autentiseringen er tidsavbrutt. Prøv på nytt."
-  },
-  "manager": {
-    "title": "Haleskala",
-    "refresh": "Oppdater",
-    "retry": "Prøv igjen",
-    "sudoHint": "Angi et sudo-passord for denne verten for å tillate forhøyede handlinger.",
-    "noData": "Ingen data tilgjengelig",
-    "filter": "Filter...",
-    "tsNotInstalled": "Tailscale er ikke installert på denne verten",
-    "tsRunning": "Kjører",
-    "tsStopped": "Stoppet",
-    "tsEnable": "Koble til",
-    "tsDisable": "Koble fra",
-    "tsEnabling": "Kobler til Tailscale...",
-    "tsDisabling": "Kobler fra Tailscale...",
-    "tsEnabled": "Haleskala tilkoblet",
-    "tsDisabled": "Haleskala frakoblet",
-    "tsExitNode": "Utgangsnode",
-    "tsExitNodeActive": "Avslutt node aktiv"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Koble til terminalen",
-        "usernameLabel": "Brukernavn"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Haleskala"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/pl_PL.json b/plugins/tailscale/locales/translated/pl_PL.json
deleted file mode 100644
index 0e7de939c..000000000
--- a/plugins/tailscale/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Wyświetl urządzenia sieci ogonowej",
-      "description": "Zobacz urządzenia na podłączonej sieci tailnet."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "API Tailscale",
-      "devices": "Siatka ogonowa"
-    },
-    "apiKey": {
-      "label": "Klucz API",
-      "description": "Służy do wyświetlania listy urządzeń w sieci Tailnet. Działa z kluczem Tailscale lub Headscale.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "Podstawowy adres URL API",
-      "description": "Pozostaw puste dla Tailscale. Ustaw to tak, aby wskazywało na instancję Headscale.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Lista urządzeń",
-      "checking": "Sprawdzanie siatki ogonowej...",
-      "noKey": "Klucz API nie został jeszcze ustawiony.",
-      "error": "Nie udało się połączyć z siecią ogonową. Sprawdź klucz API.",
-      "count": "{{count}} urządzenie jest dostępne",
-      "count_other": "{{count}} urządzeń dostępnych",
-      "refresh": "Sprawdzać"
-    }
-  },
-  "nav": {
-    "tailscale": "Tailscale"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Musi to być użytkownik systemu Unix, któremu Twoja tożsamość Tailscale została przyznana w ACL SSH sieci tailnet, niekoniecznie root.",
-    "tailscaleDeviceSelect": "Wybierz urządzenie Tailscale",
-    "tailscaleDeviceSelectPlaceholder": "Wybierz urządzenie...",
-    "tailscaleNoApiKey": "Nie skonfigurowano klucza API Tailscale. Dodaj go w Ustawieniach administratora, aby włączyć wykrywanie urządzeń.",
-    "tailscaleDocsLink": "Zobacz dokumentację",
-    "tailscaleLoadingDevices": "Ładowanie urządzeń...",
-    "tailscaleDeviceLoadFailed": "Nie udało się załadować urządzeń Tailscale. Sprawdź adres URL API i połączenie sieciowe.",
-    "tailscaleNoDevices": "Nie znaleziono urządzeń w Twojej sieci tailnet.",
-    "tailscaleDeviceAutoFill": "Wybranie urządzenia spowoduje automatyczne wypełnienie adresu IP hosta.",
-    "tailscaleAddHost": "Dodaj hosta",
-    "tailscaleCopyIp": "Kopiuj Tailscale IP",
-    "tailscaleIpCopied": "Skopiowano adres IP",
-    "tailscaleIpCopyFailed": "Nie udało się skopiować adresu IP",
-    "filterAuthTailscale": "Tailscale"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Wymagane uwierzytelnienie Tailscale",
-    "tailscaleCheckDescription": "Tailscale SSH wymaga dodatkowej weryfikacji. Uwierzytelnij się w przeglądarce, aby kontynuować.",
-    "tailscaleCheckOpenBrowser": "Otwórz przeglądarkę, aby uwierzytelnić",
-    "tailscaleCheckWaiting": "Oczekiwanie na uwierzytelnienie Tailscale...",
-    "tailscaleCheckTimeout": "Upłynął limit czasu uwierzytelniania Tailscale. Spróbuj ponownie."
-  },
-  "manager": {
-    "title": "Tailscale",
-    "refresh": "Odśwież",
-    "retry": "Ponów",
-    "sudoHint": "Ustaw hasło sudo dla tego hosta, aby umożliwić wykonywanie podwyższonych uprawnień.",
-    "noData": "Brak dostępnych danych",
-    "filter": "Filtr...",
-    "tsNotInstalled": "Tailscale nie jest zainstalowany na tym hoście",
-    "tsRunning": "Działa",
-    "tsStopped": "Zatrzymany",
-    "tsEnable": "Połączenie",
-    "tsDisable": "Odłącz",
-    "tsEnabling": "Łączenie z Tailscale...",
-    "tsDisabling": "Rozłączanie z Tailscale...",
-    "tsEnabled": "Tailscale połączony",
-    "tsDisabled": "Tailscale rozłączony",
-    "tsExitNode": "Węzeł wyjściowy",
-    "tsExitNodeActive": "Węzeł wyjściowy aktywny"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Połącz z terminalem",
-        "usernameLabel": "Nazwa użytkownika"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Tailscale"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/pt_BR.json b/plugins/tailscale/locales/translated/pt_BR.json
deleted file mode 100644
index d432c86a9..000000000
--- a/plugins/tailscale/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Visualizar dispositivos de rede de cauda",
-      "description": "Veja os dispositivos na rede de cauda conectada."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "API Tailscale",
-      "devices": "Rede de cauda"
-    },
-    "apiKey": {
-      "label": "Chave de API",
-      "description": "Utilizado para listar os dispositivos na sua rede de cauda. Funciona com uma chave Tailscale ou Headscale.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "URL base da API",
-      "description": "Deixe em branco para Tailscale. Defina isso para apontar para uma instância de Headscale.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Lista de dispositivos",
-      "checking": "Verificando a rede traseira...",
-      "noKey": "Nenhuma chave de API foi definida ainda.",
-      "error": "Não foi possível acessar a tailnet. Verifique a chave da API.",
-      "count": "{{count}} dispositivo acessível",
-      "count_other": "{{count}} dispositivos acessíveis",
-      "refresh": "Verificar"
-    }
-  },
-  "nav": {
-    "tailscale": "Escama da cauda"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Este deve ser um usuário Unix cuja identidade Tailscale é concedida na ACL SSH da tailnet, não necessariamente o usuário root.",
-    "tailscaleDeviceSelect": "Selecionar dispositivo Tailscale",
-    "tailscaleDeviceSelectPlaceholder": "Selecione um dispositivo...",
-    "tailscaleNoApiKey": "Nenhuma chave de API Tailscale configurada. Adicione uma nas configurações do Admin para habilitar a descoberta do dispositivo.",
-    "tailscaleDocsLink": "Documentação",
-    "tailscaleLoadingDevices": "Carregando dispositivos...",
-    "tailscaleDeviceLoadFailed": "Falha ao carregar os dispositivos Tailscale. Verifique o URL da API e a conexão de rede.",
-    "tailscaleNoDevices": "Nenhum dispositivo encontrado na sua rede tail.",
-    "tailscaleDeviceAutoFill": "Ao selecionar um dispositivo, o endereço IP do host será preenchido automaticamente.",
-    "tailscaleAddHost": "Adicionar host",
-    "tailscaleCopyIp": "Copiar IP da Tailscale",
-    "tailscaleIpCopied": "IP copiado",
-    "tailscaleIpCopyFailed": "Não foi possível copiar o endereço IP.",
-    "filterAuthTailscale": "Escama da cauda"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Autenticação Tailscale necessária",
-    "tailscaleCheckDescription": "O Tailscale SSH requer uma verificação adicional. Autentique-se no seu navegador para continuar.",
-    "tailscaleCheckOpenBrowser": "Abra o navegador para autenticar.",
-    "tailscaleCheckWaiting": "Aguardando autenticação do Tailscale...",
-    "tailscaleCheckTimeout": "A autenticação no Tailscale expirou. Tente novamente."
-  },
-  "manager": {
-    "title": "Escama da cauda",
-    "refresh": "Atualizar",
-    "retry": "Tentar novamente",
-    "sudoHint": "Defina uma senha sudo para este host para permitir ações com privilégios elevados.",
-    "noData": "Não há dados disponíveis.",
-    "filter": "Filtro...",
-    "tsNotInstalled": "O Tailscale não está instalado neste host.",
-    "tsRunning": "Correndo",
-    "tsStopped": "Parou",
-    "tsEnable": "Conectar",
-    "tsDisable": "Desconectar",
-    "tsEnabling": "Conectando-se à Tailscale...",
-    "tsDisabling": "Desconectando-se do Tailscale...",
-    "tsEnabled": "Escama de cauda conectada",
-    "tsDisabled": "Escama de cauda desconectada",
-    "tsExitNode": "Nó de saída",
-    "tsExitNodeActive": "Nó de saída ativo"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Conectar ao terminal",
-        "usernameLabel": "Nome de usuário"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Escama da cauda"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/pt_PT.json b/plugins/tailscale/locales/translated/pt_PT.json
deleted file mode 100644
index c0577084e..000000000
--- a/plugins/tailscale/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Visualizar dispositivos de rede de cauda",
-      "description": "Veja os dispositivos na rede de cauda ligada."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "API Tailscale",
-      "devices": "Rede de cauda"
-    },
-    "apiKey": {
-      "label": "Chave API",
-      "description": "Utilizado para listar os dispositivos na sua rede de cauda. Funciona com uma chave Tailscale ou Headscale.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "URL base da API",
-      "description": "Deixe em branco para Tailscale. Defina isto para apontar para uma instância de Headscale.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Lista de dispositivos",
-      "checking": "Verificação da rede traseira...",
-      "noKey": "Nenhuma chave API foi definida ainda.",
-      "error": "Não foi possível aceder à tailnet. Verifique a chave API.",
-      "count": "{{count}} dispositivo acessível",
-      "count_other": "{{count}} dispositivos acessíveis",
-      "refresh": "Verificação"
-    }
-  },
-  "nav": {
-    "tailscale": "Tailscale"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Este deve ser um utilizador Unix cuja identidade Tailscale é concedida na ACL SSH da tailnet, não necessariamente o utilizador root.",
-    "tailscaleDeviceSelect": "Selecionar dispositivo Tailscale",
-    "tailscaleDeviceSelectPlaceholder": "Selecionar um dispositivo...",
-    "tailscaleNoApiKey": "Nenhuma chave de API Tailscale configurada. Adicione uma nas Definições de Administrador para ativar a descoberta de dispositivos.",
-    "tailscaleDocsLink": "Ver documentação",
-    "tailscaleLoadingDevices": "A carregar dispositivos...",
-    "tailscaleDeviceLoadFailed": "Falha ao carregar os dispositivos Tailscale. Verifique o URL da API e a ligação de rede.",
-    "tailscaleNoDevices": "Nenhum dispositivo encontrado na sua tailnet.",
-    "tailscaleDeviceAutoFill": "Selecionar um dispositivo preencherá automaticamente o endereço IP do host.",
-    "tailscaleAddHost": "Adicionar host",
-    "tailscaleCopyIp": "Copiar IP da Tailscale",
-    "tailscaleIpCopied": "IP copiado",
-    "tailscaleIpCopyFailed": "Não foi possível copiar o endereço IP.",
-    "filterAuthTailscale": "Tailscale"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Autenticação Tailscale necessária",
-    "tailscaleCheckDescription": "O Tailscale SSH requer uma verificação adicional. Autentique-se no seu browser para continuar.",
-    "tailscaleCheckOpenBrowser": "Abrir navegador para autenticar",
-    "tailscaleCheckWaiting": "Aguarda-se autenticação do Tailscale...",
-    "tailscaleCheckTimeout": "A autenticação no Tailscale expirou. Tente novamente."
-  },
-  "manager": {
-    "title": "Tailscale",
-    "refresh": "Atualizar",
-    "retry": "Repetir",
-    "sudoHint": "Defina uma palavra-passe sudo para este host para permitir ações com privilégios elevados.",
-    "noData": "Sem dados disponíveis",
-    "filter": "Filtrar...",
-    "tsNotInstalled": "O Tailscale não está instalado neste host",
-    "tsRunning": "Em execução",
-    "tsStopped": "Parado",
-    "tsEnable": "Ligar",
-    "tsDisable": "Desligar",
-    "tsEnabling": "A ligar ao Tailscale...",
-    "tsDisabling": "A desligar do Tailscale...",
-    "tsEnabled": "Tailscale ligado",
-    "tsDisabled": "Tailscale desligado",
-    "tsExitNode": "Nó de saída",
-    "tsExitNodeActive": "Nó de saída ativo"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Ligar ao Terminal",
-        "usernameLabel": "Nome de utilizador"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Tailscale"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/ro_RO.json b/plugins/tailscale/locales/translated/ro_RO.json
deleted file mode 100644
index e21aa840f..000000000
--- a/plugins/tailscale/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Vizualizați dispozitivele tailnet",
-      "description": "Vedeți dispozitivele de pe rețeaua conectată."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "API la scară mică",
-      "devices": "Plasă de coadă"
-    },
-    "apiKey": {
-      "label": "Cheie API",
-      "description": "Folosit pentru a lista dispozitivele din rețeaua tailnet. Funcționează cu o tastă Tailscale sau Headscale.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "URL-ul de bază al API-ului",
-      "description": "Lăsați câmpul gol pentru Tailscale. Setați acest câmp să indice o instanță Headscale.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Listă de dispozitive",
-      "checking": "Verificarea plasei de coadă...",
-      "noKey": "Nu a fost setată încă nicio cheie API.",
-      "error": "Nu s-a putut accesa rețeaua de coardă. Verificați cheia API.",
-      "count": "{{count}} device reachable",
-      "count_other": "{{count}} dispozitive accesibile",
-      "refresh": "Verifica"
-    }
-  },
-  "nav": {
-    "tailscale": "Scară de coadă"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Acesta trebuie să fie un utilizator Unix căruia îi este acordată identitatea Tailscale în ACL-ul SSH al rețelei tailnet, nu neapărat root.",
-    "tailscaleDeviceSelect": "Selectați dispozitivul Tailscale",
-    "tailscaleDeviceSelectPlaceholder": "Selectați un dispozitiv...",
-    "tailscaleNoApiKey": "Nu este configurată nicio cheie API Tailscale. Adăugați una în Setările de administrare pentru a activa descoperirea dispozitivelor.",
-    "tailscaleDocsLink": "Vizualizați documentele",
-    "tailscaleLoadingDevices": "Se încarcă dispozitivele...",
-    "tailscaleDeviceLoadFailed": "Nu s-au putut încărca dispozitivele Tailscale. Verificați adresa URL API și conexiunea la rețea.",
-    "tailscaleNoDevices": "Nu s-au găsit dispozitive în rețeaua ta de coadă.",
-    "tailscaleDeviceAutoFill": "Selectarea unui dispozitiv va completa automat adresa IP a gazdei.",
-    "tailscaleAddHost": "Adăugați gazdă",
-    "tailscaleCopyIp": "Copiază IP-ul la scară mică",
-    "tailscaleIpCopied": "IP-ul a fost copiat",
-    "tailscaleIpCopyFailed": "Nu s-a putut copia adresa IP",
-    "filterAuthTailscale": "Scară de coadă"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Autentificare la scară mică necesară",
-    "tailscaleCheckDescription": "SSH-ul Tailscale necesită o verificare suplimentară. Autentificați-vă în browser pentru a continua.",
-    "tailscaleCheckOpenBrowser": "Deschideți browserul pentru autentificare",
-    "tailscaleCheckWaiting": "Se așteaptă autentificarea Tailscale...",
-    "tailscaleCheckTimeout": "Autentificarea la scară mică a expirat. Vă rugăm să încercați din nou."
-  },
-  "manager": {
-    "title": "Scară de coadă",
-    "refresh": "Reîmprospăta",
-    "retry": "Reîncercați",
-    "sudoHint": "Setați o parolă sudo pentru această gazdă pentru a permite acțiuni cu privilegii ridicate.",
-    "noData": "Nu sunt disponibile date",
-    "filter": "Filtra...",
-    "tsNotInstalled": "Tailscale nu este instalat pe această gazdă",
-    "tsRunning": "Funcţionare",
-    "tsStopped": "Oprit",
-    "tsEnable": "Conectează-te",
-    "tsDisable": "Deconecta",
-    "tsEnabling": "Conectare la Tailscale...",
-    "tsDisabling": "Deconectare de la Tailscale...",
-    "tsEnabled": "Scală de coadă conectată",
-    "tsDisabled": "Scală detașată",
-    "tsExitNode": "Nod de ieșire",
-    "tsExitNodeActive": "Nod de ieșire activ"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Conectați-vă la terminal",
-        "usernameLabel": "Nume de utilizator"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Scară de coadă"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/ru_RU.json b/plugins/tailscale/locales/translated/ru_RU.json
deleted file mode 100644
index 3b7d20037..000000000
--- a/plugins/tailscale/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Просмотреть устройства хвостовой сети",
-      "description": "Посмотрите на устройства в подключенной сети."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "API масштабирования хвоста",
-      "devices": "Хвостовая сеть"
-    },
-    "apiKey": {
-      "label": "ключ API",
-      "description": "Используется для отображения списка устройств в вашей сети. Работает с ключом Tailscale или Headscale.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "Базовый URL API",
-      "description": "Оставьте поле Tailscale пустым. Установите его так, чтобы оно указывало на экземпляр Headscale.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Список устройств",
-      "checking": "Проверка задней сетки...",
-      "noKey": "API-ключ пока не установлен.",
-      "error": "Не удалось подключиться к сети. Проверьте ключ API.",
-      "count": "{{count}} устройство доступно",
-      "count_other": "{{count}} доступных устройств",
-      "refresh": "Проверять"
-    }
-  },
-  "nav": {
-    "tailscale": "Tailscale"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Это должен быть пользователь Unix, которому предоставлена идентификация Tailscale в списке контроля доступа SSH сети TailNet, а не обязательно root.",
-    "tailscaleDeviceSelect": "Выберите устройство Tailscale",
-    "tailscaleDeviceSelectPlaceholder": "Выберите устройство...",
-    "tailscaleNoApiKey": "Ключ API Tailscale не настроен. Добавьте его в настройках администратора, чтобы включить обнаружение устройств.",
-    "tailscaleDocsLink": "Документация",
-    "tailscaleLoadingDevices": "Загрузка устройств...",
-    "tailscaleDeviceLoadFailed": "Не удалось загрузить устройства Tailscale. Проверьте URL-адрес API и сетевое соединение.",
-    "tailscaleNoDevices": "В вашем tailnet не найдено устройств.",
-    "tailscaleDeviceAutoFill": "При выборе устройства IP-адрес хоста будет заполнен автоматически.",
-    "tailscaleAddHost": "Добавить хост",
-    "tailscaleCopyIp": "Копировать IP-адрес хвостовой части",
-    "tailscaleIpCopied": "IP-адрес скопирован",
-    "tailscaleIpCopyFailed": "Не удалось скопировать IP-адрес.",
-    "filterAuthTailscale": "Tailscale"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Требуется аутентификация Tailscale",
-    "tailscaleCheckDescription": "Для работы Tailscale SSH требуется дополнительная проверка. Для продолжения выполните аутентификацию в браузере.",
-    "tailscaleCheckOpenBrowser": "Открыть браузер для аутентификации",
-    "tailscaleCheckWaiting": "Ожидание аутентификации Tailscale...",
-    "tailscaleCheckTimeout": "Время ожидания аутентификации Tailscale истекло. Пожалуйста, попробуйте еще раз."
-  },
-  "manager": {
-    "title": "Tailscale",
-    "refresh": "Обновить",
-    "retry": "Повторить",
-    "sudoHint": "Установите пароль sudo для этого хоста, чтобы разрешить действия с повышенными правами.",
-    "noData": "Нет данных",
-    "filter": "Фильтр...",
-    "tsNotInstalled": "Tailscale не установлен на этом хосте",
-    "tsRunning": "Запущен",
-    "tsStopped": "Остановлен",
-    "tsEnable": "Соединить",
-    "tsDisable": "Отключить",
-    "tsEnabling": "Подключение к Tailscale...",
-    "tsDisabling": "Отключение от Tailscale...",
-    "tsEnabled": "Tailscale подключён",
-    "tsDisabled": "Tailscale отключён",
-    "tsExitNode": "Выходной узел",
-    "tsExitNodeActive": "Выходной узел активен"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Подключиться к терминалу",
-        "usernameLabel": "Имя пользователя"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Tailscale"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/sr_SP.json b/plugins/tailscale/locales/translated/sr_SP.json
deleted file mode 100644
index f2081d4e2..000000000
--- a/plugins/tailscale/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Погледајте уређаје са задње мреже",
-      "description": "Погледајте уређаје на повезаној задњој мрежи."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "API за таилскејл",
-      "devices": "Мрежа за реп"
-    },
-    "apiKey": {
-      "label": "API кључ",
-      "description": "Користи се за навођење уређаја на вашој мрежи. Ради са кључем Tailscale или Headscale.",
-      "placeholder": "тскеј-апи-... / хскеј-апи-..."
-    },
-    "apiBaseUrl": {
-      "label": "Основни URL API-ја",
-      "description": "Оставите празно за Tailscale. Поставите ово да показује на инстанцу Headscale-а.",
-      "placeholder": "хттпс://апи.таилсцале.цом/апи/в2"
-    },
-    "devices": {
-      "label": "Листа уређаја",
-      "checking": "Провера мреже на задњем делу...",
-      "noKey": "Још увек није подешен API кључ.",
-      "error": "Није могуће доћи до мреже Tailnet. Проверите API кључ.",
-      "count": "{{count}} уређај је доступан",
-      "count_other": "{{count}} уређаја доступних",
-      "refresh": "Провери"
-    }
-  },
-  "nav": {
-    "tailscale": "Репна скала"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Ово мора бити Unix корисник чији је идентитет на Tailscale-у додељен у SSH ACL-у Tailnet-а, не нужно root.",
-    "tailscaleDeviceSelect": "Изаберите уређај Tailscale",
-    "tailscaleDeviceSelectPlaceholder": "Изаберите уређај...",
-    "tailscaleNoApiKey": "Није конфигурисан Tailscale API кључ. Додајте га у администраторским подешавањима да бисте омогућили откривање уређаја.",
-    "tailscaleDocsLink": "Прикажи документе",
-    "tailscaleLoadingDevices": "Учитавање уређаја...",
-    "tailscaleDeviceLoadFailed": "Учитавање Tailscale уређаја није успело. Проверите API URL и мрежну везу.",
-    "tailscaleNoDevices": "Није пронађен ниједан уређај у вашој мрежи.",
-    "tailscaleDeviceAutoFill": "Избором уређаја ће се аутоматски попунити ИП адреса хоста.",
-    "tailscaleAddHost": "Додај хоста",
-    "tailscaleCopyIp": "Копирај ИП адресу Tailscale-а",
-    "tailscaleIpCopied": "ИП адреса је копирана",
-    "tailscaleIpCopyFailed": "Није могуће копирати ИП адресу",
-    "filterAuthTailscale": "Репна скала"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Потребна је аутентификација на таилскалу",
-    "tailscaleCheckDescription": "Tailscale SSH захтева додатну проверу. Аутентификујте се у прегледачу да бисте наставили.",
-    "tailscaleCheckOpenBrowser": "Отворите прегледач за аутентификацију",
-    "tailscaleCheckWaiting": "Чекање на Tailscale аутентификацију...",
-    "tailscaleCheckTimeout": "Временско ограничење за аутентификацију Tailscale-а је истекло. Молимо покушајте поново."
-  },
-  "manager": {
-    "title": "Репна скала",
-    "refresh": "Освежи",
-    "retry": "Покушај поново",
-    "sudoHint": "Поставите sudo лозинку за овај хост да бисте омогућили акције са повишеним привилегијама.",
-    "noData": "Нема доступних података",
-    "filter": "Филтер...",
-    "tsNotInstalled": "Tailscale није инсталиран на овом хосту",
-    "tsRunning": "Трчање",
-    "tsStopped": "Заустављено",
-    "tsEnable": "Повежи се",
-    "tsDisable": "Прекини везу",
-    "tsEnabling": "Повезивање са Tailscale-ом...",
-    "tsDisabling": "Искључивање из мреже Tailscale...",
-    "tsEnabled": "Повезана је задња скала",
-    "tsDisabled": "Реалскале су искључене",
-    "tsExitNode": "Излазни чвор",
-    "tsExitNodeActive": "Излазни чвор је активан"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Повежи се са терминалом",
-        "usernameLabel": "Корисничко име"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Репна скала"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/sv_SE.json b/plugins/tailscale/locales/translated/sv_SE.json
deleted file mode 100644
index ae01c7128..000000000
--- a/plugins/tailscale/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Visa tailnet-enheter",
-      "description": "Se enheterna på det anslutna tailnätet."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "Tailscale API",
-      "devices": "Tailnet"
-    },
-    "apiKey": {
-      "label": "API-nyckel",
-      "description": "Används för att lista enheterna på ditt tailnet. Fungerar med en Tailscale- eller Headscale-nyckel.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "API-bas-URL",
-      "description": "Lämna tomt för Tailscale. Ställ in detta för att peka på en Headscale-instans.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Enhetslista",
-      "checking": "Kontrollerar baknätet...",
-      "noKey": "Ingen API-nyckel är ännu angiven.",
-      "error": "Kunde inte nå tailnet. Kontrollera API-nyckeln.",
-      "count": "{{count}} enhet nåbar",
-      "count_other": "{{count}} enheter nåbara",
-      "refresh": "Kontrollera"
-    }
-  },
-  "nav": {
-    "tailscale": "Svansskala"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Detta måste vara en Unix-användare som din Tailscale-identitet är beviljad i tailnätets SSH ACL, inte nödvändigtvis root.",
-    "tailscaleDeviceSelect": "Välj Tailscale-enhet",
-    "tailscaleDeviceSelectPlaceholder": "Välj en enhet...",
-    "tailscaleNoApiKey": "Ingen Tailscale API-nyckel konfigurerad. Lägg till en i administratörsinställningarna för att aktivera enhetsidentifiering.",
-    "tailscaleDocsLink": "Visa dokument",
-    "tailscaleLoadingDevices": "Laddar enheter...",
-    "tailscaleDeviceLoadFailed": "Misslyckades med att läsa in Tailscale-enheter. Kontrollera API-URL:en och nätverksanslutningen.",
-    "tailscaleNoDevices": "Inga enheter hittades i ditt tailnet.",
-    "tailscaleDeviceAutoFill": "Om du väljer en enhet fylls värdens IP-adress automatiskt i.",
-    "tailscaleAddHost": "Lägg till värd",
-    "tailscaleCopyIp": "Kopiera Tailscale-IP",
-    "tailscaleIpCopied": "IP-adressen kopierades",
-    "tailscaleIpCopyFailed": "Kunde inte kopiera IP-adressen",
-    "filterAuthTailscale": "Svansskala"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Tailscale-autentisering krävs",
-    "tailscaleCheckDescription": "Tailscale SSH kräver en ytterligare kontroll. Autentisera i din webbläsare för att fortsätta.",
-    "tailscaleCheckOpenBrowser": "Öppna webbläsaren för att autentisera",
-    "tailscaleCheckWaiting": "Väntar på Tailscale-autentisering...",
-    "tailscaleCheckTimeout": "Tailscale-autentiseringen har gått ut. Försök igen."
-  },
-  "manager": {
-    "title": "Svansskala",
-    "refresh": "Uppdatera",
-    "retry": "Försöka igen",
-    "sudoHint": "Ange ett sudo-lösenord för den här värden för att tillåta förhöjda åtgärder.",
-    "noData": "Inga data tillgängliga",
-    "filter": "Filtrera...",
-    "tsNotInstalled": "Tailscale är inte installerat på den här värddatorn",
-    "tsRunning": "Spring",
-    "tsStopped": "Stoppad",
-    "tsEnable": "Ansluta",
-    "tsDisable": "Koppla från",
-    "tsEnabling": "Ansluter till Tailscale...",
-    "tsDisabling": "Kopplar från Tailscale...",
-    "tsEnabled": "Svanskalan ansluten",
-    "tsDisabled": "Svanskalan frånkopplad",
-    "tsExitNode": "Utgångsnod",
-    "tsExitNodeActive": "Avslutsnod aktiv"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Anslut till terminalen",
-        "usernameLabel": "Användarnamn"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Svansskala"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/th_TH.json b/plugins/tailscale/locales/translated/th_TH.json
deleted file mode 100644
index 78a64db89..000000000
--- a/plugins/tailscale/locales/translated/th_TH.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "ดูอุปกรณ์เทลเน็ต",
-      "description": "ดูอุปกรณ์ต่างๆ บนเครือข่ายหางที่เชื่อมต่ออยู่"
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "API เทลสเกล",
-      "devices": "เทลเน็ต"
-    },
-    "apiKey": {
-      "label": "คีย์ API",
-      "description": "ใช้สำหรับแสดงรายการอุปกรณ์ในเครือข่ายหาง (tailnet) ของคุณ ใช้งานได้กับคีย์ Tailscale หรือ Headscale",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "URL พื้นฐานของ API",
-      "description": "เว้นช่อง Tailscale ว่างไว้ ตั้งค่าให้ชี้ไปยังอินสแตนซ์ Headscale",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "รายการอุปกรณ์",
-      "checking": "กำลังตรวจสอบสายเชื่อมต่อ...",
-      "noKey": "ยังไม่ได้ตั้งค่าคีย์ API",
-      "error": "ไม่สามารถเชื่อมต่อกับ tailnet ได้ โปรดตรวจสอบคีย์ API",
-      "count": "{{count}} อุปกรณ์สามารถเข้าถึงได้",
-      "count_other": "อุปกรณ์ {{count}} ที่สามารถเข้าถึงได้",
-      "refresh": "ตรวจสอบ"
-    }
-  },
-  "nav": {
-    "tailscale": "เกล็ดหาง"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "ผู้ใช้งานนี้ต้องเป็นผู้ใช้ Unix ที่ได้รับสิทธิ์การใช้งาน Tailscale ใน SSH ACL ของ tailnet ไม่จำเป็นต้องเป็น root เสมอไป",
-    "tailscaleDeviceSelect": "เลือกอุปกรณ์ Tailscale",
-    "tailscaleDeviceSelectPlaceholder": "เลือกอุปกรณ์...",
-    "tailscaleNoApiKey": "ไม่ได้กำหนดค่าคีย์ API ของ Tailscale ไว้ โปรดเพิ่มคีย์ใน การตั้งค่าผู้ดูแลระบบ เพื่อเปิดใช้งานการค้นหาอุปกรณ์",
-    "tailscaleDocsLink": "ดูเอกสาร",
-    "tailscaleLoadingDevices": "กำลังโหลดอุปกรณ์...",
-    "tailscaleDeviceLoadFailed": "ไม่สามารถโหลดอุปกรณ์ Tailscale ได้ โปรดตรวจสอบ URL API และการเชื่อมต่อเครือข่าย",
-    "tailscaleNoDevices": "ไม่พบอุปกรณ์ใดๆ ในเครือข่ายของคุณ",
-    "tailscaleDeviceAutoFill": "การเลือกอุปกรณ์จะทำให้ระบบกรอกที่อยู่ IP ของโฮสต์โดยอัตโนมัติ",
-    "tailscaleAddHost": "เพิ่มโฮสต์",
-    "tailscaleCopyIp": "คัดลอก Tailscale IP",
-    "tailscaleIpCopied": "คัดลอก IP แล้ว",
-    "tailscaleIpCopyFailed": "ไม่สามารถคัดลอก IP ได้",
-    "filterAuthTailscale": "เกล็ดหาง"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "ต้องยืนยันตัวตนด้วย Tailscale",
-    "tailscaleCheckDescription": "การเชื่อมต่อ Tailscale SSH ต้องการการตรวจสอบเพิ่มเติม โปรดยืนยันตัวตนในเบราว์เซอร์ของคุณเพื่อดำเนินการต่อ",
-    "tailscaleCheckOpenBrowser": "เปิดเบราว์เซอร์เพื่อยืนยันตัวตน",
-    "tailscaleCheckWaiting": "กำลังรอการยืนยันตัวตนจาก Tailscale...",
-    "tailscaleCheckTimeout": "การตรวจสอบสิทธิ์ Tailscale หมดเวลา โปรดลองอีกครั้ง"
-  },
-  "manager": {
-    "title": "เกล็ดหาง",
-    "refresh": "รีเฟรช",
-    "retry": "ลองใหม่อีกครั้ง",
-    "sudoHint": "ตั้งรหัสผ่าน sudo สำหรับโฮสต์นี้เพื่ออนุญาตการดำเนินการในระดับสิทธิ์สูง",
-    "noData": "ไม่มีข้อมูล",
-    "filter": "กรอง...",
-    "tsNotInstalled": "Tailscale ไม่ได้ติดตั้งอยู่ในเครื่องนี้",
-    "tsRunning": "วิ่ง",
-    "tsStopped": "หยุด",
-    "tsEnable": "เชื่อมต่อ",
-    "tsDisable": "ตัดการเชื่อมต่อ",
-    "tsEnabling": "กำลังเชื่อมต่อกับ Tailscale...",
-    "tsDisabling": "กำลังตัดการเชื่อมต่อจาก Tailscale...",
-    "tsEnabled": "เกล็ดหางเชื่อมต่อ",
-    "tsDisabled": "เกล็ดหางหลุด",
-    "tsExitNode": "โหนดทางออก",
-    "tsExitNodeActive": "โหนดทางออกทำงานอยู่"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "เชื่อมต่อกับเทอร์มินัล",
-        "usernameLabel": "ชื่อผู้ใช้"
-      }
-    }
-  },
-  "plugin": {
-    "name": "เกล็ดหาง"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/tr_TR.json b/plugins/tailscale/locales/translated/tr_TR.json
deleted file mode 100644
index 172394100..000000000
--- a/plugins/tailscale/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Kuyruk ağı cihazlarını görüntüle",
-      "description": "Bağlı kuyruk ağındaki cihazları inceleyin."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "Tailscale API",
-      "devices": "Kuyruk ağı"
-    },
-    "apiKey": {
-      "label": "API anahtarı",
-      "description": "Tailnet'inizdeki cihazları listelemek için kullanılır. Tailscale veya Headscale anahtarıyla çalışır.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "API temel URL'si",
-      "description": "Tailscale için boş bırakın. Bunu bir Headscale örneğine işaret edecek şekilde ayarlayın.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Cihaz listesi",
-      "checking": "Kuyruk ağını kontrol ediyoruz...",
-      "noKey": "Henüz bir API anahtarı ayarlanmadı.",
-      "error": "Tailnet'e ulaşılamadı. API anahtarını kontrol edin.",
-      "count": "{{count}} cihaza erişilebilir",
-      "count_other": "{{count}} erişilebilir cihaz",
-      "refresh": "Kontrol etmek"
-    }
-  },
-  "nav": {
-    "tailscale": "Tailscale"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Bu, Tailscale kimliğinizin tailnet'in SSH erişim kontrol listesinde (ACL) verildiği bir Unix kullanıcısı olmalıdır, mutlaka root olması gerekmez.",
-    "tailscaleDeviceSelect": "Tailscale cihazı seçin",
-    "tailscaleDeviceSelectPlaceholder": "Bir cihaz seçin...",
-    "tailscaleNoApiKey": "Tailscale API anahtarı yapılandırılmamış. Cihaz keşfini etkinleştirmek için Yönetici Ayarları'ndan bir tane ekleyin.",
-    "tailscaleDocsLink": "Dokümanları görüntüle",
-    "tailscaleLoadingDevices": "Aygıtlar yükleniyor...",
-    "tailscaleDeviceLoadFailed": "Tailscale cihazları yüklenemedi. API URL'sini ve ağ bağlantısını kontrol edin.",
-    "tailscaleNoDevices": "Tailnet'inizde aygıt bulunamadı.",
-    "tailscaleDeviceAutoFill": "Bir aygıt seçmek, host IP adresini otomatik dolduracaktır.",
-    "tailscaleAddHost": "Sunucu ekle",
-    "tailscaleCopyIp": "Tailscale IP adresini kopyala",
-    "tailscaleIpCopied": "IP kopyalandı",
-    "tailscaleIpCopyFailed": "IP adresi kopyalanamadı.",
-    "filterAuthTailscale": "Tailscale"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Tailscale Kimlik Doğrulaması Gerekli",
-    "tailscaleCheckDescription": "Tailscale SSH ek bir doğrulama gerektiriyor. Devam etmek için tarayıcınızda kimlik doğrulaması yapın.",
-    "tailscaleCheckOpenBrowser": "Kimlik Doğrulaması için Tarayıcı Aç",
-    "tailscaleCheckWaiting": "Tailscale kimlik doğrulamasının tamamlanmasını bekliyoruz...",
-    "tailscaleCheckTimeout": "Tailscale kimlik doğrulama işlemi zaman aşımına uğradı. Lütfen tekrar deneyin."
-  },
-  "manager": {
-    "title": "Tailscale",
-    "refresh": "Yenile",
-    "retry": "Yeniden dene",
-    "sudoHint": "Bu sunucu için sudo parolası belirleyerek üst düzey işlemlere izin verin.",
-    "noData": "Veri yok",
-    "filter": "Filtrele...",
-    "tsNotInstalled": "Bu sunucuda Tailscale yüklü değil",
-    "tsRunning": "Çalışıyor",
-    "tsStopped": "Durduruldu",
-    "tsEnable": "Bağlan",
-    "tsDisable": "Bağlantıyı kes",
-    "tsEnabling": "Tailscale'e bağlanıyor...",
-    "tsDisabling": "Tailscale bağlantısı kesiliyor...",
-    "tsEnabled": "Tailscale bağlandı",
-    "tsDisabled": "Tailscale bağlantısı kesildi",
-    "tsExitNode": "Çıkış düğümü",
-    "tsExitNodeActive": "Çıkış düğümü etkin"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Terminale Bağlan",
-        "usernameLabel": "Kullanıcı Adı"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Tailscale"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/uk_UA.json b/plugins/tailscale/locales/translated/uk_UA.json
deleted file mode 100644
index b3376243c..000000000
--- a/plugins/tailscale/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Переглянути пристрої для хвостової мережі",
-      "description": "Перегляньте пристрої в підключеній мережі Tailnet."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "API Tailscale",
-      "devices": "Хвостова сітка"
-    },
-    "apiKey": {
-      "label": "Ключ API",
-      "description": "Використовується для переліку пристроїв у вашій мережі Tailnet. Працює з ключем Tailscale або Headscale.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "Базова URL-адреса API",
-      "description": "Залиште порожнім для Tailscale. Встановіть це значення, щоб воно вказувало на екземпляр Headscale.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Список пристроїв",
-      "checking": "Перевірка задньої сітки...",
-      "noKey": "Ключ API ще не встановлено.",
-      "error": "Не вдалося зв'язатися з tailnet. Перевірте ключ API.",
-      "count": "{{count}} пристрій доступний",
-      "count_other": "{{count}} пристроїв доступно",
-      "refresh": "Перевірити"
-    }
-  },
-  "nav": {
-    "tailscale": "Хвостова шкала"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Це має бути користувач Unix, якому надано ідентифікатор Tailscale у SSH ACL tailnet, не обов'язково root.",
-    "tailscaleDeviceSelect": "Виберіть пристрій Tailscale",
-    "tailscaleDeviceSelectPlaceholder": "Виберіть пристрій...",
-    "tailscaleNoApiKey": "Ключ API Tailscale не налаштовано. Додайте його в налаштуваннях адміністратора, щоб увімкнути виявлення пристроїв.",
-    "tailscaleDocsLink": "Переглянути документи",
-    "tailscaleLoadingDevices": "Завантаження пристроїв...",
-    "tailscaleDeviceLoadFailed": "Не вдалося завантажити пристрої Tailscale. Перевірте URL-адресу API та мережеве з’єднання.",
-    "tailscaleNoDevices": "У вашій мережі не знайдено жодних пристроїв.",
-    "tailscaleDeviceAutoFill": "Вибір пристрою призведе до автоматичного заповнення IP-адреси хоста.",
-    "tailscaleAddHost": "Додати хоста",
-    "tailscaleCopyIp": "Копіювати IP-адресу Tailscale",
-    "tailscaleIpCopied": "IP-адресу скопійовано",
-    "tailscaleIpCopyFailed": "Не вдалося скопіювати IP-адресу",
-    "filterAuthTailscale": "Хвостова шкала"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Потрібна автентифікація Tailscale",
-    "tailscaleCheckDescription": "Для Tailscale SSH потрібна додаткова перевірка. Щоб продовжити, автентифікуйтеся у своєму браузері.",
-    "tailscaleCheckOpenBrowser": "Відкрийте браузер для автентифікації",
-    "tailscaleCheckWaiting": "Очікування автентифікації Tailscale...",
-    "tailscaleCheckTimeout": "Час очікування автентифікації Tailscale минув. Будь ласка, спробуйте ще раз."
-  },
-  "manager": {
-    "title": "Хвостова шкала",
-    "refresh": "Оновити",
-    "retry": "Повторити спробу",
-    "sudoHint": "Встановіть пароль sudo для цього хоста, щоб дозволити дії з підвищеними правами.",
-    "noData": "Дані недоступні",
-    "filter": "Фільтр...",
-    "tsNotInstalled": "Tailscale не встановлено на цьому хості",
-    "tsRunning": "Біг",
-    "tsStopped": "Зупинено",
-    "tsEnable": "Підключитися",
-    "tsDisable": "Відключитися",
-    "tsEnabling": "Підключення до Tailscale...",
-    "tsDisabling": "Відключення від Tailscale...",
-    "tsEnabled": "Підключено хвостову шкалу",
-    "tsDisabled": "Хвостова шкала відключена",
-    "tsExitNode": "Вихідний вузол",
-    "tsExitNodeActive": "Вихідний вузол активний"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Підключення до терміналу",
-        "usernameLabel": "Ім'я користувача"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Хвостова шкала"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/vi_VN.json b/plugins/tailscale/locales/translated/vi_VN.json
deleted file mode 100644
index acf5e9b31..000000000
--- a/plugins/tailscale/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "Xem các thiết bị đuôi tàu",
-      "description": "Xem các thiết bị trên mạng kết nối."
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "API Tailscale",
-      "devices": "Lưới đuôi"
-    },
-    "apiKey": {
-      "label": "Khóa API",
-      "description": "Dùng để liệt kê các thiết bị trên mạng đuôi tàu của bạn. Hoạt động với khóa Tailscale hoặc Headscale.",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "URL cơ sở của API",
-      "description": "Để trống phần Tailscale. Đặt giá trị này trỏ đến một thể hiện của Headscale.",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "Danh sách thiết bị",
-      "checking": "Kiểm tra lưới chắn đuôi xe...",
-      "noKey": "Chưa thiết lập khóa API.",
-      "error": "Không thể kết nối với tailnet. Vui lòng kiểm tra khóa API.",
-      "count": "{{count}} thiết bị có thể truy cập",
-      "count_other": "{{count}} thiết bị có thể truy cập",
-      "refresh": "Kiểm tra"
-    }
-  },
-  "nav": {
-    "tailscale": "Tailscale"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "Đây phải là người dùng Unix mà danh tính Tailscale của bạn được cấp trong ACL SSH của tailnet, không nhất thiết phải là người dùng root.",
-    "tailscaleDeviceSelect": "Chọn thiết bị Tailscale",
-    "tailscaleDeviceSelectPlaceholder": "Chọn thiết bị...",
-    "tailscaleNoApiKey": "Chưa cấu hình khóa API Tailscale. Thêm một khóa trong Cài đặt Quản trị để bật khám phá thiết bị.",
-    "tailscaleDocsLink": "Xem tài liệu",
-    "tailscaleLoadingDevices": "Đang tải thiết bị...",
-    "tailscaleDeviceLoadFailed": "Không thể tải thiết bị Tailscale. Vui lòng kiểm tra URL API và kết nối mạng.",
-    "tailscaleNoDevices": "Không tìm thấy thiết bị nào trong tailnet của bạn.",
-    "tailscaleDeviceAutoFill": "Chọn thiết bị sẽ tự động điền địa chỉ IP máy chủ.",
-    "tailscaleAddHost": "Thêm máy chủ",
-    "tailscaleCopyIp": "Sao chép IP của Tailscale",
-    "tailscaleIpCopied": "Địa chỉ IP đã được sao chép",
-    "tailscaleIpCopyFailed": "Không thể sao chép địa chỉ IP",
-    "filterAuthTailscale": "Tailscale"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "Cần xác thực Tailscale",
-    "tailscaleCheckDescription": "Tailscale SSH yêu cầu kiểm tra bổ sung. Vui lòng xác thực trong trình duyệt của bạn để tiếp tục.",
-    "tailscaleCheckOpenBrowser": "Mở trình duyệt để xác thực",
-    "tailscaleCheckWaiting": "Đang chờ xác thực Tailscale...",
-    "tailscaleCheckTimeout": "Quá trình xác thực Tailscale đã hết hạn. Vui lòng thử lại."
-  },
-  "manager": {
-    "title": "Tailscale",
-    "refresh": "Làm mới",
-    "retry": "Thử lại",
-    "sudoHint": "Hãy đặt mật khẩu sudo cho máy chủ này để cho phép thực hiện các thao tác với quyền quản trị viên.",
-    "noData": "Không có dữ liệu",
-    "filter": "Lọc...",
-    "tsNotInstalled": "Tailscale chưa được cài đặt trên máy chủ này",
-    "tsRunning": "Đang chạy",
-    "tsStopped": "Đã dừng",
-    "tsEnable": "Kết nối",
-    "tsDisable": "Ngắt kết nối",
-    "tsEnabling": "Đang kết nối đến Tailscale...",
-    "tsDisabling": "Đang ngắt kết nối khỏi Tailscale...",
-    "tsEnabled": "Đã kết nối Tailscale",
-    "tsDisabled": "Đã ngắt kết nối Tailscale",
-    "tsExitNode": "Nút thoát",
-    "tsExitNodeActive": "Nút thoát đang hoạt động"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "Kết nối đến Terminal",
-        "usernameLabel": "Tên đăng nhập"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Tailscale"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/zh_CN.json b/plugins/tailscale/locales/translated/zh_CN.json
deleted file mode 100644
index ef6809d19..000000000
--- a/plugins/tailscale/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "查看尾网设备",
-      "description": "查看已连接尾网上的设备。"
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "Tailscale API",
-      "devices": "尾网"
-    },
-    "apiKey": {
-      "label": "API 密钥",
-      "description": "用于列出尾网中的设备。可与 Tailscale 或 Headscale 密钥配合使用。",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "API 基本 URL",
-      "description": "留空表示 Tailscale。设置此项可指向 Headscale 实例。",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "设备列表",
-      "checking": "检查尾网……",
-      "noKey": "尚未设置 API 密钥。",
-      "error": "无法连接到尾网。请检查API密钥。",
-      "count": "{{count}} 设备可达",
-      "count_other": "{{count}} 设备可达",
-      "refresh": "查看"
-    }
-  },
-  "nav": {
-    "tailscale": "Tailscale"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "这必须是您在 Tailscale 身份中被授予的 Unix 用户，但不一定是 root 用户。",
-    "tailscaleDeviceSelect": "选择 Tailscale 设备",
-    "tailscaleDeviceSelectPlaceholder": "选择设备...",
-    "tailscaleNoApiKey": "未配置 Tailscale API 密钥。请在管理设置中添加一个以启用设备发现。",
-    "tailscaleDocsLink": "查看文档",
-    "tailscaleLoadingDevices": "正在加载设备...",
-    "tailscaleDeviceLoadFailed": "加载 Tailscale 设备失败。请检查 API URL 和网络连接。",
-    "tailscaleNoDevices": "在您的 tailnet 中未找到设备。",
-    "tailscaleDeviceAutoFill": "选择设备将自动填充主机 IP 地址。",
-    "tailscaleAddHost": "添加主机",
-    "tailscaleCopyIp": "复制 Tailscale IP",
-    "tailscaleIpCopied": "IP地址已复制",
-    "tailscaleIpCopyFailed": "无法复制IP地址",
-    "filterAuthTailscale": "Tailscale"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "需要 Tailscale 身份验证",
-    "tailscaleCheckDescription": "Tailscale SSH 需要进行额外的验证。请在浏览器中进行身份验证以继续。",
-    "tailscaleCheckOpenBrowser": "打开浏览器进行认证",
-    "tailscaleCheckWaiting": "正在等待 Tailscale 身份验证……",
-    "tailscaleCheckTimeout": "Tailscale 身份验证超时，请重试。"
-  },
-  "manager": {
-    "title": "Tailscale",
-    "refresh": "刷新",
-    "retry": "重试",
-    "sudoHint": "为该主机设置 sudo 密码以允许执行提升权限的操作。",
-    "noData": "暂无数据",
-    "filter": "筛选...",
-    "tsNotInstalled": "此主机未安装 Tailscale",
-    "tsRunning": "运行中",
-    "tsStopped": "已停止",
-    "tsEnable": "连接",
-    "tsDisable": "断开连接",
-    "tsEnabling": "正在连接到 Tailscale...",
-    "tsDisabling": "正在断开 Tailscale 连接...",
-    "tsEnabled": "Tailscale 已连接",
-    "tsDisabled": "Tailscale 已断开连接",
-    "tsExitNode": "出口节点",
-    "tsExitNodeActive": "出口节点活跃"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "连接到终端",
-        "usernameLabel": "用户名"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Tailscale"
-  }
-}
diff --git a/plugins/tailscale/locales/translated/zh_TW.json b/plugins/tailscale/locales/translated/zh_TW.json
deleted file mode 100644
index a591c073a..000000000
--- a/plugins/tailscale/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,89 +0,0 @@
-{
-  "permissions": {
-    "devices.view": {
-      "title": "查看尾網設備",
-      "description": "查看已連接尾網上的裝置。"
-    }
-  },
-  "settings": {
-    "group": {
-      "api": "Tailscale API",
-      "devices": "尾網"
-    },
-    "apiKey": {
-      "label": "API金鑰",
-      "description": "用於列出尾網中的設備。可與 Tailscale 或 Headscale 金鑰搭配使用。",
-      "placeholder": "tskey-api-... / hskey-api-..."
-    },
-    "apiBaseUrl": {
-      "label": "API 基本 URL",
-      "description": "留空表示 Tailscale。設定此項可指向 Headscale 實例。",
-      "placeholder": "https://api.tailscale.com/api/v2"
-    },
-    "devices": {
-      "label": "設備列表",
-      "checking": "檢查尾網…",
-      "noKey": "尚未設定 API 金鑰。",
-      "error": "無法連接到尾網。請檢查API密鑰。",
-      "count": "{{count}} 設備可達",
-      "count_other": "{{count}} 設備可達",
-      "refresh": "查看"
-    }
-  },
-  "nav": {
-    "tailscale": "Tailscale"
-  },
-  "hosts": {
-    "tailscaleUsernameHint": "這必須是您在 Tailscale 身分中被授予的 Unix 用戶，但不一定是 root 用戶。",
-    "tailscaleDeviceSelect": "選取 Tailscale 裝置",
-    "tailscaleDeviceSelectPlaceholder": "選取裝置...",
-    "tailscaleNoApiKey": "未設定 Tailscale API 金鑰。請在管理設定中新增一個以啟用裝置探索。",
-    "tailscaleDocsLink": "檢視文件",
-    "tailscaleLoadingDevices": "正在載入裝置...",
-    "tailscaleDeviceLoadFailed": "載入 Tailscale 設備失敗。請檢查 API URL 和網路連線。",
-    "tailscaleNoDevices": "在您的 tailnet 中找不到裝置。",
-    "tailscaleDeviceAutoFill": "選取裝置將自動填入主機 IP 位址。",
-    "tailscaleAddHost": "新增主機",
-    "tailscaleCopyIp": "複製 Tailscale IP",
-    "tailscaleIpCopied": "IP位址已複製",
-    "tailscaleIpCopyFailed": "無法複製IP位址",
-    "filterAuthTailscale": "Tailscale"
-  },
-  "terminal": {
-    "tailscaleCheckRequired": "需要 Tailscale 身份驗證",
-    "tailscaleCheckDescription": "Tailscale SSH 需要額外的驗證。請在瀏覽器中進行身份驗證以繼續。",
-    "tailscaleCheckOpenBrowser": "開啟瀏覽器以進行驗證",
-    "tailscaleCheckWaiting": "正在等待 Tailscale 身份驗證…",
-    "tailscaleCheckTimeout": "Tailscale身份驗證逾時，請重試。"
-  },
-  "manager": {
-    "title": "Tailscale",
-    "refresh": "重新整理",
-    "retry": "重試",
-    "sudoHint": "為該主機設定 sudo 密碼以允許執行提升權限的操作。",
-    "noData": "無可用資料",
-    "filter": "篩選...",
-    "tsNotInstalled": "此主機上未安裝 Tailscale",
-    "tsRunning": "執行中",
-    "tsStopped": "已停止",
-    "tsEnable": "連線",
-    "tsDisable": "中斷連線",
-    "tsEnabling": "正在連線至 Tailscale...",
-    "tsDisabling": "正在中斷 Tailscale 連線...",
-    "tsEnabled": "Tailscale 已連線",
-    "tsDisabled": "Tailscale 已中斷連線",
-    "tsExitNode": "出口節點",
-    "tsExitNodeActive": "出口節點作用中"
-  },
-  "newUi": {
-    "sidebar": {
-      "quickConnect": {
-        "connectToTerminal": "連線至終端機",
-        "usernameLabel": "使用者名稱"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Tailscale"
-  }
-}
diff --git a/plugins/tailscale/manifest.json b/plugins/tailscale/manifest.json
deleted file mode 100644
index a14dcbf3b..000000000
--- a/plugins/tailscale/manifest.json
+++ /dev/null
@@ -1,81 +0,0 @@
-{
-  "id": "tailscale",
-  "name": "Tailscale",
-  "version": "1.0.0",
-  "description": "Browse and connect to devices on your tailnet, and handle Tailscale SSH sign-in checks.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Networking",
-  "icon": "Network",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "hosts:read",
-    "settings:read-core",
-    "network:outbound",
-    "network:serve",
-    "auth:provide",
-    "ssh:connect",
-    "credentials:use",
-    "credentials:read",
-    "ui:surface"
-  ],
-  "optionalDependencies": {
-    "host-metrics": "^1.0.0"
-  },
-  "contributes": {
-    "panels": [
-      {
-        "id": "tailscale",
-        "titleKey": "nav.tailscale",
-        "icon": "Radar"
-      }
-    ],
-    "permissions": [
-      {
-        "name": "devices.view",
-        "titleKey": "permissions.devices.view.title",
-        "descriptionKey": "permissions.devices.view.description",
-        "defaultRoles": ["admin"]
-      }
-    ],
-    "auth": {
-      "sshAuthTypes": ["tailscale"]
-    },
-    "settings": {
-      "admin": [
-        {
-          "key": "apiKey",
-          "type": "secret",
-          "labelKey": "settings.apiKey.label",
-          "descriptionKey": "settings.apiKey.description",
-          "placeholderKey": "settings.apiKey.placeholder",
-          "group": "settings.group.api"
-        },
-        {
-          "key": "apiBaseUrl",
-          "type": "string",
-          "labelKey": "settings.apiBaseUrl.label",
-          "descriptionKey": "settings.apiBaseUrl.description",
-          "placeholderKey": "settings.apiBaseUrl.placeholder",
-          "default": "",
-          "group": "settings.group.api"
-        },
-        {
-          "key": "devices",
-          "type": "custom",
-          "component": "devices",
-          "group": "settings.group.devices"
-        }
-      ]
-    },
-    "uses": ["host-metrics.managers", "terminal.overlay"]
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"]
-}
diff --git a/plugins/tailscale/package.json b/plugins/tailscale/package.json
deleted file mode 100644
index dbdf408a6..000000000
--- a/plugins/tailscale/package.json
+++ /dev/null
@@ -1,33 +0,0 @@
-{
-  "name": "@termix-plugin/tailscale",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "lucide-react": "^1.33.0"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/react": "^16.3.3",
-    "@testing-library/user-event": "^14.6.7",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "express": "^5.2.1",
-    "react": "^19.2.8",
-    "sonner": "^2.0.8",
-    "ssh2": "^1.17.0"
-  }
-}
diff --git a/plugins/tailscale/src/backend/host-metrics-manager.ts b/plugins/tailscale/src/backend/host-metrics-manager.ts
deleted file mode 100644
index 18887ec75..000000000
--- a/plugins/tailscale/src/backend/host-metrics-manager.ts
+++ /dev/null
@@ -1,259 +0,0 @@
-import type { Router } from "express";
-import type { Request, Response } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { execCommand, execElevated } from "@termix/plugin-sdk/host-commands";
-import { withSshConnection } from "./ssh.js";
-
-export type TailscaleAction = "up" | "down";
-
-export function isValidTailscaleAction(a: unknown): a is TailscaleAction {
-  return a === "up" || a === "down";
-}
-
-export interface TailscalePeer {
-  hostname: string;
-  tailscaleIPs: string[];
-  online: boolean;
-  isExitNode: boolean;
-}
-
-export interface TailscaleData {
-  installed: boolean;
-  running: boolean;
-  tailscaleIPs: string[];
-  hostname: string | null;
-  peers: TailscalePeer[];
-  exitNodeInUse: boolean;
-}
-
-const PROBE_CMD = [
-  "command -v tailscale >/dev/null 2>&1 && echo ts_installed=1 || echo ts_installed=0",
-  "tailscale status --json 2>/dev/null",
-].join("; ");
-
-export function parseTailscaleData(output: string): TailscaleData {
-  const notInstalled: TailscaleData = {
-    installed: false,
-    running: false,
-    tailscaleIPs: [],
-    hostname: null,
-    peers: [],
-    exitNodeInUse: false,
-  };
-
-  if (output.includes("ts_installed=0")) return notInstalled;
-
-  const lines = output.split("\n");
-  const jsonLines = lines.filter(
-    (l) => !l.startsWith("ts_installed=") && l.trim() !== "",
-  );
-  const jsonStr = jsonLines.join("\n");
-
-  try {
-    const parsed = JSON.parse(jsonStr) as {
-      BackendState?: string;
-      Self?: { HostName?: string; TailscaleIPs?: string[] };
-      Peer?: Record<
-        string,
-        {
-          HostName?: string;
-          TailscaleIPs?: string[];
-          Online?: boolean;
-          ExitNode?: boolean;
-        }
-      >;
-      CurrentExitNode?: string;
-    };
-
-    const peers: TailscalePeer[] = Object.values(parsed.Peer ?? {}).map(
-      (p) => ({
-        hostname: p.HostName ?? "",
-        tailscaleIPs: p.TailscaleIPs ?? [],
-        online: p.Online ?? false,
-        isExitNode: p.ExitNode ?? false,
-      }),
-    );
-
-    return {
-      installed: true,
-      running: parsed.BackendState === "Running",
-      tailscaleIPs: parsed.Self?.TailscaleIPs ?? [],
-      hostname: parsed.Self?.HostName ?? null,
-      peers,
-      exitNodeInUse:
-        typeof parsed.CurrentExitNode === "string" &&
-        parsed.CurrentExitNode !== "",
-    };
-  } catch {
-    return {
-      installed: true,
-      running: false,
-      tailscaleIPs: [],
-      hostname: null,
-      peers: [],
-      exitNodeInUse: false,
-    };
-  }
-}
-
-class AccessDeniedError extends Error {
-  constructor(message = "No access to this host") {
-    super(message);
-    this.name = "AccessDeniedError";
-  }
-}
-
-class ManagerInputError extends Error {
-  constructor(message: string) {
-    super(message);
-    this.name = "ManagerInputError";
-  }
-}
-
-interface ManagerHost {
-  id: number;
-  userId: string;
-  sudoPassword?: string;
-}
-
-/**
- * The host as the acting user may reach it. The resolved host carries the
- * owner's sudo password even for a shared user: core decrypts it with the
- * owner's key.
- */
-async function resolveManagerHost(
-  ctx: PluginContext,
-  hostId: number,
-): Promise<ManagerHost> {
-  const access = await ctx.hosts.checkAccess(hostId, "connect");
-  if (!access.hasAccess) throw new AccessDeniedError();
-  const host = await ctx.ssh.resolveHost(hostId);
-  if (!host) throw new AccessDeniedError("Host not found");
-  return {
-    id: hostId,
-    userId: String(host.userId ?? ""),
-    sudoPassword: (host.sudoPassword as string | undefined) || undefined,
-  };
-}
-
-function managerErrorResponse(
-  res: Response,
-  operation: string,
-  error: unknown,
-) {
-  if (error instanceof ManagerInputError) {
-    return res.status(400).json({ error: error.message });
-  }
-  if (error instanceof AccessDeniedError) {
-    return res.status(403).json({ error: error.message });
-  }
-  const message = error instanceof Error ? error.message : String(error);
-  return res.status(500).json({ error: message || `${operation} failed` });
-}
-
-export function registerTailscaleHostMetricsManager(
-  router: Router,
-  ctx: PluginContext,
-): void {
-  /**
-   * @openapi
-   * /plugin-api/tailscale/host-metrics-manager/{id}:
-   *   get:
-   *     summary: Get Tailscale status and IPs for a host
-   *     tags:
-   *       - Tailscale
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Tailscale installation status, running state, IPs, and peer count.
-   */
-  router.get(
-    "/host-metrics-manager/:id",
-    async (req: Request, res: Response) => {
-      const hostId = parseInt(String(req.params.id), 10);
-      try {
-        const host = await resolveManagerHost(ctx, hostId);
-        const data = await withSshConnection(
-          host.id,
-          { pool: "tailscale", purpose: "metrics" },
-          async (client) => {
-            const { stdout } = await execCommand(client, PROBE_CMD, 15000);
-            return parseTailscaleData(stdout);
-          },
-        );
-        res.json(data);
-      } catch (error) {
-        ctx.log.error(
-          "Failed to read Tailscale status",
-          error instanceof Error ? error : undefined,
-        );
-        managerErrorResponse(res, "tailscale_read", error);
-      }
-    },
-  );
-
-  /**
-   * @openapi
-   * /plugin-api/tailscale/host-metrics-manager/{id}/action:
-   *   post:
-   *     summary: Connect or disconnect Tailscale on a host
-   *     tags:
-   *       - Tailscale
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               action:
-   *                 type: string
-   *                 enum: [up, down]
-   *     responses:
-   *       200:
-   *         description: Action result.
-   */
-  router.post(
-    "/host-metrics-manager/:id/action",
-    async (req: Request, res: Response) => {
-      const hostId = parseInt(String(req.params.id), 10);
-      try {
-        const host = await resolveManagerHost(ctx, hostId);
-        const { action } = req.body as { action: unknown };
-        if (!isValidTailscaleAction(action)) {
-          throw new ManagerInputError("Invalid action, must be 'up' or 'down'");
-        }
-        const result = await withSshConnection(
-          host.id,
-          { pool: "tailscale", purpose: "metrics" },
-          (client) =>
-            execElevated(client, `tailscale ${action}`, host.sudoPassword, {
-              forceSudo: false,
-              timeoutMs: 30000,
-            }),
-        );
-        res.json({
-          success: result.code === 0,
-          output: (result.stdout + result.stderr).trim(),
-        });
-      } catch (error) {
-        ctx.log.error(
-          "Failed to run Tailscale action",
-          error instanceof Error ? error : undefined,
-        );
-        managerErrorResponse(res, "tailscale_action", error);
-      }
-    },
-  );
-}
diff --git a/plugins/tailscale/src/backend/index.ts b/plugins/tailscale/src/backend/index.ts
deleted file mode 100644
index 91ad452b5..000000000
--- a/plugins/tailscale/src/backend/index.ts
+++ /dev/null
@@ -1,20 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { startTailscaleService, stopTailscaleService } from "./routes.js";
-import { registerTailscaleSshAuth } from "./ssh-auth-provider.js";
-import { registerTailscaleHostMetricsManager } from "./host-metrics-manager.js";
-import { setPluginSsh } from "./ssh.js";
-
-export async function activate(ctx: PluginContext) {
-  const router = ctx.http.router<Router>();
-  startTailscaleService(router, ctx);
-  registerTailscaleHostMetricsManager(router, ctx);
-  setPluginSsh(ctx.ssh);
-  registerTailscaleSshAuth(ctx);
-  ctx.log.info("Tailscale routes mounted at /plugin-api/tailscale");
-}
-
-export async function deactivate() {
-  setPluginSsh(null);
-  stopTailscaleService();
-}
diff --git a/plugins/tailscale/src/backend/routes.ts b/plugins/tailscale/src/backend/routes.ts
deleted file mode 100644
index 0d85c8d7b..000000000
--- a/plugins/tailscale/src/backend/routes.ts
+++ /dev/null
@@ -1,151 +0,0 @@
-import { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-
-interface TailscaleDevice {
-  id: string;
-  name: string;
-  hostname: string;
-  addresses: string[];
-  os: string;
-  lastSeen: string;
-}
-
-interface TailscaleAPIDevice {
-  id: string;
-  name: string;
-  hostname: string;
-  addresses: string[];
-  os: string;
-  lastSeen: string;
-  nodeId?: string;
-}
-
-const DEFAULT_TAILSCALE_API_BASE = "https://api.tailscale.com/api/v2";
-
-function normalizeApiBase(raw: string | null): string {
-  const trimmed = (raw ?? "").trim().replace(/\/+$/, "");
-  return trimmed || DEFAULT_TAILSCALE_API_BASE;
-}
-
-/**
- * Set by activate(). Dropped on deactivate so a request arriving mid-teardown
- * cannot read settings through a context the runtime has already torn down.
- */
-let context: PluginContext | null = null;
-
-/** Called from activate(). Mounts the plugin's routes on ctx.http.router(). */
-export function startTailscaleService(
-  mountOn: Router,
-  ctx: PluginContext,
-): void {
-  context = ctx;
-
-  /**
-   * @openapi
-   * /plugin-api/tailscale/devices:
-   *   get:
-   *     summary: List Tailscale devices
-   *     description: >
-   *       Returns the devices in the configured tailnet using the stored admin
-   *       API key. Requires the tailscale.devices.view permission, because the
-   *       response is a full inventory of the tailnet.
-   *     tags:
-   *       - Tailscale
-   *     responses:
-   *       200:
-   *         description: List of tailnet devices.
-   *       403:
-   *         description: The caller lacks tailscale.devices.view.
-   *         content:
-   *           application/json:
-   *             schema:
-   *               type: object
-   *               properties:
-   *                 devices:
-   *                   type: array
-   *                   items:
-   *                     type: object
-   *       500:
-   *         description: Failed to fetch Tailscale devices.
-   */
-  mountOn.get(
-    "/devices",
-    ctx.rbac.require("devices.view") as never,
-    async (_req, res) => {
-      try {
-        if (!context) {
-          return res
-            .status(503)
-            .json({ error: "Tailscale is not available", devices: [] });
-        }
-        const apiKey = (await context.settings.get<string>("apiKey")) ?? "";
-        if (!apiKey) {
-          return res.json({ devices: [], hasApiKey: false });
-        }
-        const apiBase = normalizeApiBase(
-          (await context.settings.get<string>("apiBaseUrl")) ?? null,
-        );
-
-        const url = `${apiBase}/tailnet/-/devices?fields=all`;
-        // The base is admin-set and may be a LAN Headscale; listing it also
-        // routes the call through the configured outbound proxy.
-        const response = await context.fetch(url, {
-          headers: {
-            Authorization: `Bearer ${apiKey}`,
-            "User-Agent": "Termix/1.0",
-          },
-          allowPrivateHosts: [new URL(apiBase).hostname],
-        });
-
-        if (!response.ok) {
-          context.log.warn(
-            `Tailscale API returned non-OK status ${response.status}`,
-          );
-          if (response.status === 401 || response.status === 403) {
-            return res.status(401).json({
-              error: "Invalid Tailscale API key",
-              devices: [],
-              hasApiKey: true,
-            });
-          }
-          return res.status(502).json({
-            error: "Tailscale API error",
-            devices: [],
-            hasApiKey: true,
-          });
-        }
-
-        const data = (await response.json()) as {
-          devices: TailscaleAPIDevice[];
-        };
-
-        const devices: TailscaleDevice[] = (data.devices ?? []).map((d) => ({
-          id: d.id,
-          name: d.name,
-          hostname: d.hostname,
-          addresses: d.addresses ?? [],
-          os: d.os,
-          lastSeen: d.lastSeen,
-        }));
-
-        res.json({ devices, hasApiKey: true });
-      } catch (err) {
-        context?.log.error(
-          "Failed to fetch Tailscale devices",
-          err instanceof Error ? err : undefined,
-        );
-        res.status(500).json({
-          error: "Failed to fetch Tailscale devices",
-          devices: [],
-          hasApiKey: true,
-        });
-      }
-    },
-  );
-}
-
-/** Called from deactivate(). /plugin-api/tailscale/* falls back to 404 until
- * reactivated. */
-export function stopTailscaleService(): void {
-  context = null;
-}
diff --git a/plugins/tailscale/src/backend/ssh-auth-provider.ts b/plugins/tailscale/src/backend/ssh-auth-provider.ts
deleted file mode 100644
index ac2b7227b..000000000
--- a/plugins/tailscale/src/backend/ssh-auth-provider.ts
+++ /dev/null
@@ -1,76 +0,0 @@
-import type {
-  PluginContext,
-  PluginSshAuthProvider,
-} from "@termix/plugin-sdk/backend";
-import {
-  isTailscaleCheckCompleteBanner,
-  parseTailscaleCheckBanner,
-  TAILSCALE_CHECK_TIMEOUT_MS,
-} from "./tailscale-check.js";
-
-const AUTH_FAILED_PATTERN = /All configured authentication methods failed/i;
-
-export const tailscaleSshAuthProvider: PluginSshAuthProvider = {
-  type: "tailscale",
-  labelKey: "hosts.filterAuthTailscale",
-  // Nothing host-specific to look up, so it works for an unsaved host.
-  quickConnect: true,
-  connectOptions: (_host, purpose) =>
-    purpose === "terminal"
-      ? {
-          tryKeyboard: false,
-          readyTimeout: TAILSCALE_CHECK_TIMEOUT_MS,
-          // The socket sits idle while a check-mode login is pending.
-          timeout: TAILSCALE_CHECK_TIMEOUT_MS,
-        }
-      : { tryKeyboard: false },
-  prepare: async (_config, _host, env) => {
-    env.log("info", "Using Tailscale SSH");
-    return { status: "ready" };
-  },
-  onBanner: (banner) => {
-    const check = parseTailscaleCheckBanner(banner);
-    if (check) {
-      return {
-        action: "hold",
-        timeoutMs: TAILSCALE_CHECK_TIMEOUT_MS,
-        message: `Tailscale SSH requires an additional check. Waiting for browser authentication at ${check.url}`,
-        details: { url: check.url, message: check.message },
-      };
-    }
-    if (isTailscaleCheckCompleteBanner(banner)) {
-      return { action: "release" };
-    }
-    return undefined;
-  },
-  onAuthFailed: (host, _env, context) => {
-    const failed =
-      context.methodNotAvailable ||
-      AUTH_FAILED_PATTERN.test(context.error.message);
-    if (!failed) return;
-
-    // Tailscale documents the "+password" suffix for clients that mishandle a
-    // successful "none" reply. The password value is ignored.
-    if (context.retries === 0 && context.canRetry) {
-      return {
-        status: "retry",
-        message: "Retrying Tailscale SSH in forced password mode",
-        patch: {
-          username: `${host.username}+password`,
-          password: "termix",
-          tryKeyboard: false,
-        },
-      };
-    }
-
-    return {
-      status: "error",
-      code: "failed",
-      message: `Tailscale SSH authentication failed for user "${host.username}". Ensure Tailscale is running on the server, SSH is advertised (tailscale set --ssh), and your ACL policy grants the "${host.username}" user to your identity. If your Tailscale identity maps to a different Unix user, update the username on this host.`,
-    };
-  },
-};
-
-export function registerTailscaleSshAuth(ctx: PluginContext): void {
-  ctx.auth.registerSshAuthProvider(tailscaleSshAuthProvider);
-}
diff --git a/plugins/tailscale/src/backend/ssh.ts b/plugins/tailscale/src/backend/ssh.ts
deleted file mode 100644
index c887ed0a7..000000000
--- a/plugins/tailscale/src/backend/ssh.ts
+++ /dev/null
@@ -1,27 +0,0 @@
-import type { Client } from "ssh2";
-import type {
-  PluginSsh,
-  PluginSshConnectOptions,
-  PluginSshHost,
-} from "@termix/plugin-sdk/backend";
-
-let current: PluginSsh | null = null;
-
-/** Set in activate, cleared on deactivate. */
-export function setPluginSsh(ssh: PluginSsh | null): void {
-  current = ssh;
-}
-
-export function pluginSsh(): PluginSsh {
-  if (!current) throw new Error("The plugin is not active");
-  return current;
-}
-
-/** withConnection with ssh2's Client type filled in. */
-export function withSshConnection<T>(
-  host: number | PluginSshHost,
-  options: PluginSshConnectOptions & { pool: string },
-  fn: (client: Client) => Promise<T>,
-): Promise<T> {
-  return pluginSsh().withConnection<T, Client>(host, options, fn);
-}
diff --git a/plugins/tailscale/src/backend/tailscale-check.ts b/plugins/tailscale/src/backend/tailscale-check.ts
deleted file mode 100644
index 45a68f4f4..000000000
--- a/plugins/tailscale/src/backend/tailscale-check.ts
+++ /dev/null
@@ -1,45 +0,0 @@
-// Tailscale SSH "check mode" sends its re-authentication prompt as an SSH auth
-// banner during the "none" auth method, then long-polls its control plane while
-// the connection stays open. The banner text itself comes from the control plane
-// (it is not in the tailscaled source), so match on the login URL rather than the
-// surrounding wording, which can change without notice.
-
-const TAILSCALE_CHECK_URL = /https:\/\/login\.tailscale\.com\/a\/[A-Za-z0-9]+/;
-
-const CHECK_COMPLETE = /authentication checked/i;
-
-/** How long a Tailscale check-mode login may sit waiting for approval. */
-export const TAILSCALE_CHECK_TIMEOUT_MS = 1_800_000;
-
-export interface TailscaleCheckBanner {
-  url: string;
-  message: string;
-}
-
-function stripCommentMarkers(banner: string): string {
-  return banner
-    .split(/\r?\n/)
-    .map((line) => line.replace(/^\s*#\s?/, "").trim())
-    .filter((line) => line.length > 0)
-    .join("\n")
-    .trim();
-}
-
-export function parseTailscaleCheckBanner(
-  banner: string,
-): TailscaleCheckBanner | null {
-  if (!banner) return null;
-
-  const match = banner.match(TAILSCALE_CHECK_URL);
-  if (!match) return null;
-
-  return {
-    url: match[0],
-    message: stripCommentMarkers(banner),
-  };
-}
-
-export function isTailscaleCheckCompleteBanner(banner: string): boolean {
-  if (!banner) return false;
-  return CHECK_COMPLETE.test(banner);
-}
diff --git a/plugins/tailscale/src/frontend/TailscaleAuthEditor.tsx b/plugins/tailscale/src/frontend/TailscaleAuthEditor.tsx
deleted file mode 100644
index 11eb0502e..000000000
--- a/plugins/tailscale/src/frontend/TailscaleAuthEditor.tsx
+++ /dev/null
@@ -1,122 +0,0 @@
-import { useEffect, useState } from "react";
-import {
-  useTranslation,
-  type SshAuthEditorProps,
-} from "@termix/plugin-sdk/frontend";
-import { Select2 } from "@termix/plugin-sdk/ui";
-import { getTailscaleDevices } from "./tailscale-api";
-
-interface Device {
-  id: string;
-  name: string;
-  hostname: string;
-  addresses: string[];
-  os: string;
-  lastSeen: string;
-}
-
-function tailnetAddress(device: Device): string {
-  return (
-    device.addresses.find((address) => address.startsWith("100.")) ??
-    device.addresses[0] ??
-    ""
-  );
-}
-
-/**
- * The host editor's "tailscale" auth method: pick a tailnet device and its
- * address fills the host's IP.
- */
-export function TailscaleAuthEditor({ form, setField }: SshAuthEditorProps) {
-  const { t } = useTranslation();
-  const [devices, setDevices] = useState<Device[]>([]);
-  const [hasApiKey, setHasApiKey] = useState(false);
-  const [loading, setLoading] = useState(true);
-  const [failed, setFailed] = useState(false);
-
-  useEffect(() => {
-    let cancelled = false;
-    setLoading(true);
-    setFailed(false);
-    getTailscaleDevices()
-      .then((result) => {
-        if (cancelled) return;
-        setDevices(result?.devices ?? []);
-        setHasApiKey(result?.hasApiKey ?? false);
-        setFailed(!!result?.error);
-      })
-      .catch(() => {
-        if (!cancelled) setFailed(true);
-      })
-      .finally(() => {
-        if (!cancelled) setLoading(false);
-      });
-    return () => {
-      cancelled = true;
-    };
-  }, []);
-
-  const ip = String(form.ip ?? "");
-
-  return (
-    <div className="flex flex-col gap-2 border-t border-border pt-3">
-      <div className="flex items-center justify-between">
-        <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-          {t("hosts.tailscaleDeviceSelect")}
-        </label>
-        <a
-          href="https://docs.termix.site/features/networking/tailscale"
-          target="_blank"
-          rel="noreferrer"
-          className="text-[10px] text-accent-brand hover:underline"
-        >
-          {t("hosts.tailscaleDocsLink")}
-        </a>
-      </div>
-      {loading ? (
-        <p className="text-[10px] text-muted-foreground">
-          {t("hosts.tailscaleLoadingDevices")}
-        </p>
-      ) : failed ? (
-        <p className="text-[10px] text-destructive">
-          {t("hosts.tailscaleDeviceLoadFailed")}
-        </p>
-      ) : !hasApiKey ? (
-        <p className="text-[10px] text-muted-foreground">
-          {t("hosts.tailscaleNoApiKey")}
-        </p>
-      ) : devices.length === 0 ? (
-        <p className="text-[10px] text-muted-foreground">
-          {t("hosts.tailscaleNoDevices")}
-        </p>
-      ) : (
-        <>
-          <Select2
-            className="w-full border border-border bg-background text-foreground text-xs px-2 py-1.5 focus:outline-none focus:border-accent-brand/50"
-            value={
-              devices.find((device) => device.addresses.includes(ip))?.id ?? ""
-            }
-            onChange={(event) => {
-              const device = devices.find(
-                (item) => item.id === event.target.value,
-              );
-              if (device) setField("ip", tailnetAddress(device));
-            }}
-          >
-            <option value="" disabled>
-              {t("hosts.tailscaleDeviceSelectPlaceholder")}
-            </option>
-            {devices.map((device) => (
-              <option key={device.id} value={device.id}>
-                {device.hostname} ({tailnetAddress(device)})
-              </option>
-            ))}
-          </Select2>
-          <p className="text-[10px] text-muted-foreground">
-            {t("hosts.tailscaleDeviceAutoFill")}
-          </p>
-        </>
-      )}
-    </div>
-  );
-}
diff --git a/plugins/tailscale/src/frontend/TailscaleCheckDialog.tsx b/plugins/tailscale/src/frontend/TailscaleCheckDialog.tsx
deleted file mode 100644
index c6b1349e2..000000000
--- a/plugins/tailscale/src/frontend/TailscaleCheckDialog.tsx
+++ /dev/null
@@ -1,89 +0,0 @@
-import React from "react";
-import { Button } from "@termix/plugin-sdk/ui";
-import { Shield, ExternalLink, Loader2 } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-interface TailscaleCheckDialogProps {
-  isOpen: boolean;
-  authUrl: string;
-  message?: string;
-  stage: "prompt" | "waiting";
-  onCancel: () => void;
-  onOpenUrl: () => void;
-  backgroundColor?: string;
-}
-
-export function TailscaleCheckDialog({
-  isOpen,
-  authUrl,
-  message,
-  stage,
-  onCancel,
-  onOpenUrl,
-  backgroundColor,
-}: TailscaleCheckDialogProps) {
-  const { t } = useTranslation();
-
-  if (!isOpen) return null;
-
-  return (
-    <div className="absolute inset-0 flex items-center justify-center z-500 animate-in fade-in duration-200">
-      <div
-        className="absolute inset-0 bg-canvas rounded-md"
-        style={{ backgroundColor: backgroundColor || undefined }}
-      />
-      <div className="bg-card border border-border w-full max-w-md mx-4 relative z-10 animate-in fade-in zoom-in-95 duration-200">
-        <div className="p-4 border-b border-border">
-          <div className="flex items-center gap-2">
-            <Shield className="size-4 text-accent-brand" />
-            <h3 className="text-xs font-bold uppercase tracking-widest">
-              {t("terminal.tailscaleCheckRequired")}
-            </h3>
-          </div>
-          <p className="text-[10px] font-bold uppercase tracking-tight text-muted-foreground mt-1">
-            {t("terminal.tailscaleCheckDescription")}
-          </p>
-        </div>
-        <div className="p-4 flex flex-col gap-4">
-          {message && (
-            <p className="text-xs text-muted-foreground whitespace-pre-wrap break-words">
-              {message}
-            </p>
-          )}
-
-          {stage === "prompt" && authUrl && (
-            <Button
-              type="button"
-              variant="outline"
-              onClick={onOpenUrl}
-              className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 rounded-none text-[10px] font-bold uppercase tracking-widest w-full flex items-center gap-2"
-            >
-              <ExternalLink className="size-3.5" />
-              {t("terminal.tailscaleCheckOpenBrowser")}
-            </Button>
-          )}
-
-          {stage === "waiting" && (
-            <div className="flex items-center gap-3 py-2">
-              <Loader2 className="size-4 animate-spin text-accent-brand shrink-0" />
-              <p className="text-xs text-muted-foreground">
-                {t("terminal.tailscaleCheckWaiting")}
-              </p>
-            </div>
-          )}
-
-          <div className="flex justify-end">
-            <Button
-              type="button"
-              variant="ghost"
-              onClick={onCancel}
-              className="rounded-none text-[10px] font-bold uppercase tracking-widest"
-            >
-              {t("common.cancel")}
-            </Button>
-          </div>
-        </div>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/tailscale/src/frontend/TailscaleCheckOverlay.tsx b/plugins/tailscale/src/frontend/TailscaleCheckOverlay.tsx
deleted file mode 100644
index 4e7e6cadf..000000000
--- a/plugins/tailscale/src/frontend/TailscaleCheckOverlay.tsx
+++ /dev/null
@@ -1,112 +0,0 @@
-import { useEffect, useRef, useState } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-
-/** What the ssh-terminal plugin hands a "terminal.overlay" component. */
-interface TerminalOverlayProps {
-  host: { id: number | string; [key: string]: unknown } | undefined;
-  backgroundColor?: string;
-  subscribe: (
-    listener: (message: { type: string; [key: string]: unknown }) => void,
-  ) => () => void;
-  holdConnectTimeout: (held: boolean) => void;
-  fail: (message: string) => void;
-  disconnect: () => void;
-}
-import { TailscaleCheckDialog } from "./TailscaleCheckDialog";
-
-/** How long Tailscale may hold a connection open waiting on approval. */
-const CHECK_TIMEOUT_MS = 30 * 60 * 1000;
-
-interface CheckState {
-  authUrl: string;
-  message?: string;
-  stage: "prompt" | "waiting";
-}
-
-/**
- * Tailscale SSH can hold a connection open until the user approves it in a
- * browser. The terminal's server messages say when, and this pauses the
- * connect timeout and shows the approval link meanwhile.
- */
-export function TailscaleCheckOverlay({
-  subscribe,
-  holdConnectTimeout,
-  fail,
-  disconnect,
-  backgroundColor,
-}: TerminalOverlayProps) {
-  const { t } = useTranslation();
-  const [check, setCheck] = useState<CheckState | null>(null);
-  const timerRef = useRef<ReturnType<typeof setTimeout> | null>(null);
-  const heldRef = useRef(false);
-
-  useEffect(() => {
-    const release = () => {
-      if (timerRef.current) clearTimeout(timerRef.current);
-      timerRef.current = null;
-      if (heldRef.current) {
-        heldRef.current = false;
-        holdConnectTimeout(false);
-      }
-      setCheck(null);
-    };
-
-    const unsubscribe = subscribe((message) => {
-      if (message.type === "tailscale_check_required") {
-        if (!heldRef.current) {
-          heldRef.current = true;
-          holdConnectTimeout(true);
-        }
-        setCheck({
-          authUrl: typeof message.url === "string" ? message.url : "",
-          message:
-            typeof message.message === "string" ? message.message : undefined,
-          stage: "prompt",
-        });
-        if (timerRef.current) clearTimeout(timerRef.current);
-        timerRef.current = setTimeout(() => {
-          release();
-          fail(t("terminal.tailscaleCheckTimeout"));
-        }, CHECK_TIMEOUT_MS);
-      } else if (
-        message.type === "tailscale_check_completed" ||
-        message.type === "session_closed"
-      ) {
-        release();
-      }
-    });
-
-    return () => {
-      unsubscribe();
-      release();
-    };
-  }, [subscribe, holdConnectTimeout, fail, t]);
-
-  if (!check) return null;
-
-  return (
-    <TailscaleCheckDialog
-      isOpen
-      authUrl={check.authUrl}
-      message={check.message}
-      stage={check.stage}
-      onCancel={() => {
-        if (timerRef.current) clearTimeout(timerRef.current);
-        timerRef.current = null;
-        if (heldRef.current) {
-          heldRef.current = false;
-          holdConnectTimeout(false);
-        }
-        setCheck(null);
-        disconnect();
-      }}
-      onOpenUrl={() => {
-        window.open(check.authUrl, "_blank");
-        setCheck((current) =>
-          current ? { ...current, stage: "waiting" } : null,
-        );
-      }}
-      backgroundColor={backgroundColor}
-    />
-  );
-}
diff --git a/plugins/tailscale/src/frontend/TailscaleDevicesPanel.tsx b/plugins/tailscale/src/frontend/TailscaleDevicesPanel.tsx
deleted file mode 100644
index 7974999d9..000000000
--- a/plugins/tailscale/src/frontend/TailscaleDevicesPanel.tsx
+++ /dev/null
@@ -1,223 +0,0 @@
-import { useEffect, useState } from "react";
-import {
-  useToast,
-  useTranslation,
-  type HostDraft,
-} from "@termix/plugin-sdk/frontend";
-import { Copy, Loader2, Plus, RefreshCw, Terminal } from "lucide-react";
-import { Button } from "@termix/plugin-sdk/ui";
-import { Input } from "@termix/plugin-sdk/ui";
-import type { PluginHostRecord as Host } from "@termix/plugin-sdk/frontend";
-import { getTailscaleDevices } from "./tailscale-api";
-import { createQuickConnectHost } from "@termix/plugin-sdk/ui";
-
-interface TailscaleDevice {
-  id: string;
-  name: string;
-  hostname: string;
-  addresses: string[];
-  os: string;
-  lastSeen: string;
-}
-
-interface TailscaleDevicesPanelProps {
-  onConnect: (host: Host, type: "terminal") => void;
-  /** Absent when the shell cannot open the host editor. */
-  onAddHost?: (draft: HostDraft) => void;
-}
-
-function deviceIp(device: TailscaleDevice): string {
-  return (
-    device.addresses.find((a) => a.startsWith("100.")) ??
-    device.addresses[0] ??
-    ""
-  );
-}
-
-export function TailscaleDevicesPanel({
-  onConnect,
-  onAddHost,
-}: TailscaleDevicesPanelProps) {
-  const { t } = useTranslation();
-  const toast = useToast();
-  const [devices, setDevices] = useState<TailscaleDevice[]>([]);
-  const [hasApiKey, setHasApiKey] = useState(true);
-  const [loading, setLoading] = useState(true);
-  const [error, setError] = useState(false);
-  const [usernames, setUsernames] = useState<Record<string, string>>({});
-
-  function load() {
-    setLoading(true);
-    setError(false);
-    getTailscaleDevices()
-      .then((res) => {
-        setDevices(res.devices);
-        setHasApiKey(res.hasApiKey);
-      })
-      .catch(() => setError(true))
-      .finally(() => setLoading(false));
-  }
-
-  useEffect(load, []);
-
-  function usernameFor(device: TailscaleDevice): string {
-    return usernames[device.id]?.trim() || "root";
-  }
-
-  function copyIp(ip: string) {
-    navigator.clipboard
-      ?.writeText(ip)
-      .then(() => toast.success(t("hosts.tailscaleIpCopied")))
-      .catch(() => toast.error(t("hosts.tailscaleIpCopyFailed")));
-  }
-
-  function addHost(device: TailscaleDevice) {
-    const ip = deviceIp(device);
-    if (!ip || !onAddHost) return;
-    onAddHost({
-      name: device.hostname || device.name,
-      ip,
-      port: 22,
-      username: usernameFor(device),
-      authType: "tailscale",
-    });
-  }
-
-  function connect(device: TailscaleDevice) {
-    const ip = deviceIp(device);
-    if (!ip) return;
-    const username = usernameFor(device);
-    const host = createQuickConnectHost({
-      ip,
-      port: 22,
-      username,
-      authType: "tailscale",
-    }) as unknown as Host;
-    onConnect(host, "terminal");
-  }
-
-  return (
-    <div className="flex flex-col flex-1 min-h-0 overflow-y-auto">
-      <div className="flex items-center justify-between px-3 py-2 border-b border-border">
-        <span className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
-          {t("nav.tailscale")}
-        </span>
-        <Button
-          variant="ghost"
-          size="icon"
-          className="size-6 text-muted-foreground hover:text-foreground"
-          onClick={load}
-          disabled={loading}
-        >
-          <RefreshCw className={`size-3 ${loading ? "animate-spin" : ""}`} />
-        </Button>
-      </div>
-
-      <div className="flex flex-col gap-2 p-3">
-        {loading && (
-          <div className="flex items-center gap-2 text-[10px] text-muted-foreground">
-            <Loader2 className="size-3.5 animate-spin" />
-            {t("hosts.tailscaleLoadingDevices")}
-          </div>
-        )}
-
-        {!loading && !hasApiKey && (
-          <p className="text-[10px] text-muted-foreground">
-            {t("hosts.tailscaleNoApiKey")}
-          </p>
-        )}
-
-        {!loading && hasApiKey && error && (
-          <p className="text-[10px] text-muted-foreground">
-            {t("hosts.tailscaleDeviceLoadFailed")}
-          </p>
-        )}
-
-        {!loading && hasApiKey && !error && devices.length === 0 && (
-          <p className="text-[10px] text-muted-foreground">
-            {t("hosts.tailscaleNoDevices")}
-          </p>
-        )}
-
-        {!loading &&
-          hasApiKey &&
-          !error &&
-          devices.map((device) => {
-            const ip = deviceIp(device);
-            return (
-              <div
-                key={device.id}
-                className="flex flex-col gap-1.5 border border-border p-2"
-              >
-                <div className="flex items-start justify-between gap-2">
-                  <span className="text-xs font-semibold min-w-0 break-all">
-                    {device.hostname || device.name}
-                  </span>
-                  {device.os && (
-                    <span className="shrink-0 border border-border px-1 text-[10px] text-muted-foreground">
-                      {device.os}
-                    </span>
-                  )}
-                </div>
-                {ip && (
-                  <div className="flex items-center gap-1">
-                    <span className="text-[10px] text-muted-foreground font-mono">
-                      {ip}
-                    </span>
-                    <Button
-                      variant="ghost"
-                      size="icon"
-                      className="size-5 text-muted-foreground hover:text-foreground"
-                      title={t("hosts.tailscaleCopyIp")}
-                      aria-label={t("hosts.tailscaleCopyIp")}
-                      onClick={() => copyIp(ip)}
-                    >
-                      <Copy className="size-3" />
-                    </Button>
-                  </div>
-                )}
-                <Input
-                  placeholder={t("newUi.sidebar.quickConnect.usernameLabel")}
-                  value={usernames[device.id] ?? "root"}
-                  onChange={(e) =>
-                    setUsernames((prev) => ({
-                      ...prev,
-                      [device.id]: e.target.value,
-                    }))
-                  }
-                  onKeyDown={(e) => {
-                    if (e.key === "Enter") connect(device);
-                  }}
-                  className="h-7 text-xs"
-                />
-                <div className="flex gap-1.5">
-                  <Button
-                    onClick={() => connect(device)}
-                    disabled={!ip}
-                    className="flex flex-1 items-center justify-center gap-1.5 h-7 border border-accent-brand/40 bg-accent-brand/10 text-accent-brand text-xs font-semibold hover:bg-accent-brand/20 transition-colors"
-                    variant="outline"
-                  >
-                    <Terminal className="size-3.5" />
-                    {t("newUi.sidebar.quickConnect.connectToTerminal")}
-                  </Button>
-                  {onAddHost && (
-                    <Button
-                      onClick={() => addHost(device)}
-                      disabled={!ip}
-                      variant="outline"
-                      className="h-7 gap-1 text-xs shrink-0"
-                    >
-                      <Plus className="size-3.5" />
-                      {t("hosts.tailscaleAddHost")}
-                    </Button>
-                  )}
-                </div>
-              </div>
-            );
-          })}
-      </div>
-    </div>
-  );
-}
-
-export default TailscaleDevicesPanel;
diff --git a/plugins/tailscale/src/frontend/TailscaleDevicesStatus.tsx b/plugins/tailscale/src/frontend/TailscaleDevicesStatus.tsx
deleted file mode 100644
index adc245466..000000000
--- a/plugins/tailscale/src/frontend/TailscaleDevicesStatus.tsx
+++ /dev/null
@@ -1,86 +0,0 @@
-/**
- * The tailnet status shown on the Tailscale settings page.
- *
- * Confirms the saved key actually works, which is the question anyone has just
- * after entering one. Connecting to a device stays in the Tailscale rail panel;
- * a settings page is for configuring, not for operating.
- */
-
-import { useCallback, useEffect, useState } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Loader2, RefreshCw } from "lucide-react";
-import { Button } from "@termix/plugin-sdk/ui";
-import type { SettingsComponentProps } from "@termix/plugin-sdk/frontend";
-import { getTailscaleDevices } from "./tailscale-api";
-
-type Status =
-  | { kind: "loading" }
-  | { kind: "no-key" }
-  | { kind: "error" }
-  | { kind: "ok"; count: number };
-
-export function TailscaleDevicesStatus({ running }: SettingsComponentProps) {
-  const { t } = useTranslation();
-  const [status, setStatus] = useState<Status>({ kind: "loading" });
-
-  const load = useCallback(async () => {
-    if (!running) {
-      setStatus({ kind: "no-key" });
-      return;
-    }
-    setStatus({ kind: "loading" });
-    try {
-      const result = await getTailscaleDevices();
-      if (!result.hasApiKey) {
-        setStatus({ kind: "no-key" });
-        return;
-      }
-      if (result.error) {
-        setStatus({ kind: "error" });
-        return;
-      }
-      setStatus({ kind: "ok", count: result.devices?.length ?? 0 });
-    } catch {
-      setStatus({ kind: "error" });
-    }
-  }, [running]);
-
-  useEffect(() => {
-    void load();
-  }, [load]);
-
-  const label = (key: string) => t(key);
-
-  return (
-    <div className="flex flex-wrap items-center justify-between gap-3 py-3">
-      <div className="flex flex-col gap-0.5 min-w-0 flex-1">
-        <span className="text-sm font-medium leading-snug">
-          {label("settings.devices.label")}
-        </span>
-        <span className="text-xs text-muted-foreground leading-snug">
-          {status.kind === "loading" && label("settings.devices.checking")}
-          {status.kind === "no-key" && label("settings.devices.noKey")}
-          {status.kind === "error" && label("settings.devices.error")}
-          {status.kind === "ok" &&
-            t("settings.devices.count", {
-              count: status.count,
-            })}
-        </span>
-      </div>
-      <Button
-        variant="outline"
-        size="sm"
-        className="h-7 text-xs shrink-0"
-        disabled={!running || status.kind === "loading"}
-        onClick={() => void load()}
-      >
-        {status.kind === "loading" ? (
-          <Loader2 className="size-3 animate-spin" />
-        ) : (
-          <RefreshCw className="size-3" />
-        )}
-        <span className="ml-1.5">{label("settings.devices.refresh")}</span>
-      </Button>
-    </div>
-  );
-}
diff --git a/plugins/tailscale/src/frontend/TailscaleManagerCard.tsx b/plugins/tailscale/src/frontend/TailscaleManagerCard.tsx
deleted file mode 100644
index 8b6418e61..000000000
--- a/plugins/tailscale/src/frontend/TailscaleManagerCard.tsx
+++ /dev/null
@@ -1,161 +0,0 @@
-import { useState } from "react";
-import { Power } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { useTailscaleData, useTailscaleAction } from "./useTailscaleManager";
-import { ManagerCardShell, ManagerSearch } from "@termix/plugin-sdk/ui";
-
-interface TailscalePeer {
-  hostname: string;
-  tailscaleIPs: string[];
-  online: boolean;
-  isExitNode: boolean;
-}
-
-interface TailscaleData {
-  installed: boolean;
-  running: boolean;
-  tailscaleIPs: string[];
-  hostname: string | null;
-  peers: TailscalePeer[];
-  exitNodeInUse: boolean;
-}
-
-export function TailscaleManagerCard({ hostId }: { hostId: number | null }) {
-  const { t } = useTranslation();
-  const { data, loading, error, refresh } =
-    useTailscaleData<TailscaleData>(hostId);
-  const { busy, run } = useTailscaleAction(hostId);
-  const [query, setQuery] = useState("");
-
-  const handleToggle = async () => {
-    if (!data) return;
-    const action = data.running ? "down" : "up";
-    await run(action, {
-      loadingMsg: data.running
-        ? t("manager.tsDisabling")
-        : t("manager.tsEnabling"),
-      successMsg: data.running
-        ? t("manager.tsDisabled")
-        : t("manager.tsEnabled"),
-      onDone: refresh,
-    });
-  };
-
-  const filteredPeers = (data?.peers ?? []).filter(
-    (p) =>
-      !query ||
-      p.hostname.toLowerCase().includes(query.toLowerCase()) ||
-      p.tailscaleIPs.some((ip) => ip.includes(query)),
-  );
-
-  const isNotInstalled = data && !data.installed;
-
-  return (
-    <ManagerCardShell
-      title={t("manager.title")}
-      icon={<Power className="size-3.5" />}
-      loading={loading}
-      error={error}
-      onRefresh={refresh}
-      empty={!!isNotInstalled}
-      emptyMessage={t("manager.tsNotInstalled")}
-    >
-      {data && (
-        <div className="flex flex-col">
-          {/* Status + toggle row */}
-          <div className="flex items-center justify-between border-b border-border/50 py-1.5">
-            <div className="flex min-w-0 items-center gap-2">
-              <span
-                className={`size-1.5 shrink-0 rounded-full ${data.running ? "bg-accent-brand" : "bg-muted-foreground/40"}`}
-              />
-              <div className="flex min-w-0 flex-col">
-                <span className="text-xs font-semibold">
-                  {data.running
-                    ? t("manager.tsRunning")
-                    : t("manager.tsStopped")}
-                </span>
-                {data.hostname && (
-                  <span className="truncate font-mono text-[10px] text-muted-foreground">
-                    {data.hostname}
-                  </span>
-                )}
-                {data.tailscaleIPs.map((ip) => (
-                  <span
-                    key={ip}
-                    className="truncate font-mono text-[10px] text-muted-foreground/60"
-                  >
-                    {ip}
-                  </span>
-                ))}
-              </div>
-            </div>
-            <div className="flex shrink-0 items-center">
-              <button
-                onClick={handleToggle}
-                disabled={busy || !data.installed}
-                title={
-                  data.running ? t("manager.tsDisable") : t("manager.tsEnable")
-                }
-                className={`flex size-6 items-center justify-center transition-colors disabled:opacity-40 ${
-                  data.running
-                    ? "text-accent-brand hover:bg-muted hover:text-destructive"
-                    : "text-muted-foreground hover:bg-muted hover:text-accent-brand"
-                }`}
-              >
-                <Power className="size-3.5" />
-              </button>
-            </div>
-          </div>
-
-          {/* Exit node badge */}
-          {data.exitNodeInUse && (
-            <div className="border-b border-border/50 px-0 py-1.5">
-              <span className="text-[10px] text-blue-500">
-                {t("manager.tsExitNodeActive")}
-              </span>
-            </div>
-          )}
-
-          {/* Peers */}
-          {(data.peers?.length ?? 0) > 5 && (
-            <ManagerSearch
-              value={query}
-              onChange={setQuery}
-              count={filteredPeers.length}
-            />
-          )}
-          {filteredPeers.map((peer) => (
-            <div
-              key={peer.hostname}
-              className="flex items-center justify-between gap-2 border-b border-border/50 py-1.5 last:border-0"
-            >
-              <div className="flex min-w-0 items-center gap-2">
-                <span
-                  className={`size-1.5 shrink-0 rounded-full ${peer.online ? "bg-accent-brand" : "bg-muted-foreground/40"}`}
-                />
-                <div className="flex min-w-0 flex-col">
-                  <span className="truncate text-xs font-semibold">
-                    {peer.hostname}
-                  </span>
-                  {peer.tailscaleIPs.map((ip) => (
-                    <span
-                      key={ip}
-                      className="truncate font-mono text-[10px] text-muted-foreground"
-                    >
-                      {ip}
-                    </span>
-                  ))}
-                </div>
-              </div>
-              {peer.isExitNode && (
-                <span className="shrink-0 text-[10px] text-blue-500">
-                  {t("manager.tsExitNode")}
-                </span>
-              )}
-            </div>
-          ))}
-        </div>
-      )}
-    </ManagerCardShell>
-  );
-}
diff --git a/plugins/tailscale/src/frontend/index.tsx b/plugins/tailscale/src/frontend/index.tsx
deleted file mode 100644
index 602d392ef..000000000
--- a/plugins/tailscale/src/frontend/index.tsx
+++ /dev/null
@@ -1,71 +0,0 @@
-import type { ComponentType } from "react";
-import { Radar } from "lucide-react";
-import type { PanelProps, TermixApp } from "@termix/plugin-sdk/frontend";
-import type { PluginHostRecord as Host } from "@termix/plugin-sdk/frontend";
-import { TailscaleDevicesPanel } from "./TailscaleDevicesPanel";
-import { setTailscaleApi } from "./tailscale-api";
-import { TailscaleDevicesStatus } from "./TailscaleDevicesStatus";
-import { TailscaleAuthEditor } from "./TailscaleAuthEditor";
-import { TailscaleCheckOverlay } from "./TailscaleCheckOverlay";
-import { TailscaleManagerCard } from "./TailscaleManagerCard";
-
-function Panel({ shell }: PanelProps) {
-  return (
-    <TailscaleDevicesPanel
-      onConnect={(host: Host, type) =>
-        shell.openTab(
-          host as unknown as Parameters<typeof shell.openTab>[0],
-          type,
-        )
-      }
-      onAddHost={
-        shell.openHostEditor
-          ? (draft) => shell.openHostEditor!(draft)
-          : undefined
-      }
-    />
-  );
-}
-
-export function activate(app: TermixApp): void {
-  setTailscaleApi(app.api);
-  app.onDispose(() => setTailscaleApi(null));
-  app.registerRailItem({
-    id: "tailscale",
-    icon: Radar,
-    titleKey: "nav.tailscale",
-    after: "macros",
-    order: 20,
-  });
-  app.registerPanel("tailscale", Panel);
-
-  app.registerSettingsComponent("devices", TailscaleDevicesStatus);
-
-  // "tailscale" as a host's SSH auth method: pick a device from the tailnet.
-  app.registerSshAuthEditor({
-    authType: "tailscale",
-    titleKey: "nav.tailscale",
-    hintKey: "hosts.tailscaleUsernameHint",
-    component: TailscaleAuthEditor,
-  });
-
-  // Approval prompts while Tailscale SSH holds a connection open.
-  app.registerSlotContribution("terminal.overlay", {
-    actionId: "tailscale.check",
-    titleKey: "terminal.tailscaleCheckRequired",
-    kind: "component",
-    component: TailscaleCheckOverlay as unknown as ComponentType<
-      Record<string, unknown>
-    >,
-  });
-
-  // The Host Metrics manager card, present only when host-metrics is running.
-  app.registerSlotContribution("host-metrics.managers", {
-    actionId: "tailscale_manager",
-    titleKey: "manager.title",
-    kind: "component",
-    component: TailscaleManagerCard as unknown as ComponentType<
-      Record<string, unknown>
-    >,
-  });
-}
diff --git a/plugins/tailscale/src/frontend/tailscale-api.ts b/plugins/tailscale/src/frontend/tailscale-api.ts
deleted file mode 100644
index f1ab6816d..000000000
--- a/plugins/tailscale/src/frontend/tailscale-api.ts
+++ /dev/null
@@ -1,46 +0,0 @@
-// The API key and base URL are this plugin's own settings, read and written
-// through the generic /plugins/tailscale/settings/admin routes that core
-// renders from the manifest. Only the device list is left here, because it is
-// this plugin's own route.
-
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-
-export interface TailscaleDevicesResponse {
-  devices: Array<{
-    id: string;
-    name: string;
-    hostname: string;
-    addresses: string[];
-    os: string;
-    lastSeen: string;
-  }>;
-  hasApiKey: boolean;
-  error?: string;
-}
-
-let pluginApi: PluginApiClient | null = null;
-
-/** Set from activate with app.api, cleared on deactivate. */
-export function setTailscaleApi(api: PluginApiClient | null): void {
-  pluginApi = api;
-}
-
-export async function getTailscaleDevices(): Promise<TailscaleDevicesResponse> {
-  if (!pluginApi) throw new Error("The Tailscale plugin is not active");
-  try {
-    const response = await pluginApi.get<TailscaleDevicesResponse>("/devices");
-    return response.data;
-  } catch (error) {
-    // The route answers with the key state even when the tailnet call fails.
-    const data = (error as { response?: { data?: unknown } })?.response?.data;
-    if (
-      data &&
-      typeof data === "object" &&
-      "hasApiKey" in data &&
-      typeof (data as { hasApiKey: unknown }).hasApiKey === "boolean"
-    ) {
-      return data as TailscaleDevicesResponse;
-    }
-    throw error;
-  }
-}
diff --git a/plugins/tailscale/src/frontend/useTailscaleManager.ts b/plugins/tailscale/src/frontend/useTailscaleManager.ts
deleted file mode 100644
index ed91def18..000000000
--- a/plugins/tailscale/src/frontend/useTailscaleManager.ts
+++ /dev/null
@@ -1,105 +0,0 @@
-import { useCallback, useEffect, useState } from "react";
-import { toast } from "sonner";
-import { usePluginApi } from "@termix/plugin-sdk/frontend";
-
-export interface ManagerError {
-  message: string;
-  code?: string;
-}
-
-function extractError(err: unknown): ManagerError {
-  const e = err as {
-    response?: { data?: { error?: string; code?: string } };
-    message?: string;
-  };
-  return {
-    message: e?.response?.data?.error || e?.message || "Request failed",
-    code: e?.response?.data?.code,
-  };
-}
-
-/** Fetch the Tailscale manager card's status on mount + manual refresh. */
-export function useTailscaleData<T>(hostId: number | null) {
-  const api = usePluginApi();
-  const [data, setData] = useState<T | null>(null);
-  const [loading, setLoading] = useState(false);
-  const [error, setError] = useState<ManagerError | null>(null);
-
-  const refresh = useCallback(async () => {
-    if (hostId == null) return;
-    setLoading(true);
-    setError(null);
-    try {
-      const res = await api.get<T>(`/host-metrics-manager/${hostId}`);
-      setData(res.data);
-    } catch (err) {
-      setError(extractError(err));
-    } finally {
-      setLoading(false);
-    }
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [hostId]);
-
-  useEffect(() => {
-    refresh();
-  }, [refresh]);
-
-  return { data, loading, error, refresh };
-}
-
-interface ActionResult {
-  success: boolean;
-  output?: string;
-}
-
-/** Runs the Tailscale manager card's up/down action with toast feedback. */
-export function useTailscaleAction(hostId: number | null) {
-  const api = usePluginApi();
-  const [busy, setBusy] = useState(false);
-
-  const run = useCallback(
-    async (
-      action: "up" | "down",
-      opts: {
-        loadingMsg?: string;
-        successMsg?: string;
-        failMsg?: string;
-        onDone?: () => void;
-      } = {},
-    ): Promise<ActionResult | null> => {
-      if (hostId == null) return null;
-      const id = `tailscale-manager-${hostId}`;
-      setBusy(true);
-      if (opts.loadingMsg) toast.loading(opts.loadingMsg, { id });
-      try {
-        const res = await api.post<ActionResult>(
-          `/host-metrics-manager/${hostId}/action`,
-          { action },
-        );
-        if (res.data.success) {
-          if (opts.successMsg)
-            toast.success(opts.successMsg, {
-              id,
-              description: res.data.output?.slice(-200),
-            });
-          else toast.dismiss(id);
-          opts.onDone?.();
-        } else {
-          toast.error(opts.failMsg ?? res.data.output ?? "Action failed", {
-            id,
-            description: res.data.output?.slice(-200),
-          });
-        }
-        return res.data;
-      } catch (err) {
-        toast.error(extractError(err).message, { id });
-        return null;
-      } finally {
-        setBusy(false);
-      }
-    },
-    [hostId],
-  );
-
-  return { busy, run };
-}
diff --git a/plugins/tailscale/tests/backend/host-metrics-manager.test.ts b/plugins/tailscale/tests/backend/host-metrics-manager.test.ts
deleted file mode 100644
index ea4210f8e..000000000
--- a/plugins/tailscale/tests/backend/host-metrics-manager.test.ts
+++ /dev/null
@@ -1,55 +0,0 @@
-import { describe, it, expect } from "vitest";
-import { parseTailscaleData } from "../../src/backend/host-metrics-manager.js";
-
-describe("parseTailscaleData", () => {
-  it("reports not installed when the probe finds no binary", () => {
-    const result = parseTailscaleData("ts_installed=0\n");
-    expect(result.installed).toBe(false);
-    expect(result.running).toBe(false);
-  });
-
-  it("parses a running tailscale status", () => {
-    const status = JSON.stringify({
-      BackendState: "Running",
-      Self: { HostName: "my-server", TailscaleIPs: ["100.1.2.3"] },
-      Peer: {
-        abc: {
-          HostName: "peer-1",
-          TailscaleIPs: ["100.1.2.4"],
-          Online: true,
-          ExitNode: false,
-        },
-      },
-      CurrentExitNode: "",
-    });
-    const result = parseTailscaleData(`ts_installed=1\n${status}`);
-
-    expect(result.installed).toBe(true);
-    expect(result.running).toBe(true);
-    expect(result.hostname).toBe("my-server");
-    expect(result.tailscaleIPs).toEqual(["100.1.2.3"]);
-    expect(result.peers).toHaveLength(1);
-    expect(result.peers[0]).toMatchObject({
-      hostname: "peer-1",
-      online: true,
-    });
-    expect(result.exitNodeInUse).toBe(false);
-  });
-
-  it("reports installed but not running on malformed JSON", () => {
-    const result = parseTailscaleData("ts_installed=1\nnot json");
-    expect(result.installed).toBe(true);
-    expect(result.running).toBe(false);
-  });
-
-  it("detects an active exit node", () => {
-    const status = JSON.stringify({
-      BackendState: "Running",
-      Self: {},
-      Peer: {},
-      CurrentExitNode: "abc123",
-    });
-    const result = parseTailscaleData(`ts_installed=1\n${status}`);
-    expect(result.exitNodeInUse).toBe(true);
-  });
-});
diff --git a/plugins/tailscale/tests/backend/permissions.test.ts b/plugins/tailscale/tests/backend/permissions.test.ts
deleted file mode 100644
index d697d3c5b..000000000
--- a/plugins/tailscale/tests/backend/permissions.test.ts
+++ /dev/null
@@ -1,54 +0,0 @@
-import { describe, it, expect } from "vitest";
-import fs from "node:fs";
-import path from "node:path";
-import { parseManifest, qualifyPermission } from "@termix/plugin-sdk/manifest";
-
-/**
- * The permission ids an admin grants.
- *
- * Core registers each declared name as `<pluginId>.<name>`, so these strings
- * are what end up stored in a role. They have to keep matching what tailscale
- * shipped before the permissions moved out of the core catalog, or every role
- * holding one would silently stop working.
- */
-const EXPECTED = ["tailscale.devices.view"];
-
-describe("tailscale permissions", () => {
-  const manifest = parseManifest(
-    JSON.parse(
-      fs.readFileSync(
-        path.resolve(import.meta.dirname, "../../manifest.json"),
-        "utf8",
-      ),
-    ),
-  );
-
-  it("parses cleanly", () => {
-    expect(manifest.errors).toEqual([]);
-  });
-
-  it("registers exactly the ids roles already hold", () => {
-    const ids = (manifest.manifest?.contributes?.permissions ?? []).map(
-      (permission) => qualifyPermission("tailscale", permission.name),
-    );
-
-    expect(ids).toEqual(EXPECTED);
-  });
-
-  it("declares a title and description for every permission", () => {
-    for (const permission of manifest.manifest?.contributes?.permissions ??
-      []) {
-      expect(permission.titleKey).toBeTruthy();
-      expect(permission.descriptionKey).toBeTruthy();
-    }
-  });
-
-  // The device list is a full tailnet inventory, so only admins get it by
-  // default; everyone else needs an explicit grant.
-  it("grants devices.view to admins by default", () => {
-    const devicesView = manifest.manifest?.contributes?.permissions?.find(
-      (permission) => permission.name === "devices.view",
-    );
-    expect(devicesView?.defaultRoles).toEqual(["admin"]);
-  });
-});
diff --git a/plugins/tailscale/tests/backend/settings.test.ts b/plugins/tailscale/tests/backend/settings.test.ts
deleted file mode 100644
index 4645e400a..000000000
--- a/plugins/tailscale/tests/backend/settings.test.ts
+++ /dev/null
@@ -1,88 +0,0 @@
-import { describe, it, expect } from "vitest";
-import fs from "node:fs";
-import path from "node:path";
-import { parseManifest } from "@termix/plugin-sdk/manifest";
-import { createMockCtx } from "@termix/plugin-sdk/testing";
-
-/**
- * The API key and base URL are this plugin's own settings now.
- *
- * They used to live in the core `settings` table behind a core route that
- * existed only for this plugin, with the key stored in plaintext. These tests
- * pin the shape core renders the page from, and that reading a plugin's own
- * settings needs no capability.
- */
-const manifest = parseManifest(
-  JSON.parse(
-    fs.readFileSync(
-      path.resolve(import.meta.dirname, "../../manifest.json"),
-      "utf8",
-    ),
-  ),
-);
-
-describe("tailscale settings contribution", () => {
-  it("parses cleanly", () => {
-    expect(manifest.errors).toEqual([]);
-  });
-
-  it("declares the API key as a secret, so it is encrypted and redacted", () => {
-    const apiKey = manifest.manifest?.contributes?.settings?.admin?.find(
-      (field) => field.key === "apiKey",
-    );
-
-    expect(apiKey?.type).toBe("secret");
-  });
-
-  it("declares the base URL as plain text, because it is not a secret", () => {
-    const baseUrl = manifest.manifest?.contributes?.settings?.admin?.find(
-      (field) => field.key === "apiBaseUrl",
-    );
-
-    expect(baseUrl?.type).toBe("string");
-    expect(baseUrl?.default).toBe("");
-  });
-
-  it("puts both fields on the admin scope, not the user one", () => {
-    const settings = manifest.manifest?.contributes?.settings;
-
-    expect(settings?.admin?.map((field) => field.key)).toContain("apiKey");
-    expect(settings?.user).toBeUndefined();
-  });
-
-  it("keeps settings:read-core, which it still holds for core keys", () => {
-    expect(manifest.manifest?.capabilities).toContain("settings:read-core");
-  });
-});
-
-describe("reading its own settings", () => {
-  it("needs no capability", async () => {
-    // Nothing granted at all: a plugin reading its own configuration must not
-    // have to declare anything for it.
-    const { ctx } = createMockCtx({
-      pluginId: "tailscale",
-      capabilities: [],
-      settings: { apiKey: "tskey-api-test", apiBaseUrl: "" },
-    });
-
-    await expect(ctx.settings.get("apiKey")).resolves.toBe("tskey-api-test");
-  });
-
-  it("can write and read a value back", async () => {
-    const { ctx } = createMockCtx({ pluginId: "tailscale", capabilities: [] });
-
-    await ctx.settings.set("apiBaseUrl", "https://headscale.example");
-
-    await expect(ctx.settings.get("apiBaseUrl")).resolves.toBe(
-      "https://headscale.example",
-    );
-  });
-
-  it("still needs settings:read-core to reach a core key", async () => {
-    const { ctx } = createMockCtx({ pluginId: "tailscale", capabilities: [] });
-
-    await expect(ctx.settings.readCore("app_name")).rejects.toThrow(
-      /settings:read-core/,
-    );
-  });
-});
diff --git a/plugins/tailscale/tests/backend/ssh-auth-provider.test.ts b/plugins/tailscale/tests/backend/ssh-auth-provider.test.ts
deleted file mode 100644
index e9f2fce0f..000000000
--- a/plugins/tailscale/tests/backend/ssh-auth-provider.test.ts
+++ /dev/null
@@ -1,181 +0,0 @@
-import { describe, it, expect } from "vitest";
-import { createFakeContext } from "@termix/plugin-sdk/testing";
-import { registerTailscaleSshAuth } from "../../src/backend/ssh-auth-provider.js";
-import { TAILSCALE_CHECK_TIMEOUT_MS } from "../../src/backend/tailscale-check.js";
-
-function register() {
-  const { ctx, auth } = createFakeContext({ pluginId: "tailscale" });
-  registerTailscaleSshAuth(ctx);
-  return auth.sshAuthProviders.find(
-    (provider) => provider.type === "tailscale",
-  )!;
-}
-
-describe("tailscale SSH auth provider", () => {
-  it("registers as type tailscale", () => {
-    expect(register()).toBeTruthy();
-  });
-
-  it("turns off keyboard-interactive, with a long timeout for the terminal", () => {
-    const provider = register();
-    const terminal = provider.connectOptions?.(
-      { id: 1, ip: "100.1.1.1", port: 22, username: "root" },
-      "terminal",
-    );
-    expect(terminal).toMatchObject({
-      tryKeyboard: false,
-      readyTimeout: TAILSCALE_CHECK_TIMEOUT_MS,
-      timeout: TAILSCALE_CHECK_TIMEOUT_MS,
-    });
-
-    const fleet = provider.connectOptions?.(
-      { id: 1, ip: "100.1.1.1", port: 22, username: "root" },
-      "fleet",
-    );
-    expect(fleet).toEqual({ tryKeyboard: false });
-  });
-
-  it("prepare always reports ready", async () => {
-    const provider = register();
-    const outcome = await provider.prepare(
-      {},
-      { id: 1, ip: "100.1.1.1", port: 22, username: "root" },
-      {
-        client: {},
-        userId: "u1",
-        hostId: 1,
-        purpose: "terminal",
-        interactive: true,
-        log: () => {},
-      },
-    );
-    expect(outcome).toEqual({ status: "ready" });
-  });
-
-  describe("onBanner", () => {
-    it("holds the connection when the banner carries a check URL", () => {
-      const provider = register();
-      const decision = provider.onBanner?.(
-        "# Tailscale SSH requires an additional check.\n# To authenticate, visit: https://login.tailscale.com/a/abc123\n",
-        { id: 1, ip: "100.1.1.1", port: 22, username: "root" },
-        {
-          client: {},
-          userId: "u1",
-          hostId: 1,
-          purpose: "terminal",
-          interactive: true,
-          log: () => {},
-        },
-      );
-      expect(decision).toMatchObject({
-        action: "hold",
-        details: { url: "https://login.tailscale.com/a/abc123" },
-      });
-    });
-
-    it("releases the hold on the completion banner", () => {
-      const provider = register();
-      const decision = provider.onBanner?.(
-        "Authentication checked with Tailscale SSH.",
-        { id: 1, ip: "100.1.1.1", port: 22, username: "root" },
-        {
-          client: {},
-          userId: "u1",
-          hostId: 1,
-          purpose: "terminal",
-          interactive: true,
-          log: () => {},
-        },
-      );
-      expect(decision).toEqual({ action: "release" });
-    });
-
-    it("ignores an ordinary MOTD banner", () => {
-      const provider = register();
-      const decision = provider.onBanner?.(
-        "Welcome to Ubuntu 24.04 LTS\n",
-        { id: 1, ip: "100.1.1.1", port: 22, username: "root" },
-        {
-          client: {},
-          userId: "u1",
-          hostId: 1,
-          purpose: "terminal",
-          interactive: true,
-          log: () => {},
-        },
-      );
-      expect(decision).toBeUndefined();
-    });
-  });
-
-  describe("onAuthFailed", () => {
-    it("retries once in forced password mode", () => {
-      const provider = register();
-      const outcome = provider.onAuthFailed?.(
-        { id: 1, ip: "100.1.1.1", port: 22, username: "root" },
-        {
-          client: {},
-          userId: "u1",
-          hostId: 1,
-          purpose: "terminal",
-          interactive: true,
-          log: () => {},
-        },
-        {
-          error: new Error("All configured authentication methods failed"),
-          retries: 0,
-          canRetry: true,
-          methodNotAvailable: false,
-        },
-      );
-      expect(outcome).toMatchObject({
-        status: "retry",
-        patch: { username: "root+password" },
-      });
-    });
-
-    it("fails after a retry has already happened", () => {
-      const provider = register();
-      const outcome = provider.onAuthFailed?.(
-        { id: 1, ip: "100.1.1.1", port: 22, username: "root" },
-        {
-          client: {},
-          userId: "u1",
-          hostId: 1,
-          purpose: "terminal",
-          interactive: true,
-          log: () => {},
-        },
-        {
-          error: new Error("All configured authentication methods failed"),
-          retries: 1,
-          canRetry: true,
-          methodNotAvailable: false,
-        },
-      );
-      expect(outcome).toMatchObject({ status: "error", code: "failed" });
-    });
-
-    it("does nothing for an unrelated failure", () => {
-      const provider = register();
-      const outcome = provider.onAuthFailed?.(
-        { id: 1, ip: "100.1.1.1", port: 22, username: "root" },
-        {
-          client: {},
-          userId: "u1",
-          hostId: 1,
-          purpose: "terminal",
-          interactive: true,
-          log: () => {},
-        },
-        {
-          error: new Error("connection reset"),
-          retries: 0,
-          canRetry: true,
-          methodNotAvailable: false,
-        },
-      );
-      expect(outcome).toBeUndefined();
-    });
-  });
-});
diff --git a/plugins/tailscale/tests/backend/tailscale-check.test.ts b/plugins/tailscale/tests/backend/tailscale-check.test.ts
deleted file mode 100644
index 218b802f3..000000000
--- a/plugins/tailscale/tests/backend/tailscale-check.test.ts
+++ /dev/null
@@ -1,76 +0,0 @@
-import { describe, it, expect } from "vitest";
-import {
-  parseTailscaleCheckBanner,
-  isTailscaleCheckCompleteBanner,
-} from "../../src/backend/tailscale-check.js";
-
-describe("parseTailscaleCheckBanner", () => {
-  it("extracts the login URL from a real check-mode banner", () => {
-    const banner =
-      "# Tailscale SSH requires an additional check.\n# To authenticate, visit: https://login.tailscale.com/a/lefcb2f3377403\n";
-
-    const result = parseTailscaleCheckBanner(banner);
-
-    expect(result).not.toBeNull();
-    expect(result?.url).toBe("https://login.tailscale.com/a/lefcb2f3377403");
-  });
-
-  it("strips comment markers from the message it returns", () => {
-    const banner =
-      "# Tailscale SSH requires an additional check.\n# To authenticate, visit: https://login.tailscale.com/a/abc123\n";
-
-    const result = parseTailscaleCheckBanner(banner);
-
-    expect(result?.message).toBe(
-      "Tailscale SSH requires an additional check.\nTo authenticate, visit: https://login.tailscale.com/a/abc123",
-    );
-  });
-
-  it("returns null for an ordinary MOTD banner", () => {
-    const banner =
-      "Welcome to Ubuntu 24.04 LTS\nLast login: Tue Aug 5 09:12:03 2026\n";
-
-    expect(parseTailscaleCheckBanner(banner)).toBeNull();
-  });
-
-  it("returns null for a lookalike URL on another host", () => {
-    const banner =
-      "# To authenticate, visit: https://login.tailscale.com.evil.example/a/abc123\n";
-
-    expect(parseTailscaleCheckBanner(banner)).toBeNull();
-  });
-
-  it("returns null for empty input", () => {
-    expect(parseTailscaleCheckBanner("")).toBeNull();
-  });
-});
-
-describe("isTailscaleCheckCompleteBanner", () => {
-  it("recognises the completion banner", () => {
-    expect(
-      isTailscaleCheckCompleteBanner(
-        "# Authentication checked with Tailscale SSH.",
-      ),
-    ).toBe(true);
-  });
-
-  it("recognises the completion banner with a time suffix", () => {
-    expect(
-      isTailscaleCheckCompleteBanner(
-        "Authentication checked with Tailscale SSH. Time since last authentication: 0s",
-      ),
-    ).toBe(true);
-  });
-
-  it("does not match the check-required banner", () => {
-    expect(
-      isTailscaleCheckCompleteBanner(
-        "# Tailscale SSH requires an additional check.",
-      ),
-    ).toBe(false);
-  });
-
-  it("does not match empty input", () => {
-    expect(isTailscaleCheckCompleteBanner("")).toBe(false);
-  });
-});
diff --git a/plugins/tailscale/tests/frontend/TailscaleDevicesPanel.test.tsx b/plugins/tailscale/tests/frontend/TailscaleDevicesPanel.test.tsx
deleted file mode 100644
index 8771ffea0..000000000
--- a/plugins/tailscale/tests/frontend/TailscaleDevicesPanel.test.tsx
+++ /dev/null
@@ -1,148 +0,0 @@
-import { describe, expect, it, vi, beforeEach } from "vitest";
-import { render, screen, waitFor } from "@testing-library/react";
-import userEvent from "@testing-library/user-event";
-
-const getTailscaleDevicesMock = vi.hoisted(() => vi.fn());
-
-vi.mock("../../src/frontend/tailscale-api", () => ({
-  getTailscaleDevices: getTailscaleDevicesMock,
-}));
-
-vi.mock("react-i18next", async (importOriginal) => ({
-  ...(await importOriginal<object>()),
-  useTranslation: () => ({ t: (key: string) => key }),
-}));
-
-import { TailscaleDevicesPanel } from "../../src/frontend/TailscaleDevicesPanel";
-
-beforeEach(() => {
-  vi.clearAllMocks();
-});
-
-describe("TailscaleDevicesPanel", () => {
-  it("shows the no-api-key message when hasApiKey is false", async () => {
-    getTailscaleDevicesMock.mockResolvedValue({
-      devices: [],
-      hasApiKey: false,
-    });
-
-    render(<TailscaleDevicesPanel onConnect={vi.fn()} />);
-
-    await waitFor(() =>
-      expect(screen.getByText("hosts.tailscaleNoApiKey")).toBeTruthy(),
-    );
-  });
-
-  it("shows the empty-devices message when the tailnet has no devices", async () => {
-    getTailscaleDevicesMock.mockResolvedValue({ devices: [], hasApiKey: true });
-
-    render(<TailscaleDevicesPanel onConnect={vi.fn()} />);
-
-    await waitFor(() =>
-      expect(screen.getByText("hosts.tailscaleNoDevices")).toBeTruthy(),
-    );
-  });
-
-  it("renders devices and connects with an ephemeral tailscale host", async () => {
-    const user = userEvent.setup();
-    getTailscaleDevicesMock.mockResolvedValue({
-      hasApiKey: true,
-      devices: [
-        {
-          id: "d1",
-          name: "box",
-          hostname: "box",
-          addresses: ["100.64.0.1"],
-          os: "linux",
-          lastSeen: "2026-01-01T00:00:00Z",
-        },
-      ],
-    });
-
-    const onConnect = vi.fn();
-    render(<TailscaleDevicesPanel onConnect={onConnect} />);
-
-    await waitFor(() => expect(screen.getByText("box")).toBeTruthy());
-    await user.click(
-      screen.getByText("newUi.sidebar.quickConnect.connectToTerminal"),
-    );
-
-    expect(onConnect).toHaveBeenCalledOnce();
-    const [host, type] = onConnect.mock.calls[0];
-    expect(type).toBe("terminal");
-    expect(host.ip).toBe("100.64.0.1");
-    expect(host.authType).toBe("tailscale");
-    expect(host.username).toBe("root");
-  });
-
-  const device = {
-    id: "d1",
-    name: "box.tailnet.ts.net",
-    hostname: "box",
-    addresses: ["100.64.0.1", "fd7a::1"],
-    os: "linux",
-    lastSeen: "2026-01-01T00:00:00Z",
-  };
-
-  it("opens the host editor with the device filled in", async () => {
-    const user = userEvent.setup();
-    getTailscaleDevicesMock.mockResolvedValue({
-      hasApiKey: true,
-      devices: [device],
-    });
-
-    const onAddHost = vi.fn();
-    render(<TailscaleDevicesPanel onConnect={vi.fn()} onAddHost={onAddHost} />);
-
-    await waitFor(() => expect(screen.getByText("box")).toBeTruthy());
-    await user.clear(
-      screen.getByPlaceholderText("newUi.sidebar.quickConnect.usernameLabel"),
-    );
-    await user.type(
-      screen.getByPlaceholderText("newUi.sidebar.quickConnect.usernameLabel"),
-      "luke",
-    );
-    await user.click(screen.getByText("hosts.tailscaleAddHost"));
-
-    expect(onAddHost).toHaveBeenCalledWith({
-      name: "box",
-      ip: "100.64.0.1",
-      port: 22,
-      username: "luke",
-      authType: "tailscale",
-    });
-  });
-
-  it("hides Add host when the shell cannot open the editor", async () => {
-    getTailscaleDevicesMock.mockResolvedValue({
-      hasApiKey: true,
-      devices: [device],
-    });
-
-    render(<TailscaleDevicesPanel onConnect={vi.fn()} />);
-
-    await waitFor(() => expect(screen.getByText("box")).toBeTruthy());
-    expect(screen.queryByText("hosts.tailscaleAddHost")).toBeNull();
-  });
-
-  it("copies the tailnet IP", async () => {
-    const user = userEvent.setup();
-    const writeText = vi.fn().mockResolvedValue(undefined);
-    Object.defineProperty(navigator, "clipboard", {
-      value: { writeText },
-      configurable: true,
-    });
-    getTailscaleDevicesMock.mockResolvedValue({
-      hasApiKey: true,
-      devices: [device],
-    });
-
-    render(<TailscaleDevicesPanel onConnect={vi.fn()} />);
-
-    await waitFor(() => expect(screen.getByText("box")).toBeTruthy());
-    expect(screen.getByText("linux")).toBeTruthy();
-    await user.click(screen.getByLabelText("hosts.tailscaleCopyIp"));
-
-    expect(writeText).toHaveBeenCalledWith("100.64.0.1");
-  });
-});
diff --git a/plugins/tailscale/tests/frontend/activate.test.tsx b/plugins/tailscale/tests/frontend/activate.test.tsx
deleted file mode 100644
index 814097280..000000000
--- a/plugins/tailscale/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,53 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-const declared = (views?: Array<{ id: string }>) =>
-  (views ?? []).map((view) => view.id).sort();
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe(`${manifest.id} activate`, () => {
-  it("activates and registers only views its manifest declares", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    const contributes = manifest.contributes as unknown as Record<
-      string,
-      Array<{ id: string }> | undefined
-    >;
-    const tabs = declared(contributes.tabs);
-    // A rail panel may reuse one of the plugin's tab ids.
-    const panels = [...declared(contributes.panels), ...tabs];
-    const cards = declared(contributes.dashboardCards);
-    for (const id of rendered.registered.tabs()) expect(tabs).toContain(id);
-    for (const id of rendered.registered.panels()) expect(panels).toContain(id);
-    for (const id of rendered.registered.dashboardCards()) {
-      expect(cards).toContain(id);
-    }
-  });
-
-  it("removes everything it registered on deactivate", async () => {
-    const app = await renderWithApp(plugin, { manifest, locales });
-    await app.deactivate();
-    expect(app.registered.tabs()).toEqual([]);
-    expect(app.registered.panels()).toEqual([]);
-    expect(app.registered.railItems()).toEqual([]);
-    expect(app.registered.hostActions()).toEqual([]);
-    expect(app.registered.hostEditorSections()).toEqual([]);
-    expect(app.registered.dashboardCards()).toEqual([]);
-    expect(app.registered.settingsComponents()).toEqual([]);
-    expect(app.registered.actions()).toEqual([]);
-  });
-});
diff --git a/plugins/tailscale/tests/frontend/tailscale-api.test.ts b/plugins/tailscale/tests/frontend/tailscale-api.test.ts
deleted file mode 100644
index c1cfb1613..000000000
--- a/plugins/tailscale/tests/frontend/tailscale-api.test.ts
+++ /dev/null
@@ -1,55 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
-import {
-  getTailscaleDevices,
-  setTailscaleApi,
-} from "../../src/frontend/tailscale-api";
-
-const api = { get: vi.fn() };
-
-beforeEach(() => {
-  vi.clearAllMocks();
-  setTailscaleApi(api as never);
-});
-
-describe("getTailscaleDevices", () => {
-  it("reads the plugin's own devices route", async () => {
-    api.get.mockResolvedValue({ data: { devices: [], hasApiKey: false } });
-
-    await expect(getTailscaleDevices()).resolves.toEqual({
-      devices: [],
-      hasApiKey: false,
-    });
-    expect(api.get).toHaveBeenCalledWith("/devices");
-  });
-
-  it("preserves configured-key state when discovery fails", async () => {
-    api.get.mockRejectedValue({
-      isAxiosError: true,
-      response: {
-        data: {
-          devices: [],
-          hasApiKey: true,
-          error: "Failed to fetch Tailscale devices",
-        },
-      },
-    });
-
-    await expect(getTailscaleDevices()).resolves.toEqual({
-      devices: [],
-      hasApiKey: true,
-      error: "Failed to fetch Tailscale devices",
-    });
-  });
-
-  it("rethrows when no structured state is available", async () => {
-    const error = { isAxiosError: true, response: { data: {} } };
-    api.get.mockRejectedValue(error);
-
-    await expect(getTailscaleDevices()).rejects.toBe(error);
-  });
-
-  it("refuses while the plugin is off", async () => {
-    setTailscaleApi(null);
-    await expect(getTailscaleDevices()).rejects.toThrow(/not active/);
-  });
-});
diff --git a/plugins/tailscale/tsconfig.json b/plugins/tailscale/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/tailscale/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/tailscale/vitest.config.ts b/plugins/tailscale/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/tailscale/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/telemetry/CHANGELOG.md b/plugins/telemetry/CHANGELOG.md
deleted file mode 100644
index dc39a5321..000000000
--- a/plugins/telemetry/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Moves the daily anonymous usage report out of Termix core. Adds platform info, feature usage counts and the list of running features, each with its own switch, a per-user opt-out, a preview of the exact report and a button to send it now.
diff --git a/plugins/telemetry/README.md b/plugins/telemetry/README.md
deleted file mode 100644
index effefb226..000000000
--- a/plugins/telemetry/README.md
+++ /dev/null
@@ -1,29 +0,0 @@
-# Usage Statistics
-
-Sends a small anonymous report once a day so the Termix developers can see how many instances run and which features get used.
-
-## What is sent
-
-Always, while it is on:
-
-- A random instance ID, the Termix version, and how many users and hosts exist.
-
-Each of these has its own switch in Admin Settings > Usage Statistics:
-
-- Platform info: operating system, CPU architecture, Node.js version, database type, and whether Termix runs in Docker, the desktop app or as a plain server.
-- Feature usage: how many times each kind of tab was opened, plus SSH logins and host connections, since the last report.
-- Installed features: the ids of the running built-in features.
-
-It never sends usernames, hostnames, IP addresses, credentials or anything else that identifies you or your servers. Admins can preview the exact report before it is sent.
-
-## Turning it off
-
-- Admin Settings > Usage Statistics > Share anonymous usage statistics.
-- Each user can leave their own feature usage out in User Profile > Usage Statistics.
-- `ENABLE_TELEMETRY=false` turns it off and locks the switch. `ENABLE_TELEMETRY=true` locks it on.
-
-## Environment
-
-- `ENABLE_TELEMETRY`: `true` or `false` overrides the admin switch.
-- `POSTHOG_API_KEY`: the PostHog project key. Defaults to the Termix project.
-- `POSTHOG_HOST`: the PostHog host. Defaults to `https://us.i.posthog.com`.
diff --git a/plugins/telemetry/locales/en.json b/plugins/telemetry/locales/en.json
deleted file mode 100644
index c217f0024..000000000
--- a/plugins/telemetry/locales/en.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Manage usage statistics",
-      "description": "See what usage statistics are sent, send them now and reset the instance ID."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Share anonymous usage statistics",
-      "description": "Sends a small anonymous summary once a day to help improve Termix. It never includes usernames, hostnames, IP addresses or credentials."
-    },
-    "includePlatform": {
-      "label": "Include platform info",
-      "description": "The operating system, CPU architecture, Node.js version, database type and how Termix is installed (Docker, desktop app or server)."
-    },
-    "includeFeatureUsage": {
-      "label": "Include feature usage",
-      "description": "How many times each kind of tab was opened and how many SSH logins happened since the last report. Users can turn off their own part in their profile."
-    },
-    "includePlugins": {
-      "label": "Include installed features",
-      "description": "Which built-in features are installed and running."
-    },
-    "instanceId": {
-      "label": "Instance ID"
-    },
-    "shareFeatureUsage": {
-      "label": "Include my feature usage",
-      "description": "Counts which kinds of tabs you open in the anonymous usage statistics. Nothing about you or your hosts is sent."
-    }
-  },
-  "status": {
-    "title": "Status",
-    "on": "Sharing usage statistics once a day",
-    "off": "Not sharing usage statistics",
-    "lockedOn": "Turned on by the ENABLE_TELEMETRY environment variable. Change it there.",
-    "lockedOff": "Turned off by the ENABLE_TELEMETRY environment variable. Change it there.",
-    "instanceId": "Instance ID: {{id}}",
-    "noInstanceId": "No instance ID yet",
-    "lastSent": "Last sent {{date}}",
-    "neverSent": "Not sent yet",
-    "nextSend": "Next report due {{date}}",
-    "lastError": "Last attempt failed: {{error}}",
-    "preview": "Preview report",
-    "sendNow": "Send now",
-    "sending": "Sending...",
-    "sent": "Usage statistics sent",
-    "notSent": "Usage statistics are turned off, nothing was sent",
-    "resetId": "Reset instance ID",
-    "resetIdConfirm": "Reset the instance ID? Future reports will look like a new install.",
-    "resetIdDone": "Instance ID reset",
-    "previewTitle": "Next report",
-    "previewDescription": "This is exactly what would be sent right now.",
-    "close": "Close",
-    "loadFailed": "Could not load the usage statistics status"
-  },
-  "plugin": {
-    "name": "Usage Statistics"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/af_ZA.json b/plugins/telemetry/locales/translated/af_ZA.json
deleted file mode 100644
index 015783b7e..000000000
--- a/plugins/telemetry/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Bestuur gebruikstatistieke",
-      "description": "Kyk watter gebruikstatistieke gestuur word, stuur dit nou en herstel die instansie-ID."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Deel anonieme gebruiksstatistieke",
-      "description": "Stuur een keer per dag 'n klein anonieme opsomming om Termix te help verbeter. Dit sluit nooit gebruikersname, gasheername, IP-adresse of geloofsbriewe in nie."
-    },
-    "includePlatform": {
-      "label": "Sluit platforminligting in",
-      "description": "Die bedryfstelsel, SVE-argitektuur, Node.js-weergawe, databasistipe en hoe Termix geïnstalleer is (Docker, rekenaarprogram of bediener)."
-    },
-    "includeFeatureUsage": {
-      "label": "Sluit funksiegebruik in",
-      "description": "Hoeveel keer elke soort oortjie oopgemaak is en hoeveel SSH-aanmeldings plaasgevind het sedert die laaste verslag. Gebruikers kan hul eie deel in hul profiel afskakel."
-    },
-    "includePlugins": {
-      "label": "Sluit geïnstalleerde funksies in",
-      "description": "Watter ingeboude funksies is geïnstalleer en loop."
-    },
-    "instanceId": {
-      "label": "Instansie-ID"
-    },
-    "shareFeatureUsage": {
-      "label": "Sluit my funksiegebruik in",
-      "description": "Tel watter soort oortjies jy oopmaak in die anonieme gebruiksstatistieke. Niks oor jou of jou gashere word gestuur nie."
-    }
-  },
-  "status": {
-    "title": "Status",
-    "on": "Deel gebruikstatistieke een keer per dag",
-    "off": "Deel nie gebruikstatistieke nie",
-    "lockedOn": "Aangeskakel deur die ENABLE_TELEMETRY omgewingveranderlike. Verander dit daar.",
-    "lockedOff": "Afgeskakel deur die ENABLE_TELEMETRY omgewingveranderlike. Verander dit daar.",
-    "instanceId": "Instansie-ID: {{id}}",
-    "noInstanceId": "Geen instansie-ID nog nie",
-    "lastSent": "Laas gestuur {{date}}",
-    "neverSent": "Nog nie gestuur nie",
-    "nextSend": "Volgende verslag verskuldig {{date}}",
-    "lastError": "Laaste poging het misluk: {{error}}",
-    "preview": "Voorskouverslag",
-    "sendNow": "Stuur nou",
-    "sending": "Stuur tans...",
-    "sent": "Gebruikstatistieke gestuur",
-    "notSent": "Gebruiksstatistieke is afgeskakel, niks is gestuur nie",
-    "resetId": "Stel instansie-ID terug",
-    "resetIdConfirm": "Stel die instansie-ID terug? Toekomstige verslae sal soos 'n nuwe installasie lyk.",
-    "resetIdDone": "Instansie-ID herstel",
-    "previewTitle": "Volgende verslag",
-    "previewDescription": "Dit is presies wat nou gestuur sou word.",
-    "close": "Maak toe",
-    "loadFailed": "Kon nie die gebruikstatistiekstatus laai nie"
-  },
-  "plugin": {
-    "name": "Gebruiksstatistieke"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/ar_SA.json b/plugins/telemetry/locales/translated/ar_SA.json
deleted file mode 100644
index 1ba99da49..000000000
--- a/plugins/telemetry/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "إدارة إحصائيات الاستخدام",
-      "description": "اطلع على إحصائيات الاستخدام التي يتم إرسالها، وأرسلها الآن، ثم أعد تعيين معرف المثيل."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "مشاركة إحصائيات الاستخدام المجهولة",
-      "description": "يرسل ملخصًا قصيرًا مجهول المصدر مرة واحدة يوميًا للمساعدة في تحسين Termix. ولا يتضمن أبدًا أسماء المستخدمين أو أسماء المضيفين أو عناوين IP أو بيانات الاعتماد."
-    },
-    "includePlatform": {
-      "label": "تضمين معلومات المنصة",
-      "description": "نظام التشغيل، وبنية وحدة المعالجة المركزية، وإصدار Node.js، ونوع قاعدة البيانات، وكيفية تثبيت Termix (Docker، أو تطبيق سطح المكتب، أو الخادم)."
-    },
-    "includeFeatureUsage": {
-      "label": "تضمين استخدام الميزة",
-      "description": "عدد مرات فتح كل نوع من أنواع علامات التبويب، وعدد عمليات تسجيل الدخول عبر SSH منذ التقرير الأخير. يمكن للمستخدمين تعطيل هذه الميزة في ملفهم الشخصي."
-    },
-    "includePlugins": {
-      "label": "تضمين الميزات المثبتة",
-      "description": "ما هي الميزات المدمجة المثبتة والتي تعمل؟"
-    },
-    "instanceId": {
-      "label": "معرّف المثيل"
-    },
-    "shareFeatureUsage": {
-      "label": "أدرج استخدامي للميزات",
-      "description": "يحصي البرنامج أنواع علامات التبويب التي تفتحها في إحصائيات الاستخدام المجهولة. ولا يتم إرسال أي معلومات عنك أو عن مزودي الخدمة لديك."
-    }
-  },
-  "status": {
-    "title": "الحالة",
-    "on": "مشاركة إحصائيات الاستخدام مرة واحدة يوميًا",
-    "off": "عدم مشاركة إحصائيات الاستخدام",
-    "lockedOn": "يتم تفعيلها بواسطة متغير البيئة ENABLE_TELEMETRY. قم بتغييره هناك.",
-    "lockedOff": "تم تعطيل هذه الميزة بواسطة متغير البيئة ENABLE_TELEMETRY. قم بتغييره هناك.",
-    "instanceId": "معرّف المثيل: {{id}}",
-    "noInstanceId": "لم يتم تحديد معرف مثيل بعد",
-    "lastSent": "آخر إرسال {{date}}",
-    "neverSent": "لم يتم الإرسال بعد",
-    "nextSend": "موعد تسليم التقرير التالي {{date}}",
-    "lastError": "فشلت المحاولة الأخيرة: {{error}}",
-    "preview": "تقرير تمهيدي",
-    "sendNow": "أرسل الآن",
-    "sending": "إرسال...",
-    "sent": "تم إرسال إحصائيات الاستخدام",
-    "notSent": "تم إيقاف تشغيل إحصائيات الاستخدام، ولم يتم إرسال أي شيء",
-    "resetId": "إعادة تعيين معرف المثيل",
-    "resetIdConfirm": "هل تريد إعادة تعيين مُعرّف المثيل؟ ستظهر التقارير المستقبلية وكأنها عملية تثبيت جديدة.",
-    "resetIdDone": "إعادة تعيين معرف المثيل",
-    "previewTitle": "التقرير التالي",
-    "previewDescription": "هذا بالضبط ما سيتم إرساله الآن.",
-    "close": "إغلاق",
-    "loadFailed": "تعذر تحميل حالة إحصائيات الاستخدام"
-  },
-  "plugin": {
-    "name": "إحصائيات الاستخدام"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/bg_BG.json b/plugins/telemetry/locales/translated/bg_BG.json
deleted file mode 100644
index 5da765c41..000000000
--- a/plugins/telemetry/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Управление на статистиката за употреба",
-      "description": "Вижте какви статистически данни за употреба се изпращат, изпратете ги сега и нулирайте идентификатора на екземпляра."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Споделяне на анонимни статистически данни за употреба",
-      "description": "Изпраща кратко анонимно обобщение веднъж дневно, за да помогне за подобряването на Termix. То никога не включва потребителски имена, имена на хостове, IP адреси или идентификационни данни."
-    },
-    "includePlatform": {
-      "label": "Включете информация за платформата",
-      "description": "Операционната система, архитектурата на процесора, версията на Node.js, типът база данни и как е инсталиран Termix (Docker, десктоп приложение или сървър)."
-    },
-    "includeFeatureUsage": {
-      "label": "Включи използването на функции",
-      "description": "Колко пъти е бил отварян всеки вид раздел и колко SSH влизания са се случили от последния отчет. Потребителите могат да изключат собствената си част в профила си."
-    },
-    "includePlugins": {
-      "label": "Включване на инсталирани функции",
-      "description": "Кои вградени функции са инсталирани и работят."
-    },
-    "instanceId": {
-      "label": "Идентификатор на екземпляр"
-    },
-    "shareFeatureUsage": {
-      "label": "Включи използването на функциите ми",
-      "description": "В анонимната статистика за употреба се отчитат какви видове раздели отваряте. Не се изпраща нищо за вас или вашите хостове."
-    }
-  },
-  "status": {
-    "title": "Статус",
-    "on": "Споделяне на статистика за употреба веднъж дневно",
-    "off": "Не споделяне на статистика за употреба",
-    "lockedOn": "Включва се от променливата на средата ENABLE_TELEMETRY. Променете я там.",
-    "lockedOff": "Изключено от променливата на средата ENABLE_TELEMETRY. Променете я там.",
-    "instanceId": "Идентификатор на екземпляр: {{id}}",
-    "noInstanceId": "Все още няма идентификатор на екземпляр",
-    "lastSent": "Последно изпратено {{date}}",
-    "neverSent": "Все още не е изпратено",
-    "nextSend": "Следващият отчет е наличен {{date}}",
-    "lastError": "Последният опит не беше успешен: {{error}}",
-    "preview": "Преглед на отчета",
-    "sendNow": "Изпрати сега",
-    "sending": "Изпраща се...",
-    "sent": "Изпратени са статистически данни за употреба",
-    "notSent": "Статистиката за употреба е изключена, нищо не е изпратено",
-    "resetId": "Нулиране на идентификатора на екземпляра",
-    "resetIdConfirm": "Нулиране на идентификатора на екземпляра? Бъдещите отчети ще изглеждат като нова инсталация.",
-    "resetIdDone": "Нулиране на идентификатора на екземпляра",
-    "previewTitle": "Следващ доклад",
-    "previewDescription": "Точно това би било изпратено в момента.",
-    "close": "Затвори",
-    "loadFailed": "Не можа да се зареди състоянието на статистиката за употреба"
-  },
-  "plugin": {
-    "name": "Статистика за употреба"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/bn_BD.json b/plugins/telemetry/locales/translated/bn_BD.json
deleted file mode 100644
index 37bbdef30..000000000
--- a/plugins/telemetry/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "ব্যবহারের পরিসংখ্যান পরিচালনা করুন",
-      "description": "কী ব্যবহারের পরিসংখ্যান পাঠানো হয়েছে তা দেখুন, এখনই সেগুলো পাঠান এবং ইনস্ট্যান্স আইডি রিসেট করুন।"
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "বেনামী ব্যবহারের পরিসংখ্যান শেয়ার করুন",
-      "description": "টারমিক্স উন্নত করতে সাহায্য করার জন্য দিনে একবার একটি সংক্ষিপ্ত, বেনামী সারসংক্ষেপ পাঠানো হয়। এতে কখনও ইউজারনেম, হোস্টনেম, আইপি অ্যাড্রেস বা ক্রেডেনশিয়াল অন্তর্ভুক্ত থাকে না।"
-    },
-    "includePlatform": {
-      "label": "প্ল্যাটফর্মের তথ্য অন্তর্ভুক্ত করুন",
-      "description": "অপারেটিং সিস্টেম, সিপিইউ আর্কিটেকচার, নোড.জেএস ভার্সন, ডেটাবেসের ধরন এবং টারমিক্স কীভাবে ইনস্টল করা হয়েছে (ডকার, ডেস্কটপ অ্যাপ বা সার্ভার)।"
-    },
-    "includeFeatureUsage": {
-      "label": "বৈশিষ্ট্য ব্যবহার অন্তর্ভুক্ত করুন",
-      "description": "শেষ প্রতিবেদনের পর থেকে প্রতিটি ধরণের ট্যাব কতবার খোলা হয়েছে এবং কতবার SSH লগইন হয়েছে। ব্যবহারকারীরা তাদের প্রোফাইলে এই অংশটি বন্ধ করতে পারেন।"
-    },
-    "includePlugins": {
-      "label": "ইনস্টল করা বৈশিষ্ট্যগুলি অন্তর্ভুক্ত করুন",
-      "description": "কোন বিল্ট-ইন ফিচারগুলো ইনস্টল এবং চালু আছে।"
-    },
-    "instanceId": {
-      "label": "ইনস্ট্যান্স আইডি"
-    },
-    "shareFeatureUsage": {
-      "label": "আমার বৈশিষ্ট্য ব্যবহার অন্তর্ভুক্ত করুন",
-      "description": "বেনামী ব্যবহারের পরিসংখ্যানে আপনি কোন ধরনের ট্যাব খোলেন তা গণনা করা হয়। আপনার বা আপনার হোস্টদের সম্পর্কে কোনো তথ্য পাঠানো হয় না।"
-    }
-  },
-  "status": {
-    "title": "অবস্থা",
-    "on": "দিনে একবার ব্যবহারের পরিসংখ্যান শেয়ার করা",
-    "off": "ব্যবহারের পরিসংখ্যান শেয়ার করা হচ্ছে না",
-    "lockedOn": "ENABLE_TELEMETRY এনভায়রনমেন্ট ভেরিয়েবল দ্বারা এটি চালু করা হয়। সেখানে এটি পরিবর্তন করুন।",
-    "lockedOff": "ENABLE_TELEMETRY এনভায়রনমেন্ট ভেরিয়েবল দ্বারা এটি বন্ধ করা আছে। সেখানে এটি পরিবর্তন করুন।",
-    "instanceId": "ইনস্ট্যান্স আইডি: {{id}}",
-    "noInstanceId": "এখনও কোনো ইনস্ট্যান্স আইডি নেই",
-    "lastSent": "সর্বশেষ পাঠানো {{date}}",
-    "neverSent": "এখনো পাঠানো হয়নি",
-    "nextSend": "পরবর্তী প্রতিবেদন জমা দেওয়ার শেষ তারিখ {{date}}",
-    "lastError": "শেষ চেষ্টা ব্যর্থ: {{error}}",
-    "preview": "পূর্বরূপ প্রতিবেদন",
-    "sendNow": "এখনই পাঠান",
-    "sending": "পাঠানো হচ্ছে...",
-    "sent": "ব্যবহারের পরিসংখ্যান পাঠানো হয়েছে",
-    "notSent": "ব্যবহারের পরিসংখ্যান বন্ধ করা আছে, কিছুই পাঠানো হয়নি।",
-    "resetId": "ইনস্ট্যান্স আইডি রিসেট করুন",
-    "resetIdConfirm": "ইনস্ট্যান্স আইডি রিসেট করবেন? ভবিষ্যতের রিপোর্টগুলো নতুন ইনস্টলের মতো দেখাবে।",
-    "resetIdDone": "ইনস্ট্যান্স আইডি রিসেট",
-    "previewTitle": "পরবর্তী প্রতিবেদন",
-    "previewDescription": "ঠিক এই মুহূর্তে এটাই পাঠানো হবে।",
-    "close": "বন্ধ করুন",
-    "loadFailed": "ব্যবহারের পরিসংখ্যানের স্থিতি লোড করা যায়নি"
-  },
-  "plugin": {
-    "name": "ব্যবহারের পরিসংখ্যান"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/ca_ES.json b/plugins/telemetry/locales/translated/ca_ES.json
deleted file mode 100644
index ff48dbeee..000000000
--- a/plugins/telemetry/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Gestiona les estadístiques d'ús",
-      "description": "Consulta quines estadístiques d'ús s'envien, envia-les ara i restableix l'ID de la instància."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Comparteix estadístiques d'ús anònimes",
-      "description": "Envia un petit resum anònim un cop al dia per ajudar a millorar Termix. Mai inclou noms d'usuari, noms d'amfitrió, adreces IP ni credencials."
-    },
-    "includePlatform": {
-      "label": "Inclou informació de la plataforma",
-      "description": "El sistema operatiu, l'arquitectura de la CPU, la versió de Node.js, el tipus de base de dades i com s'instal·la Termix (Docker, aplicació d'escriptori o servidor)."
-    },
-    "includeFeatureUsage": {
-      "label": "Inclou l'ús de la funció",
-      "description": "Quantes vegades s'ha obert cada tipus de pestanya i quants inicis de sessió SSH s'han produït des de l'últim informe. Els usuaris poden desactivar la seva pròpia part del seu perfil."
-    },
-    "includePlugins": {
-      "label": "Inclou les funcions instal·lades",
-      "description": "Quines funcions integrades estan instal·lades i en funcionament."
-    },
-    "instanceId": {
-      "label": "ID d'instància"
-    },
-    "shareFeatureUsage": {
-      "label": "Inclou el meu ús de funcions",
-      "description": "Compta quins tipus de pestanyes obriu a les estadístiques d'ús anònimes. No s'envia res sobre vosaltres ni sobre els vostres amfitrions."
-    }
-  },
-  "status": {
-    "title": "Estat",
-    "on": "Compartir estadístiques d'ús un cop al dia",
-    "off": "No comparteixen estadístiques d'ús",
-    "lockedOn": "Activat per la variable d'entorn ENABLE_TELEMETRY. Canvieu-ho allà.",
-    "lockedOff": "Desactivat per la variable d'entorn ENABLE_TELEMETRY. Canvieu-ho allà.",
-    "instanceId": "ID d'instància: {{id}}",
-    "noInstanceId": "Encara no hi ha cap ID d'instància",
-    "lastSent": "Últim enviament {{date}}",
-    "neverSent": "Encara no s'ha enviat",
-    "nextSend": "S'ha de fer el proper informe {{date}}",
-    "lastError": "Últim intent fallit: {{error}}",
-    "preview": "Informe de vista prèvia",
-    "sendNow": "Envia ara",
-    "sending": "Enviant...",
-    "sent": "Estadístiques d'ús enviades",
-    "notSent": "Les estadístiques d'ús estan desactivades, no s'ha enviat res.",
-    "resetId": "Restableix l'ID de la instància",
-    "resetIdConfirm": "Voleu restablir l'ID d'instància? Els informes futurs semblaran una instal·lació nova.",
-    "resetIdDone": "Restabliment de l'ID d'instància",
-    "previewTitle": "Informe següent",
-    "previewDescription": "Això és exactament el que s'enviaria ara mateix.",
-    "close": "Tanca",
-    "loadFailed": "No s'ha pogut carregar l'estat de les estadístiques d'ús."
-  },
-  "plugin": {
-    "name": "Estadístiques d'ús"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/cs_CZ.json b/plugins/telemetry/locales/translated/cs_CZ.json
deleted file mode 100644
index 8003f30a9..000000000
--- a/plugins/telemetry/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Správa statistik používání",
-      "description": "Podívejte se, jaké statistiky využití se odesílají, odešlete je hned a resetujte ID instance."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Sdílení anonymních statistik používání",
-      "description": "Jednou denně odesílá krátké anonymní shrnutí, které pomáhá vylepšovat Termix. Nikdy neobsahuje uživatelská jména, názvy hostitelů, IP adresy ani přihlašovací údaje."
-    },
-    "includePlatform": {
-      "label": "Zahrnout informace o platformě",
-      "description": "Operační systém, architektura CPU, verze Node.js, typ databáze a způsob instalace Termixu (Docker, desktopová aplikace nebo server)."
-    },
-    "includeFeatureUsage": {
-      "label": "Zahrnout využití funkcí",
-      "description": "Kolikrát byl každý typ karty otevřen a kolikrát došlo k přihlášení přes SSH od poslední zprávy. Uživatelé si mohou tuto část ve svém profilu vypnout."
-    },
-    "includePlugins": {
-      "label": "Zahrnout nainstalované funkce",
-      "description": "Které vestavěné funkce jsou nainstalovány a spuštěny."
-    },
-    "instanceId": {
-      "label": "ID instance"
-    },
-    "shareFeatureUsage": {
-      "label": "Zahrnout využití mých funkcí",
-      "description": "V anonymních statistikách používání se počítá, jaké typy karet otevřete. Neodesílá se nic o vás ani o vašich hostitelích."
-    }
-  },
-  "status": {
-    "title": "Postavení",
-    "on": "Sdílení statistik užívání jednou denně",
-    "off": "Nesdílení statistik používání",
-    "lockedOn": "Zapíná se proměnnou prostředí ENABLE_TELEMETRY. Změňte ji tam.",
-    "lockedOff": "Vypnuto proměnnou prostředí ENABLE_TELEMETRY. Změňte to tam.",
-    "instanceId": "ID instance: {{id}}",
-    "noInstanceId": "Zatím žádné ID instance",
-    "lastSent": "Naposledy odesláno {{date}}",
-    "neverSent": "Zatím neodesláno",
-    "nextSend": "Další termín pro hlášení {{date}}",
-    "lastError": "Poslední pokus se nezdařil: {{error}}",
-    "preview": "Náhled zprávy",
-    "sendNow": "Odeslat nyní",
-    "sending": "Odesílání...",
-    "sent": "Odeslané statistiky užívání",
-    "notSent": "Statistiky používání jsou vypnuté, nic nebylo odesláno",
-    "resetId": "Obnovit ID instance",
-    "resetIdConfirm": "Obnovit ID instance? Budoucí sestavy budou vypadat jako nová instalace.",
-    "resetIdDone": "Reset ID instance",
-    "previewTitle": "Další zpráva",
-    "previewDescription": "Přesně tohle by bylo teď odesláno.",
-    "close": "Blízko",
-    "loadFailed": "Nepodařilo se načíst stav statistik využití"
-  },
-  "plugin": {
-    "name": "Statistiky používání"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/da_DK.json b/plugins/telemetry/locales/translated/da_DK.json
deleted file mode 100644
index c70d2a61f..000000000
--- a/plugins/telemetry/locales/translated/da_DK.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Administrer brugsstatistik",
-      "description": "Se hvilke brugsstatistikker der sendes, send dem nu, og nulstil instans-ID'et."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Del anonym brugsstatistik",
-      "description": "Sender et lille anonymt resumé én gang om dagen for at forbedre Termix. Det inkluderer aldrig brugernavne, værtsnavne, IP-adresser eller legitimationsoplysninger."
-    },
-    "includePlatform": {
-      "label": "Inkluder platformoplysninger",
-      "description": "Operativsystemet, CPU-arkitekturen, Node.js-versionen, databasetypen og hvordan Termix er installeret (Docker, desktop-app eller server)."
-    },
-    "includeFeatureUsage": {
-      "label": "Inkluder brug af funktioner",
-      "description": "Hvor mange gange hver type fane blev åbnet, og hvor mange SSH-logins der er sket siden den sidste rapport. Brugere kan deaktivere deres egen del i deres profil."
-    },
-    "includePlugins": {
-      "label": "Inkluder installerede funktioner",
-      "description": "Hvilke indbyggede funktioner er installeret og kører."
-    },
-    "instanceId": {
-      "label": "Instans-ID"
-    },
-    "shareFeatureUsage": {
-      "label": "Inkluder min brug af funktioner",
-      "description": "Tæller hvilke typer faner du åbner i den anonyme brugsstatistik. Der sendes intet om dig eller dine værter."
-    }
-  },
-  "status": {
-    "title": "Status",
-    "on": "Deler brugsstatistik én gang om dagen",
-    "off": "Deler ikke brugsstatistik",
-    "lockedOn": "Aktiveret af miljøvariablen ENABLE_TELEMETRY. Rediger den der.",
-    "lockedOff": "Slået fra af miljøvariablen ENABLE_TELEMETRY. Rediger den der.",
-    "instanceId": "Instans-ID: {{id}}",
-    "noInstanceId": "Intet instans-ID endnu",
-    "lastSent": "Sidst sendt {{date}}",
-    "neverSent": "Ikke sendt endnu",
-    "nextSend": "Næste rapport forfalder {{date}}",
-    "lastError": "Sidste forsøg mislykkedes: {{error}}",
-    "preview": "Forhåndsvisning af rapport",
-    "sendNow": "Send nu",
-    "sending": "Sender...",
-    "sent": "Brugsstatistik sendt",
-    "notSent": "Brugsstatistikker er slået fra, intet blev sendt",
-    "resetId": "Nulstil instans-ID",
-    "resetIdConfirm": "Nulstil instans-ID'et? Fremtidige rapporter vil se ud som en ny installation.",
-    "resetIdDone": "Nulstilling af instans-ID",
-    "previewTitle": "Næste rapport",
-    "previewDescription": "Det er præcis, hvad der ville blive sendt lige nu.",
-    "close": "Tæt",
-    "loadFailed": "Kunne ikke indlæse status for brugsstatistik"
-  },
-  "plugin": {
-    "name": "Brugsstatistik"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/de_DE.json b/plugins/telemetry/locales/translated/de_DE.json
deleted file mode 100644
index 549498816..000000000
--- a/plugins/telemetry/locales/translated/de_DE.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Nutzungsstatistiken verwalten",
-      "description": "Prüfen Sie, welche Nutzungsstatistiken gesendet werden, senden Sie diese jetzt und setzen Sie die Instanz-ID zurück."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Anonyme Nutzungsstatistiken teilen",
-      "description": "Sendet einmal täglich eine kurze, anonyme Zusammenfassung, um Termix zu verbessern. Diese enthält niemals Benutzernamen, Hostnamen, IP-Adressen oder Anmeldeinformationen."
-    },
-    "includePlatform": {
-      "label": "Plattforminformationen einbeziehen",
-      "description": "Das Betriebssystem, die CPU-Architektur, die Node.js-Version, der Datenbanktyp und die Art der Termix-Installation (Docker, Desktop-App oder Server)."
-    },
-    "includeFeatureUsage": {
-      "label": "Nutzung der Funktionen einschließen",
-      "description": "Wie oft die einzelnen Tab-Arten geöffnet wurden und wie viele SSH-Logins seit dem letzten Bericht stattgefunden haben. Benutzer können diese Funktionen in ihrem Profil deaktivieren."
-    },
-    "includePlugins": {
-      "label": "Installierte Funktionen einschließen",
-      "description": "Welche integrierten Funktionen sind installiert und aktiv?"
-    },
-    "instanceId": {
-      "label": "Instanz-ID"
-    },
-    "shareFeatureUsage": {
-      "label": "Meine Funktionsnutzung einbeziehen",
-      "description": "Erfasst in anonymen Nutzungsstatistiken, welche Tab-Arten Sie öffnen. Es werden keine Informationen über Sie oder Ihre Hosts übermittelt."
-    }
-  },
-  "status": {
-    "title": "Status",
-    "on": "Nutzungsstatistiken werden einmal täglich veröffentlicht",
-    "off": "Nutzungsstatistiken werden nicht weitergegeben",
-    "lockedOn": "Wird durch die Umgebungsvariable ENABLE_TELEMETRY aktiviert. Ändern Sie sie dort.",
-    "lockedOff": "Wird durch die Umgebungsvariable ENABLE_TELEMETRY deaktiviert. Ändern Sie dies dort.",
-    "instanceId": "Instanz-ID: {{id}}",
-    "noInstanceId": "Noch keine Instanz-ID",
-    "lastSent": "Zuletzt gesendet {{date}}",
-    "neverSent": "Noch nicht gesendet",
-    "nextSend": "Nächster Bericht fällig {{date}}",
-    "lastError": "Letzter Versuch fehlgeschlagen: {{error}}",
-    "preview": "Vorschaubericht",
-    "sendNow": "Jetzt senden",
-    "sending": "Senden...",
-    "sent": "Nutzungsstatistiken gesendet",
-    "notSent": "Nutzungsstatistiken sind deaktiviert, es wurden keine Daten gesendet",
-    "resetId": "Instanz-ID zurücksetzen",
-    "resetIdConfirm": "Soll die Instanz-ID zurückgesetzt werden? Zukünftige Berichte werden wie eine Neuinstallation aussehen.",
-    "resetIdDone": "Instanz-ID zurückgesetzt",
-    "previewTitle": "Nächster Bericht",
-    "previewDescription": "Genau das würde jetzt verschickt werden.",
-    "close": "Schließen",
-    "loadFailed": "Die Nutzungsstatistik konnte nicht geladen werden."
-  },
-  "plugin": {
-    "name": "Nutzungsstatistiken"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/el_GR.json b/plugins/telemetry/locales/translated/el_GR.json
deleted file mode 100644
index fc5c235ad..000000000
--- a/plugins/telemetry/locales/translated/el_GR.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Διαχείριση στατιστικών χρήσης",
-      "description": "Δείτε ποια στατιστικά στοιχεία χρήσης αποστέλλονται, στείλτε τα τώρα και επαναφέρετε το αναγνωριστικό παρουσίας."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Κοινοποίηση ανώνυμων στατιστικών χρήσης",
-      "description": "Στέλνει μια μικρή ανώνυμη σύνοψη μία φορά την ημέρα για να βοηθήσει στη βελτίωση του Termix. Δεν περιλαμβάνει ποτέ ονόματα χρήστη, ονόματα κεντρικών υπολογιστών, διευθύνσεις IP ή διαπιστευτήρια."
-    },
-    "includePlatform": {
-      "label": "Συμπερίληψη πληροφοριών πλατφόρμας",
-      "description": "Το λειτουργικό σύστημα, η αρχιτεκτονική της CPU, η έκδοση Node.js, ο τύπος βάσης δεδομένων και ο τρόπος εγκατάστασης του Termix (Docker, εφαρμογή για υπολογιστές ή διακομιστής)."
-    },
-    "includeFeatureUsage": {
-      "label": "Συμπερίληψη χρήσης λειτουργιών",
-      "description": "Πόσες φορές ανοίχτηκε κάθε είδος καρτέλας και πόσες συνδέσεις SSH πραγματοποιήθηκαν από την τελευταία αναφορά. Οι χρήστες μπορούν να απενεργοποιήσουν το δικό τους μέρος στο προφίλ τους."
-    },
-    "includePlugins": {
-      "label": "Συμπεριλάβετε εγκατεστημένες λειτουργίες",
-      "description": "Ποιες ενσωματωμένες λειτουργίες είναι εγκατεστημένες και εκτελούνται."
-    },
-    "instanceId": {
-      "label": "Αναγνωριστικό παρουσίας"
-    },
-    "shareFeatureUsage": {
-      "label": "Συμπερίληψη της χρήσης των λειτουργιών μου",
-      "description": "Μετράει τα είδη καρτελών που ανοίγετε στα ανώνυμα στατιστικά χρήσης. Δεν αποστέλλεται τίποτα για εσάς ή τους κεντρικούς υπολογιστές σας."
-    }
-  },
-  "status": {
-    "title": "Κατάσταση",
-    "on": "Κοινή χρήση στατιστικών στοιχείων χρήσης μία φορά την ημέρα",
-    "off": "Δεν κοινοποιούνται στατιστικά στοιχεία χρήσης",
-    "lockedOn": "Ενεργοποιείται από τη μεταβλητή περιβάλλοντος ENABLE_TELEMETRY. Αλλάξτε την εκεί.",
-    "lockedOff": "Απενεργοποιήθηκε από τη μεταβλητή περιβάλλοντος ENABLE_TELEMETRY. Αλλάξτε την εκεί.",
-    "instanceId": "Αναγνωριστικό παρουσίας: {{id}}",
-    "noInstanceId": "Δεν υπάρχει ακόμη αναγνωριστικό παρουσίας",
-    "lastSent": "Τελευταία αποστολή {{date}}",
-    "neverSent": "Δεν έχει σταλεί ακόμα",
-    "nextSend": "Επόμενη αναφορά που πρέπει να γίνει {{date}}",
-    "lastError": "Η τελευταία προσπάθεια απέτυχε: {{error}}",
-    "preview": "Προεπισκόπηση αναφοράς",
-    "sendNow": "Αποστολή τώρα",
-    "sending": "Αποστολή...",
-    "sent": "Στατιστικά στοιχεία χρήσης που στάλθηκαν",
-    "notSent": "Τα στατιστικά χρήσης είναι απενεργοποιημένα, δεν στάλθηκε τίποτα",
-    "resetId": "Επαναφορά αναγνωριστικού παρουσίας",
-    "resetIdConfirm": "Επαναφορά του αναγνωριστικού παρουσίας; Οι μελλοντικές αναφορές θα μοιάζουν με νέα εγκατάσταση.",
-    "resetIdDone": "Επαναφορά αναγνωριστικού παρουσίας",
-    "previewTitle": "Επόμενη αναφορά",
-    "previewDescription": "Αυτό ακριβώς θα αποστελλόταν τώρα.",
-    "close": "Κοντά",
-    "loadFailed": "Δεν ήταν δυνατή η φόρτωση της κατάστασης των στατιστικών χρήσης"
-  },
-  "plugin": {
-    "name": "Στατιστικά Χρήσης"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/es_ES.json b/plugins/telemetry/locales/translated/es_ES.json
deleted file mode 100644
index c3c605d89..000000000
--- a/plugins/telemetry/locales/translated/es_ES.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Gestionar las estadísticas de uso",
-      "description": "Consulta qué estadísticas de uso se envían, envíalas ahora y restablece el ID de instancia."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Compartir estadísticas de uso anónimas",
-      "description": "Envía un breve resumen anónimo una vez al día para ayudar a mejorar Termix. Nunca incluye nombres de usuario, nombres de host, direcciones IP ni credenciales."
-    },
-    "includePlatform": {
-      "label": "Incluir información de la plataforma",
-      "description": "El sistema operativo, la arquitectura de la CPU, la versión de Node.js, el tipo de base de datos y cómo está instalado Termix (Docker, aplicación de escritorio o servidor)."
-    },
-    "includeFeatureUsage": {
-      "label": "Incluir el uso de la función",
-      "description": "Cuántas veces se abrió cada tipo de pestaña y cuántos inicios de sesión SSH se produjeron desde el último informe. Los usuarios pueden desactivar esta sección en su perfil."
-    },
-    "includePlugins": {
-      "label": "Incluir características instaladas",
-      "description": "¿Qué funciones integradas están instaladas y en funcionamiento?"
-    },
-    "instanceId": {
-      "label": "ID de instancia"
-    },
-    "shareFeatureUsage": {
-      "label": "Incluir mi uso de la función",
-      "description": "Registra qué tipos de pestañas abres en las estadísticas de uso anónimas. No se envía ninguna información sobre ti ni sobre tu servidor."
-    }
-  },
-  "status": {
-    "title": "Estado",
-    "on": "Compartir estadísticas de uso una vez al día.",
-    "off": "No compartimos las estadísticas de uso.",
-    "lockedOn": "Se activa mediante la variable de entorno ENABLE_TELEMETRY. Cámbiela allí.",
-    "lockedOff": "Desactivado por la variable de entorno ENABLE_TELEMETRY. Cámbiela allí.",
-    "instanceId": "ID de instancia: {{id}}",
-    "noInstanceId": "Aún no hay ID de instancia",
-    "lastSent": "Último envío {{date}}",
-    "neverSent": "Aún no se ha enviado",
-    "nextSend": "Próximo informe pendiente {{date}}",
-    "lastError": "Último intento fallido: {{error}}",
-    "preview": "Vista previa del informe",
-    "sendNow": "Enviar ahora",
-    "sending": "Envío...",
-    "sent": "Estadísticas de uso enviadas",
-    "notSent": "Las estadísticas de uso están desactivadas, no se envió nada.",
-    "resetId": "Restablecer ID de instancia",
-    "resetIdConfirm": "¿Restablecer el ID de instancia? Los informes futuros se verán como una instalación nueva.",
-    "resetIdDone": "Restablecimiento del ID de instancia",
-    "previewTitle": "Siguiente informe",
-    "previewDescription": "Esto es exactamente lo que se enviaría ahora mismo.",
-    "close": "Cerrar",
-    "loadFailed": "No se pudo cargar el estado de las estadísticas de uso."
-  },
-  "plugin": {
-    "name": "Estadísticas de uso"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/fi_FI.json b/plugins/telemetry/locales/translated/fi_FI.json
deleted file mode 100644
index 7df0bd9e3..000000000
--- a/plugins/telemetry/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Hallinnoi käyttötilastoja",
-      "description": "Katso lähetetyt käyttötilastot, lähetä ne nyt ja nollaa instanssitunnus."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Jaa anonyymejä käyttötilastoja",
-      "description": "Lähettää pienen anonyymin yhteenvedon kerran päivässä Termixin parantamiseksi. Se ei koskaan sisällä käyttäjätunnuksia, isäntänimiä, IP-osoitteita tai tunnistetietoja."
-    },
-    "includePlatform": {
-      "label": "Sisällytä alustatiedot",
-      "description": "Käyttöjärjestelmä, suorittimen arkkitehtuuri, Node.js-versio, tietokannan tyyppi ja Termixin asennustapa (Docker, työpöytäsovellus vai palvelin)."
-    },
-    "includeFeatureUsage": {
-      "label": "Sisällytä ominaisuuksien käyttö",
-      "description": "Kuinka monta kertaa kutakin välilehtityyppiä avattiin ja kuinka monta SSH-kirjautumista tapahtui viimeisimmän raportin jälkeen. Käyttäjät voivat poistaa oman osuutensa käytöstä profiilissaan."
-    },
-    "includePlugins": {
-      "label": "Sisällytä asennetut ominaisuudet",
-      "description": "Mitkä sisäänrakennetut ominaisuudet on asennettu ja käynnissä."
-    },
-    "instanceId": {
-      "label": "Instanssin tunnus"
-    },
-    "shareFeatureUsage": {
-      "label": "Sisällytä ominaisuuksien käyttöni",
-      "description": "Laskee avaamiesi välilehtien tyypit anonyymeissä käyttötilastoissa. Sinusta tai isännistäsi ei lähetetä mitään tietoja."
-    }
-  },
-  "status": {
-    "title": "Status",
-    "on": "Käyttötilastojen jakaminen kerran päivässä",
-    "off": "Ei jaa käyttötilastoja",
-    "lockedOn": "ENABLE_TELEMETRY-ympäristömuuttuja ottaa sen käyttöön. Muuta sitä siellä.",
-    "lockedOff": "Ympäristömuuttuja ENABLE_TELEMETRY on kytkenyt sen pois päältä. Voit muuttaa sitä siellä.",
-    "instanceId": "Instanssitunnus: {{id}}",
-    "noInstanceId": "Ei vielä instanssi-ID:tä",
-    "lastSent": "Viimeksi lähetetty {{date}}",
-    "neverSent": "Ei vielä lähetetty",
-    "nextSend": "Seuraava raportti erääntyy {{date}}",
-    "lastError": "Viimeisin yritys epäonnistui: {{error}}",
-    "preview": "Esikatsele raporttia",
-    "sendNow": "Lähetä nyt",
-    "sending": "Lähetetään...",
-    "sent": "Käyttötilastot lähetetty",
-    "notSent": "Käyttötilastot on poistettu käytöstä, mitään ei lähetetty",
-    "resetId": "Palauta instanssitunnus",
-    "resetIdConfirm": "Nollataanko instanssitunnus? Tulevat raportit näyttävät uudelta asennukselta.",
-    "resetIdDone": "Instanssi-ID:n nollaus",
-    "previewTitle": "Seuraava raportti",
-    "previewDescription": "Juuri tätä lähetettäisiin nyt.",
-    "close": "Lähellä",
-    "loadFailed": "Käyttötilastojen tilan lataaminen epäonnistui"
-  },
-  "plugin": {
-    "name": "Käyttötilastot"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/fr_FR.json b/plugins/telemetry/locales/translated/fr_FR.json
deleted file mode 100644
index 193faef2c..000000000
--- a/plugins/telemetry/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Gérer les statistiques d'utilisation",
-      "description": "Consultez les statistiques d'utilisation envoyées, envoyez-les maintenant et réinitialisez l'ID de l'instance."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Partager des statistiques d'utilisation anonymes",
-      "description": "Envoie quotidiennement un court résumé anonyme pour contribuer à l'amélioration de Termix. Ce résumé ne contient jamais de noms d'utilisateur, de noms d'hôte, d'adresses IP ni d'identifiants."
-    },
-    "includePlatform": {
-      "label": "Inclure les informations de la plateforme",
-      "description": "Le système d'exploitation, l'architecture du processeur, la version de Node.js, le type de base de données et le mode d'installation de Termix (Docker, application de bureau ou serveur)."
-    },
-    "includeFeatureUsage": {
-      "label": "Inclure l'utilisation des fonctionnalités",
-      "description": "Nombre d'ouvertures de chaque type d'onglet et nombre de connexions SSH effectuées depuis le dernier rapport. Les utilisateurs peuvent désactiver ces informations dans leur profil."
-    },
-    "includePlugins": {
-      "label": "Inclure les fonctionnalités installées",
-      "description": "Quelles fonctionnalités intégrées sont installées et en cours d'exécution ?"
-    },
-    "instanceId": {
-      "label": "ID d'instance"
-    },
-    "shareFeatureUsage": {
-      "label": "Inclure mon utilisation des fonctionnalités",
-      "description": "Ce service enregistre les types d'onglets que vous ouvrez dans les statistiques d'utilisation anonymes. Aucune information vous concernant ni concernant vos hôtes n'est transmise."
-    }
-  },
-  "status": {
-    "title": "État",
-    "on": "Partage des statistiques d'utilisation une fois par jour",
-    "off": "Statistiques d'utilisation non partagées",
-    "lockedOn": "Activé par la variable d'environnement ENABLE_TELEMETRY. Modifiez-la à cet emplacement.",
-    "lockedOff": "Cette fonction est désactivée par la variable d'environnement ENABLE_TELEMETRY. Modifiez-la à cet endroit.",
-    "instanceId": "ID de l'instance : {{id}}",
-    "noInstanceId": "Aucun ID d'instance pour le moment",
-    "lastSent": "Dernier message envoyé {{date}}",
-    "neverSent": "Pas encore envoyé",
-    "nextSend": "Prochain rapport à rendre {{date}}",
-    "lastError": "Dernière tentative échouée : {{error}}",
-    "preview": "Aperçu du rapport",
-    "sendNow": "Envoyer maintenant",
-    "sending": "Envoi...",
-    "sent": "Statistiques d'utilisation envoyées",
-    "notSent": "Les statistiques d'utilisation sont désactivées, aucun envoi n'a été effectué.",
-    "resetId": "Réinitialiser l'ID de l'instance",
-    "resetIdConfirm": "Réinitialiser l'ID de l'instance ? Les prochains rapports ressembleront à une nouvelle installation.",
-    "resetIdDone": "Réinitialisation de l'ID d'instance",
-    "previewTitle": "Prochain rapport",
-    "previewDescription": "Voici exactement ce qui serait envoyé en ce moment.",
-    "close": "Fermer",
-    "loadFailed": "Impossible de charger l'état des statistiques d'utilisation"
-  },
-  "plugin": {
-    "name": "Statistiques d'utilisation"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/he_IL.json b/plugins/telemetry/locales/translated/he_IL.json
deleted file mode 100644
index 180264c76..000000000
--- a/plugins/telemetry/locales/translated/he_IL.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "ניהול סטטיסטיקות שימוש",
-      "description": "ראה אילו סטטיסטיקות שימוש נשלחות, שלח אותן עכשיו ואפס את מזהה המופע."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "שתף סטטיסטיקות שימוש אנונימיות",
-      "description": "שולח סיכום אנונימי קטן פעם ביום כדי לעזור לשפר את Termix. הוא לעולם לא כולל שמות משתמש, שמות מארחים, כתובות IP או אישורים."
-    },
-    "includePlatform": {
-      "label": "כלול מידע על הפלטפורמה",
-      "description": "מערכת ההפעלה, ארכיטקטורת המעבד, גרסת Node.js, סוג מסד הנתונים וכיצד Termix מותקן (Docker, אפליקציית שולחן עבודה או שרת)."
-    },
-    "includeFeatureUsage": {
-      "label": "כלול שימוש בתכונות",
-      "description": "כמה פעמים נפתח כל סוג של כרטיסייה וכמה כניסות SSH התרחשו מאז הדוח האחרון. משתמשים יכולים לכבות את החלק שלהם בפרופיל שלהם."
-    },
-    "includePlugins": {
-      "label": "כלול תכונות מותקנות",
-      "description": "אילו תכונות מובנות מותקנות ופועלות."
-    },
-    "instanceId": {
-      "label": "מזהה מופע"
-    },
-    "shareFeatureUsage": {
-      "label": "כלול את השימוש שלי בתכונות",
-      "description": "סופר אילו סוגי כרטיסיות אתה פותח בסטטיסטיקות השימוש האנונימיות. לא נשלח דבר עליך או על המארחים שלך."
-    }
-  },
-  "status": {
-    "title": "סטָטוּס",
-    "on": "שיתוף סטטיסטיקות שימוש פעם ביום",
-    "off": "לא משתף סטטיסטיקות שימוש",
-    "lockedOn": "מופעל על ידי משתנה הסביבה ENABLE_TELEMETRY. שנה אותו שם.",
-    "lockedOff": "כבוי על ידי משתנה הסביבה ENABLE_TELEMETRY. שנה אותו שם.",
-    "instanceId": "מזהה מופע: {{id}}",
-    "noInstanceId": "אין עדיין מזהה מופע",
-    "lastSent": "נשלח לאחרונה {{date}}",
-    "neverSent": "עדיין לא נשלח",
-    "nextSend": "הדוח הבא צפוי {{date}}",
-    "lastError": "ניסיון אחרון נכשל: {{error}}",
-    "preview": "תצוגה מקדימה של דוח",
-    "sendNow": "שלח עכשיו",
-    "sending": "שְׁלִיחָה...",
-    "sent": "נשלחו סטטיסטיקות שימוש",
-    "notSent": "סטטיסטיקות השימוש כבויות, לא נשלח דבר",
-    "resetId": "איפוס מזהה מופע",
-    "resetIdConfirm": "לאפס את מזהה המופע? דוחות עתידיים ייראו כמו התקנה חדשה.",
-    "resetIdDone": "איפוס מזהה מופע",
-    "previewTitle": "הדוח הבא",
-    "previewDescription": "זה בדיוק מה שיישלח עכשיו.",
-    "close": "לִסְגוֹר",
-    "loadFailed": "לא ניתן היה לטעון את סטטוס סטטיסטיקות השימוש"
-  },
-  "plugin": {
-    "name": "סטטיסטיקות שימוש"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/hi_IN.json b/plugins/telemetry/locales/translated/hi_IN.json
deleted file mode 100644
index c27a057c1..000000000
--- a/plugins/telemetry/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "उपयोग सांख्यिकी प्रबंधित करें",
-      "description": "देखें कि उपयोग संबंधी कौन से आंकड़े भेजे जा रहे हैं, उन्हें अभी भेजें और इंस्टेंस आईडी को रीसेट करें।"
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "अनाम उपयोग के आँकड़े साझा करें",
-      "description": "यह Termix को बेहतर बनाने में मदद करने के लिए दिन में एक बार एक छोटा, गुमनाम सारांश भेजता है। इसमें कभी भी उपयोगकर्ता नाम, होस्टनाम, आईपी पते या पहचान संबंधी जानकारी शामिल नहीं होती है।"
-    },
-    "includePlatform": {
-      "label": "प्लेटफ़ॉर्म की जानकारी शामिल करें",
-      "description": "ऑपरेटिंग सिस्टम, सीपीयू आर्किटेक्चर, नोड.जेएस संस्करण, डेटाबेस का प्रकार और टर्मिक्स कैसे स्थापित किया गया है (डॉकर, डेस्कटॉप ऐप या सर्वर)।"
-    },
-    "includeFeatureUsage": {
-      "label": "फ़ीचर उपयोग को शामिल करें",
-      "description": "पिछली रिपोर्ट के बाद से प्रत्येक प्रकार के टैब कितनी बार खोले गए और कितने SSH लॉगिन हुए। उपयोगकर्ता अपनी प्रोफ़ाइल में इस जानकारी को बंद कर सकते हैं।"
-    },
-    "includePlugins": {
-      "label": "स्थापित सुविधाओं को शामिल करें",
-      "description": "कौन-कौन सी अंतर्निहित सुविधाएं स्थापित हैं और चल रही हैं।"
-    },
-    "instanceId": {
-      "label": "उदाहरण आईडी"
-    },
-    "shareFeatureUsage": {
-      "label": "मेरे फ़ीचर उपयोग को शामिल करें",
-      "description": "यह गुमनाम उपयोग आंकड़ों में आपके द्वारा खोले गए टैब के प्रकारों की गणना करता है। आपके या आपके होस्ट के बारे में कोई भी जानकारी नहीं भेजी जाती है।"
-    }
-  },
-  "status": {
-    "title": "स्थिति",
-    "on": "उपयोग के आंकड़े दिन में एक बार साझा करना",
-    "off": "उपयोग के आंकड़े साझा नहीं किए जा रहे हैं",
-    "lockedOn": "यह ENABLE_TELEMETRY एनवायरनमेंट वेरिएबल द्वारा चालू किया जाता है। इसे वहां बदलें।",
-    "lockedOff": "इसे ENABLE_TELEMETRY एनवायरनमेंट वेरिएबल द्वारा बंद किया गया है। इसे वहां बदलें।",
-    "instanceId": "इंस्टेंस आईडी: {{id}}",
-    "noInstanceId": "अभी तक कोई इंस्टेंस आईडी नहीं है",
-    "lastSent": "अंतिम बार भेजा गया {{date}}",
-    "neverSent": "अभी तक भेजा नहीं गया",
-    "nextSend": "अगली रिपोर्ट जमा करने की तिथि {{date}}",
-    "lastError": "अंतिम प्रयास विफल रहा: {{error}}",
-    "preview": "पूर्वावलोकन रिपोर्ट",
-    "sendNow": "अब भेजें",
-    "sending": "भेजा जा रहा है...",
-    "sent": "उपयोग संबंधी आंकड़े भेजे गए",
-    "notSent": "उपयोग संबंधी आंकड़े बंद हैं, कुछ भी नहीं भेजा गया।",
-    "resetId": "इंस्टेंस आईडी रीसेट करें",
-    "resetIdConfirm": "क्या इंस्टेंस आईडी रीसेट करें? भविष्य की रिपोर्टें एक नए इंस्टॉलेशन की तरह दिखेंगी।",
-    "resetIdDone": "इंस्टेंस आईडी रीसेट",
-    "previewTitle": "अगली रिपोर्ट",
-    "previewDescription": "ठीक यही चीज़ अभी भेजी जाएगी।",
-    "close": "बंद करें",
-    "loadFailed": "उपयोग सांख्यिकी स्थिति लोड नहीं हो सकी"
-  },
-  "plugin": {
-    "name": "उपयोग के आँकड़े"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/hu_HU.json b/plugins/telemetry/locales/translated/hu_HU.json
deleted file mode 100644
index 9927ce61d..000000000
--- a/plugins/telemetry/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Használati statisztikák kezelése",
-      "description": "Nézd meg, milyen használati statisztikák küldődnek, küldd el őket most, és állítsd vissza a példányazonosítót."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Névtelen használati statisztikák megosztása",
-      "description": "Naponta egyszer küld egy rövid, névtelen összefoglalót a Termix fejlesztése érdekében. Soha nem tartalmaz felhasználóneveket, hostneveket, IP-címeket vagy hitelesítő adatokat."
-    },
-    "includePlatform": {
-      "label": "Platforminformációk hozzáadása",
-      "description": "Az operációs rendszer, a CPU architektúra, a Node.js verziója, az adatbázis típusa és a Termix telepítési módja (Docker, asztali alkalmazás vagy szerver)."
-    },
-    "includeFeatureUsage": {
-      "label": "Funkcióhasználat belefoglalása",
-      "description": "Hányszor nyitották meg az egyes laptípusokat, és hány SSH-bejelentkezés történt az utolsó jelentés óta. A felhasználók kikapcsolhatják a saját részüket a profiljukban."
-    },
-    "includePlugins": {
-      "label": "Telepített funkciók beillesztése",
-      "description": "Mely beépített funkciók vannak telepítve és futnak?"
-    },
-    "instanceId": {
-      "label": "Példányazonosító"
-    },
-    "shareFeatureUsage": {
-      "label": "Funkcióhasználatom belefoglalása",
-      "description": "Számolja, hogy milyen típusú lapokat nyit meg a névtelen használati statisztikákban. Semmi sem kerül elküldésre rólad vagy a tárhelyszolgáltatóidról."
-    }
-  },
-  "status": {
-    "title": "Állapot",
-    "on": "Használati statisztikák megosztása naponta egyszer",
-    "off": "Nem oszt meg használati statisztikákat",
-    "lockedOn": "Az ENABLE_TELEMETRY környezeti változóval bekapcsolva. Módosítsd ott.",
-    "lockedOff": "Az ENABLE_TELEMETRY környezeti változó kikapcsolta. Módosítsd ott.",
-    "instanceId": "Példányazonosító: {{id}}",
-    "noInstanceId": "Még nincs példányazonosító",
-    "lastSent": "Utolsó küldés {{date}}",
-    "neverSent": "Még nem küldték el",
-    "nextSend": "Következő jelentés határideje {{date}}",
-    "lastError": "Utolsó kísérlet sikertelen: {{error}}",
-    "preview": "Jelentés előnézete",
-    "sendNow": "Küldés most",
-    "sending": "Küldés...",
-    "sent": "Használati statisztikák elküldve",
-    "notSent": "A használati statisztikák ki vannak kapcsolva, semmi sem került elküldésre.",
-    "resetId": "Példányazonosító visszaállítása",
-    "resetIdConfirm": "Visszaállítja a példányazonosítót? A jövőbeli jelentések új telepítésként fognak kinézni.",
-    "resetIdDone": "Példányazonosító visszaállítása",
-    "previewTitle": "Következő jelentés",
-    "previewDescription": "Pontosan ezt küldenék most.",
-    "close": "Közeli",
-    "loadFailed": "Nem sikerült betölteni a használati statisztikák állapotát"
-  },
-  "plugin": {
-    "name": "Használati statisztikák"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/id_ID.json b/plugins/telemetry/locales/translated/id_ID.json
deleted file mode 100644
index be66842fa..000000000
--- a/plugins/telemetry/locales/translated/id_ID.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Kelola statistik penggunaan",
-      "description": "Lihat statistik penggunaan apa yang dikirim, kirimkan sekarang, dan atur ulang ID instance."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Bagikan statistik penggunaan anonim.",
-      "description": "Mengirimkan ringkasan anonim singkat sekali sehari untuk membantu meningkatkan Termix. Ringkasan ini tidak pernah menyertakan nama pengguna, nama host, alamat IP, atau kredensial."
-    },
-    "includePlatform": {
-      "label": "Sertakan informasi platform.",
-      "description": "Sistem operasi, arsitektur CPU, versi Node.js, tipe basis data, dan cara Termix diinstal (Docker, aplikasi desktop, atau server)."
-    },
-    "includeFeatureUsage": {
-      "label": "Sertakan penggunaan fitur",
-      "description": "Berapa kali setiap jenis tab dibuka dan berapa kali login SSH terjadi sejak laporan terakhir. Pengguna dapat menonaktifkan bagian mereka sendiri di profil mereka."
-    },
-    "includePlugins": {
-      "label": "Termasuk fitur yang terpasang",
-      "description": "Fitur bawaan mana yang terpasang dan berjalan."
-    },
-    "instanceId": {
-      "label": "ID Instansi"
-    },
-    "shareFeatureUsage": {
-      "label": "Sertakan penggunaan fitur saya",
-      "description": "Menghitung jenis tab yang Anda buka dalam statistik penggunaan anonim. Tidak ada informasi tentang Anda atau penyedia hosting Anda yang dikirimkan."
-    }
-  },
-  "status": {
-    "title": "Status",
-    "on": "Membagikan statistik penggunaan sekali sehari.",
-    "off": "Tidak membagikan statistik penggunaan",
-    "lockedOn": "Diaktifkan oleh variabel lingkungan ENABLE_TELEMETRY. Ubah di sana.",
-    "lockedOff": "Dinonaktifkan oleh variabel lingkungan ENABLE_TELEMETRY. Ubah di sana.",
-    "instanceId": "ID Instansi: {{id}}",
-    "noInstanceId": "Belum ada ID instance.",
-    "lastSent": "Terakhir dikirim {{date}}",
-    "neverSent": "Belum dikirim",
-    "nextSend": "Laporan selanjutnya jatuh tempo {{date}}",
-    "lastError": "Upaya terakhir gagal: {{error}}",
-    "preview": "Pratinjau laporan",
-    "sendNow": "Kirim sekarang",
-    "sending": "Mengirim...",
-    "sent": "Statistik penggunaan telah dikirim.",
-    "notSent": "Statistik penggunaan dimatikan, tidak ada yang dikirim.",
-    "resetId": "Atur ulang ID instance",
-    "resetIdConfirm": "Apakah Anda mengatur ulang ID instance? Laporan selanjutnya akan terlihat seperti instalasi baru.",
-    "resetIdDone": "ID Instansi diatur ulang",
-    "previewTitle": "Laporan selanjutnya",
-    "previewDescription": "Inilah yang akan dikirimkan sekarang juga.",
-    "close": "Tutup",
-    "loadFailed": "Tidak dapat memuat status statistik penggunaan."
-  },
-  "plugin": {
-    "name": "Statistik Penggunaan"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/it_IT.json b/plugins/telemetry/locales/translated/it_IT.json
deleted file mode 100644
index 7431b69a7..000000000
--- a/plugins/telemetry/locales/translated/it_IT.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Gestisci le statistiche di utilizzo",
-      "description": "Controlla quali statistiche di utilizzo vengono inviate, inviale ora e reimposta l'ID dell'istanza."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Condividi statistiche di utilizzo anonime",
-      "description": "Invia un breve riepilogo anonimo una volta al giorno per contribuire al miglioramento di Termix. Non include mai nomi utente, nomi host, indirizzi IP o credenziali."
-    },
-    "includePlatform": {
-      "label": "Includi le informazioni sulla piattaforma",
-      "description": "Il sistema operativo, l'architettura della CPU, la versione di Node.js, il tipo di database e la modalità di installazione di Termix (Docker, applicazione desktop o server)."
-    },
-    "includeFeatureUsage": {
-      "label": "Includi l'utilizzo delle funzionalità",
-      "description": "Quante volte è stata aperta ciascuna tipologia di scheda e quanti accessi SSH sono stati effettuati dall'ultimo report. Gli utenti possono disattivare questa funzione nel proprio profilo."
-    },
-    "includePlugins": {
-      "label": "Includi le funzionalità installate",
-      "description": "Quali funzionalità integrate sono installate e in esecuzione."
-    },
-    "instanceId": {
-      "label": "ID istanza"
-    },
-    "shareFeatureUsage": {
-      "label": "Includi il mio utilizzo delle funzionalità",
-      "description": "Questo strumento tiene traccia dei tipi di schede che apri nelle statistiche di utilizzo anonime. Nessuna informazione su di te o sui tuoi host viene inviata."
-    }
-  },
-  "status": {
-    "title": "Stato",
-    "on": "Condivisione delle statistiche di utilizzo una volta al giorno",
-    "off": "Non condividiamo le statistiche di utilizzo",
-    "lockedOn": "Attivato dalla variabile d'ambiente ENABLE_TELEMETRY. Modificala lì.",
-    "lockedOff": "Disattivato dalla variabile d'ambiente ENABLE_TELEMETRY. Modificala lì.",
-    "instanceId": "ID istanza: {{id}}",
-    "noInstanceId": "Nessun ID istanza ancora disponibile",
-    "lastSent": "Ultimo invio {{date}}",
-    "neverSent": "Non ancora inviato",
-    "nextSend": "Prossimo rapporto previsto per {{date}}",
-    "lastError": "Ultimo tentativo fallito: {{error}}",
-    "preview": "Anteprima del rapporto",
-    "sendNow": "Invia ora",
-    "sending": "Invio in corso...",
-    "sent": "Statistiche di utilizzo inviate",
-    "notSent": "Le statistiche di utilizzo sono disattivate, non è stato inviato nulla",
-    "resetId": "Reimposta l'ID dell'istanza",
-    "resetIdConfirm": "Reimpostare l'ID dell'istanza? I report futuri sembreranno quelli di una nuova installazione.",
-    "resetIdDone": "Ripristino dell'ID istanza",
-    "previewTitle": "Prossimo rapporto",
-    "previewDescription": "Questo è esattamente ciò che verrebbe inviato ora.",
-    "close": "Chiudi",
-    "loadFailed": "Impossibile caricare lo stato delle statistiche di utilizzo"
-  },
-  "plugin": {
-    "name": "Statistiche di utilizzo"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/ja_JP.json b/plugins/telemetry/locales/translated/ja_JP.json
deleted file mode 100644
index 036679065..000000000
--- a/plugins/telemetry/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "使用状況統計を管理する",
-      "description": "どのような使用統計情報が送信されるかを確認し、それらを今すぐ送信して、インスタンスIDをリセットしてください。"
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "匿名化された利用統計情報を共有する",
-      "description": "Termixの改善に役立てるため、1日に1回、匿名の簡単な要約を送信します。ユーザー名、ホスト名、IPアドレス、認証情報は一切含まれません。"
-    },
-    "includePlatform": {
-      "label": "プラットフォーム情報を含める",
-      "description": "オペレーティングシステム、CPUアーキテクチャ、Node.jsのバージョン、データベースの種類、およびTermixのインストール方法（Docker、デスクトップアプリ、またはサーバー）。"
-    },
-    "includeFeatureUsage": {
-      "label": "機能の使用状況を含める",
-      "description": "各タブが開かれた回数と、前回のレポート以降に発生したSSHログインの回数が表示されます。ユーザーは自分のプロファイル設定で、この表示をオフにすることができます。"
-    },
-    "includePlugins": {
-      "label": "インストール済みの機能を含める",
-      "description": "どの組み込み機能がインストールされ、実行されていますか。"
-    },
-    "instanceId": {
-      "label": "インスタンスID"
-    },
-    "shareFeatureUsage": {
-      "label": "私の機能使用状況を含める",
-      "description": "匿名利用統計情報において、開いているタブの種類をカウントします。あなたやホストに関する情報は一切送信されません。"
-    }
-  },
-  "status": {
-    "title": "状態",
-    "on": "利用統計情報を1日1回共有します",
-    "off": "利用統計を共有しない",
-    "lockedOn": "ENABLE_TELEMETRY環境変数で有効になります。そちらで設定を変更してください。",
-    "lockedOff": "ENABLE_TELEMETRY環境変数によって無効になっています。そちらで設定を変更してください。",
-    "instanceId": "インスタンスID: {{id}}",
-    "noInstanceId": "インスタンスIDはまだありません",
-    "lastSent": "最終送信 {{date}}",
-    "neverSent": "まだ送信されていません",
-    "nextSend": "次回の報告期限 {{date}}",
-    "lastError": "最後の試行が失敗しました: {{error}}",
-    "preview": "プレビューレポート",
-    "sendNow": "今すぐ送信",
-    "sending": "送信中...",
-    "sent": "使用統計情報が送信されました",
-    "notSent": "使用統計は無効になっています。何も送信されませんでした。",
-    "resetId": "インスタンスIDをリセット",
-    "resetIdConfirm": "インスタンスIDをリセットしましたか？今後のレポートは新規インストール時と同じように表示されます。",
-    "resetIdDone": "インスタンスIDがリセットされました",
-    "previewTitle": "次回のレポート",
-    "previewDescription": "これはまさに今送られてくる内容です。",
-    "close": "閉じる",
-    "loadFailed": "使用状況統計ステータスを読み込めませんでした"
-  },
-  "plugin": {
-    "name": "利用統計"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/ko_KR.json b/plugins/telemetry/locales/translated/ko_KR.json
deleted file mode 100644
index dfac7b0bd..000000000
--- a/plugins/telemetry/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "사용 통계 관리",
-      "description": "전송되는 사용 통계를 확인하고, 지금 전송한 다음 인스턴스 ID를 재설정하세요."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "익명 사용 통계를 공유합니다",
-      "description": "Termix 개선에 도움이 되도록 하루에 한 번 익명의 간단한 요약 정보를 전송합니다. 사용자 이름, 호스트 이름, IP 주소 또는 자격 증명은 절대 포함되지 않습니다."
-    },
-    "includePlatform": {
-      "label": "플랫폼 정보를 포함하세요",
-      "description": "운영 체제, CPU 아키텍처, Node.js 버전, 데이터베이스 유형 및 Termix 설치 방식(Docker, 데스크톱 앱 또는 서버)."
-    },
-    "includeFeatureUsage": {
-      "label": "기능 사용법을 포함하세요",
-      "description": "각 탭이 열린 횟수와 마지막 보고 이후 SSH 로그인 횟수를 보여줍니다. 사용자는 프로필에서 해당 기능을 끌 수 있습니다."
-    },
-    "includePlugins": {
-      "label": "설치된 기능을 포함합니다",
-      "description": "어떤 내장 기능이 설치되어 실행 중인지 알려주세요."
-    },
-    "instanceId": {
-      "label": "인스턴스 ID"
-    },
-    "shareFeatureUsage": {
-      "label": "내 기능 사용량을 포함하세요",
-      "description": "익명 사용 통계에서 사용자가 어떤 종류의 탭을 여는지 집계합니다. 사용자 또는 호스트에 대한 정보는 전혀 전송되지 않습니다."
-    }
-  },
-  "status": {
-    "title": "상태",
-    "on": "사용량 통계를 하루에 한 번 공유합니다.",
-    "off": "사용량 통계를 공유하지 않음",
-    "lockedOn": "ENABLE_TELEMETRY 환경 변수에 의해 활성화됩니다. 해당 변수를 변경하십시오.",
-    "lockedOff": "ENABLE_TELEMETRY 환경 변수에 의해 비활성화됩니다. 해당 변수를 변경하십시오.",
-    "instanceId": "인스턴스 ID: {{id}}",
-    "noInstanceId": "아직 인스턴스 ID가 없습니다.",
-    "lastSent": "마지막으로 보낸 메시지 {{date}}",
-    "neverSent": "아직 보내지 않았습니다",
-    "nextSend": "다음 보고서 제출 예정일 {{date}}",
-    "lastError": "마지막 시도가 실패했습니다: {{error}}",
-    "preview": "미리보기 보고서",
-    "sendNow": "지금 보내기",
-    "sending": "배상...",
-    "sent": "사용량 통계가 전송되었습니다.",
-    "notSent": "사용 통계 기능이 꺼져 있어서 아무것도 전송되지 않았습니다.",
-    "resetId": "인스턴스 ID 재설정",
-    "resetIdConfirm": "인스턴스 ID를 재설정하시겠습니까? 향후 보고서는 새 설치처럼 보일 것입니다.",
-    "resetIdDone": "인스턴스 ID 재설정",
-    "previewTitle": "다음 보고서",
-    "previewDescription": "지금 당장 보내질 내용이 바로 이것입니다.",
-    "close": "닫기",
-    "loadFailed": "사용량 통계 상태를 불러올 수 없습니다."
-  },
-  "plugin": {
-    "name": "사용 통계"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/nl_NL.json b/plugins/telemetry/locales/translated/nl_NL.json
deleted file mode 100644
index f8baa90c1..000000000
--- a/plugins/telemetry/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Beheer gebruiksstatistieken",
-      "description": "Bekijk welke gebruiksstatistieken worden verzonden, verzend ze nu en reset de instantie-ID."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Deel anonieme gebruiksstatistieken",
-      "description": "Verstuurt eenmaal per dag een korte, anonieme samenvatting om Termix te helpen verbeteren. Deze samenvatting bevat nooit gebruikersnamen, hostnamen, IP-adressen of inloggegevens."
-    },
-    "includePlatform": {
-      "label": "Voeg platforminformatie toe",
-      "description": "Het besturingssysteem, de CPU-architectuur, de Node.js-versie, het type database en hoe Termix is geïnstalleerd (Docker, desktop-app of server)."
-    },
-    "includeFeatureUsage": {
-      "label": "Inclusief gebruik van functies",
-      "description": "Hoe vaak elk type tabblad is geopend en hoeveel SSH-aanmeldingen er hebben plaatsgevonden sinds het laatste rapport. Gebruikers kunnen dit onderdeel zelf uitschakelen in hun profiel."
-    },
-    "includePlugins": {
-      "label": "Inclusief geïnstalleerde functies",
-      "description": "Welke ingebouwde functies zijn geïnstalleerd en actief?"
-    },
-    "instanceId": {
-      "label": "Instantie-ID"
-    },
-    "shareFeatureUsage": {
-      "label": "Voeg mijn functiegebruik toe",
-      "description": "Deze tool telt welke soorten tabbladen je opent in de anonieme gebruiksstatistieken. Er wordt niets over jou of je hostingprovider verzonden."
-    }
-  },
-  "status": {
-    "title": "Status",
-    "on": "Gebruiksstatistieken worden eenmaal per dag gedeeld.",
-    "off": "Gebruiksstatistieken worden niet gedeeld.",
-    "lockedOn": "Ingeschakeld via de omgevingsvariabele ENABLE_TELEMETRY. Wijzig deze daar.",
-    "lockedOff": "Uitgeschakeld door de omgevingsvariabele ENABLE_TELEMETRY. Wijzig deze daar.",
-    "instanceId": "Instantie-ID: {{id}}",
-    "noInstanceId": "Nog geen instantie-ID",
-    "lastSent": "Laatst verzonden {{date}}",
-    "neverSent": "Nog niet verzonden",
-    "nextSend": "Volgende rapport verschuldigd {{date}}",
-    "lastError": "Laatste poging mislukt: {{error}}",
-    "preview": "Voorbeeldrapport",
-    "sendNow": "Verzend nu",
-    "sending": "Verzenden...",
-    "sent": "Gebruiksstatistieken verzonden",
-    "notSent": "Gebruiksstatistieken zijn uitgeschakeld, er is niets verzonden.",
-    "resetId": "Instantie-ID opnieuw instellen",
-    "resetIdConfirm": "Is de instantie-ID gereset? Toekomstige rapporten zullen eruitzien alsof het een nieuwe installatie betreft.",
-    "resetIdDone": "Instantie-ID gereset",
-    "previewTitle": "Volgend rapport",
-    "previewDescription": "Dit is precies wat er nu verzonden zou worden.",
-    "close": "Dichtbij",
-    "loadFailed": "De status van de gebruiksstatistieken kon niet worden geladen."
-  },
-  "plugin": {
-    "name": "Gebruiksstatistieken"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/no_NO.json b/plugins/telemetry/locales/translated/no_NO.json
deleted file mode 100644
index 3b8e3ed32..000000000
--- a/plugins/telemetry/locales/translated/no_NO.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Administrer bruksstatistikk",
-      "description": "Se hvilken bruksstatistikk som sendes, send den nå og tilbakestill forekomst-ID-en."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Del anonym bruksstatistikk",
-      "description": "Sender et lite anonymt sammendrag én gang daglig for å forbedre Termix. Det inkluderer aldri brukernavn, vertsnavn, IP-adresser eller påloggingsinformasjon."
-    },
-    "includePlatform": {
-      "label": "Inkluder plattforminformasjon",
-      "description": "Operativsystemet, CPU-arkitekturen, Node.js-versjonen, databasetypen og hvordan Termix er installert (Docker, skrivebordsapp eller server)."
-    },
-    "includeFeatureUsage": {
-      "label": "Inkluder bruk av funksjoner",
-      "description": "Hvor mange ganger hver type fane ble åpnet, og hvor mange SSH-pålogginger som skjedde siden forrige rapport. Brukere kan slå av sin egen del i profilen sin."
-    },
-    "includePlugins": {
-      "label": "Inkluder installerte funksjoner",
-      "description": "Hvilke innebygde funksjoner som er installert og kjører."
-    },
-    "instanceId": {
-      "label": "Forekomst-ID"
-    },
-    "shareFeatureUsage": {
-      "label": "Inkluder min funksjonsbruk",
-      "description": "Teller hvilke typer faner du åpner i den anonyme bruksstatistikken. Ingenting om deg eller vertene dine sendes."
-    }
-  },
-  "status": {
-    "title": "Status",
-    "on": "Deler bruksstatistikk én gang om dagen",
-    "off": "Deler ikke bruksstatistikk",
-    "lockedOn": "Slått på av miljøvariabelen ENABLE_TELEMETRY. Endre den der.",
-    "lockedOff": "Slått av av miljøvariabelen ENABLE_TELEMETRY. Endre den der.",
-    "instanceId": "Forekomst-ID: {{id}}",
-    "noInstanceId": "Ingen forekomst-ID ennå",
-    "lastSent": "Sist sendt {{date}}",
-    "neverSent": "Ikke sendt ennå",
-    "nextSend": "Neste rapport forfaller {{date}}",
-    "lastError": "Siste forsøk mislyktes: {{error}}",
-    "preview": "Forhåndsvisningsrapport",
-    "sendNow": "Send nå",
-    "sending": "Sender...",
-    "sent": "Bruksstatistikk sendt",
-    "notSent": "Bruksstatistikk er slått av, ingenting ble sendt",
-    "resetId": "Tilbakestill forekomst-ID",
-    "resetIdConfirm": "Vil du tilbakestille instans-ID-en? Fremtidige rapporter vil se ut som en ny installasjon.",
-    "resetIdDone": "Tilbakestilling av forekomst-ID",
-    "previewTitle": "Neste rapport",
-    "previewDescription": "Dette er akkurat det som ville bli sendt akkurat nå.",
-    "close": "Lukk",
-    "loadFailed": "Kunne ikke laste inn statusen for bruksstatistikken"
-  },
-  "plugin": {
-    "name": "Bruksstatistikk"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/pl_PL.json b/plugins/telemetry/locales/translated/pl_PL.json
deleted file mode 100644
index 13d147969..000000000
--- a/plugins/telemetry/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Zarządzaj statystykami użytkowania",
-      "description": "Zobacz, jakie statystyki użytkowania są wysyłane, wyślij je teraz i zresetuj identyfikator instancji."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Udostępnij anonimowe statystyki użytkowania",
-      "description": "Wysyła raz dziennie krótkie, anonimowe podsumowanie, aby pomóc w ulepszaniu Termix. Nigdy nie zawiera nazw użytkowników, nazw hostów, adresów IP ani danych uwierzytelniających."
-    },
-    "includePlatform": {
-      "label": "Uwzględnij informacje o platformie",
-      "description": "System operacyjny, architektura procesora, wersja Node.js, typ bazy danych i sposób instalacji Termix (Docker, aplikacja stacjonarna lub serwer)."
-    },
-    "includeFeatureUsage": {
-      "label": "Uwzględnij użycie funkcji",
-      "description": "Ile razy otwierano poszczególne zakładki i ile logowań SSH miało miejsce od ostatniego raportu. Użytkownicy mogą wyłączyć tę funkcję w swoim profilu."
-    },
-    "includePlugins": {
-      "label": "Uwzględnij zainstalowane funkcje",
-      "description": "Jakie wbudowane funkcje są zainstalowane i uruchomione."
-    },
-    "instanceId": {
-      "label": "Identyfikator instancji"
-    },
-    "shareFeatureUsage": {
-      "label": "Uwzględnij moje wykorzystanie funkcji",
-      "description": "Zlicza rodzaje otwieranych przez Ciebie kart w anonimowych statystykach użytkowania. Nie są wysyłane żadne informacje o Tobie ani o Twoich hostach."
-    }
-  },
-  "status": {
-    "title": "Status",
-    "on": "Udostępnianie statystyk użytkowania raz dziennie",
-    "off": "Nieudostępnianie statystyk użytkowania",
-    "lockedOn": "Włączane przez zmienną środowiskową ENABLE_TELEMETRY. Zmień to w tym miejscu.",
-    "lockedOff": "Wyłączone przez zmienną środowiskową ENABLE_TELEMETRY. Zmień ją w tym miejscu.",
-    "instanceId": "Identyfikator instancji: {{id}}",
-    "noInstanceId": "Brak jeszcze identyfikatora instancji",
-    "lastSent": "Ostatnio wysłano {{date}}",
-    "neverSent": "Jeszcze nie wysłano",
-    "nextSend": "Następny raport należy przesłać {{date}}",
-    "lastError": "Ostatnia próba nieudana: {{error}}",
-    "preview": "Podgląd raportu",
-    "sendNow": "Wyślij teraz",
-    "sending": "Przesyłka...",
-    "sent": "Wysłano statystyki użytkowania",
-    "notSent": "Statystyki użytkowania są wyłączone, nic nie zostało wysłane",
-    "resetId": "Zresetuj identyfikator instancji",
-    "resetIdConfirm": "Zresetować identyfikator instancji? Przyszłe raporty będą wyglądać jak nowa instalacja.",
-    "resetIdDone": "Resetowanie identyfikatora instancji",
-    "previewTitle": "Następny raport",
-    "previewDescription": "Dokładnie to samo zostałoby wysłane w tej chwili.",
-    "close": "Zamknij",
-    "loadFailed": "Nie można załadować statusu statystyk użytkowania"
-  },
-  "plugin": {
-    "name": "Statystyki użytkowania"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/pt_BR.json b/plugins/telemetry/locales/translated/pt_BR.json
deleted file mode 100644
index 27a531bed..000000000
--- a/plugins/telemetry/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Gerenciar estatísticas de uso",
-      "description": "Veja quais estatísticas de uso foram enviadas, envie-as agora e redefina o ID da instância."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Compartilhar estatísticas de uso anônimas",
-      "description": "Envia um pequeno resumo anônimo uma vez por dia para ajudar a melhorar o Termix. Ele nunca inclui nomes de usuário, nomes de host, endereços IP ou credenciais."
-    },
-    "includePlatform": {
-      "label": "Incluir informações da plataforma",
-      "description": "O sistema operacional, a arquitetura da CPU, a versão do Node.js, o tipo de banco de dados e como o Termix está instalado (Docker, aplicativo desktop ou servidor)."
-    },
-    "includeFeatureUsage": {
-      "label": "Incluir utilização do recurso",
-      "description": "Quantas vezes cada tipo de aba foi aberta e quantos logins SSH ocorreram desde o último relatório. Os usuários podem desativar essa funcionalidade em seus perfis."
-    },
-    "includePlugins": {
-      "label": "Incluir recursos instalados",
-      "description": "Quais recursos integrados estão instalados e em execução?"
-    },
-    "instanceId": {
-      "label": "ID da instância"
-    },
-    "shareFeatureUsage": {
-      "label": "Inclua meu uso do recurso",
-      "description": "Registra os tipos de abas que você abre nas estatísticas de uso anônimas. Nenhuma informação sobre você ou seus servidores é enviada."
-    }
-  },
-  "status": {
-    "title": "Status",
-    "on": "Compartilhar estatísticas de uso uma vez por dia.",
-    "off": "Não compartilhar estatísticas de uso",
-    "lockedOn": "Ativado pela variável de ambiente ENABLE_TELEMETRY. Altere-a lá.",
-    "lockedOff": "Desativado pela variável de ambiente ENABLE_TELEMETRY. Altere-a lá.",
-    "instanceId": "ID da instância: {{id}}",
-    "noInstanceId": "Ainda não há ID de instância.",
-    "lastSent": "Última mensagem enviada {{date}}",
-    "neverSent": "Ainda não foi enviado",
-    "nextSend": "Próximo relatório a ser entregue {{date}}",
-    "lastError": "Última tentativa falhou: {{error}}",
-    "preview": "Relatório de pré-visualização",
-    "sendNow": "Enviar agora",
-    "sending": "Enviando...",
-    "sent": "Estatísticas de utilização enviadas",
-    "notSent": "As estatísticas de uso estão desativadas, nada foi enviado.",
-    "resetId": "Redefinir ID da instância",
-    "resetIdConfirm": "Redefinir o ID da instância? Os relatórios futuros serão exibidos como uma nova instalação.",
-    "resetIdDone": "Redefinição do ID da instância",
-    "previewTitle": "Próximo relatório",
-    "previewDescription": "É exatamente isso que seria enviado agora.",
-    "close": "Fechar",
-    "loadFailed": "Não foi possível carregar o status das estatísticas de uso."
-  },
-  "plugin": {
-    "name": "Estatísticas de uso"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/pt_PT.json b/plugins/telemetry/locales/translated/pt_PT.json
deleted file mode 100644
index 892a539e8..000000000
--- a/plugins/telemetry/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Gerir estatísticas de uso",
-      "description": "Veja quais as estatísticas de utilização que foram enviadas, envie-as agora e redefina o ID da instância."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Partilhar estatísticas de uso anónimas",
-      "description": "Envia um pequeno resumo anónimo uma vez por dia para ajudar a melhorar o Termix. Nunca inclui nomes de utilizador, nomes de host, endereços IP ou credenciais."
-    },
-    "includePlatform": {
-      "label": "Incluir informações da plataforma",
-      "description": "O sistema operativo, a arquitetura do CPU, a versão do Node. js, o tipo de base de dados e como o Termix está instalado (Docker, aplicação desktop ou servidor)."
-    },
-    "includeFeatureUsage": {
-      "label": "Incluir utilização do recurso",
-      "description": "Quantas vezes foi aberto cada tipo de separador e quantos logins SSH ocorreram desde o último relatório. Os utilizadores podem desativar esta funcionalidade nos seus perfis."
-    },
-    "includePlugins": {
-      "label": "Incluir recursos instalados",
-      "description": "Que recursos integrados estão instalados e em execução?"
-    },
-    "instanceId": {
-      "label": "ID da instância"
-    },
-    "shareFeatureUsage": {
-      "label": "Incluir o meu uso do recurso",
-      "description": "Regista os tipos de separadores que abre nas estatísticas de utilização anónimas. Nenhuma informação sobre si ou os seus servidores é enviada."
-    }
-  },
-  "status": {
-    "title": "Estado",
-    "on": "Partilhar estatísticas de utilização uma vez por dia.",
-    "off": "Não partilhar estatísticas de utilização",
-    "lockedOn": "Ativado pela variável de ambiente ENABLE_TELEMETRY. Altere-a aí.",
-    "lockedOff": "Desativado pela variável de ambiente ENABLE_TELEMETRY. Altere-a aí.",
-    "instanceId": "ID da instância: {{id}}",
-    "noInstanceId": "Ainda não há ID de instância.",
-    "lastSent": "Última mensagem enviada {{date}}",
-    "neverSent": "Ainda não foi enviado",
-    "nextSend": "Próximo relatório a ser entregue {{date}}",
-    "lastError": "Última tentativa falhada: {{error}}",
-    "preview": "Relatório de pré-visualização",
-    "sendNow": "Enviar agora",
-    "sending": "Enviando...",
-    "sent": "Estatísticas de utilização enviadas",
-    "notSent": "As estatísticas de utilização estão desativadas, nada foi enviado.",
-    "resetId": "Repor ID da instância",
-    "resetIdConfirm": "Repor o ID da instância? Os relatórios futuros serão apresentados como uma nova instalação.",
-    "resetIdDone": "Redefinição do ID da instância",
-    "previewTitle": "Próximo relatório",
-    "previewDescription": "É exatamente isso que seria enviado agora.",
-    "close": "Fechar",
-    "loadFailed": "Não foi possível carregar o estado das estatísticas de utilização."
-  },
-  "plugin": {
-    "name": "Estatísticas de utilização"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/ro_RO.json b/plugins/telemetry/locales/translated/ro_RO.json
deleted file mode 100644
index fc36a9715..000000000
--- a/plugins/telemetry/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Gestionați statisticile de utilizare",
-      "description": "Vedeți ce statistici de utilizare sunt trimise, trimiteți-le acum și resetați ID-ul instanței."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Partajează statistici de utilizare anonime",
-      "description": "Trimite un scurt rezumat anonim o dată pe zi pentru a ajuta la îmbunătățirea Termix. Nu include niciodată nume de utilizator, nume de gazdă, adrese IP sau acreditări."
-    },
-    "includePlatform": {
-      "label": "Includeți informații despre platformă",
-      "description": "Sistemul de operare, arhitectura procesorului, versiunea Node.js, tipul bazei de date și modul de instalare a Termix (Docker, aplicație desktop sau server)."
-    },
-    "includeFeatureUsage": {
-      "label": "Includeți utilizarea funcțiilor",
-      "description": "De câte ori a fost deschis fiecare tip de filă și câte conectări SSH au avut loc de la ultimul raport. Utilizatorii își pot dezactiva propria parte din profilul lor."
-    },
-    "includePlugins": {
-      "label": "Includeți funcțiile instalate",
-      "description": "Ce funcții încorporate sunt instalate și rulează."
-    },
-    "instanceId": {
-      "label": "ID instanță"
-    },
-    "shareFeatureUsage": {
-      "label": "Include utilizarea funcțiilor mele",
-      "description": "Numără tipurile de file pe care le deschideți în statisticile de utilizare anonime. Nu se trimite nimic despre dvs. sau despre gazdele dvs."
-    }
-  },
-  "status": {
-    "title": "Stare",
-    "on": "Partajarea statisticilor de utilizare o dată pe zi",
-    "off": "Nu se partajează statisticile de utilizare",
-    "lockedOn": "Activat de variabila de mediu ENABLE_TELEMETRY. Modificați-l acolo.",
-    "lockedOff": "Dezactivat de variabila de mediu ENABLE_TELEMETRY. Modificați-l acolo.",
-    "instanceId": "ID instanță: {{id}}",
-    "noInstanceId": "Încă nu există ID de instanță",
-    "lastSent": "Ultima trimitere {{date}}",
-    "neverSent": "Nu a fost trimis încă",
-    "nextSend": "Următorul raport scadent {{date}}",
-    "lastError": "Ultima încercare a eșuat: {{error}}",
-    "preview": "Raport de previzualizare",
-    "sendNow": "Trimite acum",
-    "sending": "Se trimite...",
-    "sent": "Statistici de utilizare trimise",
-    "notSent": "Statisticile de utilizare sunt dezactivate, nu s-a trimis nimic.",
-    "resetId": "Resetează ID-ul instanței",
-    "resetIdConfirm": "Resetarea ID-ului instanței? Rapoartele viitoare vor arăta ca o instalare nouă.",
-    "resetIdDone": "Resetare ID instanță",
-    "previewTitle": "Următorul raport",
-    "previewDescription": "Exact asta ar fi trimis chiar acum.",
-    "close": "Aproape",
-    "loadFailed": "Nu s-a putut încărca starea statisticilor de utilizare"
-  },
-  "plugin": {
-    "name": "Statistici de utilizare"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/ru_RU.json b/plugins/telemetry/locales/translated/ru_RU.json
deleted file mode 100644
index f2716fa7a..000000000
--- a/plugins/telemetry/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Управление статистикой использования",
-      "description": "Посмотрите, какие статистические данные об использовании были отправлены, отправьте их сейчас и сбросьте идентификатор экземпляра."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Делитесь анонимной статистикой использования",
-      "description": "Ежедневно отправляет небольшую анонимную сводку для улучшения работы Termix. Она никогда не содержит имен пользователей, имен хостов, IP-адресов или учетных данных."
-    },
-    "includePlatform": {
-      "label": "Укажите информацию о платформе.",
-      "description": "Операционная система, архитектура процессора, версия Node.js, тип базы данных и способ установки Termix (Docker, настольное приложение или сервер)."
-    },
-    "includeFeatureUsage": {
-      "label": "Включите информацию об использовании функций.",
-      "description": "Сколько раз открывались вкладки каждого типа и сколько раз происходили SSH-подключения с момента последнего отчета. Пользователи могут отключить эту функцию в своем профиле."
-    },
-    "includePlugins": {
-      "label": "Включить установленные функции",
-      "description": "Какие встроенные функции установлены и запущены?"
-    },
-    "instanceId": {
-      "label": "Идентификатор экземпляра"
-    },
-    "shareFeatureUsage": {
-      "label": "Включите информацию об использовании мной этой функции.",
-      "description": "В анонимной статистике использования подсчитывается, какие типы вкладок вы открываете. Никакая информация о вас или ваших хостах не отправляется."
-    }
-  },
-  "status": {
-    "title": "Статус",
-    "on": "Ежедневное предоставление статистики использования.",
-    "off": "Не разглашаем статистику использования",
-    "lockedOn": "Включается с помощью переменной среды ENABLE_TELEMETRY. Измените её там.",
-    "lockedOff": "Отключается с помощью переменной среды ENABLE_TELEMETRY. Измените её там.",
-    "instanceId": "Идентификатор экземпляра: {{id}}",
-    "noInstanceId": "Идентификатор экземпляра пока отсутствует.",
-    "lastSent": "Последнее отправленное {{date}}",
-    "neverSent": "Ещё не отправлено",
-    "nextSend": "Следующий отчет должен быть представлен {{date}}",
-    "lastError": "Последняя попытка не удалась: {{error}}",
-    "preview": "Предварительный просмотр отчета",
-    "sendNow": "Отправить сейчас",
-    "sending": "Отправка...",
-    "sent": "Отправлены статистические данные об использовании.",
-    "notSent": "Статистика использования отключена, ничего не было отправлено.",
-    "resetId": "Сбросить идентификатор экземпляра",
-    "resetIdConfirm": "Сбросить идентификатор экземпляра? В будущих отчетах будет отображаться информация о новой установке.",
-    "resetIdDone": "Сброс идентификатора экземпляра",
-    "previewTitle": "Следующий отчет",
-    "previewDescription": "Именно это сейчас и отправили бы.",
-    "close": "Закрыть",
-    "loadFailed": "Не удалось загрузить статистику использования."
-  },
-  "plugin": {
-    "name": "Статистика использования"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/sr_SP.json b/plugins/telemetry/locales/translated/sr_SP.json
deleted file mode 100644
index 1ffc5ac2b..000000000
--- a/plugins/telemetry/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Управљајте статистиком коришћења",
-      "description": "Погледајте које се статистике коришћења шаљу, пошаљите их сада и ресетујте ИД инстанце."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Делите анонимну статистику коришћења",
-      "description": "Шаље мали анонимни резиме једном дневно како би помогао у побољшању Termix-а. Никада не садржи корисничка имена, имена хостова, IP адресе или акредитиве."
-    },
-    "includePlatform": {
-      "label": "Укључи информације о платформи",
-      "description": "Оперативни систем, архитектура процесора, верзија Node.js-а, тип базе података и начин инсталирања Termix-а (Docker, десктоп апликација или сервер)."
-    },
-    "includeFeatureUsage": {
-      "label": "Укључи коришћење функција",
-      "description": "Колико пута је свака врста картице отворена и колико се SSH пријављивања догодило од последњег извештаја. Корисници могу да искључе свој део у свом профилу."
-    },
-    "includePlugins": {
-      "label": "Укључи инсталиране функције",
-      "description": "Које уграђене функције су инсталиране и покрећу се."
-    },
-    "instanceId": {
-      "label": "ИД инстанце"
-    },
-    "shareFeatureUsage": {
-      "label": "Укључи моје коришћење функција",
-      "description": "У анонимној статистици коришћења рачуна које врсте картица отварате. Не шаље се ништа о вама или вашим хостовима."
-    }
-  },
-  "status": {
-    "title": "Статус",
-    "on": "Дељење статистике коришћења једном дневно",
-    "off": "Не дели статистику коришћења",
-    "lockedOn": "Укључује променљива окружења ENABLE_TELEMETRY. Промените је тамо.",
-    "lockedOff": "Искључено променљивом окружења ENABLE_TELEMETRY. Промените је тамо.",
-    "instanceId": "ИД инстанце: {{id}}",
-    "noInstanceId": "Још увек нема ИД-а инстанце",
-    "lastSent": "Последње послато {{date}}",
-    "neverSent": "Још није послато",
-    "nextSend": "Следећи извештај {{date}}",
-    "lastError": "Последњи покушај није успео: {{error}}",
-    "preview": "Преглед извештаја",
-    "sendNow": "Пошаљи сада",
-    "sending": "Слање...",
-    "sent": "Послата је статистика коришћења",
-    "notSent": "Статистика коришћења је искључена, ништа није послато",
-    "resetId": "Ресетуј ИД инстанце",
-    "resetIdConfirm": "Ресетовати ИД инстанце? Будући извештаји ће изгледати као нова инсталација.",
-    "resetIdDone": "Ресетовање ИД-а инстанце",
-    "previewTitle": "Следећи извештај",
-    "previewDescription": "Управо ово би сада било послато.",
-    "close": "Затвори",
-    "loadFailed": "Није могуће учитати статус статистике коришћења"
-  },
-  "plugin": {
-    "name": "Статистика коришћења"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/sv_SE.json b/plugins/telemetry/locales/translated/sv_SE.json
deleted file mode 100644
index 1fff472db..000000000
--- a/plugins/telemetry/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Hantera användningsstatistik",
-      "description": "Se vilken användningsstatistik som skickas, skicka den nu och återställ instans-ID:t."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Dela anonym användningsstatistik",
-      "description": "Skickar en liten anonym sammanfattning en gång om dagen för att förbättra Termix. Den inkluderar aldrig användarnamn, värdnamn, IP-adresser eller inloggningsuppgifter."
-    },
-    "includePlatform": {
-      "label": "Inkludera plattformsinformation",
-      "description": "Operativsystemet, CPU-arkitekturen, Node.js-versionen, databastypen och hur Termix är installerat (Docker, skrivbordsapp eller server)."
-    },
-    "includeFeatureUsage": {
-      "label": "Inkludera funktionsanvändning",
-      "description": "Hur många gånger varje typ av flik öppnades och hur många SSH-inloggningar som skett sedan den senaste rapporten. Användare kan inaktivera sin egen del i sin profil."
-    },
-    "includePlugins": {
-      "label": "Inkludera installerade funktioner",
-      "description": "Vilka inbyggda funktioner som är installerade och körs."
-    },
-    "instanceId": {
-      "label": "Instans-ID"
-    },
-    "shareFeatureUsage": {
-      "label": "Inkludera min funktionsanvändning",
-      "description": "Räknar vilka typer av flikar du öppnar i den anonyma användningsstatistiken. Ingenting om dig eller dina värdar skickas."
-    }
-  },
-  "status": {
-    "title": "Status",
-    "on": "Delar användningsstatistik en gång om dagen",
-    "off": "Delar inte användningsstatistik",
-    "lockedOn": "Aktiveras av miljövariabeln ENABLE_TELEMETRY. Ändra den där.",
-    "lockedOff": "Avstängd av miljövariabeln ENABLE_TELEMETRY. Ändra den där.",
-    "instanceId": "Instans-ID: {{id}}",
-    "noInstanceId": "Inget instans-ID ännu",
-    "lastSent": "Senast skickad {{date}}",
-    "neverSent": "Inte skickat än",
-    "nextSend": "Nästa rapport ska vara klar {{date}}",
-    "lastError": "Senaste försöket misslyckades: {{error}}",
-    "preview": "Förhandsgranska rapport",
-    "sendNow": "Skicka nu",
-    "sending": "Sändning...",
-    "sent": "Användningsstatistik skickad",
-    "notSent": "Användningsstatistiken är avstängd, ingenting skickades",
-    "resetId": "Återställ instans-ID",
-    "resetIdConfirm": "Återställa instans-ID:t? Framtida rapporter kommer att se ut som en nyinstallation.",
-    "resetIdDone": "Återställning av instans-ID",
-    "previewTitle": "Nästa rapport",
-    "previewDescription": "Det här är precis vad som skulle skickas just nu.",
-    "close": "Nära",
-    "loadFailed": "Kunde inte ladda användningsstatistikens status"
-  },
-  "plugin": {
-    "name": "Användningsstatistik"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/th_TH.json b/plugins/telemetry/locales/translated/th_TH.json
deleted file mode 100644
index 7d8691ebc..000000000
--- a/plugins/telemetry/locales/translated/th_TH.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "จัดการสถิติการใช้งาน",
-      "description": "ดูว่ามีการส่งข้อมูลสถิติการใช้งานอะไรบ้าง ส่งข้อมูลเหล่านั้นตอนนี้ แล้วรีเซ็ต Instance ID"
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "แบ่งปันสถิติการใช้งานแบบไม่ระบุตัวตน",
-      "description": "ส่งสรุปข้อมูลแบบไม่ระบุชื่อขนาดสั้นวันละครั้งเพื่อช่วยปรับปรุง Termix โดยจะไม่รวมชื่อผู้ใช้ ชื่อโฮสต์ ที่อยู่ IP หรือข้อมูลประจำตัวใดๆ ทั้งสิ้น"
-    },
-    "includePlatform": {
-      "label": "ระบุข้อมูลแพลตฟอร์ม",
-      "description": "ระบบปฏิบัติการ สถาปัตยกรรม CPU เวอร์ชัน Node.js ประเภทฐานข้อมูล และวิธีการติดตั้ง Termix (Docker แอปเดสก์ท็อป หรือเซิร์ฟเวอร์)"
-    },
-    "includeFeatureUsage": {
-      "label": "รวมถึงการใช้งานฟีเจอร์ต่างๆ",
-      "description": "จำนวนครั้งที่แท็บแต่ละประเภทถูกเปิด และจำนวนการเข้าสู่ระบบ SSH ที่เกิดขึ้นนับตั้งแต่รายงานครั้งล่าสุด ผู้ใช้สามารถปิดส่วนนี้ได้ด้วยตนเองในโปรไฟล์"
-    },
-    "includePlugins": {
-      "label": "รวมคุณสมบัติที่ติดตั้งไว้",
-      "description": "มีฟีเจอร์ในตัวใดบ้างที่ติดตั้งและใช้งานอยู่"
-    },
-    "instanceId": {
-      "label": "รหัสอินสแตนซ์"
-    },
-    "shareFeatureUsage": {
-      "label": "รวมการใช้งานฟีเจอร์ของฉันด้วย",
-      "description": "แอปนี้จะนับจำนวนแท็บที่คุณเปิดในสถิติการใช้งานแบบไม่ระบุตัวตน โดยไม่มีการส่งข้อมูลเกี่ยวกับตัวคุณหรือโฮสต์ของคุณแต่อย่างใด"
-    }
-  },
-  "status": {
-    "title": "สถานะ",
-    "on": "เผยสถิติการใช้งานวันละครั้ง",
-    "off": "ไม่เปิดเผยสถิติการใช้งาน",
-    "lockedOn": "เปิดใช้งานโดยตัวแปรสภาพแวดล้อม ENABLE_TELEMETRY เปลี่ยนค่าที่นั่น",
-    "lockedOff": "ปิดใช้งานโดยตัวแปรสภาพแวดล้อม ENABLE_TELEMETRY เปลี่ยนค่าที่นั่น",
-    "instanceId": "รหัสอินสแตนซ์: {{id}}",
-    "noInstanceId": "ยังไม่มีหมายเลขประจำตัวอินสแตนซ์",
-    "lastSent": "ส่งครั้งล่าสุด {{date}}",
-    "neverSent": "ยังไม่ได้ส่ง",
-    "nextSend": "รายงานฉบับต่อไปส่งภายในวันที่ {{date}}",
-    "lastError": "ความพยายามครั้งล่าสุดล้มเหลว: {{error}}",
-    "preview": "รายงานฉบับย่อ",
-    "sendNow": "ส่งเลย",
-    "sending": "กำลังส่ง...",
-    "sent": "ส่งสถิติการใช้งานแล้ว",
-    "notSent": "สถิติการใช้งานถูกปิดใช้งาน ไม่มีการส่งใด ๆ",
-    "resetId": "รีเซ็ต ID อินสแตนซ์",
-    "resetIdConfirm": "รีเซ็ต Instance ID หรือไม่? รายงานในอนาคตจะแสดงผลเหมือนกับการติดตั้งใหม่",
-    "resetIdDone": "รีเซ็ต Instance ID",
-    "previewTitle": "รายงานฉบับต่อไป",
-    "previewDescription": "นี่คือสิ่งที่จะถูกส่งไปในตอนนี้อย่างแน่นอน",
-    "close": "ปิด",
-    "loadFailed": "ไม่สามารถโหลดสถานะสถิติการใช้งานได้"
-  },
-  "plugin": {
-    "name": "สถิติการใช้งาน"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/tr_TR.json b/plugins/telemetry/locales/translated/tr_TR.json
deleted file mode 100644
index 020188002..000000000
--- a/plugins/telemetry/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Kullanım istatistiklerini yönetin",
-      "description": "Gönderilen kullanım istatistiklerine bakın, bunları şimdi gönderin ve örnek kimliğini sıfırlayın."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Anonim kullanım istatistiklerini paylaşın",
-      "description": "Termix'in geliştirilmesine yardımcı olmak amacıyla günde bir kez küçük, anonim bir özet gönderir. Bu özet asla kullanıcı adlarını, sunucu adlarını, IP adreslerini veya kimlik bilgilerini içermez."
-    },
-    "includePlatform": {
-      "label": "Platform bilgilerini ekleyin",
-      "description": "İşletim sistemi, işlemci mimarisi, Node.js sürümü, veritabanı türü ve Termix'in nasıl kurulduğu (Docker, masaüstü uygulaması veya sunucu)."
-    },
-    "includeFeatureUsage": {
-      "label": "Özellik kullanımını dahil et",
-      "description": "Son rapordan bu yana her sekme türünün kaç kez açıldığı ve kaç SSH oturum açma işleminin gerçekleştiği. Kullanıcılar profillerinden kendi bölümlerini kapatabilirler."
-    },
-    "includePlugins": {
-      "label": "Kurulu özellikleri dahil et",
-      "description": "Hangi yerleşik özellikler yüklü ve çalışıyor?"
-    },
-    "instanceId": {
-      "label": "Örnek Kimliği"
-    },
-    "shareFeatureUsage": {
-      "label": "Özellik kullanımımı dahil et",
-      "description": "Anonim kullanım istatistiklerinde hangi tür sekmeleri açtığınızı sayar. Sizin veya sunucularınız hakkında hiçbir bilgi gönderilmez."
-    }
-  },
-  "status": {
-    "title": "Durum",
-    "on": "Kullanım istatistikleri günde bir kez paylaşılıyor.",
-    "off": "Kullanım istatistiklerini paylaşmamak",
-    "lockedOn": "ENABLE_TELEMETRY ortam değişkeni tarafından etkinleştirilir. Orada değiştirin.",
-    "lockedOff": "ENABLE_TELEMETRY ortam değişkeni tarafından devre dışı bırakılmıştır. Lütfen bu değişkeni orada değiştirin.",
-    "instanceId": "Örnek Kimliği: {{id}}",
-    "noInstanceId": "Henüz bir örnek kimliği yok.",
-    "lastSent": "Son gönderilen {{date}}",
-    "neverSent": "Henüz gönderilmedi",
-    "nextSend": "Sonraki raporun teslim tarihi {{date}}",
-    "lastError": "Son deneme başarısız oldu: {{error}}",
-    "preview": "Önizleme raporu",
-    "sendNow": "Şimdi gönder",
-    "sending": "Gönderiliyor...",
-    "sent": "Kullanım istatistikleri gönderildi",
-    "notSent": "Kullanım istatistikleri kapalı, hiçbir şey gönderilmedi.",
-    "resetId": "Örnek kimliğini sıfırla",
-    "resetIdConfirm": "Örnek kimliğini sıfırla? Gelecekteki raporlar yeni bir kurulum gibi görünecektir.",
-    "resetIdDone": "Örnek Kimliği sıfırlandı",
-    "previewTitle": "Sonraki rapor",
-    "previewDescription": "Şu anda gönderilecek olan tam olarak bu.",
-    "close": "Kapat",
-    "loadFailed": "Kullanım istatistikleri durumu yüklenemedi."
-  },
-  "plugin": {
-    "name": "Kullanım İstatistikleri"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/uk_UA.json b/plugins/telemetry/locales/translated/uk_UA.json
deleted file mode 100644
index 122c0a6ad..000000000
--- a/plugins/telemetry/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Керування статистикою використання",
-      "description": "Перегляньте, яка статистика використання надсилається, надішліть її зараз і скиньте ідентифікатор екземпляра."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Діліться анонімною статистикою використання",
-      "description": "Надсилає невеликий анонімний звіт раз на день, щоб допомогти покращити Termix. Він ніколи не містить імен користувачів, імен хостів, IP-адрес чи облікових даних."
-    },
-    "includePlatform": {
-      "label": "Включити інформацію про платформу",
-      "description": "Операційна система, архітектура процесора, версія Node.js, тип бази даних та спосіб встановлення Termix (Docker, десктопний додаток чи сервер)."
-    },
-    "includeFeatureUsage": {
-      "label": "Включити використання функцій",
-      "description": "Скільки разів було відкрито кожен тип вкладки та скільки разів відбулося входів через SSH з моменту останнього звіту. Користувачі можуть вимкнути власну частину у своєму профілі."
-    },
-    "includePlugins": {
-      "label": "Включити встановлені функції",
-      "description": "Які вбудовані функції встановлено та працюють."
-    },
-    "instanceId": {
-      "label": "Ідентифікатор екземпляра"
-    },
-    "shareFeatureUsage": {
-      "label": "Включити використання мною функцій",
-      "description": "Враховує, які типи вкладок ви відкриваєте, в анонімній статистиці використання. Нічого про вас чи ваші хости не надсилається."
-    }
-  },
-  "status": {
-    "title": "Статус",
-    "on": "Надання статистики використання раз на день",
-    "off": "Не поширюється статистика використання",
-    "lockedOn": "Вмикається змінною середовища ENABLE_TELEMETRY. Змініть її там.",
-    "lockedOff": "Вимкнено змінною середовища ENABLE_TELEMETRY. Змініть це там.",
-    "instanceId": "Ідентифікатор екземпляра: {{id}}",
-    "noInstanceId": "Ідентифікатора екземпляра ще немає",
-    "lastSent": "Останнє відправлення {{date}}",
-    "neverSent": "Ще не надіслано",
-    "nextSend": "Наступний звіт має бути {{date}}",
-    "lastError": "Остання спроба не вдалася: {{error}}",
-    "preview": "Попередній перегляд звіту",
-    "sendNow": "Надіслати зараз",
-    "sending": "Надсилання...",
-    "sent": "Надіслано статистику використання",
-    "notSent": "Статистику використання вимкнено, нічого не надіслано",
-    "resetId": "Скинути ідентифікатор екземпляра",
-    "resetIdConfirm": "Скинути ідентифікатор екземпляра? Майбутні звіти виглядатимуть як нова інсталяція.",
-    "resetIdDone": "Скидання ідентифікатора екземпляра",
-    "previewTitle": "Наступний звіт",
-    "previewDescription": "Саме це зараз і було б надіслано.",
-    "close": "Закрити",
-    "loadFailed": "Не вдалося завантажити статус статистики використання"
-  },
-  "plugin": {
-    "name": "Статистика використання"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/vi_VN.json b/plugins/telemetry/locales/translated/vi_VN.json
deleted file mode 100644
index b5fde2443..000000000
--- a/plugins/telemetry/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "Quản lý số liệu thống kê sử dụng",
-      "description": "Hãy xem các số liệu thống kê sử dụng nào đang được gửi, gửi chúng ngay bây giờ và đặt lại ID phiên bản."
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "Chia sẻ số liệu thống kê sử dụng ẩn danh",
-      "description": "Gửi một bản tóm tắt ngắn gọn, ẩn danh mỗi ngày một lần để giúp cải thiện Termix. Bản tóm tắt này không bao giờ bao gồm tên người dùng, tên máy chủ, địa chỉ IP hoặc thông tin đăng nhập."
-    },
-    "includePlatform": {
-      "label": "Bao gồm thông tin nền tảng",
-      "description": "Hệ điều hành, kiến trúc CPU, phiên bản Node.js, loại cơ sở dữ liệu và cách cài đặt Termix (Docker, ứng dụng máy tính để bàn hoặc máy chủ)."
-    },
-    "includeFeatureUsage": {
-      "label": "Bao gồm việc sử dụng tính năng",
-      "description": "Số lần mỗi loại tab được mở và số lần đăng nhập SSH kể từ báo cáo gần nhất. Người dùng có thể tắt phần này trong hồ sơ của mình."
-    },
-    "includePlugins": {
-      "label": "Bao gồm các tính năng đã được cài đặt",
-      "description": "Những tính năng tích hợp nào đã được cài đặt và đang hoạt động?"
-    },
-    "instanceId": {
-      "label": "ID phiên bản"
-    },
-    "shareFeatureUsage": {
-      "label": "Bao gồm cả việc tôi sử dụng tính năng này.",
-      "description": "Ứng dụng này đếm số loại tab bạn mở trong thống kê sử dụng ẩn danh. Không có thông tin nào về bạn hoặc máy chủ của bạn được gửi đi."
-    }
-  },
-  "status": {
-    "title": "Trạng thái",
-    "on": "Chia sẻ số liệu thống kê sử dụng một lần mỗi ngày",
-    "off": "Không chia sẻ số liệu thống kê sử dụng",
-    "lockedOn": "Chức năng này được bật bởi biến môi trường ENABLE_TELEMETRY. Hãy thay đổi nó ở đó.",
-    "lockedOff": "Chức năng này bị tắt bởi biến môi trường ENABLE_TELEMETRY. Hãy thay đổi nó ở đó.",
-    "instanceId": "ID phiên bản: {{id}}",
-    "noInstanceId": "Chưa có ID phiên bản",
-    "lastSent": "Lần gửi cuối cùng {{date}}",
-    "neverSent": "Chưa gửi",
-    "nextSend": "Báo cáo tiếp theo sẽ đến hạn {{date}}",
-    "lastError": "Lần thử cuối cùng thất bại: {{error}}",
-    "preview": "Báo cáo xem trước",
-    "sendNow": "Gửi ngay",
-    "sending": "Đang gửi...",
-    "sent": "Số liệu thống kê sử dụng đã được gửi",
-    "notSent": "Thống kê sử dụng đã bị tắt, không có dữ liệu nào được gửi đi.",
-    "resetId": "Đặt lại ID phiên bản",
-    "resetIdConfirm": "Đặt lại ID phiên bản? Các báo cáo trong tương lai sẽ trông giống như một bản cài đặt mới.",
-    "resetIdDone": "Đặt lại ID phiên bản",
-    "previewTitle": "Báo cáo tiếp theo",
-    "previewDescription": "Đây chính xác là những gì sẽ được gửi ngay bây giờ.",
-    "close": "Đóng",
-    "loadFailed": "Không thể tải trạng thái thống kê sử dụng"
-  },
-  "plugin": {
-    "name": "Thống kê sử dụng"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/zh_CN.json b/plugins/telemetry/locales/translated/zh_CN.json
deleted file mode 100644
index e2ff66ee1..000000000
--- a/plugins/telemetry/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "管理使用情况统计信息",
-      "description": "查看已发送的使用统计信息，立即发送并重置实例 ID。"
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "分享匿名使用统计数据",
-      "description": "每天发送一份简短的匿名摘要，以帮助改进 Termix。摘要中绝不包含用户名、主机名、IP 地址或凭据。"
-    },
-    "includePlatform": {
-      "label": "包含平台信息",
-      "description": "操作系统、CPU架构、Node.js版本、数据库类型以及Termix的安装方式（Docker、桌面应用程序或服务器）。"
-    },
-    "includeFeatureUsage": {
-      "label": "包含功能使用",
-      "description": "自上次报告以来，各类标签页的打开次数以及 SSH 登录次数总计是多少？用户可以在个人资料中关闭自己的相关功能。"
-    },
-    "includePlugins": {
-      "label": "包含已安装的功能",
-      "description": "哪些内置功能已安装并正在运行？"
-    },
-    "instanceId": {
-      "label": "实例 ID"
-    },
-    "shareFeatureUsage": {
-      "label": "请包含我的功能使用情况",
-      "description": "匿名使用统计数据会统计您打开的标签页类型。不会发送任何关于您或您的主机的信息。"
-    }
-  },
-  "status": {
-    "title": "状态",
-    "on": "每天分享一次使用统计数据。",
-    "off": "不分享使用统计数据",
-    "lockedOn": "此功能由 ENABLE_TELEMETRY 环境变量启用。请修改该变量。",
-    "lockedOff": "此功能已通过 ENABLE_TELEMETRY 环境变量关闭。请更改该变量。",
-    "instanceId": "实例 ID： {{id}}",
-    "noInstanceId": "暂无实例 ID",
-    "lastSent": "最后发送 {{date}}",
-    "neverSent": "尚未发送",
-    "nextSend": "下一份报告截止日期 {{date}}",
-    "lastError": "最后一次尝试失败： {{error}}",
-    "preview": "预览报告",
-    "sendNow": "立即发送",
-    "sending": "正在发送...",
-    "sent": "已发送使用统计信息",
-    "notSent": "使用情况统计已关闭，未发送任何内容。",
-    "resetId": "重置实例 ID",
-    "resetIdConfirm": "重置实例 ID？以后的报告将显示为新安装的实例。",
-    "resetIdDone": "实例 ID 重置",
-    "previewTitle": "下一篇报告",
-    "previewDescription": "这正是现在会发送的内容。",
-    "close": "关闭",
-    "loadFailed": "无法加载使用情况统计状态"
-  },
-  "plugin": {
-    "name": "使用情况统计"
-  }
-}
diff --git a/plugins/telemetry/locales/translated/zh_TW.json b/plugins/telemetry/locales/translated/zh_TW.json
deleted file mode 100644
index d0aba239f..000000000
--- a/plugins/telemetry/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  "permissions": {
-    "manage": {
-      "title": "管理使用情況統計信息",
-      "description": "查看已傳送的使用統計訊息，立即傳送並重設實例 ID。"
-    }
-  },
-  "settings": {
-    "enabled": {
-      "label": "分享匿名使用統計數據",
-      "description": "每天發送一份簡短的匿名摘要，以幫助改善 Termix。摘要中絕不包含使用者名稱、主機名稱、IP 位址或憑證。"
-    },
-    "includePlatform": {
-      "label": "包含平台訊息",
-      "description": "作業系統、CPU架構、Node.js版本、資料庫類型以及Termix的安裝方式（Docker、桌面應用程式或伺服器）。"
-    },
-    "includeFeatureUsage": {
-      "label": "包含功能使用",
-      "description": "自上次報告以來，各類標籤頁的開啟次數以及 SSH 登入次數總計是多少？用戶可以在個人資料中關閉此功能。"
-    },
-    "includePlugins": {
-      "label": "包含已安裝的功能",
-      "description": "哪些內建功能已安裝並正在運作？"
-    },
-    "instanceId": {
-      "label": "實例 ID"
-    },
-    "shareFeatureUsage": {
-      "label": "請包含我的功能使用情況",
-      "description": "匿名使用統計資料會統計您開啟的標籤頁類型。不會發送任何關於您或您的主機的資訊。"
-    }
-  },
-  "status": {
-    "title": "狀態",
-    "on": "每天分享一次使用統計資料。",
-    "off": "不分享使用統計數據",
-    "lockedOn": "此功能由 ENABLE_TELEMETRY 環境變數啟用。請修改該變數。",
-    "lockedOff": "此功能已透過 ENABLE_TELEMETRY 環境變數關閉。請更改該變數。",
-    "instanceId": "實例 ID： {{id}}",
-    "noInstanceId": "暫無執行個體 ID",
-    "lastSent": "最後發送 {{date}}",
-    "neverSent": "尚未發送",
-    "nextSend": "下一份報告截止日期 {{date}}",
-    "lastError": "最後嘗試失敗： {{error}}",
-    "preview": "預覽報告",
-    "sendNow": "立即發送",
-    "sending": "正在發送...",
-    "sent": "已發送使用統計訊息",
-    "notSent": "使用情況統計已關閉，未發送任何內容。",
-    "resetId": "重置實例 ID",
-    "resetIdConfirm": "重置實例 ID？以後的報告將顯示為新安裝的實例。",
-    "resetIdDone": "實例 ID 重置",
-    "previewTitle": "下一篇報告",
-    "previewDescription": "這正是現在會發送的內容。",
-    "close": "關閉",
-    "loadFailed": "無法載入使用情況統計狀態"
-  },
-  "plugin": {
-    "name": "使用情況統計"
-  }
-}
diff --git a/plugins/telemetry/manifest.json b/plugins/telemetry/manifest.json
deleted file mode 100644
index c20ec8236..000000000
--- a/plugins/telemetry/manifest.json
+++ /dev/null
@@ -1,97 +0,0 @@
-{
-  "id": "telemetry",
-  "name": "Usage Statistics",
-  "version": "1.0.0",
-  "description": "Sends an anonymous daily summary of how Termix is used, to help decide what to work on next.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Monitoring",
-  "icon": "ChartNoAxesColumn",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "db:core-refs",
-    "network:outbound",
-    "network:serve",
-    "events:core",
-    "db:own",
-    "kv:own",
-    "plugins:read",
-    "ui:surface"
-  ],
-  "contributes": {
-    "permissions": [
-      {
-        "name": "manage",
-        "titleKey": "permissions.manage.title",
-        "descriptionKey": "permissions.manage.description",
-        "defaultRoles": ["admin"]
-      }
-    ],
-    "settings": {
-      "admin": [
-        {
-          "key": "status",
-          "type": "custom",
-          "component": "status",
-          "permission": "manage"
-        },
-        {
-          "key": "enabled",
-          "type": "boolean",
-          "labelKey": "settings.enabled.label",
-          "descriptionKey": "settings.enabled.description",
-          "default": true
-        },
-        {
-          "key": "includePlatform",
-          "type": "boolean",
-          "labelKey": "settings.includePlatform.label",
-          "descriptionKey": "settings.includePlatform.description",
-          "requires": "enabled",
-          "default": true
-        },
-        {
-          "key": "includeFeatureUsage",
-          "type": "boolean",
-          "labelKey": "settings.includeFeatureUsage.label",
-          "descriptionKey": "settings.includeFeatureUsage.description",
-          "requires": "enabled",
-          "default": true
-        },
-        {
-          "key": "includePlugins",
-          "type": "boolean",
-          "labelKey": "settings.includePlugins.label",
-          "descriptionKey": "settings.includePlugins.description",
-          "requires": "enabled",
-          "default": true
-        },
-        {
-          "key": "instanceId",
-          "type": "string",
-          "labelKey": "settings.instanceId.label",
-          "hidden": true,
-          "default": ""
-        }
-      ],
-      "user": [
-        {
-          "key": "shareFeatureUsage",
-          "type": "boolean",
-          "labelKey": "settings.shareFeatureUsage.label",
-          "descriptionKey": "settings.shareFeatureUsage.description",
-          "default": true
-        }
-      ]
-    }
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"],
-  "desktop": "server"
-}
diff --git a/plugins/telemetry/package.json b/plugins/telemetry/package.json
deleted file mode 100644
index a228cdb63..000000000
--- a/plugins/telemetry/package.json
+++ /dev/null
@@ -1,31 +0,0 @@
-{
-  "name": "@termix-plugin/telemetry",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "drizzle-orm": "^0.45.2"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "express": "^5.2.1",
-    "react": "^19.2.8",
-    "sonner": "^2.0.8"
-  }
-}
diff --git a/plugins/telemetry/src/backend/collect.ts b/plugins/telemetry/src/backend/collect.ts
deleted file mode 100644
index c3da23e1d..000000000
--- a/plugins/telemetry/src/backend/collect.ts
+++ /dev/null
@@ -1,140 +0,0 @@
-import fs from "node:fs";
-import { randomUUID } from "node:crypto";
-import { sql } from "drizzle-orm";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { envOverride } from "./config.js";
-import { usageProperty, type UsageCounts, type UsageStore } from "./usage.js";
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// ctx.db hands back the server's own drizzle handle and tables, untyped.
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export interface TelemetrySettings {
-  enabled: boolean;
-  includePlatform: boolean;
-  includeFeatureUsage: boolean;
-  includePlugins: boolean;
-  instanceId: string;
-}
-
-export interface TelemetryPayload {
-  event: "instance_heartbeat";
-  distinct_id: string;
-  properties: Record<string, unknown>;
-}
-
-type Env = Record<string, string | undefined>;
-
-export async function readSettings(
-  ctx: PluginContext,
-): Promise<TelemetrySettings> {
-  const all = await ctx.settings.getAll("admin");
-  return {
-    enabled: all.enabled !== false,
-    includePlatform: all.includePlatform !== false,
-    includeFeatureUsage: all.includeFeatureUsage !== false,
-    includePlugins: all.includePlugins !== false,
-    instanceId: typeof all.instanceId === "string" ? all.instanceId : "",
-  };
-}
-
-/** The env variable decides when set, the admin switch otherwise. */
-export function isEnabled(settings: TelemetrySettings, env?: Env): boolean {
-  return envOverride(env) ?? settings.enabled;
-}
-
-/**
- * Made on first use rather than on activate, so the boot copy of a 2.8
- * instance id is never shadowed by a new one.
- */
-export async function ensureInstanceId(ctx: PluginContext): Promise<string> {
-  const existing = await ctx.settings.get<string>("instanceId");
-  if (existing) return existing;
-  const id = randomUUID();
-  await ctx.settings.set("instanceId", id);
-  return id;
-}
-
-export function detectDeployment(
-  env: Env = process.env,
-  exists: (path: string) => boolean = fs.existsSync,
-): "desktop" | "docker" | "server" {
-  if (env.ELECTRON_EMBEDDED === "true") return "desktop";
-  if (exists("/.dockerenv")) return "docker";
-  return "server";
-}
-
-async function countRows(ctx: PluginContext): Promise<{
-  userCount: number;
-  hostCount: number;
-}> {
-  const { users, hosts } = await ctx.db.refs<{ users: Table; hosts: Table }>();
-  const db = await ctx.db.client<Drizzle>();
-  const count = async (table: Table) => {
-    const rows = await db.select({ count: sql<number>`count(*)` }).from(table);
-    return Number(rows[0]?.count ?? 0);
-  };
-  const [userCount, hostCount] = await Promise.all([
-    count(users),
-    count(hosts),
-  ]);
-  return { userCount, hostCount };
-}
-
-export interface BuiltPayload {
-  payload: TelemetryPayload;
-  /** The counts the payload carries, to subtract once it is sent. */
-  usage: UsageCounts;
-}
-
-export async function buildPayload(
-  ctx: PluginContext,
-  usage: UsageStore,
-  env: Env = process.env,
-): Promise<BuiltPayload> {
-  const settings = await readSettings(ctx);
-  const distinctId = await ensureInstanceId(ctx);
-  const { userCount, hostCount } = await countRows(ctx);
-
-  const properties: Record<string, unknown> = {
-    version: env.VERSION || "unknown",
-    user_count: userCount,
-    host_count: hostCount,
-  };
-
-  if (settings.includePlatform) {
-    properties.os = process.platform;
-    properties.arch = process.arch;
-    properties.node_version = process.versions.node;
-    properties.db_dialect = ctx.db.dialect;
-    properties.deployment = detectDeployment(env);
-  }
-
-  let carried: UsageCounts = {};
-  if (settings.includeFeatureUsage) {
-    carried = await usage.read();
-    for (const [name, count] of Object.entries(carried)) {
-      properties[usageProperty(name)] = count;
-    }
-  }
-
-  if (settings.includePlugins) {
-    const running = (await ctx.plugins.list())
-      .filter((plugin) => plugin.state === "active")
-      .map((plugin) => plugin.id)
-      .sort();
-    properties.plugins_enabled = running;
-    properties.plugin_count = running.length;
-  }
-
-  return {
-    payload: {
-      event: "instance_heartbeat",
-      distinct_id: distinctId,
-      properties,
-    },
-    usage: carried,
-  };
-}
diff --git a/plugins/telemetry/src/backend/config.ts b/plugins/telemetry/src/backend/config.ts
deleted file mode 100644
index 9af9b307e..000000000
--- a/plugins/telemetry/src/backend/config.ts
+++ /dev/null
@@ -1,26 +0,0 @@
-/** Public project key. Only lets a client send events, never read them. */
-export const DEFAULT_POSTHOG_API_KEY =
-  "phc_xM8UznirsFxUkGE68gH4jzeqevf4kh76wGw7Ci7hH2dd";
-export const DEFAULT_POSTHOG_HOST = "https://us.i.posthog.com";
-
-type Env = Record<string, string | undefined>;
-
-/** ENABLE_TELEMETRY wins over the admin setting when set. */
-export function envOverride(env: Env = process.env): boolean | null {
-  const value = env.ENABLE_TELEMETRY?.trim().toLowerCase();
-  if (!value) return null;
-  return value === "true";
-}
-
-export function posthogConfig(env: Env = process.env): {
-  apiKey: string;
-  host: string;
-} {
-  return {
-    apiKey: env.POSTHOG_API_KEY?.trim() || DEFAULT_POSTHOG_API_KEY,
-    host: (env.POSTHOG_HOST?.trim() || DEFAULT_POSTHOG_HOST).replace(
-      /\/+$/,
-      "",
-    ),
-  };
-}
diff --git a/plugins/telemetry/src/backend/index.ts b/plugins/telemetry/src/backend/index.ts
deleted file mode 100644
index edca3ac28..000000000
--- a/plugins/telemetry/src/backend/index.ts
+++ /dev/null
@@ -1,65 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { envOverride } from "./config.js";
-import { isEnabled, readSettings } from "./collect.js";
-import { CHECK_INTERVAL_MS, createReporter } from "./reporter.js";
-import { registerRoutes } from "./routes.js";
-import { createUsageStore } from "./usage.js";
-
-/** First check a few minutes after boot, once core's boot copies ran. */
-const FIRST_CHECK_DELAY_MS = 3 * 60 * 1000;
-
-type Env = Record<string, string | undefined>;
-
-export async function activateWith(ctx: PluginContext, env: Env) {
-  const usage = createUsageStore(ctx.kv);
-  const reporter = createReporter(ctx, usage, env);
-
-  const check = async () => {
-    try {
-      await reporter.send();
-    } catch {
-      // Logged by the reporter; the next check tries again.
-    }
-  };
-  ctx.schedule.after(FIRST_CHECK_DELAY_MS, check);
-  ctx.schedule.every(CHECK_INTERVAL_MS, check);
-
-  const countEvent = (feature: string) => async () => {
-    const settings = await readSettings(ctx);
-    if (isEnabled(settings, env) && settings.includeFeatureUsage) {
-      await usage.add({ [feature]: 1 });
-    }
-  };
-  const onLogin = countEvent("ssh_login");
-  const onConnected = countEvent("host_connected");
-  ctx.events.on("host.login", () => void onLogin().catch(() => undefined));
-  ctx.events.on("host.session.status", (payload) => {
-    if ((payload as { online?: boolean } | null)?.online) {
-      void onConnected().catch(() => undefined);
-    }
-  });
-
-  ctx.settings.onValidate("admin", async (values) => {
-    const locked = envOverride(env);
-    if (locked === null || values.enabled === undefined) return;
-    const stored = (await ctx.settings.get<boolean>("enabled")) !== false;
-    if (values.enabled !== stored) {
-      return {
-        enabled:
-          "This is set by the ENABLE_TELEMETRY environment variable and cannot be changed here.",
-      };
-    }
-  });
-
-  registerRoutes(ctx, ctx.http.router<Router>(), reporter, usage, env);
-  return { reporter, usage };
-}
-
-export async function activate(ctx: PluginContext) {
-  await activateWith(ctx, process.env);
-}
-
-export async function deactivate() {
-  // Everything above was registered through ctx and is disposed by core.
-}
diff --git a/plugins/telemetry/src/backend/reporter.ts b/plugins/telemetry/src/backend/reporter.ts
deleted file mode 100644
index ddb857773..000000000
--- a/plugins/telemetry/src/backend/reporter.ts
+++ /dev/null
@@ -1,117 +0,0 @@
-import { randomUUID } from "node:crypto";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { envOverride, posthogConfig } from "./config.js";
-import { buildPayload, isEnabled, readSettings } from "./collect.js";
-import type { UsageStore } from "./usage.js";
-
-export const REPORT_INTERVAL_MS = 24 * 60 * 60 * 1000;
-/** Checked hourly, so a restart never skips or doubles a day. */
-export const CHECK_INTERVAL_MS = 60 * 60 * 1000;
-
-const STATE_KEY = "state";
-
-export interface ReporterState {
-  lastSentAt: string | null;
-  lastAttemptAt: string | null;
-  lastError: string | null;
-}
-
-export type SendResult =
-  { sent: true } | { sent: false; reason: "disabled" | "not-due" };
-
-type Env = Record<string, string | undefined>;
-
-export function createReporter(
-  ctx: PluginContext,
-  usage: UsageStore,
-  env: Env = process.env,
-  now: () => number = Date.now,
-) {
-  async function state(): Promise<ReporterState> {
-    const stored = (await ctx.kv.get(STATE_KEY)) as
-      Partial<ReporterState> | undefined;
-    return {
-      lastSentAt: stored?.lastSentAt ?? null,
-      lastAttemptAt: stored?.lastAttemptAt ?? null,
-      lastError: stored?.lastError ?? null,
-    };
-  }
-
-  async function saveState(patch: Partial<ReporterState>) {
-    await ctx.kv.set(STATE_KEY, { ...(await state()), ...patch });
-  }
-
-  async function nextDueAt(): Promise<string | null> {
-    const { lastSentAt } = await state();
-    if (!lastSentAt) return null;
-    return new Date(Date.parse(lastSentAt) + REPORT_INTERVAL_MS).toISOString();
-  }
-
-  async function send(options: { force?: boolean } = {}): Promise<SendResult> {
-    if (!isEnabled(await readSettings(ctx), env)) {
-      return { sent: false, reason: "disabled" };
-    }
-    if (!options.force) {
-      const due = await nextDueAt();
-      if (due && Date.parse(due) > now()) {
-        return { sent: false, reason: "not-due" };
-      }
-    }
-
-    const attemptAt = new Date(now()).toISOString();
-    const { apiKey, host } = posthogConfig(env);
-    try {
-      const { payload, usage: carried } = await buildPayload(ctx, usage, env);
-      const response = await ctx.fetch(`${host}/capture/`, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ api_key: apiKey, ...payload }),
-        timeoutMs: 10_000,
-      });
-      if (!response.ok) {
-        throw new Error(`PostHog answered ${response.status}`);
-      }
-      await usage.subtract(carried);
-      await saveState({
-        lastSentAt: attemptAt,
-        lastAttemptAt: attemptAt,
-        lastError: null,
-      });
-      ctx.log.info("Sent daily usage statistics");
-      return { sent: true };
-    } catch (error) {
-      const message = error instanceof Error ? error.message : String(error);
-      await saveState({ lastAttemptAt: attemptAt, lastError: message });
-      ctx.log.warn(`Could not send usage statistics: ${message}`);
-      throw error;
-    }
-  }
-
-  return {
-    state,
-    send,
-
-    async status() {
-      const settings = await readSettings(ctx);
-      return {
-        enabled: isEnabled(settings, env),
-        locked: envOverride(env) !== null,
-        instanceId: settings.instanceId || null,
-        nextDueAt: await nextDueAt(),
-        ...(await state()),
-      };
-    },
-
-    async preview() {
-      return (await buildPayload(ctx, usage, env)).payload;
-    },
-
-    async resetInstanceId(): Promise<string> {
-      const id = randomUUID();
-      await ctx.settings.set("instanceId", id);
-      return id;
-    },
-  };
-}
-
-export type Reporter = ReturnType<typeof createReporter>;
diff --git a/plugins/telemetry/src/backend/routes.ts b/plugins/telemetry/src/backend/routes.ts
deleted file mode 100644
index d593d9ddd..000000000
--- a/plugins/telemetry/src/backend/routes.ts
+++ /dev/null
@@ -1,148 +0,0 @@
-import type { Request, RequestHandler, Response, Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { isEnabled, readSettings } from "./collect.js";
-import type { Reporter } from "./reporter.js";
-import { sanitizeUsage, type UsageStore } from "./usage.js";
-
-/** Whether the signed-in user's feature usage should be counted. */
-export async function shouldTrackUser(
-  ctx: PluginContext,
-  userId: string | undefined,
-  env?: Record<string, string | undefined>,
-): Promise<boolean> {
-  if (!userId) return false;
-  const settings = await readSettings(ctx);
-  if (!isEnabled(settings, env) || !settings.includeFeatureUsage) return false;
-  return (await ctx.settings.getUser(userId, "shareFeatureUsage")) !== false;
-}
-
-export function registerRoutes(
-  ctx: PluginContext,
-  router: Router,
-  reporter: Reporter,
-  usage: UsageStore,
-  env?: Record<string, string | undefined>,
-): void {
-  const manage = ctx.rbac.require("manage") as unknown as RequestHandler;
-
-  /**
-   * @openapi
-   * /plugin-api/telemetry/status:
-   *   get:
-   *     summary: Usage statistics status
-   *     description: Whether usage statistics are sent, whether ENABLE_TELEMETRY locks that, the instance ID and the last attempt.
-   *     tags: [Usage Statistics]
-   *     responses:
-   *       200:
-   *         description: Status.
-   *       403:
-   *         description: Missing the telemetry.manage permission.
-   */
-  router.get("/status", manage, async (_req: Request, res: Response) => {
-    res.json(await reporter.status());
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/telemetry/preview:
-   *   get:
-   *     summary: Preview the next report
-   *     description: The exact event that would be sent right now, without the API key.
-   *     tags: [Usage Statistics]
-   *     responses:
-   *       200:
-   *         description: The event.
-   *       403:
-   *         description: Missing the telemetry.manage permission.
-   */
-  router.get("/preview", manage, async (_req: Request, res: Response) => {
-    res.json(await reporter.preview());
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/telemetry/send:
-   *   post:
-   *     summary: Send usage statistics now
-   *     description: Sends the report straight away. Does nothing while usage statistics are turned off.
-   *     tags: [Usage Statistics]
-   *     responses:
-   *       200:
-   *         description: Whether a report was sent.
-   *       403:
-   *         description: Missing the telemetry.manage permission.
-   *       502:
-   *         description: The report could not be delivered.
-   */
-  router.post("/send", manage, async (_req: Request, res: Response) => {
-    try {
-      res.json(await reporter.send({ force: true }));
-    } catch (error) {
-      res.status(502).json({
-        error: error instanceof Error ? error.message : String(error),
-      });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/telemetry/reset-id:
-   *   post:
-   *     summary: Reset the instance ID
-   *     description: Picks a new random instance ID, so later reports look like a new install.
-   *     tags: [Usage Statistics]
-   *     responses:
-   *       200:
-   *         description: The new ID.
-   *       403:
-   *         description: Missing the telemetry.manage permission.
-   */
-  router.post("/reset-id", manage, async (_req: Request, res: Response) => {
-    res.json({ instanceId: await reporter.resetInstanceId() });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/telemetry/usage/config:
-   *   get:
-   *     summary: Whether to count this user's feature usage
-   *     description: False when usage statistics or feature usage are off, or the user turned off their own part.
-   *     tags: [Usage Statistics]
-   *     responses:
-   *       200:
-   *         description: "{ track: boolean }"
-   */
-  router.get("/usage/config", async (_req: Request, res: Response) => {
-    res.json({ track: await shouldTrackUser(ctx, ctx.currentActor(), env) });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/telemetry/usage:
-   *   post:
-   *     summary: Add feature usage counts
-   *     description: Counts from the signed-in user's browser, added to the next report. Ignored when this user is not counted. Names and counts are checked and capped.
-   *     tags: [Usage Statistics]
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               features:
-   *                 type: object
-   *                 additionalProperties:
-   *                   type: integer
-   *     responses:
-   *       204:
-   *         description: Recorded or ignored.
-   */
-  router.post("/usage", async (req: Request, res: Response) => {
-    if (await shouldTrackUser(ctx, ctx.currentActor(), env)) {
-      const counts = sanitizeUsage(req.body?.features);
-      if (Object.keys(counts).length > 0) await usage.add(counts);
-    }
-    res.status(204).end();
-  });
-}
diff --git a/plugins/telemetry/src/backend/usage.ts b/plugins/telemetry/src/backend/usage.ts
deleted file mode 100644
index f2c436dc1..000000000
--- a/plugins/telemetry/src/backend/usage.ts
+++ /dev/null
@@ -1,75 +0,0 @@
-import type { PluginKeyValue } from "@termix/plugin-sdk/backend";
-
-const USAGE_KEY = "usage";
-const FEATURE_NAME = /^[a-z][a-z0-9_.-]{0,63}$/;
-export const MAX_FEATURES = 100;
-const MAX_COUNT = 100_000;
-
-export type UsageCounts = Record<string, number>;
-
-/** Keeps valid names with positive whole counts, capped. */
-export function sanitizeUsage(input: unknown): UsageCounts {
-  const clean: UsageCounts = {};
-  if (!input || typeof input !== "object" || Array.isArray(input)) {
-    return clean;
-  }
-  for (const [name, raw] of Object.entries(input)) {
-    if (!FEATURE_NAME.test(name)) continue;
-    const count = Math.floor(Number(raw));
-    if (!Number.isFinite(count) || count <= 0) continue;
-    clean[name] = Math.min(count, MAX_COUNT);
-    if (Object.keys(clean).length >= MAX_FEATURES) break;
-  }
-  return clean;
-}
-
-export function createUsageStore(kv: PluginKeyValue) {
-  // One write at a time, so two requests never drop each other's counts.
-  let queue: Promise<unknown> = Promise.resolve();
-  const serial = <T>(fn: () => Promise<T>): Promise<T> => {
-    const next = queue.then(fn, fn);
-    queue = next.catch(() => undefined);
-    return next;
-  };
-
-  const read = async (): Promise<UsageCounts> =>
-    sanitizeUsage(await kv.get(USAGE_KEY));
-
-  return {
-    read,
-
-    add: (counts: UsageCounts) =>
-      serial(async () => {
-        const current = await read();
-        for (const [name, count] of Object.entries(sanitizeUsage(counts))) {
-          if (
-            !(name in current) &&
-            Object.keys(current).length >= MAX_FEATURES
-          ) {
-            continue;
-          }
-          current[name] = Math.min((current[name] ?? 0) + count, MAX_COUNT);
-        }
-        await kv.set(USAGE_KEY, current);
-      }),
-
-    /** Drops what a successful report already carried. */
-    subtract: (sent: UsageCounts) =>
-      serial(async () => {
-        const current = await read();
-        for (const [name, count] of Object.entries(sent)) {
-          const left = (current[name] ?? 0) - count;
-          if (left > 0) current[name] = left;
-          else delete current[name];
-        }
-        await kv.set(USAGE_KEY, current);
-      }),
-  };
-}
-
-export type UsageStore = ReturnType<typeof createUsageStore>;
-
-/** PostHog property name for a feature: used_tab_terminal. */
-export function usageProperty(name: string): string {
-  return `used_${name.replace(/[.-]/g, "_")}`;
-}
diff --git a/plugins/telemetry/src/frontend/TelemetryStatusSetting.tsx b/plugins/telemetry/src/frontend/TelemetryStatusSetting.tsx
deleted file mode 100644
index 1be24dd08..000000000
--- a/plugins/telemetry/src/frontend/TelemetryStatusSetting.tsx
+++ /dev/null
@@ -1,191 +0,0 @@
-import { useCallback, useEffect, useState } from "react";
-import { toast } from "sonner";
-import {
-  usePluginApi,
-  useTranslation,
-  type SettingsComponentProps,
-} from "@termix/plugin-sdk/frontend";
-import {
-  Button,
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogFooter,
-  DialogHeader,
-  DialogTitle,
-  useConfirmation,
-} from "@termix/plugin-sdk/ui";
-
-export interface TelemetryStatus {
-  enabled: boolean;
-  locked: boolean;
-  instanceId: string | null;
-  lastSentAt: string | null;
-  lastAttemptAt: string | null;
-  lastError: string | null;
-  nextDueAt: string | null;
-}
-
-function errorMessage(error: unknown): string {
-  const data = (error as { response?: { data?: { error?: string } } })?.response
-    ?.data;
-  if (data?.error) return data.error;
-  return error instanceof Error ? error.message : String(error);
-}
-
-export function TelemetryStatusSetting({ running }: SettingsComponentProps) {
-  const { t } = useTranslation();
-  const api = usePluginApi();
-  const { confirmWithToast } = useConfirmation();
-  const [status, setStatus] = useState<TelemetryStatus | null>(null);
-  const [sending, setSending] = useState(false);
-  const [preview, setPreview] = useState<unknown>(null);
-
-  const load = useCallback(async () => {
-    try {
-      const { data } = await api.get<TelemetryStatus>("/status");
-      setStatus(data);
-    } catch {
-      setStatus(null);
-      toast.error(t("status.loadFailed"));
-    }
-  }, [api, t]);
-
-  useEffect(() => {
-    if (running) void load();
-  }, [running, load]);
-
-  async function sendNow() {
-    setSending(true);
-    try {
-      const { data } = await api.post<{ sent: boolean }>("/send");
-      if (data.sent) toast.success(t("status.sent"));
-      else toast.info(t("status.notSent"));
-    } catch (error) {
-      toast.error(errorMessage(error));
-    } finally {
-      setSending(false);
-      await load();
-    }
-  }
-
-  async function showPreview() {
-    try {
-      const { data } = await api.get("/preview");
-      setPreview(data);
-    } catch (error) {
-      toast.error(errorMessage(error));
-    }
-  }
-
-  function resetId() {
-    void confirmWithToast(t("status.resetIdConfirm"), async () => {
-      try {
-        await api.post("/reset-id");
-        toast.success(t("status.resetIdDone"));
-        await load();
-      } catch (error) {
-        toast.error(errorMessage(error));
-      }
-    });
-  }
-
-  let summary = t("status.off");
-  if (status?.locked) {
-    summary = status.enabled ? t("status.lockedOn") : t("status.lockedOff");
-  } else if (status?.enabled) {
-    summary = t("status.on");
-  }
-
-  const muted = "text-[10px] text-muted-foreground";
-
-  return (
-    <div className="flex flex-col gap-2 border border-border bg-background/50 p-2">
-      <span className="text-xs font-medium">{t("status.title")}</span>
-      {status && (
-        <>
-          <span className={muted}>{summary}</span>
-          <span className={`${muted} break-all`}>
-            {status.instanceId
-              ? t("status.instanceId", { id: status.instanceId })
-              : t("status.noInstanceId")}
-          </span>
-          <span className={muted}>
-            {status.lastSentAt
-              ? t("status.lastSent", {
-                  date: new Date(status.lastSentAt).toLocaleString(),
-                })
-              : t("status.neverSent")}
-          </span>
-          {status.enabled && status.nextDueAt && (
-            <span className={muted}>
-              {t("status.nextSend", {
-                date: new Date(status.nextDueAt).toLocaleString(),
-              })}
-            </span>
-          )}
-          {status.lastError && (
-            <span className="text-[10px] text-destructive">
-              {t("status.lastError", { error: status.lastError })}
-            </span>
-          )}
-        </>
-      )}
-      <div className="flex flex-wrap gap-2">
-        <Button
-          type="button"
-          variant="outline"
-          className="rounded-none"
-          disabled={!running}
-          onClick={showPreview}
-        >
-          {t("status.preview")}
-        </Button>
-        <Button
-          type="button"
-          variant="outline"
-          className="rounded-none"
-          disabled={!running || sending || !status?.enabled}
-          onClick={sendNow}
-        >
-          {sending ? t("status.sending") : t("status.sendNow")}
-        </Button>
-        <Button
-          type="button"
-          variant="outline"
-          className="rounded-none"
-          disabled={!running}
-          onClick={resetId}
-        >
-          {t("status.resetId")}
-        </Button>
-      </div>
-      <Dialog
-        open={preview !== null}
-        onOpenChange={(open) => !open && setPreview(null)}
-      >
-        <DialogContent className="rounded-none sm:max-w-2xl">
-          <DialogHeader>
-            <DialogTitle>{t("status.previewTitle")}</DialogTitle>
-            <DialogDescription>
-              {t("status.previewDescription")}
-            </DialogDescription>
-          </DialogHeader>
-          <pre className="max-h-[60vh] overflow-auto border border-border bg-muted/40 p-2 text-[11px]">
-            {JSON.stringify(preview, null, 2)}
-          </pre>
-          <DialogFooter>
-            <Button
-              type="button"
-              variant="outline"
-              className="rounded-none"
-              onClick={() => setPreview(null)}
-            >
-              {t("status.close")}
-            </Button>
-          </DialogFooter>
-        </DialogContent>
-      </Dialog>
-    </div>
-  );
-}
diff --git a/plugins/telemetry/src/frontend/index.tsx b/plugins/telemetry/src/frontend/index.tsx
deleted file mode 100644
index 40ff753fc..000000000
--- a/plugins/telemetry/src/frontend/index.tsx
+++ /dev/null
@@ -1,12 +0,0 @@
-import type { TermixApp } from "@termix/plugin-sdk/frontend";
-import { TelemetryStatusSetting } from "./TelemetryStatusSetting";
-import { startTabTracker } from "./tracker";
-
-export function activate(app: TermixApp): void {
-  app.registerSettingsComponent("status", TelemetryStatusSetting);
-  if (!app.guest) app.onDispose(startTabTracker(app));
-}
-
-export function deactivate(): void {
-  // Registrations through app are disposed by core.
-}
diff --git a/plugins/telemetry/src/frontend/tracker.ts b/plugins/telemetry/src/frontend/tracker.ts
deleted file mode 100644
index a09c5fe53..000000000
--- a/plugins/telemetry/src/frontend/tracker.ts
+++ /dev/null
@@ -1,109 +0,0 @@
-import type { TermixApp } from "@termix/plugin-sdk/frontend";
-
-export const FLUSH_INTERVAL_MS = 5 * 60 * 1000;
-
-type Counts = Record<string, number>;
-
-/** Open tabs per type. Slot ids change on every read, so only types count. */
-export function countTabTypes(layout: unknown): Counts {
-  const tabs = (layout as { tabs?: unknown } | null)?.tabs;
-  const counts: Counts = {};
-  if (!Array.isArray(tabs)) return counts;
-  for (const tab of tabs) {
-    const type = (tab as { type?: unknown })?.type;
-    if (typeof type === "string" && type)
-      counts[type] = (counts[type] ?? 0) + 1;
-  }
-  return counts;
-}
-
-/** Tabs opened between two snapshots, keyed as tab.<type>. */
-export function openedSince(before: Counts, after: Counts): Counts {
-  const opened: Counts = {};
-  for (const [type, count] of Object.entries(after)) {
-    const added = count - (before[type] ?? 0);
-    if (added > 0) opened[`tab.${type}`] = added;
-  }
-  return opened;
-}
-
-/**
- * Counts which kinds of tabs the user opens and sends the totals to the
- * plugin's backend every few minutes. Does nothing unless the backend says
- * this user is counted.
- */
-export function startTabTracker(
-  app: TermixApp,
-  flushMs: number = FLUSH_INTERVAL_MS,
-): () => void {
-  let track = false;
-  let ready = false;
-  let previous: Counts = {};
-  let pending: Counts = {};
-
-  const snapshot = () => countTabTypes(app.tabs.getLayout());
-
-  const refreshConfig = async () => {
-    try {
-      const { data } = await app.api.get<{ track?: boolean }>("/usage/config");
-      track = data?.track === true;
-    } catch {
-      track = false;
-    }
-    if (!track) pending = {};
-  };
-
-  const flush = (keepalive = false) => {
-    if (!track || Object.keys(pending).length === 0) return;
-    const features = pending;
-    pending = {};
-    void app
-      .fetch("/usage", {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ features }),
-        keepalive,
-      })
-      .catch(() => undefined);
-  };
-
-  const disposers: Array<() => void> = [];
-
-  disposers.push(
-    app.tabs.onReady(() => {
-      // Tabs restored after login were opened in an earlier session.
-      previous = snapshot();
-      ready = true;
-    }),
-  );
-
-  disposers.push(
-    app.tabs.onChange(() => {
-      const current = snapshot();
-      if (ready && track) {
-        for (const [name, count] of Object.entries(
-          openedSince(previous, current),
-        )) {
-          pending[name] = (pending[name] ?? 0) + count;
-        }
-      }
-      previous = current;
-    }),
-  );
-
-  disposers.push(app.onSettingsChanged(() => void refreshConfig()));
-
-  const timer = setInterval(() => flush(), flushMs);
-  disposers.push(() => clearInterval(timer));
-
-  const onPageHide = () => flush(true);
-  window.addEventListener("pagehide", onPageHide);
-  disposers.push(() => window.removeEventListener("pagehide", onPageHide));
-
-  void refreshConfig();
-
-  return () => {
-    flush(true);
-    for (const dispose of disposers) dispose();
-  };
-}
diff --git a/plugins/telemetry/tests/backend/telemetry.test.ts b/plugins/telemetry/tests/backend/telemetry.test.ts
deleted file mode 100644
index d5e6de7d9..000000000
--- a/plugins/telemetry/tests/backend/telemetry.test.ts
+++ /dev/null
@@ -1,378 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import { afterEach, describe, expect, it, vi } from "vitest";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-import { activateWith } from "../../src/backend/index.js";
-import {
-  DEFAULT_POSTHOG_API_KEY,
-  envOverride,
-  posthogConfig,
-} from "../../src/backend/config.js";
-import { detectDeployment } from "../../src/backend/collect.js";
-import {
-  MAX_FEATURES,
-  sanitizeUsage,
-  usageProperty,
-} from "../../src/backend/usage.js";
-import { CHECK_INTERVAL_MS } from "../../src/backend/reporter.js";
-
-const manifest = manifestJson as unknown as PluginManifest;
-const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-
-interface Sent {
-  url: string;
-  body: Record<string, unknown> & { properties: Record<string, unknown> };
-}
-
-let cleanup: Array<() => Promise<void> | void> = [];
-
-afterEach(async () => {
-  for (const fn of cleanup) await fn();
-  cleanup = [];
-});
-
-async function setup(
-  options: {
-    settings?: Record<string, unknown>;
-    env?: Record<string, string | undefined>;
-    permissions?: string[];
-    status?: number;
-  } = {},
-) {
-  const db: TestDb = await createTestDb(pluginDir);
-  db.sqlite
-    .prepare("INSERT INTO users (id, username) VALUES (?, ?)")
-    .run("u1", "u1");
-  db.sqlite
-    .prepare("INSERT INTO users (id, username) VALUES (?, ?)")
-    .run("u2", "u2");
-  db.sqlite.prepare("INSERT INTO ssh_data (id) VALUES (?)").run(1);
-
-  const sent: Sent[] = [];
-  let router: Router | null = null;
-  const mock: MockPluginContext = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    settings: options.settings,
-    permissions: options.permissions ?? ["manage"],
-    installedPlugins: [
-      { id: "telemetry", version: "1.0.0", source: "bundled", state: "active" },
-      { id: "docker", version: "1.0.0", source: "bundled", state: "active" },
-      { id: "serial", version: "1.0.0", source: "bundled", state: "stopped" },
-    ],
-    fetch: async (url, init) => {
-      sent.push({ url, body: JSON.parse(String(init?.body)) });
-      return new Response("{}", { status: options.status ?? 200 });
-    },
-  });
-  mock.setActor("u1");
-
-  const env = { VERSION: "2.9.0", ...options.env };
-  const { reporter, usage } = await activateWith(mock.ctx, env);
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") ?? "u1");
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-  cleanup.push(
-    () => new Promise<void>((resolve) => server.close(() => resolve())),
-    () => db.close(),
-  );
-
-  const call = async (
-    method: string,
-    path: string,
-    body?: unknown,
-    user = "u1",
-  ) => {
-    const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-      method,
-      headers: {
-        "x-test-user": user,
-        ...(body !== undefined ? { "content-type": "application/json" } : {}),
-      },
-      body: body !== undefined ? JSON.stringify(body) : undefined,
-    });
-    const text = await response.text();
-    return { status: response.status, body: text ? JSON.parse(text) : null };
-  };
-
-  return { mock, reporter, usage, sent, call };
-}
-
-describe("config", () => {
-  it("reads ENABLE_TELEMETRY as a lock only when set", () => {
-    expect(envOverride({})).toBeNull();
-    expect(envOverride({ ENABLE_TELEMETRY: " " })).toBeNull();
-    expect(envOverride({ ENABLE_TELEMETRY: "TRUE" })).toBe(true);
-    expect(envOverride({ ENABLE_TELEMETRY: "false" })).toBe(false);
-    expect(envOverride({ ENABLE_TELEMETRY: "no" })).toBe(false);
-  });
-
-  it("uses the embedded key unless the env sets one", () => {
-    expect(posthogConfig({})).toEqual({
-      apiKey: DEFAULT_POSTHOG_API_KEY,
-      host: "https://us.i.posthog.com",
-    });
-    expect(
-      posthogConfig({
-        POSTHOG_API_KEY: "k",
-        POSTHOG_HOST: "https://ph.local/",
-      }),
-    ).toEqual({ apiKey: "k", host: "https://ph.local" });
-  });
-
-  it("detects how Termix runs", () => {
-    expect(detectDeployment({ ELECTRON_EMBEDDED: "true" }, () => true)).toBe(
-      "desktop",
-    );
-    expect(detectDeployment({}, () => true)).toBe("docker");
-    expect(detectDeployment({}, () => false)).toBe("server");
-  });
-});
-
-describe("usage counts", () => {
-  it("keeps valid names and positive whole counts", () => {
-    expect(
-      sanitizeUsage({
-        "tab.terminal": 2.7,
-        "Bad Name": 1,
-        zero: 0,
-        neg: -3,
-        nan: "x",
-        big: 1e9,
-      }),
-    ).toEqual({ "tab.terminal": 2, big: 100_000 });
-    expect(sanitizeUsage(null)).toEqual({});
-    expect(sanitizeUsage([1])).toEqual({});
-  });
-
-  it("caps the number of features", () => {
-    const many = Object.fromEntries(
-      Array.from({ length: MAX_FEATURES + 20 }, (_, i) => [`f${i}`, 1]),
-    );
-    expect(Object.keys(sanitizeUsage(many))).toHaveLength(MAX_FEATURES);
-  });
-
-  it("maps a feature to a property name", () => {
-    expect(usageProperty("tab.file-manager")).toBe("used_tab_file_manager");
-  });
-});
-
-describe("reporting", () => {
-  it("sends a full report with every section on", async () => {
-    const { mock, usage, sent } = await setup();
-    await usage.add({ "tab.terminal": 3 });
-    mock.ctx.events.emit("host.login", { hostId: 1 });
-    mock.ctx.events.emit("host.session.status", { hostId: 1, online: true });
-    mock.ctx.events.emit("host.session.status", { hostId: 1, online: false });
-    await vi.waitFor(async () =>
-      expect(await usage.read()).toMatchObject({
-        ssh_login: 1,
-        host_connected: 1,
-      }),
-    );
-
-    await mock.runScheduled();
-
-    expect(sent).toHaveLength(1);
-    const { url, body } = sent[0];
-    expect(url).toBe("https://us.i.posthog.com/capture/");
-    expect(body.api_key).toBe(DEFAULT_POSTHOG_API_KEY);
-    expect(body.event).toBe("instance_heartbeat");
-    expect(typeof body.distinct_id).toBe("string");
-    expect(body.properties).toMatchObject({
-      version: "2.9.0",
-      user_count: 2,
-      host_count: 1,
-      os: process.platform,
-      arch: process.arch,
-      db_dialect: "sqlite",
-      used_tab_terminal: 3,
-      used_ssh_login: 1,
-      used_host_connected: 1,
-      plugins_enabled: ["docker", "telemetry"],
-      plugin_count: 2,
-    });
-    expect(await usage.read()).toEqual({});
-  });
-
-  it("checks hourly and sends at most once a day", async () => {
-    const { mock, sent } = await setup();
-    expect(mock.scheduled.find((job) => job.kind === "every")?.ms).toBe(
-      CHECK_INTERVAL_MS,
-    );
-    await mock.runScheduled();
-    await mock.runScheduled();
-    expect(sent).toHaveLength(1);
-  });
-
-  it("leaves out each section when its switch is off", async () => {
-    const { mock, usage, sent } = await setup({
-      settings: {
-        includePlatform: false,
-        includeFeatureUsage: false,
-        includePlugins: false,
-      },
-    });
-    await usage.add({ "tab.terminal": 1 });
-    await mock.runScheduled();
-    expect(Object.keys(sent[0].body.properties).sort()).toEqual([
-      "host_count",
-      "user_count",
-      "version",
-    ]);
-    expect(await usage.read()).toEqual({ "tab.terminal": 1 });
-  });
-
-  it("sends nothing and counts nothing while turned off", async () => {
-    const { mock, usage, sent } = await setup({ settings: { enabled: false } });
-    mock.ctx.events.emit("host.login", { hostId: 1 });
-    await mock.runScheduled();
-    expect(sent).toEqual([]);
-    expect(await usage.read()).toEqual({});
-  });
-
-  it("lets ENABLE_TELEMETRY win over the admin switch", async () => {
-    const off = await setup({ env: { ENABLE_TELEMETRY: "false" } });
-    await off.mock.runScheduled();
-    expect(off.sent).toEqual([]);
-
-    const on = await setup({
-      settings: { enabled: false },
-      env: { ENABLE_TELEMETRY: "true" },
-    });
-    await on.mock.runScheduled();
-    expect(on.sent).toHaveLength(1);
-  });
-
-  it("keeps the 2.8 instance id", async () => {
-    const { mock, sent } = await setup({
-      settings: { instanceId: "legacy-id" },
-    });
-    await mock.runScheduled();
-    expect(sent[0].body.distinct_id).toBe("legacy-id");
-  });
-
-  it("records a failed send and keeps the counts", async () => {
-    const { mock, reporter, usage, sent } = await setup({ status: 500 });
-    await usage.add({ "tab.terminal": 1 });
-    await mock.runScheduled();
-    expect(sent.length).toBeGreaterThan(0);
-    const state = await reporter.state();
-    expect(state.lastError).toBe("PostHog answered 500");
-    expect(state.lastSentAt).toBeNull();
-    expect(await usage.read()).toEqual({ "tab.terminal": 1 });
-  });
-
-  it("refuses a change to the switch while ENABLE_TELEMETRY locks it", async () => {
-    const locked = await setup({ env: { ENABLE_TELEMETRY: "true" } });
-    expect(
-      await locked.mock.validateSettings("admin", { enabled: false }),
-    ).toHaveProperty("enabled");
-    expect(
-      await locked.mock.validateSettings("admin", { enabled: true }),
-    ).not.toHaveProperty("enabled");
-
-    const free = await setup();
-    expect(
-      await free.mock.validateSettings("admin", { enabled: false }),
-    ).not.toHaveProperty("enabled");
-  });
-});
-
-describe("routes", () => {
-  it("serves status, preview, send and reset to a manager", async () => {
-    const { call, sent } = await setup();
-
-    const preview = await call("GET", "/preview");
-    expect(preview.status).toBe(200);
-    expect(preview.body.event).toBe("instance_heartbeat");
-    expect(preview.body).not.toHaveProperty("api_key");
-    expect(sent).toEqual([]);
-
-    expect((await call("POST", "/send")).body).toEqual({ sent: true });
-    const status = await call("GET", "/status");
-    expect(status.body).toMatchObject({
-      enabled: true,
-      locked: false,
-      lastError: null,
-    });
-    expect(status.body.lastSentAt).toBeTruthy();
-    expect(status.body.nextDueAt).toBeTruthy();
-
-    const before = status.body.instanceId;
-    const reset = await call("POST", "/reset-id");
-    expect(reset.body.instanceId).not.toBe(before);
-  });
-
-  it("answers 502 when the report cannot be delivered", async () => {
-    const { call } = await setup({ status: 503 });
-    const response = await call("POST", "/send");
-    expect(response.status).toBe(502);
-    expect(response.body.error).toBe("PostHog answered 503");
-  });
-
-  it("keeps the admin routes from users without manage", async () => {
-    const { call } = await setup({ permissions: [] });
-    for (const [method, path] of [
-      ["GET", "/status"],
-      ["GET", "/preview"],
-      ["POST", "/send"],
-      ["POST", "/reset-id"],
-    ]) {
-      expect((await call(method, path)).status).toBe(403);
-    }
-    expect((await call("GET", "/usage/config")).status).toBe(200);
-  });
-
-  it("records usage only for users who are counted", async () => {
-    const { mock, call, usage } = await setup({ permissions: [] });
-    expect((await call("GET", "/usage/config")).body).toEqual({ track: true });
-
-    await call("POST", "/usage", {
-      features: { "tab.terminal": 2, "BAD!": 5 },
-    });
-    expect(await usage.read()).toEqual({ "tab.terminal": 2 });
-
-    await mock.ctx.settings.setUser("u2", "shareFeatureUsage", false);
-    expect((await call("GET", "/usage/config", undefined, "u2")).body).toEqual({
-      track: false,
-    });
-    const ignored = await call(
-      "POST",
-      "/usage",
-      { features: { "tab.terminal": 9 } },
-      "u2",
-    );
-    expect(ignored.status).toBe(204);
-    expect(await usage.read()).toEqual({ "tab.terminal": 2 });
-  });
-
-  it("counts nobody while feature usage is off", async () => {
-    const { call, usage } = await setup({
-      settings: { includeFeatureUsage: false },
-    });
-    expect((await call("GET", "/usage/config")).body).toEqual({ track: false });
-    await call("POST", "/usage", { features: { "tab.terminal": 1 } });
-    expect(await usage.read()).toEqual({});
-  });
-});
diff --git a/plugins/telemetry/tests/frontend/telemetry.test.tsx b/plugins/telemetry/tests/frontend/telemetry.test.tsx
deleted file mode 100644
index 2317b74ef..000000000
--- a/plugins/telemetry/tests/frontend/telemetry.test.tsx
+++ /dev/null
@@ -1,193 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { render, screen, waitFor } from "@testing-library/react";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginApiClient, TermixApp } from "@termix/plugin-sdk/frontend";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import {
-  countTabTypes,
-  openedSince,
-  startTabTracker,
-} from "../../src/frontend/tracker";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const api = vi.hoisted(() => ({
-  get: vi.fn(),
-  post: vi.fn(),
-}));
-
-vi.mock("@termix/plugin-sdk/frontend", async (importOriginal) => ({
-  ...(await importOriginal<typeof import("@termix/plugin-sdk/frontend")>()),
-  useTranslation: () => ({
-    t: (key: string, values?: Record<string, string>) =>
-      values ? `${key} ${Object.values(values).join(" ")}` : key,
-  }),
-  usePluginApi: () => api,
-}));
-
-const { TelemetryStatusSetting } =
-  await import("../../src/frontend/TelemetryStatusSetting");
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-  api.get.mockReset();
-  api.post.mockReset();
-  vi.useRealTimers();
-});
-
-function fakeApp(track: boolean) {
-  let layout: unknown = { version: 1, tabs: [] };
-  let onChange: () => void = () => undefined;
-  const posts: unknown[] = [];
-  const app = {
-    api: {
-      get: vi.fn(async () => ({ data: { track } })),
-    },
-    fetch: vi.fn(async (_path: string, init?: RequestInit) => {
-      posts.push(JSON.parse(String(init?.body)));
-      return new Response(null, { status: 204 });
-    }),
-    tabs: {
-      getLayout: () => layout,
-      onReady: (listener: () => void) => {
-        listener();
-        return () => undefined;
-      },
-      onChange: (listener: () => void) => {
-        onChange = listener;
-        return () => undefined;
-      },
-    },
-    onSettingsChanged: () => () => undefined,
-  } as unknown as TermixApp;
-  return {
-    app,
-    posts,
-    setTabs(types: string[]) {
-      layout = { version: 1, tabs: types.map((type) => ({ type })) };
-      onChange();
-    },
-  };
-}
-
-describe("tab counting", () => {
-  it("counts tabs per type and the ones opened since", () => {
-    const before = countTabTypes({
-      tabs: [{ type: "terminal" }, { type: "terminal" }, { type: "docker" }],
-    });
-    expect(before).toEqual({ terminal: 2, docker: 1 });
-    expect(countTabTypes(null)).toEqual({});
-    expect(
-      openedSince(before, { terminal: 3, docker: 0, "file-manager": 1 }),
-    ).toEqual({ "tab.terminal": 1, "tab.file-manager": 1 });
-  });
-});
-
-describe("startTabTracker", () => {
-  it("sends newly opened tabs on the timer", async () => {
-    vi.useFakeTimers();
-    const fake = fakeApp(true);
-    const stop = startTabTracker(fake.app, 1000);
-    await vi.waitFor(() => expect(fake.app.api.get).toHaveBeenCalled());
-    await Promise.resolve();
-
-    fake.setTabs(["terminal"]);
-    fake.setTabs(["terminal", "terminal", "docker"]);
-    fake.setTabs(["docker"]);
-    await vi.advanceTimersByTimeAsync(1000);
-
-    expect(fake.posts).toEqual([
-      { features: { "tab.terminal": 2, "tab.docker": 1 } },
-    ]);
-
-    await vi.advanceTimersByTimeAsync(1000);
-    expect(fake.posts).toHaveLength(1);
-    stop();
-  });
-
-  it("sends nothing for a user who is not counted", async () => {
-    vi.useFakeTimers();
-    const fake = fakeApp(false);
-    const stop = startTabTracker(fake.app, 1000);
-    await vi.waitFor(() => expect(fake.app.api.get).toHaveBeenCalled());
-    fake.setTabs(["terminal"]);
-    await vi.advanceTimersByTimeAsync(1000);
-    stop();
-    expect(fake.posts).toEqual([]);
-  });
-});
-
-describe("telemetry activate", () => {
-  it("registers the status component and removes it on deactivate", async () => {
-    api.get.mockResolvedValue({ data: { track: false } });
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: api as unknown as PluginApiClient,
-    });
-    expect(rendered.registered.settingsComponents()).toEqual(["status"]);
-    await rendered.deactivate();
-    expect(rendered.registered.settingsComponents()).toEqual([]);
-    rendered = null;
-  });
-});
-
-describe("TelemetryStatusSetting", () => {
-  const props = {
-    pluginId: "telemetry",
-    values: {},
-    setValue: () => undefined,
-    running: true,
-  };
-
-  it("shows the state, instance id and last error", async () => {
-    api.get.mockResolvedValue({
-      data: {
-        enabled: true,
-        locked: false,
-        instanceId: "abc-123",
-        lastSentAt: null,
-        lastAttemptAt: "2026-09-30T00:00:00.000Z",
-        lastError: "PostHog answered 500",
-        nextDueAt: null,
-      },
-    });
-    render(<TelemetryStatusSetting {...props} />);
-    await waitFor(() => expect(screen.getByText("status.on")).toBeTruthy());
-    expect(screen.getByText("status.instanceId abc-123")).toBeTruthy();
-    expect(screen.getByText("status.neverSent")).toBeTruthy();
-    expect(
-      screen.getByText("status.lastError PostHog answered 500"),
-    ).toBeTruthy();
-  });
-
-  it("says when ENABLE_TELEMETRY locks it off", async () => {
-    api.get.mockResolvedValue({
-      data: {
-        enabled: false,
-        locked: true,
-        instanceId: null,
-        lastSentAt: null,
-        lastAttemptAt: null,
-        lastError: null,
-        nextDueAt: null,
-      },
-    });
-    render(<TelemetryStatusSetting {...props} />);
-    await waitFor(() =>
-      expect(screen.getByText("status.lockedOff")).toBeTruthy(),
-    );
-    expect(
-      (screen.getByText("status.sendNow") as HTMLButtonElement).disabled,
-    ).toBe(true);
-  });
-});
diff --git a/plugins/telemetry/tsconfig.json b/plugins/telemetry/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/telemetry/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/telemetry/vitest.config.ts b/plugins/telemetry/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/telemetry/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/termix-identity/CHANGELOG.md b/plugins/termix-identity/CHANGELOG.md
deleted file mode 100644
index ef7f79dcc..000000000
--- a/plugins/termix-identity/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Publish your SSH public keys under a public handle that servers can fetch into authorized_keys. Each handle can also run its own SSH certificate authority.
diff --git a/plugins/termix-identity/README.md b/plugins/termix-identity/README.md
deleted file mode 100644
index 7e1dbf799..000000000
--- a/plugins/termix-identity/README.md
+++ /dev/null
@@ -1,35 +0,0 @@
-# Termix Identity
-
-Publish your SSH public keys under a public handle and run your own SSH certificate authority.
-
-## Features
-
-- Claim a public handle and publish your SSH public keys under it.
-- Run your own SSH certificate authority for each handle.
-- Issue short-lived certificates for your Ed25519 keys.
-
-## Setup
-
-Any server can pull your keys into `authorized_keys`:
-
-```bash
-curl -fsSL https://<termix>/plugin-api/termix-identity/u/<handle> >> ~/.ssh/authorized_keys
-```
-
-Add `/<ALGO>`, for example `/ED25519`, to get only one key type. This URL needs no login and is never cached.
-
-To use the certificate authority, point `TrustedUserCAKeys` on your servers at the public key from `/u/<handle>/ca`. Rotating the CA revokes every certificate it issued. Certificates are downloaded once and not stored, so Termix hosts do not use them to connect.
-
-The 2.8 URLs under `/termix-id/u/` redirect here, so existing scripts keep working. Use `curl -L` to follow the redirect.
-
-## Permissions
-
-- `termix-identity.use`: Claim a handle, publish keys and run a CA. Admins and users have it by default.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/termix-identity/locales/en.json b/plugins/termix-identity/locales/en.json
deleted file mode 100644
index 906322bdf..000000000
--- a/plugins/termix-identity/locales/en.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Termix ID",
-    "loadFailed": "Failed to load Termix ID",
-    "claimTitle": "Claim your Termix ID",
-    "claimIntro": "Pick a unique handle. Your SSH public keys will be published at a public URL you can add to any server's authorized_keys file.",
-    "handleLabel": "Handle",
-    "handlePlaceholder": "alice",
-    "checking": "Checking…",
-    "available": "Available",
-    "taken": "Already taken",
-    "invalidHandle": "Lowercase letters, numbers, - and _ only",
-    "descriptionLabel": "Description (optional)",
-    "descriptionPlaceholder": "Work laptop & phone keys",
-    "create": "Create Termix ID",
-    "created": "Termix ID created",
-    "createFailed": "Failed to create Termix ID",
-    "deleteConfirm": "Delete your Termix ID and all published keys? Servers you provisioned will keep the keys until you remove them manually.",
-    "deleted": "Termix ID deleted",
-    "deleteFailed": "Failed to delete Termix ID",
-    "copyFailed": "Copy failed",
-    "resolverUrlLabel": "Public resolver URL",
-    "provisionLabel": "Provision a server",
-    "publishTitle": "Publish a public key",
-    "generate": "Generate",
-    "generateTooltip": "Generate an Ed25519 key pair. Publishes the public key and downloads the private key to your device.",
-    "saveToVault": "Save To Credentials",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... user@host",
-    "labelPlaceholder": "Label (optional)",
-    "add": "Add",
-    "importFromCredential": "Or import from a stored credential",
-    "keyPublished": "Key published",
-    "addKeyFailed": "Failed to add key",
-    "generatedSaved": "Key pair generated and saved to your credentials vault. Private key also downloaded.",
-    "generatedOnly": "Key pair generated. Private key downloaded (shown only once).",
-    "generateFailed": "Failed to generate key",
-    "imported": "Key imported from credential",
-    "importFailed": "Failed to import key",
-    "noKeys": "No public keys published yet.",
-    "keysTitle": "Published keys",
-    "published": "Published",
-    "hidden": "Hidden",
-    "keyRemoved": "Key removed",
-    "removeKeyFailed": "Failed to remove key",
-    "updateKeyFailed": "Failed to update key",
-    "fromVault": "From credentials vault",
-    "linkedToTermixId": "Published via Termix ID",
-    "selectCredential": "Select a credential...",
-    "import": "Import",
-    "caTitle": "Certificate authority",
-    "caIntro": "Trust this CA on a server and it accepts any certificate you sign. Rotate to revoke everything at once; certificates also expire on their own.",
-    "caEnable": "Enable CA",
-    "caEnabled": "CA enabled",
-    "caCreateFailed": "Failed to enable CA",
-    "caPublicKeyLabel": "CA public key",
-    "caTrustLabel": "Trust on a server (run as root)",
-    "caRotate": "Rotate",
-    "caRotateConfirm": "Rotate the CA? Every certificate it has signed will stop being accepted and must be re-issued.",
-    "caRotated": "CA rotated. Previous certificates revoked.",
-    "caRotateFailed": "Failed to rotate CA",
-    "caDelete": "Remove CA",
-    "caDeleteConfirm": "Remove the certificate authority?",
-    "caDeleted": "CA removed",
-    "caDeleteFailed": "Failed to remove CA",
-    "caValidityLabel": "Cert validity (days)",
-    "issueCert": "Certificate",
-    "issueCertTooltip": "Issue an SSH certificate for this key, signed by your CA",
-    "certIssued": "Certificate issued and downloaded",
-    "certIssueFailed": "Failed to issue certificate",
-    "docsLink": "View docs",
-    "principalsLabel": "SSH principals",
-    "principalsPlaceholder": "SSH principal(s), e.g. root"
-  },
-  "nav": {
-    "termixId": "ID"
-  },
-  "credentials": {
-    "idBadge": "ID"
-  },
-  "permissions": {
-    "use": {
-      "title": "Use Termix ID",
-      "description": "Claim a public handle, publish SSH keys and run a certificate authority."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/af_ZA.json b/plugins/termix-identity/locales/translated/af_ZA.json
deleted file mode 100644
index f8905f695..000000000
--- a/plugins/termix-identity/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Termix-ID",
-    "loadFailed": "Kon nie Termix ID laai nie",
-    "claimTitle": "Eis jou Termix ID op",
-    "claimIntro": "Kies 'n unieke handvatsel. Jou SSH publieke sleutels sal gepubliseer word by 'n publieke URL wat jy by enige bediener se authorized_keys-lêer kan voeg.",
-    "handleLabel": "Hanteer",
-    "handlePlaceholder": "Alice",
-    "checking": "Kontroleer…",
-    "available": "Beskikbaar",
-    "taken": "Reeds geneem",
-    "invalidHandle": "Slegs kleinletters, syfers, - en _",
-    "descriptionLabel": "Beskrywing (opsioneel)",
-    "descriptionPlaceholder": "Werkskootrekenaar- en foonsleutels",
-    "create": "Skep Termix ID",
-    "created": "Termix ID geskep",
-    "createFailed": "Kon nie Termix ID skep nie",
-    "deleteConfirm": "Vee jou Termix ID en alle gepubliseerde sleutels uit? Bedieners wat jy voorsien het, sal die sleutels hou totdat jy dit handmatig verwyder.",
-    "deleted": "Termix-ID uitgevee",
-    "deleteFailed": "Kon nie Termix ID uitvee nie",
-    "copyFailed": "Kopieer het misluk",
-    "resolverUrlLabel": "Openbare resolver-URL",
-    "provisionLabel": "Voorsien 'n bediener",
-    "publishTitle": "Publiseer 'n publieke sleutel",
-    "generate": "Genereer",
-    "generateTooltip": "Genereer 'n Ed25519-sleutelpaar. Publiseer die publieke sleutel en laai die private sleutel na jou toestel af.",
-    "saveToVault": "Stoor na geloofsbriewe",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... gebruiker@gasheer",
-    "labelPlaceholder": "Etiket (opsioneel)",
-    "add": "Voeg by",
-    "importFromCredential": "Of invoer vanaf 'n gestoorde geloofsbrief",
-    "keyPublished": "Sleutel gepubliseer",
-    "addKeyFailed": "Kon nie sleutel byvoeg nie",
-    "generatedSaved": "Sleutelpaar gegenereer en gestoor in jou geloofsbriewekluis. Privaat sleutel ook afgelaai.",
-    "generatedOnly": "Sleutelpaar gegenereer. Privaat sleutel afgelaai (slegs een keer getoon).",
-    "generateFailed": "Kon nie sleutel genereer nie",
-    "imported": "Sleutel ingevoer vanaf geloofsbriewe",
-    "importFailed": "Kon nie sleutel invoer nie",
-    "noKeys": "Geen publieke sleutels nog gepubliseer nie.",
-    "keysTitle": "Gepubliseerde sleutels",
-    "published": "Gepubliseer",
-    "hidden": "Versteek",
-    "keyRemoved": "Sleutel verwyder",
-    "removeKeyFailed": "Kon nie sleutel verwyder nie",
-    "updateKeyFailed": "Kon nie sleutel opdateer nie",
-    "fromVault": "Vanuit geloofsbriewekluis",
-    "linkedToTermixId": "Gepubliseer via Termix ID",
-    "selectCredential": "Kies 'n geloofsbrief...",
-    "import": "Invoer",
-    "caTitle": "Sertifikaatowerheid",
-    "caIntro": "Vertrou hierdie CA op 'n bediener en dit aanvaar enige sertifikaat wat jy teken. Draai om alles gelyktydig te herroep; sertifikate verval ook vanself.",
-    "caEnable": "Aktiveer CA",
-    "caEnabled": "CA geaktiveer",
-    "caCreateFailed": "Kon nie CA aktiveer nie",
-    "caPublicKeyLabel": "CA publieke sleutel",
-    "caTrustLabel": "Vertrou op 'n bediener (loop as root)",
-    "caRotate": "Roteer",
-    "caRotateConfirm": "Roteer die CA? Elke sertifikaat wat dit onderteken het, sal nie meer aanvaar word nie en moet heruitgereik word.",
-    "caRotated": "KA geroteer. Vorige sertifikate herroep.",
-    "caRotateFailed": "Kon nie CA roteer nie",
-    "caDelete": "Verwyder CA",
-    "caDeleteConfirm": "Verwyder die sertifikaatowerheid?",
-    "caDeleted": "KA verwyder",
-    "caDeleteFailed": "Kon nie CA verwyder nie",
-    "caValidityLabel": "Sertifikaatgeldigheid (dae)",
-    "issueCert": "Sertifikaat",
-    "issueCertTooltip": "Reik 'n SSH-sertifikaat uit vir hierdie sleutel, onderteken deur jou CA",
-    "certIssued": "Sertifikaat uitgereik en afgelaai",
-    "certIssueFailed": "Kon nie sertifikaat uitreik nie",
-    "docsLink": "Bekyk dokumente",
-    "principalsLabel": "SSH-hoofde",
-    "principalsPlaceholder": "SSH-hoof(e), bv. wortel"
-  },
-  "nav": {
-    "termixId": "ID"
-  },
-  "credentials": {
-    "idBadge": "ID"
-  },
-  "permissions": {
-    "use": {
-      "title": "Gebruik Termix ID",
-      "description": "Eis 'n publieke handvatsel op, publiseer SSH-sleutels en bedryf 'n sertifikaatowerheid."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/ar_SA.json b/plugins/termix-identity/locales/translated/ar_SA.json
deleted file mode 100644
index e7e356b68..000000000
--- a/plugins/termix-identity/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Termix ID",
-    "loadFailed": "فشل تحميل Termix ID",
-    "claimTitle": "احصل على Termix ID الخاص بك",
-    "claimIntro": "اختر معرّفًا فريدًا. سيتم نشر مفاتيح SSH العامة الخاصة بك في رابط عام يمكنك إضافته إلى ملف authorized_keys لأي خادم.",
-    "handleLabel": "المعرّف",
-    "handlePlaceholder": "alice",
-    "checking": "جارٍ التحقق…",
-    "available": "متاح",
-    "taken": "مستخدم بالفعل",
-    "invalidHandle": "أحرف صغيرة، أرقام، - و _ فقط",
-    "descriptionLabel": "الوصف (اختياري)",
-    "descriptionPlaceholder": "مفاتيح حاسوب العمل والهاتف",
-    "create": "إنشاء Termix ID",
-    "created": "تم إنشاء Termix ID",
-    "createFailed": "فشل إنشاء Termix ID",
-    "deleteConfirm": "حذف Termix ID وجميع المفاتيح المنشورة؟ ستحتفظ الخوادم التي قمت بتجهيزها بالمفاتيح حتى تقوم بإزالتها يدويًا.",
-    "deleted": "تم حذف Termix ID",
-    "deleteFailed": "فشل حذف Termix ID",
-    "copyFailed": "فشل النسخ",
-    "resolverUrlLabel": "رابط المُحلل العام",
-    "provisionLabel": "تجهيز خادم",
-    "publishTitle": "نشر مفتاح عام",
-    "generate": "توليد",
-    "generateTooltip": "قم بإنشاء زوج مفاتيح Ed25519. انشر المفتاح العام وقم بتنزيل المفتاح الخاص إلى جهازك.",
-    "saveToVault": "حفظ في بيانات الاعتماد",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... user@host",
-    "labelPlaceholder": "وسم (اختياري)",
-    "add": "إضافة",
-    "importFromCredential": "أو استيراد من بيانات اعتماد مخزّنة",
-    "keyPublished": "تم نشر المفتاح",
-    "addKeyFailed": "فشل إضافة المفتاح",
-    "generatedSaved": "تم توليد زوج المفاتيح وحفظه في مخزن بيانات الاعتماد. كما تم تنزيل المفتاح الخاص.",
-    "generatedOnly": "تم إنشاء زوج المفاتيح. تم تنزيل المفتاح الخاص (يُعرض مرة واحدة فقط).",
-    "generateFailed": "فشل توليد المفتاح",
-    "imported": "تم استيراد المفتاح من بيانات الاعتماد",
-    "importFailed": "فشل استيراد المفتاح",
-    "noKeys": "لا توجد مفاتيح عامة منشورة بعد.",
-    "keysTitle": "المفاتيح المنشورة",
-    "published": "منشور",
-    "hidden": "مخفي",
-    "keyRemoved": "تمت إزالة المفتاح",
-    "removeKeyFailed": "فشل إزالة المفتاح",
-    "updateKeyFailed": "فشل تحديث المفتاح",
-    "fromVault": "من خزنة بيانات الاعتماد",
-    "linkedToTermixId": "منشور عبر Termix ID",
-    "selectCredential": "اختر بيانات اعتماد...",
-    "import": "استيراد",
-    "caTitle": "المرجع المصدق (CA)",
-    "caIntro": "وثق هذا المرجع المصدق على الخادم ليقبل أي شهادة توقعها. دوِّره لإبطال كل الشهادات دفعة واحدة؛ تنتهي صلاحية الشهادات تلقائيًا أيضًا.",
-    "caEnable": "فعّل المرجع المصدق",
-    "caEnabled": "تم تفعيل المرجع المصدق",
-    "caCreateFailed": "فشل تفعيل المرجع المصدق",
-    "caPublicKeyLabel": "المفتاح العام للمرجع المصدق",
-    "caTrustLabel": "ثق به على الخادم (تشغيل بصلاحيات الجذر)",
-    "caRotate": "دوِّر",
-    "caRotateConfirm": "هل تريد تدوير المرجع المصدق؟ ستتوقف جميع الشهادات التي وقعها عن القبول ويجب إعادة إصدارها.",
-    "caRotated": "تم تغيير جهة إصدار الشهادات. تم إلغاء الشهادات السابقة.",
-    "caRotateFailed": "فشل تدوير المرجع المصدق",
-    "caDelete": "أزل المرجع المصدق",
-    "caDeleteConfirm": "هل تريد إزالة المرجع المصدق؟",
-    "caDeleted": "تمت إزالة المرجع المصدق",
-    "caDeleteFailed": "فشل إزالة المرجع المصدق",
-    "caValidityLabel": "صلاحية الشهادة (بالأيام)",
-    "issueCert": "شهادة",
-    "issueCertTooltip": "إصدار شهادة SSH لهذا المفتاح، موقعة من المرجع المصدق الخاص بك",
-    "certIssued": "تم إصدار الشهادة وتنزيلها",
-    "certIssueFailed": "فشل إصدار الشهادة",
-    "docsLink": "عرض المستندات",
-    "principalsLabel": "مبادئ SSH",
-    "principalsPlaceholder": "المستخدم الرئيسي (أو المستخدمين الرئيسيين) في SSH، على سبيل المثال المستخدم الجذر"
-  },
-  "nav": {
-    "termixId": "معرف"
-  },
-  "credentials": {
-    "idBadge": "المعرف"
-  },
-  "permissions": {
-    "use": {
-      "title": "استخدم معرف Termix",
-      "description": "قم بتأمين اسم مستخدم عام، ونشر مفاتيح SSH، وتشغيل جهة إصدار الشهادات."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/bg_BG.json b/plugins/termix-identity/locales/translated/bg_BG.json
deleted file mode 100644
index e89127aaa..000000000
--- a/plugins/termix-identity/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Термикс ИД",
-    "loadFailed": "Зареждането на Termix ID не бе успешно",
-    "claimTitle": "Заявете своя Termix ID",
-    "claimIntro": "Изберете уникален дескриптор. Вашите SSH публични ключове ще бъдат публикувани на публичен URL адрес, който можете да добавите към файла authorized_keys на всеки сървър.",
-    "handleLabel": "Дръжка",
-    "handlePlaceholder": "Алис",
-    "checking": "Проверка…",
-    "available": "Налично",
-    "taken": "Вече е взето",
-    "invalidHandle": "Само малки букви, цифри, - и _",
-    "descriptionLabel": "Описание (по избор)",
-    "descriptionPlaceholder": "Ключове за служебен лаптоп и телефон",
-    "create": "Създаване на Termix ID",
-    "created": "Създаден е Termix ID",
-    "createFailed": "Неуспешно създаване на Termix ID",
-    "deleteConfirm": "Да изтриете ли Termix ID и всички публикувани ключове? Сървърите, които сте предоставили, ще пазят ключовете, докато не ги премахнете ръчно.",
-    "deleted": "Идентификаторът на Termix е изтрит",
-    "deleteFailed": "Неуспешно изтриване на Termix ID",
-    "copyFailed": "Копирането не бе успешно",
-    "resolverUrlLabel": "URL адрес на публичния резолвер",
-    "provisionLabel": "Осигуряване на сървър",
-    "publishTitle": "Публикуване на публичен ключ",
-    "generate": "Генериране",
-    "generateTooltip": "Генерира двойка ключове Ed25519. Публикува публичния ключ и изтегля частния ключ на вашето устройство.",
-    "saveToVault": "Запазване в идентификационни данни",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... потребител@хост",
-    "labelPlaceholder": "Етикет (по избор)",
-    "add": "Добавяне",
-    "importFromCredential": "Или импортирайте от съхранени идентификационни данни",
-    "keyPublished": "Ключът е публикуван",
-    "addKeyFailed": "Добавянето на ключ не бе успешно",
-    "generatedSaved": "Двойка ключове е генерирана и запазена в хранилището ви за идентификационни данни. Частният ключ също е изтеглен.",
-    "generatedOnly": "Генерирана е двойка ключове. Изтеглен е частен ключ (показва се само веднъж).",
-    "generateFailed": "Генерирането на ключ не бе успешно",
-    "imported": "Ключът е импортиран от идентификационни данни",
-    "importFailed": "Импортирането на ключа не бе успешно",
-    "noKeys": "Все още няма публикувани публични ключове.",
-    "keysTitle": "Публикувани ключове",
-    "published": "Публикувано",
-    "hidden": "Скрито",
-    "keyRemoved": "Ключът е премахнат",
-    "removeKeyFailed": "Неуспешно премахване на ключа",
-    "updateKeyFailed": "Актуализирането на ключа не бе успешно",
-    "fromVault": "От трезора за идентификационни данни",
-    "linkedToTermixId": "Публикувано чрез Termix ID",
-    "selectCredential": "Изберете идентификационен номер...",
-    "import": "Внос",
-    "caTitle": "Сертифициращ орган",
-    "caIntro": "Доверете се на този CA на сървър и той ще приема всеки сертификат, който подпишете. Завъртете, за да отмените всичко наведнъж; сертификатите също изтичат сами.",
-    "caEnable": "Активиране на CA",
-    "caEnabled": "CA е активиран",
-    "caCreateFailed": "Активирането на CA не бе успешно",
-    "caPublicKeyLabel": "Публичен ключ на CA",
-    "caTrustLabel": "Доверие на сървър (изпълнява се като root)",
-    "caRotate": "Завъртане",
-    "caRotateConfirm": "Да се завърти ли сертифициращият орган? Всеки подписан от него сертификат ще спре да се приема и ще трябва да бъде преиздаден.",
-    "caRotated": "Сертификатът е ротиран. Предишните сертификати са анулирани.",
-    "caRotateFailed": "Неуспешно завъртане на CA",
-    "caDelete": "Премахване на CA",
-    "caDeleteConfirm": "Да се премахне ли сертифициращият орган?",
-    "caDeleted": "CA премахнато",
-    "caDeleteFailed": "Премахването на CA не бе успешно",
-    "caValidityLabel": "Валидност на сертификата (дни)",
-    "issueCert": "Сертификат",
-    "issueCertTooltip": "Издайте SSH сертификат за този ключ, подписан от вашия CA",
-    "certIssued": "Сертификатът е издаден и изтеглен",
-    "certIssueFailed": "Издаването на сертификат не бе успешно",
-    "docsLink": "Преглед на документи",
-    "principalsLabel": "SSH принципали",
-    "principalsPlaceholder": "SSH принципал(и), например root"
-  },
-  "nav": {
-    "termixId": "Идентификационен номер"
-  },
-  "credentials": {
-    "idBadge": "Идентификационен номер"
-  },
-  "permissions": {
-    "use": {
-      "title": "Използвайте Termix ID",
-      "description": "Заявете публичен дескриптор, публикувайте SSH ключове и стартирайте сертифициращ орган."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/bn_BD.json b/plugins/termix-identity/locales/translated/bn_BD.json
deleted file mode 100644
index 10e08ca21..000000000
--- a/plugins/termix-identity/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "টার্মিক্স আইডি",
-    "loadFailed": "টার্মিক্স আইডি লোড করতে ব্যর্থ হয়েছে",
-    "claimTitle": "আপনার টার্মিক্স আইডি দাবি করুন",
-    "claimIntro": "একটি অনন্য হ্যান্ডেল বেছে নিন। আপনার SSH পাবলিক কীগুলো একটি পাবলিক URL-এ প্রকাশ করা হবে, যা আপনি যেকোনো সার্ভারের authorized_keys ফাইলে যোগ করতে পারবেন।",
-    "handleLabel": "হাতল",
-    "handlePlaceholder": "অ্যালিস",
-    "checking": "… পরীক্ষা করা হচ্ছে",
-    "available": "উপলব্ধ",
-    "taken": "ইতিমধ্যে নেওয়া হয়েছে",
-    "invalidHandle": "শুধুমাত্র ছোট হাতের অক্ষর, সংখ্যা, - এবং _",
-    "descriptionLabel": "বিবরণ (ঐচ্ছিক)",
-    "descriptionPlaceholder": "কাজের ল্যাপটপ ও ফোনের চাবি",
-    "create": "টার্মিক্স আইডি তৈরি করুন",
-    "created": "টার্মিক্স আইডি তৈরি করা হয়েছে",
-    "createFailed": "টার্মিক্স আইডি তৈরি করতে ব্যর্থ হয়েছে",
-    "deleteConfirm": "আপনার টার্মিক্স আইডি এবং সমস্ত প্রকাশিত কী মুছে ফেলবেন? আপনার প্রোভিশন করা সার্ভারগুলিতে কীগুলি থেকে যাবে যতক্ষণ না আপনি সেগুলি ম্যানুয়ালি সরিয়ে ফেলেন।",
-    "deleted": "টার্মিক্স আইডি মুছে ফেলা হয়েছে",
-    "deleteFailed": "Termix ID মুছে ফেলা সম্ভব হয়নি",
-    "copyFailed": "কপি ব্যর্থ হয়েছে",
-    "resolverUrlLabel": "পাবলিক রিজলভার ইউআরএল",
-    "provisionLabel": "একটি সার্ভার সরবরাহ করুন",
-    "publishTitle": "একটি পাবলিক কী প্রকাশ করুন",
-    "generate": "তৈরি করুন",
-    "generateTooltip": "একটি Ed25519 কী পেয়ার তৈরি করুন। এটি পাবলিক কী প্রকাশ করে এবং প্রাইভেট কী আপনার ডিভাইসে ডাউনলোড করে।",
-    "saveToVault": "পরিচয়পত্রে সংরক্ষণ করুন",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... user@host",
-    "labelPlaceholder": "লেবেল (ঐচ্ছিক)",
-    "add": "যোগ করুন",
-    "importFromCredential": "অথবা সংরক্ষিত পরিচয়পত্র থেকে আমদানি করুন",
-    "keyPublished": "মূল প্রকাশিত",
-    "addKeyFailed": "কী যোগ করতে ব্যর্থ হয়েছে",
-    "generatedSaved": "কী পেয়ার তৈরি করে আপনার ক্রেডেনশিয়ালস ভল্টে সংরক্ষণ করা হয়েছে। প্রাইভেট কী-টিও ডাউনলোড করা হয়েছে।",
-    "generatedOnly": "কী পেয়ার তৈরি হয়েছে। প্রাইভেট কী ডাউনলোড করা হয়েছে (শুধুমাত্র একবার দেখানো হবে)।",
-    "generateFailed": "কী তৈরি করতে ব্যর্থ হয়েছে",
-    "imported": "ক্রেডেনশিয়াল থেকে আমদানি করা কী",
-    "importFailed": "কী আমদানি করতে ব্যর্থ হয়েছে",
-    "noKeys": "এখনো কোনো পাবলিক কী প্রকাশ করা হয়নি।",
-    "keysTitle": "প্রকাশিত চাবিগুলি",
-    "published": "প্রকাশিত",
-    "hidden": "লুকানো",
-    "keyRemoved": "চাবি সরানো হয়েছে",
-    "removeKeyFailed": "চাবি সরাতে ব্যর্থ হয়েছে",
-    "updateKeyFailed": "কী আপডেট করতে ব্যর্থ হয়েছে",
-    "fromVault": "ক্রেডেনশিয়াল ভল্ট থেকে",
-    "linkedToTermixId": "টারমিক্স আইডি-এর মাধ্যমে প্রকাশিত",
-    "selectCredential": "একটি শংসাপত্র নির্বাচন করুন...",
-    "import": "আমদানি",
-    "caTitle": "শংসাপত্র কর্তৃপক্ষ",
-    "caIntro": "সার্ভারে এই CA-কে বিশ্বাস করলে, এটি আপনার স্বাক্ষরিত যেকোনো সার্টিফিকেট গ্রহণ করে। একবারে সবকিছু বাতিল করতে পর্যায়ক্রমে পরিবর্তন করুন; সার্টিফিকেটগুলো আপনাআপনি মেয়াদোত্তীর্ণও হয়ে যায়।",
-    "caEnable": "CA সক্ষম করুন",
-    "caEnabled": "CA সক্ষম",
-    "caCreateFailed": "CA সক্রিয় করতে ব্যর্থ হয়েছে",
-    "caPublicKeyLabel": "CA পাবলিক কী",
-    "caTrustLabel": "সার্ভারে বিশ্বাস (রুট হিসেবে চালান)",
-    "caRotate": "ঘোরান",
-    "caRotateConfirm": "CA পরিবর্তন করবেন? এর দ্বারা স্বাক্ষরিত প্রতিটি সার্টিফিকেট আর গ্রহণ করা হবে না এবং পুনরায় ইস্যু করতে হবে।",
-    "caRotated": "CA পরিবর্তিত হয়েছে। পূর্ববর্তী সার্টিফিকেটগুলো বাতিল করা হয়েছে।",
-    "caRotateFailed": "CA ঘোরানো ব্যর্থ হয়েছে",
-    "caDelete": "CA অপসারণ করুন",
-    "caDeleteConfirm": "সার্টিফিকেট কর্তৃপক্ষকে অপসারণ করবেন?",
-    "caDeleted": "CA অপসারণ করেছে",
-    "caDeleteFailed": "CA অপসারণ করতে ব্যর্থ হয়েছে",
-    "caValidityLabel": "সার্টিফিকেটের বৈধতা (দিন)",
-    "issueCert": "সার্টিফিকেট",
-    "issueCertTooltip": "এই কী-টির জন্য আপনার CA দ্বারা স্বাক্ষরিত একটি SSH সার্টিফিকেট ইস্যু করুন।",
-    "certIssued": "সার্টিফিকেট ইস্যু এবং ডাউনলোড করা হয়েছে",
-    "certIssueFailed": "সার্টিফিকেট ইস্যু করতে ব্যর্থ হয়েছে",
-    "docsLink": "নথি দেখুন",
-    "principalsLabel": "এসএসএইচ অধ্যক্ষরা",
-    "principalsPlaceholder": "SSH প্রিন্সিপাল(গুলি), যেমন রুট"
-  },
-  "nav": {
-    "termixId": "আইডি"
-  },
-  "credentials": {
-    "idBadge": "আইডি"
-  },
-  "permissions": {
-    "use": {
-      "title": "টার্মিক্স আইডি ব্যবহার করুন",
-      "description": "একটি পাবলিক হ্যান্ডেল দাবি করুন, SSH কী প্রকাশ করুন এবং একটি সার্টিফিকেট অথরিটি চালান।"
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/ca_ES.json b/plugins/termix-identity/locales/translated/ca_ES.json
deleted file mode 100644
index ff4c51286..000000000
--- a/plugins/termix-identity/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "ID de Termix",
-    "loadFailed": "No s'ha pogut carregar l'ID de Termix.",
-    "claimTitle": "Reclama el teu ID de Termix",
-    "claimIntro": "Trieu un identificador únic. Les vostres claus públiques SSH es publicaran en una URL pública que podeu afegir al fitxer authorized_keys de qualsevol servidor.",
-    "handleLabel": "Maneta",
-    "handlePlaceholder": "Alícia",
-    "checking": "Comprovació de…",
-    "available": "Disponible",
-    "taken": "Ja ocupat/da",
-    "invalidHandle": "Només lletres minúscules, números, - i _",
-    "descriptionLabel": "Descripció (opcional)",
-    "descriptionPlaceholder": "Claus de portàtil i telèfon de la feina",
-    "create": "Crea un ID de Termix",
-    "created": "ID de Termix creat",
-    "createFailed": "No s'ha pogut crear l'ID de Termix.",
-    "deleteConfirm": "Voleu suprimir el vostre ID de Termix i totes les claus publicades? Els servidors que heu aprovisionat conservaran les claus fins que les elimineu manualment.",
-    "deleted": "ID de Termix suprimit",
-    "deleteFailed": "No s'ha pogut suprimir l'ID de Termix.",
-    "copyFailed": "S'ha produït un error de còpia.",
-    "resolverUrlLabel": "URL de resolució pública",
-    "provisionLabel": "Provisionar un servidor",
-    "publishTitle": "Publicar una clau pública",
-    "generate": "Generar",
-    "generateTooltip": "Genera un parell de claus Ed25519. Publica la clau pública i descarrega la clau privada al dispositiu.",
-    "saveToVault": "Desa a les credencials",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... usuari@amfitrió",
-    "labelPlaceholder": "Etiqueta (opcional)",
-    "add": "Afegeix",
-    "importFromCredential": "O importar des d'una credencial emmagatzemada",
-    "keyPublished": "Clau publicada",
-    "addKeyFailed": "No s'ha pogut afegir la clau",
-    "generatedSaved": "Parell de claus generat i desat al vostre magatzem de credencials. La clau privada també s'ha descarregat.",
-    "generatedOnly": "Parell de claus generat. Clau privada descarregada (només es mostra una vegada).",
-    "generateFailed": "No s'ha pogut generar la clau",
-    "imported": "Clau importada de la credencial",
-    "importFailed": "No s'ha pogut importar la clau",
-    "noKeys": "Encara no s'han publicat cap clau pública.",
-    "keysTitle": "Claus publicades",
-    "published": "Publicat",
-    "hidden": "Ocult",
-    "keyRemoved": "Clau retirada",
-    "removeKeyFailed": "No s'ha pogut treure la clau",
-    "updateKeyFailed": "No s'ha pogut actualitzar la clau",
-    "fromVault": "Des de la caixa forta de credencials",
-    "linkedToTermixId": "Publicat a través de l'ID de Termix",
-    "selectCredential": "Selecciona una credencial...",
-    "import": "Importa",
-    "caTitle": "Autoritat de certificació",
-    "caIntro": "Confia en aquesta CA en un servidor i acceptarà qualsevol certificat que signeu. Gireu per revocar-ho tot alhora; els certificats també caduquen sols.",
-    "caEnable": "Habilita CA",
-    "caEnabled": "CA habilitat",
-    "caCreateFailed": "No s'ha pogut habilitar l'entitat de certificació",
-    "caPublicKeyLabel": "Clau pública de CA",
-    "caTrustLabel": "Confiança en un servidor (executat com a root)",
-    "caRotate": "Girar",
-    "caRotateConfirm": "Voleu rotar l'entitat de certificació? Tots els certificats que hagi signat deixaran de ser acceptats i s'hauran de tornar a emetre.",
-    "caRotated": "CA rotada. Certificats anteriors revocats.",
-    "caRotateFailed": "No s'ha pogut rotar CA",
-    "caDelete": "Eliminar CA",
-    "caDeleteConfirm": "Voleu eliminar l'autoritat de certificació?",
-    "caDeleted": "CA eliminada",
-    "caDeleteFailed": "No s'ha pogut eliminar l'entitat de certificació",
-    "caValidityLabel": "Validesa del certificat (dies)",
-    "issueCert": "Certificat",
-    "issueCertTooltip": "Emet un certificat SSH per a aquesta clau, signat per la teva CA",
-    "certIssued": "Certificat emès i descarregat",
-    "certIssueFailed": "No s'ha pogut emetre el certificat",
-    "docsLink": "Veure documents",
-    "principalsLabel": "Directors de SSH",
-    "principalsPlaceholder": "Principal(s) SSH, p. ex. root"
-  },
-  "nav": {
-    "termixId": "ID"
-  },
-  "credentials": {
-    "idBadge": "ID"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilitza l'ID de Termix",
-      "description": "Reclama un identificador públic, publica claus SSH i executa una autoritat de certificació."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/cs_CZ.json b/plugins/termix-identity/locales/translated/cs_CZ.json
deleted file mode 100644
index 7806acd88..000000000
--- a/plugins/termix-identity/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "ID Termixu",
-    "loadFailed": "Nepodařilo se načíst ID Termixu",
-    "claimTitle": "Získejte své Termix ID",
-    "claimIntro": "Vyberte jedinečný handle. Vaše veřejné klíče SSH budou zveřejněny na veřejné URL adrese, kterou můžete přidat do souboru authorized_keys libovolného serveru.",
-    "handleLabel": "Zacházet s",
-    "handlePlaceholder": "Alice",
-    "checking": "Kontrola…",
-    "available": "K dispozici",
-    "taken": "Již obsazeno",
-    "invalidHandle": "Pouze malá písmena, číslice, - a _",
-    "descriptionLabel": "Popis (volitelné)",
-    "descriptionPlaceholder": "Klíče k pracovnímu notebooku a telefonu",
-    "create": "Vytvořit ID Termixu",
-    "created": "ID Termixu vytvořeno",
-    "createFailed": "Nepodařilo se vytvořit ID Termixu",
-    "deleteConfirm": "Smazat své Termix ID a všechny publikované klíče? Servery, které jste zřídili, si klíče uchovají, dokud je ručně neodstraníte.",
-    "deleted": "ID Termixu smazáno",
-    "deleteFailed": "Nepodařilo se smazat ID Termixu",
-    "copyFailed": "Kopírování se nezdařilo",
-    "resolverUrlLabel": "URL veřejného resolveru",
-    "provisionLabel": "Zřízení serveru",
-    "publishTitle": "Publikovat veřejný klíč",
-    "generate": "Generovat",
-    "generateTooltip": "Vygeneruje pár klíčů Ed25519. Publikuje veřejný klíč a stáhne soukromý klíč do vašeho zařízení.",
-    "saveToVault": "Uložit do přihlašovacích údajů",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... uživatel@hostitel",
-    "labelPlaceholder": "Štítek (volitelné)",
-    "add": "Přidat",
-    "importFromCredential": "Nebo importovat z uložených přihlašovacích údajů",
-    "keyPublished": "Klíč zveřejněn",
-    "addKeyFailed": "Přidání klíče se nezdařilo",
-    "generatedSaved": "Pár klíčů byl vygenerován a uložen do úložiště vašich přihlašovacích údajů. Soukromý klíč byl také stažen.",
-    "generatedOnly": "Vygenerován pár klíčů. Soukromý klíč stažen (zobrazen pouze jednou).",
-    "generateFailed": "Nepodařilo se vygenerovat klíč",
-    "imported": "Klíč importován z přihlašovacích údajů",
-    "importFailed": "Import klíče se nezdařilo",
-    "noKeys": "Zatím nebyly zveřejněny žádné veřejné klíče.",
-    "keysTitle": "Publikované klíče",
-    "published": "Publikováno",
-    "hidden": "Skrytý",
-    "keyRemoved": "Klíč vyjmut",
-    "removeKeyFailed": "Nepodařilo se vyjmout klíč",
-    "updateKeyFailed": "Nepodařilo se aktualizovat klíč",
-    "fromVault": "Z úložiště přihlašovacích údajů",
-    "linkedToTermixId": "Publikováno přes Termix ID",
-    "selectCredential": "Vyberte pověření...",
-    "import": "Importovat",
-    "caTitle": "Certifikační autorita",
-    "caIntro": "Důvěřujte této certifikační autoritě na serveru a ta přijme jakýkoli certifikát, který podepíšete. Otočením zrušíte vše najednou; certifikáty také samy vyprší.",
-    "caEnable": "Povolit certifikační autoritu (CA)",
-    "caEnabled": "CA povolena",
-    "caCreateFailed": "Nepodařilo se povolit certifikační autoritu (CA).",
-    "caPublicKeyLabel": "Veřejný klíč CA",
-    "caTrustLabel": "Důvěra na serveru (spuštěno jako root)",
-    "caRotate": "Střídat",
-    "caRotateConfirm": "Rotovat certifikační autoritu? Každý certifikát, který podepsala, přestane být akceptován a bude nutné jej znovu vydat.",
-    "caRotated": "CA rotována. Předchozí certifikáty zrušeny.",
-    "caRotateFailed": "Nepodařilo se otočit CA",
-    "caDelete": "Odebrat certifikační autoritu (CA)",
-    "caDeleteConfirm": "Odebrat certifikační autoritu?",
-    "caDeleted": "CA odstraněna",
-    "caDeleteFailed": "Nepodařilo se odstranit certifikační autoritu (CA).",
-    "caValidityLabel": "Platnost certifikátu (dny)",
-    "issueCert": "Osvědčení",
-    "issueCertTooltip": "Vystavte pro tento klíč SSH certifikát podepsaný vaší certifikační autoritou.",
-    "certIssued": "Certifikát vydán a stažen",
-    "certIssueFailed": "Vydání certifikátu se nezdařilo",
-    "docsLink": "Zobrazit dokumenty",
-    "principalsLabel": "SSH principy",
-    "principalsPlaceholder": "SSH principál(i), např. root"
-  },
-  "nav": {
-    "termixId": "Průkaz totožnosti"
-  },
-  "credentials": {
-    "idBadge": "Průkaz totožnosti"
-  },
-  "permissions": {
-    "use": {
-      "title": "Použít Termix ID",
-      "description": "Získejte veřejný handle, publikujte SSH klíče a spusťte certifikační autoritu."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/da_DK.json b/plugins/termix-identity/locales/translated/da_DK.json
deleted file mode 100644
index 91c5ea71d..000000000
--- a/plugins/termix-identity/locales/translated/da_DK.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Termix-ID",
-    "loadFailed": "Kunne ikke indlæse Termix-ID'et",
-    "claimTitle": "Få dit Termix-ID",
-    "claimIntro": "Vælg et unikt handle. Dine offentlige SSH-nøgler vil blive offentliggjort på en offentlig URL, som du kan tilføje til enhver servers authorized_keys-fil.",
-    "handleLabel": "Håndtag",
-    "handlePlaceholder": "Alice",
-    "checking": "Tjekker…",
-    "available": "Tilgængelig",
-    "taken": "Allerede taget",
-    "invalidHandle": "Kun små bogstaver, tal, - og _",
-    "descriptionLabel": "Beskrivelse (valgfrit)",
-    "descriptionPlaceholder": "Arbejdslaptop og telefonnøgler",
-    "create": "Opret Termix-ID",
-    "created": "Termix-ID oprettet",
-    "createFailed": "Kunne ikke oprette Termix ID",
-    "deleteConfirm": "Vil du slette dit Termix-ID og alle publicerede nøgler? Servere, du har provisioneret, vil beholde nøglerne, indtil du fjerner dem manuelt.",
-    "deleted": "Termix-ID slettet",
-    "deleteFailed": "Kunne ikke slette Termix ID",
-    "copyFailed": "Kopiering mislykkedes",
-    "resolverUrlLabel": "Offentlig resolver-URL",
-    "provisionLabel": "Klargør en server",
-    "publishTitle": "Udgiv en offentlig nøgle",
-    "generate": "Frembringe",
-    "generateTooltip": "Generer et Ed25519-nøglepar. Udgiv den offentlige nøgle og downloader den private nøgle til din enhed.",
-    "saveToVault": "Gem til legitimationsoplysninger",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... bruger@vært",
-    "labelPlaceholder": "Etiket (valgfrit)",
-    "add": "Tilføje",
-    "importFromCredential": "Eller importer fra en gemt legitimationsoplysninger",
-    "keyPublished": "Nøgle udgivet",
-    "addKeyFailed": "Kunne ikke tilføje nøgle",
-    "generatedSaved": "Nøglepar genereret og gemt i din login-boks. Privat nøgle er også downloadet.",
-    "generatedOnly": "Nøglepar genereret. Privat nøgle downloadet (vises kun én gang).",
-    "generateFailed": "Kunne ikke generere nøgle",
-    "imported": "Nøgle importeret fra legitimationsoplysninger",
-    "importFailed": "Nøglen kunne ikke importeres",
-    "noKeys": "Ingen offentlige nøgler er udgivet endnu.",
-    "keysTitle": "Udgivne nøgler",
-    "published": "Udgivet",
-    "hidden": "Skjult",
-    "keyRemoved": "Nøglen er fjernet",
-    "removeKeyFailed": "Kunne ikke fjerne nøglen",
-    "updateKeyFailed": "Nøglen kunne ikke opdateres",
-    "fromVault": "Fra legitimationsoplysninger-arkiv",
-    "linkedToTermixId": "Udgivet via Termix ID",
-    "selectCredential": "Vælg en legitimationsoplysninger...",
-    "import": "Importere",
-    "caTitle": "Certifikatmyndighed",
-    "caIntro": "Stol på denne CA på en server, og den accepterer ethvert certifikat, du underskriver. Roter for at tilbagekalde alt på én gang; certifikater udløber også af sig selv.",
-    "caEnable": "Aktivér CA",
-    "caEnabled": "CA aktiveret",
-    "caCreateFailed": "Kunne ikke aktivere CA",
-    "caPublicKeyLabel": "CA offentlig nøgle",
-    "caTrustLabel": "Tillid til en server (kør som root)",
-    "caRotate": "Rotere",
-    "caRotateConfirm": "Roter CA'en? Alle certifikater, den har underskrevet, vil ikke længere blive accepteret og skal genudstedes.",
-    "caRotated": "CA roteret. Tidligere certifikater tilbagekaldt.",
-    "caRotateFailed": "Kunne ikke rotere CA",
-    "caDelete": "Fjern CA",
-    "caDeleteConfirm": "Fjern certifikatmyndigheden?",
-    "caDeleted": "CA fjernet",
-    "caDeleteFailed": "Kunne ikke fjerne CA",
-    "caValidityLabel": "Certifikatgyldighed (dage)",
-    "issueCert": "Certifikat",
-    "issueCertTooltip": "Udsted et SSH-certifikat til denne nøgle, underskrevet af din CA",
-    "certIssued": "Certifikat udstedt og downloadet",
-    "certIssueFailed": "Kunne ikke udstede certifikat",
-    "docsLink": "Se dokumenter",
-    "principalsLabel": "SSH-principper",
-    "principalsPlaceholder": "SSH-principal(er), f.eks. root"
-  },
-  "nav": {
-    "termixId": "ID"
-  },
-  "credentials": {
-    "idBadge": "ID"
-  },
-  "permissions": {
-    "use": {
-      "title": "Brug Termix-ID",
-      "description": "Gør krav på et offentligt handle, udgiv SSH-nøgler og kør en certifikatmyndighed."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/de_DE.json b/plugins/termix-identity/locales/translated/de_DE.json
deleted file mode 100644
index 08b45536a..000000000
--- a/plugins/termix-identity/locales/translated/de_DE.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Termix ID",
-    "loadFailed": "Fehler beim Laden der Termix-ID",
-    "claimTitle": "Termix-ID beanspruchen",
-    "claimIntro": "Wählen Sie einen eindeutigen Benutzernamen. Ihre öffentlichen SSH-Schlüssel werden unter einer öffentlichen URL veröffentlicht, die Sie in die authorized_keys-Datei eines beliebigen Servers einfügen können.",
-    "handleLabel": "Benutzername",
-    "handlePlaceholder": "alice",
-    "checking": "Wird überprüft…",
-    "available": "Verfügbar",
-    "taken": "Bereits vergeben",
-    "invalidHandle": "Nur Kleinbuchstaben, Zahlen, - und _ erlaubt",
-    "descriptionLabel": "Beschreibung (optional)",
-    "descriptionPlaceholder": "Arbeits-Laptop & Telefonschlüssel",
-    "create": "Termix-ID erstellen",
-    "created": "Termix-ID erstellt",
-    "createFailed": "Fehler beim Erstellen der Termix-ID",
-    "deleteConfirm": "Termix-ID und alle veröffentlichten Schlüssel löschen? Bereits bereitgestellte Server behalten die Schlüssel, bis Sie sie manuell entfernen.",
-    "deleted": "Termix-ID gelöscht",
-    "deleteFailed": "Fehler beim Löschen der Termix-ID",
-    "copyFailed": "Kopieren fehlgeschlagen",
-    "resolverUrlLabel": "Öffentliche Resolver-URL",
-    "provisionLabel": "Server bereitstellen",
-    "publishTitle": "Öffentlichen Schlüssel veröffentlichen",
-    "generate": "Generieren",
-    "generateTooltip": "Erzeugt ein Ed25519-Schlüsselpaar. Veröffentlicht den öffentlichen Schlüssel und lädt den privaten Schlüssel auf Ihr Gerät herunter.",
-    "saveToVault": "In Anmeldeinformationen speichern",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... user@host",
-    "labelPlaceholder": "Bezeichnung (optional)",
-    "add": "Hinzufügen",
-    "importFromCredential": "Oder aus gespeicherten Anmeldeinformationen importieren",
-    "keyPublished": "Schlüssel veröffentlicht",
-    "addKeyFailed": "Fehler beim Hinzufügen des Schlüssels",
-    "generatedSaved": "Schlüsselpaar generiert und in Ihrem Anmeldeinformations-Tresor gespeichert. Privater Schlüssel ebenfalls heruntergeladen.",
-    "generatedOnly": "Schlüsselpaar generiert. Privater Schlüssel heruntergeladen (wird nur einmal angezeigt).",
-    "generateFailed": "Fehler beim Generieren des Schlüssels",
-    "imported": "Schlüssel aus Anmeldeinformationen importiert",
-    "importFailed": "Schlüsselimport fehlgeschlagen",
-    "noKeys": "Noch keine öffentlichen Schlüssel veröffentlicht.",
-    "keysTitle": "Veröffentlichte Schlüssel",
-    "published": "Veröffentlicht",
-    "hidden": "Ausgeblendet",
-    "keyRemoved": "Schlüssel entfernt",
-    "removeKeyFailed": "Schlüsselentfernung fehlgeschlagen",
-    "updateKeyFailed": "Schlüsselaktualisierung fehlgeschlagen",
-    "fromVault": "Aus dem Anmeldedaten-Tresor",
-    "linkedToTermixId": "Veröffentlicht über Termix ID",
-    "selectCredential": "Anmeldedaten auswählen...",
-    "import": "Importieren",
-    "caTitle": "Zertifizierungsstelle",
-    "caIntro": "Vertrauen Sie dieser CA auf einem Server, und sie akzeptiert jedes von Ihnen signierte Zertifikat. Durch Rotieren widerrufen Sie alles auf einmal; Zertifikate laufen auch automatisch ab.",
-    "caEnable": "CA aktivieren",
-    "caEnabled": "CA aktiviert",
-    "caCreateFailed": "Aktivierung der CA fehlgeschlagen",
-    "caPublicKeyLabel": "Öffentlicher Schlüssel der CA",
-    "caTrustLabel": "Vertrauen auf einem Server (als root ausführen)",
-    "caRotate": "Rotieren",
-    "caRotateConfirm": "CA rotieren? Alle von ihr signierten Zertifikate werden nicht mehr akzeptiert und müssen neu ausgestellt werden.",
-    "caRotated": "Die Zertifizierungsstelle wurde gewechselt. Vorherige Zertifikate wurden widerrufen.",
-    "caRotateFailed": "Rotieren der CA fehlgeschlagen",
-    "caDelete": "CA entfernen",
-    "caDeleteConfirm": "Zertifizierungsstelle entfernen?",
-    "caDeleted": "CA entfernt",
-    "caDeleteFailed": "Entfernen der CA fehlgeschlagen",
-    "caValidityLabel": "Zertifikatsgültigkeit (Tage)",
-    "issueCert": "Zertifikat",
-    "issueCertTooltip": "Ein SSH-Zertifikat für diesen Schlüssel ausstellen, signiert von Ihrer CA",
-    "certIssued": "Zertifikat ausgestellt und heruntergeladen",
-    "certIssueFailed": "Ausstellung des Zertifikats fehlgeschlagen",
-    "docsLink": "Dokumentation ansehen",
-    "principalsLabel": "SSH-Prinzipale",
-    "principalsPlaceholder": "SSH-Prinzipal(e), z. B. root"
-  },
-  "nav": {
-    "termixId": "ID"
-  },
-  "credentials": {
-    "idBadge": "ID"
-  },
-  "permissions": {
-    "use": {
-      "title": "Termix-ID verwenden",
-      "description": "Sichern Sie sich einen öffentlichen Benutzernamen, veröffentlichen Sie SSH-Schlüssel und betreiben Sie eine Zertifizierungsstelle."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/el_GR.json b/plugins/termix-identity/locales/translated/el_GR.json
deleted file mode 100644
index 9ca4ef3f3..000000000
--- a/plugins/termix-identity/locales/translated/el_GR.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Αναγνωριστικό Termix",
-    "loadFailed": "Αποτυχία φόρτωσης του αναγνωριστικού Termix",
-    "claimTitle": "Διεκδικήστε το αναγνωριστικό σας Termix",
-    "claimIntro": "Επιλέξτε μια μοναδική λαβή. Τα δημόσια κλειδιά SSH σας θα δημοσιευτούν σε μια δημόσια διεύθυνση URL που μπορείτε να προσθέσετε στο αρχείο authorized_keys οποιουδήποτε διακομιστή.",
-    "handleLabel": "Λαβή",
-    "handlePlaceholder": "Αλίκη",
-    "checking": "Έλεγχος…",
-    "available": "Διαθέσιμος",
-    "taken": "Ήδη καταγεγραμμένο",
-    "invalidHandle": "Μόνο πεζά γράμματα, αριθμοί και - και _",
-    "descriptionLabel": "Περιγραφή (προαιρετικό)",
-    "descriptionPlaceholder": "Κλειδιά φορητού υπολογιστή και τηλεφώνου εργασίας",
-    "create": "Δημιουργία αναγνωριστικού Termix",
-    "created": "Το αναγνωριστικό Termix δημιουργήθηκε",
-    "createFailed": "Αποτυχία δημιουργίας αναγνωριστικού Termix",
-    "deleteConfirm": "Να διαγραφεί το αναγνωριστικό Termix και όλα τα δημοσιευμένα κλειδιά; Οι διακομιστές που έχετε παράσχει θα διατηρήσουν τα κλειδιά μέχρι να τα καταργήσετε χειροκίνητα.",
-    "deleted": "Το αναγνωριστικό Termix διαγράφηκε",
-    "deleteFailed": "Αποτυχία διαγραφής του αναγνωριστικού Termix",
-    "copyFailed": "Η αντιγραφή απέτυχε.",
-    "resolverUrlLabel": "Δημόσια διεύθυνση URL αναλυτή",
-    "provisionLabel": "Παροχή διακομιστή",
-    "publishTitle": "Δημοσίευση δημόσιου κλειδιού",
-    "generate": "Παράγω",
-    "generateTooltip": "Δημιουργήστε ένα ζεύγος κλειδιών Ed25519. Δημοσιεύει το δημόσιο κλειδί και κατεβάζει το ιδιωτικό κλειδί στη συσκευή σας.",
-    "saveToVault": "Αποθήκευση σε διαπιστευτήρια",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... χρήστης@host",
-    "labelPlaceholder": "Ετικέτα (προαιρετικά)",
-    "add": "Προσθέτω",
-    "importFromCredential": "Ή εισαγωγή από αποθηκευμένα διαπιστευτήρια",
-    "keyPublished": "Κλειδί δημοσιεύτηκε",
-    "addKeyFailed": "Η προσθήκη κλειδιού απέτυχε",
-    "generatedSaved": "Δημιουργήθηκε και αποθηκεύτηκε ζεύγος κλειδιών στο αρχείο διαπιστευτηρίων σας. Επίσης, λήφθηκε το ιδιωτικό κλειδί.",
-    "generatedOnly": "Δημιουργήθηκε ζεύγος κλειδιών. Λήψη ιδιωτικού κλειδιού (εμφανίζεται μόνο μία φορά).",
-    "generateFailed": "Η δημιουργία κλειδιού απέτυχε",
-    "imported": "Κλειδί εισήχθη από πιστοποιητικά",
-    "importFailed": "Αποτυχία εισαγωγής κλειδιού",
-    "noKeys": "Δεν έχουν δημοσιευτεί ακόμη δημόσια κλειδιά.",
-    "keysTitle": "Δημοσιευμένα κλειδιά",
-    "published": "Δημοσιεύτηκε",
-    "hidden": "Κεκρυμμένος",
-    "keyRemoved": "Το κλειδί αφαιρέθηκε",
-    "removeKeyFailed": "Αποτυχία αφαίρεσης κλειδιού",
-    "updateKeyFailed": "Η ενημέρωση του κλειδιού απέτυχε",
-    "fromVault": "Από το θησαυροφυλάκιο διαπιστευτηρίων",
-    "linkedToTermixId": "Δημοσιεύτηκε μέσω του Termix ID",
-    "selectCredential": "Επιλέξτε ένα πιστοποιητικό...",
-    "import": "Εισαγωγή",
-    "caTitle": "Αρχή έκδοσης πιστοποιητικών",
-    "caIntro": "Να εμπιστεύεστε αυτήν την CA σε έναν διακομιστή και αυτή θα αποδέχεται οποιοδήποτε πιστοποιητικό υπογράφετε. Περιστρέψτε για να ακυρώσετε τα πάντα ταυτόχρονα. Τα πιστοποιητικά λήγουν επίσης από μόνα τους.",
-    "caEnable": "Ενεργοποίηση CA",
-    "caEnabled": "Ενεργοποιημένο CA",
-    "caCreateFailed": "Αποτυχία ενεργοποίησης CA",
-    "caPublicKeyLabel": "Δημόσιο κλειδί CA",
-    "caTrustLabel": "Εμπιστοσύνη σε διακομιστή (εκτέλεση ως root)",
-    "caRotate": "Γυρίζω",
-    "caRotateConfirm": "Να εναλλάσσεται η CA; Κάθε πιστοποιητικό που έχει υπογράψει θα σταματήσει να γίνεται αποδεκτό και θα πρέπει να εκδοθεί εκ νέου.",
-    "caRotated": "Η Αρχή Πιστοποίησης (CA) εναλλάχθηκε. Τα προηγούμενα πιστοποιητικά ανακλήθηκαν.",
-    "caRotateFailed": "Αποτυχία εναλλαγής CA",
-    "caDelete": "Κατάργηση CA",
-    "caDeleteConfirm": "Κατάργηση της αρχής έκδοσης πιστοποιητικών;",
-    "caDeleted": "Η CA καταργήθηκε.",
-    "caDeleteFailed": "Αποτυχία κατάργησης CA",
-    "caValidityLabel": "Ισχύς πιστοποιητικού (ημέρες)",
-    "issueCert": "Πιστοποιητικό",
-    "issueCertTooltip": "Έκδοση πιστοποιητικού SSH για αυτό το κλειδί, υπογεγραμμένου από την CA σας",
-    "certIssued": "Έκδοση και λήψη πιστοποιητικού",
-    "certIssueFailed": "Αποτυχία έκδοσης πιστοποιητικού",
-    "docsLink": "Προβολή εγγράφων",
-    "principalsLabel": "Αρχές SSH",
-    "principalsPlaceholder": "Κύριος(-οί) SSH, π.χ. root"
-  },
-  "nav": {
-    "termixId": "ταυτότητα"
-  },
-  "credentials": {
-    "idBadge": "ταυτότητα"
-  },
-  "permissions": {
-    "use": {
-      "title": "Χρήση αναγνωριστικού Termix",
-      "description": "Διεκδικήστε μια δημόσια λαβή, δημοσιεύστε κλειδιά SSH και εκτελέστε μια αρχή έκδοσης πιστοποιητικών."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/es_ES.json b/plugins/termix-identity/locales/translated/es_ES.json
deleted file mode 100644
index 60648828b..000000000
--- a/plugins/termix-identity/locales/translated/es_ES.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Termix ID",
-    "loadFailed": "Error al cargar Termix ID",
-    "claimTitle": "Reclama tu Termix ID",
-    "claimIntro": "Elige un identificador único. Tus claves públicas SSH se publicarán en una URL pública que puedes añadir al archivo authorized_keys de cualquier servidor.",
-    "handleLabel": "Identificador",
-    "handlePlaceholder": "alice",
-    "checking": "Comprobando…",
-    "available": "Disponible",
-    "taken": "Ya está en uso",
-    "invalidHandle": "Solo letras minúsculas, números, - y _",
-    "descriptionLabel": "Descripción (opcional)",
-    "descriptionPlaceholder": "Claves del portátil de trabajo y del teléfono",
-    "create": "Crear Termix ID",
-    "created": "Termix ID creado",
-    "createFailed": "Error al crear Termix ID",
-    "deleteConfirm": "¿Eliminar tu Termix ID y todas las claves publicadas? Los servidores que aprovisionaste conservarán las claves hasta que las elimines manualmente.",
-    "deleted": "Termix ID eliminado",
-    "deleteFailed": "Error al eliminar Termix ID",
-    "copyFailed": "Error al copiar",
-    "resolverUrlLabel": "URL pública de resolución",
-    "provisionLabel": "Aprovisionar un servidor",
-    "publishTitle": "Publicar una clave pública",
-    "generate": "Generar",
-    "generateTooltip": "Genera un par de claves Ed25519. Publica la clave pública y descarga la clave privada en tu dispositivo.",
-    "saveToVault": "Guardar en credenciales",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... user@host",
-    "labelPlaceholder": "Etiqueta (opcional)",
-    "add": "Añadir",
-    "importFromCredential": "O importar desde una credencial almacenada",
-    "keyPublished": "Clave publicada",
-    "addKeyFailed": "Error al añadir clave",
-    "generatedSaved": "Par de claves generado y guardado en tu almacén de credenciales. También se descargó la clave privada.",
-    "generatedOnly": "Par de claves generado. Clave privada descargada (se muestra solo una vez).",
-    "generateFailed": "Error al generar clave",
-    "imported": "Clave importada desde la credencial",
-    "importFailed": "Error al importar la clave",
-    "noKeys": "Aún no se han publicado claves públicas.",
-    "keysTitle": "Claves publicadas",
-    "published": "Publicada",
-    "hidden": "Oculta",
-    "keyRemoved": "Clave eliminada",
-    "removeKeyFailed": "Error al eliminar la clave",
-    "updateKeyFailed": "Error al actualizar la clave",
-    "fromVault": "Del almacén de credenciales",
-    "linkedToTermixId": "Publicada mediante Termix ID",
-    "selectCredential": "Seleccionar una credencial...",
-    "import": "Importar",
-    "caTitle": "Autoridad de certificación",
-    "caIntro": "Confíe en esta CA en un servidor y aceptará cualquier certificado que firme. Rote para revocar todo a la vez; los certificados también caducan por sí solos.",
-    "caEnable": "Activar CA",
-    "caEnabled": "CA activada",
-    "caCreateFailed": "Error al activar la CA",
-    "caPublicKeyLabel": "Clave pública de la CA",
-    "caTrustLabel": "Confiar en un servidor (ejecutar como root)",
-    "caRotate": "Rotar",
-    "caRotateConfirm": "¿Rotar la CA? Todos los certificados que ha firmado dejarán de ser aceptados y deberán volver a emitirse.",
-    "caRotated": "Se ha rotado la autoridad de certificación. Se han revocado los certificados anteriores.",
-    "caRotateFailed": "Error al rotar la CA",
-    "caDelete": "Eliminar CA",
-    "caDeleteConfirm": "¿Eliminar la autoridad de certificación?",
-    "caDeleted": "CA eliminada",
-    "caDeleteFailed": "Error al eliminar la CA",
-    "caValidityLabel": "Validez del certificado (días)",
-    "issueCert": "Certificado",
-    "issueCertTooltip": "Emitir un certificado SSH para esta clave, firmado por su CA",
-    "certIssued": "Certificado emitido y descargado",
-    "certIssueFailed": "Error al emitir el certificado",
-    "docsLink": "Ver documentación",
-    "principalsLabel": "Principios de SSH",
-    "principalsPlaceholder": "Entidad principal de SSH, por ejemplo, root"
-  },
-  "nav": {
-    "termixId": "ID"
-  },
-  "credentials": {
-    "idBadge": "ID"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilice el ID de Termix.",
-      "description": "Reclama un identificador público, publica claves SSH y gestiona una autoridad de certificación."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/fi_FI.json b/plugins/termix-identity/locales/translated/fi_FI.json
deleted file mode 100644
index 6c00169f4..000000000
--- a/plugins/termix-identity/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Termix-tunnus",
-    "loadFailed": "Termix-tunnuksen lataaminen epäonnistui",
-    "claimTitle": "Lunasta Termix-tunnuksesi",
-    "claimIntro": "Valitse yksilöllinen käyttäjätunnus. SSH-julkiset avaimesi julkaistaan julkisessa URL-osoitteessa, jonka voit lisätä minkä tahansa palvelimen authorized_keys-tiedostoon.",
-    "handleLabel": "Kahva",
-    "handlePlaceholder": "Alice",
-    "checking": "Tarkistetaan…",
-    "available": "Saatavilla",
-    "taken": "Jo otettu",
-    "invalidHandle": "Vain pienet kirjaimet, numerot - ja _",
-    "descriptionLabel": "Kuvaus (valinnainen)",
-    "descriptionPlaceholder": "Työkannettava ja puhelimen avaimet",
-    "create": "Luo Termix-tunnus",
-    "created": "Termix-tunnus luotu",
-    "createFailed": "Termix-tunnuksen luominen epäonnistui",
-    "deleteConfirm": "Poistetaanko Termix-tunnuksesi ja kaikki julkaistut avaimet? Määrittämäsi palvelimet säilyttävät avaimet, kunnes poistat ne manuaalisesti.",
-    "deleted": "Termix-tunnus poistettu",
-    "deleteFailed": "Termix-tunnuksen poistaminen epäonnistui",
-    "copyFailed": "Kopiointi epäonnistui",
-    "resolverUrlLabel": "Julkisen ratkaisijan URL-osoite",
-    "provisionLabel": "Palvelimen valmistelu",
-    "publishTitle": "Julkaise julkinen avain",
-    "generate": "Luo",
-    "generateTooltip": "Luo Ed25519-avainparin. Julkaisee julkisen avaimen ja lataa yksityisen avaimen laitteellesi.",
-    "saveToVault": "Tallenna tunnistetietoihin",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... käyttäjä@isäntä",
-    "labelPlaceholder": "Tarra (valinnainen)",
-    "add": "Lisätä",
-    "importFromCredential": "Tai tuo tallennetuista tunnistetiedoista",
-    "keyPublished": "Avain julkaistu",
-    "addKeyFailed": "Avaimen lisääminen epäonnistui",
-    "generatedSaved": "Avainpari luotiin ja tallennettiin tunnistetietoholviisi. Myös yksityinen avain ladattiin.",
-    "generatedOnly": "Avainpari luotu. Yksityinen avain ladattu (näytetään vain kerran).",
-    "generateFailed": "Avaimen luominen epäonnistui",
-    "imported": "Avain tuotu tunnistetiedoista",
-    "importFailed": "Avaimen tuonti epäonnistui",
-    "noKeys": "Julkisia avaimia ei ole vielä julkaistu.",
-    "keysTitle": "Julkaistut avaimet",
-    "published": "Julkaistu",
-    "hidden": "Piilotettu",
-    "keyRemoved": "Avain poistettu",
-    "removeKeyFailed": "Avaimen poistaminen epäonnistui",
-    "updateKeyFailed": "Avaimen päivittäminen epäonnistui",
-    "fromVault": "Tunnistetietosäilöstä",
-    "linkedToTermixId": "Julkaistu Termix ID:n kautta",
-    "selectCredential": "Valitse tunnistetiedot...",
-    "import": "Tuoda",
-    "caTitle": "Varmentaja",
-    "caIntro": "Luota tähän palvelimella olevaan varmenteiden myöntäjään, niin se hyväksyy kaikki allekirjoittamasi varmenteet. Kierrätä peruuttaaksesi kaiken kerralla; varmenteet myös vanhenevat itsestään.",
-    "caEnable": "Ota käyttöön CA",
-    "caEnabled": "CA käytössä",
-    "caCreateFailed": "CA:n käyttöönotto epäonnistui",
-    "caPublicKeyLabel": "CA:n julkinen avain",
-    "caTrustLabel": "Luota palvelimeen (aja root-käyttäjänä)",
-    "caRotate": "Kiertää",
-    "caRotateConfirm": "Kierrätetäänkö varmentajaa? Kaikki sen allekirjoittamat varmenteet lakkaavat olemasta hyväksyttäviä ja ne on myönnettävä uudelleen.",
-    "caRotated": "Varmennetoimittaja vaihdettu. Aiemmat varmenteet peruttu.",
-    "caRotateFailed": "CA:n vaihtaminen epäonnistui",
-    "caDelete": "Poista CA",
-    "caDeleteConfirm": "Poistetaanko varmenteen myöntäjä?",
-    "caDeleted": "CA poistettu",
-    "caDeleteFailed": "CA:n poistaminen epäonnistui",
-    "caValidityLabel": "Sertifikaatin voimassaolo (päivinä)",
-    "issueCert": "Todistus",
-    "issueCertTooltip": "Myönnä tälle avaimelle SSH-varmenne, jonka CA on allekirjoittanut",
-    "certIssued": "Todistus myönnetty ja ladattu",
-    "certIssueFailed": "Varmenteen myöntäminen epäonnistui",
-    "docsLink": "Näytä dokumentit",
-    "principalsLabel": "SSH-pääasialliset",
-    "principalsPlaceholder": "SSH-päähenkilö(t), esim. juuri"
-  },
-  "nav": {
-    "termixId": "Henkilöllisyystodistus"
-  },
-  "credentials": {
-    "idBadge": "Henkilöllisyystodistus"
-  },
-  "permissions": {
-    "use": {
-      "title": "Käytä Termix-tunnusta",
-      "description": "Varaa julkinen kahva, julkaise SSH-avaimet ja suorita varmenneviranomainen."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/fr_FR.json b/plugins/termix-identity/locales/translated/fr_FR.json
deleted file mode 100644
index d8cfde44a..000000000
--- a/plugins/termix-identity/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Termix ID",
-    "loadFailed": "Échec du chargement de Termix ID",
-    "claimTitle": "Obtenez votre Termix ID",
-    "claimIntro": "Choisissez un identifiant unique. Vos clés publiques SSH seront publiées à une URL publique que vous pourrez ajouter au fichier authorized_keys de n'importe quel serveur.",
-    "handleLabel": "Identifiant",
-    "handlePlaceholder": "alice",
-    "checking": "Vérification…",
-    "available": "Disponible",
-    "taken": "Déjà pris",
-    "invalidHandle": "Lettres minuscules, chiffres, - et _ uniquement",
-    "descriptionLabel": "Description (facultative)",
-    "descriptionPlaceholder": "Clés pour ordinateur portable pro et téléphone",
-    "create": "Créer un Termix ID",
-    "created": "Termix ID créé",
-    "createFailed": "Échec de la création de Termix ID",
-    "deleteConfirm": "Supprimer votre Termix ID et toutes les clés publiées ? Les serveurs que vous avez provisionnés conserveront les clés jusqu'à ce que vous les supprimiez manuellement.",
-    "deleted": "Termix ID supprimé",
-    "deleteFailed": "Échec de la suppression de Termix ID",
-    "copyFailed": "Échec de la copie",
-    "resolverUrlLabel": "URL de résolution publique",
-    "provisionLabel": "Provisionner un serveur",
-    "publishTitle": "Publier une clé publique",
-    "generate": "Générer",
-    "generateTooltip": "Générez une paire de clés Ed25519. Publiez la clé publique et téléchargez la clé privée sur votre appareil.",
-    "saveToVault": "Enregistrer dans les identifiants",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... user@host",
-    "labelPlaceholder": "Libellé (facultatif)",
-    "add": "Ajouter",
-    "importFromCredential": "Ou importer depuis un identifiant stocké",
-    "keyPublished": "Clé publiée",
-    "addKeyFailed": "Échec de l'ajout de la clé",
-    "generatedSaved": "Paire de clés générée et enregistrée dans votre coffre-fort d'identifiants. Clé privée également téléchargée.",
-    "generatedOnly": "Paire de clés générée. Clé privée téléchargée (affichée une seule fois).",
-    "generateFailed": "Échec de la génération de la clé",
-    "imported": "Clé importée depuis l'identifiant",
-    "importFailed": "Échec de l'importation de la clé",
-    "noKeys": "Aucune clé publique publiée pour le moment.",
-    "keysTitle": "Clés publiées",
-    "published": "Publiée",
-    "hidden": "Masquée",
-    "keyRemoved": "Clé supprimée",
-    "removeKeyFailed": "Échec de la suppression de la clé",
-    "updateKeyFailed": "Échec de la mise à jour de la clé",
-    "fromVault": "Du coffre-fort des identifiants",
-    "linkedToTermixId": "Publiée via Termix ID",
-    "selectCredential": "Sélectionner un identifiant...",
-    "import": "Importer",
-    "caTitle": "Autorité de certification",
-    "caIntro": "Faites confiance à cette AC sur un serveur et il acceptera tout certificat que vous signez. Renouvelez pour tout révoquer d'un coup ; les certificats expirent également d'eux-mêmes.",
-    "caEnable": "Activer l'AC",
-    "caEnabled": "AC activée",
-    "caCreateFailed": "Échec de l'activation de l'AC",
-    "caPublicKeyLabel": "Clé publique de l'AC",
-    "caTrustLabel": "Confiance sur un serveur (exécuter en tant que root)",
-    "caRotate": "Renouveler",
-    "caRotateConfirm": "Renouveler l'AC ? Tous les certificats qu'elle a signés ne seront plus acceptés et devront être réémis.",
-    "caRotated": "L'autorité de certification a été renouvelée. Les certificats précédents ont été révoqués.",
-    "caRotateFailed": "Échec du renouvellement de l'AC",
-    "caDelete": "Supprimer l'AC",
-    "caDeleteConfirm": "Supprimer l'autorité de certification ?",
-    "caDeleted": "AC supprimée",
-    "caDeleteFailed": "Échec de la suppression de l'AC",
-    "caValidityLabel": "Validité du certificat (jours)",
-    "issueCert": "Certificat",
-    "issueCertTooltip": "Émettre un certificat SSH pour cette clé, signé par votre AC",
-    "certIssued": "Certificat émis et téléchargé",
-    "certIssueFailed": "Échec de l'émission du certificat",
-    "docsLink": "Documentation",
-    "principalsLabel": "Principes de SSH",
-    "principalsPlaceholder": "Principal(s) SSH, par exemple racine"
-  },
-  "nav": {
-    "termixId": "ID"
-  },
-  "credentials": {
-    "idBadge": "ID"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilisez votre identifiant Termix",
-      "description": "Réclamez un nom d'utilisateur public, publiez des clés SSH et gérez une autorité de certification."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/he_IL.json b/plugins/termix-identity/locales/translated/he_IL.json
deleted file mode 100644
index e2c8889ce..000000000
--- a/plugins/termix-identity/locales/translated/he_IL.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "מזהה טרמיקס",
-    "loadFailed": "נכשלה טעינת מזהה Termix",
-    "claimTitle": "תבע את מזהה ה-Termix שלך",
-    "claimIntro": "בחר שם משתמש ייחודי. המפתחות הציבוריים של SSH שלך יפורסמו בכתובת URL ציבורית שתוכל להוסיף לקובץ authorized_keys של כל שרת.",
-    "handleLabel": "יָדִית",
-    "handlePlaceholder": "אליס",
-    "checking": "בודק…",
-    "available": "זָמִין",
-    "taken": "כבר תפוס",
-    "invalidHandle": "אותיות קטנות, מספרים, - ו-_ בלבד",
-    "descriptionLabel": "תיאור (אופציונלי)",
-    "descriptionPlaceholder": "מפתחות למחשב נייד ולטלפון עבודה",
-    "create": "צור מזהה טרמיקס",
-    "created": "מזהה טרמיקס נוצר",
-    "createFailed": "נכשלה יצירת מזהה Termix",
-    "deleteConfirm": "למחוק את מזהה ה-Termix שלך ואת כל המפתחות שפורסמו? השרתים שהקמת ישמרו את המפתחות עד שתסיר אותם ידנית.",
-    "deleted": "מזהה טרמיקס נמחק",
-    "deleteFailed": "נכשלה מחיקת מזהה Termix",
-    "copyFailed": "ההעתקה נכשלה",
-    "resolverUrlLabel": "כתובת URL ציבורית לפתרון",
-    "provisionLabel": "הקצאת שרת",
-    "publishTitle": "פרסום מפתח ציבורי",
-    "generate": "לִיצוֹר",
-    "generateTooltip": "צור זוג מפתחות Ed25519. מפרסם את המפתח הציבורי ומוריד את המפתח הפרטי למכשיר שלך.",
-    "saveToVault": "שמור אל אישורים",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... משתמש@מארח",
-    "labelPlaceholder": "תווית (אופציונלי)",
-    "add": "לְהוֹסִיף",
-    "importFromCredential": "או ייבוא מאישור מאוחסן",
-    "keyPublished": "מפתח פורסם",
-    "addKeyFailed": "הוספת המפתח נכשלה",
-    "generatedSaved": "זוג המפתחות נוצר ונשמר בכספת האישורים שלך. המפתח הפרטי גם הורד.",
-    "generatedOnly": "נוצר זוג מפתחות. הורד מפתח פרטי (מוצג פעם אחת בלבד).",
-    "generateFailed": "יצירת המפתח נכשלה",
-    "imported": "מפתח יובא מהאישור",
-    "importFailed": "ייבוא המפתח נכשל",
-    "noKeys": "עדיין לא פורסמו מפתחות ציבוריים.",
-    "keysTitle": "מפתחות שפורסמו",
-    "published": "פורסם",
-    "hidden": "מוּסתָר",
-    "keyRemoved": "המפתח הוסר",
-    "removeKeyFailed": "הסרת המפתח נכשלה",
-    "updateKeyFailed": "עדכון המפתח נכשל",
-    "fromVault": "מכספת האישורים",
-    "linkedToTermixId": "פורסם באמצעות Termix ID",
-    "selectCredential": "בחר אישור...",
-    "import": "יְבוּא",
-    "caTitle": "רשות אישורים",
-    "caIntro": "בטח באישור CA זה בשרת והוא יקבל כל אישור שאתה חותם עליו. סובב כדי לבטל הכל בבת אחת; אישורים גם פגים מעצמם.",
-    "caEnable": "הפעלת CA",
-    "caEnabled": "אישור אישורים (CA) מופעל",
-    "caCreateFailed": "נכשל בהפעלת CA",
-    "caPublicKeyLabel": "מפתח ציבורי של CA",
-    "caTrustLabel": "אמון בשרת (הפעלה כ-root)",
-    "caRotate": "לְסוֹבֵב",
-    "caRotateConfirm": "לסובב את רשות האישור? כל אישור שהיא חתמה עליו יפסיק להתקבל ויהיה צורך להנפיק אותו מחדש.",
-    "caRotated": "רשות האישור הסתובבה. אישורים קודמים בוטלו.",
-    "caRotateFailed": "נכשל בסבב CA",
-    "caDelete": "הסר את CA",
-    "caDeleteConfirm": "להסיר את רשות האישורים?",
-    "caDeleted": "רשות האישור הוסרה",
-    "caDeleteFailed": "נכשל בהסרת CA",
-    "caValidityLabel": "תוקף האישור (ימים)",
-    "issueCert": "תְעוּדָה",
-    "issueCertTooltip": "הנפק אישור SSH עבור מפתח זה, חתום על ידי רשות האישור שלך",
-    "certIssued": "תעודה הונפקה והורדה",
-    "certIssueFailed": "הנפקת האישור נכשלה",
-    "docsLink": "הצג מסמכים",
-    "principalsLabel": "עקרונות SSH",
-    "principalsPlaceholder": "עיקרי SSH, למשל root"
-  },
-  "nav": {
-    "termixId": "תְעוּדַת זֶהוּת"
-  },
-  "credentials": {
-    "idBadge": "תְעוּדַת זֶהוּת"
-  },
-  "permissions": {
-    "use": {
-      "title": "השתמש במזהה טרמיקס",
-      "description": "תבע ערך מזהה ציבורי, פרסם מפתחות SSH והפעל רשות אישורים."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/hi_IN.json b/plugins/termix-identity/locales/translated/hi_IN.json
deleted file mode 100644
index 9d8e7b76d..000000000
--- a/plugins/termix-identity/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Termix ID",
-    "loadFailed": "Termix ID लोड करने में विफल",
-    "claimTitle": "अपना Termix ID क्लेम करें",
-    "claimIntro": "एक अनूठा हैंडल चुनें। आपकी SSH सार्वजनिक कुंजियाँ एक सार्वजनिक URL पर प्रकाशित की जाएंगी जिसे आप किसी भी सर्वर की authorized_keys फ़ाइल में जोड़ सकते हैं।",
-    "handleLabel": "हैंडल",
-    "handlePlaceholder": "alice",
-    "checking": "जाँच हो रही है…",
-    "available": "उपलब्ध",
-    "taken": "पहले से उपयोग में",
-    "invalidHandle": "केवल छोटे अक्षर, अंक, - और _",
-    "descriptionLabel": "विवरण (वैकल्पिक)",
-    "descriptionPlaceholder": "कार्य लैपटॉप और फ़ोन कुंजियाँ",
-    "create": "Termix ID बनाएँ",
-    "created": "Termix ID बन गई",
-    "createFailed": "Termix ID बनाने में विफल",
-    "deleteConfirm": "अपनी Termix ID और सभी प्रकाशित कुंजियाँ हटाएँ? जो सर्वर आपने प्रोविज़न किए हैं वे कुंजियाँ तब तक रखेंगे जब तक आप उन्हें मैन्युअल रूप से नहीं हटाते।",
-    "deleted": "Termix ID हटाई गई",
-    "deleteFailed": "Termix ID हटाने में विफल",
-    "copyFailed": "कॉपी करने में विफल",
-    "resolverUrlLabel": "सार्वजनिक रिज़ॉल्वर URL",
-    "provisionLabel": "सर्वर प्रोविज़न करें",
-    "publishTitle": "सार्वजनिक कुंजी प्रकाशित करें",
-    "generate": "जनरेट करें",
-    "generateTooltip": "Ed25519 कुंजी युग्म उत्पन्न करें। यह सार्वजनिक कुंजी प्रकाशित करता है और निजी कुंजी को आपके डिवाइस पर डाउनलोड करता है।",
-    "saveToVault": "क्रेडेंशियल में सहेजें",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... user@host",
-    "labelPlaceholder": "लेबल (वैकल्पिक)",
-    "add": "जोड़ें",
-    "importFromCredential": "या संग्रहीत क्रेडेंशियल से आयात करें",
-    "keyPublished": "कुंजी प्रकाशित",
-    "addKeyFailed": "कुंजी जोड़ने में विफल",
-    "generatedSaved": "कुंजी युग्म जनरेट हुआ और आपके क्रेडेंशियल वॉल्ट में सहेजा गया। निजी कुंजी भी डाउनलोड की गई।",
-    "generatedOnly": "कुंजी युग्म उत्पन्न हो गया। निजी कुंजी डाउनलोड हो गई (केवल एक बार दिखाई गई)।",
-    "generateFailed": "कुंजी जनरेट करने में विफल",
-    "imported": "क्रेडेंशियल से कुंजी आयात की गई",
-    "importFailed": "कुंजी आयात करने में विफल",
-    "noKeys": "अभी तक कोई सार्वजनिक कुंजी प्रकाशित नहीं हुई है।",
-    "keysTitle": "प्रकाशित कुंजियाँ",
-    "published": "प्रकाशित",
-    "hidden": "छिपी हुई",
-    "keyRemoved": "कुंजी हटाई गई",
-    "removeKeyFailed": "कुंजी हटाने में विफल",
-    "updateKeyFailed": "कुंजी अपडेट करने में विफल",
-    "fromVault": "क्रेडेंशियल वॉल्ट से",
-    "linkedToTermixId": "Termix ID के माध्यम से प्रकाशित",
-    "selectCredential": "एक क्रेडेंशियल चुनें...",
-    "import": "आयात करें",
-    "caTitle": "प्रमाणपत्र प्राधिकरण",
-    "caIntro": "सर्वर पर इस CA पर भरोसा करें और यह आपके द्वारा हस्ताक्षरित किसी भी प्रमाणपत्र को स्वीकार करता है। एक ही बार में सब कुछ निरस्त करने के लिए CA को रोटेट करें; प्रमाणपत्र अपने आप भी समाप्त हो जाते हैं।",
-    "caEnable": "CA सक्षम करें",
-    "caEnabled": "CA सक्षम",
-    "caCreateFailed": "CA सक्षम करने में विफल",
-    "caPublicKeyLabel": "CA सार्वजनिक कुंजी",
-    "caTrustLabel": "सर्वर पर भरोसा करें (रूट के रूप में चलाएँ)",
-    "caRotate": "रोटेट करें",
-    "caRotateConfirm": "CA को रोटेट करें? इसके द्वारा हस्ताक्षरित प्रत्येक प्रमाणपत्र स्वीकार करना बंद कर दिया जाएगा और उन्हें फिर से जारी करना होगा।",
-    "caRotated": "सीए का तबादला हो गया। पिछले प्रमाणपत्र रद्द कर दिए गए।",
-    "caRotateFailed": "CA रोटेट करने में विफल",
-    "caDelete": "CA हटाएँ",
-    "caDeleteConfirm": "प्रमाणपत्र प्राधिकरण हटाएँ?",
-    "caDeleted": "CA हटाया गया",
-    "caDeleteFailed": "CA हटाने में विफल",
-    "caValidityLabel": "प्रमाणपत्र वैधता (दिनों में)",
-    "issueCert": "प्रमाणपत्र",
-    "issueCertTooltip": "इस कुंजी के लिए एक SSH प्रमाणपत्र जारी करें, आपके CA द्वारा हस्ताक्षरित",
-    "certIssued": "प्रमाणपत्र जारी और डाउनलोड किया गया",
-    "certIssueFailed": "प्रमाणपत्र जारी करने में विफल",
-    "docsLink": "दस्तावेज़ देखें",
-    "principalsLabel": "एसएसएच प्रिंसिपल",
-    "principalsPlaceholder": "SSH प्रिंसिपल(ओं), उदाहरण के लिए रूट"
-  },
-  "nav": {
-    "termixId": "आईडी"
-  },
-  "credentials": {
-    "idBadge": "आईडी"
-  },
-  "permissions": {
-    "use": {
-      "title": "टर्मिक्स आईडी का उपयोग करें",
-      "description": "एक सार्वजनिक हैंडल का दावा करें, एसएसएच कुंजी प्रकाशित करें और एक प्रमाणपत्र प्राधिकरण चलाएं।"
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/hu_HU.json b/plugins/termix-identity/locales/translated/hu_HU.json
deleted file mode 100644
index 10d49ad9e..000000000
--- a/plugins/termix-identity/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Termix azonosító",
-    "loadFailed": "Nem sikerült betölteni a Termix azonosítót",
-    "claimTitle": "Igényelje Termix azonosítóját",
-    "claimIntro": "Válassz egyedi azonosítót. Az SSH nyilvános kulcsaid egy nyilvános URL-címen lesznek közzétéve, amelyet hozzáadhatsz bármelyik szerver authorized_keys fájljához.",
-    "handleLabel": "Fogantyú",
-    "handlePlaceholder": "Alice",
-    "checking": "… ellenőrzése",
-    "available": "Elérhető",
-    "taken": "Már foglalt",
-    "invalidHandle": "Csak kisbetűk, számok - és _",
-    "descriptionLabel": "Leírás (opcionális)",
-    "descriptionPlaceholder": "Munkahelyi laptop és telefonkulcsok",
-    "create": "Termix azonosító létrehozása",
-    "created": "Termix azonosító létrehozva",
-    "createFailed": "Nem sikerült létrehozni a Termix azonosítót",
-    "deleteConfirm": "Törli a Termix azonosítóját és az összes közzétett kulcsát? A kiépített szerverek mindaddig megőrzik a kulcsokat, amíg manuálisan el nem távolítja azokat.",
-    "deleted": "Termix azonosító törölve",
-    "deleteFailed": "Nem sikerült törölni a Termix azonosítót",
-    "copyFailed": "Másolás sikertelen",
-    "resolverUrlLabel": "Nyilvános feloldó URL",
-    "provisionLabel": "Szerver kiépítése",
-    "publishTitle": "Nyilvános kulcs közzététele",
-    "generate": "Generálás",
-    "generateTooltip": "Ed25519 kulcspár generálása. A nyilvános kulcs közzététele és a privát kulcs letöltése az eszközre.",
-    "saveToVault": "Hitelesítő adatok mentése",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... felhasználó@hoszt",
-    "labelPlaceholder": "Címke (opcionális)",
-    "add": "Hozzáadás",
-    "importFromCredential": "Vagy importáljon egy tárolt hitelesítő adatból",
-    "keyPublished": "Kulcs közzétéve",
-    "addKeyFailed": "Nem sikerült hozzáadni a kulcsot",
-    "generatedSaved": "Kulcspár generálva és mentve a hitelesítő adatok tárolására szolgáló tárolóba. A privát kulcs is letöltődött.",
-    "generatedOnly": "Kulcspár generálva. Privát kulcs letöltve (csak egyszer jelenik meg).",
-    "generateFailed": "Nem sikerült kulcsot generálni",
-    "imported": "Kulcs importálva a hitelesítő adatokból",
-    "importFailed": "Nem sikerült importálni a kulcsot",
-    "noKeys": "Még nincsenek közzétett nyilvános kulcsok.",
-    "keysTitle": "Közzétett kulcsok",
-    "published": "Közzétett",
-    "hidden": "Rejtett",
-    "keyRemoved": "Kulcs eltávolítva",
-    "removeKeyFailed": "Nem sikerült eltávolítani a kulcsot",
-    "updateKeyFailed": "Nem sikerült frissíteni a kulcsot",
-    "fromVault": "A hitelesítő adatok tárolójából",
-    "linkedToTermixId": "Közzétéve Termix ID-n keresztül",
-    "selectCredential": "Válasszon hitelesítő adatot...",
-    "import": "Importálás",
-    "caTitle": "Tanúsítványkibocsátó",
-    "caIntro": "Bízzon meg ebben a hitelesítésszolgáltatóban egy szerveren, és az elfogad minden aláírt tanúsítványt. Forgassa el, hogy mindent egyszerre visszavonjon; a tanúsítványok maguktól lejárnak.",
-    "caEnable": "CA engedélyezése",
-    "caEnabled": "CA engedélyezve",
-    "caCreateFailed": "Nem sikerült engedélyezni a CA-t",
-    "caPublicKeyLabel": "CA nyilvános kulcs",
-    "caTrustLabel": "Megbízhatóság egy szerveren (root felhasználóként futtatva)",
-    "caRotate": "Forog",
-    "caRotateConfirm": "Lecseréli a hitelesítésszolgáltatót? Az általa aláírt tanúsítványok elfogadása megszűnik, és újra kell kiállítani őket.",
-    "caRotated": "A hitelesítésszolgáltató lecserélve. Korábbi tanúsítványok visszavonva.",
-    "caRotateFailed": "Nem sikerült elforgatni a CA-t",
-    "caDelete": "CA eltávolítása",
-    "caDeleteConfirm": "Eltávolítja a hitelesítésszolgáltatót?",
-    "caDeleted": "CA eltávolítva",
-    "caDeleteFailed": "Nem sikerült eltávolítani a CA-t",
-    "caValidityLabel": "Tanúsítvány érvényessége (nap)",
-    "issueCert": "Bizonyítvány",
-    "issueCertTooltip": "Állítson ki egy SSH tanúsítványt ehhez a kulcshoz, amelyet a hitelesítésszolgáltató aláírt",
-    "certIssued": "Kiállított és letöltött tanúsítvány",
-    "certIssueFailed": "Nem sikerült kiállítani a tanúsítványt",
-    "docsLink": "Dokumentumok megtekintése",
-    "principalsLabel": "SSH-megbízhatóak",
-    "principalsPlaceholder": "SSH azonosító(k), pl. root"
-  },
-  "nav": {
-    "termixId": "azonosító"
-  },
-  "credentials": {
-    "idBadge": "azonosító"
-  },
-  "permissions": {
-    "use": {
-      "title": "Termix azonosító használata",
-      "description": "Igényelj egy nyilvános azonosítót, tedd közzé az SSH kulcsokat és futtass egy hitelesítésszolgáltatót."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/id_ID.json b/plugins/termix-identity/locales/translated/id_ID.json
deleted file mode 100644
index 8d5afb422..000000000
--- a/plugins/termix-identity/locales/translated/id_ID.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "ID Termix",
-    "loadFailed": "Gagal memuat ID Termix",
-    "claimTitle": "Klaim ID Termix Anda",
-    "claimIntro": "Pilih nama pengguna yang unik. Kunci publik SSH Anda akan dipublikasikan di URL publik yang dapat Anda tambahkan ke file authorized_keys server mana pun.",
-    "handleLabel": "Menangani",
-    "handlePlaceholder": "Alice",
-    "checking": "Memeriksa…",
-    "available": "Tersedia",
-    "taken": "Sudah diambil",
-    "invalidHandle": "Hanya huruf kecil, angka, - dan _",
-    "descriptionLabel": "Deskripsi (opsional)",
-    "descriptionPlaceholder": "Kunci laptop dan telepon kerja",
-    "create": "Buat ID Termix",
-    "created": "ID Termix telah dibuat",
-    "createFailed": "Gagal membuat ID Termix",
-    "deleteConfirm": "Apakah Anda menghapus ID Termix dan semua kunci yang dipublikasikan? Server yang Anda sediakan akan tetap menyimpan kunci tersebut hingga Anda menghapusnya secara manual.",
-    "deleted": "ID Termix dihapus",
-    "deleteFailed": "Gagal menghapus ID Termix",
-    "copyFailed": "Penyalinan gagal",
-    "resolverUrlLabel": "URL resolver publik",
-    "provisionLabel": "Menyediakan server",
-    "publishTitle": "Publikasikan kunci publik",
-    "generate": "Menghasilkan",
-    "generateTooltip": "Menghasilkan pasangan kunci Ed25519. Menerbitkan kunci publik dan mengunduh kunci pribadi ke perangkat Anda.",
-    "saveToVault": "Simpan ke Kredensial",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... user@host",
-    "labelPlaceholder": "Label (opsional)",
-    "add": "Menambahkan",
-    "importFromCredential": "Atau impor dari kredensial yang tersimpan.",
-    "keyPublished": "Kunci telah diterbitkan",
-    "addKeyFailed": "Gagal menambahkan kunci",
-    "generatedSaved": "Pasangan kunci telah dibuat dan disimpan ke brankas kredensial Anda. Kunci pribadi juga telah diunduh.",
-    "generatedOnly": "Pasangan kunci telah dibuat. Kunci pribadi telah diunduh (hanya ditampilkan sekali).",
-    "generateFailed": "Gagal menghasilkan kunci",
-    "imported": "Kunci diimpor dari kredensial",
-    "importFailed": "Gagal mengimpor kunci",
-    "noKeys": "Belum ada kunci publik yang dipublikasikan.",
-    "keysTitle": "Kunci yang diterbitkan",
-    "published": "Diterbitkan",
-    "hidden": "Tersembunyi",
-    "keyRemoved": "Kunci dilepas",
-    "removeKeyFailed": "Gagal melepas kunci",
-    "updateKeyFailed": "Gagal memperbarui kunci",
-    "fromVault": "Dari brankas kredensial",
-    "linkedToTermixId": "Diterbitkan melalui Termix ID",
-    "selectCredential": "Pilih kredensial...",
-    "import": "Impor",
-    "caTitle": "Lembaga sertifikasi",
-    "caIntro": "Percayai CA ini pada server dan CA ini akan menerima sertifikat apa pun yang Anda tandatangani. Lakukan rotasi untuk mencabut semuanya sekaligus; sertifikat juga akan kedaluwarsa dengan sendirinya.",
-    "caEnable": "Aktifkan CA",
-    "caEnabled": "CA diaktifkan",
-    "caCreateFailed": "Gagal mengaktifkan CA",
-    "caPublicKeyLabel": "Kunci publik CA",
-    "caTrustLabel": "Kepercayaan pada server (jalankan sebagai root)",
-    "caRotate": "Memutar",
-    "caRotateConfirm": "Apakah CA (Certificate Authority) perlu diganti? Setiap sertifikat yang telah ditandatanganinya akan berhenti diterima dan harus diterbitkan ulang.",
-    "caRotated": "CA dirotasi. Sertifikat sebelumnya dicabut.",
-    "caRotateFailed": "Gagal memutar CA",
-    "caDelete": "Hapus CA",
-    "caDeleteConfirm": "Hapus otoritas sertifikat?",
-    "caDeleted": "CA dihapus",
-    "caDeleteFailed": "Gagal menghapus CA",
-    "caValidityLabel": "Masa berlaku sertifikat (hari)",
-    "issueCert": "Sertifikat",
-    "issueCertTooltip": "Terbitkan sertifikat SSH untuk kunci ini, yang ditandatangani oleh CA Anda.",
-    "certIssued": "Sertifikat telah diterbitkan dan diunduh.",
-    "certIssueFailed": "Gagal menerbitkan sertifikat",
-    "docsLink": "Lihat dokumen",
-    "principalsLabel": "Kepala Sekolah SSH",
-    "principalsPlaceholder": "Prinsipal SSH, misalnya root"
-  },
-  "nav": {
-    "termixId": "PENGENAL"
-  },
-  "credentials": {
-    "idBadge": "PENGENAL"
-  },
-  "permissions": {
-    "use": {
-      "title": "Gunakan ID Termix",
-      "description": "Klaim nama pengguna publik, publikasikan kunci SSH, dan jalankan otoritas sertifikat."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/it_IT.json b/plugins/termix-identity/locales/translated/it_IT.json
deleted file mode 100644
index 0c283148a..000000000
--- a/plugins/termix-identity/locales/translated/it_IT.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Termix ID",
-    "loadFailed": "Caricamento Termix ID fallito",
-    "claimTitle": "Rivendica il tuo Termix ID",
-    "claimIntro": "Scegli un identificativo univoco. Le tue chiavi pubbliche SSH saranno pubblicate a un URL pubblico che puoi aggiungere al file authorized_keys di qualsiasi server.",
-    "handleLabel": "Identificativo",
-    "handlePlaceholder": "alice",
-    "checking": "Controllo…",
-    "available": "Disponibile",
-    "taken": "Già in uso",
-    "invalidHandle": "Solo lettere minuscole, numeri, - e _",
-    "descriptionLabel": "Descrizione (facoltativa)",
-    "descriptionPlaceholder": "Chiavi per portatile da lavoro e telefono",
-    "create": "Crea Termix ID",
-    "created": "Termix ID creato",
-    "createFailed": "Creazione Termix ID fallita",
-    "deleteConfirm": "Eliminare il tuo Termix ID e tutte le chiavi pubblicate? I server configurati manterranno le chiavi finché non le rimuovi manualmente.",
-    "deleted": "Termix ID eliminato",
-    "deleteFailed": "Eliminazione Termix ID fallita",
-    "copyFailed": "Copia fallita",
-    "resolverUrlLabel": "URL del resolver pubblico",
-    "provisionLabel": "Provisiona un server",
-    "publishTitle": "Pubblica una chiave pubblica",
-    "generate": "Genera",
-    "generateTooltip": "Genera una coppia di chiavi Ed25519. Pubblica la chiave pubblica e scarica la chiave privata sul tuo dispositivo.",
-    "saveToVault": "Salva nelle credenziali",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... user@host",
-    "labelPlaceholder": "Etichetta (facoltativa)",
-    "add": "Aggiungi",
-    "importFromCredential": "Oppure importa da una credenziale memorizzata",
-    "keyPublished": "Chiave pubblicata",
-    "addKeyFailed": "Aggiunta chiave fallita",
-    "generatedSaved": "Coppia di chiavi generata e salvata nell'archivio delle credenziali. Anche la chiave privata è stata scaricata.",
-    "generatedOnly": "Coppia di chiavi generata. Chiave privata scaricata (mostrata una sola volta).",
-    "generateFailed": "Generazione chiave fallita",
-    "imported": "Chiave importata dalla credenziale",
-    "importFailed": "Importazione chiave non riuscita",
-    "noKeys": "Nessuna chiave pubblica ancora pubblicata.",
-    "keysTitle": "Chiavi pubblicate",
-    "published": "Pubblicata",
-    "hidden": "Nascosta",
-    "keyRemoved": "Chiave rimossa",
-    "removeKeyFailed": "Rimozione chiave non riuscita",
-    "updateKeyFailed": "Aggiornamento chiave non riuscito",
-    "fromVault": "Dal vault delle credenziali",
-    "linkedToTermixId": "Pubblicata tramite Termix ID",
-    "selectCredential": "Seleziona una credenziale...",
-    "import": "Importa",
-    "caTitle": "Autorità di certificazione",
-    "caIntro": "Rendi attendibile questa CA su un server e questo accetterà qualsiasi certificato da te firmato. Ruota per revocare tutto in una volta; i certificati scadono anche automaticamente.",
-    "caEnable": "Abilita CA",
-    "caEnabled": "CA abilitata",
-    "caCreateFailed": "Abilitazione CA non riuscita",
-    "caPublicKeyLabel": "Chiave pubblica CA",
-    "caTrustLabel": "Rendi attendibile sul server (esegui come root)",
-    "caRotate": "Ruota",
-    "caRotateConfirm": "Ruotare la CA? Tutti i certificati da essa firmati smetteranno di essere accettati e dovranno essere riemessi.",
-    "caRotated": "CA ruotata. Certificati precedenti revocati.",
-    "caRotateFailed": "Rotazione CA non riuscita",
-    "caDelete": "Rimuovi CA",
-    "caDeleteConfirm": "Rimuovere l'autorità di certificazione?",
-    "caDeleted": "CA rimossa",
-    "caDeleteFailed": "Rimozione CA non riuscita",
-    "caValidityLabel": "Validità certificato (giorni)",
-    "issueCert": "Certificato",
-    "issueCertTooltip": "Emetti un certificato SSH per questa chiave, firmato dalla tua CA",
-    "certIssued": "Certificato emesso e scaricato",
-    "certIssueFailed": "Emissione certificato non riuscita",
-    "docsLink": "Vedi documenti",
-    "principalsLabel": "Principi SSH",
-    "principalsPlaceholder": "Principale(i) SSH, ad esempio root"
-  },
-  "nav": {
-    "termixId": "ID"
-  },
-  "credentials": {
-    "idBadge": "ID"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilizzare l'ID Termix",
-      "description": "Richiedi un handle pubblico, pubblica le chiavi SSH ed esegui un'autorità di certificazione."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/ja_JP.json b/plugins/termix-identity/locales/translated/ja_JP.json
deleted file mode 100644
index 0c87f5102..000000000
--- a/plugins/termix-identity/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Termix ID",
-    "loadFailed": "Termix IDのロードに失敗しました",
-    "claimTitle": "Termix IDを取得",
-    "claimIntro": "一意のハンドルを選択します。SSH公開鍵が公開URLで公開され、任意のサーバーのauthorized_keysファイルに追加できます。",
-    "handleLabel": "ハンドル",
-    "handlePlaceholder": "alice",
-    "checking": "確認中…",
-    "available": "利用可能",
-    "taken": "既に使用されています",
-    "invalidHandle": "英小文字、数字、ハイフン(-)、アンダースコア(_)のみ使用できます",
-    "descriptionLabel": "説明（任意）",
-    "descriptionPlaceholder": "仕事用ラップトップとスマートフォンのキー",
-    "create": "Termix IDを作成",
-    "created": "Termix IDが作成されました",
-    "createFailed": "Termix IDの作成に失敗しました",
-    "deleteConfirm": "Termix IDと公開されたすべてのキーを削除しますか？プロビジョニングしたサーバーでは、手動で削除するまでキーが保持されます。",
-    "deleted": "Termix IDが削除されました",
-    "deleteFailed": "Termix IDの削除に失敗しました",
-    "copyFailed": "コピーに失敗しました",
-    "resolverUrlLabel": "公開リゾルバーURL",
-    "provisionLabel": "サーバーをプロビジョニング",
-    "publishTitle": "公開鍵を公開",
-    "generate": "生成",
-    "generateTooltip": "Ed25519キーペアを生成します。公開鍵を公開し、秘密鍵をデバイスにダウンロードします。",
-    "saveToVault": "認証情報に保存",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... user@host",
-    "labelPlaceholder": "ラベル（任意）",
-    "add": "追加",
-    "importFromCredential": "または保存済みの認証情報からインポート",
-    "keyPublished": "キーが公開されました",
-    "addKeyFailed": "キーの追加に失敗しました",
-    "generatedSaved": "キーペアが生成され、認証情報ボールトに保存されました。秘密鍵もダウンロードされました。",
-    "generatedOnly": "鍵ペアが生成されました。秘密鍵がダウンロードされました（一度だけ表示されます）。",
-    "generateFailed": "キーの生成に失敗しました",
-    "imported": "キーが認証情報からインポートされました",
-    "importFailed": "鍵のインポートに失敗しました",
-    "noKeys": "まだ公開鍵は公開されていません。",
-    "keysTitle": "公開鍵",
-    "published": "公開済み",
-    "hidden": "非表示",
-    "keyRemoved": "鍵が削除されました",
-    "removeKeyFailed": "鍵の削除に失敗しました",
-    "updateKeyFailed": "鍵の更新に失敗しました",
-    "fromVault": "認証情報ボールトから",
-    "linkedToTermixId": "Termix ID 経由で公開",
-    "selectCredential": "認証情報を選択...",
-    "import": "インポート",
-    "caTitle": "認証局",
-    "caIntro": "このCAをサーバーで信頼すると、署名した証明書が受け入れられます。ローテーションで一度にすべてを失効させることができ、証明書自体も有効期限が切れます。",
-    "caEnable": "CA を有効化",
-    "caEnabled": "CA 有効",
-    "caCreateFailed": "CA の有効化に失敗しました",
-    "caPublicKeyLabel": "CA 公開鍵",
-    "caTrustLabel": "サーバーで信頼する（root で実行）",
-    "caRotate": "ローテーション",
-    "caRotateConfirm": "CA をローテーションしますか？署名されたすべての証明書の受け入れが停止され、再発行が必要になります。",
-    "caRotated": "認証局が交代しました。以前の証明書は失効しました。",
-    "caRotateFailed": "CA のローテーションに失敗しました",
-    "caDelete": "CA を削除",
-    "caDeleteConfirm": "認証局を削除しますか？",
-    "caDeleted": "CA が削除されました",
-    "caDeleteFailed": "CA の削除に失敗しました",
-    "caValidityLabel": "証明書の有効期間（日）",
-    "issueCert": "証明書",
-    "issueCertTooltip": "この鍵に対して、CA が署名した SSH 証明書を発行します",
-    "certIssued": "証明書が発行され、ダウンロードされました",
-    "certIssueFailed": "証明書の発行に失敗しました",
-    "docsLink": "ドキュメントを見る",
-    "principalsLabel": "SSHの原則",
-    "principalsPlaceholder": "SSHプリンシパル（例：root）"
-  },
-  "nav": {
-    "termixId": "ID"
-  },
-  "credentials": {
-    "idBadge": "ID"
-  },
-  "permissions": {
-    "use": {
-      "title": "Termix IDを使用する",
-      "description": "公開ハンドルを取得し、SSHキーを公開して、認証局を実行します。"
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/ko_KR.json b/plugins/termix-identity/locales/translated/ko_KR.json
deleted file mode 100644
index 1c392d538..000000000
--- a/plugins/termix-identity/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Termix ID",
-    "loadFailed": "Termix ID 로드 실패",
-    "claimTitle": "Termix ID 등록",
-    "claimIntro": "고유한 핸들을 선택하세요. SSH 공개 키는 공개 URL에 게시되어 어느 서버의 authorized_keys 파일에든 추가할 수 있습니다.",
-    "handleLabel": "핸들",
-    "handlePlaceholder": "alice",
-    "checking": "확인 중…",
-    "available": "사용 가능",
-    "taken": "이미 사용 중",
-    "invalidHandle": "소문자, 숫자, - 및 _만 사용",
-    "descriptionLabel": "설명 (선택 사항)",
-    "descriptionPlaceholder": "업무용 노트북 및 휴대폰 키",
-    "create": "Termix ID 만들기",
-    "created": "Termix ID 생성됨",
-    "createFailed": "Termix ID 생성 실패",
-    "deleteConfirm": "Termix ID와 게시된 모든 키를 삭제하시겠습니까? 프로비저닝된 서버는 수동으로 제거할 때까지 키를 유지합니다.",
-    "deleted": "Termix ID 삭제됨",
-    "deleteFailed": "Termix ID 삭제 실패",
-    "copyFailed": "복사 실패",
-    "resolverUrlLabel": "공개 리졸버 URL",
-    "provisionLabel": "서버 프로비저닝",
-    "publishTitle": "공개 키 게시",
-    "generate": "생성",
-    "generateTooltip": "Ed25519 키 쌍을 생성합니다. 공개 키를 게시하고 개인 키를 기기에 다운로드합니다.",
-    "saveToVault": "자격 증명에 저장",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... user@host",
-    "labelPlaceholder": "레이블 (선택 사항)",
-    "add": "추가",
-    "importFromCredential": "또는 저장된 자격 증명에서 가져오기",
-    "keyPublished": "키 게시됨",
-    "addKeyFailed": "키 추가 실패",
-    "generatedSaved": "키 쌍이 생성되어 자격 증명 보관함에 저장되었습니다. 개인 키도 다운로드되었습니다.",
-    "generatedOnly": "키 쌍이 생성되었습니다. 개인 키가 다운로드되었습니다(한 번만 표시됨).",
-    "generateFailed": "키 생성 실패",
-    "imported": "자격 증명에서 키를 가져왔습니다",
-    "importFailed": "키 가져오기 실패",
-    "noKeys": "아직 게시된 공개 키가 없습니다.",
-    "keysTitle": "게시된 키",
-    "published": "게시됨",
-    "hidden": "숨김",
-    "keyRemoved": "키 제거됨",
-    "removeKeyFailed": "키 제거 실패",
-    "updateKeyFailed": "키 업데이트 실패",
-    "fromVault": "자격 증명 보관소에서",
-    "linkedToTermixId": "Termix ID를 통해 게시됨",
-    "selectCredential": "자격 증명 선택...",
-    "import": "가져오기",
-    "caTitle": "인증 기관",
-    "caIntro": "서버에서 이 CA를 신뢰하면 서명한 모든 인증서가 수락됩니다. 로테이션하면 모든 인증서가 즉시 폐기되며, 인증서는 자체적으로도 만료됩니다.",
-    "caEnable": "CA 활성화",
-    "caEnabled": "CA 활성화됨",
-    "caCreateFailed": "CA 활성화 실패",
-    "caPublicKeyLabel": "CA 공개 키",
-    "caTrustLabel": "서버에서 신뢰 (루트로 실행)",
-    "caRotate": "로테이션",
-    "caRotateConfirm": "CA를 로테이션하시겠습니까? 서명한 모든 인증서가 수락되지 않으며 다시 발급해야 합니다.",
-    "caRotated": "CA가 갱신되었습니다. 이전 인증서는 취소되었습니다.",
-    "caRotateFailed": "CA 로테이션 실패",
-    "caDelete": "CA 제거",
-    "caDeleteConfirm": "인증 기관을 제거하시겠습니까?",
-    "caDeleted": "CA 제거됨",
-    "caDeleteFailed": "CA 제거 실패",
-    "caValidityLabel": "인증서 유효 기간(일)",
-    "issueCert": "인증서",
-    "issueCertTooltip": "이 키에 대해 CA가 서명한 SSH 인증서를 발급합니다.",
-    "certIssued": "인증서 발급 및 다운로드 완료",
-    "certIssueFailed": "인증서 발급 실패",
-    "docsLink": "문서 보기",
-    "principalsLabel": "SSH 원칙",
-    "principalsPlaceholder": "SSH 주체(들), 예: root"
-  },
-  "nav": {
-    "termixId": "ID"
-  },
-  "credentials": {
-    "idBadge": "ID"
-  },
-  "permissions": {
-    "use": {
-      "title": "Termix ID를 사용하세요",
-      "description": "공개 핸들을 확보하고, SSH 키를 게시하고, 인증 기관을 운영하세요."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/nl_NL.json b/plugins/termix-identity/locales/translated/nl_NL.json
deleted file mode 100644
index 01288d105..000000000
--- a/plugins/termix-identity/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Termix ID",
-    "loadFailed": "Het laden van de Termix-ID is mislukt.",
-    "claimTitle": "Vraag je Termix ID aan",
-    "claimIntro": "Kies een unieke gebruikersnaam. Uw openbare SSH-sleutels worden gepubliceerd op een openbare URL die u kunt toevoegen aan het authorized_keys-bestand van elke server.",
-    "handleLabel": "Hendel",
-    "handlePlaceholder": "Alice",
-    "checking": "Controleren…",
-    "available": "Beschikbaar",
-    "taken": "Reeds meegenomen",
-    "invalidHandle": "Alleen kleine letters, cijfers, - en _",
-    "descriptionLabel": "Beschrijving (optioneel)",
-    "descriptionPlaceholder": "Werklaptop en telefoonsleutels",
-    "create": "Maak een Termix ID aan",
-    "created": "Termix ID aangemaakt",
-    "createFailed": "Het aanmaken van een Termix ID is mislukt.",
-    "deleteConfirm": "Wil je je Termix ID en alle gepubliceerde sleutels verwijderen? Servers die je hebt geconfigureerd, bewaren de sleutels totdat je ze handmatig verwijdert.",
-    "deleted": "Termix ID verwijderd",
-    "deleteFailed": "Het verwijderen van de Termix-ID is mislukt.",
-    "copyFailed": "Kopiëren mislukt",
-    "resolverUrlLabel": "Openbare resolver-URL",
-    "provisionLabel": "Een server inrichten",
-    "publishTitle": "Publiceer een openbare sleutel",
-    "generate": "Genereren",
-    "generateTooltip": "Genereer een Ed25519-sleutelpaar. Publiceert de publieke sleutel en downloadt de privésleutel naar uw apparaat.",
-    "saveToVault": "Opslaan in inloggegevens",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... user@host",
-    "labelPlaceholder": "Label (optioneel)",
-    "add": "Toevoegen",
-    "importFromCredential": "Of importeren vanuit opgeslagen inloggegevens",
-    "keyPublished": "Sleutel gepubliceerd",
-    "addKeyFailed": "Sleutel toevoegen mislukt",
-    "generatedSaved": "Sleutelpaar gegenereerd en opgeslagen in uw inloggegevenskluis. Privésleutel ook gedownload.",
-    "generatedOnly": "Sleutelpaar gegenereerd. Privésleutel gedownload (wordt slechts één keer weergegeven).",
-    "generateFailed": "Sleutel genereren mislukt",
-    "imported": "Sleutel geïmporteerd uit inloggegevens",
-    "importFailed": "Het importeren van de sleutel is mislukt.",
-    "noKeys": "Er zijn nog geen openbare sleutels gepubliceerd.",
-    "keysTitle": "Gepubliceerde sleutels",
-    "published": "Gepubliceerd",
-    "hidden": "Verborgen",
-    "keyRemoved": "Sleutel verwijderd",
-    "removeKeyFailed": "Het verwijderen van de sleutel is mislukt.",
-    "updateKeyFailed": "Sleutel bijwerken mislukt",
-    "fromVault": "Vanuit de inloggegevenskluis",
-    "linkedToTermixId": "Gepubliceerd via Termix ID",
-    "selectCredential": "Selecteer een certificaat...",
-    "import": "Importeren",
-    "caTitle": "Certificeringsinstantie",
-    "caIntro": "Vertrouw deze certificeringsinstantie op een server en deze accepteert elk certificaat dat u ondertekent. Roteer de certificaten om ze allemaal tegelijk in te trekken; certificaten verlopen ook automatisch.",
-    "caEnable": "CA inschakelen",
-    "caEnabled": "CA ingeschakeld",
-    "caCreateFailed": "CA inschakelen mislukt",
-    "caPublicKeyLabel": "CA openbare sleutel",
-    "caTrustLabel": "Vertrouwen op een server (uitvoeren als root)",
-    "caRotate": "Draaien",
-    "caRotateConfirm": "Als u de certificeringsinstantie (CA) wijzigt, worden alle certificaten die door die instantie zijn ondertekend niet langer geaccepteerd en moeten ze opnieuw worden uitgegeven.",
-    "caRotated": "CA geroteerd. Eerdere certificaten ingetrokken.",
-    "caRotateFailed": "CA-rotatie mislukt",
-    "caDelete": "Verwijder CA",
-    "caDeleteConfirm": "De certificeringsinstantie verwijderen?",
-    "caDeleted": "CA verwijderd",
-    "caDeleteFailed": "Het verwijderen van CA is mislukt.",
-    "caValidityLabel": "Geldigheidsduur certificaat (dagen)",
-    "issueCert": "Certificaat",
-    "issueCertTooltip": "Geef een SSH-certificaat uit voor deze sleutel, ondertekend door uw certificeringsinstantie (CA).",
-    "certIssued": "Certificaat uitgegeven en gedownload",
-    "certIssueFailed": "Certificaat kon niet worden uitgegeven",
-    "docsLink": "Documenten bekijken",
-    "principalsLabel": "SSH-principes",
-    "principalsPlaceholder": "SSH-principal(len), bijvoorbeeld root"
-  },
-  "nav": {
-    "termixId": "ID"
-  },
-  "credentials": {
-    "idBadge": "ID"
-  },
-  "permissions": {
-    "use": {
-      "title": "Gebruik Termix ID",
-      "description": "Claim een openbare handle, publiceer SSH-sleutels en beheer een certificeringsinstantie."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/no_NO.json b/plugins/termix-identity/locales/translated/no_NO.json
deleted file mode 100644
index c404c6757..000000000
--- a/plugins/termix-identity/locales/translated/no_NO.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Termix-ID",
-    "loadFailed": "Kunne ikke laste inn Termix-ID",
-    "claimTitle": "Krev din Termix-ID",
-    "claimIntro": "Velg en unik brukernavn. Dine offentlige SSH-nøkler publiseres på en offentlig URL som du kan legge til i en hvilken som helst servers authorized_keys-fil.",
-    "handleLabel": "Håndtak",
-    "handlePlaceholder": "Alice",
-    "checking": "Sjekker…",
-    "available": "Tilgjengelig",
-    "taken": "Allerede tatt",
-    "invalidHandle": "Bare små bokstaver, tall, - og _",
-    "descriptionLabel": "Beskrivelse (valgfritt)",
-    "descriptionPlaceholder": "Jobb-laptop og telefonnøkler",
-    "create": "Opprett Termix-ID",
-    "created": "Termix-ID opprettet",
-    "createFailed": "Kunne ikke opprette Termix-ID",
-    "deleteConfirm": "Vil du slette Termix-ID-en din og alle publiserte nøkler? Servere du har klargjort vil beholde nøklene til du fjerner dem manuelt.",
-    "deleted": "Termix-ID slettet",
-    "deleteFailed": "Kunne ikke slette Termix-ID",
-    "copyFailed": "Kopieringen mislyktes",
-    "resolverUrlLabel": "Offentlig resolver-URL",
-    "provisionLabel": "Klargjør en server",
-    "publishTitle": "Publiser en offentlig nøkkel",
-    "generate": "Generere",
-    "generateTooltip": "Generer et Ed25519-nøkkelpar. Publiserer den offentlige nøkkelen og laster ned den private nøkkelen til enheten din.",
-    "saveToVault": "Lagre til legitimasjon",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... bruker@vert",
-    "labelPlaceholder": "Etikett (valgfritt)",
-    "add": "Legg til",
-    "importFromCredential": "Eller importer fra en lagret legitimasjon",
-    "keyPublished": "Nøkkel publisert",
-    "addKeyFailed": "Kunne ikke legge til nøkkel",
-    "generatedSaved": "Nøkkelpar generert og lagret i påloggingshvelvet ditt. Privatnøkkelen er også lastet ned.",
-    "generatedOnly": "Nøkkelpar generert. Privat nøkkel lastet ned (vises kun én gang).",
-    "generateFailed": "Kunne ikke generere nøkkel",
-    "imported": "Nøkkel importert fra legitimasjon",
-    "importFailed": "Kunne ikke importere nøkkelen",
-    "noKeys": "Ingen offentlige nøkler er publisert ennå.",
-    "keysTitle": "Publiserte nøkler",
-    "published": "Publisert",
-    "hidden": "Skjult",
-    "keyRemoved": "Nøkkelen er fjernet",
-    "removeKeyFailed": "Kunne ikke fjerne nøkkelen",
-    "updateKeyFailed": "Kunne ikke oppdatere nøkkelen",
-    "fromVault": "Fra legitimasjonshvelvet",
-    "linkedToTermixId": "Publisert via Termix-ID",
-    "selectCredential": "Velg en legitimasjon...",
-    "import": "Importer",
-    "caTitle": "Sertifikatmyndighet",
-    "caIntro": "Stol på denne sertifikatutstederen på en server, og den godtar alle sertifikater du signerer. Roter for å tilbakekalle alt samtidig; sertifikater utløper også av seg selv.",
-    "caEnable": "Aktiver CA",
-    "caEnabled": "CA-aktivert",
-    "caCreateFailed": "Kunne ikke aktivere CA",
-    "caPublicKeyLabel": "CA offentlig nøkkel",
-    "caTrustLabel": "Stol på en server (kjør som root)",
-    "caRotate": "Roter",
-    "caRotateConfirm": "Roter CA-en? Alle sertifikater den har signert vil slutte å bli akseptert og må utstedes på nytt.",
-    "caRotated": "CA rotert. Tidligere sertifikater inndratt.",
-    "caRotateFailed": "Kunne ikke rotere CA",
-    "caDelete": "Fjern CA",
-    "caDeleteConfirm": "Fjerne sertifikatmyndigheten?",
-    "caDeleted": "CA fjernet",
-    "caDeleteFailed": "Kunne ikke fjerne CA",
-    "caValidityLabel": "Sertifikatgyldighet (dager)",
-    "issueCert": "Sertifikat",
-    "issueCertTooltip": "Utsted et SSH-sertifikat for denne nøkkelen, signert av din CA",
-    "certIssued": "Sertifikat utstedt og nedlastet",
-    "certIssueFailed": "Kunne ikke utstede sertifikatet",
-    "docsLink": "Vis dokumenter",
-    "principalsLabel": "SSH-prinsipper",
-    "principalsPlaceholder": "SSH-prinsipp(er), f.eks. root"
-  },
-  "nav": {
-    "termixId": "ID"
-  },
-  "credentials": {
-    "idBadge": "ID"
-  },
-  "permissions": {
-    "use": {
-      "title": "Bruk Termix-ID",
-      "description": "Gjør krav på en offentlig referanse, publiser SSH-nøkler og kjør en sertifikatmyndighet."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/pl_PL.json b/plugins/termix-identity/locales/translated/pl_PL.json
deleted file mode 100644
index f70eb9a07..000000000
--- a/plugins/termix-identity/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Identyfikator Termix",
-    "loadFailed": "Nie udało się załadować identyfikatora Termix",
-    "claimTitle": "Zarezerwuj swój identyfikator Termix",
-    "claimIntro": "Wybierz unikalny identyfikator. Publiczne klucze SSH zostaną opublikowane pod publicznym adresem URL, który można dodać do pliku authorized_keys dowolnego serwera.",
-    "handleLabel": "Identyfikator",
-    "handlePlaceholder": "alicja",
-    "checking": "Sprawdzanie…",
-    "available": "Dostępny",
-    "taken": "Już zajęty",
-    "invalidHandle": "Tylko małe litery, cyfry oraz - i _",
-    "descriptionLabel": "Opis (opcjonalnie)",
-    "descriptionPlaceholder": "Klucze do laptopa i telefonu służbowego",
-    "create": "Utwórz identyfikator Termix",
-    "created": "Utworzono identyfikator Termix",
-    "createFailed": "Nie udało się utworzyć identyfikatora Termix",
-    "deleteConfirm": "Usunąć swój identyfikator Termix i wszystkie opublikowane klucze? Skonfigurowane wcześniej serwery zachowają klucze, dopóki nie usuniesz ich ręcznie.",
-    "deleted": "Usunięto identyfikator Termix",
-    "deleteFailed": "Nie udało się usunąć identyfikatora Termix",
-    "copyFailed": "Kopiowanie nie powiodło się",
-    "resolverUrlLabel": "Publiczny adres URL resolvera",
-    "provisionLabel": "Skonfiguruj serwer",
-    "publishTitle": "Opublikuj klucz publiczny",
-    "generate": "Generuj",
-    "generateTooltip": "Wygeneruj parę kluczy Ed25519. Opublikuj klucz publiczny i pobierz klucz prywatny na swoje urządzenie.",
-    "saveToVault": "Zapisz w poświadczeniach",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... user@host",
-    "labelPlaceholder": "Etykieta (opcjonalnie)",
-    "add": "Dodaj",
-    "importFromCredential": "Albo zaimportuj z zapisanego poświadczenia",
-    "keyPublished": "Klucz opublikowany",
-    "addKeyFailed": "Nie udało się dodać klucza",
-    "generatedSaved": "Wygenerowano parę kluczy i zapisano w sejfie poświadczeń. Klucz prywatny został również pobrany.",
-    "generatedOnly": "Wygenerowano parę kluczy. Pobrano klucz prywatny (wyświetlany tylko raz).",
-    "generateFailed": "Nie udało się wygenerować klucza",
-    "imported": "Zaimportowano klucz z poświadczenia",
-    "importFailed": "Nie udało się zaimportować klucza",
-    "noKeys": "Klucze publiczne nie zostały jeszcze opublikowane.",
-    "keysTitle": "Opublikowane klucze",
-    "published": "Opublikowany",
-    "hidden": "Ukryty",
-    "keyRemoved": "Usunięto klucz",
-    "removeKeyFailed": "Nie udało się usunąć klucza",
-    "updateKeyFailed": "Nie udało się zaktualizować klucza",
-    "fromVault": "Z sejfu poświadczeń",
-    "linkedToTermixId": "Opublikowano przez identyfikator Termix",
-    "selectCredential": "Wybierz poświadczenie...",
-    "import": "Import",
-    "caTitle": "Urząd certyfikacji (CA)",
-    "caIntro": "Dodaj to CA do zaufanych na serwerze, a zaakceptuje on każdy podpisany przez Ciebie certyfikat. Rotacja unieważnia wszystko naraz; certyfikaty wygasają też samodzielnie.",
-    "caEnable": "Włącz CA",
-    "caEnabled": "CA włączone",
-    "caCreateFailed": "Nie udało się włączyć CA",
-    "caPublicKeyLabel": "Klucz publiczny CA",
-    "caTrustLabel": "Zaufanie na serwerze (uruchom jako root)",
-    "caRotate": "Rotuj",
-    "caRotateConfirm": "Wykonać rotację CA? Każdy podpisany przez niego certyfikat przestanie być akceptowany i trzeba go wystawić ponownie.",
-    "caRotated": "Urząd certyfikacji został zmieniony. Poprzednie certyfikaty zostały unieważnione.",
-    "caRotateFailed": "Nie udało się wykonać rotacji CA",
-    "caDelete": "Usuń CA",
-    "caDeleteConfirm": "Usunąć CA?",
-    "caDeleted": "CA usunięto",
-    "caDeleteFailed": "Nie udało się usunąć CA",
-    "caValidityLabel": "Ważność certyfikatu (dni)",
-    "issueCert": "Certyfikat",
-    "issueCertTooltip": "Wystaw certyfikat SSH dla tego klucza, podpisany przez Twoje CA",
-    "certIssued": "Wystawiono i pobrano certyfikat",
-    "certIssueFailed": "Nie udało się wystawić certyfikatu",
-    "docsLink": "Zobacz dokumentację",
-    "principalsLabel": "Zasady SSH",
-    "principalsPlaceholder": "Podmiot(y) zarządzający SSH, np. root"
-  },
-  "nav": {
-    "termixId": "ID"
-  },
-  "credentials": {
-    "idBadge": "ID"
-  },
-  "permissions": {
-    "use": {
-      "title": "Użyj identyfikatora Termix",
-      "description": "Złóż wniosek o publiczny uchwyt, opublikuj klucze SSH i uruchom urząd certyfikacji."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/pt_BR.json b/plugins/termix-identity/locales/translated/pt_BR.json
deleted file mode 100644
index edae62684..000000000
--- a/plugins/termix-identity/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Termix ID",
-    "loadFailed": "Falha ao carregar o ID do Termix",
-    "claimTitle": "Reivindique seu ID Termix",
-    "claimIntro": "Escolha um nome de usuário exclusivo. Suas chaves públicas SSH serão publicadas em um URL público que você pode adicionar ao arquivo authorized_keys de qualquer servidor.",
-    "handleLabel": "Lidar",
-    "handlePlaceholder": "Alice",
-    "checking": "Verificando…",
-    "available": "Disponível",
-    "taken": "Já tomadas",
-    "invalidHandle": "Somente letras minúsculas, números, hífens e sublinhados.",
-    "descriptionLabel": "Descrição (opcional)",
-    "descriptionPlaceholder": "Chaves do laptop e do celular de trabalho",
-    "create": "Criar ID Termix",
-    "created": "Termix ID criado",
-    "createFailed": "Falha ao criar o ID do Termix",
-    "deleteConfirm": "Excluir seu ID do Termix e todas as chaves publicadas? Os servidores que você provisionou manterão as chaves até que você as remova manualmente.",
-    "deleted": "ID do Termix excluído",
-    "deleteFailed": "Falha ao excluir o ID do Termix",
-    "copyFailed": "Falha na cópia",
-    "resolverUrlLabel": "URL do resolvedor público",
-    "provisionLabel": "Provisione um servidor",
-    "publishTitle": "Publicar uma chave pública",
-    "generate": "Gerar",
-    "generateTooltip": "Gera um par de chaves Ed25519. Publica a chave pública e baixa a chave privada para o seu dispositivo.",
-    "saveToVault": "Salvar nas credenciais",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... usuário@host",
-    "labelPlaceholder": "Rótulo (opcional)",
-    "add": "Adicionar",
-    "importFromCredential": "Ou importe a partir de uma credencial armazenada.",
-    "keyPublished": "Chave publicada",
-    "addKeyFailed": "Falha ao adicionar a chave",
-    "generatedSaved": "O par de chaves foi gerado e salvo em seu cofre de credenciais. A chave privada também foi baixada.",
-    "generatedOnly": "Par de chaves gerado. Chave privada baixada (exibida apenas uma vez).",
-    "generateFailed": "Falha ao gerar a chave",
-    "imported": "Chave importada da credencial",
-    "importFailed": "Falha ao importar a chave",
-    "noKeys": "Nenhuma chave pública foi publicada ainda.",
-    "keysTitle": "Chaves publicadas",
-    "published": "Publicado",
-    "hidden": "Escondido",
-    "keyRemoved": "Chave removida",
-    "removeKeyFailed": "Falha ao remover a chave",
-    "updateKeyFailed": "Falha ao atualizar a chave",
-    "fromVault": "Do cofre de credenciais",
-    "linkedToTermixId": "Publicado via Termix ID",
-    "selectCredential": "Selecione uma credencial...",
-    "import": "Importar",
-    "caTitle": "Autoridade certificadora",
-    "caIntro": "Confie nesta Autoridade Certificadora (CA) em um servidor e ela aceitará qualquer certificado que você assinar. Rotacione os certificados para revogar todos de uma só vez; os certificados também expiram automaticamente.",
-    "caEnable": "Habilitar CA",
-    "caEnabled": "CA habilitado",
-    "caCreateFailed": "Falha ao ativar a CA",
-    "caPublicKeyLabel": "chave pública CA",
-    "caTrustLabel": "Confie em um servidor (execute como root)",
-    "caRotate": "Girar",
-    "caRotateConfirm": "Rotacionar a Autoridade Certificadora? Todos os certificados assinados por ela deixarão de ser aceitos e precisarão ser reemitidos.",
-    "caRotated": "Autoridade Certificadora rotacionada. Certificados anteriores revogados.",
-    "caRotateFailed": "Falha ao rotacionar o CA",
-    "caDelete": "Remover CA",
-    "caDeleteConfirm": "Remover a autoridade certificadora?",
-    "caDeleted": "CA removido",
-    "caDeleteFailed": "Falha ao remover a CA",
-    "caValidityLabel": "Validade do certificado (dias)",
-    "issueCert": "Certificado",
-    "issueCertTooltip": "Emita um certificado SSH para esta chave, assinado pela sua Autoridade Certificadora (CA).",
-    "certIssued": "Certificado emitido e baixado",
-    "certIssueFailed": "Falha na emissão do certificado",
-    "docsLink": "Documentação",
-    "principalsLabel": "Princípios SSH",
-    "principalsPlaceholder": "Principal(is) SSH, por exemplo, root"
-  },
-  "nav": {
-    "termixId": "EU IA"
-  },
-  "credentials": {
-    "idBadge": "EU IA"
-  },
-  "permissions": {
-    "use": {
-      "title": "Use o ID Termix",
-      "description": "Reivindique um nome de usuário público, publique chaves SSH e execute uma autoridade de certificação."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/pt_PT.json b/plugins/termix-identity/locales/translated/pt_PT.json
deleted file mode 100644
index b2dedbab9..000000000
--- a/plugins/termix-identity/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Termix ID",
-    "loadFailed": "Falha ao carregar o Termix ID",
-    "claimTitle": "Reivindicar o seu Termix ID",
-    "claimIntro": "Escolha um identificador único. As suas chaves públicas SSH serão publicadas num URL público que pode adicionar ao ficheiro authorized_keys de qualquer servidor.",
-    "handleLabel": "Identificador",
-    "handlePlaceholder": "alice",
-    "checking": "A verificar…",
-    "available": "Disponível",
-    "taken": "Já utilizado",
-    "invalidHandle": "Apenas letras minúsculas, números, - e _",
-    "descriptionLabel": "Descrição (opcional)",
-    "descriptionPlaceholder": "Chaves do portátil de trabalho e do telemóvel",
-    "create": "Criar Termix ID",
-    "created": "Termix ID criado",
-    "createFailed": "Falha ao criar o Termix ID",
-    "deleteConfirm": "Eliminar o seu Termix ID e todas as chaves publicadas? Os servidores que provisionou manterão as chaves até as remover manualmente.",
-    "deleted": "Termix ID eliminado",
-    "deleteFailed": "Falha ao eliminar o Termix ID",
-    "copyFailed": "Falha ao copiar",
-    "resolverUrlLabel": "URL público de resolução",
-    "provisionLabel": "Provisionar um servidor",
-    "publishTitle": "Publicar uma chave pública",
-    "generate": "Gerar",
-    "generateTooltip": "Gera um par de chaves Ed25519. Publica a chave pública e descarrega a chave privada para o seu dispositivo.",
-    "saveToVault": "Guardar nas credenciais",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... user@host",
-    "labelPlaceholder": "Etiqueta (opcional)",
-    "add": "Adicionar",
-    "importFromCredential": "Ou importar de uma credencial guardada",
-    "keyPublished": "Chave publicada",
-    "addKeyFailed": "Falha ao adicionar chave",
-    "generatedSaved": "Par de chaves gerado e guardado no cofre de credenciais. A chave privada também foi descarregada.",
-    "generatedOnly": "Par de chaves gerado. Chave privada descarregada (exibida apenas uma vez).",
-    "generateFailed": "Falha ao gerar chave",
-    "imported": "Chave importada da credencial",
-    "importFailed": "Falha ao importar chave",
-    "noKeys": "Nenhuma chave pública publicada ainda.",
-    "keysTitle": "Chaves publicadas",
-    "published": "Publicada",
-    "hidden": "Oculta",
-    "keyRemoved": "Chave removida",
-    "removeKeyFailed": "Falha ao remover chave",
-    "updateKeyFailed": "Falha ao atualizar chave",
-    "fromVault": "Do cofre de credenciais",
-    "linkedToTermixId": "Publicada via Termix ID",
-    "selectCredential": "Selecionar uma credencial...",
-    "import": "Importar",
-    "caTitle": "Autoridade de certificação",
-    "caIntro": "Confie nesta CA num servidor e ele aceitará qualquer certificado que assinar. Rode para revogar tudo de uma só vez; os certificados também expiram automaticamente.",
-    "caEnable": "Ativar CA",
-    "caEnabled": "CA ativada",
-    "caCreateFailed": "Falha ao ativar CA",
-    "caPublicKeyLabel": "Chave pública da CA",
-    "caTrustLabel": "Confiar num servidor (executar como root)",
-    "caRotate": "Rodar",
-    "caRotateConfirm": "Rodar a CA? Todos os certificados que assinou deixarão de ser aceites e terão de ser reemitidos.",
-    "caRotated": "Autoridade Certificadora rotada. Certificados anteriores revogados.",
-    "caRotateFailed": "Falha ao rodar CA",
-    "caDelete": "Remover CA",
-    "caDeleteConfirm": "Remover a CA?",
-    "caDeleted": "CA removida",
-    "caDeleteFailed": "Falha ao remover CA",
-    "caValidityLabel": "Validade do certificado (dias)",
-    "issueCert": "Certificado",
-    "issueCertTooltip": "Emitir um certificado SSH para esta chave, assinado pela sua CA",
-    "certIssued": "Certificado emitido e transferido",
-    "certIssueFailed": "Falha ao emitir certificado",
-    "docsLink": "Ver docs",
-    "principalsLabel": "Princípios SSH",
-    "principalsPlaceholder": "Principal(is) SSH, por exemplo, root"
-  },
-  "nav": {
-    "termixId": "ID"
-  },
-  "credentials": {
-    "idBadge": "ID"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilize o ID Termix",
-      "description": "Reivindique um nome de utilizador público, publique chaves SSH e execute uma autoridade de certificação."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/ro_RO.json b/plugins/termix-identity/locales/translated/ro_RO.json
deleted file mode 100644
index 5c4aafae6..000000000
--- a/plugins/termix-identity/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "ID-ul Termix",
-    "loadFailed": "Nu s-a putut încărca ID-ul Termix",
-    "claimTitle": "Revendică-ți ID-ul Termix",
-    "claimIntro": "Alegeți un handle unic. Cheile dvs. publice SSH vor fi publicate la o adresă URL publică pe care o puteți adăuga în fișierul authorized_keys al oricărui server.",
-    "handleLabel": "Mâner",
-    "handlePlaceholder": "Alice",
-    "checking": "Verificare…",
-    "available": "Disponibil",
-    "taken": "Deja luate",
-    "invalidHandle": "Numai litere mici, cifre, - și _",
-    "descriptionLabel": "Descriere (opțional)",
-    "descriptionPlaceholder": "Taste pentru laptop și telefon de serviciu",
-    "create": "Creați ID-ul Termix",
-    "created": "ID-ul Termix a fost creat",
-    "createFailed": "Nu s-a putut crea ID-ul Termix.",
-    "deleteConfirm": "Ștergeți ID-ul Termix și toate cheile publicate? Serverele pe care le-ați furnizat vor păstra cheile până când le eliminați manual.",
-    "deleted": "ID-ul Termix a fost șters",
-    "deleteFailed": "Ștergerea ID-ului Termix a eșuat.",
-    "copyFailed": "Copierea a eșuat",
-    "resolverUrlLabel": "URL-ul rezolverului public",
-    "provisionLabel": "Furnizați un server",
-    "publishTitle": "Publicați o cheie publică",
-    "generate": "Genera",
-    "generateTooltip": "Generează o pereche de chei Ed25519. Publică cheia publică și descarcă cheia privată pe dispozitivul tău.",
-    "saveToVault": "Salvați în acreditări",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... utilizator@gazdă",
-    "labelPlaceholder": "Etichetă (opțional)",
-    "add": "Adăuga",
-    "importFromCredential": "Sau importați dintr-o acreditare stocată",
-    "keyPublished": "Cheie publicată",
-    "addKeyFailed": "Cheia nu a putut fi adăugată",
-    "generatedSaved": "Perechea de chei a fost generată și salvată în seiful de acreditări. Cheia privată a fost, de asemenea, descărcată.",
-    "generatedOnly": "Pereche de chei generată. Cheie privată descărcată (afișată o singură dată).",
-    "generateFailed": "Cheia nu a putut fi generată",
-    "imported": "Cheie importată din credențiale",
-    "importFailed": "Importarea cheii a eșuat",
-    "noKeys": "Nicio cheie publică nu a fost publicată încă.",
-    "keysTitle": "Chei publicate",
-    "published": "Publicat",
-    "hidden": "Ascuns",
-    "keyRemoved": "Cheia a fost scoasă",
-    "removeKeyFailed": "Cheia nu a putut fi eliminată",
-    "updateKeyFailed": "Cheia nu a putut fi actualizată",
-    "fromVault": "Din seiful de credențiale",
-    "linkedToTermixId": "Publicat prin intermediul ID-ului Termix",
-    "selectCredential": "Selectați o acreditare...",
-    "import": "Import",
-    "caTitle": "Autoritatea de certificare",
-    "caIntro": "Dacă aveți încredere în această CA pe un server, aceasta va accepta orice certificat pe care îl semnați. Rotiți opțiunea pentru a revoca totul simultan; certificatele expiră și ele singure.",
-    "caEnable": "Activează CA",
-    "caEnabled": "CA activat",
-    "caCreateFailed": "Activarea CA-ului nu a reușit",
-    "caPublicKeyLabel": "Cheia publică CA",
-    "caTrustLabel": "Încredere pe un server (executare ca root)",
-    "caRotate": "Roti",
-    "caRotateConfirm": "Rotiți CA-ul? Fiecare certificat semnat de aceasta nu va mai fi acceptat și va trebui emis din nou.",
-    "caRotated": "CA a fost rotată. Certificatele anterioare au fost revocate.",
-    "caRotateFailed": "Nu s-a putut roti CA",
-    "caDelete": "Eliminați CA-ul",
-    "caDeleteConfirm": "Eliminați autoritatea de certificare?",
-    "caDeleted": "Autorizație de certificare eliminată",
-    "caDeleteFailed": "Eliminarea CA-ului nu a reușit",
-    "caValidityLabel": "Valabilitatea certificatului (zile)",
-    "issueCert": "Certificat",
-    "issueCertTooltip": "Emiteți un certificat SSH pentru această cheie, semnat de CA-ul dvs.",
-    "certIssued": "Certificat emis și descărcat",
-    "certIssueFailed": "Nu s-a putut emite certificatul",
-    "docsLink": "Vizualizați documentele",
-    "principalsLabel": "Principali SSH",
-    "principalsPlaceholder": "Principal(i) SSH, de exemplu root"
-  },
-  "nav": {
-    "termixId": "ID-ul"
-  },
-  "credentials": {
-    "idBadge": "ID-ul"
-  },
-  "permissions": {
-    "use": {
-      "title": "Folosește ID-ul Termix",
-      "description": "Revendicați un handle public, publicați chei SSH și rulați o autoritate de certificare."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/ru_RU.json b/plugins/termix-identity/locales/translated/ru_RU.json
deleted file mode 100644
index 6a37dfade..000000000
--- a/plugins/termix-identity/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Termix ID",
-    "loadFailed": "Не удалось загрузить Termix ID",
-    "claimTitle": "Зарегистрируйте свой Termix ID",
-    "claimIntro": "Выберите уникальный идентификатор. Ваши открытые ключи SSH будут опубликованы по общедоступному URL, который вы сможете добавить в файл authorized_keys на любом сервере.",
-    "handleLabel": "Идентификатор",
-    "handlePlaceholder": "alice",
-    "checking": "Проверка…",
-    "available": "Доступно",
-    "taken": "Уже занято",
-    "invalidHandle": "Только строчные буквы, цифры, - и _",
-    "descriptionLabel": "Описание (необязательно)",
-    "descriptionPlaceholder": "Ключи рабочего ноутбука и телефона",
-    "create": "Создать Termix ID",
-    "created": "Termix ID создан",
-    "createFailed": "Не удалось создать Termix ID",
-    "deleteConfirm": "Удалить свой Termix ID и все опубликованные ключи? Серверы, которые вы настроили, сохранят ключи, пока вы не удалите их вручную.",
-    "deleted": "Termix ID удалён",
-    "deleteFailed": "Не удалось удалить Termix ID",
-    "copyFailed": "Не удалось скопировать",
-    "resolverUrlLabel": "Общедоступный URL резолвера",
-    "provisionLabel": "Настроить сервер",
-    "publishTitle": "Опубликовать открытый ключ",
-    "generate": "Сгенерировать",
-    "generateTooltip": "Сгенерируйте пару ключей Ed25519. Опубликуйте открытый ключ и загрузите закрытый ключ на ваше устройство.",
-    "saveToVault": "Сохранить в учётные данные",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... user@host",
-    "labelPlaceholder": "Метка (необязательно)",
-    "add": "Добавить",
-    "importFromCredential": "Или импортировать из сохранённых учётных данных",
-    "keyPublished": "Ключ опубликован",
-    "addKeyFailed": "Не удалось добавить ключ",
-    "generatedSaved": "Пара ключей сгенерирована и сохранена в хранилище учётных данных. Закрытый ключ также загружен.",
-    "generatedOnly": "Пара ключей сгенерирована. Закрытый ключ загружен (отображается только один раз).",
-    "generateFailed": "Не удалось сгенерировать ключ",
-    "imported": "Ключ импортирован из учётных данных",
-    "importFailed": "Не удалось импортировать ключ",
-    "noKeys": "Нет опубликованных открытых ключей.",
-    "keysTitle": "Опубликованные ключи",
-    "published": "Опубликован",
-    "hidden": "Скрыт",
-    "keyRemoved": "Ключ удалён",
-    "removeKeyFailed": "Не удалось удалить ключ",
-    "updateKeyFailed": "Не удалось обновить ключ",
-    "fromVault": "Из хранилища учётных данных",
-    "linkedToTermixId": "Опубликовано через Termix ID",
-    "selectCredential": "Выберите учётные данные…",
-    "import": "Импортировать",
-    "caTitle": "Центр сертификации",
-    "caIntro": "Доверьте этот центр сертификации на сервере, и он будет принимать любые сертификаты, подписанные вами. Ротация мгновенно отзывает все сертификаты; также сертификаты истекают автоматически.",
-    "caEnable": "Включить ЦС",
-    "caEnabled": "ЦС включён",
-    "caCreateFailed": "Не удалось включить ЦС",
-    "caPublicKeyLabel": "Открытый ключ ЦС",
-    "caTrustLabel": "Доверие на сервере (запустите от root)",
-    "caRotate": "Ротировать",
-    "caRotateConfirm": "Ротировать ЦС? Все выданные им сертификаты перестанут приниматься и потребуют перевыпуска.",
-    "caRotated": "Центр сертификации был перезапущен. Предыдущие сертификаты аннулированы.",
-    "caRotateFailed": "Не удалось ротировать ЦС",
-    "caDelete": "Удалить ЦС",
-    "caDeleteConfirm": "Удалить центр сертификации?",
-    "caDeleted": "ЦС удалён",
-    "caDeleteFailed": "Не удалось удалить ЦС",
-    "caValidityLabel": "Срок действия сертификата (дней)",
-    "issueCert": "Сертификат",
-    "issueCertTooltip": "Выпустить SSH-сертификат для этого ключа, подписанный вашим ЦС",
-    "certIssued": "Сертификат выпущен и загружен",
-    "certIssueFailed": "Не удалось выпустить сертификат",
-    "docsLink": "Документация",
-    "principalsLabel": "Принципы SSH",
-    "principalsPlaceholder": "Основные пользователи SSH, например, root."
-  },
-  "nav": {
-    "termixId": "ID"
-  },
-  "credentials": {
-    "idBadge": "ID"
-  },
-  "permissions": {
-    "use": {
-      "title": "Используйте идентификатор Termix.",
-      "description": "Получите публичный IP-адрес, опубликуйте SSH-ключи и запустите центр сертификации."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/sr_SP.json b/plugins/termix-identity/locales/translated/sr_SP.json
deleted file mode 100644
index dc2fa11de..000000000
--- a/plugins/termix-identity/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Термикс ИД",
-    "loadFailed": "Учитавање Termix ID-а није успело",
-    "claimTitle": "Преузмите свој Termix ID",
-    "claimIntro": "Изаберите јединствени идентификатор. Ваши SSH јавни кључеви биће објављени на јавној URL адреси коју можете додати у датотеку authorized_keys било ког сервера.",
-    "handleLabel": "Ручка",
-    "handlePlaceholder": "Алиса",
-    "checking": "Провера…",
-    "available": "Доступно",
-    "taken": "Већ је заузето",
-    "invalidHandle": "Само мала слова, бројеви, - и _",
-    "descriptionLabel": "Опис (опционо)",
-    "descriptionPlaceholder": "Кључеви за лаптоп и телефон за посао",
-    "create": "Креирај Termix ID",
-    "created": "Termix ID је креиран",
-    "createFailed": "Није успело креирање Termix ID-а",
-    "deleteConfirm": "Желите да обришете свој Termix ID и све објављене кључеве? Сервери које сте обезбедили ће чувати кључеве док их ручно не уклоните.",
-    "deleted": "ИД Termix-а је обрисан",
-    "deleteFailed": "Брисање Termix ID-а није успело",
-    "copyFailed": "Копирање није успело",
-    "resolverUrlLabel": "Јавни URL резолвера",
-    "provisionLabel": "Опремите сервер",
-    "publishTitle": "Објавите јавни кључ",
-    "generate": "Генериши",
-    "generateTooltip": "Генеришите пар кључева Ed25519. Објављује јавни кључ и преузима приватни кључ на ваш уређај.",
-    "saveToVault": "Сачувај у акредитиве",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... корисник@домаћин",
-    "labelPlaceholder": "Ознака (опционо)",
-    "add": "Додај",
-    "importFromCredential": "Или увезите из сачуваних акредитива",
-    "keyPublished": "Кључ објављен",
-    "addKeyFailed": "Додавање кључа није успело",
-    "generatedSaved": "Пар кључева је генерисан и сачуван у вашем трезору акредитива. Приватни кључ је такође преузет.",
-    "generatedOnly": "Пар кључева је генерисан. Приватни кључ је преузет (приказан само једном).",
-    "generateFailed": "Генерисање кључа није успело",
-    "imported": "Кључ увезен из акредитива",
-    "importFailed": "Увоз кључа није успео",
-    "noKeys": "Још увек нису објављени јавни кључеви.",
-    "keysTitle": "Објављени кључеви",
-    "published": "Објављено",
-    "hidden": "Скривено",
-    "keyRemoved": "Кључ уклоњен",
-    "removeKeyFailed": "Уклањање кључа није успело",
-    "updateKeyFailed": "Ажурирање кључа није успело",
-    "fromVault": "Из трезора акредитива",
-    "linkedToTermixId": "Објављено преко Termix ID-а",
-    "selectCredential": "Изаберите акредитив...",
-    "import": "Увоз",
-    "caTitle": "Сертификатски ауторитет",
-    "caIntro": "Верујте овом ЦА на серверу и он ће прихватити сваки сертификат који потпишете. Ротирајте да бисте опозвали све одједном; сертификати такође сами истичу.",
-    "caEnable": "Омогући CA",
-    "caEnabled": "ЦА омогућен",
-    "caCreateFailed": "Омогућавање CA није успело",
-    "caPublicKeyLabel": "Јавни кључ CA",
-    "caTrustLabel": "Поверење на серверу (покрени као root)",
-    "caRotate": "Ротирај",
-    "caRotateConfirm": "Ротирати CA? Сваки сертификат који је потписао престаће да се прихвата и мораће се поново издати.",
-    "caRotated": "ЦА ротиран. Претходни сертификати опозвани.",
-    "caRotateFailed": "Ротација CA није успела",
-    "caDelete": "Уклони CA",
-    "caDeleteConfirm": "Уклонити ауторитет за сертификате?",
-    "caDeleted": "ЦА је уклоњен",
-    "caDeleteFailed": "Уклањање CA није успело",
-    "caValidityLabel": "Важење сертификата (дани)",
-    "issueCert": "Сертификат",
-    "issueCertTooltip": "Издајте SSH сертификат за овај кључ, потписан од стране вашег CA",
-    "certIssued": "Сертификат издат и преузет",
-    "certIssueFailed": "Издавање сертификата није успело",
-    "docsLink": "Прикажи документе",
-    "principalsLabel": "SSH принципали",
-    "principalsPlaceholder": "SSH принципал(и), нпр. root"
-  },
-  "nav": {
-    "termixId": "ИД"
-  },
-  "credentials": {
-    "idBadge": "ИД"
-  },
-  "permissions": {
-    "use": {
-      "title": "Користите Termix ID",
-      "description": "Преузмите јавни идентификатор, објавите SSH кључеве и покрените ауторитет за сертификате."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/sv_SE.json b/plugins/termix-identity/locales/translated/sv_SE.json
deleted file mode 100644
index 2dc00de4f..000000000
--- a/plugins/termix-identity/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Termix-ID",
-    "loadFailed": "Misslyckades med att ladda Termix-ID",
-    "claimTitle": "Hämta ditt Termix-ID",
-    "claimIntro": "Välj ett unikt användarnamn. Dina publika SSH-nycklar kommer att publiceras på en offentlig URL som du kan lägga till i valfri servers authorized_keys-fil.",
-    "handleLabel": "Hantera",
-    "handlePlaceholder": "Alice",
-    "checking": "Kontrollerar…",
-    "available": "Tillgänglig",
-    "taken": "Redan upptagen",
-    "invalidHandle": "Endast små bokstäver, siffror, - och _",
-    "descriptionLabel": "Beskrivning (valfritt)",
-    "descriptionPlaceholder": "Arbetslaptop och telefonnycklar",
-    "create": "Skapa Termix-ID",
-    "created": "Termix-ID skapat",
-    "createFailed": "Misslyckades med att skapa Termix-ID",
-    "deleteConfirm": "Vill du ta bort ditt Termix-ID och alla publicerade nycklar? Servrar som du har etablerat kommer att behålla nycklarna tills du tar bort dem manuellt.",
-    "deleted": "Termix-ID raderat",
-    "deleteFailed": "Misslyckades med att ta bort Termix-ID",
-    "copyFailed": "Kopieringen misslyckades",
-    "resolverUrlLabel": "Offentlig resolver-URL",
-    "provisionLabel": "Provisionera en server",
-    "publishTitle": "Publicera en offentlig nyckel",
-    "generate": "Generera",
-    "generateTooltip": "Generera ett Ed25519-nyckelpar. Publicerar den offentliga nyckeln och laddar ner den privata nyckeln till din enhet.",
-    "saveToVault": "Spara till autentiseringsuppgifter",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... användare@värd",
-    "labelPlaceholder": "Etikett (valfritt)",
-    "add": "Tillägga",
-    "importFromCredential": "Eller importera från en lagrad autentiseringsuppgift",
-    "keyPublished": "Nyckel publicerad",
-    "addKeyFailed": "Misslyckades med att lägga till nyckel",
-    "generatedSaved": "Nyckelpar genererat och sparat i ditt inloggningsvalv. Privat nyckel laddades också ner.",
-    "generatedOnly": "Nyckelpar genererat. Privat nyckel nedladdad (visas endast en gång).",
-    "generateFailed": "Misslyckades med att generera nyckeln",
-    "imported": "Nyckel importerad från autentiseringsuppgifter",
-    "importFailed": "Misslyckades med att importera nyckeln",
-    "noKeys": "Inga publika nycklar publicerade än.",
-    "keysTitle": "Publicerade nycklar",
-    "published": "Publicerad",
-    "hidden": "Dold",
-    "keyRemoved": "Nyckel borttagen",
-    "removeKeyFailed": "Misslyckades med att ta bort nyckeln",
-    "updateKeyFailed": "Misslyckades med att uppdatera nyckeln",
-    "fromVault": "Från inloggningsvalvet",
-    "linkedToTermixId": "Publicerad via Termix-ID",
-    "selectCredential": "Välj en behörighetsinloggning...",
-    "import": "Importera",
-    "caTitle": "Certifikatutfärdare",
-    "caIntro": "Lita på denna certifikatutfärdare på en server så accepterar den alla certifikat du signerar. Rotera för att återkalla allt på en gång; certifikat upphör också att gälla av sig själva.",
-    "caEnable": "Aktivera CA",
-    "caEnabled": "CA-aktiverad",
-    "caCreateFailed": "Misslyckades med att aktivera CA",
-    "caPublicKeyLabel": "CA:s offentliga nyckel",
-    "caTrustLabel": "Lita på en server (kör som root)",
-    "caRotate": "Rotera",
-    "caRotateConfirm": "Rotera CA:n? Alla certifikat som den har signerat kommer att sluta accepteras och måste utfärdas på nytt.",
-    "caRotated": "CA roterad. Tidigare certifikat återkallade.",
-    "caRotateFailed": "Misslyckades med att rotera CA",
-    "caDelete": "Ta bort certifikatutfärdare",
-    "caDeleteConfirm": "Ta bort certifikatutfärdaren?",
-    "caDeleted": "CA borttagen",
-    "caDeleteFailed": "Misslyckades med att ta bort certifikatutfärdaren",
-    "caValidityLabel": "Certifikatets giltighetstid (dagar)",
-    "issueCert": "Certifikat",
-    "issueCertTooltip": "Utfärda ett SSH-certifikat för den här nyckeln, signerat av din CA",
-    "certIssued": "Certifikat utfärdat och nedladdat",
-    "certIssueFailed": "Misslyckades med att utfärda certifikat",
-    "docsLink": "Visa dokument",
-    "principalsLabel": "SSH-principer",
-    "principalsPlaceholder": "SSH-principal(er), t.ex. root"
-  },
-  "nav": {
-    "termixId": "ID"
-  },
-  "credentials": {
-    "idBadge": "ID"
-  },
-  "permissions": {
-    "use": {
-      "title": "Använd Termix-ID",
-      "description": "Gör anspråk på ett offentligt referensnamn, publicera SSH-nycklar och kör en certifikatutfärdare."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/th_TH.json b/plugins/termix-identity/locales/translated/th_TH.json
deleted file mode 100644
index a91af01de..000000000
--- a/plugins/termix-identity/locales/translated/th_TH.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "เทอร์มิกซ์ ไอดี",
-    "loadFailed": "ไม่สามารถโหลด Termix ID ได้",
-    "claimTitle": "รับรหัส Termix ของคุณ",
-    "claimIntro": "เลือกชื่อผู้ใช้ที่ไม่ซ้ำกัน คีย์สาธารณะ SSH ของคุณจะถูกเผยแพร่ที่ URL สาธารณะที่คุณสามารถเพิ่มลงในไฟล์ authorized_keys ของเซิร์ฟเวอร์ใดก็ได้",
-    "handleLabel": "รับมือ",
-    "handlePlaceholder": "อลิซ",
-    "checking": "กำลังตรวจสอบ…",
-    "available": "มีอยู่",
-    "taken": "เอาไปแล้ว",
-    "invalidHandle": "ใช้เฉพาะตัวอักษรพิมพ์เล็ก ตัวเลข และเครื่องหมายขีดกลาง (-) เท่านั้น",
-    "descriptionLabel": "คำอธิบาย (ไม่บังคับ)",
-    "descriptionPlaceholder": "ปุ่มสำหรับแล็ปท็อปและโทรศัพท์ที่ใช้ในการทำงาน",
-    "create": "สร้าง Termix ID",
-    "created": "สร้าง Termix ID แล้ว",
-    "createFailed": "ไม่สามารถสร้าง Termix ID ได้",
-    "deleteConfirm": "ลบ Termix ID และคีย์ที่เผยแพร่ทั้งหมดของคุณแล้วหรือยัง? เซิร์ฟเวอร์ที่คุณตั้งค่าไว้จะเก็บคีย์เหล่านั้นไว้จนกว่าคุณจะลบออกด้วยตนเอง",
-    "deleted": "รหัส Termix ถูกลบแล้ว",
-    "deleteFailed": "ไม่สามารถลบ Termix ID ได้",
-    "copyFailed": "การคัดลอกล้มเหลว",
-    "resolverUrlLabel": "URL ตัวแก้ไขสาธารณะ",
-    "provisionLabel": "จัดเตรียมเซิร์ฟเวอร์",
-    "publishTitle": "เผยแพร่คีย์สาธารณะ",
-    "generate": "สร้าง",
-    "generateTooltip": "สร้างคู่คีย์ Ed25519 เผยแพร่คีย์สาธารณะและดาวน์โหลดคีย์ส่วนตัวไปยังอุปกรณ์ของคุณ",
-    "saveToVault": "บันทึกไปยังข้อมูลรับรอง",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... user@host",
-    "labelPlaceholder": "ป้ายกำกับ (ไม่บังคับ)",
-    "add": "เพิ่ม",
-    "importFromCredential": "หรือนำเข้าจากข้อมูลรับรองที่บันทึกไว้",
-    "keyPublished": "คีย์ที่เผยแพร่",
-    "addKeyFailed": "ไม่สามารถเพิ่มคีย์ได้",
-    "generatedSaved": "สร้างและบันทึกคู่คีย์ลงในคลังข้อมูลประจำตัวของคุณเรียบร้อยแล้ว คีย์ส่วนตัวก็ถูกดาวน์โหลดด้วยเช่นกัน",
-    "generatedOnly": "สร้างคู่คีย์แล้ว ดาวน์โหลดคีย์ส่วนตัวแล้ว (แสดงเพียงครั้งเดียว)",
-    "generateFailed": "ไม่สามารถสร้างคีย์ได้",
-    "imported": "คีย์ที่นำเข้าจากข้อมูลประจำตัว",
-    "importFailed": "ไม่สามารถนำเข้าคีย์ได้",
-    "noKeys": "ยังไม่มีการเผยแพร่คีย์สาธารณะใดๆ",
-    "keysTitle": "คีย์ที่เผยแพร่",
-    "published": "ที่ตีพิมพ์",
-    "hidden": "ที่ซ่อนอยู่",
-    "keyRemoved": "กุญแจถูกถอดออก",
-    "removeKeyFailed": "ไม่สามารถถอดกุญแจได้",
-    "updateKeyFailed": "ไม่สามารถอัปเดตคีย์ได้",
-    "fromVault": "จากคลังข้อมูลประจำตัว",
-    "linkedToTermixId": "เผยแพร่ผ่าน Termix ID",
-    "selectCredential": "เลือกข้อมูลประจำตัว...",
-    "import": "นำเข้า",
-    "caTitle": "หน่วยงานออกใบรับรอง",
-    "caIntro": "เชื่อถือ CA นี้บนเซิร์ฟเวอร์ และมันจะยอมรับใบรับรองใดๆ ก็ตามที่คุณลงนาม หมุนเวียนใบรับรองเพื่อยกเลิกทุกอย่างพร้อมกัน ใบรับรองจะหมดอายุเองโดยอัตโนมัติ",
-    "caEnable": "เปิดใช้งาน CA",
-    "caEnabled": "CA เปิดใช้งานแล้ว",
-    "caCreateFailed": "ไม่สามารถเปิดใช้งาน CA ได้",
-    "caPublicKeyLabel": "คีย์สาธารณะ CA",
-    "caTrustLabel": "เชื่อถือเซิร์ฟเวอร์ (เรียกใช้ในฐานะ root)",
-    "caRotate": "หมุน",
-    "caRotateConfirm": "หมุนเวียน CA? ใบรับรองทั้งหมดที่ CA นั้นได้ลงนามไปแล้วจะไม่ได้รับการยอมรับอีกต่อไป และจะต้องออกใหม่",
-    "caRotated": "หน่วยงานออกใบรับรองได้หมุนเวียนแล้ว ใบรับรองเดิมถูกเพิกถอน",
-    "caRotateFailed": "ไม่สามารถหมุน CA ได้",
-    "caDelete": "ลบ CA",
-    "caDeleteConfirm": "ลบหน่วยงานออกใบรับรองหรือไม่?",
-    "caDeleted": "CA ถูกลบออก",
-    "caDeleteFailed": "ไม่สามารถลบ CA ได้",
-    "caValidityLabel": "ระยะเวลาที่ใบรับรองมีผลบังคับใช้ (วัน)",
-    "issueCert": "ใบรับรอง",
-    "issueCertTooltip": "ออกใบรับรอง SSH สำหรับคีย์นี้ โดยให้หน่วยงานออกใบรับรอง (CA) ของคุณเป็นผู้ลงนาม",
-    "certIssued": "ออกและดาวน์โหลดใบรับรองแล้ว",
-    "certIssueFailed": "ไม่สามารถออกใบรับรองได้",
-    "docsLink": "ดูเอกสาร",
-    "principalsLabel": "หลักการของ SSH",
-    "principalsPlaceholder": "สิทธิ์การเข้าถึง SSH (เช่น root)"
-  },
-  "nav": {
-    "termixId": "รหัสประจำตัว"
-  },
-  "credentials": {
-    "idBadge": "รหัสประจำตัว"
-  },
-  "permissions": {
-    "use": {
-      "title": "ใช้ Termix ID",
-      "description": "ขอรับชื่อผู้ใช้สาธารณะ เผยแพร่คีย์ SSH และเรียกใช้หน่วยงานออกใบรับรอง"
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/tr_TR.json b/plugins/termix-identity/locales/translated/tr_TR.json
deleted file mode 100644
index 120a8b9ea..000000000
--- a/plugins/termix-identity/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Termix ID",
-    "loadFailed": "Termix ID yüklenemedi",
-    "claimTitle": "Termix ID'nizi alın",
-    "claimIntro": "Benzersiz bir kullanıcı adı seçin. SSH genel anahtarlarınız, herhangi bir sunucunun authorized_keys dosyasına ekleyebileceğiniz herkese açık bir URL'de yayımlanacaktır.",
-    "handleLabel": "Kullanıcı Adı",
-    "handlePlaceholder": "alice",
-    "checking": "Kontrol ediliyor…",
-    "available": "Kullanılabilir",
-    "taken": "Zaten alınmış",
-    "invalidHandle": "Yalnızca küçük harfler, rakamlar, - ve _ kullanılabilir",
-    "descriptionLabel": "Açıklama (isteğe bağlı)",
-    "descriptionPlaceholder": "İş bilgisayarı ve telefon anahtarları",
-    "create": "Termix ID Oluştur",
-    "created": "Termix ID oluşturuldu",
-    "createFailed": "Termix ID oluşturulamadı",
-    "deleteConfirm": "Termix ID'nizi ve yayımlanmış tüm anahtarları silmek istediğinize emin misiniz? Hazırladığınız sunucular, anahtarları siz manuel olarak kaldırana kadar saklayacaktır.",
-    "deleted": "Termix ID silindi",
-    "deleteFailed": "Termix ID silinemedi",
-    "copyFailed": "Kopyalama başarısız",
-    "resolverUrlLabel": "Genel çözümleyici URL",
-    "provisionLabel": "Sunucu hazırla",
-    "publishTitle": "Genel anahtar yayımla",
-    "generate": "Oluştur",
-    "generateTooltip": "Ed25519 anahtar çifti oluşturun. Genel anahtarı yayınlayın ve özel anahtarı cihazınıza indirin.",
-    "saveToVault": "Kimlik Bilgilerine Kaydet",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... user@host",
-    "labelPlaceholder": "Etiket (isteğe bağlı)",
-    "add": "Ekle",
-    "importFromCredential": "Veya kayıtlı bir kimlik bilgisinden içe aktar",
-    "keyPublished": "Anahtar yayımlandı",
-    "addKeyFailed": "Anahtar eklenemedi",
-    "generatedSaved": "Anahtar çifti oluşturuldu ve kimlik bilgileri kasanıza kaydedildi. Özel anahtar da indirildi.",
-    "generatedOnly": "Anahtar çifti oluşturuldu. Özel anahtar indirildi (yalnızca bir kez gösterilir).",
-    "generateFailed": "Anahtar oluşturulamadı",
-    "imported": "Anahtar kimlik bilgisinden içe aktarıldı",
-    "importFailed": "Anahtar içe aktarılamadı",
-    "noKeys": "Henüz yayınlanmış genel anahtar yok.",
-    "keysTitle": "Yayınlanan anahtarlar",
-    "published": "Yayınlandı",
-    "hidden": "Gizli",
-    "keyRemoved": "Anahtar kaldırıldı",
-    "removeKeyFailed": "Anahtar kaldırılamadı",
-    "updateKeyFailed": "Anahtar güncellenemedi",
-    "fromVault": "Kimlik bilgileri kasasından",
-    "linkedToTermixId": "Termix ID ile yayınlandı",
-    "selectCredential": "Bir kimlik bilgisi seçin...",
-    "import": "İçe aktar",
-    "caTitle": "Sertifika yetkilisi",
-    "caIntro": "Bu CA'yı bir sunucuda güvenilir yapın, imzaladığınız tüm sertifikaları kabul eder. Tek seferde tümünü iptal etmek için döndürün; sertifikalar ayrıca kendiliğinden süresi dolar.",
-    "caEnable": "CA'yı etkinleştir",
-    "caEnabled": "CA etkinleştirildi",
-    "caCreateFailed": "CA etkinleştirilemedi",
-    "caPublicKeyLabel": "CA genel anahtarı",
-    "caTrustLabel": "Sunucuda güven (root olarak çalıştırın)",
-    "caRotate": "Döndür",
-    "caRotateConfirm": "CA'yı döndürmek istediğinize emin misiniz? İmzaladığı tüm sertifikalar kabul edilmeyecek ve yeniden düzenlenmeleri gerekecek.",
-    "caRotated": "CA görevinden alındı. Önceki sertifikalar iptal edildi.",
-    "caRotateFailed": "CA döndürülemedi",
-    "caDelete": "CA'yı kaldır",
-    "caDeleteConfirm": "Sertifika yetkilisi kaldırılsın mı?",
-    "caDeleted": "CA kaldırıldı",
-    "caDeleteFailed": "CA kaldırılamadı",
-    "caValidityLabel": "Sertifika geçerliliği (gün)",
-    "issueCert": "Sertifika",
-    "issueCertTooltip": "Bu anahtar için CA'nız tarafından imzalanmış bir SSH sertifikası düzenleyin",
-    "certIssued": "Sertifika düzenlendi ve indirildi",
-    "certIssueFailed": "Sertifika düzenlenemedi",
-    "docsLink": "Belgelere bak",
-    "principalsLabel": "SSH prensipleri",
-    "principalsPlaceholder": "SSH sorumlusu(ları), örneğin root"
-  },
-  "nav": {
-    "termixId": "Kimlik"
-  },
-  "credentials": {
-    "idBadge": "ID"
-  },
-  "permissions": {
-    "use": {
-      "title": "Termix ID'nizi kullanın.",
-      "description": "Herkese açık bir kullanıcı adı alın, SSH anahtarlarını yayınlayın ve bir sertifika yetkilisi çalıştırın."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/uk_UA.json b/plugins/termix-identity/locales/translated/uk_UA.json
deleted file mode 100644
index 2051085a0..000000000
--- a/plugins/termix-identity/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Ідентифікатор Termix",
-    "loadFailed": "Не вдалося завантажити ідентифікатор Termix",
-    "claimTitle": "Отримайте свій ідентифікатор Termix",
-    "claimIntro": "Виберіть унікальний дескриптор. Ваші публічні ключі SSH будуть опубліковані за публічною URL-адресою, яку можна додати до файлу authorized_keys будь-якого сервера.",
-    "handleLabel": "Ручка",
-    "handlePlaceholder": "Аліса",
-    "checking": "Перевірка…",
-    "available": "Доступно",
-    "taken": "Вже зайнято",
-    "invalidHandle": "Тільки малі літери, цифри, - та _",
-    "descriptionLabel": "Опис (необов'язково)",
-    "descriptionPlaceholder": "Клавіші для робочого ноутбука та телефону",
-    "create": "Створити ідентифікатор Termix",
-    "created": "Ідентифікатор Termix створено",
-    "createFailed": "Не вдалося створити ідентифікатор Termix",
-    "deleteConfirm": "Видалити свій Termix ID та всі опубліковані ключі? Сервери, які ви налаштували, зберігатимуть ключі, доки ви не видалите їх вручну.",
-    "deleted": "Ідентифікатор Termix видалено",
-    "deleteFailed": "Не вдалося видалити ідентифікатор Termix",
-    "copyFailed": "Не вдалося скопіювати",
-    "resolverUrlLabel": "URL-адреса публічного резолвера",
-    "provisionLabel": "Підготовка сервера",
-    "publishTitle": "Опублікувати відкритий ключ",
-    "generate": "Згенерувати",
-    "generateTooltip": "Згенерувати пару ключів Ed25519. Публікує відкритий ключ і завантажує закритий ключ на ваш пристрій.",
-    "saveToVault": "Зберегти в облікові дані",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... користувач@хост",
-    "labelPlaceholder": "Мітка (необов'язково)",
-    "add": "Додати",
-    "importFromCredential": "Або імпортувати зі збережених облікових даних",
-    "keyPublished": "Ключ опубліковано",
-    "addKeyFailed": "Не вдалося додати ключ",
-    "generatedSaved": "Пару ключів згенеровано та збережено у вашому сховищі облікових даних. Також завантажено закритий ключ.",
-    "generatedOnly": "Пара ключів згенерована. Закритий ключ завантажено (відображається лише один раз).",
-    "generateFailed": "Не вдалося згенерувати ключ",
-    "imported": "Ключ імпортовано з облікових даних",
-    "importFailed": "Не вдалося імпортувати ключ",
-    "noKeys": "Відкриті ключі ще не опубліковані.",
-    "keysTitle": "Опубліковані ключі",
-    "published": "Опубліковано",
-    "hidden": "Прихований",
-    "keyRemoved": "Ключ вилучено",
-    "removeKeyFailed": "Не вдалося видалити ключ",
-    "updateKeyFailed": "Не вдалося оновити ключ",
-    "fromVault": "Зі сховища облікових даних",
-    "linkedToTermixId": "Опубліковано через Termix ID",
-    "selectCredential": "Виберіть облікові дані...",
-    "import": "Імпорт",
-    "caTitle": "Центр сертифікації",
-    "caIntro": "Довіртеся цьому ЦС на сервері, і він прийматиме будь-який підписаний вами сертифікат. Зробіть поворот, щоб скасувати все одразу; сертифікати також закінчуються самостійно.",
-    "caEnable": "Увімкнути ЦС",
-    "caEnabled": "ЦС увімкнено",
-    "caCreateFailed": "Не вдалося ввімкнути CA",
-    "caPublicKeyLabel": "Відкритий ключ CA",
-    "caTrustLabel": "Довіра на сервері (запуск від імені root)",
-    "caRotate": "Повернути",
-    "caRotateConfirm": "Ротувати ЦС? Кожен підписаний ним сертифікат більше не прийматиметься та має бути виданий повторно.",
-    "caRotated": "ЦС замінено. Попередні сертифікати анульовано.",
-    "caRotateFailed": "Не вдалося повернути CA",
-    "caDelete": "Видалити ЦС",
-    "caDeleteConfirm": "Видалити центр сертифікації?",
-    "caDeleted": "CA видалено",
-    "caDeleteFailed": "Не вдалося видалити CA",
-    "caValidityLabel": "Термін дії сертифіката (дні)",
-    "issueCert": "Сертифікат",
-    "issueCertTooltip": "Видайте SSH-сертифікат для цього ключа, підписаний вашим ЦС",
-    "certIssued": "Сертифікат видано та завантажено",
-    "certIssueFailed": "Не вдалося видати сертифікат",
-    "docsLink": "Переглянути документи",
-    "principalsLabel": "Принципи SSH",
-    "principalsPlaceholder": "SSH-принципал(и), наприклад, root"
-  },
-  "nav": {
-    "termixId": "Ідентифікатор"
-  },
-  "credentials": {
-    "idBadge": "Ідентифікатор"
-  },
-  "permissions": {
-    "use": {
-      "title": "Використовувати ідентифікатор Termix",
-      "description": "Отримайте публічний дескриптор, опублікуйте SSH-ключі та запустіть центр сертифікації."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/vi_VN.json b/plugins/termix-identity/locales/translated/vi_VN.json
deleted file mode 100644
index 5533176a1..000000000
--- a/plugins/termix-identity/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Termix ID",
-    "loadFailed": "Tải Termix ID thất bại",
-    "claimTitle": "Nhận Termix ID của bạn",
-    "claimIntro": "Chọn một tên người dùng duy nhất. Khóa công khai SSH của bạn sẽ được công bố tại một URL công khai mà bạn có thể thêm vào tệp authorized_keys của bất kỳ máy chủ nào.",
-    "handleLabel": "Tên người dùng",
-    "handlePlaceholder": "alice",
-    "checking": "Đang kiểm tra…",
-    "available": "Có sẵn",
-    "taken": "Đã được sử dụng",
-    "invalidHandle": "Chỉ chữ thường, số, - và _",
-    "descriptionLabel": "Mô tả (tùy chọn)",
-    "descriptionPlaceholder": "Khóa laptop & điện thoại",
-    "create": "Tạo Termix ID",
-    "created": "Đã tạo Termix ID",
-    "createFailed": "Tạo Termix ID thất bại",
-    "deleteConfirm": "Xóa Termix ID và tất cả khóa đã công bố? Các máy chủ bạn đã cung cấp sẽ vẫn giữ khóa cho đến khi bạn xóa thủ công.",
-    "deleted": "Đã xóa Termix ID",
-    "deleteFailed": "Xóa Termix ID thất bại",
-    "copyFailed": "Sao chép thất bại",
-    "resolverUrlLabel": "URL phân giải công khai",
-    "provisionLabel": "Cung cấp máy chủ",
-    "publishTitle": "Công bố khóa công khai",
-    "generate": "Tạo",
-    "generateTooltip": "Tạo một cặp khóa Ed25519. Công bố khóa công khai và tải khóa riêng tư xuống thiết bị của bạn.",
-    "saveToVault": "Lưu vào Kho thông tin",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... user@host",
-    "labelPlaceholder": "Nhãn (tùy chọn)",
-    "add": "Thêm",
-    "importFromCredential": "Hoặc nhập từ một thông tin đăng nhập đã lưu",
-    "keyPublished": "Đã công bố khóa",
-    "addKeyFailed": "Thêm khóa thất bại",
-    "generatedSaved": "Đã tạo cặp khóa và lưu vào kho thông tin đăng nhập của bạn. Khóa riêng cũng đã được tải xuống.",
-    "generatedOnly": "Cặp khóa đã được tạo. Khóa riêng tư đã được tải xuống (chỉ hiển thị một lần).",
-    "generateFailed": "Tạo khóa thất bại",
-    "imported": "Đã nhập khóa từ thông tin đăng nhập",
-    "importFailed": "Nhập khóa thất bại",
-    "noKeys": "Chưa có khóa công khai được công bố.",
-    "keysTitle": "Khóa đã công bố",
-    "published": "Đã công bố",
-    "hidden": "Ẩn",
-    "keyRemoved": "Đã xóa khóa",
-    "removeKeyFailed": "Xóa khóa thất bại",
-    "updateKeyFailed": "Cập nhật khóa thất bại",
-    "fromVault": "Từ kho thông tin xác thực",
-    "linkedToTermixId": "Công bố qua Termix ID",
-    "selectCredential": "Chọn thông tin xác thực...",
-    "import": "Nhập",
-    "caTitle": "Cơ quan chứng thực",
-    "caIntro": "Tin cậy CA này trên máy chủ và nó chấp nhận mọi chứng chỉ do bạn ký. Xoay để thu hồi tất cả cùng lúc; chứng chỉ cũng tự hết hạn.",
-    "caEnable": "Bật CA",
-    "caEnabled": "Đã bật CA",
-    "caCreateFailed": "Bật CA thất bại",
-    "caPublicKeyLabel": "Khóa công khai CA",
-    "caTrustLabel": "Tin cậy trên máy chủ (chạy với quyền root)",
-    "caRotate": "Xoay",
-    "caRotateConfirm": "Xoay CA? Mọi chứng chỉ do CA này ký sẽ không còn được chấp nhận và phải được cấp lại.",
-    "caRotated": "CA đã được xoay vòng. Các chứng chỉ trước đó đã bị thu hồi.",
-    "caRotateFailed": "Xoay CA thất bại",
-    "caDelete": "Gỡ bỏ CA",
-    "caDeleteConfirm": "Gỡ bỏ cơ quan chứng thực?",
-    "caDeleted": "Đã gỡ CA",
-    "caDeleteFailed": "Gỡ CA thất bại",
-    "caValidityLabel": "Hiệu lực chứng chỉ (ngày)",
-    "issueCert": "Chứng chỉ",
-    "issueCertTooltip": "Cấp chứng chỉ SSH cho khóa này, được ký bởi CA của bạn",
-    "certIssued": "Chứng chỉ đã được cấp và tải xuống",
-    "certIssueFailed": "Cấp chứng chỉ thất bại",
-    "docsLink": "Xem tài liệu",
-    "principalsLabel": "Nguyên tắc SSH",
-    "principalsPlaceholder": "Người dùng SSH chính, ví dụ như root"
-  },
-  "nav": {
-    "termixId": "ID"
-  },
-  "credentials": {
-    "idBadge": "ID"
-  },
-  "permissions": {
-    "use": {
-      "title": "Sử dụng Termix ID",
-      "description": "Đăng ký một tên người dùng công khai, công bố khóa SSH và vận hành một cơ quan cấp chứng chỉ."
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/zh_CN.json b/plugins/termix-identity/locales/translated/zh_CN.json
deleted file mode 100644
index 17caef1d3..000000000
--- a/plugins/termix-identity/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Termix ID",
-    "loadFailed": "Termix ID 加载失败",
-    "claimTitle": "认领您的 Termix ID",
-    "claimIntro": "选择一个唯一的用户名。您的 SSH 公钥将发布在一个公开 URL 上，您可以将该 URL 添加到任意服务器的 authorized_keys 文件中。",
-    "handleLabel": "用户名",
-    "handlePlaceholder": "alice",
-    "checking": "检查中…",
-    "available": "可用",
-    "taken": "已被占用",
-    "invalidHandle": "仅允许小写字母、数字、- 和 _",
-    "descriptionLabel": "描述（可选）",
-    "descriptionPlaceholder": "工作笔记本和手机密钥",
-    "create": "创建 Termix ID",
-    "created": "Termix ID 已创建",
-    "createFailed": "创建 Termix ID 失败",
-    "deleteConfirm": "删除您的 Termix ID 和所有已发布的密钥？您配置的服务器将保留密钥，直到您手动移除。",
-    "deleted": "Termix ID 已删除",
-    "deleteFailed": "删除 Termix ID 失败",
-    "copyFailed": "复制失败",
-    "resolverUrlLabel": "公开解析器 URL",
-    "provisionLabel": "配置服务器",
-    "publishTitle": "发布公钥",
-    "generate": "生成",
-    "generateTooltip": "生成 Ed25519 密钥对。发布公钥并将私钥下载到您的设备。",
-    "saveToVault": "保存到凭据",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... user@host",
-    "labelPlaceholder": "标签（可选）",
-    "add": "添加",
-    "importFromCredential": "或从已存储的凭据导入",
-    "keyPublished": "密钥已发布",
-    "addKeyFailed": "添加密钥失败",
-    "generatedSaved": "密钥对已生成并保存到您的凭据库。私钥也已下载。",
-    "generatedOnly": "密钥对已生成。私钥已下载（仅显示一次）。",
-    "generateFailed": "密钥生成失败",
-    "imported": "密钥已从凭据导入",
-    "importFailed": "导入密钥失败",
-    "noKeys": "尚未发布公钥。",
-    "keysTitle": "已发布的密钥",
-    "published": "已发布",
-    "hidden": "隐藏",
-    "keyRemoved": "密钥已移除",
-    "removeKeyFailed": "移除密钥失败",
-    "updateKeyFailed": "更新密钥失败",
-    "fromVault": "来自凭据 Vault",
-    "linkedToTermixId": "通过 Termix ID 发布",
-    "selectCredential": "选择凭据...",
-    "import": "导入",
-    "caTitle": "证书颁发机构",
-    "caIntro": "在服务器上信任此 CA，它将接受您签名的任何证书。轮换可一次性吊销所有证书；证书也会自动过期。",
-    "caEnable": "启用 CA",
-    "caEnabled": "CA 已启用",
-    "caCreateFailed": "启用 CA 失败",
-    "caPublicKeyLabel": "CA 公钥",
-    "caTrustLabel": "在服务器上信任（以 root 身份运行）",
-    "caRotate": "轮换",
-    "caRotateConfirm": "轮换 CA？其已签名的所有证书将停止被接受，必须重新签发。",
-    "caRotated": "CA已轮换。之前的证书已被吊销。",
-    "caRotateFailed": "轮换 CA 失败",
-    "caDelete": "移除 CA",
-    "caDeleteConfirm": "移除证书颁发机构？",
-    "caDeleted": "CA 已移除",
-    "caDeleteFailed": "移除 CA 失败",
-    "caValidityLabel": "证书有效期（天）",
-    "issueCert": "证书",
-    "issueCertTooltip": "为此密钥签发一个 SSH 证书，由您的 CA 签名",
-    "certIssued": "证书已签发并下载",
-    "certIssueFailed": "签发证书失败",
-    "docsLink": "查看文档",
-    "principalsLabel": "SSH主体",
-    "principalsPlaceholder": "SSH主体，例如root"
-  },
-  "nav": {
-    "termixId": "ID"
-  },
-  "credentials": {
-    "idBadge": "ID"
-  },
-  "permissions": {
-    "use": {
-      "title": "使用 Termix ID",
-      "description": "申请一个公共句柄，发布 SSH 密钥并运行证书颁发机构。"
-    }
-  }
-}
diff --git a/plugins/termix-identity/locales/translated/zh_TW.json b/plugins/termix-identity/locales/translated/zh_TW.json
deleted file mode 100644
index 95a674008..000000000
--- a/plugins/termix-identity/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,86 +0,0 @@
-{
-  "termixId": {
-    "title": "Termix ID",
-    "loadFailed": "無法載入 Termix ID",
-    "claimTitle": "註冊您的 Termix ID",
-    "claimIntro": "選擇一個唯一的使用者代號。您的 SSH 公開金鑰將發佈在一個公開 URL，您可以將其加入任何伺服器的 authorized_keys 檔案中。",
-    "handleLabel": "代號",
-    "handlePlaceholder": "alice",
-    "checking": "檢查中…",
-    "available": "可用",
-    "taken": "已被使用",
-    "invalidHandle": "僅限小寫字母、數字、- 和 _",
-    "descriptionLabel": "描述（選填）",
-    "descriptionPlaceholder": "工作筆電和手機金鑰",
-    "create": "建立 Termix ID",
-    "created": "Termix ID 已建立",
-    "createFailed": "無法建立 Termix ID",
-    "deleteConfirm": "刪除您的 Termix ID 和所有已發佈的金鑰？您已佈建的伺服器將保留這些金鑰，直到您手動移除為止。",
-    "deleted": "Termix ID 已刪除",
-    "deleteFailed": "無法刪除 Termix ID",
-    "copyFailed": "複製失敗",
-    "resolverUrlLabel": "公開解析器 URL",
-    "provisionLabel": "佈建伺服器",
-    "publishTitle": "發佈公開金鑰",
-    "generate": "產生",
-    "generateTooltip": "產生 Ed25519 金鑰對。發佈公鑰並將私鑰下載到您的裝置。",
-    "saveToVault": "儲存至憑證庫",
-    "keyPlaceholder": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5... user@host",
-    "labelPlaceholder": "標籤（選填）",
-    "add": "新增",
-    "importFromCredential": "或從已儲存的憑證匯入",
-    "keyPublished": "金鑰已發佈",
-    "addKeyFailed": "無法新增金鑰",
-    "generatedSaved": "金鑰對已產生並儲存至您的憑證庫。私密金鑰也已下載。",
-    "generatedOnly": "密鑰對已產生。私鑰已下載（僅顯示一次）。",
-    "generateFailed": "無法產生金鑰",
-    "imported": "已從憑證匯入金鑰",
-    "importFailed": "匯入金鑰失敗",
-    "noKeys": "尚未發布任何公開金鑰。",
-    "keysTitle": "已發布的金鑰",
-    "published": "已發布",
-    "hidden": "已隱藏",
-    "keyRemoved": "金鑰已移除",
-    "removeKeyFailed": "移除金鑰失敗",
-    "updateKeyFailed": "更新金鑰失敗",
-    "fromVault": "來自憑證庫",
-    "linkedToTermixId": "透過 Termix ID 發布",
-    "selectCredential": "選擇一個憑證...",
-    "import": "匯入",
-    "caTitle": "憑證授權中心",
-    "caIntro": "在伺服器上信任此 CA，即可接受您簽署的任何憑證。輪替可一次性撤銷所有憑證；憑證也會自行過期。",
-    "caEnable": "啟用 CA",
-    "caEnabled": "CA 已啟用",
-    "caCreateFailed": "啟用 CA 失敗",
-    "caPublicKeyLabel": "CA 公開金鑰",
-    "caTrustLabel": "在伺服器上信任（以 root 執行）",
-    "caRotate": "輪替",
-    "caRotateConfirm": "輪替 CA？所有由其簽署的憑證將不再被接受，必須重新簽發。",
-    "caRotated": "CA已輪調。之前的證書已被吊銷。",
-    "caRotateFailed": "輪替 CA 失敗",
-    "caDelete": "移除 CA",
-    "caDeleteConfirm": "移除憑證授權中心？",
-    "caDeleted": "CA 已移除",
-    "caDeleteFailed": "移除 CA 失敗",
-    "caValidityLabel": "憑證有效期（天）",
-    "issueCert": "憑證",
-    "issueCertTooltip": "為此金鑰簽發 SSH 憑證，由您的 CA 簽署",
-    "certIssued": "憑證已簽發並下載",
-    "certIssueFailed": "簽發憑證失敗",
-    "docsLink": "檢視文件",
-    "principalsLabel": "SSH主體",
-    "principalsPlaceholder": "SSH主體，例如root"
-  },
-  "nav": {
-    "termixId": "ID"
-  },
-  "credentials": {
-    "idBadge": "ID"
-  },
-  "permissions": {
-    "use": {
-      "title": "使用 Termix ID",
-      "description": "申請一個公開句柄，發布 SSH 金鑰並執行憑證授權單位。"
-    }
-  }
-}
diff --git a/plugins/termix-identity/manifest.json b/plugins/termix-identity/manifest.json
deleted file mode 100644
index ae39d0e64..000000000
--- a/plugins/termix-identity/manifest.json
+++ /dev/null
@@ -1,54 +0,0 @@
-{
-  "id": "termix-identity",
-  "name": "Termix Identity",
-  "version": "1.0.0",
-  "description": "Publish your SSH public keys under a public handle and run your own SSH certificate authority.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Access & Security",
-  "icon": "Fingerprint",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "db:own",
-    "secrets:own",
-    "network:serve",
-    "credentials:use",
-    "credentials:write",
-    "ui:surface"
-  ],
-  "contributes": {
-    "tabs": [
-      {
-        "id": "termix-id",
-        "titleKey": "nav.termixId",
-        "icon": "Fingerprint",
-        "openFrom": ["rail"]
-      }
-    ],
-    "permissions": [
-      {
-        "name": "use",
-        "titleKey": "permissions.use.title",
-        "descriptionKey": "permissions.use.description",
-        "defaultRoles": ["admin", "user"]
-      }
-    ],
-    "http": {
-      "legacyRedirects": [
-        {
-          "from": "/termix-id/u",
-          "to": "/u",
-          "status": 308
-        }
-      ]
-    }
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"]
-}
diff --git a/plugins/termix-identity/migrations/mysql/0001_adopt_termix_identity_tables.sql b/plugins/termix-identity/migrations/mysql/0001_adopt_termix_identity_tables.sql
deleted file mode 100644
index 8d43615ed..000000000
--- a/plugins/termix-identity/migrations/mysql/0001_adopt_termix_identity_tables.sql
+++ /dev/null
@@ -1,46 +0,0 @@
--- termix-identity 0001: adopt_termix_identity_tables
--- Generated by termix-plugin migrations. Review before committing.
--- Hand-edited: keeps the legacy foreign keys the SDK cannot declare
--- (keys and ca to their identity, keys to ssh_credentials).
-
-CREATE TABLE IF NOT EXISTS `termix_identities` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL UNIQUE,
-  `handle` varchar(255) NOT NULL UNIQUE,
-  `description` text,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `termix_identities` TO `p_termix_identity_identities`;
-CREATE TABLE IF NOT EXISTS `termix_identity_keys` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `identity_id` int NOT NULL,
-  `user_id` varchar(255) NOT NULL,
-  `public_key` text NOT NULL,
-  `key_type` text NOT NULL,
-  `algorithm` text NOT NULL,
-  `label` text,
-  `comment` text,
-  `source` text NOT NULL DEFAULT ('manual'),
-  `credential_id` int,
-  `enabled` boolean NOT NULL DEFAULT true,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`identity_id`) REFERENCES `p_termix_identity_identities` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`credential_id`) REFERENCES `ssh_credentials` (`id`) ON DELETE SET NULL
-);
-RENAME TABLE `termix_identity_keys` TO `p_termix_identity_keys`;
-CREATE TABLE IF NOT EXISTS `termix_identity_ca` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `identity_id` int NOT NULL UNIQUE,
-  `user_id` varchar(255) NOT NULL,
-  `public_key` text NOT NULL,
-  `private_key` text NOT NULL,
-  `validity_days` int NOT NULL DEFAULT 90,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`identity_id`) REFERENCES `p_termix_identity_identities` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `termix_identity_ca` TO `p_termix_identity_ca`;
diff --git a/plugins/termix-identity/migrations/postgres/0001_adopt_termix_identity_tables.sql b/plugins/termix-identity/migrations/postgres/0001_adopt_termix_identity_tables.sql
deleted file mode 100644
index 774d9c309..000000000
--- a/plugins/termix-identity/migrations/postgres/0001_adopt_termix_identity_tables.sql
+++ /dev/null
@@ -1,47 +0,0 @@
--- termix-identity 0001: adopt_termix_identity_tables
--- Generated by termix-plugin migrations. Review before committing.
--- Hand-edited: keeps the legacy foreign keys the SDK cannot declare
--- (keys and ca to their identity, keys to ssh_credentials).
-
-CREATE TABLE IF NOT EXISTS "termix_identities" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL UNIQUE,
-  "handle" varchar(255) NOT NULL UNIQUE,
-  "description" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "termix_identities" RENAME TO "p_termix_identity_identities";
-CREATE TABLE IF NOT EXISTS "termix_identity_keys" (
-  "id" serial PRIMARY KEY,
-  "identity_id" integer NOT NULL,
-  "user_id" varchar(255) NOT NULL,
-  "public_key" text NOT NULL,
-  "key_type" text NOT NULL,
-  "algorithm" text NOT NULL,
-  "label" text,
-  "comment" text,
-  "source" text NOT NULL DEFAULT 'manual',
-  "credential_id" integer,
-  "enabled" boolean NOT NULL DEFAULT true,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("identity_id") REFERENCES "p_termix_identity_identities" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("credential_id") REFERENCES "ssh_credentials" ("id") ON DELETE SET NULL
-);
-CREATE INDEX IF NOT EXISTS "idx_termix_identity_keys_identity" ON "termix_identity_keys" ("identity_id");
-ALTER TABLE "termix_identity_keys" RENAME TO "p_termix_identity_keys";
-CREATE TABLE IF NOT EXISTS "termix_identity_ca" (
-  "id" serial PRIMARY KEY,
-  "identity_id" integer NOT NULL UNIQUE,
-  "user_id" varchar(255) NOT NULL,
-  "public_key" text NOT NULL,
-  "private_key" text NOT NULL,
-  "validity_days" integer NOT NULL DEFAULT 90,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("identity_id") REFERENCES "p_termix_identity_identities" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "termix_identity_ca" RENAME TO "p_termix_identity_ca";
diff --git a/plugins/termix-identity/migrations/snapshot.json b/plugins/termix-identity/migrations/snapshot.json
deleted file mode 100644
index f43444a92..000000000
--- a/plugins/termix-identity/migrations/snapshot.json
+++ /dev/null
@@ -1,146 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "identities": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true,
-          "unique": true
-        },
-        "handle": {
-          "type": "varchar",
-          "length": 255,
-          "notNull": true,
-          "unique": true
-        },
-        "description": {
-          "type": "text"
-        },
-        "createdAt": {
-          "type": "text",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "updatedAt": {
-          "type": "text",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [],
-      "adopts": "termix_identities"
-    },
-    "keys": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "identityId": {
-          "type": "integer",
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "publicKey": {
-          "type": "text",
-          "notNull": true
-        },
-        "keyType": {
-          "type": "text",
-          "notNull": true
-        },
-        "algorithm": {
-          "type": "text",
-          "notNull": true
-        },
-        "label": {
-          "type": "text"
-        },
-        "comment": {
-          "type": "text"
-        },
-        "source": {
-          "type": "text",
-          "notNull": true,
-          "defaultValue": "manual"
-        },
-        "credentialId": {
-          "type": "integer"
-        },
-        "enabled": {
-          "type": "boolean",
-          "notNull": true,
-          "defaultValue": true
-        },
-        "createdAt": {
-          "type": "text",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_termix_identity_keys_identity",
-          "columns": ["identityId"]
-        }
-      ],
-      "adopts": "termix_identity_keys"
-    },
-    "ca": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "identityId": {
-          "type": "integer",
-          "notNull": true,
-          "unique": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "publicKey": {
-          "type": "text",
-          "notNull": true
-        },
-        "privateKey": {
-          "type": "text",
-          "notNull": true
-        },
-        "validityDays": {
-          "type": "integer",
-          "notNull": true,
-          "defaultValue": 90
-        },
-        "createdAt": {
-          "type": "text",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "updatedAt": {
-          "type": "text",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [],
-      "adopts": "termix_identity_ca"
-    }
-  }
-}
diff --git a/plugins/termix-identity/migrations/sqlite/0001_adopt_termix_identity_tables.sql b/plugins/termix-identity/migrations/sqlite/0001_adopt_termix_identity_tables.sql
deleted file mode 100644
index 21d455d01..000000000
--- a/plugins/termix-identity/migrations/sqlite/0001_adopt_termix_identity_tables.sql
+++ /dev/null
@@ -1,47 +0,0 @@
--- termix-identity 0001: adopt_termix_identity_tables
--- Generated by termix-plugin migrations. Review before committing.
--- Hand-edited: keeps the legacy foreign keys the SDK cannot declare
--- (keys and ca to their identity, keys to ssh_credentials).
-
-CREATE TABLE IF NOT EXISTS "termix_identities" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL UNIQUE,
-  "handle" text NOT NULL UNIQUE,
-  "description" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "termix_identities" RENAME TO "p_termix_identity_identities";
-CREATE TABLE IF NOT EXISTS "termix_identity_keys" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "identity_id" integer NOT NULL,
-  "user_id" text NOT NULL,
-  "public_key" text NOT NULL,
-  "key_type" text NOT NULL,
-  "algorithm" text NOT NULL,
-  "label" text,
-  "comment" text,
-  "source" text NOT NULL DEFAULT 'manual',
-  "credential_id" integer,
-  "enabled" integer NOT NULL DEFAULT 1,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("identity_id") REFERENCES "p_termix_identity_identities" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("credential_id") REFERENCES "ssh_credentials" ("id") ON DELETE SET NULL
-);
-CREATE INDEX IF NOT EXISTS "idx_termix_identity_keys_identity" ON "termix_identity_keys" ("identity_id");
-ALTER TABLE "termix_identity_keys" RENAME TO "p_termix_identity_keys";
-CREATE TABLE IF NOT EXISTS "termix_identity_ca" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "identity_id" integer NOT NULL UNIQUE,
-  "user_id" text NOT NULL,
-  "public_key" text NOT NULL,
-  "private_key" text NOT NULL,
-  "validity_days" integer NOT NULL DEFAULT 90,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("identity_id") REFERENCES "p_termix_identity_identities" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "termix_identity_ca" RENAME TO "p_termix_identity_ca";
diff --git a/plugins/termix-identity/package.json b/plugins/termix-identity/package.json
deleted file mode 100644
index 525715d19..000000000
--- a/plugins/termix-identity/package.json
+++ /dev/null
@@ -1,34 +0,0 @@
-{
-  "name": "@termix-plugin/termix-identity",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "lucide-react": "^1.33.0"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "react": "^19.2.8",
-    "sonner": "^2.0.8",
-    "ssh2": "^1.17.0"
-  }
-}
diff --git a/plugins/termix-identity/src/backend/certificate.ts b/plugins/termix-identity/src/backend/certificate.ts
deleted file mode 100644
index a6940e0ec..000000000
--- a/plugins/termix-identity/src/backend/certificate.ts
+++ /dev/null
@@ -1,145 +0,0 @@
-import crypto from "crypto";
-
-// Minimal OpenSSH ed25519 user-certificate signer + per-user CA generation.
-// Implemented in pure Node so we never shell out or move private keys to disk.
-// Format reference: PROTOCOL.certkeys (ssh-ed25519-cert-v01@openssh.com).
-
-const ED25519 = "ssh-ed25519";
-const CERT_TYPE = "ssh-ed25519-cert-v01@openssh.com";
-const SSH2_CERT_TYPE_USER = 1;
-
-// Standard login extensions OpenSSH grants by default; must be name-sorted.
-const DEFAULT_EXTENSIONS = [
-  "permit-X11-forwarding",
-  "permit-agent-forwarding",
-  "permit-port-forwarding",
-  "permit-pty",
-  "permit-user-rc",
-];
-
-// --- SSH wire-format primitives -------------------------------------------
-
-function sshString(value: Buffer | string): Buffer {
-  const buf = typeof value === "string" ? Buffer.from(value, "utf8") : value;
-  const len = Buffer.alloc(4);
-  len.writeUInt32BE(buf.length, 0);
-  return Buffer.concat([len, buf]);
-}
-
-function sshUint32(n: number): Buffer {
-  const b = Buffer.alloc(4);
-  b.writeUInt32BE(n >>> 0, 0);
-  return b;
-}
-
-function sshUint64(n: bigint): Buffer {
-  const b = Buffer.alloc(8);
-  b.writeBigUInt64BE(n, 0);
-  return b;
-}
-
-function ed25519PublicBlob(raw32: Buffer): Buffer {
-  return Buffer.concat([sshString(ED25519), sshString(raw32)]);
-}
-
-/** Extract the 32-byte raw ed25519 key from an `ssh-ed25519 <base64>` line. */
-export function ed25519RawFromLine(line: string): Buffer | null {
-  const parts = line.trim().split(/\s+/);
-  if (parts[0] !== ED25519 || !parts[1]) return null;
-  let blob: Buffer;
-  try {
-    blob = Buffer.from(parts[1], "base64");
-  } catch {
-    return null;
-  }
-  try {
-    let off = 0;
-    const typeLen = blob.readUInt32BE(off);
-    off += 4;
-    if (blob.toString("utf8", off, off + typeLen) !== ED25519) return null;
-    off += typeLen;
-    const keyLen = blob.readUInt32BE(off);
-    off += 4;
-    const pk = blob.subarray(off, off + keyLen);
-    return pk.length === 32 ? pk : null;
-  } catch {
-    return null;
-  }
-}
-
-// --- CA generation ---------------------------------------------------------
-
-export interface GeneratedCa {
-  publicKeyLine: string; // "ssh-ed25519 <base64>"
-  privateKeyPem: string; // PKCS#8 PEM (to be stored encrypted)
-}
-
-export function generateCa(): GeneratedCa {
-  const { publicKey, privateKey } = crypto.generateKeyPairSync("ed25519");
-  const jwk = publicKey.export({ format: "jwk" }) as { x: string };
-  const raw = Buffer.from(jwk.x, "base64url");
-  const publicKeyLine = `${ED25519} ${ed25519PublicBlob(raw).toString("base64")}`;
-  const privateKeyPem = privateKey
-    .export({ format: "pem", type: "pkcs8" })
-    .toString();
-  return { publicKeyLine, privateKeyPem };
-}
-
-// --- Certificate signing ---------------------------------------------------
-
-export interface SignCertOptions {
-  userPublicKeyLine: string; // ed25519 public key to certify
-  caPrivateKeyPem: string;
-  caPublicKeyLine: string;
-  keyId: string;
-  principals: string[]; // empty = valid for all usernames
-  validAfter: number; // unix seconds
-  validBefore: number; // unix seconds
-  serial?: bigint;
-}
-
-/**
- * Sign an ed25519 user public key into an OpenSSH user certificate.
- * Returns the certificate line, or null if the inputs aren't ed25519.
- */
-export function signUserCertificate(opts: SignCertOptions): string | null {
-  const pk = ed25519RawFromLine(opts.userPublicKeyLine);
-  const caRaw = ed25519RawFromLine(opts.caPublicKeyLine);
-  if (!pk || !caRaw) return null;
-
-  const signatureKey = ed25519PublicBlob(caRaw);
-  const principals = Buffer.concat(opts.principals.map((p) => sshString(p)));
-  const extensions = Buffer.concat(
-    [...DEFAULT_EXTENSIONS]
-      .sort()
-      .map((name) => Buffer.concat([sshString(name), sshString("")])),
-  );
-
-  // Everything up to (not including) the signature: this is what gets signed.
-  const body = Buffer.concat([
-    sshString(CERT_TYPE),
-    sshString(crypto.randomBytes(32)), // nonce
-    sshString(pk),
-    sshUint64(opts.serial ?? 0n),
-    sshUint32(SSH2_CERT_TYPE_USER),
-    sshString(opts.keyId),
-    sshString(principals),
-    sshUint64(BigInt(opts.validAfter)),
-    sshUint64(BigInt(opts.validBefore)),
-    sshString(Buffer.alloc(0)), // critical options (none)
-    sshString(extensions),
-    sshString(Buffer.alloc(0)), // reserved
-    sshString(signatureKey),
-  ]);
-
-  const caKey = crypto.createPrivateKey({
-    key: opts.caPrivateKeyPem,
-    format: "pem",
-    type: "pkcs8",
-  });
-  const rawSig = crypto.sign(null, body, caKey); // ed25519 -> 64 bytes
-  const signature = Buffer.concat([sshString(ED25519), sshString(rawSig)]);
-
-  const cert = Buffer.concat([body, sshString(signature)]);
-  return `${CERT_TYPE} ${cert.toString("base64")} ${opts.keyId}`;
-}
diff --git a/plugins/termix-identity/src/backend/handles.ts b/plugins/termix-identity/src/backend/handles.ts
deleted file mode 100644
index a492000b9..000000000
--- a/plugins/termix-identity/src/backend/handles.ts
+++ /dev/null
@@ -1,69 +0,0 @@
-/** A GitHub-like public namespace: lowercase, starts alphanumeric, 1-39 chars. */
-export const HANDLE_REGEX = /^[a-z0-9][a-z0-9_-]{0,38}$/;
-
-const RESERVED_HANDLES = new Set(["u", "me", "keys", "check", "admin", "api"]);
-
-const MAX_DESCRIPTION_LENGTH = 500;
-
-export function isValidHandle(handle: string): boolean {
-  return HANDLE_REGEX.test(handle) && !RESERVED_HANDLES.has(handle);
-}
-
-export function cleanDescription(value: unknown): string | null {
-  if (typeof value !== "string") return null;
-  return value.trim().slice(0, MAX_DESCRIPTION_LENGTH) || null;
-}
-
-export function cleanLabel(value: unknown): string | null {
-  return typeof value === "string" ? value.trim() || null : null;
-}
-
-/** Validity in days: a positive whole number, at most ten years. */
-export function clampValidityDays(value: unknown, fallback: number): number {
-  const days = Number(value);
-  if (!Number.isFinite(days) || days <= 0) return fallback;
-  return Math.min(Math.floor(days), 3650);
-}
-
-interface DbError {
-  code?: string;
-  errno?: number;
-  message?: string;
-  cause?: unknown;
-}
-
-function errorChain(error: unknown): DbError[] {
-  const chain: DbError[] = [];
-  let current = error as DbError | undefined;
-  while (current && typeof current === "object" && chain.length < 5) {
-    chain.push(current);
-    current = current.cause as DbError | undefined;
-  }
-  return chain;
-}
-
-/** A UNIQUE violation on sqlite, Postgres or MySQL. */
-export function isUniqueViolation(error: unknown): boolean {
-  return errorChain(error).some(
-    (entry) =>
-      entry.code === "SQLITE_CONSTRAINT_UNIQUE" ||
-      entry.code === "23505" ||
-      entry.code === "ER_DUP_ENTRY" ||
-      entry.errno === 1062 ||
-      (typeof entry.message === "string" &&
-        entry.message.includes("UNIQUE constraint failed")),
-  );
-}
-
-/** Whether a UNIQUE violation was on user_id (one handle per user) rather than the handle. */
-export function isUserIdViolation(error: unknown): boolean {
-  return errorChain(error).some(
-    (entry) =>
-      typeof entry.message === "string" &&
-      (entry.message.includes("user_id") || entry.message.includes("userId")),
-  );
-}
-
-export function asError(error: unknown): Error {
-  return error instanceof Error ? error : new Error(String(error));
-}
diff --git a/plugins/termix-identity/src/backend/index.ts b/plugins/termix-identity/src/backend/index.ts
deleted file mode 100644
index 223fb2085..000000000
--- a/plugins/termix-identity/src/backend/index.ts
+++ /dev/null
@@ -1,20 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { ca, identities, keys } from "./tables.js";
-import { createStore } from "./store.js";
-import { PUBLIC_PATHS } from "./resolver.js";
-import { registerRoutes } from "./routes.js";
-
-export async function activate(ctx: PluginContext) {
-  const store = createStore(ctx, {
-    identities: await ctx.db.define(identities),
-    keys: await ctx.db.define(keys),
-    ca: await ctx.db.define(ca),
-  });
-
-  registerRoutes(ctx, ctx.http.router<Router>({ public: PUBLIC_PATHS }), store);
-}
-
-export async function deactivate() {
-  // Everything above was registered through ctx and is disposed by core.
-}
diff --git a/plugins/termix-identity/src/backend/keys.ts b/plugins/termix-identity/src/backend/keys.ts
deleted file mode 100644
index e19b77a6c..000000000
--- a/plugins/termix-identity/src/backend/keys.ts
+++ /dev/null
@@ -1,89 +0,0 @@
-// Pure, dependency-free helpers for SSH public-key parsing/classification used
-// by the Termix Identity plugin.
-
-// Upper bound on an accepted public-key line. Public keys are tiny (an RSA-4096
-// line is ~720 chars); this caps the value the unauthenticated resolver later
-// streams, preventing a multi-MB blob being stored and amplified.
-export const MAX_PUBLIC_KEY_LENGTH = 8192;
-
-// Normalized algorithm groups, used both for storage and for the `/<ALGO>`
-// resolver filter (mirrors sshid.io's RSA/ED25519/ECDSA suffixes).
-export const ALGO_GROUPS: Record<string, string> = {
-  "ssh-rsa": "RSA",
-  "rsa-sha2-256": "RSA",
-  "rsa-sha2-512": "RSA",
-  "ssh-dss": "DSA",
-  "ssh-ed25519": "ED25519",
-  "sk-ssh-ed25519@openssh.com": "ED25519-SK",
-  "ecdsa-sha2-nistp256": "ECDSA",
-  "ecdsa-sha2-nistp384": "ECDSA",
-  "ecdsa-sha2-nistp521": "ECDSA",
-  "sk-ecdsa-sha2-nistp256@openssh.com": "ECDSA-SK",
-};
-
-export function classifyAlgo(type: string): string {
-  if (ALGO_GROUPS[type]) return ALGO_GROUPS[type];
-  if (type.startsWith("ecdsa-")) return "ECDSA";
-  if (type.includes("ed25519")) return "ED25519";
-  if (type.includes("rsa")) return "RSA";
-  if (type.includes("dss") || type.includes("dsa")) return "DSA";
-  return type.toUpperCase();
-}
-
-export interface ParsedPublicKey {
-  type: string;
-  algorithm: string;
-  comment: string;
-  normalized: string; // "<type> <base64blob>"
-}
-
-/**
- * Parse and validate a single OpenSSH public key line. Returns null when the
- * input is not a well-formed public key.
- */
-export function parsePublicKey(
-  raw: string | null | undefined,
-): ParsedPublicKey | null {
-  if (typeof raw !== "string") return null;
-  if (raw.length > MAX_PUBLIC_KEY_LENGTH) return null;
-  const line = raw.trim().replace(/\s+/g, " ");
-  if (!line) return null;
-
-  const parts = line.split(" ");
-  if (parts.length < 2) return null;
-
-  const [type, blob, ...rest] = parts;
-  if (!/^[A-Za-z0-9@.-]+$/.test(type)) return null;
-  if (!/^[A-Za-z0-9+/]+={0,2}$/.test(blob)) return null;
-
-  const decoded = Buffer.from(blob, "base64");
-  // The blob is an SSH wire-format string whose first field repeats the type.
-  if (decoded.length < 8) return null;
-  try {
-    const len = decoded.readUInt32BE(0);
-    if (len <= 0 || len > 64 || 4 + len > decoded.length) return null;
-    const embeddedType = decoded.toString("utf8", 4, 4 + len);
-    if (embeddedType !== type) return null;
-  } catch {
-    return null;
-  }
-
-  return {
-    type,
-    algorithm: classifyAlgo(type),
-    comment: rest.join(" "),
-    normalized: `${type} ${blob}`,
-  };
-}
-
-/**
- * Whether a key's normalized algorithm group matches a `/<ALGO>` resolver
- * filter. Exact match only: `ED25519` must NOT also return `ED25519-SK`.
- */
-export function matchesAlgoFilter(
-  algorithm: string,
-  filter: string | null,
-): boolean {
-  if (!filter) return true;
-  return algorithm.toUpperCase() === filter.toUpperCase();
-}
diff --git a/plugins/termix-identity/src/backend/resolver.ts b/plugins/termix-identity/src/backend/resolver.ts
deleted file mode 100644
index 601a61133..000000000
--- a/plugins/termix-identity/src/backend/resolver.ts
+++ /dev/null
@@ -1,173 +0,0 @@
-import type { Request, Response } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { HANDLE_REGEX, asError } from "./handles.js";
-import { matchesAlgoFilter } from "./keys.js";
-import type { KeyRow, Store } from "./store.js";
-
-/**
- * The resolver needs no login: servers fetch it from scripts. Paths are
- * relative to /plugin-api/termix-identity/.
- */
-export const PUBLIC_PATHS = ["/u/:handle", "/u/:handle/:algo"];
-
-/** The public resolver path for a handle, below the base URL. */
-export function resolverPath(handle: string): string {
-  return `/plugin-api/termix-identity/u/${handle}`;
-}
-
-// A disabled or removed key must not keep being served by a cache, and the
-// feed stays out of search indexes. Set on every response, 404s included.
-function setResolverHeaders(res: Response) {
-  res.setHeader("Cache-Control", "no-store, max-age=0");
-  res.setHeader("X-Robots-Tag", "noindex, nofollow");
-}
-
-function notFound(res: Response, body = "Not found\n") {
-  return res.status(404).type("text/plain").send(body);
-}
-
-export function escapeHtml(value: string): string {
-  return value
-    .replace(/&/g, "&amp;")
-    .replace(/</g, "&lt;")
-    .replace(/>/g, "&gt;")
-    .replace(/"/g, "&quot;")
-    .replace(/'/g, "&#39;");
-}
-
-export function renderHtml(
-  handle: string,
-  keys: Array<Pick<KeyRow, "algorithm" | "publicKey">>,
-  resolverUrl: string,
-): string {
-  const keyRows = keys.length
-    ? keys
-        .map(
-          (key) =>
-            `<div class="key"><span class="algo">${escapeHtml(
-              key.algorithm,
-            )}</span><code>${escapeHtml(key.publicKey)}</code></div>`,
-        )
-        .join("")
-    : `<p class="empty">No public keys published yet.</p>`;
-
-  // A standalone page, not the React app, so the dark theme is inlined.
-  return `<!doctype html>
-<html lang="en">
-<head>
-<meta charset="utf-8" />
-<meta name="viewport" content="width=device-width, initial-scale=1" />
-<meta name="robots" content="noindex, nofollow" />
-<meta name="color-scheme" content="dark" />
-<title>Termix ID @${escapeHtml(handle)}</title>
-<style>
-  :root {
-    --bg: #0c0d0b; --panel: #141614; --panel-2: #181a17; --border: rgba(255,255,255,.12);
-    --fg: #f8f8f6; --muted: #8f9189; --accent: #f59145;
-  }
-  * { box-sizing: border-box; }
-  body { margin: 0; background: var(--bg); color: var(--fg); line-height: 1.5;
-         font-family: ui-sans-serif, system-ui, -apple-system, Segoe UI, Roboto, sans-serif; }
-  .wrap { max-width: 820px; margin: 0 auto; padding: 32px 16px 48px; }
-  .card { background: var(--panel); border: 1px solid var(--border); }
-  header.card { padding: 16px 18px; display: flex; align-items: center; gap: 10px; }
-  h1 { font-size: 1.05rem; font-weight: 700; margin: 0; letter-spacing: .02em; color: var(--fg); }
-  h1 .handle { color: var(--accent); }
-  .label { font-size: 10px; font-weight: 700; letter-spacing: .18em; text-transform: uppercase;
-           color: var(--muted); margin: 22px 0 8px; }
-  pre.cmd { margin: 0; background: var(--panel-2); border: 1px solid var(--border); color: var(--muted);
-            padding: 12px 14px; overflow-x: auto; font-size: 12px;
-            font-family: ui-monospace, SFMono-Regular, Menlo, monospace; }
-  .keys { display: flex; flex-direction: column; gap: 8px; }
-  .key { background: var(--panel); border: 1px solid var(--border); padding: 10px 12px;
-         display: flex; align-items: center; gap: 10px; overflow-x: auto; }
-  .algo { flex: 0 0 auto; font-size: 10px; font-weight: 700; letter-spacing: .06em; text-transform: uppercase;
-          color: var(--accent); border: 1px solid rgba(245,145,69,.4); padding: 1px 5px; line-height: 1.4; }
-  code { white-space: pre; word-break: break-all; font-size: 12px; color: var(--muted);
-         font-family: ui-monospace, SFMono-Regular, Menlo, monospace; }
-  .empty { color: var(--muted); font-size: 13px; }
-  footer { margin-top: 28px; color: var(--muted); font-size: 11px; letter-spacing: .04em; }
-</style>
-</head>
-<body>
-  <div class="wrap">
-    <header class="card">
-      <h1>Termix ID <span class="handle">@${escapeHtml(handle)}</span></h1>
-    </header>
-
-    <div class="label">Provision a server</div>
-    <pre class="cmd">curl -fsSL ${escapeHtml(resolverUrl)} &gt;&gt; ~/.ssh/authorized_keys</pre>
-
-    <div class="label">Published keys</div>
-    <div class="keys">${keyRows}</div>
-
-    <footer>Served by Termix</footer>
-  </div>
-</body>
-</html>`;
-}
-
-export function createResolver(ctx: PluginContext, store: Store) {
-  const handleOf = (req: Request) =>
-    String(req.params.handle || "").toLowerCase();
-
-  /** authorized_keys as text, or a small viewer for browsers. */
-  async function keys(req: Request, res: Response) {
-    setResolverHeaders(res);
-    const handle = handleOf(req);
-    if (!HANDLE_REGEX.test(handle)) return notFound(res);
-    const algoFilter = req.params.algo
-      ? String(req.params.algo).toUpperCase()
-      : null;
-
-    try {
-      const identity = await store.identityByHandle(handle);
-      if (!identity) return notFound(res);
-
-      const published = (await store.enabledKeys(identity.id)).filter((key) =>
-        matchesAlgoFilter(key.algorithm, algoFilter),
-      );
-
-      if ((req.headers.accept || "").includes("text/html")) {
-        res.setHeader("Content-Type", "text/html; charset=utf-8");
-        return res.send(
-          renderHtml(
-            handle,
-            published,
-            `${ctx.http.baseUrl(req)}${resolverPath(handle)}`,
-          ),
-        );
-      }
-
-      const body = published
-        .map((key) => `${key.publicKey} #termix-id @${handle}`)
-        .join("\n");
-      res.setHeader("Content-Type", "text/plain; charset=utf-8");
-      return res.send(body ? `${body}\n` : "");
-    } catch (error) {
-      ctx.log.error("Termix ID resolve failed", asError(error));
-      return res.status(500).type("text/plain").send("Internal Server Error\n");
-    }
-  }
-
-  /** The CA public key, for TrustedUserCAKeys or an @cert-authority line. */
-  async function caKey(req: Request, res: Response) {
-    setResolverHeaders(res);
-    const handle = handleOf(req);
-    if (!HANDLE_REGEX.test(handle)) return notFound(res);
-
-    try {
-      const identity = await store.identityByHandle(handle);
-      if (!identity) return notFound(res);
-      const ca = await store.caForIdentity(identity.id);
-      if (!ca) return notFound(res, "No CA configured\n");
-      res.setHeader("Content-Type", "text/plain; charset=utf-8");
-      return res.send(`${ca.publicKey} termix-id-ca@${handle}\n`);
-    } catch (error) {
-      ctx.log.error("Termix ID CA resolve failed", asError(error));
-      return res.status(500).type("text/plain").send("Internal Server Error\n");
-    }
-  }
-
-  return { keys, caKey };
-}
diff --git a/plugins/termix-identity/src/backend/routes.ts b/plugins/termix-identity/src/backend/routes.ts
deleted file mode 100644
index 2617d60da..000000000
--- a/plugins/termix-identity/src/backend/routes.ts
+++ /dev/null
@@ -1,987 +0,0 @@
-import type { Request, Response, Router } from "express";
-// ssh2 is CommonJS and its `utils` named export is not visible to ESM, so it
-// is read off the default import.
-import ssh2 from "ssh2";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { parsePublicKey } from "./keys.js";
-import {
-  ed25519RawFromLine,
-  generateCa,
-  signUserCertificate,
-} from "./certificate.js";
-import {
-  asError,
-  clampValidityDays,
-  cleanDescription,
-  cleanLabel,
-  isUniqueViolation,
-  isUserIdViolation,
-  isValidHandle,
-} from "./handles.js";
-import { createResolver, resolverPath } from "./resolver.js";
-import type { IdentityRow, Store } from "./store.js";
-
-const ALREADY_HAVE_ONE =
-  "You already have a Termix ID. Use update to rename it.";
-
-function parseId(value: unknown): number | null {
-  const id = Number.parseInt(String(value), 10);
-  return Number.isInteger(id) && id > 0 ? id : null;
-}
-
-export function registerRoutes(
-  ctx: PluginContext,
-  router: Router,
-  store: Store,
-): void {
-  const resolver = createResolver(ctx, store);
-
-  const userId = () => {
-    const actor = ctx.currentActor();
-    if (!actor) throw new Error("No acting user");
-    return actor;
-  };
-
-  const withUrls = (req: Request, handle: string, suffix = "") => {
-    const path = `${resolverPath(handle)}${suffix}`;
-    return {
-      resolverPath: path,
-      resolverUrl: `${ctx.http.baseUrl(req)}${path}`,
-    };
-  };
-
-  const fail = (res: Response, message: string, error: unknown) => {
-    ctx.log.error(message, asError(error));
-    res.status(500).json({ error: message });
-  };
-
-  /**
-   * @openapi
-   * /plugin-api/termix-identity/u/{handle}/ca:
-   *   get:
-   *     summary: Public CA key for a handle
-   *     description: Public. The certificate authority's public key, for TrustedUserCAKeys or an @cert-authority line. The 2.8 URL /termix-id/u/{handle}/ca redirects here.
-   *     tags: [Termix ID]
-   *     parameters:
-   *       - in: path
-   *         name: handle
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: The CA public key as text.
-   *       404:
-   *         description: No such handle, or it has no CA.
-   */
-  router.get("/u/:handle/ca", resolver.caKey);
-
-  /**
-   * @openapi
-   * /plugin-api/termix-identity/u/{handle}:
-   *   get:
-   *     summary: Published keys for a handle
-   *     description: Public. authorized_keys lines for every enabled key, or an HTML viewer when the client accepts text/html. Never cached. The 2.8 URL /termix-id/u/{handle} redirects here.
-   *     tags: [Termix ID]
-   *     parameters:
-   *       - in: path
-   *         name: handle
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: The keys as text or HTML.
-   *       404:
-   *         description: No such handle.
-   */
-  router.get("/u/:handle", resolver.keys);
-
-  /**
-   * @openapi
-   * /plugin-api/termix-identity/u/{handle}/{algo}:
-   *   get:
-   *     summary: Published keys of one algorithm for a handle
-   *     description: Public. Like /u/{handle}, keeping only keys whose algorithm group matches (RSA, ED25519, ECDSA and so on). The 2.8 URL /termix-id/u/{handle}/{algo} redirects here.
-   *     tags: [Termix ID]
-   *     parameters:
-   *       - in: path
-   *         name: handle
-   *         required: true
-   *         schema:
-   *           type: string
-   *       - in: path
-   *         name: algo
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: The matching keys as text or HTML.
-   *       404:
-   *         description: No such handle.
-   */
-  router.get("/u/:handle/:algo", resolver.keys);
-
-  // Everything below needs a signed-in user holding termix-identity.use.
-  router.use(ctx.rbac.require("use") as never);
-
-  /**
-   * @openapi
-   * /plugin-api/termix-identity/me:
-   *   get:
-   *     summary: Get the current user's Termix ID and keys
-   *     tags: [Termix ID]
-   *     security:
-   *       - bearerAuth: []
-   *     responses:
-   *       200:
-   *         description: Identity and keys (identity may be null)
-   */
-  router.get("/me", async (req, res) => {
-    try {
-      const identity = await store.identityForUser(userId());
-      if (!identity) return res.json({ identity: null, keys: [] });
-      res.json({
-        identity: { ...identity, ...withUrls(req, identity.handle) },
-        keys: await store.keysForIdentity(identity.id),
-      });
-    } catch (error) {
-      fail(res, "Failed to fetch Termix ID", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/termix-identity/check/{handle}:
-   *   get:
-   *     summary: Check if a handle is available
-   *     tags: [Termix ID]
-   *     security:
-   *       - bearerAuth: []
-   *     parameters:
-   *       - in: path
-   *         name: handle
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: Availability and validity status
-   */
-  router.get("/check/:handle", async (req, res) => {
-    const handle = String(req.params.handle || "").toLowerCase();
-    if (!isValidHandle(handle)) {
-      return res.json({ available: false, valid: false });
-    }
-    try {
-      res.json({
-        available: !(await store.isHandleTaken(handle)),
-        valid: true,
-      });
-    } catch (error) {
-      fail(res, "Failed to check handle", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/termix-identity:
-   *   post:
-   *     summary: Create a Termix ID
-   *     tags: [Termix ID]
-   *     security:
-   *       - bearerAuth: []
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required: [handle]
-   *             properties:
-   *               handle:
-   *                 type: string
-   *               description:
-   *                 type: string
-   *     responses:
-   *       201:
-   *         description: Created identity
-   *       400:
-   *         description: Invalid handle
-   *       409:
-   *         description: Handle taken or user already has an identity
-   */
-  router.post("/", async (req, res) => {
-    const handle = String(req.body?.handle || "").toLowerCase();
-    if (!isValidHandle(handle)) {
-      return res.status(400).json({ error: "Invalid handle" });
-    }
-    try {
-      const owner = userId();
-      if (await store.identityForUser(owner)) {
-        return res.status(409).json({ error: ALREADY_HAVE_ONE });
-      }
-      if (await store.isHandleTaken(handle)) {
-        return res.status(409).json({ error: "Handle already taken" });
-      }
-      const identity = await store.createIdentity({
-        userId: owner,
-        handle,
-        description: cleanDescription(req.body?.description),
-      });
-      await ctx.audit.record({
-        action: "create_termix_id",
-        resourceType: "termix_id",
-        resourceId: String(identity.id),
-        resourceName: handle,
-        success: true,
-      });
-      res.status(201).json(identity);
-    } catch (error) {
-      // The checks above race a double submit; the UNIQUE constraints on
-      // handle and user_id are the real guard.
-      if (isUniqueViolation(error)) {
-        return res.status(409).json({
-          error: isUserIdViolation(error)
-            ? ALREADY_HAVE_ONE
-            : "Handle already taken",
-        });
-      }
-      fail(res, "Failed to create Termix ID", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/termix-identity:
-   *   put:
-   *     summary: Update Termix ID handle or description
-   *     tags: [Termix ID]
-   *     security:
-   *       - bearerAuth: []
-   *     requestBody:
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               handle:
-   *                 type: string
-   *               description:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Updated identity
-   *       404:
-   *         description: No Termix ID
-   *       409:
-   *         description: Handle taken
-   */
-  router.put("/", async (req, res) => {
-    try {
-      const owner = userId();
-      const identity = await store.identityForUser(owner);
-      if (!identity)
-        return res.status(404).json({ error: "No Termix ID found" });
-
-      const update: { handle?: string; description?: string | null } = {};
-      if (req.body?.handle !== undefined) {
-        const handle = String(req.body.handle || "").toLowerCase();
-        if (!isValidHandle(handle)) {
-          return res.status(400).json({ error: "Invalid handle" });
-        }
-        if (handle !== identity.handle && (await store.isHandleTaken(handle))) {
-          return res.status(409).json({ error: "Handle already taken" });
-        }
-        update.handle = handle;
-      }
-      if (req.body?.description !== undefined) {
-        update.description = cleanDescription(req.body.description);
-      }
-
-      const updated = await store.updateIdentity(owner, update);
-      await ctx.audit.record({
-        action: "update_termix_id",
-        resourceType: "termix_id",
-        resourceId: String(identity.id),
-        resourceName: updated?.handle ?? identity.handle,
-        details:
-          update.handle && update.handle !== identity.handle
-            ? `renamed ${identity.handle} -> ${update.handle}`
-            : undefined,
-        success: true,
-      });
-      res.json(updated);
-    } catch (error) {
-      if (isUniqueViolation(error)) {
-        return res.status(409).json({ error: "Handle already taken" });
-      }
-      fail(res, "Failed to update Termix ID", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/termix-identity:
-   *   delete:
-   *     summary: Delete Termix ID with its keys and CA
-   *     tags: [Termix ID]
-   *     security:
-   *       - bearerAuth: []
-   *     responses:
-   *       200:
-   *         description: Deleted
-   *       404:
-   *         description: No Termix ID
-   */
-  router.delete("/", async (_req, res) => {
-    try {
-      const identity = await store.identityForUser(userId());
-      if (!identity)
-        return res.status(404).json({ error: "No Termix ID found" });
-      await store.deleteIdentity(identity);
-      await ctx.audit.record({
-        action: "delete_termix_id",
-        resourceType: "termix_id",
-        resourceId: String(identity.id),
-        resourceName: identity.handle,
-        success: true,
-      });
-      res.json({ success: true });
-    } catch (error) {
-      fail(res, "Failed to delete Termix ID", error);
-    }
-  });
-
-  const needIdentity = async (res: Response): Promise<IdentityRow | null> => {
-    const identity = await store.identityForUser(userId());
-    if (!identity) {
-      res
-        .status(400)
-        .json({ error: "Create a Termix ID handle before adding keys" });
-    }
-    return identity;
-  };
-
-  /**
-   * @openapi
-   * /plugin-api/termix-identity/keys:
-   *   post:
-   *     summary: Publish a public key
-   *     description: Publishes a pasted key, or the public half of one of the user's saved SSH key credentials.
-   *     tags: [Termix ID]
-   *     security:
-   *       - bearerAuth: []
-   *     requestBody:
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               publicKey:
-   *                 type: string
-   *               credentialId:
-   *                 type: integer
-   *               label:
-   *                 type: string
-   *     responses:
-   *       201:
-   *         description: Published key
-   *       400:
-   *         description: No identity, or the key is invalid
-   *       404:
-   *         description: Credential not found
-   *       409:
-   *         description: Already published
-   */
-  router.post("/keys", async (req, res) => {
-    const credentialId =
-      req.body?.credentialId != null ? parseId(req.body.credentialId) : null;
-    try {
-      const identity = await needIdentity(res);
-      if (!identity) return;
-
-      let rawPublicKey: string | null = null;
-      let source = "manual";
-      let label = cleanLabel(req.body?.label);
-
-      if (credentialId) {
-        const credential = (await ctx.credentials.listSshKeys()).find(
-          (key) => key.id === credentialId,
-        );
-        if (!credential) {
-          return res.status(404).json({ error: "Credential not found" });
-        }
-        if (!credential.publicKey) {
-          return res.status(400).json({
-            error:
-              "This credential has no public key and one could not be derived. Paste the public key manually.",
-          });
-        }
-        source = "credential";
-        label = label || credential.name || null;
-        rawPublicKey = credential.publicKey;
-      } else if (typeof req.body?.publicKey === "string") {
-        rawPublicKey = req.body.publicKey;
-      }
-
-      const parsed = parsePublicKey(rawPublicKey);
-      if (!parsed) {
-        return res.status(400).json({ error: "Invalid SSH public key" });
-      }
-
-      const existing = await store.keysForIdentity(identity.id);
-      if (existing.some((key) => key.publicKey === parsed.normalized)) {
-        return res.status(409).json({ error: "This key is already published" });
-      }
-
-      const key = await store.createKey({
-        identityId: identity.id,
-        userId: identity.userId,
-        publicKey: parsed.normalized,
-        keyType: parsed.type,
-        algorithm: parsed.algorithm,
-        label,
-        comment: parsed.comment || null,
-        source,
-        credentialId: credentialId || null,
-      });
-      await ctx.audit.record({
-        action: "add_termix_id_key",
-        resourceType: "termix_id_key",
-        resourceId: String(key.id),
-        resourceName: identity.handle,
-        details: `${parsed.algorithm} (${source})`,
-        success: true,
-      });
-      res.status(201).json(key);
-    } catch (error) {
-      fail(res, "Failed to add key", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/termix-identity/keys/generate:
-   *   post:
-   *     summary: Generate a new key pair and publish the public key
-   *     description: The private key is returned once. With saveCredential (the default) the pair is also saved as an SSH key credential.
-   *     tags: [Termix ID]
-   *     security:
-   *       - bearerAuth: []
-   *     requestBody:
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               type:
-   *                 type: string
-   *                 enum: [ed25519, rsa]
-   *               label:
-   *                 type: string
-   *               saveCredential:
-   *                 type: boolean
-   *               username:
-   *                 type: string
-   *     responses:
-   *       201:
-   *         description: Generated key info with the private key (shown once)
-   */
-  router.post("/keys/generate", async (req, res) => {
-    const keyType = req.body?.type === "rsa" ? "rsa" : "ed25519";
-    const saveCredential = req.body?.saveCredential !== false;
-    const username =
-      typeof req.body?.username === "string" ? req.body.username.trim() : null;
-    try {
-      const identity = await needIdentity(res);
-      if (!identity) return;
-
-      const comment = `termix-${identity.handle}`;
-      const pair =
-        keyType === "rsa"
-          ? ssh2.utils.generateKeyPairSync("rsa", { bits: 4096, comment })
-          : ssh2.utils.generateKeyPairSync("ed25519", { comment });
-      const parsed = parsePublicKey(pair.public);
-      if (!parsed) {
-        return res.status(500).json({ error: "Key generation failed" });
-      }
-
-      // The published row only ever holds the public key; the pair goes to
-      // the user's encrypted credentials. Publish first so a failed save can
-      // be undone here, since the plugin cannot delete credentials.
-      const key = await store.createKey({
-        identityId: identity.id,
-        userId: identity.userId,
-        publicKey: parsed.normalized,
-        keyType: parsed.type,
-        algorithm: parsed.algorithm,
-        label: cleanLabel(req.body?.label) || `Generated ${parsed.algorithm}`,
-        comment: parsed.comment || null,
-        source: "generated",
-        credentialId: null,
-      });
-
-      let credentialId: number | null = null;
-      if (saveCredential) {
-        try {
-          ({ id: credentialId } = await ctx.credentials.createSshKey({
-            name: `Termix ID @${identity.handle} (${parsed.algorithm})`,
-            description: "Auto-generated by Termix ID",
-            username,
-            privateKey: pair.private,
-            publicKey: parsed.normalized,
-            keyType: parsed.type,
-          }));
-          await store.updateKey(identity.userId, key.id, { credentialId });
-        } catch (error) {
-          await store.deleteKey(identity.userId, key.id);
-          throw error;
-        }
-      }
-
-      await ctx.audit.record({
-        action: "generate_termix_id_key",
-        resourceType: "termix_id_key",
-        resourceId: String(key.id),
-        resourceName: identity.handle,
-        details: `${parsed.algorithm}${credentialId !== null ? " (saved to credentials)" : ""}`,
-        success: true,
-      });
-      res.status(201).json({
-        key: { ...key, credentialId },
-        privateKey: pair.private,
-        publicKey: parsed.normalized,
-        credentialId,
-      });
-    } catch (error) {
-      fail(res, "Failed to generate key", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/termix-identity/keys/{id}:
-   *   patch:
-   *     summary: Update key metadata (enabled state or label)
-   *     tags: [Termix ID]
-   *     security:
-   *       - bearerAuth: []
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               enabled:
-   *                 type: boolean
-   *               label:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Updated key
-   *       404:
-   *         description: Key not found
-   */
-  router.patch("/keys/:id", async (req, res) => {
-    const id = parseId(req.params.id);
-    if (!id) return res.status(400).json({ error: "Invalid key id" });
-    try {
-      const update: { enabled?: boolean; label?: string | null } = {};
-      if (req.body?.enabled !== undefined) update.enabled = !!req.body.enabled;
-      if (req.body?.label !== undefined)
-        update.label = cleanLabel(req.body.label);
-      const key = await store.updateKey(userId(), id, update);
-      if (!key) return res.status(404).json({ error: "Key not found" });
-      await ctx.audit.record({
-        action: "update_termix_id_key",
-        resourceType: "termix_id_key",
-        resourceId: String(id),
-        resourceName: key.label ?? key.algorithm,
-        details:
-          update.enabled !== undefined
-            ? `enabled: ${update.enabled}`
-            : "label updated",
-        success: true,
-      });
-      res.json(key);
-    } catch (error) {
-      fail(res, "Failed to update key", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/termix-identity/keys/{id}:
-   *   delete:
-   *     summary: Revoke and delete a published key
-   *     tags: [Termix ID]
-   *     security:
-   *       - bearerAuth: []
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Deleted
-   *       404:
-   *         description: Key not found
-   */
-  router.delete("/keys/:id", async (req, res) => {
-    const id = parseId(req.params.id);
-    if (!id) return res.status(400).json({ error: "Invalid key id" });
-    try {
-      const deleted = await store.deleteKey(userId(), id);
-      if (!deleted) return res.status(404).json({ error: "Key not found" });
-      await ctx.audit.record({
-        action: "delete_termix_id_key",
-        resourceType: "termix_id_key",
-        resourceId: String(id),
-        resourceName: deleted.algorithm,
-        success: true,
-      });
-      res.json({ success: true });
-    } catch (error) {
-      fail(res, "Failed to delete key", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/termix-identity/ca:
-   *   get:
-   *     summary: Get the current user's certificate authority
-   *     tags: [Termix ID]
-   *     security:
-   *       - bearerAuth: []
-   *     responses:
-   *       200:
-   *         description: CA info or null
-   */
-  router.get("/ca", async (req, res) => {
-    try {
-      const identity = await store.identityForUser(userId());
-      if (!identity) return res.json({ ca: null });
-      const ca = await store.caForIdentity(identity.id);
-      if (!ca) return res.json({ ca: null });
-      res.json({
-        ca: {
-          publicKey: ca.publicKey,
-          validityDays: ca.validityDays,
-          ...withUrls(req, identity.handle, "/ca"),
-        },
-      });
-    } catch (error) {
-      fail(res, "Failed to fetch CA", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/termix-identity/ca:
-   *   post:
-   *     summary: Create a certificate authority
-   *     tags: [Termix ID]
-   *     security:
-   *       - bearerAuth: []
-   *     requestBody:
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               validityDays:
-   *                 type: integer
-   *     responses:
-   *       201:
-   *         description: Created CA
-   *       409:
-   *         description: CA already exists
-   */
-  router.post("/ca", async (req, res) => {
-    try {
-      const identity = await store.identityForUser(userId());
-      if (!identity) {
-        return res
-          .status(400)
-          .json({ error: "Create a Termix ID handle first" });
-      }
-      if (await store.caForIdentity(identity.id)) {
-        return res.status(409).json({ error: "CA already exists" });
-      }
-      const validityDays = clampValidityDays(req.body?.validityDays, 90);
-      const generated = generateCa();
-      await store.createCa({
-        identityId: identity.id,
-        userId: identity.userId,
-        publicKey: generated.publicKeyLine,
-        privateKey: await ctx.secrets.seal(generated.privateKeyPem),
-        validityDays,
-      });
-      await ctx.audit.record({
-        action: "create_termix_id_ca",
-        resourceType: "termix_id_ca",
-        resourceName: identity.handle,
-        success: true,
-      });
-      res.status(201).json({
-        publicKey: generated.publicKeyLine,
-        validityDays,
-        ...withUrls(req, identity.handle, "/ca"),
-      });
-    } catch (error) {
-      if (isUniqueViolation(error)) {
-        return res.status(409).json({ error: "CA already exists" });
-      }
-      fail(res, "Failed to create CA", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/termix-identity/ca/rotate:
-   *   post:
-   *     summary: Rotate the certificate authority (revokes all issued certificates)
-   *     tags: [Termix ID]
-   *     security:
-   *       - bearerAuth: []
-   *     requestBody:
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               validityDays:
-   *                 type: integer
-   *     responses:
-   *       200:
-   *         description: New CA public key
-   *       404:
-   *         description: No Termix ID or no CA
-   */
-  router.post("/ca/rotate", async (req, res) => {
-    try {
-      const identity = await store.identityForUser(userId());
-      if (!identity)
-        return res.status(404).json({ error: "No Termix ID found" });
-      const existing = await store.caForIdentity(identity.id);
-      if (!existing) return res.status(404).json({ error: "No CA to rotate" });
-
-      const validityDays = clampValidityDays(
-        req.body?.validityDays,
-        existing.validityDays,
-      );
-      // A new key invalidates every certificate the old one signed: this is
-      // the revocation mechanism.
-      const generated = generateCa();
-      await store.replaceCa(identity.id, {
-        publicKey: generated.publicKeyLine,
-        privateKey: await ctx.secrets.seal(generated.privateKeyPem),
-        validityDays,
-      });
-      await ctx.audit.record({
-        action: "rotate_termix_id_ca",
-        resourceType: "termix_id_ca",
-        resourceName: identity.handle,
-        success: true,
-      });
-      res.json({
-        publicKey: generated.publicKeyLine,
-        validityDays,
-        ...withUrls(req, identity.handle, "/ca"),
-      });
-    } catch (error) {
-      fail(res, "Failed to rotate CA", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/termix-identity/ca:
-   *   delete:
-   *     summary: Delete the certificate authority
-   *     tags: [Termix ID]
-   *     security:
-   *       - bearerAuth: []
-   *     responses:
-   *       200:
-   *         description: Deleted
-   *       404:
-   *         description: No Termix ID or no CA
-   */
-  router.delete("/ca", async (_req, res) => {
-    try {
-      const identity = await store.identityForUser(userId());
-      if (!identity)
-        return res.status(404).json({ error: "No Termix ID found" });
-      if (!(await store.deleteCa(identity.id))) {
-        return res.status(404).json({ error: "No CA to delete" });
-      }
-      await ctx.audit.record({
-        action: "delete_termix_id_ca",
-        resourceType: "termix_id_ca",
-        resourceName: identity.handle,
-        success: true,
-      });
-      res.json({ success: true });
-    } catch (error) {
-      fail(res, "Failed to delete CA", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/termix-identity/keys/{id}/certificate:
-   *   post:
-   *     summary: Issue an SSH certificate for a key (Ed25519 only)
-   *     tags: [Termix ID]
-   *     security:
-   *       - bearerAuth: []
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               validityDays:
-   *                 type: integer
-   *               principals:
-   *                 type: array
-   *                 items:
-   *                   type: string
-   *     responses:
-   *       200:
-   *         description: Issued certificate
-   *       400:
-   *         description: Not an Ed25519 key, or no CA
-   *       404:
-   *         description: Key not found
-   */
-  router.post("/keys/:id/certificate", async (req, res) => {
-    const id = parseId(req.params.id);
-    if (!id) return res.status(400).json({ error: "Invalid key id" });
-    try {
-      const owner = userId();
-      const key = await store.keyForUser(owner, id);
-      if (!key) return res.status(404).json({ error: "Key not found" });
-      if (!ed25519RawFromLine(key.publicKey)) {
-        return res
-          .status(400)
-          .json({ error: "Certificates are only supported for Ed25519 keys" });
-      }
-      const identity = await store.identityForUser(owner);
-      if (!identity)
-        return res.status(404).json({ error: "No Termix ID found" });
-      const ca = await store.caForIdentity(identity.id);
-      const caPrivateKey = ca ? await ctx.secrets.unseal(ca.privateKey) : null;
-      if (!ca || !caPrivateKey) {
-        return res
-          .status(400)
-          .json({ error: "Enable a certificate authority first" });
-      }
-
-      const validityDays = clampValidityDays(
-        req.body?.validityDays,
-        ca.validityDays,
-      );
-      const principals: string[] = Array.isArray(req.body?.principals)
-        ? req.body.principals
-            .filter((p: unknown) => typeof p === "string" && p.trim())
-            .map((p: string) => p.trim())
-            .slice(0, 32)
-        : [];
-
-      const now = Math.floor(Date.now() / 1000);
-      const validBefore = now + validityDays * 86400;
-      const keyId = `termix:@${identity.handle}:${id}`;
-      const certificate = signUserCertificate({
-        userPublicKeyLine: key.publicKey,
-        caPrivateKeyPem: caPrivateKey,
-        caPublicKeyLine: ca.publicKey,
-        keyId,
-        principals,
-        validAfter: now - 60,
-        validBefore,
-      });
-      if (!certificate) {
-        return res.status(500).json({ error: "Failed to sign certificate" });
-      }
-
-      await ctx.audit.record({
-        action: "issue_termix_id_certificate",
-        resourceType: "termix_id_key",
-        resourceId: String(id),
-        resourceName: identity.handle,
-        details: `validity ${validityDays}d${principals.length ? `, principals: ${principals.join(",")}` : ""}`,
-        success: true,
-      });
-      res.json({ certificate, keyId, validBefore, principals, validityDays });
-    } catch (error) {
-      fail(res, "Failed to issue certificate", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/termix-identity/linked-credentials:
-   *   get:
-   *     summary: Credential ids with at least one enabled published key
-   *     tags: [Termix ID]
-   *     security:
-   *       - bearerAuth: []
-   *     responses:
-   *       200:
-   *         description: List of credential ids
-   */
-  router.get("/linked-credentials", async (_req, res) => {
-    try {
-      const identity = await store.identityForUser(userId());
-      if (!identity) return res.json({ credentialIds: [] });
-      res.json({
-        credentialIds: await store.linkedCredentialIds(identity.id),
-      });
-    } catch (error) {
-      fail(res, "Failed to fetch linked credentials", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/termix-identity/credentials:
-   *   get:
-   *     summary: The user's SSH key credentials that can be published
-   *     description: Id and name of each saved SSH key credential, for the import picker. No key material.
-   *     tags: [Termix ID]
-   *     security:
-   *       - bearerAuth: []
-   *     responses:
-   *       200:
-   *         description: List of key credentials
-   */
-  router.get("/credentials", async (_req, res) => {
-    try {
-      const keys = await ctx.credentials.listSshKeys();
-      res.json({
-        credentials: keys.map((key) => ({ id: key.id, name: key.name })),
-      });
-    } catch (error) {
-      fail(res, "Failed to fetch credentials", error);
-    }
-  });
-}
diff --git a/plugins/termix-identity/src/backend/store.ts b/plugins/termix-identity/src/backend/store.ts
deleted file mode 100644
index e6627973b..000000000
--- a/plugins/termix-identity/src/backend/store.ts
+++ /dev/null
@@ -1,292 +0,0 @@
-import { and, asc, eq, isNotNull } from "drizzle-orm";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// ctx.db.define hands the tables back untyped and the drizzle handle is the
-// server's own, so both are typed at this module's edge.
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export interface IdentityRow {
-  id: number;
-  userId: string;
-  handle: string;
-  description: string | null;
-  createdAt: string;
-  updatedAt: string;
-}
-
-export interface KeyRow {
-  id: number;
-  identityId: number;
-  userId: string;
-  publicKey: string;
-  keyType: string;
-  algorithm: string;
-  label: string | null;
-  comment: string | null;
-  source: string;
-  credentialId: number | null;
-  enabled: boolean;
-  createdAt: string;
-}
-
-export interface CaRow {
-  id: number;
-  identityId: number;
-  userId: string;
-  publicKey: string;
-  /** Sealed with ctx.secrets.seal. */
-  privateKey: string;
-  validityDays: number;
-  createdAt: string;
-  updatedAt: string;
-}
-
-export type NewKey = Omit<KeyRow, "id" | "enabled" | "createdAt">;
-
-export interface Tables {
-  identities: Table;
-  keys: Table;
-  ca: Table;
-}
-
-function toKey(row: Record<string, unknown>): KeyRow {
-  return {
-    ...(row as unknown as KeyRow),
-    enabled: row.enabled === true || row.enabled === 1 || row.enabled === "1",
-  };
-}
-
-export type Store = ReturnType<typeof createStore>;
-
-export function createStore(ctx: PluginContext, tables: Tables) {
-  const { identities, keys, ca } = tables;
-  const client = () => ctx.db.client<Drizzle>();
-
-  async function first<T>(query: Promise<T[]>): Promise<T | null> {
-    const rows = await query;
-    return rows[0] ?? null;
-  }
-
-  const identityForUser = async (userId: string) =>
-    first<IdentityRow>(
-      (await client())
-        .select()
-        .from(identities)
-        .where(eq(identities.userId, userId))
-        .limit(1),
-    );
-
-  const identityByHandle = async (handle: string) =>
-    first<IdentityRow>(
-      (await client())
-        .select()
-        .from(identities)
-        .where(eq(identities.handle, handle))
-        .limit(1),
-    );
-
-  const keysForIdentity = async (identityId: number): Promise<KeyRow[]> =>
-    (
-      await (
-        await client()
-      )
-        .select()
-        .from(keys)
-        .where(eq(keys.identityId, identityId))
-        .orderBy(asc(keys.id))
-    ).map(toKey);
-
-  const keyForUser = async (userId: string, id: number) => {
-    const row = await first<Record<string, unknown>>(
-      (await client())
-        .select()
-        .from(keys)
-        .where(and(eq(keys.id, id), eq(keys.userId, userId)))
-        .limit(1),
-    );
-    return row ? toKey(row) : null;
-  };
-
-  const caForIdentity = async (identityId: number) =>
-    first<CaRow>(
-      (await client())
-        .select()
-        .from(ca)
-        .where(eq(ca.identityId, identityId))
-        .limit(1),
-    );
-
-  return {
-    identityForUser,
-    identityByHandle,
-
-    async isHandleTaken(handle: string): Promise<boolean> {
-      return (await identityByHandle(handle)) !== null;
-    },
-
-    async createIdentity(input: {
-      userId: string;
-      handle: string;
-      description: string | null;
-    }): Promise<IdentityRow> {
-      const now = new Date().toISOString();
-      await (
-        await client()
-      )
-        .insert(identities)
-        .values({ ...input, createdAt: now, updatedAt: now });
-      await ctx.db.persist();
-      return (await identityForUser(input.userId)) as IdentityRow;
-    },
-
-    async updateIdentity(
-      userId: string,
-      update: { handle?: string; description?: string | null },
-    ): Promise<IdentityRow | null> {
-      await (
-        await client()
-      )
-        .update(identities)
-        .set({ ...update, updatedAt: new Date().toISOString() })
-        .where(eq(identities.userId, userId));
-      await ctx.db.persist();
-      return identityForUser(userId);
-    },
-
-    /** Deletes the identity with its keys and CA. */
-    async deleteIdentity(identity: IdentityRow): Promise<void> {
-      const db = await client();
-      await db.delete(keys).where(eq(keys.identityId, identity.id));
-      await db.delete(ca).where(eq(ca.identityId, identity.id));
-      await db.delete(identities).where(eq(identities.id, identity.id));
-      await ctx.db.persist();
-    },
-
-    keysForIdentity,
-    keyForUser,
-
-    async enabledKeys(identityId: number): Promise<KeyRow[]> {
-      return (await keysForIdentity(identityId)).filter((key) => key.enabled);
-    },
-
-    async createKey(input: NewKey): Promise<KeyRow> {
-      await (await client()).insert(keys).values({
-        ...input,
-        enabled: true,
-        createdAt: new Date().toISOString(),
-      });
-      await ctx.db.persist();
-      // A public key appears once per identity, so it finds the new row.
-      const row = await first<Record<string, unknown>>(
-        (await client())
-          .select()
-          .from(keys)
-          .where(
-            and(
-              eq(keys.identityId, input.identityId),
-              eq(keys.publicKey, input.publicKey),
-            ),
-          )
-          .limit(1),
-      );
-      return toKey(row as Record<string, unknown>);
-    },
-
-    async updateKey(
-      userId: string,
-      id: number,
-      update: {
-        enabled?: boolean;
-        label?: string | null;
-        credentialId?: number | null;
-      },
-    ): Promise<KeyRow | null> {
-      if (!(await keyForUser(userId, id))) return null;
-      if (Object.keys(update).length > 0) {
-        await (
-          await client()
-        )
-          .update(keys)
-          .set(update)
-          .where(and(eq(keys.id, id), eq(keys.userId, userId)));
-        await ctx.db.persist();
-      }
-      return keyForUser(userId, id);
-    },
-
-    async deleteKey(userId: string, id: number): Promise<KeyRow | null> {
-      const existing = await keyForUser(userId, id);
-      if (!existing) return null;
-      await (
-        await client()
-      )
-        .delete(keys)
-        .where(and(eq(keys.id, id), eq(keys.userId, userId)));
-      await ctx.db.persist();
-      return existing;
-    },
-
-    async linkedCredentialIds(identityId: number): Promise<number[]> {
-      const rows: Array<{ credentialId: number | null }> = await (
-        await client()
-      )
-        .select({ credentialId: keys.credentialId })
-        .from(keys)
-        .where(
-          and(
-            eq(keys.identityId, identityId),
-            eq(keys.enabled, true),
-            isNotNull(keys.credentialId),
-          ),
-        );
-      return [
-        ...new Set(
-          rows
-            .map((row) => Number(row.credentialId))
-            .filter((id) => Number.isInteger(id) && id > 0),
-        ),
-      ];
-    },
-
-    caForIdentity,
-
-    async createCa(input: {
-      identityId: number;
-      userId: string;
-      publicKey: string;
-      privateKey: string;
-      validityDays: number;
-    }): Promise<void> {
-      const now = new Date().toISOString();
-      await (
-        await client()
-      )
-        .insert(ca)
-        .values({ ...input, createdAt: now, updatedAt: now });
-      await ctx.db.persist();
-    },
-
-    async replaceCa(
-      identityId: number,
-      update: { publicKey: string; privateKey: string; validityDays: number },
-    ): Promise<void> {
-      await (
-        await client()
-      )
-        .update(ca)
-        .set({ ...update, updatedAt: new Date().toISOString() })
-        .where(eq(ca.identityId, identityId));
-      await ctx.db.persist();
-    },
-
-    async deleteCa(identityId: number): Promise<boolean> {
-      if (!(await caForIdentity(identityId))) return false;
-      await (await client()).delete(ca).where(eq(ca.identityId, identityId));
-      await ctx.db.persist();
-      return true;
-    },
-  };
-}
diff --git a/plugins/termix-identity/src/backend/tables.ts b/plugins/termix-identity/src/backend/tables.ts
deleted file mode 100644
index 16c7901d9..000000000
--- a/plugins/termix-identity/src/backend/tables.ts
+++ /dev/null
@@ -1,78 +0,0 @@
-import {
-  adoptLegacyTable,
-  boolean,
-  defineTable,
-  id,
-  integer,
-  refUser,
-  text,
-  varchar,
-} from "@termix/plugin-sdk/db";
-
-/** One public handle per user. Adopted from core's termix_identities. */
-export const identities = adoptLegacyTable(
-  "termix_identities",
-  defineTable("identities", {
-    id: id(),
-    userId: refUser().unique(),
-    handle: varchar().notNull().unique(),
-    description: text(),
-    createdAt: text().notNull().defaultNow(),
-    updatedAt: text().notNull().defaultNow(),
-  }),
-);
-
-/**
- * Published public keys, plaintext because the resolver serves them without
- * auth. Adopted from core's termix_identity_keys. The migrations keep the
- * legacy links to identities (cascade) and ssh_credentials (set null) by hand.
- */
-export const keys = adoptLegacyTable(
-  "termix_identity_keys",
-  defineTable(
-    "keys",
-    {
-      id: id(),
-      identityId: integer().notNull(),
-      userId: refUser(),
-      publicKey: text().notNull(),
-      keyType: text().notNull(),
-      algorithm: text().notNull(),
-      label: text(),
-      comment: text(),
-      source: text().notNull().default("manual"),
-      credentialId: integer(),
-      enabled: boolean().notNull().default(true),
-      createdAt: text().notNull().defaultNow(),
-    },
-    {
-      indexes: [
-        {
-          name: "idx_termix_identity_keys_identity",
-          columns: ["identityId"],
-        },
-      ],
-    },
-  ),
-);
-
-/**
- * One certificate authority per identity. The private key is sealed with
- * ctx.secrets.seal; 2.8 rows are resealed by core's
- * termix-identity-ca-migration. Adopted from core's termix_identity_ca.
- */
-export const ca = adoptLegacyTable(
-  "termix_identity_ca",
-  defineTable("ca", {
-    id: id(),
-    identityId: integer().notNull().unique(),
-    userId: refUser(),
-    publicKey: text().notNull(),
-    privateKey: text().notNull(),
-    validityDays: integer().notNull().default(90),
-    createdAt: text().notNull().defaultNow(),
-    updatedAt: text().notNull().defaultNow(),
-  }),
-);
-
-export const tables = [identities, keys, ca];
diff --git a/plugins/termix-identity/src/frontend/TermixIdPanel.tsx b/plugins/termix-identity/src/frontend/TermixIdPanel.tsx
deleted file mode 100644
index d33a2f502..000000000
--- a/plugins/termix-identity/src/frontend/TermixIdPanel.tsx
+++ /dev/null
@@ -1,953 +0,0 @@
-import { useEffect, useState, useCallback } from "react";
-import {
-  Check,
-  Copy,
-  Fingerprint,
-  KeyRound,
-  Loader2,
-  Plus,
-  RefreshCw,
-  ScrollText,
-  ShieldCheck,
-  Sparkles,
-  Trash2,
-} from "lucide-react";
-import { toast } from "sonner";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import {
-  Button,
-  FakeSwitch,
-  Input,
-  SectionCard,
-  Select2,
-  SettingRow,
-  Textarea,
-} from "@termix/plugin-sdk/ui";
-import type { TermixIdApi } from "./api";
-import type { LinkedStore } from "./linked-store";
-import {
-  errorMessage,
-  type CredentialOption,
-  type TermixIdCa,
-  type TermixIdentity,
-  type TermixIdentityKey,
-} from "./types";
-
-const DOCS_URL = "https://docs.termix.site/features/authentication/termix-id";
-
-const accentBtn =
-  "border-accent-brand/40 text-accent-brand hover:bg-accent-brand/20 hover:text-accent-brand";
-
-function CopyRow({ label, value }: { label: string; value: string }) {
-  const { t } = useTranslation();
-  const [copied, setCopied] = useState(false);
-  async function copy() {
-    try {
-      await navigator.clipboard.writeText(value);
-      setCopied(true);
-      setTimeout(() => setCopied(false), 1500);
-    } catch {
-      toast.error(t("termixId.copyFailed"));
-    }
-  }
-  return (
-    <div className="flex flex-col gap-1.5 py-2.5 border-b border-border last:border-0">
-      <span className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
-        {label}
-      </span>
-      <div className="flex items-stretch gap-2">
-        <code className="flex-1 min-w-0 text-[11px] font-mono bg-muted/30 border border-border px-2 py-1.5 overflow-x-auto whitespace-nowrap text-muted-foreground">
-          {value}
-        </code>
-        <button
-          onClick={copy}
-          className="shrink-0 w-7 flex items-center justify-center border border-border bg-background hover:bg-muted text-muted-foreground hover:text-foreground transition-colors"
-        >
-          {copied ? (
-            <Check className="size-3.5 text-accent-brand" />
-          ) : (
-            <Copy className="size-3.5" />
-          )}
-        </button>
-      </div>
-    </div>
-  );
-}
-
-export function TermixIdPanel({
-  api,
-  linked,
-}: {
-  api: TermixIdApi;
-  linked: LinkedStore;
-}) {
-  const { t } = useTranslation();
-  const [loading, setLoading] = useState(true);
-  const [identity, setIdentity] = useState<TermixIdentity | null>(null);
-  const [keys, setKeys] = useState<TermixIdentityKey[]>([]);
-  const [ca, setCa] = useState<TermixIdCa | null>(null);
-  const [linkedCredentialIds, setLinkedCredentialIds] = useState<Set<number>>(
-    new Set(),
-  );
-
-  const refresh = useCallback(async () => {
-    try {
-      const [data, caData, linkedData] = await Promise.all([
-        api.me(),
-        api.ca().catch(() => ({ ca: null })),
-        api.linkedCredentialIds().catch(() => ({ credentialIds: [] })),
-      ]);
-      setIdentity(data.identity);
-      setKeys(data.keys);
-      setCa(data.identity ? caData.ca : null);
-      setLinkedCredentialIds(new Set(linkedData.credentialIds));
-    } catch {
-      toast.error(t("termixId.loadFailed"));
-    } finally {
-      setLoading(false);
-    }
-  }, [api, t]);
-
-  // Credential badges elsewhere follow what this panel changes.
-  const changed = useCallback(async () => {
-    await refresh();
-    void linked.refresh();
-  }, [refresh, linked]);
-
-  useEffect(() => {
-    refresh();
-  }, [refresh]);
-
-  if (loading) {
-    return (
-      <div className="flex items-center justify-center h-40 text-muted-foreground">
-        <Loader2 className="animate-spin size-4" />
-      </div>
-    );
-  }
-
-  return (
-    <div className="flex-1 min-h-0 overflow-y-auto scrollbar-none">
-      <div className="flex flex-col gap-3 p-3">
-        {!identity ? (
-          <ClaimHandle api={api} onCreated={changed} />
-        ) : (
-          <>
-            <IdentityCard api={api} identity={identity} onChanged={changed} />
-            <AddKey
-              api={api}
-              handle={identity.handle}
-              linkedCredentialIds={linkedCredentialIds}
-              onAdded={changed}
-            />
-            <KeyList
-              api={api}
-              keys={keys}
-              handle={identity.handle}
-              caEnabled={!!ca}
-              onChanged={changed}
-            />
-            <CaCard
-              api={api}
-              handle={identity.handle}
-              ca={ca}
-              onChanged={changed}
-            />
-          </>
-        )}
-      </div>
-    </div>
-  );
-}
-
-function ClaimHandle({
-  api,
-  onCreated,
-}: {
-  api: TermixIdApi;
-  onCreated: () => void;
-}) {
-  const { t } = useTranslation();
-  const [handle, setHandle] = useState("");
-  const [description, setDescription] = useState("");
-  const [checking, setChecking] = useState(false);
-  const [status, setStatus] = useState<
-    "idle" | "available" | "taken" | "invalid"
-  >("idle");
-  const [submitting, setSubmitting] = useState(false);
-
-  useEffect(() => {
-    const h = handle.trim().toLowerCase();
-    if (!h) {
-      setStatus("idle");
-      return;
-    }
-    // Guard against an out-of-order response: if the input changed (effect
-    // cleanup ran) before this request resolved, ignore its result.
-    let cancelled = false;
-    setChecking(true);
-    const timer = setTimeout(async () => {
-      try {
-        const res = await api.checkHandle(h);
-        if (cancelled) return;
-        setStatus(
-          !res.valid ? "invalid" : res.available ? "available" : "taken",
-        );
-      } catch {
-        if (!cancelled) setStatus("idle");
-      } finally {
-        if (!cancelled) setChecking(false);
-      }
-    }, 350);
-    return () => {
-      cancelled = true;
-      clearTimeout(timer);
-    };
-  }, [api, handle]);
-
-  async function submit() {
-    setSubmitting(true);
-    try {
-      await api.create(
-        handle.trim().toLowerCase(),
-        description.trim() || undefined,
-      );
-      toast.success(t("termixId.created"));
-      onCreated();
-    } catch (e) {
-      toast.error(errorMessage(e, t("termixId.createFailed")));
-    } finally {
-      setSubmitting(false);
-    }
-  }
-
-  return (
-    <SectionCard
-      title={t("termixId.title")}
-      icon={<Fingerprint className="size-3.5" />}
-      action={
-        <a
-          href={DOCS_URL}
-          target="_blank"
-          rel="noreferrer"
-          className="text-[10px] text-accent-brand hover:underline"
-        >
-          {t("termixId.docsLink")}
-        </a>
-      }
-    >
-      <div className="flex flex-col gap-3 py-3">
-        <p className="text-xs text-muted-foreground leading-snug">
-          {t("termixId.claimIntro")}
-        </p>
-        <div className="flex flex-col gap-1.5">
-          <span className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
-            {t("termixId.handleLabel")}
-          </span>
-          <div className="relative flex items-center">
-            <span className="absolute left-2 text-muted-foreground text-xs pointer-events-none select-none">
-              @
-            </span>
-            <Input
-              value={handle}
-              placeholder={t("termixId.handlePlaceholder")}
-              autoCapitalize="none"
-              spellCheck={false}
-              className="h-8 text-xs pl-5"
-              onChange={(e) => setHandle(e.target.value)}
-            />
-          </div>
-          <span className="text-[11px] h-4 leading-4">
-            {checking ? (
-              <span className="text-muted-foreground">
-                {t("termixId.checking")}
-              </span>
-            ) : status === "available" ? (
-              <span className="text-accent-brand">
-                {t("termixId.available")}
-              </span>
-            ) : status === "taken" ? (
-              <span className="text-destructive">{t("termixId.taken")}</span>
-            ) : status === "invalid" ? (
-              <span className="text-destructive">
-                {t("termixId.invalidHandle")}
-              </span>
-            ) : null}
-          </span>
-        </div>
-        <div className="flex flex-col gap-1.5">
-          <span className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
-            {t("termixId.descriptionLabel")}
-          </span>
-          <Input
-            value={description}
-            placeholder={t("termixId.descriptionPlaceholder")}
-            className="h-8 text-xs"
-            onChange={(e) => setDescription(e.target.value)}
-          />
-        </div>
-        <Button
-          variant="outline"
-          size="sm"
-          className={`self-start ${accentBtn}`}
-          disabled={status !== "available" || submitting}
-          onClick={submit}
-        >
-          {submitting ? (
-            <Loader2 className="animate-spin size-3.5" />
-          ) : (
-            t("termixId.create")
-          )}
-        </Button>
-      </div>
-    </SectionCard>
-  );
-}
-
-function IdentityCard({
-  api,
-  identity,
-  onChanged,
-}: {
-  api: TermixIdApi;
-  identity: TermixIdentity;
-  onChanged: () => void;
-}) {
-  const { t } = useTranslation();
-  const [confirming, setConfirming] = useState(false);
-  const [busy, setBusy] = useState(false);
-  const url =
-    identity.resolverUrl ??
-    `${window.location.origin}${identity.resolverPath ?? ""}`;
-  const curl = `curl -fsSL ${url} >> ~/.ssh/authorized_keys`;
-
-  async function remove() {
-    setBusy(true);
-    try {
-      await api.remove();
-      toast.success(t("termixId.deleted"));
-      onChanged();
-    } catch (e) {
-      toast.error(errorMessage(e, t("termixId.deleteFailed")));
-    } finally {
-      setBusy(false);
-      setConfirming(false);
-    }
-  }
-
-  return (
-    <SectionCard
-      title={t("termixId.title")}
-      icon={<Fingerprint className="size-3.5" />}
-      action={
-        confirming ? (
-          <div className="flex items-center gap-1">
-            <Button
-              variant="outline"
-              size="sm"
-              className="border-destructive/40 text-destructive hover:bg-destructive/10 hover:text-destructive"
-              onClick={remove}
-              disabled={busy}
-            >
-              {busy ? (
-                <Loader2 className="animate-spin size-3.5" />
-              ) : (
-                t("common.confirm")
-              )}
-            </Button>
-            <Button
-              variant="ghost"
-              size="sm"
-              onClick={() => setConfirming(false)}
-            >
-              {t("common.cancel")}
-            </Button>
-          </div>
-        ) : (
-          <div className="flex items-center gap-1">
-            <a
-              href={DOCS_URL}
-              target="_blank"
-              rel="noreferrer"
-              className="text-[10px] text-accent-brand hover:underline px-1"
-            >
-              {t("termixId.docsLink")}
-            </a>
-            <Button
-              variant="ghost"
-              size="icon-sm"
-              onClick={() => setConfirming(true)}
-              className="hover:text-destructive"
-            >
-              <Trash2 className="size-3.5" />
-            </Button>
-          </div>
-        )
-      }
-    >
-      {confirming && (
-        <div className="py-2 border-b border-border">
-          <p className="text-xs text-muted-foreground">
-            {t("termixId.deleteConfirm")}
-          </p>
-        </div>
-      )}
-      <div className="flex items-center gap-2 py-2.5 border-b border-border">
-        <span className="text-sm font-semibold text-accent-brand">
-          @{identity.handle}
-        </span>
-      </div>
-      <CopyRow label={t("termixId.resolverUrlLabel")} value={url} />
-      <CopyRow label={t("termixId.provisionLabel")} value={curl} />
-    </SectionCard>
-  );
-}
-
-function downloadText(filename: string, text: string) {
-  // octet-stream so the browser/OS keeps the given extension instead of
-  // appending .txt to a text/plain download.
-  const blob = new Blob([text], { type: "application/octet-stream" });
-  const url = URL.createObjectURL(blob);
-  const a = document.createElement("a");
-  a.href = url;
-  a.download = filename;
-  document.body.appendChild(a);
-  a.click();
-  document.body.removeChild(a);
-  setTimeout(() => URL.revokeObjectURL(url), 1000);
-}
-
-function CredentialImportRow({
-  credentials,
-  linkedCredentialIds,
-  submitting,
-  onImport,
-}: {
-  credentials: CredentialOption[];
-  linkedCredentialIds: Set<number>;
-  submitting: boolean;
-  onImport: (id: number) => void;
-}) {
-  const { t } = useTranslation();
-  const [selected, setSelected] = useState<string>("");
-  const selectedId = selected ? Number(selected) : null;
-  const alreadyLinked =
-    selectedId !== null && linkedCredentialIds.has(selectedId);
-
-  return (
-    <div className="flex items-center gap-2">
-      <Select2
-        value={selected}
-        onChange={(e) => setSelected(e.target.value)}
-        disabled={submitting}
-        className="flex-1 h-8 min-w-0 border border-border bg-background px-2 text-xs outline-none focus:ring-1 focus:ring-ring disabled:opacity-50 disabled:cursor-not-allowed"
-      >
-        <option value="" disabled>
-          {t("termixId.selectCredential")}
-        </option>
-        {credentials.map((c) => (
-          <option key={c.id} value={String(c.id)}>
-            {linkedCredentialIds.has(c.id) ? `✓ ${c.name}` : c.name}
-          </option>
-        ))}
-      </Select2>
-      <Button
-        variant="outline"
-        size="default"
-        className={`h-8 shrink-0 ${alreadyLinked ? "border-accent-brand/20 text-accent-brand/50" : accentBtn}`}
-        disabled={!selectedId || submitting || alreadyLinked}
-        onClick={() => selectedId !== null && onImport(selectedId)}
-      >
-        {alreadyLinked ? <Check className="size-3.5" /> : t("termixId.import")}
-      </Button>
-    </div>
-  );
-}
-
-function AddKey({
-  api,
-  handle,
-  linkedCredentialIds,
-  onAdded,
-}: {
-  api: TermixIdApi;
-  handle: string;
-  linkedCredentialIds: Set<number>;
-  onAdded: () => void;
-}) {
-  const { t } = useTranslation();
-  const [publicKey, setPublicKey] = useState("");
-  const [label, setLabel] = useState("");
-  const [submitting, setSubmitting] = useState(false);
-  const [generating, setGenerating] = useState(false);
-  const [saveToVault, setSaveToVault] = useState(true);
-  const [credentials, setCredentials] = useState<CredentialOption[]>([]);
-
-  const loadCredentials = useCallback(async () => {
-    try {
-      setCredentials((await api.credentials()).credentials);
-    } catch {
-      // Pasting a key still works without the list.
-    }
-  }, [api]);
-
-  useEffect(() => {
-    loadCredentials();
-  }, [loadCredentials]);
-
-  async function addManual() {
-    if (!publicKey.trim()) return;
-    setSubmitting(true);
-    try {
-      await api.addKey({
-        publicKey: publicKey.trim(),
-        label: label.trim() || undefined,
-      });
-      toast.success(t("termixId.keyPublished"));
-      setPublicKey("");
-      setLabel("");
-      onAdded();
-    } catch (e) {
-      toast.error(errorMessage(e, t("termixId.addKeyFailed")));
-    } finally {
-      setSubmitting(false);
-    }
-  }
-
-  async function generate() {
-    setGenerating(true);
-    try {
-      const result = await api.generateKey("ed25519", saveToVault);
-      downloadText(`termix-${handle}-ed25519.key`, result.privateKey);
-      toast.success(
-        saveToVault
-          ? t("termixId.generatedSaved")
-          : t("termixId.generatedOnly"),
-      );
-      if (saveToVault) loadCredentials();
-      onAdded();
-    } catch (e) {
-      toast.error(errorMessage(e, t("termixId.generateFailed")));
-    } finally {
-      setGenerating(false);
-    }
-  }
-
-  async function importCredential(id: number) {
-    setSubmitting(true);
-    try {
-      await api.addKey({ credentialId: id });
-      toast.success(t("termixId.imported"));
-      onAdded();
-    } catch (e) {
-      toast.error(errorMessage(e, t("termixId.importFailed")));
-    } finally {
-      setSubmitting(false);
-    }
-  }
-
-  return (
-    <SectionCard
-      title={t("termixId.publishTitle")}
-      icon={<Plus className="size-3.5" />}
-      action={
-        <Button
-          variant="outline"
-          size="sm"
-          className={accentBtn}
-          onClick={generate}
-          disabled={generating}
-          title={t("termixId.generateTooltip")}
-        >
-          {generating ? (
-            <Loader2 className="animate-spin size-3.5" />
-          ) : (
-            <>
-              <Sparkles className="size-3.5" />
-              {t("termixId.generate")}
-            </>
-          )}
-        </Button>
-      }
-    >
-      <div className="flex flex-col gap-3 py-3">
-        <SettingRow label={t("termixId.saveToVault")}>
-          <FakeSwitch checked={saveToVault} onChange={setSaveToVault} />
-        </SettingRow>
-
-        <Textarea
-          value={publicKey}
-          onChange={(e) => setPublicKey(e.target.value)}
-          placeholder={t("termixId.keyPlaceholder")}
-          rows={3}
-          className="rounded-none font-mono text-[11px]"
-          spellCheck={false}
-        />
-        <div className="flex items-center gap-2">
-          <Input
-            value={label}
-            onChange={(e) => setLabel(e.target.value)}
-            placeholder={t("termixId.labelPlaceholder")}
-            className="h-8 text-xs flex-1"
-          />
-          <Button
-            variant="outline"
-            size="default"
-            className={`h-8 ${accentBtn}`}
-            onClick={addManual}
-            disabled={!publicKey.trim() || submitting}
-          >
-            {submitting ? (
-              <Loader2 className="animate-spin size-3.5" />
-            ) : (
-              t("termixId.add")
-            )}
-          </Button>
-        </div>
-
-        {credentials.length > 0 && (
-          <div className="flex flex-col gap-1.5 border-t border-border pt-3">
-            <span className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
-              {t("termixId.importFromCredential")}
-            </span>
-            <CredentialImportRow
-              credentials={credentials}
-              linkedCredentialIds={linkedCredentialIds}
-              submitting={submitting}
-              onImport={importCredential}
-            />
-          </div>
-        )}
-      </div>
-    </SectionCard>
-  );
-}
-
-function KeyList({
-  api,
-  keys,
-  handle,
-  caEnabled,
-  onChanged,
-}: {
-  api: TermixIdApi;
-  keys: TermixIdentityKey[];
-  handle: string;
-  caEnabled: boolean;
-  onChanged: () => void;
-}) {
-  const { t } = useTranslation();
-  const [issuingId, setIssuingId] = useState<number | null>(null);
-  const [principalsByKey, setPrincipalsByKey] = useState<
-    Record<number, string>
-  >({});
-  async function toggle(k: TermixIdentityKey) {
-    try {
-      await api.setKeyEnabled(k.id, !k.enabled);
-      onChanged();
-    } catch (e) {
-      toast.error(errorMessage(e, t("termixId.updateKeyFailed")));
-    }
-  }
-
-  async function remove(k: TermixIdentityKey) {
-    try {
-      await api.removeKey(k.id);
-      toast.success(t("termixId.keyRemoved"));
-      onChanged();
-    } catch (e) {
-      toast.error(errorMessage(e, t("termixId.removeKeyFailed")));
-    }
-  }
-
-  async function issueCert(k: TermixIdentityKey) {
-    setIssuingId(k.id);
-    try {
-      const res = await api.issueCertificate(k.id, {
-        principals: (principalsByKey[k.id] ?? "")
-          .split(",")
-          .map((principal) => principal.trim())
-          .filter(Boolean),
-      });
-      downloadText(`termix-${handle}-${k.id}-cert.pub`, res.certificate + "\n");
-      toast.success(t("termixId.certIssued"));
-    } catch (e) {
-      toast.error(errorMessage(e, t("termixId.certIssueFailed")));
-    } finally {
-      setIssuingId(null);
-    }
-  }
-
-  return (
-    <div className="flex flex-col border border-border bg-card">
-      <div className="flex items-center gap-2 px-4 py-2.5 border-b border-border shrink-0">
-        <span className="text-muted-foreground">
-          <KeyRound className="size-3.5" />
-        </span>
-        <span className="text-xs font-semibold uppercase tracking-widest text-muted-foreground flex-1">
-          {t("termixId.keysTitle")}
-        </span>
-      </div>
-      {keys.length === 0 ? (
-        <p className="text-xs text-muted-foreground px-4 py-3">
-          {t("termixId.noKeys")}
-        </p>
-      ) : (
-        keys.map((k) => {
-          const canCert = caEnabled && k.algorithm.toUpperCase() === "ED25519";
-          return (
-            <div
-              key={k.id}
-              className="flex flex-col px-3 py-2 gap-1 border-b border-border last:border-0"
-            >
-              {/* row 1: label + badges */}
-              <div className="flex items-center gap-1.5 min-w-0">
-                <span className="text-[10px] font-bold uppercase tracking-wide text-accent-brand border border-accent-brand/40 px-1 py-px shrink-0 leading-none">
-                  {k.algorithm}
-                </span>
-                {k.credentialId && (
-                  <span className="text-[9px] font-semibold uppercase tracking-widest text-accent-brand/60 border border-accent-brand/20 px-1 py-px shrink-0 leading-none">
-                    {t("termixId.fromVault")}
-                  </span>
-                )}
-                <span className="text-xs font-medium truncate min-w-0">
-                  {k.label || k.comment || k.keyType}
-                </span>
-              </div>
-              {/* row 2: public key */}
-              <code className="text-[10px] font-mono text-muted-foreground truncate">
-                {k.publicKey}
-              </code>
-              {/* row 3: actions */}
-              <div className="flex items-center gap-1 pt-0.5">
-                <FakeSwitch checked={k.enabled} onChange={() => toggle(k)} />
-                {canCert && (
-                  <>
-                    <Input
-                      value={principalsByKey[k.id] ?? ""}
-                      onChange={(e) =>
-                        setPrincipalsByKey((current) => ({
-                          ...current,
-                          [k.id]: e.target.value,
-                        }))
-                      }
-                      placeholder={t("termixId.principalsPlaceholder")}
-                      aria-label={t("termixId.principalsLabel")}
-                      className="h-7 min-w-0 flex-1 text-xs"
-                      spellCheck={false}
-                    />
-                    <Button
-                      variant="outline"
-                      size="icon-sm"
-                      onClick={() => issueCert(k)}
-                      disabled={
-                        issuingId === k.id ||
-                        !(principalsByKey[k.id] ?? "").trim()
-                      }
-                      title={t("termixId.issueCertTooltip")}
-                    >
-                      {issuingId === k.id ? (
-                        <Loader2 className="animate-spin size-3.5" />
-                      ) : (
-                        <ScrollText className="size-3.5" />
-                      )}
-                    </Button>
-                  </>
-                )}
-                <Button
-                  variant="ghost"
-                  size="icon-sm"
-                  onClick={() => remove(k)}
-                  className="hover:text-destructive"
-                >
-                  <Trash2 className="size-3.5" />
-                </Button>
-              </div>
-            </div>
-          );
-        })
-      )}
-    </div>
-  );
-}
-
-function CaCard({
-  api,
-  handle,
-  ca,
-  onChanged,
-}: {
-  api: TermixIdApi;
-  handle: string;
-  ca: TermixIdCa | null;
-  onChanged: () => void;
-}) {
-  const { t } = useTranslation();
-  const [busy, setBusy] = useState(false);
-  const [confirmingRotate, setConfirmingRotate] = useState(false);
-  const [confirmingDelete, setConfirmingDelete] = useState(false);
-
-  const caUrl = ca?.resolverUrl ?? "";
-  const trustCmd = `curl -fsSL ${caUrl} | sudo tee /etc/ssh/${handle}-ca.pub && echo "TrustedUserCAKeys /etc/ssh/${handle}-ca.pub" | sudo tee -a /etc/ssh/sshd_config && sudo systemctl reload sshd`;
-
-  async function enable() {
-    setBusy(true);
-    try {
-      await api.createCa();
-      toast.success(t("termixId.caEnabled"));
-      onChanged();
-    } catch (e) {
-      toast.error(errorMessage(e, t("termixId.caCreateFailed")));
-    } finally {
-      setBusy(false);
-    }
-  }
-
-  async function rotate() {
-    setBusy(true);
-    try {
-      await api.rotateCa();
-      toast.success(t("termixId.caRotated"));
-      onChanged();
-    } catch (e) {
-      toast.error(errorMessage(e, t("termixId.caRotateFailed")));
-    } finally {
-      setBusy(false);
-      setConfirmingRotate(false);
-    }
-  }
-
-  async function remove() {
-    setBusy(true);
-    try {
-      await api.removeCa();
-      toast.success(t("termixId.caDeleted"));
-      onChanged();
-    } catch (e) {
-      toast.error(errorMessage(e, t("termixId.caDeleteFailed")));
-    } finally {
-      setBusy(false);
-      setConfirmingDelete(false);
-    }
-  }
-
-  return (
-    <SectionCard
-      title={t("termixId.caTitle")}
-      icon={<ShieldCheck className="size-3.5" />}
-      action={
-        !ca ? (
-          <Button
-            variant="outline"
-            size="sm"
-            className={accentBtn}
-            onClick={enable}
-            disabled={busy}
-          >
-            {busy ? (
-              <Loader2 className="animate-spin size-3.5" />
-            ) : (
-              t("termixId.caEnable")
-            )}
-          </Button>
-        ) : confirmingRotate ? (
-          <div className="flex items-center gap-1">
-            <Button
-              variant="outline"
-              size="sm"
-              className="border-destructive/40 text-destructive hover:bg-destructive/10 hover:text-destructive"
-              onClick={rotate}
-              disabled={busy}
-            >
-              {busy ? (
-                <Loader2 className="animate-spin size-3.5" />
-              ) : (
-                t("termixId.caRotate")
-              )}
-            </Button>
-            <Button
-              variant="ghost"
-              size="sm"
-              onClick={() => setConfirmingRotate(false)}
-            >
-              {t("common.cancel")}
-            </Button>
-          </div>
-        ) : confirmingDelete ? (
-          <div className="flex items-center gap-1">
-            <Button
-              variant="outline"
-              size="sm"
-              className="border-destructive/40 text-destructive hover:bg-destructive/10 hover:text-destructive"
-              onClick={remove}
-              disabled={busy}
-            >
-              {busy ? (
-                <Loader2 className="animate-spin size-3.5" />
-              ) : (
-                t("termixId.caDelete")
-              )}
-            </Button>
-            <Button
-              variant="ghost"
-              size="sm"
-              onClick={() => setConfirmingDelete(false)}
-            >
-              {t("common.cancel")}
-            </Button>
-          </div>
-        ) : (
-          <div className="flex items-center gap-1">
-            <Button
-              variant="outline"
-              size="sm"
-              onClick={() => setConfirmingRotate(true)}
-              disabled={busy}
-            >
-              <RefreshCw className="size-3.5" />
-              {t("termixId.caRotate")}
-            </Button>
-            <Button
-              variant="ghost"
-              size="icon-sm"
-              onClick={() => setConfirmingDelete(true)}
-              disabled={busy}
-              className="hover:text-destructive"
-            >
-              <Trash2 className="size-3.5" />
-            </Button>
-          </div>
-        )
-      }
-    >
-      <div className="py-2.5 border-b border-border">
-        <p className="text-xs text-muted-foreground leading-snug">
-          {t("termixId.caIntro")}
-        </p>
-      </div>
-      {confirmingRotate && (
-        <div className="py-2.5 border-b border-border">
-          <p className="text-xs text-destructive/80 leading-snug">
-            {t("termixId.caRotateConfirm")}
-          </p>
-        </div>
-      )}
-      {confirmingDelete && (
-        <div className="py-2.5 border-b border-border">
-          <p className="text-xs text-destructive/80 leading-snug">
-            {t("termixId.caDeleteConfirm")}
-          </p>
-        </div>
-      )}
-      {ca && (
-        <>
-          <CopyRow label={t("termixId.caTrustLabel")} value={trustCmd} />
-          <CopyRow
-            label={t("termixId.caPublicKeyLabel")}
-            value={ca.publicKey}
-          />
-        </>
-      )}
-    </SectionCard>
-  );
-}
diff --git a/plugins/termix-identity/src/frontend/api.ts b/plugins/termix-identity/src/frontend/api.ts
deleted file mode 100644
index 4bbe6c24c..000000000
--- a/plugins/termix-identity/src/frontend/api.ts
+++ /dev/null
@@ -1,57 +0,0 @@
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import type {
-  CredentialOption,
-  GeneratedKey,
-  IssuedCertificate,
-  TermixIdCa,
-  TermixIdentity,
-  TermixIdentityKey,
-  TermixIdMe,
-} from "./types";
-
-/** The Termix ID routes, relative to /plugin-api/termix-identity/. */
-export function createTermixIdApi(api: PluginApiClient) {
-  const data = async <T>(request: Promise<{ data: T }>) => (await request).data;
-
-  return {
-    me: () => data(api.get<TermixIdMe>("/me")),
-    checkHandle: (handle: string) =>
-      data(
-        api.get<{ available: boolean; valid: boolean }>(
-          `/check/${encodeURIComponent(handle)}`,
-        ),
-      ),
-    create: (handle: string, description?: string) =>
-      data(api.post<TermixIdentity>("/", { handle, description })),
-    update: (body: { handle?: string; description?: string }) =>
-      data(api.put<TermixIdentity>("/", body)),
-    remove: () => data(api.delete<{ success: boolean }>("/")),
-    addKey: (body: {
-      publicKey?: string;
-      credentialId?: number;
-      label?: string;
-    }) => data(api.post<TermixIdentityKey>("/keys", body)),
-    generateKey: (type: "ed25519" | "rsa", saveCredential: boolean) =>
-      data(api.post<GeneratedKey>("/keys/generate", { type, saveCredential })),
-    setKeyEnabled: (id: number, enabled: boolean) =>
-      data(api.patch<TermixIdentityKey>(`/keys/${id}`, { enabled })),
-    removeKey: (id: number) =>
-      data(api.delete<{ success: boolean }>(`/keys/${id}`)),
-    ca: () => data(api.get<{ ca: TermixIdCa | null }>("/ca")),
-    createCa: (validityDays?: number) =>
-      data(api.post<TermixIdCa>("/ca", { validityDays })),
-    rotateCa: (validityDays?: number) =>
-      data(api.post<TermixIdCa>("/ca/rotate", { validityDays })),
-    removeCa: () => data(api.delete<{ success: boolean }>("/ca")),
-    issueCertificate: (
-      keyId: number,
-      body: { principals?: string[]; validityDays?: number } = {},
-    ) => data(api.post<IssuedCertificate>(`/keys/${keyId}/certificate`, body)),
-    linkedCredentialIds: () =>
-      data(api.get<{ credentialIds: number[] }>("/linked-credentials")),
-    credentials: () =>
-      data(api.get<{ credentials: CredentialOption[] }>("/credentials")),
-  };
-}
-
-export type TermixIdApi = ReturnType<typeof createTermixIdApi>;
diff --git a/plugins/termix-identity/src/frontend/index.tsx b/plugins/termix-identity/src/frontend/index.tsx
deleted file mode 100644
index f01c10070..000000000
--- a/plugins/termix-identity/src/frontend/index.tsx
+++ /dev/null
@@ -1,101 +0,0 @@
-import { useEffect, useReducer, type ComponentType } from "react";
-import { Fingerprint } from "lucide-react";
-import {
-  useTranslation,
-  type Disposer,
-  type TermixApp,
-} from "@termix/plugin-sdk/frontend";
-import { TermixIdPanel } from "./TermixIdPanel";
-import { createTermixIdApi } from "./api";
-import { createLinkedStore, type LinkedStore } from "./linked-store";
-
-const VIEW = "termix-id";
-
-function createCredentialBadge(linked: LinkedStore) {
-  /** The "ID" badge on a saved credential whose key is published. */
-  return function CredentialBadge({ credentialId }: { credentialId?: number }) {
-    const { t } = useTranslation();
-    const [, rerender] = useReducer((n: number) => n + 1, 0);
-    useEffect(() => {
-      linked.ensure();
-      return linked.subscribe(rerender);
-    }, []);
-    if (credentialId === undefined || !linked.has(Number(credentialId))) {
-      return null;
-    }
-    return (
-      <span className="text-[9px] px-1 py-px font-bold border leading-none shrink-0 border-accent-brand/30 text-accent-brand/70">
-        {t("credentials.idBadge")}
-      </span>
-    );
-  };
-}
-
-export function activate(app: TermixApp): void {
-  const api = createTermixIdApi(app.api);
-  const linked = createLinkedStore(api, () => app.hasPermission("use"));
-
-  const Panel = () => (
-    <div className="flex flex-col flex-1 min-h-0">
-      <TermixIdPanel api={api} linked={linked} />
-    </div>
-  );
-
-  // Publishing keys under a public handle means nothing to a standalone
-  // desktop install, so the rail item waits for a connected remote server.
-  let removeRailItem: Disposer | null = null;
-  let hidden: boolean | null = null;
-  const showRailItem = (hide: boolean) => {
-    if (hide === hidden) return;
-    hidden = hide;
-    removeRailItem?.();
-    removeRailItem = app.registerRailItem({
-      id: VIEW,
-      icon: Fingerprint,
-      titleKey: "nav.termixId",
-      after: "credentials",
-      promotable: true,
-      separatorAfter: true,
-      permission: "use",
-      hidden: hide,
-    });
-  };
-
-  if (app.desktop.available) {
-    let alive = true;
-    const check = () =>
-      void app.desktop.remoteServerUrl().then((url) => {
-        if (alive) showRailItem(!url);
-      });
-    showRailItem(true);
-    check();
-    app.desktop.onRemoteServerChange(check);
-    app.onDispose(() => {
-      alive = false;
-    });
-  } else {
-    showRailItem(false);
-  }
-
-  app.registerPanel(VIEW, Panel);
-  app.registerTab(VIEW, Panel, {
-    icon: Fingerprint,
-    titleKey: "nav.termixId",
-    hostless: true,
-    singleton: true,
-    panelFrame: true,
-  });
-
-  app.registerSlotContribution("credentials.badges", {
-    actionId: "termix-identity.credentialBadge",
-    titleKey: "credentials.idBadge",
-    kind: "component",
-    component: createCredentialBadge(linked) as unknown as ComponentType<
-      Record<string, unknown>
-    >,
-  });
-}
-
-export function deactivate(): void {
-  // Registrations through app are disposed by core.
-}
diff --git a/plugins/termix-identity/src/frontend/linked-store.ts b/plugins/termix-identity/src/frontend/linked-store.ts
deleted file mode 100644
index e9b86dcab..000000000
--- a/plugins/termix-identity/src/frontend/linked-store.ts
+++ /dev/null
@@ -1,48 +0,0 @@
-import type { TermixIdApi } from "./api";
-
-/**
- * Which credentials have a published key, shared by every credential badge
- * so the list fetches once instead of once per row. The panel calls
- * refresh() after it publishes or removes a key.
- */
-export function createLinkedStore(
-  api: TermixIdApi,
-  allowed: () => Promise<boolean>,
-) {
-  let ids = new Set<number>();
-  let loading: Promise<void> | null = null;
-  let loaded = false;
-  const listeners = new Set<() => void>();
-
-  const refresh = (): Promise<void> => {
-    loading = (async () => {
-      try {
-        ids = (await allowed())
-          ? new Set((await api.linkedCredentialIds()).credentialIds)
-          : new Set();
-      } catch {
-        // Badges are a hint; a failed lookup just shows none.
-      }
-      loaded = true;
-      listeners.forEach((listener) => listener());
-    })();
-    return loading;
-  };
-
-  return {
-    has: (id: number) => ids.has(id),
-    ids: () => ids,
-    ensure: () => {
-      if (!loaded && !loading) void refresh();
-    },
-    refresh,
-    subscribe: (listener: () => void) => {
-      listeners.add(listener);
-      return () => {
-        listeners.delete(listener);
-      };
-    },
-  };
-}
-
-export type LinkedStore = ReturnType<typeof createLinkedStore>;
diff --git a/plugins/termix-identity/src/frontend/types.ts b/plugins/termix-identity/src/frontend/types.ts
deleted file mode 100644
index ef8861f6b..000000000
--- a/plugins/termix-identity/src/frontend/types.ts
+++ /dev/null
@@ -1,64 +0,0 @@
-export interface TermixIdentity {
-  id: number;
-  userId: string;
-  handle: string;
-  description: string | null;
-  resolverPath?: string;
-  resolverUrl?: string;
-  createdAt: string;
-  updatedAt: string;
-}
-
-export interface TermixIdentityKey {
-  id: number;
-  identityId: number;
-  userId: string;
-  publicKey: string;
-  keyType: string;
-  algorithm: string;
-  label: string | null;
-  comment: string | null;
-  source: string;
-  credentialId: number | null;
-  enabled: boolean;
-  createdAt: string;
-}
-
-export interface TermixIdMe {
-  identity: TermixIdentity | null;
-  keys: TermixIdentityKey[];
-}
-
-export interface GeneratedKey {
-  key: TermixIdentityKey;
-  privateKey: string;
-  publicKey: string;
-  credentialId: number | null;
-}
-
-export interface TermixIdCa {
-  publicKey: string;
-  validityDays: number;
-  resolverPath: string;
-  resolverUrl: string;
-}
-
-export interface IssuedCertificate {
-  certificate: string;
-  keyId: string;
-  validBefore: number;
-  principals: string[];
-  validityDays: number;
-}
-
-export interface CredentialOption {
-  id: number;
-  name: string;
-}
-
-/** The server's error message when it sent one, else the fallback. */
-export function errorMessage(error: unknown, fallback: string): string {
-  const data = (error as { response?: { data?: { error?: unknown } } })
-    ?.response?.data;
-  return typeof data?.error === "string" ? data.error : fallback;
-}
diff --git a/plugins/termix-identity/tests/backend/certificate.test.ts b/plugins/termix-identity/tests/backend/certificate.test.ts
deleted file mode 100644
index 463fe5f5b..000000000
--- a/plugins/termix-identity/tests/backend/certificate.test.ts
+++ /dev/null
@@ -1,127 +0,0 @@
-import { describe, it, expect } from "vitest";
-import crypto from "crypto";
-import fs from "fs";
-import os from "os";
-import path from "path";
-import { execFileSync } from "child_process";
-import {
-  generateCa,
-  signUserCertificate,
-  ed25519RawFromLine,
-} from "../../src/backend/certificate.js";
-
-function publicKeyObjectFromLine(line: string) {
-  const raw = ed25519RawFromLine(line);
-  if (!raw) throw new Error("not ed25519");
-  return crypto.createPublicKey({
-    key: { kty: "OKP", crv: "Ed25519", x: raw.toString("base64url") },
-    format: "jwk",
-  });
-}
-
-// Split a cert blob into the signed body and the raw 64-byte ed25519 signature.
-function splitCert(certLine: string): { body: Buffer; rawSig: Buffer } {
-  const blob = Buffer.from(certLine.split(/\s+/)[1], "base64");
-  // trailing signature string = str( str("ssh-ed25519") + str(64-byte sig) )
-  const sigBlobLen = 4 + "ssh-ed25519".length + 4 + 64; // 83
-  const body = blob.subarray(0, blob.length - (4 + sigBlobLen));
-  const rawSig = blob.subarray(blob.length - 64);
-  return { body, rawSig };
-}
-
-describe("generateCa", () => {
-  it("produces a valid ed25519 public line and PKCS8 private key", () => {
-    const ca = generateCa();
-    expect(ca.publicKeyLine.startsWith("ssh-ed25519 ")).toBe(true);
-    expect(ed25519RawFromLine(ca.publicKeyLine)?.length).toBe(32);
-    expect(ca.privateKeyPem).toContain("BEGIN PRIVATE KEY");
-    // The PEM must load as a usable signing key.
-    expect(() =>
-      crypto.createPrivateKey({
-        key: ca.privateKeyPem,
-        format: "pem",
-        type: "pkcs8",
-      }),
-    ).not.toThrow();
-  });
-});
-
-describe("signUserCertificate", () => {
-  it("returns null for non-ed25519 user keys", () => {
-    const ca = generateCa();
-    const cert = signUserCertificate({
-      userPublicKeyLine: "ssh-rsa AAAAB3Nz",
-      caPrivateKeyPem: ca.privateKeyPem,
-      caPublicKeyLine: ca.publicKeyLine,
-      keyId: "x",
-      principals: [],
-      validAfter: 0,
-      validBefore: 1,
-    });
-    expect(cert).toBeNull();
-  });
-
-  it("produces a cert whose signature verifies against the CA key", () => {
-    const ca = generateCa();
-    const user = generateCa(); // reuse: a valid ed25519 public line
-    const cert = signUserCertificate({
-      userPublicKeyLine: user.publicKeyLine,
-      caPrivateKeyPem: ca.privateKeyPem,
-      caPublicKeyLine: ca.publicKeyLine,
-      keyId: "termix:@alice",
-      principals: ["root", "ubuntu"],
-      validAfter: 1000,
-      validBefore: 2000,
-    });
-    expect(cert).not.toBeNull();
-    expect(cert!.startsWith("ssh-ed25519-cert-v01@openssh.com ")).toBe(true);
-
-    const { body, rawSig } = splitCert(cert!);
-    const caPub = publicKeyObjectFromLine(ca.publicKeyLine);
-    expect(crypto.verify(null, body, caPub, rawSig)).toBe(true);
-
-    // A different CA must NOT verify.
-    const otherPub = publicKeyObjectFromLine(generateCa().publicKeyLine);
-    expect(crypto.verify(null, body, otherPub, rawSig)).toBe(false);
-  });
-
-  it("is accepted and correctly parsed by ssh-keygen -L", () => {
-    let sshKeygen: string;
-    try {
-      sshKeygen = execFileSync("ssh-keygen", ["--help"], { encoding: "utf8" });
-      void sshKeygen;
-    } catch (e) {
-      // ssh-keygen prints usage to stderr and exits non-zero for --help; that's
-      // fine: it means the binary exists. Only skip if it's truly missing.
-      if ((e as { code?: string }).code === "ENOENT") return;
-    }
-
-    const ca = generateCa();
-    const user = generateCa();
-    const now = Math.floor(Date.now() / 1000);
-    const cert = signUserCertificate({
-      userPublicKeyLine: user.publicKeyLine,
-      caPrivateKeyPem: ca.privateKeyPem,
-      caPublicKeyLine: ca.publicKeyLine,
-      keyId: "termix-test-id",
-      principals: ["deploy"],
-      validAfter: now,
-      validBefore: now + 3600,
-    });
-
-    const dir = fs.mkdtempSync(path.join(os.tmpdir(), "termix-cert-"));
-    const file = path.join(dir, "id-cert.pub");
-    try {
-      fs.writeFileSync(file, cert + "\n");
-      const out = execFileSync("ssh-keygen", ["-L", "-f", file], {
-        encoding: "utf8",
-      });
-      expect(out).toContain("user certificate");
-      expect(out).toContain('Key ID: "termix-test-id"');
-      expect(out).toContain("deploy");
-      expect(out).toMatch(/permit-pty/);
-    } finally {
-      fs.rmSync(dir, { recursive: true, force: true });
-    }
-  });
-});
diff --git a/plugins/termix-identity/tests/backend/helpers.ts b/plugins/termix-identity/tests/backend/helpers.ts
deleted file mode 100644
index aaeaab22d..000000000
--- a/plugins/termix-identity/tests/backend/helpers.ts
+++ /dev/null
@@ -1,144 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-  type TestDbOptions,
-} from "@termix/plugin-sdk/testing";
-import type { PluginSshKeyCredential } from "@termix/plugin-sdk/backend";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-export const manifest = manifestJson as unknown as PluginManifest;
-
-/** Core's ssh_credentials, which the keys table points at. */
-export const CREDENTIALS_DDL =
-  "CREATE TABLE IF NOT EXISTS ssh_credentials (id INTEGER PRIMARY KEY AUTOINCREMENT)";
-
-export interface TestServer {
-  db: TestDb;
-  mock: MockPluginContext;
-  request: (
-    method: string,
-    path: string,
-    options?: {
-      user?: string | null;
-      body?: unknown;
-      headers?: Record<string, string>;
-    },
-    // Route bodies vary per test; asserting on them is the point.
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any; text: string; headers: Headers }>;
-  close: () => Promise<void>;
-}
-
-/**
- * The plugin activated against a real in-memory database, its router mounted
- * the way core mounts it: JSON parsed, the acting user taken from the request,
- * and a request without one refused unless its path is public.
- */
-export async function startServer(
-  options: {
-    permissions?: string[];
-    capabilities?: string[];
-    sshKeyCredentials?: PluginSshKeyCredential[];
-    before?: TestDbOptions["before"];
-  } = {},
-): Promise<TestServer> {
-  const db = await createTestDb(pluginDir, {
-    before: (sqlite) => {
-      sqlite.exec(CREDENTIALS_DDL);
-      options.before?.(sqlite);
-    },
-  });
-  for (const user of ["user-1", "user-2"]) {
-    db.sqlite.prepare("INSERT OR IGNORE INTO users (id) VALUES (?)").run(user);
-  }
-  // Credential ids the fake ctx.credentials hands out.
-  for (let id = 1; id <= 10; id++) {
-    db.sqlite
-      .prepare("INSERT OR IGNORE INTO ssh_credentials (id) VALUES (?)")
-      .run(id);
-  }
-
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: options.capabilities ?? manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    permissions: options.permissions,
-    sshKeyCredentials: options.sshKeyCredentials,
-    actor: "user-1",
-  });
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const publicPaths = mock.httpRouters[0]?.public ?? [];
-  const isPublic = (path: string) =>
-    publicPaths.some((pattern) => {
-      const want = pattern.split("/");
-      const got = path.split("/");
-      return (
-        want.length === got.length &&
-        want.every((part, i) => part.startsWith(":") || part === got[i])
-      );
-    });
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, res, next) => {
-    const user = req.header("x-test-user") || undefined;
-    if (!user && !isPublic(req.path)) {
-      res.status(401).json({ error: "Authentication required" });
-      return;
-    }
-    mock.setActor(user);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    db,
-    mock,
-    async request(method, path, { user = "user-1", body, headers } = {}) {
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        redirect: "manual",
-        headers: {
-          ...(user ? { "x-test-user": user } : {}),
-          ...(body !== undefined ? { "content-type": "application/json" } : {}),
-          ...headers,
-        },
-        body: body !== undefined ? JSON.stringify(body) : undefined,
-      });
-      const text = await response.text();
-      let parsed: unknown = null;
-      try {
-        parsed = text ? JSON.parse(text) : null;
-      } catch {
-        parsed = null;
-      }
-      return {
-        status: response.status,
-        body: parsed,
-        text,
-        headers: response.headers,
-      };
-    },
-    async close() {
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-      db.close();
-    },
-  };
-}
diff --git a/plugins/termix-identity/tests/backend/keys.test.ts b/plugins/termix-identity/tests/backend/keys.test.ts
deleted file mode 100644
index efc85d790..000000000
--- a/plugins/termix-identity/tests/backend/keys.test.ts
+++ /dev/null
@@ -1,95 +0,0 @@
-import { describe, it, expect } from "vitest";
-import {
-  classifyAlgo,
-  parsePublicKey,
-  matchesAlgoFilter,
-  MAX_PUBLIC_KEY_LENGTH,
-} from "../../src/backend/keys.js";
-
-// Build a valid OpenSSH public-key line for a given type by encoding a wire
-// blob whose first string field equals the type (what parsePublicKey checks).
-function makeKey(type: string, comment = ""): string {
-  const typeBuf = Buffer.from(type, "utf8");
-  const header = Buffer.alloc(4);
-  header.writeUInt32BE(typeBuf.length, 0);
-  const body = Buffer.alloc(40); // arbitrary trailing key material
-  const blob = Buffer.concat([header, typeBuf, body]).toString("base64");
-  return `${type} ${blob}${comment ? ` ${comment}` : ""}`;
-}
-
-describe("classifyAlgo", () => {
-  it("maps known types to normalized groups", () => {
-    expect(classifyAlgo("ssh-rsa")).toBe("RSA");
-    expect(classifyAlgo("rsa-sha2-512")).toBe("RSA");
-    expect(classifyAlgo("ssh-ed25519")).toBe("ED25519");
-    expect(classifyAlgo("ecdsa-sha2-nistp256")).toBe("ECDSA");
-    expect(classifyAlgo("ssh-dss")).toBe("DSA");
-    expect(classifyAlgo("sk-ssh-ed25519@openssh.com")).toBe("ED25519-SK");
-    expect(classifyAlgo("sk-ecdsa-sha2-nistp256@openssh.com")).toBe("ECDSA-SK");
-  });
-
-  it("falls back by substring for unknown variants", () => {
-    expect(classifyAlgo("ecdsa-sha2-nistp999")).toBe("ECDSA");
-    expect(classifyAlgo("rsa-sha2-256-cert")).toBe("RSA");
-    expect(classifyAlgo("something-weird")).toBe("SOMETHING-WEIRD");
-  });
-});
-
-describe("parsePublicKey", () => {
-  it("parses a valid ed25519 key and extracts the comment", () => {
-    const parsed = parsePublicKey(makeKey("ssh-ed25519", "alice@laptop"));
-    expect(parsed).not.toBeNull();
-    expect(parsed?.type).toBe("ssh-ed25519");
-    expect(parsed?.algorithm).toBe("ED25519");
-    expect(parsed?.comment).toBe("alice@laptop");
-    // Comment is stripped from the normalized (dedupe) form.
-    expect(parsed?.normalized.includes("alice@laptop")).toBe(false);
-  });
-
-  it("parses SK (FIDO) key types", () => {
-    expect(
-      parsePublicKey(makeKey("sk-ssh-ed25519@openssh.com"))?.algorithm,
-    ).toBe("ED25519-SK");
-  });
-
-  it.each([
-    [null],
-    [undefined],
-    [""],
-    ["   "],
-    ["ssh-ed25519"], // missing blob
-    ["ssh-ed25519 not_base64!!"], // bad base64 charset
-    ["ssh-rsa AAAAB3Nz"], // blob whose embedded type != declared type
-  ])("rejects malformed input %p", (input) => {
-    expect(parsePublicKey(input as string)).toBeNull();
-  });
-
-  it("rejects an over-length line (amplification guard)", () => {
-    const valid = makeKey("ssh-ed25519");
-    const padded = valid + " " + "A".repeat(MAX_PUBLIC_KEY_LENGTH);
-    expect(padded.length).toBeGreaterThan(MAX_PUBLIC_KEY_LENGTH);
-    expect(parsePublicKey(padded)).toBeNull();
-  });
-
-  it("rejects a blob whose embedded type does not match the prefix", () => {
-    // Declared ssh-rsa but the wire blob says ssh-ed25519.
-    const blob = makeKey("ssh-ed25519").split(" ")[1];
-    expect(parsePublicKey(`ssh-rsa ${blob}`)).toBeNull();
-  });
-});
-
-describe("matchesAlgoFilter", () => {
-  it("returns all keys when no filter", () => {
-    expect(matchesAlgoFilter("ED25519", null)).toBe(true);
-  });
-
-  it("matches exactly and is case-insensitive", () => {
-    expect(matchesAlgoFilter("ED25519", "ed25519")).toBe(true);
-    expect(matchesAlgoFilter("RSA", "RSA")).toBe(true);
-  });
-
-  it("does NOT let ED25519 match ED25519-SK (the over-match bug)", () => {
-    expect(matchesAlgoFilter("ED25519-SK", "ED25519")).toBe(false);
-    expect(matchesAlgoFilter("ECDSA-SK", "ECDSA")).toBe(false);
-  });
-});
diff --git a/plugins/termix-identity/tests/backend/legacy-urls.test.ts b/plugins/termix-identity/tests/backend/legacy-urls.test.ts
deleted file mode 100644
index 6758218ed..000000000
--- a/plugins/termix-identity/tests/backend/legacy-urls.test.ts
+++ /dev/null
@@ -1,20 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { validateManifest } from "@termix/plugin-sdk/manifest";
-import manifest from "../../manifest.json";
-
-// Old URLs something outside Termix still calls keep reaching the plugin.
-const redirects = manifest.contributes.http.legacyRedirects as unknown[];
-
-describe("legacy URLs", () => {
-  it("declares them in a manifest that validates", () => {
-    expect(validateManifest(manifest)).toEqual([]);
-  });
-
-  it("redirects /termix-id/u, which servers provisioned with a 2.8 Termix ID resolver URL fetch", () => {
-    expect(redirects).toContainEqual({
-      from: "/termix-id/u",
-      to: "/u",
-      status: 308,
-    });
-  });
-});
diff --git a/plugins/termix-identity/tests/backend/migrations.test.ts b/plugins/termix-identity/tests/backend/migrations.test.ts
deleted file mode 100644
index 1229469f7..000000000
--- a/plugins/termix-identity/tests/backend/migrations.test.ts
+++ /dev/null
@@ -1,175 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { createTestDb, type TestDb } from "@termix/plugin-sdk/testing";
-import { CREDENTIALS_DDL, pluginDir } from "./helpers";
-
-// The three tables as core's SQLite bootstrap created them before 2.9.0.
-const LEGACY_DDL = `
-  CREATE TABLE termix_identities (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL UNIQUE,
-    handle TEXT NOT NULL UNIQUE,
-    description TEXT,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
-  );
-  CREATE UNIQUE INDEX idx_termix_identities_user ON termix_identities(user_id);
-  CREATE TABLE termix_identity_keys (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    identity_id INTEGER NOT NULL,
-    user_id TEXT NOT NULL,
-    public_key TEXT NOT NULL,
-    key_type TEXT NOT NULL,
-    algorithm TEXT NOT NULL,
-    label TEXT,
-    comment TEXT,
-    source TEXT NOT NULL DEFAULT 'manual',
-    credential_id INTEGER,
-    enabled INTEGER NOT NULL DEFAULT 1,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    FOREIGN KEY (identity_id) REFERENCES termix_identities (id) ON DELETE CASCADE,
-    FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE,
-    FOREIGN KEY (credential_id) REFERENCES ssh_credentials (id) ON DELETE SET NULL
-  );
-  CREATE INDEX idx_termix_identity_keys_identity ON termix_identity_keys(identity_id);
-  CREATE TABLE termix_identity_ca (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    identity_id INTEGER NOT NULL UNIQUE,
-    user_id TEXT NOT NULL,
-    public_key TEXT NOT NULL,
-    private_key TEXT NOT NULL,
-    validity_days INTEGER NOT NULL DEFAULT 90,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    FOREIGN KEY (identity_id) REFERENCES termix_identities (id) ON DELETE CASCADE,
-    FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
-  );
-`;
-
-let db: TestDb | null = null;
-
-afterEach(() => {
-  db?.close();
-  db = null;
-});
-
-const tableExists = (name: string) =>
-  !!db!.sqlite
-    .prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?")
-    .get(name);
-
-const indexes = (table: string) =>
-  (
-    db!.sqlite
-      .prepare(
-        "SELECT name FROM sqlite_master WHERE type = 'index' AND tbl_name = ?",
-      )
-      .all(table) as Array<{ name: string }>
-  ).map((row) => row.name);
-
-const count = (table: string) =>
-  (
-    db!.sqlite.prepare(`SELECT COUNT(*) AS n FROM ${table}`).get() as {
-      n: number;
-    }
-  ).n;
-
-function seed() {
-  db!.sqlite.exec(`
-    INSERT INTO p_termix_identity_identities (id, user_id, handle) VALUES (1, 'user-1', 'alice');
-    INSERT INTO p_termix_identity_keys (identity_id, user_id, public_key, key_type, algorithm, credential_id)
-      VALUES (1, 'user-1', 'ssh-ed25519 AAAA', 'ssh-ed25519', 'ED25519', 3);
-    INSERT INTO p_termix_identity_ca (identity_id, user_id, public_key, private_key)
-      VALUES (1, 'user-1', 'ssh-ed25519 BBBB', 'sealed');
-  `);
-}
-
-describe("adopting the termix identity tables", () => {
-  it("keeps every existing row, index and link when the legacy tables are there", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec(CREDENTIALS_DDL);
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1'), ('user-2')");
-        sqlite.exec("INSERT INTO ssh_credentials (id) VALUES (3)");
-        sqlite.exec(LEGACY_DDL);
-        sqlite.exec(`
-          INSERT INTO termix_identities (id, user_id, handle, description) VALUES (1, 'user-1', 'alice', 'me');
-          INSERT INTO termix_identity_keys (identity_id, user_id, public_key, key_type, algorithm, label, credential_id, enabled)
-            VALUES (1, 'user-1', 'ssh-ed25519 AAAA', 'ssh-ed25519', 'ED25519', 'Laptop', 3, 0);
-          INSERT INTO termix_identity_ca (identity_id, user_id, public_key, private_key, validity_days)
-            VALUES (1, 'user-1', 'ssh-ed25519 BBBB', 'dek-encrypted', 30);
-        `);
-      },
-    });
-
-    expect(tableExists("termix_identities")).toBe(false);
-    expect(tableExists("termix_identity_keys")).toBe(false);
-    expect(tableExists("termix_identity_ca")).toBe(false);
-
-    expect(
-      db.sqlite
-        .prepare("SELECT handle, description FROM p_termix_identity_identities")
-        .get(),
-    ).toEqual({ handle: "alice", description: "me" });
-    expect(
-      db.sqlite
-        .prepare(
-          "SELECT label, credential_id, enabled FROM p_termix_identity_keys",
-        )
-        .get(),
-    ).toEqual({ label: "Laptop", credential_id: 3, enabled: 0 });
-    expect(
-      db.sqlite
-        .prepare("SELECT private_key, validity_days FROM p_termix_identity_ca")
-        .get(),
-    ).toEqual({ private_key: "dek-encrypted", validity_days: 30 });
-
-    expect(indexes("p_termix_identity_identities")).toContain(
-      "idx_termix_identities_user",
-    );
-    expect(
-      indexes("p_termix_identity_keys").filter(
-        (name) => name === "idx_termix_identity_keys_identity",
-      ),
-    ).toHaveLength(1);
-
-    // Links follow the rename.
-    db.sqlite.exec("DELETE FROM ssh_credentials WHERE id = 3");
-    expect(
-      db.sqlite
-        .prepare("SELECT credential_id FROM p_termix_identity_keys")
-        .get(),
-    ).toEqual({ credential_id: null });
-    db.sqlite.exec("DELETE FROM p_termix_identity_identities WHERE id = 1");
-    expect(count("p_termix_identity_keys")).toBe(0);
-    expect(count("p_termix_identity_ca")).toBe(0);
-  });
-
-  it("creates fresh tables with the same links when there is nothing to adopt", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec(CREDENTIALS_DDL);
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1')");
-        sqlite.exec("INSERT INTO ssh_credentials (id) VALUES (3)");
-      },
-    });
-
-    expect(tableExists("termix_identities")).toBe(false);
-    seed();
-    expect(indexes("p_termix_identity_keys")).toContain(
-      "idx_termix_identity_keys_identity",
-    );
-
-    db.sqlite.exec("DELETE FROM ssh_credentials WHERE id = 3");
-    expect(
-      db.sqlite
-        .prepare("SELECT credential_id FROM p_termix_identity_keys")
-        .get(),
-    ).toEqual({ credential_id: null });
-
-    db.sqlite.exec("DELETE FROM users WHERE id = 'user-1'");
-    expect(count("p_termix_identity_identities")).toBe(0);
-    expect(count("p_termix_identity_keys")).toBe(0);
-    expect(count("p_termix_identity_ca")).toBe(0);
-  });
-});
diff --git a/plugins/termix-identity/tests/backend/termix-identity.test.ts b/plugins/termix-identity/tests/backend/termix-identity.test.ts
deleted file mode 100644
index 0ea89c789..000000000
--- a/plugins/termix-identity/tests/backend/termix-identity.test.ts
+++ /dev/null
@@ -1,598 +0,0 @@
-import crypto from "node:crypto";
-import { afterEach, describe, expect, it } from "vitest";
-import ssh2 from "ssh2";
-import { createMockCtx } from "@termix/plugin-sdk/testing";
-import { ed25519RawFromLine } from "../../src/backend/certificate.js";
-import { manifest, startServer, type TestServer } from "./helpers";
-
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-});
-
-function ed25519Line(comment = "") {
-  // ssh2's generator can truncate leading zero bytes in Ed25519 keys.
-  const { publicKey } = crypto.generateKeyPairSync("ed25519");
-  const raw = Buffer.from(publicKey.export({ format: "jwk" }).x!, "base64url");
-  const blob = Buffer.concat([
-    Buffer.from("0000000b7373682d6564323535313900000020", "hex"),
-    raw,
-  ]);
-  const line = `ssh-ed25519 ${blob.toString("base64")}`;
-  return comment ? `${line} ${comment}` : line;
-}
-
-/** Checks an OpenSSH user certificate's signature against a CA public key. */
-function certificateVerifies(certLine: string, caPublicLine: string): boolean {
-  const blob = Buffer.from(certLine.split(" ")[1], "base64");
-  let offset = 0;
-  const skipString = () => {
-    offset += 4 + blob.readUInt32BE(offset);
-  };
-  // type, nonce, key, serial, cert type, key id, principals, valid after,
-  // valid before, critical options, extensions, reserved, signature key.
-  skipString();
-  skipString();
-  skipString();
-  offset += 8 + 4;
-  skipString();
-  skipString();
-  offset += 8 + 8;
-  skipString();
-  skipString();
-  skipString();
-  skipString();
-  const body = blob.subarray(0, offset);
-  const signature = blob.subarray(offset + 4);
-  const typeLength = signature.readUInt32BE(0);
-  const rawLength = signature.readUInt32BE(4 + typeLength);
-  const raw = signature.subarray(8 + typeLength, 8 + typeLength + rawLength);
-  const caRaw = ed25519RawFromLine(caPublicLine)!;
-  const publicKey = crypto.createPublicKey({
-    key: { kty: "OKP", crv: "Ed25519", x: caRaw.toString("base64url") },
-    format: "jwk",
-  });
-  return crypto.verify(null, body, publicKey, raw);
-}
-
-async function claim(handle = "alice", user = "user-1") {
-  const response = await server!.request("POST", "/", {
-    user,
-    body: { handle, description: "me" },
-  });
-  expect(response.status).toBe(201);
-  return response.body;
-}
-
-describe("identity", () => {
-  it("claims, checks, renames and deletes a handle", async () => {
-    server = await startServer();
-
-    expect((await server.request("GET", "/me")).body).toEqual({
-      identity: null,
-      keys: [],
-    });
-    expect((await server.request("GET", "/check/alice")).body).toEqual({
-      available: true,
-      valid: true,
-    });
-    expect((await server.request("GET", "/check/me")).body.valid).toBe(false);
-    expect((await server.request("GET", "/check/Bad!")).body.valid).toBe(false);
-
-    await claim("Alice");
-    const me = (await server.request("GET", "/me")).body;
-    expect(me.identity.handle).toBe("alice");
-    expect(me.identity.resolverPath).toBe(
-      "/plugin-api/termix-identity/u/alice",
-    );
-    expect(me.identity.resolverUrl).toBe(
-      "https://termix.test/plugin-api/termix-identity/u/alice",
-    );
-    expect((await server.request("GET", "/check/alice")).body.available).toBe(
-      false,
-    );
-
-    const renamed = await server.request("PUT", "/", {
-      body: { handle: "alice2" },
-    });
-    expect(renamed.status).toBe(200);
-    expect(renamed.body.handle).toBe("alice2");
-
-    expect((await server.request("DELETE", "/")).status).toBe(200);
-    expect((await server.request("GET", "/me")).body.identity).toBeNull();
-    expect(server.mock.audits.map((entry) => entry.action)).toEqual(
-      expect.arrayContaining([
-        "create_termix_id",
-        "update_termix_id",
-        "delete_termix_id",
-      ]),
-    );
-  });
-
-  it("refuses a second handle, a taken one and an invalid one", async () => {
-    server = await startServer();
-    await claim("alice");
-
-    const again = await server.request("POST", "/", {
-      body: { handle: "bob" },
-    });
-    expect(again.status).toBe(409);
-
-    const taken = await server.request("POST", "/", {
-      user: "user-2",
-      body: { handle: "alice" },
-    });
-    expect(taken.status).toBe(409);
-    expect(taken.body.error).toBe("Handle already taken");
-
-    const invalid = await server.request("POST", "/", {
-      user: "user-2",
-      body: { handle: "-x" },
-    });
-    expect(invalid.status).toBe(400);
-  });
-
-  it("deletes the keys and CA with the identity", async () => {
-    server = await startServer();
-    await claim();
-    await server.request("POST", "/keys", {
-      body: { publicKey: ed25519Line() },
-    });
-    await server.request("POST", "/ca", { body: {} });
-
-    await server.request("DELETE", "/");
-
-    const count = (table: string) =>
-      (
-        server!.db.sqlite
-          .prepare(`SELECT COUNT(*) AS n FROM ${table}`)
-          .get() as { n: number }
-      ).n;
-    expect(count("p_termix_identity_keys")).toBe(0);
-    expect(count("p_termix_identity_ca")).toBe(0);
-  });
-});
-
-describe("key publishing", () => {
-  it("publishes a pasted key and serves it from the public resolver", async () => {
-    server = await startServer();
-    await claim();
-    const line = ed25519Line("laptop");
-
-    const added = await server.request("POST", "/keys", {
-      body: { publicKey: line, label: "Laptop" },
-    });
-    expect(added.status).toBe(201);
-    expect(added.body).toMatchObject({
-      algorithm: "ED25519",
-      keyType: "ssh-ed25519",
-      label: "Laptop",
-      comment: "laptop",
-      source: "manual",
-      enabled: true,
-    });
-
-    const duplicate = await server.request("POST", "/keys", {
-      body: { publicKey: line },
-    });
-    expect(duplicate.status).toBe(409);
-
-    const resolved = await server.request("GET", "/u/alice", { user: null });
-    expect(resolved.status).toBe(200);
-    expect(resolved.headers.get("cache-control")).toBe("no-store, max-age=0");
-    expect(resolved.headers.get("x-robots-tag")).toBe("noindex, nofollow");
-    expect(resolved.text).toBe(
-      `${line.split(" ").slice(0, 2).join(" ")} #termix-id @alice\n`,
-    );
-  });
-
-  it("rejects something that is not a public key", async () => {
-    server = await startServer();
-    await claim();
-    const response = await server.request("POST", "/keys", {
-      body: { publicKey: "not a key" },
-    });
-    expect(response.status).toBe(400);
-  });
-
-  it("needs a handle before a key", async () => {
-    server = await startServer();
-    const response = await server.request("POST", "/keys", {
-      body: { publicKey: ed25519Line() },
-    });
-    expect(response.status).toBe(400);
-  });
-
-  it("filters by algorithm and hides disabled keys", async () => {
-    server = await startServer();
-    await claim();
-    const ed = await server.request("POST", "/keys", {
-      body: { publicKey: ed25519Line() },
-    });
-    const rsa = ssh2.utils.generateKeyPairSync("rsa", { bits: 2048 });
-    await server.request("POST", "/keys", { body: { publicKey: rsa.public } });
-
-    const onlyEd = await server.request("GET", "/u/alice/ED25519", {
-      user: null,
-    });
-    expect(onlyEd.text.trim().split("\n")).toHaveLength(1);
-    expect(onlyEd.text).toContain("ssh-ed25519");
-
-    const all = await server.request("GET", "/u/alice", { user: null });
-    expect(all.text.trim().split("\n")).toHaveLength(2);
-
-    const disabled = await server.request("PATCH", `/keys/${ed.body.id}`, {
-      body: { enabled: false },
-    });
-    expect(disabled.body.enabled).toBe(false);
-    const after = await server.request("GET", "/u/alice", { user: null });
-    expect(after.text).not.toContain("ssh-ed25519");
-  });
-
-  it("serves an HTML viewer to browsers without an em dash", async () => {
-    server = await startServer();
-    await claim();
-    const page = await server.request("GET", "/u/alice", {
-      user: null,
-      headers: { accept: "text/html" },
-    });
-    expect(page.headers.get("content-type")).toContain("text/html");
-    expect(page.text).toContain(
-      "curl -fsSL https://termix.test/plugin-api/termix-identity/u/alice",
-    );
-    expect(page.text).not.toContain("—");
-  });
-
-  it("answers 404 for an unknown handle", async () => {
-    server = await startServer();
-    expect(
-      (await server.request("GET", "/u/nobody", { user: null })).status,
-    ).toBe(404);
-  });
-
-  it("imports the public half of a saved key credential", async () => {
-    const line = ed25519Line();
-    server = await startServer({
-      sshKeyCredentials: [
-        { id: 5, name: "Work key", username: "root", publicKey: line },
-        { id: 6, name: "Broken", username: null, publicKey: null },
-      ],
-    });
-    await claim();
-
-    const listed = await server.request("GET", "/credentials");
-    expect(listed.body.credentials).toEqual([
-      { id: 5, name: "Work key" },
-      { id: 6, name: "Broken" },
-    ]);
-
-    const imported = await server.request("POST", "/keys", {
-      body: { credentialId: 5 },
-    });
-    expect(imported.status).toBe(201);
-    expect(imported.body).toMatchObject({
-      source: "credential",
-      credentialId: 5,
-      label: "Work key",
-    });
-    expect((await server.request("GET", "/linked-credentials")).body).toEqual({
-      credentialIds: [5],
-    });
-
-    expect(
-      (await server.request("POST", "/keys", { body: { credentialId: 6 } }))
-        .status,
-    ).toBe(400);
-    expect(
-      (await server.request("POST", "/keys", { body: { credentialId: 99 } }))
-        .status,
-    ).toBe(404);
-  });
-
-  it("generates a key pair, saves it as a credential and returns the private key once", async () => {
-    server = await startServer();
-    await claim();
-
-    const generated = await server.request("POST", "/keys/generate", {
-      body: { type: "ed25519" },
-    });
-    expect(generated.status).toBe(201);
-    expect(generated.body.privateKey).toContain("PRIVATE KEY");
-    expect(generated.body.credentialId).toBe(1);
-    expect(server.mock.createdSshKeys).toHaveLength(1);
-    expect(server.mock.createdSshKeys[0]).toMatchObject({
-      name: "Termix ID @alice (ED25519)",
-      publicKey: generated.body.publicKey,
-      keyType: "ssh-ed25519",
-    });
-
-    const stored = server.db.sqlite
-      .prepare("SELECT * FROM p_termix_identity_keys")
-      .all() as Array<Record<string, unknown>>;
-    expect(stored).toHaveLength(1);
-    expect(stored[0].credential_id).toBe(1);
-    expect(JSON.stringify(stored)).not.toContain("PRIVATE KEY");
-  });
-
-  it("generates without saving when asked", async () => {
-    server = await startServer();
-    await claim();
-    const generated = await server.request("POST", "/keys/generate", {
-      body: { saveCredential: false },
-    });
-    expect(generated.status).toBe(201);
-    expect(generated.body.credentialId).toBeNull();
-    expect(server.mock.createdSshKeys).toHaveLength(0);
-  });
-
-  it("removes the published key when saving the credential fails", async () => {
-    server = await startServer({
-      capabilities: manifest.capabilities.filter(
-        (capability) => capability !== "credentials:write",
-      ),
-    });
-    await claim();
-    const generated = await server.request("POST", "/keys/generate", {
-      body: {},
-    });
-    expect(generated.status).toBe(500);
-    expect((await server.request("GET", "/me")).body.keys).toEqual([]);
-  });
-
-  it("only touches the caller's own keys", async () => {
-    server = await startServer();
-    await claim();
-    const key = await server.request("POST", "/keys", {
-      body: { publicKey: ed25519Line() },
-    });
-    expect(
-      (
-        await server.request("DELETE", `/keys/${key.body.id}`, {
-          user: "user-2",
-        })
-      ).status,
-    ).toBe(404);
-    expect(
-      (await server.request("DELETE", `/keys/${key.body.id}`)).status,
-    ).toBe(200);
-  });
-});
-
-describe("certificate authority", () => {
-  it("creates a CA, stores its key sealed and publishes the public key", async () => {
-    server = await startServer();
-    await claim();
-
-    const created = await server.request("POST", "/ca", {
-      body: { validityDays: 30 },
-    });
-    expect(created.status).toBe(201);
-    expect(created.body.validityDays).toBe(30);
-    expect(created.body.resolverUrl).toBe(
-      "https://termix.test/plugin-api/termix-identity/u/alice/ca",
-    );
-
-    const row = server.db.sqlite
-      .prepare("SELECT private_key FROM p_termix_identity_ca")
-      .get() as { private_key: string };
-    expect(row.private_key).not.toContain("PRIVATE KEY");
-    expect(await server.mock.ctx.secrets.unseal(row.private_key)).toContain(
-      "PRIVATE KEY",
-    );
-
-    const published = await server.request("GET", "/u/alice/ca", {
-      user: null,
-    });
-    expect(published.status).toBe(200);
-    expect(published.text).toBe(
-      `${created.body.publicKey} termix-id-ca@alice\n`,
-    );
-    expect((await server.request("POST", "/ca", { body: {} })).status).toBe(
-      409,
-    );
-  });
-
-  it("issues a certificate the CA signed, with the principals asked for", async () => {
-    server = await startServer();
-    await claim();
-    const ca = (await server.request("POST", "/ca", { body: {} })).body;
-    const key = await server.request("POST", "/keys", {
-      body: { publicKey: ed25519Line() },
-    });
-
-    const issued = await server.request(
-      "POST",
-      `/keys/${key.body.id}/certificate`,
-      { body: { principals: ["root", " deploy ", ""], validityDays: 2 } },
-    );
-    expect(issued.status).toBe(200);
-    expect(issued.body.principals).toEqual(["root", "deploy"]);
-    expect(issued.body.validityDays).toBe(2);
-    expect(issued.body.keyId).toBe(`termix:@alice:${key.body.id}`);
-    expect(issued.body.certificate).toMatch(
-      /^ssh-ed25519-cert-v01@openssh.com /,
-    );
-    const now = Math.floor(Date.now() / 1000);
-    expect(issued.body.validBefore).toBeGreaterThan(now + 86400);
-    expect(issued.body.validBefore).toBeLessThanOrEqual(now + 2 * 86400 + 5);
-    expect(certificateVerifies(issued.body.certificate, ca.publicKey)).toBe(
-      true,
-    );
-    expect(server.mock.audits.map((entry) => entry.action)).toContain(
-      "issue_termix_id_certificate",
-    );
-  });
-
-  it("refuses a certificate without a CA or for a non-Ed25519 key", async () => {
-    server = await startServer();
-    await claim();
-    const ed = await server.request("POST", "/keys", {
-      body: { publicKey: ed25519Line() },
-    });
-    expect(
-      (
-        await server.request("POST", `/keys/${ed.body.id}/certificate`, {
-          body: {},
-        })
-      ).status,
-    ).toBe(400);
-
-    await server.request("POST", "/ca", { body: {} });
-    const rsa = ssh2.utils.generateKeyPairSync("rsa", { bits: 2048 });
-    const rsaKey = await server.request("POST", "/keys", {
-      body: { publicKey: rsa.public },
-    });
-    expect(
-      (
-        await server.request("POST", `/keys/${rsaKey.body.id}/certificate`, {
-          body: {},
-        })
-      ).status,
-    ).toBe(400);
-  });
-
-  it("rotation replaces the key, so old certificates stop verifying", async () => {
-    server = await startServer();
-    await claim();
-    const first = (await server.request("POST", "/ca", { body: {} })).body;
-    const key = await server.request("POST", "/keys", {
-      body: { publicKey: ed25519Line() },
-    });
-    const oldCert = (
-      await server.request("POST", `/keys/${key.body.id}/certificate`, {
-        body: {},
-      })
-    ).body.certificate;
-
-    const rotated = await server.request("POST", "/ca/rotate", {
-      body: { validityDays: 7 },
-    });
-    expect(rotated.status).toBe(200);
-    expect(rotated.body.publicKey).not.toBe(first.publicKey);
-    expect(rotated.body.validityDays).toBe(7);
-
-    const published = (
-      await server.request("GET", "/u/alice/ca", { user: null })
-    ).text;
-    expect(published).toContain(rotated.body.publicKey);
-    expect(certificateVerifies(oldCert, rotated.body.publicKey)).toBe(false);
-
-    const newCert = (
-      await server.request("POST", `/keys/${key.body.id}/certificate`, {
-        body: {},
-      })
-    ).body;
-    expect(newCert.validityDays).toBe(7);
-    expect(
-      certificateVerifies(newCert.certificate, rotated.body.publicKey),
-    ).toBe(true);
-  });
-
-  it("deletes the CA", async () => {
-    server = await startServer();
-    await claim();
-    await server.request("POST", "/ca", { body: {} });
-    expect((await server.request("DELETE", "/ca")).status).toBe(200);
-    expect((await server.request("GET", "/ca")).body).toEqual({ ca: null });
-    expect((await server.request("DELETE", "/ca")).status).toBe(404);
-    expect(
-      (await server.request("GET", "/u/alice/ca", { user: null })).status,
-    ).toBe(404);
-  });
-});
-
-describe("access", () => {
-  const managementRoutes: Array<[string, string]> = [
-    ["GET", "/me"],
-    ["GET", "/check/alice"],
-    ["POST", "/"],
-    ["PUT", "/"],
-    ["DELETE", "/"],
-    ["POST", "/keys"],
-    ["POST", "/keys/generate"],
-    ["PATCH", "/keys/1"],
-    ["DELETE", "/keys/1"],
-    ["POST", "/keys/1/certificate"],
-    ["GET", "/ca"],
-    ["POST", "/ca"],
-    ["POST", "/ca/rotate"],
-    ["DELETE", "/ca"],
-    ["GET", "/linked-credentials"],
-    ["GET", "/credentials"],
-  ];
-
-  it("serves the resolver without auth", async () => {
-    server = await startServer({ permissions: [] });
-    await server.db.sqlite
-      .prepare(
-        "INSERT INTO p_termix_identity_identities (user_id, handle) VALUES ('user-1', 'alice')",
-      )
-      .run();
-    for (const path of ["/u/alice", "/u/alice/ED25519"]) {
-      expect((await server.request("GET", path, { user: null })).status).toBe(
-        200,
-      );
-    }
-    expect(
-      (await server.request("GET", "/u/alice/ca", { user: null })).status,
-    ).toBe(404);
-  });
-
-  it.each(managementRoutes)("needs a login for %s %s", async (method, path) => {
-    server = await startServer();
-    const response = await server.request(method, path, {
-      user: null,
-      body: method === "GET" ? undefined : {},
-    });
-    expect(response.status).toBe(401);
-  });
-
-  it.each(managementRoutes)(
-    "needs termix-identity.use for %s %s",
-    async (method, path) => {
-      server = await startServer({ permissions: [] });
-      const response = await server.request(method, path, {
-        body: method === "GET" ? undefined : {},
-      });
-      expect(response.status).toBe(403);
-    },
-  );
-});
-
-describe("activate", () => {
-  it.each(["db:own", "network:serve"])(
-    "fails closed without %s",
-    async (capability) => {
-      const mock = createMockCtx({
-        pluginId: manifest.id,
-        manifest,
-        capabilities: manifest.capabilities.filter((c) => c !== capability),
-      });
-      const { activate } = await import("../../src/backend/index.js");
-      await expect(activate(mock.ctx)).rejects.toThrow(capability);
-    },
-  );
-
-  it("cannot seal a CA key without secrets:own", async () => {
-    server = await startServer({
-      capabilities: manifest.capabilities.filter((c) => c !== "secrets:own"),
-    });
-    await claim();
-    expect((await server.request("POST", "/ca", { body: {} })).status).toBe(
-      500,
-    );
-    expect((await server.request("GET", "/ca")).body).toEqual({ ca: null });
-  });
-
-  it("cannot read saved keys without credentials:use", async () => {
-    server = await startServer({
-      capabilities: manifest.capabilities.filter(
-        (c) => c !== "credentials:use",
-      ),
-      sshKeyCredentials: [{ id: 5, name: "k", username: null, publicKey: "x" }],
-    });
-    expect((await server.request("GET", "/credentials")).status).toBe(500);
-  });
-});
diff --git a/plugins/termix-identity/tests/frontend/activate.test.tsx b/plugins/termix-identity/tests/frontend/activate.test.tsx
deleted file mode 100644
index ad8b2a18c..000000000
--- a/plugins/termix-identity/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,236 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { fireEvent, screen, waitFor } from "@testing-library/react";
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-const linked = vi.hoisted(() => ({ serverUrl: null as string | null }));
-
-let rendered: RenderedPluginApp | null = null;
-
-type ElectronWindow = { electronAPI?: unknown };
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-  delete (window as unknown as ElectronWindow).electronAPI;
-});
-
-const IDENTITY = {
-  id: 1,
-  userId: "user-1",
-  handle: "alice",
-  description: null,
-  resolverPath: "/plugin-api/termix-identity/u/alice",
-  resolverUrl: "https://termix.test/plugin-api/termix-identity/u/alice",
-  createdAt: "2026-01-01T00:00:00.000Z",
-  updatedAt: "2026-01-01T00:00:00.000Z",
-};
-
-const KEY = {
-  id: 4,
-  identityId: 1,
-  userId: "user-1",
-  publicKey: "ssh-ed25519 AAAAC3Nza",
-  keyType: "ssh-ed25519",
-  algorithm: "ED25519",
-  label: "Laptop",
-  comment: null,
-  source: "credential",
-  credentialId: 9,
-  enabled: true,
-  createdAt: "2026-01-01T00:00:00.000Z",
-};
-
-function stubApi(options: { identity?: boolean; linked?: number[] } = {}) {
-  const routes: Record<string, unknown> = {
-    "/me":
-      options.identity === false
-        ? { identity: null, keys: [] }
-        : { identity: IDENTITY, keys: [KEY] },
-    "/ca": { ca: null },
-    "/linked-credentials": { credentialIds: options.linked ?? [9] },
-    "/credentials": { credentials: [{ id: 9, name: "Work key" }] },
-    "/check/bob": { available: true, valid: true },
-  };
-  return {
-    get: vi.fn(async (url: string) => ({ data: routes[url] })),
-    post: vi.fn(async () => ({ data: IDENTITY })),
-    put: vi.fn(async () => ({ data: {} })),
-    patch: vi.fn(async () => ({ data: KEY })),
-    delete: vi.fn(async () => ({ data: { success: true } })),
-  };
-}
-
-describe(`${manifest.id} activate`, () => {
-  it("registers the rail item, panel, tab and credential badge", async () => {
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      remoteServerUrl: () => linked.serverUrl,
-    });
-    expect(rendered.registered.railItems()).toEqual([
-      expect.objectContaining({
-        id: "termix-id",
-        hidden: false,
-        permission: "termix-identity.use",
-      }),
-    ]);
-    expect(rendered.registered.panels()).toEqual(["termix-id"]);
-    expect(rendered.registered.tabs()).toEqual(["termix-id"]);
-    expect(rendered.registered.slot("credentials.badges")).toEqual([
-      "termix-identity.credentialBadge",
-    ]);
-  });
-
-  it("removes everything it registered on deactivate", async () => {
-    const app = await renderWithApp(plugin, { manifest, locales });
-    await app.deactivate();
-    expect(app.registered.tabs()).toEqual([]);
-    expect(app.registered.panels()).toEqual([]);
-    expect(app.registered.railItems()).toEqual([]);
-    expect(app.registered.slot("credentials.badges")).toEqual([]);
-  });
-
-  it("hides the rail item in a standalone desktop app", async () => {
-    linked.serverUrl = null;
-    (window as unknown as ElectronWindow).electronAPI = {
-      isElectron: true,
-      invoke: vi.fn(async () => null),
-    };
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      remoteServerUrl: () => linked.serverUrl,
-    });
-    await waitFor(() =>
-      expect(rendered!.registered.railItems()).toEqual([
-        expect.objectContaining({ id: "termix-id", hidden: true }),
-      ]),
-    );
-  });
-
-  it("shows the rail item once the desktop app is linked to a server", async () => {
-    linked.serverUrl = null;
-    (window as unknown as ElectronWindow).electronAPI = {
-      isElectron: true,
-      invoke: vi.fn(async () => null),
-    };
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      remoteServerUrl: () => linked.serverUrl,
-    });
-    await waitFor(() =>
-      expect(rendered!.registered.railItems()[0]?.hidden).toBe(true),
-    );
-
-    linked.serverUrl = "https://termix.example";
-    window.dispatchEvent(new CustomEvent("termix:sync-changed"));
-    await waitFor(() =>
-      expect(rendered!.registered.railItems()).toEqual([
-        expect.objectContaining({ id: "termix-id", hidden: false }),
-      ]),
-    );
-  });
-});
-
-describe("termix id panel", () => {
-  it("offers to claim a handle when the user has none", async () => {
-    const api = stubApi({ identity: false });
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: api as unknown as PluginApiClient,
-    });
-    rendered.renderPanel("termix-id");
-
-    expect(await screen.findByText(locales.termixId.claimIntro)).toBeTruthy();
-    fireEvent.change(
-      screen.getByPlaceholderText(locales.termixId.handlePlaceholder),
-      { target: { value: "bob" } },
-    );
-    expect(await screen.findByText(locales.termixId.available)).toBeTruthy();
-    fireEvent.click(screen.getByText(locales.termixId.create));
-    await waitFor(() =>
-      expect(api.post).toHaveBeenCalledWith("/", {
-        handle: "bob",
-        description: undefined,
-      }),
-    );
-  });
-
-  it("shows the handle, the resolver URL and the published keys", async () => {
-    const api = stubApi();
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: api as unknown as PluginApiClient,
-    });
-    rendered.renderPanel("termix-id");
-
-    expect(await screen.findByText("@alice")).toBeTruthy();
-    expect(screen.getByText(IDENTITY.resolverUrl)).toBeTruthy();
-    expect(screen.getByText("Laptop")).toBeTruthy();
-    expect(screen.getByText(KEY.publicKey)).toBeTruthy();
-    expect(api.get).toHaveBeenCalledWith("/credentials");
-  });
-});
-
-describe("credential badge", () => {
-  it("marks a credential whose key is published", async () => {
-    const api = stubApi({ linked: [9] });
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: api as unknown as PluginApiClient,
-      permissions: ["termix-identity.use"],
-    });
-
-    const linked = rendered.renderSlot("credentials.badges", {
-      credentialId: 9,
-    });
-    await waitFor(() =>
-      expect(linked.textContent).toContain(locales.credentials.idBadge),
-    );
-    expect(api.get).toHaveBeenCalledWith("/linked-credentials");
-  });
-
-  it("shows nothing for a credential that is not published", async () => {
-    const api = stubApi({ linked: [9] });
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: api as unknown as PluginApiClient,
-      permissions: ["termix-identity.use"],
-    });
-    const other = rendered.renderSlot("credentials.badges", {
-      credentialId: 3,
-    });
-    await waitFor(() =>
-      expect(api.get).toHaveBeenCalledWith("/linked-credentials"),
-    );
-    expect(other.textContent).not.toContain(locales.credentials.idBadge);
-  });
-
-  it("does not ask without termix-identity.use", async () => {
-    const api = stubApi();
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: api as unknown as PluginApiClient,
-      permissions: [],
-    });
-    rendered.renderSlot("credentials.badges", { credentialId: 9 });
-    await new Promise((resolve) => setTimeout(resolve, 20));
-    expect(api.get).not.toHaveBeenCalledWith("/linked-credentials");
-  });
-});
diff --git a/plugins/termix-identity/tsconfig.json b/plugins/termix-identity/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/termix-identity/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/termix-identity/vitest.config.ts b/plugins/termix-identity/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/termix-identity/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/tmux-monitor/CHANGELOG.md b/plugins/tmux-monitor/CHANGELOG.md
deleted file mode 100644
index 2b8c9ae63..000000000
--- a/plugins/tmux-monitor/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Browse and control tmux sessions, windows and panes across your hosts. Create, rename and close them, tag sessions and attach a terminal to any pane.
diff --git a/plugins/tmux-monitor/README.md b/plugins/tmux-monitor/README.md
deleted file mode 100644
index bb4b5bb1b..000000000
--- a/plugins/tmux-monitor/README.md
+++ /dev/null
@@ -1,58 +0,0 @@
-# Tmux Monitor
-
-Browse and control tmux sessions, windows and panes across your hosts.
-
-## Features
-
-- See the tmux sessions, windows and panes on every host with the monitor on.
-- CPU, memory and GPU use for each pane, and search across pane history.
-- Create, rename and close sessions and windows, and split and close panes.
-- Attach a terminal to any pane.
-- Tag sessions with your own labels.
-
-## Unified monitor
-
-Open Tmux Monitor from a host action or the command palette. **All hosts**
-shows an expandable tree for each SSH host with the monitor enabled. Filter
-by host name or address, or choose **Single host** to use one host at a time.
-Click a session name or pane to switch the live preview. The tree actions
-continue to target the host containing that session, even when two hosts
-have identical session names or pane IDs. The toolbar and output search
-operate on the selected host.
-
-The monitor remembers its mode, filter, collapsed hosts, expanded sessions,
-last host and selected pane locally. An explicit host action takes precedence
-over the saved host and clears the filter. A saved pane is restored only if
-it still exists in the host's latest overview.
-
-Expanded background hosts poll overview and resource metrics independently,
-with at most four background hosts loading at once. Collapsing or filtering
-out a background host stops its polling; switching away from the monitor
-stops all overview/metrics polling. The selected host keeps polling while
-its preview is active, including when its tree is collapsed. These controls
-use the existing SSH APIs and require only tmux on the remote hosts, not
-Auto Tmux.
-
-## Settings
-
-### Host
-
-- Enable Tmux Monitor: show this host in the monitor.
-
-## Permissions
-
-- `tmux-monitor.use`: Use Tmux Monitor. Admins and users have it by default.
-
-## Services
-
-Provides to other plugins:
-
-- `tmux.sessions`: find, attach to and create tmux sessions. The terminal uses this to attach to tmux on connect.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/tmux-monitor/locales/en.json b/plugins/tmux-monitor/locales/en.json
deleted file mode 100644
index 2f7f1b2dc..000000000
--- a/plugins/tmux-monitor/locales/en.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Enable Tmux Monitor",
-    "enableTmuxMonitorDesc": "Show this host in the Tmux Monitor and add its tmux actions to the sidebar",
-    "tabTmuxMonitor": "Tmux Monitor",
-    "docsLink": "View docs"
-  },
-  "nav": {
-    "tmuxMonitor": "Tmux Monitor"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Tmux Monitor",
-    "tmuxMonitorDesc": "Monitor tmux sessions across your hosts"
-  },
-  "permissions": {
-    "use": {
-      "title": "Use Tmux Monitor",
-      "description": "Browse and control tmux sessions, windows and panes on hosts with the monitor enabled."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Enable Tmux Monitor",
-        "description": "Watch and attach to tmux sessions running on this host."
-      },
-      "mouseEnabled": {
-        "label": "Enable tmux mouse support",
-        "description": "Apply mouse support to the tmux session when attaching or creating a session. Other sessions and global tmux settings are unchanged."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Tmux Monitor",
-    "failedToLoadHosts": "Failed to load hosts",
-    "failedToLoad": "Failed to load tmux sessions",
-    "tmuxUnavailable": "tmux is not installed on this host",
-    "noSessions": "No tmux sessions on this host",
-    "noHostSelected": "No host selected",
-    "attached": "Attached",
-    "detached": "Detached",
-    "attach": "Attach",
-    "editTags": "Edit tags",
-    "tagsHint": "Comma-separated tags (e.g. YOLO, lab, training)",
-    "tagsSaved": "Tags saved",
-    "tagsSaveFailed": "Failed to save tags",
-    "searchPlaceholder": "Search output across sessions...",
-    "searchResults": "{{count}} matches",
-    "searchFailed": "Search failed",
-    "selectPaneHint": "Select a pane to preview its output",
-    "closePreview": "Close preview",
-    "newSession": "New session",
-    "newSessionHint": "Session name (letters, digits, _ @ % + = -)",
-    "newSessionPlaceholder": "my-session",
-    "create": "Create",
-    "sessionCreated": "Session \"{{name}}\" created",
-    "sessionCreateFailed": "Failed to create session",
-    "splitRight": "Split right",
-    "splitDown": "Split down",
-    "splitFailed": "Failed to split pane",
-    "newWindow": "New window",
-    "windowCreateFailed": "Failed to create window",
-    "attachSessionTooltip": "Attach to {{session}}",
-    "refresh": "Refresh",
-    "refreshFailed": "Failed to refresh sessions",
-    "collapseAll": "Collapse all",
-    "expandAll": "Expand all",
-    "moreActions": "More actions",
-    "sessionStats": "Session stats",
-    "renameSessionTitle": "Rename session \"{{name}}\"",
-    "rename": "Rename",
-    "sessionRenamed": "Session renamed to \"{{name}}\"",
-    "sessionRenameFailed": "Failed to rename session",
-    "editTagsTitle": "Edit tags for \"{{name}}\"",
-    "killPane": "Kill pane",
-    "resizeTree": "Drag to resize, double-click to reset",
-    "reattach": "Re-attach (fixes a garbled view)",
-    "killWindow": "Kill window",
-    "killWindowTitle": "Kill window {{index}} of \"{{session}}\"?",
-    "killWindowBody": "Every pane and process in this window will be terminated. Killing the last window ends the session.",
-    "windowKillFailed": "Failed to kill window",
-    "statusActivity": "Activity",
-    "statusWindows": "Windows",
-    "statusPanes": "panes",
-    "statusTags": "Tags",
-    "killPaneTitle": "Kill pane {{id}}?",
-    "killPaneBody": "The process running in this pane will be terminated. Killing the last pane closes its window.",
-    "paneKillFailed": "Failed to kill pane",
-    "killSessionTitle": "Kill session \"{{name}}\"?",
-    "killSessionBody": "All windows and running processes in this session will be terminated. This cannot be undone.",
-    "kill": "Kill",
-    "sessionKilled": "Session \"{{name}}\" killed",
-    "sessionKillFailed": "Failed to kill session",
-    "hostUnreachable": "Could not connect to the host. Check that it is online and reachable.",
-    "noServer": "No tmux server is running on this host.",
-    "searchTruncated": "Partial results. Search covers the last {{lines}} lines of each pane and at most {{panes}} panes.",
-    "closeSearchResults": "Close search results",
-    "retry": "Retry",
-    "noHosts": "No SSH hosts available",
-    "noHostsHint": "Enable the Tmux Monitor option on an SSH host (Host Manager, Tmux Monitor tab) to monitor its tmux sessions.",
-    "tmuxInstallHint": "Install it on the host with:",
-    "attachTooltip": "Open a terminal to {{host}}",
-    "attachTooltipPane": "Open a terminal to {{host}}, tmux session {{session}}",
-    "timeJustNow": "just now",
-    "timeMinutes": "{{count}}m ago",
-    "timeHours": "{{count}}h ago",
-    "timeDays": "{{count}}d ago",
-    "allHosts": "All hosts",
-    "singleHost": "Single host",
-    "hostScope": "Monitor scope",
-    "filterHosts": "Filter hosts by name or address",
-    "selectHost": "Select host",
-    "toggleHost": "Expand or collapse {{host}}",
-    "noMatchingHosts": "No matching hosts",
-    "toggleSession": "Expand or collapse {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/af_ZA.json b/plugins/tmux-monitor/locales/translated/af_ZA.json
deleted file mode 100644
index a75decfde..000000000
--- a/plugins/tmux-monitor/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Aktiveer Tmux-monitor",
-    "enableTmuxMonitorDesc": "Wys hierdie gasheer in die Tmux Monitor en voeg sy tmux-aksies by die sybalk.",
-    "tabTmuxMonitor": "Tmux-monitor",
-    "docsLink": "Bekyk dokumente"
-  },
-  "nav": {
-    "tmuxMonitor": "Tmux-monitor"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Tmux-monitor",
-    "tmuxMonitorDesc": "Monitor tmux-sessies oor jou gashere"
-  },
-  "permissions": {
-    "use": {
-      "title": "Gebruik Tmux Monitor",
-      "description": "Blaai deur en beheer tmux-sessies, vensters en panele op gashere met die monitor geaktiveer."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Aktiveer Tmux-monitor",
-        "description": "Kyk en koppel aan tmux-sessies wat op hierdie gasheer loop."
-      },
-      "mouseEnabled": {
-        "label": "Aktiveer tmux-muisondersteuning",
-        "description": "Pas muissteun toe op die tmux-sessie wanneer 'n sessie gekoppel of geskep word. Ander sessies en globale tmux-instellings bly onveranderd."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Tmux-monitor",
-    "failedToLoadHosts": "Kon nie gashere laai nie",
-    "failedToLoad": "Kon nie tmux-sessies laai nie",
-    "tmuxUnavailable": "tmux is nie op hierdie gasheer geïnstalleer nie",
-    "noSessions": "Geen tmux-sessies op hierdie gasheer nie",
-    "noHostSelected": "Geen gasheer gekies nie",
-    "attached": "Aangeheg",
-    "detached": "Losstaande",
-    "attach": "Heg aan",
-    "editTags": "Wysig etikette",
-    "tagsHint": "Komma-geskeide etikette (bv. YOLO, laboratorium, opleiding)",
-    "tagsSaved": "Etikette gestoor",
-    "tagsSaveFailed": "Kon nie etikette stoor nie",
-    "searchPlaceholder": "Soek uitset oor sessies heen...",
-    "searchResults": "{{count}} ooreenkomste",
-    "searchFailed": "Soektog het misluk",
-    "selectPaneHint": "Kies 'n paneel om die uitvoer daarvan te voorskou",
-    "closePreview": "Maak voorskou toe",
-    "newSession": "Nuwe sessie",
-    "newSessionHint": "Sessienaam (letters, syfers, _ @ % + = -)",
-    "newSessionPlaceholder": "my-sessie",
-    "create": "Skep",
-    "sessionCreated": "Sessie \"{{name}}\" geskep",
-    "sessionCreateFailed": "Kon nie sessie skep nie",
-    "splitRight": "Regs verdeel",
-    "splitDown": "Verdeel af",
-    "splitFailed": "Kon nie paneel verdeel nie",
-    "newWindow": "Nuwe venster",
-    "windowCreateFailed": "Kon nie venster skep nie",
-    "attachSessionTooltip": "Heg aan {{session}}",
-    "refresh": "Verfris",
-    "refreshFailed": "Kon nie sessies verfris nie",
-    "collapseAll": "Vou alles in",
-    "expandAll": "Vou alles uit",
-    "moreActions": "Meer aksies",
-    "sessionStats": "Sessiestatistieke",
-    "renameSessionTitle": "Hernoem sessie \"{{name}}\"",
-    "rename": "Hernoem",
-    "sessionRenamed": "Sessie hernoem na \"{{name}}\"",
-    "sessionRenameFailed": "Kon nie sessie hernoem nie",
-    "editTagsTitle": "Wysig etikette vir \"{{name}}\"",
-    "killPane": "Maak paneel dood",
-    "resizeTree": "Sleep om te verander, dubbelklik om terug te stel",
-    "reattach": "Herbevestig (maak 'n deurmekaar aansig reg)",
-    "killWindow": "Maak venster dood",
-    "killWindowTitle": "Maak venster {{index}} van \"{{session}} \" dood?",
-    "killWindowBody": "Elke paneel en proses in hierdie venster sal beëindig word. Deur die laaste venster dood te maak, word die sessie beëindig.",
-    "windowKillFailed": "Kon nie venster doodmaak nie",
-    "statusActivity": "Aktiwiteit",
-    "statusWindows": "Vensters",
-    "statusPanes": "ruite",
-    "statusTags": "Etikette",
-    "killPaneTitle": "Maak paneel dood {{id}}?",
-    "killPaneBody": "Die proses wat in hierdie paneel loop, sal beëindig word. As die laaste paneel doodgemaak word, word die venster daarvan toegemaak.",
-    "paneKillFailed": "Kon nie paneel doodmaak nie",
-    "killSessionTitle": "Maak sessie \"{{name}} \" dood?",
-    "killSessionBody": "Alle vensters en lopende prosesse in hierdie sessie sal beëindig word. Dit kan nie ongedaan gemaak word nie.",
-    "kill": "Doodmaak",
-    "sessionKilled": "Sessie \"{{name}}\" is doodgemaak",
-    "sessionKillFailed": "Kon nie sessie doodmaak nie",
-    "hostUnreachable": "Kon nie aan die gasheer koppel nie. Maak seker dat dit aanlyn en bereikbaar is.",
-    "noServer": "Geen tmux-bediener loop op hierdie gasheer nie.",
-    "searchTruncated": "Gedeeltelike resultate. Soektog dek die laaste {{lines}} reëls van elke paneel en hoogstens {{panes}} panele.",
-    "closeSearchResults": "Maak soekresultate toe",
-    "retry": "Probeer weer",
-    "noHosts": "Geen SSH-gashere beskikbaar nie",
-    "noHostsHint": "Aktiveer die Tmux Monitor-opsie op 'n SSH-gasheer (Host Manager, Tmux Monitor-oortjie) om sy tmux-sessies te monitor.",
-    "tmuxInstallHint": "Installeer dit op die gasheer met:",
-    "attachTooltip": "Maak 'n terminaal oop na {{host}}",
-    "attachTooltipPane": "Maak 'n terminaal oop na {{host}}, tmux sessie {{session}}",
-    "timeJustNow": "nou net",
-    "timeMinutes": "{{count}}m gelede",
-    "timeHours": "{{count}}uur gelede",
-    "timeDays": "{{count}}dae gelede",
-    "allHosts": "Alle gashere",
-    "singleHost": "Enkele gasheer",
-    "hostScope": "Monitor omvang",
-    "filterHosts": "Filter gashere volgens naam of adres",
-    "selectHost": "Kies gasheer",
-    "toggleHost": "Vou uit of invou {{host}}",
-    "noMatchingHosts": "Geen ooreenstemmende gashere nie",
-    "toggleSession": "Vou uit of invou {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/ar_SA.json b/plugins/tmux-monitor/locales/translated/ar_SA.json
deleted file mode 100644
index 4387af6d5..000000000
--- a/plugins/tmux-monitor/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "تمكين مراقب Tmux",
-    "enableTmuxMonitorDesc": "إظهار هذا المضيف في مراقب Tmux وإضافة إجراءات tmux الخاصة به إلى الشريط الجانبي",
-    "tabTmuxMonitor": "مراقب Tmux",
-    "docsLink": "عرض المستندات"
-  },
-  "nav": {
-    "tmuxMonitor": "مراقب Tmux"
-  },
-  "dashboard": {
-    "tmuxMonitor": "مراقب Tmux",
-    "tmuxMonitorDesc": "مراقبة جلسات tmux عبر مضيفيك"
-  },
-  "permissions": {
-    "use": {
-      "title": "استخدم مراقب Tmux",
-      "description": "تصفح وتحكم في جلسات tmux والنوافذ والأجزاء على الأجهزة المضيفة التي تم تمكين الشاشة عليها."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "تمكين مراقب Tmux",
-        "description": "قم بمراقبة جلسات tmux التي تعمل على هذا المضيف والاتصال بها."
-      },
-      "mouseEnabled": {
-        "label": "تفعيل دعم الماوس في tmux",
-        "description": "قم بتفعيل دعم الماوس لجلسة tmux عند ربط جلسة أو إنشائها. تبقى الجلسات الأخرى وإعدادات tmux العامة دون تغيير."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "مراقب Tmux",
-    "failedToLoadHosts": "فشل تحميل الأجهزة المضيفة",
-    "failedToLoad": "فشل تحميل جلسات tmux",
-    "tmuxUnavailable": "tmux غير مثبت على هذا الجهاز المضيف",
-    "noSessions": "لا توجد جلسات tmux على هذا الجهاز المضيف",
-    "noHostSelected": "لم يتم تحديد أي جهاز مضيف",
-    "attached": "متصلة",
-    "detached": "منفصلة",
-    "attach": "اتصال",
-    "editTags": "تعديل العلامات",
-    "tagsHint": "علامات مفصولة بفواصل (مثال: YOLO, lab, training)",
-    "tagsSaved": "تم حفظ العلامات",
-    "tagsSaveFailed": "فشل حفظ العلامات",
-    "searchPlaceholder": "بحث في المخرجات عبر الجلسات...",
-    "searchResults": "{{count}} مطابقة",
-    "searchFailed": "فشل البحث",
-    "selectPaneHint": "حدد إطارًا لمعاينة مخرجاته",
-    "closePreview": "إغلاق المعاينة",
-    "newSession": "جلسة جديدة",
-    "newSessionHint": "اسم الجلسة (حروف، أرقام، _ @ % + = -)",
-    "newSessionPlaceholder": "my-session",
-    "create": "إنشاء",
-    "sessionCreated": "تم إنشاء الجلسة \"{{name}}\"",
-    "sessionCreateFailed": "فشل إنشاء الجلسة",
-    "splitRight": "تقسيم لليمين",
-    "splitDown": "تقسيم للأسفل",
-    "splitFailed": "فشل تقسيم الإطار",
-    "newWindow": "نافذة جديدة",
-    "windowCreateFailed": "فشل إنشاء النافذة",
-    "attachSessionTooltip": "اتصل بـ {{session}}",
-    "refresh": "تحديث",
-    "refreshFailed": "فشل تحديث الجلسات",
-    "collapseAll": "طي الكل",
-    "expandAll": "توسيع الكل",
-    "moreActions": "إجراءات أخرى",
-    "sessionStats": "إحصائيات الجلسة",
-    "renameSessionTitle": "إعادة تسمية الجلسة \"{{name}}\"",
-    "rename": "إعادة تسمية",
-    "sessionRenamed": "تمت إعادة تسمية الجلسة إلى \"{{name}}\"",
-    "sessionRenameFailed": "فشل إعادة تسمية الجلسة",
-    "editTagsTitle": "تعديل العلامات لـ \"{{name}}\"",
-    "killPane": "إنهاء الجزء",
-    "resizeTree": "اسحب لتغيير الحجم، وانقر نقراً مزدوجاً لإعادة الضبط",
-    "reattach": "إعادة الارتباط (لإصلاح العرض المشوش)",
-    "killWindow": "إنهاء النافذة",
-    "killWindowTitle": "هل تريد إنهاء النافذة {{index}} من الجلسة \"{{session}}\"؟",
-    "killWindowBody": "سيتم إنهاء كل جزء وعملية في هذه النافذة. إنهاء آخر نافذة ينهي الجلسة.",
-    "windowKillFailed": "فشل إنهاء النافذة",
-    "statusActivity": "نشاط",
-    "statusWindows": "نوافذ",
-    "statusPanes": "أجزاء",
-    "statusTags": "وسوم",
-    "killPaneTitle": "هل تريد إنهاء الجزء {{id}}؟",
-    "killPaneBody": "سيتم إنهاء العملية الجارية في هذا الجزء. إنهاء آخر جزء يغلق نافذته.",
-    "paneKillFailed": "فشل إنهاء الجزء",
-    "killSessionTitle": "هل تريد إنهاء الجلسة \"{{name}}\"؟",
-    "killSessionBody": "سيتم إنهاء جميع النوافذ والعمليات الجارية في هذه الجلسة. لا يمكن التراجع عن ذلك.",
-    "kill": "إنهاء",
-    "sessionKilled": "تم إنهاء الجلسة \"{{name}}\"",
-    "sessionKillFailed": "فشل إنهاء الجلسة",
-    "hostUnreachable": "تعذر الاتصال بالمضيف. تأكد من أنه متصل وقابل للوصول.",
-    "noServer": "لا يوجد خادم tmux يعمل على هذا المضيف.",
-    "searchTruncated": "نتائج جزئية. يغطي البحث آخر {{lines}} سطر من كل جزء وبحد أقصى {{panes}} أجزاء.",
-    "closeSearchResults": "إغلاق نتائج البحث",
-    "retry": "إعادة المحاولة",
-    "noHosts": "لا توجد مضيفات SSH متاحة",
-    "noHostsHint": "قم بتمكين خيار مراقبة Tmux على مضيف SSH (مدير المضيف، علامة تبويب مراقبة Tmux) لمراقبة جلسات tmux الخاصة به.",
-    "tmuxInstallHint": "قم بتثبيته على المضيف باستخدام:",
-    "attachTooltip": "افتح طرفية إلى {{host}}",
-    "attachTooltipPane": "افتح نافذة طرفية إلى {{host}}، ثم افتح جلسة tmux {{session}}",
-    "timeJustNow": "الآن",
-    "timeMinutes": "قبل {{count}}m",
-    "timeHours": "قبل {{count}}h",
-    "timeDays": "قبل {{count}}d",
-    "allHosts": "جميع المضيفين",
-    "singleHost": "مضيف واحد",
-    "hostScope": "منظار الشاشة",
-    "filterHosts": "تصفية المضيفين حسب الاسم أو العنوان",
-    "selectHost": "حدد المضيف",
-    "toggleHost": "توسيع أو طي {{host}}",
-    "noMatchingHosts": "لا توجد مضيفات مطابقة",
-    "toggleSession": "توسيع أو طي {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/bg_BG.json b/plugins/tmux-monitor/locales/translated/bg_BG.json
deleted file mode 100644
index 78dc8032f..000000000
--- a/plugins/tmux-monitor/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Активиране на Tmux монитор",
-    "enableTmuxMonitorDesc": "Показване на този хост в Tmux монитора и добавяне на неговите tmux действия към страничната лента",
-    "tabTmuxMonitor": "Tmux монитор",
-    "docsLink": "Преглед на документи"
-  },
-  "nav": {
-    "tmuxMonitor": "Tmux монитор"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Tmux монитор",
-    "tmuxMonitorDesc": "Следете tmux сесиите на вашите хостове"
-  },
-  "permissions": {
-    "use": {
-      "title": "Използвайте Tmux монитор",
-      "description": "Преглеждайте и контролирайте tmux сесии, прозорци и панели на хостове с активиран монитор."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Активиране на Tmux монитор",
-        "description": "Гледайте и се прикачете към tmux сесии, изпълнявани на този хост."
-      },
-      "mouseEnabled": {
-        "label": "Активиране на поддръжката на мишката от tmux",
-        "description": "Прилагайте поддръжка на мишка към tmux сесията при прикачване или създаване на сесия. Другите сесии и глобалните tmux настройки остават непроменени."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Tmux монитор",
-    "failedToLoadHosts": "Зареждането на хостовете не бе успешно",
-    "failedToLoad": "Зареждането на tmux сесиите не бе успешно",
-    "tmuxUnavailable": "tmux не е инсталиран на този хост",
-    "noSessions": "Няма tmux сесии на този хост",
-    "noHostSelected": "Няма избран хост",
-    "attached": "Прикачен",
-    "detached": "Отделен",
-    "attach": "Прикачи",
-    "editTags": "Редактиране на етикети",
-    "tagsHint": "Етикети, разделени със запетаи (напр. YOLO, лаборатория, обучение)",
-    "tagsSaved": "Етикетите са запазени",
-    "tagsSaveFailed": "Запазването на етикетите не бе успешно",
-    "searchPlaceholder": "Търсене на резултати в различни сесии...",
-    "searchResults": "{{count}} съвпадения",
-    "searchFailed": "Търсенето не беше успешно",
-    "selectPaneHint": "Изберете панел, за да прегледате резултата му",
-    "closePreview": "Затвори визуализацията",
-    "newSession": "Нова сесия",
-    "newSessionHint": "Име на сесията (букви, цифри, _ @ % + = -)",
-    "newSessionPlaceholder": "моята сесия",
-    "create": "Създаване",
-    "sessionCreated": "Сесия „{{name}}“ е създадена",
-    "sessionCreateFailed": "Създаването на сесия не бе успешно",
-    "splitRight": "Разделяне надясно",
-    "splitDown": "Разделете",
-    "splitFailed": "Разделянето на панела не бе успешно",
-    "newWindow": "Нов прозорец",
-    "windowCreateFailed": "Създаването на прозорец не бе успешно",
-    "attachSessionTooltip": "Прикачи към {{session}}",
-    "refresh": "Обновяване",
-    "refreshFailed": "Неуспешно обновяване на сесиите",
-    "collapseAll": "Свиване на всички",
-    "expandAll": "Разгъване на всички",
-    "moreActions": "Още действия",
-    "sessionStats": "Статистика за сесиите",
-    "renameSessionTitle": "Преименуване на сесия „{{name}}“",
-    "rename": "Преименуване",
-    "sessionRenamed": "Сесията е преименувана на „{{name}}“",
-    "sessionRenameFailed": "Преименуването на сесията не бе успешно",
-    "editTagsTitle": "Редактиране на етикети за „{{name}}“",
-    "killPane": "Панелът за убиване",
-    "resizeTree": "Плъзнете, за да промените размера, щракнете двукратно, за да нулирате",
-    "reattach": "Повторно прикрепване (коригира неправилен изглед)",
-    "killWindow": "Прозорец за затваряне",
-    "killWindowTitle": "Да завършим ли прозореца {{index}} от \"{{session}}\"?",
-    "killWindowBody": "Всеки панел и процес в този прозорец ще бъде прекратен. Затварянето на последния прозорец прекратява сесията.",
-    "windowKillFailed": "Неуспешно затваряне на прозореца",
-    "statusActivity": "Дейност",
-    "statusWindows": "Прозорци",
-    "statusPanes": "прозорци",
-    "statusTags": "Етикети",
-    "killPaneTitle": "Да се прекрати панелът {{id}}?",
-    "killPaneBody": "Процесът, изпълняващ се в този панел, ще бъде прекратен. Затварянето на последния панел затваря неговия прозорец.",
-    "paneKillFailed": "Неуспешно прекратяване на панела",
-    "killSessionTitle": "Да прекратя сесията „{{name}}“?",
-    "killSessionBody": "Всички прозорци и работещи процеси в тази сесия ще бъдат прекратени. Това не може да бъде отменено.",
-    "kill": "Убий",
-    "sessionKilled": "Сесия „{{name}}“ е прекратена",
-    "sessionKillFailed": "Неуспешно прекратяване на сесията",
-    "hostUnreachable": "Не можах да се свържа с хоста. Проверете дали е онлайн и достъпен.",
-    "noServer": "На този хост не работи tmux сървър.",
-    "searchTruncated": "Частични резултати. Търсенето обхваща последните {{lines}} реда от всеки панел и най-много {{panes}} панела.",
-    "closeSearchResults": "Затвори резултатите от търсенето",
-    "retry": "Опитай отново",
-    "noHosts": "Няма налични SSH хостове",
-    "noHostsHint": "Активирайте опцията Tmux Monitor на SSH хост (Host Manager, раздел Tmux Monitor), за да наблюдавате неговите tmux сесии.",
-    "tmuxInstallHint": "Инсталирайте го на хоста с:",
-    "attachTooltip": "Отворете терминал до {{host}}",
-    "attachTooltipPane": "Отворете терминал към {{host}}, tmux сесия {{session}}",
-    "timeJustNow": "точно сега",
-    "timeMinutes": "преди {{count}}мин.",
-    "timeHours": "преди {{count}}ч",
-    "timeDays": "преди {{count}}дни",
-    "allHosts": "Всички хостове",
-    "singleHost": "Единичен хост",
-    "hostScope": "Обхват на монитора",
-    "filterHosts": "Филтриране на хостове по име или адрес",
-    "selectHost": "Изберете хост",
-    "toggleHost": "Разгъване или свиване {{host}}",
-    "noMatchingHosts": "Няма съответстващи хостове",
-    "toggleSession": "Разгъване или свиване {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/bn_BD.json b/plugins/tmux-monitor/locales/translated/bn_BD.json
deleted file mode 100644
index c1909c82f..000000000
--- a/plugins/tmux-monitor/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Tmux মনিটর সক্রিয় করুন",
-    "enableTmuxMonitorDesc": "এই হোস্টটিকে Tmux মনিটরে দেখান এবং এর tmux অ্যাকশনগুলো সাইডবারে যোগ করুন।",
-    "tabTmuxMonitor": "Tmux মনিটর",
-    "docsLink": "নথি দেখুন"
-  },
-  "nav": {
-    "tmuxMonitor": "Tmux মনিটর"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Tmux মনিটর",
-    "tmuxMonitorDesc": "আপনার হোস্ট জুড়ে tmux সেশনগুলি নিরীক্ষণ করুন"
-  },
-  "permissions": {
-    "use": {
-      "title": "Tmux মনিটর ব্যবহার করুন",
-      "description": "যেসব হোস্টে মনিটর সক্রিয় আছে, সেগুলোতে tmux সেশন, উইন্ডো এবং প্যান ব্রাউজ ও নিয়ন্ত্রণ করুন।"
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Tmux মনিটর সক্রিয় করুন",
-        "description": "এই হোস্টে চলমান tmux সেশনগুলো পর্যবেক্ষণ করুন এবং সেগুলোতে সংযুক্ত হন।"
-      },
-      "mouseEnabled": {
-        "label": "tmux মাউস সমর্থন সক্রিয় করুন",
-        "description": "সেশন সংযুক্ত বা তৈরি করার সময় tmux সেশনে মাউস সাপোর্ট প্রয়োগ করুন। অন্যান্য সেশন এবং গ্লোবাল tmux সেটিংস অপরিবর্তিত থাকবে।"
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Tmux মনিটর",
-    "failedToLoadHosts": "হোস্ট লোড করতে ব্যর্থ হয়েছে",
-    "failedToLoad": "tmux সেশন লোড করতে ব্যর্থ হয়েছে",
-    "tmuxUnavailable": "এই হোস্টে tmux ইনস্টল করা নেই",
-    "noSessions": "এই হোস্টে কোনো tmux সেশন নেই",
-    "noHostSelected": "কোন হোস্ট নির্বাচন করা হয়নি",
-    "attached": "সংযুক্ত",
-    "detached": "বিচ্ছিন্ন",
-    "attach": "সংযুক্ত করুন",
-    "editTags": "ট্যাগ সম্পাদনা করুন",
-    "tagsHint": "কমা দ্বারা পৃথক করা ট্যাগ (যেমন YOLO, lab, training)",
-    "tagsSaved": "ট্যাগগুলি সংরক্ষিত হয়েছে",
-    "tagsSaveFailed": "ট্যাগ সংরক্ষণ করতে ব্যর্থ হয়েছে",
-    "searchPlaceholder": "বিভিন্ন সেশন জুড়ে অনুসন্ধানের ফলাফল...",
-    "searchResults": "{{count}} মিল",
-    "searchFailed": "অনুসন্ধান ব্যর্থ হয়েছে",
-    "selectPaneHint": "এর আউটপুট প্রিভিউ করতে একটি প্যান নির্বাচন করুন।",
-    "closePreview": "ক্লোজ প্রিভিউ",
-    "newSession": "নতুন অধিবেশন",
-    "newSessionHint": "সেশনের নাম (অক্ষর, সংখ্যা, _ @ % + = -)",
-    "newSessionPlaceholder": "আমার-সেশন",
-    "create": "তৈরি করুন",
-    "sessionCreated": "সেশন \"{{name}}\" তৈরি করা হয়েছে",
-    "sessionCreateFailed": "সেশন তৈরি করতে ব্যর্থ হয়েছে",
-    "splitRight": "ডানদিকে বিভক্ত",
-    "splitDown": "বিভক্ত করুন",
-    "splitFailed": "প্যান বিভক্ত করতে ব্যর্থ হয়েছে",
-    "newWindow": "নতুন জানালা",
-    "windowCreateFailed": "উইন্ডো তৈরি করতে ব্যর্থ হয়েছে",
-    "attachSessionTooltip": "{{session}} এর সাথে সংযুক্ত করুন",
-    "refresh": "রিফ্রেশ",
-    "refreshFailed": "সেশনগুলি রিফ্রেশ করতে ব্যর্থ হয়েছে",
-    "collapseAll": "সবগুলো সংকুচিত করুন",
-    "expandAll": "সবগুলো প্রসারিত করুন",
-    "moreActions": "আরও পদক্ষেপ",
-    "sessionStats": "সেশন পরিসংখ্যান",
-    "renameSessionTitle": "সেশনটির নাম পরিবর্তন করুন \"{{name}}\"",
-    "rename": "নাম পরিবর্তন",
-    "sessionRenamed": "সেশনের নাম পরিবর্তন করে \"{{name}} \" রাখা হয়েছে",
-    "sessionRenameFailed": "সেশনের নাম পরিবর্তন করতে ব্যর্থ হয়েছে",
-    "editTagsTitle": "\"{{name}} \" এর জন্য ট্যাগ সম্পাদনা করুন",
-    "killPane": "কিল প্যান",
-    "resizeTree": "আকার পরিবর্তন করতে টেনে আনুন, রিসেট করতে ডাবল-ক্লিক করুন।",
-    "reattach": "পুনরায় সংযুক্ত করুন (বিকৃত দৃশ্য ঠিক করে)",
-    "killWindow": "কিল উইন্ডো",
-    "killWindowTitle": "\"{{session}} \" উইন্ডোটি {{index}} বন্ধ করুন?",
-    "killWindowBody": "এই উইন্ডোর প্রতিটি প্যান এবং প্রসেস বন্ধ করে দেওয়া হবে। সর্বশেষ উইন্ডোটি বন্ধ করলে সেশনটি শেষ হয়ে যায়।",
-    "windowKillFailed": "উইন্ডো বন্ধ করতে ব্যর্থ হয়েছে",
-    "statusActivity": "কার্যকলাপ",
-    "statusWindows": "উইন্ডোজ",
-    "statusPanes": "প্যান",
-    "statusTags": "ট্যাগ",
-    "killPaneTitle": "প্যান বন্ধ করুন {{id}}?",
-    "killPaneBody": "এই প্যানে চলমান প্রসেসটি বন্ধ করে দেওয়া হবে। সর্বশেষ প্যানটি কিল করলে তার উইন্ডোটি বন্ধ হয়ে যায়।",
-    "paneKillFailed": "প্যানটি বন্ধ করতে ব্যর্থ হয়েছে",
-    "killSessionTitle": "সেশন বন্ধ করুন \"{{name}}\"?",
-    "killSessionBody": "এই সেশনের সমস্ত উইন্ডো এবং চলমান প্রসেস বন্ধ করে দেওয়া হবে। এটি পূর্বাবস্থায় ফেরানো যাবে না।",
-    "kill": "হত্যা করুন",
-    "sessionKilled": "সেশন \"{{name}}\" বাতিল করা হয়েছে",
-    "sessionKillFailed": "সেশন বন্ধ করতে ব্যর্থ হয়েছে",
-    "hostUnreachable": "হোস্টের সাথে সংযোগ স্থাপন করা যায়নি। এটি অনলাইন এবং অ্যাক্সেসযোগ্য আছে কিনা তা যাচাই করুন।",
-    "noServer": "এই হোস্টে কোনো tmux সার্ভার চালু নেই।",
-    "searchTruncated": "আংশিক ফলাফল। অনুসন্ধান প্রতিটি পেনের শেষ {{lines}} টি লাইন এবং সর্বাধিক {{panes}} টি পেন পর্যন্ত সীমাবদ্ধ।",
-    "closeSearchResults": "অনুসন্ধানের ফলাফল বন্ধ করুন",
-    "retry": "পুনরায় চেষ্টা করুন",
-    "noHosts": "কোন SSH হোস্ট উপলব্ধ নেই",
-    "noHostsHint": "একটি SSH হোস্টের tmux সেশনগুলো নিরীক্ষণ করার জন্য, হোস্ট ম্যানেজারের Tmux মনিটর ট্যাবে Tmux মনিটর অপশনটি সক্রিয় করুন।",
-    "tmuxInstallHint": "হোস্টে এটি ইনস্টল করুন:",
-    "attachTooltip": "{{host}} এ একটি টার্মিনাল খুলুন",
-    "attachTooltipPane": "{{host}}-এ একটি টার্মিনাল খুলুন, {{session}} tmux সেশন",
-    "timeJustNow": "এইমাত্র",
-    "timeMinutes": "{{count}}মিনিট আগে",
-    "timeHours": "{{count}}ঘণ্টা আগে",
-    "timeDays": "{{count}}দিন আগে",
-    "allHosts": "সকল হোস্ট",
-    "singleHost": "একক হোস্ট",
-    "hostScope": "মনিটরের পরিধি",
-    "filterHosts": "নাম বা ঠিকানা অনুসারে হোস্ট ফিল্টার করুন",
-    "selectHost": "হোস্ট নির্বাচন করুন",
-    "toggleHost": "প্রসারিত করুন বা সংকুচিত করুন {{host}}",
-    "noMatchingHosts": "কোনো মিলযুক্ত হোস্ট নেই",
-    "toggleSession": "প্রসারিত করুন বা সংকুচিত করুন {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/ca_ES.json b/plugins/tmux-monitor/locales/translated/ca_ES.json
deleted file mode 100644
index a273e5cdd..000000000
--- a/plugins/tmux-monitor/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Activa el monitor Tmux",
-    "enableTmuxMonitorDesc": "Mostra aquest host al monitor Tmux i afegeix les seves accions tmux a la barra lateral",
-    "tabTmuxMonitor": "Monitor Tmux",
-    "docsLink": "Veure documents"
-  },
-  "nav": {
-    "tmuxMonitor": "Monitor Tmux"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Monitor Tmux",
-    "tmuxMonitorDesc": "Supervisa les sessions tmux a través dels teus amfitrions"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilitza el monitor Tmux",
-      "description": "Navega i controla les sessions, finestres i panells de tmux als hosts amb el monitor habilitat."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Activa el monitor Tmux",
-        "description": "Vigila i connecta't a les sessions tmux que s'executen en aquest amfitrió."
-      },
-      "mouseEnabled": {
-        "label": "Habilita la compatibilitat amb el ratolí tmux",
-        "description": "Aplica la compatibilitat amb el ratolí a la sessió de tmux en connectar o crear una sessió. La resta de sessions i la configuració global de tmux no canvien."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Monitor Tmux",
-    "failedToLoadHosts": "No s'han pogut carregar els amfitrions",
-    "failedToLoad": "No s'han pogut carregar les sessions tmux",
-    "tmuxUnavailable": "tmux no està instal·lat en aquest host",
-    "noSessions": "No hi ha sessions tmux en aquest host.",
-    "noHostSelected": "No s'ha seleccionat cap amfitrió",
-    "attached": "Adjuntat",
-    "detached": "Desconnectat",
-    "attach": "Adjunta",
-    "editTags": "Edita les etiquetes",
-    "tagsHint": "Etiquetes separades per comes (per exemple, YOLO, laboratori, formació)",
-    "tagsSaved": "Etiquetes desades",
-    "tagsSaveFailed": "No s'han pogut desar les etiquetes",
-    "searchPlaceholder": "Cerca resultats entre sessions...",
-    "searchResults": "coincidències {{count}}",
-    "searchFailed": "La cerca ha fallat",
-    "selectPaneHint": "Seleccioneu un panell per previsualitzar-ne el resultat",
-    "closePreview": "Tanca la vista prèvia",
-    "newSession": "Nova sessió",
-    "newSessionHint": "Nom de la sessió (lletres, dígits, _ @ % + = -)",
-    "newSessionPlaceholder": "la meva sessió",
-    "create": "Crea",
-    "sessionCreated": "S'ha creat la sessió \"{{name}}\"",
-    "sessionCreateFailed": "No s'ha pogut crear la sessió",
-    "splitRight": "Dividir a la dreta",
-    "splitDown": "Dividir",
-    "splitFailed": "No s'ha pogut dividir el panell",
-    "newWindow": "Nova finestra",
-    "windowCreateFailed": "No s'ha pogut crear la finestra",
-    "attachSessionTooltip": "Adjunta a {{session}}",
-    "refresh": "Actualitza",
-    "refreshFailed": "No s'han pogut actualitzar les sessions",
-    "collapseAll": "Replega-ho tot",
-    "expandAll": "Expandeix-ho tot",
-    "moreActions": "Més accions",
-    "sessionStats": "Estadístiques de sessió",
-    "renameSessionTitle": "Canvia el nom de la sessió \"{{name}}\"",
-    "rename": "Canvia el nom",
-    "sessionRenamed": "La sessió s'ha rebatejat com a \"{{name}}\"",
-    "sessionRenameFailed": "No s'ha pogut canviar el nom de la sessió",
-    "editTagsTitle": "Edita les etiquetes per a \"{{name}}\"",
-    "killPane": "Tauler de tancament",
-    "resizeTree": "Arrossegueu per canviar la mida, feu doble clic per restablir",
-    "reattach": "Torna a connectar (corregeix una vista distorsionada)",
-    "killWindow": "Finestra de tancament",
-    "killWindowTitle": "Tancar la finestra {{index}} de \"{{session}}\"?",
-    "killWindowBody": "Tots els panells i processos d'aquesta finestra finalitzaran. Tancar l'última finestra finalitza la sessió.",
-    "windowKillFailed": "No s'ha pogut tancar la finestra",
-    "statusActivity": "Activitat",
-    "statusWindows": "Finestres",
-    "statusPanes": "panells",
-    "statusTags": "Etiquetes",
-    "killPaneTitle": "Tanca el panell {{id}}?",
-    "killPaneBody": "El procés que s'executa en aquest panell finalitzarà. Si tanqueu l'últim panell, se'n tanca la finestra.",
-    "paneKillFailed": "No s'ha pogut tancar el panell",
-    "killSessionTitle": "Tancar sessió \"{{name}}\"?",
-    "killSessionBody": "Totes les finestres i els processos en execució d'aquesta sessió es tancaran. Això no es pot desfer.",
-    "kill": "Matar",
-    "sessionKilled": "La sessió \"{{name}}\" ha estat cancel·lada",
-    "sessionKillFailed": "No s'ha pogut tancar la sessió",
-    "hostUnreachable": "No s'ha pogut connectar amb l'amfitrió. Comproveu que estigui en línia i accessible.",
-    "noServer": "No hi ha cap servidor tmux en execució en aquest host.",
-    "searchTruncated": "Resultats parcials. La cerca cobreix les últimes {{lines}} línies de cada panell i com a màxim {{panes}} panells.",
-    "closeSearchResults": "Tanca els resultats de la cerca",
-    "retry": "Torna-ho a intentar",
-    "noHosts": "No hi ha hosts SSH disponibles",
-    "noHostsHint": "Activeu l'opció Monitor de Tmux en un amfitrió SSH (Gestor d'amfitrions, pestanya Monitor de Tmux) per supervisar les seves sessions tmux.",
-    "tmuxInstallHint": "Instal·leu-lo a l'amfitrió amb:",
-    "attachTooltip": "Obre un terminal a {{host}}",
-    "attachTooltipPane": "Obre un terminal a {{host}}, sessió tmux {{session}}",
-    "timeJustNow": "ara mateix",
-    "timeMinutes": "fa {{count}}minuts",
-    "timeHours": "fa {{count}}h",
-    "timeDays": "fa {{count}}dies",
-    "allHosts": "Tots els amfitrions",
-    "singleHost": "Amfitrió únic",
-    "hostScope": "Supervisar l'abast",
-    "filterHosts": "Filtra els amfitrions per nom o adreça",
-    "selectHost": "Selecciona l'amfitrió",
-    "toggleHost": "Expandeix o contrau {{host}}",
-    "noMatchingHosts": "No hi ha amfitrions coincidents",
-    "toggleSession": "Expandeix o contrau {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/cs_CZ.json b/plugins/tmux-monitor/locales/translated/cs_CZ.json
deleted file mode 100644
index 69ff16c98..000000000
--- a/plugins/tmux-monitor/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Povolit monitorování Tmux",
-    "enableTmuxMonitorDesc": "Zobrazit tohoto hostitele v Tmux Monitoru a přidat jeho tmux akce do postranního panelu",
-    "tabTmuxMonitor": "Monitor Tmux",
-    "docsLink": "Zobrazit dokumenty"
-  },
-  "nav": {
-    "tmuxMonitor": "Monitor Tmux"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Monitor Tmux",
-    "tmuxMonitorDesc": "Monitorujte relace tmux napříč vašimi hostiteli"
-  },
-  "permissions": {
-    "use": {
-      "title": "Použijte monitor Tmux",
-      "description": "Procházejte a ovládejte relace, okna a panely tmux na hostitelích s povoleným monitorem."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Povolit monitorování Tmux",
-        "description": "Sledujte a připojujte se k relacím tmux spuštěným na tomto hostiteli."
-      },
-      "mouseEnabled": {
-        "label": "Povolit podporu myši tmux",
-        "description": "Při připojování nebo vytváření relace použijte podporu myši pro relaci tmux. Ostatní relace a globální nastavení tmux zůstanou nezměněny."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Monitor Tmux",
-    "failedToLoadHosts": "Nepodařilo se načíst hostitele",
-    "failedToLoad": "Nepodařilo se načíst relace tmux",
-    "tmuxUnavailable": "tmux není na tomto hostiteli nainstalován",
-    "noSessions": "Na tomto hostiteli nejsou žádné relace tmux.",
-    "noHostSelected": "Nebyl vybrán žádný hostitel",
-    "attached": "Připojeno",
-    "detached": "Samostatně stojící",
-    "attach": "Připojit",
-    "editTags": "Upravit štítky",
-    "tagsHint": "Štítky oddělené čárkami (např. YOLO, lab, training)",
-    "tagsSaved": "Štítky uloženy",
-    "tagsSaveFailed": "Uložení štítků se nezdařilo",
-    "searchPlaceholder": "Vyhledávání výstupu napříč relacemi...",
-    "searchResults": "{{count}} shod",
-    "searchFailed": "Hledání se nezdařilo",
-    "selectPaneHint": "Vyberte podokno pro náhled jeho výstupu",
-    "closePreview": "Zavřít náhled",
-    "newSession": "Nová relace",
-    "newSessionHint": "Název relace (písmena, číslice, _ @ % + = -)",
-    "newSessionPlaceholder": "moje-relace",
-    "create": "Vytvořit",
-    "sessionCreated": "Relace „{{name}}“ byla vytvořena",
-    "sessionCreateFailed": "Nepodařilo se vytvořit relaci",
-    "splitRight": "Rozdělit vpravo",
-    "splitDown": "Rozdělit",
-    "splitFailed": "Rozdělení panelu se nezdařilo",
-    "newWindow": "Nové okno",
-    "windowCreateFailed": "Nepodařilo se vytvořit okno",
-    "attachSessionTooltip": "Připojit k {{session}}",
-    "refresh": "Obnovit",
-    "refreshFailed": "Nepodařilo se obnovit relace",
-    "collapseAll": "Sbalit vše",
-    "expandAll": "Rozbalit vše",
-    "moreActions": "Další akce",
-    "sessionStats": "Statistiky relací",
-    "renameSessionTitle": "Přejmenovat relaci „{{name}}“",
-    "rename": "Přejmenovat",
-    "sessionRenamed": "Relace přejmenována na „{{name}}“",
-    "sessionRenameFailed": "Přejmenování relace se nezdařilo",
-    "editTagsTitle": "Upravit štítky pro „{{name}}“",
-    "killPane": "Zavřete panel",
-    "resizeTree": "Přetažením změníte velikost, dvojitým kliknutím resetujete",
-    "reattach": "Znovu připevnit (opravuje zkreslený obraz)",
-    "killWindow": "Okno pro ukončení",
-    "killWindowTitle": "Zavřít okno {{index}} z \"{{session}}\"?",
-    "killWindowBody": "Každé podokno a proces v tomto okně bude ukončeno. Zavřením posledního okna se relace ukončí.",
-    "windowKillFailed": "Nepodařilo se ukončit okno",
-    "statusActivity": "Aktivita",
-    "statusWindows": "Okna",
-    "statusPanes": "tabule",
-    "statusTags": "Štítky",
-    "killPaneTitle": "Zavřít panel {{id}}?",
-    "killPaneBody": "Proces spuštěný v tomto panelu bude ukončen. Ukončením posledního panelu se zavře jeho okno.",
-    "paneKillFailed": "Nepodařilo se ukončit podokno",
-    "killSessionTitle": "Ukončit relaci „{{name}}“?",
-    "killSessionBody": "Všechna okna a spuštěné procesy v této relaci budou ukončeny. Tuto akci nelze vrátit zpět.",
-    "kill": "Zabít",
-    "sessionKilled": "Relace „{{name}}“ byla ukončena",
-    "sessionKillFailed": "Nepodařilo se ukončit relaci",
-    "hostUnreachable": "Nepodařilo se připojit k hostiteli. Zkontrolujte, zda je online a dostupný.",
-    "noServer": "Na tomto hostiteli neběží žádný tmux server.",
-    "searchTruncated": "Částečné výsledky. Hledání pokrývá posledních {{lines}} řádků každého panelu a maximálně {{panes}} panelů.",
-    "closeSearchResults": "Zavřít výsledky vyhledávání",
-    "retry": "Zkusit znovu",
-    "noHosts": "Žádní SSH hostitelé nejsou k dispozici",
-    "noHostsHint": "Povolte možnost Tmux Monitor na hostiteli SSH (Správce hostitelů, záložka Tmux Monitor), abyste mohli monitorovat jeho relace tmux.",
-    "tmuxInstallHint": "Nainstalujte jej na hostitele pomocí:",
-    "attachTooltip": "Otevřete terminál pro {{host}}",
-    "attachTooltipPane": "Otevřete terminál pro {{host}}, tmux session {{session}}",
-    "timeJustNow": "právě teď",
-    "timeMinutes": "{{count}}před m",
-    "timeHours": "{{count}}před hodinami",
-    "timeDays": "Před {{count}}dny",
-    "allHosts": "Všichni hostitelé",
-    "singleHost": "Jeden hostitel",
-    "hostScope": "Rozsah monitoru",
-    "filterHosts": "Filtrovat hostitele podle jména nebo adresy",
-    "selectHost": "Vyberte hostitele",
-    "toggleHost": "Rozbalit nebo sbalit {{host}}",
-    "noMatchingHosts": "Žádní odpovídající hostitelé",
-    "toggleSession": "Rozbalit nebo sbalit {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/da_DK.json b/plugins/tmux-monitor/locales/translated/da_DK.json
deleted file mode 100644
index 9b71639e4..000000000
--- a/plugins/tmux-monitor/locales/translated/da_DK.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Aktivér Tmux-skærm",
-    "enableTmuxMonitorDesc": "Vis denne vært i Tmux Monitor og tilføj dens tmux-handlinger til sidebjælken",
-    "tabTmuxMonitor": "Tmux-skærm",
-    "docsLink": "Se dokumenter"
-  },
-  "nav": {
-    "tmuxMonitor": "Tmux-skærm"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Tmux-skærm",
-    "tmuxMonitorDesc": "Overvåg tmux-sessioner på tværs af dine værter"
-  },
-  "permissions": {
-    "use": {
-      "title": "Brug Tmux Monitor",
-      "description": "Gennemse og styr tmux-sessioner, vinduer og ruder på værter med skærmen aktiveret."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Aktivér Tmux-skærm",
-        "description": "Se og tilslut til tmux-sessioner, der kører på denne vært."
-      },
-      "mouseEnabled": {
-        "label": "Aktivér tmux-museunderstøttelse",
-        "description": "Anvend museunderstøttelse til tmux-sessionen, når du tilknytter eller opretter en session. Andre sessioner og globale tmux-indstillinger forbliver uændrede."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Tmux-skærm",
-    "failedToLoadHosts": "Kunne ikke indlæse værter",
-    "failedToLoad": "Kunne ikke indlæse tmux-sessioner",
-    "tmuxUnavailable": "tmux er ikke installeret på denne vært",
-    "noSessions": "Ingen tmux-sessioner på denne vært",
-    "noHostSelected": "Ingen vært valgt",
-    "attached": "Vedhæftet",
-    "detached": "Fritliggende",
-    "attach": "Vedhæft",
-    "editTags": "Rediger tags",
-    "tagsHint": "Kommaseparerede tags (f.eks. YOLO, lab, træning)",
-    "tagsSaved": "Tags gemt",
-    "tagsSaveFailed": "Kunne ikke gemme tags",
-    "searchPlaceholder": "Søg i output på tværs af sessioner...",
-    "searchResults": "{{count}} matcher",
-    "searchFailed": "Søgningen mislykkedes",
-    "selectPaneHint": "Vælg en rude for at få vist dens output",
-    "closePreview": "Luk forhåndsvisning",
-    "newSession": "Ny session",
-    "newSessionHint": "Sessionsnavn (bogstaver, cifre, _ @ % + = -)",
-    "newSessionPlaceholder": "min-session",
-    "create": "Skabe",
-    "sessionCreated": "Sessionen \"{{name}}\" blev oprettet",
-    "sessionCreateFailed": "Kunne ikke oprette sessionen",
-    "splitRight": "Del højre",
-    "splitDown": "Opdel ned",
-    "splitFailed": "Kunne ikke opdele ruden",
-    "newWindow": "Nyt vindue",
-    "windowCreateFailed": "Kunne ikke oprette vindue",
-    "attachSessionTooltip": "Vedhæft til {{session}}",
-    "refresh": "Opfriske",
-    "refreshFailed": "Kunne ikke opdatere sessioner",
-    "collapseAll": "Skjul alle",
-    "expandAll": "Udvid alle",
-    "moreActions": "Flere handlinger",
-    "sessionStats": "Sessionsstatistik",
-    "renameSessionTitle": "Omdøb sessionen \"{{name}}\"",
-    "rename": "Omdøb",
-    "sessionRenamed": "Sessionen er omdøbt til \"{{name}}\"",
-    "sessionRenameFailed": "Kunne ikke omdøbe sessionen",
-    "editTagsTitle": "Rediger tags for \"{{name}}\"",
-    "killPane": "Dræb ruden",
-    "resizeTree": "Træk for at ændre størrelsen, dobbeltklik for at nulstille",
-    "reattach": "Genmonter (rettelser på en forvrænget visning)",
-    "killWindow": "Dræb vinduet",
-    "killWindowTitle": "Luk vindue {{index}} af \"{{session}}\"?",
-    "killWindowBody": "Alle ruder og processer i dette vindue vil blive afsluttet. Hvis det sidste vindue lukkes, afsluttes sessionen.",
-    "windowKillFailed": "Kunne ikke lukke vinduet",
-    "statusActivity": "Aktivitet",
-    "statusWindows": "Vinduer",
-    "statusPanes": "ruder",
-    "statusTags": "Tags",
-    "killPaneTitle": "Afbryd rude {{id}}?",
-    "killPaneBody": "Processen, der kører i denne rude, vil blive afsluttet. Hvis du afslutter den sidste rude, lukkes dens vindue.",
-    "paneKillFailed": "Kunne ikke afslutte ruden",
-    "killSessionTitle": "Afslut sessionen \"{{name}}\"?",
-    "killSessionBody": "Alle vinduer og kørende processer i denne session vil blive afsluttet. Dette kan ikke fortrydes.",
-    "kill": "Dræbe",
-    "sessionKilled": "Sessionen \"{{name}}\" blev afbrudt",
-    "sessionKillFailed": "Kunne ikke afslutte sessionen",
-    "hostUnreachable": "Kunne ikke oprette forbindelse til værten. Kontroller, at den er online og tilgængelig.",
-    "noServer": "Der kører ingen tmux-server på denne vært.",
-    "searchTruncated": "Delvise resultater. Søgningen dækker de sidste {{lines}} linjer i hver rude og højst {{panes}} ruder.",
-    "closeSearchResults": "Luk søgeresultater",
-    "retry": "Prøv igen",
-    "noHosts": "Ingen SSH-værter tilgængelige",
-    "noHostsHint": "Aktivér Tmux Monitor-indstillingen på en SSH-vært (Værtsadministrator, fanen Tmux Monitor) for at overvåge dens tmux-sessioner.",
-    "tmuxInstallHint": "Installer det på værten med:",
-    "attachTooltip": "Åbn en terminal til {{host}}",
-    "attachTooltipPane": "Åbn en terminal til {{host}}, tmux-session {{session}}",
-    "timeJustNow": "lige nu",
-    "timeMinutes": "For {{count}}minutter siden",
-    "timeHours": "For {{count}}timer siden",
-    "timeDays": "for {{count}}dage siden",
-    "allHosts": "Alle værter",
-    "singleHost": "Enkelt vært",
-    "hostScope": "Overvågningsområde",
-    "filterHosts": "Filtrer værter efter navn eller adresse",
-    "selectHost": "Vælg vært",
-    "toggleHost": "Udvid eller skjul {{host}}",
-    "noMatchingHosts": "Ingen matchende værter",
-    "toggleSession": "Udvid eller skjul {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/de_DE.json b/plugins/tmux-monitor/locales/translated/de_DE.json
deleted file mode 100644
index 0594eb85c..000000000
--- a/plugins/tmux-monitor/locales/translated/de_DE.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Tmux-Monitor aktivieren",
-    "enableTmuxMonitorDesc": "Diesen Host im Tmux-Monitor anzeigen und seine tmux-Aktionen zur Seitenleiste hinzufügen",
-    "tabTmuxMonitor": "Tmux-Monitor",
-    "docsLink": "Dokumentation anzeigen"
-  },
-  "nav": {
-    "tmuxMonitor": "Tmux-Monitor"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Tmux-Monitor",
-    "tmuxMonitorDesc": "Tmux-Sitzungen hostübergreifend überwachen"
-  },
-  "permissions": {
-    "use": {
-      "title": "Tmux Monitor verwenden",
-      "description": "Durchsuchen und steuern Sie tmux-Sitzungen, Fenster und Bereiche auf Hosts, bei denen der Monitor aktiviert ist."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Tmux-Monitor aktivieren",
-        "description": "Auf diesem Host laufende tmux-Sitzungen beobachten und sich an sie anhängen."
-      },
-      "mouseEnabled": {
-        "label": "tmux-Mausunterstützung aktivieren",
-        "description": "Die Mausunterstützung wird beim Verbinden oder Erstellen einer tmux-Sitzung aktiviert. Andere Sitzungen und globale tmux-Einstellungen bleiben unverändert."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Tmux-Monitor",
-    "failedToLoadHosts": "Laden der Hosts fehlgeschlagen",
-    "failedToLoad": "Laden der tmux-Sitzungen fehlgeschlagen",
-    "tmuxUnavailable": "tmux ist auf diesem Host nicht installiert",
-    "noSessions": "Keine tmux-Sitzungen auf diesem Host",
-    "noHostSelected": "Kein Host ausgewählt",
-    "attached": "Verbunden",
-    "detached": "Getrennt",
-    "attach": "Verbinden",
-    "editTags": "Tags bearbeiten",
-    "tagsHint": "Durch Kommas getrennte Tags (z. B. YOLO, lab, training)",
-    "tagsSaved": "Tags gespeichert",
-    "tagsSaveFailed": "Fehler beim Speichern der Tags",
-    "searchPlaceholder": "Ausgabe in allen Sitzungen durchsuchen...",
-    "searchResults": "{{count}} Treffer",
-    "searchFailed": "Suche fehlgeschlagen",
-    "selectPaneHint": "Wählen Sie einen Bereich aus, um dessen Ausgabe anzuzeigen",
-    "closePreview": "Vorschau schließen",
-    "newSession": "Neue Sitzung",
-    "newSessionHint": "Sitzungsname (Buchstaben, Ziffern, _ @ % + = -)",
-    "newSessionPlaceholder": "my-session",
-    "create": "Erstellen",
-    "sessionCreated": "Sitzung \"{{name}}\" erstellt",
-    "sessionCreateFailed": "Fehler beim Erstellen der Sitzung",
-    "splitRight": "Rechts teilen",
-    "splitDown": "Unten teilen",
-    "splitFailed": "Fehler beim Teilen des Bereichs",
-    "newWindow": "Neues Fenster",
-    "windowCreateFailed": "Fehler beim Erstellen des Fensters",
-    "attachSessionTooltip": "Mit {{session}} verbinden",
-    "refresh": "Aktualisieren",
-    "refreshFailed": "Fehler beim Aktualisieren der Sitzungen",
-    "collapseAll": "Alle einklappen",
-    "expandAll": "Alle ausklappen",
-    "moreActions": "Weitere Aktionen",
-    "sessionStats": "Sitzungsstatistiken",
-    "renameSessionTitle": "Sitzung \"{{name}}\" umbenennen",
-    "rename": "Umbenennen",
-    "sessionRenamed": "Sitzung umbenannt in \"{{name}}\"",
-    "sessionRenameFailed": "Fehler beim Umbenennen der Sitzung",
-    "editTagsTitle": "Tags für \"{{name}}\" bearbeiten",
-    "killPane": "Pane beenden",
-    "resizeTree": "Ziehen zum Ändern der Größe, Doppelklick zum Zurücksetzen",
-    "reattach": "Erneut anhängen (behebt eine verzerrte Darstellung)",
-    "killWindow": "Fenster beenden",
-    "killWindowTitle": "Fenster {{index}} von \"{{session}}\" beenden?",
-    "killWindowBody": "Alle Panes und Prozesse in diesem Fenster werden beendet. Wird das letzte Fenster beendet, wird die Sitzung beendet.",
-    "windowKillFailed": "Fenster konnte nicht beendet werden",
-    "statusActivity": "Aktivität",
-    "statusWindows": "Fenster",
-    "statusPanes": "Panes",
-    "statusTags": "Tags",
-    "killPaneTitle": "Pane {{id}} beenden?",
-    "killPaneBody": "Der in dieser Pane laufende Prozess wird beendet. Wird die letzte Pane beendet, wird das Fenster geschlossen.",
-    "paneKillFailed": "Pane konnte nicht beendet werden",
-    "killSessionTitle": "Sitzung \"{{name}}\" beenden?",
-    "killSessionBody": "Alle Fenster und laufenden Prozesse in dieser Sitzung werden beendet. Dies kann nicht rückgängig gemacht werden.",
-    "kill": "Beenden",
-    "sessionKilled": "Sitzung \"{{name}}\" beendet",
-    "sessionKillFailed": "Sitzung konnte nicht beendet werden",
-    "hostUnreachable": "Verbindung zum Host konnte nicht hergestellt werden. Überprüfen Sie, ob er online und erreichbar ist.",
-    "noServer": "Auf diesem Host läuft kein tmux-Server.",
-    "searchTruncated": "Teilergebnisse. Die Suche umfasst die letzten {{lines}} Zeilen jedes Fensters und maximal {{panes}} Fenster.",
-    "closeSearchResults": "Suchergebnisse schließen",
-    "retry": "Erneut versuchen",
-    "noHosts": "Keine SSH-Hosts verfügbar",
-    "noHostsHint": "Aktivieren Sie die Option „Tmux Monitor“ auf einem SSH-Host (Host Manager, Registerkarte „Tmux Monitor“), um dessen tmux-Sitzungen zu überwachen.",
-    "tmuxInstallHint": "Installieren Sie es auf dem Host mit:",
-    "attachTooltip": "Terminal zu {{host}} öffnen",
-    "attachTooltipPane": "Öffne ein Terminal zu {{host}}, tmux session {{session}}",
-    "timeJustNow": "gerade eben",
-    "timeMinutes": "vor {{count}} Min.",
-    "timeHours": "vor {{count}} Std.",
-    "timeDays": "vor {{count}} T.",
-    "allHosts": "Alle Hosts",
-    "singleHost": "Einzelhost",
-    "hostScope": "Monitorbereich",
-    "filterHosts": "Hosts nach Namen oder Adresse filtern",
-    "selectHost": "Host auswählen",
-    "toggleHost": "Ein- oder Ausklappen {{host}}",
-    "noMatchingHosts": "Keine passenden Hosts gefunden",
-    "toggleSession": "Ein- oder Ausklappen {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/el_GR.json b/plugins/tmux-monitor/locales/translated/el_GR.json
deleted file mode 100644
index dd6d38eb9..000000000
--- a/plugins/tmux-monitor/locales/translated/el_GR.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Ενεργοποίηση παρακολούθησης Tmux",
-    "enableTmuxMonitorDesc": "Εμφάνιση αυτού του κεντρικού υπολογιστή στην οθόνη Tmux και προσθήκη των ενεργειών tmux του στην πλαϊνή μπάρα",
-    "tabTmuxMonitor": "Παρακολούθηση Tmux",
-    "docsLink": "Προβολή εγγράφων"
-  },
-  "nav": {
-    "tmuxMonitor": "Παρακολούθηση Tmux"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Παρακολούθηση Tmux",
-    "tmuxMonitorDesc": "Παρακολουθήστε τις συνεδρίες tmux σε όλους τους κεντρικούς υπολογιστές σας"
-  },
-  "permissions": {
-    "use": {
-      "title": "Χρήση της οθόνης Tmux",
-      "description": "Περιηγηθείτε και ελέγξτε τις συνεδρίες, τα παράθυρα και τα τμήματα παραθύρων tmux σε κεντρικούς υπολογιστές με ενεργοποιημένη την οθόνη."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Ενεργοποίηση παρακολούθησης Tmux",
-        "description": "Παρακολούθηση και σύνδεση σε συνεδρίες tmux που εκτελούνται σε αυτόν τον κεντρικό υπολογιστή."
-      },
-      "mouseEnabled": {
-        "label": "Ενεργοποίηση υποστήριξης ποντικιού tmux",
-        "description": "Εφαρμόστε υποστήριξη ποντικιού στην συνεδρία tmux κατά την προσάρτηση ή τη δημιουργία μιας συνεδρίας. Οι υπόλοιπες συνεδρίες και οι καθολικές ρυθμίσεις tmux παραμένουν αμετάβλητες."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Παρακολούθηση Tmux",
-    "failedToLoadHosts": "Αποτυχία φόρτωσης κεντρικών υπολογιστών",
-    "failedToLoad": "Αποτυχία φόρτωσης συνεδριών tmux",
-    "tmuxUnavailable": "Το tmux δεν είναι εγκατεστημένο σε αυτόν τον κεντρικό υπολογιστή",
-    "noSessions": "Δεν υπάρχουν συνεδρίες tmux σε αυτόν τον κεντρικό υπολογιστή",
-    "noHostSelected": "Δεν έχει επιλεγεί κεντρικός υπολογιστής",
-    "attached": "Συνημμένο",
-    "detached": "Απομονωμένος",
-    "attach": "Συνδέω",
-    "editTags": "Επεξεργασία ετικετών",
-    "tagsHint": "Ετικέτες διαχωρισμένες με κόμμα (π.χ. YOLO, εργαστήριο, εκπαίδευση)",
-    "tagsSaved": "Οι ετικέτες αποθηκεύτηκαν",
-    "tagsSaveFailed": "Η αποθήκευση των ετικετών απέτυχε",
-    "searchPlaceholder": "Αναζήτηση εξόδου σε όλες τις συνεδρίες...",
-    "searchResults": "{{count}} αγώνες",
-    "searchFailed": "Η αναζήτηση απέτυχε",
-    "selectPaneHint": "Επιλέξτε ένα παράθυρο για να κάνετε προεπισκόπηση της εξόδου του",
-    "closePreview": "Κλείσιμο προεπισκόπησης",
-    "newSession": "Νέα συνεδρία",
-    "newSessionHint": "Όνομα συνεδρίας (γράμματα, ψηφία, _ @ % + = -)",
-    "newSessionPlaceholder": "η-συνεδρία μου",
-    "create": "Δημιουργώ",
-    "sessionCreated": "Συνεδρία \"{{name}}\" δημιουργήθηκε",
-    "sessionCreateFailed": "Αποτυχία δημιουργίας συνεδρίας",
-    "splitRight": "Διαίρεση δεξιά",
-    "splitDown": "Διαχωρισμός",
-    "splitFailed": "Αποτυχία διαίρεσης παραθύρου",
-    "newWindow": "Νέο παράθυρο",
-    "windowCreateFailed": "Η δημιουργία παραθύρου απέτυχε",
-    "attachSessionTooltip": "Επισύναψη σε {{session}}",
-    "refresh": "Φρεσκάρω",
-    "refreshFailed": "Η ανανέωση των περιόδων σύνδεσης απέτυχε",
-    "collapseAll": "Σύμπτυξη όλων",
-    "expandAll": "Ανάπτυξη όλων",
-    "moreActions": "Περισσότερες ενέργειες",
-    "sessionStats": "Στατιστικά περιόδου σύνδεσης",
-    "renameSessionTitle": "Μετονομασία συνεδρίας \"{{name}}\"",
-    "rename": "Μετονομάζω",
-    "sessionRenamed": "Η συνεδρία μετονομάστηκε σε \"{{name}}\"",
-    "sessionRenameFailed": "Η μετονομασία της συνεδρίας απέτυχε",
-    "editTagsTitle": "Επεξεργασία ετικετών για \"{{name}}\"",
-    "killPane": "Κλείσιμο παραθύρου",
-    "resizeTree": "Σύρετε για αλλαγή μεγέθους, κάντε διπλό κλικ για επαναφορά",
-    "reattach": "Επανασύνδεση (διορθώνει μια παραμορφωμένη προβολή)",
-    "killWindow": "Σκότωμα παραθύρου",
-    "killWindowTitle": "Να τερματιστεί το παράθυρο {{index}} του \"{{session}}\";",
-    "killWindowBody": "Κάθε παράθυρο και διεργασία σε αυτό το παράθυρο θα τερματιστεί. Η διακοπή του τελευταίου παραθύρου τερματίζει την περίοδο λειτουργίας.",
-    "windowKillFailed": "Αποτυχία τερματισμού του παραθύρου",
-    "statusActivity": "Δραστηριότητα",
-    "statusWindows": "Παράθυρα",
-    "statusPanes": "τζάμια",
-    "statusTags": "Ετικέτες",
-    "killPaneTitle": "Κλείσιμο παραθύρου {{id}}?",
-    "killPaneBody": "Η διεργασία που εκτελείται σε αυτό το παράθυρο θα τερματιστεί. Ο τερματισμός του τελευταίου παραθύρου κλείνει το παράθυρό του.",
-    "paneKillFailed": "Αποτυχία τερματισμού του παραθύρου",
-    "killSessionTitle": "Διακοπή συνεδρίας \"{{name}}\";",
-    "killSessionBody": "Όλα τα παράθυρα και οι διεργασίες που εκτελούνται σε αυτήν την περίοδο λειτουργίας θα τερματιστούν. Αυτό δεν μπορεί να αναιρεθεί.",
-    "kill": "Σκοτώνω",
-    "sessionKilled": "Η συνεδρία \"{{name}}\" τερματίστηκε",
-    "sessionKillFailed": "Αποτυχία τερματισμού της συνεδρίας",
-    "hostUnreachable": "Δεν ήταν δυνατή η σύνδεση με τον κεντρικό υπολογιστή. Ελέγξτε ότι είναι συνδεδεμένος στο διαδίκτυο και προσβάσιμος.",
-    "noServer": "Δεν εκτελείται διακομιστής tmux σε αυτόν τον κεντρικό υπολογιστή.",
-    "searchTruncated": "Μερικά αποτελέσματα. Η αναζήτηση καλύπτει τις τελευταίες {{lines}} γραμμές κάθε παραθύρου και το πολύ {{panes}} παραθύρων.",
-    "closeSearchResults": "Κλείσιμο αποτελεσμάτων αναζήτησης",
-    "retry": "Δοκιμάζω πάλι",
-    "noHosts": "Δεν υπάρχουν διαθέσιμοι κεντρικοί υπολογιστές SSH",
-    "noHostsHint": "Ενεργοποιήστε την επιλογή Tmux Monitor σε έναν κεντρικό υπολογιστή SSH (Host Manager, καρτέλα Tmux Monitor) για να παρακολουθείτε τις συνεδρίες tmux του.",
-    "tmuxInstallHint": "Εγκαταστήστε το στον κεντρικό υπολογιστή με:",
-    "attachTooltip": "Ανοίξτε ένα τερματικό για να {{host}}",
-    "attachTooltipPane": "Ανοίξτε ένα τερματικό για να {{host}}, tmux session {{session}}",
-    "timeJustNow": "μόλις τώρα",
-    "timeMinutes": "{{count}}πριν από λεπτά",
-    "timeHours": "{{count}}πριν από ώρες",
-    "timeDays": "{{count}}πριν από ημέρες",
-    "allHosts": "Όλοι οι οικοδεσπότες",
-    "singleHost": "Μονός οικοδεσπότης",
-    "hostScope": "Εμβέλεια παρακολούθησης",
-    "filterHosts": "Φιλτράρισμα κεντρικών υπολογιστών κατά όνομα ή διεύθυνση",
-    "selectHost": "Επιλογή κεντρικού υπολογιστή",
-    "toggleHost": "Ανάπτυξη ή σύμπτυξη {{host}}",
-    "noMatchingHosts": "Δεν υπάρχουν αντίστοιχοι κεντρικοί υπολογιστές",
-    "toggleSession": "Ανάπτυξη ή σύμπτυξη {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/es_ES.json b/plugins/tmux-monitor/locales/translated/es_ES.json
deleted file mode 100644
index 9e4206e95..000000000
--- a/plugins/tmux-monitor/locales/translated/es_ES.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Activar Tmux Monitor",
-    "enableTmuxMonitorDesc": "Mostrar este host en el Tmux Monitor y añadir sus acciones de tmux a la barra lateral.",
-    "tabTmuxMonitor": "Monitor Tmux",
-    "docsLink": "Ver documentación"
-  },
-  "nav": {
-    "tmuxMonitor": "Monitor de Tmux"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Monitor Tmux",
-    "tmuxMonitorDesc": "Supervisar sesiones de tmux en sus hosts"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilice el monitor de Tmux.",
-      "description": "Explore y controle las sesiones, ventanas y paneles de tmux en los hosts con el monitor habilitado."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Activar Tmux Monitor",
-        "description": "Observa y conéctate a las sesiones de tmux que se ejecutan en este host."
-      },
-      "mouseEnabled": {
-        "label": "Habilitar la compatibilidad con el ratón en tmux",
-        "description": "Al conectar o crear una sesión de tmux, se aplicará compatibilidad con el ratón. Las demás sesiones y la configuración global de tmux permanecerán sin cambios."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Monitor Tmux",
-    "failedToLoadHosts": "Error al cargar los hosts",
-    "failedToLoad": "Error al cargar las sesiones de tmux",
-    "tmuxUnavailable": "tmux no está instalado en este host",
-    "noSessions": "No hay sesiones de tmux en este host",
-    "noHostSelected": "Ningún host seleccionado",
-    "attached": "Conectado",
-    "detached": "Desconectado",
-    "attach": "Conectar",
-    "editTags": "Editar etiquetas",
-    "tagsHint": "Etiquetas separadas por comas (ej. YOLO, lab, training)",
-    "tagsSaved": "Etiquetas guardadas",
-    "tagsSaveFailed": "Error al guardar etiquetas",
-    "searchPlaceholder": "Buscar en la salida de todas las sesiones...",
-    "searchResults": "{{count}} coincidencias",
-    "searchFailed": "Búsqueda fallida",
-    "selectPaneHint": "Seleccione un panel para previsualizar su salida",
-    "closePreview": "Cerrar previsualización",
-    "newSession": "Nueva sesión",
-    "newSessionHint": "Nombre de la sesión (letras, dígitos, _ @ % + = -)",
-    "newSessionPlaceholder": "my-session",
-    "create": "Crear",
-    "sessionCreated": "Sesión \"{{name}}\" creada",
-    "sessionCreateFailed": "Error al crear la sesión",
-    "splitRight": "Dividir a la derecha",
-    "splitDown": "Dividir abajo",
-    "splitFailed": "Error al dividir el panel",
-    "newWindow": "Nueva ventana",
-    "windowCreateFailed": "Error al crear la ventana",
-    "attachSessionTooltip": "Conectar a {{session}}",
-    "refresh": "Actualizar",
-    "refreshFailed": "Error al actualizar las sesiones",
-    "collapseAll": "Colapsar todo",
-    "expandAll": "Expandir todo",
-    "moreActions": "Más acciones",
-    "sessionStats": "Estadísticas de la sesión",
-    "renameSessionTitle": "Renombrar sesión \"{{name}}\"",
-    "rename": "Renombrar",
-    "sessionRenamed": "Sesión renombrada a \"{{name}}\"",
-    "sessionRenameFailed": "Error al renombrar la sesión",
-    "editTagsTitle": "Editar etiquetas para \"{{name}}\"",
-    "killPane": "Finalizar panel",
-    "resizeTree": "Arrastra para cambiar el tamaño, haz doble clic para restablecer.",
-    "reattach": "Reconectar (soluciona una vista distorsionada)",
-    "killWindow": "Finalizar ventana",
-    "killWindowTitle": "¿Finalizar ventana {{index}} de \"{{session}}\"?",
-    "killWindowBody": "Todos los paneles y procesos de esta ventana serán terminados. Finalizar la última ventana finaliza la sesión.",
-    "windowKillFailed": "Error al finalizar la ventana",
-    "statusActivity": "Actividad",
-    "statusWindows": "Ventanas",
-    "statusPanes": "paneles",
-    "statusTags": "Etiquetas",
-    "killPaneTitle": "¿Finalizar panel {{id}}?",
-    "killPaneBody": "El proceso en ejecución en este panel será terminado. Finalizar el último panel cierra su ventana.",
-    "paneKillFailed": "Error al finalizar el panel",
-    "killSessionTitle": "¿Finalizar sesión \"{{name}}\"?",
-    "killSessionBody": "Todas las ventanas y procesos en ejecución de esta sesión serán terminados. Esta acción no se puede deshacer.",
-    "kill": "Finalizar",
-    "sessionKilled": "Sesión \"{{name}}\" finalizada",
-    "sessionKillFailed": "Error al finalizar la sesión",
-    "hostUnreachable": "No se pudo conectar al host. Compruebe que esté en línea y accesible.",
-    "noServer": "No hay ningún servidor tmux en ejecución en este host.",
-    "searchTruncated": "Resultados parciales. La búsqueda abarca las últimas {{lines}} líneas de cada panel y como máximo {{panes}} paneles.",
-    "closeSearchResults": "Cerrar resultados de búsqueda",
-    "retry": "Reintentar",
-    "noHosts": "No hay hosts SSH disponibles",
-    "noHostsHint": "Habilite la opción Monitor de Tmux en un host SSH (Administrador de hosts, pestaña Monitor de Tmux) para supervisar sus sesiones de tmux.",
-    "tmuxInstallHint": "Instálelo en el host con:",
-    "attachTooltip": "Abrir un terminal en {{host}}",
-    "attachTooltipPane": "Abre una terminal en {{host}}, sesión tmux {{session}}",
-    "timeJustNow": "ahora mismo",
-    "timeMinutes": "hace {{count}}m",
-    "timeHours": "hace {{count}}h",
-    "timeDays": "hace {{count}}d",
-    "allHosts": "Todos los hosts",
-    "singleHost": "Anfitrión único",
-    "hostScope": "Alcance del monitoreo",
-    "filterHosts": "Filtrar hosts por nombre o dirección",
-    "selectHost": "Seleccione el host",
-    "toggleHost": "Expandir o contraer {{host}}",
-    "noMatchingHosts": "No se encontraron hosts compatibles.",
-    "toggleSession": "Expandir o contraer {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/fi_FI.json b/plugins/tmux-monitor/locales/translated/fi_FI.json
deleted file mode 100644
index bc50749eb..000000000
--- a/plugins/tmux-monitor/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Ota Tmux-monitori käyttöön",
-    "enableTmuxMonitorDesc": "Näytä tämä isäntä Tmux-monitorissa ja lisää sen tmux-toiminnot sivupalkkiin",
-    "tabTmuxMonitor": "Tmux-näyttö",
-    "docsLink": "Näytä dokumentit"
-  },
-  "nav": {
-    "tmuxMonitor": "Tmux-näyttö"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Tmux-näyttö",
-    "tmuxMonitorDesc": "Valvo tmux-istuntoja eri isännilläsi"
-  },
-  "permissions": {
-    "use": {
-      "title": "Käytä Tmux-näyttöä",
-      "description": "Selaa ja hallitse tmux-istuntoja, ikkunoita ja ruutuja isännillä, joissa monitori on käytössä."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Ota Tmux-monitori käyttöön",
-        "description": "Tarkkaile ja liitä tällä isännöllä käynnissä olevia tmux-istuntoja."
-      },
-      "mouseEnabled": {
-        "label": "Ota käyttöön tmux-hiiren tuki",
-        "description": "Käytä hiiritukea tmux-istuntoon istunnon liittämisen tai luomisen yhteydessä. Muut istunnot ja yleiset tmux-asetukset pysyvät ennallaan."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Tmux-näyttö",
-    "failedToLoadHosts": "Isäntien lataaminen epäonnistui",
-    "failedToLoad": "tmux-istuntojen lataaminen epäonnistui",
-    "tmuxUnavailable": "tmuxia ei ole asennettu tälle koneelle",
-    "noSessions": "Ei tmux-istuntoja tällä isännöinnillä",
-    "noHostSelected": "Ei valittua isäntää",
-    "attached": "Liitteenä",
-    "detached": "Erillinen",
-    "attach": "Liittää",
-    "editTags": "Muokkaa tunnisteita",
-    "tagsHint": "Pilkuilla erotetut tunnisteet (esim. YOLO, lab, training)",
-    "tagsSaved": "Tagit tallennettu",
-    "tagsSaveFailed": "Tunnisteiden tallentaminen epäonnistui",
-    "searchPlaceholder": "Hae tulostetta istuntojen välillä...",
-    "searchResults": "{{count}} osumaa",
-    "searchFailed": "Haku epäonnistui",
-    "selectPaneHint": "Valitse ruutu esikatsellaksesi sen tulosta",
-    "closePreview": "Sulje esikatselu",
-    "newSession": "Uusi istunto",
-    "newSessionHint": "Istunnon nimi (kirjaimet, numerot, _ @ % + = -)",
-    "newSessionPlaceholder": "my-session",
-    "create": "Luoda",
-    "sessionCreated": "Istunto \"{{name}}\" luotu",
-    "sessionCreateFailed": "Istunnon luominen epäonnistui",
-    "splitRight": "Jaa oikealle",
-    "splitDown": "Jaa alas",
-    "splitFailed": "Ruudun jakaminen epäonnistui",
-    "newWindow": "Uusi ikkuna",
-    "windowCreateFailed": "Ikkunan luominen epäonnistui",
-    "attachSessionTooltip": "Liitä kohtaan {{session}}",
-    "refresh": "Päivitä",
-    "refreshFailed": "Istuntojen päivittäminen epäonnistui",
-    "collapseAll": "Pienennä kaikki",
-    "expandAll": "Laajenna kaikki",
-    "moreActions": "Lisää toimintoja",
-    "sessionStats": "Istuntotilastot",
-    "renameSessionTitle": "Nimeä istunto uudelleen \"{{name}}\"",
-    "rename": "Nimeä uudelleen",
-    "sessionRenamed": "Istunto nimettiin uudelleen muotoon \"{{name}}\"",
-    "sessionRenameFailed": "Istunnon uudelleennimeäminen epäonnistui",
-    "editTagsTitle": "Muokkaa tunnisteita kohteelle \"{{name}}\"",
-    "killPane": "Tappaa ruutu",
-    "resizeTree": "Muuta kokoa vetämällä, palauta se kaksoisnapsauttamalla",
-    "reattach": "Kiinnitä uudelleen (korjaa vääristyneen näkymän)",
-    "killWindow": "Tapa ikkuna",
-    "killWindowTitle": "Tappaa ikkuna {{index}} kohteelle \"{{session}}\"?",
-    "killWindowBody": "Jokainen tässä ikkunassa oleva ruutu ja prosessi lopetetaan. Viimeisen ikkunan sulkeminen lopettaa istunnon.",
-    "windowKillFailed": "Ikkunan sulkeminen epäonnistui",
-    "statusActivity": "Toiminta",
-    "statusWindows": "Ikkunat",
-    "statusPanes": "ruudut",
-    "statusTags": "Tunnisteet",
-    "killPaneTitle": "Tappaa ruutu {{id}}?",
-    "killPaneBody": "Tässä ruudussa käynnissä oleva prosessi lopetetaan. Viimeisen ruudun sulkeminen sulkee sen ikkunan.",
-    "paneKillFailed": "Ruudun sulkeminen epäonnistui",
-    "killSessionTitle": "Lopeta istunto \"{{name}}\"?",
-    "killSessionBody": "Kaikki tämän istunnon ikkunat ja käynnissä olevat prosessit lopetetaan. Tätä ei voi perua.",
-    "kill": "Tappaa",
-    "sessionKilled": "Istunto \"{{name}}\" lopetettu",
-    "sessionKillFailed": "Istunnon lopettaminen epäonnistui",
-    "hostUnreachable": "Yhteyden muodostaminen isäntään ei onnistu. Tarkista, että se on verkossa ja tavoitettavissa.",
-    "noServer": "Tällä isännöinnillä ei ole käynnissä tmux-palvelinta.",
-    "searchTruncated": "Osittaisia tuloksia. Haku kattaa kunkin ruudun viimeiset {{lines}} rivit ja enintään {{panes}} ruutua.",
-    "closeSearchResults": "Sulje hakutulokset",
-    "retry": "Yritä uudelleen",
-    "noHosts": "Ei SSH-isäntiä saatavilla",
-    "noHostsHint": "Ota Tmux Monitor -asetus käyttöön SSH-isännässä (Isäntähallinta, Tmux Monitor -välilehti) valvoaksesi sen tmux-istuntoja.",
-    "tmuxInstallHint": "Asenna se isäntäkoneelle komennolla:",
-    "attachTooltip": "Avaa pääte ja kohdista {{host}}",
-    "attachTooltipPane": "Avaa pääteohjelma ja kohdista session {{host}}, tmux-session {{session}}",
-    "timeJustNow": "juuri nyt",
-    "timeMinutes": "{{count}}minuuttia sitten",
-    "timeHours": "{{count}}tuntia sitten",
-    "timeDays": "{{count}}d sitten",
-    "allHosts": "Kaikki isännät",
-    "singleHost": "Yksi isäntä",
-    "hostScope": "Näytön laajuus",
-    "filterHosts": "Suodata isännät nimen tai osoitteen mukaan",
-    "selectHost": "Valitse isäntä",
-    "toggleHost": "Laajenna tai kutista {{host}}",
-    "noMatchingHosts": "Ei vastaavia isäntiä",
-    "toggleSession": "Laajenna tai kutista {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/fr_FR.json b/plugins/tmux-monitor/locales/translated/fr_FR.json
deleted file mode 100644
index a65e3fc8d..000000000
--- a/plugins/tmux-monitor/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Activer le Moniteur Tmux",
-    "enableTmuxMonitorDesc": "Afficher cet hôte dans le Moniteur Tmux et ajouter ses actions tmux à la barre latérale",
-    "tabTmuxMonitor": "Moniteur tmux",
-    "docsLink": "Voir la documentation"
-  },
-  "nav": {
-    "tmuxMonitor": "Moniteur Tmux"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Moniteur tmux",
-    "tmuxMonitorDesc": "Surveiller les sessions tmux sur vos hôtes"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utiliser le moniteur Tmux",
-      "description": "Naviguez et contrôlez les sessions, fenêtres et volets tmux sur les hôtes dont le moniteur est activé."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Activer le Moniteur Tmux",
-        "description": "Surveillez et connectez-vous aux sessions tmux exécutées sur cet hôte."
-      },
-      "mouseEnabled": {
-        "label": "Activer la prise en charge de la souris tmux",
-        "description": "Activez la prise en charge de la souris pour la session tmux lors de la connexion ou de la création d'une session. Les autres sessions et les paramètres globaux de tmux restent inchangés."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Moniteur tmux",
-    "failedToLoadHosts": "Échec du chargement des hôtes",
-    "failedToLoad": "Échec du chargement des sessions tmux",
-    "tmuxUnavailable": "tmux n'est pas installé sur cet hôte",
-    "noSessions": "Aucune session tmux sur cet hôte",
-    "noHostSelected": "Aucun hôte sélectionné",
-    "attached": "Attaché",
-    "detached": "Détaché",
-    "attach": "Attacher",
-    "editTags": "Modifier les tags",
-    "tagsHint": "Tags séparés par des virgules (ex. : YOLO, lab, training)",
-    "tagsSaved": "Tags enregistrés",
-    "tagsSaveFailed": "Échec de l'enregistrement des tags",
-    "searchPlaceholder": "Rechercher dans les sorties des sessions...",
-    "searchResults": "{{count}} correspondances",
-    "searchFailed": "Échec de la recherche",
-    "selectPaneHint": "Sélectionnez un volet pour prévisualiser sa sortie",
-    "closePreview": "Fermer l'aperçu",
-    "newSession": "Nouvelle session",
-    "newSessionHint": "Nom de session (lettres, chiffres, _ @ % + = -)",
-    "newSessionPlaceholder": "my-session",
-    "create": "Créer",
-    "sessionCreated": "Session « {{name}} » créée",
-    "sessionCreateFailed": "Échec de la création de la session",
-    "splitRight": "Diviser à droite",
-    "splitDown": "Diviser en bas",
-    "splitFailed": "Échec de la division du volet",
-    "newWindow": "Nouvelle fenêtre",
-    "windowCreateFailed": "Échec de la création de la fenêtre",
-    "attachSessionTooltip": "Attacher à {{session}}",
-    "refresh": "Actualiser",
-    "refreshFailed": "Échec de l'actualisation des sessions",
-    "collapseAll": "Réduire tout",
-    "expandAll": "Développer tout",
-    "moreActions": "Plus d'actions",
-    "sessionStats": "Statistiques de session",
-    "renameSessionTitle": "Renommer la session « {{name}} »",
-    "rename": "Renommer",
-    "sessionRenamed": "Session renommée en « {{name}} »",
-    "sessionRenameFailed": "Échec du renommage de la session",
-    "editTagsTitle": "Modifier les tags pour « {{name}} »",
-    "killPane": "Fermer le volet",
-    "resizeTree": "Faites glisser pour redimensionner, double-cliquez pour réinitialiser",
-    "reattach": "Rattacher (corrige un affichage brouillé)",
-    "killWindow": "Fermer la fenêtre",
-    "killWindowTitle": "Fermer la fenêtre {{index}} de « {{session}} » ?",
-    "killWindowBody": "Tous les volets et processus de cette fenêtre seront terminés. La fermeture de la dernière fenêtre met fin à la session.",
-    "windowKillFailed": "Échec de la fermeture de la fenêtre",
-    "statusActivity": "Activité",
-    "statusWindows": "Fenêtres",
-    "statusPanes": "Volets",
-    "statusTags": "Étiquettes",
-    "killPaneTitle": "Fermer le volet {{id}} ?",
-    "killPaneBody": "Le processus s’exécutant dans ce volet sera terminé. La fermeture du dernier volet ferme sa fenêtre.",
-    "paneKillFailed": "Échec de la fermeture du volet",
-    "killSessionTitle": "Fermer la session « {{name}} » ?",
-    "killSessionBody": "Toutes les fenêtres et processus en cours dans cette session seront terminés. Cette action est irréversible.",
-    "kill": "Fermer",
-    "sessionKilled": "Session « {{name}} » fermée",
-    "sessionKillFailed": "Échec de la fermeture de la session",
-    "hostUnreachable": "Impossible de se connecter à l’hôte. Vérifiez qu’il est en ligne et accessible.",
-    "noServer": "Aucun serveur tmux n’est exécuté sur cet hôte.",
-    "searchTruncated": "Résultats partiels. La recherche couvre les {{lines}} dernières lignes de chaque volet et au maximum {{panes}} volets.",
-    "closeSearchResults": "Fermer les résultats de recherche",
-    "retry": "Réessayer",
-    "noHosts": "Aucun hôte SSH disponible",
-    "noHostsHint": "Activez l'option Moniteur Tmux sur un hôte SSH (Gestionnaire d'hôtes, onglet Moniteur Tmux) pour surveiller ses sessions tmux.",
-    "tmuxInstallHint": "Installez-le sur l’hôte avec :",
-    "attachTooltip": "Ouvrir un terminal sur {{host}}",
-    "attachTooltipPane": "Ouvrez un terminal pour {{host}}, session tmux {{session}}",
-    "timeJustNow": "à l’instant",
-    "timeMinutes": "il y a {{count}} min",
-    "timeHours": "il y a {{count}} h",
-    "timeDays": "il y a {{count}} j",
-    "allHosts": "Tous les hôtes",
-    "singleHost": "hôte unique",
-    "hostScope": "portée du moniteur",
-    "filterHosts": "Filtrer les hôtes par nom ou adresse",
-    "selectHost": "Sélectionner l'hôte",
-    "toggleHost": "Développer ou réduire {{host}}",
-    "noMatchingHosts": "Aucun hôte correspondant",
-    "toggleSession": "Développer ou réduire {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/he_IL.json b/plugins/tmux-monitor/locales/translated/he_IL.json
deleted file mode 100644
index e76156331..000000000
--- a/plugins/tmux-monitor/locales/translated/he_IL.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "הפעל את צג Tmux",
-    "enableTmuxMonitorDesc": "הצג מארח זה בצג Tmux והוסף את פעולות ה-tmux שלו לסרגל הצד",
-    "tabTmuxMonitor": "צג Tmux",
-    "docsLink": "הצג מסמכים"
-  },
-  "nav": {
-    "tmuxMonitor": "צג Tmux"
-  },
-  "dashboard": {
-    "tmuxMonitor": "צג Tmux",
-    "tmuxMonitorDesc": "ניטור הפעלות tmux בין המארחים שלך"
-  },
-  "permissions": {
-    "use": {
-      "title": "השתמש ב-Tmux Monitor",
-      "description": "עיון ושליטה בהפעלות, חלונות וחלוניות של tmux במחשבים מארחים כאשר הצג מופעל."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "הפעל את צג Tmux",
-        "description": "צפה והצטרף להפעלות tmux הפועלות על מארח זה."
-      },
-      "mouseEnabled": {
-        "label": "הפעל תמיכה בעכבר tmux",
-        "description": "החל תמיכת עכבר על סשן tmux בעת צירוף או יצירה של סשן. סשנים אחרים והגדרות tmux גלובליות לא ישתנו."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "צג Tmux",
-    "failedToLoadHosts": "טעינת המארחים נכשלה",
-    "failedToLoad": "טעינת סשנים של tmux נכשלה",
-    "tmuxUnavailable": "tmux אינו מותקן על מחשב זה",
-    "noSessions": "אין הפעלות tmux על מארח זה",
-    "noHostSelected": "לא נבחר מארח",
-    "attached": "מְצוֹרָף",
-    "detached": "מְנוּתָק",
-    "attach": "לְצַרֵף",
-    "editTags": "עריכת תגיות",
-    "tagsHint": "תגיות מופרדות בפסיקים (למשל YOLO, מעבדה, הדרכה)",
-    "tagsSaved": "תגיות נשמרו",
-    "tagsSaveFailed": "שמירת התגים נכשלה",
-    "searchPlaceholder": "חיפוש פלט בין סשנים...",
-    "searchResults": "{{count}} התאמות",
-    "searchFailed": "החיפוש נכשל",
-    "selectPaneHint": "בחר חלונית כדי להציג תצוגה מקדימה של הפלט שלה",
-    "closePreview": "סגור את התצוגה המקדימה",
-    "newSession": "סשן חדש",
-    "newSessionHint": "שם סשן (אותיות, ספרות, _ @ % + = -)",
-    "newSessionPlaceholder": "הסשן שלי",
-    "create": "לִיצוֹר",
-    "sessionCreated": "סשן \"{{name}}\" נוצר",
-    "sessionCreateFailed": "יצירת הסשן נכשלה",
-    "splitRight": "פיצול ימינה",
-    "splitDown": "התפצלו למטה",
-    "splitFailed": "נכשל פיצול החלונית",
-    "newWindow": "חלון חדש",
-    "windowCreateFailed": "נכשלה יצירת החלון",
-    "attachSessionTooltip": "צרף אל {{session}}",
-    "refresh": "לְרַעֲנֵן",
-    "refreshFailed": "רענון ההפעלות נכשל",
-    "collapseAll": "כווץ הכל",
-    "expandAll": "הרחב הכל",
-    "moreActions": "פעולות נוספות",
-    "sessionStats": "סטטיסטיקות של סשן",
-    "renameSessionTitle": "שינוי שם הסשן \"{{name}}\"",
-    "rename": "שינוי שם",
-    "sessionRenamed": "שם הסשן הוא \"{{name}}\"",
-    "sessionRenameFailed": "שינוי שם ההפעלה נכשל",
-    "editTagsTitle": "עריכת תגיות עבור \"{{name}}\"",
-    "killPane": "חלונית הרג",
-    "resizeTree": "גרור כדי לשנות גודל, לחץ פעמיים כדי לאפס",
-    "reattach": "חבר מחדש (מתקן תצוגה מעוותת)",
-    "killWindow": "להרוג את החלון",
-    "killWindowTitle": "להפסיק את החלון {{index}} של \"{{session}}\"?",
-    "killWindowBody": "כל חלונית ותהליך בחלון זה יופסק. סגירת החלון האחרון תסיים את ההפעלה.",
-    "windowKillFailed": "נכשלה הסגת החלון",
-    "statusActivity": "פְּעִילוּת",
-    "statusWindows": "חלונות",
-    "statusPanes": "חלוניות",
-    "statusTags": "תגיות",
-    "killPaneTitle": "להרוג את החלונית {{id}}?",
-    "killPaneBody": "התהליך הפועל בחלונית זו יופסק. סגירת החלונית האחרונה תסגור את החלון שלה.",
-    "paneKillFailed": "נכשלה הסגת החלונית",
-    "killSessionTitle": "להפסיק את הסשן \"{{name}}\"?",
-    "killSessionBody": "כל החלונות והתהליכים הפועלים בהפעלה זו ייסגרו. לא ניתן לבטל פעולה זו.",
-    "kill": "לַהֲרוֹג",
-    "sessionKilled": "הסשן \"{{name}}\" נסגר",
-    "sessionKillFailed": "נכשלה הסיום",
-    "hostUnreachable": "לא ניתן היה להתחבר למארח. ודא שהוא מחובר ונגיש.",
-    "noServer": "אף שרת tmux לא פועל על מחשב אחסון זה.",
-    "searchTruncated": "תוצאות חלקיות. החיפוש מכסה את השורות האחרונות {{lines}} של כל חלונית ולכל היותר {{panes}} חלונות.",
-    "closeSearchResults": "סגור את תוצאות החיפוש",
-    "retry": "נסה שוב",
-    "noHosts": "אין מארחי SSH זמינים",
-    "noHostsHint": "הפעל את האפשרות Tmux Monitor במארח SSH (Host Manager, כרטיסיית Tmux Monitor) כדי לנטר את הפעלות ה-tmux שלו.",
-    "tmuxInstallHint": "התקן אותו על המארח עם:",
-    "attachTooltip": "פתח טרמינל אל {{host}}",
-    "attachTooltipPane": "פתח טרמינל אל {{host}}, tmux session {{session}}",
-    "timeJustNow": "זֶה עַתָה",
-    "timeMinutes": "לפני {{count}}דקות",
-    "timeHours": "{{count}}h ago",
-    "timeDays": "{{count}}d ago",
-    "allHosts": "כל המארחים",
-    "singleHost": "מארח יחיד",
-    "hostScope": "היקף הניטור",
-    "filterHosts": "סנן מארחים לפי שם או כתובת",
-    "selectHost": "בחר מארח",
-    "toggleHost": "הרחב או כיווץ {{host}}",
-    "noMatchingHosts": "אין מארחים תואמים",
-    "toggleSession": "הרחב או כיווץ {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/hi_IN.json b/plugins/tmux-monitor/locales/translated/hi_IN.json
deleted file mode 100644
index 7688e3bd1..000000000
--- a/plugins/tmux-monitor/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Tmux मॉनिटर सक्षम करें",
-    "enableTmuxMonitorDesc": "इस होस्ट को Tmux मॉनिटर में दिखाएँ और इसकी tmux क्रियाओं को साइडबार में जोड़ें",
-    "tabTmuxMonitor": "Tmux मॉनिटर",
-    "docsLink": "दस्तावेज़ देखें"
-  },
-  "nav": {
-    "tmuxMonitor": "Tmux मॉनिटर"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Tmux मॉनिटर",
-    "tmuxMonitorDesc": "अपने होस्ट में tmux सत्रों की निगरानी करें"
-  },
-  "permissions": {
-    "use": {
-      "title": "Tmux मॉनिटर का उपयोग करें",
-      "description": "मॉनिटर चालू होने पर होस्ट पर tmux सेशन, विंडो और पैन को ब्राउज़ करें और नियंत्रित करें।"
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Tmux मॉनिटर सक्षम करें",
-        "description": "इस होस्ट पर चल रहे tmux सत्रों को देखें और उनसे जुड़ें।"
-      },
-      "mouseEnabled": {
-        "label": "tmux माउस समर्थन सक्षम करें",
-        "description": "सेशन अटैच करते या बनाते समय tmux सेशन में माउस सपोर्ट लागू करें। अन्य सेशन और ग्लोबल tmux सेटिंग्स अपरिवर्तित रहेंगी।"
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Tmux मॉनिटर",
-    "failedToLoadHosts": "होस्ट लोड करने में विफल",
-    "failedToLoad": "tmux सत्र लोड करने में विफल",
-    "tmuxUnavailable": "इस होस्ट पर tmux इंस्टॉल नहीं है",
-    "noSessions": "इस होस्ट पर कोई tmux सत्र नहीं है",
-    "noHostSelected": "कोई होस्ट चयनित नहीं है",
-    "attached": "अटैच्ड",
-    "detached": "डिटैच्ड",
-    "attach": "अटैच करें",
-    "editTags": "टैग संपादित करें",
-    "tagsHint": "अल्पविराम से अलग टैग (जैसे YOLO, lab, training)",
-    "tagsSaved": "टैग सहेजे गए",
-    "tagsSaveFailed": "टैग सहेजने में विफल",
-    "searchPlaceholder": "सत्रों में आउटपुट खोजें...",
-    "searchResults": "{{count}} मिलान",
-    "searchFailed": "खोज विफल",
-    "selectPaneHint": "इसके आउटपुट का पूर्वावलोकन करने के लिए एक पैन चुनें",
-    "closePreview": "पूर्वावलोकन बंद करें",
-    "newSession": "नया सत्र",
-    "newSessionHint": "सत्र का नाम (अक्षर, अंक, _ @ % + = -)",
-    "newSessionPlaceholder": "my-session",
-    "create": "बनाएं",
-    "sessionCreated": "सत्र \"{{name}}\" बनाया गया",
-    "sessionCreateFailed": "सत्र बनाने में विफल",
-    "splitRight": "दाएं विभाजित करें",
-    "splitDown": "नीचे विभाजित करें",
-    "splitFailed": "पैन विभाजित करने में विफल",
-    "newWindow": "नई विंडो",
-    "windowCreateFailed": "विंडो बनाने में विफल",
-    "attachSessionTooltip": "{{session}} में अटैच करें",
-    "refresh": "ताज़ा करें",
-    "refreshFailed": "सत्र ताज़ा करने में विफल",
-    "collapseAll": "सभी संकुचित करें",
-    "expandAll": "सभी विस्तृत करें",
-    "moreActions": "अधिक कार्रवाइयां",
-    "sessionStats": "सत्र आँकड़े",
-    "renameSessionTitle": "सत्र \"{{name}}\" का नाम बदलें",
-    "rename": "नाम बदलें",
-    "sessionRenamed": "सत्र का नाम बदलकर \"{{name}}\" कर दिया गया",
-    "sessionRenameFailed": "सत्र का नाम बदलने में विफल",
-    "editTagsTitle": "\"{{name}}\" के लिए टैग संपादित करें",
-    "killPane": "पेन नष्ट करें",
-    "resizeTree": "आकार बदलने के लिए खींचें, रीसेट करने के लिए डबल-क्लिक करें",
-    "reattach": "पुनः अटैच करें (विकृत दृश्य को ठीक करता है)",
-    "killWindow": "विंडो नष्ट करें",
-    "killWindowTitle": "क्या \"{{session}}\" की विंडो {{index}} नष्ट करें?",
-    "killWindowBody": "इस विंडो के सभी पेन और प्रक्रियाएँ समाप्त हो जाएँगी। अंतिम विंडो नष्ट करने से सत्र समाप्त हो जाता है।",
-    "windowKillFailed": "विंडो नष्ट करने में विफल",
-    "statusActivity": "गतिविधि",
-    "statusWindows": "विंडोज़",
-    "statusPanes": "पेन",
-    "statusTags": "टैग",
-    "killPaneTitle": "क्या पेन {{id}} नष्ट करें?",
-    "killPaneBody": "इस पेन में चल रही प्रक्रिया समाप्त हो जाएगी। अंतिम पेन नष्ट करने पर इसकी विंडो बंद हो जाती है।",
-    "paneKillFailed": "पेन नष्ट करने में विफल",
-    "killSessionTitle": "क्या सत्र \"{{name}}\" नष्ट करें?",
-    "killSessionBody": "इस सत्र की सभी विंडोज़ और चल रही प्रक्रियाएँ समाप्त हो जाएँगी। इसे पूर्ववत नहीं किया जा सकता।",
-    "kill": "नष्ट करें",
-    "sessionKilled": "सत्र \"{{name}}\" नष्ट किया गया",
-    "sessionKillFailed": "सत्र नष्ट करने में विफल",
-    "hostUnreachable": "होस्ट से कनेक्ट नहीं हो सका। जाँचें कि यह ऑनलाइन और पहुँच योग्य है।",
-    "noServer": "इस होस्ट पर कोई tmux सर्वर नहीं चल रहा है।",
-    "searchTruncated": "आंशिक परिणाम। खोज प्रत्येक फलक की अंतिम {{lines}} पंक्तियों और अधिकतम {{panes}} फलकों को कवर करती है।",
-    "closeSearchResults": "खोज परिणाम बंद करें",
-    "retry": "पुनः प्रयास करें",
-    "noHosts": "कोई SSH होस्ट उपलब्ध नहीं है",
-    "noHostsHint": "किसी SSH होस्ट पर Tmux Monitor विकल्प को सक्षम करें (होस्ट मैनेजर, Tmux Monitor टैब) ताकि उसके tmux सत्रों की निगरानी की जा सके।",
-    "tmuxInstallHint": "इसे होस्ट पर इंस्टॉल करें:",
-    "attachTooltip": "{{host}} पर टर्मिनल खोलें",
-    "attachTooltipPane": "{{host}}पर एक टर्मिनल खोलें, tmux सत्र {{session}}",
-    "timeJustNow": "अभी",
-    "timeMinutes": "{{count}}m पहले",
-    "timeHours": "{{count}}h पहले",
-    "timeDays": "{{count}}d पहले",
-    "allHosts": "सभी होस्ट",
-    "singleHost": "एकल होस्ट",
-    "hostScope": "मॉनिटर स्कोप",
-    "filterHosts": "होस्ट को नाम या पते के आधार पर फ़िल्टर करें",
-    "selectHost": "होस्ट का चयन करें",
-    "toggleHost": "विस्तार करें या संक्षिप्त करें {{host}}",
-    "noMatchingHosts": "कोई मेल खाने वाले होस्ट नहीं मिले",
-    "toggleSession": "विस्तार करें या संक्षिप्त करें {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/hu_HU.json b/plugins/tmux-monitor/locales/translated/hu_HU.json
deleted file mode 100644
index 0126a8a81..000000000
--- a/plugins/tmux-monitor/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Tmux monitor engedélyezése",
-    "enableTmuxMonitorDesc": "Mutassa meg ezt a gépet a Tmux Monitorban, és adja hozzá a tmux műveleteit az oldalsávhoz",
-    "tabTmuxMonitor": "Tmux monitor",
-    "docsLink": "Dokumentumok megtekintése"
-  },
-  "nav": {
-    "tmuxMonitor": "Tmux monitor"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Tmux monitor",
-    "tmuxMonitorDesc": "TMUX munkamenetek figyelése a hosztokon keresztül"
-  },
-  "permissions": {
-    "use": {
-      "title": "Tmux monitor használata",
-      "description": "Böngésszen és vezérelje a tmux munkameneteket, ablakokat és paneleket a monitorral rendelkező gazdagépeken."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Tmux monitor engedélyezése",
-        "description": "Figyelje és csatlakozzon a hoszton futó tmux munkamenetekhez."
-      },
-      "mouseEnabled": {
-        "label": "tmux egér támogatásának engedélyezése",
-        "description": "Egér támogatás alkalmazása a tmux munkamenetre munkamenet csatolásakor vagy létrehozásakor. A többi munkamenet és a globális tmux beállítások változatlanok maradnak."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Tmux monitor",
-    "failedToLoadHosts": "Nem sikerült betölteni a gazdagépeket",
-    "failedToLoad": "Nem sikerült betölteni a tmux munkameneteket",
-    "tmuxUnavailable": "A tmux nincs telepítve erre a gépre",
-    "noSessions": "Nincsenek tmux munkamenetek ezen a gépen",
-    "noHostSelected": "Nincs kiválasztva gazdagép",
-    "attached": "Csatolt",
-    "detached": "Különálló",
-    "attach": "Csatolás",
-    "editTags": "Címkék szerkesztése",
-    "tagsHint": "Vesszővel elválasztott címkék (pl. YOLO, labor, képzés)",
-    "tagsSaved": "Címkék mentve",
-    "tagsSaveFailed": "Nem sikerült menteni a címkéket",
-    "searchPlaceholder": "Keresési kimenet munkamenetek között...",
-    "searchResults": "{{count}} találat",
-    "searchFailed": "Keresés sikertelen",
-    "selectPaneHint": "Válasszon ki egy panelt a kimenetének megtekintéséhez",
-    "closePreview": "Előnézet bezárása",
-    "newSession": "Új munkamenet",
-    "newSessionHint": "Munkamenet neve (betűk, számjegyek, _ @ % + = -)",
-    "newSessionPlaceholder": "my-session",
-    "create": "Teremt",
-    "sessionCreated": "\"{{name}}\" munkamenet létrehozva",
-    "sessionCreateFailed": "Nem sikerült létrehozni a munkamenetet",
-    "splitRight": "Jobbra osztás",
-    "splitDown": "Felosztás",
-    "splitFailed": "Nem sikerült felosztani az ablaktáblát",
-    "newWindow": "Új ablak",
-    "windowCreateFailed": "Nem sikerült létrehozni az ablakot",
-    "attachSessionTooltip": "Csatlakozás ehhez: {{session}}",
-    "refresh": "Frissítés",
-    "refreshFailed": "Nem sikerült frissíteni a munkameneteket",
-    "collapseAll": "Összes összecsukása",
-    "expandAll": "Összes kibontása",
-    "moreActions": "További műveletek",
-    "sessionStats": "Munkamenet-statisztikák",
-    "renameSessionTitle": "Munkamenet átnevezése \"{{name}}\"",
-    "rename": "Átnevezés",
-    "sessionRenamed": "Munkamenet átnevezése erre: \"{{name}}\"",
-    "sessionRenameFailed": "Nem sikerült átnevezni a munkamenetet",
-    "editTagsTitle": "A(z) „{{name}} ” címkéinek szerkesztése",
-    "killPane": "Ablak bezárása",
-    "resizeTree": "Húzással átméretezheted, dupla kattintással visszaállíthatod",
-    "reattach": "Újracsatolás (kijavítja a torz képet)",
-    "killWindow": "Ablak ölése",
-    "killWindowTitle": "A(z) \"{{session}} \" ablakának {{index}} leállítása?",
-    "killWindowBody": "Az ablakban található összes panel és folyamat leáll. Az utolsó ablak bezárása a munkamenet végét jelenti.",
-    "windowKillFailed": "Nem sikerült bezárni az ablakot",
-    "statusActivity": "Tevékenység",
-    "statusWindows": "Ablakok",
-    "statusPanes": "ablaktáblák",
-    "statusTags": "Címkék",
-    "killPaneTitle": "Ablak bezárása {{id}}?",
-    "killPaneBody": "Az ebben a panelben futó folyamat leáll. Az utolsó panel bezárása bezárja az ablakát.",
-    "paneKillFailed": "Nem sikerült bezárni az ablaktáblát",
-    "killSessionTitle": "Munkamenet leállítása: \"{{name}}\"?",
-    "killSessionBody": "Ebben a munkamenetben az összes ablak és futó folyamat leáll. Ez a művelet nem vonható vissza.",
-    "kill": "Megöl",
-    "sessionKilled": "A(z) \"{{name}}\" munkamenet leállt",
-    "sessionKillFailed": "Nem sikerült leállítani a munkamenetet",
-    "hostUnreachable": "Nem sikerült csatlakozni a gazdagéphez. Ellenőrizze, hogy online van-e és elérhető-e.",
-    "noServer": "Nem fut tmux szerver ezen a gépen.",
-    "searchTruncated": "Részleges találatok. A keresés az egyes panelek utolsó {{lines}} soraira, és legfeljebb {{panes}} panelre terjed ki.",
-    "closeSearchResults": "Keresési eredmények bezárása",
-    "retry": "Újrapróbálkozás",
-    "noHosts": "Nincsenek elérhető SSH-hosztok",
-    "noHostsHint": "Engedélyezze a Tmux Monitor opciót egy SSH hoszton (Host Manager, Tmux Monitor fül) a tmux munkamenetek monitorozásához.",
-    "tmuxInstallHint": "Telepítse a gazdagépre a következő paranccsal:",
-    "attachTooltip": "Nyisson meg egy terminált a következőhöz: {{host}}",
-    "attachTooltipPane": "Nyiss meg egy terminált a következővel: {{host}}, tmux session {{session}}",
-    "timeJustNow": "éppen most",
-    "timeMinutes": "{{count}}perccel ezelőtt",
-    "timeHours": "{{count}}órával ezelőtt",
-    "timeDays": "{{count}}nappal ezelőtt",
-    "allHosts": "Minden házigazda",
-    "singleHost": "Egyetlen host",
-    "hostScope": "Monitor hatóköre",
-    "filterHosts": "Szűrje a házigazdákat név vagy cím alapján",
-    "selectHost": "Válasszon gazdagépet",
-    "toggleHost": "Kibontás vagy összecsukás {{host}}",
-    "noMatchingHosts": "Nincsenek egyező gazdagépek",
-    "toggleSession": "Kibontás vagy összecsukás {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/id_ID.json b/plugins/tmux-monitor/locales/translated/id_ID.json
deleted file mode 100644
index b7fecbd16..000000000
--- a/plugins/tmux-monitor/locales/translated/id_ID.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Aktifkan Monitor Tmux",
-    "enableTmuxMonitorDesc": "Tampilkan host ini di Tmux Monitor dan tambahkan aksi tmux-nya ke sidebar.",
-    "tabTmuxMonitor": "Monitor Tmux",
-    "docsLink": "Lihat dokumen"
-  },
-  "nav": {
-    "tmuxMonitor": "Monitor Tmux"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Monitor Tmux",
-    "tmuxMonitorDesc": "Pantau sesi tmux di seluruh host Anda."
-  },
-  "permissions": {
-    "use": {
-      "title": "Gunakan Tmux Monitor",
-      "description": "Telusuri dan kendalikan sesi, jendela, dan panel tmux pada host dengan monitor yang diaktifkan."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Aktifkan Monitor Tmux",
-        "description": "Pantau dan hubungkan ke sesi tmux yang berjalan di host ini."
-      },
-      "mouseEnabled": {
-        "label": "Aktifkan dukungan mouse tmux",
-        "description": "Terapkan dukungan mouse ke sesi tmux saat melampirkan atau membuat sesi. Sesi lain dan pengaturan tmux global tidak berubah."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Monitor Tmux",
-    "failedToLoadHosts": "Gagal memuat host",
-    "failedToLoad": "Gagal memuat sesi tmux",
-    "tmuxUnavailable": "tmux tidak terinstal pada host ini",
-    "noSessions": "Tidak ada sesi tmux di host ini.",
-    "noHostSelected": "Tidak ada pembawa acara yang dipilih.",
-    "attached": "Terlampir",
-    "detached": "Terpisah",
-    "attach": "Menempel",
-    "editTags": "Edit tag",
-    "tagsHint": "Tag yang dipisahkan koma (misalnya YOLO, lab, training)",
-    "tagsSaved": "Tag tersimpan",
-    "tagsSaveFailed": "Gagal menyimpan tag.",
-    "searchPlaceholder": "Hasil pencarian di seluruh sesi...",
-    "searchResults": "{{count}} cocok",
-    "searchFailed": "Pencarian gagal",
-    "selectPaneHint": "Pilih panel untuk melihat pratinjau hasilnya.",
-    "closePreview": "Tutup pratinjau",
-    "newSession": "Sesi baru",
-    "newSessionHint": "Nama sesi (huruf, angka, _ @ % + = -)",
-    "newSessionPlaceholder": "sesi saya",
-    "create": "Membuat",
-    "sessionCreated": "Sesi \"{{name}}\" dibuat",
-    "sessionCreateFailed": "Gagal membuat sesi",
-    "splitRight": "Belah kanan",
-    "splitDown": "Terbagi",
-    "splitFailed": "Gagal membagi panel",
-    "newWindow": "Jendela baru",
-    "windowCreateFailed": "Gagal membuat jendela",
-    "attachSessionTooltip": "Lampirkan ke {{session}}",
-    "refresh": "Menyegarkan",
-    "refreshFailed": "Gagal memperbarui sesi",
-    "collapseAll": "Ciutkan semua",
-    "expandAll": "Perluas semua",
-    "moreActions": "Tindakan lainnya",
-    "sessionStats": "Statistik sesi",
-    "renameSessionTitle": "Ganti nama sesi \"{{name}}\"",
-    "rename": "Ganti nama",
-    "sessionRenamed": "Sesi diubah namanya menjadi \"{{name}}\"",
-    "sessionRenameFailed": "Gagal mengganti nama sesi",
-    "editTagsTitle": "Edit tag untuk \"{{name}}\"",
-    "killPane": "Panel pembunuh",
-    "resizeTree": "Seret untuk mengubah ukuran, klik dua kali untuk mengatur ulang.",
-    "reattach": "Pasangkan kembali (memperbaiki tampilan yang kacau)",
-    "killWindow": "Jendela pembunuhan",
-    "killWindowTitle": "Hapus jendela {{index}} dari \"{{session}}\"?",
-    "killWindowBody": "Semua panel dan proses di jendela ini akan dihentikan. Menghentikan jendela terakhir akan mengakhiri sesi.",
-    "windowKillFailed": "Gagal menutup jendela",
-    "statusActivity": "Aktivitas",
-    "statusWindows": "Windows",
-    "statusPanes": "panel",
-    "statusTags": "Tag",
-    "killPaneTitle": "Hapus panel {{id}}?",
-    "killPaneBody": "Proses yang berjalan di panel ini akan dihentikan. Menghentikan proses di panel terakhir akan menutup jendelanya.",
-    "paneKillFailed": "Gagal mematikan panel",
-    "killSessionTitle": "Hentikan sesi \"{{name}}\"?",
-    "killSessionBody": "Semua jendela dan proses yang berjalan dalam sesi ini akan dihentikan. Tindakan ini tidak dapat dibatalkan.",
-    "kill": "Membunuh",
-    "sessionKilled": "Sesi \"{{name}}\" dihentikan",
-    "sessionKillFailed": "Gagal mengakhiri sesi",
-    "hostUnreachable": "Tidak dapat terhubung ke host. Periksa apakah host tersebut online dan dapat dijangkau.",
-    "noServer": "Tidak ada server tmux yang berjalan di host ini.",
-    "searchTruncated": "Hasil parsial. Pencarian mencakup {{lines}} baris terakhir dari setiap panel dan paling banyak {{panes}} panel.",
-    "closeSearchResults": "Tutup hasil pencarian",
-    "retry": "Mencoba kembali",
-    "noHosts": "Tidak ada host SSH yang tersedia.",
-    "noHostsHint": "Aktifkan opsi Tmux Monitor pada host SSH (Host Manager, tab Tmux Monitor) untuk memantau sesi tmux-nya.",
-    "tmuxInstallHint": "Instal di host dengan cara:",
-    "attachTooltip": "Buka terminal ke {{host}}",
-    "attachTooltipPane": "Buka terminal ke {{host}}, sesi tmux {{session}}",
-    "timeJustNow": "baru saja",
-    "timeMinutes": "{{count}} menit lalu",
-    "timeHours": "{{count}} jam lalu",
-    "timeDays": "{{count}} detik lalu",
-    "allHosts": "Semua tuan rumah",
-    "singleHost": "Host tunggal",
-    "hostScope": "Ruang lingkup pemantauan",
-    "filterHosts": "Saring host berdasarkan nama atau alamat.",
-    "selectHost": "Pilih tuan rumah",
-    "toggleHost": "Perluas atau ciutkan {{host}}",
-    "noMatchingHosts": "Tidak ada host yang cocok",
-    "toggleSession": "Perluas atau ciutkan {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/it_IT.json b/plugins/tmux-monitor/locales/translated/it_IT.json
deleted file mode 100644
index c91047a4b..000000000
--- a/plugins/tmux-monitor/locales/translated/it_IT.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Abilita Monitor Tmux",
-    "enableTmuxMonitorDesc": "Mostra questo host nel Monitor Tmux e aggiungi le sue azioni tmux alla barra laterale",
-    "tabTmuxMonitor": "Monitor Tmux",
-    "docsLink": "Visualizza documentazione"
-  },
-  "nav": {
-    "tmuxMonitor": "Monitor Tmux"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Monitor Tmux",
-    "tmuxMonitorDesc": "Monitora le sessioni tmux sui tuoi host"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilizzare Tmux Monitor",
-      "description": "Esplora e controlla sessioni, finestre e pannelli tmux sugli host con il monitor abilitato."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Abilita Monitor Tmux",
-        "description": "Monitora e connettiti alle sessioni tmux in esecuzione su questo host."
-      },
-      "mouseEnabled": {
-        "label": "Abilita il supporto per il mouse in tmux",
-        "description": "Applica il supporto del mouse alla sessione tmux quando la colleghi o la crei. Le altre sessioni e le impostazioni globali di tmux rimangono invariate."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Monitor Tmux",
-    "failedToLoadHosts": "Impossibile caricare gli host",
-    "failedToLoad": "Impossibile caricare le sessioni tmux",
-    "tmuxUnavailable": "tmux non è installato su questo host",
-    "noSessions": "Nessuna sessione tmux su questo host",
-    "noHostSelected": "Nessun host selezionato",
-    "attached": "Connesso",
-    "detached": "Scollegato",
-    "attach": "Connetti",
-    "editTags": "Modifica tag",
-    "tagsHint": "Tag separati da virgole (es. YOLO, lab, training)",
-    "tagsSaved": "Tag salvati",
-    "tagsSaveFailed": "Salvataggio dei tag non riuscito",
-    "searchPlaceholder": "Cerca output tra le sessioni...",
-    "searchResults": "{{count}} corrispondenze",
-    "searchFailed": "Ricerca non riuscita",
-    "selectPaneHint": "Seleziona un pannello per visualizzare l'anteprima dell'output",
-    "closePreview": "Chiudi anteprima",
-    "newSession": "Nuova sessione",
-    "newSessionHint": "Nome sessione (lettere, cifre, _ @ % + = -)",
-    "newSessionPlaceholder": "my-session",
-    "create": "Crea",
-    "sessionCreated": "Sessione \"{{name}}\" creata",
-    "sessionCreateFailed": "Creazione della sessione non riuscita",
-    "splitRight": "Dividi a destra",
-    "splitDown": "Dividi in basso",
-    "splitFailed": "Divisione del pannello non riuscita",
-    "newWindow": "Nuova finestra",
-    "windowCreateFailed": "Creazione della finestra non riuscita",
-    "attachSessionTooltip": "Connetti a {{session}}",
-    "refresh": "Aggiorna",
-    "refreshFailed": "Aggiornamento delle sessioni non riuscito",
-    "collapseAll": "Comprimi tutto",
-    "expandAll": "Espandi tutto",
-    "moreActions": "Altre azioni",
-    "sessionStats": "Statistiche sessione",
-    "renameSessionTitle": "Rinomina sessione \"{{name}}\"",
-    "rename": "Rinomina",
-    "sessionRenamed": "Sessione rinominata in \"{{name}}\"",
-    "sessionRenameFailed": "Rinomina della sessione non riuscita",
-    "editTagsTitle": "Modifica tag per \"{{name}}\"",
-    "killPane": "Termina riquadro",
-    "resizeTree": "Trascina per ridimensionare, fai doppio clic per ripristinare",
-    "reattach": "Ricollega (risolve una visualizzazione alterata)",
-    "killWindow": "Termina finestra",
-    "killWindowTitle": "Terminare la finestra {{index}} di \"{{session}}\"?",
-    "killWindowBody": "Tutti i riquadri e i processi in questa finestra verranno terminati. Terminare l'ultima finestra chiude la sessione.",
-    "windowKillFailed": "Terminazione della finestra non riuscita",
-    "statusActivity": "Attività",
-    "statusWindows": "Finestre",
-    "statusPanes": "riquadri",
-    "statusTags": "Tag",
-    "killPaneTitle": "Terminare il riquadro {{id}}?",
-    "killPaneBody": "Il processo in esecuzione in questo riquadro verrà terminato. Terminare l'ultimo riquadro chiude la sua finestra.",
-    "paneKillFailed": "Terminazione del riquadro non riuscita",
-    "killSessionTitle": "Terminare la sessione \"{{name}}\"?",
-    "killSessionBody": "Tutte le finestre e i processi in esecuzione in questa sessione verranno terminati. Questa operazione non può essere annullata.",
-    "kill": "Termina",
-    "sessionKilled": "Sessione \"{{name}}\" terminata",
-    "sessionKillFailed": "Terminazione della sessione non riuscita",
-    "hostUnreachable": "Impossibile connettersi all'host. Verifica che sia online e raggiungibile.",
-    "noServer": "Nessun server tmux in esecuzione su questo host.",
-    "searchTruncated": "Risultati parziali. La ricerca copre le ultime {{lines}} righe di ciascun riquadro e al massimo {{panes}} riquadri.",
-    "closeSearchResults": "Chiudi risultati ricerca",
-    "retry": "Riprova",
-    "noHosts": "Nessun host SSH disponibile",
-    "noHostsHint": "Abilita l'opzione Tmux Monitor su un host SSH (Gestione host, scheda Tmux Monitor) per monitorare le sue sessioni tmux.",
-    "tmuxInstallHint": "Installalo sull'host con:",
-    "attachTooltip": "Apri un terminale su {{host}}",
-    "attachTooltipPane": "Apri un terminale su {{host}}, sessione tmux {{session}}",
-    "timeJustNow": "adesso",
-    "timeMinutes": "{{count}}m fa",
-    "timeHours": "{{count}}h fa",
-    "timeDays": "{{count}}d fa",
-    "allHosts": "Tutti gli host",
-    "singleHost": "Host singolo",
-    "hostScope": "Monitorare l'ambito",
-    "filterHosts": "Filtra gli host per nome o indirizzo",
-    "selectHost": "Seleziona l'host",
-    "toggleHost": "Espandi o comprimi {{host}}",
-    "noMatchingHosts": "Nessun host corrispondente",
-    "toggleSession": "Espandi o comprimi {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/ja_JP.json b/plugins/tmux-monitor/locales/translated/ja_JP.json
deleted file mode 100644
index 6eab1fefa..000000000
--- a/plugins/tmux-monitor/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Tmuxモニターを有効にする",
-    "enableTmuxMonitorDesc": "Tmuxモニターにこのホストを表示し、tmuxアクションをサイドバーに追加します。",
-    "tabTmuxMonitor": "Tmux モニター",
-    "docsLink": "ドキュメントを表示"
-  },
-  "nav": {
-    "tmuxMonitor": "tmuxモニター"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Tmux モニター",
-    "tmuxMonitorDesc": "ホスト間の tmux セッションを監視"
-  },
-  "permissions": {
-    "use": {
-      "title": "Tmux Monitorを使用する",
-      "description": "モニターが有効になっているホスト上で、tmuxのセッション、ウィンドウ、ペインを閲覧および制御します。"
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Tmuxモニターを有効にする",
-        "description": "このホスト上で実行されているtmuxセッションを監視し、接続します。"
-      },
-      "mouseEnabled": {
-        "label": "tmuxのマウスサポートを有効にする",
-        "description": "セッションのアタッチ時または作成時に、tmuxセッションにマウスサポートを適用します。他のセッションおよびグローバルなtmux設定は変更されません。"
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Tmux モニター",
-    "failedToLoadHosts": "ホストの読み込みに失敗しました",
-    "failedToLoad": "Tmux セッションの読み込みに失敗しました",
-    "tmuxUnavailable": "このホストに tmux がインストールされていません",
-    "noSessions": "このホストに tmux セッションがありません",
-    "noHostSelected": "ホストが選択されていません",
-    "attached": "アタッチ済み",
-    "detached": "デタッチ済み",
-    "attach": "アタッチ",
-    "editTags": "タグを編集",
-    "tagsHint": "カンマ区切りのタグ (例: YOLO, lab, training)",
-    "tagsSaved": "タグを保存しました",
-    "tagsSaveFailed": "タグの保存に失敗しました",
-    "searchPlaceholder": "セッション間で出力を検索...",
-    "searchResults": "{{count}}件の一致",
-    "searchFailed": "検索に失敗しました",
-    "selectPaneHint": "出力をプレビューするには、ペインを選択してください",
-    "closePreview": "プレビューを閉じる",
-    "newSession": "新規セッション",
-    "newSessionHint": "セッション名 (英数字, _ @ % + = -)",
-    "newSessionPlaceholder": "my-session",
-    "create": "作成",
-    "sessionCreated": "セッション \"{{name}}\" を作成しました",
-    "sessionCreateFailed": "セッションの作成に失敗しました",
-    "splitRight": "右に分割",
-    "splitDown": "下に分割",
-    "splitFailed": "ペインの分割に失敗しました",
-    "newWindow": "新規ウィンドウ",
-    "windowCreateFailed": "ウィンドウの作成に失敗しました",
-    "attachSessionTooltip": "{{session}}にアタッチ",
-    "refresh": "更新",
-    "refreshFailed": "セッションの更新に失敗しました",
-    "collapseAll": "すべて折りたたむ",
-    "expandAll": "すべて展開",
-    "moreActions": "その他の操作",
-    "sessionStats": "セッション統計",
-    "renameSessionTitle": "セッション \"{{name}}\" の名前変更",
-    "rename": "名前変更",
-    "sessionRenamed": "セッション名を \"{{name}}\" に変更しました",
-    "sessionRenameFailed": "セッションの名前変更に失敗しました",
-    "editTagsTitle": "\"{{name}}\" のタグを編集",
-    "killPane": "ペインを終了",
-    "resizeTree": "ドラッグしてサイズを変更、ダブルクリックでリセット",
-    "reattach": "再接続 (表示の乱れを修正)",
-    "killWindow": "ウィンドウを終了",
-    "killWindowTitle": "ウィンドウ {{index}} (\"{{session}}\") を終了しますか？",
-    "killWindowBody": "このウィンドウ内のすべてのペインとプロセスが終了されます。最後のウィンドウを終了するとセッションが終了します。",
-    "windowKillFailed": "ウィンドウの終了に失敗しました",
-    "statusActivity": "アクティビティ",
-    "statusWindows": "ウィンドウ",
-    "statusPanes": "ペイン",
-    "statusTags": "タグ",
-    "killPaneTitle": "ペイン {{id}} を終了しますか？",
-    "killPaneBody": "このペインで実行中のプロセスが終了されます。最後のペインを終了するとウィンドウが閉じます。",
-    "paneKillFailed": "ペインの終了に失敗しました",
-    "killSessionTitle": "セッション \"{{name}}\" を終了しますか？",
-    "killSessionBody": "このセッション内のすべてのウィンドウと実行中のプロセスが終了されます。この操作は取り消せません。",
-    "kill": "終了",
-    "sessionKilled": "セッション \"{{name}}\" を終了しました",
-    "sessionKillFailed": "セッションの終了に失敗しました",
-    "hostUnreachable": "ホストに接続できませんでした。オンラインで到達可能か確認してください。",
-    "noServer": "このホストで tmux サーバーが実行されていません。",
-    "searchTruncated": "部分的な結果です。検索は各ペインの最後の {{lines}} 行、最大で {{panes}} ペインを対象とします。",
-    "closeSearchResults": "検索結果を閉じる",
-    "retry": "再試行",
-    "noHosts": "利用可能な SSH ホストがありません",
-    "noHostsHint": "SSHホストでTmuxモニターオプションを有効にすると（ホストマネージャーのTmuxモニタータブ）、そのホストのtmuxセッションを監視できます。",
-    "tmuxInstallHint": "ホストにインストールするには:",
-    "attachTooltip": "{{host}} にターミナルを開く",
-    "attachTooltipPane": "{{host}}、tmux セッション {{session}} にターミナルを開きます",
-    "timeJustNow": "たった今",
-    "timeMinutes": "{{count}}分前",
-    "timeHours": "{{count}}時間前",
-    "timeDays": "{{count}}日前",
-    "allHosts": "すべてのホスト",
-    "singleHost": "単一ホスト",
-    "hostScope": "モニタースコープ",
-    "filterHosts": "ホストを名前またはアドレスでフィルタリングします",
-    "selectHost": "ホストを選択",
-    "toggleHost": "展開または折りたたみ {{host}}",
-    "noMatchingHosts": "一致するホストはありません",
-    "toggleSession": "展開または折りたたみ {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/ko_KR.json b/plugins/tmux-monitor/locales/translated/ko_KR.json
deleted file mode 100644
index 317be0fdc..000000000
--- a/plugins/tmux-monitor/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Tmux 모니터 활성화",
-    "enableTmuxMonitorDesc": "Tmux 모니터에 이 호스트를 표시하고 tmux 작업을 사이드바에 추가합니다.",
-    "tabTmuxMonitor": "Tmux 모니터",
-    "docsLink": "문서 보기"
-  },
-  "nav": {
-    "tmuxMonitor": "Tmux 모니터"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Tmux 모니터",
-    "tmuxMonitorDesc": "호스트 전반의 Tmux 세션 모니터링"
-  },
-  "permissions": {
-    "use": {
-      "title": "Tmux 모니터를 사용하세요",
-      "description": "모니터가 활성화된 호스트에서 tmux 세션, 창 및 패널을 탐색하고 제어합니다."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Tmux 모니터 활성화",
-        "description": "이 호스트에서 실행 중인 tmux 세션을 시청하고 참여하세요."
-      },
-      "mouseEnabled": {
-        "label": "tmux 마우스 지원을 활성화합니다.",
-        "description": "tmux 세션을 연결하거나 생성할 때 해당 세션에 마우스 지원을 적용합니다. 다른 세션 및 tmux의 전역 설정은 변경되지 않습니다."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Tmux 모니터",
-    "failedToLoadHosts": "호스트 목록을 불러오지 못했습니다",
-    "failedToLoad": "tmux 세션을 불러오지 못했습니다",
-    "tmuxUnavailable": "이 호스트에 tmux가 설치되어 있지 않습니다",
-    "noSessions": "이 호스트에 tmux 세션이 없습니다",
-    "noHostSelected": "선택된 호스트가 없습니다",
-    "attached": "연결됨",
-    "detached": "분리됨",
-    "attach": "연결",
-    "editTags": "태그 편집",
-    "tagsHint": "쉼표로 구분된 태그 (예: YOLO, lab, training)",
-    "tagsSaved": "태그 저장됨",
-    "tagsSaveFailed": "태그 저장 실패",
-    "searchPlaceholder": "세션 전체에서 출력 검색...",
-    "searchResults": "{{count}}개 일치",
-    "searchFailed": "검색 실패",
-    "selectPaneHint": "출력을 미리 보려면 패널을 선택하세요",
-    "closePreview": "미리보기 닫기",
-    "newSession": "새 세션",
-    "newSessionHint": "세션 이름 (영문자, 숫자, _ @ % + = -)",
-    "newSessionPlaceholder": "my-session",
-    "create": "생성",
-    "sessionCreated": "세션 \"{{name}}\" 생성됨",
-    "sessionCreateFailed": "세션 생성 실패",
-    "splitRight": "오른쪽으로 분할",
-    "splitDown": "아래로 분할",
-    "splitFailed": "패널 분할 실패",
-    "newWindow": "새 창",
-    "windowCreateFailed": "창 생성 실패",
-    "attachSessionTooltip": "{{session}}에 연결",
-    "refresh": "새로고침",
-    "refreshFailed": "세션 새로고침 실패",
-    "collapseAll": "모두 접기",
-    "expandAll": "모두 펼치기",
-    "moreActions": "더 보기",
-    "sessionStats": "세션 통계",
-    "renameSessionTitle": "세션 \"{{name}}\" 이름 바꾸기",
-    "rename": "이름 바꾸기",
-    "sessionRenamed": "세션 이름이 \"{{name}}\"(으)로 변경됨",
-    "sessionRenameFailed": "세션 이름 변경 실패",
-    "editTagsTitle": "\"{{name}}\"의 태그 편집",
-    "killPane": "Pane 종료",
-    "resizeTree": "드래그하여 크기를 조절하고, 두 번 클릭하여 원래대로 되돌립니다.",
-    "reattach": "재연결 (화면 깨짐 복구)",
-    "killWindow": "창 종료",
-    "killWindowTitle": "{{session}}의 창 {{index}}을(를) 종료하시겠습니까?",
-    "killWindowBody": "이 창의 모든 Pane과 프로세스가 종료됩니다. 마지막 창을 종료하면 세션이 끝납니다.",
-    "windowKillFailed": "창 종료 실패",
-    "statusActivity": "활동",
-    "statusWindows": "Windows",
-    "statusPanes": "Pane",
-    "statusTags": "태그",
-    "killPaneTitle": "Pane {{id}}을(를) 종료하시겠습니까?",
-    "killPaneBody": "이 Pane에서 실행 중인 프로세스가 종료됩니다. 마지막 Pane을 종료하면 해당 창이 닫힙니다.",
-    "paneKillFailed": "Pane 종료 실패",
-    "killSessionTitle": "세션 \"{{name}}\"을(를) 종료하시겠습니까?",
-    "killSessionBody": "이 세션의 모든 창과 실행 중인 프로세스가 종료됩니다. 이 작업은 취소할 수 없습니다.",
-    "kill": "종료",
-    "sessionKilled": "세션 \"{{name}}\"이(가) 종료되었습니다.",
-    "sessionKillFailed": "세션 종료 실패",
-    "hostUnreachable": "호스트에 연결할 수 없습니다. 온라인 상태이고 연결 가능한지 확인하세요.",
-    "noServer": "이 호스트에서 tmux 서버가 실행 중이 아닙니다.",
-    "searchTruncated": "부분적인 결과입니다. 검색은 각 패널의 마지막 {{lines}} 줄과 최대 {{panes}} 개의 패널을 대상으로 합니다.",
-    "closeSearchResults": "검색 결과 닫기",
-    "retry": "재시도",
-    "noHosts": "사용 가능한 SSH 호스트가 없습니다.",
-    "noHostsHint": "SSH 호스트에서 Tmux 모니터 옵션을 활성화하면(호스트 관리자, Tmux 모니터 탭) 해당 호스트의 Tmux 세션을 모니터링할 수 있습니다.",
-    "tmuxInstallHint": "호스트에 설치하려면:",
-    "attachTooltip": "{{host}}에 터미널 열기",
-    "attachTooltipPane": "터미널을 {{host}}로 열고 tmux 세션 {{session}}를 엽니다.",
-    "timeJustNow": "방금",
-    "timeMinutes": "{{count}}분 전",
-    "timeHours": "{{count}}시간 전",
-    "timeDays": "{{count}}일 전",
-    "allHosts": "모든 호스트",
-    "singleHost": "단일 호스트",
-    "hostScope": "모니터링 범위",
-    "filterHosts": "호스트를 이름 또는 주소로 필터링합니다.",
-    "selectHost": "호스트를 선택하세요",
-    "toggleHost": "펼치거나 접으세요 {{host}}",
-    "noMatchingHosts": "일치하는 호스트가 없습니다.",
-    "toggleSession": "펼치거나 접으세요 {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/nl_NL.json b/plugins/tmux-monitor/locales/translated/nl_NL.json
deleted file mode 100644
index 4b88374b5..000000000
--- a/plugins/tmux-monitor/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Tmux Monitor inschakelen",
-    "enableTmuxMonitorDesc": "Toon deze host in de Tmux Monitor en voeg de bijbehorende Tmux-acties toe aan de zijbalk.",
-    "tabTmuxMonitor": "Tmux Monitor",
-    "docsLink": "Documenten bekijken"
-  },
-  "nav": {
-    "tmuxMonitor": "Tmux Monitor"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Tmux Monitor",
-    "tmuxMonitorDesc": "Monitor tmux-sessies op al je hosts."
-  },
-  "permissions": {
-    "use": {
-      "title": "Gebruik Tmux Monitor",
-      "description": "Blader door en beheer tmux-sessies, -vensters en -panelen op hosts waarop de monitor is ingeschakeld."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Tmux Monitor inschakelen",
-        "description": "Observeer en koppel je aan tmux-sessies die op deze host draaien."
-      },
-      "mouseEnabled": {
-        "label": "Schakel tmux-muisondersteuning in",
-        "description": "Voeg muisondersteuning toe aan de tmux-sessie bij het koppelen of creëren van een sessie. Andere sessies en algemene tmux-instellingen blijven ongewijzigd."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Tmux Monitor",
-    "failedToLoadHosts": "Het laden van hosts is mislukt.",
-    "failedToLoad": "Het laden van tmux-sessies is mislukt.",
-    "tmuxUnavailable": "Tmux is niet geïnstalleerd op deze host.",
-    "noSessions": "Er zijn geen tmux-sessies op deze host.",
-    "noHostSelected": "Geen host geselecteerd",
-    "attached": "Bijgevoegd",
-    "detached": "Losgemaakt",
-    "attach": "Bijvoegen",
-    "editTags": "Labels bewerken",
-    "tagsHint": "Tags gescheiden door komma's (bijv. YOLO, lab, training)",
-    "tagsSaved": "Tags opgeslagen",
-    "tagsSaveFailed": "Het opslaan van tags is mislukt.",
-    "searchPlaceholder": "Zoekresultaten over meerdere sessies heen...",
-    "searchResults": "{{count}} overeenkomsten",
-    "searchFailed": "Zoeken mislukt",
-    "selectPaneHint": "Selecteer een venster om de uitvoer ervan te bekijken.",
-    "closePreview": "Voorbeeld sluiten",
-    "newSession": "Nieuwe sessie",
-    "newSessionHint": "Sessienaam (letters, cijfers, _ @ % + = -)",
-    "newSessionPlaceholder": "mijn sessie",
-    "create": "Creëren",
-    "sessionCreated": "Sessie \"{{name}}\" aangemaakt",
-    "sessionCreateFailed": "Het aanmaken van de sessie is mislukt.",
-    "splitRight": "Rechts gesplitst",
-    "splitDown": "Splitsen",
-    "splitFailed": "Het splitsen van het venster is mislukt.",
-    "newWindow": "Nieuw venster",
-    "windowCreateFailed": "Het is niet gelukt om het venster te maken.",
-    "attachSessionTooltip": "Bevestigen aan {{session}}",
-    "refresh": "Vernieuwen",
-    "refreshFailed": "Sessies konden niet worden vernieuwd.",
-    "collapseAll": "Alles inklappen",
-    "expandAll": "Alles uitvouwen",
-    "moreActions": "Meer acties",
-    "sessionStats": "Sessiestatistieken",
-    "renameSessionTitle": "Sessie hernoemen \"{{name}}\"",
-    "rename": "Naam wijzigen",
-    "sessionRenamed": "Sessie hernoemd naar \"{{name}}\"",
-    "sessionRenameFailed": "Het hernoemen van de sessie is mislukt.",
-    "editTagsTitle": "Bewerk tags voor \"{{name}}\"",
-    "killPane": "Doodvenster",
-    "resizeTree": "Sleep om het formaat aan te passen, dubbelklik om het te resetten.",
-    "reattach": "Opnieuw koppelen (corrigeert een vervormde weergave)",
-    "killWindow": "Dood venster",
-    "killWindowTitle": "Venster {{index}} van \"{{session}} \" verwijderen?",
-    "killWindowBody": "Alle vensters en processen in dit venster worden beëindigd. Het sluiten van het laatste venster beëindigt de sessie.",
-    "windowKillFailed": "Het is niet gelukt om het venster te sluiten.",
-    "statusActivity": "Activiteit",
-    "statusWindows": "Windows",
-    "statusPanes": "ruiten",
-    "statusTags": "Tags",
-    "killPaneTitle": "Kill pane {{id}}?",
-    "killPaneBody": "Het proces dat in dit venster wordt uitgevoerd, wordt beëindigd. Door het laatste venster te sluiten, wordt het bijbehorende venster gesloten.",
-    "paneKillFailed": "Het is niet gelukt om het venster te sluiten.",
-    "killSessionTitle": "Sessie beëindigen \"{{name}}\"?",
-    "killSessionBody": "Alle vensters en actieve processen in deze sessie worden beëindigd. Dit kan niet ongedaan worden gemaakt.",
-    "kill": "Doden",
-    "sessionKilled": "Sessie \"{{name}}\" is beëindigd",
-    "sessionKillFailed": "Sessie kon niet worden beëindigd",
-    "hostUnreachable": "Er kon geen verbinding met de host worden gemaakt. Controleer of deze online en bereikbaar is.",
-    "noServer": "Er draait geen tmux-server op deze host.",
-    "searchTruncated": "Gedeeltelijke resultaten. De zoekopdracht omvat de laatste {{lines}} regels van elk venster en maximaal {{panes}} vensters.",
-    "closeSearchResults": "Zoekresultaten sluiten",
-    "retry": "Opnieuw proberen",
-    "noHosts": "Geen SSH-hosts beschikbaar",
-    "noHostsHint": "Schakel de optie Tmux Monitor in op een SSH-host (Host Manager, tabblad Tmux Monitor) om de tmux-sessies te bewaken.",
-    "tmuxInstallHint": "Installeer het op de host met:",
-    "attachTooltip": "Open een terminal naar {{host}}",
-    "attachTooltipPane": "Open een terminal naar {{host}}, tmux-sessie {{session}}",
-    "timeJustNow": "zojuist",
-    "timeMinutes": "{{count}}m geleden",
-    "timeHours": "{{count}}uur geleden",
-    "timeDays": "{{count}}dagen geleden",
-    "allHosts": "Alle hosts",
-    "singleHost": "Eén host",
-    "hostScope": "Monitorbereik",
-    "filterHosts": "Filter hosts op naam of adres.",
-    "selectHost": "Selecteer host",
-    "toggleHost": "Uitbreiden of inklappen {{host}}",
-    "noMatchingHosts": "Geen overeenkomende hosts gevonden",
-    "toggleSession": "Uitbreiden of inklappen {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/no_NO.json b/plugins/tmux-monitor/locales/translated/no_NO.json
deleted file mode 100644
index bdc735b4f..000000000
--- a/plugins/tmux-monitor/locales/translated/no_NO.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Aktiver Tmux-monitor",
-    "enableTmuxMonitorDesc": "Vis denne verten i Tmux-monitoren og legg til tmux-handlingene i sidefeltet",
-    "tabTmuxMonitor": "Tmux-skjerm",
-    "docsLink": "Vis dokumenter"
-  },
-  "nav": {
-    "tmuxMonitor": "Tmux-skjerm"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Tmux-skjerm",
-    "tmuxMonitorDesc": "Overvåk tmux-økter på tvers av vertene dine"
-  },
-  "permissions": {
-    "use": {
-      "title": "Bruk Tmux-skjermen",
-      "description": "Bla gjennom og kontroller tmux-økter, vinduer og ruter på verter med skjermen aktivert."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Aktiver Tmux-monitor",
-        "description": "Se og koble til tmux-økter som kjører på denne verten."
-      },
-      "mouseEnabled": {
-        "label": "Aktiver tmux-musstøtte",
-        "description": "Bruk musestøtte på tmux-økten når du kobler til eller oppretter en økt. Andre økter og globale tmux-innstillinger forblir uendret."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Tmux-skjerm",
-    "failedToLoadHosts": "Kunne ikke laste verter",
-    "failedToLoad": "Kunne ikke laste inn tmux-økter",
-    "tmuxUnavailable": "tmux er ikke installert på denne verten",
-    "noSessions": "Ingen tmux-økter på denne verten",
-    "noHostSelected": "Ingen vert valgt",
-    "attached": "Vedlagt",
-    "detached": "Frittstående",
-    "attach": "Feste",
-    "editTags": "Rediger tagger",
-    "tagsHint": "Kommaseparerte tagger (f.eks. YOLO, lab, trening)",
-    "tagsSaved": "Tagger lagret",
-    "tagsSaveFailed": "Kunne ikke lagre taggene",
-    "searchPlaceholder": "Søk i utdata på tvers av økter...",
-    "searchResults": "{{count}} treff",
-    "searchFailed": "Søket mislyktes",
-    "selectPaneHint": "Velg en rute for å forhåndsvise resultatet",
-    "closePreview": "Lukk forhåndsvisning",
-    "newSession": "Ny økt",
-    "newSessionHint": "Øktnavn (bokstaver, sifre, _ @ % + = -)",
-    "newSessionPlaceholder": "min-økt",
-    "create": "Skape",
-    "sessionCreated": "Økt «{{name}}» opprettet",
-    "sessionCreateFailed": "Kunne ikke opprette økten",
-    "splitRight": "Del høyre",
-    "splitDown": "Del ned",
-    "splitFailed": "Kunne ikke dele ruten",
-    "newWindow": "Nytt vindu",
-    "windowCreateFailed": "Kunne ikke opprette vinduet",
-    "attachSessionTooltip": "Fest til {{session}}",
-    "refresh": "Oppdater",
-    "refreshFailed": "Kunne ikke oppdatere øktene",
-    "collapseAll": "Skjul alle",
-    "expandAll": "Utvid alle",
-    "moreActions": "Flere handlinger",
-    "sessionStats": "Øktstatistikk",
-    "renameSessionTitle": "Gi økten nytt navn «{{name}}»",
-    "rename": "Gi nytt navn",
-    "sessionRenamed": "Økten har fått nytt navn til «{{name}}»",
-    "sessionRenameFailed": "Kunne ikke gi økten nytt navn",
-    "editTagsTitle": "Rediger tagger for «{{name}}»",
-    "killPane": "Drep ruten",
-    "resizeTree": "Dra for å endre størrelse, dobbeltklikk for å tilbakestille",
-    "reattach": "Fest på nytt (fikser en forvrengt visning)",
-    "killWindow": "Drep vinduet",
-    "killWindowTitle": "Drep vinduet {{index}} av «{{session}}»?",
-    "killWindowBody": "Alle ruter og prosesser i dette vinduet vil bli avsluttet. Hvis du avslutter det siste vinduet, avsluttes økten.",
-    "windowKillFailed": "Klarte ikke å avslutte vinduet",
-    "statusActivity": "Aktivitet",
-    "statusWindows": "Vinduer",
-    "statusPanes": "ruter",
-    "statusTags": "Tagger",
-    "killPaneTitle": "Drep ruten {{id}}?",
-    "killPaneBody": "Prosessen som kjører i denne ruten vil bli avsluttet. Hvis du avslutter den siste ruten, lukkes vinduet.",
-    "paneKillFailed": "Kunne ikke avslutte ruten",
-    "killSessionTitle": "Avslutt økten «{{name}}»?",
-    "killSessionBody": "Alle vinduer og kjørende prosesser i denne økten vil bli avsluttet. Dette kan ikke angres.",
-    "kill": "Drepe",
-    "sessionKilled": "Økten «{{name}}» ble drept",
-    "sessionKillFailed": "Klarte ikke å avslutte økten",
-    "hostUnreachable": "Kunne ikke koble til verten. Sjekk at den er online og tilgjengelig.",
-    "noServer": "Ingen tmux-server kjører på denne verten.",
-    "searchTruncated": "Delvise resultater. Søket dekker de siste {{lines}} linjene i hver rute og maksimalt {{panes}} ruter.",
-    "closeSearchResults": "Lukk søkeresultatene",
-    "retry": "Prøv igjen",
-    "noHosts": "Ingen SSH-verter tilgjengelig",
-    "noHostsHint": "Aktiver Tmux Monitor-alternativet på en SSH-vert (Vertsadministrator, Tmux Monitor-fanen) for å overvåke tmux-øktene.",
-    "tmuxInstallHint": "Installer den på verten med:",
-    "attachTooltip": "Åpne en terminal til {{host}}",
-    "attachTooltipPane": "Åpne en terminal til {{host}}, tmux-økt {{session}}",
-    "timeJustNow": "akkurat nå",
-    "timeMinutes": "For {{count}}minutter siden",
-    "timeHours": "for {{count}}t siden",
-    "timeDays": "for {{count}}dager siden",
-    "allHosts": "Alle verter",
-    "singleHost": "Enkelt vert",
-    "hostScope": "Overvåkingsomfang",
-    "filterHosts": "Filtrer verter etter navn eller adresse",
-    "selectHost": "Velg vert",
-    "toggleHost": "Utvid eller skjul {{host}}",
-    "noMatchingHosts": "Ingen samsvarende verter",
-    "toggleSession": "Utvid eller skjul {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/pl_PL.json b/plugins/tmux-monitor/locales/translated/pl_PL.json
deleted file mode 100644
index 51643b2df..000000000
--- a/plugins/tmux-monitor/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Włącz monitor Tmux",
-    "enableTmuxMonitorDesc": "Pokaż tego hosta w monitorze Tmux i dodaj jego akcje tmux do paska bocznego",
-    "tabTmuxMonitor": "Monitor Tmux",
-    "docsLink": "Zobacz dokumentację"
-  },
-  "nav": {
-    "tmuxMonitor": "Monitor Tmux"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Monitor Tmux",
-    "tmuxMonitorDesc": "Monitoruj sesje tmux na swoich hostach"
-  },
-  "permissions": {
-    "use": {
-      "title": "Użyj monitora Tmux",
-      "description": "Przeglądaj i kontroluj sesje, okna i panele tmux na hostach z włączonym monitorem."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Włącz monitor Tmux",
-        "description": "Obserwuj i dołącz do sesji tmux działających na tym hoście."
-      },
-      "mouseEnabled": {
-        "label": "Włącz obsługę myszy tmux",
-        "description": "Zastosuj obsługę myszy do sesji tmux podczas dołączania lub tworzenia sesji. Pozostałe sesje i globalne ustawienia tmux pozostają niezmienione."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Monitor Tmux",
-    "failedToLoadHosts": "Nie udało się załadować hostów",
-    "failedToLoad": "Nie udało się załadować sesji tmux",
-    "tmuxUnavailable": "tmux nie jest zainstalowany na tym hoście",
-    "noSessions": "Brak sesji tmux na tym hoście",
-    "noHostSelected": "Nie wybrano hosta",
-    "attached": "Dołączona",
-    "detached": "Odłączona",
-    "attach": "Dołącz",
-    "editTags": "Edytuj tagi",
-    "tagsHint": "Tagi rozdzielone przecinkami (np. YOLO, laboratorium, szkolenie)",
-    "tagsSaved": "Zapisano tagi",
-    "tagsSaveFailed": "Nie udało się zapisać tagów",
-    "searchPlaceholder": "Przeszukaj wyjście we wszystkich sesjach...",
-    "searchResults": "{{count}} dopasowań",
-    "searchFailed": "Wyszukiwanie nie powiodło się",
-    "selectPaneHint": "Wybierz panel, aby zobaczyć podgląd jego wyjścia",
-    "closePreview": "Zamknij podgląd",
-    "newSession": "Nowa sesja",
-    "newSessionHint": "Nazwa sesji (litery, cyfry, _ @ % + = -)",
-    "newSessionPlaceholder": "moja-sesja",
-    "create": "Utwórz",
-    "sessionCreated": "Utworzono sesję „{{name}}”",
-    "sessionCreateFailed": "Nie udało się utworzyć sesji",
-    "splitRight": "Podziel w prawo",
-    "splitDown": "Podziel w dół",
-    "splitFailed": "Nie udało się podzielić panelu",
-    "newWindow": "Nowe okno",
-    "windowCreateFailed": "Nie udało się utworzyć okna",
-    "attachSessionTooltip": "Dołącz do {{session}}",
-    "refresh": "Odśwież",
-    "refreshFailed": "Nie udało się odświeżyć sesji",
-    "collapseAll": "Zwiń wszystko",
-    "expandAll": "Rozwiń wszystko",
-    "moreActions": "Więcej akcji",
-    "sessionStats": "Statystyki sesji",
-    "renameSessionTitle": "Zmień nazwę sesji „{{name}}”",
-    "rename": "Zmień nazwę",
-    "sessionRenamed": "Zmieniono nazwę sesji na „{{name}}”",
-    "sessionRenameFailed": "Nie udało się zmienić nazwy sesji",
-    "editTagsTitle": "Edytuj tagi dla „{{name}}”",
-    "killPane": "Zakończ panel",
-    "resizeTree": "Przeciągnij, aby zmienić rozmiar, kliknij dwukrotnie, aby zresetować",
-    "reattach": "Dołącz ponownie (naprawia zniekształcony widok)",
-    "killWindow": "Zakończ okno",
-    "killWindowTitle": "Zakończyć okno {{index}} sesji „{{session}}”?",
-    "killWindowBody": "Wszystkie panele i procesy w tym oknie zostaną zakończone. Zakończenie ostatniego okna kończy sesję.",
-    "windowKillFailed": "Nie udało się zakończyć okna",
-    "statusActivity": "Aktywność",
-    "statusWindows": "Okna",
-    "statusPanes": "panele",
-    "statusTags": "Tagi",
-    "killPaneTitle": "Zakończyć panel {{id}}?",
-    "killPaneBody": "Proces działający w tym panelu zostanie zakończony. Zakończenie ostatniego panelu zamyka jego okno.",
-    "paneKillFailed": "Nie udało się zakończyć panelu",
-    "killSessionTitle": "Zakończyć sesję „{{name}}”?",
-    "killSessionBody": "Wszystkie okna i działające procesy w tej sesji zostaną zakończone. Tej operacji nie można cofnąć.",
-    "kill": "Zakończ",
-    "sessionKilled": "Sesja „{{name}}” została zakończona",
-    "sessionKillFailed": "Nie udało się zakończyć sesji",
-    "hostUnreachable": "Nie udało się połączyć z hostem. Sprawdź, czy jest on online i osiągalny.",
-    "noServer": "Na tym hoście nie działa żaden serwer tmux.",
-    "searchTruncated": "Wyniki częściowe. Przeszukiwanie obejmuje ostatnie {{lines}} wierszy każdego panelu i maksymalnie {{panes}} paneli.",
-    "closeSearchResults": "Zamknij wyniki wyszukiwania",
-    "retry": "Ponów",
-    "noHosts": "Brak dostępnych hostów SSH",
-    "noHostsHint": "Włącz opcję Monitor Tmux na hoście SSH (Menedżer hostów, zakładka Monitor Tmux), aby monitorować jego sesje Tmux.",
-    "tmuxInstallHint": "Zainstaluj go na hoście za pomocą:",
-    "attachTooltip": "Otwórz terminal do {{host}}",
-    "attachTooltipPane": "Otwórz terminal do {{host}}, sesja tmux {{session}}",
-    "timeJustNow": "przed chwilą",
-    "timeMinutes": "{{count}} min temu",
-    "timeHours": "{{count}} godz. temu",
-    "timeDays": "{{count}} dni temu",
-    "allHosts": "Wszystkie hosty",
-    "singleHost": "Pojedynczy host",
-    "hostScope": "Zakres monitora",
-    "filterHosts": "Filtruj hosty według nazwy lub adresu",
-    "selectHost": "Wybierz hosta",
-    "toggleHost": "Rozwiń lub zwiń {{host}}",
-    "noMatchingHosts": "Brak pasujących hostów",
-    "toggleSession": "Rozwiń lub zwiń {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/pt_BR.json b/plugins/tmux-monitor/locales/translated/pt_BR.json
deleted file mode 100644
index 596fb65d1..000000000
--- a/plugins/tmux-monitor/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Ativar monitor Tmux",
-    "enableTmuxMonitorDesc": "Exiba este host no Monitor Tmux e adicione suas ações tmux à barra lateral.",
-    "tabTmuxMonitor": "Monitor Tmux",
-    "docsLink": "Documentação"
-  },
-  "nav": {
-    "tmuxMonitor": "Monitor Tmux"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Monitor Tmux",
-    "tmuxMonitorDesc": "Monitore as sessões do tmux em seus hosts."
-  },
-  "permissions": {
-    "use": {
-      "title": "Use o monitor Tmux",
-      "description": "Navegue e controle sessões, janelas e painéis do tmux em hosts com o monitor ativado."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Ativar monitor Tmux",
-        "description": "Monitore e conecte-se às sessões do tmux em execução neste host."
-      },
-      "mouseEnabled": {
-        "label": "Ativar suporte para mouse no tmux",
-        "description": "Ao conectar ou criar uma sessão, o suporte a mouse será ativado na sessão do tmux. As demais sessões e configurações globais do tmux permanecem inalteradas."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Monitor Tmux",
-    "failedToLoadHosts": "Falha ao carregar os hosts",
-    "failedToLoad": "Falha ao carregar as sessões do tmux",
-    "tmuxUnavailable": "O tmux não está instalado neste host.",
-    "noSessions": "Não há sessões tmux neste host.",
-    "noHostSelected": "Nenhum host selecionado",
-    "attached": "Apegado",
-    "detached": "Desapegado",
-    "attach": "Anexar",
-    "editTags": "Editar etiquetas",
-    "tagsHint": "Etiquetas separadas por vírgulas (ex: YOLO, laboratório, treinamento)",
-    "tagsSaved": "Etiquetas salvas",
-    "tagsSaveFailed": "Falha ao salvar as tags",
-    "searchPlaceholder": "Resultados da pesquisa em todas as sessões...",
-    "searchResults": "{{count}} correspondências",
-    "searchFailed": "A busca falhou",
-    "selectPaneHint": "Selecione um painel para visualizar sua saída.",
-    "closePreview": "Fechar pré-visualização",
-    "newSession": "Nova sessão",
-    "newSessionHint": "Nome da sessão (letras, dígitos, _ @ % + = -)",
-    "newSessionPlaceholder": "minha-sessão",
-    "create": "Criar",
-    "sessionCreated": "Sessão \"{{name}}\" criada",
-    "sessionCreateFailed": "Falha ao criar sessão",
-    "splitRight": "Dividir à direita",
-    "splitDown": "Dividir em partes",
-    "splitFailed": "Falha ao dividir o painel",
-    "newWindow": "Nova janela",
-    "windowCreateFailed": "Falha ao criar a janela",
-    "attachSessionTooltip": "Anexe a {{session}}",
-    "refresh": "Atualizar",
-    "refreshFailed": "Falha ao atualizar as sessões",
-    "collapseAll": "Recolher tudo",
-    "expandAll": "Expandir tudo",
-    "moreActions": "Mais ações",
-    "sessionStats": "Estatísticas da sessão",
-    "renameSessionTitle": "Renomear sessão \"{{name}}\"",
-    "rename": "Renomear",
-    "sessionRenamed": "Sessão renomeada para \"{{name}}\"",
-    "sessionRenameFailed": "Falha ao renomear a sessão",
-    "editTagsTitle": "Editar tags para \"{{name}}\"",
-    "killPane": "Painel de eliminação",
-    "resizeTree": "Arraste para redimensionar, clique duas vezes para redefinir.",
-    "reattach": "Reconectar (corrige uma visualização distorcida)",
-    "killWindow": "Janela de eliminação",
-    "killWindowTitle": "Fechar janela {{index}} de \"{{session}}\"?",
-    "killWindowBody": "Todos os painéis e processos nesta janela serão encerrados. Fechar a última janela finaliza a sessão.",
-    "windowKillFailed": "Falha ao fechar a janela",
-    "statusActivity": "Atividade",
-    "statusWindows": "Windows",
-    "statusPanes": "painéis",
-    "statusTags": "Marcadores",
-    "killPaneTitle": "Painel de encerramento {{id}}?",
-    "killPaneBody": "O processo em execução neste painel será encerrado. Fechar o último painel fecha a janela correspondente.",
-    "paneKillFailed": "Falha ao desligar o painel",
-    "killSessionTitle": "Sessão de encerramento \"{{name}}\"?",
-    "killSessionBody": "Todas as janelas e processos em execução nesta sessão serão encerrados. Esta ação é irreversível.",
-    "kill": "Matar",
-    "sessionKilled": "Sessão \"{{name}}\" encerrada",
-    "sessionKillFailed": "Falha ao encerrar a sessão",
-    "hostUnreachable": "Não foi possível conectar ao host. Verifique se ele está online e acessível.",
-    "noServer": "Não há nenhum servidor tmux em execução neste host.",
-    "searchTruncated": "Resultados parciais. A pesquisa abrange as últimas {{lines}} linhas de cada painel e no máximo {{panes}} painéis.",
-    "closeSearchResults": "Fechar resultados da pesquisa",
-    "retry": "Tentar novamente",
-    "noHosts": "Não há hosts SSH disponíveis.",
-    "noHostsHint": "Habilite a opção Monitor do Tmux em um host SSH (Gerenciador de Hosts, guia Monitor do Tmux) para monitorar suas sessões do tmux.",
-    "tmuxInstallHint": "Instale-o no host com:",
-    "attachTooltip": "Abra um terminal para {{host}}",
-    "attachTooltipPane": "Abra um terminal para {{host}}, sessão tmux {{session}}",
-    "timeJustNow": "agora mesmo",
-    "timeMinutes": "{{count}}m atrás",
-    "timeHours": "{{count}}h atrás",
-    "timeDays": "{{count}}há alguns dias",
-    "allHosts": "Todos os anfitriões",
-    "singleHost": "Host único",
-    "hostScope": "Escopo do monitor",
-    "filterHosts": "Filtre os hosts por nome ou endereço.",
-    "selectHost": "Selecione o host",
-    "toggleHost": "Expandir ou recolher {{host}}",
-    "noMatchingHosts": "Nenhum host correspondente",
-    "toggleSession": "Expandir ou recolher {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/pt_PT.json b/plugins/tmux-monitor/locales/translated/pt_PT.json
deleted file mode 100644
index d5ee0b82b..000000000
--- a/plugins/tmux-monitor/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Ativar Monitor Tmux",
-    "enableTmuxMonitorDesc": "Mostrar este host no Monitor Tmux e adicionar as suas ações tmux à barra lateral",
-    "tabTmuxMonitor": "Monitor Tmux",
-    "docsLink": "Ver documentação"
-  },
-  "nav": {
-    "tmuxMonitor": "Monitor Tmux"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Monitor Tmux",
-    "tmuxMonitorDesc": "Monitorizar sessões tmux nos seus hosts"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilize o monitor Tmux",
-      "description": "Navegue e controle as sessões, janelas e painéis do tmux em hosts com o monitor activado."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Ativar Monitor Tmux",
-        "description": "Monitorize e ligue-se às sessões tmux em execução neste host."
-      },
-      "mouseEnabled": {
-        "label": "Activar suporte para rato no tmux",
-        "description": "Ao ligar ou criar uma sessão, o suporte do rato será ativado na sessão tmux. As restantes sessões e definições globais do tmux permanecem inalteradas."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Monitor Tmux",
-    "failedToLoadHosts": "Falha ao carregar anfitriões",
-    "failedToLoad": "Falha ao carregar sessões tmux",
-    "tmuxUnavailable": "tmux não está instalado neste anfitrião",
-    "noSessions": "Sem sessões tmux neste anfitrião",
-    "noHostSelected": "Nenhum anfitrião selecionado",
-    "attached": "Anexado",
-    "detached": "Desanexado",
-    "attach": "Anexar",
-    "editTags": "Editar etiquetas",
-    "tagsHint": "Etiquetas separadas por vírgulas (ex: YOLO, lab, training)",
-    "tagsSaved": "Etiquetas guardadas",
-    "tagsSaveFailed": "Falha ao guardar etiquetas",
-    "searchPlaceholder": "Pesquisar saída em todas as sessões...",
-    "searchResults": "{{count}} correspondências",
-    "searchFailed": "Pesquisa falhou",
-    "selectPaneHint": "Selecione um painel para pré-visualizar a sua saída",
-    "closePreview": "Fechar pré-visualização",
-    "newSession": "Nova sessão",
-    "newSessionHint": "Nome da sessão (letras, dígitos, _ @ % + = -)",
-    "newSessionPlaceholder": "my-session",
-    "create": "Criar",
-    "sessionCreated": "Sessão \"{{name}}\" criada",
-    "sessionCreateFailed": "Falha ao criar sessão",
-    "splitRight": "Dividir à direita",
-    "splitDown": "Dividir para baixo",
-    "splitFailed": "Falha ao dividir painel",
-    "newWindow": "Nova janela",
-    "windowCreateFailed": "Falha ao criar janela",
-    "attachSessionTooltip": "Anexar a {{session}}",
-    "refresh": "Atualizar",
-    "refreshFailed": "Falha ao atualizar sessões",
-    "collapseAll": "Recolher tudo",
-    "expandAll": "Expandir tudo",
-    "moreActions": "Mais ações",
-    "sessionStats": "Estatísticas da sessão",
-    "renameSessionTitle": "Renomear sessão \"{{name}}\"",
-    "rename": "Renomear",
-    "sessionRenamed": "Sessão renomeada para \"{{name}}\"",
-    "sessionRenameFailed": "Falha ao renomear sessão",
-    "editTagsTitle": "Editar etiquetas para \"{{name}}\"",
-    "killPane": "Terminar painel",
-    "resizeTree": "Arraste para redimensionar, clique duas vezes para repor.",
-    "reattach": "Reanexar (corrige uma visualização distorcida)",
-    "killWindow": "Terminar janela",
-    "killWindowTitle": "Terminar janela {{index}} de \"{{session}}\"?",
-    "killWindowBody": "Todos os painéis e processos nesta janela serão terminados. Terminar a última janela encerra a sessão.",
-    "windowKillFailed": "Falha ao terminar janela",
-    "statusActivity": "Atividade",
-    "statusWindows": "Janelas",
-    "statusPanes": "painéis",
-    "statusTags": "Etiquetas",
-    "killPaneTitle": "Terminar painel {{id}}?",
-    "killPaneBody": "O processo em execução neste painel será terminado. Terminar o último painel fecha a sua janela.",
-    "paneKillFailed": "Falha ao terminar painel",
-    "killSessionTitle": "Terminar sessão \"{{name}}\"?",
-    "killSessionBody": "Todas as janelas e processos em execução nesta sessão serão terminados. Isto não pode ser desfeito.",
-    "kill": "Terminar",
-    "sessionKilled": "Sessão \"{{name}}\" terminada",
-    "sessionKillFailed": "Falha ao terminar sessão",
-    "hostUnreachable": "Não foi possível ligar ao anfitrião. Verifique se está online e acessível.",
-    "noServer": "Não há nenhum servidor tmux em execução neste anfitrião.",
-    "searchTruncated": "Resultados parciais. A pesquisa abrange as últimas {{lines}} linhas de cada painel e no máximo {{panes}} painéis.",
-    "closeSearchResults": "Fechar resultados da pesquisa",
-    "retry": "Tentar novamente",
-    "noHosts": "Nenhum anfitrião SSH disponível",
-    "noHostsHint": "Active a opção Monitor do Tmux num host SSH (Gestor de Hosts, separador Monitor do Tmux) para monitorizar as suas sessões do tmux.",
-    "tmuxInstallHint": "Instale-o no anfitrião com:",
-    "attachTooltip": "Abrir um terminal para {{host}}",
-    "attachTooltipPane": "Abra um terminal para {{host}}, sessão tmux {{session}}",
-    "timeJustNow": "agora mesmo",
-    "timeMinutes": "há {{count}} min",
-    "timeHours": "há {{count}} h",
-    "timeDays": "há {{count}} d",
-    "allHosts": "Todos os hosts",
-    "singleHost": "Host único",
-    "hostScope": "Escopo do monitor",
-    "filterHosts": "Filtre os hosts por nome ou endereço.",
-    "selectHost": "Selecione o host",
-    "toggleHost": "Expandir ou recolher {{host}}",
-    "noMatchingHosts": "Nenhum host correspondente",
-    "toggleSession": "Expandir ou recolher {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/ro_RO.json b/plugins/tmux-monitor/locales/translated/ro_RO.json
deleted file mode 100644
index a6679feb9..000000000
--- a/plugins/tmux-monitor/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Activează monitorul Tmux",
-    "enableTmuxMonitorDesc": "Afișează această gazdă în Monitorul Tmux și adaugă acțiunile sale tmux în bara laterală",
-    "tabTmuxMonitor": "Monitorul Tmux",
-    "docsLink": "Vizualizați documentele"
-  },
-  "nav": {
-    "tmuxMonitor": "Monitor Tmux"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Monitor Tmux",
-    "tmuxMonitorDesc": "Monitorizați sesiunile tmux pe toate gazdele dvs."
-  },
-  "permissions": {
-    "use": {
-      "title": "Folosește monitorul Tmux",
-      "description": "Răsfoiți și controlați sesiunile tmux, ferestrele și panourile de pe gazde cu monitorul activat."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Activează monitorul Tmux",
-        "description": "Urmărește și atașează-te la sesiunile tmux care rulează pe această gazdă."
-      },
-      "mouseEnabled": {
-        "label": "Activează suportul pentru mouse tmux",
-        "description": "Aplică suport pentru mouse sesiunii tmux la atașarea sau crearea unei sesiuni. Celelalte sesiuni și setările globale tmux rămân neschimbate."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Monitor Tmux",
-    "failedToLoadHosts": "Nu s-au putut încărca gazdele",
-    "failedToLoad": "Nu s-au putut încărca sesiunile tmux",
-    "tmuxUnavailable": "tmux nu este instalat pe această gazdă",
-    "noSessions": "Nicio sesiune tmux pe această gazdă",
-    "noHostSelected": "Nicio gazdă selectată",
-    "attached": "Ataşat",
-    "detached": "Detașat",
-    "attach": "Atașați",
-    "editTags": "Editați etichetele",
-    "tagsHint": "Etichete separate prin virgulă (de exemplu, YOLO, laborator, antrenament)",
-    "tagsSaved": "Etichete salvate",
-    "tagsSaveFailed": "Nu s-au putut salva etichetele",
-    "searchPlaceholder": "Rezultatul căutării în sesiuni...",
-    "searchResults": "{{count}} potriviri",
-    "searchFailed": "Căutarea a eșuat",
-    "selectPaneHint": "Selectați un panou pentru a previzualiza rezultatul acestuia",
-    "closePreview": "Închide previzualizarea",
-    "newSession": "Sesiune nouă",
-    "newSessionHint": "Numele sesiunii (litere, cifre, _ @ % + = -)",
-    "newSessionPlaceholder": "sesiunea mea",
-    "create": "Crea",
-    "sessionCreated": "Sesiunea „{{name}}” a fost creată",
-    "sessionCreateFailed": "Nu s-a putut crea sesiunea",
-    "splitRight": "Împărțire la dreapta",
-    "splitDown": "Împărțiți",
-    "splitFailed": "Nu s-a putut diviza panoul",
-    "newWindow": "Fereastră nouă",
-    "windowCreateFailed": "Nu s-a putut crea fereastra",
-    "attachSessionTooltip": "Atașați la {{session}}",
-    "refresh": "Reîmprospăta",
-    "refreshFailed": "Nu s-au putut actualiza sesiunile",
-    "collapseAll": "Restrângeți tot",
-    "expandAll": "Extindeți tot",
-    "moreActions": "Mai multe acțiuni",
-    "sessionStats": "Statistici ale sesiunii",
-    "renameSessionTitle": "Redenumiți sesiunea „{{name}}”",
-    "rename": "Redenumire",
-    "sessionRenamed": "Sesiunea a fost redenumită „{{name}}”",
-    "sessionRenameFailed": "Nu s-a putut redenumi sesiunea",
-    "editTagsTitle": "Editați etichetele pentru „{{name}}”",
-    "killPane": "Panou de închidere",
-    "resizeTree": "Trageți pentru a redimensiona, faceți dublu clic pentru a reseta",
-    "reattach": "Reatașare (corectează o vizualizare deformată)",
-    "killWindow": "Fereastră de închidere",
-    "killWindowTitle": "Fereastră de închidere {{index}} a ferestrei „{{session}}”?",
-    "killWindowBody": "Fiecare panou și proces din această fereastră va fi terminat. Închiderea ultimei ferestre încheie sesiunea.",
-    "windowKillFailed": "Nu s-a putut închide fereastra",
-    "statusActivity": "Activitate",
-    "statusWindows": "Ferestre",
-    "statusPanes": "geamuri",
-    "statusTags": "Etichete",
-    "killPaneTitle": "Panou de închidere {{id}}?",
-    "killPaneBody": "Procesul care rulează în acest panou va fi terminat. Închiderea ultimului panou îi închide fereastra.",
-    "paneKillFailed": "Nu s-a putut închide panoul",
-    "killSessionTitle": "Închide sesiunea „{{name}}”?",
-    "killSessionBody": "Toate ferestrele și procesele care rulează în această sesiune vor fi terminate. Această acțiune nu poate fi anulată.",
-    "kill": "Ucide",
-    "sessionKilled": "Sesiunea „{{name}}” a fost închisă",
-    "sessionKillFailed": "Sesiunea nu a putut fi închisă",
-    "hostUnreachable": "Nu s-a putut conecta la gazdă. Verificați dacă este online și accesibilă.",
-    "noServer": "Niciun server tmux nu rulează pe această gazdă.",
-    "searchTruncated": "Rezultate parțiale. Căutarea acoperă ultimele {{lines}} linii ale fiecărui panou și cel mult {{panes}} panouri.",
-    "closeSearchResults": "Închide rezultatele căutării",
-    "retry": "Reîncercați",
-    "noHosts": "Nu sunt disponibile gazde SSH",
-    "noHostsHint": "Activați opțiunea Monitor Tmux pe o gazdă SSH (Manager gazdă, fila Monitor Tmux) pentru a monitoriza sesiunile tmux ale acesteia.",
-    "tmuxInstallHint": "Instalați-l pe gazdă cu:",
-    "attachTooltip": "Deschideți un terminal cu {{host}}",
-    "attachTooltipPane": "Deschide un terminal cu {{host}}, sesiune tmux {{session}}",
-    "timeJustNow": "chiar acum",
-    "timeMinutes": "{{count}}acum câteva minute",
-    "timeHours": "{{count}}acum o oră",
-    "timeDays": "{{count}}zile în urmă",
-    "allHosts": "Toate gazdele",
-    "singleHost": "Gazdă unică",
-    "hostScope": "Monitorizați domeniul de aplicare",
-    "filterHosts": "Filtrați gazdele după nume sau adresă",
-    "selectHost": "Selectați gazda",
-    "toggleHost": "Extinde sau restrânge {{host}}",
-    "noMatchingHosts": "Nicio gazdă potrivită",
-    "toggleSession": "Extinde sau restrânge {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/ru_RU.json b/plugins/tmux-monitor/locales/translated/ru_RU.json
deleted file mode 100644
index d1e3ce334..000000000
--- a/plugins/tmux-monitor/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Включить монитор Tmux",
-    "enableTmuxMonitorDesc": "Показывать этот хост в Мониторе Tmux и добавлять действия tmux в боковую панель",
-    "tabTmuxMonitor": "Монитор Tmux",
-    "docsLink": "Документация"
-  },
-  "nav": {
-    "tmuxMonitor": "Монитор Tmux"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Монитор Tmux",
-    "tmuxMonitorDesc": "Мониторинг сессий tmux на ваших хостах"
-  },
-  "permissions": {
-    "use": {
-      "title": "Используйте монитор Tmux.",
-      "description": "Просматривайте и управляйте сессиями, окнами и панелями tmux на хостах с включенным монитором."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Включить монитор Tmux",
-        "description": "Отслеживайте и подключайтесь к сессиям tmux, запущенным на этом хосте."
-      },
-      "mouseEnabled": {
-        "label": "Включить поддержку мыши в tmux",
-        "description": "При подключении или создании сессии в сессии tmux должна быть добавлена поддержка мыши. Другие сессии и глобальные настройки tmux остаются без изменений."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Монитор Tmux",
-    "failedToLoadHosts": "Ошибка загрузки хостов",
-    "failedToLoad": "Ошибка загрузки сессий tmux",
-    "tmuxUnavailable": "tmux не установлен на этом хосте",
-    "noSessions": "Нет сессий tmux на этом хосте",
-    "noHostSelected": "Хост не выбран",
-    "attached": "Присоединён",
-    "detached": "Отсоединён",
-    "attach": "Присоединить",
-    "editTags": "Изменить теги",
-    "tagsHint": "Теги через запятую (например, YOLO, lab, training)",
-    "tagsSaved": "Теги сохранены",
-    "tagsSaveFailed": "Не удалось сохранить теги",
-    "searchPlaceholder": "Поиск вывода по сессиям...",
-    "searchResults": "{{count}} совпадений",
-    "searchFailed": "Поиск не удался",
-    "selectPaneHint": "Выберите панель для предпросмотра её вывода",
-    "closePreview": "Закрыть предпросмотр",
-    "newSession": "Новая сессия",
-    "newSessionHint": "Имя сессии (буквы, цифры, _ @ % + = -)",
-    "newSessionPlaceholder": "my-session",
-    "create": "Создать",
-    "sessionCreated": "Сессия \"{{name}}\" создана",
-    "sessionCreateFailed": "Не удалось создать сессию",
-    "splitRight": "Разделить вправо",
-    "splitDown": "Разделить вниз",
-    "splitFailed": "Не удалось разделить панель",
-    "newWindow": "Новое окно",
-    "windowCreateFailed": "Не удалось создать окно",
-    "attachSessionTooltip": "Присоединиться к {{session}}",
-    "refresh": "Обновить",
-    "refreshFailed": "Не удалось обновить сессии",
-    "collapseAll": "Свернуть всё",
-    "expandAll": "Развернуть всё",
-    "moreActions": "Дополнительные действия",
-    "sessionStats": "Статистика сессии",
-    "renameSessionTitle": "Переименовать сессию \"{{name}}\"",
-    "rename": "Переименовать",
-    "sessionRenamed": "Сессия переименована в \"{{name}}\"",
-    "sessionRenameFailed": "Не удалось переименовать сессию",
-    "editTagsTitle": "Изменить теги для \"{{name}}\"",
-    "killPane": "Завершить панель",
-    "resizeTree": "Перетащите для изменения размера, дважды щелкните для сброса.",
-    "reattach": "Переподключиться (исправляет искажённое отображение)",
-    "killWindow": "Завершить окно",
-    "killWindowTitle": "Завершить окно {{index}} сессии \"{{session}}\"?",
-    "killWindowBody": "Все панели и процессы в этом окне будут завершены. Завершение последнего окна завершит сессию.",
-    "windowKillFailed": "Не удалось завершить окно",
-    "statusActivity": "Активность",
-    "statusWindows": "Окна",
-    "statusPanes": "панели",
-    "statusTags": "Теги",
-    "killPaneTitle": "Завершить панель {{id}}?",
-    "killPaneBody": "Процесс, запущенный в этой панели, будет завершён. Завершение последней панели закроет её окно.",
-    "paneKillFailed": "Не удалось завершить панель",
-    "killSessionTitle": "Завершить сессию \"{{name}}\"?",
-    "killSessionBody": "Все окна и запущенные процессы в этой сессии будут завершены. Это действие нельзя отменить.",
-    "kill": "Завершить",
-    "sessionKilled": "Сессия \"{{name}}\" завершена",
-    "sessionKillFailed": "Не удалось завершить сессию",
-    "hostUnreachable": "Не удалось подключиться к хосту. Проверьте, что он онлайн и доступен.",
-    "noServer": "На этом хосте не запущен сервер tmux.",
-    "searchTruncated": "Частичные результаты. Поиск охватывает последние {{lines}} строк каждой панели и не более {{panes}} панелей.",
-    "closeSearchResults": "Закрыть результаты поиска",
-    "retry": "Повторить",
-    "noHosts": "Нет доступных SSH-хостов",
-    "noHostsHint": "Включите параметр Tmux Monitor на SSH-хосте (Диспетчер хостов, вкладка Tmux Monitor), чтобы отслеживать его tmux-сессии.",
-    "tmuxInstallHint": "Установите его на хост с помощью:",
-    "attachTooltip": "Открыть терминал на {{host}}",
-    "attachTooltipPane": "Откройте терминал и запустите команду `tmux session {{host}}`, затем выполните команду `tmux session {{session}}`.",
-    "timeJustNow": "только что",
-    "timeMinutes": "{{count}}м назад",
-    "timeHours": "{{count}}ч назад",
-    "timeDays": "{{count}}д назад",
-    "allHosts": "Все хосты",
-    "singleHost": "Один хост",
-    "hostScope": "Область действия монитора",
-    "filterHosts": "Фильтрация хостов по имени или адресу",
-    "selectHost": "Выберите хост",
-    "toggleHost": "Развернуть или свернуть {{host}}",
-    "noMatchingHosts": "Нет подходящих хостов",
-    "toggleSession": "Развернуть или свернуть {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/sr_SP.json b/plugins/tmux-monitor/locales/translated/sr_SP.json
deleted file mode 100644
index 8165fc6a8..000000000
--- a/plugins/tmux-monitor/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Омогући Tmux монитор",
-    "enableTmuxMonitorDesc": "Прикажи овај хост у Tmux монитору и додај његове tmux акције у бочну траку",
-    "tabTmuxMonitor": "Tmux монитор",
-    "docsLink": "Прикажи документе"
-  },
-  "nav": {
-    "tmuxMonitor": "Tmux монитор"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Tmux монитор",
-    "tmuxMonitorDesc": "Пратите tmux сесије на свим вашим хостовима"
-  },
-  "permissions": {
-    "use": {
-      "title": "Користите Tmux монитор",
-      "description": "Прегледајте и контролишите tmux сесије, прозоре и окна на хостовима са омогућеним монитором."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Омогући Tmux монитор",
-        "description": "Гледајте и прикључите се tmux сесијама које се покрећу на овом хосту."
-      },
-      "mouseEnabled": {
-        "label": "Омогући подршку за tmux миш",
-        "description": "Примени подршку за миш на tmux сесију приликом прикључивања или креирања сесије. Остале сесије и глобална tmux подешавања остају непромењена."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Tmux монитор",
-    "failedToLoadHosts": "Учитавање хостова није успело",
-    "failedToLoad": "Учитавање tmux сесија није успело",
-    "tmuxUnavailable": "tmux није инсталиран на овом хосту",
-    "noSessions": "Нема tmux сесија на овом хосту",
-    "noHostSelected": "Није изабран домаћин",
-    "attached": "Приложено",
-    "detached": "Одвојено",
-    "attach": "Приложи",
-    "editTags": "Уреди ознаке",
-    "tagsHint": "Ознаке одвојене зарезима (нпр. YOLO, лабораторија, обука)",
-    "tagsSaved": "Ознаке сачуване",
-    "tagsSaveFailed": "Чување ознака није успело",
-    "searchPlaceholder": "Претрага резултата у свим сесијама...",
-    "searchResults": "{{count}} подударања",
-    "searchFailed": "Претрага није успела",
-    "selectPaneHint": "Изаберите окно да бисте прегледали његов резултат",
-    "closePreview": "Затвори преглед",
-    "newSession": "Нова сесија",
-    "newSessionHint": "Назив сесије (слова, цифре, _ @ % + = -)",
-    "newSessionPlaceholder": "моја-сесија",
-    "create": "Креирај",
-    "sessionCreated": "Сесија „{{name}}“ је креирана",
-    "sessionCreateFailed": "Није успело креирање сесије",
-    "splitRight": "Подели десно",
-    "splitDown": "Подели",
-    "splitFailed": "Подела окна није успела",
-    "newWindow": "Нови прозор",
-    "windowCreateFailed": "Није успело креирање прозора",
-    "attachSessionTooltip": "Приложи уз {{session}}",
-    "refresh": "Освежи",
-    "refreshFailed": "Освежавање сесија није успело",
-    "collapseAll": "Скупи све",
-    "expandAll": "Прошири све",
-    "moreActions": "Више акција",
-    "sessionStats": "Статистика сесије",
-    "renameSessionTitle": "Преименуј сесију „{{name}}“",
-    "rename": "Преименуј",
-    "sessionRenamed": "Сесија је преименована у „{{name}}“",
-    "sessionRenameFailed": "Преименовање сесије није успело",
-    "editTagsTitle": "Уреди ознаке за „{{name}}“",
-    "killPane": "Окно за заустављање",
-    "resizeTree": "Превуците да бисте променили величину, кликните двапут да бисте ресетовали",
-    "reattach": "Поново причврстите (поправља искривљени приказ)",
-    "killWindow": "Затвори прозор",
-    "killWindowTitle": "Да ли да затворим прозор {{index}} од „{{session}}“?",
-    "killWindowBody": "Сваки панел и процес у овом прозору биће завршени. Затварањем последњег прозора завршава се сесија.",
-    "windowKillFailed": "Затварање прозора није успело",
-    "statusActivity": "Активност",
-    "statusWindows": "Прозори",
-    "statusPanes": "окна",
-    "statusTags": "Ознаке",
-    "killPaneTitle": "Затвори окно {{id}}?",
-    "killPaneBody": "Процес који се извршава у овом окну биће прекинут. Затварањем последњег окна затвара се његов прозор.",
-    "paneKillFailed": "Није успело затварање окна",
-    "killSessionTitle": "Укинути сесију „{{name}}“?",
-    "killSessionBody": "Сви прозори и покренути процеси у овој сесији биће прекинути. Ова радња се не може поништити.",
-    "kill": "Убити",
-    "sessionKilled": "Сесија „{{name}}“ је завршена",
-    "sessionKillFailed": "Завршавање сесије није успело",
-    "hostUnreachable": "Није могуће повезати се са хостом. Проверите да ли је онлајн и доступан.",
-    "noServer": "Ниједан tmux сервер не ради на овом хосту.",
-    "searchTruncated": "Делимични резултати. Претрага обухвата последњих {{lines}} редова сваког панела и највише {{panes}} панела.",
-    "closeSearchResults": "Затвори резултате претраге",
-    "retry": "Покушај поново",
-    "noHosts": "Нема доступних SSH хостова",
-    "noHostsHint": "Омогућите опцију Tmux Monitor на SSH хосту (Host Manager, картица Tmux Monitor) да бисте пратили његове tmux сесије.",
-    "tmuxInstallHint": "Инсталирајте га на хост помоћу:",
-    "attachTooltip": "Отворите терминал за {{host}}",
-    "attachTooltipPane": "Отворите терминал за {{host}}, tmux сесију {{session}}",
-    "timeJustNow": "управо сада",
-    "timeMinutes": "{{count}}пре мин",
-    "timeHours": "{{count}}пре сати",
-    "timeDays": "{{count}}пре д",
-    "allHosts": "Сви домаћини",
-    "singleHost": "Један домаћин",
-    "hostScope": "Опсег монитора",
-    "filterHosts": "Филтрирајте хостове по имену или адреси",
-    "selectHost": "Изаберите хоста",
-    "toggleHost": "Прошири или скупи {{host}}",
-    "noMatchingHosts": "Нема одговарајућих хостова",
-    "toggleSession": "Прошири или скупи {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/sv_SE.json b/plugins/tmux-monitor/locales/translated/sv_SE.json
deleted file mode 100644
index 584bbb4c8..000000000
--- a/plugins/tmux-monitor/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Aktivera Tmux-monitor",
-    "enableTmuxMonitorDesc": "Visa denna värd i Tmux Monitor och lägg till dess tmux-åtgärder i sidofältet",
-    "tabTmuxMonitor": "Tmux-monitor",
-    "docsLink": "Visa dokument"
-  },
-  "nav": {
-    "tmuxMonitor": "Tmux-monitor"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Tmux-monitor",
-    "tmuxMonitorDesc": "Övervaka tmux-sessioner över dina värdar"
-  },
-  "permissions": {
-    "use": {
-      "title": "Använd Tmux Monitor",
-      "description": "Bläddra bland och kontrollera tmux-sessioner, fönster och rutor på värdar med bildskärmen aktiverad."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Aktivera Tmux-monitorn",
-        "description": "Titta på och anslut till tmux-sessioner som körs på den här värden."
-      },
-      "mouseEnabled": {
-        "label": "Aktivera stöd för tmux-mus",
-        "description": "Använd musstöd för tmux-sessionen när du ansluter eller skapar en session. Andra sessioner och globala tmux-inställningar är oförändrade."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Tmux-monitor",
-    "failedToLoadHosts": "Misslyckades med att ladda värdar",
-    "failedToLoad": "Misslyckades med att ladda tmux-sessioner",
-    "tmuxUnavailable": "tmux är inte installerat på den här värddatorn",
-    "noSessions": "Inga tmux-sessioner på den här värden",
-    "noHostSelected": "Ingen värd vald",
-    "attached": "Bunden",
-    "detached": "Fristående",
-    "attach": "Bifoga",
-    "editTags": "Redigera taggar",
-    "tagsHint": "Kommaavgränsade taggar (t.ex. YOLO, lab, utbildning)",
-    "tagsSaved": "Taggar sparade",
-    "tagsSaveFailed": "Det gick inte att spara taggarna",
-    "searchPlaceholder": "Sök utdata över flera sessioner...",
-    "searchResults": "{{count}} matchningar",
-    "searchFailed": "Sökningen misslyckades",
-    "selectPaneHint": "Välj en ruta för att förhandsgranska dess utdata",
-    "closePreview": "Stäng förhandsgranskningen",
-    "newSession": "Ny session",
-    "newSessionHint": "Sessionsnamn (bokstäver, siffror, _ @ % + = -)",
-    "newSessionPlaceholder": "min-session",
-    "create": "Skapa",
-    "sessionCreated": "Sessionen \"{{name}}\" skapades",
-    "sessionCreateFailed": "Misslyckades med att skapa sessionen",
-    "splitRight": "Dela höger",
-    "splitDown": "Dela upp",
-    "splitFailed": "Misslyckades med att dela rutan",
-    "newWindow": "Nytt fönster",
-    "windowCreateFailed": "Misslyckades med att skapa fönstret",
-    "attachSessionTooltip": "Bifoga till {{session}}",
-    "refresh": "Uppdatera",
-    "refreshFailed": "Det gick inte att uppdatera sessionerna",
-    "collapseAll": "Komprimera alla",
-    "expandAll": "Expandera alla",
-    "moreActions": "Fler åtgärder",
-    "sessionStats": "Sessionsstatistik",
-    "renameSessionTitle": "Byt namn på sessionen \"{{name}}\"",
-    "rename": "Döpa om",
-    "sessionRenamed": "Sessionen har bytt namn till \"{{name}}\"",
-    "sessionRenameFailed": "Misslyckades med att byta namn på sessionen",
-    "editTagsTitle": "Redigera taggar för \"{{name}}\"",
-    "killPane": "Döda rutan",
-    "resizeTree": "Dra för att ändra storlek, dubbelklicka för att återställa",
-    "reattach": "Sätt tillbaka (åtgärdar en förvrängd bild)",
-    "killWindow": "Döda fönstret",
-    "killWindowTitle": "Avsluta fönstret {{index}} för \"{{session}}\"?",
-    "killWindowBody": "Varje ruta och process i det här fönstret avslutas. Om du avslutar det sista fönstret avslutas sessionen.",
-    "windowKillFailed": "Misslyckades med att avsluta fönstret",
-    "statusActivity": "Aktivitet",
-    "statusWindows": "Fönster",
-    "statusPanes": "rutor",
-    "statusTags": "Taggar",
-    "killPaneTitle": "Avsluta rutan {{id}}?",
-    "killPaneBody": "Processen som körs i den här rutan kommer att avslutas. Om du avslutar den sista rutan stängs dess fönster.",
-    "paneKillFailed": "Misslyckades med att avsluta rutan",
-    "killSessionTitle": "Avsluta sessionen \"{{name}}\"?",
-    "killSessionBody": "Alla fönster och processer som körs i den här sessionen kommer att avslutas. Detta kan inte ångras.",
-    "kill": "Döda",
-    "sessionKilled": "Sessionen \"{{name}}\" avstängd",
-    "sessionKillFailed": "Misslyckades med att avsluta sessionen",
-    "hostUnreachable": "Kunde inte ansluta till värden. Kontrollera att den är online och nåbar.",
-    "noServer": "Ingen tmux-server körs på den här värden.",
-    "searchTruncated": "Delvisa resultat. Sökningen täcker de sista {{lines}} raderna i varje ruta och högst {{panes}} rutor.",
-    "closeSearchResults": "Stäng sökresultaten",
-    "retry": "Försöka igen",
-    "noHosts": "Inga SSH-värdar tillgängliga",
-    "noHostsHint": "Aktivera alternativet Tmux Monitor på en SSH-värd (Värdhanteraren, fliken Tmux Monitor) för att övervaka dess tmux-sessioner.",
-    "tmuxInstallHint": "Installera det på värden med:",
-    "attachTooltip": "Öppna en terminal till {{host}}",
-    "attachTooltipPane": "Öppna en terminal till {{host}}, tmux-session {{session}}",
-    "timeJustNow": "just nu",
-    "timeMinutes": "för {{count}}minuter sedan",
-    "timeHours": "för {{count}}timmar sedan",
-    "timeDays": "för {{count}}dagar sedan",
-    "allHosts": "Alla värdar",
-    "singleHost": "Enskild värd",
-    "hostScope": "Övervakningsomfattning",
-    "filterHosts": "Filtrera värdar efter namn eller adress",
-    "selectHost": "Välj värd",
-    "toggleHost": "Expandera eller komprimera {{host}}",
-    "noMatchingHosts": "Inga matchande värdar",
-    "toggleSession": "Expandera eller komprimera {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/th_TH.json b/plugins/tmux-monitor/locales/translated/th_TH.json
deleted file mode 100644
index 86d9c98e8..000000000
--- a/plugins/tmux-monitor/locales/translated/th_TH.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "เปิดใช้งาน Tmux Monitor",
-    "enableTmuxMonitorDesc": "แสดงโฮสต์นี้ใน Tmux Monitor และเพิ่มการดำเนินการ tmux ของโฮสต์นี้ลงในแถบด้านข้าง",
-    "tabTmuxMonitor": "มอนิเตอร์ Tmux",
-    "docsLink": "ดูเอกสาร"
-  },
-  "nav": {
-    "tmuxMonitor": "มอนิเตอร์ Tmux"
-  },
-  "dashboard": {
-    "tmuxMonitor": "มอนิเตอร์ Tmux",
-    "tmuxMonitorDesc": "ตรวจสอบเซสชัน tmux บนโฮสต์ต่างๆ ของคุณ"
-  },
-  "permissions": {
-    "use": {
-      "title": "ใช้ Tmux Monitor",
-      "description": "เรียกดูและควบคุมเซสชัน หน้าต่าง และบานหน้าต่างของ tmux บนโฮสต์ที่เปิดใช้งานมอนิเตอร์ไว้"
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "เปิดใช้งาน Tmux Monitor",
-        "description": "เฝ้าดูและเชื่อมต่อกับเซสชัน tmux ที่กำลังทำงานอยู่บนโฮสต์นี้"
-      },
-      "mouseEnabled": {
-        "label": "เปิดใช้งานการรองรับเมาส์ tmux",
-        "description": "เปิดใช้งานการรองรับเมาส์สำหรับเซสชัน tmux เมื่อเชื่อมต่อหรือสร้างเซสชัน การตั้งค่าเซสชันอื่นๆ และการตั้งค่า tmux ทั่วไปจะไม่มีการเปลี่ยนแปลง"
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "มอนิเตอร์ Tmux",
-    "failedToLoadHosts": "ไม่สามารถโหลดโฮสต์ได้",
-    "failedToLoad": "ไม่สามารถโหลดเซสชัน tmux ได้",
-    "tmuxUnavailable": "tmux ไม่ได้ติดตั้งอยู่ในโฮสต์นี้",
-    "noSessions": "ไม่มีเซสชัน tmux บนโฮสต์นี้",
-    "noHostSelected": "ไม่ได้เลือกโฮสต์",
-    "attached": "ที่แนบมา",
-    "detached": "แยกออก",
-    "attach": "แนบ",
-    "editTags": "แก้ไขแท็ก",
-    "tagsHint": "แท็กที่คั่นด้วยเครื่องหมายจุลภาค (เช่น YOLO, lab, training)",
-    "tagsSaved": "แท็กถูกบันทึกแล้ว",
-    "tagsSaveFailed": "ไม่สามารถบันทึกแท็กได้",
-    "searchPlaceholder": "ผลการค้นหาข้ามเซสชัน...",
-    "searchResults": "{{count}} ตรงกัน",
-    "searchFailed": "การค้นหาล้มเหลว",
-    "selectPaneHint": "เลือกบานหน้าต่างเพื่อดูตัวอย่างผลลัพธ์",
-    "closePreview": "ปิดการแสดงตัวอย่าง",
-    "newSession": "เซสชั่นใหม่",
-    "newSessionHint": "ชื่อเซสชัน (ตัวอักษร ตัวเลข _ @ % + = -)",
-    "newSessionPlaceholder": "เซสชั่นของฉัน",
-    "create": "สร้าง",
-    "sessionCreated": "เซสชัน \"{{name}}\" ถูกสร้างขึ้น",
-    "sessionCreateFailed": "ไม่สามารถสร้างเซสชันได้",
-    "splitRight": "แยกขวา",
-    "splitDown": "แยกออก",
-    "splitFailed": "ไม่สามารถแบ่งหน้าต่างได้",
-    "newWindow": "หน้าต่างใหม่",
-    "windowCreateFailed": "ไม่สามารถสร้างหน้าต่างได้",
-    "attachSessionTooltip": "แนบกับ {{session}}",
-    "refresh": "รีเฟรช",
-    "refreshFailed": "ไม่สามารถรีเฟรชเซสชันได้",
-    "collapseAll": "ยุบทั้งหมด",
-    "expandAll": "ขยายทั้งหมด",
-    "moreActions": "การดำเนินการเพิ่มเติม",
-    "sessionStats": "สถิติเซสชั่น",
-    "renameSessionTitle": "เปลี่ยนชื่อเซสชัน \"{{name}}\"",
-    "rename": "เปลี่ยนชื่อ",
-    "sessionRenamed": "เปลี่ยนชื่อเซสชันเป็น \"{{name}}\"",
-    "sessionRenameFailed": "ไม่สามารถเปลี่ยนชื่อเซสชันได้",
-    "editTagsTitle": "แก้ไขแท็กสำหรับ \"{{name}}\"",
-    "killPane": "หน้าต่างสังหาร",
-    "resizeTree": "ลากเพื่อปรับขนาด ดับเบิ้ลคลิกเพื่อรีเซ็ต",
-    "reattach": "เชื่อมต่อใหม่ (แก้ไขภาพที่แสดงผลผิดเพี้ยน)",
-    "killWindow": "หน้าต่างสังหาร",
-    "killWindowTitle": "ปิดหน้าต่าง {{index}} ของ \"{{session}}\"?",
-    "killWindowBody": "หน้าต่างและกระบวนการทั้งหมดในหน้าต่างนี้จะถูกยุติ การปิดหน้าต่างสุดท้ายจะเป็นการสิ้นสุดเซสชัน",
-    "windowKillFailed": "ไม่สามารถปิดหน้าต่างได้",
-    "statusActivity": "กิจกรรม",
-    "statusWindows": "วินโดวส์",
-    "statusPanes": "บานหน้าต่าง",
-    "statusTags": "แท็ก",
-    "killPaneTitle": "แผงปิดการทำงาน {{id}}?",
-    "killPaneBody": "กระบวนการที่กำลังทำงานอยู่ในบานหน้าต่างนี้จะถูกยุติ การยุติบานหน้าต่างสุดท้ายจะปิดหน้าต่างนั้นลง",
-    "paneKillFailed": "ไม่สามารถปิดหน้าต่างได้",
-    "killSessionTitle": "เซสชั่นสังหาร \"{{name}}\"?",
-    "killSessionBody": "หน้าต่างและกระบวนการทำงานทั้งหมดในเซสชันนี้จะถูกปิดลง การดำเนินการนี้ไม่สามารถย้อนกลับได้",
-    "kill": "ฆ่า",
-    "sessionKilled": "เซสชั่น \"{{name}}\" ถูกฆ่า",
-    "sessionKillFailed": "ไม่สามารถยุติเซสชันได้",
-    "hostUnreachable": "ไม่สามารถเชื่อมต่อกับโฮสต์ได้ โปรดตรวจสอบว่าโฮสต์ออนไลน์และสามารถเข้าถึงได้",
-    "noServer": "ไม่มีเซิร์ฟเวอร์ tmux ทำงานอยู่บนโฮสต์นี้",
-    "searchTruncated": "ผลลัพธ์บางส่วน การค้นหาครอบคลุมบรรทัดสุดท้าย {{lines}} บรรทัดของแต่ละบานหน้าต่าง และอย่างมากที่สุด {{panes}} บานหน้าต่าง",
-    "closeSearchResults": "ปิดผลการค้นหา",
-    "retry": "ลองใหม่อีกครั้ง",
-    "noHosts": "ไม่มีโฮสต์ SSH ให้บริการ",
-    "noHostsHint": "เปิดใช้งานตัวเลือก Tmux Monitor บนโฮสต์ SSH (ตัวจัดการโฮสต์ แท็บ Tmux Monitor) เพื่อตรวจสอบเซสชัน tmux ของโฮสต์นั้น",
-    "tmuxInstallHint": "ติดตั้งบนเครื่องโฮสต์ด้วยคำสั่ง:",
-    "attachTooltip": "เปิดเทอร์มินัลไปที่ {{host}}",
-    "attachTooltipPane": "เปิดเทอร์มินัลไปที่ {{host}}, เซสชัน tmux {{session}}",
-    "timeJustNow": "เมื่อสักครู่นี้เอง",
-    "timeMinutes": "{{count}}นาทีที่แล้ว",
-    "timeHours": "{{count}}ชั่วโมงที่แล้ว",
-    "timeDays": "{{count}}วันก่อน",
-    "allHosts": "โฮสต์ทั้งหมด",
-    "singleHost": "โฮสต์เดี่ยว",
-    "hostScope": "ขอบเขตการตรวจสอบ",
-    "filterHosts": "กรองโฮสต์ตามชื่อหรือที่อยู่",
-    "selectHost": "เลือกโฮสต์",
-    "toggleHost": "ขยายหรือยุบ {{host}}",
-    "noMatchingHosts": "ไม่พบโฮสต์ที่ตรงกัน",
-    "toggleSession": "ขยายหรือยุบ {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/tr_TR.json b/plugins/tmux-monitor/locales/translated/tr_TR.json
deleted file mode 100644
index 4c392b2fd..000000000
--- a/plugins/tmux-monitor/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Tmux İzleyiciyi Etkinleştir",
-    "enableTmuxMonitorDesc": "Bu ana bilgisayarı Tmux İzleyicide göster ve tmux eylemlerini kenar çubuğuna ekle",
-    "tabTmuxMonitor": "Tmux İzleyici",
-    "docsLink": "Dokümanları görüntüle"
-  },
-  "nav": {
-    "tmuxMonitor": "Tmux İzleyicisi"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Tmux İzleyici",
-    "tmuxMonitorDesc": "Ana makinelerinizdeki tmux oturumlarını izle"
-  },
-  "permissions": {
-    "use": {
-      "title": "Tmux Monitor'ü kullanın.",
-      "description": "İzleme özelliği etkinleştirilmiş sunucularda tmux oturumlarını, pencerelerini ve bölmelerini inceleyin ve kontrol edin."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Tmux İzleyiciyi Etkinleştir",
-        "description": "Bu sunucuda çalışan tmux oturumlarını izleyin ve bunlara bağlanın."
-      },
-      "mouseEnabled": {
-        "label": "Tmux fare desteğini etkinleştirin",
-        "description": "Bir oturum eklerken veya oluştururken tmux oturumuna fare desteği uygulayın. Diğer oturumlar ve genel tmux ayarları değişmeden kalır."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Tmux İzleyici",
-    "failedToLoadHosts": "Sunucular yüklenemedi",
-    "failedToLoad": "Tmux oturumları yüklenemedi",
-    "tmuxUnavailable": "Bu sunucuda tmux yüklü değil",
-    "noSessions": "Bu sunucuda tmux oturumu yok",
-    "noHostSelected": "Sunucu seçilmedi",
-    "attached": "Bağlı",
-    "detached": "Bağlantısız",
-    "attach": "Bağlan",
-    "editTags": "Etiketleri düzenle",
-    "tagsHint": "Virgülle ayrılmış etiketler (örn. YOLO, lab, training)",
-    "tagsSaved": "Etiketler kaydedildi",
-    "tagsSaveFailed": "Etiketler kaydedilemedi",
-    "searchPlaceholder": "Oturumlar arasında çıktı ara...",
-    "searchResults": "{{count}} eşleşme",
-    "searchFailed": "Arama başarısız",
-    "selectPaneHint": "Çıktısını önizlemek için bir bölme seçin",
-    "closePreview": "Önizlemeyi kapat",
-    "newSession": "Yeni oturum",
-    "newSessionHint": "Oturum adı (harfler, rakamlar, _ @ % + = -)",
-    "newSessionPlaceholder": "my-session",
-    "create": "Oluştur",
-    "sessionCreated": "Oturum \"{{name}}\" oluşturuldu",
-    "sessionCreateFailed": "Oturum oluşturulamadı",
-    "splitRight": "Sağa böl",
-    "splitDown": "Aşağı böl",
-    "splitFailed": "Bölme başarısız",
-    "newWindow": "Yeni pencere",
-    "windowCreateFailed": "Pencere oluşturulamadı",
-    "attachSessionTooltip": "{{session}} oturumuna bağlan",
-    "refresh": "Yenile",
-    "refreshFailed": "Yenileme başarısız",
-    "collapseAll": "Tümünü daralt",
-    "expandAll": "Tümünü genişlet",
-    "moreActions": "Diğer işlemler",
-    "sessionStats": "Oturum istatistikleri",
-    "renameSessionTitle": "Oturumu yeniden adlandır \"{{name}}\"",
-    "rename": "Yeniden adlandır",
-    "sessionRenamed": "Oturum \"{{name}}\" olarak yeniden adlandırıldı",
-    "sessionRenameFailed": "Oturum yeniden adlandırılamadı",
-    "editTagsTitle": "\"{{name}}\" için etiketleri düzenle",
-    "killPane": "Paneyi sonlandır",
-    "resizeTree": "Boyutunu değiştirmek için sürükleyin, sıfırlamak için çift tıklayın.",
-    "reattach": "Yeniden bağlan (bozuk görünümü düzeltir)",
-    "killWindow": "Pencereyi sonlandır",
-    "killWindowTitle": "\"{{session}}\" oturumundaki {{index}} numaralı pencere sonlandırılsın mı?",
-    "killWindowBody": "Bu penceredeki tüm paneler ve işlemler sonlandırılacak. Son pencereyi sonlandırmak oturumu sona erdirir.",
-    "windowKillFailed": "Pencere sonlandırılamadı",
-    "statusActivity": "Etkinlik",
-    "statusWindows": "Pencereler",
-    "statusPanes": "Paneler",
-    "statusTags": "Etiketler",
-    "killPaneTitle": "{{id}} numaralı pane sonlandırılsın mı?",
-    "killPaneBody": "Bu panede çalışan işlem sonlandırılacak. Son paneyi sonlandırmak penceresini kapatır.",
-    "paneKillFailed": "Pane sonlandırılamadı",
-    "killSessionTitle": "\"{{name}}\" oturumu sonlandırılsın mı?",
-    "killSessionBody": "Bu oturumdaki tüm pencereler ve çalışan işlemler sonlandırılacak. Bu işlem geri alınamaz.",
-    "kill": "Sonlandır",
-    "sessionKilled": "\"{{name}}\" oturumu sonlandırıldı",
-    "sessionKillFailed": "Oturum sonlandırılamadı",
-    "hostUnreachable": "Ana bilgisayara bağlanılamadı. Çevrimiçi ve erişilebilir olduğunu kontrol edin.",
-    "noServer": "Bu ana bilgisayarda tmux sunucusu çalışmıyor.",
-    "searchTruncated": "Kısmi sonuçlar. Arama, her bölmenin son {{lines}} satırını ve en fazla {{panes}} bölmeyi kapsar.",
-    "closeSearchResults": "Arama sonuçlarını kapat",
-    "retry": "Yeniden dene",
-    "noHosts": "Kullanılabilir SSH ana bilgisayarı yok",
-    "noHostsHint": "SSH sunucusunda (Sunucu Yöneticisi, Tmux İzleme sekmesi) Tmux İzleme seçeneğini etkinleştirerek tmux oturumlarını izleyebilirsiniz.",
-    "tmuxInstallHint": "Ana bilgisayara şu komutla yükleyin:",
-    "attachTooltip": "{{host}} için bir terminal aç",
-    "attachTooltipPane": "{{host}}, tmux session {{session}} için bir terminal açın.",
-    "timeJustNow": "az önce",
-    "timeMinutes": "{{count}} dakika önce",
-    "timeHours": "{{count}} saat önce",
-    "timeDays": "{{count}} gün önce",
-    "allHosts": "Tüm sunucular",
-    "singleHost": "Tek ev sahibi",
-    "hostScope": "İzleme kapsamı",
-    "filterHosts": "Sunucuları ada veya adrese göre filtrele",
-    "selectHost": "Sunucu seçin",
-    "toggleHost": "Genişlet veya daralt {{host}}",
-    "noMatchingHosts": "Eşleşen sunucu bulunamadı.",
-    "toggleSession": "Genişlet veya daralt {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/uk_UA.json b/plugins/tmux-monitor/locales/translated/uk_UA.json
deleted file mode 100644
index cdc334c6a..000000000
--- a/plugins/tmux-monitor/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Увімкнути монітор Tmux",
-    "enableTmuxMonitorDesc": "Показати цей хост у моніторі Tmux та додати його дії tmux до бічної панелі",
-    "tabTmuxMonitor": "Монітор Tmux",
-    "docsLink": "Переглянути документи"
-  },
-  "nav": {
-    "tmuxMonitor": "Монітор Tmux"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Монітор Tmux",
-    "tmuxMonitorDesc": "Моніторинг сесій tmux на ваших хостах"
-  },
-  "permissions": {
-    "use": {
-      "title": "Використовуйте монітор Tmux",
-      "description": "Переглядайте та керуйте сеансами tmux, вікнами та панелями на хостах з увімкненим монітором."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Увімкнути монітор Tmux",
-        "description": "Переглядати та приєднуватися до сеансів tmux, що працюють на цьому хості."
-      },
-      "mouseEnabled": {
-        "label": "Увімкнути підтримку миші tmux",
-        "description": "Застосовувати підтримку миші до сеансу tmux під час підключення або створення сеансу. Інші сеанси та глобальні налаштування tmux залишаються незмінними."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Монітор Tmux",
-    "failedToLoadHosts": "Не вдалося завантажити хости",
-    "failedToLoad": "Не вдалося завантажити сеанси tmux",
-    "tmuxUnavailable": "tmux не встановлено на цьому хості",
-    "noSessions": "На цьому хості немає сеансів tmux",
-    "noHostSelected": "Хост не вибрано",
-    "attached": "Додано",
-    "detached": "Окремий",
-    "attach": "Прикріпити",
-    "editTags": "Редагувати теги",
-    "tagsHint": "Теги, розділені комами (наприклад, YOLO, лабораторія, навчання)",
-    "tagsSaved": "Теги збережено",
-    "tagsSaveFailed": "Не вдалося зберегти теги",
-    "searchPlaceholder": "Пошук результатів у сеансах...",
-    "searchResults": "{{count}} збігів",
-    "searchFailed": "Пошук не вдався",
-    "selectPaneHint": "Виберіть панель для попереднього перегляду її виводу",
-    "closePreview": "Закрити попередній перегляд",
-    "newSession": "Новий сеанс",
-    "newSessionHint": "Назва сеансу (літери, цифри, _ @ % + = -)",
-    "newSessionPlaceholder": "моя сесія",
-    "create": "Створити",
-    "sessionCreated": "Сеанс «{{name}}» створено",
-    "sessionCreateFailed": "Не вдалося створити сеанс",
-    "splitRight": "Розділити праворуч",
-    "splitDown": "Розділити",
-    "splitFailed": "Не вдалося розділити панель",
-    "newWindow": "Нове вікно",
-    "windowCreateFailed": "Не вдалося створити вікно",
-    "attachSessionTooltip": "Прикріпити до {{session}}",
-    "refresh": "Оновити",
-    "refreshFailed": "Не вдалося оновити сеанси",
-    "collapseAll": "Згорнути все",
-    "expandAll": "Розгорнути все",
-    "moreActions": "Більше дій",
-    "sessionStats": "Статистика сеансу",
-    "renameSessionTitle": "Перейменувати сеанс \"{{name}}\"",
-    "rename": "Перейменувати",
-    "sessionRenamed": "Сеанс перейменовано на «{{name}}»",
-    "sessionRenameFailed": "Не вдалося перейменувати сеанс",
-    "editTagsTitle": "Редагувати теги для \"{{name}}\"",
-    "killPane": "Панель «Вийти»",
-    "resizeTree": "Перетягніть, щоб змінити розмір, двічі клацніть, щоб скинути налаштування",
-    "reattach": "Повторно прикріпити (виправляє спотворене зображення)",
-    "killWindow": "Вікно для знищення",
-    "killWindowTitle": "Закрити вікно {{index}} з \"{{session}}\"?",
-    "killWindowBody": "Кожна панель і процес у цьому вікні будуть завершені. Закриття останнього вікна завершує сеанс.",
-    "windowKillFailed": "Не вдалося завершити роботу вікна",
-    "statusActivity": "Активність",
-    "statusWindows": "Вікна",
-    "statusPanes": "панелі",
-    "statusTags": "Теги",
-    "killPaneTitle": "Закрити панель {{id}}?",
-    "killPaneBody": "Процес, що виконується в цій панелі, буде завершено. Закриття останньої панелі закриває її вікно.",
-    "paneKillFailed": "Не вдалося завершити роботу панелі",
-    "killSessionTitle": "Закінчити сеанс \"{{name}}\"?",
-    "killSessionBody": "Усі вікна та запущені процеси в цьому сеансі будуть завершені. Цю дію неможливо скасувати.",
-    "kill": "Вбити",
-    "sessionKilled": "Сеанс «{{name}}» завершено",
-    "sessionKillFailed": "Не вдалося завершити сеанс",
-    "hostUnreachable": "Не вдалося підключитися до хоста. Перевірте, чи він онлайн і доступний.",
-    "noServer": "На цьому хості не працює жоден сервер tmux.",
-    "searchTruncated": "Часткові результати. Пошук охоплює останні {{lines}} рядків кожної панелі та щонайбільше {{panes}} панелей.",
-    "closeSearchResults": "Закрити результати пошуку",
-    "retry": "Повторити спробу",
-    "noHosts": "Немає доступних SSH-хостів",
-    "noHostsHint": "Увімкніть опцію Tmux Monitor на SSH-хості (Host Manager, вкладка Tmux Monitor), щоб контролювати його сеанси tmux.",
-    "tmuxInstallHint": "Встановіть його на хост за допомогою:",
-    "attachTooltip": "Відкрийте термінал для {{host}}",
-    "attachTooltipPane": "Відкрийте термінал для {{host}}, сеанс tmux {{session}}",
-    "timeJustNow": "щойно",
-    "timeMinutes": "{{count}}хв тому",
-    "timeHours": "{{count}}год тому",
-    "timeDays": "{{count}}днів тому",
-    "allHosts": "Усі хости",
-    "singleHost": "Один хост",
-    "hostScope": "Область моніторингу",
-    "filterHosts": "Фільтрувати хости за назвою або адресою",
-    "selectHost": "Виберіть хоста",
-    "toggleHost": "Розгорнути або згорнути {{host}}",
-    "noMatchingHosts": "Немає відповідних хостів",
-    "toggleSession": "Розгорнути або згорнути {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/vi_VN.json b/plugins/tmux-monitor/locales/translated/vi_VN.json
deleted file mode 100644
index 9c1f49dc1..000000000
--- a/plugins/tmux-monitor/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "Bật Tmux Monitor",
-    "enableTmuxMonitorDesc": "Hiển thị máy chủ này trong Tmux Monitor và thêm các hành động tmux của nó vào thanh bên",
-    "tabTmuxMonitor": "Giám sát Tmux",
-    "docsLink": "Xem tài liệu"
-  },
-  "nav": {
-    "tmuxMonitor": "Giám sát Tmux"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Giám sát Tmux",
-    "tmuxMonitorDesc": "Giám sát phiên tmux trên các máy chủ"
-  },
-  "permissions": {
-    "use": {
-      "title": "Sử dụng Tmux Monitor",
-      "description": "Duyệt và điều khiển các phiên, cửa sổ và khung tmux trên các máy chủ có bật tính năng giám sát."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Bật Tmux Monitor",
-        "description": "Theo dõi và kết nối với các phiên tmux đang chạy trên máy chủ này."
-      },
-      "mouseEnabled": {
-        "label": "Bật hỗ trợ chuột tmux",
-        "description": "Áp dụng hỗ trợ chuột cho phiên tmux khi gắn kết hoặc tạo phiên. Các phiên khác và cài đặt tmux toàn cục không thay đổi."
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Giám sát Tmux",
-    "failedToLoadHosts": "Tải danh sách máy chủ thất bại",
-    "failedToLoad": "Tải phiên tmux thất bại",
-    "tmuxUnavailable": "tmux chưa được cài đặt trên máy chủ này",
-    "noSessions": "Không có phiên tmux nào trên máy chủ này",
-    "noHostSelected": "Chưa chọn máy chủ",
-    "attached": "Đã đính kèm",
-    "detached": "Đã tách rời",
-    "attach": "Đính kèm",
-    "editTags": "Sửa nhãn",
-    "tagsHint": "Nhãn phân cách bằng dấu phẩy (ví dụ: YOLO, lab, training)",
-    "tagsSaved": "Nhãn đã lưu",
-    "tagsSaveFailed": "Lưu nhãn thất bại",
-    "searchPlaceholder": "Tìm kiếm đầu ra qua các phiên...",
-    "searchResults": "{{count}} kết quả khớp",
-    "searchFailed": "Tìm kiếm thất bại",
-    "selectPaneHint": "Chọn một pane để xem trước đầu ra",
-    "closePreview": "Đóng xem trước",
-    "newSession": "Phiên mới",
-    "newSessionHint": "Tên phiên (chữ cái, chữ số, _ @ % + = -)",
-    "newSessionPlaceholder": "my-session",
-    "create": "Tạo",
-    "sessionCreated": "Đã tạo phiên \"{{name}}\"",
-    "sessionCreateFailed": "Tạo phiên thất bại",
-    "splitRight": "Chia sang phải",
-    "splitDown": "Chia xuống dưới",
-    "splitFailed": "Chia pane thất bại",
-    "newWindow": "Cửa sổ mới",
-    "windowCreateFailed": "Tạo cửa sổ thất bại",
-    "attachSessionTooltip": "Đính kèm vào {{session}}",
-    "refresh": "Làm mới",
-    "refreshFailed": "Làm mới phiên thất bại",
-    "collapseAll": "Thu gọn tất cả",
-    "expandAll": "Mở rộng tất cả",
-    "moreActions": "Thao tác khác",
-    "sessionStats": "Thống kê phiên",
-    "renameSessionTitle": "Đổi tên phiên \"{{name}}\"",
-    "rename": "Đổi tên",
-    "sessionRenamed": "Đã đổi tên phiên thành \"{{name}}\"",
-    "sessionRenameFailed": "Đổi tên phiên thất bại",
-    "editTagsTitle": "Sửa nhãn cho \"{{name}}\"",
-    "killPane": "Hủy pane",
-    "resizeTree": "Kéo để thay đổi kích thước, nhấp đúp để đặt lại về kích thước ban đầu.",
-    "reattach": "Gắn lại (sửa hiển thị bị rối)",
-    "killWindow": "Hủy cửa sổ",
-    "killWindowTitle": "Hủy cửa sổ {{index}} của \"{{session}}\"?",
-    "killWindowBody": "Mọi pane và tiến trình trong cửa sổ này sẽ bị kết thúc. Hủy cửa sổ cuối cùng sẽ kết thúc phiên.",
-    "windowKillFailed": "Không thể hủy cửa sổ",
-    "statusActivity": "Hoạt động",
-    "statusWindows": "Cửa sổ",
-    "statusPanes": "Pane",
-    "statusTags": "Thẻ",
-    "killPaneTitle": "Hủy pane {{id}}?",
-    "killPaneBody": "Tiến trình đang chạy trong pane này sẽ bị kết thúc. Hủy pane cuối cùng sẽ đóng cửa sổ của nó.",
-    "paneKillFailed": "Không thể hủy pane",
-    "killSessionTitle": "Hủy phiên \"{{name}}\"?",
-    "killSessionBody": "Tất cả cửa sổ và tiến trình đang chạy trong phiên này sẽ bị kết thúc. Hành động này không thể hoàn tác.",
-    "kill": "Hủy",
-    "sessionKilled": "Phiên \"{{name}}\" đã bị hủy",
-    "sessionKillFailed": "Không thể hủy phiên",
-    "hostUnreachable": "Không thể kết nối đến máy chủ. Kiểm tra xem máy chủ có trực tuyến và có thể truy cập được không.",
-    "noServer": "Không có máy chủ tmux nào đang chạy trên máy chủ này.",
-    "searchTruncated": "Kết quả một phần. Tìm kiếm bao gồm {{lines}} dòng cuối cùng của mỗi khung và tối đa {{panes}} khung.",
-    "closeSearchResults": "Đóng kết quả tìm kiếm",
-    "retry": "Thử lại",
-    "noHosts": "Không có máy chủ SSH nào",
-    "noHostsHint": "Kích hoạt tùy chọn Tmux Monitor trên máy chủ SSH (Trình quản lý máy chủ, tab Tmux Monitor) để giám sát các phiên tmux của nó.",
-    "tmuxInstallHint": "Cài đặt nó trên máy chủ bằng lệnh:",
-    "attachTooltip": "Mở terminal đến {{host}}",
-    "attachTooltipPane": "Mở cửa sổ dòng lệnh tại {{host}}, phiên tmux {{session}}",
-    "timeJustNow": "vừa xong",
-    "timeMinutes": "{{count}} phút trước",
-    "timeHours": "{{count}} giờ trước",
-    "timeDays": "{{count}} ngày trước",
-    "allHosts": "Tất cả máy chủ",
-    "singleHost": "Máy chủ đơn lẻ",
-    "hostScope": "Phạm vi giám sát",
-    "filterHosts": "Lọc máy chủ theo tên hoặc địa chỉ",
-    "selectHost": "Chọn máy chủ",
-    "toggleHost": "Mở rộng hoặc thu gọn {{host}}",
-    "noMatchingHosts": "Không tìm thấy máy chủ phù hợp",
-    "toggleSession": "Mở rộng hoặc thu gọn {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/zh_CN.json b/plugins/tmux-monitor/locales/translated/zh_CN.json
deleted file mode 100644
index 755b70491..000000000
--- a/plugins/tmux-monitor/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "启用 Tmux 监控",
-    "enableTmuxMonitorDesc": "在 Tmux 监控中显示此主机，并将其 tmux 操作添加到侧边栏",
-    "tabTmuxMonitor": "Tmux 监视器",
-    "docsLink": "查看文档"
-  },
-  "nav": {
-    "tmuxMonitor": "Tmux 监视器"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Tmux 监视器",
-    "tmuxMonitorDesc": "监控主机上的 tmux 会话"
-  },
-  "permissions": {
-    "use": {
-      "title": "使用 Tmux Monitor",
-      "description": "浏览和控制已启用监视器的主机上的 tmux 会话、窗口和窗格。"
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "启用 Tmux 监控",
-        "description": "监视并附加到在此主机上运行的 tmux 会话。"
-      },
-      "mouseEnabled": {
-        "label": "启用 tmux 鼠标支持",
-        "description": "在附加或创建 tmux 会话时，为该会话启用鼠标支持。其他会话和全局 tmux 设置保持不变。"
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Tmux 监视器",
-    "failedToLoadHosts": "加载主机失败",
-    "failedToLoad": "加载tmux会话失败",
-    "tmuxUnavailable": "此主机未安装tmux",
-    "noSessions": "此主机上没有tmux会话",
-    "noHostSelected": "未选择主机",
-    "attached": "已连接",
-    "detached": "已断开",
-    "attach": "连接",
-    "editTags": "编辑标签",
-    "tagsHint": "逗号分隔的标签（例如：YOLO, lab, training）",
-    "tagsSaved": "标签已保存",
-    "tagsSaveFailed": "标签保存失败",
-    "searchPlaceholder": "跨会话搜索输出...",
-    "searchResults": "{{count}} 个匹配",
-    "searchFailed": "搜索失败",
-    "selectPaneHint": "选择一个窗格以预览其输出",
-    "closePreview": "关闭预览",
-    "newSession": "新建会话",
-    "newSessionHint": "会话名称（字母、数字、_ @ % + = -）",
-    "newSessionPlaceholder": "my-session",
-    "create": "创建",
-    "sessionCreated": "会话 \"{{name}}\" 已创建",
-    "sessionCreateFailed": "创建会话失败",
-    "splitRight": "向右拆分",
-    "splitDown": "向下拆分",
-    "splitFailed": "拆分窗格失败",
-    "newWindow": "新建窗口",
-    "windowCreateFailed": "创建窗口失败",
-    "attachSessionTooltip": "附加到 {{session}}",
-    "refresh": "刷新",
-    "refreshFailed": "刷新会话失败",
-    "collapseAll": "全部折叠",
-    "expandAll": "全部展开",
-    "moreActions": "更多操作",
-    "sessionStats": "会话统计",
-    "renameSessionTitle": "重命名会话 \"{{name}}\"",
-    "rename": "重命名",
-    "sessionRenamed": "会话已重命名为 \"{{name}}\"",
-    "sessionRenameFailed": "重命名会话失败",
-    "editTagsTitle": "编辑 \"{{name}}\" 的标签",
-    "killPane": "终止窗格",
-    "resizeTree": "拖动调整大小，双击重置",
-    "reattach": "重新附加（修复显示错乱）",
-    "killWindow": "终止窗口",
-    "killWindowTitle": "终止会话 \"{{session}}\" 的窗口 {{index}}？",
-    "killWindowBody": "该窗口中的所有窗格和进程都将被终止。终止最后一个窗口将结束会话。",
-    "windowKillFailed": "终止窗口失败",
-    "statusActivity": "活动",
-    "statusWindows": "窗口",
-    "statusPanes": "窗格",
-    "statusTags": "标签",
-    "killPaneTitle": "终止窗格 {{id}}？",
-    "killPaneBody": "该窗格中运行的进程将被终止。终止最后一个窗格将关闭其窗口。",
-    "paneKillFailed": "终止窗格失败",
-    "killSessionTitle": "终止会话 \"{{name}}\"？",
-    "killSessionBody": "该会话中的所有窗口和运行中的进程都将被终止。此操作无法撤销。",
-    "kill": "终止",
-    "sessionKilled": "会话 \"{{name}}\" 已终止",
-    "sessionKillFailed": "终止会话失败",
-    "hostUnreachable": "无法连接到主机。请检查主机是否在线且可访问。",
-    "noServer": "此主机上未运行 tmux 服务器。",
-    "searchTruncated": "部分结果。搜索范围涵盖每个窗格的最后 {{lines}} 行，最多涵盖 {{panes}} 个窗格。",
-    "closeSearchResults": "关闭搜索结果",
-    "retry": "重试",
-    "noHosts": "没有可用的 SSH 主机",
-    "noHostsHint": "在 SSH 主机上启用 Tmux 监视器选项（主机管理器，Tmux 监视器选项卡）以监视其 tmux 会话。",
-    "tmuxInstallHint": "使用以下命令在主机上安装：",
-    "attachTooltip": "打开到 {{host}} 的终端",
-    "attachTooltipPane": "打开终端到 {{host}}，tmux 会话 {{session}}",
-    "timeJustNow": "刚刚",
-    "timeMinutes": "{{count}} 分钟前",
-    "timeHours": "{{count}} 小时前",
-    "timeDays": "{{count}} 天前",
-    "allHosts": "所有主机",
-    "singleHost": "单主机",
-    "hostScope": "监控范围",
-    "filterHosts": "按名称或地址筛选主机",
-    "selectHost": "选择主机",
-    "toggleHost": "展开或收起 {{host}}",
-    "noMatchingHosts": "没有匹配的主机",
-    "toggleSession": "展开或收起 {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/locales/translated/zh_TW.json b/plugins/tmux-monitor/locales/translated/zh_TW.json
deleted file mode 100644
index 8a49c98b0..000000000
--- a/plugins/tmux-monitor/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,117 +0,0 @@
-{
-  "hosts": {
-    "enableTmuxMonitor": "啟用 Tmux 監控器",
-    "enableTmuxMonitorDesc": "在 Tmux 監控器中顯示此主機，並將其 tmux 操作新增至側邊欄",
-    "tabTmuxMonitor": "Tmux 監視器",
-    "docsLink": "檢視文件"
-  },
-  "nav": {
-    "tmuxMonitor": "Tmux 監控器"
-  },
-  "dashboard": {
-    "tmuxMonitor": "Tmux 監視器",
-    "tmuxMonitorDesc": "監控您所有主機的 tmux 會話"
-  },
-  "permissions": {
-    "use": {
-      "title": "使用 Tmux Monitor",
-      "description": "瀏覽和控制已啟用監視器的主機上的 tmux 會話、視窗和窗格。"
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "啟用 Tmux 監控器",
-        "description": "監控並附加到在此主機上執行的 tmux 會話。"
-      },
-      "mouseEnabled": {
-        "label": "啟用 tmux 滑鼠支持",
-        "description": "在附加或建立 tmux 會話時，為該會話啟用滑鼠支援。其他會話和全域 tmux 設定保持不變。"
-      }
-    }
-  },
-  "tmuxMonitor": {
-    "title": "Tmux 監視器",
-    "failedToLoadHosts": "載入主機失敗",
-    "failedToLoad": "載入 tmux 工作階段失敗",
-    "tmuxUnavailable": "此主機未安裝 tmux",
-    "noSessions": "此主機上沒有 tmux 工作階段",
-    "noHostSelected": "未選取主機",
-    "attached": "已附加",
-    "detached": "已分離",
-    "attach": "附加",
-    "editTags": "編輯標籤",
-    "tagsHint": "以逗號分隔的標籤（例如：YOLO, lab, training）",
-    "tagsSaved": "標籤已儲存",
-    "tagsSaveFailed": "標籤儲存失敗",
-    "searchPlaceholder": "在所有會話中搜尋輸出...",
-    "searchResults": "{{count}} 個符合項",
-    "searchFailed": "搜尋失敗",
-    "selectPaneHint": "選取一個窗格以預覽其輸出",
-    "closePreview": "關閉預覽",
-    "newSession": "新會話",
-    "newSessionHint": "會話名稱（字母、數字、_ @ % + = -）",
-    "newSessionPlaceholder": "my-session",
-    "create": "建立",
-    "sessionCreated": "會話「{{name}}」已建立",
-    "sessionCreateFailed": "建立會話失敗",
-    "splitRight": "向右分割",
-    "splitDown": "向下分割",
-    "splitFailed": "分割窗格失敗",
-    "newWindow": "新視窗",
-    "windowCreateFailed": "建立視窗失敗",
-    "attachSessionTooltip": "附加至 {{session}}",
-    "refresh": "重新整理",
-    "refreshFailed": "重新整理會話失敗",
-    "collapseAll": "全部收合",
-    "expandAll": "全部展開",
-    "moreActions": "更多動作",
-    "sessionStats": "會話統計",
-    "renameSessionTitle": "重新命名會話「{{name}}」",
-    "rename": "重新命名",
-    "sessionRenamed": "會話已重新命名為「{{name}}」",
-    "sessionRenameFailed": "重新命名會話失敗",
-    "editTagsTitle": "編輯「{{name}}」的標籤",
-    "killPane": "終止窗格",
-    "resizeTree": "拖曳調整大小，雙擊重置",
-    "reattach": "重新附加（修復亂碼畫面）",
-    "killWindow": "終止視窗",
-    "killWindowTitle": "終止「{{session}}」的視窗 {{index}}？",
-    "killWindowBody": "此視窗中的所有窗格和程序將被終止。終止最後一個視窗會結束該工作階段。",
-    "windowKillFailed": "無法終止視窗",
-    "statusActivity": "活動",
-    "statusWindows": "視窗",
-    "statusPanes": "窗格",
-    "statusTags": "標籤",
-    "killPaneTitle": "終止窗格 {{id}}？",
-    "killPaneBody": "在此窗格中執行的程序將被終止。終止最後一個窗格會關閉其視窗。",
-    "paneKillFailed": "無法終止窗格",
-    "killSessionTitle": "終止工作階段「{{name}}」？",
-    "killSessionBody": "此工作階段中的所有視窗和執行中的程序將被終止。此操作無法復原。",
-    "kill": "終止",
-    "sessionKilled": "工作階段「{{name}}」已終止",
-    "sessionKillFailed": "無法終止工作階段",
-    "hostUnreachable": "無法連線至主機。請檢查主機是否在線上且可連線。",
-    "noServer": "此主機上沒有正在執行的 tmux 伺服器。",
-    "searchTruncated": "部分結果。搜尋範圍涵蓋每個窗格的最後 {{lines}} 行，最多涵蓋 {{panes}} 個窗格。",
-    "closeSearchResults": "關閉搜尋結果",
-    "retry": "重試",
-    "noHosts": "沒有可用的 SSH 主機",
-    "noHostsHint": "在 SSH 主機上啟用 Tmux 監視器選項（主機管理器，Tmux 監視器標籤）以監視其 tmux 會話。",
-    "tmuxInstallHint": "在主機上使用以下指令安裝：",
-    "attachTooltip": "開啟連至 {{host}} 的終端機",
-    "attachTooltipPane": "開啟終端機到 {{host}}，tmux 會話 {{session}}",
-    "timeJustNow": "剛剛",
-    "timeMinutes": "{{count}} 分鐘前",
-    "timeHours": "{{count}} 小時前",
-    "timeDays": "{{count}} 天前",
-    "allHosts": "所有主機",
-    "singleHost": "單主機",
-    "hostScope": "監控範圍",
-    "filterHosts": "依名稱或位址篩選主機",
-    "selectHost": "選擇主機",
-    "toggleHost": "展開或收起 {{host}}",
-    "noMatchingHosts": "沒有符合的主機",
-    "toggleSession": "展開或收起 {{session}}"
-  }
-}
diff --git a/plugins/tmux-monitor/manifest.json b/plugins/tmux-monitor/manifest.json
deleted file mode 100644
index 210f51fcf..000000000
--- a/plugins/tmux-monitor/manifest.json
+++ /dev/null
@@ -1,73 +0,0 @@
-{
-  "id": "tmux-monitor",
-  "name": "Tmux Monitor",
-  "version": "1.0.0",
-  "description": "Browse and control tmux sessions, windows and panes across your hosts.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Terminal",
-  "icon": "Layers",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "hosts:read",
-    "credentials:use",
-    "ssh:connect",
-    "db:own",
-    "network:serve",
-    "ui:surface"
-  ],
-  "provides": [
-    {
-      "service": "tmux.sessions",
-      "version": "1.0.0",
-      "permission": "tmux-monitor.use"
-    }
-  ],
-  "contributes": {
-    "tabs": [
-      {
-        "id": "tmux_monitor",
-        "titleKey": "nav.tmuxMonitor",
-        "icon": "Layers",
-        "openFrom": ["host-context-menu", "palette"]
-      }
-    ],
-    "permissions": [
-      {
-        "name": "use",
-        "titleKey": "permissions.use.title",
-        "descriptionKey": "permissions.use.description",
-        "defaultRoles": ["admin", "user"]
-      }
-    ],
-    "settings": {
-      "host": {
-        "enableKey": "enableTmuxMonitor",
-        "enableLabelKey": "settings.host.enable.label",
-        "enableDescriptionKey": "settings.host.enable.description",
-        "fields": [
-          {
-            "key": "mouseEnabled",
-            "type": "boolean",
-            "labelKey": "settings.host.mouseEnabled.label",
-            "descriptionKey": "settings.host.mouseEnabled.description",
-            "default": true
-          }
-        ]
-      }
-    },
-    "hostCapability": {
-      "key": "enableTmuxMonitor",
-      "labelKey": "hosts.tabTmuxMonitor",
-      "editorTab": "tmux-monitor"
-    }
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"]
-}
diff --git a/plugins/tmux-monitor/migrations/mysql/0001_adopt_tmux_session_tags.sql b/plugins/tmux-monitor/migrations/mysql/0001_adopt_tmux_session_tags.sql
deleted file mode 100644
index 264266a87..000000000
--- a/plugins/tmux-monitor/migrations/mysql/0001_adopt_tmux_session_tags.sql
+++ /dev/null
@@ -1,14 +0,0 @@
--- tmux-monitor 0001: adopt_tmux_session_tags
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `tmux_session_tags` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `host_id` int NOT NULL,
-  `session_name` text NOT NULL,
-  `tag` text NOT NULL,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `tmux_session_tags` TO `p_tmux_monitor_session_tags`;
diff --git a/plugins/tmux-monitor/migrations/postgres/0001_adopt_tmux_session_tags.sql b/plugins/tmux-monitor/migrations/postgres/0001_adopt_tmux_session_tags.sql
deleted file mode 100644
index c155463a1..000000000
--- a/plugins/tmux-monitor/migrations/postgres/0001_adopt_tmux_session_tags.sql
+++ /dev/null
@@ -1,14 +0,0 @@
--- tmux-monitor 0001: adopt_tmux_session_tags
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "tmux_session_tags" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "host_id" integer NOT NULL,
-  "session_name" text NOT NULL,
-  "tag" text NOT NULL,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "tmux_session_tags" RENAME TO "p_tmux_monitor_session_tags";
diff --git a/plugins/tmux-monitor/migrations/snapshot.json b/plugins/tmux-monitor/migrations/snapshot.json
deleted file mode 100644
index fb927c2f2..000000000
--- a/plugins/tmux-monitor/migrations/snapshot.json
+++ /dev/null
@@ -1,38 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "session_tags": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "hostId": {
-          "type": "refHost",
-          "notNull": true
-        },
-        "sessionName": {
-          "type": "text",
-          "notNull": true
-        },
-        "tag": {
-          "type": "text",
-          "notNull": true
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [],
-      "adopts": "tmux_session_tags"
-    }
-  }
-}
diff --git a/plugins/tmux-monitor/migrations/sqlite/0001_adopt_tmux_session_tags.sql b/plugins/tmux-monitor/migrations/sqlite/0001_adopt_tmux_session_tags.sql
deleted file mode 100644
index b2d328abf..000000000
--- a/plugins/tmux-monitor/migrations/sqlite/0001_adopt_tmux_session_tags.sql
+++ /dev/null
@@ -1,14 +0,0 @@
--- tmux-monitor 0001: adopt_tmux_session_tags
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "tmux_session_tags" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "host_id" integer NOT NULL,
-  "session_name" text NOT NULL,
-  "tag" text NOT NULL,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "tmux_session_tags" RENAME TO "p_tmux_monitor_session_tags";
diff --git a/plugins/tmux-monitor/package.json b/plugins/tmux-monitor/package.json
deleted file mode 100644
index a64c022b8..000000000
--- a/plugins/tmux-monitor/package.json
+++ /dev/null
@@ -1,33 +0,0 @@
-{
-  "name": "@termix-plugin/tmux-monitor",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "lucide-react": "^1.33.0"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "react": "^19.2.8",
-    "ssh2": "^1.17.0"
-  }
-}
diff --git a/plugins/tmux-monitor/src/backend/index.ts b/plugins/tmux-monitor/src/backend/index.ts
deleted file mode 100644
index 905f530a0..000000000
--- a/plugins/tmux-monitor/src/backend/index.ts
+++ /dev/null
@@ -1,23 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { sessionTags } from "./tables.js";
-import { createSessionTagRepository } from "./repository.js";
-import { createTmuxMonitorRoutes } from "./routes.js";
-import { createTmuxSessionsService } from "./service.js";
-
-export type { TmuxDetection, TmuxSessionsV1 } from "./service.js";
-
-export async function activate(ctx: PluginContext) {
-  const table = await ctx.db.define(sessionTags);
-  const tags = createSessionTagRepository(ctx.db, table);
-
-  ctx.http.router<Router>().use(createTmuxMonitorRoutes(ctx, tags));
-
-  ctx.services.provide("tmux.sessions", createTmuxSessionsService(ctx));
-
-  ctx.log.info("Tmux Monitor routes mounted at /plugin-api/tmux-monitor");
-}
-
-export async function deactivate() {
-  // Everything above was registered through ctx and is disposed by core.
-}
diff --git a/plugins/tmux-monitor/src/backend/monitor-helpers.ts b/plugins/tmux-monitor/src/backend/monitor-helpers.ts
deleted file mode 100644
index e2197d502..000000000
--- a/plugins/tmux-monitor/src/backend/monitor-helpers.ts
+++ /dev/null
@@ -1,250 +0,0 @@
-// Pure parsing/aggregation helpers for the tmux monitor module.
-// Kept free of SSH/Express dependencies so they can be unit-tested.
-
-// Field separator used in tmux -F format strings. Session names, pane titles
-// and paths may contain "|", and tmux sanitizes control characters (and, under
-// non-UTF-8 locales, multibyte characters) in format output to "_", so a
-// printable ASCII token is the only separator that survives everywhere.
-export const SEP = "<<TMX>>";
-
-export interface TmuxPane {
-  id: string;
-  index: number;
-  pid: number;
-  active: boolean;
-  width: number;
-  height: number;
-  command: string;
-  path: string;
-  title: string;
-}
-
-export interface TmuxWindow {
-  index: number;
-  name: string;
-  active: boolean;
-  panes: TmuxPane[];
-}
-
-export interface TmuxSessionSummary {
-  name: string;
-  created: number;
-  lastActivity: number;
-  attachedClients: number;
-}
-
-export interface RawPane extends TmuxPane {
-  sessionName: string;
-  windowIndex: number;
-}
-
-export interface ProcessInfo {
-  pid: number;
-  ppid: number;
-  cpu: number;
-  mem: number;
-  rss: number;
-  comm: string;
-}
-
-export interface PaneMetrics {
-  paneId: string;
-  sessionName: string;
-  pid: number;
-  processCount: number;
-  cpuPercent: number;
-  memRssKb: number;
-  gpuMemMb: number;
-  topCommand: string | null;
-}
-
-export function parseSessions(output: string): TmuxSessionSummary[] {
-  return output
-    .split("\n")
-    .filter(Boolean)
-    .map((line) => {
-      const [name, created, activity, attached] = line.split(SEP);
-      return {
-        name,
-        created: parseInt(created, 10) || 0,
-        lastActivity: parseInt(activity, 10) || 0,
-        attachedClients: parseInt(attached, 10) || 0,
-      };
-    });
-}
-
-export function parseWindows(output: string): Map<string, TmuxWindow[]> {
-  const bySession = new Map<string, TmuxWindow[]>();
-  for (const line of output.split("\n").filter(Boolean)) {
-    const [session, index, active, name] = line.split(SEP);
-    if (!bySession.has(session)) bySession.set(session, []);
-    bySession.get(session)!.push({
-      index: parseInt(index, 10) || 0,
-      name: name || "",
-      active: active === "1",
-      panes: [],
-    });
-  }
-  return bySession;
-}
-
-export function parsePanes(output: string): RawPane[] {
-  return output
-    .split("\n")
-    .filter(Boolean)
-    .map((line) => {
-      const [
-        sessionName,
-        windowIndex,
-        id,
-        index,
-        pid,
-        active,
-        width,
-        height,
-        command,
-        path,
-        title,
-      ] = line.split(SEP);
-      return {
-        sessionName,
-        windowIndex: parseInt(windowIndex, 10) || 0,
-        id,
-        index: parseInt(index, 10) || 0,
-        pid: parseInt(pid, 10) || 0,
-        active: active === "1",
-        width: parseInt(width, 10) || 0,
-        height: parseInt(height, 10) || 0,
-        command: command || "",
-        path: path || "",
-        title: title || "",
-      };
-    });
-}
-
-export function parsePsOutput(output: string): ProcessInfo[] {
-  const processes: ProcessInfo[] = [];
-  for (const line of output.split("\n")) {
-    const parts = line.trim().split(/\s+/);
-    if (parts.length < 6) continue;
-    const pid = parseInt(parts[0], 10);
-    const ppid = parseInt(parts[1], 10);
-    if (isNaN(pid) || isNaN(ppid)) continue;
-    processes.push({
-      pid,
-      ppid,
-      cpu: parseFloat(parts[2]) || 0,
-      mem: parseFloat(parts[3]) || 0,
-      rss: parseInt(parts[4], 10) || 0,
-      comm: parts.slice(5).join(" "),
-    });
-  }
-  return processes;
-}
-
-export function parseGpuOutput(output: string): Map<number, number> {
-  const gpuByPid = new Map<number, number>();
-  for (const line of output.split("\n").filter(Boolean)) {
-    const [pid, mem] = line.split(",").map((s) => s.trim());
-    const pidNum = parseInt(pid, 10);
-    const memNum = parseInt(mem, 10);
-    if (!isNaN(pidNum) && !isNaN(memNum)) {
-      gpuByPid.set(pidNum, (gpuByPid.get(pidNum) || 0) + memNum);
-    }
-  }
-  return gpuByPid;
-}
-
-/**
- * Map each pane's shell pid to its descendant process tree and aggregate
- * CPU/RAM/GPU usage per pane.
- */
-export function buildPaneMetrics(
-  panes: RawPane[],
-  processes: ProcessInfo[],
-  gpuByPid: Map<number, number>,
-): PaneMetrics[] {
-  const byPid = new Map<number, ProcessInfo>();
-  const childrenOf = new Map<number, number[]>();
-  for (const p of processes) {
-    byPid.set(p.pid, p);
-    if (!childrenOf.has(p.ppid)) childrenOf.set(p.ppid, []);
-    childrenOf.get(p.ppid)!.push(p.pid);
-  }
-
-  return panes.map((pane) => {
-    // Walk the descendant tree starting at (and including) the pane's shell
-    const treePids: number[] = [];
-    const queue = [pane.pid];
-    const seen = new Set<number>();
-    for (let cursor = 0; cursor < queue.length; cursor++) {
-      const pid = queue[cursor];
-      if (seen.has(pid)) continue;
-      seen.add(pid);
-      if (byPid.has(pid)) treePids.push(pid);
-      for (const child of childrenOf.get(pid) || []) queue.push(child);
-    }
-
-    let cpuPercent = 0;
-    let memRssKb = 0;
-    let gpuMemMb = 0;
-    let topCommand: string | null = null;
-    let topCpu = -1;
-    for (const pid of treePids) {
-      const p = byPid.get(pid)!;
-      cpuPercent += p.cpu;
-      memRssKb += p.rss;
-      gpuMemMb += gpuByPid.get(pid) || 0;
-      // The pane shell itself is rarely the interesting process
-      if (p.cpu > topCpu && pid !== pane.pid) {
-        topCpu = p.cpu;
-        topCommand = p.comm;
-      }
-    }
-    if (topCommand === null && treePids.length > 0) {
-      topCommand = byPid.get(treePids[0])!.comm;
-    }
-
-    return {
-      paneId: pane.id,
-      sessionName: pane.sessionName,
-      pid: pane.pid,
-      processCount: treePids.length,
-      cpuPercent: Math.round(cpuPercent * 10) / 10,
-      memRssKb,
-      gpuMemMb,
-      topCommand,
-    };
-  });
-}
-
-/**
- * Group panes into their windows (mutates the window objects' pane arrays).
- */
-export function attachPanesToWindows(
-  windows: Map<string, TmuxWindow[]>,
-  panes: RawPane[],
-): void {
-  const windowsBySessionAndIndex = new Map<string, Map<number, TmuxWindow>>();
-  for (const [sessionName, sessionWindows] of windows) {
-    const byIndex = new Map<number, TmuxWindow>();
-    for (const window of sessionWindows) {
-      if (!byIndex.has(window.index)) byIndex.set(window.index, window);
-    }
-    windowsBySessionAndIndex.set(sessionName, byIndex);
-  }
-
-  for (const pane of panes) {
-    const window = windowsBySessionAndIndex
-      .get(pane.sessionName)
-      ?.get(pane.windowIndex);
-    if (window) {
-      const { sessionName: _s, windowIndex: _w, ...paneFields } = pane;
-      window.panes.push(paneFields);
-    }
-  }
-}
-
-export function shellEscape(s: string): string {
-  return "'" + s.replace(/'/g, "'\\''") + "'";
-}
diff --git a/plugins/tmux-monitor/src/backend/repository.ts b/plugins/tmux-monitor/src/backend/repository.ts
deleted file mode 100644
index d610dc93e..000000000
--- a/plugins/tmux-monitor/src/backend/repository.ts
+++ /dev/null
@@ -1,95 +0,0 @@
-import { and, eq } from "drizzle-orm";
-import type { PluginDatabase } from "@termix/plugin-sdk/backend";
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// The table comes from ctx.db.define, which the SDK hands back untyped, and
-// the drizzle handle is the server's own. Typed at this module's edge instead.
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export type SessionTagRepository = ReturnType<
-  typeof createSessionTagRepository
->;
-
-/**
- * A user's tags on a tmux session, per host. Sessions are shared on the host
- * (any user monitoring it sees the same tmux sessions), but tags are per
- * user.
- */
-export function createSessionTagRepository(db: PluginDatabase, table: Table) {
-  const client = () => db.client<Drizzle>();
-
-  return {
-    async listByUserAndHost(
-      userId: string,
-      hostId: number,
-    ): Promise<Map<string, string[]>> {
-      const drizzle = await client();
-      const rows = await drizzle
-        .select()
-        .from(table)
-        .where(and(eq(table.userId, userId), eq(table.hostId, hostId)));
-
-      const bySession = new Map<string, string[]>();
-      for (const row of rows as { sessionName: string; tag: string }[]) {
-        const tags = bySession.get(row.sessionName) ?? [];
-        tags.push(row.tag);
-        bySession.set(row.sessionName, tags);
-      }
-      return bySession;
-    },
-
-    async renameSessionForHost(
-      hostId: number,
-      sessionName: string,
-      newSessionName: string,
-    ): Promise<void> {
-      const drizzle = await client();
-      await drizzle
-        .update(table)
-        .set({ sessionName: newSessionName })
-        .where(
-          and(eq(table.hostId, hostId), eq(table.sessionName, sessionName)),
-        );
-      await db.persist();
-    },
-
-    async deleteSessionForHost(
-      hostId: number,
-      sessionName: string,
-    ): Promise<void> {
-      const drizzle = await client();
-      await drizzle
-        .delete(table)
-        .where(
-          and(eq(table.hostId, hostId), eq(table.sessionName, sessionName)),
-        );
-      await db.persist();
-    },
-
-    async replaceForUserHostSession(
-      userId: string,
-      hostId: number,
-      sessionName: string,
-      tags: string[],
-    ): Promise<void> {
-      const drizzle = await client();
-      await drizzle
-        .delete(table)
-        .where(
-          and(
-            eq(table.userId, userId),
-            eq(table.hostId, hostId),
-            eq(table.sessionName, sessionName),
-          ),
-        );
-      if (tags.length > 0) {
-        await drizzle
-          .insert(table)
-          .values(tags.map((tag) => ({ userId, hostId, sessionName, tag })));
-      }
-      await db.persist();
-    },
-  };
-}
diff --git a/plugins/tmux-monitor/src/backend/routes.ts b/plugins/tmux-monitor/src/backend/routes.ts
deleted file mode 100644
index 7bcffee09..000000000
--- a/plugins/tmux-monitor/src/backend/routes.ts
+++ /dev/null
@@ -1,872 +0,0 @@
-import express, { type Router } from "express";
-import type { Client } from "ssh2";
-import type {
-  PluginContext,
-  PluginHostSummary,
-} from "@termix/plugin-sdk/backend";
-import { execCommand, tmuxCommand } from "./tmux-commands.js";
-import {
-  SEP,
-  parseSessions,
-  parseWindows,
-  parsePanes,
-  parsePsOutput,
-  parseGpuOutput,
-  buildPaneMetrics,
-  attachPanesToWindows,
-  shellEscape,
-  type RawPane,
-  type TmuxSessionSummary,
-  type TmuxWindow,
-  type PaneMetrics,
-} from "./monitor-helpers.js";
-import type { SessionTagRepository } from "./repository.js";
-
-const PANE_ID_RE = /^%\d+$/;
-// tmux session names cannot contain ":" or "."; keep to a conservative
-// printable subset so the name is safe as a tmux target everywhere.
-const SESSION_NAME_RE = /^[A-Za-z0-9_@%+=-]{1,64}$/;
-const MAX_SEARCH_PANES = 100;
-const MAX_MATCHES_PER_PANE = 50;
-const SEARCH_HISTORY_LINES = 2000;
-const SEARCH_CONCURRENCY = 4;
-const POOL = "tmux-monitor";
-
-interface TmuxSessionOverview extends TmuxSessionSummary {
-  windows: TmuxWindow[];
-  tags: string[];
-}
-
-function toErrorMessage(err: unknown): string {
-  return err instanceof Error ? err.message : String(err);
-}
-
-type TmuxErrorCode =
-  "TMUX_NOT_INSTALLED" | "TMUX_NO_SERVER" | "HOST_UNREACHABLE" | "TMUX_ERROR";
-
-function classifyTmuxError(err: unknown): TmuxErrorCode {
-  const msg = toErrorMessage(err);
-  if (/command not found|exited with code 127/i.test(msg))
-    return "TMUX_NOT_INSTALLED";
-  if (/no server running|lost server/i.test(msg)) return "TMUX_NO_SERVER";
-  if (
-    /timeout|timed out|econnrefused|ehostunreach|enotfound|enetunreach|econnreset|authentication|handshake|keepalive/i.test(
-      msg,
-    )
-  )
-    return "HOST_UNREACHABLE";
-  return "TMUX_ERROR";
-}
-
-function sendTmuxError(
-  ctx: PluginContext,
-  res: express.Response,
-  err: unknown,
-  context: string,
-  hostId: number,
-): void {
-  const code = classifyTmuxError(err);
-  const status = code === "TMUX_ERROR" ? 500 : 503;
-  const error =
-    code === "TMUX_NOT_INSTALLED"
-      ? "tmux is not installed on this host"
-      : code === "TMUX_NO_SERVER"
-        ? "No tmux server is running on this host"
-        : code === "HOST_UNREACHABLE"
-          ? "Could not connect to the host"
-          : toErrorMessage(err);
-  ctx.log.error(`tmux ${context} failed for host ${hostId}`, err as Error);
-  res.status(status).json({ error, code });
-}
-
-/**
- * Resolves the host for the acting user and checks the monitor is enabled for
- * it. Sends the error response and returns null when access is denied.
- */
-async function requireHost(
-  ctx: PluginContext,
-  req: express.Request,
-  res: express.Response,
-): Promise<PluginHostSummary | null> {
-  const hostId = parseInt(String(req.params.hostId), 10);
-  if (isNaN(hostId)) {
-    res.status(400).json({ error: "Invalid host ID" });
-    return null;
-  }
-
-  const host = await ctx.hosts.get(hostId);
-  if (!host) {
-    res.status(403).json({ error: "Host not found or access denied" });
-    return null;
-  }
-
-  // The monitor is opt-in per host: hiding the UI is not enough, the API
-  // must refuse too.
-  const enabled = await ctx.settings.getHost<boolean>(
-    hostId,
-    "enableTmuxMonitor",
-  );
-  if (!enabled) {
-    res
-      .status(403)
-      .json({ error: "Tmux Monitor is not enabled for this host" });
-    return null;
-  }
-  return host;
-}
-
-async function withHostConnection<T>(
-  ctx: PluginContext,
-  host: PluginHostSummary,
-  fn: (client: Client) => Promise<T>,
-): Promise<T> {
-  return ctx.ssh.withConnection<T, Client>(
-    host.id,
-    { pool: POOL, purpose: "tmux", overrides: { readyTimeout: 60000 } },
-    fn,
-  );
-}
-
-async function tmuxAvailable(conn: Client): Promise<boolean> {
-  try {
-    await execCommand(conn, tmuxCommand("-V"));
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-async function runTmuxList(conn: Client, command: string): Promise<string> {
-  try {
-    return await execCommand(conn, command);
-  } catch {
-    return ""; // tmux server not running -- no sessions
-  }
-}
-
-function listSessionsCmd(): string {
-  return tmuxCommand(
-    `list-sessions -F "#{session_name}${SEP}#{session_created}${SEP}#{session_activity}${SEP}#{session_attached}" 2>/dev/null`,
-  );
-}
-
-function listWindowsCmd(): string {
-  return tmuxCommand(
-    `list-windows -a -F "#{session_name}${SEP}#{window_index}${SEP}#{window_active}${SEP}#{window_name}" 2>/dev/null`,
-  );
-}
-
-function listPanesCmd(): string {
-  return tmuxCommand(
-    `list-panes -a -F "#{session_name}${SEP}#{window_index}${SEP}#{pane_id}${SEP}#{pane_index}${SEP}#{pane_pid}${SEP}#{pane_active}${SEP}#{pane_width}${SEP}#{pane_height}${SEP}#{pane_current_command}${SEP}#{pane_current_path}${SEP}#{pane_title}" 2>/dev/null`,
-  );
-}
-
-async function listPanesRaw(conn: Client): Promise<RawPane[]> {
-  return parsePanes(await runTmuxList(conn, listPanesCmd()));
-}
-
-async function collectPaneMetrics(
-  conn: Client,
-  panes: RawPane[],
-): Promise<PaneMetrics[]> {
-  let psOutput = "";
-  try {
-    psOutput = await execCommand(
-      conn,
-      "ps -eo pid=,ppid=,pcpu=,pmem=,rss=,comm= 2>/dev/null",
-    );
-  } catch {
-    return [];
-  }
-
-  let gpuOutput = "";
-  try {
-    gpuOutput = await execCommand(
-      conn,
-      "command -v nvidia-smi >/dev/null 2>&1 && nvidia-smi --query-compute-apps=pid,used_gpu_memory --format=csv,noheader,nounits 2>/dev/null || true",
-    );
-  } catch {
-    // no GPU on host
-  }
-
-  return buildPaneMetrics(
-    panes,
-    parsePsOutput(psOutput),
-    parseGpuOutput(gpuOutput),
-  );
-}
-
-export function createTmuxMonitorRoutes(
-  ctx: PluginContext,
-  tags: SessionTagRepository,
-): Router {
-  const router = express.Router();
-  router.use(ctx.rbac.require("use") as never);
-
-  /**
-   * @openapi
-   * /plugin-api/tmux-monitor/{hostId}/overview:
-   *   get:
-   *     summary: Get a host's tmux sessions, windows and panes
-   *     tags:
-   *       - Tmux Monitor
-   *     parameters:
-   *       - in: path
-   *         name: hostId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: The tmux overview for this host.
-   *       403:
-   *         description: Host not found, not accessible, or the monitor is disabled for it.
-   */
-  router.get("/:hostId/overview", async (req, res) => {
-    const userId = ctx.currentActor();
-    const host = await requireHost(ctx, req, res);
-    if (!host || !userId) return;
-
-    try {
-      const result = await withHostConnection(ctx, host, async (conn) => {
-        if (!(await tmuxAvailable(conn))) {
-          return { available: false, sessions: [] as TmuxSessionOverview[] };
-        }
-        const [sessionsOut, windowsOut, panesOut] = await Promise.all([
-          runTmuxList(conn, listSessionsCmd()),
-          runTmuxList(conn, listWindowsCmd()),
-          runTmuxList(conn, listPanesCmd()),
-        ]);
-        const sessions = parseSessions(sessionsOut);
-        const windows = parseWindows(windowsOut);
-        attachPanesToWindows(windows, parsePanes(panesOut));
-
-        const sessionTags = await tags.listByUserAndHost(userId, host.id);
-        const full: TmuxSessionOverview[] = sessions.map((s) => ({
-          ...s,
-          windows: windows.get(s.name) || [],
-          tags: sessionTags.get(s.name) || [],
-        }));
-        return { available: true, sessions: full };
-      });
-      res.json(result);
-    } catch (err) {
-      sendTmuxError(ctx, res, err, "overview", host.id);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/tmux-monitor/{hostId}/focus:
-   *   post:
-   *     summary: Focus a pane
-   *     description: Selects the pane's window and pane on the server, so every attached client switches to it.
-   *     tags:
-   *       - Tmux Monitor
-   *     parameters:
-   *       - in: path
-   *         name: hostId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Focused.
-   */
-  router.post("/:hostId/focus", async (req, res) => {
-    const host = await requireHost(ctx, req, res);
-    if (!host) return;
-
-    const paneId = String((req.body as { paneId?: string })?.paneId || "");
-    if (!PANE_ID_RE.test(paneId)) {
-      return res.status(400).json({ error: "Invalid pane ID" });
-    }
-
-    try {
-      await withHostConnection(ctx, host, (conn) =>
-        execCommand(
-          conn,
-          tmuxCommand(
-            `select-window -t ${shellEscape(paneId)} \\; select-pane -t ${shellEscape(paneId)}`,
-          ),
-        ),
-      );
-      res.json({ ok: true });
-    } catch (err) {
-      sendTmuxError(ctx, res, err, "focus", host.id);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/tmux-monitor/{hostId}/sessions:
-   *   post:
-   *     summary: Create a detached tmux session
-   *     description: Starts the tmux server if none is running.
-   *     tags:
-   *       - Tmux Monitor
-   *     parameters:
-   *       - in: path
-   *         name: hostId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Session created.
-   *       409:
-   *         description: A session with this name already exists.
-   */
-  router.post("/:hostId/sessions", async (req, res) => {
-    const host = await requireHost(ctx, req, res);
-    if (!host) return;
-
-    const name = String((req.body as { name?: string })?.name || "").trim();
-    if (!SESSION_NAME_RE.test(name)) {
-      return res.status(400).json({ error: "Invalid session name" });
-    }
-
-    try {
-      await withHostConnection(ctx, host, (conn) =>
-        execCommand(
-          conn,
-          tmuxCommand(`new-session -d -s ${shellEscape(name)}`),
-        ),
-      );
-      ctx.log.info(`tmux session created: ${name} on host ${host.id}`);
-      res.json({ ok: true, name });
-    } catch (err) {
-      if (/duplicate session/i.test(toErrorMessage(err))) {
-        return res
-          .status(409)
-          .json({ error: "A session with this name already exists" });
-      }
-      sendTmuxError(ctx, res, err, "create session", host.id);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/tmux-monitor/{hostId}/windows:
-   *   post:
-   *     summary: Create a window in an existing session
-   *     tags:
-   *       - Tmux Monitor
-   *     parameters:
-   *       - in: path
-   *         name: hostId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Window created.
-   *       404:
-   *         description: Session not found.
-   */
-  router.post("/:hostId/windows", async (req, res) => {
-    const host = await requireHost(ctx, req, res);
-    if (!host) return;
-
-    const sessionName = String(
-      (req.body as { sessionName?: string })?.sessionName || "",
-    ).trim();
-    if (!sessionName || /[:.\n]/.test(sessionName)) {
-      return res.status(400).json({ error: "Invalid session name" });
-    }
-
-    try {
-      await withHostConnection(ctx, host, (conn) =>
-        execCommand(
-          conn,
-          tmuxCommand(`new-window -t ${shellEscape(`=${sessionName}`)}`),
-        ),
-      );
-      ctx.log.info(
-        `tmux window created in session ${sessionName} on host ${host.id}`,
-      );
-      res.json({ ok: true });
-    } catch (err) {
-      if (/can't find session|no such session/i.test(toErrorMessage(err))) {
-        return res.status(404).json({ error: "Session not found" });
-      }
-      sendTmuxError(ctx, res, err, "create window", host.id);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/tmux-monitor/{hostId}/rename:
-   *   post:
-   *     summary: Rename a session
-   *     description: Saved tags follow the session to its new name, for every user monitoring this host.
-   *     tags:
-   *       - Tmux Monitor
-   *     parameters:
-   *       - in: path
-   *         name: hostId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Session renamed.
-   *       404:
-   *         description: Session not found.
-   *       409:
-   *         description: A session with this name already exists.
-   */
-  router.post("/:hostId/rename", async (req, res) => {
-    const host = await requireHost(ctx, req, res);
-    if (!host) return;
-
-    const body = req.body as { sessionName?: string; newName?: string };
-    const sessionName = String(body?.sessionName || "").trim();
-    const newName = String(body?.newName || "").trim();
-    if (!sessionName || /[:.\n]/.test(sessionName)) {
-      return res.status(400).json({ error: "Invalid session name" });
-    }
-    if (!SESSION_NAME_RE.test(newName)) {
-      return res.status(400).json({ error: "Invalid new session name" });
-    }
-
-    try {
-      await withHostConnection(ctx, host, (conn) =>
-        execCommand(
-          conn,
-          tmuxCommand(
-            `rename-session -t ${shellEscape(`=${sessionName}`)} ${shellEscape(newName)}`,
-          ),
-        ),
-      );
-      await tags.renameSessionForHost(host.id, sessionName, newName);
-      ctx.log.info(
-        `tmux session renamed on host ${host.id}: ${sessionName} -> ${newName}`,
-      );
-      await ctx.audit.record({
-        action: "tmux_session_rename",
-        resourceType: "host",
-        resourceId: String(host.id),
-        resourceName: sessionName,
-        details: JSON.stringify({ newName }),
-        success: true,
-      });
-      res.json({ ok: true, name: newName });
-    } catch (err) {
-      if (/can't find session|no such session/i.test(toErrorMessage(err))) {
-        return res.status(404).json({ error: "Session not found" });
-      }
-      if (/duplicate session/i.test(toErrorMessage(err))) {
-        return res
-          .status(409)
-          .json({ error: "A session with this name already exists" });
-      }
-      sendTmuxError(ctx, res, err, "rename session", host.id);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/tmux-monitor/{hostId}/kill:
-   *   post:
-   *     summary: Kill a session and drop its saved tags
-   *     tags:
-   *       - Tmux Monitor
-   *     parameters:
-   *       - in: path
-   *         name: hostId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Session killed.
-   *       404:
-   *         description: Session not found.
-   */
-  router.post("/:hostId/kill", async (req, res) => {
-    const host = await requireHost(ctx, req, res);
-    if (!host) return;
-
-    const sessionName = String(
-      (req.body as { sessionName?: string })?.sessionName || "",
-    ).trim();
-    if (!sessionName || /[:.\n]/.test(sessionName)) {
-      return res.status(400).json({ error: "Invalid session name" });
-    }
-
-    try {
-      await withHostConnection(ctx, host, (conn) =>
-        execCommand(
-          conn,
-          tmuxCommand(`kill-session -t ${shellEscape(`=${sessionName}`)}`),
-        ),
-      );
-      await tags.deleteSessionForHost(host.id, sessionName);
-      ctx.log.info(`tmux session killed on host ${host.id}: ${sessionName}`);
-      await ctx.audit.record({
-        action: "tmux_session_kill",
-        resourceType: "host",
-        resourceId: String(host.id),
-        resourceName: sessionName,
-        success: true,
-      });
-      res.json({ ok: true });
-    } catch (err) {
-      if (/can't find session|no such session/i.test(toErrorMessage(err))) {
-        return res.status(404).json({ error: "Session not found" });
-      }
-      sendTmuxError(ctx, res, err, "kill session", host.id);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/tmux-monitor/{hostId}/kill-window:
-   *   post:
-   *     summary: Kill a window and every pane in it
-   *     description: Killing the last window of a session ends the session (tmux semantics).
-   *     tags:
-   *       - Tmux Monitor
-   *     parameters:
-   *       - in: path
-   *         name: hostId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Window killed.
-   *       404:
-   *         description: Window not found.
-   */
-  router.post("/:hostId/kill-window", async (req, res) => {
-    const host = await requireHost(ctx, req, res);
-    if (!host) return;
-
-    const body = req.body as { sessionName?: string; windowIndex?: number };
-    const sessionName = String(body?.sessionName || "").trim();
-    const windowIndex = Number(body?.windowIndex);
-    if (!sessionName || /[:.\n]/.test(sessionName)) {
-      return res.status(400).json({ error: "Invalid session name" });
-    }
-    if (!Number.isInteger(windowIndex) || windowIndex < 0) {
-      return res.status(400).json({ error: "Invalid window index" });
-    }
-
-    try {
-      await withHostConnection(ctx, host, (conn) =>
-        execCommand(
-          conn,
-          tmuxCommand(
-            `kill-window -t ${shellEscape(`=${sessionName}:${windowIndex}`)}`,
-          ),
-        ),
-      );
-      ctx.log.info(
-        `tmux window killed on host ${host.id}: ${sessionName}:${windowIndex}`,
-      );
-      await ctx.audit.record({
-        action: "tmux_window_kill",
-        resourceType: "host",
-        resourceId: String(host.id),
-        resourceName: sessionName,
-        details: JSON.stringify({ windowIndex }),
-        success: true,
-      });
-      res.json({ ok: true });
-    } catch (err) {
-      if (
-        /can't find window|no such window|can't find session/i.test(
-          toErrorMessage(err),
-        )
-      ) {
-        return res.status(404).json({ error: "Window not found" });
-      }
-      sendTmuxError(ctx, res, err, "kill window", host.id);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/tmux-monitor/{hostId}/kill-pane:
-   *   post:
-   *     summary: Kill a single pane
-   *     description: Killing the last pane of a window closes the window, and the last window of a session ends the session (tmux semantics).
-   *     tags:
-   *       - Tmux Monitor
-   *     parameters:
-   *       - in: path
-   *         name: hostId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Pane killed.
-   *       404:
-   *         description: Pane not found.
-   */
-  router.post("/:hostId/kill-pane", async (req, res) => {
-    const host = await requireHost(ctx, req, res);
-    if (!host) return;
-
-    const paneId = String((req.body as { paneId?: string })?.paneId || "");
-    if (!PANE_ID_RE.test(paneId)) {
-      return res.status(400).json({ error: "Invalid pane ID" });
-    }
-
-    try {
-      await withHostConnection(ctx, host, (conn) =>
-        execCommand(conn, tmuxCommand(`kill-pane -t ${shellEscape(paneId)}`)),
-      );
-      ctx.log.info(`tmux pane killed on host ${host.id}: ${paneId}`);
-      await ctx.audit.record({
-        action: "tmux_pane_kill",
-        resourceType: "host",
-        resourceId: String(host.id),
-        resourceName: paneId,
-        success: true,
-      });
-      res.json({ ok: true });
-    } catch (err) {
-      if (/can't find pane|no such pane/i.test(toErrorMessage(err))) {
-        return res.status(404).json({ error: "Pane not found" });
-      }
-      sendTmuxError(ctx, res, err, "kill pane", host.id);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/tmux-monitor/{hostId}/split:
-   *   post:
-   *     summary: Split the window containing a pane
-   *     description: "\"h\" places the new pane to the right, \"v\" below, matching tmux's own -h/-v semantics. The new pane starts in the source pane's working directory."
-   *     tags:
-   *       - Tmux Monitor
-   *     parameters:
-   *       - in: path
-   *         name: hostId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Pane split.
-   */
-  router.post("/:hostId/split", async (req, res) => {
-    const host = await requireHost(ctx, req, res);
-    if (!host) return;
-
-    const body = req.body as { paneId?: string; direction?: string };
-    const paneId = String(body?.paneId || "");
-    const direction = body?.direction === "v" ? "-v" : "-h";
-    if (!PANE_ID_RE.test(paneId)) {
-      return res.status(400).json({ error: "Invalid pane ID" });
-    }
-    if (body?.direction !== "h" && body?.direction !== "v") {
-      return res.status(400).json({ error: "Invalid split direction" });
-    }
-
-    try {
-      await withHostConnection(ctx, host, (conn) =>
-        execCommand(
-          conn,
-          tmuxCommand(
-            `split-window ${direction} -t ${shellEscape(paneId)} -c ${shellEscape("#{pane_current_path}")}`,
-          ),
-        ),
-      );
-      ctx.log.info(
-        `tmux pane split on host ${host.id}: ${paneId} (${body.direction})`,
-      );
-      res.json({ ok: true });
-    } catch (err) {
-      sendTmuxError(ctx, res, err, "split", host.id);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/tmux-monitor/{hostId}/search:
-   *   get:
-   *     summary: Search pane output across a host's tmux sessions
-   *     tags:
-   *       - Tmux Monitor
-   *     parameters:
-   *       - in: path
-   *         name: hostId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *       - in: query
-   *         name: q
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: Matching lines, capped per pane and across panes.
-   */
-  router.get("/:hostId/search", async (req, res) => {
-    const host = await requireHost(ctx, req, res);
-    if (!host) return;
-
-    const query = String(req.query.q || "").trim();
-    if (!query) {
-      return res.status(400).json({ error: "Missing search query" });
-    }
-
-    try {
-      const results = await withHostConnection(ctx, host, async (conn) => {
-        const allPanes = await listPanesRaw(conn);
-        const panes = allPanes.slice(0, MAX_SEARCH_PANES);
-        // Flips to true whenever a limit was hit, so the UI can tell the user
-        // the results are partial instead of silently truncating.
-        let truncated = allPanes.length > MAX_SEARCH_PANES;
-        const matches: Array<{
-          paneId: string;
-          sessionName: string;
-          windowIndex: number;
-          line: number;
-          text: string;
-        }> = [];
-
-        // Bounded concurrency; each search runs capture+grep remotely so only
-        // matching lines travel back over the wire.
-        for (let i = 0; i < panes.length; i += SEARCH_CONCURRENCY) {
-          const batch = panes.slice(i, i + SEARCH_CONCURRENCY);
-          await Promise.all(
-            batch.map(async (pane) => {
-              try {
-                const output = await execCommand(
-                  conn,
-                  tmuxCommand(
-                    `capture-pane -p -J -t ${shellEscape(pane.id)} -S -${SEARCH_HISTORY_LINES} 2>/dev/null | grep -n -i -F -- ${shellEscape(query)} | head -${MAX_MATCHES_PER_PANE}`,
-                  ),
-                );
-                const lines = output.split("\n").filter(Boolean);
-                if (lines.length >= MAX_MATCHES_PER_PANE) truncated = true;
-                for (const line of lines) {
-                  const sep = line.indexOf(":");
-                  if (sep === -1) continue;
-                  matches.push({
-                    paneId: pane.id,
-                    sessionName: pane.sessionName,
-                    windowIndex: pane.windowIndex,
-                    line: parseInt(line.slice(0, sep), 10) || 0,
-                    text: line.slice(sep + 1).slice(0, 500),
-                  });
-                }
-              } catch {
-                // grep exits non-zero when there are no matches -- not an error
-              }
-            }),
-          );
-        }
-        return { matches, truncated };
-      });
-      res.json({
-        query,
-        matches: results.matches,
-        truncated: results.truncated,
-        searchedLines: SEARCH_HISTORY_LINES,
-        maxPanes: MAX_SEARCH_PANES,
-      });
-    } catch (err) {
-      sendTmuxError(ctx, res, err, "search", host.id);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/tmux-monitor/{hostId}/metrics:
-   *   get:
-   *     summary: Per-pane CPU, memory and GPU usage
-   *     tags:
-   *       - Tmux Monitor
-   *     parameters:
-   *       - in: path
-   *         name: hostId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Metrics for every pane tmux reports.
-   */
-  router.get("/:hostId/metrics", async (req, res) => {
-    const host = await requireHost(ctx, req, res);
-    if (!host) return;
-
-    try {
-      const metrics = await withHostConnection(ctx, host, async (conn) => {
-        const panes = await listPanesRaw(conn);
-        if (panes.length === 0) return [];
-        return collectPaneMetrics(conn, panes);
-      });
-      res.json({ panes: metrics });
-    } catch (err) {
-      sendTmuxError(ctx, res, err, "metrics", host.id);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/tmux-monitor/{hostId}/tags:
-   *   put:
-   *     summary: Replace the acting user's tags on a session
-   *     tags:
-   *       - Tmux Monitor
-   *     parameters:
-   *       - in: path
-   *         name: hostId
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Tags saved.
-   */
-  router.put("/:hostId/tags", async (req, res) => {
-    const userId = ctx.currentActor();
-    const host = await requireHost(ctx, req, res);
-    if (!host || !userId) return;
-
-    const { sessionName, tags: rawTags } = req.body as {
-      sessionName?: string;
-      tags?: string[];
-    };
-    if (!sessionName || typeof sessionName !== "string") {
-      return res.status(400).json({ error: "Missing session name" });
-    }
-    if (!Array.isArray(rawTags) || rawTags.some((t) => typeof t !== "string")) {
-      return res
-        .status(400)
-        .json({ error: "Tags must be an array of strings" });
-    }
-    const cleanTags = [
-      ...new Set(rawTags.map((t) => t.trim().slice(0, 64)).filter(Boolean)),
-    ].slice(0, 20);
-
-    try {
-      await tags.replaceForUserHostSession(
-        userId,
-        host.id,
-        sessionName,
-        cleanTags,
-      );
-      res.json({ sessionName, tags: cleanTags });
-    } catch (err) {
-      ctx.log.error(
-        `Failed to save tmux session tags for host ${host.id}`,
-        err as Error,
-      );
-      res.status(500).json({ error: toErrorMessage(err) });
-    }
-  });
-
-  return router;
-}
diff --git a/plugins/tmux-monitor/src/backend/service.ts b/plugins/tmux-monitor/src/backend/service.ts
deleted file mode 100644
index afd7e1851..000000000
--- a/plugins/tmux-monitor/src/backend/service.ts
+++ /dev/null
@@ -1,57 +0,0 @@
-import type { Client, ClientChannel } from "ssh2";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import {
-  attachOrCreateTmuxSession,
-  detectTmux,
-  waitForTmuxSession,
-  type TmuxDetectionResult,
-} from "./tmux-commands.js";
-
-export type TmuxDetection = TmuxDetectionResult;
-
-/**
- * What the terminal (ssh-terminal's optional "tmux.sessions" consumer) asks
- * of this plugin. Clients and streams cross the service boundary as
- * `unknown`, since the SDK types services without an ssh2 dependency.
- */
-export interface TmuxSessionsV1 {
-  detect: (client: unknown) => Promise<TmuxDetection>;
-  attachOrCreate: (
-    stream: unknown,
-    name?: string,
-    newName?: string,
-    hostId?: number,
-  ) => Promise<void>;
-  waitForSession: (client: unknown, name: string) => Promise<string>;
-}
-
-export function createTmuxSessionsService(ctx: PluginContext): TmuxSessionsV1 {
-  return {
-    detect(client) {
-      return detectTmux(client as Client);
-    },
-
-    async attachOrCreate(stream, name, newName, hostId) {
-      const mouseEnabled =
-        hostId === undefined ||
-        (await ctx.settings.getHost<boolean>(hostId, "mouseEnabled")) !== false;
-      attachOrCreateTmuxSession(
-        stream as ClientChannel,
-        name,
-        newName,
-        mouseEnabled,
-      );
-    },
-
-    async waitForSession(client, name) {
-      const confirmed = await waitForTmuxSession(client as Client, name);
-      if (!confirmed) {
-        ctx.log.warn(
-          `Timed out waiting for a new tmux session to appear: ${name}`,
-        );
-        return name;
-      }
-      return confirmed;
-    },
-  };
-}
diff --git a/plugins/tmux-monitor/src/backend/tables.ts b/plugins/tmux-monitor/src/backend/tables.ts
deleted file mode 100644
index d0e385572..000000000
--- a/plugins/tmux-monitor/src/backend/tables.ts
+++ /dev/null
@@ -1,32 +0,0 @@
-import {
-  adoptLegacyTable,
-  defineTable,
-  id,
-  refHost,
-  refUser,
-  text,
-  timestamp,
-} from "@termix/plugin-sdk/db";
-
-/**
- * A user's tags on a tmux session, per host. Sessions are shared on the host
- * itself, but tags are per user: everyone who monitors the same host can tag
- * the same session differently.
- *
- * Adopted from core's tmux_session_tags, so the column names are the legacy
- * ones and the rename carries every existing row across. Core never indexed
- * it, so there is no legacy index to keep.
- */
-export const sessionTags = adoptLegacyTable(
-  "tmux_session_tags",
-  defineTable("session_tags", {
-    id: id(),
-    userId: refUser(),
-    hostId: refHost(),
-    sessionName: text().notNull(),
-    tag: text().notNull(),
-    createdAt: timestamp().notNull().defaultNow(),
-  }),
-);
-
-export const tables = [sessionTags];
diff --git a/plugins/tmux-monitor/src/backend/tmux-commands.ts b/plugins/tmux-monitor/src/backend/tmux-commands.ts
deleted file mode 100644
index 0afe5b41d..000000000
--- a/plugins/tmux-monitor/src/backend/tmux-commands.ts
+++ /dev/null
@@ -1,164 +0,0 @@
-import { randomUUID } from "node:crypto";
-import type { Client, ClientChannel } from "ssh2";
-
-const TMUX_PATH_DIRS = [
-  "/opt/homebrew/bin",
-  "/usr/local/bin",
-  "/opt/bin",
-  "/usr/pkg/bin",
-];
-
-export function withTmuxPath(command: string): string {
-  const script = `PATH=${TMUX_PATH_DIRS.join(":")}:"$PATH"; export PATH; ${command}`;
-  return `/bin/sh -c ${shellEscape(script)}`;
-}
-
-export function tmuxCommand(args: string): string {
-  return withTmuxPath(`tmux -u ${args}`);
-}
-
-/**
- * Run a command on the remote host via a separate exec channel.
- * Returns stdout as a string. Does not pollute the interactive shell.
- */
-export function execCommand(conn: Client, command: string): Promise<string> {
-  return new Promise((resolve, reject) => {
-    conn.exec(command, (err, stream) => {
-      if (err) {
-        reject(err);
-        return;
-      }
-      let stdout = "";
-      let stderr = "";
-      stream.on("data", (data: Buffer) => {
-        stdout += data.toString("utf-8");
-      });
-      stream.stderr.on("data", (data: Buffer) => {
-        stderr += data.toString("utf-8");
-      });
-      stream.on("error", (err: Error) => {
-        reject(err);
-      });
-      stream.on("close", (code: number) => {
-        if (code !== 0 && stdout === "") {
-          reject(
-            new Error(stderr.trim() || `Command exited with code ${code}`),
-          );
-        } else {
-          resolve(stdout.trim());
-        }
-      });
-    });
-  });
-}
-
-export interface TmuxSessionInfo {
-  name: string;
-  created: number;
-  lastActivity: number;
-  windows: number;
-  attachedClients: number;
-}
-
-export interface TmuxDetectionResult {
-  available: boolean;
-  sessions: TmuxSessionInfo[];
-}
-
-/**
- * Detect whether tmux is installed and list all existing sessions with details.
- */
-export async function detectTmux(conn: Client): Promise<TmuxDetectionResult> {
-  try {
-    await execCommand(conn, tmuxCommand("-V"));
-  } catch {
-    return { available: false, sessions: [] };
-  }
-
-  let sessions: TmuxSessionInfo[] = [];
-  try {
-    const output = await execCommand(
-      conn,
-      tmuxCommand(
-        `list-sessions -F "#{session_name}|#{session_created}|#{session_activity}|#{session_windows}|#{session_attached}" 2>/dev/null`,
-      ),
-    );
-    if (output) {
-      sessions = output
-        .split("\n")
-        .filter((line) => line.length > 0)
-        .map((line) => {
-          const [name, created, activity, windows, attached] = line.split("|");
-          return {
-            name,
-            created: parseInt(created, 10) || 0,
-            lastActivity: parseInt(activity, 10) || 0,
-            windows: parseInt(windows, 10) || 0,
-            attachedClients: parseInt(attached, 10) || 0,
-          };
-        });
-    }
-  } catch {
-    // tmux server not running yet -- no sessions exist
-  }
-
-  return { available: true, sessions };
-}
-
-/**
- * Wait for a tmux session to appear by polling via exec channel.
- * Returns the session name once found, or null on timeout.
- */
-export async function waitForTmuxSession(
-  conn: Client,
-  sessionName: string,
-  timeoutMs = 5000,
-  intervalMs = 100,
-): Promise<string | null> {
-  const deadline = Date.now() + timeoutMs;
-  while (Date.now() < deadline) {
-    try {
-      await execCommand(
-        conn,
-        tmuxCommand(`has-session -t ${shellEscape(sessionName)} 2>/dev/null`),
-      );
-      return sessionName;
-    } catch {
-      // session not ready yet
-    }
-    await new Promise((resolve) => setTimeout(resolve, intervalMs));
-  }
-  return null;
-}
-
-/**
- * Write tmux attach or new-session command to the interactive shell stream.
- * Uses && exit so the shell only closes if tmux started successfully.
- *
- * Options are set on this session only so the user's own tmux config stays
- * untouched. -q keeps an older tmux that lacks an option from aborting the
- * attach.
- */
-export function attachOrCreateTmuxSession(
-  stream: ClientChannel,
-  existingSessionName?: string,
-  newSessionName?: string,
-  mouseEnabled = true,
-): void {
-  const name =
-    existingSessionName || newSessionName || `termix-${randomUUID()}`;
-  const target = shellEscape(`=${name}`);
-  const commands = existingSessionName
-    ? []
-    : [`new-session -d -s ${shellEscape(name)}`];
-  commands.push(
-    `set-option -q -t ${target} mouse ${mouseEnabled ? "on" : "off"}`,
-    `set-option -q -t ${target} history-limit 50000`,
-    `attach-session -t ${target}`,
-  );
-  stream.write(`${tmuxCommand(commands.join(" \\; "))} && exit\r`);
-}
-
-export function shellEscape(s: string): string {
-  return "'" + s.replace(/'/g, "'\\''") + "'";
-}
diff --git a/plugins/tmux-monitor/src/frontend/HostOverview.tsx b/plugins/tmux-monitor/src/frontend/HostOverview.tsx
deleted file mode 100644
index 3a960ec5d..000000000
--- a/plugins/tmux-monitor/src/frontend/HostOverview.tsx
+++ /dev/null
@@ -1,108 +0,0 @@
-import {
-  useCallback,
-  useEffect,
-  useRef,
-  useState,
-  type ReactNode,
-} from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Button, Skeleton } from "@termix/plugin-sdk/ui";
-import {
-  getTmuxOverview,
-  getTmuxMetrics,
-  type TmuxOverview,
-  type TmuxPaneMetrics,
-} from "./api";
-import { pollBackgroundHost } from "./poll-queue";
-import { useAdaptivePolling } from "./use-adaptive-polling";
-
-/** Each background host owns its response, error and adaptive polling cycle. */
-export function HostOverview({
-  hostId,
-  children,
-}: {
-  hostId: number;
-  children: (overview: TmuxOverview, metrics: TmuxPaneMetrics[]) => ReactNode;
-}) {
-  const { t } = useTranslation();
-  const [overview, setOverview] = useState<TmuxOverview | null>(null);
-  const [metrics, setMetrics] = useState<TmuxPaneMetrics[]>([]);
-  const [error, setError] = useState(false);
-  const inFlight = useRef(false);
-  const mounted = useRef(true);
-  const signature = useRef("");
-  useEffect(() => {
-    mounted.current = true;
-    return () => {
-      mounted.current = false;
-    };
-  }, []);
-  const load = useCallback(async () => {
-    if (inFlight.current) return;
-    inFlight.current = true;
-    try {
-      const snapshot = await pollBackgroundHost(async () => {
-        if (!mounted.current) return null;
-        const next = await getTmuxOverview(hostId);
-        const values =
-          next.available && mounted.current
-            ? await getTmuxMetrics(hostId).catch(() => [])
-            : [];
-        return { next, values };
-      });
-      if (!snapshot) return;
-      const { next, values } = snapshot;
-      if (!mounted.current) return;
-      setOverview(next);
-      setError(false);
-      setMetrics(values);
-      const nextSignature = JSON.stringify([next, values]);
-      const changed = signature.current !== nextSignature;
-      signature.current = nextSignature;
-      return changed;
-    } catch (err) {
-      if (mounted.current) {
-        setError(true);
-        setMetrics([]);
-      }
-      throw err;
-    } finally {
-      inFlight.current = false;
-    }
-  }, [hostId]);
-  useAdaptivePolling(
-    load,
-    { minIntervalMs: 10_000, maxIntervalMs: 60_000, stablePollsPerStep: 3 },
-    true,
-    { runImmediately: true },
-  );
-  if (error)
-    return (
-      <div className="px-3 py-2 text-xs text-destructive" role="status">
-        {t("tmuxMonitor.failedToLoad")}
-        <Button
-          variant="ghost"
-          size="sm"
-          onClick={() => {
-            void load().catch(() => {});
-          }}
-        >
-          {t("tmuxMonitor.retry")}
-        </Button>
-      </div>
-    );
-  if (!overview) return <Skeleton className="m-2 h-8" />;
-  if (!overview.available)
-    return (
-      <p className="px-3 py-2 text-xs text-muted-foreground">
-        {t("tmuxMonitor.tmuxUnavailable")}
-      </p>
-    );
-  if (!overview.sessions.length)
-    return (
-      <p className="px-3 py-2 text-xs text-muted-foreground">
-        {t("tmuxMonitor.noSessions")}
-      </p>
-    );
-  return children(overview, metrics);
-}
diff --git a/plugins/tmux-monitor/src/frontend/HostTmuxMonitorSection.tsx b/plugins/tmux-monitor/src/frontend/HostTmuxMonitorSection.tsx
deleted file mode 100644
index c1430fe59..000000000
--- a/plugins/tmux-monitor/src/frontend/HostTmuxMonitorSection.tsx
+++ /dev/null
@@ -1,78 +0,0 @@
-import { Layers } from "lucide-react";
-import {
-  useTranslation,
-  type HostEditorSectionProps,
-} from "@termix/plugin-sdk/frontend";
-import { FakeSwitch, SectionCard, SettingRow } from "@termix/plugin-sdk/ui";
-
-type PluginSettingsForm = Record<string, Record<string, unknown>>;
-
-/**
- * The host editor's tmux monitor toggle. Writes into the form's
- * pluginSettings for this plugin, which the editor saves through the
- * plugin's host settings route after the host itself.
- */
-export function HostTmuxMonitorSection({
-  form,
-  updateForm,
-}: HostEditorSectionProps) {
-  const { t } = useTranslation();
-
-  const settings = ((form?.pluginSettings as PluginSettingsForm | undefined)?.[
-    "tmux-monitor"
-  ] ?? {}) as Record<string, unknown>;
-  const enabled = settings.enableTmuxMonitor === true;
-
-  const setSetting = (key: string, value: boolean) =>
-    updateForm((current) => {
-      const all = (current.pluginSettings ?? {}) as PluginSettingsForm;
-      return {
-        ...current,
-        pluginSettings: {
-          ...all,
-          "tmux-monitor": { ...all["tmux-monitor"], [key]: value },
-        },
-      };
-    });
-
-  return (
-    <SectionCard
-      title={t("tmuxMonitor.title")}
-      icon={<Layers className="size-3.5" />}
-    >
-      <div className="flex flex-col gap-4 py-3">
-        <SettingRow
-          label={t("hosts.enableTmuxMonitor")}
-          defaultKey="enableTmuxMonitor"
-          description={
-            <>
-              {t("hosts.enableTmuxMonitorDesc")}{" "}
-              <a
-                href="https://docs.termix.site/features/terminal/tmux"
-                target="_blank"
-                rel="noreferrer"
-                className="text-accent-brand hover:underline"
-              >
-                {t("hosts.docsLink")}
-              </a>
-            </>
-          }
-        >
-          <FakeSwitch
-            checked={enabled}
-            onChange={(value) => setSetting("enableTmuxMonitor", value)}
-          />
-        </SettingRow>
-        <SettingRow
-          label={t("settings.host.mouseEnabled.label")}
-          description={t("settings.host.mouseEnabled.description")}
-        >
-          <FakeSwitch
-            checked={settings.mouseEnabled !== false}
-            onChange={(value) => setSetting("mouseEnabled", value)}
-          />
-        </SettingRow>
-      </div>
-    </SectionCard>
-  );
-}
diff --git a/plugins/tmux-monitor/src/frontend/PanePreview.tsx b/plugins/tmux-monitor/src/frontend/PanePreview.tsx
deleted file mode 100644
index e44c44753..000000000
--- a/plugins/tmux-monitor/src/frontend/PanePreview.tsx
+++ /dev/null
@@ -1,169 +0,0 @@
-// Interactive view of a tmux pane. Embeds the real SSH terminal (through the
-// terminal.view component ssh-terminal registers) and attaches to the
-// selected session via the native tmux_attach flow, so the pane is fully
-// usable: typing, mouse scrolling and tmux copy-mode all behave exactly like
-// a normal terminal tab.
-
-import { useRef, useState } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import {
-  Activity,
-  Cpu,
-  MemoryStick,
-  RotateCw,
-  SquareSplitHorizontal,
-  SquareSplitVertical,
-  Trash2,
-  X,
-} from "lucide-react";
-import { PluginComponent } from "@termix/plugin-sdk/ui";
-import type { PluginHostRecord, TabHandle } from "@termix/plugin-sdk/frontend";
-import type { TmuxPaneMetrics } from "./api";
-import { formatMem } from "./format";
-import type { SelectedPane } from "./types";
-
-interface PanePreviewProps {
-  host: PluginHostRecord;
-  pane: SelectedPane;
-  metrics?: TmuxPaneMetrics;
-  /** Imperative handle of the embedded terminal, used by the parent to nudge
-   * a refit/redraw after layout-changing tmux actions. */
-  terminalRef?: React.RefObject<TabHandle | null>;
-  /** Split the window containing this pane ("h" = new pane to the right,
-   * "v" = below — tmux -h/-v semantics). */
-  onSplit: (direction: "h" | "v") => void;
-  /** Ask for confirmation and kill this pane. */
-  onKillPane: () => void;
-  onClose: () => void;
-}
-
-function newInstanceId(): string {
-  return typeof crypto.randomUUID === "function"
-    ? crypto.randomUUID()
-    : `${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}`;
-}
-
-export function PanePreview({
-  host,
-  pane,
-  metrics,
-  terminalRef,
-  onSplit,
-  onKillPane,
-  onClose,
-}: PanePreviewProps) {
-  const { t } = useTranslation();
-  // One PTY per mount; the parent remounts this component (via key) when the
-  // host or session changes. Pane switches within a session go through the
-  // focus endpoint instead, so the connection is reused.
-  const instanceIdRef = useRef<string>(newInstanceId());
-  // Bumping this remounts the embedded terminal with a fresh PTY — the rescue
-  // hatch when the attached client's rendering gets out of sync.
-  const [attachNonce, setAttachNonce] = useState(0);
-
-  function reattach() {
-    instanceIdRef.current = newInstanceId();
-    setAttachNonce((n) => n + 1);
-  }
-
-  // The host's own authType travels in the spread, so a Tailscale host still
-  // gets the Tailscale-aware PTY path. The SSH port may be non-standard.
-  const resolvedPort = host.sshPort ?? host.port;
-  const terminalHostConfig = {
-    ...host,
-    port: resolvedPort,
-    sshPort: resolvedPort,
-    instanceId: instanceIdRef.current,
-  };
-
-  return (
-    <>
-      <div className="flex items-center gap-3 border-b border-border px-3 py-1.5 text-xs text-muted-foreground">
-        <span className="flex gap-2 font-medium text-foreground">
-          <span>{pane.sessionName}</span>
-          <span className="text-muted-foreground">{pane.paneId}</span>
-        </span>
-        {metrics && (
-          <>
-            <span className="flex items-center gap-1">
-              <Cpu className="size-3" />
-              {metrics.cpuPercent.toFixed(1)}%
-            </span>
-            <span className="flex items-center gap-1">
-              <MemoryStick className="size-3" />
-              {formatMem(metrics.memRssKb)}
-            </span>
-            {metrics.gpuMemMb > 0 && (
-              <span className="flex items-center gap-1">
-                <Activity className="size-3" />
-                {metrics.gpuMemMb} MB GPU
-              </span>
-            )}
-            {metrics.topCommand && (
-              <span className="truncate">
-                {metrics.topCommand} ({metrics.processCount})
-              </span>
-            )}
-          </>
-        )}
-        <div className="ml-auto flex items-center gap-2">
-          <button
-            className="text-muted-foreground hover:text-foreground"
-            title={t("tmuxMonitor.splitRight")}
-            aria-label={t("tmuxMonitor.splitRight")}
-            onClick={() => onSplit("h")}
-          >
-            <SquareSplitHorizontal className="size-3.5" />
-          </button>
-          <button
-            className="text-muted-foreground hover:text-foreground"
-            title={t("tmuxMonitor.splitDown")}
-            aria-label={t("tmuxMonitor.splitDown")}
-            onClick={() => onSplit("v")}
-          >
-            <SquareSplitVertical className="size-3.5" />
-          </button>
-          <button
-            className="text-muted-foreground hover:text-destructive"
-            title={t("tmuxMonitor.killPane")}
-            aria-label={t("tmuxMonitor.killPane")}
-            onClick={onKillPane}
-          >
-            <Trash2 className="size-3.5" />
-          </button>
-          <div className="h-3.5 border-l border-border" />
-          <button
-            className="text-muted-foreground hover:text-foreground"
-            title={t("tmuxMonitor.reattach")}
-            aria-label={t("tmuxMonitor.reattach")}
-            onClick={reattach}
-          >
-            <RotateCw className="size-3.5" />
-          </button>
-          <button
-            className="text-muted-foreground hover:text-foreground"
-            title={t("tmuxMonitor.closePreview")}
-            aria-label={t("tmuxMonitor.closePreview")}
-            onClick={onClose}
-          >
-            <X className="size-3.5" />
-          </button>
-        </div>
-      </div>
-      <div className="min-h-0 flex-1 overflow-hidden">
-        <PluginComponent
-          id="terminal.view"
-          key={attachNonce}
-          handleRef={terminalRef}
-          hostConfig={terminalHostConfig}
-          isVisible={true}
-          title={pane.sessionName}
-          showTitle={false}
-          splitScreen={false}
-          tmuxAttachSession={pane.sessionName}
-          onClose={onClose}
-        />
-      </div>
-    </>
-  );
-}
diff --git a/plugins/tmux-monitor/src/frontend/SearchResults.tsx b/plugins/tmux-monitor/src/frontend/SearchResults.tsx
deleted file mode 100644
index 73ea2aa83..000000000
--- a/plugins/tmux-monitor/src/frontend/SearchResults.tsx
+++ /dev/null
@@ -1,86 +0,0 @@
-import type { ReactNode } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { X } from "lucide-react";
-import type { TmuxSearchMatch, TmuxSearchResult } from "./api";
-
-interface SearchResultsProps {
-  results: TmuxSearchMatch[];
-  searching: boolean;
-  /** The query that produced these results, used to highlight matches. */
-  query: string;
-  /** Search-limit info; renders a "partial results" note when truncated. */
-  limits: Pick<
-    TmuxSearchResult,
-    "truncated" | "searchedLines" | "maxPanes"
-  > | null;
-  onSelect: (match: TmuxSearchMatch) => void;
-  onClose: () => void;
-}
-
-function highlightMatch(text: string, query: string): ReactNode {
-  if (!query) return text;
-  const index = text.toLowerCase().indexOf(query.toLowerCase());
-  if (index === -1) return text;
-  return (
-    <>
-      {text.slice(0, index)}
-      <mark className="bg-accent-brand/30 px-0 text-foreground">
-        {text.slice(index, index + query.length)}
-      </mark>
-      {text.slice(index + query.length)}
-    </>
-  );
-}
-
-export function SearchResults({
-  results,
-  searching,
-  query,
-  limits,
-  onSelect,
-  onClose,
-}: SearchResultsProps) {
-  const { t } = useTranslation();
-
-  return (
-    <div className="max-h-56 overflow-y-auto border-b border-border bg-card">
-      <div className="flex items-center justify-between gap-2 px-3 py-1.5">
-        <span className="truncate text-xs text-muted-foreground">
-          {searching
-            ? t("common.loading")
-            : t("tmuxMonitor.searchResults", { count: results.length })}
-          {!searching && limits?.truncated && (
-            <span className="ml-2 text-muted-foreground/70">
-              {t("tmuxMonitor.searchTruncated", {
-                lines: limits.searchedLines,
-                panes: limits.maxPanes,
-              })}
-            </span>
-          )}
-        </span>
-        <button
-          className="text-muted-foreground hover:text-foreground"
-          title={t("tmuxMonitor.closeSearchResults")}
-          onClick={onClose}
-        >
-          <X className="size-3.5" />
-        </button>
-      </div>
-      {results.map((match, i) => (
-        <div
-          key={`${match.paneId}-${match.line}-${i}`}
-          className="flex cursor-pointer items-baseline gap-2 px-3 py-1 text-xs hover:bg-muted/40"
-          onClick={() => onSelect(match)}
-        >
-          <span className="flex shrink-0 gap-1.5 font-medium text-primary">
-            <span>{match.sessionName}</span>
-            <span className="text-primary/60">{match.paneId}</span>
-          </span>
-          <span className="truncate font-mono text-muted-foreground">
-            {highlightMatch(match.text, query)}
-          </span>
-        </div>
-      ))}
-    </div>
-  );
-}
diff --git a/plugins/tmux-monitor/src/frontend/SessionTree.tsx b/plugins/tmux-monitor/src/frontend/SessionTree.tsx
deleted file mode 100644
index 6a8148e2a..000000000
--- a/plugins/tmux-monitor/src/frontend/SessionTree.tsx
+++ /dev/null
@@ -1,473 +0,0 @@
-// Session/window/pane tree styled after the VSCode "tmux manager" view.
-// Each session is a single row: status dot, name, inline tag badges, and a
-// right-aligned meta label (relative time, cpu, mem) that is overlaid by
-// the hover actions (attach, new window, …-menu). The overlay uses a grid
-// stack with opacity so rows never shift and the actions stay reachable via
-// keyboard focus.
-
-import { useState } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import {
-  AppWindow,
-  BarChart2,
-  ChevronDown,
-  ChevronRight,
-  MoreHorizontal,
-  Pencil,
-  Play,
-  Plus,
-  SquareSplitHorizontal,
-  SquareSplitVertical,
-  SquareTerminal,
-  Tag,
-  Trash2,
-  X,
-} from "lucide-react";
-import {
-  Badge,
-  DropdownMenu,
-  DropdownMenuContent,
-  DropdownMenuItem,
-  DropdownMenuTrigger,
-  Popover,
-  PopoverContent,
-  PopoverTrigger,
-} from "@termix/plugin-sdk/ui";
-import type { TmuxPaneMetrics, TmuxSessionOverview } from "./api";
-import { formatMem, formatRelativeTime } from "./format";
-import type { SelectedPane } from "./types";
-
-export interface SessionMetricsAgg {
-  cpu: number;
-  memKb: number;
-  gpuMb: number;
-}
-
-const MAX_INLINE_TAGS = 2;
-
-interface SessionTreeProps {
-  sessions: TmuxSessionOverview[];
-  expandedSessions: Set<string>;
-  onToggleSession: (name: string) => void;
-  selectedPaneId: string | null;
-  onSelectPane: (pane: SelectedPane) => void;
-  metricsByPane: Map<string, TmuxPaneMetrics>;
-  metricsBySession: Map<string, SessionMetricsAgg>;
-  /** Open the tag editor for a session (… menu). */
-  onEditTags: (sessionName: string) => void;
-  /** Open a terminal attached to the session (the ▷ hover action). */
-  onAttachSession: (sessionName: string) => void;
-  onSelectSession?: (sessionName: string) => void;
-  /** Create a new window in the session (the + hover action). */
-  onNewWindow: (sessionName: string) => void;
-  /** Open the rename dialog for a session (… menu). */
-  onRenameSession: (sessionName: string) => void;
-  /** Open the kill confirmation for a session (… menu). */
-  onKillSession: (sessionName: string) => void;
-  /** Open the kill confirmation for a single pane (hover ✕ on pane rows). */
-  onKillPane: (paneId: string) => void;
-  /** Split the window containing a pane (hover actions on pane rows). */
-  onSplitPane: (paneId: string, direction: "h" | "v") => void;
-  /** Open the kill confirmation for a window (hover ✕ on window rows). */
-  onKillWindow: (sessionName: string, windowIndex: number) => void;
-  /** Narrow tree panel: the inline time/cpu/mem label is hidden (the hover
-   * tooltip still carries the full status). */
-  compact: boolean;
-  /** Timestamp used to render relative times; bumped periodically by the
-   * parent so "Xm ago" labels do not go stale. */
-  now: number;
-}
-
-export function SessionTree({
-  sessions,
-  expandedSessions,
-  onToggleSession,
-  selectedPaneId,
-  onSelectPane,
-  metricsByPane,
-  metricsBySession,
-  onEditTags,
-  onAttachSession,
-  onSelectSession,
-  onNewWindow,
-  onRenameSession,
-  onKillSession,
-  onKillPane,
-  onSplitPane,
-  onKillWindow,
-  compact,
-  now,
-}: SessionTreeProps) {
-  const { t } = useTranslation();
-  // Collapsed windows, keyed "session windowIndex". Windows default to
-  // expanded (panes visible) like the VSCode tmux manager.
-  const [collapsedWindows, setCollapsedWindows] = useState<Set<string>>(
-    new Set(),
-  );
-
-  function windowKey(sessionName: string, windowIndex: number): string {
-    return `${sessionName} ${windowIndex}`;
-  }
-
-  function toggleWindow(sessionName: string, windowIndex: number) {
-    setCollapsedWindows((prev) => {
-      const next = new Set(prev);
-      const key = windowKey(sessionName, windowIndex);
-      if (next.has(key)) next.delete(key);
-      else next.add(key);
-      return next;
-    });
-  }
-
-  function metaLabel(session: TmuxSessionOverview) {
-    const time = formatRelativeTime(session.lastActivity, now, t);
-    const agg = metricsBySession.get(session.name);
-    if (!agg) return time;
-    return (
-      <span className="flex gap-2">
-        <span>{time}</span>
-        <span>{agg.cpu.toFixed(0)}%</span>
-        <span>{formatMem(agg.memKb)}</span>
-      </span>
-    );
-  }
-
-  return (
-    <>
-      {sessions.map((session) => {
-        const expanded = expandedSessions.has(session.name);
-        const agg = metricsBySession.get(session.name);
-        const paneCount = session.windows.reduce(
-          (sum, w) => sum + w.panes.length,
-          0,
-        );
-        return (
-          <div key={session.name} className="mb-0.5">
-            <div
-              className="group flex cursor-pointer items-center gap-1.5 px-2 py-1 hover:bg-muted/40"
-              onClick={() =>
-                onSelectSession
-                  ? onSelectSession(session.name)
-                  : onToggleSession(session.name)
-              }
-            >
-              <button
-                aria-label={t("tmuxMonitor.toggleSession", {
-                  session: session.name,
-                })}
-                aria-expanded={expanded}
-                onClick={(event) => {
-                  event.stopPropagation();
-                  onToggleSession(session.name);
-                }}
-              >
-                {expanded ? (
-                  <ChevronDown className="size-3.5 shrink-0" />
-                ) : (
-                  <ChevronRight className="size-3.5 shrink-0" />
-                )}
-              </button>
-              <span
-                className={`size-2 shrink-0 rounded-full ${session.attachedClients > 0 ? "bg-accent-brand" : "bg-muted-foreground/40"}`}
-                title={
-                  session.attachedClients > 0
-                    ? t("tmuxMonitor.attached")
-                    : t("tmuxMonitor.detached")
-                }
-              />
-              <span className="truncate text-sm font-medium">
-                {session.name}
-              </span>
-              {session.tags.slice(0, MAX_INLINE_TAGS).map((tag) => (
-                <Badge
-                  key={tag}
-                  variant="secondary"
-                  className="h-4 shrink-0 px-1.5 text-[10px]"
-                >
-                  {tag}
-                </Badge>
-              ))}
-              {session.tags.length > MAX_INLINE_TAGS && (
-                <Badge
-                  variant="secondary"
-                  className="h-4 shrink-0 px-1.5 text-[10px]"
-                  title={session.tags.join(", ")}
-                >
-                  +{session.tags.length - MAX_INLINE_TAGS}
-                </Badge>
-              )}
-
-              {/* Meta label and hover actions stacked in one grid cell */}
-              <span className="ml-auto grid shrink-0">
-                {!compact && (
-                  <span className="pointer-events-none col-start-1 row-start-1 justify-self-end self-center text-xs text-muted-foreground transition-opacity group-hover:opacity-0 group-focus-within:opacity-0">
-                    {metaLabel(session)}
-                  </span>
-                )}
-                <span className="pointer-events-none z-10 col-start-1 row-start-1 flex items-center gap-1.5 justify-self-end opacity-0 transition-opacity group-focus-within:pointer-events-auto group-focus-within:opacity-100 group-hover:pointer-events-auto group-hover:opacity-100">
-                  <button
-                    className="-m-1 p-1 text-muted-foreground hover:text-foreground"
-                    title={t("tmuxMonitor.attachSessionTooltip", {
-                      session: session.name,
-                    })}
-                    aria-label={t("tmuxMonitor.attachSessionTooltip", {
-                      session: session.name,
-                    })}
-                    onClick={(e) => {
-                      e.stopPropagation();
-                      onAttachSession(session.name);
-                    }}
-                  >
-                    <Play className="size-3.5" />
-                  </button>
-                  <button
-                    className="-m-1 p-1 text-muted-foreground hover:text-foreground"
-                    title={t("tmuxMonitor.newWindow")}
-                    aria-label={t("tmuxMonitor.newWindow")}
-                    onClick={(e) => {
-                      e.stopPropagation();
-                      onNewWindow(session.name);
-                    }}
-                  >
-                    <Plus className="size-3.5" />
-                  </button>
-                  <Popover>
-                    <PopoverTrigger asChild>
-                      <button
-                        className="-m-1 p-1 text-muted-foreground hover:text-foreground data-[state=open]:text-foreground"
-                        title={t("tmuxMonitor.sessionStats")}
-                        aria-label={t("tmuxMonitor.sessionStats")}
-                        onClick={(e) => e.stopPropagation()}
-                      >
-                        <BarChart2 className="size-3.5" />
-                      </button>
-                    </PopoverTrigger>
-                    <PopoverContent
-                      side="right"
-                      align="start"
-                      sideOffset={8}
-                      className="w-56 rounded-none border border-border p-0 shadow-md"
-                      onClick={(e) => e.stopPropagation()}
-                    >
-                      <div className="w-full px-3 py-2">
-                        <div className="mb-1 flex items-center gap-1.5">
-                          <span
-                            className={`size-2 rounded-full ${session.attachedClients > 0 ? "bg-accent-brand" : "bg-muted-foreground/40"}`}
-                          />
-                          <span className="text-xs font-semibold">
-                            {session.name}
-                          </span>
-                          <span className="ml-auto text-[10px] text-muted-foreground">
-                            {session.attachedClients > 0
-                              ? t("tmuxMonitor.attached")
-                              : t("tmuxMonitor.detached")}
-                          </span>
-                        </div>
-                        <dl className="grid grid-cols-[auto_1fr] gap-x-3 gap-y-0.5 text-[11px]">
-                          <dt className="text-muted-foreground">
-                            {t("tmuxMonitor.statusActivity")}
-                          </dt>
-                          <dd className="text-right">
-                            {formatRelativeTime(session.lastActivity, now, t)}
-                          </dd>
-                          <dt className="text-muted-foreground">
-                            {t("tmuxMonitor.statusWindows")}
-                          </dt>
-                          <dd className="text-right">
-                            {session.windows.length} / {paneCount}{" "}
-                            {t("tmuxMonitor.statusPanes")}
-                          </dd>
-                          <dt className="text-muted-foreground">CPU</dt>
-                          <dd className="text-right">
-                            {agg ? `${agg.cpu.toFixed(1)}%` : "—"}
-                          </dd>
-                          <dt className="text-muted-foreground">RAM</dt>
-                          <dd className="text-right">
-                            {agg ? formatMem(agg.memKb) : "—"}
-                          </dd>
-                          {agg && agg.gpuMb > 0 && (
-                            <>
-                              <dt className="text-muted-foreground">GPU</dt>
-                              <dd className="text-right">{agg.gpuMb} MB</dd>
-                            </>
-                          )}
-                          {session.tags.length > 0 && (
-                            <>
-                              <dt className="text-muted-foreground">
-                                {t("tmuxMonitor.statusTags")}
-                              </dt>
-                              <dd className="truncate text-right">
-                                {session.tags.join(", ")}
-                              </dd>
-                            </>
-                          )}
-                        </dl>
-                      </div>
-                    </PopoverContent>
-                  </Popover>
-                  <DropdownMenu>
-                    <DropdownMenuTrigger asChild>
-                      <button
-                        className="-m-1 p-1 text-muted-foreground hover:text-foreground data-[state=open]:text-foreground"
-                        title={t("tmuxMonitor.moreActions")}
-                        aria-label={t("tmuxMonitor.moreActions")}
-                        onClick={(e) => e.stopPropagation()}
-                      >
-                        <MoreHorizontal className="size-3.5" />
-                      </button>
-                    </DropdownMenuTrigger>
-                    <DropdownMenuContent
-                      align="end"
-                      className="min-w-36"
-                      onClick={(e) => e.stopPropagation()}
-                    >
-                      <DropdownMenuItem
-                        className="whitespace-nowrap"
-                        onSelect={() =>
-                          setTimeout(() => onRenameSession(session.name), 0)
-                        }
-                      >
-                        <Pencil className="size-3.5" />
-                        {t("tmuxMonitor.rename")}
-                      </DropdownMenuItem>
-                      <DropdownMenuItem
-                        className="whitespace-nowrap"
-                        onSelect={() =>
-                          setTimeout(() => onEditTags(session.name), 0)
-                        }
-                      >
-                        <Tag className="size-3.5" />
-                        {t("tmuxMonitor.editTags")}
-                      </DropdownMenuItem>
-                      <DropdownMenuItem
-                        variant="destructive"
-                        className="whitespace-nowrap"
-                        onSelect={() =>
-                          setTimeout(() => onKillSession(session.name), 0)
-                        }
-                      >
-                        <Trash2 className="size-3.5" />
-                        {t("tmuxMonitor.kill")}
-                      </DropdownMenuItem>
-                    </DropdownMenuContent>
-                  </DropdownMenu>
-                </span>
-              </span>
-            </div>
-
-            {expanded &&
-              session.windows.map((win) => {
-                const winCollapsed = collapsedWindows.has(
-                  windowKey(session.name, win.index),
-                );
-                return (
-                  <div key={win.index} className="ml-4">
-                    <div
-                      className="group flex cursor-pointer items-center gap-1 px-2 py-0.5 text-xs text-muted-foreground hover:bg-muted/40"
-                      onClick={() => toggleWindow(session.name, win.index)}
-                    >
-                      {winCollapsed ? (
-                        <ChevronRight className="size-3 shrink-0" />
-                      ) : (
-                        <ChevronDown className="size-3 shrink-0" />
-                      )}
-                      <AppWindow className="size-3 shrink-0" />
-                      <span className="truncate">
-                        {win.index}: {win.name}
-                      </span>
-                      <button
-                        className="-m-1 ml-auto shrink-0 p-1 text-muted-foreground opacity-0 transition-opacity hover:text-destructive focus-visible:opacity-100 group-hover:opacity-100"
-                        title={t("tmuxMonitor.killWindow")}
-                        aria-label={t("tmuxMonitor.killWindow")}
-                        onClick={(e) => {
-                          e.stopPropagation();
-                          onKillWindow(session.name, win.index);
-                        }}
-                      >
-                        <X className="size-3" />
-                      </button>
-                    </div>
-                    {!winCollapsed &&
-                      win.panes.map((pane) => {
-                        const m = metricsByPane.get(pane.id);
-                        const isSelected = selectedPaneId === pane.id;
-                        return (
-                          <div
-                            key={pane.id}
-                            className={`group ml-5 flex cursor-pointer items-center gap-1.5 px-2 py-1 text-xs hover:bg-muted/40 ${isSelected ? "bg-accent-brand/10" : ""}`}
-                            onClick={() =>
-                              onSelectPane({
-                                paneId: pane.id,
-                                sessionName: session.name,
-                                windowIndex: win.index,
-                              })
-                            }
-                          >
-                            <SquareTerminal className="size-3 shrink-0" />
-                            <span className="truncate">
-                              {pane.index}: {pane.command}
-                            </span>
-                            <span
-                              className="min-w-0 flex-1 truncate text-muted-foreground/70"
-                              title={pane.path}
-                            >
-                              {pane.path}
-                            </span>
-                            {/* Same overlay stack as the session rows: cpu
-                            label and hover actions share one grid cell so the
-                            buttons never widen the row (they would get
-                            clipped on a narrow panel). */}
-                            <span className="ml-auto grid shrink-0">
-                              {m && m.cpuPercent > 0 && (
-                                <span className="pointer-events-none col-start-1 row-start-1 justify-self-end self-center text-[10px] text-muted-foreground transition-opacity group-hover:opacity-0 group-focus-within:opacity-0">
-                                  {m.cpuPercent.toFixed(0)}%
-                                </span>
-                              )}
-                              <span className="pointer-events-none z-10 col-start-1 row-start-1 flex items-center gap-1 justify-self-end opacity-0 transition-opacity group-focus-within:pointer-events-auto group-focus-within:opacity-100 group-hover:pointer-events-auto group-hover:opacity-100">
-                                <button
-                                  className="-m-1 p-1 text-muted-foreground hover:text-foreground"
-                                  title={t("tmuxMonitor.splitRight")}
-                                  aria-label={t("tmuxMonitor.splitRight")}
-                                  onClick={(e) => {
-                                    e.stopPropagation();
-                                    onSplitPane(pane.id, "h");
-                                  }}
-                                >
-                                  <SquareSplitHorizontal className="size-3" />
-                                </button>
-                                <button
-                                  className="-m-1 p-1 text-muted-foreground hover:text-foreground"
-                                  title={t("tmuxMonitor.splitDown")}
-                                  aria-label={t("tmuxMonitor.splitDown")}
-                                  onClick={(e) => {
-                                    e.stopPropagation();
-                                    onSplitPane(pane.id, "v");
-                                  }}
-                                >
-                                  <SquareSplitVertical className="size-3" />
-                                </button>
-                                <button
-                                  className="-m-1 p-1 text-muted-foreground hover:text-destructive"
-                                  title={t("tmuxMonitor.killPane")}
-                                  aria-label={t("tmuxMonitor.killPane")}
-                                  onClick={(e) => {
-                                    e.stopPropagation();
-                                    onKillPane(pane.id);
-                                  }}
-                                >
-                                  <X className="size-3" />
-                                </button>
-                              </span>
-                            </span>
-                          </div>
-                        );
-                      })}
-                  </div>
-                );
-              })}
-          </div>
-        );
-      })}
-    </>
-  );
-}
diff --git a/plugins/tmux-monitor/src/frontend/TmuxMonitor.tsx b/plugins/tmux-monitor/src/frontend/TmuxMonitor.tsx
deleted file mode 100644
index 7d55cd961..000000000
--- a/plugins/tmux-monitor/src/frontend/TmuxMonitor.tsx
+++ /dev/null
@@ -1,1687 +0,0 @@
-import { useCallback, useEffect, useMemo, useRef, useState } from "react";
-import {
-  useHosts,
-  useToast,
-  useTranslation,
-} from "@termix/plugin-sdk/frontend";
-import type { PluginHostRecord, TabHandle } from "@termix/plugin-sdk/frontend";
-import {
-  Button,
-  Dialog,
-  DialogContent,
-  DialogFooter,
-  DialogHeader,
-  DialogTitle,
-  Input,
-  Popover,
-  PopoverContent,
-  PopoverTrigger,
-  ScrollArea,
-  Skeleton,
-  isElectron,
-} from "@termix/plugin-sdk/ui";
-import {
-  ChevronDown,
-  ChevronRight,
-  ChevronsDownUp,
-  ChevronsUpDown,
-  ExternalLink,
-  Layers,
-  MonitorPlay,
-  Plus,
-  RefreshCw,
-  Search,
-  Server,
-  SquareTerminal,
-} from "lucide-react";
-import {
-  getTmuxOverview,
-  getTmuxMetrics,
-  searchTmux,
-  setTmuxSessionTags,
-  focusTmuxPane,
-  createTmuxSession,
-  createTmuxWindow,
-  renameTmuxSession,
-  killTmuxSession,
-  killTmuxWindow,
-  killTmuxPane,
-  splitTmuxPane,
-  type TmuxOverview,
-  type TmuxPaneMetrics,
-  type TmuxSearchMatch,
-  type TmuxSearchResult,
-} from "./api";
-import { tmuxMonitorEnabled } from "./host-tmux-monitor";
-import { useAdaptivePolling } from "./use-adaptive-polling";
-import { SessionTree, type SessionMetricsAgg } from "./SessionTree";
-import { SearchResults } from "./SearchResults";
-import { PanePreview } from "./PanePreview";
-import type { SelectedPane } from "./types";
-
-import { HostOverview } from "./HostOverview";
-import {
-  readMonitorValue,
-  saveMonitorValue,
-  readExpanded,
-  readSelectedPane,
-} from "./monitor-storage";
-
-type TreeAction =
-  | { type: "pane"; pane: SelectedPane }
-  | {
-      type: "attach" | "tags" | "rename" | "killSession" | "newWindow";
-      session: string;
-    }
-  | { type: "killPane"; paneId: string }
-  | { type: "split"; paneId: string; direction: "h" | "v" }
-  | { type: "killWindow"; session: string; index: number };
-
-const OVERVIEW_POLL_MS = 10_000;
-const METRICS_POLL_MS = 10_000;
-const TIME_TICK_MS = 30_000;
-
-const LS_PREFIX = "termix-tmux-monitor-";
-const LS_LAST_HOST_KEY = `${LS_PREFIX}last-host`;
-const LS_TREE_WIDTH_KEY = `${LS_PREFIX}tree-width`;
-
-const TREE_WIDTH_DEFAULT = 288; // matches the old fixed w-72
-const TREE_WIDTH_MIN = 200;
-const TREE_WIDTH_MAX = 520;
-
-function expandedStorageKey(hostId: string | number): string {
-  return `${LS_PREFIX}expanded-${hostId}`;
-}
-
-export function TmuxMonitor({
-  initialHostId,
-  initialHostRequest,
-  isVisible = true,
-}: {
-  initialHostId?: number;
-  initialHostRequest?: number;
-  isVisible?: boolean;
-}) {
-  const { t } = useTranslation();
-  const toast = useToast();
-  const { hosts: allHosts, loaded: hostsLoaded } = useHosts();
-  const hosts = useMemo(
-    () =>
-      allHosts.filter(
-        (h) =>
-          h.enableSsh !== false &&
-          ((h.connectionType as string | undefined) ?? "ssh") === "ssh" &&
-          tmuxMonitorEnabled(h),
-      ),
-    [allHosts],
-  );
-  const [selectedHostId, setSelectedHostId] = useState<string | number | null>(
-    null,
-  );
-  const [scope, setScope] = useState<"all" | "single">(() =>
-    readMonitorValue<string>("scope", "all") === "single" ? "single" : "all",
-  );
-  const [hostFilter, setHostFilter] = useState(() => {
-    const value = readMonitorValue<unknown>("filter", "");
-    return typeof value === "string" ? value : "";
-  });
-  const [collapsedHosts, setCollapsedHosts] = useState<Set<string>>(() => {
-    const value = readMonitorValue<unknown>("collapsed-hosts", []);
-    return new Set(
-      Array.isArray(value)
-        ? value.filter((id): id is string => typeof id === "string")
-        : [],
-    );
-  });
-  const [expandedByHost, setExpandedByHost] = useState<
-    Record<string, Set<string>>
-  >({});
-  const [pendingAction, setPendingAction] = useState<{
-    hostId: string | number;
-    action: TreeAction;
-  } | null>(null);
-  const [overviewHostId, setOverviewHostId] = useState<string | number | null>(
-    null,
-  );
-  const [overview, setOverview] = useState<TmuxOverview | null>(null);
-  const [overviewLoading, setOverviewLoading] = useState(false);
-  const [overviewError, setOverviewError] = useState<string | null>(null);
-  const [expandedSessions, setExpandedSessions] = useState<Set<string>>(
-    new Set(),
-  );
-  const [selectedPane, setSelectedPane] = useState<SelectedPane | null>(null);
-  const [metrics, setMetrics] = useState<TmuxPaneMetrics[]>([]);
-  const [searchQuery, setSearchQuery] = useState("");
-  const [searchedQuery, setSearchedQuery] = useState("");
-  const [searchResults, setSearchResults] = useState<TmuxSearchMatch[] | null>(
-    null,
-  );
-  const [searchLimits, setSearchLimits] = useState<Pick<
-    TmuxSearchResult,
-    "truncated" | "searchedLines" | "maxPanes"
-  > | null>(null);
-  const [searching, setSearching] = useState(false);
-  // Bumped every 30s so relative "Xm ago" labels do not go stale.
-  const [now, setNow] = useState(() => Date.now());
-  const searchInputRef = useRef<HTMLInputElement>(null);
-  // Host whose data is currently on screen; responses for any other host are
-  // stale (the user switched away while the request was in flight) and must
-  // not overwrite the current tree.
-  const activeHostRef = useRef<string | number | null>(null);
-  const hostGeneration = useRef(0);
-  const overviewSignatureRef = useRef("");
-  const metricsSignatureRef = useRef("");
-  // True when the expanded-session set for the current host was restored from
-  // localStorage (or touched by the user) and must not be overwritten by the
-  // default expand-all behavior.
-  const expandedRestoredRef = useRef(false);
-  // Imperative handle of the preview's embedded terminal. After tmux actions
-  // that change the layout (split / kill-pane / new-window) the attached
-  // client can render stale borders; a refit forces a PTY resize which makes
-  // tmux fully redraw the client.
-  const previewTermRef = useRef<TabHandle | null>(null);
-  const nudgePreviewRedraw = useCallback(() => {
-    setTimeout(() => {
-      previewTermRef.current?.fit?.();
-      previewTermRef.current?.notifyResize?.();
-      previewTermRef.current?.refresh?.();
-    }, 300);
-  }, []);
-
-  // -- resizable tree panel (same pattern as the AppShell host sidebar) -------
-  const [treeWidth, setTreeWidth] = useState(() => {
-    const saved = Number(readMonitorValue("tree-width", TREE_WIDTH_DEFAULT));
-    return Number.isFinite(saved) && saved >= TREE_WIDTH_MIN
-      ? Math.min(saved, TREE_WIDTH_MAX)
-      : TREE_WIDTH_DEFAULT;
-  });
-  const [treeDragging, setTreeDragging] = useState(false);
-  useEffect(() => {
-    try {
-      localStorage.setItem(LS_TREE_WIDTH_KEY, String(treeWidth));
-    } catch {
-      // localStorage may be unavailable
-    }
-  }, [treeWidth]);
-  const onTreeResizeMouseDown = useCallback(
-    (e: React.MouseEvent) => {
-      e.preventDefault();
-      setTreeDragging(true);
-      const startX = e.clientX;
-      const startW = treeWidth;
-      function onMove(ev: MouseEvent) {
-        setTreeWidth(
-          Math.max(
-            TREE_WIDTH_MIN,
-            Math.min(TREE_WIDTH_MAX, startW + ev.clientX - startX),
-          ),
-        );
-      }
-      function onUp() {
-        setTreeDragging(false);
-        window.removeEventListener("mousemove", onMove);
-        window.removeEventListener("mouseup", onUp);
-      }
-      window.addEventListener("mousemove", onMove);
-      window.addEventListener("mouseup", onUp);
-    },
-    [treeWidth],
-  );
-
-  // -- host selection ---------------------------------------------------------
-  const initialHostPicked = useRef(false);
-  useEffect(() => {
-    if (!hostsLoaded || initialHostPicked.current) return;
-    setSelectedHostId((prev) => {
-      if (prev !== null && hosts.some((h) => h.id === prev)) return prev;
-      if (hosts.length === 0) return null;
-      if (
-        initialHostId != null &&
-        hosts.some((h) => String(h.id) === String(initialHostId))
-      ) {
-        initialHostPicked.current = true;
-        return hosts.find((h) => String(h.id) === String(initialHostId))!.id;
-      }
-      const stored = readMonitorValue<string | number | null>(
-        "last-host",
-        null,
-      );
-      if (
-        stored !== null &&
-        hosts.some((h) => String(h.id) === String(stored))
-      ) {
-        initialHostPicked.current = true;
-        return hosts.find((h) => String(h.id) === String(stored))!.id;
-      }
-      initialHostPicked.current = true;
-      return hosts[0].id;
-    });
-  }, [hostsLoaded, hosts, initialHostId]);
-
-  // If the selected host disappears (deleted, or the monitor was turned off
-  // for it), fall back the same way the initial pick does.
-  useEffect(() => {
-    if (!hostsLoaded || selectedHostId === null) return;
-    if (hosts.some((h) => String(h.id) === String(selectedHostId))) return;
-    setSelectedHostId(hosts.length > 0 ? hosts[0].id : null);
-  }, [hostsLoaded, hosts, selectedHostId]);
-
-  // Reopening the singleton tab from a host action updates initialHostId;
-  // follow it so the requested host gets selected without a remount.
-  useEffect(() => {
-    if (initialHostId == null) return;
-    const host = hosts.find((h) => String(h.id) === String(initialHostId));
-    if (host) setSelectedHostId(host.id);
-    setHostFilter("");
-    saveMonitorValue("filter", "");
-    setCollapsedHosts((previous) => {
-      const next = new Set(previous);
-      next.delete(String(initialHostId));
-      saveMonitorValue("collapsed-hosts", [...next]);
-      return next;
-    });
-    // Intentionally not depending on `hosts`: the mount effect already picks
-    // the initial host once hosts load.
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [initialHostId, initialHostRequest]);
-
-  // -- relative time refresh --------------------------------------------------
-  useEffect(() => {
-    if (!isVisible) return;
-    const interval = setInterval(() => setNow(Date.now()), TIME_TICK_MS);
-    return () => clearInterval(interval);
-  }, [isVisible]);
-
-  // -- overview polling -----------------------------------------------------
-  const loadOverview = useCallback(
-    async (hostId: string | number, silent = false) => {
-      const generation = hostGeneration.current;
-      if (!silent) {
-        setOverviewLoading(true);
-        setOverviewError(null);
-      }
-      try {
-        const data = await getTmuxOverview(Number(hostId));
-        if (
-          activeHostRef.current !== hostId ||
-          generation !== hostGeneration.current
-        )
-          return true;
-        const signature = JSON.stringify(data);
-        const changed = signature !== overviewSignatureRef.current;
-        overviewSignatureRef.current = signature;
-        setOverviewError(null);
-        setOverviewHostId(hostId);
-        setOverview(data);
-        setSelectedPane((pane) => {
-          const candidate = pane ?? readSelectedPane(hostId);
-          const exists =
-            candidate &&
-            data.sessions.some(
-              (session) =>
-                session.name === candidate.sessionName &&
-                session.windows.some(
-                  (win) =>
-                    win.index === candidate.windowIndex &&
-                    win.panes.some((p) => p.id === candidate.paneId),
-                ),
-            );
-          if (!exists) saveMonitorValue(`pane-${hostId}`, null);
-          return exists ? candidate : null;
-        });
-        setExpandedSessions((prev) => {
-          if (expandedRestoredRef.current || prev.size > 0) return prev;
-          return new Set(data.sessions.map((s) => s.name));
-        });
-        return changed;
-      } catch (err) {
-        if (
-          activeHostRef.current !== hostId ||
-          generation !== hostGeneration.current
-        )
-          return true;
-        setPendingAction((pending) =>
-          pending?.hostId === hostId ? null : pending,
-        );
-        if (!silent) {
-          const axiosErr = err as {
-            code?: string;
-            response?: { data?: { error?: string; code?: string } };
-          };
-          const data = axiosErr.response?.data;
-          // The client request can time out before the backend finishes its
-          // own SSH connect timeout, so treat that like HOST_UNREACHABLE too.
-          const unreachable =
-            data?.code === "HOST_UNREACHABLE" ||
-            axiosErr.code === "ECONNABORTED";
-          if (data?.code === "TMUX_NOT_INSTALLED") {
-            // Same friendly empty-state as the overview's available:false.
-            setOverview({ available: false, sessions: [] });
-            setOverviewError(null);
-          } else {
-            setOverview(null);
-            setOverviewError(
-              unreachable
-                ? t("tmuxMonitor.hostUnreachable")
-                : data?.code === "TMUX_NO_SERVER"
-                  ? t("tmuxMonitor.noServer")
-                  : data?.error ||
-                    (err instanceof Error
-                      ? err.message
-                      : t("tmuxMonitor.failedToLoad")),
-            );
-          }
-        }
-        if (silent) throw err;
-        return false;
-      } finally {
-        if (
-          !silent &&
-          activeHostRef.current === hostId &&
-          generation === hostGeneration.current
-        )
-          setOverviewLoading(false);
-      }
-    },
-    [t],
-  );
-
-  // Manual refresh keeps the current tree on screen (no skeleton flash) and
-  // only spins the refresh icons; the skeleton is reserved for the first load
-  // of a host. Failures surface as a toast instead of silently keeping stale
-  // data.
-  const [refreshing, setRefreshing] = useState(false);
-  const manualRefresh = useCallback(async () => {
-    if (selectedHostId === null || refreshing) return;
-    if (overview === null) {
-      loadOverview(selectedHostId);
-      return;
-    }
-    setRefreshing(true);
-    try {
-      await loadOverview(selectedHostId, true);
-    } catch {
-      toast.error(t("tmuxMonitor.refreshFailed"));
-    } finally {
-      setRefreshing(false);
-    }
-  }, [selectedHostId, refreshing, overview, loadOverview, t, toast]);
-
-  useEffect(() => {
-    activeHostRef.current = selectedHostId;
-    hostGeneration.current++;
-    setOverview(null);
-    setOverviewHostId(null);
-    setSelectedPane(null);
-    overviewSignatureRef.current = "";
-    metricsSignatureRef.current = "";
-    setSearchResults(null);
-    setMetrics([]);
-    if (selectedHostId === null) return;
-    try {
-      localStorage.setItem(LS_LAST_HOST_KEY, String(selectedHostId));
-    } catch {
-      // localStorage may be unavailable
-    }
-    const storedExpanded = readExpanded(selectedHostId);
-    expandedRestoredRef.current = storedExpanded !== null;
-    setExpandedSessions(storedExpanded ?? new Set());
-    loadOverview(selectedHostId);
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [selectedHostId]);
-
-  // Poll only while this app tab is shown: the component stays mounted when
-  // the user switches tabs (AppShell keeps tab content alive) and would
-  // otherwise keep running SSH execs against the host forever.
-  useAdaptivePolling(
-    () =>
-      selectedHostId === null ? undefined : loadOverview(selectedHostId, true),
-    {
-      minIntervalMs: OVERVIEW_POLL_MS,
-      maxIntervalMs: 60_000,
-      stablePollsPerStep: 3,
-    },
-    selectedHostId !== null && isVisible,
-    { runImmediately: false },
-  );
-
-  // -- metrics polling ------------------------------------------------------
-  useAdaptivePolling(
-    async () => {
-      if (selectedHostId === null) return;
-      const hostId = selectedHostId;
-      const generation = hostGeneration.current;
-      const next = await getTmuxMetrics(Number(hostId));
-      if (
-        activeHostRef.current !== hostId ||
-        generation !== hostGeneration.current
-      )
-        return;
-      const signature = JSON.stringify(next);
-      const changed = signature !== metricsSignatureRef.current;
-      metricsSignatureRef.current = signature;
-      setMetrics(next);
-      return changed;
-    },
-    {
-      minIntervalMs: METRICS_POLL_MS,
-      maxIntervalMs: 60_000,
-      stablePollsPerStep: 3,
-    },
-    selectedHostId !== null &&
-      overviewHostId === selectedHostId &&
-      !!overview?.available &&
-      isVisible,
-  );
-
-  // -- keyboard shortcuts -----------------------------------------------------
-  // Gated on isVisible: the listener is global, and a hidden-but-mounted tab
-  // must not swallow "/" or Escape typed in other tabs.
-  useEffect(() => {
-    if (!isVisible) return;
-    const handler = (e: KeyboardEvent) => {
-      if (e.key === "/") {
-        const target = e.target as HTMLElement | null;
-        const tag = target?.tagName;
-        if (tag === "INPUT" || tag === "TEXTAREA" || target?.isContentEditable)
-          return;
-        e.preventDefault();
-        searchInputRef.current?.focus();
-      } else if (e.key === "Escape") {
-        if (searchResults !== null) setSearchResults(null);
-        else if (selectedPane) setSelectedPane(null);
-      }
-    };
-    window.addEventListener("keydown", handler);
-    return () => window.removeEventListener("keydown", handler);
-  }, [searchResults, selectedPane, isVisible]);
-
-  // -- search ---------------------------------------------------------------
-  async function runSearch() {
-    if (selectedHostId === null || !searchQuery.trim()) return;
-    const query = searchQuery.trim();
-    setSearching(true);
-    try {
-      const result = await searchTmux(Number(selectedHostId), query);
-      if (activeHostRef.current !== selectedHostId) return;
-      setSearchResults(result.matches);
-      setSearchLimits(result);
-      setSearchedQuery(query);
-    } catch {
-      toast.error(t("tmuxMonitor.searchFailed"));
-    } finally {
-      setSearching(false);
-    }
-  }
-
-  const persistExpanded = useCallback(
-    (hostId: string | number, set: Set<string>) => {
-      setExpandedByHost((previous) => ({
-        ...previous,
-        [String(hostId)]: new Set(set),
-      }));
-      try {
-        localStorage.setItem(
-          expandedStorageKey(hostId),
-          JSON.stringify([...set]),
-        );
-      } catch {
-        // localStorage may be unavailable
-      }
-    },
-    [],
-  );
-
-  function toggleSession(name: string) {
-    const next = new Set(expandedSessions);
-    if (next.has(name)) next.delete(name);
-    else next.add(name);
-    setExpandedSessions(next);
-    expandedRestoredRef.current = true;
-    if (selectedHostId !== null) persistExpanded(selectedHostId, next);
-  }
-
-  // Selecting a pane also focuses it on the server so the attached PTY (and
-  // any other tmux client) switches to that window/pane.
-  const selectPane = useCallback(
-    (pane: SelectedPane) => {
-      setSelectedPane(pane);
-      saveMonitorValue(`pane-${selectedHostId}`, pane);
-    },
-    [selectedHostId],
-  );
-
-  function handleSearchSelect(match: TmuxSearchMatch) {
-    selectPane({
-      paneId: match.paneId,
-      sessionName: match.sessionName,
-      windowIndex: match.windowIndex,
-    });
-    if (!expandedSessions.has(match.sessionName)) {
-      const next = new Set(expandedSessions).add(match.sessionName);
-      setExpandedSessions(next);
-      expandedRestoredRef.current = true;
-      if (selectedHostId !== null) persistExpanded(selectedHostId, next);
-    }
-  }
-
-  useEffect(() => {
-    if (
-      selectedPane &&
-      selectedHostId !== null &&
-      overviewHostId === selectedHostId
-    )
-      void focusTmuxPane(Number(selectedHostId), selectedPane.paneId).catch(
-        () => {},
-      );
-  }, [selectedHostId, overviewHostId, selectedPane]);
-
-  // -- create session ---------------------------------------------------------
-  const [newSessionName, setNewSessionName] = useState("");
-  const [newSessionOpen, setNewSessionOpen] = useState(false);
-  const [creatingSession, setCreatingSession] = useState(false);
-  // Mirrors the backend's SESSION_NAME_RE (tmux forbids ":" and ".").
-  const newSessionNameValid = /^[A-Za-z0-9_@%+=-]{1,64}$/.test(
-    newSessionName.trim(),
-  );
-
-  async function createSession() {
-    if (selectedHostId === null || !newSessionNameValid || creatingSession)
-      return;
-    const name = newSessionName.trim();
-    setCreatingSession(true);
-    try {
-      await createTmuxSession(Number(selectedHostId), name);
-      if (activeHostRef.current !== selectedHostId) return;
-      toast.success(t("tmuxMonitor.sessionCreated", { name }));
-      setNewSessionOpen(false);
-      setNewSessionName("");
-      const next = new Set(expandedSessions).add(name);
-      setExpandedSessions(next);
-      expandedRestoredRef.current = true;
-      persistExpanded(selectedHostId, next);
-      void loadOverview(selectedHostId, true).catch(() => {});
-    } catch (err) {
-      const axiosErr = err as { response?: { data?: { error?: string } } };
-      toast.error(
-        axiosErr.response?.data?.error || t("tmuxMonitor.sessionCreateFailed"),
-      );
-    } finally {
-      setCreatingSession(false);
-    }
-  }
-
-  // -- split ------------------------------------------------------------------
-  // Splits the window containing a pane. If the pane is in the previewed
-  // session the new pane appears in the attached terminal immediately; the
-  // silent overview reload updates the tree.
-  const splitPane = useCallback(
-    async (paneId: string, direction: "h" | "v") => {
-      if (selectedHostId === null) return;
-      try {
-        await splitTmuxPane(Number(selectedHostId), paneId, direction);
-        if (activeHostRef.current !== selectedHostId) return;
-        void loadOverview(selectedHostId, true).catch(() => {});
-        nudgePreviewRedraw();
-      } catch {
-        toast.error(t("tmuxMonitor.splitFailed"));
-      }
-    },
-    [selectedHostId, loadOverview, nudgePreviewRedraw, t, toast],
-  );
-
-  // -- new window ---------------------------------------------------------------
-  const newWindow = useCallback(
-    async (sessionName: string) => {
-      if (selectedHostId === null) return;
-      try {
-        await createTmuxWindow(Number(selectedHostId), sessionName);
-        if (activeHostRef.current !== selectedHostId) return;
-        void loadOverview(selectedHostId, true).catch(() => {});
-        nudgePreviewRedraw();
-      } catch {
-        toast.error(t("tmuxMonitor.windowCreateFailed"));
-      }
-    },
-    [selectedHostId, loadOverview, nudgePreviewRedraw, t, toast],
-  );
-
-  // -- collapse / expand all ----------------------------------------------------
-  const anyExpanded = expandedSessions.size > 0;
-  function toggleAllSessions() {
-    if (selectedHostId === null || !overview) return;
-    const next = anyExpanded
-      ? new Set<string>()
-      : new Set(overview.sessions.map((s) => s.name));
-    setExpandedSessions(next);
-    expandedRestoredRef.current = true;
-    persistExpanded(selectedHostId, next);
-  }
-
-  // -- rename / kill ------------------------------------------------------------
-  const [renameTarget, setRenameTarget] = useState<string | null>(null);
-  const [renameDraft, setRenameDraft] = useState("");
-  const [renaming, setRenaming] = useState(false);
-  const renameDraftValid = /^[A-Za-z0-9_@%+=-]{1,64}$/.test(renameDraft.trim());
-  const [killTarget, setKillTarget] = useState<string | null>(null);
-  const [killing, setKilling] = useState(false);
-
-  async function confirmRename() {
-    if (
-      selectedHostId === null ||
-      renameTarget === null ||
-      !renameDraftValid ||
-      renaming
-    )
-      return;
-    const newName = renameDraft.trim();
-    setRenaming(true);
-    try {
-      await renameTmuxSession(Number(selectedHostId), renameTarget, newName);
-      if (activeHostRef.current !== selectedHostId) return;
-      toast.success(t("tmuxMonitor.sessionRenamed", { name: newName }));
-      if (expandedSessions.has(renameTarget)) {
-        const next = new Set(expandedSessions);
-        next.delete(renameTarget);
-        next.add(newName);
-        setExpandedSessions(next);
-        persistExpanded(selectedHostId, next);
-      }
-      // Remounts the preview (keyed by session name) so it re-attaches under
-      // the new name.
-      if (selectedPane?.sessionName === renameTarget) {
-        setSelectedPane({ ...selectedPane, sessionName: newName });
-      }
-      setRenameTarget(null);
-      void loadOverview(selectedHostId, true).catch(() => {});
-    } catch (err) {
-      const axiosErr = err as { response?: { data?: { error?: string } } };
-      toast.error(
-        axiosErr.response?.data?.error || t("tmuxMonitor.sessionRenameFailed"),
-      );
-    } finally {
-      setRenaming(false);
-    }
-  }
-
-  async function confirmKill() {
-    if (selectedHostId === null || killTarget === null || killing) return;
-    setKilling(true);
-    try {
-      await killTmuxSession(Number(selectedHostId), killTarget);
-      if (activeHostRef.current !== selectedHostId) return;
-      toast.success(t("tmuxMonitor.sessionKilled", { name: killTarget }));
-      if (selectedPane?.sessionName === killTarget) setSelectedPane(null);
-      if (expandedSessions.has(killTarget)) {
-        const next = new Set(expandedSessions);
-        next.delete(killTarget);
-        setExpandedSessions(next);
-        persistExpanded(selectedHostId, next);
-      }
-      setKillTarget(null);
-      void loadOverview(selectedHostId, true).catch(() => {});
-    } catch (err) {
-      const axiosErr = err as { response?: { data?: { error?: string } } };
-      toast.error(
-        axiosErr.response?.data?.error || t("tmuxMonitor.sessionKillFailed"),
-      );
-    } finally {
-      setKilling(false);
-    }
-  }
-
-  // After killing the selected pane/window, keep the preview on the same
-  // session by selecting its now-active pane (tmux focuses a sibling
-  // automatically); only fall back to the empty state when the whole session
-  // died with it.
-  const selectSurvivor = useCallback(
-    (data: TmuxOverview, sessionName: string) => {
-      const session = data.sessions.find((s) => s.name === sessionName);
-      const win = session?.windows.find((w) => w.active) ?? session?.windows[0];
-      const pane = win?.panes.find((p) => p.active) ?? win?.panes[0];
-      if (session && win && pane) {
-        setSelectedPane({
-          paneId: pane.id,
-          sessionName: session.name,
-          windowIndex: win.index,
-        });
-      } else {
-        setSelectedPane(null);
-      }
-    },
-    [],
-  );
-
-  // -- kill window ------------------------------------------------------------
-  const [killWindowTarget, setKillWindowTarget] = useState<{
-    sessionName: string;
-    windowIndex: number;
-  } | null>(null);
-  const [killingWindow, setKillingWindow] = useState(false);
-
-  async function confirmKillWindow() {
-    if (selectedHostId === null || killWindowTarget === null || killingWindow)
-      return;
-    setKillingWindow(true);
-    try {
-      await killTmuxWindow(
-        Number(selectedHostId),
-        killWindowTarget.sessionName,
-        killWindowTarget.windowIndex,
-      );
-      if (activeHostRef.current !== selectedHostId) return;
-      const wasViewing =
-        selectedPane?.sessionName === killWindowTarget.sessionName &&
-        selectedPane?.windowIndex === killWindowTarget.windowIndex;
-      setKillWindowTarget(null);
-      const data = await getTmuxOverview(Number(selectedHostId));
-      if (activeHostRef.current !== selectedHostId) return;
-      setOverview(data);
-      if (wasViewing) selectSurvivor(data, killWindowTarget.sessionName);
-      nudgePreviewRedraw();
-    } catch (err) {
-      const axiosErr = err as { response?: { data?: { error?: string } } };
-      toast.error(
-        axiosErr.response?.data?.error || t("tmuxMonitor.windowKillFailed"),
-      );
-    } finally {
-      setKillingWindow(false);
-    }
-  }
-
-  // -- kill pane ------------------------------------------------------------
-  const [killPaneTarget, setKillPaneTarget] = useState<string | null>(null);
-  const [killingPane, setKillingPane] = useState(false);
-
-  async function confirmKillPane() {
-    if (selectedHostId === null || killPaneTarget === null || killingPane)
-      return;
-    setKillingPane(true);
-    try {
-      await killTmuxPane(Number(selectedHostId), killPaneTarget);
-      if (activeHostRef.current !== selectedHostId) return;
-      const viewedSession =
-        selectedPane?.paneId === killPaneTarget
-          ? selectedPane.sessionName
-          : null;
-      setKillPaneTarget(null);
-      const data = await getTmuxOverview(Number(selectedHostId));
-      if (activeHostRef.current !== selectedHostId) return;
-      setOverview(data);
-      if (viewedSession) selectSurvivor(data, viewedSession);
-      nudgePreviewRedraw();
-    } catch (err) {
-      const axiosErr = err as { response?: { data?: { error?: string } } };
-      toast.error(
-        axiosErr.response?.data?.error || t("tmuxMonitor.paneKillFailed"),
-      );
-    } finally {
-      setKillingPane(false);
-    }
-  }
-
-  // -- tags -----------------------------------------------------------------
-  const [tagsTarget, setTagsTarget] = useState<string | null>(null);
-  const [tagsDraft, setTagsDraft] = useState("");
-  const [savingTags, setSavingTags] = useState(false);
-
-  function openTagsEditor(sessionName: string) {
-    const session = overview?.sessions.find((s) => s.name === sessionName);
-    setTagsDraft(session?.tags.join(", ") ?? "");
-    setTagsTarget(sessionName);
-  }
-
-  async function confirmTags() {
-    if (selectedHostId === null || tagsTarget === null || savingTags) return;
-    const tags = tagsDraft
-      .split(",")
-      .map((s) => s.trim())
-      .filter(Boolean);
-    setSavingTags(true);
-    try {
-      await setTmuxSessionTags(Number(selectedHostId), tagsTarget, tags);
-      if (activeHostRef.current !== selectedHostId) return;
-      toast.success(t("tmuxMonitor.tagsSaved"));
-      setTagsTarget(null);
-      void loadOverview(selectedHostId, true).catch(() => {});
-    } catch {
-      toast.error(t("tmuxMonitor.tagsSaveFailed"));
-    } finally {
-      setSavingTags(false);
-    }
-  }
-
-  // Attach inside the monitor: expand the session and select its active pane
-  // so the embedded terminal (a real tmux attach) shows it.
-  const attachInline = useCallback(
-    (sessionName: string) => {
-      const session = overview?.sessions.find((s) => s.name === sessionName);
-      if (!session) return;
-      const activeWindow =
-        session.windows.find((w) => w.active) ?? session.windows[0];
-      const activePane =
-        activeWindow?.panes.find((p) => p.active) ?? activeWindow?.panes[0];
-      if (!activePane || !activeWindow) return;
-      if (!expandedSessions.has(sessionName)) {
-        const next = new Set(expandedSessions).add(sessionName);
-        setExpandedSessions(next);
-        expandedRestoredRef.current = true;
-        if (selectedHostId !== null) persistExpanded(selectedHostId, next);
-      }
-      selectPane({
-        paneId: activePane.id,
-        sessionName,
-        windowIndex: activeWindow.index,
-      });
-    },
-    [overview, expandedSessions, selectedHostId, persistExpanded, selectPane],
-  );
-
-  function openTerminal(sessionName?: string) {
-    if (selectedHostId === null) return;
-    const session = sessionName ?? selectedPane?.sessionName;
-    // window.open is denied by Electron's window-open handler (internal
-    // file:// URLs never reach the browser), so the desktop app attaches in
-    // the monitor's own terminal instead.
-    if (isElectron()) {
-      if (session) attachInline(session);
-      return;
-    }
-    const params = new URLSearchParams({
-      view: "terminal",
-      hostId: String(selectedHostId),
-    });
-    if (session) params.set("tmuxSession", session);
-    window.open(`${window.location.pathname}?${params.toString()}`, "_blank");
-  }
-
-  const metricsByPane = useMemo(() => {
-    const map = new Map<string, TmuxPaneMetrics>();
-    for (const m of metrics) map.set(m.paneId, m);
-    return map;
-  }, [metrics]);
-
-  const metricsBySession = useMemo(() => {
-    const map = new Map<string, SessionMetricsAgg>();
-    for (const m of metrics) {
-      const agg = map.get(m.sessionName) || { cpu: 0, memKb: 0, gpuMb: 0 };
-      agg.cpu += m.cpuPercent;
-      agg.memKb += m.memRssKb;
-      agg.gpuMb += m.gpuMemMb;
-      map.set(m.sessionName, agg);
-    }
-    return map;
-  }, [metrics]);
-
-  const selectedHost: PluginHostRecord | undefined = hosts.find(
-    (h) => String(h.id) === String(selectedHostId),
-  );
-  const hostLabel = selectedHost
-    ? selectedHost.name ||
-      `${selectedHost.username as string}@${selectedHost.ip}`
-    : "";
-  const selectedPaneMetrics = selectedPane
-    ? metricsByPane.get(selectedPane.paneId)
-    : undefined;
-
-  function executeTreeAction(action: TreeAction) {
-    if (
-      action.type === "pane" &&
-      !overview?.sessions.some(
-        (session) =>
-          session.name === action.pane.sessionName &&
-          session.windows.some(
-            (win) =>
-              win.index === action.pane.windowIndex &&
-              win.panes.some((pane) => pane.id === action.pane.paneId),
-          ),
-      )
-    )
-      return;
-    switch (action.type) {
-      case "pane":
-        selectPane(action.pane);
-        break;
-      case "attach":
-        attachInline(action.session);
-        break;
-      case "tags":
-        openTagsEditor(action.session);
-        break;
-      case "rename":
-        setRenameDraft(action.session);
-        setRenameTarget(action.session);
-        break;
-      case "killSession":
-        setKillTarget(action.session);
-        break;
-      case "newWindow":
-        void newWindow(action.session);
-        break;
-      case "killPane":
-        setKillPaneTarget(action.paneId);
-        break;
-      case "split":
-        void splitPane(action.paneId, action.direction);
-        break;
-      case "killWindow":
-        setKillWindowTarget({
-          sessionName: action.session,
-          windowIndex: action.index,
-        });
-        break;
-    }
-  }
-  function dispatchTreeAction(hostId: string | number, action: TreeAction) {
-    if (hostId === selectedHostId && overviewHostId === hostId)
-      executeTreeAction(action);
-    else {
-      setPendingAction({ hostId, action });
-      setSelectedHostId(hostId);
-    }
-  }
-  const executeTreeActionRef = useRef(executeTreeAction);
-  executeTreeActionRef.current = executeTreeAction;
-  useEffect(() => {
-    if (
-      !pendingAction ||
-      pendingAction.hostId !== selectedHostId ||
-      overviewHostId !== selectedHostId
-    )
-      return;
-    setPendingAction(null);
-    executeTreeActionRef.current(pendingAction.action);
-  }, [pendingAction, selectedHostId, overviewHostId]);
-  useEffect(() => {
-    setPendingAction((pending) =>
-      pending?.hostId === selectedHostId ? pending : null,
-    );
-    setRenameTarget(null);
-    setKillTarget(null);
-    setTagsTarget(null);
-    setKillPaneTarget(null);
-    setKillWindowTarget(null);
-    setNewSessionOpen(false);
-  }, [selectedHostId]);
-
-  useEffect(() => {
-    if (selectedHostId !== null && overviewHostId === selectedHostId)
-      saveMonitorValue(`pane-${selectedHostId}`, selectedPane);
-  }, [selectedHostId, overviewHostId, selectedPane]);
-
-  const filteredHosts =
-    scope === "single"
-      ? hosts.filter((h) => h.id === selectedHostId)
-      : hosts.filter((h) =>
-          `${h.name ?? ""} ${h.ip ?? ""}`
-            .toLowerCase()
-            .includes(hostFilter.toLowerCase().trim()),
-        );
-
-  function backgroundTree(
-    hostId: string | number,
-    data: TmuxOverview,
-    values: TmuxPaneMetrics[],
-  ) {
-    const expanded =
-      expandedByHost[String(hostId)] ??
-      readExpanded(hostId) ??
-      new Set(data.sessions.map((session) => session.name));
-    const byPane = new Map(values.map((m) => [m.paneId, m]));
-    const bySession = new Map<string, SessionMetricsAgg>();
-    for (const m of values) {
-      const agg = bySession.get(m.sessionName) ?? {
-        cpu: 0,
-        memKb: 0,
-        gpuMb: 0,
-      };
-      agg.cpu += m.cpuPercent;
-      agg.memKb += m.memRssKb;
-      agg.gpuMb += m.gpuMemMb;
-      bySession.set(m.sessionName, agg);
-    }
-    const run = (action: TreeAction) => dispatchTreeAction(hostId, action);
-    return (
-      <SessionTree
-        sessions={data.sessions}
-        expandedSessions={expanded}
-        onToggleSession={(name) => {
-          const next = new Set(expanded);
-          if (next.has(name)) next.delete(name);
-          else next.add(name);
-          persistExpanded(hostId, next);
-        }}
-        selectedPaneId={null}
-        onSelectPane={(pane) => run({ type: "pane", pane })}
-        metricsByPane={byPane}
-        metricsBySession={bySession}
-        onEditTags={(session) => run({ type: "tags", session })}
-        onAttachSession={(session) => run({ type: "attach", session })}
-        onSelectSession={(session) => run({ type: "attach", session })}
-        onNewWindow={(session) => run({ type: "newWindow", session })}
-        onRenameSession={(session) => run({ type: "rename", session })}
-        onKillSession={(session) => run({ type: "killSession", session })}
-        onKillPane={(paneId) => run({ type: "killPane", paneId })}
-        onSplitPane={(paneId, direction) =>
-          run({ type: "split", paneId, direction })
-        }
-        onKillWindow={(session, index) =>
-          run({ type: "killWindow", session, index })
-        }
-        compact={treeWidth < 280}
-        now={now}
-      />
-    );
-  }
-
-  return (
-    <div className="flex h-full w-full bg-background text-foreground">
-      {/* Left rail: hosts + session tree. Resizable via the right-edge
-          handle; double-click resets to the default width. */}
-      <div
-        className="relative flex shrink-0 flex-col border-r border-border bg-card"
-        style={{ width: treeWidth }}
-      >
-        {/* VSCode tmux-manager style header: title + new-session / refresh */}
-        <div className="flex items-center gap-2 border-b border-border px-3 py-2">
-          <Layers className="size-4" />
-          <span className="text-sm font-semibold">
-            {t("tmuxMonitor.title")}
-          </span>
-          <span className="ml-auto flex items-center gap-2">
-            <Popover
-              open={newSessionOpen}
-              onOpenChange={(open) => {
-                setNewSessionOpen(open);
-                if (open) setNewSessionName("");
-              }}
-            >
-              <PopoverTrigger asChild>
-                <button
-                  className="text-muted-foreground hover:text-foreground disabled:opacity-40"
-                  disabled={selectedHostId === null || !overview?.available}
-                  title={t("tmuxMonitor.newSession")}
-                  aria-label={t("tmuxMonitor.newSession")}
-                >
-                  <Plus className="size-4" />
-                </button>
-              </PopoverTrigger>
-              <PopoverContent
-                className="w-64 rounded-none border-0 p-2 ring-1 ring-border"
-                align="start"
-              >
-                <p className="mb-1 text-xs text-muted-foreground">
-                  {t("tmuxMonitor.newSessionHint")}
-                </p>
-                <div className="flex gap-1">
-                  <Input
-                    className="h-7 text-xs"
-                    value={newSessionName}
-                    placeholder={t("tmuxMonitor.newSessionPlaceholder")}
-                    autoFocus
-                    onChange={(e) => setNewSessionName(e.target.value)}
-                    onKeyDown={(e) => {
-                      if (e.key === "Enter") createSession();
-                    }}
-                  />
-                  <Button
-                    size="sm"
-                    className="h-7 px-2 text-xs"
-                    disabled={!newSessionNameValid || creatingSession}
-                    onClick={createSession}
-                  >
-                    {t("tmuxMonitor.create")}
-                  </Button>
-                </div>
-              </PopoverContent>
-            </Popover>
-            <button
-              className="text-muted-foreground hover:text-foreground disabled:opacity-40"
-              disabled={!overview?.available}
-              title={
-                anyExpanded
-                  ? t("tmuxMonitor.collapseAll")
-                  : t("tmuxMonitor.expandAll")
-              }
-              aria-label={
-                anyExpanded
-                  ? t("tmuxMonitor.collapseAll")
-                  : t("tmuxMonitor.expandAll")
-              }
-              onClick={toggleAllSessions}
-            >
-              {anyExpanded ? (
-                <ChevronsDownUp className="size-3.5" />
-              ) : (
-                <ChevronsUpDown className="size-3.5" />
-              )}
-            </button>
-            <button
-              className="text-muted-foreground hover:text-foreground disabled:opacity-40"
-              disabled={selectedHostId === null || overviewLoading}
-              title={t("tmuxMonitor.refresh")}
-              aria-label={t("tmuxMonitor.refresh")}
-              onClick={manualRefresh}
-            >
-              <RefreshCw
-                className={`size-3.5 ${overviewLoading || refreshing ? "animate-spin" : ""}`}
-              />
-            </button>
-            <a
-              href="https://docs.termix.site/features/terminal/tmux"
-              target="_blank"
-              rel="noreferrer"
-              className="text-muted-foreground hover:text-foreground"
-              title={t("hosts.docsLink")}
-              aria-label={t("hosts.docsLink")}
-            >
-              <ExternalLink className="size-3.5" />
-            </a>
-          </span>
-        </div>
-        <div className="space-y-2 border-b border-border p-2">
-          <select
-            className="h-8 w-full border border-border bg-background px-2 text-sm"
-            aria-label={t("tmuxMonitor.hostScope")}
-            value={scope}
-            onChange={(e) => {
-              const value = e.target.value === "single" ? "single" : "all";
-              setScope(value);
-              saveMonitorValue("scope", value);
-            }}
-          >
-            <option value="all">{t("tmuxMonitor.allHosts")}</option>
-            <option value="single">{t("tmuxMonitor.singleHost")}</option>
-          </select>
-          {scope === "all" ? (
-            <Input
-              aria-label={t("tmuxMonitor.filterHosts")}
-              placeholder={t("tmuxMonitor.filterHosts")}
-              value={hostFilter}
-              onChange={(e) => {
-                setHostFilter(e.target.value);
-                saveMonitorValue("filter", e.target.value);
-              }}
-              className="h-8"
-            />
-          ) : (
-            <select
-              className="h-8 w-full border border-border bg-background px-2 text-sm"
-              aria-label={t("tmuxMonitor.selectHost")}
-              value={selectedHostId ?? ""}
-              onChange={(e) => {
-                setPendingAction(null);
-                setSelectedHostId(
-                  hosts.find((h) => String(h.id) === e.target.value)?.id ??
-                    null,
-                );
-              }}
-            >
-              {hosts.map((host) => (
-                <option key={host.id} value={host.id}>
-                  {host.name || host.ip}
-                </option>
-              ))}
-            </select>
-          )}
-        </div>
-        {/* Radix wraps the viewport content in a display:table div sized to
-            the widest row, so one long pane path would stretch every row and
-            clip the right-aligned actions; force block so rows shrink and
-            truncate instead. */}
-        <ScrollArea className="flex-1 [&_[data-slot=scroll-area-viewport]>div]:!block">
-          <div className="p-2">
-            {hostsLoaded && hosts.length === 0 && (
-              <div className="px-2 py-4">
-                <p className="text-sm text-muted-foreground">
-                  {t("tmuxMonitor.noHosts")}
-                </p>
-                <p className="mt-1 text-xs text-muted-foreground/70">
-                  {t("tmuxMonitor.noHostsHint")}
-                </p>
-              </div>
-            )}
-            {filteredHosts.map((host) => {
-              const active = host.id === selectedHostId;
-              const collapsed =
-                scope === "all" && collapsedHosts.has(String(host.id));
-              return (
-                <section
-                  key={host.id}
-                  aria-label={host.name || String(host.ip)}
-                >
-                  <div
-                    className={`flex items-center gap-1 px-1 py-2 ${active ? "bg-accent-brand/10" : ""}`}
-                  >
-                    {scope === "all" && (
-                      <button
-                        aria-label={t("tmuxMonitor.toggleHost", {
-                          host: host.name || host.ip,
-                        })}
-                        aria-expanded={!collapsed}
-                        onClick={() => {
-                          const next = new Set(collapsedHosts);
-                          if (collapsed) next.delete(String(host.id));
-                          else next.add(String(host.id));
-                          setCollapsedHosts(next);
-                          saveMonitorValue("collapsed-hosts", [...next]);
-                        }}
-                      >
-                        {collapsed ? (
-                          <ChevronRight className="size-4" />
-                        ) : (
-                          <ChevronDown className="size-4" />
-                        )}
-                      </button>
-                    )}
-                    <button
-                      className="min-w-0 flex-1 truncate text-left text-sm font-medium"
-                      aria-pressed={active}
-                      onClick={() => {
-                        setPendingAction(null);
-                        setSelectedHostId(host.id);
-                      }}
-                    >
-                      {host.name || host.ip}
-                    </button>
-                  </div>
-                  {!collapsed &&
-                    (active ? (
-                      <>
-                        {overviewLoading && (
-                          <div className="space-y-3 px-2 py-2">
-                            {[0, 1, 2].map((i) => (
-                              <div key={i} className="space-y-1.5">
-                                <Skeleton className="h-5 w-full" />
-                                <Skeleton className="ml-6 h-3.5 w-3/4" />
-                                <Skeleton className="ml-6 h-3.5 w-2/3" />
-                              </div>
-                            ))}
-                          </div>
-                        )}
-                        {overviewError && (
-                          <div className="space-y-2 px-2 py-4">
-                            <p className="text-sm text-destructive">
-                              {overviewError}
-                            </p>
-                            <Button
-                              variant="outline"
-                              size="sm"
-                              className="h-7 text-xs"
-                              onClick={() =>
-                                selectedHostId !== null &&
-                                loadOverview(selectedHostId)
-                              }
-                            >
-                              <RefreshCw className="mr-1 size-3" />
-                              {t("tmuxMonitor.retry")}
-                            </Button>
-                          </div>
-                        )}
-                        {overview && !overview.available && (
-                          <div className="px-2 py-4">
-                            <p className="text-sm text-muted-foreground">
-                              {t("tmuxMonitor.tmuxUnavailable")}
-                            </p>
-                            <p className="mt-1 text-xs text-muted-foreground/70">
-                              {t("tmuxMonitor.tmuxInstallHint")}{" "}
-                              <code className="font-mono">
-                                sudo apt install tmux
-                              </code>
-                            </p>
-                          </div>
-                        )}
-                        {overview?.available &&
-                          overview.sessions.length === 0 && (
-                            <p className="px-2 py-4 text-sm text-muted-foreground">
-                              {t("tmuxMonitor.noSessions")}
-                            </p>
-                          )}
-                        {overview?.available &&
-                          overviewHostId === selectedHostId && (
-                            <SessionTree
-                              sessions={overview.sessions}
-                              expandedSessions={expandedSessions}
-                              onToggleSession={toggleSession}
-                              selectedPaneId={selectedPane?.paneId ?? null}
-                              onSelectPane={selectPane}
-                              metricsByPane={metricsByPane}
-                              metricsBySession={metricsBySession}
-                              onEditTags={openTagsEditor}
-                              onAttachSession={openTerminal}
-                              onSelectSession={attachInline}
-                              onNewWindow={newWindow}
-                              onRenameSession={(name) => {
-                                setRenameDraft(name);
-                                setRenameTarget(name);
-                              }}
-                              onKillSession={setKillTarget}
-                              onKillPane={setKillPaneTarget}
-                              onSplitPane={splitPane}
-                              onKillWindow={(sessionName, windowIndex) =>
-                                setKillWindowTarget({
-                                  sessionName,
-                                  windowIndex,
-                                })
-                              }
-                              compact={treeWidth < 280}
-                              now={now}
-                            />
-                          )}
-                      </>
-                    ) : (
-                      isVisible &&
-                      selectedHostId !== null && (
-                        <HostOverview hostId={Number(host.id)}>
-                          {(data, values) =>
-                            backgroundTree(host.id, data, values)
-                          }
-                        </HostOverview>
-                      )
-                    ))}
-                </section>
-              );
-            })}
-            {hosts.length > 0 && filteredHosts.length === 0 && (
-              <p className="p-2 text-xs text-muted-foreground">
-                {t("tmuxMonitor.noMatchingHosts")}
-              </p>
-            )}
-          </div>
-        </ScrollArea>
-
-        <div
-          onMouseDown={onTreeResizeMouseDown}
-          onDoubleClick={() => setTreeWidth(TREE_WIDTH_DEFAULT)}
-          title={t("tmuxMonitor.resizeTree")}
-          className={`absolute bottom-0 right-0 top-0 z-30 w-1 cursor-col-resize transition-colors ${treeDragging ? "bg-accent-brand/60" : "hover:bg-accent-brand/40"}`}
-        />
-      </div>
-
-      {/* Main area */}
-      <div className="flex min-w-0 flex-1 flex-col">
-        {/* Toolbar */}
-        <div className="flex items-center gap-2 border-b border-border px-3 py-2">
-          <Server className="size-4 shrink-0 text-muted-foreground" />
-          <span className="truncate text-sm">
-            {selectedHost ? hostLabel : t("tmuxMonitor.noHostSelected")}
-          </span>
-          <div className="ml-auto flex items-center gap-2">
-            <div className="relative">
-              <Search className="absolute left-2 top-1/2 size-3.5 -translate-y-1/2 text-muted-foreground" />
-              <Input
-                ref={searchInputRef}
-                className="h-8 w-64 pl-7 text-sm"
-                placeholder={t("tmuxMonitor.searchPlaceholder")}
-                value={searchQuery}
-                disabled={!overview?.available}
-                title={
-                  overview && !overview.available
-                    ? t("tmuxMonitor.tmuxUnavailable")
-                    : undefined
-                }
-                onChange={(e) => setSearchQuery(e.target.value)}
-                onKeyDown={(e) => {
-                  if (e.key === "Enter") runSearch();
-                }}
-              />
-            </div>
-            <Button
-              variant="outline"
-              size="sm"
-              className="h-8"
-              disabled={selectedHostId === null || overviewLoading}
-              title={t("tmuxMonitor.refresh")}
-              aria-label={t("tmuxMonitor.refresh")}
-              onClick={manualRefresh}
-            >
-              <RefreshCw
-                className={`size-3.5 ${overviewLoading || refreshing ? "animate-spin" : ""}`}
-              />
-            </Button>
-            <Button
-              size="sm"
-              className="h-8"
-              disabled={selectedHostId === null}
-              title={
-                selectedHost
-                  ? selectedPane
-                    ? t("tmuxMonitor.attachTooltipPane", {
-                        host: hostLabel,
-                        session: selectedPane.sessionName,
-                      })
-                    : t("tmuxMonitor.attachTooltip", { host: hostLabel })
-                  : undefined
-              }
-              onClick={() => openTerminal()}
-            >
-              <SquareTerminal className="mr-1 size-3.5" />
-              {t("tmuxMonitor.attach")}
-            </Button>
-          </div>
-        </div>
-
-        {/* Search results */}
-        {searchResults !== null && (
-          <SearchResults
-            results={searchResults}
-            searching={searching}
-            query={searchedQuery}
-            limits={searchLimits}
-            onSelect={handleSearchSelect}
-            onClose={() => setSearchResults(null)}
-          />
-        )}
-
-        {/* Pane preview */}
-        <div className="flex min-h-0 flex-1 flex-col">
-          {selectedPane && selectedHost && overviewHostId === selectedHostId ? (
-            <PanePreview
-              key={`${selectedHost.id}:${selectedPane.sessionName}`}
-              host={selectedHost}
-              pane={selectedPane}
-              metrics={selectedPaneMetrics}
-              terminalRef={previewTermRef}
-              onSplit={(direction) => splitPane(selectedPane.paneId, direction)}
-              onKillPane={() => setKillPaneTarget(selectedPane.paneId)}
-              onClose={() => {
-                setSelectedPane(null);
-                saveMonitorValue(`pane-${selectedHostId}`, null);
-              }}
-            />
-          ) : hostsLoaded && hosts.length === 0 ? (
-            <div className="flex flex-1 items-center justify-center">
-              <div className="max-w-sm text-center text-muted-foreground">
-                <Server className="mx-auto mb-2 size-8 opacity-50" />
-                <p className="text-sm">{t("tmuxMonitor.noHosts")}</p>
-                <p className="mt-1 text-xs text-muted-foreground/70">
-                  {t("tmuxMonitor.noHostsHint")}
-                </p>
-              </div>
-            </div>
-          ) : (
-            <div className="flex flex-1 items-center justify-center">
-              <div className="text-center text-muted-foreground">
-                <MonitorPlay className="mx-auto mb-2 size-8 opacity-50" />
-                <p className="text-sm">{t("tmuxMonitor.selectPaneHint")}</p>
-              </div>
-            </div>
-          )}
-        </div>
-      </div>
-
-      {/* Rename session dialog */}
-      <Dialog
-        open={renameTarget !== null}
-        onOpenChange={(open) => {
-          if (!open) setRenameTarget(null);
-        }}
-      >
-        <DialogContent className="sm:max-w-sm">
-          <DialogHeader>
-            <DialogTitle>
-              {t("tmuxMonitor.renameSessionTitle", { name: renameTarget })}
-            </DialogTitle>
-          </DialogHeader>
-          <Input
-            value={renameDraft}
-            placeholder={t("tmuxMonitor.newSessionPlaceholder")}
-            autoFocus
-            onChange={(e) => setRenameDraft(e.target.value)}
-            onKeyDown={(e) => {
-              if (e.key === "Enter") confirmRename();
-            }}
-          />
-          <p className="text-xs text-muted-foreground">
-            {t("tmuxMonitor.newSessionHint")}
-          </p>
-          <DialogFooter>
-            <Button variant="outline" onClick={() => setRenameTarget(null)}>
-              {t("common.cancel")}
-            </Button>
-            <Button
-              disabled={!renameDraftValid || renaming}
-              onClick={confirmRename}
-            >
-              {t("tmuxMonitor.rename")}
-            </Button>
-          </DialogFooter>
-        </DialogContent>
-      </Dialog>
-
-      {/* Edit tags dialog */}
-      <Dialog
-        open={tagsTarget !== null}
-        onOpenChange={(open) => {
-          if (!open) setTagsTarget(null);
-        }}
-      >
-        <DialogContent className="sm:max-w-sm">
-          <DialogHeader>
-            <DialogTitle>
-              {t("tmuxMonitor.editTagsTitle", { name: tagsTarget })}
-            </DialogTitle>
-          </DialogHeader>
-          <Input
-            value={tagsDraft}
-            placeholder="YOLO, lab, training"
-            autoFocus
-            onChange={(e) => setTagsDraft(e.target.value)}
-            onKeyDown={(e) => {
-              if (e.key === "Enter") confirmTags();
-            }}
-          />
-          <p className="text-xs text-muted-foreground">
-            {t("tmuxMonitor.tagsHint")}
-          </p>
-          <DialogFooter>
-            <Button variant="outline" onClick={() => setTagsTarget(null)}>
-              {t("common.cancel")}
-            </Button>
-            <Button disabled={savingTags} onClick={confirmTags}>
-              {t("common.save")}
-            </Button>
-          </DialogFooter>
-        </DialogContent>
-      </Dialog>
-
-      {/* Kill window confirmation */}
-      <Dialog
-        open={killWindowTarget !== null}
-        onOpenChange={(open) => {
-          if (!open) setKillWindowTarget(null);
-        }}
-      >
-        <DialogContent className="sm:max-w-sm">
-          <DialogHeader>
-            <DialogTitle>
-              {t("tmuxMonitor.killWindowTitle", {
-                index: killWindowTarget?.windowIndex,
-                session: killWindowTarget?.sessionName,
-              })}
-            </DialogTitle>
-          </DialogHeader>
-          <p className="text-xs text-muted-foreground">
-            {t("tmuxMonitor.killWindowBody")}
-          </p>
-          <DialogFooter>
-            <Button variant="outline" onClick={() => setKillWindowTarget(null)}>
-              {t("common.cancel")}
-            </Button>
-            <Button
-              variant="destructive"
-              disabled={killingWindow}
-              onClick={confirmKillWindow}
-            >
-              {t("tmuxMonitor.kill")}
-            </Button>
-          </DialogFooter>
-        </DialogContent>
-      </Dialog>
-
-      {/* Kill pane confirmation */}
-      <Dialog
-        open={killPaneTarget !== null}
-        onOpenChange={(open) => {
-          if (!open) setKillPaneTarget(null);
-        }}
-      >
-        <DialogContent className="sm:max-w-sm">
-          <DialogHeader>
-            <DialogTitle>
-              {t("tmuxMonitor.killPaneTitle", { id: killPaneTarget })}
-            </DialogTitle>
-          </DialogHeader>
-          <p className="text-xs text-muted-foreground">
-            {t("tmuxMonitor.killPaneBody")}
-          </p>
-          <DialogFooter>
-            <Button variant="outline" onClick={() => setKillPaneTarget(null)}>
-              {t("common.cancel")}
-            </Button>
-            <Button
-              variant="destructive"
-              disabled={killingPane}
-              onClick={confirmKillPane}
-            >
-              {t("tmuxMonitor.kill")}
-            </Button>
-          </DialogFooter>
-        </DialogContent>
-      </Dialog>
-
-      {/* Kill session confirmation */}
-      <Dialog
-        open={killTarget !== null}
-        onOpenChange={(open) => {
-          if (!open) setKillTarget(null);
-        }}
-      >
-        <DialogContent className="sm:max-w-sm">
-          <DialogHeader>
-            <DialogTitle>
-              {t("tmuxMonitor.killSessionTitle", { name: killTarget })}
-            </DialogTitle>
-          </DialogHeader>
-          <p className="text-xs text-muted-foreground">
-            {t("tmuxMonitor.killSessionBody")}
-          </p>
-          <DialogFooter>
-            <Button variant="outline" onClick={() => setKillTarget(null)}>
-              {t("common.cancel")}
-            </Button>
-            <Button
-              variant="destructive"
-              disabled={killing}
-              onClick={confirmKill}
-            >
-              {t("tmuxMonitor.kill")}
-            </Button>
-          </DialogFooter>
-        </DialogContent>
-      </Dialog>
-    </div>
-  );
-}
-
-export default TmuxMonitor;
diff --git a/plugins/tmux-monitor/src/frontend/TmuxMonitorApp.tsx b/plugins/tmux-monitor/src/frontend/TmuxMonitorApp.tsx
deleted file mode 100644
index cfb06dd2c..000000000
--- a/plugins/tmux-monitor/src/frontend/TmuxMonitorApp.tsx
+++ /dev/null
@@ -1,16 +0,0 @@
-import type { StandaloneViewProps } from "@termix/plugin-sdk/frontend";
-import { TmuxMonitor } from "./TmuxMonitor";
-
-/** `?view=tmux_monitor` full-screen links. */
-function TmuxMonitorApp({ hostId }: StandaloneViewProps) {
-  const parsed = hostId ? parseInt(hostId, 10) : NaN;
-  return (
-    <div className="h-screen w-screen overflow-hidden">
-      <TmuxMonitor
-        initialHostId={Number.isFinite(parsed) ? parsed : undefined}
-      />
-    </div>
-  );
-}
-
-export default TmuxMonitorApp;
diff --git a/plugins/tmux-monitor/src/frontend/api.ts b/plugins/tmux-monitor/src/frontend/api.ts
deleted file mode 100644
index 7c5561744..000000000
--- a/plugins/tmux-monitor/src/frontend/api.ts
+++ /dev/null
@@ -1,185 +0,0 @@
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-
-let client: PluginApiClient | null = null;
-
-/** Set from activate with app.api, cleared on deactivate. */
-export function setTmuxMonitorApi(api: PluginApiClient | null): void {
-  client = api;
-}
-
-function api(): PluginApiClient {
-  if (!client) throw new Error("The Tmux Monitor plugin is not active");
-  return client;
-}
-
-export interface TmuxPane {
-  id: string;
-  index: number;
-  pid: number;
-  active: boolean;
-  width: number;
-  height: number;
-  command: string;
-  path: string;
-  title: string;
-}
-
-export interface TmuxWindow {
-  index: number;
-  name: string;
-  active: boolean;
-  panes: TmuxPane[];
-}
-
-export interface TmuxSessionOverview {
-  name: string;
-  created: number;
-  lastActivity: number;
-  attachedClients: number;
-  windows: TmuxWindow[];
-  tags: string[];
-}
-
-export interface TmuxOverview {
-  available: boolean;
-  sessions: TmuxSessionOverview[];
-}
-
-export interface TmuxSearchMatch {
-  paneId: string;
-  sessionName: string;
-  windowIndex: number;
-  line: number;
-  text: string;
-}
-
-export interface TmuxPaneMetrics {
-  paneId: string;
-  sessionName: string;
-  pid: number;
-  processCount: number;
-  cpuPercent: number;
-  memRssKb: number;
-  gpuMemMb: number;
-  topCommand: string | null;
-}
-
-export async function getTmuxOverview(hostId: number): Promise<TmuxOverview> {
-  const response = await api().get<TmuxOverview>(`/${hostId}/overview`);
-  return response.data;
-}
-
-/** Select a pane's window+pane on the server so the attached terminal
- * (and any other attached client) switches to it. */
-export async function focusTmuxPane(
-  hostId: number,
-  paneId: string,
-): Promise<void> {
-  await api().post(`/${hostId}/focus`, { paneId });
-}
-
-/** Create a new detached session on the host. Starts the tmux server if
- * none is running yet. */
-export async function createTmuxSession(
-  hostId: number,
-  name: string,
-): Promise<void> {
-  await api().post(`/${hostId}/sessions`, { name });
-}
-
-/** Create a new window in an existing session. */
-export async function createTmuxWindow(
-  hostId: number,
-  sessionName: string,
-): Promise<void> {
-  await api().post(`/${hostId}/windows`, { sessionName });
-}
-
-/** Rename a session. Saved tags follow the session to its new name. */
-export async function renameTmuxSession(
-  hostId: number,
-  sessionName: string,
-  newName: string,
-): Promise<void> {
-  await api().post(`/${hostId}/rename`, { sessionName, newName });
-}
-
-/** Kill a session (terminates all of its windows and processes). */
-export async function killTmuxSession(
-  hostId: number,
-  sessionName: string,
-): Promise<void> {
-  await api().post(`/${hostId}/kill`, { sessionName });
-}
-
-/** Kill a window and every pane in it. */
-export async function killTmuxWindow(
-  hostId: number,
-  sessionName: string,
-  windowIndex: number,
-): Promise<void> {
-  await api().post(`/${hostId}/kill-window`, { sessionName, windowIndex });
-}
-
-/** Kill a single pane (last pane of a window closes the window). */
-export async function killTmuxPane(
-  hostId: number,
-  paneId: string,
-): Promise<void> {
-  await api().post(`/${hostId}/kill-pane`, { paneId });
-}
-
-/** Split the window containing a pane: "h" adds a pane to the right,
- * "v" below (tmux -h/-v semantics). */
-export async function splitTmuxPane(
-  hostId: number,
-  paneId: string,
-  direction: "h" | "v",
-): Promise<void> {
-  await api().post(`/${hostId}/split`, { paneId, direction });
-}
-
-export interface TmuxSearchResult {
-  matches: TmuxSearchMatch[];
-  /** True when a search limit was hit and the results are partial. */
-  truncated: boolean;
-  searchedLines: number;
-  maxPanes: number;
-}
-
-export async function searchTmux(
-  hostId: number,
-  query: string,
-): Promise<TmuxSearchResult> {
-  const response = await api().get<Partial<TmuxSearchResult>>(
-    `/${hostId}/search`,
-    { params: { q: query } },
-  );
-  return {
-    matches: response.data.matches ?? [],
-    truncated: response.data.truncated ?? false,
-    searchedLines: response.data.searchedLines ?? 0,
-    maxPanes: response.data.maxPanes ?? 0,
-  };
-}
-
-export async function getTmuxMetrics(
-  hostId: number,
-): Promise<TmuxPaneMetrics[]> {
-  const response = await api().get<{ panes?: TmuxPaneMetrics[] }>(
-    `/${hostId}/metrics`,
-  );
-  return response.data.panes ?? [];
-}
-
-export async function setTmuxSessionTags(
-  hostId: number,
-  sessionName: string,
-  tags: string[],
-): Promise<string[]> {
-  const response = await api().put<{ tags?: string[] }>(`/${hostId}/tags`, {
-    sessionName,
-    tags,
-  });
-  return response.data.tags ?? [];
-}
diff --git a/plugins/tmux-monitor/src/frontend/format.ts b/plugins/tmux-monitor/src/frontend/format.ts
deleted file mode 100644
index c83dc131c..000000000
--- a/plugins/tmux-monitor/src/frontend/format.ts
+++ /dev/null
@@ -1,22 +0,0 @@
-import type { TranslateFn } from "@termix/plugin-sdk/frontend";
-
-export function formatRelativeTime(
-  unixSeconds: number,
-  nowMs: number,
-  t: TranslateFn,
-): string {
-  if (!unixSeconds) return "";
-  const diff = Math.max(0, nowMs / 1000 - unixSeconds);
-  if (diff < 60) return t("tmuxMonitor.timeJustNow");
-  if (diff < 3600)
-    return t("tmuxMonitor.timeMinutes", { count: Math.floor(diff / 60) });
-  if (diff < 86400)
-    return t("tmuxMonitor.timeHours", { count: Math.floor(diff / 3600) });
-  return t("tmuxMonitor.timeDays", { count: Math.floor(diff / 86400) });
-}
-
-export function formatMem(kb: number): string {
-  if (kb >= 1024 * 1024) return `${(kb / 1024 / 1024).toFixed(1)} GB`;
-  if (kb >= 1024) return `${(kb / 1024).toFixed(0)} MB`;
-  return `${kb} KB`;
-}
diff --git a/plugins/tmux-monitor/src/frontend/host-tmux-monitor.ts b/plugins/tmux-monitor/src/frontend/host-tmux-monitor.ts
deleted file mode 100644
index e0b9cff53..000000000
--- a/plugins/tmux-monitor/src/frontend/host-tmux-monitor.ts
+++ /dev/null
@@ -1,12 +0,0 @@
-import type { PluginHostRecord } from "@termix/plugin-sdk/frontend";
-
-/** Whether the monitor is enabled for this host, as the host payload's
- * pluginSettings carries it. */
-export function tmuxMonitorEnabled(
-  host: PluginHostRecord | null | undefined,
-): boolean {
-  const settings = (
-    host?.pluginSettings as Record<string, Record<string, unknown>> | undefined
-  )?.["tmux-monitor"];
-  return settings?.enableTmuxMonitor === true;
-}
diff --git a/plugins/tmux-monitor/src/frontend/index.tsx b/plugins/tmux-monitor/src/frontend/index.tsx
deleted file mode 100644
index a19d017fd..000000000
--- a/plugins/tmux-monitor/src/frontend/index.tsx
+++ /dev/null
@@ -1,69 +0,0 @@
-import { Layers } from "lucide-react";
-import type {
-  StandaloneViewProps,
-  TabProps,
-  TermixApp,
-} from "@termix/plugin-sdk/frontend";
-import { setTmuxMonitorApi } from "./api";
-import { tmuxMonitorEnabled } from "./host-tmux-monitor";
-import { HostTmuxMonitorSection } from "./HostTmuxMonitorSection";
-import { TmuxMonitor } from "./TmuxMonitor";
-import TmuxMonitorApp from "./TmuxMonitorApp";
-
-const VIEW_ID = "tmux_monitor";
-
-function TmuxMonitorTab({ tab, isVisible }: TabProps) {
-  const hostId = (tab.data?.hostId as number | undefined) ?? undefined;
-  return (
-    <TmuxMonitor
-      initialHostId={hostId}
-      initialHostRequest={tab.data?.hostRequest as number | undefined}
-      isVisible={isVisible}
-    />
-  );
-}
-
-function TmuxMonitorStandalone(props: StandaloneViewProps) {
-  return <TmuxMonitorApp {...props} />;
-}
-
-export function activate(app: TermixApp): void {
-  setTmuxMonitorApi(app.api);
-  app.onDispose(() => setTmuxMonitorApi(null));
-
-  // A single cross-host browser, like the old core tab: opening it from a
-  // host row just points the already-open (or newly opened) tab at that host.
-  app.registerTab(VIEW_ID, TmuxMonitorTab, {
-    icon: Layers,
-    titleKey: "nav.tmuxMonitor",
-    singleton: true,
-    hostless: true,
-    persistent: true,
-    activityTypes: ["tmux_monitor"],
-    standalone: TmuxMonitorStandalone,
-  });
-
-  app.registerHostAction({
-    id: "tmux_monitor",
-    titleKey: "nav.tmuxMonitor",
-    icon: Layers,
-    kind: "open",
-    order: 70,
-    copyUrlView: VIEW_ID,
-    when: (host) => !!host.enableSsh && tmuxMonitorEnabled(host),
-    run: (host, shell) =>
-      shell.openSingletonTab(VIEW_ID, {
-        data: { hostId: Number(host.id), hostRequest: Date.now() },
-      }),
-  });
-
-  app.registerHostEditorSection({
-    id: "tmux-monitor",
-    group: "ssh",
-    titleKey: "hosts.tabTmuxMonitor",
-    icon: Layers,
-    order: 45,
-    defaults: true,
-    component: HostTmuxMonitorSection,
-  });
-}
diff --git a/plugins/tmux-monitor/src/frontend/monitor-storage.ts b/plugins/tmux-monitor/src/frontend/monitor-storage.ts
deleted file mode 100644
index 017eeed70..000000000
--- a/plugins/tmux-monitor/src/frontend/monitor-storage.ts
+++ /dev/null
@@ -1,36 +0,0 @@
-import type { SelectedPane } from "./types";
-
-const PREFIX = "termix-tmux-monitor-";
-export function readMonitorValue<T>(key: string, fallback: T): T {
-  try {
-    const value = localStorage.getItem(PREFIX + key);
-    return value === null ? fallback : JSON.parse(value);
-  } catch {
-    return fallback;
-  }
-}
-export function saveMonitorValue(key: string, value: unknown): void {
-  try {
-    localStorage.setItem(PREFIX + key, JSON.stringify(value));
-  } catch {
-    /* unavailable */
-  }
-}
-export function readExpanded(hostId: number | string): Set<string> | null {
-  const value = readMonitorValue<unknown>(`expanded-${hostId}`, null);
-  return Array.isArray(value)
-    ? new Set(value.filter((v): v is string => typeof v === "string"))
-    : null;
-}
-export function readSelectedPane(hostId: number | string): SelectedPane | null {
-  const value = readMonitorValue<Partial<SelectedPane> | null>(
-    `pane-${hostId}`,
-    null,
-  );
-  return value &&
-    typeof value.paneId === "string" &&
-    typeof value.sessionName === "string" &&
-    Number.isInteger(value.windowIndex)
-    ? (value as SelectedPane)
-    : null;
-}
diff --git a/plugins/tmux-monitor/src/frontend/poll-queue.ts b/plugins/tmux-monitor/src/frontend/poll-queue.ts
deleted file mode 100644
index af8acce85..000000000
--- a/plugins/tmux-monitor/src/frontend/poll-queue.ts
+++ /dev/null
@@ -1,19 +0,0 @@
-/** Bound background SSH polling when the unified view contains many hosts. */
-export function createPollQueue(limit: number) {
-  let running = 0;
-  const waiting: Array<() => void> = [];
-  return async function run<T>(task: () => Promise<T>): Promise<T> {
-    if (running >= limit)
-      await new Promise<void>((resolve) => waiting.push(resolve));
-    else running++;
-    try {
-      return await task();
-    } finally {
-      const next = waiting.shift();
-      if (next) next();
-      else running--;
-    }
-  };
-}
-
-export const pollBackgroundHost = createPollQueue(4);
diff --git a/plugins/tmux-monitor/src/frontend/types.ts b/plugins/tmux-monitor/src/frontend/types.ts
deleted file mode 100644
index f9fbe6672..000000000
--- a/plugins/tmux-monitor/src/frontend/types.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-export interface SelectedPane {
-  paneId: string;
-  sessionName: string;
-  windowIndex: number;
-}
diff --git a/plugins/tmux-monitor/src/frontend/use-adaptive-polling.ts b/plugins/tmux-monitor/src/frontend/use-adaptive-polling.ts
deleted file mode 100644
index e6915fc32..000000000
--- a/plugins/tmux-monitor/src/frontend/use-adaptive-polling.ts
+++ /dev/null
@@ -1,63 +0,0 @@
-import { useEffect, useRef } from "react";
-import { runAdaptivePolling } from "@termix/plugin-sdk/ui";
-
-type AdaptivePollResult = boolean | void;
-
-interface AdaptivePollingPolicy {
-  minIntervalMs: number;
-  maxIntervalMs: number;
-  stablePollsPerStep?: number;
-  jitterRatio?: number;
-  maxRequestDutyCycle?: number;
-}
-
-export function useAdaptivePolling(
-  poll: () => AdaptivePollResult | Promise<AdaptivePollResult>,
-  policy: AdaptivePollingPolicy,
-  enabled = true,
-  options: {
-    runImmediately?: boolean;
-    onError?: (error: unknown) => void;
-  } = {},
-): void {
-  const pollRef = useRef(poll);
-  const errorRef = useRef(options.onError);
-  pollRef.current = poll;
-  errorRef.current = options.onError;
-  const {
-    minIntervalMs,
-    maxIntervalMs,
-    stablePollsPerStep,
-    jitterRatio,
-    maxRequestDutyCycle,
-  } = policy;
-  const runImmediately = options.runImmediately;
-
-  useEffect(
-    () =>
-      runAdaptivePolling(
-        () => pollRef.current(),
-        {
-          minIntervalMs,
-          maxIntervalMs,
-          stablePollsPerStep,
-          jitterRatio,
-          maxRequestDutyCycle,
-        },
-        {
-          enabled: () => enabled,
-          runImmediately,
-          onError: (error) => errorRef.current?.(error),
-        },
-      ),
-    [
-      enabled,
-      jitterRatio,
-      maxIntervalMs,
-      minIntervalMs,
-      runImmediately,
-      stablePollsPerStep,
-      maxRequestDutyCycle,
-    ],
-  );
-}
diff --git a/plugins/tmux-monitor/tests/backend/helpers.ts b/plugins/tmux-monitor/tests/backend/helpers.ts
deleted file mode 100644
index 8d48514b7..000000000
--- a/plugins/tmux-monitor/tests/backend/helpers.ts
+++ /dev/null
@@ -1,120 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import type { PluginHostSummary } from "@termix/plugin-sdk/backend";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-export const manifest = manifestJson as unknown as PluginManifest;
-
-export function host(
-  overrides: Partial<PluginHostSummary> = {},
-): PluginHostSummary {
-  return {
-    id: 7,
-    userId: "user-1",
-    name: "web",
-    ip: "10.0.0.5",
-    port: 22,
-    username: "root",
-    tags: null,
-    folder: null,
-    authType: "password",
-    ...overrides,
-  };
-}
-
-export interface TestServer {
-  db: TestDb;
-  mock: MockPluginContext;
-  request: (
-    method: string,
-    path: string,
-    options?: { user?: string; body?: unknown },
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any }>;
-  close: () => Promise<void>;
-}
-
-export async function startServer(
-  options: {
-    permissions?: string[];
-    users?: string[];
-    hosts?: PluginHostSummary[];
-    /** hostId -> enableTmuxMonitor, set through ctx.settings before activate. */
-    enabledHosts?: number[];
-    sshClient?: unknown;
-  } = {},
-): Promise<TestServer> {
-  const db = await createTestDb(pluginDir);
-  for (const user of options.users ?? ["user-1", "user-2"]) {
-    db.sqlite
-      .prepare("INSERT INTO users (id, username) VALUES (?, ?)")
-      .run(user, user);
-  }
-  for (const h of options.hosts ?? [host()]) {
-    db.sqlite.prepare("INSERT INTO ssh_data (id) VALUES (?)").run(h.id);
-  }
-
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    permissions: options.permissions ?? ["tmux-monitor.use"],
-    hosts: options.hosts ?? [host()],
-    sshClient: options.sshClient,
-  });
-
-  for (const hostId of options.enabledHosts ?? [7]) {
-    await mock.ctx.settings.setHost(hostId, "enableTmuxMonitor", true);
-  }
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") ?? undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    db,
-    mock,
-    async request(method, path, { user = "user-1", body: given } = {}) {
-      const body = method === "GET" ? undefined : given;
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        headers: {
-          "x-test-user": user,
-          ...(body !== undefined ? { "content-type": "application/json" } : {}),
-        },
-        body: body !== undefined ? JSON.stringify(body) : undefined,
-      });
-      const text = await response.text();
-      return { status: response.status, body: text ? JSON.parse(text) : null };
-    },
-    async close() {
-      for (const dispose of [...mock.disposals].reverse()) await dispose();
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-      db.close();
-    },
-  };
-}
diff --git a/plugins/tmux-monitor/tests/backend/migrations.test.ts b/plugins/tmux-monitor/tests/backend/migrations.test.ts
deleted file mode 100644
index a169d6e80..000000000
--- a/plugins/tmux-monitor/tests/backend/migrations.test.ts
+++ /dev/null
@@ -1,91 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { createTestDb, type TestDb } from "@termix/plugin-sdk/testing";
-import { pluginDir } from "./helpers";
-
-// tmux_session_tags as core's SQLite bootstrap created it before 2.9.0.
-// Core never indexed it.
-const LEGACY_DDL = `
-  CREATE TABLE tmux_session_tags (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL,
-    host_id INTEGER NOT NULL,
-    session_name TEXT NOT NULL,
-    tag TEXT NOT NULL,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE,
-    FOREIGN KEY (host_id) REFERENCES ssh_data (id) ON DELETE CASCADE
-  );
-`;
-
-let db: TestDb | null = null;
-
-afterEach(() => {
-  db?.close();
-  db = null;
-});
-
-const tableExists = (name: string) =>
-  !!db!.sqlite
-    .prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?")
-    .get(name);
-
-describe("adopting tmux_session_tags", () => {
-  it("keeps every existing row when the legacy table is there", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1'), ('user-2')");
-        sqlite.exec("INSERT INTO ssh_data (id) VALUES (7)");
-        sqlite.exec(LEGACY_DDL);
-        sqlite
-          .prepare(
-            "INSERT INTO tmux_session_tags (user_id, host_id, session_name, tag) VALUES (?, ?, ?, ?)",
-          )
-          .run("user-1", 7, "work", "lab");
-      },
-    });
-
-    expect(db.applied).toEqual(["0001_adopt_tmux_session_tags"]);
-    expect(tableExists("tmux_session_tags")).toBe(false);
-    expect(tableExists("p_tmux_monitor_session_tags")).toBe(true);
-
-    expect(
-      db.sqlite
-        .prepare(
-          "SELECT user_id, host_id, session_name, tag FROM p_tmux_monitor_session_tags",
-        )
-        .all(),
-    ).toEqual([
-      { user_id: "user-1", host_id: 7, session_name: "work", tag: "lab" },
-    ]);
-  });
-
-  it("creates the table fresh when there is no legacy one", async () => {
-    db = await createTestDb(pluginDir);
-
-    expect(tableExists("tmux_session_tags")).toBe(false);
-    expect(tableExists("p_tmux_monitor_session_tags")).toBe(true);
-    expect(
-      db.sqlite.prepare("SELECT * FROM p_tmux_monitor_session_tags").all(),
-    ).toEqual([]);
-  });
-
-  it("cascades on host delete", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1')");
-        sqlite.exec("INSERT INTO ssh_data (id) VALUES (7)");
-      },
-    });
-    db.sqlite
-      .prepare(
-        "INSERT INTO p_tmux_monitor_session_tags (user_id, host_id, session_name, tag) VALUES (?, ?, ?, ?)",
-      )
-      .run("user-1", 7, "work", "lab");
-
-    db.sqlite.exec("DELETE FROM ssh_data WHERE id = 7");
-
-    expect(
-      db.sqlite.prepare("SELECT * FROM p_tmux_monitor_session_tags").all(),
-    ).toEqual([]);
-  });
-});
diff --git a/plugins/tmux-monitor/tests/backend/monitor-helpers.test.ts b/plugins/tmux-monitor/tests/backend/monitor-helpers.test.ts
deleted file mode 100644
index 1d13c2209..000000000
--- a/plugins/tmux-monitor/tests/backend/monitor-helpers.test.ts
+++ /dev/null
@@ -1,272 +0,0 @@
-import { describe, it, expect } from "vitest";
-import {
-  SEP,
-  parseSessions,
-  parseWindows,
-  parsePanes,
-  parsePsOutput,
-  parseGpuOutput,
-  buildPaneMetrics,
-  attachPanesToWindows,
-  shellEscape,
-  type ProcessInfo,
-  type TmuxWindow,
-} from "../../src/backend/monitor-helpers.js";
-
-function join(...fields: (string | number)[]): string {
-  return fields.join(SEP);
-}
-
-describe("parseSessions", () => {
-  it("parses tmux list-sessions output", () => {
-    const output = [
-      join("training", 1760000000, 1760001000, 1),
-      join("lab|with|pipes", 1760000500, 1760002000, 0),
-    ].join("\n");
-
-    const sessions = parseSessions(output);
-    expect(sessions).toHaveLength(2);
-    expect(sessions[0]).toEqual({
-      name: "training",
-      created: 1760000000,
-      lastActivity: 1760001000,
-      attachedClients: 1,
-    });
-    // Session names containing "|" survive because SEP is a multi-char token
-    expect(sessions[1].name).toBe("lab|with|pipes");
-    expect(sessions[1].attachedClients).toBe(0);
-  });
-
-  it("returns empty array for empty output", () => {
-    expect(parseSessions("")).toEqual([]);
-  });
-});
-
-describe("parseWindows", () => {
-  it("groups windows by session", () => {
-    const output = [
-      join("training", 0, 1, "vim"),
-      join("training", 1, 0, "logs"),
-      join("api", 0, 1, "server"),
-    ].join("\n");
-
-    const windows = parseWindows(output);
-    expect(windows.get("training")).toHaveLength(2);
-    expect(windows.get("training")![0]).toMatchObject({
-      index: 0,
-      name: "vim",
-      active: true,
-    });
-    expect(windows.get("api")![0].name).toBe("server");
-  });
-});
-
-describe("parsePanes", () => {
-  it("parses full pane lines including free-text fields", () => {
-    const output = join(
-      "training",
-      0,
-      "%3",
-      1,
-      12345,
-      1,
-      120,
-      40,
-      "python",
-      "/home/user/my|dir",
-      "gpu01: train.py",
-    );
-
-    const panes = parsePanes(output);
-    expect(panes).toHaveLength(1);
-    expect(panes[0]).toEqual({
-      sessionName: "training",
-      windowIndex: 0,
-      id: "%3",
-      index: 1,
-      pid: 12345,
-      active: true,
-      width: 120,
-      height: 40,
-      command: "python",
-      path: "/home/user/my|dir",
-      title: "gpu01: train.py",
-    });
-  });
-});
-
-describe("parsePsOutput", () => {
-  it("parses ps -eo pid,ppid,pcpu,pmem,rss,comm output", () => {
-    const output = [
-      "    1     0  0.0  0.1  1234 systemd",
-      "12345     1  2.5  1.0 50000 bash",
-      "12400 12345 95.3 12.5 800000 python3",
-      "garbage line",
-    ].join("\n");
-
-    const procs = parsePsOutput(output);
-    expect(procs).toHaveLength(3);
-    expect(procs[2]).toEqual({
-      pid: 12400,
-      ppid: 12345,
-      cpu: 95.3,
-      mem: 12.5,
-      rss: 800000,
-      comm: "python3",
-    });
-  });
-});
-
-describe("parseGpuOutput", () => {
-  it("parses nvidia-smi csv output and sums per pid", () => {
-    const output = ["12400, 8000", "12400, 2000", "99999, 512"].join("\n");
-    const gpu = parseGpuOutput(output);
-    expect(gpu.get(12400)).toBe(10000);
-    expect(gpu.get(99999)).toBe(512);
-  });
-
-  it("handles empty output (no GPU)", () => {
-    expect(parseGpuOutput("").size).toBe(0);
-  });
-});
-
-describe("buildPaneMetrics", () => {
-  const panes = parsePanes(
-    [
-      join("training", 0, "%1", 0, 100, 1, 80, 24, "bash", "/", "t"),
-      join("idle", 0, "%2", 0, 200, 1, 80, 24, "bash", "/", "t"),
-    ].join("\n"),
-  );
-
-  const processes = parsePsOutput(
-    [
-      // pane %1: bash(100) -> python3(110) -> worker(111)
-      "  100     1  0.1  0.1  4000 bash",
-      "  110   100 90.0 10.0 700000 python3",
-      "  111   110  9.5  2.0 100000 dataloader",
-      // pane %2: bash(200) only
-      "  200     1  0.0  0.1  4000 bash",
-      // unrelated process
-      "  300     1 50.0  5.0 200000 chrome",
-    ].join("\n"),
-  );
-
-  it("aggregates descendant trees per pane", () => {
-    const metrics = buildPaneMetrics(panes, processes, new Map());
-    const m1 = metrics.find((m) => m.paneId === "%1")!;
-    expect(m1.processCount).toBe(3);
-    expect(m1.cpuPercent).toBeCloseTo(99.6, 1);
-    expect(m1.memRssKb).toBe(804000);
-    expect(m1.topCommand).toBe("python3");
-
-    const m2 = metrics.find((m) => m.paneId === "%2")!;
-    expect(m2.processCount).toBe(1);
-    expect(m2.cpuPercent).toBe(0);
-    // Unrelated process is never attributed
-    expect(m2.memRssKb).toBe(4000);
-  });
-
-  it("attributes GPU memory through the process tree", () => {
-    const gpu = new Map([
-      [110, 8000],
-      [300, 4000],
-    ]);
-    const metrics = buildPaneMetrics(panes, processes, gpu);
-    expect(metrics.find((m) => m.paneId === "%1")!.gpuMemMb).toBe(8000);
-    expect(metrics.find((m) => m.paneId === "%2")!.gpuMemMb).toBe(0);
-  });
-
-  it("handles a pane whose pid is missing from ps output", () => {
-    const orphan = parsePanes(
-      join("gone", 0, "%9", 0, 99999, 0, 80, 24, "bash", "/", "t"),
-    );
-    const metrics = buildPaneMetrics(orphan, processes, new Map());
-    expect(metrics[0].processCount).toBe(0);
-    expect(metrics[0].cpuPercent).toBe(0);
-    expect(metrics[0].topCommand).toBeNull();
-  });
-
-  it("does not loop on cyclic ppid data", () => {
-    const cyclic = parsePsOutput(
-      ["  100   101 1.0 0.1 1000 a", "  101   100 1.0 0.1 1000 b"].join("\n"),
-    );
-    const pane = parsePanes(
-      join("s", 0, "%1", 0, 100, 1, 80, 24, "a", "/", "t"),
-    );
-    const metrics = buildPaneMetrics(pane, cyclic, new Map());
-    expect(metrics[0].processCount).toBe(2);
-  });
-
-  it("aggregates a wide process tree without dropping children", () => {
-    const childCount = 2_000;
-    const wideTree: ProcessInfo[] = [
-      { pid: 1, ppid: 0, cpu: 0, mem: 0, rss: 1, comm: "bash" },
-      ...Array.from({ length: childCount }, (_, index) => ({
-        pid: index + 2,
-        ppid: 1,
-        cpu: 0.1,
-        mem: 0,
-        rss: 1,
-        comm: `worker-${index}`,
-      })),
-    ];
-    const pane = parsePanes(
-      join("wide", 0, "%1", 0, 1, 1, 80, 24, "bash", "/", "t"),
-    );
-
-    const [metrics] = buildPaneMetrics(pane, wideTree, new Map());
-    expect(metrics.processCount).toBe(childCount + 1);
-    expect(metrics.memRssKb).toBe(childCount + 1);
-  });
-});
-
-describe("attachPanesToWindows", () => {
-  it("places panes into their windows", () => {
-    const windows = parseWindows(
-      [join("s1", 0, 1, "main"), join("s1", 1, 0, "logs")].join("\n"),
-    );
-    const panes = parsePanes(
-      [
-        join("s1", 0, "%1", 0, 100, 1, 80, 24, "bash", "/", "t"),
-        join("s1", 1, "%2", 0, 200, 0, 80, 24, "tail", "/", "t"),
-        join("unknown", 5, "%3", 0, 300, 0, 80, 24, "bash", "/", "t"),
-      ].join("\n"),
-    );
-
-    attachPanesToWindows(windows, panes);
-    expect(windows.get("s1")![0].panes).toHaveLength(1);
-    expect(windows.get("s1")![0].panes[0].id).toBe("%1");
-    expect(windows.get("s1")![1].panes[0].id).toBe("%2");
-  });
-
-  it("preserves first-match behavior for duplicate window indexes", () => {
-    const first: TmuxWindow = {
-      index: 0,
-      name: "first",
-      active: true,
-      panes: [],
-    };
-    const duplicate: TmuxWindow = {
-      index: 0,
-      name: "duplicate",
-      active: false,
-      panes: [],
-    };
-    const windows = new Map([["s1", [first, duplicate]]]);
-    const panes = parsePanes(
-      join("s1", 0, "%1", 0, 100, 1, 80, 24, "bash", "/", "t"),
-    );
-
-    attachPanesToWindows(windows, panes);
-    expect(first.panes).toHaveLength(1);
-    expect(duplicate.panes).toHaveLength(0);
-  });
-});
-
-describe("shellEscape", () => {
-  it("wraps in single quotes and escapes embedded quotes", () => {
-    expect(shellEscape("simple")).toBe("'simple'");
-    expect(shellEscape("it's")).toBe("'it'\\''s'");
-    expect(shellEscape("$(rm -rf /)")).toBe("'$(rm -rf /)'");
-  });
-});
diff --git a/plugins/tmux-monitor/tests/backend/repository.test.ts b/plugins/tmux-monitor/tests/backend/repository.test.ts
deleted file mode 100644
index b2f4c8983..000000000
--- a/plugins/tmux-monitor/tests/backend/repository.test.ts
+++ /dev/null
@@ -1,96 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import {
-  createMockCtx,
-  createTestDb,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import { sessionTags } from "../../src/backend/tables.js";
-import { createSessionTagRepository } from "../../src/backend/repository.js";
-import { manifest, pluginDir } from "./helpers";
-
-let db: TestDb | null = null;
-
-afterEach(() => {
-  db?.close();
-  db = null;
-});
-
-async function createRepository() {
-  db = await createTestDb(pluginDir);
-  db.sqlite.exec(
-    "INSERT INTO users (id, username) VALUES ('user-1', 'user-1'), ('user-2', 'user-2')",
-  );
-  db.sqlite.exec("INSERT INTO ssh_data (id) VALUES (1), (2)");
-
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    db: db.database,
-  });
-  const table = await mock.ctx.db.define(sessionTags);
-  const repository = createSessionTagRepository(mock.ctx.db, table);
-
-  db.sqlite.exec(`
-    INSERT INTO p_tmux_monitor_session_tags (user_id, host_id, session_name, tag)
-    VALUES
-      ('user-1', 1, 'api', 'prod'),
-      ('user-1', 1, 'api', 'critical'),
-      ('user-1', 1, 'worker', 'batch'),
-      ('user-2', 2, 'api', 'other');
-  `);
-
-  return repository;
-}
-
-describe("createSessionTagRepository", () => {
-  it("groups tags by session for a user and host", async () => {
-    const repository = await createRepository();
-
-    const tags = await repository.listByUserAndHost("user-1", 1);
-
-    expect(tags.get("api")).toEqual(["prod", "critical"]);
-    expect(tags.get("worker")).toEqual(["batch"]);
-    expect(tags.has("missing")).toBe(false);
-  });
-
-  it("renames tags by host/session, leaving other hosts alone", async () => {
-    const repository = await createRepository();
-
-    await repository.renameSessionForHost(1, "api", "api-renamed");
-
-    const renamed = await repository.listByUserAndHost("user-1", 1);
-    expect(renamed.get("api-renamed")).toEqual(["prod", "critical"]);
-    expect(renamed.has("api")).toBe(false);
-
-    const other = await repository.listByUserAndHost("user-2", 2);
-    expect(other.get("api")).toEqual(["other"]);
-  });
-
-  it("deletes tags by host/session", async () => {
-    const repository = await createRepository();
-
-    await repository.deleteSessionForHost(1, "api");
-
-    const tags = await repository.listByUserAndHost("user-1", 1);
-    expect(tags.has("api")).toBe(false);
-    expect(tags.get("worker")).toEqual(["batch"]);
-  });
-
-  it("replaces tags for one user/host/session only", async () => {
-    const repository = await createRepository();
-
-    await repository.replaceForUserHostSession("user-1", 1, "api", [
-      "blue",
-      "green",
-    ]);
-
-    const tags = await repository.listByUserAndHost("user-1", 1);
-    expect(tags.get("api")).toEqual(["blue", "green"]);
-    expect(tags.get("worker")).toEqual(["batch"]);
-
-    await repository.replaceForUserHostSession("user-1", 1, "worker", []);
-    const cleared = await repository.listByUserAndHost("user-1", 1);
-    expect(cleared.has("worker")).toBe(false);
-  });
-});
diff --git a/plugins/tmux-monitor/tests/backend/routes.test.ts b/plugins/tmux-monitor/tests/backend/routes.test.ts
deleted file mode 100644
index a8ebd045a..000000000
--- a/plugins/tmux-monitor/tests/backend/routes.test.ts
+++ /dev/null
@@ -1,90 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { EventEmitter } from "node:events";
-import { startServer, type TestServer } from "./helpers";
-
-function fakeSshClient(outputs: Record<string, string>, exitCode = 0) {
-  const client = new EventEmitter() as EventEmitter & {
-    exec: (
-      command: string,
-      cb: (err: Error | null, stream: unknown) => void,
-    ) => void;
-  };
-  client.exec = (command, cb) => {
-    const stream = new EventEmitter() as EventEmitter & {
-      stderr: EventEmitter;
-    };
-    stream.stderr = new EventEmitter();
-    const matchKey = Object.keys(outputs).find((k) => command.includes(k));
-    const output = matchKey ? outputs[matchKey] : "";
-    cb(null, stream);
-    setImmediate(() => {
-      if (output) stream.emit("data", Buffer.from(output));
-      stream.emit("close", exitCode);
-    });
-  };
-  return client;
-}
-
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-});
-
-describe("GET /:hostId/overview", () => {
-  it("403s when the host does not exist or is not reachable", async () => {
-    server = await startServer({ hosts: [] });
-    const res = await server.request("GET", "/7/overview");
-    expect(res.status).toBe(403);
-  });
-
-  it("403s when the monitor is disabled for the host", async () => {
-    server = await startServer({ enabledHosts: [] });
-    const res = await server.request("GET", "/7/overview");
-    expect(res.status).toBe(403);
-    expect(res.body.error).toMatch(/not enabled/i);
-  });
-
-  it("403s without the tmux-monitor.use permission", async () => {
-    server = await startServer({ permissions: [] });
-    const res = await server.request("GET", "/7/overview");
-    expect(res.status).toBe(403);
-  });
-
-  it("reports tmux unavailable when the exec exits non-zero", async () => {
-    server = await startServer({ sshClient: fakeSshClient({}, 127) });
-    const res = await server.request("GET", "/7/overview");
-    expect(res.status).toBe(200);
-    expect(res.body).toEqual({ available: false, sessions: [] });
-  });
-});
-
-describe("PUT /:hostId/tags", () => {
-  it("saves tags for the acting user and session", async () => {
-    server = await startServer();
-    const res = await server.request("PUT", "/7/tags", {
-      body: { sessionName: "work", tags: ["a", "b", "b", "  "] },
-    });
-    expect(res.status).toBe(200);
-    expect(res.body.tags.sort()).toEqual(["a", "b"]);
-  });
-
-  it("rejects a non-array tags field", async () => {
-    server = await startServer();
-    const res = await server.request("PUT", "/7/tags", {
-      body: { sessionName: "work", tags: "nope" },
-    });
-    expect(res.status).toBe(400);
-  });
-});
-
-describe("POST /:hostId/sessions", () => {
-  it("rejects an invalid session name", async () => {
-    server = await startServer();
-    const res = await server.request("POST", "/7/sessions", {
-      body: { name: "bad:name" },
-    });
-    expect(res.status).toBe(400);
-  });
-});
diff --git a/plugins/tmux-monitor/tests/backend/service.test.ts b/plugins/tmux-monitor/tests/backend/service.test.ts
deleted file mode 100644
index 4b8c998de..000000000
--- a/plugins/tmux-monitor/tests/backend/service.test.ts
+++ /dev/null
@@ -1,122 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import { EventEmitter } from "node:events";
-import { createFakeContext } from "@termix/plugin-sdk/testing";
-import { createTmuxSessionsService } from "../../src/backend/service.js";
-
-function fakeSshClient(outputs: Record<string, string>, exitCode = 0) {
-  const client = new EventEmitter() as EventEmitter & {
-    exec: (
-      command: string,
-      cb: (err: Error | null, stream: unknown) => void,
-    ) => void;
-  };
-  client.exec = (command, cb) => {
-    const stream = new EventEmitter() as EventEmitter & {
-      stderr: EventEmitter;
-    };
-    stream.stderr = new EventEmitter();
-    const matchKey = Object.keys(outputs).find((k) => command.includes(k));
-    const output = matchKey ? outputs[matchKey] : "";
-    cb(null, stream);
-    setImmediate(() => {
-      if (output) stream.emit("data", Buffer.from(output));
-      stream.emit("close", exitCode);
-    });
-  };
-  return client;
-}
-
-describe("createTmuxSessionsService", () => {
-  it("detect() reports unavailable when tmux -V fails", async () => {
-    const { ctx } = createFakeContext({ pluginId: "tmux-monitor" });
-    const service = createTmuxSessionsService(ctx);
-    const client = fakeSshClient({}, 127);
-
-    await expect(service.detect(client)).resolves.toEqual({
-      available: false,
-      sessions: [],
-    });
-  });
-
-  it("detect() lists full session info when tmux is available", async () => {
-    const { ctx } = createFakeContext({ pluginId: "tmux-monitor" });
-    const service = createTmuxSessionsService(ctx);
-    const client = fakeSshClient({
-      "-V": "tmux 3.7b\n",
-      "list-sessions": "main|1|2|3|1\nlogs|4|5|1|0\n",
-    });
-
-    await expect(service.detect(client)).resolves.toEqual({
-      available: true,
-      sessions: [
-        {
-          name: "main",
-          created: 1,
-          lastActivity: 2,
-          windows: 3,
-          attachedClients: 1,
-        },
-        {
-          name: "logs",
-          created: 4,
-          lastActivity: 5,
-          windows: 1,
-          attachedClients: 0,
-        },
-      ],
-    });
-  });
-
-  it("attachOrCreate() writes the attach command to the stream", async () => {
-    const { ctx } = createFakeContext({ pluginId: "tmux-monitor" });
-    const service = createTmuxSessionsService(ctx);
-    const writes: string[] = [];
-    const stream = { write: (data: string) => writes.push(data) };
-
-    await service.attachOrCreate(stream, "main");
-
-    expect(writes).toHaveLength(1);
-    expect(writes[0]).toContain("attach-session -t");
-    expect(writes[0]).toContain("main");
-  });
-
-  it("uses the host's saved mouse setting when attaching", async () => {
-    const { ctx } = createFakeContext({ pluginId: "tmux-monitor" });
-    await ctx.settings.setHost(7, "mouseEnabled", false);
-    const writes: string[] = [];
-    const service = createTmuxSessionsService(ctx);
-    await service.attachOrCreate(
-      { write: (value: string) => writes.push(value) },
-      "main",
-      undefined,
-      7,
-    );
-    await service.attachOrCreate(
-      { write: (value: string) => writes.push(value) },
-      "other",
-      undefined,
-      8,
-    );
-    expect(writes[0]).toContain("mouse off");
-    expect(writes[1]).toContain("mouse on");
-  });
-
-  it("waitForSession() falls back to the requested name on timeout", async () => {
-    vi.useFakeTimers();
-    try {
-      const { ctx } = createFakeContext({ pluginId: "tmux-monitor" });
-      const warn = vi.fn();
-      ctx.log.warn = warn;
-      const service = createTmuxSessionsService(ctx);
-      const client = fakeSshClient({}, 1);
-
-      const result = service.waitForSession(client, "new-session");
-      await vi.advanceTimersByTimeAsync(5100);
-
-      await expect(result).resolves.toBe("new-session");
-      expect(warn).toHaveBeenCalled();
-    } finally {
-      vi.useRealTimers();
-    }
-  });
-});
diff --git a/plugins/tmux-monitor/tests/backend/tmux-commands.test.ts b/plugins/tmux-monitor/tests/backend/tmux-commands.test.ts
deleted file mode 100644
index 3a7688bae..000000000
--- a/plugins/tmux-monitor/tests/backend/tmux-commands.test.ts
+++ /dev/null
@@ -1,160 +0,0 @@
-import { EventEmitter } from "node:events";
-import { execFileSync } from "node:child_process";
-import { mkdtempSync, writeFileSync, rmSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import type { Client, ClientChannel } from "ssh2";
-import { describe, expect, it } from "vitest";
-import {
-  attachOrCreateTmuxSession,
-  detectTmux,
-  tmuxCommand,
-  withTmuxPath,
-} from "../../src/backend/tmux-commands.js";
-
-describe("tmux command path handling", () => {
-  it("prepends all non-login tmux paths while preserving inherited PATH", () => {
-    expect(withTmuxPath("command -v tmux")).toBe(
-      `/bin/sh -c 'PATH=/opt/homebrew/bin:/usr/local/bin:/opt/bin:/usr/pkg/bin:"$PATH"; export PATH; command -v tmux'`,
-    );
-  });
-
-  it("shell-escapes embedded single quotes in wrapped commands", () => {
-    // Asserted as a string so the escaping rule is covered everywhere. The
-    // round-trip below proves it against a real parser, but only where one
-    // exists -- see the note there.
-    expect(withTmuxPath(`printf '%s' "can't"`)).toBe(
-      "/bin/sh -c 'PATH=/opt/homebrew/bin:/usr/local/bin:/opt/bin:/usr/pkg/bin:\"$PATH\"; export PATH; printf '\\''%s'\\'' \"can'\\''t\"'",
-    );
-  });
-
-  // /bin/sh is not on Windows, and Windows is a supported platform for the
-  // desktop app -- contributors run `npm test` there. CI is ubuntu-only, so it
-  // would never notice this failing.
-  it.skipIf(process.platform === "win32")(
-    "produces a command a real shell parses back to the original",
-    () => {
-      const command = withTmuxPath(`printf '%s' "can't"`);
-
-      expect(
-        execFileSync("/bin/sh", ["-c", command], { encoding: "utf8" }),
-      ).toBe("can't");
-    },
-  );
-
-  it("runs every tmux invocation in UTF-8 mode through the path wrapper", () => {
-    expect(tmuxCommand("list-sessions")).toBe(
-      `/bin/sh -c 'PATH=/opt/homebrew/bin:/usr/local/bin:/opt/bin:/usr/pkg/bin:"$PATH"; export PATH; tmux -u list-sessions'`,
-    );
-  });
-
-  it("detects tmux with the UTF-8 wrapper", async () => {
-    const commands: string[] = [];
-    const conn = {
-      exec(command: string, callback: (error: null, stream: never) => void) {
-        commands.push(command);
-        const stream = new EventEmitter() as EventEmitter & {
-          stderr: EventEmitter;
-        };
-        stream.stderr = new EventEmitter();
-        callback(null, stream as never);
-
-        queueMicrotask(() => {
-          if (commands.length === 1) {
-            stream.emit("data", Buffer.from("tmux 3.7b\n"));
-            stream.emit("close", 0);
-            return;
-          }
-          stream.emit("close", 1);
-        });
-      },
-    } as unknown as Client;
-
-    await expect(detectTmux(conn)).resolves.toEqual({
-      available: true,
-      sessions: [],
-    });
-    expect(commands).toEqual([
-      `/bin/sh -c 'PATH=/opt/homebrew/bin:/usr/local/bin:/opt/bin:/usr/pkg/bin:"$PATH"; export PATH; tmux -u -V'`,
-      `/bin/sh -c 'PATH=/opt/homebrew/bin:/usr/local/bin:/opt/bin:/usr/pkg/bin:"$PATH"; export PATH; tmux -u list-sessions -F "#{session_name}|#{session_created}|#{session_activity}|#{session_windows}|#{session_attached}" 2>/dev/null'`,
-    ]);
-  });
-});
-
-describe("session-scoped tmux mouse", () => {
-  it.skipIf(process.platform === "win32")(
-    "passes an exact session target and literal separator through both shells",
-    () => {
-      const dir = mkdtempSync(join(tmpdir(), "termix-tmux-"));
-      try {
-        writeFileSync(join(dir, "tmux"), '#!/bin/sh\nprintf "%s\\n" "$@"\n', {
-          mode: 0o755,
-        });
-        let command = "";
-        const stream = {
-          write: (value: string) => {
-            command = value;
-          },
-        };
-        const name = "qa's $(echo injected)";
-        attachOrCreateTmuxSession(
-          stream as unknown as ClientChannel,
-          name,
-          undefined,
-          false,
-        );
-        expect(command.endsWith("\r")).toBe(true);
-        const args = execFileSync("/bin/sh", ["-c", command.trim()], {
-          encoding: "utf8",
-          env: { ...process.env, PATH: `${dir}:/usr/bin:/bin` },
-        })
-          .trim()
-          .split("\n");
-        expect(args).toEqual([
-          "-u",
-          "set-option",
-          "-q",
-          "-t",
-          `=${name}`,
-          "mouse",
-          "off",
-          ";",
-          "set-option",
-          "-q",
-          "-t",
-          `=${name}`,
-          "history-limit",
-          "50000",
-          ";",
-          "attach-session",
-          "-t",
-          `=${name}`,
-        ]);
-      } finally {
-        rmSync(dir, { recursive: true, force: true });
-      }
-    },
-  );
-
-  it("creates the named session before configuring and attaching it", () => {
-    let command = "";
-    attachOrCreateTmuxSession(
-      {
-        write: (value: string) => {
-          command = value;
-        },
-      } as unknown as ClientChannel,
-      undefined,
-      "work",
-    );
-    expect(command.indexOf("new-session")).toBeLessThan(
-      command.indexOf("set-option"),
-    );
-    expect(command.indexOf("set-option")).toBeLessThan(
-      command.indexOf("attach-session"),
-    );
-    expect(command).toContain("mouse on");
-    expect(command).toContain("history-limit 50000");
-    expect(command).not.toMatch(/set -g|set-hook|bind-key|set-clipboard/);
-  });
-});
diff --git a/plugins/tmux-monitor/tests/frontend/activate.test.tsx b/plugins/tmux-monitor/tests/frontend/activate.test.tsx
deleted file mode 100644
index 4fd7fae47..000000000
--- a/plugins/tmux-monitor/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,108 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { fireEvent, screen } from "@testing-library/react";
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-const declared = (views?: Array<{ id: string }>) =>
-  (views ?? []).map((view) => view.id).sort();
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-function stubApi(overrides: Partial<PluginApiClient> = {}): PluginApiClient {
-  return {
-    get: vi.fn(async () => ({ data: {} })),
-    post: vi.fn(async () => ({ data: {} })),
-    put: vi.fn(async () => ({ data: {} })),
-    patch: vi.fn(async () => ({ data: {} })),
-    delete: vi.fn(async () => ({ data: {} })),
-    ...overrides,
-  } as PluginApiClient;
-}
-
-describe(`${manifest.id} activate`, () => {
-  it("registers only views its manifest declares", async () => {
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: stubApi(),
-    });
-    const contributes = manifest.contributes as unknown as Record<
-      string,
-      Array<{ id: string }> | undefined
-    >;
-    const tabs = declared(contributes.tabs);
-    expect(rendered.registered.tabs()).toEqual(["tmux_monitor"]);
-    expect(rendered.registered.hostEditorSections()).toEqual(["tmux-monitor"]);
-    expect(rendered.registered.hostActions()).toEqual([
-      expect.objectContaining({ id: "tmux_monitor", tabType: undefined }),
-    ]);
-    for (const id of rendered.registered.tabs()) expect(tabs).toContain(id);
-  });
-
-  it("removes everything it registered on deactivate", async () => {
-    const app = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: stubApi(),
-    });
-    await app.deactivate();
-    expect(app.registered.tabs()).toEqual([]);
-    expect(app.registered.hostActions()).toEqual([]);
-    expect(app.registered.hostEditorSections()).toEqual([]);
-  });
-});
-
-describe("host editor section", () => {
-  it("writes the enable switch into the form's tmux-monitor plugin settings", async () => {
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: stubApi(),
-    });
-    let form: Record<string, unknown> = {
-      name: "web",
-      pluginSettings: { "tmux-monitor": { enableTmuxMonitor: false } },
-    };
-    const updateForm = vi.fn(
-      (
-        patch: (current: Record<string, unknown>) => Record<string, unknown>,
-      ) => {
-        form = patch(form);
-      },
-    );
-
-    rendered.renderHostEditorSection("tmux-monitor", {
-      form,
-      setField: vi.fn(),
-      updateForm,
-      protocols: { ssh: true },
-    });
-
-    fireEvent.click(screen.getAllByRole("button")[0]);
-
-    const settings = (form.pluginSettings as Record<string, unknown>)[
-      "tmux-monitor"
-    ] as { enableTmuxMonitor: boolean };
-    expect(settings.enableTmuxMonitor).toBe(true);
-    fireEvent.click(screen.getAllByRole("button")[1]);
-    expect(
-      (form.pluginSettings as Record<string, Record<string, unknown>>)[
-        "tmux-monitor"
-      ],
-    ).toEqual({ enableTmuxMonitor: true, mouseEnabled: false });
-  });
-});
diff --git a/plugins/tmux-monitor/tests/frontend/host-tmux-monitor.test.ts b/plugins/tmux-monitor/tests/frontend/host-tmux-monitor.test.ts
deleted file mode 100644
index ee41d6844..000000000
--- a/plugins/tmux-monitor/tests/frontend/host-tmux-monitor.test.ts
+++ /dev/null
@@ -1,44 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { tmuxMonitorEnabled } from "../../src/frontend/host-tmux-monitor";
-
-describe("tmuxMonitorEnabled", () => {
-  it("is false when there is no pluginSettings", () => {
-    expect(tmuxMonitorEnabled(undefined)).toBe(false);
-    expect(
-      tmuxMonitorEnabled({ id: "1", name: "a", ip: "1.2.3.4", port: 22 }),
-    ).toBe(false);
-  });
-
-  it("is false when another plugin's settings are present but not this one's", () => {
-    expect(
-      tmuxMonitorEnabled({
-        id: "1",
-        name: "a",
-        ip: "1.2.3.4",
-        port: 22,
-        pluginSettings: { tunnels: { enableTunnel: true } },
-      }),
-    ).toBe(false);
-  });
-
-  it("is true only when enableTmuxMonitor is exactly true", () => {
-    expect(
-      tmuxMonitorEnabled({
-        id: "1",
-        name: "a",
-        ip: "1.2.3.4",
-        port: 22,
-        pluginSettings: { "tmux-monitor": { enableTmuxMonitor: true } },
-      }),
-    ).toBe(true);
-    expect(
-      tmuxMonitorEnabled({
-        id: "1",
-        name: "a",
-        ip: "1.2.3.4",
-        port: 22,
-        pluginSettings: { "tmux-monitor": { enableTmuxMonitor: "true" } },
-      }),
-    ).toBe(false);
-  });
-});
diff --git a/plugins/tmux-monitor/tests/frontend/monitor-storage.test.ts b/plugins/tmux-monitor/tests/frontend/monitor-storage.test.ts
deleted file mode 100644
index 33e28ee45..000000000
--- a/plugins/tmux-monitor/tests/frontend/monitor-storage.test.ts
+++ /dev/null
@@ -1,32 +0,0 @@
-import { beforeEach, describe, expect, it } from "vitest";
-import {
-  readExpanded,
-  readSelectedPane,
-  readMonitorValue,
-  saveMonitorValue,
-} from "../../src/frontend/monitor-storage";
-
-beforeEach(() => localStorage.clear());
-describe("per-host monitor preferences", () => {
-  it("keeps identically named sessions and panes separate by host", () => {
-    saveMonitorValue("expanded-1", ["same"]);
-    saveMonitorValue("expanded-2", []);
-    saveMonitorValue("pane-1", {
-      paneId: "%0",
-      sessionName: "same",
-      windowIndex: 0,
-    });
-    expect(readExpanded(1)).toEqual(new Set(["same"]));
-    expect(readExpanded(2)).toEqual(new Set());
-    expect(readSelectedPane(1)?.paneId).toBe("%0");
-    expect(readSelectedPane(2)).toBeNull();
-  });
-  it("tolerates invalid or obsolete stored values", () => {
-    localStorage.setItem("termix-tmux-monitor-filter", "{broken");
-    expect(readMonitorValue("filter", "")).toBe("");
-    saveMonitorValue("pane-1", { paneId: "%0", windowIndex: "0" });
-    expect(readSelectedPane(1)).toBeNull();
-    saveMonitorValue("expanded-1", ["same", null, 3]);
-    expect(readExpanded(1)).toEqual(new Set(["same"]));
-  });
-});
diff --git a/plugins/tmux-monitor/tests/frontend/multi-host-monitor.test.tsx b/plugins/tmux-monitor/tests/frontend/multi-host-monitor.test.tsx
deleted file mode 100644
index 522136896..000000000
--- a/plugins/tmux-monitor/tests/frontend/multi-host-monitor.test.tsx
+++ /dev/null
@@ -1,351 +0,0 @@
-import type { ComponentProps } from "react";
-import type { PanePreview } from "../../src/frontend/PanePreview";
-import type { SessionTree } from "../../src/frontend/SessionTree";
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import {
-  act,
-  cleanup,
-  fireEvent,
-  render,
-  screen,
-  waitFor,
-  within,
-} from "@testing-library/react";
-import "@testing-library/jest-dom/vitest";
-import { TmuxMonitor } from "../../src/frontend/TmuxMonitor";
-import * as api from "../../src/frontend/api";
-
-const state = vi.hoisted(() => ({
-  hosts: [1, 2].map((id) => ({
-    id,
-    name: `Host ${id}`,
-    ip: `host${id}`,
-    enableSsh: true,
-    pluginSettings: { "tmux-monitor": { enableTmuxMonitor: true } },
-  })),
-  toast: { success: vi.fn(), error: vi.fn() },
-  t: (key: string) => key,
-}));
-vi.mock("@termix/plugin-sdk/frontend", async (original) => ({
-  ...(await original<object>()),
-  useHosts: () => ({ hosts: state.hosts, loaded: true }),
-  useToast: () => state.toast,
-  useTranslation: () => ({ t: state.t }),
-}));
-vi.mock("../../src/frontend/api", () => ({
-  getTmuxOverview: vi.fn(),
-  getTmuxMetrics: vi.fn(),
-  focusTmuxPane: vi.fn(),
-  searchTmux: vi.fn(),
-  setTmuxSessionTags: vi.fn(),
-  createTmuxSession: vi.fn(),
-  createTmuxWindow: vi.fn(),
-  renameTmuxSession: vi.fn(),
-  killTmuxSession: vi.fn(),
-  killTmuxWindow: vi.fn(),
-  killTmuxPane: vi.fn(),
-  splitTmuxPane: vi.fn(),
-}));
-vi.mock("../../src/frontend/use-adaptive-polling", async () => {
-  const { useEffect, useRef } = await import("react");
-  return {
-    useAdaptivePolling: (
-      poll: () => Promise<unknown>,
-      _policy: unknown,
-      enabled: boolean,
-      options?: { runImmediately?: boolean },
-    ) => {
-      const ref = useRef(poll);
-      ref.current = poll;
-      useEffect(() => {
-        if (enabled && options?.runImmediately !== false)
-          void Promise.resolve(ref.current()).catch(() => {});
-      }, [enabled, options?.runImmediately]);
-    },
-  };
-});
-vi.mock("../../src/frontend/PanePreview", () => ({
-  PanePreview: ({
-    host,
-    pane,
-    metrics,
-  }: ComponentProps<typeof PanePreview>) => (
-    <div data-testid="preview">
-      {host.id}:{pane.paneId}:{metrics?.cpuPercent ?? "none"}
-    </div>
-  ),
-}));
-vi.mock("../../src/frontend/SessionTree", () => ({
-  SessionTree: (props: ComponentProps<typeof SessionTree>) => (
-    <div>
-      <span>cpu:{props.metricsByPane.get("%0")?.cpuPercent ?? "none"}</span>
-      <span>
-        {props.expandedSessions.has("same") ? "expanded" : "collapsed"}
-      </span>
-      <button
-        onClick={() =>
-          props.onSelectPane({
-            paneId: "%0",
-            sessionName: "same",
-            windowIndex: 0,
-          })
-        }
-      >
-        pane
-      </button>
-      <button onClick={() => props.onSelectSession?.("same")}>session</button>
-      <button onClick={() => props.onNewWindow("same")}>new window</button>
-      <button onClick={() => props.onKillSession("same")}>kill session</button>
-      <button onClick={() => props.onToggleSession("same")}>
-        toggle session
-      </button>
-    </div>
-  ),
-}));
-
-function overview(): api.TmuxOverview {
-  return {
-    available: true,
-    sessions: [
-      {
-        name: "same",
-        created: 1,
-        lastActivity: 1,
-        attachedClients: 0,
-        tags: [],
-        windows: [
-          {
-            index: 0,
-            name: "window",
-            active: true,
-            panes: [
-              {
-                id: "%0",
-                index: 0,
-                pid: 1,
-                active: true,
-                width: 80,
-                height: 24,
-                command: "bash",
-                path: "/",
-                title: "",
-              },
-            ],
-          },
-        ],
-      },
-    ],
-  };
-}
-function metrics(id: number): api.TmuxPaneMetrics[] {
-  return [
-    {
-      paneId: "%0",
-      sessionName: "same",
-      pid: 1,
-      processCount: 1,
-      cpuPercent: id * 10,
-      memRssKb: id,
-      gpuMemMb: 0,
-      topCommand: "bash",
-    },
-  ];
-}
-function deferred<T>() {
-  let resolve!: (value: T) => void;
-  const promise = new Promise<T>((r) => {
-    resolve = r;
-  });
-  return { promise, resolve };
-}
-const host = (id: number) =>
-  within(screen.getByRole("region", { name: `Host ${id}` }));
-beforeEach(() => {
-  vi.clearAllMocks();
-  localStorage.clear();
-  vi.mocked(api.getTmuxOverview).mockImplementation(async () => overview());
-  vi.mocked(api.getTmuxMetrics).mockImplementation(async (id) => metrics(id));
-  vi.mocked(api.focusTmuxPane).mockResolvedValue();
-  vi.mocked(api.createTmuxWindow).mockResolvedValue();
-});
-afterEach(cleanup);
-
-describe("multi-host tmux monitor", () => {
-  it("isolates duplicate session/pane IDs and routes preview and management to their host", async () => {
-    render(<TmuxMonitor initialHostId={1} />);
-    await waitFor(() =>
-      expect(host(1).getByText("cpu:10")).toBeInTheDocument(),
-    );
-    await waitFor(() =>
-      expect(host(2).getByText("cpu:20")).toBeInTheDocument(),
-    );
-    fireEvent.click(host(2).getByText("pane"));
-    await waitFor(() =>
-      expect(screen.getByTestId("preview")).toHaveTextContent("2:%0:20"),
-    );
-    expect(api.focusTmuxPane).toHaveBeenLastCalledWith(2, "%0");
-    await waitFor(() =>
-      expect(host(1).getByText("new window")).toBeInTheDocument(),
-    );
-    fireEvent.click(host(1).getByText("new window"));
-    await waitFor(() =>
-      expect(api.createTmuxWindow).toHaveBeenCalledExactlyOnceWith(1, "same"),
-    );
-  });
-
-  it("restores the last host, pane, filter and expanded sessions", async () => {
-    const first = render(<TmuxMonitor initialHostId={1} />);
-    await waitFor(() => expect(host(2).getByText("pane")).toBeInTheDocument());
-    fireEvent.click(host(2).getByText("pane"));
-    await waitFor(() =>
-      expect(screen.getByTestId("preview")).toHaveTextContent("2:%0"),
-    );
-    fireEvent.click(host(2).getByText("toggle session"));
-    fireEvent.change(screen.getByLabelText("tmuxMonitor.filterHosts"), {
-      target: { value: "Host 2" },
-    });
-    first.unmount();
-    render(<TmuxMonitor />);
-    await waitFor(() =>
-      expect(screen.getByTestId("preview")).toHaveTextContent("2:%0"),
-    );
-    expect(screen.getByLabelText("tmuxMonitor.filterHosts")).toHaveValue(
-      "Host 2",
-    );
-    expect(host(2).getByText("collapsed")).toBeInTheDocument();
-    expect(
-      screen.queryByRole("region", { name: "Host 1" }),
-    ).not.toBeInTheDocument();
-  });
-
-  it("ignores late metrics from a previously selected host", async () => {
-    const old = deferred<api.TmuxPaneMetrics[]>();
-    vi.mocked(api.getTmuxMetrics).mockImplementation((id) =>
-      id === 1 ? old.promise : Promise.resolve(metrics(id)),
-    );
-    render(<TmuxMonitor initialHostId={1} />);
-    await waitFor(() => expect(host(2).getByText("pane")).toBeInTheDocument());
-    fireEvent.click(host(2).getByText("pane"));
-    await waitFor(() =>
-      expect(screen.getByTestId("preview")).toHaveTextContent("2:%0:20"),
-    );
-    await act(async () => old.resolve(metrics(9)));
-    expect(screen.getByTestId("preview")).toHaveTextContent("2:%0:20");
-  });
-
-  it("does not execute an abandoned cross-host action after its overview arrives", async () => {
-    const delayed = deferred<api.TmuxOverview>();
-    render(<TmuxMonitor initialHostId={1} />);
-    await waitFor(() => expect(host(2).getByText("pane")).toBeInTheDocument());
-    vi.mocked(api.getTmuxOverview).mockImplementation((id) =>
-      id === 2 ? delayed.promise : Promise.resolve(overview()),
-    );
-    fireEvent.click(host(2).getByText("new window"));
-    fireEvent.click(host(1).getByRole("button", { name: "Host 1" }));
-    await act(async () => delayed.resolve(overview()));
-    expect(api.createTmuxWindow).not.toHaveBeenCalled();
-  });
-
-  it("isolates an unavailable host and stops loading collapsed, filtered and hidden hosts", async () => {
-    localStorage.setItem("termix-tmux-monitor-collapsed-hosts", '["2"]');
-    const app = render(<TmuxMonitor initialHostId={1} />);
-    await waitFor(() => expect(host(1).getByText("pane")).toBeInTheDocument());
-    expect(api.getTmuxOverview).not.toHaveBeenCalledWith(2);
-    vi.mocked(api.getTmuxOverview).mockImplementation(async (id) => {
-      if (id === 2) throw new Error("offline");
-      return overview();
-    });
-    fireEvent.click(host(2).getByLabelText("tmuxMonitor.toggleHost"));
-    await waitFor(() =>
-      expect(host(2).getByRole("status")).toHaveTextContent(
-        "tmuxMonitor.failedToLoad",
-      ),
-    );
-    expect(host(1).getByText("pane")).toBeInTheDocument();
-    app.rerender(<TmuxMonitor initialHostId={1} isVisible={false} />);
-    expect(host(2).queryByRole("status")).not.toBeInTheDocument();
-  });
-
-  it("confirms a destructive action on the host selected from the background tree", async () => {
-    render(<TmuxMonitor initialHostId={1} />);
-    await waitFor(() =>
-      expect(host(2).getByText("kill session")).toBeInTheDocument(),
-    );
-    fireEvent.click(host(2).getByText("kill session"));
-    await waitFor(() => expect(screen.getByRole("dialog")).toBeInTheDocument());
-    fireEvent.click(
-      within(screen.getByRole("dialog")).getByRole("button", {
-        name: "tmuxMonitor.kill",
-      }),
-    );
-    await waitFor(() =>
-      expect(api.killTmuxSession).toHaveBeenCalledExactlyOnceWith(2, "same"),
-    );
-  });
-
-  it("does not restore a pane removed from the server", async () => {
-    localStorage.setItem(
-      "termix-tmux-monitor-pane-1",
-      JSON.stringify({ paneId: "%99", sessionName: "same", windowIndex: 0 }),
-    );
-    render(<TmuxMonitor initialHostId={1} />);
-    await waitFor(() => expect(host(1).getByText("pane")).toBeInTheDocument());
-    expect(screen.queryByTestId("preview")).not.toBeInTheDocument();
-    expect(api.focusTmuxPane).not.toHaveBeenCalled();
-  });
-
-  it("ignores an old overview after switching away and back to the same host", async () => {
-    const old = deferred<api.TmuxOverview>();
-    let first = true;
-    vi.mocked(api.getTmuxOverview).mockImplementation((id) => {
-      if (id === 1 && first) {
-        first = false;
-        return old.promise;
-      }
-      return Promise.resolve(overview());
-    });
-    render(<TmuxMonitor initialHostId={1} />);
-    await waitFor(() => expect(host(2).getByText("pane")).toBeInTheDocument());
-    fireEvent.click(host(2).getByText("pane"));
-    await waitFor(() =>
-      expect(screen.getByTestId("preview")).toHaveTextContent("2:%0"),
-    );
-    fireEvent.click(host(1).getByRole("button", { name: "Host 1" }));
-    await waitFor(() => expect(host(1).getByText("pane")).toBeInTheDocument());
-    await act(async () => old.resolve({ available: false, sessions: [] }));
-    expect(host(1).getByText("pane")).toBeInTheDocument();
-  });
-
-  it("honors a repeated host action after switching manually", async () => {
-    const app = render(
-      <TmuxMonitor initialHostId={1} initialHostRequest={1} />,
-    );
-    await waitFor(() => expect(host(2).getByText("pane")).toBeInTheDocument());
-    fireEvent.click(host(2).getByText("pane"));
-    await waitFor(() =>
-      expect(screen.getByTestId("preview")).toHaveTextContent("2:%0"),
-    );
-    app.rerender(<TmuxMonitor initialHostId={1} initialHostRequest={2} />);
-    await waitFor(() =>
-      expect(host(1).getByRole("button", { name: "Host 1" })).toHaveAttribute(
-        "aria-pressed",
-        "true",
-      ),
-    );
-  });
-
-  it("retains single-host mode without loading other hosts", async () => {
-    localStorage.setItem("termix-tmux-monitor-scope", '"single"');
-    render(<TmuxMonitor initialHostId={1} />);
-    await waitFor(() => expect(host(1).getByText("pane")).toBeInTheDocument());
-    expect(api.getTmuxOverview).not.toHaveBeenCalledWith(2);
-    fireEvent.change(screen.getByLabelText("tmuxMonitor.selectHost"), {
-      target: { value: "2" },
-    });
-    await waitFor(() => expect(host(2).getByText("pane")).toBeInTheDocument());
-    fireEvent.click(host(2).getByText("session"));
-    await waitFor(() =>
-      expect(screen.getByTestId("preview")).toHaveTextContent("2:%0"),
-    );
-  });
-});
diff --git a/plugins/tmux-monitor/tests/frontend/poll-queue.test.ts b/plugins/tmux-monitor/tests/frontend/poll-queue.test.ts
deleted file mode 100644
index 899ffe862..000000000
--- a/plugins/tmux-monitor/tests/frontend/poll-queue.test.ts
+++ /dev/null
@@ -1,24 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import { createPollQueue } from "../../src/frontend/poll-queue";
-
-describe("background host polling queue", () => {
-  it("bounds concurrent hosts and releases a slot after failure", async () => {
-    const run = createPollQueue(2);
-    let release!: () => void;
-    const held = new Promise<void>((resolve) => {
-      release = resolve;
-    });
-    const first = run(() => held);
-    const second = run(async () => {
-      throw new Error("offline");
-    });
-    const thirdTask = vi.fn(async () => "third");
-    const third = run(thirdTask);
-    expect(thirdTask).not.toHaveBeenCalled();
-    await expect(second).rejects.toThrow("offline");
-    await expect(third).resolves.toBe("third");
-    expect(thirdTask).toHaveBeenCalledOnce();
-    release();
-    await first;
-  });
-});
diff --git a/plugins/tmux-monitor/tests/frontend/session-tree-selection.test.tsx b/plugins/tmux-monitor/tests/frontend/session-tree-selection.test.tsx
deleted file mode 100644
index 3fc570714..000000000
--- a/plugins/tmux-monitor/tests/frontend/session-tree-selection.test.tsx
+++ /dev/null
@@ -1,50 +0,0 @@
-import { afterEach, expect, it, vi } from "vitest";
-import { cleanup, fireEvent, render, screen } from "@testing-library/react";
-import { SessionTree } from "../../src/frontend/SessionTree";
-vi.mock("@termix/plugin-sdk/frontend", async (original) => ({
-  ...(await original<object>()),
-  useTranslation: () => ({ t: (key: string) => key }),
-}));
-afterEach(cleanup);
-it("selects a session by its label while the chevron only changes expansion", () => {
-  const select = vi.fn();
-  const toggle = vi.fn();
-  const noop = () => {};
-  render(
-    <SessionTree
-      sessions={[
-        {
-          name: "same",
-          created: 1,
-          lastActivity: 1,
-          attachedClients: 0,
-          windows: [],
-          tags: [],
-        },
-      ]}
-      expandedSessions={new Set()}
-      onToggleSession={toggle}
-      selectedPaneId={null}
-      onSelectPane={noop}
-      metricsByPane={new Map()}
-      metricsBySession={new Map()}
-      onSelectSession={select}
-      onEditTags={noop}
-      onAttachSession={noop}
-      onNewWindow={noop}
-      onRenameSession={noop}
-      onKillSession={noop}
-      onKillPane={noop}
-      onSplitPane={noop}
-      onKillWindow={noop}
-      compact={false}
-      now={1}
-    />,
-  );
-  fireEvent.click(screen.getByText("same"));
-  expect(select).toHaveBeenCalledExactlyOnceWith("same");
-  expect(toggle).not.toHaveBeenCalled();
-  fireEvent.click(screen.getByLabelText("tmuxMonitor.toggleSession"));
-  expect(toggle).toHaveBeenCalledExactlyOnceWith("same");
-  expect(select).toHaveBeenCalledOnce();
-});
diff --git a/plugins/tmux-monitor/tsconfig.json b/plugins/tmux-monitor/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/tmux-monitor/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/tmux-monitor/vitest.config.ts b/plugins/tmux-monitor/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/tmux-monitor/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/totp/CHANGELOG.md b/plugins/totp/CHANGELOG.md
deleted file mode 100644
index 9715975fa..000000000
--- a/plugins/totp/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Asks for a code from an authenticator app after signing in. Comes with backup codes in case you lose your phone.
diff --git a/plugins/totp/README.md b/plugins/totp/README.md
deleted file mode 100644
index 1d7e68c09..000000000
--- a/plugins/totp/README.md
+++ /dev/null
@@ -1,17 +0,0 @@
-# TOTP
-
-Ask for a code from an authenticator app after signing in, with backup codes in case you lose your phone.
-
-## Features
-
-- Ask for a code from an authenticator app after signing in.
-- Backup codes you can download and use if you lose your phone.
-- Add more than one device.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/totp/locales/en.json b/plugins/totp/locales/en.json
deleted file mode 100644
index 4610c7ac3..000000000
--- a/plugins/totp/locales/en.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Authenticator App",
-  "factor": "Authenticator code",
-  "challenge": {
-    "enterCode": "Enter verification code",
-    "verify": "Verify Code",
-    "backupCodeHint": "You can also enter one of your backup codes."
-  },
-  "enrollment": {
-    "title": "TOTP Authenticator",
-    "docs": "Docs",
-    "on": "2FA is enabled",
-    "off": "Add extra login security",
-    "enable": "Enable",
-    "disable": "Disable",
-    "addDevice": "Add device",
-    "addTitle": "Add authenticator device",
-    "addDescription": "Confirm with a code from your authenticator or a backup code to enroll another device with the same key.",
-    "addScanInstructions": "Scan this QR code with the additional authenticator. Existing authenticators will continue to work.",
-    "addSuccess": "Additional authenticator enrolled",
-    "addFailed": "Failed to add authenticator",
-    "codeRequired": "Enter a TOTP code or backup code",
-    "codePlaceholder": "TOTP code or backup code",
-    "setupTitle": "Setup TOTP",
-    "setupFailed": "Failed to start TOTP setup",
-    "qrCode": "QR Code",
-    "secretCopied": "Secret copied to clipboard",
-    "instructions": "Scan the QR code or enter the secret in your authenticator app, then enter the 6-digit code",
-    "continueVerify": "Continue to Verify",
-    "verifyTitle": "Verify Code",
-    "verify": "Verify",
-    "enter6Digits": "Enter a 6-digit code",
-    "enabledSuccess": "Two-factor authentication enabled",
-    "invalidCode": "Invalid code, please try again",
-    "disableTitle": "Disable 2FA",
-    "disabledSuccess": "Two-factor authentication disabled",
-    "disableFailed": "Failed to disable 2FA",
-    "backupTitle": "Backup Codes",
-    "downloadBackup": "Download Backup Codes",
-    "done": "Done"
-  }
-}
diff --git a/plugins/totp/locales/translated/af_ZA.json b/plugins/totp/locales/translated/af_ZA.json
deleted file mode 100644
index e69aea245..000000000
--- a/plugins/totp/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Verifikasie-app",
-  "factor": "Verifikasiekode",
-  "challenge": {
-    "enterCode": "Voer verifikasiekode in",
-    "verify": "Verifieer Kode",
-    "backupCodeHint": "Jy kan ook een van jou rugsteunkodes invoer."
-  },
-  "enrollment": {
-    "title": "TOTP-verifikasie",
-    "docs": "Dokumente",
-    "on": "2FA is geaktiveer",
-    "off": "Voeg ekstra aanmeldsekuriteit by",
-    "enable": "Aktiveer",
-    "disable": "Deaktiveer",
-    "addDevice": "Voeg toestel by",
-    "addTitle": "Voeg verifikasietoestel by",
-    "addDescription": "Bevestig met 'n kode van jou verifikator of 'n rugsteunkode om 'n ander toestel met dieselfde sleutel in te skryf.",
-    "addScanInstructions": "Skandeer hierdie QR-kode met die bykomende verifikator. Bestaande verifikators sal aanhou werk.",
-    "addSuccess": "Bykomende outentiseerder ingeskryf",
-    "addFailed": "Kon nie verifieerder byvoeg nie",
-    "codeRequired": "Voer 'n TOTP-kode of rugsteunkode in",
-    "codePlaceholder": "TOTP-kode of rugsteunkode",
-    "setupTitle": "Stel TOTP op",
-    "setupFailed": "Kon nie TOTP-opstelling begin nie",
-    "qrCode": "QR-kode",
-    "secretCopied": "Geheim gekopieer na knipbord",
-    "instructions": "Skandeer die QR-kode of voer die geheim in jou verifikasie-app in, en voer dan die 6-syferkode in",
-    "continueVerify": "Gaan voort om te verifieer",
-    "verifyTitle": "Verifieer Kode",
-    "verify": "Verifieer",
-    "enter6Digits": "Voer 'n 6-syferkode in",
-    "enabledSuccess": "Tweefaktor-verifikasie geaktiveer",
-    "invalidCode": "Ongeldige kode, probeer asseblief weer",
-    "disableTitle": "Deaktiveer 2FA",
-    "disabledSuccess": "Tweefaktor-verifikasie gedeaktiveer",
-    "disableFailed": "Kon nie 2FA deaktiveer nie",
-    "backupTitle": "Rugsteunkodes",
-    "downloadBackup": "Laai rugsteunkodes af",
-    "done": "Klaar"
-  }
-}
diff --git a/plugins/totp/locales/translated/ar_SA.json b/plugins/totp/locales/translated/ar_SA.json
deleted file mode 100644
index b53cf526d..000000000
--- a/plugins/totp/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "تطبيق المصادقة",
-  "factor": "رمز المصادقة",
-  "challenge": {
-    "enterCode": "أدخل رمز التحقق",
-    "verify": "تحقق من الرمز",
-    "backupCodeHint": "يمكنك أيضًا إدخال أحد رموز النسخ الاحتياطي الخاصة بك."
-  },
-  "enrollment": {
-    "title": "مُوثِّق TOTP",
-    "docs": "المستندات",
-    "on": "التحقق بخطوتين ممكّن",
-    "off": "إضافة أمان إضافي لتسجيل الدخول",
-    "enable": "تمكين",
-    "disable": "تعطيل",
-    "addDevice": "إضافة جهاز",
-    "addTitle": "إضافة جهاز المصادقة",
-    "addDescription": "قم بالتأكيد باستخدام رمز من جهاز المصادقة الخاص بك أو رمز احتياطي لتسجيل جهاز آخر بنفس المفتاح.",
-    "addScanInstructions": "امسح رمز الاستجابة السريعة هذا باستخدام أداة المصادقة الإضافية. ستستمر أدوات المصادقة الحالية في العمل.",
-    "addSuccess": "تم تسجيل مصادق إضافي",
-    "addFailed": "فشل إضافة المصادقة",
-    "codeRequired": "أدخل رمز TOTP أو رمز النسخ الاحتياطي",
-    "codePlaceholder": "رمز TOTP أو رمز النسخ الاحتياطي",
-    "setupTitle": "إعداد TOTP",
-    "setupFailed": "فشل بدء إعداد TOTP",
-    "qrCode": "رمز الاستجابة السريعة",
-    "secretCopied": "تم نسخ السر إلى الحافظة",
-    "instructions": "امسح رمز الاستجابة السريعة أو أدخل السر في تطبيق المصادقة الخاص بك، ثم أدخل الرمز المكون من 6 أرقام",
-    "continueVerify": "متابعة للتحقق",
-    "verifyTitle": "تحقق من الرمز",
-    "verify": "تحقق",
-    "enter6Digits": "أدخل رمزًا من 6 أرقام",
-    "enabledSuccess": "تم تمكين المصادقة الثنائية",
-    "invalidCode": "رمز غير صالح، يرجى المحاولة مرة أخرى",
-    "disableTitle": "تعطيل المصادقة الثنائية",
-    "disabledSuccess": "تم تعطيل المصادقة الثنائية",
-    "disableFailed": "فشل تعطيل المصادقة الثنائية",
-    "backupTitle": "رموز النسخ الاحتياطي",
-    "downloadBackup": "تنزيل رموز النسخ الاحتياطي",
-    "done": "تم"
-  }
-}
diff --git a/plugins/totp/locales/translated/bg_BG.json b/plugins/totp/locales/translated/bg_BG.json
deleted file mode 100644
index 15e245c0c..000000000
--- a/plugins/totp/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Приложение за удостоверяване",
-  "factor": "Код за удостоверяване",
-  "challenge": {
-    "enterCode": "Въведете код за потвърждение",
-    "verify": "Код за проверка",
-    "backupCodeHint": "Можете също да въведете един от резервните си кодове."
-  },
-  "enrollment": {
-    "title": "TOTP удостоверител",
-    "docs": "Документи",
-    "on": "2FA е активирана",
-    "off": "Добавете допълнителна сигурност за вход",
-    "enable": "Активиране",
-    "disable": "Деактивиране",
-    "addDevice": "Добавяне на устройство",
-    "addTitle": "Добавяне на устройство за удостоверяване",
-    "addDescription": "Потвърдете с код от вашия удостоверител или резервен код, за да регистрирате друго устройство със същия ключ.",
-    "addScanInstructions": "Сканирайте този QR код с допълнителния автентификатор. Съществуващите автентификатори ще продължат да работят.",
-    "addSuccess": "Допълнителен регистриран удостоверител",
-    "addFailed": "Добавянето на удостоверител не бе успешно",
-    "codeRequired": "Въведете TOTP код или резервен код",
-    "codePlaceholder": "TOTP код или резервен код",
-    "setupTitle": "Настройка на TOTP",
-    "setupFailed": "Неуспешно стартиране на настройката на TOTP",
-    "qrCode": "QR код",
-    "secretCopied": "Тайната е копирана в клипборда",
-    "instructions": "Сканирайте QR кода или въведете тайната в приложението си за удостоверяване, след което въведете 6-цифрения код",
-    "continueVerify": "Продължете с проверката",
-    "verifyTitle": "Код за проверка",
-    "verify": "Проверка",
-    "enter6Digits": "Въведете 6-цифрен код",
-    "enabledSuccess": "Двуфакторно удостоверяване е активирано",
-    "invalidCode": "Невалиден код, моля опитайте отново",
-    "disableTitle": "Деактивиране на 2FA",
-    "disabledSuccess": "Двуфакторното удостоверяване е деактивирано",
-    "disableFailed": "Деактивирането на 2FA не бе успешно",
-    "backupTitle": "Резервни кодове",
-    "downloadBackup": "Изтегляне на резервни кодове",
-    "done": "Готово"
-  }
-}
diff --git a/plugins/totp/locales/translated/bn_BD.json b/plugins/totp/locales/translated/bn_BD.json
deleted file mode 100644
index 7bc8b1ff2..000000000
--- a/plugins/totp/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "প্রমাণীকরণ অ্যাপ",
-  "factor": "প্রমাণীকরণ কোড",
-  "challenge": {
-    "enterCode": "যাচাইকরণ কোড প্রবেশ করান",
-    "verify": "কোড যাচাই করুন",
-    "backupCodeHint": "আপনি আপনার ব্যাকআপ কোডগুলোর মধ্যে একটিও প্রবেশ করাতে পারেন।"
-  },
-  "enrollment": {
-    "title": "TOTP প্রমাণীকরণকারী",
-    "docs": "ডাক্তাররা",
-    "on": "2FA সক্রিয় করা হয়েছে",
-    "off": "অতিরিক্ত লগইন নিরাপত্তা যোগ করুন",
-    "enable": "সক্ষম করুন",
-    "disable": "অক্ষম করুন",
-    "addDevice": "ডিভাইস যোগ করুন",
-    "addTitle": "প্রমাণীকরণ ডিভাইস যোগ করুন",
-    "addDescription": "একই কী ব্যবহার করে অন্য একটি ডিভাইস এনরোল করতে, আপনার অথেন্টিকেটর থেকে পাওয়া কোড অথবা একটি ব্যাকআপ কোড দিয়ে নিশ্চিত করুন।",
-    "addScanInstructions": "অতিরিক্ত অথেন্টিকেটর দিয়ে এই কিউআর কোডটি স্ক্যান করুন। বিদ্যমান অথেন্টিকেটরগুলো কাজ করতে থাকবে।",
-    "addSuccess": "অতিরিক্ত প্রমাণীকরণকারী নথিভুক্ত করা হয়েছে",
-    "addFailed": "প্রমাণীকরণকারী যোগ করতে ব্যর্থ হয়েছে",
-    "codeRequired": "একটি TOTP কোড অথবা ব্যাকআপ কোড প্রবেশ করান।",
-    "codePlaceholder": "TOTP কোড বা ব্যাকআপ কোড",
-    "setupTitle": "TOTP সেটআপ করুন",
-    "setupFailed": "TOTP সেটআপ শুরু করতে ব্যর্থ হয়েছে",
-    "qrCode": "কিউআর কোড",
-    "secretCopied": "গোপনীয় তথ্য ক্লিপবোর্ডে কপি করা হয়েছে",
-    "instructions": "কিউআর কোডটি স্ক্যান করুন অথবা আপনার অথেন্টিকেটর অ্যাপে সিক্রেটটি প্রবেশ করান, তারপর ৬-সংখ্যার কোডটি প্রবেশ করান।",
-    "continueVerify": "যাচাই চালিয়ে যান",
-    "verifyTitle": "কোড যাচাই করুন",
-    "verify": "যাচাই করুন",
-    "enter6Digits": "একটি ৬-সংখ্যার কোড প্রবেশ করান",
-    "enabledSuccess": "দ্বি-স্তর প্রমাণীকরণ সক্রিয় করা হয়েছে",
-    "invalidCode": "কোডটি ভুল, অনুগ্রহ করে আবার চেষ্টা করুন।",
-    "disableTitle": "2FA নিষ্ক্রিয় করুন",
-    "disabledSuccess": "দ্বি-স্তর প্রমাণীকরণ নিষ্ক্রিয় করা হয়েছে",
-    "disableFailed": "2FA নিষ্ক্রিয় করতে ব্যর্থ হয়েছে",
-    "backupTitle": "ব্যাকআপ কোড",
-    "downloadBackup": "ব্যাকআপ কোড ডাউনলোড করুন",
-    "done": "সম্পন্ন হয়েছে"
-  }
-}
diff --git a/plugins/totp/locales/translated/ca_ES.json b/plugins/totp/locales/translated/ca_ES.json
deleted file mode 100644
index dd02ca5a3..000000000
--- a/plugins/totp/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Aplicació d'autenticació",
-  "factor": "Codi d'autenticació",
-  "challenge": {
-    "enterCode": "Introduïu el codi de verificació",
-    "verify": "Verifica el codi",
-    "backupCodeHint": "També podeu introduir un dels vostres codis de còpia de seguretat."
-  },
-  "enrollment": {
-    "title": "Autenticador TOTP",
-    "docs": "Documents",
-    "on": "2FA està activat",
-    "off": "Afegeix seguretat d'inici de sessió addicional",
-    "enable": "Activa",
-    "disable": "Desactiva",
-    "addDevice": "Afegeix un dispositiu",
-    "addTitle": "Afegeix un dispositiu d'autenticació",
-    "addDescription": "Confirma amb un codi del teu autenticador o un codi de còpia de seguretat per registrar un altre dispositiu amb la mateixa clau.",
-    "addScanInstructions": "Escaneja aquest codi QR amb l'autenticador addicional. Els autenticadors existents continuaran funcionant.",
-    "addSuccess": "Autenticador addicional inscrit",
-    "addFailed": "No s'ha pogut afegir l'autenticador",
-    "codeRequired": "Introduïu un codi TOTP o un codi de còpia de seguretat",
-    "codePlaceholder": "Codi TOTP o codi de còpia de seguretat",
-    "setupTitle": "Configura TOTP",
-    "setupFailed": "No s'ha pogut iniciar la configuració del TOTP",
-    "qrCode": "Codi QR",
-    "secretCopied": "Secret copiat al porta-retalls",
-    "instructions": "Escaneja el codi QR o introdueix el secret a l'aplicació d'autenticació i, a continuació, introdueix el codi de 6 dígits.",
-    "continueVerify": "Continua a verificar",
-    "verifyTitle": "Verifica el codi",
-    "verify": "Verifica",
-    "enter6Digits": "Introduïu un codi de 6 dígits",
-    "enabledSuccess": "Autenticació de dos factors activada",
-    "invalidCode": "Codi no vàlid, si us plau, torna-ho a intentar.",
-    "disableTitle": "Desactiva la 2FA",
-    "disabledSuccess": "Autenticació de dos factors desactivada",
-    "disableFailed": "No s'ha pogut desactivar la 2FA",
-    "backupTitle": "Codis de còpia de seguretat",
-    "downloadBackup": "Baixa els codis de còpia de seguretat",
-    "done": "Fet"
-  }
-}
diff --git a/plugins/totp/locales/translated/cs_CZ.json b/plugins/totp/locales/translated/cs_CZ.json
deleted file mode 100644
index e89be4778..000000000
--- a/plugins/totp/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Aplikace pro ověřování",
-  "factor": "Ověřovací kód",
-  "challenge": {
-    "enterCode": "Zadejte ověřovací kód",
-    "verify": "Ověřte kód",
-    "backupCodeHint": "Můžete také zadat jeden ze svých záložních kódů."
-  },
-  "enrollment": {
-    "title": "Ověřovač TOTP",
-    "docs": "Dokumenty",
-    "on": "2FA je povoleno",
-    "off": "Přidejte další zabezpečení přihlášení",
-    "enable": "Umožnit",
-    "disable": "Zakázat",
-    "addDevice": "Přidat zařízení",
-    "addTitle": "Přidat ověřovací zařízení",
-    "addDescription": "Potvrďte kódem z ověřovacího zařízení nebo záložním kódem pro registraci dalšího zařízení se stejným klíčem.",
-    "addScanInstructions": "Naskenujte tento QR kód pomocí dalšího ověřovače. Stávající ověřovače budou i nadále fungovat.",
-    "addSuccess": "Další ověřovatel zaregistrován",
-    "addFailed": "Přidání ověřovatele se nezdařilo",
-    "codeRequired": "Zadejte kód TOTP nebo záložní kód",
-    "codePlaceholder": "Kód TOTP nebo záložní kód",
-    "setupTitle": "Nastavení TOTP",
-    "setupFailed": "Nepodařilo se spustit nastavení TOTP",
-    "qrCode": "QR kód",
-    "secretCopied": "Tajný kód zkopírován do schránky",
-    "instructions": "Naskenujte QR kód nebo zadejte tajný kód do ověřovací aplikace a poté zadejte 6místný kód.",
-    "continueVerify": "Pokračovat k ověřování",
-    "verifyTitle": "Ověřte kód",
-    "verify": "Ověřit",
-    "enter6Digits": "Zadejte 6místný kód",
-    "enabledSuccess": "Dvoufázové ověřování povoleno",
-    "invalidCode": "Neplatný kód, zkuste to prosím znovu.",
-    "disableTitle": "Zakázat 2FA",
-    "disabledSuccess": "Dvoufázové ověřování zakázáno",
-    "disableFailed": "Nepodařilo se zakázat 2FA",
-    "backupTitle": "Záložní kódy",
-    "downloadBackup": "Stáhnout záložní kódy",
-    "done": "Hotovo"
-  }
-}
diff --git a/plugins/totp/locales/translated/da_DK.json b/plugins/totp/locales/translated/da_DK.json
deleted file mode 100644
index af547b43f..000000000
--- a/plugins/totp/locales/translated/da_DK.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Autentificeringsapp",
-  "factor": "Autentificeringskode",
-  "challenge": {
-    "enterCode": "Indtast bekræftelseskode",
-    "verify": "Bekræft kode",
-    "backupCodeHint": "Du kan også indtaste en af dine backupkoder."
-  },
-  "enrollment": {
-    "title": "TOTP-godkendelse",
-    "docs": "Dokumenter",
-    "on": "2FA er aktiveret",
-    "off": "Tilføj ekstra loginsikkerhed",
-    "enable": "Aktivér",
-    "disable": "Deaktiver",
-    "addDevice": "Tilføj enhed",
-    "addTitle": "Tilføj godkendelsesenhed",
-    "addDescription": "Bekræft med en kode fra din autentificeringsværktøj eller en backupkode for at tilmelde en anden enhed med den samme nøgle.",
-    "addScanInstructions": "Scan denne QR-kode med den ekstra godkendelsesfunktion. Eksisterende godkendelsesfunktioner vil fortsat virke.",
-    "addSuccess": "Yderligere godkendelsesfunktion tilmeldt",
-    "addFailed": "Kunne ikke tilføje godkendelse",
-    "codeRequired": "Indtast en TOTP-kode eller backupkode",
-    "codePlaceholder": "TOTP-kode eller backupkode",
-    "setupTitle": "Opsæt TOTP",
-    "setupFailed": "Kunne ikke starte TOTP-opsætningen",
-    "qrCode": "QR-kode",
-    "secretCopied": "Hemmelighed kopieret til udklipsholder",
-    "instructions": "Scan QR-koden, eller indtast hemmeligheden i din autentificeringsapp, og indtast derefter den 6-cifrede kode",
-    "continueVerify": "Fortsæt med at bekræfte",
-    "verifyTitle": "Bekræft kode",
-    "verify": "Verificere",
-    "enter6Digits": "Indtast en 6-cifret kode",
-    "enabledSuccess": "Tofaktorgodkendelse aktiveret",
-    "invalidCode": "Ugyldig kode, prøv igen",
-    "disableTitle": "Deaktiver 2FA",
-    "disabledSuccess": "Tofaktorgodkendelse deaktiveret",
-    "disableFailed": "Kunne ikke deaktivere 2FA",
-    "backupTitle": "Backupkoder",
-    "downloadBackup": "Download backupkoder",
-    "done": "Færdig"
-  }
-}
diff --git a/plugins/totp/locales/translated/de_DE.json b/plugins/totp/locales/translated/de_DE.json
deleted file mode 100644
index 7217a84db..000000000
--- a/plugins/totp/locales/translated/de_DE.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Authentifizierungs-App",
-  "factor": "Authentifizierungscode",
-  "challenge": {
-    "enterCode": "Bestätigungscode eingeben",
-    "verify": "Code verifizieren",
-    "backupCodeHint": "Sie können auch einen Ihrer Backup-Codes eingeben."
-  },
-  "enrollment": {
-    "title": "TOTP-Authentifikator",
-    "docs": "Dokumentation",
-    "on": "2FA ist aktiviert",
-    "off": "Zusätzliche Anmeldesicherheit hinzufügen",
-    "enable": "Aktivieren",
-    "disable": "Deaktivieren",
-    "addDevice": "Gerät hinzufügen",
-    "addTitle": "Authentifizierungsgerät hinzufügen",
-    "addDescription": "Bestätigen Sie mit einem Code Ihres Authentifizierungsgeräts oder einem Ersatzcode, um ein anderes Gerät mit demselben Schlüssel zu registrieren.",
-    "addScanInstructions": "Scannen Sie diesen QR-Code mit dem zusätzlichen Authentifikator. Bestehende Authentifikatoren funktionieren weiterhin.",
-    "addSuccess": "Zusätzlicher Authentifizierungsalgorithmus registriert",
-    "addFailed": "Authentifikator konnte nicht hinzugefügt werden",
-    "codeRequired": "Geben Sie einen TOTP-Code oder einen Backup-Code ein.",
-    "codePlaceholder": "TOTP-Code oder Backup-Code",
-    "setupTitle": "TOTP einrichten",
-    "setupFailed": "Fehler beim Starten der TOTP-Einrichtung",
-    "qrCode": "QR-Code",
-    "secretCopied": "Secret in die Zwischenablage kopiert",
-    "instructions": "Scannen Sie den QR-Code oder geben Sie das Geheimnis in Ihrer Authentifizierungs-App ein und geben Sie anschließend den 6-stelligen Code ein.",
-    "continueVerify": "Weiter zur Verifizierung",
-    "verifyTitle": "Code verifizieren",
-    "verify": "Verifizieren",
-    "enter6Digits": "Geben Sie einen 6-stelligen Code ein",
-    "enabledSuccess": "Zwei-Faktor-Authentifizierung aktiviert",
-    "invalidCode": "Ungültiger Code, bitte versuchen Sie es erneut",
-    "disableTitle": "2FA deaktivieren",
-    "disabledSuccess": "Zwei-Faktor-Authentifizierung deaktiviert",
-    "disableFailed": "Fehler beim Deaktivieren der 2FA",
-    "backupTitle": "Backup-Codes",
-    "downloadBackup": "Backup-Codes herunterladen",
-    "done": "Fertig"
-  }
-}
diff --git a/plugins/totp/locales/translated/el_GR.json b/plugins/totp/locales/translated/el_GR.json
deleted file mode 100644
index 9cc7ebd63..000000000
--- a/plugins/totp/locales/translated/el_GR.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Εφαρμογή ελέγχου ταυτότητας",
-  "factor": "Κωδικός ελέγχου ταυτότητας",
-  "challenge": {
-    "enterCode": "Εισαγάγετε τον κωδικό επαλήθευσης",
-    "verify": "Επαλήθευση Κωδικού",
-    "backupCodeHint": "Μπορείτε επίσης να εισαγάγετε έναν από τους εφεδρικούς κωδικούς σας."
-  },
-  "enrollment": {
-    "title": "Επαληθευτής TOTP",
-    "docs": "Έγγραφα",
-    "on": "Το 2FA είναι ενεργοποιημένο",
-    "off": "Προσθέστε επιπλέον ασφάλεια σύνδεσης",
-    "enable": "Καθιστώ ικανό",
-    "disable": "Καθιστώ ανίκανο",
-    "addDevice": "Προσθήκη συσκευής",
-    "addTitle": "Προσθήκη συσκευής ελέγχου ταυτότητας",
-    "addDescription": "Επιβεβαιώστε με έναν κωδικό από τον υπεύθυνο ελέγχου ταυτότητας ή έναν εφεδρικό κωδικό για να εγγράψετε μια άλλη συσκευή με το ίδιο κλειδί.",
-    "addScanInstructions": "Σαρώστε αυτόν τον κωδικό QR με τον πρόσθετο έλεγχο ταυτότητας. Οι υπάρχοντες έλεγχοι ταυτότητας θα συνεχίσουν να λειτουργούν.",
-    "addSuccess": "Εγγράφηκε επιπλέον υπεύθυνος ελέγχου ταυτότητας",
-    "addFailed": "Αποτυχία προσθήκης ελέγχου ταυτότητας",
-    "codeRequired": "Εισαγάγετε έναν κωδικό TOTP ή έναν εφεδρικό κωδικό",
-    "codePlaceholder": "Κωδικός TOTP ή εφεδρικός κωδικός",
-    "setupTitle": "Ρύθμιση TOTP",
-    "setupFailed": "Αποτυχία έναρξης ρύθμισης TOTP",
-    "qrCode": "Κωδικός QR",
-    "secretCopied": "Το μυστικό αντιγράφηκε στο πρόχειρο",
-    "instructions": "Σαρώστε τον κωδικό QR ή εισαγάγετε το μυστικό κωδικό στην εφαρμογή ελέγχου ταυτότητας και, στη συνέχεια, εισαγάγετε τον 6ψήφιο κωδικό",
-    "continueVerify": "Συνέχεια για επαλήθευση",
-    "verifyTitle": "Επαλήθευση Κωδικού",
-    "verify": "Επαληθεύω",
-    "enter6Digits": "Εισαγάγετε έναν 6ψήφιο κωδικό",
-    "enabledSuccess": "Ενεργοποιήθηκε ο έλεγχος ταυτότητας δύο παραγόντων",
-    "invalidCode": "Μη έγκυρος κωδικός, δοκιμάστε ξανά",
-    "disableTitle": "Απενεργοποίηση 2FA",
-    "disabledSuccess": "Ο έλεγχος ταυτότητας δύο παραγόντων απενεργοποιήθηκε",
-    "disableFailed": "Αποτυχία απενεργοποίησης 2FA",
-    "backupTitle": "Κωδικοί αντιγράφων ασφαλείας",
-    "downloadBackup": "Λήψη αντιγράφων ασφαλείας κωδικών",
-    "done": "Γινώμενος"
-  }
-}
diff --git a/plugins/totp/locales/translated/es_ES.json b/plugins/totp/locales/translated/es_ES.json
deleted file mode 100644
index e4038127b..000000000
--- a/plugins/totp/locales/translated/es_ES.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Aplicación de autenticación",
-  "factor": "Código de autenticación",
-  "challenge": {
-    "enterCode": "Introduzca el código de verificación",
-    "verify": "Verificar código",
-    "backupCodeHint": "También puedes introducir uno de tus códigos de respaldo."
-  },
-  "enrollment": {
-    "title": "Autenticador TOTP",
-    "docs": "Documentación",
-    "on": "2FA activada",
-    "off": "Añadir seguridad adicional al inicio de sesión",
-    "enable": "Activar",
-    "disable": "Desactivar",
-    "addDevice": "Agregar dispositivo",
-    "addTitle": "Agregar dispositivo de autenticación",
-    "addDescription": "Confirme con un código de su autenticador o con un código de respaldo para registrar otro dispositivo con la misma clave.",
-    "addScanInstructions": "Escanee este código QR con el autenticador adicional. Los autenticadores existentes seguirán funcionando.",
-    "addSuccess": "Autenticador adicional registrado",
-    "addFailed": "No se pudo agregar el autenticador.",
-    "codeRequired": "Introduzca un código TOTP o un código de respaldo.",
-    "codePlaceholder": "Código TOTP o código de respaldo",
-    "setupTitle": "Configurar TOTP",
-    "setupFailed": "No se pudo iniciar la configuración de TOTP",
-    "qrCode": "Código QR",
-    "secretCopied": "Secreto copiado al portapapeles",
-    "instructions": "Escanea el código QR o introduce la clave secreta en tu aplicación de autenticación, y luego introduce el código de 6 dígitos.",
-    "continueVerify": "Continuar para verificar",
-    "verifyTitle": "Verificar código",
-    "verify": "Verificar",
-    "enter6Digits": "Introduce un código de 6 dígitos",
-    "enabledSuccess": "Autenticación de dos factores activada",
-    "invalidCode": "Código no válido, inténtalo de nuevo",
-    "disableTitle": "Desactivar 2FA",
-    "disabledSuccess": "Autenticación de dos factores desactivada",
-    "disableFailed": "No se pudo desactivar 2FA",
-    "backupTitle": "Códigos de respaldo",
-    "downloadBackup": "Descargar códigos de respaldo",
-    "done": "Listo"
-  }
-}
diff --git a/plugins/totp/locales/translated/fi_FI.json b/plugins/totp/locales/translated/fi_FI.json
deleted file mode 100644
index 7684392db..000000000
--- a/plugins/totp/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Authenticator-sovellus",
-  "factor": "Todennuskoodi",
-  "challenge": {
-    "enterCode": "Syötä vahvistuskoodi",
-    "verify": "Vahvista koodi",
-    "backupCodeHint": "Voit myös antaa jonkin varakoodeistasi."
-  },
-  "enrollment": {
-    "title": "TOTP-todentaja",
-    "docs": "Dokumentit",
-    "on": "2FA on käytössä",
-    "off": "Lisää kirjautumisen turvallisuutta",
-    "enable": "Ota käyttöön",
-    "disable": "Poista käytöstä",
-    "addDevice": "Lisää laite",
-    "addTitle": "Lisää todennuslaite",
-    "addDescription": "Vahvista todentajasi koodilla tai varakoodilla rekisteröidäksesi toisen laitteen samalla avaimella.",
-    "addScanInstructions": "Skannaa tämä QR-koodi lisätodentajalla. Nykyiset todentajat toimivat edelleen.",
-    "addSuccess": "Lisätodentaja rekisteröity",
-    "addFailed": "Todentajan lisääminen epäonnistui",
-    "codeRequired": "Anna TOTP-koodi tai varakoodi",
-    "codePlaceholder": "TOTP-koodi tai varakoodi",
-    "setupTitle": "TOTP:n määrittäminen",
-    "setupFailed": "TOTP-asennuksen aloittaminen epäonnistui",
-    "qrCode": "QR-koodi",
-    "secretCopied": "Salaisuus kopioitu leikepöydälle",
-    "instructions": "Skannaa QR-koodi tai syötä salaisuus todennussovellukseesi ja syötä sitten 6-numeroinen koodi.",
-    "continueVerify": "Jatka vahvistamiseen",
-    "verifyTitle": "Vahvista koodi",
-    "verify": "Vahvista",
-    "enter6Digits": "Syötä 6-numeroinen koodi",
-    "enabledSuccess": "Kaksivaiheinen todennus käytössä",
-    "invalidCode": "Virheellinen koodi, yritä uudelleen",
-    "disableTitle": "Poista 2FA käytöstä",
-    "disabledSuccess": "Kaksivaiheinen todennus poistettu käytöstä",
-    "disableFailed": "2FA:n poistaminen käytöstä epäonnistui",
-    "backupTitle": "Varakoodit",
-    "downloadBackup": "Lataa varakoodit",
-    "done": "Tehty"
-  }
-}
diff --git a/plugins/totp/locales/translated/fr_FR.json b/plugins/totp/locales/translated/fr_FR.json
deleted file mode 100644
index c4cca507e..000000000
--- a/plugins/totp/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Application d'authentification",
-  "factor": "Code d'authentification",
-  "challenge": {
-    "enterCode": "Saisissez le code de vérification",
-    "verify": "Vérifier le code",
-    "backupCodeHint": "Vous pouvez également saisir l'un de vos codes de secours."
-  },
-  "enrollment": {
-    "title": "Authentificateur TOTP",
-    "docs": "Documentation",
-    "on": "2FA activée",
-    "off": "Ajouter une sécurité de connexion supplémentaire",
-    "enable": "Activer",
-    "disable": "Désactiver",
-    "addDevice": "Ajouter un appareil",
-    "addTitle": "Ajouter un dispositif d'authentification",
-    "addDescription": "Confirmez avec un code provenant de votre authentificateur ou un code de secours pour enregistrer un autre appareil avec la même clé.",
-    "addScanInstructions": "Scannez ce code QR avec l'authentificateur supplémentaire. Les authentificateurs existants continueront de fonctionner.",
-    "addSuccess": "Authentificateur supplémentaire enregistré",
-    "addFailed": "Échec de l'ajout de l'authentificateur",
-    "codeRequired": "Saisissez un code TOTP ou un code de secours",
-    "codePlaceholder": "Code TOTP ou code de secours",
-    "setupTitle": "Configurer TOTP",
-    "setupFailed": "Échec du démarrage de la configuration TOTP",
-    "qrCode": "Code QR",
-    "secretCopied": "Secret copié dans le presse-papiers",
-    "instructions": "Scannez le code QR ou saisissez le code secret dans votre application d'authentification, puis saisissez le code à 6 chiffres.",
-    "continueVerify": "Poursuivre la vérification",
-    "verifyTitle": "Vérifier le code",
-    "verify": "Vérifier",
-    "enter6Digits": "Saisissez un code à 6 chiffres",
-    "enabledSuccess": "Authentification à deux facteurs activée",
-    "invalidCode": "Code invalide, veuillez réessayer",
-    "disableTitle": "Désactiver l’A2F",
-    "disabledSuccess": "Authentification à deux facteurs désactivée",
-    "disableFailed": "Échec de la désactivation de la 2FA",
-    "backupTitle": "Codes de sauvegarde",
-    "downloadBackup": "Télécharger les codes de sauvegarde",
-    "done": "Terminé"
-  }
-}
diff --git a/plugins/totp/locales/translated/he_IL.json b/plugins/totp/locales/translated/he_IL.json
deleted file mode 100644
index 043a4775a..000000000
--- a/plugins/totp/locales/translated/he_IL.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "אפליקציית אימות",
-  "factor": "קוד אימות",
-  "challenge": {
-    "enterCode": "הזן קוד אימות",
-    "verify": "אימות קוד",
-    "backupCodeHint": "ניתן גם להזין אחד מקודי הגיבוי שלך."
-  },
-  "enrollment": {
-    "title": "מאמת TOTP",
-    "docs": "מסמכים",
-    "on": "2FA מופעל",
-    "off": "הוסף אבטחת התחברות נוספת",
-    "enable": "לְאַפשֵׁר",
-    "disable": "השבת",
-    "addDevice": "הוסף מכשיר",
-    "addTitle": "הוסף מכשיר אימות",
-    "addDescription": "אשר באמצעות קוד מהמאמת שלך או קוד גיבוי כדי לרשום מכשיר אחר עם אותו מפתח.",
-    "addScanInstructions": "סרוק את קוד ה-QR הזה עם המאמת הנוסף. המאמתים הקיימים ימשיכו לפעול.",
-    "addSuccess": "מאמת נוסף נרשם",
-    "addFailed": "נכשלה הוספת המאמת",
-    "codeRequired": "הזן קוד TOTP או קוד גיבוי",
-    "codePlaceholder": "קוד TOTP או קוד גיבוי",
-    "setupTitle": "הגדר TOTP",
-    "setupFailed": "נכשל בהתחלת הגדרת TOTP",
-    "qrCode": "קוד QR",
-    "secretCopied": "סוד הועתק ללוח",
-    "instructions": "סרוק את קוד ה-QR או הזן את הסוד באפליקציית האימות שלך, לאחר מכן הזן את הקוד בן 6 הספרות",
-    "continueVerify": "המשך לאימות",
-    "verifyTitle": "אימות קוד",
-    "verify": "לְאַמֵת",
-    "enter6Digits": "הזן קוד בן 6 ספרות",
-    "enabledSuccess": "אימות דו-שלבי מופעל",
-    "invalidCode": "קוד לא תקין, אנא נסה שוב",
-    "disableTitle": "השבת 2FA",
-    "disabledSuccess": "אימות דו-שלבי מושבת",
-    "disableFailed": "נכשל בהשבתת 2FA",
-    "backupTitle": "קודי גיבוי",
-    "downloadBackup": "הורד קודי גיבוי",
-    "done": "נַעֲשָׂה"
-  }
-}
diff --git a/plugins/totp/locales/translated/hi_IN.json b/plugins/totp/locales/translated/hi_IN.json
deleted file mode 100644
index 9ec76c3b2..000000000
--- a/plugins/totp/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "प्रमाणीकरण ऐप",
-  "factor": "प्रमाणीकरण कोड",
-  "challenge": {
-    "enterCode": "सत्यापन कोड दर्ज करें",
-    "verify": "कोड सत्यापित करें",
-    "backupCodeHint": "आप अपने बैकअप कोड में से एक भी दर्ज कर सकते हैं।"
-  },
-  "enrollment": {
-    "title": "TOTP प्रमाणक",
-    "docs": "दस्तावेज़",
-    "on": "2FA सक्षम है",
-    "off": "अतिरिक्त लॉगिन सुरक्षा जोड़ें",
-    "enable": "सक्षम करें",
-    "disable": "अक्षम करें",
-    "addDevice": "डिवाइस जोडे",
-    "addTitle": "प्रमाणीकरण उपकरण जोड़ें",
-    "addDescription": "अपने प्रमाणीकरणकर्ता से प्राप्त कोड या बैकअप कोड का उपयोग करके पुष्टि करें ताकि उसी कुंजी के साथ किसी अन्य डिवाइस को नामांकित किया जा सके।",
-    "addScanInstructions": "इस क्यूआर कोड को अतिरिक्त प्रमाणीकरण उपकरण से स्कैन करें। मौजूदा प्रमाणीकरण उपकरण काम करते रहेंगे।",
-    "addSuccess": "अतिरिक्त प्रमाणीकरणकर्ता नामांकित किया गया",
-    "addFailed": "प्रमाणीकरणकर्ता जोड़ने में विफल",
-    "codeRequired": "टीओटीपी कोड या बैकअप कोड दर्ज करें",
-    "codePlaceholder": "टीओटीपी कोड या बैकअप कोड",
-    "setupTitle": "TOTP सेटअप करें",
-    "setupFailed": "TOTP सेटअप शुरू करने में विफल",
-    "qrCode": "QR कोड",
-    "secretCopied": "सीक्रेट क्लिपबोर्ड पर कॉपी किया गया",
-    "instructions": "क्यूआर कोड को स्कैन करें या अपने प्रमाणीकरण ऐप में गुप्त जानकारी दर्ज करें, फिर 6 अंकों का कोड दर्ज करें।",
-    "continueVerify": "सत्यापन जारी रखें",
-    "verifyTitle": "कोड सत्यापित करें",
-    "verify": "सत्यापित करें",
-    "enter6Digits": "6-अंकीय कोड दर्ज करें",
-    "enabledSuccess": "दो-कारक प्रमाणीकरण सक्षम किया गया",
-    "invalidCode": "अमान्य कोड, कृपया पुनः प्रयास करें",
-    "disableTitle": "2FA अक्षम करें",
-    "disabledSuccess": "दो-कारक प्रमाणीकरण अक्षम किया गया",
-    "disableFailed": "2FA अक्षम करने में विफल",
-    "backupTitle": "बैकअप कोड",
-    "downloadBackup": "बैकअप कोड डाउनलोड करें",
-    "done": "पूर्ण"
-  }
-}
diff --git a/plugins/totp/locales/translated/hu_HU.json b/plugins/totp/locales/translated/hu_HU.json
deleted file mode 100644
index b31c6a2c6..000000000
--- a/plugins/totp/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Hitelesítő alkalmazás",
-  "factor": "Hitelesítő kód",
-  "challenge": {
-    "enterCode": "Írja be az ellenőrző kódot",
-    "verify": "Kód ellenőrzése",
-    "backupCodeHint": "Megadhatja az egyik biztonsági kódját is."
-  },
-  "enrollment": {
-    "title": "TOTP hitelesítő",
-    "docs": "Dokumentumok",
-    "on": "2FA engedélyezve",
-    "off": "Fokozott bejelentkezési biztonság",
-    "enable": "Engedélyezés",
-    "disable": "Letiltás",
-    "addDevice": "Eszköz hozzáadása",
-    "addTitle": "Hitelesítő eszköz hozzáadása",
-    "addDescription": "Erősítse meg hitelesítőjétől kapott kóddal, vagy egy biztonsági kóddal, hogy egy másik eszközt regisztráljon ugyanazzal a kulccsal.",
-    "addScanInstructions": "Olvasd be ezt a QR-kódot a további hitelesítővel. A meglévő hitelesítők továbbra is működni fognak.",
-    "addSuccess": "További hitelesítő regisztrálva",
-    "addFailed": "Nem sikerült hozzáadni a hitelesítőt",
-    "codeRequired": "Adjon meg egy TOTP-kódot vagy biztonsági kódot",
-    "codePlaceholder": "TOTP kód vagy biztonsági kód",
-    "setupTitle": "TOTP beállítása",
-    "setupFailed": "Nem sikerült elindítani a TOTP beállítását",
-    "qrCode": "QR-kód",
-    "secretCopied": "Titkos kód a vágólapra másolva",
-    "instructions": "Olvasd be a QR-kódot, vagy írd be a titkos kódot a hitelesítő alkalmazásodba, majd írd be a 6 jegyű kódot",
-    "continueVerify": "Tovább az ellenőrzéshez",
-    "verifyTitle": "Kód ellenőrzése",
-    "verify": "Ellenőrzés",
-    "enter6Digits": "Adjon meg egy 6 jegyű kódot",
-    "enabledSuccess": "Kétfaktoros hitelesítés engedélyezve",
-    "invalidCode": "Érvénytelen kód, kérjük, próbálja újra",
-    "disableTitle": "2FA letiltása",
-    "disabledSuccess": "Kétfaktoros hitelesítés letiltva",
-    "disableFailed": "Nem sikerült letiltani a 2FA-t",
-    "backupTitle": "Biztonsági kódok",
-    "downloadBackup": "Tartalékkódok letöltése",
-    "done": "Kész"
-  }
-}
diff --git a/plugins/totp/locales/translated/id_ID.json b/plugins/totp/locales/translated/id_ID.json
deleted file mode 100644
index ac67af602..000000000
--- a/plugins/totp/locales/translated/id_ID.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Aplikasi Otentikator",
-  "factor": "Kode otentikasi",
-  "challenge": {
-    "enterCode": "Masukkan kode verifikasi",
-    "verify": "Verifikasi Kode",
-    "backupCodeHint": "Anda juga dapat memasukkan salah satu kode cadangan Anda."
-  },
-  "enrollment": {
-    "title": "Otentikator TOTP",
-    "docs": "Dokumen",
-    "on": "Otentikasi dua faktor (2FA) diaktifkan.",
-    "off": "Tambahkan keamanan login ekstra",
-    "enable": "Memungkinkan",
-    "disable": "Cacat",
-    "addDevice": "Tambahkan perangkat",
-    "addTitle": "Tambahkan perangkat otentikasi",
-    "addDescription": "Konfirmasikan dengan kode dari aplikasi otentikasi Anda atau kode cadangan untuk mendaftarkan perangkat lain dengan kunci yang sama.",
-    "addScanInstructions": "Pindai kode QR ini dengan otentikator tambahan. Otentikator yang sudah ada akan tetap berfungsi.",
-    "addSuccess": "Autentikator tambahan terdaftar",
-    "addFailed": "Gagal menambahkan autentikator",
-    "codeRequired": "Masukkan kode TOTP atau kode cadangan.",
-    "codePlaceholder": "Kode TOTP atau kode cadangan",
-    "setupTitle": "Pengaturan TOTP",
-    "setupFailed": "Gagal memulai pengaturan TOTP",
-    "qrCode": "Kode QR",
-    "secretCopied": "Rahasia disalin ke papan klip",
-    "instructions": "Pindai kode QR atau masukkan kode rahasia di aplikasi otentikasi Anda, lalu masukkan kode 6 digit.",
-    "continueVerify": "Lanjutkan Verifikasi",
-    "verifyTitle": "Verifikasi Kode",
-    "verify": "Memeriksa",
-    "enter6Digits": "Masukkan kode 6 digit",
-    "enabledSuccess": "Autentikasi dua faktor diaktifkan",
-    "invalidCode": "Kode tidak valid, silakan coba lagi.",
-    "disableTitle": "Nonaktifkan otentikasi dua faktor (2FA).",
-    "disabledSuccess": "Autentikasi dua faktor dinonaktifkan",
-    "disableFailed": "Gagal menonaktifkan 2FA.",
-    "backupTitle": "Kode Cadangan",
-    "downloadBackup": "Unduh Kode Cadangan",
-    "done": "Selesai"
-  }
-}
diff --git a/plugins/totp/locales/translated/it_IT.json b/plugins/totp/locales/translated/it_IT.json
deleted file mode 100644
index 5189d1afc..000000000
--- a/plugins/totp/locales/translated/it_IT.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "App di autenticazione",
-  "factor": "Codice di autenticazione",
-  "challenge": {
-    "enterCode": "Inserisci il codice di verifica",
-    "verify": "Verifica codice",
-    "backupCodeHint": "È inoltre possibile inserire uno dei propri codici di backup."
-  },
-  "enrollment": {
-    "title": "Autenticatore TOTP",
-    "docs": "Documentazione",
-    "on": "2FA è attivata",
-    "off": "Aggiungi sicurezza aggiuntiva all'accesso",
-    "enable": "Abilita",
-    "disable": "Disabilita",
-    "addDevice": "Aggiungi dispositivo",
-    "addTitle": "Aggiungi dispositivo di autenticazione",
-    "addDescription": "Conferma con un codice fornito dal tuo autenticatore o con un codice di backup per registrare un altro dispositivo con la stessa chiave.",
-    "addScanInstructions": "Scansiona questo codice QR con l'autenticatore aggiuntivo. Gli autenticatori già in uso continueranno a funzionare.",
-    "addSuccess": "Autenticatore aggiuntivo registrato",
-    "addFailed": "Impossibile aggiungere l'autenticatore",
-    "codeRequired": "Inserisci un codice TOTP o un codice di backup",
-    "codePlaceholder": "Codice TOTP o codice di backup",
-    "setupTitle": "Configura TOTP",
-    "setupFailed": "Impossibile avviare la configurazione TOTP",
-    "qrCode": "Codice QR",
-    "secretCopied": "Segreto copiato negli appunti",
-    "instructions": "Scansiona il codice QR o inserisci il codice segreto nella tua app di autenticazione, quindi inserisci il codice a 6 cifre",
-    "continueVerify": "Procedi alla verifica",
-    "verifyTitle": "Verifica codice",
-    "verify": "Verifica",
-    "enter6Digits": "Inserisci un codice a 6 cifre",
-    "enabledSuccess": "Autenticazione a due fattori abilitata",
-    "invalidCode": "Codice non valido, riprova",
-    "disableTitle": "Disabilita 2FA",
-    "disabledSuccess": "Autenticazione a due fattori disabilitata",
-    "disableFailed": "Impossibile disabilitare la 2FA",
-    "backupTitle": "Codici di backup",
-    "downloadBackup": "Scarica i codici di backup",
-    "done": "Fine"
-  }
-}
diff --git a/plugins/totp/locales/translated/ja_JP.json b/plugins/totp/locales/translated/ja_JP.json
deleted file mode 100644
index 7f6b26ab1..000000000
--- a/plugins/totp/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "認証アプリ",
-  "factor": "認証コード",
-  "challenge": {
-    "enterCode": "認証コードを入力してください",
-    "verify": "コードの確認",
-    "backupCodeHint": "バックアップコードのいずれかを入力することもできます。"
-  },
-  "enrollment": {
-    "title": "TOTP認証",
-    "docs": "ドキュメント",
-    "on": "2FAが有効です",
-    "off": "ログインのセキュリティを強化",
-    "enable": "有効にする",
-    "disable": "無効にする",
-    "addDevice": "デバイスを追加する",
-    "addTitle": "認証デバイスを追加する",
-    "addDescription": "認証デバイスから取得したコード、またはバックアップコードを使用して、同じキーで別のデバイスを登録してください。",
-    "addScanInstructions": "追加の認証デバイスでこのQRコードをスキャンしてください。既存の認証デバイスは引き続きご利用いただけます。",
-    "addSuccess": "追加の認証デバイスを登録しました",
-    "addFailed": "認証システムの追加に失敗しました",
-    "codeRequired": "TOTPコードまたはバックアップコードを入力してください",
-    "codePlaceholder": "TOTPコードまたはバックアップコード",
-    "setupTitle": "TOTPを設定",
-    "setupFailed": "TOTPのセットアップを開始できませんでした",
-    "qrCode": "QRコード",
-    "secretCopied": "シークレットをクリップボードにコピーしました",
-    "instructions": "QRコードをスキャンするか、認証アプリに秘密情報を入力し、6桁のコードを入力してください。",
-    "continueVerify": "確認に進む",
-    "verifyTitle": "コードの確認",
-    "verify": "確認",
-    "enter6Digits": "6桁のコードを入力してください",
-    "enabledSuccess": "二要素認証が有効になりました",
-    "invalidCode": "コードが無効です。もう一度お試しください",
-    "disableTitle": "2FAを無効にする",
-    "disabledSuccess": "二要素認証が無効になりました",
-    "disableFailed": "2FAの無効化に失敗しました",
-    "backupTitle": "バックアップコード",
-    "downloadBackup": "バックアップコードをダウンロード",
-    "done": "完了"
-  }
-}
diff --git a/plugins/totp/locales/translated/ko_KR.json b/plugins/totp/locales/translated/ko_KR.json
deleted file mode 100644
index 1854f81fb..000000000
--- a/plugins/totp/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "인증 앱",
-  "factor": "인증 코드",
-  "challenge": {
-    "enterCode": "인증 코드 입력",
-    "verify": "코드 확인",
-    "backupCodeHint": "백업 코드 중 하나를 입력할 수도 있습니다."
-  },
-  "enrollment": {
-    "title": "TOTP 인증기",
-    "docs": "문서",
-    "on": "2FA가 활성화되었습니다",
-    "off": "추가 로그인 보안을 설정하세요",
-    "enable": "활성화",
-    "disable": "비활성화",
-    "addDevice": "기기 추가",
-    "addTitle": "인증 장치 추가",
-    "addDescription": "인증 앱에서 받은 코드 또는 백업 코드를 사용하여 동일한 키로 다른 기기를 등록하세요.",
-    "addScanInstructions": "추가 인증 수단으로 이 QR 코드를 스캔하세요. 기존 인증 수단도 계속 사용할 수 있습니다.",
-    "addSuccess": "추가 인증자가 등록되었습니다",
-    "addFailed": "인증자 추가에 실패했습니다.",
-    "codeRequired": "TOTP 코드 또는 백업 코드를 입력하세요.",
-    "codePlaceholder": "TOTP 코드 또는 백업 코드",
-    "setupTitle": "TOTP 설정",
-    "setupFailed": "TOTP 설정 시작 실패",
-    "qrCode": "QR 코드",
-    "secretCopied": "시크릿이 클립보드에 복사됨",
-    "instructions": "QR 코드를 스캔하거나 인증 앱에 비밀번호를 입력한 다음 6자리 코드를 입력하세요.",
-    "continueVerify": "인증 계속하기",
-    "verifyTitle": "코드 확인",
-    "verify": "확인",
-    "enter6Digits": "6자리 코드 입력",
-    "enabledSuccess": "2단계 인증이 활성화되었습니다.",
-    "invalidCode": "유효하지 않은 코드입니다. 다시 시도하세요.",
-    "disableTitle": "2FA 비활성화",
-    "disabledSuccess": "2단계 인증이 비활성화되었습니다.",
-    "disableFailed": "2FA 비활성화 실패",
-    "backupTitle": "백업 코드",
-    "downloadBackup": "백업 코드 다운로드",
-    "done": "완료"
-  }
-}
diff --git a/plugins/totp/locales/translated/nl_NL.json b/plugins/totp/locales/translated/nl_NL.json
deleted file mode 100644
index 4b82ac17f..000000000
--- a/plugins/totp/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Authenticator-app",
-  "factor": "Authenticatiecode",
-  "challenge": {
-    "enterCode": "Voer de verificatiecode in.",
-    "verify": "Code verifiëren",
-    "backupCodeHint": "Je kunt ook een van je back-upcodes invoeren."
-  },
-  "enrollment": {
-    "title": "TOTP-authenticator",
-    "docs": "Dokters",
-    "on": "Tweefactorauthenticatie (2FA) is ingeschakeld.",
-    "off": "Voeg extra inlogbeveiliging toe.",
-    "enable": "Inschakelen",
-    "disable": "Uitzetten",
-    "addDevice": "Apparaat toevoegen",
-    "addTitle": "Authenticatorapparaat toevoegen",
-    "addDescription": "Bevestig met een code van uw authenticatieapparaat of een back-upcode om een ander apparaat met dezelfde sleutel te registreren.",
-    "addScanInstructions": "Scan deze QR-code met de extra authenticatie-app. Bestaande authenticatie-apps blijven gewoon werken.",
-    "addSuccess": "Extra authenticatie-app geregistreerd",
-    "addFailed": "Authenticator toevoegen mislukt",
-    "codeRequired": "Voer een TOTP-code of back-upcode in.",
-    "codePlaceholder": "TOTP-code of back-upcode",
-    "setupTitle": "TOTP instellen",
-    "setupFailed": "Het starten van de TOTP-configuratie is mislukt.",
-    "qrCode": "QR-code",
-    "secretCopied": "Geheim gekopieerd naar het klembord",
-    "instructions": "Scan de QR-code of voer het geheim in uw authenticatie-app in en voer vervolgens de 6-cijferige code in.",
-    "continueVerify": "Doorgaan met verifiëren",
-    "verifyTitle": "Code verifiëren",
-    "verify": "Verifiëren",
-    "enter6Digits": "Voer een 6-cijferige code in",
-    "enabledSuccess": "Tweefactorauthenticatie ingeschakeld",
-    "invalidCode": "Ongeldige code, probeer het opnieuw.",
-    "disableTitle": "Schakel 2FA uit",
-    "disabledSuccess": "Tweefactorauthenticatie uitgeschakeld",
-    "disableFailed": "Het uitschakelen van 2FA is mislukt.",
-    "backupTitle": "Back-upcodes",
-    "downloadBackup": "Back-upcodes downloaden",
-    "done": "Klaar"
-  }
-}
diff --git a/plugins/totp/locales/translated/no_NO.json b/plugins/totp/locales/translated/no_NO.json
deleted file mode 100644
index 8b2806720..000000000
--- a/plugins/totp/locales/translated/no_NO.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Autentiseringsapp",
-  "factor": "Autentiseringskode",
-  "challenge": {
-    "enterCode": "Angi verifikasjonskode",
-    "verify": "Bekreft kode",
-    "backupCodeHint": "Du kan også oppgi en av reservekodene dine."
-  },
-  "enrollment": {
-    "title": "TOTP-autentisering",
-    "docs": "Dokumenter",
-    "on": "2FA er aktivert",
-    "off": "Legg til ekstra sikkerhet for pålogging",
-    "enable": "Aktiver",
-    "disable": "Deaktiver",
-    "addDevice": "Legg til enhet",
-    "addTitle": "Legg til autentiseringsenhet",
-    "addDescription": "Bekreft med en kode fra autentiseringsverktøyet ditt eller en reservekode for å registrere en annen enhet med samme nøkkel.",
-    "addScanInstructions": "Skann denne QR-koden med den ekstra autentiseringsfunksjonen. Eksisterende autentiseringsfunksjoner vil fortsette å fungere.",
-    "addSuccess": "Ekstra autentiseringsfunksjon registrert",
-    "addFailed": "Kunne ikke legge til autentiseringsfunksjonen",
-    "codeRequired": "Skriv inn en TOTP-kode eller sikkerhetskode",
-    "codePlaceholder": "TOTP-kode eller sikkerhetskode",
-    "setupTitle": "Konfigurer TOTP",
-    "setupFailed": "Kunne ikke starte TOTP-oppsett",
-    "qrCode": "QR-kode",
-    "secretCopied": "Hemmelighet kopiert til utklippstavlen",
-    "instructions": "Skann QR-koden eller skriv inn hemmeligheten i autentiseringsappen din, og skriv deretter inn den 6-sifrede koden",
-    "continueVerify": "Fortsett å bekrefte",
-    "verifyTitle": "Bekreft kode",
-    "verify": "Verifiser",
-    "enter6Digits": "Skriv inn en 6-sifret kode",
-    "enabledSuccess": "Tofaktorautentisering aktivert",
-    "invalidCode": "Ugyldig kode, prøv på nytt",
-    "disableTitle": "Deaktiver 2FA",
-    "disabledSuccess": "Tofaktorautentisering er deaktivert",
-    "disableFailed": "Kunne ikke deaktivere 2FA",
-    "backupTitle": "Reservekoder",
-    "downloadBackup": "Last ned sikkerhetskoder",
-    "done": "Ferdig"
-  }
-}
diff --git a/plugins/totp/locales/translated/pl_PL.json b/plugins/totp/locales/translated/pl_PL.json
deleted file mode 100644
index 2da7f3c72..000000000
--- a/plugins/totp/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Aplikacja uwierzytelniająca",
-  "factor": "Kod uwierzytelniający",
-  "challenge": {
-    "enterCode": "Wprowadź kod weryfikacyjny",
-    "verify": "Zweryfikuj kod",
-    "backupCodeHint": "Możesz również wpisać jeden ze swoich kodów zapasowych."
-  },
-  "enrollment": {
-    "title": "Aplikacja TOTP",
-    "docs": "Dokumentacja",
-    "on": "Włączono uwierzytelnianie dwuskładnikowe",
-    "off": "Dodaj dodatkowe zabezpieczenia logowania",
-    "enable": "Włącz",
-    "disable": "Wyłącz",
-    "addDevice": "Dodaj urządzenie",
-    "addTitle": "Dodaj urządzenie uwierzytelniające",
-    "addDescription": "Potwierdź kodem z uwierzytelniacza lub kodem zapasowym, aby zarejestrować inne urządzenie za pomocą tego samego klucza.",
-    "addScanInstructions": "Zeskanuj ten kod QR za pomocą dodatkowego uwierzytelniacza. Istniejące uwierzytelniacze będą nadal działać.",
-    "addSuccess": "Zarejestrowano dodatkowego uwierzytelniacza",
-    "addFailed": "Nie udało się dodać uwierzytelniacza",
-    "codeRequired": "Wprowadź kod TOTP lub kod zapasowy",
-    "codePlaceholder": "Kod TOTP lub kod zapasowy",
-    "setupTitle": "Skonfiguruj TOTP",
-    "setupFailed": "Nie udało się uruchomić konfiguracji TOTP",
-    "qrCode": "Kod QR",
-    "secretCopied": "Skopiowano sekret do schowka",
-    "instructions": "Zeskanuj kod QR lub wprowadź kod w aplikacji uwierzytelniającej, a następnie wprowadź 6-cyfrowy kod",
-    "continueVerify": "Kontynuuj weryfikację",
-    "verifyTitle": "Zweryfikuj kod",
-    "verify": "Zweryfikuj",
-    "enter6Digits": "Wprowadź 6-cyfrowy kod",
-    "enabledSuccess": "Włączono uwierzytelnianie dwuskładnikowe",
-    "invalidCode": "Nieprawidłowy kod, spróbuj ponownie",
-    "disableTitle": "Wyłącz 2FA",
-    "disabledSuccess": "Wyłączono uwierzytelnianie dwuskładnikowe",
-    "disableFailed": "Nie udało się wyłączyć uwierzytelniania dwuskładnikowego",
-    "backupTitle": "Kody zapasowe",
-    "downloadBackup": "Pobierz kody zapasowe",
-    "done": "Gotowe"
-  }
-}
diff --git a/plugins/totp/locales/translated/pt_BR.json b/plugins/totp/locales/translated/pt_BR.json
deleted file mode 100644
index d4cc4a343..000000000
--- a/plugins/totp/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Aplicativo autenticador",
-  "factor": "Código de autenticação",
-  "challenge": {
-    "enterCode": "Insira o código de verificação",
-    "verify": "Código de verificação",
-    "backupCodeHint": "Você também pode inserir um de seus códigos de backup."
-  },
-  "enrollment": {
-    "title": "Autenticador TOTP",
-    "docs": "Documentos",
-    "on": "A autenticação de dois fatores está ativada.",
-    "off": "Adicione segurança extra ao login.",
-    "enable": "Habilitar",
-    "disable": "Desativar",
-    "addDevice": "Adicionar dispositivo",
-    "addTitle": "Adicionar dispositivo autenticador",
-    "addDescription": "Confirme com um código do seu autenticador ou um código de backup para cadastrar outro dispositivo com a mesma chave.",
-    "addScanInstructions": "Escaneie este código QR com o autenticador adicional. Os autenticadores existentes continuarão funcionando.",
-    "addSuccess": "Autenticador adicional cadastrado",
-    "addFailed": "Falha ao adicionar autenticador",
-    "codeRequired": "Insira um código TOTP ou um código de backup.",
-    "codePlaceholder": "Código TOTP ou código de backup",
-    "setupTitle": "Configurar TOTP",
-    "setupFailed": "Falha ao iniciar a configuração TOTP",
-    "qrCode": "Código QR",
-    "secretCopied": "Segredo copiado para a área de transferência",
-    "instructions": "Escaneie o código QR ou insira a chave secreta no seu aplicativo autenticador e, em seguida, digite o código de 6 dígitos.",
-    "continueVerify": "Continuar a verificar",
-    "verifyTitle": "Código de verificação",
-    "verify": "Verificar",
-    "enter6Digits": "Digite um código de 6 dígitos",
-    "enabledSuccess": "Autenticação de dois fatores ativada",
-    "invalidCode": "Código inválido, tente novamente.",
-    "disableTitle": "Desative a autenticação de dois fatores (2FA).",
-    "disabledSuccess": "Autenticação de dois fatores desativada",
-    "disableFailed": "Falha ao desativar a autenticação de dois fatores (2FA).",
-    "backupTitle": "Códigos de backup",
-    "downloadBackup": "Baixar códigos de backup",
-    "done": "Feito"
-  }
-}
diff --git a/plugins/totp/locales/translated/pt_PT.json b/plugins/totp/locales/translated/pt_PT.json
deleted file mode 100644
index 4a15055db..000000000
--- a/plugins/totp/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Aplicativo autenticador",
-  "factor": "Código de autenticação",
-  "challenge": {
-    "enterCode": "Introduza o código de verificação",
-    "verify": "Verificar Código",
-    "backupCodeHint": "Também pode inserir um dos seus códigos de backup."
-  },
-  "enrollment": {
-    "title": "Autenticador TOTP",
-    "docs": "Documentação",
-    "on": "2FA está ativada",
-    "off": "Adicionar segurança extra de início de sessão",
-    "enable": "Ativar",
-    "disable": "Desativar",
-    "addDevice": "Adicionar dispositivo",
-    "addTitle": "Adicionar dispositivo autenticador",
-    "addDescription": "Confirme com um código do seu autenticador ou um código de cópia de segurança para registar outro dispositivo com a mesma chave.",
-    "addScanInstructions": "Digitalize este código QR com o autenticador adicional. Os autenticadores existentes continuarão a funcionar.",
-    "addSuccess": "Autenticador adicional registado",
-    "addFailed": "Falha ao adicionar autenticador",
-    "codeRequired": "Introduza um código TOTP ou um código de cópia de segurança.",
-    "codePlaceholder": "Código TOTP ou código de cópia de segurança",
-    "setupTitle": "Configurar TOTP",
-    "setupFailed": "Falha ao iniciar a configuração de TOTP",
-    "qrCode": "Código QR",
-    "secretCopied": "Segredo copiado para a área de transferência",
-    "instructions": "Digitalize o código QR ou introduza a chave secreta na sua aplicação autenticadora e, em seguida, introduza o código de 6 dígitos.",
-    "continueVerify": "Continuar para Verificação",
-    "verifyTitle": "Verificar Código",
-    "verify": "Verificar",
-    "enter6Digits": "Insira um código de 6 dígitos",
-    "enabledSuccess": "Autenticação de dois fatores ativada",
-    "invalidCode": "Código inválido, tente novamente",
-    "disableTitle": "Desativar 2FA",
-    "disabledSuccess": "Autenticação de dois fatores desativada",
-    "disableFailed": "Falha ao desativar 2FA",
-    "backupTitle": "Códigos de Backup",
-    "downloadBackup": "Descarregar Códigos de Backup",
-    "done": "Concluir"
-  }
-}
diff --git a/plugins/totp/locales/translated/ro_RO.json b/plugins/totp/locales/translated/ro_RO.json
deleted file mode 100644
index eab16bf87..000000000
--- a/plugins/totp/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Aplicație de autentificare",
-  "factor": "Cod de autentificare",
-  "challenge": {
-    "enterCode": "Introduceți codul de verificare",
-    "verify": "Verificați codul",
-    "backupCodeHint": "De asemenea, puteți introduce unul dintre codurile de rezervă."
-  },
-  "enrollment": {
-    "title": "Autentificator TOTP",
-    "docs": "Documente",
-    "on": "2FA este activat",
-    "off": "Adăugați securitate suplimentară la conectare",
-    "enable": "Permite",
-    "disable": "Dezactivare",
-    "addDevice": "Adăugați dispozitiv",
-    "addTitle": "Adăugați un dispozitiv de autentificare",
-    "addDescription": "Confirmați cu un cod de la autentificator sau cu un cod de rezervă pentru a înregistra un alt dispozitiv cu aceeași cheie.",
-    "addScanInstructions": "Scanați acest cod QR cu ajutorul autentificatorului suplimentar. Autentificatoarele existente vor continua să funcționeze.",
-    "addSuccess": "Autentificator suplimentar înscris",
-    "addFailed": "Nu s-a putut adăuga autentificatorul",
-    "codeRequired": "Introduceți un cod TOTP sau un cod de rezervă",
-    "codePlaceholder": "Cod TOTP sau cod de rezervă",
-    "setupTitle": "Configurați TOTP",
-    "setupFailed": "Nu s-a putut porni configurarea TOTP",
-    "qrCode": "Cod QR",
-    "secretCopied": "Secret copiat în clipboard",
-    "instructions": "Scanați codul QR sau introduceți secretul în aplicația de autentificare, apoi introduceți codul de 6 cifre",
-    "continueVerify": "Continuați verificarea",
-    "verifyTitle": "Verificați codul",
-    "verify": "Verifica",
-    "enter6Digits": "Introduceți un cod de 6 cifre",
-    "enabledSuccess": "Autentificare cu doi factori activată",
-    "invalidCode": "Cod nevalid, vă rugăm să încercați din nou",
-    "disableTitle": "Dezactivați 2FA",
-    "disabledSuccess": "Autentificarea cu doi factori este dezactivată",
-    "disableFailed": "Nu s-a putut dezactiva 2FA",
-    "backupTitle": "Coduri de rezervă",
-    "downloadBackup": "Descărcați coduri de rezervă",
-    "done": "Făcut"
-  }
-}
diff --git a/plugins/totp/locales/translated/ru_RU.json b/plugins/totp/locales/translated/ru_RU.json
deleted file mode 100644
index 440dc8488..000000000
--- a/plugins/totp/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Приложение-аутентификатор",
-  "factor": "Код аутентификатора",
-  "challenge": {
-    "enterCode": "Введите код подтверждения",
-    "verify": "Проверка кода",
-    "backupCodeHint": "Вы также можете ввести один из своих резервных кодов."
-  },
-  "enrollment": {
-    "title": "Аутентификатор TOTP",
-    "docs": "Документация",
-    "on": "2FA включена",
-    "off": "Добавить дополнительную защиту",
-    "enable": "Включить",
-    "disable": "Отключить",
-    "addDevice": "Добавить устройство",
-    "addTitle": "Добавить устройство аутентификации",
-    "addDescription": "Для регистрации другого устройства с тем же ключом подтвердите действие с помощью кода от вашего аутентификатора или резервного кода.",
-    "addScanInstructions": "Отсканируйте этот QR-код с помощью дополнительного аутентификатора. Существующие аутентификаторы продолжат работать.",
-    "addSuccess": "Зарегистрирован дополнительный аутентификатор.",
-    "addFailed": "Не удалось добавить аутентификатор.",
-    "codeRequired": "Введите TOTP-код или резервный код.",
-    "codePlaceholder": "TOTP-код или резервный код",
-    "setupTitle": "Настроить TOTP",
-    "setupFailed": "Не удалось запустить настройку TOTP",
-    "qrCode": "QR-код",
-    "secretCopied": "Секрет скопирован в буфер обмена",
-    "instructions": "Отсканируйте QR-код или введите секретный код в приложении-аутентификаторе, затем введите 6-значный код.",
-    "continueVerify": "Продолжить проверку",
-    "verifyTitle": "Проверка кода",
-    "verify": "Подтвердить",
-    "enter6Digits": "Введите 6-значный код",
-    "enabledSuccess": "Двухфакторная аутентификация включена",
-    "invalidCode": "Неверный код, попробуйте снова",
-    "disableTitle": "Отключить 2FA",
-    "disabledSuccess": "Двухфакторная аутентификация отключена",
-    "disableFailed": "Не удалось отключить 2FA",
-    "backupTitle": "Резервные коды",
-    "downloadBackup": "Скачать резервные коды",
-    "done": "Готово"
-  }
-}
diff --git a/plugins/totp/locales/translated/sr_SP.json b/plugins/totp/locales/translated/sr_SP.json
deleted file mode 100644
index 62a97afd0..000000000
--- a/plugins/totp/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Апликација за аутентификатор",
-  "factor": "Код за аутентификатор",
-  "challenge": {
-    "enterCode": "Унесите верификациони код",
-    "verify": "Верификујте код",
-    "backupCodeHint": "Такође можете унети један од својих резервних кодова."
-  },
-  "enrollment": {
-    "title": "TOTP аутентификатор",
-    "docs": "Документи",
-    "on": "2FA је омогућена",
-    "off": "Додајте додатну безбедност пријављивања",
-    "enable": "Омогући",
-    "disable": "Онемогући",
-    "addDevice": "Додај уређај",
-    "addTitle": "Додај уређај за аутентификовање",
-    "addDescription": "Потврдите помоћу кода са вашег аутентификатора или резервног кода да бисте регистровали други уређај са истим кључем.",
-    "addScanInstructions": "Скенирајте овај QR код додатним аутентификатором. Постојећи аутентификатори ће наставити да раде.",
-    "addSuccess": "Додатни аутентификатор је регистрован",
-    "addFailed": "Додавање аутентификатора није успело",
-    "codeRequired": "Унесите TOTP код или резервни код",
-    "codePlaceholder": "TOTP код или резервни код",
-    "setupTitle": "Подешавање TOTP-а",
-    "setupFailed": "Покретање подешавања TOTP-а није успело",
-    "qrCode": "QR код",
-    "secretCopied": "Тајни токен је копиран у међуспремник",
-    "instructions": "Скенирајте QR код или унесите тајни код у апликацију за аутентификацију, а затим унесите шестоцифрени код",
-    "continueVerify": "Настави са верификацијом",
-    "verifyTitle": "Верификујте код",
-    "verify": "Верификуј",
-    "enter6Digits": "Унесите шестоцифрени код",
-    "enabledSuccess": "Омогућена је двофакторска аутентификација",
-    "invalidCode": "Неважећи код, покушајте поново",
-    "disableTitle": "Онемогући 2FA",
-    "disabledSuccess": "Двофакторска аутентификација је онемогућена",
-    "disableFailed": "Онемогућавање 2FA није успело",
-    "backupTitle": "Резервни кодови",
-    "downloadBackup": "Преузмите резервне кодове",
-    "done": "Готово"
-  }
-}
diff --git a/plugins/totp/locales/translated/sv_SE.json b/plugins/totp/locales/translated/sv_SE.json
deleted file mode 100644
index 0b9310fa5..000000000
--- a/plugins/totp/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Autentiseringsapp",
-  "factor": "Autentiseringskod",
-  "challenge": {
-    "enterCode": "Ange verifieringskod",
-    "verify": "Verifiera kod",
-    "backupCodeHint": "Du kan också ange en av dina reservkoder."
-  },
-  "enrollment": {
-    "title": "TOTP-autentiserare",
-    "docs": "Dokument",
-    "on": "2FA är aktiverat",
-    "off": "Lägg till extra inloggningssäkerhet",
-    "enable": "Aktivera",
-    "disable": "Inaktivera",
-    "addDevice": "Lägg till enhet",
-    "addTitle": "Lägg till autentiseringsenhet",
-    "addDescription": "Bekräfta med en kod från din autentiserare eller en reservkod för att registrera en annan enhet med samma nyckel.",
-    "addScanInstructions": "Skanna den här QR-koden med den extra autentiseringsfunktionen. Befintliga autentiseringsfunktioner kommer att fortsätta fungera.",
-    "addSuccess": "Ytterligare autentiserare registrerad",
-    "addFailed": "Misslyckades med att lägga till autentiserare",
-    "codeRequired": "Ange en TOTP-kod eller reservkod",
-    "codePlaceholder": "TOTP-kod eller reservkod",
-    "setupTitle": "Konfigurera TOTP",
-    "setupFailed": "Misslyckades med att starta TOTP-installationen",
-    "qrCode": "QR-kod",
-    "secretCopied": "Hemlighet kopierad till urklipp",
-    "instructions": "Skanna QR-koden eller ange hemligheten i din autentiseringsapp och ange sedan den 6-siffriga koden",
-    "continueVerify": "Fortsätt att verifiera",
-    "verifyTitle": "Verifiera kod",
-    "verify": "Kontrollera",
-    "enter6Digits": "Ange en 6-siffrig kod",
-    "enabledSuccess": "Tvåfaktorsautentisering aktiverad",
-    "invalidCode": "Ogiltig kod, försök igen",
-    "disableTitle": "Inaktivera 2FA",
-    "disabledSuccess": "Tvåfaktorsautentisering inaktiverad",
-    "disableFailed": "Misslyckades med att inaktivera 2FA",
-    "backupTitle": "Reservkoder",
-    "downloadBackup": "Ladda ner reservkoder",
-    "done": "Gjort"
-  }
-}
diff --git a/plugins/totp/locales/translated/th_TH.json b/plugins/totp/locales/translated/th_TH.json
deleted file mode 100644
index b0f590c65..000000000
--- a/plugins/totp/locales/translated/th_TH.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "แอปตรวจสอบสิทธิ์",
-  "factor": "รหัสยืนยันตัวตน",
-  "challenge": {
-    "enterCode": "ป้อนรหัสยืนยัน",
-    "verify": "ยืนยันรหัส",
-    "backupCodeHint": "คุณสามารถป้อนรหัสสำรองของคุณได้เช่นกัน"
-  },
-  "enrollment": {
-    "title": "ตัวตรวจสอบสิทธิ์ TOTP",
-    "docs": "เอกสาร",
-    "on": "เปิดใช้งาน 2FA แล้ว",
-    "off": "เพิ่มระบบรักษาความปลอดภัยในการเข้าสู่ระบบเพิ่มเติม",
-    "enable": "เปิดใช้งาน",
-    "disable": "ปิดใช้งาน",
-    "addDevice": "เพิ่มอุปกรณ์",
-    "addTitle": "เพิ่มอุปกรณ์ยืนยันตัวตน",
-    "addDescription": "ยืนยันด้วยรหัสจากแอปยืนยันตัวตนของคุณ หรือใช้รหัสสำรองเพื่อลงทะเบียนอุปกรณ์อื่นด้วยรหัสเดียวกัน",
-    "addScanInstructions": "สแกนคิวอาร์โค้ดนี้ด้วยอุปกรณ์ยืนยันตัวตนเพิ่มเติม อุปกรณ์ยืนยันตัวตนที่มีอยู่เดิมยังคงใช้งานได้ต่อไป",
-    "addSuccess": "ลงทะเบียนตัวยืนยันตัวตนเพิ่มเติมแล้ว",
-    "addFailed": "ไม่สามารถเพิ่มตัวตรวจสอบสิทธิ์ได้",
-    "codeRequired": "ป้อนรหัส TOTP หรือรหัสสำรอง",
-    "codePlaceholder": "รหัส TOTP หรือรหัสสำรอง",
-    "setupTitle": "ตั้งค่า TOTP",
-    "setupFailed": "ไม่สามารถเริ่มการตั้งค่า TOTP ได้",
-    "qrCode": "รหัส QR",
-    "secretCopied": "คัดลอกข้อมูลลับไปยังคลิปบอร์ดแล้ว",
-    "instructions": "สแกนคิวอาร์โค้ดหรือป้อนรหัสลับในแอปยืนยันตัวตนของคุณ จากนั้นป้อนรหัส 6 หลัก",
-    "continueVerify": "ดำเนินการตรวจสอบต่อไป",
-    "verifyTitle": "ยืนยันรหัส",
-    "verify": "ตรวจสอบ",
-    "enter6Digits": "ป้อนรหัส 6 หลัก",
-    "enabledSuccess": "เปิดใช้งานการตรวจสอบสิทธิ์แบบสองขั้นตอน",
-    "invalidCode": "รหัสไม่ถูกต้อง โปรดลองอีกครั้ง",
-    "disableTitle": "ปิดใช้งาน 2FA",
-    "disabledSuccess": "ปิดใช้งานการตรวจสอบสิทธิ์แบบสองขั้นตอน",
-    "disableFailed": "ไม่สามารถปิดใช้งาน 2FA ได้",
-    "backupTitle": "รหัสสำรอง",
-    "downloadBackup": "ดาวน์โหลดรหัสสำรอง",
-    "done": "เสร็จแล้ว"
-  }
-}
diff --git a/plugins/totp/locales/translated/tr_TR.json b/plugins/totp/locales/translated/tr_TR.json
deleted file mode 100644
index 2917fd57c..000000000
--- a/plugins/totp/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Kimlik Doğrulama Uygulaması",
-  "factor": "Kimlik doğrulama kodu",
-  "challenge": {
-    "enterCode": "Doğrulama kodunu girin",
-    "verify": "Kodu Doğrula",
-    "backupCodeHint": "Yedek kodlarınızdan birini de girebilirsiniz."
-  },
-  "enrollment": {
-    "title": "TOTP Kimlik Doğrulayıcı",
-    "docs": "Belgeler",
-    "on": "2FA etkin",
-    "off": "Ek giriş güvenliği ekleyin",
-    "enable": "Etkinleştir",
-    "disable": "Devre Dışı Bırak",
-    "addDevice": "Cihaz ekle",
-    "addTitle": "Kimlik doğrulama cihazı ekle",
-    "addDescription": "Kimlik doğrulayıcınızdan aldığınız bir kodla veya aynı anahtarı kullanan başka bir cihazı kaydetmek için yedek bir kodla onaylayın.",
-    "addScanInstructions": "Bu QR kodunu ek kimlik doğrulayıcı ile tarayın. Mevcut kimlik doğrulayıcılar çalışmaya devam edecektir.",
-    "addSuccess": "Ek kimlik doğrulayıcı kaydedildi.",
-    "addFailed": "Kimlik doğrulayıcı eklenemedi.",
-    "codeRequired": "TOTP kodunu veya yedek kodu girin.",
-    "codePlaceholder": "TOTP kodu veya yedek kod",
-    "setupTitle": "TOTP Kurulumu",
-    "setupFailed": "TOTP kurulumu başlatılamadı",
-    "qrCode": "QR Kodu",
-    "secretCopied": "Gizli anahtar panoya kopyalandı",
-    "instructions": "QR kodunu tarayın veya kimlik doğrulama uygulamanıza gizli kodu girin, ardından 6 haneli kodu girin.",
-    "continueVerify": "Doğrulamaya Devam Et",
-    "verifyTitle": "Kodu Doğrula",
-    "verify": "Doğrula",
-    "enter6Digits": "6 haneli bir kod girin",
-    "enabledSuccess": "İki faktörlü kimlik doğrulama etkinleştirildi",
-    "invalidCode": "Geçersiz kod, lütfen tekrar deneyin",
-    "disableTitle": "2FA'yı Devre Dışı Bırak",
-    "disabledSuccess": "İki faktörlü kimlik doğrulama devre dışı bırakıldı",
-    "disableFailed": "2FA devre dışı bırakılamadı",
-    "backupTitle": "Yedek Kodlar",
-    "downloadBackup": "Yedek Kodları İndir",
-    "done": "Tamam"
-  }
-}
diff --git a/plugins/totp/locales/translated/uk_UA.json b/plugins/totp/locales/translated/uk_UA.json
deleted file mode 100644
index 932318796..000000000
--- a/plugins/totp/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Додаток для автентифікатора",
-  "factor": "Код автентифікатора",
-  "challenge": {
-    "enterCode": "Введіть код підтвердження",
-    "verify": "Підтвердити код",
-    "backupCodeHint": "Ви також можете ввести один зі своїх резервних кодів."
-  },
-  "enrollment": {
-    "title": "Аутентифікатор TOTP",
-    "docs": "Документи",
-    "on": "Двофакторна аутентифікація (2FA) увімкнена",
-    "off": "Додайте додаткову безпеку входу",
-    "enable": "Увімкнути",
-    "disable": "Вимкнути",
-    "addDevice": "Додати пристрій",
-    "addTitle": "Додати пристрій автентифікатора",
-    "addDescription": "Підтвердьте кодом зі свого автентифікатора або резервним кодом, щоб зареєструвати інший пристрій з тим самим ключем.",
-    "addScanInstructions": "Відскануйте цей QR-код за допомогою додаткового автентифікатора. Існуючі автентифікатори продовжуватимуть працювати.",
-    "addSuccess": "Зареєстровано додатковий автентифікатор",
-    "addFailed": "Не вдалося додати автентифікатор",
-    "codeRequired": "Введіть код TOTP або резервний код",
-    "codePlaceholder": "Код TOTP або резервний код",
-    "setupTitle": "Налаштування TOTP",
-    "setupFailed": "Не вдалося розпочати налаштування TOTP",
-    "qrCode": "QR-код",
-    "secretCopied": "Секрет скопійовано в буфер обміну",
-    "instructions": "Відскануйте QR-код або введіть секретний код у вашому додатку для автентифікації, а потім введіть 6-значний код",
-    "continueVerify": "Продовжити перевірку",
-    "verifyTitle": "Підтвердити код",
-    "verify": "Перевірити",
-    "enter6Digits": "Введіть 6-значний код",
-    "enabledSuccess": "Двофакторна автентифікація ввімкнена",
-    "invalidCode": "Недійсний код, спробуйте ще раз",
-    "disableTitle": "Вимкнути 2FA",
-    "disabledSuccess": "Двофакторну автентифікацію вимкнено",
-    "disableFailed": "Не вдалося вимкнути 2FA",
-    "backupTitle": "Резервні коди",
-    "downloadBackup": "Завантажити резервні коди",
-    "done": "Готово"
-  }
-}
diff --git a/plugins/totp/locales/translated/vi_VN.json b/plugins/totp/locales/translated/vi_VN.json
deleted file mode 100644
index 12ff823b7..000000000
--- a/plugins/totp/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "Ứng dụng xác thực",
-  "factor": "Mã xác thực",
-  "challenge": {
-    "enterCode": "Nhập mã xác minh",
-    "verify": "Xác minh mã",
-    "backupCodeHint": "Bạn cũng có thể nhập một trong các mã dự phòng của mình."
-  },
-  "enrollment": {
-    "title": "Trình xác thực TOTP",
-    "docs": "Tài liệu",
-    "on": "2FA đã được bật",
-    "off": "Thêm bảo mật đăng nhập bổ sung",
-    "enable": "Bật",
-    "disable": "Tắt",
-    "addDevice": "Thêm thiết bị",
-    "addTitle": "Thêm thiết bị xác thực",
-    "addDescription": "Xác nhận bằng mã từ thiết bị xác thực của bạn hoặc mã dự phòng để đăng ký thiết bị khác với cùng một khóa.",
-    "addScanInstructions": "Quét mã QR này bằng thiết bị xác thực bổ sung. Các thiết bị xác thực hiện có vẫn sẽ hoạt động bình thường.",
-    "addSuccess": "Đã đăng ký thêm trình xác thực.",
-    "addFailed": "Thêm trình xác thực không thành công",
-    "codeRequired": "Nhập mã TOTP hoặc mã dự phòng.",
-    "codePlaceholder": "Mã TOTP hoặc mã dự phòng",
-    "setupTitle": "Thiết lập TOTP",
-    "setupFailed": "Không khởi động được cài đặt TOTP",
-    "qrCode": "Mã QR",
-    "secretCopied": "Đã sao chép mã bí mật vào clipboard",
-    "instructions": "Quét mã QR hoặc nhập mã bí mật vào ứng dụng xác thực của bạn, sau đó nhập mã 6 chữ số.",
-    "continueVerify": "Tiếp tục xác minh",
-    "verifyTitle": "Xác minh mã",
-    "verify": "Xác minh",
-    "enter6Digits": "Nhập mã 6 chữ số",
-    "enabledSuccess": "Đã bật xác thực hai yếu tố",
-    "invalidCode": "Mã không hợp lệ, vui lòng thử lại",
-    "disableTitle": "Tắt 2FA",
-    "disabledSuccess": "Đã tắt xác thực hai yếu tố",
-    "disableFailed": "Không tắt được 2FA",
-    "backupTitle": "Mã dự phòng",
-    "downloadBackup": "Tải mã dự phòng",
-    "done": "Xong"
-  }
-}
diff --git a/plugins/totp/locales/translated/zh_CN.json b/plugins/totp/locales/translated/zh_CN.json
deleted file mode 100644
index e89071e4c..000000000
--- a/plugins/totp/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "身份验证器应用程序",
-  "factor": "验证码",
-  "challenge": {
-    "enterCode": "输入验证码",
-    "verify": "验证",
-    "backupCodeHint": "您也可以输入备用代码之一。"
-  },
-  "enrollment": {
-    "title": "TOTP 身份验证器",
-    "docs": "文档",
-    "on": "双因素认证已启用",
-    "off": "添加额外的登录安全",
-    "enable": "启用",
-    "disable": "禁用",
-    "addDevice": "添加设备",
-    "addTitle": "添加身份验证器设备",
-    "addDescription": "使用验证器中的验证码或备用验证码进行确认，以便使用同一密钥注册另一台设备。",
-    "addScanInstructions": "请使用新增的验证器扫描此二维码。现有验证器将继续有效。",
-    "addSuccess": "已注册其他身份验证器",
-    "addFailed": "添加身份验证器失败",
-    "codeRequired": "输入 TOTP 代码或备用代码",
-    "codePlaceholder": "TOTP 代码或备用代码",
-    "setupTitle": "设置 TOTP",
-    "setupFailed": "启动 TOTP 设置失败",
-    "qrCode": "二维码",
-    "secretCopied": "密钥已复制到剪贴板",
-    "instructions": "扫描二维码或在身份验证器应用中输入密钥，然后输入 6 位数验证码",
-    "continueVerify": "继续验证",
-    "verifyTitle": "验证",
-    "verify": "验证",
-    "enter6Digits": "输入 6 位验证码",
-    "enabledSuccess": "双因素认证已启用",
-    "invalidCode": "验证码无效，请重试",
-    "disableTitle": "禁用 2FA",
-    "disabledSuccess": "双因素认证已禁用",
-    "disableFailed": "禁用 2FA 失败",
-    "backupTitle": "备份验证码",
-    "downloadBackup": "下载备份验证码",
-    "done": "完成"
-  }
-}
diff --git a/plugins/totp/locales/translated/zh_TW.json b/plugins/totp/locales/translated/zh_TW.json
deleted file mode 100644
index 9fe0f6bb2..000000000
--- a/plugins/totp/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,42 +0,0 @@
-{
-  "title": "身份驗證器應用程式",
-  "factor": "驗證碼",
-  "challenge": {
-    "enterCode": "請輸入驗證碼",
-    "verify": "驗證碼",
-    "backupCodeHint": "您也可以輸入備用代碼之一。"
-  },
-  "enrollment": {
-    "title": "TOTP 驗證器",
-    "docs": "文件",
-    "on": "雙因素驗證已啟用",
-    "off": "新增額外的登入安全性",
-    "enable": "啟用",
-    "disable": "停用",
-    "addDevice": "新增設備",
-    "addTitle": "新增身份驗證器設備",
-    "addDescription": "使用驗證器中的驗證碼或備用驗證碼進行確認，以便使用相同金鑰註冊另一台裝置。",
-    "addScanInstructions": "請使用新增的驗證器掃描此二維碼。現有驗證器將繼續有效。",
-    "addSuccess": "已註冊其他身份驗證器",
-    "addFailed": "新增身份驗證器失敗",
-    "codeRequired": "輸入 TOTP 代碼或備用代碼",
-    "codePlaceholder": "TOTP 代碼或備用代碼",
-    "setupTitle": "設定 TOTP",
-    "setupFailed": "無法啟動 TOTP 設定",
-    "qrCode": "QR 碼",
-    "secretCopied": "密鑰已複製到剪貼簿",
-    "instructions": "掃描二維碼或在驗證器應用程式中輸入金鑰，然後輸入 6 位數驗證碼",
-    "continueVerify": "繼續驗證",
-    "verifyTitle": "驗證碼",
-    "verify": "驗證",
-    "enter6Digits": "輸入 6 位數驗證碼",
-    "enabledSuccess": "雙因素驗證已啟用",
-    "invalidCode": "驗證碼無效，請再試一次",
-    "disableTitle": "停用雙因素驗證",
-    "disabledSuccess": "雙因素驗證已停用",
-    "disableFailed": "無法停用雙因素驗證",
-    "backupTitle": "備用驗證碼",
-    "downloadBackup": "下載備用驗證碼",
-    "done": "完成"
-  }
-}
diff --git a/plugins/totp/manifest.json b/plugins/totp/manifest.json
deleted file mode 100644
index 8487c1c62..000000000
--- a/plugins/totp/manifest.json
+++ /dev/null
@@ -1,33 +0,0 @@
-{
-  "id": "totp",
-  "name": "TOTP",
-  "version": "1.0.0",
-  "description": "Ask for a code from an authenticator app after signing in, with backup codes in case you lose your phone.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Access & Security",
-  "icon": "ShieldCheck",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "db:own",
-    "secrets:own",
-    "network:serve",
-    "auth:provide",
-    "ui:surface",
-    "db:core-refs"
-  ],
-  "contributes": {
-    "auth": {
-      "secondFactors": ["totp"]
-    }
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"],
-  "desktop": "server"
-}
diff --git a/plugins/totp/migrations/mysql/0001_create_enrollments.sql b/plugins/totp/migrations/mysql/0001_create_enrollments.sql
deleted file mode 100644
index d68cb9523..000000000
--- a/plugins/totp/migrations/mysql/0001_create_enrollments.sql
+++ /dev/null
@@ -1,12 +0,0 @@
--- totp 0001: create_enrollments
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `p_totp_enrollments` (
-  `user_id` varchar(255) PRIMARY KEY NOT NULL,
-  `secret` text,
-  `pending_secret` text,
-  `backup_codes` text,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
diff --git a/plugins/totp/migrations/postgres/0001_create_enrollments.sql b/plugins/totp/migrations/postgres/0001_create_enrollments.sql
deleted file mode 100644
index dd6d2ca16..000000000
--- a/plugins/totp/migrations/postgres/0001_create_enrollments.sql
+++ /dev/null
@@ -1,12 +0,0 @@
--- totp 0001: create_enrollments
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "p_totp_enrollments" (
-  "user_id" varchar(255) PRIMARY KEY NOT NULL,
-  "secret" text,
-  "pending_secret" text,
-  "backup_codes" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
diff --git a/plugins/totp/migrations/snapshot.json b/plugins/totp/migrations/snapshot.json
deleted file mode 100644
index daf57900d..000000000
--- a/plugins/totp/migrations/snapshot.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "enrollments": {
-      "columns": {
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true,
-          "primaryKey": true
-        },
-        "secret": {
-          "type": "encryptedText"
-        },
-        "pendingSecret": {
-          "type": "encryptedText"
-        },
-        "backupCodes": {
-          "type": "encryptedText"
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "updatedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": []
-    }
-  }
-}
diff --git a/plugins/totp/migrations/sqlite/0001_create_enrollments.sql b/plugins/totp/migrations/sqlite/0001_create_enrollments.sql
deleted file mode 100644
index 2bc7364f6..000000000
--- a/plugins/totp/migrations/sqlite/0001_create_enrollments.sql
+++ /dev/null
@@ -1,12 +0,0 @@
--- totp 0001: create_enrollments
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "p_totp_enrollments" (
-  "user_id" text PRIMARY KEY NOT NULL,
-  "secret" text,
-  "pending_secret" text,
-  "backup_codes" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
diff --git a/plugins/totp/package.json b/plugins/totp/package.json
deleted file mode 100644
index 5616bfde9..000000000
--- a/plugins/totp/package.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "name": "@termix-plugin/totp",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "lucide-react": "^1.33.0",
-    "qrcode": "^1.5.4",
-    "speakeasy": "^2.0.0"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "react": "^19.2.8",
-    "sonner": "^2.0.8"
-  }
-}
diff --git a/plugins/totp/src/backend/index.ts b/plugins/totp/src/backend/index.ts
deleted file mode 100644
index 569cbb21f..000000000
--- a/plugins/totp/src/backend/index.ts
+++ /dev/null
@@ -1,41 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { enrollments } from "./tables.js";
-import { createEnrollmentRepository } from "./repository.js";
-import { createTotpService, FACTOR_ID, normalizeCode } from "./totp.js";
-import { registerTotpRoutes } from "./routes.js";
-
-export async function activate(ctx: PluginContext) {
-  const table = await ctx.db.define(enrollments);
-  const totp = createTotpService(
-    ctx,
-    createEnrollmentRepository(ctx.db, table),
-  );
-
-  ctx.auth.registerSecondFactor({
-    id: FACTOR_ID,
-    labelKey: "factor",
-    isEnrolled: (userId) => totp.isEnrolled(userId),
-    verify: async (userId, body) => {
-      const result = await totp.checkCode(
-        userId,
-        normalizeCode(body.totp_code ?? body.code),
-      );
-      if (result === null) {
-        return {
-          ok: false,
-          error:
-            "Your authenticator could not be read. Contact an admin to reset your second factor.",
-        };
-      }
-      return result;
-    },
-    reset: (userId) => totp.remove(userId),
-  });
-
-  registerTotpRoutes(ctx.http.router<Router>(), ctx, totp);
-}
-
-export async function deactivate() {
-  // Everything above was registered through ctx and is disposed by core.
-}
diff --git a/plugins/totp/src/backend/repository.ts b/plugins/totp/src/backend/repository.ts
deleted file mode 100644
index 8209bf923..000000000
--- a/plugins/totp/src/backend/repository.ts
+++ /dev/null
@@ -1,69 +0,0 @@
-import { eq } from "drizzle-orm";
-import type { PluginDatabase } from "@termix/plugin-sdk/backend";
-
-export interface EnrollmentRecord {
-  userId: string;
-  secret: string | null;
-  pendingSecret: string | null;
-  backupCodes: string | null;
-  createdAt: string;
-  updatedAt: string;
-}
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// ctx.db.define hands the table back untyped and the drizzle handle is the
-// server's own, so both are typed at this module's edge.
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export type EnrollmentRepository = ReturnType<
-  typeof createEnrollmentRepository
->;
-
-/** Sealed values only: nothing here ever sees a plaintext secret. */
-export function createEnrollmentRepository(db: PluginDatabase, table: Table) {
-  const client = () => db.client<Drizzle>();
-
-  async function find(userId: string): Promise<EnrollmentRecord | null> {
-    const drizzle = await client();
-    const rows = await drizzle
-      .select()
-      .from(table)
-      .where(eq(table.userId, userId))
-      .limit(1);
-    return (rows[0] as EnrollmentRecord) ?? null;
-  }
-
-  async function save(
-    userId: string,
-    values: Partial<
-      Pick<EnrollmentRecord, "secret" | "pendingSecret" | "backupCodes">
-    >,
-  ): Promise<void> {
-    const drizzle = await client();
-    const now = new Date().toISOString();
-    if (await find(userId)) {
-      await drizzle
-        .update(table)
-        .set({ ...values, updatedAt: now })
-        .where(eq(table.userId, userId));
-    } else {
-      await drizzle
-        .insert(table)
-        .values({ userId, ...values, createdAt: now, updatedAt: now });
-    }
-    await db.persist();
-  }
-
-  return {
-    find,
-    save,
-
-    async remove(userId: string): Promise<void> {
-      const drizzle = await client();
-      await drizzle.delete(table).where(eq(table.userId, userId));
-      await db.persist();
-    },
-  };
-}
diff --git a/plugins/totp/src/backend/routes.ts b/plugins/totp/src/backend/routes.ts
deleted file mode 100644
index b1b7d70a4..000000000
--- a/plugins/totp/src/backend/routes.ts
+++ /dev/null
@@ -1,268 +0,0 @@
-import type { Request, Response, Router } from "express";
-import { eq } from "drizzle-orm";
-import QRCode from "qrcode";
-import speakeasy from "speakeasy";
-import {
-  LoginMethodError,
-  type PluginContext,
-} from "@termix/plugin-sdk/backend";
-import { FACTOR_ID, normalizeCode, type TotpService } from "./totp.js";
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export function registerTotpRoutes(
-  router: Router,
-  ctx: PluginContext,
-  totp: TotpService,
-): void {
-  const actor = () => ctx.currentActor()!;
-
-  async function accountLabel(userId: string): Promise<string> {
-    try {
-      const { users } = await ctx.db.refs<{ users: Table }>();
-      const drizzle = await ctx.db.client<Drizzle>();
-      const rows = await drizzle
-        .select({ username: users.username })
-        .from(users)
-        .where(eq(users.id, userId))
-        .limit(1);
-      if (rows[0]?.username) return `Termix (${rows[0].username})`;
-    } catch {
-      // The label is cosmetic.
-    }
-    return "Termix";
-  }
-
-  const fail = (res: Response, message: string, error: unknown) => {
-    ctx.log.error(
-      message,
-      error instanceof Error ? error : new Error(String(error)),
-    );
-    res.status(500).json({ error: message });
-  };
-
-  /**
-   * @openapi
-   * /plugin-api/totp/status:
-   *   get:
-   *     summary: TOTP status for the caller
-   *     tags:
-   *       - TOTP
-   *     responses:
-   *       200:
-   *         description: Whether the caller has TOTP on.
-   */
-  router.get("/status", async (_req: Request, res: Response) => {
-    try {
-      res.json({ enabled: await totp.isEnrolled(actor()) });
-    } catch (error) {
-      fail(res, "Failed to read TOTP status", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/totp/setup:
-   *   post:
-   *     summary: Start TOTP setup
-   *     description: Returns a new secret and QR code. With TOTP already on, a current code or backup code in `credential` returns the existing secret instead, to add another authenticator.
-   *     tags:
-   *       - TOTP
-   *     requestBody:
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               credential:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Secret and QR code.
-   *       400:
-   *         description: A code is required.
-   *       401:
-   *         description: Invalid code.
-   */
-  router.post("/setup", async (req: Request, res: Response) => {
-    const userId = actor();
-    try {
-      const label = await accountLabel(userId);
-      if (await totp.isEnrolled(userId)) {
-        const credential = normalizeCode(req.body?.credential);
-        if (!credential) {
-          return res.status(400).json({ error: "A TOTP code is required" });
-        }
-        if (!(await totp.checkCode(userId, credential))) {
-          return res.status(401).json({ error: "Invalid TOTP code" });
-        }
-        const secret = await totp.activeSecret(userId);
-        if (!secret) {
-          return res.status(409).json({ error: "TOTP secret is unavailable" });
-        }
-        const url = speakeasy.otpauthURL({
-          secret,
-          label,
-          encoding: "base32",
-        });
-        return res.json({
-          secret,
-          qr_code: await QRCode.toDataURL(url),
-          additional: true,
-        });
-      }
-
-      const { secret, otpauthUrl } = await totp.startSetup(userId, label);
-      res.json({ secret, qr_code: await QRCode.toDataURL(otpauthUrl) });
-    } catch (error) {
-      fail(res, "Failed to setup TOTP", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/totp/enable:
-   *   post:
-   *     summary: Turn TOTP on
-   *     description: Checks a code from the secret /setup returned, turns TOTP on and returns backup codes. Signs the caller out everywhere else.
-   *     tags:
-   *       - TOTP
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               totp_code:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: TOTP on, with backup codes.
-   *       400:
-   *         description: Missing code, already on, or setup not started.
-   *       401:
-   *         description: Invalid code.
-   *       409:
-   *         description: Core does not allow second factors right now.
-   */
-  router.post("/enable", async (req: Request, res: Response) => {
-    const userId = actor();
-    const code = normalizeCode(req.body?.totp_code);
-    if (!code) return res.status(400).json({ error: "TOTP code is required" });
-    try {
-      if (await totp.isEnrolled(userId)) {
-        return res.status(400).json({ error: "TOTP is already enabled" });
-      }
-      const pending = await totp.pendingSecretFor(userId, code);
-      if (pending.status === "not-started") {
-        return res.status(400).json({ error: "TOTP setup not initiated" });
-      }
-      if (pending.status === "invalid") {
-        return res.status(401).json({ error: "Invalid TOTP code" });
-      }
-      // Core's policy first, so a refusal leaves nothing half enabled.
-      await ctx.auth.recordEnrollment(userId, FACTOR_ID);
-      const backupCodes = await totp.activate(userId, pending.secret);
-      res.json({
-        message: "TOTP enabled successfully",
-        backup_codes: backupCodes,
-      });
-    } catch (error) {
-      if (error instanceof LoginMethodError) {
-        return res.status(error.status).json({ error: error.message });
-      }
-      fail(res, "Failed to enable TOTP", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/totp/disable:
-   *   post:
-   *     summary: Turn TOTP off
-   *     tags:
-   *       - TOTP
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               totp_code:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: TOTP off.
-   *       400:
-   *         description: Missing code or TOTP is not on.
-   *       401:
-   *         description: Invalid code.
-   */
-  router.post("/disable", async (req: Request, res: Response) => {
-    const userId = actor();
-    const code = normalizeCode(req.body?.totp_code);
-    if (!code) {
-      return res.status(400).json({ error: "A TOTP code is required" });
-    }
-    try {
-      const ok = await totp.checkCode(userId, code);
-      if (ok === null) {
-        return res.status(400).json({ error: "TOTP is not enabled" });
-      }
-      if (!ok) return res.status(401).json({ error: "Invalid TOTP code" });
-      await totp.remove(userId);
-      await ctx.auth.removeEnrollment(userId, FACTOR_ID);
-      ctx.log.info(`Two-factor authentication disabled for ${userId}`);
-      res.json({ message: "TOTP disabled successfully" });
-    } catch (error) {
-      fail(res, "Failed to disable TOTP", error);
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/totp/backup-codes:
-   *   post:
-   *     summary: Replace the backup codes
-   *     tags:
-   *       - TOTP
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               totp_code:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: New backup codes.
-   *       400:
-   *         description: Missing code or TOTP is not on.
-   *       401:
-   *         description: Invalid code.
-   */
-  router.post("/backup-codes", async (req: Request, res: Response) => {
-    const userId = actor();
-    const code = normalizeCode(req.body?.totp_code);
-    if (!code) {
-      return res.status(400).json({ error: "A TOTP code is required" });
-    }
-    try {
-      const ok = await totp.checkCode(userId, code);
-      if (ok === null) {
-        return res.status(400).json({ error: "TOTP is not enabled" });
-      }
-      if (!ok) return res.status(401).json({ error: "Invalid TOTP code" });
-      res.json({ backup_codes: await totp.replaceBackupCodes(userId) });
-    } catch (error) {
-      fail(res, "Failed to generate backup codes", error);
-    }
-  });
-}
diff --git a/plugins/totp/src/backend/tables.ts b/plugins/totp/src/backend/tables.ts
deleted file mode 100644
index ec83f737c..000000000
--- a/plugins/totp/src/backend/tables.ts
+++ /dev/null
@@ -1,24 +0,0 @@
-import {
-  defineTable,
-  encryptedText,
-  refUser,
-  timestamp,
-} from "@termix/plugin-sdk/db";
-
-/**
- * One row per user who started or finished setup. The secret columns hold
- * values sealed with ctx.secrets.seal, so they can be read during login
- * without an acting user. A non-null secret means the user is enrolled.
- */
-export const enrollments = defineTable("enrollments", {
-  userId: refUser().primaryKey(),
-  secret: encryptedText(),
-  // Set by /setup, promoted to secret once a code from it verifies.
-  pendingSecret: encryptedText(),
-  // A sealed JSON array of the unused backup codes.
-  backupCodes: encryptedText(),
-  createdAt: timestamp().notNull().defaultNow(),
-  updatedAt: timestamp().notNull().defaultNow(),
-});
-
-export const tables = [enrollments];
diff --git a/plugins/totp/src/backend/totp.ts b/plugins/totp/src/backend/totp.ts
deleted file mode 100644
index 40b4c653f..000000000
--- a/plugins/totp/src/backend/totp.ts
+++ /dev/null
@@ -1,136 +0,0 @@
-import crypto from "node:crypto";
-import speakeasy from "speakeasy";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { EnrollmentRepository } from "./repository.js";
-
-export const FACTOR_ID = "totp";
-
-const BACKUP_CODE_ALPHABET = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789";
-const BACKUP_CODE_COUNT = 8;
-
-/** Eight characters from a CSPRNG; Math.random is not fit for secrets. */
-export function generateBackupCode(): string {
-  let code = "";
-  for (let i = 0; i < 8; i++) {
-    code += BACKUP_CODE_ALPHABET[crypto.randomInt(BACKUP_CODE_ALPHABET.length)];
-  }
-  return code;
-}
-
-export function generateBackupCodes(): string[] {
-  return Array.from({ length: BACKUP_CODE_COUNT }, () => generateBackupCode());
-}
-
-export function verifyTotpCode(secret: string, code: string): boolean {
-  return speakeasy.totp.verify({
-    secret,
-    encoding: "base32",
-    token: code,
-    window: 2,
-  });
-}
-
-export function normalizeCode(value: unknown): string {
-  return typeof value === "string" ? value.trim().toUpperCase() : "";
-}
-
-export type TotpService = ReturnType<typeof createTotpService>;
-
-/**
- * Reads and checks a user's enrolment. Secrets are sealed with the
- * installation key, so this works during login with no acting user.
- */
-export function createTotpService(
-  ctx: PluginContext,
-  repository: EnrollmentRepository,
-) {
-  const unseal = (value: string | null) =>
-    value ? ctx.secrets.unseal(value) : Promise.resolve(null);
-
-  async function readBackupCodes(sealed: string | null): Promise<string[]> {
-    const raw = await unseal(sealed);
-    if (!raw) return [];
-    try {
-      const codes = JSON.parse(raw);
-      return Array.isArray(codes) ? codes : [];
-    } catch {
-      return [];
-    }
-  }
-
-  async function sealBackupCodes(codes: string[]): Promise<string> {
-    return ctx.secrets.seal(JSON.stringify(codes));
-  }
-
-  return {
-    async isEnrolled(userId: string): Promise<boolean> {
-      return !!(await repository.find(userId))?.secret;
-    },
-
-    /** The active secret, or null when not enrolled or unreadable. */
-    async activeSecret(userId: string): Promise<string | null> {
-      return unseal((await repository.find(userId))?.secret ?? null);
-    },
-
-    /**
-     * True for a current code from the authenticator or an unused backup
-     * code, which is burnt. Null when the user has no readable secret.
-     */
-    async checkCode(userId: string, code: string): Promise<boolean | null> {
-      const row = await repository.find(userId);
-      const secret = await unseal(row?.secret ?? null);
-      if (!row || !secret) return null;
-      if (!code) return false;
-      if (verifyTotpCode(secret, code)) return true;
-
-      const codes = await readBackupCodes(row.backupCodes);
-      const index = codes.indexOf(code);
-      if (index === -1) return false;
-      codes.splice(index, 1);
-      await repository.save(userId, {
-        backupCodes: await sealBackupCodes(codes),
-      });
-      return true;
-    },
-
-    /** Starts setup with a new secret, replacing any unfinished one. */
-    async startSetup(userId: string, label: string) {
-      const secret = speakeasy.generateSecret({ name: label, length: 32 });
-      await repository.save(userId, {
-        pendingSecret: await ctx.secrets.seal(secret.base32),
-      });
-      return { secret: secret.base32, otpauthUrl: secret.otpauth_url ?? "" };
-    },
-
-    /** The unfinished setup's secret, when a code from it verifies. */
-    async pendingSecretFor(userId: string, code: string) {
-      const pending = await unseal(
-        (await repository.find(userId))?.pendingSecret ?? null,
-      );
-      if (!pending) return { status: "not-started" as const };
-      if (!verifyTotpCode(pending, code)) return { status: "invalid" as const };
-      return { status: "ok" as const, secret: pending };
-    },
-
-    /** Makes the verified pending secret active and issues backup codes. */
-    async activate(userId: string, secret: string): Promise<string[]> {
-      const codes = generateBackupCodes();
-      await repository.save(userId, {
-        secret: await ctx.secrets.seal(secret),
-        pendingSecret: null,
-        backupCodes: await sealBackupCodes(codes),
-      });
-      return codes;
-    },
-
-    async replaceBackupCodes(userId: string): Promise<string[]> {
-      const codes = generateBackupCodes();
-      await repository.save(userId, {
-        backupCodes: await sealBackupCodes(codes),
-      });
-      return codes;
-    },
-
-    remove: (userId: string) => repository.remove(userId),
-  };
-}
diff --git a/plugins/totp/src/frontend/TotpChallenge.tsx b/plugins/totp/src/frontend/TotpChallenge.tsx
deleted file mode 100644
index ea92d66d6..000000000
--- a/plugins/totp/src/frontend/TotpChallenge.tsx
+++ /dev/null
@@ -1,82 +0,0 @@
-import { useEffect, useRef, useState } from "react";
-import { toast } from "sonner";
-import { Button, Input } from "@termix/plugin-sdk/ui";
-import {
-  useTranslation,
-  type SecondFactorUIProps,
-} from "@termix/plugin-sdk/frontend";
-import { isValidTotpInput, normalizeTotpInput } from "./totp-input";
-
-const primaryButton =
-  "w-full bg-accent-brand hover:bg-accent-brand/90 text-background font-bold";
-
-export function TotpChallenge({
-  disabled,
-  verify,
-  cancel,
-}: SecondFactorUIProps) {
-  const { t } = useTranslation();
-  const [code, setCode] = useState("");
-  const [loading, setLoading] = useState(false);
-  const inputRef = useRef<HTMLInputElement>(null);
-
-  useEffect(() => {
-    inputRef.current?.focus();
-  }, []);
-
-  return (
-    <form
-      onSubmit={async (event) => {
-        event.preventDefault();
-        if (!isValidTotpInput(code)) {
-          toast.error(t("challenge.enterCode"));
-          return;
-        }
-        setLoading(true);
-        try {
-          await verify({ totp_code: code });
-        } finally {
-          setLoading(false);
-        }
-      }}
-      className="flex flex-col gap-4"
-    >
-      <label className="flex flex-col gap-1.5">
-        <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-          {t("challenge.verify")}
-        </span>
-        <Input
-          ref={inputRef}
-          id="totp-code"
-          type="text"
-          placeholder="000000"
-          maxLength={8}
-          value={code}
-          onChange={(e) => setCode(normalizeTotpInput(e.target.value))}
-          disabled={disabled || loading}
-          className="text-center text-2xl tracking-widest font-mono"
-          autoComplete="one-time-code"
-        />
-      </label>
-      <p className="text-xs text-muted-foreground">
-        {t("challenge.backupCodeHint")}
-      </p>
-      <Button
-        type="submit"
-        className={primaryButton}
-        disabled={disabled || loading || !isValidTotpInput(code)}
-      >
-        {loading ? t("common.loading") : t("challenge.verify")}
-      </Button>
-      <Button
-        type="button"
-        variant="ghost"
-        className="w-full"
-        onClick={cancel}
-        disabled={loading}
-      >
-        {t("common.cancel")}
-      </Button>
-    </form>
-  );
-}
diff --git a/plugins/totp/src/frontend/TotpEnrollment.tsx b/plugins/totp/src/frontend/TotpEnrollment.tsx
deleted file mode 100644
index 5009da096..000000000
--- a/plugins/totp/src/frontend/TotpEnrollment.tsx
+++ /dev/null
@@ -1,404 +0,0 @@
-import { useEffect, useState } from "react";
-import { CheckCircle2, Copy, X } from "lucide-react";
-import { toast } from "sonner";
-import { Button, Input, copyToClipboard } from "@termix/plugin-sdk/ui";
-import { usePluginApi, useTranslation } from "@termix/plugin-sdk/frontend";
-import { apiErrorMessage } from "./totp-input";
-
-type Step = "idle" | "setup" | "verify" | "backup";
-
-interface SetupResponse {
-  secret: string;
-  qr_code: string;
-  additional?: boolean;
-}
-
-const accentButton =
-  "text-xs border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand";
-const destructiveButton =
-  "text-xs border-destructive/40 text-destructive hover:bg-destructive/10 hover:text-destructive";
-const box = "border border-border bg-muted/20 p-3 flex flex-col gap-3";
-const boxTitle =
-  "text-[10px] font-semibold uppercase tracking-widest text-muted-foreground";
-
-/** Settings > Security: turn TOTP on and off, add devices, backup codes. */
-export function TotpEnrollment() {
-  const { t } = useTranslation();
-  const api = usePluginApi();
-  const [enabled, setEnabled] = useState(false);
-  const [step, setStep] = useState<Step>("idle");
-  const [qrCode, setQrCode] = useState("");
-  const [secret, setSecret] = useState("");
-  const [code, setCode] = useState("");
-  const [backupCodes, setBackupCodes] = useState<string[]>([]);
-  const [loading, setLoading] = useState(false);
-  const [showDisable, setShowDisable] = useState(false);
-  const [disableInput, setDisableInput] = useState("");
-  const [showAdd, setShowAdd] = useState(false);
-  const [addInput, setAddInput] = useState("");
-  const [adding, setAdding] = useState(false);
-
-  useEffect(() => {
-    api
-      .get<{ enabled: boolean }>("status")
-      .then(({ data }) => setEnabled(!!data.enabled))
-      .catch(() => {});
-  }, [api]);
-
-  async function startSetup() {
-    setLoading(true);
-    try {
-      const { data } = await api.post<SetupResponse>("setup", {});
-      setQrCode(data.qr_code);
-      setSecret(data.secret);
-      setCode("");
-      setStep("setup");
-    } catch {
-      toast.error(t("enrollment.setupFailed"));
-    } finally {
-      setLoading(false);
-    }
-  }
-
-  async function addAuthenticator() {
-    if (!addInput) {
-      toast.error(t("enrollment.codeRequired"));
-      return;
-    }
-    setLoading(true);
-    try {
-      const { data } = await api.post<SetupResponse>("setup", {
-        credential: addInput,
-      });
-      setQrCode(data.qr_code);
-      setSecret(data.secret);
-      setAdding(true);
-      setShowAdd(false);
-      setAddInput("");
-      setStep("setup");
-    } catch (e) {
-      toast.error(apiErrorMessage(e, t("enrollment.addFailed")));
-    } finally {
-      setLoading(false);
-    }
-  }
-
-  async function verify() {
-    if (code.length !== 6) {
-      toast.error(t("enrollment.enter6Digits"));
-      return;
-    }
-    setLoading(true);
-    try {
-      const { data } = await api.post<{ backup_codes?: string[] }>("enable", {
-        totp_code: code,
-      });
-      setBackupCodes(data.backup_codes ?? []);
-      setEnabled(true);
-      setStep("backup");
-      toast.success(t("enrollment.enabledSuccess"));
-    } catch (e) {
-      toast.error(apiErrorMessage(e, t("enrollment.invalidCode")));
-    } finally {
-      setLoading(false);
-    }
-  }
-
-  async function disable() {
-    if (!disableInput) {
-      toast.error(t("enrollment.codeRequired"));
-      return;
-    }
-    setLoading(true);
-    try {
-      await api.post("disable", { totp_code: disableInput });
-      setEnabled(false);
-      setShowDisable(false);
-      setDisableInput("");
-      toast.success(t("enrollment.disabledSuccess"));
-    } catch (e) {
-      toast.error(apiErrorMessage(e, t("enrollment.disableFailed")));
-    } finally {
-      setLoading(false);
-    }
-  }
-
-  function downloadBackupCodes() {
-    const blob = new Blob([backupCodes.join("\n")], { type: "text/plain" });
-    const url = URL.createObjectURL(blob);
-    const a = document.createElement("a");
-    a.href = url;
-    a.download = "termix-backup-codes.txt";
-    a.click();
-    URL.revokeObjectURL(url);
-  }
-
-  return (
-    <div className="flex flex-col gap-2">
-      <div className="flex items-center justify-between">
-        <div className="flex flex-col gap-0.5">
-          <div className="flex items-center gap-2">
-            <span className="text-xs font-medium">{t("enrollment.title")}</span>
-            <a
-              href="https://docs.termix.site/features/authentication/totp"
-              target="_blank"
-              rel="noreferrer"
-              className="text-[10px] text-accent-brand hover:underline"
-            >
-              {t("enrollment.docs")}
-            </a>
-          </div>
-          <span className="text-[10px] text-muted-foreground">
-            {enabled ? t("enrollment.on") : t("enrollment.off")}
-          </span>
-        </div>
-        {enabled ? (
-          <div className="ml-3 flex shrink-0 gap-2">
-            <Button
-              variant="outline"
-              size="sm"
-              className={`h-7 ${accentButton}`}
-              onClick={() => setShowAdd((open) => !open)}
-              disabled={loading || step !== "idle"}
-            >
-              {t("enrollment.addDevice")}
-            </Button>
-            <Button
-              variant="outline"
-              size="sm"
-              className={`h-7 ${destructiveButton}`}
-              onClick={() => setShowDisable((open) => !open)}
-            >
-              {t("enrollment.disable")}
-            </Button>
-          </div>
-        ) : (
-          <Button
-            variant="outline"
-            size="sm"
-            className={`shrink-0 ml-3 h-7 ${accentButton}`}
-            onClick={startSetup}
-            disabled={loading || step !== "idle"}
-          >
-            {t("enrollment.enable")}
-          </Button>
-        )}
-      </div>
-
-      {enabled && showAdd && (
-        <div className={box}>
-          <span className={boxTitle}>{t("enrollment.addTitle")}</span>
-          <span className="text-[10px] text-muted-foreground">
-            {t("enrollment.addDescription")}
-          </span>
-          <Input
-            placeholder={t("enrollment.codePlaceholder")}
-            value={addInput}
-            onChange={(e) => setAddInput(e.target.value)}
-            onKeyDown={(e) => e.key === "Enter" && addAuthenticator()}
-            className="text-sm"
-          />
-          <div className="flex gap-2">
-            <Button
-              variant="ghost"
-              size="sm"
-              className="flex-1 text-xs"
-              onClick={() => {
-                setShowAdd(false);
-                setAddInput("");
-              }}
-            >
-              {t("common.cancel")}
-            </Button>
-            <Button
-              variant="outline"
-              size="sm"
-              className={`flex-1 ${accentButton}`}
-              onClick={addAuthenticator}
-              disabled={loading}
-            >
-              {t("common.continue")}
-            </Button>
-          </div>
-        </div>
-      )}
-
-      {enabled && showDisable && (
-        <div className={box}>
-          <span className={boxTitle}>{t("enrollment.disableTitle")}</span>
-          <Input
-            placeholder={t("enrollment.codePlaceholder")}
-            value={disableInput}
-            onChange={(e) => setDisableInput(e.target.value)}
-            className="text-sm"
-          />
-          <div className="flex gap-2">
-            <Button
-              variant="ghost"
-              size="sm"
-              className="flex-1 text-xs"
-              onClick={() => {
-                setShowDisable(false);
-                setDisableInput("");
-              }}
-            >
-              {t("common.cancel")}
-            </Button>
-            <Button
-              variant="outline"
-              size="sm"
-              className={`flex-1 ${destructiveButton}`}
-              onClick={disable}
-              disabled={loading}
-            >
-              {t("enrollment.disableTitle")}
-            </Button>
-          </div>
-        </div>
-      )}
-
-      {step === "setup" && (
-        <div className={box}>
-          <div className="flex items-center justify-between">
-            <span className={boxTitle}>{t("enrollment.setupTitle")}</span>
-            <button
-              onClick={() => {
-                setStep("idle");
-                setAdding(false);
-              }}
-              className="text-muted-foreground hover:text-foreground"
-            >
-              <X className="size-3.5" />
-            </button>
-          </div>
-          <div className="flex items-center justify-center p-3 bg-background border border-border">
-            {qrCode ? (
-              <img
-                src={qrCode}
-                alt={t("enrollment.qrCode")}
-                className="size-32"
-              />
-            ) : (
-              <div className="size-24 bg-muted flex items-center justify-center text-[10px] text-muted-foreground">
-                {t("enrollment.qrCode")}
-              </div>
-            )}
-          </div>
-          <div className="flex items-center gap-2 bg-muted/30 border border-border px-2 py-1.5">
-            <span className="text-[10px] font-mono flex-1 tracking-widest select-all truncate">
-              {secret}
-            </span>
-            <button
-              onClick={() => {
-                copyToClipboard(secret);
-                toast.info(t("enrollment.secretCopied"));
-              }}
-              className="text-muted-foreground hover:text-accent-brand shrink-0"
-            >
-              <Copy className="size-3.5" />
-            </button>
-          </div>
-          <span className="text-[10px] text-muted-foreground text-center">
-            {t(
-              adding
-                ? "enrollment.addScanInstructions"
-                : "enrollment.instructions",
-            )}
-          </span>
-          <Button
-            variant="outline"
-            size="sm"
-            className={accentButton}
-            onClick={() => {
-              if (adding) {
-                setAdding(false);
-                setStep("idle");
-                toast.success(t("enrollment.addSuccess"));
-              } else {
-                setStep("verify");
-              }
-            }}
-          >
-            {t(adding ? "enrollment.done" : "enrollment.continueVerify")}
-          </Button>
-        </div>
-      )}
-
-      {!enabled && step === "verify" && (
-        <div className={box}>
-          <div className="flex items-center justify-between">
-            <span className={boxTitle}>{t("enrollment.verifyTitle")}</span>
-            <button
-              onClick={() => setStep("setup")}
-              className="text-muted-foreground hover:text-foreground"
-            >
-              <X className="size-3.5" />
-            </button>
-          </div>
-          <Input
-            placeholder="000000"
-            value={code}
-            onChange={(e) =>
-              setCode(e.target.value.replace(/\D/g, "").slice(0, 6))
-            }
-            onKeyDown={(e) => e.key === "Enter" && verify()}
-            className="text-center font-mono tracking-widest text-lg h-10"
-            maxLength={6}
-          />
-          <div className="flex gap-2">
-            <Button
-              variant="ghost"
-              size="sm"
-              className="flex-1 text-xs"
-              onClick={() => setStep("setup")}
-            >
-              {t("common.cancel")}
-            </Button>
-            <Button
-              variant="outline"
-              size="sm"
-              className={`flex-1 ${accentButton}`}
-              onClick={verify}
-              disabled={loading || code.length !== 6}
-            >
-              <CheckCircle2 className="size-3.5" />
-              {t("enrollment.verify")}
-            </Button>
-          </div>
-        </div>
-      )}
-
-      {step === "backup" && backupCodes.length > 0 && (
-        <div className={box}>
-          <span className={boxTitle}>{t("enrollment.backupTitle")}</span>
-          <div className="grid grid-cols-2 gap-1">
-            {backupCodes.map((backupCode) => (
-              <span
-                key={backupCode}
-                className="text-[10px] font-mono bg-muted border border-border px-2 py-1 text-center"
-              >
-                {backupCode}
-              </span>
-            ))}
-          </div>
-          <Button
-            variant="outline"
-            size="sm"
-            className={accentButton}
-            onClick={downloadBackupCodes}
-          >
-            {t("enrollment.downloadBackup")}
-          </Button>
-          <Button
-            variant="ghost"
-            size="sm"
-            className="text-xs"
-            onClick={() => setStep("idle")}
-          >
-            {t("enrollment.done")}
-          </Button>
-        </div>
-      )}
-    </div>
-  );
-}
diff --git a/plugins/totp/src/frontend/index.tsx b/plugins/totp/src/frontend/index.tsx
deleted file mode 100644
index e66e6a522..000000000
--- a/plugins/totp/src/frontend/index.tsx
+++ /dev/null
@@ -1,12 +0,0 @@
-import type { TermixApp } from "@termix/plugin-sdk/frontend";
-import { TotpChallenge } from "./TotpChallenge";
-import { TotpEnrollment } from "./TotpEnrollment";
-
-export function activate(app: TermixApp): void {
-  app.registerSecondFactorUI({
-    id: "totp",
-    titleKey: "title",
-    component: TotpChallenge,
-    enrollment: TotpEnrollment,
-  });
-}
diff --git a/plugins/totp/src/frontend/totp-input.ts b/plugins/totp/src/frontend/totp-input.ts
deleted file mode 100644
index ed7dc53d5..000000000
--- a/plugins/totp/src/frontend/totp-input.ts
+++ /dev/null
@@ -1,17 +0,0 @@
-/** Six-digit codes, or a backup code of up to eight letters and digits. */
-export function normalizeTotpInput(value: string): string {
-  return value
-    .replace(/[^a-zA-Z0-9]/g, "")
-    .toUpperCase()
-    .slice(0, 8);
-}
-
-export function isValidTotpInput(value: string): boolean {
-  return /^[A-Z0-9]{6,8}$/.test(value);
-}
-
-export function apiErrorMessage(error: unknown, fallback: string): string {
-  const data = (error as { response?: { data?: { error?: unknown } } })
-    ?.response?.data;
-  return typeof data?.error === "string" && data.error ? data.error : fallback;
-}
diff --git a/plugins/totp/tests/backend/helpers.ts b/plugins/totp/tests/backend/helpers.ts
deleted file mode 100644
index aae244b2a..000000000
--- a/plugins/totp/tests/backend/helpers.ts
+++ /dev/null
@@ -1,95 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-export const manifest = manifestJson as unknown as PluginManifest;
-
-export interface TestServer {
-  db: TestDb;
-  mock: MockPluginContext;
-  request: (
-    method: string,
-    path: string,
-    options?: { user?: string; body?: unknown },
-    // Route bodies vary per test; asserting on them is the point.
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any }>;
-  close: () => Promise<void>;
-}
-
-/**
- * The plugin activated against a real in-memory database, its router mounted
- * on an express app the way core mounts it: JSON parsed, the acting user set
- * from the request, everything else left to the plugin.
- */
-export async function startServer(
-  options: {
-    users?: string[];
-    capabilities?: string[];
-    refuseEnrollment?: string;
-  } = {},
-): Promise<TestServer> {
-  const db = await createTestDb(pluginDir);
-  for (const user of options.users ?? ["user-1", "user-2"]) {
-    db.sqlite
-      .prepare("INSERT INTO users (id, username) VALUES (?, ?)")
-      .run(user, user);
-  }
-
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: options.capabilities ?? manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    refuseEnrollment: options.refuseEnrollment,
-  });
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") ?? undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    db,
-    mock,
-    async request(method, path, { user = "user-1", body: given } = {}) {
-      const body = method === "GET" ? undefined : given;
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        headers: {
-          "x-test-user": user,
-          ...(body !== undefined ? { "content-type": "application/json" } : {}),
-        },
-        body: body !== undefined ? JSON.stringify(body) : undefined,
-      });
-      const text = await response.text();
-      return { status: response.status, body: text ? JSON.parse(text) : null };
-    },
-    async close() {
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-      db.close();
-    },
-  };
-}
diff --git a/plugins/totp/tests/backend/totp.test.ts b/plugins/totp/tests/backend/totp.test.ts
deleted file mode 100644
index e0dc63464..000000000
--- a/plugins/totp/tests/backend/totp.test.ts
+++ /dev/null
@@ -1,258 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import speakeasy from "speakeasy";
-import { startServer, type TestServer } from "./helpers";
-import { generateBackupCode, normalizeCode } from "../../src/backend/totp.js";
-
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-});
-
-const codeFor = (secret: string) =>
-  speakeasy.totp({ secret, encoding: "base32" });
-
-async function enrol(target: TestServer, user = "user-1") {
-  const setup = await target.request("POST", "/setup", { user, body: {} });
-  expect(setup.status).toBe(200);
-  const secret: string = setup.body.secret;
-  const enable = await target.request("POST", "/enable", {
-    user,
-    body: { totp_code: codeFor(secret) },
-  });
-  expect(enable.status).toBe(200);
-  return { secret, backupCodes: enable.body.backup_codes as string[] };
-}
-
-function factor(target: TestServer) {
-  const registered = target.mock.auth.secondFactors.find(
-    (entry) => entry.id === "totp",
-  );
-  if (!registered) throw new Error("totp factor not registered");
-  return registered;
-}
-
-describe("enrolment", () => {
-  it("sets up, enables, records the enrolment and reports status", async () => {
-    server = await startServer();
-    expect((await server.request("GET", "/status")).body).toEqual({
-      enabled: false,
-    });
-
-    const setup = await server.request("POST", "/setup", { body: {} });
-    expect(setup.body.qr_code).toMatch(/^data:image\/png;base64,/);
-    expect(setup.body.secret).toMatch(/^[A-Z2-7]+$/);
-
-    const wrong = await server.request("POST", "/enable", {
-      body: { totp_code: "000000" },
-    });
-    expect(wrong.status).toBe(401);
-    expect(await factor(server).isEnrolled("user-1")).toBe(false);
-
-    const enable = await server.request("POST", "/enable", {
-      body: { totp_code: codeFor(setup.body.secret) },
-    });
-    expect(enable.status).toBe(200);
-    expect(enable.body.backup_codes).toHaveLength(8);
-    expect(server.mock.auth.enrollments.has("user-1:totp")).toBe(true);
-    expect((await server.request("GET", "/status")).body).toEqual({
-      enabled: true,
-    });
-  });
-
-  it("stores the secret sealed, never in the clear", async () => {
-    server = await startServer();
-    const { secret } = await enrol(server);
-    const row = server.db.sqlite
-      .prepare("SELECT * FROM p_totp_enrollments WHERE user_id = 'user-1'")
-      .get() as Record<string, string | null>;
-    expect(row.secret).not.toContain(secret);
-    expect(row.secret).toMatch(/^sealed:/);
-    expect(row.pending_secret).toBeNull();
-  });
-
-  it("refuses enable before setup and when already on", async () => {
-    server = await startServer();
-    expect(
-      (
-        await server.request("POST", "/enable", {
-          body: { totp_code: "123456" },
-        })
-      ).status,
-    ).toBe(400);
-    const { secret } = await enrol(server);
-    expect(
-      (
-        await server.request("POST", "/enable", {
-          body: { totp_code: codeFor(secret) },
-        })
-      ).status,
-    ).toBe(400);
-  });
-
-  it("leaves nothing enabled when core refuses the enrolment", async () => {
-    server = await startServer({
-      refuseEnrollment: "Cannot enable 2FA while password login is disabled.",
-    });
-    const setup = await server.request("POST", "/setup", { body: {} });
-    const enable = await server.request("POST", "/enable", {
-      body: { totp_code: codeFor(setup.body.secret) },
-    });
-    expect(enable.status).toBe(409);
-    expect(enable.body.error).toMatch(/password login/);
-    expect(await factor(server).isEnrolled("user-1")).toBe(false);
-  });
-
-  it("adds another authenticator only with a valid code", async () => {
-    server = await startServer();
-    const { secret } = await enrol(server);
-    expect((await server.request("POST", "/setup", { body: {} })).status).toBe(
-      400,
-    );
-    expect(
-      (
-        await server.request("POST", "/setup", {
-          body: { credential: "000000" },
-        })
-      ).status,
-    ).toBe(401);
-    const again = await server.request("POST", "/setup", {
-      body: { credential: codeFor(secret) },
-    });
-    expect(again.body).toMatchObject({ secret, additional: true });
-  });
-
-  it("disables with a code and removes the enrolment", async () => {
-    server = await startServer();
-    const { secret } = await enrol(server);
-    expect(
-      (
-        await server.request("POST", "/disable", {
-          body: { totp_code: "000000" },
-        })
-      ).status,
-    ).toBe(401);
-    const off = await server.request("POST", "/disable", {
-      body: { totp_code: codeFor(secret) },
-    });
-    expect(off.status).toBe(200);
-    expect(server.mock.auth.enrollments.has("user-1:totp")).toBe(false);
-    expect(await factor(server).isEnrolled("user-1")).toBe(false);
-  });
-
-  it("replaces backup codes", async () => {
-    server = await startServer();
-    const { secret, backupCodes } = await enrol(server);
-    const fresh = await server.request("POST", "/backup-codes", {
-      body: { totp_code: codeFor(secret) },
-    });
-    expect(fresh.body.backup_codes).toHaveLength(8);
-    expect(
-      await factor(server).verify("user-1", { totp_code: backupCodes[0] }),
-    ).toBe(false);
-    expect(
-      await factor(server).verify("user-1", {
-        totp_code: fresh.body.backup_codes[0],
-      }),
-    ).toBe(true);
-  });
-
-  it("keeps users apart", async () => {
-    server = await startServer();
-    await enrol(server, "user-1");
-    expect(
-      (await server.request("GET", "/status", { user: "user-2" })).body,
-    ).toEqual({ enabled: false });
-  });
-});
-
-describe("login", () => {
-  it("verifies a current code and refuses a wrong one", async () => {
-    server = await startServer();
-    const { secret } = await enrol(server);
-    expect(await factor(server).verify("user-1", { totp_code: "000000" })).toBe(
-      false,
-    );
-    expect(
-      await factor(server).verify("user-1", { totp_code: codeFor(secret) }),
-    ).toBe(true);
-  });
-
-  it("accepts each backup code once, typed in any case", async () => {
-    server = await startServer();
-    const { backupCodes } = await enrol(server);
-    const [first] = backupCodes;
-    expect(
-      await factor(server).verify("user-1", {
-        totp_code: first.toLowerCase(),
-      }),
-    ).toBe(true);
-    expect(await factor(server).verify("user-1", { totp_code: first })).toBe(
-      false,
-    );
-    expect(
-      await factor(server).verify("user-1", { totp_code: backupCodes[1] }),
-    ).toBe(true);
-  });
-
-  it("refuses with a message when the user has no readable secret", async () => {
-    server = await startServer();
-    expect(
-      await factor(server).verify("user-1", { totp_code: "123456" }),
-    ).toMatchObject({ ok: false });
-  });
-
-  it("reset removes the enrolment, as the admin reset calls it", async () => {
-    server = await startServer();
-    const { secret } = await enrol(server);
-    await factor(server).reset!("user-1");
-    expect(await factor(server).isEnrolled("user-1")).toBe(false);
-    expect(
-      await factor(server).verify("user-1", { totp_code: codeFor(secret) }),
-    ).toMatchObject({ ok: false });
-  });
-
-  it("drops the enrolment with the user", async () => {
-    server = await startServer();
-    await enrol(server);
-    server.db.sqlite.exec("DELETE FROM users WHERE id = 'user-1'");
-    expect(await factor(server).isEnrolled("user-1")).toBe(false);
-  });
-});
-
-describe("capabilities", () => {
-  it("fails closed without auth:provide", async () => {
-    await expect(
-      startServer({
-        capabilities: ["db:own", "secrets:own", "network:serve", "ui:surface"],
-      }),
-    ).rejects.toThrow(/auth:provide/);
-  });
-
-  it("fails closed without db:own", async () => {
-    await expect(
-      startServer({
-        capabilities: [
-          "secrets:own",
-          "network:serve",
-          "auth:provide",
-          "ui:surface",
-        ],
-      }),
-    ).rejects.toThrow(/db:own/);
-  });
-});
-
-describe("helpers", () => {
-  it("makes backup codes from the unambiguous alphabet", () => {
-    for (let i = 0; i < 50; i++) {
-      expect(generateBackupCode()).toMatch(/^[A-HJ-NP-Z2-9]{8}$/);
-    }
-  });
-
-  it("normalises codes", () => {
-    expect(normalizeCode(" abcd1234 ")).toBe("ABCD1234");
-    expect(normalizeCode(42)).toBe("");
-  });
-});
diff --git a/plugins/totp/tests/frontend/activate.test.tsx b/plugins/totp/tests/frontend/activate.test.tsx
deleted file mode 100644
index ab2eb326b..000000000
--- a/plugins/totp/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,90 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { fireEvent, screen, waitFor } from "@testing-library/react";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import {
-  isValidTotpInput,
-  normalizeTotpInput,
-} from "../../src/frontend/totp-input";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe(`${manifest.id} activate`, () => {
-  it("registers the second factor with an enrolment section", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.secondFactors()).toEqual(["totp"]);
-  });
-
-  it("sends the typed code, backup codes included", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    const verify = vi.fn(async () => {});
-    rendered.renderSecondFactor("totp", { verify });
-    fireEvent.change(document.getElementById("totp-code")!, {
-      target: { value: "ab-cd 12 34" },
-    });
-    fireEvent.submit(document.getElementById("totp-code")!.closest("form")!);
-    await waitFor(() =>
-      expect(verify).toHaveBeenCalledWith({ totp_code: "ABCD1234" }),
-    );
-  });
-
-  it("shows the enrolment state from the plugin API", async () => {
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: {
-        get: vi.fn(async () => ({ data: { enabled: true } })),
-      } as never,
-    });
-    rendered.renderEnrollment("totp");
-    expect(await screen.findByText(locales.enrollment.on)).toBeTruthy();
-    expect(screen.getByText(locales.enrollment.addDevice)).toBeTruthy();
-  });
-
-  it("starts setup and shows the QR code", async () => {
-    const post = vi.fn(async () => ({
-      data: { secret: "JBSWY3DPEHPK3PXP", qr_code: "data:image/png;base64,x" },
-    }));
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: {
-        get: vi.fn(async () => ({ data: { enabled: false } })),
-        post,
-      } as never,
-    });
-    rendered.renderEnrollment("totp");
-    fireEvent.click(await screen.findByText(locales.enrollment.enable));
-    expect(await screen.findByText("JBSWY3DPEHPK3PXP")).toBeTruthy();
-    expect(post).toHaveBeenCalledWith("setup", {});
-  });
-
-  it("removes the factor on deactivate", async () => {
-    const app = await renderWithApp(plugin, { manifest, locales });
-    await app.deactivate();
-    expect(app.registered.secondFactors()).toEqual([]);
-  });
-});
-
-describe("totp input", () => {
-  it("normalises and validates codes", () => {
-    expect(normalizeTotpInput("12 34-56")).toBe("123456");
-    expect(normalizeTotpInput("abcd1234ef")).toBe("ABCD1234");
-    expect(isValidTotpInput("123456")).toBe(true);
-    expect(isValidTotpInput("ABCD1234")).toBe(true);
-    expect(isValidTotpInput("12345")).toBe(false);
-  });
-});
diff --git a/plugins/totp/tsconfig.json b/plugins/totp/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/totp/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/totp/vitest.config.ts b/plugins/totp/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/totp/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/tunnels/CHANGELOG.md b/plugins/tunnels/CHANGELOG.md
deleted file mode 100644
index 89ca44180..000000000
--- a/plugins/tunnels/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Adds SSH port forwarding between servers, with local, remote and SOCKS5 tunnels that can start on boot. The desktop app can also open local tunnels.
diff --git a/plugins/tunnels/README.md b/plugins/tunnels/README.md
deleted file mode 100644
index 92369548f..000000000
--- a/plugins/tunnels/README.md
+++ /dev/null
@@ -1,35 +0,0 @@
-# Tunnels
-
-SSH port forwarding between servers, plus local tunnels from the desktop app.
-
-## Features
-
-- Local, remote and dynamic (SOCKS5) SSH tunnels saved on a host.
-- Start tunnels from the Tunnels tab or the host editor, or on boot.
-- Route a tunnel through a second host.
-- Local tunnels from the desktop app, with saved presets.
-- Adds a tunnels widget to the homepage.
-
-## Settings
-
-### Host
-
-- Enable tunnels and the list of saved tunnels for this host.
-
-## Permissions
-
-- `tunnels.use`: Use tunnels. Admins and users have it by default.
-
-## Services
-
-Provides to other plugins:
-
-- `tunnels.access`: open a tunnel on demand, or start, stop and check saved tunnels.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/tunnels/locales/en.json b/plugins/tunnels/locales/en.json
deleted file mode 100644
index fd37e8918..000000000
--- a/plugins/tunnels/locales/en.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Add Tunnel",
-    "autoStartDesc": "Automatically connect this tunnel when the host is loaded",
-    "autoStartLabel": "Auto-start",
-    "connectBtn": "Connect",
-    "disconnectBtn": "Disconnect",
-    "enableTunneling": "Enable Tunneling",
-    "enableTunnelingDesc": "Enable SSH tunnel functionality for this host",
-    "endpointHost": "Endpoint Host",
-    "endpointHostPlaceholder": "Same host, SSH host, or reachable host/IP",
-    "endpointPort": "Endpoint Port",
-    "failedToConnectTunnel": "Failed to connect",
-    "failedToDisconnectTunnel": "Failed to disconnect",
-    "maxRetries": "Max Retries",
-    "noTunnelsConfigured": "No tunnels configured.",
-    "retryIntervalS": "Retry Interval (s)",
-    "serverTunnelsSection": "Server Tunnels",
-    "sourcePort": "Source Port",
-    "tabTunnels": "Tunnels",
-    "tunnelConnecting": "Tunnel connecting...",
-    "tunnelDisconnected": "Tunnel disconnected",
-    "tunnelLabel": "Tunnel {{number}}",
-    "tunnelModeDynamicDesc": "Create a SOCKS5 proxy on a local port for dynamic port forwarding.",
-    "tunnelModeLocalDesc": "Forward a local port to a port on the remote server (or a host reachable from it).",
-    "tunnelModeRemoteDesc": "Forward a port on the remote server back to a local port on your machine.",
-    "tunnelRequirementsText": "The SSH server must have GatewayPorts yes, AllowTcpForwarding yes, and PermitRootLogin yes set in /etc/ssh/sshd_config.",
-    "tunnelSettings": "Tunnel Settings",
-    "tunnelType": "Tunnel Type",
-    "bindHost": "Bind Host",
-    "docsLink": "View docs",
-    "hostNotFound": "Host not found",
-    "loadingHost": "Loading host..."
-  },
-  "nav": {
-    "portForwarding": "Forwarding",
-    "tunnels": "Tunnels"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (listen locally)",
-    "localTargetHost": "127.0.0.1 (target on this computer)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (listen on endpoint)",
-    "remoteTargetHost": "127.0.0.1 (target from endpoint)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (SOCKS listener)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "{{count}} local client tunnel(s) configured on this desktop.",
-    "c2sLoadPreset": "Load",
-    "c2sNoPresetSelected": "No preset selected",
-    "c2sNoPresets": "No presets saved",
-    "c2sPresetDeleted": "Client tunnel preset deleted",
-    "c2sPresetLoadError": "Failed to load client tunnel presets",
-    "c2sPresetLoaded": "Client tunnel preset loaded locally",
-    "c2sPresetName": "Preset Name",
-    "c2sPresetNamePlaceholder": "Client preset name",
-    "c2sPresetRenamed": "Client tunnel preset renamed",
-    "c2sPresetSaved": "Client tunnel preset saved",
-    "c2sPresetSyncNote": "Presets are explicit snapshots; loading one replaces this desktop client's local client tunnel list.",
-    "c2sPresetToLoad": "Preset To Load",
-    "c2sTunnelPresets": "Client Tunnel Presets",
-    "c2sTunnelPresetsUnavailable": "Client tunnel presets are only available in the desktop client.",
-    "c2sPresetRenameError": "Failed to rename the preset",
-    "c2sPresetDeleteError": "Failed to delete the preset"
-  },
-  "tunnels": {
-    "attempt": "Attempt {{current}} of {{max}}",
-    "autoNameClientDynamic": "SOCKS {{localPort}} via {{endpoint}}",
-    "autoNameClientLocal": "Local {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → local {{localPort}}",
-    "autoStart": "Auto Start",
-    "cancel": "Cancel",
-    "canceling": "Canceling...",
-    "clientAutoStartDesc": "Starts when this desktop client opens and stays connected.",
-    "clientManualStartDesc": "Use Start and Stop from this row. Termix will not open it automatically.",
-    "clientRemoteServerNote": "Remote forwarding may require AllowTcpForwarding and GatewayPorts on the endpoint SSH server. The remote port closes when this desktop disconnects.",
-    "clientTunnelStarted": "Client tunnel started",
-    "clientTunnelStopped": "Client tunnel stopped",
-    "clientTunnels": "Client Tunnels",
-    "connected": "Connected",
-    "connecting": "Connecting...",
-    "createFirstTunnelMessage": "You haven't created any SSH tunnels yet. Configure tunnel connections in the Host Manager to get started.",
-    "currentHostPort": "Current Host Port",
-    "destination": "Destination",
-    "destinationAddress": "Destination Address",
-    "destinationPort": "Destination Port",
-    "disconnected": "Disconnected",
-    "duplicateAutoStartBind": "Only one auto-start client tunnel can use {{bind}}.",
-    "endpointPort": "Endpoint Port",
-    "endpointSshHost": "Endpoint SSH Host",
-    "endpointSshHostPlaceholder": "Select a configured host",
-    "endpointSshHostRequired": "Select an endpoint SSH host for each client tunnel.",
-    "error": "Error",
-    "forwardDescriptionClientDynamic": "SOCKS on local port {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "Local {{sourcePort}} → remote {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Remote {{sourcePort}} → local {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS on current host {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Current host {{sourcePort}} → endpoint {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Endpoint {{endpointPort}} → current host {{sourcePort}}.",
-    "host": "Host",
-    "intermediateHost": "Intermediate Host",
-    "invalidBindIp": "Local IP must be a valid IPv4 address.",
-    "invalidEndpointPort": "Endpoint port must be between 1 and 65535.",
-    "invalidLocalPort": "Local port must be between 1 and 65535.",
-    "invalidLocalTargetIp": "Local target IP must be a valid IPv4 address.",
-    "invalidLocalTargetPort": "Local target port must be between 1 and 65535.",
-    "invalidRemoteAddress": "Remote address is required.",
-    "invalidRemotePort": "Remote port must be between 1 and 65535.",
-    "lastError": "Last error",
-    "lastStarted": "Last started",
-    "lastTested": "Last tested",
-    "localAddress": "Local Address",
-    "localPort": "Local Port",
-    "localSaveError": "Failed to save local client tunnels",
-    "localSaved": "Client tunnels saved",
-    "manualControlError": "Failed to update tunnel state.",
-    "maxRetries": "Max Retries",
-    "mode": "Mode",
-    "nextRetryIn": "Next retry in {{seconds}} seconds",
-    "noClientTunnels": "No client tunnels configured on this desktop.",
-    "noHostSelected": "No host selected",
-    "noSshTunnels": "No SSH Tunnels",
-    "port": "Port",
-    "remoteBindAddress": "Remote Bind Address",
-    "remoteHost": "Remote Host",
-    "remotePort": "Remote Port",
-    "retryInterval": "Retry Interval (seconds)",
-    "route": "Route:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → SOCKS via {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} via {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} on {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Test",
-    "tunnelName": "Tunnel Name",
-    "tunnelTestFailed": "Tunnel test failed",
-    "tunnelTestSucceeded": "Tunnel test succeeded",
-    "type": "Tunnel Type",
-    "typeDynamic": "Dynamic (-D)",
-    "typeLocal": "Local (-L)",
-    "typeRemote": "Remote (-R)",
-    "working": "Working...",
-    "activeCount": "{{connected}}/{{total}} active",
-    "listensOn": "Bound to localhost:{{port}}",
-    "socksProxy": "SOCKS5 proxy",
-    "waiting": "Waiting",
-    "remoteSessionExpired": "Remote Sync session expired. Reconnect Remote Sync and try again.",
-    "activeTunnels": "Active Tunnels",
-    "start": "Start",
-    "stop": "Stop",
-    "authTitle": "Tunnel authentication",
-    "authRetry": "The previous code was not accepted. Enter a new code.",
-    "authAnswer": "Authentication response",
-    "authContinue": "Continue"
-  },
-  "permissions": {
-    "use": {
-      "title": "Use tunnels",
-      "description": "Start, stop and watch SSH tunnels, and save client tunnel presets."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Enable tunnels",
-        "description": "Set up SSH tunnels through this host."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Tunnels",
-    "feature_tunnels_desc": "Forward ports through a server to reach services that are not exposed."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/af_ZA.json b/plugins/tunnels/locales/translated/af_ZA.json
deleted file mode 100644
index ca38e5630..000000000
--- a/plugins/tunnels/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Voeg tonnel by",
-    "autoStartDesc": "Koppel outomaties hierdie tonnel wanneer die gasheer gelaai is",
-    "autoStartLabel": "Outomatiese begin",
-    "connectBtn": "Verbind",
-    "disconnectBtn": "Ontkoppel",
-    "enableTunneling": "Aktiveer Tonnelbou",
-    "enableTunnelingDesc": "Aktiveer SSH-tonnelfunksionaliteit vir hierdie gasheer",
-    "endpointHost": "Eindpuntgasheer",
-    "endpointHostPlaceholder": "Dieselfde gasheer, SSH-gasheer of bereikbare gasheer/IP",
-    "endpointPort": "Eindpuntpoort",
-    "failedToConnectTunnel": "Kon nie koppel nie",
-    "failedToDisconnectTunnel": "Kon nie ontkoppel nie",
-    "maxRetries": "Maksimum herprobeer",
-    "noTunnelsConfigured": "Geen tonnels gekonfigureer nie.",
-    "retryIntervalS": "Herprobeerinterval (s)",
-    "serverTunnelsSection": "Bedienertonnels",
-    "sourcePort": "Bronpoort",
-    "tabTunnels": "Tonnels",
-    "tunnelConnecting": "Tonnel verbind...",
-    "tunnelDisconnected": "Tonnel ontkoppel",
-    "tunnelLabel": "Tonnel {{number}}",
-    "tunnelModeDynamicDesc": "Skep 'n SOCKS5-instaanbediener op 'n plaaslike poort vir dinamiese poortaanstuuring.",
-    "tunnelModeLocalDesc": "Stuur 'n plaaslike poort aan na 'n poort op die afstandbediener (of 'n gasheer wat daarvandaan bereik kan word).",
-    "tunnelModeRemoteDesc": "Stuur 'n poort op die afgeleë bediener terug na 'n plaaslike poort op jou masjien.",
-    "tunnelRequirementsText": "Die SSH-bediener moet GatewayPorts ja, AllowTcpForwarding ja, en PermitRootLogin ja gestel hê in /etc/ssh/sshd_config.",
-    "tunnelSettings": "Tonnelinstellings",
-    "tunnelType": "Tonnel Tipe",
-    "bindHost": "Bind gasheer",
-    "docsLink": "Bekyk dokumente",
-    "hostNotFound": "Gasheer nie gevind nie",
-    "loadingHost": "Laai gasheer..."
-  },
-  "nav": {
-    "portForwarding": "Aanstuur",
-    "tunnels": "Tonnels"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (luister plaaslik)",
-    "localTargetHost": "127.0.0.1 (teiken op hierdie rekenaar)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (luister op eindpunt)",
-    "remoteTargetHost": "127.0.0.1 (teiken vanaf eindpunt)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (SOCKS-luisteraar)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "{{count}} plaaslike kliënttonnel(s) gekonfigureer op hierdie lessenaar.",
-    "c2sLoadPreset": "Laai",
-    "c2sNoPresetSelected": "Geen voorafinstelling gekies nie",
-    "c2sNoPresets": "Geen voorinstellings gestoor nie",
-    "c2sPresetDeleted": "Kliënttonnel-voorinstelling verwyder",
-    "c2sPresetLoadError": "Kon nie kliënttonnelvoorinstellings laai nie",
-    "c2sPresetLoaded": "Kliënttonnelvoorinstelling plaaslik gelaai",
-    "c2sPresetName": "Voorafingestelde Naam",
-    "c2sPresetNamePlaceholder": "Kliëntvooringestelde naam",
-    "c2sPresetRenamed": "Kliënttonnel-voorinstelling hernoem",
-    "c2sPresetSaved": "Kliënttonnelvoorinstelling gestoor",
-    "c2sPresetSyncNote": "Voorinstellings is eksplisiete kiekies; die laai van een vervang hierdie lessenaarkliënt se plaaslike kliënttonnellys.",
-    "c2sPresetToLoad": "Voorafinstelling om te laai",
-    "c2sTunnelPresets": "Kliënttonnelvoorinstellings",
-    "c2sTunnelPresetsUnavailable": "Kliënttunnelvoorinstellings is slegs beskikbaar in die rekenaarkliënt.",
-    "c2sPresetRenameError": "Kon nie die voorinstelling hernoem nie",
-    "c2sPresetDeleteError": "Kon nie die voorafinstelling verwyder nie"
-  },
-  "tunnels": {
-    "attempt": "Poging {{current}} van {{max}}",
-    "autoNameClientDynamic": "SOKKIES {{localPort}} via {{endpoint}}",
-    "autoNameClientLocal": "Plaaslik {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → plaaslik {{localPort}}",
-    "autoStart": "Outomatiese Begin",
-    "cancel": "Kanselleer",
-    "canceling": "Kanselleer tans...",
-    "clientAutoStartDesc": "Begin wanneer hierdie rekenaarkliënt oopmaak en gekoppel bly.",
-    "clientManualStartDesc": "Gebruik Begin en Stop vanaf hierdie ry. Termix sal dit nie outomaties oopmaak nie.",
-    "clientRemoteServerNote": "Afstandsaanstuuring mag AllowTcpForwarding en GatewayPorts op die eindpunt SSH-bediener vereis. Die afstandspoort sluit wanneer hierdie lessenaar ontkoppel.",
-    "clientTunnelStarted": "Kliënttonnel het begin",
-    "clientTunnelStopped": "Kliënttonnel gestop",
-    "clientTunnels": "Kliënttonnels",
-    "connected": "Verbonde",
-    "connecting": "Verbind...",
-    "createFirstTunnelMessage": "Jy het nog geen SSH-tonnels geskep nie. Konfigureer tonnelverbindings in die Gasheerbestuurder om te begin.",
-    "currentHostPort": "Huidige gasheerpoort",
-    "destination": "Bestemming",
-    "destinationAddress": "Bestemmingsadres",
-    "destinationPort": "Bestemmingshawe",
-    "disconnected": "Ontkoppel",
-    "duplicateAutoStartBind": "Slegs een outomatiese begin-kliënttonnel kan {{bind}} gebruik.",
-    "endpointPort": "Eindpuntpoort",
-    "endpointSshHost": "Eindpunt SSH-gasheer",
-    "endpointSshHostPlaceholder": "Kies 'n gekonfigureerde gasheer",
-    "endpointSshHostRequired": "Kies 'n eindpunt SSH-gasheer vir elke kliënttunnel.",
-    "error": "Fout",
-    "forwardDescriptionClientDynamic": "SOCKS op plaaslike poort {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "Plaaslik {{sourcePort}} → afgeleë {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Afstand {{sourcePort}} → plaaslik {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS op huidige gasheer {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Huidige gasheer {{sourcePort}} → eindpunt {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Eindpunt {{endpointPort}} → huidige gasheer {{sourcePort}}.",
-    "host": "Gasheer",
-    "intermediateHost": "Intermediêre gasheer",
-    "invalidBindIp": "Plaaslike IP moet 'n geldige IPv4-adres wees.",
-    "invalidEndpointPort": "Eindpuntpoort moet tussen 1 en 65535 wees.",
-    "invalidLocalPort": "Plaaslike poort moet tussen 1 en 65535 wees.",
-    "invalidLocalTargetIp": "Die plaaslike teiken-IP moet 'n geldige IPv4-adres wees.",
-    "invalidLocalTargetPort": "Die plaaslike teikenpoort moet tussen 1 en 65535 wees.",
-    "invalidRemoteAddress": "Afstandadres word vereis.",
-    "invalidRemotePort": "Afstandpoort moet tussen 1 en 65535 wees.",
-    "lastError": "Laaste fout",
-    "lastStarted": "Laas begin",
-    "lastTested": "Laas getoets",
-    "localAddress": "Plaaslike Adres",
-    "localPort": "Plaaslike Hawe",
-    "localSaveError": "Kon nie plaaslike kliënttonnels stoor nie",
-    "localSaved": "Kliënttonnels gestoor",
-    "manualControlError": "Kon nie tonnelstatus opdateer nie.",
-    "maxRetries": "Maksimum herprobeer",
-    "mode": "Modus",
-    "nextRetryIn": "Volgende herprobeer oor {{seconds}} sekondes",
-    "noClientTunnels": "Geen kliënttunnels is op hierdie lessenaar gekonfigureer nie.",
-    "noHostSelected": "Geen gasheer gekies nie",
-    "noSshTunnels": "Geen SSH-tonnels nie",
-    "port": "Hawe",
-    "remoteBindAddress": "Afstandsbindadres",
-    "remoteHost": "Afstandgasheer",
-    "remotePort": "Afstandpoort",
-    "retryInterval": "Herprobeerinterval (sekondes)",
-    "route": "Roete:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → SOKKIES via {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} via {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} op {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Toets",
-    "tunnelName": "Tonnelnaam",
-    "tunnelTestFailed": "Tonneltoets het misluk",
-    "tunnelTestSucceeded": "Tonneltoets het geslaag",
-    "type": "Tonnel Tipe",
-    "typeDynamic": "Dinamiese (-D)",
-    "typeLocal": "Plaaslik (-L)",
-    "typeRemote": "Afstandbeheer (-R)",
-    "working": "Werk...",
-    "activeCount": "{{connected}}/{{total}} aktief",
-    "listensOn": "Gebonde aan plaaslike gasheer:{{port}}",
-    "socksProxy": "SOCKS5-instaanbediener",
-    "waiting": "Wag",
-    "remoteSessionExpired": "Afstandsinchronisasie-sessie het verval. Koppel weer aan Afstandsinchronisasie en probeer weer.",
-    "activeTunnels": "Aktiewe Tonnels",
-    "start": "Begin",
-    "stop": "Stop",
-    "authTitle": "Tonnel-verifikasie",
-    "authRetry": "Die vorige kode is nie aanvaar nie. Voer 'n nuwe kode in.",
-    "authAnswer": "Verifikasierespons",
-    "authContinue": "Gaan voort"
-  },
-  "permissions": {
-    "use": {
-      "title": "Gebruik tonnels",
-      "description": "Begin, stop en kyk na SSH-tonnels, en stoor kliënttonnelvoorinstellings."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Aktiveer tonnels",
-        "description": "Stel SSH-tonnels deur hierdie gasheer op."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Tonnels",
-    "feature_tunnels_desc": "Stuur poorte deur 'n bediener aan om dienste te bereik wat nie blootgestel is nie."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/ar_SA.json b/plugins/tunnels/locales/translated/ar_SA.json
deleted file mode 100644
index 04b49e71c..000000000
--- a/plugins/tunnels/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "إضافة نفق",
-    "autoStartDesc": "الاتصال بهذا النفق تلقائياً عند تحميل المضيف",
-    "autoStartLabel": "تشغيل تلقائي",
-    "connectBtn": "اتصال",
-    "disconnectBtn": "قطع الاتصال",
-    "enableTunneling": "تمكين الأنفاق",
-    "enableTunnelingDesc": "تمكين وظيفة نفق SSH لهذا المضيف",
-    "endpointHost": "مضيف نقطة النهاية",
-    "endpointHostPlaceholder": "نفس المضيف، مضيف SSH، أو مضيف/IP يمكن الوصول إليه",
-    "endpointPort": "منفذ نقطة النهاية",
-    "failedToConnectTunnel": "فشل الاتصال",
-    "failedToDisconnectTunnel": "فشل قطع الاتصال",
-    "maxRetries": "الحد الأقصى لإعادة المحاولات",
-    "noTunnelsConfigured": "لم يتم تكوين أي أنفاق.",
-    "retryIntervalS": "فترة إعادة المحاولة (بالثواني)",
-    "serverTunnelsSection": "أنفاق الخادم",
-    "sourcePort": "منفذ المصدر",
-    "tabTunnels": "الأنفاق",
-    "tunnelConnecting": "جارٍ توصيل النفق...",
-    "tunnelDisconnected": "تم قطع اتصال النفق",
-    "tunnelLabel": "نفق {{number}}",
-    "tunnelModeDynamicDesc": "إنشاء وكيل SOCKS5 على منفذ محلي لتوجيه المنافذ الديناميكي.",
-    "tunnelModeLocalDesc": "توجيه منفذ محلي إلى منفذ على الخادم البعيد (أو مضيف يمكن الوصول إليه منه).",
-    "tunnelModeRemoteDesc": "إعادة توجيه منفذ على الخادم البعيد إلى منفذ محلي على جهازك.",
-    "tunnelRequirementsText": "يجب أن يحتوي خادم SSH على الإعدادات GatewayPorts yes و AllowTcpForwarding yes و PermitRootLogin yes في الملف /etc/ssh/sshd_config.",
-    "tunnelSettings": "إعدادات النفق",
-    "tunnelType": "نوع النفق",
-    "bindHost": "مضيف الربط",
-    "docsLink": "عرض المستندات",
-    "hostNotFound": "المضيف غير موجود",
-    "loadingHost": "جارٍ تحميل المضيف..."
-  },
-  "nav": {
-    "portForwarding": "إعادة التوجيه",
-    "tunnels": "الأنفاق"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (استماع محلي)",
-    "localTargetHost": "127.0.0.1 (الهدف على هذا الكمبيوتر)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (الاستماع على نقطة النهاية)",
-    "remoteTargetHost": "127.0.0.1 (الهدف من نقطة النهاية)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (مستمع SOCKS)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "تم تكوين {{count}} نفق محلي للعميل على سطح المكتب هذا.",
-    "c2sLoadPreset": "تحميل",
-    "c2sNoPresetSelected": "لم يتم تحديد إعداد مُسبَق",
-    "c2sNoPresets": "لا توجد إعدادات مُسبَقة محفوظة",
-    "c2sPresetDeleted": "تم حذف الإعداد المُسبَق لنفق العميل",
-    "c2sPresetLoadError": "فشل في تحميل إعدادات نفق العميل المُسبَقة",
-    "c2sPresetLoaded": "تم تحميل الإعداد المُسبَق لنفق العميل محلياً",
-    "c2sPresetName": "اسم الإعداد المُسبَق",
-    "c2sPresetNamePlaceholder": "اسم الإعداد المُسبَق للعميل",
-    "c2sPresetRenamed": "تمت إعادة تسمية الإعداد المُسبَق لنفق العميل",
-    "c2sPresetSaved": "تم حفظ الإعداد المُسبَق لنفق العميل",
-    "c2sPresetSyncNote": "الإعدادات المُسبَقة هي لقطات واضحة؛ تحميل أحدها يستبدل قائمة الأنفاق المحلية لعميل سطح المكتب هذا.",
-    "c2sPresetToLoad": "الإعداد المُسبَق للتحميل",
-    "c2sTunnelPresets": "إعدادات النفق المُسبَقة للعميل",
-    "c2sTunnelPresetsUnavailable": "إعدادات النفق المُسبَقة للعميل متاحة فقط في تطبيق سطح المكتب.",
-    "c2sPresetRenameError": "فشل في إعادة تسمية الإعداد المسبق",
-    "c2sPresetDeleteError": "فشل حذف الإعداد المسبق"
-  },
-  "tunnels": {
-    "attempt": "محاولة {{current}} من {{max}}",
-    "autoNameClientDynamic": "SOCKS {{localPort}} عبر {{endpoint}}",
-    "autoNameClientLocal": "محلي {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → محلي {{localPort}}",
-    "autoStart": "بدء تلقائي",
-    "cancel": "إلغاء",
-    "canceling": "جارٍ الإلغاء...",
-    "clientAutoStartDesc": "يبدأ عند فتح عميل سطح المكتب هذا ويبقى متصلاً.",
-    "clientManualStartDesc": "استخدم بدء وإيقاف من هذا الصف. لن يقوم Termix بفتحه تلقائيًا.",
-    "clientRemoteServerNote": "قد يتطلب التوجيه البعيد AllowTcpForwarding و GatewayPorts على خادم SSH للنهاية. يُغلق المنفذ البعيد عند فصل سطح المكتب هذا.",
-    "clientTunnelStarted": "تم بدء نفق العميل",
-    "clientTunnelStopped": "تم إيقاف نفق العميل",
-    "clientTunnels": "أنفاق العميل",
-    "connected": "متصل",
-    "connecting": "جارٍ الاتصال...",
-    "createFirstTunnelMessage": "لم تُنشئ أي أنفاق SSH بعد. قم بتكوين اتصالات الأنفاق في مدير المضيف للبدء.",
-    "currentHostPort": "منفذ المضيف الحالي",
-    "destination": "الوجهة",
-    "destinationAddress": "عنوان الوجهة",
-    "destinationPort": "ميناء الوجهة",
-    "disconnected": "غير متصل",
-    "duplicateAutoStartBind": "يمكن لنفق عميل تلقائي التشغيل واحد فقط استخدام {{bind}}.",
-    "endpointPort": "منفذ النهاية",
-    "endpointSshHost": "مضيف SSH للنهاية",
-    "endpointSshHostPlaceholder": "اختر مضيفًا مُعيّنًا",
-    "endpointSshHostRequired": "اختر مضيف SSH للنهاية لكل نفق عميل.",
-    "error": "خطأ",
-    "forwardDescriptionClientDynamic": "SOCKS على المنفذ المحلي {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "من المحلي {{sourcePort}} إلى البعيد {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "من البعيد {{sourcePort}} إلى المحلي {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS على المضيف الحالي {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "من المضيف الحالي {{sourcePort}} إلى نقطة النهاية {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "من نقطة النهاية {{endpointPort}} إلى المضيف الحالي {{sourcePort}}.",
-    "host": "المضيف",
-    "intermediateHost": "المضيف الوسيط",
-    "invalidBindIp": "يجب أن يكون عنوان IP المحلي عنوان IPv4 صالحًا.",
-    "invalidEndpointPort": "يجب أن يكون منفذ النهاية بين 1 و 65535.",
-    "invalidLocalPort": "يجب أن يكون المنفذ المحلي بين 1 و 65535.",
-    "invalidLocalTargetIp": "يجب أن يكون عنوان IP الهدف المحلي عنوان IPv4 صالحًا.",
-    "invalidLocalTargetPort": "يجب أن يكون منفذ الهدف المحلي بين 1 و 65535.",
-    "invalidRemoteAddress": "يلزم وجود عنوان بعيد.",
-    "invalidRemotePort": "يجب أن يكون المنفذ البعيد بين 1 و 65535.",
-    "lastError": "آخر خطأ",
-    "lastStarted": "آخر تشغيل",
-    "lastTested": "آخر اختبار",
-    "localAddress": "العنوان المحلي",
-    "localPort": "المنفذ المحلي",
-    "localSaveError": "فشل حفظ أنفاق العميل المحلية",
-    "localSaved": "تم حفظ أنفاق العميل",
-    "manualControlError": "فشل تحديث حالة النفق.",
-    "maxRetries": "الحد الأقصى لإعادة المحاولات",
-    "mode": "الوضع",
-    "nextRetryIn": "إعادة المحاولة التالية في {{seconds}} ثانية",
-    "noClientTunnels": "لا توجد أنفاق عميل مُعدّة على سطح المكتب هذا.",
-    "noHostSelected": "لم يتم تحديد مضيف",
-    "noSshTunnels": "لا توجد أنفاق SSH",
-    "port": "منفذ",
-    "remoteBindAddress": "عنوان الربط عن بعد",
-    "remoteHost": "المضيف البعيد",
-    "remotePort": "المنفذ البعيد",
-    "retryInterval": "فاصل إعادة المحاولة (ثوانٍ)",
-    "route": "المسار:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → SOCKS عبر {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} عبر {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} on {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "اختبار",
-    "tunnelName": "اسم النفق",
-    "tunnelTestFailed": "فشل اختبار النفق",
-    "tunnelTestSucceeded": "نجح اختبار النفق",
-    "type": "نوع النفق",
-    "typeDynamic": "ديناميكي (-D)",
-    "typeLocal": "محلي (-L)",
-    "typeRemote": "بعيد (-R)",
-    "working": "جارٍ العمل...",
-    "activeCount": "{{connected}}/{{total}} نشط",
-    "listensOn": "مرتبط بالمضيف المحلي:{{port}}",
-    "socksProxy": "بروكسي SOCKS5",
-    "waiting": "منتظر",
-    "remoteSessionExpired": "انتهت صلاحية جلسة المزامنة عن بُعد. أعد الاتصال بالمزامنة عن بُعد وحاول مرة أخرى.",
-    "activeTunnels": "الأنفاق النشطة",
-    "start": "تشغيل",
-    "stop": "إيقاف",
-    "authTitle": "مصادقة النفق",
-    "authRetry": "لم يتم قبول الرمز السابق. أدخل رمزاً جديداً.",
-    "authAnswer": "استجابة المصادقة",
-    "authContinue": "متابعة"
-  },
-  "permissions": {
-    "use": {
-      "title": "استخدم الأنفاق",
-      "description": "ابدأ، أوقف، وراقب أنفاق SSH، واحفظ إعدادات نفق العميل المسبقة."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "تفعيل الأنفاق",
-        "description": "قم بإعداد أنفاق SSH عبر هذا المضيف."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "الأنفاق",
-    "feature_tunnels_desc": "إعادة توجيه المنافذ عبر خادم للوصول إلى الخدمات غير المكشوفة."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/bg_BG.json b/plugins/tunnels/locales/translated/bg_BG.json
deleted file mode 100644
index 62116c372..000000000
--- a/plugins/tunnels/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Добавяне на тунел",
-    "autoStartDesc": "Автоматично свързване на този тунел при зареждане на хоста",
-    "autoStartLabel": "Автоматично стартиране",
-    "connectBtn": "Свържете се",
-    "disconnectBtn": "Изключване",
-    "enableTunneling": "Активиране на тунелиране",
-    "enableTunnelingDesc": "Активиране на SSH тунелната функционалност за този хост",
-    "endpointHost": "Краен хост",
-    "endpointHostPlaceholder": "Същият хост, SSH хост или достъпен хост/IP адрес",
-    "endpointPort": "Порт за крайна точка",
-    "failedToConnectTunnel": "Свързването не бе успешно",
-    "failedToDisconnectTunnel": "Прекъсването не бе успешно",
-    "maxRetries": "Максимален брой повторни опити",
-    "noTunnelsConfigured": "Няма конфигурирани тунели.",
-    "retryIntervalS": "Интервал на повторен опит (и)",
-    "serverTunnelsSection": "Сървърни тунели",
-    "sourcePort": "Източник Порт",
-    "tabTunnels": "Тунели",
-    "tunnelConnecting": "Тунел, свързващ...",
-    "tunnelDisconnected": "Тунелът е прекъснат",
-    "tunnelLabel": "Тунел {{number}}",
-    "tunnelModeDynamicDesc": "Създайте SOCKS5 прокси на локален порт за динамично пренасочване на портове.",
-    "tunnelModeLocalDesc": "Пренасочване на локален порт към порт на отдалечения сървър (или хост, достъпен от него).",
-    "tunnelModeRemoteDesc": "Пренасочете порт на отдалечения сървър обратно към локален порт на вашата машина.",
-    "tunnelRequirementsText": "SSH сървърът трябва да има зададени стойности за GatewayPorts (да), AllowTcpForwarding (да) и PermitRootLogin (да) в /etc/ssh/sshd_config.",
-    "tunnelSettings": "Настройки на тунела",
-    "tunnelType": "Тип тунел",
-    "bindHost": "Свързване на хост",
-    "docsLink": "Преглед на документи",
-    "hostNotFound": "Хостът не е намерен",
-    "loadingHost": "Зареждане на хоста..."
-  },
-  "nav": {
-    "portForwarding": "Препращане",
-    "tunnels": "Тунели"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (слушане локално)",
-    "localTargetHost": "127.0.0.1 (цел на този компютър)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (слушане на крайната точка)",
-    "remoteTargetHost": "127.0.0.1 (цел от крайната точка)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (SOCKS слушател)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "{{count}} локални клиентски тунели, конфигурирани на този работен плот.",
-    "c2sLoadPreset": "Зареждане",
-    "c2sNoPresetSelected": "Няма избрана предварително зададена настройка",
-    "c2sNoPresets": "Няма запазени предварително зададени настройки",
-    "c2sPresetDeleted": "Предварително зададена настройка за тунел на клиента е изтрита",
-    "c2sPresetLoadError": "Неуспешно зареждане на предварително зададени настройки за тунел на клиента",
-    "c2sPresetLoaded": "Предварително зададена настройка за тунел на клиента, заредена локално",
-    "c2sPresetName": "Име на предварително зададена настройка",
-    "c2sPresetNamePlaceholder": "Име на предварително зададена настройка на клиента",
-    "c2sPresetRenamed": "Предварителното преименуване на клиентския тунел",
-    "c2sPresetSaved": "Предварително зададена настройка за тунел на клиента е запазена",
-    "c2sPresetSyncNote": "Предварителните настройки са изрични снимки; зареждането на такава замества списъка с локални клиентски тунели на този настолен клиент.",
-    "c2sPresetToLoad": "Предварително зададено зареждане",
-    "c2sTunnelPresets": "Предварителни настройки на клиентския тунел",
-    "c2sTunnelPresetsUnavailable": "Предварителните настройки на клиентските тунели са налични само в настолния клиент.",
-    "c2sPresetRenameError": "Преименуването на предварително зададената настройка не бе успешно",
-    "c2sPresetDeleteError": "Неуспешно изтриване на предварително зададената настройка"
-  },
-  "tunnels": {
-    "attempt": "Опит {{current}} от {{max}}",
-    "autoNameClientDynamic": "ЧОРАПИ {{localPort}} чрез {{endpoint}}",
-    "autoNameClientLocal": "Местно {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → местен {{localPort}}",
-    "autoStart": "Автоматично стартиране",
-    "cancel": "Отказ",
-    "canceling": "Анулиране...",
-    "clientAutoStartDesc": "Стартира, когато този настолен клиент се отвори и остане свързан.",
-    "clientManualStartDesc": "Използвайте „Старт“ и „Стоп“ от този ред. Termix няма да го отвори автоматично.",
-    "clientRemoteServerNote": "Отдалеченото пренасочване може да изисква AllowTcpForwarding и GatewayPorts на SSH сървъра на крайната точка. Отдалеченият порт се затваря, когато този работен плот се изключи.",
-    "clientTunnelStarted": "Тунелът на клиента е стартиран",
-    "clientTunnelStopped": "Тунелът на клиента е спрян",
-    "clientTunnels": "Клиентски тунели",
-    "connected": "Свързан",
-    "connecting": "Свързване...",
-    "createFirstTunnelMessage": "Все още не сте създали SSH тунели. Конфигурирайте тунелни връзки в Host Manager, за да започнете.",
-    "currentHostPort": "Текущ хост порт",
-    "destination": "Дестинация",
-    "destinationAddress": "Адрес на местоназначението",
-    "destinationPort": "Пристанище на местоназначение",
-    "disconnected": "Изключен",
-    "duplicateAutoStartBind": "Само един тунел за автоматично стартиране на клиент може да използва {{bind}}.",
-    "endpointPort": "Порт за крайна точка",
-    "endpointSshHost": "SSH хост за крайна точка",
-    "endpointSshHostPlaceholder": "Изберете конфигуриран хост",
-    "endpointSshHostRequired": "Изберете SSH хост за крайна точка за всеки клиентски тунел.",
-    "error": "Грешка",
-    "forwardDescriptionClientDynamic": "SOCKS на локален порт {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "Локален {{sourcePort}} → отдалечен {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Отдалечено {{sourcePort}} → локално {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS на текущия хост {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Текущ хост {{sourcePort}} → крайна точка {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Крайна точка {{endpointPort}} → текущ хост {{sourcePort}}.",
-    "host": "Домакин",
-    "intermediateHost": "Междинен гостоприемник",
-    "invalidBindIp": "Локалният IP адрес трябва да е валиден IPv4 адрес.",
-    "invalidEndpointPort": "Портът на крайната точка трябва да е между 1 и 65535.",
-    "invalidLocalPort": "Локалният порт трябва да е между 1 и 65535.",
-    "invalidLocalTargetIp": "Локалният целеви IP адрес трябва да е валиден IPv4 адрес.",
-    "invalidLocalTargetPort": "Локалният целеви порт трябва да е между 1 и 65535.",
-    "invalidRemoteAddress": "Изисква се отдалечен адрес.",
-    "invalidRemotePort": "Отдалеченият порт трябва да е между 1 и 65535.",
-    "lastError": "Последна грешка",
-    "lastStarted": "Последно стартирано",
-    "lastTested": "Последно тествано",
-    "localAddress": "Местен адрес",
-    "localPort": "Локален порт",
-    "localSaveError": "Запазването на тунелите на локалните клиенти не бе успешно",
-    "localSaved": "Клиентските тунели са запазени",
-    "manualControlError": "Актуализирането на състоянието на тунела не бе успешно.",
-    "maxRetries": "Максимален брой повторни опити",
-    "mode": "Режим",
-    "nextRetryIn": "Следващ опит след {{seconds}} секунди",
-    "noClientTunnels": "Няма конфигурирани клиентски тунели на този работен плот.",
-    "noHostSelected": "Няма избран хост",
-    "noSshTunnels": "Няма SSH тунели",
-    "port": "Порт",
-    "remoteBindAddress": "Адрес за отдалечено свързване",
-    "remoteHost": "Отдалечен хост",
-    "remotePort": "Отдалечен порт",
-    "retryInterval": "Интервал на повторен опит (секунди)",
-    "route": "Маршрут:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → ЧОРАПИ чрез {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} чрез {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} на {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Тест",
-    "tunnelName": "Име на тунела",
-    "tunnelTestFailed": "Тестът на тунела не беше успешен",
-    "tunnelTestSucceeded": "Тестът в тунела е успешен",
-    "type": "Тип тунел",
-    "typeDynamic": "Динамичен (-D)",
-    "typeLocal": "Местен (-L)",
-    "typeRemote": "Дистанционно (-R)",
-    "working": "Работа...",
-    "activeCount": "{{connected}}/{{total}} активен",
-    "listensOn": "Свързано с localhost:{{port}}",
-    "socksProxy": "SOCKS5 прокси",
-    "waiting": "Чакане",
-    "remoteSessionExpired": "Сесията за отдалечена синхронизация е изтекла. Свържете се отново с отдалечена синхронизация и опитайте отново.",
-    "activeTunnels": "Активни тунели",
-    "start": "Старт",
-    "stop": "Спри",
-    "authTitle": "Тунелно удостоверяване",
-    "authRetry": "Предишният код не беше приет. Въведете нов код.",
-    "authAnswer": "Отговор за удостоверяване",
-    "authContinue": "Продължи"
-  },
-  "permissions": {
-    "use": {
-      "title": "Използвайте тунели",
-      "description": "Стартирайте, спирайте и гледайте SSH тунели и запазвайте предварително зададени настройки на клиентските тунели."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Активиране на тунели",
-        "description": "Настройте SSH тунели през този хост."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Тунели",
-    "feature_tunnels_desc": "Пренасочване на портове през сървър, за да се достигне до услуги, които не са изложени на риск."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/bn_BD.json b/plugins/tunnels/locales/translated/bn_BD.json
deleted file mode 100644
index ed2586ad6..000000000
--- a/plugins/tunnels/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "টানেল যোগ করুন",
-    "autoStartDesc": "হোস্ট লোড হলে এই টানেলটি স্বয়ংক্রিয়ভাবে সংযুক্ত করুন।",
-    "autoStartLabel": "স্বয়ংক্রিয়-শুরু",
-    "connectBtn": "সংযোগ করুন",
-    "disconnectBtn": "সংযোগ বিচ্ছিন্ন করুন",
-    "enableTunneling": "টানেলিং সক্ষম করুন",
-    "enableTunnelingDesc": "এই হোস্টের জন্য SSH টানেল কার্যকারিতা সক্রিয় করুন",
-    "endpointHost": "এন্ডপয়েন্ট হোস্ট",
-    "endpointHostPlaceholder": "একই হোস্ট, SSH হোস্ট, অথবা পৌঁছানো যায় এমন হোস্ট/আইপি",
-    "endpointPort": "এন্ডপয়েন্ট পোর্ট",
-    "failedToConnectTunnel": "সংযোগ করতে ব্যর্থ হয়েছে",
-    "failedToDisconnectTunnel": "সংযোগ বিচ্ছিন্ন করতে ব্যর্থ হয়েছে",
-    "maxRetries": "সর্বোচ্চ পুনঃপ্রচেষ্টা",
-    "noTunnelsConfigured": "কোনো টানেল কনফিগার করা নেই।",
-    "retryIntervalS": "পুনরায় চেষ্টার ব্যবধান (সেকেন্ড)",
-    "serverTunnelsSection": "সার্ভার টানেল",
-    "sourcePort": "উৎস বন্দর",
-    "tabTunnels": "টানেল",
-    "tunnelConnecting": "সংযোগকারী টানেল...",
-    "tunnelDisconnected": "টানেল বিচ্ছিন্ন",
-    "tunnelLabel": "টানেল {{number}}",
-    "tunnelModeDynamicDesc": "ডাইনামিক পোর্ট ফরওয়ার্ডিংয়ের জন্য লোকাল পোর্টে একটি SOCKS5 প্রক্সি তৈরি করুন।",
-    "tunnelModeLocalDesc": "একটি স্থানীয় পোর্টকে রিমোট সার্ভারের (বা সেখান থেকে পৌঁছানো যায় এমন কোনো হোস্টের) একটি পোর্টে ফরওয়ার্ড করুন।",
-    "tunnelModeRemoteDesc": "রিমোট সার্ভারের একটি পোর্ট আপনার মেশিনের লোকাল পোর্টে ফরওয়ার্ড করুন।",
-    "tunnelRequirementsText": "SSH সার্ভারের /etc/ssh/sshd_config ফাইলে GatewayPorts yes, AllowTcpForwarding yes, এবং PermitRootLogin yes সেট করা থাকতে হবে।",
-    "tunnelSettings": "টানেল সেটিংস",
-    "tunnelType": "টানেল টাইপ",
-    "bindHost": "হোস্টকে বাঁধুন",
-    "docsLink": "নথি দেখুন",
-    "hostNotFound": "হোস্ট খুঁজে পাওয়া যায়নি",
-    "loadingHost": "হোস্ট লোড হচ্ছে..."
-  },
-  "nav": {
-    "portForwarding": "ফরোয়ার্ডিং",
-    "tunnels": "টানেল"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "২২৪",
-    "defaultPort": "২২",
-    "localListenerHost": "১২৭.০.০.১ (স্থানীয়ভাবে শুনুন)",
-    "localTargetHost": "১২৭.০.০.১ (এই কম্পিউটারে লক্ষ্যবস্তু)",
-    "maxRetries": "৩",
-    "remoteBindHost": "১২৭.০.০.১ (এন্ডপয়েন্টে শুনুন)",
-    "remoteTargetHost": "১২৭.০.০.১ (এন্ডপয়েন্ট থেকে টার্গেট)",
-    "retryInterval": "১০",
-    "socksListenerHost": "১২৭.০.০.১ (SOCKS লিসেনার)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "এই ডেস্কটপে {{count}} টি স্থানীয় ক্লায়েন্ট টানেল কনফিগার করা হয়েছে।",
-    "c2sLoadPreset": "লোড",
-    "c2sNoPresetSelected": "কোনো পূর্বনির্ধারিত সেট নির্বাচন করা হয়নি",
-    "c2sNoPresets": "কোন প্রিসেট সংরক্ষণ করা হয়নি",
-    "c2sPresetDeleted": "ক্লায়েন্ট টানেল প্রিসেট মুছে ফেলা হয়েছে",
-    "c2sPresetLoadError": "ক্লায়েন্ট টানেল প্রিসেট লোড করতে ব্যর্থ হয়েছে",
-    "c2sPresetLoaded": "ক্লায়েন্ট টানেল প্রিসেট স্থানীয়ভাবে লোড করা হয়েছে",
-    "c2sPresetName": "পূর্বনির্ধারিত নাম",
-    "c2sPresetNamePlaceholder": "ক্লায়েন্টের পূর্বনির্ধারিত নাম",
-    "c2sPresetRenamed": "ক্লায়েন্ট টানেল প্রিসেটের নাম পরিবর্তন করা হয়েছে",
-    "c2sPresetSaved": "ক্লায়েন্ট টানেল প্রিসেট সংরক্ষিত",
-    "c2sPresetSyncNote": "প্রিসেটগুলি হলো সুনির্দিষ্ট স্ন্যাপশট; এর কোনো একটি লোড করলে এই ডেস্কটপ ক্লায়েন্টের স্থানীয় ক্লায়েন্ট টানেল তালিকা প্রতিস্থাপিত হয়।",
-    "c2sPresetToLoad": "লোড করার জন্য প্রিসেট",
-    "c2sTunnelPresets": "ক্লায়েন্ট টানেল প্রিসেট",
-    "c2sTunnelPresetsUnavailable": "ক্লায়েন্ট টানেল প্রিসেটগুলো শুধুমাত্র ডেস্কটপ ক্লায়েন্টে পাওয়া যায়।",
-    "c2sPresetRenameError": "প্রিসেটটির নাম পরিবর্তন করতে ব্যর্থ হয়েছে",
-    "c2sPresetDeleteError": "প্রিসেটটি মুছে ফেলা সম্ভব হয়নি"
-  },
-  "tunnels": {
-    "attempt": "{{max}} এর {{current}} প্রচেষ্টা",
-    "autoNameClientDynamic": "মোজা {{localPort}} {{endpoint}} এর মাধ্যমে",
-    "autoNameClientLocal": "স্থানীয় {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → স্থানীয় {{localPort}}",
-    "autoStart": "অটো স্টার্ট",
-    "cancel": "বাতিল করুন",
-    "canceling": "বাতিল করা হচ্ছে...",
-    "clientAutoStartDesc": "এই ডেস্কটপ ক্লায়েন্টটি খুললে এটি চালু হয় এবং সংযুক্ত থাকে।",
-    "clientManualStartDesc": "এই সারি থেকে স্টার্ট এবং স্টপ ব্যবহার করুন। টারমিক্স এটি স্বয়ংক্রিয়ভাবে খুলবে না।",
-    "clientRemoteServerNote": "রিমোট ফরওয়ার্ডিংয়ের জন্য এন্ডপয়েন্ট SSH সার্ভারে AllowTcpForwarding এবং GatewayPorts চালু করার প্রয়োজন হতে পারে। এই ডেস্কটপটি সংযোগ বিচ্ছিন্ন করলে রিমোট পোর্টটি বন্ধ হয়ে যায়।",
-    "clientTunnelStarted": "ক্লায়েন্ট টানেল শুরু হয়েছে",
-    "clientTunnelStopped": "ক্লায়েন্ট টানেল বন্ধ হয়ে গেছে",
-    "clientTunnels": "ক্লায়েন্ট টানেল",
-    "connected": "সংযুক্ত",
-    "connecting": "সংযোগ স্থাপন...",
-    "createFirstTunnelMessage": "আপনি এখনও কোনো SSH টানেল তৈরি করেননি। শুরু করার জন্য হোস্ট ম্যানেজারে টানেল সংযোগগুলি কনফিগার করুন।",
-    "currentHostPort": "বর্তমান হোস্ট পোর্ট",
-    "destination": "গন্তব্য",
-    "destinationAddress": "গন্তব্য ঠিকানা",
-    "destinationPort": "গন্তব্য বন্দর",
-    "disconnected": "বিচ্ছিন্ন",
-    "duplicateAutoStartBind": "শুধুমাত্র একটি অটো-স্টার্ট ক্লায়েন্ট টানেল {{bind}} ব্যবহার করতে পারে।",
-    "endpointPort": "এন্ডপয়েন্ট পোর্ট",
-    "endpointSshHost": "এন্ডপয়েন্ট SSH হোস্ট",
-    "endpointSshHostPlaceholder": "একটি কনফিগার করা হোস্ট নির্বাচন করুন",
-    "endpointSshHostRequired": "প্রতিটি ক্লায়েন্ট টানেলের জন্য একটি এন্ডপয়েন্ট SSH হোস্ট নির্বাচন করুন।",
-    "error": "ত্রুটি",
-    "forwardDescriptionClientDynamic": "স্থানীয় পোর্ট {{sourcePort}}-এ SOCKS।",
-    "forwardDescriptionClientLocal": "স্থানীয় {{sourcePort}} → দূরবর্তী {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "রিমোট {{sourcePort}} → লোকাল {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "বর্তমান হোস্টে SOCKS {{sourcePort}}।",
-    "forwardDescriptionServerLocal": "বর্তমান হোস্ট {{sourcePort}} → শেষ বিন্দু {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "এন্ডপয়েন্ট {{endpointPort}} → বর্তমান হোস্ট {{sourcePort}}.",
-    "host": "হোস্ট",
-    "intermediateHost": "মধ্যবর্তী হোস্ট",
-    "invalidBindIp": "লোকাল আইপি অবশ্যই একটি বৈধ IPv4 অ্যাড্রেস হতে হবে।",
-    "invalidEndpointPort": "এন্ডপয়েন্ট পোর্ট অবশ্যই ১ থেকে ৬৫৫৩৫-এর মধ্যে হতে হবে।",
-    "invalidLocalPort": "স্থানীয় পোর্ট অবশ্যই ১ থেকে ৬৫৫৩৫-এর মধ্যে হতে হবে।",
-    "invalidLocalTargetIp": "স্থানীয় টার্গেট আইপি অবশ্যই একটি বৈধ IPv4 অ্যাড্রেস হতে হবে।",
-    "invalidLocalTargetPort": "স্থানীয় টার্গেট পোর্ট অবশ্যই ১ থেকে ৬৫৫৩৫-এর মধ্যে হতে হবে।",
-    "invalidRemoteAddress": "দূরবর্তী ঠিকানা প্রয়োজন।",
-    "invalidRemotePort": "রিমোট পোর্ট অবশ্যই ১ থেকে ৬৫৫৩৫-এর মধ্যে হতে হবে।",
-    "lastError": "শেষ ত্রুটি",
-    "lastStarted": "সর্বশেষ শুরু হয়েছে",
-    "lastTested": "সর্বশেষ পরীক্ষা করা হয়েছে",
-    "localAddress": "স্থানীয় ঠিকানা",
-    "localPort": "স্থানীয় বন্দর",
-    "localSaveError": "স্থানীয় ক্লায়েন্ট টানেলগুলি সংরক্ষণ করতে ব্যর্থ হয়েছে",
-    "localSaved": "ক্লায়েন্ট টানেলগুলি সংরক্ষিত হয়েছে",
-    "manualControlError": "টানেলের অবস্থা আপডেট করতে ব্যর্থ হয়েছে।",
-    "maxRetries": "সর্বোচ্চ পুনঃপ্রচেষ্টা",
-    "mode": "মোড",
-    "nextRetryIn": "{{seconds}} সেকেন্ড পর আবার চেষ্টা করা হবে।",
-    "noClientTunnels": "এই ডেস্কটপে কোনো ক্লায়েন্ট টানেল কনফিগার করা নেই।",
-    "noHostSelected": "কোন হোস্ট নির্বাচন করা হয়নি",
-    "noSshTunnels": "কোন SSH টানেল নেই",
-    "port": "বন্দর",
-    "remoteBindAddress": "রিমোট বাইন্ড অ্যাড্রেস",
-    "remoteHost": "রিমোট হোস্ট",
-    "remotePort": "রিমোট পোর্ট",
-    "retryInterval": "পুনরায় চেষ্টার ব্যবধান (সেকেন্ড)",
-    "route": "পথ:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → SOCKS via {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} {{endpoint}} এর মাধ্যমে",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} {{endpoint}} এর উপর → {{localHost}}:{{localPort}}",
-    "test": "পরীক্ষা",
-    "tunnelName": "টানেলের নাম",
-    "tunnelTestFailed": "টানেল পরীক্ষা ব্যর্থ হয়েছে",
-    "tunnelTestSucceeded": "টানেল পরীক্ষা সফল হয়েছে",
-    "type": "টানেল টাইপ",
-    "typeDynamic": "গতিশীল (-D)",
-    "typeLocal": "স্থানীয় (-L)",
-    "typeRemote": "রিমোট (-R)",
-    "working": "কাজ চলছে...",
-    "activeCount": "{{connected}}/{{total}} সক্রিয়",
-    "listensOn": "লোকালহোস্টের সাথে সংযুক্ত:{{port}}",
-    "socksProxy": "SOCKS5 প্রক্সি",
-    "waiting": "অপেক্ষা",
-    "remoteSessionExpired": "রিমোট সিঙ্ক সেশনের মেয়াদ শেষ হয়ে গেছে। রিমোট সিঙ্ক পুনরায় সংযোগ করুন এবং আবার চেষ্টা করুন।",
-    "activeTunnels": "সক্রিয় টানেল",
-    "start": "শুরু করুন",
-    "stop": "থামুন",
-    "authTitle": "টানেল প্রমাণীকরণ",
-    "authRetry": "পূর্ববর্তী কোডটি গৃহীত হয়নি। একটি নতুন কোড প্রবেশ করান।",
-    "authAnswer": "প্রমাণীকরণ প্রতিক্রিয়া",
-    "authContinue": "চালিয়ে যান"
-  },
-  "permissions": {
-    "use": {
-      "title": "টানেল ব্যবহার করুন",
-      "description": "SSH টানেল চালু, বন্ধ ও পর্যবেক্ষণ করুন এবং ক্লায়েন্ট টানেল প্রিসেট সংরক্ষণ করুন।"
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "টানেলগুলি সক্ষম করুন",
-        "description": "এই হোস্টের মাধ্যমে SSH টানেল স্থাপন করুন।"
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "টানেল",
-    "feature_tunnels_desc": "যেসব পরিষেবা উন্মুক্ত নয়, সেগুলোতে পৌঁছানোর জন্য পোর্টগুলো একটি সার্ভারের মাধ্যমে ফরওয়ার্ড করুন।"
-  }
-}
diff --git a/plugins/tunnels/locales/translated/ca_ES.json b/plugins/tunnels/locales/translated/ca_ES.json
deleted file mode 100644
index 9c5745921..000000000
--- a/plugins/tunnels/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Afegeix un túnel",
-    "autoStartDesc": "Connecta automàticament aquest túnel quan es carregui l'amfitrió",
-    "autoStartLabel": "Inici automàtic",
-    "connectBtn": "Connecta",
-    "disconnectBtn": "Desconnecta",
-    "enableTunneling": "Activa la tunelització",
-    "enableTunnelingDesc": "Habilita la funcionalitat del túnel SSH per a aquest amfitrió",
-    "endpointHost": "Amfitrió de punt final",
-    "endpointHostPlaceholder": "Mateix host, host SSH o host/IP accessible",
-    "endpointPort": "Port de punt final",
-    "failedToConnectTunnel": "No s'ha pogut connectar",
-    "failedToDisconnectTunnel": "No s'ha pogut desconnectar",
-    "maxRetries": "Màxim d'intents",
-    "noTunnelsConfigured": "No hi ha túnels configurats.",
-    "retryIntervalS": "Interval de reintent (s)",
-    "serverTunnelsSection": "Túnels de servidor",
-    "sourcePort": "Port d'origen",
-    "tabTunnels": "Túnels",
-    "tunnelConnecting": "Connexió de túnels...",
-    "tunnelDisconnected": "Túnel desconnectat",
-    "tunnelLabel": "Túnel {{number}}",
-    "tunnelModeDynamicDesc": "Crea un proxy SOCKS5 en un port local per al reenviament dinàmic de ports.",
-    "tunnelModeLocalDesc": "Reenvia un port local a un port del servidor remot (o a un host accessible des d'aquest).",
-    "tunnelModeRemoteDesc": "Reenvia un port del servidor remot a un port local de la teva màquina.",
-    "tunnelRequirementsText": "El servidor SSH ha de tenir definits GatewayPorts sí, AllowTcpForwarding sí i PermitRootLogin sí a /etc/ssh/sshd_config.",
-    "tunnelSettings": "Configuració del túnel",
-    "tunnelType": "Tipus de túnel",
-    "bindHost": "Vincula l'amfitrió",
-    "docsLink": "Veure documents",
-    "hostNotFound": "No s'ha trobat l'amfitrió",
-    "loadingHost": "S'està carregant l'amfitrió..."
-  },
-  "nav": {
-    "portForwarding": "Reenviament",
-    "tunnels": "Túnels"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (escolta localment)",
-    "localTargetHost": "127.0.0.1 (objectiu en aquest ordinador)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (escolta al punt final)",
-    "remoteTargetHost": "127.0.0.1 (objectiu des del punt final)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (escoltador de SOCKS)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "{{count}} túnel(s) de client local configurat(s) en aquest escriptori.",
-    "c2sLoadPreset": "Carrega",
-    "c2sNoPresetSelected": "No s'ha seleccionat cap predefinició",
-    "c2sNoPresets": "No s'han desat presets",
-    "c2sPresetDeleted": "S'ha suprimit la configuració predefinida del túnel del client",
-    "c2sPresetLoadError": "No s'han pogut carregar els preajustos del túnel del client",
-    "c2sPresetLoaded": "Predefinició del túnel del client carregada localment",
-    "c2sPresetName": "Nom predefinit",
-    "c2sPresetNamePlaceholder": "Nom predefinit del client",
-    "c2sPresetRenamed": "S'ha canviat el nom de la predefinició del túnel del client",
-    "c2sPresetSaved": "S'ha desat la configuració predefinida del túnel del client",
-    "c2sPresetSyncNote": "Els preajustaments són instantànies explícites; carregar-ne una substitueix la llista de túnels de clients locals d'aquest client d'escriptori.",
-    "c2sPresetToLoad": "Predefinició per carregar",
-    "c2sTunnelPresets": "Preajustos del túnel del client",
-    "c2sTunnelPresetsUnavailable": "Els preajustos del túnel del client només estan disponibles al client d'escriptori.",
-    "c2sPresetRenameError": "No s'ha pogut canviar el nom de la configuració predefinida",
-    "c2sPresetDeleteError": "No s'ha pogut suprimir la configuració predefinida"
-  },
-  "tunnels": {
-    "attempt": "Intent {{current}} de {{max}}",
-    "autoNameClientDynamic": "MITJONS {{localPort}} via {{endpoint}}",
-    "autoNameClientLocal": "Local {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → local {{localPort}}",
-    "autoStart": "Inici automàtic",
-    "cancel": "Cancel·la",
-    "canceling": "Cancel·lant...",
-    "clientAutoStartDesc": "S'inicia quan s'obre aquest client d'escriptori i roman connectat.",
-    "clientManualStartDesc": "Feu servir Start i Stop des d'aquesta fila. Termix no l'obrirà automàticament.",
-    "clientRemoteServerNote": "El reenviament remot pot requerir AllowTcpForwarding i GatewayPorts al servidor SSH del punt final. El port remot es tanca quan aquest escriptori es desconnecta.",
-    "clientTunnelStarted": "S'ha iniciat el túnel del client",
-    "clientTunnelStopped": "Túnel del client aturat",
-    "clientTunnels": "Túnels de client",
-    "connected": "Connectat",
-    "connecting": "Connectant...",
-    "createFirstTunnelMessage": "Encara no has creat cap túnel SSH. Configureu les connexions del túnel al Gestor d'amfitrions per començar.",
-    "currentHostPort": "Port d'amfitrió actual",
-    "destination": "Destinació",
-    "destinationAddress": "Adreça de destinació",
-    "destinationPort": "Port de destinació",
-    "disconnected": "Desconnectat",
-    "duplicateAutoStartBind": "Només un túnel de client d'inici automàtic pot utilitzar {{bind}}.",
-    "endpointPort": "Port de punt final",
-    "endpointSshHost": "Amfitrió SSH de punt final",
-    "endpointSshHostPlaceholder": "Seleccioneu un amfitrió configurat",
-    "endpointSshHostRequired": "Seleccioneu un host SSH de punt final per a cada túnel de client.",
-    "error": "Error",
-    "forwardDescriptionClientDynamic": "SOCKS al port local {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "Local {{sourcePort}} → remot {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Remot {{sourcePort}} → local {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS a l'amfitrió actual {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Amfitrió actual {{sourcePort}} → punt final {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Punt final {{endpointPort}} → amfitrió actual {{sourcePort}}.",
-    "host": "Amfitrió",
-    "intermediateHost": "Hoste intermedi",
-    "invalidBindIp": "La IP local ha de ser una adreça IPv4 vàlida.",
-    "invalidEndpointPort": "El port del punt final ha d'estar entre 1 i 65535.",
-    "invalidLocalPort": "El port local ha d'estar entre 1 i 65535.",
-    "invalidLocalTargetIp": "La IP de destinació local ha de ser una adreça IPv4 vàlida.",
-    "invalidLocalTargetPort": "El port de destinació local ha d'estar entre 1 i 65535.",
-    "invalidRemoteAddress": "Cal una adreça remota.",
-    "invalidRemotePort": "El port remot ha d'estar entre 1 i 65535.",
-    "lastError": "Últim error",
-    "lastStarted": "Últim inici",
-    "lastTested": "Última prova",
-    "localAddress": "Adreça local",
-    "localPort": "Port local",
-    "localSaveError": "No s'han pogut desar els túnels del client local.",
-    "localSaved": "Túnels de client desats",
-    "manualControlError": "No s'ha pogut actualitzar l'estat del túnel.",
-    "maxRetries": "Màxim d'intents",
-    "mode": "Mode",
-    "nextRetryIn": "Proper intent en {{seconds}} segons",
-    "noClientTunnels": "No hi ha túnels de client configurats en aquest escriptori.",
-    "noHostSelected": "No s'ha seleccionat cap amfitrió",
-    "noSshTunnels": "Sense túnels SSH",
-    "port": "Port",
-    "remoteBindAddress": "Adreça d'enllaç remota",
-    "remoteHost": "Amfitrió remot",
-    "remotePort": "Port remot",
-    "retryInterval": "Interval de reintent (segons)",
-    "route": "Ruta:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → MITJONS via {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} via {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} a {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Prova",
-    "tunnelName": "Nom del túnel",
-    "tunnelTestFailed": "La prova del túnel ha fallat",
-    "tunnelTestSucceeded": "La prova del túnel ha tingut èxit",
-    "type": "Tipus de túnel",
-    "typeDynamic": "Dinàmic (-D)",
-    "typeLocal": "Local (-L)",
-    "typeRemote": "Comandament a distància (-R)",
-    "working": "Treballant...",
-    "activeCount": "{{connected}}/{{total}} actiu",
-    "listensOn": "Enllaçat a localhost:{{port}}",
-    "socksProxy": "Proxy SOCKS5",
-    "waiting": "Esperant",
-    "remoteSessionExpired": "La sessió de sincronització remota ha caducat. Torneu a connectar la sincronització remota i torneu-ho a provar.",
-    "activeTunnels": "Túnels actius",
-    "start": "Inici",
-    "stop": "Atura",
-    "authTitle": "Autenticació de túnel",
-    "authRetry": "No s'ha acceptat el codi anterior. Introduïu-ne un de nou.",
-    "authAnswer": "Resposta d'autenticació",
-    "authContinue": "Continua"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilitza túnels",
-      "description": "Inicia, atura i supervisa túnels SSH i desa els preajustos del túnel del client."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Habilita els túnels",
-        "description": "Configura túnels SSH a través d'aquest host."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Túnels",
-    "feature_tunnels_desc": "Reenvia ports a través d'un servidor per arribar a serveis que no estan exposats."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/cs_CZ.json b/plugins/tunnels/locales/translated/cs_CZ.json
deleted file mode 100644
index 0f56cc889..000000000
--- a/plugins/tunnels/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Přidat tunel",
-    "autoStartDesc": "Automaticky připojit tento tunel po načtení hostitele",
-    "autoStartLabel": "Automatické spuštění",
-    "connectBtn": "Připojit",
-    "disconnectBtn": "Odpojit",
-    "enableTunneling": "Povolit tunelování",
-    "enableTunnelingDesc": "Povolit funkci SSH tunelu pro tohoto hostitele",
-    "endpointHost": "Koncový hostitel",
-    "endpointHostPlaceholder": "Stejný hostitel, hostitel SSH nebo dostupný hostitel/IP adresa",
-    "endpointPort": "Port koncového bodu",
-    "failedToConnectTunnel": "Připojení se nezdařilo",
-    "failedToDisconnectTunnel": "Odpojení se nezdařilo",
-    "maxRetries": "Maximální počet opakování",
-    "noTunnelsConfigured": "Nejsou nakonfigurovány žádné tunely.",
-    "retryIntervalS": "Interval opakování (s)",
-    "serverTunnelsSection": "Serverové tunely",
-    "sourcePort": "Zdrojový port",
-    "tabTunnels": "Tunely",
-    "tunnelConnecting": "Spojující tunel...",
-    "tunnelDisconnected": "Tunel odpojen",
-    "tunnelLabel": "Tunel {{number}}",
-    "tunnelModeDynamicDesc": "Vytvořte proxy SOCKS5 na lokálním portu pro dynamické přesměrování portů.",
-    "tunnelModeLocalDesc": "Přesměrování lokálního portu na port na vzdáleném serveru (nebo na hostitele, který je z něj dosažitelný).",
-    "tunnelModeRemoteDesc": "Přesměrujte port na vzdáleném serveru zpět na lokální port na vašem počítači.",
-    "tunnelRequirementsText": "SSH server musí mít v souboru /etc/ssh/sshd_config nastaveny hodnoty GatewayPorts – yes, AllowTcpForwarding – yes a PermitRootLogin – yes.",
-    "tunnelSettings": "Nastavení tunelu",
-    "tunnelType": "Typ tunelu",
-    "bindHost": "Vázat hostitele",
-    "docsLink": "Zobrazit dokumenty",
-    "hostNotFound": "Hostitel nenalezen",
-    "loadingHost": "Načítání hostitele..."
-  },
-  "nav": {
-    "portForwarding": "Přeposílání",
-    "tunnels": "Tunely"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (poslouchat lokálně)",
-    "localTargetHost": "127.0.0.1 (cíl na tomto počítači)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (naslouchání na koncovém bodě)",
-    "remoteTargetHost": "127.0.0.1 (cíl z koncového bodu)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (poslouchač SOCKS)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "{{count}} lokálních klientských tunelů nakonfigurovaných na této ploše.",
-    "c2sLoadPreset": "Zatížení",
-    "c2sNoPresetSelected": "Není vybrána žádná předvolba",
-    "c2sNoPresets": "Žádné předvolby nejsou uloženy",
-    "c2sPresetDeleted": "Předvolba klientského tunelu smazána",
-    "c2sPresetLoadError": "Nepodařilo se načíst předvolby tunelu klienta",
-    "c2sPresetLoaded": "Přednastavení klientského tunelu načteno lokálně",
-    "c2sPresetName": "Název předvolby",
-    "c2sPresetNamePlaceholder": "Název předvolby klienta",
-    "c2sPresetRenamed": "Přednastavení klientského tunelu přejmenováno",
-    "c2sPresetSaved": "Přednastavení klientského tunelu uloženo",
-    "c2sPresetSyncNote": "Předvolby jsou explicitní snímky; načtením jedné z nich se nahradí seznam tunelů lokálních klientů tohoto desktopového klienta.",
-    "c2sPresetToLoad": "Předvolba k načtení",
-    "c2sTunnelPresets": "Přednastavení klientského tunelu",
-    "c2sTunnelPresetsUnavailable": "Přednastavení tunelů klienta jsou k dispozici pouze v klientské verzi pro stolní počítače.",
-    "c2sPresetRenameError": "Nepodařilo se přejmenovat předvolbu",
-    "c2sPresetDeleteError": "Nepodařilo se smazat předvolbu"
-  },
-  "tunnels": {
-    "attempt": "Pokus {{current}} z {{max}}",
-    "autoNameClientDynamic": "PONOŽKY {{localPort}} přes {{endpoint}}",
-    "autoNameClientLocal": "Místní {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → místní {{localPort}}",
-    "autoStart": "Automatický start",
-    "cancel": "Zrušit",
-    "canceling": "Rušení...",
-    "clientAutoStartDesc": "Spustí se při otevření tohoto desktopového klienta a zůstane připojen.",
-    "clientManualStartDesc": "Použijte Start a Stop z tohoto řádku. Termix jej neotevře automaticky.",
-    "clientRemoteServerNote": "Vzdálené přesměrování může vyžadovat AllowTcpForwarding a GatewayPorts na SSH serveru koncového bodu. Vzdálený port se zavře, když se tato plocha odpojí.",
-    "clientTunnelStarted": "Tunel klienta spuštěn",
-    "clientTunnelStopped": "Tunel klienta zastaven",
-    "clientTunnels": "Klientské tunely",
-    "connected": "Připojeno",
-    "connecting": "Spojovací...",
-    "createFirstTunnelMessage": "Zatím jste nevytvořili žádné SSH tunely. Chcete-li začít, nakonfigurujte tunelová připojení ve Správci hostitele.",
-    "currentHostPort": "Aktuální hostitelský port",
-    "destination": "Cíl",
-    "destinationAddress": "Cílová adresa",
-    "destinationPort": "Cílový přístav",
-    "disconnected": "Odpojeno",
-    "duplicateAutoStartBind": "Pouze jeden automaticky spouštěný klientský tunel může používat {{bind}}.",
-    "endpointPort": "Port koncového bodu",
-    "endpointSshHost": "Koncový SSH hostitel",
-    "endpointSshHostPlaceholder": "Vyberte nakonfigurovaného hostitele",
-    "endpointSshHostRequired": "Vyberte koncový bod SSH pro každý klientský tunel.",
-    "error": "Chyba",
-    "forwardDescriptionClientDynamic": "SOCKS na lokálním portu {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "Místní {{sourcePort}} → vzdálený {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Vzdálené {{sourcePort}} → místní {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS na aktuálním hostiteli {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Aktuální hostitel {{sourcePort}} → koncový bod {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Koncový bod {{endpointPort}} → aktuální hostitel {{sourcePort}}.",
-    "host": "Hostitel",
-    "intermediateHost": "Mezihostitel",
-    "invalidBindIp": "Lokální IP adresa musí být platná IPv4 adresa.",
-    "invalidEndpointPort": "Koncový port musí být v rozsahu od 1 do 65535.",
-    "invalidLocalPort": "Místní port musí být v rozsahu od 1 do 65535.",
-    "invalidLocalTargetIp": "Lokální cílová IP adresa musí být platná IPv4 adresa.",
-    "invalidLocalTargetPort": "Lokální cílový port musí být v rozmezí od 1 do 65535.",
-    "invalidRemoteAddress": "Je vyžadována vzdálená adresa.",
-    "invalidRemotePort": "Vzdálený port musí být v rozsahu od 1 do 65535.",
-    "lastError": "Poslední chyba",
-    "lastStarted": "Naposledy spuštěno",
-    "lastTested": "Naposledy testováno",
-    "localAddress": "Místní adresa",
-    "localPort": "Místní port",
-    "localSaveError": "Nepodařilo se uložit tunely lokálních klientů.",
-    "localSaved": "Tunely klientů uloženy",
-    "manualControlError": "Nepodařilo se aktualizovat stav tunelu.",
-    "maxRetries": "Maximální počet opakování",
-    "mode": "Režim",
-    "nextRetryIn": "Další pokus za {{seconds}} sekund",
-    "noClientTunnels": "Na této ploše nejsou nakonfigurovány žádné klientské tunely.",
-    "noHostSelected": "Nebyl vybrán žádný hostitel",
-    "noSshTunnels": "Žádné SSH tunely",
-    "port": "Port",
-    "remoteBindAddress": "Adresa vzdálené vazby",
-    "remoteHost": "Vzdálený hostitel",
-    "remotePort": "Vzdálený port",
-    "retryInterval": "Interval opakování (sekundy)",
-    "route": "Trasa:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → PONOŽKY přes {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} přes {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} na {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Test",
-    "tunnelName": "Název tunelu",
-    "tunnelTestFailed": "Test tunelu selhal",
-    "tunnelTestSucceeded": "Test tunelu byl úspěšný",
-    "type": "Typ tunelu",
-    "typeDynamic": "Dynamický (-D)",
-    "typeLocal": "Místní (-L)",
-    "typeRemote": "Vzdálené (-R)",
-    "working": "Pracovní...",
-    "activeCount": "{{connected}}/{{total}} aktivní",
-    "listensOn": "Vázáno na localhost:{{port}}",
-    "socksProxy": "Proxy SOCKS5",
-    "waiting": "Čekání",
-    "remoteSessionExpired": "Relace vzdálené synchronizace vypršela. Znovu se připojte k aplikaci Vzdálená synchronizace a zkuste to znovu.",
-    "activeTunnels": "Aktivní tunely",
-    "start": "Start",
-    "stop": "Zastávka",
-    "authTitle": "Autentizace tunelu",
-    "authRetry": "Předchozí kód nebyl přijat. Zadejte nový kód.",
-    "authAnswer": "Odpověď na ověřování",
-    "authContinue": "Pokračovat"
-  },
-  "permissions": {
-    "use": {
-      "title": "Používejte tunely",
-      "description": "Spouštění, zastavování a sledování SSH tunelů a ukládání předvoleb klientských tunelů."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Povolit tunely",
-        "description": "Nastavte SSH tunely přes tento hostitel."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Tunely",
-    "feature_tunnels_desc": "Přesměrování portů přes server pro přístup ke službám, které nejsou vystaveny."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/da_DK.json b/plugins/tunnels/locales/translated/da_DK.json
deleted file mode 100644
index ded01a662..000000000
--- a/plugins/tunnels/locales/translated/da_DK.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Tilføj tunnel",
-    "autoStartDesc": "Tilslut automatisk denne tunnel, når værten er indlæst",
-    "autoStartLabel": "Automatisk start",
-    "connectBtn": "Forbinde",
-    "disconnectBtn": "Afbryde",
-    "enableTunneling": "Aktivér tunnelering",
-    "enableTunnelingDesc": "Aktivér SSH-tunnelfunktionalitet for denne vært",
-    "endpointHost": "Endpoint-vært",
-    "endpointHostPlaceholder": "Samme vært, SSH-vært eller tilgængelig vært/IP",
-    "endpointPort": "Endepunktsport",
-    "failedToConnectTunnel": "Kunne ikke oprette forbindelse",
-    "failedToDisconnectTunnel": "Kunne ikke afbryde forbindelsen",
-    "maxRetries": "Maks. antal genforsøg",
-    "noTunnelsConfigured": "Ingen tunneler konfigureret.",
-    "retryIntervalS": "Gentagelsesinterval (s)",
-    "serverTunnelsSection": "Servertunneler",
-    "sourcePort": "Kildeport",
-    "tabTunnels": "Tunneler",
-    "tunnelConnecting": "Tunnelforbindelse...",
-    "tunnelDisconnected": "Tunnelen afbrudt",
-    "tunnelLabel": "Tunnel {{number}}",
-    "tunnelModeDynamicDesc": "Opret en SOCKS5-proxy på en lokal port til dynamisk portvideresendelse.",
-    "tunnelModeLocalDesc": "Videresend en lokal port til en port på den eksterne server (eller en vært, der kan nås fra den).",
-    "tunnelModeRemoteDesc": "Videresend en port på den eksterne server tilbage til en lokal port på din maskine.",
-    "tunnelRequirementsText": "SSH-serveren skal have GatewayPorts angivet ja, AllowTcpForwarding ja og PermitRootLogin ja i /etc/ssh/sshd_config.",
-    "tunnelSettings": "Tunnelindstillinger",
-    "tunnelType": "Tunneltype",
-    "bindHost": "Bind vært",
-    "docsLink": "Se dokumenter",
-    "hostNotFound": "Værten blev ikke fundet",
-    "loadingHost": "Indlæser vært..."
-  },
-  "nav": {
-    "portForwarding": "Videresendelse",
-    "tunnels": "Tunneler"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (lyt lokalt)",
-    "localTargetHost": "127.0.0.1 (mål på denne computer)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (lyt på slutpunkt)",
-    "remoteTargetHost": "127.0.0.1 (mål fra slutpunkt)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (SOCKS-lytter)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "{{count}} lokale klienttunneler konfigureret på dette skrivebord.",
-    "c2sLoadPreset": "Indlæs",
-    "c2sNoPresetSelected": "Ingen forudindstilling valgt",
-    "c2sNoPresets": "Ingen forudindstillinger gemt",
-    "c2sPresetDeleted": "Forudindstilling for klienttunnel slettet",
-    "c2sPresetLoadError": "Kunne ikke indlæse klienttunnelforudindstillinger",
-    "c2sPresetLoaded": "Forudindstilling for klienttunnel indlæses lokalt",
-    "c2sPresetName": "Forudindstillet navn",
-    "c2sPresetNamePlaceholder": "Klientens forudindstillingsnavn",
-    "c2sPresetRenamed": "Omdøbt forudindstilling for klienttunnel",
-    "c2sPresetSaved": "Forudindstilling for klienttunnel gemt",
-    "c2sPresetSyncNote": "Forudindstillinger er eksplicitte snapshots; indlæsning af en erstatter denne desktopklients lokale klienttunnelliste.",
-    "c2sPresetToLoad": "Forudindstilling til indlæsning",
-    "c2sTunnelPresets": "Klienttunnelforudindstillinger",
-    "c2sTunnelPresetsUnavailable": "Forudindstillinger for klienttunnel er kun tilgængelige i desktopklienten.",
-    "c2sPresetRenameError": "Kunne ikke omdøbe forudindstillingen",
-    "c2sPresetDeleteError": "Kunne ikke slette forudindstillingen"
-  },
-  "tunnels": {
-    "attempt": "Forsøg {{current}} af {{max}}",
-    "autoNameClientDynamic": "SOKKER {{localPort}} via {{endpoint}}",
-    "autoNameClientLocal": "Lokal {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → lokal {{localPort}}",
-    "autoStart": "Automatisk start",
-    "cancel": "Ophæve",
-    "canceling": "Annullerer...",
-    "clientAutoStartDesc": "Starter, når denne desktopklient åbnes og forbliver forbundet.",
-    "clientManualStartDesc": "Brug Start og Stop fra denne række. Termix åbner den ikke automatisk.",
-    "clientRemoteServerNote": "Fjernvideresendelse kan kræve AllowTcpForwarding og GatewayPorts på slutpunktets SSH-server. Fjernporten lukkes, når denne desktop afbryder forbindelsen.",
-    "clientTunnelStarted": "Klienttunnel startet",
-    "clientTunnelStopped": "Klienttunnel stoppet",
-    "clientTunnels": "Klienttunneler",
-    "connected": "Forbundet",
-    "connecting": "Forbinder...",
-    "createFirstTunnelMessage": "Du har endnu ikke oprettet nogen SSH-tunneler. Konfigurer tunnelforbindelser i Host Manager for at komme i gang.",
-    "currentHostPort": "Nuværende værtsport",
-    "destination": "Bestemmelsessted",
-    "destinationAddress": "Destinationsadresse",
-    "destinationPort": "Destinationshavn",
-    "disconnected": "Afbrudt",
-    "duplicateAutoStartBind": "Kun én autostart-klientunnel kan bruge {{bind}}.",
-    "endpointPort": "Endepunktsport",
-    "endpointSshHost": "Endpoint SSH-vært",
-    "endpointSshHostPlaceholder": "Vælg en konfigureret vært",
-    "endpointSshHostRequired": "Vælg en SSH-vært for slutpunktet for hver klienttunnel.",
-    "error": "Fejl",
-    "forwardDescriptionClientDynamic": "SOCKS på lokal port {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "Lokal {{sourcePort}} → fjern {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Fjern {{sourcePort}} → lokal {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS på nuværende vært {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Nuværende vært {{sourcePort}} → slutpunkt {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Slutpunkt {{endpointPort}} → nuværende vært {{sourcePort}}.",
-    "host": "Vært",
-    "intermediateHost": "Mellemliggende vært",
-    "invalidBindIp": "Lokal IP-adresse skal være en gyldig IPv4-adresse.",
-    "invalidEndpointPort": "Slutpunktsporten skal være mellem 1 og 65535.",
-    "invalidLocalPort": "Den lokale port skal være mellem 1 og 65535.",
-    "invalidLocalTargetIp": "Den lokale mål-IP-adresse skal være en gyldig IPv4-adresse.",
-    "invalidLocalTargetPort": "Den lokale målport skal være mellem 1 og 65535.",
-    "invalidRemoteAddress": "Fjernadresse er påkrævet.",
-    "invalidRemotePort": "Fjernporten skal være mellem 1 og 65535.",
-    "lastError": "Sidste fejl",
-    "lastStarted": "Sidst startet",
-    "lastTested": "Sidst testet",
-    "localAddress": "Lokal adresse",
-    "localPort": "Lokal havn",
-    "localSaveError": "Kunne ikke gemme lokale klienttunneller",
-    "localSaved": "Klienttunneler gemt",
-    "manualControlError": "Kunne ikke opdatere tunnelens tilstand.",
-    "maxRetries": "Maks. antal genforsøg",
-    "mode": "Mode",
-    "nextRetryIn": "Næste forsøg om {{seconds}} sekunder",
-    "noClientTunnels": "Ingen klienttunneller er konfigureret på dette skrivebord.",
-    "noHostSelected": "Ingen vært valgt",
-    "noSshTunnels": "Ingen SSH-tunneler",
-    "port": "Havn",
-    "remoteBindAddress": "Fjernbindingsadresse",
-    "remoteHost": "Fjernvært",
-    "remotePort": "Fjernport",
-    "retryInterval": "Interval for nye forsøg (sekunder)",
-    "route": "Rute:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → STRØMPER via {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} via {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} på {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Prøve",
-    "tunnelName": "Tunnelnavn",
-    "tunnelTestFailed": "Tunneltest mislykkedes",
-    "tunnelTestSucceeded": "Tunneltesten lykkedes",
-    "type": "Tunneltype",
-    "typeDynamic": "Dynamisk (-D)",
-    "typeLocal": "Lokal (-L)",
-    "typeRemote": "Fjernbetjening (-R)",
-    "working": "Arbejder...",
-    "activeCount": "{{connected}}/{{total}} aktiv",
-    "listensOn": "Bundet til localhost:{{port}}",
-    "socksProxy": "SOCKS5-proxy",
-    "waiting": "Venter",
-    "remoteSessionExpired": "Fjernsynkroniseringssessionen er udløbet. Genopret forbindelse til fjernsynkronisering, og prøv igen.",
-    "activeTunnels": "Aktive tunneler",
-    "start": "Starte",
-    "stop": "Stop",
-    "authTitle": "Tunnelgodkendelse",
-    "authRetry": "Den tidligere kode blev ikke accepteret. Indtast en ny kode.",
-    "authAnswer": "Godkendelsessvar",
-    "authContinue": "Fortsætte"
-  },
-  "permissions": {
-    "use": {
-      "title": "Brug tunneler",
-      "description": "Start, stop og overvåg SSH-tunneler, og gem forudindstillinger for klienttunneler."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Aktivér tunneler",
-        "description": "Opsæt SSH-tunneler gennem denne vært."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Tunneler",
-    "feature_tunnels_desc": "Videresend porte via en server for at nå tjenester, der ikke er eksponerede."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/de_DE.json b/plugins/tunnels/locales/translated/de_DE.json
deleted file mode 100644
index bbf324fd9..000000000
--- a/plugins/tunnels/locales/translated/de_DE.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Tunnel hinzufügen",
-    "autoStartDesc": "Diesen Tunnel automatisch verbinden, wenn der Host geladen wird",
-    "autoStartLabel": "Autostart",
-    "connectBtn": "Verbinden",
-    "disconnectBtn": "Trennen",
-    "enableTunneling": "Tunnel aktivieren",
-    "enableTunnelingDesc": "SSH-Tunnel-Funktionalität für diesen Host aktivieren",
-    "endpointHost": "Endpunkt-Host",
-    "endpointHostPlaceholder": "Gleicher Host, SSH-Host oder erreichbarer Host/IP",
-    "endpointPort": "Endpunkt-Port",
-    "failedToConnectTunnel": "Verbindungsaufbau fehlgeschlagen",
-    "failedToDisconnectTunnel": "Trennung fehlgeschlagen",
-    "maxRetries": "Max. Wiederholungen",
-    "noTunnelsConfigured": "Keine Tunnel konfiguriert.",
-    "retryIntervalS": "Wiederholungsintervall (s)",
-    "serverTunnelsSection": "Server-Tunnel",
-    "sourcePort": "Quellport",
-    "tabTunnels": "Tunnel",
-    "tunnelConnecting": "Tunnel wird verbunden...",
-    "tunnelDisconnected": "Tunnel getrennt",
-    "tunnelLabel": "Tunnel {{number}}",
-    "tunnelModeDynamicDesc": "Erstellt einen SOCKS5-Proxy auf einem lokalen Port für dynamische Portweiterleitung.",
-    "tunnelModeLocalDesc": "Leitet einen lokalen Port an einen Port auf dem Remote-Server (oder einen von dort erreichbaren Host) weiter.",
-    "tunnelModeRemoteDesc": "Leitet einen Port auf dem Remote-Server zurück zu einem lokalen Port auf Ihrem Rechner weiter.",
-    "tunnelRequirementsText": "Der SSH-Server muss in /etc/ssh/sshd_config die Optionen GatewayPorts yes, AllowTcpForwarding yes und PermitRootLogin yes gesetzt haben.",
-    "tunnelSettings": "Tunnel-Einstellungen",
-    "tunnelType": "Tunneltyp",
-    "bindHost": "Bind-Host",
-    "docsLink": "Dokumentation anzeigen",
-    "hostNotFound": "Host nicht gefunden",
-    "loadingHost": "Host wird geladen..."
-  },
-  "nav": {
-    "portForwarding": "Weiterleitung",
-    "tunnels": "Tunnel"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (lokal lauschen)",
-    "localTargetHost": "127.0.0.1 (Ziel auf diesem Computer)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (auf Endpunkt lauschen)",
-    "remoteTargetHost": "127.0.0.1 (Ziel vom Endpunkt)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (SOCKS-Listener)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "{{count}} lokale Client-Tunnel auf diesem Desktop konfiguriert.",
-    "c2sLoadPreset": "Laden",
-    "c2sNoPresetSelected": "Keine Voreinstellung ausgewählt",
-    "c2sNoPresets": "Keine Voreinstellungen gespeichert",
-    "c2sPresetDeleted": "Client-Tunnel-Voreinstellung gelöscht",
-    "c2sPresetLoadError": "Fehler beim Laden der Client-Tunnel-Voreinstellungen",
-    "c2sPresetLoaded": "Client-Tunnel-Voreinstellung lokal geladen",
-    "c2sPresetName": "Voreinstellungsname",
-    "c2sPresetNamePlaceholder": "Name der Client-Voreinstellung",
-    "c2sPresetRenamed": "Client-Tunnel-Voreinstellung umbenannt",
-    "c2sPresetSaved": "Client-Tunnel-Voreinstellung gespeichert",
-    "c2sPresetSyncNote": "Voreinstellungen sind explizite Snapshots; das Laden einer Voreinstellung ersetzt die lokale Client-Tunnel-Liste dieses Desktop-Clients.",
-    "c2sPresetToLoad": "Zu ladende Voreinstellung",
-    "c2sTunnelPresets": "Client-Tunnel-Voreinstellungen",
-    "c2sTunnelPresetsUnavailable": "Client-Tunnel-Voreinstellungen sind nur im Desktop-Client verfügbar.",
-    "c2sPresetRenameError": "Die Voreinstellung konnte nicht umbenannt werden.",
-    "c2sPresetDeleteError": "Die Voreinstellung konnte nicht gelöscht werden."
-  },
-  "tunnels": {
-    "attempt": "Versuch {{current}} von {{max}}",
-    "autoNameClientDynamic": "SOCKS {{localPort}} via {{endpoint}}",
-    "autoNameClientLocal": "Lokal {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → lokal {{localPort}}",
-    "autoStart": "Autostart",
-    "cancel": "Abbrechen",
-    "canceling": "Wird abgebrochen...",
-    "clientAutoStartDesc": "Startet automatisch, wenn dieser Desktop-Client geöffnet wird und die Verbindung aufrechterhalten wird.",
-    "clientManualStartDesc": "Verwenden Sie Start und Stopp in dieser Zeile. Termix startet den Tunnel nicht automatisch.",
-    "clientRemoteServerNote": "Remote-Weiterleitung erfordert möglicherweise AllowTcpForwarding und GatewayPorts auf dem Endpunkt-SSH-Server. Der entfernte Port wird geschlossen, wenn dieser Desktop die Verbindung trennt.",
-    "clientTunnelStarted": "Client-Tunnel gestartet",
-    "clientTunnelStopped": "Client-Tunnel gestoppt",
-    "clientTunnels": "Client-Tunnel",
-    "connected": "Verbunden",
-    "connecting": "Verbinde...",
-    "createFirstTunnelMessage": "Sie haben noch keine SSH-Tunnel erstellt. Konfigurieren Sie Tunnelverbindungen im Host-Manager, um zu beginnen.",
-    "currentHostPort": "Aktueller Host-Port",
-    "destination": "Ziel",
-    "destinationAddress": "Zieladresse",
-    "destinationPort": "Zielhafen",
-    "disconnected": "Getrennt",
-    "duplicateAutoStartBind": "Nur ein automatisch startender Client-Tunnel kann {{bind}} verwenden.",
-    "endpointPort": "Endpunkt-Port",
-    "endpointSshHost": "Endpunkt-SSH-Host",
-    "endpointSshHostPlaceholder": "Konfigurierten Host auswählen",
-    "endpointSshHostRequired": "Wählen Sie einen Endpunkt-SSH-Host für jeden Client-Tunnel aus.",
-    "error": "Fehler",
-    "forwardDescriptionClientDynamic": "SOCKS auf lokalem Port {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "Lokal {{sourcePort}} → entfernt {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Entfernt {{sourcePort}} → lokal {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS auf aktuellem Host {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Aktueller Host {{sourcePort}} → Endpunkt {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Endpunkt {{endpointPort}} → aktueller Host {{sourcePort}}.",
-    "host": "Host",
-    "intermediateHost": "Zwischenwirt",
-    "invalidBindIp": "Lokale IP muss eine gültige IPv4-Adresse sein.",
-    "invalidEndpointPort": "Endpunkt-Port muss zwischen 1 und 65535 liegen.",
-    "invalidLocalPort": "Lokaler Port muss zwischen 1 und 65535 liegen.",
-    "invalidLocalTargetIp": "Lokale Ziel-IP muss eine gültige IPv4-Adresse sein.",
-    "invalidLocalTargetPort": "Lokaler Zielport muss zwischen 1 und 65535 liegen.",
-    "invalidRemoteAddress": "Eine Remote-Adresse ist erforderlich.",
-    "invalidRemotePort": "Remote-Port muss zwischen 1 und 65535 liegen.",
-    "lastError": "Letzter Fehler",
-    "lastStarted": "Zuletzt gestartet",
-    "lastTested": "Zuletzt getestet",
-    "localAddress": "Lokale Adresse",
-    "localPort": "Lokaler Port",
-    "localSaveError": "Fehler beim Speichern der lokalen Client-Tunnel",
-    "localSaved": "Client-Tunnel gespeichert",
-    "manualControlError": "Fehler beim Aktualisieren des Tunnelstatus.",
-    "maxRetries": "Max. Wiederholungen",
-    "mode": "Modus",
-    "nextRetryIn": "Nächster Wiederholungsversuch in {{seconds}} Sekunden",
-    "noClientTunnels": "Keine Client-Tunnel auf diesem Desktop konfiguriert.",
-    "noHostSelected": "Kein Host ausgewählt",
-    "noSshTunnels": "Keine SSH-Tunnel",
-    "port": "Port",
-    "remoteBindAddress": "Remote-Bind-Adresse",
-    "remoteHost": "Remote-Host",
-    "remotePort": "Remote-Port",
-    "retryInterval": "Wiederholungsintervall (Sekunden)",
-    "route": "Route:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → SOCKS via {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} via {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} auf {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Test",
-    "tunnelName": "Tunnelname",
-    "tunnelTestFailed": "Tunneltest fehlgeschlagen",
-    "tunnelTestSucceeded": "Tunneltest erfolgreich",
-    "type": "Tunneltyp",
-    "typeDynamic": "Dynamisch (-D)",
-    "typeLocal": "Lokal (-L)",
-    "typeRemote": "Remote (-R)",
-    "working": "In Bearbeitung...",
-    "activeCount": "{{connected}}/{{total}} aktiv",
-    "listensOn": "An localhost gebunden:{{port}}",
-    "socksProxy": "SOCKS5-Proxy",
-    "waiting": "Warten",
-    "remoteSessionExpired": "Die Remote-Synchronisierungssitzung ist abgelaufen. Stellen Sie die Remote-Synchronisierung erneut her und versuchen Sie es noch einmal.",
-    "activeTunnels": "Aktive Tunnel",
-    "start": "Start",
-    "stop": "Stop",
-    "authTitle": "Tunnelauthentifizierung",
-    "authRetry": "Der vorherige Code wurde nicht akzeptiert. Geben Sie einen neuen Code ein.",
-    "authAnswer": "Authentifizierungsantwort",
-    "authContinue": "Weiter"
-  },
-  "permissions": {
-    "use": {
-      "title": "Nutze Tunnel",
-      "description": "Starten, stoppen und überwachen Sie SSH-Tunnel und speichern Sie Client-Tunnel-Voreinstellungen."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Tunnel aktivieren",
-        "description": "Richten Sie SSH-Tunnel über diesen Host ein."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Tunnel",
-    "feature_tunnels_desc": "Leiten Sie Ports über einen Server weiter, um Dienste zu erreichen, die nicht öffentlich zugänglich sind."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/el_GR.json b/plugins/tunnels/locales/translated/el_GR.json
deleted file mode 100644
index c0aaf6d03..000000000
--- a/plugins/tunnels/locales/translated/el_GR.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Προσθήκη σήραγγας",
-    "autoStartDesc": "Αυτόματη σύνδεση αυτής της σήραγγας όταν φορτωθεί ο κεντρικός υπολογιστής",
-    "autoStartLabel": "Αυτόματη εκκίνηση",
-    "connectBtn": "Συνδέω",
-    "disconnectBtn": "Αποσυνδέω",
-    "enableTunneling": "Ενεργοποίηση σήραγγας",
-    "enableTunnelingDesc": "Ενεργοποίηση λειτουργικότητας σήραγγας SSH για αυτόν τον κεντρικό υπολογιστή",
-    "endpointHost": "Κεντρικός υπολογιστής τελικού σημείου",
-    "endpointHostPlaceholder": "Ίδιος κεντρικός υπολογιστής, κεντρικός υπολογιστής SSH ή προσβάσιμος κεντρικός υπολογιστής/IP",
-    "endpointPort": "Θύρα τελικού σημείου",
-    "failedToConnectTunnel": "Αποτυχία σύνδεσης",
-    "failedToDisconnectTunnel": "Η αποσύνδεση απέτυχε",
-    "maxRetries": "Μέγιστος αριθμός επαναλήψεων",
-    "noTunnelsConfigured": "Δεν έχουν διαμορφωθεί σήραγγες.",
-    "retryIntervalS": "Διάστημα επανάληψης (s)",
-    "serverTunnelsSection": "Σήραγγες διακομιστή",
-    "sourcePort": "Θύρα πηγής",
-    "tabTunnels": "Σήραγγες",
-    "tunnelConnecting": "Σύνδεση σήραγγας...",
-    "tunnelDisconnected": "Η σήραγγα αποσυνδέθηκε",
-    "tunnelLabel": "Σήραγγα {{number}}",
-    "tunnelModeDynamicDesc": "Δημιουργήστε έναν διακομιστή μεσολάβησης SOCKS5 σε μια τοπική θύρα για δυναμική προώθηση θυρών.",
-    "tunnelModeLocalDesc": "Προώθηση μιας τοπικής θύρας σε μια θύρα στον απομακρυσμένο διακομιστή (ή σε έναν κεντρικό υπολογιστή προσβάσιμο από αυτόν).",
-    "tunnelModeRemoteDesc": "Προωθήστε μια θύρα στον απομακρυσμένο διακομιστή πίσω σε μια τοπική θύρα στο μηχάνημά σας.",
-    "tunnelRequirementsText": "Ο διακομιστής SSH πρέπει να έχει ορίσει τις τιμές GatewayPorts yes, AllowTcpForwarding yes και PermitRootLogin yes στο /etc/ssh/sshd_config.",
-    "tunnelSettings": "Ρυθμίσεις σήραγγας",
-    "tunnelType": "Τύπος σήραγγας",
-    "bindHost": "Bind Host",
-    "docsLink": "Προβολή εγγράφων",
-    "hostNotFound": "Δεν βρέθηκε κεντρικός υπολογιστής",
-    "loadingHost": "Φόρτωση κεντρικού υπολογιστή..."
-  },
-  "nav": {
-    "portForwarding": "Προώθηση",
-    "tunnels": "Σήραγγες"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (ακρόαση τοπικά)",
-    "localTargetHost": "127.0.0.1 (προορισμός σε αυτόν τον υπολογιστή)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (ακρόαση στο τελικό σημείο)",
-    "remoteTargetHost": "127.0.0.1 (στόχος από το τελικό σημείο)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (ακροατής SOCKS)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "{{count}} τοπική(ές) διοχέτευση(εις) πελάτη που έχουν ρυθμιστεί σε αυτήν την επιφάνεια εργασίας.",
-    "c2sLoadPreset": "Φορτίο",
-    "c2sNoPresetSelected": "Δεν έχει επιλεγεί προεπιλογή",
-    "c2sNoPresets": "Δεν έχουν αποθηκευτεί προεπιλογές",
-    "c2sPresetDeleted": "Η προεπιλογή σήραγγας πελάτη διαγράφηκε",
-    "c2sPresetLoadError": "Αποτυχία φόρτωσης προεπιλογών σήραγγας πελάτη",
-    "c2sPresetLoaded": "Η προεπιλογή σήραγγας πελάτη φορτώθηκε τοπικά",
-    "c2sPresetName": "Όνομα προεπιλογής",
-    "c2sPresetNamePlaceholder": "Όνομα προεπιλογής πελάτη",
-    "c2sPresetRenamed": "Η προεπιλογή σήραγγας πελάτη μετονομάστηκε",
-    "c2sPresetSaved": "Η προεπιλογή σήραγγας πελάτη αποθηκεύτηκε",
-    "c2sPresetSyncNote": "Οι προεπιλογές είναι σαφή στιγμιότυπα. Η φόρτωση ενός αντικαθιστά τη λίστα τοπικής σήραγγας πελατών αυτού του υπολογιστή-πελάτη επιφάνειας εργασίας.",
-    "c2sPresetToLoad": "Προεπιλογή για φόρτωση",
-    "c2sTunnelPresets": "Προεπιλογές σήραγγας πελάτη",
-    "c2sTunnelPresetsUnavailable": "Οι προεπιλογές σήραγγας προγράμματος-πελάτη είναι διαθέσιμες μόνο στον υπολογιστή-πελάτη για υπολογιστές.",
-    "c2sPresetRenameError": "Η μετονομασία της προεπιλογής απέτυχε",
-    "c2sPresetDeleteError": "Η διαγραφή της προεπιλογής απέτυχε"
-  },
-  "tunnels": {
-    "attempt": "Προσπάθεια {{current}} από {{max}}",
-    "autoNameClientDynamic": "ΚΑΛΤΣΕΣ {{localPort}} μέσω {{endpoint}}",
-    "autoNameClientLocal": "Τοπικό {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → τοπικό {{localPort}}",
-    "autoStart": "Αυτόματη έναρξη",
-    "cancel": "Ματαίωση",
-    "canceling": "Ακύρωση...",
-    "clientAutoStartDesc": "Ξεκινά όταν ανοίξει αυτός ο υπολογιστής-πελάτης επιφάνειας εργασίας και παραμένει συνδεδεμένος.",
-    "clientManualStartDesc": "Χρησιμοποιήστε τις εντολές Έναρξη και Διακοπή από αυτήν τη γραμμή. Το Termix δεν θα την ανοίξει αυτόματα.",
-    "clientRemoteServerNote": "Η απομακρυσμένη προώθηση ενδέχεται να απαιτεί AllowTcpForwarding και GatewayPorts στον διακομιστή SSH τελικού σημείου. Η απομακρυσμένη θύρα κλείνει όταν αποσυνδεθεί αυτή η επιφάνεια εργασίας.",
-    "clientTunnelStarted": "Ξεκίνησε η σήραγγα πελατών",
-    "clientTunnelStopped": "Η σήραγγα πελατών διακόπηκε",
-    "clientTunnels": "Σήραγγες Πελατών",
-    "connected": "Συνδεδεμένος",
-    "connecting": "Συνδετικός...",
-    "createFirstTunnelMessage": "Δεν έχετε δημιουργήσει ακόμη σήραγγες SSH. Διαμορφώστε τις συνδέσεις σήραγγας στο Host Manager για να ξεκινήσετε.",
-    "currentHostPort": "Τρέχουσα θύρα κεντρικού υπολογιστή",
-    "destination": "Προορισμός",
-    "destinationAddress": "Διεύθυνση προορισμού",
-    "destinationPort": "Λιμάνι προορισμού",
-    "disconnected": "Ασύνδετος",
-    "duplicateAutoStartBind": "Μόνο μία σήραγγα προγράμματος-πελάτη αυτόματης εκκίνησης μπορεί να χρησιμοποιήσει το {{bind}}.",
-    "endpointPort": "Θύρα τελικού σημείου",
-    "endpointSshHost": "Κεντρικός υπολογιστής SSH τελικού σημείου",
-    "endpointSshHostPlaceholder": "Επιλέξτε έναν διαμορφωμένο κεντρικό υπολογιστή",
-    "endpointSshHostRequired": "Επιλέξτε έναν κεντρικό υπολογιστή SSH τελικού σημείου για κάθε σήραγγα πελάτη.",
-    "error": "Σφάλμα",
-    "forwardDescriptionClientDynamic": "SOCKS στην τοπική θύρα {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "Τοπικό {{sourcePort}} → απομακρυσμένο {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Απομακρυσμένο {{sourcePort}} → τοπικό {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS στον τρέχοντα κεντρικό υπολογιστή {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Τρέχων κεντρικός υπολογιστής {{sourcePort}} → τελικό σημείο {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Τελικό σημείο {{endpointPort}} → τρέχων κεντρικός υπολογιστής {{sourcePort}}.",
-    "host": "Πλήθος",
-    "intermediateHost": "Ενδιάμεσος οικοδεσπότης",
-    "invalidBindIp": "Η τοπική διεύθυνση IP πρέπει να είναι μια έγκυρη διεύθυνση IPv4.",
-    "invalidEndpointPort": "Η θύρα τελικού σημείου πρέπει να είναι μεταξύ 1 και 65535.",
-    "invalidLocalPort": "Η τοπική θύρα πρέπει να είναι μεταξύ 1 και 65535.",
-    "invalidLocalTargetIp": "Η τοπική IP προορισμού πρέπει να είναι μια έγκυρη διεύθυνση IPv4.",
-    "invalidLocalTargetPort": "Η τοπική θύρα προορισμού πρέπει να είναι μεταξύ 1 και 65535.",
-    "invalidRemoteAddress": "Απαιτείται απομακρυσμένη διεύθυνση.",
-    "invalidRemotePort": "Η απομακρυσμένη θύρα πρέπει να είναι μεταξύ 1 και 65535.",
-    "lastError": "Τελευταίο σφάλμα",
-    "lastStarted": "Τελευταία έναρξη",
-    "lastTested": "Τελευταία δοκιμή",
-    "localAddress": "Τοπική διεύθυνση",
-    "localPort": "Τοπικό Λιμάνι",
-    "localSaveError": "Αποτυχία αποθήκευσης τοπικών σηράγγων πελατών",
-    "localSaved": "Οι σήραγγες πελατών αποθηκεύτηκαν",
-    "manualControlError": "Αποτυχία ενημέρωσης κατάστασης σήραγγας.",
-    "maxRetries": "Μέγιστος αριθμός επαναλήψεων",
-    "mode": "Τρόπος",
-    "nextRetryIn": "Επόμενη προσπάθεια σε {{seconds}} δευτερόλεπτα",
-    "noClientTunnels": "Δεν έχουν ρυθμιστεί σήραγγες-πελάτες σε αυτήν την επιφάνεια εργασίας.",
-    "noHostSelected": "Δεν έχει επιλεγεί κεντρικός υπολογιστής",
-    "noSshTunnels": "Δεν υπάρχουν σήραγγες SSH",
-    "port": "Λιμάνι",
-    "remoteBindAddress": "Διεύθυνση απομακρυσμένης σύνδεσης",
-    "remoteHost": "Απομακρυσμένος κεντρικός υπολογιστής",
-    "remotePort": "Απομακρυσμένη θύρα",
-    "retryInterval": "Διάστημα επανάληψης (δευτερόλεπτα)",
-    "route": "Διαδρομή:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → ΚΑΛΤΣΕΣ μέσω {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} μέσω {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} στις {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Δοκιμή",
-    "tunnelName": "Όνομα σήραγγας",
-    "tunnelTestFailed": "Η δοκιμή σήραγγας απέτυχε",
-    "tunnelTestSucceeded": "Η δοκιμή της σήραγγας ήταν επιτυχής",
-    "type": "Τύπος σήραγγας",
-    "typeDynamic": "Δυναμικό (-D)",
-    "typeLocal": "Τοπικό (-L)",
-    "typeRemote": "Τηλεχειριστήριο (-R)",
-    "working": "Εργαζόμενος...",
-    "activeCount": "{{connected}}/{{total}} ενεργό",
-    "listensOn": "Δεσμευμένο με localhost:{{port}}",
-    "socksProxy": "SOCKS5 proxy",
-    "waiting": "Αναμονή",
-    "remoteSessionExpired": "Η περίοδος λειτουργίας Απομακρυσμένου Συγχρονισμού έληξε. Επανασυνδέστε τον Απομακρυσμένο Συγχρονισμό και δοκιμάστε ξανά.",
-    "activeTunnels": "Ενεργές σήραγγες",
-    "start": "Αρχή",
-    "stop": "Στάση",
-    "authTitle": "Έλεγχος ταυτότητας σήραγγας",
-    "authRetry": "Ο προηγούμενος κωδικός δεν έγινε δεκτός. Εισαγάγετε έναν νέο κωδικό.",
-    "authAnswer": "Απόκριση ελέγχου ταυτότητας",
-    "authContinue": "Συνεχίζω"
-  },
-  "permissions": {
-    "use": {
-      "title": "Χρήση σηράγγων",
-      "description": "Έναρξη, διακοπή και παρακολούθηση σηράγγων SSH και αποθήκευση προεπιλογών σηράγγων πελάτη."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Ενεργοποίηση σηράγγων",
-        "description": "Ρυθμίστε σήραγγες SSH μέσω αυτού του κεντρικού υπολογιστή."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Σήραγγες",
-    "feature_tunnels_desc": "Προώθηση θυρών μέσω ενός διακομιστή για πρόσβαση σε υπηρεσίες που δεν είναι εκτεθειμένες."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/es_ES.json b/plugins/tunnels/locales/translated/es_ES.json
deleted file mode 100644
index 7d4e0bf6c..000000000
--- a/plugins/tunnels/locales/translated/es_ES.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Añadir túnel",
-    "autoStartDesc": "Conectar automáticamente este túnel cuando se cargue el host.",
-    "autoStartLabel": "Inicio automático",
-    "connectBtn": "Conectar",
-    "disconnectBtn": "Desconectar",
-    "enableTunneling": "Habilitar tunelización",
-    "enableTunnelingDesc": "Habilitar la funcionalidad de túnel SSH para este host",
-    "endpointHost": "Host de destino",
-    "endpointHostPlaceholder": "Mismo host, host SSH o host/dirección IP accesible",
-    "endpointPort": "Puerto de destino",
-    "failedToConnectTunnel": "Error al conectar",
-    "failedToDisconnectTunnel": "Error al desconectar",
-    "maxRetries": "Reintentos máximos",
-    "noTunnelsConfigured": "No hay túneles configurados.",
-    "retryIntervalS": "Intervalo de reintento (s)",
-    "serverTunnelsSection": "Túneles del servidor",
-    "sourcePort": "Puerto origen",
-    "tabTunnels": "Túneles",
-    "tunnelConnecting": "Túnel conectando...",
-    "tunnelDisconnected": "Túnel desconectado",
-    "tunnelLabel": "Túnel {{number}}",
-    "tunnelModeDynamicDesc": "Crear un proxy SOCKS5 en un puerto local para el reenvío dinámico de puertos.",
-    "tunnelModeLocalDesc": "Reenviar un puerto local a un puerto en el servidor remoto (o a un host accesible desde él).",
-    "tunnelModeRemoteDesc": "Reenviar un puerto del servidor remoto a un puerto local en tu equipo.",
-    "tunnelRequirementsText": "El servidor SSH debe tener GatewayPorts yes, AllowTcpForwarding yes y PermitRootLogin yes configurados en /etc/ssh/sshd_config.",
-    "tunnelSettings": "Configuración de túnel",
-    "tunnelType": "Tipo de túnel",
-    "bindHost": "Host de enlace",
-    "docsLink": "Ver documentación",
-    "hostNotFound": "Host no encontrado",
-    "loadingHost": "Cargando host..."
-  },
-  "nav": {
-    "portForwarding": "Reenvío",
-    "tunnels": "Túneles"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (escuchar localmente)",
-    "localTargetHost": "127.0.0.1 (destino en este equipo)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (escuchar en el punto final)",
-    "remoteTargetHost": "127.0.0.1 (destino desde el punto final)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (escucha SOCKS)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "{{count}} túnel(es) de cliente local configurado(s) en este escritorio.",
-    "c2sLoadPreset": "Cargar",
-    "c2sNoPresetSelected": "Ningún preajuste seleccionado",
-    "c2sNoPresets": "No hay preajustes guardados",
-    "c2sPresetDeleted": "Preajuste de túnel de cliente eliminado",
-    "c2sPresetLoadError": "Error al cargar los preajustes de túneles de cliente",
-    "c2sPresetLoaded": "Preajuste de túnel de cliente cargado localmente",
-    "c2sPresetName": "Nombre del preajuste",
-    "c2sPresetNamePlaceholder": "Nombre del preajuste de cliente",
-    "c2sPresetRenamed": "Preajuste de túnel de cliente renombrado",
-    "c2sPresetSaved": "Preajuste de túnel de cliente guardado",
-    "c2sPresetSyncNote": "Los preajustes son instantáneas explícitas; cargar uno reemplaza la lista de túneles de cliente local de este cliente de escritorio.",
-    "c2sPresetToLoad": "Preajuste a cargar",
-    "c2sTunnelPresets": "Preajustes de túneles de cliente",
-    "c2sTunnelPresetsUnavailable": "Los preajustes de túneles de cliente solo están disponibles en el cliente de escritorio.",
-    "c2sPresetRenameError": "No se pudo cambiar el nombre del preajuste.",
-    "c2sPresetDeleteError": "No se pudo eliminar el preajuste."
-  },
-  "tunnels": {
-    "attempt": "Intento {{current}} de {{max}}",
-    "autoNameClientDynamic": "SOCKS {{localPort}} a través de {{endpoint}}",
-    "autoNameClientLocal": "Local {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → local {{localPort}}",
-    "autoStart": "Inicio automático",
-    "cancel": "Cancelar",
-    "canceling": "Cancelando...",
-    "clientAutoStartDesc": "Se inicia al abrir este cliente de escritorio y permanece conectado.",
-    "clientManualStartDesc": "Use Iniciar y Detener desde esta fila. Termix no lo iniciará automáticamente.",
-    "clientRemoteServerNote": "El reenvío remoto puede requerir AllowTcpForwarding y GatewayPorts en el servidor SSH del endpoint. El puerto remoto se cierra cuando este escritorio se desconecta.",
-    "clientTunnelStarted": "Túnel de cliente iniciado",
-    "clientTunnelStopped": "Túnel de cliente detenido",
-    "clientTunnels": "Túneles de cliente",
-    "connected": "Conectado",
-    "connecting": "Conectando...",
-    "createFirstTunnelMessage": "Aún no has creado ningún túnel SSH. Configura las conexiones de túnel en el Administrador de hosts para empezar.",
-    "currentHostPort": "Puerto del host actual",
-    "destination": "Destino",
-    "destinationAddress": "Dirección de destino",
-    "destinationPort": "Puerto de destino",
-    "disconnected": "Desconectado",
-    "duplicateAutoStartBind": "Solo un túnel de cliente de inicio automático puede usar {{bind}}.",
-    "endpointPort": "Puerto del endpoint",
-    "endpointSshHost": "Host SSH del endpoint",
-    "endpointSshHostPlaceholder": "Seleccionar un host configurado",
-    "endpointSshHostRequired": "Seleccione un host SSH del endpoint para cada túnel de cliente.",
-    "error": "Error",
-    "forwardDescriptionClientDynamic": "SOCKS en puerto local {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "Local {{sourcePort}} → remoto {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Remoto {{sourcePort}} → local {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS en el host actual {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Host actual {{sourcePort}} → endpoint {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Endpoint {{endpointPort}} → host actual {{sourcePort}}.",
-    "host": "Host",
-    "intermediateHost": "Huésped intermedio",
-    "invalidBindIp": "La IP local debe ser una dirección IPv4 válida.",
-    "invalidEndpointPort": "El puerto del endpoint debe estar entre 1 y 65535.",
-    "invalidLocalPort": "El puerto local debe estar entre 1 y 65535.",
-    "invalidLocalTargetIp": "La IP de destino local debe ser una dirección IPv4 válida.",
-    "invalidLocalTargetPort": "El puerto de destino local debe estar entre 1 y 65535.",
-    "invalidRemoteAddress": "Se requiere una dirección remota.",
-    "invalidRemotePort": "El puerto remoto debe estar entre 1 y 65535.",
-    "lastError": "Último error",
-    "lastStarted": "Último inicio",
-    "lastTested": "Última prueba",
-    "localAddress": "Dirección local",
-    "localPort": "Puerto local",
-    "localSaveError": "Error al guardar los túneles de cliente locales",
-    "localSaved": "Túneles de cliente guardados",
-    "manualControlError": "Error al actualizar el estado del túnel.",
-    "maxRetries": "Reintentos máx.",
-    "mode": "Modo",
-    "nextRetryIn": "Próximo reintento en {{seconds}} segundos",
-    "noClientTunnels": "No hay túneles de cliente configurados en este escritorio.",
-    "noHostSelected": "Ningún host seleccionado",
-    "noSshTunnels": "Sin túneles SSH",
-    "port": "Puerto",
-    "remoteBindAddress": "Dirección de enlace remoto",
-    "remoteHost": "Host remoto",
-    "remotePort": "Puerto remoto",
-    "retryInterval": "Intervalo de reintento (segundos)",
-    "route": "Ruta:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → SOCKS a través de {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} vía {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} en {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Probar",
-    "tunnelName": "Nombre del túnel",
-    "tunnelTestFailed": "Prueba de túnel fallida",
-    "tunnelTestSucceeded": "Prueba de túnel exitosa",
-    "type": "Tipo de túnel",
-    "typeDynamic": "Dinámico (-D)",
-    "typeLocal": "Local (-L)",
-    "typeRemote": "Remoto (-R)",
-    "working": "Trabajando...",
-    "activeCount": "{{connected}}/{{total}} activo",
-    "listensOn": "Vinculado a localhost:{{port}}",
-    "socksProxy": "proxy SOCKS5",
-    "waiting": "Espera",
-    "remoteSessionExpired": "La sesión de sincronización remota ha caducado. Vuelva a conectar la sincronización remota e inténtelo de nuevo.",
-    "activeTunnels": "Túneles activos",
-    "start": "Iniciar",
-    "stop": "Detener",
-    "authTitle": "Autenticación de túnel",
-    "authRetry": "El código anterior no fue aceptado. Introduzca un nuevo código.",
-    "authAnswer": "Respuesta de autenticación",
-    "authContinue": "Continuar"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilizar túneles",
-      "description": "Inicia, detén y supervisa los túneles SSH, y guarda las configuraciones predefinidas de los túneles de cliente."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Habilitar túneles",
-        "description": "Configure túneles SSH a través de este host."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Túneles",
-    "feature_tunnels_desc": "Reenvía puertos a través de un servidor para acceder a servicios que no están expuestos."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/fi_FI.json b/plugins/tunnels/locales/translated/fi_FI.json
deleted file mode 100644
index 10c04635f..000000000
--- a/plugins/tunnels/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Lisää tunneli",
-    "autoStartDesc": "Yhdistä tämä tunneli automaattisesti, kun isäntä ladataan",
-    "autoStartLabel": "Automaattinen käynnistys",
-    "connectBtn": "Yhdistä",
-    "disconnectBtn": "Katkaise yhteys",
-    "enableTunneling": "Ota tunnelointi käyttöön",
-    "enableTunnelingDesc": "Ota SSH-tunnelitoiminto käyttöön tälle isännälle",
-    "endpointHost": "Päätepisteen isäntä",
-    "endpointHostPlaceholder": "Sama isäntä, SSH-isäntä tai tavoitettava isäntä/IP-osoite",
-    "endpointPort": "Päätepisteen portti",
-    "failedToConnectTunnel": "Yhteyden muodostaminen epäonnistui",
-    "failedToDisconnectTunnel": "Yhteyden katkaiseminen epäonnistui",
-    "maxRetries": "Maks. uudelleenyritykset",
-    "noTunnelsConfigured": "Ei tunneleita määritettynä.",
-    "retryIntervalS": "Uudelleenyritysväli (s)",
-    "serverTunnelsSection": "Palvelintunnelit",
-    "sourcePort": "Lähdeportti",
-    "tabTunnels": "Tunnelit",
-    "tunnelConnecting": "Tunneli, joka yhdistää...",
-    "tunnelDisconnected": "Tunneli irrotettu",
-    "tunnelLabel": "Tunneli {{number}}",
-    "tunnelModeDynamicDesc": "Luo SOCKS5-välityspalvelin paikalliseen porttiin dynaamista portin edelleenlähetystä varten.",
-    "tunnelModeLocalDesc": "Lähetä paikallinen portti etäpalvelimen (tai siitä tavoitettavan isännän) porttiin.",
-    "tunnelModeRemoteDesc": "Lähetä etäpalvelimen portti takaisin oman koneesi paikalliseen porttiin.",
-    "tunnelRequirementsText": "SSH-palvelimella on oltava GatewayPorts-, AllowTcpForwarding- ja PermitRootLogin-arvot asetettuina tiedostossa /etc/ssh/sshd_config.",
-    "tunnelSettings": "Tunnelin asetukset",
-    "tunnelType": "Tunnelin tyyppi",
-    "bindHost": "Sido isäntä",
-    "docsLink": "Näytä dokumentit",
-    "hostNotFound": "Isäntää ei löydy",
-    "loadingHost": "Ladataan isäntää..."
-  },
-  "nav": {
-    "portForwarding": "Edelleenlähetys",
-    "tunnels": "Tunnelit"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (kuuntele paikallisesti)",
-    "localTargetHost": "127.0.0.1 (kohde tässä tietokoneessa)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (kuuntele päätepisteessä)",
-    "remoteTargetHost": "127.0.0.1 (kohde päätepisteestä)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (SOCKS-kuuntelija)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "{{count}} paikallista asiakastunnelia, jotka on konfiguroitu tälle työpöydälle.",
-    "c2sLoadPreset": "Ladata",
-    "c2sNoPresetSelected": "Ei valittua esiasetusta",
-    "c2sNoPresets": "Ei tallennettuja esiasetuksia",
-    "c2sPresetDeleted": "Asiakastunnelin esiasetus poistettu",
-    "c2sPresetLoadError": "Asiakasohjelman tunnelin esiasetusten lataaminen epäonnistui",
-    "c2sPresetLoaded": "Asiakastunnelin esiasetus ladattu paikallisesti",
-    "c2sPresetName": "Esiasetetun nimen",
-    "c2sPresetNamePlaceholder": "Asiakkaan esiasetetun nimen",
-    "c2sPresetRenamed": "Asiakastunnelin esiasetettu nimi",
-    "c2sPresetSaved": "Asiakastunnelin esiasetus tallennettu",
-    "c2sPresetSyncNote": "Esiasetukset ovat eksplisiittisiä tilannevedoksia; yhden lataaminen korvaa tämän työpöytäasiakkaan paikallisen asiakastunneliluettelon.",
-    "c2sPresetToLoad": "Ladattava esiasetus",
-    "c2sTunnelPresets": "Asiakastunnelin esiasetukset",
-    "c2sTunnelPresetsUnavailable": "Asiakasohjelman tunnelin esiasetukset ovat käytettävissä vain työpöytäsovelluksessa.",
-    "c2sPresetRenameError": "Esiasetuksen uudelleennimeäminen epäonnistui",
-    "c2sPresetDeleteError": "Esiasetuksen poistaminen epäonnistui"
-  },
-  "tunnels": {
-    "attempt": "Yritys {{current}} / {{max}}",
-    "autoNameClientDynamic": "SUKAT {{localPort}} kautta {{endpoint}}",
-    "autoNameClientLocal": "Paikallinen {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → paikallinen {{localPort}}",
-    "autoStart": "Automaattinen käynnistys",
-    "cancel": "Peruuttaa",
-    "canceling": "Peruutetaan...",
-    "clientAutoStartDesc": "Käynnistyy, kun tämä työpöytäsovellus avautuu ja pysyy yhteydessä.",
-    "clientManualStartDesc": "Käytä Käynnistä- ja Pysäytä-painikkeita tältä riviltä. Termix ei avaa sitä automaattisesti.",
-    "clientRemoteServerNote": "Etä edelleenlähetys saattaa vaatia AllowTcpForwarding- ja GatewayPorts-määritykset SSH-päätepalvelimella. Etäportti sulkeutuu, kun tämä työpöytä katkaisee yhteyden.",
-    "clientTunnelStarted": "Asiakastunneli aloitettu",
-    "clientTunnelStopped": "Asiakastunneli pysäytetty",
-    "clientTunnels": "Asiakastunnelit",
-    "connected": "Yhdistetty",
-    "connecting": "Yhdistetään...",
-    "createFirstTunnelMessage": "Et ole vielä luonut SSH-tunneleita. Aloita määrittämällä tunneliyhteydet Host Managerissa.",
-    "currentHostPort": "Nykyinen isäntäportti",
-    "destination": "Määränpää",
-    "destinationAddress": "Kohdeosoite",
-    "destinationPort": "Määränpääsatama",
-    "disconnected": "Yhteys katkennut",
-    "duplicateAutoStartBind": "Vain yksi automaattisesti käynnistyvä asiakastunneli voi käyttää {{bind}} -merkkiä.",
-    "endpointPort": "Päätepisteen portti",
-    "endpointSshHost": "Päätepisteen SSH-isäntä",
-    "endpointSshHostPlaceholder": "Valitse määritetty isäntä",
-    "endpointSshHostRequired": "Valitse kullekin asiakastunnelille SSH-päätepisteen isäntä.",
-    "error": "Virhe",
-    "forwardDescriptionClientDynamic": "SOCKS paikallisessa portissa {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "Paikallinen {{sourcePort}} → etäinen {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Etäinen {{sourcePort}} → paikallinen {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS nykyisellä koneella {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Nykyinen isäntä {{sourcePort}} → päätepiste {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Päätepiste {{endpointPort}} → nykyinen isäntä {{sourcePort}}.",
-    "host": "Isäntä",
-    "intermediateHost": "Väliaikainen isäntä",
-    "invalidBindIp": "Paikallisen IP-osoitteen on oltava kelvollinen IPv4-osoite.",
-    "invalidEndpointPort": "Päätepisteen portin on oltava välillä 1–65535.",
-    "invalidLocalPort": "Paikallisen portin on oltava välillä 1–65535.",
-    "invalidLocalTargetIp": "Paikallisen kohde-IP-osoitteen on oltava kelvollinen IPv4-osoite.",
-    "invalidLocalTargetPort": "Paikallisen kohdeportin on oltava välillä 1–65535.",
-    "invalidRemoteAddress": "Etäosoite vaaditaan.",
-    "invalidRemotePort": "Etäportin on oltava välillä 1–65535.",
-    "lastError": "Viimeisin virhe",
-    "lastStarted": "Viimeksi aloitettu",
-    "lastTested": "Viimeksi testattu",
-    "localAddress": "Paikallinen osoite",
-    "localPort": "Paikallinen satama",
-    "localSaveError": "Paikallisten asiakastunnelien tallentaminen epäonnistui",
-    "localSaved": "Asiakastunnelit tallennettu",
-    "manualControlError": "Tunnelin tilan päivittäminen epäonnistui.",
-    "maxRetries": "Maks. uudelleenyritykset",
-    "mode": "Tila",
-    "nextRetryIn": "Seuraava uudelleenyritys {{seconds}} sekunnin kuluttua",
-    "noClientTunnels": "Tälle työpöydälle ei ole määritetty asiakastunneleita.",
-    "noHostSelected": "Ei valittua isäntää",
-    "noSshTunnels": "Ei SSH-tunneleita",
-    "port": "Portti",
-    "remoteBindAddress": "Etäsidontaosoite",
-    "remoteHost": "Etäisäntä",
-    "remotePort": "Etäportti",
-    "retryInterval": "Uudelleenyritysväli (sekuntia)",
-    "route": "Reitti:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → SUKAT {{endpoint}} kautta",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} kautta {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} kohdassa {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Testata",
-    "tunnelName": "Tunnelin nimi",
-    "tunnelTestFailed": "Tunnelitesti epäonnistui",
-    "tunnelTestSucceeded": "Tunnelitesti onnistui",
-    "type": "Tunnelin tyyppi",
-    "typeDynamic": "Dynaaminen (-D)",
-    "typeLocal": "Paikallinen (-L)",
-    "typeRemote": "Kauko-ohjain (-R)",
-    "working": "Työskentely...",
-    "activeCount": "{{connected}}/{{total}} aktiivinen",
-    "listensOn": "Sidottu paikalliseen isäntään:{{port}}",
-    "socksProxy": "SOCKS5-välityspalvelin",
-    "waiting": "Odotus",
-    "remoteSessionExpired": "Etäsynkronointi-istunto on vanhentunut. Yhdistä etäsynkronointi uudelleen ja yritä uudelleen.",
-    "activeTunnels": "Aktiiviset tunnelit",
-    "start": "Aloita",
-    "stop": "Stop",
-    "authTitle": "Tunnelin todennus",
-    "authRetry": "Edellinen koodi ei hyväksytty. Syötä uusi koodi.",
-    "authAnswer": "Todennusvastaus",
-    "authContinue": "Jatkaa"
-  },
-  "permissions": {
-    "use": {
-      "title": "Käytä tunneleita",
-      "description": "Käynnistä, pysäytä ja tarkkaile SSH-tunneleita ja tallenna asiakastunnelien esiasetukset."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Ota tunnelit käyttöön",
-        "description": "Luo SSH-tunneleita tämän isännän kautta."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Tunnelit",
-    "feature_tunnels_desc": "Lähetä portteja palvelimen kautta tavoittaaksesi palvelut, jotka eivät ole alttiina."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/fr_FR.json b/plugins/tunnels/locales/translated/fr_FR.json
deleted file mode 100644
index 9709a581b..000000000
--- a/plugins/tunnels/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Ajouter un tunnel",
-    "autoStartDesc": "Connecter automatiquement ce tunnel lorsque l'hôte est chargé",
-    "autoStartLabel": "Démarrage automatique",
-    "connectBtn": "Connecter",
-    "disconnectBtn": "Déconnecter",
-    "enableTunneling": "Activer le tunneling",
-    "enableTunnelingDesc": "Activer la fonctionnalité de tunnel SSH pour cet hôte",
-    "endpointHost": "Hôte de destination",
-    "endpointHostPlaceholder": "Même hôte, hôte SSH ou hôte/IP accessible",
-    "endpointPort": "Port de destination",
-    "failedToConnectTunnel": "Échec de la connexion",
-    "failedToDisconnectTunnel": "Échec de la déconnexion",
-    "maxRetries": "Tentatives max",
-    "noTunnelsConfigured": "Aucun tunnel configuré.",
-    "retryIntervalS": "Intervalle de tentative (s)",
-    "serverTunnelsSection": "Tunnels serveur",
-    "sourcePort": "Port source",
-    "tabTunnels": "Tunnels",
-    "tunnelConnecting": "Connexion du tunnel...",
-    "tunnelDisconnected": "Tunnel déconnecté",
-    "tunnelLabel": "Tunnel {{number}}",
-    "tunnelModeDynamicDesc": "Crée un proxy SOCKS5 sur un port local pour la redirection de port dynamique.",
-    "tunnelModeLocalDesc": "Redirige un port local vers un port sur le serveur distant (ou un hôte accessible depuis celui-ci).",
-    "tunnelModeRemoteDesc": "Redirige un port sur le serveur distant vers un port local sur votre machine.",
-    "tunnelRequirementsText": "Le serveur SSH doit avoir GatewayPorts yes, AllowTcpForwarding yes et PermitRootLogin yes définis dans /etc/ssh/sshd_config.",
-    "tunnelSettings": "Paramètres du tunnel",
-    "tunnelType": "Type de tunnel",
-    "bindHost": "Hôte de liaison",
-    "docsLink": "Voir la documentation",
-    "hostNotFound": "Hôte introuvable",
-    "loadingHost": "Chargement de l'hôte..."
-  },
-  "nav": {
-    "portForwarding": "Expéditeur",
-    "tunnels": "Tunnels"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (écouter en local)",
-    "localTargetHost": "127.0.0.1 (cible sur cet ordinateur)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (écoute sur le point de terminaison)",
-    "remoteTargetHost": "127.0.0.1 (cible du point de terminaison)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (écouteur SOCKS)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "{{count}} tunnel(s) client local configuré(s) sur ce bureau.",
-    "c2sLoadPreset": "Charger",
-    "c2sNoPresetSelected": "Aucun préréglage sélectionné",
-    "c2sNoPresets": "Aucun préréglage enregistré",
-    "c2sPresetDeleted": "Préréglage de tunnel client supprimé",
-    "c2sPresetLoadError": "Échec du chargement des préréglages de tunnel client",
-    "c2sPresetLoaded": "Préréglage de tunnel client chargé localement",
-    "c2sPresetName": "Nom du préréglage",
-    "c2sPresetNamePlaceholder": "Nom du préréglage client",
-    "c2sPresetRenamed": "Préréglage de tunnel client renommé",
-    "c2sPresetSaved": "Préréglage de tunnel client enregistré",
-    "c2sPresetSyncNote": "Les préréglages sont des instantanés explicites ; en charger un remplace la liste de tunnels client locaux de ce client de bureau.",
-    "c2sPresetToLoad": "Préréglage à charger",
-    "c2sTunnelPresets": "Préréglages de tunnel client",
-    "c2sTunnelPresetsUnavailable": "Les préréglages de tunnel client sont disponibles uniquement dans le client de bureau.",
-    "c2sPresetRenameError": "Impossible de renommer le préréglage",
-    "c2sPresetDeleteError": "Échec de la suppression du préréglage"
-  },
-  "tunnels": {
-    "attempt": "Tentative {{current}} sur {{max}}",
-    "autoNameClientDynamic": "SOCKS {{localPort}} via {{endpoint}}",
-    "autoNameClientLocal": "Local {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → local {{localPort}}",
-    "autoStart": "Démarrage automatique",
-    "cancel": "Annuler",
-    "canceling": "Annulation en cours...",
-    "clientAutoStartDesc": "Démarre à l'ouverture de ce client de bureau et reste connecté.",
-    "clientManualStartDesc": "Utilisez Démarrer et Arrêter depuis cette ligne. Termix ne l'ouvrira pas automatiquement.",
-    "clientRemoteServerNote": "La redirection distante peut nécessiter AllowTcpForwarding et GatewayPorts sur le serveur SSH du point de terminaison. Le port distant se ferme lorsque ce bureau se déconnecte.",
-    "clientTunnelStarted": "Tunnel client démarré",
-    "clientTunnelStopped": "Tunnel client arrêté",
-    "clientTunnels": "Tunnels client",
-    "connected": "Connecté",
-    "connecting": "Connexion en cours...",
-    "createFirstTunnelMessage": "Vous n'avez encore créé aucun tunnel SSH. Configurez des connexions de tunnel dans le Gestionnaire d'hôtes pour commencer.",
-    "currentHostPort": "Port de l'hôte actuel",
-    "destination": "Destination",
-    "destinationAddress": "Adresse de destination",
-    "destinationPort": "Port de destination",
-    "disconnected": "Déconnecté",
-    "duplicateAutoStartBind": "Un seul tunnel client à démarrage automatique peut utiliser {{bind}}.",
-    "endpointPort": "Port du point de terminaison",
-    "endpointSshHost": "Hôte SSH du point de terminaison",
-    "endpointSshHostPlaceholder": "Sélectionner un hôte configuré",
-    "endpointSshHostRequired": "Sélectionnez un hôte SSH de point de terminaison pour chaque tunnel client.",
-    "error": "Erreur",
-    "forwardDescriptionClientDynamic": "SOCKS sur le port local {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "Local {{sourcePort}} → distant {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Distant {{sourcePort}} → local {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS sur l’hôte actuel {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Hôte actuel {{sourcePort}} → point de terminaison {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Point de terminaison {{endpointPort}} → hôte actuel {{sourcePort}}.",
-    "host": "Hôte",
-    "intermediateHost": "Hôte intermédiaire",
-    "invalidBindIp": "L'IP locale doit être une adresse IPv4 valide.",
-    "invalidEndpointPort": "Le port du point de terminaison doit être compris entre 1 et 65535.",
-    "invalidLocalPort": "Le port local doit être compris entre 1 et 65535.",
-    "invalidLocalTargetIp": "L'IP cible locale doit être une adresse IPv4 valide.",
-    "invalidLocalTargetPort": "Le port cible local doit être compris entre 1 et 65535.",
-    "invalidRemoteAddress": "Une adresse distante est requise.",
-    "invalidRemotePort": "Le port distant doit être compris entre 1 et 65535.",
-    "lastError": "Dernière erreur",
-    "lastStarted": "Dernier démarrage",
-    "lastTested": "Dernier test",
-    "localAddress": "Adresse locale",
-    "localPort": "Port local",
-    "localSaveError": "Échec de l'enregistrement des tunnels client locaux",
-    "localSaved": "Tunnels client enregistrés",
-    "manualControlError": "Échec de la mise à jour de l'état du tunnel.",
-    "maxRetries": "Tentatives maximum",
-    "mode": "Mode",
-    "nextRetryIn": "Prochaine tentative dans {{seconds}} secondes",
-    "noClientTunnels": "Aucun tunnel client configuré sur ce bureau.",
-    "noHostSelected": "Aucun hôte sélectionné",
-    "noSshTunnels": "Aucun tunnel SSH",
-    "port": "Port",
-    "remoteBindAddress": "Adresse de liaison distante",
-    "remoteHost": "Hôte distant",
-    "remotePort": "Port distant",
-    "retryInterval": "Intervalle de réessai (secondes)",
-    "route": "Route :",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → SOCKS via {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} via {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} sur {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Tester",
-    "tunnelName": "Nom du tunnel",
-    "tunnelTestFailed": "Échec du test du tunnel",
-    "tunnelTestSucceeded": "Test du tunnel réussi",
-    "type": "Type de tunnel",
-    "typeDynamic": "Dynamique (-D)",
-    "typeLocal": "Local (-L)",
-    "typeRemote": "Distant (-R)",
-    "working": "En cours…",
-    "activeCount": "{{connected}}/{{total}} actif",
-    "listensOn": "Lié à localhost :{{port}}",
-    "socksProxy": "Proxy SOCKS5",
-    "waiting": "En attendant",
-    "remoteSessionExpired": "La session de synchronisation à distance a expiré. Veuillez vous reconnecter à la synchronisation à distance et réessayer.",
-    "activeTunnels": "Tunnels actifs",
-    "start": "Démarrer",
-    "stop": "Arrêter",
-    "authTitle": "Authentification du tunnel",
-    "authRetry": "Le code précédent n'a pas été accepté. Veuillez saisir un nouveau code.",
-    "authAnswer": "Réponse d'authentification",
-    "authContinue": "Continuer"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilisez les tunnels",
-      "description": "Démarrer, arrêter et surveiller les tunnels SSH, et enregistrer les préréglages des tunnels clients."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Activer les tunnels",
-        "description": "Configurez des tunnels SSH via cet hôte."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Tunnels",
-    "feature_tunnels_desc": "Redirigez les ports via un serveur pour accéder aux services non exposés."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/he_IL.json b/plugins/tunnels/locales/translated/he_IL.json
deleted file mode 100644
index 316589428..000000000
--- a/plugins/tunnels/locales/translated/he_IL.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "הוסף מנהרה",
-    "autoStartDesc": "חבר אוטומטית את המנהרה הזו כאשר המארח נטען",
-    "autoStartLabel": "הפעלה אוטומטית",
-    "connectBtn": "לְחַבֵּר",
-    "disconnectBtn": "לְנַתֵק",
-    "enableTunneling": "הפעלת מנהור",
-    "enableTunnelingDesc": "הפעל פונקציונליות מנהרת SSH עבור מארח זה",
-    "endpointHost": "מארח נקודת קצה",
-    "endpointHostPlaceholder": "אותו מארח, מארח SSH, או מארח/IP נגיש",
-    "endpointPort": "יציאת נקודת קצה",
-    "failedToConnectTunnel": "נכשל בחיבור",
-    "failedToDisconnectTunnel": "נכשל הניתוק",
-    "maxRetries": "מקסימום ניסיונות חוזרים",
-    "noTunnelsConfigured": "לא הוגדרו מנהרות.",
-    "retryIntervalS": "מרווח זמן לניסיון חוזר (ים)",
-    "serverTunnelsSection": "מנהרות שרתים",
-    "sourcePort": "יציאת מקור",
-    "tabTunnels": "מנהרות",
-    "tunnelConnecting": "מנהרה מתחברת...",
-    "tunnelDisconnected": "מנהרה מנותקת",
-    "tunnelLabel": "מנהרה {{number}}",
-    "tunnelModeDynamicDesc": "צור פרוקסי SOCKS5 בפורט מקומי עבור העברת פורטים דינמית.",
-    "tunnelModeLocalDesc": "העברת פורט מקומי לפורט בשרת מרוחק (או למארח שניתן להגיע אליו ממנו).",
-    "tunnelModeRemoteDesc": "העבר פורט בשרת המרוחק חזרה לפורט מקומי במחשב שלך.",
-    "tunnelRequirementsText": "שרת ה-SSH חייב להגדיר את האפשרויות GatewayPorts כן, AllowTcpForwarding כן, ו-PermitRootLogin כן ב-/etc/ssh/sshd_config.",
-    "tunnelSettings": "הגדרות מנהרה",
-    "tunnelType": "סוג המנהרה",
-    "bindHost": "מארח קשירה",
-    "docsLink": "הצג מסמכים",
-    "hostNotFound": "המארח לא נמצא",
-    "loadingHost": "טוען מארח..."
-  },
-  "nav": {
-    "portForwarding": "העברה",
-    "tunnels": "מנהרות"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (האזנה מקומית)",
-    "localTargetHost": "127.0.0.1 (היעד במחשב זה)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (האזנה בנקודת הקצה)",
-    "remoteTargetHost": "127.0.0.1 (יעד מנקודת הקצה)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (מאזין SOCKS)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "מנהרה/ות לקוח מקומיות {{count}} מוגדרות בשולחן עבודה זה.",
-    "c2sLoadPreset": "לִטעוֹן",
-    "c2sNoPresetSelected": "לא נבחרה הגדרה מוגדרת מראש",
-    "c2sNoPresets": "לא נשמרו הגדרות קבועות מראש",
-    "c2sPresetDeleted": "מנהרת הלקוח מוגדרת מראש נמחקה",
-    "c2sPresetLoadError": "נכשלה טעינת הגדרות קבועות מראש של מנהרת הלקוח",
-    "c2sPresetLoaded": "מנהרת לקוח מוגדרת מראש נטענת באופן מקומי",
-    "c2sPresetName": "שם מוגדר מראש",
-    "c2sPresetNamePlaceholder": "שם קבוע מראש של הלקוח",
-    "c2sPresetRenamed": "שם של פריסט של מנהרת הלקוח",
-    "c2sPresetSaved": "מנהרת הלקוח מוגדרת מראש נשמרה",
-    "c2sPresetSyncNote": "קביעות מוגדרות מראש הן תמונות בזק מפורשות; טעינת אחת מהן מחליפה את רשימת מנהרות הלקוחות המקומיות של לקוח שולחן העבודה הזה.",
-    "c2sPresetToLoad": "הגדרה מראש לטעינה",
-    "c2sTunnelPresets": "קביעות מוגדרות מראש של מנהרת לקוח",
-    "c2sTunnelPresetsUnavailable": "הגדרות קבועות מראש של מנהרת לקוח זמינות רק בלקוח שולחן העבודה.",
-    "c2sPresetRenameError": "נכשל שינוי שם הפריסט",
-    "c2sPresetDeleteError": "מחיקת הפריסט נכשלה"
-  },
-  "tunnels": {
-    "attempt": "ניסיון {{current}} של {{max}}",
-    "autoNameClientDynamic": "גרביים {{localPort}} דרך {{endpoint}}",
-    "autoNameClientLocal": "מקומי {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → מקומי {{localPort}}",
-    "autoStart": "הפעלה אוטומטית",
-    "cancel": "לְבַטֵל",
-    "canceling": "מבטל...",
-    "clientAutoStartDesc": "מתחיל כאשר לקוח שולחן עבודה זה נפתח ונשאר מחובר.",
-    "clientManualStartDesc": "השתמשו בפקודות התחל ועצירה משורה זו. טרמיקס לא יפתח אותה אוטומטית.",
-    "clientRemoteServerNote": "ייתכן שהעברת נתונים מרחוק תדרוש את AllowTcpForwarding ו-GatewayPorts בשרת ה-SSH של נקודת הקצה. היציאה המרוחקת נסגרת כאשר שולחן עבודה זה מתנתק.",
-    "clientTunnelStarted": "מנהרת הלקוחות התחילה",
-    "clientTunnelStopped": "מנהרת הלקוח נעצרה",
-    "clientTunnels": "מנהרות לקוח",
-    "connected": "מְחוּבָּר",
-    "connecting": "מְקַשֵׁר...",
-    "createFirstTunnelMessage": "עדיין לא יצרת מנהרות SSH. הגדר חיבורי מנהרות במנהל המארח כדי להתחיל.",
-    "currentHostPort": "יציאת המארח הנוכחית",
-    "destination": "יַעַד",
-    "destinationAddress": "כתובת היעד",
-    "destinationPort": "נמל יעד",
-    "disconnected": "מְנוּתָק",
-    "duplicateAutoStartBind": "רק מנהרת לקוח אחת עם הפעלה אוטומטית יכולה להשתמש ב- {{bind}}.",
-    "endpointPort": "יציאת נקודת קצה",
-    "endpointSshHost": "מארח SSH של נקודת קצה",
-    "endpointSshHostPlaceholder": "בחר מארח מוגדר",
-    "endpointSshHostRequired": "בחר מארח SSH של נקודת קצה עבור כל מנהרת לקוח.",
-    "error": "שְׁגִיאָה",
-    "forwardDescriptionClientDynamic": "SOCKS בפורט המקומי {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "מקומי {{sourcePort}} → מרוחק {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "מרוחק {{sourcePort}} → מקומי {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS על המארח הנוכחי {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "מארח נוכחי {{sourcePort}} → נקודת קצה {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "נקודת קצה {{endpointPort}} → מארח נוכחי {{sourcePort}}.",
-    "host": "מְאָרֵחַ",
-    "intermediateHost": "מארח ביניים",
-    "invalidBindIp": "כתובת IP מקומית חייבת להיות כתובת IPv4 תקפה.",
-    "invalidEndpointPort": "יציאת נקודת הקצה חייבת להיות בין 1 ל-65535.",
-    "invalidLocalPort": "היציאה המקומית חייבת להיות בין 1 ל-65535.",
-    "invalidLocalTargetIp": "כתובת ה-IP המקומית של היעד חייבת להיות כתובת IPv4 חוקית.",
-    "invalidLocalTargetPort": "יציאת היעד המקומית חייבת להיות בין 1 ל-65535.",
-    "invalidRemoteAddress": "נדרשת כתובת מרוחקת.",
-    "invalidRemotePort": "היציאה המרוחקת חייבת להיות בין 1 ל-65535.",
-    "lastError": "השגיאה האחרונה",
-    "lastStarted": "התחיל לאחרונה",
-    "lastTested": "נבדק לאחרונה",
-    "localAddress": "כתובת מקומית",
-    "localPort": "נמל מקומי",
-    "localSaveError": "נכשלה שמירת מנהרות הלקוח המקומיות",
-    "localSaved": "מנהרות הלקוח נשמרו",
-    "manualControlError": "עדכון מצב המנהרה נכשל.",
-    "maxRetries": "מקסימום ניסיונות חוזרים",
-    "mode": "מצב",
-    "nextRetryIn": "ניסיון חוזר הבא בעוד {{seconds}} שניות",
-    "noClientTunnels": "לא הוגדרו מנהרות לקוח בשולחן עבודה זה.",
-    "noHostSelected": "לא נבחר מארח",
-    "noSshTunnels": "אין מנהרות SSH",
-    "port": "נָמָל",
-    "remoteBindAddress": "כתובת קישור מרחוק",
-    "remoteHost": "מארח מרוחק",
-    "remotePort": "יציאה מרוחקת",
-    "retryInterval": "מרווח זמן לניסיון חוזר (שניות)",
-    "route": "מַסלוּל:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → גרביים דרך {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} דרך {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} על {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "מִבְחָן",
-    "tunnelName": "שם המנהרה",
-    "tunnelTestFailed": "מבחן המנהרה נכשל",
-    "tunnelTestSucceeded": "מבחן המנהרה הצליח",
-    "type": "סוג המנהרה",
-    "typeDynamic": "דינמי (-D)",
-    "typeLocal": "מקומי (-L)",
-    "typeRemote": "מרחוק (-R)",
-    "working": "עובד...",
-    "activeCount": "{{connected}}/{{total}} פעיל",
-    "listensOn": "קשור למארח מקומי:{{port}}",
-    "socksProxy": "פרוקסי SOCKS5",
-    "waiting": "הַמתָנָה",
-    "remoteSessionExpired": "פג תוקף סיום הסנכרון מרחוק. התחבר מחדש לסנכרון מרחוק ונסה שוב.",
-    "activeTunnels": "מנהרות פעילות",
-    "start": "הַתחָלָה",
-    "stop": "לְהַפְסִיק",
-    "authTitle": "אימות מנהרה",
-    "authRetry": "הקוד הקודם לא התקבל. הזן קוד חדש.",
-    "authAnswer": "תגובת אימות",
-    "authContinue": "לְהַמשִׁיך"
-  },
-  "permissions": {
-    "use": {
-      "title": "השתמשו במנהרות",
-      "description": "הפעל, עצור וצפה במנהרות SSH, ושמור הגדרות קבועות מראש של מנהרות לקוח."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "הפעלת מנהרות",
-        "description": "הגדר מנהרות SSH דרך מארח זה."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "מנהרות",
-    "feature_tunnels_desc": "העברת פורטים דרך שרת כדי להגיע לשירותים שאינם חשופים."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/hi_IN.json b/plugins/tunnels/locales/translated/hi_IN.json
deleted file mode 100644
index 94389b4d9..000000000
--- a/plugins/tunnels/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "टनल जोड़ें",
-    "autoStartDesc": "होस्ट लोड होने पर यह टनल स्वचालित रूप से कनेक्ट करें",
-    "autoStartLabel": "स्वतः आरंभ",
-    "connectBtn": "कनेक्ट करें",
-    "disconnectBtn": "डिस्कनेक्ट करें",
-    "enableTunneling": "टनलिंग सक्षम करें",
-    "enableTunnelingDesc": "इस होस्ट के लिए SSH टनल कार्यक्षमता सक्षम करें",
-    "endpointHost": "एंडपॉइंट होस्ट",
-    "endpointHostPlaceholder": "समान होस्ट, SSH होस्ट, या पहुंच योग्य होस्ट/IP",
-    "endpointPort": "एंडपॉइंट पोर्ट",
-    "failedToConnectTunnel": "कनेक्ट करने में विफल",
-    "failedToDisconnectTunnel": "डिस्कनेक्ट करने में विफल",
-    "maxRetries": "अधिकतम पुनर्प्रयास",
-    "noTunnelsConfigured": "कोई टनल कॉन्फ़िगर नहीं की गई।",
-    "retryIntervalS": "पुनर्प्रयास अंतराल (s)",
-    "serverTunnelsSection": "सर्वर टनल",
-    "sourcePort": "स्रोत पोर्ट",
-    "tabTunnels": "टनलें",
-    "tunnelConnecting": "टनल कनेक्ट हो रही है...",
-    "tunnelDisconnected": "टनल डिस्कनेक्ट हो गई",
-    "tunnelLabel": "टनल {{number}}",
-    "tunnelModeDynamicDesc": "गतिशील पोर्ट अग्रेषण के लिए स्थानीय पोर्ट पर SOCKS5 प्रॉक्सी बनाएं।",
-    "tunnelModeLocalDesc": "स्थानीय पोर्ट को दूरस्थ सर्वर (या उससे पहुंच योग्य किसी होस्ट) के पोर्ट पर अग्रेषित करें।",
-    "tunnelModeRemoteDesc": "दूरस्थ सर्वर पर एक पोर्ट को अपनी मशीन पर स्थानीय पोर्ट पर वापस अग्रेषित करें।",
-    "tunnelRequirementsText": "SSH सर्वर में /etc/ssh/sshd_config में GatewayPorts yes, AllowTcpForwarding yes, और PermitRootLogin yes सेट होना चाहिए।",
-    "tunnelSettings": "टनल सेटिंग्स",
-    "tunnelType": "टनल प्रकार",
-    "bindHost": "बाइंड होस्ट",
-    "docsLink": "दस्तावेज़ देखें",
-    "hostNotFound": "होस्ट नहीं मिला",
-    "loadingHost": "होस्ट लोड हो रहा है..."
-  },
-  "nav": {
-    "portForwarding": "अग्रेषित करना",
-    "tunnels": "टनल"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (स्थानीय रूप से सुनें)",
-    "localTargetHost": "127.0.0.1 (इस कंप्यूटर पर लक्ष्य)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (एंडपॉइंट पर सुनें)",
-    "remoteTargetHost": "127.0.0.1 (एंडपॉइंट से लक्ष्य)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (SOCKS श्रोता)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "इस डेस्कटॉप पर {{count}} स्थानीय क्लाइंट टनल(s) कॉन्फ़िगर की गई हैं।",
-    "c2sLoadPreset": "लोड करें",
-    "c2sNoPresetSelected": "कोई प्रीसेट चयनित नहीं",
-    "c2sNoPresets": "कोई प्रीसेट सहेजा नहीं गया",
-    "c2sPresetDeleted": "क्लाइंट टनल प्रीसेट हटाया गया",
-    "c2sPresetLoadError": "क्लाइंट टनल प्रीसेट लोड करने में विफल",
-    "c2sPresetLoaded": "क्लाइंट टनल प्रीसेट स्थानीय रूप से लोड हुआ",
-    "c2sPresetName": "प्रीसेट नाम",
-    "c2sPresetNamePlaceholder": "क्लाइंट प्रीसेट नाम",
-    "c2sPresetRenamed": "क्लाइंट टनल प्रीसेट का नाम बदला गया",
-    "c2sPresetSaved": "क्लाइंट टनल प्रीसेट सहेजा गया",
-    "c2sPresetSyncNote": "प्रीसेट स्पष्ट स्नैपशॉट हैं; एक लोड करने पर यह डेस्कटॉप क्लाइंट की स्थानीय क्लाइंट टनल सूची को बदल देता है।",
-    "c2sPresetToLoad": "लोड करने के लिए प्रीसेट",
-    "c2sTunnelPresets": "क्लाइंट टनल प्रीसेट",
-    "c2sTunnelPresetsUnavailable": "क्लाइंट टनल प्रीसेट केवल डेस्कटॉप क्लाइंट में उपलब्ध हैं।",
-    "c2sPresetRenameError": "प्रीसेट का नाम बदलने में विफलता",
-    "c2sPresetDeleteError": "प्रीसेट को हटाने में विफल रहा"
-  },
-  "tunnels": {
-    "attempt": "प्रयास {{current}} / {{max}}",
-    "autoNameClientDynamic": "SOCKS {{localPort}} via {{endpoint}}",
-    "autoNameClientLocal": "स्थानीय {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → स्थानीय {{localPort}}",
-    "autoStart": "स्वतः आरंभ",
-    "cancel": "रद्द करें",
-    "canceling": "रद्द कर रहा है...",
-    "clientAutoStartDesc": "यह डेस्कटॉप क्लाइंट खुलने पर आरंभ होता है और जुड़ा रहता है।",
-    "clientManualStartDesc": "इस पंक्ति से आरंभ और रोकें का उपयोग करें। Termix इसे स्वचालित रूप से नहीं खोलेगा।",
-    "clientRemoteServerNote": "दूरस्थ अग्रेषण के लिए एंडपॉइंट SSH सर्वर पर AllowTcpForwarding और GatewayPorts की आवश्यकता हो सकती है। यह डेस्कटॉप डिस्कनेक्ट होने पर दूरस्थ पोर्ट बंद हो जाता है।",
-    "clientTunnelStarted": "क्लाइंट टनल आरंभ हो गई",
-    "clientTunnelStopped": "क्लाइंट टनल रुक गई",
-    "clientTunnels": "क्लाइंट टनलें",
-    "connected": "कनेक्टेड",
-    "connecting": "कनेक्ट हो रहा है...",
-    "createFirstTunnelMessage": "आपने अभी तक कोई SSH टनल नहीं बनाई है। शुरू करने के लिए होस्ट प्रबंधक में टनल कनेक्शन कॉन्फ़िगर करें।",
-    "currentHostPort": "वर्तमान होस्ट पोर्ट",
-    "destination": "डेस्टिनेशन",
-    "destinationAddress": "गंतव्य पता",
-    "destinationPort": "गंतव्य बंदरगाह",
-    "disconnected": "डिस्कनेक्टेड",
-    "duplicateAutoStartBind": "केवल एक स्वतः-आरंभ क्लाइंट टनल {{bind}} का उपयोग कर सकती है।",
-    "endpointPort": "एंडपॉइंट पोर्ट",
-    "endpointSshHost": "एंडपॉइंट SSH होस्ट",
-    "endpointSshHostPlaceholder": "कॉन्फ़िगर किया गया होस्ट चुनें",
-    "endpointSshHostRequired": "प्रत्येक क्लाइंट टनल के लिए एक एंडपॉइंट SSH होस्ट चुनें।",
-    "error": "त्रुटि",
-    "forwardDescriptionClientDynamic": "स्थानीय पोर्ट {{sourcePort}} पर SOCKS।",
-    "forwardDescriptionClientLocal": "स्थानीय {{sourcePort}} → दूरस्थ {{endpointPort}}।",
-    "forwardDescriptionClientRemote": "दूरस्थ {{sourcePort}} → स्थानीय {{endpointPort}}।",
-    "forwardDescriptionServerDynamic": "वर्तमान होस्ट {{sourcePort}} पर SOCKS।",
-    "forwardDescriptionServerLocal": "वर्तमान होस्ट {{sourcePort}} → एंडपॉइंट {{endpointPort}}।",
-    "forwardDescriptionServerRemote": "एंडपॉइंट {{endpointPort}} → वर्तमान होस्ट {{sourcePort}}।",
-    "host": "होस्ट",
-    "intermediateHost": "मध्यवर्ती मेजबान",
-    "invalidBindIp": "स्थानीय आईपी एक मान्य IPv4 पता होना चाहिए।",
-    "invalidEndpointPort": "एंडपॉइंट पोर्ट 1 और 65535 के बीच होना चाहिए।",
-    "invalidLocalPort": "स्थानीय पोर्ट 1 और 65535 के बीच होना चाहिए।",
-    "invalidLocalTargetIp": "स्थानीय लक्ष्य आईपी एक मान्य IPv4 पता होना चाहिए।",
-    "invalidLocalTargetPort": "स्थानीय लक्ष्य पोर्ट 1 और 65535 के बीच होना चाहिए।",
-    "invalidRemoteAddress": "रिमोट एड्रेस आवश्यक है।",
-    "invalidRemotePort": "दूरस्थ पोर्ट 1 और 65535 के बीच होना चाहिए।",
-    "lastError": "अंतिम त्रुटि",
-    "lastStarted": "अंतिम बार शुरू हुआ",
-    "lastTested": "अंतिम बार परीक्षण किया गया",
-    "localAddress": "स्थानीय पता",
-    "localPort": "स्थानीय पोर्ट",
-    "localSaveError": "स्थानीय क्लाइंट टनल सहेजने में विफल",
-    "localSaved": "क्लाइंट टनलें सहेजी गईं",
-    "manualControlError": "टनल स्थिति अपडेट करने में विफल।",
-    "maxRetries": "अधिकतम पुनर्प्रयास",
-    "mode": "मोड",
-    "nextRetryIn": "अगला पुनः प्रयास {{seconds}} सेकंड में",
-    "noClientTunnels": "इस डेस्कटॉप पर कोई क्लाइंट टनल कॉन्फ़िगर नहीं है।",
-    "noHostSelected": "कोई होस्ट चयनित नहीं",
-    "noSshTunnels": "कोई SSH टनल नहीं",
-    "port": "पोर्ट",
-    "remoteBindAddress": "रिमोट बाइंड पता",
-    "remoteHost": "दूरस्थ होस्ट",
-    "remotePort": "दूरस्थ पोर्ट",
-    "retryInterval": "पुनर्प्रयास अंतराल (सेकंड)",
-    "route": "रूट:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → SOCKS via {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} वाया {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} on {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "परीक्षण करें",
-    "tunnelName": "टनल का नाम",
-    "tunnelTestFailed": "टनल परीक्षण विफल",
-    "tunnelTestSucceeded": "टनल परीक्षण सफल",
-    "type": "टनल प्रकार",
-    "typeDynamic": "डायनामिक (-D)",
-    "typeLocal": "स्थानीय (-L)",
-    "typeRemote": "दूरस्थ (-R)",
-    "working": "कार्यरत...",
-    "activeCount": "{{connected}}/{{total}} सक्रिय",
-    "listensOn": "लोकलहोस्ट से बंधा हुआ:{{port}}",
-    "socksProxy": "SOCKS5 प्रॉक्सी",
-    "waiting": "इंतज़ार में",
-    "remoteSessionExpired": "रिमोट सिंक सत्र समाप्त हो गया है। रिमोट सिंक से पुनः कनेक्ट करें और दोबारा प्रयास करें।",
-    "activeTunnels": "सक्रिय टनल",
-    "start": "शुरू करें",
-    "stop": "बंद करें",
-    "authTitle": "टनल प्रमाणीकरण",
-    "authRetry": "पिछला कोड स्वीकार नहीं किया गया। कृपया नया कोड दर्ज करें।",
-    "authAnswer": "प्रमाणीकरण प्रतिक्रिया",
-    "authContinue": "जारी रखें"
-  },
-  "permissions": {
-    "use": {
-      "title": "सुरंगों का उपयोग करें",
-      "description": "एसएसएच टनल को शुरू करें, रोकें और देखें, और क्लाइंट टनल प्रीसेट को सेव करें।"
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "सुरंगों को सक्षम करें",
-        "description": "इस होस्ट के माध्यम से SSH टनल स्थापित करें।"
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "टनलें",
-    "feature_tunnels_desc": "सर्वर के माध्यम से पोर्ट को फॉरवर्ड करके उन सेवाओं तक पहुंचें जो उपलब्ध नहीं हैं।"
-  }
-}
diff --git a/plugins/tunnels/locales/translated/hu_HU.json b/plugins/tunnels/locales/translated/hu_HU.json
deleted file mode 100644
index 153325370..000000000
--- a/plugins/tunnels/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Alagút hozzáadása",
-    "autoStartDesc": "Automatikus csatlakozás ehhez az alagúthoz, amikor a gazdagép betöltődik",
-    "autoStartLabel": "Automatikus indítás",
-    "connectBtn": "Csatlakozás",
-    "disconnectBtn": "Leválasztás",
-    "enableTunneling": "Alagútkezelés engedélyezése",
-    "enableTunnelingDesc": "SSH alagút funkció engedélyezése ehhez a gazdagéphez",
-    "endpointHost": "Végponti gazdagép",
-    "endpointHostPlaceholder": "Ugyanaz a gép, SSH-gép vagy elérhető gép/IP-cím",
-    "endpointPort": "Végponti port",
-    "failedToConnectTunnel": "Sikertelen csatlakozás",
-    "failedToDisconnectTunnel": "Nem sikerült lecsatlakozni",
-    "maxRetries": "Max. újrapróbálkozások",
-    "noTunnelsConfigured": "Nincsenek konfigurált alagutak.",
-    "retryIntervalS": "Újrapróbálkozási intervallum (s)",
-    "serverTunnelsSection": "Szerver alagutak",
-    "sourcePort": "Forrásport",
-    "tabTunnels": "Alagutak",
-    "tunnelConnecting": "Alagút összeköt...",
-    "tunnelDisconnected": "Alagút leválasztva",
-    "tunnelLabel": "Alagút {{number}}",
-    "tunnelModeDynamicDesc": "Hozz létre egy SOCKS5 proxyt egy helyi porton a dinamikus porttovábbításhoz.",
-    "tunnelModeLocalDesc": "Továbbítson egy helyi portot a távoli szerveren (vagy egy onnan elérhető gépen) lévő portra.",
-    "tunnelModeRemoteDesc": "Továbbítsd a távoli szerver egyik portját a saját gépeden lévő helyi portra.",
-    "tunnelRequirementsText": "Az SSH szervernek a /etc/ssh/sshd_config fájlban be kell állítania a GatewayPorts yes, az AllowTcpForwarding yes és a PermitRootLogin yes értékeket.",
-    "tunnelSettings": "Alagútbeállítások",
-    "tunnelType": "Alagút típusa",
-    "bindHost": "Kötőállomás",
-    "docsLink": "Dokumentumok megtekintése",
-    "hostNotFound": "Nem található gazdagép",
-    "loadingHost": "Gazdagép betöltése..."
-  },
-  "nav": {
-    "portForwarding": "Szállítmányozás",
-    "tunnels": "Alagutak"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (helyben hallgatható)",
-    "localTargetHost": "127.0.0.1 (cél ezen a számítógépen)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (figyelés a végponton)",
-    "remoteTargetHost": "127.0.0.1 (cél a végponttól)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (SOCKS figyelő)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "{{count}} helyi kliens alagút(ok) konfigurálva ezen az asztalon.",
-    "c2sLoadPreset": "Terhelés",
-    "c2sNoPresetSelected": "Nincs kiválasztva előbeállítás",
-    "c2sNoPresets": "Nincsenek mentett előbeállítások",
-    "c2sPresetDeleted": "Kliens alagút preset törölve",
-    "c2sPresetLoadError": "Nem sikerült betölteni a kliens alagút előbeállításait",
-    "c2sPresetLoaded": "A kliens alagút presetje helyben betöltött",
-    "c2sPresetName": "Előbeállítás neve",
-    "c2sPresetNamePlaceholder": "Ügyfél előre beállított neve",
-    "c2sPresetRenamed": "Ügyfél alagút preset átnevezve",
-    "c2sPresetSaved": "Kliens alagút előre beállított értéke mentve",
-    "c2sPresetSyncNote": "Az előbeállítások explicit pillanatképek; egyik betöltése felülírja az asztali kliens helyi kliens alagútlistáját.",
-    "c2sPresetToLoad": "Betöltendő előbeállítás",
-    "c2sTunnelPresets": "Kliens alagút előbeállításai",
-    "c2sTunnelPresetsUnavailable": "Az ügyfélalagút-előbeállítások csak az asztali kliensben érhetők el.",
-    "c2sPresetRenameError": "Nem sikerült átnevezni az előbeállítást",
-    "c2sPresetDeleteError": "Nem sikerült törölni az előbeállítást"
-  },
-  "tunnels": {
-    "attempt": "{{current}} kísérlet a {{max}}-ből",
-    "autoNameClientDynamic": "ZOKNIK {{localPort}} via {{endpoint}}",
-    "autoNameClientLocal": "Lokális {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → helyi {{localPort}}",
-    "autoStart": "Automatikus indítás",
-    "cancel": "Mégsem",
-    "canceling": "Lemondás...",
-    "clientAutoStartDesc": "Akkor indul el, amikor ez az asztali kliens megnyílik és csatlakoztatva marad.",
-    "clientManualStartDesc": "Használd a Start és Stop gombokat ebből a sorból. A Termix nem nyitja meg automatikusan.",
-    "clientRemoteServerNote": "A távoli továbbításhoz szükség lehet az AllowTcpForwarding és a GatewayPorts paraméterekre a végponti SSH-kiszolgálón. A távoli port bezárul, amikor ez az asztal lecsatlakozik.",
-    "clientTunnelStarted": "Ügyfélalagút elindult",
-    "clientTunnelStopped": "Kliens alagút leállt",
-    "clientTunnels": "Ügyfél alagutak",
-    "connected": "Csatlakoztatva",
-    "connecting": "Kapcsolódás...",
-    "createFirstTunnelMessage": "Még nem hozott létre SSH alagutakat. A kezdéshez konfigurálja az alagútkapcsolatokat a Host Managerben.",
-    "currentHostPort": "Jelenlegi host port",
-    "destination": "Rendeltetési hely",
-    "destinationAddress": "Célcím",
-    "destinationPort": "Célkikötő",
-    "disconnected": "Szétkapcsolt",
-    "duplicateAutoStartBind": "Csak egy automatikusan induló kliens alagút használhatja a {{bind}} kapcsolót.",
-    "endpointPort": "Végponti port",
-    "endpointSshHost": "Végpont SSH-gazdagép",
-    "endpointSshHostPlaceholder": "Válasszon ki egy konfigurált gazdagépet",
-    "endpointSshHostRequired": "Válasszon ki egy végponti SSH-hosztot minden kliens alagúthoz.",
-    "error": "Hiba",
-    "forwardDescriptionClientDynamic": "SOCKS a helyi {{sourcePort}} porton.",
-    "forwardDescriptionClientLocal": "Helyi {{sourcePort}} → távoli {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Távoli {{sourcePort}} → helyi {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS a jelenlegi gépen {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Aktuális hoszt {{sourcePort}} → végpont {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Végpont {{endpointPort}} → aktuális gazdagép {{sourcePort}}.",
-    "host": "Házigazda",
-    "intermediateHost": "Köztes gazda",
-    "invalidBindIp": "A helyi IP-címnek érvényes IPv4-címnek kell lennie.",
-    "invalidEndpointPort": "A végpont portjának 1 és 65535 között kell lennie.",
-    "invalidLocalPort": "A helyi portnak 1 és 65535 között kell lennie.",
-    "invalidLocalTargetIp": "A helyi cél IP-címnek érvényes IPv4-címnek kell lennie.",
-    "invalidLocalTargetPort": "A helyi célportnak 1 és 65535 között kell lennie.",
-    "invalidRemoteAddress": "Távoli cím megadása kötelező.",
-    "invalidRemotePort": "A távoli portnak 1 és 65535 között kell lennie.",
-    "lastError": "Utolsó hiba",
-    "lastStarted": "Utolsó indítás",
-    "lastTested": "Utolsó tesztelés",
-    "localAddress": "Helyi cím",
-    "localPort": "Helyi kikötő",
-    "localSaveError": "Nem sikerült menteni a helyi kliens alagutak.",
-    "localSaved": "Kliens alagutak mentve",
-    "manualControlError": "Nem sikerült frissíteni az alagút állapotát.",
-    "maxRetries": "Max. újrapróbálkozások",
-    "mode": "Mód",
-    "nextRetryIn": "Következő újrapróbálkozás {{seconds}} másodperc múlva",
-    "noClientTunnels": "Nincsenek kliens alagutak konfigurálva ezen az asztalon.",
-    "noHostSelected": "Nincs kiválasztva gazdagép",
-    "noSshTunnels": "Nincsenek SSH alagutak",
-    "port": "Kikötő",
-    "remoteBindAddress": "Távoli kötési cím",
-    "remoteHost": "Távoli gép",
-    "remotePort": "Távoli port",
-    "retryInterval": "Újrapróbálkozási intervallum (másodperc)",
-    "route": "Útvonal:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → ZOKNIK {{endpoint}}-on keresztül",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} {{endpoint}} útvonalon",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} itt: {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Teszt",
-    "tunnelName": "Alagút neve",
-    "tunnelTestFailed": "Alagútteszt sikertelen",
-    "tunnelTestSucceeded": "Alagútteszt sikeres",
-    "type": "Alagút típusa",
-    "typeDynamic": "Dinamikus (-D)",
-    "typeLocal": "Helyi (-L)",
-    "typeRemote": "Távoli (-R)",
-    "working": "Dolgozó...",
-    "activeCount": "{{connected}}/{{total}} aktív",
-    "listensOn": "Localhosthoz kötve:{{port}}",
-    "socksProxy": "SOCKS5 proxy",
-    "waiting": "Várakozás",
-    "remoteSessionExpired": "A távoli szinkronizálási munkamenet lejárt. Csatlakoztassa újra a távoli szinkronizálást, és próbálja újra.",
-    "activeTunnels": "Aktív alagutak",
-    "start": "Indul",
-    "stop": "Stop",
-    "authTitle": "Alagút-hitelesítés",
-    "authRetry": "Az előző kódot nem fogadták el. Adjon meg egy új kódot.",
-    "authAnswer": "Hitelesítési válasz",
-    "authContinue": "Folytatás"
-  },
-  "permissions": {
-    "use": {
-      "title": "Használjon alagutakat",
-      "description": "SSH alagutak indítása, leállítása és figyelése, valamint kliens alagút-előbeállítások mentése."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Alagutak engedélyezése",
-        "description": "SSH alagutakat kell beállítani ezen a hoszton keresztül."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Alagutak",
-    "feature_tunnels_desc": "Portok továbbítása egy szerveren keresztül a nem elérhető szolgáltatások eléréséhez."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/id_ID.json b/plugins/tunnels/locales/translated/id_ID.json
deleted file mode 100644
index 3d3d19f23..000000000
--- a/plugins/tunnels/locales/translated/id_ID.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Tambahkan Tunnel",
-    "autoStartDesc": "Terowongan ini akan terhubung secara otomatis saat host dimuat.",
-    "autoStartLabel": "Mulai otomatis",
-    "connectBtn": "Menghubungkan",
-    "disconnectBtn": "Memutuskan",
-    "enableTunneling": "Aktifkan Tunneling",
-    "enableTunnelingDesc": "Aktifkan fungsi terowongan SSH untuk host ini.",
-    "endpointHost": "Host Titik Akhir",
-    "endpointHostPlaceholder": "Host yang sama, host SSH, atau host/IP yang dapat dijangkau",
-    "endpointPort": "Port Titik Akhir",
-    "failedToConnectTunnel": "Gagal terhubung",
-    "failedToDisconnectTunnel": "Gagal memutuskan koneksi",
-    "maxRetries": "Jumlah Percobaan Maksimum",
-    "noTunnelsConfigured": "Tidak ada terowongan yang dikonfigurasi.",
-    "retryIntervalS": "Interval Percobaan Ulang (detik)",
-    "serverTunnelsSection": "Terowongan Server",
-    "sourcePort": "Port Sumber",
-    "tabTunnels": "Tunnels",
-    "tunnelConnecting": "Terowongan penghubung...",
-    "tunnelDisconnected": "Terowongan terputus",
-    "tunnelLabel": "Terowongan {{number}}",
-    "tunnelModeDynamicDesc": "Buat proxy SOCKS5 pada port lokal untuk penerusan port dinamis.",
-    "tunnelModeLocalDesc": "Teruskan port lokal ke port pada server jarak jauh (atau host yang dapat dijangkau dari server tersebut).",
-    "tunnelModeRemoteDesc": "Teruskan port pada server jarak jauh kembali ke port lokal pada mesin Anda.",
-    "tunnelRequirementsText": "Server SSH harus memiliki pengaturan GatewayPorts yes, AllowTcpForwarding yes, dan PermitRootLogin yes di /etc/ssh/sshd_config.",
-    "tunnelSettings": "Pengaturan Terowongan",
-    "tunnelType": "Jenis Tunnel",
-    "bindHost": "Host Terikat",
-    "docsLink": "Lihat dokumen",
-    "hostNotFound": "Host tidak ditemukan",
-    "loadingHost": "Memuat host..."
-  },
-  "nav": {
-    "portForwarding": "Meneruskan",
-    "tunnels": "Tunnels"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (dengarkan secara lokal)",
-    "localTargetHost": "127.0.0.1 (target pada komputer ini)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (dengarkan di titik akhir)",
-    "remoteTargetHost": "127.0.0.1 (target dari titik akhir)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (Pendengar SOCKS)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "{{count}} terowongan klien lokal yang dikonfigurasi pada desktop ini.",
-    "c2sLoadPreset": "Memuat",
-    "c2sNoPresetSelected": "Tidak ada preset yang dipilih.",
-    "c2sNoPresets": "Tidak ada preset yang tersimpan.",
-    "c2sPresetDeleted": "Pengaturan awal terowongan klien telah dihapus.",
-    "c2sPresetLoadError": "Gagal memuat preset terowongan klien",
-    "c2sPresetLoaded": "Pengaturan terowongan klien dimuat secara lokal.",
-    "c2sPresetName": "Nama Preset",
-    "c2sPresetNamePlaceholder": "Nama preset klien",
-    "c2sPresetRenamed": "Pengaturan terowongan klien diubah namanya.",
-    "c2sPresetSaved": "Pengaturan terowongan klien tersimpan.",
-    "c2sPresetSyncNote": "Preset adalah snapshot eksplisit; memuat salah satunya akan mengganti daftar terowongan klien lokal klien desktop ini.",
-    "c2sPresetToLoad": "Preset untuk Memuat",
-    "c2sTunnelPresets": "Pengaturan Awal Terowongan Klien",
-    "c2sTunnelPresetsUnavailable": "Pengaturan terowongan klien hanya tersedia di klien desktop.",
-    "c2sPresetRenameError": "Gagal mengganti nama preset.",
-    "c2sPresetDeleteError": "Gagal menghapus preset."
-  },
-  "tunnels": {
-    "attempt": "Percobaan {{current}} dari {{max}}",
-    "autoNameClientDynamic": "KAOS KAKI {{localPort}} melalui {{endpoint}}",
-    "autoNameClientLocal": "Lokal {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → lokal {{localPort}}",
-    "autoStart": "Mulai Otomatis",
-    "cancel": "Membatalkan",
-    "canceling": "Membatalkan...",
-    "clientAutoStartDesc": "Proses dimulai saat klien desktop ini dibuka dan tetap terhubung.",
-    "clientManualStartDesc": "Gunakan tombol Mulai dan Berhenti dari baris ini. Termix tidak akan membukanya secara otomatis.",
-    "clientRemoteServerNote": "Penerusan jarak jauh mungkin memerlukan AllowTcpForwarding dan GatewayPorts pada server SSH titik akhir. Port jarak jauh akan tertutup ketika desktop ini terputus.",
-    "clientTunnelStarted": "Terowongan klien telah dimulai.",
-    "clientTunnelStopped": "Terowongan klien dihentikan",
-    "clientTunnels": "Terowongan Klien",
-    "connected": "Terhubung",
-    "connecting": "Menghubungkan...",
-    "createFirstTunnelMessage": "Anda belum membuat tunnel SSH apa pun. Konfigurasikan koneksi tunnel di Host Manager untuk memulai.",
-    "currentHostPort": "Port Host Saat Ini",
-    "destination": "Tujuan",
-    "destinationAddress": "Alamat Tujuan",
-    "destinationPort": "Pelabuhan Tujuan",
-    "disconnected": "Terputus",
-    "duplicateAutoStartBind": "Hanya satu terowongan klien auto-start yang dapat menggunakan {{bind}}.",
-    "endpointPort": "Port Titik Akhir",
-    "endpointSshHost": "Host SSH Titik Akhir",
-    "endpointSshHostPlaceholder": "Pilih host yang telah dikonfigurasi.",
-    "endpointSshHostRequired": "Pilih host SSH titik akhir untuk setiap terowongan klien.",
-    "error": "Kesalahan",
-    "forwardDescriptionClientDynamic": "SOCKS pada port lokal {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "Lokal {{sourcePort}} → jarak jauh {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Jarak jauh {{sourcePort}} → lokal {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS pada host saat ini {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Host saat ini {{sourcePort}} → titik akhir {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Titik akhir {{endpointPort}} → host saat ini {{sourcePort}}.",
-    "host": "Tuan rumah",
-    "intermediateHost": "Inang Perantara",
-    "invalidBindIp": "IP lokal harus berupa alamat IPv4 yang valid.",
-    "invalidEndpointPort": "Port endpoint harus berada di antara 1 dan 65535.",
-    "invalidLocalPort": "Port lokal harus berada di antara 1 dan 65535.",
-    "invalidLocalTargetIp": "Alamat IP target lokal harus berupa alamat IPv4 yang valid.",
-    "invalidLocalTargetPort": "Port target lokal harus berada di antara 1 dan 65535.",
-    "invalidRemoteAddress": "Alamat jarak jauh diperlukan.",
-    "invalidRemotePort": "Port jarak jauh harus berada di antara 1 dan 65535.",
-    "lastError": "Kesalahan terakhir",
-    "lastStarted": "Terakhir dimulai",
-    "lastTested": "Terakhir diuji",
-    "localAddress": "Alamat Lokal",
-    "localPort": "Pelabuhan Lokal",
-    "localSaveError": "Gagal menyimpan terowongan klien lokal",
-    "localSaved": "Terowongan klien tersimpan",
-    "manualControlError": "Gagal memperbarui status terowongan.",
-    "maxRetries": "Jumlah Percobaan Maksimum",
-    "mode": "Mode",
-    "nextRetryIn": "Percobaan berikutnya dalam {{seconds}} detik",
-    "noClientTunnels": "Tidak ada terowongan klien yang dikonfigurasi pada desktop ini.",
-    "noHostSelected": "Tidak ada pembawa acara yang dipilih.",
-    "noSshTunnels": "Tidak ada tunnel SSH",
-    "port": "Pelabuhan",
-    "remoteBindAddress": "Alamat Pengikatan Jarak Jauh",
-    "remoteHost": "Host Jarak Jauh",
-    "remotePort": "Port Jarak Jauh",
-    "retryInterval": "Interval Percobaan Ulang (detik)",
-    "route": "Rute:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → KAOS KAKI melalui {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} melalui {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} pada {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Tes",
-    "tunnelName": "Nama Tunnel",
-    "tunnelTestFailed": "Uji terowongan gagal",
-    "tunnelTestSucceeded": "Uji terowongan berhasil",
-    "type": "Jenis Tunnel",
-    "typeDynamic": "Dinamis (-D)",
-    "typeLocal": "Lokal (-L)",
-    "typeRemote": "Jarak Jauh (-R)",
-    "working": "Bekerja...",
-    "activeCount": "{{connected}}/{{total}} aktif",
-    "listensOn": "Terhubung ke localhost:{{port}}",
-    "socksProxy": "Proxy SOCKS5",
-    "waiting": "Menunggu",
-    "remoteSessionExpired": "Sesi Sinkronisasi Jarak Jauh telah berakhir. Sambungkan kembali Sinkronisasi Jarak Jauh dan coba lagi.",
-    "activeTunnels": "Terowongan Aktif",
-    "start": "Awal",
-    "stop": "Berhenti",
-    "authTitle": "Autentikasi terowongan",
-    "authRetry": "Kode sebelumnya tidak diterima. Masukkan kode baru.",
-    "authAnswer": "Respons otentikasi",
-    "authContinue": "Melanjutkan"
-  },
-  "permissions": {
-    "use": {
-      "title": "Gunakan terowongan",
-      "description": "Memulai, menghentikan, dan memantau terowongan SSH, serta menyimpan pengaturan awal terowongan klien."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Aktifkan terowongan",
-        "description": "Buat terowongan SSH melalui host ini."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Tunnels",
-    "feature_tunnels_desc": "Meneruskan port melalui server untuk mengakses layanan yang tidak terekspos."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/it_IT.json b/plugins/tunnels/locales/translated/it_IT.json
deleted file mode 100644
index 473e5d298..000000000
--- a/plugins/tunnels/locales/translated/it_IT.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Aggiungi tunnel",
-    "autoStartDesc": "Connetti automaticamente questo tunnel all'avvio dell'host",
-    "autoStartLabel": "Avvio automatico",
-    "connectBtn": "Connetti",
-    "disconnectBtn": "Disconnetti",
-    "enableTunneling": "Abilita tunneling",
-    "enableTunnelingDesc": "Abilita la funzionalità di tunnel SSH per questo host",
-    "endpointHost": "Host di destinazione",
-    "endpointHostPlaceholder": "Stesso host, host SSH o host/IP raggiungibile",
-    "endpointPort": "Porta di destinazione",
-    "failedToConnectTunnel": "Connessione fallita",
-    "failedToDisconnectTunnel": "Disconnessione fallita",
-    "maxRetries": "Tentativi massimi",
-    "noTunnelsConfigured": "Nessun tunnel configurato.",
-    "retryIntervalS": "Intervallo tentativi (s)",
-    "serverTunnelsSection": "Tunnel server",
-    "sourcePort": "Porta sorgente",
-    "tabTunnels": "Tunnel",
-    "tunnelConnecting": "Connessione tunnel in corso...",
-    "tunnelDisconnected": "Tunnel disconnesso",
-    "tunnelLabel": "Tunnel {{number}}",
-    "tunnelModeDynamicDesc": "Crea un proxy SOCKS5 su una porta locale per il port forwarding dinamico.",
-    "tunnelModeLocalDesc": "Inoltra una porta locale a una porta sul server remoto (o a un host raggiungibile da esso).",
-    "tunnelModeRemoteDesc": "Inoltra una porta sul server remoto verso una porta locale sulla tua macchina.",
-    "tunnelRequirementsText": "Il server SSH deve avere GatewayPorts yes, AllowTcpForwarding yes e PermitRootLogin yes impostati in /etc/ssh/sshd_config.",
-    "tunnelSettings": "Impostazioni tunnel",
-    "tunnelType": "Tipo di tunnel",
-    "bindHost": "Host di bind",
-    "docsLink": "Visualizza documentazione",
-    "hostNotFound": "Host non trovato",
-    "loadingHost": "Caricamento host..."
-  },
-  "nav": {
-    "portForwarding": "Inoltro",
-    "tunnels": "Tunnel"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (ascolta localmente)",
-    "localTargetHost": "127.0.0.1 (destinazione su questo computer)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (ascolta sull'endpoint)",
-    "remoteTargetHost": "127.0.0.1 (destinazione dall'endpoint)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (listener SOCKS)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "{{count}} tunnel client locale configurato/i su questo desktop.",
-    "c2sLoadPreset": "Carica",
-    "c2sNoPresetSelected": "Nessuna preimpostazione selezionata",
-    "c2sNoPresets": "Nessuna preimpostazione salvata",
-    "c2sPresetDeleted": "Preimpostazione tunnel client eliminata",
-    "c2sPresetLoadError": "Caricamento delle preimpostazioni tunnel client non riuscito",
-    "c2sPresetLoaded": "Preimpostazione tunnel client caricata localmente",
-    "c2sPresetName": "Nome preimpostazione",
-    "c2sPresetNamePlaceholder": "Nome preimpostazione client",
-    "c2sPresetRenamed": "Preimpostazione tunnel client rinominata",
-    "c2sPresetSaved": "Preimpostazione tunnel client salvata",
-    "c2sPresetSyncNote": "Le preimpostazioni sono snapshot espliciti; caricandone una si sostituisce l'elenco dei tunnel client locali di questo desktop.",
-    "c2sPresetToLoad": "Preimpostazione da caricare",
-    "c2sTunnelPresets": "Preimpostazioni tunnel client",
-    "c2sTunnelPresetsUnavailable": "Le preimpostazioni tunnel client sono disponibili solo nel client desktop.",
-    "c2sPresetRenameError": "Impossibile rinominare il preset",
-    "c2sPresetDeleteError": "Impossibile eliminare il preset"
-  },
-  "tunnels": {
-    "attempt": "Tentativo {{current}} di {{max}}",
-    "autoNameClientDynamic": "SOCKS {{localPort}} via {{endpoint}}",
-    "autoNameClientLocal": "Locale {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → locale {{localPort}}",
-    "autoStart": "Avvio automatico",
-    "cancel": "Annulla",
-    "canceling": "Annullamento in corso...",
-    "clientAutoStartDesc": "Si avvia all'apertura del client desktop e rimane connesso.",
-    "clientManualStartDesc": "Usa Avvia e Arresta da questa riga. Termix non lo avvierà automaticamente.",
-    "clientRemoteServerNote": "L'inoltro remoto potrebbe richiedere AllowTcpForwarding e GatewayPorts sul server SSH endpoint. La porta remota viene chiusa quando questo desktop si disconnette.",
-    "clientTunnelStarted": "Tunnel client avviato",
-    "clientTunnelStopped": "Tunnel client arrestato",
-    "clientTunnels": "Tunnel client",
-    "connected": "Connesso",
-    "connecting": "Connessione in corso...",
-    "createFirstTunnelMessage": "Non hai ancora creato nessun tunnel SSH. Configura le connessioni tunnel nel Gestore host per iniziare.",
-    "currentHostPort": "Porta host corrente",
-    "destination": "Destinazione",
-    "destinationAddress": "Indirizzo di destinazione",
-    "destinationPort": "Porto di destinazione",
-    "disconnected": "Disconnesso",
-    "duplicateAutoStartBind": "Solo un tunnel client con avvio automatico può utilizzare {{bind}}.",
-    "endpointPort": "Porta endpoint",
-    "endpointSshHost": "Host SSH endpoint",
-    "endpointSshHostPlaceholder": "Seleziona un host configurato",
-    "endpointSshHostRequired": "Seleziona un host SSH endpoint per ogni tunnel client.",
-    "error": "Errore",
-    "forwardDescriptionClientDynamic": "SOCKS su porta locale {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "Locale {{sourcePort}} → remoto {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Remoto {{sourcePort}} → locale {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS su host attuale {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Host attuale {{sourcePort}} → endpoint {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Endpoint {{endpointPort}} → host attuale {{sourcePort}}.",
-    "host": "Host",
-    "intermediateHost": "Host intermedio",
-    "invalidBindIp": "L'IP locale deve essere un indirizzo IPv4 valido.",
-    "invalidEndpointPort": "La porta endpoint deve essere compresa tra 1 e 65535.",
-    "invalidLocalPort": "La porta locale deve essere compresa tra 1 e 65535.",
-    "invalidLocalTargetIp": "L'IP di destinazione locale deve essere un indirizzo IPv4 valido.",
-    "invalidLocalTargetPort": "La porta di destinazione locale deve essere compresa tra 1 e 65535.",
-    "invalidRemoteAddress": "È necessario un indirizzo remoto.",
-    "invalidRemotePort": "La porta remota deve essere compresa tra 1 e 65535.",
-    "lastError": "Ultimo errore",
-    "lastStarted": "Ultimo avvio",
-    "lastTested": "Ultimo test",
-    "localAddress": "Indirizzo locale",
-    "localPort": "Porta locale",
-    "localSaveError": "Salvataggio dei tunnel client locali non riuscito",
-    "localSaved": "Tunnel client salvati",
-    "manualControlError": "Aggiornamento dello stato del tunnel non riuscito.",
-    "maxRetries": "Tentativi massimi",
-    "mode": "Modalità",
-    "nextRetryIn": "Prossimo tentativo tra {{seconds}} secondi",
-    "noClientTunnels": "Nessun tunnel client configurato su questo desktop.",
-    "noHostSelected": "Nessun host selezionato",
-    "noSshTunnels": "Nessun tunnel SSH",
-    "port": "Porta",
-    "remoteBindAddress": "Indirizzo di associazione remota",
-    "remoteHost": "Host remoto",
-    "remotePort": "Porta remota",
-    "retryInterval": "Intervallo tra tentativi (secondi)",
-    "route": "Percorso:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → SOCKS via {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} via {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} su {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Verifica",
-    "tunnelName": "Nome tunnel",
-    "tunnelTestFailed": "Test del tunnel fallito",
-    "tunnelTestSucceeded": "Test del tunnel riuscito",
-    "type": "Tipo di tunnel",
-    "typeDynamic": "Dinamico (-D)",
-    "typeLocal": "Locale (-L)",
-    "typeRemote": "Remoto (-R)",
-    "working": "In corso...",
-    "activeCount": "{{connected}}/{{total}} attivo",
-    "listensOn": "Collegato a localhost:{{port}}",
-    "socksProxy": "proxy SOCKS5",
-    "waiting": "In attesa",
-    "remoteSessionExpired": "La sessione di sincronizzazione remota è scaduta. Riconnettiti alla sincronizzazione remota e riprova.",
-    "activeTunnels": "Tunnel attivi",
-    "start": "Avvia",
-    "stop": "Ferma",
-    "authTitle": "Autenticazione del tunnel",
-    "authRetry": "Il codice precedente non è stato accettato. Inserisci un nuovo codice.",
-    "authAnswer": "Risposta di autenticazione",
-    "authContinue": "Continua"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilizzare i tunnel",
-      "description": "Avvia, arresta e monitora i tunnel SSH e salva le impostazioni predefinite dei tunnel client."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Abilita i tunnel",
-        "description": "Configura i tunnel SSH attraverso questo host."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Tunnel",
-    "feature_tunnels_desc": "Inoltra le porte attraverso un server per raggiungere servizi non esposti."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/ja_JP.json b/plugins/tunnels/locales/translated/ja_JP.json
deleted file mode 100644
index 30f8e52e3..000000000
--- a/plugins/tunnels/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "トンネルを追加",
-    "autoStartDesc": "ホスト読み込み時にこのトンネルを自動接続します。",
-    "autoStartLabel": "自動起動",
-    "connectBtn": "接続",
-    "disconnectBtn": "切断",
-    "enableTunneling": "トンネリングを有効にする",
-    "enableTunnelingDesc": "このホストのSSHトンネル機能を有効にします",
-    "endpointHost": "エンドポイントホスト",
-    "endpointHostPlaceholder": "同じホスト、SSHホスト、または到達可能なホスト/IP",
-    "endpointPort": "エンドポイントポート",
-    "failedToConnectTunnel": "接続に失敗しました",
-    "failedToDisconnectTunnel": "切断に失敗しました",
-    "maxRetries": "最大再試行回数",
-    "noTunnelsConfigured": "トンネルが設定されていません",
-    "retryIntervalS": "再試行間隔（秒）",
-    "serverTunnelsSection": "サーバートンネル",
-    "sourcePort": "ソースポート",
-    "tabTunnels": "トンネル",
-    "tunnelConnecting": "トンネル接続中...",
-    "tunnelDisconnected": "トンネル切断",
-    "tunnelLabel": "トンネル {{number}}",
-    "tunnelModeDynamicDesc": "動的ポート転送用にローカルポートにSOCKS5プロキシを作成します。",
-    "tunnelModeLocalDesc": "ローカルポートをリモートサーバー（またはそこから到達可能なホスト）のポートに転送します。",
-    "tunnelModeRemoteDesc": "リモートサーバーのポートをローカルマシンのポートに転送します。",
-    "tunnelRequirementsText": "SSHサーバーの/etc/ssh/sshd_configに、GatewayPorts yes、AllowTcpForwarding yes、PermitRootLogin yesが設定されている必要があります。",
-    "tunnelSettings": "トンネル設定",
-    "tunnelType": "トンネルの種類",
-    "bindHost": "バインドホスト",
-    "docsLink": "ドキュメントを表示",
-    "hostNotFound": "ホストが見つかりません",
-    "loadingHost": "ホストを読み込み中..."
-  },
-  "nav": {
-    "portForwarding": "転送",
-    "tunnels": "トンネル"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1（ローカルでリッスン）",
-    "localTargetHost": "127.0.0.1（このコンピューターのターゲット）",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1（エンドポイントでリッスン）",
-    "remoteTargetHost": "127.0.0.1（エンドポイントからのターゲット）",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (SOCKSリスナー)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "このデスクトップに{{count}}個のローカルクライアントトンネルが設定されています。",
-    "c2sLoadPreset": "読み込み",
-    "c2sNoPresetSelected": "プリセットが選択されていません",
-    "c2sNoPresets": "保存されたプリセットはありません",
-    "c2sPresetDeleted": "クライアントトンネルプリセットを削除しました",
-    "c2sPresetLoadError": "クライアントトンネルプリセットの読み込みに失敗しました",
-    "c2sPresetLoaded": "クライアントトンネルプリセットをローカルに読み込みました",
-    "c2sPresetName": "プリセット名",
-    "c2sPresetNamePlaceholder": "クライアントプリセット名",
-    "c2sPresetRenamed": "クライアントトンネルプリセットの名前を変更しました",
-    "c2sPresetSaved": "クライアントトンネルプリセットを保存しました",
-    "c2sPresetSyncNote": "プリセットは明示的なスナップショットです。読み込むと、このデスクトップクライアントのローカルクライアントトンネルリストが置き換えられます。",
-    "c2sPresetToLoad": "読み込むプリセット",
-    "c2sTunnelPresets": "クライアントトンネルプリセット",
-    "c2sTunnelPresetsUnavailable": "クライアントトンネルプリセットはデスクトップクライアントでのみ利用可能です。",
-    "c2sPresetRenameError": "プリセットの名前変更に失敗しました",
-    "c2sPresetDeleteError": "プリセットの削除に失敗しました"
-  },
-  "tunnels": {
-    "attempt": "試行 {{current}} / {{max}}",
-    "autoNameClientDynamic": "SOCKS {{localPort}} via {{endpoint}}",
-    "autoNameClientLocal": "ローカル {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → ローカル {{localPort}}",
-    "autoStart": "自動起動",
-    "cancel": "キャンセル",
-    "canceling": "キャンセル中...",
-    "clientAutoStartDesc": "デスクトップクライアントが起動すると自動的に接続し、接続を維持します。",
-    "clientManualStartDesc": "この行の開始/停止を使用します。Termixは自動的に起動しません。",
-    "clientRemoteServerNote": "リモート転送にはエンドポイントSSHサーバーでAllowTcpForwardingとGatewayPortsが必要な場合があります。このデスクトップが切断されるとリモートポートは閉じます。",
-    "clientTunnelStarted": "クライアントトンネルが起動しました",
-    "clientTunnelStopped": "クライアントトンネルが停止しました",
-    "clientTunnels": "クライアントトンネル",
-    "connected": "接続済み",
-    "connecting": "接続中...",
-    "createFirstTunnelMessage": "まだSSHトンネルが作成されていません。開始するにはホストマネージャーでトンネル接続を設定してください。",
-    "currentHostPort": "現在のホストポート",
-    "destination": "宛先",
-    "destinationAddress": "宛先住所",
-    "destinationPort": "目的地港",
-    "disconnected": "切断済み",
-    "duplicateAutoStartBind": "自動起動クライアントトンネルで同じ{{bind}}を使用できるのは1つだけです。",
-    "endpointPort": "エンドポイントポート",
-    "endpointSshHost": "エンドポイントSSHホスト",
-    "endpointSshHostPlaceholder": "設定済みのホストを選択",
-    "endpointSshHostRequired": "各クライアントトンネルにエンドポイントSSHホストを選択してください。",
-    "error": "エラー",
-    "forwardDescriptionClientDynamic": "ローカルポート {{sourcePort}} 上のSOCKS。",
-    "forwardDescriptionClientLocal": "ローカル {{sourcePort}} → リモート {{endpointPort}}。",
-    "forwardDescriptionClientRemote": "リモート {{sourcePort}} → ローカル {{endpointPort}}。",
-    "forwardDescriptionServerDynamic": "現在のホスト上のSOCKS {{sourcePort}}。",
-    "forwardDescriptionServerLocal": "現在のホスト {{sourcePort}} → エンドポイント {{endpointPort}}。",
-    "forwardDescriptionServerRemote": "エンドポイント {{endpointPort}} → 現在のホスト {{sourcePort}}。",
-    "host": "ホスト",
-    "intermediateHost": "中間宿主",
-    "invalidBindIp": "ローカルIPは有効なIPv4アドレスでなければなりません。",
-    "invalidEndpointPort": "エンドポイントポートは1～65535の間でなければなりません。",
-    "invalidLocalPort": "ローカルポートは1～65535の間でなければなりません。",
-    "invalidLocalTargetIp": "ローカルターゲットIPは有効なIPv4アドレスでなければなりません。",
-    "invalidLocalTargetPort": "ローカルターゲットポートは1～65535の間でなければなりません。",
-    "invalidRemoteAddress": "リモートアドレスが必要です。",
-    "invalidRemotePort": "リモートポートは1～65535の間でなければなりません。",
-    "lastError": "最終エラー",
-    "lastStarted": "最終起動日時",
-    "lastTested": "最終テスト日時",
-    "localAddress": "現地住所",
-    "localPort": "ローカルポート",
-    "localSaveError": "クライアントトンネルの保存に失敗しました",
-    "localSaved": "クライアントトンネルを保存しました",
-    "manualControlError": "トンネル状態の更新に失敗しました。",
-    "maxRetries": "最大再試行回数",
-    "mode": "モード",
-    "nextRetryIn": "{{seconds}} 秒後に再試行",
-    "noClientTunnels": "このデスクトップにはクライアントトンネルが設定されていません。",
-    "noHostSelected": "ホストが選択されていません",
-    "noSshTunnels": "SSHトンネルがありません",
-    "port": "ポート",
-    "remoteBindAddress": "リモートバインドアドレス",
-    "remoteHost": "リモートホスト",
-    "remotePort": "リモートポート",
-    "retryInterval": "再試行間隔 (秒)",
-    "route": "ルート:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → SOCKS via {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} 経由 {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} を {{endpoint}} 上で → {{localHost}}:{{localPort}}",
-    "test": "テスト",
-    "tunnelName": "トンネル名",
-    "tunnelTestFailed": "トンネルテストが失敗しました",
-    "tunnelTestSucceeded": "トンネルテストが成功しました",
-    "type": "トンネルタイプ",
-    "typeDynamic": "ダイナミック (-D)",
-    "typeLocal": "ローカル (-L)",
-    "typeRemote": "リモート (-R)",
-    "working": "処理中...",
-    "activeCount": "{{connected}}/{{total}} アクティブ",
-    "listensOn": "localhostにバインドされています:{{port}}",
-    "socksProxy": "SOCKS5プロキシ",
-    "waiting": "待っている",
-    "remoteSessionExpired": "リモート同期セッションの有効期限が切れました。リモート同期に再接続して、もう一度お試しください。",
-    "activeTunnels": "アクティブトンネル",
-    "start": "開始",
-    "stop": "停止",
-    "authTitle": "トンネル認証",
-    "authRetry": "以前のコードは受け付けられませんでした。新しいコードを入力してください。",
-    "authAnswer": "認証応答",
-    "authContinue": "続行"
-  },
-  "permissions": {
-    "use": {
-      "title": "トンネルを利用する",
-      "description": "SSHトンネルの開始、停止、監視、およびクライアントトンネルのプリセットの保存が可能です。"
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "トンネルを有効にする",
-        "description": "このホスト経由でSSHトンネルを設定してください。"
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "トンネル",
-    "feature_tunnels_desc": "公開されていないサービスにアクセスできるように、サーバー経由でポートを転送します。"
-  }
-}
diff --git a/plugins/tunnels/locales/translated/ko_KR.json b/plugins/tunnels/locales/translated/ko_KR.json
deleted file mode 100644
index 2bcacebed..000000000
--- a/plugins/tunnels/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "터널 추가",
-    "autoStartDesc": "호스트가 로드될 때 이 터널을 자동으로 연결합니다.",
-    "autoStartLabel": "자동 시작",
-    "connectBtn": "연결",
-    "disconnectBtn": "연결 해제",
-    "enableTunneling": "터널링 활성화",
-    "enableTunnelingDesc": "이 호스트에 대한 SSH 터널 기능을 활성화합니다",
-    "endpointHost": "엔드포인트 호스트",
-    "endpointHostPlaceholder": "동일 호스트, SSH 호스트 또는 접근 가능한 호스트/IP",
-    "endpointPort": "엔드포인트 포트",
-    "failedToConnectTunnel": "연결 실패",
-    "failedToDisconnectTunnel": "연결 해제 실패",
-    "maxRetries": "최대 재시도",
-    "noTunnelsConfigured": "구성된 터널이 없습니다",
-    "retryIntervalS": "재시도 간격 (초)",
-    "serverTunnelsSection": "서버 터널",
-    "sourcePort": "소스 포트",
-    "tabTunnels": "터널",
-    "tunnelConnecting": "터널 연결 중...",
-    "tunnelDisconnected": "터널 연결 끊김",
-    "tunnelLabel": "터널 {{number}}",
-    "tunnelModeDynamicDesc": "동적 포트 포워딩을 위해 로컬 포트에 SOCKS5 프록시를 생성합니다.",
-    "tunnelModeLocalDesc": "로컬 포트를 원격 서버(또는 해당 서버에서 접근 가능한 호스트)의 포트로 포워딩합니다.",
-    "tunnelModeRemoteDesc": "원격 서버의 포트를 내 컴퓨터의 로컬 포트로 역방향 포워딩합니다.",
-    "tunnelRequirementsText": "SSH 서버의 /etc/ssh/sshd_config에 GatewayPorts yes, AllowTcpForwarding yes, PermitRootLogin yes가 설정되어 있어야 합니다.",
-    "tunnelSettings": "터널 설정",
-    "tunnelType": "터널 유형",
-    "bindHost": "바인드 호스트",
-    "docsLink": "문서 보기",
-    "hostNotFound": "호스트를 찾을 수 없습니다",
-    "loadingHost": "호스트 로드 중..."
-  },
-  "nav": {
-    "portForwarding": "전송",
-    "tunnels": "터널"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (로컬에서 수신 대기)",
-    "localTargetHost": "127.0.0.1 (이 컴퓨터의 대상)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (엔드포인트에서 수신 대기)",
-    "remoteTargetHost": "127.0.0.1 (엔드포인트에서 대상 주소)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (SOCKS 리스너)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "이 데스크톱에 구성된 로컬 클라이언트 터널 {{count}}개.",
-    "c2sLoadPreset": "불러오기",
-    "c2sNoPresetSelected": "프리셋이 선택되지 않음",
-    "c2sNoPresets": "저장된 프리셋이 없음",
-    "c2sPresetDeleted": "클라이언트 터널 프리셋이 삭제되었습니다.",
-    "c2sPresetLoadError": "클라이언트 터널 프리셋을 불러오지 못했습니다.",
-    "c2sPresetLoaded": "클라이언트 터널 프리셋이 로컬에 불러와졌습니다.",
-    "c2sPresetName": "프리셋 이름",
-    "c2sPresetNamePlaceholder": "클라이언트 프리셋 이름",
-    "c2sPresetRenamed": "클라이언트 터널 프리셋의 이름이 변경되었습니다.",
-    "c2sPresetSaved": "클라이언트 터널 프리셋이 저장되었습니다.",
-    "c2sPresetSyncNote": "프리셋은 명시적 스냅샷입니다. 프리셋을 불러오면 이 데스크톱 클라이언트의 로컬 클라이언트 터널 목록이 대체됩니다.",
-    "c2sPresetToLoad": "불러올 프리셋",
-    "c2sTunnelPresets": "클라이언트 터널 프리셋",
-    "c2sTunnelPresetsUnavailable": "클라이언트 터널 프리셋은 데스크톱 클라이언트에서만 사용할 수 있습니다.",
-    "c2sPresetRenameError": "사전 설정 이름을 변경하는 데 실패했습니다.",
-    "c2sPresetDeleteError": "사전 설정을 삭제하는 데 실패했습니다."
-  },
-  "tunnels": {
-    "attempt": "시도 {{current}}/{{max}}",
-    "autoNameClientDynamic": "SOCKS {{localPort}} ({{endpoint}} 경유)",
-    "autoNameClientLocal": "로컬 {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → 로컬 {{localPort}}",
-    "autoStart": "자동 시작",
-    "cancel": "취소",
-    "canceling": "취소 중...",
-    "clientAutoStartDesc": "이 데스크톱 클라이언트가 열리면 자동 시작되고 연결을 유지합니다.",
-    "clientManualStartDesc": "이 행에서 시작 및 중지를 사용하세요. Termix가 자동으로 열지 않습니다.",
-    "clientRemoteServerNote": "원격 포워딩은 엔드포인트 SSH 서버에서 AllowTcpForwarding 및 GatewayPorts 설정이 필요할 수 있습니다. 이 데스크톱 연결이 끊어지면 원격 포트가 닫힙니다.",
-    "clientTunnelStarted": "클라이언트 터널 시작됨",
-    "clientTunnelStopped": "클라이언트 터널 중지됨",
-    "clientTunnels": "클라이언트 터널",
-    "connected": "연결됨",
-    "connecting": "연결 중...",
-    "createFirstTunnelMessage": "아직 SSH 터널을 생성하지 않았습니다. 시작하려면 호스트 관리자에서 터널 연결을 구성하세요.",
-    "currentHostPort": "현재 호스트 포트",
-    "destination": "목적지",
-    "destinationAddress": "목적지 주소",
-    "destinationPort": "목적지 항구",
-    "disconnected": "연결 끊김",
-    "duplicateAutoStartBind": "자동 시작 클라이언트 터널 중 하나만 {{bind}}를 사용할 수 있습니다.",
-    "endpointPort": "엔드포인트 포트",
-    "endpointSshHost": "엔드포인트 SSH 호스트",
-    "endpointSshHostPlaceholder": "설정된 호스트 선택",
-    "endpointSshHostRequired": "각 클라이언트 터널에 엔드포인트 SSH 호스트를 선택하세요.",
-    "error": "오류",
-    "forwardDescriptionClientDynamic": "로컬 포트 {{sourcePort}}에서 SOCKS.",
-    "forwardDescriptionClientLocal": "로컬 {{sourcePort}} → 원격 {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "원격 {{sourcePort}} → 로컬 {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "현재 호스트 {{sourcePort}}에서 SOCKS.",
-    "forwardDescriptionServerLocal": "현재 호스트 {{sourcePort}} → 엔드포인트 {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "엔드포인트 {{endpointPort}} → 현재 호스트 {{sourcePort}}.",
-    "host": "호스트",
-    "intermediateHost": "중간 호스트",
-    "invalidBindIp": "로컬 IP는 유효한 IPv4 주소여야 합니다.",
-    "invalidEndpointPort": "엔드포인트 포트는 1에서 65535 사이여야 합니다.",
-    "invalidLocalPort": "로컬 포트는 1에서 65535 사이여야 합니다.",
-    "invalidLocalTargetIp": "로컬 대상 IP는 유효한 IPv4 주소여야 합니다.",
-    "invalidLocalTargetPort": "로컬 대상 포트는 1에서 65535 사이여야 합니다.",
-    "invalidRemoteAddress": "원격 주소가 필요합니다.",
-    "invalidRemotePort": "원격 포트는 1에서 65535 사이여야 합니다.",
-    "lastError": "마지막 오류",
-    "lastStarted": "마지막 시작",
-    "lastTested": "마지막 테스트",
-    "localAddress": "지역 주소",
-    "localPort": "로컬 포트",
-    "localSaveError": "로컬 클라이언트 터널 저장 실패",
-    "localSaved": "클라이언트 터널 저장됨",
-    "manualControlError": "터널 상태 업데이트 실패",
-    "maxRetries": "최대 재시도 횟수",
-    "mode": "모드",
-    "nextRetryIn": "{{seconds}}초 후 재시도",
-    "noClientTunnels": "이 데스크톱에 구성된 클라이언트 터널이 없습니다.",
-    "noHostSelected": "선택된 호스트 없음",
-    "noSshTunnels": "SSH 터널 없음",
-    "port": "포트",
-    "remoteBindAddress": "원격 바인딩 주소",
-    "remoteHost": "원격 호스트",
-    "remotePort": "원격 포트",
-    "retryInterval": "재시도 간격(초)",
-    "route": "경로:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → SOCKS ({{endpoint}} 경유)",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} (경유: {{endpoint}})",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} on {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "테스트",
-    "tunnelName": "터널 이름",
-    "tunnelTestFailed": "터널 테스트 실패",
-    "tunnelTestSucceeded": "터널 테스트 성공",
-    "type": "터널 유형",
-    "typeDynamic": "동적 (-D)",
-    "typeLocal": "로컬 (-L)",
-    "typeRemote": "원격 (-R)",
-    "working": "작업 중...",
-    "activeCount": "{{connected}}/{{total}} 활성",
-    "listensOn": "localhost에 바인딩됨:{{port}}",
-    "socksProxy": "SOCKS5 프록시",
-    "waiting": "대기 중",
-    "remoteSessionExpired": "원격 동기화 세션이 만료되었습니다. 원격 동기화에 다시 연결하고 다시 시도하십시오.",
-    "activeTunnels": "활성 터널",
-    "start": "시작",
-    "stop": "중지",
-    "authTitle": "터널 인증",
-    "authRetry": "이전 코드가 허용되지 않았습니다. 새 코드를 입력하세요.",
-    "authAnswer": "인증 응답",
-    "authContinue": "계속"
-  },
-  "permissions": {
-    "use": {
-      "title": "터널을 이용하세요",
-      "description": "SSH 터널을 시작, 중지 및 모니터링하고 클라이언트 터널 사전 설정을 저장할 수 있습니다."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "터널 활성화",
-        "description": "이 호스트를 통해 SSH 터널을 설정하십시오."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "터널",
-    "feature_tunnels_desc": "서버를 통해 포트를 포워딩하여 외부에 노출되지 않은 서비스에 접근할 수 있습니다."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/nl_NL.json b/plugins/tunnels/locales/translated/nl_NL.json
deleted file mode 100644
index 78eff9e35..000000000
--- a/plugins/tunnels/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Voeg tunnel toe",
-    "autoStartDesc": "Deze tunnel automatisch verbinden wanneer de host wordt geladen.",
-    "autoStartLabel": "Automatisch starten",
-    "connectBtn": "Verbinden",
-    "disconnectBtn": "Verbinding verbreken",
-    "enableTunneling": "Tunneling inschakelen",
-    "enableTunnelingDesc": "Schakel de SSH-tunnelfunctionaliteit voor deze host in.",
-    "endpointHost": "Eindpunthost",
-    "endpointHostPlaceholder": "Dezelfde host, SSH-host of bereikbare host/IP-adres",
-    "endpointPort": "Eindpuntpoort",
-    "failedToConnectTunnel": "Verbinding mislukt",
-    "failedToDisconnectTunnel": "Verbinding verbreken mislukt",
-    "maxRetries": "Max. aantal herhalingen",
-    "noTunnelsConfigured": "Er zijn geen tunnels geconfigureerd.",
-    "retryIntervalS": "Herhaalinterval (s)",
-    "serverTunnelsSection": "Servertunnels",
-    "sourcePort": "Bronpoort",
-    "tabTunnels": "Tunnels",
-    "tunnelConnecting": "Tunnelverbinding...",
-    "tunnelDisconnected": "Tunnel losgekoppeld",
-    "tunnelLabel": "Tunnel {{number}}",
-    "tunnelModeDynamicDesc": "Maak een SOCKS5-proxy aan op een lokale poort voor dynamische poortdoorsturing.",
-    "tunnelModeLocalDesc": "Een lokale poort doorsturen naar een poort op de externe server (of een host die vanaf die server bereikbaar is).",
-    "tunnelModeRemoteDesc": "Een poort op de externe server doorsturen naar een lokale poort op uw computer.",
-    "tunnelRequirementsText": "De SSH-server moet de volgende instellingen hebben: GatewayPorts yes, AllowTcpForwarding yes en PermitRootLogin yes in /etc/ssh/sshd_config.",
-    "tunnelSettings": "Tunnelinstellingen",
-    "tunnelType": "Tunneltype",
-    "bindHost": "Bind Host",
-    "docsLink": "Documenten bekijken",
-    "hostNotFound": "Host niet gevonden",
-    "loadingHost": "Host wordt geladen..."
-  },
-  "nav": {
-    "portForwarding": "Doorsturen",
-    "tunnels": "Tunnels"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (lokaal luisteren)",
-    "localTargetHost": "127.0.0.1 (doel op deze computer)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (luisteren op eindpunt)",
-    "remoteTargetHost": "127.0.0.1 (doel van eindpunt)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (SOCKS-luisteraar)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "{{count}} lokale clienttunnel(s) geconfigureerd op deze desktop.",
-    "c2sLoadPreset": "Laden",
-    "c2sNoPresetSelected": "Geen voorinstelling geselecteerd",
-    "c2sNoPresets": "Geen presets opgeslagen",
-    "c2sPresetDeleted": "Client tunnel-voorinstelling verwijderd",
-    "c2sPresetLoadError": "Het laden van de clienttunnelvoorinstellingen is mislukt.",
-    "c2sPresetLoaded": "Client tunnel preset lokaal geladen",
-    "c2sPresetName": "Voorinstellingnaam",
-    "c2sPresetNamePlaceholder": "Naam van de clientvoorinstelling",
-    "c2sPresetRenamed": "Client tunnel-voorinstelling hernoemd",
-    "c2sPresetSaved": "Voorinstelling voor clienttunnel opgeslagen",
-    "c2sPresetSyncNote": "Voorinstellingen zijn expliciete momentopnamen; het laden ervan vervangt de lokale lijst met clienttunnels van deze desktopclient.",
-    "c2sPresetToLoad": "Voorinstelling om te laden",
-    "c2sTunnelPresets": "Clienttunnel-voorinstellingen",
-    "c2sTunnelPresetsUnavailable": "Clienttunnelvoorinstellingen zijn alleen beschikbaar in de desktopclient.",
-    "c2sPresetRenameError": "Het hernoemen van de preset is mislukt.",
-    "c2sPresetDeleteError": "Het verwijderen van de voorinstelling is mislukt."
-  },
-  "tunnels": {
-    "attempt": "Poging {{current}} van {{max}}",
-    "autoNameClientDynamic": "SOKKEN {{localPort}} via {{endpoint}}",
-    "autoNameClientLocal": "Lokaal {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → lokaal {{localPort}}",
-    "autoStart": "Automatische start",
-    "cancel": "Annuleren",
-    "canceling": "Annuleren...",
-    "clientAutoStartDesc": "Begint wanneer deze desktopclient wordt geopend en blijft verbonden.",
-    "clientManualStartDesc": "Gebruik Start en Stop vanuit deze regel. Termix opent deze niet automatisch.",
-    "clientRemoteServerNote": "Voor het doorsturen van externe poorten zijn mogelijk de instellingen AllowTcpForwarding en GatewayPorts vereist op de SSH-server van het eindpunt. De externe poort wordt gesloten wanneer deze desktop de verbinding verbreekt.",
-    "clientTunnelStarted": "Clienttunnel gestart",
-    "clientTunnelStopped": "Clienttunnel gestopt",
-    "clientTunnels": "Clienttunnels",
-    "connected": "Aangesloten",
-    "connecting": "Verbinden...",
-    "createFirstTunnelMessage": "Je hebt nog geen SSH-tunnels aangemaakt. Configureer tunnelverbindingen in de Host Manager om te beginnen.",
-    "currentHostPort": "Huidige hostpoort",
-    "destination": "Bestemming",
-    "destinationAddress": "Bestemmingsadres",
-    "destinationPort": "Bestemmingshaven",
-    "disconnected": "Verbinding verbroken",
-    "duplicateAutoStartBind": "Slechts één automatisch startende clienttunnel kan {{bind}} gebruiken.",
-    "endpointPort": "Eindpuntpoort",
-    "endpointSshHost": "Eindpunt SSH-host",
-    "endpointSshHostPlaceholder": "Selecteer een geconfigureerde host.",
-    "endpointSshHostRequired": "Selecteer een SSH-host voor elke clienttunnel.",
-    "error": "Fout",
-    "forwardDescriptionClientDynamic": "SOCKS op lokale poort {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "Lokaal {{sourcePort}} → extern {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Extern {{sourcePort}} → lokaal {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS op de huidige host {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Huidige host {{sourcePort}} → eindpunt {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Eindpunt {{endpointPort}} → huidige host {{sourcePort}}.",
-    "host": "Gastheer",
-    "intermediateHost": "Tussenliggende gastheer",
-    "invalidBindIp": "Het lokale IP-adres moet een geldig IPv4-adres zijn.",
-    "invalidEndpointPort": "De eindpoort moet tussen 1 en 65535 liggen.",
-    "invalidLocalPort": "Het lokale poortnummer moet tussen 1 en 65535 liggen.",
-    "invalidLocalTargetIp": "Het lokale doel-IP-adres moet een geldig IPv4-adres zijn.",
-    "invalidLocalTargetPort": "De lokale doelpoort moet tussen 1 en 65535 liggen.",
-    "invalidRemoteAddress": "Een extern adres is vereist.",
-    "invalidRemotePort": "De externe poort moet tussen 1 en 65535 liggen.",
-    "lastError": "Laatste fout",
-    "lastStarted": "Laatst gestart",
-    "lastTested": "Laatst getest",
-    "localAddress": "Lokaal adres",
-    "localPort": "Lokale haven",
-    "localSaveError": "Het opslaan van lokale clienttunnels is mislukt.",
-    "localSaved": "Clienttunnels opgeslagen",
-    "manualControlError": "Het bijwerken van de tunnelstatus is mislukt.",
-    "maxRetries": "Max. aantal herhalingen",
-    "mode": "Modus",
-    "nextRetryIn": "Volgende poging over {{seconds}} seconden",
-    "noClientTunnels": "Er zijn geen clienttunnels geconfigureerd op deze desktop.",
-    "noHostSelected": "Geen host geselecteerd",
-    "noSshTunnels": "Geen SSH-tunnels",
-    "port": "Haven",
-    "remoteBindAddress": "Extern bindadres",
-    "remoteHost": "Externe host",
-    "remotePort": "Externe poort",
-    "retryInterval": "Interval tussen herhalingen (seconden)",
-    "route": "Route:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → SOKKEN via {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} via {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} op {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Test",
-    "tunnelName": "Tunnelnaam",
-    "tunnelTestFailed": "Tunneltest mislukt",
-    "tunnelTestSucceeded": "Tunneltest geslaagd",
-    "type": "Tunneltype",
-    "typeDynamic": "Dynamisch (-D)",
-    "typeLocal": "Lokaal (-L)",
-    "typeRemote": "Afstandsbediening (-R)",
-    "working": "Bezig met verwerken...",
-    "activeCount": "{{connected}}/{{total}} actief",
-    "listensOn": "Gebonden aan localhost:{{port}}",
-    "socksProxy": "SOCKS5-proxy",
-    "waiting": "Wachten",
-    "remoteSessionExpired": "De Remote Sync-sessie is verlopen. Maak opnieuw verbinding met Remote Sync en probeer het nogmaals.",
-    "activeTunnels": "Actieve tunnels",
-    "start": "Begin",
-    "stop": "Stop",
-    "authTitle": "Tunnelauthenticatie",
-    "authRetry": "De vorige code werd niet geaccepteerd. Voer een nieuwe code in.",
-    "authAnswer": "Authenticatiereactie",
-    "authContinue": "Doorgaan"
-  },
-  "permissions": {
-    "use": {
-      "title": "Gebruik tunnels",
-      "description": "Start, stop en monitor SSH-tunnels en sla clienttunnelvoorinstellingen op."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Tunnels inschakelen",
-        "description": "Stel SSH-tunnels in via deze host."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Tunnels",
-    "feature_tunnels_desc": "Poorten doorsturen via een server om toegang te krijgen tot services die niet openbaar toegankelijk zijn."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/no_NO.json b/plugins/tunnels/locales/translated/no_NO.json
deleted file mode 100644
index 40da7465d..000000000
--- a/plugins/tunnels/locales/translated/no_NO.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Legg til tunnel",
-    "autoStartDesc": "Koble til denne tunnelen automatisk når verten lastes inn",
-    "autoStartLabel": "Automatisk start",
-    "connectBtn": "Koble til",
-    "disconnectBtn": "Koble fra",
-    "enableTunneling": "Aktiver tunnelering",
-    "enableTunnelingDesc": "Aktiver SSH-tunnelfunksjonalitet for denne verten",
-    "endpointHost": "Endepunktvert",
-    "endpointHostPlaceholder": "Samme vert, SSH-vert eller tilgjengelig vert/IP",
-    "endpointPort": "Endepunktport",
-    "failedToConnectTunnel": "Kunne ikke koble til",
-    "failedToDisconnectTunnel": "Kunne ikke koble fra",
-    "maxRetries": "Maks forsøk",
-    "noTunnelsConfigured": "Ingen tunneler konfigurert.",
-    "retryIntervalS": "Intervall for nye forsøk (s)",
-    "serverTunnelsSection": "Servertunneler",
-    "sourcePort": "Kildeport",
-    "tabTunnels": "Tunneler",
-    "tunnelConnecting": "Tunnelforbindelse...",
-    "tunnelDisconnected": "Tunnelen frakoblet",
-    "tunnelLabel": "Tunnel {{number}}",
-    "tunnelModeDynamicDesc": "Opprett en SOCKS5-proxy på en lokal port for dynamisk portvideresending.",
-    "tunnelModeLocalDesc": "Videresend en lokal port til en port på den eksterne serveren (eller en vert som er tilgjengelig fra den).",
-    "tunnelModeRemoteDesc": "Videresend en port på den eksterne serveren tilbake til en lokal port på maskinen din.",
-    "tunnelRequirementsText": "SSH-serveren må ha GatewayPorts ja, AllowTcpForwarding ja og PermitRootLogin ja angitt i /etc/ssh/sshd_config.",
-    "tunnelSettings": "Tunnelinnstillinger",
-    "tunnelType": "Tunneltype",
-    "bindHost": "Bind vert",
-    "docsLink": "Vis dokumenter",
-    "hostNotFound": "Verten ble ikke funnet",
-    "loadingHost": "Laster inn vert ..."
-  },
-  "nav": {
-    "portForwarding": "Videresending",
-    "tunnels": "Tunneler"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (lytt lokalt)",
-    "localTargetHost": "127.0.0.1 (mål på denne datamaskinen)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (lytt på endepunkt)",
-    "remoteTargetHost": "127.0.0.1 (mål fra endepunkt)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (SOCKS-lytter)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "{{count}} lokale klienttunneler konfigurert på dette skrivebordet.",
-    "c2sLoadPreset": "Last",
-    "c2sNoPresetSelected": "Ingen forhåndsinnstilling valgt",
-    "c2sNoPresets": "Ingen forhåndsinnstillinger lagret",
-    "c2sPresetDeleted": "Forhåndsinnstilling for klienttunnel slettet",
-    "c2sPresetLoadError": "Kunne ikke laste inn forhåndsinnstillinger for klienttunnel",
-    "c2sPresetLoaded": "Forhåndsinnstilling for klienttunnel lastes inn lokalt",
-    "c2sPresetName": "Forhåndsinnstilt navn",
-    "c2sPresetNamePlaceholder": "Klientens forhåndsinnstilte navn",
-    "c2sPresetRenamed": "Forhåndsinnstilling for klienttunnel omdøpt",
-    "c2sPresetSaved": "Forhåndsinnstilling for klienttunnel lagret",
-    "c2sPresetSyncNote": "Forhåndsinnstillinger er eksplisitte øyeblikksbilder; lasting av et erstatter denne skrivebordsklientens lokale klienttunnelliste.",
-    "c2sPresetToLoad": "Forhåndsinnstilt for lasting",
-    "c2sTunnelPresets": "Forhåndsinnstillinger for klienttunnel",
-    "c2sTunnelPresetsUnavailable": "Forhåndsinnstillinger for klienttunnel er bare tilgjengelige i skrivebordsklienten.",
-    "c2sPresetRenameError": "Kunne ikke gi nytt navn til forhåndsinnstillingen",
-    "c2sPresetDeleteError": "Kunne ikke slette forhåndsinnstillingen"
-  },
-  "tunnels": {
-    "attempt": "Forsøk {{current}} av {{max}}",
-    "autoNameClientDynamic": "SOKKER {{localPort}} via {{endpoint}}",
-    "autoNameClientLocal": "Lokal {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → lokal {{localPort}}",
-    "autoStart": "Autostart",
-    "cancel": "Avbryt",
-    "canceling": "Avbryter...",
-    "clientAutoStartDesc": "Starter når denne skrivebordsklienten åpnes og forblir tilkoblet.",
-    "clientManualStartDesc": "Bruk Start og Stopp fra denne raden. Termix vil ikke åpne den automatisk.",
-    "clientRemoteServerNote": "Ekstern videresending kan kreve AllowTcpForwarding og GatewayPorts på endepunktets SSH-server. Den eksterne porten lukkes når dette skrivebordet kobles fra.",
-    "clientTunnelStarted": "Klienttunnel startet",
-    "clientTunnelStopped": "Klienttunnelen stoppet",
-    "clientTunnels": "Klienttunneler",
-    "connected": "Tilkoblet",
-    "connecting": "Kobler til...",
-    "createFirstTunnelMessage": "Du har ikke opprettet noen SSH-tunneler ennå. Konfigurer tunneltilkoblinger i Vertadministrator for å komme i gang.",
-    "currentHostPort": "Gjeldende vertsport",
-    "destination": "Destinasjon",
-    "destinationAddress": "Destinasjonsadresse",
-    "destinationPort": "Destinasjonshavn",
-    "disconnected": "Frakoblet",
-    "duplicateAutoStartBind": "Bare én automatisk-start klienttunnel kan bruke {{bind}}.",
-    "endpointPort": "Endepunktport",
-    "endpointSshHost": "Endepunkt SSH-vert",
-    "endpointSshHostPlaceholder": "Velg en konfigurert vert",
-    "endpointSshHostRequired": "Velg en SSH-vert for endepunktet for hver klienttunnel.",
-    "error": "Feil",
-    "forwardDescriptionClientDynamic": "SOCKS på lokal port {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "Lokal {{sourcePort}} → ekstern {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Fjern {{sourcePort}} → lokal {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS på gjeldende vert {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Nåværende vert {{sourcePort}} → endepunkt {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Endepunkt {{endpointPort}} → gjeldende vert {{sourcePort}}.",
-    "host": "Vert",
-    "intermediateHost": "Mellomliggende vert",
-    "invalidBindIp": "Lokal IP-adresse må være en gyldig IPv4-adresse.",
-    "invalidEndpointPort": "Endepunktporten må være mellom 1 og 65535.",
-    "invalidLocalPort": "Lokal port må være mellom 1 og 65535.",
-    "invalidLocalTargetIp": "Den lokale mål-IP-adressen må være en gyldig IPv4-adresse.",
-    "invalidLocalTargetPort": "Den lokale målporten må være mellom 1 og 65535.",
-    "invalidRemoteAddress": "Ekstern adresse er påkrevd.",
-    "invalidRemotePort": "Ekstern port må være mellom 1 og 65535.",
-    "lastError": "Siste feil",
-    "lastStarted": "Sist startet",
-    "lastTested": "Sist testet",
-    "localAddress": "Lokal adresse",
-    "localPort": "Lokal port",
-    "localSaveError": "Kunne ikke lagre lokale klienttunneler",
-    "localSaved": "Klienttunneler lagret",
-    "manualControlError": "Kunne ikke oppdatere tunnelstatus.",
-    "maxRetries": "Maks forsøk",
-    "mode": "Modus",
-    "nextRetryIn": "Neste forsøk om {{seconds}} sekunder",
-    "noClientTunnels": "Ingen klienttunneler er konfigurert på dette skrivebordet.",
-    "noHostSelected": "Ingen vert valgt",
-    "noSshTunnels": "Ingen SSH-tunneler",
-    "port": "Havn",
-    "remoteBindAddress": "Fjernbindingsadresse",
-    "remoteHost": "Fjernvert",
-    "remotePort": "Fjernport",
-    "retryInterval": "Intervall mellom forsøk (sekunder)",
-    "route": "Rute:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → SOKKER via {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} via {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} på {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Test",
-    "tunnelName": "Tunnelnavn",
-    "tunnelTestFailed": "Tunneltest mislyktes",
-    "tunnelTestSucceeded": "Tunneltesten var vellykket",
-    "type": "Tunneltype",
-    "typeDynamic": "Dynamisk (-D)",
-    "typeLocal": "Lokal (-L)",
-    "typeRemote": "Fjernkontroll (-R)",
-    "working": "Arbeider...",
-    "activeCount": "{{connected}}/{{total}} aktiv",
-    "listensOn": "Bundet til lokal vert:{{port}}",
-    "socksProxy": "SOCKS5-proxy",
-    "waiting": "Venter",
-    "remoteSessionExpired": "Fjernsynkroniseringsøkten er utløpt. Koble til fjernsynkroniseringen på nytt og prøv på nytt.",
-    "activeTunnels": "Aktive tunneler",
-    "start": "Start",
-    "stop": "Stopp",
-    "authTitle": "Tunnel-autentisering",
-    "authRetry": "Den forrige koden ble ikke godkjent. Skriv inn en ny kode.",
-    "authAnswer": "Autentiseringssvar",
-    "authContinue": "Fortsett"
-  },
-  "permissions": {
-    "use": {
-      "title": "Bruk tunneler",
-      "description": "Start, stopp og overvåk SSH-tunneler, og lagre forhåndsinnstillinger for klienttunneler."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Aktiver tunneler",
-        "description": "Sett opp SSH-tunneler gjennom denne verten."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Tunneler",
-    "feature_tunnels_desc": "Videresend porter gjennom en server for å nå tjenester som ikke er eksponert."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/pl_PL.json b/plugins/tunnels/locales/translated/pl_PL.json
deleted file mode 100644
index e70d6b117..000000000
--- a/plugins/tunnels/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Dodaj tunel",
-    "autoStartDesc": "Automatycznie połącz ten tunel po załadowaniu hosta",
-    "autoStartLabel": "Autostart",
-    "connectBtn": "Połącz",
-    "disconnectBtn": "Odłącz",
-    "enableTunneling": "Włącz tunelowanie",
-    "enableTunnelingDesc": "Włącz funkcjonalność tunelu SSH dla tego hosta",
-    "endpointHost": "Host punktu końcowego",
-    "endpointHostPlaceholder": "Ten sam host, host SSH lub dostępny host/adres IP",
-    "endpointPort": "Port końcowy",
-    "failedToConnectTunnel": "Nie udało się połączyć",
-    "failedToDisconnectTunnel": "Nie udało się rozłączyć",
-    "maxRetries": "Maksymalna liczba ponownych prób",
-    "noTunnelsConfigured": "Nie skonfigurowano żadnych tuneli.",
-    "retryIntervalS": "Interwał ponawiania (s)",
-    "serverTunnelsSection": "Tunele serwerowe",
-    "sourcePort": "Port źródłowy",
-    "tabTunnels": "Tunele",
-    "tunnelConnecting": "Łączenie tunelu...",
-    "tunnelDisconnected": "Tunel rozłączony",
-    "tunnelLabel": "Tunel {{number}}",
-    "tunnelModeDynamicDesc": "Utwórz serwer proxy SOCKS5 na porcie lokalnym w celu dynamicznego przekierowywania portów.",
-    "tunnelModeLocalDesc": "Przekieruj port lokalny do portu na serwerze zdalnym (lub do hosta, do którego można uzyskać dostęp z tego serwera).",
-    "tunnelModeRemoteDesc": "Przekieruj port na serwerze zdalnym z powrotem do portu lokalnego na swoim komputerze.",
-    "tunnelRequirementsText": "Serwer SSH musi mieć w /etc/ssh/sshd_config ustawione GatewayPorts yes, AllowTcpForwarding yes i PermitRootLogin yes.",
-    "tunnelSettings": "Ustawienia tunelu",
-    "tunnelType": "Typ tunelu",
-    "bindHost": "Host nasłuchu",
-    "docsLink": "Zobacz dokumentację",
-    "hostNotFound": "Nie znaleziono hosta",
-    "loadingHost": "Ładowanie hosta..."
-  },
-  "nav": {
-    "portForwarding": "Przekierowanie",
-    "tunnels": "Tunele"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (nasłuch lokalny)",
-    "localTargetHost": "127.0.0.1 (cel na tym komputerze)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (nasłuchiwanie na punkcie końcowym)",
-    "remoteTargetHost": "127.0.0.1 (cel z punktu końcowego)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (nasłuch SOCKS)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "Liczba lokalnych tuneli klienta skonfigurowanych na tym komputerze: {{count}}.",
-    "c2sLoadPreset": "Wczytaj",
-    "c2sNoPresetSelected": "Nie wybrano zestawu",
-    "c2sNoPresets": "Brak zapisanych zestawów",
-    "c2sPresetDeleted": "Usunięto zestaw tuneli klienta",
-    "c2sPresetLoadError": "Nie udało się wczytać zestawów tuneli klienta",
-    "c2sPresetLoaded": "Wczytano zestaw tuneli klienta lokalnie",
-    "c2sPresetName": "Nazwa zestawu",
-    "c2sPresetNamePlaceholder": "Nazwa zestawu klienta",
-    "c2sPresetRenamed": "Zmieniono nazwę zestawu tuneli klienta",
-    "c2sPresetSaved": "Zapisano zestaw tuneli klienta",
-    "c2sPresetSyncNote": "Zestawy to jawne migawki; wczytanie zestawu zastępuje listę lokalnych tuneli klienta w tej aplikacji.",
-    "c2sPresetToLoad": "Zestaw do wczytania",
-    "c2sTunnelPresets": "Zestawy tuneli klienta",
-    "c2sTunnelPresetsUnavailable": "Zestawy tuneli klienta są dostępne tylko w aplikacji desktopowej.",
-    "c2sPresetRenameError": "Nie udało się zmienić nazwy ustawienia wstępnego",
-    "c2sPresetDeleteError": "Nie udało się usunąć ustawienia wstępnego"
-  },
-  "tunnels": {
-    "attempt": "Próba {{current}} z {{max}}",
-    "autoNameClientDynamic": "SOCKS {{localPort}} przez {{endpoint}}",
-    "autoNameClientLocal": "Lokalny {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → lokalny {{localPort}}",
-    "autoStart": "Autostart",
-    "cancel": "Anuluj",
-    "canceling": "Anulowanie...",
-    "clientAutoStartDesc": "Uruchamia się przy starcie aplikacji desktopowej i pozostaje połączony.",
-    "clientManualStartDesc": "Użyj przycisków Start i Stop z tego wiersza. Termix nie otworzy go automatycznie.",
-    "clientRemoteServerNote": "Przekierowanie zdalne może wymagać opcji AllowTcpForwarding i GatewayPorts na serwerze SSH punktu końcowego. Port zdalny zamyka się po rozłączeniu tego komputera.",
-    "clientTunnelStarted": "Uruchomiono tunel klienta",
-    "clientTunnelStopped": "Zatrzymano tunel klienta",
-    "clientTunnels": "Tunele klienckie",
-    "connected": "Połączono",
-    "connecting": "Łączenie...",
-    "createFirstTunnelMessage": "Nie utworzono jeszcze żadnych tuneli SSH. Skonfiguruj połączenia tunelowe w Menedżerze hostów, aby zacząć.",
-    "currentHostPort": "Aktualny port hosta",
-    "destination": "Cel",
-    "destinationAddress": "Adres docelowy",
-    "destinationPort": "Port docelowy",
-    "disconnected": "Rozłączono",
-    "duplicateAutoStartBind": "Tylko jeden tunel klienta z automatycznym uruchomieniem może używać {{bind}}.",
-    "endpointPort": "Port końcowy",
-    "endpointSshHost": "Host SSH punktu końcowego",
-    "endpointSshHostPlaceholder": "Wybierz skonfigurowanego hosta",
-    "endpointSshHostRequired": "Wybierz hosta SSH punktu końcowego dla każdego tunelu klienta.",
-    "error": "Błąd",
-    "forwardDescriptionClientDynamic": "SOCKS na porcie lokalnym {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "Lokalny {{sourcePort}} → zdalny {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Zdalny {{sourcePort}} → lokalny {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS na bieżącym hoście {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Aktualny host {{sourcePort}} → punkt końcowy {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Punkt końcowy {{endpointPort}} → bieżący host {{sourcePort}}.",
-    "host": "Host",
-    "intermediateHost": "Żywiciel pośredni",
-    "invalidBindIp": "Lokalny adres IP musi być prawidłowym adresem IPv4.",
-    "invalidEndpointPort": "Port końcowy musi mieścić się w zakresie od 1 do 65535.",
-    "invalidLocalPort": "Port lokalny musi mieścić się w zakresie od 1 do 65535.",
-    "invalidLocalTargetIp": "Lokalny adres IP docelowy musi być prawidłowym adresem IPv4.",
-    "invalidLocalTargetPort": "Lokalny port docelowy musi mieścić się w zakresie od 1 do 65535.",
-    "invalidRemoteAddress": "Wymagany jest adres zdalny.",
-    "invalidRemotePort": "Port zdalny musi mieścić się w zakresie od 1 do 65535.",
-    "lastError": "Ostatni błąd",
-    "lastStarted": "Ostatnio uruchomiony",
-    "lastTested": "Ostatnio testowane",
-    "localAddress": "Adres lokalny",
-    "localPort": "Port lokalny",
-    "localSaveError": "Nie udało się zapisać lokalnych tuneli klienta",
-    "localSaved": "Zapisano tunele klienta",
-    "manualControlError": "Nie udało się zaktualizować stanu tunelu.",
-    "maxRetries": "Maksymalna liczba ponownych prób",
-    "mode": "Tryb",
-    "nextRetryIn": "Następna próba za {{seconds}} sekund",
-    "noClientTunnels": "Na tym komputerze nie skonfigurowano żadnych tuneli klienckich.",
-    "noHostSelected": "Nie wybrano hosta",
-    "noSshTunnels": "Brak tuneli SSH",
-    "port": "Port",
-    "remoteBindAddress": "Zdalny adres powiązania",
-    "remoteHost": "Zdalny host",
-    "remotePort": "Zdalny port",
-    "retryInterval": "Interwał ponawiania (sekundy)",
-    "route": "Trasa:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → SOCKS przez {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} przez {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} na {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Test",
-    "tunnelName": "Nazwa tunelu",
-    "tunnelTestFailed": "Test tunelu nie powiódł się",
-    "tunnelTestSucceeded": "Test tunelu zakończony powodzeniem",
-    "type": "Typ tunelu",
-    "typeDynamic": "Dynamiczny (-D)",
-    "typeLocal": "Lokalny (-L)",
-    "typeRemote": "Zdalny (-R)",
-    "working": "Przetwarzanie...",
-    "activeCount": "{{connected}}/{{total}} aktywny",
-    "listensOn": "Powiązane z localhost:{{port}}",
-    "socksProxy": "Serwer proxy SOCKS5",
-    "waiting": "Czekanie",
-    "remoteSessionExpired": "Sesja synchronizacji zdalnej wygasła. Połącz się ponownie z synchronizacją zdalną i spróbuj jeszcze raz.",
-    "activeTunnels": "Aktywne tunele",
-    "start": "Start",
-    "stop": "Zatrzymaj",
-    "authTitle": "Uwierzytelnianie tunelowe",
-    "authRetry": "Poprzedni kod nie został zaakceptowany. Wprowadź nowy kod.",
-    "authAnswer": "Odpowiedź uwierzytelniania",
-    "authContinue": "Kontynuuj"
-  },
-  "permissions": {
-    "use": {
-      "title": "Użyj tuneli",
-      "description": "Uruchamiaj, zatrzymuj i obserwuj tunele SSH oraz zapisuj ustawienia wstępne tuneli klienta."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Włącz tunele",
-        "description": "Skonfiguruj tunele SSH przez ten host."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Tunele",
-    "feature_tunnels_desc": "Przekierowuj porty przez serwer, aby dotrzeć do usług niewystawionych na zewnątrz."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/pt_BR.json b/plugins/tunnels/locales/translated/pt_BR.json
deleted file mode 100644
index 9aa028881..000000000
--- a/plugins/tunnels/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Adicionar túnel",
-    "autoStartDesc": "Conecte este túnel automaticamente quando o host estiver carregado.",
-    "autoStartLabel": "Início automático",
-    "connectBtn": "Conectar",
-    "disconnectBtn": "Desconectar",
-    "enableTunneling": "Habilitar o tunelamento",
-    "enableTunnelingDesc": "Ative a funcionalidade de túnel SSH para este host.",
-    "endpointHost": "Host do ponto final",
-    "endpointHostPlaceholder": "Mesmo host, host SSH ou host/IP acessível",
-    "endpointPort": "Porta de ponto final",
-    "failedToConnectTunnel": "Falha ao conectar",
-    "failedToDisconnectTunnel": "Falha ao desconectar",
-    "maxRetries": "Número máximo de tentativas",
-    "noTunnelsConfigured": "Nenhum túnel configurado.",
-    "retryIntervalS": "Intervalo de tentativas (s)",
-    "serverTunnelsSection": "Túneis de servidor",
-    "sourcePort": "Porta de origem",
-    "tabTunnels": "Túneis",
-    "tunnelConnecting": "Túnel de ligação...",
-    "tunnelDisconnected": "Túnel desconectado",
-    "tunnelLabel": "Túnel {{number}}",
-    "tunnelModeDynamicDesc": "Crie um proxy SOCKS5 em uma porta local para encaminhamento dinâmico de portas.",
-    "tunnelModeLocalDesc": "Encaminhar uma porta local para uma porta no servidor remoto (ou em um host acessível a partir dele).",
-    "tunnelModeRemoteDesc": "Encaminhe uma porta no servidor remoto de volta para uma porta local em sua máquina.",
-    "tunnelRequirementsText": "O servidor SSH deve ter as seguintes configurações definidas em /etc/ssh/sshd_config: GatewayPorts yes, AllowTcpForwarding yes e PermitRootLogin yes.",
-    "tunnelSettings": "Configurações do túnel",
-    "tunnelType": "Tipo de túnel",
-    "bindHost": "Vincular host",
-    "docsLink": "Documentação",
-    "hostNotFound": "Host não encontrado",
-    "loadingHost": "Carregando host..."
-  },
-  "nav": {
-    "portForwarding": "Encaminhamento",
-    "tunnels": "Túneis"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (ouvir localmente)",
-    "localTargetHost": "127.0.0.1 (alvo neste computador)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (escutar no ponto de extremidade)",
-    "remoteTargetHost": "127.0.0.1 (destino do ponto de extremidade)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (ouvinte SOCKS)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "{{count}} Túneis de cliente local configurados nesta área de trabalho.",
-    "c2sLoadPreset": "Carregar",
-    "c2sNoPresetSelected": "Nenhuma predefinição selecionada",
-    "c2sNoPresets": "Nenhuma predefinição salva",
-    "c2sPresetDeleted": "Configuração de túnel do cliente excluída",
-    "c2sPresetLoadError": "Falha ao carregar as predefinições do túnel do cliente.",
-    "c2sPresetLoaded": "Configuração predefinida do túnel do cliente carregada localmente",
-    "c2sPresetName": "Nome predefinido",
-    "c2sPresetNamePlaceholder": "Nome predefinido do cliente",
-    "c2sPresetRenamed": "A predefinição do túnel do cliente foi renomeada.",
-    "c2sPresetSaved": "Configuração predefinida do túnel do cliente salva",
-    "c2sPresetSyncNote": "As predefinições são instantâneos explícitos; carregar uma substitui a lista de túneis de clientes locais deste cliente de desktop.",
-    "c2sPresetToLoad": "Predefinido para carregar",
-    "c2sTunnelPresets": "Configurações predefinidas do túnel do cliente",
-    "c2sTunnelPresetsUnavailable": "As configurações predefinidas de túnel do cliente estão disponíveis apenas no cliente para desktop.",
-    "c2sPresetRenameError": "Falha ao renomear a predefinição",
-    "c2sPresetDeleteError": "Falha ao excluir a predefinição"
-  },
-  "tunnels": {
-    "attempt": "Tentativa {{current}} de {{max}}",
-    "autoNameClientDynamic": "MEIAS {{localPort}} via {{endpoint}}",
-    "autoNameClientLocal": "Local {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → local {{localPort}}",
-    "autoStart": "Início automático",
-    "cancel": "Cancelar",
-    "canceling": "Cancelando...",
-    "clientAutoStartDesc": "Inicia quando este cliente de desktop é aberto e permanece conectado.",
-    "clientManualStartDesc": "Use os botões Iniciar e Parar a partir desta linha. O Termix não os abrirá automaticamente.",
-    "clientRemoteServerNote": "O encaminhamento remoto pode exigir as permissões AllowTcpForwarding e GatewayPorts no servidor SSH do endpoint. A porta remota é fechada quando esta área de trabalho se desconecta.",
-    "clientTunnelStarted": "O túnel do cliente foi iniciado.",
-    "clientTunnelStopped": "O túnel do cliente foi interrompido.",
-    "clientTunnels": "Túneis para clientes",
-    "connected": "Conectado",
-    "connecting": "Conectando...",
-    "createFirstTunnelMessage": "Você ainda não criou nenhum túnel SSH. Configure as conexões de túnel no Gerenciador de Hosts para começar.",
-    "currentHostPort": "Porta do host atual",
-    "destination": "Destino",
-    "destinationAddress": "Endereço de destino",
-    "destinationPort": "Porto de destino",
-    "disconnected": "Desconectado",
-    "duplicateAutoStartBind": "Apenas um túnel de cliente de inicialização automática pode usar {{bind}}.",
-    "endpointPort": "Porta de ponto final",
-    "endpointSshHost": "Host SSH de ponto final",
-    "endpointSshHostPlaceholder": "Selecione um host configurado",
-    "endpointSshHostRequired": "Selecione um host SSH de ponto final para cada túnel de cliente.",
-    "error": "Erro",
-    "forwardDescriptionClientDynamic": "SOCKS na porta local {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "Local {{sourcePort}} → remoto {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Remoto {{sourcePort}} → local {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS no host atual {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Host atual {{sourcePort}} → endpoint {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Ponto final {{endpointPort}} → host atual {{sourcePort}}.",
-    "host": "Hospedar",
-    "intermediateHost": "Anfitrião intermediário",
-    "invalidBindIp": "O endereço IP local deve ser um endereço IPv4 válido.",
-    "invalidEndpointPort": "A porta do ponto final deve estar entre 1 e 65535.",
-    "invalidLocalPort": "A porta local deve estar entre 1 e 65535.",
-    "invalidLocalTargetIp": "O endereço IP de destino local deve ser um endereço IPv4 válido.",
-    "invalidLocalTargetPort": "A porta de destino local deve estar entre 1 e 65535.",
-    "invalidRemoteAddress": "É necessário um endereço remoto.",
-    "invalidRemotePort": "A porta remota deve estar entre 1 e 65535.",
-    "lastError": "Último erro",
-    "lastStarted": "Última vez iniciado",
-    "lastTested": "Último teste",
-    "localAddress": "Endereço local",
-    "localPort": "Porto local",
-    "localSaveError": "Falha ao salvar os túneis do cliente local.",
-    "localSaved": "Túneis de clientes salvos",
-    "manualControlError": "Falha ao atualizar o estado do túnel.",
-    "maxRetries": "Número máximo de tentativas",
-    "mode": "Modo",
-    "nextRetryIn": "Próxima tentativa em {{seconds}} segundos",
-    "noClientTunnels": "Nenhum túnel de cliente configurado nesta área de trabalho.",
-    "noHostSelected": "Nenhum host selecionado",
-    "noSshTunnels": "Sem túneis SSH",
-    "port": "Porta",
-    "remoteBindAddress": "Endereço de vinculação remota",
-    "remoteHost": "Host remoto",
-    "remotePort": "Porta remota",
-    "retryInterval": "Intervalo de tentativas (segundos)",
-    "route": "Rota:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → MEIAS via {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} via {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} em {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Teste",
-    "tunnelName": "Nome do túnel",
-    "tunnelTestFailed": "O teste do túnel falhou",
-    "tunnelTestSucceeded": "O teste no túnel foi bem-sucedido.",
-    "type": "Tipo de túnel",
-    "typeDynamic": "Dinâmico (-D)",
-    "typeLocal": "Local (-L)",
-    "typeRemote": "Remoto (-R)",
-    "working": "Trabalhando...",
-    "activeCount": "{{connected}}/{{total}} ativo",
-    "listensOn": "Vinculado ao localhost:{{port}}",
-    "socksProxy": "proxy SOCKS5",
-    "waiting": "Esperando",
-    "remoteSessionExpired": "A sessão de Sincronização Remota expirou. Reconecte a Sincronização Remota e tente novamente.",
-    "activeTunnels": "Túneis ativos",
-    "start": "Iniciar",
-    "stop": "Parar",
-    "authTitle": "Autenticação de túnel",
-    "authRetry": "O código anterior não foi aceito. Digite um novo código.",
-    "authAnswer": "Resposta de autenticação",
-    "authContinue": "Continuar"
-  },
-  "permissions": {
-    "use": {
-      "title": "Use túneis",
-      "description": "Inicie, pare e monitore túneis SSH e salve configurações predefinidas de túneis de clientes."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Ativar túneis",
-        "description": "Configure túneis SSH através deste host."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Túneis",
-    "feature_tunnels_desc": "Encaminhar portas através de um servidor para alcançar serviços que não estão expostos."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/pt_PT.json b/plugins/tunnels/locales/translated/pt_PT.json
deleted file mode 100644
index 0cda049e0..000000000
--- a/plugins/tunnels/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Adicionar túnel",
-    "autoStartDesc": "Conectar automaticamente este túnel quando o host for carregado",
-    "autoStartLabel": "Início Automático",
-    "connectBtn": "Ligar",
-    "disconnectBtn": "Desligar",
-    "enableTunneling": "Ativar tunelamento",
-    "enableTunnelingDesc": "Ativar a funcionalidade de túnel SSH para este host",
-    "endpointHost": "Host de Destino",
-    "endpointHostPlaceholder": "Mesmo host, host SSH ou host/IP acessível",
-    "endpointPort": "Porta de Destino",
-    "failedToConnectTunnel": "Falha ao conectar",
-    "failedToDisconnectTunnel": "Falha ao desligar",
-    "maxRetries": "Tentativas Máximas",
-    "noTunnelsConfigured": "Nenhum túnel configurado.",
-    "retryIntervalS": "Intervalo de Repetição (s)",
-    "serverTunnelsSection": "Túneis do servidor",
-    "sourcePort": "Porta de Origem",
-    "tabTunnels": "Túneis",
-    "tunnelConnecting": "Túnel a conectar...",
-    "tunnelDisconnected": "Túnel desligado",
-    "tunnelLabel": "Túnel {{number}}",
-    "tunnelModeDynamicDesc": "Criar um proxy SOCKS5 numa porta local para reencaminhamento dinâmico de portas.",
-    "tunnelModeLocalDesc": "Reencaminhar uma porta local para uma porta no servidor remoto (ou um host acessível a partir dele).",
-    "tunnelModeRemoteDesc": "Reencaminhar uma porta no servidor remoto de volta para uma porta local na sua máquina.",
-    "tunnelRequirementsText": "O servidor SSH deve ter GatewayPorts yes, AllowTcpForwarding yes e PermitRootLogin yes definidos em /etc/ssh/sshd_config.",
-    "tunnelSettings": "Definições de túnel",
-    "tunnelType": "Tipo de túnel",
-    "bindHost": "Host de Ligação",
-    "docsLink": "Ver documentação",
-    "hostNotFound": "Host não encontrado",
-    "loadingHost": "A carregar o host..."
-  },
-  "nav": {
-    "portForwarding": "Encaminhamento",
-    "tunnels": "Túneis"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (escuta localmente)",
-    "localTargetHost": "127.0.0.1 (alvo neste computador)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (escutar no ponto final)",
-    "remoteTargetHost": "127.0.0.1 (destino do ponto final)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (escuta SOCKS)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "{{count}} túnel/túneis de cliente local configurado(s) neste ambiente de trabalho.",
-    "c2sLoadPreset": "Carregar",
-    "c2sNoPresetSelected": "Nenhuma predefinição selecionada",
-    "c2sNoPresets": "Nenhuma predefinição guardada",
-    "c2sPresetDeleted": "Predefinição de túnel do cliente eliminada",
-    "c2sPresetLoadError": "Falha ao carregar as predefinições de túneis do cliente",
-    "c2sPresetLoaded": "Predefinição de túnel do cliente carregada localmente",
-    "c2sPresetName": "Nome da predefinição",
-    "c2sPresetNamePlaceholder": "Nome da predefinição do cliente",
-    "c2sPresetRenamed": "Predefinição de túnel do cliente renomeada",
-    "c2sPresetSaved": "Predefinição de túnel do cliente guardada",
-    "c2sPresetSyncNote": "As predefinições são instantâneos explícitos; carregar uma substitui a lista de túneis de cliente local deste cliente de ambiente de trabalho.",
-    "c2sPresetToLoad": "Predefinição a carregar",
-    "c2sTunnelPresets": "Predefinições de túneis do cliente",
-    "c2sTunnelPresetsUnavailable": "As predefinições de túneis do cliente estão disponíveis apenas no cliente de ambiente de trabalho.",
-    "c2sPresetRenameError": "Falha ao renomear a predefinição",
-    "c2sPresetDeleteError": "Falha ao eliminar a predefinição"
-  },
-  "tunnels": {
-    "attempt": "Tentativa {{current}} de {{max}}",
-    "autoNameClientDynamic": "SOCKS {{localPort}} via {{endpoint}}",
-    "autoNameClientLocal": "Local {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → local {{localPort}}",
-    "autoStart": "Arranque automático",
-    "cancel": "Cancelar",
-    "canceling": "A cancelar...",
-    "clientAutoStartDesc": "Inicia quando este cliente de desktop abre e permanece ligado.",
-    "clientManualStartDesc": "Utilize Iniciar e Parar nesta linha. O Termix não o abrirá automaticamente.",
-    "clientRemoteServerNote": "O reencaminhamento remoto pode exigir AllowTcpForwarding e GatewayPorts no servidor SSH do endpoint. A porta remota fecha quando este desktop se desliga.",
-    "clientTunnelStarted": "Túnel de cliente iniciado",
-    "clientTunnelStopped": "Túnel de cliente parado",
-    "clientTunnels": "Túneis de cliente",
-    "connected": "Ligado",
-    "connecting": "A ligar...",
-    "createFirstTunnelMessage": "Ainda não criou nenhum túnel SSH. Configure as ligações de túnel no Gestor de Anfitriões para começar.",
-    "currentHostPort": "Porta do host atual",
-    "destination": "Destino",
-    "destinationAddress": "Endereço de destino",
-    "destinationPort": "Porto de destino",
-    "disconnected": "Desligado",
-    "duplicateAutoStartBind": "Apenas um túnel de cliente com arranque automático pode utilizar {{bind}}.",
-    "endpointPort": "Porta do endpoint",
-    "endpointSshHost": "Host SSH do endpoint",
-    "endpointSshHostPlaceholder": "Selecionar um host configurado",
-    "endpointSshHostRequired": "Selecione um host SSH do endpoint para cada túnel de cliente.",
-    "error": "Erro",
-    "forwardDescriptionClientDynamic": "SOCKS na porta local {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "Local {{sourcePort}} → remoto {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Remoto {{sourcePort}} → local {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS no host atual {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Host atual {{sourcePort}} → endpoint {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Endpoint {{endpointPort}} → host atual {{sourcePort}}.",
-    "host": "Servidor",
-    "intermediateHost": "Anfitrião intermediário",
-    "invalidBindIp": "O IP local deve ser um endereço IPv4 válido.",
-    "invalidEndpointPort": "A porta do endpoint deve estar entre 1 e 65535.",
-    "invalidLocalPort": "A porta local deve estar entre 1 e 65535.",
-    "invalidLocalTargetIp": "O IP de destino local deve ser um endereço IPv4 válido.",
-    "invalidLocalTargetPort": "A porta de destino local deve estar entre 1 e 65535.",
-    "invalidRemoteAddress": "É necessário um endereço remoto.",
-    "invalidRemotePort": "A porta remota deve estar entre 1 e 65535.",
-    "lastError": "Último erro",
-    "lastStarted": "Último início",
-    "lastTested": "Último teste",
-    "localAddress": "Endereço local",
-    "localPort": "Porta local",
-    "localSaveError": "Falha ao guardar os túneis de cliente locais",
-    "localSaved": "Túneis de cliente guardados",
-    "manualControlError": "Falha ao atualizar o estado do túnel.",
-    "maxRetries": "Máx. tentativas",
-    "mode": "Modo",
-    "nextRetryIn": "Próxima tentativa em {{seconds}} segundos",
-    "noClientTunnels": "Nenhum túnel de cliente configurado neste desktop.",
-    "noHostSelected": "Nenhum servidor selecionado",
-    "noSshTunnels": "Sem túneis SSH",
-    "port": "Porta",
-    "remoteBindAddress": "Endereço de ligação remota",
-    "remoteHost": "Host remoto",
-    "remotePort": "Porta remota",
-    "retryInterval": "Intervalo de repetição (segundos)",
-    "route": "Rota:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → SOCKS via {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} via {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} em {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Testar",
-    "tunnelName": "Nome do túnel",
-    "tunnelTestFailed": "Teste do túnel falhou",
-    "tunnelTestSucceeded": "Teste do túnel bem-sucedido",
-    "type": "Tipo de Túnel",
-    "typeDynamic": "Dinâmico (-D)",
-    "typeLocal": "Local (-L)",
-    "typeRemote": "Remoto (-R)",
-    "working": "A trabalhar...",
-    "activeCount": "{{connected}}/{{total}} ativo",
-    "listensOn": "Ligado ao localhost:{{port}}",
-    "socksProxy": "proxy SOCKS5",
-    "waiting": "Espera",
-    "remoteSessionExpired": "A sessão de Sincronização Remota expirou. Volte a ligar a Sincronização Remota e tente novamente.",
-    "activeTunnels": "Túneis Ativos",
-    "start": "Iniciar",
-    "stop": "Parar",
-    "authTitle": "Autenticação de túnel",
-    "authRetry": "O código anterior não foi aceite. Introduza um novo código.",
-    "authAnswer": "Resposta de autenticação",
-    "authContinue": "Continuar"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilize túneis",
-      "description": "Inicie, pare e monitorize os túneis SSH e guarde as definições predefinidas dos túneis dos clientes."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Ativar túneis",
-        "description": "Configure túneis SSH através deste host."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Túneis",
-    "feature_tunnels_desc": "Encaminhar portas através de um servidor para chegar a serviços que não estão expostos."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/ro_RO.json b/plugins/tunnels/locales/translated/ro_RO.json
deleted file mode 100644
index 871510918..000000000
--- a/plugins/tunnels/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Adăugați tunel",
-    "autoStartDesc": "Conectează automat acest tunel când gazda este încărcată",
-    "autoStartLabel": "Pornire automată",
-    "connectBtn": "Conectează-te",
-    "disconnectBtn": "Deconecta",
-    "enableTunneling": "Activează tunelarea",
-    "enableTunnelingDesc": "Activează funcționalitatea tunelului SSH pentru această gazdă",
-    "endpointHost": "Gazdă terminală",
-    "endpointHostPlaceholder": "Aceeași gazdă, gazdă SSH sau gazdă/IP accesibil",
-    "endpointPort": "Portul punctului final",
-    "failedToConnectTunnel": "Conectarea nu a reușit",
-    "failedToDisconnectTunnel": "Deconectare eșuată",
-    "maxRetries": "Număr maxim de reîncercări",
-    "noTunnelsConfigured": "Niciun tunel configurat.",
-    "retryIntervalS": "Interval de reîncercare (s)",
-    "serverTunnelsSection": "Tuneluri de server",
-    "sourcePort": "Port sursă",
-    "tabTunnels": "Tuneluri",
-    "tunnelConnecting": "Tunel care conectează...",
-    "tunnelDisconnected": "Tunel deconectat",
-    "tunnelLabel": "Tunel {{number}}",
-    "tunnelModeDynamicDesc": "Creați un proxy SOCKS5 pe un port local pentru redirecționarea dinamică a porturilor.",
-    "tunnelModeLocalDesc": "Redirecționează un port local către un port de pe serverul la distanță (sau o gazdă accesibilă de pe acesta).",
-    "tunnelModeRemoteDesc": "Redirecționează un port de pe serverul la distanță înapoi către un port local de pe mașina ta.",
-    "tunnelRequirementsText": "Serverul SSH trebuie să aibă setate GatewayPorts da, AllowTcpForwarding da și PermitRootLogin da în /etc/ssh/sshd_config.",
-    "tunnelSettings": "Setări tunel",
-    "tunnelType": "Tipul de tunel",
-    "bindHost": "Legați gazda",
-    "docsLink": "Vizualizați documentele",
-    "hostNotFound": "Gazdă negăsită",
-    "loadingHost": "Se încarcă gazda..."
-  },
-  "nav": {
-    "portForwarding": "Redirecționare",
-    "tunnels": "Tuneluri"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (ascultați local)",
-    "localTargetHost": "127.0.0.1 (ținta pe acest computer)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (ascultă pe endpoint)",
-    "remoteTargetHost": "127.0.0.1 (ținta de la punctul final)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (ascultător SOCKS)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "{{count}} tunel(uri) client local configurat(e) pe acest desktop.",
-    "c2sLoadPreset": "Încărca",
-    "c2sNoPresetSelected": "Nicio presetare selectată",
-    "c2sNoPresets": "Nicio presetare salvată",
-    "c2sPresetDeleted": "Presetarea tunelului clientului a fost ștearsă",
-    "c2sPresetLoadError": "Presetările tunelului clientului nu au putut fi încărcate.",
-    "c2sPresetLoaded": "Presetarea tunelului clientului a fost încărcată local",
-    "c2sPresetName": "Nume presetat",
-    "c2sPresetNamePlaceholder": "Numele presetat al clientului",
-    "c2sPresetRenamed": "Presetarea tunelului clientului a fost redenumită",
-    "c2sPresetSaved": "Presetarea tunelului clientului a fost salvată",
-    "c2sPresetSyncNote": "Presetările sunt instantanee explicite; încărcarea uneia înlocuiește lista de tuneluri de clienți locali a acestui client desktop.",
-    "c2sPresetToLoad": "Presetare pentru încărcare",
-    "c2sTunnelPresets": "Presetări tunel client",
-    "c2sTunnelPresetsUnavailable": "Presetările tunelului client sunt disponibile numai în clientul desktop.",
-    "c2sPresetRenameError": "Nu s-a putut redenumi presetarea",
-    "c2sPresetDeleteError": "Nu s-a putut șterge presetarea"
-  },
-  "tunnels": {
-    "attempt": "Încercare {{current}} din {{max}}",
-    "autoNameClientDynamic": "ȘOSETE {{localPort}} prin {{endpoint}}",
-    "autoNameClientLocal": "Local {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → local {{localPort}}",
-    "autoStart": "Pornire automată",
-    "cancel": "Anula",
-    "canceling": "Se anulează...",
-    "clientAutoStartDesc": "Pornește când se deschide acest client desktop și rămâne conectat.",
-    "clientManualStartDesc": "Folosește Start și Stop de pe acest rând. Termix nu îl va deschide automat.",
-    "clientRemoteServerNote": "Redirecționarea la distanță poate necesita AllowTcpForwarding și GatewayPorts pe serverul SSH al terminalului. Portul la distanță se închide când acest desktop se deconectează.",
-    "clientTunnelStarted": "Tunelul clientului a fost pornit",
-    "clientTunnelStopped": "Tunelul clientului s-a oprit",
-    "clientTunnels": "Tuneluri client",
-    "connected": "Conectat",
-    "connecting": "Se conectează...",
-    "createFirstTunnelMessage": "Nu ați creat încă niciun tunel SSH. Configurați conexiunile la tunel în Host Manager pentru a începe.",
-    "currentHostPort": "Portul gazdă curent",
-    "destination": "Destinaţie",
-    "destinationAddress": "Adresă de destinație",
-    "destinationPort": "Port de destinație",
-    "disconnected": "Deconectat",
-    "duplicateAutoStartBind": "Doar un tunel client cu pornire automată poate utiliza {{bind}}.",
-    "endpointPort": "Portul punctului final",
-    "endpointSshHost": "Gazdă SSH pentru punct final",
-    "endpointSshHostPlaceholder": "Selectați o gazdă configurată",
-    "endpointSshHostRequired": "Selectați o gazdă SSH endpoint pentru fiecare tunel client.",
-    "error": "Eroare",
-    "forwardDescriptionClientDynamic": "ȘOSETE pe portul local {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "Local {{sourcePort}} → la distanță {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "La distanță {{sourcePort}} → local {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "ȘOSETE pe gazda curentă {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Gazdă curentă {{sourcePort}} → punct final {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Punct final {{endpointPort}} → gazdă curentă {{sourcePort}}.",
-    "host": "Gazdă",
-    "intermediateHost": "Gazdă intermediară",
-    "invalidBindIp": "Adresa IP locală trebuie să fie o adresă IPv4 validă.",
-    "invalidEndpointPort": "Portul punctului final trebuie să fie între 1 și 65535.",
-    "invalidLocalPort": "Portul local trebuie să fie între 1 și 65535.",
-    "invalidLocalTargetIp": "Adresa IP locală țintă trebuie să fie o adresă IPv4 validă.",
-    "invalidLocalTargetPort": "Portul țintă local trebuie să fie între 1 și 65535.",
-    "invalidRemoteAddress": "Este necesară adresa la distanță.",
-    "invalidRemotePort": "Portul la distanță trebuie să fie între 1 și 65535.",
-    "lastError": "Ultima eroare",
-    "lastStarted": "Ultima pornire",
-    "lastTested": "Ultima testare",
-    "localAddress": "Adresă locală",
-    "localPort": "Port local",
-    "localSaveError": "Nu s-au putut salva tunelurile clientului local",
-    "localSaved": "Tunelurile clientului au fost salvate",
-    "manualControlError": "Nu s-a putut actualiza starea tunelului.",
-    "maxRetries": "Număr maxim de reîncercări",
-    "mode": "Mod",
-    "nextRetryIn": "Următoarea reîncercare în {{seconds}} secunde",
-    "noClientTunnels": "Nu sunt configurate tuneluri client pe acest desktop.",
-    "noHostSelected": "Nicio gazdă selectată",
-    "noSshTunnels": "Fără tuneluri SSH",
-    "port": "Port",
-    "remoteBindAddress": "Adresă de legare la distanță",
-    "remoteHost": "Gazdă la distanță",
-    "remotePort": "Port la distanță",
-    "retryInterval": "Interval de reîncercare (secunde)",
-    "route": "Traseu:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → ȘOSETE prin {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} prin {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} pe {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Test",
-    "tunnelName": "Numele tunelului",
-    "tunnelTestFailed": "Testul tunelului a eșuat",
-    "tunnelTestSucceeded": "Testul tunelului a reușit",
-    "type": "Tipul de tunel",
-    "typeDynamic": "Dinamic (-D)",
-    "typeLocal": "Local (-L)",
-    "typeRemote": "Telecomandă (-R)",
-    "working": "Lucru...",
-    "activeCount": "{{connected}}/{{total}} activ",
-    "listensOn": "Legat la localhost:{{port}}",
-    "socksProxy": "Proxy SOCKS5",
-    "waiting": "Aşteptare",
-    "remoteSessionExpired": "Sesiunea de sincronizare la distanță a expirat. Reconectați sincronizarea la distanță și încercați din nou.",
-    "activeTunnels": "Tuneluri active",
-    "start": "Început",
-    "stop": "Stop",
-    "authTitle": "Autentificarea tunelului",
-    "authRetry": "Codul anterior nu a fost acceptat. Introduceți un cod nou.",
-    "authAnswer": "Răspuns de autentificare",
-    "authContinue": "Continua"
-  },
-  "permissions": {
-    "use": {
-      "title": "Folosește tuneluri",
-      "description": "Porniți, opriți și urmăriți tunelurile SSH și salvați presetările tunelului client."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Activează tunelurile",
-        "description": "Configurați tuneluri SSH prin această gazdă."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Tuneluri",
-    "feature_tunnels_desc": "Redirecționează porturile printr-un server pentru a accesa servicii care nu sunt expuse."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/ru_RU.json b/plugins/tunnels/locales/translated/ru_RU.json
deleted file mode 100644
index fd1fb95db..000000000
--- a/plugins/tunnels/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Добавить туннель",
-    "autoStartDesc": "Автоматически подключать этот туннель при загрузке хоста",
-    "autoStartLabel": "Автозапуск",
-    "connectBtn": "Подключиться",
-    "disconnectBtn": "Отключиться",
-    "enableTunneling": "Включить туннелирование",
-    "enableTunnelingDesc": "Включить функциональность SSH-туннеля для этого хоста",
-    "endpointHost": "Целевой хост",
-    "endpointHostPlaceholder": "Тот же хост, SSH-хост или доступный хост/IP-адрес",
-    "endpointPort": "Целевой порт",
-    "failedToConnectTunnel": "Не удалось подключиться",
-    "failedToDisconnectTunnel": "Не удалось отключиться",
-    "maxRetries": "Макс. число попыток",
-    "noTunnelsConfigured": "Туннели не настроены.",
-    "retryIntervalS": "Интервал повтора (с)",
-    "serverTunnelsSection": "Серверные туннели",
-    "sourcePort": "Исходный порт",
-    "tabTunnels": "Туннели",
-    "tunnelConnecting": "Туннель подключается...",
-    "tunnelDisconnected": "Туннель отключён",
-    "tunnelLabel": "Туннель {{number}}",
-    "tunnelModeDynamicDesc": "Создать SOCKS5-прокси на локальном порту для динамического пробрасывания портов.",
-    "tunnelModeLocalDesc": "Пробросить локальный порт на порт удалённого сервера (или хоста, доступного с него).",
-    "tunnelModeRemoteDesc": "Пробросить порт на удалённом сервере на локальный порт вашей машины.",
-    "tunnelRequirementsText": "На SSH-сервере должны быть установлены параметры GatewayPorts yes, AllowTcpForwarding yes и PermitRootLogin yes в /etc/ssh/sshd_config.",
-    "tunnelSettings": "Настройки туннеля",
-    "tunnelType": "Тип туннеля",
-    "bindHost": "Хост для привязки",
-    "docsLink": "Документация",
-    "hostNotFound": "Хост не найден",
-    "loadingHost": "Загрузка хоста..."
-  },
-  "nav": {
-    "portForwarding": "Пересылка",
-    "tunnels": "Туннели"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (слушать локально)",
-    "localTargetHost": "127.0.0.1 (цель на этом компьютере)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (прослушивание конечной точки)",
-    "remoteTargetHost": "127.0.0.1 (цель с конечной точки)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (SOCKS-слушатель)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "На этом рабочем столе настроено {{count}} локальных клиентских туннелей.",
-    "c2sLoadPreset": "Загрузить",
-    "c2sNoPresetSelected": "Предустановка не выбрана",
-    "c2sNoPresets": "Нет сохраненных предустановок",
-    "c2sPresetDeleted": "Предустановка клиентского туннеля удалена",
-    "c2sPresetLoadError": "Не удалось загрузить предустановки клиентских туннелей",
-    "c2sPresetLoaded": "Предустановка клиентского туннеля загружена локально",
-    "c2sPresetName": "Имя предустановки",
-    "c2sPresetNamePlaceholder": "Имя клиентской предустановки",
-    "c2sPresetRenamed": "Предустановка клиентского туннеля переименована",
-    "c2sPresetSaved": "Предустановка клиентского туннеля сохранена",
-    "c2sPresetSyncNote": "Предустановки — это явные снимки; загрузка одной заменяет список локальных клиентских туннелей этого десктопного клиента.",
-    "c2sPresetToLoad": "Предустановка для загрузки",
-    "c2sTunnelPresets": "Предустановки клиентских туннелей",
-    "c2sTunnelPresetsUnavailable": "Предустановки клиентских туннелей доступны только в десктопном клиенте.",
-    "c2sPresetRenameError": "Не удалось переименовать предустановку.",
-    "c2sPresetDeleteError": "Не удалось удалить предустановку."
-  },
-  "tunnels": {
-    "attempt": "Попытка {{current}} из {{max}}",
-    "autoNameClientDynamic": "SOCKS {{localPort}} через {{endpoint}}",
-    "autoNameClientLocal": "Локальный {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → локальный {{localPort}}",
-    "autoStart": "Автозапуск",
-    "cancel": "Отмена",
-    "canceling": "Отмена...",
-    "clientAutoStartDesc": "Запускается при открытии этого клиента рабочего стола и остается подключенным.",
-    "clientManualStartDesc": "Используйте «Запустить» и «Остановить» в этой строке. Termix не будет запускать его автоматически.",
-    "clientRemoteServerNote": "Удаленная переадресация может потребовать AllowTcpForwarding и GatewayPorts на конечном SSH-сервере. Удаленный порт закрывается при отключении этого рабочего стола.",
-    "clientTunnelStarted": "Клиентский туннель запущен",
-    "clientTunnelStopped": "Клиентский туннель остановлен",
-    "clientTunnels": "Клиентские туннели",
-    "connected": "Подключено",
-    "connecting": "Подключение...",
-    "createFirstTunnelMessage": "Вы ещё не создали ни одного SSH-туннеля. Настройте туннельные соединения в Менеджере хостов, чтобы начать.",
-    "currentHostPort": "Порт текущего хоста",
-    "destination": "Назначение",
-    "destinationAddress": "Адрес назначения",
-    "destinationPort": "Порт назначения",
-    "disconnected": "Отключено",
-    "duplicateAutoStartBind": "Только один клиентский туннель с автозапуском может использовать {{bind}}.",
-    "endpointPort": "Порт конечной точки",
-    "endpointSshHost": "Хост SSH конечной точки",
-    "endpointSshHostPlaceholder": "Выберите настроенный хост",
-    "endpointSshHostRequired": "Выберите хост SSH конечной точки для каждого клиентского туннеля.",
-    "error": "Ошибка",
-    "forwardDescriptionClientDynamic": "SOCKS на локальном порту {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "Локальный {{sourcePort}} → удалённый {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Удалённый {{sourcePort}} → локальный {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS на текущем хосте {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Текущий хост {{sourcePort}} → конечная точка {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Конечная точка {{endpointPort}} → текущий хост {{sourcePort}}.",
-    "host": "Хост",
-    "intermediateHost": "Промежуточный хост",
-    "invalidBindIp": "Локальный IP-адрес должен быть действительным адресом IPv4.",
-    "invalidEndpointPort": "Порт конечной точки должен быть в диапазоне от 1 до 65535.",
-    "invalidLocalPort": "Локальный порт должен быть в диапазоне от 1 до 65535.",
-    "invalidLocalTargetIp": "Локальный целевой IP-адрес должен быть действительным адресом IPv4.",
-    "invalidLocalTargetPort": "Локальный целевой порт должен быть в диапазоне от 1 до 65535.",
-    "invalidRemoteAddress": "Требуется удаленный адрес.",
-    "invalidRemotePort": "Удаленный порт должен быть в диапазоне от 1 до 65535.",
-    "lastError": "Последняя ошибка",
-    "lastStarted": "Последний запуск",
-    "lastTested": "Последняя проверка",
-    "localAddress": "Местный адрес",
-    "localPort": "Локальный порт",
-    "localSaveError": "Не удалось сохранить локальные клиентские туннели",
-    "localSaved": "Клиентские туннели сохранены",
-    "manualControlError": "Не удалось обновить состояние туннеля.",
-    "maxRetries": "Макс. попыток",
-    "mode": "Режим",
-    "nextRetryIn": "Следующая попытка через {{seconds}} сек.",
-    "noClientTunnels": "На этом рабочем столе не настроено ни одного клиентского туннеля.",
-    "noHostSelected": "Хост не выбран",
-    "noSshTunnels": "Нет SSH-туннелей",
-    "port": "Порт",
-    "remoteBindAddress": "Удаленный адрес привязки",
-    "remoteHost": "Удаленный хост",
-    "remotePort": "Удаленный порт",
-    "retryInterval": "Интервал повтора (секунд)",
-    "route": "Маршрут:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → SOCKS через {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} через {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} на {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Проверить",
-    "tunnelName": "Имя туннеля",
-    "tunnelTestFailed": "Проверка туннеля не удалась",
-    "tunnelTestSucceeded": "Проверка туннеля успешна",
-    "type": "Тип туннеля",
-    "typeDynamic": "Динамический (-D)",
-    "typeLocal": "Локальный (-L)",
-    "typeRemote": "Удалённый (-R)",
-    "working": "Выполняется...",
-    "activeCount": "{{connected}}/{{total}} активный",
-    "listensOn": "Привязка к localhost:{{port}}",
-    "socksProxy": "SOCKS5 прокси",
-    "waiting": "Ожидающий",
-    "remoteSessionExpired": "Сеанс удаленной синхронизации истек. Переподключитесь к удаленной синхронизации и попробуйте снова.",
-    "activeTunnels": "Активные туннели",
-    "start": "Запустить",
-    "stop": "Остановить",
-    "authTitle": "туннельная аутентификация",
-    "authRetry": "Предыдущий код не был принят. Введите новый код.",
-    "authAnswer": "Ответ аутентификации",
-    "authContinue": "Продолжить"
-  },
-  "permissions": {
-    "use": {
-      "title": "Используйте туннели",
-      "description": "Запуск, остановка и мониторинг SSH-туннелей, а также сохранение настроек клиентских туннелей."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Включить туннели",
-        "description": "Настройте SSH-туннели через этот хост."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Туннели",
-    "feature_tunnels_desc": "Перенаправляйте порты через сервер для доступа к службам, которые не доступны извне."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/sr_SP.json b/plugins/tunnels/locales/translated/sr_SP.json
deleted file mode 100644
index 1e2e0d1db..000000000
--- a/plugins/tunnels/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Додај тунел",
-    "autoStartDesc": "Аутоматски повежи овај тунел када се хост учита",
-    "autoStartLabel": "Аутоматско покретање",
-    "connectBtn": "Повежи се",
-    "disconnectBtn": "Прекини везу",
-    "enableTunneling": "Омогући тунелирање",
-    "enableTunnelingDesc": "Омогући функционалност SSH тунела за овај хост",
-    "endpointHost": "Крајњи хост",
-    "endpointHostPlaceholder": "Исти хост, SSH хост или доступни хост/IP адреса",
-    "endpointPort": "Порт крајње тачке",
-    "failedToConnectTunnel": "Повезивање није успело",
-    "failedToDisconnectTunnel": "Прекид везе није успео",
-    "maxRetries": "Максималан број поновних покушаја",
-    "noTunnelsConfigured": "Није конфигурисан ниједан тунел.",
-    "retryIntervalS": "Интервал поновног покушаја (s)",
-    "serverTunnelsSection": "Серверски тунели",
-    "sourcePort": "Изворни порт",
-    "tabTunnels": "Тунели",
-    "tunnelConnecting": "Тунел који се повезује...",
-    "tunnelDisconnected": "Тунел је искључен",
-    "tunnelLabel": "Тунел {{number}}",
-    "tunnelModeDynamicDesc": "Направите SOCKS5 прокси на локалном порту за динамичко прослеђивање портова.",
-    "tunnelModeLocalDesc": "Прослеђује локални порт на порт на удаљеном серверу (или хосту који је доступан са њега).",
-    "tunnelModeRemoteDesc": "Проследите порт на удаљеном серверу назад на локални порт на вашој машини.",
-    "tunnelRequirementsText": "SSH сервер мора имати подешена подешавања за GatewayPorts, AllowTcpForwarding и PermitRootLogin у /etc/ssh/sshd_config.",
-    "tunnelSettings": "Подешавања тунела",
-    "tunnelType": "Тип тунела",
-    "bindHost": "Повежи хост",
-    "docsLink": "Прикажи документе",
-    "hostNotFound": "Хост није пронађен",
-    "loadingHost": "Учитавање хоста..."
-  },
-  "nav": {
-    "portForwarding": "Преусмеравање",
-    "tunnels": "Тунели"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (слушај локално)",
-    "localTargetHost": "127.0.0.1 (циљ на овом рачунару)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (слушање на крајњој тачки)",
-    "remoteTargetHost": "127.0.0.1 (циљ са крајње тачке)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (SOCKS слушалац)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "{{count}} локалних клијентских тунела конфигурисаних на овој радној површини.",
-    "c2sLoadPreset": "Учитај",
-    "c2sNoPresetSelected": "Није изабран ниједан унапред подешени подешавања",
-    "c2sNoPresets": "Нема сачуваних предефинисаних подешавања",
-    "c2sPresetDeleted": "Унапред подешено подешавање тунела клијента је избрисано",
-    "c2sPresetLoadError": "Није успело учитавање унапред подешених подешавања клијентског тунела",
-    "c2sPresetLoaded": "Унапред подешено учитавање тунела клијента локално",
-    "c2sPresetName": "Име пресета",
-    "c2sPresetNamePlaceholder": "Име унапред подешеног подешавања клијента",
-    "c2sPresetRenamed": "Преименован је унапред одређен тунел клијента",
-    "c2sPresetSaved": "Унапред подешено подешавање тунела клијента је сачувано",
-    "c2sPresetSyncNote": "Унапред подешена подешавања су експлицитни снимци; учитавање једног замењује листу локалних тунела клијената овог десктоп клијента.",
-    "c2sPresetToLoad": "Унапред подешено за учитавање",
-    "c2sTunnelPresets": "Унапред подешена подешавања клијентског тунела",
-    "c2sTunnelPresetsUnavailable": "Унапред подешена подешавања тунела клијента доступна су само у десктоп клијенту.",
-    "c2sPresetRenameError": "Преименовање унапред подешеног подешавања није успело",
-    "c2sPresetDeleteError": "Брисање унапред подешеног подешавања није успело"
-  },
-  "tunnels": {
-    "attempt": "Покушај {{current}} од {{max}}",
-    "autoNameClientDynamic": "ЧАРАПЕ {{localPort}} преко {{endpoint}}",
-    "autoNameClientLocal": "Локално {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → локално {{localPort}}",
-    "autoStart": "Аутоматски старт",
-    "cancel": "Откажи",
-    "canceling": "Отказивање...",
-    "clientAutoStartDesc": "Покреће се када се овај десктоп клијент отвори и остане повезан.",
-    "clientManualStartDesc": "Користите опције „Старт“ и „Стоп“ из овог реда. Termix га неће аутоматски отворити.",
-    "clientRemoteServerNote": "Даљинско преусмеравање може захтевати AllowTcpForwarding и GatewayPorts на SSH серверу крајње тачке. Удаљени порт се затвара када се ова радна површина искључи.",
-    "clientTunnelStarted": "Тунел клијента је покренут",
-    "clientTunnelStopped": "Тунел клијента је заустављен",
-    "clientTunnels": "Клијентски тунели",
-    "connected": "Повезано",
-    "connecting": "Повезивање...",
-    "createFirstTunnelMessage": "Још увек нисте креирали ниједан SSH тунел. Конфигуришите тунелске везе у Host Manager-у да бисте започели.",
-    "currentHostPort": "Тренутни порт хоста",
-    "destination": "Одредиште",
-    "destinationAddress": "Адреса одредишта",
-    "destinationPort": "Одредишна лука",
-    "disconnected": "Искључено",
-    "duplicateAutoStartBind": "Само један аутоматски покренути клијентски тунел може да користи {{bind}}.",
-    "endpointPort": "Порт крајње тачке",
-    "endpointSshHost": "SSH хост крајње тачке",
-    "endpointSshHostPlaceholder": "Изаберите конфигурисани хост",
-    "endpointSshHostRequired": "Изаберите SSH хост крајње тачке за сваки клијентски тунел.",
-    "error": "Грешка",
-    "forwardDescriptionClientDynamic": "SOCKS на локалном порту {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "Локално {{sourcePort}} → удаљено {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Удаљено {{sourcePort}} → локално {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS на тренутном хосту {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Тренутни хост {{sourcePort}} → крајња тачка {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Крајња тачка {{endpointPort}} → тренутни хост {{sourcePort}}.",
-    "host": "Домаћин",
-    "intermediateHost": "Посредни домаћин",
-    "invalidBindIp": "Локална IP адреса мора бити важећа IPv4 адреса.",
-    "invalidEndpointPort": "Порт крајње тачке мора бити између 1 и 65535.",
-    "invalidLocalPort": "Локални порт мора бити између 1 и 65535.",
-    "invalidLocalTargetIp": "Локална циљна IP адреса мора бити важећа IPv4 адреса.",
-    "invalidLocalTargetPort": "Локални циљни порт мора бити између 1 и 65535.",
-    "invalidRemoteAddress": "Удаљена адреса је обавезна.",
-    "invalidRemotePort": "Удаљени порт мора бити између 1 и 65535.",
-    "lastError": "Последња грешка",
-    "lastStarted": "Последњи пут започет",
-    "lastTested": "Последње тестирање",
-    "localAddress": "Локална адреса",
-    "localPort": "Локални порт",
-    "localSaveError": "Чување локалних клијентских тунела није успело",
-    "localSaved": "Тунели клијента сачувани",
-    "manualControlError": "Ажурирање стања тунела није успело.",
-    "maxRetries": "Максималан број поновних покушаја",
-    "mode": "Режим",
-    "nextRetryIn": "Следећи поновни покушај за {{seconds}} секунди",
-    "noClientTunnels": "Ниједан клијентски тунел није конфигурисан на овој радној површини.",
-    "noHostSelected": "Није изабран домаћин",
-    "noSshTunnels": "Нема SSH тунела",
-    "port": "Лука",
-    "remoteBindAddress": "Адреса за удаљено повезивање",
-    "remoteHost": "Удаљени хост",
-    "remotePort": "Удаљени порт",
-    "retryInterval": "Интервал поновног покушаја (секунде)",
-    "route": "Рута:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → ЧАРАПЕ преко {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} преко {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} на {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Тест",
-    "tunnelName": "Назив тунела",
-    "tunnelTestFailed": "Тест тунела није успео",
-    "tunnelTestSucceeded": "Тест тунела је успешан",
-    "type": "Тип тунела",
-    "typeDynamic": "Динамички (-Д)",
-    "typeLocal": "Локално (-Л)",
-    "typeRemote": "Даљински (-R)",
-    "working": "Ради се...",
-    "activeCount": "{{connected}}/{{total}} активно",
-    "listensOn": "Везано са локалним хостом:{{port}}",
-    "socksProxy": "SOCKS5 прокси",
-    "waiting": "Чекање",
-    "remoteSessionExpired": "Сесија даљинске синхронизације је истекла. Поново се повежите са даљинском синхронизацијом и покушајте поново.",
-    "activeTunnels": "Активни тунели",
-    "start": "Почетак",
-    "stop": "Заустави",
-    "authTitle": "Аутентификација тунела",
-    "authRetry": "Претходни код није прихваћен. Унесите нови код.",
-    "authAnswer": "Одговор на аутентификацију",
-    "authContinue": "Настави"
-  },
-  "permissions": {
-    "use": {
-      "title": "Користите тунеле",
-      "description": "Покрените, зауставите и гледајте SSH тунеле и сачувајте унапред подешене поставке клијентских тунела."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Омогући тунеле",
-        "description": "Подесите SSH тунеле преко овог хоста."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Тунели",
-    "feature_tunnels_desc": "Прослеђујте портове кроз сервер да бисте дошли до сервиса који нису изложени."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/sv_SE.json b/plugins/tunnels/locales/translated/sv_SE.json
deleted file mode 100644
index 30eebfa5b..000000000
--- a/plugins/tunnels/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Lägg till tunnel",
-    "autoStartDesc": "Anslut automatiskt den här tunneln när värden laddas",
-    "autoStartLabel": "Autostart",
-    "connectBtn": "Ansluta",
-    "disconnectBtn": "Koppla från",
-    "enableTunneling": "Aktivera tunnelering",
-    "enableTunnelingDesc": "Aktivera SSH-tunnelfunktionalitet för den här värden",
-    "endpointHost": "Slutpunktsvärd",
-    "endpointHostPlaceholder": "Samma värd, SSH-värd eller nåbar värd/IP",
-    "endpointPort": "Slutpunktsport",
-    "failedToConnectTunnel": "Misslyckades med att ansluta",
-    "failedToDisconnectTunnel": "Misslyckades med att koppla från",
-    "maxRetries": "Max antal återförsök",
-    "noTunnelsConfigured": "Inga tunnlar konfigurerade.",
-    "retryIntervalS": "Intervall för återförsök (s)",
-    "serverTunnelsSection": "Servertunnlar",
-    "sourcePort": "Källport",
-    "tabTunnels": "Tunnlar",
-    "tunnelConnecting": "Tunnelförbindelse...",
-    "tunnelDisconnected": "Tunneln frånkopplad",
-    "tunnelLabel": "Tunnel {{number}}",
-    "tunnelModeDynamicDesc": "Skapa en SOCKS5-proxy på en lokal port för dynamisk portvidarebefordran.",
-    "tunnelModeLocalDesc": "Vidarebefordra en lokal port till en port på fjärrservern (eller en värd som är nåbar från den).",
-    "tunnelModeRemoteDesc": "Vidarebefordra en port på fjärrservern tillbaka till en lokal port på din maskin.",
-    "tunnelRequirementsText": "SSH-servern måste ha GatewayPorts ja, AllowTcpForwarding ja och PermitRootLogin ja angivna i /etc/ssh/sshd_config.",
-    "tunnelSettings": "Tunnelinställningar",
-    "tunnelType": "Tunneltyp",
-    "bindHost": "Bind värd",
-    "docsLink": "Visa dokument",
-    "hostNotFound": "Värden hittades inte",
-    "loadingHost": "Laddar värd..."
-  },
-  "nav": {
-    "portForwarding": "Spedition",
-    "tunnels": "Tunnlar"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (lyssna lokalt)",
-    "localTargetHost": "127.0.0.1 (mål på den här datorn)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (lyssna på slutpunkten)",
-    "remoteTargetHost": "127.0.0.1 (mål från slutpunkt)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (SOCKS-lyssnare)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "{{count}} lokala klienttunnlar konfigurerade på den här skrivbordet.",
-    "c2sLoadPreset": "Ladda",
-    "c2sNoPresetSelected": "Ingen förinställning vald",
-    "c2sNoPresets": "Inga förinställningar sparade",
-    "c2sPresetDeleted": "Förinställningen för klienttunneln har raderats",
-    "c2sPresetLoadError": "Misslyckades med att läsa in förinställningar för klienttunneln",
-    "c2sPresetLoaded": "Förinställningen för klienttunnel laddas lokalt",
-    "c2sPresetName": "Förinställt namn",
-    "c2sPresetNamePlaceholder": "Klientförinställningsnamn",
-    "c2sPresetRenamed": "Förinställningen för klienttunneln har bytt namn",
-    "c2sPresetSaved": "Förinställningen för klienttunneln sparad",
-    "c2sPresetSyncNote": "Förinställningar är explicita ögonblicksbilder; om en sådan läses in ersätts den här skrivbordsklientens lokala klienttunnellista.",
-    "c2sPresetToLoad": "Förinställning att ladda",
-    "c2sTunnelPresets": "Förinställningar för klienttunnel",
-    "c2sTunnelPresetsUnavailable": "Förinställningar för klienttunneln är endast tillgängliga i skrivbordsklienten.",
-    "c2sPresetRenameError": "Misslyckades med att byta namn på förinställningen",
-    "c2sPresetDeleteError": "Misslyckades med att ta bort förinställningen"
-  },
-  "tunnels": {
-    "attempt": "Försök {{current}} av {{max}}",
-    "autoNameClientDynamic": "STRUMPOCKOR {{localPort}} via {{endpoint}}",
-    "autoNameClientLocal": "Lokal {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → lokal {{localPort}}",
-    "autoStart": "Automatisk start",
-    "cancel": "Avboka",
-    "canceling": "Inställande...",
-    "clientAutoStartDesc": "Startar när den här skrivbordsklienten öppnas och förblir ansluten.",
-    "clientManualStartDesc": "Använd Start och Stopp från den här raden. Termix öppnar den inte automatiskt.",
-    "clientRemoteServerNote": "Fjärrvidarebefordran kan kräva AllowTcpForwarding och GatewayPorts på slutpunktens SSH-server. Fjärrporten stängs när den här skrivbordsmiljön kopplas bort.",
-    "clientTunnelStarted": "Klienttunneln har startats",
-    "clientTunnelStopped": "Klienttunneln stoppad",
-    "clientTunnels": "Klienttunnlar",
-    "connected": "Ansluten",
-    "connecting": "Ansluter...",
-    "createFirstTunnelMessage": "Du har inte skapat några SSH-tunnlar än. Konfigurera tunnelanslutningar i Host Manager för att komma igång.",
-    "currentHostPort": "Nuvarande värdport",
-    "destination": "Destination",
-    "destinationAddress": "Destinationsadress",
-    "destinationPort": "Destinationshamn",
-    "disconnected": "Osammanhängande",
-    "duplicateAutoStartBind": "Endast en automatiskt startad klienttunnel kan använda {{bind}}.",
-    "endpointPort": "Slutpunktsport",
-    "endpointSshHost": "Slutpunkts-SSH-värd",
-    "endpointSshHostPlaceholder": "Välj en konfigurerad värd",
-    "endpointSshHostRequired": "Välj en SSH-värd för slutpunkten för varje klienttunnel.",
-    "error": "Fel",
-    "forwardDescriptionClientDynamic": "SOCKS på lokal port {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "Lokal {{sourcePort}} → fjärrkontroll {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Fjärrstyrd {{sourcePort}} → lokal {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS på nuvarande värd {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Nuvarande värd {{sourcePort}} → slutpunkt {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Slutpunkt {{endpointPort}} → aktuell värd {{sourcePort}}.",
-    "host": "Värd",
-    "intermediateHost": "Mellanvärd",
-    "invalidBindIp": "Lokal IP-adress måste vara en giltig IPv4-adress.",
-    "invalidEndpointPort": "Slutpunktsporten måste vara mellan 1 och 65535.",
-    "invalidLocalPort": "Den lokala porten måste vara mellan 1 och 65535.",
-    "invalidLocalTargetIp": "Den lokala mål-IP-adressen måste vara en giltig IPv4-adress.",
-    "invalidLocalTargetPort": "Den lokala målporten måste vara mellan 1 och 65535.",
-    "invalidRemoteAddress": "Fjärradress krävs.",
-    "invalidRemotePort": "Fjärrporten måste vara mellan 1 och 65535.",
-    "lastError": "Senaste felet",
-    "lastStarted": "Senast startade",
-    "lastTested": "Senast testad",
-    "localAddress": "Lokal adress",
-    "localPort": "Lokal hamn",
-    "localSaveError": "Misslyckades med att spara lokala klienttunnlar",
-    "localSaved": "Klienttunnlar sparade",
-    "manualControlError": "Misslyckades med att uppdatera tunnelns tillstånd.",
-    "maxRetries": "Max antal återförsök",
-    "mode": "Läge",
-    "nextRetryIn": "Nästa försök om {{seconds}} sekunder",
-    "noClientTunnels": "Inga klienttunnlar konfigurerade på den här skrivbordet.",
-    "noHostSelected": "Ingen värd vald",
-    "noSshTunnels": "Inga SSH-tunnlar",
-    "port": "Hamn",
-    "remoteBindAddress": "Fjärrbindningsadress",
-    "remoteHost": "Fjärrvärd",
-    "remotePort": "Fjärrport",
-    "retryInterval": "Intervall för återförsök (sekunder)",
-    "route": "Rutt:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → SOCKS via {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} via {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} på {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Testa",
-    "tunnelName": "Tunnelnamn",
-    "tunnelTestFailed": "Tunneltestet misslyckades",
-    "tunnelTestSucceeded": "Tunneltestet lyckades",
-    "type": "Tunneltyp",
-    "typeDynamic": "Dynamisk (-D)",
-    "typeLocal": "Lokal (-L)",
-    "typeRemote": "Fjärrkontroll (-R)",
-    "working": "Arbetssätt...",
-    "activeCount": "{{connected}}/{{total}} aktiv",
-    "listensOn": "Bunden till lokalvärd:{{port}}",
-    "socksProxy": "SOCKS5-proxy",
-    "waiting": "Väntan",
-    "remoteSessionExpired": "Fjärrsynkroniseringssessionen har upphört. Återanslut fjärrsynkroniseringen och försök igen.",
-    "activeTunnels": "Aktiva tunnlar",
-    "start": "Start",
-    "stop": "Stopp",
-    "authTitle": "Tunnelautentisering",
-    "authRetry": "Den tidigare koden accepterades inte. Ange en ny kod.",
-    "authAnswer": "Autentiseringssvar",
-    "authContinue": "Fortsätta"
-  },
-  "permissions": {
-    "use": {
-      "title": "Använd tunnlar",
-      "description": "Starta, stoppa och övervaka SSH-tunnlar och spara förinställningar för klienttunneln."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Aktivera tunnlar",
-        "description": "Konfigurera SSH-tunnlar genom den här värden."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Tunnlar",
-    "feature_tunnels_desc": "Vidarebefordra portar via en server för att nå tjänster som inte är exponerade."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/th_TH.json b/plugins/tunnels/locales/translated/th_TH.json
deleted file mode 100644
index 566f3bd07..000000000
--- a/plugins/tunnels/locales/translated/th_TH.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "เพิ่มอุโมงค์",
-    "autoStartDesc": "เชื่อมต่ออุโมงค์นี้โดยอัตโนมัติเมื่อโหลดโฮสต์เสร็จ",
-    "autoStartLabel": "เริ่มอัตโนมัติ",
-    "connectBtn": "เชื่อมต่อ",
-    "disconnectBtn": "ตัดการเชื่อมต่อ",
-    "enableTunneling": "เปิดใช้งานการสร้างอุโมงค์",
-    "enableTunnelingDesc": "เปิดใช้งานฟังก์ชันอุโมงค์ SSH สำหรับโฮสต์นี้",
-    "endpointHost": "โฮสต์ปลายทาง",
-    "endpointHostPlaceholder": "โฮสต์เดียวกัน โฮสต์ SSH หรือโฮสต์/IP ที่สามารถเข้าถึงได้",
-    "endpointPort": "พอร์ตปลายทาง",
-    "failedToConnectTunnel": "ไม่สามารถเชื่อมต่อได้",
-    "failedToDisconnectTunnel": "ไม่สามารถตัดการเชื่อมต่อได้",
-    "maxRetries": "จำนวนครั้งการลองใหม่สูงสุด",
-    "noTunnelsConfigured": "ไม่มีการกำหนดค่าอุโมงค์ใดๆ",
-    "retryIntervalS": "ช่วงเวลาการลองใหม่ (วินาที)",
-    "serverTunnelsSection": "อุโมงค์เซิร์ฟเวอร์",
-    "sourcePort": "พอร์ตต้นทาง",
-    "tabTunnels": "อุโมงค์",
-    "tunnelConnecting": "อุโมงค์เชื่อมต่อ...",
-    "tunnelDisconnected": "อุโมงค์ถูกตัดการเชื่อมต่อ",
-    "tunnelLabel": "อุโมงค์ {{number}}",
-    "tunnelModeDynamicDesc": "สร้างพร็อกซี SOCKS5 บนพอร์ตภายในเครื่องเพื่อใช้ในการส่งต่อพอร์ตแบบไดนามิก",
-    "tunnelModeLocalDesc": "ส่งต่อพอร์ตภายในเครื่องไปยังพอร์ตบนเซิร์ฟเวอร์ระยะไกล (หรือโฮสต์ที่สามารถเข้าถึงได้จากเซิร์ฟเวอร์นั้น)",
-    "tunnelModeRemoteDesc": "ส่งต่อพอร์ตบนเซิร์ฟเวอร์ระยะไกลกลับมายังพอร์ตภายในเครื่องของคุณ",
-    "tunnelRequirementsText": "เซิร์ฟเวอร์ SSH ต้องตั้งค่า GatewayPorts yes, AllowTcpForwarding yes และ PermitRootLogin yes ในไฟล์ /etc/ssh/sshd_config",
-    "tunnelSettings": "การตั้งค่าอุโมงค์",
-    "tunnelType": "ประเภทอุโมงค์",
-    "bindHost": "โฮสต์ผูก",
-    "docsLink": "ดูเอกสาร",
-    "hostNotFound": "ไม่พบโฮสต์",
-    "loadingHost": "กำลังโหลดโฮสต์..."
-  },
-  "nav": {
-    "portForwarding": "การส่งต่อ",
-    "tunnels": "อุโมงค์"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (ฟังในพื้นที่ของคุณ)",
-    "localTargetHost": "127.0.0.1 (เป้าหมายบนคอมพิวเตอร์เครื่องนี้)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (รับฟังที่ปลายทาง)",
-    "remoteTargetHost": "127.0.0.1 (เป้าหมายจากปลายทาง)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (ผู้ฟัง SOCKS)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "{{count}} อุโมงค์ไคลเอ็นต์ภายในเครื่องที่กำหนดค่าไว้บนเดสก์ท็อปนี้",
-    "c2sLoadPreset": "โหลด",
-    "c2sNoPresetSelected": "ไม่ได้เลือกค่าที่ตั้งไว้ล่วงหน้า",
-    "c2sNoPresets": "ไม่มีการบันทึกค่าที่ตั้งไว้ล่วงหน้า",
-    "c2sPresetDeleted": "ลบการตั้งค่าล่วงหน้าของอุโมงค์ไคลเอ็นต์แล้ว",
-    "c2sPresetLoadError": "ไม่สามารถโหลดค่าที่ตั้งไว้ล่วงหน้าของอุโมงค์ไคลเอ็นต์ได้",
-    "c2sPresetLoaded": "โหลดค่าที่ตั้งไว้ล่วงหน้าของอุโมงค์ไคลเอ็นต์ในเครื่องแล้ว",
-    "c2sPresetName": "ชื่อพรีเซ็ต",
-    "c2sPresetNamePlaceholder": "ชื่อการตั้งค่าล่วงหน้าของลูกค้า",
-    "c2sPresetRenamed": "เปลี่ยนชื่อพรีเซ็ตอุโมงค์ไคลเอ็นต์แล้ว",
-    "c2sPresetSaved": "บันทึกการตั้งค่าอุโมงค์ไคลเอ็นต์ไว้แล้ว",
-    "c2sPresetSyncNote": "ค่าที่ตั้งไว้ล่วงหน้าเป็นภาพรวมที่ถูกกำหนดไว้อย่างชัดเจน การโหลดค่าใดค่าหนึ่งจะแทนที่รายการอุโมงค์ไคลเอ็นต์ในเครื่องของไคลเอ็นต์เดสก์ท็อปนี้",
-    "c2sPresetToLoad": "ตั้งค่าล่วงหน้าเพื่อโหลด",
-    "c2sTunnelPresets": "ค่าที่ตั้งไว้ล่วงหน้าสำหรับอุโมงค์ไคลเอ็นต์",
-    "c2sTunnelPresetsUnavailable": "การตั้งค่าล่วงหน้าสำหรับอุโมงค์ไคลเอ็นต์มีให้ใช้งานเฉพาะในไคลเอ็นต์เดสก์ท็อปเท่านั้น",
-    "c2sPresetRenameError": "ไม่สามารถเปลี่ยนชื่อพรีเซ็ตได้",
-    "c2sPresetDeleteError": "ไม่สามารถลบค่าที่ตั้งไว้ล่วงหน้าได้"
-  },
-  "tunnels": {
-    "attempt": "ความพยายาม {{current}} ของ {{max}}",
-    "autoNameClientDynamic": "ถุงเท้า {{localPort}} ผ่าน {{endpoint}}",
-    "autoNameClientLocal": "โลคอล {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → โลคอล {{localPort}}",
-    "autoStart": "เริ่มอัตโนมัติ",
-    "cancel": "ยกเลิก",
-    "canceling": "ยกเลิก...",
-    "clientAutoStartDesc": "เริ่มทำงานเมื่อโปรแกรมไคลเอ็นต์บนเดสก์ท็อปนี้เปิดขึ้นและเชื่อมต่ออยู่ตลอดเวลา",
-    "clientManualStartDesc": "ใช้ปุ่ม Start และ Stop จากแถวนี้ Termix จะไม่เปิดไฟล์นี้โดยอัตโนมัติ",
-    "clientRemoteServerNote": "การส่งต่อพอร์ตระยะไกลอาจต้องใช้การตั้งค่า AllowTcpForwarding และ GatewayPorts บนเซิร์ฟเวอร์ SSH ปลายทาง พอร์ตระยะไกลจะปิดลงเมื่อเดสก์ท็อปนี้ตัดการเชื่อมต่อ",
-    "clientTunnelStarted": "อุโมงค์ไคลเอ็นต์เริ่มต้นแล้ว",
-    "clientTunnelStopped": "อุโมงค์ไคลเอ็นต์หยุดทำงานแล้ว",
-    "clientTunnels": "อุโมงค์ไคลเอ็นต์",
-    "connected": "เชื่อมต่อแล้ว",
-    "connecting": "กำลังเชื่อมต่อ...",
-    "createFirstTunnelMessage": "คุณยังไม่ได้สร้างอุโมงค์ SSH ใดๆ เลย กำหนดค่าการเชื่อมต่ออุโมงค์ใน Host Manager เพื่อเริ่มต้นใช้งาน",
-    "currentHostPort": "พอร์ตโฮสต์ปัจจุบัน",
-    "destination": "ปลายทาง",
-    "destinationAddress": "ที่อยู่ปลายทาง",
-    "destinationPort": "ท่าเรือปลายทาง",
-    "disconnected": "ตัดการเชื่อมต่อ",
-    "duplicateAutoStartBind": "อุโมงค์ไคลเอ็นต์ที่เริ่มต้นอัตโนมัติเพียงหนึ่งเดียวเท่านั้นที่สามารถใช้ {{bind}} ได้",
-    "endpointPort": "พอร์ตปลายทาง",
-    "endpointSshHost": "โฮสต์ SSH ปลายทาง",
-    "endpointSshHostPlaceholder": "เลือกโฮสต์ที่กำหนดค่าไว้",
-    "endpointSshHostRequired": "เลือกโฮสต์ SSH ปลายทางสำหรับแต่ละอุโมงค์ไคลเอ็นต์",
-    "error": "ข้อผิดพลาด",
-    "forwardDescriptionClientDynamic": "SOCKS บนพอร์ตท้องถิ่น {{sourcePort}}",
-    "forwardDescriptionClientLocal": "เครื่องโลคอล {{sourcePort}} → รีโมท {{endpointPort}}",
-    "forwardDescriptionClientRemote": "รีโมท {{sourcePort}} → โลคอล {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS บนโฮสต์ปัจจุบัน {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "โฮสต์ปัจจุบัน {{sourcePort}} → ปลายทาง {{endpointPort}}",
-    "forwardDescriptionServerRemote": "ปลายทาง {{endpointPort}} → โฮสต์ปัจจุบัน {{sourcePort}}",
-    "host": "เจ้าภาพ",
-    "intermediateHost": "โฮสต์ตัวกลาง",
-    "invalidBindIp": "ที่อยู่ IP ภายในเครื่องต้องเป็นที่อยู่ IPv4 ที่ถูกต้อง",
-    "invalidEndpointPort": "พอร์ตปลายทางต้องอยู่ระหว่าง 1 ถึง 65535",
-    "invalidLocalPort": "หมายเลขพอร์ตท้องถิ่นต้องอยู่ระหว่าง 1 ถึง 65535",
-    "invalidLocalTargetIp": "ที่อยู่ IP เป้าหมายในเครือข่ายท้องถิ่นต้องเป็นที่อยู่ IPv4 ที่ถูกต้อง",
-    "invalidLocalTargetPort": "พอร์ตเป้าหมายในเครื่องต้องอยู่ระหว่าง 1 ถึง 65535",
-    "invalidRemoteAddress": "ต้องระบุที่อยู่เครือข่ายระยะไกล",
-    "invalidRemotePort": "พอร์ตระยะไกลต้องอยู่ระหว่าง 1 ถึง 65535",
-    "lastError": "ข้อผิดพลาดล่าสุด",
-    "lastStarted": "เริ่มครั้งล่าสุด",
-    "lastTested": "ทดสอบครั้งล่าสุด",
-    "localAddress": "ที่อยู่ท้องถิ่น",
-    "localPort": "ท่าเรือท้องถิ่น",
-    "localSaveError": "ไม่สามารถบันทึกอุโมงค์ไคลเอ็นต์ในพื้นที่ได้",
-    "localSaved": "บันทึกอุโมงค์ไคลเอ็นต์แล้ว",
-    "manualControlError": "ไม่สามารถอัปเดตสถานะอุโมงค์ได้",
-    "maxRetries": "จำนวนครั้งการลองใหม่สูงสุด",
-    "mode": "โหมด",
-    "nextRetryIn": "ลองใหม่อีกครั้งใน {{seconds}} วินาที",
-    "noClientTunnels": "ไม่มีการกำหนดค่าอุโมงค์ไคลเอ็นต์บนเดสก์ท็อปนี้",
-    "noHostSelected": "ไม่ได้เลือกโฮสต์",
-    "noSshTunnels": "ไม่มีอุโมงค์ SSH",
-    "port": "ท่าเรือ",
-    "remoteBindAddress": "ที่อยู่การเชื่อมต่อระยะไกล",
-    "remoteHost": "โฮสต์ระยะไกล",
-    "remotePort": "พอร์ตระยะไกล",
-    "retryInterval": "ช่วงเวลาการลองใหม่ (วินาที)",
-    "route": "เส้นทาง:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → ถุงเท้า ผ่านทาง {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} ผ่าน {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} บน {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "ทดสอบ",
-    "tunnelName": "ชื่ออุโมงค์",
-    "tunnelTestFailed": "การทดสอบอุโมงค์ล้มเหลว",
-    "tunnelTestSucceeded": "การทดสอบอุโมงค์ประสบความสำเร็จ",
-    "type": "ประเภทอุโมงค์",
-    "typeDynamic": "ไดนามิก (-D)",
-    "typeLocal": "ท้องถิ่น (-L)",
-    "typeRemote": "รีโมท (-R)",
-    "working": "การทำงาน...",
-    "activeCount": "{{connected}}/{{total}} ใช้งานอยู่",
-    "listensOn": "เชื่อมต่อกับ localhost:{{port}}",
-    "socksProxy": "พร็อกซี SOCKS5",
-    "waiting": "ซึ่งรอคอย",
-    "remoteSessionExpired": "เซสชั่นการซิงค์ระยะไกลหมดอายุแล้ว โปรดเชื่อมต่อการซิงค์ระยะไกลอีกครั้งแล้วลองใหม่อีกครั้ง",
-    "activeTunnels": "อุโมงค์ที่ใช้งานอยู่",
-    "start": "เริ่ม",
-    "stop": "หยุด",
-    "authTitle": "การตรวจสอบสิทธิ์อุโมงค์",
-    "authRetry": "รหัสก่อนหน้านี้ใช้ไม่ได้ โปรดป้อนรหัสใหม่",
-    "authAnswer": "การตอบสนองการตรวจสอบสิทธิ์",
-    "authContinue": "ดำเนินการต่อ"
-  },
-  "permissions": {
-    "use": {
-      "title": "ใช้อุโมงค์",
-      "description": "เริ่ม หยุด และตรวจสอบอุโมงค์ SSH รวมถึงบันทึกการตั้งค่าล่วงหน้าของอุโมงค์ไคลเอ็นต์"
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "เปิดใช้งานอุโมงค์",
-        "description": "ตั้งค่าอุโมงค์ SSH ผ่านโฮสต์นี้"
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "อุโมงค์",
-    "feature_tunnels_desc": "ส่งต่อพอร์ตผ่านเซิร์ฟเวอร์เพื่อเข้าถึงบริการที่ไม่เปิดเผยต่อสาธารณะ"
-  }
-}
diff --git a/plugins/tunnels/locales/translated/tr_TR.json b/plugins/tunnels/locales/translated/tr_TR.json
deleted file mode 100644
index 34051ac19..000000000
--- a/plugins/tunnels/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Tünel Ekle",
-    "autoStartDesc": "Ana bilgisayar yüklendiğinde bu tüneli otomatik olarak bağla",
-    "autoStartLabel": "Otomatik başlat",
-    "connectBtn": "Bağlan",
-    "disconnectBtn": "Bağlantıyı Kes",
-    "enableTunneling": "Tünellemeyi Etkinleştir",
-    "enableTunnelingDesc": "Bu ana bilgisayar için SSH tünel işlevselliğini etkinleştir",
-    "endpointHost": "Hedef Ana Bilgisayar",
-    "endpointHostPlaceholder": "Aynı ana bilgisayar, SSH ana bilgisayarı veya erişilebilir ana bilgisayar/IP",
-    "endpointPort": "Hedef Port",
-    "failedToConnectTunnel": "Bağlantı başarısız oldu",
-    "failedToDisconnectTunnel": "Bağlantı kesme başarısız oldu",
-    "maxRetries": "Maksimum Yeniden Deneme",
-    "noTunnelsConfigured": "Yapılandırılmış tünel yok.",
-    "retryIntervalS": "Yeniden Deneme Aralığı (sn)",
-    "serverTunnelsSection": "Sunucu Tünelleri",
-    "sourcePort": "Kaynak Port",
-    "tabTunnels": "Tüneller",
-    "tunnelConnecting": "Tünel bağlanıyor...",
-    "tunnelDisconnected": "Tünel bağlantısı kesildi",
-    "tunnelLabel": "Tünel {{number}}",
-    "tunnelModeDynamicDesc": "Dinamik port yönlendirme için yerel bir portta bir SOCKS5 proxy oluşturun.",
-    "tunnelModeLocalDesc": "Yerel bir portu uzak sunucudaki bir porta (veya ondan erişilebilen bir sunucuya) yönlendirin.",
-    "tunnelModeRemoteDesc": "Uzak sunucudaki bir portu, makinenizdeki yerel bir porta geri yönlendirin.",
-    "tunnelRequirementsText": "SSH sunucusunda /etc/ssh/sshd_config dosyasında GatewayPorts yes, AllowTcpForwarding yes ve PermitRootLogin yes ayarlanmış olmalıdır.",
-    "tunnelSettings": "Tünel Ayarları",
-    "tunnelType": "Tünel Türü",
-    "bindHost": "Bağlanma Ana Bilgisayarı",
-    "docsLink": "Dokümanları görüntüle",
-    "hostNotFound": "Host bulunamadı",
-    "loadingHost": "Host yükleniyor..."
-  },
-  "nav": {
-    "portForwarding": "İletme",
-    "tunnels": "Tüneller"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (yerel olarak dinle)",
-    "localTargetHost": "127.0.0.1 (bu bilgisayardaki hedef)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (uç noktada dinleme)",
-    "remoteTargetHost": "127.0.0.1 (uç noktadan hedef)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (SOCKS dinleyici)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "Bu masaüstünde yapılandırılmış {{count}} yerel istemci tüneli.",
-    "c2sLoadPreset": "Yükle",
-    "c2sNoPresetSelected": "Ön ayar seçilmedi",
-    "c2sNoPresets": "Kayıtlı ön ayar yok",
-    "c2sPresetDeleted": "İstemci tünel ön ayarı silindi",
-    "c2sPresetLoadError": "İstemci tünel ön ayarları yüklenemedi",
-    "c2sPresetLoaded": "İstemci tünel ön ayarı yerel olarak yüklendi",
-    "c2sPresetName": "Ön Ayar Adı",
-    "c2sPresetNamePlaceholder": "İstemci ön ayar adı",
-    "c2sPresetRenamed": "İstemci tünel ön ayarı yeniden adlandırıldı",
-    "c2sPresetSaved": "İstemci tünel ön ayarı kaydedildi",
-    "c2sPresetSyncNote": "Ön ayarlar belirli anlık görüntülerdir; birini yüklemek, bu masaüstü istemcinin yerel istemci tünel listesini değiştirir.",
-    "c2sPresetToLoad": "Yüklenecek Ön Ayar",
-    "c2sTunnelPresets": "İstemci Tünel Ön Ayarları",
-    "c2sTunnelPresetsUnavailable": "İstemci tünel ön ayarları yalnızca masaüstü istemcisinde kullanılabilir.",
-    "c2sPresetRenameError": "Ön ayarın yeniden adlandırılması başarısız oldu.",
-    "c2sPresetDeleteError": "Ön ayar silinemedi."
-  },
-  "tunnels": {
-    "attempt": "Deneme {{current}}/{{max}}",
-    "autoNameClientDynamic": "SOCKS {{localPort}} üzerinden {{endpoint}}",
-    "autoNameClientLocal": "Yerel {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → yerel {{localPort}}",
-    "autoStart": "Otomatik Başlat",
-    "cancel": "İptal",
-    "canceling": "İptal ediliyor...",
-    "clientAutoStartDesc": "Bu masaüstü istemcisi açıldığında başlar ve bağlı kalır.",
-    "clientManualStartDesc": "Bu satırdaki Başlat ve Durdur'u kullanın. Termix otomatik olarak açmaz.",
-    "clientRemoteServerNote": "Uzak yönlendirme, uç nokta SSH sunucusunda AllowTcpForwarding ve GatewayPorts gerektirebilir. Bu masaüstü bağlantısı kesildiğinde uzak port kapanır.",
-    "clientTunnelStarted": "İstemci tüneli başlatıldı",
-    "clientTunnelStopped": "İstemci tüneli durduruldu",
-    "clientTunnels": "İstemci Tünelleri",
-    "connected": "Bağlı",
-    "connecting": "Bağlanıyor...",
-    "createFirstTunnelMessage": "Henüz hiç SSH tüneli oluşturmadınız. Başlamak için Ana Bilgisayar Yöneticisi'nde tünel bağlantılarını yapılandırın.",
-    "currentHostPort": "Geçerli Sunucu Portu",
-    "destination": "Hedef",
-    "destinationAddress": "Hedef Adresi",
-    "destinationPort": "Varış Limanı",
-    "disconnected": "Bağlantı kesildi",
-    "duplicateAutoStartBind": "Yalnızca bir otomatik başlatmalı istemci tüneli {{bind}} kullanabilir.",
-    "endpointPort": "Uç Nokta Portu",
-    "endpointSshHost": "Uç Nokta SSH Sunucusu",
-    "endpointSshHostPlaceholder": "Yapılandırılmış bir sunucu seçin",
-    "endpointSshHostRequired": "Her istemci tüneli için bir uç nokta SSH sunucusu seçin.",
-    "error": "Hata",
-    "forwardDescriptionClientDynamic": "Yerel port {{sourcePort}} üzerinde SOCKS.",
-    "forwardDescriptionClientLocal": "Yerel {{sourcePort}} → uzak {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Uzak {{sourcePort}} → yerel {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "Geçerli sunucuda SOCKS {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Geçerli sunucu {{sourcePort}} → uç nokta {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Uç nokta {{endpointPort}} → geçerli sunucu {{sourcePort}}.",
-    "host": "Host",
-    "intermediateHost": "Ara Ev Sahibi",
-    "invalidBindIp": "Yerel IP geçerli bir IPv4 adresi olmalıdır.",
-    "invalidEndpointPort": "Uç nokta portu 1 ile 65535 arasında olmalıdır.",
-    "invalidLocalPort": "Yerel port 1 ile 65535 arasında olmalıdır.",
-    "invalidLocalTargetIp": "Yerel hedef IP geçerli bir IPv4 adresi olmalıdır.",
-    "invalidLocalTargetPort": "Yerel hedef portu 1 ile 65535 arasında olmalıdır.",
-    "invalidRemoteAddress": "Uzak adres gereklidir.",
-    "invalidRemotePort": "Uzak port 1 ile 65535 arasında olmalıdır.",
-    "lastError": "Son hata",
-    "lastStarted": "Son başlatma",
-    "lastTested": "Son test",
-    "localAddress": "Yerel Adres",
-    "localPort": "Yerel Port",
-    "localSaveError": "Yerel istemci tünelleri kaydedilemedi",
-    "localSaved": "İstemci tünelleri kaydedildi",
-    "manualControlError": "Tünel durumu güncellenemedi.",
-    "maxRetries": "Maks. Yeniden Deneme",
-    "mode": "Mod",
-    "nextRetryIn": "Sonraki deneme {{seconds}} saniye sonra",
-    "noClientTunnels": "Bu masaüstünde hiçbir istemci tüneli yapılandırılmamış.",
-    "noHostSelected": "Hiçbir host seçilmedi",
-    "noSshTunnels": "SSH Tüneli yok",
-    "port": "Port",
-    "remoteBindAddress": "Uzak Bağlantı Adresi",
-    "remoteHost": "Uzak Sunucu",
-    "remotePort": "Uzak Port",
-    "retryInterval": "Yeniden Deneme Aralığı (saniye)",
-    "route": "Rota:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → {{endpoint}} üzerinden SOCKS",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} via {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} on {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Test Et",
-    "tunnelName": "Tünel Adı",
-    "tunnelTestFailed": "Tünel testi başarısız",
-    "tunnelTestSucceeded": "Tünel testi başarılı",
-    "type": "Tünel Türü",
-    "typeDynamic": "Dinamik (-D)",
-    "typeLocal": "Yerel (-L)",
-    "typeRemote": "Uzak (-R)",
-    "working": "Çalışıyor...",
-    "activeCount": "{{connected}}/{{total}} aktif",
-    "listensOn": "localhost'a bağlı:{{port}}",
-    "socksProxy": "SOCKS5 proxy",
-    "waiting": "Beklemek",
-    "remoteSessionExpired": "Uzaktan Senkronizasyon oturumunun süresi doldu. Lütfen Uzaktan Senkronizasyona yeniden bağlanın ve tekrar deneyin.",
-    "activeTunnels": "Etkin Tüneller",
-    "start": "Başlat",
-    "stop": "Durdur",
-    "authTitle": "Tünel kimlik doğrulaması",
-    "authRetry": "Önceki kod kabul edilmedi. Lütfen yeni bir kod girin.",
-    "authAnswer": "Kimlik doğrulama yanıtı",
-    "authContinue": "Devam"
-  },
-  "permissions": {
-    "use": {
-      "title": "Tünelleri kullanın",
-      "description": "SSH tünellerini başlatın, durdurun ve izleyin, ayrıca istemci tünel ön ayarlarını kaydedin."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Tünelleri etkinleştirin",
-        "description": "Bu sunucu üzerinden SSH tünelleri kurun."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Tüneller",
-    "feature_tunnels_desc": "Sunucu üzerinden port yönlendirmesi yaparak, doğrudan erişime açık olmayan hizmetlere ulaşabilirsiniz."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/uk_UA.json b/plugins/tunnels/locales/translated/uk_UA.json
deleted file mode 100644
index 2221edf30..000000000
--- a/plugins/tunnels/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Додати тунель",
-    "autoStartDesc": "Автоматично підключати цей тунель, коли хост завантажено",
-    "autoStartLabel": "Автоматичний запуск",
-    "connectBtn": "Підключитися",
-    "disconnectBtn": "Відключитися",
-    "enableTunneling": "Увімкнути тунелювання",
-    "enableTunnelingDesc": "Увімкнути функцію SSH-тунелю для цього хоста",
-    "endpointHost": "Кінцевий хост",
-    "endpointHostPlaceholder": "Той самий хост, хост SSH або доступний хост/IP-адреса",
-    "endpointPort": "Порт кінцевої точки",
-    "failedToConnectTunnel": "Не вдалося підключитися",
-    "failedToDisconnectTunnel": "Не вдалося відключитися",
-    "maxRetries": "Макс. кількість повторних спроб",
-    "noTunnelsConfigured": "Тунелі не налаштовано.",
-    "retryIntervalS": "Інтервал повторних спроб (с)",
-    "serverTunnelsSection": "Тунелі серверів",
-    "sourcePort": "Порт джерела",
-    "tabTunnels": "Тунелі",
-    "tunnelConnecting": "Тунель, що з'єднує...",
-    "tunnelDisconnected": "Тунель відключено",
-    "tunnelLabel": "Тунель {{number}}",
-    "tunnelModeDynamicDesc": "Створіть проксі-сервер SOCKS5 на локальному порту для динамічного переадресації портів.",
-    "tunnelModeLocalDesc": "Перенаправити локальний порт на порт на віддаленому сервері (або на хост, доступний з нього).",
-    "tunnelModeRemoteDesc": "Перенаправте порт на віддаленому сервері назад на локальний порт на вашому комп'ютері.",
-    "tunnelRequirementsText": "Для SSH-сервера у файлі /etc/ssh/sshd_config мають бути встановлені значення GatewayPorts: «так», AllowTcpForwarding: «так» та PermitRootLogin: «так».",
-    "tunnelSettings": "Налаштування тунелю",
-    "tunnelType": "Тип тунелю",
-    "bindHost": "Прив’язати хост",
-    "docsLink": "Переглянути документи",
-    "hostNotFound": "Хост не знайдено",
-    "loadingHost": "Завантаження хоста..."
-  },
-  "nav": {
-    "portForwarding": "Переадресація",
-    "tunnels": "Тунелі"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (прослуховувати локально)",
-    "localTargetHost": "127.0.0.1 (ціль на цьому комп'ютері)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (прослуховування на кінцевій точці)",
-    "remoteTargetHost": "127.0.0.1 (ціль з кінцевої точки)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (слухач SOCKS)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "{{count}} локальних клієнтських тунелів, налаштованих на цьому робочому столі.",
-    "c2sLoadPreset": "Навантаження",
-    "c2sNoPresetSelected": "Не вибрано пресетів",
-    "c2sNoPresets": "Немає збережених пресетів",
-    "c2sPresetDeleted": "Попередній налаштування тунелю клієнта видалено",
-    "c2sPresetLoadError": "Не вдалося завантажити попередні налаштування тунелю клієнта",
-    "c2sPresetLoaded": "Попередній набір тунелю клієнта завантажено локально",
-    "c2sPresetName": "Назва пресета",
-    "c2sPresetNamePlaceholder": "Назва попереднього налаштування клієнта",
-    "c2sPresetRenamed": "Попередній набір клієнтського тунелю перейменовано",
-    "c2sPresetSaved": "Збережено пресет тунелю клієнта",
-    "c2sPresetSyncNote": "Пресети – це явні знімки; завантаження одного з них замінює список тунелів локальних клієнтів цього клієнта робочого столу.",
-    "c2sPresetToLoad": "Попередньо налаштовані для завантаження",
-    "c2sTunnelPresets": "Пресети тунелю клієнта",
-    "c2sTunnelPresetsUnavailable": "Попередні налаштування тунелю клієнта доступні лише у клієнтській версії для настільних комп'ютерів.",
-    "c2sPresetRenameError": "Не вдалося перейменувати пресет",
-    "c2sPresetDeleteError": "Не вдалося видалити пресет"
-  },
-  "tunnels": {
-    "attempt": "Спроба {{current}} з {{max}}",
-    "autoNameClientDynamic": "ШКАРПЕТКИ {{localPort}} через {{endpoint}}",
-    "autoNameClientLocal": "Місцевий {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → місцевий {{localPort}}",
-    "autoStart": "Автоматичний запуск",
-    "cancel": "Скасувати",
-    "canceling": "Скасування...",
-    "clientAutoStartDesc": "Запускається, коли цей клієнт для робочого столу відкривається та залишається підключеним.",
-    "clientManualStartDesc": "Використовуйте «Пуск» і «Стоп» з цього рядка. Termix не відкриє його автоматично.",
-    "clientRemoteServerNote": "Для віддаленого переадресування можуть знадобитися параметри AllowTcpForwarding та GatewayPorts на SSH-сервері кінцевої точки. Віддалений порт закривається, коли цей робочий стіл відключається.",
-    "clientTunnelStarted": "Тунель клієнта розпочато",
-    "clientTunnelStopped": "Тунель клієнта зупинено",
-    "clientTunnels": "Тунелі клієнта",
-    "connected": "Підключено",
-    "connecting": "Підключення...",
-    "createFirstTunnelMessage": "Ви ще не створили жодного SSH-тунелю. Налаштуйте тунельні з’єднання в Host Manager, щоб розпочати.",
-    "currentHostPort": "Поточний порт хоста",
-    "destination": "Пункт призначення",
-    "destinationAddress": "Адреса призначення",
-    "destinationPort": "Порт призначення",
-    "disconnected": "Відключено",
-    "duplicateAutoStartBind": "Тільки один тунель клієнта з автозапуском може використовувати {{bind}}.",
-    "endpointPort": "Порт кінцевої точки",
-    "endpointSshHost": "Кінцева точка SSH-хост",
-    "endpointSshHostPlaceholder": "Виберіть налаштований хост",
-    "endpointSshHostRequired": "Виберіть кінцевий SSH-хост для кожного клієнтського тунелю.",
-    "error": "Помилка",
-    "forwardDescriptionClientDynamic": "SOCKS на локальному порту {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "Локальний {{sourcePort}} → віддалений {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Віддалений {{sourcePort}} → локальний {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS на поточному хості {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Поточний хост {{sourcePort}} → кінцева точка {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Кінцева точка {{endpointPort}} → поточний хост {{sourcePort}}.",
-    "host": "Хост",
-    "intermediateHost": "Проміжний господар",
-    "invalidBindIp": "Локальна IP-адреса має бути дійсною IPv4-адресою.",
-    "invalidEndpointPort": "Порт кінцевої точки має бути в діапазоні від 1 до 65535.",
-    "invalidLocalPort": "Локальний порт має бути в діапазоні від 1 до 65535.",
-    "invalidLocalTargetIp": "Локальна цільова IP-адреса має бути дійсною IPv4-адресою.",
-    "invalidLocalTargetPort": "Локальний цільовий порт має бути в діапазоні від 1 до 65535.",
-    "invalidRemoteAddress": "Потрібна віддалена адреса.",
-    "invalidRemotePort": "Віддалений порт має бути в діапазоні від 1 до 65535.",
-    "lastError": "Остання помилка",
-    "lastStarted": "Останній запуск",
-    "lastTested": "Останнє тестування",
-    "localAddress": "Локальна адреса",
-    "localPort": "Локальний порт",
-    "localSaveError": "Не вдалося зберегти локальні тунелі клієнта",
-    "localSaved": "Тунелі клієнтів збережено",
-    "manualControlError": "Не вдалося оновити стан тунелю.",
-    "maxRetries": "Макс. кількість повторних спроб",
-    "mode": "Режим",
-    "nextRetryIn": "Наступна спроба через {{seconds}} секунд",
-    "noClientTunnels": "На цьому робочому столі не налаштовано жодних клієнтських тунелів.",
-    "noHostSelected": "Хост не вибрано",
-    "noSshTunnels": "Без SSH-тунелів",
-    "port": "Порт",
-    "remoteBindAddress": "Адреса віддаленого зв'язування",
-    "remoteHost": "Віддалений хост",
-    "remotePort": "Віддалений порт",
-    "retryInterval": "Інтервал повторних спроб (секунди)",
-    "route": "Маршрут:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → ШКАРПЕТКИ через {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} через {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} на {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Тест",
-    "tunnelName": "Назва тунелю",
-    "tunnelTestFailed": "Випробування тунелю не вдалося",
-    "tunnelTestSucceeded": "Випробування тунелю успішно",
-    "type": "Тип тунелю",
-    "typeDynamic": "Динамічний (-D)",
-    "typeLocal": "Місцевий (-L)",
-    "typeRemote": "Віддалений (-R)",
-    "working": "Працюємо...",
-    "activeCount": "{{connected}}/{{total}} активний",
-    "listensOn": "Прив'язано до локального хоста:{{port}}",
-    "socksProxy": "Проксі SOCKS5",
-    "waiting": "Очікування",
-    "remoteSessionExpired": "Сеанс віддаленої синхронізації завершився. Перепідключіться до віддаленої синхронізації та повторіть спробу.",
-    "activeTunnels": "Активні тунелі",
-    "start": "Початок",
-    "stop": "СТІЙ",
-    "authTitle": "Аутентифікація тунелю",
-    "authRetry": "Попередній код не прийнято. Введіть новий код.",
-    "authAnswer": "Відповідь на автентифікацію",
-    "authContinue": "Продовжити"
-  },
-  "permissions": {
-    "use": {
-      "title": "Використовуйте тунелі",
-      "description": "Запускайте, зупиняйте та переглядайте SSH-тунелі, а також зберігайте пресетні налаштування клієнтських тунелів."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Увімкнути тунелі",
-        "description": "Налаштуйте SSH-тунелі через цей хост."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Тунелі",
-    "feature_tunnels_desc": "Переадресовувати порти через сервер для доступу до служб, які не піддаються впливу."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/vi_VN.json b/plugins/tunnels/locales/translated/vi_VN.json
deleted file mode 100644
index 0838763de..000000000
--- a/plugins/tunnels/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "Thêm đường hầm",
-    "autoStartDesc": "Tự động kết nối đường hầm này khi máy chủ được tải",
-    "autoStartLabel": "Tự động khởi động",
-    "connectBtn": "Kết nối",
-    "disconnectBtn": "Ngắt kết nối",
-    "enableTunneling": "Kích hoạt đường hầm",
-    "enableTunnelingDesc": "Kích hoạt chức năng đường hầm SSH cho máy chủ này",
-    "endpointHost": "Máy chủ đích",
-    "endpointHostPlaceholder": "Cùng máy chủ, máy chủ SSH, hoặc máy chủ/IP có thể truy cập",
-    "endpointPort": "Cổng đích",
-    "failedToConnectTunnel": "Kết nối thất bại",
-    "failedToDisconnectTunnel": "Ngắt kết nối thất bại",
-    "maxRetries": "Số lần thử lại tối đa",
-    "noTunnelsConfigured": "Chưa cấu hình đường hầm nào.",
-    "retryIntervalS": "Khoảng thời gian thử lại (giây)",
-    "serverTunnelsSection": "Đường hầm máy chủ",
-    "sourcePort": "Cổng nguồn",
-    "tabTunnels": "Đường hầm",
-    "tunnelConnecting": "Đang kết nối đường hầm...",
-    "tunnelDisconnected": "Đã ngắt kết nối đường hầm",
-    "tunnelLabel": "Đường hầm {{number}}",
-    "tunnelModeDynamicDesc": "Tạo proxy SOCKS5 trên một cổng cục bộ để chuyển tiếp cổng động.",
-    "tunnelModeLocalDesc": "Chuyển tiếp một cổng cục bộ đến một cổng trên máy chủ từ xa (hoặc máy chủ có thể truy cập từ đó).",
-    "tunnelModeRemoteDesc": "Chuyển tiếp một cổng trên máy chủ từ xa về một cổng cục bộ trên máy của bạn.",
-    "tunnelRequirementsText": "Máy chủ SSH phải có GatewayPorts yes, AllowTcpForwarding yes, và PermitRootLogin yes được đặt trong /etc/ssh/sshd_config.",
-    "tunnelSettings": "Cài đặt đường hầm",
-    "tunnelType": "Loại đường hầm",
-    "bindHost": "Máy chủ bind",
-    "docsLink": "Xem tài liệu",
-    "hostNotFound": "Không tìm thấy máy chủ",
-    "loadingHost": "Đang tải máy chủ..."
-  },
-  "nav": {
-    "portForwarding": "Chuyển tiếp",
-    "tunnels": "Đường hầm"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (lắng nghe cục bộ)",
-    "localTargetHost": "127.0.0.1 (đích trên máy này)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1 (lắng nghe trên điểm cuối)",
-    "remoteTargetHost": "127.0.0.1 (mục tiêu từ điểm cuối)",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1 (Trình nghe SOCKS)"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "{{count}} đường hầm máy khách cục bộ đã được cấu hình trên máy tính này.",
-    "c2sLoadPreset": "Tải",
-    "c2sNoPresetSelected": "Chưa chọn cài đặt sẵn",
-    "c2sNoPresets": "Chưa lưu cài đặt sẵn nào",
-    "c2sPresetDeleted": "Đã xóa cài đặt sẵn đường hầm máy khách",
-    "c2sPresetLoadError": "Tải cài đặt sẵn đường hầm máy khách thất bại",
-    "c2sPresetLoaded": "Đã tải cài đặt sẵn đường hầm máy khách cục bộ",
-    "c2sPresetName": "Tên cài đặt sẵn",
-    "c2sPresetNamePlaceholder": "Tên cài đặt sẵn máy khách",
-    "c2sPresetRenamed": "Đã đổi tên cài đặt sẵn đường hầm máy khách",
-    "c2sPresetSaved": "Đã lưu cài đặt sẵn đường hầm máy khách",
-    "c2sPresetSyncNote": "Cài đặt sẵn là ảnh chụp tức thời; tải một cài đặt sẽ thay thế danh sách đường hầm máy khách cục bộ trên máy này.",
-    "c2sPresetToLoad": "Cài đặt sẵn để tải",
-    "c2sTunnelPresets": "Cài đặt sẵn Đường hầm Máy khách",
-    "c2sTunnelPresetsUnavailable": "Cài đặt sẵn đường hầm máy khách chỉ khả dụng trên ứng dụng máy tính.",
-    "c2sPresetRenameError": "Không thể đổi tên cài đặt sẵn",
-    "c2sPresetDeleteError": "Không thể xóa cài đặt sẵn"
-  },
-  "tunnels": {
-    "attempt": "Lần thử {{current}} / {{max}}",
-    "autoNameClientDynamic": "SOCKS {{localPort}} qua {{endpoint}}",
-    "autoNameClientLocal": "Cục bộ {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → cục bộ {{localPort}}",
-    "autoStart": "Tự động khởi động",
-    "cancel": "Hủy",
-    "canceling": "Đang hủy...",
-    "clientAutoStartDesc": "Tự động khởi động khi mở ứng dụng máy khách và duy trì kết nối.",
-    "clientManualStartDesc": "Sử dụng nút Bắt đầu và Dừng trên dòng này. Termix sẽ không tự động mở.",
-    "clientRemoteServerNote": "Chuyển tiếp từ xa có thể yêu cầu AllowTcpForwarding và GatewayPorts trên máy chủ SSH điểm cuối. Cổng từ xa sẽ đóng khi máy này ngắt kết nối.",
-    "clientTunnelStarted": "Đường hầm máy khách đã khởi động",
-    "clientTunnelStopped": "Đường hầm máy khách đã dừng",
-    "clientTunnels": "Đường hầm máy khách",
-    "connected": "Đã kết nối",
-    "connecting": "Đang kết nối...",
-    "createFirstTunnelMessage": "Bạn chưa tạo đường hầm SSH nào. Hãy cấu hình kết nối đường hầm trong Trình quản lý máy chủ để bắt đầu.",
-    "currentHostPort": "Cổng máy hiện tại",
-    "destination": "Điểm đến",
-    "destinationAddress": "Địa chỉ đích",
-    "destinationPort": "Cảng đích",
-    "disconnected": "Đã ngắt kết nối",
-    "duplicateAutoStartBind": "Chỉ một đường hầm máy khách tự động có thể sử dụng {{bind}}.",
-    "endpointPort": "Cổng điểm cuối",
-    "endpointSshHost": "Máy chủ SSH điểm cuối",
-    "endpointSshHostPlaceholder": "Chọn máy chủ đã cấu hình",
-    "endpointSshHostRequired": "Chọn máy chủ SSH điểm cuối cho mỗi đường hầm máy khách.",
-    "error": "Lỗi",
-    "forwardDescriptionClientDynamic": "SOCKS trên cổng cục bộ {{sourcePort}}.",
-    "forwardDescriptionClientLocal": "Cục bộ {{sourcePort}} → từ xa {{endpointPort}}.",
-    "forwardDescriptionClientRemote": "Từ xa {{sourcePort}} → cục bộ {{endpointPort}}.",
-    "forwardDescriptionServerDynamic": "SOCKS trên máy chủ hiện tại {{sourcePort}}.",
-    "forwardDescriptionServerLocal": "Máy chủ hiện tại {{sourcePort}} → điểm cuối {{endpointPort}}.",
-    "forwardDescriptionServerRemote": "Điểm cuối {{endpointPort}} → máy chủ hiện tại {{sourcePort}}.",
-    "host": "Máy chủ",
-    "intermediateHost": "Máy chủ trung gian",
-    "invalidBindIp": "IP cục bộ phải là địa chỉ IPv4 hợp lệ.",
-    "invalidEndpointPort": "Cổng điểm cuối phải nằm trong khoảng 1 đến 65535.",
-    "invalidLocalPort": "Cổng cục bộ phải nằm trong khoảng 1 đến 65535.",
-    "invalidLocalTargetIp": "IP đích cục bộ phải là địa chỉ IPv4 hợp lệ.",
-    "invalidLocalTargetPort": "Cổng đích cục bộ phải nằm trong khoảng 1 đến 65535.",
-    "invalidRemoteAddress": "Cần có địa chỉ từ xa.",
-    "invalidRemotePort": "Cổng từ xa phải nằm trong khoảng 1 đến 65535.",
-    "lastError": "Lỗi cuối cùng",
-    "lastStarted": "Lần bắt đầu cuối",
-    "lastTested": "Lần kiểm tra cuối",
-    "localAddress": "Địa chỉ địa phương",
-    "localPort": "Cổng cục bộ",
-    "localSaveError": "Lưu đường hầm máy khách cục bộ thất bại",
-    "localSaved": "Đã lưu đường hầm máy khách",
-    "manualControlError": "Cập nhật trạng thái đường hầm thất bại.",
-    "maxRetries": "Số lần thử lại tối đa",
-    "mode": "Chế độ",
-    "nextRetryIn": "Thử lại sau {{seconds}} giây",
-    "noClientTunnels": "Chưa có đường hầm máy khách nào được cấu hình trên máy này.",
-    "noHostSelected": "Chưa chọn máy chủ",
-    "noSshTunnels": "Không có đường hầm SSH",
-    "port": "Cổng",
-    "remoteBindAddress": "Địa chỉ liên kết từ xa",
-    "remoteHost": "Máy chủ từ xa",
-    "remotePort": "Cổng từ xa",
-    "retryInterval": "Khoảng thời gian thử lại (giây)",
-    "route": "Tuyến:",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → SOCKS qua {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} qua {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} trên {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "Kiểm tra",
-    "tunnelName": "Tên đường hầm",
-    "tunnelTestFailed": "Kiểm tra đường hầm thất bại",
-    "tunnelTestSucceeded": "Kiểm tra đường hầm thành công",
-    "type": "Loại đường hầm",
-    "typeDynamic": "Động (-D)",
-    "typeLocal": "Cục bộ (-L)",
-    "typeRemote": "Từ xa (-R)",
-    "working": "Đang làm việc...",
-    "activeCount": "{{connected}}/{{total}} đang hoạt động",
-    "listensOn": "Đã kết nối với máy chủ cục bộ:{{port}}",
-    "socksProxy": "Máy chủ proxy SOCKS5",
-    "waiting": "Chờ",
-    "remoteSessionExpired": "Phiên đồng bộ từ xa đã hết hạn. Vui lòng kết nối lại đồng bộ từ xa và thử lại.",
-    "activeTunnels": "Đường hầm hoạt động",
-    "start": "Bắt đầu",
-    "stop": "Dừng",
-    "authTitle": "Xác thực đường hầm",
-    "authRetry": "Mã trước đó không được chấp nhận. Vui lòng nhập mã mới.",
-    "authAnswer": "Phản hồi xác thực",
-    "authContinue": "Tiếp tục"
-  },
-  "permissions": {
-    "use": {
-      "title": "Sử dụng đường hầm",
-      "description": "Khởi tạo, dừng và theo dõi các đường hầm SSH, cũng như lưu các thiết lập sẵn của đường hầm phía máy khách."
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "Kích hoạt đường hầm",
-        "description": "Thiết lập đường hầm SSH thông qua máy chủ này."
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "Đường hầm",
-    "feature_tunnels_desc": "Chuyển tiếp cổng thông qua máy chủ để truy cập các dịch vụ không được công khai."
-  }
-}
diff --git a/plugins/tunnels/locales/translated/zh_CN.json b/plugins/tunnels/locales/translated/zh_CN.json
deleted file mode 100644
index eb8e347f6..000000000
--- a/plugins/tunnels/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "添加隧道",
-    "autoStartDesc": "主机加载时自动连接此隧道",
-    "autoStartLabel": "自动启动",
-    "connectBtn": "连接",
-    "disconnectBtn": "断开",
-    "enableTunneling": "启用隧道",
-    "enableTunnelingDesc": "为此主机启用 SSH 隧道功能",
-    "endpointHost": "端点主机",
-    "endpointHostPlaceholder": "相同主机、SSH 主机或可访问的主机/IP",
-    "endpointPort": "端点端口",
-    "failedToConnectTunnel": "连接失败",
-    "failedToDisconnectTunnel": "断开连接失败",
-    "maxRetries": "最大重试次数",
-    "noTunnelsConfigured": "未配置隧道。",
-    "retryIntervalS": "重试间隔（秒）",
-    "serverTunnelsSection": "服务器隧道",
-    "sourcePort": "源端口",
-    "tabTunnels": "隧道",
-    "tunnelConnecting": "隧道连接中...",
-    "tunnelDisconnected": "隧道已断开连接",
-    "tunnelLabel": "隧道 {{number}}",
-    "tunnelModeDynamicDesc": "在本地端口上创建 SOCKS5 代理，用于动态端口转发。",
-    "tunnelModeLocalDesc": "将本地端口转发到远程服务器（或可从其访问的主机）上的端口。",
-    "tunnelModeRemoteDesc": "将远程服务器上的端口转发回您机器上的本地端口。",
-    "tunnelRequirementsText": "SSH 服务器必须在 /etc/ssh/sshd_config 中设置 GatewayPorts yes、AllowTcpForwarding yes 和 PermitRootLogin yes。",
-    "tunnelSettings": "隧道设置",
-    "tunnelType": "隧道类型",
-    "bindHost": "绑定主机",
-    "docsLink": "查看文档",
-    "hostNotFound": "未找到主机",
-    "loadingHost": "正在加载主机..."
-  },
-  "nav": {
-    "portForwarding": "转发",
-    "tunnels": "隧道"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (本地监听)",
-    "localTargetHost": "127.0.0.1 (此计算机上的目标)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1（监听端点）",
-    "remoteTargetHost": "127.0.0.1（来自端点的目标）",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1（SOCKS 监听器）"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "此桌面上已配置 {{count}} 条本地客户端隧道。",
-    "c2sLoadPreset": "加载",
-    "c2sNoPresetSelected": "未选择预设",
-    "c2sNoPresets": "无保存的预设",
-    "c2sPresetDeleted": "客户端隧道预设已删除",
-    "c2sPresetLoadError": "加载客户端隧道预设失败",
-    "c2sPresetLoaded": "客户端隧道预设已在本地加载",
-    "c2sPresetName": "预设名称",
-    "c2sPresetNamePlaceholder": "客户端预设名称",
-    "c2sPresetRenamed": "客户端隧道预设已重命名",
-    "c2sPresetSaved": "客户端隧道预设已保存",
-    "c2sPresetSyncNote": "预设是显式快照；加载预设将替换此桌面客户端的本地客户端隧道列表。",
-    "c2sPresetToLoad": "要加载的预设",
-    "c2sTunnelPresets": "客户端隧道预设",
-    "c2sTunnelPresetsUnavailable": "客户端隧道预设仅在桌面客户端中可用。",
-    "c2sPresetRenameError": "重命名预设失败",
-    "c2sPresetDeleteError": "删除预设失败"
-  },
-  "tunnels": {
-    "attempt": "尝试 {{current}}/{{max}}",
-    "autoNameClientDynamic": "SOCKS {{localPort}} 通过 {{endpoint}}",
-    "autoNameClientLocal": "本地 {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → 本地 {{localPort}}",
-    "autoStart": "自动启动",
-    "cancel": "取消",
-    "canceling": "取消中...",
-    "clientAutoStartDesc": "在此桌面客户端打开时启动并保持连接。",
-    "clientManualStartDesc": "从此行使用启动和停止。Termix 不会自动启动它。",
-    "clientRemoteServerNote": "远程转发可能需要在端点 SSH 服务器上设置 AllowTcpForwarding 和 GatewayPorts。此桌面断开连接时远程端口将关闭。",
-    "clientTunnelStarted": "客户端隧道已启动",
-    "clientTunnelStopped": "客户端隧道已停止",
-    "clientTunnels": "客户端隧道",
-    "connected": "已连接",
-    "connecting": "连接中...",
-    "createFirstTunnelMessage": "您尚未创建任何 SSH 隧道。在主机管理器中配置隧道连接以开始使用。",
-    "currentHostPort": "当前主机端口",
-    "destination": "目标",
-    "destinationAddress": "目的地地址",
-    "destinationPort": "目的港",
-    "disconnected": "已断开",
-    "duplicateAutoStartBind": "只有一个自启动客户端隧道可以使用 {{bind}}。",
-    "endpointPort": "端点端口",
-    "endpointSshHost": "端点 SSH 主机",
-    "endpointSshHostPlaceholder": "选择已配置的主机",
-    "endpointSshHostRequired": "为每个客户端隧道选择一个端点 SSH 主机。",
-    "error": "错误",
-    "forwardDescriptionClientDynamic": "本地端口 {{sourcePort}} 上的 SOCKS。",
-    "forwardDescriptionClientLocal": "本地 {{sourcePort}} → 远程 {{endpointPort}}。",
-    "forwardDescriptionClientRemote": "远程 {{sourcePort}} → 本地 {{endpointPort}}。",
-    "forwardDescriptionServerDynamic": "当前主机上的 SOCKS {{sourcePort}}。",
-    "forwardDescriptionServerLocal": "当前主机 {{sourcePort}} → 端点 {{endpointPort}}。",
-    "forwardDescriptionServerRemote": "端点 {{endpointPort}} → 当前主机 {{sourcePort}}。",
-    "host": "主机",
-    "intermediateHost": "中间宿主",
-    "invalidBindIp": "本地 IP 必须是有效的 IPv4 地址。",
-    "invalidEndpointPort": "端点端口必须在 1 到 65535 之间。",
-    "invalidLocalPort": "本地端口必须在 1 到 65535 之间。",
-    "invalidLocalTargetIp": "本地目标 IP 必须是有效的 IPv4 地址。",
-    "invalidLocalTargetPort": "本地目标端口必须在 1 到 65535 之间。",
-    "invalidRemoteAddress": "需要远程地址。",
-    "invalidRemotePort": "远程端口必须在 1 到 65535 之间。",
-    "lastError": "最后错误",
-    "lastStarted": "最后启动",
-    "lastTested": "最后测试",
-    "localAddress": "本地地址",
-    "localPort": "本地端口",
-    "localSaveError": "保存本地客户端隧道失败",
-    "localSaved": "客户端隧道已保存",
-    "manualControlError": "更新隧道状态失败。",
-    "maxRetries": "最大重试次数",
-    "mode": "模式",
-    "nextRetryIn": "{{seconds}} 秒后重试",
-    "noClientTunnels": "此桌面未配置客户端隧道。",
-    "noHostSelected": "未选择主机",
-    "noSshTunnels": "无 SSH 隧道",
-    "port": "端口",
-    "remoteBindAddress": "远程绑定地址",
-    "remoteHost": "远程主机",
-    "remotePort": "远程端口",
-    "retryInterval": "重试间隔（秒）",
-    "route": "路由：",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → SOCKS 通过 {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} 经由 {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} 在 {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "测试",
-    "tunnelName": "隧道名称",
-    "tunnelTestFailed": "隧道测试失败",
-    "tunnelTestSucceeded": "隧道测试成功",
-    "type": "隧道类型",
-    "typeDynamic": "动态 (-D)",
-    "typeLocal": "本地 (-L)",
-    "typeRemote": "远程 (-R)",
-    "working": "处理中...",
-    "activeCount": "{{connected}}/{{total}} 活动",
-    "listensOn": "绑定到本地主机：{{port}}",
-    "socksProxy": "SOCKS5代理",
-    "waiting": "等待",
-    "remoteSessionExpired": "远程同步会话已过期。请重新连接远程同步并重试。",
-    "activeTunnels": "活跃隧道",
-    "start": "启动",
-    "stop": "停止",
-    "authTitle": "隧道认证",
-    "authRetry": "之前的验证码无效。请输入新的验证码。",
-    "authAnswer": "身份验证响应",
-    "authContinue": "继续"
-  },
-  "permissions": {
-    "use": {
-      "title": "利用隧道",
-      "description": "启动、停止和监视 SSH 隧道，并保存客户端隧道预设。"
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "启用隧道",
-        "description": "通过此主机建立 SSH 隧道。"
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "隧道",
-    "feature_tunnels_desc": "通过服务器转发端口以访问未暴露的服务。"
-  }
-}
diff --git a/plugins/tunnels/locales/translated/zh_TW.json b/plugins/tunnels/locales/translated/zh_TW.json
deleted file mode 100644
index 706b05403..000000000
--- a/plugins/tunnels/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,175 +0,0 @@
-{
-  "hosts": {
-    "addTunnelBtn": "新增通道",
-    "autoStartDesc": "載入主機時自動連線此通道",
-    "autoStartLabel": "自動啟動",
-    "connectBtn": "連線",
-    "disconnectBtn": "中斷連線",
-    "enableTunneling": "啟用通道",
-    "enableTunnelingDesc": "為此主機啟用 SSH 通道功能",
-    "endpointHost": "端點主機",
-    "endpointHostPlaceholder": "同一主機、SSH 主機或可連線的主機/IP",
-    "endpointPort": "端點連接埠",
-    "failedToConnectTunnel": "連線失敗",
-    "failedToDisconnectTunnel": "中斷連線失敗",
-    "maxRetries": "最大重試次數",
-    "noTunnelsConfigured": "未設定任何通道。",
-    "retryIntervalS": "重試間隔（秒）",
-    "serverTunnelsSection": "伺服器通道",
-    "sourcePort": "來源連接埠",
-    "tabTunnels": "通道",
-    "tunnelConnecting": "通道連線中…",
-    "tunnelDisconnected": "通道已中斷連線",
-    "tunnelLabel": "通道 {{number}}",
-    "tunnelModeDynamicDesc": "在本機連接埠上建立 SOCKS5 代理以進行動態連接埠轉送。",
-    "tunnelModeLocalDesc": "將本機連接埠轉送至遠端伺服器的連接埠（或可從其連線的主機）。",
-    "tunnelModeRemoteDesc": "將遠端伺服器的連接埠轉送回本機的連接埠。",
-    "tunnelRequirementsText": "SSH 伺服器必須在 /etc/ssh/sshd_config 中設定 GatewayPorts yes、AllowTcpForwarding yes 以及 PermitRootLogin yes。",
-    "tunnelSettings": "通道設定",
-    "tunnelType": "通道類型",
-    "bindHost": "綁定主機",
-    "docsLink": "檢視文件",
-    "hostNotFound": "找不到主機",
-    "loadingHost": "正在載入主機..."
-  },
-  "nav": {
-    "portForwarding": "轉發",
-    "tunnels": "隧道"
-  },
-  "placeholders": {
-    "defaultEndpointPort": "224",
-    "defaultPort": "22",
-    "localListenerHost": "127.0.0.1 (本機監聽)",
-    "localTargetHost": "127.0.0.1 (此電腦上的目標)",
-    "maxRetries": "3",
-    "remoteBindHost": "127.0.0.1（監聽端點）",
-    "remoteTargetHost": "127.0.0.1（來自端點的目標）",
-    "retryInterval": "10",
-    "socksListenerHost": "127.0.0.1（SOCKS 監聽器）"
-  },
-  "profile": {
-    "c2sCurrentLocalConfig": "此桌面上設定了 {{count}} 個本機用戶端通道。",
-    "c2sLoadPreset": "載入",
-    "c2sNoPresetSelected": "未選取預設組",
-    "c2sNoPresets": "無儲存的預設組",
-    "c2sPresetDeleted": "用戶端通道預設組已刪除",
-    "c2sPresetLoadError": "無法載入用戶端通道預設組",
-    "c2sPresetLoaded": "用戶端通道預設組已在本機載入",
-    "c2sPresetName": "預設組名稱",
-    "c2sPresetNamePlaceholder": "用戶端預設組名稱",
-    "c2sPresetRenamed": "用戶端通道預設組已重新命名",
-    "c2sPresetSaved": "用戶端通道預設組已儲存",
-    "c2sPresetSyncNote": "預設組是明確的快照；載入預設組將會取代此桌面用戶端的本機用戶端通道清單。",
-    "c2sPresetToLoad": "要載入的預設組",
-    "c2sTunnelPresets": "用戶端通道預設組",
-    "c2sTunnelPresetsUnavailable": "用戶端通道預設組僅在桌面用戶端中可用。",
-    "c2sPresetRenameError": "重新命名預設失敗",
-    "c2sPresetDeleteError": "刪除預設失敗"
-  },
-  "tunnels": {
-    "attempt": "嘗試 {{current}}/{{max}}",
-    "autoNameClientDynamic": "SOCKS {{localPort}} 透過 {{endpoint}}",
-    "autoNameClientLocal": "本機 {{localPort}} → {{endpoint}} {{remotePort}}",
-    "autoNameClientRemote": "{{endpoint}} {{remotePort}} → 本機 {{localPort}}",
-    "autoStart": "自動啟動",
-    "cancel": "取消",
-    "canceling": "正在取消…",
-    "clientAutoStartDesc": "在此桌面用戶端開啟時啟動並保持連線。",
-    "clientManualStartDesc": "從此列使用「啟動」與「停止」。Termix 不會自動開啟。",
-    "clientRemoteServerNote": "遠端轉送可能需要在端點 SSH 伺服器上啟用 AllowTcpForwarding 和 GatewayPorts。遠端連接埠會在此桌面中斷連線時關閉。",
-    "clientTunnelStarted": "用戶端通道已啟動",
-    "clientTunnelStopped": "用戶端通道已停止",
-    "clientTunnels": "用戶端通道",
-    "connected": "已連線",
-    "connecting": "連線中…",
-    "createFirstTunnelMessage": "您尚未建立任何 SSH 通道。請在主機管理員中設定通道連線以開始使用。",
-    "currentHostPort": "目前主機連接埠",
-    "destination": "目的地",
-    "destinationAddress": "目的地地址",
-    "destinationPort": "目的港",
-    "disconnected": "已離線",
-    "duplicateAutoStartBind": "只有一個自動啟動的用戶端通道可以使用 {{bind}}。",
-    "endpointPort": "端點連接埠",
-    "endpointSshHost": "端點 SSH 主機",
-    "endpointSshHostPlaceholder": "選擇已設定的主機",
-    "endpointSshHostRequired": "為每個用戶端通道選取一個端點 SSH 主機。",
-    "error": "錯誤",
-    "forwardDescriptionClientDynamic": "本機連接埠 {{sourcePort}} 上的 SOCKS。",
-    "forwardDescriptionClientLocal": "本機 {{sourcePort}} → 遠端 {{endpointPort}}。",
-    "forwardDescriptionClientRemote": "遠端 {{sourcePort}} → 本機 {{endpointPort}}。",
-    "forwardDescriptionServerDynamic": "目前主機上的 SOCKS {{sourcePort}}。",
-    "forwardDescriptionServerLocal": "目前主機 {{sourcePort}} → 端點 {{endpointPort}}。",
-    "forwardDescriptionServerRemote": "端點 {{endpointPort}} → 目前主機 {{sourcePort}}。",
-    "host": "主機",
-    "intermediateHost": "中間宿主",
-    "invalidBindIp": "本機 IP 必須是有效的 IPv4 位址。",
-    "invalidEndpointPort": "端點連接埠必須介於 1 到 65535 之間。",
-    "invalidLocalPort": "本機連接埠必須介於 1 到 65535 之間。",
-    "invalidLocalTargetIp": "本機目標 IP 必須是有效的 IPv4 位址。",
-    "invalidLocalTargetPort": "本機目標連接埠必須介於 1 到 65535 之間。",
-    "invalidRemoteAddress": "需要遠端位址。",
-    "invalidRemotePort": "遠端連接埠必須介於 1 到 65535 之間。",
-    "lastError": "上次錯誤",
-    "lastStarted": "上次啟動",
-    "lastTested": "上次測試",
-    "localAddress": "本地地址",
-    "localPort": "本機連接埠",
-    "localSaveError": "無法儲存本機用戶端通道",
-    "localSaved": "用戶端通道已儲存",
-    "manualControlError": "無法更新通道狀態。",
-    "maxRetries": "最大重試次數",
-    "mode": "模式",
-    "nextRetryIn": "下次重試於 {{seconds}} 秒後",
-    "noClientTunnels": "此桌面未設定任何用戶端通道。",
-    "noHostSelected": "未選取主機",
-    "noSshTunnels": "無 SSH 通道",
-    "port": "連接埠",
-    "remoteBindAddress": "遠端綁定位址",
-    "remoteHost": "遠端主機",
-    "remotePort": "遠端連接埠",
-    "retryInterval": "重試間隔（秒）",
-    "route": "路由：",
-    "summaryClientDynamic": "{{localHost}}:{{localPort}} → SOCKS 透過 {{endpoint}}",
-    "summaryClientLocal": "{{localHost}}:{{localPort}} → {{remoteHost}}:{{remotePort}} via {{endpoint}}",
-    "summaryClientRemote": "{{remoteHost}}:{{remotePort}} on {{endpoint}} → {{localHost}}:{{localPort}}",
-    "test": "測試",
-    "tunnelName": "通道名稱",
-    "tunnelTestFailed": "通道測試失敗",
-    "tunnelTestSucceeded": "通道測試成功",
-    "type": "通道類型",
-    "typeDynamic": "動態 (-D)",
-    "typeLocal": "本機 (-L)",
-    "typeRemote": "遠端 (-R)",
-    "working": "處理中...",
-    "activeCount": "{{connected}}/{{total}} 活動",
-    "listensOn": "綁定到本地主機：{{port}}",
-    "socksProxy": "SOCKS5代理",
-    "waiting": "等待",
-    "remoteSessionExpired": "遠端同步會話已過期。請重新連線遠端同步並重試。",
-    "activeTunnels": "活動通道",
-    "start": "啟動",
-    "stop": "停止",
-    "authTitle": "隧道認證",
-    "authRetry": "之前的驗證碼無效。請輸入新的驗證碼。",
-    "authAnswer": "身份驗證回應",
-    "authContinue": "繼續"
-  },
-  "permissions": {
-    "use": {
-      "title": "利用隧道",
-      "description": "啟動、停止和監視 SSH 隧道，並儲存用戶端隧道預設。"
-    }
-  },
-  "settings": {
-    "host": {
-      "enable": {
-        "label": "啟用隧道",
-        "description": "透過此主機建立 SSH 隧道。"
-      }
-    }
-  },
-  "onboarding": {
-    "feature_tunnels": "通道",
-    "feature_tunnels_desc": "透過伺服器轉送連接埠以存取未公開的服務。"
-  }
-}
diff --git a/plugins/tunnels/manifest.json b/plugins/tunnels/manifest.json
deleted file mode 100644
index ee319b25a..000000000
--- a/plugins/tunnels/manifest.json
+++ /dev/null
@@ -1,97 +0,0 @@
-{
-  "id": "tunnels",
-  "name": "Tunnels",
-  "version": "1.0.0",
-  "description": "SSH port forwarding between servers, plus local tunnels from the desktop app.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Networking",
-  "icon": "ArrowLeftRight",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "hosts:read",
-    "credentials:use",
-    "ssh:connect",
-    "db:own",
-    "network:serve",
-    "ui:surface",
-    "users:impersonate",
-    "db:core-refs"
-  ],
-  "provides": [
-    {
-      "service": "tunnels.access",
-      "version": "1.0.0",
-      "permission": "tunnels.use"
-    }
-  ],
-  "contributes": {
-    "tabs": [
-      {
-        "id": "tunnel",
-        "titleKey": "nav.tunnels",
-        "icon": "ArrowLeftRight",
-        "openFrom": ["host-context-menu"]
-      }
-    ],
-    "panels": [
-      {
-        "id": "port-forwarding",
-        "titleKey": "nav.portForwarding",
-        "icon": "Network"
-      }
-    ],
-    "actions": [
-      {
-        "id": "tunnels.statuses",
-        "titleKey": "nav.tunnels",
-        "handler": "statuses",
-        "permission": "tunnels.use"
-      },
-      {
-        "id": "tunnels.open",
-        "titleKey": "nav.tunnels",
-        "handler": "open",
-        "permission": "tunnels.use"
-      }
-    ],
-    "permissions": [
-      {
-        "name": "use",
-        "titleKey": "permissions.use.title",
-        "descriptionKey": "permissions.use.description",
-        "defaultRoles": ["admin", "user"]
-      }
-    ],
-    "settings": {
-      "host": {
-        "enableKey": "enableTunnel",
-        "enableLabelKey": "settings.host.enable.label",
-        "enableDescriptionKey": "settings.host.enable.description",
-        "fields": [
-          {
-            "key": "tunnelConnections",
-            "type": "custom",
-            "component": "tunnelConnections",
-            "requires": "enableTunnel",
-            "defaultable": false
-          }
-        ]
-      }
-    },
-    "hostCapability": {
-      "key": "enableTunnel",
-      "labelKey": "hosts.tabTunnels",
-      "editorTab": "general"
-    },
-    "uses": ["homepage.widgets"]
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"]
-}
diff --git a/plugins/tunnels/migrations/mysql/0001_adopt_c2s_tunnel_presets.sql b/plugins/tunnels/migrations/mysql/0001_adopt_c2s_tunnel_presets.sql
deleted file mode 100644
index bf119f097..000000000
--- a/plugins/tunnels/migrations/mysql/0001_adopt_c2s_tunnel_presets.sql
+++ /dev/null
@@ -1,15 +0,0 @@
--- tunnels 0001: adopt_c2s_tunnel_presets
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `c2s_tunnel_presets` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `name` text NOT NULL,
-  `config` text NOT NULL,
-  `platform` text,
-  `computer_name` text,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `c2s_tunnel_presets` TO `p_tunnels_presets`;
diff --git a/plugins/tunnels/migrations/postgres/0001_adopt_c2s_tunnel_presets.sql b/plugins/tunnels/migrations/postgres/0001_adopt_c2s_tunnel_presets.sql
deleted file mode 100644
index beb98af9b..000000000
--- a/plugins/tunnels/migrations/postgres/0001_adopt_c2s_tunnel_presets.sql
+++ /dev/null
@@ -1,15 +0,0 @@
--- tunnels 0001: adopt_c2s_tunnel_presets
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "c2s_tunnel_presets" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "name" text NOT NULL,
-  "config" text NOT NULL,
-  "platform" text,
-  "computer_name" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "c2s_tunnel_presets" RENAME TO "p_tunnels_presets";
diff --git a/plugins/tunnels/migrations/snapshot.json b/plugins/tunnels/migrations/snapshot.json
deleted file mode 100644
index 878bb8b7e..000000000
--- a/plugins/tunnels/migrations/snapshot.json
+++ /dev/null
@@ -1,45 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "presets": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "name": {
-          "type": "text",
-          "notNull": true
-        },
-        "config": {
-          "type": "text",
-          "notNull": true
-        },
-        "platform": {
-          "type": "text"
-        },
-        "computerName": {
-          "type": "text"
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "updatedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [],
-      "adopts": "c2s_tunnel_presets"
-    }
-  }
-}
diff --git a/plugins/tunnels/migrations/sqlite/0001_adopt_c2s_tunnel_presets.sql b/plugins/tunnels/migrations/sqlite/0001_adopt_c2s_tunnel_presets.sql
deleted file mode 100644
index 79fe51da2..000000000
--- a/plugins/tunnels/migrations/sqlite/0001_adopt_c2s_tunnel_presets.sql
+++ /dev/null
@@ -1,15 +0,0 @@
--- tunnels 0001: adopt_c2s_tunnel_presets
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "c2s_tunnel_presets" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "name" text NOT NULL,
-  "config" text NOT NULL,
-  "platform" text,
-  "computer_name" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "c2s_tunnel_presets" RENAME TO "p_tunnels_presets";
diff --git a/plugins/tunnels/package.json b/plugins/tunnels/package.json
deleted file mode 100644
index 1be544b2b..000000000
--- a/plugins/tunnels/package.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "name": "@termix-plugin/tunnels",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "lucide-react": "^1.33.0"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "react": "^19.2.8",
-    "sonner": "^2.0.8",
-    "ssh2": "^1.17.0",
-    "ws": "^8.21.3"
-  }
-}
diff --git a/plugins/tunnels/src/backend/authorize.ts b/plugins/tunnels/src/backend/authorize.ts
deleted file mode 100644
index 05f88f697..000000000
--- a/plugins/tunnels/src/backend/authorize.ts
+++ /dev/null
@@ -1,29 +0,0 @@
-import { isReservedTunnelName, parseReservedTunnelName } from "./utils.js";
-
-/**
- * Ownership check for an action addressed by tunnel name alone.
- *
- * On-demand (forward) tunnels are deliberately never registered as configs,
- * so a check that only ran for a registered config would never run for them.
- * Host ids are small sequential integers and endpoint ids come from the
- * client, so anyone could guess `web:{hostId}:{endpointId}` and force-close
- * another user's live tunnel. The host id is read back out of the reserved
- * name instead, and a reserved name whose host id cannot be parsed fails
- * closed rather than falling through to the unchecked path.
- */
-export async function authorizeTunnelAction(
-  canAccessHost: (hostId: number) => Promise<boolean>,
-  tunnelName: string,
-  config: { sourceHostId?: number } | undefined,
-): Promise<{ allowed: boolean; hostId?: number }> {
-  const hostId =
-    config?.sourceHostId ?? parseReservedTunnelName(tunnelName)?.hostId;
-
-  if (hostId === undefined) {
-    // Not reserved and not registered: nothing is running under this name
-    // that anyone could own, so there is nothing to protect.
-    return { allowed: !isReservedTunnelName(tunnelName) };
-  }
-
-  return { allowed: await canAccessHost(hostId), hostId };
-}
diff --git a/plugins/tunnels/src/backend/autostart.ts b/plugins/tunnels/src/backend/autostart.ts
deleted file mode 100644
index 92d669a88..000000000
--- a/plugins/tunnels/src/backend/autostart.ts
+++ /dev/null
@@ -1,94 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { TunnelManager } from "./manager.js";
-import { errorMessage } from "./manager.js";
-import {
-  buildTunnelConfig,
-  connectionToRequest,
-  readTunnelConnections,
-  resolveEndpoint,
-} from "./config.js";
-
-export interface HostOwner {
-  id: number;
-  userId: string;
-}
-
-/** Every host and its owner, straight from ssh_data. */
-export async function listHostOwners(ctx: PluginContext): Promise<HostOwner[]> {
-  /* eslint-disable @typescript-eslint/no-explicit-any */
-  const { hosts } = await ctx.db.refs<{ hosts: any }>();
-  const drizzle = await ctx.db.client<any>();
-  /* eslint-enable @typescript-eslint/no-explicit-any */
-  const rows = (await drizzle
-    .select({ id: hosts.id, userId: hosts.userId })
-    .from(hosts)) as HostOwner[];
-  return rows.filter((row) => Number.isInteger(row.id) && !!row.userId);
-}
-
-/**
- * Starts every saved tunnel marked autoStart, across every user.
- *
- * ctx.hosts only sees the acting user's hosts, so the owners come from
- * ssh_data first and each host is then resolved and connected as its owner.
- */
-export async function startAutoStartTunnels(
-  ctx: PluginContext,
-  manager: TunnelManager,
-  listOwners: () => Promise<HostOwner[]> = () => listHostOwners(ctx),
-): Promise<number> {
-  let started = 0;
-  let owners: HostOwner[];
-  try {
-    owners = await listOwners();
-  } catch (error) {
-    ctx.log.warn(
-      `Could not list hosts for tunnel autostart: ${errorMessage(error)}`,
-    );
-    return 0;
-  }
-
-  for (const owner of owners) {
-    try {
-      if (!(await ctx.settings.getHost<boolean>(owner.id, "enableTunnel"))) {
-        continue;
-      }
-      const connections = readTunnelConnections(
-        await ctx.settings.getHost(owner.id, "tunnelConnections"),
-      );
-      if (!connections.some((connection) => connection.autoStart)) continue;
-
-      started += await ctx.asUser(owner.userId, async () => {
-        const host = await ctx.hosts.get(owner.id);
-        if (!host) return 0;
-        let count = 0;
-        for (const [index, connection] of connections.entries()) {
-          if (!connection.autoStart) continue;
-          try {
-            const config = await resolveEndpoint(
-              ctx,
-              buildTunnelConfig(
-                host,
-                connectionToRequest(host, index, connection),
-                owner.userId,
-              ),
-            );
-            await manager.start(config);
-            count++;
-          } catch (error) {
-            ctx.log.warn(
-              `Autostart tunnel ${index + 1} on host ${owner.id} skipped: ${errorMessage(error)}`,
-            );
-          }
-        }
-        return count;
-      });
-    } catch (error) {
-      ctx.log.warn(
-        `Autostart failed for host ${owner.id}: ${errorMessage(error)}`,
-      );
-    }
-  }
-
-  if (started > 0) ctx.log.info(`Started ${started} autostart tunnel(s)`);
-  return started;
-}
diff --git a/plugins/tunnels/src/backend/c2s-auth.ts b/plugins/tunnels/src/backend/c2s-auth.ts
deleted file mode 100644
index c8104cd1d..000000000
--- a/plugins/tunnels/src/backend/c2s-auth.ts
+++ /dev/null
@@ -1,53 +0,0 @@
-import { randomUUID } from "node:crypto";
-import type { WebSocket } from "ws";
-import type { PluginSshPromptChannel } from "@termix/plugin-sdk/backend";
-
-/** Answers belong to this authenticated socket and one outstanding challenge. */
-export function createC2SPrompt(ws: WebSocket): PluginSshPromptChannel {
-  return {
-    ask(request) {
-      if (ws.readyState !== 1)
-        return Promise.reject(new Error("Tunnel closed"));
-      const requestId = randomUUID();
-      return new Promise((resolve, reject) => {
-        const finish = (answer: string | null, error?: Error) => {
-          clearTimeout(timer);
-          ws.off("message", onMessage);
-          ws.off("close", onClose);
-          ws.off("error", onClose);
-          if (error) reject(error);
-          else resolve(answer);
-        };
-        const onClose = () =>
-          finish(null, new Error("Tunnel authentication cancelled"));
-        const onMessage = (raw: Buffer, binary: boolean) => {
-          if (binary) return;
-          let value;
-          try {
-            value = JSON.parse(raw.toString());
-          } catch {
-            return;
-          }
-          if (value.type !== "auth-response" || value.requestId !== requestId)
-            return;
-          if (value.answer === null) {
-            onClose();
-            ws.close();
-          } else if (
-            typeof value.answer === "string" &&
-            value.answer.length <= 8192
-          )
-            finish(value.answer);
-        };
-        const timer = setTimeout(() => {
-          finish(null, new Error("Tunnel authentication timed out"));
-          ws.close();
-        }, 60_000);
-        ws.on("message", onMessage);
-        ws.once("close", onClose);
-        ws.once("error", onClose);
-        ws.send(JSON.stringify({ type: "auth-prompt", requestId, request }));
-      });
-    },
-  };
-}
diff --git a/plugins/tunnels/src/backend/c2s-connections.ts b/plugins/tunnels/src/backend/c2s-connections.ts
deleted file mode 100644
index ca699ee3e..000000000
--- a/plugins/tunnels/src/backend/c2s-connections.ts
+++ /dev/null
@@ -1,94 +0,0 @@
-import { randomUUID } from "node:crypto";
-import type { Client } from "ssh2";
-import type { WebSocket } from "ws";
-import type {
-  PluginContext,
-  PluginSshConnection,
-} from "@termix/plugin-sdk/backend";
-import { createC2SPrompt } from "./c2s-auth.js";
-
-/** A desktop runtime holds one authenticated SSH connection across SOCKS streams. */
-export function createC2SConnections(ctx: PluginContext) {
-  type Entry = {
-    sockets: Set<WebSocket>;
-    source: Promise<PluginSshConnection<Client>>;
-  };
-  const entries = new Map<string, Entry>();
-  ctx.disposables.add(() => {
-    for (const entry of entries.values())
-      for (const ws of entry.sockets) ws.close();
-    entries.clear();
-  });
-  return async (ws: WebSocket, hostId: number, sessionId?: string) => {
-    if (ws.readyState !== 1) throw new Error("Tunnel closed");
-    const key = JSON.stringify([
-      ctx.currentActor(),
-      hostId,
-      typeof sessionId === "string" && sessionId.length <= 128
-        ? sessionId
-        : randomUUID(),
-    ]);
-    let entry = entries.get(key);
-    if (!entry) {
-      const source = ctx.ssh.connect<Client>(hostId, {
-        purpose: "tunnel",
-        profile: "forward",
-        timeoutMs: 60_000,
-        prompt: createC2SPrompt(ws),
-      });
-      entry = { sockets: new Set(), source };
-      entries.set(key, entry);
-      const own = entry;
-      void source.then(
-        (connection) => {
-          const close = () => {
-            if (entries.get(key) === own) entries.delete(key);
-            for (const socket of own.sockets) socket.close();
-          };
-          connection.client.once("close", close);
-          connection.client.once("error", close);
-        },
-        () => {
-          if (entries.get(key) === own) entries.delete(key);
-          for (const socket of own.sockets) {
-            if (socket.readyState === 1)
-              socket.send(
-                JSON.stringify({
-                  type: "error",
-                  error: "Endpoint SSH authentication failed",
-                }),
-              );
-            socket.close();
-          }
-        },
-      );
-    }
-    const own = entry;
-    own.sockets.add(ws);
-    let released = false;
-    const dispose = () => {
-      if (released) return;
-      released = true;
-      ws.off("close", dispose);
-      ws.off("error", dispose);
-      own.sockets.delete(ws);
-      if (!own.sockets.size) {
-        if (entries.get(key) === own) entries.delete(key);
-        void own.source.then(
-          (source) => source.dispose(),
-          () => {},
-        );
-      }
-    };
-    ws.once("close", dispose);
-    ws.once("error", dispose);
-    try {
-      const source = await own.source;
-      if (released || ws.readyState !== 1) throw new Error("Tunnel closed");
-      return { ...source, dispose };
-    } catch (error) {
-      dispose();
-      throw error;
-    }
-  };
-}
diff --git a/plugins/tunnels/src/backend/c2s-relay.ts b/plugins/tunnels/src/backend/c2s-relay.ts
deleted file mode 100644
index 0ebf87e4a..000000000
--- a/plugins/tunnels/src/backend/c2s-relay.ts
+++ /dev/null
@@ -1,456 +0,0 @@
-import type { Duplex } from "node:stream";
-import type { ClientChannel } from "ssh2";
-import type { WebSocket } from "ws";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { createC2SConnections } from "./c2s-connections.js";
-import type { TunnelMode } from "./types.js";
-import {
-  bindForwardIn,
-  forwardOut,
-  unbindForwardIn,
-} from "./ssh-primitives.js";
-import { getTunnelMode } from "./utils.js";
-
-/** What the desktop app sends in the first message on the relay socket. */
-export interface C2SRelayTunnel {
-  name?: string;
-  sessionId?: string;
-  mode?: TunnelMode;
-  tunnelType?: "local" | "remote";
-  localAddress?: string;
-  remoteAddress?: string;
-  bindHost?: string;
-  targetHost?: string;
-  sourceHostId?: number;
-  sourceHostSyncId?: string;
-  sourcePort?: number;
-  endpointPort?: number;
-}
-
-export interface C2SOpenMessage {
-  type: "open" | "test";
-  keepAlive?: boolean;
-  tunnelConfig?: C2SRelayTunnel;
-  targetHost?: string;
-  targetPort?: number;
-}
-
-const WS_HIGH_WATERMARK = 1024 * 1024;
-const WS_LOW_WATERMARK = 256 * 1024;
-const STREAM_WRITE_LIMIT = 8 * 1024 * 1024;
-
-export function sendC2SError(ws: WebSocket, message: string): void {
-  if (ws.readyState === 1) {
-    ws.send(JSON.stringify({ type: "error", error: message }));
-  }
-}
-
-export function describeC2SRelayError(error: unknown): string {
-  const message = error instanceof Error ? error.message : String(error);
-  const lower = message.toLowerCase();
-
-  if (
-    lower.includes("administratively prohibited") ||
-    lower.includes("forwarding disabled") ||
-    lower.includes("open failed")
-  ) {
-    return `SSH forwarding was rejected by the endpoint server: ${message}`;
-  }
-  if (
-    lower.includes("address already in use") ||
-    lower.includes("unable to bind") ||
-    lower.includes("bind")
-  ) {
-    return `Remote port is not available on the endpoint server: ${message}`;
-  }
-  if (
-    lower.includes("name or service not known") ||
-    lower.includes("enotfound") ||
-    lower.includes("econnrefused")
-  ) {
-    return `Tunnel target is not reachable from the endpoint host: ${message}`;
-  }
-
-  return message || "Failed to open relay";
-}
-
-function pauseForBackpressure(ws: WebSocket, source?: Duplex): void {
-  if (!source || ws.bufferedAmount <= WS_HIGH_WATERMARK) return;
-
-  source.pause();
-  const resumeTimer = setInterval(() => {
-    if (
-      ws.readyState !== 1 ||
-      source.destroyed ||
-      ws.bufferedAmount <= WS_LOW_WATERMARK
-    ) {
-      clearInterval(resumeTimer);
-      if (ws.readyState === 1 && !source.destroyed) source.resume();
-    }
-  }, 25);
-}
-
-function sendMessage(
-  ws: WebSocket,
-  message: Record<string, unknown>,
-  source?: Duplex,
-): void {
-  if (ws.readyState !== 1) return;
-  ws.send(JSON.stringify(message), (error) => {
-    if (error && source && !source.destroyed) source.destroy(error);
-  });
-  pauseForBackpressure(ws, source);
-}
-
-function writeRemoteChunk(
-  target: ClientChannel,
-  chunk: Buffer,
-  ws: WebSocket,
-  closeTarget: () => void,
-): void {
-  if (!target || target.destroyed) return;
-  if (target.writableLength > STREAM_WRITE_LIMIT) {
-    closeTarget();
-    return;
-  }
-  if (!target.write(chunk)) {
-    ws.pause();
-    target.once("drain", () => {
-      if (ws.readyState === 1) ws.resume();
-    });
-  }
-}
-
-/**
- * The host a client tunnel runs through. A desktop app synced with this
- * server knows the host by its sync id, since numeric ids differ between the
- * two databases, and must never fall back to a numeric id that could point
- * at a different machine here.
- */
-export async function resolveC2SSourceHostId(
-  tunnel: Pick<C2SRelayTunnel, "sourceHostId" | "sourceHostSyncId">,
-  findHostIdBySyncId: (syncId: string) => Promise<number | null>,
-): Promise<number> {
-  const syncId = tunnel.sourceHostSyncId?.trim();
-  if (syncId) {
-    const hostId = await findHostIdBySyncId(syncId);
-    if (!hostId) {
-      throw new Error("Endpoint SSH host was not found on the remote server");
-    }
-    return hostId;
-  }
-
-  if (!tunnel.sourceHostId) throw new Error("Endpoint SSH host is required");
-  return tunnel.sourceHostId;
-}
-
-function address(value: unknown, fallback: string): string {
-  const trimmed = typeof value === "string" ? value.trim() : "";
-  return trimmed || fallback;
-}
-
-interface ResolvedRelay {
-  name: string;
-  sessionId?: string;
-  hostId: number;
-  mode: TunnelMode;
-  remoteAddress: string;
-  sourcePort: number;
-  endpointPort: number;
-}
-
-/**
- * The client tunnel relay: the desktop app listens locally and streams each
- * connection over this socket, and the server forwards it through one of the
- * user's hosts. Runs as the socket's user for every host lookup and connect.
- */
-export function createC2SRelay(ctx: PluginContext) {
-  let streamCounter = 0;
-  const connectSource = createC2SConnections(ctx);
-
-  async function findHostIdBySyncId(syncId: string): Promise<number | null> {
-    /* eslint-disable @typescript-eslint/no-explicit-any */
-    const { hosts } = await ctx.db.refs<{ hosts: any }>();
-    const drizzle = await ctx.db.client<any>();
-    /* eslint-enable @typescript-eslint/no-explicit-any */
-    const { eq } = await import("drizzle-orm");
-    const rows = await drizzle
-      .select({ id: hosts.id })
-      .from(hosts)
-      .where(eq(hosts.syncId, syncId))
-      .limit(1);
-    return rows[0]?.id ?? null;
-  }
-
-  async function resolve(tunnel: C2SRelayTunnel): Promise<ResolvedRelay> {
-    const hostId = await resolveC2SSourceHostId(tunnel, findHostIdBySyncId);
-    const access = await ctx.hosts.checkAccess(hostId, "connect");
-    if (!access.hasAccess) throw new Error("Access denied to this host");
-
-    return {
-      name: tunnel.name || `c2s:${hostId}`,
-      hostId,
-      sessionId: tunnel.sessionId,
-      mode: getTunnelMode({
-        mode: tunnel.mode,
-        tunnelType: tunnel.tunnelType,
-      }),
-      remoteAddress: address(
-        tunnel.remoteAddress,
-        address(tunnel.targetHost, "127.0.0.1"),
-      ),
-      sourcePort: Number(tunnel.sourcePort) || 0,
-      endpointPort: Number(tunnel.endpointPort) || 0,
-    };
-  }
-
-  async function openRemote(ws: WebSocket, relay: ResolvedRelay) {
-    const bindHost = relay.remoteAddress;
-    const bindPort = relay.sourcePort;
-    if (!Number.isInteger(bindPort) || bindPort < 1 || bindPort > 65535) {
-      throw new Error("Invalid remote port");
-    }
-
-    const source = await connectSource(ws, relay.hostId, relay.sessionId);
-    const sourceClient = source.client;
-    let actualPort: number;
-    try {
-      actualPort = await bindForwardIn(sourceClient, bindHost, bindPort);
-    } catch (error) {
-      source.dispose();
-      throw error;
-    }
-
-    if (ws.readyState !== 1) {
-      unbindForwardIn(sourceClient, bindHost, actualPort, ctx.log);
-      source.dispose();
-      return;
-    }
-    const streams = new Map<string, ClientChannel>();
-    let closed = false;
-
-    const closeStream = (streamId: string) => {
-      const stream = streams.get(streamId);
-      if (!stream) return;
-      streams.delete(streamId);
-      try {
-        stream.destroy();
-      } catch {
-        // Already gone.
-      }
-    };
-
-    const close = () => {
-      if (closed) return;
-      closed = true;
-      for (const streamId of [...streams.keys()]) closeStream(streamId);
-      unbindForwardIn(sourceClient, bindHost, actualPort, ctx.log);
-      source.dispose();
-    };
-
-    sourceClient.on("tcp connection", (info, accept, reject) => {
-      if (info.destPort !== actualPort) {
-        reject();
-        return;
-      }
-      const inbound = accept();
-      const streamId = `${Date.now()}-${++streamCounter}`;
-      streams.set(streamId, inbound);
-      sendMessage(ws, { type: "connection", streamId });
-
-      inbound.on("data", (chunk: Buffer) => {
-        sendMessage(
-          ws,
-          { type: "data", streamId, data: chunk.toString("base64") },
-          inbound,
-        );
-      });
-      inbound.on("close", () => {
-        streams.delete(streamId);
-        sendMessage(ws, { type: "close", streamId });
-      });
-      inbound.on("error", (error: Error) => {
-        streams.delete(streamId);
-        sendMessage(ws, { type: "close", streamId, error: error.message });
-      });
-    });
-
-    ws.on("message", (data, isBinary) => {
-      if (isBinary) return;
-      try {
-        const message = JSON.parse(data.toString()) as {
-          type?: string;
-          streamId?: string;
-          data?: string;
-        };
-        if (!message.streamId) return;
-        const streamId = message.streamId;
-        if (message.type === "data" && message.data) {
-          const stream = streams.get(streamId);
-          if (stream) {
-            writeRemoteChunk(
-              stream,
-              Buffer.from(message.data, "base64"),
-              ws,
-              () => closeStream(streamId),
-            );
-          }
-        } else if (message.type === "close") {
-          closeStream(streamId);
-        }
-      } catch (error) {
-        ctx.log.warn(
-          `Invalid client tunnel relay message for ${relay.name}: ${
-            error instanceof Error ? error.message : String(error)
-          }`,
-        );
-      }
-    });
-
-    ws.on("close", close);
-    ws.on("error", close);
-    sourceClient.on("close", () => {
-      if (ws.readyState === 1) ws.close();
-    });
-    sourceClient.on("error", (error: Error) => {
-      sendMessage(ws, { type: "error", error: error.message });
-      if (ws.readyState === 1) ws.close();
-    });
-
-    ctx.log.info(
-      `Client tunnel ${relay.name} bound ${bindHost}:${actualPort} on host ${relay.hostId}`,
-    );
-    sendMessage(ws, { type: "ready", bindHost, bindPort: actualPort });
-  }
-
-  async function open(ws: WebSocket, message: C2SOpenMessage): Promise<void> {
-    const relay = await resolve(message.tunnelConfig ?? {});
-    if (relay.mode === "remote") {
-      await openRemote(ws, relay);
-      return;
-    }
-
-    const targetHost =
-      relay.mode === "dynamic" ? message.targetHost : relay.remoteAddress;
-    const targetPort =
-      relay.mode === "dynamic"
-        ? Number(message.targetPort)
-        : relay.endpointPort;
-    if (!targetHost || !Number.isInteger(targetPort) || targetPort < 1) {
-      throw new Error("Invalid client tunnel target");
-    }
-
-    const source = await connectSource(ws, relay.hostId, relay.sessionId);
-    let outbound: ClientChannel;
-    try {
-      outbound = await forwardOut(source.client, targetHost, targetPort);
-    } catch (error) {
-      source.dispose();
-      throw error;
-    }
-
-    if (ws.readyState !== 1) {
-      outbound.destroy();
-      source.dispose();
-      return;
-    }
-    const close = () => {
-      try {
-        outbound.destroy();
-      } catch {
-        // Already gone.
-      }
-      source.dispose();
-    };
-
-    outbound.on("data", (chunk: Buffer) => {
-      if (ws.readyState === 1) ws.send(chunk);
-    });
-    outbound.on("close", () => {
-      if (ws.readyState === 1) ws.close();
-    });
-    outbound.on("error", () => {
-      if (ws.readyState === 1) ws.close();
-    });
-    ws.on("close", close);
-    ws.on("error", close);
-    ws.on("message", (data, isBinary) => {
-      if (!isBinary) return;
-      const chunk = Buffer.isBuffer(data)
-        ? data
-        : Array.isArray(data)
-          ? Buffer.concat(data)
-          : Buffer.from(data as ArrayBuffer);
-      outbound.write(chunk);
-    });
-
-    ws.send(JSON.stringify({ type: "ready" }));
-  }
-
-  async function test(ws: WebSocket, message: C2SOpenMessage): Promise<void> {
-    const relay = await resolve(message.tunnelConfig ?? {});
-    const source = await connectSource(ws, relay.hostId, relay.sessionId);
-    try {
-      if (relay.mode === "remote") {
-        const bindPort = relay.sourcePort;
-        if (!Number.isInteger(bindPort) || bindPort < 1 || bindPort > 65535) {
-          throw new Error("Invalid remote port");
-        }
-        const actualPort = await bindForwardIn(
-          source.client,
-          relay.remoteAddress,
-          bindPort,
-        );
-        unbindForwardIn(source.client, relay.remoteAddress, actualPort);
-      } else if (relay.mode === "local") {
-        if (!Number.isInteger(relay.endpointPort) || relay.endpointPort < 1) {
-          throw new Error("Invalid remote target port");
-        }
-        const outbound = await forwardOut(
-          source.client,
-          relay.remoteAddress,
-          relay.endpointPort,
-        );
-        outbound.destroy();
-      }
-      sendMessage(ws, { type: "ready" });
-    } finally {
-      if (!message.keepAlive) source.dispose();
-    }
-  }
-
-  /** The ctx.ws.route handler. Core has already authenticated the socket. */
-  return function handleConnection(ws: WebSocket, userId: string): void {
-    let opened = false;
-
-    ws.on("error", (error: Error) => {
-      ctx.log.warn(`Client tunnel relay socket error: ${error.message}`);
-    });
-
-    ws.once("message", (raw) => {
-      void ctx
-        .asUser(userId, async () => {
-          if (!(await ctx.rbac.has("use"))) {
-            throw new Error("Access denied");
-          }
-          const message = JSON.parse(raw.toString()) as C2SOpenMessage;
-          if (message.type !== "open" && message.type !== "test") {
-            throw new Error("Invalid client tunnel relay request");
-          }
-          opened = true;
-          if (message.type === "test") await test(ws, message);
-          else await open(ws, message);
-        })
-        .catch((error: unknown) => {
-          const message = describeC2SRelayError(error);
-          ctx.log.warn(`Failed to open client tunnel relay: ${message}`);
-          sendC2SError(ws, message);
-          ws.close();
-        });
-    });
-
-    ws.on("close", () => {
-      if (!opened) ctx.log.debug("Client tunnel relay closed before opening");
-    });
-  };
-}
diff --git a/plugins/tunnels/src/backend/config.ts b/plugins/tunnels/src/backend/config.ts
deleted file mode 100644
index a425edbf2..000000000
--- a/plugins/tunnels/src/backend/config.ts
+++ /dev/null
@@ -1,172 +0,0 @@
-import type {
-  PluginContext,
-  PluginHostSummary,
-} from "@termix/plugin-sdk/backend";
-import type {
-  TunnelConfig,
-  TunnelConnectRequest,
-  TunnelConnection,
-} from "./types.js";
-import { serverTunnelName } from "../shared/tunnel-naming.js";
-import {
-  findHostByTunnelEndpoint,
-  getTunnelMode,
-  isSingleHostTunnel,
-  parseTunnelName,
-} from "./utils.js";
-
-export function hostLabel(host: {
-  name?: string | null;
-  username: string;
-  ip: string;
-}): string {
-  return host.name || `${host.username}@${host.ip}`;
-}
-
-/** The name a host's saved tunnel runs under. */
-export function savedTunnelName(
-  host: PluginHostSummary,
-  index: number,
-  connection: Pick<
-    TunnelConnection,
-    "sourcePort" | "endpointHost" | "endpointPort"
-  >,
-): string {
-  return serverTunnelName(host, index, connection);
-}
-
-/**
- * Builds the runtime config for a tunnel from what the client or a host's
- * saved list says about it. Credentials are never part of it: both legs
- * resolve theirs through ctx.ssh as `userId`.
- */
-export function buildTunnelConfig(
-  host: PluginHostSummary,
-  request: Omit<TunnelConnectRequest, "sourceHostId">,
-  userId: string,
-): TunnelConfig {
-  const mode = getTunnelMode(request);
-  return {
-    name: request.name,
-    scope: request.scope || "s2s",
-    mode,
-    tunnelType: request.tunnelType || (mode === "remote" ? "remote" : "local"),
-    bindHost: request.bindHost,
-    targetHost: request.targetHost,
-    sourceHostId: host.id,
-    tunnelIndex: request.tunnelIndex,
-    requestingUserId: userId,
-    hostName: hostLabel(host),
-    sourceIP: host.ip,
-    sourceSSHPort: host.port,
-    sourceUsername: host.username,
-    endpointHost: (request.endpointHost ?? "").trim(),
-    sourcePort: Number(request.sourcePort),
-    endpointPort: Number(request.endpointPort),
-    maxRetries: Number(request.maxRetries) || 3,
-    retryInterval: (Number(request.retryInterval) || 5) * 1000,
-    autoStart: Boolean(request.autoStart),
-  };
-}
-
-export function connectionToRequest(
-  host: PluginHostSummary,
-  index: number,
-  connection: TunnelConnection,
-): Omit<TunnelConnectRequest, "sourceHostId"> {
-  return {
-    name: savedTunnelName(host, index, connection),
-    tunnelIndex: index,
-    scope: connection.scope || "s2s",
-    mode: connection.mode,
-    tunnelType: connection.tunnelType,
-    bindHost: connection.bindHost,
-    targetHost: connection.targetHost,
-    endpointHost: connection.endpointHost,
-    sourcePort: connection.sourcePort,
-    endpointPort: connection.endpointPort,
-    maxRetries: connection.maxRetries,
-    retryInterval: connection.retryInterval,
-    autoStart: connection.autoStart,
-  };
-}
-
-/**
- * Fills in the endpoint leg from the user's own host list. A local or
- * dynamic tunnel whose endpoint is not a saved host just forwards to that
- * address through the source; a remote tunnel needs a real SSH host there.
- * Must run as the tunnel's user.
- */
-export async function resolveEndpoint(
-  ctx: PluginContext,
-  config: TunnelConfig,
-): Promise<TunnelConfig> {
-  if (isSingleHostTunnel(config)) return config;
-
-  const hosts = await ctx.hosts.list();
-  const endpoint = findHostByTunnelEndpoint(hosts, config.endpointHost);
-
-  if (!endpoint) {
-    if (getTunnelMode(config) === "remote") {
-      throw new Error(
-        `Endpoint host '${config.endpointHost}' not found in database`,
-      );
-    }
-    return { ...config, endpointIP: config.endpointIP || config.endpointHost };
-  }
-
-  const access = await ctx.hosts.checkAccess(endpoint.id, "connect");
-  if (!access.hasAccess) throw new Error("Endpoint host not found");
-
-  return {
-    ...config,
-    endpointHostId: endpoint.id,
-    endpointIP: endpoint.ip,
-    endpointSSHPort: endpoint.port,
-    endpointUsername: endpoint.username,
-  };
-}
-
-/** A host's saved tunnel list, as its host setting holds it. */
-export function readTunnelConnections(value: unknown): TunnelConnection[] {
-  let parsed = value;
-  if (typeof parsed === "string") {
-    try {
-      parsed = JSON.parse(parsed);
-    } catch {
-      return [];
-    }
-  }
-  return Array.isArray(parsed) ? (parsed as TunnelConnection[]) : [];
-}
-
-/**
- * The saved tunnel a name points at, for starting one by name alone
- * (automations). Must run as the user it is for.
- */
-export async function findSavedTunnel(
-  ctx: PluginContext,
-  name: string,
-): Promise<{
-  host: PluginHostSummary;
-  index: number;
-  connection: TunnelConnection;
-} | null> {
-  const parsed = parseTunnelName(name);
-  if (parsed.isLegacyFormat || parsed.hostId === undefined) return null;
-  const index = parsed.tunnelIndex ?? -1;
-
-  const host = await ctx.hosts.get(parsed.hostId);
-  if (!host) return null;
-  if (!(await ctx.settings.getHost<boolean>(host.id, "enableTunnel"))) {
-    return null;
-  }
-
-  const connections = readTunnelConnections(
-    await ctx.settings.getHost(host.id, "tunnelConnections"),
-  );
-  const connection = connections[index];
-  if (!connection) return null;
-  if (savedTunnelName(host, index, connection) !== name) return null;
-  return { host, index, connection };
-}
diff --git a/plugins/tunnels/src/backend/index.ts b/plugins/tunnels/src/backend/index.ts
deleted file mode 100644
index b0bab12b2..000000000
--- a/plugins/tunnels/src/backend/index.ts
+++ /dev/null
@@ -1,50 +0,0 @@
-import type { Router } from "express";
-import type { WebSocket } from "ws";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { presets } from "./tables.js";
-import { createPresetRepository } from "./repository.js";
-import { createTunnelManager } from "./manager.js";
-import { registerTunnelRoutes } from "./routes.js";
-import { createC2SRelay } from "./c2s-relay.js";
-import { createTunnelsService } from "./service.js";
-import { startAutoStartTunnels } from "./autostart.js";
-
-export type {
-  TunnelsAccess,
-  TunnelForwardHandle,
-  TunnelForwardTarget,
-} from "./service.js";
-
-// Long enough for core's host settings migration, which runs right after
-// plugins activate, to have copied the saved tunnels across on an upgrade.
-const AUTOSTART_DELAY_MS = 3000;
-
-export async function activate(ctx: PluginContext) {
-  const table = await ctx.db.define(presets);
-  const repository = createPresetRepository(ctx.db, table);
-
-  const manager = createTunnelManager(ctx);
-  ctx.disposables.add(() => manager.dispose());
-
-  registerTunnelRoutes(ctx.http.router<Router>(), ctx, manager, repository);
-
-  const relay = createC2SRelay(ctx);
-  ctx.ws.route("/c2s/stream", (connection) =>
-    relay(connection.socket as WebSocket, connection.userId),
-  );
-
-  ctx.services.provide("tunnels.access", createTunnelsService(ctx, manager));
-
-  // Deferred so activation is not held up by SSH handshakes.
-  const autostart = setTimeout(() => {
-    void startAutoStartTunnels(ctx, manager);
-  }, AUTOSTART_DELAY_MS);
-  autostart.unref?.();
-  ctx.disposables.add(() => clearTimeout(autostart));
-
-  ctx.log.info("Tunnel routes mounted at /plugin-api/tunnels");
-}
-
-export async function deactivate() {
-  // Everything above was registered through ctx and is disposed by core.
-}
diff --git a/plugins/tunnels/src/backend/manager.ts b/plugins/tunnels/src/backend/manager.ts
deleted file mode 100644
index 8768d8981..000000000
--- a/plugins/tunnels/src/backend/manager.ts
+++ /dev/null
@@ -1,839 +0,0 @@
-import { createServer, Socket, type Server } from "node:net";
-import type { Client, ClientChannel } from "ssh2";
-import type {
-  PluginContext,
-  PluginSshConnection,
-} from "@termix/plugin-sdk/backend";
-import {
-  CONNECTION_STATES,
-  type TunnelConfig,
-  type TunnelStatus,
-} from "./types.js";
-import {
-  bindForwardIn,
-  forwardOut,
-  pipeTunnelStreams,
-  unbindForwardIn,
-} from "./ssh-primitives.js";
-import { handleSocks5Connect } from "./socks5-relay.js";
-import {
-  classifyTunnelError,
-  getTunnelBindHost,
-  getTunnelMode,
-  getTunnelScope,
-  isReservedTunnelName,
-  resolveS2SLocalTargetHost,
-  shouldEstablishDirectTunnel,
-} from "./utils.js";
-
-export interface TunnelRuntime {
-  sourceClient: Client;
-  endpointClient?: Client;
-  bindHost: string;
-  bindPort: number;
-  close: () => void;
-}
-
-/** A status snapshot as a user sees it, keyed by tunnel name. */
-export type TunnelStatusMap = Record<string, TunnelStatus>;
-
-const CONNECT_TIMEOUT_MS = 60_000;
-const MANUAL_DISCONNECT_HOLD_MS = 5_000;
-const ACCESS_CACHE_MS = 60_000;
-
-export function errorMessage(
-  error: unknown,
-  fallback = "Unknown error",
-): string {
-  if (error instanceof Error && error.message) return error.message;
-  if (typeof error === "string" && error) return error;
-  return fallback;
-}
-
-export type TunnelManager = ReturnType<typeof createTunnelManager>;
-
-/**
- * Every running tunnel and its retry state, created fresh in activate so a
- * disable-then-enable starts clean.
- *
- * Both SSH legs go through ctx.ssh.connect, so tunnels get host key checks,
- * auth providers, proxies and jump hosts the same way every other transport
- * does. The endpoint leg of a source-to-endpoint tunnel is opened over a
- * forwardOut channel on the source connection, handed to ctx.ssh as `sock`.
- */
-export function createTunnelManager(ctx: PluginContext) {
-  const log = ctx.log;
-
-  const configs = new Map<string, TunnelConfig>();
-  const statuses = new Map<string, TunnelStatus>();
-  const runtimes = new Map<string, TunnelRuntime>();
-  const retryCounters = new Map<string, number>();
-  const retryTimers = new Map<string, NodeJS.Timeout>();
-  const countdownTimers = new Map<string, NodeJS.Timeout>();
-  const manualDisconnects = new Set<string>();
-  const manualHoldTimers = new Set<NodeJS.Timeout>();
-  const retryExhausted = new Set<string>();
-  const cleanupInProgress = new Set<string>();
-  const connecting = new Set<string>();
-  const lastErrors = new Map<string, string>();
-  const lastErrorTypes = new Map<string, TunnelStatus["errorType"]>();
-  const pendingOperations = new Map<string, Promise<void>>();
-  const listeners = new Set<() => void>();
-  const accessCache = new Map<string, { allowed: boolean; at: number }>();
-  let disposed = false;
-
-  function notify(): void {
-    for (const listener of listeners) {
-      try {
-        listener();
-      } catch (error) {
-        log.warn(`Tunnel status listener failed: ${errorMessage(error)}`);
-      }
-    }
-  }
-
-  function broadcast(name: string, status: TunnelStatus): void {
-    if (
-      status.status === CONNECTION_STATES.CONNECTED &&
-      retryTimers.has(name)
-    ) {
-      return;
-    }
-
-    const next = { ...status };
-
-    if (retryExhausted.has(name) && next.status === CONNECTION_STATES.FAILED) {
-      const previous = lastErrors.get(name);
-      next.reason = previous
-        ? `Max retries exhausted: ${previous}`
-        : "Max retries exhausted";
-    }
-
-    if (next.status === CONNECTION_STATES.FAILED && next.reason) {
-      lastErrors.set(name, next.reason);
-      if (next.errorType) lastErrorTypes.set(name, next.errorType);
-    } else if (
-      (next.status === CONNECTION_STATES.CONNECTING ||
-        next.status === CONNECTION_STATES.RETRYING ||
-        next.status === CONNECTION_STATES.WAITING) &&
-      !next.reason
-    ) {
-      next.reason = lastErrors.get(name);
-      next.errorType = lastErrorTypes.get(name);
-    } else if (
-      next.status === CONNECTION_STATES.CONNECTED ||
-      (next.status === CONNECTION_STATES.DISCONNECTED && next.manualDisconnect)
-    ) {
-      lastErrors.delete(name);
-      lastErrorTypes.delete(name);
-    }
-
-    statuses.set(name, next);
-    ctx.events.emit("plugin.tunnels.status", {
-      name,
-      sourceHostId: configs.get(name)?.sourceHostId,
-      status: next,
-    });
-    notify();
-  }
-
-  function clearRetryTimers(name: string): void {
-    const retry = retryTimers.get(name);
-    if (retry) {
-      clearTimeout(retry);
-      retryTimers.delete(name);
-    }
-    const countdown = countdownTimers.get(name);
-    if (countdown) {
-      clearInterval(countdown);
-      countdownTimers.delete(name);
-    }
-  }
-
-  function resetRetryState(name: string): void {
-    retryCounters.delete(name);
-    retryExhausted.delete(name);
-    lastErrors.delete(name);
-    lastErrorTypes.delete(name);
-    cleanupInProgress.delete(name);
-    connecting.delete(name);
-    clearRetryTimers(name);
-  }
-
-  async function cleanup(name: string, force = false): Promise<void> {
-    if (cleanupInProgress.has(name)) return;
-    if (!force && connecting.has(name)) return;
-
-    cleanupInProgress.add(name);
-    const runtime = runtimes.get(name);
-    if (runtime) {
-      runtimes.delete(name);
-      try {
-        runtime.close();
-      } catch (error) {
-        log.error(
-          `Error while closing tunnel ${name}`,
-          error instanceof Error ? error : undefined,
-        );
-      }
-    }
-    cleanupInProgress.delete(name);
-    clearRetryTimers(name);
-  }
-
-  /** One SSH leg, as the tunnel's owner, through core's connect pipeline. */
-  async function openLeg(
-    userId: string,
-    hostId: number,
-    sock?: ClientChannel,
-  ): Promise<PluginSshConnection<Client>> {
-    return ctx.asUser(userId, () =>
-      ctx.ssh.connect<Client>(hostId, {
-        purpose: "tunnel",
-        profile: "forward",
-        timeoutMs: CONNECT_TIMEOUT_MS,
-        sock,
-      }),
-    );
-  }
-
-  function directTargetHost(config: TunnelConfig): string {
-    const target = config.targetHost?.trim();
-    if (target) return target;
-    if (
-      config.endpointHostId !== undefined &&
-      config.endpointHostId === config.sourceHostId
-    ) {
-      return "127.0.0.1";
-    }
-    return config.endpointHost || "127.0.0.1";
-  }
-
-  async function establishDirect(
-    source: PluginSshConnection<Client>,
-    config: TunnelConfig,
-  ): Promise<TunnelRuntime> {
-    const sourceClient = source.client;
-    const name = config.name;
-    const mode = getTunnelMode(config);
-    const bindHost = getTunnelBindHost(config);
-    const targetHost = directTargetHost(config);
-    const targetPort = config.endpointPort;
-
-    if (mode === "remote") {
-      const remoteBindPort = await bindForwardIn(
-        sourceClient,
-        targetHost,
-        config.sourcePort,
-      );
-      const sockets = new Set<Socket>();
-      const onTcp = (
-        info: { destPort: number },
-        accept: () => ClientChannel,
-        reject: () => void,
-      ) => {
-        if (info.destPort !== remoteBindPort) {
-          reject();
-          return;
-        }
-        const inbound = accept();
-        const local = new Socket();
-        sockets.add(local);
-        local.connect(targetPort, bindHost, () => {
-          pipeTunnelStreams(inbound, Promise.resolve(local), name, log);
-        });
-        local.on("error", () => {
-          inbound.destroy();
-          sockets.delete(local);
-        });
-        local.on("close", () => sockets.delete(local));
-      };
-      sourceClient.on("tcp connection", onTcp);
-
-      return {
-        sourceClient,
-        bindHost: targetHost,
-        bindPort: remoteBindPort,
-        close: () => {
-          sourceClient.off("tcp connection", onTcp);
-          unbindForwardIn(sourceClient, targetHost, remoteBindPort, log);
-          for (const socket of sockets) socket.destroy();
-          sockets.clear();
-          source.dispose();
-        },
-      };
-    }
-
-    // Local and dynamic: listen here, forward through the source.
-    const sockets = new Set<Socket>();
-    const server: Server = createServer((socket) => {
-      sockets.add(socket);
-      socket.on("close", () => sockets.delete(socket));
-      socket.on("error", () => {
-        sockets.delete(socket);
-        socket.destroy();
-      });
-
-      if (mode === "dynamic") {
-        handleSocks5Connect(
-          socket,
-          (host, port) => forwardOut(sourceClient, host, port),
-          name,
-          log,
-        );
-        return;
-      }
-
-      forwardOut(sourceClient, targetHost, targetPort)
-        .then((outbound) =>
-          pipeTunnelStreams(socket, Promise.resolve(outbound), name, log),
-        )
-        .catch(() => socket.destroy());
-    });
-
-    const boundPort = await new Promise<number>((resolve, reject) => {
-      server.once("error", reject);
-      server.listen({ host: bindHost, port: config.sourcePort }, () => {
-        server.removeListener("error", reject);
-        // With port 0 the kernel picks, so report what was actually bound.
-        resolve((server.address() as { port: number }).port);
-      });
-    });
-
-    let idleTimer: NodeJS.Timeout | undefined;
-    const close = () => {
-      if (idleTimer) clearInterval(idleTimer);
-      for (const socket of sockets) socket.destroy();
-      sockets.clear();
-      server.close();
-      source.dispose();
-    };
-
-    // On-demand tunnels close themselves once nothing has used them for a
-    // while. The socket set only exists in here, so the timer does too.
-    if (config.idleTimeoutMs && config.idleTimeoutMs > 0) {
-      const idleTimeoutMs = config.idleTimeoutMs;
-      let idleSince: number | null = Date.now();
-      idleTimer = setInterval(
-        () => {
-          if (sockets.size > 0) {
-            idleSince = null;
-            return;
-          }
-          if (idleSince === null) {
-            idleSince = Date.now();
-            return;
-          }
-          if (Date.now() - idleSince < idleTimeoutMs) return;
-          // Acts by name, so skip it if a reopen already replaced this one.
-          if (runtimes.get(name)?.sourceClient !== sourceClient) return;
-          log.info(`Closing idle tunnel ${name}`);
-          void cleanup(name, true);
-        },
-        Math.min(30_000, idleTimeoutMs),
-      );
-      idleTimer.unref();
-    }
-
-    log.info(
-      `Tunnel ${name} listening on ${bindHost}:${boundPort} (${mode}) to ${targetHost}:${targetPort}`,
-    );
-
-    return { sourceClient, bindHost, bindPort: boundPort, close };
-  }
-
-  async function establishManaged(
-    source: PluginSshConnection<Client>,
-    config: TunnelConfig,
-  ): Promise<TunnelRuntime> {
-    const sourceClient = source.client;
-    const name = config.name;
-    if (config.endpointHostId === undefined || !config.endpointIP) {
-      throw new Error("Endpoint host not found");
-    }
-
-    const channel = await forwardOut(
-      sourceClient,
-      config.endpointIP,
-      config.endpointSSHPort ?? 22,
-    );
-    let endpoint: PluginSshConnection<Client>;
-    try {
-      endpoint = await openLeg(
-        config.requestingUserId,
-        config.endpointHostId,
-        channel,
-      );
-    } catch (error) {
-      channel.destroy();
-      throw error;
-    }
-    const endpointClient = endpoint.client;
-
-    const mode = getTunnelMode(config);
-    const bindHost = getTunnelBindHost(config);
-    const bindClient = mode === "remote" ? endpointClient : sourceClient;
-    const outboundClient = mode === "remote" ? sourceClient : endpointClient;
-    const bindPort =
-      mode === "remote" ? config.endpointPort : config.sourcePort;
-    const targetHost =
-      mode === "remote"
-        ? config.targetHost || "127.0.0.1"
-        : resolveS2SLocalTargetHost(config);
-    const targetPort =
-      mode === "remote" ? config.sourcePort : config.endpointPort;
-
-    let actualPort: number;
-    try {
-      actualPort = await bindForwardIn(bindClient, bindHost, bindPort);
-    } catch (error) {
-      endpoint.dispose();
-      throw error;
-    }
-
-    const onTcp = (
-      info: { destPort: number },
-      accept: () => ClientChannel,
-      reject: () => void,
-    ) => {
-      if (info.destPort !== actualPort) {
-        reject();
-        return;
-      }
-      const inbound = accept();
-      if (mode === "dynamic") {
-        handleSocks5Connect(
-          inbound,
-          (host, port) => forwardOut(outboundClient, host, port),
-          name,
-          log,
-        );
-        return;
-      }
-      pipeTunnelStreams(
-        inbound,
-        forwardOut(outboundClient, targetHost, targetPort),
-        name,
-        log,
-      );
-    };
-    bindClient.on("tcp connection", onTcp);
-
-    // Losing the endpoint leg makes the tunnel useless, so let the source
-    // close too and the usual disconnect handling take it from there.
-    endpointClient.once("close", () => {
-      if (runtimes.get(name)?.endpointClient === endpointClient) {
-        source.dispose();
-      }
-    });
-
-    log.info(
-      `Tunnel ${name} bound ${bindHost}:${actualPort} (${mode}) to ${targetHost}:${targetPort}`,
-    );
-
-    return {
-      sourceClient,
-      endpointClient,
-      bindHost,
-      bindPort: actualPort,
-      close: () => {
-        bindClient.off("tcp connection", onTcp);
-        unbindForwardIn(bindClient, bindHost, actualPort, log);
-        endpoint.dispose();
-        source.dispose();
-      },
-    };
-  }
-
-  async function establish(config: TunnelConfig): Promise<TunnelRuntime> {
-    const source = await openLeg(config.requestingUserId, config.sourceHostId);
-    try {
-      return shouldEstablishDirectTunnel(config)
-        ? await establishDirect(source, config)
-        : await establishManaged(source, config);
-    } catch (error) {
-      source.dispose();
-      throw error;
-    }
-  }
-
-  /** Reacts to the source connection dropping after the tunnel was up. */
-  function watch(runtime: TunnelRuntime, config: TunnelConfig): void {
-    const name = config.name;
-    const client = runtime.sourceClient;
-    client.on("error", (error: Error) => {
-      log.warn(`Tunnel ${name} connection error: ${error.message}`);
-    });
-    client.once("close", () => {
-      if (runtimes.get(name)?.sourceClient !== client) return;
-      if (retryTimers.has(name)) return;
-      if (!manualDisconnects.has(name)) {
-        const current = statuses.get(name);
-        if (current?.status !== CONNECTION_STATES.FAILED) {
-          broadcast(name, {
-            connected: false,
-            status: CONNECTION_STATES.DISCONNECTED,
-          });
-        }
-      }
-      void handleDisconnect(name, config, !manualDisconnects.has(name), client);
-    });
-  }
-
-  async function handleDisconnect(
-    name: string,
-    config: TunnelConfig | null,
-    shouldRetry = true,
-    closingClient?: Client,
-  ): Promise<void> {
-    if (isReservedTunnelName(name)) {
-      // On-demand tunnels are reopened by whoever needs them, never retried
-      // here. A deferred close for a client that a reopen already replaced
-      // must not tear down the replacement.
-      const current = runtimes.get(name);
-      if (closingClient && current && current.sourceClient !== closingClient) {
-        return;
-      }
-      await cleanup(name, true);
-      return;
-    }
-
-    while (cleanupInProgress.has(name)) {
-      await new Promise((resolve) => setTimeout(resolve, 100));
-    }
-    await cleanup(name);
-
-    if (manualDisconnects.has(name)) {
-      resetRetryState(name);
-      broadcast(name, {
-        connected: false,
-        status: CONNECTION_STATES.DISCONNECTED,
-        manualDisconnect: true,
-      });
-      return;
-    }
-
-    // Past the manual branch, so this is a drop nobody asked for.
-    if (config?.requestingUserId) {
-      ctx.events.emit("plugin.tunnels.tunnel_disconnected", {
-        userId: config.requestingUserId,
-        hostId: config.sourceHostId,
-        tunnelName: name,
-      });
-    }
-
-    if (retryExhausted.has(name)) {
-      broadcast(name, {
-        connected: false,
-        status: CONNECTION_STATES.FAILED,
-        reason: "Max retries already exhausted",
-      });
-      return;
-    }
-
-    if (retryTimers.has(name) || disposed) return;
-
-    if (!shouldRetry || !config) {
-      // Keep the reason the failure was just reported with.
-      broadcast(name, {
-        connected: false,
-        status: CONNECTION_STATES.FAILED,
-        reason: lastErrors.get(name),
-        errorType: lastErrorTypes.get(name),
-      });
-      return;
-    }
-
-    const maxRetries = config.maxRetries || 3;
-    const retryInterval = config.retryInterval || 5000;
-    const retryCount = (retryCounters.get(name) || 0) + 1;
-
-    if (retryCount > maxRetries) {
-      log.error(`All ${maxRetries} retries failed for ${name}`);
-      retryExhausted.add(name);
-      retryCounters.delete(name);
-      broadcast(name, {
-        connected: false,
-        status: CONNECTION_STATES.FAILED,
-        retryExhausted: true,
-        reason: "Max retries exhausted",
-      });
-      return;
-    }
-
-    retryCounters.set(name, retryCount);
-    broadcast(name, {
-      connected: false,
-      status: CONNECTION_STATES.RETRYING,
-      retryCount,
-      maxRetries,
-      nextRetryIn: retryInterval / 1000,
-    });
-
-    let nextRetryIn = Math.ceil(retryInterval / 1000);
-    broadcast(name, {
-      connected: false,
-      status: CONNECTION_STATES.WAITING,
-      retryCount,
-      maxRetries,
-      nextRetryIn,
-    });
-
-    countdownTimers.set(
-      name,
-      setInterval(() => {
-        nextRetryIn--;
-        if (nextRetryIn > 0) {
-          broadcast(name, {
-            connected: false,
-            status: CONNECTION_STATES.WAITING,
-            retryCount,
-            maxRetries,
-            nextRetryIn,
-          });
-        }
-      }, 1000),
-    );
-
-    retryTimers.set(
-      name,
-      setTimeout(() => {
-        clearRetryTimers(name);
-        if (!manualDisconnects.has(name)) {
-          void connect(config, retryCount);
-        }
-      }, retryInterval),
-    );
-  }
-
-  /**
-   * Opens a tunnel. Failures are reported over the status broadcast and
-   * retried there, so by default this never rejects. `throwOnError` is for a
-   * caller that waits on the result (forward()), which gets the runtime back.
-   */
-  async function connect(
-    config: TunnelConfig,
-    retryAttempt = 0,
-    options: { throwOnError?: boolean } = {},
-  ): Promise<TunnelRuntime | null> {
-    const name = config.name;
-    if (manualDisconnects.has(name) || disposed) return null;
-
-    connecting.add(name);
-    await cleanup(name, true);
-
-    if (retryAttempt === 0) {
-      retryExhausted.delete(name);
-      retryCounters.delete(name);
-    }
-
-    const current = statuses.get(name);
-    if (!current || current.status !== CONNECTION_STATES.WAITING) {
-      broadcast(name, {
-        connected: false,
-        status: CONNECTION_STATES.CONNECTING,
-        retryCount: retryAttempt > 0 ? retryAttempt : undefined,
-      });
-    }
-
-    try {
-      if (getTunnelScope(config) !== "s2s") {
-        throw new Error(
-          "Client tunnels must be started from the desktop app's local configuration",
-        );
-      }
-
-      const runtime = await establish(config);
-      connecting.delete(name);
-
-      if (manualDisconnects.has(name) || disposed) {
-        runtime.close();
-        return null;
-      }
-
-      runtimes.set(name, runtime);
-      watch(runtime, config);
-      broadcast(name, { connected: true, status: CONNECTION_STATES.CONNECTED });
-      return runtime;
-    } catch (error) {
-      connecting.delete(name);
-      const message = errorMessage(error, "Failed to create tunnel");
-      const errorType = classifyTunnelError(message);
-      log.error(
-        `Tunnel ${name} failed to connect: ${message}`,
-        error instanceof Error ? error : undefined,
-      );
-
-      if (!manualDisconnects.has(name)) {
-        broadcast(name, {
-          connected: false,
-          status: CONNECTION_STATES.FAILED,
-          errorType,
-          reason: message,
-        });
-      }
-
-      const shouldNotRetry =
-        errorType === "AUTHENTICATION_FAILED" ||
-        errorType === "CONNECTION_FAILED" ||
-        manualDisconnects.has(name) ||
-        options.throwOnError === true;
-      await handleDisconnect(name, config, !shouldNotRetry);
-
-      if (options.throwOnError) throw error;
-      return null;
-    }
-  }
-
-  /** Stops a tunnel on request. Holds off retries for a few seconds. */
-  async function stop(name: string): Promise<void> {
-    const config = configs.get(name) ?? null;
-    manualDisconnects.add(name);
-    retryCounters.delete(name);
-    retryExhausted.delete(name);
-    clearRetryTimers(name);
-
-    await cleanup(name, true);
-    broadcast(name, {
-      connected: false,
-      status: CONNECTION_STATES.DISCONNECTED,
-      manualDisconnect: true,
-    });
-    await handleDisconnect(name, config, false);
-
-    const hold = setTimeout(() => {
-      manualHoldTimers.delete(hold);
-      manualDisconnects.delete(name);
-    }, MANUAL_DISCONNECT_HOLD_MS);
-    manualHoldTimers.add(hold);
-  }
-
-  /**
-   * Starts a configured tunnel by name, waiting for any operation already in
-   * flight for it first. The start itself is not awaited: its outcome comes
-   * back over the status stream.
-   */
-  async function start(config: TunnelConfig): Promise<void> {
-    const name = config.name;
-    const pending = pendingOperations.get(name);
-    if (pending) {
-      await pending.catch(() => undefined);
-    }
-
-    const existing = configs.get(name);
-    if (
-      existing &&
-      (existing.sourceHostId !== config.sourceHostId ||
-        existing.tunnelIndex !== config.tunnelIndex)
-    ) {
-      throw new Error(`Tunnel name collision detected: ${name}`);
-    }
-
-    manualDisconnects.delete(name);
-    retryCounters.delete(name);
-    retryExhausted.delete(name);
-    configs.set(name, config);
-
-    const operation = connect(config, 0).then(() => undefined);
-    pendingOperations.set(name, operation);
-    void operation.finally(() => {
-      if (pendingOperations.get(name) === operation) {
-        pendingOperations.delete(name);
-      }
-    });
-  }
-
-  /** Whether `userId` can reach `hostId`, cached briefly so broadcasts stay cheap. */
-  async function canAccessHost(
-    userId: string,
-    hostId: number,
-  ): Promise<boolean> {
-    const cacheKey = `${userId}:${hostId}`;
-    const cached = accessCache.get(cacheKey);
-    if (cached && Date.now() - cached.at < ACCESS_CACHE_MS) {
-      return cached.allowed;
-    }
-    let allowed = false;
-    try {
-      const access =
-        ctx.currentActor() === userId
-          ? await ctx.hosts.checkAccess(hostId, "connect")
-          : await ctx.asUser(userId, () =>
-              ctx.hosts.checkAccess(hostId, "connect"),
-            );
-      allowed = access.hasAccess;
-    } catch {
-      allowed = false;
-    }
-    accessCache.set(cacheKey, { allowed, at: Date.now() });
-    return allowed;
-  }
-
-  /**
-   * Status of every tunnel whose source host the user can reach. Names carry
-   * host labels and endpoints and errors can name internal hosts, so nothing
-   * else is shown. On-demand tunnels are never listed.
-   */
-  async function statusesFor(userId: string): Promise<TunnelStatusMap> {
-    const result: TunnelStatusMap = {};
-    for (const [name, status] of statuses) {
-      if (isReservedTunnelName(name)) continue;
-      const hostId = configs.get(name)?.sourceHostId;
-      if (hostId === undefined) continue;
-      if (await canAccessHost(userId, hostId)) result[name] = status;
-    }
-    return result;
-  }
-
-  async function canAccessTunnel(
-    userId: string,
-    name: string,
-  ): Promise<boolean> {
-    const hostId = configs.get(name)?.sourceHostId;
-    if (hostId === undefined) return false;
-    return canAccessHost(userId, hostId);
-  }
-
-  function onChange(listener: () => void): () => void {
-    listeners.add(listener);
-    return () => listeners.delete(listener);
-  }
-
-  function dispose(): void {
-    disposed = true;
-    for (const name of [...runtimes.keys()]) {
-      const runtime = runtimes.get(name);
-      runtimes.delete(name);
-      try {
-        runtime?.close();
-      } catch {
-        // Already gone.
-      }
-    }
-    for (const name of [...retryTimers.keys(), ...countdownTimers.keys()]) {
-      clearRetryTimers(name);
-    }
-    for (const hold of manualHoldTimers) clearTimeout(hold);
-    manualHoldTimers.clear();
-    listeners.clear();
-  }
-
-  return {
-    configs,
-    statuses,
-    runtimes,
-    manualDisconnects,
-    connecting,
-    broadcast,
-    cleanup,
-    connect,
-    start,
-    stop,
-    handleDisconnect,
-    statusesFor,
-    canAccessHost,
-    canAccessTunnel,
-    onChange,
-    dispose,
-  };
-}
diff --git a/plugins/tunnels/src/backend/repository.ts b/plugins/tunnels/src/backend/repository.ts
deleted file mode 100644
index caae9ff30..000000000
--- a/plugins/tunnels/src/backend/repository.ts
+++ /dev/null
@@ -1,133 +0,0 @@
-import { and, asc, eq, ne } from "drizzle-orm";
-import type { PluginDatabase } from "@termix/plugin-sdk/backend";
-
-export interface PresetRecord {
-  id: number;
-  userId: string;
-  name: string;
-  config: string;
-  platform: string | null;
-  computerName: string | null;
-  createdAt: string;
-  updatedAt: string;
-}
-
-export interface PresetCreateInput {
-  name: string;
-  config: string;
-  platform?: string | null;
-  computerName?: string | null;
-}
-
-export type PresetUpdateInput = Partial<PresetCreateInput>;
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// The table comes from ctx.db.define, which the SDK hands back untyped, and
-// the drizzle handle is the server's own. Typed at this module's edge instead.
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export type PresetRepository = ReturnType<typeof createPresetRepository>;
-
-/**
- * Per-user client tunnel presets.
- *
- * No RETURNING, so it runs the same on all three engines: a new row is read
- * back as the newest row for that user and name, which the name check before
- * every insert keeps unique.
- */
-export function createPresetRepository(db: PluginDatabase, table: Table) {
-  const client = () => db.client<Drizzle>();
-
-  async function findByIdForUser(
-    userId: string,
-    id: number,
-  ): Promise<PresetRecord | null> {
-    const drizzle = await client();
-    const rows = await drizzle
-      .select()
-      .from(table)
-      .where(and(eq(table.id, id), eq(table.userId, userId)))
-      .limit(1);
-    return (rows[0] as PresetRecord) ?? null;
-  }
-
-  return {
-    findByIdForUser,
-
-    async listByUserId(userId: string): Promise<PresetRecord[]> {
-      const drizzle = await client();
-      return drizzle
-        .select()
-        .from(table)
-        .where(eq(table.userId, userId))
-        .orderBy(asc(table.name));
-    },
-
-    async hasNameForUser(
-      userId: string,
-      name: string,
-      excludingId?: number,
-    ): Promise<boolean> {
-      const drizzle = await client();
-      const conditions = [eq(table.userId, userId), eq(table.name, name)];
-      if (excludingId !== undefined) conditions.push(ne(table.id, excludingId));
-      const rows = await drizzle
-        .select({ id: table.id })
-        .from(table)
-        .where(and(...conditions))
-        .limit(1);
-      return rows.length > 0;
-    },
-
-    async createForUser(
-      userId: string,
-      input: PresetCreateInput,
-      now = new Date().toISOString(),
-    ): Promise<PresetRecord> {
-      const drizzle = await client();
-      await drizzle.insert(table).values({
-        userId,
-        name: input.name,
-        config: input.config,
-        platform: input.platform ?? null,
-        computerName: input.computerName ?? null,
-        createdAt: now,
-        updatedAt: now,
-      });
-      await db.persist();
-      const rows = await drizzle
-        .select()
-        .from(table)
-        .where(and(eq(table.userId, userId), eq(table.name, input.name)))
-        .limit(1);
-      return rows[0] as PresetRecord;
-    },
-
-    async updateForUser(
-      userId: string,
-      id: number,
-      updates: PresetUpdateInput,
-      now = new Date().toISOString(),
-    ): Promise<PresetRecord | null> {
-      const drizzle = await client();
-      await drizzle
-        .update(table)
-        .set({ ...updates, updatedAt: now })
-        .where(and(eq(table.id, id), eq(table.userId, userId)));
-      await db.persist();
-      return findByIdForUser(userId, id);
-    },
-
-    async deleteForUser(userId: string, id: number): Promise<boolean> {
-      if (!(await findByIdForUser(userId, id))) return false;
-      const drizzle = await client();
-      await drizzle
-        .delete(table)
-        .where(and(eq(table.id, id), eq(table.userId, userId)));
-      await db.persist();
-      return true;
-    },
-  };
-}
diff --git a/plugins/tunnels/src/backend/routes.ts b/plugins/tunnels/src/backend/routes.ts
deleted file mode 100644
index 2d8299c74..000000000
--- a/plugins/tunnels/src/backend/routes.ts
+++ /dev/null
@@ -1,588 +0,0 @@
-import type { Request, Response, Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import {
-  CONNECTION_STATES,
-  type TunnelConnectRequest,
-  type TunnelConnection,
-} from "./types.js";
-import type { TunnelManager } from "./manager.js";
-import { errorMessage } from "./manager.js";
-import type { PresetRecord, PresetRepository } from "./repository.js";
-import {
-  RESERVED_TUNNEL_NAME_PREFIX,
-  isReservedTunnelName,
-  validateTunnelConfig,
-} from "./utils.js";
-import { authorizeTunnelAction } from "./authorize.js";
-import { buildTunnelConfig, resolveEndpoint } from "./config.js";
-
-function actor(ctx: PluginContext): string {
-  // Core's plugin router authenticates every request and runs it as that user.
-  return ctx.currentActor() as string;
-}
-
-function isNonEmptyString(value: unknown): value is string {
-  return typeof value === "string" && value.trim().length > 0;
-}
-
-function parsePreset(row: PresetRecord) {
-  let config: TunnelConnection[] = [];
-  try {
-    config = JSON.parse(row.config) as TunnelConnection[];
-  } catch {
-    config = [];
-  }
-  return { ...row, config };
-}
-
-/** Every item must be a client tunnel with a known mode and valid ports. */
-export function validatePresetConfig(
-  config: unknown,
-): config is TunnelConnection[] {
-  if (!Array.isArray(config)) return false;
-  return config.every((item) => {
-    if (!item || typeof item !== "object") return false;
-    const tunnel = item as Partial<TunnelConnection>;
-    const mode = tunnel.mode || tunnel.tunnelType;
-    return (
-      tunnel.scope === "c2s" &&
-      (mode === "local" || mode === "remote" || mode === "dynamic") &&
-      typeof tunnel.sourcePort === "number" &&
-      tunnel.sourcePort >= 1 &&
-      tunnel.sourcePort <= 65535 &&
-      (mode === "dynamic" ||
-        (typeof tunnel.endpointPort === "number" &&
-          tunnel.endpointPort >= 1 &&
-          tunnel.endpointPort <= 65535))
-    );
-  });
-}
-
-function trimmedOrNull(value: unknown): string | null {
-  return typeof value === "string" && value.trim() ? value.trim() : null;
-}
-
-/**
- * Mounts the tunnel routes on the plugin's router, which core serves at
- * /plugin-api/tunnels with auth in front. Every route needs tunnels.use.
- */
-export function registerTunnelRoutes(
-  router: Router,
-  ctx: PluginContext,
-  manager: TunnelManager,
-  presets: PresetRepository,
-): void {
-  router.use(ctx.rbac.require("use") as never);
-
-  const statusClients = new Map<Response, string>();
-
-  const sendSnapshot = (res: Response) => {
-    const userId = statusClients.get(res);
-    if (userId === undefined) return;
-    void manager
-      .statusesFor(userId)
-      .then((snapshot) => {
-        res.write(`event: statuses\ndata: ${JSON.stringify(snapshot)}\n\n`);
-      })
-      .catch(() => {
-        statusClients.delete(res);
-      });
-  };
-
-  const unsubscribe = manager.onChange(() => {
-    for (const res of statusClients.keys()) sendSnapshot(res);
-  });
-  ctx.disposables.add(() => {
-    unsubscribe();
-    for (const res of statusClients.keys()) {
-      try {
-        res.end();
-      } catch {
-        // Already closed.
-      }
-    }
-    statusClients.clear();
-  });
-
-  const canAccess = (userId: string) => (hostId: number) =>
-    manager.canAccessHost(userId, hostId);
-
-  /**
-   * @openapi
-   * /plugin-api/tunnels/status:
-   *   get:
-   *     summary: Get tunnel statuses
-   *     description: Returns the status of every tunnel whose source host the caller can reach.
-   *     tags:
-   *       - Tunnels
-   *     responses:
-   *       200:
-   *         description: Tunnel statuses keyed by tunnel name.
-   *       403:
-   *         description: Missing the tunnels.use permission.
-   */
-  router.get("/status", async (_req: Request, res: Response) => {
-    res.json(await manager.statusesFor(actor(ctx)));
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/tunnels/status/stream:
-   *   get:
-   *     summary: Stream tunnel statuses
-   *     description: Server-sent events. Sends a "statuses" event with the full snapshot the caller can see on connect and after every change.
-   *     tags:
-   *       - Tunnels
-   *     responses:
-   *       200:
-   *         description: An event stream.
-   *       403:
-   *         description: Missing the tunnels.use permission.
-   */
-  router.get("/status/stream", (req: Request, res: Response) => {
-    res.writeHead(200, {
-      "Content-Type": "text/event-stream",
-      "Cache-Control": "no-store, no-transform",
-      Connection: "keep-alive",
-      "X-Accel-Buffering": "no",
-    });
-    res.flushHeaders?.();
-
-    statusClients.set(res, actor(ctx));
-    sendSnapshot(res);
-
-    const heartbeat = setInterval(() => {
-      try {
-        res.write(": keepalive\n\n");
-      } catch {
-        closeStream();
-      }
-    }, 30_000);
-
-    const closeStream = () => {
-      clearInterval(heartbeat);
-      statusClients.delete(res);
-    };
-
-    req.on("close", closeStream);
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/tunnels/status/{tunnelName}:
-   *   get:
-   *     summary: Get one tunnel's status
-   *     tags:
-   *       - Tunnels
-   *     parameters:
-   *       - in: path
-   *         name: tunnelName
-   *         required: true
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: The tunnel's status.
-   *       404:
-   *         description: No such tunnel, or the caller cannot see it.
-   */
-  router.get("/status/:tunnelName", async (req: Request, res: Response) => {
-    const tunnelName = String(req.params.tunnelName);
-    // 404 rather than 403 for someone else's tunnel: the name itself carries
-    // host details, so confirming it exists would leak them.
-    if (!(await manager.canAccessTunnel(actor(ctx), tunnelName))) {
-      return res.status(404).json({ error: "Tunnel not found" });
-    }
-    const status = manager.statuses.get(tunnelName);
-    if (!status) return res.status(404).json({ error: "Tunnel not found" });
-    res.json({ name: tunnelName, status });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/tunnels/connect:
-   *   post:
-   *     summary: Connect a tunnel
-   *     description: Starts a server tunnel from one of the caller's hosts. Credentials are resolved on the server. The result arrives over the status stream.
-   *     tags:
-   *       - Tunnels
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               name:
-   *                 type: string
-   *               sourceHostId:
-   *                 type: integer
-   *               tunnelIndex:
-   *                 type: integer
-   *               mode:
-   *                 type: string
-   *               endpointHost:
-   *                 type: string
-   *               sourcePort:
-   *                 type: integer
-   *               endpointPort:
-   *                 type: integer
-   *     responses:
-   *       200:
-   *         description: Connection request received.
-   *       400:
-   *         description: Invalid tunnel configuration.
-   *       403:
-   *         description: Access denied to this host.
-   */
-  router.post("/connect", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const body = (req.body ?? {}) as Partial<TunnelConnectRequest>;
-    const tunnelName = body.name;
-
-    if (!isNonEmptyString(tunnelName)) {
-      return res.status(400).json({ error: "Invalid tunnel configuration" });
-    }
-
-    // Reserved for on-demand forwards, which skip retries by name. A saved
-    // tunnel using it would silently lose its own reconnects.
-    if (isReservedTunnelName(tunnelName)) {
-      return res.status(400).json({
-        error: `Tunnel names beginning with "${RESERVED_TUNNEL_NAME_PREFIX}" are reserved`,
-      });
-    }
-
-    const sourceHostId = Number(body.sourceHostId);
-    const tunnelIndex = Number(body.tunnelIndex ?? 0);
-    if (!Number.isInteger(sourceHostId) || !Number.isInteger(tunnelIndex)) {
-      return res.status(400).json({ error: "Invalid tunnel configuration" });
-    }
-
-    const request: TunnelConnectRequest = {
-      ...(body as TunnelConnectRequest),
-      endpointHost: (body.endpointHost ?? "").trim(),
-      name: tunnelName,
-      sourceHostId,
-      tunnelIndex,
-    };
-
-    if (
-      !validateTunnelConfig(tunnelName, {
-        sourceHostId,
-        tunnelIndex,
-        sourcePort: request.sourcePort,
-        endpointHost: request.endpointHost ?? "",
-        endpointPort: request.endpointPort,
-      })
-    ) {
-      return res
-        .status(400)
-        .json({ error: "Tunnel configuration does not match tunnel name" });
-    }
-
-    const access = await ctx.hosts.checkAccess(sourceHostId, "connect");
-    const host = access.hasAccess ? await ctx.hosts.get(sourceHostId) : null;
-    if (!host) {
-      ctx.log.warn(
-        `User ${userId} tried to connect tunnel ${tunnelName} without access to host ${sourceHostId}`,
-      );
-      return res.status(403).json({ error: "Access denied to this host" });
-    }
-
-    try {
-      const config = await resolveEndpoint(
-        ctx,
-        buildTunnelConfig(host, request, userId),
-      );
-      await manager.start(config);
-    } catch (error) {
-      const reason = errorMessage(error);
-      ctx.log.warn(`Tunnel ${tunnelName} could not start: ${reason}`);
-      manager.broadcast(tunnelName, {
-        connected: false,
-        status: CONNECTION_STATES.FAILED,
-        reason,
-      });
-    }
-
-    res.json({ message: "Connection request received", tunnelName });
-  });
-
-  const stopHandler =
-    (message: string) => async (req: Request, res: Response) => {
-      const userId = actor(ctx);
-      const tunnelName = (req.body ?? {}).tunnelName;
-      if (!isNonEmptyString(tunnelName)) {
-        return res.status(400).json({ error: "Tunnel name required" });
-      }
-
-      const decision = await authorizeTunnelAction(
-        canAccess(userId),
-        tunnelName,
-        manager.configs.get(tunnelName),
-      );
-      if (!decision.allowed) {
-        return res.status(403).json({ error: "Access denied" });
-      }
-
-      await manager.stop(tunnelName);
-      res.json({ message, tunnelName });
-    };
-
-  /**
-   * @openapi
-   * /plugin-api/tunnels/disconnect:
-   *   post:
-   *     summary: Disconnect a tunnel
-   *     tags:
-   *       - Tunnels
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               tunnelName:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Disconnect request received.
-   *       400:
-   *         description: Tunnel name required.
-   *       403:
-   *         description: Access denied.
-   */
-  router.post("/disconnect", stopHandler("Disconnect request received"));
-
-  /**
-   * @openapi
-   * /plugin-api/tunnels/cancel:
-   *   post:
-   *     summary: Cancel a tunnel's connect or retry
-   *     tags:
-   *       - Tunnels
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               tunnelName:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: Cancel request received.
-   *       400:
-   *         description: Tunnel name required.
-   *       403:
-   *         description: Access denied.
-   */
-  router.post("/cancel", stopHandler("Cancel request received"));
-
-  /**
-   * @openapi
-   * /plugin-api/tunnels/presets:
-   *   get:
-   *     summary: List client tunnel presets
-   *     description: Returns the caller's saved client-to-server tunnel presets.
-   *     tags:
-   *       - Tunnels
-   *     responses:
-   *       200:
-   *         description: List of tunnel presets.
-   *       403:
-   *         description: Missing the tunnels.use permission.
-   */
-  router.get("/presets", async (_req: Request, res: Response) => {
-    try {
-      const rows = await presets.listByUserId(actor(ctx));
-      res.json(rows.map(parsePreset));
-    } catch (error) {
-      ctx.log.error(
-        "Failed to fetch client tunnel presets",
-        error instanceof Error ? error : undefined,
-      );
-      res.status(500).json({ error: "Failed to fetch C2S tunnel presets" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/tunnels/presets:
-   *   post:
-   *     summary: Create a client tunnel preset
-   *     tags:
-   *       - Tunnels
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               name:
-   *                 type: string
-   *               config:
-   *                 type: array
-   *                 items:
-   *                   type: object
-   *               platform:
-   *                 type: string
-   *               computerName:
-   *                 type: string
-   *     responses:
-   *       201:
-   *         description: Preset created.
-   *       400:
-   *         description: Invalid name or config.
-   *       409:
-   *         description: A preset with that name already exists.
-   */
-  router.post("/presets", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const { name, config, platform, computerName } = req.body ?? {};
-
-    if (!isNonEmptyString(name)) {
-      return res.status(400).json({ error: "Preset name is required" });
-    }
-    if (!validatePresetConfig(config)) {
-      return res
-        .status(400)
-        .json({ error: "Invalid C2S tunnel configuration" });
-    }
-
-    const trimmedName = name.trim();
-    try {
-      if (await presets.hasNameForUser(userId, trimmedName)) {
-        return res.status(409).json({ error: "Preset name already exists" });
-      }
-      const created = await presets.createForUser(userId, {
-        name: trimmedName,
-        config: JSON.stringify(config),
-        platform: trimmedOrNull(platform),
-        computerName: trimmedOrNull(computerName),
-      });
-      res.status(201).json(parsePreset(created));
-    } catch (error) {
-      ctx.log.error(
-        "Failed to create client tunnel preset",
-        error instanceof Error ? error : undefined,
-      );
-      res.status(500).json({ error: "Failed to create C2S tunnel preset" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/tunnels/presets/{id}:
-   *   put:
-   *     summary: Update a client tunnel preset
-   *     tags:
-   *       - Tunnels
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Preset updated.
-   *       400:
-   *         description: Invalid name or config.
-   *       404:
-   *         description: Preset not found.
-   *       409:
-   *         description: A preset with that name already exists.
-   */
-  router.put("/presets/:id", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const id = Number(req.params.id);
-    const { name, config, platform, computerName } = req.body ?? {};
-
-    if (!Number.isInteger(id)) {
-      return res.status(400).json({ error: "Invalid request" });
-    }
-
-    try {
-      const existing = await presets.findByIdForUser(userId, id);
-      if (!existing) return res.status(404).json({ error: "Preset not found" });
-
-      const updates: Parameters<PresetRepository["updateForUser"]>[2] = {};
-
-      if (name !== undefined) {
-        if (!isNonEmptyString(name)) {
-          return res.status(400).json({ error: "Preset name is required" });
-        }
-        const trimmedName = name.trim();
-        if (await presets.hasNameForUser(userId, trimmedName, id)) {
-          return res.status(409).json({ error: "Preset name already exists" });
-        }
-        updates.name = trimmedName;
-      }
-
-      if (config !== undefined) {
-        if (!validatePresetConfig(config)) {
-          return res
-            .status(400)
-            .json({ error: "Invalid C2S tunnel configuration" });
-        }
-        updates.config = JSON.stringify(config);
-      }
-      if (platform !== undefined) updates.platform = trimmedOrNull(platform);
-      if (computerName !== undefined) {
-        updates.computerName = trimmedOrNull(computerName);
-      }
-
-      const updated = await presets.updateForUser(userId, id, updates);
-      res.json(parsePreset(updated ?? existing));
-    } catch (error) {
-      ctx.log.error(
-        "Failed to update client tunnel preset",
-        error instanceof Error ? error : undefined,
-      );
-      res.status(500).json({ error: "Failed to update C2S tunnel preset" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/tunnels/presets/{id}:
-   *   delete:
-   *     summary: Delete a client tunnel preset
-   *     tags:
-   *       - Tunnels
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Preset deleted.
-   *       404:
-   *         description: Preset not found.
-   */
-  router.delete("/presets/:id", async (req: Request, res: Response) => {
-    const id = Number(req.params.id);
-    if (!Number.isInteger(id)) {
-      return res.status(400).json({ error: "Invalid request" });
-    }
-
-    try {
-      if (!(await presets.deleteForUser(actor(ctx), id))) {
-        return res.status(404).json({ error: "Preset not found" });
-      }
-      res.json({ success: true });
-    } catch (error) {
-      ctx.log.error(
-        "Failed to delete client tunnel preset",
-        error instanceof Error ? error : undefined,
-      );
-      res.status(500).json({ error: "Failed to delete C2S tunnel preset" });
-    }
-  });
-}
diff --git a/plugins/tunnels/src/backend/service.ts b/plugins/tunnels/src/backend/service.ts
deleted file mode 100644
index 811abdac2..000000000
--- a/plugins/tunnels/src/backend/service.ts
+++ /dev/null
@@ -1,260 +0,0 @@
-import type { Client } from "ssh2";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { TunnelConfig, TunnelStatus } from "./types.js";
-import type { TunnelManager, TunnelRuntime } from "./manager.js";
-import { forwardOut } from "./ssh-primitives.js";
-import {
-  RESERVED_TUNNEL_NAME_PREFIX,
-  isReservedTunnelName,
-  parseReservedTunnelName,
-} from "./utils.js";
-import { authorizeTunnelAction } from "./authorize.js";
-import {
-  buildTunnelConfig,
-  connectionToRequest,
-  findSavedTunnel,
-  hostLabel,
-  resolveEndpoint,
-} from "./config.js";
-
-export interface TunnelForwardTarget {
-  targetHost: string;
-  targetPort: number;
-  /** Where the local listener binds. Defaults to 127.0.0.1. */
-  bindHost?: string;
-  /** A fixed local port. Defaults to one the kernel picks. */
-  bindPort?: number;
-}
-
-export interface TunnelForwardHandle {
-  bindHost: string;
-  bindPort: number;
-  close: () => Promise<void>;
-}
-
-/** What other plugins get from ctx.services.get("tunnels.access"). */
-export interface TunnelsAccess {
-  /**
-   * Opens (or reuses) a local forward to target through a source host and
-   * resolves only once it works: connected, listening and the target
-   * answered one probe. Rejects with the real reason otherwise.
-   */
-  forward(
-    sourceHostId: number,
-    target: TunnelForwardTarget,
-    options?: { name?: string; idleTimeoutMs?: number },
-  ): Promise<TunnelForwardHandle>;
-  /** Starts a saved tunnel by name. Its outcome arrives as status. */
-  start(name: string): Promise<void>;
-  /** Stops a tunnel by name and holds off its retries. */
-  stop(name: string): Promise<void>;
-  status(name: string): Promise<TunnelStatus | null>;
-  list(): Promise<Record<string, TunnelStatus>>;
-}
-
-const TARGET_PROBE_TIMEOUT_MS = 10_000;
-
-/**
- * Opens one channel to the target and closes it again. Without it a forward
- * reports success the moment its listener is up, and the likeliest failure
- * (nothing listening on the target port) only shows up as a blank page.
- */
-async function probeTarget(
-  client: Client,
-  targetHost: string,
-  targetPort: number,
-): Promise<void> {
-  let timer: NodeJS.Timeout | undefined;
-  try {
-    const channel = await Promise.race([
-      forwardOut(client, targetHost, targetPort),
-      new Promise<never>((_resolve, reject) => {
-        timer = setTimeout(
-          () => reject(new Error("Timed out reaching the endpoint port")),
-          TARGET_PROBE_TIMEOUT_MS,
-        );
-      }),
-    ]);
-    try {
-      channel.end();
-    } catch {
-      // Already gone; the probe succeeded either way.
-    }
-  } finally {
-    if (timer) clearTimeout(timer);
-  }
-}
-
-function isPort(value: unknown, allowZero = false): value is number {
-  return (
-    typeof value === "number" &&
-    Number.isInteger(value) &&
-    value >= (allowZero ? 0 : 1) &&
-    value <= 65535
-  );
-}
-
-export function createTunnelsService(
-  ctx: PluginContext,
-  manager: TunnelManager,
-): TunnelsAccess {
-  // What each live forward was opened for, so an edited target reopens it
-  // instead of silently forwarding to the old one.
-  const fingerprints = new Map<string, string>();
-
-  const actor = (): string => {
-    const userId = ctx.currentActor();
-    if (!userId) throw new Error("No acting user");
-    return userId;
-  };
-
-  const handleFor = (
-    name: string,
-    runtime: TunnelRuntime,
-  ): TunnelForwardHandle => ({
-    bindHost: runtime.bindHost,
-    bindPort: runtime.bindPort,
-    close: async () => {
-      fingerprints.delete(name);
-      await manager.cleanup(name, true);
-    },
-  });
-
-  const canAccess = (hostId: number) => manager.canAccessHost(actor(), hostId);
-
-  return {
-    async forward(sourceHostId, target, options = {}) {
-      const userId = actor();
-      if (!isPort(target.targetPort)) throw new Error("Invalid target port");
-      if (target.bindPort !== undefined && !isPort(target.bindPort, true)) {
-        throw new Error("Invalid bind port");
-      }
-      const targetHost = target.targetHost?.trim();
-      if (!targetHost) throw new Error("Invalid target host");
-
-      const access = await ctx.hosts.checkAccess(sourceHostId, "connect");
-      const host = access.hasAccess ? await ctx.hosts.get(sourceHostId) : null;
-      if (!host) throw new Error("Host not found or access denied");
-
-      const name =
-        options.name ??
-        `${RESERVED_TUNNEL_NAME_PREFIX}${sourceHostId}:${targetHost}:${target.targetPort}`;
-      if (
-        !isReservedTunnelName(name) ||
-        parseReservedTunnelName(name)?.hostId !== sourceHostId
-      ) {
-        throw new Error(
-          `Forward names must be "${RESERVED_TUNNEL_NAME_PREFIX}<hostId>:<id>" for the source host`,
-        );
-      }
-
-      const bindHost = target.bindHost?.trim() || "127.0.0.1";
-      const fingerprint = JSON.stringify({
-        targetHost,
-        targetPort: target.targetPort,
-        bindHost,
-        bindPort: target.bindPort ?? null,
-        ip: host.ip,
-        sshPort: host.port,
-        username: host.username,
-      });
-
-      const existing = manager.runtimes.get(name);
-      if (existing) {
-        const recorded = fingerprints.get(name);
-        if (recorded === undefined || recorded === fingerprint) {
-          fingerprints.set(name, fingerprint);
-          return handleFor(name, existing);
-        }
-        ctx.log.info(`Reopening tunnel ${name} after its target changed`);
-        await manager.cleanup(name, true);
-        fingerprints.delete(name);
-      }
-
-      const config: TunnelConfig = {
-        name,
-        scope: "s2s",
-        mode: "local",
-        tunnelType: "local",
-        bindHost,
-        targetHost,
-        sourceHostId: host.id,
-        tunnelIndex: 0,
-        requestingUserId: userId,
-        hostName: hostLabel(host),
-        sourceIP: host.ip,
-        sourceSSHPort: host.port,
-        sourceUsername: host.username,
-        // Loopback marks it single host, which is what picks the
-        // listen-here-and-forwardOut path.
-        endpointHost: "127.0.0.1",
-        sourcePort: target.bindPort ?? 0,
-        endpointPort: target.targetPort,
-        maxRetries: 0,
-        retryInterval: 0,
-        autoStart: false,
-        idleTimeoutMs: options.idleTimeoutMs,
-      };
-
-      manager.manualDisconnects.delete(name);
-      try {
-        const runtime = await manager.connect(config, 0, {
-          throwOnError: true,
-        });
-        if (!runtime) {
-          throw new Error("The tunnel closed before it could be used");
-        }
-        await probeTarget(runtime.sourceClient, targetHost, target.targetPort);
-        fingerprints.set(name, fingerprint);
-        return handleFor(name, runtime);
-      } catch (error) {
-        // Nothing half-built may be handed out on the next call.
-        await manager.cleanup(name, true).catch(() => undefined);
-        fingerprints.delete(name);
-        throw error;
-      }
-    },
-
-    async start(name) {
-      const existing = manager.configs.get(name);
-      if (existing) {
-        if (!(await canAccess(existing.sourceHostId))) {
-          throw new Error(`Tunnel "${name}" is not configured`);
-        }
-        await manager.start(existing);
-        return;
-      }
-
-      const saved = await findSavedTunnel(ctx, name);
-      if (!saved) throw new Error(`Tunnel "${name}" is not configured`);
-      const config = await resolveEndpoint(
-        ctx,
-        buildTunnelConfig(
-          saved.host,
-          connectionToRequest(saved.host, saved.index, saved.connection),
-          actor(),
-        ),
-      );
-      await manager.start(config);
-    },
-
-    async stop(name) {
-      const decision = await authorizeTunnelAction(
-        canAccess,
-        name,
-        manager.configs.get(name),
-      );
-      if (!decision.allowed) throw new Error("Access denied");
-      await manager.stop(name);
-    },
-
-    async status(name) {
-      if (!(await manager.canAccessTunnel(actor(), name))) return null;
-      return manager.statuses.get(name) ?? null;
-    },
-
-    async list() {
-      return manager.statusesFor(actor());
-    },
-  };
-}
diff --git a/plugins/tunnels/src/backend/socks5-relay.ts b/plugins/tunnels/src/backend/socks5-relay.ts
deleted file mode 100644
index d8395c973..000000000
--- a/plugins/tunnels/src/backend/socks5-relay.ts
+++ /dev/null
@@ -1,107 +0,0 @@
-import type { Duplex } from "node:stream";
-import type { PluginLogger } from "@termix/plugin-sdk/backend";
-
-function parseSocksAddress(buffer: Buffer): {
-  address: string;
-  port: number;
-  bytesRead: number;
-} | null {
-  if (buffer.length < 7 || buffer[0] !== 0x05 || buffer[1] !== 0x01) {
-    return null;
-  }
-
-  const addressType = buffer[3];
-  let offset = 4;
-  let address: string;
-
-  if (addressType === 0x01) {
-    if (buffer.length < offset + 4 + 2) return null;
-    address = Array.from(buffer.subarray(offset, offset + 4)).join(".");
-    offset += 4;
-  } else if (addressType === 0x03) {
-    const len = buffer[offset];
-    offset += 1;
-    if (buffer.length < offset + len + 2) return null;
-    address = buffer.subarray(offset, offset + len).toString("utf8");
-    offset += len;
-  } else if (addressType === 0x04) {
-    if (buffer.length < offset + 16 + 2) return null;
-    const parts: string[] = [];
-    for (let i = 0; i < 16; i += 2) {
-      parts.push(buffer.readUInt16BE(offset + i).toString(16));
-    }
-    address = parts.join(":");
-    offset += 16;
-  } else {
-    return null;
-  }
-
-  const port = buffer.readUInt16BE(offset);
-  return { address, port, bytesRead: offset + 2 };
-}
-
-/** The server side of a SOCKS5 CONNECT, for dynamic mode tunnels. */
-export function handleSocks5Connect(
-  inbound: Duplex,
-  openOutbound: (host: string, port: number) => Promise<Duplex>,
-  tunnelName: string,
-  log?: PluginLogger,
-): void {
-  let buffer = Buffer.alloc(0);
-  let stage: "greeting" | "connect" | "piping" = "greeting";
-
-  const fail = (code = 0x01) => {
-    if (!inbound.destroyed) {
-      inbound.write(Buffer.from([0x05, code, 0x00, 0x01, 0, 0, 0, 0, 0, 0]));
-      inbound.destroy();
-    }
-  };
-
-  const onData = (chunk: Buffer) => {
-    buffer = Buffer.concat([buffer, chunk]);
-
-    if (stage === "greeting") {
-      if (buffer.length < 2) return;
-      if (buffer[0] !== 0x05) {
-        fail(0x01);
-        return;
-      }
-      const methodsLength = buffer[1];
-      if (buffer.length < 2 + methodsLength) return;
-      inbound.write(Buffer.from([0x05, 0x00]));
-      buffer = buffer.subarray(2 + methodsLength);
-      stage = "connect";
-    }
-
-    if (stage === "connect") {
-      const parsed = parseSocksAddress(buffer);
-      if (!parsed) return;
-      stage = "piping";
-      inbound.off("data", onData);
-      const remainder = buffer.subarray(parsed.bytesRead);
-      openOutbound(parsed.address, parsed.port)
-        .then((outbound) => {
-          inbound.write(
-            Buffer.from([0x05, 0x00, 0x00, 0x01, 0, 0, 0, 0, 0, 0]),
-          );
-          if (remainder.length > 0) {
-            outbound.write(remainder);
-          }
-          inbound.pipe(outbound).pipe(inbound);
-          inbound.on("error", () => outbound.destroy());
-          outbound.on("error", () => inbound.destroy());
-        })
-        .catch((error: unknown) => {
-          log?.warn(
-            `SOCKS5 connect to ${parsed.address}:${parsed.port} failed for tunnel ${tunnelName}: ${
-              error instanceof Error ? error.message : String(error)
-            }`,
-          );
-          fail(0x05);
-        });
-    }
-  };
-
-  inbound.on("data", onData);
-  inbound.on("error", () => inbound.destroy());
-}
diff --git a/plugins/tunnels/src/backend/ssh-primitives.ts b/plugins/tunnels/src/backend/ssh-primitives.ts
deleted file mode 100644
index 8c4740b8b..000000000
--- a/plugins/tunnels/src/backend/ssh-primitives.ts
+++ /dev/null
@@ -1,78 +0,0 @@
-import type { Client, ClientChannel } from "ssh2";
-import type { Duplex } from "node:stream";
-import type { PluginLogger } from "@termix/plugin-sdk/backend";
-
-// Plain ssh2 channel operations on a client that already came from ctx.ssh.
-
-export function forwardOut(
-  client: Client,
-  targetHost: string,
-  targetPort: number,
-): Promise<ClientChannel> {
-  return new Promise((resolve, reject) => {
-    client.forwardOut("127.0.0.1", 0, targetHost, targetPort, (err, stream) => {
-      if (err) {
-        reject(err);
-        return;
-      }
-      resolve(stream);
-    });
-  });
-}
-
-export function bindForwardIn(
-  client: Client,
-  bindHost: string,
-  bindPort: number,
-): Promise<number> {
-  return new Promise((resolve, reject) => {
-    client.forwardIn(bindHost, bindPort, (err, actualPort) => {
-      if (err) {
-        reject(err);
-        return;
-      }
-      resolve(actualPort || bindPort);
-    });
-  });
-}
-
-export function unbindForwardIn(
-  client: Client,
-  bindHost: string,
-  bindPort: number,
-  log?: PluginLogger,
-): void {
-  try {
-    client.unforwardIn(bindHost, bindPort, (err) => {
-      if (err) {
-        log?.warn(
-          `Failed to unbind tunnel listener ${bindHost}:${bindPort}: ${err.message}`,
-        );
-      }
-    });
-  } catch {
-    // The connection may already be gone.
-  }
-}
-
-export function pipeTunnelStreams(
-  inbound: Duplex,
-  outboundPromise: Promise<Duplex>,
-  tunnelName: string,
-  log?: PluginLogger,
-): void {
-  outboundPromise
-    .then((outbound) => {
-      inbound.pipe(outbound).pipe(inbound);
-      inbound.on("error", () => outbound.destroy());
-      outbound.on("error", () => inbound.destroy());
-    })
-    .catch((error: unknown) => {
-      log?.warn(
-        `Tunnel ${tunnelName} could not open its outbound stream: ${
-          error instanceof Error ? error.message : String(error)
-        }`,
-      );
-      inbound.destroy();
-    });
-}
diff --git a/plugins/tunnels/src/backend/tables.ts b/plugins/tunnels/src/backend/tables.ts
deleted file mode 100644
index 50c69e521..000000000
--- a/plugins/tunnels/src/backend/tables.ts
+++ /dev/null
@@ -1,32 +0,0 @@
-import {
-  adoptLegacyTable,
-  defineTable,
-  id,
-  refUser,
-  text,
-  timestamp,
-} from "@termix/plugin-sdk/db";
-
-/**
- * Client tunnel presets the desktop app saves per user.
- *
- * Adopted from core's c2s_tunnel_presets, so the column names are the legacy
- * ones and the rename carries every existing row across. Core never indexed
- * it, so there is no legacy index to keep.
- */
-export const presets = adoptLegacyTable(
-  "c2s_tunnel_presets",
-  defineTable("presets", {
-    id: id(),
-    userId: refUser(),
-    name: text().notNull(),
-    // JSON: TunnelConnection[]
-    config: text().notNull(),
-    platform: text(),
-    computerName: text(),
-    createdAt: timestamp().notNull().defaultNow(),
-    updatedAt: timestamp().notNull().defaultNow(),
-  }),
-);
-
-export const tables = [presets];
diff --git a/plugins/tunnels/src/backend/types.ts b/plugins/tunnels/src/backend/types.ts
deleted file mode 100644
index cac49bb25..000000000
--- a/plugins/tunnels/src/backend/types.ts
+++ /dev/null
@@ -1,60 +0,0 @@
-import type { TunnelMode, TunnelScope } from "../shared/types.js";
-
-export type {
-  C2STunnelPreset,
-  ConnectionState,
-  TunnelConnectRequest,
-  TunnelConnection,
-  TunnelErrorType,
-  TunnelMode,
-  TunnelScope,
-  TunnelStatus,
-} from "../shared/types.js";
-export { CONNECTION_STATES } from "../shared/types.js";
-
-/**
- * A tunnel as the manager runs it. Built server side from a saved connection
- * or a connect request; it never carries credentials; both SSH legs resolve
- * theirs through ctx.ssh.
- */
-export interface TunnelConfig {
-  name: string;
-  scope?: TunnelScope;
-  mode?: TunnelMode;
-  tunnelType?: "local" | "remote";
-  localAddress?: string;
-  remoteAddress?: string;
-  bindHost?: string;
-  targetHost?: string;
-
-  sourceHostId: number;
-  sourceHostSyncId?: string;
-  tunnelIndex: number;
-  /** Who the SSH connections run as. */
-  requestingUserId: string;
-
-  hostName: string;
-  sourceIP: string;
-  sourceSSHPort: number;
-  sourceUsername: string;
-
-  endpointHost: string;
-  /** The Termix host the endpoint leg connects to, when there is one. */
-  endpointHostId?: number;
-  endpointIP?: string;
-  endpointSSHPort?: number;
-  endpointUsername?: string;
-
-  sourcePort: number;
-  endpointPort: number;
-  maxRetries: number;
-  /** Milliseconds. */
-  retryInterval: number;
-  autoStart: boolean;
-
-  /**
-   * When set, the tunnel closes itself once it has had no connected sockets
-   * for this long. forward() uses it for on-demand tunnels.
-   */
-  idleTimeoutMs?: number;
-}
diff --git a/plugins/tunnels/src/backend/utils.ts b/plugins/tunnels/src/backend/utils.ts
deleted file mode 100644
index 164c79d0a..000000000
--- a/plugins/tunnels/src/backend/utils.ts
+++ /dev/null
@@ -1,265 +0,0 @@
-import { buildTunnelName } from "../shared/tunnel-naming.js";
-import type { TunnelConfig, TunnelErrorType } from "./types.js";
-
-export function classifyTunnelError(errorMessage: string): TunnelErrorType {
-  if (!errorMessage) return "UNKNOWN";
-
-  const message = errorMessage.toLowerCase();
-
-  if (
-    message.includes("closed by remote host") ||
-    message.includes("connection reset by peer") ||
-    message.includes("connection refused") ||
-    message.includes("broken pipe")
-  ) {
-    return "NETWORK_ERROR";
-  }
-
-  if (
-    message.includes("authentication failed") ||
-    message.includes("authentication methods failed") ||
-    message.includes("permission denied") ||
-    message.includes("incorrect password")
-  ) {
-    return "AUTHENTICATION_FAILED";
-  }
-
-  if (
-    message.includes("connect etimedout") ||
-    message.includes("timeout") ||
-    message.includes("timed out") ||
-    message.includes("keepalive timeout")
-  ) {
-    return "TIMEOUT";
-  }
-
-  if (
-    message.includes("bind: address already in use") ||
-    message.includes("failed for listen port") ||
-    message.includes("port forwarding failed")
-  ) {
-    return "CONNECTION_FAILED";
-  }
-
-  if (message.includes("permission") || message.includes("access denied")) {
-    return "CONNECTION_FAILED";
-  }
-
-  return "UNKNOWN";
-}
-
-/** The name a host's saved tunnel runs under. See shared/tunnel-naming.ts. */
-export const normalizeTunnelName = buildTunnelName;
-
-export function getTunnelMode(
-  tunnelConfig: Pick<TunnelConfig, "mode" | "tunnelType">,
-): "local" | "remote" | "dynamic" {
-  return tunnelConfig.mode || tunnelConfig.tunnelType || "remote";
-}
-
-export function getTunnelScope(
-  tunnelConfig: Pick<TunnelConfig, "scope">,
-): "s2s" | "c2s" {
-  return tunnelConfig.scope || "s2s";
-}
-
-export function getTunnelBindHost(
-  tunnelConfig: Pick<TunnelConfig, "bindHost">,
-): string {
-  return tunnelConfig.bindHost || "127.0.0.1";
-}
-
-export function parseTunnelName(tunnelName: string): {
-  hostId?: number;
-  tunnelIndex?: number;
-  displayName: string;
-  sourcePort: string;
-  endpointHost: string;
-  endpointPort: string;
-  isLegacyFormat: boolean;
-} {
-  const parts = tunnelName.split("::");
-
-  if (parts.length === 6) {
-    return {
-      hostId: parseInt(parts[0]),
-      tunnelIndex: parseInt(parts[1]),
-      displayName: parts[2],
-      sourcePort: parts[3],
-      endpointHost: parts[4],
-      endpointPort: parts[5],
-      isLegacyFormat: false,
-    };
-  }
-
-  const legacyParts = tunnelName.split("_");
-  return {
-    displayName: legacyParts[0] || "unknown",
-    sourcePort: legacyParts[legacyParts.length - 3] || "0",
-    endpointHost: legacyParts[legacyParts.length - 2] || "unknown",
-    endpointPort: legacyParts[legacyParts.length - 1] || "0",
-    isLegacyFormat: true,
-  };
-}
-
-export function validateTunnelConfig(
-  tunnelName: string,
-  tunnelConfig: Pick<
-    TunnelConfig,
-    | "sourceHostId"
-    | "tunnelIndex"
-    | "sourcePort"
-    | "endpointHost"
-    | "endpointPort"
-  >,
-): boolean {
-  const parsed = parseTunnelName(tunnelName);
-
-  if (parsed.isLegacyFormat) {
-    return true;
-  }
-
-  return (
-    parsed.hostId === tunnelConfig.sourceHostId &&
-    parsed.tunnelIndex === tunnelConfig.tunnelIndex &&
-    String(parsed.sourcePort) === String(tunnelConfig.sourcePort) &&
-    parsed.endpointHost === tunnelConfig.endpointHost &&
-    String(parsed.endpointPort) === String(tunnelConfig.endpointPort)
-  );
-}
-
-/**
- * Tunnel names beginning with this prefix are reserved for forward() tunnels
- * (web endpoints): they are opened on demand and never retried on disconnect.
- * A user-supplied name using the prefix would silently lose its own retry
- * behaviour and could collide with a live forward, so POST /connect rejects
- * it.
- */
-export const RESERVED_TUNNEL_NAME_PREFIX = "web:";
-
-export function isReservedTunnelName(tunnelName: string): boolean {
-  return tunnelName.startsWith(RESERVED_TUNNEL_NAME_PREFIX);
-}
-
-/** The exact inverse of parseReservedTunnelName. */
-export function buildWebEndpointTunnelName(
-  hostId: number,
-  endpointId: string,
-): string {
-  return `${RESERVED_TUNNEL_NAME_PREFIX}${hostId}:${endpointId}`;
-}
-
-/**
- * Recovers the host id and endpoint id from a reserved name, so a route that
- * only has the name can still check ownership.
- *
- * Returns null for anything that is not a reserved name or whose host id is
- * not a positive integer. Callers must treat null as "cannot verify" and deny.
- * The endpoint id is everything after the first ":" following the host id,
- * so it may contain colons itself.
- */
-export function parseReservedTunnelName(
-  tunnelName: string,
-): { hostId: number; endpointId: string } | null {
-  if (!isReservedTunnelName(tunnelName)) return null;
-
-  const rest = tunnelName.slice(RESERVED_TUNNEL_NAME_PREFIX.length);
-  const separatorIndex = rest.indexOf(":");
-  if (separatorIndex === -1) return null;
-
-  const hostIdPart = rest.slice(0, separatorIndex);
-  const endpointId = rest.slice(separatorIndex + 1);
-  if (!/^[0-9]+$/.test(hostIdPart) || !endpointId) return null;
-
-  const hostId = Number(hostIdPart);
-  if (!Number.isInteger(hostId) || hostId < 1) return null;
-
-  return { hostId, endpointId };
-}
-
-type EndpointHostLike = {
-  id: number | string;
-  name?: string | null;
-  ip: string;
-  username?: string | null;
-};
-
-/** Matches a saved endpointHost string against a host id, name, ip or user@ip. */
-export function findHostByTunnelEndpoint<T extends EndpointHostLike>(
-  hosts: T[],
-  endpointHost?: string | null,
-): T | undefined {
-  const value = endpointHost?.trim();
-  if (!value) return undefined;
-
-  return hosts.find((host) => {
-    const userAtIp = host.username ? `${host.username}@${host.ip}` : "";
-    return (
-      String(host.id) === value ||
-      host.name === value ||
-      host.ip === value ||
-      userAtIp === value
-    );
-  });
-}
-
-export function isSingleHostTunnel(
-  tunnelConfig: Pick<
-    TunnelConfig,
-    | "endpointHost"
-    | "endpointIP"
-    | "sourceIP"
-    | "endpointSSHPort"
-    | "sourceSSHPort"
-    | "endpointHostId"
-    | "sourceHostId"
-  >,
-): boolean {
-  if (!tunnelConfig.endpointHost && !tunnelConfig.endpointIP) return true;
-  if (
-    tunnelConfig.endpointHost === "127.0.0.1" ||
-    tunnelConfig.endpointHost === "localhost"
-  ) {
-    return true;
-  }
-  if (
-    tunnelConfig.endpointHostId !== undefined &&
-    tunnelConfig.endpointHostId === tunnelConfig.sourceHostId
-  ) {
-    return true;
-  }
-  if (
-    tunnelConfig.endpointIP &&
-    tunnelConfig.endpointIP === tunnelConfig.sourceIP &&
-    tunnelConfig.endpointSSHPort === tunnelConfig.sourceSSHPort
-  ) {
-    return true;
-  }
-  return false;
-}
-
-/**
- * Direct tunnels ride the source connection alone. Anything else needs a
- * second SSH leg to a Termix endpoint host, reached through the source.
- */
-export function shouldEstablishDirectTunnel(
-  tunnelConfig: TunnelConfig,
-): boolean {
-  if (isSingleHostTunnel(tunnelConfig)) return true;
-  const mode = getTunnelMode(tunnelConfig);
-  return mode !== "remote" && tunnelConfig.endpointHostId === undefined;
-}
-
-export function resolveS2SLocalTargetHost(tunnelConfig: TunnelConfig): string {
-  const targetHost = tunnelConfig.targetHost?.trim();
-
-  if (
-    !targetHost ||
-    targetHost === tunnelConfig.endpointHost ||
-    targetHost === tunnelConfig.hostName
-  ) {
-    return "127.0.0.1";
-  }
-
-  return targetHost;
-}
diff --git a/plugins/tunnels/src/frontend/ActiveTunnelsCounter.tsx b/plugins/tunnels/src/frontend/ActiveTunnelsCounter.tsx
deleted file mode 100644
index f4ffc5e59..000000000
--- a/plugins/tunnels/src/frontend/ActiveTunnelsCounter.tsx
+++ /dev/null
@@ -1,42 +0,0 @@
-import { useEffect, useState } from "react";
-import { Network } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { getTunnelStatuses } from "./api";
-
-/** The dashboard's "active tunnels" counter; a click opens the tunnels tab. */
-export function ActiveTunnelsCounter({ onOpen }: { onOpen: () => void }) {
-  const { t } = useTranslation();
-  const [count, setCount] = useState(0);
-
-  useEffect(() => {
-    let cancelled = false;
-    getTunnelStatuses()
-      .then((statuses) => {
-        if (cancelled) return;
-        setCount(
-          Object.values(statuses ?? {}).filter(
-            (status) =>
-              (status as { status?: string })?.status?.toUpperCase() ===
-              "CONNECTED",
-          ).length,
-        );
-      })
-      .catch(() => {});
-    return () => {
-      cancelled = true;
-    };
-  }, []);
-
-  return (
-    <button
-      onClick={onOpen}
-      className="flex items-center gap-2.5 px-4 py-2.5 hover:bg-muted transition-colors cursor-pointer text-left"
-    >
-      <Network className="size-3.5 text-muted-foreground shrink-0" />
-      <span className="text-base font-bold">{count}</span>
-      <span className="text-[10px] text-muted-foreground uppercase tracking-widest font-semibold">
-        {t("tunnels.activeTunnels")}
-      </span>
-    </button>
-  );
-}
diff --git a/plugins/tunnels/src/frontend/C2STunnelPresetManager.tsx b/plugins/tunnels/src/frontend/C2STunnelPresetManager.tsx
deleted file mode 100644
index 44a746b13..000000000
--- a/plugins/tunnels/src/frontend/C2STunnelPresetManager.tsx
+++ /dev/null
@@ -1,1282 +0,0 @@
-import React from "react";
-import {
-  Activity,
-  ChevronDown,
-  Download,
-  Loader2,
-  Pencil,
-  Play,
-  Plus,
-  Save,
-  Square,
-  Trash2,
-} from "lucide-react";
-import { toast } from "sonner";
-import { useHosts, useTranslation } from "@termix/plugin-sdk/frontend";
-import { Button, FakeSwitch, Input, Select2 } from "@termix/plugin-sdk/ui";
-import type {
-  C2STunnelPreset,
-  TunnelConnection,
-  TunnelMode,
-  TunnelStatus,
-} from "../shared/types";
-import { clientTunnelName } from "../shared/tunnel-naming";
-import {
-  getTunnelModeDescription,
-  getTunnelPortLabels,
-  getTunnelTypeForMode,
-} from "./tunnel-form-utils";
-import {
-  getTunnelMode,
-  normalizeClientTunnel,
-  stripClientTunnelDiagnostics,
-  type ClientTunnel,
-} from "./c2s-tunnel-config-utils";
-import {
-  apiErrorMessage,
-  createC2STunnelPreset,
-  deleteC2STunnelPreset,
-  getC2STunnelPresets,
-  updateC2STunnelPreset,
-} from "./api";
-
-interface SshHostOption {
-  id: number;
-  name: string;
-  syncId?: string | null;
-  connectionType?: string | null;
-}
-
-function getErrorMessage(error: unknown, fallback: string): string {
-  return error instanceof Error && error.message ? error.message : fallback;
-}
-
-function sortPresets(presets: C2STunnelPreset[]) {
-  return [...presets].sort((a, b) => a.name.localeCompare(b.name));
-}
-
-function sameConfig(a: TunnelConnection[], b: TunnelConnection[]) {
-  return JSON.stringify(a) === JSON.stringify(b);
-}
-
-function isValidIPv4(value: string) {
-  const parts = value.split(".");
-  return (
-    parts.length === 4 &&
-    parts.every((part) => {
-      if (!/^\d+$/.test(part)) return false;
-      const value = Number(part);
-      return value >= 0 && value <= 255;
-    })
-  );
-}
-
-function isValidPort(value: unknown) {
-  const port = Number(value);
-  return Number.isInteger(port) && port >= 1 && port <= 65535;
-}
-
-function getEffectiveAddress(address?: string) {
-  const trimmedAddress = address?.trim();
-  return trimmedAddress || "127.0.0.1";
-}
-
-function formatDateTime(value?: string) {
-  if (!value) return "";
-  const date = new Date(value);
-  if (Number.isNaN(date.getTime())) return "";
-  return date.toLocaleString();
-}
-
-function createClientTunnel(): ClientTunnel {
-  return {
-    scope: "c2s",
-    mode: "local",
-    tunnelType: "local",
-    localAddress: "",
-    remoteAddress: "",
-    bindHost: "",
-    sourcePort: 8080,
-    endpointPort: 22,
-    endpointHost: "",
-    maxRetries: 3,
-    retryInterval: 10,
-    autoStart: false,
-  };
-}
-
-function getStatusKind(status?: TunnelStatus) {
-  const value = status?.status?.toUpperCase() || "DISCONNECTED";
-  if (value === "CONNECTED") return "connected";
-  if (value === "ERROR" || value === "FAILED") return "error";
-  if (
-    value === "CONNECTING" ||
-    value === "DISCONNECTING" ||
-    value === "RETRYING" ||
-    value === "WAITING"
-  ) {
-    return "connecting";
-  }
-  return "disconnected";
-}
-
-function getStatusTitle(
-  status: TunnelStatus | undefined,
-  statusText: string,
-  t: ReturnType<typeof useTranslation>["t"],
-) {
-  if (!status) return statusText;
-  const details = [];
-  if (status.reason) details.push(status.reason);
-  if (status.retryCount && status.maxRetries) {
-    details.push(
-      t("tunnels.attempt", {
-        current: status.retryCount,
-        max: status.maxRetries,
-      }),
-    );
-  }
-  if (status.nextRetryIn) {
-    details.push(t("tunnels.nextRetryIn", { seconds: status.nextRetryIn }));
-  }
-  if (status.errorType && !status.reason) details.push(status.errorType);
-  return details.length > 0 ? details.join("\n") : statusText;
-}
-
-export function C2STunnelPresetManager(): React.ReactElement {
-  const { t } = useTranslation();
-  const [localConfig, setLocalConfig] = React.useState<ClientTunnel[]>([]);
-  const [savedLocalConfig, setSavedLocalConfig] = React.useState<
-    ClientTunnel[]
-  >([]);
-  const { hosts: pluginHosts, loaded: hostsLoaded } = useHosts();
-  const hosts = React.useMemo<SshHostOption[]>(
-    () =>
-      pluginHosts.map((host) => ({
-        id: Number(host.id),
-        name: host.name,
-        syncId: host.syncId as string | null | undefined,
-        connectionType: host.connectionType as string | null | undefined,
-      })),
-    [pluginHosts],
-  );
-  const hostsRef = React.useRef(hosts);
-  hostsRef.current = hosts;
-  const [presets, setPresets] = React.useState<C2STunnelPreset[]>([]);
-  const [tunnelStatuses, setTunnelStatuses] = React.useState<
-    Record<string, TunnelStatus>
-  >({});
-  const [tunnelActions, setTunnelActions] = React.useState<
-    Record<string, boolean>
-  >({});
-  const [tunnelTests, setTunnelTests] = React.useState<Record<string, boolean>>(
-    {},
-  );
-  const previousTunnelStatusesRef = React.useRef<Record<string, TunnelStatus>>(
-    {},
-  );
-  const [selectedPresetId, setSelectedPresetId] = React.useState("");
-  const [presetName, setPresetName] = React.useState("");
-  const [openTunnels, setOpenTunnels] = React.useState<Set<number>>(new Set());
-  const isElectron =
-    typeof window !== "undefined" && window.electronAPI?.isElectron === true;
-  const handleC2SRemoteAuthError = React.useCallback(
-    (result: { code?: string; error?: string }) => {
-      const error = result.error || "";
-      const isExpired =
-        result.code === "REMOTE_SESSION_EXPIRED" ||
-        result.code === "SESSION_EXPIRED" ||
-        error === "Termix session expired. Please log in again." ||
-        error ===
-          "Remote Termix session expired. Reconnect Remote Sync and try again." ||
-        error === "Authentication required";
-
-      if (!isExpired) return false;
-
-      toast.warning(t("tunnels.remoteSessionExpired"));
-      return true;
-    },
-    [t],
-  );
-
-  const sshHosts = React.useMemo(
-    () =>
-      hosts.filter(
-        (host) => host.id && (host.connectionType || "ssh") === "ssh",
-      ),
-    [hosts],
-  );
-
-  const selectedPreset = React.useMemo(
-    () =>
-      presets.find((preset) => String(preset.id) === selectedPresetId) || null,
-    [presets, selectedPresetId],
-  );
-  const selectedMatchesCurrent = React.useMemo(() => {
-    return selectedPreset
-      ? sameConfig(
-          selectedPreset.config.map(normalizeClientTunnel),
-          localConfig.map(stripClientTunnelDiagnostics),
-        )
-      : false;
-  }, [localConfig, selectedPreset]);
-  const hasUnsavedLocalChanges = React.useMemo(
-    () => !sameConfig(savedLocalConfig, localConfig),
-    [savedLocalConfig, localConfig],
-  );
-  const hasPresets = presets.length > 0;
-
-  function toggleTunnel(index: number) {
-    setOpenTunnels((current) => {
-      const next = new Set(current);
-      if (next.has(index)) {
-        next.delete(index);
-      } else {
-        next.add(index);
-      }
-      return next;
-    });
-  }
-
-  const getTunnelName = clientTunnelName;
-
-  const getEndpointName = React.useCallback(
-    (tunnel: ClientTunnel) => {
-      const host = sshHosts.find((item) => item.id === tunnel.sourceHostId);
-      return (
-        tunnel.sourceHostName ||
-        host?.name ||
-        tunnel.endpointHost ||
-        t("tunnels.endpointSshHost")
-      );
-    },
-    [sshHosts, t],
-  );
-
-  const getTunnelDisplayName = React.useCallback(
-    (tunnel: ClientTunnel, index: number) => {
-      if (tunnel.displayName?.trim()) return tunnel.displayName.trim();
-      const mode = getTunnelMode(tunnel);
-      const endpointName = getEndpointName(tunnel);
-      if (mode === "remote") {
-        return t("tunnels.autoNameClientRemote", {
-          endpoint: endpointName,
-          remotePort: tunnel.sourcePort,
-          localPort: tunnel.endpointPort,
-        });
-      }
-      if (mode === "dynamic") {
-        return t("tunnels.autoNameClientDynamic", {
-          localPort: tunnel.sourcePort,
-          endpoint: endpointName,
-        });
-      }
-      return t("tunnels.autoNameClientLocal", {
-        localPort: tunnel.sourcePort,
-        endpoint: endpointName,
-        remotePort: tunnel.endpointPort,
-        index: index + 1,
-      });
-    },
-    [getEndpointName, t],
-  );
-
-  const withSourceHostIdentity = React.useCallback(
-    (tunnel: ClientTunnel): ClientTunnel => {
-      const normalized = normalizeClientTunnel(tunnel);
-      const host = sshHosts.find(
-        (item) =>
-          item.id === normalized.sourceHostId ||
-          (normalized.sourceHostSyncId &&
-            item.syncId === normalized.sourceHostSyncId),
-      );
-      if (!host) return normalized;
-      return normalizeClientTunnel({
-        ...normalized,
-        sourceHostId: host.id,
-        sourceHostSyncId: host.syncId || normalized.sourceHostSyncId,
-        sourceHostName: host.name || normalized.sourceHostName,
-        endpointHost: host.name || normalized.endpointHost,
-      });
-    },
-    [sshHosts],
-  );
-
-  const getLocalAddressPlaceholder = React.useCallback(
-    (mode: string) => {
-      if (mode === "remote") return t("placeholders.localTargetHost");
-      if (mode === "dynamic") return t("placeholders.socksListenerHost");
-      return t("placeholders.localListenerHost");
-    },
-    [t],
-  );
-
-  const getRemoteAddressPlaceholder = React.useCallback(
-    (mode: string) => {
-      if (mode === "remote") return t("placeholders.remoteBindHost");
-      return t("placeholders.remoteTargetHost");
-    },
-    [t],
-  );
-
-  const getRemoteAddressLabel = React.useCallback(
-    (mode: string) => {
-      if (mode === "remote") return t("tunnels.remoteBindAddress");
-      return t("tunnels.destinationAddress");
-    },
-    [t],
-  );
-
-  const getTunnelSummary = React.useCallback(
-    (tunnel: ClientTunnel) => {
-      const mode = getTunnelMode(tunnel);
-      const localAddress = getEffectiveAddress(tunnel.localAddress);
-      const remoteAddress = getEffectiveAddress(tunnel.remoteAddress);
-      const endpointName = getEndpointName(tunnel);
-      if (mode === "remote") {
-        return t("tunnels.summaryClientRemote", {
-          endpoint: endpointName,
-          remoteHost: remoteAddress,
-          remotePort: tunnel.sourcePort,
-          localHost: localAddress,
-          localPort: tunnel.endpointPort,
-        });
-      }
-      if (mode === "dynamic") {
-        return t("tunnels.summaryClientDynamic", {
-          localHost: localAddress,
-          localPort: tunnel.sourcePort,
-          endpoint: endpointName,
-        });
-      }
-      return t("tunnels.summaryClientLocal", {
-        localHost: localAddress,
-        localPort: tunnel.sourcePort,
-        endpoint: endpointName,
-        remoteHost: remoteAddress,
-        remotePort: tunnel.endpointPort,
-      });
-    },
-    [getEndpointName, t],
-  );
-
-  const refreshPresets = React.useCallback(async () => {
-    const nextPresets = await getC2STunnelPresets();
-    setPresets(sortPresets(nextPresets));
-  }, []);
-
-  const refreshLocalConfig = React.useCallback(async () => {
-    if (!isElectron) return;
-    const [config, defaultName] = await Promise.all([
-      window.electronAPI.getC2STunnelConfig(),
-      window.electronAPI.getC2STunnelPresetDefaultName(),
-    ]);
-    const nextHosts = hostsRef.current;
-    const normalizedConfig = Array.isArray(config)
-      ? (config as TunnelConnection[])
-          .filter((tunnel) => tunnel.scope === "c2s")
-          .map((tunnel) => {
-            const normalized = normalizeClientTunnel(tunnel);
-            const host = nextHosts.find((item) =>
-              normalized.sourceHostSyncId
-                ? item.syncId === normalized.sourceHostSyncId
-                : item.id === normalized.sourceHostId,
-            );
-            if (!host) return normalized;
-            return normalizeClientTunnel({
-              ...normalized,
-              sourceHostId: host.id,
-              sourceHostSyncId: host.syncId || normalized.sourceHostSyncId,
-              sourceHostName: host.name || normalized.sourceHostName,
-              endpointHost: host.name || normalized.endpointHost,
-            });
-          })
-      : [];
-    setLocalConfig(normalizedConfig);
-    setSavedLocalConfig(normalizedConfig);
-    setPresetName((current) => current || defaultName);
-  }, [isElectron]);
-
-  React.useEffect(() => {
-    if (!isElectron || !hostsLoaded) return;
-    Promise.all([refreshLocalConfig(), refreshPresets()]).catch(() => {
-      setPresets([]);
-    });
-  }, [isElectron, hostsLoaded, refreshLocalConfig, refreshPresets]);
-
-  React.useEffect(() => {
-    if (!isElectron) return;
-    const refreshStatuses = async () => {
-      const statuses = await window.electronAPI.getC2STunnelStatuses();
-      setTunnelStatuses(statuses as Record<string, TunnelStatus>);
-    };
-    refreshStatuses().catch(() => {});
-    const unsubscribe = window.electronAPI.onC2STunnelStatuses?.((statuses) => {
-      setTunnelStatuses(statuses as Record<string, TunnelStatus>);
-    });
-    return () => unsubscribe?.();
-  }, [isElectron]);
-
-  React.useEffect(() => {
-    const previousStatuses = previousTunnelStatusesRef.current;
-    for (const [tunnelName, status] of Object.entries(tunnelStatuses)) {
-      const previous = previousStatuses[tunnelName];
-      const statusChanged =
-        previous?.status !== status.status ||
-        previous?.reason !== status.reason ||
-        previous?.retryCount !== status.retryCount;
-      if (!statusChanged) continue;
-      const statusValue = status.status?.toUpperCase();
-      const hasFailureDetail =
-        statusValue === "ERROR" ||
-        statusValue === "FAILED" ||
-        (Boolean(status.errorType) &&
-          Boolean(status.reason) &&
-          previous?.reason !== status.reason);
-      if (hasFailureDetail) {
-        const message = status.reason || t("tunnels.manualControlError");
-        if (handleC2SRemoteAuthError({ error: message })) {
-          continue;
-        }
-        toast.error(message, { id: `client-tunnel-error-${tunnelName}` });
-      }
-    }
-    previousTunnelStatusesRef.current = tunnelStatuses;
-  }, [handleC2SRemoteAuthError, t, tunnelStatuses]);
-
-  const validateLocalConfig = (config: ClientTunnel[]) => {
-    const autoStartListeners = new Set<string>();
-    for (const tunnel of config) {
-      const localAddress = getEffectiveAddress(tunnel.localAddress);
-      const remoteAddress = getEffectiveAddress(tunnel.remoteAddress);
-      const mode = getTunnelMode(tunnel);
-      if (!isValidIPv4(localAddress)) {
-        return mode === "remote"
-          ? t("tunnels.invalidLocalTargetIp")
-          : t("tunnels.invalidBindIp");
-      }
-      if (mode !== "dynamic" && !remoteAddress) {
-        return t("tunnels.invalidRemoteAddress");
-      }
-      if (!isValidPort(tunnel.sourcePort)) {
-        return mode === "remote"
-          ? t("tunnels.invalidRemotePort")
-          : t("tunnels.invalidLocalPort");
-      }
-      if (mode !== "dynamic" && !isValidPort(tunnel.endpointPort)) {
-        return mode === "remote"
-          ? t("tunnels.invalidLocalTargetPort")
-          : t("tunnels.invalidEndpointPort");
-      }
-      if (!tunnel.sourceHostId) {
-        return t("tunnels.endpointSshHostRequired");
-      }
-      if (tunnel.autoStart) {
-        const listenerKey =
-          mode === "remote"
-            ? `${tunnel.sourceHostId}:${remoteAddress}:${tunnel.sourcePort}`
-            : `${localAddress}:${tunnel.sourcePort}`;
-        if (autoStartListeners.has(listenerKey)) {
-          return t("tunnels.duplicateAutoStartBind", {
-            bind:
-              mode === "remote"
-                ? `${tunnel.sourceHostName || tunnel.sourceHostId}:${remoteAddress}:${tunnel.sourcePort}`
-                : listenerKey,
-          });
-        }
-        autoStartListeners.add(listenerKey);
-      }
-    }
-    return null;
-  };
-
-  const saveLocalConfig = async (config: ClientTunnel[]) => {
-    const normalizedConfig = config.map((tunnel) =>
-      withSourceHostIdentity(tunnel),
-    );
-    const validationError = validateLocalConfig(normalizedConfig);
-    if (validationError) throw new Error(validationError);
-    const result =
-      await window.electronAPI.saveC2STunnelConfig(normalizedConfig);
-    if (!result.success)
-      throw new Error(result.error || t("tunnels.localSaveError"));
-    setLocalConfig(normalizedConfig);
-    setSavedLocalConfig(normalizedConfig);
-  };
-
-  const updateTunnel = (
-    index: number,
-    updates: Partial<ClientTunnel>,
-  ): void => {
-    setLocalConfig((current) =>
-      current.map((tunnel, tunnelIndex) =>
-        tunnelIndex === index
-          ? normalizeClientTunnel({ ...tunnel, ...updates })
-          : tunnel,
-      ),
-    );
-  };
-
-  const handleEndpointChange = (index: number, hostId: string) => {
-    const host = sshHosts.find((item) => String(item.id) === hostId);
-    if (!host) return;
-    updateTunnel(index, {
-      sourceHostId: host.id,
-      sourceHostSyncId: host.syncId || undefined,
-      sourceHostName: host.name,
-      endpointHost: host.name,
-      endpointPort: 22,
-    });
-  };
-
-  const handleSaveLocal = async () => {
-    try {
-      await saveLocalConfig(localConfig);
-      toast.success(t("tunnels.localSaved"));
-    } catch (error) {
-      toast.error(getErrorMessage(error, t("tunnels.localSaveError")));
-    }
-  };
-
-  const setTunnelMetadata = (
-    index: number,
-    updates: Partial<ClientTunnel>,
-  ): void => {
-    setLocalConfig((current) =>
-      current.map((tunnel, tunnelIndex) =>
-        tunnelIndex === index
-          ? normalizeClientTunnel({ ...tunnel, ...updates })
-          : tunnel,
-      ),
-    );
-  };
-
-  const handleTunnelTest = async (tunnel: ClientTunnel, index: number) => {
-    const tunnelName = getTunnelName(tunnel, index);
-    const normalizedTunnel = {
-      ...withSourceHostIdentity(tunnel),
-      name: tunnelName,
-    };
-    const validationError = validateLocalConfig([normalizedTunnel]);
-    if (validationError) {
-      toast.error(validationError);
-      setTunnelMetadata(index, { lastError: validationError });
-      return;
-    }
-    setTunnelTests((current) => ({ ...current, [tunnelName]: true }));
-    try {
-      const result = await window.electronAPI.testC2STunnel(
-        normalizedTunnel,
-        index,
-      );
-      if (!result.success && handleC2SRemoteAuthError(result)) {
-        return;
-      }
-      if (!result.success)
-        throw new Error(result.error || t("tunnels.tunnelTestFailed"));
-      setTunnelMetadata(index, {
-        lastTestedAt: new Date().toISOString(),
-        lastError: "",
-      });
-      toast.success(t("tunnels.tunnelTestSucceeded"));
-    } catch (error) {
-      const message = getErrorMessage(error, t("tunnels.tunnelTestFailed"));
-      setTunnelMetadata(index, { lastError: message });
-      toast.error(message);
-    } finally {
-      setTunnelTests((current) => ({ ...current, [tunnelName]: false }));
-    }
-  };
-
-  const handleTunnelStart = async (tunnel: ClientTunnel, index: number) => {
-    const tunnelName = getTunnelName(tunnel, index);
-    const normalizedTunnel = {
-      ...withSourceHostIdentity(tunnel),
-      name: tunnelName,
-    };
-    const validationError = validateLocalConfig([normalizedTunnel]);
-    if (validationError) {
-      toast.error(validationError);
-      setTunnelMetadata(index, { lastError: validationError });
-      return;
-    }
-    setTunnelActions((current) => ({ ...current, [tunnelName]: true }));
-    try {
-      const result = await window.electronAPI.startC2STunnel(
-        normalizedTunnel,
-        index,
-      );
-      if (!result.success && handleC2SRemoteAuthError(result)) {
-        return;
-      }
-      if (!result.success)
-        throw new Error(result.error || t("tunnels.manualControlError"));
-      const statuses = await window.electronAPI.getC2STunnelStatuses();
-      setTunnelStatuses(statuses as Record<string, TunnelStatus>);
-      setTunnelMetadata(index, {
-        lastStartedAt: new Date().toISOString(),
-        lastError: "",
-      });
-      toast.success(t("tunnels.clientTunnelStarted"));
-    } catch (error) {
-      const message =
-        error instanceof Error
-          ? error.message
-          : t("tunnels.manualControlError");
-      setTunnelMetadata(index, { lastError: message });
-      toast.error(message);
-    } finally {
-      setTunnelActions((current) => ({ ...current, [tunnelName]: false }));
-    }
-  };
-
-  const handleTunnelStop = async (tunnel: ClientTunnel, index: number) => {
-    const tunnelName = getTunnelName(tunnel, index);
-    setTunnelActions((current) => ({ ...current, [tunnelName]: true }));
-    try {
-      const result = await window.electronAPI.stopC2STunnel(tunnelName);
-      if (!result.success)
-        throw new Error(result.error || t("tunnels.manualControlError"));
-      const statuses = await window.electronAPI.getC2STunnelStatuses();
-      setTunnelStatuses(statuses as Record<string, TunnelStatus>);
-      toast.success(t("tunnels.clientTunnelStopped"));
-    } catch (error) {
-      toast.error(
-        error instanceof Error
-          ? error.message
-          : t("tunnels.manualControlError"),
-      );
-    } finally {
-      setTunnelActions((current) => ({ ...current, [tunnelName]: false }));
-    }
-  };
-
-  const handleSavePreset = async () => {
-    if (!presetName.trim()) return;
-    try {
-      const normalizedConfig = localConfig.map((tunnel) =>
-        withSourceHostIdentity(tunnel),
-      );
-      await saveLocalConfig(normalizedConfig);
-      await createC2STunnelPreset({
-        name: presetName.trim(),
-        config: normalizedConfig.map(stripClientTunnelDiagnostics),
-      });
-      await refreshPresets();
-      toast.success(t("profile.c2sPresetSaved"));
-    } catch (error) {
-      toast.error(
-        apiErrorMessage(
-          error,
-          getErrorMessage(error, t("tunnels.localSaveError")),
-        ),
-      );
-    }
-  };
-
-  const handleLoadPreset = async () => {
-    if (!selectedPreset || selectedMatchesCurrent) return;
-    try {
-      await saveLocalConfig(selectedPreset.config.map(normalizeClientTunnel));
-      toast.success(t("profile.c2sPresetLoaded"));
-    } catch (error) {
-      toast.error(
-        error instanceof Error
-          ? error.message
-          : t("profile.c2sPresetLoadError"),
-      );
-    }
-  };
-
-  const handleRenamePreset = async () => {
-    if (!selectedPreset || !presetName.trim()) return;
-    try {
-      await updateC2STunnelPreset(selectedPreset.id, {
-        name: presetName.trim(),
-      });
-      await refreshPresets();
-      toast.success(t("profile.c2sPresetRenamed"));
-    } catch (error) {
-      toast.error(apiErrorMessage(error, t("profile.c2sPresetRenameError")));
-    }
-  };
-
-  const handleDeletePreset = async () => {
-    if (!selectedPreset) return;
-    try {
-      await deleteC2STunnelPreset(selectedPreset.id);
-      setSelectedPresetId("");
-      await refreshPresets();
-      toast.success(t("profile.c2sPresetDeleted"));
-    } catch (error) {
-      toast.error(apiErrorMessage(error, t("profile.c2sPresetDeleteError")));
-    }
-  };
-
-  if (!isElectron) {
-    return (
-      <div className="pt-2">
-        <p className="text-xs text-muted-foreground">
-          {t("profile.c2sTunnelPresetsUnavailable")}
-        </p>
-      </div>
-    );
-  }
-
-  return (
-    <div className="flex flex-col gap-0 pt-2">
-      {/* Tunnel list header */}
-      <div className="flex items-center justify-between mb-2">
-        <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-          {t("tunnels.clientTunnels")}
-        </span>
-        <div className="flex items-center gap-1.5">
-          {hasUnsavedLocalChanges && (
-            <span className="text-[10px] text-muted-foreground">
-              {t("common.unsavedChanges")}
-            </span>
-          )}
-          <Button
-            variant="ghost"
-            size="icon"
-            className="size-6 text-accent-brand hover:bg-accent-brand/10"
-            onClick={() => {
-              setOpenTunnels(
-                (current) => new Set([...current, localConfig.length]),
-              );
-              setLocalConfig((current) => [...current, createClientTunnel()]);
-            }}
-          >
-            <Plus className="size-3" />
-          </Button>
-        </div>
-      </div>
-
-      {/* Tunnel items */}
-      <div className="flex flex-col gap-1.5">
-        {localConfig.length === 0 ? (
-          <div className="py-6 text-center text-xs text-muted-foreground">
-            {t("tunnels.noClientTunnels")}
-          </div>
-        ) : (
-          localConfig.map((tunnel, index) => {
-            const mode = getTunnelMode(tunnel);
-            const tunnelName = getTunnelName(tunnel, index);
-            const tunnelStatus = tunnelStatuses[tunnelName];
-            const isTunnelActionLoading = Boolean(tunnelActions[tunnelName]);
-            const isTunnelTestLoading = Boolean(tunnelTests[tunnelName]);
-            const startDisabled = !tunnel.sourceHostId;
-            const { sourcePortLabel, endpointPortLabel } = getTunnelPortLabels(
-              "client",
-              mode,
-              t,
-            );
-            const tunnelSummary = getTunnelSummary(tunnel);
-            const modeDescription = getTunnelModeDescription(
-              "client",
-              mode,
-              {
-                sourcePort: tunnel.sourcePort,
-                endpointPort: tunnel.endpointPort,
-              },
-              t,
-            );
-            const statusError =
-              tunnelStatus?.reason ||
-              (tunnelStatus?.errorType ? String(tunnelStatus.errorType) : "");
-            const lastError = statusError || tunnel.lastError || "";
-            const lastStarted = formatDateTime(tunnel.lastStartedAt);
-            const lastTested = formatDateTime(tunnel.lastTestedAt);
-            const isOpen = openTunnels.has(index);
-
-            const kind = getStatusKind(tunnelStatus);
-            const isDisconnected = kind === "disconnected";
-            const statusText =
-              kind === "connected"
-                ? t("tunnels.connected")
-                : kind === "connecting"
-                  ? t("tunnels.connecting")
-                  : kind === "error"
-                    ? t("tunnels.error")
-                    : t("tunnels.disconnected");
-            const statusTitle = getStatusTitle(tunnelStatus, statusText, t);
-            const statusClass =
-              kind === "connected"
-                ? "text-accent-brand border-accent-brand/40 bg-accent-brand/10"
-                : kind === "connecting"
-                  ? "text-blue-400 border-blue-400/40 bg-blue-400/10"
-                  : kind === "error"
-                    ? "text-destructive border-destructive/40 bg-destructive/10"
-                    : "text-muted-foreground border-border bg-muted/30";
-
-            return (
-              <div key={index} className="border border-border bg-muted/10">
-                {/* Always-visible header */}
-                <button
-                  className="flex items-center gap-1.5 w-full px-2 py-1.5 text-left hover:bg-muted/30 transition-colors"
-                  onClick={() => toggleTunnel(index)}
-                >
-                  <ChevronDown
-                    className={`size-3 text-muted-foreground shrink-0 transition-transform duration-150 ${isOpen ? "rotate-180" : ""}`}
-                  />
-                  <span className="text-xs font-medium flex-1 min-w-0 truncate">
-                    {getTunnelDisplayName(tunnel, index)}
-                  </span>
-                  <span
-                    className={`text-[9px] font-bold px-1 py-px border uppercase shrink-0 ${statusClass}`}
-                    title={statusTitle}
-                  >
-                    {statusText}
-                  </span>
-                </button>
-
-                {/* Expanded body */}
-                {isOpen && (
-                  <div className="border-t border-border px-2 pb-2 flex flex-col gap-2 pt-2">
-                    {/* Action buttons */}
-                    <div className="flex items-center gap-1 flex-wrap">
-                      <Button
-                        variant="outline"
-                        size="sm"
-                        className="h-6 px-2 text-[10px] font-bold uppercase tracking-widest border-border text-muted-foreground hover:text-foreground"
-                        disabled={startDisabled || isTunnelTestLoading}
-                        title={
-                          startDisabled
-                            ? t("tunnels.endpointSshHostRequired")
-                            : undefined
-                        }
-                        onClick={() => handleTunnelTest(tunnel, index)}
-                      >
-                        <Activity
-                          className={`size-3 ${isTunnelTestLoading ? "animate-pulse" : ""}`}
-                        />
-                        {t("tunnels.test")}
-                      </Button>
-
-                      {isTunnelActionLoading ? (
-                        <Button
-                          variant="outline"
-                          size="sm"
-                          className="h-6 px-2 text-[10px] font-bold uppercase tracking-widest text-muted-foreground border-border"
-                          disabled
-                        >
-                          <Loader2 className="size-3 animate-spin" />
-                          {isDisconnected
-                            ? t("tunnels.start")
-                            : t("tunnels.stop")}
-                        </Button>
-                      ) : isDisconnected ? (
-                        <Button
-                          variant="outline"
-                          size="sm"
-                          className="h-6 px-2 text-[10px] font-bold uppercase tracking-widest border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-                          disabled={startDisabled}
-                          title={
-                            startDisabled
-                              ? t("tunnels.endpointSshHostRequired")
-                              : undefined
-                          }
-                          onClick={() => handleTunnelStart(tunnel, index)}
-                        >
-                          <Play className="size-3" />
-                          {t("tunnels.start")}
-                        </Button>
-                      ) : (
-                        <Button
-                          variant="outline"
-                          size="sm"
-                          className="h-6 px-2 text-[10px] font-bold uppercase tracking-widest border-destructive/40 text-destructive hover:bg-destructive/10 hover:text-destructive"
-                          onClick={() => handleTunnelStop(tunnel, index)}
-                        >
-                          <Square className="size-3" />
-                          {t("tunnels.stop")}
-                        </Button>
-                      )}
-
-                      <Button
-                        variant="ghost"
-                        size="icon"
-                        className="size-6 text-muted-foreground hover:text-destructive ml-auto"
-                        onClick={() => {
-                          setLocalConfig((current) =>
-                            current.filter((_, idx) => idx !== index),
-                          );
-                          setOpenTunnels((current) => {
-                            const next = new Set<number>();
-                            for (const idx of current) {
-                              if (idx < index) next.add(idx);
-                              else if (idx > index) next.add(idx - 1);
-                            }
-                            return next;
-                          });
-                        }}
-                      >
-                        <Trash2 className="size-3" />
-                      </Button>
-                    </div>
-
-                    {/* Display name */}
-                    <div className="flex flex-col gap-1">
-                      <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                        {t("tunnels.tunnelName")}
-                      </label>
-                      <Input
-                        value={tunnel.displayName || ""}
-                        onChange={(e) =>
-                          updateTunnel(index, { displayName: e.target.value })
-                        }
-                        placeholder={getTunnelDisplayName(tunnel, index)}
-                        className="h-7 text-xs bg-muted/50 border-border rounded-none"
-                      />
-                    </div>
-
-                    {/* Mode */}
-                    <div className="flex flex-col gap-1">
-                      <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                        {t("tunnels.type")}
-                      </label>
-                      <Select2
-                        value={mode}
-                        onChange={(e) =>
-                          updateTunnel(index, {
-                            mode: e.target.value as TunnelMode,
-                            tunnelType: getTunnelTypeForMode(
-                              e.target.value as TunnelMode,
-                            ),
-                          })
-                        }
-                        className="px-2 py-1 text-xs bg-background border border-border text-foreground outline-none focus:ring-1 focus:ring-ring w-full h-7"
-                      >
-                        <option value="local">{t("tunnels.typeLocal")}</option>
-                        <option value="remote">
-                          {t("tunnels.typeRemote")}
-                        </option>
-                        <option value="dynamic">
-                          {t("tunnels.typeDynamic")}
-                        </option>
-                      </Select2>
-                      <span className="text-[10px] text-muted-foreground">
-                        {modeDescription}
-                      </span>
-                    </div>
-
-                    {/* Local side */}
-                    <div className="grid grid-cols-2 gap-2">
-                      <div className="flex flex-col gap-1">
-                        <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                          {sourcePortLabel}
-                        </label>
-                        <Input
-                          type="number"
-                          value={tunnel.sourcePort}
-                          onChange={(e) =>
-                            updateTunnel(index, {
-                              sourcePort: Number(e.target.value),
-                            })
-                          }
-                          placeholder={t("placeholders.defaultPort")}
-                          className="h-7 text-xs bg-muted/50 border-border rounded-none"
-                        />
-                      </div>
-                      <div className="flex flex-col gap-1">
-                        <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                          {t("tunnels.localAddress")}
-                        </label>
-                        <Input
-                          value={tunnel.localAddress}
-                          onChange={(e) =>
-                            updateTunnel(index, {
-                              localAddress: e.target.value.trim(),
-                              bindHost: e.target.value.trim(),
-                            })
-                          }
-                          placeholder={getLocalAddressPlaceholder(mode)}
-                          className="h-7 text-xs bg-muted/50 border-border rounded-none"
-                        />
-                      </div>
-                    </div>
-
-                    {/* Intermediate host */}
-                    <div className="flex flex-col gap-1">
-                      <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                        {t("tunnels.intermediateHost")}
-                      </label>
-                      <Select2
-                        value={
-                          tunnel.sourceHostId ? String(tunnel.sourceHostId) : ""
-                        }
-                        onChange={(e) =>
-                          handleEndpointChange(index, e.target.value)
-                        }
-                        className="px-2 py-1 text-xs bg-background border border-border text-foreground outline-none focus:ring-1 focus:ring-ring w-full h-7"
-                      >
-                        <option value="">
-                          {t("tunnels.endpointSshHostPlaceholder")}
-                        </option>
-                        {sshHosts.map((host) => (
-                          <option key={host.id} value={String(host.id)}>
-                            {host.name}
-                          </option>
-                        ))}
-                      </Select2>
-                    </div>
-
-                    {/* Destination side */}
-                    {mode !== "dynamic" && (
-                      <div className="grid grid-cols-2 gap-2">
-                        <div className="flex flex-col gap-1">
-                          <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                            {getRemoteAddressLabel(mode)}
-                          </label>
-                          <Input
-                            value={tunnel.remoteAddress}
-                            onChange={(e) =>
-                              updateTunnel(index, {
-                                remoteAddress: e.target.value.trim(),
-                                targetHost: e.target.value.trim(),
-                              })
-                            }
-                            placeholder={getRemoteAddressPlaceholder(mode)}
-                            className="h-7 text-xs bg-muted/50 border-border rounded-none"
-                          />
-                        </div>
-                        <div className="flex flex-col gap-1">
-                          <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                            {endpointPortLabel}
-                          </label>
-                          <Input
-                            type="number"
-                            value={tunnel.endpointPort}
-                            onChange={(e) =>
-                              updateTunnel(index, {
-                                endpointPort: Number(e.target.value),
-                              })
-                            }
-                            placeholder={t("placeholders.defaultEndpointPort")}
-                            className="h-7 text-xs bg-muted/50 border-border rounded-none"
-                          />
-                        </div>
-                      </div>
-                    )}
-
-                    {/* Route summary */}
-                    <div
-                      className="border border-border bg-muted/30 px-2 py-1 text-[10px] font-mono text-muted-foreground"
-                      title={tunnelSummary}
-                    >
-                      <span className="font-bold text-foreground">
-                        {t("tunnels.route")}
-                      </span>{" "}
-                      {tunnelSummary}
-                    </div>
-
-                    {mode === "remote" && (
-                      <p className="text-[10px] text-muted-foreground">
-                        {t("tunnels.clientRemoteServerNote")}
-                      </p>
-                    )}
-
-                    {/* Last activity */}
-                    {(lastError || lastStarted || lastTested) && (
-                      <div className="flex flex-col gap-0.5 text-[10px] text-muted-foreground">
-                        {lastStarted && (
-                          <span>
-                            {t("tunnels.lastStarted")}: {lastStarted}
-                          </span>
-                        )}
-                        {lastTested && (
-                          <span>
-                            {t("tunnels.lastTested")}: {lastTested}
-                          </span>
-                        )}
-                        {lastError && (
-                          <span
-                            className="text-destructive truncate"
-                            title={lastError}
-                          >
-                            {t("tunnels.lastError")}: {lastError}
-                          </span>
-                        )}
-                      </div>
-                    )}
-
-                    {/* Retries */}
-                    <div className="grid grid-cols-2 gap-2">
-                      <div className="flex flex-col gap-1">
-                        <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                          {t("tunnels.maxRetries")}
-                        </label>
-                        <Input
-                          type="number"
-                          value={tunnel.maxRetries}
-                          onChange={(e) =>
-                            updateTunnel(index, {
-                              maxRetries: Number(e.target.value),
-                            })
-                          }
-                          placeholder={t("placeholders.maxRetries")}
-                          className="h-7 text-xs bg-muted/50 border-border rounded-none"
-                        />
-                      </div>
-                      <div className="flex flex-col gap-1">
-                        <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                          {t("tunnels.retryInterval")}
-                        </label>
-                        <Input
-                          type="number"
-                          value={tunnel.retryInterval}
-                          onChange={(e) =>
-                            updateTunnel(index, {
-                              retryInterval: Number(e.target.value),
-                            })
-                          }
-                          placeholder={t("placeholders.retryInterval")}
-                          className="h-7 text-xs bg-muted/50 border-border rounded-none"
-                        />
-                      </div>
-                    </div>
-
-                    {/* Auto-start */}
-                    <div className="flex items-center justify-between border border-border bg-muted/20 px-2 py-1.5">
-                      <div className="flex flex-col gap-0.5">
-                        <span className="text-xs font-medium">
-                          {t("tunnels.autoStart")}
-                        </span>
-                        <span className="text-[10px] text-muted-foreground">
-                          {t(
-                            tunnel.autoStart
-                              ? "tunnels.clientAutoStartDesc"
-                              : "tunnels.clientManualStartDesc",
-                          )}
-                        </span>
-                      </div>
-                      <FakeSwitch
-                        checked={tunnel.autoStart}
-                        onChange={(checked) =>
-                          updateTunnel(index, { autoStart: checked })
-                        }
-                      />
-                    </div>
-                  </div>
-                )}
-              </div>
-            );
-          })
-        )}
-      </div>
-
-      {/* Save local config button */}
-      <Button
-        variant="outline"
-        size="sm"
-        className={`mt-2 w-full h-7 text-[10px] font-bold uppercase tracking-widest rounded-none ${
-          hasUnsavedLocalChanges
-            ? "border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10"
-            : "border-border text-muted-foreground"
-        }`}
-        onClick={handleSaveLocal}
-      >
-        <Save className="size-3" />
-        {t("common.save")}
-      </Button>
-
-      {/* Presets section */}
-      <div className="border-t border-border pt-3 mt-3 flex flex-col gap-2">
-        <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-          {t("profile.c2sTunnelPresets")}
-        </span>
-
-        <div className="flex flex-col gap-1">
-          <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-            {t("profile.c2sPresetName")}
-          </label>
-          <div className="flex gap-1.5">
-            <Input
-              value={presetName}
-              onChange={(e) => setPresetName(e.target.value)}
-              placeholder={t("profile.c2sPresetNamePlaceholder")}
-              className="h-7 text-xs bg-muted/50 border-border rounded-none flex-1 min-w-0"
-            />
-            <Button
-              variant="outline"
-              size="sm"
-              className="h-7 shrink-0 text-[10px] font-bold uppercase tracking-widest rounded-none border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10"
-              disabled={!presetName.trim()}
-              onClick={handleSavePreset}
-            >
-              <Save className="size-3" />
-              {t("common.save")}
-            </Button>
-          </div>
-          <span className="text-[10px] text-muted-foreground">
-            {t("profile.c2sCurrentLocalConfig", { count: localConfig.length })}
-          </span>
-        </div>
-
-        <div className="flex flex-col gap-1">
-          <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-            {t("profile.c2sPresetToLoad")}
-          </label>
-          <Select2
-            value={selectedPresetId}
-            disabled={!hasPresets}
-            onChange={(e) => {
-              setSelectedPresetId(e.target.value);
-              const preset = presets.find(
-                (p) => String(p.id) === e.target.value,
-              );
-              if (preset) setPresetName(preset.name);
-            }}
-            className="px-2 py-1 text-xs bg-background border border-border text-foreground outline-none focus:ring-1 focus:ring-ring w-full h-7 disabled:opacity-50 disabled:cursor-not-allowed"
-          >
-            <option value="">
-              {hasPresets
-                ? t("profile.c2sNoPresetSelected")
-                : t("profile.c2sNoPresets")}
-            </option>
-            {presets.map((preset) => (
-              <option key={preset.id} value={String(preset.id)}>
-                {preset.name}
-              </option>
-            ))}
-          </Select2>
-          <span className="text-[10px] text-muted-foreground">
-            {t("profile.c2sPresetSyncNote")}
-          </span>
-        </div>
-
-        <div className="flex gap-1 flex-wrap">
-          <Button
-            variant="outline"
-            size="sm"
-            className="h-6 px-2 text-[10px] font-bold uppercase tracking-widest rounded-none border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10"
-            disabled={!selectedPreset || selectedMatchesCurrent}
-            onClick={handleLoadPreset}
-          >
-            <Download className="size-3" />
-            {t("profile.c2sLoadPreset")}
-          </Button>
-          <Button
-            variant="outline"
-            size="sm"
-            className="h-6 px-2 text-[10px] font-bold uppercase tracking-widest rounded-none border-border text-muted-foreground hover:text-foreground"
-            disabled={!selectedPreset || !presetName.trim()}
-            onClick={handleRenamePreset}
-          >
-            <Pencil className="size-3" />
-            {t("common.rename")}
-          </Button>
-          <Button
-            variant="ghost"
-            size="icon"
-            className="size-6 text-muted-foreground hover:text-destructive ml-auto"
-            disabled={!selectedPreset}
-            onClick={handleDeletePreset}
-          >
-            <Trash2 className="size-3" />
-          </Button>
-        </div>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/tunnels/src/frontend/HostTunnelsSection.tsx b/plugins/tunnels/src/frontend/HostTunnelsSection.tsx
deleted file mode 100644
index 4d8f5c2c8..000000000
--- a/plugins/tunnels/src/frontend/HostTunnelsSection.tsx
+++ /dev/null
@@ -1,372 +0,0 @@
-import { useEffect, useState } from "react";
-import { Network, Plus } from "lucide-react";
-import {
-  useHosts,
-  useToast,
-  useTranslation,
-  type HostEditorSectionProps,
-} from "@termix/plugin-sdk/frontend";
-import {
-  Button,
-  FakeSwitch,
-  Input,
-  SectionCard,
-  SettingRow,
-} from "@termix/plugin-sdk/ui";
-import type { TunnelConnection } from "../shared/types";
-import { serverTunnelName } from "../shared/tunnel-naming";
-import {
-  connectTunnel,
-  disconnectTunnel,
-  subscribeTunnelStatuses,
-  type TunnelStatusMap,
-} from "./api";
-import {
-  connectRequestFor,
-  parseConnections,
-  tunnelMode,
-} from "./host-tunnels";
-
-type PluginSettingsForm = Record<string, Record<string, unknown>>;
-
-function newTunnel(): TunnelConnection {
-  return {
-    scope: "s2s",
-    mode: "local",
-    sourcePort: 8080,
-    endpointHost: "",
-    endpointPort: 80,
-    bindHost: "127.0.0.1",
-    maxRetries: 3,
-    retryInterval: 10,
-    autoStart: false,
-  };
-}
-
-const MODE_DESCRIPTION_KEYS = {
-  local: "hosts.tunnelModeLocalDesc",
-  remote: "hosts.tunnelModeRemoteDesc",
-  dynamic: "hosts.tunnelModeDynamicDesc",
-} as const;
-
-const numberInputClass =
-  "h-7 text-xs [appearance:textfield] [&::-webkit-outer-spin-button]:appearance-none [&::-webkit-inner-spin-button]:appearance-none";
-
-/**
- * The host editor's Tunnels tab. Writes into the form's pluginSettings for
- * this plugin, which the editor saves through the plugin's host settings
- * route after the host itself.
- */
-export function HostTunnelsSection({
-  form,
-  updateForm,
-  host,
-}: HostEditorSectionProps) {
-  const { t } = useTranslation();
-  const toast = useToast();
-  const { hosts } = useHosts();
-  const [statuses, setStatuses] = useState<TunnelStatusMap>({});
-  const [busyIndex, setBusyIndex] = useState<number | null>(null);
-
-  useEffect(() => subscribeTunnelStatuses(setStatuses), []);
-
-  const settings = ((form?.pluginSettings as PluginSettingsForm | undefined)
-    ?.tunnels ?? {}) as Record<string, unknown>;
-  const enabled = settings.enableTunnel === true;
-  const tunnels = parseConnections(settings.tunnelConnections);
-
-  const setSettings = (patch: Record<string, unknown>) =>
-    updateForm((current) => {
-      const all = (current.pluginSettings ?? {}) as PluginSettingsForm;
-      return {
-        ...current,
-        pluginSettings: {
-          ...all,
-          tunnels: { ...(all.tunnels ?? {}), ...patch },
-        },
-      };
-    });
-
-  const setTunnels = (next: TunnelConnection[]) =>
-    setSettings({ tunnelConnections: next });
-
-  const updateTunnel = (index: number, patch: Partial<TunnelConnection>) =>
-    setTunnels(
-      tunnels.map((tunnel, i) =>
-        i === index ? { ...tunnel, ...patch } : tunnel,
-      ),
-    );
-
-  const sourceHost = host
-    ? {
-        id: host.id,
-        name: (form?.name as string) || host.name,
-        username: (form?.username as string) || host.username,
-        ip: (form?.ip as string) || host.ip,
-      }
-    : null;
-
-  const toggle = async (index: number, connected: boolean) => {
-    if (!sourceHost) return;
-    const tunnel = tunnels[index];
-    setBusyIndex(index);
-    try {
-      if (connected) {
-        await disconnectTunnel(serverTunnelName(sourceHost, index, tunnel));
-        toast.success(t("hosts.tunnelDisconnected"));
-      } else {
-        await connectTunnel(connectRequestFor(sourceHost, index, tunnel));
-        toast.success(t("hosts.tunnelConnecting"));
-      }
-    } catch {
-      toast.error(
-        connected
-          ? t("hosts.failedToDisconnectTunnel")
-          : t("hosts.failedToConnectTunnel"),
-      );
-    } finally {
-      setBusyIndex(null);
-    }
-  };
-
-  return (
-    <>
-      <SectionCard
-        title={t("hosts.tunnelSettings")}
-        icon={<Network className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <SettingRow
-            label={t("hosts.enableTunneling")}
-            description={
-              <>
-                {t("hosts.enableTunnelingDesc")}{" "}
-                <a
-                  href="https://docs.termix.site/features/networking/tunnels"
-                  target="_blank"
-                  rel="noreferrer"
-                  className="text-accent-brand hover:underline"
-                >
-                  {t("hosts.docsLink")}
-                </a>
-              </>
-            }
-          >
-            <FakeSwitch
-              checked={enabled}
-              onChange={(value) => setSettings({ enableTunnel: value })}
-            />
-          </SettingRow>
-          <div className="text-xs text-muted-foreground p-3 bg-muted/30 border border-border space-y-1">
-            <p>{t("hosts.tunnelRequirementsText")}</p>
-          </div>
-        </div>
-      </SectionCard>
-      <SectionCard
-        title={t("hosts.serverTunnelsSection")}
-        icon={<Network className="size-3.5" />}
-        action={
-          <Button
-            variant="outline"
-            size="sm"
-            className="h-6 text-[10px] px-2 border-accent-brand/40 text-accent-brand"
-            onClick={() => setTunnels([...tunnels, newTunnel()])}
-          >
-            <Plus className="size-3 mr-1" /> {t("hosts.addTunnelBtn")}
-          </Button>
-        }
-      >
-        <div className="flex flex-col gap-3 py-3">
-          {tunnels.length === 0 && (
-            <p className="text-[10px] text-muted-foreground/50 px-1">
-              {t("hosts.noTunnelsConfigured")}
-            </p>
-          )}
-          {tunnels.map((tunnel, i) => {
-            const mode = tunnelMode(tunnel);
-            const endpointInputId = `server-tunnel-endpoint-${host?.id ?? "new"}-${i}`;
-            const status = sourceHost
-              ? statuses[serverTunnelName(sourceHost, i, tunnel)]?.status
-              : undefined;
-            const isConnected = status === "connected";
-            return (
-              <div
-                key={i}
-                className="flex flex-col gap-3 p-3 border border-border bg-muted/20 relative group"
-              >
-                <div className="flex items-center justify-between mb-1">
-                  <div className="flex items-center gap-2">
-                    <span className="text-xs font-bold text-muted-foreground">
-                      {t("hosts.tunnelLabel", { number: i + 1 })}
-                    </span>
-                    <div
-                      className={`size-1.5 rounded-full shrink-0 ${
-                        isConnected
-                          ? "bg-accent-brand shadow-[0_0_4px_rgba(251,146,60,0.4)]"
-                          : status === "failed"
-                            ? "bg-red-400"
-                            : "bg-muted-foreground/25"
-                      }`}
-                      title={status ?? t("tunnels.disconnected")}
-                    />
-                    {sourceHost && (
-                      <Button
-                        variant="outline"
-                        size="sm"
-                        disabled={busyIndex === i}
-                        className={`h-6 text-[10px] px-2 ${isConnected ? "border-destructive/40 text-destructive hover:bg-destructive/10" : "border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10"}`}
-                        onClick={() => toggle(i, isConnected)}
-                      >
-                        {busyIndex === i
-                          ? "..."
-                          : isConnected
-                            ? t("hosts.disconnectBtn")
-                            : t("hosts.connectBtn")}
-                      </Button>
-                    )}
-                  </div>
-                  <Button
-                    variant="ghost"
-                    size="sm"
-                    className="h-6 text-[10px] px-2 text-destructive"
-                    onClick={() =>
-                      setTunnels(tunnels.filter((_, idx) => idx !== i))
-                    }
-                  >
-                    {t("common.delete")}
-                  </Button>
-                </div>
-                <div className="flex flex-col gap-1.5">
-                  <label className="text-[10px] font-bold text-muted-foreground">
-                    {t("hosts.tunnelType")}
-                  </label>
-                  <div className="flex gap-2">
-                    {(["remote", "local", "dynamic"] as const).map((m) => (
-                      <button
-                        key={m}
-                        onClick={() => updateTunnel(i, { mode: m })}
-                        className={`px-3 py-1.5 text-[10px] font-bold uppercase tracking-widest border transition-colors ${mode === m ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand" : "border-border text-muted-foreground hover:text-foreground"}`}
-                      >
-                        {m}
-                      </button>
-                    ))}
-                  </div>
-                  <p className="text-[10px] text-muted-foreground/70 mt-0.5">
-                    {t(MODE_DESCRIPTION_KEYS[mode])}
-                  </p>
-                </div>
-                <div className="grid grid-cols-1 md:grid-cols-2 gap-3">
-                  {mode !== "dynamic" && (
-                    <div className="flex flex-col gap-1">
-                      <label className="text-[10px] font-bold text-muted-foreground">
-                        {t("hosts.endpointHost")}
-                      </label>
-                      <Input
-                        className="h-7 text-xs border border-border bg-background px-2 outline-none focus:ring-1 focus:ring-ring"
-                        list={endpointInputId}
-                        placeholder={t("hosts.endpointHostPlaceholder")}
-                        value={tunnel.endpointHost ?? ""}
-                        onChange={(e) =>
-                          updateTunnel(i, { endpointHost: e.target.value })
-                        }
-                      />
-                      <datalist id={endpointInputId}>
-                        {hosts
-                          .filter((h) => h.enableSsh !== false)
-                          .map((h) => (
-                            <option key={h.id} value={h.ip}>
-                              {h.name || h.ip} ({h.ip})
-                            </option>
-                          ))}
-                      </datalist>
-                    </div>
-                  )}
-                  {mode !== "dynamic" && (
-                    <div className="flex flex-col gap-1">
-                      <label className="text-[10px] font-bold text-muted-foreground">
-                        {t("hosts.endpointPort")}
-                      </label>
-                      <Input
-                        className={numberInputClass}
-                        type="number"
-                        value={tunnel.endpointPort}
-                        onChange={(e) =>
-                          updateTunnel(i, {
-                            endpointPort: Number(e.target.value),
-                          })
-                        }
-                      />
-                    </div>
-                  )}
-                  <div className="flex flex-col gap-1">
-                    <label className="text-[10px] font-bold text-muted-foreground">
-                      {t("hosts.bindHost")}
-                    </label>
-                    <Input
-                      className="h-7 text-xs"
-                      placeholder="127.0.0.1"
-                      value={tunnel.bindHost ?? ""}
-                      onChange={(e) =>
-                        updateTunnel(i, { bindHost: e.target.value })
-                      }
-                    />
-                  </div>
-                  <div className="flex flex-col gap-1">
-                    <label className="text-[10px] font-bold text-muted-foreground">
-                      {t("hosts.sourcePort")}
-                    </label>
-                    <Input
-                      className={numberInputClass}
-                      type="number"
-                      value={tunnel.sourcePort}
-                      onChange={(e) =>
-                        updateTunnel(i, { sourcePort: Number(e.target.value) })
-                      }
-                    />
-                  </div>
-                  <div className="flex flex-col gap-1">
-                    <label className="text-[10px] font-bold text-muted-foreground">
-                      {t("hosts.maxRetries")}
-                    </label>
-                    <Input
-                      className={numberInputClass}
-                      type="number"
-                      value={tunnel.maxRetries}
-                      onChange={(e) =>
-                        updateTunnel(i, { maxRetries: Number(e.target.value) })
-                      }
-                    />
-                  </div>
-                  <div className="flex flex-col gap-1">
-                    <label className="text-[10px] font-bold text-muted-foreground">
-                      {t("hosts.retryIntervalS")}
-                    </label>
-                    <Input
-                      className={numberInputClass}
-                      type="number"
-                      value={tunnel.retryInterval}
-                      onChange={(e) =>
-                        updateTunnel(i, {
-                          retryInterval: Number(e.target.value),
-                        })
-                      }
-                    />
-                  </div>
-                </div>
-                <SettingRow
-                  label={t("hosts.autoStartLabel")}
-                  description={t("hosts.autoStartDesc")}
-                >
-                  <FakeSwitch
-                    checked={tunnel.autoStart}
-                    onChange={(value) => updateTunnel(i, { autoStart: value })}
-                  />
-                </SettingRow>
-              </div>
-            );
-          })}
-        </div>
-      </SectionCard>
-    </>
-  );
-}
diff --git a/plugins/tunnels/src/frontend/TunnelAuthPrompts.tsx b/plugins/tunnels/src/frontend/TunnelAuthPrompts.tsx
deleted file mode 100644
index b3f12eccb..000000000
--- a/plugins/tunnels/src/frontend/TunnelAuthPrompts.tsx
+++ /dev/null
@@ -1,135 +0,0 @@
-import { useEffect, useRef, useState } from "react";
-import type { PluginSshPromptRequest } from "@termix/plugin-sdk/backend";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import {
-  Button,
-  Dialog,
-  DialogContent,
-  DialogHeader,
-  DialogTitle,
-  Input,
-} from "@termix/plugin-sdk/ui";
-
-type Challenge = {
-  id: string;
-  tunnelName?: string;
-  request: PluginSshPromptRequest;
-};
-
-export function TunnelAuthPrompts() {
-  const [queue, setQueue] = useState<Challenge[]>([]);
-  const pending = useRef(new Set<string>());
-  useEffect(() => {
-    const active = pending.current;
-    const api = window.electronAPI;
-    if (!api?.onC2SAuthPrompt) return;
-    const dispose = api.onC2SAuthPrompt((event) => {
-      if (event.closed) {
-        active.delete(event.id);
-        setQueue((items) => items.filter((item) => item.id !== event.id));
-      } else if (event.request && !active.has(event.id)) {
-        active.add(event.id);
-        setQueue((items) => [...items, { ...event, request: event.request! }]);
-      }
-    });
-    return () => {
-      dispose();
-      for (const id of active) void api.answerC2SAuth(id, null);
-      active.clear();
-    };
-  }, []);
-  const current = queue[0];
-  return current ? (
-    <AuthDialog
-      key={current.id}
-      challenge={current}
-      onAnswer={(answer) => {
-        pending.current.delete(current.id);
-        setQueue((items) => items.filter((item) => item.id !== current.id));
-        void window.electronAPI.answerC2SAuth(current.id, answer);
-      }}
-    />
-  ) : null;
-}
-
-function AuthDialog({
-  challenge,
-  onAnswer,
-}: {
-  challenge: Challenge;
-  onAnswer: (answer: string | null) => void;
-}) {
-  const { t } = useTranslation();
-  const [answer, setAnswer] = useState("");
-  const request = challenge.request;
-  const browser = request.kind === "browser";
-  const url =
-    browser && request.url && /^https?:\/\//i.test(request.url)
-      ? request.url
-      : null;
-  return (
-    <Dialog
-      open
-      onOpenChange={(open) => {
-        if (!open) onAnswer(null);
-      }}
-    >
-      <DialogContent>
-        <DialogHeader>
-          <DialogTitle>{t("tunnels.authTitle")}</DialogTitle>
-        </DialogHeader>
-        <p className="text-sm break-all">{challenge.tunnelName}</p>
-        <form
-          onSubmit={(event) => {
-            event.preventDefault();
-            onAnswer(answer);
-          }}
-          className="space-y-3"
-        >
-          <p className="text-sm whitespace-pre-wrap">
-            {browser ? request.instructions : request.prompt}
-          </p>
-          {request.kind === "totp" && request.retry && (
-            <p role="alert">{t("tunnels.authRetry")}</p>
-          )}
-          {browser ? (
-            <>
-              <p>{request.code}</p>
-              {url && (
-                <a
-                  href={url}
-                  target="_blank"
-                  rel="noreferrer"
-                  className="break-all underline"
-                >
-                  {url}
-                </a>
-              )}
-            </>
-          ) : (
-            <Input
-              autoFocus
-              aria-label={t("tunnels.authAnswer")}
-              autoComplete="off"
-              type={
-                request.kind === "input" && request.echo ? "text" : "password"
-              }
-              value={answer}
-              onChange={(event) => setAnswer(event.target.value)}
-            />
-          )}
-          <div className="flex justify-end gap-2">
-            <Button
-              type="button"
-              variant="outline"
-              onClick={() => onAnswer(null)}
-            >
-              {t("common.cancel")}
-            </Button>
-            <Button type="submit">{t("tunnels.authContinue")}</Button>
-          </div>
-        </form>
-      </DialogContent>
-    </Dialog>
-  );
-}
diff --git a/plugins/tunnels/src/frontend/TunnelTab.tsx b/plugins/tunnels/src/frontend/TunnelTab.tsx
deleted file mode 100644
index ba5620e88..000000000
--- a/plugins/tunnels/src/frontend/TunnelTab.tsx
+++ /dev/null
@@ -1,373 +0,0 @@
-import { useEffect, useState } from "react";
-import {
-  AlertCircle,
-  Clock,
-  ExternalLink,
-  Network,
-  Play,
-  RefreshCw,
-  Settings,
-  Square,
-  Wifi,
-  WifiOff,
-} from "lucide-react";
-import {
-  logActivity,
-  useHost,
-  useToast,
-  useTranslation,
-  type PluginHostRecord,
-} from "@termix/plugin-sdk/frontend";
-import { Button, Card } from "@termix/plugin-sdk/ui";
-import type { TunnelConnection, TunnelStatus } from "../shared/types";
-import { serverTunnelName, tunnelHostLabel } from "../shared/tunnel-naming";
-import {
-  cancelTunnel,
-  connectTunnel,
-  disconnectTunnel,
-  subscribeTunnelStatuses,
-  type TunnelStatusMap,
-} from "./api";
-import {
-  connectRequestFor,
-  hostTunnelSettings,
-  tunnelMode,
-} from "./host-tunnels";
-
-type StatusLabel =
-  "CONNECTED" | "CONNECTING" | "ERROR" | "WAITING" | "DISCONNECTED";
-
-function statusLabel(status: TunnelStatus | undefined): StatusLabel {
-  const value = status?.status?.toUpperCase();
-  if (value === "CONNECTED") return "CONNECTED";
-  if (value === "CONNECTING" || value === "VERIFYING") return "CONNECTING";
-  if (value === "FAILED") return "ERROR";
-  if (value === "RETRYING" || value === "WAITING") return "WAITING";
-  return "DISCONNECTED";
-}
-
-const STATUS_TEXT_KEYS: Record<StatusLabel, string> = {
-  CONNECTED: "tunnels.connected",
-  CONNECTING: "tunnels.connecting",
-  ERROR: "tunnels.error",
-  WAITING: "tunnels.waiting",
-  DISCONNECTED: "tunnels.disconnected",
-};
-
-function TunnelCard({
-  host,
-  tunnel,
-  status,
-  isActing,
-  onAction,
-}: {
-  host: PluginHostRecord;
-  tunnel: TunnelConnection;
-  status: TunnelStatus | undefined;
-  isActing: boolean;
-  onAction: (action: "connect" | "disconnect" | "cancel") => void;
-}) {
-  const { t } = useTranslation();
-  const [showSettings, setShowSettings] = useState(false);
-  const label = statusLabel(status);
-  const isConnected = label === "CONNECTED";
-  const isConnecting = label === "CONNECTING";
-  const isError = label === "ERROR";
-  const isWaiting = label === "WAITING";
-
-  let statusColor = "text-muted-foreground border-border bg-muted/30";
-  if (isConnected)
-    statusColor = "text-accent-brand border-accent-brand/40 bg-accent-brand/10";
-  if (isConnecting)
-    statusColor = "text-blue-400 border-blue-400/40 bg-blue-400/10";
-  if (isError)
-    statusColor = "text-destructive border-destructive/40 bg-destructive/10";
-  if (isWaiting)
-    statusColor = "text-yellow-500 border-yellow-500/40 bg-yellow-500/10";
-
-  const mode = tunnelMode(tunnel);
-  const destination =
-    mode === "dynamic"
-      ? t("tunnels.socksProxy")
-      : `${tunnel.endpointHost ?? ""}:${tunnel.endpointPort}`;
-
-  return (
-    <Card className="flex flex-col overflow-hidden p-0 gap-0">
-      <div className="flex items-center justify-between px-4 py-2.5 border-b border-border bg-muted/10">
-        <div className="flex items-center gap-2">
-          <Network className="size-3.5 text-muted-foreground" />
-          <span className="text-xs font-bold uppercase tracking-widest text-muted-foreground">
-            {t("tunnels.port")} {tunnel.sourcePort}
-          </span>
-        </div>
-        <div
-          className={`flex items-center gap-1.5 px-2 py-0.5 border text-[10px] font-bold uppercase ${statusColor}`}
-        >
-          {isConnecting || isActing ? (
-            <RefreshCw className="size-3 animate-spin" />
-          ) : isConnected ? (
-            <Wifi className="size-3" />
-          ) : isError ? (
-            <AlertCircle className="size-3" />
-          ) : isWaiting ? (
-            <Clock className="size-3" />
-          ) : (
-            <WifiOff className="size-3" />
-          )}
-          {isActing ? t("tunnels.working") : t(STATUS_TEXT_KEYS[label])}
-        </div>
-      </div>
-      <div className="px-4 py-4 flex flex-col gap-3">
-        <div className="flex flex-col gap-1">
-          <span className="text-[10px] text-muted-foreground uppercase font-bold tracking-wider">
-            {t("tunnels.destination")}
-          </span>
-          <span
-            className="text-sm font-mono font-semibold truncate"
-            title={destination}
-          >
-            {destination}
-          </span>
-          <div className="flex items-center gap-1.5 mt-1">
-            <span className="text-[10px] font-semibold px-1.5 py-px border border-border text-muted-foreground uppercase">
-              {mode}
-            </span>
-            <span className="text-[10px] text-muted-foreground">
-              {t("tunnels.listensOn", { port: tunnel.sourcePort })}
-            </span>
-          </div>
-        </div>
-
-        {isError && status?.reason && (
-          <div className="flex items-start gap-2 p-2 bg-destructive/5 border border-destructive/20 text-destructive text-[10px]">
-            <AlertCircle className="size-3 mt-0.5 shrink-0" />
-            <span>{status.reason}</span>
-          </div>
-        )}
-
-        {showSettings && (
-          <div className="border border-border bg-muted/20 p-3 flex flex-col gap-2 text-xs">
-            <div className="flex justify-between items-center">
-              <span className="text-muted-foreground font-semibold">
-                {t("tunnels.host")}
-              </span>
-              <span className="font-mono">{tunnelHostLabel(host)}</span>
-            </div>
-            <div className="flex justify-between items-center">
-              <span className="text-muted-foreground font-semibold">
-                {t("tunnels.mode")}
-              </span>
-              <span className="uppercase font-bold">{mode}</span>
-            </div>
-            <div className="flex justify-between items-center">
-              <span className="text-muted-foreground font-semibold">
-                {t("tunnels.localPort")}
-              </span>
-              <span className="font-mono">{tunnel.sourcePort}</span>
-            </div>
-            {mode !== "dynamic" && (
-              <>
-                <div className="flex justify-between items-center">
-                  <span className="text-muted-foreground font-semibold">
-                    {t("tunnels.remoteHost")}
-                  </span>
-                  <span className="font-mono">{tunnel.endpointHost}</span>
-                </div>
-                <div className="flex justify-between items-center">
-                  <span className="text-muted-foreground font-semibold">
-                    {t("tunnels.remotePort")}
-                  </span>
-                  <span className="font-mono">{tunnel.endpointPort}</span>
-                </div>
-              </>
-            )}
-            <div className="flex justify-between items-center">
-              <span className="text-muted-foreground font-semibold">
-                {t("tunnels.maxRetries")}
-              </span>
-              <span className="font-mono">{tunnel.maxRetries}</span>
-            </div>
-          </div>
-        )}
-
-        <div className="flex gap-2 mt-1">
-          {isConnected ? (
-            <Button
-              variant="outline"
-              size="sm"
-              className="flex-1 h-8 text-destructive border-destructive/40 hover:bg-destructive/10 hover:text-destructive gap-1.5"
-              disabled={isActing}
-              onClick={() => onAction("disconnect")}
-            >
-              <Square className="size-3" />
-              {t("tunnels.stop")}
-            </Button>
-          ) : isConnecting || isWaiting ? (
-            <Button
-              variant="outline"
-              size="sm"
-              className="flex-1 h-8 text-yellow-500 border-yellow-500/40 hover:bg-yellow-500/10 hover:text-yellow-500 gap-1.5"
-              disabled={isActing}
-              onClick={() => onAction("cancel")}
-            >
-              <Square className="size-3" />
-              {t("tunnels.cancel")}
-            </Button>
-          ) : (
-            <Button
-              variant="outline"
-              size="sm"
-              className="flex-1 h-8 text-accent-brand border-accent-brand/40 hover:bg-accent-brand/10 hover:text-accent-brand gap-1.5"
-              disabled={isActing}
-              onClick={() => onAction("connect")}
-            >
-              {isActing ? (
-                <RefreshCw className="size-3 animate-spin" />
-              ) : (
-                <Play className="size-3" />
-              )}
-              {t("tunnels.start")}
-            </Button>
-          )}
-          <Button
-            variant={showSettings ? "secondary" : "ghost"}
-            size="icon"
-            className={`h-8 w-8 ${showSettings ? "bg-accent-brand/10 text-accent-brand" : "text-muted-foreground hover:text-foreground"}`}
-            onClick={() => setShowSettings((s) => !s)}
-          >
-            <Settings className="size-3.5" />
-          </Button>
-        </div>
-      </div>
-    </Card>
-  );
-}
-
-/** A host's saved server tunnels, with live status and start/stop controls. */
-export function TunnelTab({ host: given }: { host?: PluginHostRecord }) {
-  const { t } = useTranslation();
-  const toast = useToast();
-  const live = useHost(given?.id);
-  const host = live ?? given ?? null;
-  const [statuses, setStatuses] = useState<TunnelStatusMap>({});
-  const [acting, setActing] = useState<Record<string, boolean>>({});
-
-  useEffect(() => subscribeTunnelStatuses(setStatuses), []);
-
-  // One recent-activity entry per host opened here.
-  const hostId = host?.id;
-  const hostLabel = host ? tunnelHostLabel(host) : "";
-  useEffect(() => {
-    if (typeof hostId !== "number") return;
-    logActivity("tunnel", hostId, hostLabel).catch(() => {});
-  }, [hostId]); // eslint-disable-line react-hooks/exhaustive-deps
-
-  if (!host) {
-    return (
-      <div className="flex flex-col items-center justify-center flex-1 gap-3 p-6 text-center">
-        <div className="size-10 bg-muted/40 flex items-center justify-center">
-          <Network className="size-5 text-muted-foreground/30" />
-        </div>
-        <span className="text-sm font-semibold text-muted-foreground/60">
-          {t("tunnels.noHostSelected")}
-        </span>
-      </div>
-    );
-  }
-
-  const tunnels = hostTunnelSettings(host).connections;
-  const names = tunnels.map((tunnel, index) =>
-    serverTunnelName(host, index, tunnel),
-  );
-  const connectedCount = names.filter(
-    (name) => statuses[name]?.status === "connected",
-  ).length;
-
-  const handleAction = async (
-    action: "connect" | "disconnect" | "cancel",
-    index: number,
-  ) => {
-    const tunnel = tunnels[index];
-    if (!tunnel) return;
-    const name = names[index];
-    setActing((current) => ({ ...current, [name]: true }));
-    try {
-      if (action === "connect") {
-        await connectTunnel(connectRequestFor(host, index, tunnel));
-        toast.success(t("tunnels.clientTunnelStarted"));
-      } else if (action === "disconnect") {
-        await disconnectTunnel(name);
-        toast.info(t("tunnels.clientTunnelStopped"));
-      } else {
-        await cancelTunnel(name);
-        toast.info(t("tunnels.canceling"));
-      }
-    } catch {
-      toast.error(t("tunnels.manualControlError"));
-    } finally {
-      setActing((current) => ({ ...current, [name]: false }));
-    }
-  };
-
-  return (
-    <div className="flex flex-col flex-1 min-h-0 overflow-hidden">
-      <div className="flex-1 overflow-y-auto px-3 py-3 flex flex-col gap-3">
-        <Card className="flex-row items-center justify-between px-3 py-3 shrink-0 gap-0">
-          <div className="flex items-center gap-3">
-            <div className="size-10 border border-border bg-muted flex items-center justify-center shrink-0">
-              <Network className="size-5 text-accent-brand" />
-            </div>
-            <div>
-              <h1 className="text-2xl font-bold">{host.name}</h1>
-              <div className="flex items-center gap-2">
-                <span className="size-2 rounded-full bg-accent-brand" />
-                <span className="text-xs text-muted-foreground uppercase tracking-widest font-semibold">
-                  {t("tunnels.activeCount", {
-                    connected: connectedCount,
-                    total: tunnels.length,
-                  })}
-                </span>
-              </div>
-            </div>
-          </div>
-          <a
-            href="https://docs.termix.site/features/networking/tunnels"
-            target="_blank"
-            rel="noreferrer"
-            className="flex items-center justify-center size-9 text-muted-foreground hover:text-foreground transition-colors"
-            title={t("hosts.docsLink")}
-          >
-            <ExternalLink className="size-4" />
-          </a>
-        </Card>
-
-        {tunnels.length > 0 ? (
-          <div className="grid grid-cols-1 md:grid-cols-2 lg:grid-cols-3 gap-3">
-            {tunnels.map((tunnel, index) => (
-              <TunnelCard
-                key={names[index]}
-                host={host}
-                tunnel={tunnel}
-                status={statuses[names[index]]}
-                isActing={acting[names[index]] ?? false}
-                onAction={(action) => handleAction(action, index)}
-              />
-            ))}
-          </div>
-        ) : (
-          <div className="flex flex-col items-center justify-center h-full gap-4 py-20">
-            <div className="opacity-10 flex flex-col items-center gap-4">
-              <Network className="size-16" />
-              <span className="text-xl font-bold uppercase tracking-widest">
-                {t("tunnels.noSshTunnels")}
-              </span>
-            </div>
-            <p className="text-sm text-muted-foreground text-center max-w-sm">
-              {t("tunnels.createFirstTunnelMessage")}
-            </p>
-          </div>
-        )}
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/tunnels/src/frontend/api.ts b/plugins/tunnels/src/frontend/api.ts
deleted file mode 100644
index 6250e6f9e..000000000
--- a/plugins/tunnels/src/frontend/api.ts
+++ /dev/null
@@ -1,263 +0,0 @@
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import type {
-  C2STunnelPreset,
-  TunnelConnectRequest,
-  TunnelConnection,
-  TunnelStatus,
-} from "../shared/types";
-
-export type TunnelStatusMap = Record<string, TunnelStatus>;
-
-let client: PluginApiClient | null = null;
-let remoteClient: PluginApiClient | null = null;
-let openStream: ((init: RequestInit) => Promise<Response>) | null = null;
-
-export interface TunnelsTransport {
-  /** app.fetch for the status stream, which carries core's auth. */
-  stream?: (init: RequestInit) => Promise<Response>;
-  /** The connected remote server's client, on the desktop app. */
-  remote?: PluginApiClient | null;
-}
-
-/** Set from activate with app.api, cleared on deactivate. */
-export function setTunnelsApi(
-  api: PluginApiClient | null,
-  transport: TunnelsTransport = {},
-): void {
-  client = api;
-  remoteClient = api ? (transport.remote ?? null) : null;
-  openStream = api ? (transport.stream ?? null) : null;
-}
-
-function api(): PluginApiClient {
-  if (!client) throw new Error("The tunnels plugin is not active");
-  return client;
-}
-
-/**
- * The server's own reason for a failed call, or the fallback. The routes
- * always answer { error: string }.
- */
-export function apiErrorMessage(error: unknown, fallback: string): string {
-  const data = (error as { response?: { data?: { error?: unknown } } })
-    ?.response?.data;
-  if (typeof data?.error === "string" && data.error) return data.error;
-  return fallback;
-}
-
-// Tunnel status is a process-local, in-memory view, so reading it is always
-// safe. connectTunnel/disconnectTunnel/cancelTunnel always target the local
-// embedded backend: they address a host by numeric id, and a synced host has
-// a different numeric id in each database (only its syncId matches), so
-// routing them to a remote backend would need a local-to-remote id lookup
-// that does not exist yet.
-
-export async function getTunnelStatuses(): Promise<TunnelStatusMap> {
-  const response = await api().get<TunnelStatusMap>("/status");
-  return response.data || {};
-}
-
-/**
- * Local statuses win a name collision with remote ones, since every control
- * targets the local backend.
- */
-export function mergeTunnelStatuses(
-  local: TunnelStatusMap,
-  remote: TunnelStatusMap,
-): TunnelStatusMap {
-  return { ...remote, ...local };
-}
-
-export interface ServerSentEvent {
-  event: string;
-  data: string;
-}
-
-/** Splits a text/event-stream body into events. Returns what is left over. */
-export function parseServerSentEvents(
-  buffer: string,
-  onEvent: (event: ServerSentEvent) => void,
-): string {
-  const blocks = buffer.split(/\r?\n\r?\n/);
-  const rest = blocks.pop() ?? "";
-  for (const block of blocks) {
-    let event = "message";
-    const data: string[] = [];
-    for (const line of block.split(/\r?\n/)) {
-      if (line.startsWith(":")) continue;
-      if (line.startsWith("event:")) event = line.slice(6).trim();
-      else if (line.startsWith("data:")) data.push(line.slice(5).trimStart());
-    }
-    if (data.length > 0) onEvent({ event, data: data.join("\n") });
-  }
-  return rest;
-}
-
-function streamUrl(): string | null {
-  const base = (client as unknown as { defaults?: { baseURL?: string } })
-    ?.defaults?.baseURL;
-  if (base === undefined) return null;
-  return `${base.replace(/\/$/, "")}/plugin-api/tunnels/status/stream`;
-}
-
-export interface SubscribeOptions {
-  /** Replaces the default fetch, for tests. */
-  fetchImpl?: typeof fetch;
-  /** Statuses from a connected remote server, polled and merged in. */
-  fetchRemote?: () => Promise<TunnelStatusMap>;
-  pollIntervalMs?: number;
-}
-
-/**
- * Live tunnel statuses over the plugin's event stream, reconnecting after a
- * drop. Falls back to polling when the stream URL cannot be worked out.
- */
-export function subscribeTunnelStatuses(
-  onStatuses: (statuses: TunnelStatusMap) => void,
-  onError?: () => void,
-  options: SubscribeOptions = {},
-): () => void {
-  const controller = new AbortController();
-  const fetchImpl = options.fetchImpl ?? fetch;
-  const pollIntervalMs = options.pollIntervalMs ?? 5000;
-  let latestLocal: TunnelStatusMap = {};
-  let latestRemote: TunnelStatusMap = {};
-  const timers = new Set<ReturnType<typeof setTimeout>>();
-
-  const emit = () => onStatuses(mergeTunnelStatuses(latestLocal, latestRemote));
-
-  const wait = (ms: number) =>
-    new Promise<void>((resolve) => {
-      const timer = setTimeout(() => {
-        timers.delete(timer);
-        resolve();
-      }, ms);
-      timers.add(timer);
-    });
-
-  // A test hands in fetchImpl and a base URL; the app hands in app.fetch.
-  const url = options.fetchImpl ? streamUrl() : null;
-  const connect: ((init: RequestInit) => Promise<Response>) | null = url
-    ? (init) => fetchImpl(url, { credentials: "include", ...init })
-    : openStream;
-  const fetchRemote =
-    options.fetchRemote ??
-    (remoteClient
-      ? async () => {
-          const response = await remoteClient!.get<TunnelStatusMap>("/status");
-          return response.data || {};
-        }
-      : undefined);
-
-  void (async () => {
-    while (!controller.signal.aborted) {
-      if (!connect) {
-        try {
-          latestLocal = await getTunnelStatuses();
-          emit();
-        } catch {
-          onError?.();
-        }
-        await wait(pollIntervalMs);
-        continue;
-      }
-
-      try {
-        const response = await connect({
-          headers: { Accept: "text/event-stream" },
-          signal: controller.signal,
-        });
-        if (!response.ok || !response.body) throw new Error("stream failed");
-        const reader = response.body.getReader();
-        const decoder = new TextDecoder();
-        let buffer = "";
-        while (!controller.signal.aborted) {
-          const { value, done } = await reader.read();
-          if (done) break;
-          buffer = parseServerSentEvents(
-            buffer + decoder.decode(value, { stream: true }),
-            (event) => {
-              if (event.event !== "statuses") return;
-              try {
-                latestLocal = JSON.parse(event.data) as TunnelStatusMap;
-                emit();
-              } catch {
-                onError?.();
-              }
-            },
-          );
-        }
-        if (!controller.signal.aborted) onError?.();
-      } catch {
-        if (!controller.signal.aborted) onError?.();
-      }
-      if (!controller.signal.aborted) await wait(1000);
-    }
-  })();
-
-  if (fetchRemote) {
-    void (async () => {
-      while (!controller.signal.aborted) {
-        try {
-          latestRemote = await fetchRemote();
-          emit();
-        } catch {
-          // A remote that is down just contributes nothing.
-        }
-        await wait(pollIntervalMs);
-      }
-    })();
-  }
-
-  return () => {
-    controller.abort();
-    for (const timer of timers) clearTimeout(timer);
-    timers.clear();
-  };
-}
-
-export async function connectTunnel(
-  request: TunnelConnectRequest,
-): Promise<void> {
-  await api().post("/connect", request);
-}
-
-export async function disconnectTunnel(tunnelName: string): Promise<void> {
-  await api().post("/disconnect", { tunnelName });
-}
-
-export async function cancelTunnel(tunnelName: string): Promise<void> {
-  await api().post("/cancel", { tunnelName });
-}
-
-export async function getC2STunnelPresets(): Promise<C2STunnelPreset[]> {
-  const response = await api().get<C2STunnelPreset[]>("/presets");
-  return response.data || [];
-}
-
-export async function createC2STunnelPreset(data: {
-  name: string;
-  config: TunnelConnection[];
-  platform?: string;
-  computerName?: string;
-}): Promise<C2STunnelPreset> {
-  const response = await api().post<C2STunnelPreset>("/presets", data);
-  return response.data;
-}
-
-export async function updateC2STunnelPreset(
-  id: number,
-  data: Partial<{
-    name: string;
-    config: TunnelConnection[];
-    platform: string;
-    computerName: string;
-  }>,
-): Promise<C2STunnelPreset> {
-  const response = await api().put<C2STunnelPreset>(`/presets/${id}`, data);
-  return response.data;
-}
-
-export async function deleteC2STunnelPreset(id: number): Promise<void> {
-  await api().delete(`/presets/${id}`);
-}
diff --git a/plugins/tunnels/src/frontend/c2s-tunnel-config-utils.ts b/plugins/tunnels/src/frontend/c2s-tunnel-config-utils.ts
deleted file mode 100644
index 874d47838..000000000
--- a/plugins/tunnels/src/frontend/c2s-tunnel-config-utils.ts
+++ /dev/null
@@ -1,70 +0,0 @@
-import type { TunnelConnection, TunnelMode } from "../shared/types";
-
-export type ClientTunnel = TunnelConnection & {
-  localAddress: string;
-  remoteAddress: string;
-  bindHost: string;
-  sourceHostId?: number;
-  sourceHostSyncId?: string;
-  sourceHostName?: string;
-  displayName?: string;
-  lastStartedAt?: string;
-  lastTestedAt?: string;
-  lastError?: string;
-};
-
-export function getTunnelMode(tunnel: Partial<TunnelConnection>): TunnelMode {
-  return tunnel.mode || tunnel.tunnelType || "local";
-}
-
-export function normalizeClientTunnel(
-  tunnel: Partial<ClientTunnel>,
-): ClientTunnel {
-  const mode = getTunnelMode(tunnel);
-  const metadata = tunnel as Partial<ClientTunnel>;
-  const localAddress =
-    tunnel.localAddress?.trim() || tunnel.bindHost?.trim() || "";
-  const remoteAddress =
-    tunnel.remoteAddress?.trim() || tunnel.targetHost?.trim() || "";
-
-  return {
-    ...tunnel,
-    scope: "c2s",
-    mode,
-    tunnelType: mode === "dynamic" ? "local" : mode,
-    localAddress,
-    remoteAddress,
-    bindHost: localAddress,
-    targetHost: remoteAddress,
-    sourcePort: Number(tunnel.sourcePort) || 8080,
-    endpointPort: Number(tunnel.endpointPort) || 22,
-    sourceHostSyncId: metadata.sourceHostSyncId,
-    endpointHost: tunnel.endpointHost || tunnel.sourceHostName || "",
-    maxRetries: Number(tunnel.maxRetries) || 3,
-    retryInterval: Number(tunnel.retryInterval) || 10,
-    autoStart: Boolean(tunnel.autoStart),
-    displayName: metadata.displayName ?? "",
-    lastStartedAt: metadata.lastStartedAt,
-    lastTestedAt: metadata.lastTestedAt,
-    lastError: metadata.lastError,
-  };
-}
-
-export function stripClientTunnelDiagnostics(
-  tunnel: ClientTunnel,
-): TunnelConnection {
-  const presetTunnel = normalizeClientTunnel(tunnel);
-  const displayName = presetTunnel.displayName?.trim();
-
-  if (displayName) {
-    presetTunnel.displayName = displayName;
-  } else {
-    delete presetTunnel.displayName;
-  }
-
-  delete presetTunnel.lastStartedAt;
-  delete presetTunnel.lastTestedAt;
-  delete presetTunnel.lastError;
-
-  return presetTunnel;
-}
diff --git a/plugins/tunnels/src/frontend/host-tunnels.ts b/plugins/tunnels/src/frontend/host-tunnels.ts
deleted file mode 100644
index 2bad79cab..000000000
--- a/plugins/tunnels/src/frontend/host-tunnels.ts
+++ /dev/null
@@ -1,65 +0,0 @@
-import type { PluginHostRecord } from "@termix/plugin-sdk/frontend";
-import type { TunnelConnectRequest, TunnelConnection } from "../shared/types";
-import { serverTunnelName } from "../shared/tunnel-naming";
-
-/** A host's tunnel settings, as the host payload's pluginSettings carries them. */
-export function hostTunnelSettings(host: PluginHostRecord | null | undefined): {
-  enabled: boolean;
-  connections: TunnelConnection[];
-} {
-  const settings = (
-    host?.pluginSettings as Record<string, Record<string, unknown>> | undefined
-  )?.tunnels;
-  return {
-    enabled: settings?.enableTunnel === true,
-    connections: parseConnections(settings?.tunnelConnections),
-  };
-}
-
-export function parseConnections(value: unknown): TunnelConnection[] {
-  let parsed = value;
-  if (typeof parsed === "string") {
-    try {
-      parsed = JSON.parse(parsed);
-    } catch {
-      return [];
-    }
-  }
-  return Array.isArray(parsed) ? (parsed as TunnelConnection[]) : [];
-}
-
-export function tunnelMode(
-  tunnel: Pick<TunnelConnection, "mode" | "tunnelType">,
-): "local" | "remote" | "dynamic" {
-  return tunnel.mode ?? tunnel.tunnelType ?? "local";
-}
-
-/** What POST /connect takes for a host's saved tunnel. */
-export function connectRequestFor(
-  host: {
-    id: string | number;
-    name?: string | null;
-    username?: string | null;
-    ip: string;
-  },
-  index: number,
-  tunnel: TunnelConnection,
-): TunnelConnectRequest {
-  const mode = tunnelMode(tunnel);
-  return {
-    name: serverTunnelName(host, index, tunnel),
-    sourceHostId: Number(host.id),
-    tunnelIndex: index,
-    scope: tunnel.scope ?? "s2s",
-    mode,
-    tunnelType: mode === "remote" ? "remote" : "local",
-    bindHost: tunnel.bindHost,
-    targetHost: tunnel.targetHost,
-    endpointHost: (tunnel.endpointHost ?? "").trim(),
-    sourcePort: tunnel.sourcePort,
-    endpointPort: tunnel.endpointPort ?? 0,
-    maxRetries: tunnel.maxRetries,
-    retryInterval: tunnel.retryInterval,
-    autoStart: tunnel.autoStart,
-  };
-}
diff --git a/plugins/tunnels/src/frontend/index.tsx b/plugins/tunnels/src/frontend/index.tsx
deleted file mode 100644
index f7979d697..000000000
--- a/plugins/tunnels/src/frontend/index.tsx
+++ /dev/null
@@ -1,124 +0,0 @@
-import type { ComponentType } from "react";
-import { Network, Plug } from "lucide-react";
-import type { TabProps, TermixApp } from "@termix/plugin-sdk/frontend";
-import { TunnelAuthPrompts } from "./TunnelAuthPrompts";
-import { TunnelTab } from "./TunnelTab";
-import { HostTunnelsSection } from "./HostTunnelsSection";
-import {
-  PortForwardingPanel,
-  TunnelStandalone,
-  TunnelWidget,
-  TunnelWidgetEditForm,
-} from "./views";
-import { setTunnelsApi } from "./api";
-import { ActiveTunnelsCounter } from "./ActiveTunnelsCounter";
-import { hostTunnelSettings } from "./host-tunnels";
-
-// Matches the homepage canvas grid.
-const GRID_SIZE = 30;
-
-function TunnelTabView({ host }: TabProps) {
-  return <TunnelTab host={host} />;
-}
-
-/** This plugin's C2S relay socket, which the desktop app dials on the linked server. */
-const C2S_RELAY_PATH = "/plugin-ws/tunnels/c2s/stream";
-
-export function activate(app: TermixApp): void {
-  if (typeof window !== "undefined" && window.electronAPI?.setC2SRelayPath) {
-    void window.electronAPI.setC2SRelayPath(C2S_RELAY_PATH);
-  }
-  app.registerSlotContribution("shell.overlay", {
-    actionId: "tunnels.authPrompts",
-    titleKey: "tunnels.authTitle",
-    kind: "component",
-    component: TunnelAuthPrompts as ComponentType<Record<string, unknown>>,
-  });
-  // apiFor("remote") hands back app.api itself outside the desktop app.
-  const remote = app.apiFor("remote");
-  setTunnelsApi(app.api, {
-    stream: (init) => app.fetch("/status/stream", init),
-    remote: remote === app.api ? null : remote,
-  });
-  app.onDispose(() => setTunnelsApi(null));
-
-  // Keeps the "tunnel" tab type and ?view=tunnel links from before the
-  // conversion, so saved layouts and recent activity still open here.
-  app.registerTab("tunnel", TunnelTabView as ComponentType<TabProps>, {
-    icon: Network,
-    titleKey: "nav.tunnels",
-    persistent: true,
-    hostless: true,
-    standalone: TunnelStandalone,
-    activityTypes: ["tunnel"],
-  });
-
-  app.registerHostAction({
-    id: "tunnel",
-    titleKey: "nav.tunnels",
-    icon: Network,
-    kind: "open",
-    order: 40,
-    tabType: "tunnel",
-    copyUrlView: "tunnel",
-    when: (host) =>
-      host.enableSsh !== false && hostTunnelSettings(host).enabled,
-  });
-
-  app.registerHostEditorSection({
-    id: "tunnels",
-    group: "ssh",
-    titleKey: "hosts.tabTunnels",
-    icon: Network,
-    order: 20,
-    component: HostTunnelsSection,
-  });
-
-  app.registerPanel("port-forwarding", PortForwardingPanel);
-  app.registerRailItem({
-    id: "port-forwarding",
-    icon: Network,
-    titleKey: "nav.portForwarding",
-    kind: "panel",
-    electronOnly: true,
-    separatorAfter: true,
-    after: "credentials",
-    permission: "use",
-  });
-
-  app.registerSlotContribution("onboarding.features", {
-    actionId: "tunnels.feature",
-    titleKey: "onboarding.feature_tunnels",
-    descriptionKey: "onboarding.feature_tunnels_desc",
-    icon: Plug as ComponentType<{ className?: string }>,
-  });
-
-  app.registerExtension("homepage.widgets", {
-    id: "tunnel_widget",
-    name: "Tunnel Manager",
-    description: "Embedded SSH tunnel manager for a configured host",
-    category: "system",
-    icon: <Network size={14} />,
-    defaultConfig: { hostId: 0 },
-    defaultSize: { w: GRID_SIZE * 16, h: GRID_SIZE * 10 },
-    minSize: { w: GRID_SIZE * 8, h: GRID_SIZE * 6 },
-    components: { view: TunnelWidget, editForm: TunnelWidgetEditForm },
-  });
-
-  // The dashboard's active tunnel counter.
-  app.registerAction(
-    "tunnels.open",
-    (() => app.tabs.openSingletonTab("tunnel")) as never,
-    { permission: "use" },
-  );
-  app.registerSlotContribution("dashboard.counters", {
-    actionId: "tunnels.open",
-    titleKey: "tunnels.activeTunnels",
-    kind: "component",
-    component: (() => (
-      <ActiveTunnelsCounter
-        onOpen={() => void app.tabs.openSingletonTab("tunnel")}
-      />
-    )) as never,
-  });
-}
diff --git a/plugins/tunnels/src/frontend/tunnel-form-utils.ts b/plugins/tunnels/src/frontend/tunnel-form-utils.ts
deleted file mode 100644
index e74af5b58..000000000
--- a/plugins/tunnels/src/frontend/tunnel-form-utils.ts
+++ /dev/null
@@ -1,64 +0,0 @@
-import type { TunnelMode } from "../shared/types";
-
-type Translate = (
-  key: string,
-  options?: Record<string, string | number>,
-) => string;
-
-export function getTunnelTypeForMode(mode: TunnelMode): "local" | "remote" {
-  return mode === "remote" ? "remote" : "local";
-}
-
-export function getTunnelPortLabels(
-  scope: "client" | "server",
-  mode: TunnelMode,
-  t: Translate,
-) {
-  if (scope === "client") {
-    return {
-      sourcePortLabel:
-        mode === "remote" ? t("tunnels.remotePort") : t("tunnels.localPort"),
-      endpointPortLabel:
-        mode === "remote"
-          ? t("tunnels.localPort")
-          : t("tunnels.destinationPort"),
-    };
-  }
-
-  return {
-    sourcePortLabel: t("tunnels.currentHostPort"),
-    endpointPortLabel: t("tunnels.endpointPort"),
-  };
-}
-
-export function getTunnelModeDescription(
-  scope: "client" | "server",
-  mode: TunnelMode,
-  ports: {
-    sourcePort: string | number;
-    endpointPort: string | number;
-  },
-  t: Translate,
-) {
-  if (scope === "client") {
-    if (mode === "dynamic") {
-      return t("tunnels.forwardDescriptionClientDynamic", {
-        sourcePort: ports.sourcePort,
-      });
-    }
-    if (mode === "local") {
-      return t("tunnels.forwardDescriptionClientLocal", ports);
-    }
-    return t("tunnels.forwardDescriptionClientRemote", ports);
-  }
-
-  if (mode === "dynamic") {
-    return t("tunnels.forwardDescriptionServerDynamic", {
-      sourcePort: ports.sourcePort,
-    });
-  }
-  if (mode === "local") {
-    return t("tunnels.forwardDescriptionServerLocal", ports);
-  }
-  return t("tunnels.forwardDescriptionServerRemote", ports);
-}
diff --git a/plugins/tunnels/src/frontend/views.tsx b/plugins/tunnels/src/frontend/views.tsx
deleted file mode 100644
index a571d99fa..000000000
--- a/plugins/tunnels/src/frontend/views.tsx
+++ /dev/null
@@ -1,151 +0,0 @@
-import { Network } from "lucide-react";
-import {
-  useHosts,
-  useTranslation,
-  type PluginHostRecord,
-  type StandaloneViewProps,
-} from "@termix/plugin-sdk/frontend";
-import {
-  ConnectionScreen,
-  FullScreenAppWrapper,
-  Select2,
-} from "@termix/plugin-sdk/ui";
-import { TunnelTab } from "./TunnelTab";
-import { C2STunnelPresetManager } from "./C2STunnelPresetManager";
-import { hostTunnelSettings } from "./host-tunnels";
-
-/** The `?view=tunnel` full-screen page for one host. */
-export function TunnelStandalone({ hostId }: StandaloneViewProps) {
-  const { t } = useTranslation();
-  return (
-    <FullScreenAppWrapper hostId={hostId}>
-      {(hostConfig, phase) => {
-        if (phase === "loading") {
-          return (
-            <div className="relative h-full w-full">
-              <ConnectionScreen
-                status="connecting"
-                message={t("hosts.loadingHost")}
-              />
-            </div>
-          );
-        }
-        if (!hostConfig) {
-          return (
-            <div className="relative h-full w-full">
-              <ConnectionScreen
-                status="disconnected"
-                message={t("hosts.hostNotFound")}
-              />
-            </div>
-          );
-        }
-        const host = {
-          ...hostConfig,
-          id: String(hostConfig.id),
-        } as unknown as PluginHostRecord;
-        return <TunnelTab host={host} />;
-      }}
-    </FullScreenAppWrapper>
-  );
-}
-
-/** The rail panel for the desktop app's client tunnels. */
-export function PortForwardingPanel() {
-  return (
-    <div className="flex flex-col flex-1 min-h-0 overflow-y-auto px-2">
-      <C2STunnelPresetManager />
-    </div>
-  );
-}
-
-export interface TunnelWidgetConfig {
-  hostId: number;
-}
-
-/** Homepage widget: the tunnel tab for one host. */
-export function TunnelWidget({
-  widget,
-  config,
-}: {
-  widget: { title?: string | null };
-  config: TunnelWidgetConfig;
-}) {
-  const { t } = useTranslation();
-  const { hosts, loaded } = useHosts();
-
-  const placeholder = (text: string) => (
-    <div className="flex flex-col items-center justify-center w-full h-full gap-2 text-xs text-muted-foreground/60">
-      <Network size={20} />
-      <span>{text}</span>
-    </div>
-  );
-
-  if (!config.hostId) return placeholder(t("common.noHostConfigured"));
-  if (!loaded) return placeholder(t("common.loading"));
-
-  const host = hosts.find(
-    (candidate) =>
-      String(candidate.id) === String(config.hostId) &&
-      hostTunnelSettings(candidate).enabled,
-  );
-  if (!host) return placeholder(t("common.noHostConfigured"));
-
-  return (
-    <div className="flex flex-col w-full h-full overflow-hidden">
-      {widget.title && (
-        <div className="flex items-center gap-1.5 px-2 py-1.5 border-b border-border/50 shrink-0">
-          <span className="text-accent-brand shrink-0">
-            <Network size={11} />
-          </span>
-          <span className="text-[10px] font-semibold text-muted-foreground uppercase tracking-wider truncate">
-            {widget.title}
-          </span>
-        </div>
-      )}
-      <div
-        className="flex-1 overflow-hidden"
-        onMouseDown={(e) => e.stopPropagation()}
-      >
-        <TunnelTab host={host} />
-      </div>
-    </div>
-  );
-}
-
-/** The widget's edit form: pick a host with tunnels on. */
-export function TunnelWidgetEditForm({
-  config,
-  onChange,
-}: {
-  config: TunnelWidgetConfig;
-  onChange: (config: TunnelWidgetConfig) => void;
-}) {
-  const { t } = useTranslation();
-  const { hosts } = useHosts();
-  const options = hosts.filter(
-    (host) => host.enableSsh !== false && hostTunnelSettings(host).enabled,
-  );
-
-  return (
-    <div className="flex flex-col gap-1">
-      <label className="text-xs font-medium text-muted-foreground">
-        {t("common.host")}
-      </label>
-      <Select2
-        value={config.hostId || ""}
-        onChange={(e) =>
-          onChange({ ...config, hostId: Number(e.target.value) })
-        }
-        className="h-8 text-xs border border-border bg-background px-2"
-      >
-        <option value="">{t("common.selectHost")}</option>
-        {options.map((host) => (
-          <option key={host.id} value={host.id}>
-            {host.name || host.ip}
-          </option>
-        ))}
-      </Select2>
-    </div>
-  );
-}
diff --git a/plugins/tunnels/src/shared/tunnel-naming.ts b/plugins/tunnels/src/shared/tunnel-naming.ts
deleted file mode 100644
index cd6ae0c01..000000000
--- a/plugins/tunnels/src/shared/tunnel-naming.ts
+++ /dev/null
@@ -1,76 +0,0 @@
-/**
- * Tunnel names, shared by the backend and every frontend view so the two
- * sides can never build the same tunnel under different names.
- */
-
-/** A host's saved server tunnel: `<hostId>::<index>::<label>::<port>::<endpoint>::<port>`. */
-export function buildTunnelName(
-  hostId: number | string,
-  tunnelIndex: number,
-  hostLabel: string,
-  sourcePort: number | string,
-  endpointHost: string,
-  endpointPort: number | string,
-): string {
-  return `${hostId}::${tunnelIndex}::${hostLabel}::${sourcePort}::${endpointHost}::${endpointPort}`;
-}
-
-/** The label a server tunnel name carries for its source host. */
-export function tunnelHostLabel(host: {
-  name?: string | null;
-  username?: string | null;
-  ip: string;
-}): string {
-  return host.name || `${host.username ?? ""}@${host.ip}`;
-}
-
-/** A saved server tunnel's name, from its host and position in the list. */
-export function serverTunnelName(
-  host: {
-    id: number | string;
-    name?: string | null;
-    username?: string | null;
-    ip: string;
-  },
-  index: number,
-  tunnel: {
-    sourcePort: number | string;
-    endpointHost?: string | null;
-    endpointPort?: number | string | null;
-  },
-): string {
-  return buildTunnelName(
-    host.id,
-    index,
-    tunnelHostLabel(host),
-    tunnel.sourcePort,
-    (tunnel.endpointHost ?? "").trim(),
-    tunnel.endpointPort ?? 0,
-  );
-}
-
-/** A desktop client tunnel's name, as the Electron main process tracks it. */
-export function clientTunnelName(
-  tunnel: {
-    sourceHostId?: number;
-    mode?: string;
-    tunnelType?: string;
-    localAddress?: string;
-    remoteAddress?: string;
-    sourcePort: number;
-    endpointPort?: number;
-  },
-  index: number,
-): string {
-  const address = (value?: string) => value?.trim() || "127.0.0.1";
-  return [
-    "c2s",
-    index,
-    tunnel.sourceHostId || 0,
-    tunnel.mode || tunnel.tunnelType || "local",
-    address(tunnel.localAddress),
-    address(tunnel.remoteAddress),
-    tunnel.sourcePort,
-    tunnel.endpointPort || 0,
-  ].join("::");
-}
diff --git a/plugins/tunnels/src/shared/types.ts b/plugins/tunnels/src/shared/types.ts
deleted file mode 100644
index ba18fd115..000000000
--- a/plugins/tunnels/src/shared/types.ts
+++ /dev/null
@@ -1,88 +0,0 @@
-export type TunnelScope = "s2s" | "c2s";
-export type TunnelMode = "local" | "remote" | "dynamic";
-
-export const CONNECTION_STATES = {
-  DISCONNECTED: "disconnected",
-  CONNECTING: "connecting",
-  CONNECTED: "connected",
-  VERIFYING: "verifying",
-  FAILED: "failed",
-  UNSTABLE: "unstable",
-  RETRYING: "retrying",
-  WAITING: "waiting",
-  DISCONNECTING: "disconnecting",
-} as const;
-
-export type ConnectionState =
-  (typeof CONNECTION_STATES)[keyof typeof CONNECTION_STATES];
-
-export type TunnelErrorType =
-  | "CONNECTION_FAILED"
-  | "AUTHENTICATION_FAILED"
-  | "TIMEOUT"
-  | "NETWORK_ERROR"
-  | "UNKNOWN";
-
-/** One saved tunnel, as a host's tunnelConnections setting or a C2S preset holds it. */
-export interface TunnelConnection {
-  scope?: TunnelScope;
-  mode?: TunnelMode;
-  tunnelType?: "local" | "remote";
-  localAddress?: string;
-  remoteAddress?: string;
-  bindHost?: string;
-  sourceHostId?: number;
-  sourceHostSyncId?: string;
-  sourceHostName?: string;
-  sourcePort: number;
-  endpointPort: number;
-  endpointHost?: string;
-  targetHost?: string;
-  /** Seconds. */
-  retryInterval: number;
-  maxRetries: number;
-  autoStart: boolean;
-  displayName?: string;
-}
-
-/** What POST /connect takes. Credentials are always resolved server side. */
-export interface TunnelConnectRequest {
-  name: string;
-  sourceHostId: number;
-  tunnelIndex: number;
-  scope?: TunnelScope;
-  mode?: TunnelMode;
-  tunnelType?: "local" | "remote";
-  bindHost?: string;
-  targetHost?: string;
-  endpointHost?: string;
-  sourcePort: number;
-  endpointPort: number;
-  maxRetries?: number;
-  /** Seconds. */
-  retryInterval?: number;
-  autoStart?: boolean;
-}
-
-export interface TunnelStatus {
-  connected: boolean;
-  status: ConnectionState;
-  retryCount?: number;
-  maxRetries?: number;
-  nextRetryIn?: number;
-  reason?: string;
-  errorType?: TunnelErrorType;
-  manualDisconnect?: boolean;
-  retryExhausted?: boolean;
-}
-
-export interface C2STunnelPreset {
-  id: number;
-  userId: string;
-  name: string;
-  config: TunnelConnection[];
-  platform?: string | null;
-  computerName?: string | null;
-  createdAt: string;
-  updatedAt: string;
-}
diff --git a/plugins/tunnels/tests/backend/activate.test.ts b/plugins/tunnels/tests/backend/activate.test.ts
deleted file mode 100644
index 3434800bc..000000000
--- a/plugins/tunnels/tests/backend/activate.test.ts
+++ /dev/null
@@ -1,85 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import express from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import { PluginCapabilityError } from "@termix/plugin-sdk/backend";
-import { activate } from "../../src/backend/index.js";
-import {
-  host,
-  manifest,
-  pluginDir,
-  startServer,
-  withHosts,
-  type TestServer,
-} from "./helpers";
-
-let db: TestDb | null = null;
-let server: TestServer | null = null;
-let mock: MockPluginContext | null = null;
-
-afterEach(async () => {
-  for (const dispose of [...(mock?.disposals ?? [])].reverse()) await dispose();
-  mock = null;
-  db?.close();
-  db = null;
-  await server?.close();
-  server = null;
-});
-
-async function activateWithout(capability: string, actor?: string) {
-  db = await createTestDb(pluginDir);
-  mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities.filter((c) => c !== capability),
-    db: db.database,
-    router: () => express.Router(),
-    actor,
-  });
-  return mock;
-}
-
-describe("tunnels activate", () => {
-  it("provides tunnels.access and serves the client relay socket", async () => {
-    server = await startServer();
-    const service = server.mock.services.get("tunnels.access") as Record<
-      string,
-      unknown
-    >;
-    for (const method of ["forward", "start", "stop", "status", "list"]) {
-      expect(typeof service[method]).toBe("function");
-    }
-    expect(server.mock.wsRoutes).toMatchObject([
-      { path: "/c2s/stream", raw: false },
-    ]);
-  });
-
-  for (const capability of ["db:own", "network:serve"]) {
-    it(`fails closed without ${capability}`, async () => {
-      const ctx = await activateWithout(capability);
-      await expect(activate(ctx.ctx)).rejects.toBeInstanceOf(
-        PluginCapabilityError,
-      );
-    });
-  }
-
-  for (const capability of ["ssh:connect", "credentials:use", "hosts:read"]) {
-    it(`cannot open a tunnel without ${capability}`, async () => {
-      const ctx = await activateWithout(capability, "user-1");
-      // Host lookups stay gated when hosts:read is the one missing.
-      if (capability !== "hosts:read") withHosts(ctx, { "user-1": [host()] });
-      await activate(ctx.ctx);
-      const service = ctx.services.get("tunnels.access") as {
-        forward: (id: number, target: unknown) => Promise<unknown>;
-      };
-
-      await expect(
-        service.forward(7, { targetHost: "127.0.0.1", targetPort: 80 }),
-      ).rejects.toBeInstanceOf(PluginCapabilityError);
-    });
-  }
-});
diff --git a/plugins/tunnels/tests/backend/authorize.test.ts b/plugins/tunnels/tests/backend/authorize.test.ts
deleted file mode 100644
index 7ff5733e0..000000000
--- a/plugins/tunnels/tests/backend/authorize.test.ts
+++ /dev/null
@@ -1,53 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import { authorizeTunnelAction } from "../../src/backend/authorize.js";
-
-/**
- * /disconnect and /cancel are addressed by tunnel name. On-demand tunnels are
- * never registered as configs, so a check that only ran for a registered
- * config never ran for them, and `web:{hostId}:{endpointId}` is guessable.
- * That let any user force-close another user's live tunnel.
- */
-describe("authorizeTunnelAction", () => {
-  it("checks the host encoded in a reserved name when no config exists", async () => {
-    const canAccess = vi.fn().mockResolvedValue(true);
-    const result = await authorizeTunnelAction(
-      canAccess,
-      "web:7:e1",
-      undefined,
-    );
-
-    expect(result).toEqual({ allowed: true, hostId: 7 });
-    expect(canAccess).toHaveBeenCalledWith(7);
-  });
-
-  it("denies a reserved name whose host the user cannot access", async () => {
-    const canAccess = vi.fn().mockResolvedValue(false);
-    expect(
-      (await authorizeTunnelAction(canAccess, "web:7:e1", undefined)).allowed,
-    ).toBe(false);
-  });
-
-  it("fails closed on a reserved name it cannot parse", async () => {
-    const canAccess = vi.fn().mockResolvedValue(true);
-    for (const name of ["web:", "web:abc:e1", "web:0:e1"]) {
-      expect(
-        (await authorizeTunnelAction(canAccess, name, undefined)).allowed,
-      ).toBe(false);
-    }
-    expect(canAccess).not.toHaveBeenCalled();
-  });
-
-  it("still checks a registered config's host id", async () => {
-    const canAccess = vi.fn().mockResolvedValue(true);
-    await authorizeTunnelAction(canAccess, "my-tunnel", { sourceHostId: 42 });
-    expect(canAccess).toHaveBeenCalledWith(42);
-  });
-
-  it("leaves an ordinary unregistered name allowed", async () => {
-    const canAccess = vi.fn();
-    expect(
-      (await authorizeTunnelAction(canAccess, "my-tunnel", undefined)).allowed,
-    ).toBe(true);
-    expect(canAccess).not.toHaveBeenCalled();
-  });
-});
diff --git a/plugins/tunnels/tests/backend/autostart.test.ts b/plugins/tunnels/tests/backend/autostart.test.ts
deleted file mode 100644
index 69448c507..000000000
--- a/plugins/tunnels/tests/backend/autostart.test.ts
+++ /dev/null
@@ -1,78 +0,0 @@
-import { EventEmitter } from "node:events";
-import { PassThrough } from "node:stream";
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { createMockCtx } from "@termix/plugin-sdk/testing";
-import { createTunnelManager } from "../../src/backend/manager.js";
-import { startAutoStartTunnels } from "../../src/backend/autostart.js";
-import { host, manifest, withHosts } from "./helpers";
-
-class FakeClient extends EventEmitter {
-  forwardOut = vi.fn((_a, _b, _c, _d, cb) => cb(undefined, new PassThrough()));
-  end = vi.fn();
-}
-
-let manager: ReturnType<typeof createTunnelManager> | null = null;
-
-afterEach(() => {
-  manager?.dispose();
-  manager = null;
-});
-
-const tunnel = (autoStart: boolean, sourcePort: number) => ({
-  scope: "s2s",
-  mode: "local",
-  sourcePort,
-  endpointHost: "127.0.0.1",
-  endpointPort: 9,
-  maxRetries: 3,
-  retryInterval: 5,
-  autoStart,
-});
-
-describe("autostart", () => {
-  it("starts only autostart tunnels on enabled hosts, as each host's owner", async () => {
-    const mock = createMockCtx({
-      pluginId: manifest.id,
-      manifest,
-      capabilities: manifest.capabilities,
-      sshClient: new FakeClient(),
-    });
-    withHosts(mock, {
-      "user-1": [host()],
-      "user-2": [host({ id: 8, userId: "user-2", name: "db" })],
-    });
-    await mock.ctx.settings.setHost(7, "enableTunnel", true);
-    await mock.ctx.settings.setHost(7, "tunnelConnections", [
-      tunnel(true, 0),
-      tunnel(false, 0),
-    ]);
-    await mock.ctx.settings.setHost(8, "enableTunnel", false);
-    await mock.ctx.settings.setHost(8, "tunnelConnections", [tunnel(true, 0)]);
-    manager = createTunnelManager(mock.ctx);
-
-    const started = await startAutoStartTunnels(mock.ctx, manager, async () => [
-      { id: 7, userId: "user-1" },
-      { id: 8, userId: "user-2" },
-    ]);
-
-    expect(started).toBe(1);
-    expect([...manager.configs.keys()]).toEqual(["7::0::web::0::127.0.0.1::9"]);
-    expect(
-      manager.configs.get("7::0::web::0::127.0.0.1::9")?.requestingUserId,
-    ).toBe("user-1");
-  });
-
-  it("does nothing when the host list cannot be read", async () => {
-    const mock = createMockCtx({
-      pluginId: manifest.id,
-      manifest,
-      capabilities: manifest.capabilities,
-    });
-    manager = createTunnelManager(mock.ctx);
-    await expect(
-      startAutoStartTunnels(mock.ctx, manager, async () => {
-        throw new Error("no database");
-      }),
-    ).resolves.toBe(0);
-  });
-});
diff --git a/plugins/tunnels/tests/backend/c2s-auth.test.ts b/plugins/tunnels/tests/backend/c2s-auth.test.ts
deleted file mode 100644
index 55fd4a971..000000000
--- a/plugins/tunnels/tests/backend/c2s-auth.test.ts
+++ /dev/null
@@ -1,155 +0,0 @@
-import { EventEmitter } from "node:events";
-import { afterEach, describe, expect, it, vi } from "vitest";
-import type { WebSocket } from "ws";
-import type {
-  PluginContext,
-  PluginSshConnectOptions,
-} from "@termix/plugin-sdk/backend";
-import { createC2SPrompt } from "../../src/backend/c2s-auth.js";
-import { createC2SConnections } from "../../src/backend/c2s-connections.js";
-
-class Socket extends EventEmitter {
-  readyState = 1;
-  send = vi.fn();
-  close() {
-    this.readyState = 3;
-    this.emit("close");
-  }
-  get ws() {
-    return this as unknown as WebSocket;
-  }
-  answer(requestId: string, answer: string | null) {
-    this.emit(
-      "message",
-      Buffer.from(JSON.stringify({ type: "auth-response", requestId, answer })),
-      false,
-    );
-  }
-}
-const flush = async () => {
-  await Promise.resolve();
-  await Promise.resolve();
-};
-afterEach(() => vi.useRealTimers());
-
-describe("client tunnel authentication", () => {
-  it("accepts only the current challenge on its socket and removes answer listeners", async () => {
-    const socket = new Socket();
-    const prompt = createC2SPrompt(socket.ws);
-    const result = prompt.ask({ kind: "totp", prompt: "Code:", retry: false });
-    const sent = JSON.parse(socket.send.mock.calls[0][0]);
-    socket.answer("stale", "wrong");
-    expect(socket.listenerCount("message")).toBe(1);
-    socket.answer(sent.requestId, "123456");
-    await expect(result).resolves.toBe("123456");
-    expect(socket.listenerCount("message")).toBe(0);
-    expect(socket.send).toHaveBeenCalledTimes(1);
-    const retry = prompt.ask({ kind: "totp", prompt: "Code:", retry: true });
-    socket.answer(sent.requestId, "old");
-    socket.close();
-    await expect(retry).rejects.toThrow("cancelled");
-  });
-
-  it("cancels on a null answer and bounds unanswered prompts", async () => {
-    vi.useFakeTimers();
-    const cancelled = new Socket();
-    const request = createC2SPrompt(cancelled.ws).ask({
-      kind: "input",
-      prompt: "Password:",
-      echo: false,
-      isPush: false,
-    });
-    cancelled.answer(
-      JSON.parse(cancelled.send.mock.calls[0][0]).requestId,
-      null,
-    );
-    await expect(request).rejects.toThrow("cancelled");
-    expect(cancelled.readyState).toBe(3);
-    const socket = new Socket();
-    const result = createC2SPrompt(socket.ws).ask({
-      kind: "totp",
-      prompt: "Code:",
-      retry: false,
-    });
-    const failed = expect(result).rejects.toThrow("timed out");
-    await vi.advanceTimersByTimeAsync(60_000);
-    await failed;
-    expect(socket.readyState).toBe(3);
-    expect(socket.listenerCount("message")).toBe(0);
-  });
-
-  it("reuses one authenticated source for concurrent streams, scoped to user, host and desktop runtime", async () => {
-    let actor = "alice";
-    const disposals: Array<() => void> = [];
-    const connections: Array<{
-      client: EventEmitter;
-      dispose: ReturnType<typeof vi.fn>;
-    }> = [];
-    const connect = vi.fn(
-      async (_id: number, options: PluginSshConnectOptions) => {
-        expect(options.prompt).toBeDefined();
-        const result = {
-          client: new EventEmitter(),
-          host: {},
-          jumpClient: null,
-          dispose: vi.fn(),
-        };
-        connections.push(result);
-        return result;
-      },
-    );
-    const acquire = createC2SConnections({
-      currentActor: () => actor,
-      disposables: { add: (fn: () => void) => disposals.push(fn) },
-      ssh: { connect },
-    } as unknown as PluginContext);
-    const anchor = new Socket();
-    const first = new Socket();
-    const second = new Socket();
-    await Promise.all([
-      acquire(anchor.ws, 1, "runtime-a"),
-      acquire(first.ws, 1, "runtime-a"),
-      acquire(second.ws, 1, "runtime-a"),
-    ]);
-    expect(connect).toHaveBeenCalledTimes(1);
-    first.close();
-    second.close();
-    await flush();
-    expect(connections[0].dispose).not.toHaveBeenCalled();
-    await acquire(new Socket().ws, 1, "runtime-b");
-    await acquire(new Socket().ws, 2, "runtime-a");
-    actor = "bob";
-    await acquire(new Socket().ws, 1, "runtime-a");
-    expect(connect).toHaveBeenCalledTimes(4);
-    anchor.close();
-    await flush();
-    expect(connections[0].dispose).toHaveBeenCalledOnce();
-    disposals.forEach((dispose) => dispose());
-    await flush();
-    expect(
-      connections.every((entry) => entry.dispose.mock.calls.length === 1),
-    ).toBe(true);
-  });
-
-  it("disposes a connection that authenticates after the desktop stopped", async () => {
-    let ready!: (value: unknown) => void;
-    const source = { client: new EventEmitter(), dispose: vi.fn() };
-    const acquire = createC2SConnections({
-      currentActor: () => "alice",
-      disposables: { add: vi.fn() },
-      ssh: {
-        connect: () =>
-          new Promise((resolve) => {
-            ready = resolve;
-          }),
-      },
-    } as unknown as PluginContext);
-    const socket = new Socket();
-    const pending = acquire(socket.ws, 1, "stopped");
-    socket.close();
-    ready(source);
-    await expect(pending).rejects.toThrow("closed");
-    await flush();
-    expect(source.dispose).toHaveBeenCalledOnce();
-  });
-});
diff --git a/plugins/tunnels/tests/backend/c2s-relay-auth.test.ts b/plugins/tunnels/tests/backend/c2s-relay-auth.test.ts
deleted file mode 100644
index 2fea52c29..000000000
--- a/plugins/tunnels/tests/backend/c2s-relay-auth.test.ts
+++ /dev/null
@@ -1,108 +0,0 @@
-import { EventEmitter } from "node:events";
-import { PassThrough } from "node:stream";
-import { describe, expect, it, vi } from "vitest";
-import type { WebSocket } from "ws";
-import type { PluginSshConnectOptions } from "@termix/plugin-sdk/backend";
-import { createMockCtx } from "@termix/plugin-sdk/testing";
-import { createC2SRelay } from "../../src/backend/c2s-relay.js";
-import { host, manifest } from "./helpers.js";
-class Socket extends EventEmitter {
-  readyState = 1;
-  send = vi.fn();
-  close() {
-    this.readyState = 3;
-    this.emit("close");
-  }
-  message(value: unknown) {
-    this.emit("message", Buffer.from(JSON.stringify(value)), false);
-  }
-  get ws() {
-    return this as unknown as WebSocket;
-  }
-  messages() {
-    return this.send.mock.calls.map(([data]) => JSON.parse(String(data)));
-  }
-}
-
-describe("interactive client relay", () => {
-  it("authenticates preflight once and forwards subsequent SOCKS streams on the retained connection", async () => {
-    const mock = createMockCtx({
-      pluginId: "tunnels",
-      manifest,
-      capabilities: manifest.capabilities,
-      permissions: ["tunnels.use"],
-      hosts: [host()],
-    });
-    const stream = new PassThrough();
-    const client = Object.assign(new EventEmitter(), {
-      forwardOut: vi.fn((_ip, _port, _target, _targetPort, callback) =>
-        callback(null, stream),
-      ),
-    });
-    const dispose = vi.fn();
-    const connect = vi.fn(
-      async (_id: number, options: PluginSshConnectOptions) => {
-        expect(
-          await options.prompt!.ask({
-            kind: "totp",
-            prompt: "Verification code:",
-            retry: false,
-          }),
-        ).toBe("123456");
-        return { client, dispose, host: host(), jumpClient: null };
-      },
-    );
-    mock.ctx.ssh.connect = connect as unknown as typeof mock.ctx.ssh.connect;
-    const handle = createC2SRelay(mock.ctx);
-    const anchor = new Socket();
-    const socket = new Socket();
-    const tunnelConfig = {
-      sourceHostId: 7,
-      mode: "dynamic",
-      sessionId: "desktop-runtime",
-    };
-    try {
-      handle(anchor.ws, "user-1");
-      anchor.message({ type: "test", keepAlive: true, tunnelConfig });
-      await vi.waitFor(() =>
-        expect(anchor.messages()[0]?.type).toBe("auth-prompt"),
-      );
-      anchor.message({
-        type: "auth-response",
-        requestId: anchor.messages()[0].requestId,
-        answer: "123456",
-      });
-      await vi.waitFor(() =>
-        expect(anchor.messages().at(-1)?.type).toBe("ready"),
-      );
-      expect(dispose).not.toHaveBeenCalled();
-      handle(socket.ws, "user-1");
-      socket.message({
-        type: "open",
-        tunnelConfig,
-        targetHost: "internal.example",
-        targetPort: 443,
-      });
-      await vi.waitFor(() =>
-        expect(socket.messages().at(-1)?.type).toBe("ready"),
-      );
-      expect(connect).toHaveBeenCalledOnce();
-      expect(client.forwardOut).toHaveBeenCalledWith(
-        "127.0.0.1",
-        0,
-        "internal.example",
-        443,
-        expect.any(Function),
-      );
-      socket.close();
-      expect(dispose).not.toHaveBeenCalled();
-      anchor.close();
-      await vi.waitFor(() => expect(dispose).toHaveBeenCalledOnce());
-    } finally {
-      socket.close();
-      anchor.close();
-      stream.destroy();
-      for (const cleanup of mock.disposals) await cleanup();
-    }
-  });
-});
diff --git a/plugins/tunnels/tests/backend/c2s-source-host.test.ts b/plugins/tunnels/tests/backend/c2s-source-host.test.ts
deleted file mode 100644
index 65754749d..000000000
--- a/plugins/tunnels/tests/backend/c2s-source-host.test.ts
+++ /dev/null
@@ -1,31 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import { resolveC2SSourceHostId } from "../../src/backend/c2s-relay.js";
-
-describe("resolveC2SSourceHostId", () => {
-  it("uses the row matching the stable sync id", async () => {
-    const findBySyncId = vi.fn().mockResolvedValue(42);
-
-    await expect(
-      resolveC2SSourceHostId(
-        { sourceHostId: 7, sourceHostSyncId: "host-sync-id" },
-        findBySyncId,
-      ),
-    ).resolves.toBe(42);
-    expect(findBySyncId).toHaveBeenCalledWith("host-sync-id");
-  });
-
-  it("keeps a local id when no sync id is available", async () => {
-    await expect(
-      resolveC2SSourceHostId({ sourceHostId: 7 }, vi.fn()),
-    ).resolves.toBe(7);
-  });
-
-  it("does not silently fall back to a mismatched id", async () => {
-    await expect(
-      resolveC2SSourceHostId(
-        { sourceHostId: 7, sourceHostSyncId: "missing" },
-        vi.fn().mockResolvedValue(null),
-      ),
-    ).rejects.toThrow("not found on the remote server");
-  });
-});
diff --git a/plugins/tunnels/tests/backend/helpers.ts b/plugins/tunnels/tests/backend/helpers.ts
deleted file mode 100644
index c408dedf8..000000000
--- a/plugins/tunnels/tests/backend/helpers.ts
+++ /dev/null
@@ -1,148 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import type {
-  PluginContext,
-  PluginHostAccess,
-  PluginHostSummary,
-} from "@termix/plugin-sdk/backend";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-export const manifest = manifestJson as unknown as PluginManifest;
-
-export function host(
-  overrides: Partial<PluginHostSummary> = {},
-): PluginHostSummary {
-  return {
-    id: 7,
-    userId: "user-1",
-    name: "web",
-    ip: "10.0.0.5",
-    port: 22,
-    username: "root",
-    tags: null,
-    folder: null,
-    authType: "password",
-    ...overrides,
-  };
-}
-
-/**
- * Hosts each user can reach, standing in for ctx.hosts. createMockCtx has no
- * per-user host list, and tunnels checks access as the acting user.
- */
-export function withHosts(
-  mock: MockPluginContext,
-  byUser: Record<string, PluginHostSummary[]>,
-): void {
-  const reachable = () => byUser[mock.ctx.currentActor() ?? ""] ?? [];
-  const hosts = mock.ctx.hosts as PluginContext["hosts"] & {
-    [key: string]: unknown;
-  };
-  Object.assign(hosts, {
-    list: async () => reachable(),
-    get: async (id: number) => reachable().find((h) => h.id === id) ?? null,
-    checkAccess: async (id: number): Promise<PluginHostAccess> => {
-      const found = reachable().find((h) => h.id === id);
-      return found
-        ? {
-            hasAccess: true,
-            isOwner: found.userId === mock.ctx.currentActor(),
-            isShared: false,
-            permissionLevel: "manage",
-          }
-        : { hasAccess: false, isOwner: false, isShared: false };
-    },
-  });
-}
-
-export interface TestServer {
-  db: TestDb;
-  mock: MockPluginContext;
-  request: (
-    method: string,
-    path: string,
-    options?: { user?: string; body?: unknown },
-    // Route bodies vary per test; asserting on them is the point.
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any }>;
-  close: () => Promise<void>;
-}
-
-/**
- * The plugin activated against a real in-memory database, its router mounted
- * on an express app the way core mounts it: JSON parsed, the acting user set
- * from the request, everything else left to the plugin.
- */
-export async function startServer(
-  options: {
-    permissions?: string[];
-    users?: string[];
-    hosts?: Record<string, PluginHostSummary[]>;
-  } = {},
-): Promise<TestServer> {
-  const db = await createTestDb(pluginDir);
-  for (const user of options.users ?? ["user-1", "user-2"]) {
-    db.sqlite
-      .prepare("INSERT INTO users (id, username) VALUES (?, ?)")
-      .run(user, user);
-  }
-
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    permissions: options.permissions ?? ["tunnels.use"],
-  });
-  withHosts(mock, options.hosts ?? { "user-1": [host()] });
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") ?? undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    db,
-    mock,
-    async request(method, path, { user = "user-1", body: given } = {}) {
-      const body = method === "GET" ? undefined : given;
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        headers: {
-          "x-test-user": user,
-          ...(body !== undefined ? { "content-type": "application/json" } : {}),
-        },
-        body: body !== undefined ? JSON.stringify(body) : undefined,
-      });
-      const text = await response.text();
-      return { status: response.status, body: text ? JSON.parse(text) : null };
-    },
-    async close() {
-      for (const dispose of [...mock.disposals].reverse()) await dispose();
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-      db.close();
-    },
-  };
-}
diff --git a/plugins/tunnels/tests/backend/manager.test.ts b/plugins/tunnels/tests/backend/manager.test.ts
deleted file mode 100644
index 61000c012..000000000
--- a/plugins/tunnels/tests/backend/manager.test.ts
+++ /dev/null
@@ -1,258 +0,0 @@
-import net from "node:net";
-import { EventEmitter } from "node:events";
-import { PassThrough } from "node:stream";
-import { readdirSync, readFileSync } from "node:fs";
-import { join } from "node:path";
-import { afterEach, describe, expect, it, vi } from "vitest";
-import {
-  createMockCtx,
-  type MockPluginContext,
-} from "@termix/plugin-sdk/testing";
-import { createTunnelManager } from "../../src/backend/manager.js";
-import type { TunnelConfig } from "../../src/backend/types.js";
-import { host, manifest, pluginDir, withHosts } from "./helpers";
-
-/** Just enough of an ssh2 Client for the manager's channel calls. */
-class FakeClient extends EventEmitter {
-  channels: PassThrough[] = [];
-  forwardOut = vi.fn(
-    (
-      _srcIP: string,
-      _srcPort: number,
-      _host: string,
-      _port: number,
-      cb: (err: Error | undefined, stream?: PassThrough) => void,
-    ) => {
-      const channel = new PassThrough();
-      this.channels.push(channel);
-      cb(undefined, channel);
-    },
-  );
-  forwardIn = vi.fn(
-    (_host: string, port: number, cb: (err?: Error, port?: number) => void) =>
-      cb(undefined, port || 40000),
-  );
-  unforwardIn = vi.fn((_host: string, _port: number, cb?: () => void) =>
-    cb?.(),
-  );
-  end = vi.fn(() => this.emit("close"));
-}
-
-let manager: ReturnType<typeof createTunnelManager> | null = null;
-
-afterEach(() => {
-  manager?.dispose();
-  manager = null;
-});
-
-function setup(client = new FakeClient()) {
-  const mock: MockPluginContext = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    actor: "user-1",
-    sshClient: client,
-  });
-  withHosts(mock, {
-    "user-1": [host(), host({ id: 9, name: "db", ip: "10.0.0.9" })],
-  });
-  manager = createTunnelManager(mock.ctx);
-  return { mock, client, manager };
-}
-
-function config(overrides: Partial<TunnelConfig> = {}): TunnelConfig {
-  return {
-    name: "7::0::web::0::127.0.0.1::9",
-    scope: "s2s",
-    mode: "local",
-    tunnelType: "local",
-    bindHost: "127.0.0.1",
-    sourceHostId: 7,
-    tunnelIndex: 0,
-    requestingUserId: "user-1",
-    hostName: "web",
-    sourceIP: "10.0.0.5",
-    sourceSSHPort: 22,
-    sourceUsername: "root",
-    endpointHost: "127.0.0.1",
-    sourcePort: 0,
-    endpointPort: 9,
-    maxRetries: 3,
-    retryInterval: 5000,
-    autoStart: false,
-    ...overrides,
-  };
-}
-
-describe("both SSH legs go through ctx.ssh", () => {
-  it("never builds its own ssh2 Client", () => {
-    // The host key check lives in core's connect pipeline. A raw
-    // `new Client()` here would skip it, which is the bug this plugin fixed.
-    const dir = join(pluginDir, "src", "backend");
-    for (const file of readdirSync(dir)) {
-      const source = readFileSync(join(dir, file), "utf8");
-      expect(source, file).not.toMatch(/new Client\(/);
-      expect(source, file).not.toMatch(
-        /import \{[^}]*\bClient\b[^}]*\} from "ssh2"/,
-      );
-    }
-  });
-
-  it("opens the endpoint leg over a channel on the source connection", async () => {
-    const { mock, client } = setup();
-    const runtime = await manager!.connect(
-      config({
-        name: "7::0::web::8080::db::5432",
-        mode: "remote",
-        tunnelType: "remote",
-        endpointHost: "db",
-        endpointHostId: 9,
-        endpointIP: "10.0.0.9",
-        endpointSSHPort: 22,
-        sourcePort: 8080,
-        endpointPort: 5432,
-      }),
-      0,
-      { throwOnError: true },
-    );
-
-    expect(runtime).not.toBeNull();
-    expect(mock.sshConnections).toHaveLength(2);
-    const [source, endpoint] = mock.sshConnections;
-    expect(source.host).toBe(7);
-    expect(source.options?.purpose).toBe("tunnel");
-    expect(source.options?.sock).toBeUndefined();
-
-    expect(client.forwardOut.mock.calls[0].slice(2, 4)).toEqual([
-      "10.0.0.9",
-      22,
-    ]);
-    expect(endpoint.host).toBe(9);
-    expect(endpoint.options?.purpose).toBe("tunnel");
-    expect(endpoint.options?.sock).toBe(client.channels[0]);
-    // Remote mode binds on the endpoint leg.
-    expect(client.forwardIn).toHaveBeenCalledWith(
-      "127.0.0.1",
-      5432,
-      expect.any(Function),
-    );
-  });
-});
-
-describe("local listeners", () => {
-  it("reports the kernel-assigned port, never the requested 0", async () => {
-    setup();
-    const runtime = await manager!.connect(config(), 0, {
-      throwOnError: true,
-    });
-
-    expect(runtime!.bindPort).toBeGreaterThan(0);
-    await new Promise<void>((resolve, reject) => {
-      const socket = net.connect(runtime!.bindPort, "127.0.0.1", () => {
-        socket.destroy();
-        resolve();
-      });
-      socket.once("error", reject);
-    });
-    expect(manager!.statuses.get(config().name)?.status).toBe("connected");
-  });
-
-  it("honours a fixed source port", async () => {
-    setup();
-    const probe = net.createServer();
-    const wanted = await new Promise<number>((resolve) => {
-      probe.listen(0, "127.0.0.1", () =>
-        resolve((probe.address() as { port: number }).port),
-      );
-    });
-    await new Promise<void>((resolve) => probe.close(() => resolve()));
-
-    const runtime = await manager!.connect(
-      config({ name: "web:7:fixed", sourcePort: wanted }),
-      0,
-      { throwOnError: true },
-    );
-    expect(runtime!.bindPort).toBe(wanted);
-  });
-
-  it("closes an idle tunnel and drops its runtime entry", async () => {
-    setup();
-    await manager!.connect(
-      config({ name: "web:7:idle", idleTimeoutMs: 60 }),
-      0,
-      { throwOnError: true },
-    );
-    expect(manager!.runtimes.has("web:7:idle")).toBe(true);
-
-    await vi.waitFor(
-      () => expect(manager!.runtimes.has("web:7:idle")).toBe(false),
-      { timeout: 4000, interval: 25 },
-    );
-  });
-
-  it("leaves a tunnel with no idle timeout running", async () => {
-    setup();
-    await manager!.connect(config({ name: "web:7:forever" }), 0, {
-      throwOnError: true,
-    });
-    await new Promise((resolve) => setTimeout(resolve, 300));
-    expect(manager!.runtimes.has("web:7:forever")).toBe(true);
-  });
-});
-
-describe("failures and stops", () => {
-  it("reports an auth failure without retrying and tells automations", async () => {
-    const { mock } = setup();
-    const connect = vi
-      .spyOn(mock.ctx.ssh, "connect")
-      .mockRejectedValue(
-        new Error("All configured authentication methods failed"),
-      );
-
-    await manager!.connect(config());
-
-    const status = manager!.statuses.get(config().name);
-    expect(status?.status).toBe("failed");
-    expect(status?.errorType).toBe("AUTHENTICATION_FAILED");
-    expect(connect).toHaveBeenCalledTimes(1);
-    expect(mock.emitted).toContainEqual({
-      topic: "plugin.tunnels.tunnel_disconnected",
-      payload: {
-        userId: "user-1",
-        hostId: 7,
-        tunnelName: config().name,
-      },
-    });
-  });
-
-  it("stops on request and holds off an immediate reconnect", async () => {
-    const { mock } = setup();
-    manager!.configs.set(config().name, config());
-    await manager!.connect(config(), 0, { throwOnError: true });
-
-    await manager!.stop(config().name);
-
-    expect(manager!.runtimes.has(config().name)).toBe(false);
-    expect(manager!.statuses.get(config().name)).toMatchObject({
-      status: "disconnected",
-      manualDisconnect: true,
-    });
-    expect(await manager!.connect(config())).toBeNull();
-    expect(
-      mock.emitted.some(
-        (event) => event.topic === "plugin.tunnels.tunnel_disconnected",
-      ),
-    ).toBe(false);
-  });
-
-  it("only shows a user the tunnels on hosts they can reach", async () => {
-    setup();
-    manager!.configs.set(config().name, config());
-    await manager!.connect(config(), 0, { throwOnError: true });
-
-    expect(Object.keys(await manager!.statusesFor("user-1"))).toEqual([
-      config().name,
-    ]);
-    expect(await manager!.statusesFor("user-2")).toEqual({});
-  });
-});
diff --git a/plugins/tunnels/tests/backend/migrations.test.ts b/plugins/tunnels/tests/backend/migrations.test.ts
deleted file mode 100644
index 2710a548a..000000000
--- a/plugins/tunnels/tests/backend/migrations.test.ts
+++ /dev/null
@@ -1,112 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { createTestDb, type TestDb } from "@termix/plugin-sdk/testing";
-import { pluginDir } from "./helpers";
-
-// c2s_tunnel_presets as core's SQLite bootstrap created it before 2.9.0.
-// Core never indexed it.
-const LEGACY_DDL = `
-  CREATE TABLE c2s_tunnel_presets (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL,
-    name TEXT NOT NULL,
-    config TEXT NOT NULL,
-    platform TEXT,
-    computer_name TEXT,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
-  );
-`;
-
-let db: TestDb | null = null;
-
-afterEach(() => {
-  db?.close();
-  db = null;
-});
-
-const tableExists = (name: string) =>
-  !!db!.sqlite
-    .prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?")
-    .get(name);
-
-describe("adopting c2s_tunnel_presets", () => {
-  it("keeps every existing row when the legacy table is there", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1'), ('user-2')");
-        sqlite.exec(LEGACY_DDL);
-        sqlite
-          .prepare(
-            "INSERT INTO c2s_tunnel_presets (user_id, name, config, platform, computer_name) VALUES (?, ?, ?, ?, ?)",
-          )
-          .run("user-1", "Laptop", '[{"scope":"c2s"}]', "win32", "laptop");
-        sqlite
-          .prepare(
-            "INSERT INTO c2s_tunnel_presets (user_id, name, config) VALUES (?, ?, ?)",
-          )
-          .run("user-2", "Desk", "[]");
-      },
-    });
-
-    expect(db.applied).toEqual(["0001_adopt_c2s_tunnel_presets"]);
-    expect(tableExists("c2s_tunnel_presets")).toBe(false);
-    expect(tableExists("p_tunnels_presets")).toBe(true);
-
-    expect(
-      db.sqlite
-        .prepare(
-          "SELECT user_id, name, config, platform, computer_name FROM p_tunnels_presets ORDER BY id",
-        )
-        .all(),
-    ).toEqual([
-      {
-        user_id: "user-1",
-        name: "Laptop",
-        config: '[{"scope":"c2s"}]',
-        platform: "win32",
-        computer_name: "laptop",
-      },
-      {
-        user_id: "user-2",
-        name: "Desk",
-        config: "[]",
-        platform: null,
-        computer_name: null,
-      },
-    ]);
-  });
-
-  it("creates the table fresh when there is no legacy one", async () => {
-    db = await createTestDb(pluginDir);
-
-    expect(tableExists("c2s_tunnel_presets")).toBe(false);
-    expect(tableExists("p_tunnels_presets")).toBe(true);
-    expect(db.sqlite.prepare("SELECT * FROM p_tunnels_presets").all()).toEqual(
-      [],
-    );
-  });
-
-  it("removes a user's presets when the user is deleted", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1'), ('user-2')");
-      },
-    });
-    const insert = db.sqlite.prepare(
-      "INSERT INTO p_tunnels_presets (user_id, name, config) VALUES (?, ?, '[]')",
-    );
-    insert.run("user-1", "Mine");
-    insert.run("user-2", "Theirs");
-
-    db.sqlite.exec("DELETE FROM users WHERE id = 'user-1'");
-
-    expect(
-      (
-        db.sqlite.prepare("SELECT name FROM p_tunnels_presets").all() as {
-          name: string;
-        }[]
-      ).map((row) => row.name),
-    ).toEqual(["Theirs"]);
-  });
-});
diff --git a/plugins/tunnels/tests/backend/reserved-names.test.ts b/plugins/tunnels/tests/backend/reserved-names.test.ts
deleted file mode 100644
index 05307cb6e..000000000
--- a/plugins/tunnels/tests/backend/reserved-names.test.ts
+++ /dev/null
@@ -1,59 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  RESERVED_TUNNEL_NAME_PREFIX,
-  buildWebEndpointTunnelName,
-  isReservedTunnelName,
-  parseReservedTunnelName,
-} from "../../src/backend/utils.js";
-
-describe("reserved tunnel names", () => {
-  it("builds a name from a host id and endpoint id", () => {
-    expect(buildWebEndpointTunnelName(7, "e1")).toBe("web:7:e1");
-  });
-
-  it("recognises its own names and nothing else", () => {
-    expect(isReservedTunnelName(buildWebEndpointTunnelName(7, "e1"))).toBe(
-      true,
-    );
-    expect(isReservedTunnelName("my-tunnel")).toBe(false);
-    expect(isReservedTunnelName("website")).toBe(false);
-    expect(isReservedTunnelName(RESERVED_TUNNEL_NAME_PREFIX)).toBe(true);
-  });
-
-  it("round-trips through parse", () => {
-    expect(
-      parseReservedTunnelName(buildWebEndpointTunnelName(7, "e1")),
-    ).toEqual({
-      hostId: 7,
-      endpointId: "e1",
-    });
-  });
-
-  it("keeps an endpoint id containing colons intact", () => {
-    // Endpoint ids are client-supplied strings with no character restriction,
-    // so splitting on the LAST colon would corrupt them. The host id segment
-    // is digits only, so splitting on the first colon after it is safe.
-    expect(parseReservedTunnelName("web:7:a:b:c")).toEqual({
-      hostId: 7,
-      endpointId: "a:b:c",
-    });
-  });
-
-  it("returns null for anything it cannot verify", () => {
-    // Callers use this for an ownership check, so null must mean "cannot
-    // verify" and they must fail closed. Never return a partial guess.
-    for (const name of [
-      "my-tunnel",
-      "web:",
-      "web:7",
-      "web::e1",
-      "web:abc:e1",
-      "web:-1:e1",
-      "web:0:e1",
-      "web:7:",
-      "web:7.5:e1",
-    ]) {
-      expect(parseReservedTunnelName(name)).toBeNull();
-    }
-  });
-});
diff --git a/plugins/tunnels/tests/backend/routes.test.ts b/plugins/tunnels/tests/backend/routes.test.ts
deleted file mode 100644
index cba2fa776..000000000
--- a/plugins/tunnels/tests/backend/routes.test.ts
+++ /dev/null
@@ -1,220 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { host, startServer, type TestServer } from "./helpers";
-
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-});
-
-const clientTunnel = (overrides: Record<string, unknown> = {}) => ({
-  scope: "c2s",
-  mode: "local",
-  sourcePort: 8080,
-  endpointPort: 5432,
-  maxRetries: 3,
-  retryInterval: 10,
-  autoStart: false,
-  ...overrides,
-});
-
-describe("client tunnel presets", () => {
-  it("creates, lists by name, updates and deletes the caller's presets", async () => {
-    server = await startServer();
-
-    const zulu = await server.request("POST", "/presets", {
-      body: {
-        name: " Zulu ",
-        config: [clientTunnel()],
-        platform: "linux",
-        computerName: "workstation",
-      },
-    });
-    expect(zulu.status).toBe(201);
-    expect(zulu.body).toMatchObject({
-      name: "Zulu",
-      config: [clientTunnel()],
-      platform: "linux",
-      computerName: "workstation",
-    });
-    await server.request("POST", "/presets", {
-      body: { name: "Alpha", config: [] },
-    });
-    await server.request("POST", "/presets", {
-      user: "user-2",
-      body: { name: "Other", config: [] },
-    });
-
-    const listed = await server.request("GET", "/presets");
-    expect(listed.body.map((p: { name: string }) => p.name)).toEqual([
-      "Alpha",
-      "Zulu",
-    ]);
-
-    const updated = await server.request("PUT", `/presets/${zulu.body.id}`, {
-      body: { name: "Yankee", config: [clientTunnel({ mode: "dynamic" })] },
-    });
-    expect(updated.status).toBe(200);
-    expect(updated.body.name).toBe("Yankee");
-    expect(updated.body.config[0].mode).toBe("dynamic");
-
-    const deleted = await server.request("DELETE", `/presets/${zulu.body.id}`);
-    expect(deleted.body).toEqual({ success: true });
-    expect(
-      (await server.request("GET", "/presets")).body.map(
-        (p: { name: string }) => p.name,
-      ),
-    ).toEqual(["Alpha"]);
-    expect(server.db.persisted).toBeGreaterThan(0);
-  });
-
-  it("rejects a duplicate name and a config that is not a client tunnel", async () => {
-    server = await startServer();
-    await server.request("POST", "/presets", {
-      body: { name: "Home", config: [] },
-    });
-
-    expect(
-      (
-        await server.request("POST", "/presets", {
-          body: { name: "Home", config: [] },
-        })
-      ).status,
-    ).toBe(409);
-
-    for (const config of [
-      [clientTunnel({ scope: "s2s" })],
-      [clientTunnel({ mode: "sideways" })],
-      [clientTunnel({ sourcePort: 70000 })],
-      [clientTunnel({ endpointPort: 0 })],
-      "nope",
-    ]) {
-      const res = await server.request("POST", "/presets", {
-        body: { name: "Bad", config },
-      });
-      expect(res.status).toBe(400);
-    }
-
-    // Dynamic mode has no destination port to check.
-    expect(
-      (
-        await server.request("POST", "/presets", {
-          body: {
-            name: "Socks",
-            config: [clientTunnel({ mode: "dynamic", endpointPort: 0 })],
-          },
-        })
-      ).status,
-    ).toBe(201);
-  });
-
-  it("never lets one user touch another user's preset", async () => {
-    server = await startServer();
-    const mine = await server.request("POST", "/presets", {
-      body: { name: "Mine", config: [] },
-    });
-
-    for (const [method, body] of [
-      ["PUT", { name: "Stolen" }],
-      ["DELETE", undefined],
-    ] as const) {
-      const res = await server.request(method, `/presets/${mine.body.id}`, {
-        user: "user-2",
-        body,
-      });
-      expect(res.status).toBe(404);
-    }
-    expect((await server.request("GET", "/presets")).body[0].name).toBe("Mine");
-  });
-});
-
-describe("tunnel control", () => {
-  it("refuses reserved names and a name that does not match its config", async () => {
-    server = await startServer();
-
-    const reserved = await server.request("POST", "/connect", {
-      body: { name: "web:7:e1", sourceHostId: 7, tunnelIndex: 0 },
-    });
-    expect(reserved.status).toBe(400);
-    expect(reserved.body.error).toMatch(/reserved/);
-
-    const mismatched = await server.request("POST", "/connect", {
-      body: {
-        name: "7::0::web::8080::db::5432",
-        sourceHostId: 7,
-        tunnelIndex: 0,
-        sourcePort: 9999,
-        endpointHost: "db",
-        endpointPort: 5432,
-      },
-    });
-    expect(mismatched.status).toBe(400);
-  });
-
-  it("refuses to connect through a host the caller cannot reach", async () => {
-    server = await startServer({ hosts: { "user-1": [host()] } });
-
-    const res = await server.request("POST", "/connect", {
-      user: "user-2",
-      body: {
-        name: "7::0::web::8080::db::5432",
-        sourceHostId: 7,
-        tunnelIndex: 0,
-        sourcePort: 8080,
-        endpointHost: "db",
-        endpointPort: 5432,
-      },
-    });
-    expect(res.status).toBe(403);
-    expect(server.mock.sshConnections).toEqual([]);
-  });
-
-  it("denies stopping someone else's on-demand tunnel by guessing its name", async () => {
-    server = await startServer({
-      hosts: { "user-1": [host()], "user-2": [] },
-    });
-
-    for (const path of ["/disconnect", "/cancel"]) {
-      const res = await server.request("POST", path, {
-        user: "user-2",
-        body: { tunnelName: "web:7:e1" },
-      });
-      expect(res.status).toBe(403);
-    }
-
-    const own = await server.request("POST", "/disconnect", {
-      body: { tunnelName: "web:7:e1" },
-    });
-    expect(own.status).toBe(200);
-  });
-
-  it("answers an empty status map and a 404 for a tunnel nobody can see", async () => {
-    server = await startServer();
-    expect((await server.request("GET", "/status")).body).toEqual({});
-    expect((await server.request("GET", "/status/nope")).status).toBe(404);
-  });
-});
-
-describe("permissions", () => {
-  it("answers 403 on every route without tunnels.use", async () => {
-    server = await startServer({ permissions: [] });
-
-    const routes: Array<[string, string, unknown?]> = [
-      ["GET", "/status"],
-      ["GET", "/status/stream"],
-      ["GET", "/status/some-tunnel"],
-      ["POST", "/connect", { name: "x", sourceHostId: 7, tunnelIndex: 0 }],
-      ["POST", "/disconnect", { tunnelName: "x" }],
-      ["POST", "/cancel", { tunnelName: "x" }],
-      ["GET", "/presets"],
-      ["POST", "/presets", { name: "x", config: [] }],
-      ["PUT", "/presets/1", { name: "x" }],
-      ["DELETE", "/presets/1"],
-    ];
-    for (const [method, path, body] of routes) {
-      const res = await server.request(method, path, { body });
-      expect(res.status, `${method} ${path}`).toBe(403);
-    }
-  });
-});
diff --git a/plugins/tunnels/tests/backend/service.test.ts b/plugins/tunnels/tests/backend/service.test.ts
deleted file mode 100644
index 32e3b8cc1..000000000
--- a/plugins/tunnels/tests/backend/service.test.ts
+++ /dev/null
@@ -1,175 +0,0 @@
-import { EventEmitter } from "node:events";
-import { PassThrough } from "node:stream";
-import { afterEach, describe, expect, it, vi } from "vitest";
-import {
-  createMockCtx,
-  type MockPluginContext,
-} from "@termix/plugin-sdk/testing";
-import { createTunnelManager } from "../../src/backend/manager.js";
-import {
-  createTunnelsService,
-  type TunnelsAccess,
-} from "../../src/backend/service.js";
-import { host, manifest, withHosts } from "./helpers";
-
-class FakeClient extends EventEmitter {
-  failForward = false;
-  forwardOut = vi.fn(
-    (
-      _srcIP: string,
-      _srcPort: number,
-      _host: string,
-      _port: number,
-      cb: (err: Error | undefined, stream?: PassThrough) => void,
-    ) => {
-      if (this.failForward)
-        cb(new Error("Channel open failure: connect failed"));
-      else cb(undefined, new PassThrough());
-    },
-  );
-  forwardIn = vi.fn();
-  unforwardIn = vi.fn();
-  end = vi.fn(() => this.emit("close"));
-}
-
-let manager: ReturnType<typeof createTunnelManager> | null = null;
-
-afterEach(() => {
-  manager?.dispose();
-  manager = null;
-});
-
-function setup(): {
-  mock: MockPluginContext;
-  client: FakeClient;
-  service: TunnelsAccess;
-} {
-  const client = new FakeClient();
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    actor: "user-1",
-    sshClient: client,
-  });
-  withHosts(mock, { "user-1": [host()], "user-2": [] });
-  manager = createTunnelManager(mock.ctx);
-  return { mock, client, service: createTunnelsService(mock.ctx, manager) };
-}
-
-const target = { targetHost: "127.0.0.1", targetPort: 8006 };
-
-describe("tunnels.access forward()", () => {
-  it("resolves with the bound port once the target answered a probe", async () => {
-    const { service, client } = setup();
-    const handle = await service.forward(7, target, { name: "web:7:e1" });
-
-    expect(handle.bindHost).toBe("127.0.0.1");
-    expect(handle.bindPort).toBeGreaterThan(0);
-    expect(client.forwardOut).toHaveBeenCalledWith(
-      "127.0.0.1",
-      0,
-      "127.0.0.1",
-      8006,
-      expect.any(Function),
-    );
-    await handle.close();
-    expect(manager!.runtimes.has("web:7:e1")).toBe(false);
-  });
-
-  it("reuses a live forward and reopens one whose target changed", async () => {
-    const { service, mock } = setup();
-    const first = await service.forward(7, target, { name: "web:7:e1" });
-    const again = await service.forward(7, target, { name: "web:7:e1" });
-    expect(again.bindPort).toBe(first.bindPort);
-    expect(mock.sshConnections).toHaveLength(1);
-
-    await service.forward(
-      7,
-      { ...target, targetPort: 9000 },
-      { name: "web:7:e1" },
-    );
-    expect(mock.sshConnections).toHaveLength(2);
-  });
-
-  it("rejects with the real reason and leaves nothing behind when the target is closed", async () => {
-    const { service, client } = setup();
-    client.failForward = true;
-
-    await expect(
-      service.forward(7, target, { name: "web:7:e1" }),
-    ).rejects.toThrow(/connect failed/);
-    expect(manager!.runtimes.has("web:7:e1")).toBe(false);
-  });
-
-  it("refuses a host the caller cannot reach and a name that is not reserved", async () => {
-    const { service, mock } = setup();
-
-    await mock.ctx.asUser("user-2", async () => {
-      await expect(service.forward(7, target)).rejects.toThrow(/access denied/);
-    });
-    await expect(
-      service.forward(7, target, { name: "my-tunnel" }),
-    ).rejects.toThrow(/Forward names/);
-    await expect(
-      service.forward(7, target, { name: "web:8:e1" }),
-    ).rejects.toThrow(/Forward names/);
-    expect(mock.sshConnections).toEqual([]);
-  });
-});
-
-describe("tunnels.access start/stop/status", () => {
-  const saved = {
-    scope: "s2s",
-    mode: "local",
-    sourcePort: 0,
-    endpointHost: "127.0.0.1",
-    endpointPort: 9,
-    maxRetries: 3,
-    retryInterval: 5,
-    autoStart: false,
-  };
-  const name = "7::0::web::0::127.0.0.1::9";
-
-  it("starts a host's saved tunnel by name and stops it again", async () => {
-    const { service, mock } = setup();
-    await mock.ctx.settings.setHost(7, "enableTunnel", true);
-    await mock.ctx.settings.setHost(7, "tunnelConnections", [saved]);
-
-    await service.start(name);
-    await vi.waitFor(async () =>
-      expect((await service.status(name))?.status).toBe("connected"),
-    );
-    expect(Object.keys(await service.list())).toEqual([name]);
-
-    await service.stop(name);
-    expect((await service.status(name))?.status).toBe("disconnected");
-  });
-
-  it("refuses a name that matches no saved tunnel", async () => {
-    const { service, mock } = setup();
-    await mock.ctx.settings.setHost(7, "enableTunnel", false);
-    await mock.ctx.settings.setHost(7, "tunnelConnections", [saved]);
-
-    await expect(service.start(name)).rejects.toThrow(/not configured/);
-    await expect(service.start("nope")).rejects.toThrow(/not configured/);
-  });
-
-  it("hides a tunnel from a user who cannot reach its host", async () => {
-    const { service, mock } = setup();
-    await mock.ctx.settings.setHost(7, "enableTunnel", true);
-    await mock.ctx.settings.setHost(7, "tunnelConnections", [saved]);
-    await service.start(name);
-    // The fake context tracks one actor globally, so let the connect settle
-    // before switching users.
-    await vi.waitFor(async () =>
-      expect((await service.status(name))?.status).toBe("connected"),
-    );
-
-    await mock.ctx.asUser("user-2", async () => {
-      expect(await service.status(name)).toBeNull();
-      expect(await service.list()).toEqual({});
-      await expect(service.stop(name)).rejects.toThrow(/Access denied/);
-    });
-  });
-});
diff --git a/plugins/tunnels/tests/frontend/activate.test.tsx b/plugins/tunnels/tests/frontend/activate.test.tsx
deleted file mode 100644
index 66315baf7..000000000
--- a/plugins/tunnels/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,170 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { fireEvent, screen, waitFor } from "@testing-library/react";
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-const declared = (views?: Array<{ id: string }>) =>
-  (views ?? []).map((view) => view.id).sort();
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-const savedTunnel = {
-  scope: "s2s",
-  mode: "local",
-  sourcePort: 8080,
-  endpointHost: "db",
-  endpointPort: 5432,
-  maxRetries: 3,
-  retryInterval: 10,
-  autoStart: false,
-};
-
-const webHost = {
-  id: "7",
-  name: "web",
-  ip: "10.0.0.5",
-  port: 22,
-  username: "root",
-  enableSsh: true,
-  pluginSettings: {
-    tunnels: { enableTunnel: true, tunnelConnections: [savedTunnel] },
-  },
-};
-
-function stubApi(overrides: Partial<PluginApiClient> = {}): PluginApiClient {
-  return {
-    get: vi.fn(async () => ({ data: {} })),
-    post: vi.fn(async () => ({ data: {} })),
-    put: vi.fn(async () => ({ data: {} })),
-    patch: vi.fn(async () => ({ data: {} })),
-    delete: vi.fn(async () => ({ data: {} })),
-    ...overrides,
-  } as PluginApiClient;
-}
-
-describe(`${manifest.id} activate`, () => {
-  it("registers only views its manifest declares", async () => {
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: stubApi(),
-    });
-    const contributes = manifest.contributes as unknown as Record<
-      string,
-      Array<{ id: string }> | undefined
-    >;
-    const tabs = declared(contributes.tabs);
-    const panels = [...declared(contributes.panels), ...tabs];
-    expect(rendered.registered.tabs()).toEqual(["tunnel"]);
-    for (const id of rendered.registered.panels()) expect(panels).toContain(id);
-    expect(rendered.registered.hostEditorSections()).toEqual(["tunnels"]);
-    expect(rendered.registered.hostActions()).toEqual([
-      expect.objectContaining({ id: "tunnel", tabType: "tunnel" }),
-    ]);
-    expect(rendered.registered.actions().sort()).toEqual(["tunnels.open"]);
-    expect(rendered.registered.slot("dashboard.counters")).toEqual([
-      "tunnels.open",
-    ]);
-    const [rail] = rendered.registered.railItems();
-    expect(rail).toMatchObject({
-      id: "port-forwarding",
-      permission: "tunnels.use",
-    });
-  });
-
-  it("removes everything it registered on deactivate", async () => {
-    const app = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: stubApi(),
-    });
-    await app.deactivate();
-    expect(app.registered.tabs()).toEqual([]);
-    expect(app.registered.panels()).toEqual([]);
-    expect(app.registered.railItems()).toEqual([]);
-    expect(app.registered.hostActions()).toEqual([]);
-    expect(app.registered.hostEditorSections()).toEqual([]);
-    expect(app.registered.actions()).toEqual([]);
-  });
-});
-
-describe("tunnel tab", () => {
-  it("lists a host's saved tunnels and starts one by name through the plugin api", async () => {
-    const api = stubApi();
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api,
-      hosts: [webHost],
-    });
-
-    rendered.renderTab("tunnel", { host: webHost });
-    expect(await screen.findByText("db:5432")).toBeTruthy();
-
-    // "tunnels.start" is still a core string, reached through the fallback.
-    fireEvent.click(screen.getByText(/start/i));
-    await waitFor(() =>
-      expect(api.post).toHaveBeenCalledWith(
-        "/connect",
-        expect.objectContaining({
-          name: "7::0::web::8080::db::5432",
-          sourceHostId: 7,
-          tunnelIndex: 0,
-          endpointHost: "db",
-        }),
-      ),
-    );
-  });
-});
-
-describe("host editor section", () => {
-  it("writes the tunnel list into the form's tunnels plugin settings", async () => {
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: stubApi(),
-    });
-    let form: Record<string, unknown> = {
-      name: "web",
-      pluginSettings: { tunnels: { enableTunnel: true } },
-    };
-    const updateForm = vi.fn(
-      (
-        patch: (current: Record<string, unknown>) => Record<string, unknown>,
-      ) => {
-        form = patch(form);
-      },
-    );
-
-    rendered.renderHostEditorSection("tunnels", {
-      form,
-      setField: vi.fn(),
-      updateForm,
-      protocols: { ssh: true },
-    });
-    fireEvent.click(screen.getByText(locales.hosts.addTunnelBtn));
-
-    const settings = (form.pluginSettings as Record<string, unknown>)
-      .tunnels as { enableTunnel: boolean; tunnelConnections: unknown[] };
-    expect(settings.enableTunnel).toBe(true);
-    expect(settings.tunnelConnections).toHaveLength(1);
-    expect(settings.tunnelConnections[0]).toMatchObject({
-      scope: "s2s",
-      mode: "local",
-    });
-  });
-});
diff --git a/plugins/tunnels/tests/frontend/api.test.ts b/plugins/tunnels/tests/frontend/api.test.ts
deleted file mode 100644
index 0574895f5..000000000
--- a/plugins/tunnels/tests/frontend/api.test.ts
+++ /dev/null
@@ -1,101 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import {
-  mergeTunnelStatuses,
-  parseServerSentEvents,
-  setTunnelsApi,
-  subscribeTunnelStatuses,
-} from "../../src/frontend/api";
-
-afterEach(() => {
-  setTunnelsApi(null);
-});
-
-describe("mergeTunnelStatuses", () => {
-  it("keeps local state when a remote tunnel with the same name differs", () => {
-    // Controls always target the local backend, so its view wins.
-    expect(
-      mergeTunnelStatuses(
-        { shared: { connected: true, status: "connected" } },
-        {
-          shared: { connected: false, status: "disconnected" },
-          remoteOnly: { connected: true, status: "connected" },
-        },
-      ),
-    ).toEqual({
-      shared: { connected: true, status: "connected" },
-      remoteOnly: { connected: true, status: "connected" },
-    });
-  });
-});
-
-describe("parseServerSentEvents", () => {
-  it("splits complete events and hands back a partial one", () => {
-    const events: Array<{ event: string; data: string }> = [];
-    const rest = parseServerSentEvents(
-      ': keepalive\n\nevent: statuses\ndata: {"a":1}\n\nevent: stat',
-      (event) => events.push(event),
-    );
-    expect(events).toEqual([{ event: "statuses", data: '{"a":1}' }]);
-    expect(rest).toBe("event: stat");
-  });
-});
-
-function streamOf(chunks: string[]): Response {
-  const encoder = new TextEncoder();
-  const body = new ReadableStream<Uint8Array>({
-    start(controller) {
-      for (const chunk of chunks) controller.enqueue(encoder.encode(chunk));
-    },
-  });
-  return { ok: true, body } as unknown as Response;
-}
-
-describe("subscribeTunnelStatuses", () => {
-  it("streams statuses from the plugin's event stream and merges remote ones", async () => {
-    setTunnelsApi({
-      defaults: { baseURL: "http://localhost:30001" },
-    } as never);
-    const fetchImpl = vi.fn(async (_url: string) =>
-      streamOf([
-        `event: statuses\ndata: ${JSON.stringify({ shared: { connected: true, status: "connected" } })}\n\n`,
-      ]),
-    );
-    const onStatuses = vi.fn();
-
-    const stop = subscribeTunnelStatuses(onStatuses, undefined, {
-      fetchImpl: fetchImpl as unknown as typeof fetch,
-      fetchRemote: async () => ({
-        shared: { connected: false, status: "disconnected" },
-        remoteOnly: { connected: true, status: "connected" },
-      }),
-    });
-
-    await vi.waitFor(() =>
-      expect(onStatuses).toHaveBeenLastCalledWith({
-        shared: { connected: true, status: "connected" },
-        remoteOnly: { connected: true, status: "connected" },
-      }),
-    );
-    expect(fetchImpl.mock.calls[0][0]).toBe(
-      "http://localhost:30001/plugin-api/tunnels/status/stream",
-    );
-    stop();
-  });
-
-  it("falls back to polling the status route when there is no stream url", async () => {
-    const get = vi.fn(async () => ({
-      data: { t: { connected: true, status: "connected" } },
-    }));
-    setTunnelsApi({ get } as never);
-    const onStatuses = vi.fn();
-
-    const stop = subscribeTunnelStatuses(onStatuses);
-    await vi.waitFor(() =>
-      expect(onStatuses).toHaveBeenCalledWith({
-        t: { connected: true, status: "connected" },
-      }),
-    );
-    expect(get).toHaveBeenCalledWith("/status");
-    stop();
-  });
-});
diff --git a/plugins/tunnels/tests/frontend/auth-prompts.test.tsx b/plugins/tunnels/tests/frontend/auth-prompts.test.tsx
deleted file mode 100644
index 198a8e985..000000000
--- a/plugins/tunnels/tests/frontend/auth-prompts.test.tsx
+++ /dev/null
@@ -1,84 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { act, fireEvent, screen } from "@testing-library/react";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-let rendered: RenderedPluginApp | null = null;
-const original = window.electronAPI;
-afterEach(async () => {
-  await act(async () => {
-    await rendered?.deactivate();
-  });
-  rendered = null;
-  window.electronAPI = original;
-});
-
-describe("tunnel prompt overlay", () => {
-  it("queues challenges, clears the previous code, and cancels on plugin disposal", async () => {
-    type Event = Parameters<
-      Parameters<typeof window.electronAPI.onC2SAuthPrompt>[0]
-    >[0];
-    let receive!: (event: Event) => void;
-    const answer = vi.fn().mockResolvedValue(true);
-    const unsubscribe = vi.fn();
-    window.electronAPI = {
-      ...original,
-      answerC2SAuth: answer,
-      onC2SAuthPrompt: (fn) => {
-        receive = fn;
-        return unsubscribe;
-      },
-    };
-    rendered = await renderWithApp(plugin, {
-      manifest: manifestJson as unknown as PluginManifest,
-      locales,
-    });
-    rendered.renderSlot("shell.overlay");
-    act(() => {
-      receive({
-        id: "one",
-        tunnelName: "SOCKS",
-        request: { kind: "totp", prompt: "Code:", retry: false },
-      });
-      receive({
-        id: "two",
-        tunnelName: "Other",
-        request: { kind: "totp", prompt: "Code:", retry: true },
-      });
-    });
-    const input = screen.getByLabelText("Authentication response");
-    expect(input.getAttribute("type")).toBe("password");
-    fireEvent.change(input, { target: { value: "123456" } });
-    fireEvent.click(screen.getByText("Continue"));
-    expect(answer).toHaveBeenCalledWith("one", "123456");
-    expect(
-      (screen.getByLabelText("Authentication response") as HTMLInputElement)
-        .value,
-    ).toBe("");
-    expect(screen.getByRole("alert").textContent).toContain("previous code");
-    act(() => receive({ id: "two", closed: true }));
-    expect(screen.queryByRole("dialog")).toBeNull();
-    act(() =>
-      receive({
-        id: "three",
-        request: {
-          kind: "input",
-          prompt: "Password:",
-          echo: false,
-          isPush: false,
-        },
-      }),
-    );
-    await act(async () => {
-      await rendered!.deactivate();
-    });
-    rendered = null;
-    expect(answer).toHaveBeenCalledWith("three", null);
-    expect(unsubscribe).toHaveBeenCalledOnce();
-  });
-});
diff --git a/plugins/tunnels/tests/frontend/c2s-tunnel-config-utils.test.ts b/plugins/tunnels/tests/frontend/c2s-tunnel-config-utils.test.ts
deleted file mode 100644
index ce208d14d..000000000
--- a/plugins/tunnels/tests/frontend/c2s-tunnel-config-utils.test.ts
+++ /dev/null
@@ -1,151 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  normalizeClientTunnel,
-  stripClientTunnelDiagnostics,
-  type ClientTunnel,
-} from "../../src/frontend/c2s-tunnel-config-utils";
-
-describe("C2STunnelPresetManager tunnel normalization", () => {
-  it("preserves explicit local and remote address fields in saved config", () => {
-    const tunnel = normalizeClientTunnel({
-      scope: "c2s",
-      mode: "local",
-      tunnelType: "local",
-      localAddress: " 127.0.0.2 ",
-      remoteAddress: " 10.10.0.25 ",
-      sourceHostId: 42,
-      sourceHostSyncId: "host-sync-42",
-      sourcePort: 8080,
-      endpointPort: 5432,
-      maxRetries: 3,
-      retryInterval: 10,
-      autoStart: true,
-    });
-
-    const saved = stripClientTunnelDiagnostics(tunnel);
-
-    expect(saved).toMatchObject({
-      localAddress: "127.0.0.2",
-      remoteAddress: "10.10.0.25",
-      bindHost: "127.0.0.2",
-      targetHost: "10.10.0.25",
-      sourceHostId: 42,
-      sourceHostSyncId: "host-sync-42",
-      sourcePort: 8080,
-      endpointPort: 5432,
-    });
-  });
-
-  it("preserves source host sync identity for cross-device C2S presets", () => {
-    const tunnel = normalizeClientTunnel({
-      scope: "c2s",
-      mode: "local",
-      tunnelType: "local",
-      localAddress: "127.0.0.1",
-      remoteAddress: "10.0.0.25",
-      sourceHostId: 5,
-      sourceHostSyncId: "shared-host-sync-id",
-      sourcePort: 8080,
-      endpointPort: 80,
-      maxRetries: 3,
-      retryInterval: 10,
-      autoStart: false,
-    });
-
-    const saved = stripClientTunnelDiagnostics(tunnel);
-
-    expect(saved).toMatchObject({
-      sourceHostId: 5,
-      sourceHostSyncId: "shared-host-sync-id",
-    });
-  });
-
-  it("normalizes legacy bindHost and targetHost configs into address fields", () => {
-    const tunnel = normalizeClientTunnel({
-      scope: "c2s",
-      mode: "local",
-      tunnelType: "local",
-      bindHost: "127.0.0.3",
-      targetHost: "172.16.1.50",
-      sourceHostId: 7,
-      sourcePort: 9000,
-      endpointPort: 9443,
-      maxRetries: 1,
-      retryInterval: 5,
-      autoStart: false,
-    });
-
-    expect(tunnel).toMatchObject({
-      localAddress: "127.0.0.3",
-      remoteAddress: "172.16.1.50",
-      bindHost: "127.0.0.3",
-      targetHost: "172.16.1.50",
-    });
-  });
-
-  it("preserves tunnel name spacing while editing", () => {
-    const tunnel = normalizeClientTunnel({
-      scope: "c2s",
-      mode: "local",
-      tunnelType: "local",
-      displayName: "Axolot ",
-    });
-
-    expect(tunnel.displayName).toBe("Axolot ");
-  });
-
-  it("trims tunnel names only when saving", () => {
-    const tunnel = normalizeClientTunnel({
-      scope: "c2s",
-      mode: "local",
-      tunnelType: "local",
-      localAddress: "127.0.0.1",
-      remoteAddress: "10.0.0.10",
-      sourcePort: 8080,
-      endpointPort: 80,
-      displayName: " Axolot MO ",
-    });
-
-    const saved = stripClientTunnelDiagnostics(tunnel);
-
-    expect(saved).toMatchObject({
-      displayName: "Axolot MO",
-    });
-  });
-
-  it("removes diagnostics without dropping routing fields", () => {
-    const tunnel: ClientTunnel = {
-      scope: "c2s",
-      mode: "local",
-      tunnelType: "local",
-      localAddress: "127.0.0.1",
-      remoteAddress: "10.0.0.10",
-      bindHost: "127.0.0.1",
-      targetHost: "10.0.0.10",
-      sourceHostId: 1,
-      sourcePort: 8080,
-      endpointPort: 80,
-      endpointHost: "edge",
-      maxRetries: 3,
-      retryInterval: 10,
-      autoStart: false,
-      displayName: "web",
-      lastStartedAt: "2026-07-20T00:00:00.000Z",
-      lastTestedAt: "2026-07-20T00:01:00.000Z",
-      lastError: "previous error",
-    };
-
-    const saved = stripClientTunnelDiagnostics(tunnel);
-
-    expect(saved).not.toHaveProperty("lastStartedAt");
-    expect(saved).not.toHaveProperty("lastTestedAt");
-    expect(saved).not.toHaveProperty("lastError");
-    expect(saved).toMatchObject({
-      localAddress: "127.0.0.1",
-      remoteAddress: "10.0.0.10",
-      sourceHostId: 1,
-      sourcePort: 8080,
-      endpointPort: 80,
-    });
-  });
-});
diff --git a/plugins/tunnels/tests/frontend/tunnel-form-utils.test.ts b/plugins/tunnels/tests/frontend/tunnel-form-utils.test.ts
deleted file mode 100644
index af6434bd4..000000000
--- a/plugins/tunnels/tests/frontend/tunnel-form-utils.test.ts
+++ /dev/null
@@ -1,62 +0,0 @@
-import { describe, it, expect } from "vitest";
-import {
-  getTunnelTypeForMode,
-  getTunnelPortLabels,
-  getTunnelModeDescription,
-} from "../../src/frontend/tunnel-form-utils";
-
-// A fake translate that echoes the key plus any interpolation args so we can
-// assert which translation key + payload the helpers chose.
-const t = (key: string, opts?: Record<string, string | number>) =>
-  opts ? `${key}:${JSON.stringify(opts)}` : key;
-
-describe("getTunnelTypeForMode", () => {
-  it("maps remote to remote and everything else to local", () => {
-    expect(getTunnelTypeForMode("remote")).toBe("remote");
-    expect(getTunnelTypeForMode("local")).toBe("local");
-    expect(getTunnelTypeForMode("dynamic")).toBe("local");
-  });
-});
-
-describe("getTunnelPortLabels", () => {
-  it("labels client local mode source/endpoint ports", () => {
-    const labels = getTunnelPortLabels("client", "local", t);
-    expect(labels.sourcePortLabel).toBe("tunnels.localPort");
-    expect(labels.endpointPortLabel).toBe("tunnels.destinationPort");
-  });
-
-  it("swaps labels for client remote mode", () => {
-    const labels = getTunnelPortLabels("client", "remote", t);
-    expect(labels.sourcePortLabel).toBe("tunnels.remotePort");
-    expect(labels.endpointPortLabel).toBe("tunnels.localPort");
-  });
-
-  it("uses host/endpoint labels in server scope", () => {
-    const labels = getTunnelPortLabels("server", "local", t);
-    expect(labels.sourcePortLabel).toBe("tunnels.currentHostPort");
-    expect(labels.endpointPortLabel).toBe("tunnels.endpointPort");
-  });
-});
-
-describe("getTunnelModeDescription", () => {
-  const ports = { sourcePort: 8080, endpointPort: 9090 };
-
-  it("selects the client dynamic description with only the source port", () => {
-    const desc = getTunnelModeDescription("client", "dynamic", ports, t);
-    expect(desc).toContain("tunnels.forwardDescriptionClientDynamic");
-    expect(desc).toContain("8080");
-    expect(desc).not.toContain("9090");
-  });
-
-  it("selects the client local description with both ports", () => {
-    const desc = getTunnelModeDescription("client", "local", ports, t);
-    expect(desc).toContain("tunnels.forwardDescriptionClientLocal");
-    expect(desc).toContain("8080");
-    expect(desc).toContain("9090");
-  });
-
-  it("selects the server remote description", () => {
-    const desc = getTunnelModeDescription("server", "remote", ports, t);
-    expect(desc).toContain("tunnels.forwardDescriptionServerRemote");
-  });
-});
diff --git a/plugins/tunnels/tests/frontend/tunnel-naming.test.ts b/plugins/tunnels/tests/frontend/tunnel-naming.test.ts
deleted file mode 100644
index 395b9ba7b..000000000
--- a/plugins/tunnels/tests/frontend/tunnel-naming.test.ts
+++ /dev/null
@@ -1,52 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  clientTunnelName,
-  serverTunnelName,
-} from "../../src/shared/tunnel-naming";
-import { connectRequestFor } from "../../src/frontend/host-tunnels";
-
-const host = { id: "7", name: "web", username: "root", ip: "10.0.0.5" };
-const tunnel = {
-  scope: "s2s" as const,
-  mode: "local" as const,
-  sourcePort: 8080,
-  endpointHost: " db ",
-  endpointPort: 5432,
-  maxRetries: 3,
-  retryInterval: 10,
-  autoStart: false,
-};
-
-describe("tunnel names", () => {
-  it("builds a server tunnel name the connect request carries unchanged", () => {
-    const name = serverTunnelName(host, 0, tunnel);
-    expect(name).toBe("7::0::web::8080::db::5432");
-    const request = connectRequestFor(host, 0, tunnel);
-    expect(request.name).toBe(name);
-    // The backend checks the name against these fields, so they must agree.
-    expect(request.endpointHost).toBe("db");
-    expect(request.sourceHostId).toBe(7);
-  });
-
-  it("falls back to user@ip for an unnamed host", () => {
-    expect(serverTunnelName({ ...host, name: "" }, 1, tunnel)).toBe(
-      "7::1::root@10.0.0.5::8080::db::5432",
-    );
-  });
-
-  it("names a client tunnel the way the desktop app tracks it", () => {
-    expect(
-      clientTunnelName(
-        {
-          sourceHostId: 3,
-          mode: "remote",
-          localAddress: "",
-          remoteAddress: "10.0.0.1",
-          sourcePort: 9000,
-          endpointPort: 80,
-        },
-        2,
-      ),
-    ).toBe("c2s::2::3::remote::127.0.0.1::10.0.0.1::9000::80");
-  });
-});
diff --git a/plugins/tunnels/tsconfig.json b/plugins/tunnels/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/tunnels/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/tunnels/vitest.config.ts b/plugins/tunnels/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/tunnels/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/vault/CHANGELOG.md b/plugins/vault/CHANGELOG.md
deleted file mode 100644
index 7602aa48b..000000000
--- a/plugins/vault/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Adds the Vault login type. Termix signs you in to Vault with OIDC in the browser and gets a short-lived SSH certificate from Vault's SSH secrets engine.
diff --git a/plugins/vault/README.md b/plugins/vault/README.md
deleted file mode 100644
index 753e7820b..000000000
--- a/plugins/vault/README.md
+++ /dev/null
@@ -1,38 +0,0 @@
-# HashiCorp Vault
-
-Connect to hosts with short-lived SSH certificates from HashiCorp Vault, after signing in to Vault with OIDC.
-
-## Features
-
-- Adds the Vault login type to the host editor.
-- Signs you in to Vault with OIDC in the browser.
-- Has Vault's SSH secrets engine sign a fresh key and keeps the certificate until it expires.
-- Never stores a Vault token, AppRole secret or long-lived key.
-
-## Setup
-
-A profile holds the Vault address and namespace, the OIDC mount and role, the SSH secrets mount and signer role, the valid principals and the key type. Pick Vault as the login type in the host editor, then choose or create a profile there. Profiles sync between the desktop app and a server.
-
-## Settings
-
-### Admin
-
-- Redirect URI: add `<base URL>/plugin-api/vault/oidc/callback` to `allowed_redirect_uris` in each Vault OIDC role.
-- Use the old redirect URI: keep sending the 2.8 URI `<base URL>/vault/oidc/callback`. Upgraded installs keep this on until you turn it off.
-
-### Host
-
-- Vault signer profile: the profile this host uses.
-
-## Permissions
-
-- `vault.use`: Sign in to hosts with Vault. Admins and users have it by default.
-- `vault.share`: Share Vault profiles with everyone. Only admins have it by default.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/vault/locales/en.json b/plugins/vault/locales/en.json
deleted file mode 100644
index a8c2bca09..000000000
--- a/plugins/vault/locales/en.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Vault Signer Profile",
-    "selectProfile": "Select a Vault profile...",
-    "hint": "Settings come from the shared profile; you'll sign in to Vault via OIDC when you connect. No secrets are stored.",
-    "docs": "View docs",
-    "sharedProfile": "{{name}} (shared)"
-  },
-  "profiles": {
-    "new": "New profile",
-    "manage": "Manage Vault profiles",
-    "name": "Friendly Name",
-    "vaultAddr": "Vault Address",
-    "namespace": "Namespace",
-    "oidcMount": "OIDC Auth Mount",
-    "oidcRole": "OIDC Role",
-    "sshMount": "SSH Secrets Mount",
-    "sshRole": "SSH Signer Role",
-    "validPrincipals": "Valid Principals",
-    "keyType": "Ephemeral Key Type",
-    "shareWithAll": "Share with all users",
-    "create": "Create profile",
-    "created": "Vault profile created",
-    "saved": "Vault profile saved",
-    "deleted": "Vault profile deleted",
-    "saveFailed": "Failed to save Vault profile",
-    "deleteFailed": "Failed to delete Vault profile",
-    "save": "Save profile",
-    "validationError": "Name, Vault address and SSH signer role are required",
-    "none": "No Vault profiles yet.",
-    "sharedBadge": "shared",
-    "edit": "Edit",
-    "delete": "Delete"
-  },
-  "hosts": {
-    "filterAuthVault": "Vault"
-  },
-  "dialog": {
-    "title": "Vault sign-in required",
-    "description": "A window has opened to sign in to HashiCorp Vault. Complete the sign-in there; this connection will continue automatically.",
-    "failed": "Vault authentication failed. Please try again.",
-    "reopen": "Reopen sign-in window"
-  },
-  "permissions": {
-    "use": {
-      "title": "Use Vault SSH signing",
-      "description": "Create Vault signer profiles and connect to hosts that use Vault."
-    },
-    "share": {
-      "title": "Share Vault profiles",
-      "description": "Mark a Vault signer profile as shared so every user can pick it."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "Redirect URI",
-      "description": "Add this URL to allowed_redirect_uris in each Vault OIDC role that Termix signs in with."
-    },
-    "legacyCallback": {
-      "label": "Use the old redirect URI",
-      "description": "Keep sending /vault/oidc/callback, the redirect URI used before 2.9. Turn this off once your Vault roles allow the new one."
-    },
-    "host": {
-      "profileId": {
-        "label": "Vault signer profile"
-      }
-    }
-  },
-  "plugin": {
-    "name": "HashiCorp Vault"
-  }
-}
diff --git a/plugins/vault/locales/translated/af_ZA.json b/plugins/vault/locales/translated/af_ZA.json
deleted file mode 100644
index 10e3c5676..000000000
--- a/plugins/vault/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Kluis Ondertekenaar Profiel",
-    "selectProfile": "Kies 'n kluisprofiel...",
-    "hint": "Instellings kom van die gedeelde profiel; jy sal by Vault aanmeld via OIDC wanneer jy koppel. Geen geheime word gestoor nie.",
-    "docs": "Bekyk dokumente",
-    "sharedProfile": "{{name}} (gedeel)"
-  },
-  "profiles": {
-    "new": "Nuwe profiel",
-    "manage": "Bestuur Vault-profiele",
-    "name": "Vriendelike Naam",
-    "vaultAddr": "Kluisadres",
-    "namespace": "Naamruimte",
-    "oidcMount": "OIDC-magtigingsmontering",
-    "oidcRole": "OIDC-rol",
-    "sshMount": "SSH-geheime berg",
-    "sshRole": "SSH-ondertekenaarrol",
-    "validPrincipals": "Geldige Prinsipale",
-    "keyType": "Efemere Sleuteltipe",
-    "shareWithAll": "Deel met alle gebruikers",
-    "create": "Skep profiel",
-    "created": "Kluisprofiel geskep",
-    "saved": "Kluisprofiel gestoor",
-    "deleted": "Kluisprofiel uitgevee",
-    "saveFailed": "Kon nie kluisprofiel stoor nie",
-    "deleteFailed": "Kon nie kluisprofiel uitvee nie",
-    "save": "Stoor profiel",
-    "validationError": "Naam, kluisadres en SSH-ondertekenaarsrol word vereis",
-    "none": "Geen Vault-profiele nog nie.",
-    "sharedBadge": "gedeel",
-    "edit": "Wysig",
-    "delete": "Vee uit"
-  },
-  "hosts": {
-    "filterAuthVault": "Kluis"
-  },
-  "dialog": {
-    "title": "Kluisaanmelding vereis",
-    "description": "'n Venster het oopgemaak om by HashiCorp Vault aan te meld. Voltooi die aanmelding daar; hierdie verbinding sal outomaties voortgaan.",
-    "failed": "Kluisverifikasie het misluk. Probeer asseblief weer.",
-    "reopen": "Maak aanmeldvenster weer oop"
-  },
-  "permissions": {
-    "use": {
-      "title": "Gebruik Vault SSH-ondertekening",
-      "description": "Skep Vault-ondertekenaarsprofiele en koppel aan gashere wat Vault gebruik."
-    },
-    "share": {
-      "title": "Deel Vault-profiele",
-      "description": "Merk 'n kluisondertekenaarsprofiel as gedeel sodat elke gebruiker dit kan kies."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "Herlei URI",
-      "description": "Voeg hierdie URL by allowed_redirect_uris in elke Vault OIDC-rol waarmee Termix aanmeld."
-    },
-    "legacyCallback": {
-      "label": "Gebruik die ou aanstuur-URI",
-      "description": "Hou aan om /vault/oidc/callback te stuur, die aanstuur-URI wat voor 2.9 gebruik is. Skakel dit af sodra jou Vault-rolle die nuwe een toelaat."
-    },
-    "host": {
-      "profileId": {
-        "label": "Kluisondertekenaarprofiel"
-      }
-    }
-  },
-  "plugin": {
-    "name": "HashiCorp-kluis"
-  }
-}
diff --git a/plugins/vault/locales/translated/ar_SA.json b/plugins/vault/locales/translated/ar_SA.json
deleted file mode 100644
index 4b6f70ac5..000000000
--- a/plugins/vault/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "ملف توقيع Vault",
-    "selectProfile": "اختيار ملف توقيع Vault...",
-    "hint": "تأتي الإعدادات من الملف المشترك؛ ستقوم بتسجيل الدخول إلى Vault عبر OIDC عند الاتصال. لا يتم تخزين أي أسرار.",
-    "docs": "عرض المستندات",
-    "sharedProfile": "{{name}} (مشترك)"
-  },
-  "profiles": {
-    "new": "ملف جديد",
-    "manage": "إدارة ملفات Vault",
-    "name": "الاسم المألوف",
-    "vaultAddr": "عنوان Vault",
-    "namespace": "مساحة الاسم",
-    "oidcMount": "تثبيت مصادقة OIDC",
-    "oidcRole": "دور OIDC",
-    "sshMount": "تثبيت أسرار SSH",
-    "sshRole": "دور موقع SSH",
-    "validPrincipals": "المستخدمون المسموح بهم",
-    "keyType": "نوع المفتاح المؤقت",
-    "shareWithAll": "مشاركة مع جميع المستخدمين",
-    "create": "إنشاء ملف تعريف",
-    "created": "تم إنشاء ملف تعريف Vault",
-    "saved": "تم حفظ ملف تعريف Vault",
-    "deleted": "تم حذف ملف تعريف Vault",
-    "saveFailed": "فشل حفظ ملف تعريف Vault",
-    "deleteFailed": "فشل حذف ملف تعريف Vault",
-    "save": "حفظ ملف التعريف",
-    "validationError": "الاسم وعنوان Vault ودور الموقّع SSH مطلوب",
-    "none": "لا توجد ملفات تعريف Vault بعد.",
-    "sharedBadge": "مشترك",
-    "edit": "تحرير",
-    "delete": "حذف"
-  },
-  "hosts": {
-    "filterAuthVault": "قبو"
-  },
-  "dialog": {
-    "title": "مطلوب تسجيل الدخول إلى Vault",
-    "description": "تم فتح نافذة لتسجيل الدخول إلى HashiCorp Vault. أكمل تسجيل الدخول هناك؛ سيستمر هذا الاتصال تلقائيًا.",
-    "failed": "فشلت مصادقة Vault. يرجى المحاولة مرة أخرى.",
-    "reopen": "أعد فتح نافذة تسجيل الدخول"
-  },
-  "permissions": {
-    "use": {
-      "title": "استخدم توقيع SSH الخاص بـ Vault",
-      "description": "أنشئ ملفات تعريف التوقيع الخاصة بـ Vault وقم بالاتصال بالمضيفين الذين يستخدمون Vault."
-    },
-    "share": {
-      "title": "ملفات تعريف Share Vault",
-      "description": "قم بتحديد ملف تعريف مُوقِّع Vault على أنه مُشترك حتى يتمكن كل مستخدم من اختياره."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "عنوان إعادة التوجيه",
-      "description": "أضف عنوان URL هذا إلى allowed_redirect_uris في كل دور Vault OIDC الذي يسجل Termix الدخول به."
-    },
-    "legacyCallback": {
-      "label": "استخدم عنوان URI القديم لإعادة التوجيه",
-      "description": "استمر في إرسال /vault/oidc/callback، وهو عنوان إعادة التوجيه المستخدم قبل الإصدار 2.9. قم بإيقاف تشغيل هذا بمجرد أن تسمح أدوار Vault الخاصة بك بالعنوان الجديد."
-    },
-    "host": {
-      "profileId": {
-        "label": "ملف تعريف مُوقِّع الخزينة"
-      }
-    }
-  },
-  "plugin": {
-    "name": "قبو هاشيكورب"
-  }
-}
diff --git a/plugins/vault/locales/translated/bg_BG.json b/plugins/vault/locales/translated/bg_BG.json
deleted file mode 100644
index 92d81e76c..000000000
--- a/plugins/vault/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Профил на подписващ в трезора",
-    "selectProfile": "Изберете профил в трезора...",
-    "hint": "Настройките идват от споделения профил; ще влезете в Vault чрез OIDC, когато се свържете. Не се съхраняват тайни.",
-    "docs": "Преглед на документи",
-    "sharedProfile": "{{name}} (споделено)"
-  },
-  "profiles": {
-    "new": "Нов профил",
-    "manage": "Управление на профили в хранилището",
-    "name": "Приятелско име",
-    "vaultAddr": "Адрес на трезора",
-    "namespace": "Именно пространство",
-    "oidcMount": "OIDC Authentication Mount",
-    "oidcRole": "Роля на OIDC",
-    "sshMount": "SSH Secrets Mount",
-    "sshRole": "Роля на SSH подписващ",
-    "validPrincipals": "Валидни принципали",
-    "keyType": "Тип ефимерен ключ",
-    "shareWithAll": "Споделяне с всички потребители",
-    "create": "Създаване на профил",
-    "created": "Профилът на трезора е създаден",
-    "saved": "Профилът на трезора е запазен",
-    "deleted": "Профилът в трезора е изтрит",
-    "saveFailed": "Запазването на профила в Трезора не бе успешно",
-    "deleteFailed": "Изтриването на профила в Vault не бе успешно",
-    "save": "Запазване на профил",
-    "validationError": "Име, адрес на трезора и роля на SSH подписващ са задължителни",
-    "none": "Все още няма профили в Трезора.",
-    "sharedBadge": "споделено",
-    "edit": "Редактиране",
-    "delete": "Изтриване"
-  },
-  "hosts": {
-    "filterAuthVault": "Трезор"
-  },
-  "dialog": {
-    "title": "Изисква се влизане в трезора",
-    "description": "Отвори се прозорец за влизане в HashiCorp Vault. Завършете влизането там; тази връзка ще продължи автоматично.",
-    "failed": "Удостоверяването на трезора не бе успешно. Моля, опитайте отново.",
-    "reopen": "Отваряне отново на прозореца за вход"
-  },
-  "permissions": {
-    "use": {
-      "title": "Използване на SSH подписване в Vault",
-      "description": "Създайте профили на подписващи в Vault и се свържете с хостове, които използват Vault."
-    },
-    "share": {
-      "title": "Споделяне на профили в Трезора",
-      "description": "Маркирайте профил на подписващ в Vault като споделен, за да може всеки потребител да го избере."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI адрес за пренасочване",
-      "description": "Добавете този URL адрес към allowed_redirect_uris във всяка OIDC роля на Vault, с която Termix влиза."
-    },
-    "legacyCallback": {
-      "label": "Използвайте стария URI адрес за пренасочване",
-      "description": "Продължавайте да изпращате /vault/oidc/callback, URI адресът за пренасочване, използван преди версия 2.9. Изключете го, след като ролите ви в Vault позволят новия адрес."
-    },
-    "host": {
-      "profileId": {
-        "label": "Профил на подписващ в трезора"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Трезор на HashiCorp"
-  }
-}
diff --git a/plugins/vault/locales/translated/bn_BD.json b/plugins/vault/locales/translated/bn_BD.json
deleted file mode 100644
index b466b3c60..000000000
--- a/plugins/vault/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "ভল্ট স্বাক্ষরকারীর প্রোফাইল",
-    "selectProfile": "একটি ভল্ট প্রোফাইল নির্বাচন করুন...",
-    "hint": "সেটিংস শেয়ার করা প্রোফাইল থেকে আসে; সংযোগ করার সময় আপনি OIDC-এর মাধ্যমে ভল্টে সাইন ইন করবেন। কোনো গোপনীয় তথ্য সংরক্ষিত থাকে না।",
-    "docs": "নথি দেখুন",
-    "sharedProfile": "{{name}} (ভাগ করা)"
-  },
-  "profiles": {
-    "new": "নতুন প্রোফাইল",
-    "manage": "ভল্ট প্রোফাইলগুলি পরিচালনা করুন",
-    "name": "বন্ধুত্বপূর্ণ নাম",
-    "vaultAddr": "ভল্ট ঠিকানা",
-    "namespace": "নেমস্পেস",
-    "oidcMount": "OIDC অথোরাইজেশন মাউন্ট",
-    "oidcRole": "OIDC ভূমিকা",
-    "sshMount": "SSH সিক্রেটস মাউন্ট",
-    "sshRole": "SSH স্বাক্ষরকারীর ভূমিকা",
-    "validPrincipals": "বৈধ অধ্যক্ষরা",
-    "keyType": "ক্ষণস্থায়ী কী টাইপ",
-    "shareWithAll": "সকল ব্যবহারকারীর সাথে শেয়ার করুন",
-    "create": "প্রোফাইল তৈরি করুন",
-    "created": "ভল্ট প্রোফাইল তৈরি করা হয়েছে",
-    "saved": "ভল্ট প্রোফাইল সংরক্ষিত হয়েছে",
-    "deleted": "ভল্ট প্রোফাইল মুছে ফেলা হয়েছে",
-    "saveFailed": "ভল্ট প্রোফাইল সংরক্ষণ করতে ব্যর্থ হয়েছে",
-    "deleteFailed": "ভল্ট প্রোফাইল মুছে ফেলা ব্যর্থ হয়েছে",
-    "save": "প্রোফাইল সংরক্ষণ করুন",
-    "validationError": "নাম, ভল্ট অ্যাড্রেস এবং SSH সাইনার রোল প্রয়োজন।",
-    "none": "এখনো কোনো ভল্ট প্রোফাইল তৈরি হয়নি।",
-    "sharedBadge": "ভাগ করা হয়েছে",
-    "edit": "সম্পাদনা",
-    "delete": "মুছে ফেলুন"
-  },
-  "hosts": {
-    "filterAuthVault": "ভল্ট"
-  },
-  "dialog": {
-    "title": "ভল্টে সাইন-ইন করা আবশ্যক",
-    "description": "হ্যাশিকর্প ভল্টে সাইন ইন করার জন্য একটি উইন্ডো খুলেছে। সেখানে সাইন-ইন সম্পন্ন করুন; এই সংযোগটি স্বয়ংক্রিয়ভাবে চলতে থাকবে।",
-    "failed": "ভল্ট প্রমাণীকরণ ব্যর্থ হয়েছে। অনুগ্রহ করে আবার চেষ্টা করুন।",
-    "reopen": "সাইন-ইন উইন্ডো পুনরায় খুলুন"
-  },
-  "permissions": {
-    "use": {
-      "title": "ভল্ট এসএসএইচ সাইনিং ব্যবহার করুন",
-      "description": "Vault স্বাক্ষরকারী প্রোফাইল তৈরি করুন এবং Vault ব্যবহারকারী হোস্টগুলির সাথে সংযোগ স্থাপন করুন।"
-    },
-    "share": {
-      "title": "ভল্ট প্রোফাইল শেয়ার করুন",
-      "description": "একটি ভল্ট স্বাক্ষরকারীর প্রোফাইলকে শেয়ার করা হিসেবে চিহ্নিত করুন, যাতে প্রত্যেক ব্যবহারকারী সেটি বেছে নিতে পারে।"
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "পুনঃনির্দেশ URI",
-      "description": "Termix যেসব Vault OIDC রোলের মাধ্যমে সাইন ইন করে, সেগুলোর প্রতিটির allowed_redirect_uris-এ এই URL-টি যোগ করুন।"
-    },
-    "legacyCallback": {
-      "label": "পুরানো রিডাইরেক্ট ইউআরআই ব্যবহার করুন",
-      "description": "/vault/oidc/callback পাঠানো চালিয়ে যান, যেটি ২.৯ এর আগে ব্যবহৃত রিডাইরেক্ট ইউআরআই ছিল। আপনার ভল্ট রোলগুলো নতুনটি অনুমোদন করলে এটি বন্ধ করে দিন।"
-    },
-    "host": {
-      "profileId": {
-        "label": "ভল্ট স্বাক্ষরকারীর প্রোফাইল"
-      }
-    }
-  },
-  "plugin": {
-    "name": "হাশিকর্প ভল্ট"
-  }
-}
diff --git a/plugins/vault/locales/translated/ca_ES.json b/plugins/vault/locales/translated/ca_ES.json
deleted file mode 100644
index 18cbbc215..000000000
--- a/plugins/vault/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Perfil del signant de la caixa forta",
-    "selectProfile": "Seleccioneu un perfil de Vault...",
-    "hint": "La configuració prové del perfil compartit; iniciaràs la sessió a Vault mitjançant OIDC quan et connectis. No s'emmagatzemen secrets.",
-    "docs": "Veure documents",
-    "sharedProfile": "{{name}} (compartit)"
-  },
-  "profiles": {
-    "new": "Nou perfil",
-    "manage": "Gestiona els perfils de Vault",
-    "name": "Nom amigable",
-    "vaultAddr": "Adreça de la caixa forta",
-    "namespace": "Espai de noms",
-    "oidcMount": "Muntatge d'autenticació OIDC",
-    "oidcRole": "Rol de l'OIDC",
-    "sshMount": "Muntanya de Secrets SSH",
-    "sshRole": "Rol de signant SSH",
-    "validPrincipals": "Principals vàlids",
-    "keyType": "Tipus de clau efímera",
-    "shareWithAll": "Comparteix amb tots els usuaris",
-    "create": "Crea un perfil",
-    "created": "Perfil de la caixa forta creat",
-    "saved": "Perfil de la caixa forta desat",
-    "deleted": "Perfil de la caixa forta suprimit",
-    "saveFailed": "No s'ha pogut desar el perfil de Vault",
-    "deleteFailed": "No s'ha pogut suprimir el perfil de Vault",
-    "save": "Desa el perfil",
-    "validationError": "El nom, l'adreça de la caixa forta i el rol de signant SSH són obligatoris.",
-    "none": "Encara no hi ha perfils de Vault.",
-    "sharedBadge": "compartit",
-    "edit": "Edita",
-    "delete": "Suprimeix"
-  },
-  "hosts": {
-    "filterAuthVault": "Volta"
-  },
-  "dialog": {
-    "title": "Cal iniciar sessió a la caixa forta",
-    "description": "S'ha obert una finestra per iniciar la sessió a HashiCorp Vault. Completeu l'inici de sessió allà; aquesta connexió continuarà automàticament.",
-    "failed": "L'autenticació de la caixa forta ha fallat. Torna-ho a provar.",
-    "reopen": "Torna a obrir la finestra d'inici de sessió"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilitza la signatura SSH de Vault",
-      "description": "Crea perfils de signant del Vault i connecta't a amfitrions que utilitzen el Vault."
-    },
-    "share": {
-      "title": "Comparteix els perfils de Vault",
-      "description": "Marca un perfil de signant de Vault com a compartit perquè tots els usuaris el puguin triar."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI de redirecció",
-      "description": "Afegiu aquesta URL a allowed_redirect_uris a cada rol OIDC de Vault amb què Termix inicia la sessió."
-    },
-    "legacyCallback": {
-      "label": "Utilitza l'URI de redirecció antiga",
-      "description": "Continua enviant /vault/oidc/callback, l'URI de redirecció que s'utilitzava abans de la versió 2.9. Desactiva-ho un cop els rols de Vault permetin el nou."
-    },
-    "host": {
-      "profileId": {
-        "label": "Perfil del signant de la caixa forta"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Caixa forta de HashiCorp"
-  }
-}
diff --git a/plugins/vault/locales/translated/cs_CZ.json b/plugins/vault/locales/translated/cs_CZ.json
deleted file mode 100644
index 8d9ff7951..000000000
--- a/plugins/vault/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Profil podepisujícího trezoru",
-    "selectProfile": "Vyberte profil úložiště...",
-    "hint": "Nastavení pocházejí ze sdíleného profilu; po připojení se do úložiště přihlásíte přes OIDC. Žádné tajné kódy se neukládají.",
-    "docs": "Zobrazit dokumenty",
-    "sharedProfile": "{{name}} (sdílené)"
-  },
-  "profiles": {
-    "new": "Nový profil",
-    "manage": "Správa profilů úložiště",
-    "name": "Přátelský název",
-    "vaultAddr": "Adresa trezoru",
-    "namespace": "Jmenný prostor",
-    "oidcMount": "Připojení autorizace OIDC",
-    "oidcRole": "Role OIDC",
-    "sshMount": "SSH tajemství Mount",
-    "sshRole": "Role SSH podepisujícího",
-    "validPrincipals": "Platné principy",
-    "keyType": "Typ dočasného klíče",
-    "shareWithAll": "Sdílet se všemi uživateli",
-    "create": "Vytvořit profil",
-    "created": "Profil úložiště vytvořen",
-    "saved": "Profil trezoru uložen",
-    "deleted": "Profil trezoru smazán",
-    "saveFailed": "Uložení profilu úložiště se nezdařilo.",
-    "deleteFailed": "Profil v úložišti se nepodařilo smazat.",
-    "save": "Uložit profil",
-    "validationError": "Jméno, adresa trezoru a role SSH signatáře jsou povinné.",
-    "none": "Zatím žádné profily v úložišti Vault.",
-    "sharedBadge": "sdílené",
-    "edit": "Upravit",
-    "delete": "Vymazat"
-  },
-  "hosts": {
-    "filterAuthVault": "Klenba"
-  },
-  "dialog": {
-    "title": "Vyžaduje se přihlášení do trezoru",
-    "description": "Otevřelo se okno pro přihlášení do HashiCorp Vault. Dokončete přihlášení tam; toto připojení bude automaticky pokračovat.",
-    "failed": "Ověření v trezoru se nezdařilo. Zkuste to prosím znovu.",
-    "reopen": "Znovu otevřít přihlašovací okno"
-  },
-  "permissions": {
-    "use": {
-      "title": "Používejte podepisování přes SSH v úložišti",
-      "description": "Vytvořte profily podepisujících v aplikaci Vault a připojte se k hostitelům, kteří ji používají."
-    },
-    "share": {
-      "title": "Sdílení profilů úložiště",
-      "description": "Označte profil podepisujícího v úložišti Vault jako sdílený, aby si ho mohl vybrat každý uživatel."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI přesměrování",
-      "description": "Přidejte tuto URL adresu do allowed_redirect_uris v každé roli OIDC úložiště, se kterou se Termix přihlašuje."
-    },
-    "legacyCallback": {
-      "label": "Použít starý identifikátor URI pro přesměrování",
-      "description": "Pokračujte v odesílání /vault/oidc/callback, což je URI pro přesměrování používané před verzí 2.9. Jakmile vaše role v úložišti povolí použití nového URI, vypněte tuto funkci."
-    },
-    "host": {
-      "profileId": {
-        "label": "Profil podepisujícího v trezoru"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Trezor HashiCorp"
-  }
-}
diff --git a/plugins/vault/locales/translated/da_DK.json b/plugins/vault/locales/translated/da_DK.json
deleted file mode 100644
index a871eb24e..000000000
--- a/plugins/vault/locales/translated/da_DK.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Profil for underskriver af arkiv",
-    "selectProfile": "Vælg en Vault-profil...",
-    "hint": "Indstillingerne kommer fra den delte profil; du logger ind på Vault via OIDC, når du opretter forbindelse. Der gemmes ingen hemmeligheder.",
-    "docs": "Se dokumenter",
-    "sharedProfile": "{{name}} (delt)"
-  },
-  "profiles": {
-    "new": "Ny profil",
-    "manage": "Administrer Vault-profiler",
-    "name": "Venligt navn",
-    "vaultAddr": "Adresse i boksen",
-    "namespace": "Navnerum",
-    "oidcMount": "OIDC-godkendelsesmontering",
-    "oidcRole": "OIDC-rolle",
-    "sshMount": "SSH-hemmeligheder monteres",
-    "sshRole": "SSH-underskriverrolle",
-    "validPrincipals": "Gyldige principper",
-    "keyType": "Kortvarig nøgletype",
-    "shareWithAll": "Del med alle brugere",
-    "create": "Opret profil",
-    "created": "Vault-profil oprettet",
-    "saved": "Vault-profil gemt",
-    "deleted": "Vault-profil slettet",
-    "saveFailed": "Kunne ikke gemme Vault-profilen",
-    "deleteFailed": "Kunne ikke slette Vault-profilen",
-    "save": "Gem profil",
-    "validationError": "Navn, Vault-adresse og SSH-underskriverrolle er påkrævet",
-    "none": "Ingen Vault-profiler endnu.",
-    "sharedBadge": "delt",
-    "edit": "Redigere",
-    "delete": "Slet"
-  },
-  "hosts": {
-    "filterAuthVault": "Hvælving"
-  },
-  "dialog": {
-    "title": "Login til Vault kræves",
-    "description": "Et vindue er åbnet, hvor du kan logge ind på HashiCorp Vault. Fuldfør loginprocessen der; forbindelsen fortsætter automatisk.",
-    "failed": "Godkendelse af arkiv mislykkedes. Prøv igen.",
-    "reopen": "Genåbn loginvinduet"
-  },
-  "permissions": {
-    "use": {
-      "title": "Brug Vault SSH-signering",
-      "description": "Opret Vault-underskriverprofiler, og opret forbindelse til værter, der bruger Vault."
-    },
-    "share": {
-      "title": "Del Vault-profiler",
-      "description": "Marker en Vault-underskriverprofil som delt, så alle brugere kan vælge den."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "Omdirigerings-URI",
-      "description": "Tilføj denne URL til allowed_redirect_uris i hver Vault OIDC-rolle, som Termix logger ind med."
-    },
-    "legacyCallback": {
-      "label": "Brug den gamle omdirigerings-URI",
-      "description": "Fortsæt med at sende /vault/oidc/callback, den omdirigerings-URI, der blev brugt før 2.9. Slå dette fra, når dine Vault-roller tillader den nye."
-    },
-    "host": {
-      "profileId": {
-        "label": "Profil for underskriver af Vault"
-      }
-    }
-  },
-  "plugin": {
-    "name": "HashiCorp-hvælving"
-  }
-}
diff --git a/plugins/vault/locales/translated/de_DE.json b/plugins/vault/locales/translated/de_DE.json
deleted file mode 100644
index 8d6acff59..000000000
--- a/plugins/vault/locales/translated/de_DE.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Vault-Signer-Profil",
-    "selectProfile": "Vault-Profil auswählen...",
-    "hint": "Die Einstellungen stammen aus dem freigegebenen Profil; Sie melden sich beim Verbinden per OIDC bei Vault an. Es werden keine Geheimnisse gespeichert.",
-    "docs": "Dokumentation ansehen",
-    "sharedProfile": "{{name}} (gemeinsam genutzt)"
-  },
-  "profiles": {
-    "new": "Neues Profil",
-    "manage": "Vault-Profile verwalten",
-    "name": "Anzeigename",
-    "vaultAddr": "Vault-Adresse",
-    "namespace": "Namespace",
-    "oidcMount": "OIDC-Auth-Mount",
-    "oidcRole": "OIDC-Rolle",
-    "sshMount": "SSH-Secrets-Mount",
-    "sshRole": "SSH-Signer-Rolle",
-    "validPrincipals": "Gültige Principals",
-    "keyType": "Ephemerer Schlüsseltyp",
-    "shareWithAll": "Mit allen Benutzern teilen",
-    "create": "Profil erstellen",
-    "created": "Vault-Profil erstellt",
-    "saved": "Vault-Profil gespeichert",
-    "deleted": "Vault-Profil gelöscht",
-    "saveFailed": "Fehler beim Speichern des Vault-Profils",
-    "deleteFailed": "Fehler beim Löschen des Vault-Profils",
-    "save": "Profil speichern",
-    "validationError": "Name, Vault-Adresse und SSH-Signer-Rolle sind erforderlich",
-    "none": "Noch keine Vault-Profile.",
-    "sharedBadge": "geteilt",
-    "edit": "Bearbeiten",
-    "delete": "Löschen"
-  },
-  "hosts": {
-    "filterAuthVault": "Gewölbe"
-  },
-  "dialog": {
-    "title": "Vault-Anmeldung erforderlich",
-    "description": "Ein Fenster zur Anmeldung bei HashiCorp Vault wurde geöffnet. Schließen Sie die Anmeldung dort ab; diese Verbindung wird automatisch fortgesetzt.",
-    "failed": "Vault-Authentifizierung fehlgeschlagen. Bitte versuchen Sie es erneut.",
-    "reopen": "Anmeldefenster erneut öffnen"
-  },
-  "permissions": {
-    "use": {
-      "title": "Vault-SSH-Signierung verwenden",
-      "description": "Erstellen Sie Vault-Signaturprofile und stellen Sie eine Verbindung zu Hosts her, die Vault verwenden."
-    },
-    "share": {
-      "title": "Vault-Profile teilen",
-      "description": "Markieren Sie ein Vault-Signaturprofil als freigegeben, damit es jeder Benutzer auswählen kann."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "Umleitungs-URI",
-      "description": "Fügen Sie diese URL in jeder Vault OIDC-Rolle, mit der sich Termix anmeldet, zu allowed_redirect_uris hinzu."
-    },
-    "legacyCallback": {
-      "label": "Verwenden Sie die alte Umleitungs-URI.",
-      "description": "Senden Sie weiterhin /vault/oidc/callback, die Umleitungs-URI, die vor Version 2.9 verwendet wurde. Deaktivieren Sie diese Funktion, sobald Ihre Vault-Rollen die Verwendung der neuen URI zulassen."
-    },
-    "host": {
-      "profileId": {
-        "label": "Vault-Signer-Profil"
-      }
-    }
-  },
-  "plugin": {
-    "name": "HashiCorp Vault"
-  }
-}
diff --git a/plugins/vault/locales/translated/el_GR.json b/plugins/vault/locales/translated/el_GR.json
deleted file mode 100644
index 8fb877b1e..000000000
--- a/plugins/vault/locales/translated/el_GR.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Προφίλ Υπογράφοντος Vault",
-    "selectProfile": "Επιλέξτε ένα προφίλ Vault...",
-    "hint": "Οι ρυθμίσεις προέρχονται από το κοινόχρηστο προφίλ. Θα συνδεθείτε στο Vault μέσω OIDC όταν συνδεθείτε. Δεν αποθηκεύονται μυστικά.",
-    "docs": "Προβολή εγγράφων",
-    "sharedProfile": "{{name}} (κοινόχρηστο)"
-  },
-  "profiles": {
-    "new": "Νέο προφίλ",
-    "manage": "Διαχείριση προφίλ Vault",
-    "name": "Φιλικό όνομα",
-    "vaultAddr": "Διεύθυνση θησαυροφυλακίου",
-    "namespace": "Χώρος ονομάτων",
-    "oidcMount": "Μοντάζ ελέγχου ταυτότητας OIDC",
-    "oidcRole": "Ρόλος OIDC",
-    "sshMount": "SSH Secrets Mount",
-    "sshRole": "Ρόλος Υπογράφοντος SSH",
-    "validPrincipals": "Έγκυρες Αρχές",
-    "keyType": "Εφήμερος Τύπος Κλειδιού",
-    "shareWithAll": "Κοινοποίηση με όλους τους χρήστες",
-    "create": "Δημιουργία προφίλ",
-    "created": "Δημιουργήθηκε προφίλ Vault",
-    "saved": "Το προφίλ του Vault αποθηκεύτηκε",
-    "deleted": "Το προφίλ Vault διαγράφηκε",
-    "saveFailed": "Αποτυχία αποθήκευσης προφίλ Vault",
-    "deleteFailed": "Αποτυχία διαγραφής προφίλ Vault",
-    "save": "Αποθήκευση προφίλ",
-    "validationError": "Απαιτούνται όνομα, διεύθυνση vault και ρόλος υπογράφοντος SSH",
-    "none": "Δεν υπάρχουν ακόμη προφίλ Vault.",
-    "sharedBadge": "κοινόχρηστο",
-    "edit": "Εκδίδω",
-    "delete": "Διαγράφω"
-  },
-  "hosts": {
-    "filterAuthVault": "Θόλος"
-  },
-  "dialog": {
-    "title": "Απαιτείται σύνδεση στο Vault",
-    "description": "Έχει ανοίξει ένα παράθυρο για να συνδεθείτε στο HashiCorp Vault. Ολοκληρώστε τη σύνδεση εκεί. Αυτή η σύνδεση θα συνεχιστεί αυτόματα.",
-    "failed": "Ο έλεγχος ταυτότητας του vault απέτυχε. Δοκιμάστε ξανά.",
-    "reopen": "Επανάνοιγμα παραθύρου σύνδεσης"
-  },
-  "permissions": {
-    "use": {
-      "title": "Χρήση υπογραφής SSH του Vault",
-      "description": "Δημιουργήστε προφίλ υπογραφής Vault και συνδεθείτε με κεντρικούς υπολογιστές που χρησιμοποιούν το Vault."
-    },
-    "share": {
-      "title": "Κοινή χρήση προφίλ Vault",
-      "description": "Επισημάνετε ένα προφίλ υπογραφής Vault ως κοινόχρηστο, ώστε να μπορεί να το επιλέξει κάθε χρήστης."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI ανακατεύθυνσης",
-      "description": "Προσθέστε αυτήν τη διεύθυνση URL στο allowed_redirect_uris σε κάθε ρόλο Vault OIDC με τον οποίο συνδέεται το Termix."
-    },
-    "legacyCallback": {
-      "label": "Χρησιμοποιήστε το παλιό URI ανακατεύθυνσης",
-      "description": "Συνεχίστε να στέλνετε το /vault/oidc/callback, το URI ανακατεύθυνσης που χρησιμοποιήθηκε πριν από την έκδοση 2.9. Απενεργοποιήστε αυτήν τη λειτουργία μόλις οι ρόλοι Vault σας επιτρέψουν το νέο."
-    },
-    "host": {
-      "profileId": {
-        "label": "Προφίλ υπογράφοντος θησαυροφυλακίου"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Θησαυροφυλάκιο HashiCorp"
-  }
-}
diff --git a/plugins/vault/locales/translated/es_ES.json b/plugins/vault/locales/translated/es_ES.json
deleted file mode 100644
index 3d7f9a0e4..000000000
--- a/plugins/vault/locales/translated/es_ES.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Perfil de firmante de Vault",
-    "selectProfile": "Seleccionar un perfil de Vault...",
-    "hint": "La configuración proviene del perfil compartido; se iniciará sesión en Vault a través de OIDC al conectarse. No se almacenan secretos.",
-    "docs": "Ver documentación",
-    "sharedProfile": "{{name}} (compartido)"
-  },
-  "profiles": {
-    "new": "Nuevo perfil",
-    "manage": "Administrar perfiles de Vault",
-    "name": "Nombre descriptivo",
-    "vaultAddr": "Dirección de Vault",
-    "namespace": "Espacio de nombres",
-    "oidcMount": "Montaje de autenticación OIDC",
-    "oidcRole": "Rol OIDC",
-    "sshMount": "Montaje de secretos SSH",
-    "sshRole": "Rol de firmante SSH",
-    "validPrincipals": "Principals válidos",
-    "keyType": "Tipo de clave efímera",
-    "shareWithAll": "Compartir con todos los usuarios",
-    "create": "Crear perfil",
-    "created": "Perfil de Vault creado",
-    "saved": "Perfil de Vault guardado",
-    "deleted": "Perfil de Vault eliminado",
-    "saveFailed": "Error al guardar el perfil de Vault",
-    "deleteFailed": "Error al eliminar el perfil de Vault",
-    "save": "Guardar perfil",
-    "validationError": "Se requieren el nombre, la dirección de Vault y el rol de firmante SSH",
-    "none": "Aún no hay perfiles de Vault.",
-    "sharedBadge": "compartido",
-    "edit": "Editar",
-    "delete": "Eliminar"
-  },
-  "hosts": {
-    "filterAuthVault": "Bóveda"
-  },
-  "dialog": {
-    "title": "Inicio de sesión en Vault requerido",
-    "description": "Se ha abierto una ventana para iniciar sesión en HashiCorp Vault. Completa el inicio de sesión allí; esta conexión continuará automáticamente.",
-    "failed": "La autenticación de Vault falló. Inténtalo de nuevo.",
-    "reopen": "Reabrir ventana de inicio de sesión"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilice la firma SSH de Vault.",
-      "description": "Cree perfiles de firmante de Vault y conéctese a los hosts que utilizan Vault."
-    },
-    "share": {
-      "title": "Compartir perfiles de bóveda",
-      "description": "Marca un perfil de firmante de Vault como compartido para que todos los usuarios puedan seleccionarlo."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI de redirección",
-      "description": "Agregue esta URL a allowed_redirect_uris en cada rol OIDC de Vault con el que Termix inicie sesión."
-    },
-    "legacyCallback": {
-      "label": "Utilice la URI de redireccionamiento antigua",
-      "description": "Sigue enviando /vault/oidc/callback, la URI de redireccionamiento que se usaba antes de la versión 2.9. Desactívala una vez que tus roles de Vault permitan la nueva."
-    },
-    "host": {
-      "profileId": {
-        "label": "Perfil del firmante de Vault"
-      }
-    }
-  },
-  "plugin": {
-    "name": "HashiCorp Vault"
-  }
-}
diff --git a/plugins/vault/locales/translated/fi_FI.json b/plugins/vault/locales/translated/fi_FI.json
deleted file mode 100644
index 0fb72b7b0..000000000
--- a/plugins/vault/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Varaston allekirjoittajan profiili",
-    "selectProfile": "Valitse holviprofiili...",
-    "hint": "Asetukset tulevat jaetusta profiilista; kirjaudut Holviin OIDC:n kautta, kun muodostat yhteyden. Salaisuuksia ei tallenneta.",
-    "docs": "Näytä dokumentit",
-    "sharedProfile": "{{name}} (jaettu)"
-  },
-  "profiles": {
-    "new": "Uusi profiili",
-    "manage": "Hallinnoi holviprofiileja",
-    "name": "Ystävällinen nimi",
-    "vaultAddr": "Holvin osoite",
-    "namespace": "Nimiavaruus",
-    "oidcMount": "OIDC-todennusliitos",
-    "oidcRole": "OIDC-rooli",
-    "sshMount": "SSH-salaisuuksien kiinnitys",
-    "sshRole": "SSH-allekirjoittajan rooli",
-    "validPrincipals": "Voimassa olevat pääasialliset",
-    "keyType": "Lyhytaikainen avaintyyppi",
-    "shareWithAll": "Jaa kaikkien käyttäjien kanssa",
-    "create": "Luo profiili",
-    "created": "Holvin profiili luotu",
-    "saved": "Holvin profiili tallennettu",
-    "deleted": "Holvin profiili poistettu",
-    "saveFailed": "Holvin profiilin tallentaminen epäonnistui",
-    "deleteFailed": "Holviprofiilin poistaminen epäonnistui",
-    "save": "Tallenna profiili",
-    "validationError": "Nimi, holvin osoite ja SSH-allekirjoittajan rooli vaaditaan",
-    "none": "Ei vielä holviprofiileja.",
-    "sharedBadge": "jaettu",
-    "edit": "Muokata",
-    "delete": "Poistaa"
-  },
-  "hosts": {
-    "filterAuthVault": "Holvi"
-  },
-  "dialog": {
-    "title": "Holviin kirjautuminen vaaditaan",
-    "description": "Ikkuna HashiCorp-holviin kirjautumista varten on avautunut. Kirjaudu sisään siinä. Yhteys jatkuu automaattisesti.",
-    "failed": "Holvin todennus epäonnistui. Yritä uudelleen.",
-    "reopen": "Avaa kirjautumisikkuna uudelleen"
-  },
-  "permissions": {
-    "use": {
-      "title": "Käytä Vaultin SSH-allekirjoitusta",
-      "description": "Luo Vault-allekirjoittajaprofiileja ja muodosta yhteys Vaultia käyttäviin isäntiin."
-    },
-    "share": {
-      "title": "Jaa holviprofiileja",
-      "description": "Merkitse Vault-allekirjoittajan profiili jaetuksi, jotta jokainen käyttäjä voi valita sen."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "Uudelleenohjauksen URI",
-      "description": "Lisää tämä URL-osoite allowed_redirect_uris-kohtaan jokaisessa Vault OIDC -roolissa, jolla Termix kirjautuu sisään."
-    },
-    "legacyCallback": {
-      "label": "Käytä vanhaa uudelleenohjaus-URI:ta",
-      "description": "Lähetä edelleen /vault/oidc/callback-osoitetta, joka on ennen versiota 2.9 käytetty uudelleenohjaus-URI. Poista tämä käytöstä, kun Vault-roolisi sallivat uuden osoitteen."
-    },
-    "host": {
-      "profileId": {
-        "label": "Varaston allekirjoittajan profiili"
-      }
-    }
-  },
-  "plugin": {
-    "name": "HashiCorp-holvi"
-  }
-}
diff --git a/plugins/vault/locales/translated/fr_FR.json b/plugins/vault/locales/translated/fr_FR.json
deleted file mode 100644
index 998a88934..000000000
--- a/plugins/vault/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Profil de signature Vault",
-    "selectProfile": "Sélectionner un profil Vault...",
-    "hint": "Les paramètres proviennent du profil partagé ; vous vous connecterez à Vault via OIDC lors de la connexion. Aucun secret n'est stocké.",
-    "docs": "Documentation",
-    "sharedProfile": "{{name}} (partagé)"
-  },
-  "profiles": {
-    "new": "Nouveau profil",
-    "manage": "Gérer les profils Vault",
-    "name": "Nom convivial",
-    "vaultAddr": "Adresse Vault",
-    "namespace": "Espace de noms",
-    "oidcMount": "Point de montage d'authentification OIDC",
-    "oidcRole": "Rôle OIDC",
-    "sshMount": "Point de montage des secrets SSH",
-    "sshRole": "Rôle de signature SSH",
-    "validPrincipals": "Principaux valides",
-    "keyType": "Type de clé éphémère",
-    "shareWithAll": "Partager avec tous les utilisateurs",
-    "create": "Créer un profil",
-    "created": "Profil Vault créé",
-    "saved": "Profil Vault enregistré",
-    "deleted": "Profil Vault supprimé",
-    "saveFailed": "Échec de l'enregistrement du profil Vault",
-    "deleteFailed": "Échec de la suppression du profil Vault",
-    "save": "Enregistrer le profil",
-    "validationError": "Le nom, l'adresse Vault et le rôle de signataire SSH sont requis",
-    "none": "Aucun profil Vault pour le moment",
-    "sharedBadge": "partagé",
-    "edit": "Modifier",
-    "delete": "Supprimer"
-  },
-  "hosts": {
-    "filterAuthVault": "Sauter"
-  },
-  "dialog": {
-    "title": "Connexion à Vault requise",
-    "description": "Une fenêtre s'est ouverte pour vous connecter à HashiCorp Vault. Terminez la connexion dans cette fenêtre ; cette connexion continuera automatiquement.",
-    "failed": "Échec de l'authentification Vault. Veuillez réessayer.",
-    "reopen": "Rouvrir la fenêtre de connexion"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utiliser la signature SSH Vault",
-      "description": "Créez des profils de signataire Vault et connectez-vous aux hôtes qui utilisent Vault."
-    },
-    "share": {
-      "title": "Profils Share Vault",
-      "description": "Marquez un profil de signataire Vault comme partagé afin que chaque utilisateur puisse le sélectionner."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI de redirection",
-      "description": "Ajoutez cette URL à allowed_redirect_uris dans chaque rôle OIDC Vault avec lequel Termix se connecte."
-    },
-    "legacyCallback": {
-      "label": "Utilisez l'ancienne URI de redirection",
-      "description": "Continuez à envoyer /vault/oidc/callback, l'URI de redirection utilisée avant la version 2.9. Désactivez-la une fois que vos rôles Vault autoriseront la nouvelle."
-    },
-    "host": {
-      "profileId": {
-        "label": "Profil du signataire Vault"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Coffre-fort HashiCorp"
-  }
-}
diff --git a/plugins/vault/locales/translated/he_IL.json b/plugins/vault/locales/translated/he_IL.json
deleted file mode 100644
index 68fe22728..000000000
--- a/plugins/vault/locales/translated/he_IL.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "פרופיל חותם בכספת",
-    "selectProfile": "בחר פרופיל כספת...",
-    "hint": "ההגדרות מגיעות מהפרופיל המשותף; תיכנס לכספת דרך OIDC כשתתחבר. לא נשמרים סודות.",
-    "docs": "הצג מסמכים",
-    "sharedProfile": "{{name}} (שותף)"
-  },
-  "profiles": {
-    "new": "פרופיל חדש",
-    "manage": "ניהול פרופילי כספת",
-    "name": "שם ידידותי",
-    "vaultAddr": "כתובת הכספת",
-    "namespace": "מרחב השמות",
-    "oidcMount": "אישור OIDC",
-    "oidcRole": "תפקיד OIDC",
-    "sshMount": "סודות SSH מאוורר",
-    "sshRole": "תפקיד חותם SSH",
-    "validPrincipals": "עקרונות תקפים",
-    "keyType": "סוג מפתח זמני",
-    "shareWithAll": "שתף עם כל המשתמשים",
-    "create": "צור פרופיל",
-    "created": "פרופיל הכספת נוצר",
-    "saved": "פרופיל הכספת נשמר",
-    "deleted": "פרופיל הכספת נמחק",
-    "saveFailed": "שמירת פרופיל הכספת נכשלה",
-    "deleteFailed": "נכשלה מחיקת פרופיל הכספת",
-    "save": "שמור פרופיל",
-    "validationError": "שם, כתובת כספת ותפקיד חתימה ב-SSH נדרשים",
-    "none": "אין עדיין פרופילים בכספת.",
-    "sharedBadge": "מְשׁוּתָף",
-    "edit": "לַעֲרוֹך",
-    "delete": "לִמְחוֹק"
-  },
-  "hosts": {
-    "filterAuthVault": "קִמרוֹן"
-  },
-  "dialog": {
-    "title": "נדרשת כניסה לכספת",
-    "description": "נפתח חלון לכניסה לכספת HashiCorp. השלם את תהליך הכניסה שם; חיבור זה ימשיך אוטומטית.",
-    "failed": "אימות הכספת נכשל. אנא נסה שוב.",
-    "reopen": "פתח מחדש את חלון הכניסה"
-  },
-  "permissions": {
-    "use": {
-      "title": "השתמש בחתימת SSH של Vault",
-      "description": "צור פרופילי חותם של Vault והתחבר למארחים המשתמשים ב-Vault."
-    },
-    "share": {
-      "title": "שיתוף פרופילי כספת",
-      "description": "סמן פרופיל של חותם בכספת כמשותף כדי שכל משתמש יוכל לבחור אותו."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "כתובת URL להפניה מחדש",
-      "description": "הוסף כתובת URL זו ל- allowed_redirect_uris בכל תפקיד OIDC של Vault שאיתו Termix מתחבר."
-    },
-    "legacyCallback": {
-      "label": "השתמש ב-URI להפניה הישן",
-      "description": "המשך לשלוח את /vault/oidc/callback, URI ההפניה שהיה בשימוש לפני גרסה 2.9. כבה אפשרות זו לאחר שתפקידי הכספת שלך יאפשרו את ה-URI החדש."
-    },
-    "host": {
-      "profileId": {
-        "label": "פרופיל חותם בכספת"
-      }
-    }
-  },
-  "plugin": {
-    "name": "כספת HashiCorp"
-  }
-}
diff --git a/plugins/vault/locales/translated/hi_IN.json b/plugins/vault/locales/translated/hi_IN.json
deleted file mode 100644
index c2f46ea75..000000000
--- a/plugins/vault/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Vault साइनर प्रोफ़ाइल",
-    "selectProfile": "एक Vault प्रोफ़ाइल चुनें...",
-    "hint": "सेटिंग साझा प्रोफ़ाइल से आती हैं; कनेक्ट करते समय आप OIDC के माध्यम से Vault में साइन इन करेंगे। कोई सीक्रेट संग्रहीत नहीं किए जाते।",
-    "docs": "दस्तावेज़ देखें",
-    "sharedProfile": "{{name}} (साझा)"
-  },
-  "profiles": {
-    "new": "नई प्रोफ़ाइल",
-    "manage": "Vault प्रोफ़ाइल प्रबंधित करें",
-    "name": "अनुकूल नाम",
-    "vaultAddr": "Vault पता",
-    "namespace": "नेमस्पेस",
-    "oidcMount": "OIDC ऑथ माउंट",
-    "oidcRole": "OIDC रोल",
-    "sshMount": "SSH सीक्रेट माउंट",
-    "sshRole": "SSH साइनर रोल",
-    "validPrincipals": "मान्य प्रिंसिपल",
-    "keyType": "एफेमरल कुंजी प्रकार",
-    "shareWithAll": "सभी उपयोगकर्ताओं के साथ साझा करें",
-    "create": "प्रोफ़ाइल बनाएँ",
-    "created": "Vault प्रोफ़ाइल बनाई गई",
-    "saved": "Vault प्रोफ़ाइल सहेजी गई",
-    "deleted": "Vault प्रोफ़ाइल हटाई गई",
-    "saveFailed": "Vault प्रोफ़ाइल सहेजने में विफल",
-    "deleteFailed": "Vault प्रोफ़ाइल हटाने में विफल",
-    "save": "प्रोफ़ाइल सहेजें",
-    "validationError": "नाम, Vault पता और SSH हस्ताक्षरकर्ता भूमिका आवश्यक हैं",
-    "none": "अभी तक कोई Vault प्रोफ़ाइल नहीं है।",
-    "sharedBadge": "साझा",
-    "edit": "संपादित करें",
-    "delete": "हटाएँ"
-  },
-  "hosts": {
-    "filterAuthVault": "मेहराब"
-  },
-  "dialog": {
-    "title": "Vault साइन-इन आवश्यक है",
-    "description": "HashiCorp Vault में साइन इन करने के लिए एक विंडो खुल गई है। वहाँ साइन-इन पूरा करें; यह कनेक्शन स्वचालित रूप से जारी रहेगा।",
-    "failed": "Vault प्रमाणीकरण विफल। कृपया पुनः प्रयास करें।",
-    "reopen": "साइन-इन विंडो फिर से खोलें"
-  },
-  "permissions": {
-    "use": {
-      "title": "Vault SSH साइनिंग का उपयोग करें",
-      "description": "वॉल्ट साइनर प्रोफाइल बनाएं और वॉल्ट का उपयोग करने वाले होस्ट से कनेक्ट करें।"
-    },
-    "share": {
-      "title": "वॉल्ट प्रोफाइल साझा करें",
-      "description": "वॉल्ट साइनर प्रोफाइल को साझा के रूप में चिह्नित करें ताकि हर उपयोगकर्ता इसे चुन सके।"
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "रीडायरेक्ट यूआरआई",
-      "description": "टर्मिक्स द्वारा साइन इन किए जाने वाले प्रत्येक वॉल्ट ओआईडीसी रोल में allowed_redirect_uris में इस URL को जोड़ें।"
-    },
-    "legacyCallback": {
-      "label": "पुराने रीडायरेक्ट यूआरआई का उपयोग करें",
-      "description": "/vault/oidc/callback को भेजते रहें, यह रीडायरेक्ट यूआरआई 2.9 से पहले इस्तेमाल किया जाता था। जब आपके वॉल्ट रोल नए यूआरआई की अनुमति दे दें, तो इसे बंद कर दें।"
-    },
-    "host": {
-      "profileId": {
-        "label": "वॉल्ट हस्ताक्षरकर्ता प्रोफ़ाइल"
-      }
-    }
-  },
-  "plugin": {
-    "name": "हाशिकॉर्प वॉल्ट"
-  }
-}
diff --git a/plugins/vault/locales/translated/hu_HU.json b/plugins/vault/locales/translated/hu_HU.json
deleted file mode 100644
index 86b4412de..000000000
--- a/plugins/vault/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Vault aláírói profil",
-    "selectProfile": "Válasszon ki egy Vault profilt...",
-    "hint": "A beállítások a megosztott profilból származnak; a csatlakozáskor OIDC-n keresztül fog bejelentkezni a Vaultba. A rendszer nem tárol titkos adatokat.",
-    "docs": "Dokumentumok megtekintése",
-    "sharedProfile": "{{name}} (megosztva)"
-  },
-  "profiles": {
-    "new": "Új profil",
-    "manage": "Vault profilok kezelése",
-    "name": "Barátságos név",
-    "vaultAddr": "Trezor címe",
-    "namespace": "Névtér",
-    "oidcMount": "OIDC hitelesítési csatolás",
-    "oidcRole": "OIDC szerepkör",
-    "sshMount": "SSH titkok felfűzése",
-    "sshRole": "SSH aláíró szerepkör",
-    "validPrincipals": "Érvényes megbízók",
-    "keyType": "Efemer kulcstípus",
-    "shareWithAll": "Megosztás az összes felhasználóval",
-    "create": "Profil létrehozása",
-    "created": "Létrehozva a trezor profilja",
-    "saved": "A trezor profilja mentve",
-    "deleted": "Tárolóprofil törölve",
-    "saveFailed": "Nem sikerült menteni a Vault profilját",
-    "deleteFailed": "Nem sikerült törölni a Vault profilját",
-    "save": "Profil mentése",
-    "validationError": "Név, trezor címe és SSH aláírói szerepkör megadása kötelező.",
-    "none": "Még nincsenek Vault-profilok.",
-    "sharedBadge": "megosztott",
-    "edit": "Szerkesztés",
-    "delete": "Töröl"
-  },
-  "hosts": {
-    "filterAuthVault": "Boltozat"
-  },
-  "dialog": {
-    "title": "Bejelentkezés szükséges a széfbe",
-    "description": "Megnyílt egy ablak a HashiCorp Vaultba való bejelentkezéshez. Fejezze be a bejelentkezést ott; a kapcsolat automatikusan folytatódik.",
-    "failed": "A trezor hitelesítése sikertelen. Próbálja újra.",
-    "reopen": "Bejelentkezési ablak újranyitása"
-  },
-  "permissions": {
-    "use": {
-      "title": "Vault SSH aláírás használata",
-      "description": "Hozzon létre Vault aláírói profilokat, és csatlakozzon a Vaultot használó gazdagépekhez."
-    },
-    "share": {
-      "title": "Vault profilok megosztása",
-      "description": "Jelöljön meg egy Vault aláírói profilt megosztottként, hogy minden felhasználó kiválaszthassa."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "Átirányítási URI",
-      "description": "Adja hozzá ezt az URL-címet az allowed_redirect_uris paraméterhez minden olyan Vault OIDC szerepkörben, amellyel a Termix bejelentkezik."
-    },
-    "legacyCallback": {
-      "label": "Használja a régi átirányítási URI-t",
-      "description": "Továbbra is küldje el a /vault/oidc/callback átirányítási URI-t, amely a 2.9 előtt használt. Kapcsolja ki ezt, amint a Vault szerepkörei engedélyezik az újat."
-    },
-    "host": {
-      "profileId": {
-        "label": "Vault aláírói profil"
-      }
-    }
-  },
-  "plugin": {
-    "name": "HashiCorp-trezor"
-  }
-}
diff --git a/plugins/vault/locales/translated/id_ID.json b/plugins/vault/locales/translated/id_ID.json
deleted file mode 100644
index 19c8cdf8b..000000000
--- a/plugins/vault/locales/translated/id_ID.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Profil Penandatangan Vault",
-    "selectProfile": "Pilih profil Vault...",
-    "hint": "Pengaturan berasal dari profil bersama; Anda akan masuk ke Vault melalui OIDC saat terhubung. Tidak ada rahasia yang disimpan.",
-    "docs": "Lihat dokumen",
-    "sharedProfile": "{{name}} (dibagikan)"
-  },
-  "profiles": {
-    "new": "Profil baru",
-    "manage": "Kelola profil Vault",
-    "name": "Nama yang Ramah",
-    "vaultAddr": "Alamat Brankas",
-    "namespace": "Ruang nama",
-    "oidcMount": "OIDC Otorisasi Pemasangan",
-    "oidcRole": "Peran OIDC",
-    "sshMount": "Pemasangan Rahasia SSH",
-    "sshRole": "Peran Penandatangan SSH",
-    "validPrincipals": "Prinsip-prinsip yang Sah",
-    "keyType": "Jenis Kunci Sementara",
-    "shareWithAll": "Bagikan dengan semua pengguna",
-    "create": "Buat profil",
-    "created": "Profil Vault telah dibuat.",
-    "saved": "Profil Vault tersimpan",
-    "deleted": "Profil Vault dihapus",
-    "saveFailed": "Gagal menyimpan profil Vault",
-    "deleteFailed": "Gagal menghapus profil Vault",
-    "save": "Simpan profil",
-    "validationError": "Nama, alamat Vault, dan peran penandatangan SSH wajib diisi.",
-    "none": "Belum ada profil Vault.",
-    "sharedBadge": "dibagikan",
-    "edit": "Edit",
-    "delete": "Menghapus"
-  },
-  "hosts": {
-    "filterAuthVault": "Kubah"
-  },
-  "dialog": {
-    "title": "Login ke Vault diperlukan.",
-    "description": "Jendela telah terbuka untuk masuk ke HashiCorp Vault. Selesaikan proses masuk di sana; koneksi ini akan berlanjut secara otomatis.",
-    "failed": "Autentikasi Vault gagal. Silakan coba lagi.",
-    "reopen": "Buka kembali jendela masuk"
-  },
-  "permissions": {
-    "use": {
-      "title": "Gunakan penandatanganan SSH Vault.",
-      "description": "Buat profil penandatangan Vault dan hubungkan ke host yang menggunakan Vault."
-    },
-    "share": {
-      "title": "Bagikan profil Vault",
-      "description": "Tandai profil penandatangan Vault sebagai profil yang dibagikan agar setiap pengguna dapat memilihnya."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI Pengalihan",
-      "description": "Tambahkan URL ini ke allowed_redirect_uris di setiap peran Vault OIDC yang digunakan Termix untuk masuk."
-    },
-    "legacyCallback": {
-      "label": "Gunakan URI pengalihan lama.",
-      "description": "Tetap kirimkan /vault/oidc/callback, URI pengalihan yang digunakan sebelum versi 2.9. Matikan ini setelah peran Vault Anda mengizinkan yang baru."
-    },
-    "host": {
-      "profileId": {
-        "label": "Profil penandatangan Vault"
-      }
-    }
-  },
-  "plugin": {
-    "name": "HashiCorp Vault"
-  }
-}
diff --git a/plugins/vault/locales/translated/it_IT.json b/plugins/vault/locales/translated/it_IT.json
deleted file mode 100644
index 03c3235bd..000000000
--- a/plugins/vault/locales/translated/it_IT.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Profilo firmatario Vault",
-    "selectProfile": "Seleziona un profilo Vault...",
-    "hint": "Le impostazioni provengono dal profilo condiviso; effettuerai l'accesso a Vault tramite OIDC quando ti connetti. Nessun segreto è memorizzato.",
-    "docs": "Vedi documenti",
-    "sharedProfile": "{{name}} (condiviso)"
-  },
-  "profiles": {
-    "new": "Nuovo profilo",
-    "manage": "Gestisci profili Vault",
-    "name": "Nome descrittivo",
-    "vaultAddr": "Indirizzo Vault",
-    "namespace": "Namespace",
-    "oidcMount": "Mount di autenticazione OIDC",
-    "oidcRole": "Ruolo OIDC",
-    "sshMount": "Mount dei segreti SSH",
-    "sshRole": "Ruolo firmatario SSH",
-    "validPrincipals": "Principal validi",
-    "keyType": "Tipo di chiave effimera",
-    "shareWithAll": "Condividi con tutti gli utenti",
-    "create": "Crea profilo",
-    "created": "Profilo Vault creato",
-    "saved": "Profilo Vault salvato",
-    "deleted": "Profilo Vault eliminato",
-    "saveFailed": "Salvataggio profilo Vault non riuscito",
-    "deleteFailed": "Eliminazione profilo Vault non riuscita",
-    "save": "Salva profilo",
-    "validationError": "Nome, indirizzo Vault e ruolo di firma SSH sono obbligatori",
-    "none": "Nessun profilo Vault ancora.",
-    "sharedBadge": "condiviso",
-    "edit": "Modifica",
-    "delete": "Elimina"
-  },
-  "hosts": {
-    "filterAuthVault": "Volta"
-  },
-  "dialog": {
-    "title": "Accesso a Vault richiesto",
-    "description": "Una finestra si è aperta per accedere a HashiCorp Vault. Completa l'accesso lì; la connessione continuerà automaticamente.",
-    "failed": "Autenticazione Vault fallita. Riprova.",
-    "reopen": "Riapri la finestra di accesso"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilizzare la firma SSH di Vault",
-      "description": "Crea profili di firmatari Vault e connettiti agli host che utilizzano Vault."
-    },
-    "share": {
-      "title": "Condividi i profili di Vault",
-      "description": "Contrassegna il profilo di un firmatario di Vault come condiviso in modo che ogni utente possa selezionarlo."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI di reindirizzamento",
-      "description": "Aggiungi questo URL a allowed_redirect_uris in ogni ruolo OIDC di Vault con cui Termix effettua l'accesso."
-    },
-    "legacyCallback": {
-      "label": "Utilizzare il vecchio URI di reindirizzamento",
-      "description": "Continua a inviare /vault/oidc/callback, l'URI di reindirizzamento utilizzato prima della versione 2.9. Disattivalo non appena i tuoi ruoli Vault consentiranno il nuovo URI."
-    },
-    "host": {
-      "profileId": {
-        "label": "Profilo del firmatario della cassaforte"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Cassaforte HashiCorp"
-  }
-}
diff --git a/plugins/vault/locales/translated/ja_JP.json b/plugins/vault/locales/translated/ja_JP.json
deleted file mode 100644
index 41c5a465f..000000000
--- a/plugins/vault/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Vault 署名者プロファイル",
-    "selectProfile": "Vault プロファイルを選択...",
-    "hint": "設定は共有プロファイルから取得され、接続時に OIDC で Vault にサインインします。シークレットは保存されません。",
-    "docs": "ドキュメントを見る",
-    "sharedProfile": "{{name}} (共有)"
-  },
-  "profiles": {
-    "new": "新規プロファイル",
-    "manage": "Vault プロファイルの管理",
-    "name": "表示名",
-    "vaultAddr": "Vault アドレス",
-    "namespace": "名前空間",
-    "oidcMount": "OIDC 認証マウント",
-    "oidcRole": "OIDC ロール",
-    "sshMount": "SSH シークレットマウント",
-    "sshRole": "SSH 署名者ロール",
-    "validPrincipals": "有効なプリンシパル",
-    "keyType": "エフェメラルキータイプ",
-    "shareWithAll": "すべてのユーザーと共有",
-    "create": "プロファイルを作成",
-    "created": "Vaultプロファイルが作成されました",
-    "saved": "Vaultプロファイルが保存されました",
-    "deleted": "Vaultプロファイルが削除されました",
-    "saveFailed": "Vaultプロファイルの保存に失敗しました",
-    "deleteFailed": "Vaultプロファイルの削除に失敗しました",
-    "save": "プロファイルを保存",
-    "validationError": "名前、Vaultアドレス、SSH署名ロールは必須です",
-    "none": "まだVaultプロファイルがありません。",
-    "sharedBadge": "共有",
-    "edit": "編集",
-    "delete": "削除"
-  },
-  "hosts": {
-    "filterAuthVault": "金庫"
-  },
-  "dialog": {
-    "title": "Vault サインインが必要です",
-    "description": "HashiCorp Vaultへのサインイン用のウィンドウが開きました。そこでサインインを完了すると、この接続は自動的に続行されます。",
-    "failed": "Vault 認証に失敗しました。もう一度お試しください。",
-    "reopen": "サインインウィンドウを再表示"
-  },
-  "permissions": {
-    "use": {
-      "title": "Vault SSH署名を使用する",
-      "description": "Vault署名者プロファイルを作成し、Vaultを使用しているホストに接続します。"
-    },
-    "share": {
-      "title": "Vault プロファイルを共有する",
-      "description": "Vault署名者プロファイルを共有としてマークすると、すべてのユーザーが選択できるようになります。"
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "リダイレクトURI",
-      "description": "Termixがサインインする各Vault OIDCロールのallowed_redirect_urisに、このURLを追加してください。"
-    },
-    "legacyCallback": {
-      "label": "古いリダイレクトURIを使用する",
-      "description": "バージョン2.9以前に使用されていたリダイレクトURIである/vault/oidc/callbackを送信し続けてください。Vaultロールで新しいURIが許可されたら、この設定を無効にしてください。"
-    },
-    "host": {
-      "profileId": {
-        "label": "Vault署名者プロフィール"
-      }
-    }
-  },
-  "plugin": {
-    "name": "HashiCorp Vault"
-  }
-}
diff --git a/plugins/vault/locales/translated/ko_KR.json b/plugins/vault/locales/translated/ko_KR.json
deleted file mode 100644
index 96e70c06b..000000000
--- a/plugins/vault/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Vault 서명자 프로필",
-    "selectProfile": "Vault 프로필 선택...",
-    "hint": "설정은 공유 프로필에서 가져옵니다. 연결 시 OIDC를 통해 Vault에 로그인하게 됩니다. 비밀은 저장되지 않습니다.",
-    "docs": "문서 보기",
-    "sharedProfile": "{{name}} (공유됨)"
-  },
-  "profiles": {
-    "new": "새 프로필",
-    "manage": "Vault 프로필 관리",
-    "name": "친숙한 이름",
-    "vaultAddr": "Vault 주소",
-    "namespace": "네임스페이스",
-    "oidcMount": "OIDC 인증 마운트",
-    "oidcRole": "OIDC 역할",
-    "sshMount": "SSH 시크릿 마운트",
-    "sshRole": "SSH 서명자 역할",
-    "validPrincipals": "유효한 프린시펄",
-    "keyType": "임시 키 유형",
-    "shareWithAll": "모든 사용자와 공유",
-    "create": "프로필 생성",
-    "created": "Vault 프로필 생성됨",
-    "saved": "Vault 프로필 저장됨",
-    "deleted": "Vault 프로필 삭제됨",
-    "saveFailed": "Vault 프로필 저장 실패",
-    "deleteFailed": "Vault 프로필 삭제 실패",
-    "save": "프로필 저장",
-    "validationError": "이름, Vault 주소 및 SSH 서명자 역할이 필요합니다.",
-    "none": "아직 Vault 프로필이 없습니다.",
-    "sharedBadge": "공유",
-    "edit": "편집",
-    "delete": "삭제"
-  },
-  "hosts": {
-    "filterAuthVault": "둥근 천장"
-  },
-  "dialog": {
-    "title": "Vault 로그인 필요",
-    "description": "HashiCorp Vault 로그인을 위한 창이 열렸습니다. 해당 창에서 로그인을 완료하면 연결이 자동으로 계속됩니다.",
-    "failed": "Vault 인증에 실패했습니다. 다시 시도하세요.",
-    "reopen": "로그인 창 다시 열기"
-  },
-  "permissions": {
-    "use": {
-      "title": "Vault SSH 서명을 사용하세요.",
-      "description": "Vault 서명자 프로필을 생성하고 Vault를 사용하는 호스트에 연결합니다."
-    },
-    "share": {
-      "title": "Share Vault 프로필",
-      "description": "Vault 서명자 프로필을 공유로 표시하면 모든 사용자가 해당 프로필을 선택할 수 있습니다."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "리디렉션 URI",
-      "description": "Termix가 로그인하는 각 Vault OIDC 역할의 allowed_redirect_uris에 이 URL을 추가하세요."
-    },
-    "legacyCallback": {
-      "label": "이전 리디렉션 URI를 사용하세요",
-      "description": "2.9 이전 버전에서 사용했던 리디렉션 URI인 /vault/oidc/callback을 계속 전송하세요. Vault 역할에서 새 URI를 허용하면 이 기능을 비활성화하십시오."
-    },
-    "host": {
-      "profileId": {
-        "label": "Vault 서명자 프로필"
-      }
-    }
-  },
-  "plugin": {
-    "name": "하시코프 볼트"
-  }
-}
diff --git a/plugins/vault/locales/translated/nl_NL.json b/plugins/vault/locales/translated/nl_NL.json
deleted file mode 100644
index ca855d522..000000000
--- a/plugins/vault/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Vault-ondertekenaarprofiel",
-    "selectProfile": "Selecteer een Vault-profiel...",
-    "hint": "De instellingen zijn afkomstig van het gedeelde profiel; u meldt zich bij Vault aan via OIDC wanneer u verbinding maakt. Er worden geen geheimen opgeslagen.",
-    "docs": "Documenten bekijken",
-    "sharedProfile": "{{name}} (gedeeld)"
-  },
-  "profiles": {
-    "new": "Nieuw profiel",
-    "manage": "Beheer Vault-profielen",
-    "name": "Vriendelijke naam",
-    "vaultAddr": "Kluisadres",
-    "namespace": "Naamruimte",
-    "oidcMount": "OIDC-authenticatiekoppeling",
-    "oidcRole": "OIDC-rol",
-    "sshMount": "SSH-geheimen Mount",
-    "sshRole": "SSH-ondertekenaarrol",
-    "validPrincipals": "Geldige principes",
-    "keyType": "Tijdelijk sleuteltype",
-    "shareWithAll": "Delen met alle gebruikers",
-    "create": "Profiel aanmaken",
-    "created": "Vault-profiel aangemaakt",
-    "saved": "Vault-profiel opgeslagen",
-    "deleted": "Kluisprofiel verwijderd",
-    "saveFailed": "Het opslaan van het Vault-profiel is mislukt.",
-    "deleteFailed": "Het verwijderen van het Vault-profiel is mislukt.",
-    "save": "Profiel opslaan",
-    "validationError": "Naam, kluisadres en SSH-ondertekeningsrol zijn vereist.",
-    "none": "Nog geen Vault-profielen beschikbaar.",
-    "sharedBadge": "gedeeld",
-    "edit": "Bewerking",
-    "delete": "Verwijderen"
-  },
-  "hosts": {
-    "filterAuthVault": "Kluis"
-  },
-  "dialog": {
-    "title": "Aanmelden bij Vault is vereist.",
-    "description": "Er is een venster geopend om in te loggen bij HashiCorp Vault. Voltooi de aanmelding daar; deze verbinding wordt automatisch tot stand gebracht.",
-    "failed": "Authenticatie voor de kluis is mislukt. Probeer het opnieuw.",
-    "reopen": "Heropen het aanmeldvenster"
-  },
-  "permissions": {
-    "use": {
-      "title": "Gebruik Vault SSH-ondertekening",
-      "description": "Maak Vault-ondertekeningsprofielen aan en maak verbinding met hosts die Vault gebruiken."
-    },
-    "share": {
-      "title": "Deel Vault-profielen",
-      "description": "Markeer een Vault-ondertekeningsprofiel als gedeeld, zodat elke gebruiker het kan selecteren."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "Omleidings-URI",
-      "description": "Voeg deze URL toe aan allowed_redirect_uris in elke Vault OIDC-rol waarmee Termix zich aanmeldt."
-    },
-    "legacyCallback": {
-      "label": "Gebruik de oude omleidings-URI",
-      "description": "Blijf /vault/oidc/callback verzenden, de omleidings-URI die vóór versie 2.9 werd gebruikt. Schakel dit uit zodra uw Vault-rollen de nieuwe URI toestaan."
-    },
-    "host": {
-      "profileId": {
-        "label": "Vault-ondertekenaarprofiel"
-      }
-    }
-  },
-  "plugin": {
-    "name": "HashiCorp-kluis"
-  }
-}
diff --git a/plugins/vault/locales/translated/no_NO.json b/plugins/vault/locales/translated/no_NO.json
deleted file mode 100644
index 1a2275c1f..000000000
--- a/plugins/vault/locales/translated/no_NO.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Profil for hvelvsigner",
-    "selectProfile": "Velg en Vault-profil...",
-    "hint": "Innstillingene kommer fra den delte profilen. Du logger deg på Vault via OIDC når du kobler til. Ingen hemmeligheter lagres.",
-    "docs": "Vis dokumenter",
-    "sharedProfile": "{{name}} (delt)"
-  },
-  "profiles": {
-    "new": "Ny profil",
-    "manage": "Administrer Vault-profiler",
-    "name": "Vennlig navn",
-    "vaultAddr": "Hvelvadresse",
-    "namespace": "Navnerom",
-    "oidcMount": "OIDC-autentiseringsmontering",
-    "oidcRole": "OIDC-rolle",
-    "sshMount": "SSH-hemmeligheter monteres",
-    "sshRole": "SSH-signatørrolle",
-    "validPrincipals": "Gyldige prinsipaler",
-    "keyType": "Kortvarig nøkkeltype",
-    "shareWithAll": "Del med alle brukere",
-    "create": "Opprett profil",
-    "created": "Vault-profil opprettet",
-    "saved": "Vault-profilen er lagret",
-    "deleted": "Vault-profilen er slettet",
-    "saveFailed": "Kunne ikke lagre Vault-profilen",
-    "deleteFailed": "Kunne ikke slette Vault-profilen",
-    "save": "Lagre profil",
-    "validationError": "Navn, hvelvadresse og SSH-signerrolle er obligatorisk",
-    "none": "Ingen Vault-profiler ennå.",
-    "sharedBadge": "delt",
-    "edit": "Rediger",
-    "delete": "Slett"
-  },
-  "hosts": {
-    "filterAuthVault": "Hvelv"
-  },
-  "dialog": {
-    "title": "Pålogging til arkivet kreves",
-    "description": "Et vindu har åpnet seg for å logge på HashiCorp Vault. Fullfør påloggingen der; denne tilkoblingen vil fortsette automatisk.",
-    "failed": "Hvelv-autentisering mislyktes. Prøv på nytt.",
-    "reopen": "Åpne påloggingsvinduet på nytt"
-  },
-  "permissions": {
-    "use": {
-      "title": "Bruk Vault SSH-signering",
-      "description": "Opprett Vault-signeringsprofiler og koble til verter som bruker Vault."
-    },
-    "share": {
-      "title": "Del Vault-profiler",
-      "description": "Merk en Vault-signeringsprofil som delt, slik at alle brukere kan velge den."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "Omdirigerings-URI",
-      "description": "Legg til denne URL-en i allowed_redirect_uris i hver Vault OIDC-rolle som Termix logger på med."
-    },
-    "legacyCallback": {
-      "label": "Bruk den gamle omdirigerings-URI-en",
-      "description": "Fortsett å sende /vault/oidc/callback, omdirigerings-URI-en som ble brukt før 2.9. Slå av dette når Vault-rollene dine tillater den nye."
-    },
-    "host": {
-      "profileId": {
-        "label": "Profil for arkivsigner"
-      }
-    }
-  },
-  "plugin": {
-    "name": "HashiCorp-hvelvet"
-  }
-}
diff --git a/plugins/vault/locales/translated/pl_PL.json b/plugins/vault/locales/translated/pl_PL.json
deleted file mode 100644
index e5af8146f..000000000
--- a/plugins/vault/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Profil podpisujący Vault",
-    "selectProfile": "Wybierz profil Vault...",
-    "hint": "Ustawienia pochodzą z profilu współdzielonego. Po połączeniu zalogujesz się do Vault przez OIDC. Nie są przechowywane żadne sekrety.",
-    "docs": "Zobacz dokumentację",
-    "sharedProfile": "{{name}} (udostępnione)"
-  },
-  "profiles": {
-    "new": "Nowy profil",
-    "manage": "Zarządzaj profilami Vault",
-    "name": "Przyjazna nazwa",
-    "vaultAddr": "Adres Vault",
-    "namespace": "Przestrzeń nazw",
-    "oidcMount": "Mount uwierzytelniania OIDC",
-    "oidcRole": "Rola OIDC",
-    "sshMount": "Mount sekretów SSH",
-    "sshRole": "Rola podpisująca SSH",
-    "validPrincipals": "Dozwoleni użytkownicy (principals)",
-    "keyType": "Typ klucza efemerycznego",
-    "shareWithAll": "Udostępnij wszystkim użytkownikom",
-    "create": "Utwórz profil",
-    "created": "Utworzono profil Vault",
-    "saved": "Zapisano profil Vault",
-    "deleted": "Usunięto profil Vault",
-    "saveFailed": "Nie udało się zapisać profilu Vault",
-    "deleteFailed": "Nie udało się usunąć profilu Vault",
-    "save": "Zapisz profil",
-    "validationError": "Wymagane są nazwa, adres Vault i rola podpisująca SSH",
-    "none": "Brak profili Vault.",
-    "sharedBadge": "współdzielony",
-    "edit": "Edytuj",
-    "delete": "Usuń"
-  },
-  "hosts": {
-    "filterAuthVault": "Sklepienie"
-  },
-  "dialog": {
-    "title": "Wymagane logowanie do Vault",
-    "description": "Otworzyło się okno logowania do HashiCorp Vault. Dokończ logowanie, a połączenie zostanie nawiązane automatycznie.",
-    "failed": "Uwierzytelnienie w Vault nie powiodło się. Spróbuj ponownie.",
-    "reopen": "Otwórz ponownie okno logowania"
-  },
-  "permissions": {
-    "use": {
-      "title": "Użyj podpisu SSH Vault",
-      "description": "Utwórz profile sygnatariuszy Vault i połącz się z hostami korzystającymi z Vault."
-    },
-    "share": {
-      "title": "Udostępnij profile Vault",
-      "description": "Oznacz profil sygnatariusza Vault jako udostępniony, aby każdy użytkownik mógł z niego skorzystać."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "Przekieruj URI",
-      "description": "Dodaj ten adres URL do allowed_redirect_uris w każdej roli Vault OIDC, za pomocą której loguje się Termix."
-    },
-    "legacyCallback": {
-      "label": "Użyj starego adresu URI przekierowania",
-      "description": "Nadal wysyłaj /vault/oidc/callback, czyli przekierowanie URI używane przed wersją 2.9. Wyłącz tę opcję, gdy Twoje role Vaulta pozwolą na nową."
-    },
-    "host": {
-      "profileId": {
-        "label": "Profil sygnatariusza Vault"
-      }
-    }
-  },
-  "plugin": {
-    "name": "HashiCorp Vault"
-  }
-}
diff --git a/plugins/vault/locales/translated/pt_BR.json b/plugins/vault/locales/translated/pt_BR.json
deleted file mode 100644
index f4d94a0c7..000000000
--- a/plugins/vault/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Perfil do assinante do Vault",
-    "selectProfile": "Selecione um perfil do Vault...",
-    "hint": "As configurações são provenientes do perfil compartilhado; você fará login no Vault via OIDC ao se conectar. Nenhum segredo é armazenado.",
-    "docs": "Documentação",
-    "sharedProfile": "{{name}} (compartilhado)"
-  },
-  "profiles": {
-    "new": "Novo perfil",
-    "manage": "Gerenciar perfis do Vault",
-    "name": "Nome Amigável",
-    "vaultAddr": "Endereço do cofre",
-    "namespace": "Espaço de nomes",
-    "oidcMount": "Montagem de autenticação OIDC",
-    "oidcRole": "Função OIDC",
-    "sshMount": "Montagem de segredos SSH",
-    "sshRole": "Função de assinatura SSH",
-    "validPrincipals": "Principais válidos",
-    "keyType": "Tipo de chave efêmera",
-    "shareWithAll": "Compartilhe com todos os usuários",
-    "create": "Criar perfil",
-    "created": "Perfil do Vault criado",
-    "saved": "Perfil do Vault salvo",
-    "deleted": "Perfil do Vault excluído",
-    "saveFailed": "Falha ao salvar o perfil do Vault",
-    "deleteFailed": "Falha ao excluir o perfil do Vault",
-    "save": "Salvar perfil",
-    "validationError": "Nome, endereço do Vault e função de assinatura SSH são obrigatórios.",
-    "none": "Ainda não há perfis no Vault.",
-    "sharedBadge": "compartilhado",
-    "edit": "Editar",
-    "delete": "Apagar"
-  },
-  "hosts": {
-    "filterAuthVault": "Cofre"
-  },
-  "dialog": {
-    "title": "É necessário fazer login no cofre.",
-    "description": "Uma janela foi aberta para fazer login no HashiCorp Vault. Conclua o login; esta conexão será estabelecida automaticamente.",
-    "failed": "A autenticação do cofre falhou. Tente novamente.",
-    "reopen": "Reabrir janela de login"
-  },
-  "permissions": {
-    "use": {
-      "title": "Use a assinatura SSH do Vault",
-      "description": "Crie perfis de assinatura do Vault e conecte-se a hosts que usam o Vault."
-    },
-    "share": {
-      "title": "Perfis do Share Vault",
-      "description": "Marque um perfil de assinatura do Vault como compartilhado para que todos os usuários possam selecioná-lo."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI de redirecionamento",
-      "description": "Adicione este URL à lista allowed_redirect_uris em cada função OIDC do Vault que o Termix utiliza para fazer login."
-    },
-    "legacyCallback": {
-      "label": "Use o URI de redirecionamento antigo",
-      "description": "Continue enviando /vault/oidc/callback, o URI de redirecionamento usado antes da versão 2.9. Desative-o assim que suas funções no Vault permitirem o novo URI."
-    },
-    "host": {
-      "profileId": {
-        "label": "Perfil de assinatura do Vault"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Cofre da HashiCorp"
-  }
-}
diff --git a/plugins/vault/locales/translated/pt_PT.json b/plugins/vault/locales/translated/pt_PT.json
deleted file mode 100644
index 4f8f9285c..000000000
--- a/plugins/vault/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Perfil de assinatura Vault",
-    "selectProfile": "Selecionar um perfil Vault...",
-    "hint": "As definições provêm do perfil partilhado; ao ligar, iniciará sessão no Vault via OIDC. Nenhum segredo é armazenado.",
-    "docs": "Ver docs",
-    "sharedProfile": "{{name}} (partilhado)"
-  },
-  "profiles": {
-    "new": "Novo perfil",
-    "manage": "Gerir perfis Vault",
-    "name": "Nome Amigável",
-    "vaultAddr": "Endereço Vault",
-    "namespace": "Namespace",
-    "oidcMount": "Mount de autenticação OIDC",
-    "oidcRole": "Função OIDC",
-    "sshMount": "Mount de segredos SSH",
-    "sshRole": "Função de assinatura SSH",
-    "validPrincipals": "Principais válidos",
-    "keyType": "Tipo de chave efémera",
-    "shareWithAll": "Partilhar com todos os utilizadores",
-    "create": "Criar perfil",
-    "created": "Perfil Vault criado",
-    "saved": "Perfil Vault guardado",
-    "deleted": "Perfil Vault eliminado",
-    "saveFailed": "Falha ao guardar perfil Vault",
-    "deleteFailed": "Falha ao eliminar perfil Vault",
-    "save": "Guardar perfil",
-    "validationError": "Nome, endereço Vault e função de signatário SSH são obrigatórios",
-    "none": "Ainda sem perfis Vault.",
-    "sharedBadge": "partilhado",
-    "edit": "Editar",
-    "delete": "Eliminar"
-  },
-  "hosts": {
-    "filterAuthVault": "Cofre"
-  },
-  "dialog": {
-    "title": "Início de sessão no Vault necessário",
-    "description": "Foi aberta uma janela para iniciar sessão no HashiCorp Vault. Conclua o início de sessão aí; esta ligação continuará automaticamente.",
-    "failed": "A autenticação no Vault falhou. Tente novamente.",
-    "reopen": "Reabrir janela de início de sessão"
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilize a assinatura SSH do Vault",
-      "description": "Crie perfis de assinatura do Vault e ligue-se a hosts que utilizam o Vault."
-    },
-    "share": {
-      "title": "Perfis do Share Vault",
-      "description": "Marque um perfil de subscrição do Vault como partilhado para que todos os utilizadores o possam selecionar."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI de redireccionamento",
-      "description": "Adicione este URL à lista allowed_redirect_uris em cada função OIDC do Vault que o Termix utiliza para iniciar sessão."
-    },
-    "legacyCallback": {
-      "label": "Utilize o URI de redirecionamento antigo",
-      "description": "Continue a enviar /vault/oidc/callback, o URI de redireccionamento utilizado antes da versão 2.9. Desative-o assim que as suas funções no Vault permitirem o novo URI."
-    },
-    "host": {
-      "profileId": {
-        "label": "Perfil de assinatura do cofre"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Cofre da HashiCorp"
-  }
-}
diff --git a/plugins/vault/locales/translated/ro_RO.json b/plugins/vault/locales/translated/ro_RO.json
deleted file mode 100644
index f310cb4fa..000000000
--- a/plugins/vault/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Profilul semnatarului din seif",
-    "selectProfile": "Selectați un profil Vault...",
-    "hint": "Setările provin din profilul partajat; te vei conecta la Vault prin OIDC când te conectezi. Nu sunt stocate secrete.",
-    "docs": "Vizualizați documentele",
-    "sharedProfile": "{{name}} (partajat)"
-  },
-  "profiles": {
-    "new": "Profil nou",
-    "manage": "Gestionați profilurile din seif",
-    "name": "Nume prietenos",
-    "vaultAddr": "Adresă seif",
-    "namespace": "Spațiu de nume",
-    "oidcMount": "Montare autentificare OIDC",
-    "oidcRole": "Rolul OIDC",
-    "sshMount": "Secretele SSH Mount",
-    "sshRole": "Rolul semnatarului SSH",
-    "validPrincipals": "Principali validi",
-    "keyType": "Tip de cheie efemeră",
-    "shareWithAll": "Partajați cu toți utilizatorii",
-    "create": "Creați un profil",
-    "created": "Profilul seifului a fost creat",
-    "saved": "Profilul seifului a fost salvat",
-    "deleted": "Profilul seifului a fost șters",
-    "saveFailed": "Nu s-a putut salva profilul din Seif",
-    "deleteFailed": "Nu s-a putut șterge profilul Vault",
-    "save": "Salvați profilul",
-    "validationError": "Numele, adresa seifului și rolul semnatarului SSH sunt obligatorii.",
-    "none": "Încă nu există profiluri Vault.",
-    "sharedBadge": "partajat",
-    "edit": "Edita",
-    "delete": "Şterge"
-  },
-  "hosts": {
-    "filterAuthVault": "Seif"
-  },
-  "dialog": {
-    "title": "Este necesară conectarea la seif",
-    "description": "S-a deschis o fereastră pentru a vă conecta la HashiCorp Vault. Finalizați conectarea acolo; această conexiune va continua automat.",
-    "failed": "Autentificarea în seif a eșuat. Vă rugăm să încercați din nou.",
-    "reopen": "Redeschideți fereastra de conectare"
-  },
-  "permissions": {
-    "use": {
-      "title": "Folosește semnarea SSH în Vault",
-      "description": "Creați profiluri de semnatar Vault și conectați-vă la gazde care utilizează Vault."
-    },
-    "share": {
-      "title": "Partajați profiluri Vault",
-      "description": "Marcați un profil de semnatar Vault ca partajat, astfel încât fiecare utilizator să îl poată alege."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI de redirecționare",
-      "description": "Adăugați această adresă URL la allowed_redirect_uris în fiecare rol OIDC din Vault cu care se conectează Termix."
-    },
-    "legacyCallback": {
-      "label": "Folosește vechiul URI de redirecționare",
-      "description": "Continuă să trimiți /vault/oidc/callback, URI-ul de redirecționare folosit înainte de versiunea 2.9. Dezactivează această opțiune odată ce rolurile din Vault îl permit pe cel nou."
-    },
-    "host": {
-      "profileId": {
-        "label": "Profilul semnatarului din seif"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Seiful HashiCorp"
-  }
-}
diff --git a/plugins/vault/locales/translated/ru_RU.json b/plugins/vault/locales/translated/ru_RU.json
deleted file mode 100644
index 6db573a21..000000000
--- a/plugins/vault/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Профиль подписчика Vault",
-    "selectProfile": "Выберите профиль Vault...",
-    "hint": "Настройки берутся из общего профиля; при подключении вы войдёте в Vault через OIDC. Секреты не хранятся.",
-    "docs": "Документация",
-    "sharedProfile": "{{name}} (совместно)"
-  },
-  "profiles": {
-    "new": "Новый профиль",
-    "manage": "Управление профилями Vault",
-    "name": "Дружественное имя",
-    "vaultAddr": "Адрес Vault",
-    "namespace": "Пространство имён",
-    "oidcMount": "Монтирование аутентификации OIDC",
-    "oidcRole": "Роль OIDC",
-    "sshMount": "Монтирование секретов SSH",
-    "sshRole": "Роль подписчика SSH",
-    "validPrincipals": "Допустимые принципалы",
-    "keyType": "Тип эфемерного ключа",
-    "shareWithAll": "Общий доступ для всех пользователей",
-    "create": "Создать профиль",
-    "created": "Профиль Vault создан",
-    "saved": "Профиль Vault сохранён",
-    "deleted": "Профиль Vault удалён",
-    "saveFailed": "Не удалось сохранить профиль Vault",
-    "deleteFailed": "Не удалось удалить профиль Vault",
-    "save": "Сохранить профиль",
-    "validationError": "Требуются имя, адрес Vault и роль SSH подписанта",
-    "none": "Пока нет профилей Vault.",
-    "sharedBadge": "общий",
-    "edit": "Редактировать",
-    "delete": "Удалить"
-  },
-  "hosts": {
-    "filterAuthVault": "Сейф"
-  },
-  "dialog": {
-    "title": "Требуется вход в Vault",
-    "description": "Открыто окно для входа в HashiCorp Vault. Завершите вход там; подключение продолжится автоматически.",
-    "failed": "Аутентификация Vault не удалась. Попробуйте снова.",
-    "reopen": "Повторно открыть окно входа"
-  },
-  "permissions": {
-    "use": {
-      "title": "Используйте SSH-подпись Vault.",
-      "description": "Создайте профили подписантов Vault и подключитесь к хостам, использующим Vault."
-    },
-    "share": {
-      "title": "Поделиться профилями хранилища",
-      "description": "Отметьте профиль подписанта Vault как общий, чтобы каждый пользователь мог его выбрать."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI перенаправления",
-      "description": "Добавьте этот URL-адрес в параметр allowed_redirect_uris в каждой роли Vault OIDC, с которой Termix выполняет вход в систему."
-    },
-    "legacyCallback": {
-      "label": "Используйте старый URI перенаправления.",
-      "description": "Продолжайте отправлять /vault/oidc/callback, URI перенаправления, использовавшийся до версии 2.9. Отключите эту функцию, как только ваши роли Vault позволят использовать новый URI."
-    },
-    "host": {
-      "profileId": {
-        "label": "Профиль подписанта хранилища"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Хранилище ХашиКорпа"
-  }
-}
diff --git a/plugins/vault/locales/translated/sr_SP.json b/plugins/vault/locales/translated/sr_SP.json
deleted file mode 100644
index cfa1b13b3..000000000
--- a/plugins/vault/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Профил потписника трезора",
-    "selectProfile": "Изаберите профил трезора...",
-    "hint": "Подешавања долазе из дељеног профила; пријавићете се у Vault преко OIDC-а када се повежете. Ниједне тајне се не чувају.",
-    "docs": "Прикажи документе",
-    "sharedProfile": "{{name}} (дељено)"
-  },
-  "profiles": {
-    "new": "Нови профил",
-    "manage": "Управљање профилима трезора",
-    "name": "Пријатељско име",
-    "vaultAddr": "Адреса трезора",
-    "namespace": "Именски простор",
-    "oidcMount": "OIDC аутентификација монтирања",
-    "oidcRole": "Улога OIDC-а",
-    "sshMount": "SSH тајне носач",
-    "sshRole": "Улога SSH потписника",
-    "validPrincipals": "Важећи принципали",
-    "keyType": "Тип ефемерног кључа",
-    "shareWithAll": "Подели са свим корисницима",
-    "create": "Направи профил",
-    "created": "Профил трезора је креиран",
-    "saved": "Профил трезора је сачуван",
-    "deleted": "Профил трезора је обрисан",
-    "saveFailed": "Чување профила у Трезору није успело",
-    "deleteFailed": "Брисање профила у Трезору није успело",
-    "save": "Сачувај профил",
-    "validationError": "Име, адреса трезора и улога SSH потписника су обавезни",
-    "none": "Још нема профила у Трезору.",
-    "sharedBadge": "дељено",
-    "edit": "Измени",
-    "delete": "Обриши"
-  },
-  "hosts": {
-    "filterAuthVault": "Трезор"
-  },
-  "dialog": {
-    "title": "Потребно је пријављивање у трезор",
-    "description": "Отворио се прозор за пријављивање на HashiCorp Vault. Завршите пријављивање тамо; ова веза ће се аутоматски наставити.",
-    "failed": "Аутентификација трезора није успела. Молимо покушајте поново.",
-    "reopen": "Поново отвори прозор за пријављивање"
-  },
-  "permissions": {
-    "use": {
-      "title": "Користите потписивање преко SSH-а у Vault-у",
-      "description": "Креирајте профиле потписника у Vault-у и повежите се са хостовима који користе Vault."
-    },
-    "share": {
-      "title": "Делите профиле у Трезору",
-      "description": "Означите профил потписника у Vault-у као дељен како би га сваки корисник могао изабрати."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI за преусмеравање",
-      "description": "Додајте ову URL адресу у allowed_redirect_uris у свакој Vault OIDC улози са којом се Termix пријављује."
-    },
-    "legacyCallback": {
-      "label": "Користите стари URI за преусмеравање",
-      "description": "Наставите да шаљете /vault/oidc/callback, URI за преусмеравање који је коришћен пре верзије 2.9. Искључите ово када ваше Vault улоге дозволе нови."
-    },
-    "host": {
-      "profileId": {
-        "label": "Профил потписника трезора"
-      }
-    }
-  },
-  "plugin": {
-    "name": "ХашиКорп трезор"
-  }
-}
diff --git a/plugins/vault/locales/translated/sv_SE.json b/plugins/vault/locales/translated/sv_SE.json
deleted file mode 100644
index d5dca5790..000000000
--- a/plugins/vault/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Profil för valvsignerare",
-    "selectProfile": "Välj en Vault-profil...",
-    "hint": "Inställningarna kommer från den delade profilen; du loggar in på Vault via OIDC när du ansluter. Inga hemligheter lagras.",
-    "docs": "Visa dokument",
-    "sharedProfile": "{{name}} (delad)"
-  },
-  "profiles": {
-    "new": "Ny profil",
-    "manage": "Hantera Vault-profiler",
-    "name": "Vänligt namn",
-    "vaultAddr": "Valvadress",
-    "namespace": "Namnrymd",
-    "oidcMount": "OIDC-autentiseringsmontering",
-    "oidcRole": "OIDC-roll",
-    "sshMount": "SSH-hemligheter monteras",
-    "sshRole": "SSH-signerarroll",
-    "validPrincipals": "Giltiga principer",
-    "keyType": "Tillfällig nyckeltyp",
-    "shareWithAll": "Dela med alla användare",
-    "create": "Skapa profil",
-    "created": "Arkivprofil skapad",
-    "saved": "Arkivprofilen har sparats",
-    "deleted": "Arkivprofil raderad",
-    "saveFailed": "Kunde inte spara arkivprofilen",
-    "deleteFailed": "Misslyckades med att ta bort Arkiv-profilen",
-    "save": "Spara profil",
-    "validationError": "Namn, valvadress och SSH-signerarroll krävs",
-    "none": "Inga Vault-profiler ännu.",
-    "sharedBadge": "delad",
-    "edit": "Redigera",
-    "delete": "Radera"
-  },
-  "hosts": {
-    "filterAuthVault": "Valv"
-  },
-  "dialog": {
-    "title": "Inloggning till arkivet krävs",
-    "description": "Ett fönster har öppnats för att logga in på HashiCorp Vault. Slutför inloggningen där; anslutningen fortsätter automatiskt.",
-    "failed": "Valvautentisering misslyckades. Försök igen.",
-    "reopen": "Öppna inloggningsfönstret igen"
-  },
-  "permissions": {
-    "use": {
-      "title": "Använd SSH-signering i Vault",
-      "description": "Skapa profiler för Vault-signerare och anslut till värdar som använder Vault."
-    },
-    "share": {
-      "title": "Dela Vault-profiler",
-      "description": "Markera en Vault-signerarprofil som delad så att alla användare kan välja den."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "Omdirigerings-URI",
-      "description": "Lägg till denna URL till allowed_redirect_uris i varje Vault OIDC-roll som Termix loggar in med."
-    },
-    "legacyCallback": {
-      "label": "Använd den gamla omdirigerings-URI:n",
-      "description": "Fortsätt skicka /vault/oidc/callback, den omdirigerings-URI som användes före 2.9. Stäng av detta när dina Vault-roller tillåter den nya."
-    },
-    "host": {
-      "profileId": {
-        "label": "Profil för valvsignerare"
-      }
-    }
-  },
-  "plugin": {
-    "name": "HashiCorp-valvet"
-  }
-}
diff --git a/plugins/vault/locales/translated/th_TH.json b/plugins/vault/locales/translated/th_TH.json
deleted file mode 100644
index 866d7c2fd..000000000
--- a/plugins/vault/locales/translated/th_TH.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "โปรไฟล์ผู้ลงนาม Vault",
-    "selectProfile": "เลือกโปรไฟล์ Vault...",
-    "hint": "การตั้งค่าต่างๆ มาจากโปรไฟล์ที่ใช้ร่วมกัน คุณจะเข้าสู่ระบบ Vault ผ่าน OIDC เมื่อเชื่อมต่อ ไม่มีข้อมูลลับใดๆ ถูกจัดเก็บไว้",
-    "docs": "ดูเอกสาร",
-    "sharedProfile": "{{name}} (แชร์)"
-  },
-  "profiles": {
-    "new": "โปรไฟล์ใหม่",
-    "manage": "จัดการโปรไฟล์ Vault",
-    "name": "ชื่อที่เป็นมิตร",
-    "vaultAddr": "ที่อยู่ห้องนิรภัย",
-    "namespace": "เนมสเปซ",
-    "oidcMount": "การติดตั้งการตรวจสอบสิทธิ์ OIDC",
-    "oidcRole": "บทบาทของ OIDC",
-    "sshMount": "SSH Secrets Mount",
-    "sshRole": "บทบาทผู้ลงนาม SSH",
-    "validPrincipals": "หลักการที่ถูกต้อง",
-    "keyType": "ประเภทคีย์ชั่วคราว",
-    "shareWithAll": "แชร์กับผู้ใช้ทั้งหมด",
-    "create": "สร้างโปรไฟล์",
-    "created": "สร้างโปรไฟล์ Vault แล้ว",
-    "saved": "บันทึกโปรไฟล์ Vault แล้ว",
-    "deleted": "โปรไฟล์ Vault ถูกลบแล้ว",
-    "saveFailed": "ไม่สามารถบันทึกโปรไฟล์ Vault ได้",
-    "deleteFailed": "ไม่สามารถลบโปรไฟล์ Vault ได้",
-    "save": "บันทึกโปรไฟล์",
-    "validationError": "จำเป็นต้องระบุชื่อ ที่อยู่ Vault และบทบาทผู้ลงนาม SSH",
-    "none": "ยังไม่มีโปรไฟล์ Vault ใดๆ",
-    "sharedBadge": "แชร์",
-    "edit": "แก้ไข",
-    "delete": "ลบ"
-  },
-  "hosts": {
-    "filterAuthVault": "ห้องนิรภัย"
-  },
-  "dialog": {
-    "title": "ต้องลงชื่อเข้าใช้ Vault",
-    "description": "หน้าต่างสำหรับเข้าสู่ระบบ HashiCorp Vault ได้เปิดขึ้นแล้ว โปรดทำการเข้าสู่ระบบให้เสร็จสมบูรณ์ การเชื่อมต่อนี้จะดำเนินการต่อโดยอัตโนมัติ",
-    "failed": "การตรวจสอบสิทธิ์ Vault ล้มเหลว โปรดลองอีกครั้ง",
-    "reopen": "เปิดหน้าต่างเข้าสู่ระบบอีกครั้ง"
-  },
-  "permissions": {
-    "use": {
-      "title": "ใช้การลงนาม SSH ของ Vault",
-      "description": "สร้างโปรไฟล์ผู้ลงนาม Vault และเชื่อมต่อกับโฮสต์ที่ใช้ Vault"
-    },
-    "share": {
-      "title": "โปรไฟล์ Share Vault",
-      "description": "ตั้งค่าโปรไฟล์ผู้ลงนาม Vault เป็นแบบแชร์ เพื่อให้ผู้ใช้ทุกคนสามารถเลือกใช้ได้"
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI การเปลี่ยนเส้นทาง",
-      "description": "เพิ่ม URL นี้ลงใน allowed_redirect_uris ในแต่ละบทบาท OIDC ของ Vault ที่ Termix ใช้เข้าสู่ระบบ"
-    },
-    "legacyCallback": {
-      "label": "ใช้ URI การเปลี่ยนเส้นทางแบบเดิม",
-      "description": "ส่ง /vault/oidc/callback ต่อไป ซึ่งเป็น URI สำหรับการเปลี่ยนเส้นทางที่ใช้ก่อนเวอร์ชัน 2.9 ปิดใช้งานเมื่อบทบาท Vault ของคุณอนุญาตให้ใช้ URI ใหม่แล้ว"
-    },
-    "host": {
-      "profileId": {
-        "label": "โปรไฟล์ผู้ลงนาม Vault"
-      }
-    }
-  },
-  "plugin": {
-    "name": "ฮาชิคอร์ป วอลท์"
-  }
-}
diff --git a/plugins/vault/locales/translated/tr_TR.json b/plugins/vault/locales/translated/tr_TR.json
deleted file mode 100644
index 1e500575e..000000000
--- a/plugins/vault/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Vault İmzalayıcı Profili",
-    "selectProfile": "Bir Vault profili seçin...",
-    "hint": "Ayarlar paylaşılan profilden gelir; bağlandığınızda OIDC ile Vault'ta oturum açarsınız. Hiçbir gizli bilgi saklanmaz.",
-    "docs": "Belgelere bak",
-    "sharedProfile": "{{name}} (paylaşılan)"
-  },
-  "profiles": {
-    "new": "Yeni profil",
-    "manage": "Vault Profillerini Yönet",
-    "name": "Gösterim Adı",
-    "vaultAddr": "Vault Adresi",
-    "namespace": "Ad Alanı",
-    "oidcMount": "OIDC Kimlik Doğrulama Bağlama",
-    "oidcRole": "OIDC Rolü",
-    "sshMount": "SSH Gizli Dizin Bağlama",
-    "sshRole": "SSH İmzalayıcı Rolü",
-    "validPrincipals": "Geçerli Asıllar",
-    "keyType": "Geçici Anahtar Türü",
-    "shareWithAll": "Tüm Kullanıcılarla Paylaş",
-    "create": "Profil oluştur",
-    "created": "Vault profili oluşturuldu",
-    "saved": "Vault profili kaydedildi",
-    "deleted": "Vault profili silindi",
-    "saveFailed": "Vault profili kaydedilemedi",
-    "deleteFailed": "Vault profili silinemedi",
-    "save": "Profili kaydet",
-    "validationError": "Ad, Vault adresi ve SSH imzalama rolü gereklidir",
-    "none": "Henüz Vault profili yok.",
-    "sharedBadge": "paylaşılan",
-    "edit": "Düzenle",
-    "delete": "Sil"
-  },
-  "hosts": {
-    "filterAuthVault": "Kasa"
-  },
-  "dialog": {
-    "title": "Vault Oturum Açması Gerekli",
-    "description": "HashiCorp Vault'ta oturum açmak için bir pencere açıldı. Orada oturum açmayı tamamlayın; bu bağlantı otomatik olarak devam edecek.",
-    "failed": "Vault kimlik doğrulaması başarısız oldu. Lütfen tekrar deneyin.",
-    "reopen": "Oturum açma penceresini yeniden aç"
-  },
-  "permissions": {
-    "use": {
-      "title": "Vault SSH imzalama özelliğini kullanın.",
-      "description": "Vault imzalayıcı profilleri oluşturun ve Vault kullanan sunuculara bağlanın."
-    },
-    "share": {
-      "title": "Share Vault profillerini paylaşın",
-      "description": "Bir Vault imzalayıcı profilini paylaşımlı olarak işaretleyin, böylece her kullanıcı onu seçebilir."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "Yönlendirme URI'si",
-      "description": "Termix'in oturum açtığı her Vault OIDC rolündeki allowed_redirect_uris alanına bu URL'yi ekleyin."
-    },
-    "legacyCallback": {
-      "label": "Eski yönlendirme URI'sini kullanın.",
-      "description": "2.9 öncesinde kullanılan yönlendirme URI'si olan /vault/oidc/callback'i göndermeye devam edin. Vault rolleriniz yeni URI'ye izin verdiğinde bunu kapatın."
-    },
-    "host": {
-      "profileId": {
-        "label": "Kasa imzalayıcı profili"
-      }
-    }
-  },
-  "plugin": {
-    "name": "HashiCorp Kasası"
-  }
-}
diff --git a/plugins/vault/locales/translated/uk_UA.json b/plugins/vault/locales/translated/uk_UA.json
deleted file mode 100644
index 3202031b6..000000000
--- a/plugins/vault/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Профіль підписанта сховища",
-    "selectProfile": "Виберіть профіль Сховища...",
-    "hint": "Налаштування надходять зі спільного профілю; ви входите у Сейф через OIDC під час підключення. Секрети не зберігаються.",
-    "docs": "Переглянути документи",
-    "sharedProfile": "{{name}} (спільний доступ)"
-  },
-  "profiles": {
-    "new": "Новий профіль",
-    "manage": "Керування профілями Сховища",
-    "name": "Зрозуміле ім'я",
-    "vaultAddr": "Адреса сховища",
-    "namespace": "Простір імен",
-    "oidcMount": "Монтування автентифікації OIDC",
-    "oidcRole": "Роль OIDC",
-    "sshMount": "SSH-секрети кріплення",
-    "sshRole": "Роль підписувача SSH",
-    "validPrincipals": "Дійсні принципали",
-    "keyType": "Тип тимчасового ключа",
-    "shareWithAll": "Поділитися з усіма користувачами",
-    "create": "Створити профіль",
-    "created": "Профіль сховища створено",
-    "saved": "Профіль сховища збережено",
-    "deleted": "Профіль сховища видалено",
-    "saveFailed": "Не вдалося зберегти профіль Сейфа",
-    "deleteFailed": "Не вдалося видалити профіль Сейфа",
-    "save": "Зберегти профіль",
-    "validationError": "Ім'я, адреса сховища та роль підписувача SSH обов'язкові",
-    "none": "Поки що немає профілів Сейфа.",
-    "sharedBadge": "спільний",
-    "edit": "Редагувати",
-    "delete": "Видалити"
-  },
-  "hosts": {
-    "filterAuthVault": "Сховище"
-  },
-  "dialog": {
-    "title": "Потрібен вхід до Сейфа",
-    "description": "Відкрилося вікно для входу в HashiCorp Vault. Завершіть вхід там; це з’єднання продовжиться автоматично.",
-    "failed": "Не вдалося виконати автентифікацію сховища. Спробуйте ще раз.",
-    "reopen": "Знову відкрити вікно входу"
-  },
-  "permissions": {
-    "use": {
-      "title": "Використовуйте підписування через Сейф SSH",
-      "description": "Створюйте профілі підписантів Vault та підключайтеся до хостів, які використовують Vault."
-    },
-    "share": {
-      "title": "Поділитися профілями Сейфа",
-      "description": "Позначте профіль підписанта Vault як спільний, щоб кожен користувач міг його вибрати."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI перенаправлення",
-      "description": "Додайте цю URL-адресу до allowed_redirect_uris у кожній ролі Vault OIDC, за допомогою якої Termix входить у систему."
-    },
-    "legacyCallback": {
-      "label": "Використовувати старий URI перенаправлення",
-      "description": "Продовжуйте надсилати /vault/oidc/callback, URI перенаправлення, який використовувався до версії 2.9. Вимкніть цю функцію, щойно ваші ролі Vault дозволять новий параметр."
-    },
-    "host": {
-      "profileId": {
-        "label": "Профіль підписанта сховища"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Сховище HashiCorp"
-  }
-}
diff --git a/plugins/vault/locales/translated/vi_VN.json b/plugins/vault/locales/translated/vi_VN.json
deleted file mode 100644
index 81f147aa1..000000000
--- a/plugins/vault/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Hồ sơ người ký Vault",
-    "selectProfile": "Chọn hồ sơ Vault...",
-    "hint": "Cài đặt từ hồ sơ dùng chung; bạn sẽ đăng nhập Vault qua OIDC khi kết nối. Không lưu bí mật.",
-    "docs": "Xem tài liệu",
-    "sharedProfile": "{{name}} (được chia sẻ)"
-  },
-  "profiles": {
-    "new": "Hồ sơ mới",
-    "manage": "Quản lý hồ sơ Vault",
-    "name": "Tên hiển thị",
-    "vaultAddr": "Địa chỉ Vault",
-    "namespace": "Không gian tên",
-    "oidcMount": "Điểm gắn xác thực OIDC",
-    "oidcRole": "Vai trò OIDC",
-    "sshMount": "Điểm gắn bí mật SSH",
-    "sshRole": "Vai trò ký SSH",
-    "validPrincipals": "Các danh tính hợp lệ",
-    "keyType": "Loại khóa tạm thời",
-    "shareWithAll": "Chia sẻ với tất cả người dùng",
-    "create": "Tạo hồ sơ",
-    "created": "Đã tạo hồ sơ Vault",
-    "saved": "Đã lưu hồ sơ Vault",
-    "deleted": "Đã xóa hồ sơ Vault",
-    "saveFailed": "Không thể lưu hồ sơ Vault",
-    "deleteFailed": "Không thể xóa hồ sơ Vault",
-    "save": "Lưu hồ sơ",
-    "validationError": "Tên, địa chỉ Vault và vai trò ký SSH là bắt buộc",
-    "none": "Chưa có hồ sơ Vault nào.",
-    "sharedBadge": "được chia sẻ",
-    "edit": "Chỉnh sửa",
-    "delete": "Xóa"
-  },
-  "hosts": {
-    "filterAuthVault": "Kho tiền"
-  },
-  "dialog": {
-    "title": "Yêu cầu đăng nhập Vault",
-    "description": "Một cửa sổ đã mở để đăng nhập vào HashiCorp Vault. Hoàn tất đăng nhập ở đó; kết nối này sẽ tự động tiếp tục.",
-    "failed": "Xác thực Vault thất bại. Vui lòng thử lại.",
-    "reopen": "Mở lại cửa sổ đăng nhập"
-  },
-  "permissions": {
-    "use": {
-      "title": "Sử dụng tính năng ký SSH của Vault.",
-      "description": "Tạo hồ sơ người ký Vault và kết nối với các máy chủ sử dụng Vault."
-    },
-    "share": {
-      "title": "Chia sẻ hồ sơ Vault",
-      "description": "Đánh dấu hồ sơ người ký Vault là được chia sẻ để mọi người dùng đều có thể chọn hồ sơ đó."
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "URI chuyển hướng",
-      "description": "Thêm URL này vào allowed_redirect_uris trong mỗi vai trò Vault OIDC mà Termix sử dụng để đăng nhập."
-    },
-    "legacyCallback": {
-      "label": "Sử dụng URI chuyển hướng cũ.",
-      "description": "Tiếp tục gửi /vault/oidc/callback, URI chuyển hướng được sử dụng trước phiên bản 2.9. Tắt chức năng này khi các vai trò Vault của bạn cho phép sử dụng URI mới."
-    },
-    "host": {
-      "profileId": {
-        "label": "Hồ sơ người ký Vault"
-      }
-    }
-  },
-  "plugin": {
-    "name": "Kho bạc HashiCorp"
-  }
-}
diff --git a/plugins/vault/locales/translated/zh_CN.json b/plugins/vault/locales/translated/zh_CN.json
deleted file mode 100644
index badacf3f0..000000000
--- a/plugins/vault/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Vault 签名者配置文件",
-    "selectProfile": "选择 Vault 配置文件...",
-    "hint": "设置来自共享配置文件；连接时将使用 OIDC 登录 Vault。不会存储任何机密。",
-    "docs": "查看文档",
-    "sharedProfile": "{{name}}（共享）"
-  },
-  "profiles": {
-    "new": "新建配置文件",
-    "manage": "管理 Vault 配置文件",
-    "name": "友好名称",
-    "vaultAddr": "Vault 地址",
-    "namespace": "命名空间",
-    "oidcMount": "OIDC 认证挂载点",
-    "oidcRole": "OIDC 角色",
-    "sshMount": "SSH 机密挂载点",
-    "sshRole": "SSH 签名者角色",
-    "validPrincipals": "有效主体",
-    "keyType": "临时密钥类型",
-    "shareWithAll": "与所有用户共享",
-    "create": "创建配置文件",
-    "created": "Vault 配置文件已创建",
-    "saved": "Vault 配置文件已保存",
-    "deleted": "Vault 配置文件已删除",
-    "saveFailed": "保存 Vault 配置文件失败",
-    "deleteFailed": "删除 Vault 配置文件失败",
-    "save": "保存配置文件",
-    "validationError": "名称、Vault 地址和 SSH 签名者角色为必填项",
-    "none": "暂无 Vault 配置文件。",
-    "sharedBadge": "已共享",
-    "edit": "编辑",
-    "delete": "删除"
-  },
-  "hosts": {
-    "filterAuthVault": "保险库"
-  },
-  "dialog": {
-    "title": "需要 Vault 登录",
-    "description": "已打开窗口以登录 HashiCorp Vault。在该处完成登录；此连接将自动继续。",
-    "failed": "Vault 认证失败，请重试。",
-    "reopen": "重新打开登录窗口"
-  },
-  "permissions": {
-    "use": {
-      "title": "使用 Vault SSH 签名",
-      "description": "创建 Vault 签名者配置文件并连接到使用 Vault 的主机。"
-    },
-    "share": {
-      "title": "共享库配置文件",
-      "description": "将 Vault 签名者配置文件标记为共享，以便每个用户都可以选择它。"
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "重定向 URI",
-      "description": "将此 URL 添加到 Termix 登录的每个 Vault OIDC 角色的 allowed_redirect_uris 中。"
-    },
-    "legacyCallback": {
-      "label": "使用旧的重定向 URI",
-      "description": "继续发送 /vault/oidc/callback，这是 2.9 版本之前使用的重定向 URI。一旦您的 Vault 角色允许使用新的重定向 URI，就将其关闭。"
-    },
-    "host": {
-      "profileId": {
-        "label": "Vault 签名者个人资料"
-      }
-    }
-  },
-  "plugin": {
-    "name": "HashiCorp Vault"
-  }
-}
diff --git a/plugins/vault/locales/translated/zh_TW.json b/plugins/vault/locales/translated/zh_TW.json
deleted file mode 100644
index 2dbbc84cf..000000000
--- a/plugins/vault/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,72 +0,0 @@
-{
-  "editor": {
-    "profile": "Vault 簽署者設定檔",
-    "selectProfile": "選取 Vault 設定檔...",
-    "hint": "設定來自共用設定檔；連線時您將透過 OIDC 登入 Vault。不會儲存任何機密。",
-    "docs": "檢視文件",
-    "sharedProfile": "{{name}} （共享）"
-  },
-  "profiles": {
-    "new": "新增設定檔",
-    "manage": "管理 Vault 設定檔",
-    "name": "易記名稱",
-    "vaultAddr": "Vault 位址",
-    "namespace": "命名空間",
-    "oidcMount": "OIDC 驗證掛載",
-    "oidcRole": "OIDC 角色",
-    "sshMount": "SSH 機密掛載",
-    "sshRole": "SSH 簽署者角色",
-    "validPrincipals": "有效主體",
-    "keyType": "暫時金鑰類型",
-    "shareWithAll": "與所有使用者共用",
-    "create": "建立設定檔",
-    "created": "Vault 設定檔已建立",
-    "saved": "Vault 設定檔已儲存",
-    "deleted": "Vault 設定檔已刪除",
-    "saveFailed": "無法儲存 Vault 設定檔",
-    "deleteFailed": "無法刪除 Vault 設定檔",
-    "save": "儲存設定檔",
-    "validationError": "名稱、Vault 位址和 SSH 簽署者角色為必填",
-    "none": "尚無 Vault 設定檔。",
-    "sharedBadge": "已共用",
-    "edit": "編輯",
-    "delete": "刪除"
-  },
-  "hosts": {
-    "filterAuthVault": "保險庫"
-  },
-  "dialog": {
-    "title": "需要 Vault 登入",
-    "description": "已開啟視窗以登入 HashiCorp Vault。在該處完成登入；此連線將自動繼續。",
-    "failed": "Vault 驗證失敗。請再試一次。",
-    "reopen": "重新開啟登入視窗"
-  },
-  "permissions": {
-    "use": {
-      "title": "使用 Vault SSH 簽名",
-      "description": "建立 Vault 簽署者設定檔並連接到使用 Vault 的主機。"
-    },
-    "share": {
-      "title": "共享庫配置文件",
-      "description": "將 Vault 簽署者設定檔標記為共用，以便每個使用者都可以選擇它。"
-    }
-  },
-  "settings": {
-    "redirectUri": {
-      "label": "重定向 URI",
-      "description": "將此 URL 新增至 Termix 登入的每個 Vault OIDC 角色的 allowed_redirect_uris 中。"
-    },
-    "legacyCallback": {
-      "label": "使用舊的重定向 URI",
-      "description": "繼續發送 /vault/oidc/callback，這是 2.9 版本之前使用的重定向 URI。一旦您的 Vault 角色允許使用新的重定向 URI，就將其關閉。"
-    },
-    "host": {
-      "profileId": {
-        "label": "Vault 簽署者設定檔"
-      }
-    }
-  },
-  "plugin": {
-    "name": "HashiCorp Vault"
-  }
-}
diff --git a/plugins/vault/manifest.json b/plugins/vault/manifest.json
deleted file mode 100644
index 6f49163f8..000000000
--- a/plugins/vault/manifest.json
+++ /dev/null
@@ -1,84 +0,0 @@
-{
-  "id": "vault",
-  "name": "HashiCorp Vault",
-  "version": "1.0.0",
-  "description": "Connect to hosts with short-lived SSH certificates from HashiCorp Vault, after signing in to Vault with OIDC.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Access & Security",
-  "icon": "KeyRound",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "db:own",
-    "secrets:own",
-    "network:outbound",
-    "network:serve",
-    "auth:provide",
-    "ui:surface"
-  ],
-  "contributes": {
-    "auth": {
-      "sshAuthTypes": ["vault"]
-    },
-    "permissions": [
-      {
-        "name": "use",
-        "titleKey": "permissions.use.title",
-        "descriptionKey": "permissions.use.description",
-        "defaultRoles": ["admin", "user"]
-      },
-      {
-        "name": "share",
-        "titleKey": "permissions.share.title",
-        "descriptionKey": "permissions.share.description",
-        "defaultRoles": ["admin"]
-      }
-    ],
-    "settings": {
-      "admin": [
-        {
-          "key": "redirectUri",
-          "type": "custom",
-          "component": "redirectUri"
-        },
-        {
-          "key": "legacyCallback",
-          "type": "boolean",
-          "labelKey": "settings.legacyCallback.label",
-          "descriptionKey": "settings.legacyCallback.description",
-          "default": false
-        }
-      ],
-      "host": {
-        "fields": [
-          {
-            "key": "profileId",
-            "type": "number",
-            "labelKey": "settings.host.profileId.label",
-            "hidden": true,
-            "ownerOnly": true,
-            "defaultLevels": ["user", "folder"]
-          }
-        ]
-      }
-    },
-    "http": {
-      "legacyRedirects": [
-        {
-          "from": "/vault/oidc/callback",
-          "to": "/oidc/callback"
-        }
-      ]
-    },
-    "syncEntities": ["vaultProfiles"],
-    "uses": ["terminal.overlay"]
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"]
-}
diff --git a/plugins/vault/migrations/mysql/0001_adopt_vault_tables.sql b/plugins/vault/migrations/mysql/0001_adopt_vault_tables.sql
deleted file mode 100644
index 6aed086da..000000000
--- a/plugins/vault/migrations/mysql/0001_adopt_vault_tables.sql
+++ /dev/null
@@ -1,37 +0,0 @@
--- vault 0001: adopt_vault_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `vault_profiles` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `name` text NOT NULL,
-  `description` text,
-  `folder` text,
-  `tags` text,
-  `vault_addr` text NOT NULL,
-  `vault_namespace` text,
-  `oidc_mount` text,
-  `oidc_role` text,
-  `ssh_mount` text,
-  `ssh_role` text NOT NULL,
-  `valid_principals` text,
-  `key_type` text,
-  `shared` boolean NOT NULL DEFAULT false,
-  `sync_id` varchar(255) UNIQUE,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `vault_profiles` TO `p_vault_profiles`;
-CREATE TABLE IF NOT EXISTS `vault_tokens` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `profile_id` int NOT NULL,
-  `ssh_cert` text NOT NULL,
-  `private_key` text NOT NULL,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `expires_at` varchar(255) NOT NULL,
-  `last_used` text,
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `vault_tokens` TO `p_vault_tokens`;
diff --git a/plugins/vault/migrations/postgres/0001_adopt_vault_tables.sql b/plugins/vault/migrations/postgres/0001_adopt_vault_tables.sql
deleted file mode 100644
index 7f47ab993..000000000
--- a/plugins/vault/migrations/postgres/0001_adopt_vault_tables.sql
+++ /dev/null
@@ -1,38 +0,0 @@
--- vault 0001: adopt_vault_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "vault_profiles" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "name" text NOT NULL,
-  "description" text,
-  "folder" text,
-  "tags" text,
-  "vault_addr" text NOT NULL,
-  "vault_namespace" text,
-  "oidc_mount" text,
-  "oidc_role" text,
-  "ssh_mount" text,
-  "ssh_role" text NOT NULL,
-  "valid_principals" text,
-  "key_type" text,
-  "shared" boolean NOT NULL DEFAULT false,
-  "sync_id" varchar(255) UNIQUE,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "vault_profiles" RENAME TO "p_vault_profiles";
-CREATE TABLE IF NOT EXISTS "vault_tokens" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "profile_id" integer NOT NULL,
-  "ssh_cert" text NOT NULL,
-  "private_key" text NOT NULL,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "expires_at" varchar(255) NOT NULL,
-  "last_used" text,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_vault_tokens_user_profile" ON "vault_tokens" ("user_id", "profile_id");
-ALTER TABLE "vault_tokens" RENAME TO "p_vault_tokens";
diff --git a/plugins/vault/migrations/snapshot.json b/plugins/vault/migrations/snapshot.json
deleted file mode 100644
index 7217340f9..000000000
--- a/plugins/vault/migrations/snapshot.json
+++ /dev/null
@@ -1,127 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "profiles": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "name": {
-          "type": "text",
-          "notNull": true
-        },
-        "description": {
-          "type": "text"
-        },
-        "folder": {
-          "type": "text"
-        },
-        "tags": {
-          "type": "text"
-        },
-        "vaultAddr": {
-          "type": "text",
-          "notNull": true
-        },
-        "vaultNamespace": {
-          "type": "text"
-        },
-        "oidcMount": {
-          "type": "text"
-        },
-        "oidcRole": {
-          "type": "text"
-        },
-        "sshMount": {
-          "type": "text"
-        },
-        "sshRole": {
-          "type": "text",
-          "notNull": true
-        },
-        "validPrincipals": {
-          "type": "text"
-        },
-        "keyType": {
-          "type": "text"
-        },
-        "shared": {
-          "type": "boolean",
-          "notNull": true,
-          "defaultValue": false
-        },
-        "syncId": {
-          "type": "varchar",
-          "length": 255,
-          "unique": true
-        },
-        "createdAt": {
-          "type": "text",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "updatedAt": {
-          "type": "text",
-          "notNull": true,
-          "defaultNow": true
-        }
-      },
-      "indexes": [],
-      "adopts": "vault_profiles"
-    },
-    "tokens": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "profileId": {
-          "type": "integer",
-          "notNull": true
-        },
-        "sshCert": {
-          "type": "text",
-          "notNull": true
-        },
-        "privateKey": {
-          "type": "text",
-          "notNull": true
-        },
-        "createdAt": {
-          "type": "text",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "expiresAt": {
-          "type": "varchar",
-          "length": 255,
-          "notNull": true
-        },
-        "lastUsed": {
-          "type": "text"
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_vault_tokens_user_profile",
-          "columns": ["userId", "profileId"],
-          "unique": true
-        }
-      ],
-      "adopts": "vault_tokens"
-    }
-  }
-}
diff --git a/plugins/vault/migrations/sqlite/0001_adopt_vault_tables.sql b/plugins/vault/migrations/sqlite/0001_adopt_vault_tables.sql
deleted file mode 100644
index b1925731c..000000000
--- a/plugins/vault/migrations/sqlite/0001_adopt_vault_tables.sql
+++ /dev/null
@@ -1,38 +0,0 @@
--- vault 0001: adopt_vault_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "vault_profiles" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "name" text NOT NULL,
-  "description" text,
-  "folder" text,
-  "tags" text,
-  "vault_addr" text NOT NULL,
-  "vault_namespace" text,
-  "oidc_mount" text,
-  "oidc_role" text,
-  "ssh_mount" text,
-  "ssh_role" text NOT NULL,
-  "valid_principals" text,
-  "key_type" text,
-  "shared" integer NOT NULL DEFAULT 0,
-  "sync_id" text UNIQUE,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "vault_profiles" RENAME TO "p_vault_profiles";
-CREATE TABLE IF NOT EXISTS "vault_tokens" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "profile_id" integer NOT NULL,
-  "ssh_cert" text NOT NULL,
-  "private_key" text NOT NULL,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "expires_at" text NOT NULL,
-  "last_used" text,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_vault_tokens_user_profile" ON "vault_tokens" ("user_id", "profile_id");
-ALTER TABLE "vault_tokens" RENAME TO "p_vault_tokens";
diff --git a/plugins/vault/package.json b/plugins/vault/package.json
deleted file mode 100644
index dba545cb5..000000000
--- a/plugins/vault/package.json
+++ /dev/null
@@ -1,34 +0,0 @@
-{
-  "name": "@termix-plugin/vault",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "lucide-react": "^1.33.0"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "react": "^19.2.8",
-    "sonner": "^2.0.8",
-    "ssh2": "^1.17.0"
-  }
-}
diff --git a/plugins/vault/src/backend/auth-session.ts b/plugins/vault/src/backend/auth-session.ts
deleted file mode 100644
index 3c7905062..000000000
--- a/plugins/vault/src/backend/auth-session.ts
+++ /dev/null
@@ -1,206 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { TokenStore } from "./token-store.js";
-import {
-  completeVaultOidc,
-  generateEphemeralKeyPair,
-  signWithVault,
-  startVaultOidc,
-  type VaultProfileConfig,
-} from "./vault-client.js";
-
-/** The redirect URI 2.8 had Vault roles allow. */
-export const LEGACY_CALLBACK_PATH = "/vault/oidc/callback";
-export const CALLBACK_PATH = "/plugin-api/vault/oidc/callback";
-
-const AUTH_TIMEOUT_MS = 5 * 60 * 1000;
-
-/** The terminal socket, as far as a sign-in needs it. */
-export interface SignInSocket {
-  send: (data: string) => void;
-  on?: (event: "close", listener: () => void) => void;
-}
-
-export interface StartRequest {
-  userId: string;
-  hostId: number;
-  profile: VaultProfileConfig;
-  socket: SignInSocket;
-  requestOrigin: string;
-}
-
-export interface CallbackResult {
-  ok: boolean;
-  message: string;
-}
-
-interface Session {
-  state: string;
-  userId: string;
-  hostId: number;
-  profile: VaultProfileConfig;
-  clientNonce: string;
-  privateKey: string;
-  publicKey: string;
-  socket: SignInSocket;
-  timeout: ReturnType<typeof setTimeout>;
-}
-
-function send(socket: SignInSocket, message: Record<string, unknown>): void {
-  try {
-    socket.send(JSON.stringify(message));
-  } catch {
-    // socket already gone
-  }
-}
-
-function errorMessage(error: unknown): string {
-  return error instanceof Error ? error.message : String(error);
-}
-
-export type AuthSessions = ReturnType<typeof createAuthSessions>;
-
-/**
- * Vault OIDC sign-ins in flight, keyed by the state Vault put in its auth
- * URL so the unauthenticated browser callback finds its way back. Created
- * per activation; closeAll runs on deactivate.
- */
-export function createAuthSessions(ctx: PluginContext, tokens: TokenStore) {
-  const sessions = new Map<string, Session>();
-
-  function end(session: Session): void {
-    clearTimeout(session.timeout);
-    sessions.delete(session.state);
-  }
-
-  async function callbackPath(): Promise<string> {
-    const legacy = await ctx.settings.get<boolean>("legacyCallback");
-    return legacy ? LEGACY_CALLBACK_PATH : CALLBACK_PATH;
-  }
-
-  return {
-    /** Asks Vault for an auth URL and sends it to the terminal. */
-    async start(request: StartRequest): Promise<void> {
-      try {
-        const keyPair = generateEphemeralKeyPair(request.profile.keyType);
-        const redirectUri = `${request.requestOrigin}${await callbackPath()}`;
-        const { authUrl, state, clientNonce } = await startVaultOidc(
-          ctx.fetch,
-          request.profile,
-          redirectUri,
-        );
-
-        const existing = sessions.get(state);
-        if (existing) end(existing);
-
-        const session: Session = {
-          state,
-          userId: request.userId,
-          hostId: request.hostId,
-          profile: request.profile,
-          clientNonce,
-          privateKey: keyPair.privateKey,
-          publicKey: keyPair.publicKey,
-          socket: request.socket,
-          timeout: setTimeout(() => {
-            const current = sessions.get(state);
-            if (current) end(current);
-          }, AUTH_TIMEOUT_MS),
-        };
-        sessions.set(state, session);
-        request.socket.on?.("close", () => {
-          const current = sessions.get(state);
-          if (current) end(current);
-        });
-
-        send(request.socket, {
-          type: "vault_auth_url",
-          hostId: request.hostId,
-          requestId: state,
-          url: authUrl,
-        });
-      } catch (error) {
-        const message = errorMessage(error);
-        ctx.log.error(`Failed to start Vault authentication: ${message}`);
-        send(request.socket, {
-          type: "vault_error",
-          hostId: request.hostId,
-          error: message,
-        });
-      }
-    },
-
-    /**
-     * The identity provider's redirect, via Vault: exchanges the code for a
-     * Vault token, has Vault sign the ephemeral key and caches the result.
-     */
-    async complete(state: string, code: string): Promise<CallbackResult> {
-      const session = sessions.get(state);
-      if (!session) {
-        return {
-          ok: false,
-          message: "This sign-in request is no longer active.",
-        };
-      }
-      end(session);
-
-      try {
-        const token = await completeVaultOidc(ctx.fetch, session.profile, {
-          state,
-          code,
-          clientNonce: session.clientNonce,
-        });
-        const signed = await signWithVault(
-          ctx.fetch,
-          session.profile,
-          token,
-          session.publicKey,
-        );
-        const expiresAt = await tokens.save(
-          session.userId,
-          session.profile.id,
-          session.privateKey,
-          signed,
-        );
-        ctx.log.info(
-          `Vault signed a certificate for host ${session.hostId} with profile ${session.profile.id}`,
-        );
-        send(session.socket, {
-          type: "vault_completed",
-          hostId: session.hostId,
-          requestId: state,
-          expiresAt,
-        });
-        return {
-          ok: true,
-          message: "You can close this window and return to Termix.",
-        };
-      } catch (error) {
-        const message = errorMessage(error);
-        ctx.log.error(`Vault sign-in failed: ${message}`);
-        send(session.socket, {
-          type: "vault_error",
-          hostId: session.hostId,
-          requestId: state,
-          error: message,
-        });
-        return { ok: false, message };
-      }
-    },
-
-    /** Cancels by request id, or every sign-in the user has for a host. */
-    cancel(userId: string, hostId?: number, requestId?: string): void {
-      for (const session of [...sessions.values()]) {
-        if (session.userId !== userId) continue;
-        if (
-          requestId ? session.state === requestId : session.hostId === hostId
-        ) {
-          end(session);
-        }
-      }
-    },
-
-    closeAll(): void {
-      for (const session of [...sessions.values()]) end(session);
-    },
-  };
-}
diff --git a/plugins/vault/src/backend/index.ts b/plugins/vault/src/backend/index.ts
deleted file mode 100644
index 42dd5550e..000000000
--- a/plugins/vault/src/backend/index.ts
+++ /dev/null
@@ -1,54 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { profiles as profilesTable, tokens as tokensTable } from "./tables.js";
-import { createProfileStore, SYNC_ENTITY } from "./profile-store.js";
-import { createTokenStore } from "./token-store.js";
-import { createAuthSessions } from "./auth-session.js";
-import { createVaultProvider } from "./provider.js";
-import { PUBLIC_PATHS, registerRoutes } from "./routes.js";
-
-export async function activate(ctx: PluginContext) {
-  const profilesDb = await ctx.db.define(profilesTable);
-  const tokensDb = await ctx.db.define(tokensTable);
-  const profiles = createProfileStore(ctx, profilesDb, tokensDb);
-  const tokens = createTokenStore(ctx, tokensDb);
-
-  const sessions = createAuthSessions(ctx, tokens);
-  ctx.disposables.add(() => sessions.closeAll());
-
-  ctx.auth.registerSshAuthProvider(
-    createVaultProvider(ctx, profiles, tokens, sessions),
-  );
-
-  // Same wire name as 2.8, where core synced it. Hosts point at a profile
-  // through the profileId host setting, not a column, so nothing references it.
-  ctx.sync.registerEntity({
-    type: SYNC_ENTITY,
-    table: profilesDb,
-    order: 20,
-  });
-
-  // A host's profileId is a local row id; remote sync carries the profile's
-  // syncId instead, which is the same on both sides.
-  ctx.registry.provide("vault.hostSettingsSync", {
-    exportValue: async (key: string, value: unknown) =>
-      key === "profileId" && typeof value === "number"
-        ? ((await profiles.findById(value))?.syncId ?? null)
-        : value,
-    importValue: async (key: string, value: unknown) =>
-      key === "profileId" && typeof value === "string"
-        ? ((await profiles.findBySyncId(value))?.id ?? null)
-        : value,
-  });
-
-  registerRoutes(
-    ctx,
-    ctx.http.router<Router>({ public: PUBLIC_PATHS }),
-    profiles,
-    sessions,
-  );
-}
-
-export async function deactivate() {
-  // Everything above was registered through ctx and is disposed by core.
-}
diff --git a/plugins/vault/src/backend/profile-store.ts b/plugins/vault/src/backend/profile-store.ts
deleted file mode 100644
index a31707ca8..000000000
--- a/plugins/vault/src/backend/profile-store.ts
+++ /dev/null
@@ -1,139 +0,0 @@
-import { randomUUID } from "node:crypto";
-import { desc, eq, or } from "drizzle-orm";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { VaultProfileConfig } from "./vault-client.js";
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// ctx.db.define hands the table back untyped and the drizzle handle is the
-// server's own, so both are typed at this module's edge.
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export const SYNC_ENTITY = "vaultProfiles";
-
-export interface ProfileRow {
-  id: number;
-  userId: string;
-  name: string;
-  description: string | null;
-  folder: string | null;
-  tags: string | null;
-  vaultAddr: string;
-  vaultNamespace: string | null;
-  oidcMount: string | null;
-  oidcRole: string | null;
-  sshMount: string | null;
-  sshRole: string;
-  validPrincipals: string | null;
-  keyType: string | null;
-  shared: boolean | number;
-  syncId: string | null;
-  createdAt: string;
-  updatedAt: string;
-}
-
-export type ProfileInput = Partial<
-  Omit<ProfileRow, "id" | "userId" | "syncId" | "createdAt" | "updatedAt">
->;
-
-export function toConfig(row: ProfileRow): VaultProfileConfig {
-  return {
-    id: row.id,
-    vaultAddr: row.vaultAddr,
-    vaultNamespace: row.vaultNamespace ?? null,
-    oidcMount: row.oidcMount ?? null,
-    oidcRole: row.oidcRole ?? null,
-    sshMount: row.sshMount ?? null,
-    sshRole: row.sshRole,
-    validPrincipals: row.validPrincipals ?? null,
-    keyType: row.keyType ?? null,
-  };
-}
-
-export type ProfileStore = ReturnType<typeof createProfileStore>;
-
-export function createProfileStore(
-  ctx: PluginContext,
-  table: Table,
-  tokensTable: Table,
-) {
-  const client = () => ctx.db.client<Drizzle>();
-
-  async function findById(id: number): Promise<ProfileRow | null> {
-    const rows = await (
-      await client()
-    )
-      .select()
-      .from(table)
-      .where(eq(table.id, id))
-      .limit(1);
-    return rows[0] ?? null;
-  }
-
-  async function findBySyncId(syncId: string): Promise<ProfileRow | null> {
-    const rows = await (
-      await client()
-    )
-      .select()
-      .from(table)
-      .where(eq(table.syncId, syncId))
-      .limit(1);
-    return rows[0] ?? null;
-  }
-
-  return {
-    findById,
-    findBySyncId,
-
-    /** The user's own profiles plus every shared one. */
-    async listVisible(userId: string): Promise<ProfileRow[]> {
-      return (await client())
-        .select()
-        .from(table)
-        .where(or(eq(table.userId, userId), eq(table.shared, true)))
-        .orderBy(desc(table.updatedAt));
-    },
-
-    async create(
-      userId: string,
-      input: ProfileInput & {
-        name: string;
-        vaultAddr: string;
-        sshRole: string;
-      },
-    ): Promise<ProfileRow> {
-      const syncId = randomUUID();
-      const now = new Date().toISOString();
-      await (await client()).insert(table).values({
-        ...input,
-        userId,
-        shared: input.shared ? true : false,
-        syncId,
-        createdAt: now,
-        updatedAt: now,
-      });
-      await ctx.db.persist();
-      return (await findBySyncId(syncId)) as ProfileRow;
-    },
-
-    async update(id: number, input: ProfileInput): Promise<ProfileRow | null> {
-      await (
-        await client()
-      )
-        .update(table)
-        .set({ ...input, updatedAt: new Date().toISOString() })
-        .where(eq(table.id, id));
-      await ctx.db.persist();
-      return findById(id);
-    },
-
-    /** Deletes the profile, its cached certificates and records a tombstone. */
-    async remove(row: ProfileRow): Promise<void> {
-      const db = await client();
-      await db.delete(tokensTable).where(eq(tokensTable.profileId, row.id));
-      await db.delete(table).where(eq(table.id, row.id));
-      await ctx.db.persist();
-    },
-  };
-}
diff --git a/plugins/vault/src/backend/provider.ts b/plugins/vault/src/backend/provider.ts
deleted file mode 100644
index 710bffb2b..000000000
--- a/plugins/vault/src/backend/provider.ts
+++ /dev/null
@@ -1,124 +0,0 @@
-import type {
-  PluginContext,
-  PluginSshAuthProvider,
-  PluginSshHost,
-} from "@termix/plugin-sdk/backend";
-import { applyCertificateAuth } from "@termix/plugin-sdk/ssh-certs";
-import type { AuthSessions, SignInSocket } from "./auth-session.js";
-import {
-  toConfig,
-  type ProfileRow,
-  type ProfileStore,
-} from "./profile-store.js";
-import type { TokenStore } from "./token-store.js";
-
-export const AUTH_TYPE = "vault";
-
-const REQUIRED_MESSAGE =
-  "Vault SSH signer authentication required. Please open a Terminal connection first.";
-
-const AUTH_FAILED_PATTERN = /All configured authentication methods failed/i;
-
-/** The profile a host points at, from its host settings. */
-export async function profileForHost(
-  ctx: PluginContext,
-  profiles: ProfileStore,
-  hostId: number,
-): Promise<ProfileRow | null> {
-  const raw = await ctx.settings.getHost<number | string>(hostId, "profileId");
-  const id = Number(raw);
-  if (!Number.isInteger(id) || id <= 0) return null;
-  return profiles.findById(id);
-}
-
-/**
- * Hosts with auth type "vault" connect with a certificate Vault signed for
- * the host's profile. Without one, the terminal is asked for a browser
- * sign-in ("vault_auth_required"), which startInteraction runs.
- */
-export function createVaultProvider(
-  ctx: PluginContext,
-  profiles: ProfileStore,
-  tokens: TokenStore,
-  sessions: AuthSessions,
-): PluginSshAuthProvider {
-  return {
-    type: AUTH_TYPE,
-    labelKey: "hosts.filterAuthVault",
-    needsUserInteraction: true,
-    supportsBackground: false,
-    interaction: AUTH_TYPE,
-    prepare: async (config, host: PluginSshHost, env) => {
-      const profile = await profileForHost(ctx, profiles, host.id);
-      if (!profile) {
-        return {
-          status: "error",
-          code: "failed",
-          message: "Host has no Vault signer profile configured",
-        };
-      }
-      const cert = await tokens.get(env.userId, profile.id);
-      if (!cert) {
-        env.log(
-          "info",
-          "No valid Vault certificate found, requesting authentication",
-        );
-        return {
-          status: "interaction-required",
-          interaction: AUTH_TYPE,
-          message: REQUIRED_MESSAGE,
-          flag: "requiresVaultAuth",
-        };
-      }
-      try {
-        await applyCertificateAuth(
-          config as never,
-          env.client as never,
-          { privateKey: cert.privateKey, certificate: cert.sshCert },
-          host.username,
-        );
-      } catch (error) {
-        return {
-          status: "error",
-          code: "failed",
-          message:
-            "Vault SSH signer authentication failed: " +
-            (error instanceof Error ? error.message : String(error)),
-        };
-      }
-      env.log("info", "Using cached Vault-signed certificate");
-      return { status: "ready" };
-    },
-    onAuthFailed: (host, env, context) => {
-      if (!AUTH_FAILED_PATTERN.test(context.error.message)) return undefined;
-      ctx.log.warn("Vault certificate authentication failed, forgetting it");
-      void profileForHost(ctx, profiles, host.id)
-        .then((profile) =>
-          profile ? tokens.remove(env.userId, profile.id) : undefined,
-        )
-        .catch(() => undefined);
-      return {
-        status: "interaction-required",
-        interaction: AUTH_TYPE,
-        message:
-          "Vault authentication failed or expired. Please authenticate again.",
-      };
-    },
-    startInteraction: async (request) => {
-      const profile = await profileForHost(ctx, profiles, request.hostId);
-      if (!profile) {
-        throw new Error("No Vault signer profile configured for this host");
-      }
-      await sessions.start({
-        userId: request.userId,
-        hostId: request.hostId,
-        profile: toConfig(profile),
-        socket: request.socket as SignInSocket,
-        requestOrigin: request.requestOrigin,
-      });
-    },
-    cancelInteraction: (request) => {
-      sessions.cancel(request.userId, request.hostId, request.requestId);
-    },
-  };
-}
diff --git a/plugins/vault/src/backend/routes.ts b/plugins/vault/src/backend/routes.ts
deleted file mode 100644
index aeb593295..000000000
--- a/plugins/vault/src/backend/routes.ts
+++ /dev/null
@@ -1,337 +0,0 @@
-import type { Request, Response, Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { AuthSessions } from "./auth-session.js";
-import type {
-  ProfileInput,
-  ProfileRow,
-  ProfileStore,
-} from "./profile-store.js";
-
-/**
- * Vault sends the browser back here without a Termix session: the sign-in is
- * matched by the state Vault issued.
- */
-export const PUBLIC_PATHS = ["/oidc/callback"];
-
-export function escapeHtml(value: string): string {
-  return value
-    .replace(/&/g, "&amp;")
-    .replace(/</g, "&lt;")
-    .replace(/>/g, "&gt;")
-    .replace(/"/g, "&quot;")
-    .replace(/'/g, "&#39;");
-}
-
-export function resultPage(ok: boolean, message: string): string {
-  return `<!doctype html><html><head><meta charset="utf-8"><title>Termix</title>
-<style>body{font-family:system-ui,sans-serif;background:#111;color:#eee;display:flex;align-items:center;justify-content:center;height:100vh;margin:0}
-main{max-width:28rem;padding:2rem;border:1px solid #333;background:#181818}h1{font-size:1.1rem;margin:0 0 .5rem}p{margin:0;color:#aaa}</style></head>
-<body><main><h1>${ok ? "Vault sign-in complete" : "Vault sign-in failed"}</h1><p>${escapeHtml(message)}</p></main>
-${ok ? "<script>setTimeout(function(){window.close()},1500)</script>" : ""}</body></html>`;
-}
-
-function isNonEmptyString(value: unknown): value is string {
-  return typeof value === "string" && value.trim().length > 0;
-}
-
-function optional(value: unknown): string | null {
-  return typeof value === "string" && value.trim() ? value.trim() : null;
-}
-
-function formatProfile(row: ProfileRow, userId: string) {
-  return {
-    id: row.id,
-    name: row.name,
-    description: row.description,
-    folder: row.folder,
-    tags: row.tags ? row.tags.split(",").filter(Boolean) : [],
-    vaultAddr: row.vaultAddr,
-    vaultNamespace: row.vaultNamespace,
-    oidcMount: row.oidcMount,
-    oidcRole: row.oidcRole,
-    sshMount: row.sshMount,
-    sshRole: row.sshRole,
-    validPrincipals: row.validPrincipals,
-    keyType: row.keyType,
-    shared: !!row.shared,
-    owned: row.userId === userId,
-    createdAt: row.createdAt,
-    updatedAt: row.updatedAt,
-  };
-}
-
-function parseId(req: Request): number | null {
-  const id = Number.parseInt(String(req.params.id), 10);
-  return Number.isFinite(id) ? id : null;
-}
-
-export function registerRoutes(
-  ctx: PluginContext,
-  router: Router,
-  profiles: ProfileStore,
-  sessions: AuthSessions,
-): void {
-  const userId = () => ctx.currentActor() as string;
-
-  /**
-   * @openapi
-   * /plugin-api/vault/oidc/callback:
-   *   get:
-   *     summary: Vault OIDC callback
-   *     description: Public. The redirect URI a Vault OIDC role allows. Matches the sign-in by the state Vault issued, has Vault sign the ephemeral key and tells the terminal to reconnect. The 2.8 URI /vault/oidc/callback redirects here.
-   *     tags: [Vault]
-   *     parameters:
-   *       - in: query
-   *         name: state
-   *         schema:
-   *           type: string
-   *       - in: query
-   *         name: code
-   *         schema:
-   *           type: string
-   *       - in: query
-   *         name: error
-   *         schema:
-   *           type: string
-   *     responses:
-   *       200:
-   *         description: Signed in; an HTML page that closes itself.
-   *       400:
-   *         description: The sign-in failed or is no longer active.
-   */
-  router.get("/oidc/callback", async (req: Request, res: Response) => {
-    const state = typeof req.query.state === "string" ? req.query.state : "";
-    const code = typeof req.query.code === "string" ? req.query.code : "";
-    const error = typeof req.query.error === "string" ? req.query.error : "";
-
-    const reply = (ok: boolean, message: string) =>
-      res
-        .status(ok ? 200 : 400)
-        .type("html")
-        .send(resultPage(ok, message));
-
-    if (error) return reply(false, `Vault returned: ${error}`);
-    if (!state || !code) return reply(false, "Missing state or code.");
-    const result = await sessions.complete(state, code);
-    return reply(result.ok, result.message);
-  });
-
-  router.use("/profiles", ctx.rbac.require("use") as never);
-
-  /**
-   * @openapi
-   * /plugin-api/vault/profiles:
-   *   get:
-   *     summary: List Vault profiles
-   *     description: The caller's own Vault signer profiles and every shared one. Needs vault.use.
-   *     tags: [Vault]
-   *     responses:
-   *       200:
-   *         description: Array of Vault profile objects.
-   *       403:
-   *         description: Missing vault.use.
-   */
-  router.get("/profiles", async (_req: Request, res: Response) => {
-    const rows = await profiles.listVisible(userId());
-    res.json(rows.map((row) => formatProfile(row, userId())));
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/vault/profiles:
-   *   post:
-   *     summary: Create a Vault profile
-   *     description: Creates a Vault signer profile owned by the caller. Needs vault.use, and vault.share to mark it shared.
-   *     tags: [Vault]
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required: [name, vaultAddr, sshRole]
-   *             properties:
-   *               name:
-   *                 type: string
-   *               vaultAddr:
-   *                 type: string
-   *               vaultNamespace:
-   *                 type: string
-   *               oidcMount:
-   *                 type: string
-   *               oidcRole:
-   *                 type: string
-   *               sshMount:
-   *                 type: string
-   *               sshRole:
-   *                 type: string
-   *               validPrincipals:
-   *                 type: string
-   *               keyType:
-   *                 type: string
-   *               shared:
-   *                 type: boolean
-   *     responses:
-   *       201:
-   *         description: The created profile.
-   *       400:
-   *         description: Missing required fields.
-   *       403:
-   *         description: Missing vault.use, or vault.share for a shared profile.
-   */
-  router.post("/profiles", async (req: Request, res: Response) => {
-    const body = (req.body ?? {}) as Record<string, unknown>;
-    if (
-      !isNonEmptyString(body.name) ||
-      !isNonEmptyString(body.vaultAddr) ||
-      !isNonEmptyString(body.sshRole)
-    ) {
-      return res
-        .status(400)
-        .json({ error: "name, vaultAddr and sshRole are required" });
-    }
-    const shared = !!body.shared;
-    if (shared && !(await ctx.rbac.has("share"))) {
-      return res
-        .status(403)
-        .json({ error: "You are not allowed to share Vault profiles" });
-    }
-    const row = await profiles.create(userId(), {
-      name: body.name.trim(),
-      description: optional(body.description),
-      folder: optional(body.folder),
-      tags: Array.isArray(body.tags)
-        ? body.tags.join(",")
-        : typeof body.tags === "string"
-          ? body.tags
-          : "",
-      vaultAddr: body.vaultAddr.trim(),
-      vaultNamespace: optional(body.vaultNamespace),
-      oidcMount: optional(body.oidcMount),
-      oidcRole: optional(body.oidcRole),
-      sshMount: optional(body.sshMount),
-      sshRole: body.sshRole.trim(),
-      validPrincipals: optional(body.validPrincipals),
-      keyType: optional(body.keyType),
-      shared,
-    });
-    res.status(201).json(formatProfile(row, userId()));
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/vault/profiles/{id}:
-   *   put:
-   *     summary: Update a Vault profile
-   *     description: Only the owner may edit a profile. Needs vault.use, and vault.share to mark it shared.
-   *     tags: [Vault]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *     responses:
-   *       200:
-   *         description: The updated profile.
-   *       400:
-   *         description: Invalid profile id.
-   *       403:
-   *         description: Not the owner, or sharing without vault.share.
-   *       404:
-   *         description: Profile not found.
-   */
-  router.put("/profiles/:id", async (req: Request, res: Response) => {
-    const id = parseId(req);
-    if (id === null)
-      return res.status(400).json({ error: "Invalid profile id" });
-    const existing = await profiles.findById(id);
-    if (!existing) return res.status(404).json({ error: "Profile not found" });
-    if (existing.userId !== userId()) {
-      return res
-        .status(403)
-        .json({ error: "Only the owner can edit this profile" });
-    }
-
-    const body = (req.body ?? {}) as Record<string, unknown>;
-    const fields: ProfileInput = {};
-    if (isNonEmptyString(body.name)) fields.name = body.name.trim();
-    if (body.description !== undefined)
-      fields.description = optional(body.description);
-    if (body.folder !== undefined) fields.folder = optional(body.folder);
-    if (body.tags !== undefined) {
-      fields.tags = Array.isArray(body.tags)
-        ? body.tags.join(",")
-        : typeof body.tags === "string"
-          ? body.tags
-          : "";
-    }
-    if (isNonEmptyString(body.vaultAddr))
-      fields.vaultAddr = body.vaultAddr.trim();
-    if (body.vaultNamespace !== undefined)
-      fields.vaultNamespace = optional(body.vaultNamespace);
-    if (body.oidcMount !== undefined)
-      fields.oidcMount = optional(body.oidcMount);
-    if (body.oidcRole !== undefined) fields.oidcRole = optional(body.oidcRole);
-    if (body.sshMount !== undefined) fields.sshMount = optional(body.sshMount);
-    if (isNonEmptyString(body.sshRole)) fields.sshRole = body.sshRole.trim();
-    if (body.validPrincipals !== undefined)
-      fields.validPrincipals = optional(body.validPrincipals);
-    if (body.keyType !== undefined) fields.keyType = optional(body.keyType);
-    if (body.shared !== undefined) {
-      if (body.shared && !(await ctx.rbac.has("share"))) {
-        return res
-          .status(403)
-          .json({ error: "You are not allowed to share Vault profiles" });
-      }
-      fields.shared = !!body.shared;
-    }
-
-    const updated = await profiles.update(id, fields);
-    if (!updated) return res.status(404).json({ error: "Profile not found" });
-    res.json(formatProfile(updated, userId()));
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/vault/profiles/{id}:
-   *   delete:
-   *     summary: Delete a Vault profile
-   *     description: Deletes a profile and every certificate cached for it. Only the owner may delete it. Needs vault.use.
-   *     tags: [Vault]
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Deleted.
-   *       400:
-   *         description: Invalid profile id.
-   *       403:
-   *         description: Not the owner.
-   *       404:
-   *         description: Profile not found.
-   */
-  router.delete("/profiles/:id", async (req: Request, res: Response) => {
-    const id = parseId(req);
-    if (id === null)
-      return res.status(400).json({ error: "Invalid profile id" });
-    const existing = await profiles.findById(id);
-    if (!existing) return res.status(404).json({ error: "Profile not found" });
-    if (existing.userId !== userId()) {
-      return res
-        .status(403)
-        .json({ error: "Only the owner can delete this profile" });
-    }
-    await profiles.remove(existing);
-    res.json({ success: true });
-  });
-}
diff --git a/plugins/vault/src/backend/tables.ts b/plugins/vault/src/backend/tables.ts
deleted file mode 100644
index f4fdbbf84..000000000
--- a/plugins/vault/src/backend/tables.ts
+++ /dev/null
@@ -1,74 +0,0 @@
-import {
-  adoptLegacyTable,
-  boolean,
-  defineTable,
-  id,
-  integer,
-  refUser,
-  text,
-  varchar,
-} from "@termix/plugin-sdk/db";
-
-/**
- * Vault signer profiles: connection settings only, no secrets. A shared
- * profile is visible to every user. Adopted from core's vault_profiles.
- */
-export const profiles = adoptLegacyTable(
-  "vault_profiles",
-  defineTable("profiles", {
-    id: id(),
-    userId: refUser(),
-    name: text().notNull(),
-    description: text(),
-    folder: text(),
-    tags: text(),
-    vaultAddr: text().notNull(),
-    vaultNamespace: text(),
-    oidcMount: text(),
-    oidcRole: text(),
-    sshMount: text(),
-    sshRole: text().notNull(),
-    validPrincipals: text(),
-    keyType: text(),
-    shared: boolean().notNull().default(false),
-    syncId: varchar().unique(),
-    createdAt: text().notNull().defaultNow(),
-    updatedAt: text().notNull().defaultNow(),
-  }),
-);
-
-/**
- * One signed certificate and its ephemeral key per user and profile, sealed
- * with ctx.secrets.seal. Adopted from core's vault_tokens. Rows 2.8 wrote were
- * encrypted with the user's data key; they do not unseal and are dropped.
- *
- * profileId has no foreign key on a fresh install (the SDK has no builder
- * for one to the plugin's own table), so deleting a profile deletes its
- * tokens in code. Upgraded installs keep 2.8's cascading key.
- */
-export const tokens = adoptLegacyTable(
-  "vault_tokens",
-  defineTable(
-    "tokens",
-    {
-      id: id(),
-      userId: refUser(),
-      profileId: integer().notNull(),
-      sshCert: text().notNull(),
-      privateKey: text().notNull(),
-      createdAt: text().notNull().defaultNow(),
-      expiresAt: varchar().notNull(),
-      lastUsed: text(),
-    },
-    {
-      uniques: [
-        {
-          name: "idx_vault_tokens_user_profile",
-          columns: ["userId", "profileId"],
-        },
-      ],
-    },
-  ),
-);
-
-export const tables = [profiles, tokens];
diff --git a/plugins/vault/src/backend/token-store.ts b/plugins/vault/src/backend/token-store.ts
deleted file mode 100644
index 8d4028820..000000000
--- a/plugins/vault/src/backend/token-store.ts
+++ /dev/null
@@ -1,114 +0,0 @@
-import { and, eq } from "drizzle-orm";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { parseCertValidBefore } from "./vault-client.js";
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-// Sign again once a certificate is this close to expiring.
-const EXPIRY_SKEW_MS = 60 * 1000;
-// When the certificate's expiry cannot be read.
-const FALLBACK_TTL_MS = 5 * 60 * 1000;
-
-export interface CachedCertificate {
-  privateKey: string;
-  sshCert: string;
-}
-
-export type TokenStore = ReturnType<typeof createTokenStore>;
-
-export function createTokenStore(ctx: PluginContext, table: Table) {
-  const client = () => ctx.db.client<Drizzle>();
-  const match = (userId: string, profileId: number) =>
-    and(eq(table.userId, userId), eq(table.profileId, profileId));
-
-  async function find(userId: string, profileId: number) {
-    const rows = await (
-      await client()
-    )
-      .select()
-      .from(table)
-      .where(match(userId, profileId))
-      .limit(1);
-    return rows[0] ?? null;
-  }
-
-  async function remove(userId: string, profileId: number): Promise<void> {
-    if (!(await find(userId, profileId))) return;
-    await (await client()).delete(table).where(match(userId, profileId));
-    await ctx.db.persist();
-  }
-
-  return {
-    /** Stores a signed certificate and returns when it expires. */
-    async save(
-      userId: string,
-      profileId: number,
-      privateKey: string,
-      sshCert: string,
-    ): Promise<string> {
-      const validBefore = parseCertValidBefore(sshCert);
-      const expiresAt = new Date(
-        validBefore > 0 ? validBefore * 1000 : Date.now() + FALLBACK_TTL_MS,
-      ).toISOString();
-      const values = {
-        sshCert: await ctx.secrets.seal(sshCert),
-        privateKey: await ctx.secrets.seal(privateKey),
-        createdAt: new Date().toISOString(),
-        expiresAt,
-        lastUsed: null,
-      };
-      if (await find(userId, profileId)) {
-        await (
-          await client()
-        )
-          .update(table)
-          .set(values)
-          .where(match(userId, profileId));
-      } else {
-        await (
-          await client()
-        )
-          .insert(table)
-          .values({ userId, profileId, ...values });
-      }
-      await ctx.db.persist();
-      return expiresAt;
-    },
-
-    /** A usable certificate, or null. Expired or unreadable rows are deleted. */
-    async get(
-      userId: string,
-      profileId: number,
-    ): Promise<CachedCertificate | null> {
-      const row = await find(userId, profileId);
-      if (!row) return null;
-      const expiresAt = new Date(row.expiresAt).getTime();
-      if (
-        !Number.isFinite(expiresAt) ||
-        expiresAt - EXPIRY_SKEW_MS < Date.now()
-      ) {
-        await remove(userId, profileId);
-        return null;
-      }
-      const sshCert = await ctx.secrets.unseal(row.sshCert);
-      const privateKey = await ctx.secrets.unseal(row.privateKey);
-      if (!sshCert || !privateKey) {
-        await remove(userId, profileId);
-        return null;
-      }
-      await (
-        await client()
-      )
-        .update(table)
-        .set({ lastUsed: new Date().toISOString() })
-        .where(match(userId, profileId));
-      await ctx.db.persist({ lazy: true });
-      return { sshCert, privateKey };
-    },
-
-    remove,
-  };
-}
diff --git a/plugins/vault/src/backend/vault-client.ts b/plugins/vault/src/backend/vault-client.ts
deleted file mode 100644
index 2d2216593..000000000
--- a/plugins/vault/src/backend/vault-client.ts
+++ /dev/null
@@ -1,286 +0,0 @@
-import crypto from "node:crypto";
-import ssh2Pkg from "ssh2";
-import type { PluginFetch } from "@termix/plugin-sdk/backend";
-
-const { utils: ssh2Utils } = ssh2Pkg;
-
-/**
- * Vault's HTTP API for SSH signing: an OIDC login for a short-lived Vault
- * token, then the SSH secrets engine signs an ephemeral public key. No Vault
- * token or long-lived key is ever stored.
- */
-
-export interface VaultProfileConfig {
-  id: number;
-  vaultAddr: string;
-  vaultNamespace?: string | null;
-  oidcMount?: string | null;
-  oidcRole?: string | null;
-  sshMount?: string | null;
-  sshRole: string;
-  validPrincipals?: string | null;
-  keyType?: string | null;
-}
-
-export interface EphemeralKeyPair {
-  privateKey: string;
-  publicKey: string;
-}
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-type VaultJson = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export function normalizeAddr(addr: string): string {
-  return addr.trim().replace(/\/+$/, "");
-}
-
-export function trimMount(
-  mount: string | null | undefined,
-  fallback: string,
-): string {
-  return (mount?.trim() || fallback).replace(/^\/+|\/+$/g, "");
-}
-
-function vaultHeaders(profile: VaultProfileConfig): Record<string, string> {
-  const headers: Record<string, string> = {};
-  if (profile.vaultNamespace?.trim()) {
-    headers["X-Vault-Namespace"] = profile.vaultNamespace.trim();
-  }
-  return headers;
-}
-
-/**
- * The profile's own Vault server may be private: someone configured it by
- * name, which 2.8 allowed too. Nothing else private is reachable.
- */
-export function allowedHosts(profile: VaultProfileConfig): string[] {
-  try {
-    return [new URL(normalizeAddr(profile.vaultAddr)).hostname];
-  } catch {
-    return [];
-  }
-}
-
-async function vaultRequest(
-  fetch: PluginFetch,
-  profile: VaultProfileConfig,
-  url: string,
-  method: "GET" | "POST",
-  headers: Record<string, string>,
-  body?: Record<string, unknown>,
-): Promise<VaultJson> {
-  let response: Response;
-  try {
-    response = await fetch(url, {
-      method,
-      headers: {
-        ...(body ? { "Content-Type": "application/json" } : {}),
-        ...headers,
-      },
-      body: body ? JSON.stringify(body) : undefined,
-      allowPrivateHosts: allowedHosts(profile),
-    });
-  } catch (e) {
-    throw new Error(
-      `Failed to reach Vault at ${url}: ${
-        e instanceof Error ? e.message : String(e)
-      }`,
-    );
-  }
-
-  const text = await response.text();
-  let json: VaultJson;
-  if (text) {
-    try {
-      json = JSON.parse(text);
-    } catch {
-      // not JSON
-    }
-  }
-
-  if (!response.ok) {
-    const errs =
-      json && Array.isArray(json.errors) && json.errors.length
-        ? json.errors.join("; ")
-        : text || `HTTP ${response.status}`;
-    throw new Error(`Vault request failed (${response.status}): ${errs}`);
-  }
-  return json;
-}
-
-/** An ephemeral SSH keypair in OpenSSH format. */
-export function generateEphemeralKeyPair(
-  keyType?: string | null,
-): EphemeralKeyPair {
-  let type: "ed25519" | "rsa" | "ecdsa" = "ed25519";
-  const options: { bits?: number } = {};
-  switch ((keyType || "ssh-ed25519").trim()) {
-    case "ssh-rsa":
-      type = "rsa";
-      options.bits = 4096;
-      break;
-    case "ecdsa-sha2-nistp256":
-      type = "ecdsa";
-      options.bits = 256;
-      break;
-    default:
-      type = "ed25519";
-  }
-  const pair = ssh2Utils.generateKeyPairSync(type as never, options as never);
-  return { privateKey: pair.private, publicKey: pair.public };
-}
-
-/**
- * Starts a Vault OIDC login. `redirectUri` must be allowed by the Vault
- * role's allowed_redirect_uris and by the identity provider.
- */
-export async function startVaultOidc(
-  fetch: PluginFetch,
-  profile: VaultProfileConfig,
-  redirectUri: string,
-): Promise<{ authUrl: string; state: string; clientNonce: string }> {
-  const addr = normalizeAddr(profile.vaultAddr);
-  const mount = trimMount(profile.oidcMount, "oidc");
-  const clientNonce = crypto.randomBytes(20).toString("hex");
-
-  const json = await vaultRequest(
-    fetch,
-    profile,
-    `${addr}/v1/auth/${mount}/oidc/auth_url`,
-    "POST",
-    vaultHeaders(profile),
-    {
-      role: profile.oidcRole?.trim() || "",
-      redirect_uri: redirectUri,
-      client_nonce: clientNonce,
-    },
-  );
-
-  const authUrl: string | undefined = json?.data?.auth_url;
-  if (!authUrl) {
-    throw new Error("Vault did not return an OIDC auth_url");
-  }
-
-  // Vault puts its own state in the auth_url; the callback is matched on it.
-  let state = "";
-  try {
-    state = new URL(authUrl).searchParams.get("state") || "";
-  } catch {
-    const m = authUrl.match(/[?&]state=([^&]+)/);
-    state = m ? decodeURIComponent(m[1]) : "";
-  }
-  if (!state) {
-    throw new Error("Could not determine OIDC state from Vault auth_url");
-  }
-
-  return { authUrl, state, clientNonce };
-}
-
-/** Completes the OIDC callback and returns a short-lived Vault token. */
-export async function completeVaultOidc(
-  fetch: PluginFetch,
-  profile: VaultProfileConfig,
-  params: { state: string; code: string; clientNonce: string },
-): Promise<string> {
-  const addr = normalizeAddr(profile.vaultAddr);
-  const mount = trimMount(profile.oidcMount, "oidc");
-
-  const url = new URL(`${addr}/v1/auth/${mount}/oidc/callback`);
-  url.searchParams.set("state", params.state);
-  url.searchParams.set("code", params.code);
-  url.searchParams.set("client_nonce", params.clientNonce);
-
-  const json = await vaultRequest(
-    fetch,
-    profile,
-    url.toString(),
-    "GET",
-    vaultHeaders(profile),
-  );
-  const token: string | undefined = json?.auth?.client_token;
-  if (!token) {
-    throw new Error("Vault OIDC callback did not return a client token");
-  }
-  return token;
-}
-
-/** Signs an SSH public key with Vault, returning the OpenSSH certificate line. */
-export async function signWithVault(
-  fetch: PluginFetch,
-  profile: VaultProfileConfig,
-  vaultToken: string,
-  publicKey: string,
-): Promise<string> {
-  const addr = normalizeAddr(profile.vaultAddr);
-  const mount = trimMount(profile.sshMount, "ssh-client-signer");
-
-  const body: Record<string, unknown> = {
-    public_key: publicKey.trim(),
-    cert_type: "user",
-  };
-  if (profile.validPrincipals?.trim()) {
-    body.valid_principals = profile.validPrincipals.trim();
-  }
-
-  const json = await vaultRequest(
-    fetch,
-    profile,
-    `${addr}/v1/${mount}/sign/${encodeURIComponent(profile.sshRole.trim())}`,
-    "POST",
-    { ...vaultHeaders(profile), "X-Vault-Token": vaultToken },
-    body,
-  );
-  const signedKey: string | undefined = json?.data?.signed_key;
-  if (!signedKey) {
-    throw new Error("Vault sign response did not include a signed_key");
-  }
-  return signedKey.trim();
-}
-
-/**
- * The "valid before" Unix timestamp of an OpenSSH certificate, or 0 when it
- * cannot be parsed (the caller then uses a short fallback).
- */
-export function parseCertValidBefore(signedKey: string): number {
-  try {
-    const parts = signedKey.trim().split(/\s+/);
-    if (parts.length < 2) return 0;
-    const certType = parts[0];
-    const blob = Buffer.from(parts[1], "base64");
-
-    let pos = 0;
-    const skipString = (): void => {
-      const len = blob.readUInt32BE(pos);
-      pos += 4 + len;
-    };
-    const readUint64 = (): number => {
-      const hi = blob.readUInt32BE(pos);
-      const lo = blob.readUInt32BE(pos + 4);
-      pos += 8;
-      return hi * 0x100000000 + lo;
-    };
-
-    skipString(); // format id
-    skipString(); // nonce
-
-    let keyFields: number;
-    if (certType.startsWith("ssh-ed25519")) keyFields = 1;
-    else if (certType.startsWith("ecdsa-sha2-")) keyFields = 2;
-    else if (certType.startsWith("ssh-rsa")) keyFields = 2;
-    else if (certType.startsWith("ssh-dss")) keyFields = 4;
-    else if (certType.startsWith("sk-ssh-ed25519")) keyFields = 2;
-    else if (certType.startsWith("sk-ecdsa-sha2-")) keyFields = 3;
-    else return 0;
-    for (let i = 0; i < keyFields; i++) skipString();
-
-    readUint64(); // serial
-    pos += 4; // type
-    skipString(); // key id
-    skipString(); // valid principals
-    readUint64(); // valid after
-    return readUint64();
-  } catch {
-    return 0;
-  }
-}
diff --git a/plugins/vault/src/frontend/RedirectUriSetting.tsx b/plugins/vault/src/frontend/RedirectUriSetting.tsx
deleted file mode 100644
index 6ad42faa6..000000000
--- a/plugins/vault/src/frontend/RedirectUriSetting.tsx
+++ /dev/null
@@ -1,54 +0,0 @@
-import { toast } from "sonner";
-import {
-  useTranslation,
-  type SettingsComponentProps,
-} from "@termix/plugin-sdk/frontend";
-import { Button, Input, copyToClipboard } from "@termix/plugin-sdk/ui";
-
-const CALLBACK_PATH = "plugin-api/vault/oidc/callback";
-const LEGACY_CALLBACK_PATH = "vault/oidc/callback";
-
-/** The redirect URI to allow in the Vault OIDC role. */
-export function redirectUri(
-  legacy: boolean,
-  baseUri = document.baseURI,
-): string {
-  return new URL(
-    legacy ? LEGACY_CALLBACK_PATH : CALLBACK_PATH,
-    baseUri,
-  ).toString();
-}
-
-export function RedirectUriSetting({ values }: SettingsComponentProps) {
-  const { t } = useTranslation();
-  const uri = redirectUri(values.legacyCallback === true);
-
-  return (
-    <div className="flex flex-col gap-2">
-      <span className="text-xs font-medium">
-        {t("settings.redirectUri.label")}
-      </span>
-      <div className="flex gap-2">
-        <Input
-          value={uri}
-          readOnly
-          className="min-w-0 flex-1 rounded-none font-mono text-xs"
-        />
-        <Button
-          type="button"
-          variant="outline"
-          className="rounded-none"
-          onClick={async () => {
-            if (await copyToClipboard(uri)) toast.success(t("common.copied"));
-            else toast.error(t("common.copyFailed"));
-          }}
-        >
-          {t("common.copy")}
-        </Button>
-      </div>
-      <p className="text-[10px] text-muted-foreground">
-        {t("settings.redirectUri.description")}
-      </p>
-    </div>
-  );
-}
diff --git a/plugins/vault/src/frontend/VaultAuthEditor.tsx b/plugins/vault/src/frontend/VaultAuthEditor.tsx
deleted file mode 100644
index 75633e050..000000000
--- a/plugins/vault/src/frontend/VaultAuthEditor.tsx
+++ /dev/null
@@ -1,108 +0,0 @@
-import { useCallback, useEffect, useState } from "react";
-import {
-  usePermission,
-  usePluginApi,
-  useTranslation,
-  type SshAuthEditorProps,
-} from "@termix/plugin-sdk/frontend";
-import { Select2 } from "@termix/plugin-sdk/ui";
-import { VaultProfileManager } from "./VaultProfileManager";
-import type { VaultProfile } from "./types";
-
-const PLUGIN_ID = "vault";
-const DOCS_URL = "https://docs.termix.site/features/authentication/vault";
-
-type PluginSettingsBag = Record<string, Record<string, unknown>>;
-
-/**
- * The host editor's "vault" auth method: pick a signer profile, and manage
- * profiles in place. The choice is the profileId host setting, which the
- * editor saves with the rest of the host's plugin settings.
- */
-export function VaultAuthEditor({ form, setField }: SshAuthEditorProps) {
-  const { t } = useTranslation();
-  const api = usePluginApi();
-  const canUse = usePermission("use");
-  const [profiles, setProfiles] = useState<VaultProfile[]>([]);
-  const [showManager, setShowManager] = useState(false);
-
-  const bag = (form.pluginSettings as PluginSettingsBag | undefined) ?? {};
-  const profileId = bag[PLUGIN_ID]?.profileId;
-
-  const reload = useCallback(() => {
-    if (!canUse) return;
-    api
-      .get<VaultProfile[]>("/profiles")
-      .then(({ data }) => setProfiles(Array.isArray(data) ? data : []))
-      .catch(() => setProfiles([]));
-  }, [api, canUse]);
-
-  useEffect(() => {
-    reload();
-  }, [reload]);
-
-  const select = (value: string) => {
-    setField("pluginSettings", {
-      ...bag,
-      [PLUGIN_ID]: {
-        ...(bag[PLUGIN_ID] ?? {}),
-        profileId: value ? Number(value) : null,
-      },
-    });
-  };
-
-  return (
-    <>
-      <div className="flex flex-col gap-1.5 col-span-2">
-        <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-          {t("editor.profile")}
-        </label>
-        <Select2
-          value={profileId != null ? String(profileId) : ""}
-          onChange={(e) => select(e.target.value)}
-          className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-        >
-          <option value="">{t("editor.selectProfile")}</option>
-          {profiles.map((profile) => (
-            <option key={profile.id} value={String(profile.id)}>
-              {profile.shared
-                ? t("editor.sharedProfile", { name: profile.name })
-                : profile.name}
-            </option>
-          ))}
-        </Select2>
-        <div className="flex items-center justify-between">
-          <p className="text-[10px] text-muted-foreground">
-            {t("editor.hint")}
-          </p>
-          <div className="flex items-center gap-2 shrink-0">
-            <a
-              href={DOCS_URL}
-              target="_blank"
-              rel="noreferrer"
-              className="text-[10px] text-accent-brand hover:underline"
-            >
-              {t("editor.docs")}
-            </a>
-            {canUse && (
-              <button
-                type="button"
-                className="text-[10px] text-accent-brand hover:text-accent-brand/80"
-                onClick={() => setShowManager((shown) => !shown)}
-              >
-                {t("profiles.manage")}
-              </button>
-            )}
-          </div>
-        </div>
-      </div>
-      {showManager && (
-        <VaultProfileManager
-          profiles={profiles}
-          onChanged={reload}
-          onClose={() => setShowManager(false)}
-        />
-      )}
-    </>
-  );
-}
diff --git a/plugins/vault/src/frontend/VaultOverlay.tsx b/plugins/vault/src/frontend/VaultOverlay.tsx
deleted file mode 100644
index ea0d28952..000000000
--- a/plugins/vault/src/frontend/VaultOverlay.tsx
+++ /dev/null
@@ -1,245 +0,0 @@
-import { useEffect, useRef, useState } from "react";
-import { AlertCircle, KeyRound, Loader2 } from "lucide-react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Button } from "@termix/plugin-sdk/ui";
-
-/** What the ssh-terminal plugin hands a "terminal.overlay" component. */
-export interface TerminalOverlayProps {
-  host: { id: number | string; [key: string]: unknown } | undefined;
-  backgroundColor?: string;
-  subscribe: (
-    listener: (message: { type: string; [key: string]: unknown }) => void,
-  ) => () => void;
-  holdConnectTimeout: (held: boolean) => void;
-  fail: (message: string) => void;
-  disconnect: () => void;
-  send: (type: string, data?: unknown) => void;
-  connectPayload: () => Record<string, unknown>;
-}
-
-interface DialogState {
-  stage: "waiting" | "error";
-  error?: string;
-  hostId?: unknown;
-  requestId?: string;
-}
-
-/** How long the dialog waits before giving up on the connection. */
-const DIALOG_TIMEOUT_MS = 300_000;
-
-const footerButton =
-  "rounded-none text-[10px] font-bold uppercase tracking-widest";
-
-/**
- * Runs the Vault OIDC sign-in for a terminal: asks the server to start it,
- * opens Vault's auth URL in a popup, and reconnects once Vault has signed
- * the certificate.
- */
-export function VaultOverlay({
-  subscribe,
-  holdConnectTimeout,
-  fail,
-  disconnect,
-  send,
-  connectPayload,
-  backgroundColor,
-}: TerminalOverlayProps) {
-  const { t } = useTranslation();
-  const [dialog, setDialog] = useState<DialogState | null>(null);
-  const timerRef = useRef<ReturnType<typeof setTimeout> | null>(null);
-  const popupRef = useRef<Window | null>(null);
-  const heldRef = useRef(false);
-  // A second "auth required" after a sign-in means the certificate did not work.
-  const failedRef = useRef(false);
-
-  useEffect(() => {
-    const clearTimer = () => {
-      if (timerRef.current) clearTimeout(timerRef.current);
-      timerRef.current = null;
-    };
-    const closePopup = () => {
-      try {
-        popupRef.current?.close();
-      } catch {
-        // already closed
-      }
-      popupRef.current = null;
-    };
-    const hold = (held: boolean) => {
-      if (heldRef.current === held) return;
-      heldRef.current = held;
-      holdConnectTimeout(held);
-    };
-
-    const unsubscribe = subscribe((message) => {
-      switch (message.type) {
-        case "vault_auth_required":
-          hold(true);
-          if (failedRef.current) {
-            clearTimer();
-            hold(false);
-            setDialog({ stage: "error", error: t("dialog.failed") });
-            fail(t("dialog.failed"));
-          } else {
-            failedRef.current = true;
-            send("vault_start_auth", { hostId: message.hostId });
-          }
-          break;
-        case "vault_auth_url":
-          try {
-            popupRef.current = window.open(
-              String(message.url ?? ""),
-              "termix-vault-oidc",
-              "width=540,height=720",
-            );
-          } catch {
-            popupRef.current = null;
-          }
-          setDialog({
-            stage: "waiting",
-            hostId: message.hostId,
-            requestId:
-              typeof message.requestId === "string"
-                ? message.requestId
-                : undefined,
-          });
-          clearTimer();
-          timerRef.current = setTimeout(() => {
-            setDialog(null);
-            hold(false);
-            disconnect();
-          }, DIALOG_TIMEOUT_MS);
-          break;
-        case "vault_completed":
-          clearTimer();
-          closePopup();
-          setDialog(null);
-          send("vault_auth_completed", connectPayload());
-          break;
-        case "vault_error":
-          failedRef.current = true;
-          clearTimer();
-          closePopup();
-          hold(false);
-          setDialog({ stage: "error", error: String(message.error ?? "") });
-          break;
-        case "connected":
-        case "sessionAttached":
-          failedRef.current = false;
-          hold(false);
-          break;
-        case "session_closed":
-          clearTimer();
-          setDialog(null);
-          hold(false);
-          break;
-      }
-    });
-
-    return () => {
-      unsubscribe();
-      clearTimer();
-      if (heldRef.current) {
-        heldRef.current = false;
-        holdConnectTimeout(false);
-      }
-    };
-  }, [
-    subscribe,
-    holdConnectTimeout,
-    fail,
-    disconnect,
-    send,
-    connectPayload,
-    t,
-  ]);
-
-  if (!dialog) return null;
-
-  const close = () => {
-    if (timerRef.current) clearTimeout(timerRef.current);
-    timerRef.current = null;
-    try {
-      popupRef.current?.close();
-    } catch {
-      // already closed
-    }
-    if (dialog.stage === "waiting") {
-      send("vault_cancel", {
-        hostId: dialog.hostId,
-        requestId: dialog.requestId,
-      });
-    }
-    setDialog(null);
-    if (heldRef.current) {
-      heldRef.current = false;
-      holdConnectTimeout(false);
-    }
-  };
-
-  return (
-    <div className="absolute inset-0 flex items-center justify-center z-500 animate-in fade-in duration-200">
-      <div
-        className="absolute inset-0 bg-canvas"
-        style={{ backgroundColor: backgroundColor || undefined }}
-      />
-      <div className="bg-card border border-border w-full max-w-md mx-4 relative z-10">
-        <div className="p-4 border-b border-border">
-          <div className="flex items-center gap-2">
-            <KeyRound className="size-4 text-accent-brand" />
-            <h3 className="text-xs font-bold uppercase tracking-widest">
-              {dialog.stage === "error"
-                ? t("dialog.failed")
-                : t("dialog.title")}
-            </h3>
-          </div>
-        </div>
-        <div className="p-4 flex flex-col gap-4">
-          {dialog.stage === "waiting" ? (
-            <div className="flex items-center gap-3 py-2">
-              <Loader2 className="size-4 animate-spin text-accent-brand shrink-0" />
-              <p className="text-xs text-muted-foreground">
-                {t("dialog.description")}
-              </p>
-            </div>
-          ) : (
-            <div className="flex items-start gap-3 p-3 border border-destructive/20 bg-destructive/10">
-              <AlertCircle className="size-4 text-destructive shrink-0 mt-0.5" />
-              <p className="text-xs text-destructive/90 whitespace-pre-wrap break-words">
-                {dialog.error || t("dialog.failed")}
-              </p>
-            </div>
-          )}
-          <div className="flex justify-end gap-2">
-            {dialog.stage === "waiting" && (
-              <Button
-                type="button"
-                variant="outline"
-                className={footerButton}
-                onClick={() => {
-                  try {
-                    popupRef.current?.focus();
-                  } catch {
-                    // popup gone
-                  }
-                }}
-              >
-                {t("dialog.reopen")}
-              </Button>
-            )}
-            <Button
-              type="button"
-              variant="ghost"
-              className={footerButton}
-              onClick={close}
-            >
-              {dialog.stage === "error"
-                ? t("common.close")
-                : t("common.cancel")}
-            </Button>
-          </div>
-        </div>
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/vault/src/frontend/VaultProfileManager.tsx b/plugins/vault/src/frontend/VaultProfileManager.tsx
deleted file mode 100644
index 16d2fe9c4..000000000
--- a/plugins/vault/src/frontend/VaultProfileManager.tsx
+++ /dev/null
@@ -1,286 +0,0 @@
-import { useState } from "react";
-import { Pencil, Plus, Trash2, X } from "lucide-react";
-import {
-  usePermission,
-  usePluginApi,
-  useToast,
-  useTranslation,
-} from "@termix/plugin-sdk/frontend";
-import { Button, Input, Select2 } from "@termix/plugin-sdk/ui";
-import {
-  errorMessage,
-  type VaultProfile,
-  type VaultProfilePayload,
-} from "./types";
-
-type FormState = {
-  id?: number;
-  name: string;
-  vaultAddr: string;
-  vaultNamespace: string;
-  oidcMount: string;
-  oidcRole: string;
-  sshMount: string;
-  sshRole: string;
-  validPrincipals: string;
-  keyType: string;
-  shared: boolean;
-};
-
-type TextKey = Exclude<keyof FormState, "id" | "shared">;
-
-const emptyForm: FormState = {
-  name: "",
-  vaultAddr: "",
-  vaultNamespace: "",
-  oidcMount: "oidc",
-  oidcRole: "",
-  sshMount: "ssh-client-signer",
-  sshRole: "",
-  validPrincipals: "",
-  keyType: "ssh-ed25519",
-  shared: false,
-};
-
-function toForm(p: VaultProfile): FormState {
-  return {
-    id: p.id,
-    name: p.name,
-    vaultAddr: p.vaultAddr,
-    vaultNamespace: p.vaultNamespace ?? "",
-    oidcMount: p.oidcMount ?? "oidc",
-    oidcRole: p.oidcRole ?? "",
-    sshMount: p.sshMount ?? "ssh-client-signer",
-    sshRole: p.sshRole,
-    validPrincipals: p.validPrincipals ?? "",
-    keyType: p.keyType ?? "ssh-ed25519",
-    shared: p.shared,
-  };
-}
-
-const blank = (value: string) => value.trim() || null;
-
-/** Create, edit and delete the caller's Vault profiles. */
-export function VaultProfileManager({
-  profiles,
-  onChanged,
-  onClose,
-}: {
-  profiles: VaultProfile[];
-  onChanged: () => void;
-  onClose: () => void;
-}) {
-  const { t } = useTranslation();
-  const api = usePluginApi();
-  const toast = useToast();
-  const canShare = usePermission("share");
-  const [form, setForm] = useState<FormState | null>(null);
-  const [saving, setSaving] = useState(false);
-
-  const setField = <K extends keyof FormState>(key: K, value: FormState[K]) =>
-    setForm((current) => (current ? { ...current, [key]: value } : current));
-
-  const handleSave = async () => {
-    if (!form) return;
-    if (!form.name.trim() || !form.vaultAddr.trim() || !form.sshRole.trim()) {
-      toast.error(t("profiles.validationError"));
-      return;
-    }
-    setSaving(true);
-    try {
-      const payload: VaultProfilePayload = {
-        name: form.name.trim(),
-        vaultAddr: form.vaultAddr.trim(),
-        vaultNamespace: blank(form.vaultNamespace),
-        oidcMount: blank(form.oidcMount),
-        oidcRole: blank(form.oidcRole),
-        sshMount: blank(form.sshMount),
-        sshRole: form.sshRole.trim(),
-        validPrincipals: blank(form.validPrincipals),
-        keyType: blank(form.keyType),
-        shared: canShare && form.shared,
-      };
-      if (form.id) {
-        await api.put(`/profiles/${form.id}`, payload);
-        toast.success(t("profiles.saved"));
-      } else {
-        await api.post("/profiles", payload);
-        toast.success(t("profiles.created"));
-      }
-      setForm(null);
-      onChanged();
-    } catch (error) {
-      toast.error(errorMessage(error, t("profiles.saveFailed")));
-    } finally {
-      setSaving(false);
-    }
-  };
-
-  const handleDelete = async (profile: VaultProfile) => {
-    try {
-      await api.delete(`/profiles/${profile.id}`);
-      toast.success(t("profiles.deleted"));
-      onChanged();
-    } catch (error) {
-      toast.error(errorMessage(error, t("profiles.deleteFailed")));
-    }
-  };
-
-  const field = (label: string, key: TextKey, placeholder?: string) => (
-    <div className="flex flex-col gap-1">
-      <label className="text-[9px] font-bold uppercase tracking-widest text-muted-foreground">
-        {label}
-      </label>
-      <Input
-        className="h-8 text-xs rounded-none"
-        placeholder={placeholder}
-        value={form?.[key] ?? ""}
-        onChange={(e) => setField(key, e.target.value)}
-      />
-    </div>
-  );
-
-  return (
-    <div className="flex flex-col gap-3 col-span-2 border border-border bg-muted/20 p-3">
-      <div className="flex items-center justify-between">
-        <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-          {t("profiles.manage")}
-        </span>
-        <button
-          type="button"
-          aria-label={t("common.close")}
-          onClick={onClose}
-          className="text-muted-foreground hover:text-foreground"
-        >
-          <X className="size-3.5" />
-        </button>
-      </div>
-
-      {!form && (
-        <>
-          <div className="flex flex-col divide-y divide-border/50">
-            {profiles.length === 0 && (
-              <span className="text-[11px] text-muted-foreground py-1">
-                {t("profiles.none")}
-              </span>
-            )}
-            {profiles.map((profile) => (
-              <div
-                key={profile.id}
-                className="flex items-center justify-between py-1.5"
-              >
-                <div className="flex flex-col min-w-0">
-                  <span className="text-xs text-foreground truncate">
-                    {profile.name}
-                    {profile.shared && (
-                      <span className="ml-1 text-[9px] text-accent-brand">
-                        {t("profiles.sharedBadge")}
-                      </span>
-                    )}
-                  </span>
-                  <span className="text-[10px] text-muted-foreground truncate">
-                    {profile.vaultAddr}
-                  </span>
-                </div>
-                {profile.owned && (
-                  <div className="flex items-center gap-1 shrink-0">
-                    <button
-                      type="button"
-                      title={t("profiles.edit")}
-                      onClick={() => setForm(toForm(profile))}
-                      className="size-7 flex items-center justify-center text-muted-foreground/60 hover:text-foreground hover:bg-muted-foreground/10"
-                    >
-                      <Pencil className="size-3.5" />
-                    </button>
-                    <button
-                      type="button"
-                      title={t("profiles.delete")}
-                      onClick={() => handleDelete(profile)}
-                      className="size-7 flex items-center justify-center text-muted-foreground/50 hover:text-destructive hover:bg-destructive/10"
-                    >
-                      <Trash2 className="size-3.5" />
-                    </button>
-                  </div>
-                )}
-              </div>
-            ))}
-          </div>
-          <Button
-            type="button"
-            variant="outline"
-            size="sm"
-            className="h-7 text-[10px] self-start rounded-none"
-            onClick={() => setForm({ ...emptyForm })}
-          >
-            <Plus className="size-3 mr-1" /> {t("profiles.new")}
-          </Button>
-        </>
-      )}
-
-      {form && (
-        <div className="flex flex-col gap-2">
-          <div className="grid grid-cols-1 md:grid-cols-2 gap-2">
-            {field(t("profiles.name"), "name", "Production Vault")}
-            {field(t("profiles.vaultAddr"), "vaultAddr", "https://vault:8200")}
-            {field(t("profiles.namespace"), "vaultNamespace", "admin")}
-            {field(t("profiles.oidcMount"), "oidcMount", "oidc")}
-            {field(t("profiles.oidcRole"), "oidcRole", "default")}
-            {field(t("profiles.sshMount"), "sshMount", "ssh-client-signer")}
-            {field(t("profiles.sshRole"), "sshRole", "my-role")}
-            {field(
-              t("profiles.validPrincipals"),
-              "validPrincipals",
-              "root,deploy",
-            )}
-          </div>
-          <div className="flex flex-col gap-1">
-            <label className="text-[9px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("profiles.keyType")}
-            </label>
-            <Select2
-              value={form.keyType}
-              onChange={(e) => setField("keyType", e.target.value)}
-              className="flex h-8 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-            >
-              <option value="ssh-ed25519">Ed25519</option>
-              <option value="ecdsa-sha2-nistp256">ECDSA (nistp256)</option>
-              <option value="ssh-rsa">RSA (4096)</option>
-            </Select2>
-          </div>
-          {canShare && (
-            <label className="flex items-center gap-2 text-xs text-foreground">
-              <input
-                type="checkbox"
-                checked={form.shared}
-                onChange={(e) => setField("shared", e.target.checked)}
-              />
-              {t("profiles.shareWithAll")}
-            </label>
-          )}
-          <div className="flex justify-end gap-2">
-            <Button
-              type="button"
-              variant="ghost"
-              size="sm"
-              className="rounded-none"
-              onClick={() => setForm(null)}
-              disabled={saving}
-            >
-              {t("common.cancel")}
-            </Button>
-            <Button
-              type="button"
-              variant="outline"
-              size="sm"
-              className="rounded-none border-accent-brand/40 text-accent-brand"
-              onClick={handleSave}
-              disabled={saving}
-            >
-              {form.id ? t("profiles.save") : t("profiles.create")}
-            </Button>
-          </div>
-        </div>
-      )}
-    </div>
-  );
-}
diff --git a/plugins/vault/src/frontend/index.tsx b/plugins/vault/src/frontend/index.tsx
deleted file mode 100644
index aec147cff..000000000
--- a/plugins/vault/src/frontend/index.tsx
+++ /dev/null
@@ -1,29 +0,0 @@
-import type { ComponentType } from "react";
-import type { TermixApp } from "@termix/plugin-sdk/frontend";
-import { VaultAuthEditor } from "./VaultAuthEditor";
-import { VaultOverlay } from "./VaultOverlay";
-import { RedirectUriSetting } from "./RedirectUriSetting";
-
-export function activate(app: TermixApp): void {
-  app.registerSshAuthEditor({
-    authType: "vault",
-    titleKey: "hosts.filterAuthVault",
-    component: VaultAuthEditor,
-  });
-
-  // The Vault sign-in while a terminal connects to a Vault host.
-  app.registerSlotContribution("terminal.overlay", {
-    actionId: "vault.signIn",
-    titleKey: "dialog.title",
-    kind: "component",
-    component: VaultOverlay as unknown as ComponentType<
-      Record<string, unknown>
-    >,
-  });
-
-  app.registerSettingsComponent("redirectUri", RedirectUriSetting);
-}
-
-export function deactivate(): void {
-  // Registrations through app are disposed by core.
-}
diff --git a/plugins/vault/src/frontend/types.ts b/plugins/vault/src/frontend/types.ts
deleted file mode 100644
index 2cb0e61f1..000000000
--- a/plugins/vault/src/frontend/types.ts
+++ /dev/null
@@ -1,34 +0,0 @@
-/** A Vault signer profile as GET /profiles returns it. */
-export interface VaultProfile {
-  id: number;
-  name: string;
-  vaultAddr: string;
-  vaultNamespace: string | null;
-  oidcMount: string | null;
-  oidcRole: string | null;
-  sshMount: string | null;
-  sshRole: string;
-  validPrincipals: string | null;
-  keyType: string | null;
-  shared: boolean;
-  owned: boolean;
-}
-
-export interface VaultProfilePayload {
-  name: string;
-  vaultAddr: string;
-  vaultNamespace: string | null;
-  oidcMount: string | null;
-  oidcRole: string | null;
-  sshMount: string | null;
-  sshRole: string;
-  validPrincipals: string | null;
-  keyType: string | null;
-  shared: boolean;
-}
-
-export function errorMessage(error: unknown, fallback: string): string {
-  const data = (error as { response?: { data?: { error?: unknown } } })
-    ?.response?.data;
-  return typeof data?.error === "string" ? data.error : fallback;
-}
diff --git a/plugins/vault/tests/backend/helpers.ts b/plugins/vault/tests/backend/helpers.ts
deleted file mode 100644
index 9d3d8ad30..000000000
--- a/plugins/vault/tests/backend/helpers.ts
+++ /dev/null
@@ -1,174 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-  type TestDbOptions,
-} from "@termix/plugin-sdk/testing";
-import type {
-  PluginFetchInit,
-  PluginSshAuthProvider,
-} from "@termix/plugin-sdk/backend";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-export const manifest = manifestJson as unknown as PluginManifest;
-
-export const VAULT_ADDR = "https://vault.internal:8200";
-export const SIGNED_CERT = "ssh-ed25519-cert-v01@openssh.com AAAAsigned";
-
-/** A fake Vault answering the three calls the plugin makes. */
-export function createFakeVault(
-  options: { signStatus?: number; state?: string } = {},
-) {
-  const calls: Array<{ url: string; init?: PluginFetchInit }> = [];
-  const state = options.state ?? "vault-state-1";
-  const json = (status: number, body: unknown) =>
-    new Response(JSON.stringify(body), { status });
-
-  const fetch = async (url: string, init?: PluginFetchInit) => {
-    calls.push({ url, init });
-    const { pathname } = new URL(url);
-    if (pathname === "/v1/auth/oidc/oidc/auth_url") {
-      return json(200, {
-        data: {
-          auth_url: `https://idp.test/authorize?client_id=termix&state=${state}`,
-        },
-      });
-    }
-    if (pathname === "/v1/auth/oidc/oidc/callback") {
-      return json(200, { auth: { client_token: "hvs.token" } });
-    }
-    if (pathname.startsWith("/v1/ssh-client-signer/sign/")) {
-      if (options.signStatus && options.signStatus !== 200) {
-        return json(options.signStatus, { errors: ["permission denied"] });
-      }
-      return json(200, { data: { signed_key: SIGNED_CERT } });
-    }
-    return json(404, { errors: ["not found"] });
-  };
-  return { fetch, calls, state };
-}
-
-/** A fake terminal socket that records what it was sent. */
-export function fakeSocket() {
-  const sent: Array<Record<string, unknown>> = [];
-  return {
-    sent,
-    socket: { send: (data: string) => sent.push(JSON.parse(data)) },
-  };
-}
-
-export interface TestServer {
-  db: TestDb;
-  mock: MockPluginContext;
-  provider: () => PluginSshAuthProvider;
-  request: (
-    method: string,
-    path: string,
-    options?: { user?: string; body?: unknown },
-    // Route bodies vary per test; asserting on them is the point.
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any; text: string }>;
-  close: () => Promise<void>;
-}
-
-/**
- * The plugin activated against a real in-memory database, its router mounted
- * the way core mounts it: JSON parsed and the acting user taken from the
- * request.
- */
-export async function startServer(
-  options: {
-    permissions?: string[];
-    settings?: Record<string, unknown>;
-    fetch?: (url: string, init?: PluginFetchInit) => Promise<Response>;
-    before?: TestDbOptions["before"];
-  } = {},
-): Promise<TestServer> {
-  const db = await createTestDb(pluginDir, { before: options.before });
-  for (const user of ["user-1", "user-2"]) {
-    db.sqlite.prepare("INSERT OR IGNORE INTO users (id) VALUES (?)").run(user);
-  }
-  db.sqlite.prepare("INSERT OR IGNORE INTO ssh_data (id) VALUES (?)").run(7);
-
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    permissions: options.permissions,
-    settings: options.settings,
-    fetch: options.fetch,
-    actor: "user-1",
-  });
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") ?? undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    db,
-    mock,
-    provider: () =>
-      mock.auth.sshAuthProviders.find((provider) => provider.type === "vault")!,
-    async request(method, path, { user = "user-1", body } = {}) {
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        redirect: "manual",
-        headers: {
-          "x-test-user": user,
-          ...(body !== undefined ? { "content-type": "application/json" } : {}),
-        },
-        body: body !== undefined ? JSON.stringify(body) : undefined,
-      });
-      const text = await response.text();
-      let parsed: unknown = null;
-      try {
-        parsed = text ? JSON.parse(text) : null;
-      } catch {
-        parsed = null;
-      }
-      return { status: response.status, body: parsed, text };
-    },
-    async close() {
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-      db.close();
-    },
-  };
-}
-
-export const env = (userId = "user-1", hostId = 7) => ({
-  client: {},
-  userId,
-  hostId,
-  purpose: "terminal",
-  interactive: true,
-  log: () => {},
-});
-
-export const HOST = { id: 7, ip: "10.0.0.7", port: 22, username: "root" };
-
-export const PROFILE = {
-  name: "Prod",
-  vaultAddr: VAULT_ADDR,
-  sshRole: "ops",
-  oidcRole: "dev",
-};
diff --git a/plugins/vault/tests/backend/legacy-urls.test.ts b/plugins/vault/tests/backend/legacy-urls.test.ts
deleted file mode 100644
index 931c10fe2..000000000
--- a/plugins/vault/tests/backend/legacy-urls.test.ts
+++ /dev/null
@@ -1,19 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { validateManifest } from "@termix/plugin-sdk/manifest";
-import manifest from "../../manifest.json";
-
-// Old URLs something outside Termix still calls keep reaching the plugin.
-const redirects = manifest.contributes.http.legacyRedirects as unknown[];
-
-describe("legacy URLs", () => {
-  it("declares them in a manifest that validates", () => {
-    expect(validateManifest(manifest)).toEqual([]);
-  });
-
-  it("redirects /vault/oidc/callback, which Vault OIDC roles allowed before 2.9", () => {
-    expect(redirects).toContainEqual({
-      from: "/vault/oidc/callback",
-      to: "/oidc/callback",
-    });
-  });
-});
diff --git a/plugins/vault/tests/backend/migrations.test.ts b/plugins/vault/tests/backend/migrations.test.ts
deleted file mode 100644
index 02b0060d8..000000000
--- a/plugins/vault/tests/backend/migrations.test.ts
+++ /dev/null
@@ -1,121 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { createTestDb, type TestDb } from "@termix/plugin-sdk/testing";
-import { pluginDir } from "./helpers";
-
-// vault_profiles and vault_tokens as core's SQLite bootstrap created them
-// before 2.9.0, including the sync_id column added later.
-const LEGACY_DDL = `
-  CREATE TABLE vault_profiles (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL,
-    name TEXT NOT NULL,
-    description TEXT,
-    folder TEXT,
-    tags TEXT,
-    vault_addr TEXT NOT NULL,
-    vault_namespace TEXT,
-    oidc_mount TEXT,
-    oidc_role TEXT,
-    ssh_mount TEXT,
-    ssh_role TEXT NOT NULL,
-    valid_principals TEXT,
-    key_type TEXT,
-    shared INTEGER NOT NULL DEFAULT 0,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    sync_id TEXT,
-    FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
-  );
-  CREATE TABLE vault_tokens (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL,
-    profile_id INTEGER NOT NULL,
-    ssh_cert TEXT NOT NULL,
-    private_key TEXT NOT NULL,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    expires_at TEXT NOT NULL,
-    last_used TEXT,
-    UNIQUE(user_id, profile_id),
-    FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE,
-    FOREIGN KEY (profile_id) REFERENCES vault_profiles (id) ON DELETE CASCADE
-  );
-`;
-
-let db: TestDb | null = null;
-
-afterEach(() => {
-  db?.close();
-  db = null;
-});
-
-const tableExists = (name: string) =>
-  !!db!.sqlite
-    .prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?")
-    .get(name);
-
-describe("adopting vault_profiles and vault_tokens", () => {
-  it("keeps every existing row when the legacy tables are there", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1'), ('user-2')");
-        sqlite.exec(LEGACY_DDL);
-        sqlite
-          .prepare(
-            "INSERT INTO vault_profiles (id, user_id, name, vault_addr, ssh_role, shared, sync_id) VALUES (?, ?, ?, ?, ?, ?, ?)",
-          )
-          .run(4, "user-1", "Prod", "https://vault:8200", "ops", 1, "sync-a");
-        sqlite
-          .prepare(
-            "INSERT INTO vault_tokens (user_id, profile_id, ssh_cert, private_key, expires_at) VALUES (?, ?, ?, ?, ?)",
-          )
-          .run("user-2", 4, "cert", "key", "2999-01-01T00:00:00.000Z");
-      },
-    });
-
-    expect(tableExists("vault_profiles")).toBe(false);
-    expect(tableExists("vault_tokens")).toBe(false);
-    expect(db.sqlite.prepare("SELECT * FROM p_vault_profiles").all()).toEqual([
-      expect.objectContaining({
-        id: 4,
-        user_id: "user-1",
-        name: "Prod",
-        shared: 1,
-        sync_id: "sync-a",
-      }),
-    ]);
-    expect(db.sqlite.prepare("SELECT * FROM p_vault_tokens").all()).toEqual([
-      expect.objectContaining({ user_id: "user-2", profile_id: 4 }),
-    ]);
-
-    // The 2.8 foreign key follows the rename, so deleting a profile still
-    // takes its cached certificates with it.
-    db.sqlite.exec("PRAGMA foreign_keys = ON");
-    db.sqlite.prepare("DELETE FROM p_vault_profiles WHERE id = 4").run();
-    expect(
-      db.sqlite.prepare("SELECT COUNT(*) AS n FROM p_vault_tokens").get(),
-    ).toEqual({ n: 0 });
-  });
-
-  it("creates both tables on a fresh install", async () => {
-    db = await createTestDb(pluginDir);
-    expect(tableExists("p_vault_profiles")).toBe(true);
-    expect(tableExists("p_vault_tokens")).toBe(true);
-    expect(
-      db.sqlite
-        .prepare(
-          "SELECT name FROM sqlite_master WHERE type = 'index' AND name = 'idx_vault_tokens_user_profile'",
-        )
-        .get(),
-    ).toBeTruthy();
-  });
-
-  it("keeps one certificate per user and profile", async () => {
-    db = await createTestDb(pluginDir);
-    db.sqlite.exec("INSERT INTO users (id) VALUES ('user-1')");
-    const insert = db.sqlite.prepare(
-      "INSERT INTO p_vault_tokens (user_id, profile_id, ssh_cert, private_key, expires_at) VALUES ('user-1', 1, 'c', 'k', 'x')",
-    );
-    insert.run();
-    expect(() => insert.run()).toThrow(/UNIQUE/);
-  });
-});
diff --git a/plugins/vault/tests/backend/vault-client.test.ts b/plugins/vault/tests/backend/vault-client.test.ts
deleted file mode 100644
index 574b733ff..000000000
--- a/plugins/vault/tests/backend/vault-client.test.ts
+++ /dev/null
@@ -1,216 +0,0 @@
-import { describe, it, expect, beforeAll } from "vitest";
-import { execFileSync } from "node:child_process";
-import { mkdtempSync, readFileSync, rmSync } from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import ssh2Pkg from "ssh2";
-import type { PluginFetchInit } from "@termix/plugin-sdk/backend";
-import {
-  allowedHosts,
-  completeVaultOidc,
-  generateEphemeralKeyPair,
-  parseCertValidBefore,
-  signWithVault,
-  startVaultOidc,
-  type VaultProfileConfig,
-} from "../../src/backend/vault-client.js";
-
-const { utils: ssh2Utils } = ssh2Pkg;
-
-describe("generateEphemeralKeyPair", () => {
-  for (const keyType of [
-    "ssh-ed25519",
-    "ecdsa-sha2-nistp256",
-    "ssh-rsa",
-  ] as const) {
-    it(`generates a parseable ${keyType} keypair`, () => {
-      const pair = generateEphemeralKeyPair(keyType);
-      expect(pair.privateKey).toContain("BEGIN OPENSSH PRIVATE KEY");
-      expect(pair.publicKey.split(/\s+/)[0]).toBe(keyType);
-      expect(ssh2Utils.parseKey(pair.privateKey) instanceof Error).toBe(false);
-      expect(ssh2Utils.parseKey(pair.publicKey) instanceof Error).toBe(false);
-    });
-  }
-
-  it("defaults to ed25519 for unknown key types", () => {
-    const pair = generateEphemeralKeyPair("nonsense");
-    expect(pair.publicKey.startsWith("ssh-ed25519")).toBe(true);
-  });
-});
-
-describe("parseCertValidBefore", () => {
-  let cert = "";
-  let signedAt = 0;
-  let haveSshKeygen = true;
-
-  beforeAll(() => {
-    const dir = mkdtempSync(path.join(os.tmpdir(), "vault-cert-test-"));
-    try {
-      for (const name of ["ca", "user"]) {
-        execFileSync("ssh-keygen", [
-          "-t",
-          "ed25519",
-          "-f",
-          `${dir}/${name}`,
-          "-N",
-          "",
-          "-q",
-        ]);
-      }
-      signedAt = Math.floor(Date.now() / 1000);
-      execFileSync("ssh-keygen", [
-        "-s",
-        `${dir}/ca`,
-        "-I",
-        "test-id",
-        "-n",
-        "root",
-        "-V",
-        "+60m",
-        `${dir}/user.pub`,
-      ]);
-      cert = readFileSync(`${dir}/user-cert.pub`, "utf8").trim();
-    } catch {
-      haveSshKeygen = false;
-    } finally {
-      rmSync(dir, { recursive: true, force: true });
-    }
-  });
-
-  it("reads valid_before from a real ssh-keygen certificate", () => {
-    if (!haveSshKeygen) return;
-    const validBefore = parseCertValidBefore(cert);
-    expect(validBefore).toBeGreaterThan(signedAt + 3300);
-    expect(validBefore).toBeLessThan(signedAt + 3900);
-  });
-
-  it("returns 0 for malformed input", () => {
-    expect(parseCertValidBefore("")).toBe(0);
-    expect(parseCertValidBefore("not-a-cert")).toBe(0);
-    expect(parseCertValidBefore("ssh-ed25519 AAAAnotbase64!!")).toBe(0);
-  });
-});
-
-describe("the Vault HTTP flow", () => {
-  const profile: VaultProfileConfig = {
-    id: 1,
-    vaultAddr: "https://vault.example.com:8200/",
-    vaultNamespace: "team-a",
-    oidcMount: "oidc",
-    oidcRole: "developer",
-    sshMount: "ssh-client-signer",
-    sshRole: "my-role",
-    validPrincipals: "root,deploy",
-    keyType: "ssh-ed25519",
-  };
-
-  function fakeFetch(respond: () => { status?: number; body: unknown }) {
-    const calls: Array<{ url: string; init?: PluginFetchInit }> = [];
-    const fetch = async (url: string, init?: PluginFetchInit) => {
-      calls.push({ url, init });
-      const { status = 200, body } = respond();
-      return new Response(JSON.stringify(body), { status });
-    };
-    return { fetch, calls };
-  }
-
-  it("allows only the profile's own Vault host past the private address guard", () => {
-    expect(allowedHosts(profile)).toEqual(["vault.example.com"]);
-    expect(allowedHosts({ ...profile, vaultAddr: "not a url" })).toEqual([]);
-  });
-
-  it("startVaultOidc posts auth_url and reads the state", async () => {
-    const { fetch, calls } = fakeFetch(() => ({
-      body: {
-        data: {
-          auth_url:
-            "https://idp.example.com/authorize?client_id=x&state=ST-abc123&nonce=n",
-        },
-      },
-    }));
-
-    const result = await startVaultOidc(
-      fetch,
-      profile,
-      "https://termix/plugin-api/vault/oidc/callback",
-    );
-
-    expect(result.state).toBe("ST-abc123");
-    expect(result.clientNonce).toMatch(/^[0-9a-f]{40}$/);
-    expect(calls[0].url).toBe(
-      "https://vault.example.com:8200/v1/auth/oidc/oidc/auth_url",
-    );
-    expect(calls[0].init?.method).toBe("POST");
-    expect(calls[0].init?.headers?.["X-Vault-Namespace"]).toBe("team-a");
-    expect(JSON.parse(String(calls[0].init?.body))).toMatchObject({
-      role: "developer",
-      redirect_uri: "https://termix/plugin-api/vault/oidc/callback",
-      client_nonce: result.clientNonce,
-    });
-  });
-
-  it("completeVaultOidc returns the client token", async () => {
-    const { fetch, calls } = fakeFetch(() => ({
-      body: { auth: { client_token: "hvs.TESTTOKEN" } },
-    }));
-
-    const token = await completeVaultOidc(fetch, profile, {
-      state: "ST-abc123",
-      code: "auth-code",
-      clientNonce: "nonce123",
-    });
-
-    expect(token).toBe("hvs.TESTTOKEN");
-    const url = new URL(calls[0].url);
-    expect(url.pathname).toBe("/v1/auth/oidc/oidc/callback");
-    expect(url.searchParams.get("state")).toBe("ST-abc123");
-    expect(url.searchParams.get("code")).toBe("auth-code");
-    expect(url.searchParams.get("client_nonce")).toBe("nonce123");
-    expect(calls[0].init?.method).toBe("GET");
-  });
-
-  it("signWithVault posts the public key and returns signed_key", async () => {
-    const { fetch, calls } = fakeFetch(() => ({
-      body: {
-        data: { signed_key: "ssh-ed25519-cert-v01@openssh.com AAAAcert" },
-      },
-    }));
-
-    const cert = await signWithVault(
-      fetch,
-      profile,
-      "hvs.TESTTOKEN",
-      "ssh-ed25519 AAAApub comment",
-    );
-
-    expect(cert).toBe("ssh-ed25519-cert-v01@openssh.com AAAAcert");
-    expect(calls[0].url).toBe(
-      "https://vault.example.com:8200/v1/ssh-client-signer/sign/my-role",
-    );
-    expect(calls[0].init?.headers?.["X-Vault-Token"]).toBe("hvs.TESTTOKEN");
-    expect(JSON.parse(String(calls[0].init?.body))).toMatchObject({
-      public_key: "ssh-ed25519 AAAApub comment",
-      cert_type: "user",
-      valid_principals: "root,deploy",
-    });
-  });
-
-  it("surfaces Vault error messages", async () => {
-    const { fetch } = fakeFetch(() => ({
-      status: 400,
-      body: { errors: ["role not found", "permission denied"] },
-    }));
-    await expect(
-      signWithVault(fetch, profile, "tok", "ssh-ed25519 AAAA"),
-    ).rejects.toThrow(/role not found; permission denied/);
-  });
-
-  it("reports an unreachable Vault", async () => {
-    const fetch = async () => {
-      throw new Error("refused");
-    };
-    await expect(
-      startVaultOidc(fetch, profile, "https://termix/cb"),
-    ).rejects.toThrow(/Failed to reach Vault/);
-  });
-});
diff --git a/plugins/vault/tests/backend/vault.test.ts b/plugins/vault/tests/backend/vault.test.ts
deleted file mode 100644
index 67a17cd4e..000000000
--- a/plugins/vault/tests/backend/vault.test.ts
+++ /dev/null
@@ -1,463 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { PluginCapabilityError } from "@termix/plugin-sdk/backend";
-import { createMockCtx, createTestDb } from "@termix/plugin-sdk/testing";
-import {
-  HOST,
-  PROFILE,
-  SIGNED_CERT,
-  VAULT_ADDR,
-  createFakeVault,
-  env,
-  fakeSocket,
-  manifest,
-  pluginDir,
-  startServer,
-  type TestServer,
-} from "./helpers.js";
-
-const certs = vi.hoisted(() => ({ applyCertificateAuth: vi.fn() }));
-vi.mock("@termix/plugin-sdk/ssh-certs", () => certs);
-
-let server: TestServer | null = null;
-
-beforeEach(() => {
-  certs.applyCertificateAuth.mockReset();
-});
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-});
-
-/** Creates a profile as user-1 and points host 7 at it. */
-async function profileOnHost(options: { shared?: boolean } = {}) {
-  const created = await server!.request("POST", "/profiles", {
-    body: { ...PROFILE, shared: options.shared ?? false },
-  });
-  expect(created.status).toBe(201);
-  await server!.mock.ctx.settings.setHost(7, "profileId", created.body.id);
-  return created.body as { id: number };
-}
-
-async function startSignIn(userId = "user-1") {
-  const socket = fakeSocket();
-  await server!.provider().startInteraction!({
-    userId,
-    hostId: 7,
-    host: { name: "box", ip: HOST.ip, username: HOST.username },
-    socket: socket.socket,
-    requestOrigin: "https://termix.test",
-    payload: {},
-  });
-  return socket;
-}
-
-describe("activate", () => {
-  it("registers the vault auth type, the sync entity and a public callback", async () => {
-    server = await startServer();
-    const provider = server.provider();
-    expect(provider).toMatchObject({
-      type: "vault",
-      interaction: "vault",
-      needsUserInteraction: true,
-      supportsBackground: false,
-    });
-    expect(server.mock.syncEntities).toEqual([
-      expect.objectContaining({ type: "vaultProfiles", order: 20 }),
-    ]);
-    expect(server.mock.httpRouters[0]?.public).toEqual(["/oidc/callback"]);
-  });
-
-  // secrets:own and network:outbound are checked when used, ui:surface by the
-  // frontend.
-  it.each(["db:own", "network:serve", "auth:provide"])(
-    "fails closed without %s",
-    async (capability) => {
-      const db = await createTestDb(pluginDir);
-      const mock = createMockCtx({
-        pluginId: manifest.id,
-        manifest,
-        capabilities: manifest.capabilities.filter((c) => c !== capability),
-        db: db.database,
-        router: () => ({ get: () => {}, use: () => {} }),
-      });
-      const { activate } = await import("../../src/backend/index.js");
-      await expect(activate(mock.ctx)).rejects.toThrow(PluginCapabilityError);
-      db.close();
-    },
-  );
-});
-
-describe("profiles", () => {
-  it("creates, lists, updates and deletes a profile", async () => {
-    server = await startServer();
-    const created = await server.request("POST", "/profiles", {
-      body: { ...PROFILE, vaultNamespace: " team ", tags: ["a", "b"] },
-    });
-    expect(created.status).toBe(201);
-    expect(created.body).toMatchObject({
-      name: "Prod",
-      vaultAddr: VAULT_ADDR,
-      vaultNamespace: "team",
-      sshRole: "ops",
-      tags: ["a", "b"],
-      shared: false,
-      owned: true,
-    });
-
-    const listed = await server.request("GET", "/profiles");
-    expect(listed.body).toHaveLength(1);
-
-    const updated = await server.request(
-      "PUT",
-      `/profiles/${created.body.id}`,
-      { body: { name: "Staging", keyType: "ssh-rsa" } },
-    );
-    expect(updated.status).toBe(200);
-    expect(updated.body).toMatchObject({ name: "Staging", keyType: "ssh-rsa" });
-
-    const deleted = await server.request(
-      "DELETE",
-      `/profiles/${created.body.id}`,
-    );
-    expect(deleted.status).toBe(200);
-    expect((await server.request("GET", "/profiles")).body).toEqual([]);
-  });
-
-  it("drops cached certificates on delete", async () => {
-    server = await startServer();
-    const { id } = await profileOnHost();
-    server.db.sqlite
-      .prepare(
-        "INSERT INTO p_vault_tokens (user_id, profile_id, ssh_cert, private_key, expires_at) VALUES (?, ?, ?, ?, ?)",
-      )
-      .run("user-1", id, "c", "k", "2999-01-01T00:00:00.000Z");
-
-    await server.request("DELETE", `/profiles/${id}`);
-
-    expect(
-      server.db.sqlite
-        .prepare("SELECT COUNT(*) AS n FROM p_vault_tokens")
-        .get(),
-    ).toEqual({ n: 0 });
-  });
-
-  it("requires name, address and signer role", async () => {
-    server = await startServer();
-    const response = await server.request("POST", "/profiles", {
-      body: { name: "x" },
-    });
-    expect(response.status).toBe(400);
-  });
-
-  it("shows other users only shared profiles, and only the owner may change one", async () => {
-    server = await startServer();
-    const own = await server.request("POST", "/profiles", { body: PROFILE });
-    const shared = await server.request("POST", "/profiles", {
-      body: { ...PROFILE, name: "Shared", shared: true },
-    });
-
-    const seen = await server.request("GET", "/profiles", { user: "user-2" });
-    expect(seen.body.map((p: { name: string }) => p.name)).toEqual(["Shared"]);
-    expect(seen.body[0].owned).toBe(false);
-
-    for (const id of [own.body.id, shared.body.id]) {
-      const put = await server.request("PUT", `/profiles/${id}`, {
-        user: "user-2",
-        body: { name: "mine" },
-      });
-      expect(put.status).toBe(403);
-      const del = await server.request("DELETE", `/profiles/${id}`, {
-        user: "user-2",
-      });
-      expect(del.status).toBe(403);
-    }
-  });
-
-  it("needs the share permission to share a profile", async () => {
-    server = await startServer({ permissions: ["vault.use"] });
-    const create = await server.request("POST", "/profiles", {
-      body: { ...PROFILE, shared: true },
-    });
-    expect(create.status).toBe(403);
-
-    const own = await server.request("POST", "/profiles", { body: PROFILE });
-    expect(own.status).toBe(201);
-    const share = await server.request("PUT", `/profiles/${own.body.id}`, {
-      body: { shared: true },
-    });
-    expect(share.status).toBe(403);
-    const unshare = await server.request("PUT", `/profiles/${own.body.id}`, {
-      body: { shared: false },
-    });
-    expect(unshare.status).toBe(200);
-  });
-
-  it("refuses every profile route without the use permission", async () => {
-    server = await startServer({ permissions: [] });
-    for (const [method, path] of [
-      ["GET", "/profiles"],
-      ["POST", "/profiles"],
-      ["PUT", "/profiles/1"],
-      ["DELETE", "/profiles/1"],
-    ]) {
-      const response = await server.request(method, path, {
-        body: method === "GET" ? undefined : PROFILE,
-      });
-      expect(response.status, `${method} ${path}`).toBe(403);
-    }
-  });
-
-  it("answers 404 for a profile that does not exist", async () => {
-    server = await startServer();
-    expect(
-      (await server.request("PUT", "/profiles/99", { body: {} })).status,
-    ).toBe(404);
-    expect((await server.request("DELETE", "/profiles/99")).status).toBe(404);
-    expect((await server.request("DELETE", "/profiles/abc")).status).toBe(400);
-  });
-});
-
-describe("signing a certificate", () => {
-  it("runs the OIDC flow against Vault and stores the certificate sealed", async () => {
-    const vault = createFakeVault();
-    server = await startServer({ fetch: vault.fetch });
-    const { id } = await profileOnHost();
-
-    const socket = await startSignIn();
-    expect(socket.sent).toEqual([
-      expect.objectContaining({
-        type: "vault_auth_url",
-        hostId: 7,
-        requestId: vault.state,
-        url: expect.stringContaining("https://idp.test/authorize"),
-      }),
-    ]);
-    const authUrlCall = vault.calls[0];
-    expect(JSON.parse(String(authUrlCall.init?.body))).toMatchObject({
-      role: "dev",
-      redirect_uri: "https://termix.test/plugin-api/vault/oidc/callback",
-    });
-    expect(authUrlCall.init?.allowPrivateHosts).toEqual(["vault.internal"]);
-
-    const callback = await server.request(
-      "GET",
-      `/oidc/callback?state=${vault.state}&code=abc`,
-      { user: "" },
-    );
-    expect(callback.status).toBe(200);
-    expect(callback.text).toContain("Vault sign-in complete");
-    expect(socket.sent.at(-1)).toMatchObject({
-      type: "vault_completed",
-      hostId: 7,
-    });
-
-    const signCall = vault.calls.find((call) => call.url.includes("/sign/"));
-    expect(signCall?.url).toBe(`${VAULT_ADDR}/v1/ssh-client-signer/sign/ops`);
-    expect(signCall?.init?.headers?.["X-Vault-Token"]).toBe("hvs.token");
-
-    const row = server.db.sqlite
-      .prepare("SELECT * FROM p_vault_tokens WHERE profile_id = ?")
-      .get(id) as { ssh_cert: string; private_key: string };
-    expect(row.ssh_cert).not.toBe(SIGNED_CERT);
-    expect(await server.mock.ctx.secrets.unseal(row.ssh_cert)).toBe(
-      SIGNED_CERT,
-    );
-    expect(await server.mock.ctx.secrets.unseal(row.private_key)).toContain(
-      "OPENSSH PRIVATE KEY",
-    );
-
-    const outcome = await server.provider().prepare({}, HOST, env());
-    expect(outcome).toEqual({ status: "ready" });
-    expect(certs.applyCertificateAuth).toHaveBeenCalledWith(
-      {},
-      {},
-      expect.objectContaining({ certificate: SIGNED_CERT }),
-      "root",
-    );
-  });
-
-  it("answers a second use of the same callback with an error", async () => {
-    const vault = createFakeVault();
-    server = await startServer({ fetch: vault.fetch });
-    await profileOnHost();
-    await startSignIn();
-    const path = `/oidc/callback?state=${vault.state}&code=abc`;
-    expect((await server.request("GET", path)).status).toBe(200);
-    expect((await server.request("GET", path)).status).toBe(400);
-  });
-
-  it("reports Vault refusing to sign", async () => {
-    const vault = createFakeVault({ signStatus: 403 });
-    server = await startServer({ fetch: vault.fetch });
-    await profileOnHost();
-    const socket = await startSignIn();
-    const callback = await server.request(
-      "GET",
-      `/oidc/callback?state=${vault.state}&code=abc`,
-    );
-    expect(callback.status).toBe(400);
-    expect(socket.sent.at(-1)).toMatchObject({
-      type: "vault_error",
-      error: expect.stringContaining("permission denied"),
-    });
-  });
-
-  it("passes an identity provider error through", async () => {
-    server = await startServer();
-    const callback = await server.request(
-      "GET",
-      "/oidc/callback?error=access_denied",
-    );
-    expect(callback.status).toBe(400);
-    expect(callback.text).toContain("access_denied");
-  });
-
-  it("sends the 2.8 redirect URI while legacyCallback is on", async () => {
-    const vault = createFakeVault();
-    server = await startServer({
-      fetch: vault.fetch,
-      settings: { legacyCallback: true },
-    });
-    await profileOnHost();
-    await startSignIn();
-    expect(JSON.parse(String(vault.calls[0].init?.body)).redirect_uri).toBe(
-      "https://termix.test/vault/oidc/callback",
-    );
-  });
-
-  it("lets a pending sign-in be cancelled", async () => {
-    const vault = createFakeVault();
-    server = await startServer({ fetch: vault.fetch });
-    await profileOnHost();
-    await startSignIn();
-    await server.provider().cancelInteraction!({ userId: "user-1", hostId: 7 });
-    const callback = await server.request(
-      "GET",
-      `/oidc/callback?state=${vault.state}&code=abc`,
-    );
-    expect(callback.status).toBe(400);
-  });
-
-  it("refuses to start without a profile on the host", async () => {
-    server = await startServer();
-    await expect(startSignIn()).rejects.toThrow(/No Vault signer profile/);
-  });
-});
-
-describe("the vault provider", () => {
-  it("fails without a profile on the host", async () => {
-    server = await startServer();
-    expect(await server.provider().prepare({}, HOST, env())).toMatchObject({
-      status: "error",
-      message: "Host has no Vault signer profile configured",
-    });
-  });
-
-  it("asks for a sign-in without a certificate", async () => {
-    server = await startServer();
-    await profileOnHost();
-    expect(await server.provider().prepare({}, HOST, env())).toEqual({
-      status: "interaction-required",
-      interaction: "vault",
-      message: expect.any(String),
-      flag: "requiresVaultAuth",
-    });
-  });
-
-  it("uses a profile another user shared with the host's owner", async () => {
-    server = await startServer();
-    const shared = await server.request("POST", "/profiles", {
-      user: "user-2",
-      body: { ...PROFILE, shared: true },
-    });
-    await server.mock.ctx.settings.setHost(7, "profileId", shared.body.id);
-    expect((await server.provider().prepare({}, HOST, env())).status).toBe(
-      "interaction-required",
-    );
-  });
-
-  it("drops a certificate 2.8 cached with the user's data key", async () => {
-    server = await startServer();
-    const { id } = await profileOnHost();
-    server.db.sqlite
-      .prepare(
-        "INSERT INTO p_vault_tokens (user_id, profile_id, ssh_cert, private_key, expires_at) VALUES (?, ?, ?, ?, ?)",
-      )
-      .run(
-        "user-1",
-        id,
-        "v1:dek-cipher",
-        "v1:dek-cipher",
-        "2999-01-01T00:00:00.000Z",
-      );
-
-    const outcome = await server.provider().prepare({}, HOST, env());
-    expect(outcome.status).toBe("interaction-required");
-    expect(
-      server.db.sqlite
-        .prepare("SELECT COUNT(*) AS n FROM p_vault_tokens")
-        .get(),
-    ).toEqual({ n: 0 });
-  });
-
-  it("forgets an expired certificate", async () => {
-    server = await startServer();
-    const { id } = await profileOnHost();
-    const seal = server.mock.ctx.secrets.seal;
-    server.db.sqlite
-      .prepare(
-        "INSERT INTO p_vault_tokens (user_id, profile_id, ssh_cert, private_key, expires_at) VALUES (?, ?, ?, ?, ?)",
-      )
-      .run(
-        "user-1",
-        id,
-        await seal("c"),
-        await seal("k"),
-        "2000-01-01T00:00:00.000Z",
-      );
-    expect((await server.provider().prepare({}, HOST, env())).status).toBe(
-      "interaction-required",
-    );
-    expect(
-      server.db.sqlite
-        .prepare("SELECT COUNT(*) AS n FROM p_vault_tokens")
-        .get(),
-    ).toEqual({ n: 0 });
-  });
-
-  it("drops the certificate when the host rejects it", async () => {
-    const vault = createFakeVault();
-    server = await startServer({ fetch: vault.fetch });
-    await profileOnHost();
-    await startSignIn();
-    await server.request("GET", `/oidc/callback?state=${vault.state}&code=abc`);
-
-    const outcome = server.provider().onAuthFailed!(HOST, env(), {
-      error: new Error("All configured authentication methods failed"),
-      retries: 0,
-      canRetry: false,
-      methodNotAvailable: false,
-    });
-    expect(outcome).toMatchObject({ status: "interaction-required" });
-    await vi.waitFor(() =>
-      expect(
-        server!.db.sqlite
-          .prepare("SELECT COUNT(*) AS n FROM p_vault_tokens")
-          .get(),
-      ).toEqual({ n: 0 }),
-    );
-  });
-
-  it("ignores other auth failures", async () => {
-    server = await startServer();
-    expect(
-      server.provider().onAuthFailed!(HOST, env(), {
-        error: new Error("connection reset"),
-        retries: 0,
-        canRetry: false,
-        methodNotAvailable: false,
-      }),
-    ).toBeUndefined();
-  });
-});
diff --git a/plugins/vault/tests/frontend/activate.test.tsx b/plugins/vault/tests/frontend/activate.test.tsx
deleted file mode 100644
index 3b1642d9f..000000000
--- a/plugins/vault/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,268 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import {
-  act,
-  fireEvent,
-  render,
-  screen,
-  waitFor,
-} from "@testing-library/react";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import { VaultOverlay } from "../../src/frontend/VaultOverlay";
-import { VaultAuthEditor } from "../../src/frontend/VaultAuthEditor";
-import { redirectUri } from "../../src/frontend/RedirectUriSetting";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const stubs = vi.hoisted(() => ({
-  permissions: new Set<string>(["use", "share"]),
-  api: {
-    get: vi.fn(),
-    post: vi.fn(),
-    put: vi.fn(),
-    delete: vi.fn(),
-    patch: vi.fn(),
-  },
-  toast: { success: vi.fn(), error: vi.fn(), info: vi.fn(), warning: vi.fn() },
-}));
-
-vi.mock("@termix/plugin-sdk/frontend", async (importOriginal) => ({
-  ...(await importOriginal<typeof import("@termix/plugin-sdk/frontend")>()),
-  useTranslation: () => ({
-    t: (key: string, options?: Record<string, unknown>) =>
-      options?.name ? `${key}:${options.name}` : key,
-  }),
-  usePluginApi: () => stubs.api,
-  usePermission: (permission: string) => stubs.permissions.has(permission),
-  useToast: () => stubs.toast,
-}));
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-let rendered: RenderedPluginApp | null = null;
-
-beforeEach(() => {
-  stubs.permissions = new Set(["use", "share"]);
-  for (const fn of Object.values(stubs.api)) fn.mockReset();
-  stubs.api.get.mockResolvedValue({ data: [] });
-});
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe("vault activate", () => {
-  it("registers the terminal overlay and the settings field, and removes them on deactivate", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.settingsComponents()).toEqual(["redirectUri"]);
-    expect(rendered.registered.slot("terminal.overlay")).toEqual([
-      "vault.signIn",
-    ]);
-    await rendered.deactivate();
-    expect(rendered.registered.settingsComponents()).toEqual([]);
-    expect(rendered.registered.slot("terminal.overlay")).toEqual([]);
-    rendered = null;
-  });
-});
-
-describe("redirectUri", () => {
-  it("names the plugin callback, or the 2.8 one", () => {
-    expect(redirectUri(false, "https://t.example/app/")).toBe(
-      "https://t.example/app/plugin-api/vault/oidc/callback",
-    );
-    expect(redirectUri(true, "https://t.example/")).toBe(
-      "https://t.example/vault/oidc/callback",
-    );
-  });
-});
-
-describe("VaultAuthEditor", () => {
-  const profiles = [
-    {
-      id: 3,
-      name: "Prod",
-      vaultAddr: "https://v",
-      sshRole: "r",
-      shared: false,
-      owned: true,
-    },
-    {
-      id: 4,
-      name: "Team",
-      vaultAddr: "https://v",
-      sshRole: "r",
-      shared: true,
-      owned: false,
-    },
-  ];
-
-  it("lists the profiles and stores the choice as the profileId host setting", async () => {
-    stubs.api.get.mockResolvedValue({ data: profiles });
-    const setField = vi.fn();
-    render(
-      <VaultAuthEditor
-        form={{ pluginSettings: { other: { x: 1 } } }}
-        setField={setField}
-      />,
-    );
-    await waitFor(() => expect(screen.getByText("Prod")).toBeTruthy());
-    expect(stubs.api.get).toHaveBeenCalledWith("/profiles");
-    expect(screen.getByText("editor.sharedProfile:Team")).toBeTruthy();
-
-    fireEvent.change(screen.getByRole("combobox"), { target: { value: "4" } });
-    expect(setField).toHaveBeenCalledWith("pluginSettings", {
-      other: { x: 1 },
-      vault: { profileId: 4 },
-    });
-  });
-
-  it("shows the saved profile", async () => {
-    stubs.api.get.mockResolvedValue({ data: profiles });
-    render(
-      <VaultAuthEditor
-        form={{ pluginSettings: { vault: { profileId: 3 } } }}
-        setField={vi.fn()}
-      />,
-    );
-    await waitFor(() =>
-      expect((screen.getByRole("combobox") as HTMLSelectElement).value).toBe(
-        "3",
-      ),
-    );
-  });
-
-  it("creates a profile from the manager, shared only with the share permission", async () => {
-    stubs.api.post.mockResolvedValue({ data: {} });
-    render(<VaultAuthEditor form={{}} setField={vi.fn()} />);
-    fireEvent.click(screen.getByText("profiles.manage"));
-    fireEvent.click(screen.getByText("profiles.new"));
-    const inputs = screen.getAllByRole("textbox");
-    fireEvent.change(inputs[0], { target: { value: "Prod" } });
-    fireEvent.change(inputs[1], { target: { value: "https://vault:8200" } });
-    fireEvent.change(inputs[6], { target: { value: "ops" } });
-    fireEvent.click(screen.getByRole("checkbox"));
-    await act(async () => {
-      fireEvent.click(screen.getByText("profiles.create"));
-    });
-    expect(stubs.api.post).toHaveBeenCalledWith(
-      "/profiles",
-      expect.objectContaining({
-        name: "Prod",
-        vaultAddr: "https://vault:8200",
-        sshRole: "ops",
-        shared: true,
-      }),
-    );
-  });
-
-  it("hides sharing without the share permission and managing without use", async () => {
-    stubs.permissions = new Set(["use"]);
-    const { unmount } = render(
-      <VaultAuthEditor form={{}} setField={vi.fn()} />,
-    );
-    fireEvent.click(screen.getByText("profiles.manage"));
-    fireEvent.click(screen.getByText("profiles.new"));
-    expect(screen.queryByRole("checkbox")).toBeNull();
-    unmount();
-
-    stubs.permissions = new Set();
-    stubs.api.get.mockClear();
-    render(<VaultAuthEditor form={{}} setField={vi.fn()} />);
-    expect(screen.queryByText("profiles.manage")).toBeNull();
-    expect(stubs.api.get).not.toHaveBeenCalled();
-  });
-});
-
-describe("VaultOverlay", () => {
-  function setup() {
-    let listener: (message: {
-      type: string;
-      [key: string]: unknown;
-    }) => void = () => {};
-    const props = {
-      host: { id: 7 },
-      subscribe: vi.fn((next: typeof listener) => {
-        listener = next;
-        return () => {};
-      }),
-      holdConnectTimeout: vi.fn(),
-      fail: vi.fn(),
-      disconnect: vi.fn(),
-      send: vi.fn(),
-      connectPayload: vi.fn(() => ({ hostId: 7, cols: 80, rows: 24 })),
-    };
-    render(<VaultOverlay {...props} />);
-    const emit = (message: { type: string; [key: string]: unknown }) =>
-      act(() => listener(message));
-    return { props, emit };
-  }
-
-  it("starts the sign-in once, then reports a second request as a failure", () => {
-    const { props, emit } = setup();
-    emit({ type: "vault_auth_required", hostId: 7 });
-    expect(props.send).toHaveBeenCalledWith("vault_start_auth", { hostId: 7 });
-    expect(props.holdConnectTimeout).toHaveBeenCalledWith(true);
-
-    emit({ type: "vault_auth_required", hostId: 7 });
-    expect(props.fail).toHaveBeenCalledWith("dialog.failed");
-  });
-
-  it("opens Vault's sign-in, waits, and reconnects once signed", () => {
-    const close = vi.fn();
-    const open = vi
-      .spyOn(window, "open")
-      .mockReturnValue({ close, focus: vi.fn() } as unknown as Window);
-    const { props, emit } = setup();
-    emit({ type: "vault_auth_required", hostId: 7 });
-    emit({
-      type: "vault_auth_url",
-      hostId: 7,
-      requestId: "st-1",
-      url: "https://idp.test/authorize",
-    });
-    expect(open).toHaveBeenCalledWith(
-      "https://idp.test/authorize",
-      "termix-vault-oidc",
-      "width=540,height=720",
-    );
-    expect(screen.getByText("dialog.description")).toBeTruthy();
-
-    emit({ type: "vault_completed", hostId: 7 });
-    expect(close).toHaveBeenCalled();
-    expect(props.send).toHaveBeenCalledWith("vault_auth_completed", {
-      hostId: 7,
-      cols: 80,
-      rows: 24,
-    });
-    expect(screen.queryByText("dialog.title")).toBeNull();
-    open.mockRestore();
-  });
-
-  it("cancels a pending sign-in", () => {
-    const open = vi.spyOn(window, "open").mockReturnValue(null);
-    const { props, emit } = setup();
-    emit({
-      type: "vault_auth_url",
-      hostId: 7,
-      requestId: "st-2",
-      url: "https://idp.test/authorize",
-    });
-    fireEvent.click(screen.getByText("common.cancel"));
-    expect(props.send).toHaveBeenCalledWith("vault_cancel", {
-      hostId: 7,
-      requestId: "st-2",
-    });
-    open.mockRestore();
-  });
-
-  it("shows Vault's error", () => {
-    const { emit } = setup();
-    emit({ type: "vault_error", hostId: 7, error: "permission denied" });
-    expect(screen.getByText("permission denied")).toBeTruthy();
-  });
-});
diff --git a/plugins/vault/tsconfig.json b/plugins/vault/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/vault/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/vault/vitest.config.ts b/plugins/vault/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/vault/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/wake-on-lan/CHANGELOG.md b/plugins/wake-on-lan/CHANGELOG.md
deleted file mode 100644
index 0ff114a90..000000000
--- a/plugins/wake-on-lan/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Wakes a sleeping host by sending a Wake-on-LAN packet to its MAC address.
diff --git a/plugins/wake-on-lan/README.md b/plugins/wake-on-lan/README.md
deleted file mode 100644
index dcf43af66..000000000
--- a/plugins/wake-on-lan/README.md
+++ /dev/null
@@ -1,33 +0,0 @@
-# Wake-on-LAN
-
-Wake a sleeping host by sending a Wake-on-LAN packet to its MAC address.
-
-## Features
-
-- Wake a sleeping host by sending a Wake-on-LAN packet to its MAC address.
-- Automations can wake a host as one of their steps.
-
-## Settings
-
-### Host
-
-- MAC address: the network card to wake.
-- Broadcast address: where to send the packet.
-
-## Permissions
-
-- `wake-on-lan.send`: Send Wake-on-LAN packets. Admins and users have it by default.
-
-## Services
-
-Provides to other plugins:
-
-- `wake-on-lan.send`: wake a host.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/wake-on-lan/locales/en.json b/plugins/wake-on-lan/locales/en.json
deleted file mode 100644
index 0bb729711..000000000
--- a/plugins/wake-on-lan/locales/en.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Wake",
-    "sent": "Wake-on-LAN packet sent",
-    "failed": "Failed to send Wake-on-LAN packet"
-  },
-  "permissions": {
-    "send": {
-      "title": "Send Wake-on-LAN packets",
-      "description": "Wake a host by sending a magic packet to its MAC address."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "MAC address",
-        "description": "The host's network MAC address, used to send Wake-on-LAN packets.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "Broadcast address",
-        "description": "The subnet broadcast address to send the packet to. Leave blank for 255.255.255.255.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/af_ZA.json b/plugins/wake-on-lan/locales/translated/af_ZA.json
deleted file mode 100644
index 4182cabb7..000000000
--- a/plugins/wake-on-lan/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Wakker word",
-    "sent": "Wake-on-LAN-pakket gestuur",
-    "failed": "Kon nie Wake-on-LAN-pakket stuur nie"
-  },
-  "permissions": {
-    "send": {
-      "title": "Stuur Wake-on-LAN-pakkette",
-      "description": "Maak 'n gasheer wakker deur 'n magiese pakket na sy MAC-adres te stuur."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "MAC-adres",
-        "description": "Die gasheer se netwerk MAC-adres, wat gebruik word om Wake-on-LAN-pakkette te stuur.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "Uitsaaiadres",
-        "description": "Die subnet-uitsaaiadres om die pakkie na te stuur. Los leeg vir 255.255.255.255.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/ar_SA.json b/plugins/wake-on-lan/locales/translated/ar_SA.json
deleted file mode 100644
index 1c9744402..000000000
--- a/plugins/wake-on-lan/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "استيقظ",
-    "sent": "تم إرسال حزمة Wake-on-LAN",
-    "failed": "فشل إرسال حزمة Wake-on-LAN"
-  },
-  "permissions": {
-    "send": {
-      "title": "إرسال حزم Wake-on-LAN",
-      "description": "قم بتنشيط جهاز مضيف عن طريق إرسال حزمة سحرية إلى عنوان MAC الخاص به."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "عنوان MAC",
-        "description": "عنوان MAC الخاص بشبكة المضيف، والذي يستخدم لإرسال حزم Wake-on-LAN.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "خطاب البث",
-        "description": "عنوان البث الفرعي لإرسال الحزمة إليه. اتركه فارغًا إذا كان العنوان 255.255.255.255.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/bg_BG.json b/plugins/wake-on-lan/locales/translated/bg_BG.json
deleted file mode 100644
index 9cb5e61e7..000000000
--- a/plugins/wake-on-lan/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Уейк",
-    "sent": "Изпратен пакет Wake-on-LAN",
-    "failed": "Неуспешно изпращане на пакет Wake-on-LAN"
-  },
-  "permissions": {
-    "send": {
-      "title": "Изпращане на пакети Wake-on-LAN",
-      "description": "Събудете хост, като изпратите магически пакет до неговия MAC адрес."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "MAC адрес",
-        "description": "MAC адресът на мрежата на хоста, използван за изпращане на Wake-on-LAN пакети.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "Адрес за излъчване",
-        "description": "Адресът за излъчване на подмрежата, до който да се изпрати пакетът. Оставете празно за 255.255.255.255.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/bn_BD.json b/plugins/wake-on-lan/locales/translated/bn_BD.json
deleted file mode 100644
index 2eaa5bd55..000000000
--- a/plugins/wake-on-lan/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "জাগরণ",
-    "sent": "ওয়েক-অন-ল্যান প্যাকেট পাঠানো হয়েছে",
-    "failed": "ওয়েক-অন-ল্যান প্যাকেট পাঠাতে ব্যর্থ হয়েছে"
-  },
-  "permissions": {
-    "send": {
-      "title": "ওয়েক-অন-ল্যান প্যাকেট পাঠান",
-      "description": "কোনো হোস্টের MAC অ্যাড্রেসে একটি ম্যাজিক প্যাকেট পাঠিয়ে সেটিকে জাগিয়ে তুলুন।"
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "MAC ঠিকানা",
-        "description": "হোস্টের নেটওয়ার্ক ম্যাক অ্যাড্রেস, যা ওয়েক-অন-ল্যান প্যাকেট পাঠাতে ব্যবহৃত হয়।",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "সম্প্রচার ঠিকানা",
-        "description": "যে সাবনেটে প্যাকেটটি পাঠাতে হবে তার ব্রডকাস্ট অ্যাড্রেস। 255.255.255.255-এর জন্য এটি খালি রাখুন।",
-        "placeholder": "১৯২.১৬৮.১.২৫৫"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/ca_ES.json b/plugins/wake-on-lan/locales/translated/ca_ES.json
deleted file mode 100644
index ab5718981..000000000
--- a/plugins/wake-on-lan/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Despertar",
-    "sent": "Paquet Wake-on-LAN enviat",
-    "failed": "No s'ha pogut enviar el paquet Wake-on-LAN"
-  },
-  "permissions": {
-    "send": {
-      "title": "Enviar paquets Wake-on-LAN",
-      "description": "Desperta un host enviant un paquet màgic a la seva adreça MAC."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "Adreça MAC",
-        "description": "L'adreça MAC de xarxa de l'amfitrió, que s'utilitza per enviar paquets Wake-on-LAN.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "Adreça de difusió",
-        "description": "L'adreça de difusió de la subxarxa a la qual s'enviarà el paquet. Deixeu-ho en blanc si voleu 255.255.255.255.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/cs_CZ.json b/plugins/wake-on-lan/locales/translated/cs_CZ.json
deleted file mode 100644
index be14e3101..000000000
--- a/plugins/wake-on-lan/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Probudit",
-    "sent": "Paket Wake-on-LAN odeslán",
-    "failed": "Nepodařilo se odeslat paket Wake-on-LAN"
-  },
-  "permissions": {
-    "send": {
-      "title": "Odesílání paketů Wake-on-LAN",
-      "description": "Probuďte hostitele odesláním magického paketu na jeho MAC adresu."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "MAC adresa",
-        "description": "Síťová MAC adresa hostitele, používaná k odesílání paketů Wake-on-LAN.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "Vysílací adresa",
-        "description": "Vysílací adresa podsítě, na kterou se má paket odeslat. Pro 255.255.255.255 ponechte prázdné.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/da_DK.json b/plugins/wake-on-lan/locales/translated/da_DK.json
deleted file mode 100644
index 98ab8f8b9..000000000
--- a/plugins/wake-on-lan/locales/translated/da_DK.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Vågne",
-    "sent": "Wake-on-LAN-pakke sendt",
-    "failed": "Kunne ikke sende Wake-on-LAN-pakken"
-  },
-  "permissions": {
-    "send": {
-      "title": "Send Wake-on-LAN-pakker",
-      "description": "Væk en vært ved at sende en magisk pakke til dens MAC-adresse."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "MAC-adresse",
-        "description": "Værtens netværks MAC-adresse, der bruges til at sende Wake-on-LAN-pakker.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "Udsendelsesadresse",
-        "description": "Subnet-udsendelsesadressen, som pakken skal sendes til. Lad feltet 255.255.255.255 stå tomt.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/de_DE.json b/plugins/wake-on-lan/locales/translated/de_DE.json
deleted file mode 100644
index 5d353656a..000000000
--- a/plugins/wake-on-lan/locales/translated/de_DE.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Aufwachen",
-    "sent": "Wake-on-LAN-Paket gesendet",
-    "failed": "Das Senden des Wake-on-LAN-Pakets ist fehlgeschlagen."
-  },
-  "permissions": {
-    "send": {
-      "title": "Wake-on-LAN-Pakete senden",
-      "description": "Wecken Sie einen Host auf, indem Sie ein magisches Paket an seine MAC-Adresse senden."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "MAC-Adresse",
-        "description": "Die Netzwerk-MAC-Adresse des Hosts, die zum Senden von Wake-on-LAN-Paketen verwendet wird.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "Rundfunkadresse",
-        "description": "Die Subnetz-Broadcastadresse, an die das Paket gesendet werden soll. Für 255.255.255.255 leer lassen.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/el_GR.json b/plugins/wake-on-lan/locales/translated/el_GR.json
deleted file mode 100644
index ca7b94fe3..000000000
--- a/plugins/wake-on-lan/locales/translated/el_GR.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Ιχνη",
-    "sent": "Στάλθηκε πακέτο Wake-on-LAN",
-    "failed": "Αποτυχία αποστολής πακέτου Wake-on-LAN"
-  },
-  "permissions": {
-    "send": {
-      "title": "Αποστολή πακέτων Wake-on-LAN",
-      "description": "Αφυπνίστε έναν κεντρικό υπολογιστή στέλνοντας ένα μαγικό πακέτο στη διεύθυνση MAC του."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "Διεύθυνση MAC",
-        "description": "Η διεύθυνση MAC δικτύου του κεντρικού υπολογιστή, που χρησιμοποιείται για την αποστολή πακέτων Wake-on-LAN.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "Διεύθυνση μετάδοσης",
-        "description": "Η διεύθυνση μετάδοσης υποδικτύου στην οποία θα σταλεί το πακέτο. Αφήστε κενό για το 255.255.255.255.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/es_ES.json b/plugins/wake-on-lan/locales/translated/es_ES.json
deleted file mode 100644
index 6cc1c3ca8..000000000
--- a/plugins/wake-on-lan/locales/translated/es_ES.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Despertar",
-    "sent": "Paquete Wake-on-LAN enviado",
-    "failed": "Error al enviar el paquete Wake-on-LAN"
-  },
-  "permissions": {
-    "send": {
-      "title": "Enviar paquetes Wake-on-LAN",
-      "description": "Despierte un host enviándole un paquete mágico a su dirección MAC."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "Dirección MAC",
-        "description": "La dirección MAC de red del host, utilizada para enviar paquetes Wake-on-LAN.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "Discurso de radio",
-        "description": "La dirección de difusión de subred a la que se enviará el paquete. Deje en blanco para 255.255.255.255.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/fi_FI.json b/plugins/wake-on-lan/locales/translated/fi_FI.json
deleted file mode 100644
index 0ffc58450..000000000
--- a/plugins/wake-on-lan/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Herätä",
-    "sent": "Wake-on-LAN-paketti lähetetty",
-    "failed": "Wake-on-LAN-paketin lähettäminen epäonnistui."
-  },
-  "permissions": {
-    "send": {
-      "title": "Lähetä Wake-on-LAN-paketit",
-      "description": "Herätä isäntä lähettämällä taikapaketti sen MAC-osoitteeseen."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "MAC-osoite",
-        "description": "Isännän verkon MAC-osoite, jota käytetään Wake-on-LAN-pakettien lähettämiseen.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "Lähetysosoite",
-        "description": "Aliverkon lähetysosoite, johon paketti lähetetään. Jätä tyhjäksi, jos arvo on 255.255.255.255.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/fr_FR.json b/plugins/wake-on-lan/locales/translated/fr_FR.json
deleted file mode 100644
index b9fd0af55..000000000
--- a/plugins/wake-on-lan/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Se réveiller",
-    "sent": "Paquet Wake-on-LAN envoyé",
-    "failed": "Échec de l'envoi du paquet Wake-on-LAN"
-  },
-  "permissions": {
-    "send": {
-      "title": "Envoyer des paquets Wake-on-LAN",
-      "description": "Réveillez un hôte en envoyant un paquet magique à son adresse MAC."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "Adresse MAC",
-        "description": "L'adresse MAC réseau de l'hôte, utilisée pour envoyer des paquets Wake-on-LAN.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "Adresse de diffusion",
-        "description": "Adresse de diffusion du sous-réseau vers laquelle envoyer le paquet. Laisser vide pour 255.255.255.255.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/he_IL.json b/plugins/wake-on-lan/locales/translated/he_IL.json
deleted file mode 100644
index 8e98d53e2..000000000
--- a/plugins/wake-on-lan/locales/translated/he_IL.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "לְהִתְעוֹרֵר",
-    "sent": "חבילת Wake-on-LAN נשלחה",
-    "failed": "נכשלה שליחת חבילת Wake-on-LAN"
-  },
-  "permissions": {
-    "send": {
-      "title": "שליחת חבילות Wake-on-LAN",
-      "description": "להעיר מארח על ידי שליחת חבילת קסם לכתובת ה-MAC שלו."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "כתובת MAC",
-        "description": "כתובת ה-MAC של הרשת של המארח, המשמשת לשליחת חבילות Wake-on-LAN.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "כתובת השידור",
-        "description": "כתובת השידור של תת-הרשת שאליה יש לשלוח את החבילה. השאר ריק עבור 255.255.255.255.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/hi_IN.json b/plugins/wake-on-lan/locales/translated/hi_IN.json
deleted file mode 100644
index b01fe84a0..000000000
--- a/plugins/wake-on-lan/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "जागो",
-    "sent": "वेक-ऑन-लैन पैकेट भेजा गया",
-    "failed": "वेक-ऑन-लैन पैकेट भेजने में विफल रहा"
-  },
-  "permissions": {
-    "send": {
-      "title": "वेक-ऑन-लैन पैकेट भेजें",
-      "description": "किसी होस्ट को उसके मैक एड्रेस पर मैजिक पैकेट भेजकर जगाएं।"
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "मैक पता",
-        "description": "होस्ट का नेटवर्क मैक एड्रेस, जिसका उपयोग वेक-ऑन-लैन पैकेट भेजने के लिए किया जाता है।",
-        "placeholder": "एए:बीबी:सीसी:डीडी:ईई:एफएफ"
-      },
-      "broadcastAddress": {
-        "label": "ब्रॉडकास्ट पता",
-        "description": "पैकेट भेजने के लिए सबनेट ब्रॉडकास्ट पता। 255.255.255.255 के लिए इसे खाली छोड़ दें।",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/hu_HU.json b/plugins/wake-on-lan/locales/translated/hu_HU.json
deleted file mode 100644
index 8e3e8ac1b..000000000
--- a/plugins/wake-on-lan/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Ébred",
-    "sent": "Wake-on-LAN csomag elküldve",
-    "failed": "Nem sikerült elküldeni a Wake-on-LAN csomagot"
-  },
-  "permissions": {
-    "send": {
-      "title": "Wake-on-LAN csomagok küldése",
-      "description": "Ébressz fel egy gazdagépet egy mágikus csomag MAC-címére küldésével."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "MAC-cím",
-        "description": "A gazdagép hálózati MAC-címe, amelyet a Wake-on-LAN csomagok küldésére használnak.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "Sugárzási cím",
-        "description": "Az alhálózati szórási cím, ahová a csomagot küldeni kell. Hagyja üresen a 255.255.255.255 értéket.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/id_ID.json b/plugins/wake-on-lan/locales/translated/id_ID.json
deleted file mode 100644
index 8b2ac00e9..000000000
--- a/plugins/wake-on-lan/locales/translated/id_ID.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Bangun",
-    "sent": "Paket Wake-on-LAN berhasil dikirim",
-    "failed": "Gagal mengirim paket Wake-on-LAN"
-  },
-  "permissions": {
-    "send": {
-      "title": "Mengirim paket Wake-on-LAN",
-      "description": "Bangunkan host dengan mengirimkan paket ajaib ke alamat MAC-nya."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "Alamat MAC",
-        "description": "Alamat MAC jaringan host, yang digunakan untuk mengirim paket Wake-on-LAN.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "Alamat siaran",
-        "description": "Alamat broadcast subnet tujuan pengiriman paket. Kosongkan untuk 255.255.255.255.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/it_IT.json b/plugins/wake-on-lan/locales/translated/it_IT.json
deleted file mode 100644
index 6b53efd98..000000000
--- a/plugins/wake-on-lan/locales/translated/it_IT.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Veglia",
-    "sent": "Pacchetto Wake-on-LAN inviato",
-    "failed": "Impossibile inviare il pacchetto Wake-on-LAN."
-  },
-  "permissions": {
-    "send": {
-      "title": "Invia pacchetti Wake-on-LAN",
-      "description": "Risveglia un host inviando un pacchetto magico al suo indirizzo MAC."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "indirizzo MAC",
-        "description": "L'indirizzo MAC di rete dell'host, utilizzato per inviare pacchetti Wake-on-LAN.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "Indirizzo di trasmissione",
-        "description": "L'indirizzo broadcast della sottorete a cui inviare il pacchetto. Lasciare vuoto per 255.255.255.255.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/ja_JP.json b/plugins/wake-on-lan/locales/translated/ja_JP.json
deleted file mode 100644
index 53ab62ab2..000000000
--- a/plugins/wake-on-lan/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "目覚め",
-    "sent": "Wake-on-LANパケットが送信されました",
-    "failed": "Wake-on-LANパケットの送信に失敗しました"
-  },
-  "permissions": {
-    "send": {
-      "title": "Wake-on-LANパケットを送信する",
-      "description": "マジックパケットをホストのMACアドレスに送信して、ホストを起動します。"
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "MACアドレス",
-        "description": "ホストのネットワークMACアドレス。Wake-on-LANパケットの送信に使用されます。",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "放送演説",
-        "description": "パケットの送信先となるサブネットブロードキャストアドレス。255.255.255.255 の場合は空欄のままにしてください。",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/ko_KR.json b/plugins/wake-on-lan/locales/translated/ko_KR.json
deleted file mode 100644
index 3c3c74e22..000000000
--- a/plugins/wake-on-lan/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "깨어 있다",
-    "sent": "Wake-on-LAN 패킷을 전송했습니다.",
-    "failed": "Wake-on-LAN 패킷 전송에 실패했습니다."
-  },
-  "permissions": {
-    "send": {
-      "title": "Wake-on-LAN 패킷을 전송합니다.",
-      "description": "MAC 주소로 매직 패킷을 전송하여 호스트를 깨우세요."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "MAC 주소",
-        "description": "호스트의 네트워크 MAC 주소로, Wake-on-LAN 패킷을 전송하는 데 사용됩니다.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "방송 주소",
-        "description": "패킷을 전송할 서브넷 브로드캐스트 주소입니다. 255.255.255.255를 입력하려면 비워 두십시오.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/nl_NL.json b/plugins/wake-on-lan/locales/translated/nl_NL.json
deleted file mode 100644
index 477d3ba97..000000000
--- a/plugins/wake-on-lan/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Wakker worden",
-    "sent": "Wake-on-LAN-pakket verzonden",
-    "failed": "Het verzenden van het Wake-on-LAN-pakket is mislukt."
-  },
-  "permissions": {
-    "send": {
-      "title": "Wake-on-LAN-pakketten verzenden",
-      "description": "Activeer een host door een magic packet naar het MAC-adres te sturen."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "MAC-adres",
-        "description": "Het MAC-adres van het hostnetwerk, dat wordt gebruikt om Wake-on-LAN-pakketten te verzenden.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "Uitzendadres",
-        "description": "Het broadcastadres van het subnet waarnaar het pakket moet worden verzonden. Laat dit veld leeg voor 255.255.255.255.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/no_NO.json b/plugins/wake-on-lan/locales/translated/no_NO.json
deleted file mode 100644
index 438b07270..000000000
--- a/plugins/wake-on-lan/locales/translated/no_NO.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Våkne",
-    "sent": "Wake-on-LAN-pakke sendt",
-    "failed": "Kunne ikke sende Wake-on-LAN-pakken"
-  },
-  "permissions": {
-    "send": {
-      "title": "Send Wake-on-LAN-pakker",
-      "description": "Vekk en vert ved å sende en magisk pakke til MAC-adressen."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "MAC-adresse",
-        "description": "Vertens nettverks-MAC-adresse, som brukes til å sende Wake-on-LAN-pakker.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "Kringkastingsadresse",
-        "description": "Subnett-kringkastingsadressen som pakken skal sendes til. La stå tomt for 255.255.255.255.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/pl_PL.json b/plugins/wake-on-lan/locales/translated/pl_PL.json
deleted file mode 100644
index 1da09ca71..000000000
--- a/plugins/wake-on-lan/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Budzić",
-    "sent": "Wysłano pakiet Wake-on-LAN",
-    "failed": "Nie udało się wysłać pakietu Wake-on-LAN"
-  },
-  "permissions": {
-    "send": {
-      "title": "Wysyłaj pakiety Wake-on-LAN",
-      "description": "Wybudź hosta, wysyłając magiczny pakiet na jego adres MAC."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "Adres MAC",
-        "description": "Adres MAC sieci hosta, używany do wysyłania pakietów Wake-on-LAN.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "Adres rozgłoszeniowy",
-        "description": "Adres rozgłoszeniowy podsieci, do którego ma zostać wysłany pakiet. Pozostaw puste pole dla adresu 255.255.255.255.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/pt_BR.json b/plugins/wake-on-lan/locales/translated/pt_BR.json
deleted file mode 100644
index 652ddb107..000000000
--- a/plugins/wake-on-lan/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Acordar",
-    "sent": "Pacote Wake-on-LAN enviado",
-    "failed": "Falha ao enviar pacote Wake-on-LAN"
-  },
-  "permissions": {
-    "send": {
-      "title": "Enviar pacotes Wake-on-LAN",
-      "description": "Ative um host enviando um pacote mágico para seu endereço MAC."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "endereço MAC",
-        "description": "O endereço MAC de rede do host, usado para enviar pacotes Wake-on-LAN.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "discurso de transmissão",
-        "description": "Endereço de broadcast da sub-rede para a qual o pacote deve ser enviado. Deixe em branco para 255.255.255.255.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/pt_PT.json b/plugins/wake-on-lan/locales/translated/pt_PT.json
deleted file mode 100644
index d72d033a0..000000000
--- a/plugins/wake-on-lan/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Acordar",
-    "sent": "Pacote Wake-on-LAN enviado",
-    "failed": "Falha ao enviar pacote Wake-on-LAN"
-  },
-  "permissions": {
-    "send": {
-      "title": "Enviar pacotes Wake-on-LAN",
-      "description": "Ative um host enviando um pacote mágico para o seu endereço MAC."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "endereço MAC",
-        "description": "O endereço MAC de rede do host, utilizado para enviar pacotes Wake-on-LAN.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "discurso de transmissão",
-        "description": "Endereço de broadcast da sub-rede para a qual o pacote deve ser enviado. Deixe em branco para 255.255.255.255.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/ro_RO.json b/plugins/wake-on-lan/locales/translated/ro_RO.json
deleted file mode 100644
index 5ce38d2a1..000000000
--- a/plugins/wake-on-lan/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Trezi",
-    "sent": "Pachet Wake-on-LAN trimis",
-    "failed": "Nu s-a putut trimite pachetul Wake-on-LAN"
-  },
-  "permissions": {
-    "send": {
-      "title": "Trimiteți pachete Wake-on-LAN",
-      "description": "Trezește o gazdă prin trimiterea unui pachet magic la adresa sa MAC."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "Adresă MAC",
-        "description": "Adresa MAC a rețelei gazdă, utilizată pentru a trimite pachete Wake-on-LAN.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "Adresă de difuzare",
-        "description": "Adresa de difuzare a subrețelei către care se va trimite pachetul. Lăsați necompletată pentru 255.255.255.255.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/ru_RU.json b/plugins/wake-on-lan/locales/translated/ru_RU.json
deleted file mode 100644
index cbeda3daf..000000000
--- a/plugins/wake-on-lan/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Будить",
-    "sent": "Отправлен пакет Wake-on-LAN.",
-    "failed": "Не удалось отправить пакет Wake-on-LAN."
-  },
-  "permissions": {
-    "send": {
-      "title": "Отправка пакетов Wake-on-LAN",
-      "description": "Разбудите хост, отправив «магический пакет» на его MAC-адрес."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "MAC-адрес",
-        "description": "Сетевой MAC-адрес хоста, используемый для отправки пакетов Wake-on-LAN.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "Обращение в эфире",
-        "description": "Адрес широковещательной рассылки подсети, на который будет отправлен пакет. Оставьте поле пустым для 255.255.255.255.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/sr_SP.json b/plugins/wake-on-lan/locales/translated/sr_SP.json
deleted file mode 100644
index 7fbafd558..000000000
--- a/plugins/wake-on-lan/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Вејк",
-    "sent": "Пакет Wake-on-LAN је послат",
-    "failed": "Није успело слање Wake-on-LAN пакета"
-  },
-  "permissions": {
-    "send": {
-      "title": "Слање Wake-on-LAN пакета",
-      "description": "Пробудите хост слањем магичног пакета на његову MAC адресу."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "MAC адреса",
-        "description": "MAC адреса мреже хоста, која се користи за слање Wake-on-LAN пакета.",
-        "placeholder": "АА:ББ:ЦЦ:ДД:ЕЕ:ФФ"
-      },
-      "broadcastAddress": {
-        "label": "Адреса за емитовање",
-        "description": "Адреса емитовања подмреже на коју треба послати пакет. Оставите празно за 255.255.255.255.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/sv_SE.json b/plugins/wake-on-lan/locales/translated/sv_SE.json
deleted file mode 100644
index 309ef0dd1..000000000
--- a/plugins/wake-on-lan/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Vakna",
-    "sent": "Wake-on-LAN-paket skickat",
-    "failed": "Misslyckades med att skicka Wake-on-LAN-paketet"
-  },
-  "permissions": {
-    "send": {
-      "title": "Skicka Wake-on-LAN-paket",
-      "description": "Väcka en värd genom att skicka ett magiskt paket till dess MAC-adress."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "MAC-adress",
-        "description": "Värdens nätverks-MAC-adress, som används för att skicka Wake-on-LAN-paket.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "Sändningsadress",
-        "description": "Subnätets sändningsadress att skicka paketet till. Lämna tomt för 255.255.255.255.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/th_TH.json b/plugins/wake-on-lan/locales/translated/th_TH.json
deleted file mode 100644
index aadbe8804..000000000
--- a/plugins/wake-on-lan/locales/translated/th_TH.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "ปลุก",
-    "sent": "ส่งแพ็กเก็ต Wake-on-LAN แล้ว",
-    "failed": "ไม่สามารถส่งแพ็กเก็ต Wake-on-LAN ได้"
-  },
-  "permissions": {
-    "send": {
-      "title": "ส่งแพ็กเก็ต Wake-on-LAN",
-      "description": "ปลุกเครื่องโฮสต์โดยการส่งแพ็กเก็ตวิเศษไปยังที่อยู่ MAC ของเครื่องนั้น"
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "ที่อยู่ MAC",
-        "description": "ที่อยู่ MAC ของเครือข่ายโฮสต์ ใช้สำหรับส่งแพ็กเก็ต Wake-on-LAN",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "ที่อยู่กระจายเสียง",
-        "description": "ที่อยู่บรอดแคสต์ของซับเน็ตที่จะส่งแพ็กเก็ตไป เว้นว่างไว้สำหรับ 255.255.255.255",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/tr_TR.json b/plugins/wake-on-lan/locales/translated/tr_TR.json
deleted file mode 100644
index 997804138..000000000
--- a/plugins/wake-on-lan/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Uyan",
-    "sent": "Wake-on-LAN paketi gönderildi",
-    "failed": "Wake-on-LAN paketi gönderilemedi."
-  },
-  "permissions": {
-    "send": {
-      "title": "Wake-on-LAN paketleri gönder",
-      "description": "Bir sunucuyu, MAC adresine sihirli bir paket göndererek uyandırın."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "MAC adresi",
-        "description": "Wake-on-LAN paketlerini göndermek için kullanılan ana bilgisayarın ağ MAC adresi.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "Yayın adresi",
-        "description": "Paketin gönderileceği alt ağ yayın adresi. 255.255.255.255 için boş bırakın.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/uk_UA.json b/plugins/wake-on-lan/locales/translated/uk_UA.json
deleted file mode 100644
index d4783bb8f..000000000
--- a/plugins/wake-on-lan/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Вейк",
-    "sent": "Надіслано пакет Wake-on-LAN",
-    "failed": "Не вдалося надіслати пакет Wake-on-LAN"
-  },
-  "permissions": {
-    "send": {
-      "title": "Надсилання пакетів Wake-on-LAN",
-      "description": "Розбудити хост, надіславши магічний пакет на його MAC-адресу."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "MAC-адреса",
-        "description": "Мережева MAC-адреса хоста, що використовується для надсилання пакетів Wake-on-LAN.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "Адреса розсилки",
-        "description": "Широкомовна адреса підмережі, на яку потрібно надіслати пакет. Залиште поле порожнім для 255.255.255.255.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/vi_VN.json b/plugins/wake-on-lan/locales/translated/vi_VN.json
deleted file mode 100644
index df28ba8e7..000000000
--- a/plugins/wake-on-lan/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "Thức dậy",
-    "sent": "Gói tin Wake-on-LAN đã được gửi",
-    "failed": "Không thể gửi gói tin Wake-on-LAN."
-  },
-  "permissions": {
-    "send": {
-      "title": "Gửi gói tin Wake-on-LAN",
-      "description": "Đánh thức máy chủ bằng cách gửi gói tin đặc biệt đến địa chỉ MAC của nó."
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "Địa chỉ MAC",
-        "description": "Địa chỉ MAC mạng của máy chủ, được sử dụng để gửi các gói tin Wake-on-LAN.",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "Địa chỉ phát sóng",
-        "description": "Địa chỉ broadcast của mạng con để gửi gói tin đến. Để trống nếu là 255.255.255.255.",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/zh_CN.json b/plugins/wake-on-lan/locales/translated/zh_CN.json
deleted file mode 100644
index d6716ae67..000000000
--- a/plugins/wake-on-lan/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "唤醒",
-    "sent": "已发送网络唤醒数据包",
-    "failed": "发送网络唤醒数据包失败"
-  },
-  "permissions": {
-    "send": {
-      "title": "发送网络唤醒数据包",
-      "description": "通过向主机的 MAC 地址发送唤醒数据包来唤醒主机。"
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "MAC地址",
-        "description": "主机的网络 MAC 地址，用于发送 Wake-on-LAN 数据包。",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "广播地址",
-        "description": "要将数据包发送到的子网广播地址。留空则默认为 255.255.255.255。",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/locales/translated/zh_TW.json b/plugins/wake-on-lan/locales/translated/zh_TW.json
deleted file mode 100644
index 03fac15cc..000000000
--- a/plugins/wake-on-lan/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "hostAction": {
-    "title": "喚醒",
-    "sent": "已傳送網路喚醒封包",
-    "failed": "發送網路喚醒封包失敗"
-  },
-  "permissions": {
-    "send": {
-      "title": "傳送網路喚醒封包",
-      "description": "透過傳送喚醒封包給主機的 MAC 位址來喚醒主機。"
-    }
-  },
-  "settings": {
-    "host": {
-      "macAddress": {
-        "label": "MAC位址",
-        "description": "主機的網路 MAC 位址，用於傳送 Wake-on-LAN 封包。",
-        "placeholder": "AA:BB:CC:DD:EE:FF"
-      },
-      "broadcastAddress": {
-        "label": "廣播位址",
-        "description": "要將資料包傳送到的子網路廣播位址。留空則預設為 255.255.255.255。",
-        "placeholder": "192.168.1.255"
-      }
-    }
-  }
-}
diff --git a/plugins/wake-on-lan/manifest.json b/plugins/wake-on-lan/manifest.json
deleted file mode 100644
index 1a0889689..000000000
--- a/plugins/wake-on-lan/manifest.json
+++ /dev/null
@@ -1,65 +0,0 @@
-{
-  "id": "wake-on-lan",
-  "name": "Wake-on-LAN",
-  "version": "1.0.0",
-  "description": "Wake a sleeping host by sending a Wake-on-LAN packet to its MAC address.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Networking",
-  "icon": "Zap",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "hosts:read",
-    "network:broadcast",
-    "network:serve",
-    "ui:surface"
-  ],
-  "provides": [
-    {
-      "service": "wake-on-lan.send",
-      "version": "1.0.0",
-      "permission": "wake-on-lan.send"
-    }
-  ],
-  "contributes": {
-    "permissions": [
-      {
-        "name": "send",
-        "titleKey": "permissions.send.title",
-        "descriptionKey": "permissions.send.description",
-        "defaultRoles": ["admin", "user"]
-      }
-    ],
-    "settings": {
-      "host": {
-        "editorGroup": "top",
-        "editorOrder": 90,
-        "fields": [
-          {
-            "key": "macAddress",
-            "type": "string",
-            "labelKey": "settings.host.macAddress.label",
-            "descriptionKey": "settings.host.macAddress.description",
-            "placeholderKey": "settings.host.macAddress.placeholder",
-            "defaultable": false
-          },
-          {
-            "key": "broadcastAddress",
-            "type": "string",
-            "labelKey": "settings.host.broadcastAddress.label",
-            "descriptionKey": "settings.host.broadcastAddress.description",
-            "placeholderKey": "settings.host.broadcastAddress.placeholder"
-          }
-        ]
-      }
-    }
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"]
-}
diff --git a/plugins/wake-on-lan/package.json b/plugins/wake-on-lan/package.json
deleted file mode 100644
index 565ddb111..000000000
--- a/plugins/wake-on-lan/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-  "name": "@termix-plugin/wake-on-lan",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "lucide-react": "^1.33.0"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "express": "^5.2.1",
-    "sonner": "^2.0.8"
-  }
-}
diff --git a/plugins/wake-on-lan/src/backend/index.ts b/plugins/wake-on-lan/src/backend/index.ts
deleted file mode 100644
index 65b174c73..000000000
--- a/plugins/wake-on-lan/src/backend/index.ts
+++ /dev/null
@@ -1,15 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { createWakeOnLanService } from "./service.js";
-import { registerWakeOnLanRoutes } from "./routes.js";
-
-export async function activate(ctx: PluginContext) {
-  const service = createWakeOnLanService(ctx);
-  ctx.services.provide("wake-on-lan.send", service);
-  registerWakeOnLanRoutes(ctx.http.router<Router>(), ctx, service);
-  ctx.log.info("Wake-on-LAN routes mounted at /plugin-api/wake-on-lan");
-}
-
-export async function deactivate() {
-  // Everything above was registered through ctx and is disposed by core.
-}
diff --git a/plugins/wake-on-lan/src/backend/magic-packet.ts b/plugins/wake-on-lan/src/backend/magic-packet.ts
deleted file mode 100644
index 486b7c3ab..000000000
--- a/plugins/wake-on-lan/src/backend/magic-packet.ts
+++ /dev/null
@@ -1,49 +0,0 @@
-import dgram from "dgram";
-
-const MAC_REGEX = /^([0-9A-Fa-f]{2}[:-]){5}[0-9A-Fa-f]{2}$/;
-
-function parseMac(mac: string): Buffer {
-  return Buffer.from(mac.replace(/[:-]/g, ""), "hex");
-}
-
-export function buildMagicPacket(mac: string): Buffer {
-  const macBytes = parseMac(mac);
-  const packet = Buffer.alloc(102);
-  packet.fill(0xff, 0, 6);
-  for (let i = 0; i < 16; i++) {
-    macBytes.copy(packet, 6 + i * 6);
-  }
-  return packet;
-}
-
-export function isValidMac(mac: string): boolean {
-  return MAC_REGEX.test(mac);
-}
-
-export function sendMagicPacket(
-  mac: string,
-  broadcastAddress = "255.255.255.255",
-): Promise<void> {
-  return new Promise((resolve, reject) => {
-    if (!isValidMac(mac)) {
-      return reject(new Error("Invalid MAC address"));
-    }
-
-    const packet = buildMagicPacket(mac);
-    const socket = dgram.createSocket("udp4");
-
-    socket.once("error", (err) => {
-      socket.close();
-      reject(err);
-    });
-
-    socket.bind(() => {
-      socket.setBroadcast(true);
-      socket.send(packet, 0, packet.length, 9, broadcastAddress, (err) => {
-        socket.close();
-        if (err) reject(err);
-        else resolve();
-      });
-    });
-  });
-}
diff --git a/plugins/wake-on-lan/src/backend/routes.ts b/plugins/wake-on-lan/src/backend/routes.ts
deleted file mode 100644
index 14e9649e1..000000000
--- a/plugins/wake-on-lan/src/backend/routes.ts
+++ /dev/null
@@ -1,47 +0,0 @@
-import type { Request, Response, Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { WakeOnLanV1 } from "./service.js";
-
-export function registerWakeOnLanRoutes(
-  router: Router,
-  ctx: PluginContext,
-  service: WakeOnLanV1,
-): void {
-  router.use(ctx.rbac.require("send") as never);
-
-  /**
-   * @openapi
-   * /plugin-api/wake-on-lan/host/{id}/wake:
-   *   post:
-   *     summary: Send a Wake-on-LAN magic packet to a host
-   *     tags:
-   *       - Wake-on-LAN
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Packet sent
-   *       400:
-   *         description: No valid MAC address configured
-   *       404:
-   *         description: Host not found
-   */
-  router.post("/host/:id/wake", async (req: Request, res: Response) => {
-    const hostId = Number.parseInt(String(req.params.id), 10);
-    if (!Number.isInteger(hostId)) {
-      return res.status(400).json({ error: "Invalid host id" });
-    }
-    try {
-      await service.wake(hostId);
-      res.json({ success: true });
-    } catch (error) {
-      const message = error instanceof Error ? error.message : String(error);
-      const status = message === "Host not found" ? 404 : 400;
-      res.status(status).json({ error: message });
-    }
-  });
-}
diff --git a/plugins/wake-on-lan/src/backend/service.ts b/plugins/wake-on-lan/src/backend/service.ts
deleted file mode 100644
index df637b5e5..000000000
--- a/plugins/wake-on-lan/src/backend/service.ts
+++ /dev/null
@@ -1,33 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { isValidMac, sendMagicPacket } from "./magic-packet.js";
-
-export interface WakeOnLanV1 {
-  wake: (hostId: number) => Promise<void>;
-}
-
-export function createWakeOnLanService(ctx: PluginContext): WakeOnLanV1 {
-  return {
-    async wake(hostId: number): Promise<void> {
-      const host = await ctx.hosts.get(hostId);
-      if (!host) {
-        throw new Error("Host not found");
-      }
-
-      const macAddress = await ctx.settings.getHost<string>(
-        hostId,
-        "macAddress",
-      );
-      if (!macAddress || !isValidMac(macAddress)) {
-        throw new Error("No valid MAC address configured");
-      }
-      const broadcastAddress = await ctx.settings.getHost<string>(
-        hostId,
-        "broadcastAddress",
-      );
-
-      await ctx.capabilities.require("network:broadcast");
-      await sendMagicPacket(macAddress, broadcastAddress || undefined);
-      ctx.log.info(`Wake-on-LAN packet sent to host ${hostId}`);
-    },
-  };
-}
diff --git a/plugins/wake-on-lan/src/frontend/host-action.ts b/plugins/wake-on-lan/src/frontend/host-action.ts
deleted file mode 100644
index afacc5837..000000000
--- a/plugins/wake-on-lan/src/frontend/host-action.ts
+++ /dev/null
@@ -1,40 +0,0 @@
-import { toast } from "sonner";
-import type {
-  PluginApiClient,
-  PluginHostRecord,
-  TermixApp,
-} from "@termix/plugin-sdk/frontend";
-
-export function macAddressOf(
-  host: Pick<PluginHostRecord, "pluginSettings"> | null | undefined,
-): string | null {
-  const macAddress = host?.pluginSettings?.["wake-on-lan"]?.macAddress;
-  return typeof macAddress === "string" && macAddress.trim()
-    ? macAddress.trim()
-    : null;
-}
-
-export function hasMacAddress(
-  host: Pick<PluginHostRecord, "pluginSettings">,
-): boolean {
-  return macAddressOf(host) !== null;
-}
-
-function errorMessage(error: unknown, fallback: string): string {
-  const message = (error as { response?: { data?: { error?: string } } })
-    ?.response?.data?.error;
-  return message ?? fallback;
-}
-
-export function wakeHost(
-  api: PluginApiClient,
-  t: TermixApp["t"],
-  hostId: string,
-): void {
-  void api
-    .post(`/host/${hostId}/wake`)
-    .then(() => toast.success(t("hostAction.sent")))
-    .catch((error: unknown) => {
-      toast.error(errorMessage(error, t("hostAction.failed")));
-    });
-}
diff --git a/plugins/wake-on-lan/src/frontend/index.tsx b/plugins/wake-on-lan/src/frontend/index.tsx
deleted file mode 100644
index f96ba8160..000000000
--- a/plugins/wake-on-lan/src/frontend/index.tsx
+++ /dev/null
@@ -1,19 +0,0 @@
-import { Zap } from "lucide-react";
-import type { TermixApp } from "@termix/plugin-sdk/frontend";
-import { hasMacAddress, macAddressOf, wakeHost } from "./host-action.js";
-
-export function activate(app: TermixApp): void {
-  app.registerHostAction({
-    id: "wake-on-lan",
-    titleKey: "hostAction.title",
-    icon: Zap,
-    kind: "open",
-    order: 50,
-    when: (host) => hasMacAddress(host),
-    run: (host) => wakeHost(app.api, app.t, String(host.id)),
-  });
-
-  // A saved host's MAC address, for plugins that send their own wake packet.
-  app.registerAction("wakeOnLan.macAddress", ((hostId: string | number) =>
-    macAddressOf(app.getHost(hostId))) as never);
-}
diff --git a/plugins/wake-on-lan/tests/backend/helpers.ts b/plugins/wake-on-lan/tests/backend/helpers.ts
deleted file mode 100644
index 16d55054c..000000000
--- a/plugins/wake-on-lan/tests/backend/helpers.ts
+++ /dev/null
@@ -1,77 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import express, { type Router } from "express";
-import {
-  createMockCtx,
-  type MockPluginContext,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import type { PluginHostSummary } from "@termix/plugin-sdk/backend";
-import manifestJson from "../../manifest.json";
-
-export const manifest = manifestJson as unknown as PluginManifest;
-
-export interface TestServer {
-  mock: MockPluginContext;
-  request: (
-    method: string,
-    path: string,
-    options?: { user?: string; body?: unknown },
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any }>;
-  close: () => Promise<void>;
-}
-
-export async function startServer(
-  options: {
-    permissions?: string[];
-    hosts?: PluginHostSummary[];
-    capabilities?: string[];
-  } = {},
-): Promise<TestServer> {
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: options.capabilities ?? manifest.capabilities,
-    router: () => (router = express.Router()),
-    permissions: options.permissions ?? ["wake-on-lan.send"],
-    hosts: options.hosts ?? [],
-    actor: "user-1",
-  });
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") ?? undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    mock,
-    async request(method, path, { user = "user-1", body: given } = {}) {
-      const body = method === "GET" ? undefined : given;
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        headers: {
-          "x-test-user": user,
-          ...(body !== undefined ? { "content-type": "application/json" } : {}),
-        },
-        body: body !== undefined ? JSON.stringify(body) : undefined,
-      });
-      const text = await response.text();
-      return { status: response.status, body: text ? JSON.parse(text) : null };
-    },
-    async close() {
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-    },
-  };
-}
diff --git a/plugins/wake-on-lan/tests/backend/magic-packet.test.ts b/plugins/wake-on-lan/tests/backend/magic-packet.test.ts
deleted file mode 100644
index aec9e304f..000000000
--- a/plugins/wake-on-lan/tests/backend/magic-packet.test.ts
+++ /dev/null
@@ -1,120 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
-
-vi.mock("dgram", () => {
-  const socket = {
-    once: vi.fn(),
-    bind: vi.fn(),
-    setBroadcast: vi.fn(),
-    send: vi.fn(),
-    close: vi.fn(),
-  };
-  return { default: { createSocket: vi.fn(() => socket) } };
-});
-
-import dgram from "dgram";
-import {
-  isValidMac,
-  buildMagicPacket,
-  sendMagicPacket,
-} from "../../src/backend/magic-packet.js";
-
-describe("isValidMac", () => {
-  it("accepts colon-separated MAC addresses", () => {
-    expect(isValidMac("01:23:45:67:89:AB")).toBe(true);
-    expect(isValidMac("aa:bb:cc:dd:ee:ff")).toBe(true);
-  });
-
-  it("accepts hyphen-separated MAC addresses", () => {
-    expect(isValidMac("01-23-45-67-89-AB")).toBe(true);
-  });
-
-  it("rejects malformed MAC addresses", () => {
-    expect(isValidMac("")).toBe(false);
-    expect(isValidMac("01:23:45:67:89")).toBe(false);
-    expect(isValidMac("01:23:45:67:89:AB:CD")).toBe(false);
-    expect(isValidMac("0123456789AB")).toBe(false);
-    expect(isValidMac("zz:23:45:67:89:ab")).toBe(false);
-    expect(isValidMac("01:23:45:67:89:AB ")).toBe(false);
-  });
-});
-
-describe("buildMagicPacket", () => {
-  it("produces a 102-byte packet", () => {
-    const packet = buildMagicPacket("01:23:45:67:89:AB");
-    expect(packet.length).toBe(102);
-  });
-
-  it("starts with six 0xFF bytes", () => {
-    const packet = buildMagicPacket("01:23:45:67:89:AB");
-    expect([...packet.subarray(0, 6)]).toEqual([
-      0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
-    ]);
-  });
-
-  it("repeats the MAC bytes 16 times after the header", () => {
-    const packet = buildMagicPacket("01:23:45:67:89:AB");
-    const mac = Buffer.from([0x01, 0x23, 0x45, 0x67, 0x89, 0xab]);
-    for (let i = 0; i < 16; i++) {
-      const offset = 6 + i * 6;
-      expect([...packet.subarray(offset, offset + 6)]).toEqual([...mac]);
-    }
-  });
-
-  it("treats colon and hyphen separators identically", () => {
-    const colon = buildMagicPacket("aa:bb:cc:dd:ee:ff");
-    const hyphen = buildMagicPacket("aa-bb-cc-dd-ee-ff");
-    expect(colon.equals(hyphen)).toBe(true);
-  });
-});
-
-describe("sendMagicPacket", () => {
-  let mockSocket: ReturnType<typeof dgram.createSocket>;
-
-  beforeEach(() => {
-    vi.clearAllMocks();
-    mockSocket = (dgram.createSocket as unknown as () => typeof mockSocket)();
-    (mockSocket.bind as ReturnType<typeof vi.fn>).mockImplementation(
-      (cb: () => void) => cb(),
-    );
-    (mockSocket.send as ReturnType<typeof vi.fn>).mockImplementation(
-      (
-        _buf: unknown,
-        _off: unknown,
-        _len: unknown,
-        _port: unknown,
-        _addr: unknown,
-        cb: (err: null) => void,
-      ) => cb(null),
-    );
-  });
-
-  it("rejects on invalid MAC address", async () => {
-    await expect(sendMagicPacket("not-a-mac")).rejects.toThrow(
-      "Invalid MAC address",
-    );
-  });
-
-  it("sends to 255.255.255.255 by default", async () => {
-    await sendMagicPacket("aa:bb:cc:dd:ee:ff");
-    expect(mockSocket.send).toHaveBeenCalledWith(
-      expect.any(Buffer),
-      0,
-      102,
-      9,
-      "255.255.255.255",
-      expect.any(Function),
-    );
-  });
-
-  it("sends to a custom broadcast address when provided", async () => {
-    await sendMagicPacket("aa:bb:cc:dd:ee:ff", "192.168.1.255");
-    expect(mockSocket.send).toHaveBeenCalledWith(
-      expect.any(Buffer),
-      0,
-      102,
-      9,
-      "192.168.1.255",
-      expect.any(Function),
-    );
-  });
-});
diff --git a/plugins/wake-on-lan/tests/backend/routes.test.ts b/plugins/wake-on-lan/tests/backend/routes.test.ts
deleted file mode 100644
index 450f252e4..000000000
--- a/plugins/wake-on-lan/tests/backend/routes.test.ts
+++ /dev/null
@@ -1,65 +0,0 @@
-import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
-import type { PluginHostSummary } from "@termix/plugin-sdk/backend";
-import { startServer, type TestServer } from "./helpers.js";
-
-vi.mock("../../src/backend/magic-packet.js", async () => {
-  const actual = await vi.importActual<
-    typeof import("../../src/backend/magic-packet.js")
-  >("../../src/backend/magic-packet.js");
-  return { ...actual, sendMagicPacket: vi.fn().mockResolvedValue(undefined) };
-});
-
-const HOST: PluginHostSummary = {
-  id: 1,
-  userId: "user-1",
-  name: "server",
-  ip: "10.0.0.5",
-  port: 22,
-  username: "root",
-  tags: null,
-  folder: null,
-  authType: "password",
-};
-
-describe("POST /host/:id/wake", () => {
-  let server: TestServer;
-
-  beforeEach(() => {
-    vi.clearAllMocks();
-  });
-
-  afterEach(async () => {
-    await server?.close();
-  });
-
-  it("sends the packet for a configured host", async () => {
-    server = await startServer({ hosts: [HOST] });
-    await server.mock.ctx.settings.setHost(
-      1,
-      "macAddress",
-      "aa:bb:cc:dd:ee:ff",
-    );
-
-    const response = await server.request("POST", "/host/1/wake");
-    expect(response.status).toBe(200);
-    expect(response.body).toEqual({ success: true });
-  });
-
-  it("404s for an unknown host", async () => {
-    server = await startServer({ hosts: [] });
-    const response = await server.request("POST", "/host/999/wake");
-    expect(response.status).toBe(404);
-  });
-
-  it("400s when no MAC address is configured", async () => {
-    server = await startServer({ hosts: [HOST] });
-    const response = await server.request("POST", "/host/1/wake");
-    expect(response.status).toBe(400);
-  });
-
-  it("denies a caller without wake-on-lan.send", async () => {
-    server = await startServer({ hosts: [HOST], permissions: [] });
-    const response = await server.request("POST", "/host/1/wake");
-    expect(response.status).toBe(403);
-  });
-});
diff --git a/plugins/wake-on-lan/tests/backend/service.test.ts b/plugins/wake-on-lan/tests/backend/service.test.ts
deleted file mode 100644
index 3e9708d9f..000000000
--- a/plugins/wake-on-lan/tests/backend/service.test.ts
+++ /dev/null
@@ -1,103 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
-import { createMockCtx } from "@termix/plugin-sdk/testing";
-import { createWakeOnLanService } from "../../src/backend/service.js";
-
-vi.mock("../../src/backend/magic-packet.js", async () => {
-  const actual = await vi.importActual<
-    typeof import("../../src/backend/magic-packet.js")
-  >("../../src/backend/magic-packet.js");
-  return { ...actual, sendMagicPacket: vi.fn().mockResolvedValue(undefined) };
-});
-
-import { sendMagicPacket } from "../../src/backend/magic-packet.js";
-
-const HOST = {
-  id: 1,
-  userId: "user-1",
-  name: "server",
-  ip: "10.0.0.5",
-  port: 22,
-  username: "root",
-  tags: "",
-  folder: "",
-  authType: "password",
-};
-
-describe("wake-on-lan service", () => {
-  beforeEach(() => {
-    vi.clearAllMocks();
-  });
-
-  it("sends a magic packet for a host with a valid MAC", async () => {
-    const mock = createMockCtx({
-      capabilities: ["hosts:read", "network:broadcast"],
-      hosts: [HOST],
-      actor: "user-1",
-    });
-    await mock.ctx.settings.setHost(1, "macAddress", "aa:bb:cc:dd:ee:ff");
-
-    const service = createWakeOnLanService(mock.ctx);
-    await service.wake(1);
-
-    expect(sendMagicPacket).toHaveBeenCalledWith(
-      "aa:bb:cc:dd:ee:ff",
-      undefined,
-    );
-  });
-
-  it("passes the configured broadcast address", async () => {
-    const mock = createMockCtx({
-      capabilities: ["hosts:read", "network:broadcast"],
-      hosts: [HOST],
-      actor: "user-1",
-    });
-    await mock.ctx.settings.setHost(1, "macAddress", "aa:bb:cc:dd:ee:ff");
-    await mock.ctx.settings.setHost(1, "broadcastAddress", "192.168.1.255");
-
-    const service = createWakeOnLanService(mock.ctx);
-    await service.wake(1);
-
-    expect(sendMagicPacket).toHaveBeenCalledWith(
-      "aa:bb:cc:dd:ee:ff",
-      "192.168.1.255",
-    );
-  });
-
-  it("rejects a host with no MAC address configured", async () => {
-    const mock = createMockCtx({
-      capabilities: ["hosts:read", "network:broadcast"],
-      hosts: [HOST],
-      actor: "user-1",
-    });
-
-    const service = createWakeOnLanService(mock.ctx);
-    await expect(service.wake(1)).rejects.toThrow(
-      "No valid MAC address configured",
-    );
-    expect(sendMagicPacket).not.toHaveBeenCalled();
-  });
-
-  it("rejects an unknown host", async () => {
-    const mock = createMockCtx({
-      capabilities: ["hosts:read", "network:broadcast"],
-      hosts: [],
-      actor: "user-1",
-    });
-
-    const service = createWakeOnLanService(mock.ctx);
-    await expect(service.wake(999)).rejects.toThrow("Host not found");
-  });
-
-  it("fails closed without network:broadcast", async () => {
-    const mock = createMockCtx({
-      capabilities: ["hosts:read"],
-      hosts: [HOST],
-      actor: "user-1",
-    });
-    await mock.ctx.settings.setHost(1, "macAddress", "aa:bb:cc:dd:ee:ff");
-
-    const service = createWakeOnLanService(mock.ctx);
-    await expect(service.wake(1)).rejects.toThrow();
-    expect(sendMagicPacket).not.toHaveBeenCalled();
-  });
-});
diff --git a/plugins/wake-on-lan/tests/frontend/activate.test.tsx b/plugins/wake-on-lan/tests/frontend/activate.test.tsx
deleted file mode 100644
index 9e1fbb56d..000000000
--- a/plugins/wake-on-lan/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,33 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe(`${manifest.id} activate`, () => {
-  it("registers the Wake host action", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.hostActions()).toEqual([
-      expect.objectContaining({ id: "wake-on-lan" }),
-    ]);
-  });
-
-  it("removes the host action on deactivate", async () => {
-    const app = await renderWithApp(plugin, { manifest, locales });
-    await app.deactivate();
-    expect(app.registered.hostActions()).toEqual([]);
-  });
-});
diff --git a/plugins/wake-on-lan/tests/frontend/host-action.test.ts b/plugins/wake-on-lan/tests/frontend/host-action.test.ts
deleted file mode 100644
index 03a6f622e..000000000
--- a/plugins/wake-on-lan/tests/frontend/host-action.test.ts
+++ /dev/null
@@ -1,98 +0,0 @@
-import { describe, it, expect, vi, afterEach } from "vitest";
-import { toast } from "sonner";
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import {
-  hasMacAddress,
-  macAddressOf,
-  wakeHost,
-} from "../../src/frontend/host-action.js";
-
-vi.mock("sonner", () => ({
-  toast: { success: vi.fn(), error: vi.fn() },
-}));
-
-afterEach(() => {
-  vi.clearAllMocks();
-});
-
-function stubApi(overrides: Partial<PluginApiClient> = {}): PluginApiClient {
-  return {
-    get: vi.fn(async () => ({ data: {} })),
-    post: vi.fn(async () => ({ data: {} })),
-    put: vi.fn(async () => ({ data: {} })),
-    patch: vi.fn(async () => ({ data: {} })),
-    delete: vi.fn(async () => ({ data: {} })),
-    ...overrides,
-  } as PluginApiClient;
-}
-
-const t = (key: string) => key;
-
-describe("macAddressOf", () => {
-  it("returns the trimmed MAC address a host keeps", () => {
-    expect(
-      macAddressOf({
-        pluginSettings: {
-          "wake-on-lan": { macAddress: " aa:bb:cc:dd:ee:ff " },
-        },
-      }),
-    ).toBe("aa:bb:cc:dd:ee:ff");
-  });
-
-  it("is null without a host or an address", () => {
-    expect(macAddressOf(undefined)).toBeNull();
-    expect(macAddressOf({ pluginSettings: {} })).toBeNull();
-    expect(
-      macAddressOf({ pluginSettings: { "wake-on-lan": { macAddress: "  " } } }),
-    ).toBeNull();
-  });
-});
-
-describe("hasMacAddress", () => {
-  it("is true when the host's wake-on-lan settings carry a MAC address", () => {
-    expect(
-      hasMacAddress({
-        pluginSettings: { "wake-on-lan": { macAddress: "aa:bb:cc:dd:ee:ff" } },
-      }),
-    ).toBe(true);
-  });
-
-  it("is false with no plugin settings", () => {
-    expect(hasMacAddress({})).toBe(false);
-  });
-
-  it("is false with an empty MAC address", () => {
-    expect(
-      hasMacAddress({ pluginSettings: { "wake-on-lan": { macAddress: "" } } }),
-    ).toBe(false);
-  });
-});
-
-describe("wakeHost", () => {
-  it("posts to the host's wake route and toasts success", async () => {
-    const api = stubApi();
-    wakeHost(api, t, "1");
-    await vi.waitFor(() =>
-      expect(api.post).toHaveBeenCalledWith("/host/1/wake"),
-    );
-    await vi.waitFor(() => expect(toast.success).toHaveBeenCalled());
-  });
-
-  it("toasts the server's error message on failure", async () => {
-    const api = stubApi({
-      post: vi
-        .fn()
-        .mockRejectedValue({ response: { data: { error: "no mac" } } }),
-    });
-    wakeHost(api, t, "1");
-    await vi.waitFor(() => expect(toast.error).toHaveBeenCalledWith("no mac"));
-  });
-
-  it("falls back to a generic message with no server error", async () => {
-    const api = stubApi({ post: vi.fn().mockRejectedValue(new Error("x")) });
-    wakeHost(api, t, "1");
-    await vi.waitFor(() =>
-      expect(toast.error).toHaveBeenCalledWith("hostAction.failed"),
-    );
-  });
-});
diff --git a/plugins/wake-on-lan/tsconfig.json b/plugins/wake-on-lan/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/wake-on-lan/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/wake-on-lan/vitest.config.ts b/plugins/wake-on-lan/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/wake-on-lan/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/warpgate/CHANGELOG.md b/plugins/warpgate/CHANGELOG.md
deleted file mode 100644
index 75468638b..000000000
--- a/plugins/warpgate/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Lets you connect through a Warpgate SSH bastion. Its browser approval shows as a sign-in dialog, and your saved password is sent for you.
diff --git a/plugins/warpgate/README.md b/plugins/warpgate/README.md
deleted file mode 100644
index b50904d78..000000000
--- a/plugins/warpgate/README.md
+++ /dev/null
@@ -1,23 +0,0 @@
-# Warpgate
-
-Connect through a Warpgate SSH bastion. Its browser approval shows as a sign-in dialog and your saved password is sent for you.
-
-## Features
-
-- Connect through a [Warpgate](https://github.com/warp-tech/warpgate) SSH bastion.
-- Warpgate's browser approval shows as a sign-in dialog.
-- Your saved password is sent to Warpgate for you.
-
-## Settings
-
-### Host
-
-- Warpgate Gateway: this host connects through Warpgate.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/warpgate/locales/en.json b/plugins/warpgate/locales/en.json
deleted file mode 100644
index abe73d48a..000000000
--- a/plugins/warpgate/locales/en.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Warpgate Gateway",
-        "description": "This host connects through a Warpgate SSH proxy. Termix will handle the browser-based approval flow automatically after authenticating."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/af_ZA.json b/plugins/warpgate/locales/translated/af_ZA.json
deleted file mode 100644
index fb5aeb7b6..000000000
--- a/plugins/warpgate/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Warpgate-poort",
-        "description": "Hierdie gasheer koppel deur 'n Warpgate SSH-instaanbediener. Termix sal die blaaiergebaseerde goedkeuringsvloei outomaties hanteer na verifikasie."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/ar_SA.json b/plugins/warpgate/locales/translated/ar_SA.json
deleted file mode 100644
index cd28e71db..000000000
--- a/plugins/warpgate/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "بوابة Warpgate",
-        "description": "يتصل هذا المضيف عبر وكيل SSH من Warpgate. سيتولى Termix عملية الموافقة عبر المتصفح تلقائيًا بعد المصادقة."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/bg_BG.json b/plugins/warpgate/locales/translated/bg_BG.json
deleted file mode 100644
index e2679957e..000000000
--- a/plugins/warpgate/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Порталът на Уорпгейт",
-        "description": "Този хост се свързва чрез Warpgate SSH прокси. Termix ще обработи процеса на одобрение, базиран на браузър, автоматично след удостоверяване."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/bn_BD.json b/plugins/warpgate/locales/translated/bn_BD.json
deleted file mode 100644
index 0ad61eb95..000000000
--- a/plugins/warpgate/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "ওয়ার্পগেট গেটওয়ে",
-        "description": "এই হোস্টটি একটি ওয়ার্পগেট এসএসএইচ প্রক্সির মাধ্যমে সংযুক্ত হয়। প্রমাণীকরণের পর টার্মিক্স স্বয়ংক্রিয়ভাবে ব্রাউজার-ভিত্তিক অনুমোদন প্রক্রিয়াটি পরিচালনা করবে।"
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/ca_ES.json b/plugins/warpgate/locales/translated/ca_ES.json
deleted file mode 100644
index 2c42158dd..000000000
--- a/plugins/warpgate/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Porta de Warpgate",
-        "description": "Aquest amfitrió es connecta a través d'un proxy SSH Warpgate. Termix gestionarà automàticament el flux d'aprovació basat en navegador després de l'autenticació."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/cs_CZ.json b/plugins/warpgate/locales/translated/cs_CZ.json
deleted file mode 100644
index 6d89004d2..000000000
--- a/plugins/warpgate/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Brána Warpgate",
-        "description": "Tento hostitel se připojuje přes proxy Warpgate SSH. Termix po ověření automaticky zpracuje proces schvalování v prohlížeči."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/da_DK.json b/plugins/warpgate/locales/translated/da_DK.json
deleted file mode 100644
index 30724ff40..000000000
--- a/plugins/warpgate/locales/translated/da_DK.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Warpgate Gateway",
-        "description": "Denne vært opretter forbindelse via en Warpgate SSH-proxy. Termix håndterer den browserbaserede godkendelsesproces automatisk efter godkendelse."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/de_DE.json b/plugins/warpgate/locales/translated/de_DE.json
deleted file mode 100644
index 994c20274..000000000
--- a/plugins/warpgate/locales/translated/de_DE.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Warpgate Gateway",
-        "description": "Dieser Host verbindet sich über einen Warpgate SSH-Proxy. Termix übernimmt nach der Authentifizierung automatisch den browserbasierten Genehmigungsablauf."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/el_GR.json b/plugins/warpgate/locales/translated/el_GR.json
deleted file mode 100644
index 9c9390fb1..000000000
--- a/plugins/warpgate/locales/translated/el_GR.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Πύλη Warpgate",
-        "description": "Αυτός ο κεντρικός υπολογιστής συνδέεται μέσω ενός διακομιστή μεσολάβησης Warpgate SSH. Το Termix θα χειριστεί αυτόματα τη ροή έγκρισης που βασίζεται σε πρόγραμμα περιήγησης μετά τον έλεγχο ταυτότητας."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/es_ES.json b/plugins/warpgate/locales/translated/es_ES.json
deleted file mode 100644
index f20f2b35d..000000000
--- a/plugins/warpgate/locales/translated/es_ES.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Warpgate Gateway",
-        "description": "Este host se conecta a través de un proxy SSH de Warpgate. Termix gestionará el flujo de aprobación basado en navegador automáticamente después de autenticarse."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/fi_FI.json b/plugins/warpgate/locales/translated/fi_FI.json
deleted file mode 100644
index 29b54b86c..000000000
--- a/plugins/warpgate/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Warpgate-yhdyskäytävä",
-        "description": "Tämä isäntä muodostaa yhteyden Warpgate SSH -välityspalvelimen kautta. Termix käsittelee selainpohjaisen hyväksyntäprosessin automaattisesti todennuksen jälkeen."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/fr_FR.json b/plugins/warpgate/locales/translated/fr_FR.json
deleted file mode 100644
index f9afb1919..000000000
--- a/plugins/warpgate/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Warpgate Gateway",
-        "description": "Cet hôte se connecte via un proxy SSH Warpgate. Termix gérera automatiquement le flux d'approbation basé sur le navigateur après l'authentification."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/he_IL.json b/plugins/warpgate/locales/translated/he_IL.json
deleted file mode 100644
index f387b9b2c..000000000
--- a/plugins/warpgate/locales/translated/he_IL.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "שער וורפגייט",
-        "description": "מארח זה מתחבר דרך פרוקסי Warpgate SSH. Termix יטפל בזרימת האישור מבוססת הדפדפן באופן אוטומטי לאחר האימות."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/hi_IN.json b/plugins/warpgate/locales/translated/hi_IN.json
deleted file mode 100644
index 5cf1261a5..000000000
--- a/plugins/warpgate/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Warpgate गेटवे",
-        "description": "यह होस्ट Warpgate SSH प्रॉक्सी के माध्यम से कनेक्ट होता है। Termix प्रमाणीकरण के बाद ब्राउज़र-आधारित अनुमोदन प्रवाह को स्वचालित रूप से संभालेगा।"
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/hu_HU.json b/plugins/warpgate/locales/translated/hu_HU.json
deleted file mode 100644
index a9c8dbcc4..000000000
--- a/plugins/warpgate/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Warpgate átjáró",
-        "description": "Ez a gazdagép egy Warpgate SSH proxyn keresztül csatlakozik. A Termix a hitelesítés után automatikusan kezeli a böngészőalapú jóváhagyási folyamatot."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/id_ID.json b/plugins/warpgate/locales/translated/id_ID.json
deleted file mode 100644
index 4e45eac2b..000000000
--- a/plugins/warpgate/locales/translated/id_ID.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Gerbang Warpgate",
-        "description": "Host ini terhubung melalui proxy SSH Warpgate. Termix akan menangani alur persetujuan berbasis browser secara otomatis setelah otentikasi."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/it_IT.json b/plugins/warpgate/locales/translated/it_IT.json
deleted file mode 100644
index c95aed3a5..000000000
--- a/plugins/warpgate/locales/translated/it_IT.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Warpgate Gateway",
-        "description": "Questo host si connette tramite un proxy SSH Warpgate. Termix gestirà automaticamente il flusso di approvazione basato su browser dopo l'autenticazione."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/ja_JP.json b/plugins/warpgate/locales/translated/ja_JP.json
deleted file mode 100644
index 87658172c..000000000
--- a/plugins/warpgate/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Warpgateゲートウェイ",
-        "description": "このホストはWarpgate SSHプロキシ経由で接続します。認証後、Termixがブラウザベースの承認フローを自動的に処理します。"
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/ko_KR.json b/plugins/warpgate/locales/translated/ko_KR.json
deleted file mode 100644
index a28d193c0..000000000
--- a/plugins/warpgate/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Warpgate 게이트웨이",
-        "description": "이 호스트는 Warpgate SSH 프록시를 통해 연결됩니다. Termix는 인증 후 브라우저 기반 승인 과정을 자동으로 처리합니다."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/nl_NL.json b/plugins/warpgate/locales/translated/nl_NL.json
deleted file mode 100644
index 4d8443d82..000000000
--- a/plugins/warpgate/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Warpgate-poort",
-        "description": "Deze host maakt verbinding via een Warpgate SSH-proxy. Termix handelt de browsergebaseerde goedkeuringsprocedure automatisch af na authenticatie."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/no_NO.json b/plugins/warpgate/locales/translated/no_NO.json
deleted file mode 100644
index dbae88451..000000000
--- a/plugins/warpgate/locales/translated/no_NO.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Warpgate-porten",
-        "description": "Denne verten kobler seg til via en Warpgate SSH-proxy. Termix håndterer den nettleserbaserte godkjenningsflyten automatisk etter autentisering."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/pl_PL.json b/plugins/warpgate/locales/translated/pl_PL.json
deleted file mode 100644
index dbc67d397..000000000
--- a/plugins/warpgate/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Brama Warpgate",
-        "description": "Ten host łączy się przez proxy SSH Warpgate. Termix automatycznie obsłuży proces zatwierdzania w przeglądarce po uwierzytelnieniu."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/pt_BR.json b/plugins/warpgate/locales/translated/pt_BR.json
deleted file mode 100644
index 634c632e8..000000000
--- a/plugins/warpgate/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Portal de dobra espacial",
-        "description": "Este host se conecta através de um proxy SSH Warpgate. O Termix cuidará automaticamente do fluxo de aprovação baseado em navegador após a autenticação."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/pt_PT.json b/plugins/warpgate/locales/translated/pt_PT.json
deleted file mode 100644
index 7efc559f4..000000000
--- a/plugins/warpgate/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Warpgate Gateway",
-        "description": "Este anfitrião liga-se através de um proxy SSH Warpgate. O Termix irá gerir automaticamente o fluxo de aprovação baseado no navegador após a autenticação."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/ro_RO.json b/plugins/warpgate/locales/translated/ro_RO.json
deleted file mode 100644
index 56a632814..000000000
--- a/plugins/warpgate/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Poarta Warpgate",
-        "description": "Această gazdă se conectează printr-un proxy SSH Warpgate. Termix va gestiona automat fluxul de aprobare bazat pe browser după autentificare."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/ru_RU.json b/plugins/warpgate/locales/translated/ru_RU.json
deleted file mode 100644
index 9973251fa..000000000
--- a/plugins/warpgate/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Шлюз Warpgate",
-        "description": "Этот хост подключается через SSH-прокси Warpgate. Termix автоматически обработает процесс подтверждения в браузере после аутентификации."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/sr_SP.json b/plugins/warpgate/locales/translated/sr_SP.json
deleted file mode 100644
index 23af8ddc4..000000000
--- a/plugins/warpgate/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Капија Варпгејта",
-        "description": "Овај хост се повезује преко Warpgate SSH проксија. Termix ће аутоматски обрадити ток одобрења заснован на прегледачу након аутентификације."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/sv_SE.json b/plugins/warpgate/locales/translated/sv_SE.json
deleted file mode 100644
index de960ff35..000000000
--- a/plugins/warpgate/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Warpgate Gateway",
-        "description": "Denna värd ansluter via en Warpgate SSH-proxy. Termix hanterar det webbläsarbaserade godkännandeflödet automatiskt efter autentisering."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/th_TH.json b/plugins/warpgate/locales/translated/th_TH.json
deleted file mode 100644
index 6b4953967..000000000
--- a/plugins/warpgate/locales/translated/th_TH.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "ประตูวาร์ปเกต",
-        "description": "โฮสต์นี้เชื่อมต่อผ่านพร็อกซี SSH ของ Warpgate Termix จะจัดการขั้นตอนการอนุมัติผ่านเบราว์เซอร์โดยอัตโนมัติหลังจากยืนยันตัวตนแล้ว"
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/tr_TR.json b/plugins/warpgate/locales/translated/tr_TR.json
deleted file mode 100644
index af7d8ced9..000000000
--- a/plugins/warpgate/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Warpgate Ağ Geçidi",
-        "description": "Bu sunucu bir Warpgate SSH proxy'si üzerinden bağlanır. Termix, kimlik doğrulamasından sonra tarayıcı tabanlı onay akışını otomatik olarak yönetir."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/uk_UA.json b/plugins/warpgate/locales/translated/uk_UA.json
deleted file mode 100644
index a02a2db3c..000000000
--- a/plugins/warpgate/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Брама Варпгейту",
-        "description": "Цей хост підключається через проксі-сервер Warpgate SSH. Termix автоматично обробить процес затвердження на основі браузера після автентифікації."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/vi_VN.json b/plugins/warpgate/locales/translated/vi_VN.json
deleted file mode 100644
index d5b5309c7..000000000
--- a/plugins/warpgate/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Cổng Warpgate",
-        "description": "Máy chủ này kết nối thông qua proxy SSH Warpgate. Termix sẽ tự động xử lý luồng phê duyệt trên trình duyệt sau khi xác thực."
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/zh_CN.json b/plugins/warpgate/locales/translated/zh_CN.json
deleted file mode 100644
index 43dec3974..000000000
--- a/plugins/warpgate/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Warpgate 网关",
-        "description": "此主机通过 Warpgate SSH 代理连接。Termix 将在认证后自动处理基于浏览器的审批流程。"
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/locales/translated/zh_TW.json b/plugins/warpgate/locales/translated/zh_TW.json
deleted file mode 100644
index 49fe4b1c3..000000000
--- a/plugins/warpgate/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "settings": {
-    "host": {
-      "useWarpgate": {
-        "label": "Warpgate 閘道",
-        "description": "此主機透過 Warpgate SSH 代理連線。Termix 會在驗證後自動處理瀏覽器核准流程。"
-      }
-    }
-  }
-}
diff --git a/plugins/warpgate/manifest.json b/plugins/warpgate/manifest.json
deleted file mode 100644
index c2b570c7e..000000000
--- a/plugins/warpgate/manifest.json
+++ /dev/null
@@ -1,40 +0,0 @@
-{
-  "id": "warpgate",
-  "name": "Warpgate",
-  "version": "1.0.0",
-  "description": "Connect through a Warpgate SSH bastion. Its browser approval shows as a sign-in dialog and your saved password is sent for you.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Access & Security",
-  "icon": "DoorOpen",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": ["auth:provide"],
-  "contributes": {
-    "auth": {
-      "keyboardInteractive": ["warpgate"]
-    },
-    "settings": {
-      "host": {
-        "editorGroup": "ssh",
-        "editorOrder": 95,
-        "fields": [
-          {
-            "key": "useWarpgate",
-            "type": "boolean",
-            "labelKey": "settings.host.useWarpgate.label",
-            "descriptionKey": "settings.host.useWarpgate.description",
-            "default": false
-          }
-        ]
-      }
-    }
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"]
-}
diff --git a/plugins/warpgate/package.json b/plugins/warpgate/package.json
deleted file mode 100644
index 593a4892b..000000000
--- a/plugins/warpgate/package.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "name": "@termix-plugin/warpgate",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0"
-  }
-}
diff --git a/plugins/warpgate/src/backend/detect.ts b/plugins/warpgate/src/backend/detect.ts
deleted file mode 100644
index 10df595e4..000000000
--- a/plugins/warpgate/src/backend/detect.ts
+++ /dev/null
@@ -1,37 +0,0 @@
-import type {
-  PluginKeyboardInteractiveDetection,
-  PluginKeyboardInteractivePrompt,
-} from "@termix/plugin-sdk/backend";
-
-const WARPGATE_PATTERN = /warpgate\s+authentication/i;
-const URL_PATTERN = /https?:\/\/[^\s\n]+/i;
-const SECURITY_KEY_PATTERN =
-  /security key[:\s]+([a-z0-9](?:\s+[a-z0-9]){3}|[a-z0-9]{4})/i;
-
-/**
- * Warpgate asks for its browser approval as a keyboard-interactive round
- * that names itself and carries the sign-in URL and a security key.
- */
-export function detectWarpgateRound(round: {
-  name: string;
-  instructions: string;
-  prompts: PluginKeyboardInteractivePrompt[];
-}): PluginKeyboardInteractiveDetection | null {
-  const texts = round.prompts.map((prompt) => prompt.prompt);
-  const isWarpgate =
-    WARPGATE_PATTERN.test(round.name) ||
-    WARPGATE_PATTERN.test(round.instructions) ||
-    texts.some((text) => WARPGATE_PATTERN.test(text));
-  if (!isWarpgate) return null;
-
-  const fullText = `${round.name}\n${round.instructions}\n${texts.join("\n")}`;
-  const url = fullText.match(URL_PATTERN);
-  if (!url) return null;
-  const key = fullText.match(SECURITY_KEY_PATTERN);
-  return {
-    kind: "browser",
-    url: url[0],
-    code: key ? key[1] : "N/A",
-    instructions: round.instructions,
-  };
-}
diff --git a/plugins/warpgate/src/backend/host-import.ts b/plugins/warpgate/src/backend/host-import.ts
deleted file mode 100644
index 3b5960d1a..000000000
--- a/plugins/warpgate/src/backend/host-import.ts
+++ /dev/null
@@ -1,14 +0,0 @@
-/**
- * Registered as "warpgate.hostImportNormalizer" so core's host import keeps
- * the flag. Reads a Termix export's pluginSettings.warpgate first, then the
- * useWarpgate host field exports had before 2.9.0.
- */
-export function hostImportNormalizer(
-  raw: Record<string, unknown>,
-): Record<string, unknown> | null {
-  const pluginSettings = raw.pluginSettings as
-    Record<string, Record<string, unknown> | undefined> | undefined;
-  const value = pluginSettings?.warpgate?.useWarpgate ?? raw.useWarpgate;
-  if (value === undefined || value === null) return null;
-  return { useWarpgate: value === true || value === 1 || value === "true" };
-}
diff --git a/plugins/warpgate/src/backend/index.ts b/plugins/warpgate/src/backend/index.ts
deleted file mode 100644
index 94a6080d2..000000000
--- a/plugins/warpgate/src/backend/index.ts
+++ /dev/null
@@ -1,22 +0,0 @@
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { detectWarpgateRound } from "./detect.js";
-import { hostImportNormalizer } from "./host-import.js";
-
-export const HANDLER_ID = "warpgate";
-
-export async function activate(ctx: PluginContext) {
-  ctx.auth.registerKeyboardInteractiveHandler({
-    id: HANDLER_ID,
-    label: "Warpgate",
-    detect: (round) => detectWarpgateRound(round),
-    // Warpgate asks for the password before its browser round; answer it
-    // silently so the only thing the user sees is the sign-in dialog.
-    autoAnswerPasswords: (_host, settings) => settings.useWarpgate === true,
-  });
-
-  ctx.registry.provide("warpgate.hostImportNormalizer", hostImportNormalizer);
-}
-
-export async function deactivate() {
-  // Registered through ctx, so core removes it.
-}
diff --git a/plugins/warpgate/src/frontend/index.tsx b/plugins/warpgate/src/frontend/index.tsx
deleted file mode 100644
index 35faaedb3..000000000
--- a/plugins/warpgate/src/frontend/index.tsx
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { TermixApp } from "@termix/plugin-sdk/frontend";
-
-// The host setting is drawn by core's schema form and the sign-in dialog is
-// the transports' own, so there is nothing to register.
-export function activate(_app: TermixApp): void {}
diff --git a/plugins/warpgate/tests/backend/warpgate.test.ts b/plugins/warpgate/tests/backend/warpgate.test.ts
deleted file mode 100644
index c672521b6..000000000
--- a/plugins/warpgate/tests/backend/warpgate.test.ts
+++ /dev/null
@@ -1,113 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { PluginCapabilityError } from "@termix/plugin-sdk/backend";
-import { createMockCtx } from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-import { activate } from "../../src/backend/index.js";
-import { detectWarpgateRound } from "../../src/backend/detect.js";
-import { hostImportNormalizer } from "../../src/backend/host-import.js";
-
-const manifest = manifestJson as unknown as PluginManifest;
-const HOST = { id: 1, ip: "10.0.0.1", port: 22, username: "root" };
-
-async function register() {
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-  });
-  await activate(mock.ctx);
-  return mock.auth.keyboardInteractiveHandlers[0];
-}
-
-describe("detectWarpgateRound", () => {
-  it("claims a Warpgate round with its URL and security key", () => {
-    expect(
-      detectWarpgateRound({
-        name: "Warpgate authentication",
-        instructions:
-          "Open https://gate.example/@warpgate#/login/abc to continue. Security key: a b c d",
-        prompts: [{ prompt: "Press Enter when done: " }],
-      }),
-    ).toEqual({
-      kind: "browser",
-      url: "https://gate.example/@warpgate#/login/abc",
-      code: "a b c d",
-      instructions:
-        "Open https://gate.example/@warpgate#/login/abc to continue. Security key: a b c d",
-    });
-  });
-
-  it("finds the marker in a prompt too, and says N/A without a key", () => {
-    expect(
-      detectWarpgateRound({
-        name: "",
-        instructions: "",
-        prompts: [
-          { prompt: "Warpgate authentication: visit https://gate.example/x" },
-        ],
-      }),
-    ).toMatchObject({ url: "https://gate.example/x", code: "N/A" });
-  });
-
-  it("leaves other rounds, and a Warpgate round without a URL, alone", () => {
-    expect(
-      detectWarpgateRound({
-        name: "",
-        instructions: "",
-        prompts: [{ prompt: "Verification code:" }],
-      }),
-    ).toBeNull();
-    expect(
-      detectWarpgateRound({
-        name: "Warpgate authentication",
-        instructions: "",
-        prompts: [],
-      }),
-    ).toBeNull();
-  });
-});
-
-describe("the warpgate handler", () => {
-  it("registers under its id and label", async () => {
-    const handler = await register();
-    expect(handler).toMatchObject({ id: "warpgate", label: "Warpgate" });
-  });
-
-  it("answers password prompts itself only on hosts with the setting on", async () => {
-    const handler = await register();
-    expect(handler.autoAnswerPasswords!(HOST, { useWarpgate: true })).toBe(
-      true,
-    );
-    expect(handler.autoAnswerPasswords!(HOST, { useWarpgate: false })).toBe(
-      false,
-    );
-    expect(handler.autoAnswerPasswords!(HOST, {})).toBe(false);
-  });
-
-  it("fails closed without auth:provide", async () => {
-    const mock = createMockCtx({
-      pluginId: manifest.id,
-      manifest,
-      capabilities: [],
-    });
-    await expect(activate(mock.ctx)).rejects.toThrow(PluginCapabilityError);
-  });
-});
-
-describe("hostImportNormalizer", () => {
-  it("reads the plugin's own settings first, then the 2.8 host field", () => {
-    expect(
-      hostImportNormalizer({
-        pluginSettings: { warpgate: { useWarpgate: true } },
-      }),
-    ).toEqual({ useWarpgate: true });
-    expect(hostImportNormalizer({ useWarpgate: 1 })).toEqual({
-      useWarpgate: true,
-    });
-    expect(hostImportNormalizer({ useWarpgate: false })).toEqual({
-      useWarpgate: false,
-    });
-    expect(hostImportNormalizer({ name: "x" })).toBeNull();
-  });
-});
diff --git a/plugins/warpgate/tsconfig.json b/plugins/warpgate/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/warpgate/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/warpgate/vitest.config.ts b/plugins/warpgate/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/warpgate/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/web-endpoint/CHANGELOG.md b/plugins/web-endpoint/CHANGELOG.md
deleted file mode 100644
index 30b7265a2..000000000
--- a/plugins/web-endpoint/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Opens a host's web UI in a tab or a separate desktop window, either directly or over an SSH tunnel.
diff --git a/plugins/web-endpoint/README.md b/plugins/web-endpoint/README.md
deleted file mode 100644
index 6552da6ea..000000000
--- a/plugins/web-endpoint/README.md
+++ /dev/null
@@ -1,38 +0,0 @@
-# Web Endpoint
-
-Open a host's web UI in a tab or a separate desktop window, directly or over an SSH tunnel.
-
-## Features
-
-- Open a host's web UI in a tab or a separate desktop window.
-- Connect directly, or over an SSH tunnel when the web UI is only reachable from the host.
-- Up to 16 endpoints per host.
-
-## Setup
-
-Each endpoint is one of two kinds:
-
-- Direct: your browser loads `scheme://host:port/path` itself.
-- Tunnel: Termix opens an SSH tunnel to the port and loads it from there. Unused tunnels close after ten minutes.
-
-Tunnel endpoints need the Tunnels plugin.
-
-## Settings
-
-### Host
-
-- Enable web endpoints and the list of endpoints for this host.
-
-## Services
-
-Uses from other plugins:
-
-- `tunnels.access` to open tunnels. Required.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/web-endpoint/locales/en.json b/plugins/web-endpoint/locales/en.json
deleted file mode 100644
index 592190658..000000000
--- a/plugins/web-endpoint/locales/en.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "No host selected",
-    "notFound": "This endpoint no longer exists.",
-    "tunnelUnreachableFromBrowser": "This endpoint tunnels to 127.0.0.1 on the machine running Termix, which your browser cannot reach. Set the endpoint's Bind Host to an address that machine answers on, such as 0.0.0.0, and give it a fixed Local Port.",
-    "tunnelSharesSessionCookie": "Opening this tunnel would send your Termix session to the tunnelled service, because your browser would reach it at the same hostname Termix is served from. Cookies ignore the port, so the two cannot be told apart. Use the Termix desktop app, or open Termix at localhost.",
-    "directSharesSessionCookie": "Opening this endpoint would send your Termix session to it, because your browser reaches it at the same site Termix is served from. Cookies ignore the port, so a different port is not a different identity. Use the Termix desktop app, or serve this web UI from a different hostname.",
-    "retry": "Retry",
-    "reload": "Reload",
-    "copyUrl": "Copy URL",
-    "urlCopied": "URL copied",
-    "copyFailed": "Failed to copy URL",
-    "openExternally": "Open externally",
-    "isolationUnavailable": "This browser cannot isolate web endpoints from your Termix session. Use a browser with credentialless iframe support.",
-    "isolationNotice": "Embedded pages use an isolated session. For pages requiring storage or popup sign-in, use an isolated window in the desktop app.",
-    "openIsolatedWindow": "Open isolated window"
-  },
-  "hosts": {
-    "tabWebUi": "Web UI",
-    "webUiEndpointLabel": "Endpoint {{number}}",
-    "webUiIntegration": "Web UI",
-    "webUiEndpointsSection": "Endpoints",
-    "webUiNoEndpoints": "No web endpoints yet. Use Add endpoint to create one.",
-    "webUiEndpointsDisabled": "Turn on Web UI above to add endpoints.",
-    "webUiRequirementsText": "A direct endpoint is opened by your browser, so its port must be reachable from here. An SSH tunnel is opened by Termix over this host's SSH connection instead, so the port only has to be reachable from the host.",
-    "enableWebUi": "Enable web endpoints",
-    "enableWebUiDesc": "Open this host's web interfaces from the sidebar.",
-    "webUiAddEndpoint": "Add endpoint",
-    "webUiAddress": "Address",
-    "webUiOpening": "Opening",
-    "webUiBindHostDesc": "Where the backend binds the forward. Leave blank for 127.0.0.1, which only the machine running Termix can reach.",
-    "webUiBindHostExposed": "This address is reachable beyond the Termix machine, so anyone who can reach the port gets this web UI with no login.",
-    "webUiLocalPort": "Local Port",
-    "webUiLocalPortAuto": "Automatic",
-    "webUiLocalPortDesc": "Which port the forward listens on. Leave blank to let the system pick, or set one when the port has to be known in advance, such as a container that publishes it.",
-    "webUiNewEndpointLabel": "New endpoint",
-    "webUiLabel": "Label",
-    "webUiScheme": "Scheme",
-    "webUiPort": "Port",
-    "webUiPath": "Path",
-    "webUiAccess": "Access",
-    "webUiAccessDirect": "Direct",
-    "webUiAccessTunnel": "SSH tunnel",
-    "webUiAccessTunnelUnavailable": "An SSH tunnel needs SSH enabled on this host and a connection origin of this device.",
-    "webUiRender": "Open in",
-    "webUiRenderExternal": "Isolated desktop window",
-    "webUiRenderEmbedded": "Termix tab",
-    "webUiRenderEmbeddedDesc": "Embedding is best effort: some web interfaces refuse to load in a frame, and a login that relies on same-site cookies may loop. The external browser always works.",
-    "webUiIgnoreCert": "Allow invalid certificate",
-    "webUiIgnoreCertDesc": "Direct endpoints only. Loopback is already exempt, so this has no effect on tunnel endpoints.",
-    "webUiRemoveEndpoint": "Remove endpoint",
-    "webUiOpenFailed": "Failed to open the web endpoint",
-    "bindHost": "Bind Host"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/af_ZA.json b/plugins/web-endpoint/locales/translated/af_ZA.json
deleted file mode 100644
index 3f8e13307..000000000
--- a/plugins/web-endpoint/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "Geen gasheer gekies nie",
-    "notFound": "Hierdie eindpunt bestaan nie meer nie.",
-    "tunnelUnreachableFromBrowser": "Hierdie eindpunt tonnel na 127.0.0.1 op die masjien wat Termix gebruik, wat jou blaaier nie kan bereik nie. Stel die eindpunt se Bind Host na 'n adres waarop die masjien antwoord, soos 0.0.0.0, en gee dit 'n vaste Lokale Poort.",
-    "tunnelSharesSessionCookie": "As jy hierdie tonnel oopmaak, sal jou Termix-sessie na die getunnelde diens gestuur word, want jou blaaier sal dit bereik by dieselfde gasheernaam waarvandaan Termix bedien word. Koekies ignoreer die poort, dus kan die twee nie van mekaar onderskei word nie. Gebruik die Termix-lessenaar-app, of maak Termix oop by localhost.",
-    "directSharesSessionCookie": "As jy hierdie eindpunt oopmaak, sal jou Termix-sessie daarnatoe gestuur word, want jou blaaier bereik dit op dieselfde webwerf waarvandaan Termix bedien word. Koekies ignoreer die poort, dus is 'n ander poort nie 'n ander identiteit nie. Gebruik die Termix-lessenaartoepassing of bedien hierdie web-UI vanaf 'n ander gasheernaam.",
-    "retry": "Probeer weer",
-    "reload": "Herlaai",
-    "copyUrl": "Kopieer URL",
-    "urlCopied": "URL gekopieer",
-    "copyFailed": "Kon nie URL kopieer nie",
-    "openExternally": "Maak ekstern oop",
-    "isolationUnavailable": "Hierdie blaaier kan nie web-eindpunte van jou Termix-sessie isoleer nie. Gebruik 'n blaaier met ondersteuning vir iframes sonder geloofsbriewe.",
-    "isolationNotice": "Ingeslote bladsye gebruik 'n geïsoleerde sessie. Vir bladsye wat berging of opspring-aanmelding benodig, gebruik 'n geïsoleerde venster in die rekenaarprogram.",
-    "openIsolatedWindow": "Maak geïsoleerde venster oop"
-  },
-  "hosts": {
-    "tabWebUi": "Web-UI",
-    "webUiEndpointLabel": "Eindpunt {{number}}",
-    "webUiIntegration": "Web-UI",
-    "webUiEndpointsSection": "Eindpunte",
-    "webUiNoEndpoints": "Geen web-eindpunte nog nie. Gebruik Voeg eindpunt by om een te skep.",
-    "webUiEndpointsDisabled": "Skakel Web UI hierbo aan om eindpunte by te voeg.",
-    "webUiRequirementsText": "'n Direkte eindpunt word deur jou blaaier oopgemaak, dus moet die poort daarvan van hier af bereikbaar wees. 'n SSH-tonnel word eerder deur Termix oor hierdie gasheer se SSH-verbinding oopgemaak, dus hoef die poort slegs vanaf die gasheer bereikbaar te wees.",
-    "enableWebUi": "Aktiveer web-eindpunte",
-    "enableWebUiDesc": "Maak hierdie gasheer se webkoppelvlakke vanaf die sybalk oop.",
-    "webUiAddEndpoint": "Voeg eindpunt by",
-    "webUiAddress": "Adres",
-    "webUiOpening": "Opening",
-    "webUiBindHostDesc": "Waar die agterkant die voorwaartse kant bind. Los leeg vir 127.0.0.1, wat slegs die masjien wat Termix gebruik, kan bereik.",
-    "webUiBindHostExposed": "Hierdie adres is bereikbaar buite die Termix-masjien, so enigiemand wat die poort kan bereik, kry hierdie web-UI sonder om aan te meld.",
-    "webUiLocalPort": "Plaaslike Hawe",
-    "webUiLocalPortAuto": "Outomaties",
-    "webUiLocalPortDesc": "Na watter poort die aanstuurder luister. Los leeg om die stelsel toe te laat om te kies, of stel een wanneer die poort vooraf bekend moet wees, soos 'n houer wat dit publiseer.",
-    "webUiNewEndpointLabel": "Nuwe eindpunt",
-    "webUiLabel": "Etiket",
-    "webUiScheme": "Skema",
-    "webUiPort": "Hawe",
-    "webUiPath": "Pad",
-    "webUiAccess": "Toegang",
-    "webUiAccessDirect": "Direkte",
-    "webUiAccessTunnel": "SSH-tonnel",
-    "webUiAccessTunnelUnavailable": "'n SSH-tonnel benodig SSH geaktiveer op hierdie gasheer en 'n verbindingsoorsprong van hierdie toestel.",
-    "webUiRender": "Maak oop in",
-    "webUiRenderExternal": "Geïsoleerde lessenaarvenster",
-    "webUiRenderEmbedded": "Termix-oortjie",
-    "webUiRenderEmbeddedDesc": "Inbedding is die beste poging: sommige webkoppelvlakke weier om in 'n raam te laai, en 'n aanmelding wat op dieselfde-webwerf-koekies staatmaak, kan 'n lus vorm. Die eksterne blaaier werk altyd.",
-    "webUiIgnoreCert": "Laat ongeldige sertifikaat toe",
-    "webUiIgnoreCertDesc": "Slegs direkte eindpunte. Teruglus is reeds vrygestel, dus het dit geen effek op tonneleindpunte nie.",
-    "webUiRemoveEndpoint": "Verwyder eindpunt",
-    "webUiOpenFailed": "Kon nie die web-eindpunt oopmaak nie",
-    "bindHost": "Bind gasheer"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/ar_SA.json b/plugins/web-endpoint/locales/translated/ar_SA.json
deleted file mode 100644
index 77f157b3e..000000000
--- a/plugins/web-endpoint/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "لم يتم تحديد أي جهاز مضيف",
-    "notFound": "لم تعد هذه النقطة النهائية موجودة.",
-    "tunnelUnreachableFromBrowser": "تتصل هذه النقطة الطرفية بالعنوان 127.0.0.1 على الجهاز الذي يُشغّل Termix، وهو عنوان لا يمكن لمتصفحك الوصول إليه. عيّن عنوان \"Bind Host\" لهذه النقطة الطرفية إلى عنوان يستجيب له الجهاز، مثل 0.0.0.0، وحدّد لها منفذًا محليًا ثابتًا.",
-    "tunnelSharesSessionCookie": "سيؤدي فتح هذا النفق إلى توجيه جلسة Termix الخاصة بك إلى الخدمة المُمرَّرة عبر النفق، لأن متصفحك سيصل إليها عبر نفس اسم المضيف الذي يُقدَّم منه Termix. تتجاهل ملفات تعريف الارتباط رقم المنفذ، لذا لا يمكن التمييز بينهما. استخدم تطبيق Termix لسطح المكتب، أو افتح Termix على localhost.",
-    "directSharesSessionCookie": "سيؤدي فتح هذه النقطة النهائية إلى توجيه جلسة Termix الخاصة بك إليها، لأن متصفحك يصل إليها من نفس الموقع الذي يُقدّم منه Termix. تتجاهل ملفات تعريف الارتباط رقم المنفذ، لذا فإن استخدام منفذ مختلف لا يعني تغيير الهوية. استخدم تطبيق Termix لسطح المكتب، أو قم بتشغيل واجهة المستخدم الرسومية هذه من اسم مضيف مختلف.",
-    "retry": "إعادة المحاولة",
-    "reload": "إعادة تحميل",
-    "copyUrl": "انسخ الرابط",
-    "urlCopied": "تم نسخ الرابط",
-    "copyFailed": "فشل نسخ عنوان URL",
-    "openExternally": "فتح خارجيًا",
-    "isolationUnavailable": "لا يستطيع هذا المتصفح عزل نقاط نهاية الويب عن جلسة Termix الخاصة بك. استخدم متصفحًا يدعم الإطارات المضمنة بدون بيانات اعتماد.",
-    "isolationNotice": "تستخدم الصفحات المضمنة جلسة معزولة. أما بالنسبة للصفحات التي تتطلب تخزينًا أو تسجيل دخول منبثق، فاستخدم نافذة معزولة في تطبيق سطح المكتب.",
-    "openIsolatedWindow": "نافذة مفتوحة معزولة"
-  },
-  "hosts": {
-    "tabWebUi": "واجهة المستخدم على الويب",
-    "webUiEndpointLabel": "نقطة النهاية {{number}}",
-    "webUiIntegration": "واجهة المستخدم على الويب",
-    "webUiEndpointsSection": "نقاط النهاية",
-    "webUiNoEndpoints": "لا توجد نقاط نهاية ويب حتى الآن. استخدم \"إضافة نقطة نهاية\" لإنشاء واحدة.",
-    "webUiEndpointsDisabled": "قم بتشغيل واجهة المستخدم على الويب أعلاه لإضافة نقاط النهاية.",
-    "webUiRequirementsText": "يفتح متصفحك نقطة نهاية مباشرة، لذا يجب أن يكون منفذها قابلاً للوصول من هنا. أما Termix فيفتح نفق SSH عبر اتصال SSH الخاص بهذا المضيف، لذا يكفي أن يكون المنفذ قابلاً للوصول من المضيف نفسه.",
-    "enableWebUi": "تفعيل نقاط نهاية الويب",
-    "enableWebUiDesc": "افتح واجهات الويب الخاصة بهذا المضيف من الشريط الجانبي.",
-    "webUiAddEndpoint": "إضافة نقطة نهاية",
-    "webUiAddress": "العنوان",
-    "webUiOpening": "افتتاح",
-    "webUiBindHostDesc": "حيث يقوم الخادم الخلفي بربط التوجيه الأمامي. اترك هذا الحقل فارغًا للعنوان 127.0.0.1، والذي لا يمكن الوصول إليه إلا من خلال الجهاز الذي يُشغّل برنامج Termix.",
-    "webUiBindHostExposed": "يمكن الوصول إلى هذا العنوان من خارج جهاز Termix، لذا فإن أي شخص يمكنه الوصول إلى المنفذ سيحصل على واجهة المستخدم هذه عبر الويب دون الحاجة إلى تسجيل الدخول.",
-    "webUiLocalPort": "المنفذ المحلي",
-    "webUiLocalPortAuto": "معادلة",
-    "webUiLocalPortDesc": "ما هو المنفذ الذي يستمع إليه التوجيه؟ اتركه فارغًا ليختاره النظام، أو حدد واحدًا عندما يكون من الضروري معرفة المنفذ مسبقًا، كما هو الحال في حاوية تنشره.",
-    "webUiNewEndpointLabel": "نقطة نهاية جديدة",
-    "webUiLabel": "تسمية",
-    "webUiScheme": "مخطط",
-    "webUiPort": "منفذ",
-    "webUiPath": "المسار",
-    "webUiAccess": "وصول",
-    "webUiAccessDirect": "مباشر",
-    "webUiAccessTunnel": "نفق SSH",
-    "webUiAccessTunnelUnavailable": "يتطلب نفق SSH تمكين SSH على هذا المضيف ومصدر اتصال من هذا الجهاز.",
-    "webUiRender": "افتح في",
-    "webUiRenderExternal": "نافذة سطح المكتب المعزولة",
-    "webUiRenderEmbedded": "علامة تبويب Termix",
-    "webUiRenderEmbeddedDesc": "يُعدّ تضمين المحتوى أفضل محاولة ممكنة: فبعض واجهات الويب ترفض التحميل داخل إطار، وقد تتكرر عملية تسجيل الدخول التي تعتمد على ملفات تعريف الارتباط الخاصة بالموقع نفسه. أما المتصفح الخارجي فيعمل دائمًا.",
-    "webUiIgnoreCert": "السماح بشهادة غير صالحة",
-    "webUiIgnoreCertDesc": "نقاط النهاية المباشرة فقط. تم إعفاء نقاط نهاية Loopback بالفعل، لذا لن يكون لهذا أي تأثير على نقاط نهاية النفق.",
-    "webUiRemoveEndpoint": "إزالة نقطة النهاية",
-    "webUiOpenFailed": "فشل فتح نقطة نهاية الويب",
-    "bindHost": "مضيف الربط"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/bg_BG.json b/plugins/web-endpoint/locales/translated/bg_BG.json
deleted file mode 100644
index 08805aa1c..000000000
--- a/plugins/web-endpoint/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "Няма избран хост",
-    "notFound": "Тази крайна точка вече не съществува.",
-    "tunnelUnreachableFromBrowser": "Тази крайна точка се свързва с 127.0.0.1 на машината, на която работи Termix, до която вашият браузър не може да достигне. Задайте Bind Host на крайната точка на адрес, на който машината отговаря, например 0.0.0.0, и му дайте фиксиран локален порт.",
-    "tunnelSharesSessionCookie": "Отварянето на този тунел ще изпрати вашата Termix сесия към тунелираната услуга, защото вашият браузър ще я достигне на същото име на хост, от което се обслужва Termix. „Бисквитките“ игнорират порта, така че двете не могат да бъдат разграничени. Използвайте настолното приложение Termix или отворете Termix на localhost.",
-    "directSharesSessionCookie": "Отварянето на тази крайна точка ще изпрати вашата Termix сесия към нея, защото вашият браузър достига до нея на същия сайт, от който се обслужва Termix. „Бисквитките“ игнорират порта, така че различен порт не е различна идентичност. Използвайте настолното приложение Termix или обслужвайте този уеб потребителски интерфейс от различно име на хост.",
-    "retry": "Опитай отново",
-    "reload": "Презареждане",
-    "copyUrl": "Копиране на URL адрес",
-    "urlCopied": "URL адресът е копиран",
-    "copyFailed": "Копирането на URL адреса не бе успешно",
-    "openExternally": "Отворено външно",
-    "isolationUnavailable": "Този браузър не може да изолира уеб крайни точки от вашата Termix сесия. Използвайте браузър с поддръжка на iframe без идентификационни данни.",
-    "isolationNotice": "Вградените страници използват изолирана сесия. За страници, изискващи място за съхранение или изскачащ вход, използвайте изолиран прозорец в настолното приложение.",
-    "openIsolatedWindow": "Отворен изолиран прозорец"
-  },
-  "hosts": {
-    "tabWebUi": "Уеб потребителски интерфейс",
-    "webUiEndpointLabel": "Крайна точка {{number}}",
-    "webUiIntegration": "Уеб потребителски интерфейс",
-    "webUiEndpointsSection": "Крайни точки",
-    "webUiNoEndpoints": "Все още няма уеб крайни точки. Използвайте „Добавяне на крайна точка“, за да създадете такава.",
-    "webUiEndpointsDisabled": "Включете уеб потребителския интерфейс по-горе, за да добавите крайни точки.",
-    "webUiRequirementsText": "Директна крайна точка се отваря от вашия браузър, така че портът ѝ трябва да е достъпен оттук. Вместо това Termix отваря SSH тунел през SSH връзката на този хост, така че портът трябва да е достъпен само от хоста.",
-    "enableWebUi": "Активиране на уеб крайни точки",
-    "enableWebUiDesc": "Отворете уеб интерфейсите на този хост от страничната лента.",
-    "webUiAddEndpoint": "Добавяне на крайна точка",
-    "webUiAddress": "Адрес",
-    "webUiOpening": "Откриване",
-    "webUiBindHostDesc": "Където бекендът свързва пренасочващия сървър. Оставете празно за 127.0.0.1, до който може да достигне само машината, на която работи Termix.",
-    "webUiBindHostExposed": "Този адрес е достъпен отвъд машината Termix, така че всеки, който може да достигне порта, получава този уеб интерфейс без вход.",
-    "webUiLocalPort": "Локален порт",
-    "webUiLocalPortAuto": "Автоматично",
-    "webUiLocalPortDesc": "На кой порт слуша пренасочването. Оставете празно, за да позволите на системата да избере, или задайте порт, когато портът трябва да бъде известен предварително, например контейнер, който го публикува.",
-    "webUiNewEndpointLabel": "Нова крайна точка",
-    "webUiLabel": "Етикет",
-    "webUiScheme": "Схема",
-    "webUiPort": "Порт",
-    "webUiPath": "Път",
-    "webUiAccess": "Достъп",
-    "webUiAccessDirect": "Директно",
-    "webUiAccessTunnel": "SSH тунел",
-    "webUiAccessTunnelUnavailable": "SSH тунелът изисква SSH да е активиран на този хост и произход на връзката на това устройство.",
-    "webUiRender": "Отвори в",
-    "webUiRenderExternal": "Изолиран прозорец на работния плот",
-    "webUiRenderEmbedded": "раздел Термикс",
-    "webUiRenderEmbeddedDesc": "Вграждането е най-добрият начин: някои уеб интерфейси отказват да се заредят в кадър и влизане, което разчита на „бисквитки“ на същия сайт, може да се зацикли. Външният браузър винаги работи.",
-    "webUiIgnoreCert": "Разрешаване на невалиден сертификат",
-    "webUiIgnoreCertDesc": "Само директни крайни точки. Loopback вече е изключен, така че това няма ефект върху крайните точки на тунела.",
-    "webUiRemoveEndpoint": "Премахване на крайната точка",
-    "webUiOpenFailed": "Неуспешно отваряне на уеб крайната точка",
-    "bindHost": "Свързване на хост"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/bn_BD.json b/plugins/web-endpoint/locales/translated/bn_BD.json
deleted file mode 100644
index 5126bd391..000000000
--- a/plugins/web-endpoint/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "কোন হোস্ট নির্বাচন করা হয়নি",
-    "notFound": "এই এন্ডপয়েন্টটি আর বিদ্যমান নেই।",
-    "tunnelUnreachableFromBrowser": "এই এন্ডপয়েন্টটি Termix চালিত মেশিনের 127.0.0.1-এ টানেল করে, যেখানে আপনার ব্রাউজার পৌঁছাতে পারে না। এন্ডপয়েন্টটির বাইন্ড হোস্ট এমন একটি অ্যাড্রেসে সেট করুন যেখান থেকে ওই মেশিনটি সাড়া দেয়, যেমন 0.0.0.0, এবং এটিকে একটি নির্দিষ্ট লোকাল পোর্ট দিন।",
-    "tunnelSharesSessionCookie": "এই টানেলটি খুললে আপনার টার্মিক্স সেশনটি টানেল করা পরিষেবাতে চলে যাবে, কারণ আপনার ব্রাউজারটি সেই একই হোস্টনেমে পরিষেবাটি পাবে যেখান থেকে টার্মিক্স পরিবেশিত হয়। কুকি পোর্টকে উপেক্ষা করে, তাই এই দুটিকে আলাদা করা যায় না। টার্মিক্স ডেস্কটপ অ্যাপ ব্যবহার করুন, অথবা লোকালহোস্টে টার্মিক্স খুলুন।",
-    "directSharesSessionCookie": "এই এন্ডপয়েন্টটি খুললে আপনার টার্মিক্স সেশনটি সেখানে চলে যাবে, কারণ আপনার ব্রাউজারটি সেই একই সাইট থেকে এটিতে পৌঁছায় যেখান থেকে টার্মিক্স পরিবেশিত হয়। কুকি পোর্টকে উপেক্ষা করে, তাই একটি ভিন্ন পোর্ট কোনো ভিন্ন পরিচয় নয়। টার্মিক্স ডেস্কটপ অ্যাপ ব্যবহার করুন, অথবা এই ওয়েব ইউআইটি একটি ভিন্ন হোস্টনেম থেকে পরিবেশন করুন।",
-    "retry": "পুনরায় চেষ্টা করুন",
-    "reload": "পুনরায় লোড করুন",
-    "copyUrl": "ইউআরএল কপি করুন",
-    "urlCopied": "URL কপি করা হয়েছে",
-    "copyFailed": "URL কপি করতে ব্যর্থ হয়েছে",
-    "openExternally": "বাইরে খুলুন",
-    "isolationUnavailable": "এই ব্রাউজারটি আপনার টারমিক্স সেশন থেকে ওয়েব এন্ডপয়েন্টগুলোকে আলাদা করতে পারে না। ক্রেডেনশিয়ালবিহীন আইফ্রেম সমর্থন করে এমন একটি ব্রাউজার ব্যবহার করুন।",
-    "isolationNotice": "এমবেডেড পেজগুলো একটি আইসোলেটেড সেশন ব্যবহার করে। যেসব পেজের জন্য স্টোরেজ বা পপ-আপ সাইন-ইন প্রয়োজন, সেগুলোর জন্য ডেস্কটপ অ্যাপে একটি আইসোলেটেড উইন্ডো ব্যবহার করুন।",
-    "openIsolatedWindow": "বিচ্ছিন্ন জানালা খুলুন"
-  },
-  "hosts": {
-    "tabWebUi": "ওয়েব UI",
-    "webUiEndpointLabel": "শেষবিন্দু {{number}}",
-    "webUiIntegration": "ওয়েব UI",
-    "webUiEndpointsSection": "এন্ডপয়েন্ট",
-    "webUiNoEndpoints": "এখনো কোনো ওয়েব এন্ডপয়েন্ট নেই। একটি তৈরি করতে 'অ্যাড এন্ডপয়েন্ট' ব্যবহার করুন।",
-    "webUiEndpointsDisabled": "এন্ডপয়েন্ট যোগ করতে উপরের ওয়েব UI চালু করুন।",
-    "webUiRequirementsText": "আপনার ব্রাউজার একটি সরাসরি এন্ডপয়েন্ট খোলে, তাই এর পোর্টটি এখান থেকে অ্যাক্সেসযোগ্য হতে হবে। এর পরিবর্তে, Termix এই হোস্টের SSH সংযোগের মাধ্যমে একটি SSH টানেল খোলে, তাই পোর্টটি শুধুমাত্র হোস্ট থেকে অ্যাক্সেসযোগ্য হলেই চলে।",
-    "enableWebUi": "ওয়েব এন্ডপয়েন্টগুলি সক্ষম করুন",
-    "enableWebUiDesc": "সাইডবার থেকে এই হোস্টের ওয়েব ইন্টারফেসগুলো খুলুন।",
-    "webUiAddEndpoint": "এন্ডপয়েন্ট যোগ করুন",
-    "webUiAddress": "ঠিকানা",
-    "webUiOpening": "উদ্বোধন",
-    "webUiBindHostDesc": "যেখানে ব্যাকএন্ড ফরওয়ার্ডটি বাইন্ড করে। 127.0.0.1-এর জন্য এই স্থানটি খালি রাখুন, কারণ শুধুমাত্র Termix চালিত মেশিনটিই এখানে পৌঁছাতে পারে।",
-    "webUiBindHostExposed": "এই অ্যাড্রেসটি টারমিক্স মেশিনের বাইরেও অ্যাক্সেসযোগ্য, তাই যে কেউ পোর্টটিতে অ্যাক্সেস করতে পারলেই কোনো লগইন ছাড়াই এই ওয়েব UI-টি ব্যবহার করতে পারবে।",
-    "webUiLocalPort": "স্থানীয় বন্দর",
-    "webUiLocalPortAuto": "স্বয়ংক্রিয়",
-    "webUiLocalPortDesc": "ফরওয়ার্ডটি কোন পোর্টে শুনবে। সিস্টেমকে বেছে নিতে দেওয়ার জন্য এটি খালি রাখুন, অথবা যখন পোর্টটি আগে থেকে জানা প্রয়োজন, যেমন কোনো কন্টেইনার যা এটি প্রকাশ করে, তখন একটি সেট করুন।",
-    "webUiNewEndpointLabel": "নতুন এন্ডপয়েন্ট",
-    "webUiLabel": "লেবেল",
-    "webUiScheme": "পরিকল্পনা",
-    "webUiPort": "বন্দর",
-    "webUiPath": "পথ",
-    "webUiAccess": "অ্যাক্সেস",
-    "webUiAccessDirect": "সরাসরি",
-    "webUiAccessTunnel": "এসএসএইচ টানেল",
-    "webUiAccessTunnelUnavailable": "একটি SSH টানেলের জন্য এই হোস্টে SSH সক্রিয় থাকতে হবে এবং সংযোগের উৎস হিসেবে এই ডিভাইসটি প্রয়োজন।",
-    "webUiRender": "খুলুন",
-    "webUiRenderExternal": "বিচ্ছিন্ন ডেস্কটপ উইন্ডো",
-    "webUiRenderEmbedded": "টার্মিক্স ট্যাব",
-    "webUiRenderEmbeddedDesc": "এমবেডিং-এর ক্ষেত্রে সর্বোচ্চ চেষ্টা করা হয়: কিছু ওয়েব ইন্টারফেস ফ্রেমে লোড হতে চায় না, এবং একই-সাইট কুকির উপর নির্ভরশীল লগইন একটি লুপে আটকে যেতে পারে। বাহ্যিক ব্রাউজারটি সবসময় কাজ করে।",
-    "webUiIgnoreCert": "অবৈধ সার্টিফিকেট অনুমোদন করুন",
-    "webUiIgnoreCertDesc": "শুধুমাত্র ডাইরেক্ট এন্ডপয়েন্টগুলোর জন্য প্রযোজ্য। লুপব্যাক ইতিমধ্যে অব্যাহতিপ্রাপ্ত, তাই টানেল এন্ডপয়েন্টগুলোর উপর এর কোনো প্রভাব নেই।",
-    "webUiRemoveEndpoint": "এন্ডপয়েন্ট সরান",
-    "webUiOpenFailed": "ওয়েব এন্ডপয়েন্ট খুলতে ব্যর্থ হয়েছে",
-    "bindHost": "হোস্টকে বাঁধুন"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/ca_ES.json b/plugins/web-endpoint/locales/translated/ca_ES.json
deleted file mode 100644
index 4ac16d568..000000000
--- a/plugins/web-endpoint/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "No s'ha seleccionat cap amfitrió",
-    "notFound": "Aquest punt final ja no existeix.",
-    "tunnelUnreachableFromBrowser": "Aquest punt final connecta a 127.0.0.1 a la màquina que executa Termix, a la qual el navegador no pot arribar. Establiu l'amfitrió d'enllaç del punt final a una adreça a la qual la màquina respongui, com ara 0.0.0.0, i doneu-li un port local fix.",
-    "tunnelSharesSessionCookie": "Si obriu aquest túnel, la vostra sessió de Termix s'enviaria al servei tunelitzat, perquè el vostre navegador hi arribaria amb el mateix nom d'amfitrió des del qual es serveix Termix. Les galetes ignoren el port, de manera que no es poden distingir. Feu servir l'aplicació d'escriptori de Termix o obriu Termix a localhost.",
-    "directSharesSessionCookie": "Si obriu aquest punt final, la vostra sessió de Termix s'hi enviaria, perquè el vostre navegador hi arriba al mateix lloc des d'on es serveix Termix. Les galetes ignoren el port, de manera que un port diferent no és una identitat diferent. Feu servir l'aplicació d'escriptori de Termix o serviu aquesta interfície d'usuari web des d'un nom d'amfitrió diferent.",
-    "retry": "Torna-ho a intentar",
-    "reload": "Torna a carregar",
-    "copyUrl": "Copia l'URL",
-    "urlCopied": "URL copiada",
-    "copyFailed": "No s'ha pogut copiar l'URL",
-    "openExternally": "Obre externament",
-    "isolationUnavailable": "Aquest navegador no pot aïllar els punts finals web de la vostra sessió de Termix. Feu servir un navegador que admeti iframes sense credencials.",
-    "isolationNotice": "Les pàgines incrustades utilitzen una sessió aïllada. Per a les pàgines que requereixen emmagatzematge o inici de sessió emergent, utilitzeu una finestra aïllada a l'aplicació d'escriptori.",
-    "openIsolatedWindow": "Finestra aïllada oberta"
-  },
-  "hosts": {
-    "tabWebUi": "Interfície d'usuari web",
-    "webUiEndpointLabel": "Punt final {{number}}",
-    "webUiIntegration": "Interfície d'usuari web",
-    "webUiEndpointsSection": "Punts finals",
-    "webUiNoEndpoints": "Encara no hi ha cap punt final web. Fes servir Afegeix punt final per crear-ne un.",
-    "webUiEndpointsDisabled": "Activeu la interfície web que hi ha a sobre per afegir punts finals.",
-    "webUiRequirementsText": "El navegador obre un punt final directe, de manera que el seu port ha de ser accessible des d'aquí. Termix obre un túnel SSH a través de la connexió SSH d'aquest host, de manera que el port només ha de ser accessible des de l'host.",
-    "enableWebUi": "Habilita els punts finals web",
-    "enableWebUiDesc": "Obriu les interfícies web d'aquest amfitrió des de la barra lateral.",
-    "webUiAddEndpoint": "Afegeix un punt final",
-    "webUiAddress": "Adreça",
-    "webUiOpening": "Obertura",
-    "webUiBindHostDesc": "On el backend enllaça amb el forward. Deixeu en blanc per a 127.0.0.1, que només pot assolir la màquina que executa Termix.",
-    "webUiBindHostExposed": "Aquesta adreça és accessible més enllà de la màquina Termix, de manera que qualsevol persona que pugui accedir al port obté aquesta interfície web sense necessitat d'iniciar sessió.",
-    "webUiLocalPort": "Port local",
-    "webUiLocalPortAuto": "Automàtic",
-    "webUiLocalPortDesc": "Port on escolta el reenviament. Deixeu-ho en blanc perquè el sistema el seleccioni o definiu-ne un quan el port s'hagi de conèixer per endavant, com ara un contenidor que el publica.",
-    "webUiNewEndpointLabel": "Nou punt final",
-    "webUiLabel": "Etiqueta",
-    "webUiScheme": "Esquema",
-    "webUiPort": "Port",
-    "webUiPath": "Camí",
-    "webUiAccess": "Accés",
-    "webUiAccessDirect": "Directe",
-    "webUiAccessTunnel": "Túnel SSH",
-    "webUiAccessTunnelUnavailable": "Un túnel SSH necessita SSH habilitat en aquest host i un origen de connexió d'aquest dispositiu.",
-    "webUiRender": "Obre en",
-    "webUiRenderExternal": "Finestra d'escriptori aïllada",
-    "webUiRenderEmbedded": "Pestanya Termix",
-    "webUiRenderEmbeddedDesc": "La incrustació és el millor esforç: algunes interfícies web es neguen a carregar-se en un marc i un inici de sessió que depèn de les galetes del mateix lloc pot repetir-se. El navegador extern sempre funciona.",
-    "webUiIgnoreCert": "Permetre certificat no vàlid",
-    "webUiIgnoreCertDesc": "Només punts finals directes. El bucle ja està exempt, per tant, això no té cap efecte sobre els punts finals del túnel.",
-    "webUiRemoveEndpoint": "Elimina el punt final",
-    "webUiOpenFailed": "No s'ha pogut obrir el punt final web.",
-    "bindHost": "Vincula l'amfitrió"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/cs_CZ.json b/plugins/web-endpoint/locales/translated/cs_CZ.json
deleted file mode 100644
index 05f96fa71..000000000
--- a/plugins/web-endpoint/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "Nebyl vybrán žádný hostitel",
-    "notFound": "Tento koncový bod již neexistuje.",
-    "tunnelUnreachableFromBrowser": "Tento koncový bod se tunelově připojuje k adrese 127.0.0.1 na počítači se spuštěným programem Termix, ke které se váš prohlížeč nemůže dostat. Nastavte Bind Host koncového bodu na adresu, na které počítač odpovídá, například 0.0.0.0, a přidělte mu pevný lokální port.",
-    "tunnelSharesSessionCookie": "Otevřením tohoto tunelu by se vaše relace Termixu odeslala na tunelovanou službu, protože by se k ní váš prohlížeč dostal na stejném hostitelském názvu, ze kterého je Termix obsluhován. Soubory cookie ignorují port, takže tyto dva servery nelze od sebe rozlišit. Použijte desktopovou aplikaci Termix nebo otevřete Termix na localhostu.",
-    "directSharesSessionCookie": "Otevřením tohoto koncového bodu by se vaše relace Termixu odeslala na něj, protože váš prohlížeč se k němu připojuje na stejném webu, ze kterého je Termix obsluhován. Soubory cookie port ignorují, takže jiný port nepředstavuje jinou identitu. Použijte desktopovou aplikaci Termix nebo toto webové uživatelské rozhraní obsluhujte z jiného názvu hostitele.",
-    "retry": "Zkusit znovu",
-    "reload": "Znovu načíst",
-    "copyUrl": "Kopírovat URL",
-    "urlCopied": "URL zkopírována",
-    "copyFailed": "Kopírování adresy URL se nezdařilo",
-    "openExternally": "Otevřít externě",
-    "isolationUnavailable": "Tento prohlížeč nedokáže izolovat webové koncové body od vaší relace Termix. Použijte prohlížeč s podporou iframe bez přihlašovacích údajů.",
-    "isolationNotice": "Vložené stránky používají izolovanou relaci. Pro stránky vyžadující úložiště nebo vyskakovací přihlášení použijte v desktopové aplikaci izolované okno.",
-    "openIsolatedWindow": "Otevřené izolované okno"
-  },
-  "hosts": {
-    "tabWebUi": "Webové uživatelské rozhraní",
-    "webUiEndpointLabel": "Koncový bod {{number}}",
-    "webUiIntegration": "Webové uživatelské rozhraní",
-    "webUiEndpointsSection": "Koncové body",
-    "webUiNoEndpoints": "Zatím žádné webové koncové body. Vytvořte si je pomocí možnosti Přidat koncový bod.",
-    "webUiEndpointsDisabled": "Zapněte webové uživatelské rozhraní výše a přidejte koncové body.",
-    "webUiRequirementsText": "Prohlížeč otevírá přímý koncový bod, takže jeho port musí být odtud dosažitelný. Termix místo toho otevírá SSH tunel přes SSH připojení tohoto hostitele, takže port musí být dostupný pouze z hostitele.",
-    "enableWebUi": "Povolit webové koncové body",
-    "enableWebUiDesc": "Otevřete webová rozhraní tohoto hostitele z postranního panelu.",
-    "webUiAddEndpoint": "Přidat koncový bod",
-    "webUiAddress": "Adresa",
-    "webUiOpening": "Otevírací",
-    "webUiBindHostDesc": "Kam se backend váže s forwardem. Pro 127.0.0.1, ke které má přístup pouze počítač se systémem Termix, nechte prázdné.",
-    "webUiBindHostExposed": "Tato adresa je dosažitelná i mimo počítač Termix, takže kdokoli, kdo má přístup k portu, získá toto webové rozhraní bez nutnosti přihlášení.",
-    "webUiLocalPort": "Místní port",
-    "webUiLocalPortAuto": "Automatický",
-    "webUiLocalPortDesc": "Na kterém portu naslouchá forwarding. Ponechte prázdné, pokud chcete, aby si systém vybral, nebo nastavte port, pokud musí být port znám předem, například v případě kontejneru, který jej publikuje.",
-    "webUiNewEndpointLabel": "Nový koncový bod",
-    "webUiLabel": "Označení",
-    "webUiScheme": "Systém",
-    "webUiPort": "Port",
-    "webUiPath": "Cesta",
-    "webUiAccess": "Přístup",
-    "webUiAccessDirect": "Řídit",
-    "webUiAccessTunnel": "SSH tunel",
-    "webUiAccessTunnelUnavailable": "SSH tunel vyžaduje povolené SSH na tomto hostiteli a původ připojení na tomto zařízení.",
-    "webUiRender": "Otevřít v",
-    "webUiRenderExternal": "Izolované okno plochy",
-    "webUiRenderEmbedded": "Záložka Termix",
-    "webUiRenderEmbeddedDesc": "Vkládání je nejlepším řešením: některá webová rozhraní se odmítají načíst v rámci a přihlášení, které se spoléhá na soubory cookie stejného webu, se může zacyklit. Externí prohlížeč funguje vždy.",
-    "webUiIgnoreCert": "Povolit neplatný certifikát",
-    "webUiIgnoreCertDesc": "Pouze přímé koncové body. Zpětná smyčka je již vyňata, takže to nemá žádný vliv na koncové body tunelu.",
-    "webUiRemoveEndpoint": "Odebrat koncový bod",
-    "webUiOpenFailed": "Nepodařilo se otevřít webový koncový bod",
-    "bindHost": "Vázat hostitele"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/da_DK.json b/plugins/web-endpoint/locales/translated/da_DK.json
deleted file mode 100644
index f57a73e6a..000000000
--- a/plugins/web-endpoint/locales/translated/da_DK.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "Ingen vært valgt",
-    "notFound": "Dette slutpunkt findes ikke længere.",
-    "tunnelUnreachableFromBrowser": "Dette endpoint tunnelerer til 127.0.0.1 på den maskine, der kører Termix, som din browser ikke kan nå. Indstil endpointens Bind Host til en adresse, som maskinen svarer på, f.eks. 0.0.0.0, og giv den en fast lokal port.",
-    "tunnelSharesSessionCookie": "Åbning af denne tunnel ville sende din Termix-session til den tunnelerede tjeneste, fordi din browser ville nå den på det samme værtsnavn, som Termix serveres fra. Cookies ignorerer porten, så de to kan ikke skelnes fra hinanden. Brug Termix-desktopappen, eller åbn Termix på localhost.",
-    "directSharesSessionCookie": "Åbning af dette slutpunkt ville sende din Termix-session til det, fordi din browser når det på det samme sted, som Termix serveres fra. Cookies ignorerer porten, så en anden port er ikke en anden identitet. Brug Termix-desktopappen, eller server denne webgrænseflade fra et andet værtsnavn.",
-    "retry": "Prøv igen",
-    "reload": "Genindlæs",
-    "copyUrl": "Kopiér URL",
-    "urlCopied": "URL kopieret",
-    "copyFailed": "Kunne ikke kopiere URL'en",
-    "openExternally": "Åbn eksternt",
-    "isolationUnavailable": "Denne browser kan ikke isolere web-slutpunkter fra din Termix-session. Brug en browser med understøttelse af iframes uden legitimationsoplysninger.",
-    "isolationNotice": "Integrerede sider bruger en isoleret session. For sider, der kræver lagerplads eller pop op-login, skal du bruge et isoleret vindue i desktop-appen.",
-    "openIsolatedWindow": "Åbn isoleret vindue"
-  },
-  "hosts": {
-    "tabWebUi": "Webgrænseflade",
-    "webUiEndpointLabel": "Endepunkt {{number}}",
-    "webUiIntegration": "Webgrænseflade",
-    "webUiEndpointsSection": "Endepunkter",
-    "webUiNoEndpoints": "Ingen web-slutpunkter endnu. Brug Tilføj slutpunkt til at oprette et.",
-    "webUiEndpointsDisabled": "Slå webgrænsefladen til ovenfor for at tilføje slutpunkter.",
-    "webUiRequirementsText": "Et direkte slutpunkt åbnes af din browser, så dens port skal kunne nås herfra. En SSH-tunnel åbnes i stedet af Termix over denne værts SSH-forbindelse, så porten skal kun kunne nås fra værten.",
-    "enableWebUi": "Aktivér webslutpunkter",
-    "enableWebUiDesc": "Åbn denne værts webgrænseflader fra sidebjælken.",
-    "webUiAddEndpoint": "Tilføj slutpunkt",
-    "webUiAddress": "Adresse",
-    "webUiOpening": "Åbning",
-    "webUiBindHostDesc": "Hvor backend binder forward. Lad feltet 127.0.0.1 stå tomt, som kun den maskine, der kører Termix, kan nå.",
-    "webUiBindHostExposed": "Denne adresse kan nås ud over Termix-maskinen, så alle, der kan nå porten, får denne webgrænseflade uden login.",
-    "webUiLocalPort": "Lokal havn",
-    "webUiLocalPortAuto": "Automatisk",
-    "webUiLocalPortDesc": "Hvilken port videresendelsen lytter på. Lad feltet stå tomt for at lade systemet vælge, eller angiv en port, når porten skal være kendt på forhånd, f.eks. en container, der udgiver den.",
-    "webUiNewEndpointLabel": "Nyt slutpunkt",
-    "webUiLabel": "Mærke",
-    "webUiScheme": "Ordning",
-    "webUiPort": "Havn",
-    "webUiPath": "Sti",
-    "webUiAccess": "Adgang",
-    "webUiAccessDirect": "Direkte",
-    "webUiAccessTunnel": "SSH-tunnel",
-    "webUiAccessTunnelUnavailable": "En SSH-tunnel kræver, at SSH er aktiveret på denne vært, og at denne enhed har en forbindelsesoprindelse.",
-    "webUiRender": "Åbn om",
-    "webUiRenderExternal": "Isoleret skrivebordsvindue",
-    "webUiRenderEmbedded": "Termix-fanen",
-    "webUiRenderEmbeddedDesc": "Indlejring er den bedste løsning: nogle webgrænseflader nægter at indlæse i en frame, og et login, der er afhængig af cookies fra samme websted, kan gå i løkke. Den eksterne browser fungerer altid.",
-    "webUiIgnoreCert": "Tillad ugyldigt certifikat",
-    "webUiIgnoreCertDesc": "Kun direkte slutpunkter. Loopback er allerede undtaget, så dette har ingen effekt på tunnelslutpunkter.",
-    "webUiRemoveEndpoint": "Fjern slutpunkt",
-    "webUiOpenFailed": "Kunne ikke åbne web-slutpunktet",
-    "bindHost": "Bind vært"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/de_DE.json b/plugins/web-endpoint/locales/translated/de_DE.json
deleted file mode 100644
index 92e6a14e7..000000000
--- a/plugins/web-endpoint/locales/translated/de_DE.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "Kein Host ausgewählt",
-    "notFound": "Dieser Endpunkt existiert nicht mehr.",
-    "tunnelUnreachableFromBrowser": "Dieser Endpunkt leitet eine Verbindung zu 127.0.0.1 auf dem Rechner weiter, auf dem Termix ausgeführt wird. Ihr Browser kann diese Adresse nicht erreichen. Legen Sie für den Endpunkt als Bind-Host eine Adresse fest, unter der dieser Rechner antwortet, z. B. 0.0.0.0, und weisen Sie ihm einen festen lokalen Port zu.",
-    "tunnelSharesSessionCookie": "Durch das Öffnen dieses Tunnels wird Ihre Termix-Sitzung an den getunnelten Dienst weitergeleitet, da Ihr Browser diesen unter demselben Hostnamen erreicht, unter dem Termix bereitgestellt wird. Cookies ignorieren den Port, daher können die beiden nicht unterschieden werden. Verwenden Sie die Termix-Desktop-App oder öffnen Sie Termix auf localhost.",
-    "directSharesSessionCookie": "Wenn Sie diesen Endpunkt öffnen, wird Ihre Termix-Sitzung dorthin gesendet, da Ihr Browser ihn über dieselbe Website erreicht, von der auch Termix bereitgestellt wird. Cookies ignorieren den Port, daher bedeutet ein anderer Port keine andere Identität. Verwenden Sie die Termix-Desktop-App oder stellen Sie diese Web-Oberfläche über einen anderen Hostnamen bereit.",
-    "retry": "Erneut versuchen",
-    "reload": "Neu laden",
-    "copyUrl": "URL kopieren",
-    "urlCopied": "URL kopiert",
-    "copyFailed": "URL konnte nicht kopiert werden",
-    "openExternally": "Extern öffnen",
-    "isolationUnavailable": "Dieser Browser kann Web-Endpunkte nicht von Ihrer Termix-Sitzung isolieren. Verwenden Sie einen Browser, der iFrames ohne Anmeldeinformationen unterstützt.",
-    "isolationNotice": "Eingebettete Seiten verwenden eine separate Sitzung. Für Seiten, die Speicherplatz benötigen oder eine Popup-Anmeldung erfordern, verwenden Sie ein separates Fenster in der Desktop-App.",
-    "openIsolatedWindow": "Isoliertes Fenster öffnen"
-  },
-  "hosts": {
-    "tabWebUi": "Web-Benutzeroberfläche",
-    "webUiEndpointLabel": "Endpunkt {{number}}",
-    "webUiIntegration": "Web-Benutzeroberfläche",
-    "webUiEndpointsSection": "Endpunkte",
-    "webUiNoEndpoints": "Noch keine Web-Endpunkte vorhanden. Verwenden Sie „Endpunkt hinzufügen“, um einen zu erstellen.",
-    "webUiEndpointsDisabled": "Aktivieren Sie die Web-Benutzeroberfläche oben, um Endpunkte hinzuzufügen.",
-    "webUiRequirementsText": "Ihr Browser öffnet einen direkten Endpunkt, daher muss dessen Port von hier aus erreichbar sein. Termix öffnet stattdessen einen SSH-Tunnel über die SSH-Verbindung dieses Hosts, sodass der Port nur vom Host aus erreichbar sein muss.",
-    "enableWebUi": "Web-Endpunkte aktivieren",
-    "enableWebUiDesc": "Öffnen Sie die Web-Oberflächen dieses Hosts über die Seitenleiste.",
-    "webUiAddEndpoint": "Endpunkt hinzufügen",
-    "webUiAddress": "Adresse",
-    "webUiOpening": "Öffnung",
-    "webUiBindHostDesc": "Hier bindet das Backend das Forwarding. Lassen Sie das Feld für 127.0.0.1 leer, da diese Adresse nur von dem Rechner aus erreichbar ist, auf dem Termix läuft.",
-    "webUiBindHostExposed": "Diese Adresse ist auch außerhalb des Termix-Rechners erreichbar, sodass jeder, der den Port erreichen kann, diese Web-Oberfläche ohne Anmeldung aufrufen kann.",
-    "webUiLocalPort": "Lokaler Port",
-    "webUiLocalPortAuto": "Automatisch",
-    "webUiLocalPortDesc": "Auf welchem Port der Forwarder lauscht. Lassen Sie das Feld leer, damit das System einen Port auswählt, oder geben Sie einen Port an, wenn dieser im Voraus bekannt sein muss, z. B. von einem Container, der ihn veröffentlicht.",
-    "webUiNewEndpointLabel": "Neuer Endpunkt",
-    "webUiLabel": "Label",
-    "webUiScheme": "Schema",
-    "webUiPort": "Port",
-    "webUiPath": "Pfad",
-    "webUiAccess": "Zugang",
-    "webUiAccessDirect": "Direkt",
-    "webUiAccessTunnel": "SSH-Tunnel",
-    "webUiAccessTunnelUnavailable": "Für einen SSH-Tunnel muss SSH auf diesem Host aktiviert sein und dieses Gerät als Verbindungsursprung verwendet werden.",
-    "webUiRender": "Öffnen in",
-    "webUiRenderExternal": "Isoliertes Desktop-Fenster",
-    "webUiRenderEmbedded": "Termix-Registerkarte",
-    "webUiRenderEmbeddedDesc": "Die Einbettung funktioniert nach bestem Bemühen: Manche Web-Oberflächen lassen sich nicht in einem Frame laden, und ein Login, der auf Same-Site-Cookies basiert, kann in einer Endlosschleife hängen bleiben. Der externe Browser funktioniert immer.",
-    "webUiIgnoreCert": "Ungültiges Zertifikat zulassen",
-    "webUiIgnoreCertDesc": "Nur direkte Endpunkte. Loopback ist bereits ausgenommen, daher hat dies keine Auswirkungen auf Tunnelendpunkte.",
-    "webUiRemoveEndpoint": "Endpunkt entfernen",
-    "webUiOpenFailed": "Der Web-Endpunkt konnte nicht geöffnet werden.",
-    "bindHost": "Bind-Host"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/el_GR.json b/plugins/web-endpoint/locales/translated/el_GR.json
deleted file mode 100644
index 6755e9bc2..000000000
--- a/plugins/web-endpoint/locales/translated/el_GR.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "Δεν έχει επιλεγεί κεντρικός υπολογιστής",
-    "notFound": "Αυτό το τελικό σημείο δεν υπάρχει πλέον.",
-    "tunnelUnreachableFromBrowser": "Αυτό το τελικό σημείο συνδέεται με την διεύθυνση 127.0.0.1 στον υπολογιστή που εκτελεί το Termix, στην οποία δεν μπορεί να φτάσει το πρόγραμμα περιήγησής σας. Ορίστε τον Bind Host του τελικού σημείου σε μια διεύθυνση στην οποία απαντά ο υπολογιστής, όπως 0.0.0.0, και δώστε του μια σταθερή τοπική θύρα.",
-    "tunnelSharesSessionCookie": "Το άνοιγμα αυτής της σήραγγας θα στείλει την συνεδρία σας στο Termix στην υπηρεσία που βρίσκεται σε σήραγγα, επειδή το πρόγραμμα περιήγησής σας θα φτάσει σε αυτήν με το ίδιο όνομα κεντρικού υπολογιστή από το οποίο εξυπηρετείται το Termix. Τα cookies αγνοούν τη θύρα, επομένως δεν είναι δυνατή η διάκριση μεταξύ των δύο. Χρησιμοποιήστε την εφαρμογή Termix για υπολογιστές ή ανοίξτε το Termix στο localhost.",
-    "directSharesSessionCookie": "Το άνοιγμα αυτού του τελικού σημείου θα στείλει την περίοδο λειτουργίας του Termix σε αυτό, επειδή το πρόγραμμα περιήγησής σας φτάνει σε αυτό από τον ίδιο ιστότοπο από τον οποίο παρέχεται το Termix. Τα cookies αγνοούν τη θύρα, επομένως μια διαφορετική θύρα δεν αποτελεί διαφορετική ταυτότητα. Χρησιμοποιήστε την εφαρμογή Termix για υπολογιστές ή εκτελέστε αυτό το περιβάλλον χρήστη ιστού από διαφορετικό όνομα κεντρικού υπολογιστή.",
-    "retry": "Δοκιμάζω πάλι",
-    "reload": "Γεμίζω πάλι",
-    "copyUrl": "Αντιγραφή URL",
-    "urlCopied": "Η διεύθυνση URL αντιγράφηκε",
-    "copyFailed": "Η αντιγραφή της διεύθυνσης URL απέτυχε",
-    "openExternally": "Άνοιγμα εξωτερικά",
-    "isolationUnavailable": "Αυτό το πρόγραμμα περιήγησης δεν μπορεί να απομονώσει τα τελικά σημεία ιστού από την περίοδο λειτουργίας Termix. Χρησιμοποιήστε ένα πρόγραμμα περιήγησης με υποστήριξη iframe χωρίς διαπιστευτήρια.",
-    "isolationNotice": "Οι ενσωματωμένες σελίδες χρησιμοποιούν μια απομονωμένη περίοδο σύνδεσης. Για σελίδες που απαιτούν χώρο αποθήκευσης ή σύνδεση σε αναδυόμενο παράθυρο, χρησιμοποιήστε ένα απομονωμένο παράθυρο στην εφαρμογή για υπολογιστές.",
-    "openIsolatedWindow": "Άνοιγμα απομονωμένου παραθύρου"
-  },
-  "hosts": {
-    "tabWebUi": "Διεπαφή χρήστη ιστού",
-    "webUiEndpointLabel": "Τελικό σημείο {{number}}",
-    "webUiIntegration": "Διεπαφή χρήστη ιστού",
-    "webUiEndpointsSection": "Τελικά σημεία",
-    "webUiNoEndpoints": "Δεν υπάρχουν ακόμη τελικά σημεία ιστού. Χρησιμοποιήστε την επιλογή Προσθήκη τελικού σημείου για να δημιουργήσετε ένα.",
-    "webUiEndpointsDisabled": "Ενεργοποιήστε το περιβάλλον χρήστη ιστού παραπάνω για να προσθέσετε τελικά σημεία.",
-    "webUiRequirementsText": "Ένα άμεσο τελικό σημείο ανοίγει από το πρόγραμμα περιήγησής σας, επομένως η θύρα του πρέπει να είναι προσβάσιμη από εδώ. Μια σήραγγα SSH ανοίγει από το Termix μέσω της σύνδεσης SSH αυτού του κεντρικού υπολογιστή, επομένως η θύρα πρέπει να είναι προσβάσιμη μόνο από τον κεντρικό υπολογιστή.",
-    "enableWebUi": "Ενεργοποίηση τελικών σημείων ιστού",
-    "enableWebUiDesc": "Ανοίξτε τις διεπαφές ιστού αυτού του κεντρικού υπολογιστή από την πλαϊνή γραμμή.",
-    "webUiAddEndpoint": "Προσθήκη τελικού σημείου",
-    "webUiAddress": "Διεύθυνση",
-    "webUiOpening": "Ανοιγμα",
-    "webUiBindHostDesc": "Όπου το backend συνδέει το forward. Αφήστε κενό για το 127.0.0.1, το οποίο μπορεί να φτάσει μόνο το μηχάνημα που εκτελεί το Termix.",
-    "webUiBindHostExposed": "Αυτή η διεύθυνση είναι προσβάσιμη πέρα από το μηχάνημα Termix, επομένως όποιος μπορεί να φτάσει στη θύρα λαμβάνει αυτό το περιβάλλον χρήστη ιστού χωρίς σύνδεση.",
-    "webUiLocalPort": "Τοπικό Λιμάνι",
-    "webUiLocalPortAuto": "Αυτόματο",
-    "webUiLocalPortDesc": "Σε ποια θύρα ακούει η προώθηση. Αφήστε το κενό για να επιλέξει το σύστημα ή ορίστε μία όταν η θύρα πρέπει να είναι γνωστή εκ των προτέρων, όπως ένα κοντέινερ που τη δημοσιεύει.",
-    "webUiNewEndpointLabel": "Νέο τελικό σημείο",
-    "webUiLabel": "Επιγραφή",
-    "webUiScheme": "Σχέδιο",
-    "webUiPort": "Λιμάνι",
-    "webUiPath": "Μονοπάτι",
-    "webUiAccess": "Πρόσβαση",
-    "webUiAccessDirect": "Απευθείας",
-    "webUiAccessTunnel": "Σήραγγα SSH",
-    "webUiAccessTunnelUnavailable": "Μια σήραγγα SSH απαιτεί ενεργοποιημένο SSH σε αυτόν τον κεντρικό υπολογιστή και μια προέλευση σύνδεσης αυτής της συσκευής.",
-    "webUiRender": "Άνοιγμα σε",
-    "webUiRenderExternal": "Απομονωμένο παράθυρο επιφάνειας εργασίας",
-    "webUiRenderEmbedded": "Καρτέλα Termix",
-    "webUiRenderEmbeddedDesc": "Η ενσωμάτωση είναι η καλύτερη δυνατή προσπάθεια: ορισμένες διεπαφές ιστού αρνούνται να φορτώσουν σε ένα πλαίσιο και μια σύνδεση που βασίζεται σε cookies του ίδιου ιστότοπου ενδέχεται να επαναλαμβάνεται. Το εξωτερικό πρόγραμμα περιήγησης λειτουργεί πάντα.",
-    "webUiIgnoreCert": "Να επιτρέπεται το μη έγκυρο πιστοποιητικό",
-    "webUiIgnoreCertDesc": "Μόνο άμεσα τελικά σημεία. Η επαναφορά μέσω βρόχου εξαιρείται ήδη, επομένως αυτό δεν έχει καμία επίδραση στα τελικά σημεία σήραγγας.",
-    "webUiRemoveEndpoint": "Αφαίρεση τελικού σημείου",
-    "webUiOpenFailed": "Αποτυχία ανοίγματος του τελικού σημείου ιστού",
-    "bindHost": "Bind Host"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/es_ES.json b/plugins/web-endpoint/locales/translated/es_ES.json
deleted file mode 100644
index 00c0f1b61..000000000
--- a/plugins/web-endpoint/locales/translated/es_ES.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "Ningún host seleccionado",
-    "notFound": "Este punto final ya no existe.",
-    "tunnelUnreachableFromBrowser": "Este punto final se conecta mediante túnel a la dirección IP 127.0.0.1 de la máquina que ejecuta Termix, a la que su navegador no puede acceder. Configure el host de enlace del punto final con una dirección a la que la máquina responda, como 0.0.0.0, y asígnele un puerto local fijo.",
-    "tunnelSharesSessionCookie": "Al abrir este túnel, tu sesión de Termix se conectará al servicio tunelizado, ya que tu navegador accederá a él a través del mismo nombre de host desde el que se sirve Termix. Las cookies no tienen en cuenta el puerto, por lo que no se puede distinguir entre ambos. Usa la aplicación de escritorio de Termix o abre Termix en localhost.",
-    "directSharesSessionCookie": "Al abrir este punto final, tu sesión de Termix se redirigirá a él, ya que tu navegador lo alcanza desde el mismo sitio donde se sirve Termix. Las cookies ignoran el puerto, por lo que un puerto diferente no implica una identidad diferente. Usa la aplicación de escritorio de Termix o accede a esta interfaz web desde un nombre de host diferente.",
-    "retry": "Reintentar",
-    "reload": "Recargar",
-    "copyUrl": "Copiar URL",
-    "urlCopied": "URL copiada",
-    "copyFailed": "Error al copiar la URL",
-    "openExternally": "Abrir externamente",
-    "isolationUnavailable": "Este navegador no puede aislar los puntos finales web de su sesión de Termix. Utilice un navegador compatible con iframes sin credenciales.",
-    "isolationNotice": "Las páginas integradas utilizan una sesión aislada. Para las páginas que requieren almacenamiento o inicio de sesión emergente, utilice una ventana aislada en la aplicación de escritorio.",
-    "openIsolatedWindow": "Abrir ventana aislada"
-  },
-  "hosts": {
-    "tabWebUi": "Interfaz de usuario web",
-    "webUiEndpointLabel": "Punto final {{number}}",
-    "webUiIntegration": "Interfaz de usuario web",
-    "webUiEndpointsSection": "Puntos finales",
-    "webUiNoEndpoints": "Aún no hay puntos de acceso web. Utilice la opción \"Agregar punto de acceso\" para crear uno.",
-    "webUiEndpointsDisabled": "Active la interfaz web que aparece arriba para añadir puntos finales.",
-    "webUiRequirementsText": "Tu navegador abre un punto final directo, por lo que su puerto debe ser accesible desde aquí. En cambio, Termix abre un túnel SSH a través de la conexión SSH de este host, por lo que el puerto solo tiene que ser accesible desde el host.",
-    "enableWebUi": "Habilitar puntos finales web",
-    "enableWebUiDesc": "Abra las interfaces web de este host desde la barra lateral.",
-    "webUiAddEndpoint": "Agregar punto final",
-    "webUiAddress": "Dirección",
-    "webUiOpening": "Apertura",
-    "webUiBindHostDesc": "Donde el backend enlaza el forward. Deje en blanco para 127.0.0.1, al que solo puede acceder la máquina que ejecuta Termix.",
-    "webUiBindHostExposed": "Esta dirección es accesible desde fuera de la máquina Termix, por lo que cualquiera que pueda acceder al puerto obtiene esta interfaz web sin necesidad de iniciar sesión.",
-    "webUiLocalPort": "Puerto local",
-    "webUiLocalPortAuto": "Automático",
-    "webUiLocalPortDesc": "En qué puerto escucha el reenvío. Déjelo en blanco para que el sistema lo seleccione automáticamente, o establezca uno cuando sea necesario conocer el puerto de antemano, como en el caso de un contenedor que lo publica.",
-    "webUiNewEndpointLabel": "Nuevo punto final",
-    "webUiLabel": "Etiqueta",
-    "webUiScheme": "Esquema",
-    "webUiPort": "Puerto",
-    "webUiPath": "Ruta",
-    "webUiAccess": "Acceso",
-    "webUiAccessDirect": "Directa",
-    "webUiAccessTunnel": "Túnel SSH",
-    "webUiAccessTunnelUnavailable": "Para que exista un túnel SSH, es necesario que SSH esté habilitado en este host y que el origen de la conexión sea este dispositivo.",
-    "webUiRender": "Abrir en",
-    "webUiRenderExternal": "Ventana de escritorio aislada",
-    "webUiRenderEmbedded": "pestaña Termix",
-    "webUiRenderEmbeddedDesc": "La incrustación es un intento desesperado: algunas interfaces web se niegan a cargarse dentro de un marco, y un inicio de sesión que dependa de cookies del mismo sitio puede entrar en un bucle. El navegador externo siempre funciona.",
-    "webUiIgnoreCert": "Permitir certificado no válido",
-    "webUiIgnoreCertDesc": "Solo se aplican puntos finales directos. Loopback ya está exento, por lo que esto no afecta a los puntos finales de túnel.",
-    "webUiRemoveEndpoint": "Eliminar punto final",
-    "webUiOpenFailed": "No se pudo abrir el punto final web.",
-    "bindHost": "Host de enlace"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/fi_FI.json b/plugins/web-endpoint/locales/translated/fi_FI.json
deleted file mode 100644
index b2d864867..000000000
--- a/plugins/web-endpoint/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "Ei valittua isäntää",
-    "notFound": "Tätä päätepistettä ei ole enää olemassa.",
-    "tunnelUnreachableFromBrowser": "Tämä päätepiste muodostaa tunnelin Termixiä käyttävän koneen osoitteeseen 127.0.0.1, johon selaimesi ei pääse. Aseta päätepisteen Bind Host -arvoksi osoitteen, jolla kone vastaa, kuten 0.0.0.0, ja anna sille kiinteä paikallinen portti.",
-    "tunnelSharesSessionCookie": "Tämän tunnelin avaaminen lähettäisi Termix-istuntosi tunneloituun palveluun, koska selaimesi päätyisi siihen samalla isäntänimellä, josta Termixiä palvellaan. Evästeet jättävät portin huomiotta, joten niitä ei voida erottaa toisistaan. Käytä Termix-työpöytäsovellusta tai avaa Termix paikallisessa koneessa.",
-    "directSharesSessionCookie": "Tämän päätepisteen avaaminen lähettäisi Termix-istuntosi siihen, koska selaimesi käyttää sitä samalla sivustolla, josta Termixiä käytetään. Evästeet eivät huomioi porttia, joten eri portti ei ole eri identiteetti. Käytä Termix-työpöytäsovellusta tai käytä tätä verkkokäyttöliittymää eri isäntänimellä.",
-    "retry": "Yritä uudelleen",
-    "reload": "Lataa uudelleen",
-    "copyUrl": "Kopioi URL-osoite",
-    "urlCopied": "URL-osoite kopioitu",
-    "copyFailed": "URL-osoitteen kopiointi epäonnistui",
-    "openExternally": "Avaa ulkopuolelta",
-    "isolationUnavailable": "Tämä selain ei voi eristää verkkopäätepisteitä Termix-istunnostasi. Käytä selainta, joka tukee tunnistetiedotonta iframe-kehystä.",
-    "isolationNotice": "Upotetut sivut käyttävät eristettyä istuntoa. Sivuille, jotka vaativat tallennustilaa tai ponnahdusikkunakirjautumista, käytä eristettyä ikkunaa työpöytäsovelluksessa.",
-    "openIsolatedWindow": "Avaa eristetty ikkuna"
-  },
-  "hosts": {
-    "tabWebUi": "Verkkokäyttöliittymä",
-    "webUiEndpointLabel": "Päätepiste {{number}}",
-    "webUiIntegration": "Verkkokäyttöliittymä",
-    "webUiEndpointsSection": "Päätepisteet",
-    "webUiNoEndpoints": "Ei vielä verkkopäätepisteitä. Luo sellainen Lisää päätepiste -toiminnolla.",
-    "webUiEndpointsDisabled": "Ota yllä oleva verkkokäyttöliittymä käyttöön lisätäksesi päätepisteitä.",
-    "webUiRequirementsText": "Selaimesi avaa suoran päätepisteen, joten sen portin on oltava tavoitettavissa täältä. Termix avaa SSH-tunnelin tämän isännän SSH-yhteyden kautta, joten portin on oltava tavoitettavissa vain isännästä.",
-    "enableWebUi": "Ota käyttöön verkkopäätepisteet",
-    "enableWebUiDesc": "Avaa tämän isännän web-käyttöliittymät sivupalkista.",
-    "webUiAddEndpoint": "Lisää päätepiste",
-    "webUiAddress": "Osoite",
-    "webUiOpening": "Avaaminen",
-    "webUiBindHostDesc": "Mihin taustajärjestelmä sitoo eteenpäin suuntautuvan järjestelmän. Jätä tyhjäksi 127.0.0.1, johon vain Termixiä suorittava kone pääsee käsiksi.",
-    "webUiBindHostExposed": "Tämä osoite on saavutettavissa Termix-koneen ulkopuolelta, joten kuka tahansa, joka pääsee portin kautta, saa tämän web-käyttöliittymän ilman kirjautumista.",
-    "webUiLocalPort": "Paikallinen satama",
-    "webUiLocalPortAuto": "Automaattinen",
-    "webUiLocalPortDesc": "Mitä porttia edelleenlähetys kuuntelee. Jätä tyhjäksi, jos haluat järjestelmän valitsevan portin, tai aseta portti etukäteen, kuten esimerkiksi säilö, joka julkaisee sen.",
-    "webUiNewEndpointLabel": "Uusi päätepiste",
-    "webUiLabel": "Tarra",
-    "webUiScheme": "Järjestelmä",
-    "webUiPort": "Portti",
-    "webUiPath": "Polku",
-    "webUiAccess": "Pääsy",
-    "webUiAccessDirect": "Suoraan",
-    "webUiAccessTunnel": "SSH-tunneli",
-    "webUiAccessTunnelUnavailable": "SSH-tunneli vaatii SSH:n käyttöönoton tällä isännöintikoneella ja yhteyden alkuperän tällä laitteella.",
-    "webUiRender": "Avaa",
-    "webUiRenderExternal": "Eristetty työpöytäikkuna",
-    "webUiRenderEmbedded": "Termix-välilehti",
-    "webUiRenderEmbeddedDesc": "Upottaminen on parasta: jotkin verkkoliittymät kieltäytyvät latautumasta kehykseen, ja saman sivuston evästeisiin perustuva kirjautuminen voi tapahtua silmukassa. Ulkoinen selain toimii aina.",
-    "webUiIgnoreCert": "Salli virheellinen varmenne",
-    "webUiIgnoreCertDesc": "Vain suorat päätepisteet. Loopback on jo vapautettu, joten tällä ei ole vaikutusta tunnelin päätepisteisiin.",
-    "webUiRemoveEndpoint": "Poista päätepiste",
-    "webUiOpenFailed": "Verkkopäätepisteen avaaminen epäonnistui",
-    "bindHost": "Sido isäntä"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/fr_FR.json b/plugins/web-endpoint/locales/translated/fr_FR.json
deleted file mode 100644
index 7893564b8..000000000
--- a/plugins/web-endpoint/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "Aucun hôte sélectionné",
-    "notFound": "Ce point de terminaison n'existe plus.",
-    "tunnelUnreachableFromBrowser": "Ce point de terminaison établit un tunnel vers l'adresse 127.0.0.1 sur la machine exécutant Termix, adresse inaccessible à votre navigateur. Configurez l'hôte de liaison du point de terminaison sur une adresse à laquelle la machine répond, par exemple 0.0.0.0, et attribuez-lui un port local fixe.",
-    "tunnelSharesSessionCookie": "L'ouverture de ce tunnel redirigerait votre session Termix vers le service tunnelisé, car votre navigateur y accéderait via le même nom d'hôte que celui utilisé par Termix. Les cookies ignorent le port, il est donc impossible de les distinguer. Utilisez l'application de bureau Termix ou ouvrez Termix en local.",
-    "directSharesSessionCookie": "Ouvrir ce point de terminaison redirigerait votre session Termix vers celui-ci, car votre navigateur y accède depuis le même site que celui où Termix est hébergé. Les cookies ignorent le port ; un port différent ne constitue donc pas une identité différente. Utilisez l’application de bureau Termix ou hébergez cette interface web depuis un autre nom d’hôte.",
-    "retry": "Réessayer",
-    "reload": "Recharger",
-    "copyUrl": "Copier l'URL",
-    "urlCopied": "URL copiée",
-    "copyFailed": "Impossible de copier l'URL",
-    "openExternally": "Ouvrir avec l’éditeur externe",
-    "isolationUnavailable": "Ce navigateur ne permet pas d'isoler les points de terminaison Web de votre session Termix. Veuillez utiliser un navigateur compatible avec les iframes sans authentification.",
-    "isolationNotice": "Les pages intégrées utilisent une session isolée. Pour les pages nécessitant un stockage ou une connexion via une fenêtre contextuelle, utilisez une fenêtre isolée dans l'application de bureau.",
-    "openIsolatedWindow": "Ouvrir une fenêtre isolée"
-  },
-  "hosts": {
-    "tabWebUi": "Interface utilisateur Web",
-    "webUiEndpointLabel": "Point de terminaison {{number}}",
-    "webUiIntegration": "Interface utilisateur Web",
-    "webUiEndpointsSection": "Points d'extrémité",
-    "webUiNoEndpoints": "Aucun point de terminaison web pour le moment. Utilisez « Ajouter un point de terminaison » pour en créer un.",
-    "webUiEndpointsDisabled": "Activez l'interface Web ci-dessus pour ajouter des points de terminaison.",
-    "webUiRequirementsText": "Votre navigateur ouvre un point de terminaison direct ; son port doit donc être accessible depuis ici. Termix, quant à lui, ouvre un tunnel SSH via la connexion SSH de cet hôte ; le port doit donc seulement être accessible depuis l'hôte.",
-    "enableWebUi": "Activer les points de terminaison Web",
-    "enableWebUiDesc": "Ouvrez les interfaces web de cet hébergeur depuis la barre latérale.",
-    "webUiAddEndpoint": "Ajouter un point de terminaison",
-    "webUiAddress": "Adresse",
-    "webUiOpening": "Ouverture",
-    "webUiBindHostDesc": "Où le serveur d'arrière-plan lie le serveur de transfert. Laissez vide pour 127.0.0.1, adresse accessible uniquement par la machine exécutant Termix.",
-    "webUiBindHostExposed": "Cette adresse est accessible au-delà de la machine Termix, donc toute personne pouvant accéder au port obtient cette interface web sans avoir à se connecter.",
-    "webUiLocalPort": "Port local",
-    "webUiLocalPortAuto": "Automatique",
-    "webUiLocalPortDesc": "Port d'écoute du serveur de redirection. Laissez ce champ vide pour laisser le système choisir le port, ou spécifiez-en un si celui-ci doit être connu à l'avance, par exemple pour un conteneur qui le publie.",
-    "webUiNewEndpointLabel": "Nouveau point de terminaison",
-    "webUiLabel": "Étiquette",
-    "webUiScheme": "Schème",
-    "webUiPort": "Port",
-    "webUiPath": "Chemin",
-    "webUiAccess": "Accéder",
-    "webUiAccessDirect": "Direct",
-    "webUiAccessTunnel": "Tunnel SSH",
-    "webUiAccessTunnelUnavailable": "Un tunnel SSH nécessite que SSH soit activé sur cet hôte et que la connexion provienne de cet appareil.",
-    "webUiRender": "Ouvrir dans",
-    "webUiRenderExternal": "Fenêtre de bureau isolée",
-    "webUiRenderEmbedded": "Onglet Termix",
-    "webUiRenderEmbeddedDesc": "L'intégration est possible dans les meilleures conditions : certaines interfaces web refusent de se charger dans un cadre, et une connexion reposant sur les cookies du même site peut générer une boucle. Le navigateur externe fonctionne toujours.",
-    "webUiIgnoreCert": "Autoriser les certificats invalides",
-    "webUiIgnoreCertDesc": "Seuls les points de terminaison directs sont concernés. Les points de terminaison de bouclage sont déjà exemptés ; cette mesure n’a donc aucun impact sur les points de terminaison de tunnel.",
-    "webUiRemoveEndpoint": "Supprimer le point de terminaison",
-    "webUiOpenFailed": "Impossible d'ouvrir le point de terminaison Web",
-    "bindHost": "Hôte de liaison"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/he_IL.json b/plugins/web-endpoint/locales/translated/he_IL.json
deleted file mode 100644
index 0f0247cd7..000000000
--- a/plugins/web-endpoint/locales/translated/he_IL.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "לא נבחר מארח",
-    "notFound": "נקודת קצה זו אינה קיימת עוד.",
-    "tunnelUnreachableFromBrowser": "נקודת קצה זו עוברת ל-127.0.0.1 במחשב בו פועל Termix, שאליה הדפדפן שלך אינו יכול להגיע. הגדר את Bind Host של נקודת הקצה לכתובת שעליה המכונה עונה, כגון 0.0.0.0, ותן לה יציאה מקומית קבועה.",
-    "tunnelSharesSessionCookie": "פתיחת מנהרה זו תשלח את סשן Termix שלך לשירות המנהר, מכיוון שהדפדפן שלך יגיע אליו באותו שם מארח שממנו Termix מוגש. קובצי Cookie מתעלמים מהפורט, כך שלא ניתן להבחין ביניהם. השתמש באפליקציית שולחן העבודה של Termix, או פתח את Termix ב-localhost.",
-    "directSharesSessionCookie": "פתיחת נקודת קצה זו תשלח אליה את סשן Termix שלך, מכיוון שהדפדפן שלך מגיע אליה באותו אתר שממנו Termix מוגש. קובצי Cookie מתעלמים מהפורט, כך שפורט שונה אינו זהות שונה. השתמש באפליקציית שולחן העבודה של Termix, או שרת ממשק משתמש אינטרנט זה משם מארח אחר.",
-    "retry": "נסה שוב",
-    "reload": "לִטעוֹן מִחָדָשׁ",
-    "copyUrl": "העתקת כתובת URL",
-    "urlCopied": "כתובת האתר הועתקה",
-    "copyFailed": "נכשלה העתקת כתובת ה-URL",
-    "openExternally": "פתוח חיצונית",
-    "isolationUnavailable": "דפדפן זה אינו יכול לבודד נקודות קצה של אינטרנט מהפעלת Termix שלך. השתמש בדפדפן עם תמיכה ב-iframe ללא אישורים.",
-    "isolationNotice": "דפים מוטמעים משתמשים בהפעלה מבודדת. עבור דפים הדורשים אחסון או כניסה קופצת, השתמשו בחלון מבודד באפליקציית שולחן העבודה.",
-    "openIsolatedWindow": "פתח חלון מבודד"
-  },
-  "hosts": {
-    "tabWebUi": "ממשק משתמש אינטרנטי",
-    "webUiEndpointLabel": "נקודת קצה {{number}}",
-    "webUiIntegration": "ממשק משתמש אינטרנטי",
-    "webUiEndpointsSection": "נקודות קצה",
-    "webUiNoEndpoints": "אין עדיין נקודות קצה באינטרנט. השתמש באפשרות \"הוסף נקודת קצה\" כדי ליצור אחת.",
-    "webUiEndpointsDisabled": "הפעל את ממשק המשתמש של האינטרנט למעלה כדי להוסיף נקודות קצה.",
-    "webUiRequirementsText": "נקודת קצה ישירה נפתחת על ידי הדפדפן שלך, כך שהפורט שלה חייב להיות נגיש מכאן. מנהרת SSH נפתחת על ידי Termix דרך חיבור ה-SSH של מחשב מארח זה, כך שהפורט צריך להיות נגיש רק מהמארח.",
-    "enableWebUi": "הפעלת נקודות קצה של האינטרנט",
-    "enableWebUiDesc": "פתח את ממשקי האינטרנט של מארח זה מסרגל הצד.",
-    "webUiAddEndpoint": "הוסף נקודת קצה",
-    "webUiAddress": "כְּתוֹבֶת",
-    "webUiOpening": "פְּתִיחָה",
-    "webUiBindHostDesc": "היכן שה-backend קושר את forward. השאר ריק עבור 127.0.0.1, שאליו רק מכונה שמריץ את Termix יכולה להגיע.",
-    "webUiBindHostExposed": "כתובת זו נגישה מעבר למכונת ה-Termix, כך שכל מי שיכול להגיע לפורט מקבל ממשק משתמש אינטרנטי זה ללא צורך בכניסה.",
-    "webUiLocalPort": "נמל מקומי",
-    "webUiLocalPortAuto": "אוֹטוֹמָטִי",
-    "webUiLocalPortDesc": "באיזה פורט ההעברה מאזינה. השאר ריק כדי לאפשר למערכת לבחור, או הגדר פורט כאשר יש לדעת מראש את הפורט, כגון קונטיינר שמפרסם אותו.",
-    "webUiNewEndpointLabel": "נקודת קצה חדשה",
-    "webUiLabel": "מַדבֵּקָה",
-    "webUiScheme": "תָכְנִית",
-    "webUiPort": "נָמָל",
-    "webUiPath": "נָתִיב",
-    "webUiAccess": "גִישָׁה",
-    "webUiAccessDirect": "יָשִׁיר",
-    "webUiAccessTunnel": "מנהרת SSH",
-    "webUiAccessTunnelUnavailable": "מנהרת SSH דורשת הפעלת SSH במארח זה ומקור חיבור של מכשיר זה.",
-    "webUiRender": "פתח ב",
-    "webUiRenderExternal": "חלון שולחן עבודה מבודד",
-    "webUiRenderEmbedded": "לשונית טרמיקס",
-    "webUiRenderEmbeddedDesc": "הטמעה היא המאמץ הטוב ביותר: חלק ממשקי האינטרנט מסרבים להיטען בתוך מסגרת, וכניסה שמסתמכת על קובצי Cookie של אותו אתר עלולה לבצע לולאה. הדפדפן החיצוני תמיד עובד.",
-    "webUiIgnoreCert": "אפשר אישור לא חוקי",
-    "webUiIgnoreCertDesc": "נקודות קצה ישירות בלבד. לולאה חוזרת כבר פטורה, כך שאין לכך השפעה על נקודות קצה של המנהרה.",
-    "webUiRemoveEndpoint": "הסר את נקודת הקצה",
-    "webUiOpenFailed": "נכשלה פתיחת נקודת הקצה של האינטרנט",
-    "bindHost": "מארח קשירה"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/hi_IN.json b/plugins/web-endpoint/locales/translated/hi_IN.json
deleted file mode 100644
index 3215ddd9a..000000000
--- a/plugins/web-endpoint/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "कोई होस्ट चयनित नहीं है",
-    "notFound": "यह एंडपॉइंट अब मौजूद नहीं है।",
-    "tunnelUnreachableFromBrowser": "यह एंडपॉइंट टर्मिक्स चलाने वाली मशीन पर 127.0.0.1 पोर्ट से टनल करता है, जिस तक आपका ब्राउज़र नहीं पहुँच सकता। एंडपॉइंट के बाइंड होस्ट को उस मशीन के किसी ऐसे पते पर सेट करें जिस पर वह प्रतिक्रिया देती हो, जैसे कि 0.0.0.0, और इसे एक निश्चित लोकल पोर्ट दें।",
-    "tunnelSharesSessionCookie": "इस टनल को खोलने से आपका टर्मिक्स सेशन टनल की गई सेवा पर चला जाएगा, क्योंकि आपका ब्राउज़र उसी होस्टनेम से सेवा प्राप्त करेगा जिससे टर्मिक्स संचालित होता है। कुकीज़ पोर्ट को अनदेखा करती हैं, इसलिए दोनों में अंतर नहीं किया जा सकता। टर्मिक्स डेस्कटॉप ऐप का उपयोग करें, या टर्मिक्स को लोकलहोस्ट पर खोलें।",
-    "directSharesSessionCookie": "इस एंडपॉइंट को खोलने से आपका टर्मिक्स सेशन इस पर चला जाएगा, क्योंकि आपका ब्राउज़र उसी साइट से इस तक पहुंचता है जहां से टर्मिक्स संचालित होता है। कुकीज़ पोर्ट को अनदेखा करती हैं, इसलिए अलग पोर्ट का मतलब अलग पहचान नहीं है। टर्मिक्स डेस्कटॉप ऐप का उपयोग करें, या इस वेब यूआई को किसी अन्य होस्टनेम से संचालित करें।",
-    "retry": "पुनः प्रयास करें",
-    "reload": "पुनः लोड करें",
-    "copyUrl": "यूआरएल कॉपी करें",
-    "urlCopied": "यूआरएल कॉपी हो गया",
-    "copyFailed": "यूआरएल कॉपी करने में विफल",
-    "openExternally": "बाह्य संपादक खोलें",
-    "isolationUnavailable": "यह ब्राउज़र आपके टर्मिक्स सेशन से वेब एंडपॉइंट्स को अलग नहीं कर सकता। क्रेडेंशियललेस आईफ्रेम सपोर्ट वाले ब्राउज़र का उपयोग करें।",
-    "isolationNotice": "एम्बेडेड पेज एक अलग सेशन का उपयोग करते हैं। स्टोरेज या पॉपअप साइन-इन की आवश्यकता वाले पेजों के लिए, डेस्कटॉप ऐप में एक अलग विंडो का उपयोग करें।",
-    "openIsolatedWindow": "पृथक विंडो खोलें"
-  },
-  "hosts": {
-    "tabWebUi": "वेब यूआई",
-    "webUiEndpointLabel": "एंडपॉइंट {{number}}",
-    "webUiIntegration": "वेब यूआई",
-    "webUiEndpointsSection": "अंतिमबिंदुओं",
-    "webUiNoEndpoints": "अभी तक कोई वेब एंडपॉइंट उपलब्ध नहीं है। एक नया एंडपॉइंट बनाने के लिए \"एंडपॉइंट जोड़ें\" का उपयोग करें।",
-    "webUiEndpointsDisabled": "एंडपॉइंट जोड़ने के लिए ऊपर दिए गए वेब यूआई को चालू करें।",
-    "webUiRequirementsText": "आपके ब्राउज़र द्वारा एक डायरेक्ट एंडपॉइंट खोला जाता है, इसलिए इसका पोर्ट यहाँ से पहुँच योग्य होना चाहिए। इसके विपरीत, टर्मिक्स द्वारा इस होस्ट के SSH कनेक्शन पर एक SSH टनल खोला जाता है, इसलिए पोर्ट का होस्ट से पहुँच योग्य होना ही आवश्यक है।",
-    "enableWebUi": "वेब एंडपॉइंट्स को सक्षम करें",
-    "enableWebUiDesc": "साइडबार से इस होस्ट के वेब इंटरफेस खोलें।",
-    "webUiAddEndpoint": "एंडपॉइंट जोड़ें",
-    "webUiAddress": "पता",
-    "webUiOpening": "प्रारंभिक",
-    "webUiBindHostDesc": "जहां बैकएंड फॉरवर्ड को बाइंड करता है। 127.0.0.1 के लिए इसे खाली छोड़ दें, क्योंकि केवल टर्मिक्स चलाने वाली मशीन ही इस तक पहुंच सकती है।",
-    "webUiBindHostExposed": "यह पता टर्मिक्स मशीन से परे भी पहुंच योग्य है, इसलिए जो कोई भी पोर्ट तक पहुंच सकता है, उसे बिना लॉगिन किए यह वेब यूआई मिल जाता है।",
-    "webUiLocalPort": "स्थानीय पोर्ट",
-    "webUiLocalPortAuto": "स्वचालित",
-    "webUiLocalPortDesc": "यह फ़ॉरवर्ड किस पोर्ट पर सुनता है। सिस्टम को चुनने देने के लिए इसे खाली छोड़ दें, या यदि पोर्ट पहले से ज्ञात होना आवश्यक हो, जैसे कि इसे प्रकाशित करने वाला कोई कंटेनर, तो एक पोर्ट सेट करें।",
-    "webUiNewEndpointLabel": "नया एंडपॉइंट",
-    "webUiLabel": "लेबल",
-    "webUiScheme": "योजना",
-    "webUiPort": "पोर्ट",
-    "webUiPath": "पथ",
-    "webUiAccess": "पहुँच",
-    "webUiAccessDirect": "सीधा",
-    "webUiAccessTunnel": "एसएसएच सुरंग",
-    "webUiAccessTunnelUnavailable": "एसएसएच टनल के लिए इस होस्ट पर एसएसएच सक्षम होना और इस डिवाइस का कनेक्शन स्रोत होना आवश्यक है।",
-    "webUiRender": "में खोलें",
-    "webUiRenderExternal": "पृथक डेस्कटॉप विंडो",
-    "webUiRenderEmbedded": "टर्मिक्स टैब",
-    "webUiRenderEmbeddedDesc": "एम्बेडिंग एक सर्वोत्तम प्रयास है: कुछ वेब इंटरफेस फ्रेम में लोड होने से इनकार कर देते हैं, और समान साइट कुकीज़ पर निर्भर लॉगिन लूप में फंस सकता है। बाहरी ब्राउज़र हमेशा काम करता है।",
-    "webUiIgnoreCert": "अमान्य प्रमाणपत्र की अनुमति दें",
-    "webUiIgnoreCertDesc": "केवल डायरेक्ट एंडपॉइंट्स के लिए। लूपबैक पहले से ही छूट प्राप्त है, इसलिए इसका टनल एंडपॉइंट्स पर कोई प्रभाव नहीं पड़ता।",
-    "webUiRemoveEndpoint": "एंडपॉइंट हटाएँ",
-    "webUiOpenFailed": "वेब एंडपॉइंट खोलने में विफल।",
-    "bindHost": "बाइंड होस्ट"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/hu_HU.json b/plugins/web-endpoint/locales/translated/hu_HU.json
deleted file mode 100644
index 3d57e644c..000000000
--- a/plugins/web-endpoint/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "Nincs kiválasztva gazdagép",
-    "notFound": "Ez a végpont már nem létezik.",
-    "tunnelUnreachableFromBrowser": "Ez a végpont a Termixet futtató gépen található 127.0.0.1 címre csatlakozik, amelyet a böngésződ nem tud elérni. Állítsd be a végpont Bind Host értékét egy olyan címre, amelyen a gép válaszol, például 0.0.0.0, és adj meg neki egy fix Local Port értéket.",
-    "tunnelSharesSessionCookie": "Ennek az alagútnak a megnyitása a Termix munkamenetet a bújtatott szolgáltatáshoz küldené, mivel a böngésződ ugyanazon a hosztnéven érné el, amelyről a Termix is kiszolgálja. A sütik figyelmen kívül hagyják a portot, így a kettőt nem lehet megkülönböztetni. Használd a Termix asztali alkalmazást, vagy nyisd meg a Termixet a localhost címen.",
-    "directSharesSessionCookie": "Ennek a végpontnak a megnyitása a Termix munkamenetet ide küldené, mivel a böngésződ ugyanazon a helyen éri el, ahonnan a Termix is kiszolgálható. A sütik figyelmen kívül hagyják a portot, így egy másik port nem jelent másik identitást. Használd a Termix asztali alkalmazást, vagy szolgáltasd ki ezt a webes felhasználói felületet egy másik hostname-ről.",
-    "retry": "Újrapróbálkozás",
-    "reload": "Újratöltés",
-    "copyUrl": "URL másolása",
-    "urlCopied": "URL másolva",
-    "copyFailed": "Nem sikerült másolni az URL-t",
-    "openExternally": "Külsőleg nyitott",
-    "isolationUnavailable": "Ez a böngésző nem tudja elkülöníteni a webes végpontokat a Termix-munkamenettől. Használjon hitelesítő adatok nélküli iframe-támogatással rendelkező böngészőt.",
-    "isolationNotice": "A beágyazott oldalak elszigetelt munkamenetet használnak. A tárhelyet vagy felugró bejelentkezést igénylő oldalakhoz használjon egy elszigetelt ablakot az asztali alkalmazásban.",
-    "openIsolatedWindow": "Nyitott elszigetelt ablak"
-  },
-  "hosts": {
-    "tabWebUi": "Webes felhasználói felület",
-    "webUiEndpointLabel": "Végpont {{number}}",
-    "webUiIntegration": "Webes felhasználói felület",
-    "webUiEndpointsSection": "Végpontok",
-    "webUiNoEndpoints": "Még nincsenek webes végpontok. A Végpont hozzáadása gombbal hozhat létre egyet.",
-    "webUiEndpointsDisabled": "Végpontok hozzáadásához kapcsolja be a fenti webes felhasználói felületet.",
-    "webUiRequirementsText": "A böngésződ egy közvetlen végpontot nyit meg, így annak portjának elérhetőnek kell lennie innen. Ehelyett a Termix egy SSH alagutat nyit meg a gazdagép SSH kapcsolatán keresztül, így a portnak csak a gazdagépről kell elérhetőnek lennie.",
-    "enableWebUi": "Webes végpontok engedélyezése",
-    "enableWebUiDesc": "Nyissa meg a gazdagép webes felületeit az oldalsávból.",
-    "webUiAddEndpoint": "Végpont hozzáadása",
-    "webUiAddress": "Cím",
-    "webUiOpening": "Nyílás",
-    "webUiBindHostDesc": "Ahol a háttérrendszer a továbbító rendszert köti. Hagyja üresen a 127.0.0.1 mezőt, amelyet csak a Termixet futtató gép tud elérni.",
-    "webUiBindHostExposed": "Ez a cím elérhető a Termix gépen kívül is, így bárki, aki el tudja érni a portot, bejelentkezés nélkül megkapja ezt a webes felhasználói felületet.",
-    "webUiLocalPort": "Helyi kikötő",
-    "webUiLocalPortAuto": "Automatikus",
-    "webUiLocalPortDesc": "Melyik porton figyel a továbbító. Hagyja üresen, ha a rendszer szeretné kiválasztani, vagy állítson be egyet, ha a portot előre ismerni kell, például egy konténer esetében, amely közzéteszi azt.",
-    "webUiNewEndpointLabel": "Új végpont",
-    "webUiLabel": "Címke",
-    "webUiScheme": "Rendszer",
-    "webUiPort": "Kikötő",
-    "webUiPath": "Útvonal",
-    "webUiAccess": "Hozzáférés",
-    "webUiAccessDirect": "Közvetlen",
-    "webUiAccessTunnel": "SSH alagút",
-    "webUiAccessTunnelUnavailable": "Egy SSH-alagúthoz engedélyezni kell az SSH-t ezen a gazdagépen, és ennek az eszköznek a kapcsolatának forrását kell tartalmaznia.",
-    "webUiRender": "Nyitva tartás",
-    "webUiRenderExternal": "Elszigetelt asztali ablak",
-    "webUiRenderEmbedded": "Termix fül",
-    "webUiRenderEmbeddedDesc": "A beágyazás a legjobb megoldás: egyes webes felületek nem töltődnek be keretben, és az azonos webhelyen található sütikre támaszkodó bejelentkezés ciklusba kerülhet. A külső böngésző mindig működik.",
-    "webUiIgnoreCert": "Érvénytelen tanúsítvány engedélyezése",
-    "webUiIgnoreCertDesc": "Csak közvetlen végpontok. A visszacsatolás már mentesül ez alól, így ennek nincs hatása az alagút végpontjaira.",
-    "webUiRemoveEndpoint": "Végpont eltávolítása",
-    "webUiOpenFailed": "Nem sikerült megnyitni a webes végpontot",
-    "bindHost": "Kötőállomás"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/id_ID.json b/plugins/web-endpoint/locales/translated/id_ID.json
deleted file mode 100644
index 8a9ce446e..000000000
--- a/plugins/web-endpoint/locales/translated/id_ID.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "Tidak ada pembawa acara yang dipilih.",
-    "notFound": "Endpoint ini sudah tidak ada lagi.",
-    "tunnelUnreachableFromBrowser": "Endpoint ini membuat terowongan ke 127.0.0.1 pada mesin yang menjalankan Termix, yang tidak dapat dijangkau oleh browser Anda. Atur Bind Host endpoint ke alamat yang dapat diakses oleh mesin tersebut, misalnya 0.0.0.0, dan berikan Local Port tetap.",
-    "tunnelSharesSessionCookie": "Membuka terowongan ini akan mengirim sesi Termix Anda ke layanan yang di-tunnel, karena browser Anda akan mengaksesnya di hostname yang sama dengan tempat Termix disajikan. Cookie mengabaikan port, sehingga keduanya tidak dapat dibedakan. Gunakan aplikasi desktop Termix, atau buka Termix di localhost.",
-    "directSharesSessionCookie": "Membuka endpoint ini akan mengirim sesi Termix Anda ke sana, karena browser Anda mengaksesnya di situs yang sama tempat Termix disajikan. Cookie mengabaikan port, jadi port yang berbeda bukan berarti identitas yang berbeda. Gunakan aplikasi desktop Termix, atau sajikan UI web ini dari hostname yang berbeda.",
-    "retry": "Mencoba kembali",
-    "reload": "Muat Ulang",
-    "copyUrl": "Salin URL",
-    "urlCopied": "URL disalin",
-    "copyFailed": "Gagal menyalin URL",
-    "openExternally": "Buka secara eksternal",
-    "isolationUnavailable": "Browser ini tidak dapat mengisolasi endpoint web dari sesi Termix Anda. Gunakan browser yang mendukung iframe tanpa kredensial.",
-    "isolationNotice": "Halaman yang disematkan menggunakan sesi terisolasi. Untuk halaman yang memerlukan penyimpanan atau masuk melalui jendela pop-up, gunakan jendela terisolasi di aplikasi desktop.",
-    "openIsolatedWindow": "Buka jendela terisolasi"
-  },
-  "hosts": {
-    "tabWebUi": "Antarmuka pengguna web",
-    "webUiEndpointLabel": "Titik akhir {{number}}",
-    "webUiIntegration": "Antarmuka pengguna web",
-    "webUiEndpointsSection": "Titik akhir",
-    "webUiNoEndpoints": "Belum ada endpoint web. Gunakan Tambah endpoint untuk membuatnya.",
-    "webUiEndpointsDisabled": "Aktifkan UI Web di atas untuk menambahkan endpoint.",
-    "webUiRequirementsText": "Titik akhir langsung dibuka oleh browser Anda, jadi port-nya harus dapat dijangkau dari sini. Sebaliknya, terowongan SSH dibuka oleh Termix melalui koneksi SSH host ini, sehingga port tersebut hanya perlu dapat dijangkau dari host.",
-    "enableWebUi": "Aktifkan titik akhir web",
-    "enableWebUiDesc": "Buka antarmuka web host ini dari bilah sisi.",
-    "webUiAddEndpoint": "Tambahkan titik akhir",
-    "webUiAddress": "Alamat",
-    "webUiOpening": "Pembukaan",
-    "webUiBindHostDesc": "Di sinilah backend mengikat forward. Biarkan kosong untuk 127.0.0.1, yang hanya dapat diakses oleh mesin yang menjalankan Termix.",
-    "webUiBindHostExposed": "Alamat ini dapat diakses di luar mesin Termix, sehingga siapa pun yang dapat mengakses port tersebut akan mendapatkan antarmuka web ini tanpa perlu login.",
-    "webUiLocalPort": "Pelabuhan Lokal",
-    "webUiLocalPortAuto": "Otomatis",
-    "webUiLocalPortDesc": "Port mana yang digunakan oleh penerusan untuk mendengarkan. Biarkan kosong agar sistem memilih, atau atur satu jika port harus diketahui sebelumnya, seperti kontainer yang mempublikasikannya.",
-    "webUiNewEndpointLabel": "Titik akhir baru",
-    "webUiLabel": "Label",
-    "webUiScheme": "Skema",
-    "webUiPort": "Pelabuhan",
-    "webUiPath": "Jalur",
-    "webUiAccess": "Mengakses",
-    "webUiAccessDirect": "Langsung",
-    "webUiAccessTunnel": "Terowongan SSH",
-    "webUiAccessTunnelUnavailable": "Terowongan SSH membutuhkan SSH yang diaktifkan pada host ini dan asal koneksi dari perangkat ini.",
-    "webUiRender": "Buka di",
-    "webUiRenderExternal": "Jendela desktop terisolasi",
-    "webUiRenderEmbedded": "Tab Termix",
-    "webUiRenderEmbeddedDesc": "Penyematan dilakukan dengan upaya terbaik: beberapa antarmuka web menolak untuk dimuat dalam bingkai, dan login yang bergantung pada cookie situs yang sama mungkin berulang. Browser eksternal selalu berfungsi.",
-    "webUiIgnoreCert": "Izinkan sertifikat tidak valid",
-    "webUiIgnoreCertDesc": "Hanya untuk endpoint langsung. Loopback sudah dikecualikan, jadi ini tidak berpengaruh pada endpoint tunnel.",
-    "webUiRemoveEndpoint": "Hapus titik akhir",
-    "webUiOpenFailed": "Gagal membuka titik akhir web.",
-    "bindHost": "Host Terikat"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/it_IT.json b/plugins/web-endpoint/locales/translated/it_IT.json
deleted file mode 100644
index dd66a1b32..000000000
--- a/plugins/web-endpoint/locales/translated/it_IT.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "Nessun host selezionato",
-    "notFound": "Questo endpoint non esiste più.",
-    "tunnelUnreachableFromBrowser": "Questo endpoint crea un tunnel verso 127.0.0.1 sulla macchina su cui è in esecuzione Termix, indirizzo che il tuo browser non può raggiungere. Imposta il Bind Host dell'endpoint su un indirizzo a cui la macchina risponde, ad esempio 0.0.0.0, e assegnagli una porta locale fissa.",
-    "tunnelSharesSessionCookie": "L'apertura di questo tunnel indirizzerebbe la tua sessione Termix al servizio tunnelizzato, poiché il tuo browser lo raggiungerebbe tramite lo stesso hostname da cui viene erogato il servizio Termix. I cookie ignorano la porta, quindi i due non possono essere distinti. Utilizza l'applicazione desktop di Termix oppure apri Termix all'indirizzo localhost.",
-    "directSharesSessionCookie": "L'apertura di questo endpoint invierebbe la tua sessione Termix ad esso, poiché il tuo browser lo raggiunge dallo stesso sito da cui viene erogato il servizio Termix. I cookie ignorano la porta, quindi una porta diversa non corrisponde a un'identità diversa. Utilizza l'applicazione desktop di Termix oppure esegui questa interfaccia web da un hostname diverso.",
-    "retry": "Riprova",
-    "reload": "Ricarica",
-    "copyUrl": "Copia URL",
-    "urlCopied": "URL copiato",
-    "copyFailed": "Impossibile copiare l'URL",
-    "openExternally": "Apri esternamente",
-    "isolationUnavailable": "Questo browser non è in grado di isolare gli endpoint web dalla sessione Termix. Utilizza un browser che supporti gli iframe senza credenziali.",
-    "isolationNotice": "Le pagine incorporate utilizzano una sessione isolata. Per le pagine che richiedono l'archiviazione dei dati o l'accesso tramite popup, utilizzare una finestra isolata nell'applicazione desktop.",
-    "openIsolatedWindow": "Apri finestra isolata"
-  },
-  "hosts": {
-    "tabWebUi": "Interfaccia utente web",
-    "webUiEndpointLabel": "Punto finale {{number}}",
-    "webUiIntegration": "Interfaccia utente web",
-    "webUiEndpointsSection": "Punti terminali",
-    "webUiNoEndpoints": "Nessun endpoint web ancora disponibile. Utilizza \"Aggiungi endpoint\" per crearne uno.",
-    "webUiEndpointsDisabled": "Attiva l'interfaccia utente web qui sopra per aggiungere gli endpoint.",
-    "webUiRequirementsText": "Un endpoint diretto viene aperto dal tuo browser, quindi la sua porta deve essere raggiungibile da qui. Termix, invece, apre un tunnel SSH sulla connessione SSH di questo host, quindi la porta deve essere raggiungibile solo dall'host.",
-    "enableWebUi": "Endpoint web abilitati",
-    "enableWebUiDesc": "Apri le interfacce web di questo host dalla barra laterale.",
-    "webUiAddEndpoint": "Aggiungi endpoint",
-    "webUiAddress": "Indirizzo",
-    "webUiOpening": "Apertura",
-    "webUiBindHostDesc": "Dove il backend si collega al forward. Lascia vuoto il campo 127.0.0.1, a cui può accedere solo la macchina su cui è in esecuzione Termix.",
-    "webUiBindHostExposed": "Questo indirizzo è raggiungibile anche al di fuori del server Termix, quindi chiunque riesca ad accedere alla porta può utilizzare questa interfaccia web senza bisogno di effettuare il login.",
-    "webUiLocalPort": "Porta locale",
-    "webUiLocalPortAuto": "Automatico",
-    "webUiLocalPortDesc": "Quale porta deve rimanere in ascolto il server di inoltro. Lasciare vuoto per consentire al sistema di sceglierla automaticamente, oppure specificarne una quando la porta deve essere nota in anticipo, ad esempio per un container che la pubblica.",
-    "webUiNewEndpointLabel": "Nuovo endpoint",
-    "webUiLabel": "Etichetta",
-    "webUiScheme": "Schema",
-    "webUiPort": "Porta",
-    "webUiPath": "Percorso",
-    "webUiAccess": "Accesso",
-    "webUiAccessDirect": "Diretta",
-    "webUiAccessTunnel": "Tunnel SSH",
-    "webUiAccessTunnelUnavailable": "Per creare un tunnel SSH è necessario che SSH sia abilitato su questo host e che l'origine della connessione sia questo dispositivo.",
-    "webUiRender": "Apri in",
-    "webUiRenderExternal": "Finestra del desktop isolata",
-    "webUiRenderEmbedded": "scheda Termix",
-    "webUiRenderEmbeddedDesc": "L'incorporamento è un tentativo quantomeno efficace: alcune interfacce web si rifiutano di caricarsi in un frame e un login che si basa sui cookie dello stesso sito potrebbe generare un loop. Il browser esterno funziona sempre.",
-    "webUiIgnoreCert": "Consenti certificato non valido",
-    "webUiIgnoreCertDesc": "Solo endpoint diretti. Il loopback è già escluso, quindi ciò non ha alcun effetto sugli endpoint del tunnel.",
-    "webUiRemoveEndpoint": "Rimuovi endpoint",
-    "webUiOpenFailed": "Impossibile aprire l'endpoint web",
-    "bindHost": "Host di bind"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/ja_JP.json b/plugins/web-endpoint/locales/translated/ja_JP.json
deleted file mode 100644
index 396f77c9c..000000000
--- a/plugins/web-endpoint/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "ホストが選択されていません",
-    "notFound": "このエンドポイントは既に存在しません。",
-    "tunnelUnreachableFromBrowser": "このエンドポイントは、Termixを実行しているマシン上の127.0.0.1にトンネル接続しますが、このアドレスにはブラウザからアクセスできません。エンドポイントのバインドホストを、そのマシンが応答するアドレス（例：0.0.0.0）に設定し、固定のローカルポートを指定してください。",
-    "tunnelSharesSessionCookie": "このトンネルを開くと、ブラウザがTermixと同じホスト名でアクセスするため、Termixセッションはトンネル化されたサービスに送信されます。Cookieはポート番号を無視するため、両者を区別することはできません。Termixデスクトップアプリを使用するか、localhostでTermixを開いてください。",
-    "directSharesSessionCookie": "このエンドポイントを開くと、ブラウザがTermixと同じサイトからアクセスするため、Termixセッションがそこに送信されます。Cookieはポート番号を無視するため、ポート番号が異なっても別のIDとはみなされません。Termixデスクトップアプリを使用するか、別のホスト名からこのWeb UIを提供してください。",
-    "retry": "再試行",
-    "reload": "再読み込み",
-    "copyUrl": "URLをコピー",
-    "urlCopied": "URLがコピーされました",
-    "copyFailed": "URLのコピーに失敗しました",
-    "openExternally": "外部エディタで開く",
-    "isolationUnavailable": "このブラウザでは、WebエンドポイントをTermixセッションから分離できません。認証情報不要のiframeをサポートするブラウザを使用してください。",
-    "isolationNotice": "埋め込みページは独立したセッションを使用します。ストレージが必要なページやポップアップによるサインインが必要な場合は、デスクトップアプリで独立したウィンドウを使用してください。",
-    "openIsolatedWindow": "隔離されたウィンドウを開く"
-  },
-  "hosts": {
-    "tabWebUi": "Web UI",
-    "webUiEndpointLabel": "エンドポイント {{number}}",
-    "webUiIntegration": "Web UI",
-    "webUiEndpointsSection": "エンドポイント",
-    "webUiNoEndpoints": "まだWebエンドポイントがありません。エンドポイントを追加するには、「エンドポイントの追加」を使用してください。",
-    "webUiEndpointsDisabled": "エンドポイントを追加するには、上記のWeb UIをオンにしてください。",
-    "webUiRequirementsText": "ブラウザによって直接エンドポイントが開かれるため、そのポートはブラウザからアクセス可能である必要があります。一方、TermixはこのホストのSSH接続を介してSSHトンネルを開くため、ポートはホストからのみアクセス可能であればよいのです。",
-    "enableWebUi": "Webエンドポイントを有効にする",
-    "enableWebUiDesc": "サイドバーからこのホストのウェブインターフェースを開いてください。",
-    "webUiAddEndpoint": "エンドポイントを追加する",
-    "webUiAddress": "アドレス",
-    "webUiOpening": "オープニング",
-    "webUiBindHostDesc": "バックエンドがフォワードをバインドする場所です。Termixを実行しているマシンのみがアクセスできる127.0.0.1の場合は空白のままにしてください。",
-    "webUiBindHostExposed": "このアドレスはTermixマシン以外からもアクセスできるため、このポートにアクセスできる人であれば誰でもログインなしでこのWeb UIにアクセスできます。",
-    "webUiLocalPort": "ローカルポート",
-    "webUiLocalPortAuto": "自動",
-    "webUiLocalPortDesc": "フォワーディングがリッスンするポートを指定します。システムに選択させる場合は空欄のままにし、ポートを事前に知っておく必要がある場合（例えば、ポートを公開するコンテナなど）はポート番号を指定してください。",
-    "webUiNewEndpointLabel": "新しいエンドポイント",
-    "webUiLabel": "ラベル",
-    "webUiScheme": "スキーム",
-    "webUiPort": "ポート",
-    "webUiPath": "パス",
-    "webUiAccess": "アクセス",
-    "webUiAccessDirect": "直接",
-    "webUiAccessTunnel": "SSHトンネル",
-    "webUiAccessTunnelUnavailable": "SSHトンネルには、このホストでSSHが有効になっており、接続元がこのデバイスである必要があります。",
-    "webUiRender": "開く",
-    "webUiRenderExternal": "分離されたデスクトップウィンドウ",
-    "webUiRenderEmbedded": "テルミックス錠",
-    "webUiRenderEmbeddedDesc": "埋め込みはベストエフォート型です。一部のWebインターフェースはフレーム内での読み込みを拒否し、同一サイトCookieに依存するログイン処理はループする可能性があります。外部ブラウザは常に正常に動作します。",
-    "webUiIgnoreCert": "無効な証明書を許可",
-    "webUiIgnoreCertDesc": "直接エンドポイントのみが対象です。ループバックは既に対象外となっているため、トンネルエンドポイントには影響しません。",
-    "webUiRemoveEndpoint": "エンドポイントを削除",
-    "webUiOpenFailed": "ウェブエンドポイントを開くのに失敗しました",
-    "bindHost": "バインドホスト"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/ko_KR.json b/plugins/web-endpoint/locales/translated/ko_KR.json
deleted file mode 100644
index f7252f483..000000000
--- a/plugins/web-endpoint/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "선택된 호스트가 없습니다",
-    "notFound": "이 엔드포인트는 더 이상 존재하지 않습니다.",
-    "tunnelUnreachableFromBrowser": "이 엔드포인트는 브라우저에서 접근할 수 없는 Termix 실행 머신의 127.0.0.1 주소로 터널링합니다. 엔드포인트의 바인드 호스트를 해당 머신이 응답하는 주소(예: 0.0.0.0)로 설정하고 고정된 로컬 포트를 지정하십시오.",
-    "tunnelSharesSessionCookie": "이 터널을 열면 브라우저가 Termix가 제공되는 호스트 이름과 동일한 호스트 이름으로 접속하게 되므로 Termix 세션이 터널링된 서비스로 전송됩니다. 쿠키는 포트 번호를 무시하므로 둘을 구분할 수 없습니다. Termix 데스크톱 앱을 사용하거나 localhost에서 Termix를 실행하세요.",
-    "directSharesSessionCookie": "이 엔드포인트를 열면 브라우저가 Termix가 제공되는 동일한 사이트에서 해당 엔드포인트에 접속하기 때문에 Termix 세션이 해당 엔드포인트로 전송됩니다. 쿠키는 포트 번호를 무시하므로 다른 포트 번호를 사용한다고 해서 다른 ID를 의미하는 것은 아닙니다. Termix 데스크톱 앱을 사용하거나 다른 호스트 이름에서 이 웹 UI를 제공하십시오.",
-    "retry": "재시도",
-    "reload": "새로 고침",
-    "copyUrl": "URL 복사",
-    "urlCopied": "URL이 복사되었습니다",
-    "copyFailed": "URL 복사에 실패했습니다",
-    "openExternally": "외부 편집기로 열기",
-    "isolationUnavailable": "이 브라우저는 웹 엔드포인트를 Termix 세션에서 분리할 수 없습니다. 자격 증명 없이 iframe을 지원하는 브라우저를 사용하십시오.",
-    "isolationNotice": "내장 페이지는 격리된 세션을 사용합니다. 저장 공간이나 팝업 로그인이 필요한 페이지의 경우 데스크톱 앱에서 격리된 창을 사용하십시오.",
-    "openIsolatedWindow": "격리된 창을 엽니다"
-  },
-  "hosts": {
-    "tabWebUi": "웹 UI",
-    "webUiEndpointLabel": "엔드포인트 {{number}}",
-    "webUiIntegration": "웹 UI",
-    "webUiEndpointsSection": "엔드포인트",
-    "webUiNoEndpoints": "아직 웹 엔드포인트가 없습니다. 엔드포인트 추가 기능을 사용하여 생성하세요.",
-    "webUiEndpointsDisabled": "위의 웹 UI를 활성화하여 엔드포인트를 추가하세요.",
-    "webUiRequirementsText": "브라우저에서 직접 엔드포인트가 열리므로 해당 포트에 브라우저에서 접근할 수 있어야 합니다. Termix는 이 호스트의 SSH 연결을 통해 SSH 터널을 열므로 해당 포트는 호스트에서만 접근할 수 있으면 됩니다.",
-    "enableWebUi": "웹 엔드포인트를 활성화합니다.",
-    "enableWebUiDesc": "사이드바에서 이 호스트의 웹 인터페이스를 엽니다.",
-    "webUiAddEndpoint": "엔드포인트 추가",
-    "webUiAddress": "주소",
-    "webUiOpening": "열기",
-    "webUiBindHostDesc": "백엔드가 포워드를 바인딩하는 위치입니다. 127.0.0.1은 Termix가 실행되는 머신만 접근할 수 있으므로 비워 두십시오.",
-    "webUiBindHostExposed": "이 주소는 Termix 장비 외에서도 접근 가능하므로, 해당 포트에 접속할 수 있는 사람은 누구나 로그인 없이 이 웹 UI에 접속할 수 있습니다.",
-    "webUiLocalPort": "로컬 포트",
-    "webUiLocalPortAuto": "오토매틱",
-    "webUiLocalPortDesc": "포트 포워딩이 수신 대기할 포트를 지정합니다. 시스템에서 자동으로 선택하도록 하려면 비워 두거나, 포트를 미리 알아야 하는 컨테이너(예: 포트를 공개하는 컨테이너)의 경우 포트를 설정하십시오.",
-    "webUiNewEndpointLabel": "새로운 엔드포인트",
-    "webUiLabel": "이름",
-    "webUiScheme": "계획",
-    "webUiPort": "포트",
-    "webUiPath": "경로",
-    "webUiAccess": "입장",
-    "webUiAccessDirect": "직접",
-    "webUiAccessTunnel": "SSH 터널",
-    "webUiAccessTunnelUnavailable": "SSH 터널을 사용하려면 해당 호스트에서 SSH가 활성화되어 있어야 하고 연결 시작 장치가 이 장치여야 합니다.",
-    "webUiRender": "열기",
-    "webUiRenderExternal": "격리된 데스크톱 창",
-    "webUiRenderEmbedded": "터믹스 탭",
-    "webUiRenderEmbeddedDesc": "임베딩은 최선을 다하는 방식입니다. 일부 웹 인터페이스는 프레임 내에서 로드되지 않을 수 있으며, 동일 사이트 쿠키에 의존하는 로그인은 무한 루프에 빠질 수 있습니다. 외부 브라우저는 항상 정상적으로 작동합니다.",
-    "webUiIgnoreCert": "유효하지 않은 인증서 허용",
-    "webUiIgnoreCertDesc": "직접 연결 엔드포인트에만 적용됩니다. 루프백은 이미 제외되어 있으므로 터널 엔드포인트에는 영향을 미치지 않습니다.",
-    "webUiRemoveEndpoint": "엔드포인트를 제거합니다.",
-    "webUiOpenFailed": "웹 엔드포인트를 열 수 없습니다.",
-    "bindHost": "바인드 호스트"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/nl_NL.json b/plugins/web-endpoint/locales/translated/nl_NL.json
deleted file mode 100644
index 1ee339239..000000000
--- a/plugins/web-endpoint/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "Geen host geselecteerd",
-    "notFound": "Dit eindpunt bestaat niet meer.",
-    "tunnelUnreachableFromBrowser": "Dit eindpunt tunnelt naar 127.0.0.1 op de machine waarop Termix draait, een adres dat uw browser niet kan bereiken. Stel de Bind Host van het eindpunt in op een adres waarop die machine reageert, bijvoorbeeld 0.0.0.0, en geef het een vaste lokale poort.",
-    "tunnelSharesSessionCookie": "Door deze tunnel te openen, wordt uw Termix-sessie naar de getunnelde service gestuurd, omdat uw browser deze via dezelfde hostnaam bereikt als waar Termix wordt aangeboden. Cookies negeren de poort, dus de twee zijn niet van elkaar te onderscheiden. Gebruik de Termix-desktopapp of open Termix op localhost.",
-    "directSharesSessionCookie": "Het openen van dit eindpunt stuurt uw Termix-sessie ernaartoe, omdat uw browser het benadert via dezelfde site waar Termix wordt aangeboden. Cookies negeren de poort, dus een andere poort betekent niet dat er een andere identiteit is. Gebruik de Termix-desktopapp of bied deze webinterface aan via een andere hostnaam.",
-    "retry": "Opnieuw proberen",
-    "reload": "Herladen",
-    "copyUrl": "URL kopiëren",
-    "urlCopied": "URL gekopieerd",
-    "copyFailed": "Het kopiëren van de URL is mislukt.",
-    "openExternally": "Extern openen",
-    "isolationUnavailable": "Deze browser kan web-endpoints niet isoleren van uw Termix-sessie. Gebruik een browser met ondersteuning voor iframes zonder inloggegevens.",
-    "isolationNotice": "Ingesloten pagina's gebruiken een geïsoleerde sessie. Voor pagina's die opslag of een pop-upaanmelding vereisen, gebruikt u een geïsoleerd venster in de desktop-app.",
-    "openIsolatedWindow": "Een geïsoleerd venster openen"
-  },
-  "hosts": {
-    "tabWebUi": "Web-UI",
-    "webUiEndpointLabel": "Eindpunt {{number}}",
-    "webUiIntegration": "Web-UI",
-    "webUiEndpointsSection": "Eindpunten",
-    "webUiNoEndpoints": "Er zijn nog geen web-eindpunten beschikbaar. Gebruik 'Eindpunt toevoegen' om er een aan te maken.",
-    "webUiEndpointsDisabled": "Schakel de webinterface hierboven in om eindpunten toe te voegen.",
-    "webUiRequirementsText": "Uw browser opent een rechtstreeks eindpunt, dus de poort moet vanaf hier bereikbaar zijn. Termix opent in plaats daarvan een SSH-tunnel via de SSH-verbinding van deze host, dus de poort hoeft alleen vanaf de host bereikbaar te zijn.",
-    "enableWebUi": "Web-eindpunten inschakelen",
-    "enableWebUiDesc": "Open de webinterfaces van deze host via de zijbalk.",
-    "webUiAddEndpoint": "Eindpunt toevoegen",
-    "webUiAddress": "Adres",
-    "webUiOpening": "Opening",
-    "webUiBindHostDesc": "Waar de backend de forward verbindt. Laat dit veld leeg voor 127.0.0.1, dat alleen bereikbaar is vanaf de machine waarop Termix draait.",
-    "webUiBindHostExposed": "Dit adres is bereikbaar vanaf elke locatie buiten de Termix-machine, dus iedereen die de poort kan bereiken, krijgt toegang tot deze webinterface zonder in te loggen.",
-    "webUiLocalPort": "Lokale haven",
-    "webUiLocalPortAuto": "Automatisch",
-    "webUiLocalPortDesc": "Op welke poort luistert de forwarder? Laat dit veld leeg om het systeem zelf een poort te laten kiezen, of stel er een in als de poort van tevoren bekend moet zijn, bijvoorbeeld omdat een container deze publiceert.",
-    "webUiNewEndpointLabel": "Nieuw eindpunt",
-    "webUiLabel": "Label",
-    "webUiScheme": "Schema",
-    "webUiPort": "Haven",
-    "webUiPath": "Pad",
-    "webUiAccess": "Toegang",
-    "webUiAccessDirect": "Direct",
-    "webUiAccessTunnel": "SSH-tunnel",
-    "webUiAccessTunnelUnavailable": "Voor een SSH-tunnel is het nodig dat SSH op deze host is ingeschakeld en dat de verbinding afkomstig is van dit apparaat.",
-    "webUiRender": "Openen in",
-    "webUiRenderExternal": "Geïsoleerd bureaubladvenster",
-    "webUiRenderEmbedded": "Termix-tabblad",
-    "webUiRenderEmbeddedDesc": "Het inbedden is een poging naar beste vermogen: sommige webinterfaces weigeren te laden in een frame, en een inlogproces dat afhankelijk is van cookies van dezelfde website kan in een oneindige lus terechtkomen. De externe browser werkt altijd.",
-    "webUiIgnoreCert": "Ongeldig certificaat toestaan",
-    "webUiIgnoreCertDesc": "Alleen directe eindpunten. Loopback is al uitgezonderd, dus dit heeft geen effect op tunnel-eindpunten.",
-    "webUiRemoveEndpoint": "Eindpunt verwijderen",
-    "webUiOpenFailed": "Het openen van het web-eindpunt is mislukt.",
-    "bindHost": "Bind Host"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/no_NO.json b/plugins/web-endpoint/locales/translated/no_NO.json
deleted file mode 100644
index c823de236..000000000
--- a/plugins/web-endpoint/locales/translated/no_NO.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "Ingen vert valgt",
-    "notFound": "Dette endepunktet finnes ikke lenger.",
-    "tunnelUnreachableFromBrowser": "Dette endepunktet tunnelerer til 127.0.0.1 på maskinen som kjører Termix, som nettleseren din ikke kan nå. Sett endepunktets Bind Host til en adresse som maskinen svarer på, for eksempel 0.0.0.0, og gi det en fast lokal port.",
-    "tunnelSharesSessionCookie": "Å åpne denne tunnelen vil sende Termix-økten din til den tunnelerte tjenesten, fordi nettleseren din vil nå den på samme vertsnavn som Termix betjenes fra. Informasjonskapsler ignorerer porten, så de to kan ikke skilles fra hverandre. Bruk Termix-skrivebordsappen, eller åpne Termix på localhost.",
-    "directSharesSessionCookie": "Å åpne dette endepunktet vil sende Termix-økten din til det, fordi nettleseren din når det på samme sted som Termix serveres fra. Informasjonskapsler ignorerer porten, så en annen port er ikke en annen identitet. Bruk Termix-skrivebordsappen, eller server dette nettgrensesnittet fra et annet vertsnavn.",
-    "retry": "Prøv igjen",
-    "reload": "Last inn på nytt",
-    "copyUrl": "Kopier URL",
-    "urlCopied": "URL-en er kopiert",
-    "copyFailed": "Kunne ikke kopiere URL-en",
-    "openExternally": "Åpne eksternt",
-    "isolationUnavailable": "Denne nettleseren kan ikke isolere nettendepunkter fra Termix-økten din. Bruk en nettleser med støtte for iframe uten legitimasjon.",
-    "isolationNotice": "Innebygde sider bruker en isolert økt. For sider som krever lagring eller popup-pålogging, bruk et isolert vindu i skrivebordsappen.",
-    "openIsolatedWindow": "Åpne isolert vindu"
-  },
-  "hosts": {
-    "tabWebUi": "Nettgrensesnitt",
-    "webUiEndpointLabel": "Endepunkt {{number}}",
-    "webUiIntegration": "Nettgrensesnitt",
-    "webUiEndpointsSection": "Endepunkter",
-    "webUiNoEndpoints": "Ingen nettendepunkter ennå. Bruk Legg til endepunkt for å opprette et.",
-    "webUiEndpointsDisabled": "Slå på webgrensesnittet ovenfor for å legge til endepunkter.",
-    "webUiRequirementsText": "Et direkte endepunkt åpnes av nettleseren din, så porten må kunne nås herfra. En SSH-tunnel åpnes i stedet av Termix over denne vertens SSH-tilkobling, så porten trenger bare å kunne nås fra verten.",
-    "enableWebUi": "Aktiver nettendepunkter",
-    "enableWebUiDesc": "Åpne denne vertens nettgrensesnitt fra sidefeltet.",
-    "webUiAddEndpoint": "Legg til endepunkt",
-    "webUiAddress": "Adresse",
-    "webUiOpening": "Åpning",
-    "webUiBindHostDesc": "Der backend binder forward. La stå tomt for 127.0.0.1, som bare maskinen som kjører Termix kan nå.",
-    "webUiBindHostExposed": "Denne adressen er tilgjengelig utenfor Termix-maskinen, så alle som kan nå porten får dette nettgrensesnittet uten innlogging.",
-    "webUiLocalPort": "Lokal port",
-    "webUiLocalPortAuto": "Automatisk",
-    "webUiLocalPortDesc": "Hvilken port videresendingen lytter på. La stå tomt for å la systemet velge, eller angi en når porten må være kjent på forhånd, for eksempel en container som publiserer den.",
-    "webUiNewEndpointLabel": "Nytt endepunkt",
-    "webUiLabel": "Merkelapp",
-    "webUiScheme": "Ordning",
-    "webUiPort": "Havn",
-    "webUiPath": "Sti",
-    "webUiAccess": "Adgang",
-    "webUiAccessDirect": "Direkte",
-    "webUiAccessTunnel": "SSH-tunnel",
-    "webUiAccessTunnelUnavailable": "En SSH-tunnel krever at SSH er aktivert på denne verten og at denne enheten har en tilkoblingsopprinnelse.",
-    "webUiRender": "Åpne om",
-    "webUiRenderExternal": "Isolert skrivebordsvindu",
-    "webUiRenderEmbedded": "Termix-fanen",
-    "webUiRenderEmbeddedDesc": "Innbygging er det beste alternativet: noen nettgrensesnitt nekter å laste inn i en ramme, og en pålogging som er avhengig av informasjonskapsler fra samme nettsted kan gå i løkker. Den eksterne nettleseren fungerer alltid.",
-    "webUiIgnoreCert": "Tillat ugyldig sertifikat",
-    "webUiIgnoreCertDesc": "Kun direkte endepunkter. Loopback er allerede unntatt, så dette har ingen effekt på tunnelendepunkter.",
-    "webUiRemoveEndpoint": "Fjern endepunkt",
-    "webUiOpenFailed": "Kunne ikke åpne nettendepunktet",
-    "bindHost": "Bind vert"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/pl_PL.json b/plugins/web-endpoint/locales/translated/pl_PL.json
deleted file mode 100644
index b4dff75d6..000000000
--- a/plugins/web-endpoint/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "Nie wybrano hosta",
-    "notFound": "Ten punkt końcowy już nie istnieje.",
-    "tunnelUnreachableFromBrowser": "Ten punkt końcowy tuneluje do adresu 127.0.0.1 na komputerze z uruchomionym programem Termix, do którego Twoja przeglądarka nie może się dodzwonić. Ustaw hosta powiązania punktu końcowego na adres, pod którym odpowiada komputer, na przykład 0.0.0.0, i nadaj mu stały port lokalny.",
-    "tunnelSharesSessionCookie": "Otwarcie tego tunelu spowoduje wysłanie sesji Termix do usługi tunelowanej, ponieważ przeglądarka połączy się z nią pod tą samą nazwą hosta, z której obsługiwany jest Termix. Pliki cookie ignorują port, więc nie da się ich rozróżnić. Użyj aplikacji desktopowej Termix lub otwórz Termix na komputerze lokalnym.",
-    "directSharesSessionCookie": "Otwarcie tego punktu końcowego spowoduje wysłanie do niego sesji Termix, ponieważ przeglądarka dociera do niego z tej samej witryny, z której obsługiwany jest Termix. Pliki cookie ignorują port, więc inny port nie oznacza innej tożsamości. Użyj aplikacji desktopowej Termix lub obsługuj ten interfejs użytkownika z innej nazwy hosta.",
-    "retry": "Ponów",
-    "reload": "Przeładuj",
-    "copyUrl": "Kopiuj adres URL",
-    "urlCopied": "Skopiowano adres URL",
-    "copyFailed": "Nie udało się skopiować adresu URL",
-    "openExternally": "Otwórz zewnętrznie",
-    "isolationUnavailable": "Ta przeglądarka nie może odizolować punktów końcowych od sesji Termix. Użyj przeglądarki obsługującej ramki iframe bez uwierzytelniania.",
-    "isolationNotice": "Strony osadzone korzystają z odizolowanej sesji. W przypadku stron wymagających pamięci masowej lub logowania przez wyskakujące okienko, należy użyć odizolowanego okna w aplikacji na komputerze.",
-    "openIsolatedWindow": "Otwórz odizolowane okno"
-  },
-  "hosts": {
-    "tabWebUi": "Interfejs użytkownika sieci Web",
-    "webUiEndpointLabel": "Punkt końcowy {{number}}",
-    "webUiIntegration": "Interfejs użytkownika sieci Web",
-    "webUiEndpointsSection": "Punkty końcowe",
-    "webUiNoEndpoints": "Brak jeszcze punktów końcowych. Użyj opcji „Dodaj punkt końcowy”, aby go utworzyć.",
-    "webUiEndpointsDisabled": "Aby dodać punkty końcowe, włącz interfejs internetowy powyżej.",
-    "webUiRequirementsText": "Przeglądarka otwiera bezpośredni punkt końcowy, więc jego port musi być dostępny z tego miejsca. Zamiast tego, Termix otwiera tunel SSH przez połączenie SSH tego hosta, więc port musi być dostępny tylko z hosta.",
-    "enableWebUi": "Włącz punkty końcowe sieci Web",
-    "enableWebUiDesc": "Otwórz interfejsy sieciowe tego hosta z paska bocznego.",
-    "webUiAddEndpoint": "Dodaj punkt końcowy",
-    "webUiAddress": "Adres",
-    "webUiOpening": "Otwór",
-    "webUiBindHostDesc": "Gdzie backend łączy forward. Pozostaw puste pole dla adresu 127.0.0.1, do którego dostęp ma tylko komputer z uruchomionym Termixem.",
-    "webUiBindHostExposed": "Do tego adresu można dotrzeć z poziomu maszyny Termix, więc każdy, kto ma dostęp do portu, otrzymuje ten internetowy interfejs użytkownika bez konieczności logowania.",
-    "webUiLocalPort": "Port lokalny",
-    "webUiLocalPortAuto": "Automatycznie",
-    "webUiLocalPortDesc": "Na którym porcie nasłuchuje przekierowanie. Pozostaw puste, aby system sam wybrał port, lub wpisz go, jeśli port musi być znany z wyprzedzeniem, np. w przypadku kontenera, który go publikuje.",
-    "webUiNewEndpointLabel": "Nowy punkt końcowy",
-    "webUiLabel": "Etykieta",
-    "webUiScheme": "Schemat",
-    "webUiPort": "Port",
-    "webUiPath": "Ścieżka",
-    "webUiAccess": "Dostęp",
-    "webUiAccessDirect": "Bezpośredni",
-    "webUiAccessTunnel": "Tunel SSH",
-    "webUiAccessTunnelUnavailable": "Tunel SSH wymaga włączonego protokołu SSH na tym hoście i źródła połączenia tego urządzenia.",
-    "webUiRender": "Otwórz w",
-    "webUiRenderExternal": "Odizolowane okno pulpitu",
-    "webUiRenderEmbedded": "Karta Termix",
-    "webUiRenderEmbeddedDesc": "Osadzanie jest zalecane z najwyższą starannością: niektóre interfejsy internetowe odmawiają załadowania w ramce, a logowanie oparte na plikach cookie tej samej witryny może się zapętlić. Zewnętrzna przeglądarka zawsze działa.",
-    "webUiIgnoreCert": "Zezwól na nieprawidłowy certyfikat",
-    "webUiIgnoreCertDesc": "Tylko bezpośrednie punkty końcowe. Pętla zwrotna jest już wyłączona, więc nie ma to wpływu na punkty końcowe tunelu.",
-    "webUiRemoveEndpoint": "Usuń punkt końcowy",
-    "webUiOpenFailed": "Nie udało się otworzyć punktu końcowego sieci Web",
-    "bindHost": "Host nasłuchu"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/pt_BR.json b/plugins/web-endpoint/locales/translated/pt_BR.json
deleted file mode 100644
index fe0b8b785..000000000
--- a/plugins/web-endpoint/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "Nenhum host selecionado",
-    "notFound": "Este endpoint não existe mais.",
-    "tunnelUnreachableFromBrowser": "Este endpoint estabelece um túnel para 127.0.0.1 na máquina que executa o Termix, endereço que seu navegador não consegue acessar. Defina o Host de Vinculação do endpoint para um endereço que a máquina responda, como 0.0.0.0, e atribua a ele uma Porta Local fixa.",
-    "tunnelSharesSessionCookie": "Abrir este túnel enviará sua sessão do Termix para o serviço tunelado, pois seu navegador o acessará pelo mesmo nome de host de onde o Termix é servido. Os cookies ignoram a porta, portanto, os dois não podem ser diferenciados. Use o aplicativo Termix para desktop ou abra o Termix em localhost.",
-    "directSharesSessionCookie": "Abrir este endpoint enviará sua sessão do Termix para ele, pois seu navegador o acessa no mesmo site que serve o Termix. Os cookies ignoram a porta, portanto, uma porta diferente não representa uma identidade diferente. Use o aplicativo Termix para desktop ou acesse esta interface web a partir de um nome de host diferente.",
-    "retry": "Tentar novamente",
-    "reload": "Recarregar",
-    "copyUrl": "Copiar URL",
-    "urlCopied": "URL copiada",
-    "copyFailed": "Falha ao copiar o URL",
-    "openExternally": "Abrir externamente",
-    "isolationUnavailable": "Este navegador não consegue isolar os endpoints da web da sua sessão do Termix. Use um navegador com suporte a iframes sem credenciais.",
-    "isolationNotice": "As páginas incorporadas usam uma sessão isolada. Para páginas que exigem armazenamento ou login em janela pop-up, use uma janela isolada no aplicativo para desktop.",
-    "openIsolatedWindow": "Janela isolada aberta"
-  },
-  "hosts": {
-    "tabWebUi": "Interface de usuário web",
-    "webUiEndpointLabel": "Ponto final {{number}}",
-    "webUiIntegration": "Interface de usuário web",
-    "webUiEndpointsSection": "Pontos finais",
-    "webUiNoEndpoints": "Ainda não existem endpoints web. Use Adicionar endpoint para criar um.",
-    "webUiEndpointsDisabled": "Ative a interface web acima para adicionar endpoints.",
-    "webUiRequirementsText": "Um endpoint direto é aberto pelo seu navegador, portanto, a porta dele precisa estar acessível a partir daqui. Em vez disso, o Termix abre um túnel SSH sobre a conexão SSH deste host, então a porta só precisa estar acessível a partir do host.",
-    "enableWebUi": "Habilitar endpoints da web",
-    "enableWebUiDesc": "Abra as interfaces web deste host a partir da barra lateral.",
-    "webUiAddEndpoint": "Adicionar ponto final",
-    "webUiAddress": "Endereço",
-    "webUiOpening": "Abertura",
-    "webUiBindHostDesc": "Onde o servidor de backend vincula o encaminhamento. Deixe em branco para 127.0.0.1, que somente a máquina que executa o Termix pode acessar.",
-    "webUiBindHostExposed": "Este endereço é acessível além da máquina Termix, portanto, qualquer pessoa que consiga acessar a porta obtém esta interface web sem necessidade de login.",
-    "webUiLocalPort": "Porto local",
-    "webUiLocalPortAuto": "Automático",
-    "webUiLocalPortDesc": "Em qual porta o encaminhamento escuta. Deixe em branco para que o sistema escolha, ou defina uma quando a porta precisar ser conhecida antecipadamente, como no caso de um contêiner que a publica.",
-    "webUiNewEndpointLabel": "Novo ponto final",
-    "webUiLabel": "Rótulo",
-    "webUiScheme": "Plano",
-    "webUiPort": "Porta",
-    "webUiPath": "Caminho",
-    "webUiAccess": "Acesso",
-    "webUiAccessDirect": "Direto",
-    "webUiAccessTunnel": "túnel SSH",
-    "webUiAccessTunnelUnavailable": "Um túnel SSH requer que o SSH esteja habilitado neste host e que a origem da conexão seja este dispositivo.",
-    "webUiRender": "Abrir em",
-    "webUiRenderExternal": "janela de área de trabalho isolada",
-    "webUiRenderEmbedded": "guia Termix",
-    "webUiRenderEmbeddedDesc": "A incorporação é feita da melhor maneira possível: algumas interfaces web se recusam a carregar em um frame, e um login que depende de cookies do mesmo site pode entrar em loop. O navegador externo sempre funciona.",
-    "webUiIgnoreCert": "Permitir certificado inválido",
-    "webUiIgnoreCertDesc": "Apenas endpoints diretos. O loopback já está isento, portanto, isso não afeta os endpoints do túnel.",
-    "webUiRemoveEndpoint": "Remover ponto final",
-    "webUiOpenFailed": "Falha ao abrir o endpoint da web",
-    "bindHost": "Vincular host"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/pt_PT.json b/plugins/web-endpoint/locales/translated/pt_PT.json
deleted file mode 100644
index 7544b1caf..000000000
--- a/plugins/web-endpoint/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "Nenhum host selecionado",
-    "notFound": "Este endpoint já não existe.",
-    "tunnelUnreachableFromBrowser": "Este endpoint estabelece um túnel para 127.0.0.1 na máquina que executa o Termix, endereço que o seu browser não consegue aceder. Defina o Host de Ligação do endpoint para um endereço que a máquina responda, como por exemplo 0.0.0.0, e atribua-lhe uma Porta Local fixa.",
-    "tunnelSharesSessionCookie": "A abertura deste túnel enviará a sua sessão do Termix para o serviço tunelado, uma vez que o seu browser irá aceder-lhe pelo mesmo nome de host a partir do qual o Termix é servido. Os cookies ignoram a porta, pelo que os dois não podem ser diferenciados. Utilize a aplicação Termix para desktop ou abra o Termix em localhost.",
-    "directSharesSessionCookie": "Abrir este endpoint irá enviar a sua sessão do Termix para o mesmo, uma vez que o seu browser acede ao mesmo no mesmo site que serve o Termix. Os cookies ignoram a porta, pelo que uma porta diferente não representa uma identidade diferente. Utilize a aplicação Termix para desktop ou aceda a esta interface web a partir de um nome de host diferente.",
-    "retry": "Repetir",
-    "reload": "Recarregar",
-    "copyUrl": "Copiar URL",
-    "urlCopied": "URL copiado",
-    "copyFailed": "Falha ao copiar o URL",
-    "openExternally": "Abrir externamente",
-    "isolationUnavailable": "Este browser não consegue isolar os endpoints web da sua sessão Termix. Utilize um browser com suporte para iframes sem credenciais.",
-    "isolationNotice": "As páginas incorporadas utilizam uma sessão isolada. Para páginas que exijam armazenamento ou login em janela pop-up, utilize uma janela isolada na aplicação para desktop.",
-    "openIsolatedWindow": "Janela isolada aberta"
-  },
-  "hosts": {
-    "tabWebUi": "Interface de utilizador web",
-    "webUiEndpointLabel": "Ponto final {{number}}",
-    "webUiIntegration": "Interface de utilizador web",
-    "webUiEndpointsSection": "Pontos finais",
-    "webUiNoEndpoints": "Ainda não existem endpoints web. Utilize Adicionar endpoint para criar um.",
-    "webUiEndpointsDisabled": "Ative a interface web acima para adicionar endpoints.",
-    "webUiRequirementsText": "Um endpoint direto é aberto pelo seu browser, pelo que a porta do mesmo precisa de estar acessível a partir daqui. Em vez disso, o Termix abre um túnel SSH sobre a ligação SSH deste host, pelo que a porta só precisa de estar acessível a partir do host.",
-    "enableWebUi": "Ativar endpoints da web",
-    "enableWebUiDesc": "Abra as interfaces web deste host a partir da barra lateral.",
-    "webUiAddEndpoint": "Adicionar ponto final",
-    "webUiAddress": "Endereço",
-    "webUiOpening": "Abertura",
-    "webUiBindHostDesc": "Onde o servidor de backend liga o encaminhamento. Deixe em branco para 127.0.0.1, que apenas a máquina que executa o Termix pode aceder.",
-    "webUiBindHostExposed": "Este endereço é acessível para além da máquina Termix, pelo que qualquer pessoa que consiga aceder à porta obtém esta interface web sem necessidade de login.",
-    "webUiLocalPort": "Porta local",
-    "webUiLocalPortAuto": "Automático",
-    "webUiLocalPortDesc": "Em que porta o encaminhamento escuta. Deixe em branco para que o sistema escolha, ou defina uma porta quando é necessário saber a porta antecipadamente, como no caso de um contentor que a publica.",
-    "webUiNewEndpointLabel": "Novo ponto final",
-    "webUiLabel": "Rótulo",
-    "webUiScheme": "Plano",
-    "webUiPort": "Porta",
-    "webUiPath": "Caminho",
-    "webUiAccess": "Acesso",
-    "webUiAccessDirect": "Direta",
-    "webUiAccessTunnel": "túnel SSH",
-    "webUiAccessTunnelUnavailable": "Um túnel SSH requer que o SSH esteja activado neste host e que a origem da ligação seja este dispositivo.",
-    "webUiRender": "Abrir em",
-    "webUiRenderExternal": "janela de área de trabalho isolada",
-    "webUiRenderEmbedded": "guia Termix",
-    "webUiRenderEmbeddedDesc": "A incorporação é feita da melhor forma possível: algumas interfaces web recusam-se a carregar num frame, e um login que dependa de cookies do mesmo site pode entrar em loop. O browser externo funciona sempre.",
-    "webUiIgnoreCert": "Permitir certificado inválido",
-    "webUiIgnoreCertDesc": "Apenas endpoints diretos. O loopback já está isento, pelo que isto não afeta os endpoints do túnel.",
-    "webUiRemoveEndpoint": "Remover ponto final",
-    "webUiOpenFailed": "Falha ao abrir o endpoint web",
-    "bindHost": "Host de Ligação"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/ro_RO.json b/plugins/web-endpoint/locales/translated/ro_RO.json
deleted file mode 100644
index 0c5140a8f..000000000
--- a/plugins/web-endpoint/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "Nicio gazdă selectată",
-    "notFound": "Acest punct final nu mai există.",
-    "tunnelUnreachableFromBrowser": "Acest punct final face tunel către 127.0.0.1 pe mașina care rulează Termix, pe care browserul dvs. nu o poate accesa. Setați Bind Host-ul punctului final la o adresă la care mașina răspunde, cum ar fi 0.0.0.0, și atribuiți-i un Port Local fix.",
-    "tunnelSharesSessionCookie": "Deschiderea acestui tunel ar trimite sesiunea Termix către serviciul tunelat, deoarece browserul dvs. l-ar accesa la același nume de gazdă de pe care este servit Termix. Cookie-urile ignoră portul, deci cele două nu pot fi diferențiate. Folosește aplicația desktop Termix sau deschide Termix la localhost.",
-    "directSharesSessionCookie": "Deschiderea acestui endpoint ar trimite sesiunea Termix către acesta, deoarece browserul dvs. îl accesează pe același site de pe care este servit Termix. Cookie-urile ignoră portul, deci un port diferit nu reprezintă o identitate diferită. Folosiți aplicația desktop Termix sau serviți această interfață web de pe un nume de gazdă diferit.",
-    "retry": "Reîncercați",
-    "reload": "Reîncărcare",
-    "copyUrl": "Copiați adresa URL",
-    "urlCopied": "Adresa URL copiată",
-    "copyFailed": "Nu s-a putut copia adresa URL",
-    "openExternally": "Deschis la exterior",
-    "isolationUnavailable": "Acest browser nu poate izola endpoint-urile web de sesiunea ta Termix. Folosește un browser cu suport iframe fără credențiale.",
-    "isolationNotice": "Paginile încorporate utilizează o sesiune izolată. Pentru paginile care necesită spațiu de stocare sau conectare pop-up, utilizați o fereastră izolată în aplicația desktop.",
-    "openIsolatedWindow": "Deschideți o fereastră izolată"
-  },
-  "hosts": {
-    "tabWebUi": "Interfață web",
-    "webUiEndpointLabel": "Punct final {{number}}",
-    "webUiIntegration": "Interfață web",
-    "webUiEndpointsSection": "Puncte finale",
-    "webUiNoEndpoints": "Încă nu există puncte finale web. Folosește Adăugare punct final pentru a crea unul.",
-    "webUiEndpointsDisabled": "Activați interfața web de mai sus pentru a adăuga puncte finale.",
-    "webUiRequirementsText": "Un punct final direct este deschis de browserul dvs., deci portul său trebuie să fie accesibil de aici. Un tunel SSH este deschis de Termix prin conexiunea SSH a acestei gazde, deci portul trebuie să fie accesibil doar de la gazdă.",
-    "enableWebUi": "Activează punctele de terminare web",
-    "enableWebUiDesc": "Deschideți interfețele web ale acestei gazde din bara laterală.",
-    "webUiAddEndpoint": "Adăugați un punct final",
-    "webUiAddress": "Adresa",
-    "webUiOpening": "Deschidere",
-    "webUiBindHostDesc": "Unde backend-ul leagă forward-ul. Lăsați necompletat pentru 127.0.0.1, pe care doar mașina care rulează Termix îl poate accesa.",
-    "webUiBindHostExposed": "Această adresă este accesibilă dincolo de mașina Termix, așa că oricine poate accesa portul primește această interfață web fără a fi nevoie de autentificare.",
-    "webUiLocalPort": "Port local",
-    "webUiLocalPortAuto": "Automat",
-    "webUiLocalPortDesc": "Portul pe care ascultă redirecționarea. Lăsați necompletat pentru a permite sistemului să aleagă sau setați unul atunci când portul trebuie cunoscut în avans, cum ar fi un container care îl publică.",
-    "webUiNewEndpointLabel": "Punct final nou",
-    "webUiLabel": "Eticheta",
-    "webUiScheme": "Sistem",
-    "webUiPort": "Port",
-    "webUiPath": "Cale",
-    "webUiAccess": "Acces",
-    "webUiAccessDirect": "Direct",
-    "webUiAccessTunnel": "Tunel SSH",
-    "webUiAccessTunnelUnavailable": "Un tunel SSH necesită SSH activat pe această gazdă și o origine a conexiunii pentru acest dispozitiv.",
-    "webUiRender": "Deschide în",
-    "webUiRenderExternal": "Fereastră izolată a desktopului",
-    "webUiRenderEmbedded": "Tabulă Termix",
-    "webUiRenderEmbeddedDesc": "Integrarea este cea mai bună metodă: unele interfețe web refuză să se încarce într-un cadru, iar o conectare care se bazează pe cookie-uri de pe același site se poate repeta. Browserul extern funcționează întotdeauna.",
-    "webUiIgnoreCert": "Permiteți certificatul nevalid",
-    "webUiIgnoreCertDesc": "Numai puncte finale directe. Loopback-ul este deja exceptat, deci acest lucru nu are efect asupra punctelor finale ale tunelului.",
-    "webUiRemoveEndpoint": "Eliminați punctul final",
-    "webUiOpenFailed": "Nu s-a putut deschide endpoint-ul web",
-    "bindHost": "Legați gazda"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/ru_RU.json b/plugins/web-endpoint/locales/translated/ru_RU.json
deleted file mode 100644
index 00f46f7ac..000000000
--- a/plugins/web-endpoint/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "Хост не выбран",
-    "notFound": "Данная конечная точка больше не существует.",
-    "tunnelUnreachableFromBrowser": "Эта конечная точка туннелирует на 127.0.0.1 на машине, где запущен Termix, но ваш браузер к ней не имеет доступа. Установите в качестве параметра Bind Host адрес, на который машина отвечает, например, 0.0.0.0, и укажите фиксированный локальный порт.",
-    "tunnelSharesSessionCookie": "Открытие этого туннеля направит вашу сессию Termix к туннелированному сервису, поскольку ваш браузер будет обращаться к нему по тому же имени хоста, с которого обслуживается Termix. Файлы cookie игнорируют порт, поэтому их невозможно различить. Используйте настольное приложение Termix или откройте Termix по адресу localhost.",
-    "directSharesSessionCookie": "Открытие этой конечной точки перенаправит вашу сессию Termix на неё, поскольку ваш браузер обращается к ней через тот же сайт, с которого обслуживается Termix. Файлы cookie игнорируют порт, поэтому другой порт не означает другой идентификатор. Используйте настольное приложение Termix или разместите этот веб-интерфейс с другого имени хоста.",
-    "retry": "Повторить",
-    "reload": "Перезагрузить",
-    "copyUrl": "Скопировать URL",
-    "urlCopied": "URL скопирован",
-    "copyFailed": "Не удалось скопировать URL.",
-    "openExternally": "Открыть во внешнем редакторе",
-    "isolationUnavailable": "Этот браузер не может изолировать веб-интерфейсы от вашей сессии Termix. Используйте браузер с поддержкой iframe без учетных данных.",
-    "isolationNotice": "Встроенные страницы используют изолированную сессию. Для страниц, требующих хранения данных или всплывающего окна авторизации, используйте изолированное окно в настольном приложении.",
-    "openIsolatedWindow": "Открытое изолированное окно"
-  },
-  "hosts": {
-    "tabWebUi": "Веб-интерфейс",
-    "webUiEndpointLabel": "Конечная точка {{number}}",
-    "webUiIntegration": "Веб-интерфейс",
-    "webUiEndpointsSection": "Конечные точки",
-    "webUiNoEndpoints": "Веб-конечные точки пока отсутствуют. Используйте кнопку «Добавить конечную точку», чтобы создать её.",
-    "webUiEndpointsDisabled": "Включите веб-интерфейс выше, чтобы добавить конечные точки.",
-    "webUiRequirementsText": "Ваш браузер открывает прямую конечную точку, поэтому её порт должен быть доступен отсюда. Termix же открывает SSH-туннель через SSH-соединение этого хоста, поэтому порт должен быть доступен только с этого хоста.",
-    "enableWebUi": "Включить веб-конечные точки",
-    "enableWebUiDesc": "Откройте веб-интерфейс этого хостинг-провайдера из боковой панели.",
-    "webUiAddEndpoint": "Добавить конечную точку",
-    "webUiAddress": "Адрес",
-    "webUiOpening": "Открытие",
-    "webUiBindHostDesc": "Где бэкэнд привязывает переадресацию. Оставьте поле пустым для IP-адреса 127.0.0.1, к которому может получить доступ только компьютер, на котором запущен Termix.",
-    "webUiBindHostExposed": "Этот адрес доступен за пределами машины Termix, поэтому любой, кто может получить доступ к этому порту, получает доступ к веб-интерфейсу без авторизации.",
-    "webUiLocalPort": "Локальный порт",
-    "webUiLocalPortAuto": "Автоматический",
-    "webUiLocalPortDesc": "На каком порту будет прослушивать переадресация? Оставьте поле пустым, чтобы система выбрала его сама, или задайте порт заранее, например, если он должен быть известен контейнеру, который его публикует.",
-    "webUiNewEndpointLabel": "Новая конечная точка",
-    "webUiLabel": "Название",
-    "webUiScheme": "Схема",
-    "webUiPort": "Порт",
-    "webUiPath": "Путь",
-    "webUiAccess": "Доступ",
-    "webUiAccessDirect": "Прямой",
-    "webUiAccessTunnel": "SSH-туннель",
-    "webUiAccessTunnelUnavailable": "Для создания SSH-туннеля необходимо включить SSH на этом хосте и указать источник соединения на этом устройстве.",
-    "webUiRender": "Открыть в",
-    "webUiRenderExternal": "Изолированное окно рабочего стола",
-    "webUiRenderEmbedded": "Термикс вкладка",
-    "webUiRenderEmbeddedDesc": "Встраивание осуществляется по принципу «максимальной эффективности»: некоторые веб-интерфейсы отказываются загружаться во фрейме, а вход в систему, использующий файлы cookie того же сайта, может зацикливаться. Внешний браузер всегда работает.",
-    "webUiIgnoreCert": "Разрешить недействительный сертификат",
-    "webUiIgnoreCertDesc": "Только прямые конечные точки. Замыкания (loopback) уже исключены, поэтому это не влияет на туннельные конечные точки.",
-    "webUiRemoveEndpoint": "Удалить конечную точку",
-    "webUiOpenFailed": "Не удалось открыть веб-интерфейс.",
-    "bindHost": "Хост для привязки"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/sr_SP.json b/plugins/web-endpoint/locales/translated/sr_SP.json
deleted file mode 100644
index 738b3b56d..000000000
--- a/plugins/web-endpoint/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "Није изабран домаћин",
-    "notFound": "Ова крајња тачка више не постоји.",
-    "tunnelUnreachableFromBrowser": "Ова крајња тачка се повезује са адресом 127.0.0.1 на машини на којој је покренут Termix, коју ваш прегледач не може да досегне. Поставите Bind Host крајње тачке на адресу на коју машина одговара, као што је 0.0.0.0, и доделите јој фиксни локални порт.",
-    "tunnelSharesSessionCookie": "Отварањем овог тунела ваша Termix сесија би се послала тунелираном сервису, јер би је ваш прегледач дохватио на истом имену хоста са ког се Termix служи. Колачићи игноришу порт, тако да се та два не могу разликовати. Користите Termix десктоп апликацију или отворите Termix на localhost.",
-    "directSharesSessionCookie": "Отварањем ове крајње тачке би се ваша Termix сесија послала на њу, јер ваш прегледач до ње долази на истој локацији са које се Termix служи. Колачићи игноришу порт, тако да други порт није други идентитет. Користите Termix десктоп апликацију или служите овом веб корисничком интерфејсу са другог имена хоста.",
-    "retry": "Покушај поново",
-    "reload": "Поново учитај",
-    "copyUrl": "Копирај УРЛ",
-    "urlCopied": "URL је копиран",
-    "copyFailed": "Копирање URL-а није успело",
-    "openExternally": "Отвори споља",
-    "isolationUnavailable": "Овај прегледач не може да изолује веб крајње тачке од ваше Termix сесије. Користите прегледач са подршком за iframe без акредитива.",
-    "isolationNotice": "Уграђене странице користе изоловану сесију. За странице које захтевају складиштење или искачуће пријављивање, користите изоловани прозор у апликацији за рачунаре.",
-    "openIsolatedWindow": "Отвори изоловани прозор"
-  },
-  "hosts": {
-    "tabWebUi": "Веб кориснички интерфејс",
-    "webUiEndpointLabel": "Крајња тачка {{number}}",
-    "webUiIntegration": "Веб кориснички интерфејс",
-    "webUiEndpointsSection": "Крајње тачке",
-    "webUiNoEndpoints": "Још нема веб крајњих тачака. Користите опцију „Додај крајњу тачку“ да бисте је креирали.",
-    "webUiEndpointsDisabled": "Укључите веб интерфејс изнад да бисте додали крајње тачке.",
-    "webUiRequirementsText": "Директну крајњу тачку отвара ваш прегледач, тако да њен порт мора бити доступан одавде. Уместо тога, Termix отвара SSH тунел преко SSH везе овог хоста, тако да порт мора бити доступан само са хоста.",
-    "enableWebUi": "Омогући веб крајње тачке",
-    "enableWebUiDesc": "Отворите веб интерфејсе овог хоста са бочне траке.",
-    "webUiAddEndpoint": "Додај крајњу тачку",
-    "webUiAddress": "Адреса",
-    "webUiOpening": "Отварање",
-    "webUiBindHostDesc": "Где се бекенд повезује са преусмеравањем. Оставите празно за 127.0.0.1, до којег може да дође само машина на којој је покренут Termix.",
-    "webUiBindHostExposed": "Ова адреса је доступна изван Termix машине, тако да свако ко може да дође до порта добија овај веб интерфејс без пријављивања.",
-    "webUiLocalPort": "Локални порт",
-    "webUiLocalPortAuto": "Аутоматски",
-    "webUiLocalPortDesc": "На ком порту преусмеравање слуша. Оставите празно да би систем изабрао или подесите порт када порт мора бити познат унапред, као што је контејнер који га објављује.",
-    "webUiNewEndpointLabel": "Нова крајња тачка",
-    "webUiLabel": "Ознака",
-    "webUiScheme": "Шема",
-    "webUiPort": "Лука",
-    "webUiPath": "Путања",
-    "webUiAccess": "Приступ",
-    "webUiAccessDirect": "Директно",
-    "webUiAccessTunnel": "SSH тунел",
-    "webUiAccessTunnelUnavailable": "SSH тунел захтева омогућен SSH на овом хосту и порекло везе са овог уређаја.",
-    "webUiRender": "Отвори у",
-    "webUiRenderExternal": "Изоловани прозор радне површине",
-    "webUiRenderEmbedded": "Термикс картица",
-    "webUiRenderEmbeddedDesc": "Уграђивање је најбољи начин: неки веб интерфејси одбијају да се учитају у оквиру, а пријава која се ослања на колачиће истог сајта може да се понови у петљи. Спољни прегледач увек ради.",
-    "webUiIgnoreCert": "Дозволи неважећи сертификат",
-    "webUiIgnoreCertDesc": "Само директне крајње тачке. Повратна петља је већ изузета, тако да ово нема утицаја на крајње тачке тунела.",
-    "webUiRemoveEndpoint": "Уклони крајњу тачку",
-    "webUiOpenFailed": "Отварање веб крајње тачке није успело",
-    "bindHost": "Повежи хост"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/sv_SE.json b/plugins/web-endpoint/locales/translated/sv_SE.json
deleted file mode 100644
index 3da869cef..000000000
--- a/plugins/web-endpoint/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "Ingen värd vald",
-    "notFound": "Denna slutpunkt finns inte längre.",
-    "tunnelUnreachableFromBrowser": "Denna slutpunkt tunnlar till 127.0.0.1 på maskinen som kör Termix, vilket din webbläsare inte kan nå. Ställ in slutpunktens Bind Host till en adress som maskinen svarar på, till exempel 0.0.0.0, och ge den en fast lokal port.",
-    "tunnelSharesSessionCookie": "Om du öppnar den här tunneln skickas din Termix-session till den tunnelerade tjänsten, eftersom din webbläsare skulle nå den på samma värdnamn som Termix serveras från. Cookies ignorerar porten, så de två kan inte skiljas åt. Använd Termix-skrivbordsappen eller öppna Termix på localhost.",
-    "directSharesSessionCookie": "Att öppna den här slutpunkten skulle skicka din Termix-session till den, eftersom din webbläsare når den på samma plats som Termix serveras från. Cookies ignorerar porten, så en annan port är inte en annan identitet. Använd Termix-skrivbordsappen eller servera detta webbgränssnitt från ett annat värdnamn.",
-    "retry": "Försöka igen",
-    "reload": "Ladda om",
-    "copyUrl": "Kopiera URL",
-    "urlCopied": "URL kopierad",
-    "copyFailed": "Misslyckades med att kopiera URL:en",
-    "openExternally": "Öppna externt",
-    "isolationUnavailable": "Den här webbläsaren kan inte isolera webbslutpunkter från din Termix-session. Använd en webbläsare med stöd för iframe utan autentiseringsuppgifter.",
-    "isolationNotice": "Inbäddade sidor använder en isolerad session. För sidor som kräver lagring eller popup-inloggning, använd ett isolerat fönster i skrivbordsappen.",
-    "openIsolatedWindow": "Öppna isolerade fönster"
-  },
-  "hosts": {
-    "tabWebUi": "Webbgränssnitt",
-    "webUiEndpointLabel": "Slutpunkt {{number}}",
-    "webUiIntegration": "Webbgränssnitt",
-    "webUiEndpointsSection": "Slutpunkter",
-    "webUiNoEndpoints": "Inga webbslutpunkter ännu. Använd Lägg till slutpunkt för att skapa en.",
-    "webUiEndpointsDisabled": "Aktivera webbgränssnittet ovan för att lägga till slutpunkter.",
-    "webUiRequirementsText": "En direkt slutpunkt öppnas av din webbläsare, så dess port måste kunna nås härifrån. En SSH-tunnel öppnas istället av Termix över den här värdens SSH-anslutning, så porten behöver bara kunna nås från värden.",
-    "enableWebUi": "Aktivera webbslutpunkter",
-    "enableWebUiDesc": "Öppna den här värdens webbgränssnitt från sidofältet.",
-    "webUiAddEndpoint": "Lägg till slutpunkt",
-    "webUiAddress": "Adress",
-    "webUiOpening": "Öppning",
-    "webUiBindHostDesc": "Där backend binder forwarden. Lämna tomt för 127.0.0.1, som endast maskinen som kör Termix kan nå.",
-    "webUiBindHostExposed": "Den här adressen är nåbar bortom Termix-maskinen, så alla som kan nå porten får detta webbgränssnitt utan inloggning.",
-    "webUiLocalPort": "Lokal hamn",
-    "webUiLocalPortAuto": "Automatisk",
-    "webUiLocalPortDesc": "Vilken port vidarebefordran lyssnar på. Lämna tomt för att låta systemet välja, eller ange en port när porten måste vara känd i förväg, till exempel en container som publicerar den.",
-    "webUiNewEndpointLabel": "Ny slutpunkt",
-    "webUiLabel": "Märka",
-    "webUiScheme": "Schema",
-    "webUiPort": "Hamn",
-    "webUiPath": "Väg",
-    "webUiAccess": "Tillträde",
-    "webUiAccessDirect": "Direkt",
-    "webUiAccessTunnel": "SSH-tunnel",
-    "webUiAccessTunnelUnavailable": "En SSH-tunnel kräver att SSH är aktiverat på den här värden och att den här enheten har ett anslutningsursprung.",
-    "webUiRender": "Öppna om",
-    "webUiRenderExternal": "Isolerat skrivbordsfönster",
-    "webUiRenderEmbedded": "Termix-fliken",
-    "webUiRenderEmbeddedDesc": "Inbäddning är det bästa alternativet: vissa webbgränssnitt vägrar att laddas i en ram, och en inloggning som förlitar sig på cookies från samma webbplats kan loopa. Den externa webbläsaren fungerar alltid.",
-    "webUiIgnoreCert": "Tillåt ogiltigt certifikat",
-    "webUiIgnoreCertDesc": "Endast direkta slutpunkter. Loopback är redan undantaget, så detta har ingen effekt på tunnelslutpunkter.",
-    "webUiRemoveEndpoint": "Ta bort slutpunkten",
-    "webUiOpenFailed": "Misslyckades med att öppna webbslutpunkten",
-    "bindHost": "Bind värd"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/th_TH.json b/plugins/web-endpoint/locales/translated/th_TH.json
deleted file mode 100644
index 3d3abbbfb..000000000
--- a/plugins/web-endpoint/locales/translated/th_TH.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "ไม่ได้เลือกโฮสต์",
-    "notFound": "ปลายทางนี้ไม่มีอยู่อีกต่อไปแล้ว",
-    "tunnelUnreachableFromBrowser": "ปลายทางนี้จะเชื่อมต่อผ่านอุโมงค์ไปยัง 127.0.0.1 บนเครื่องที่ใช้งาน Termix ซึ่งเบราว์เซอร์ของคุณไม่สามารถเข้าถึงได้ ตั้งค่า Bind Host ของปลายทางนี้เป็นที่อยู่ IP ที่เครื่องจะตอบสนอง เช่น 0.0.0.0 และกำหนด Local Port ให้คงที่",
-    "tunnelSharesSessionCookie": "การเปิดอุโมงค์นี้จะส่งเซสชัน Termix ของคุณไปยังบริการผ่านอุโมงค์ เนื่องจากเบราว์เซอร์ของคุณจะเข้าถึงบริการนั้นด้วยชื่อโฮสต์เดียวกับที่ Termix ให้บริการ คุกกี้จะไม่สนใจพอร์ต ดังนั้นจึงไม่สามารถแยกแยะความแตกต่างระหว่างทั้งสองได้ ใช้แอป Termix บนเดสก์ท็อป หรือเปิด Termix ที่ localhost",
-    "directSharesSessionCookie": "การเปิดเอนด์พอยต์นี้จะส่งเซสชัน Termix ของคุณไปยังเอนด์พอยต์นี้ เนื่องจากเบราว์เซอร์ของคุณเข้าถึงเอนด์พอยต์นี้จากเว็บไซต์เดียวกับที่ Termix ให้บริการ คุกกี้จะไม่สนใจพอร์ต ดังนั้นพอร์ตที่ต่างกันจึงไม่ได้หมายถึงตัวตนที่ต่างกัน ใช้แอปพลิเคชัน Termix บนเดสก์ท็อป หรือให้บริการเว็บ UI นี้จากชื่อโฮสต์อื่น",
-    "retry": "ลองใหม่อีกครั้ง",
-    "reload": "โหลดซ้ำ",
-    "copyUrl": "คัดลอก URL",
-    "urlCopied": "คัดลอก URL แล้ว",
-    "copyFailed": "ไม่สามารถคัดลอก URL ได้",
-    "openExternally": "เปิดจากภายนอก",
-    "isolationUnavailable": "เบราว์เซอร์นี้ไม่สามารถแยกเว็บเอนด์พอยต์ออกจากเซสชัน Termix ของคุณได้ โปรดใช้เบราว์เซอร์ที่รองรับ iframe แบบไม่ต้องใส่ข้อมูลรับรอง",
-    "isolationNotice": "หน้าเว็บที่ฝังอยู่จะใช้เซสชันแยกต่างหาก สำหรับหน้าเว็บที่ต้องการพื้นที่จัดเก็บข้อมูลหรือการลงชื่อเข้าใช้แบบป๊อปอัพ ให้ใช้หน้าต่างแยกต่างหากในแอปพลิเคชันบนเดสก์ท็อป",
-    "openIsolatedWindow": "เปิดหน้าต่างแยกต่างหาก"
-  },
-  "hosts": {
-    "tabWebUi": "ส่วนติดต่อผู้ใช้บนเว็บ",
-    "webUiEndpointLabel": "จุดสิ้นสุด {{number}}",
-    "webUiIntegration": "ส่วนติดต่อผู้ใช้บนเว็บ",
-    "webUiEndpointsSection": "จุดสิ้นสุด",
-    "webUiNoEndpoints": "ยังไม่มีเว็บเอนด์พอยต์ ใช้ฟังก์ชัน \"เพิ่มเอนด์พอยต์\" เพื่อสร้างเอนด์พอยต์",
-    "webUiEndpointsDisabled": "เปิดใช้งาน Web UI ด้านบนเพื่อเพิ่มเอนด์พอยต์",
-    "webUiRequirementsText": "เบราว์เซอร์ของคุณจะเปิดปลายทางโดยตรง ดังนั้นพอร์ตจะต้องสามารถเข้าถึงได้จากที่นี่ แต่หากใช้ Termix จะเปิดอุโมงค์ SSH ผ่านการเชื่อมต่อ SSH ของโฮสต์นี้แทน ดังนั้นพอร์ตจึงไม่จำเป็นต้องสามารถเข้าถึงได้จากโฮสต์เพียงอย่างเดียว",
-    "enableWebUi": "เปิดใช้งานเอนด์พอยต์เว็บ",
-    "enableWebUiDesc": "เปิดหน้าเว็บของโฮสต์นี้จากแถบด้านข้าง",
-    "webUiAddEndpoint": "เพิ่มเอนด์พอยต์",
-    "webUiAddress": "ที่อยู่",
-    "webUiOpening": "เปิด",
-    "webUiBindHostDesc": "ตรงส่วนที่แบ็กเอนด์เชื่อมต่อกับส่วนหน้า เว้นว่างไว้สำหรับ 127.0.0.1 ซึ่งมีเพียงเครื่องที่ใช้งาน Termix เท่านั้นที่สามารถเข้าถึงได้",
-    "webUiBindHostExposed": "ที่อยู่เว็บนี้สามารถเข้าถึงได้จากภายนอกเครื่อง Termix ดังนั้นใครก็ตามที่สามารถเข้าถึงพอร์ตนี้จะสามารถเข้าถึงเว็บ UI นี้ได้โดยไม่ต้องล็อกอิน",
-    "webUiLocalPort": "ท่าเรือท้องถิ่น",
-    "webUiLocalPortAuto": "อัตโนมัติ",
-    "webUiLocalPortDesc": "พอร์ตที่ตัวส่งต่อรับฟังอยู่ เว้นว่างไว้เพื่อให้ระบบเลือก หรือระบุพอร์ตเมื่อจำเป็นต้องทราบพอร์ตล่วงหน้า เช่น คอนเทนเนอร์ที่เผยแพร่พอร์ตนั้น",
-    "webUiNewEndpointLabel": "จุดเชื่อมต่อใหม่",
-    "webUiLabel": "ฉลาก",
-    "webUiScheme": "โครงการ",
-    "webUiPort": "ท่าเรือ",
-    "webUiPath": "เส้นทาง",
-    "webUiAccess": "เข้าถึง",
-    "webUiAccessDirect": "โดยตรง",
-    "webUiAccessTunnel": "อุโมงค์ SSH",
-    "webUiAccessTunnelUnavailable": "การสร้างอุโมงค์ SSH จำเป็นต้องเปิดใช้งาน SSH บนโฮสต์นี้ และต้องมีอุปกรณ์นี้เป็นแหล่งกำเนิดการเชื่อมต่อ",
-    "webUiRender": "เปิดใน",
-    "webUiRenderExternal": "หน้าต่างเดสก์ท็อปแบบแยกเดี่ยว",
-    "webUiRenderEmbedded": "แท็บเทอร์มิกซ์",
-    "webUiRenderEmbeddedDesc": "การฝังเนื้อหาทำได้ดีที่สุดเท่าที่จะทำได้: อินเทอร์เฟซเว็บบางอย่างอาจไม่สามารถโหลดในเฟรมได้ และการเข้าสู่ระบบที่อาศัยคุกกี้ในเว็บไซต์เดียวกันอาจวนลูป แต่เบราว์เซอร์ภายนอกใช้งานได้เสมอ",
-    "webUiIgnoreCert": "อนุญาตให้ใช้ใบรับรองที่ไม่ถูกต้อง",
-    "webUiIgnoreCertDesc": "เฉพาะปลายทางที่เชื่อมต่อโดยตรงเท่านั้น การเชื่อมต่อแบบ Loopback ได้รับการยกเว้นอยู่แล้ว ดังนั้นจึงไม่มีผลกระทบต่อปลายทางแบบ Tunnel",
-    "webUiRemoveEndpoint": "ลบจุดสิ้นสุด",
-    "webUiOpenFailed": "ไม่สามารถเปิดเว็บเอนด์พอยต์ได้",
-    "bindHost": "โฮสต์ผูก"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/tr_TR.json b/plugins/web-endpoint/locales/translated/tr_TR.json
deleted file mode 100644
index bce58ef6c..000000000
--- a/plugins/web-endpoint/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "Hiçbir host seçilmedi",
-    "notFound": "Bu uç nokta artık mevcut değil.",
-    "tunnelUnreachableFromBrowser": "Bu uç nokta, tarayıcınızın erişemediği Termix'i çalıştıran makinedeki 127.0.0.1 adresine tünel oluşturur. Uç noktanın Bağlantı Ana Bilgisayarını, bu makinenin yanıt verdiği bir adrese (örneğin 0.0.0.0) ayarlayın ve sabit bir Yerel Bağlantı Noktası verin.",
-    "tunnelSharesSessionCookie": "Bu tüneli açmak, Termix oturumunuzu tünellenmiş servise yönlendirecektir, çünkü tarayıcınız Termix'in sunulduğu aynı ana bilgisayar adından ona ulaşacaktır. Çerezler bağlantı noktasını dikkate almaz, bu nedenle ikisi birbirinden ayırt edilemez. Termix masaüstü uygulamasını kullanın veya Termix'i localhost'ta açın.",
-    "directSharesSessionCookie": "Bu uç noktayı açmak, Termix oturumunuzu ona yönlendirecektir, çünkü tarayıcınız Termix'in sunulduğu aynı siteden ona ulaşır. Çerezler bağlantı noktasını dikkate almaz, bu nedenle farklı bir bağlantı noktası farklı bir kimlik anlamına gelmez. Termix masaüstü uygulamasını kullanın veya bu web arayüzünü farklı bir ana bilgisayar adından sunun.",
-    "retry": "Yeniden dene",
-    "reload": "Yeniden yükle",
-    "copyUrl": "URL'yi kopyala",
-    "urlCopied": "URL kopyalandı",
-    "copyFailed": "URL kopyalama başarısız oldu.",
-    "openExternally": "Harici Olarak Aç",
-    "isolationUnavailable": "Bu tarayıcı, web uç noktalarını Termix oturumunuzdan izole edemez. Kimlik bilgisi gerektirmeyen iframe desteği olan bir tarayıcı kullanın.",
-    "isolationNotice": "Gömülü sayfalar ayrı bir oturum kullanır. Depolama gerektiren veya açılır pencereyle oturum açma işlemi gerektiren sayfalar için masaüstü uygulamasında ayrı bir pencere kullanın.",
-    "openIsolatedWindow": "İzole edilmiş pencereyi açın"
-  },
-  "hosts": {
-    "tabWebUi": "Web arayüzü",
-    "webUiEndpointLabel": "Uç nokta {{number}}",
-    "webUiIntegration": "Web arayüzü",
-    "webUiEndpointsSection": "Uç noktalar",
-    "webUiNoEndpoints": "Henüz web uç noktası yok. Bir tane oluşturmak için Uç nokta ekle'yi kullanın.",
-    "webUiEndpointsDisabled": "Uç noktalar eklemek için yukarıdaki Web arayüzünü etkinleştirin.",
-    "webUiRequirementsText": "Tarayıcınız tarafından doğrudan bir uç nokta açılır, bu nedenle bağlantı noktasının buradan erişilebilir olması gerekir. Bunun yerine Termix, bu sunucunun SSH bağlantısı üzerinden bir SSH tüneli açar, bu nedenle bağlantı noktasının yalnızca sunucudan erişilebilir olması yeterlidir.",
-    "enableWebUi": "Web uç noktalarını etkinleştirin",
-    "enableWebUiDesc": "Bu sunucunun web arayüzlerini yan menüden açın.",
-    "webUiAddEndpoint": "Uç nokta ekle",
-    "webUiAddress": "Adres",
-    "webUiOpening": "Açılış",
-    "webUiBindHostDesc": "Arka uç, ön ucu birbirine bağlar. Sadece Termix'i çalıştıran makinenin erişebileceği 127.0.0.1 için boş bırakın.",
-    "webUiBindHostExposed": "Bu adrese Termix makinesinin ötesinden de erişilebildiği için, porta erişebilen herkes giriş yapmadan bu web arayüzüne ulaşabilir.",
-    "webUiLocalPort": "Yerel Port",
-    "webUiLocalPortAuto": "Otomatik",
-    "webUiLocalPortDesc": "Yönlendiricinin hangi porttan dinleyeceğini belirtin. Sistemin seçmesine izin vermek için boş bırakın veya portun önceden bilinmesi gerektiğinde (örneğin, portun yayınlandığı bir konteyner gibi) bir port belirleyin.",
-    "webUiNewEndpointLabel": "Yeni uç nokta",
-    "webUiLabel": "Etiket",
-    "webUiScheme": "Plan",
-    "webUiPort": "Port",
-    "webUiPath": "Yol",
-    "webUiAccess": "Erişim",
-    "webUiAccessDirect": "Doğrudan",
-    "webUiAccessTunnel": "SSH tüneli",
-    "webUiAccessTunnelUnavailable": "SSH tüneli için bu sunucuda SSH'nin etkinleştirilmiş olması ve bağlantı kaynağının bu cihaz olması gerekmektedir.",
-    "webUiRender": "Şurada aç",
-    "webUiRenderExternal": "Yalıtılmış masaüstü penceresi",
-    "webUiRenderEmbedded": "Termix tableti",
-    "webUiRenderEmbeddedDesc": "Gömme işlemi en iyi çaba prensibine dayanır: bazı web arayüzleri bir çerçeve içinde yüklenmeyi reddeder ve aynı site çerezlerine dayanan bir oturum açma işlemi döngüye girebilir. Harici tarayıcı her zaman çalışır.",
-    "webUiIgnoreCert": "Geçersiz sertifikaya izin ver",
-    "webUiIgnoreCertDesc": "Yalnızca doğrudan uç noktalar için geçerlidir. Loopback zaten muaf tutulmuştur, bu nedenle tünel uç noktalarını etkilemez.",
-    "webUiRemoveEndpoint": "Uç noktayı kaldır",
-    "webUiOpenFailed": "Web uç noktası açılamadı.",
-    "bindHost": "Bağlanma Ana Bilgisayarı"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/uk_UA.json b/plugins/web-endpoint/locales/translated/uk_UA.json
deleted file mode 100644
index c75deab0a..000000000
--- a/plugins/web-endpoint/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "Хост не вибрано",
-    "notFound": "Цієї кінцевої точки більше не існує.",
-    "tunnelUnreachableFromBrowser": "Ця кінцева точка тунелює до 127.0.0.1 на машині з Termix, до якої ваш браузер не може дістатися. Встановіть для хоста прив'язки кінцевої точки адресу, на яку відповідає машина, наприклад, 0.0.0.0, і надайте їй фіксований локальний порт.",
-    "tunnelSharesSessionCookie": "Відкриття цього тунелю перенаправить ваш сеанс Termix до тунельованого сервісу, оскільки ваш браузер досягне його на тому ж імені хоста, з якого обслуговується Termix. Файли cookie ігнорують порт, тому їх не можна розрізнити. Скористайтеся десктопним застосунком Termix або відкрийте Termix на localhost.",
-    "directSharesSessionCookie": "Відкриття цієї кінцевої точки призведе до перенаправлення вашого сеансу Termix на неї, оскільки ваш браузер звертається до нього на тому ж сайті, з якого обслуговується Termix. Файли cookie ігнорують порт, тому інший порт не є іншою ідентифікатором. Використовуйте настільний додаток Termix або обслуговуйте цей веб-інтерфейс з іншого імені хоста.",
-    "retry": "Повторити спробу",
-    "reload": "Перезавантажити",
-    "copyUrl": "Копіювати URL-адресу",
-    "urlCopied": "URL-адресу скопійовано",
-    "copyFailed": "Не вдалося скопіювати URL-адресу",
-    "openExternally": "Відкрити зовні",
-    "isolationUnavailable": "Цей браузер не може ізолювати кінцеві точки веб-сайту від вашого сеансу Termix. Використовуйте браузер із підтримкою iframe без облікових даних.",
-    "isolationNotice": "Вбудовані сторінки використовують ізольований сеанс. Для сторінок, що потребують сховища або спливаючого входу, використовуйте ізольоване вікно в настільному додатку.",
-    "openIsolatedWindow": "Відкрите ізольоване вікно"
-  },
-  "hosts": {
-    "tabWebUi": "Веб-інтерфейс",
-    "webUiEndpointLabel": "Кінцева точка {{number}}",
-    "webUiIntegration": "Веб-інтерфейс",
-    "webUiEndpointsSection": "Кінцеві точки",
-    "webUiNoEndpoints": "Поки що немає кінцевих точок веб-сайту. Створіть її за допомогою опції \"Додати кінцеву точку\".",
-    "webUiEndpointsDisabled": "Увімкніть веб-інтерфейс вище, щоб додати кінцеві точки.",
-    "webUiRequirementsText": "Ваш браузер відкривається прямою кінцевою точкою, тому її порт має бути доступним звідси. Натомість Termix відкриває SSH-тунель через SSH-з'єднання цього хоста, тому порт має бути доступним лише з хоста.",
-    "enableWebUi": "Увімкнути веб-кінцеві точки",
-    "enableWebUiDesc": "Відкрийте веб-інтерфейси цього хоста з бічної панелі.",
-    "webUiAddEndpoint": "Додати кінцеву точку",
-    "webUiAddress": "Адреса",
-    "webUiOpening": "Відкриття",
-    "webUiBindHostDesc": "Де серверна частина зв'язується з пересиланням. Залиште поле порожнім для 127.0.0.1, до якого може отримати доступ лише машина з Termix.",
-    "webUiBindHostExposed": "Ця адреса доступна за межами машини Termix, тому кожен, хто може отримати доступ до порту, отримає цей веб-інтерфейс без входу в систему.",
-    "webUiLocalPort": "Локальний порт",
-    "webUiLocalPortAuto": "Автоматичний",
-    "webUiLocalPortDesc": "На якому порту прослуховується переадресація. Залиште поле порожнім, щоб дозволити системі вибрати, або встановіть порт, якщо порт має бути відомий заздалегідь, наприклад, контейнер, який його публікує.",
-    "webUiNewEndpointLabel": "Нова кінцева точка",
-    "webUiLabel": "Мітка",
-    "webUiScheme": "Схема",
-    "webUiPort": "Порт",
-    "webUiPath": "Шлях",
-    "webUiAccess": "Доступ",
-    "webUiAccessDirect": "Прямий",
-    "webUiAccessTunnel": "SSH-тунель",
-    "webUiAccessTunnelUnavailable": "Для SSH-тунелю потрібно ввімкнути SSH на цьому хості та встановити джерело з'єднання на цьому пристрої.",
-    "webUiRender": "Відкрити в",
-    "webUiRenderExternal": "Ізольоване вікно робочого столу",
-    "webUiRenderEmbedded": "Вкладка Termix",
-    "webUiRenderEmbeddedDesc": "Вбудовування – найкращий спосіб: деякі веб-інтерфейси відмовляються завантажуватися у фреймі, а вхід, який залежить від файлів cookie того ж сайту, може зациклюватися. Зовнішній браузер завжди працює.",
-    "webUiIgnoreCert": "Дозволити недійсний сертифікат",
-    "webUiIgnoreCertDesc": "Тільки прямі кінцеві точки. Зациклення вже виключено, тому це не впливає на кінцеві точки тунелю.",
-    "webUiRemoveEndpoint": "Видалити кінцеву точку",
-    "webUiOpenFailed": "Не вдалося відкрити кінцеву точку веб-сайту",
-    "bindHost": "Прив’язати хост"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/vi_VN.json b/plugins/web-endpoint/locales/translated/vi_VN.json
deleted file mode 100644
index ae81e0860..000000000
--- a/plugins/web-endpoint/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "Chưa chọn máy chủ",
-    "notFound": "Điểm cuối này không còn tồn tại nữa.",
-    "tunnelUnreachableFromBrowser": "Điểm cuối này tạo đường hầm đến 127.0.0.1 trên máy đang chạy Termix, mà trình duyệt của bạn không thể truy cập được. Hãy đặt Bind Host của điểm cuối thành một địa chỉ mà máy đó phản hồi, chẳng hạn như 0.0.0.0, và gán cho nó một Cổng cục bộ cố định.",
-    "tunnelSharesSessionCookie": "Việc mở đường hầm này sẽ chuyển phiên Termix của bạn đến dịch vụ được tạo đường hầm, vì trình duyệt của bạn sẽ truy cập dịch vụ đó bằng cùng tên máy chủ mà Termix được phục vụ. Cookie bỏ qua cổng, vì vậy không thể phân biệt được hai dịch vụ này. Hãy sử dụng ứng dụng Termix dành cho máy tính để bàn hoặc mở Termix tại localhost.",
-    "directSharesSessionCookie": "Việc mở điểm cuối này sẽ gửi phiên Termix của bạn đến đó, vì trình duyệt của bạn truy cập nó từ cùng một trang web mà Termix được cung cấp. Cookie bỏ qua cổng, vì vậy một cổng khác không có nghĩa là một danh tính khác. Hãy sử dụng ứng dụng Termix dành cho máy tính để bàn, hoặc cung cấp giao diện người dùng web này từ một tên máy chủ khác.",
-    "retry": "Thử lại",
-    "reload": "Tải lại",
-    "copyUrl": "Sao chép URL",
-    "urlCopied": "URL đã được sao chép",
-    "copyFailed": "Không thể sao chép URL",
-    "openExternally": "Mở bên ngoài",
-    "isolationUnavailable": "Trình duyệt này không thể tách biệt các điểm cuối web khỏi phiên Termix của bạn. Hãy sử dụng trình duyệt hỗ trợ iframe không cần thông tin đăng nhập.",
-    "isolationNotice": "Các trang nhúng sử dụng một phiên riêng biệt. Đối với các trang yêu cầu lưu trữ hoặc đăng nhập bằng cửa sổ bật lên, hãy sử dụng một cửa sổ riêng biệt trong ứng dụng dành cho máy tính để bàn.",
-    "openIsolatedWindow": "Cửa sổ riêng biệt đang mở"
-  },
-  "hosts": {
-    "tabWebUi": "Giao diện người dùng web",
-    "webUiEndpointLabel": "Điểm cuối {{number}}",
-    "webUiIntegration": "Giao diện người dùng web",
-    "webUiEndpointsSection": "Điểm cuối",
-    "webUiNoEndpoints": "Hiện chưa có điểm cuối web nào. Sử dụng chức năng Thêm điểm cuối để tạo một điểm cuối.",
-    "webUiEndpointsDisabled": "Bật giao diện Web UI ở trên để thêm các điểm cuối.",
-    "webUiRequirementsText": "Trình duyệt của bạn sẽ mở một điểm cuối trực tiếp, vì vậy cổng của nó phải có thể truy cập được từ đây. Thay vào đó, Termix sẽ mở một đường hầm SSH thông qua kết nối SSH của máy chủ này, vì vậy cổng chỉ cần có thể truy cập được từ máy chủ đó.",
-    "enableWebUi": "Kích hoạt các điểm cuối web",
-    "enableWebUiDesc": "Mở giao diện web của máy chủ này từ thanh bên.",
-    "webUiAddEndpoint": "Thêm điểm cuối",
-    "webUiAddress": "Địa chỉ",
-    "webUiOpening": "Khai mạc",
-    "webUiBindHostDesc": "Đây là nơi phần máy chủ liên kết với phần máy khách. Để trống trường 127.0.0.1, chỉ máy chạy Termix mới có thể truy cập được.",
-    "webUiBindHostExposed": "Địa chỉ này có thể truy cập được từ bên ngoài máy Termix, vì vậy bất kỳ ai có thể truy cập được cổng này đều có thể sử dụng giao diện web này mà không cần đăng nhập.",
-    "webUiLocalPort": "Cổng cục bộ",
-    "webUiLocalPortAuto": "Tự động",
-    "webUiLocalPortDesc": "Chọn cổng mà bản ghi chuyển tiếp lắng nghe. Để trống để hệ thống tự chọn, hoặc đặt một cổng khi cần biết trước cổng, ví dụ như một container công bố cổng đó.",
-    "webUiNewEndpointLabel": "Điểm cuối mới",
-    "webUiLabel": "Nhãn",
-    "webUiScheme": "Cơ chế",
-    "webUiPort": "Cổng",
-    "webUiPath": "Đường dẫn",
-    "webUiAccess": "Truy cập",
-    "webUiAccessDirect": "Trực tiếp",
-    "webUiAccessTunnel": "Đường hầm SSH",
-    "webUiAccessTunnelUnavailable": "Đường hầm SSH cần có SSH được bật trên máy chủ này và nguồn kết nối là thiết bị này.",
-    "webUiRender": "Mở trong",
-    "webUiRenderExternal": "Cửa sổ màn hình nền riêng biệt",
-    "webUiRenderEmbedded": "Viên nén Termix",
-    "webUiRenderEmbeddedDesc": "Việc nhúng trang web chỉ mang tính chất tham khảo: một số giao diện web từ chối tải trong khung, và quá trình đăng nhập dựa vào cookie cùng trang có thể bị lặp lại. Trình duyệt bên ngoài luôn hoạt động bình thường.",
-    "webUiIgnoreCert": "Cho phép chứng chỉ không hợp lệ",
-    "webUiIgnoreCertDesc": "Chỉ áp dụng cho các điểm cuối trực tiếp. Giao diện vòng lặp đã được miễn trừ, vì vậy điều này không ảnh hưởng đến các điểm cuối đường hầm.",
-    "webUiRemoveEndpoint": "Xóa điểm cuối",
-    "webUiOpenFailed": "Không thể mở điểm cuối web",
-    "bindHost": "Máy chủ bind"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/zh_CN.json b/plugins/web-endpoint/locales/translated/zh_CN.json
deleted file mode 100644
index dd68010a2..000000000
--- a/plugins/web-endpoint/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "未选择主机",
-    "notFound": "此端点已不存在。",
-    "tunnelUnreachableFromBrowser": "此端点通过隧道连接到运行 Termix 的机器上的 127.0.0.1，您的浏览器无法直接访问该地址。请将此端点的绑定主机设置为该机器可以响应的地址，例如 0.0.0.0，并为其指定一个固定的本地端口。",
-    "tunnelSharesSessionCookie": "打开此隧道会将您的 Termix 会话发送到隧道服务，因为您的浏览器将通过与 Termix 服务相同的主机名访问该服务。Cookie 会忽略端口号，因此无法区分两者。请使用 Termix 桌面应用程序，或在本地主机上打开 Termix。",
-    "directSharesSessionCookie": "打开此端点会将您的 Termix 会话发送到该端点，因为您的浏览器访问的是 Termix 所在的同一站点。Cookie 会忽略端口号，因此不同的端口号并不代表不同的身份。请使用 Termix 桌面应用程序，或使用不同的主机名访问此 Web UI。",
-    "retry": "重试",
-    "reload": "重新加载",
-    "copyUrl": "复制链接",
-    "urlCopied": "复制的网址",
-    "copyFailed": "复制 URL 失败",
-    "openExternally": "在外部打开",
-    "isolationUnavailable": "此浏览器无法将 Web 端点与您的 Termix 会话隔离。请使用支持无需凭据即可访问 iframe 的浏览器。",
-    "isolationNotice": "嵌入式页面使用独立的会话。对于需要存储数据或弹出式登录的页面，请在桌面应用程序中使用独立的窗口。",
-    "openIsolatedWindow": "打开隔离窗口"
-  },
-  "hosts": {
-    "tabWebUi": "Web 用户界面",
-    "webUiEndpointLabel": "端点 {{number}}",
-    "webUiIntegration": "Web 用户界面",
-    "webUiEndpointsSection": "终点",
-    "webUiNoEndpoints": "暂无 Web 端点。请使用“添加端点”功能创建一个。",
-    "webUiEndpointsDisabled": "启用上方的 Web UI 以添加端点。",
-    "webUiRequirementsText": "浏览器会打开一个直接端点，因此其端口必须可从此处访问。而 Termix 则会通过此主机的 SSH 连接打开一个 SSH 隧道，因此该端口只需可从主机访问即可。",
-    "enableWebUi": "启用 Web 端点",
-    "enableWebUiDesc": "从侧边栏打开此主机的网页界面。",
-    "webUiAddEndpoint": "添加端点",
-    "webUiAddress": "地址",
-    "webUiOpening": "开场",
-    "webUiBindHostDesc": "后端绑定到前向路由的位置。如果是 127.0.0.1，则留空，因为只有运行 Termix 的机器才能访问该地址。",
-    "webUiBindHostExposed": "该地址在 Termix 机器之外也是可访问的，因此任何能够访问该端口的人都可以无需登录即可使用此 Web UI。",
-    "webUiLocalPort": "本地端口",
-    "webUiLocalPortAuto": "自动",
-    "webUiLocalPortDesc": "转发监听哪个端口。留空让系统自动选择，或者在需要预先知道端口的情况下（例如容器发布端口时）设置一个端口。",
-    "webUiNewEndpointLabel": "新端点",
-    "webUiLabel": "标签",
-    "webUiScheme": "方案",
-    "webUiPort": "端口",
-    "webUiPath": "路径",
-    "webUiAccess": "使用权",
-    "webUiAccessDirect": "直接",
-    "webUiAccessTunnel": "SSH隧道",
-    "webUiAccessTunnelUnavailable": "SSH隧道需要在此主机上启用SSH，并且连接源必须为该设备。",
-    "webUiRender": "打开",
-    "webUiRenderExternal": "隔离的桌面窗口",
-    "webUiRenderEmbedded": "Termix 选项卡",
-    "webUiRenderEmbeddedDesc": "嵌入功能只能尽力而为：某些网页界面无法在框架中加载，依赖同站点 Cookie 的登录可能会陷入循环。外部浏览器始终有效。",
-    "webUiIgnoreCert": "允许无效证书",
-    "webUiIgnoreCertDesc": "仅限直接端点。环回接口已获豁免，因此对隧道端点没有影响。",
-    "webUiRemoveEndpoint": "移除端点",
-    "webUiOpenFailed": "打开 Web 端点失败",
-    "bindHost": "绑定主机"
-  }
-}
diff --git a/plugins/web-endpoint/locales/translated/zh_TW.json b/plugins/web-endpoint/locales/translated/zh_TW.json
deleted file mode 100644
index 9dd09d0b3..000000000
--- a/plugins/web-endpoint/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "webEndpoint": {
-    "noHostSelected": "未選擇主機",
-    "notFound": "此端點已不存在。",
-    "tunnelUnreachableFromBrowser": "此端點透過隧道連接到執行 Termix 的機器上的 127.0.0.1，您的瀏覽器無法直接存取該位址。請將此端點的綁定主機設定為該機器可以回應的位址，例如 0.0.0.0，並為其指定一個固定的本機連接埠。",
-    "tunnelSharesSessionCookie": "開啟此隧道會將您的 Termix 工作階段傳送至隧道服務，因為您的瀏覽器將透過與 Termix 服務相同的主機名稱存取該服務。 Cookie 會忽略連接埠號，因此無法區分兩者。請使用 Termix 桌面應用程序，或在本機上開啟 Termix。",
-    "directSharesSessionCookie": "開啟此端點會將您的 Termix 會話傳送到該端點，因為您的瀏覽器造訪的是 Termix 所在的相同網站。 Cookie 會忽略連接埠號，因此不同的連接埠號碼並不代表不同的身分。請使用 Termix 桌面應用程序，或使用不同的主機名稱存取此 Web UI。",
-    "retry": "重試",
-    "reload": "重新載入",
-    "copyUrl": "複製連結",
-    "urlCopied": "複製的網址",
-    "copyFailed": "複製 URL 失敗",
-    "openExternally": "以外部編輯器開啟",
-    "isolationUnavailable": "此瀏覽器無法將 Web 端點與您的 Termix 工作階段隔離。請使用支援無需憑證的 iframe 的瀏覽器。",
-    "isolationNotice": "嵌入式頁面使用獨立的會話。對於需要儲存資料或彈出式登入的頁面，請在桌面應用程式中使用獨立的視窗。",
-    "openIsolatedWindow": "打開隔離視窗"
-  },
-  "hosts": {
-    "tabWebUi": "Web 使用者介面",
-    "webUiEndpointLabel": "端點 {{number}}",
-    "webUiIntegration": "Web 使用者介面",
-    "webUiEndpointsSection": "終點",
-    "webUiNoEndpoints": "暫無 Web 端點。請使用“新增端點”功能建立一個。",
-    "webUiEndpointsDisabled": "啟用上方的 Web UI 以新增端點。",
-    "webUiRequirementsText": "瀏覽器會開啟直接端點，因此其連接埠必須可從此處存取。而 Termix 則會透過此主機的 SSH 連線開啟一個 SSH 隧道，因此該連接埠只需可從主機存取即可。",
-    "enableWebUi": "啟用 Web 端點",
-    "enableWebUiDesc": "從側邊欄開啟此主機的網頁介面。",
-    "webUiAddEndpoint": "新增端點",
-    "webUiAddress": "位址",
-    "webUiOpening": "開場",
-    "webUiBindHostDesc": "後端綁定到前向路由的位置。如果是 127.0.0.1，則留空，因為只有執行 Termix 的機器才能存取該位址。",
-    "webUiBindHostExposed": "該位址在 Termix 機器之外也是可存取的，因此任何能夠存取該連接埠的人都可以無需登入即可使用此 Web UI。",
-    "webUiLocalPort": "本機連接埠",
-    "webUiLocalPortAuto": "自動的",
-    "webUiLocalPortDesc": "轉送監聽哪個連接埠。留空讓系統自動選擇，或在需要預先知道連接埠的情況下（例如容器發佈連接埠時）設定一個連接埠。",
-    "webUiNewEndpointLabel": "新端點",
-    "webUiLabel": "標籤",
-    "webUiScheme": "方案",
-    "webUiPort": "連接埠",
-    "webUiPath": "路徑",
-    "webUiAccess": "使用權",
-    "webUiAccessDirect": "直接",
-    "webUiAccessTunnel": "SSH隧道",
-    "webUiAccessTunnelUnavailable": "SSH隧道需要在此主機上啟用SSH，且連線來源必須為該裝置。",
-    "webUiRender": "打開",
-    "webUiRenderExternal": "隔離的桌面視窗",
-    "webUiRenderEmbedded": "Termix 選項卡",
-    "webUiRenderEmbeddedDesc": "嵌入功能只能盡力而為：某些網頁介面無法在框架中加載，依賴同網站 Cookie 的登入可能會陷入循環。外部瀏覽器始終有效。",
-    "webUiIgnoreCert": "允許無效的憑證",
-    "webUiIgnoreCertDesc": "僅限直接端點。環回介面已獲豁免，因此對隧道端點沒有影響。",
-    "webUiRemoveEndpoint": "移除端點",
-    "webUiOpenFailed": "開啟 Web 端點失敗",
-    "bindHost": "綁定主機"
-  }
-}
diff --git a/plugins/web-endpoint/manifest.json b/plugins/web-endpoint/manifest.json
deleted file mode 100644
index 18c2c058a..000000000
--- a/plugins/web-endpoint/manifest.json
+++ /dev/null
@@ -1,65 +0,0 @@
-{
-  "id": "web-endpoint",
-  "name": "Web Endpoint",
-  "version": "1.0.0",
-  "description": "Open a host's web UI in a tab or a separate desktop window, directly or over an SSH tunnel.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Networking",
-  "icon": "Globe",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "hosts:read",
-    "network:serve",
-    "ui:surface",
-    "desktop:window"
-  ],
-  "dependencies": {
-    "tunnels": "^1.0.0"
-  },
-  "requires": [
-    {
-      "service": "tunnels.access",
-      "versionRange": "^1.0.0"
-    }
-  ],
-  "contributes": {
-    "tabs": [
-      {
-        "id": "web-endpoint",
-        "titleKey": "hosts.tabWebUi",
-        "icon": "Globe",
-        "openFrom": ["host-context-menu"]
-      }
-    ],
-    "settings": {
-      "host": {
-        "enableKey": "enableWebUi",
-        "enableLabelKey": "hosts.enableWebUi",
-        "enableDescriptionKey": "hosts.enableWebUiDesc",
-        "fields": [
-          {
-            "key": "webUiConfig",
-            "type": "json",
-            "labelKey": "hosts.webUiEndpointsSection",
-            "requires": "enableWebUi",
-            "defaultable": false
-          }
-        ]
-      }
-    },
-    "hostCapability": {
-      "key": "enableWebUi",
-      "labelKey": "hosts.tabWebUi",
-      "editorTab": "general"
-    }
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"]
-}
diff --git a/plugins/web-endpoint/package.json b/plugins/web-endpoint/package.json
deleted file mode 100644
index 075c91f32..000000000
--- a/plugins/web-endpoint/package.json
+++ /dev/null
@@ -1,34 +0,0 @@
-{
-  "name": "@termix-plugin/web-endpoint",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "lucide-react": "^1.33.0"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/jest-dom": "^7.0.1",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "axios": "^1.19.0",
-    "express": "^5.2.1",
-    "i18next": "^26.4.2",
-    "react": "^19.2.8",
-    "sonner": "^2.0.8"
-  }
-}
diff --git a/plugins/web-endpoint/src/backend/host-import.ts b/plugins/web-endpoint/src/backend/host-import.ts
deleted file mode 100644
index 26202e4ae..000000000
--- a/plugins/web-endpoint/src/backend/host-import.ts
+++ /dev/null
@@ -1,19 +0,0 @@
-import { serializeWebUiConfig } from "../shared/web-endpoint-config.js";
-
-/**
- * Registered as ctx.registry.provide("web-endpoint.hostImportNormalizer", ...)
- * so host-bulk-routes.ts's Termix-JSON import path can validate this
- * plugin's fields without importing anything from the plugin. Matches the
- * shape core's PluginHostImportNormalizer type expects.
- */
-export function hostImportNormalizer(
-  raw: Record<string, unknown>,
-): Record<string, unknown> | null {
-  if (raw.enableWebUi === undefined && raw.webUiConfig === undefined) {
-    return null;
-  }
-  return {
-    enableWebUi: !!raw.enableWebUi,
-    webUiConfig: raw.webUiConfig ? serializeWebUiConfig(raw.webUiConfig) : null,
-  };
-}
diff --git a/plugins/web-endpoint/src/backend/index.ts b/plugins/web-endpoint/src/backend/index.ts
deleted file mode 100644
index 165590280..000000000
--- a/plugins/web-endpoint/src/backend/index.ts
+++ /dev/null
@@ -1,25 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { createWebEndpointRoutes } from "./routes.js";
-import { hostImportNormalizer } from "./host-import.js";
-
-export async function activate(ctx: PluginContext) {
-  const router = ctx.http.router<Router>();
-  router.use(createWebEndpointRoutes(ctx));
-
-  ctx.registry.provide(
-    "web-endpoint.hostImportNormalizer",
-    hostImportNormalizer,
-  );
-  ctx.disposables.add(
-    () =>
-      void ctx.registry.revoke(
-        "web-endpoint.hostImportNormalizer",
-        hostImportNormalizer,
-      ),
-  );
-
-  ctx.log.info("Web Endpoint routes mounted at /plugin-api/web-endpoint");
-}
-
-export async function deactivate() {}
diff --git a/plugins/web-endpoint/src/backend/routes.ts b/plugins/web-endpoint/src/backend/routes.ts
deleted file mode 100644
index 8a8d574ac..000000000
--- a/plugins/web-endpoint/src/backend/routes.ts
+++ /dev/null
@@ -1,301 +0,0 @@
-import express, { type Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import {
-  parseWebUiConfig,
-  type WebEndpoint,
-} from "../shared/web-endpoint-config.js";
-
-/** Matches the spec's ten minutes. */
-const WEB_ENDPOINT_IDLE_TIMEOUT_MS = 10 * 60 * 1000;
-
-/** The tunnels plugin, as ctx.services.get("tunnels.access") returns it. */
-interface TunnelsAccess {
-  forward(
-    sourceHostId: number,
-    target: {
-      targetHost: string;
-      targetPort: number;
-      bindHost?: string;
-      bindPort?: number;
-    },
-    options?: { name?: string; idleTimeoutMs?: number },
-  ): Promise<{ bindHost: string; bindPort: number }>;
-}
-
-/**
- * Reserved by the tunnels plugin for on-demand forwards: never retried, and
- * the host id in it is what the tunnels plugin checks before letting anyone
- * stop one by name.
- */
-export function webEndpointTunnelName(
-  hostId: number,
-  endpointId: string,
-): string {
-  return `web:${hostId}:${endpointId}`;
-}
-
-async function loadEndpoint(
-  ctx: PluginContext,
-  hostId: number,
-  endpointId: string,
-): Promise<
-  { error: { status: number; message: string } } | { endpoint: WebEndpoint }
-> {
-  const host = await ctx.hosts.get(hostId);
-  if (!host) {
-    return {
-      error: { status: 403, message: "Host not found or access denied" },
-    };
-  }
-
-  // A bulk update that only flips enableWebUi off can leave stale endpoints
-  // in webUiConfig. The UI reads as off in that state, so a listed endpoint
-  // is not on its own a licence to open a tunnel.
-  const enabled = await ctx.settings.getHost<boolean>(hostId, "enableWebUi");
-  if (!enabled) {
-    return {
-      error: {
-        status: 400,
-        message: "Web endpoints are not enabled for this host",
-      },
-    };
-  }
-
-  // Re-normalized rather than trusted: the stored value predates any later
-  // tightening of the rules, and this is the value a forward or a window is
-  // built from.
-  const rawConfig = await ctx.settings.getHost(hostId, "webUiConfig");
-  const endpoint = parseWebUiConfig(rawConfig).endpoints.find(
-    (candidate) => candidate.id === endpointId,
-  );
-  if (!endpoint) {
-    return { error: { status: 400, message: "Web endpoint not found" } };
-  }
-
-  return { endpoint };
-}
-
-async function openTunnel(
-  ctx: PluginContext,
-  hostId: number,
-  endpointId: string,
-  endpoint: WebEndpoint,
-): Promise<{ bindHost: string; bindPort: number }> {
-  const userId = ctx.currentActor();
-  let tunnels: TunnelsAccess | undefined;
-  try {
-    tunnels = ctx.services.get<TunnelsAccess>("tunnels.access", { userId });
-  } catch {
-    tunnels = undefined;
-  }
-  // A missing provider hands back an empty handle rather than throwing.
-  if (typeof tunnels?.forward !== "function") {
-    throw Object.assign(new Error("The tunnels plugin is not available"), {
-      status: 503,
-    });
-  }
-
-  try {
-    return await tunnels.forward(
-      hostId,
-      {
-        targetHost: "127.0.0.1",
-        targetPort: endpoint.port,
-        // Loopback unless the endpoint asks otherwise. A non-loopback bind
-        // publishes the target's web UI to anyone who can reach the port,
-        // with no authentication in front of it, and is only ever an
-        // explicit per-endpoint choice.
-        bindHost: endpoint.bindHost || "127.0.0.1",
-        // A fixed port when the endpoint names one, since a container can
-        // only publish ports it knows in advance. Otherwise the kernel picks.
-        bindPort: endpoint.localPort ?? undefined,
-      },
-      {
-        name: webEndpointTunnelName(hostId, endpointId),
-        idleTimeoutMs: WEB_ENDPOINT_IDLE_TIMEOUT_MS,
-      },
-    );
-  } catch (error) {
-    const reason = error instanceof Error ? error.message : String(error);
-    ctx.log.error(
-      `Failed to open web endpoint tunnel for host ${hostId}: ${reason}`,
-      error instanceof Error ? error : undefined,
-    );
-    throw Object.assign(new Error(reason), { status: 502 });
-  }
-}
-
-/** A bare IPv6 literal has to be bracketed to be a legal URL authority. */
-function bracketIfIpv6(host: string): string {
-  return host.includes(":") && !host.startsWith("[") ? `[${host}]` : host;
-}
-
-function endpointUrl(
-  hostAddress: string,
-  endpoint: WebEndpoint,
-  localPort?: number,
-): string {
-  const path = endpoint.path && endpoint.path.length > 0 ? endpoint.path : "/";
-  if (endpoint.access === "tunnel") {
-    // Electron's isolated window always dials the backend's own loopback,
-    // exactly like the renderer's own currentTunnelHost(true) does.
-    return `${endpoint.scheme}://127.0.0.1:${localPort}${path}`;
-  }
-  return `${endpoint.scheme}://${bracketIfIpv6(hostAddress)}:${endpoint.port}${path}`;
-}
-
-export function createWebEndpointRoutes(ctx: PluginContext): Router {
-  const router = express.Router();
-
-  /**
-   * @openapi
-   * /plugin-api/web-endpoint/open:
-   *   post:
-   *     summary: Open a tunnel to a host's web endpoint
-   *     description: For endpoints reached through SSH. Returns the local port the tunnel listens on.
-   *     tags: [Web Endpoint]
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required: [hostId, endpointId]
-   *             properties:
-   *               hostId: { type: integer }
-   *               endpointId: { type: string }
-   *     responses:
-   *       200: { description: The local port. }
-   *       400: { description: Invalid request, or the endpoint does not use a tunnel. }
-   *       401: { description: Not signed in. }
-   *       404: { description: Host or endpoint not found. }
-   */
-  router.post("/open", async (req, res) => {
-    const userId = ctx.currentActor();
-    if (!userId) {
-      return res.status(401).json({ error: "Authentication required" });
-    }
-
-    const { hostId, endpointId } = req.body ?? {};
-    if (
-      !Number.isInteger(hostId) ||
-      hostId < 1 ||
-      typeof endpointId !== "string"
-    ) {
-      return res.status(400).json({ error: "Invalid web endpoint request" });
-    }
-
-    // Deliberately NOT gated to the desktop. The forward binds wherever this
-    // backend runs, and the endpoint's own bindHost decides whether that is
-    // reachable from the browser.
-    const resolved = await loadEndpoint(ctx, hostId, endpointId);
-    if ("error" in resolved) {
-      return res
-        .status(resolved.error.status)
-        .json({ error: resolved.error.message });
-    }
-    if (resolved.endpoint.access !== "tunnel") {
-      return res
-        .status(400)
-        .json({ error: "This endpoint does not use a tunnel" });
-    }
-
-    try {
-      const handle = await openTunnel(
-        ctx,
-        hostId,
-        endpointId,
-        resolved.endpoint,
-      );
-      return res.status(200).json({ port: handle.bindPort });
-    } catch (error) {
-      const status = (error as { status?: number }).status ?? 500;
-      const message = error instanceof Error ? error.message : String(error);
-      return res.status(status).json({ error: message });
-    }
-  });
-
-  /**
-   * Opens the endpoint in an isolated Electron window instead of a tab.
-   * Every part of the target URL is resolved server-side (the host's own
-   * declared address for a direct endpoint, or the tunnel port this route
-   * just opened for a tunnel one) so ctx.desktop.openIsolatedWindow's
-   * capability check and audit line cover the whole decision, not just the
-   * final "open a window" step.
-   */
-  /**
-   * @openapi
-   * /plugin-api/web-endpoint/open-window:
-   *   post:
-   *     summary: Open a host's web endpoint in a desktop window
-   *     tags: [Web Endpoint]
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             required: [hostId, endpointId]
-   *             properties:
-   *               hostId: { type: integer }
-   *               endpointId: { type: string }
-   *               ignoreCert: { type: boolean, description: Accept a self-signed certificate for this window. }
-   *     responses:
-   *       200: { description: The window opened. }
-   *       400: { description: Invalid request. }
-   *       401: { description: Not signed in. }
-   *       404: { description: Host not found or access denied. }
-   */
-  router.post("/open-window", async (req, res) => {
-    const userId = ctx.currentActor();
-    if (!userId) {
-      return res.status(401).json({ error: "Authentication required" });
-    }
-
-    const { hostId, endpointId, ignoreCert } = req.body ?? {};
-    if (
-      !Number.isInteger(hostId) ||
-      hostId < 1 ||
-      typeof endpointId !== "string"
-    ) {
-      return res.status(400).json({ error: "Invalid web endpoint request" });
-    }
-
-    const resolved = await loadEndpoint(ctx, hostId, endpointId);
-    if ("error" in resolved) {
-      return res
-        .status(resolved.error.status)
-        .json({ error: resolved.error.message });
-    }
-    const { endpoint } = resolved;
-
-    try {
-      let localPort: number | undefined;
-      if (endpoint.access === "tunnel") {
-        const handle = await openTunnel(ctx, hostId, endpointId, endpoint);
-        localPort = handle.bindPort;
-      }
-
-      const host = await ctx.hosts.get(hostId);
-      if (!host) {
-        return res
-          .status(403)
-          .json({ error: "Host not found or access denied" });
-      }
-
-      const url = endpointUrl(host.ip, endpoint, localPort);
-      const result = await ctx.desktop.openIsolatedWindow({
-        url,
-        title: endpoint.label,
-        ignoreCert: endpoint.access === "direct" && ignoreCert === true,
-      });
-      return res.status(200).json(result);
-    } catch (error) {
-      const status = (error as { status?: number }).status ?? 502;
-      const message = error instanceof Error ? error.message : String(error);
-      return res.status(status).json({ error: message });
-    }
-  });
-
-  return router;
-}
diff --git a/plugins/web-endpoint/src/frontend/HostEditorWebUiSection.tsx b/plugins/web-endpoint/src/frontend/HostEditorWebUiSection.tsx
deleted file mode 100644
index ec7c8dafb..000000000
--- a/plugins/web-endpoint/src/frontend/HostEditorWebUiSection.tsx
+++ /dev/null
@@ -1,523 +0,0 @@
-import { useEffect, useState } from "react";
-import { Globe } from "lucide-react";
-import {
-  useTranslation,
-  type HostEditorSectionProps,
-} from "@termix/plugin-sdk/frontend";
-import {
-  Button,
-  Checkbox,
-  FakeSwitch,
-  Input,
-  SectionCard,
-  Select,
-  SelectContent,
-  SelectItem,
-  SelectTrigger,
-  SelectValue,
-  SettingRow,
-} from "@termix/plugin-sdk/ui";
-import { resolveConnectionOrigin } from "@termix/plugin-sdk/ui";
-import { isElectron } from "@termix/plugin-sdk/ui";
-import {
-  MAX_WEB_ENDPOINTS,
-  MAX_WEB_ENDPOINT_LABEL_LENGTH,
-  type WebEndpoint,
-} from "../shared/web-endpoint-config";
-import {
-  webEndpointRefusalReason,
-  type WebEndpointRefusalReason,
-} from "./web-endpoint-url";
-import {
-  MAX_WEB_ENDPOINT_PORT,
-  MIN_WEB_ENDPOINT_PORT,
-  isWebEndpointPortValid,
-  webEndpointErrorKey,
-  webEndpointRowError,
-} from "./web-endpoint-validation";
-
-type PluginSettingsForm = Record<string, Record<string, unknown>>;
-
-/**
- * crypto.randomUUID is undefined outside a secure context, so a plain-http web
- * deployment -- a first-class target for the direct+external path -- would
- * throw on "Add endpoint".
- */
-function endpointId(): string {
-  return typeof crypto.randomUUID === "function"
-    ? crypto.randomUUID()
-    : `${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}`;
-}
-
-// Only the tunnel-bind reasons render here; this preview sits inside the
-// tunnel-access block. The direct cookie refusal is enforced at open time in
-// WebEndpointTab / openWebEndpointExternally, where the target host is known.
-const BIND_HOST_REFUSAL_MESSAGES: Record<
-  Exclude<WebEndpointRefusalReason, "direct-shares-session-cookie">,
-  string
-> = {
-  "loopback-bind-on-remote-backend": "hosts.webUiBindHostUnreachable",
-  "shares-session-cookie-with-termix": "hosts.webUiBindHostSharesSessionCookie",
-};
-
-/**
- * True when the bind address reaches beyond the machine running the backend. A
- * forward bound there serves the target's web UI to anyone who can reach the
- * port, with no authentication in front of it, so the editor says so plainly
- * rather than leaving it to be discovered.
- */
-function isExposedBindHost(bindHost: string | undefined): boolean {
-  const value = (bindHost ?? "").trim();
-  if (!value) return false;
-  return !["127.0.0.1", "localhost", "::1", "[::1]"].includes(
-    value.toLowerCase(),
-  );
-}
-
-function newEndpoint(label: string): WebEndpoint {
-  return {
-    id: endpointId(),
-    label,
-    scheme: "https",
-    port: 443,
-    path: "/",
-    access: "direct",
-    render: "embedded",
-  };
-}
-
-/**
- * The host editor's Web UI tab. Writes into the form's pluginSettings for
- * this plugin, which the editor saves through the plugin's host settings
- * route after the host itself, exactly as the tunnels plugin's own section
- * does.
- *
- * Owns the async connection-origin resolution for the tunnel gate itself
- * (tunnelAvailable = enableSsh && originIsLocal), deliberately NOT gated on
- * isElectron(): the forward binds wherever the backend runs, exactly as the
- * tunnels plugin does, and a web deployment reaches it at the host serving
- * Termix provided the endpoint opted out of a loopback bind.
- *
- * connectionType is passed as "ssh" deliberately: a tunnel endpoint always
- * rides an SSH connection, and "ssh" keeps resolveConnectionOrigin out of its
- * RDP/VNC/Telnet guacamole special case, which always resolves to "remote".
- *
- * Note the deliberate asymmetry with the sidebar: the sidebar entry appears on
- * enableWebUi alone, because a direct endpoint needs no SSH -- but Web UI is
- * an SSH sub-tab, so a host with SSH disabled cannot configure endpoints at
- * all. That is the accepted behaviour, not an oversight.
- */
-export function HostEditorWebUiSection({
-  form,
-  updateForm,
-  protocols,
-}: HostEditorSectionProps) {
-  const { t } = useTranslation();
-  const [originIsLocal, setOriginIsLocal] = useState(false);
-
-  const connectionOrigin = (form?.connectionOrigin as string | null) ?? null;
-  useEffect(() => {
-    let cancelled = false;
-    void resolveConnectionOrigin({
-      connectionOrigin: connectionOrigin as "local" | "remote" | null,
-    }).then((origin) => {
-      if (!cancelled) setOriginIsLocal(origin === "local");
-    });
-    return () => {
-      cancelled = true;
-    };
-  }, [connectionOrigin]);
-
-  const tunnelAvailable = protocols.enableSsh && originIsLocal;
-
-  const settings = ((form?.pluginSettings as PluginSettingsForm | undefined)?.[
-    "web-endpoint"
-  ] ?? {}) as Record<string, unknown>;
-  const enableWebUi = settings.enableWebUi === true;
-  const webUiConfig = (settings.webUiConfig ?? { endpoints: [] }) as {
-    endpoints: WebEndpoint[];
-  };
-  const endpoints = webUiConfig.endpoints ?? [];
-
-  const setSettings = (patch: Record<string, unknown>) =>
-    updateForm((current) => {
-      const all = (current.pluginSettings ?? {}) as PluginSettingsForm;
-      return {
-        ...current,
-        pluginSettings: {
-          ...all,
-          "web-endpoint": { ...(all["web-endpoint"] ?? {}), ...patch },
-        },
-      };
-    });
-
-  const commit = (next: WebEndpoint[]) =>
-    setSettings({ webUiConfig: { endpoints: next } });
-
-  const update = (index: number, patch: Partial<WebEndpoint>) =>
-    commit(
-      endpoints.map((endpoint, i) =>
-        i === index ? { ...endpoint, ...patch } : endpoint,
-      ),
-    );
-
-  // Labels identify an endpoint in the sidebar picker, so a fresh row must not
-  // silently collide with one already there.
-  const uniqueLabel = (base: string) => {
-    const taken = new Set(endpoints.map((e) => e.label.trim()));
-    if (!taken.has(base)) return base;
-    for (let n = 2; ; n += 1) {
-      const candidate = `${base} ${n}`;
-      if (!taken.has(candidate)) return candidate;
-    }
-  };
-
-  const addEndpoint = () =>
-    commit([
-      ...endpoints,
-      newEndpoint(uniqueLabel(t("hosts.webUiNewEndpointLabel"))),
-    ]);
-
-  return (
-    // Two cards, as the tunnels tab does: settings first, then the list it
-    // governs, each with its own header.
-    <>
-      <SectionCard
-        title={t("hosts.webUiIntegration")}
-        icon={<Globe className="size-3.5" />}
-      >
-        <div className="flex flex-col gap-4 py-3">
-          <SettingRow
-            label={t("hosts.enableWebUi")}
-            description={t("hosts.enableWebUiDesc")}
-          >
-            <FakeSwitch
-              checked={enableWebUi}
-              onChange={(v: boolean) => setSettings({ enableWebUi: v })}
-            />
-          </SettingRow>
-          <div className="text-xs text-muted-foreground p-3 bg-muted/30 border border-border space-y-1">
-            <p>{t("hosts.webUiRequirementsText")}</p>
-          </div>
-        </div>
-      </SectionCard>
-
-      <SectionCard
-        title={t("hosts.webUiEndpointsSection")}
-        icon={<Globe className="size-3.5" />}
-        action={
-          enableWebUi ? (
-            // Same header control, and the same classes, as the tunnels list.
-            <Button
-              variant="outline"
-              size="sm"
-              className="h-6 text-[10px] px-2 border-accent-brand/40 text-accent-brand"
-              disabled={endpoints.length >= MAX_WEB_ENDPOINTS}
-              onClick={addEndpoint}
-            >
-              {t("hosts.webUiAddEndpoint")}
-            </Button>
-          ) : undefined
-        }
-      >
-        <div className="flex flex-col gap-3 py-3">
-          {!enableWebUi ? (
-            <p className="text-xs text-muted-foreground">
-              {t("hosts.webUiEndpointsDisabled")}
-            </p>
-          ) : endpoints.length === 0 ? (
-            <p className="text-xs text-muted-foreground">
-              {t("hosts.webUiNoEndpoints")}
-            </p>
-          ) : (
-            <>
-              {endpoints.map((endpoint, index) => {
-                const rowError = webEndpointRowError(endpoint);
-                return (
-                  <div
-                    key={endpoint.id}
-                    className="flex flex-col gap-3 p-3 border border-border bg-muted/20 relative group"
-                  >
-                    <div className="flex items-center justify-between mb-1">
-                      <span className="text-xs font-bold text-muted-foreground">
-                        {t("hosts.webUiEndpointLabel", { number: index + 1 })}
-                      </span>
-                      <Button
-                        variant="ghost"
-                        size="sm"
-                        aria-label={t("hosts.webUiRemoveEndpoint")}
-                        className="h-6 text-[10px] px-2 text-destructive"
-                        onClick={() =>
-                          commit(endpoints.filter((_, i) => i !== index))
-                        }
-                      >
-                        {t("common.delete")}
-                      </Button>
-                    </div>
-
-                    <div className="flex flex-col gap-1.5">
-                      <label className="text-[10px] font-bold text-muted-foreground">
-                        {t("hosts.webUiLabel")}
-                      </label>
-                      <Input
-                        aria-label={t("hosts.webUiLabel")}
-                        value={endpoint.label}
-                        onChange={(e) =>
-                          update(index, { label: e.target.value })
-                        }
-                        maxLength={MAX_WEB_ENDPOINT_LABEL_LENGTH}
-                        className="h-7 text-xs"
-                      />
-                    </div>
-
-                    {rowError && (
-                      <p className="text-[11px] text-destructive">
-                        {t(webEndpointErrorKey(rowError), { row: index + 1 })}
-                      </p>
-                    )}
-
-                    <div className="flex flex-col gap-1.5">
-                      <label className="text-[10px] font-bold text-muted-foreground">
-                        {t("hosts.webUiAddress")}
-                      </label>
-                      <div className="flex items-center gap-2">
-                        <Select
-                          value={endpoint.scheme}
-                          onValueChange={(value) =>
-                            update(index, {
-                              scheme: value as WebEndpoint["scheme"],
-                            })
-                          }
-                        >
-                          <SelectTrigger
-                            aria-label={t("hosts.webUiScheme")}
-                            size="sm"
-                            className="h-7 w-24 text-xs"
-                          >
-                            <SelectValue />
-                          </SelectTrigger>
-                          <SelectContent>
-                            <SelectItem value="https" className="text-xs">
-                              https
-                            </SelectItem>
-                            <SelectItem value="http" className="text-xs">
-                              http
-                            </SelectItem>
-                          </SelectContent>
-                        </Select>
-                        <Input
-                          aria-label={t("hosts.webUiPort")}
-                          type="number"
-                          min={MIN_WEB_ENDPOINT_PORT}
-                          max={MAX_WEB_ENDPOINT_PORT}
-                          value={endpoint.port}
-                          onChange={(e) => {
-                            // Number("") is 0, which the normalizer rejects --
-                            // so clearing the field would otherwise write an
-                            // endpoint that is silently dropped on save.
-                            // Commit only a value the normalizer would keep;
-                            // anything else leaves the last good port.
-                            const parsed = Number(e.target.value);
-                            if (isWebEndpointPortValid(parsed)) {
-                              update(index, { port: parsed });
-                            }
-                          }}
-                          className="h-7 w-20 text-xs"
-                        />
-                        <Input
-                          aria-label={t("hosts.webUiPath")}
-                          value={endpoint.path ?? "/"}
-                          onChange={(e) =>
-                            update(index, { path: e.target.value })
-                          }
-                          className="h-7 flex-1 text-xs"
-                        />
-                      </div>
-                    </div>
-
-                    <div className="flex flex-col gap-1.5">
-                      <label className="text-[10px] font-bold text-muted-foreground">
-                        {t("hosts.webUiOpening")}
-                      </label>
-                      <div className="flex items-center gap-2">
-                        <Select
-                          value={endpoint.access}
-                          onValueChange={(value) =>
-                            update(index, {
-                              access: value as WebEndpoint["access"],
-                              // Meaningless for a tunnel, whose host component
-                              // is loopback and already exempt.
-                              ignoreCert:
-                                value === "direct"
-                                  ? endpoint.ignoreCert
-                                  : false,
-                            })
-                          }
-                        >
-                          <SelectTrigger
-                            aria-label={t("hosts.webUiAccess")}
-                            size="sm"
-                            className="h-7 flex-1 text-xs"
-                          >
-                            <SelectValue />
-                          </SelectTrigger>
-                          <SelectContent>
-                            <SelectItem value="direct" className="text-xs">
-                              {t("hosts.webUiAccessDirect")}
-                            </SelectItem>
-                            <SelectItem
-                              value="tunnel"
-                              disabled={!tunnelAvailable}
-                            >
-                              {t("hosts.webUiAccessTunnel")}
-                            </SelectItem>
-                          </SelectContent>
-                        </Select>
-                        <Select
-                          value={endpoint.render}
-                          onValueChange={(value) =>
-                            update(index, {
-                              render: value as WebEndpoint["render"],
-                            })
-                          }
-                        >
-                          <SelectTrigger
-                            aria-label={t("hosts.webUiRender")}
-                            size="sm"
-                            className="h-7 flex-1 text-xs"
-                          >
-                            <SelectValue />
-                          </SelectTrigger>
-                          <SelectContent>
-                            <SelectItem
-                              value="external"
-                              className="text-xs"
-                              disabled={!isElectron()}
-                            >
-                              {t("hosts.webUiRenderExternal")}
-                            </SelectItem>
-                            <SelectItem value="embedded" className="text-xs">
-                              {t("hosts.webUiRenderEmbedded")}
-                            </SelectItem>
-                          </SelectContent>
-                        </Select>
-                      </div>
-                    </div>
-
-                    {endpoint.access === "tunnel" && (
-                      <div className="flex flex-col gap-1.5">
-                        <label className="text-[10px] font-bold text-muted-foreground">
-                          {t("hosts.bindHost")}
-                        </label>
-                        <Input
-                          aria-label={t("hosts.bindHost")}
-                          placeholder="127.0.0.1"
-                          value={endpoint.bindHost ?? ""}
-                          onChange={(e) =>
-                            update(index, { bindHost: e.target.value })
-                          }
-                          className="h-7 text-xs"
-                        />
-                        <p className="text-[11px] opacity-70">
-                          {t("hosts.webUiBindHostDesc")}
-                        </p>
-                        <label className="text-[10px] font-bold text-muted-foreground">
-                          {t("hosts.webUiLocalPort")}
-                        </label>
-                        <Input
-                          aria-label={t("hosts.webUiLocalPort")}
-                          type="number"
-                          min={MIN_WEB_ENDPOINT_PORT}
-                          max={MAX_WEB_ENDPOINT_PORT}
-                          placeholder={t("hosts.webUiLocalPortAuto")}
-                          value={endpoint.localPort ?? ""}
-                          onChange={(e) => {
-                            const raw = e.target.value;
-                            if (raw === "") {
-                              update(index, { localPort: undefined });
-                              return;
-                            }
-                            const parsed = Number(raw);
-                            if (isWebEndpointPortValid(parsed)) {
-                              update(index, { localPort: parsed });
-                            }
-                          }}
-                          className="h-7 text-xs"
-                        />
-                        <p className="text-[11px] opacity-70">
-                          {t("hosts.webUiLocalPortDesc")}
-                        </p>
-                        {isExposedBindHost(endpoint.bindHost) && (
-                          <p className="text-[11px] text-destructive">
-                            {t("hosts.webUiBindHostExposed")}
-                          </p>
-                        )}
-                        {(() => {
-                          // Said while configuring, not only when the tab fails
-                          // to load: a loopback bind on a backend that is not
-                          // this machine opens fine and then leaves the browser
-                          // with nothing to connect to, and a tunnel reached at
-                          // Termix's own hostname would hand the tunnelled
-                          // service this session.
-                          const refusal = webEndpointRefusalReason(
-                            endpoint,
-                            isElectron(),
-                            undefined,
-                          );
-                          if (!refusal) return null;
-                          // Unreachable from this tunnel-only block; narrows
-                          // the union to the reasons this preview renders.
-                          if (refusal === "direct-shares-session-cookie") {
-                            return null;
-                          }
-                          return (
-                            <p className="text-[11px] text-destructive">
-                              {t(BIND_HOST_REFUSAL_MESSAGES[refusal])}
-                            </p>
-                          );
-                        })()}
-                      </div>
-                    )}
-
-                    {endpoint.render === "embedded" && (
-                      <p className="text-[11px] opacity-70">
-                        {t("hosts.webUiRenderEmbeddedDesc")}
-                      </p>
-                    )}
-
-                    {endpoint.access === "direct" && (
-                      <div className="flex flex-col gap-1">
-                        <label className="flex items-center gap-2 text-xs">
-                          <Checkbox
-                            checked={endpoint.ignoreCert === true}
-                            onCheckedChange={(value) =>
-                              update(index, { ignoreCert: value === true })
-                            }
-                          />
-                          {t("hosts.webUiIgnoreCert")}
-                        </label>
-                        <p className="text-[11px] opacity-70">
-                          {t("hosts.webUiIgnoreCertDesc")}
-                        </p>
-                      </div>
-                    )}
-                  </div>
-                );
-              })}
-
-              {!tunnelAvailable && (
-                // Shown whenever tunnelling is unavailable, not only once a row
-                // already asks for it: the Tunnel option renders disabled, and
-                // a disabled control with no stated reason reads as the
-                // dropdown being broken.
-                <p className="text-[11px] opacity-70">
-                  {t("hosts.webUiAccessTunnelUnavailable")}
-                </p>
-              )}
-            </>
-          )}
-        </div>
-      </SectionCard>
-    </>
-  );
-}
diff --git a/plugins/web-endpoint/src/frontend/WebEndpointTab.tsx b/plugins/web-endpoint/src/frontend/WebEndpointTab.tsx
deleted file mode 100644
index 79cc2dca7..000000000
--- a/plugins/web-endpoint/src/frontend/WebEndpointTab.tsx
+++ /dev/null
@@ -1,231 +0,0 @@
-import { useCallback, useEffect, useRef, useState } from "react";
-import { useTranslation } from "@termix/plugin-sdk/frontend";
-import { Globe, RotateCw } from "lucide-react";
-import { toast } from "sonner";
-import {
-  currentTunnelHost,
-  resolveWebEndpointUrl,
-  webEndpointRefusalReason,
-  type WebEndpointRefusalReason,
-} from "./web-endpoint-url";
-import {
-  allowInvalidCertificateForOrigin,
-  openWebEndpointExternally,
-  openWebEndpointTunnel,
-  requireNumericHostId,
-} from "./web-endpoint-api";
-import { copyToClipboard } from "@termix/plugin-sdk/ui";
-import { isElectron } from "@termix/plugin-sdk/ui";
-import { Button } from "@termix/plugin-sdk/ui";
-import type { PluginHostRecord as Host } from "@termix/plugin-sdk/frontend";
-import type { WebEndpoint } from "../shared/web-endpoint-config";
-
-const REFUSAL_MESSAGES: Record<WebEndpointRefusalReason, string> = {
-  "loopback-bind-on-remote-backend": "webEndpoint.tunnelUnreachableFromBrowser",
-  "shares-session-cookie-with-termix": "webEndpoint.tunnelSharesSessionCookie",
-  "direct-shares-session-cookie": "webEndpoint.directSharesSessionCookie",
-};
-
-/**
- * Renders one web endpoint in an iframe.
- *
- * Takes the whole host plus the endpoint's ID -- not the endpoint object --
- * so a tab whose endpoint was deleted while it was open (or that never matched
- * one, if the host's webUiConfig raced the tab's mount) can be detected here
- * and shown a plain "no longer exists" message instead of throwing on
- * endpoint.scheme.
- */
-export function WebEndpointTab({
-  host,
-  endpointId,
-}: {
-  host: Host;
-  endpointId?: string;
-}) {
-  const { t } = useTranslation();
-  const webUiConfig = (
-    host.pluginSettings as Record<string, Record<string, unknown>> | undefined
-  )?.["web-endpoint"]?.webUiConfig as { endpoints?: WebEndpoint[] } | undefined;
-  const endpoint = (webUiConfig?.endpoints ?? []).find(
-    (candidate) => candidate.id === endpointId,
-  );
-
-  const [url, setUrl] = useState<string | null>(null);
-  const [error, setError] = useState<string | null>(null);
-  /**
-   * Bumped on every resolution that lands, and folded into the iframe's key
-   * alongside the URL. A direct endpoint's URL never changes, and a live
-   * tunnel returns the SAME port on every open -- so the URL alone is not
-   * enough to key on: React bails out of a same-value setState, the key would
-   * not change, and Reload would silently do nothing in the two most common
-   * cases.
-   */
-  const [generation, setGeneration] = useState(0);
-  /**
-   * Guards two in-flight resolutions completing out of order -- a
-   * double-clicked Reload, or a manual reload racing the mount effect. Only
-   * the most recently started resolution may apply its result.
-   */
-  const resolveGenerationRef = useRef(0);
-
-  const resolve = useCallback(async () => {
-    if (!endpoint) return;
-    const mine = ++resolveGenerationRef.current;
-    setError(null);
-    try {
-      // Checked BEFORE the open call, not after. A tunnel must not be opened
-      // from a browser when a loopback bind on a remote backend would leave
-      // nothing to connect to, or when the tunnel URL would land on the page's
-      // own host string. A DIRECT endpoint on the same host that serves Termix
-      // leaks the session cookie exactly the same way -- cookies ignore the
-      // port -- so it is refused here too, before any navigation, rather than
-      // framing the URL and leaking on the first request.
-      const refusal = webEndpointRefusalReason(endpoint, isElectron(), host.ip);
-      if (refusal) {
-        throw new Error(t(REFUSAL_MESSAGES[refusal]));
-      }
-
-      if (!("credentialless" in HTMLIFrameElement.prototype)) {
-        throw new Error(t("webEndpoint.isolationUnavailable"));
-      }
-
-      // Always re-resolved rather than reloading the frame: the backend closes
-      // an idle tunnel after ten minutes and re-binds a fresh kernel-assigned
-      // port, so a cached port may be gone.
-      const localPort =
-        endpoint.access === "tunnel"
-          ? await openWebEndpointTunnel(
-              requireNumericHostId(host.id),
-              endpoint.id,
-            )
-          : undefined;
-
-      const resolved = resolveWebEndpointUrl({
-        hostAddress: host.ip,
-        endpoint,
-        localPort,
-        // Non-null for a tunnel by the time we get here: a null separated host
-        // is exactly what the refusal above catches.
-        tunnelHost: currentTunnelHost(isElectron()) ?? undefined,
-      });
-
-      if (endpoint.access === "direct" && endpoint.ignoreCert) {
-        await allowInvalidCertificateForOrigin(new URL(resolved).origin);
-      }
-
-      if (mine !== resolveGenerationRef.current) return;
-      setUrl(resolved);
-      setGeneration((g) => g + 1);
-    } catch (caught) {
-      if (mine !== resolveGenerationRef.current) return;
-      setError(caught instanceof Error ? caught.message : String(caught));
-    }
-    // Depends on the endpoint's FIELDS, not the object: host.webUiConfig is
-    // re-derived on every render of the host list, so a dependency on
-    // `endpoint` itself would reopen the tunnel on every parent render.
-    // bindHost and localPort are included because the refusal guard reads them.
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [
-    host.id,
-    host.ip,
-    endpoint?.id,
-    endpoint?.access,
-    endpoint?.scheme,
-    endpoint?.port,
-    endpoint?.path,
-    endpoint?.ignoreCert,
-    endpoint?.bindHost,
-    endpoint?.localPort,
-  ]);
-
-  useEffect(() => {
-    void resolve();
-  }, [resolve]);
-
-  if (!endpoint) {
-    return (
-      <div className="flex h-full flex-col items-center justify-center gap-2 p-6 text-xs text-muted-foreground">
-        <Globe className="size-5 opacity-60" />
-        <p>{t("webEndpoint.notFound")}</p>
-      </div>
-    );
-  }
-
-  if (error) {
-    return (
-      <div className="flex h-full flex-col items-center justify-center gap-2 p-6 text-xs">
-        <Globe className="size-5 opacity-60" />
-        <p className="text-center">{error}</p>
-        <Button variant="outline" size="sm" onClick={() => void resolve()}>
-          {t("webEndpoint.retry")}
-        </Button>
-      </div>
-    );
-  }
-
-  return (
-    <div className="flex h-full flex-col">
-      <div className="flex items-center gap-2 border-b border-border px-2 py-1 text-xs">
-        <Button
-          variant="ghost"
-          size="icon-sm"
-          onClick={() => void resolve()}
-          title={t("webEndpoint.reload")}
-        >
-          <RotateCw />
-        </Button>
-        <span className="truncate text-muted-foreground">{url ?? ""}</span>
-        <Button
-          variant="ghost"
-          size="xs"
-          className="ml-auto"
-          onClick={() => {
-            if (!url) return;
-            void copyToClipboard(url).then((ok) => {
-              if (ok) toast.success(t("webEndpoint.urlCopied"));
-              else toast.error(t("webEndpoint.copyFailed"));
-            });
-          }}
-        >
-          {t("webEndpoint.copyUrl")}
-        </Button>
-        {isElectron() && (
-          <Button
-            variant="ghost"
-            size="xs"
-            onClick={() => {
-              void openWebEndpointExternally(host, endpoint).catch((error) =>
-                toast.error(error.message),
-              );
-            }}
-          >
-            {t("webEndpoint.openIsolatedWindow")}
-          </Button>
-        )}
-      </div>
-      <p className="px-2 py-1 text-xs text-muted-foreground">
-        {t("webEndpoint.isolationNotice")}
-      </p>
-      {url && (
-        // Keyed on generation as well as url: a re-resolved tunnel usually
-        // returns the SAME port, so url alone would not change and React would
-        // never remount the frame.
-        <iframe
-          key={`${generation}:${url}`}
-          title={endpoint.label}
-          ref={(frame) => {
-            if (!frame) return;
-            // Set isolation before the first navigation, including redirects.
-            (
-              frame as HTMLIFrameElement & { credentialless: boolean }
-            ).credentialless = true;
-            frame.src = url;
-          }}
-          sandbox="allow-scripts allow-forms"
-          referrerPolicy="no-referrer"
-          className="h-full w-full flex-1 border-0"
-        />
-      )}
-    </div>
-  );
-}
diff --git a/plugins/web-endpoint/src/frontend/index.tsx b/plugins/web-endpoint/src/frontend/index.tsx
deleted file mode 100644
index 231036468..000000000
--- a/plugins/web-endpoint/src/frontend/index.tsx
+++ /dev/null
@@ -1,131 +0,0 @@
-import { Globe } from "lucide-react";
-import i18next from "i18next";
-import { toast } from "sonner";
-import type {
-  HostEditorSectionProps,
-  PluginHostRecord,
-  ShellApi,
-  TabProps,
-  TermixApp,
-} from "@termix/plugin-sdk/frontend";
-import type { PluginHostRecord as Host } from "@termix/plugin-sdk/frontend";
-import type { WebEndpoint } from "../shared/web-endpoint-config";
-import { WebEndpointTab } from "./WebEndpointTab";
-import { HostEditorWebUiSection } from "./HostEditorWebUiSection";
-import {
-  openWebEndpointExternally,
-  setWebEndpointApi,
-} from "./web-endpoint-api";
-
-const TAB_TYPE = "web-endpoint";
-
-function webEndpointSettings(host: PluginHostRecord): {
-  enableWebUi: boolean;
-  webUiConfig: { endpoints: WebEndpoint[] };
-} {
-  const settings = (
-    host.pluginSettings as Record<string, Record<string, unknown>> | undefined
-  )?.["web-endpoint"];
-  return {
-    enableWebUi: settings?.enableWebUi === true,
-    webUiConfig: (settings?.webUiConfig as
-      { endpoints: WebEndpoint[] } | undefined) ?? {
-      endpoints: [],
-    },
-  };
-}
-
-function endpointsOf(host: PluginHostRecord): WebEndpoint[] {
-  const { enableWebUi, webUiConfig } = webEndpointSettings(host);
-  if (!enableWebUi) return [];
-  return webUiConfig.endpoints ?? [];
-}
-
-function openEndpoint(
-  host: PluginHostRecord,
-  endpoint: WebEndpoint,
-  shell: ShellApi,
-): void {
-  if (endpoint.render === "external") {
-    // No tab at all: the real browser opens it. On the desktop the plugin
-    // asks the backend to open it in an isolated window.
-    openWebEndpointExternally(
-      host as unknown as { id: string; ip: string },
-      endpoint,
-    ).catch((error: unknown) => {
-      toast.error(
-        error instanceof Error
-          ? error.message
-          : i18next.t("web-endpoint:hosts.webUiOpenFailed"),
-      );
-    });
-    return;
-  }
-  shell.openTab(host, TAB_TYPE, {
-    label: endpoint.label,
-    data: { endpointId: endpoint.id },
-  });
-}
-
-function EndpointTab({ host, tab }: TabProps) {
-  // Resolved against the host on every render, so an endpoint deleted while
-  // its tab is open shows a plain message instead of throwing.
-  const endpointId = tab.data?.endpointId;
-  return (
-    <WebEndpointTab
-      host={host as unknown as Host}
-      endpointId={typeof endpointId === "string" ? endpointId : undefined}
-    />
-  );
-}
-
-function WebUiSection(props: HostEditorSectionProps) {
-  return <HostEditorWebUiSection {...props} />;
-}
-
-export function activate(app: TermixApp): void {
-  setWebEndpointApi(app.api);
-  app.onDispose(() => setWebEndpointApi(null));
-
-  app.registerTab(TAB_TYPE, EndpointTab, {
-    icon: Globe,
-    titleKey: "hosts.tabWebUi",
-    requiresHost: true,
-    noHostMessageKey: "webEndpoint.noHostSelected",
-    // A restored tab could never hold a valid URL: the backend closes an idle
-    // tunnel after ten minutes and binds a fresh port on the next open. So
-    // these tabs are session-only and never saved.
-    persistent: false,
-    inLayouts: false,
-  });
-
-  // One entry per host, not one per endpoint: with several it opens a picker.
-  // Gated on enableWebUi alone, since a direct endpoint needs no SSH.
-  app.registerHostAction({
-    id: TAB_TYPE,
-    titleKey: "hosts.tabWebUi",
-    icon: Globe,
-    kind: "open",
-    order: 80,
-    when: (host) => endpointsOf(host).length > 0,
-    label: (host) => {
-      const endpoints = endpointsOf(host);
-      return endpoints.length === 1 ? endpoints[0].label : undefined;
-    },
-    items: (host) =>
-      endpointsOf(host).map((endpoint) => ({
-        id: endpoint.id,
-        label: endpoint.label,
-        run: (target, shell) => openEndpoint(target, endpoint, shell),
-      })),
-  });
-
-  app.registerHostEditorSection({
-    id: "web-ui",
-    group: "ssh",
-    titleKey: "hosts.tabWebUi",
-    icon: Globe,
-    order: 40,
-    component: WebUiSection,
-  });
-}
diff --git a/plugins/web-endpoint/src/frontend/web-endpoint-api.ts b/plugins/web-endpoint/src/frontend/web-endpoint-api.ts
deleted file mode 100644
index 962f60524..000000000
--- a/plugins/web-endpoint/src/frontend/web-endpoint-api.ts
+++ /dev/null
@@ -1,155 +0,0 @@
-import axios from "axios";
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import { isElectron } from "@termix/plugin-sdk/ui";
-import type { WebEndpoint } from "../shared/web-endpoint-config";
-
-let pluginApi: PluginApiClient | null = null;
-
-function genericFailure(error: unknown, action: string): never {
-  if (!axios.isAxiosError(error) && error instanceof Error) throw error;
-  const status = axios.isAxiosError(error) ? error.response?.status : undefined;
-  throw new WebEndpointTunnelError(`Could not ${action}`, status);
-}
-
-/** Set from activate with app.api, cleared on deactivate. */
-export function setWebEndpointApi(api: PluginApiClient | null): void {
-  pluginApi = api;
-}
-
-/**
- * Thrown when the backend rejects a web endpoint tunnel open with a specific,
- * actionable reason -- most commonly a 502 carrying the real cause: SSH auth
- * rejected, host unreachable, or nothing listening on the target port.
- * Preserves that reason instead of collapsing three actionable errors into
- * one generic failure.
- */
-export class WebEndpointTunnelError extends Error {
-  constructor(
-    message: string,
-    public readonly status?: number,
-  ) {
-    super(message);
-    this.name = "WebEndpointTunnelError";
-  }
-}
-
-/**
- * Opens (or reuses) the SSH forward for a tunnel-access web endpoint and
- * returns the port it is listening on. The port is NOT stable across opens:
- * the backend closes an idle tunnel and re-binds a fresh kernel-assigned port,
- * so callers must re-resolve rather than cache it.
- */
-export async function openWebEndpointTunnel(
-  hostId: number,
-  endpointId: string,
-): Promise<number> {
-  try {
-    if (!pluginApi) throw new Error("The web endpoint plugin is not active");
-    // Relative to the plugin mount, /plugin-api/web-endpoint.
-    const response = await pluginApi.post("/open", {
-      hostId,
-      endpointId,
-    });
-    const port = (response?.data as { port?: number } | undefined)?.port;
-    if (!port) {
-      throw new Error("The endpoint tunnel returned no port");
-    }
-    return port;
-  } catch (error) {
-    if (axios.isAxiosError(error)) {
-      // Typed unknown, not string: the guard below is only meaningful if the
-      // type does not already promise what it checks.
-      const data = error.response?.data as
-        { error?: unknown; message?: unknown } | undefined;
-      const backendMessage = data?.error ?? data?.message;
-      // A body shaped { error: <object> } would otherwise render as
-      // "[object Object]". Every response on this route sends a string today,
-      // but a proxy or a future handler need not.
-      if (typeof backendMessage === "string" && backendMessage) {
-        throw new WebEndpointTunnelError(
-          backendMessage,
-          error.response?.status,
-        );
-      }
-    }
-    return genericFailure(error, "open web endpoint tunnel");
-  }
-}
-
-/**
- * Registers one exact origin as allowed to present an invalid TLS certificate.
- * Only meaningful on the desktop, and only for direct endpoints -- a tunnel
- * endpoint's host component is loopback, which the main process already
- * exempts.
- */
-export async function allowInvalidCertificateForOrigin(
-  origin: string,
-): Promise<void> {
-  if (!isElectron()) return;
-  try {
-    await window.electronAPI?.invoke?.(
-      "allow-invalid-certificate-for-origin",
-      origin,
-    );
-  } catch {
-    // The user's build may predate the handler; the load then simply fails the
-    // certificate check as it would have before.
-  }
-}
-
-/**
- * A web endpoint tunnel opens through the backend's numeric host id.
- * Quick-connect hosts (ids like "quick-connect-<n>") have no row on the
- * server, so there is nothing to open a tunnel through -- unlike a direct
- * endpoint, which never touches the backend and works regardless.
- */
-export function requireNumericHostId(id: string): number {
-  const numericId = Number(id);
-  if (!Number.isInteger(numericId) || numericId <= 0) {
-    throw new Error(
-      "This endpoint needs an SSH tunnel, which requires a saved host",
-    );
-  }
-  return numericId;
-}
-
-/**
- * Desktop windows use a dedicated ephemeral session, including login popups.
- *
- * The backend resolves and validates the target URL (the host's own declared
- * address for a direct endpoint, or the tunnel port it opens for a tunnel
- * one) and opens the window itself through ctx.desktop.openIsolatedWindow, so
- * the capability check and audit line cover the whole decision -- this call
- * only asks for it and reports whether it worked.
- */
-export async function openWebEndpointExternally(
-  host: { id: string; ip: string },
-  endpoint: WebEndpoint,
-): Promise<void> {
-  if (!isElectron()) {
-    throw new Error(
-      "Isolated windows require the desktop app. Choose Embedded in the endpoint settings.",
-    );
-  }
-  if (!pluginApi) throw new Error("The web endpoint plugin is not active");
-  try {
-    await pluginApi.post("/open-window", {
-      hostId: requireNumericHostId(host.id),
-      endpointId: endpoint.id,
-      ignoreCert: endpoint.ignoreCert === true,
-    });
-  } catch (error) {
-    if (axios.isAxiosError(error)) {
-      const data = error.response?.data as
-        { error?: unknown; message?: unknown } | undefined;
-      const backendMessage = data?.error ?? data?.message;
-      if (typeof backendMessage === "string" && backendMessage) {
-        throw new WebEndpointTunnelError(
-          backendMessage,
-          error.response?.status,
-        );
-      }
-    }
-    return genericFailure(error, "open isolated web endpoint");
-  }
-}
diff --git a/plugins/web-endpoint/src/frontend/web-endpoint-url.ts b/plugins/web-endpoint/src/frontend/web-endpoint-url.ts
deleted file mode 100644
index cc2bfebbd..000000000
--- a/plugins/web-endpoint/src/frontend/web-endpoint-url.ts
+++ /dev/null
@@ -1,211 +0,0 @@
-import type { WebEndpoint } from "../shared/web-endpoint-config";
-
-/**
- * Builds the URL a web endpoint opens at.
- *
- * Direct access points at the host's own address. Tunnel access points at a
- * port the backend has forwarded to the endpoint's port on the host -- so the
- * endpoint's own port is deliberately absent from a tunnel URL.
- *
- * Expects an endpoint whose `path` has already been normalized by
- * `normalizeWebEndpoints` (it always begins with "/"); a raw unvalidated path
- * would produce a malformed URL.
- */
-export function resolveWebEndpointUrl({
-  hostAddress,
-  endpoint,
-  localPort,
-  tunnelHost,
-}: {
-  hostAddress: string;
-  endpoint: WebEndpoint;
-  localPort?: number;
-  /**
-   * Where the caller can reach the forward the backend bound. Must never be
-   * the host string the browser is currently reaching Termix at -- see
-   * `separatedTunnelHost`. Defaults to loopback.
-   */
-  tunnelHost?: string;
-}): string {
-  const path = endpoint.path && endpoint.path.length > 0 ? endpoint.path : "/";
-
-  if (endpoint.access === "tunnel") {
-    if (!localPort) {
-      throw new Error("A tunnel endpoint needs a local port to resolve a URL");
-    }
-    const authority = bracketIfIpv6(tunnelHost?.trim() || "127.0.0.1");
-    return `${endpoint.scheme}://${authority}:${localPort}${path}`;
-  }
-
-  return `${endpoint.scheme}://${bracketIfIpv6(hostAddress)}:${endpoint.port}${path}`;
-}
-
-/** A bare IPv6 literal has to be bracketed to be a legal URL authority. */
-function bracketIfIpv6(host: string): string {
-  return host.includes(":") && !host.startsWith("[") ? `[${host}]` : host;
-}
-
-/** Host spellings that mean "this machine". */
-const LOOPBACK_HOSTS = new Set(["127.0.0.1", "localhost", "::1", "[::1]"]);
-
-/**
- * Each loopback spelling mapped to a DIFFERENT one that reaches the same
- * machine. Being a different string is the entire point.
- */
-const LOOPBACK_ALIASES: Record<string, string> = {
-  localhost: "127.0.0.1",
-  "127.0.0.1": "localhost",
-  "::1": "127.0.0.1",
-  "[::1]": "127.0.0.1",
-};
-
-/**
- * A host string that reaches the same machine as `pageHost` but is a
- * different key in the browser's cookie jar -- or null when none can be
- * derived.
- *
- * This is a security mitigation, not a cosmetic choice. Cookies are keyed by
- * host and IGNORE the port, and SameSite computes "site" as scheme +
- * registrable domain -- also ignoring the port. So a forward reached at the
- * very host string serving Termix is same-site with Termix, and two things
- * follow:
- *
- *   1. the browser attaches Termix's `jwt` cookie to every request the framed
- *      third-party server sees, including its access log; and
- *   2. a `Set-Cookie: jwt=...` from that server lands in the jar Termix's own
- *      API calls read from -- and both auth middlewares read the cookie
- *      BEFORE the Authorization header, so it decides who Termix acts as.
- *
- * Both directions were reproduced against a real SSH forward.
- *
- * Only loopback literals get an alias. A same-registrable-domain name would
- * not be safe even though it is a different host: the target could answer
- * `Set-Cookie: jwt=...; Domain=example.com`, which reaches Termix anyway.
- * Loopback literals cannot carry a Domain attribute, so they are the only
- * spellings that close both directions.
- */
-export function separatedTunnelHost(pageHost: string): string | null {
-  return LOOPBACK_ALIASES[pageHost.trim().toLowerCase()] ?? null;
-}
-
-/** Lowercase, trim, drop surrounding IPv6 brackets and a single trailing dot. */
-function normalizeHost(host: string): string {
-  let h = host.trim().toLowerCase();
-  if (h.startsWith("[") && h.endsWith("]")) h = h.slice(1, -1);
-  if (h.endsWith(".")) h = h.slice(0, -1);
-  return h;
-}
-
-/**
- * Whether a browser would attach Termix's `jwt` cookie to a request for
- * `targetHost` while the page is served from `pageHost` -- or accept a
- * `Set-Cookie` from `targetHost` into the jar Termix's own API reads.
- *
- * The web client sets `jwt` host-only (no `Domain`), so the port is irrelevant
- * and the disclosure direction is exactly an equal host. The reverse direction
- * -- the target answering `Set-Cookie: jwt=...; Domain=<parent>` -- reaches
- * Termix whenever the two share a domain, so a parent/sub relationship counts
- * too. The suffix check is anchored on a dot boundary so `eviltermix.example`
- * is not treated as same-site with `termix.example`.
- *
- * A precise registrable-domain (eTLD+1) test would also catch sibling
- * subdomains under a shared parent, but needs a public-suffix list this app
- * does not bundle; the exact/parent/sub check closes the reported same-host
- * case only. This is defense in depth, not cookie isolation: embedded frames
- * must use credentialless plus an opaque sandbox origin, including redirects.
- */
-export function sharesCookieSiteWithPage(
-  targetHost: string,
-  pageHost: string,
-): boolean {
-  const t = normalizeHost(targetHost);
-  const p = normalizeHost(pageHost);
-  if (!t || !p) return false;
-  if (t === p) return true;
-  return t.endsWith("." + p) || p.endsWith("." + t);
-}
-
-function defaultPageHost(): string {
-  return typeof window === "undefined" ? "127.0.0.1" : window.location.hostname;
-}
-
-/**
- * Why a web endpoint must not be opened from this client.
- *
- * `loopback-bind-on-remote-backend` -- the forward binds where the backend
- * runs. In a browser that is the server, so a loopback bind answers only to
- * the server itself: the open succeeds, the port exists, and the browser
- * still gets nothing.
- *
- * `shares-session-cookie-with-termix` -- the tunnel URL would resolve to the
- * same host string the page is served from, handing Termix's session token to
- * the tunnelled service. See `separatedTunnelHost`.
- *
- * `direct-shares-session-cookie` -- the same leak without a tunnel: a direct
- * endpoint's target host shares Termix's cookie site, so the browser attaches
- * the `jwt` to it (and accepts one back). A different port is not a different
- * cookie key. See `sharesCookieSiteWithPage`.
- */
-export type WebEndpointRefusalReason =
-  | "loopback-bind-on-remote-backend"
-  | "shares-session-cookie-with-termix"
-  | "direct-shares-session-cookie";
-
-/**
- * Why a web endpoint must not be opened from this client, or null when it may.
- *
- * Covers both access modes. A tunnel is refused when its forward would either
- * be unreachable (loopback bind on a remote backend) or resolve to the page's
- * own host string (`shares-session-cookie-with-termix`). A DIRECT endpoint is
- * refused when its target host shares Termix's cookie site
- * (`direct-shares-session-cookie`) -- the same leak, reached without a tunnel:
- * cookies ignore the port, so a UI on the very host serving Termix receives
- * the session. `hostAddress` is the direct endpoint's target host and is
- * ignored for tunnels.
- *
- * The desktop is exempt: its session is Bearer-only with no `jwt` in the jar,
- * and its API base ("localhost") is already separated from where tunnels
- * resolve ("127.0.0.1").
- */
-export function webEndpointRefusalReason(
-  endpoint: Pick<WebEndpoint, "access" | "bindHost">,
-  runningInElectron: boolean,
-  hostAddress: string | undefined,
-  pageHost: string = defaultPageHost(),
-): WebEndpointRefusalReason | null {
-  if (runningInElectron) return null;
-
-  if (endpoint.access === "direct") {
-    if (hostAddress && sharesCookieSiteWithPage(hostAddress, pageHost)) {
-      return "direct-shares-session-cookie";
-    }
-    return null;
-  }
-
-  if (endpoint.access !== "tunnel") return null;
-
-  const bindHost = (endpoint.bindHost ?? "").trim().toLowerCase();
-  // Reported first when both apply: the bind address is what the user has to
-  // change either way, and it is the more specific instruction.
-  if (!bindHost || LOOPBACK_HOSTS.has(bindHost)) {
-    return "loopback-bind-on-remote-backend";
-  }
-
-  if (!separatedTunnelHost(pageHost)) {
-    return "shares-session-cookie-with-termix";
-  }
-  return null;
-}
-
-/**
- * Where this client should reach a forward the backend bound, or null when no
- * host string is both reachable and safe -- in which case
- * `unreachableTunnelReason` explains why and the caller must not open.
- */
-export function currentTunnelHost(
-  runningInElectron: boolean,
-  pageHost: string = defaultPageHost(),
-): string | null {
-  if (runningInElectron) return "127.0.0.1";
-  return separatedTunnelHost(pageHost);
-}
diff --git a/plugins/web-endpoint/src/frontend/web-endpoint-validation.ts b/plugins/web-endpoint/src/frontend/web-endpoint-validation.ts
deleted file mode 100644
index f5df39d24..000000000
--- a/plugins/web-endpoint/src/frontend/web-endpoint-validation.ts
+++ /dev/null
@@ -1,119 +0,0 @@
-import type { WebEndpoint } from "../shared/web-endpoint-config";
-
-/**
- * Editor-side validation for web endpoint rows.
- *
- * The authority on what a stored endpoint may look like is
- * `normalizeWebEndpoints` in ../shared/web-endpoint-config.ts, and it DROPS
- * any row it refuses rather than reporting it -- so without a check here the
- * user adds a row, saves, sees no error, and finds the endpoint gone on
- * reload.
- *
- * This deliberately does NOT restate that module's full rule set: it covers
- * only the conditions a user can reach by typing, with per-field errors a
- * drop/keep normalizer cannot give. tests/backend/web-endpoint-config.test.ts
- * covers the normalizer; this file's own tests cover the same inputs here.
- */
-
-export const MIN_WEB_ENDPOINT_PORT = 1;
-export const MAX_WEB_ENDPOINT_PORT = 65535;
-
-export type WebEndpointFieldError =
-  "label" | "duplicateLabel" | "port" | "path";
-
-const ERROR_KEYS: Record<WebEndpointFieldError, string> = {
-  label: "hosts.webUiErrorLabelRequired",
-  duplicateLabel: "hosts.webUiErrorLabelDuplicate",
-  port: "hosts.webUiErrorPortRange",
-  path: "hosts.webUiErrorPathInvalid",
-};
-
-/**
- * The i18n key for a field error. Every key takes a `row` interpolation so the
- * message can say which endpoint is at fault.
- */
-export function webEndpointErrorKey(error: WebEndpointFieldError): string {
-  return ERROR_KEYS[error];
-}
-
-export function isWebEndpointPortValid(port: unknown): boolean {
-  return (
-    typeof port === "number" &&
-    Number.isInteger(port) &&
-    port >= MIN_WEB_ENDPOINT_PORT &&
-    port <= MAX_WEB_ENDPOINT_PORT
-  );
-}
-
-function hasControlCharacter(value: string): boolean {
-  for (let index = 0; index < value.length; index += 1) {
-    const code = value.charCodeAt(index);
-    if (code <= 0x1f || code === 0x7f) return true;
-  }
-  return false;
-}
-
-/**
- * True if the normalizer would accept this path. An empty or absent path is
- * fine -- the normalizer defaults it to "/" -- and so is a path with no
- * leading slash, which the normalizer coerces.
- */
-export function isWebEndpointPathValid(
-  raw: string | undefined | null,
-): boolean {
-  if (raw === undefined || raw === null || raw === "") return true;
-  if (hasControlCharacter(raw)) return false;
-
-  const path = raw.startsWith("/") ? raw : `/${raw}`;
-
-  // A protocol-relative or absolute path would send the iframe or the link
-  // somewhere other than the endpoint.
-  if (path.startsWith("//")) return false;
-  if (/^\/[a-z][a-z0-9+.-]*:/i.test(path)) return false;
-  if (path.includes("\\")) return false;
-
-  return true;
-}
-
-/**
- * The first thing wrong with one row, or null if the normalizer would keep it.
- * Label is checked before port so the message points at the field the user
- * most likely just left blank.
- */
-export function webEndpointRowError(
-  endpoint: WebEndpoint,
-): WebEndpointFieldError | null {
-  if (typeof endpoint.label !== "string" || endpoint.label.trim() === "") {
-    return "label";
-  }
-  if (!isWebEndpointPortValid(endpoint.port)) return "port";
-  if (!isWebEndpointPathValid(endpoint.path)) return "path";
-  return null;
-}
-
-/**
- * The first row the normalizer would drop, so a save can be blocked with a
- * message naming it. Returns null when every row would survive.
- *
- * Duplicate LABELS are reported even though the normalizer tolerates them:
- * the sidebar picker shows labels, so two identical ones are indistinguishable
- * to the user. Duplicate ids are generated, never typed.
- */
-export function findInvalidWebEndpoint(
-  endpoints: WebEndpoint[] | undefined | null,
-): { index: number; error: WebEndpointFieldError } | null {
-  if (!Array.isArray(endpoints)) return null;
-
-  const seen = new Set<string>();
-  for (let index = 0; index < endpoints.length; index += 1) {
-    const endpoint = endpoints[index];
-    const error = webEndpointRowError(endpoint);
-    if (error) return { index, error };
-
-    const label = endpoint.label.trim().toLowerCase();
-    if (seen.has(label)) return { index, error: "duplicateLabel" };
-    seen.add(label);
-  }
-
-  return null;
-}
diff --git a/plugins/web-endpoint/src/shared/web-endpoint-config.ts b/plugins/web-endpoint/src/shared/web-endpoint-config.ts
deleted file mode 100644
index 90cc1c272..000000000
--- a/plugins/web-endpoint/src/shared/web-endpoint-config.ts
+++ /dev/null
@@ -1,253 +0,0 @@
-/**
- * The plugin's own copy of what used to be core's host-web-endpoints.ts,
- * now that webUiConfig lives in this plugin's host-scope settings instead of
- * an ssh_data column. Same rules, same shape.
- *
- * Shared between backend and frontend (validation runs in both: the backend
- * is the real enforcement point, the editor mirrors it for instant feedback),
- * so this file has no runtime dependencies of its own.
- */
-
-export type WebEndpointAccess = "direct" | "tunnel";
-export type WebEndpointRender = "external" | "embedded";
-
-/** One web UI a host serves, declared in this plugin's host settings. */
-export interface WebEndpoint {
-  /**
-   * Stable identifier. Must NOT be derived from the port: it keys both the
-   * tunnel name and the tab identity, so editing a port has to leave a live
-   * tunnel findable under the same name.
-   */
-  id: string;
-  label: string;
-  scheme: "http" | "https";
-  port: number;
-  /** Defaults to "/". Normalized at the storage boundary, never here. */
-  path?: string;
-  access: WebEndpointAccess;
-  render: WebEndpointRender;
-  /**
-   * Direct endpoints only. Allows an invalid TLS certificate for this
-   * endpoint's exact origin. A no-op for tunnel access, whose host component
-   * is loopback and therefore already exempt.
-   */
-  ignoreCert?: boolean;
-  /**
-   * Tunnel endpoints only. Where the backend binds the forward, exactly as
-   * the tunnels plugin exposes it. Defaults to 127.0.0.1, reachable only from
-   * the machine running the backend. A web deployment runs the backend on a
-   * server, so reaching the forward from a browser needs an address that
-   * machine answers on -- which also exposes the target's web UI to anyone
-   * who can reach the port, with no login in front of it.
-   */
-  bindHost?: string;
-  /**
-   * Tunnel endpoints only. Which port the forward listens on, as the tunnels
-   * plugin's Source Port does. Left unset the kernel picks a free one, which
-   * is fine when backend and browser share a machine -- but a container can
-   * only publish ports it knows in advance.
-   */
-  localPort?: number;
-}
-
-export interface WebUiConfig {
-  endpoints: WebEndpoint[];
-}
-
-/** A host may declare at most this many web endpoints. */
-export const MAX_WEB_ENDPOINTS = 16;
-/** Endpoint labels are truncated to this length. */
-export const MAX_WEB_ENDPOINT_LABEL_LENGTH = 64;
-
-const SCHEMES = new Set(["http", "https"]);
-const ACCESS_VALUES = new Set(["direct", "tunnel"]);
-const RENDER_VALUES = new Set(["external", "embedded"]);
-
-const MIN_PORT = 1;
-const MAX_PORT = 65535;
-
-function isValidPort(value: unknown): value is number {
-  return (
-    typeof value === "number" &&
-    Number.isInteger(value) &&
-    value >= MIN_PORT &&
-    value <= MAX_PORT
-  );
-}
-
-/**
- * C0 controls and DEL. Checked by codepoint rather than by regex character
- * class so no escaping subtlety can let one through: a path like
- * "\t//evil.example" defeats a naive startsWith("//") guard, because the
- * browser strips the control character and then follows the authority.
- */
-function hasControlCharacter(value: string): boolean {
-  for (let index = 0; index < value.length; index += 1) {
-    const code = value.charCodeAt(index);
-    if (code <= 0x1f || code === 0x7f) return true;
-  }
-  return false;
-}
-
-/**
- * Coerces a path to begin with "/", or returns null to drop the endpoint.
- *
- * This is THE enforcement point for a value that reaches an href and an
- * iframe src -- the editor's checks are UX. Anything that could redirect the
- * frame away from the endpoint is rejected rather than sanitized, because
- * sanitizing invites a second, subtly different implementation elsewhere.
- */
-function normalizePath(raw: unknown): string | null {
-  if (raw === undefined || raw === null || raw === "") return "/";
-  if (typeof raw !== "string") return null;
-  if (hasControlCharacter(raw)) return null;
-
-  const path = raw.startsWith("/") ? raw : `/${raw}`;
-
-  if (path.startsWith("//")) return null;
-  if (/^\/[a-z][a-z0-9+.-]*:/i.test(path)) return null;
-  if (path.includes("\\")) return null;
-
-  return path;
-}
-
-/**
- * A bare host literal, or null to drop the endpoint, or undefined to leave the
- * field unset (the route then falls back to loopback).
- *
- * The value lands both in a TCP listener and in a URL authority, so nothing
- * carrying a scheme, port, path or credentials may survive.
- */
-function normalizeBindHost(raw: unknown): string | null | undefined {
-  if (raw === undefined || raw === null || raw === "") return undefined;
-  if (typeof raw !== "string") return null;
-
-  const value = raw.trim();
-  if (!value) return undefined;
-  if (value.length > 253) return null;
-  if (hasControlCharacter(value)) return null;
-
-  const IPV4 = /^\d{1,3}(\.\d{1,3}){3}$/;
-  const HOSTNAME =
-    /^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*$/;
-  const IPV6_BRACKETED = /^\[[0-9A-Fa-f:.]+\]$/;
-
-  if (IPV4.test(value)) {
-    return value.split(".").every((part) => Number(part) <= 255) ? value : null;
-  }
-  if (IPV6_BRACKETED.test(value) || HOSTNAME.test(value)) return value;
-  return null;
-}
-
-function normalizeEndpoint(raw: unknown): WebEndpoint | null {
-  if (!raw || typeof raw !== "object") return null;
-  const input = raw as Record<string, unknown>;
-
-  const id = typeof input.id === "string" ? input.id.trim() : "";
-  if (!id) return null;
-
-  const label = typeof input.label === "string" ? input.label.trim() : "";
-  if (!label) return null;
-
-  const scheme = input.scheme;
-  if (typeof scheme !== "string" || !SCHEMES.has(scheme)) return null;
-
-  if (!isValidPort(input.port)) return null;
-
-  const path = normalizePath(input.path);
-  if (path === null) return null;
-
-  const access = input.access;
-  if (typeof access !== "string" || !ACCESS_VALUES.has(access)) return null;
-
-  const render = input.render;
-  if (typeof render !== "string" || !RENDER_VALUES.has(render)) return null;
-
-  const isTunnel = access === "tunnel";
-
-  const endpoint: WebEndpoint = {
-    id,
-    label: label.slice(0, MAX_WEB_ENDPOINT_LABEL_LENGTH),
-    scheme: scheme as WebEndpoint["scheme"],
-    port: input.port,
-    path,
-    access: access as WebEndpoint["access"],
-    render: render as WebEndpoint["render"],
-    // Meaningless for a tunnel, whose host component is loopback and already
-    // exempt from certificate checks. Cleared rather than carried so nothing
-    // downstream has to re-derive that.
-    ignoreCert: !isTunnel && input.ignoreCert === true,
-  };
-
-  // Both are tunnel-only. Silently ignored on a direct endpoint rather than
-  // rejected: they describe a forward that a direct endpoint never creates.
-  if (isTunnel) {
-    const bindHost = normalizeBindHost(input.bindHost);
-    if (bindHost === null) return null;
-    if (bindHost !== undefined) endpoint.bindHost = bindHost;
-
-    if (input.localPort !== undefined && input.localPort !== null) {
-      if (!isValidPort(input.localPort)) return null;
-      endpoint.localPort = input.localPort;
-    }
-  }
-
-  return endpoint;
-}
-
-/**
- * Drops any endpoint it refuses rather than rejecting the whole host -- one
- * bad row must not make a host unsaveable or unlistable. The editor is
- * responsible for telling the user before that happens
- * (src/frontend/web-endpoint-validation.ts).
- */
-export function normalizeWebEndpoints(raw: unknown): WebEndpoint[] {
-  if (!Array.isArray(raw)) return [];
-
-  const seen = new Set<string>();
-  const endpoints: WebEndpoint[] = [];
-
-  for (const candidate of raw) {
-    if (endpoints.length >= MAX_WEB_ENDPOINTS) break;
-    const endpoint = normalizeEndpoint(candidate);
-    if (!endpoint) continue;
-    if (seen.has(endpoint.id)) continue;
-    seen.add(endpoint.id);
-    endpoints.push(endpoint);
-  }
-
-  return endpoints;
-}
-
-/**
- * Never throws. A malformed stored value yields an empty endpoint list, so a
- * half-written config cannot take out the whole host listing.
- */
-export function parseWebUiConfig(raw: unknown): WebUiConfig {
-  if (raw === undefined || raw === null) return { endpoints: [] };
-
-  let value: unknown = raw;
-  if (typeof raw === "string") {
-    try {
-      value = JSON.parse(raw);
-    } catch {
-      return { endpoints: [] };
-    }
-  }
-
-  if (!value || typeof value !== "object") return { endpoints: [] };
-  return {
-    endpoints: normalizeWebEndpoints(
-      (value as { endpoints?: unknown }).endpoints,
-    ),
-  };
-}
-
-/** Null when nothing survives normalization, so the setting is cleared. */
-export function serializeWebUiConfig(config: unknown): WebUiConfig | null {
-  const endpoints = normalizeWebEndpoints(
-    (config as { endpoints?: unknown } | null | undefined)?.endpoints,
-  );
-  if (endpoints.length === 0) return null;
-  return { endpoints };
-}
diff --git a/plugins/web-endpoint/tests/backend/activate.test.ts b/plugins/web-endpoint/tests/backend/activate.test.ts
deleted file mode 100644
index 45e1320d2..000000000
--- a/plugins/web-endpoint/tests/backend/activate.test.ts
+++ /dev/null
@@ -1,54 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import express from "express";
-import {
-  createMockCtx,
-  type MockPluginContext,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-import { activate } from "../../src/backend/index.js";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-let mock: MockPluginContext | null = null;
-
-afterEach(async () => {
-  for (const dispose of [...(mock?.disposals ?? [])].reverse()) await dispose();
-  mock = null;
-});
-
-function activateWith(capabilities: string[]) {
-  mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities,
-    router: () => express.Router(),
-  });
-  return activate(mock.ctx);
-}
-
-describe("web-endpoint activate", () => {
-  it("mounts its router at /plugin-api/web-endpoint", async () => {
-    await activateWith(manifest.capabilities);
-    expect(mock?.httpRouters).toHaveLength(1);
-  });
-
-  it("registers a hostImportNormalizer and revokes it on deactivate", async () => {
-    await activateWith(manifest.capabilities);
-    expect(
-      typeof mock?.ctx.registry.consume("web-endpoint.hostImportNormalizer"),
-    ).toBe("function");
-
-    for (const dispose of [...(mock?.disposals ?? [])].reverse())
-      await dispose();
-    expect(
-      mock?.ctx.registry.consume("web-endpoint.hostImportNormalizer"),
-    ).toBeUndefined();
-  });
-
-  it("fails closed without network:serve", async () => {
-    await expect(
-      activateWith(manifest.capabilities.filter((c) => c !== "network:serve")),
-    ).rejects.toThrow(/network:serve/);
-  });
-});
diff --git a/plugins/web-endpoint/tests/backend/host-import.test.ts b/plugins/web-endpoint/tests/backend/host-import.test.ts
deleted file mode 100644
index 9b987b15e..000000000
--- a/plugins/web-endpoint/tests/backend/host-import.test.ts
+++ /dev/null
@@ -1,61 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { hostImportNormalizer } from "../../src/backend/host-import.js";
-
-describe("hostImportNormalizer", () => {
-  it("returns null when the row carries neither field", () => {
-    expect(hostImportNormalizer({})).toBeNull();
-  });
-
-  it("normalizes and validates webUiConfig, dropping invalid endpoints", () => {
-    const result = hostImportNormalizer({
-      enableWebUi: true,
-      webUiConfig: {
-        endpoints: [
-          {
-            id: "e1",
-            label: "Proxmox",
-            scheme: "https",
-            port: 8006,
-            access: "direct",
-            render: "embedded",
-          },
-          {
-            id: "e2",
-            label: "",
-            scheme: "https",
-            port: 1,
-            access: "direct",
-            render: "embedded",
-          },
-        ],
-      },
-    });
-    expect(result?.enableWebUi).toBe(true);
-    expect(result?.webUiConfig).toEqual({
-      endpoints: [
-        {
-          id: "e1",
-          label: "Proxmox",
-          scheme: "https",
-          port: 8006,
-          path: "/",
-          access: "direct",
-          render: "embedded",
-          ignoreCert: false,
-        },
-      ],
-    });
-  });
-
-  it("clears webUiConfig to null when enabling with no endpoints", () => {
-    const result = hostImportNormalizer({ enableWebUi: true });
-    expect(result).toEqual({ enableWebUi: true, webUiConfig: null });
-  });
-
-  it("normalizes enableWebUi to a boolean", () => {
-    expect(hostImportNormalizer({ enableWebUi: "yes" })).toEqual({
-      enableWebUi: true,
-      webUiConfig: null,
-    });
-  });
-});
diff --git a/plugins/web-endpoint/tests/backend/routes.test.ts b/plugins/web-endpoint/tests/backend/routes.test.ts
deleted file mode 100644
index c5306dac3..000000000
--- a/plugins/web-endpoint/tests/backend/routes.test.ts
+++ /dev/null
@@ -1,304 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import express from "express";
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import {
-  createMockCtx,
-  type MockPluginContext,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-import { createWebEndpointRoutes } from "../../src/backend/routes.js";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-const forward = vi.fn();
-const openIsolatedWindow = vi.fn();
-
-function endpoint(overrides: Record<string, unknown> = {}) {
-  return {
-    id: "e1",
-    label: "Proxmox",
-    scheme: "http",
-    port: 8006,
-    path: "/",
-    access: "tunnel",
-    render: "embedded",
-    ...overrides,
-  };
-}
-
-function host(overrides: Record<string, unknown> = {}) {
-  return {
-    id: 7,
-    userId: "u1",
-    name: "nas",
-    ip: "10.0.0.5",
-    port: 22,
-    username: "root",
-    tags: null,
-    folder: null,
-    authType: "password",
-    ...overrides,
-  };
-}
-
-let mock: MockPluginContext;
-let server: http.Server;
-let baseUrl: string;
-
-async function start(
-  options: {
-    hostOverrides?: Record<string, unknown>;
-    noHost?: boolean;
-    enableWebUi?: boolean;
-    endpoints?: unknown[];
-    capabilities?: string[];
-    tunnelsAvailable?: boolean;
-  } = {},
-) {
-  mock = createMockCtx({
-    manifest,
-    pluginId: "web-endpoint",
-    actor: "u1",
-    capabilities: options.capabilities ?? [
-      "hosts:read",
-      "network:serve",
-      "ui:surface",
-      "desktop:window",
-    ],
-    hosts: options.noHost ? [] : [host(options.hostOverrides)],
-  });
-  const hostId = (options.hostOverrides?.id as number) ?? 7;
-  if (options.enableWebUi !== false) {
-    await mock.ctx.settings.setHost(hostId, "enableWebUi", true);
-    await mock.ctx.settings.setHost(hostId, "webUiConfig", {
-      endpoints: options.endpoints ?? [endpoint()],
-    });
-  }
-  if (options.tunnelsAvailable !== false) {
-    mock.ctx.services.provide("tunnels.access", { forward });
-  }
-
-  const app = express();
-  app.use(express.json());
-  app.use(createWebEndpointRoutes(mock.ctx));
-
-  server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-  baseUrl = `http://127.0.0.1:${port}`;
-}
-
-beforeEach(() => {
-  forward.mockReset();
-  forward.mockResolvedValue({ bindHost: "127.0.0.1", bindPort: 41234 });
-  openIsolatedWindow.mockReset();
-  openIsolatedWindow.mockResolvedValue({ success: true });
-});
-
-afterEach(async () => {
-  await new Promise<void>((resolve) => server.close(() => resolve()));
-});
-
-describe("POST /open", () => {
-  it("refuses a host the user cannot resolve, without opening anything", async () => {
-    await start({ noHost: true });
-    const res = await fetch(`${baseUrl}/open`, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ hostId: 7, endpointId: "e1" }),
-    });
-    expect(res.status).toBe(403);
-    expect(forward).not.toHaveBeenCalled();
-  });
-
-  it("refuses when the feature is disabled even though the config still lists the endpoint", async () => {
-    await start({ enableWebUi: false });
-    await mock.ctx.settings.setHost(7, "webUiConfig", {
-      endpoints: [endpoint()],
-    });
-    const res = await fetch(`${baseUrl}/open`, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ hostId: 7, endpointId: "e1" }),
-    });
-    expect(res.status).toBe(400);
-    expect(forward).not.toHaveBeenCalled();
-  });
-
-  it("refuses an endpoint id that matches nothing", async () => {
-    await start();
-    const res = await fetch(`${baseUrl}/open`, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ hostId: 7, endpointId: "nope" }),
-    });
-    expect(res.status).toBe(400);
-  });
-
-  it("returns the port the tunnels service bound", async () => {
-    await start();
-    const res = await fetch(`${baseUrl}/open`, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ hostId: 7, endpointId: "e1" }),
-    });
-    expect(res.status).toBe(200);
-    expect((await res.json()).port).toBe(41234);
-  });
-
-  it("asks for a loopback forward under the reserved web name", async () => {
-    await start();
-    await fetch(`${baseUrl}/open`, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ hostId: 7, endpointId: "e1" }),
-    });
-    expect(forward).toHaveBeenCalledWith(
-      7,
-      {
-        targetHost: "127.0.0.1",
-        targetPort: 8006,
-        bindHost: "127.0.0.1",
-        bindPort: undefined,
-      },
-      { name: "web:7:e1", idleTimeoutMs: 10 * 60 * 1000 },
-    );
-  });
-
-  it("passes the endpoint's own bind address and fixed port through", async () => {
-    await start({
-      endpoints: [endpoint({ bindHost: "0.0.0.0", localPort: 38080 })],
-    });
-    await fetch(`${baseUrl}/open`, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ hostId: 7, endpointId: "e1" }),
-    });
-    const target = forward.mock.calls[0][1];
-    expect(target.bindHost).toBe("0.0.0.0");
-    expect(target.bindPort).toBe(38080);
-  });
-
-  it("reports the service's reason as a 502 instead of a dead 200", async () => {
-    await start();
-    forward.mockRejectedValue(
-      new Error("Channel open failure: connect failed"),
-    );
-    const res = await fetch(`${baseUrl}/open`, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ hostId: 7, endpointId: "e1" }),
-    });
-    expect(res.status).toBe(502);
-    expect(String((await res.json()).error)).toMatch(/connect failed/);
-  });
-
-  it("answers 503 while the tunnels plugin is not available", async () => {
-    await start({ tunnelsAvailable: false });
-    const res = await fetch(`${baseUrl}/open`, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ hostId: 7, endpointId: "e1" }),
-    });
-    expect(res.status).toBe(503);
-  });
-
-  it("rejects a malformed request before touching settings", async () => {
-    await start();
-    const getHostSpy = vi.spyOn(mock.ctx.settings, "getHost");
-    for (const body of [
-      {},
-      { hostId: "7", endpointId: "e1" },
-      { hostId: 0, endpointId: "e1" },
-    ]) {
-      const res = await fetch(`${baseUrl}/open`, {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify(body),
-      });
-      expect(res.status).toBe(400);
-    }
-    expect(getHostSpy).not.toHaveBeenCalled();
-  });
-
-  it("refuses a direct-access endpoint", async () => {
-    await start({ endpoints: [endpoint({ access: "direct" })] });
-    const res = await fetch(`${baseUrl}/open`, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ hostId: 7, endpointId: "e1" }),
-    });
-    expect(res.status).toBe(400);
-  });
-});
-
-describe("POST /open-window", () => {
-  it("refuses without desktop:window", async () => {
-    await start({
-      capabilities: ["hosts:read", "network:serve", "ui:surface"],
-    });
-    const res = await fetch(`${baseUrl}/open-window`, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ hostId: 7, endpointId: "e1" }),
-    });
-    expect(res.status).toBe(502);
-  });
-
-  it("opens a tunnel first, then the window at the resolved port", async () => {
-    await start();
-    const res = await fetch(`${baseUrl}/open-window`, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ hostId: 7, endpointId: "e1" }),
-    });
-    expect(res.status).toBe(200);
-    expect(forward).toHaveBeenCalledOnce();
-    expect(mock.desktopWindows).toEqual([
-      { url: "http://127.0.0.1:41234/", title: "Proxmox", ignoreCert: false },
-    ]);
-  });
-
-  it("opens a direct endpoint at the host's own address without a tunnel", async () => {
-    await start({
-      endpoints: [endpoint({ access: "direct", scheme: "https", port: 443 })],
-    });
-    const res = await fetch(`${baseUrl}/open-window`, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ hostId: 7, endpointId: "e1", ignoreCert: true }),
-    });
-    expect(res.status).toBe(200);
-    expect(forward).not.toHaveBeenCalled();
-    expect(mock.desktopWindows).toEqual([
-      { url: "https://10.0.0.5:443/", title: "Proxmox", ignoreCert: true },
-    ]);
-  });
-
-  it("ignores ignoreCert for a tunnel endpoint, whose host component is already loopback", async () => {
-    await start();
-    await fetch(`${baseUrl}/open-window`, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ hostId: 7, endpointId: "e1", ignoreCert: true }),
-    });
-    expect(mock.desktopWindows[0].ignoreCert).toBe(false);
-  });
-});
-
-describe("route registration", () => {
-  it("registers /open and /open-window", async () => {
-    await start();
-    const routes = createWebEndpointRoutes(mock.ctx);
-    const paths = (
-      routes as unknown as {
-        stack: Array<{ route?: { path: string; methods: { post?: boolean } } }>;
-      }
-    ).stack
-      .filter((layer) => layer.route?.methods.post)
-      .map((layer) => layer.route?.path);
-    expect(paths).toEqual(expect.arrayContaining(["/open", "/open-window"]));
-  });
-});
diff --git a/plugins/web-endpoint/tests/backend/web-endpoint-config.test.ts b/plugins/web-endpoint/tests/backend/web-endpoint-config.test.ts
deleted file mode 100644
index 3274ba4b6..000000000
--- a/plugins/web-endpoint/tests/backend/web-endpoint-config.test.ts
+++ /dev/null
@@ -1,273 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  MAX_WEB_ENDPOINTS,
-  normalizeWebEndpoints,
-  parseWebUiConfig,
-  serializeWebUiConfig,
-} from "../../src/shared/web-endpoint-config.js";
-
-function valid(overrides: Record<string, unknown> = {}) {
-  return {
-    id: "e1",
-    label: "Proxmox",
-    scheme: "https",
-    port: 8006,
-    path: "/",
-    access: "direct",
-    render: "external",
-    ...overrides,
-  };
-}
-
-describe("normalizeWebEndpoints", () => {
-  it("keeps a valid endpoint", () => {
-    expect(normalizeWebEndpoints([valid()])).toEqual([
-      {
-        id: "e1",
-        label: "Proxmox",
-        scheme: "https",
-        port: 8006,
-        path: "/",
-        access: "direct",
-        render: "external",
-        ignoreCert: false,
-      },
-    ]);
-  });
-
-  it("drops an unknown or dangerous scheme", () => {
-    expect(normalizeWebEndpoints([valid({ scheme: "ftp" })])).toEqual([]);
-    expect(normalizeWebEndpoints([valid({ scheme: "javascript" })])).toEqual(
-      [],
-    );
-  });
-
-  it("drops out-of-range ports", () => {
-    expect(normalizeWebEndpoints([valid({ port: 0 })])).toEqual([]);
-    expect(normalizeWebEndpoints([valid({ port: 65536 })])).toEqual([]);
-    expect(normalizeWebEndpoints([valid({ port: 8.5 })])).toEqual([]);
-    // A numeric string is not a number; accepting it would let "8006abc"
-    // through some other coercion path later.
-    expect(normalizeWebEndpoints([valid({ port: "8006" })])).toEqual([]);
-  });
-
-  it("coerces a path that does not start with a slash", () => {
-    expect(normalizeWebEndpoints([valid({ path: "admin" })])[0].path).toBe(
-      "/admin",
-    );
-  });
-
-  it("defaults a missing path to /", () => {
-    expect(normalizeWebEndpoints([valid({ path: undefined })])[0].path).toBe(
-      "/",
-    );
-  });
-
-  it("drops a path carrying a scheme or authority", () => {
-    expect(normalizeWebEndpoints([valid({ path: "//evil.example" })])).toEqual(
-      [],
-    );
-    expect(
-      normalizeWebEndpoints([valid({ path: "http://evil.example/x" })]),
-    ).toEqual([]);
-    expect(normalizeWebEndpoints([valid({ path: "/x" })])).toHaveLength(1);
-  });
-
-  it("drops a path whose protocol-relative prefix hides behind a control character", () => {
-    // "\t//evil.example" slips a naive startsWith("//") guard: the browser
-    // strips the control character and follows the authority.
-    for (const prefix of ["\t", "\n", "\r"]) {
-      expect(
-        normalizeWebEndpoints([valid({ path: `${prefix}//evil.example` })]),
-      ).toEqual([]);
-    }
-  });
-
-  it("drops a path containing a control character anywhere", () => {
-    expect(normalizeWebEndpoints([valid({ path: "/a\tb" })])).toEqual([]);
-    expect(
-      normalizeWebEndpoints([
-        valid({ path: `/a${String.fromCharCode(0x7f)}b` }),
-      ]),
-    ).toEqual([]);
-  });
-
-  it("keeps a path containing a plain space", () => {
-    expect(normalizeWebEndpoints([valid({ path: "/a b" })])[0].path).toBe(
-      "/a b",
-    );
-  });
-
-  it("truncates an over-long label", () => {
-    expect(
-      normalizeWebEndpoints([valid({ label: "x".repeat(200) })])[0].label,
-    ).toHaveLength(64);
-  });
-
-  it("drops an endpoint with a blank label or id", () => {
-    expect(normalizeWebEndpoints([valid({ label: "   " })])).toEqual([]);
-    expect(normalizeWebEndpoints([valid({ id: "" })])).toEqual([]);
-  });
-
-  it("keeps only the first of a duplicate id", () => {
-    const result = normalizeWebEndpoints([
-      valid({ id: "dup", label: "first" }),
-      valid({ id: "dup", label: "second" }),
-    ]);
-    expect(result).toHaveLength(1);
-    expect(result[0].label).toBe("first");
-  });
-
-  it("caps the list length", () => {
-    const many = Array.from({ length: MAX_WEB_ENDPOINTS + 5 }, (_, i) =>
-      valid({ id: `e${i}` }),
-    );
-    expect(normalizeWebEndpoints(many)).toHaveLength(MAX_WEB_ENDPOINTS);
-  });
-
-  it("returns empty for non-array input", () => {
-    expect(normalizeWebEndpoints(undefined)).toEqual([]);
-    expect(normalizeWebEndpoints(null)).toEqual([]);
-    expect(normalizeWebEndpoints("nope")).toEqual([]);
-    expect(normalizeWebEndpoints({ endpoints: [] })).toEqual([]);
-  });
-
-  it("drops an unknown access or render value", () => {
-    expect(normalizeWebEndpoints([valid({ access: "magic" })])).toEqual([]);
-    expect(normalizeWebEndpoints([valid({ render: "magic" })])).toEqual([]);
-  });
-
-  it("clears ignoreCert for tunnel access and keeps it for direct", () => {
-    expect(
-      normalizeWebEndpoints([valid({ access: "tunnel", ignoreCert: true })])[0]
-        .ignoreCert,
-    ).toBe(false);
-    expect(
-      normalizeWebEndpoints([valid({ access: "direct", ignoreCert: true })])[0]
-        .ignoreCert,
-    ).toBe(true);
-  });
-});
-
-describe("bindHost", () => {
-  const tunnelRow = (bindHost?: unknown) => ({
-    ...valid({ access: "tunnel" }),
-    ...(bindHost === undefined ? {} : { bindHost }),
-  });
-
-  it("keeps a loopback bind", () => {
-    expect(normalizeWebEndpoints([tunnelRow("127.0.0.1")])[0].bindHost).toBe(
-      "127.0.0.1",
-    );
-  });
-
-  it("keeps an all-interfaces bind, which is the exposed opt-in", () => {
-    expect(normalizeWebEndpoints([tunnelRow("0.0.0.0")])[0].bindHost).toBe(
-      "0.0.0.0",
-    );
-  });
-
-  it("omits it entirely when blank, so the route falls back to loopback", () => {
-    expect(normalizeWebEndpoints([tunnelRow("")])[0].bindHost).toBeUndefined();
-    expect(normalizeWebEndpoints([tunnelRow()])[0].bindHost).toBeUndefined();
-  });
-
-  it("drops the endpoint when the bind address is not a bare host", () => {
-    // It lands in a listener AND in a URL authority, so nothing carrying a
-    // scheme, port, path or credentials may survive.
-    for (const bad of [
-      "http://evil.example",
-      "127.0.0.1:8080",
-      "host/path",
-      "user@host",
-      "has space",
-      "999.1.1.1",
-      "-bad.example",
-      42,
-    ]) {
-      expect(normalizeWebEndpoints([tunnelRow(bad)])).toEqual([]);
-    }
-  });
-
-  it("accepts a bracketed IPv6 literal and a hostname", () => {
-    expect(normalizeWebEndpoints([tunnelRow("[::1]")])[0].bindHost).toBe(
-      "[::1]",
-    );
-    expect(normalizeWebEndpoints([tunnelRow("nas.local")])[0].bindHost).toBe(
-      "nas.local",
-    );
-  });
-
-  it("ignores it on a direct endpoint, which never binds anything", () => {
-    expect(
-      normalizeWebEndpoints([
-        valid({ access: "direct", bindHost: "0.0.0.0" }),
-      ])[0].bindHost,
-    ).toBeUndefined();
-  });
-});
-
-describe("localPort", () => {
-  const tunnelRow = (localPort?: unknown) => ({
-    ...valid({ access: "tunnel" }),
-    ...(localPort === undefined ? {} : { localPort }),
-  });
-
-  it("keeps a fixed port so a container can publish it", () => {
-    expect(normalizeWebEndpoints([tunnelRow(38080)])[0].localPort).toBe(38080);
-  });
-
-  it("omits it when unset, leaving the kernel to pick", () => {
-    expect(normalizeWebEndpoints([tunnelRow()])[0].localPort).toBeUndefined();
-  });
-
-  it("drops the endpoint for a port outside the valid range", () => {
-    for (const bad of [0, -1, 65536, 8.5, "38080"]) {
-      expect(normalizeWebEndpoints([tunnelRow(bad)])).toEqual([]);
-    }
-  });
-
-  it("ignores it on a direct endpoint, which binds nothing", () => {
-    expect(
-      normalizeWebEndpoints([valid({ access: "direct", localPort: 38080 })])[0]
-        .localPort,
-    ).toBeUndefined();
-  });
-});
-
-describe("parseWebUiConfig", () => {
-  it("parses a stored JSON string", () => {
-    expect(
-      parseWebUiConfig(JSON.stringify({ endpoints: [valid()] })).endpoints,
-    ).toHaveLength(1);
-  });
-
-  it("accepts an already-parsed object", () => {
-    expect(parseWebUiConfig({ endpoints: [valid()] }).endpoints).toHaveLength(
-      1,
-    );
-  });
-
-  it("returns empty endpoints for malformed JSON instead of throwing", () => {
-    // A half-written config must not take out the whole host listing.
-    expect(parseWebUiConfig("{ not json")).toEqual({ endpoints: [] });
-  });
-
-  it("returns empty endpoints for null and undefined", () => {
-    expect(parseWebUiConfig(null)).toEqual({ endpoints: [] });
-    expect(parseWebUiConfig(undefined)).toEqual({ endpoints: [] });
-  });
-});
-
-describe("serializeWebUiConfig", () => {
-  it("round-trips through normalization", () => {
-    expect(
-      serializeWebUiConfig({ endpoints: [valid()] })?.endpoints[0].id,
-    ).toBe("e1");
-  });
-
-  it("returns null when there are no valid endpoints", () => {
-    expect(serializeWebUiConfig({ endpoints: [] })).toBeNull();
-    expect(serializeWebUiConfig(null)).toBeNull();
-  });
-});
diff --git a/plugins/web-endpoint/tests/frontend/WebEndpointTab.test.tsx b/plugins/web-endpoint/tests/frontend/WebEndpointTab.test.tsx
deleted file mode 100644
index c4d48eac5..000000000
--- a/plugins/web-endpoint/tests/frontend/WebEndpointTab.test.tsx
+++ /dev/null
@@ -1,458 +0,0 @@
-import "@testing-library/jest-dom/vitest";
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import {
-  cleanup,
-  fireEvent,
-  render,
-  screen,
-  waitFor,
-} from "@testing-library/react";
-import type { WebEndpoint } from "../../src/shared/web-endpoint-config";
-import type { PluginHostRecord as Host } from "@termix/plugin-sdk/frontend";
-
-const openWebEndpointTunnel = vi.hoisted(() => vi.fn());
-const allowInvalidCertificateForOrigin = vi.hoisted(() => vi.fn());
-
-vi.mock("../../src/frontend/web-endpoint-api", async (importOriginal) => {
-  // requireNumericHostId is left as the real implementation -- the "no saved
-  // host" case exercises the actual validation, not a re-implementation of it
-  // that could drift.
-  const actual =
-    await importOriginal<
-      typeof import("../../src/frontend/web-endpoint-api")
-    >();
-  return {
-    ...actual,
-    openWebEndpointTunnel: (...args: unknown[]) =>
-      openWebEndpointTunnel(...args),
-    allowInvalidCertificateForOrigin: (...args: unknown[]) =>
-      allowInvalidCertificateForOrigin(...args),
-  };
-});
-
-const electron = vi.hoisted(() => ({ isElectron: vi.fn(() => true) }));
-vi.mock("@termix/plugin-sdk/ui", async (importOriginal) => ({
-  ...(await importOriginal<object>()),
-  ...electron,
-}));
-
-vi.mock("react-i18next", async (importOriginal) => ({
-  ...(await importOriginal<object>()),
-  useTranslation: () => ({ t: (key: string) => key }),
-}));
-
-vi.mock("sonner", () => ({ toast: { success: vi.fn(), error: vi.fn() } }));
-
-function endpoint(overrides: Partial<WebEndpoint> = {}): WebEndpoint {
-  return {
-    id: "e1",
-    label: "Proxmox",
-    scheme: "https",
-    port: 8006,
-    path: "/",
-    access: "direct",
-    render: "embedded",
-    ...overrides,
-  };
-}
-
-function host(
-  overrides: Partial<Host> = {},
-  endpoints: WebEndpoint[] = [],
-): Host {
-  return {
-    id: "7",
-    ip: "192.168.1.10",
-    pluginSettings: { "web-endpoint": { webUiConfig: { endpoints } } },
-    ...overrides,
-  } as unknown as Host;
-}
-
-let pageHostname = "localhost";
-const realLocation = window.location;
-
-beforeEach(() => {
-  Object.defineProperty(HTMLIFrameElement.prototype, "credentialless", {
-    configurable: true,
-    writable: true,
-    value: false,
-  });
-  pageHostname = "localhost";
-  electron.isElectron.mockReturnValue(true);
-  Object.defineProperty(window, "location", {
-    configurable: true,
-    get: () => ({ ...realLocation, hostname: pageHostname }),
-  });
-});
-
-afterEach(() => {
-  cleanup();
-  delete (HTMLIFrameElement.prototype as { credentialless?: boolean })
-    .credentialless;
-  Object.defineProperty(window, "location", {
-    configurable: true,
-    value: realLocation,
-  });
-  openWebEndpointTunnel.mockReset();
-  allowInvalidCertificateForOrigin.mockReset();
-});
-
-describe("WebEndpointTab", () => {
-  it("refuses unsupported environments before creating a tunnel or iframe", async () => {
-    delete (HTMLIFrameElement.prototype as { credentialless?: boolean })
-      .credentialless;
-    const { WebEndpointTab } =
-      await import("../../src/frontend/WebEndpointTab");
-    render(
-      <WebEndpointTab
-        host={host({}, [endpoint({ access: "tunnel" })])}
-        endpointId="e1"
-      />,
-    );
-    await screen.findByText("webEndpoint.isolationUnavailable");
-    expect(openWebEndpointTunnel).not.toHaveBeenCalled();
-    expect(document.querySelector("iframe")).toBeNull();
-  });
-  it("isolates cookie state and denies parent access, popups and top navigation", async () => {
-    const { WebEndpointTab } =
-      await import("../../src/frontend/WebEndpointTab");
-    render(<WebEndpointTab host={host({}, [endpoint()])} endpointId="e1" />);
-    const frame = (await screen.findByTitle("Proxmox")) as HTMLIFrameElement;
-    expect(
-      (frame as HTMLIFrameElement & { credentialless: boolean }).credentialless,
-    ).toBe(true);
-    expect(frame.getAttribute("sandbox")).toBe("allow-scripts allow-forms");
-    expect(frame.getAttribute("referrerpolicy")).toBe("no-referrer");
-    expect(screen.queryByText("webEndpoint.openExternally")).toBeNull();
-  });
-
-  it("renders an iframe at the direct URL", async () => {
-    const { WebEndpointTab } =
-      await import("../../src/frontend/WebEndpointTab");
-    render(<WebEndpointTab host={host({}, [endpoint()])} endpointId="e1" />);
-    await waitFor(() =>
-      expect(screen.getByTitle("Proxmox")).toHaveAttribute(
-        "src",
-        "https://192.168.1.10:8006/",
-      ),
-    );
-  });
-
-  it("opens the tunnel through the numeric host id and frames the loopback URL", async () => {
-    openWebEndpointTunnel.mockResolvedValue(41234);
-    const { WebEndpointTab } =
-      await import("../../src/frontend/WebEndpointTab");
-    render(
-      <WebEndpointTab
-        host={host({}, [endpoint({ access: "tunnel" })])}
-        endpointId="e1"
-      />,
-    );
-    await waitFor(() => {
-      expect(openWebEndpointTunnel).toHaveBeenCalledWith(7, "e1");
-      expect(screen.getByTitle("Proxmox")).toHaveAttribute(
-        "src",
-        "https://127.0.0.1:41234/",
-      );
-    });
-  });
-
-  it("registers the certificate allowance for a direct endpoint with ignoreCert", async () => {
-    const { WebEndpointTab } =
-      await import("../../src/frontend/WebEndpointTab");
-    render(
-      <WebEndpointTab
-        host={host({}, [endpoint({ ignoreCert: true })])}
-        endpointId="e1"
-      />,
-    );
-    await waitFor(() =>
-      expect(allowInvalidCertificateForOrigin).toHaveBeenCalledWith(
-        "https://192.168.1.10:8006",
-      ),
-    );
-  });
-
-  it("reframes at the new port when a reopened tunnel binds a different one", async () => {
-    openWebEndpointTunnel
-      .mockResolvedValueOnce(41234)
-      .mockResolvedValueOnce(51234);
-    const { WebEndpointTab } =
-      await import("../../src/frontend/WebEndpointTab");
-    render(
-      <WebEndpointTab
-        host={host({}, [endpoint({ access: "tunnel" })])}
-        endpointId="e1"
-      />,
-    );
-    await waitFor(() =>
-      expect(screen.getByTitle("Proxmox")).toHaveAttribute(
-        "src",
-        "https://127.0.0.1:41234/",
-      ),
-    );
-
-    fireEvent.click(screen.getByTitle("webEndpoint.reload"));
-
-    await waitFor(() =>
-      expect(screen.getByTitle("Proxmox")).toHaveAttribute(
-        "src",
-        "https://127.0.0.1:51234/",
-      ),
-    );
-    expect(openWebEndpointTunnel).toHaveBeenCalledTimes(2);
-  });
-
-  /**
-   * The case the port-changed test above CANNOT exercise, and the one that
-   * matters most: a live tunnel returns the SAME port on every open, and a
-   * direct endpoint's URL never changes at all. If reload just did
-   * setUrl(resolved), React would bail out of the same-value setState and the
-   * frame would never remount -- so the button would do nothing in the two
-   * most common cases. Capturing the DOM node before and after is what catches
-   * that: a same-value setState never touches the DOM.
-   */
-  it("remounts the frame on reload even when the resolved URL is unchanged", async () => {
-    openWebEndpointTunnel.mockResolvedValue(41234);
-    const { WebEndpointTab } =
-      await import("../../src/frontend/WebEndpointTab");
-    render(
-      <WebEndpointTab
-        host={host({}, [endpoint({ access: "tunnel" })])}
-        endpointId="e1"
-      />,
-    );
-    const firstFrame = await screen.findByTitle("Proxmox");
-    expect(firstFrame).toHaveAttribute("src", "https://127.0.0.1:41234/");
-
-    fireEvent.click(screen.getByTitle("webEndpoint.reload"));
-    await waitFor(() => expect(openWebEndpointTunnel).toHaveBeenCalledTimes(2));
-
-    // Polled rather than asserted once: against the defective implementation
-    // this never becomes true and the test times out -- a real failure, not a
-    // race.
-    await waitFor(() => {
-      expect(screen.getByTitle("Proxmox")).not.toBe(firstFrame);
-    });
-  });
-
-  it("shows the failure reason when the tunnel cannot open", async () => {
-    openWebEndpointTunnel.mockRejectedValue(
-      new Error("Timed out reaching the endpoint port"),
-    );
-    const { WebEndpointTab } =
-      await import("../../src/frontend/WebEndpointTab");
-    render(
-      <WebEndpointTab
-        host={host({}, [endpoint({ access: "tunnel" })])}
-        endpointId="e1"
-      />,
-    );
-    await waitFor(() =>
-      expect(
-        screen.getByText(/Timed out reaching the endpoint port/),
-      ).toBeInTheDocument(),
-    );
-  });
-
-  it("shows a plain message when the endpoint id matches nothing on the host", async () => {
-    const { WebEndpointTab } =
-      await import("../../src/frontend/WebEndpointTab");
-    render(<WebEndpointTab host={host({}, [])} endpointId="deleted" />);
-    await waitFor(() =>
-      expect(screen.getByText("webEndpoint.notFound")).toBeInTheDocument(),
-    );
-    expect(openWebEndpointTunnel).not.toHaveBeenCalled();
-    expect(document.querySelector("iframe")).toBeNull();
-  });
-
-  it("explains that a tunnel needs a saved host, instead of calling the route", async () => {
-    const { WebEndpointTab } =
-      await import("../../src/frontend/WebEndpointTab");
-    render(
-      <WebEndpointTab
-        host={host({ id: "quick-connect-1" }, [endpoint({ access: "tunnel" })])}
-        endpointId="e1"
-      />,
-    );
-    await waitFor(() =>
-      expect(screen.getByText(/requires a saved host/)).toBeInTheDocument(),
-    );
-    expect(openWebEndpointTunnel).not.toHaveBeenCalled();
-  });
-
-  it("resolves a direct endpoint normally on the same quick-connect host", async () => {
-    // The positive case: requireNumericHostId must be consulted only on the
-    // tunnel branch, or direct endpoints would break on unsaved hosts too.
-    const { WebEndpointTab } =
-      await import("../../src/frontend/WebEndpointTab");
-    render(
-      <WebEndpointTab
-        host={host({ id: "quick-connect-1" }, [endpoint({ access: "direct" })])}
-        endpointId="e1"
-      />,
-    );
-    await waitFor(() =>
-      expect(screen.getByTitle("Proxmox")).toHaveAttribute(
-        "src",
-        "https://192.168.1.10:8006/",
-      ),
-    );
-    expect(openWebEndpointTunnel).not.toHaveBeenCalled();
-  });
-
-  it("frames a tunnel at the OTHER loopback spelling in a web deployment", async () => {
-    // jsdom serves the page at "localhost". The forward binds where the
-    // backend runs, so the browser must reach it on this same machine -- but
-    // NOT at the same host string, or the tunnelled service receives Termix's
-    // session cookie.
-    electron.isElectron.mockReturnValue(false);
-    openWebEndpointTunnel.mockResolvedValue(41234);
-    const { WebEndpointTab } =
-      await import("../../src/frontend/WebEndpointTab");
-    render(
-      <WebEndpointTab
-        host={host({}, [endpoint({ access: "tunnel", bindHost: "0.0.0.0" })])}
-        endpointId="e1"
-      />,
-    );
-
-    await waitFor(() =>
-      expect(screen.getByTitle("Proxmox")).toHaveAttribute(
-        "src",
-        "https://127.0.0.1:41234/",
-      ),
-    );
-    // The assertion carrying the security property: whatever host the frame
-    // lands on, it must not be the one serving Termix.
-    const framed = new URL(
-      screen.getByTitle("Proxmox").getAttribute("src") as string,
-    ).hostname;
-    expect(framed).not.toBe(window.location.hostname);
-  });
-
-  it("refuses a loopback-bound tunnel in a browser instead of framing a dead port", async () => {
-    electron.isElectron.mockReturnValue(false);
-    const { WebEndpointTab } =
-      await import("../../src/frontend/WebEndpointTab");
-    render(
-      <WebEndpointTab
-        host={host({}, [endpoint({ access: "tunnel" })])}
-        endpointId="e1"
-      />,
-    );
-    await waitFor(() =>
-      expect(
-        screen.getByText("webEndpoint.tunnelUnreachableFromBrowser"),
-      ).toBeInTheDocument(),
-    );
-    expect(openWebEndpointTunnel).not.toHaveBeenCalled();
-    expect(document.querySelector("iframe")).toBeNull();
-  });
-
-  it("refuses when the page host has no separate loopback spelling", async () => {
-    electron.isElectron.mockReturnValue(false);
-    pageHostname = "termix.example.com";
-    const { WebEndpointTab } =
-      await import("../../src/frontend/WebEndpointTab");
-    render(
-      <WebEndpointTab
-        host={host({}, [endpoint({ access: "tunnel", bindHost: "0.0.0.0" })])}
-        endpointId="e1"
-      />,
-    );
-    await waitFor(() =>
-      expect(
-        screen.getByText("webEndpoint.tunnelSharesSessionCookie"),
-      ).toBeInTheDocument(),
-    );
-    // Refusing after opening would still have bound the port and still have
-    // leaked on the first frame load.
-    expect(openWebEndpointTunnel).not.toHaveBeenCalled();
-    expect(document.querySelector("iframe")).toBeNull();
-  });
-
-  /**
-   * The leak the tunnel guard did not cover: a DIRECT endpoint points at the
-   * host's own address, so when that host is the one serving Termix the frame
-   * is same-site with Termix and the browser attaches the `jwt` cookie. A
-   * different port is not a different cookie key.
-   */
-  it("refuses a direct endpoint on the same host that serves Termix", async () => {
-    electron.isElectron.mockReturnValue(false);
-    pageHostname = "termix.example";
-    const { WebEndpointTab } =
-      await import("../../src/frontend/WebEndpointTab");
-    render(
-      <WebEndpointTab
-        host={host({ ip: "termix.example" }, [
-          endpoint({ access: "direct", port: 8443 }),
-        ])}
-        endpointId="e1"
-      />,
-    );
-    await waitFor(() =>
-      expect(
-        screen.getByText("webEndpoint.directSharesSessionCookie"),
-      ).toBeInTheDocument(),
-    );
-    // Refusing after framing would have leaked on the very first request.
-    expect(document.querySelector("iframe")).toBeNull();
-  });
-
-  it("refuses a direct endpoint on a sub domain of the page host", async () => {
-    electron.isElectron.mockReturnValue(false);
-    pageHostname = "termix.example.com";
-    const { WebEndpointTab } =
-      await import("../../src/frontend/WebEndpointTab");
-    render(
-      <WebEndpointTab
-        host={host({ ip: "ui.termix.example.com" }, [
-          endpoint({ access: "direct" }),
-        ])}
-        endpointId="e1"
-      />,
-    );
-    await waitFor(() =>
-      expect(
-        screen.getByText("webEndpoint.directSharesSessionCookie"),
-      ).toBeInTheDocument(),
-    );
-    expect(document.querySelector("iframe")).toBeNull();
-  });
-
-  it("still frames a direct same-host endpoint on the desktop, whose jar has no jwt", async () => {
-    electron.isElectron.mockReturnValue(true);
-    pageHostname = "termix.example";
-    const { WebEndpointTab } =
-      await import("../../src/frontend/WebEndpointTab");
-    render(
-      <WebEndpointTab
-        host={host({ ip: "termix.example" }, [
-          endpoint({ access: "direct", port: 8443 }),
-        ])}
-        endpointId="e1"
-      />,
-    );
-    await waitFor(() =>
-      expect(screen.getByTitle("Proxmox")).toHaveAttribute(
-        "src",
-        "https://termix.example:8443/",
-      ),
-    );
-  });
-
-  it("still frames a DIRECT endpoint on a hostname that refuses tunnels", async () => {
-    electron.isElectron.mockReturnValue(false);
-    pageHostname = "termix.example.com";
-    const { WebEndpointTab } =
-      await import("../../src/frontend/WebEndpointTab");
-    render(<WebEndpointTab host={host({}, [endpoint()])} endpointId="e1" />);
-    await waitFor(() =>
-      expect(screen.getByTitle("Proxmox")).toHaveAttribute(
-        "src",
-        "https://192.168.1.10:8006/",
-      ),
-    );
-  });
-});
diff --git a/plugins/web-endpoint/tests/frontend/activate.test.tsx b/plugins/web-endpoint/tests/frontend/activate.test.tsx
deleted file mode 100644
index 3d0fd3a34..000000000
--- a/plugins/web-endpoint/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,158 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { fireEvent } from "@testing-library/react";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginHostRecord as Host } from "@termix/plugin-sdk/frontend";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import type { WebEndpoint } from "../../src/shared/web-endpoint-config";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-function endpoint(overrides: Partial<WebEndpoint> = {}): WebEndpoint {
-  return {
-    id: "e1",
-    label: "Proxmox",
-    scheme: "https",
-    port: 8006,
-    path: "/",
-    access: "direct",
-    render: "embedded",
-    ...overrides,
-  };
-}
-
-function host(
-  endpoints: WebEndpoint[] | undefined,
-  overrides: Partial<Host> = {},
-): Host {
-  return {
-    id: "7",
-    ip: "10.0.0.5",
-    name: "nas",
-    enableSsh: false,
-    pluginSettings:
-      endpoints === undefined
-        ? {}
-        : { "web-endpoint": { enableWebUi: true, webUiConfig: { endpoints } } },
-    ...overrides,
-  } as unknown as Host;
-}
-
-let rendered: RenderedPluginApp | null = null;
-
-async function webAction(target: Host) {
-  rendered ??= await renderWithApp(plugin, { manifest });
-  return rendered.registered
-    .hostActionsFor(target)
-    .find((action) => action.id === "web-endpoint");
-}
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe("web-endpoint activate", () => {
-  it("registers its tab, host action and editor section", async () => {
-    rendered = await renderWithApp(plugin, { manifest });
-    expect(rendered.registered.tabs()).toEqual(["web-endpoint"]);
-    expect(rendered.registered.hostEditorSections()).toEqual(["web-ui"]);
-  });
-
-  it("offers no Web UI entry when the feature is off, even with endpoints", async () => {
-    const target = host([endpoint()], {
-      pluginSettings: {
-        "web-endpoint": {
-          enableWebUi: false,
-          webUiConfig: { endpoints: [endpoint()] },
-        },
-      },
-    });
-    expect(await webAction(target)).toBeUndefined();
-  });
-
-  it("offers no entry when enabled but no endpoints exist", async () => {
-    expect(await webAction(host([]))).toBeUndefined();
-  });
-
-  it("offers no entry when the host has no web-endpoint settings at all", async () => {
-    expect(await webAction(host(undefined))).toBeUndefined();
-  });
-
-  it("appears without SSH", async () => {
-    const action = await webAction(host([endpoint()], { enableSsh: false }));
-    expect(action).toBeDefined();
-  });
-
-  it("labels the entry with the endpoint when there is only one", async () => {
-    const target = host([endpoint({ label: "Proxmox" })]);
-    const action = await webAction(target);
-    expect(action?.label?.(target)).toBe("Proxmox");
-    expect(action?.items?.(target).map((item) => item.id)).toEqual(["e1"]);
-  });
-
-  it("stays one entry with a picker when there are several", async () => {
-    const endpoints = Array.from({ length: 16 }, (_, i) =>
-      endpoint({ id: `e${i}`, label: `Endpoint ${i}` }),
-    );
-    const target = host(endpoints);
-    const action = await webAction(target);
-    expect(action?.label?.(target)).toBeUndefined();
-    expect(action?.items?.(target)).toHaveLength(16);
-  });
-
-  it("opens an embedded endpoint as a tab carrying its id", async () => {
-    const target = host([endpoint()]);
-    const action = await webAction(target);
-    const calls: unknown[][] = [];
-    const shell = {
-      openTab: (...args: unknown[]) => calls.push(args),
-    } as never;
-    action!.items!(target)[0].run(target, shell);
-    expect(calls).toEqual([
-      [
-        target,
-        "web-endpoint",
-        { label: "Proxmox", data: { endpointId: "e1" } },
-      ],
-    ]);
-  });
-});
-
-describe("host editor section", () => {
-  it("writes into the form's web-endpoint plugin settings", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    let form: Record<string, unknown> = {
-      name: "nas",
-      pluginSettings: { "web-endpoint": { enableWebUi: false } },
-    };
-    const updateForm = vi.fn(
-      (
-        patch: (current: Record<string, unknown>) => Record<string, unknown>,
-      ) => {
-        form = patch(form);
-      },
-    );
-
-    const section = rendered.renderHostEditorSection("web-ui", {
-      form,
-      setField: vi.fn(),
-      updateForm,
-      protocols: { enableSsh: true },
-    });
-
-    // The enable switch is the only button on the section before any
-    // endpoint rows exist (which only render once enabled).
-    fireEvent.click(section.querySelector("button") as HTMLButtonElement);
-
-    const settings = (form.pluginSettings as Record<string, unknown>)[
-      "web-endpoint"
-    ] as { enableWebUi: boolean };
-    expect(settings.enableWebUi).toBe(true);
-  });
-});
diff --git a/plugins/web-endpoint/tests/frontend/web-endpoint-api.test.ts b/plugins/web-endpoint/tests/frontend/web-endpoint-api.test.ts
deleted file mode 100644
index c66306346..000000000
--- a/plugins/web-endpoint/tests/frontend/web-endpoint-api.test.ts
+++ /dev/null
@@ -1,161 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import type { WebEndpoint } from "../../src/shared/web-endpoint-config";
-
-const isElectron = vi.hoisted(() => vi.fn(() => false));
-vi.mock("@termix/plugin-sdk/ui", async (importOriginal) => ({
-  ...(await importOriginal<object>()),
-  isElectron,
-}));
-
-const pluginPost = vi.hoisted(() => vi.fn());
-
-function endpoint(overrides: Partial<WebEndpoint> = {}): WebEndpoint {
-  return {
-    id: "e1",
-    label: "Proxmox",
-    scheme: "https",
-    port: 8006,
-    path: "/",
-    access: "tunnel",
-    render: "external",
-    bindHost: "0.0.0.0",
-    ...overrides,
-  };
-}
-
-const host = { id: "7", ip: "192.168.1.10" };
-
-beforeEach(async () => {
-  const { setWebEndpointApi } =
-    await import("../../src/frontend/web-endpoint-api");
-  setWebEndpointApi({ post: pluginPost } as never);
-  isElectron.mockReturnValue(false);
-  pluginPost.mockReset();
-  pluginPost.mockResolvedValue({ data: { port: 41234 } });
-});
-
-afterEach(() => {
-  vi.unstubAllGlobals();
-});
-
-describe("openWebEndpointTunnel", () => {
-  it("posts to the plugin's own /open route", async () => {
-    // app.api is already rooted at /plugin-api/web-endpoint, so the path is
-    // relative to that and must not repeat the prefix.
-    const { openWebEndpointTunnel } =
-      await import("../../src/frontend/web-endpoint-api");
-    await openWebEndpointTunnel(7, "e1");
-
-    expect(pluginPost).toHaveBeenCalledWith("/open", {
-      hostId: 7,
-      endpointId: "e1",
-    });
-  });
-
-  it("returns the port", async () => {
-    const { openWebEndpointTunnel } =
-      await import("../../src/frontend/web-endpoint-api");
-    await expect(openWebEndpointTunnel(7, "e1")).resolves.toBe(41234);
-  });
-
-  it("preserves the backend's reason instead of the generic message", async () => {
-    // 502 is this route's likeliest real failure and carries the actionable
-    // cause. Collapsing it into "Server error occurred" defeats the
-    // per-failure-mode messaging entirely.
-    const axiosError = Object.assign(new Error("Request failed"), {
-      isAxiosError: true,
-      response: {
-        status: 502,
-        data: { error: "Timed out reaching the endpoint port" },
-      },
-    });
-    pluginPost.mockRejectedValue(axiosError);
-    const { openWebEndpointTunnel, WebEndpointTunnelError } =
-      await import("../../src/frontend/web-endpoint-api");
-
-    await expect(openWebEndpointTunnel(7, "e1")).rejects.toThrow(
-      /Timed out reaching the endpoint port/,
-    );
-    await expect(openWebEndpointTunnel(7, "e1")).rejects.toBeInstanceOf(
-      WebEndpointTunnelError,
-    );
-  });
-
-  it("falls back to the shared handler when the body carries no string reason", async () => {
-    // A body shaped { error: <object> } would otherwise render as
-    // "[object Object]" to the user.
-    pluginPost.mockRejectedValue(
-      Object.assign(new Error("boom"), {
-        isAxiosError: true,
-        response: { status: 500, data: { error: { nested: true } } },
-      }),
-    );
-    const { openWebEndpointTunnel } =
-      await import("../../src/frontend/web-endpoint-api");
-    await expect(openWebEndpointTunnel(7, "e1")).rejects.toThrow(
-      /Could not open web endpoint tunnel/,
-    );
-  });
-
-  it("treats a missing port as a failure rather than returning undefined", async () => {
-    pluginPost.mockResolvedValue({ data: {} });
-    const { openWebEndpointTunnel } =
-      await import("../../src/frontend/web-endpoint-api");
-    await expect(openWebEndpointTunnel(7, "e1")).rejects.toThrow(/no port/);
-  });
-});
-
-describe("requireNumericHostId", () => {
-  it("accepts a saved host id and rejects a quick-connect one", async () => {
-    const { requireNumericHostId } =
-      await import("../../src/frontend/web-endpoint-api");
-    expect(requireNumericHostId("7")).toBe(7);
-    for (const bad of ["quick-connect-1", "", "0", "-3", "abc"]) {
-      expect(() => requireNumericHostId(bad)).toThrow(/saved host/);
-    }
-  });
-});
-
-/**
- * The backend now resolves and validates the target URL itself (host address,
- * tunnel port, loopback/session-cookie checks) before ever calling
- * ctx.desktop.openIsolatedWindow, so this call is a thin ask-and-report over
- * the plugin's own /open-window route rather than a client-side URL builder.
- */
-describe("openWebEndpointExternally", () => {
-  it("refuses outside the desktop app before calling the backend", async () => {
-    const { openWebEndpointExternally } =
-      await import("../../src/frontend/web-endpoint-api");
-    await expect(openWebEndpointExternally(host, endpoint())).rejects.toThrow(
-      /desktop app/,
-    );
-    expect(pluginPost).not.toHaveBeenCalled();
-  });
-
-  it("posts hostId, endpointId and ignoreCert to /open-window", async () => {
-    isElectron.mockReturnValue(true);
-    pluginPost.mockResolvedValue({ data: { success: true } });
-    const { openWebEndpointExternally } =
-      await import("../../src/frontend/web-endpoint-api");
-    await openWebEndpointExternally(host, endpoint({ ignoreCert: true }));
-    expect(pluginPost).toHaveBeenCalledWith("/open-window", {
-      hostId: 7,
-      endpointId: "e1",
-      ignoreCert: true,
-    });
-  });
-
-  it("preserves the backend's reason instead of the generic message", async () => {
-    isElectron.mockReturnValue(true);
-    const axiosError = Object.assign(new Error("Request failed"), {
-      isAxiosError: true,
-      response: { status: 502, data: { error: "No window to attach to" } },
-    });
-    pluginPost.mockRejectedValue(axiosError);
-    const { openWebEndpointExternally, WebEndpointTunnelError } =
-      await import("../../src/frontend/web-endpoint-api");
-    await expect(
-      openWebEndpointExternally(host, endpoint()),
-    ).rejects.toBeInstanceOf(WebEndpointTunnelError);
-  });
-});
diff --git a/plugins/web-endpoint/tests/frontend/web-endpoint-url.test.ts b/plugins/web-endpoint/tests/frontend/web-endpoint-url.test.ts
deleted file mode 100644
index b97988f7c..000000000
--- a/plugins/web-endpoint/tests/frontend/web-endpoint-url.test.ts
+++ /dev/null
@@ -1,367 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  currentTunnelHost,
-  resolveWebEndpointUrl,
-  separatedTunnelHost,
-  sharesCookieSiteWithPage,
-  webEndpointRefusalReason,
-} from "../../src/frontend/web-endpoint-url";
-import type { WebEndpoint } from "../../src/shared/web-endpoint-config";
-
-function endpoint(overrides: Partial<WebEndpoint> = {}): WebEndpoint {
-  return {
-    id: "e1",
-    label: "Proxmox",
-    scheme: "https",
-    port: 8006,
-    access: "direct",
-    render: "external",
-    ...overrides,
-  };
-}
-
-describe("resolveWebEndpointUrl", () => {
-  it("builds a direct URL at the host address", () => {
-    expect(
-      resolveWebEndpointUrl({
-        hostAddress: "192.168.1.10",
-        endpoint: endpoint(),
-      }),
-    ).toBe("https://192.168.1.10:8006/");
-  });
-
-  it("builds a direct URL for a hostname", () => {
-    expect(
-      resolveWebEndpointUrl({
-        hostAddress: "nas.local",
-        endpoint: endpoint({ port: 443 }),
-      }),
-    ).toBe("https://nas.local:443/");
-  });
-
-  it("uses the local port for tunnel access, dropping the endpoint's own port", () => {
-    expect(
-      resolveWebEndpointUrl({
-        hostAddress: "192.168.1.10",
-        endpoint: endpoint({ access: "tunnel", scheme: "http", port: 8006 }),
-        localPort: 41234,
-      }),
-    ).toBe("http://127.0.0.1:41234/");
-  });
-
-  it("defaults a missing path to /", () => {
-    expect(
-      resolveWebEndpointUrl({
-        hostAddress: "10.0.0.5",
-        endpoint: endpoint({ scheme: "http", port: 80, path: undefined }),
-      }),
-    ).toBe("http://10.0.0.5:80/");
-  });
-
-  it("keeps an explicit path and its query", () => {
-    expect(
-      resolveWebEndpointUrl({
-        hostAddress: "10.0.0.5",
-        endpoint: endpoint({
-          scheme: "http",
-          port: 9000,
-          path: "/admin?tab=1",
-        }),
-      }),
-    ).toBe("http://10.0.0.5:9000/admin?tab=1");
-  });
-
-  it("throws when tunnel access has no local port", () => {
-    expect(() =>
-      resolveWebEndpointUrl({
-        hostAddress: "10.0.0.5",
-        endpoint: endpoint({ access: "tunnel" }),
-      }),
-    ).toThrow(/local port/i);
-  });
-
-  it("brackets a bare IPv6 host address", () => {
-    expect(
-      resolveWebEndpointUrl({
-        hostAddress: "fd00::1",
-        endpoint: endpoint({ scheme: "http", port: 8080 }),
-      }),
-    ).toBe("http://[fd00::1]:8080/");
-  });
-
-  it("brackets a bare IPv6 tunnel host", () => {
-    expect(
-      resolveWebEndpointUrl({
-        hostAddress: "10.0.0.5",
-        endpoint: endpoint({ access: "tunnel", scheme: "http" }),
-        localPort: 41234,
-        tunnelHost: "fd00::1",
-      }),
-    ).toBe("http://[fd00::1]:41234/");
-  });
-
-  it("uses an explicit tunnel host when given", () => {
-    expect(
-      resolveWebEndpointUrl({
-        hostAddress: "10.0.0.5",
-        endpoint: endpoint({ access: "tunnel", scheme: "http" }),
-        localPort: 41234,
-        tunnelHost: "termix.lan",
-      }),
-    ).toBe("http://termix.lan:41234/");
-  });
-});
-
-/**
- * Cookies are keyed by host and IGNORE the port, and SameSite computes "site"
- * as scheme + registrable domain -- also ignoring the port. So a forward
- * reached at the very host string serving Termix is same-site with Termix:
- * the browser attaches the jwt cookie to every request the framed
- * third-party server receives, and a Set-Cookie from that server lands in the
- * jar Termix's own API calls read from (both auth middlewares prefer the
- * cookie over the Authorization header).
- *
- * Both directions were reproduced against a real SSH forward. separatedTunnelHost
- * is the whole mitigation: a host string that reaches the same machine but is
- * a DIFFERENT cookie-jar key.
- */
-describe("separatedTunnelHost", () => {
-  it("maps each loopback spelling to a different one", () => {
-    expect(separatedTunnelHost("localhost")).toBe("127.0.0.1");
-    expect(separatedTunnelHost("127.0.0.1")).toBe("localhost");
-    expect(separatedTunnelHost("::1")).toBe("127.0.0.1");
-    expect(separatedTunnelHost("[::1]")).toBe("127.0.0.1");
-  });
-
-  it("never returns the host it was given, which would be no separation", () => {
-    for (const host of ["localhost", "127.0.0.1", "::1", "[::1]"]) {
-      expect(separatedTunnelHost(host)).not.toBe(host);
-    }
-  });
-
-  it("is case- and whitespace-insensitive", () => {
-    expect(separatedTunnelHost("  LOCALHOST ")).toBe("127.0.0.1");
-  });
-
-  it("returns null for a host with no alias, rather than guessing", () => {
-    // A same-registrable-domain alias would NOT be safe: the target could
-    // answer Set-Cookie with Domain=example.com and reach Termix anyway.
-    // Only loopback literals qualify -- they cannot carry a Domain.
-    expect(separatedTunnelHost("termix.example.com")).toBeNull();
-    expect(separatedTunnelHost("192.168.1.50")).toBeNull();
-    expect(separatedTunnelHost("")).toBeNull();
-  });
-});
-
-describe("currentTunnelHost", () => {
-  it("is loopback on the desktop, whose API base is localhost", () => {
-    // Two different cookie-jar keys. Do not "simplify" either to match.
-    expect(currentTunnelHost(true)).toBe("127.0.0.1");
-  });
-
-  it("swaps to the other loopback spelling when Termix is served at localhost", () => {
-    expect(currentTunnelHost(false, "localhost")).toBe("127.0.0.1");
-  });
-
-  it("swaps the other way when Termix is served at 127.0.0.1", () => {
-    expect(currentTunnelHost(false, "127.0.0.1")).toBe("localhost");
-  });
-
-  it("has no answer for a page host with no loopback alias", () => {
-    expect(currentTunnelHost(false, "termix.example.com")).toBeNull();
-    expect(currentTunnelHost(false, "192.168.1.50")).toBeNull();
-  });
-});
-
-/**
- * The cookie leak is not tunnel-only. A DIRECT endpoint points at the host's
- * own address, and when that host is the same one serving Termix in a browser
- * (a different port is not a different cookie key), the framed third-party
- * service receives Termix's `jwt` -- and can set one back. So the refusal has
- * to cover direct access too, using the endpoint's target host rather than a
- * bind address.
- */
-describe("sharesCookieSiteWithPage", () => {
-  it("is true for the exact same host, because cookies ignore the port", () => {
-    expect(sharesCookieSiteWithPage("termix.example", "termix.example")).toBe(
-      true,
-    );
-  });
-
-  it("is true for a parent or sub domain, which a Domain-scoped cookie crosses", () => {
-    expect(
-      sharesCookieSiteWithPage("app.termix.example", "termix.example"),
-    ).toBe(true);
-    expect(
-      sharesCookieSiteWithPage("termix.example", "app.termix.example"),
-    ).toBe(true);
-  });
-
-  it("is false for a genuinely different host", () => {
-    expect(sharesCookieSiteWithPage("192.168.1.10", "termix.example")).toBe(
-      false,
-    );
-    expect(sharesCookieSiteWithPage("nas.local", "termix.example")).toBe(false);
-  });
-
-  it("is case- and whitespace-insensitive and ignores a trailing dot", () => {
-    expect(
-      sharesCookieSiteWithPage(" TERMIX.example. ", "termix.example"),
-    ).toBe(true);
-  });
-
-  it("does not treat a shared suffix off a label boundary as same-site", () => {
-    // "eviltermix.example" ends with "termix.example" as a string but not on a
-    // dot boundary -- treating it as same-site would let an attacker pick such
-    // a name to dodge the guard, so it must be false.
-    expect(
-      sharesCookieSiteWithPage("eviltermix.example", "termix.example"),
-    ).toBe(false);
-  });
-
-  it("is false for blank input rather than guessing", () => {
-    expect(sharesCookieSiteWithPage("", "termix.example")).toBe(false);
-    expect(sharesCookieSiteWithPage("termix.example", "")).toBe(false);
-  });
-});
-
-describe("webEndpointRefusalReason", () => {
-  const tunnel = (bindHost?: string) =>
-    endpoint({ access: "tunnel", bindHost }) as Pick<
-      WebEndpoint,
-      "access" | "bindHost"
-    >;
-  const direct = () =>
-    endpoint({ access: "direct" }) as Pick<WebEndpoint, "access" | "bindHost">;
-
-  it("refuses a direct endpoint on the same host that serves Termix", () => {
-    // https://termix.example:8443 receives Termix's jwt: same host, and the
-    // port is not part of the cookie key.
-    expect(
-      webEndpointRefusalReason(
-        direct(),
-        false,
-        "termix.example",
-        "termix.example",
-      ),
-    ).toBe("direct-shares-session-cookie");
-  });
-
-  it("refuses a direct endpoint on a parent or sub domain of the page host", () => {
-    expect(
-      webEndpointRefusalReason(
-        direct(),
-        false,
-        "termix.example.com",
-        "app.termix.example.com",
-      ),
-    ).toBe("direct-shares-session-cookie");
-    expect(
-      webEndpointRefusalReason(
-        direct(),
-        false,
-        "app.termix.example.com",
-        "termix.example.com",
-      ),
-    ).toBe("direct-shares-session-cookie");
-  });
-
-  it("allows a direct endpoint on a genuinely different host", () => {
-    expect(
-      webEndpointRefusalReason(
-        direct(),
-        false,
-        "192.168.1.10",
-        "termix.example",
-      ),
-    ).toBeNull();
-    expect(
-      webEndpointRefusalReason(direct(), false, "nas.local", "termix.example"),
-    ).toBeNull();
-  });
-
-  it("allows a direct same-host endpoint on the desktop, whose jar has no jwt", () => {
-    expect(
-      webEndpointRefusalReason(
-        direct(),
-        true,
-        "termix.example",
-        "termix.example",
-      ),
-    ).toBeNull();
-  });
-
-  it("passes anything on the desktop", () => {
-    expect(
-      webEndpointRefusalReason(tunnel(), true, undefined, "localhost"),
-    ).toBeNull();
-    expect(
-      webEndpointRefusalReason(tunnel("0.0.0.0"), true, undefined, "localhost"),
-    ).toBeNull();
-  });
-
-  it("refuses a loopback bind a remote backend would strand", () => {
-    expect(
-      webEndpointRefusalReason(tunnel(), false, undefined, "localhost"),
-    ).toBe("loopback-bind-on-remote-backend");
-    expect(
-      webEndpointRefusalReason(
-        tunnel("127.0.0.1"),
-        false,
-        undefined,
-        "localhost",
-      ),
-    ).toBe("loopback-bind-on-remote-backend");
-  });
-
-  it("allows an exposed bind when the page host has a loopback alias", () => {
-    expect(
-      webEndpointRefusalReason(
-        tunnel("0.0.0.0"),
-        false,
-        undefined,
-        "localhost",
-      ),
-    ).toBeNull();
-    expect(
-      webEndpointRefusalReason(
-        tunnel("0.0.0.0"),
-        false,
-        undefined,
-        "127.0.0.1",
-      ),
-    ).toBeNull();
-  });
-
-  it("refuses when the tunnel URL would share Termix's cookie jar", () => {
-    expect(
-      webEndpointRefusalReason(
-        tunnel("0.0.0.0"),
-        false,
-        undefined,
-        "termix.example.com",
-      ),
-    ).toBe("shares-session-cookie-with-termix");
-    expect(
-      webEndpointRefusalReason(
-        tunnel("0.0.0.0"),
-        false,
-        undefined,
-        "192.168.1.50",
-      ),
-    ).toBe("shares-session-cookie-with-termix");
-  });
-
-  it("reports the reachability problem first when both apply", () => {
-    // The bind address is what the user has to change either way, and it is
-    // the more specific instruction.
-    expect(
-      webEndpointRefusalReason(
-        tunnel(),
-        false,
-        undefined,
-        "termix.example.com",
-      ),
-    ).toBe("loopback-bind-on-remote-backend");
-  });
-});
diff --git a/plugins/web-endpoint/tests/frontend/web-endpoint-validation.test.ts b/plugins/web-endpoint/tests/frontend/web-endpoint-validation.test.ts
deleted file mode 100644
index 48d28cb8f..000000000
--- a/plugins/web-endpoint/tests/frontend/web-endpoint-validation.test.ts
+++ /dev/null
@@ -1,137 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  findInvalidWebEndpoint,
-  isWebEndpointPathValid,
-  isWebEndpointPortValid,
-  webEndpointErrorKey,
-  webEndpointRowError,
-} from "../../src/frontend/web-endpoint-validation";
-import { normalizeWebEndpoints } from "../../src/shared/web-endpoint-config";
-import type { WebEndpoint } from "../../src/shared/web-endpoint-config";
-
-function endpoint(overrides: Partial<WebEndpoint> = {}): WebEndpoint {
-  return {
-    id: "e1",
-    label: "Proxmox",
-    scheme: "https",
-    port: 8006,
-    path: "/",
-    access: "direct",
-    render: "external",
-    ...overrides,
-  };
-}
-
-describe("isWebEndpointPortValid", () => {
-  it("accepts the whole legal range and nothing else", () => {
-    expect(isWebEndpointPortValid(1)).toBe(true);
-    expect(isWebEndpointPortValid(65535)).toBe(true);
-    for (const bad of [0, -1, 65536, 8.5, "8006", null, undefined, NaN]) {
-      expect(isWebEndpointPortValid(bad)).toBe(false);
-    }
-  });
-});
-
-describe("webEndpointRowError", () => {
-  it("returns null for a row the normalizer would keep", () => {
-    expect(webEndpointRowError(endpoint())).toBeNull();
-  });
-
-  it("reports a blank label before anything else", () => {
-    // Both label and port are wrong; the label is the likelier oversight.
-    expect(webEndpointRowError(endpoint({ label: "  ", port: 0 }))).toBe(
-      "label",
-    );
-  });
-
-  it("reports a bad port and a bad path", () => {
-    expect(webEndpointRowError(endpoint({ port: 0 }))).toBe("port");
-    expect(webEndpointRowError(endpoint({ path: "//evil.example" }))).toBe(
-      "path",
-    );
-  });
-});
-
-describe("findInvalidWebEndpoint", () => {
-  it("returns null when every row would survive", () => {
-    expect(
-      findInvalidWebEndpoint([
-        endpoint(),
-        endpoint({ id: "e2", label: "NAS" }),
-      ]),
-    ).toBeNull();
-  });
-
-  it("names the offending row by index", () => {
-    expect(
-      findInvalidWebEndpoint([endpoint(), endpoint({ id: "e2", label: "" })]),
-    ).toEqual({ index: 1, error: "label" });
-  });
-
-  it("reports duplicate labels, which the picker cannot tell apart", () => {
-    expect(
-      findInvalidWebEndpoint([
-        endpoint(),
-        endpoint({ id: "e2", label: "proxmox" }),
-      ]),
-    ).toEqual({ index: 1, error: "duplicateLabel" });
-  });
-
-  it("tolerates a missing list", () => {
-    expect(findInvalidWebEndpoint(undefined)).toBeNull();
-    expect(findInvalidWebEndpoint(null)).toBeNull();
-  });
-});
-
-describe("webEndpointErrorKey", () => {
-  it("maps every error to a distinct i18n key", () => {
-    const keys = (["label", "duplicateLabel", "port", "path"] as const).map(
-      webEndpointErrorKey,
-    );
-    expect(new Set(keys).size).toBe(keys.length);
-    for (const key of keys) expect(key).toMatch(/^hosts\./);
-  });
-});
-
-/**
- * The editor validator and the backend normalizer are two implementations of
- * overlapping rules, in two layers that cannot share code (the renderer does
- * not import backend route modules). Nothing but this describe block stops
- * them drifting -- and drift here is invisible in the worst way: the editor
- * accepts a row, the normalizer silently drops it, and the user's endpoint
- * disappears on reload with no error anywhere.
- */
-describe("the editor agrees with the normalizer", () => {
-  const PATHS = [
-    "/",
-    "",
-    "/admin",
-    "admin",
-    "/admin?tab=1",
-    "/a b",
-    "//evil.example",
-    "http://evil.example/x",
-    "/x:y",
-    "\t//evil.example",
-    "\n//evil.example",
-    "/a\tb",
-    `/a${String.fromCharCode(0x7f)}b`,
-    "/back\\slash",
-  ];
-
-  it.each(PATHS)("agrees on path %j", (path) => {
-    const editorAccepts = isWebEndpointPathValid(path);
-    const normalizerKeeps =
-      normalizeWebEndpoints([{ ...endpoint(), path }]).length === 1;
-    expect(editorAccepts).toBe(normalizerKeeps);
-  });
-
-  const PORTS = [1, 80, 8006, 65535, 0, -1, 65536, 8.5];
-
-  it.each(PORTS)("agrees on port %j", (port) => {
-    const editorAccepts = isWebEndpointPortValid(port);
-    const normalizerKeeps =
-      normalizeWebEndpoints([{ ...endpoint(), port }]).length === 1;
-    expect(editorAccepts).toBe(normalizerKeeps);
-  });
-});
diff --git a/plugins/web-endpoint/tsconfig.json b/plugins/web-endpoint/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/web-endpoint/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/web-endpoint/vitest.config.ts b/plugins/web-endpoint/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/web-endpoint/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/webauthn/CHANGELOG.md b/plugins/webauthn/CHANGELOG.md
deleted file mode 100644
index 785187ffc..000000000
--- a/plugins/webauthn/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Lets users sign in with a passkey or security key instead of a password. A passkey that checks your PIN or fingerprint also counts as a second factor.
diff --git a/plugins/webauthn/README.md b/plugins/webauthn/README.md
deleted file mode 100644
index 4625d344a..000000000
--- a/plugins/webauthn/README.md
+++ /dev/null
@@ -1,17 +0,0 @@
-# Passkeys
-
-Sign in with a passkey or security key instead of a password. A passkey that checks your PIN or fingerprint also counts as a second factor.
-
-## Features
-
-- Sign in with a passkey or security key instead of a password.
-- A passkey that checks your PIN or fingerprint also counts as a second factor.
-- Add more than one passkey, including synced ones.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/webauthn/locales/en.json b/plugins/webauthn/locales/en.json
deleted file mode 100644
index 18248e606..000000000
--- a/plugins/webauthn/locales/en.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Passkeys",
-  "signIn": "Sign in with passkey",
-  "loginFailed": "Passkey login failed",
-  "description": "Use WebAuthn/FIDO2 credentials to sign in without a password",
-  "namePlaceholder": "Passkey name",
-  "defaultName": "Passkey",
-  "uv": {
-    "preferred": "Preferred",
-    "required": "Required",
-    "discouraged": "Discouraged"
-  },
-  "add": "Add Passkey",
-  "none": "No passkeys registered.",
-  "added": "Passkey added",
-  "addFailed": "Failed to add passkey",
-  "delete": "Delete passkey",
-  "deleted": "Passkey deleted",
-  "deleteFailed": "Failed to delete passkey",
-  "unknownDevice": "unknown",
-  "synced": "synced"
-}
diff --git a/plugins/webauthn/locales/translated/af_ZA.json b/plugins/webauthn/locales/translated/af_ZA.json
deleted file mode 100644
index 82a5a0e9e..000000000
--- a/plugins/webauthn/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Wagwoorde",
-  "signIn": "Teken aan met wagwoord",
-  "loginFailed": "Wagwoord-aanmelding het misluk",
-  "description": "Gebruik WebAuthn/FIDO2-bewyse om aan te meld sonder 'n wagwoord",
-  "namePlaceholder": "Wagwoordnaam",
-  "defaultName": "Wagwoord",
-  "uv": {
-    "preferred": "Verkies",
-    "required": "Vereis",
-    "discouraged": "Ontmoedig"
-  },
-  "add": "Voeg wagwoord by",
-  "none": "Geen wagwoorde geregistreer nie.",
-  "added": "Wagwoord bygevoeg",
-  "addFailed": "Kon nie wagwoord byvoeg nie",
-  "delete": "Vee wagwoord uit",
-  "deleted": "Wagwoord verwyder",
-  "deleteFailed": "Kon nie wagwoord verwyder nie",
-  "unknownDevice": "onbekend",
-  "synced": "gesinkroniseer"
-}
diff --git a/plugins/webauthn/locales/translated/ar_SA.json b/plugins/webauthn/locales/translated/ar_SA.json
deleted file mode 100644
index 8204bf7e1..000000000
--- a/plugins/webauthn/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "مفاتيح المرور",
-  "signIn": "تسجيل الدخول باستخدام مفتاح المرور",
-  "loginFailed": "فشل تسجيل الدخول بمفتاح المرور",
-  "description": "استخدم بيانات اعتماد WebAuthn/FIDO2 لتسجيل الدخول بدون كلمة مرور",
-  "namePlaceholder": "اسم مفتاح المرور",
-  "defaultName": "مفتاح المرور",
-  "uv": {
-    "preferred": "مفضل",
-    "required": "مطلوب",
-    "discouraged": "غير مشجع"
-  },
-  "add": "إضافة مفتاح مرور",
-  "none": "لا توجد مفاتيح مرور مسجلة.",
-  "added": "تمت إضافة مفتاح المرور",
-  "addFailed": "فشل إضافة مفتاح المرور",
-  "delete": "حذف مفتاح المرور",
-  "deleted": "تم حذف مفتاح المرور",
-  "deleteFailed": "فشل حذف مفتاح المرور",
-  "unknownDevice": "غير معروف",
-  "synced": "متزامن"
-}
diff --git a/plugins/webauthn/locales/translated/bg_BG.json b/plugins/webauthn/locales/translated/bg_BG.json
deleted file mode 100644
index 54743d5c5..000000000
--- a/plugins/webauthn/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Пароли",
-  "signIn": "Влезте с парола",
-  "loginFailed": "Влизането с парола не бе успешно",
-  "description": "Използвайте WebAuthn/FIDO2 идентификационни данни за влизане без парола",
-  "namePlaceholder": "Име на паролата",
-  "defaultName": "Ключ за достъп",
-  "uv": {
-    "preferred": "Предпочитан",
-    "required": "Задължително",
-    "discouraged": "Обезкуражен"
-  },
-  "add": "Добавяне на парола",
-  "none": "Няма регистрирани пароли.",
-  "added": "Добавен е ключ за достъп",
-  "addFailed": "Добавянето на ключ за достъп не бе успешно",
-  "delete": "Изтриване на парола",
-  "deleted": "Ключът за достъп е изтрит",
-  "deleteFailed": "Изтриването на ключа за достъп не бе успешно",
-  "unknownDevice": "неизвестен",
-  "synced": "синхронизирано"
-}
diff --git a/plugins/webauthn/locales/translated/bn_BD.json b/plugins/webauthn/locales/translated/bn_BD.json
deleted file mode 100644
index b51443a7d..000000000
--- a/plugins/webauthn/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "পাসকি",
-  "signIn": "পাসকি দিয়ে সাইন ইন করুন",
-  "loginFailed": "পাসকি লগইন ব্যর্থ হয়েছে",
-  "description": "পাসওয়ার্ড ছাড়া সাইন ইন করতে WebAuthn/FIDO2 ক্রেডেনশিয়াল ব্যবহার করুন।",
-  "namePlaceholder": "পাসকি নাম",
-  "defaultName": "পাসকি",
-  "uv": {
-    "preferred": "পছন্দের",
-    "required": "প্রয়োজনীয়",
-    "discouraged": "হতাশ"
-  },
-  "add": "পাসকি যোগ করুন",
-  "none": "কোনো পাসকি নিবন্ধিত নেই।",
-  "added": "পাসকি যোগ করা হয়েছে",
-  "addFailed": "পাসকি যোগ করতে ব্যর্থ হয়েছে",
-  "delete": "পাসকি মুছুন",
-  "deleted": "পাসকি মুছে ফেলা হয়েছে",
-  "deleteFailed": "পাসকি মুছে ফেলতে ব্যর্থ হয়েছে",
-  "unknownDevice": "অজানা",
-  "synced": "সিঙ্ক করা"
-}
diff --git a/plugins/webauthn/locales/translated/ca_ES.json b/plugins/webauthn/locales/translated/ca_ES.json
deleted file mode 100644
index db17593be..000000000
--- a/plugins/webauthn/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Claus d'accés",
-  "signIn": "Inicia la sessió amb la clau d'accés",
-  "loginFailed": "Error d'inici de sessió amb contrasenya",
-  "description": "Utilitzeu les credencials de WebAuthn/FIDO2 per iniciar la sessió sense contrasenya",
-  "namePlaceholder": "Nom de la clau d'accés",
-  "defaultName": "Clau d'accés",
-  "uv": {
-    "preferred": "Preferit",
-    "required": "Obligatori",
-    "discouraged": "Desanimat"
-  },
-  "add": "Afegeix una contrasenya",
-  "none": "No hi ha cap clau d'accés registrada.",
-  "added": "Clau d'accés afegida",
-  "addFailed": "No s'ha pogut afegir la contrasenya",
-  "delete": "Suprimeix la clau d'accés",
-  "deleted": "Clau d'accés suprimida",
-  "deleteFailed": "No s'ha pogut suprimir la clau d'accés",
-  "unknownDevice": "desconegut",
-  "synced": "sincronitzat"
-}
diff --git a/plugins/webauthn/locales/translated/cs_CZ.json b/plugins/webauthn/locales/translated/cs_CZ.json
deleted file mode 100644
index 58b1335c6..000000000
--- a/plugins/webauthn/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Přístupové klíče",
-  "signIn": "Přihlásit se pomocí hesla",
-  "loginFailed": "Přihlášení k heslu se nezdařilo",
-  "description": "Pro přihlášení bez hesla použijte přihlašovací údaje WebAuthn/FIDO2",
-  "namePlaceholder": "Název přístupového klíče",
-  "defaultName": "Přístupový klíč",
-  "uv": {
-    "preferred": "Preferované",
-    "required": "Požadovaný",
-    "discouraged": "Odradit"
-  },
-  "add": "Přidat přístupový klíč",
-  "none": "Nejsou registrovány žádné přístupové klíče.",
-  "added": "Přístupový klíč byl přidán",
-  "addFailed": "Nepodařilo se přidat přístupový klíč",
-  "delete": "Smazat přístupový klíč",
-  "deleted": "Přístupový klíč smazán",
-  "deleteFailed": "Nepodařilo se smazat přístupový klíč",
-  "unknownDevice": "neznámý",
-  "synced": "synchronizováno"
-}
diff --git a/plugins/webauthn/locales/translated/da_DK.json b/plugins/webauthn/locales/translated/da_DK.json
deleted file mode 100644
index 9b7f49bd6..000000000
--- a/plugins/webauthn/locales/translated/da_DK.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Adgangsnøgler",
-  "signIn": "Log ind med adgangsnøgle",
-  "loginFailed": "Login med adgangsnøgle mislykkedes",
-  "description": "Brug WebAuthn/FIDO2-legitimationsoplysninger til at logge ind uden en adgangskode",
-  "namePlaceholder": "Adgangsnøglenavn",
-  "defaultName": "Adgangsnøgle",
-  "uv": {
-    "preferred": "Foretrukket",
-    "required": "Påkrævet",
-    "discouraged": "Modløs"
-  },
-  "add": "Tilføj adgangsnøgle",
-  "none": "Ingen adgangsnøgler registreret.",
-  "added": "Adgangsnøgle tilføjet",
-  "addFailed": "Kunne ikke tilføje adgangsnøgle",
-  "delete": "Slet adgangsnøgle",
-  "deleted": "Adgangsnøgle slettet",
-  "deleteFailed": "Kunne ikke slette adgangsnøglen",
-  "unknownDevice": "ukendt",
-  "synced": "synkroniseret"
-}
diff --git a/plugins/webauthn/locales/translated/de_DE.json b/plugins/webauthn/locales/translated/de_DE.json
deleted file mode 100644
index 8237fc942..000000000
--- a/plugins/webauthn/locales/translated/de_DE.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Passkeys",
-  "signIn": "Mit Passkey anmelden",
-  "loginFailed": "Passkey-Anmeldung fehlgeschlagen",
-  "description": "WebAuthn/FIDO2-Anmeldedaten für eine Anmeldung ohne Passwort verwenden",
-  "namePlaceholder": "Passkey-Name",
-  "defaultName": "Passkey",
-  "uv": {
-    "preferred": "Bevorzugt",
-    "required": "Erforderlich",
-    "discouraged": "Nicht empfohlen"
-  },
-  "add": "Passkey hinzufügen",
-  "none": "Keine Passkeys registriert.",
-  "added": "Passkey hinzugefügt",
-  "addFailed": "Fehler beim Hinzufügen des Passkeys",
-  "delete": "Passwort löschen",
-  "deleted": "Passkey gelöscht",
-  "deleteFailed": "Löschen des Passkeys fehlgeschlagen",
-  "unknownDevice": "unbekannt",
-  "synced": "synchronisiert"
-}
diff --git a/plugins/webauthn/locales/translated/el_GR.json b/plugins/webauthn/locales/translated/el_GR.json
deleted file mode 100644
index 37a30a3d0..000000000
--- a/plugins/webauthn/locales/translated/el_GR.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Κλειδιά πρόσβασης",
-  "signIn": "Σύνδεση με κλειδί πρόσβασης",
-  "loginFailed": "Η σύνδεση με κωδικό πρόσβασης απέτυχε",
-  "description": "Χρησιμοποιήστε διαπιστευτήρια WebAuthn/FIDO2 για να συνδεθείτε χωρίς κωδικό πρόσβασης",
-  "namePlaceholder": "Όνομα κλειδιού πρόσβασης",
-  "defaultName": "Αντικλείδι",
-  "uv": {
-    "preferred": "Προνομιούχος",
-    "required": "Υποχρεούμαι",
-    "discouraged": "Αποθαρρυμένος"
-  },
-  "add": "Προσθήκη κλειδιού πρόσβασης",
-  "none": "Δεν έχουν καταχωρηθεί κλειδιά πρόσβασης.",
-  "added": "Προστέθηκε κλειδί πρόσβασης",
-  "addFailed": "Αποτυχία προσθήκης κλειδιού πρόσβασης",
-  "delete": "Διαγραφή κλειδιού πρόσβασης",
-  "deleted": "Ο κωδικός πρόσβασης διαγράφηκε",
-  "deleteFailed": "Η διαγραφή του κλειδιού πρόσβασης απέτυχε",
-  "unknownDevice": "άγνωστος",
-  "synced": "συγχρονισμένο"
-}
diff --git a/plugins/webauthn/locales/translated/es_ES.json b/plugins/webauthn/locales/translated/es_ES.json
deleted file mode 100644
index 2d4fab98f..000000000
--- a/plugins/webauthn/locales/translated/es_ES.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Passkeys",
-  "signIn": "Iniciar sesión con clave de acceso",
-  "loginFailed": "Error al iniciar sesión con clave de acceso",
-  "description": "Usa credenciales WebAuthn/FIDO2 para iniciar sesión sin contraseña",
-  "namePlaceholder": "Nombre de la passkey",
-  "defaultName": "Llave maestra",
-  "uv": {
-    "preferred": "Preferida",
-    "required": "Requerida",
-    "discouraged": "Desaconsejada"
-  },
-  "add": "Añadir passkey",
-  "none": "No hay passkeys registradas.",
-  "added": "Passkey añadida",
-  "addFailed": "No se pudo añadir la passkey",
-  "delete": "Eliminar clave de acceso",
-  "deleted": "Passkey eliminada",
-  "deleteFailed": "Error al eliminar la clave de acceso",
-  "unknownDevice": "desconocido",
-  "synced": "sincronizado"
-}
diff --git a/plugins/webauthn/locales/translated/fi_FI.json b/plugins/webauthn/locales/translated/fi_FI.json
deleted file mode 100644
index 296bc9c7c..000000000
--- a/plugins/webauthn/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Salasanat",
-  "signIn": "Kirjaudu sisään salasanalla",
-  "loginFailed": "Salasanan kirjautuminen epäonnistui",
-  "description": "Kirjaudu sisään ilman salasanaa WebAuthn/FIDO2-tunnuksilla",
-  "namePlaceholder": "Salasanan nimi",
-  "defaultName": "Salasana",
-  "uv": {
-    "preferred": "Ensisijainen",
-    "required": "Pakollinen",
-    "discouraged": "Lannistunut"
-  },
-  "add": "Lisää salasana",
-  "none": "Ei rekisteröityjä salasanoja.",
-  "added": "Salasana lisätty",
-  "addFailed": "Salasanan lisääminen epäonnistui",
-  "delete": "Poista salasana",
-  "deleted": "Salasana poistettu",
-  "deleteFailed": "Salasanan poistaminen epäonnistui",
-  "unknownDevice": "tuntematon",
-  "synced": "synkronoitu"
-}
diff --git a/plugins/webauthn/locales/translated/fr_FR.json b/plugins/webauthn/locales/translated/fr_FR.json
deleted file mode 100644
index 7fbd1e4e2..000000000
--- a/plugins/webauthn/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Clés d’accès",
-  "signIn": "Se connecter avec une clé d'accès",
-  "loginFailed": "Échec de la connexion par clé d'accès",
-  "description": "Utilisez des identifiants WebAuthn/FIDO2 pour vous connecter sans mot de passe",
-  "namePlaceholder": "Nom de la clé d’accès",
-  "defaultName": "Clé d'accès",
-  "uv": {
-    "preferred": "Préféré",
-    "required": "Requis",
-    "discouraged": "Déconseillé"
-  },
-  "add": "Ajouter une clé d’accès",
-  "none": "Aucune clé d’accès enregistrée.",
-  "added": "Clé d’accès ajoutée",
-  "addFailed": "Échec de l’ajout de la clé d’accès",
-  "delete": "Supprimer le code d'accès",
-  "deleted": "Clé d’accès supprimée",
-  "deleteFailed": "Échec de la suppression de la clé d'accès",
-  "unknownDevice": "inconnu",
-  "synced": "synchronisé"
-}
diff --git a/plugins/webauthn/locales/translated/he_IL.json b/plugins/webauthn/locales/translated/he_IL.json
deleted file mode 100644
index e9b47c2b0..000000000
--- a/plugins/webauthn/locales/translated/he_IL.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "מפתחות סיסמה",
-  "signIn": "כניסה עם סיסמה",
-  "loginFailed": "כניסה עם סיסמה נכשלה",
-  "description": "השתמש בפרטי הכניסה של WebAuthn/FIDO2 ללא סיסמה",
-  "namePlaceholder": "שם סיסמה",
-  "defaultName": "סיסמה",
-  "uv": {
-    "preferred": "מועדף",
-    "required": "דָרוּשׁ",
-    "discouraged": "מיואש"
-  },
-  "add": "הוסף סיסמה",
-  "none": "אין סיסמות רשומות.",
-  "added": "סיסמה נוספת",
-  "addFailed": "נכשלה הוספת סיסמה",
-  "delete": "מחיקת סיסמה",
-  "deleted": "סיסמת הגישה נמחקה",
-  "deleteFailed": "מחיקת המפתח נכשלה",
-  "unknownDevice": "לֹא יְדוּעַ",
-  "synced": "מסונכרן"
-}
diff --git a/plugins/webauthn/locales/translated/hi_IN.json b/plugins/webauthn/locales/translated/hi_IN.json
deleted file mode 100644
index e43387596..000000000
--- a/plugins/webauthn/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "पासकीज़",
-  "signIn": "पासकी से साइन इन करें",
-  "loginFailed": "पासकी लॉगिन विफल",
-  "description": "बिना पासवर्ड साइन इन करने के लिए WebAuthn/FIDO2 क्रेडेंशियल का उपयोग करें",
-  "namePlaceholder": "पासकी नाम",
-  "defaultName": "सर्व-कुंजी",
-  "uv": {
-    "preferred": "पसंदीदा",
-    "required": "आवश्यक",
-    "discouraged": "हतोत्साहित"
-  },
-  "add": "पासकी जोड़ें",
-  "none": "कोई पासकी पंजीकृत नहीं है।",
-  "added": "पासकी जोड़ी गई",
-  "addFailed": "पासकी जोड़ने में विफल",
-  "delete": "पासकी हटाएं",
-  "deleted": "पासकी हटाई गई",
-  "deleteFailed": "पासकी हटाने में विफल",
-  "unknownDevice": "अज्ञात",
-  "synced": "सिंक किया गया"
-}
diff --git a/plugins/webauthn/locales/translated/hu_HU.json b/plugins/webauthn/locales/translated/hu_HU.json
deleted file mode 100644
index 25f7f4028..000000000
--- a/plugins/webauthn/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Jelszavak",
-  "signIn": "Bejelentkezés jelszóval",
-  "loginFailed": "Jelszóval történő bejelentkezés sikertelen",
-  "description": "Jelszó nélküli bejelentkezéshez használja a WebAuthn/FIDO2 hitelesítő adatokat",
-  "namePlaceholder": "Jelszó neve",
-  "defaultName": "Jelszó",
-  "uv": {
-    "preferred": "Előnyben részesített",
-    "required": "Kívánt",
-    "discouraged": "Elbátortalanodva"
-  },
-  "add": "Jelszó hozzáadása",
-  "none": "Nincsenek regisztrált jelszók.",
-  "added": "Hozzáadott jelszó",
-  "addFailed": "Nem sikerült hozzáadni a jelszót",
-  "delete": "Jelszó törlése",
-  "deleted": "Jelszó törölve",
-  "deleteFailed": "Nem sikerült törölni a jelszót",
-  "unknownDevice": "ismeretlen",
-  "synced": "szinkronizálva"
-}
diff --git a/plugins/webauthn/locales/translated/id_ID.json b/plugins/webauthn/locales/translated/id_ID.json
deleted file mode 100644
index aee017e35..000000000
--- a/plugins/webauthn/locales/translated/id_ID.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Kode akses",
-  "signIn": "Masuk dengan kata sandi",
-  "loginFailed": "Login dengan kata sandi gagal.",
-  "description": "Gunakan kredensial WebAuthn/FIDO2 untuk masuk tanpa kata sandi.",
-  "namePlaceholder": "Nama kata sandi",
-  "defaultName": "Kode sandi",
-  "uv": {
-    "preferred": "Lebih disukai",
-    "required": "Diperlukan",
-    "discouraged": "Berkecil hati"
-  },
-  "add": "Tambahkan Kata Sandi",
-  "none": "Tidak ada kata sandi yang terdaftar.",
-  "added": "Kata sandi telah ditambahkan",
-  "addFailed": "Gagal menambahkan kata sandi.",
-  "delete": "Hapus kata sandi",
-  "deleted": "Kata sandi telah dihapus.",
-  "deleteFailed": "Gagal menghapus kata sandi.",
-  "unknownDevice": "tidak dikenal",
-  "synced": "disinkronkan"
-}
diff --git a/plugins/webauthn/locales/translated/it_IT.json b/plugins/webauthn/locales/translated/it_IT.json
deleted file mode 100644
index 424dd6da9..000000000
--- a/plugins/webauthn/locales/translated/it_IT.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Passkeys",
-  "signIn": "Accedi con passkey",
-  "loginFailed": "Accesso con passkey non riuscito",
-  "description": "Utilizza credenziali WebAuthn/FIDO2 per accedere senza password",
-  "namePlaceholder": "Nome passkey",
-  "defaultName": "Chiave di sicurezza",
-  "uv": {
-    "preferred": "Preferita",
-    "required": "Obbligatoria",
-    "discouraged": "Sconsigliata"
-  },
-  "add": "Aggiungi passkey",
-  "none": "Nessuna passkey registrata.",
-  "added": "Passkey aggiunta",
-  "addFailed": "Impossibile aggiungere la passkey",
-  "delete": "Elimina la password",
-  "deleted": "Passkey eliminata",
-  "deleteFailed": "Impossibile eliminare la passkey",
-  "unknownDevice": "sconosciuto",
-  "synced": "sincronizzato"
-}
diff --git a/plugins/webauthn/locales/translated/ja_JP.json b/plugins/webauthn/locales/translated/ja_JP.json
deleted file mode 100644
index f795066fa..000000000
--- a/plugins/webauthn/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "パスキー",
-  "signIn": "パスキーでサインイン",
-  "loginFailed": "パスキーログインに失敗しました",
-  "description": "WebAuthn/FIDO2認証情報を使用してパスワードなしでサインインできます",
-  "namePlaceholder": "パスキー名",
-  "defaultName": "パスキー",
-  "uv": {
-    "preferred": "優先",
-    "required": "必須",
-    "discouraged": "非推奨"
-  },
-  "add": "パスキーを追加",
-  "none": "登録されたパスキーはありません。",
-  "added": "パスキーが追加されました",
-  "addFailed": "パスキーの追加に失敗しました",
-  "delete": "パスキーを削除",
-  "deleted": "パスキーが削除されました",
-  "deleteFailed": "パスキーの削除に失敗しました",
-  "unknownDevice": "不明",
-  "synced": "同期済み"
-}
diff --git a/plugins/webauthn/locales/translated/ko_KR.json b/plugins/webauthn/locales/translated/ko_KR.json
deleted file mode 100644
index b3430daeb..000000000
--- a/plugins/webauthn/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "패스키",
-  "signIn": "Passkey로 로그인",
-  "loginFailed": "패스키 로그인 실패",
-  "description": "WebAuthn/FIDO2 자격 증명을 사용하여 비밀번호 없이 로그인하세요.",
-  "namePlaceholder": "패스키 이름",
-  "defaultName": "곁쇠",
-  "uv": {
-    "preferred": "선호",
-    "required": "필수",
-    "discouraged": "권장 안 함"
-  },
-  "add": "패스키 추가",
-  "none": "등록된 패스키가 없습니다.",
-  "added": "패스키가 추가되었습니다.",
-  "addFailed": "패스키 추가 실패",
-  "delete": "암호 삭제",
-  "deleted": "패스키가 삭제되었습니다.",
-  "deleteFailed": "패스키 삭제 실패",
-  "unknownDevice": "알 수 없음",
-  "synced": "동기화됨"
-}
diff --git a/plugins/webauthn/locales/translated/nl_NL.json b/plugins/webauthn/locales/translated/nl_NL.json
deleted file mode 100644
index c80dec254..000000000
--- a/plugins/webauthn/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Wachtwoorden",
-  "signIn": "Aanmelden met wachtwoord",
-  "loginFailed": "Aanmelden met wachtwoord mislukt",
-  "description": "Gebruik WebAuthn/FIDO2-gegevens om zonder wachtwoord in te loggen.",
-  "namePlaceholder": "Wachtwoordnaam",
-  "defaultName": "Wachtwoord",
-  "uv": {
-    "preferred": "Voorkeur",
-    "required": "Vereist",
-    "discouraged": "Ontmoedigd"
-  },
-  "add": "Voeg wachtwoord toe",
-  "none": "Er zijn geen wachtwoorden geregistreerd.",
-  "added": "Wachtwoord toegevoegd",
-  "addFailed": "Wachtwoord toevoegen mislukt",
-  "delete": "Wachtwoord verwijderen",
-  "deleted": "Wachtwoord verwijderd",
-  "deleteFailed": "Het verwijderen van de toegangscode is mislukt.",
-  "unknownDevice": "onbekend",
-  "synced": "gesynchroniseerd"
-}
diff --git a/plugins/webauthn/locales/translated/no_NO.json b/plugins/webauthn/locales/translated/no_NO.json
deleted file mode 100644
index 7f85eee4a..000000000
--- a/plugins/webauthn/locales/translated/no_NO.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Passord",
-  "signIn": "Logg inn med passord",
-  "loginFailed": "Innlogging med passord mislyktes",
-  "description": "Bruk WebAuthn/FIDO2-legitimasjon for å logge på uten passord",
-  "namePlaceholder": "Navn på passord",
-  "defaultName": "Tilgangsnøkkel",
-  "uv": {
-    "preferred": "Foretrukket",
-    "required": "Påkrevd",
-    "discouraged": "Motløs"
-  },
-  "add": "Legg til tilgangsnøkkel",
-  "none": "Ingen passord registrert.",
-  "added": "Tilgangsnøkkel lagt til",
-  "addFailed": "Kunne ikke legge til passord",
-  "delete": "Slett passord",
-  "deleted": "Tilgangsnøkkel slettet",
-  "deleteFailed": "Kunne ikke slette passordet",
-  "unknownDevice": "ukjent",
-  "synced": "synkronisert"
-}
diff --git a/plugins/webauthn/locales/translated/pl_PL.json b/plugins/webauthn/locales/translated/pl_PL.json
deleted file mode 100644
index b4db69378..000000000
--- a/plugins/webauthn/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Klucze dostępu",
-  "signIn": "Zaloguj się za pomocą klucza dostępu",
-  "loginFailed": "Nie udało się zalogować za pomocą klucza dostępu",
-  "description": "Używaj poświadczeń WebAuthn/FIDO2, aby logować się bez hasła",
-  "namePlaceholder": "Nazwa klucza dostępu",
-  "defaultName": "Klucz uniwersalny",
-  "uv": {
-    "preferred": "Preferowane",
-    "required": "Wymagane",
-    "discouraged": "Odradzane"
-  },
-  "add": "Dodaj klucz dostępu",
-  "none": "Nie zarejestrowano żadnych kluczy dostępu.",
-  "added": "Dodano klucz dostępu",
-  "addFailed": "Nie udało się dodać klucza dostępu",
-  "delete": "Usuń klucz dostępu",
-  "deleted": "Usunięto klucz dostępu",
-  "deleteFailed": "Nie udało się usunąć klucza dostępu",
-  "unknownDevice": "nieznany",
-  "synced": "zsynchronizowany"
-}
diff --git a/plugins/webauthn/locales/translated/pt_BR.json b/plugins/webauthn/locales/translated/pt_BR.json
deleted file mode 100644
index 606546897..000000000
--- a/plugins/webauthn/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Senhas",
-  "signIn": "Faça login com a chave de acesso.",
-  "loginFailed": "Falha no login com a chave de acesso",
-  "description": "Use as credenciais WebAuthn/FIDO2 para fazer login sem senha.",
-  "namePlaceholder": "Nome da chave de acesso",
-  "defaultName": "Chave de acesso",
-  "uv": {
-    "preferred": "Preferido",
-    "required": "Obrigatório",
-    "discouraged": "Desencorajado"
-  },
-  "add": "Adicionar chave de acesso",
-  "none": "Nenhuma chave de acesso registrada.",
-  "added": "Senha adicionada",
-  "addFailed": "Falha ao adicionar a chave de acesso.",
-  "delete": "Excluir chave de acesso",
-  "deleted": "Senha excluída",
-  "deleteFailed": "Falha ao excluir a chave de acesso.",
-  "unknownDevice": "desconhecido",
-  "synced": "sincronizado"
-}
diff --git a/plugins/webauthn/locales/translated/pt_PT.json b/plugins/webauthn/locales/translated/pt_PT.json
deleted file mode 100644
index 856f9e3d5..000000000
--- a/plugins/webauthn/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Passkeys",
-  "signIn": "Iniciar sessão com passkey",
-  "loginFailed": "Falha no início de sessão com passkey",
-  "description": "Utilize credenciais WebAuthn/FIDO2 para iniciar sessão sem palavra-passe",
-  "namePlaceholder": "Nome da passkey",
-  "defaultName": "Chave de acesso",
-  "uv": {
-    "preferred": "Preferencial",
-    "required": "Obrigatório",
-    "discouraged": "Desaconselhado"
-  },
-  "add": "Adicionar Passkey",
-  "none": "Nenhuma passkey registada.",
-  "added": "Passkey adicionada",
-  "addFailed": "Falha ao adicionar passkey",
-  "delete": "Apagar chave de acesso",
-  "deleted": "Passkey eliminada",
-  "deleteFailed": "Falha ao eliminar chave de acesso",
-  "unknownDevice": "desconhecido",
-  "synced": "sincronizado"
-}
diff --git a/plugins/webauthn/locales/translated/ro_RO.json b/plugins/webauthn/locales/translated/ro_RO.json
deleted file mode 100644
index 1b07f5615..000000000
--- a/plugins/webauthn/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Chei de acces",
-  "signIn": "Conectați-vă cu cheia de acces",
-  "loginFailed": "Conectarea cu parola a eșuat",
-  "description": "Folosește acreditările WebAuthn/FIDO2 pentru a te conecta fără parolă",
-  "namePlaceholder": "Numele cheii de acces",
-  "defaultName": "Cheie de acces",
-  "uv": {
-    "preferred": "Preferat",
-    "required": "Necesar",
-    "discouraged": "Descurajat"
-  },
-  "add": "Adăugați o cheie de acces",
-  "none": "Nicio cheie de acces înregistrată.",
-  "added": "Cheie de acces adăugată",
-  "addFailed": "Nu s-a putut adăuga parola",
-  "delete": "Ștergeți parola",
-  "deleted": "Cheia de acces a fost ștearsă",
-  "deleteFailed": "Nu s-a putut șterge parola",
-  "unknownDevice": "necunoscut",
-  "synced": "sincronizat"
-}
diff --git a/plugins/webauthn/locales/translated/ru_RU.json b/plugins/webauthn/locales/translated/ru_RU.json
deleted file mode 100644
index 23477f76c..000000000
--- a/plugins/webauthn/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Ключи доступа",
-  "signIn": "Войти с ключом доступа",
-  "loginFailed": "Вход по ключу не удался",
-  "description": "Используйте учётные данные WebAuthn/FIDO2 для входа без пароля",
-  "namePlaceholder": "Название ключа доступа",
-  "defaultName": "Ключ доступа",
-  "uv": {
-    "preferred": "Предпочтительно",
-    "required": "Обязательно",
-    "discouraged": "Не рекомендуется"
-  },
-  "add": "Добавить ключ доступа",
-  "none": "Нет зарегистрированных ключей доступа.",
-  "added": "Ключ доступа добавлен",
-  "addFailed": "Не удалось добавить ключ доступа",
-  "delete": "Удалить пароль",
-  "deleted": "Ключ доступа удалён",
-  "deleteFailed": "Ошибка удаления ключа доступа",
-  "unknownDevice": "неизвестно",
-  "synced": "синхронизировано"
-}
diff --git a/plugins/webauthn/locales/translated/sr_SP.json b/plugins/webauthn/locales/translated/sr_SP.json
deleted file mode 100644
index 5451804b7..000000000
--- a/plugins/webauthn/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Лозинке",
-  "signIn": "Пријавите се помоћу лозинке",
-  "loginFailed": "Пријава лозинком није успела",
-  "description": "Користите WebAuthn/FIDO2 акредитиве за пријаву без лозинке",
-  "namePlaceholder": "Назив лозинке",
-  "defaultName": "Лозинка",
-  "uv": {
-    "preferred": "Преферирано",
-    "required": "Обавезно",
-    "discouraged": "Обесхрабрено"
-  },
-  "add": "Додај лозинку",
-  "none": "Није регистрована ниједна лозинка.",
-  "added": "Лозинка је додата",
-  "addFailed": "Додавање лозинке није успело",
-  "delete": "Обриши шифру",
-  "deleted": "Лозинка је обрисана",
-  "deleteFailed": "Брисање лозинке није успело",
-  "unknownDevice": "непознато",
-  "synced": "синхронизовано"
-}
diff --git a/plugins/webauthn/locales/translated/sv_SE.json b/plugins/webauthn/locales/translated/sv_SE.json
deleted file mode 100644
index ce975a96e..000000000
--- a/plugins/webauthn/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Lösenord",
-  "signIn": "Logga in med lösenord",
-  "loginFailed": "Inloggning med lösenord misslyckades",
-  "description": "Använd WebAuthn/FIDO2-inloggningsuppgifter för att logga in utan lösenord",
-  "namePlaceholder": "Lösenordsnamn",
-  "defaultName": "Lösenord",
-  "uv": {
-    "preferred": "Föredragen",
-    "required": "Nödvändig",
-    "discouraged": "Avskräckt"
-  },
-  "add": "Lägg till lösenord",
-  "none": "Inga lösennycklar registrerade.",
-  "added": "Lösenord tillagt",
-  "addFailed": "Misslyckades med att lägga till lösenord",
-  "delete": "Ta bort lösenord",
-  "deleted": "Lösenordet raderat",
-  "deleteFailed": "Misslyckades med att ta bort lösenordet",
-  "unknownDevice": "okänd",
-  "synced": "synkroniserad"
-}
diff --git a/plugins/webauthn/locales/translated/th_TH.json b/plugins/webauthn/locales/translated/th_TH.json
deleted file mode 100644
index c0baa3128..000000000
--- a/plugins/webauthn/locales/translated/th_TH.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "รหัสผ่าน",
-  "signIn": "ลงชื่อเข้าใช้ด้วยรหัสผ่าน",
-  "loginFailed": "การเข้าสู่ระบบด้วยรหัสผ่านล้มเหลว",
-  "description": "ใช้ข้อมูลรับรอง WebAuthn/FIDO2 เพื่อเข้าสู่ระบบโดยไม่ต้องใช้รหัสผ่าน",
-  "namePlaceholder": "ชื่อรหัสผ่าน",
-  "defaultName": "กุญแจผี",
-  "uv": {
-    "preferred": "ที่ต้องการ",
-    "required": "ที่จำเป็น",
-    "discouraged": "ท้อใจ"
-  },
-  "add": "เพิ่มรหัสผ่าน",
-  "none": "ไม่มีการลงทะเบียนรหัสผ่านใดๆ",
-  "added": "เพิ่มรหัสผ่านแล้ว",
-  "addFailed": "ไม่สามารถเพิ่มรหัสผ่านได้",
-  "delete": "ลบรหัสผ่าน",
-  "deleted": "รหัสผ่านถูกลบแล้ว",
-  "deleteFailed": "ไม่สามารถลบรหัสผ่านได้",
-  "unknownDevice": "ไม่ทราบ",
-  "synced": "ซิงค์แล้ว"
-}
diff --git a/plugins/webauthn/locales/translated/tr_TR.json b/plugins/webauthn/locales/translated/tr_TR.json
deleted file mode 100644
index 754ad2be2..000000000
--- a/plugins/webauthn/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Geçiş Anahtarları",
-  "signIn": "passkey ile oturum aç",
-  "loginFailed": "Passkey girişi başarısız oldu",
-  "description": "Parola olmadan oturum açmak için WebAuthn/FIDO2 kimlik bilgilerini kullanın",
-  "namePlaceholder": "Geçiş anahtarı adı",
-  "defaultName": "Parola",
-  "uv": {
-    "preferred": "Tercih edilen",
-    "required": "Gerekli",
-    "discouraged": "Önerilmeyen"
-  },
-  "add": "Geçiş Anahtarı Ekle",
-  "none": "Kayıtlı geçiş anahtarı yok.",
-  "added": "Geçiş anahtarı eklendi",
-  "addFailed": "Geçiş anahtarı eklenemedi",
-  "delete": "Parolayı sil",
-  "deleted": "Geçiş anahtarı silindi",
-  "deleteFailed": "Geçiş anahtarı silinemedi",
-  "unknownDevice": "bilinmiyor",
-  "synced": "senkronize edildi"
-}
diff --git a/plugins/webauthn/locales/translated/uk_UA.json b/plugins/webauthn/locales/translated/uk_UA.json
deleted file mode 100644
index f08def24f..000000000
--- a/plugins/webauthn/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Ключі доступу",
-  "signIn": "Увійти за допомогою ключа доступу",
-  "loginFailed": "Не вдалося ввійти з ключем доступу",
-  "description": "Використовуйте облікові дані WebAuthn/FIDO2 для входу без пароля",
-  "namePlaceholder": "Ім'я ключа доступу",
-  "defaultName": "Ключ доступу",
-  "uv": {
-    "preferred": "Бажаний",
-    "required": "Обов'язково",
-    "discouraged": "Знеохочений"
-  },
-  "add": "Додати пароль",
-  "none": "Не зареєстровано ключів доступу.",
-  "added": "Ключ доступу додано",
-  "addFailed": "Не вдалося додати ключ доступу",
-  "delete": "Видалити ключ доступу",
-  "deleted": "Ключ доступу видалено",
-  "deleteFailed": "Не вдалося видалити ключ доступу",
-  "unknownDevice": "невідомий",
-  "synced": "синхронізовано"
-}
diff --git a/plugins/webauthn/locales/translated/vi_VN.json b/plugins/webauthn/locales/translated/vi_VN.json
deleted file mode 100644
index 1f570f661..000000000
--- a/plugins/webauthn/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "Passkeys",
-  "signIn": "Đăng nhập bằng khóa truy cập",
-  "loginFailed": "Đăng nhập bằng passkey thất bại",
-  "description": "Sử dụng thông tin đăng nhập WebAuthn/FIDO2 để đăng nhập không cần mật khẩu",
-  "namePlaceholder": "Tên passkey",
-  "defaultName": "Mật khẩu",
-  "uv": {
-    "preferred": "Ưu tiên",
-    "required": "Bắt buộc",
-    "discouraged": "Không khuyến khích"
-  },
-  "add": "Thêm Passkey",
-  "none": "Chưa đăng ký passkey nào.",
-  "added": "Đã thêm Passkey",
-  "addFailed": "Không thêm được Passkey",
-  "delete": "Xóa mật khẩu",
-  "deleted": "Đã xóa Passkey",
-  "deleteFailed": "Xóa passkey thất bại",
-  "unknownDevice": "không xác định",
-  "synced": "đã đồng bộ"
-}
diff --git a/plugins/webauthn/locales/translated/zh_CN.json b/plugins/webauthn/locales/translated/zh_CN.json
deleted file mode 100644
index 526636c25..000000000
--- a/plugins/webauthn/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "通行密钥",
-  "signIn": "使用通行密钥登录",
-  "loginFailed": "通行密钥登录失败",
-  "description": "使用 WebAuthn/FIDO2 凭据进行无密码登录",
-  "namePlaceholder": "通行密钥名称",
-  "defaultName": "通行密钥",
-  "uv": {
-    "preferred": "首选",
-    "required": "必需",
-    "discouraged": "不鼓励"
-  },
-  "add": "添加通行密钥",
-  "none": "未注册通行密钥。",
-  "added": "通行密钥已添加",
-  "addFailed": "添加通行密钥失败",
-  "delete": "删除密码",
-  "deleted": "通行密钥已删除",
-  "deleteFailed": "删除通行密钥失败",
-  "unknownDevice": "未知",
-  "synced": "同步"
-}
diff --git a/plugins/webauthn/locales/translated/zh_TW.json b/plugins/webauthn/locales/translated/zh_TW.json
deleted file mode 100644
index eebd0fcfa..000000000
--- a/plugins/webauthn/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-  "title": "通行金鑰",
-  "signIn": "使用通行密鑰登入",
-  "loginFailed": "Passkey 登入失敗",
-  "description": "使用 WebAuthn/FIDO2 憑證無需密碼即可登入",
-  "namePlaceholder": "通行金鑰名稱",
-  "defaultName": "通行金鑰",
-  "uv": {
-    "preferred": "偏好",
-    "required": "需要",
-    "discouraged": "不鼓勵"
-  },
-  "add": "新增通行金鑰",
-  "none": "尚未註冊通行金鑰。",
-  "added": "通行金鑰已新增",
-  "addFailed": "無法新增通行金鑰",
-  "delete": "刪除密碼",
-  "deleted": "通行金鑰已刪除",
-  "deleteFailed": "刪除通行密鑰失敗",
-  "unknownDevice": "未知",
-  "synced": "同步"
-}
diff --git a/plugins/webauthn/manifest.json b/plugins/webauthn/manifest.json
deleted file mode 100644
index 50c8ce46e..000000000
--- a/plugins/webauthn/manifest.json
+++ /dev/null
@@ -1,33 +0,0 @@
-{
-  "id": "webauthn",
-  "name": "Passkeys",
-  "version": "1.0.0",
-  "description": "Sign in with a passkey or security key instead of a password. A passkey that checks your PIN or fingerprint also counts as a second factor.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Access & Security",
-  "icon": "Fingerprint",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": [
-    "db:own",
-    "network:serve",
-    "auth:provide",
-    "settings:read-core",
-    "ui:surface",
-    "db:core-refs"
-  ],
-  "contributes": {
-    "auth": {
-      "loginMethods": ["passkey"]
-    }
-  },
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"],
-  "desktop": "server"
-}
diff --git a/plugins/webauthn/migrations/mysql/0001_adopt_webauthn_credentials.sql b/plugins/webauthn/migrations/mysql/0001_adopt_webauthn_credentials.sql
deleted file mode 100644
index 640b38281..000000000
--- a/plugins/webauthn/migrations/mysql/0001_adopt_webauthn_credentials.sql
+++ /dev/null
@@ -1,19 +0,0 @@
--- webauthn 0001: adopt_webauthn_credentials
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `webauthn_credentials` (
-  `id` varchar(255) PRIMARY KEY NOT NULL,
-  `user_id` varchar(255) NOT NULL,
-  `name` text NOT NULL,
-  `credential_id` varchar(255) NOT NULL UNIQUE,
-  `public_key` text NOT NULL,
-  `counter` int NOT NULL DEFAULT 0,
-  `device_type` text,
-  `backed_up` boolean NOT NULL DEFAULT false,
-  `transports` text,
-  `user_verification` text NOT NULL DEFAULT ('preferred'),
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `last_used_at` text,
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `webauthn_credentials` TO `p_webauthn_credentials`;
diff --git a/plugins/webauthn/migrations/postgres/0001_adopt_webauthn_credentials.sql b/plugins/webauthn/migrations/postgres/0001_adopt_webauthn_credentials.sql
deleted file mode 100644
index 6f31bea42..000000000
--- a/plugins/webauthn/migrations/postgres/0001_adopt_webauthn_credentials.sql
+++ /dev/null
@@ -1,19 +0,0 @@
--- webauthn 0001: adopt_webauthn_credentials
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "webauthn_credentials" (
-  "id" varchar(255) PRIMARY KEY NOT NULL,
-  "user_id" varchar(255) NOT NULL,
-  "name" text NOT NULL,
-  "credential_id" varchar(255) NOT NULL UNIQUE,
-  "public_key" text NOT NULL,
-  "counter" integer NOT NULL DEFAULT 0,
-  "device_type" text,
-  "backed_up" boolean NOT NULL DEFAULT false,
-  "transports" text,
-  "user_verification" text NOT NULL DEFAULT 'preferred',
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "last_used_at" text,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "webauthn_credentials" RENAME TO "p_webauthn_credentials";
diff --git a/plugins/webauthn/migrations/snapshot.json b/plugins/webauthn/migrations/snapshot.json
deleted file mode 100644
index d3dda8fa4..000000000
--- a/plugins/webauthn/migrations/snapshot.json
+++ /dev/null
@@ -1,65 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "credentials": {
-      "columns": {
-        "id": {
-          "type": "varchar",
-          "length": 255,
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "name": {
-          "type": "text",
-          "notNull": true
-        },
-        "credentialId": {
-          "type": "varchar",
-          "length": 255,
-          "notNull": true,
-          "unique": true
-        },
-        "publicKey": {
-          "type": "text",
-          "notNull": true
-        },
-        "counter": {
-          "type": "integer",
-          "notNull": true,
-          "defaultValue": 0
-        },
-        "deviceType": {
-          "type": "text"
-        },
-        "backedUp": {
-          "type": "boolean",
-          "notNull": true,
-          "defaultValue": false
-        },
-        "transports": {
-          "type": "text"
-        },
-        "userVerification": {
-          "type": "text",
-          "notNull": true,
-          "defaultValue": "preferred"
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "lastUsedAt": {
-          "type": "timestamp"
-        }
-      },
-      "indexes": [],
-      "adopts": "webauthn_credentials"
-    }
-  }
-}
diff --git a/plugins/webauthn/migrations/sqlite/0001_adopt_webauthn_credentials.sql b/plugins/webauthn/migrations/sqlite/0001_adopt_webauthn_credentials.sql
deleted file mode 100644
index 4440c8794..000000000
--- a/plugins/webauthn/migrations/sqlite/0001_adopt_webauthn_credentials.sql
+++ /dev/null
@@ -1,19 +0,0 @@
--- webauthn 0001: adopt_webauthn_credentials
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "webauthn_credentials" (
-  "id" text PRIMARY KEY NOT NULL,
-  "user_id" text NOT NULL,
-  "name" text NOT NULL,
-  "credential_id" text NOT NULL UNIQUE,
-  "public_key" text NOT NULL,
-  "counter" integer NOT NULL DEFAULT 0,
-  "device_type" text,
-  "backed_up" integer NOT NULL DEFAULT 0,
-  "transports" text,
-  "user_verification" text NOT NULL DEFAULT 'preferred',
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "last_used_at" text,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "webauthn_credentials" RENAME TO "p_webauthn_credentials";
diff --git a/plugins/webauthn/package.json b/plugins/webauthn/package.json
deleted file mode 100644
index b00f937d0..000000000
--- a/plugins/webauthn/package.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "name": "@termix-plugin/webauthn",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "@simplewebauthn/browser": "^13.3.0",
-    "@simplewebauthn/server": "^13.3.2",
-    "lucide-react": "^1.33.0"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "react": "^19.2.8",
-    "sonner": "^2.0.8"
-  }
-}
diff --git a/plugins/webauthn/src/backend/index.ts b/plugins/webauthn/src/backend/index.ts
deleted file mode 100644
index 7d9225f58..000000000
--- a/plugins/webauthn/src/backend/index.ts
+++ /dev/null
@@ -1,33 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { credentials } from "./tables.js";
-import { createCredentialRepository } from "./repository.js";
-import { createPasskeyService } from "./passkeys.js";
-import { PUBLIC_PATHS, registerPasskeyRoutes } from "./routes.js";
-
-export async function activate(ctx: PluginContext) {
-  const table = await ctx.db.define(credentials);
-  const repository = createCredentialRepository(ctx.db, table);
-  const passkeys = createPasskeyService(ctx, repository);
-
-  // No describe: a passkey only helps a user who already registered one, so
-  // it never counts for the password lockout guard.
-  ctx.auth.registerLoginMethod({
-    id: "passkey",
-    labelKey: "signIn",
-    icon: "fingerprint",
-    kind: "form",
-    verify: (request) => passkeys.verifyLogin(request.body ?? {}),
-  });
-
-  registerPasskeyRoutes(
-    ctx.http.router<Router>({ public: PUBLIC_PATHS }),
-    ctx,
-    repository,
-    passkeys,
-  );
-}
-
-export async function deactivate() {
-  // Everything above was registered through ctx and is disposed by core.
-}
diff --git a/plugins/webauthn/src/backend/passkeys.ts b/plugins/webauthn/src/backend/passkeys.ts
deleted file mode 100644
index 6970a3dcf..000000000
--- a/plugins/webauthn/src/backend/passkeys.ts
+++ /dev/null
@@ -1,298 +0,0 @@
-import { randomUUID } from "node:crypto";
-import type {
-  AuthenticationResponseJSON,
-  AuthenticatorTransportFuture,
-  Base64URLString,
-  RegistrationResponseJSON,
-  WebAuthnCredential,
-} from "@simplewebauthn/server";
-import {
-  generateAuthenticationOptions,
-  generateRegistrationOptions,
-  verifyAuthenticationResponse,
-  verifyRegistrationResponse,
-} from "@simplewebauthn/server";
-import {
-  LoginMethodError,
-  type PluginContext,
-  type PluginVerifiedIdentity,
-} from "@termix/plugin-sdk/backend";
-import type { CredentialRecord, CredentialRepository } from "./repository.js";
-
-export type UserVerification = "discouraged" | "preferred" | "required";
-
-interface ChallengeRecord {
-  challenge: string;
-  userId?: string;
-  rpID: string;
-  origin: string;
-  userVerification: UserVerification;
-  createdAt: number;
-}
-
-const CHALLENGE_TTL_MS = 5 * 60 * 1000;
-
-export function normalizeUserVerification(value: unknown): UserVerification {
-  return value === "discouraged" || value === "required" ? value : "preferred";
-}
-
-function header(
-  headers: Record<string, unknown>,
-  name: string,
-): string | undefined {
-  const value = headers[name];
-  if (Array.isArray(value)) return value[0];
-  return typeof value === "string" ? value : undefined;
-}
-
-/** The browser's origin, or the one a proxy reports. */
-export function requestOrigin(headers: Record<string, unknown>): string {
-  const origin = header(headers, "origin");
-  if (origin) return origin;
-  const proto = header(headers, "x-forwarded-proto") || "http";
-  const host =
-    header(headers, "x-forwarded-host") ||
-    header(headers, "host") ||
-    "localhost";
-  return `${proto.split(",")[0]}://${host.split(",")[0]}`;
-}
-
-export function parseTransports(
-  value: string | null,
-): AuthenticatorTransportFuture[] {
-  if (!value) return [];
-  try {
-    const parsed = JSON.parse(value);
-    return Array.isArray(parsed) ? parsed : [];
-  } catch {
-    return [];
-  }
-}
-
-function toCredential(record: CredentialRecord): WebAuthnCredential {
-  return {
-    id: record.credentialId as Base64URLString,
-    publicKey: Uint8Array.from(
-      Buffer.from(record.publicKey, "base64url"),
-    ) as WebAuthnCredential["publicKey"],
-    counter: record.counter,
-    transports: parseTransports(record.transports),
-  };
-}
-
-export type PasskeyService = ReturnType<typeof createPasskeyService>;
-
-/**
- * Registration and sign-in ceremonies. Challenges live in memory for five
- * minutes and are made in activate, so a disabled plugin forgets them.
- */
-export function createPasskeyService(
-  ctx: PluginContext,
-  repository: CredentialRepository,
-) {
-  const registrations = new Map<string, ChallengeRecord>();
-  const authentications = new Map<string, ChallengeRecord>();
-
-  const prune = (map: Map<string, ChallengeRecord>) => {
-    const now = Date.now();
-    for (const [id, record] of map) {
-      if (now - record.createdAt > CHALLENGE_TTL_MS) map.delete(id);
-    }
-  };
-  const put = (
-    map: Map<string, ChallengeRecord>,
-    record: Omit<ChallengeRecord, "createdAt">,
-  ) => {
-    prune(map);
-    const id = randomUUID();
-    map.set(id, { ...record, createdAt: Date.now() });
-    return id;
-  };
-  const take = (map: Map<string, ChallengeRecord>, id: unknown) => {
-    if (typeof id !== "string") return null;
-    prune(map);
-    const record = map.get(id) ?? null;
-    map.delete(id);
-    return record;
-  };
-
-  async function rpName(): Promise<string> {
-    try {
-      return (await ctx.settings.readCore("app_name")) || "Termix";
-    } catch {
-      return "Termix";
-    }
-  }
-
-  return {
-    async registrationOptions(input: {
-      userId: string;
-      username: string;
-      origin: string;
-      userVerification: UserVerification;
-    }) {
-      const rpID = new URL(input.origin).hostname;
-      const existing = await repository.listByUserId(input.userId);
-      const options = await generateRegistrationOptions({
-        rpName: await rpName(),
-        rpID,
-        userID: Buffer.from(input.userId, "utf8"),
-        userName: input.username,
-        userDisplayName: input.username,
-        attestationType: "none",
-        excludeCredentials: existing.map((credential) => ({
-          id: credential.credentialId as Base64URLString,
-          transports: parseTransports(credential.transports),
-        })),
-        authenticatorSelection: {
-          residentKey: "required",
-          userVerification: input.userVerification,
-        },
-      });
-      const challengeId = put(registrations, {
-        challenge: options.challenge,
-        userId: input.userId,
-        rpID,
-        origin: input.origin,
-        userVerification: input.userVerification,
-      });
-      return { options, challengeId };
-    },
-
-    /** Stores the passkey. False when the challenge or response is bad. */
-    async register(input: {
-      userId: string;
-      challengeId: unknown;
-      response: RegistrationResponseJSON | undefined;
-      name: unknown;
-    }): Promise<boolean | "expired"> {
-      const challenge = take(registrations, input.challengeId);
-      if (!challenge || challenge.userId !== input.userId) return "expired";
-      if (!input.response) return false;
-
-      const verification = await verifyRegistrationResponse({
-        response: input.response,
-        expectedChallenge: challenge.challenge,
-        expectedOrigin: challenge.origin,
-        expectedRPID: challenge.rpID,
-        requireUserVerification: challenge.userVerification === "required",
-      });
-      if (!verification.verified) return false;
-
-      const { credential, credentialDeviceType, credentialBackedUp } =
-        verification.registrationInfo;
-      const name =
-        typeof input.name === "string" && input.name.trim()
-          ? input.name.trim().slice(0, 80)
-          : "Passkey";
-      await repository.create({
-        id: randomUUID(),
-        userId: input.userId,
-        name,
-        credentialId: credential.id,
-        publicKey: Buffer.from(credential.publicKey).toString("base64url"),
-        counter: credential.counter,
-        deviceType: credentialDeviceType,
-        backedUp: credentialBackedUp,
-        transports: JSON.stringify(input.response.response?.transports ?? []),
-        userVerification: challenge.userVerification,
-      });
-      return true;
-    },
-
-    async authenticationOptions(input: {
-      userId?: string;
-      origin: string;
-      userVerification: UserVerification;
-    }) {
-      const rpID = new URL(input.origin).hostname;
-      let allowCredentials:
-        | { id: Base64URLString; transports?: AuthenticatorTransportFuture[] }[]
-        | undefined;
-      if (input.userId) {
-        const credentials = await repository.listByUserId(input.userId);
-        if (credentials.length === 0) return null;
-        allowCredentials = credentials.map((credential) => ({
-          id: credential.credentialId as Base64URLString,
-          transports: parseTransports(credential.transports),
-        }));
-      }
-      const options = await generateAuthenticationOptions({
-        rpID,
-        allowCredentials,
-        userVerification: input.userVerification,
-      });
-      const challengeId = put(authentications, {
-        challenge: options.challenge,
-        userId: input.userId,
-        rpID,
-        origin: input.origin,
-        userVerification: input.userVerification,
-      });
-      return { options, challengeId };
-    },
-
-    /**
-     * Checks an assertion and says who signed in. A passkey that verified
-     * the user (PIN or biometric) counts as the second factor too.
-     */
-    async verifyLogin(
-      body: Record<string, unknown>,
-    ): Promise<PluginVerifiedIdentity> {
-      const challenge = take(authentications, body.challengeId);
-      if (!challenge) {
-        throw new LoginMethodError("Authentication challenge expired", 400);
-      }
-      const response = body.response as AuthenticationResponseJSON | undefined;
-      if (!response?.id) {
-        throw new LoginMethodError("Invalid passkey response", 400);
-      }
-      const credential = await repository.findByCredentialId(response.id);
-      if (
-        !credential ||
-        (challenge.userId && challenge.userId !== credential.userId)
-      ) {
-        throw new LoginMethodError("Passkey not recognized", 401);
-      }
-
-      let verification: Awaited<
-        ReturnType<typeof verifyAuthenticationResponse>
-      >;
-      try {
-        verification = await verifyAuthenticationResponse({
-          response,
-          expectedChallenge: challenge.challenge,
-          expectedOrigin: challenge.origin,
-          expectedRPID: challenge.rpID,
-          credential: toCredential(credential),
-          requireUserVerification: challenge.userVerification === "required",
-          advancedFIDOConfig: { userVerification: challenge.userVerification },
-        });
-      } catch (error) {
-        ctx.log.warn(
-          `Passkey authentication failed for ${credential.userId}: ${
-            error instanceof Error ? error.message : String(error)
-          }`,
-        );
-        throw new LoginMethodError("Passkey authentication failed", 401);
-      }
-      if (!verification.verified) {
-        throw new LoginMethodError("Passkey authentication failed", 401);
-      }
-
-      await repository.updateAuthState(credential.id, {
-        counter: verification.authenticationInfo.newCounter,
-        backedUp: verification.authenticationInfo.credentialBackedUp,
-        deviceType: verification.authenticationInfo.credentialDeviceType,
-        lastUsedAt: new Date().toISOString(),
-      });
-
-      return {
-        kind: "user",
-        userId: credential.userId,
-        mfaSatisfied: verification.authenticationInfo.userVerified === true,
-        rememberMe: !!body.rememberMe,
-      };
-    },
-  };
-}
diff --git a/plugins/webauthn/src/backend/repository.ts b/plugins/webauthn/src/backend/repository.ts
deleted file mode 100644
index a00e6f20d..000000000
--- a/plugins/webauthn/src/backend/repository.ts
+++ /dev/null
@@ -1,83 +0,0 @@
-import { and, eq } from "drizzle-orm";
-import type { PluginDatabase } from "@termix/plugin-sdk/backend";
-
-export interface CredentialRecord {
-  id: string;
-  userId: string;
-  name: string;
-  credentialId: string;
-  publicKey: string;
-  counter: number;
-  deviceType: string | null;
-  backedUp: boolean;
-  transports: string | null;
-  userVerification: string;
-  createdAt: string;
-  lastUsedAt: string | null;
-}
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// ctx.db.define hands the table back untyped and the drizzle handle is the
-// server's own, so both are typed at this module's edge.
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export type CredentialRepository = ReturnType<
-  typeof createCredentialRepository
->;
-
-export function createCredentialRepository(db: PluginDatabase, table: Table) {
-  const client = () => db.client<Drizzle>();
-
-  return {
-    async listByUserId(userId: string): Promise<CredentialRecord[]> {
-      const drizzle = await client();
-      return drizzle.select().from(table).where(eq(table.userId, userId));
-    },
-
-    async findByCredentialId(
-      credentialId: string,
-    ): Promise<CredentialRecord | null> {
-      const drizzle = await client();
-      const rows = await drizzle
-        .select()
-        .from(table)
-        .where(eq(table.credentialId, credentialId))
-        .limit(1);
-      return (rows[0] as CredentialRecord) ?? null;
-    },
-
-    async create(
-      input: Omit<CredentialRecord, "lastUsedAt" | "createdAt">,
-    ): Promise<void> {
-      const drizzle = await client();
-      await drizzle
-        .insert(table)
-        .values({ ...input, createdAt: new Date().toISOString() });
-      await db.persist();
-    },
-
-    async updateAuthState(
-      id: string,
-      state: {
-        counter: number;
-        backedUp: boolean;
-        deviceType: string;
-        lastUsedAt: string;
-      },
-    ): Promise<void> {
-      const drizzle = await client();
-      await drizzle.update(table).set(state).where(eq(table.id, id));
-      await db.persist();
-    },
-
-    async deleteForUser(userId: string, id: string): Promise<void> {
-      const drizzle = await client();
-      await drizzle
-        .delete(table)
-        .where(and(eq(table.id, id), eq(table.userId, userId)));
-      await db.persist();
-    },
-  };
-}
diff --git a/plugins/webauthn/src/backend/routes.ts b/plugins/webauthn/src/backend/routes.ts
deleted file mode 100644
index 278f3caa1..000000000
--- a/plugins/webauthn/src/backend/routes.ts
+++ /dev/null
@@ -1,193 +0,0 @@
-import type { Request, Response, Router } from "express";
-import { eq } from "drizzle-orm";
-import type { RegistrationResponseJSON } from "@simplewebauthn/server";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import {
-  normalizeUserVerification,
-  parseTransports,
-  requestOrigin,
-  type PasskeyService,
-} from "./passkeys.js";
-import type { CredentialRepository } from "./repository.js";
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export const PUBLIC_PATHS = ["/authenticate/options"];
-
-export function registerPasskeyRoutes(
-  router: Router,
-  ctx: PluginContext,
-  repository: CredentialRepository,
-  passkeys: PasskeyService,
-): void {
-  async function findUser(
-    column: "id" | "username",
-    value: string,
-  ): Promise<{ id: string; username: string } | null> {
-    const { users } = await ctx.db.refs<{ users: Table }>();
-    const drizzle = await ctx.db.client<Drizzle>();
-    const rows = await drizzle
-      .select({ id: users.id, username: users.username })
-      .from(users)
-      .where(eq(users[column], value))
-      .limit(1);
-    return rows[0] ?? null;
-  }
-
-  /**
-   * @openapi
-   * /plugin-api/webauthn/credentials:
-   *   get:
-   *     summary: List passkeys
-   *     description: Lists the caller's registered passkeys.
-   *     tags:
-   *       - Passkeys
-   *     responses:
-   *       200:
-   *         description: List of passkeys.
-   */
-  router.get("/credentials", async (_req: Request, res: Response) => {
-    const credentials = await repository.listByUserId(ctx.currentActor()!);
-    res.json({
-      credentials: credentials.map((credential) => ({
-        id: credential.id,
-        name: credential.name,
-        deviceType: credential.deviceType,
-        backedUp: !!credential.backedUp,
-        transports: parseTransports(credential.transports),
-        userVerification: credential.userVerification,
-        createdAt: credential.createdAt,
-        lastUsedAt: credential.lastUsedAt,
-      })),
-    });
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/webauthn/register/options:
-   *   post:
-   *     summary: Start passkey registration
-   *     tags:
-   *       - Passkeys
-   *     responses:
-   *       200:
-   *         description: Registration options and challenge id.
-   *       404:
-   *         description: User not found.
-   */
-  router.post("/register/options", async (req: Request, res: Response) => {
-    const user = await findUser("id", ctx.currentActor()!);
-    if (!user) return res.status(404).json({ error: "User not found" });
-    res.json(
-      await passkeys.registrationOptions({
-        userId: user.id,
-        username: user.username,
-        origin: requestOrigin(req.headers),
-        userVerification: normalizeUserVerification(req.body?.userVerification),
-      }),
-    );
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/webauthn/register/verify:
-   *   post:
-   *     summary: Finish passkey registration
-   *     tags:
-   *       - Passkeys
-   *     responses:
-   *       200:
-   *         description: Passkey registered.
-   *       400:
-   *         description: Registration failed or challenge expired.
-   */
-  router.post("/register/verify", async (req: Request, res: Response) => {
-    const userId = ctx.currentActor()!;
-    try {
-      const result = await passkeys.register({
-        userId,
-        challengeId: req.body?.challengeId,
-        response: req.body?.response as RegistrationResponseJSON | undefined,
-        name: req.body?.name,
-      });
-      if (result === "expired") {
-        return res
-          .status(400)
-          .json({ error: "Registration challenge expired" });
-      }
-      if (!result) {
-        return res.status(400).json({ error: "Passkey registration failed" });
-      }
-      res.json({ success: true });
-    } catch (error) {
-      ctx.log.warn(
-        `Passkey registration failed for ${userId}: ${
-          error instanceof Error ? error.message : String(error)
-        }`,
-      );
-      res.status(400).json({ error: "Passkey registration failed" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/webauthn/authenticate/options:
-   *   post:
-   *     summary: Start passkey login
-   *     description: Public. Authentication options, optionally scoped to a username. The assertion is then sent to /users/auth/passkey/verify.
-   *     tags:
-   *       - Passkeys
-   *     responses:
-   *       200:
-   *         description: Authentication options and challenge id.
-   *       404:
-   *         description: No passkeys found for the user.
-   */
-  router.post("/authenticate/options", async (req: Request, res: Response) => {
-    const username =
-      typeof req.body?.username === "string" ? req.body.username.trim() : "";
-    let userId: string | undefined;
-    if (username) {
-      const user = await findUser("username", username);
-      if (!user) return res.status(404).json({ error: "No passkeys found" });
-      userId = user.id;
-    }
-    const result = await passkeys.authenticationOptions({
-      userId,
-      origin: requestOrigin(req.headers),
-      userVerification: normalizeUserVerification(req.body?.userVerification),
-    });
-    if (!result) return res.status(404).json({ error: "No passkeys found" });
-    res.json(result);
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/webauthn/credentials/{credentialId}:
-   *   delete:
-   *     summary: Delete a passkey
-   *     tags:
-   *       - Passkeys
-   *     parameters:
-   *       - in: path
-   *         name: credentialId
-   *         required: true
-   *         schema: { type: string }
-   *     responses:
-   *       200:
-   *         description: Passkey deleted.
-   */
-  router.delete(
-    "/credentials/:credentialId",
-    async (req: Request, res: Response) => {
-      await repository.deleteForUser(
-        ctx.currentActor()!,
-        String(req.params.credentialId),
-      );
-      res.json({ success: true });
-    },
-  );
-}
diff --git a/plugins/webauthn/src/backend/tables.ts b/plugins/webauthn/src/backend/tables.ts
deleted file mode 100644
index b05242c88..000000000
--- a/plugins/webauthn/src/backend/tables.ts
+++ /dev/null
@@ -1,34 +0,0 @@
-import {
-  adoptLegacyTable,
-  boolean,
-  defineTable,
-  integer,
-  refUser,
-  text,
-  timestamp,
-  varchar,
-} from "@termix/plugin-sdk/db";
-
-/**
- * Adopted from core's webauthn_credentials, so the column names are the
- * legacy ones and the rename carries every passkey across.
- */
-export const credentials = adoptLegacyTable(
-  "webauthn_credentials",
-  defineTable("credentials", {
-    id: varchar().primaryKey(),
-    userId: refUser(),
-    name: text().notNull(),
-    credentialId: varchar().notNull().unique(),
-    publicKey: text().notNull(),
-    counter: integer().notNull().default(0),
-    deviceType: text(),
-    backedUp: boolean().notNull().default(false),
-    transports: text(),
-    userVerification: text().notNull().default("preferred"),
-    createdAt: timestamp().notNull().defaultNow(),
-    lastUsedAt: timestamp(),
-  }),
-);
-
-export const tables = [credentials];
diff --git a/plugins/webauthn/src/frontend/PasskeyEnrollment.tsx b/plugins/webauthn/src/frontend/PasskeyEnrollment.tsx
deleted file mode 100644
index e9ad8aa33..000000000
--- a/plugins/webauthn/src/frontend/PasskeyEnrollment.tsx
+++ /dev/null
@@ -1,137 +0,0 @@
-import { useEffect, useMemo, useState } from "react";
-import { KeyRound, Trash2 } from "lucide-react";
-import { toast } from "sonner";
-import { Button, Input, Select2 } from "@termix/plugin-sdk/ui";
-import { usePluginApi, useTranslation } from "@termix/plugin-sdk/frontend";
-import {
-  createWebAuthnApi,
-  type WebAuthnCredentialSummary,
-  type WebAuthnUserVerification,
-} from "./webauthn-api";
-
-function apiErrorMessage(error: unknown, fallback: string): string {
-  const data = (error as { response?: { data?: { error?: unknown } } })
-    ?.response?.data;
-  return typeof data?.error === "string" && data.error ? data.error : fallback;
-}
-
-/** Settings > Security: register and remove passkeys. */
-export function PasskeyEnrollment() {
-  const { t } = useTranslation();
-  const pluginApi = usePluginApi();
-  const api = useMemo(() => createWebAuthnApi(pluginApi), [pluginApi]);
-  const [passkeys, setPasskeys] = useState<WebAuthnCredentialSummary[]>([]);
-  const [loading, setLoading] = useState(false);
-  const [name, setName] = useState("");
-  const [userVerification, setUserVerification] =
-    useState<WebAuthnUserVerification>("preferred");
-
-  useEffect(() => {
-    api
-      .list()
-      .then(setPasskeys)
-      .catch(() => {});
-  }, [api]);
-
-  async function add() {
-    setLoading(true);
-    try {
-      await api.register(name || t("defaultName"), userVerification);
-      setPasskeys(await api.list());
-      setName("");
-      toast.success(t("added"));
-    } catch (e) {
-      toast.error(apiErrorMessage(e, t("addFailed")));
-    } finally {
-      setLoading(false);
-    }
-  }
-
-  async function remove(id: string) {
-    setLoading(true);
-    try {
-      await api.remove(id);
-      setPasskeys((prev) => prev.filter((item) => item.id !== id));
-      toast.success(t("deleted"));
-    } catch (e) {
-      toast.error(apiErrorMessage(e, t("deleteFailed")));
-    } finally {
-      setLoading(false);
-    }
-  }
-
-  return (
-    <div className="flex flex-col gap-3">
-      <span className="text-[10px] text-muted-foreground">
-        {t("description")}
-      </span>
-
-      <div className="grid grid-cols-[1fr_auto] gap-2">
-        <Input
-          placeholder={t("namePlaceholder")}
-          value={name}
-          onChange={(e) => setName(e.target.value)}
-          className="h-8 text-xs"
-          disabled={loading}
-        />
-        <Select2
-          value={userVerification}
-          onChange={(e) =>
-            setUserVerification(e.target.value as WebAuthnUserVerification)
-          }
-          className="h-8 w-28 text-xs border border-border bg-background px-2 outline-none focus:ring-1 focus:ring-ring"
-          disabled={loading}
-        >
-          <option value="preferred">{t("uv.preferred")}</option>
-          <option value="required">{t("uv.required")}</option>
-          <option value="discouraged">{t("uv.discouraged")}</option>
-        </Select2>
-      </div>
-      <Button
-        variant="outline"
-        size="sm"
-        className="h-7 text-[10px] border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-        onClick={add}
-        disabled={loading}
-      >
-        <KeyRound className="size-3" />
-        {t("add")}
-      </Button>
-
-      <div className="flex flex-col divide-y divide-border border border-border">
-        {passkeys.length === 0 ? (
-          <div className="py-4 text-center text-[10px] text-muted-foreground">
-            {t("none")}
-          </div>
-        ) : (
-          passkeys.map((passkey) => (
-            <div
-              key={passkey.id}
-              className="flex items-center justify-between gap-2 px-2 py-2"
-            >
-              <div className="min-w-0 flex flex-col">
-                <span className="text-xs font-medium truncate">
-                  {passkey.name}
-                </span>
-                <span className="text-[10px] text-muted-foreground truncate">
-                  {passkey.deviceType || t("unknownDevice")}
-                  {passkey.backedUp ? ` / ${t("synced")}` : ""}
-                </span>
-              </div>
-              <Button
-                variant="ghost"
-                size="icon"
-                className="size-6 text-muted-foreground hover:text-destructive"
-                onClick={() => remove(passkey.id)}
-                disabled={loading}
-                aria-label={t("delete")}
-              >
-                <Trash2 className="size-3" />
-              </Button>
-            </div>
-          ))
-        )}
-      </div>
-    </div>
-  );
-}
diff --git a/plugins/webauthn/src/frontend/PasskeyLoginButton.tsx b/plugins/webauthn/src/frontend/PasskeyLoginButton.tsx
deleted file mode 100644
index 599502148..000000000
--- a/plugins/webauthn/src/frontend/PasskeyLoginButton.tsx
+++ /dev/null
@@ -1,59 +0,0 @@
-import { useMemo, useState } from "react";
-import { Fingerprint } from "lucide-react";
-import { toast } from "sonner";
-import { Button } from "@termix/plugin-sdk/ui";
-import {
-  usePluginApi,
-  useTranslation,
-  type LoginMethodUIProps,
-} from "@termix/plugin-sdk/frontend";
-import { createWebAuthnApi, isPasskeySupported } from "./webauthn-api";
-
-export function PasskeyLoginButton({
-  disabled,
-  submit,
-  username,
-}: LoginMethodUIProps) {
-  const { t } = useTranslation();
-  const pluginApi = usePluginApi();
-  const api = useMemo(() => createWebAuthnApi(pluginApi), [pluginApi]);
-  const [loading, setLoading] = useState(false);
-  const [supported] = useState(isPasskeySupported);
-  if (!supported) return null;
-
-  return (
-    <Button
-      type="button"
-      variant="outline"
-      onClick={async () => {
-        setLoading(true);
-        try {
-          await submit(
-            await api.passkeyAssertion(username?.trim() || undefined),
-          );
-        } catch (err: unknown) {
-          const error = err as {
-            name?: string;
-            message?: string;
-            response?: { data?: { error?: string } };
-          };
-          // Closing the browser prompt is not a failure worth a toast.
-          if (error?.name === "NotAllowedError" || error?.name === "AbortError")
-            return;
-          toast.error(
-            error?.response?.data?.error || error?.message || t("loginFailed"),
-          );
-        } finally {
-          setLoading(false);
-        }
-      }}
-      disabled={disabled || loading}
-      className="w-full h-10 font-bold"
-    >
-      <span className="flex items-center gap-2">
-        <Fingerprint className="size-4" />
-        {t("signIn")}
-      </span>
-    </Button>
-  );
-}
diff --git a/plugins/webauthn/src/frontend/index.tsx b/plugins/webauthn/src/frontend/index.tsx
deleted file mode 100644
index e71c24b4d..000000000
--- a/plugins/webauthn/src/frontend/index.tsx
+++ /dev/null
@@ -1,13 +0,0 @@
-import type { TermixApp } from "@termix/plugin-sdk/frontend";
-import { PasskeyLoginButton } from "./PasskeyLoginButton";
-import { PasskeyEnrollment } from "./PasskeyEnrollment";
-
-export function activate(app: TermixApp): void {
-  app.registerLoginMethod({
-    id: "passkey",
-    titleKey: "title",
-    placement: "inline",
-    component: PasskeyLoginButton,
-    enrollment: PasskeyEnrollment,
-  });
-}
diff --git a/plugins/webauthn/src/frontend/webauthn-api.ts b/plugins/webauthn/src/frontend/webauthn-api.ts
deleted file mode 100644
index 7837af4b5..000000000
--- a/plugins/webauthn/src/frontend/webauthn-api.ts
+++ /dev/null
@@ -1,82 +0,0 @@
-import type {
-  AuthenticationResponseJSON,
-  PublicKeyCredentialCreationOptionsJSON,
-  PublicKeyCredentialRequestOptionsJSON,
-  RegistrationResponseJSON,
-} from "@simplewebauthn/browser";
-import {
-  browserSupportsWebAuthn,
-  startAuthentication,
-  startRegistration,
-} from "@simplewebauthn/browser";
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-
-export type WebAuthnUserVerification = "discouraged" | "preferred" | "required";
-
-export type WebAuthnCredentialSummary = {
-  id: string;
-  name: string;
-  deviceType?: string | null;
-  backedUp: boolean;
-  transports: string[];
-  userVerification: WebAuthnUserVerification;
-  createdAt: string;
-  lastUsedAt?: string | null;
-};
-
-type OptionsResponse<T> = { options: T; challengeId: string };
-
-export function isPasskeySupported(): boolean {
-  try {
-    return browserSupportsWebAuthn();
-  } catch {
-    return false;
-  }
-}
-
-export function createWebAuthnApi(api: PluginApiClient) {
-  return {
-    /**
-     * Runs the browser ceremony and returns the body for the login method's
-     * verify step. Without a username, discoverable passkeys still work.
-     */
-    async passkeyAssertion(username?: string) {
-      const { data } = await api.post<
-        OptionsResponse<PublicKeyCredentialRequestOptionsJSON>
-      >("authenticate/options", username ? { username } : {});
-      const response = await startAuthentication({
-        optionsJSON: data.options,
-      });
-      return {
-        challengeId: data.challengeId,
-        response: response as AuthenticationResponseJSON,
-      };
-    },
-
-    async list(): Promise<WebAuthnCredentialSummary[]> {
-      const { data } = await api.get<{
-        credentials?: WebAuthnCredentialSummary[];
-      }>("credentials");
-      return data.credentials ?? [];
-    },
-
-    async register(
-      name: string,
-      userVerification: WebAuthnUserVerification,
-    ): Promise<void> {
-      const { data } = await api.post<
-        OptionsResponse<PublicKeyCredentialCreationOptionsJSON>
-      >("register/options", { userVerification });
-      const response = await startRegistration({ optionsJSON: data.options });
-      await api.post("register/verify", {
-        challengeId: data.challengeId,
-        name,
-        response: response as RegistrationResponseJSON,
-      });
-    },
-
-    async remove(id: string): Promise<void> {
-      await api.delete(`credentials/${encodeURIComponent(id)}`);
-    },
-  };
-}
diff --git a/plugins/webauthn/tests/backend/helpers.ts b/plugins/webauthn/tests/backend/helpers.ts
deleted file mode 100644
index a5d036ec1..000000000
--- a/plugins/webauthn/tests/backend/helpers.ts
+++ /dev/null
@@ -1,96 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-export const manifest = manifestJson as unknown as PluginManifest;
-
-export interface TestServer {
-  db: TestDb;
-  mock: MockPluginContext;
-  request: (
-    method: string,
-    path: string,
-    options?: { user?: string; body?: unknown },
-    // Route bodies vary per test; asserting on them is the point.
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any }>;
-  close: () => Promise<void>;
-}
-
-/**
- * The plugin activated against a real in-memory database, its router mounted
- * on an express app the way core mounts it: JSON parsed, the acting user set
- * from the request, everything else left to the plugin.
- */
-export async function startServer(
-  options: {
-    users?: string[];
-    capabilities?: string[];
-    before?: (sqlite: TestDb["sqlite"]) => void;
-  } = {},
-): Promise<TestServer> {
-  const db = await createTestDb(pluginDir, { before: options.before });
-  for (const user of options.users ?? ["user-1", "user-2"]) {
-    db.sqlite
-      .prepare("INSERT INTO users (id, username) VALUES (?, ?)")
-      .run(user, user);
-  }
-
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: options.capabilities ?? manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    coreSettings: { app_name: "Termix Test" },
-  });
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") || undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    db,
-    mock,
-    async request(method, path, { user = "user-1", body: given } = {}) {
-      const body = method === "GET" ? undefined : given;
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        headers: {
-          "x-test-user": user,
-          origin: "https://termix.test",
-          ...(body !== undefined ? { "content-type": "application/json" } : {}),
-        },
-        body: body !== undefined ? JSON.stringify(body) : undefined,
-      });
-      const text = await response.text();
-      return { status: response.status, body: text ? JSON.parse(text) : null };
-    },
-    async close() {
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-      db.close();
-    },
-  };
-}
diff --git a/plugins/webauthn/tests/backend/passkeys.test.ts b/plugins/webauthn/tests/backend/passkeys.test.ts
deleted file mode 100644
index e03d5f5e3..000000000
--- a/plugins/webauthn/tests/backend/passkeys.test.ts
+++ /dev/null
@@ -1,371 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-
-const webauthn = vi.hoisted(() => ({
-  verifyRegistration: vi.fn(),
-  verifyAuthentication: vi.fn(),
-  registrationOptions: vi.fn(),
-  authenticationOptions: vi.fn(),
-}));
-
-vi.mock("@simplewebauthn/server", () => ({
-  generateRegistrationOptions: webauthn.registrationOptions,
-  generateAuthenticationOptions: webauthn.authenticationOptions,
-  verifyRegistrationResponse: webauthn.verifyRegistration,
-  verifyAuthenticationResponse: webauthn.verifyAuthentication,
-}));
-
-import { startServer, type TestServer } from "./helpers";
-import { requestOrigin } from "../../src/backend/passkeys.js";
-
-let server: TestServer | null = null;
-
-beforeEach(() => {
-  vi.clearAllMocks();
-  webauthn.registrationOptions.mockImplementation(async (input) => ({
-    challenge: "reg-challenge",
-    rp: { name: input.rpName, id: input.rpID },
-  }));
-  webauthn.authenticationOptions.mockImplementation(async (input) => ({
-    challenge: "auth-challenge",
-    allowCredentials: input.allowCredentials,
-  }));
-  webauthn.verifyRegistration.mockResolvedValue({
-    verified: true,
-    registrationInfo: {
-      credential: {
-        id: "cred-1",
-        publicKey: new Uint8Array([1, 2, 3]),
-        counter: 0,
-      },
-      credentialDeviceType: "multiDevice",
-      credentialBackedUp: true,
-    },
-  });
-  webauthn.verifyAuthentication.mockResolvedValue({
-    verified: true,
-    authenticationInfo: {
-      newCounter: 5,
-      userVerified: true,
-      credentialBackedUp: true,
-      credentialDeviceType: "multiDevice",
-    },
-  });
-});
-
-afterEach(async () => {
-  await server?.close();
-  server = null;
-});
-
-function passkeyMethod(target: TestServer) {
-  const method = target.mock.auth.loginMethods.find(
-    (entry) => entry.id === "passkey",
-  );
-  if (!method?.verify) throw new Error("passkey method not registered");
-  return method;
-}
-
-async function registerPasskey(target: TestServer, user = "user-1") {
-  const options = await target.request("POST", "/register/options", {
-    user,
-    body: { userVerification: "required" },
-  });
-  expect(options.status).toBe(200);
-  const verify = await target.request("POST", "/register/verify", {
-    user,
-    body: {
-      challengeId: options.body.challengeId,
-      name: "Laptop",
-      response: { id: "cred-1", response: { transports: ["internal"] } },
-    },
-  });
-  expect(verify.status).toBe(200);
-}
-
-async function loginWith(
-  target: TestServer,
-  body: Record<string, unknown> = {},
-) {
-  const options = await target.request("POST", "/authenticate/options", {
-    user: "",
-    body,
-  });
-  expect(options.status).toBe(200);
-  return passkeyMethod(target).verify!(
-    {
-      body: {
-        challengeId: options.body.challengeId,
-        response: { id: "cred-1" },
-      },
-      query: {},
-      headers: {},
-    },
-    null,
-  );
-}
-
-describe("registration", () => {
-  it("registers a passkey for the caller and lists it", async () => {
-    server = await startServer();
-    await registerPasskey(server);
-
-    expect(webauthn.registrationOptions).toHaveBeenCalledWith(
-      expect.objectContaining({
-        rpName: "Termix Test",
-        rpID: "termix.test",
-        userName: "user-1",
-      }),
-    );
-    const list = await server.request("GET", "/credentials");
-    expect(list.body.credentials).toEqual([
-      expect.objectContaining({
-        name: "Laptop",
-        deviceType: "multiDevice",
-        backedUp: true,
-        transports: ["internal"],
-        userVerification: "required",
-      }),
-    ]);
-    expect(
-      (await server.request("GET", "/credentials", { user: "user-2" })).body
-        .credentials,
-    ).toEqual([]);
-  });
-
-  it("refuses a challenge issued to someone else", async () => {
-    server = await startServer();
-    const options = await server.request("POST", "/register/options", {
-      body: {},
-    });
-    const verify = await server.request("POST", "/register/verify", {
-      user: "user-2",
-      body: { challengeId: options.body.challengeId, response: { id: "x" } },
-    });
-    expect(verify.status).toBe(400);
-  });
-
-  it("refuses a failed attestation", async () => {
-    server = await startServer();
-    webauthn.verifyRegistration.mockResolvedValue({ verified: false });
-    const options = await server.request("POST", "/register/options", {
-      body: {},
-    });
-    const verify = await server.request("POST", "/register/verify", {
-      body: { challengeId: options.body.challengeId, response: { id: "x" } },
-    });
-    expect(verify.status).toBe(400);
-  });
-
-  it("deletes only the caller's own passkey", async () => {
-    server = await startServer();
-    await registerPasskey(server);
-    const [{ id }] = (await server.request("GET", "/credentials")).body
-      .credentials;
-    await server.request("DELETE", `/credentials/${id}`, { user: "user-2" });
-    expect(
-      (await server.request("GET", "/credentials")).body.credentials,
-    ).toHaveLength(1);
-    await server.request("DELETE", `/credentials/${id}`);
-    expect(
-      (await server.request("GET", "/credentials")).body.credentials,
-    ).toHaveLength(0);
-  });
-});
-
-describe("login", () => {
-  it("says who signed in and counts a verified user as the second factor", async () => {
-    server = await startServer();
-    await registerPasskey(server);
-    const identity = await loginWith(server);
-    expect(identity).toMatchObject({
-      kind: "user",
-      userId: "user-1",
-      mfaSatisfied: true,
-    });
-    const row = server.db.sqlite
-      .prepare("SELECT counter, last_used_at FROM p_webauthn_credentials")
-      .get() as { counter: number; last_used_at: string | null };
-    expect(row.counter).toBe(5);
-    expect(row.last_used_at).toBeTruthy();
-  });
-
-  it("leaves the second factor to core when the user was not verified", async () => {
-    server = await startServer();
-    await registerPasskey(server);
-    webauthn.verifyAuthentication.mockResolvedValue({
-      verified: true,
-      authenticationInfo: {
-        newCounter: 1,
-        userVerified: false,
-        credentialBackedUp: false,
-        credentialDeviceType: "singleDevice",
-      },
-    });
-    expect(await loginWith(server)).toMatchObject({ mfaSatisfied: false });
-  });
-
-  it("scopes the options to a username and 404s without passkeys", async () => {
-    server = await startServer();
-    await registerPasskey(server);
-    const options = await server.request("POST", "/authenticate/options", {
-      user: "",
-      body: { username: "user-1" },
-    });
-    expect(options.body.options.allowCredentials).toEqual([
-      { id: "cred-1", transports: ["internal"] },
-    ]);
-    expect(
-      (
-        await server.request("POST", "/authenticate/options", {
-          user: "",
-          body: { username: "user-2" },
-        })
-      ).status,
-    ).toBe(404);
-  });
-
-  it("refuses a passkey that belongs to another user than asked for", async () => {
-    server = await startServer();
-    await registerPasskey(server);
-    const options = await server.request("POST", "/authenticate/options", {
-      user: "",
-      body: { username: "user-1" },
-    });
-    server.db.sqlite.exec(
-      "UPDATE p_webauthn_credentials SET user_id = 'user-2'",
-    );
-    await expect(
-      passkeyMethod(server).verify!(
-        {
-          body: {
-            challengeId: options.body.challengeId,
-            response: { id: "cred-1" },
-          },
-          query: {},
-          headers: {},
-        },
-        null,
-      ),
-    ).rejects.toMatchObject({ status: 401 });
-  });
-
-  it("refuses an unknown passkey and a failed assertion", async () => {
-    server = await startServer();
-    await expect(loginWith(server)).rejects.toMatchObject({ status: 401 });
-    await registerPasskey(server);
-    webauthn.verifyAuthentication.mockRejectedValue(new Error("bad sig"));
-    await expect(loginWith(server)).rejects.toMatchObject({ status: 401 });
-  });
-
-  it("uses a challenge only once", async () => {
-    server = await startServer();
-    await registerPasskey(server);
-    const options = await server.request("POST", "/authenticate/options", {
-      user: "",
-      body: {},
-    });
-    const request = {
-      body: {
-        challengeId: options.body.challengeId,
-        response: { id: "cred-1" },
-      },
-      query: {},
-      headers: {},
-    };
-    await passkeyMethod(server).verify!(request, null);
-    await expect(
-      passkeyMethod(server).verify!(request, null),
-    ).rejects.toMatchObject({ status: 400 });
-  });
-});
-
-describe("adoption", () => {
-  const LEGACY = `
-    CREATE TABLE webauthn_credentials (
-      id TEXT PRIMARY KEY,
-      user_id TEXT NOT NULL,
-      name TEXT NOT NULL,
-      credential_id TEXT NOT NULL UNIQUE,
-      public_key TEXT NOT NULL,
-      counter INTEGER NOT NULL DEFAULT 0,
-      device_type TEXT,
-      backed_up INTEGER NOT NULL DEFAULT 0,
-      transports TEXT,
-      user_verification TEXT NOT NULL DEFAULT 'preferred',
-      created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-      last_used_at TEXT,
-      FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
-    );`;
-
-  it("keeps existing passkeys, which still sign in", async () => {
-    server = await startServer({
-      before: (sqlite) => {
-        sqlite
-          .prepare("INSERT INTO users (id, username) VALUES (?, ?)")
-          .run("old-user", "old-user");
-        sqlite.exec(LEGACY);
-        sqlite.exec(`INSERT INTO webauthn_credentials
-          (id, user_id, name, credential_id, public_key, counter, transports)
-          VALUES ('p1', 'old-user', 'Old key', 'cred-1', 'AQID', 3, '[]')`);
-      },
-    });
-    const tables = server.db.sqlite
-      .prepare("SELECT name FROM sqlite_master WHERE type = 'table'")
-      .all()
-      .map((row) => (row as { name: string }).name);
-    expect(tables).toContain("p_webauthn_credentials");
-    expect(tables).not.toContain("webauthn_credentials");
-    expect(await loginWith(server)).toMatchObject({ userId: "old-user" });
-  });
-
-  it("creates the table on a fresh install", async () => {
-    server = await startServer();
-    expect(
-      server.db.sqlite
-        .prepare("SELECT COUNT(*) AS n FROM p_webauthn_credentials")
-        .get(),
-    ).toEqual({ n: 0 });
-  });
-});
-
-describe("capabilities", () => {
-  it("fails closed without auth:provide", async () => {
-    await expect(
-      startServer({
-        capabilities: [
-          "db:own",
-          "network:serve",
-          "settings:read-core",
-          "ui:surface",
-        ],
-      }),
-    ).rejects.toThrow(/auth:provide/);
-  });
-
-  it("fails closed without network:serve", async () => {
-    await expect(
-      startServer({
-        capabilities: [
-          "db:own",
-          "auth:provide",
-          "settings:read-core",
-          "ui:surface",
-        ],
-      }),
-    ).rejects.toThrow(/network:serve/);
-  });
-});
-
-describe("requestOrigin", () => {
-  it("prefers Origin, then forwarded host and proto", () => {
-    expect(requestOrigin({ origin: "https://a.test" })).toBe("https://a.test");
-    expect(
-      requestOrigin({
-        "x-forwarded-proto": "https, http",
-        "x-forwarded-host": "b.test",
-        host: "internal",
-      }),
-    ).toBe("https://b.test");
-    expect(requestOrigin({ host: "c.test:8080" })).toBe("http://c.test:8080");
-  });
-});
diff --git a/plugins/webauthn/tests/frontend/activate.test.tsx b/plugins/webauthn/tests/frontend/activate.test.tsx
deleted file mode 100644
index a5d2495ed..000000000
--- a/plugins/webauthn/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,129 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { fireEvent, screen, waitFor } from "@testing-library/react";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-
-const browser = vi.hoisted(() => ({
-  startAuthentication: vi.fn(async () => ({ id: "cred-1" })),
-  startRegistration: vi.fn(async () => ({ id: "cred-1" })),
-  browserSupportsWebAuthn: vi.fn(() => true),
-}));
-vi.mock("@simplewebauthn/browser", () => browser);
-
-import * as plugin from "../../src/frontend/index";
-import { createWebAuthnApi } from "../../src/frontend/webauthn-api";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-let rendered: RenderedPluginApp | null = null;
-
-beforeEach(() => {
-  vi.clearAllMocks();
-  browser.browserSupportsWebAuthn.mockReturnValue(true);
-});
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe(`${manifest.id} activate`, () => {
-  it("registers the passkey login method", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.loginMethods()).toEqual(["passkey"]);
-  });
-
-  it("runs the ceremony and submits the assertion", async () => {
-    const post = vi.fn(async () => ({
-      data: { options: { challenge: "abc" }, challengeId: "chal-1" },
-    }));
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: { post } as never,
-    });
-    const submit = vi.fn(async () => {});
-    rendered.renderLoginMethod("passkey", { submit, username: " luke " });
-    fireEvent.click(screen.getByText(locales.signIn));
-    await waitFor(() =>
-      expect(submit).toHaveBeenCalledWith({
-        challengeId: "chal-1",
-        response: { id: "cred-1" },
-      }),
-    );
-    expect(post).toHaveBeenCalledWith("authenticate/options", {
-      username: "luke",
-    });
-  });
-
-  it("draws nothing where the browser has no WebAuthn", async () => {
-    browser.browserSupportsWebAuthn.mockReturnValue(false);
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    rendered.renderLoginMethod("passkey");
-    expect(screen.queryByText(locales.signIn)).toBeNull();
-  });
-
-  it("lists passkeys in the enrolment section", async () => {
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: {
-        get: vi.fn(async () => ({
-          data: {
-            credentials: [
-              {
-                id: "p1",
-                name: "Laptop",
-                backedUp: true,
-                transports: [],
-                userVerification: "preferred",
-                createdAt: "",
-              },
-            ],
-          },
-        })),
-      } as never,
-    });
-    rendered.renderEnrollment("passkey");
-    expect(await screen.findByText("Laptop")).toBeTruthy();
-  });
-
-  it("removes the method on deactivate", async () => {
-    const app = await renderWithApp(plugin, { manifest, locales });
-    await app.deactivate();
-    expect(app.registered.loginMethods()).toEqual([]);
-  });
-});
-
-describe("webauthn api", () => {
-  it("omits the username so discoverable passkeys work", async () => {
-    const post = vi.fn(async () => ({
-      data: { options: { challenge: "abc" }, challengeId: "chal-2" },
-    }));
-    await createWebAuthnApi({ post } as never).passkeyAssertion();
-    expect(post).toHaveBeenCalledWith("authenticate/options", {});
-  });
-
-  it("registers through options then verify", async () => {
-    const post = vi
-      .fn()
-      .mockResolvedValueOnce({
-        data: { options: { challenge: "r" }, challengeId: "reg-1" },
-      })
-      .mockResolvedValueOnce({ data: { success: true } });
-    await createWebAuthnApi({ post } as never).register("Key", "required");
-    expect(post).toHaveBeenNthCalledWith(1, "register/options", {
-      userVerification: "required",
-    });
-    expect(post).toHaveBeenNthCalledWith(2, "register/verify", {
-      challengeId: "reg-1",
-      name: "Key",
-      response: { id: "cred-1" },
-    });
-  });
-});
diff --git a/plugins/webauthn/tsconfig.json b/plugins/webauthn/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/webauthn/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/webauthn/vitest.config.ts b/plugins/webauthn/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/webauthn/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/plugins/workspaces/CHANGELOG.md b/plugins/workspaces/CHANGELOG.md
deleted file mode 100644
index 8dd8eb59b..000000000
--- a/plugins/workspaces/CHANGELOG.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# Changelog
-
-## 1.0.0
-
-First release, bundled with Termix 2.9.0.
-
-Save your open tabs and split layouts as named workspaces and bring them back later. Workspaces sync between the desktop app and a server.
diff --git a/plugins/workspaces/README.md b/plugins/workspaces/README.md
deleted file mode 100644
index 10b326444..000000000
--- a/plugins/workspaces/README.md
+++ /dev/null
@@ -1,28 +0,0 @@
-# Workspaces
-
-Save and restore named tab and split layouts.
-
-## Features
-
-- Save your open tabs and split layouts as a named workspace.
-- Open a workspace later to bring every tab back.
-- Tabs from a feature that is turned off are kept as placeholders.
-- Saved workspaces sync between the desktop app and a server.
-
-## Permissions
-
-- `workspaces.use`: Use workspaces. Admins and users have it by default.
-
-## Services
-
-Provides to other plugins:
-
-- `workspaces.saved`: list a user's saved workspaces.
-
-## Development
-
-```bash
-npm run build      # build into dist/
-npm run test       # run this plugin's tests
-npm run typecheck  # type-check this plugin
-```
diff --git a/plugins/workspaces/locales/en.json b/plugins/workspaces/locales/en.json
deleted file mode 100644
index b74108f09..000000000
--- a/plugins/workspaces/locales/en.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Workspaces",
-        "saveCurrent": "Save Current",
-        "saveCurrentTitle": "Save Current Workspace",
-        "saveCurrentDescription": "Save every open tab, split layout, and pane arrangement as a new named workspace.",
-        "nameLabel": "Name",
-        "namePlaceholder": "e.g., Prod Debugging",
-        "nameRequired": "Workspace name is required",
-        "colorLabel": "Color",
-        "workspaceCreated": "Workspace saved",
-        "workspaceUpdated": "Workspace updated",
-        "workspaceDeleted": "Workspace deleted",
-        "workspaceDuplicated": "Workspace duplicated",
-        "saveFailed": "Failed to save workspace",
-        "updateFailed": "Failed to update workspace",
-        "deleteFailed": "Failed to delete workspace",
-        "duplicateFailed": "Failed to duplicate workspace",
-        "loadFailed": "Failed to load workspaces",
-        "applyFailed": "Failed to apply workspace",
-        "deleteWorkspaceTitle": "Delete Workspace",
-        "deleteWorkspaceDescription": "Are you sure you want to delete \"{{name}}\"? This cannot be undone.",
-        "noWorkspaces": "No saved workspaces yet. Save your current tab arrangement to get started.",
-        "tabCount": "{{count}} tab",
-        "tabCount_other": "{{count}} tabs",
-        "apply": "Apply",
-        "applyConfirmTitle": "Apply Workspace",
-        "applyConfirmDescription": "Applying \"{{name}}\" will close your current tabs and replace them with this workspace's saved arrangement. Unsaved changes to your current layout will be lost.",
-        "applyConfirmButton": "Apply Workspace",
-        "updateWithCurrent": "Update with Current",
-        "updateWithCurrentConfirm": "Overwrite \"{{name}}\" with your current tab arrangement?",
-        "rename": "Rename",
-        "duplicate": "Duplicate",
-        "duplicateNameSuffix": "{{name}} (copy)",
-        "setDefault": "Set as Default",
-        "unsetDefault": "Remove as Default",
-        "defaultBadge": "Default",
-        "lastSession": "Last Session",
-        "lastSessionDescription": "Automatically updated with your most recent tab arrangement. Apply it to recover what you had open.",
-        "lastUsed": "Last used {{time}}",
-        "neverUsed": "Never applied",
-        "tabsSkipped": "Workspace applied, but {{count}} tab(s) were skipped because their host no longer exists: {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}s ago",
-          "minutes": "{{count}}m ago",
-          "hours": "{{count}}h ago",
-          "days": "{{count}}d ago"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Workspaces"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Workspaces",
-    "workflow_workspaces_desc": "Save a set of open tabs and reopen the whole layout later."
-  },
-  "permissions": {
-    "use": {
-      "title": "Use workspaces",
-      "description": "Save, apply and manage saved tab layouts."
-    }
-  },
-  "hosts": {
-    "docsLink": "View docs"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/af_ZA.json b/plugins/workspaces/locales/translated/af_ZA.json
deleted file mode 100644
index 158dc01a3..000000000
--- a/plugins/workspaces/locales/translated/af_ZA.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Werkruimtes",
-        "saveCurrent": "Stoor Huidige",
-        "saveCurrentTitle": "Stoor huidige werkspasie",
-        "saveCurrentDescription": "Stoor elke oop oortjie, gesplete uitleg en paneelrangskikking as 'n nuwe benoemde werkruimte.",
-        "nameLabel": "Naam",
-        "namePlaceholder": "bv. Produkontfouting",
-        "nameRequired": "Werkruimtenaam word vereis",
-        "colorLabel": "Kleur",
-        "workspaceCreated": "Werkruimte gestoor",
-        "workspaceUpdated": "Werkruimte opgedateer",
-        "workspaceDeleted": "Werkruimte uitgevee",
-        "workspaceDuplicated": "Werkruimte gedupliseer",
-        "saveFailed": "Kon nie werkspasie stoor nie",
-        "updateFailed": "Kon nie werkspasie opdateer nie",
-        "deleteFailed": "Kon nie werkspasie uitvee nie",
-        "duplicateFailed": "Kon nie werkruimte dupliseer nie",
-        "loadFailed": "Kon nie werkruimtes laai nie",
-        "applyFailed": "Kon nie werkspasie toepas nie",
-        "deleteWorkspaceTitle": "Vee Werkspasie uit",
-        "deleteWorkspaceDescription": "Is jy seker jy wil \"{{name}}\" verwyder? Dit kan nie ongedaan gemaak word nie.",
-        "noWorkspaces": "Geen gestoorde werkruimtes nog nie. Stoor jou huidige oortjie-rangskikking om te begin.",
-        "tabCount": "{{count}} oortjie",
-        "tabCount_other": "{{count}} oortjies",
-        "apply": "Dien toe",
-        "applyConfirmTitle": "Pas Werkruimte toe",
-        "applyConfirmDescription": "Deur \"{{name}}\" toe te pas, sal jou huidige oortjies toegemaak word en vervang word met hierdie werkspasie se gestoorde rangskikking. Ongestoorde veranderinge aan jou huidige uitleg sal verlore gaan.",
-        "applyConfirmButton": "Pas Werkruimte toe",
-        "updateWithCurrent": "Opdateer met Huidige",
-        "updateWithCurrentConfirm": "Oorskryf \"{{name}}\" met jou huidige tabbladrangskikking?",
-        "rename": "Hernoem",
-        "duplicate": "Duplikaat",
-        "duplicateNameSuffix": "{{name}} (kopieer)",
-        "setDefault": "Stel as verstek",
-        "unsetDefault": "Verwyder as verstek",
-        "defaultBadge": "Standaard",
-        "lastSession": "Laaste Sessie",
-        "lastSessionDescription": "Outomaties opgedateer met jou mees onlangse oortjie-rangskikking. Pas dit toe om te herstel wat jy oop gehad het.",
-        "lastUsed": "Laas gebruik {{time}}",
-        "neverUsed": "Nooit toegepas nie",
-        "tabsSkipped": "Werkruimte toegepas, maar {{count}} oortjie(s) is oorgeslaan omdat hul gasheer nie meer bestaan nie: {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}s gelede",
-          "minutes": "{{count}}m gelede",
-          "hours": "{{count}}uur gelede",
-          "days": "{{count}}dae gelede"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Werkruimtes"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Werkruimtes",
-    "workflow_workspaces_desc": "Stoor 'n stel oop oortjies en heropen die hele uitleg later."
-  },
-  "permissions": {
-    "use": {
-      "title": "Gebruik werkruimtes",
-      "description": "Stoor, pas toe en bestuur gestoorde oortjie-uitlegte."
-    }
-  },
-  "hosts": {
-    "docsLink": "Bekyk dokumente"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/ar_SA.json b/plugins/workspaces/locales/translated/ar_SA.json
deleted file mode 100644
index 9026b545e..000000000
--- a/plugins/workspaces/locales/translated/ar_SA.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "مساحات العمل",
-        "saveCurrent": "حفظ الوضع الحالي",
-        "saveCurrentTitle": "حفظ مساحة العمل الحالية",
-        "saveCurrentDescription": "احفظ كل علامة تبويب مفتوحة، وتخطيط مقسم، وترتيب أجزاء كمساحة عمل جديدة مسماة.",
-        "nameLabel": "الاسم",
-        "namePlaceholder": "مثال: تصحيح أخطاء الإنتاج",
-        "nameRequired": "اسم مساحة العمل مطلوب",
-        "colorLabel": "اللون",
-        "workspaceCreated": "تم حفظ مساحة العمل",
-        "workspaceUpdated": "تم تحديث مساحة العمل",
-        "workspaceDeleted": "تم حذف مساحة العمل",
-        "workspaceDuplicated": "تم تكرار مساحة العمل",
-        "saveFailed": "فشل حفظ مساحة العمل",
-        "updateFailed": "فشل تحديث مساحة العمل",
-        "deleteFailed": "فشل حذف مساحة العمل",
-        "duplicateFailed": "فشل تكرار مساحة العمل",
-        "loadFailed": "فشل تحميل مساحات العمل",
-        "applyFailed": "فشل تطبيق مساحة العمل",
-        "deleteWorkspaceTitle": "حذف مساحة العمل",
-        "deleteWorkspaceDescription": "هل أنت متأكد من رغبتك في حذف \"{{name}}\"؟ لا يمكن التراجع عن هذا.",
-        "noWorkspaces": "لم يتم حفظ أي مساحات عمل حتى الآن. احفظ ترتيب علامات التبويب الحالي للبدء.",
-        "tabCount": "{{count}} علامة تبويب",
-        "tabCount_other": "علامات تبويب {{count}}",
-        "apply": "تطبيق",
-        "applyConfirmTitle": "تطبيق مساحة العمل",
-        "applyConfirmDescription": "سيؤدي تطبيق \"{{name}}\" إلى إغلاق علامات التبويب الحالية واستبدالها بالترتيب المحفوظ لمساحة العمل هذه. ستفقد التغييرات غير المحفوظة على تخطيطك الحالي.",
-        "applyConfirmButton": "تطبيق مساحة العمل",
-        "updateWithCurrent": "تحديث بالبيانات الحالية",
-        "updateWithCurrentConfirm": "هل تريد استبدال \"{{name}}\" بترتيب علامات التبويب الحالي؟",
-        "rename": "إعادة تسمية",
-        "duplicate": "ينسخ",
-        "duplicateNameSuffix": "{{name}} (نسخة)",
-        "setDefault": "تعيين كافتراضي",
-        "unsetDefault": "إزالة كإعداد افتراضي",
-        "defaultBadge": "تقصير",
-        "lastSession": "الجلسة الأخيرة",
-        "lastSessionDescription": "يتم تحديثها تلقائيًا بأحدث ترتيب لعلامات التبويب لديك. قم بتطبيقها لاستعادة ما كنت قد فتحته.",
-        "lastUsed": "آخر استخدام {{time}}",
-        "neverUsed": "لم يتم التقديم مطلقا",
-        "tabsSkipped": "تم تطبيق مساحة العمل، ولكن تم تخطي علامات التبويب {{count}} لأن مضيفها لم يعد موجودًا: {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}منذ ثانية",
-          "minutes": "قبل {{count}}m",
-          "hours": "قبل {{count}}h",
-          "days": "قبل {{count}}d"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "مساحات العمل"
-  },
-  "onboarding": {
-    "workflow_workspaces": "مساحات العمل",
-    "workflow_workspaces_desc": "احفظ مجموعة من علامات التبويب المفتوحة وأعد فتح التخطيط بأكمله لاحقًا."
-  },
-  "permissions": {
-    "use": {
-      "title": "استخدم مساحات العمل",
-      "description": "حفظ وتطبيق وإدارة تخطيطات علامات التبويب المحفوظة."
-    }
-  },
-  "hosts": {
-    "docsLink": "عرض المستندات"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/bg_BG.json b/plugins/workspaces/locales/translated/bg_BG.json
deleted file mode 100644
index 3cc628b09..000000000
--- a/plugins/workspaces/locales/translated/bg_BG.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Работни пространства",
-        "saveCurrent": "Запазване на текущото",
-        "saveCurrentTitle": "Запазване на текущото работно пространство",
-        "saveCurrentDescription": "Запазете всеки отворен раздел, разделено оформление и подредба на панели като ново именувано работно пространство.",
-        "nameLabel": "Име",
-        "namePlaceholder": "напр. Отстраняване на грешки в продукта",
-        "nameRequired": "Името на работното пространство е задължително",
-        "colorLabel": "Цвят",
-        "workspaceCreated": "Работното пространство е запазено",
-        "workspaceUpdated": "Работното пространство е актуализирано",
-        "workspaceDeleted": "Работното пространство е изтрито",
-        "workspaceDuplicated": "Работното пространство е дублирано",
-        "saveFailed": "Запазването на работното пространство не бе успешно",
-        "updateFailed": "Актуализирането на работното пространство не бе успешно",
-        "deleteFailed": "Изтриването на работното пространство не бе успешно",
-        "duplicateFailed": "Дублирането на работното пространство не бе успешно",
-        "loadFailed": "Зареждането на работните пространства не бе успешно",
-        "applyFailed": "Прилагането на работното пространство не бе успешно",
-        "deleteWorkspaceTitle": "Изтриване на работно пространство",
-        "deleteWorkspaceDescription": "Сигурни ли сте, че искате да изтриете „{{name}}“? Това не може да бъде отменено.",
-        "noWorkspaces": "Все още няма запазени работни пространства. Запазете текущото си разположение на раздели, за да започнете.",
-        "tabCount": "раздел {{count}}",
-        "tabCount_other": "{{count}} раздели",
-        "apply": "Приложи",
-        "applyConfirmTitle": "Прилагане на работно пространство",
-        "applyConfirmDescription": "Прилагането на „{{name}}“ ще затвори текущите ви раздели и ще ги замени със запазената подредба на това работно пространство. Незапазените промени в текущото ви оформление ще бъдат загубени.",
-        "applyConfirmButton": "Прилагане на работно пространство",
-        "updateWithCurrent": "Актуализиране с текущото",
-        "updateWithCurrentConfirm": "Да се презапише ли „{{name}}“ с текущата ви подредба на табулации?",
-        "rename": "Преименуване",
-        "duplicate": "Дубликат",
-        "duplicateNameSuffix": "{{name}} (копие)",
-        "setDefault": "Задай по подразбиране",
-        "unsetDefault": "Премахване по подразбиране",
-        "defaultBadge": "По подразбиране",
-        "lastSession": "Последна сесия",
-        "lastSessionDescription": "Автоматично се актуализира с най-скорошната ви подредба на раздели. Приложете я, за да възстановите това, което сте имали отворено.",
-        "lastUsed": "Последно използвано {{time}}",
-        "neverUsed": "Никога не е прилагано",
-        "tabsSkipped": "Работното пространство е приложено, но {{count}} раздел(а) бяха пропуснати, защото техният хост вече не съществува: {{names}}",
-        "timeAgo": {
-          "seconds": "преди {{count}}сек",
-          "minutes": "преди {{count}}мин.",
-          "hours": "преди {{count}}ч",
-          "days": "преди {{count}}дни"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Работни пространства"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Работни пространства",
-    "workflow_workspaces_desc": "Запазете набор от отворени раздели и отворете отново цялото оформление по-късно."
-  },
-  "permissions": {
-    "use": {
-      "title": "Използвайте работни пространства",
-      "description": "Запазване, прилагане и управление на запазени оформления на раздели."
-    }
-  },
-  "hosts": {
-    "docsLink": "Преглед на документи"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/bn_BD.json b/plugins/workspaces/locales/translated/bn_BD.json
deleted file mode 100644
index 6469c040f..000000000
--- a/plugins/workspaces/locales/translated/bn_BD.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "কর্মক্ষেত্র",
-        "saveCurrent": "বর্তমান সংরক্ষণ করুন",
-        "saveCurrentTitle": "বর্তমান ওয়ার্কস্পেস সংরক্ষণ করুন",
-        "saveCurrentDescription": "প্রতিটি খোলা ট্যাব, স্প্লিট লেআউট এবং পেন বিন্যাসকে একটি নতুন নামযুক্ত ওয়ার্কস্পেস হিসেবে সংরক্ষণ করুন।",
-        "nameLabel": "নাম",
-        "namePlaceholder": "যেমন, প্রোডাকশন ডিবাগিং",
-        "nameRequired": "ওয়ার্কস্পেসের নাম আবশ্যক।",
-        "colorLabel": "রঙ",
-        "workspaceCreated": "ওয়ার্কস্পেস সংরক্ষিত",
-        "workspaceUpdated": "ওয়ার্কস্পেস আপডেট করা হয়েছে",
-        "workspaceDeleted": "ওয়ার্কস্পেস মুছে ফেলা হয়েছে",
-        "workspaceDuplicated": "ওয়ার্কস্পেস নকল করা হয়েছে",
-        "saveFailed": "ওয়ার্কস্পেস সংরক্ষণ করতে ব্যর্থ হয়েছে",
-        "updateFailed": "ওয়ার্কস্পেস আপডেট করতে ব্যর্থ হয়েছে",
-        "deleteFailed": "ওয়ার্কস্পেস মুছে ফেলা ব্যর্থ হয়েছে",
-        "duplicateFailed": "ওয়ার্কস্পেস নকল করতে ব্যর্থ হয়েছে",
-        "loadFailed": "ওয়ার্কস্পেস লোড করতে ব্যর্থ হয়েছে",
-        "applyFailed": "ওয়ার্কস্পেস প্রয়োগ করতে ব্যর্থ হয়েছে",
-        "deleteWorkspaceTitle": "ওয়ার্কস্পেস মুছুন",
-        "deleteWorkspaceDescription": "আপনি কি \"{{name}}\" মুছে ফেলতে নিশ্চিত? এটি আর পূর্বাবস্থায় ফেরানো যাবে না।",
-        "noWorkspaces": "এখনো কোনো ওয়ার্কস্পেস সেভ করা হয়নি। কাজ শুরু করার জন্য আপনার বর্তমান ট্যাব বিন্যাসটি সেভ করুন।",
-        "tabCount": "{{count}} ট্যাব",
-        "tabCount_other": "{{count}} ট্যাব",
-        "apply": "আবেদন করুন",
-        "applyConfirmTitle": "ওয়ার্কস্পেস প্রয়োগ করুন",
-        "applyConfirmDescription": "\"{{name}}\" প্রয়োগ করলে আপনার বর্তমান ট্যাবগুলি বন্ধ হয়ে যাবে এবং সেগুলির পরিবর্তে এই ওয়ার্কস্পেসের সংরক্ষিত বিন্যাসটি প্রদর্শিত হবে। আপনার বর্তমান লেআউটে করা অসংরক্ষিত পরিবর্তনগুলি হারিয়ে যাবে।",
-        "applyConfirmButton": "ওয়ার্কস্পেস প্রয়োগ করুন",
-        "updateWithCurrent": "বর্তমান তথ্য দিয়ে আপডেট করুন",
-        "updateWithCurrentConfirm": "আপনার বর্তমান ট্যাব বিন্যাস দিয়ে \"{{name}}\" ওভাররাইট করবেন?",
-        "rename": "নাম পরিবর্তন",
-        "duplicate": "নকল",
-        "duplicateNameSuffix": "{{name}} (অনুলিপি)",
-        "setDefault": "ডিফল্ট হিসাবে সেট করা হয়েছে",
-        "unsetDefault": "ডিফল্ট হিসেবে অপসারণ করুন",
-        "defaultBadge": "ডিফল্ট",
-        "lastSession": "শেষ অধিবেশন",
-        "lastSessionDescription": "আপনার সর্বশেষ ট্যাব বিন্যাস অনুযায়ী স্বয়ংক্রিয়ভাবে আপডেট হয়। আপনার খোলা ট্যাবগুলো পুনরুদ্ধার করতে এটি প্রয়োগ করুন।",
-        "lastUsed": "সর্বশেষ ব্যবহৃত {{time}}",
-        "neverUsed": "কখনো প্রয়োগ করা হয়নি",
-        "tabsSkipped": "ওয়ার্কস্পেস প্রয়োগ করা হয়েছে, কিন্তু {{count}} টি ট্যাব বাদ দেওয়া হয়েছে কারণ তাদের হোস্ট আর বিদ্যমান নেই: {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}সেকেন্ড আগে",
-          "minutes": "{{count}}মিনিট আগে",
-          "hours": "{{count}}ঘণ্টা আগে",
-          "days": "{{count}}দিন আগে"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "কর্মক্ষেত্র"
-  },
-  "onboarding": {
-    "workflow_workspaces": "কর্মক্ষেত্র",
-    "workflow_workspaces_desc": "খোলা ট্যাবগুলো সংরক্ষণ করুন এবং পরে সম্পূর্ণ লেআউটটি আবার খুলুন।"
-  },
-  "permissions": {
-    "use": {
-      "title": "ওয়ার্কস্পেস ব্যবহার করুন",
-      "description": "সংরক্ষিত ট্যাব লেআউটগুলি সংরক্ষণ করুন, প্রয়োগ করুন এবং পরিচালনা করুন।"
-    }
-  },
-  "hosts": {
-    "docsLink": "নথি দেখুন"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/ca_ES.json b/plugins/workspaces/locales/translated/ca_ES.json
deleted file mode 100644
index c9cfe3d08..000000000
--- a/plugins/workspaces/locales/translated/ca_ES.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Espais de treball",
-        "saveCurrent": "Desa l'actual",
-        "saveCurrentTitle": "Desa l'espai de treball actual",
-        "saveCurrentDescription": "Desa totes les pestanyes obertes, dissenys dividits i disposicions de panells com un espai de treball amb un nom nou.",
-        "nameLabel": "Nom",
-        "namePlaceholder": "p. ex., depuració de productes",
-        "nameRequired": "El nom de l'espai de treball és obligatori",
-        "colorLabel": "Color",
-        "workspaceCreated": "L'espai de treball s'ha desat",
-        "workspaceUpdated": "Espai de treball actualitzat",
-        "workspaceDeleted": "L'espai de treball s'ha suprimit",
-        "workspaceDuplicated": "Espai de treball duplicat",
-        "saveFailed": "No s'ha pogut desar l'espai de treball",
-        "updateFailed": "No s'ha pogut actualitzar l'espai de treball",
-        "deleteFailed": "No s'ha pogut suprimir l'espai de treball",
-        "duplicateFailed": "No s'ha pogut duplicar l'espai de treball",
-        "loadFailed": "No s'han pogut carregar els espais de treball",
-        "applyFailed": "No s'ha pogut aplicar l'espai de treball",
-        "deleteWorkspaceTitle": "Suprimeix l'espai de treball",
-        "deleteWorkspaceDescription": "Esteu segur que voleu suprimir \"{{name}}\"? Això no es pot desfer.",
-        "noWorkspaces": "Encara no hi ha espais de treball desats. Deseu la disposició actual de les pestanyes per començar.",
-        "tabCount": "Pestanya {{count}}",
-        "tabCount_other": "pestanyes {{count}}",
-        "apply": "Aplica",
-        "applyConfirmTitle": "Aplica l'espai de treball",
-        "applyConfirmDescription": "Si apliqueu \"{{name}}\", es tancaran les pestanyes actuals i les substituiran per la disposició desada d'aquest espai de treball. Els canvis no desats al disseny actual es perdran.",
-        "applyConfirmButton": "Aplica l'espai de treball",
-        "updateWithCurrent": "Actualitza amb l'actual",
-        "updateWithCurrentConfirm": "Voleu sobreescriure \"{{name}}\" amb la disposició actual de les pestanyes?",
-        "rename": "Canvia el nom",
-        "duplicate": "Duplicat",
-        "duplicateNameSuffix": "{{name}} (còpia)",
-        "setDefault": "Estableix com a predeterminat",
-        "unsetDefault": "Elimina com a predeterminat",
-        "defaultBadge": "Per defecte",
-        "lastSession": "Última sessió",
-        "lastSessionDescription": "Actualitzat automàticament amb la disposició de pestanyes més recent. Aplica-ho per recuperar el que tenies obert.",
-        "lastUsed": "Últim ús {{time}}",
-        "neverUsed": "Mai aplicat",
-        "tabsSkipped": "L'espai de treball s'ha aplicat, però s'han omès les pestanyes {{count}} perquè el seu amfitrió ja no existeix: {{names}}",
-        "timeAgo": {
-          "seconds": "Fa {{count}}segons",
-          "minutes": "fa {{count}}minuts",
-          "hours": "fa {{count}}h",
-          "days": "fa {{count}}dies"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Espais de treball"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Espais de treball",
-    "workflow_workspaces_desc": "Desa un conjunt de pestanyes obertes i torna a obrir tot el disseny més tard."
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilitza els espais de treball",
-      "description": "Desa, aplica i gestiona els dissenys de pestanyes desats."
-    }
-  },
-  "hosts": {
-    "docsLink": "Veure documents"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/cs_CZ.json b/plugins/workspaces/locales/translated/cs_CZ.json
deleted file mode 100644
index 1b1478148..000000000
--- a/plugins/workspaces/locales/translated/cs_CZ.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Pracovní prostory",
-        "saveCurrent": "Uložit aktuální",
-        "saveCurrentTitle": "Uložit aktuální pracovní prostor",
-        "saveCurrentDescription": "Uložte každou otevřenou kartu, rozdělené rozvržení a uspořádání panelů jako nový pojmenovaný pracovní prostor.",
-        "nameLabel": "Jméno",
-        "namePlaceholder": "např. ladění produktu",
-        "nameRequired": "Název pracovního prostoru je povinný",
-        "colorLabel": "Barva",
-        "workspaceCreated": "Pracovní prostor uložen",
-        "workspaceUpdated": "Pracovní prostor aktualizován",
-        "workspaceDeleted": "Pracovní prostor smazán",
-        "workspaceDuplicated": "Pracovní prostor byl duplikován",
-        "saveFailed": "Uložení pracovního prostoru se nezdařilo",
-        "updateFailed": "Aktualizace pracovního prostoru se nezdařilo",
-        "deleteFailed": "Nepodařilo se smazat pracovní prostor",
-        "duplicateFailed": "Nepodařilo se duplikovat pracovní prostor",
-        "loadFailed": "Nepodařilo se načíst pracovní prostory",
-        "applyFailed": "Použití pracovního prostoru se nezdařilo",
-        "deleteWorkspaceTitle": "Smazat pracovní prostor",
-        "deleteWorkspaceDescription": "Opravdu chcete smazat „{{name}}“? Tuto akci nelze vrátit zpět.",
-        "noWorkspaces": "Zatím nejsou uložené žádné pracovní prostory. Chcete-li začít, uložte si aktuální uspořádání karet.",
-        "tabCount": "{{count}} záložka",
-        "tabCount_other": "{{count}} záložek",
-        "apply": "Použít",
-        "applyConfirmTitle": "Použít pracovní prostor",
-        "applyConfirmDescription": "Použitím „{{name}}“ zavřete aktuální karty a nahradí je uloženým uspořádáním tohoto pracovního prostoru. Neuložené změny aktuálního rozvržení budou ztraceny.",
-        "applyConfirmButton": "Použít pracovní prostor",
-        "updateWithCurrent": "Aktualizovat s aktuálním",
-        "updateWithCurrentConfirm": "Přepsat „{{name}}“ aktuálním uspořádáním tabulací?",
-        "rename": "Přejmenovat",
-        "duplicate": "Duplikát",
-        "duplicateNameSuffix": "{{name}} (kopie)",
-        "setDefault": "Nastavit jako výchozí",
-        "unsetDefault": "Odebrat jako výchozí",
-        "defaultBadge": "Výchozí",
-        "lastSession": "Poslední sezení",
-        "lastSessionDescription": "Automaticky aktualizováno s vaším posledním uspořádáním karet. Použijte tuto funkci k obnovení toho, co jste měli otevřené.",
-        "lastUsed": "Naposledy použité {{time}}",
-        "neverUsed": "Nikdy nepoužíváno",
-        "tabsSkipped": "Pracovní prostor byl použit, ale {{count}} karet bylo přeskočeno, protože jejich hostitel již neexistuje: {{names}}",
-        "timeAgo": {
-          "seconds": "Před {{count}}s",
-          "minutes": "{{count}}před m",
-          "hours": "{{count}}před hodinami",
-          "days": "Před {{count}}dny"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Pracovní prostory"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Pracovní prostory",
-    "workflow_workspaces_desc": "Uložte si sadu otevřených karet a celé rozvržení si znovu otevřete později."
-  },
-  "permissions": {
-    "use": {
-      "title": "Používejte pracovní prostory",
-      "description": "Ukládat, používat a spravovat uložená rozvržení karet."
-    }
-  },
-  "hosts": {
-    "docsLink": "Zobrazit dokumenty"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/da_DK.json b/plugins/workspaces/locales/translated/da_DK.json
deleted file mode 100644
index 92b38b702..000000000
--- a/plugins/workspaces/locales/translated/da_DK.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Arbejdsområder",
-        "saveCurrent": "Gem nuværende",
-        "saveCurrentTitle": "Gem nuværende arbejdsområde",
-        "saveCurrentDescription": "Gem alle åbne faner, opdelte layouts og rudearrangementer som et nyt navngivet arbejdsområde.",
-        "nameLabel": "Navn",
-        "namePlaceholder": "f.eks. produktfejlfinding",
-        "nameRequired": "Arbejdsområdenavn er påkrævet",
-        "colorLabel": "Farve",
-        "workspaceCreated": "Arbejdsområdet er gemt",
-        "workspaceUpdated": "Arbejdsområdet er opdateret",
-        "workspaceDeleted": "Arbejdsområdet er slettet",
-        "workspaceDuplicated": "Arbejdsområdet er duplikeret",
-        "saveFailed": "Kunne ikke gemme arbejdsområdet",
-        "updateFailed": "Kunne ikke opdatere arbejdsområdet",
-        "deleteFailed": "Kunne ikke slette arbejdsområdet",
-        "duplicateFailed": "Kunne ikke duplikere arbejdsområdet",
-        "loadFailed": "Kunne ikke indlæse arbejdsområder",
-        "applyFailed": "Kunne ikke anvende arbejdsområdet",
-        "deleteWorkspaceTitle": "Slet arbejdsområde",
-        "deleteWorkspaceDescription": "Er du sikker på, at du vil slette \"{{name}}\"? Dette kan ikke fortrydes.",
-        "noWorkspaces": "Ingen gemte arbejdsområder endnu. Gem din nuværende faneopstilling for at komme i gang.",
-        "tabCount": "{{count}} faneblad",
-        "tabCount_other": "{{count}} faner",
-        "apply": "Anvende",
-        "applyConfirmTitle": "Anvend arbejdsområde",
-        "applyConfirmDescription": "Hvis du anvender \"{{name}}\", lukkes dine nuværende faner og erstattes med dette arbejdsområdes gemte arrangement. Ændringer af dit nuværende layout, der ikke er gemt, vil gå tabt.",
-        "applyConfirmButton": "Anvend arbejdsområde",
-        "updateWithCurrent": "Opdater med aktuel",
-        "updateWithCurrentConfirm": "Vil du overskrive \"{{name}}\" med din nuværende tabulatoropstilling?",
-        "rename": "Omdøb",
-        "duplicate": "Duplikere",
-        "duplicateNameSuffix": "{{name}} (kopi)",
-        "setDefault": "Angiv som standard",
-        "unsetDefault": "Fjern som standard",
-        "defaultBadge": "Misligholdelse",
-        "lastSession": "Sidste session",
-        "lastSessionDescription": "Opdateres automatisk med din seneste faneopsætning. Anvend den til at gendanne det, du havde åbent.",
-        "lastUsed": "Sidst brugt {{time}}",
-        "neverUsed": "Aldrig anvendt",
-        "tabsSkipped": "Arbejdsområde anvendt, men {{count}} faneblad(er) blev sprunget over, fordi deres vært ikke længere findes: {{names}}",
-        "timeAgo": {
-          "seconds": "For {{count}}sekunder siden",
-          "minutes": "For {{count}}minutter siden",
-          "hours": "For {{count}}timer siden",
-          "days": "for {{count}}dage siden"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Arbejdsområder"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Arbejdsområder",
-    "workflow_workspaces_desc": "Gem et sæt åbne faner, og åbn hele layoutet igen senere."
-  },
-  "permissions": {
-    "use": {
-      "title": "Brug arbejdsområder",
-      "description": "Gem, anvend og administrer gemte fanebladlayouts."
-    }
-  },
-  "hosts": {
-    "docsLink": "Se dokumenter"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/de_DE.json b/plugins/workspaces/locales/translated/de_DE.json
deleted file mode 100644
index 689eeb522..000000000
--- a/plugins/workspaces/locales/translated/de_DE.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Arbeitsbereiche",
-        "saveCurrent": "Aktuellen Stand speichern",
-        "saveCurrentTitle": "Aktuellen Arbeitsbereich speichern",
-        "saveCurrentDescription": "Alle geöffneten Tabs, geteilten Layouts und Fensteranordnungen werden als neuer, benannter Arbeitsbereich gespeichert.",
-        "nameLabel": "Name",
-        "namePlaceholder": "z. B. Produktions-Debugging",
-        "nameRequired": "Die Angabe eines Arbeitsbereichsnamens ist erforderlich.",
-        "colorLabel": "Farbe",
-        "workspaceCreated": "Arbeitsbereich gespeichert",
-        "workspaceUpdated": "Arbeitsbereich aktualisiert",
-        "workspaceDeleted": "Arbeitsbereich gelöscht",
-        "workspaceDuplicated": "Arbeitsbereich dupliziert",
-        "saveFailed": "Arbeitsbereich konnte nicht gespeichert werden",
-        "updateFailed": "Aktualisierung des Arbeitsbereichs fehlgeschlagen",
-        "deleteFailed": "Arbeitsbereich konnte nicht gelöscht werden",
-        "duplicateFailed": "Arbeitsbereich konnte nicht dupliziert werden",
-        "loadFailed": "Arbeitsbereiche konnten nicht geladen werden",
-        "applyFailed": "Arbeitsbereich konnte nicht angewendet werden",
-        "deleteWorkspaceTitle": "Arbeitsbereich löschen",
-        "deleteWorkspaceDescription": "Möchten Sie \"{{name}}\" wirklich löschen? Dies kann nicht rückgängig gemacht werden.",
-        "noWorkspaces": "Es sind noch keine Arbeitsbereiche gespeichert. Speichern Sie Ihre aktuelle Tab-Anordnung, um loszulegen.",
-        "tabCount": "{{count}} Tab",
-        "tabCount_other": "{{count}} Tabs",
-        "apply": "Anwenden",
-        "applyConfirmTitle": "Arbeitsbereich anwenden",
-        "applyConfirmDescription": "Durch Anwenden von \"{{name}}\" werden Ihre aktuellen Tabs geschlossen und durch die gespeicherte Anordnung dieses Arbeitsbereichs ersetzt. Nicht gespeicherte Änderungen an Ihrem aktuellen Layout gehen dabei verloren.",
-        "applyConfirmButton": "Arbeitsbereich anwenden",
-        "updateWithCurrent": "Aktualisierung mit aktuellem Stand",
-        "updateWithCurrentConfirm": "Soll \"{{name}}\" mit Ihrer aktuellen Tab-Anordnung überschrieben werden?",
-        "rename": "Umbenennen",
-        "duplicate": "Duplikat",
-        "duplicateNameSuffix": "{{name}} (Kopie)",
-        "setDefault": "Als Standard festlegen",
-        "unsetDefault": "Als Standard entfernen",
-        "defaultBadge": "Standard",
-        "lastSession": "Letzte Sitzung",
-        "lastSessionDescription": "Die Tab-Anordnung wird automatisch aktualisiert. Wenden Sie sie an, um Ihre geöffneten Tabs wiederherzustellen.",
-        "lastUsed": "Zuletzt verwendet {{time}}",
-        "neverUsed": "Nie angewendet",
-        "tabsSkipped": "Arbeitsbereich angewendet, aber {{count}} Registerkarte(n) wurden übersprungen, da ihr Host nicht mehr existiert: {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}s ago",
-          "minutes": "vor {{count}} Min.",
-          "hours": "vor {{count}} Std.",
-          "days": "vor {{count}} Tagen"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Arbeitsbereiche"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Arbeitsbereiche",
-    "workflow_workspaces_desc": "Speichern Sie einen Satz geöffneter Tabs und öffnen Sie das gesamte Layout später wieder."
-  },
-  "permissions": {
-    "use": {
-      "title": "Arbeitsbereiche nutzen",
-      "description": "Speichern, anwenden und verwalten Sie gespeicherte Tab-Layouts."
-    }
-  },
-  "hosts": {
-    "docsLink": "Dokumentation anzeigen"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/el_GR.json b/plugins/workspaces/locales/translated/el_GR.json
deleted file mode 100644
index 1a08a0f88..000000000
--- a/plugins/workspaces/locales/translated/el_GR.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Χώροι εργασίας",
-        "saveCurrent": "Αποθήκευση τρέχοντος",
-        "saveCurrentTitle": "Αποθήκευση τρέχοντος χώρου εργασίας",
-        "saveCurrentDescription": "Αποθηκεύστε κάθε ανοιχτή καρτέλα, διαιρεμένη διάταξη και διάταξη παραθύρου ως νέο ονομασμένο χώρο εργασίας.",
-        "nameLabel": "Ονομα",
-        "namePlaceholder": "π.χ., εντοπισμός σφαλμάτων προϊόντος",
-        "nameRequired": "Απαιτείται όνομα χώρου εργασίας",
-        "colorLabel": "Χρώμα",
-        "workspaceCreated": "Ο χώρος εργασίας αποθηκεύτηκε",
-        "workspaceUpdated": "Ο χώρος εργασίας ενημερώθηκε",
-        "workspaceDeleted": "Ο χώρος εργασίας διαγράφηκε",
-        "workspaceDuplicated": "Ο χώρος εργασίας αντιγράφηκε",
-        "saveFailed": "Η αποθήκευση του χώρου εργασίας απέτυχε",
-        "updateFailed": "Η ενημέρωση του χώρου εργασίας απέτυχε",
-        "deleteFailed": "Η διαγραφή του χώρου εργασίας απέτυχε",
-        "duplicateFailed": "Αποτυχία αντιγραφής χώρου εργασίας",
-        "loadFailed": "Αποτυχία φόρτωσης χώρων εργασίας",
-        "applyFailed": "Αποτυχία εφαρμογής χώρου εργασίας",
-        "deleteWorkspaceTitle": "Διαγραφή χώρου εργασίας",
-        "deleteWorkspaceDescription": "Είστε σίγουροι ότι θέλετε να διαγράψετε το \"{{name}}\"; Αυτή η ενέργεια δεν μπορεί να αναιρεθεί.",
-        "noWorkspaces": "Δεν υπάρχουν ακόμη αποθηκευμένοι χώροι εργασίας. Αποθηκεύστε την τρέχουσα διάταξη καρτελών για να ξεκινήσετε.",
-        "tabCount": "{{count}} καρτέλα",
-        "tabCount_other": "{{count}} καρτέλες",
-        "apply": "Εφαρμόζω",
-        "applyConfirmTitle": "Εφαρμογή χώρου εργασίας",
-        "applyConfirmDescription": "Η εφαρμογή της συνάρτησης \"{{name}}\" θα κλείσει τις τρέχουσες καρτέλες σας και θα τις αντικαταστήσει με την αποθηκευμένη διάταξη αυτού του χώρου εργασίας. Οι μη αποθηκευμένες αλλαγές στην τρέχουσα διάταξή σας θα χαθούν.",
-        "applyConfirmButton": "Εφαρμογή χώρου εργασίας",
-        "updateWithCurrent": "Ενημέρωση με το Τρέχον",
-        "updateWithCurrentConfirm": "Αντικατάσταση του \"{{name}}\" με την τρέχουσα διάταξη στηλοθετών;",
-        "rename": "Μετονομάζω",
-        "duplicate": "Αντίγραφο",
-        "duplicateNameSuffix": "{{name}} (αντίγραφο)",
-        "setDefault": "Ορισμός ως προεπιλογή",
-        "unsetDefault": "Κατάργηση ως προεπιλογή",
-        "defaultBadge": "Αθέτηση",
-        "lastSession": "Τελευταία συνεδρία",
-        "lastSessionDescription": "Ενημερώνεται αυτόματα με την πιο πρόσφατη διάταξη καρτελών. Εφαρμόστε την για να ανακτήσετε ό,τι είχατε ανοιχτό.",
-        "lastUsed": "Τελευταία χρήση {{time}}",
-        "neverUsed": "Δεν εφαρμόστηκε ποτέ",
-        "tabsSkipped": "Εφαρμόστηκε χώρος εργασίας, αλλά οι καρτέλες {{count}} παραλείφθηκαν επειδή ο κεντρικός υπολογιστής τους δεν υπάρχει πλέον: {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}πριν από s",
-          "minutes": "{{count}}πριν από λεπτά",
-          "hours": "{{count}}πριν από ώρες",
-          "days": "{{count}}πριν από ημέρες"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Χώροι εργασίας"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Χώροι εργασίας",
-    "workflow_workspaces_desc": "Αποθηκεύστε ένα σύνολο ανοιχτών καρτελών και ανοίξτε ξανά ολόκληρη τη διάταξη αργότερα."
-  },
-  "permissions": {
-    "use": {
-      "title": "Χρήση χώρων εργασίας",
-      "description": "Αποθήκευση, εφαρμογή και διαχείριση αποθηκευμένων διατάξεων καρτελών."
-    }
-  },
-  "hosts": {
-    "docsLink": "Προβολή εγγράφων"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/es_ES.json b/plugins/workspaces/locales/translated/es_ES.json
deleted file mode 100644
index 5ea892374..000000000
--- a/plugins/workspaces/locales/translated/es_ES.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Espacios de trabajo",
-        "saveCurrent": "Guardar actual",
-        "saveCurrentTitle": "Guardar espacio de trabajo actual",
-        "saveCurrentDescription": "Guarda cada pestaña abierta, diseño dividido y disposición de paneles como un nuevo espacio de trabajo con nombre.",
-        "nameLabel": "Nombre",
-        "namePlaceholder": "p. ej., depuración de producción",
-        "nameRequired": "Se requiere el nombre del espacio de trabajo.",
-        "colorLabel": "Color",
-        "workspaceCreated": "Espacio de trabajo guardado",
-        "workspaceUpdated": "Espacio de trabajo actualizado",
-        "workspaceDeleted": "Espacio de trabajo eliminado",
-        "workspaceDuplicated": "Espacio de trabajo duplicado",
-        "saveFailed": "No se pudo guardar el espacio de trabajo",
-        "updateFailed": "No se pudo actualizar el espacio de trabajo",
-        "deleteFailed": "No se pudo eliminar el espacio de trabajo",
-        "duplicateFailed": "Error al duplicar el espacio de trabajo",
-        "loadFailed": "No se pudieron cargar los espacios de trabajo.",
-        "applyFailed": "No se pudo aplicar el espacio de trabajo",
-        "deleteWorkspaceTitle": "Eliminar espacio de trabajo",
-        "deleteWorkspaceDescription": "¿Estás seguro de que quieres eliminar \"{{name}}\"? Esto no se puede deshacer.",
-        "noWorkspaces": "Aún no hay espacios de trabajo guardados. Guarda la disposición actual de tus pestañas para empezar.",
-        "tabCount": "{{count}} pestaña",
-        "tabCount_other": "{{count}} pestañas",
-        "apply": "Aplicar",
-        "applyConfirmTitle": "Aplicar espacio de trabajo",
-        "applyConfirmDescription": "Al aplicar \"{{name}}\" se cerrarán las pestañas actuales y se reemplazarán con la disposición guardada de este espacio de trabajo. Los cambios no guardados en la disposición actual se perderán.",
-        "applyConfirmButton": "Aplicar espacio de trabajo",
-        "updateWithCurrent": "Actualizar con la versión actual",
-        "updateWithCurrentConfirm": "¿Sobrescribir \"{{name}}\" con tu disposición de tabulación actual?",
-        "rename": "Renombrar",
-        "duplicate": "Duplicado",
-        "duplicateNameSuffix": "{{name}} (copiar)",
-        "setDefault": "Establecer como predeterminado",
-        "unsetDefault": "Eliminar como predeterminado",
-        "defaultBadge": "Por defecto",
-        "lastSession": "Última sesión",
-        "lastSessionDescription": "Se actualiza automáticamente con la configuración de pestañas más reciente. Aplícala para recuperar lo que tenías abierto.",
-        "lastUsed": "Último uso {{time}}",
-        "neverUsed": "Nunca se ha aplicado",
-        "tabsSkipped": "Se aplicó el espacio de trabajo, pero se omitieron las pestañas {{count}} porque su host ya no existe: {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}hace s",
-          "minutes": "hace {{count}}m",
-          "hours": "hace {{count}}h",
-          "days": "hace {{count}}d"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Espacios de trabajo"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Espacios de trabajo",
-    "workflow_workspaces_desc": "Guarda un conjunto de pestañas abiertas y vuelve a abrir toda la interfaz más tarde."
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilizar espacios de trabajo",
-      "description": "Guarda, aplica y gestiona las configuraciones de pestañas guardadas."
-    }
-  },
-  "hosts": {
-    "docsLink": "Ver documentación"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/fi_FI.json b/plugins/workspaces/locales/translated/fi_FI.json
deleted file mode 100644
index 4cc9802d0..000000000
--- a/plugins/workspaces/locales/translated/fi_FI.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Työtilat",
-        "saveCurrent": "Tallenna nykyinen",
-        "saveCurrentTitle": "Tallenna nykyinen työtila",
-        "saveCurrentDescription": "Tallenna jokainen avoin välilehti, jaettu asettelu ja ruutujärjestely uutena nimettynä työtilana.",
-        "nameLabel": "Nimi",
-        "namePlaceholder": "esim. Tuotantovirheenkorjaus",
-        "nameRequired": "Työtilan nimi on pakollinen",
-        "colorLabel": "Väri",
-        "workspaceCreated": "Työtila tallennettu",
-        "workspaceUpdated": "Työtila päivitetty",
-        "workspaceDeleted": "Työtila poistettu",
-        "workspaceDuplicated": "Työtila kopioitu",
-        "saveFailed": "Työtilan tallentaminen epäonnistui",
-        "updateFailed": "Työtilan päivittäminen epäonnistui",
-        "deleteFailed": "Työtilan poistaminen epäonnistui",
-        "duplicateFailed": "Työtilan kopiointi epäonnistui",
-        "loadFailed": "Työtilojen lataaminen epäonnistui",
-        "applyFailed": "Työtilan käyttöönotto epäonnistui",
-        "deleteWorkspaceTitle": "Poista työtila",
-        "deleteWorkspaceDescription": "Oletko varma, että haluat poistaa \"{{name}}\"? Tätä ei voi perua.",
-        "noWorkspaces": "Ei vielä tallennettuja työtiloja. Tallenna nykyinen välilehtijärjestys aloittaaksesi.",
-        "tabCount": "{{count}} -välilehti",
-        "tabCount_other": "{{count}} välilehdet",
-        "apply": "Käytä",
-        "applyConfirmTitle": "Käytä työtilaa",
-        "applyConfirmDescription": "Komentosarjan \"{{name}}\" käyttäminen sulkee nykyiset välilehdet ja korvaa ne tämän työtilan tallennetulla asettelulla. Nykyiseen asetteluun tehdyt tallentamattomat muutokset menetetään.",
-        "applyConfirmButton": "Käytä työtilaa",
-        "updateWithCurrent": "Päivitä nykyisellä",
-        "updateWithCurrentConfirm": "Korvataanko \"{{name}}\" nykyisellä sarkainjärjestykselläsi?",
-        "rename": "Nimeä uudelleen",
-        "duplicate": "Kopio",
-        "duplicateNameSuffix": "{{name}} (kopio)",
-        "setDefault": "Aseta oletukseksi",
-        "unsetDefault": "Poista oletusarvoksi",
-        "defaultBadge": "Oletus",
-        "lastSession": "Viimeisin istunto",
-        "lastSessionDescription": "Päivittyy automaattisesti viimeisimmän välilehtijärjestyksen mukaan. Käytä sitä palauttaaksesi avoimena olleen sisällön.",
-        "lastUsed": "Viimeksi käytetty {{time}}",
-        "neverUsed": "Ei koskaan sovellettu",
-        "tabsSkipped": "Työtilaa käytettiin, mutta {{count}} välilehteä ohitettiin, koska niiden isäntää ei enää ole: {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}s sitten",
-          "minutes": "{{count}}minuuttia sitten",
-          "hours": "{{count}}tuntia sitten",
-          "days": "{{count}}d sitten"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Työtilat"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Työtilat",
-    "workflow_workspaces_desc": "Tallenna joukko avoimia välilehtiä ja avaa koko asettelu uudelleen myöhemmin."
-  },
-  "permissions": {
-    "use": {
-      "title": "Käytä työtiloja",
-      "description": "Tallenna, käytä ja hallinnoi tallennettuja välilehtiasetteluja."
-    }
-  },
-  "hosts": {
-    "docsLink": "Näytä dokumentit"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/fr_FR.json b/plugins/workspaces/locales/translated/fr_FR.json
deleted file mode 100644
index 8a616ee13..000000000
--- a/plugins/workspaces/locales/translated/fr_FR.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Espaces de travail",
-        "saveCurrent": "Économisez le courant",
-        "saveCurrentTitle": "Enregistrer l'espace de travail actuel",
-        "saveCurrentDescription": "Enregistrez chaque onglet ouvert, chaque disposition fractionnée et chaque agencement de volets comme un nouvel espace de travail nommé.",
-        "nameLabel": "Nom",
-        "namePlaceholder": "par exemple, le débogage en production",
-        "nameRequired": "Le nom de l'espace de travail est requis.",
-        "colorLabel": "Couleur",
-        "workspaceCreated": "Espace de travail enregistré",
-        "workspaceUpdated": "Espace de travail mis à jour",
-        "workspaceDeleted": "Espace de travail supprimé",
-        "workspaceDuplicated": "Espace de travail dupliqué",
-        "saveFailed": "Impossible d'enregistrer l'espace de travail",
-        "updateFailed": "Échec de la mise à jour de l'espace de travail",
-        "deleteFailed": "Échec de la suppression de l'espace de travail",
-        "duplicateFailed": "Échec de la duplication de l'espace de travail",
-        "loadFailed": "Échec du chargement des espaces de travail",
-        "applyFailed": "Échec de l'application de l'espace de travail",
-        "deleteWorkspaceTitle": "Supprimer l'espace de travail",
-        "deleteWorkspaceDescription": "Êtes-vous sûr de vouloir supprimer «{{name}}» ? Cette action est irréversible.",
-        "noWorkspaces": "Aucun espace de travail enregistré pour le moment. Enregistrez votre disposition d'onglets actuelle pour commencer.",
-        "tabCount": "{{count}} onglet",
-        "tabCount_other": "Onglets {{count}}",
-        "apply": "Appliquer",
-        "applyConfirmTitle": "Espace de travail à appliquer",
-        "applyConfirmDescription": "Appliquer «{{name}}» fermera vos onglets actuels et les remplacera par la disposition enregistrée de cet espace de travail. Les modifications non enregistrées de votre disposition actuelle seront perdues.",
-        "applyConfirmButton": "Espace de travail à appliquer",
-        "updateWithCurrent": "Mise à jour avec les données actuelles",
-        "updateWithCurrentConfirm": "Remplacer «{{name}}» par votre disposition de tabulation actuelle ?",
-        "rename": "Renommer",
-        "duplicate": "Double",
-        "duplicateNameSuffix": "{{name}} (copie)",
-        "setDefault": "Définir comme valeur par défaut",
-        "unsetDefault": "Supprimer par défaut",
-        "defaultBadge": "Défaut",
-        "lastSession": "Dernière session",
-        "lastSessionDescription": "Mise à jour automatique avec votre dernière configuration d'onglets. Appliquez-la pour retrouver ce que vous aviez ouvert.",
-        "lastUsed": "Dernière utilisation {{time}}",
-        "neverUsed": "Jamais postulé",
-        "tabsSkipped": "L'espace de travail a été appliqué, mais {{count}} onglets ont été ignorés car leur hôte n'existe plus : {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}il y a s",
-          "minutes": "il y a {{count}} min",
-          "hours": "il y a {{count}} h",
-          "days": "il y a {{count}} j"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Espaces de travail"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Espaces de travail",
-    "workflow_workspaces_desc": "Enregistrez une série d'onglets ouverts et rouvrez l'ensemble de la mise en page plus tard."
-  },
-  "permissions": {
-    "use": {
-      "title": "Utiliser les espaces de travail",
-      "description": "Enregistrez, appliquez et gérez les mises en page d'onglets enregistrées."
-    }
-  },
-  "hosts": {
-    "docsLink": "Voir la documentation"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/he_IL.json b/plugins/workspaces/locales/translated/he_IL.json
deleted file mode 100644
index 5dee3c6d7..000000000
--- a/plugins/workspaces/locales/translated/he_IL.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "סביבות עבודה",
-        "saveCurrent": "שמור את הנוכחי",
-        "saveCurrentTitle": "שמור סביבת עבודה נוכחית",
-        "saveCurrentDescription": "שמור כל כרטיסייה פתוחה, פריסה מפוצלת וסידור חלונות כסביבת עבודה חדשה בעלת שם.",
-        "nameLabel": "שֵׁם",
-        "namePlaceholder": "לדוגמה, ניפוי באגים בפרודוקציה",
-        "nameRequired": "נדרש שם סביבת עבודה",
-        "colorLabel": "צֶבַע",
-        "workspaceCreated": "סביבת העבודה נשמרה",
-        "workspaceUpdated": "סביבת העבודה עודכנה",
-        "workspaceDeleted": "סביבת העבודה נמחקה",
-        "workspaceDuplicated": "סביבת עבודה משוכפלת",
-        "saveFailed": "שמירת סביבת העבודה נכשלה",
-        "updateFailed": "נכשל עדכון סביבת העבודה",
-        "deleteFailed": "מחיקת סביבת העבודה נכשלה",
-        "duplicateFailed": "שכפול סביבת העבודה נכשל",
-        "loadFailed": "טעינת סביבות עבודה נכשלה",
-        "applyFailed": "נכשל בהחלת סביבת העבודה",
-        "deleteWorkspaceTitle": "מחיקת סביבת עבודה",
-        "deleteWorkspaceDescription": "האם אתה בטוח שברצונך למחוק את \"{{name}}\"? לא ניתן לבטל פעולה זו.",
-        "noWorkspaces": "עדיין לא נשמרו סביבות עבודה. שמור את סידור הכרטיסיות הנוכחי שלך כדי להתחיל.",
-        "tabCount": "טאב {{count}}",
-        "tabCount_other": "טאבים {{count}}",
-        "apply": "לִפְנוֹת",
-        "applyConfirmTitle": "החלת סביבת עבודה",
-        "applyConfirmDescription": "החלת \"{{name}}\" תסגור את הכרטיסיות הנוכחיות שלך ותחליף אותן בסידור השמור של סביבת עבודה זו. שינויים שלא נשמרו בפריסה הנוכחית שלך יאבדו.",
-        "applyConfirmButton": "החלת סביבת עבודה",
-        "updateWithCurrent": "עדכון עם הנוכחי",
-        "updateWithCurrentConfirm": "להחליף את \"{{name}}\" עם סידור הטאבים הנוכחי שלך?",
-        "rename": "שינוי שם",
-        "duplicate": "לְשַׁכְפֵּל",
-        "duplicateNameSuffix": "{{name}} (העתק)",
-        "setDefault": "הגדר כברירת מחדל",
-        "unsetDefault": "הסר כברירת מחדל",
-        "defaultBadge": "בְּרִירַת מֶחדָל",
-        "lastSession": "מושב אחרון",
-        "lastSessionDescription": "מתעדכן אוטומטית עם סידור הכרטיסיות האחרון שלך. השתמש בו כדי לשחזר את מה שהיה פתוח.",
-        "lastUsed": "בשימוש אחרון {{time}}",
-        "neverUsed": "מעולם לא יושם",
-        "tabsSkipped": "סביבת עבודה הוחלת, אך הכרטיסיות {{count}} דילגו עליהן מכיוון שהמארח שלהן כבר לא קיים: {{names}}",
-        "timeAgo": {
-          "seconds": "לפני {{count}}שניות",
-          "minutes": "לפני {{count}}דקות",
-          "hours": "{{count}}h ago",
-          "days": "{{count}}d ago"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "סביבות עבודה"
-  },
-  "onboarding": {
-    "workflow_workspaces": "סביבות עבודה",
-    "workflow_workspaces_desc": "שמור קבוצת כרטיסיות פתוחות ופתח מחדש את כל הפריסה מאוחר יותר."
-  },
-  "permissions": {
-    "use": {
-      "title": "השתמש בסביבות עבודה",
-      "description": "שמור, החל ונהל פריסות של כרטיסיות שנשמרו."
-    }
-  },
-  "hosts": {
-    "docsLink": "הצג מסמכים"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/hi_IN.json b/plugins/workspaces/locales/translated/hi_IN.json
deleted file mode 100644
index aa2745510..000000000
--- a/plugins/workspaces/locales/translated/hi_IN.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "कार्यस्थानों",
-        "saveCurrent": "वर्तमान सहेजें",
-        "saveCurrentTitle": "वर्तमान कार्यक्षेत्र सहेजें",
-        "saveCurrentDescription": "प्रत्येक खुले टैब, स्प्लिट लेआउट और पेन व्यवस्था को एक नए नाम वाले वर्कस्पेस के रूप में सहेजें।",
-        "nameLabel": "नाम",
-        "namePlaceholder": "उदाहरण के लिए, प्रोडक्शन डिबगिंग",
-        "nameRequired": "कार्यक्षेत्र का नाम आवश्यक है",
-        "colorLabel": "रंग",
-        "workspaceCreated": "कार्यक्षेत्र सहेजा गया",
-        "workspaceUpdated": "कार्यक्षेत्र अपडेट किया गया",
-        "workspaceDeleted": "कार्यक्षेत्र हटा दिया गया",
-        "workspaceDuplicated": "कार्यक्षेत्र की प्रतिकृति बनाई गई",
-        "saveFailed": "कार्यक्षेत्र को सहेजने में विफल",
-        "updateFailed": "वर्कस्पेस को अपडेट करने में विफल",
-        "deleteFailed": "वर्कस्पेस को हटाने में विफल",
-        "duplicateFailed": "वर्कस्पेस को डुप्लिकेट करने में विफल",
-        "loadFailed": "वर्कस्पेस लोड करने में विफल",
-        "applyFailed": "कार्यक्षेत्र लागू करने में विफल",
-        "deleteWorkspaceTitle": "वर्कस्पेस हटाएं",
-        "deleteWorkspaceDescription": "क्या आप वाकई \"{{name}}\" को हटाना चाहते हैं? इसे पूर्ववत नहीं किया जा सकता।",
-        "noWorkspaces": "अभी तक कोई वर्कस्पेस सेव नहीं किया गया है। शुरू करने के लिए अपनी वर्तमान टैब व्यवस्था को सेव करें।",
-        "tabCount": "{{count}} टैब",
-        "tabCount_other": "{{count}} टैब",
-        "apply": "लागू करें",
-        "applyConfirmTitle": "वर्कस्पेस लागू करें",
-        "applyConfirmDescription": "\"{{name}}\" लागू करने से आपके वर्तमान टैब बंद हो जाएंगे और उनकी जगह इस वर्कस्पेस की सहेजी गई व्यवस्था लागू हो जाएगी। आपके वर्तमान लेआउट में किए गए असहयोगी परिवर्तन नष्ट हो जाएंगे।",
-        "applyConfirmButton": "वर्कस्पेस लागू करें",
-        "updateWithCurrent": "वर्तमान जानकारी से अपडेट करें",
-        "updateWithCurrentConfirm": "क्या आप \"{{name}}\" को अपनी वर्तमान टैब व्यवस्था से बदलना चाहेंगे?",
-        "rename": "नाम बदलें",
-        "duplicate": "डुप्लिकेट",
-        "duplicateNameSuffix": "{{name}} (कॉपी)",
-        "setDefault": "डिफाल्ट के रूप में सेट",
-        "unsetDefault": "डिफ़ॉल्ट के रूप में हटाएँ",
-        "defaultBadge": "गलती करना",
-        "lastSession": "पिछला सत्र",
-        "lastSessionDescription": "आपके टैब की नवीनतम व्यवस्था के साथ स्वचालित रूप से अपडेट हो जाता है। इसे लागू करके आप अपने खुले हुए टैब को पुनः प्राप्त कर सकते हैं।",
-        "lastUsed": "अंतिम बार उपयोग किया गया {{time}}",
-        "neverUsed": "कभी आवेदन नहीं किया",
-        "tabsSkipped": "वर्कस्पेस लागू हो गया, लेकिन {{count}} टैब छोड़ दिए गए क्योंकि उनका होस्ट अब मौजूद नहीं है: {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}सेकंड पहले",
-          "minutes": "{{count}}m पहले",
-          "hours": "{{count}}h पहले",
-          "days": "{{count}}d पहले"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "कार्यस्थानों"
-  },
-  "onboarding": {
-    "workflow_workspaces": "कार्यस्थानों",
-    "workflow_workspaces_desc": "खुले हुए टैबों के एक सेट को सेव करें और बाद में पूरे लेआउट को दोबारा खोलें।"
-  },
-  "permissions": {
-    "use": {
-      "title": "वर्कस्पेस का उपयोग करें",
-      "description": "सेव किए गए टैब लेआउट को सेव करें, लागू करें और प्रबंधित करें।"
-    }
-  },
-  "hosts": {
-    "docsLink": "दस्तावेज़ देखें"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/hu_HU.json b/plugins/workspaces/locales/translated/hu_HU.json
deleted file mode 100644
index 3091c05f5..000000000
--- a/plugins/workspaces/locales/translated/hu_HU.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Munkaterületek",
-        "saveCurrent": "Aktuális mentése",
-        "saveCurrentTitle": "Aktuális munkaterület mentése",
-        "saveCurrentDescription": "Minden megnyitott lapot, osztott elrendezést és panelelrendezést mentsen el új, elnevezett munkaterületként.",
-        "nameLabel": "Név",
-        "namePlaceholder": "pl., Prod Debugging",
-        "nameRequired": "Munkaterület neve kötelező",
-        "colorLabel": "Szín",
-        "workspaceCreated": "Munkaterület mentve",
-        "workspaceUpdated": "Munkaterület frissítve",
-        "workspaceDeleted": "Munkaterület törölve",
-        "workspaceDuplicated": "Munkaterület duplikálva",
-        "saveFailed": "Nem sikerült menteni a munkaterületet",
-        "updateFailed": "Nem sikerült frissíteni a munkaterületet",
-        "deleteFailed": "Nem sikerült törölni a munkaterületet",
-        "duplicateFailed": "Nem sikerült a munkaterületet másolni",
-        "loadFailed": "Nem sikerült betölteni a munkaterületeket",
-        "applyFailed": "Nem sikerült alkalmazni a munkaterületet",
-        "deleteWorkspaceTitle": "Munkaterület törlése",
-        "deleteWorkspaceDescription": "Biztosan törölni szeretnéd a(z) \"{{name}}\" fájlt? Ez a művelet nem vonható vissza.",
-        "noWorkspaces": "Még nincsenek mentett munkaterületek. A kezdéshez mentse el az aktuális tabulátorelrendezést.",
-        "tabCount": "{{count}} fül",
-        "tabCount_other": "{{count}} fülek",
-        "apply": "Jelentkezés",
-        "applyConfirmTitle": "Munkaterület alkalmazása",
-        "applyConfirmDescription": "A(z) „{{name}}” parancs alkalmazása bezárja az aktuális lapokat, és lecseréli azokat a munkaterület mentett elrendezésére. Az aktuális elrendezés nem mentett módosításai elvesznek.",
-        "applyConfirmButton": "Munkaterület alkalmazása",
-        "updateWithCurrent": "Frissítés az aktuális programmal",
-        "updateWithCurrentConfirm": "Felülírja a(z) \"{{name}}\" szöveget a jelenlegi tabulátorelrendezéssel?",
-        "rename": "Átnevezés",
-        "duplicate": "Másolat",
-        "duplicateNameSuffix": "{{name}} (másolat)",
-        "setDefault": "Beállítás alapértelmezettként",
-        "unsetDefault": "Eltávolítás alapértelmezettként",
-        "defaultBadge": "Alapértelmezett",
-        "lastSession": "Utolsó munkamenet",
-        "lastSessionDescription": "Automatikusan frissül a legutóbbi tabulátorelrendezéssel. Alkalmazd, hogy visszaállítsd a megnyitott tabulátorokat.",
-        "lastUsed": "Utolsó használat {{time}}",
-        "neverUsed": "Soha nem alkalmazták",
-        "tabsSkipped": "Munkaterület alkalmazva, de {{count}} fül(ek) kimaradtak, mert a tárhelyük már nem létezik: {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}másodperccel ezelőtt",
-          "minutes": "{{count}}perccel ezelőtt",
-          "hours": "{{count}}órával ezelőtt",
-          "days": "{{count}}nappal ezelőtt"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Munkaterületek"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Munkaterületek",
-    "workflow_workspaces_desc": "Mentse el a megnyitott lapok egy készletét, és később nyissa meg újra a teljes elrendezést."
-  },
-  "permissions": {
-    "use": {
-      "title": "Munkaterületek használata",
-      "description": "Mentett fülelrendezések mentése, alkalmazása és kezelése."
-    }
-  },
-  "hosts": {
-    "docsLink": "Dokumentumok megtekintése"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/id_ID.json b/plugins/workspaces/locales/translated/id_ID.json
deleted file mode 100644
index 1d43398bb..000000000
--- a/plugins/workspaces/locales/translated/id_ID.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Ruang kerja",
-        "saveCurrent": "Simpan Saat Ini",
-        "saveCurrentTitle": "Simpan Ruang Kerja Saat Ini",
-        "saveCurrentDescription": "Simpan setiap tab yang terbuka, tata letak terpisah, dan susunan panel sebagai ruang kerja baru yang diberi nama.",
-        "nameLabel": "Nama",
-        "namePlaceholder": "misalnya, Debugging Produksi",
-        "nameRequired": "Nama ruang kerja wajib diisi.",
-        "colorLabel": "Warna",
-        "workspaceCreated": "Ruang kerja tersimpan",
-        "workspaceUpdated": "Ruang kerja diperbarui",
-        "workspaceDeleted": "Ruang kerja dihapus",
-        "workspaceDuplicated": "Ruang kerja diduplikasi",
-        "saveFailed": "Gagal menyimpan ruang kerja",
-        "updateFailed": "Gagal memperbarui ruang kerja",
-        "deleteFailed": "Gagal menghapus ruang kerja.",
-        "duplicateFailed": "Gagal menduplikasi ruang kerja.",
-        "loadFailed": "Gagal memuat ruang kerja",
-        "applyFailed": "Gagal menerapkan ruang kerja",
-        "deleteWorkspaceTitle": "Hapus Ruang Kerja",
-        "deleteWorkspaceDescription": "Apakah Anda yakin ingin menghapus \"{{name}}\"? Tindakan ini tidak dapat dibatalkan.",
-        "noWorkspaces": "Belum ada ruang kerja yang tersimpan. Simpan susunan tab Anda saat ini untuk memulai.",
-        "tabCount": "{{count}} tab",
-        "tabCount_other": "{{count}} tab",
-        "apply": "Menerapkan",
-        "applyConfirmTitle": "Terapkan Ruang Kerja",
-        "applyConfirmDescription": "Menerapkan \"{{name}}\" akan menutup tab Anda saat ini dan menggantinya dengan susunan yang tersimpan di ruang kerja ini. Perubahan yang belum disimpan pada tata letak Anda saat ini akan hilang.",
-        "applyConfirmButton": "Terapkan Ruang Kerja",
-        "updateWithCurrent": "Perbarui dengan yang Terbaru",
-        "updateWithCurrentConfirm": "Timpa \"{{name}}\" dengan susunan tab Anda saat ini?",
-        "rename": "Ganti nama",
-        "duplicate": "Duplikat",
-        "duplicateNameSuffix": "{{name}} (salinan)",
-        "setDefault": "Tetapkan sebagai Default",
-        "unsetDefault": "Hapus sebagai Default",
-        "defaultBadge": "Bawaan",
-        "lastSession": "Sesi Terakhir",
-        "lastSessionDescription": "Diperbarui secara otomatis dengan susunan tab terbaru Anda. Terapkan untuk memulihkan tab yang sebelumnya Anda buka.",
-        "lastUsed": "Terakhir digunakan {{time}}",
-        "neverUsed": "Tidak pernah melamar",
-        "tabsSkipped": "Ruang kerja diterapkan, tetapi {{count}} tab dilewati karena host-nya tidak lagi ada: {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}detik yang lalu",
-          "minutes": "{{count}} menit lalu",
-          "hours": "{{count}} jam lalu",
-          "days": "{{count}} detik lalu"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Ruang kerja"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Ruang kerja",
-    "workflow_workspaces_desc": "Simpan sekumpulan tab yang terbuka dan buka kembali seluruh tata letak nanti."
-  },
-  "permissions": {
-    "use": {
-      "title": "Gunakan ruang kerja",
-      "description": "Simpan, terapkan, dan kelola tata letak tab yang tersimpan."
-    }
-  },
-  "hosts": {
-    "docsLink": "Lihat dokumen"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/it_IT.json b/plugins/workspaces/locales/translated/it_IT.json
deleted file mode 100644
index e06c7a2e8..000000000
--- a/plugins/workspaces/locales/translated/it_IT.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Spazi di lavoro",
-        "saveCurrent": "Salva corrente",
-        "saveCurrentTitle": "Salva l'area di lavoro corrente",
-        "saveCurrentDescription": "Salva ogni scheda aperta, layout diviso e disposizione dei riquadri come nuova area di lavoro denominata.",
-        "nameLabel": "Nome",
-        "namePlaceholder": "ad esempio, Debugging di produzione",
-        "nameRequired": "Il nome dell'area di lavoro è obbligatorio",
-        "colorLabel": "Colore",
-        "workspaceCreated": "Area di lavoro salvata",
-        "workspaceUpdated": "Area di lavoro aggiornata",
-        "workspaceDeleted": "Area di lavoro eliminata",
-        "workspaceDuplicated": "Area di lavoro duplicata",
-        "saveFailed": "Impossibile salvare l'area di lavoro",
-        "updateFailed": "Impossibile aggiornare l'area di lavoro",
-        "deleteFailed": "Impossibile eliminare l'area di lavoro",
-        "duplicateFailed": "Impossibile duplicare l'area di lavoro",
-        "loadFailed": "Impossibile caricare gli spazi di lavoro",
-        "applyFailed": "Impossibile applicare l'area di lavoro",
-        "deleteWorkspaceTitle": "Elimina l'area di lavoro",
-        "deleteWorkspaceDescription": "Sei sicuro di voler eliminare \"{{name}}\"? Questa operazione non può essere annullata.",
-        "noWorkspaces": "Nessun spazio di lavoro salvato al momento. Salva la disposizione attuale delle schede per iniziare.",
-        "tabCount": "{{count}} tab",
-        "tabCount_other": "{{count}} schede",
-        "apply": "Applica",
-        "applyConfirmTitle": "Applica l'area di lavoro",
-        "applyConfirmDescription": "Applicando \"{{name}}\" chiuderai le schede correnti e le sostituirai con la disposizione salvata di quest'area di lavoro. Le modifiche non salvate al layout corrente andranno perse.",
-        "applyConfirmButton": "Applica l'area di lavoro",
-        "updateWithCurrent": "Aggiorna con la versione attuale",
-        "updateWithCurrentConfirm": "Sovrascrivi \"{{name}}\" con la tua attuale disposizione delle schede?",
-        "rename": "Rinomina",
-        "duplicate": "Duplicato",
-        "duplicateNameSuffix": "{{name}} (copia)",
-        "setDefault": "Imposta come predefinito",
-        "unsetDefault": "Rimuovi come predefinito",
-        "defaultBadge": "Predefinito",
-        "lastSession": "Ultima sessione",
-        "lastSessionDescription": "Si aggiorna automaticamente con la disposizione delle schede più recente. Applicala per ripristinare quelle che avevi aperte.",
-        "lastUsed": "Ultimo utilizzo {{time}}",
-        "neverUsed": "mai applicato",
-        "tabsSkipped": "Area di lavoro applicata, ma le schede {{count}} sono state ignorate perché il loro host non esiste più: {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}secondi fa",
-          "minutes": "{{count}}m fa",
-          "hours": "{{count}}h fa",
-          "days": "{{count}}d fa"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Spazi di lavoro"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Spazi di lavoro",
-    "workflow_workspaces_desc": "Salva le schede aperte e riapri l'intero layout in seguito."
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilizzare gli spazi di lavoro",
-      "description": "Salva, applica e gestisci i layout delle schede salvati."
-    }
-  },
-  "hosts": {
-    "docsLink": "Visualizza documentazione"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/ja_JP.json b/plugins/workspaces/locales/translated/ja_JP.json
deleted file mode 100644
index 4ac645bb7..000000000
--- a/plugins/workspaces/locales/translated/ja_JP.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "ワークスペース",
-        "saveCurrent": "現在の状態を保存",
-        "saveCurrentTitle": "現在のワークスペースを保存",
-        "saveCurrentDescription": "開いているすべてのタブ、分割レイアウト、ペイン配置を、新しい名前付きワークスペースとして保存します。",
-        "nameLabel": "名前",
-        "namePlaceholder": "例：本番環境のデバッグ",
-        "nameRequired": "ワークスペース名は必須です。",
-        "colorLabel": "色",
-        "workspaceCreated": "ワークスペースが保存されました",
-        "workspaceUpdated": "ワークスペースが更新されました",
-        "workspaceDeleted": "ワークスペースが削除されました",
-        "workspaceDuplicated": "ワークスペースが複製されました",
-        "saveFailed": "ワークスペースの保存に失敗しました",
-        "updateFailed": "ワークスペースの更新に失敗しました",
-        "deleteFailed": "ワークスペースの削除に失敗しました",
-        "duplicateFailed": "ワークスペースの複製に失敗しました",
-        "loadFailed": "ワークスペースの読み込みに失敗しました",
-        "applyFailed": "ワークスペースの適用に失敗しました",
-        "deleteWorkspaceTitle": "ワークスペースを削除",
-        "deleteWorkspaceDescription": "「{{name}}」を削除してもよろしいですか？この操作は元に戻せません。",
-        "noWorkspaces": "まだワークスペースが保存されていません。まずは現在のタブの配置を保存してください。",
-        "tabCount": "{{count}} タブ",
-        "tabCount_other": "{{count}} タブ",
-        "apply": "適用",
-        "applyConfirmTitle": "ワークスペースを適用する",
-        "applyConfirmDescription": "\"{{name}}\" を適用すると、現在のタブが閉じられ、このワークスペースに保存されているレイアウトに置き換えられます。現在のレイアウトに対する未保存の変更は失われます。",
-        "applyConfirmButton": "ワークスペースを適用する",
-        "updateWithCurrent": "最新情報に更新",
-        "updateWithCurrentConfirm": "「{{name}}」を現在のタブ配列で上書きしますか？",
-        "rename": "名前変更",
-        "duplicate": "重複",
-        "duplicateNameSuffix": "{{name}} (コピー)",
-        "setDefault": "デフォルトとして設定",
-        "unsetDefault": "デフォルトから削除",
-        "defaultBadge": "デフォルト",
-        "lastSession": "最終セッション",
-        "lastSessionDescription": "最新のタブ配置に合わせて自動的に更新されます。適用すると、以前開いていたウィンドウが復元されます。",
-        "lastUsed": "最後に使用されたのは {{time}} です。",
-        "neverUsed": "一度も応募したことがない",
-        "tabsSkipped": "ワークスペースは適用されましたが、ホストが存在しなくなったため、 {{count}} 個のタブがスキップされました: {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}秒前",
-          "minutes": "{{count}}分前",
-          "hours": "{{count}}時間前",
-          "days": "{{count}}日前"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "ワークスペース"
-  },
-  "onboarding": {
-    "workflow_workspaces": "ワークスペース",
-    "workflow_workspaces_desc": "開いているタブのセットを保存し、後でレイアウト全体を再度開くことができます。"
-  },
-  "permissions": {
-    "use": {
-      "title": "ワークスペースを使用する",
-      "description": "保存したタブレイアウトを保存、適用、管理できます。"
-    }
-  },
-  "hosts": {
-    "docsLink": "ドキュメントを表示"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/ko_KR.json b/plugins/workspaces/locales/translated/ko_KR.json
deleted file mode 100644
index 093faa546..000000000
--- a/plugins/workspaces/locales/translated/ko_KR.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "작업 공간",
-        "saveCurrent": "현재 저장",
-        "saveCurrentTitle": "현재 작업 공간 저장",
-        "saveCurrentDescription": "열려 있는 모든 탭, 분할 레이아웃 및 창 배열을 새 이름의 작업 공간으로 저장합니다.",
-        "nameLabel": "이름",
-        "namePlaceholder": "예: 프로덕션 디버깅",
-        "nameRequired": "워크스페이스 이름은 필수 입력 사항입니다.",
-        "colorLabel": "색상",
-        "workspaceCreated": "작업 공간이 저장되었습니다",
-        "workspaceUpdated": "작업 공간이 업데이트되었습니다.",
-        "workspaceDeleted": "작업 공간이 삭제되었습니다",
-        "workspaceDuplicated": "작업 공간이 복제되었습니다",
-        "saveFailed": "작업 공간 저장에 실패했습니다",
-        "updateFailed": "워크스페이스 업데이트에 실패했습니다.",
-        "deleteFailed": "워크스페이스 삭제에 실패했습니다.",
-        "duplicateFailed": "워크스페이스 복제에 실패했습니다.",
-        "loadFailed": "워크스페이스를 불러오는 데 실패했습니다.",
-        "applyFailed": "워크스페이스 적용에 실패했습니다",
-        "deleteWorkspaceTitle": "작업 공간 삭제",
-        "deleteWorkspaceDescription": "\"{{name}}\"을 삭제하시겠습니까? 이 작업은 되돌릴 수 없습니다.",
-        "noWorkspaces": "아직 저장된 작업 공간이 없습니다. 시작하려면 현재 탭 구성을 저장하세요.",
-        "tabCount": "{{count}} 탭",
-        "tabCount_other": "{{count}} 탭",
-        "apply": "적용",
-        "applyConfirmTitle": "작업 공간 적용",
-        "applyConfirmDescription": "\"{{name}}\"를 입력하면 현재 탭이 닫히고 이 작업 공간에 저장된 레이아웃으로 바뀝니다. 현재 레이아웃에 대한 저장되지 않은 변경 사항은 손실됩니다.",
-        "applyConfirmButton": "작업 공간 적용",
-        "updateWithCurrent": "현재 정보로 업데이트",
-        "updateWithCurrentConfirm": "현재 탭 배열로 \"{{name}}\"를 덮어쓰시겠습니까?",
-        "rename": "이름 바꾸기",
-        "duplicate": "복제하다",
-        "duplicateNameSuffix": "{{name}} (복사)",
-        "setDefault": "기본값으로 설정",
-        "unsetDefault": "기본값에서 제거",
-        "defaultBadge": "기본",
-        "lastSession": "지난 세션",
-        "lastSessionDescription": "최근 탭 배열로 자동 업데이트됩니다. 적용하면 이전에 열려 있던 탭을 복구할 수 있습니다.",
-        "lastUsed": "마지막으로 사용된 값 {{time}}",
-        "neverUsed": "지원한 적 없음",
-        "tabsSkipped": "워크스페이스가 적용되었지만 호스트가 더 이상 존재하지 않으므로 {{count}} 탭은 건너뛰었습니다: {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}초 전",
-          "minutes": "{{count}}분 전",
-          "hours": "{{count}}시간 전",
-          "days": "{{count}}일 전"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "작업 공간"
-  },
-  "onboarding": {
-    "workflow_workspaces": "작업 공간",
-    "workflow_workspaces_desc": "열려 있는 탭들을 저장해두었다가 나중에 전체 레이아웃을 다시 열어보세요."
-  },
-  "permissions": {
-    "use": {
-      "title": "워크스페이스를 활용하세요",
-      "description": "저장된 탭 레이아웃을 저장, 적용 및 관리할 수 있습니다."
-    }
-  },
-  "hosts": {
-    "docsLink": "문서 보기"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/nl_NL.json b/plugins/workspaces/locales/translated/nl_NL.json
deleted file mode 100644
index 5f36ef3e1..000000000
--- a/plugins/workspaces/locales/translated/nl_NL.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Werkruimtes",
-        "saveCurrent": "Huidige opslaan",
-        "saveCurrentTitle": "Huidige werkruimte opslaan",
-        "saveCurrentDescription": "Sla elk geopend tabblad, elke gesplitste lay-out en elke vensterindeling op als een nieuwe, benoemde werkruimte.",
-        "nameLabel": "Naam",
-        "namePlaceholder": "bijvoorbeeld, productiedebugging",
-        "nameRequired": "De naam van de werkruimte is verplicht.",
-        "colorLabel": "Kleur",
-        "workspaceCreated": "Werkruimte opgeslagen",
-        "workspaceUpdated": "Werkruimte bijgewerkt",
-        "workspaceDeleted": "Werkruimte verwijderd",
-        "workspaceDuplicated": "Werkruimte gedupliceerd",
-        "saveFailed": "Het opslaan van de werkruimte is mislukt.",
-        "updateFailed": "Het bijwerken van de werkruimte is mislukt.",
-        "deleteFailed": "Het verwijderen van de werkruimte is mislukt.",
-        "duplicateFailed": "Het dupliceren van de werkruimte is mislukt.",
-        "loadFailed": "Het laden van de werkruimtes is mislukt.",
-        "applyFailed": "Het toepassen van de werkruimte is mislukt.",
-        "deleteWorkspaceTitle": "Werkruimte verwijderen",
-        "deleteWorkspaceDescription": "Weet je zeker dat je \"{{name}}\" wilt verwijderen? Dit kan niet ongedaan gemaakt worden.",
-        "noWorkspaces": "Er zijn nog geen werkruimtes opgeslagen. Sla je huidige tabbladindeling op om te beginnen.",
-        "tabCount": "{{count}} tab",
-        "tabCount_other": "{{count}} tabs",
-        "apply": "Toepassen",
-        "applyConfirmTitle": "Werkruimte toepassen",
-        "applyConfirmDescription": "Door \"{{name}}\" toe te passen, worden uw huidige tabbladen gesloten en vervangen door de opgeslagen indeling van deze werkruimte. Niet-opgeslagen wijzigingen in uw huidige lay-out gaan verloren.",
-        "applyConfirmButton": "Werkruimte toepassen",
-        "updateWithCurrent": "Update met de huidige",
-        "updateWithCurrentConfirm": "Wil je \"{{name}}\" overschrijven met je huidige tabindeling?",
-        "rename": "Naam wijzigen",
-        "duplicate": "Duplicaat",
-        "duplicateNameSuffix": "{{name}} (kopiëren)",
-        "setDefault": "Instellen als standaard",
-        "unsetDefault": "Verwijderen als standaard",
-        "defaultBadge": "Standaard",
-        "lastSession": "Laatste sessie",
-        "lastSessionDescription": "Wordt automatisch bijgewerkt met uw meest recente tabbladindeling. Gebruik deze instelling om uw geopende tabbladen te herstellen.",
-        "lastUsed": "Laatst gebruikt {{time}}",
-        "neverUsed": "Nooit gesolliciteerd",
-        "tabsSkipped": "Werkruimte toegepast, maar {{count}} tabblad(en) zijn overgeslagen omdat hun host niet meer bestaat: {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}s geleden",
-          "minutes": "{{count}}m geleden",
-          "hours": "{{count}}uur geleden",
-          "days": "{{count}}dagen geleden"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Werkruimtes"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Werkruimtes",
-    "workflow_workspaces_desc": "Sla een set geopende tabbladen op en open de volledige lay-out later opnieuw."
-  },
-  "permissions": {
-    "use": {
-      "title": "Werkruimtes gebruiken",
-      "description": "Tabbladindelingen opslaan, toepassen en beheren."
-    }
-  },
-  "hosts": {
-    "docsLink": "Documenten bekijken"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/no_NO.json b/plugins/workspaces/locales/translated/no_NO.json
deleted file mode 100644
index 2fe719bf9..000000000
--- a/plugins/workspaces/locales/translated/no_NO.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Arbeidsområder",
-        "saveCurrent": "Lagre gjeldende",
-        "saveCurrentTitle": "Lagre gjeldende arbeidsområde",
-        "saveCurrentDescription": "Lagre alle åpne faner, delte oppsett og ruteoppsett som et nytt navngitt arbeidsområde.",
-        "nameLabel": "Navn",
-        "namePlaceholder": "f.eks. produktfeilsøking",
-        "nameRequired": "Arbeidsområdenavn er obligatorisk",
-        "colorLabel": "Farge",
-        "workspaceCreated": "Arbeidsområdet er lagret",
-        "workspaceUpdated": "Arbeidsområdet er oppdatert",
-        "workspaceDeleted": "Arbeidsområdet er slettet",
-        "workspaceDuplicated": "Arbeidsområdet er duplisert",
-        "saveFailed": "Kunne ikke lagre arbeidsområdet",
-        "updateFailed": "Kunne ikke oppdatere arbeidsområdet",
-        "deleteFailed": "Kunne ikke slette arbeidsområdet",
-        "duplicateFailed": "Kunne ikke duplisere arbeidsområdet",
-        "loadFailed": "Kunne ikke laste inn arbeidsområder",
-        "applyFailed": "Kunne ikke bruke arbeidsområdet",
-        "deleteWorkspaceTitle": "Slett arbeidsområde",
-        "deleteWorkspaceDescription": "Er du sikker på at du vil slette «{{name}}»? Dette kan ikke angres.",
-        "noWorkspaces": "Ingen lagrede arbeidsområder ennå. Lagre den nåværende faneoppsettet for å komme i gang.",
-        "tabCount": "{{count}} fane",
-        "tabCount_other": "{{count}} faner",
-        "apply": "Søke",
-        "applyConfirmTitle": "Bruk arbeidsområde",
-        "applyConfirmDescription": "Hvis du bruker «{{name}}», lukkes de nåværende fanene dine og erstattes med den lagrede plasseringen i dette arbeidsområdet. Ulagrede endringer i den nåværende layouten vil gå tapt.",
-        "applyConfirmButton": "Bruk arbeidsområde",
-        "updateWithCurrent": "Oppdater med gjeldende",
-        "updateWithCurrentConfirm": "Vil du overskrive «{{name}}» med din nåværende tabulatorordning?",
-        "rename": "Gi nytt navn",
-        "duplicate": "Kopiere",
-        "duplicateNameSuffix": "{{name}} (kopi)",
-        "setDefault": "Angi som standard",
-        "unsetDefault": "Fjern som standard",
-        "defaultBadge": "Misligholde",
-        "lastSession": "Siste økt",
-        "lastSessionDescription": "Oppdateres automatisk med den nyeste faneoppsettet ditt. Bruk det for å gjenopprette det du hadde åpent.",
-        "lastUsed": "Sist brukt {{time}}",
-        "neverUsed": "Aldri brukt",
-        "tabsSkipped": "Arbeidsområde brukt, men {{count}} fane(r) ble hoppet over fordi verten deres ikke lenger finnes: {{names}}",
-        "timeAgo": {
-          "seconds": "For {{count}}sekunder siden",
-          "minutes": "For {{count}}minutter siden",
-          "hours": "for {{count}}t siden",
-          "days": "for {{count}}dager siden"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Arbeidsområder"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Arbeidsområder",
-    "workflow_workspaces_desc": "Lagre et sett med åpne faner og åpne hele layouten på nytt senere."
-  },
-  "permissions": {
-    "use": {
-      "title": "Bruk arbeidsområder",
-      "description": "Lagre, bruk og administrer lagrede faneoppsett."
-    }
-  },
-  "hosts": {
-    "docsLink": "Vis dokumenter"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/pl_PL.json b/plugins/workspaces/locales/translated/pl_PL.json
deleted file mode 100644
index ab6ae6af1..000000000
--- a/plugins/workspaces/locales/translated/pl_PL.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Obszary robocze",
-        "saveCurrent": "Zapisz bieżące",
-        "saveCurrentTitle": "Zapisz bieżący obszar roboczy",
-        "saveCurrentDescription": "Zapisz każdą otwartą kartę, podzielony układ i rozmieszczenie paneli jako nowy nazwany obszar roboczy.",
-        "nameLabel": "Nazwa",
-        "namePlaceholder": "np. Debugowanie produkcji",
-        "nameRequired": "Nazwa obszaru roboczego jest wymagana",
-        "colorLabel": "Kolor",
-        "workspaceCreated": "Zapisano obszar roboczy",
-        "workspaceUpdated": "Zaktualizowano obszar roboczy",
-        "workspaceDeleted": "Usunięto obszar roboczy",
-        "workspaceDuplicated": "Zduplikowano obszar roboczy",
-        "saveFailed": "Nie udało się zapisać obszaru roboczego",
-        "updateFailed": "Nie udało się zaktualizować obszaru roboczego",
-        "deleteFailed": "Nie udało się usunąć obszaru roboczego",
-        "duplicateFailed": "Nie udało się zduplikować obszaru roboczego",
-        "loadFailed": "Nie udało się załadować obszarów roboczych",
-        "applyFailed": "Nie udało się zastosować obszaru roboczego",
-        "deleteWorkspaceTitle": "Usuń obszar roboczy",
-        "deleteWorkspaceDescription": "Czy na pewno chcesz usunąć „{{name}}”? Tego nie można cofnąć.",
-        "noWorkspaces": "Brak zapisanych obszarów roboczych. Zapisz aktualny układ kart, aby rozpocząć.",
-        "tabCount": "{{count}} karta",
-        "tabCount_other": "{{count}} karty",
-        "apply": "Zastosuj",
-        "applyConfirmTitle": "Zastosuj obszar roboczy",
-        "applyConfirmDescription": "Zastosowanie „{{name}}” zamknie bieżące karty i zastąpi je układem zapisanym w tym obszarze roboczym. Niezapisane zmiany bieżącego układu zostaną utracone.",
-        "applyConfirmButton": "Zastosuj obszar roboczy",
-        "updateWithCurrent": "Zaktualizuj bieżącym",
-        "updateWithCurrentConfirm": "Nadpisać „{{name}}” obecnym układem kart?",
-        "rename": "Zmień nazwę",
-        "duplicate": "Duplikuj",
-        "duplicateNameSuffix": "{{name}} (kopia)",
-        "setDefault": "Ustaw jako domyślne",
-        "unsetDefault": "Usuń jako domyślne",
-        "defaultBadge": "Domyślny",
-        "lastSession": "Ostatnia sesja",
-        "lastSessionDescription": "Automatycznie aktualizowany o najnowszy układ kart. Zastosuj go, aby przywrócić to, co było otwarte.",
-        "lastUsed": "Ostatnio użyte {{time}}",
-        "neverUsed": "Nigdy nie zastosowano",
-        "tabsSkipped": "Zastosowano obszar roboczy, ale {{count}} kart zostało pominiętych, ponieważ ich host już nie istnieje: {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}s temu",
-          "minutes": "{{count}} min temu",
-          "hours": "{{count}} godz. temu",
-          "days": "{{count}} dni temu"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Obszary robocze"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Obszary robocze",
-    "workflow_workspaces_desc": "Zapisz zestaw otwartych kart i otwórz cały układ później."
-  },
-  "permissions": {
-    "use": {
-      "title": "Użyj obszarów roboczych",
-      "description": "Zapisz, zastosuj i zarządzaj zapisanymi układami kart."
-    }
-  },
-  "hosts": {
-    "docsLink": "Zobacz dokumentację"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/pt_BR.json b/plugins/workspaces/locales/translated/pt_BR.json
deleted file mode 100644
index 96d35530b..000000000
--- a/plugins/workspaces/locales/translated/pt_BR.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Espaços de trabalho",
-        "saveCurrent": "Salvar atual",
-        "saveCurrentTitle": "Salvar espaço de trabalho atual",
-        "saveCurrentDescription": "Salve cada aba aberta, layout dividido e disposição de painéis como um novo espaço de trabalho nomeado.",
-        "nameLabel": "Nome",
-        "namePlaceholder": "Exemplo: Depuração de Produção",
-        "nameRequired": "É obrigatório dar um nome ao espaço de trabalho.",
-        "colorLabel": "Cor",
-        "workspaceCreated": "Espaço de trabalho salvo",
-        "workspaceUpdated": "Espaço de trabalho atualizado",
-        "workspaceDeleted": "Espaço de trabalho excluído",
-        "workspaceDuplicated": "Espaço de trabalho duplicado",
-        "saveFailed": "Falha ao salvar o espaço de trabalho",
-        "updateFailed": "Falha ao atualizar o espaço de trabalho",
-        "deleteFailed": "Falha ao excluir o espaço de trabalho",
-        "duplicateFailed": "Falha ao duplicar o espaço de trabalho",
-        "loadFailed": "Falha ao carregar os espaços de trabalho.",
-        "applyFailed": "Falha ao aplicar o espaço de trabalho",
-        "deleteWorkspaceTitle": "Excluir espaço de trabalho",
-        "deleteWorkspaceDescription": "Tem certeza de que deseja excluir \"{{name}}\"? Esta ação não pode ser desfeita.",
-        "noWorkspaces": "Ainda não há espaços de trabalho salvos. Salve sua configuração atual de abas para começar.",
-        "tabCount": "{{count}} aba",
-        "tabCount_other": "{{count}} abas",
-        "apply": "Aplicar",
-        "applyConfirmTitle": "Aplicar Espaço de Trabalho",
-        "applyConfirmDescription": "Aplicar \"{{name}}\" fechará suas abas atuais e as substituirá pela configuração salva deste espaço de trabalho. Alterações não salvas no seu layout atual serão perdidas.",
-        "applyConfirmButton": "Aplicar Espaço de Trabalho",
-        "updateWithCurrent": "Atualizar com as informações atuais",
-        "updateWithCurrentConfirm": "Substituir \"{{name}}\" pela sua configuração de tabulação atual?",
-        "rename": "Renomear",
-        "duplicate": "Duplicado",
-        "duplicateNameSuffix": "{{name}} (copiar)",
-        "setDefault": "Definir como padrão",
-        "unsetDefault": "Remover como padrão",
-        "defaultBadge": "Padrão",
-        "lastSession": "Última sessão",
-        "lastSessionDescription": "Atualizado automaticamente com a sua última configuração de abas. Aplique para recuperar o que estava aberto.",
-        "lastUsed": "Última utilização {{time}}",
-        "neverUsed": "Nunca aplicado",
-        "tabsSkipped": "O espaço de trabalho foi aplicado, mas {{count}} abas foram ignoradas porque seu host não existe mais: {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}s atrás",
-          "minutes": "{{count}}m atrás",
-          "hours": "{{count}}h atrás",
-          "days": "{{count}}há alguns dias"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Espaços de trabalho"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Espaços de trabalho",
-    "workflow_workspaces_desc": "Salve um conjunto de abas abertas e reabra todo o layout mais tarde."
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilize espaços de trabalho",
-      "description": "Salve, aplique e gerencie layouts de abas salvos."
-    }
-  },
-  "hosts": {
-    "docsLink": "Documentação"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/pt_PT.json b/plugins/workspaces/locales/translated/pt_PT.json
deleted file mode 100644
index 55b683c0c..000000000
--- a/plugins/workspaces/locales/translated/pt_PT.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Espaços de trabalho",
-        "saveCurrent": "Guardar atual",
-        "saveCurrentTitle": "Guardar espaço de trabalho atual",
-        "saveCurrentDescription": "Guarde cada separador aberto, layout dividido e disposição de painéis como um novo espaço de trabalho nomeado.",
-        "nameLabel": "Nome",
-        "namePlaceholder": "Exemplo: Depuração de Produção",
-        "nameRequired": "É obrigatório dar um nome ao espaço de trabalho.",
-        "colorLabel": "Cor",
-        "workspaceCreated": "Espaço de trabalho guardado",
-        "workspaceUpdated": "Espaço de trabalho atualizado",
-        "workspaceDeleted": "Espaço de trabalho excluído",
-        "workspaceDuplicated": "Espaço de trabalho duplicado",
-        "saveFailed": "Falha ao guardar o espaço de trabalho",
-        "updateFailed": "Falha ao atualizar o espaço de trabalho",
-        "deleteFailed": "Falha ao eliminar o espaço de trabalho",
-        "duplicateFailed": "Falha ao duplicar o espaço de trabalho",
-        "loadFailed": "Falha ao carregar os espaços de trabalho.",
-        "applyFailed": "Falha ao aplicar o espaço de trabalho",
-        "deleteWorkspaceTitle": "Apagar espaço de trabalho",
-        "deleteWorkspaceDescription": "Tem a certeza que pretende eliminar \"{{name}}\"? Esta ação não pode ser anulada.",
-        "noWorkspaces": "Ainda não há espaços de trabalho guardados. Guarde a sua configuração atual de separadores para começar.",
-        "tabCount": "{{count}} separador",
-        "tabCount_other": "{{count}} separadores",
-        "apply": "Aplicar",
-        "applyConfirmTitle": "Aplicar Espaço de Trabalho",
-        "applyConfirmDescription": "Aplicar \"{{name}}\" fechará os seus separadores atuais e substituí-los-á pela configuração guardada deste espaço de trabalho. As alterações não guardadas no seu layout atual serão perdidas.",
-        "applyConfirmButton": "Aplicar Espaço de Trabalho",
-        "updateWithCurrent": "Atualizar com as informações atuais",
-        "updateWithCurrentConfirm": "Substituir \"{{name}}\" pela sua configuração de tabulação atual?",
-        "rename": "Renomear",
-        "duplicate": "Duplicado",
-        "duplicateNameSuffix": "{{name}} (copiar)",
-        "setDefault": "Definir como padrão",
-        "unsetDefault": "Remover como padrão",
-        "defaultBadge": "Predefinição",
-        "lastSession": "Última sessão",
-        "lastSessionDescription": "Atualizado automaticamente com a sua última configuração de separadores. Aplique para recuperar o que estava aberto.",
-        "lastUsed": "Última utilização {{time}}",
-        "neverUsed": "Nunca aplicado",
-        "tabsSkipped": "O espaço de trabalho foi aplicado, mas {{count}} separadores foram ignorados porque o seu host já não existe: {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}s atrás",
-          "minutes": "há {{count}} min",
-          "hours": "há {{count}} h",
-          "days": "há {{count}} d"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Espaços de trabalho"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Espaços de trabalho",
-    "workflow_workspaces_desc": "Guarde um conjunto de separadores abertos e reabra todo o layout mais tarde."
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilize espaços de trabalho",
-      "description": "Guarde, aplique e gerencie layouts de separadores guardados."
-    }
-  },
-  "hosts": {
-    "docsLink": "Ver documentação"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/ro_RO.json b/plugins/workspaces/locales/translated/ro_RO.json
deleted file mode 100644
index 03afcffc0..000000000
--- a/plugins/workspaces/locales/translated/ro_RO.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Spații de lucru",
-        "saveCurrent": "Salvați curentul",
-        "saveCurrentTitle": "Salvați spațiul de lucru curent",
-        "saveCurrentDescription": "Salvați fiecare filă deschisă, aspect divizat și aranjament de panouri ca un spațiu de lucru nou denumit.",
-        "nameLabel": "Nume",
-        "namePlaceholder": "de exemplu, Depanare produs",
-        "nameRequired": "Numele spațiului de lucru este obligatoriu",
-        "colorLabel": "Culoare",
-        "workspaceCreated": "Spațiul de lucru a fost salvat",
-        "workspaceUpdated": "Spațiul de lucru a fost actualizat",
-        "workspaceDeleted": "Spațiul de lucru a fost șters",
-        "workspaceDuplicated": "Spațiul de lucru a fost duplicat",
-        "saveFailed": "Spațiul de lucru nu a putut fi salvat",
-        "updateFailed": "Spațiul de lucru nu a putut fi actualizat",
-        "deleteFailed": "Nu s-a putut șterge spațiul de lucru",
-        "duplicateFailed": "Spațiul de lucru nu a putut fi duplicat",
-        "loadFailed": "Nu s-au putut încărca spațiile de lucru",
-        "applyFailed": "Nu s-a putut aplica spațiul de lucru",
-        "deleteWorkspaceTitle": "Ștergeți spațiul de lucru",
-        "deleteWorkspaceDescription": "Sigur vrei să ștergi „{{name}}”? Această acțiune nu poate fi anulată.",
-        "noWorkspaces": "Încă nu există spații de lucru salvate. Salvați aranjamentul actual al filelor pentru a începe.",
-        "tabCount": "fila {{count}}",
-        "tabCount_other": "{{count}} tab-uri",
-        "apply": "Aplică",
-        "applyConfirmTitle": "Aplicați spațiul de lucru",
-        "applyConfirmDescription": "Aplicarea comenzii „{{name}}” va închide filele curente și le va înlocui cu aranjamentul salvat al acestui spațiu de lucru. Modificările nesalvate ale aspectului curent se vor pierde.",
-        "applyConfirmButton": "Aplicați spațiul de lucru",
-        "updateWithCurrent": "Actualizare cu curent",
-        "updateWithCurrentConfirm": "Suprascrieți „{{name}}” cu aranjamentul actual al tabulatorilor?",
-        "rename": "Redenumire",
-        "duplicate": "Duplicat",
-        "duplicateNameSuffix": "{{name}} (copie)",
-        "setDefault": "Setare ca implicită",
-        "unsetDefault": "Eliminare ca implicită",
-        "defaultBadge": "Implicit",
-        "lastSession": "Ultima sesiune",
-        "lastSessionDescription": "Actualizat automat cu cea mai recentă aranjare a filelor. Aplică-l pentru a recupera ce aveai deschis.",
-        "lastUsed": "Ultima utilizare {{time}}",
-        "neverUsed": "Niciodată aplicat",
-        "tabsSkipped": "Spațiul de lucru a fost aplicat, dar {{count}} filă(e) au fost omise deoarece gazda lor nu mai există: {{names}}",
-        "timeAgo": {
-          "seconds": "Acum {{count}}secunde",
-          "minutes": "{{count}}acum câteva minute",
-          "hours": "{{count}}acum o oră",
-          "days": "{{count}}zile în urmă"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Spații de lucru"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Spații de lucru",
-    "workflow_workspaces_desc": "Salvați un set de file deschise și redeschideți întregul aspect mai târziu."
-  },
-  "permissions": {
-    "use": {
-      "title": "Utilizați spațiile de lucru",
-      "description": "Salvați, aplicați și gestionați machetele de file salvate."
-    }
-  },
-  "hosts": {
-    "docsLink": "Vizualizați documentele"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/ru_RU.json b/plugins/workspaces/locales/translated/ru_RU.json
deleted file mode 100644
index cb52548f0..000000000
--- a/plugins/workspaces/locales/translated/ru_RU.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Рабочие места",
-        "saveCurrent": "Сохранить текущий",
-        "saveCurrentTitle": "Сохранить текущее рабочее пространство",
-        "saveCurrentDescription": "Сохраните все открытые вкладки, разделенные окна и расположение панелей в виде новых именованных рабочих областей.",
-        "nameLabel": "Название",
-        "namePlaceholder": "например, отладка в рабочей среде.",
-        "nameRequired": "Название рабочей области обязательно для ввода.",
-        "colorLabel": "Цвет",
-        "workspaceCreated": "Рабочее пространство сохранено",
-        "workspaceUpdated": "Рабочее пространство обновлено",
-        "workspaceDeleted": "Рабочее пространство удалено",
-        "workspaceDuplicated": "Рабочее пространство дублировано",
-        "saveFailed": "Не удалось сохранить рабочее пространство.",
-        "updateFailed": "Не удалось обновить рабочее пространство.",
-        "deleteFailed": "Не удалось удалить рабочее пространство.",
-        "duplicateFailed": "Не удалось создать дубликат рабочего пространства.",
-        "loadFailed": "Не удалось загрузить рабочие пространства.",
-        "applyFailed": "Не удалось применить рабочее пространство",
-        "deleteWorkspaceTitle": "Удалить рабочее пространство",
-        "deleteWorkspaceDescription": "Вы уверены, что хотите удалить \"{{name}}\"? Это действие необратимо.",
-        "noWorkspaces": "Пока нет сохраненных рабочих пространств. Сохраните текущее расположение вкладок, чтобы начать работу.",
-        "tabCount": "{{count}} вкладка",
-        "tabCount_other": "{{count}} вкладки",
-        "apply": "Применить",
-        "applyConfirmTitle": "Применить рабочее пространство",
-        "applyConfirmDescription": "Применение \"{{name}}\" закроет текущие вкладки и заменит их сохраненным расположением элементов в этом рабочем пространстве. Несохраненные изменения текущего расположения будут потеряны.",
-        "applyConfirmButton": "Применить рабочее пространство",
-        "updateWithCurrent": "Обновить с учетом текущих изменений",
-        "updateWithCurrentConfirm": "Заменить \"{{name}}\" на текущую компоновку вкладок?",
-        "rename": "Переименовать",
-        "duplicate": "Дубликат",
-        "duplicateNameSuffix": "{{name}} (копия)",
-        "setDefault": "Установить как значение по умолчанию",
-        "unsetDefault": "Удалить как значение по умолчанию",
-        "defaultBadge": "По умолчанию",
-        "lastSession": "Последняя сессия",
-        "lastSessionDescription": "Автоматическое обновление с учетом вашего последнего расположения вкладок. Примените изменения, чтобы восстановить открытые ранее вкладки.",
-        "lastUsed": "Последнее использование {{time}}",
-        "neverUsed": "Никогда не подавал заявку",
-        "tabsSkipped": "Рабочее пространство применено, но вкладки {{count}} были пропущены, поскольку их хост больше не существует: {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}s назад",
-          "minutes": "{{count}}м назад",
-          "hours": "{{count}}ч назад",
-          "days": "{{count}}д назад"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Рабочие места"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Рабочие места",
-    "workflow_workspaces_desc": "Сохраните набор открытых вкладок и откройте весь интерфейс позже."
-  },
-  "permissions": {
-    "use": {
-      "title": "Используйте рабочие пространства",
-      "description": "Сохраняйте, применяйте и управляйте сохраненными макетами вкладок."
-    }
-  },
-  "hosts": {
-    "docsLink": "Документация"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/sr_SP.json b/plugins/workspaces/locales/translated/sr_SP.json
deleted file mode 100644
index ef9c72e8c..000000000
--- a/plugins/workspaces/locales/translated/sr_SP.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Радни простори",
-        "saveCurrent": "Сачувај тренутно",
-        "saveCurrentTitle": "Сачувај тренутни радни простор",
-        "saveCurrentDescription": "Сачувајте сваку отворену картицу, подељени распоред и распоред окна као нови именовани радни простор.",
-        "nameLabel": "Име",
-        "namePlaceholder": "нпр. Отклањање грешака у производном систему",
-        "nameRequired": "Назив радног простора је обавезан",
-        "colorLabel": "Боја",
-        "workspaceCreated": "Радни простор је сачуван",
-        "workspaceUpdated": "Радни простор је ажуриран",
-        "workspaceDeleted": "Радни простор је обрисан",
-        "workspaceDuplicated": "Радни простор је дуплиран",
-        "saveFailed": "Чување радног простора није успело",
-        "updateFailed": "Ажурирање радног простора није успело",
-        "deleteFailed": "Брисање радног простора није успело",
-        "duplicateFailed": "Дуплирање радног простора није успело",
-        "loadFailed": "Учитавање радних простора није успело",
-        "applyFailed": "Примена радног простора није успела",
-        "deleteWorkspaceTitle": "Обриши радни простор",
-        "deleteWorkspaceDescription": "Да ли сте сигурни да желите да обришете „{{name}}“? Ова радња се не може поништити.",
-        "noWorkspaces": "Још увек нема сачуваних радних простора. Сачувајте тренутни распоред картица да бисте започели.",
-        "tabCount": "{{count}} картица",
-        "tabCount_other": "{{count}} картице",
-        "apply": "Примени",
-        "applyConfirmTitle": "Примени радни простор",
-        "applyConfirmDescription": "Применом „{{name}}“ затворићете тренутне картице и заменити их сачуваним распоредом овог радног простора. Несачуване измене тренутног распореда биће изгубљене.",
-        "applyConfirmButton": "Примени радни простор",
-        "updateWithCurrent": "Ажурирај са Тренутним",
-        "updateWithCurrentConfirm": "Преписати „{{name}}“ тренутним распоредом табулатора?",
-        "rename": "Преименуј",
-        "duplicate": "Дупликат",
-        "duplicateNameSuffix": "{{name}} (копија)",
-        "setDefault": "Постави као подразумевано",
-        "unsetDefault": "Уклони као подразумевано",
-        "defaultBadge": "Подразумевано",
-        "lastSession": "Последња сесија",
-        "lastSessionDescription": "Аутоматски се ажурира са вашим најновијим распоредом картица. Примените га да бисте вратили оно што сте имали отворено.",
-        "lastUsed": "Последња употреба {{time}}",
-        "neverUsed": "Никада примењено",
-        "tabsSkipped": "Радни простор је примењен, али је {{count}} картица прескочено јер њихов хост више не постоји: {{names}}",
-        "timeAgo": {
-          "seconds": "Пре {{count}}сек",
-          "minutes": "{{count}}пре мин",
-          "hours": "{{count}}пре сати",
-          "days": "{{count}}пре д"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Радни простори"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Радни простори",
-    "workflow_workspaces_desc": "Сачувајте скуп отворених картица и поново отворите цео распоред касније."
-  },
-  "permissions": {
-    "use": {
-      "title": "Користите радне просторе",
-      "description": "Сачувајте, примените и управљајте сачуваним распоредима картица."
-    }
-  },
-  "hosts": {
-    "docsLink": "Прикажи документе"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/sv_SE.json b/plugins/workspaces/locales/translated/sv_SE.json
deleted file mode 100644
index d660d7542..000000000
--- a/plugins/workspaces/locales/translated/sv_SE.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Arbetsytor",
-        "saveCurrent": "Spara aktuell",
-        "saveCurrentTitle": "Spara aktuell arbetsyta",
-        "saveCurrentDescription": "Spara alla öppna flikar, delade layouter och rutorrangemang som en ny namngiven arbetsyta.",
-        "nameLabel": "Namn",
-        "namePlaceholder": "t.ex. produktfelsökning",
-        "nameRequired": "Arbetsytans namn krävs",
-        "colorLabel": "Färg",
-        "workspaceCreated": "Arbetsytan sparad",
-        "workspaceUpdated": "Arbetsytan uppdaterad",
-        "workspaceDeleted": "Arbetsytan raderad",
-        "workspaceDuplicated": "Arbetsyta duplicerad",
-        "saveFailed": "Kunde inte spara arbetsytan",
-        "updateFailed": "Misslyckades med att uppdatera arbetsytan",
-        "deleteFailed": "Misslyckades med att ta bort arbetsytan",
-        "duplicateFailed": "Misslyckades med att duplicera arbetsytan",
-        "loadFailed": "Misslyckades med att läsa in arbetsytor",
-        "applyFailed": "Kunde inte tillämpa arbetsytan",
-        "deleteWorkspaceTitle": "Ta bort arbetsyta",
-        "deleteWorkspaceDescription": "Är du säker på att du vill ta bort \"{{name}}\"? Detta kan inte ångras.",
-        "noWorkspaces": "Inga sparade arbetsytor ännu. Spara din nuvarande flikstruktur för att komma igång.",
-        "tabCount": "{{count}} flik",
-        "tabCount_other": "{{count}} flikar",
-        "apply": "Tillämpas",
-        "applyConfirmTitle": "Använd arbetsyta",
-        "applyConfirmDescription": "Om du använder \"{{name}}\" stängs dina nuvarande flikar och ersätts med den här arbetsytans sparade layout. Osparade ändringar i din nuvarande layout kommer att gå förlorade.",
-        "applyConfirmButton": "Använd arbetsyta",
-        "updateWithCurrent": "Uppdatera med aktuellt",
-        "updateWithCurrentConfirm": "Skriv över \"{{name}}\" med din nuvarande tabulering?",
-        "rename": "Döpa om",
-        "duplicate": "Duplicera",
-        "duplicateNameSuffix": "{{name}} (kopiera)",
-        "setDefault": "Ange som standard",
-        "unsetDefault": "Ta bort som standard",
-        "defaultBadge": "Standard",
-        "lastSession": "Senaste sessionen",
-        "lastSessionDescription": "Uppdateras automatiskt med din senaste flikstruktur. Använd den för att återställa det du hade öppet.",
-        "lastUsed": "Senast använd {{time}}",
-        "neverUsed": "Aldrig tillämpad",
-        "tabsSkipped": "Arbetsyta tillämpad, men {{count}} flikar hoppades över eftersom deras värd inte längre finns: {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}sekunder sedan",
-          "minutes": "för {{count}}minuter sedan",
-          "hours": "för {{count}}timmar sedan",
-          "days": "för {{count}}dagar sedan"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Arbetsytor"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Arbetsytor",
-    "workflow_workspaces_desc": "Spara en uppsättning öppna flikar och öppna hela layouten igen senare."
-  },
-  "permissions": {
-    "use": {
-      "title": "Använd arbetsytor",
-      "description": "Spara, tillämpa och hantera sparade fliklayouter."
-    }
-  },
-  "hosts": {
-    "docsLink": "Visa dokument"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/th_TH.json b/plugins/workspaces/locales/translated/th_TH.json
deleted file mode 100644
index d0bfed881..000000000
--- a/plugins/workspaces/locales/translated/th_TH.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "พื้นที่ทำงาน",
-        "saveCurrent": "บันทึกปัจจุบัน",
-        "saveCurrentTitle": "บันทึกพื้นที่ทำงานปัจจุบัน",
-        "saveCurrentDescription": "บันทึกแท็บที่เปิดอยู่ทั้งหมด รูปแบบการแบ่งหน้าจอ และการจัดเรียงบานหน้าต่างทั้งหมดเป็นพื้นที่ทำงานใหม่ที่มีชื่อ",
-        "nameLabel": "ชื่อ",
-        "namePlaceholder": "เช่น การดีบักผลิตภัณฑ์",
-        "nameRequired": "จำเป็นต้องระบุชื่อพื้นที่ทำงาน",
-        "colorLabel": "สี",
-        "workspaceCreated": "พื้นที่ทำงานได้รับการบันทึกแล้ว",
-        "workspaceUpdated": "พื้นที่ทำงานได้รับการอัปเดตแล้ว",
-        "workspaceDeleted": "พื้นที่ทำงานถูกลบแล้ว",
-        "workspaceDuplicated": "พื้นที่ทำงานถูกทำซ้ำ",
-        "saveFailed": "ไม่สามารถบันทึกพื้นที่ทำงานได้",
-        "updateFailed": "ไม่สามารถอัปเดตพื้นที่ทำงานได้",
-        "deleteFailed": "ไม่สามารถลบพื้นที่ทำงานได้",
-        "duplicateFailed": "ไม่สามารถคัดลอกพื้นที่ทำงานได้",
-        "loadFailed": "ไม่สามารถโหลดพื้นที่ทำงานได้",
-        "applyFailed": "ไม่สามารถใช้งานพื้นที่ทำงานได้",
-        "deleteWorkspaceTitle": "ลบพื้นที่ทำงาน",
-        "deleteWorkspaceDescription": "คุณแน่ใจหรือไม่ว่าต้องการลบ \"{{name}}\"? การดำเนินการนี้ไม่สามารถย้อนกลับได้",
-        "noWorkspaces": "ยังไม่มีการบันทึกพื้นที่ทำงานใดๆ บันทึกการจัดเรียงแท็บปัจจุบันของคุณเพื่อเริ่มต้นใช้งาน",
-        "tabCount": "{{count}} แท็บ",
-        "tabCount_other": "{{count}} แท็บ",
-        "apply": "นำมาใช้",
-        "applyConfirmTitle": "ใช้พื้นที่ทำงาน",
-        "applyConfirmDescription": "การใช้ \"{{name}}\" จะปิดแท็บปัจจุบันของคุณและแทนที่ด้วยการจัดเรียงที่บันทึกไว้ของพื้นที่ทำงานนี้ การเปลี่ยนแปลงที่ยังไม่ได้บันทึกในเค้าโครงปัจจุบันของคุณจะหายไป",
-        "applyConfirmButton": "ใช้พื้นที่ทำงาน",
-        "updateWithCurrent": "อัปเดตด้วยข้อมูลปัจจุบัน",
-        "updateWithCurrentConfirm": "เขียนทับ \"{{name}}\" ด้วยการจัดเรียงแท็บปัจจุบันของคุณหรือไม่?",
-        "rename": "เปลี่ยนชื่อ",
-        "duplicate": "ทำซ้ำ",
-        "duplicateNameSuffix": "{{name}} (คัดลอก)",
-        "setDefault": "ตั้งเป็นค่าเริ่มต้น",
-        "unsetDefault": "ลบออกเป็นค่าเริ่มต้น",
-        "defaultBadge": "ค่าเริ่มต้น",
-        "lastSession": "เซสชั่นสุดท้าย",
-        "lastSessionDescription": "ระบบจะอัปเดตการจัดเรียงแท็บล่าสุดของคุณโดยอัตโนมัติ ใช้เพื่อกู้คืนแท็บที่คุณเปิดไว้ก่อนหน้านี้",
-        "lastUsed": "ใช้งานครั้งล่าสุด {{time}}",
-        "neverUsed": "ไม่เคยสมัคร",
-        "tabsSkipped": "พื้นที่ทำงานถูกใช้งานแล้ว แต่แท็บ {{count}} ถูกข้ามไปเนื่องจากโฮสต์ของแท็บเหล่านั้นไม่มีอยู่แล้ว: {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}วินาทีที่แล้ว",
-          "minutes": "{{count}}นาทีที่แล้ว",
-          "hours": "{{count}}ชั่วโมงที่แล้ว",
-          "days": "{{count}}วันก่อน"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "พื้นที่ทำงาน"
-  },
-  "onboarding": {
-    "workflow_workspaces": "พื้นที่ทำงาน",
-    "workflow_workspaces_desc": "บันทึกชุดแท็บที่เปิดอยู่ แล้วค่อยเปิดเค้าโครงทั้งหมดอีกครั้งในภายหลัง"
-  },
-  "permissions": {
-    "use": {
-      "title": "ใช้พื้นที่ทำงาน",
-      "description": "บันทึก นำไปใช้ และจัดการรูปแบบแท็บที่บันทึกไว้"
-    }
-  },
-  "hosts": {
-    "docsLink": "ดูเอกสาร"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/tr_TR.json b/plugins/workspaces/locales/translated/tr_TR.json
deleted file mode 100644
index 268f61ce8..000000000
--- a/plugins/workspaces/locales/translated/tr_TR.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Çalışma Alanları",
-        "saveCurrent": "Mevcut Olanı Kaydet",
-        "saveCurrentTitle": "Geçerli Çalışma Alanını Kaydet",
-        "saveCurrentDescription": "Açık olan her sekmeyi, bölünmüş düzeni ve bölme düzenini yeni bir adlandırılmış çalışma alanı olarak kaydedin.",
-        "nameLabel": "Ad",
-        "namePlaceholder": "Örneğin, Üretim Hata Ayıklaması",
-        "nameRequired": "Çalışma alanı adı zorunludur.",
-        "colorLabel": "Renk",
-        "workspaceCreated": "Çalışma alanı kaydedildi.",
-        "workspaceUpdated": "Çalışma alanı güncellendi.",
-        "workspaceDeleted": "Çalışma alanı silindi",
-        "workspaceDuplicated": "Çalışma alanı kopyalandı",
-        "saveFailed": "Çalışma alanını kaydetme başarısız oldu.",
-        "updateFailed": "Çalışma alanını güncelleme başarısız oldu.",
-        "deleteFailed": "Çalışma alanını silme işlemi başarısız oldu.",
-        "duplicateFailed": "Çalışma alanını çoğaltma başarısız oldu.",
-        "loadFailed": "Çalışma alanları yüklenemedi.",
-        "applyFailed": "Çalışma alanı uygulanamadı.",
-        "deleteWorkspaceTitle": "Çalışma Alanını Sil",
-        "deleteWorkspaceDescription": "\"{{name}}\" öğesini silmek istediğinizden emin misiniz? Bu işlem geri alınamaz.",
-        "noWorkspaces": "Henüz kaydedilmiş çalışma alanı yok. Başlamak için mevcut sekme düzeninizi kaydedin.",
-        "tabCount": "{{count}} sekmesi",
-        "tabCount_other": "{{count}} sekmeler",
-        "apply": "Uygula",
-        "applyConfirmTitle": "Çalışma Alanına Başvur",
-        "applyConfirmDescription": "\"{{name}}\" komutunu uygulamak, mevcut sekmelerinizi kapatacak ve bunların yerine bu çalışma alanının kaydedilmiş düzenini getirecektir. Mevcut düzeninizde yapılan kaydedilmemiş değişiklikler kaybolacaktır.",
-        "applyConfirmButton": "Çalışma Alanına Başvur",
-        "updateWithCurrent": "Güncel bilgilerle güncelleyin",
-        "updateWithCurrentConfirm": "\"{{name}}\" ifadesini mevcut sekme düzeninizle değiştirin mi?",
-        "rename": "Yeniden adlandır",
-        "duplicate": "Kopyalamak",
-        "duplicateNameSuffix": "{{name}} (kopyala)",
-        "setDefault": "Varsayılan olarak ayarla",
-        "unsetDefault": "Varsayılan ayarı kaldır",
-        "defaultBadge": "Varsayılan",
-        "lastSession": "Son Oturum",
-        "lastSessionDescription": "En son sekme düzeninize göre otomatik olarak güncellenir. Açık olan uygulamalarınızı geri yüklemek için uygulayın.",
-        "lastUsed": "Son kullanım {{time}}",
-        "neverUsed": "Hiç başvurmadım",
-        "tabsSkipped": "Çalışma alanı uygulandı, ancak {{count}} sekmesi atlandı çünkü ana bilgisayarları artık mevcut değil: {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}saniye önce",
-          "minutes": "{{count}} dakika önce",
-          "hours": "{{count}} saat önce",
-          "days": "{{count}} gün önce"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Çalışma Alanları"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Çalışma Alanları",
-    "workflow_workspaces_desc": "Açık sekmeleri kaydedin ve daha sonra tüm düzeni yeniden açın."
-  },
-  "permissions": {
-    "use": {
-      "title": "Çalışma alanlarını kullanın",
-      "description": "Kaydedilmiş sekme düzenlerini kaydedin, uygulayın ve yönetin."
-    }
-  },
-  "hosts": {
-    "docsLink": "Dokümanları görüntüle"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/uk_UA.json b/plugins/workspaces/locales/translated/uk_UA.json
deleted file mode 100644
index a1a702699..000000000
--- a/plugins/workspaces/locales/translated/uk_UA.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Робочі простори",
-        "saveCurrent": "Зберегти поточний",
-        "saveCurrentTitle": "Зберегти поточну робочу область",
-        "saveCurrentDescription": "Збережіть кожну відкриту вкладку, розділений макет та розташування панелей як нове іменоване робоче середовище.",
-        "nameLabel": "Ім'я",
-        "namePlaceholder": "наприклад, налагодження продукту",
-        "nameRequired": "Потрібно вказати назву робочої області",
-        "colorLabel": "Колір",
-        "workspaceCreated": "Робочу область збережено",
-        "workspaceUpdated": "Робочу область оновлено",
-        "workspaceDeleted": "Робочу область видалено",
-        "workspaceDuplicated": "Робочу область продубльовано",
-        "saveFailed": "Не вдалося зберегти робочу область",
-        "updateFailed": "Не вдалося оновити робочу область",
-        "deleteFailed": "Не вдалося видалити робочу область",
-        "duplicateFailed": "Не вдалося дублювати робочу область",
-        "loadFailed": "Не вдалося завантажити робочі області",
-        "applyFailed": "Не вдалося застосувати робочу область",
-        "deleteWorkspaceTitle": "Видалити робочу область",
-        "deleteWorkspaceDescription": "Ви впевнені, що хочете видалити \"{{name}}\"? Цю дію неможливо скасувати.",
-        "noWorkspaces": "Поки що немає збережених робочих областей. Збережіть поточне розташування вкладок, щоб розпочати.",
-        "tabCount": "вкладка {{count}}",
-        "tabCount_other": "{{count}} вкладок",
-        "apply": "Застосувати",
-        "applyConfirmTitle": "Застосувати робочу область",
-        "applyConfirmDescription": "Застосування \"{{name}}\" закриє ваші поточні вкладки та замінить їх збереженим розташуванням цього робочого простору. Незбережені зміни до вашого поточного макета будуть втрачені.",
-        "applyConfirmButton": "Застосувати робочу область",
-        "updateWithCurrent": "Оновити за допомогою поточного",
-        "updateWithCurrentConfirm": "Перезаписати \"{{name}}\" поточним розташуванням табуляцій?",
-        "rename": "Перейменувати",
-        "duplicate": "Дублікат",
-        "duplicateNameSuffix": "{{name}} (копія)",
-        "setDefault": "Встановити за замовчуванням",
-        "unsetDefault": "Видалити як за замовчуванням",
-        "defaultBadge": "За замовчуванням",
-        "lastSession": "Остання сесія",
-        "lastSessionDescription": "Автоматично оновлюється з урахуванням останнього розташування вкладок. Застосуйте це, щоб відновити те, що було відкрито.",
-        "lastUsed": "Востаннє використовувалося {{time}}",
-        "neverUsed": "Ніколи не застосовувався",
-        "tabsSkipped": "Робочий простір застосовано, але {{count}} вкладок пропущено, оскільки їхній хост більше не існує: {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}с тому",
-          "minutes": "{{count}}хв тому",
-          "hours": "{{count}}год тому",
-          "days": "{{count}}днів тому"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Робочі простори"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Робочі простори",
-    "workflow_workspaces_desc": "Збережіть набір відкритих вкладок і знову відкрийте весь макет пізніше."
-  },
-  "permissions": {
-    "use": {
-      "title": "Використовуйте робочі області",
-      "description": "Зберігайте, застосовуйте та керуйте збереженими макетами вкладок."
-    }
-  },
-  "hosts": {
-    "docsLink": "Переглянути документи"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/vi_VN.json b/plugins/workspaces/locales/translated/vi_VN.json
deleted file mode 100644
index 09e57c071..000000000
--- a/plugins/workspaces/locales/translated/vi_VN.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "Không gian làm việc",
-        "saveCurrent": "Lưu hiện tại",
-        "saveCurrentTitle": "Lưu không gian làm việc hiện tại",
-        "saveCurrentDescription": "Lưu tất cả các tab đang mở, bố cục chia màn hình và cách sắp xếp khung cửa sổ dưới dạng một không gian làm việc mới có tên.",
-        "nameLabel": "Tên",
-        "namePlaceholder": "Ví dụ: Gỡ lỗi sản phẩm",
-        "nameRequired": "Tên không gian làm việc là bắt buộc",
-        "colorLabel": "Màu sắc",
-        "workspaceCreated": "Không gian làm việc đã được lưu",
-        "workspaceUpdated": "Không gian làm việc đã được cập nhật",
-        "workspaceDeleted": "Không gian làm việc đã bị xóa",
-        "workspaceDuplicated": "Không gian làm việc được sao chép",
-        "saveFailed": "Không thể lưu không gian làm việc",
-        "updateFailed": "Không thể cập nhật không gian làm việc",
-        "deleteFailed": "Không thể xóa không gian làm việc",
-        "duplicateFailed": "Không thể sao chép không gian làm việc",
-        "loadFailed": "Không thể tải không gian làm việc",
-        "applyFailed": "Không thể áp dụng không gian làm việc",
-        "deleteWorkspaceTitle": "Xóa không gian làm việc",
-        "deleteWorkspaceDescription": "Bạn có chắc chắn muốn xóa \"{{name}}\" không? Thao tác này không thể hoàn tác.",
-        "noWorkspaces": "Chưa có không gian làm việc nào được lưu. Hãy lưu cách bố trí tab hiện tại của bạn để bắt đầu.",
-        "tabCount": "{{count}} tab",
-        "tabCount_other": "{{count}} tab",
-        "apply": "Áp dụng",
-        "applyConfirmTitle": "Áp dụng Không gian làm việc",
-        "applyConfirmDescription": "Áp dụng \"{{name}}\" sẽ đóng các tab hiện tại của bạn và thay thế chúng bằng bố cục đã lưu của không gian làm việc này. Các thay đổi chưa được lưu đối với bố cục hiện tại của bạn sẽ bị mất.",
-        "applyConfirmButton": "Áp dụng Không gian làm việc",
-        "updateWithCurrent": "Cập nhật với thông tin hiện tại",
-        "updateWithCurrentConfirm": "Bạn có muốn ghi đè \"{{name}}\" bằng cách sắp xếp tab hiện tại của mình không?",
-        "rename": "Đổi tên",
-        "duplicate": "Nhân bản",
-        "duplicateNameSuffix": "{{name}} (copy)",
-        "setDefault": "Đặt làm mặc định",
-        "unsetDefault": "Xóa khỏi danh sách mặc định",
-        "defaultBadge": "Mặc định",
-        "lastSession": "Phiên cuối cùng",
-        "lastSessionDescription": "Tự động cập nhật với cách sắp xếp tab gần đây nhất của bạn. Áp dụng để khôi phục các tab bạn đã mở trước đó.",
-        "lastUsed": "Lần sử dụng cuối cùng {{time}}",
-        "neverUsed": "Chưa từng ứng tuyển",
-        "tabsSkipped": "Không gian làm việc đã được áp dụng, nhưng {{count}} tab đã bị bỏ qua vì máy chủ của chúng không còn tồn tại: {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}giây trước",
-          "minutes": "{{count}} phút trước",
-          "hours": "{{count}} giờ trước",
-          "days": "{{count}} ngày trước"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "Không gian làm việc"
-  },
-  "onboarding": {
-    "workflow_workspaces": "Không gian làm việc",
-    "workflow_workspaces_desc": "Lưu lại một nhóm các tab đang mở và mở lại toàn bộ bố cục sau."
-  },
-  "permissions": {
-    "use": {
-      "title": "Sử dụng không gian làm việc",
-      "description": "Lưu, áp dụng và quản lý các bố cục tab đã lưu."
-    }
-  },
-  "hosts": {
-    "docsLink": "Xem tài liệu"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/zh_CN.json b/plugins/workspaces/locales/translated/zh_CN.json
deleted file mode 100644
index 6e43743e6..000000000
--- a/plugins/workspaces/locales/translated/zh_CN.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "工作区",
-        "saveCurrent": "保存当前",
-        "saveCurrentTitle": "保存当前工作区",
-        "saveCurrentDescription": "将所有打开的标签页、拆分布局和窗格排列保存为一个新的命名工作区。",
-        "nameLabel": "名称",
-        "namePlaceholder": "例如，生产环境调试",
-        "nameRequired": "工作区名称为必填项",
-        "colorLabel": "颜色",
-        "workspaceCreated": "工作区已保存",
-        "workspaceUpdated": "工作区已更新",
-        "workspaceDeleted": "工作区已删除",
-        "workspaceDuplicated": "工作区已复制",
-        "saveFailed": "保存工作区失败",
-        "updateFailed": "工作区更新失败",
-        "deleteFailed": "删除工作区失败",
-        "duplicateFailed": "复制工作区失败",
-        "loadFailed": "加载工作区失败",
-        "applyFailed": "应用工作区失败",
-        "deleteWorkspaceTitle": "删除工作区",
-        "deleteWorkspaceDescription": "您确定要删除“{{name}}”吗？此操作无法撤销。",
-        "noWorkspaces": "尚未保存任何工作区。请保存您当前的标签页排列方式以开始使用。",
-        "tabCount": "{{count}} 个标签页",
-        "tabCount_other": "{{count}} 个标签页",
-        "apply": "应用",
-        "applyConfirmTitle": "应用工作区",
-        "applyConfirmDescription": "应用“{{name}}”将关闭您当前的标签页，并将其替换为此工作区已保存的布局。您对当前布局的未保存更改将会丢失。",
-        "applyConfirmButton": "应用工作区",
-        "updateWithCurrent": "更新至当前版本",
-        "updateWithCurrentConfirm": "用您当前的标签页排列覆盖“{{name}}”？",
-        "rename": "重命名",
-        "duplicate": "复制",
-        "duplicateNameSuffix": "{{name}}（副本）",
-        "setDefault": "设置为默认值",
-        "unsetDefault": "移除默认设置",
-        "defaultBadge": "默认",
-        "lastSession": "上次会话",
-        "lastSessionDescription": "自动更新至您最近的标签页排列方式。应用此操作即可恢复您之前打开的标签页。",
-        "lastUsed": "上次使用 {{time}}",
-        "neverUsed": "从未应用过",
-        "tabsSkipped": "工作区已应用，但由于其宿主已不存在，因此跳过了 {{count}} 个选项卡： {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}秒前",
-          "minutes": "{{count}} 分钟前",
-          "hours": "{{count}} 小时前",
-          "days": "{{count}} 天前"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "工作区"
-  },
-  "onboarding": {
-    "workflow_workspaces": "工作区",
-    "workflow_workspaces_desc": "保存当前打开的标签页组合，方便之后一键恢复整个布局。"
-  },
-  "permissions": {
-    "use": {
-      "title": "使用工作区",
-      "description": "保存、应用和管理已保存的标签页布局。"
-    }
-  },
-  "hosts": {
-    "docsLink": "查看文档"
-  }
-}
diff --git a/plugins/workspaces/locales/translated/zh_TW.json b/plugins/workspaces/locales/translated/zh_TW.json
deleted file mode 100644
index ec1522cf0..000000000
--- a/plugins/workspaces/locales/translated/zh_TW.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "newUi": {
-    "sidebar": {
-      "workspaces": {
-        "title": "工作區",
-        "saveCurrent": "儲存目前",
-        "saveCurrentTitle": "儲存目前工作區",
-        "saveCurrentDescription": "將所有開啟的標籤頁、分割版面配置和窗格排列儲存為一個新的命名工作區。",
-        "nameLabel": "名稱",
-        "namePlaceholder": "例如，生產環境調試",
-        "nameRequired": "工作區名稱為必填項",
-        "colorLabel": "顏色",
-        "workspaceCreated": "工作區已儲存",
-        "workspaceUpdated": "工作區已更新",
-        "workspaceDeleted": "工作區已刪除",
-        "workspaceDuplicated": "工作區已複製",
-        "saveFailed": "保存工作區失敗",
-        "updateFailed": "工作區更新失敗",
-        "deleteFailed": "刪除工作區失敗",
-        "duplicateFailed": "複製工作區失敗",
-        "loadFailed": "載入工作區失敗",
-        "applyFailed": "應用工作區失敗",
-        "deleteWorkspaceTitle": "刪除工作區",
-        "deleteWorkspaceDescription": "您確定要刪除「{{name}}」嗎？此操作無法撤銷。",
-        "noWorkspaces": "尚未保存任何工作區。請儲存您目前的標籤頁排列方式以開始使用。",
-        "tabCount": "{{count}} 選項卡",
-        "tabCount_other": "{{count}} 標籤",
-        "apply": "套用",
-        "applyConfirmTitle": "應用工作區",
-        "applyConfirmDescription": "應用「{{name}}」將關閉您目前的標籤頁，並將其替換為此工作區已儲存的佈局。您對目前佈局的未儲存變更將會遺失。",
-        "applyConfirmButton": "應用工作區",
-        "updateWithCurrent": "更新至目前版本",
-        "updateWithCurrentConfirm": "用您目前的製表符排列覆蓋“{{name}}”？",
-        "rename": "重新命名",
-        "duplicate": "複製",
-        "duplicateNameSuffix": "{{name}} （複製）",
-        "setDefault": "設定為預設值",
-        "unsetDefault": "移除預設設定",
-        "defaultBadge": "預設",
-        "lastSession": "上次會議",
-        "lastSessionDescription": "自動更新至您最近的標籤頁排列方式。應用此操作即可恢復您先前開啟的標籤頁。",
-        "lastUsed": "上次使用 {{time}}",
-        "neverUsed": "從未申請過",
-        "tabsSkipped": "工作區已應用，但由於其宿主已不存在，因此跳過了 {{count}} 個選項卡： {{names}}",
-        "timeAgo": {
-          "seconds": "{{count}}秒前",
-          "minutes": "{{count}} 分鐘前",
-          "hours": "{{count}} 小時前",
-          "days": "{{count}} 天前"
-        }
-      }
-    }
-  },
-  "nav": {
-    "workspaces": "工作區"
-  },
-  "onboarding": {
-    "workflow_workspaces": "工作區",
-    "workflow_workspaces_desc": "儲存一組開啟的標籤頁，稍後重新開啟整個佈局。"
-  },
-  "permissions": {
-    "use": {
-      "title": "使用工作區",
-      "description": "儲存、套用和管理已儲存的標籤頁佈局。"
-    }
-  },
-  "hosts": {
-    "docsLink": "檢視文件"
-  }
-}
diff --git a/plugins/workspaces/manifest.json b/plugins/workspaces/manifest.json
deleted file mode 100644
index 3c4987522..000000000
--- a/plugins/workspaces/manifest.json
+++ /dev/null
@@ -1,45 +0,0 @@
-{
-  "id": "workspaces",
-  "name": "Workspaces",
-  "version": "1.0.0",
-  "description": "Save and restore named tab and split layouts.",
-  "author": {
-    "name": "Termix"
-  },
-  "license": "MIT",
-  "repository": "https://github.com/Termix-SSH/Termix",
-  "category": "Productivity",
-  "icon": "LayoutTemplate",
-  "engine": {
-    "termix": ">=2.9.0",
-    "api": "1"
-  },
-  "capabilities": ["db:own", "network:serve", "ui:surface"],
-  "provides": [
-    {
-      "service": "workspaces.saved",
-      "version": "1.0.0",
-      "permission": "workspaces.use"
-    }
-  ],
-  "locales": "locales",
-  "platforms": ["linux", "win32", "darwin"],
-  "contributes": {
-    "panels": [
-      {
-        "id": "workspaces",
-        "titleKey": "nav.workspaces",
-        "icon": "LayoutTemplate"
-      }
-    ],
-    "permissions": [
-      {
-        "name": "use",
-        "titleKey": "permissions.use.title",
-        "descriptionKey": "permissions.use.description",
-        "defaultRoles": ["admin", "user"]
-      }
-    ],
-    "syncEntities": ["workspaces"]
-  }
-}
diff --git a/plugins/workspaces/migrations/mysql/0001_adopt_user_workspaces.sql b/plugins/workspaces/migrations/mysql/0001_adopt_user_workspaces.sql
deleted file mode 100644
index b71c97b14..000000000
--- a/plugins/workspaces/migrations/mysql/0001_adopt_user_workspaces.sql
+++ /dev/null
@@ -1,19 +0,0 @@
--- workspaces 0001: adopt_user_workspaces
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `user_workspaces` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `name` text NOT NULL,
-  `color` text,
-  `icon` text,
-  `kind` text NOT NULL DEFAULT ('manual'),
-  `is_default` boolean NOT NULL DEFAULT false,
-  `payload` text NOT NULL DEFAULT ('{}'),
-  `sync_id` varchar(255) UNIQUE,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `last_used_at` text,
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `user_workspaces` TO `p_workspaces_workspaces`;
diff --git a/plugins/workspaces/migrations/postgres/0001_adopt_user_workspaces.sql b/plugins/workspaces/migrations/postgres/0001_adopt_user_workspaces.sql
deleted file mode 100644
index 6de97cdb2..000000000
--- a/plugins/workspaces/migrations/postgres/0001_adopt_user_workspaces.sql
+++ /dev/null
@@ -1,20 +0,0 @@
--- workspaces 0001: adopt_user_workspaces
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "user_workspaces" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "name" text NOT NULL,
-  "color" text,
-  "icon" text,
-  "kind" text NOT NULL DEFAULT 'manual',
-  "is_default" boolean NOT NULL DEFAULT false,
-  "payload" text NOT NULL DEFAULT '{}',
-  "sync_id" varchar(255) UNIQUE,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "last_used_at" text,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_user_workspaces_user_id" ON "user_workspaces" ("user_id");
-ALTER TABLE "user_workspaces" RENAME TO "p_workspaces_workspaces";
diff --git a/plugins/workspaces/migrations/snapshot.json b/plugins/workspaces/migrations/snapshot.json
deleted file mode 100644
index 201150d14..000000000
--- a/plugins/workspaces/migrations/snapshot.json
+++ /dev/null
@@ -1,69 +0,0 @@
-{
-  "version": 1,
-  "tables": {
-    "workspaces": {
-      "columns": {
-        "id": {
-          "type": "id",
-          "primaryKey": true,
-          "notNull": true
-        },
-        "userId": {
-          "type": "refUser",
-          "length": 255,
-          "notNull": true
-        },
-        "name": {
-          "type": "text",
-          "notNull": true
-        },
-        "color": {
-          "type": "text"
-        },
-        "icon": {
-          "type": "text"
-        },
-        "kind": {
-          "type": "text",
-          "notNull": true,
-          "defaultValue": "manual"
-        },
-        "isDefault": {
-          "type": "boolean",
-          "notNull": true,
-          "defaultValue": false
-        },
-        "payload": {
-          "type": "text",
-          "notNull": true,
-          "defaultValue": "{}"
-        },
-        "syncId": {
-          "type": "varchar",
-          "length": 255,
-          "unique": true
-        },
-        "createdAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "updatedAt": {
-          "type": "timestamp",
-          "notNull": true,
-          "defaultNow": true
-        },
-        "lastUsedAt": {
-          "type": "timestamp"
-        }
-      },
-      "indexes": [
-        {
-          "name": "idx_user_workspaces_user_id",
-          "columns": ["userId"]
-        }
-      ],
-      "adopts": "user_workspaces"
-    }
-  }
-}
diff --git a/plugins/workspaces/migrations/sqlite/0001_adopt_user_workspaces.sql b/plugins/workspaces/migrations/sqlite/0001_adopt_user_workspaces.sql
deleted file mode 100644
index 9dca30514..000000000
--- a/plugins/workspaces/migrations/sqlite/0001_adopt_user_workspaces.sql
+++ /dev/null
@@ -1,20 +0,0 @@
--- workspaces 0001: adopt_user_workspaces
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "user_workspaces" (
-  "id" integer PRIMARY KEY AUTOINCREMENT,
-  "user_id" text NOT NULL,
-  "name" text NOT NULL,
-  "color" text,
-  "icon" text,
-  "kind" text NOT NULL DEFAULT 'manual',
-  "is_default" integer NOT NULL DEFAULT 0,
-  "payload" text NOT NULL DEFAULT '{}',
-  "sync_id" text UNIQUE,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "last_used_at" text,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_user_workspaces_user_id" ON "user_workspaces" ("user_id");
-ALTER TABLE "user_workspaces" RENAME TO "p_workspaces_workspaces";
diff --git a/plugins/workspaces/package.json b/plugins/workspaces/package.json
deleted file mode 100644
index eea2df669..000000000
--- a/plugins/workspaces/package.json
+++ /dev/null
@@ -1,33 +0,0 @@
-{
-  "name": "@termix-plugin/workspaces",
-  "private": true,
-  "version": "1.0.0",
-  "type": "module",
-  "scripts": {
-    "build": "termix-plugin build",
-    "test": "termix-plugin test",
-    "typecheck": "tsc -p .",
-    "validate": "termix-plugin validate"
-  },
-  "dependencies": {
-    "lucide-react": "^1.33.0"
-  },
-  "devDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "@testing-library/dom": "^10.4.2",
-    "@testing-library/react": "^16.3.3",
-    "@types/node": "^26.2.0",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "better-sqlite3": "^13.0.3",
-    "jsdom": "^30.0.1",
-    "vitest": "^4.1.11"
-  },
-  "peerDependencies": {
-    "@termix/plugin-sdk": "^1.0.0",
-    "drizzle-orm": "^0.45.2",
-    "express": "^5.2.1",
-    "react": "^19.2.8",
-    "sonner": "^2.0.8"
-  }
-}
diff --git a/plugins/workspaces/src/backend/index.ts b/plugins/workspaces/src/backend/index.ts
deleted file mode 100644
index 7db88592e..000000000
--- a/plugins/workspaces/src/backend/index.ts
+++ /dev/null
@@ -1,49 +0,0 @@
-import type { Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import { workspaces } from "./tables.js";
-import { createWorkspaceRepository } from "./repository.js";
-import { registerWorkspaceRoutes } from "./routes.js";
-
-/** What other plugins get from ctx.services.get("workspaces.saved"). */
-export interface WorkspacesService {
-  /** The calling user's workspaces, without their layouts. */
-  list: () => Promise<Array<{ id: number; name: string; isDefault: boolean }>>;
-}
-
-export async function activate(ctx: PluginContext) {
-  const table = await ctx.db.define(workspaces);
-  const repo = createWorkspaceRepository(ctx.db, table);
-
-  registerWorkspaceRoutes(ctx.http.router<Router>(), repo, ctx);
-
-  // The last_session row belongs to one install. Syncing it would leave the
-  // user with two, one from each side.
-  ctx.sync.registerEntity({
-    type: "workspaces",
-    table,
-    order: 200,
-    shouldSync: (row) => row.kind !== "last_session",
-  });
-
-  const service: WorkspacesService = {
-    list: async () => {
-      const userId = ctx.currentActor();
-      if (!userId) return [];
-      const rows = await repo.listByUser(userId);
-      return rows
-        .filter((row) => row.kind === "manual")
-        .map((row) => ({
-          id: row.id,
-          name: row.name,
-          isDefault: !!row.isDefault,
-        }));
-    },
-  };
-  ctx.services.provide("workspaces.saved", service);
-
-  ctx.log.info("Workspaces routes mounted at /plugin-api/workspaces");
-}
-
-export async function deactivate() {
-  // Everything above was registered through ctx and is disposed by core.
-}
diff --git a/plugins/workspaces/src/backend/repository.ts b/plugins/workspaces/src/backend/repository.ts
deleted file mode 100644
index 8e027d4ec..000000000
--- a/plugins/workspaces/src/backend/repository.ts
+++ /dev/null
@@ -1,252 +0,0 @@
-import { randomUUID } from "node:crypto";
-import { and, eq, ne } from "drizzle-orm";
-import type { PluginDatabase } from "@termix/plugin-sdk/backend";
-
-export type WorkspaceKind = "manual" | "last_session";
-
-export interface WorkspaceRecord {
-  id: number;
-  userId: string;
-  name: string;
-  color: string | null;
-  icon: string | null;
-  kind: WorkspaceKind;
-  isDefault: boolean;
-  payload: string;
-  syncId: string | null;
-  createdAt: string;
-  updatedAt: string;
-  lastUsedAt: string | null;
-}
-
-export interface WorkspaceCreateInput {
-  name: string;
-  color?: string | null;
-  icon?: string | null;
-  payload: string;
-}
-
-export interface WorkspaceUpdateInput {
-  name?: string;
-  color?: string | null;
-  icon?: string | null;
-}
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-// The table comes from ctx.db.define, which the SDK hands back untyped, and
-// the drizzle handle is the server's own. Typed at this module's edge instead.
-type Table = any;
-type Drizzle = any;
-/* eslint-enable @typescript-eslint/no-explicit-any */
-
-export type WorkspaceRepository = ReturnType<typeof createWorkspaceRepository>;
-
-/**
- * Per-user workspace storage.
- *
- * Written without RETURNING so it runs the same on all three engines: an
- * insert is read back by the sync id it was given, an update by its id.
- */
-export function createWorkspaceRepository(db: PluginDatabase, table: Table) {
-  const client = () => db.client<Drizzle>();
-
-  async function findById(
-    userId: string,
-    id: number,
-  ): Promise<WorkspaceRecord | null> {
-    const drizzle = await client();
-    const rows = await drizzle
-      .select()
-      .from(table)
-      .where(and(eq(table.id, id), eq(table.userId, userId)))
-      .limit(1);
-    return (rows[0] as WorkspaceRecord) ?? null;
-  }
-
-  async function findBySyncId(syncId: string): Promise<WorkspaceRecord> {
-    const drizzle = await client();
-    const rows = await drizzle
-      .select()
-      .from(table)
-      .where(eq(table.syncId, syncId))
-      .limit(1);
-    return rows[0] as WorkspaceRecord;
-  }
-
-  async function findLastSession(
-    userId: string,
-  ): Promise<WorkspaceRecord | null> {
-    const drizzle = await client();
-    const rows = await drizzle
-      .select()
-      .from(table)
-      .where(and(eq(table.userId, userId), eq(table.kind, "last_session")))
-      .limit(1);
-    return (rows[0] as WorkspaceRecord) ?? null;
-  }
-
-  async function insert(
-    userId: string,
-    values: Omit<
-      WorkspaceRecord,
-      "id" | "userId" | "syncId" | "createdAt" | "updatedAt" | "lastUsedAt"
-    >,
-    now: string,
-  ): Promise<WorkspaceRecord> {
-    const syncId = randomUUID();
-    const drizzle = await client();
-    await drizzle
-      .insert(table)
-      .values({ ...values, userId, syncId, createdAt: now, updatedAt: now });
-    await db.persist();
-    return findBySyncId(syncId);
-  }
-
-  async function write(
-    userId: string,
-    id: number,
-    values: Record<string, unknown>,
-  ): Promise<WorkspaceRecord | null> {
-    const drizzle = await client();
-    await drizzle
-      .update(table)
-      .set(values)
-      .where(and(eq(table.id, id), eq(table.userId, userId)));
-    await db.persist();
-    return findById(userId, id);
-  }
-
-  /** A manual workspace the user owns, or null. Last Session is not editable. */
-  async function findManual(
-    userId: string,
-    id: number,
-  ): Promise<WorkspaceRecord | null> {
-    const existing = await findById(userId, id);
-    return existing && existing.kind === "manual" ? existing : null;
-  }
-
-  return {
-    findById,
-    findLastSession,
-
-    async listByUser(userId: string): Promise<WorkspaceRecord[]> {
-      const drizzle = await client();
-      return drizzle.select().from(table).where(eq(table.userId, userId));
-    },
-
-    async upsertLastSession(
-      userId: string,
-      payload: string,
-      now = new Date().toISOString(),
-    ): Promise<WorkspaceRecord> {
-      const existing = await findLastSession(userId);
-      if (!existing) {
-        return insert(
-          userId,
-          {
-            name: "Last Session",
-            color: null,
-            icon: null,
-            kind: "last_session",
-            isDefault: false,
-            payload,
-          },
-          now,
-        );
-      }
-      return write(userId, existing.id, { payload, updatedAt: now });
-    },
-
-    async create(
-      userId: string,
-      input: WorkspaceCreateInput,
-      now = new Date().toISOString(),
-    ): Promise<WorkspaceRecord> {
-      return insert(
-        userId,
-        {
-          name: input.name,
-          color: input.color ?? null,
-          icon: input.icon ?? null,
-          kind: "manual",
-          isDefault: false,
-          payload: input.payload,
-        },
-        now,
-      );
-    },
-
-    async update(
-      userId: string,
-      id: number,
-      input: WorkspaceUpdateInput,
-      now = new Date().toISOString(),
-    ): Promise<WorkspaceRecord | null> {
-      const existing = await findManual(userId, id);
-      if (!existing) return null;
-      return write(userId, id, {
-        name: input.name ?? existing.name,
-        color: input.color === undefined ? existing.color : input.color,
-        icon: input.icon === undefined ? existing.icon : input.icon,
-        updatedAt: now,
-      });
-    },
-
-    async updateContent(
-      userId: string,
-      id: number,
-      payload: string,
-      now = new Date().toISOString(),
-    ): Promise<WorkspaceRecord | null> {
-      if (!(await findManual(userId, id))) return null;
-      return write(userId, id, { payload, updatedAt: now });
-    },
-
-    async setDefault(
-      userId: string,
-      id: number,
-      now = new Date().toISOString(),
-    ): Promise<WorkspaceRecord | null> {
-      if (!(await findManual(userId, id))) return null;
-      const drizzle = await client();
-      await drizzle
-        .update(table)
-        .set({ isDefault: false, updatedAt: now })
-        .where(
-          and(
-            eq(table.userId, userId),
-            eq(table.isDefault, true),
-            ne(table.id, id),
-          ),
-        );
-      return write(userId, id, { isDefault: true, updatedAt: now });
-    },
-
-    async unsetDefault(
-      userId: string,
-      id: number,
-      now = new Date().toISOString(),
-    ): Promise<WorkspaceRecord | null> {
-      if (!(await findManual(userId, id))) return null;
-      return write(userId, id, { isDefault: false, updatedAt: now });
-    },
-
-    async touchLastUsed(
-      userId: string,
-      id: number,
-      now = new Date().toISOString(),
-    ): Promise<void> {
-      await write(userId, id, { lastUsedAt: now });
-    },
-
-    async delete(userId: string, id: number): Promise<boolean> {
-      if (!(await findManual(userId, id))) return false;
-      const drizzle = await client();
-      await drizzle
-        .delete(table)
-        .where(and(eq(table.id, id), eq(table.userId, userId)));
-      await db.persist();
-      return true;
-    },
-  };
-}
diff --git a/plugins/workspaces/src/backend/routes.ts b/plugins/workspaces/src/backend/routes.ts
deleted file mode 100644
index f9060f931..000000000
--- a/plugins/workspaces/src/backend/routes.ts
+++ /dev/null
@@ -1,576 +0,0 @@
-import type { Request, Response, Router } from "express";
-import type { PluginContext } from "@termix/plugin-sdk/backend";
-import type { WorkspaceRecord, WorkspaceRepository } from "./repository.js";
-
-function isNonEmptyString(val: unknown): val is string {
-  return typeof val === "string" && val.trim().length > 0;
-}
-
-function parseWorkspaceId(raw: unknown): number | null {
-  const id = typeof raw === "string" ? parseInt(raw, 10) : NaN;
-  return Number.isInteger(id) ? id : null;
-}
-
-function isValidPayload(val: unknown): val is Record<string, unknown> {
-  return (
-    typeof val === "object" &&
-    val !== null &&
-    Array.isArray((val as Record<string, unknown>).tabs)
-  );
-}
-
-function serialize(record: WorkspaceRecord) {
-  let payload: unknown;
-  try {
-    payload = JSON.parse(record.payload || "{}");
-  } catch {
-    payload = { version: 1, tabs: [] };
-  }
-  const tabs = Array.isArray((payload as { tabs?: unknown[] })?.tabs)
-    ? (payload as { tabs: unknown[] }).tabs
-    : [];
-
-  return {
-    ...record,
-    payload,
-    tabCount: tabs.length,
-  };
-}
-
-function actor(ctx: PluginContext): string {
-  // Core's plugin router authenticates every request and runs it as that user.
-  return ctx.currentActor() as string;
-}
-
-function logError(
-  ctx: PluginContext,
-  message: string,
-  error: unknown,
-  details: { operation: string; workspaceId?: number },
-): void {
-  const target =
-    details.workspaceId !== undefined ? ` ${details.workspaceId}` : "";
-  ctx.log.error(
-    `${message}${target} (${details.operation})`,
-    error instanceof Error ? error : new Error(String(error)),
-  );
-}
-
-/**
- * Mounts the workspace routes on the plugin's router, which core serves at
- * /plugin-api/workspaces with auth in front. Every route needs workspaces.use,
- * so an admin can hide the feature per role.
- */
-export function registerWorkspaceRoutes(
-  router: Router,
-  repo: WorkspaceRepository,
-  ctx: PluginContext,
-): void {
-  router.use(ctx.rbac.require("use") as never);
-
-  /**
-   * @openapi
-   * /plugin-api/workspaces:
-   *   get:
-   *     summary: List the current user's saved workspaces
-   *     description: Returns every manual workspace plus the single auto-maintained "Last Session" workspace, each with a computed tabCount.
-   *     tags:
-   *       - Workspaces
-   *     responses:
-   *       200:
-   *         description: List of workspaces.
-   */
-  router.get("/", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-
-    try {
-      const records = await repo.listByUser(userId);
-      res.json(records.map(serialize));
-    } catch (err) {
-      logError(ctx, "Failed to list workspaces", err, {
-        operation: "workspace_list_failed",
-      });
-      res.status(500).json({ error: "Failed to list workspaces" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/workspaces:
-   *   post:
-   *     summary: Save the current tab arrangement as a new named workspace
-   *     tags:
-   *       - Workspaces
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               name:
-   *                 type: string
-   *               color:
-   *                 type: string
-   *               icon:
-   *                 type: string
-   *               payload:
-   *                 type: object
-   *     responses:
-   *       200:
-   *         description: Workspace created.
-   *       400:
-   *         description: Invalid request body.
-   */
-  router.post("/", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const { name, color, icon, payload } = req.body ?? {};
-
-    if (!isNonEmptyString(name)) {
-      return res.status(400).json({ error: "Workspace name is required" });
-    }
-    if (!isValidPayload(payload)) {
-      return res
-        .status(400)
-        .json({ error: "payload with a tabs array is required" });
-    }
-
-    try {
-      const created = await repo.create(userId, {
-        name: name.trim(),
-        color: isNonEmptyString(color) ? color : null,
-        icon: isNonEmptyString(icon) ? icon : null,
-        payload: JSON.stringify(payload),
-      });
-      res.json(serialize(created));
-    } catch (err) {
-      logError(ctx, "Failed to create workspace", err, {
-        operation: "workspace_create_failed",
-      });
-      res.status(500).json({ error: "Failed to create workspace" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/workspaces/last-session:
-   *   get:
-   *     summary: Fetch the auto-maintained "Last Session" workspace
-   *     description: Returns null if the current session has never been auto-saved yet.
-   *     tags:
-   *       - Workspaces
-   *     responses:
-   *       200:
-   *         description: The Last Session workspace, or null.
-   */
-  router.get("/last-session", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-
-    try {
-      const record = await repo.findLastSession(userId);
-      res.json(record ? serialize(record) : null);
-    } catch (err) {
-      logError(ctx, "Failed to fetch last session workspace", err, {
-        operation: "workspace_last_session_get_failed",
-      });
-      res.status(500).json({ error: "Failed to fetch last session workspace" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/workspaces/last-session:
-   *   put:
-   *     summary: Upsert the auto-maintained "Last Session" workspace
-   *     description: Always overwrites the single Last Session row for the caller - never creates a second one. Called by the frontend's debounced auto-save effect.
-   *     tags:
-   *       - Workspaces
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               payload:
-   *                 type: object
-   *     responses:
-   *       200:
-   *         description: Last Session workspace saved.
-   *       400:
-   *         description: Invalid request body.
-   */
-  router.put("/last-session", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const { payload } = req.body ?? {};
-
-    if (!isValidPayload(payload)) {
-      return res
-        .status(400)
-        .json({ error: "payload with a tabs array is required" });
-    }
-
-    try {
-      const saved = await repo.upsertLastSession(
-        userId,
-        JSON.stringify(payload),
-      );
-      res.json(serialize(saved));
-    } catch (err) {
-      logError(ctx, "Failed to save last session workspace", err, {
-        operation: "workspace_last_session_save_failed",
-      });
-      res.status(500).json({ error: "Failed to save last session workspace" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/workspaces/{id}:
-   *   patch:
-   *     summary: Rename or recolor a workspace
-   *     description: Does not accept a payload - use PUT /workspaces/{id}/content to overwrite a workspace's saved tab arrangement. Rejects the Last Session workspace.
-   *     tags:
-   *       - Workspaces
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Workspace updated.
-   *       400:
-   *         description: Invalid request, or target is the Last Session workspace.
-   *       404:
-   *         description: Workspace not found.
-   */
-  router.patch("/:id", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const id = parseWorkspaceId(req.params.id);
-    if (id === null) {
-      return res.status(400).json({ error: "Invalid workspace ID" });
-    }
-
-    const { name, color, icon } = req.body ?? {};
-    if (name !== undefined && !isNonEmptyString(name)) {
-      return res.status(400).json({ error: "Workspace name cannot be empty" });
-    }
-
-    try {
-      const updated = await repo.update(userId, id, {
-        name: name !== undefined ? name.trim() : undefined,
-        color,
-        icon,
-      });
-
-      if (!updated) {
-        return res.status(404).json({ error: "Workspace not found" });
-      }
-      res.json(serialize(updated));
-    } catch (err) {
-      logError(ctx, "Failed to update workspace", err, {
-        operation: "workspace_update_failed",
-        workspaceId: id,
-      });
-      res.status(500).json({ error: "Failed to update workspace" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/workspaces/{id}/content:
-   *   put:
-   *     summary: Overwrite a workspace's saved tab arrangement with a new payload
-   *     description: Used by "Update with current" in the Workspaces panel. Rejects the Last Session workspace.
-   *     tags:
-   *       - Workspaces
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               payload:
-   *                 type: object
-   *     responses:
-   *       200:
-   *         description: Workspace content updated.
-   *       400:
-   *         description: Invalid request body.
-   *       404:
-   *         description: Workspace not found.
-   */
-  router.put("/:id/content", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const id = parseWorkspaceId(req.params.id);
-    if (id === null) {
-      return res.status(400).json({ error: "Invalid workspace ID" });
-    }
-
-    const { payload } = req.body ?? {};
-    if (!isValidPayload(payload)) {
-      return res
-        .status(400)
-        .json({ error: "payload with a tabs array is required" });
-    }
-
-    try {
-      const updated = await repo.updateContent(
-        userId,
-        id,
-        JSON.stringify(payload),
-      );
-
-      if (!updated) {
-        return res.status(404).json({ error: "Workspace not found" });
-      }
-      res.json(serialize(updated));
-    } catch (err) {
-      logError(ctx, "Failed to update workspace content", err, {
-        operation: "workspace_content_update_failed",
-        workspaceId: id,
-      });
-      res.status(500).json({ error: "Failed to update workspace content" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/workspaces/{id}/duplicate:
-   *   post:
-   *     summary: Duplicate a workspace's content and color/icon under a new name
-   *     tags:
-   *       - Workspaces
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     requestBody:
-   *       required: true
-   *       content:
-   *         application/json:
-   *           schema:
-   *             type: object
-   *             properties:
-   *               name:
-   *                 type: string
-   *     responses:
-   *       200:
-   *         description: New workspace created from the duplicate.
-   *       404:
-   *         description: Workspace not found.
-   */
-  router.post("/:id/duplicate", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const id = parseWorkspaceId(req.params.id);
-    const { name } = req.body ?? {};
-    if (id === null) {
-      return res.status(400).json({ error: "Invalid workspace ID" });
-    }
-    if (!isNonEmptyString(name)) {
-      return res.status(400).json({ error: "Workspace name is required" });
-    }
-
-    try {
-      const source = await repo.findById(userId, id);
-      if (!source) {
-        return res.status(404).json({ error: "Workspace not found" });
-      }
-
-      const created = await repo.create(userId, {
-        name: name.trim(),
-        color: source.color,
-        icon: source.icon,
-        payload: source.payload,
-      });
-      res.json(serialize(created));
-    } catch (err) {
-      logError(ctx, "Failed to duplicate workspace", err, {
-        operation: "workspace_duplicate_failed",
-        workspaceId: id,
-      });
-      res.status(500).json({ error: "Failed to duplicate workspace" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/workspaces/{id}/set-default:
-   *   post:
-   *     summary: Mark a workspace as the restore-on-login default
-   *     description: Clears isDefault on any other workspace for the caller. Idempotent if the target is already the default. Rejects the Last Session workspace.
-   *     tags:
-   *       - Workspaces
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Workspace set as default.
-   *       404:
-   *         description: Workspace not found.
-   */
-  router.post("/:id/set-default", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const id = parseWorkspaceId(req.params.id);
-    if (id === null) {
-      return res.status(400).json({ error: "Invalid workspace ID" });
-    }
-
-    try {
-      const updated = await repo.setDefault(userId, id);
-      if (!updated) {
-        return res.status(404).json({ error: "Workspace not found" });
-      }
-      res.json(serialize(updated));
-    } catch (err) {
-      logError(ctx, "Failed to set default workspace", err, {
-        operation: "workspace_set_default_failed",
-        workspaceId: id,
-      });
-      res.status(500).json({ error: "Failed to set default workspace" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/workspaces/{id}/unset-default:
-   *   post:
-   *     summary: Remove a workspace as the restore-on-login default
-   *     description: Idempotent if the target is not currently the default. Rejects the Last Session workspace.
-   *     tags:
-   *       - Workspaces
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Workspace unset as default.
-   *       404:
-   *         description: Workspace not found.
-   */
-  router.post("/:id/unset-default", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const id = parseWorkspaceId(req.params.id);
-    if (id === null) {
-      return res.status(400).json({ error: "Invalid workspace ID" });
-    }
-
-    try {
-      const updated = await repo.unsetDefault(userId, id);
-      if (!updated) {
-        return res.status(404).json({ error: "Workspace not found" });
-      }
-      res.json(serialize(updated));
-    } catch (err) {
-      logError(ctx, "Failed to unset default workspace", err, {
-        operation: "workspace_unset_default_failed",
-        workspaceId: id,
-      });
-      res.status(500).json({ error: "Failed to unset default workspace" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/workspaces/{id}/apply:
-   *   post:
-   *     summary: Fetch a workspace to apply and mark it as just used
-   *     description: Returns the full workspace with its payload parsed, and touches lastUsedAt server-side so the caller does not need a second round trip.
-   *     tags:
-   *       - Workspaces
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: The workspace to apply.
-   *       404:
-   *         description: Workspace not found.
-   */
-  router.post("/:id/apply", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const id = parseWorkspaceId(req.params.id);
-    if (id === null) {
-      return res.status(400).json({ error: "Invalid workspace ID" });
-    }
-
-    try {
-      const record = await repo.findById(userId, id);
-      if (!record) {
-        return res.status(404).json({ error: "Workspace not found" });
-      }
-
-      await repo.touchLastUsed(userId, id);
-      res.json(serialize(record));
-    } catch (err) {
-      logError(ctx, "Failed to apply workspace", err, {
-        operation: "workspace_apply_failed",
-        workspaceId: id,
-      });
-      res.status(500).json({ error: "Failed to apply workspace" });
-    }
-  });
-
-  /**
-   * @openapi
-   * /plugin-api/workspaces/{id}:
-   *   delete:
-   *     summary: Delete a workspace
-   *     description: Rejects the Last Session workspace, which is not user-deletable.
-   *     tags:
-   *       - Workspaces
-   *     parameters:
-   *       - in: path
-   *         name: id
-   *         required: true
-   *         schema:
-   *           type: integer
-   *     responses:
-   *       200:
-   *         description: Workspace deleted.
-   *       404:
-   *         description: Workspace not found.
-   */
-  router.delete("/:id", async (req: Request, res: Response) => {
-    const userId = actor(ctx);
-    const id = parseWorkspaceId(req.params.id);
-    if (id === null) {
-      return res.status(400).json({ error: "Invalid workspace ID" });
-    }
-
-    try {
-      const deleted = await repo.delete(userId, id);
-      if (!deleted) {
-        return res.status(404).json({ error: "Workspace not found" });
-      }
-      res.json({ success: true });
-    } catch (err) {
-      logError(ctx, "Failed to delete workspace", err, {
-        operation: "workspace_delete_failed",
-        workspaceId: id,
-      });
-      res.status(500).json({ error: "Failed to delete workspace" });
-    }
-  });
-}
diff --git a/plugins/workspaces/src/backend/tables.ts b/plugins/workspaces/src/backend/tables.ts
deleted file mode 100644
index 5f664b2ee..000000000
--- a/plugins/workspaces/src/backend/tables.ts
+++ /dev/null
@@ -1,45 +0,0 @@
-import {
-  adoptLegacyTable,
-  boolean,
-  defineTable,
-  id,
-  refUser,
-  text,
-  timestamp,
-  varchar,
-} from "@termix/plugin-sdk/db";
-
-/**
- * Saved tab arrangements, one row per workspace plus one "last_session" row
- * per user that the frontend keeps current.
- *
- * Adopted from core's user_workspaces, so the column and index names are the
- * legacy ones: the rename carries the existing rows and index across.
- */
-export const workspaces = adoptLegacyTable(
-  "user_workspaces",
-  defineTable(
-    "workspaces",
-    {
-      id: id(),
-      userId: refUser(),
-      name: text().notNull(),
-      color: text(),
-      icon: text(),
-      // "manual" | "last_session"
-      kind: text().notNull().default("manual"),
-      isDefault: boolean().notNull().default(false),
-      // JSON: the shell layout from app.tabs.getLayout
-      payload: text().notNull().default("{}"),
-      syncId: varchar().unique(),
-      createdAt: timestamp().notNull().defaultNow(),
-      updatedAt: timestamp().notNull().defaultNow(),
-      lastUsedAt: timestamp(),
-    },
-    {
-      indexes: [{ name: "idx_user_workspaces_user_id", columns: ["userId"] }],
-    },
-  ),
-);
-
-export const tables = [workspaces];
diff --git a/plugins/workspaces/src/frontend/WorkspacesPanel.tsx b/plugins/workspaces/src/frontend/WorkspacesPanel.tsx
deleted file mode 100644
index 975591d5d..000000000
--- a/plugins/workspaces/src/frontend/WorkspacesPanel.tsx
+++ /dev/null
@@ -1,656 +0,0 @@
-import { useState, useEffect, useCallback, useMemo, useRef } from "react";
-import {
-  usePluginApi,
-  useTranslation,
-  type ShellLayout,
-} from "@termix/plugin-sdk/frontend";
-import { toast } from "sonner";
-import {
-  LayoutTemplate,
-  Loader2,
-  Plus,
-  Save,
-  Settings2,
-  Star,
-  Trash2,
-  X,
-} from "lucide-react";
-import {
-  Badge,
-  Button,
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogFooter,
-  DialogHeader,
-  DialogTitle,
-  FOLDER_COLORS,
-  Input,
-} from "@termix/plugin-sdk/ui";
-import { createWorkspacesApi, type WorkspacesApi } from "./workspaces-api";
-import { errorMessage, type Workspace } from "./types";
-
-type Translate = (key: string, options?: Record<string, unknown>) => string;
-
-function timeAgo(isoStr: string, t: Translate): string {
-  const ms = Date.now() - new Date(isoStr).getTime();
-  if (!Number.isFinite(ms)) return "";
-  const prefix = "newUi.sidebar.workspaces.timeAgo";
-  const sec = Math.floor(ms / 1000);
-  if (sec < 60) return t(`${prefix}.seconds`, { count: sec });
-  const min = Math.floor(sec / 60);
-  if (min < 60) return t(`${prefix}.minutes`, { count: min });
-  const hr = Math.floor(min / 60);
-  if (hr < 24) return t(`${prefix}.hours`, { count: hr });
-  return t(`${prefix}.days`, { count: Math.floor(hr / 24) });
-}
-
-function WorkspaceSaveDialog({
-  open,
-  onClose,
-  onSave,
-}: {
-  open: boolean;
-  onClose: () => void;
-  onSave: (name: string, color: string) => Promise<void>;
-}) {
-  const { t } = useTranslation();
-  const [name, setName] = useState("");
-  const [color, setColor] = useState<string>(FOLDER_COLORS[0]);
-  const [saving, setSaving] = useState(false);
-
-  useEffect(() => {
-    if (!open) return;
-    setName("");
-    setColor(FOLDER_COLORS[0]);
-  }, [open]);
-
-  async function handleSave() {
-    if (!name.trim()) {
-      toast.error(t("newUi.sidebar.workspaces.nameRequired"));
-      return;
-    }
-    setSaving(true);
-    try {
-      await onSave(name.trim(), color);
-      onClose();
-    } finally {
-      setSaving(false);
-    }
-  }
-
-  return (
-    <Dialog open={open} onOpenChange={(next) => !next && onClose()}>
-      <DialogContent className="sm:max-w-md">
-        <DialogHeader>
-          <DialogTitle>
-            {t("newUi.sidebar.workspaces.saveCurrentTitle")}
-          </DialogTitle>
-          <DialogDescription>
-            {t("newUi.sidebar.workspaces.saveCurrentDescription")}
-          </DialogDescription>
-        </DialogHeader>
-
-        <div className="flex flex-col gap-3">
-          <div className="flex flex-col gap-1.5">
-            <label className="text-xs text-muted-foreground">
-              {t("newUi.sidebar.workspaces.nameLabel")}
-            </label>
-            <Input
-              value={name}
-              onChange={(e) => setName(e.target.value)}
-              placeholder={t("newUi.sidebar.workspaces.namePlaceholder")}
-              autoFocus
-              onKeyDown={(e) => {
-                if (e.key === "Enter") handleSave();
-              }}
-            />
-          </div>
-
-          <div className="flex flex-col gap-1.5">
-            <label className="text-xs text-muted-foreground">
-              {t("newUi.sidebar.workspaces.colorLabel")}
-            </label>
-            <div className="flex gap-1.5">
-              {FOLDER_COLORS.map((c) => (
-                <button
-                  key={c}
-                  type="button"
-                  onClick={() => setColor(c)}
-                  className={`size-6 transition-all ${
-                    color === c
-                      ? "ring-2 ring-offset-2 ring-offset-background ring-white/50"
-                      : "opacity-75 hover:opacity-100"
-                  }`}
-                  style={{ backgroundColor: c }}
-                  aria-label={c}
-                />
-              ))}
-            </div>
-          </div>
-        </div>
-
-        <DialogFooter>
-          <Button variant="outline" onClick={onClose}>
-            {t("common.cancel")}
-          </Button>
-          <Button
-            variant="outline"
-            className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-            onClick={handleSave}
-            disabled={saving}
-          >
-            {saving && <Loader2 className="size-3.5 mr-2 animate-spin" />}
-            {t("common.save")}
-          </Button>
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
-  );
-}
-
-function WorkspaceRenameDialog({
-  api,
-  workspace,
-  onClose,
-  onSaved,
-}: {
-  api: WorkspacesApi;
-  workspace: Workspace | null;
-  onClose: () => void;
-  onSaved: () => void;
-}) {
-  const { t } = useTranslation();
-  const [name, setName] = useState("");
-  const [color, setColor] = useState<string>(FOLDER_COLORS[0]);
-  const [saving, setSaving] = useState(false);
-
-  useEffect(() => {
-    if (!workspace) return;
-    setName(workspace.name);
-    setColor(workspace.color ?? FOLDER_COLORS[0]);
-  }, [workspace]);
-
-  async function handleSave() {
-    if (!workspace) return;
-    if (!name.trim()) {
-      toast.error(t("newUi.sidebar.workspaces.nameRequired"));
-      return;
-    }
-    setSaving(true);
-    try {
-      await api.rename(workspace.id, { name: name.trim(), color });
-      toast.success(t("newUi.sidebar.workspaces.workspaceUpdated"));
-      onSaved();
-      onClose();
-    } catch (error) {
-      const message = errorMessage(error);
-      toast.error(message || t("newUi.sidebar.workspaces.updateFailed"));
-    } finally {
-      setSaving(false);
-    }
-  }
-
-  return (
-    <Dialog open={!!workspace} onOpenChange={(next) => !next && onClose()}>
-      <DialogContent className="sm:max-w-md">
-        <DialogHeader>
-          <DialogTitle>{t("newUi.sidebar.workspaces.rename")}</DialogTitle>
-        </DialogHeader>
-
-        <div className="flex flex-col gap-3">
-          <div className="flex flex-col gap-1.5">
-            <label className="text-xs text-muted-foreground">
-              {t("newUi.sidebar.workspaces.nameLabel")}
-            </label>
-            <Input
-              value={name}
-              onChange={(e) => setName(e.target.value)}
-              autoFocus
-              onKeyDown={(e) => {
-                if (e.key === "Enter") handleSave();
-              }}
-            />
-          </div>
-
-          <div className="flex flex-col gap-1.5">
-            <label className="text-xs text-muted-foreground">
-              {t("newUi.sidebar.workspaces.colorLabel")}
-            </label>
-            <div className="flex gap-1.5">
-              {FOLDER_COLORS.map((c) => (
-                <button
-                  key={c}
-                  type="button"
-                  onClick={() => setColor(c)}
-                  className={`size-6 transition-all ${
-                    color === c
-                      ? "ring-2 ring-offset-2 ring-offset-background ring-white/50"
-                      : "opacity-75 hover:opacity-100"
-                  }`}
-                  style={{ backgroundColor: c }}
-                  aria-label={c}
-                />
-              ))}
-            </div>
-          </div>
-        </div>
-
-        <DialogFooter>
-          <Button variant="outline" onClick={onClose}>
-            {t("common.cancel")}
-          </Button>
-          <Button
-            variant="outline"
-            className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-            onClick={handleSave}
-            disabled={saving}
-          >
-            {saving && <Loader2 className="size-3.5 mr-2 animate-spin" />}
-            {t("common.save")}
-          </Button>
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
-  );
-}
-
-function WorkspaceRow({
-  workspace,
-  isLastSession,
-  onApply,
-  onUpdateWithCurrent,
-  onRename,
-  onDuplicate,
-  onDelete,
-  onSetDefault,
-}: {
-  workspace: Workspace;
-  isLastSession: boolean;
-  onApply: () => void;
-  onUpdateWithCurrent: () => void;
-  onRename: () => void;
-  onDuplicate: () => void;
-  onDelete: () => void;
-  onSetDefault: () => void;
-}) {
-  const { t } = useTranslation();
-
-  return (
-    <div
-      className="flex flex-col gap-1 border border-border p-2.5 cursor-pointer hover:bg-muted/40 group"
-      onClick={onApply}
-    >
-      <div className="flex items-center gap-1.5 min-w-0">
-        <span
-          className="size-2.5 shrink-0"
-          style={{ backgroundColor: workspace.color ?? "#6b7280" }}
-        />
-        <span
-          className={`text-xs font-semibold truncate min-w-0 ${isLastSession ? "italic text-muted-foreground" : ""}`}
-        >
-          {isLastSession
-            ? t("newUi.sidebar.workspaces.lastSession")
-            : workspace.name}
-        </span>
-        {workspace.isDefault && (
-          <Star className="size-3 shrink-0 fill-accent-brand text-accent-brand" />
-        )}
-        <Badge variant="secondary" className="shrink-0 ml-auto">
-          {t("newUi.sidebar.workspaces.tabCount", {
-            count: workspace.tabCount,
-          })}
-        </Badge>
-      </div>
-
-      <span className="text-[11px] text-muted-foreground truncate pl-4">
-        {isLastSession
-          ? t("newUi.sidebar.workspaces.lastSessionDescription")
-          : workspace.lastUsedAt
-            ? t("newUi.sidebar.workspaces.lastUsed", {
-                time: timeAgo(workspace.lastUsedAt, t),
-              })
-            : t("newUi.sidebar.workspaces.neverUsed")}
-      </span>
-
-      {!isLastSession && (
-        <div className="flex items-center justify-end gap-0.5 opacity-0 group-hover:opacity-100">
-          <Button
-            variant="ghost"
-            size="icon-sm"
-            title={
-              workspace.isDefault
-                ? t("newUi.sidebar.workspaces.unsetDefault")
-                : t("newUi.sidebar.workspaces.setDefault")
-            }
-            onClick={(e) => {
-              e.stopPropagation();
-              onSetDefault();
-            }}
-          >
-            <Star
-              className={`size-3.5 ${workspace.isDefault ? "fill-accent-brand text-accent-brand" : ""}`}
-            />
-          </Button>
-          <Button
-            variant="ghost"
-            size="icon-sm"
-            title={t("newUi.sidebar.workspaces.updateWithCurrent")}
-            onClick={(e) => {
-              e.stopPropagation();
-              onUpdateWithCurrent();
-            }}
-          >
-            <Save className="size-3.5" />
-          </Button>
-          <Button
-            variant="ghost"
-            size="icon-sm"
-            title={t("newUi.sidebar.workspaces.rename")}
-            onClick={(e) => {
-              e.stopPropagation();
-              onRename();
-            }}
-          >
-            <Settings2 className="size-3.5" />
-          </Button>
-          <Button
-            variant="ghost"
-            size="icon-sm"
-            title={t("newUi.sidebar.workspaces.duplicate")}
-            onClick={(e) => {
-              e.stopPropagation();
-              onDuplicate();
-            }}
-          >
-            <Plus className="size-3.5" />
-          </Button>
-          <Button
-            variant="ghost"
-            size="icon-sm"
-            className="hover:text-destructive"
-            title={t("newUi.sidebar.workspaces.deleteWorkspaceTitle")}
-            onClick={(e) => {
-              e.stopPropagation();
-              onDelete();
-            }}
-          >
-            <Trash2 className="size-3.5" />
-          </Button>
-        </div>
-      )}
-    </div>
-  );
-}
-
-export function WorkspacesPanel({
-  active,
-  currentPayload,
-  onApplyWorkspace,
-}: {
-  active?: boolean;
-  currentPayload: () => ShellLayout | null;
-  onApplyWorkspace: (workspace: Workspace) => void;
-}) {
-  const { t } = useTranslation();
-  const pluginApi = usePluginApi();
-  const api = useMemo(() => createWorkspacesApi(pluginApi), [pluginApi]);
-  const [workspaces, setWorkspaces] = useState<Workspace[]>([]);
-  const [loading, setLoading] = useState(true);
-  const [saveDialogOpen, setSaveDialogOpen] = useState(false);
-  const [renameTarget, setRenameTarget] = useState<Workspace | null>(null);
-  const [deleteTarget, setDeleteTarget] = useState<Workspace | null>(null);
-  const [applyTarget, setApplyTarget] = useState<Workspace | null>(null);
-  const hasLoadedRef = useRef(false);
-
-  const loadWorkspaces = useCallback(async () => {
-    try {
-      const data = await api.list();
-      setWorkspaces(data);
-    } catch (error) {
-      const message = errorMessage(error);
-      toast.error(message || t("newUi.sidebar.workspaces.loadFailed"));
-    }
-  }, [api, t]);
-
-  useEffect(() => {
-    if (!active || hasLoadedRef.current) return;
-    hasLoadedRef.current = true;
-    setLoading(true);
-    loadWorkspaces().finally(() => setLoading(false));
-  }, [active, loadWorkspaces]);
-
-  async function handleSaveNew(name: string, color: string) {
-    try {
-      const payload = currentPayload();
-      if (!payload) return;
-      await api.create({ name, color, payload });
-      toast.success(t("newUi.sidebar.workspaces.workspaceCreated"));
-      loadWorkspaces();
-    } catch (error) {
-      const message = errorMessage(error);
-      toast.error(message || t("newUi.sidebar.workspaces.saveFailed"));
-      throw error;
-    }
-  }
-
-  async function handleUpdateWithCurrent(workspace: Workspace) {
-    try {
-      const payload = currentPayload();
-      if (!payload) return;
-      await api.updateContent(workspace.id, payload);
-      toast.success(t("newUi.sidebar.workspaces.workspaceUpdated"));
-      loadWorkspaces();
-    } catch (error) {
-      const message = errorMessage(error);
-      toast.error(message || t("newUi.sidebar.workspaces.updateFailed"));
-    }
-  }
-
-  async function handleDuplicate(workspace: Workspace) {
-    try {
-      await api.duplicate(
-        workspace.id,
-        t("newUi.sidebar.workspaces.duplicateNameSuffix", {
-          name: workspace.name,
-        }),
-      );
-      toast.success(t("newUi.sidebar.workspaces.workspaceDuplicated"));
-      loadWorkspaces();
-    } catch (error) {
-      const message = errorMessage(error);
-      toast.error(message || t("newUi.sidebar.workspaces.duplicateFailed"));
-    }
-  }
-
-  async function handleToggleDefault(workspace: Workspace) {
-    try {
-      if (workspace.isDefault) {
-        await api.unsetDefault(workspace.id);
-      } else {
-        await api.setDefault(workspace.id);
-      }
-      loadWorkspaces();
-    } catch (error) {
-      const message = errorMessage(error);
-      toast.error(message || t("newUi.sidebar.workspaces.updateFailed"));
-    }
-  }
-
-  async function handleDelete() {
-    if (!deleteTarget) return;
-    try {
-      await api.remove(deleteTarget.id);
-      toast.success(t("newUi.sidebar.workspaces.workspaceDeleted"));
-      setDeleteTarget(null);
-      loadWorkspaces();
-    } catch (error) {
-      const message = errorMessage(error);
-      toast.error(message || t("newUi.sidebar.workspaces.deleteFailed"));
-    }
-  }
-
-  function handleApplyClick(workspace: Workspace) {
-    setApplyTarget(workspace);
-  }
-
-  function confirmApply() {
-    if (!applyTarget) return;
-    onApplyWorkspace(applyTarget);
-    setApplyTarget(null);
-  }
-
-  const manualWorkspaces = workspaces.filter((w) => w.kind === "manual");
-  const lastSession = workspaces.find((w) => w.kind === "last_session");
-
-  return (
-    <div className="flex flex-col flex-1 min-h-0">
-      <div className="flex items-center gap-2 p-3 border-b border-border shrink-0">
-        <LayoutTemplate className="size-4 text-muted-foreground" />
-        <div className="flex min-w-0 flex-1 flex-col">
-          <span className="truncate text-sm font-semibold">
-            {t("newUi.sidebar.workspaces.title")}
-          </span>
-          <a
-            href="https://docs.termix.site/features/workspaces"
-            target="_blank"
-            rel="noreferrer"
-            className="w-fit text-[10px] text-accent-brand hover:underline"
-          >
-            {t("hosts.docsLink")}
-          </a>
-        </div>
-        <Button
-          variant="outline"
-          size="sm"
-          className="shrink-0 border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-          onClick={() => setSaveDialogOpen(true)}
-        >
-          <Plus className="size-3.5 mr-1.5" />
-          {t("newUi.sidebar.workspaces.saveCurrent")}
-        </Button>
-      </div>
-
-      <div className="flex-1 min-h-0 overflow-y-auto p-3">
-        {loading ? (
-          <div className="flex items-center justify-center py-8 text-muted-foreground">
-            <Loader2 className="size-4 animate-spin" />
-          </div>
-        ) : manualWorkspaces.length === 0 && !lastSession ? (
-          <div className="text-xs text-muted-foreground text-center py-8">
-            {t("newUi.sidebar.workspaces.noWorkspaces")}
-          </div>
-        ) : (
-          <div className="flex flex-col gap-1.5">
-            {lastSession && (
-              <WorkspaceRow
-                key={lastSession.id}
-                workspace={lastSession}
-                isLastSession
-                onApply={() => handleApplyClick(lastSession)}
-                onUpdateWithCurrent={() => {}}
-                onRename={() => {}}
-                onDuplicate={() => {}}
-                onDelete={() => {}}
-                onSetDefault={() => {}}
-              />
-            )}
-            {manualWorkspaces.map((workspace) => (
-              <WorkspaceRow
-                key={workspace.id}
-                workspace={workspace}
-                isLastSession={false}
-                onApply={() => handleApplyClick(workspace)}
-                onUpdateWithCurrent={() => {
-                  if (
-                    window.confirm(
-                      t("newUi.sidebar.workspaces.updateWithCurrentConfirm", {
-                        name: workspace.name,
-                      }),
-                    )
-                  ) {
-                    handleUpdateWithCurrent(workspace);
-                  }
-                }}
-                onRename={() => setRenameTarget(workspace)}
-                onDuplicate={() => handleDuplicate(workspace)}
-                onDelete={() => setDeleteTarget(workspace)}
-                onSetDefault={() => handleToggleDefault(workspace)}
-              />
-            ))}
-          </div>
-        )}
-      </div>
-
-      <WorkspaceSaveDialog
-        open={saveDialogOpen}
-        onClose={() => setSaveDialogOpen(false)}
-        onSave={handleSaveNew}
-      />
-
-      <WorkspaceRenameDialog
-        api={api}
-        workspace={renameTarget}
-        onClose={() => setRenameTarget(null)}
-        onSaved={loadWorkspaces}
-      />
-
-      <Dialog
-        open={!!deleteTarget}
-        onOpenChange={(next) => !next && setDeleteTarget(null)}
-      >
-        <DialogContent className="sm:max-w-sm">
-          <DialogHeader>
-            <DialogTitle>
-              {t("newUi.sidebar.workspaces.deleteWorkspaceTitle")}
-            </DialogTitle>
-            <DialogDescription>
-              {t("newUi.sidebar.workspaces.deleteWorkspaceDescription", {
-                name: deleteTarget?.name,
-              })}
-            </DialogDescription>
-          </DialogHeader>
-          <DialogFooter>
-            <Button variant="outline" onClick={() => setDeleteTarget(null)}>
-              {t("common.cancel")}
-            </Button>
-            <Button variant="destructive" onClick={handleDelete}>
-              <X className="size-3.5 mr-2" />
-              {t("common.delete")}
-            </Button>
-          </DialogFooter>
-        </DialogContent>
-      </Dialog>
-
-      <Dialog
-        open={!!applyTarget}
-        onOpenChange={(next) => !next && setApplyTarget(null)}
-      >
-        <DialogContent className="sm:max-w-sm">
-          <DialogHeader>
-            <DialogTitle>
-              {t("newUi.sidebar.workspaces.applyConfirmTitle")}
-            </DialogTitle>
-            <DialogDescription>
-              {t("newUi.sidebar.workspaces.applyConfirmDescription", {
-                name: applyTarget?.name,
-              })}
-            </DialogDescription>
-          </DialogHeader>
-          <DialogFooter>
-            <Button variant="outline" onClick={() => setApplyTarget(null)}>
-              {t("common.cancel")}
-            </Button>
-            <Button
-              variant="outline"
-              className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-              onClick={confirmApply}
-            >
-              {t("newUi.sidebar.workspaces.applyConfirmButton")}
-            </Button>
-          </DialogFooter>
-        </DialogContent>
-      </Dialog>
-    </div>
-  );
-}
diff --git a/plugins/workspaces/src/frontend/index.tsx b/plugins/workspaces/src/frontend/index.tsx
deleted file mode 100644
index de90af8ee..000000000
--- a/plugins/workspaces/src/frontend/index.tsx
+++ /dev/null
@@ -1,96 +0,0 @@
-import { LayoutTemplate } from "lucide-react";
-import { toast } from "sonner";
-import type { PanelProps, TermixApp } from "@termix/plugin-sdk/frontend";
-import { WorkspacesPanel } from "./WorkspacesPanel";
-import { createWorkspacesApi } from "./workspaces-api";
-import type { Workspace } from "./types";
-
-const LAST_SESSION_DELAY_MS = 2000;
-
-export function activate(app: TermixApp): void {
-  const api = createWorkspacesApi(app.api);
-
-  const applyWorkspace = async (workspace: Workspace) => {
-    const { skipped } = await app.tabs.applyLayout(workspace.payload, {
-      name: workspace.name,
-    });
-    if (skipped.length > 0) {
-      toast.warning(
-        app.t("newUi.sidebar.workspaces.tabsSkipped", {
-          count: skipped.length,
-          names: skipped.join(", "),
-        }),
-      );
-    }
-    api.apply(workspace.id).catch(() => {});
-  };
-
-  function Panel({ active }: PanelProps) {
-    return (
-      <div className="flex-1 min-h-0 overflow-y-auto">
-        <WorkspacesPanel
-          active={active}
-          currentPayload={() => app.tabs.getLayout()}
-          onApplyWorkspace={(workspace) => void applyWorkspace(workspace)}
-        />
-      </div>
-    );
-  }
-
-  app.registerRailItem({
-    id: "workspaces",
-    icon: LayoutTemplate,
-    titleKey: "nav.workspaces",
-    after: "macros",
-    permission: "use",
-  });
-  app.registerPanel("workspaces", Panel);
-
-  // Without workspaces.use the restore and the autosave below would only
-  // collect 403s. The lookup is cached, so asking each time is cheap and a
-  // revoke takes effect.
-  const allowed = () => app.hasPermission("use");
-
-  // After login, a default workspace applies unless the session already
-  // brought tabs back, which is the more precise restore.
-  app.tabs.onReady(() => {
-    const layout = app.tabs.getLayout() as { tabs?: unknown[] } | null;
-    if (layout && (layout.tabs?.length ?? 0) > 0) return;
-    void allowed().then(async (ok) => {
-      if (!ok) return;
-      try {
-        const workspaces = await api.list();
-        const preferred = workspaces.find(
-          (workspace) => workspace.kind === "manual" && workspace.isDefault,
-        );
-        if (preferred) await applyWorkspace(preferred);
-      } catch {
-        // A failed restore leaves the empty session as it is.
-      }
-    });
-  });
-
-  // Keeps an implicit "last session" snapshot current, so an arrangement can
-  // always be recovered even if it was never saved.
-  let timer: ReturnType<typeof setTimeout> | null = null;
-  app.tabs.onChange(() => {
-    if (timer) clearTimeout(timer);
-    timer = setTimeout(() => {
-      const layout = app.tabs.getLayout();
-      if (!layout) return;
-      void allowed().then((ok) => {
-        if (ok) api.saveLastSession(layout).catch(() => {});
-      });
-    }, LAST_SESSION_DELAY_MS);
-  });
-  app.onDispose(() => {
-    if (timer) clearTimeout(timer);
-  });
-
-  app.registerSlotContribution("onboarding.workflow", {
-    actionId: "workspaces.tip",
-    titleKey: "onboarding.workflow_workspaces",
-    descriptionKey: "onboarding.workflow_workspaces_desc",
-    icon: LayoutTemplate,
-  });
-}
diff --git a/plugins/workspaces/src/frontend/types.ts b/plugins/workspaces/src/frontend/types.ts
deleted file mode 100644
index d5e9fe14f..000000000
--- a/plugins/workspaces/src/frontend/types.ts
+++ /dev/null
@@ -1,29 +0,0 @@
-import type { ShellLayout } from "@termix/plugin-sdk/frontend";
-
-export type WorkspaceKind = "manual" | "last_session";
-
-/** A saved workspace as the routes return it. */
-export interface Workspace {
-  id: number;
-  userId: string;
-  name: string;
-  color: string | null;
-  icon: string | null;
-  kind: WorkspaceKind;
-  isDefault: boolean;
-  /** Whatever app.tabs.getLayout returned when it was saved. */
-  payload: ShellLayout & { tabs?: unknown[] };
-  syncId: string | null;
-  createdAt: string;
-  updatedAt: string;
-  lastUsedAt: string | null;
-  tabCount: number;
-}
-
-/** The server's error text when it sent one, else the error's own message. */
-export function errorMessage(error: unknown): string {
-  const data = (error as { response?: { data?: { error?: unknown } } })
-    ?.response?.data;
-  if (typeof data?.error === "string") return data.error;
-  return "";
-}
diff --git a/plugins/workspaces/src/frontend/workspaces-api.ts b/plugins/workspaces/src/frontend/workspaces-api.ts
deleted file mode 100644
index c723e3953..000000000
--- a/plugins/workspaces/src/frontend/workspaces-api.ts
+++ /dev/null
@@ -1,38 +0,0 @@
-import type { PluginApiClient, ShellLayout } from "@termix/plugin-sdk/frontend";
-import type { Workspace } from "./types";
-
-/**
- * The workspace routes, through the plugin's own client. Paths are relative
- * to /plugin-api/workspaces/, which the client already points at.
- */
-export function createWorkspacesApi(api: PluginApiClient) {
-  const data = async <T>(request: Promise<{ data: T }>) => (await request).data;
-
-  return {
-    list: () => data(api.get<Workspace[]>("/")),
-    create: (body: {
-      name: string;
-      color?: string | null;
-      icon?: string | null;
-      payload: ShellLayout;
-    }) => data(api.post<Workspace>("/", body)),
-    rename: (
-      id: number,
-      body: { name?: string; color?: string | null; icon?: string | null },
-    ) => data(api.patch<Workspace>(`/${id}`, body)),
-    updateContent: (id: number, payload: ShellLayout) =>
-      data(api.put<Workspace>(`/${id}/content`, { payload })),
-    remove: (id: number) => data(api.delete<{ success: boolean }>(`/${id}`)),
-    duplicate: (id: number, name: string) =>
-      data(api.post<Workspace>(`/${id}/duplicate`, { name })),
-    setDefault: (id: number) => data(api.post<Workspace>(`/${id}/set-default`)),
-    unsetDefault: (id: number) =>
-      data(api.post<Workspace>(`/${id}/unset-default`)),
-    apply: (id: number) => data(api.post<Workspace>(`/${id}/apply`)),
-    getLastSession: () => data(api.get<Workspace | null>("/last-session")),
-    saveLastSession: (payload: ShellLayout) =>
-      data(api.put<Workspace>("/last-session", { payload })),
-  };
-}
-
-export type WorkspacesApi = ReturnType<typeof createWorkspacesApi>;
diff --git a/plugins/workspaces/tests/backend/activate.test.ts b/plugins/workspaces/tests/backend/activate.test.ts
deleted file mode 100644
index 9a11482a7..000000000
--- a/plugins/workspaces/tests/backend/activate.test.ts
+++ /dev/null
@@ -1,76 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import express from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import { PluginCapabilityError } from "@termix/plugin-sdk/backend";
-import { activate } from "../../src/backend/index.js";
-import { manifest, pluginDir, startServer, type TestServer } from "./helpers";
-
-let db: TestDb | null = null;
-let server: TestServer | null = null;
-
-afterEach(async () => {
-  db?.close();
-  db = null;
-  await server?.close();
-  server = null;
-});
-
-describe("workspaces activate", () => {
-  it("registers a sync entity that leaves the per-install last session out", async () => {
-    server = await startServer();
-    const [entity] = server.mock.syncEntities;
-    expect(entity.type).toBe("workspaces");
-    expect(entity.shouldSync?.({ kind: "manual" })).toBe(true);
-    expect(entity.shouldSync?.({ kind: "last_session" })).toBe(false);
-  });
-
-  it("offers the user's manual workspaces as a service", async () => {
-    server = await startServer();
-    await server.request("POST", "/", {
-      body: { name: "Prod", payload: { version: 1, tabs: [] } },
-    });
-    await server.request("PUT", "/last-session", {
-      body: { payload: { version: 1, tabs: [] } },
-    });
-
-    const service = server.mock.services.get("workspaces.saved") as {
-      list: () => Promise<unknown>;
-    };
-    const listed = await server.mock.actAs("user-1", () => service.list());
-    expect(listed).toEqual([
-      { id: expect.any(Number), name: "Prod", isDefault: false },
-    ]);
-  });
-
-  it("fails closed without db:own", async () => {
-    db = await createTestDb(pluginDir);
-    const mock = createMockCtx({
-      pluginId: manifest.id,
-      manifest,
-      capabilities: ["network:serve", "ui:surface"],
-      db: db.database,
-      router: () => express.Router(),
-    });
-    await expect(activate(mock.ctx)).rejects.toBeInstanceOf(
-      PluginCapabilityError,
-    );
-  });
-
-  it("fails closed without network:serve", async () => {
-    db = await createTestDb(pluginDir);
-    const mock = createMockCtx({
-      pluginId: manifest.id,
-      manifest,
-      capabilities: ["db:own", "ui:surface"],
-      db: db.database,
-      router: () => express.Router(),
-    });
-    await expect(activate(mock.ctx)).rejects.toBeInstanceOf(
-      PluginCapabilityError,
-    );
-  });
-});
diff --git a/plugins/workspaces/tests/backend/helpers.ts b/plugins/workspaces/tests/backend/helpers.ts
deleted file mode 100644
index 9e01a3d33..000000000
--- a/plugins/workspaces/tests/backend/helpers.ts
+++ /dev/null
@@ -1,103 +0,0 @@
-import http from "node:http";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import express, { type Router } from "express";
-import {
-  createMockCtx,
-  createTestDb,
-  type MockPluginContext,
-  type TestDb,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import manifestJson from "../../manifest.json";
-
-export const pluginDir = fileURLToPath(new URL("../..", import.meta.url));
-export const manifest = manifestJson as unknown as PluginManifest;
-
-export interface TestServer {
-  db: TestDb;
-  mock: MockPluginContext;
-  request: (
-    method: string,
-    path: string,
-    options?: { user?: string; body?: unknown },
-    // Route bodies vary per test; asserting on them is the point.
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  ) => Promise<{ status: number; body: any }>;
-  close: () => Promise<void>;
-}
-
-/**
- * The plugin activated against a real in-memory database, its router mounted
- * on an express app the way core mounts it: JSON parsed, the acting user set
- * from the request, everything else left to the plugin.
- */
-export async function startServer(
-  options: { permissions?: string[]; users?: string[] } = {},
-): Promise<TestServer> {
-  const db = await createTestDb(pluginDir);
-  for (const user of options.users ?? ["user-1", "user-2"]) {
-    db.sqlite
-      .prepare("INSERT INTO users (id, username) VALUES (?, ?)")
-      .run(user, user);
-  }
-
-  let router: Router | null = null;
-  const mock = createMockCtx({
-    pluginId: manifest.id,
-    manifest,
-    capabilities: manifest.capabilities,
-    db: db.database,
-    router: () => (router = express.Router()),
-    permissions: options.permissions ?? ["workspaces.use"],
-  });
-
-  const { activate } = await import("../../src/backend/index.js");
-  await activate(mock.ctx);
-
-  const app = express();
-  app.use(express.json());
-  app.use((req, _res, next) => {
-    mock.setActor(req.header("x-test-user") ?? undefined);
-    next();
-  });
-  app.use((req, res, next) => router!(req, res, next));
-
-  const server = http.createServer(app);
-  await new Promise<void>((resolve) => server.listen(0, resolve));
-  const { port } = server.address() as AddressInfo;
-
-  return {
-    db,
-    mock,
-    async request(method, path, { user = "user-1", body: given } = {}) {
-      const body = method === "GET" ? undefined : given;
-      const response = await fetch(`http://127.0.0.1:${port}${path}`, {
-        method,
-        headers: {
-          "x-test-user": user,
-          ...(body !== undefined ? { "content-type": "application/json" } : {}),
-        },
-        body: body !== undefined ? JSON.stringify(body) : undefined,
-      });
-      const text = await response.text();
-      return { status: response.status, body: text ? JSON.parse(text) : null };
-    },
-    async close() {
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-      db.close();
-    },
-  };
-}
-
-export const layout = (
-  tabs: unknown[] = [{ slotId: "a", type: "terminal" }],
-) => ({
-  version: 1,
-  tabs,
-  activeSlotId: null,
-  splitMode: "none",
-  paneTabIds: [],
-  rowSizes: [],
-  rowColSizes: [],
-});
diff --git a/plugins/workspaces/tests/backend/migrations.test.ts b/plugins/workspaces/tests/backend/migrations.test.ts
deleted file mode 100644
index d67169253..000000000
--- a/plugins/workspaces/tests/backend/migrations.test.ts
+++ /dev/null
@@ -1,141 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { createTestDb, type TestDb } from "@termix/plugin-sdk/testing";
-import { pluginDir } from "./helpers";
-
-// user_workspaces as core's SQLite bootstrap created it before 2.9.0, plus the
-// index performance-indexes.ts added.
-const LEGACY_DDL = `
-  CREATE TABLE user_workspaces (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-    name TEXT NOT NULL,
-    color TEXT,
-    icon TEXT,
-    kind TEXT NOT NULL DEFAULT 'manual',
-    is_default INTEGER NOT NULL DEFAULT 0,
-    payload TEXT NOT NULL DEFAULT '{}',
-    sync_id TEXT UNIQUE,
-    created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-    last_used_at TEXT
-  );
-  CREATE INDEX idx_user_workspaces_user_id ON user_workspaces (user_id);
-`;
-
-let db: TestDb | null = null;
-
-afterEach(() => {
-  db?.close();
-  db = null;
-});
-
-const tableExists = (name: string) =>
-  !!db!.sqlite
-    .prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?")
-    .get(name);
-
-const indexOn = (table: string) =>
-  (
-    db!.sqlite
-      .prepare(
-        "SELECT name FROM sqlite_master WHERE type = 'index' AND tbl_name = ? AND name NOT LIKE 'sqlite_%'",
-      )
-      .all(table) as { name: string }[]
-  ).map((row) => row.name);
-
-describe("adopting user_workspaces", () => {
-  it("keeps every existing row when the legacy table is there", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1'), ('user-2')");
-        sqlite.exec(LEGACY_DDL);
-        sqlite
-          .prepare(
-            "INSERT INTO user_workspaces (user_id, name, kind, is_default, payload, sync_id, last_used_at) VALUES (?, ?, ?, ?, ?, ?, ?)",
-          )
-          .run(
-            "user-1",
-            "Prod",
-            "manual",
-            1,
-            '{"version":1,"tabs":[{"type":"terminal"}]}',
-            "sync-a",
-            "2026-01-01T00:00:00.000Z",
-          );
-        sqlite
-          .prepare(
-            "INSERT INTO user_workspaces (user_id, name, kind, payload, sync_id) VALUES (?, ?, ?, ?, ?)",
-          )
-          .run("user-2", "Last Session", "last_session", "{}", "sync-b");
-      },
-    });
-
-    expect(db.applied).toEqual(["0001_adopt_user_workspaces"]);
-    expect(tableExists("user_workspaces")).toBe(false);
-    expect(tableExists("p_workspaces_workspaces")).toBe(true);
-
-    const rows = db.sqlite
-      .prepare(
-        "SELECT user_id, name, kind, is_default, payload, sync_id, last_used_at FROM p_workspaces_workspaces ORDER BY id",
-      )
-      .all();
-    expect(rows).toEqual([
-      {
-        user_id: "user-1",
-        name: "Prod",
-        kind: "manual",
-        is_default: 1,
-        payload: '{"version":1,"tabs":[{"type":"terminal"}]}',
-        sync_id: "sync-a",
-        last_used_at: "2026-01-01T00:00:00.000Z",
-      },
-      {
-        user_id: "user-2",
-        name: "Last Session",
-        kind: "last_session",
-        is_default: 0,
-        payload: "{}",
-        sync_id: "sync-b",
-        last_used_at: null,
-      },
-    ]);
-    expect(indexOn("p_workspaces_workspaces")).toEqual([
-      "idx_user_workspaces_user_id",
-    ]);
-  });
-
-  it("creates the table fresh when there is no legacy one", async () => {
-    db = await createTestDb(pluginDir);
-
-    expect(tableExists("user_workspaces")).toBe(false);
-    expect(tableExists("p_workspaces_workspaces")).toBe(true);
-    expect(indexOn("p_workspaces_workspaces")).toEqual([
-      "idx_user_workspaces_user_id",
-    ]);
-    expect(
-      db.sqlite.prepare("SELECT * FROM p_workspaces_workspaces").all(),
-    ).toEqual([]);
-  });
-
-  it("removes a user's workspaces when the user is deleted", async () => {
-    db = await createTestDb(pluginDir, {
-      before: (sqlite) => {
-        sqlite.exec("INSERT INTO users (id) VALUES ('user-1'), ('user-2')");
-      },
-    });
-    const insert = db.sqlite.prepare(
-      "INSERT INTO p_workspaces_workspaces (user_id, name) VALUES (?, ?)",
-    );
-    insert.run("user-1", "Mine");
-    insert.run("user-2", "Theirs");
-
-    db.sqlite.exec("DELETE FROM users WHERE id = 'user-1'");
-
-    const names = (
-      db.sqlite.prepare("SELECT name FROM p_workspaces_workspaces").all() as {
-        name: string;
-      }[]
-    ).map((row) => row.name);
-    expect(names).toEqual(["Theirs"]);
-  });
-});
diff --git a/plugins/workspaces/tests/backend/repository.test.ts b/plugins/workspaces/tests/backend/repository.test.ts
deleted file mode 100644
index 06675ea29..000000000
--- a/plugins/workspaces/tests/backend/repository.test.ts
+++ /dev/null
@@ -1,64 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import { createTestDb, type TestDb } from "@termix/plugin-sdk/testing";
-import { workspaces } from "../../src/backend/tables.js";
-import {
-  createWorkspaceRepository,
-  type WorkspaceRepository,
-} from "../../src/backend/repository.js";
-import { pluginDir } from "./helpers";
-
-let db: TestDb;
-let repo: WorkspaceRepository;
-
-beforeEach(async () => {
-  db = await createTestDb(pluginDir, {
-    before: (sqlite) =>
-      sqlite.exec("INSERT INTO users (id) VALUES ('user-1'), ('user-2')"),
-  });
-  repo = createWorkspaceRepository(
-    db.database,
-    await db.database.define(workspaces),
-  );
-});
-
-afterEach(() => db.close());
-
-describe("workspace repository", () => {
-  it("reads a new row back by its own sync id", async () => {
-    const a = await repo.create("user-1", { name: "A", payload: "{}" });
-    const b = await repo.create("user-1", { name: "B", payload: "{}" });
-    expect(a.name).toBe("A");
-    expect(b.name).toBe("B");
-    expect(a.syncId).not.toBe(b.syncId);
-    expect(a.createdAt).toBe(a.updatedAt);
-  });
-
-  it("returns the updated last session rather than a new one", async () => {
-    const first = await repo.upsertLastSession("user-1", '{"tabs":[]}', "t1");
-    const second = await repo.upsertLastSession("user-1", '{"tabs":[1]}', "t2");
-    expect(second.id).toBe(first.id);
-    expect(second.payload).toBe('{"tabs":[1]}');
-    expect(second.updatedAt).toBe("t2");
-  });
-
-  it("switches the default without touching another user's", async () => {
-    const theirs = await repo.create("user-2", { name: "T", payload: "{}" });
-    await repo.setDefault("user-2", theirs.id);
-
-    const a = await repo.create("user-1", { name: "A", payload: "{}" });
-    const b = await repo.create("user-1", { name: "B", payload: "{}" });
-    await repo.setDefault("user-1", a.id);
-    await repo.setDefault("user-1", b.id);
-
-    expect((await repo.findById("user-1", a.id))?.isDefault).toBe(false);
-    expect((await repo.findById("user-1", b.id))?.isDefault).toBe(true);
-    expect((await repo.findById("user-2", theirs.id))?.isDefault).toBe(true);
-  });
-
-  it("refuses to edit or delete the last session", async () => {
-    const last = await repo.upsertLastSession("user-1", "{}");
-    expect(await repo.update("user-1", last.id, { name: "x" })).toBeNull();
-    expect(await repo.setDefault("user-1", last.id)).toBeNull();
-    expect(await repo.delete("user-1", last.id)).toBe(false);
-  });
-});
diff --git a/plugins/workspaces/tests/backend/routes.test.ts b/plugins/workspaces/tests/backend/routes.test.ts
deleted file mode 100644
index 99a46a31e..000000000
--- a/plugins/workspaces/tests/backend/routes.test.ts
+++ /dev/null
@@ -1,203 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import { layout, startServer, type TestServer } from "./helpers";
-
-let server: TestServer;
-
-beforeEach(async () => {
-  server = await startServer();
-});
-
-afterEach(async () => {
-  await server.close();
-});
-
-async function create(name = "Prod", user = "user-1") {
-  const res = await server.request("POST", "/", {
-    user,
-    body: { name, color: "#ef4444", payload: layout() },
-  });
-  expect(res.status).toBe(200);
-  return res.body;
-}
-
-describe("workspace routes", () => {
-  it("creates and lists workspaces with a parsed payload and tab count", async () => {
-    const created = await create();
-    expect(created).toMatchObject({
-      name: "Prod",
-      color: "#ef4444",
-      kind: "manual",
-      isDefault: false,
-      tabCount: 1,
-    });
-    expect(created.payload.tabs).toHaveLength(1);
-    expect(created.syncId).toEqual(expect.any(String));
-
-    const list = await server.request("GET", "/");
-    expect(list.body).toHaveLength(1);
-    expect(list.body[0].id).toBe(created.id);
-  });
-
-  it("rejects a missing name or payload", async () => {
-    expect(
-      (await server.request("POST", "/", { body: { payload: layout() } }))
-        .status,
-    ).toBe(400);
-    expect(
-      (await server.request("POST", "/", { body: { name: "x", payload: {} } }))
-        .status,
-    ).toBe(400);
-  });
-
-  it("keeps one last session row per user and never lists it as editable", async () => {
-    expect((await server.request("GET", "/last-session")).body).toBeNull();
-
-    await server.request("PUT", "/last-session", {
-      body: { payload: layout() },
-    });
-    const second = await server.request("PUT", "/last-session", {
-      body: { payload: layout([]) },
-    });
-    expect(second.body.tabCount).toBe(0);
-
-    const list = (await server.request("GET", "/")).body;
-    expect(
-      list.filter(
-        (w: { kind: string; isDefault: boolean; id: number }) =>
-          w.kind === "last_session",
-      ),
-    ).toHaveLength(1);
-
-    const id = second.body.id;
-    expect(
-      (await server.request("PATCH", `/${id}`, { body: { name: "x" } })).status,
-    ).toBe(404);
-    expect((await server.request("DELETE", `/${id}`)).status).toBe(404);
-  });
-
-  it("renames, replaces content and duplicates", async () => {
-    const created = await create();
-
-    const renamed = await server.request("PATCH", `/${created.id}`, {
-      body: { name: "  Staging  ", color: "#22c55e" },
-    });
-    expect(renamed.body).toMatchObject({ name: "Staging", color: "#22c55e" });
-
-    const replaced = await server.request("PUT", `/${created.id}/content`, {
-      body: { payload: layout([]) },
-    });
-    expect(replaced.body.tabCount).toBe(0);
-
-    const copy = await server.request("POST", `/${created.id}/duplicate`, {
-      body: { name: "Staging (copy)" },
-    });
-    expect(copy.body).toMatchObject({
-      name: "Staging (copy)",
-      color: "#22c55e",
-      tabCount: 0,
-    });
-    expect(copy.body.id).not.toBe(created.id);
-  });
-
-  it("keeps a single default", async () => {
-    const a = await create("A");
-    const b = await create("B");
-
-    await server.request("POST", `/${a.id}/set-default`);
-    await server.request("POST", `/${b.id}/set-default`);
-
-    const list = (await server.request("GET", "/")).body;
-    const defaults = list.filter(
-      (w: { kind: string; isDefault: boolean; id: number }) => w.isDefault,
-    );
-    expect(
-      defaults.map(
-        (w: { kind: string; isDefault: boolean; id: number }) => w.id,
-      ),
-    ).toEqual([b.id]);
-
-    const unset = await server.request("POST", `/${b.id}/unset-default`);
-    expect(unset.body.isDefault).toBe(false);
-  });
-
-  it("marks a workspace as used when it is applied", async () => {
-    const created = await create();
-    expect(created.lastUsedAt).toBeNull();
-
-    const applied = await server.request("POST", `/${created.id}/apply`);
-    expect(applied.status).toBe(200);
-
-    const list = (await server.request("GET", "/")).body;
-    expect(list[0].lastUsedAt).toEqual(expect.any(String));
-  });
-
-  it("deletes a workspace", async () => {
-    const created = await create();
-    expect((await server.request("DELETE", `/${created.id}`)).body).toEqual({
-      success: true,
-    });
-    expect((await server.request("GET", "/")).body).toEqual([]);
-    expect((await server.request("DELETE", `/${created.id}`)).status).toBe(404);
-  });
-
-  it("rejects ids that are not numbers", async () => {
-    expect((await server.request("DELETE", "/abc")).status).toBe(400);
-    expect((await server.request("POST", "/abc/apply")).status).toBe(400);
-  });
-
-  it("never shows or changes another user's workspaces", async () => {
-    const mine = await create("Mine", "user-1");
-
-    expect((await server.request("GET", "/", { user: "user-2" })).body).toEqual(
-      [],
-    );
-    for (const [method, path] of [
-      ["PATCH", `/${mine.id}`],
-      ["DELETE", `/${mine.id}`],
-      ["POST", `/${mine.id}/apply`],
-      ["POST", `/${mine.id}/set-default`],
-      ["POST", `/${mine.id}/duplicate`],
-    ] as const) {
-      const res = await server.request(method, path, {
-        user: "user-2",
-        body: { name: "stolen" },
-      });
-      expect(res.status).toBe(404);
-    }
-  });
-
-  it("flushes the database after every write", async () => {
-    const before = server.db.persisted;
-    const created = await create();
-    await server.request("POST", `/${created.id}/set-default`);
-    await server.request("DELETE", `/${created.id}`);
-    expect(server.db.persisted).toBeGreaterThanOrEqual(before + 3);
-  });
-});
-
-describe("workspaces.use", () => {
-  it("refuses every route without it", async () => {
-    await server.close();
-    server = await startServer({ permissions: [] });
-
-    for (const [method, path] of [
-      ["GET", "/"],
-      ["POST", "/"],
-      ["GET", "/last-session"],
-      ["PUT", "/last-session"],
-      ["PATCH", "/1"],
-      ["PUT", "/1/content"],
-      ["POST", "/1/duplicate"],
-      ["POST", "/1/set-default"],
-      ["POST", "/1/unset-default"],
-      ["POST", "/1/apply"],
-      ["DELETE", "/1"],
-    ] as const) {
-      const res = await server.request(method, path, {
-        body: { name: "x", payload: layout() },
-      });
-      expect(res.status, `${method} ${path}`).toBe(403);
-      expect(res.body.required).toBe("workspaces.use");
-    }
-  });
-});
diff --git a/plugins/workspaces/tests/frontend/activate.test.tsx b/plugins/workspaces/tests/frontend/activate.test.tsx
deleted file mode 100644
index 9551ba71c..000000000
--- a/plugins/workspaces/tests/frontend/activate.test.tsx
+++ /dev/null
@@ -1,216 +0,0 @@
-import { afterEach, describe, expect, it, vi } from "vitest";
-import { fireEvent, screen, waitFor } from "@testing-library/react";
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import {
-  renderWithApp,
-  type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import * as plugin from "../../src/frontend/index";
-import manifestJson from "../../manifest.json";
-import locales from "../../locales/en.json";
-
-const manifest = manifestJson as unknown as PluginManifest;
-
-const declared = (views?: Array<{ id: string }>) =>
-  (views ?? []).map((view) => view.id).sort();
-
-let rendered: RenderedPluginApp | null = null;
-
-afterEach(async () => {
-  await rendered?.deactivate();
-  rendered = null;
-});
-
-describe(`${manifest.id} activate`, () => {
-  it("activates and registers only views its manifest declares", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    const contributes = manifest.contributes as unknown as Record<
-      string,
-      Array<{ id: string }> | undefined
-    >;
-    const tabs = declared(contributes.tabs);
-    // A rail panel may reuse one of the plugin's tab ids.
-    const panels = [...declared(contributes.panels), ...tabs];
-    const cards = declared(contributes.dashboardCards);
-    for (const id of rendered.registered.tabs()) expect(tabs).toContain(id);
-    for (const id of rendered.registered.panels()) expect(panels).toContain(id);
-    for (const id of rendered.registered.dashboardCards()) {
-      expect(cards).toContain(id);
-    }
-  });
-
-  it("removes everything it registered on deactivate", async () => {
-    const app = await renderWithApp(plugin, { manifest, locales });
-    await app.deactivate();
-    expect(app.registered.tabs()).toEqual([]);
-    expect(app.registered.panels()).toEqual([]);
-    expect(app.registered.railItems()).toEqual([]);
-    expect(app.registered.hostActions()).toEqual([]);
-    expect(app.registered.hostEditorSections()).toEqual([]);
-    expect(app.registered.dashboardCards()).toEqual([]);
-    expect(app.registered.settingsComponents()).toEqual([]);
-    expect(app.registered.actions()).toEqual([]);
-  });
-});
-
-function workspace(overrides: Record<string, unknown> = {}) {
-  return {
-    id: 1,
-    userId: "user-1",
-    name: "Prod",
-    color: "#ef4444",
-    icon: null,
-    kind: "manual",
-    isDefault: false,
-    payload: {
-      version: 1,
-      tabs: [{ slotId: "s1", type: "network_graph", label: "Graph" }],
-      activeSlotId: "s1",
-      splitMode: "none",
-      paneTabIds: [],
-      rowSizes: [],
-      rowColSizes: [],
-    },
-    syncId: "sync-1",
-    createdAt: "2026-01-01T00:00:00.000Z",
-    updatedAt: "2026-01-01T00:00:00.000Z",
-    lastUsedAt: null,
-    tabCount: 1,
-    ...overrides,
-  };
-}
-
-function stubApi(workspaces: unknown[]) {
-  return {
-    get: vi.fn(async () => ({ data: workspaces })),
-    post: vi.fn(async () => ({ data: workspaces[0] })),
-    put: vi.fn(async () => ({ data: {} })),
-    patch: vi.fn(async () => ({ data: {} })),
-    delete: vi.fn(async () => ({ data: { success: true } })),
-  };
-}
-
-async function applyThroughPanel(app: RenderedPluginApp, name: string) {
-  app.renderPanel("workspaces", { active: true });
-  fireEvent.click(await screen.findByText(name));
-  fireEvent.click(
-    await screen.findByText("Apply Workspace", { selector: "button" }),
-  );
-  await waitFor(() =>
-    expect(app.shellCalls.some((call) => call.method === "applyLayout")).toBe(
-      true,
-    ),
-  );
-}
-
-describe("workspaces panel", () => {
-  it("gates its rail item on workspaces.use", async () => {
-    rendered = await renderWithApp(plugin, { manifest, locales });
-    expect(rendered.registered.railItems()).toEqual([
-      expect.objectContaining({
-        id: "workspaces",
-        permission: "workspaces.use",
-      }),
-    ]);
-  });
-
-  it("lists the user's workspaces", async () => {
-    const api = stubApi([
-      workspace(),
-      workspace({ id: 2, name: "Last Session", kind: "last_session" }),
-    ]);
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: api as unknown as PluginApiClient,
-    });
-    rendered.renderPanel("workspaces", { active: true });
-
-    expect(await screen.findByText("Prod")).toBeTruthy();
-    expect(
-      screen.getByText(locales.newUi.sidebar.workspaces.lastSession),
-    ).toBeTruthy();
-    expect(api.get).toHaveBeenCalledWith("/");
-  });
-
-  it("applies a workspace to the tabs and marks it used", async () => {
-    const saved = workspace();
-    const api = stubApi([saved]);
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: api as unknown as PluginApiClient,
-    });
-
-    await applyThroughPanel(rendered, "Prod");
-
-    const call = rendered.shellCalls.find((c) => c.method === "applyLayout");
-    expect(call?.args[0]).toEqual(saved.payload);
-    expect(call?.args[1]).toEqual({ name: "Prod" });
-    await waitFor(() => expect(api.post).toHaveBeenCalledWith("/1/apply"));
-  });
-
-  it("keeps a tab from a plugin that is not running and shows its placeholder", async () => {
-    const saved = workspace({
-      payload: {
-        version: 1,
-        tabs: [{ slotId: "s1", type: "not-installed-view", label: "Gone" }],
-        activeSlotId: "s1",
-        splitMode: "none",
-        paneTabIds: [],
-        rowSizes: [],
-        rowColSizes: [],
-      },
-    });
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      api: stubApi([saved]) as unknown as PluginApiClient,
-    });
-
-    await applyThroughPanel(rendered, "Prod");
-
-    expect(rendered.openedTabs()).toEqual([
-      { type: "not-installed-view", hostId: undefined, label: "Gone" },
-    ]);
-    const tab = rendered.renderOpenedTab(0);
-    expect(
-      tab.querySelector('[data-testid="plugin-view-placeholder"]'),
-    ).not.toBeNull();
-  });
-
-  it("restores the default workspace once the shell is ready", async () => {
-    const saved = workspace({ isDefault: true });
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      permissions: ["workspaces.use"],
-      ready: true,
-      api: stubApi([saved]) as unknown as PluginApiClient,
-    });
-
-    await waitFor(() =>
-      expect(
-        rendered!.shellCalls.find((c) => c.method === "applyLayout")?.args[0],
-      ).toEqual(saved.payload),
-    );
-  });
-
-  it("does not restore or autosave for a user without workspaces.use", async () => {
-    const api = stubApi([workspace({ isDefault: true })]);
-    rendered = await renderWithApp(plugin, {
-      manifest,
-      locales,
-      permissions: [],
-      ready: true,
-      api: api as unknown as PluginApiClient,
-    });
-
-    await new Promise((resolve) => setTimeout(resolve, 20));
-    expect(api.get).not.toHaveBeenCalled();
-    expect(rendered.shellCalls.some((c) => c.method === "applyLayout")).toBe(
-      false,
-    );
-  });
-});
diff --git a/plugins/workspaces/tests/frontend/workspaces-api.test.ts b/plugins/workspaces/tests/frontend/workspaces-api.test.ts
deleted file mode 100644
index 5f60df3a2..000000000
--- a/plugins/workspaces/tests/frontend/workspaces-api.test.ts
+++ /dev/null
@@ -1,57 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import type { PluginApiClient } from "@termix/plugin-sdk/frontend";
-import { createWorkspacesApi } from "../../src/frontend/workspaces-api";
-
-function fakeClient() {
-  const reply = (data: unknown) => vi.fn(async () => ({ data }));
-  return {
-    get: reply([]),
-    post: reply({ id: 1 }),
-    put: reply({ id: 1 }),
-    patch: reply({ id: 1 }),
-    delete: reply({ success: true }),
-  };
-}
-
-const layout = { version: 1, tabs: [] };
-
-describe("workspaces api", () => {
-  it("calls each route relative to the plugin's own mount point", async () => {
-    const client = fakeClient();
-    const api = createWorkspacesApi(client as unknown as PluginApiClient);
-
-    await api.list();
-    await api.create({ name: "A", color: "#fff", payload: layout });
-    await api.rename(3, { name: "B" });
-    await api.updateContent(3, layout);
-    await api.remove(3);
-    await api.duplicate(3, "C");
-    await api.setDefault(3);
-    await api.unsetDefault(3);
-    await api.apply(3);
-    await api.getLastSession();
-    await api.saveLastSession(layout);
-
-    expect(client.get.mock.calls).toEqual([["/"], ["/last-session"]]);
-    expect(client.post.mock.calls).toEqual([
-      ["/", { name: "A", color: "#fff", payload: layout }],
-      ["/3/duplicate", { name: "C" }],
-      ["/3/set-default"],
-      ["/3/unset-default"],
-      ["/3/apply"],
-    ]);
-    expect(client.patch.mock.calls).toEqual([["/3", { name: "B" }]]);
-    expect(client.put.mock.calls).toEqual([
-      ["/3/content", { payload: layout }],
-      ["/last-session", { payload: layout }],
-    ]);
-    expect(client.delete.mock.calls).toEqual([["/3"]]);
-  });
-
-  it("returns the response body", async () => {
-    const client = fakeClient();
-    client.get = vi.fn(async () => ({ data: [{ id: 7 }] }));
-    const api = createWorkspacesApi(client as unknown as PluginApiClient);
-    expect(await api.list()).toEqual([{ id: 7 }]);
-  });
-});
diff --git a/plugins/workspaces/tsconfig.json b/plugins/workspaces/tsconfig.json
deleted file mode 100644
index 7b35314c3..000000000
--- a/plugins/workspaces/tsconfig.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "extends": "@termix/plugin-sdk/tsconfig.plugin.json",
-  "include": ["src/**/*.ts", "src/**/*.tsx", "tests/**/*.ts", "tests/**/*.tsx"]
-}
diff --git a/plugins/workspaces/vitest.config.ts b/plugins/workspaces/vitest.config.ts
deleted file mode 100644
index 31ba004fc..000000000
--- a/plugins/workspaces/vitest.config.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-import { pluginVitestConfig } from "@termix/plugin-sdk/vitest-preset";
-
-export default pluginVitestConfig(import.meta.url);
diff --git a/public/banner.png b/public/banner.png
new file mode 100644
index 000000000..5c6b9b5c8
Binary files /dev/null and b/public/banner.png differ
diff --git a/public/favicon.ico b/public/favicon.ico
index 438484bb9..cacb879ea 100644
Binary files a/public/favicon.ico and b/public/favicon.ico differ
diff --git a/public/full-icon.png b/public/full-icon.png
index 574578cc2..20b1952f8 100644
Binary files a/public/full-icon.png and b/public/full-icon.png differ
diff --git a/public/icon-mac.png b/public/icon-mac.png
index 56ae3e4a9..761505f5a 100644
Binary files a/public/icon-mac.png and b/public/icon-mac.png differ
diff --git a/public/icon-square.svg b/public/icon-square.svg
new file mode 100644
index 000000000..012b3e01b
--- /dev/null
+++ b/public/icon-square.svg
@@ -0,0 +1,7 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="1024" height="1024" viewBox="0 0 1024 1024">
+  <rect width="1024" height="1024" fill="#141513"/>
+  <rect x="227" y="244" width="570" height="92" rx="46" fill="#ffffff"/>
+  <path d="M474 336H550V786A38 38 0 0 1 474 786V572.2L542 545V447L474 419.8ZM498 647.5V761.5H550V647.5Z" fill="#ffffff" fill-rule="evenodd"/>
+  <path d="M306 387.2L510 468.8V523.2L306 604.8V547.5L435.5 496L306 444.5Z" fill="#f59145"/>
+  <rect x="530.5" y="679.5" width="213" height="50" fill="#f59145"/>
+</svg>
diff --git a/public/icon.icns b/public/icon.icns
index 1a3cc8932..99bebe7d6 100644
Binary files a/public/icon.icns and b/public/icon.icns differ
diff --git a/public/icon.ico b/public/icon.ico
index 00594ef7a..3495803f3 100644
Binary files a/public/icon.ico and b/public/icon.ico differ
diff --git a/public/icon.png b/public/icon.png
index 574578cc2..20b1952f8 100644
Binary files a/public/icon.png and b/public/icon.png differ
diff --git a/public/icon.svg b/public/icon.svg
index 4ee301a74..7222ab7d8 100644
--- a/public/icon.svg
+++ b/public/icon.svg
@@ -1,7 +1,7 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="1024" height="1024">
-<path d="M0 0 C1.24605143 -0.00320648 2.49210286 -0.00641296 3.77591342 -0.0097166 C7.20551324 -0.01654213 10.63489336 -0.01454336 14.06448046 -0.00866088 C17.80678204 -0.00446316 21.54906441 -0.01190796 25.29136121 -0.01781338 C31.84084796 -0.02655123 38.39030342 -0.02789611 44.93979454 -0.02431011 C54.67961151 -0.01899148 64.41939833 -0.02511011 74.15921202 -0.03339304 C92.56926142 -0.04861937 110.97929706 -0.05033948 129.38935144 -0.04787002 C143.60890976 -0.04603597 157.82846357 -0.0477993 172.04802132 -0.05209446 C174.09235779 -0.05269687 176.13669427 -0.05329806 178.18103074 -0.05389806 C181.26182901 -0.05480534 184.34262728 -0.05571401 187.42342555 -0.05663041 C216.06152484 -0.06505806 244.69962243 -0.06939698 273.33772278 -0.06522369 C274.95656045 -0.06498913 274.95656045 -0.06498913 276.60810192 -0.06474983 C282.07778518 -0.06394407 287.54746842 -0.0630983 293.01715167 -0.06223653 C294.64653437 -0.06197989 294.64653437 -0.06197989 296.30883388 -0.06171808 C298.50550538 -0.06137142 300.70217687 -0.06102289 302.89884837 -0.06067249 C337.07170733 -0.05531644 371.24454049 -0.06324318 405.41739464 -0.08170605 C443.83052411 -0.10243565 482.24363759 -0.11314686 520.65677297 -0.10913056 C524.75506425 -0.10873523 528.85335552 -0.10837368 532.9516468 -0.10803318 C533.96071349 -0.10794245 534.96978018 -0.10785172 536.00942464 -0.10775824 C551.22334929 -0.10659366 566.43725776 -0.11323001 581.65117836 -0.1238451 C598.96103916 -0.13591042 616.2708644 -0.13744077 633.58072574 -0.12505493 C643.25916158 -0.11843905 652.93751231 -0.12002798 662.6159413 -0.13364345 C669.09234848 -0.1419165 675.56869223 -0.13915349 682.04509432 -0.12766818 C685.72751758 -0.12143989 689.40977538 -0.11973724 693.09218879 -0.13153151 C742.29620511 -0.27803261 783.72404367 14.44275388 819.33878136 49.25447559 C838.15454949 68.05987805 851.6807596 92.15656693 859.15128136 117.62947559 C859.50259117 118.81223072 859.50259117 118.81223072 859.86099815 120.01887989 C864.84716349 137.93439184 865.34131204 155.41560974 865.28668402 173.91294083 C865.27899556 177.65690687 865.28888432 181.40083665 865.29641402 185.14479738 C865.3071966 191.69097825 865.30695291 198.23708474 865.29927254 204.78326893 C865.2878824 214.51804038 865.2937484 224.25274959 865.30289746 233.98752068 C865.31866453 251.37833898 865.3173375 268.76912415 865.30866072 286.15994558 C865.30110466 301.37985494 865.29914832 316.59975219 865.30272865 331.81966305 C865.30295781 332.83047421 865.30318696 333.84128537 865.30342306 334.88272717 C865.30435713 338.98627537 865.30531233 343.08982357 865.30630235 347.19337176 C865.3154731 385.66415573 865.30716901 424.13491865 865.29101166 462.60569937 C865.27677663 496.7590625 865.27804855 530.91239206 865.29239464 565.06575489 C865.30847087 603.46608751 865.31482155 641.86640153 865.30555785 680.26673704 C865.30459574 684.36298215 865.30365722 688.45922726 865.30272865 692.55547237 C865.3023728 694.06829454 865.3023728 694.06829454 865.30200977 695.61167876 C865.29860234 710.81857886 865.3025789 726.02546547 865.31016731 741.2323637 C865.31875621 758.53008151 865.31657695 775.82776109 865.30032508 793.12547415 C865.29153676 802.79747308 865.2909114 812.46938917 865.3022636 822.1413859 C865.30901854 828.61208821 865.30475417 835.08272447 865.2917493 841.55341703 C865.28465281 845.23332826 865.2820887 848.9130756 865.29296724 852.59298133 C865.3442355 871.30113003 864.89727324 889.46647244 859.15128136 907.44197559 C858.89524132 908.2652837 858.63920128 909.0885918 858.37540245 909.93684864 C855.79685812 917.9856683 852.58102984 925.65348896 848.90128136 933.25447559 C848.61591515 933.86033497 848.33054893 934.46619434 848.03653526 935.09041309 C830.37472338 972.22703729 796.06237029 1001.64914703 757.52628136 1015.44197559 C741.01943895 1021.1452558 724.41526408 1024.57505987 706.89996243 1024.5117445 C705.65228729 1024.51525057 704.40461215 1024.51875665 703.11912867 1024.52236897 C699.68034267 1024.53174518 696.24166373 1024.52885318 692.80287276 1024.52381342 C689.05227316 1024.52052693 685.3016955 1024.52884577 681.55110306 1024.53563178 C674.98544107 1024.54591004 668.41980856 1024.54877936 661.85413933 1024.54671955 C652.09014292 1024.54366388 642.32617902 1024.55200613 632.56218895 1024.5624688 C614.10585117 1024.58179372 595.64952453 1024.58743648 577.19317783 1024.58858292 C562.93642719 1024.5895027 548.6796809 1024.59362298 534.42293167 1024.59998417 C530.31618419 1024.60177932 526.2094367 1024.60355895 522.10268921 1024.60533392 C521.08167553 1024.60577602 520.06066186 1024.60621812 519.00870837 1024.60667361 C490.29523693 1024.61897939 461.581767 1024.62687502 432.86829281 1024.62598705 C431.78608639 1024.6259559 430.70387998 1024.62592474 429.58887942 1024.62589264 C424.10406817 1024.62572643 418.61925692 1024.62552835 413.13444567 1024.62532322 C412.04518472 1024.62528333 410.95592376 1024.62524344 409.8336549 1024.62520234 C407.63090343 1024.62512147 405.42815196 1024.62503787 403.22540049 1024.62495156 C368.96540695 1024.62372645 334.70545302 1024.63873292 300.44547081 1024.66609669 C261.93454387 1024.69684321 223.42364296 1024.7140276 184.91270298 1024.71217024 C180.8031263 1024.71202099 176.69354962 1024.71192357 172.58397293 1024.71186161 C171.57212829 1024.7118383 170.56028365 1024.71181499 169.51777705 1024.71179098 C153.26096984 1024.71172953 137.00419713 1024.72448095 120.74740016 1024.74172614 C104.39692246 1024.75871146 88.046495 1024.76063382 71.69601334 1024.7475075 C61.99353772 1024.74013745 52.29121515 1024.74371788 42.58875587 1024.76339218 C36.09373793 1024.775445 29.59883011 1024.77274261 23.10381709 1024.75845118 C19.41234887 1024.75073256 15.72117545 1024.74900606 12.02972872 1024.76536588 C-16.2676811 1024.88241153 -42.64614383 1021.25992027 -68.09871864 1008.25447559 C-69.64366005 1007.48877247 -69.64366005 1007.48877247 -71.21981239 1006.70760059 C-85.10159384 999.57131148 -97.44555718 990.67520716 -108.56942177 979.74422169 C-110.06186213 978.29037892 -111.58284223 976.87401319 -113.11434364 975.46150684 C-137.58496206 952.51730518 -153.25381172 919.24789131 -158.09871864 886.25447559 C-158.27075648 885.12308039 -158.44279432 883.99168519 -158.62004542 882.82600528 C-159.31309182 877.19122907 -159.23888556 871.56072488 -159.23014641 865.89125061 C-159.23219904 864.65182265 -159.23425168 863.41239469 -159.23636651 862.13540831 C-159.24104507 858.69647863 -159.24126431 855.25760127 -159.23958892 851.81867229 C-159.23885626 848.07664176 -159.24388445 844.33461818 -159.24816394 840.59259063 C-159.25573616 833.17121551 -159.25793661 825.74984759 -159.25849299 818.32846901 C-159.25940741 809.43861122 -159.26607731 800.54876007 -159.27283982 791.65890514 C-159.28889484 770.1719996 -159.2948027 748.68509476 -159.29958857 727.19818429 C-159.30192518 717.03081268 -159.30552793 706.86344163 -159.30928394 696.69607045 C-159.3221195 661.88371774 -159.33283829 627.07136534 -159.33628654 592.25901031 C-159.33650818 590.07392871 -159.33672996 587.88884711 -159.3369519 585.7037655 C-159.33717254 583.51343883 -159.33739302 581.32311217 -159.33761334 579.1327855 C-159.33805589 574.73869717 -159.33850301 570.34460884 -159.33895302 565.95052052 C-159.33906241 564.86104318 -159.3391718 563.77156584 -159.33928451 562.64907403 C-159.34291419 527.33201027 -159.35883089 492.01496704 -159.38214338 456.69791114 C-159.40675244 419.34824546 -159.4204599 381.99859152 -159.42165446 344.6489175 C-159.42182591 340.54689967 -159.42204134 336.44488186 -159.42228889 332.34286404 C-159.42234466 331.33285092 -159.42240043 330.32283781 -159.42245789 329.28221824 C-159.42360745 313.04407575 -159.43462144 296.80595438 -159.44917595 280.56781901 C-159.46355917 264.23807488 -159.46676765 247.90835774 -159.45873597 231.57860901 C-159.4542882 221.88443886 -159.45810613 212.19035599 -159.47397448 202.49619735 C-159.4837569 196.01036972 -159.48251522 189.52460295 -159.47253825 183.03877582 C-159.46716963 179.3500427 -159.46635968 175.66147664 -159.47904697 171.97275766 C-159.54107461 152.73447558 -158.87227692 134.36380687 -153.03621864 115.87947559 C-152.74021767 114.92887257 -152.44421669 113.97826954 -152.13924599 112.99886036 C-147.05150492 97.33260929 -139.60825081 82.68358885 -130.09871864 69.25447559 C-129.38844521 68.22838184 -128.67817177 67.20228809 -127.94637489 66.14510059 C-106.37484727 36.49807801 -74.51616763 14.69605822 -39.09871864 5.25447559 C-38.11774208 4.97990528 -37.13676552 4.70533497 -36.12606239 4.42244434 C-24.19504123 1.23140706 -12.32715149 -0.04788128 0 0 Z " fill="#141513" transform="translate(159.09871864318848,-0.25447559356689453)"/>
-<path d="M0 0 C2.3607826 -0.00533069 4.7215618 -0.01239937 7.08233458 -0.02104706 C12.86781777 -0.03768809 18.65308544 -0.03586118 24.43857937 -0.02603391 C31.37506207 -0.01528955 38.31145513 -0.02784201 45.24792682 -0.04094901 C58.83711965 -0.06583655 72.42624267 -0.0677834 86.01545164 -0.0596749 C97.90842776 -0.05259347 109.80137684 -0.05255306 121.6943531 -0.05953789 C123.29160454 -0.06044923 124.88885599 -0.06135999 126.48610743 -0.06227018 C128.89321227 -0.06365335 131.3003171 -0.06504445 133.70742193 -0.06645631 C156.07605562 -0.07943052 178.44468029 -0.0845595 200.81331539 -0.07292271 C202.07720574 -0.07226575 202.07720574 -0.07226575 203.36662924 -0.07159552 C210.20845318 -0.06798894 217.05027701 -0.06415405 223.89210082 -0.06030459 C250.57968088 -0.04545695 277.26715859 -0.05423912 303.95472717 -0.08226013 C333.96091556 -0.11370558 363.96704337 -0.12865264 393.97324854 -0.11846012 C397.17413714 -0.11742339 400.37502576 -0.11643616 403.57591438 -0.11547661 C404.75806397 -0.11510328 404.75806397 -0.11510328 405.96409537 -0.11472241 C417.84673069 -0.11128624 429.72931241 -0.12057354 441.61193657 -0.13624763 C455.12861173 -0.15403651 468.64515667 -0.15411882 482.16182631 -0.13089598 C489.05584211 -0.11951551 495.94963463 -0.11592963 502.84363937 -0.13519669 C509.15952167 -0.15202846 515.47494573 -0.1456129 521.79079849 -0.1209799 C524.07057599 -0.11610521 526.35039063 -0.11958862 528.63013696 -0.13246734 C545.55919757 -0.22117063 559.49258132 1.40958132 573.70204163 11.5146637 C574.65143616 12.18948792 574.65143616 12.18948792 575.62001038 12.87794495 C584.56469704 19.88757798 591.37473569 31.41173592 593.70204163 42.5146637 C593.95009484 46.21967671 593.9332442 49.92717174 593.95204163 53.6396637 C593.98297913 55.13239807 593.98297913 55.13239807 594.01454163 56.6552887 C594.09018739 71.14145219 588.46971331 82.75864333 578.63954163 93.3271637 C572.7611904 98.9075711 566.35707715 102.79152692 558.70204163 105.5146637 C557.98319668 105.77360066 557.26435173 106.03253763 556.5237236 106.29932117 C545.67592079 109.56985516 534.52679546 108.91143924 523.30848694 108.85523987 C520.90407196 108.85431984 518.49965616 108.85472308 516.09524155 108.85633564 C509.68138016 108.85701034 503.26768815 108.83967715 496.85386658 108.81850433 C490.82587678 108.80136501 484.79792729 108.80061201 478.76991272 108.79847717 C461.16393343 108.7827621 443.55798536 108.74087841 425.95204163 108.7021637 C386.59954163 108.6402887 347.24704163 108.5784137 306.70204163 108.5146637 C306.70204163 227.6446637 306.70204163 346.7746637 306.70204163 469.5146637 C286.90204163 469.5146637 267.10204163 469.5146637 246.70204163 469.5146637 C246.70204163 513.4046637 246.70204163 557.2946637 246.70204163 602.5146637 C266.50204163 602.5146637 286.30204163 602.5146637 306.70204163 602.5146637 C306.79485413 611.0843512 306.79485413 611.0843512 306.88954163 619.8271637 C306.91685364 621.60647278 306.94416565 623.38578186 306.9723053 625.2190094 C307.11177013 640.67747815 304.32285969 652.54241746 293.63954163 664.2646637 C283.35164203 674.1494599 271.29383334 675.99381057 257.74501038 675.7881012 C245.19699202 675.32053069 236.72499202 668.99701836 228.38954163 660.0771637 C220.57277107 650.9239274 218.39160693 641.68285062 218.46153259 629.87820435 C218.45896932 628.28889812 218.45896932 628.28889812 218.45635426 626.6674847 C218.45306486 623.123718 218.46405419 619.58014142 218.47499084 616.03639221 C218.47555508 613.49352015 218.47523817 610.95064775 218.47410583 608.40777588 C218.47365067 602.93649447 218.47931674 597.46527407 218.49058151 591.9940052 C218.50685769 584.08354929 218.51204668 576.17311643 218.5145575 568.26264559 C218.51893128 555.42744908 218.53223178 542.59227803 218.55116272 529.75709534 C218.56952972 517.29127632 218.58368221 504.82546422 218.59217834 492.3596344 C218.59270379 491.5908286 218.59322924 490.82202281 218.59377061 490.02991987 C218.59638074 486.17292397 218.59890815 482.31592802 218.60139441 478.45893204 C218.62211705 446.47749075 218.65733395 414.49608076 218.70204163 382.5146637 C224.61760486 380.08952596 230.53376566 377.66585017 236.45030212 375.24308777 C238.45381022 374.42248424 240.45719208 373.60157242 242.46043396 372.78031921 C294.33562193 351.5146637 294.33562193 351.5146637 297.70204163 351.5146637 C297.70204163 313.8946637 297.70204163 276.2746637 297.70204163 237.5146637 C293.24704163 236.0296637 293.24704163 236.0296637 288.70204163 234.5146637 C286.21106492 233.56633242 283.72835319 232.59599737 281.25453186 231.60377502 C280.55959405 231.32587222 279.86465624 231.04796942 279.14865971 230.76164532 C276.93500856 229.87574275 274.72279495 228.98631453 272.51063538 228.09669495 C271.12991114 227.54352131 269.74909265 226.9905829 268.36817932 226.43788147 C263.29082801 224.40381573 258.21529078 222.36522413 253.13954163 220.3271637 C241.77516663 215.7690387 230.41079163 211.2109137 218.70204163 206.5146637 C218.70204163 174.1746637 218.70204163 141.8346637 218.70204163 108.5146637 C211.4392218 108.53561096 204.17640198 108.55655823 196.6934967 108.57814026 C173.42161151 108.64241991 150.14973147 108.68686768 126.8777815 108.71892501 C123.25938686 108.72392749 119.6409925 108.72910481 116.02259827 108.73439026 C114.94212016 108.73596412 114.94212016 108.73596412 113.83981421 108.73756978 C102.19587371 108.75494715 90.55201268 108.78647002 78.90811924 108.82327488 C66.94914019 108.86075877 54.99020259 108.88291524 43.03116721 108.89101768 C36.31867767 108.89600059 29.60637908 108.90842741 22.89394569 108.93758392 C16.56976071 108.96483022 10.24582891 108.97308996 3.92159081 108.96709442 C1.60656735 108.96819053 -0.70846499 108.97608905 -3.0234375 108.9914856 C-22.21272974 109.1127992 -38.45048222 107.21152463 -53.04795837 93.3896637 C-63.81830987 82.05002219 -68.90079896 69.74541111 -68.79795837 54.2021637 C-68.79223816 53.19250549 -68.78651794 52.18284729 -68.78062439 51.14259338 C-68.58557428 42.97019089 -67.30183494 36.7419143 -63.29795837 29.5146637 C-62.51872009 28.0586676 -62.51872009 28.0586676 -61.72373962 26.57325745 C-54.08809538 13.49120962 -42.12498732 5.30864116 -27.65612876 1.34271252 C-18.63655274 -0.61308454 -9.17442691 -0.03625075 0 0 Z " fill="#FEFEFE" transform="translate(249.29795837402344,174.48533630371094)"/>
-<path d="M0 0 C5.86817508 1.95605836 11.59073119 3.95365747 17.30737305 6.27001953 C18.09306325 6.58584142 18.87875345 6.9016633 19.68825245 7.22705555 C22.29709699 8.27645462 24.90439611 9.32963844 27.51171875 10.3828125 C29.39488199 11.14115547 31.2781448 11.89925122 33.16149902 12.65711975 C37.21264727 14.28789145 41.26312379 15.92031644 45.31307983 17.55404663 C51.7542863 20.15236465 58.19696081 22.74702807 64.63989258 25.34106445 C71.41130904 28.06755974 78.18261714 30.79432275 84.95341492 33.52235413 C108.15087431 42.86883922 131.35537268 52.19778488 154.5609436 61.52410889 C159.994401 63.70786608 165.42764165 65.89216193 170.86079502 68.07667542 C193.23239581 77.07158187 215.60890835 86.05370489 238 95 C238 116.12 238 137.24 238 159 C232.01359375 161.39185547 232.01359375 161.39185547 225.90625 163.83203125 C206.57998543 171.55973546 187.26934996 179.32631616 167.95794678 187.09106445 C161.36560101 189.74165676 154.77289802 192.39135988 148.18017578 195.04101562 C126.79552102 203.63604381 105.41240644 212.23486217 84.03399658 220.84541321 C75.73587703 224.18760199 67.43708216 227.52811242 59.13812637 230.86822414 C52.33470621 233.60660835 45.53222385 236.34730609 38.73039818 239.08964825 C34.51543173 240.78839672 30.29959748 242.48498283 26.08351517 244.1809597 C24.12464123 244.96946815 22.16613491 245.75889055 20.20801926 246.54928017 C17.53921709 247.62640467 14.86914587 248.70032007 12.19873047 249.7734375 C11.02965778 250.24663689 11.02965778 250.24663689 9.83696747 250.72939587 C6.56202144 252.04197447 3.43106937 253.14223266 0 254 C0 231.56 0 209.12 0 186 C21.85641702 177.6267728 43.73124762 169.30784563 65.63814926 161.06789398 C71.62769516 158.81489337 77.61678737 156.56068672 83.60580635 154.30628586 C85.09797285 153.74460399 86.5901539 153.18296077 88.08234978 152.62135696 C97.85972778 148.94125789 107.63197621 145.24805417 117.3984375 141.5390625 C119.52367608 140.73273275 121.64892001 139.92641707 123.77416992 139.12011719 C127.62723328 137.65810939 131.4786996 136.19199339 135.3293457 134.72363281 C137.01507528 134.08382248 138.70086226 133.44416335 140.38671875 132.8046875 C141.51894363 132.37079208 141.51894363 132.37079208 142.67404175 131.9281311 C147.77255889 130 147.77255889 130 150 130 C149.67 128.02 149.34 126.04 149 124 C147.88878784 123.58995728 147.88878784 123.58995728 146.75512695 123.17163086 C117.43275623 112.3398187 88.19328622 101.28796181 58.94955444 90.24617195 C50.58387921 87.08758433 42.21738212 83.93117504 33.85093689 80.77462769 C22.56697288 76.5172614 11.28352836 72.25852172 0 68 C0 45.56 0 23.12 0 0 Z " fill="#F39044" transform="translate(272,342)"/>
-<path d="M0 0 C81.84 0 163.68 0 248 0 C248 19.47 248 38.94 248 59 C166.16 59 84.32 59 0 59 C0 39.53 0 20.06 0 0 Z " fill="#F39044" transform="translate(533,681)"/>
+<svg xmlns="http://www.w3.org/2000/svg" width="1024" height="1024" viewBox="0 0 1024 1024">
+  <rect width="1024" height="1024" rx="225" fill="#141513"/>
+  <rect x="227" y="244" width="570" height="92" rx="46" fill="#ffffff"/>
+  <path d="M474 336H550V786A38 38 0 0 1 474 786V572.2L542 545V447L474 419.8ZM498 647.5V761.5H550V647.5Z" fill="#ffffff" fill-rule="evenodd"/>
+  <path d="M306 387.2L510 468.8V523.2L306 604.8V547.5L435.5 496L306 444.5Z" fill="#f59145"/>
+  <rect x="530.5" y="679.5" width="213" height="50" fill="#f59145"/>
 </svg>
diff --git a/public/icons/1024x1024.png b/public/icons/1024x1024.png
index 574578cc2..20b1952f8 100644
Binary files a/public/icons/1024x1024.png and b/public/icons/1024x1024.png differ
diff --git a/public/icons/128x128.png b/public/icons/128x128.png
index ba734af53..d65f83560 100644
Binary files a/public/icons/128x128.png and b/public/icons/128x128.png differ
diff --git a/public/icons/16x16.png b/public/icons/16x16.png
index 553660bb2..bc8d1909c 100644
Binary files a/public/icons/16x16.png and b/public/icons/16x16.png differ
diff --git a/public/icons/24x24.png b/public/icons/24x24.png
index 6c083f00d..f9a16bf5e 100644
Binary files a/public/icons/24x24.png and b/public/icons/24x24.png differ
diff --git a/public/icons/256x256.png b/public/icons/256x256.png
index 756661100..e6270ad6c 100644
Binary files a/public/icons/256x256.png and b/public/icons/256x256.png differ
diff --git a/public/icons/32x32.png b/public/icons/32x32.png
index 87ac371a1..529ecce24 100644
Binary files a/public/icons/32x32.png and b/public/icons/32x32.png differ
diff --git a/public/icons/48x48.png b/public/icons/48x48.png
index 9730d5c0d..dbc38f19b 100644
Binary files a/public/icons/48x48.png and b/public/icons/48x48.png differ
diff --git a/public/icons/512x512.png b/public/icons/512x512.png
index 56ae3e4a9..761505f5a 100644
Binary files a/public/icons/512x512.png and b/public/icons/512x512.png differ
diff --git a/public/icons/64x64.png b/public/icons/64x64.png
index 5a5a1e86d..69690d8fd 100644
Binary files a/public/icons/64x64.png and b/public/icons/64x64.png differ
diff --git a/public/icons/icon.icns b/public/icons/icon.icns
index 1a3cc8932..99bebe7d6 100644
Binary files a/public/icons/icon.icns and b/public/icons/icon.icns differ
diff --git a/public/icons/icon.ico b/public/icons/icon.ico
index 00594ef7a..3495803f3 100644
Binary files a/public/icons/icon.ico and b/public/icons/icon.ico differ
diff --git a/public/manifest.json b/public/manifest.json
index 0cf0d4e67..552057a1b 100644
--- a/public/manifest.json
+++ b/public/manifest.json
@@ -1,7 +1,7 @@
 {
   "name": "Termix",
   "short_name": "Termix",
-  "description": "Self-hosted SSH and remote desktop management.",
+  "description": "Self-hosted, plugin-based server management.",
   "theme_color": "#09090b",
   "background_color": "#09090b",
   "display": "standalone",
diff --git a/scripts/apply-plugin-patches.cjs b/scripts/apply-plugin-patches.cjs
deleted file mode 100644
index eb7cdb7c6..000000000
--- a/scripts/apply-plugin-patches.cjs
+++ /dev/null
@@ -1,26 +0,0 @@
-/**
- * Applies every workspace plugin's dependency patches after npm install, so
- * the Vite dev server serves the same patched libraries a build bundles.
- */
-
-const fs = require("node:fs");
-const path = require("node:path");
-const { spawnSync } = require("node:child_process");
-
-const root = path.resolve(__dirname, "..");
-const cli = path.join(root, "packages", "plugin-sdk", "cli", "index.mjs");
-const plugins = path.join(root, "plugins");
-
-for (const id of fs.readdirSync(plugins)) {
-  const dir = path.join(plugins, id);
-  const pkgPath = path.join(dir, "package.json");
-  if (!fs.existsSync(pkgPath)) continue;
-  const pkg = JSON.parse(fs.readFileSync(pkgPath, "utf8"));
-  if (!pkg.termix?.patches?.length && !fs.existsSync(path.join(dir, "patches")))
-    continue;
-  const result = spawnSync(process.execPath, [cli, "patch"], {
-    cwd: dir,
-    stdio: "inherit",
-  });
-  if (result.status !== 0) process.exit(result.status ?? 1);
-}
diff --git a/scripts/beta-version.cjs b/scripts/beta-version.cjs
new file mode 100644
index 000000000..9b7028170
--- /dev/null
+++ b/scripts/beta-version.cjs
@@ -0,0 +1,45 @@
+#!/usr/bin/env node
+/**
+ * Works out beta numbers from a list of tags on stdin.
+ *
+ * node scripts/beta-version.cjs 26.11.0 < tags.txt          -> 26.11.0-beta.3
+ * node scripts/beta-version.cjs 26.11.0 --latest < tags.txt -> v26.11.0-beta.2
+ */
+
+const fs = require("fs");
+
+function betaNumbers(base, tags) {
+  const prefix = `v${base}-beta.`;
+  return tags
+    .map((tag) => tag.trim())
+    .filter((tag) => tag.startsWith(prefix))
+    .map((tag) => Number(tag.slice(prefix.length)))
+    .filter((n) => Number.isInteger(n) && n > 0)
+    .sort((a, b) => a - b);
+}
+
+function nextBeta(base, tags) {
+  const numbers = betaNumbers(base, tags);
+  return `${base}-beta.${(numbers.at(-1) ?? 0) + 1}`;
+}
+
+function latestBetaTag(base, tags) {
+  const numbers = betaNumbers(base, tags);
+  return numbers.length ? `v${base}-beta.${numbers.at(-1)}` : "";
+}
+
+if (require.main === module) {
+  const base = process.argv[2];
+  if (!base || !/^\d+\.\d+\.\d+$/.test(base)) {
+    console.error("beta-version: pass a version like 26.11.0");
+    process.exit(1);
+  }
+  const tags = fs.readFileSync(0, "utf8").split("\n");
+  console.log(
+    process.argv.includes("--latest")
+      ? latestBetaTag(base, tags)
+      : nextBeta(base, tags),
+  );
+}
+
+module.exports = { latestBetaTag, nextBeta };
diff --git a/scripts/beta-version.test.ts b/scripts/beta-version.test.ts
new file mode 100644
index 000000000..66cc804f8
--- /dev/null
+++ b/scripts/beta-version.test.ts
@@ -0,0 +1,26 @@
+import { describe, expect, it } from "vitest";
+import { createRequire } from "module";
+
+const require = createRequire(import.meta.url);
+const { latestBetaTag, nextBeta } = require("./beta-version.cjs");
+
+const TAGS = [
+  "v26.10.0",
+  "v26.11.0-beta.1",
+  "v26.11.0-beta.10",
+  "v26.11.0-beta.2",
+  "v26.11.0-beta.x",
+  "v26.12.0-beta.4",
+];
+
+describe("beta-version", () => {
+  it("numbers the next beta after the highest one, not the last listed", () => {
+    expect(nextBeta("26.11.0", TAGS)).toBe("26.11.0-beta.11");
+    expect(latestBetaTag("26.11.0", TAGS)).toBe("v26.11.0-beta.10");
+  });
+
+  it("starts at 1 for a version with no betas", () => {
+    expect(nextBeta("27.1.0", TAGS)).toBe("27.1.0-beta.1");
+    expect(latestBetaTag("27.1.0", TAGS)).toBe("");
+  });
+});
diff --git a/scripts/build-plugins.cjs b/scripts/build-plugins.cjs
index 32a18111e..1a585d11a 100644
--- a/scripts/build-plugins.cjs
+++ b/scripts/build-plugins.cjs
@@ -3,78 +3,78 @@
  *
  * getBundledPluginsDir() in src/backend/plugins/paths.ts resolves
  * dist/backend/backend/plugins -> dist/plugins, which is where this writes.
- * A workspace plugin is built from plugins/<id>; a tmxplug plugin is
- * downloaded (or read from a path), checked against its pinned sha256 and
- * unpacked. Either way only what a server needs at runtime lands there.
+ * Each .tmxplug is downloaded (or read from a path), checked against its
+ * pinned sha256 and unpacked.
+ *
+ * For development, `--local <dir>` (or TERMIX_LOCAL_PLUGINS) points at a
+ * folder of plugin repos like ../Termix-Plugins. A plugin there whose sources
+ * changed since its last build is rebuilt first with this checkout's SDK, so
+ * SDK edits apply without publishing, then any built one (has
+ * dist/) is copied in place of its pin, or added when it has no pin.
  */
 
+const { execFileSync } = require("node:child_process");
 const fs = require("node:fs");
 const path = require("node:path");
-const { execFileSync } = require("node:child_process");
 const {
   loadBundledPlugins,
   fetchArtifact,
   extractArtifact,
+  findLocalPluginBuilds,
+  rebuildLocalPlugins,
+  localSdkBuildCommand,
+  copyLocalBuild,
+  buildBundledIndex,
 } = require("./lib/bundled-plugins.cjs");
 
 const root = path.resolve(__dirname, "..");
-const source = path.join(root, "plugins");
 const destination = path.join(root, "dist", "plugins");
-const cli = path.join(root, "packages", "plugin-sdk", "cli", "index.mjs");
-
-// Same list as a .tmxplug, see packages/plugin-sdk/cli/lib/tmxplug.mjs.
-const SHIPPED = [
-  "manifest.json",
-  "dist",
-  "locales",
-  "migrations",
-  "README.md",
-  "CHANGELOG.md",
-  "icon.svg",
-];
-
-function stageWorkspace(id) {
-  const pluginDir = path.join(source, id);
-
-  execFileSync(process.execPath, [cli, "build"], {
-    cwd: pluginDir,
-    stdio: "inherit",
-  });
-
-  if (!fs.existsSync(path.join(pluginDir, "dist", "backend.js"))) {
-    throw new Error(`${id} produced no dist/backend.js`);
-  }
-
-  const outDir = path.join(destination, id);
-  fs.mkdirSync(outDir, { recursive: true });
-  for (const entry of SHIPPED) {
-    const from = path.join(pluginDir, entry);
-    if (!fs.existsSync(from)) continue;
-    fs.cpSync(from, path.join(outDir, entry), { recursive: true });
-  }
-}
 
 async function main() {
   const plugins = loadBundledPlugins(root);
+  const flag = process.argv.indexOf("--local");
+  const localArg =
+    flag !== -1 ? process.argv[flag + 1] : process.env.TERMIX_LOCAL_PLUGINS;
+  const localDir = localArg ? path.resolve(root, localArg) : null;
+  const [node, buildArgs] = localSdkBuildCommand();
+  rebuildLocalPlugins(localDir, null, (repo, id) => {
+    console.log(`building ${id}`);
+    execFileSync(node, buildArgs, { cwd: repo, stdio: "inherit" });
+  });
+  const local = findLocalPluginBuilds(localDir);
 
   fs.rmSync(destination, { recursive: true, force: true });
+  fs.mkdirSync(destination, { recursive: true });
 
   for (const plugin of plugins) {
-    if (plugin.source === "workspace") {
-      stageWorkspace(plugin.id);
-    } else {
-      const buffer = await fetchArtifact(plugin, root);
-      await extractArtifact(
-        buffer,
-        path.join(destination, plugin.id),
-        plugin.id,
-      );
-      console.log(`unpacked ${plugin.id}`);
+    const repo = local.get(plugin.id);
+    if (repo) {
+      copyLocalBuild(repo, path.join(destination, plugin.id));
+      console.log(`copied local build of ${plugin.id}`);
+      continue;
     }
+    const buffer = await fetchArtifact(plugin, root);
+    await extractArtifact(buffer, path.join(destination, plugin.id), plugin.id);
+    console.log(`unpacked ${plugin.id}`);
   }
 
+  // A local plugin with no pin yet still gets staged, so new plugins work too.
+  const pinned = new Set(plugins.map((p) => p.id));
+  const extra = [...local.keys()].filter((id) => !pinned.has(id));
+  for (const id of extra) {
+    copyLocalBuild(local.get(id), path.join(destination, id));
+    console.log(`copied local build of ${id} (not pinned)`);
+  }
+
+  const staged = [...pinned, ...extra];
+  fs.writeFileSync(
+    path.join(destination, "bundled-index.json"),
+    `${JSON.stringify(buildBundledIndex(plugins, staged), null, 2)}
+`,
+  );
+
   console.log(
-    `Bundled ${plugins.length} plugin(s): ${plugins.map((p) => p.id).join(", ")}`,
+    `Bundled ${plugins.length + extra.length} plugin(s): ${[...pinned, ...extra].join(", ")}`,
   );
 }
 
diff --git a/scripts/build-sdk-host.mjs b/scripts/build-sdk-host.mjs
index a1e4a752b..c6176bfe6 100644
--- a/scripts/build-sdk-host.mjs
+++ b/scripts/build-sdk-host.mjs
@@ -1,10 +1,11 @@
 /**
  * Builds the two pieces of the plugin SDK that come from core:
  *
- *   dist/host/ui.js            @termix/plugin-sdk/ui, the shell's UI kit
+ *   dist/host/ui.js            @termix-ssh/plugin-sdk/ui, the shell's UI kit
  *   dist/host/testing-host.js  what renderWithApp() renders plugins into
+ *   dist/host/core-classes.json  the classes core's CSS has rules for
  *
- * Inside Termix the page's import map points @termix/plugin-sdk/ui at the
+ * Inside Termix the page's import map points @termix-ssh/plugin-sdk/ui at the
  * shell's own copy, so ui.js is never loaded there. It exists so a plugin in
  * its own repo can typecheck and run its tests without a Termix checkout.
  *
@@ -18,6 +19,9 @@ import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { spawnSync } from "node:child_process";
 import * as esbuild from "esbuild";
+import { compile, optimize } from "@tailwindcss/node";
+import { Scanner } from "@tailwindcss/oxide";
+import { classNamesInCss } from "../packages/plugin-sdk/cli/lib/css-classes.mjs";
 
 const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
 const outDir = path.join(root, "packages", "plugin-sdk", "dist", "host");
@@ -32,7 +36,7 @@ const EXTERNALS = [
   "i18next",
   "react-i18next",
   "sonner",
-  "@termix/plugin-sdk/frontend",
+  "@termix-ssh/plugin-sdk/frontend",
   "@testing-library/react",
 ];
 
@@ -78,7 +82,7 @@ await esbuild.build({
   },
 });
 
-// Types for @termix/plugin-sdk/ui: the declarations tsc emits for sdk-ui.ts
+// Types for @termix-ssh/plugin-sdk/ui: the declarations tsc emits for sdk-ui.ts
 // and everything it reaches, with core's "@/" paths made relative.
 const typesDir = path.join(outDir, "types");
 const tsc = spawnSync(
@@ -93,7 +97,7 @@ const tsc = spawnSync(
   { cwd: root, stdio: "inherit" },
 );
 if (tsc.status !== 0) process.exit(tsc.status ?? 1);
-// tsc follows @termix/plugin-sdk/frontend into the SDK's source; plugins get
+// tsc follows @termix-ssh/plugin-sdk/frontend into the SDK's source; plugins get
 // those types from the package itself.
 fs.rmSync(path.join(typesDir, "packages"), { recursive: true, force: true });
 
@@ -137,4 +141,30 @@ fs.copyFileSync(
   path.join(outDir, "theme.css"),
 );
 
+// Every class core's own CSS has a rule for, found the way the Vite build
+// finds them, so termix-plugin build knows which plugin classes it shares.
+const indexCss = path.join(root, "src/ui/index.css");
+const compiler = await compile(fs.readFileSync(indexCss, "utf8"), {
+  base: path.dirname(indexCss),
+  onDependency: () => {},
+});
+const rootSource =
+  compiler.root === "none"
+    ? []
+    : compiler.root === null
+      ? [{ base: root, pattern: "**/*", negated: false }]
+      : [{ ...compiler.root, negated: false }];
+const scanner = new Scanner({
+  sources: [...rootSource, ...compiler.sources],
+});
+const coreClasses = [
+  ...classNamesInCss(
+    optimize(compiler.build(scanner.scan()), { minify: true }).code,
+  ),
+].sort();
+fs.writeFileSync(
+  path.join(outDir, "core-classes.json"),
+  `${JSON.stringify(coreClasses)}\n`,
+);
+
 console.log(`Built the SDK host modules into ${path.relative(root, outDir)}`);
diff --git a/scripts/build-upgrade-fixture.ts b/scripts/build-upgrade-fixture.ts
deleted file mode 100644
index 123367963..000000000
--- a/scripts/build-upgrade-fixture.ts
+++ /dev/null
@@ -1,159 +0,0 @@
-/**
- * Writes src/backend/tests/fixtures/upgrade/{db.sqlite,fixture.env,files/}: a 2.8 install's
- * data directory with every feature table filled. The schema is 2.8's own
- * dump, the rows come from rows.ts, and the columns 2.8 encrypted are
- * encrypted the way 2.8 did it (a v3 system-wrapped data key per user, then
- * FieldCrypto per field), so the upgrade test has to really decrypt them.
- *
- * Usage: npx tsx scripts/build-upgrade-fixture.ts
- */
-
-import crypto from "node:crypto";
-import fs from "node:fs";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import Database from "better-sqlite3";
-import bcrypt from "bcryptjs";
-import { FieldCrypto } from "../src/backend/utils/field-crypto.js";
-import {
-  ENCRYPTED_COLUMNS,
-  FIXTURE_PASSWORD,
-  RECORDING_FILES,
-  ROWS,
-  type Row,
-} from "../src/backend/tests/fixtures/upgrade/rows.js";
-
-const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
-const FIXTURES = path.join(ROOT, "src/backend/tests/fixtures");
-const OUT = path.join(FIXTURES, "upgrade");
-
-const hex = (label: string) =>
-  crypto
-    .createHash("sha256")
-    .update(`termix-d4-fixture:${label}`)
-    .digest("hex");
-
-const ENV = {
-  JWT_SECRET: hex("jwt") + hex("jwt-2"),
-  DATABASE_KEY: hex("database"),
-  ENCRYPTION_KEY: hex("encryption"),
-  INTERNAL_AUTH_TOKEN: hex("internal"),
-};
-const masterKey = Buffer.from(ENV.ENCRYPTION_KEY, "hex");
-
-/** UserKeyManager's v3 wrap, unchanged since 2.8. */
-function wrapDek(userId: string, dek: Buffer): string {
-  const wrapKey = Buffer.from(
-    crypto.hkdfSync(
-      "sha256",
-      masterKey,
-      Buffer.alloc(0),
-      `termix:dek-wrap:v3:${userId}`,
-      32,
-    ),
-  );
-  const iv = crypto.randomBytes(12);
-  const cipher = crypto.createCipheriv("aes-256-gcm", wrapKey, iv);
-  cipher.setAAD(Buffer.from(userId, "utf8"));
-  const ct = Buffer.concat([cipher.update(dek), cipher.final()]);
-  return JSON.stringify({
-    v: 3,
-    alg: "aes-256-gcm",
-    iv: iv.toString("base64"),
-    ct: ct.toString("base64"),
-    tag: cipher.getAuthTag().toString("base64"),
-    createdAt: "2026-05-01T10:00:00.000Z",
-  });
-}
-
-const deks = new Map<string, Buffer>();
-const dekFor = (userId: string) => {
-  let dek = deks.get(userId);
-  if (!dek) {
-    dek = Buffer.from(hex(`dek:${userId}`), "hex");
-    deks.set(userId, dek);
-  }
-  return dek;
-};
-
-function prepareRow(table: string, row: Row): Row {
-  const out: Row = { ...row };
-  if (table === "users" && out.password_hash === undefined) {
-    out.password_hash = bcrypt.hashSync(FIXTURE_PASSWORD, 10);
-  }
-  for (const [encTable, column, field, userColumn] of ENCRYPTED_COLUMNS) {
-    if (encTable !== table || typeof out[column] !== "string" || !out[column])
-      continue;
-    const userId = String(out[userColumn]);
-    const recordId = table === "users" ? userId : String(out.id);
-    out[column] = FieldCrypto.encryptField(
-      out[column] as string,
-      dekFor(userId),
-      recordId,
-      field,
-    );
-  }
-  return out;
-}
-
-function insert(sqlite: Database.Database, table: string, row: Row): void {
-  const keys = Object.keys(row);
-  sqlite
-    .prepare(
-      `INSERT INTO "${table}" (${keys.map((key) => `"${key}"`).join(", ")}) VALUES (${keys.map(() => "?").join(", ")})`,
-    )
-    .run(...keys.map((key) => row[key]));
-}
-
-fs.mkdirSync(OUT, { recursive: true });
-const dbPath = path.join(OUT, "db.sqlite");
-fs.rmSync(dbPath, { force: true });
-
-const sqlite = new Database(dbPath);
-sqlite.pragma("journal_mode = DELETE");
-sqlite.exec(
-  fs.readFileSync(path.join(FIXTURES, "sqlite-2.8-schema.sql"), "utf8"),
-);
-sqlite.pragma("foreign_keys = ON");
-
-sqlite.transaction(() => {
-  for (const [table, rows] of Object.entries(ROWS)) {
-    for (const row of rows) insert(sqlite, table, prepareRow(table, row));
-  }
-  for (const user of ROWS.users) {
-    const userId = String(user.id);
-    insert(sqlite, "settings", {
-      key: `user_dek_v3_${userId}`,
-      value: wrapDek(userId, dekFor(userId)),
-    });
-  }
-})();
-
-const violations = sqlite.pragma("foreign_key_check") as unknown[];
-if (violations.length > 0) {
-  throw new Error(`Foreign key violations: ${JSON.stringify(violations)}`);
-}
-sqlite.exec("VACUUM");
-sqlite.close();
-
-fs.writeFileSync(
-  path.join(OUT, "fixture.env"),
-  Object.entries(ENV)
-    .map(([key, value]) => `${key}=${value}`)
-    .join("\n") + "\n",
-);
-
-// The recording files 2.8 left in DATA_DIR, which the rows point at.
-const files = path.join(OUT, "files");
-fs.rmSync(files, { recursive: true, force: true });
-for (const [kind, relative] of Object.entries(RECORDING_FILES)) {
-  const file = path.join(files, relative);
-  fs.mkdirSync(path.dirname(file), { recursive: true });
-  fs.writeFileSync(
-    file,
-    `d4 ${kind} recording
-`,
-  );
-}
-
-console.log(`Wrote ${path.relative(ROOT, dbPath)} and fixture.env`);
diff --git a/scripts/bundled-plugins.test.ts b/scripts/bundled-plugins.test.ts
index 24234ef44..2f77790c5 100644
--- a/scripts/bundled-plugins.test.ts
+++ b/scripts/bundled-plugins.test.ts
@@ -9,6 +9,13 @@ import {
   loadBundledPlugins,
   fetchArtifact,
   extractArtifact,
+  pinsFromIndex,
+  buildBundledIndex,
+  findLocalPluginBuilds,
+  isLocalBuildStale,
+  localSdkBuildCommand,
+  rebuildLocalPlugins,
+  copyLocalBuild,
 } from "./lib/bundled-plugins.cjs";
 
 const cleanups: Array<() => void> = [];
@@ -39,70 +46,113 @@ const sha256 = (buffer: Buffer) =>
   crypto.createHash("sha256").update(buffer).digest("hex");
 
 describe("parseBundledPlugins", () => {
-  it("accepts workspace and tmxplug entries", () => {
-    const { plugins, problems } = parseBundledPlugins(
-      {
-        plugins: [
-          { id: "one", source: "workspace" },
-          {
-            id: "two",
-            source: "tmxplug",
-            url: "https://x/two.tmxplug",
-            sha256: SHA,
-          },
-          {
-            id: "three",
-            source: "tmxplug",
-            path: "vendor/three.tmxplug",
-            sha256: SHA,
-          },
-        ],
-      },
-      ["one"],
-    );
+  it("accepts tmxplug entries", () => {
+    const { plugins, problems } = parseBundledPlugins({
+      plugins: [
+        {
+          id: "two",
+          source: "tmxplug",
+          url: "https://x/two.tmxplug",
+          sha256: SHA,
+        },
+        {
+          id: "three",
+          source: "tmxplug",
+          path: "vendor/three.tmxplug",
+          sha256: SHA,
+        },
+      ],
+    });
     expect(problems).toEqual([]);
-    expect(plugins.map((p: { id: string }) => p.id)).toEqual([
-      "one",
-      "two",
-      "three",
-    ]);
-  });
-
-  it("reports a plugins folder nobody listed", () => {
-    const { problems } = parseBundledPlugins(
-      { plugins: [{ id: "one", source: "workspace" }] },
-      ["one", "stray"],
-    );
-    expect(problems).toEqual([
-      "plugins/stray is not listed in docker/bundled-plugins.json",
-    ]);
+    expect(plugins.map((p: { id: string }) => p.id)).toEqual(["two", "three"]);
   });
 
   it("reports bad entries", () => {
-    const { problems } = parseBundledPlugins(
-      {
-        plugins: [
-          { id: "gone", source: "workspace" },
-          { id: "nohash", source: "tmxplug", url: "https://x" },
-          { id: "plain", source: "tmxplug", url: "http://x", sha256: SHA },
-          { id: "still-here", source: "tmxplug", path: "a", sha256: SHA },
-          { id: "gone", source: "workspace" },
-          { id: "odd", source: "npm" },
-        ],
-      },
-      ["still-here"],
-    );
+    const { problems } = parseBundledPlugins({
+      plugins: [
+        { id: "nohash", source: "tmxplug", url: "https://x" },
+        { id: "plain", source: "tmxplug", url: "http://x", sha256: SHA },
+        { id: "ok", source: "tmxplug", path: "a", sha256: SHA },
+        { id: "ok", source: "tmxplug", path: "a", sha256: SHA },
+        { id: "odd", source: "workspace" },
+      ],
+    });
     expect(problems).toEqual([
-      "gone is a workspace plugin but plugins/gone does not exist",
       "nohash needs a lowercase hex sha256",
       "plain needs exactly one of an https url or a path",
-      "still-here comes from a .tmxplug, so delete plugins/still-here",
-      "gone is listed twice",
-      'odd has an unknown source "npm"',
+      "ok is listed twice",
+      'odd has an unknown source "workspace"',
     ]);
   });
 
-  it("matches the plugins folder in this repo", () => {
+  it("reads onboarding defaults", () => {
+    const { plugins, problems } = parseBundledPlugins({
+      plugins: [
+        {
+          id: "kept",
+          source: "tmxplug",
+          path: "a",
+          sha256: SHA,
+          onboarding: { recommended: true },
+        },
+        {
+          id: "desk",
+          source: "tmxplug",
+          path: "a",
+          sha256: SHA,
+          onboarding: { recommended: "desktop" },
+        },
+        {
+          id: "ask",
+          source: "tmxplug",
+          path: "a",
+          sha256: SHA,
+          onboarding: { recommended: true, consent: true },
+        },
+        {
+          id: "env",
+          source: "tmxplug",
+          path: "a",
+          sha256: SHA,
+          onboarding: { enabledByEnv: ["OIDC_CLIENT_ID"] },
+        },
+        { id: "plain", source: "tmxplug", path: "a", sha256: SHA },
+      ],
+    });
+    expect(problems).toEqual([]);
+    expect(plugins.map((p: { onboarding: unknown }) => p.onboarding)).toEqual([
+      { recommended: true, consent: false },
+      { recommended: "desktop", consent: false },
+      { recommended: true, consent: true },
+      { recommended: false, consent: false, enabledByEnv: ["OIDC_CLIENT_ID"] },
+      null,
+    ]);
+  });
+
+  it("rejects bad onboarding defaults", () => {
+    const entry = { source: "tmxplug", path: "a", sha256: SHA };
+    const { plugins, problems } = parseBundledPlugins({
+      plugins: [
+        { ...entry, id: "a", onboarding: "yes" },
+        { ...entry, id: "b", onboarding: { recommended: "web" } },
+        { ...entry, id: "c", onboarding: { consent: 1 } },
+        { ...entry, id: "d", onboarding: { pinned: true } },
+        { ...entry, id: "e", onboarding: { enabledByEnv: ["lower"] } },
+        { ...entry, id: "f", onboarding: { enabledByEnv: [] } },
+      ],
+    });
+    expect(plugins).toEqual([]);
+    expect(problems).toEqual([
+      "a has an onboarding field that is not an object",
+      'b onboarding.recommended must be true, false or "desktop"',
+      "c onboarding.consent must be a boolean",
+      'd has an unknown onboarding field "pinned"',
+      "e onboarding.enabledByEnv must be a list of environment variable names",
+      "f onboarding.enabledByEnv must be a list of environment variable names",
+    ]);
+  });
+
+  it("reads the list in this repo", () => {
     const root = path.resolve(__dirname, "..");
     expect(() => loadBundledPlugins(root)).not.toThrow();
   });
@@ -159,3 +209,210 @@ describe("tmxplug entries", () => {
     ).rejects.toThrow(/is for "other"/);
   });
 });
+
+describe("buildBundledIndex", () => {
+  it("lists the onboarding defaults of staged plugins only", () => {
+    const plugins = [
+      { id: "a", onboarding: { recommended: true, consent: false } },
+      { id: "b", onboarding: { recommended: "desktop", consent: false } },
+      { id: "c", onboarding: null },
+    ];
+    expect(buildBundledIndex(plugins, ["a", "c", "local"])).toEqual({
+      version: 1,
+      plugins: { a: { onboarding: { recommended: true, consent: false } } },
+    });
+  });
+});
+
+describe("pinsFromIndex", () => {
+  const index = {
+    plugins: [
+      {
+        id: "beta",
+        versions: [
+          {
+            version: "1.1.0",
+            url: "https://example.test/beta-1.1.0.tmxplug",
+            sha256: "b".repeat(64),
+          },
+          {
+            version: "1.0.0",
+            url: "https://example.test/beta-1.0.0.tmxplug",
+            sha256: SHA,
+          },
+        ],
+      },
+      {
+        id: "alpha",
+        versions: [
+          {
+            version: "1.0.0",
+            url: "https://example.test/alpha-1.0.0.tmxplug",
+            sha256: "c".repeat(64),
+          },
+        ],
+      },
+    ],
+  };
+
+  it("pins the newest version of every plugin, sorted by id", () => {
+    const pins = pinsFromIndex(index, null);
+    expect(pins.map((pin) => pin.id)).toEqual(["alpha", "beta"]);
+    expect(pins[1]).toEqual({
+      id: "beta",
+      source: "tmxplug",
+      url: "https://example.test/beta-1.1.0.tmxplug",
+      sha256: "b".repeat(64),
+    });
+    expect(parseBundledPlugins({ plugins: pins }).problems).toEqual([]);
+  });
+
+  it("keeps the onboarding defaults of an existing pin", () => {
+    const current = [
+      { id: "beta", onboarding: { recommended: true, consent: false } },
+    ];
+    const pins = pinsFromIndex(index, null, current);
+    expect(pins[1].onboarding).toEqual({ recommended: true, consent: false });
+    expect(pins[0]).not.toHaveProperty("onboarding");
+  });
+
+  it("pins only the ids asked for", () => {
+    expect(pinsFromIndex(index, ["beta"]).map((pin) => pin.id)).toEqual([
+      "beta",
+    ]);
+  });
+
+  it("refuses an id the index does not list", () => {
+    expect(() => pinsFromIndex(index, ["gamma"])).toThrow(
+      /not in the registry/,
+    );
+  });
+});
+
+describe("local plugin builds", () => {
+  it("finds built repos by manifest id and skips unbuilt ones", () => {
+    const dir = tempDir();
+    const built = path.join(dir, "Plugin-Files");
+    fs.mkdirSync(path.join(built, "dist"), { recursive: true });
+    fs.writeFileSync(
+      path.join(built, "manifest.json"),
+      JSON.stringify({ id: "file-manager" }),
+    );
+    const unbuilt = path.join(dir, "Plugin-Other");
+    fs.mkdirSync(unbuilt);
+    fs.writeFileSync(
+      path.join(unbuilt, "manifest.json"),
+      JSON.stringify({ id: "other" }),
+    );
+
+    const builds = findLocalPluginBuilds(dir);
+    expect([...builds.keys()]).toEqual(["file-manager"]);
+    expect(findLocalPluginBuilds(null).size).toBe(0);
+  });
+
+  it("copies only the files a bundled plugin needs", () => {
+    const repo = tempDir();
+    fs.mkdirSync(path.join(repo, "dist"));
+    fs.writeFileSync(path.join(repo, "dist", "frontend.js"), "x");
+    fs.writeFileSync(path.join(repo, "manifest.json"), "{}");
+    fs.mkdirSync(path.join(repo, "src"));
+
+    const out = path.join(tempDir(), "file-manager");
+    copyLocalBuild(repo, out);
+    expect(fs.existsSync(path.join(out, "dist", "frontend.js"))).toBe(true);
+    expect(fs.existsSync(path.join(out, "manifest.json"))).toBe(true);
+    expect(fs.existsSync(path.join(out, "src"))).toBe(false);
+  });
+});
+
+describe("rebuilding local plugins", () => {
+  function repo(dir: string, name: string, id: string): string {
+    const root = path.join(dir, name);
+    fs.mkdirSync(path.join(root, "src"), { recursive: true });
+    fs.mkdirSync(path.join(root, "node_modules"));
+    fs.writeFileSync(path.join(root, "manifest.json"), JSON.stringify({ id }));
+    fs.writeFileSync(path.join(root, "src", "index.ts"), "x");
+    return root;
+  }
+
+  function touch(file: string, secondsAgo: number) {
+    const time = new Date(Date.now() - secondsAgo * 1000);
+    fs.utimesSync(file, time, time);
+  }
+
+  it("is stale with no dist or with a source newer than the build", () => {
+    const root = repo(tempDir(), "Plugin-A", "a");
+    expect(isLocalBuildStale(root)).toBe(true);
+
+    fs.mkdirSync(path.join(root, "dist"));
+    fs.writeFileSync(path.join(root, "dist", "frontend.js"), "x");
+    touch(path.join(root, "manifest.json"), 60);
+    touch(path.join(root, "src", "index.ts"), 60);
+    expect(isLocalBuildStale(root)).toBe(false);
+
+    touch(path.join(root, "src", "index.ts"), 0);
+    touch(path.join(root, "dist", "frontend.js"), 30);
+    expect(isLocalBuildStale(root)).toBe(true);
+  });
+
+  it("is stale when the SDK CLI changed after the build", () => {
+    const root = repo(tempDir(), "Plugin-A", "a");
+    const cli = path.join(tempDir(), "cli");
+    fs.mkdirSync(cli);
+    fs.writeFileSync(path.join(cli, "index.mjs"), "x");
+    fs.mkdirSync(path.join(root, "dist"));
+    fs.writeFileSync(path.join(root, "dist", "frontend.js"), "x");
+    touch(path.join(root, "manifest.json"), 60);
+    touch(path.join(root, "src", "index.ts"), 60);
+    touch(path.join(cli, "index.mjs"), 60);
+    expect(isLocalBuildStale(root, cli)).toBe(false);
+
+    touch(path.join(root, "dist", "frontend.js"), 30);
+    touch(path.join(cli, "index.mjs"), 0);
+    expect(isLocalBuildStale(root, cli)).toBe(true);
+    expect(isLocalBuildStale(root)).toBe(false);
+  });
+
+  it("builds with this checkout's SDK CLI, not the plugin's own", () => {
+    const [command, args] = localSdkBuildCommand();
+    expect(command).toBe(process.execPath);
+    expect(args).toEqual([
+      path.resolve(
+        __dirname,
+        "..",
+        "packages",
+        "plugin-sdk",
+        "cli",
+        "index.mjs",
+      ),
+      "build",
+    ]);
+  });
+
+  it("builds only stale repos for bundled ids that have node_modules", () => {
+    const dir = tempDir();
+    repo(dir, "Plugin-A", "a");
+    repo(dir, "Plugin-B", "b");
+    const noDeps = repo(dir, "Plugin-C", "c");
+    fs.rmSync(path.join(noDeps, "node_modules"), { recursive: true });
+
+    const run: string[] = [];
+    const rebuilt = rebuildLocalPlugins(
+      dir,
+      new Set(["a", "c"]),
+      (_repo: string, id: string) => run.push(id),
+    );
+    expect(rebuilt).toEqual(["a"]);
+    expect(run).toEqual(["a"]);
+    expect(rebuildLocalPlugins(null, new Set(["a"]), () => {})).toEqual([]);
+  });
+
+  it("builds every stale repo when no ids are given", () => {
+    const dir = tempDir();
+    repo(dir, "Plugin-A", "a");
+    repo(dir, "Plugin-B", "b");
+    const run: string[] = [];
+    rebuildLocalPlugins(dir, null, (_repo: string, id: string) => run.push(id));
+    expect(run.sort()).toEqual(["a", "b"]);
+  });
+});
diff --git a/scripts/check-changelog.cjs b/scripts/check-changelog.cjs
new file mode 100644
index 000000000..063e378fa
--- /dev/null
+++ b/scripts/check-changelog.cjs
@@ -0,0 +1,31 @@
+const fs = require("fs");
+const path = require("path");
+
+const root = path.resolve(__dirname, "..");
+const sdk = path.join(root, "packages/plugin-sdk/dist/changelog.js");
+
+if (!fs.existsSync(sdk)) {
+  console.error("check-changelog: build the SDK first (npm run build:sdk)");
+  process.exit(1);
+}
+
+const { parseChangelog, validateChangelog } = require(sdk);
+const read = (file) => fs.readFileSync(path.join(root, file), "utf8");
+
+const problems = parseChangelog(read("CHANGELOG.md")).problems.map(
+  (problem) => `CHANGELOG.md: ${problem}`,
+);
+
+// The SDK is published on its own, so its newest release has to be the package version.
+const sdkVersion = JSON.parse(read("packages/plugin-sdk/package.json")).version;
+problems.push(
+  ...validateChangelog(
+    read("packages/plugin-sdk/CHANGELOG.md"),
+    sdkVersion,
+  ).map((problem) => `packages/plugin-sdk/CHANGELOG.md: ${problem}`),
+);
+
+if (problems.length > 0) {
+  for (const problem of problems) console.error(`  ${problem}`);
+  process.exit(1);
+}
diff --git a/scripts/check-core-plugin-ids.cjs b/scripts/check-core-plugin-ids.cjs
index 625b44f30..884914da3 100644
--- a/scripts/check-core-plugin-ids.cjs
+++ b/scripts/check-core-plugin-ids.cjs
@@ -2,18 +2,15 @@
 /**
  * Core knows no plugin by name.
  *
- * Fails when anything under src/ imports from plugins/, or spells a plugin id:
- * a bare literal ("docker"), a plugin route ("/plugin-api/docker/..."), or an
- * action, slot or permission id that starts with one ("docker.open"). The
- * shell (src/ui) also may not spell a view a plugin owns (a tab, panel or
- * dashboard card id from a manifest). What core needs from a plugin comes
- * through the registries instead. Regex literals are read too, so
- * /^\/plugin-api\/docker/ counts the same as "/plugin-api/docker".
+ * Fails when anything under src/ spells a plugin id: a bare literal
+ * ("docker"), a plugin route ("/plugin-api/docker/..."), or an action, slot
+ * or permission id that starts with one ("docker.open"). What core needs from
+ * a plugin comes through the registries instead. Regex literals are read too,
+ * so /^\/plugin-api\/docker/ counts the same as "/plugin-api/docker".
  *
- * Ids come from every plugin manifest and from docker/bundled-plugins.json, so
- * the check still means something once plugins live in their own repos. An
- * action, slot or extension point id a plugin owns ("terminal.open") counts
- * too, whatever its prefix. electron/ and vite.config.ts are read as well.
+ * Plugins live in their own repos, so the ids are the official ones below
+ * plus anything in docker/bundled-plugins.json. electron/ and vite.config.ts
+ * are read as well.
  *
  * src/backend/tests, src/ui/tests and src/ui/locales are exempt, and so is
  * src/backend/upgrade/: the one-time
@@ -29,16 +26,50 @@
 const fs = require("node:fs");
 const path = require("node:path");
 
-const { owners } = require("./check-plugin-uses.cjs");
 const SSH_TERMS = new Set(["totp"]);
 
+const OFFICIAL_IDS = [
+  "acme-ssl",
+  "ai",
+  "alerts",
+  "automations",
+  "docker",
+  "file-manager",
+  "fleets",
+  "homepage",
+  "host-metrics",
+  "ldap",
+  "network-topology",
+  "opkssh",
+  "proxmox",
+  "remote-desktop",
+  "secret-sources",
+  "serial",
+  "session-recording",
+  "session-sharing",
+  "snippets",
+  "ssh-terminal",
+  "sso",
+  "step-ca",
+  "tailscale",
+  "telemetry",
+  "termix-identity",
+  "tmux-monitor",
+  "totp",
+  "tunnels",
+  "vault",
+  "wake-on-lan",
+  "warpgate",
+  "web-endpoint",
+  "webauthn",
+  "workspaces",
+];
+
 function paths(root) {
   const src = path.join(root, "src");
   return {
     root,
     src,
-    ui: path.join(src, "ui"),
-    plugins: path.join(root, "plugins"),
     bundled: path.join(root, "docker", "bundled-plugins.json"),
     extra: [path.join(root, "electron"), path.join(root, "vite.config.ts")],
     exempt: [
@@ -51,37 +82,15 @@ function paths(root) {
   };
 }
 
-function manifests(dir) {
-  if (!fs.existsSync(dir)) return [];
-  return fs
-    .readdirSync(dir, { withFileTypes: true })
-    .filter((entry) => entry.isDirectory())
-    .map((entry) => path.join(dir, entry.name, "manifest.json"))
-    .filter((file) => fs.existsSync(file))
-    .map((file) => JSON.parse(fs.readFileSync(file, "utf8")));
-}
-
-function names(pluginsDir, bundledFile) {
-  const ids = new Set();
-  const views = new Set();
+function pluginIds(bundledFile) {
+  const ids = new Set(OFFICIAL_IDS);
   if (bundledFile && fs.existsSync(bundledFile)) {
     for (const entry of JSON.parse(fs.readFileSync(bundledFile, "utf8"))
       .plugins ?? []) {
       if (typeof entry?.id === "string") ids.add(entry.id);
     }
   }
-  for (const manifest of manifests(pluginsDir)) {
-    ids.add(manifest.id);
-    const contributes = manifest.contributes ?? {};
-    for (const list of [
-      contributes.tabs,
-      contributes.panels,
-      contributes.dashboardCards,
-    ]) {
-      for (const view of list ?? []) views.add(view.id);
-    }
-  }
-  return { ids, views };
+  return ids;
 }
 
 function walk(dir, exempt, out) {
@@ -131,9 +140,8 @@ function regexLiterals(source) {
 }
 
 function scan(root = path.resolve(__dirname, "..")) {
-  const { src, ui, plugins, bundled, extra, exempt, sshConnect } = paths(root);
-  const { ids, views } = names(plugins, bundled);
-  const owned = fs.existsSync(plugins) ? owners(plugins) : new Map();
+  const { src, bundled, extra, exempt, sshConnect } = paths(root);
+  const ids = pluginIds(bundled);
   const found = {};
   const add = (file, what) => {
     const key = path.relative(root, file).replaceAll("\\", "/");
@@ -150,23 +158,10 @@ function scan(root = path.resolve(__dirname, "..")) {
       .split("\n")
       .filter((line) => !/plugin-id-ok: \S/.test(line))
       .join("\n");
-    const inShell = file.startsWith(ui + path.sep);
     const inConnect = file.startsWith(sshConnect + path.sep);
-    for (const match of source.matchAll(
-      /(?:from|import)\s*\(?\s*["']([^"']+)["']/g,
-    )) {
-      const target = match[1].startsWith(".")
-        ? path.resolve(path.dirname(file), match[1])
-        : "";
-      if (target.startsWith(plugins + path.sep)) {
-        add(file, `import ${match[1]}`);
-      }
-    }
     for (const text of literals(source)) {
       const sshTerm = inConnect && SSH_TERMS.has(text);
-      if ((ids.has(text) && !sshTerm) || (inShell && views.has(text))) {
-        add(file, text);
-      }
+      if (ids.has(text) && !sshTerm) add(file, text);
       for (const route of text.matchAll(
         /\/plugin-(?:api|ws|assets)\/([a-z0-9-]+)/g,
       )) {
@@ -174,7 +169,6 @@ function scan(root = path.resolve(__dirname, "..")) {
       }
       const prefix = /^([a-z][a-z0-9-]*)\.[a-zA-Z]/.exec(text);
       if (prefix && ids.has(prefix[1])) add(file, text);
-      if (owned.has(text)) add(file, `${text} (owned by ${owned.get(text)})`);
     }
     for (const pattern of regexLiterals(source)) {
       for (const route of pattern.matchAll(
diff --git a/scripts/check-core-plugin-ids.test.ts b/scripts/check-core-plugin-ids.test.ts
index 5b818e4d1..6bb62c6a1 100644
--- a/scripts/check-core-plugin-ids.test.ts
+++ b/scripts/check-core-plugin-ids.test.ts
@@ -19,14 +19,7 @@ afterEach(() => {
 
 function fixture(files: Record<string, string>): string {
   root = fs.mkdtempSync(path.join(os.tmpdir(), "core-plugin-ids-"));
-  const all = {
-    "plugins/docker/manifest.json": JSON.stringify({
-      id: "docker",
-      contributes: { tabs: [{ id: "docker-tab" }] },
-    }),
-    ...files,
-  };
-  for (const [file, content] of Object.entries(all)) {
+  for (const [file, content] of Object.entries(files)) {
     const full = path.join(root, file);
     fs.mkdirSync(path.dirname(full), { recursive: true });
     fs.writeFileSync(full, content);
@@ -69,40 +62,35 @@ describe("scan", () => {
     });
   });
 
-  it("fails a bare id, and a view id in the shell", () => {
+  it("fails a bare id and an id-prefixed action, but not in tests", () => {
     const dir = fixture({
       "src/backend/id.ts": 'if (pluginId === "docker") {}\n',
-      "src/ui/view.ts": 'open("docker-tab");\n',
+      "src/ui/action.ts": 'run("docker.open");\n',
       "src/ui/tests/skip.ts": 'open("docker");\n',
     });
     expect(scan(dir)).toEqual({
       "src/backend/id.ts": ["docker"],
-      "src/ui/view.ts": ["docker-tab"],
+      "src/ui/action.ts": ["docker.open"],
     });
   });
 });
 
-describe("scan beyond src with plugins elsewhere", () => {
-  it("knows the bundled ids even when plugins/ is empty", () => {
+describe("scan beyond src", () => {
+  it("knows ids from bundled-plugins.json", () => {
     const dir = fixture({
       "docker/bundled-plugins.json": JSON.stringify({
-        plugins: [{ id: "tunnels", source: "workspace" }],
+        plugins: [{ id: "extra-thing", source: "tmxplug" }],
       }),
-      "src/ui/x.ts": 'const route = "/plugin-ws/tunnels/c2s";\n',
+      "src/ui/x.ts": 'const route = "/plugin-ws/extra-thing/c2s";\n',
     });
-    fs.rmSync(path.join(dir, "plugins"), { recursive: true, force: true });
-    expect(scan(dir)["src/ui/x.ts"]).toContain("/plugin-ws/tunnels");
+    expect(scan(dir)["src/ui/x.ts"]).toContain("/plugin-ws/extra-thing");
   });
 
-  it("reads electron and catches an action a plugin owns", () => {
+  it("reads electron", () => {
     const dir = fixture({
-      "plugins/docker/src/frontend/index.tsx":
-        'app.registerAction("terminal.open", fn);\n',
-      "electron/main.cjs": 'invoke("terminal.open");\n',
+      "electron/main.cjs": 'invoke("/plugin-api/tunnels/list");\n',
     });
-    expect(scan(dir)["electron/main.cjs"]).toEqual([
-      "terminal.open (owned by docker)",
-    ]);
+    expect(scan(dir)["electron/main.cjs"]).toEqual(["/plugin-api/tunnels"]);
   });
 
   it("skips a line marked plugin-id-ok with a reason", () => {
diff --git a/scripts/check-env-catalog.cjs b/scripts/check-env-catalog.cjs
new file mode 100644
index 000000000..6d47d7e8a
--- /dev/null
+++ b/scripts/check-env-catalog.cjs
@@ -0,0 +1,74 @@
+#!/usr/bin/env node
+// Fails when core reads an env var that env.catalog.json does not list. The
+// docs site builds its env var page from that file.
+const fs = require("fs");
+const path = require("path");
+
+const ROOT = path.resolve(__dirname, "..");
+const DIRS = ["src/backend", "electron"];
+const PATTERNS = [
+  /process\.env\.([A-Z][A-Z0-9_]*)/g,
+  /process\.env\[\s*["'`]([A-Z][A-Z0-9_]*)["'`]\s*\]/g,
+  /\benv\.([A-Z][A-Z0-9_]*)\b/g,
+  /\benv\[\s*["'`]([A-Z][A-Z0-9_]*)["'`]\s*\]/g,
+  /_ENV\s*=\s*["']([A-Z][A-Z0-9_]*)["']/g,
+];
+
+function walk(dir, out = []) {
+  for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+    if (entry.name === "node_modules" || entry.name === "tests") continue;
+    const full = path.join(dir, entry.name);
+    if (entry.isDirectory()) walk(full, out);
+    else if (
+      /\.(ts|cjs|mjs|js)$/.test(entry.name) &&
+      !/\.test\./.test(entry.name)
+    )
+      out.push(full);
+  }
+  return out;
+}
+
+function readNames(root = ROOT) {
+  const found = new Map();
+  for (const dir of DIRS) {
+    const abs = path.join(root, dir);
+    if (!fs.existsSync(abs)) continue;
+    for (const file of walk(abs)) {
+      const text = fs.readFileSync(file, "utf8");
+      for (const pattern of PATTERNS) {
+        for (const match of text.matchAll(pattern)) {
+          if (!found.has(match[1]))
+            found.set(match[1], path.relative(root, file));
+        }
+      }
+    }
+  }
+  return found;
+}
+
+function main() {
+  const catalog = JSON.parse(
+    fs.readFileSync(path.join(ROOT, "env.catalog.json"), "utf8"),
+  );
+  const listed = new Set(catalog.vars.map((v) => v.name));
+  const problems = [];
+  for (const v of catalog.vars) {
+    if (!catalog.groups[v.group])
+      problems.push(`${v.name}: unknown group "${v.group}"`);
+    if (!v.description?.trim()) problems.push(`${v.name}: no description`);
+  }
+  for (const [name, file] of readNames()) {
+    if (!listed.has(name))
+      problems.push(
+        `${name} is read in ${file} but missing from env.catalog.json`,
+      );
+  }
+  if (problems.length) {
+    for (const p of problems) console.error(`  ${p}`);
+    process.exit(1);
+  }
+  console.log(`env catalog ok (${listed.size} vars)`);
+}
+
+if (require.main === module) main();
+module.exports = { readNames, PATTERNS };
diff --git a/scripts/check-env-catalog.test.ts b/scripts/check-env-catalog.test.ts
new file mode 100644
index 000000000..85236965d
--- /dev/null
+++ b/scripts/check-env-catalog.test.ts
@@ -0,0 +1,56 @@
+import { afterEach, describe, expect, it } from "vitest";
+import { createRequire } from "node:module";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+
+const require = createRequire(import.meta.url);
+const { readNames } = require("./check-env-catalog.cjs") as {
+  readNames: (root: string) => Map<string, string>;
+};
+
+let root: string | null = null;
+
+afterEach(() => {
+  if (root) fs.rmSync(root, { recursive: true, force: true });
+  root = null;
+});
+
+function fixture(files: Record<string, string>): string {
+  root = fs.mkdtempSync(path.join(os.tmpdir(), "env-catalog-"));
+  for (const [file, content] of Object.entries(files)) {
+    const full = path.join(root, file);
+    fs.mkdirSync(path.dirname(full), { recursive: true });
+    fs.writeFileSync(full, content);
+  }
+  return root;
+}
+
+describe("readNames", () => {
+  it("finds every way core reads an env var", () => {
+    const dir = fixture({
+      "src/backend/a.ts": [
+        "const a = process.env.FIRST_VAR;",
+        'const b = process.env["SECOND_VAR"];',
+        "const c = env.THIRD_VAR;",
+        'export const X_ENV =\n  "FOURTH_VAR";',
+      ].join("\n"),
+      "electron/main.cjs": "process.env.DESKTOP_VAR",
+    });
+    expect([...readNames(dir).keys()].sort()).toEqual([
+      "DESKTOP_VAR",
+      "FIRST_VAR",
+      "FOURTH_VAR",
+      "SECOND_VAR",
+      "THIRD_VAR",
+    ]);
+  });
+
+  it("skips tests", () => {
+    const dir = fixture({
+      "src/backend/tests/a.test.ts": "process.env.ONLY_IN_TESTS",
+      "src/backend/b.test.ts": "process.env.ALSO_TESTS",
+    });
+    expect(readNames(dir).size).toBe(0);
+  });
+});
diff --git a/scripts/check-plugin-locales.cjs b/scripts/check-plugin-locales.cjs
deleted file mode 100644
index 6d845dadc..000000000
--- a/scripts/check-plugin-locales.cjs
+++ /dev/null
@@ -1,228 +0,0 @@
-#!/usr/bin/env node
-/**
- * A plugin's strings live in its own locales/en.json.
- *
- * A plugin's i18next namespace falls back to core's, so a plugin can use
- * `common.*` without copying it. Any other key a plugin uses has to be in the
- * plugin's own en.json: one that only resolves through the fallback breaks
- * the moment core renames or drops it, and core cannot tell it is in use.
- *
- * Reads t("...") calls and i18n key props (titleKey, labelKey and the rest)
- * in plugins/<id>/src, and the *Key values in plugins/<id>/manifest.json.
- * A key with a namespace ("docker:hosts.x") is checked against that plugin.
- *
- * --list prints what is missing per plugin, with whether core has the key.
- */
-
-const fs = require("node:fs");
-const path = require("node:path");
-
-const ROOT = path.resolve(__dirname, "..");
-const PLUGINS = path.join(ROOT, "plugins");
-const CORE_LOCALE = path.join(ROOT, "src", "ui", "locales", "en.json");
-
-const SHARED_PREFIXES = ["common."];
-const KEY = /^[A-Za-z0-9_-]+(\.[A-Za-z0-9_-]+)*$/;
-const KEY_PROPS = new Set([
-  "titleKey",
-  "labelKey",
-  "descriptionKey",
-  "noHostMessageKey",
-  "paletteKey",
-  "hintKey",
-  "messageKey",
-  "placeholderKey",
-  "tooltipKey",
-  "i18nKey",
-  "enableLabelKey",
-  "enableDescriptionKey",
-  "consequenceKey",
-  "groupKey",
-  "emptyKey",
-  "nameKey",
-]);
-const PLURAL_SUFFIXES = [
-  "_zero",
-  "_one",
-  "_two",
-  "_few",
-  "_many",
-  "_other",
-  "_plural",
-];
-
-function readJson(file) {
-  return JSON.parse(fs.readFileSync(file, "utf8"));
-}
-
-/**
- * Whether a dotted key resolves in a locale tree, the way i18next finds it:
- * a segment may itself hold dots ("services.use"), and a last segment may be
- * a plural form.
- */
-function hasKey(tree, key) {
-  const find = (node, parts) => {
-    if (parts.length === 0) return node !== undefined;
-    if (!node || typeof node !== "object") return false;
-    for (let end = parts.length; end >= 1; end--) {
-      const name = parts.slice(0, end).join(".");
-      if (name in node && find(node[name], parts.slice(end))) return true;
-      if (
-        end === parts.length &&
-        PLURAL_SUFFIXES.some((suffix) => `${name}${suffix}` in node)
-      ) {
-        return true;
-      }
-    }
-    return false;
-  };
-  return find(tree, key.split("."));
-}
-
-function isShared(key) {
-  return SHARED_PREFIXES.some((prefix) => key.startsWith(prefix));
-}
-
-function walk(dir, out = []) {
-  if (!fs.existsSync(dir)) return out;
-  for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
-    const full = path.join(dir, entry.name);
-    if (entry.isDirectory()) walk(full, out);
-    else if (/\.(tsx?|jsx?)$/.test(entry.name)) out.push(full);
-  }
-  return out;
-}
-
-/** Drops comments, so an example in one is not read as a call. */
-function stripComments(source) {
-  return source.replace(/\/\*[\s\S]*?\*\//g, "").replace(/^\s*\/\/.*$/gm, "");
-}
-
-/**
- * Every literal i18n key a source file uses. A prefix a key is built from at
- * run time ends in ".*".
- */
-function keysInSource(text) {
-  const source = stripComments(text);
-  const keys = new Set();
-  for (const match of source.matchAll(
-    /\bt\(\s*(["'])((?:(?!\1)[^\\\n$`])+)\1/g,
-  )) {
-    keys.add(match[2]);
-  }
-  for (const match of source.matchAll(
-    /\b([A-Za-z]+Key)\s*[:=]\s*\{?\s*(["'])((?:(?!\2)[^\\\n])+)\2/g,
-  )) {
-    if (KEY_PROPS.has(match[1])) keys.add(match[3]);
-  }
-  // A key built at run time: `hosts.sharing.levels.${level}.label` needs the
-  // whole hosts.sharing.levels subtree. A one-segment prefix says too little
-  // to check.
-  for (const match of source.matchAll(
-    /\bt\(\s*`((?:[A-Za-z0-9_-]+\.){2,})\$\{/g,
-  )) {
-    keys.add(`${match[1]}*`);
-  }
-  return [...keys].filter((key) =>
-    KEY.test(key.replace(/^[a-z0-9-]+:/, "").replace(/\.\*$/, "")),
-  );
-}
-
-function keysInManifest(value, out = new Set()) {
-  if (Array.isArray(value)) {
-    for (const item of value) keysInManifest(item, out);
-  } else if (value && typeof value === "object") {
-    for (const [name, child] of Object.entries(value)) {
-      if (KEY_PROPS.has(name) && typeof child === "string") out.add(child);
-      else keysInManifest(child, out);
-    }
-  }
-  return out;
-}
-
-function pluginIds(pluginsDir) {
-  return fs
-    .readdirSync(pluginsDir, { withFileTypes: true })
-    .filter((entry) => entry.isDirectory())
-    .map((entry) => entry.name)
-    .filter((id) => fs.existsSync(path.join(pluginsDir, id, "manifest.json")))
-    .sort();
-}
-
-/**
- * Keys each plugin uses but does not define, other than the shared ones.
- * Returns { [pluginId]: [{ key, file, inCore }] }.
- */
-function scan({ pluginsDir = PLUGINS, coreLocale = CORE_LOCALE } = {}) {
-  const core = fs.existsSync(coreLocale) ? readJson(coreLocale) : {};
-  const ids = pluginIds(pluginsDir);
-  const locales = new Map(
-    ids.map((id) => {
-      const file = path.join(pluginsDir, id, "locales", "en.json");
-      return [id, fs.existsSync(file) ? readJson(file) : {}];
-    }),
-  );
-
-  const missing = {};
-  const check = (owner, rawKey, file) => {
-    const colon = rawKey.indexOf(":");
-    const namespace = colon > 0 ? rawKey.slice(0, colon) : owner;
-    const key = colon > 0 ? rawKey.slice(colon + 1) : rawKey;
-    if (isShared(key)) return;
-    const tree = locales.get(namespace);
-    const lookup = key.endsWith(".*") ? key.slice(0, -2) : key;
-    if (tree && hasKey(tree, lookup)) return;
-    const inCore = hasKey(core, lookup);
-    // A bare word that is nowhere is a local helper named t, not a string.
-    if (!key.includes(".") && !inCore) return;
-    const list = (missing[owner] ??= []);
-    if (!list.some((entry) => entry.key === rawKey)) {
-      list.push({
-        key: rawKey,
-        file: path.relative(ROOT, file).replaceAll("\\", "/"),
-        inCore,
-      });
-    }
-  };
-
-  for (const id of ids) {
-    const manifestFile = path.join(pluginsDir, id, "manifest.json");
-    for (const key of keysInManifest(readJson(manifestFile))) {
-      if (KEY.test(key.replace(/^[a-z0-9-]+:/, ""))) {
-        check(id, key, manifestFile);
-      }
-    }
-    for (const file of walk(path.join(pluginsDir, id, "src"))) {
-      for (const key of keysInSource(fs.readFileSync(file, "utf8"))) {
-        check(id, key, file);
-      }
-    }
-  }
-  for (const list of Object.values(missing)) {
-    list.sort((a, b) => a.key.localeCompare(b.key));
-  }
-  return missing;
-}
-
-function main() {
-  const missing = scan();
-  if (process.argv.includes("--list")) {
-    console.log(JSON.stringify(missing, null, 2));
-    return;
-  }
-  const entries = Object.entries(missing);
-  if (entries.length === 0) return;
-  console.error(
-    "Plugins use i18n keys their own locales/en.json does not define:",
-  );
-  for (const [id, list] of entries) {
-    for (const { key, file } of list) {
-      console.error(`  ${id}: ${key} (${file})`);
-    }
-  }
-  process.exit(1);
-}
-
-if (require.main === module) main();
-
-module.exports = { scan, keysInSource, hasKey };
diff --git a/scripts/check-plugin-locales.test.ts b/scripts/check-plugin-locales.test.ts
deleted file mode 100644
index a0cdf975f..000000000
--- a/scripts/check-plugin-locales.test.ts
+++ /dev/null
@@ -1,127 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { createRequire } from "node:module";
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-
-const require = createRequire(import.meta.url);
-const { scan, keysInSource, hasKey } =
-  require("./check-plugin-locales.cjs") as {
-    scan: (options: {
-      pluginsDir: string;
-      coreLocale: string;
-    }) => Record<string, Array<{ key: string; file: string; inCore: boolean }>>;
-    keysInSource: (source: string) => string[];
-    hasKey: (tree: unknown, key: string) => boolean;
-  };
-
-let dir: string | null = null;
-
-afterEach(() => {
-  if (dir) fs.rmSync(dir, { recursive: true, force: true });
-  dir = null;
-});
-
-function fixture(files: Record<string, unknown>) {
-  dir = fs.mkdtempSync(path.join(os.tmpdir(), "plugin-locales-"));
-  for (const [file, content] of Object.entries(files)) {
-    const full = path.join(dir, file);
-    fs.mkdirSync(path.dirname(full), { recursive: true });
-    fs.writeFileSync(
-      full,
-      typeof content === "string" ? content : JSON.stringify(content),
-    );
-  }
-  return {
-    pluginsDir: path.join(dir, "plugins"),
-    coreLocale: path.join(dir, "core.json"),
-  };
-}
-
-describe("keysInSource", () => {
-  it("reads t() calls, key props and run time prefixes, not comments", () => {
-    const keys = keysInSource(
-      [
-        'const a = t("hosts.one");',
-        "const b = i18next.t('docker:hosts.two', { x: 1 });",
-        'app.registerTab("x", X, { titleKey: "nav.three" });',
-        '<EmptyState messageKey="hosts.four" />',
-        "t(`hosts.sharing.levels.${level}.label`);",
-        "t(`hosts.${label}`);",
-        '// t("hosts.commented")',
-        'storageKey: "not.a.string.key"',
-      ].join("\n"),
-    );
-    expect(keys.sort()).toEqual(
-      [
-        "docker:hosts.two",
-        "hosts.four",
-        "hosts.one",
-        "hosts.sharing.levels.*",
-        "nav.three",
-      ].sort(),
-    );
-  });
-});
-
-describe("hasKey", () => {
-  it("finds nested keys, dotted names and plural forms", () => {
-    const tree = {
-      a: { b: "x" },
-      permissions: { "services.use": { title: "t" } },
-      items: { count_one: "1", count_other: "n" },
-    };
-    expect(hasKey(tree, "a.b")).toBe(true);
-    expect(hasKey(tree, "a")).toBe(true);
-    expect(hasKey(tree, "permissions.services.use.title")).toBe(true);
-    expect(hasKey(tree, "items.count")).toBe(true);
-    expect(hasKey(tree, "a.c")).toBe(false);
-  });
-});
-
-describe("scan", () => {
-  it("passes keys a plugin defines and the shared common ones", () => {
-    const options = fixture({
-      "core.json": { common: { save: "Save" }, hosts: { name: "Name" } },
-      "plugins/demo/manifest.json": { id: "demo", titleKey: "title" },
-      "plugins/demo/locales/en.json": { title: "Demo", hosts: { name: "N" } },
-      "plugins/demo/src/frontend/index.tsx":
-        't("common.save"); t("hosts.name"); t("title");',
-    });
-    expect(scan(options)).toEqual({});
-  });
-
-  it("fails a key that only resolves through core's fallback", () => {
-    const options = fixture({
-      "core.json": { hosts: { name: "Name" } },
-      "plugins/demo/manifest.json": { id: "demo" },
-      "plugins/demo/locales/en.json": {},
-      "plugins/demo/src/frontend/index.tsx": 't("hosts.name");',
-    });
-    expect(scan(options)).toEqual({
-      demo: [
-        {
-          key: "hosts.name",
-          file: expect.stringContaining("index.tsx"),
-          inCore: true,
-        },
-      ],
-    });
-  });
-
-  it("checks a namespaced key against that plugin and a prefix as a subtree", () => {
-    const options = fixture({
-      "core.json": { hosts: { levels: { view: "View" } } },
-      "plugins/demo/manifest.json": { id: "demo" },
-      "plugins/demo/locales/en.json": {},
-      "plugins/demo/src/frontend/index.tsx":
-        't("other:known.key"); t("other:gone.key"); t(`hosts.levels.${l}`);',
-      "plugins/other/manifest.json": { id: "other" },
-      "plugins/other/locales/en.json": { known: { key: "k" } },
-    });
-    expect(scan(options).demo.map((entry) => entry.key)).toEqual([
-      "hosts.levels.*",
-      "other:gone.key",
-    ]);
-  });
-});
diff --git a/scripts/check-plugin-uses.cjs b/scripts/check-plugin-uses.cjs
deleted file mode 100644
index 0d3e88ab2..000000000
--- a/scripts/check-plugin-uses.cjs
+++ /dev/null
@@ -1,153 +0,0 @@
-#!/usr/bin/env node
-/**
- * A plugin that calls another plugin's action, fills its slot or extends its
- * extension point has to say so in manifest.json contributes.uses. Nothing
- * else records that coupling: the ids are plain strings, so without it a
- * plugin moved to its own repo silently loses a feature when the other one is
- * renamed, and nobody can tell what depends on what.
- *
- * Owners are read from the code: a plugin owns the actions it registers, the
- * slots it renders (ActionSlot/ComponentSlot/useSlotContributions/
- * declareActionSlot) and the extension points it reads (useExtensions). An id
- * nobody owns is core's and needs no declaration.
- *
- * --list prints what each plugin uses from which owner.
- */
-
-const fs = require("node:fs");
-const path = require("node:path");
-
-const ROOT = path.resolve(__dirname, "..");
-const PLUGINS = path.join(ROOT, "plugins");
-
-// Each pattern captures a string literal or a constant's name; constants are
-// resolved against the plugin's own `const NAME = "id"` declarations.
-const ID = String.raw`(?:"([^"]+)"|([A-Z][A-Z0-9_]*))`;
-const OWNS = [
-  new RegExp(String.raw`registerAction\(\s*${ID}`, "g"),
-  new RegExp(String.raw`declareActionSlot\(\s*\{\s*id:\s*${ID}`, "g"),
-  new RegExp(
-    String.raw`<(?:ActionSlot|ComponentSlot)[^>]*?slotId=\{?${ID}`,
-    "g",
-  ),
-  new RegExp(String.raw`useSlotContributions\(\s*${ID}`, "g"),
-  new RegExp(String.raw`useExtensions(?:<[^>]*>)?\(\s*${ID}`, "g"),
-  new RegExp(String.raw`getExtension\(\s*${ID}`, "g"),
-];
-const USES = [
-  new RegExp(String.raw`invokeAction\(\s*${ID}`, "g"),
-  new RegExp(String.raw`registerSlotContribution\(\s*${ID}`, "g"),
-  new RegExp(String.raw`registerExtension\(\s*${ID}`, "g"),
-  new RegExp(
-    String.raw`<(?:ActionSlot|ComponentSlot)[^>]*?slotId=\{?${ID}`,
-    "g",
-  ),
-  new RegExp(String.raw`useSlotContributions\(\s*${ID}`, "g"),
-];
-
-function sourceOf(dir) {
-  let text = "";
-  const walk = (current) => {
-    if (!fs.existsSync(current)) return;
-    for (const entry of fs.readdirSync(current, { withFileTypes: true })) {
-      const file = path.join(current, entry.name);
-      if (entry.isDirectory()) walk(file);
-      else if (/\.(ts|tsx)$/.test(entry.name)) {
-        text += fs.readFileSync(file, "utf8");
-      }
-    }
-  };
-  walk(path.join(dir, "src"));
-  return text;
-}
-
-function constants(text) {
-  const map = new Map();
-  for (const match of text.matchAll(
-    /const ([A-Z][A-Z0-9_]*)\s*=\s*"([^"]+)"/g,
-  )) {
-    map.set(match[1], match[2]);
-  }
-  return map;
-}
-
-function matches(patterns, text) {
-  const names = constants(text);
-  const found = new Set();
-  for (const pattern of patterns) {
-    for (const match of text.matchAll(pattern)) {
-      const id = match[1] ?? names.get(match[2]);
-      if (id) found.add(id);
-    }
-  }
-  return found;
-}
-
-function collect(pluginsDir = PLUGINS) {
-  const plugins = fs
-    .readdirSync(pluginsDir, { withFileTypes: true })
-    .filter((entry) =>
-      fs.existsSync(path.join(pluginsDir, entry.name, "manifest.json")),
-    )
-    .map((entry) => {
-      const dir = path.join(pluginsDir, entry.name);
-      const manifest = JSON.parse(
-        fs.readFileSync(path.join(dir, "manifest.json"), "utf8"),
-      );
-      const source = sourceOf(dir);
-      return {
-        id: manifest.id,
-        declared: new Set(manifest.contributes?.uses ?? []),
-        owns: matches(OWNS, source),
-        uses: matches(USES, source),
-      };
-    });
-
-  const owner = new Map();
-  for (const plugin of plugins) {
-    for (const id of plugin.owns) if (!owner.has(id)) owner.set(id, plugin.id);
-  }
-
-  const problems = [];
-  const usage = {};
-  for (const plugin of plugins) {
-    for (const id of plugin.uses) {
-      const by = owner.get(id);
-      if (!by || by === plugin.id || plugin.owns.has(id)) continue;
-      (usage[plugin.id] ??= []).push(`${id} (${by})`);
-      if (!plugin.declared.has(id)) {
-        problems.push(
-          `${plugin.id} uses "${id}" from the ${by} plugin; add it to contributes.uses in plugins/${plugin.id}/manifest.json`,
-        );
-      }
-    }
-    for (const id of plugin.declared) {
-      if (!plugin.uses.has(id)) {
-        problems.push(
-          `${plugin.id} declares "${id}" in contributes.uses but never uses it`,
-        );
-      }
-    }
-  }
-  return { problems, usage, owner };
-}
-
-function main() {
-  const { problems, usage } = collect();
-  if (process.argv.includes("--list")) {
-    console.log(JSON.stringify(usage, null, 2));
-    return;
-  }
-  if (problems.length === 0) return;
-  for (const problem of problems) console.error(problem);
-  process.exit(1);
-}
-
-if (require.main === module) main();
-
-/** Every action, slot and extension point id a plugin owns, by owner. */
-function owners(pluginsDir = PLUGINS) {
-  return collect(pluginsDir).owner;
-}
-
-module.exports = { collect, owners };
diff --git a/scripts/check-plugin-uses.test.ts b/scripts/check-plugin-uses.test.ts
deleted file mode 100644
index 5fcc45cc6..000000000
--- a/scripts/check-plugin-uses.test.ts
+++ /dev/null
@@ -1,70 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import { createRequire } from "node:module";
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-
-const require = createRequire(import.meta.url);
-const { collect } = require("./check-plugin-uses.cjs") as {
-  collect: (dir: string) => { problems: string[]; owner: Map<string, string> };
-};
-
-let root: string | null = null;
-
-afterEach(() => {
-  if (root) fs.rmSync(root, { recursive: true, force: true });
-  root = null;
-});
-
-function plugins(
-  specs: Record<string, { source: string; uses?: string[] }>,
-): string {
-  root = fs.mkdtempSync(path.join(os.tmpdir(), "plugin-uses-"));
-  for (const [id, spec] of Object.entries(specs)) {
-    const dir = path.join(root, id);
-    fs.mkdirSync(path.join(dir, "src"), { recursive: true });
-    fs.writeFileSync(
-      path.join(dir, "manifest.json"),
-      JSON.stringify({ id, contributes: spec.uses ? { uses: spec.uses } : {} }),
-    );
-    fs.writeFileSync(path.join(dir, "src", "index.tsx"), spec.source);
-  }
-  return root;
-}
-
-describe("check-plugin-uses", () => {
-  it("finds owners through string literals and constants", () => {
-    const dir = plugins({
-      terminal: {
-        source:
-          'const SLOT = "terminal.toolbar";\napp.declareActionSlot({ id: SLOT });\napp.registerAction("terminal.open", f);\n',
-      },
-    });
-    const { owner } = collect(dir);
-    expect(owner.get("terminal.open")).toBe("terminal");
-    expect(owner.get("terminal.toolbar")).toBe("terminal");
-  });
-
-  it("requires another plugin's id in contributes.uses", () => {
-    const dir = plugins({
-      terminal: { source: 'app.registerAction("terminal.open", f);\n' },
-      files: { source: 'invokeAction("terminal.open", host);\n' },
-    });
-    expect(collect(dir).problems).toEqual([
-      expect.stringContaining('files uses "terminal.open" from the terminal'),
-    ]);
-  });
-
-  it("passes a declared use and flags a declared one that is unused", () => {
-    const dir = plugins({
-      terminal: { source: 'app.registerAction("terminal.open", f);\n' },
-      files: {
-        source: 'invokeAction("terminal.open", host);\n',
-        uses: ["terminal.open", "terminal.gone"],
-      },
-    });
-    expect(collect(dir).problems).toEqual([
-      expect.stringContaining('declares "terminal.gone"'),
-    ]);
-  });
-});
diff --git a/scripts/check-sdk-ui-exports.cjs b/scripts/check-sdk-ui-exports.cjs
index 3bce4d9a9..c8072663d 100644
--- a/scripts/check-sdk-ui-exports.cjs
+++ b/scripts/check-sdk-ui-exports.cjs
@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 /**
- * @termix/plugin-sdk/ui is public API, implemented by
+ * @termix-ssh/plugin-sdk/ui is public API, implemented by
  * src/ui/plugin-host/sdk-ui.ts. Adding to it is a contract change and
  * removing from it is a breaking one, so neither should happen by accident.
  *
@@ -20,6 +20,7 @@ const TSCONFIG = path.join(ROOT, "tsconfig.app.json");
 
 const ALLOWED = [
   "ActionSlot",
+  "AddButton",
   "Alert",
   "AlertDescription",
   "AlertDialog",
@@ -34,6 +35,7 @@ const ALLOWED = [
   "AlertDialogTitle",
   "AlertDialogTrigger",
   "AlertTitle",
+  "BackButton",
   "Badge",
   "BarSeries",
   "BarSeriesItem",
@@ -48,17 +50,25 @@ const ALLOWED = [
   "CardFooter",
   "CardGridCanvas",
   "CardHeader",
+  "CardMasonry",
   "CardTitle",
   "Checkbox",
   "ColumnCountStepper",
   "ComponentSlot",
+  "ConfirmOptions",
+  "ConnectionGate",
+  "ConnectionGateController",
+  "ConnectionGateProps",
   "ConnectionLogPanel",
   "ConnectionLogProvider",
   "ConnectionOrigin",
   "ConnectionScreen",
   "ConnectionStage",
   "ConnectionStatus",
+  "ConnectionUnavailable",
   "CustomKeybinding",
+  "DataColumn",
+  "DataView",
   "Dialog",
   "DialogClose",
   "DialogContent",
@@ -69,6 +79,8 @@ const ALLOWED = [
   "DialogPortal",
   "DialogTitle",
   "DialogTrigger",
+  "DocsLink",
+  "DocsLinkProps",
   "DropdownMenu",
   "DropdownMenuCheckboxItem",
   "DropdownMenuContent",
@@ -84,20 +96,28 @@ const ALLOWED = [
   "DropdownMenuSubContent",
   "DropdownMenuSubTrigger",
   "DropdownMenuTrigger",
+  "EditingWidth",
   "EmptyState",
   "FOLDER_COLORS",
+  "Facts",
   "FakeSwitch",
+  "Field",
+  "FieldPair",
+  "FormFooter",
   "FullScreenAppPhase",
   "FullScreenAppWrapper",
   "GridCardCatalogEntry",
   "GridColSpan",
+  "GridColumns",
   "GridLayout",
   "GridSlot",
+  "GroupHeading",
   "HostDefaultBadge",
   "HostDefaultField",
   "HostFeatureFields",
   "HostFeatureFieldsProps",
   "HostKeyVerificationDialog",
+  "InlineView",
   "Input",
   "Kbd",
   "KbdKey",
@@ -108,14 +128,31 @@ const ALLOWED = [
   "Label",
   "LineChart",
   "LineChartSeries",
+  "ListBadge",
+  "ListRow",
+  "ListRowAction",
+  "ListRowFolder",
+  "ListRowTone",
   "LogContext",
   "LogEntry",
   "MFAPromptMode",
   "ManagerCardError",
   "ManagerCardShell",
   "ManagerSearch",
+  "Meter",
   "MetricCard",
   "MiniStat",
+  "NumberField",
+  "PANEL",
+  "PanePrompt",
+  "PROMPT_BUTTON",
+  "PROMPT_DESTRUCTIVE_BUTTON",
+  "PROMPT_PRIMARY_BUTTON",
+  "PanelDensity",
+  "PanelList",
+  "PanelSearch",
+  "PanelShell",
+  "PanelViewMode",
   "PassphraseDialog",
   "PasswordInput",
   "PluginComponent",
@@ -127,14 +164,18 @@ const ALLOWED = [
   "RadialGauge",
   "RadialGaugeProps",
   "RecentActivityItem",
+  "Repeater",
   "RobustClipboardProvider",
   "SSHAuthDialog",
   "ScrollArea",
   "ScrollBar",
+  "SecretField",
   "SectionCard",
+  "Segmented",
   "Select",
   "Select2",
   "SelectContent",
+  "SelectField",
   "SelectGroup",
   "SelectItem",
   "SelectLabel",
@@ -158,8 +199,16 @@ const ALLOWED = [
   "Sparkline",
   "SparklineProps",
   "StatRow",
+  "SurfaceKind",
+  "SurfaceScope",
   "Switch",
+  "SwitchRow",
   "TOTPDialog",
+  "TabStrip",
+  "TabStripItem",
+  "TagInput",
+  "TextAreaField",
+  "TextField",
   "Textarea",
   "TextareaProps",
   "Tooltip",
@@ -167,7 +216,9 @@ const ALLOWED = [
   "TooltipProvider",
   "TooltipTrigger",
   "UptimeInfo",
+  "UsagePair",
   "VersionInfo",
+  "ViewToggle",
   "WebSocketConnectionTarget",
   "WidgetTitle",
   "buildOriginWsUrl",
@@ -198,13 +249,17 @@ const ALLOWED = [
   "runAdaptiveBackgroundTask",
   "runAdaptivePolling",
   "runVisibleInterval",
+  "usageBarColor",
+  "usageColor",
   "useAdaptivePolling",
   "useAppTheme",
-  "useConfirmation",
+  "useConfirm",
+  "useConnectionGate",
   "useConnectionLog",
   "useIsDefaultsEditor",
   "useIsMobile",
   "useOptionalConnectionLog",
+  "useSurfaceKind",
   "useTabs",
   "useTabsSafe",
 ];
@@ -309,7 +364,7 @@ function main() {
     const before = new Set(saved.split("\n"));
     const after = new Set(current.split("\n"));
     console.error(
-      "@termix/plugin-sdk/ui changed shape. If that is deliberate, run: node scripts/check-sdk-ui-exports.cjs --update-snapshot",
+      "@termix-ssh/plugin-sdk/ui changed shape. If that is deliberate, run: node scripts/check-sdk-ui-exports.cjs --update-snapshot",
     );
     for (const line of saved.split("\n")) {
       if (line && !after.has(line)) console.error(`  - ${line.slice(0, 200)}`);
@@ -328,13 +383,13 @@ function main() {
   if (added.length === 0 && removed.length === 0) return;
   if (added.length > 0) {
     console.error(
-      "@termix/plugin-sdk/ui exports names that are not on the allowlist in scripts/check-sdk-ui-exports.cjs:",
+      "@termix-ssh/plugin-sdk/ui exports names that are not on the allowlist in scripts/check-sdk-ui-exports.cjs:",
     );
     for (const name of added) console.error(`  + ${name}`);
   }
   if (removed.length > 0) {
     console.error(
-      "@termix/plugin-sdk/ui no longer exports these allowlisted names (a breaking change for plugins):",
+      "@termix-ssh/plugin-sdk/ui no longer exports these allowlisted names (a breaking change for plugins):",
     );
     for (const name of removed) console.error(`  - ${name}`);
   }
diff --git a/scripts/check-test-locations.cjs b/scripts/check-test-locations.cjs
index 717192437..e3091e7f2 100644
--- a/scripts/check-test-locations.cjs
+++ b/scripts/check-test-locations.cjs
@@ -2,7 +2,7 @@
 /**
  * Tests mirror the source tree in their own directories and never sit next
  * to the code they test. A *.test.ts(x) file may only live under
- * src/backend/tests/, src/ui/tests/, scripts/ or plugins/<id>/tests/.
+ * src/backend/tests/, src/ui/tests/ or scripts/.
  */
 
 const fs = require("node:fs");
@@ -20,12 +20,7 @@ const SKIP = new Set([
   ".turbo",
 ]);
 const TEST_FILE = /\.test\.tsx?$/;
-const ALLOWED = [
-  /^src\/backend\/tests\//,
-  /^src\/ui\/tests\//,
-  /^scripts\//,
-  /^plugins\/[^/]+\/tests\//,
-];
+const ALLOWED = [/^src\/backend\/tests\//, /^src\/ui\/tests\//, /^scripts\//];
 
 function walk(dir, root, out) {
   for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
@@ -50,7 +45,7 @@ function main() {
   const found = misplaced();
   if (found.length === 0) return;
   console.error(
-    "Tests belong in src/backend/tests/, src/ui/tests/, scripts/ or plugins/<id>/tests/, mirroring the source:",
+    "Tests belong in src/backend/tests/, src/ui/tests/ or scripts/, mirroring the source:",
   );
   for (const file of found) console.error(`  ${file}`);
   process.exit(1);
diff --git a/scripts/check-test-locations.test.ts b/scripts/check-test-locations.test.ts
index 6be663004..e50e65da3 100644
--- a/scripts/check-test-locations.test.ts
+++ b/scripts/check-test-locations.test.ts
@@ -32,9 +32,8 @@ describe("misplaced", () => {
       "src/backend/tests/utils/a.test.ts",
       "src/ui/tests/lib/b.test.tsx",
       "scripts/c.test.ts",
-      "plugins/docker/tests/backend/d.test.ts",
-      "plugins/docker/node_modules/pkg/e.test.ts",
-      "plugins/docker/dist/f.test.ts",
+      "node_modules/pkg/e.test.ts",
+      "dist/f.test.ts",
     ]);
     expect(misplaced(dir)).toEqual([]);
   });
@@ -43,13 +42,11 @@ describe("misplaced", () => {
     const dir = fixture([
       "src/backend/utils/a.test.ts",
       "src/ui/lib/b.test.tsx",
-      "plugins/docker/src/frontend/c.test.tsx",
       "packages/plugin-sdk/src/d.test.ts",
       "src/backend/utils/not-a-test.ts",
     ]);
     expect(misplaced(dir)).toEqual([
       "packages/plugin-sdk/src/d.test.ts",
-      "plugins/docker/src/frontend/c.test.tsx",
       "src/backend/utils/a.test.ts",
       "src/ui/lib/b.test.tsx",
     ]);
diff --git a/scripts/crowdin-pretranslate.cjs b/scripts/crowdin-pretranslate.cjs
deleted file mode 100644
index 104fc5ed8..000000000
--- a/scripts/crowdin-pretranslate.cjs
+++ /dev/null
@@ -1,130 +0,0 @@
-const API = "https://api.crowdin.com/api/v2";
-const ENGINE_ID = 649248; // Google Translate MT engine
-const PROJECT_NAME = "termix-ssh";
-const SOURCE_FILE = "en.json";
-
-function token() {
-  const t = process.env.CROWDIN_API_KEY;
-  if (!t) throw new Error("CROWDIN_API_KEY is not set");
-  return t;
-}
-
-async function request(method, pathname, body) {
-  const res = await fetch(`${API}${pathname}`, {
-    method,
-    headers: {
-      Authorization: `Bearer ${token()}`,
-      "Content-Type": "application/json",
-    },
-    body: body ? JSON.stringify(body) : undefined,
-  });
-  if (!res.ok) {
-    const text = await res.text();
-    throw new Error(`${method} ${pathname} -> ${res.status}: ${text}`);
-  }
-  return res.json();
-}
-
-async function paged(pathname) {
-  const items = [];
-  let offset = 0;
-  const limit = 500;
-  for (;;) {
-    const sep = pathname.includes("?") ? "&" : "?";
-    const page = await request(
-      "GET",
-      `${pathname}${sep}limit=${limit}&offset=${offset}`,
-    );
-    const batch = (page.data || []).map((row) => row.data);
-    items.push(...batch);
-    if (batch.length < limit) break;
-    offset += limit;
-  }
-  return items;
-}
-
-async function resolveProjectId() {
-  const projects = await paged("/projects");
-  const match = projects.find(
-    (p) => p.identifier === PROJECT_NAME || p.name === PROJECT_NAME,
-  );
-  if (!match) throw new Error(`project "${PROJECT_NAME}" not found`);
-  return { id: match.id, targetLanguageIds: match.targetLanguageIds || [] };
-}
-
-// Core is /en.json and each plugin is /plugins/<id>/locales/en.json.
-function isSourceFile(file) {
-  return (
-    file.path === `/${SOURCE_FILE}` ||
-    /^\/plugins\/[^/]+\/locales\/en\.json$/.test(file.path || "")
-  );
-}
-
-async function resolveFileIds(projectId) {
-  const files = await paged(`/projects/${projectId}/files`);
-  const ids = files.filter(isSourceFile).map((f) => f.id);
-  if (ids.length === 0)
-    throw new Error(`no "${SOURCE_FILE}" source files found in project`);
-  return ids;
-}
-
-async function pollPreTranslation(projectId, preTranslationId) {
-  for (;;) {
-    const { data } = await request(
-      "GET",
-      `/projects/${projectId}/pre-translations/${preTranslationId}`,
-    );
-    if (data.status === "finished") return data;
-    if (data.status === "failed" || data.status === "canceled") {
-      throw new Error(
-        `pre-translation ${data.status} (progress ${data.progress}%)`,
-      );
-    }
-    await new Promise((r) => setTimeout(r, 5000));
-  }
-}
-
-async function main() {
-  const { id: projectId, targetLanguageIds } = await resolveProjectId();
-  if (targetLanguageIds.length === 0) {
-    throw new Error("project has no target languages configured");
-  }
-
-  const fileIds = await resolveFileIds(projectId);
-
-  console.log(
-    `Pre-translating project ${projectId}, ${fileIds.length} files, ${targetLanguageIds.length} languages`,
-  );
-
-  // Translation memory first so strings that moved between files keep their
-  // existing translations, then machine translation for whatever is left.
-  const passes = [
-    { method: "tm", translateUntranslatedOnly: true },
-    { method: "mt", engineId: ENGINE_ID, scope: "untranslated" },
-  ];
-  for (const pass of passes) {
-    const { data } = await request(
-      "POST",
-      `/projects/${projectId}/pre-translations`,
-      { languageIds: targetLanguageIds, fileIds, ...pass },
-    );
-    const result = await pollPreTranslation(projectId, data.identifier);
-    console.log(
-      `${pass.method} pre-translation finished (${result.progress}%)`,
-    );
-  }
-}
-
-module.exports = {
-  resolveProjectId,
-  resolveFileIds,
-  isSourceFile,
-  pollPreTranslation,
-};
-
-if (require.main === module) {
-  main().catch((err) => {
-    console.error(`crowdin-pretranslate: ${err.message}`);
-    process.exit(1);
-  });
-}
diff --git a/scripts/crowdin-pretranslate.test.ts b/scripts/crowdin-pretranslate.test.ts
deleted file mode 100644
index a0bac51cc..000000000
--- a/scripts/crowdin-pretranslate.test.ts
+++ /dev/null
@@ -1,25 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { createRequire } from "node:module";
-
-const require = createRequire(import.meta.url);
-const { isSourceFile } = require("./crowdin-pretranslate.cjs") as {
-  isSourceFile: (file: { path?: string }) => boolean;
-};
-
-describe("isSourceFile", () => {
-  it("matches the core and plugin source files", () => {
-    expect(isSourceFile({ path: "/en.json" })).toBe(true);
-    expect(isSourceFile({ path: "/plugins/acme-ssl/locales/en.json" })).toBe(
-      true,
-    );
-  });
-
-  it("skips anything else", () => {
-    expect(isSourceFile({ path: "/src/ui/locales/en.json" })).toBe(false);
-    expect(isSourceFile({ path: "/plugins/a/b/locales/en.json" })).toBe(false);
-    expect(isSourceFile({ path: "/plugins/acme-ssl/locales/de.json" })).toBe(
-      false,
-    );
-    expect(isSourceFile({})).toBe(false);
-  });
-});
diff --git a/scripts/dev-docker.test.ts b/scripts/dev-docker.test.ts
new file mode 100644
index 000000000..325bbce30
--- /dev/null
+++ b/scripts/dev-docker.test.ts
@@ -0,0 +1,74 @@
+import { describe, expect, it } from "vitest";
+import {
+  SERVICES,
+  appRunArgs,
+  serviceEnv,
+  serviceRunArgs,
+} from "./lib/dev-docker.mjs";
+import { parseDevArgs } from "./lib/dev-runner.mjs";
+
+describe("serviceRunArgs", () => {
+  it("runs a service on the dev network with its port, env and volume", () => {
+    const args = serviceRunArgs(SERVICES.postgres);
+    expect(args.slice(0, 6)).toEqual([
+      "run",
+      "-d",
+      "--name",
+      "termix-dev-postgres",
+      "--network",
+      "termix-dev",
+    ]);
+    expect(args).toContain("55432:5432");
+    expect(args).toContain("POSTGRES_PASSWORD=termix");
+    expect(args).toContain("termix-dev-postgres:/var/lib/postgresql/data");
+    expect(args.at(-1)).toBe("postgres:16");
+  });
+
+  it("adds no volume for guacd", () => {
+    expect(serviceRunArgs(SERVICES.guacd)).not.toContain("-v");
+  });
+});
+
+describe("serviceEnv", () => {
+  it("is empty for plain sqlite", () => {
+    expect(serviceEnv(parseDevArgs([]), false)).toEqual({});
+  });
+
+  it("points a local backend at the published ports", () => {
+    expect(
+      serviceEnv(parseDevArgs(["--db", "postgres", "--guacd"]), false),
+    ).toEqual({
+      DATABASE_DIALECT: "postgres",
+      DATABASE_URL: "postgres://termix:termix@127.0.0.1:55432/termix",
+      GUACD_HOST: "127.0.0.1",
+      GUACD_PORT: "4822",
+    });
+  });
+
+  it("points a container at the other containers by name", () => {
+    expect(
+      serviceEnv(parseDevArgs(["--db", "mysql", "--guacd"]), true),
+    ).toEqual({
+      DATABASE_DIALECT: "mysql",
+      DATABASE_URL: "mysql://root:termix@termix-dev-mysql:3306/termix",
+      GUACD_HOST: "termix-dev-guacd",
+      GUACD_PORT: "4822",
+    });
+  });
+});
+
+describe("appRunArgs", () => {
+  it("mounts the data and the staged plugins", () => {
+    const args = appRunArgs({
+      port: 9000,
+      env: { GUACD_HOST: "termix-dev-guacd" },
+      dataMount: "termix-dev-data",
+      pluginsDir: "/repo/dist/plugins",
+    });
+    expect(args).toContain("9000:8080");
+    expect(args).toContain("GUACD_HOST=termix-dev-guacd");
+    expect(args).toContain("termix-dev-data:/app/data");
+    expect(args).toContain("/repo/dist/plugins:/app/dist/plugins");
+    expect(args.at(-1)).toBe("termix:dev");
+  });
+});
diff --git a/scripts/dev-runner.test.ts b/scripts/dev-runner.test.ts
new file mode 100644
index 000000000..5f17c057f
--- /dev/null
+++ b/scripts/dev-runner.test.ts
@@ -0,0 +1,210 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import {
+  createDebouncer,
+  createSerialQueue,
+  dataDirFor,
+  findBuildablePlugins,
+  isPluginEdit,
+  isPluginSourceChange,
+  needsDocker,
+  parseDevArgs,
+  parseTscStatus,
+} from "./lib/dev-runner.mjs";
+
+const cleanups: Array<() => void> = [];
+
+afterEach(() => {
+  vi.useRealTimers();
+  while (cleanups.length) cleanups.pop()!();
+});
+
+describe("parseTscStatus", () => {
+  it("reads the error count from a watch summary", () => {
+    expect(
+      parseTscStatus(
+        "12:00:00 PM - Found 0 errors. Watching for file changes.",
+      ),
+    ).toBe(0);
+    expect(parseTscStatus("Found 1 error. Watching for file changes.")).toBe(1);
+    expect(parseTscStatus("src/a.ts(1,1): error TS2304: x")).toBeNull();
+  });
+});
+
+describe("isPluginSourceChange", () => {
+  it("accepts sources and skips build output", () => {
+    expect(
+      isPluginSourceChange(["src", "backend", "index.ts"].join("\\")),
+    ).toBe(true);
+    expect(isPluginSourceChange("locales/en.json")).toBe(true);
+    expect(isPluginSourceChange("manifest.json")).toBe(true);
+    expect(isPluginSourceChange("dist/backend.js")).toBe(false);
+    expect(isPluginSourceChange("node_modules/x/index.js")).toBe(false);
+    expect(isPluginSourceChange("notes.txt")).toBe(false);
+    expect(isPluginSourceChange(null)).toBe(false);
+  });
+});
+
+describe("isPluginEdit", () => {
+  function repo() {
+    const dir = fs.mkdtempSync(path.join(os.tmpdir(), "termix-edit-"));
+    cleanups.push(() => fs.rmSync(dir, { recursive: true, force: true }));
+    fs.mkdirSync(path.join(dir, "src", "frontend"), { recursive: true });
+    fs.writeFileSync(path.join(dir, "src", "frontend", "index.ts"), "");
+    return dir;
+  }
+
+  it("ignores a folder being read", () => {
+    expect(isPluginEdit(repo(), "src/frontend", () => true)).toBe(false);
+  });
+
+  it("rebuilds an edited file only while the build is out of date", () => {
+    const dir = repo();
+    expect(isPluginEdit(dir, "src/frontend/index.ts", () => true)).toBe(true);
+    expect(isPluginEdit(dir, "src/frontend/index.ts", () => false)).toBe(false);
+  });
+
+  it("rebuilds after a source file is deleted", () => {
+    expect(isPluginEdit(repo(), "src/gone.ts", () => false)).toBe(true);
+  });
+
+  it("skips paths that do not feed the build", () => {
+    expect(isPluginEdit(repo(), "dist/index.js", () => true)).toBe(false);
+  });
+});
+
+describe("findBuildablePlugins", () => {
+  it("lists repos with a manifest and installed dependencies", () => {
+    const dir = fs.mkdtempSync(path.join(os.tmpdir(), "termix-dev-"));
+    cleanups.push(() => fs.rmSync(dir, { recursive: true, force: true }));
+    const make = (name: string, id: string, deps = true) => {
+      const repo = path.join(dir, name);
+      fs.mkdirSync(repo);
+      fs.writeFileSync(
+        path.join(repo, "manifest.json"),
+        JSON.stringify({ id }),
+      );
+      if (deps) fs.mkdirSync(path.join(repo, "node_modules"));
+    };
+    make("Plugin-B", "b");
+    make("Plugin-A", "a");
+    make("Plugin-C", "c", false);
+    fs.mkdirSync(path.join(dir, "notes"));
+
+    expect(findBuildablePlugins(dir).map((p) => p.id)).toEqual(["a", "b"]);
+    expect(findBuildablePlugins(null)).toEqual([]);
+  });
+});
+
+describe("createSerialQueue", () => {
+  it("runs one task at a time and survives a failure", async () => {
+    const queue = createSerialQueue();
+    const order: string[] = [];
+    const first = queue(async () => {
+      await new Promise((r) => setTimeout(r, 10));
+      order.push("first");
+      throw new Error("boom");
+    });
+    const second = queue(async () => order.push("second"));
+    await expect(first).rejects.toThrow("boom");
+    await second;
+    expect(order).toEqual(["first", "second"]);
+  });
+});
+
+describe("createDebouncer", () => {
+  it("fires once per quiet key and again for a change mid-run", async () => {
+    vi.useFakeTimers();
+    let release!: () => void;
+    const calls: string[] = [];
+    const trigger = createDebouncer(100, async (key: string) => {
+      calls.push(key);
+      if (calls.length === 1) await new Promise<void>((r) => (release = r));
+    });
+
+    trigger("a");
+    trigger("a");
+    await vi.advanceTimersByTimeAsync(100);
+    expect(calls).toEqual(["a"]);
+
+    trigger("a");
+    await vi.advanceTimersByTimeAsync(100);
+    expect(calls).toEqual(["a"]);
+    release();
+    await vi.advanceTimersByTimeAsync(100);
+    expect(calls).toEqual(["a", "a"]);
+    trigger.cancel();
+  });
+});
+
+describe("parseDevArgs", () => {
+  it("defaults to the web target with sqlite and local plugins", () => {
+    expect(parseDevArgs([])).toMatchObject({
+      target: "web",
+      db: "sqlite",
+      local: true,
+      guacd: false,
+      fresh: false,
+      port: 8081,
+    });
+  });
+
+  it("reads a target and options in any order", () => {
+    expect(
+      parseDevArgs(["--db", "Postgres", "electron", "--guacd", "--fresh"]),
+    ).toMatchObject({
+      target: "electron",
+      db: "postgres",
+      guacd: true,
+      fresh: true,
+    });
+    expect(
+      parseDevArgs(["docker", "--port", "9000", "--no-cache", "--no-local"]),
+    ).toMatchObject({
+      target: "docker",
+      port: 9000,
+      noCache: true,
+      local: false,
+    });
+    expect(parseDevArgs(["--plugins", "../x"]).pluginsDir).toBe("../x");
+  });
+
+  it("refuses unknown or incomplete options", () => {
+    expect(() => parseDevArgs(["--bogus"])).toThrow(/Unknown option/);
+    expect(() => parseDevArgs(["--db", "oracle"])).toThrow(/--db/);
+    expect(() => parseDevArgs(["--db"])).toThrow(/needs a value/);
+    expect(() => parseDevArgs(["--port", "abc"])).toThrow(/port/);
+    expect(() => parseDevArgs(["--fresh", "--data", "x"])).toThrow(/together/);
+  });
+});
+
+describe("dataDirFor", () => {
+  it("keeps each engine and fresh runs in their own folder", () => {
+    expect(dataDirFor(parseDevArgs([]))).toBeNull();
+    expect(dataDirFor(parseDevArgs(["--db", "mysql"]))).toBe("db/data-mysql");
+    expect(dataDirFor(parseDevArgs(["--fresh"]))).toBe("db/data-fresh");
+    expect(dataDirFor(parseDevArgs(["--fresh", "--db", "postgres"]))).toBe(
+      "db/data-fresh-postgres",
+    );
+    expect(dataDirFor(parseDevArgs(["--data", "x"]))).toBe("x");
+    expect(dataDirFor(parseDevArgs(["electron"]))).toBe("db/data-desktop");
+    expect(dataDirFor(parseDevArgs(["electron", "--db", "mysql"]))).toBe(
+      "db/data-desktop-mysql",
+    );
+    expect(dataDirFor(parseDevArgs(["electron", "--fresh"]))).toBe(
+      "db/data-fresh-desktop",
+    );
+  });
+});
+
+describe("needsDocker", () => {
+  it("is only true when something runs in a container", () => {
+    expect(needsDocker(parseDevArgs([]))).toBe(false);
+    expect(needsDocker(parseDevArgs(["electron"]))).toBe(false);
+    expect(needsDocker(parseDevArgs(["docker"]))).toBe(true);
+    expect(needsDocker(parseDevArgs(["--db", "postgres"]))).toBe(true);
+    expect(needsDocker(parseDevArgs(["--guacd"]))).toBe(true);
+  });
+});
diff --git a/scripts/dev.mjs b/scripts/dev.mjs
new file mode 100644
index 000000000..0b97b69d6
--- /dev/null
+++ b/scripts/dev.mjs
@@ -0,0 +1,721 @@
+/**
+ * npm run dev, one command for manual testing. Run with --help for the targets
+ * and options.
+ *
+ * Every target builds the SDK and stages plugins (local builds from
+ * ../Termix-Plugins when it exists), then:
+ *
+ * - web: compiles the backend in watch mode, starts it, then starts Vite. A
+ *   backend or SDK change restarts the backend. A plugin change rebuilds that
+ *   plugin and reloads it inside the running backend, and the browser swaps
+ *   it in.
+ * - electron: web, plus the desktop app, restarted when electron/ changes.
+ * - docker: builds the production image and runs it with dist/plugins
+ *   mounted. A plugin change rebuilds it and restarts the container. Core
+ *   changes wait for "r", since an image build is slow.
+ *
+ * --db postgres|mysql and --guacd run those in Docker next to it.
+ */
+
+import fs from "node:fs";
+import path from "node:path";
+import process from "node:process";
+import { spawn, spawnSync, fork } from "node:child_process";
+import { createRequire } from "node:module";
+import { fileURLToPath } from "node:url";
+import {
+  HELP,
+  createDebouncer,
+  createSerialQueue,
+  dataDirFor,
+  findBuildablePlugins,
+  isPluginEdit,
+  needsDocker,
+  parseDevArgs,
+  parseTscStatus,
+} from "./lib/dev-runner.mjs";
+import {
+  APP_CONTAINER,
+  APP_IMAGE,
+  NETWORK,
+  SERVICES,
+  appRunArgs,
+  serviceEnv,
+  serviceRunArgs,
+} from "./lib/dev-docker.mjs";
+
+const require = createRequire(import.meta.url);
+const {
+  copyLocalBuild,
+  localSdkBuildCommand,
+} = require("./lib/bundled-plugins.cjs");
+
+const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+const BACKEND_ENTRY = path.join(
+  root,
+  "dist",
+  "backend",
+  "backend",
+  "starter.js",
+);
+const STAGED_PLUGINS = path.join(root, "dist", "plugins");
+const SDK_SRC = path.join(root, "packages", "plugin-sdk", "src");
+const ELECTRON_DIR = path.join(root, "electron");
+const RELOAD_TIMEOUT_MS = 60_000;
+const SHUTDOWN_TIMEOUT_MS = 10_000;
+const DOCKER_READY_TIMEOUT_MS = 180_000;
+
+const log = (message) => console.log(`\x1b[36m[dev]\x1b[0m ${message}`);
+const warn = (message) => console.log(`\x1b[33m[dev]\x1b[0m ${message}`);
+
+let options;
+const queue = createSerialQueue();
+const startedServices = [];
+const watchers = [];
+let shuttingDown = false;
+let plugins = [];
+let vite = null;
+let backend = null;
+let electron = null;
+let tsc = null;
+let dockerLogs = null;
+let backendEnv = {};
+
+function run(command, args, cwd = root) {
+  return new Promise((resolve, reject) => {
+    const child = spawn(command, args, {
+      cwd,
+      stdio: ["ignore", "inherit", "inherit"],
+      // npm is a .cmd on Windows and needs the shell, but the shell splits
+      // arguments on spaces, so a path like "Personal Projects" gets cut.
+      shell: process.platform === "win32" && !path.isAbsolute(command),
+    });
+    child.on("error", reject);
+    child.on("exit", (code) =>
+      code === 0
+        ? resolve()
+        : reject(new Error(`${command} ${args.join(" ")} exited with ${code}`)),
+    );
+  });
+}
+
+function docker(args, { quiet = false } = {}) {
+  const result = spawnSync("docker", args, {
+    cwd: root,
+    encoding: "utf8",
+    stdio: quiet ? "pipe" : ["ignore", "inherit", "inherit"],
+  });
+  return { ok: result.status === 0, out: (result.stdout ?? "").trim() };
+}
+
+function watch(target, recursive, onChange) {
+  watchers.push(fs.watch(target, { recursive }, onChange));
+}
+
+function appUrl() {
+  if (options.target === "docker") return `http://localhost:${options.port}`;
+  return vite?.resolvedUrls?.local?.[0] ?? "http://localhost:5173";
+}
+
+function openBrowser(url) {
+  const [command, args] =
+    process.platform === "win32"
+      ? ["cmd", ["/c", "start", "", url]]
+      : process.platform === "darwin"
+        ? ["open", [url]]
+        : ["xdg-open", [url]];
+  spawn(command, args, { stdio: "ignore", detached: true }).unref();
+}
+
+// Docker side containers
+
+function assertDocker() {
+  if (!docker(["info"], { quiet: true }).ok) {
+    throw new Error(
+      "Docker is not running. Start it, or drop --db, --guacd and the docker target.",
+    );
+  }
+  if (!docker(["network", "inspect", NETWORK], { quiet: true }).ok) {
+    docker(["network", "create", NETWORK], { quiet: true });
+  }
+}
+
+function containerState(name) {
+  const result = docker(["inspect", "-f", "{{.State.Running}}", name], {
+    quiet: true,
+  });
+  if (!result.ok) return "missing";
+  return result.out === "true" ? "running" : "stopped";
+}
+
+async function waitForService(service) {
+  if (!service.ready) return;
+  const deadline = Date.now() + 120_000;
+  while (Date.now() < deadline) {
+    if (
+      docker(["exec", service.container, ...service.ready], { quiet: true }).ok
+    )
+      return;
+    await new Promise((resolve) => setTimeout(resolve, 1000));
+  }
+  throw new Error(`${service.container} did not become ready`);
+}
+
+async function startService(name) {
+  const service = SERVICES[name];
+  if (options.fresh && service.volume) {
+    docker(["rm", "-f", service.container], { quiet: true });
+    docker(["volume", "rm", service.volume[0]], { quiet: true });
+  }
+  const state = containerState(service.container);
+  if (state === "running") {
+    log(`${service.container} is already running`);
+  } else {
+    log(`starting ${service.container}`);
+    const result =
+      state === "stopped"
+        ? docker(["start", service.container], { quiet: true })
+        : docker(serviceRunArgs(service), { quiet: true });
+    if (!result.ok) throw new Error(`could not start ${service.container}`);
+    startedServices.push(service.container);
+  }
+  await waitForService(service);
+}
+
+async function startServices() {
+  if (options.db !== "sqlite") await startService(options.db);
+  if (options.guacd) await startService("guacd");
+}
+
+// Local backend, Vite and Electron
+
+function notifyBrowser(data) {
+  vite?.ws.send({ type: "custom", event: "termix:plugins-reloaded", data });
+}
+
+function startBackend() {
+  const child = fork(BACKEND_ENTRY, [], {
+    cwd: root,
+    env: { ...process.env, ...backendEnv, TERMIX_DEV_RELOAD: "true" },
+    stdio: ["ignore", "inherit", "inherit", "ipc"],
+  });
+  const pending = new Map();
+  const state = { child, pending, ready: false, stopping: false };
+  state.readyPromise = new Promise((resolve, reject) => {
+    child.on("message", (msg) => {
+      if (msg?.type === "backend-ready") {
+        state.ready = true;
+        resolve();
+        return;
+      }
+      if (msg?.type === "backend-request") {
+        relayToElectron(child, msg);
+        return;
+      }
+      if (
+        msg?.type === "plugin-reloaded" ||
+        msg?.type === "plugin-reload-failed"
+      ) {
+        pending.get(msg.id)?.(msg);
+        pending.delete(msg.id);
+      }
+    });
+    child.on("exit", (code) => {
+      for (const done of pending.values()) {
+        done({ type: "plugin-reload-failed", error: "backend exited" });
+      }
+      pending.clear();
+      if (backend === state) backend = null;
+      if (!state.ready) reject(new Error(`backend exited with ${code}`));
+      else if (!shuttingDown && !state.stopping) {
+        warn(
+          `backend exited with ${code}, press r or save a file to restart it`,
+        );
+      }
+    });
+  });
+  backend = state;
+  return state;
+}
+
+function stopChild(child, message) {
+  return new Promise((resolve) => {
+    if (!child || child.exitCode !== null || child.signalCode !== null) {
+      return resolve();
+    }
+    const timer = setTimeout(() => child.kill("SIGKILL"), SHUTDOWN_TIMEOUT_MS);
+    child.once("exit", () => {
+      clearTimeout(timer);
+      resolve();
+    });
+    try {
+      if (message && child.connected) child.send(message);
+      else child.kill();
+    } catch {
+      child.kill();
+    }
+  });
+}
+
+function stopBackend() {
+  const state = backend;
+  if (!state) return Promise.resolve();
+  backend = null;
+  state.stopping = true;
+  return stopChild(state.child, state.ready ? { type: "shutdown" } : null);
+}
+
+async function restartBackend(reason) {
+  log(reason);
+  await stopBackend();
+  if (shuttingDown) return;
+  fs.copyFileSync(
+    path.join(root, "src", "backend", "package.json"),
+    path.join(root, "dist", "backend", "package.json"),
+  );
+  const state = startBackend();
+  try {
+    await state.readyPromise;
+  } catch (error) {
+    warn(`${error.message}, press r or save a file to restart it`);
+    return;
+  }
+  log("backend ready");
+  if (!vite) {
+    await startVite();
+    if (options.target === "electron") startElectron();
+    printKeys();
+  } else {
+    notifyBrowser({});
+  }
+}
+
+async function startVite() {
+  const { createServer } = await import("vite");
+  vite = await createServer({
+    root,
+    configFile: path.join(root, "vite.config.ts"),
+  });
+  await vite.listen();
+  vite.printUrls();
+}
+
+// The packaged app forks the backend from Electron's main process, and they
+// talk over that IPC channel (opening sign-in windows, the linked server's
+// proxy settings). Here both are children of the runner, so it passes those
+// messages along. The last proxy settings are kept for an app (re)started
+// after the backend sent them.
+let lastProxyConfig = null;
+const REPLAY_PREFIX = "dev-replay-";
+
+function relayToElectron(backendChild, msg) {
+  if (msg.channel === "sync-proxy-config") lastProxyConfig = msg;
+  if (electron?.connected) {
+    electron.send(msg);
+    return;
+  }
+  const ok = msg.channel === "sync-proxy-config";
+  try {
+    backendChild.send({
+      type: "backend-response",
+      id: msg.id,
+      ok,
+      ...(ok
+        ? { result: { success: true } }
+        : { error: "The desktop app is not running" }),
+    });
+  } catch {
+    // backend gone
+  }
+}
+
+function relayToBackend(msg) {
+  if (msg?.type !== "backend-response") return;
+  if (String(msg.id).startsWith(REPLAY_PREFIX)) return;
+  if (backend?.child.connected) backend.child.send(msg);
+}
+
+function startElectron() {
+  const env = {
+    ...process.env,
+    NODE_ENV: "development",
+    TERMIX_DEV_RUNNER: "true",
+  };
+  // Set by some editors' terminals; Electron would start as plain Node.
+  delete env.ELECTRON_RUN_AS_NODE;
+  const child = spawn(require("electron"), ["."], {
+    cwd: root,
+    env,
+    stdio: ["ignore", "inherit", "inherit", "ipc"],
+  });
+  electron = child;
+  child.on("message", relayToBackend);
+  if (lastProxyConfig) {
+    child.send({ ...lastProxyConfig, id: `${REPLAY_PREFIX}${Date.now()}` });
+  }
+  log("desktop app started");
+  child.on("exit", () => {
+    if (electron !== child) return;
+    electron = null;
+    if (!shuttingDown) {
+      log("desktop app closed");
+      void shutdown();
+    }
+  });
+}
+
+async function restartElectron() {
+  const child = electron;
+  electron = null;
+  log("electron changed, restarting the desktop app");
+  await stopChild(child);
+  if (!shuttingDown) startElectron();
+}
+
+function reloadInBackend(id) {
+  const state = backend;
+  if (!state?.ready || !state.child.connected) return Promise.resolve(null);
+  return new Promise((resolve) => {
+    const timer = setTimeout(() => {
+      state.pending.delete(id);
+      resolve({ type: "plugin-reload-failed", error: "timed out" });
+    }, RELOAD_TIMEOUT_MS);
+    state.pending.set(id, (msg) => {
+      clearTimeout(timer);
+      resolve(msg);
+    });
+    state.child.send({ type: "plugin-reload", id });
+  });
+}
+
+function watchBackend() {
+  tsc = spawn(
+    process.execPath,
+    [
+      require.resolve("typescript/bin/tsc"),
+      "-p",
+      "tsconfig.node.json",
+      "--watch",
+      "--preserveWatchOutput",
+      "--pretty",
+      "false",
+    ],
+    { cwd: root, stdio: ["ignore", "pipe", "inherit"] },
+  );
+  let first = true;
+  let buffer = "";
+  tsc.stdout.on("data", (chunk) => {
+    buffer += chunk.toString();
+    const lines = buffer.split(/\r?\n/);
+    buffer = lines.pop();
+    for (const line of lines) {
+      const errors = parseTscStatus(line);
+      if (errors === null) {
+        if (line.includes("error TS")) console.log(line);
+        continue;
+      }
+      if (errors > 0) {
+        warn(`backend has ${errors} type error(s), fix them to restart it`);
+        continue;
+      }
+      const reason = first
+        ? "starting the backend"
+        : "backend changed, restarting it";
+      first = false;
+      void queue(() => restartBackend(reason));
+    }
+  });
+}
+
+function watchSdk() {
+  const changed = createDebouncer(300, () =>
+    queue(async () => {
+      try {
+        await run("npm", ["run", "build:sdk"]);
+      } catch (error) {
+        warn(`SDK failed to build: ${error.message}`);
+        return;
+      }
+      await restartBackend("SDK changed, restarting the backend");
+    }),
+  );
+  watch(SDK_SRC, true, () => changed("sdk"));
+}
+
+function watchElectron() {
+  const changed = createDebouncer(300, () => restartElectron());
+  watch(ELECTRON_DIR, false, (_event, filename) => {
+    if (/\.(c?js)$/.test(String(filename)) && electron) changed("electron");
+  });
+}
+
+// Docker target
+
+function dockerDataMount() {
+  if (options.data) return path.resolve(root, options.data);
+  const volume = options.fresh ? "termix-dev-data-fresh" : "termix-dev-data";
+  if (options.fresh) docker(["volume", "rm", "-f", volume], { quiet: true });
+  return volume;
+}
+
+async function buildImage() {
+  log(`building ${APP_IMAGE}, this takes a while`);
+  await run("docker", [
+    "build",
+    "-f",
+    "docker/Dockerfile",
+    "-t",
+    APP_IMAGE,
+    ...(options.noCache ? ["--no-cache"] : []),
+    ".",
+  ]);
+}
+
+function followDockerLogs(since) {
+  dockerLogs?.kill();
+  dockerLogs = spawn(
+    "docker",
+    ["logs", "-f", ...(since ? ["--since", since] : []), APP_CONTAINER],
+    { cwd: root, stdio: ["ignore", "inherit", "inherit"] },
+  );
+}
+
+async function waitForApp() {
+  const deadline = Date.now() + DOCKER_READY_TIMEOUT_MS;
+  while (Date.now() < deadline && !shuttingDown) {
+    try {
+      const response = await fetch(appUrl());
+      if (response.ok) return true;
+    } catch {
+      // not up yet
+    }
+    await new Promise((resolve) => setTimeout(resolve, 1000));
+  }
+  return false;
+}
+
+let dockerMount = null;
+
+async function runAppContainer() {
+  docker(["rm", "-f", APP_CONTAINER], { quiet: true });
+  dockerMount ??= dockerDataMount();
+  const result = docker(
+    appRunArgs({
+      port: options.port,
+      env: serviceEnv(options, true),
+      dataMount: dockerMount,
+      pluginsDir: STAGED_PLUGINS,
+    }),
+    { quiet: true },
+  );
+  if (!result.ok) throw new Error(`could not start ${APP_CONTAINER}`);
+  followDockerLogs();
+  if (await waitForApp()) log(`ready on ${appUrl()}`);
+  else warn(`${APP_CONTAINER} is not answering on ${appUrl()} yet`);
+}
+
+async function restartAppContainer(reason) {
+  log(reason);
+  const since = new Date().toISOString();
+  docker(["restart", APP_CONTAINER], { quiet: true });
+  followDockerLogs(since);
+  if (await waitForApp()) log(`ready on ${appUrl()}`);
+}
+
+async function rebuildAndRunImage() {
+  try {
+    await buildImage();
+  } catch (error) {
+    warn(error.message);
+    return;
+  }
+  await runAppContainer();
+}
+
+function watchCoreForDocker() {
+  const changed = createDebouncer(500, () =>
+    warn("core changed, press r to rebuild the image"),
+  );
+  for (const dir of [path.join(root, "src"), SDK_SRC]) {
+    watch(dir, true, () => changed("core"));
+  }
+}
+
+// Plugins
+
+async function rebuildPlugin({ id, repo }) {
+  log(`building ${id}`);
+  try {
+    await run(...localSdkBuildCommand(), repo);
+  } catch (error) {
+    warn(`${id} failed to build: ${error.message}`);
+    return;
+  }
+  const destination = path.join(STAGED_PLUGINS, id);
+  fs.rmSync(destination, { recursive: true, force: true });
+  copyLocalBuild(repo, destination);
+
+  if (options.target === "docker") {
+    await restartAppContainer(`${id} rebuilt, restarting ${APP_CONTAINER}`);
+    return;
+  }
+  const result = await reloadInBackend(id);
+  if (!result) {
+    log(`${id} staged, it loads when the backend starts`);
+    return;
+  }
+  if (result.type === "plugin-reload-failed") {
+    warn(`${id} did not reload: ${result.error}`);
+    return;
+  }
+  log(`${id} reloaded (${result.state})`);
+  notifyBrowser({ id });
+}
+
+function watchPlugins(dir) {
+  plugins = findBuildablePlugins(dir);
+  const byId = new Map(plugins.map((plugin) => [plugin.id, plugin]));
+  const changed = createDebouncer(300, (id) =>
+    queue(() => rebuildPlugin(byId.get(id))),
+  );
+  for (const plugin of plugins) {
+    watch(plugin.repo, true, (_event, filename) => {
+      if (isPluginEdit(plugin.repo, filename)) changed(plugin.id);
+    });
+  }
+  log(`watching ${plugins.length} plugin(s) in ${dir}`);
+}
+
+// Keys and shutdown
+
+function printKeys() {
+  if (!process.stdin.isTTY) return;
+  log("keys: r restart, p rebuild plugins, o open browser, q quit");
+}
+
+function listenForKeys() {
+  if (!process.stdin.isTTY) return;
+  process.stdin.setRawMode(true);
+  process.stdin.setEncoding("utf8");
+  process.stdin.resume();
+  process.stdin.on("data", (key) => {
+    if (key === "\u0003" || key === "q") {
+      void shutdown();
+    } else if (key === "r") {
+      void queue(() =>
+        options.target === "docker"
+          ? rebuildAndRunImage()
+          : restartBackend("restarting the backend"),
+      );
+    } else if (key === "p") {
+      if (plugins.length === 0) warn("no local plugins to rebuild");
+      for (const plugin of plugins) void queue(() => rebuildPlugin(plugin));
+    } else if (key === "o") {
+      openBrowser(appUrl());
+    }
+  });
+}
+
+async function shutdown(code = 0) {
+  if (shuttingDown) return;
+  shuttingDown = true;
+  log("shutting down");
+  if (process.stdin.isTTY) process.stdin.setRawMode(false);
+  for (const watcher of watchers) watcher.close();
+  tsc?.kill();
+  dockerLogs?.kill();
+  await Promise.allSettled([stopBackend(), stopChild(electron), vite?.close()]);
+  if (options.target === "docker") {
+    docker(["rm", "-f", APP_CONTAINER], { quiet: true });
+  }
+  for (const container of startedServices) {
+    docker(["stop", container], { quiet: true });
+  }
+  process.exit(code);
+}
+
+async function main() {
+  try {
+    options = parseDevArgs(process.argv.slice(2));
+  } catch (error) {
+    console.error(error.message);
+    process.exit(1);
+  }
+  if (options.help) {
+    console.log(HELP);
+    return;
+  }
+
+  process.on("SIGINT", () => shutdown());
+  process.on("SIGTERM", () => shutdown());
+
+  const pluginsDir = options.local
+    ? path.resolve(
+        root,
+        options.pluginsDir ??
+          process.env.TERMIX_LOCAL_PLUGINS ??
+          "../Termix-Plugins",
+      )
+    : null;
+  const localPlugins =
+    pluginsDir && fs.existsSync(pluginsDir) ? pluginsDir : null;
+  if (pluginsDir && !localPlugins)
+    warn(`${pluginsDir} not found, using pinned plugins`);
+
+  if (needsDocker(options)) {
+    assertDocker();
+    await startServices();
+  }
+
+  log("building the SDK");
+  await run("npm", ["run", "build:sdk"]);
+  log(
+    localPlugins
+      ? `staging plugins with local builds from ${localPlugins}`
+      : "staging pinned plugins",
+  );
+  await run(process.execPath, [
+    "scripts/build-plugins.cjs",
+    ...(localPlugins ? ["--local", localPlugins] : []),
+  ]);
+
+  listenForKeys();
+  if (localPlugins) watchPlugins(localPlugins);
+
+  if (options.target === "docker") {
+    await buildImage();
+    await runAppContainer();
+    watchCoreForDocker();
+    printKeys();
+    return;
+  }
+
+  const dataDir = dataDirFor(options);
+  if (dataDir) {
+    const full = path.resolve(root, dataDir);
+    if (options.fresh) fs.rmSync(full, { recursive: true, force: true });
+    fs.mkdirSync(full, { recursive: true });
+    log(`data folder ${full}`);
+  }
+  backendEnv = {
+    ...serviceEnv(options, false),
+    // The desktop app runs against its own embedded backend, which is what
+    // turns on the local profile, sync and the desktop-only routes.
+    ...(options.target === "electron" ? { ELECTRON_EMBEDDED: "true" } : {}),
+    // A folder the runner picked starts empty on purpose, so the guard
+    // against a mistyped DATA_DIR must not stop it.
+    ...(dataDir
+      ? { DATA_DIR: path.resolve(root, dataDir), ALLOW_EMPTY_DATA_DIR: "true" }
+      : {}),
+  };
+
+  log("compiling the backend");
+  watchBackend();
+  watchSdk();
+  if (options.target === "electron") watchElectron();
+}
+
+main().catch(async (error) => {
+  console.error(error?.message ?? error);
+  await shutdown(1);
+});
diff --git a/scripts/generate-appstore-notes.cjs b/scripts/generate-appstore-notes.cjs
index 778297c95..48c65f038 100644
--- a/scripts/generate-appstore-notes.cjs
+++ b/scripts/generate-appstore-notes.cjs
@@ -1,5 +1,6 @@
 const fs = require("fs");
 const path = require("path");
+const { changelogSection } = require("./lib/changelog-section.cjs");
 
 // Apple caps the "What's New in This Version" field at 4000 characters.
 const MAX_LENGTH = 4000;
@@ -26,18 +27,6 @@ function fail(message) {
   process.exit(1);
 }
 
-function extractSection(notes, name, { required = true } = {}) {
-  const pattern = new RegExp(
-    `<!--\\s*${name}\\s*-->([\\s\\S]*?)<!--\\s*/${name}\\s*-->`,
-  );
-  const match = notes.match(pattern);
-  if (!match) {
-    if (required) fail(`missing <!-- ${name} --> section in release notes`);
-    return "";
-  }
-  return match[1].trim();
-}
-
 // Strip markdown that reads badly as plain text in App Store Connect.
 function toPlainText(markdown) {
   return markdown
@@ -50,7 +39,7 @@ function toPlainText(markdown) {
       text = text.replace(/\[([^\]]+)\]\([^)]*\)/g, "$1");
       text = text.replace(/`([^`]+)`/g, "$1");
       text = text.replace(/\*\*([^*]+)\*\*/g, "$1");
-      text = text.replace(/^#+\s*/, "");
+      if (/^#+\s/.test(text)) text = `${text.replace(/^#+\s*/, "")}:`;
       return text;
     })
     .join("\n")
@@ -78,28 +67,21 @@ function truncate(text, limit) {
   return lines.join("\n").trim();
 }
 
-function buildNotes(notesFile) {
-  const summary = extractSection(notesFile, "SUMMARY");
-  const updateLog = extractSection(notesFile, "UPDATE_LOG", {
-    required: false,
-  });
-  const bugFixes = extractSection(notesFile, "BUG_FIXES", { required: false });
-
-  const parts = [toPlainText(summary)];
-  if (updateLog) parts.push("", "Update Log:", toPlainText(updateLog));
-  if (bugFixes) parts.push("", "Bug Fixes:", toPlainText(bugFixes));
-
-  const body = parts
-    .join("\n")
-    .replace(/\n{3,}/g, "\n\n")
-    .trim();
+function buildNotes(changelog, version) {
+  const notes = changelogSection(changelog, version);
+  if (!notes) fail(`CHANGELOG.md has no notes for ${version}`);
+  const body = toPlainText(notes);
   if (!body) fail("release notes produced no text");
   return truncate(body, MAX_LENGTH);
 }
 
 function main() {
   const args = parseArgs(process.argv.slice(2));
-  const notesPath = args.notes || "RELEASE_NOTES.md";
+  const changelogPath = args.changelog || "CHANGELOG.md";
+  const version =
+    typeof args.version === "string"
+      ? args.version
+      : require(path.resolve("package.json")).version;
   const outDir = args["out-dir"];
   const locales = String(args.locales || "en-US")
     .split(",")
@@ -109,12 +91,10 @@ function main() {
   if (!outDir || outDir === true) fail("--out-dir is required");
   if (locales.length === 0) fail("--locales resolved to no locales");
 
-  const resolvedNotes = path.resolve(notesPath);
-  if (!fs.existsSync(resolvedNotes)) {
-    fail(`release notes file not found: ${resolvedNotes}`);
-  }
+  const resolved = path.resolve(changelogPath);
+  if (!fs.existsSync(resolved)) fail(`changelog not found: ${resolved}`);
 
-  const notes = buildNotes(fs.readFileSync(resolvedNotes, "utf8"));
+  const notes = buildNotes(fs.readFileSync(resolved, "utf8"), version);
 
   for (const locale of locales) {
     const localeDir = path.join(path.resolve(outDir), locale);
diff --git a/scripts/generate-appstore-notes.test.ts b/scripts/generate-appstore-notes.test.ts
index 7e5484fce..ea6656f56 100644
--- a/scripts/generate-appstore-notes.test.ts
+++ b/scripts/generate-appstore-notes.test.ts
@@ -9,10 +9,20 @@ const {
   MAX_LENGTH,
 } = require("./generate-appstore-notes.cjs");
 
-function notesFile(sections: Record<string, string>) {
-  return Object.entries(sections)
-    .map(([name, body]) => `<!-- ${name} -->\n${body}\n<!-- /${name} -->`)
-    .join("\n\n");
+function changelog(body: string, version = "26.10.0") {
+  return [
+    "# Changelog",
+    "",
+    `## ${version}`,
+    "",
+    body,
+    "",
+    "## 26.9.0",
+    "",
+    "### Added",
+    "- Older",
+    "",
+  ].join("\n");
 }
 
 describe("toPlainText", () => {
@@ -36,6 +46,10 @@ describe("toPlainText", () => {
     expect(toPlainText("* One\n* Two")).toBe("- One\n- Two");
   });
 
+  it("turns headings into labels", () => {
+    expect(toPlainText("### Added\n- One")).toBe("Added:\n- One");
+  });
+
   it("collapses runs of blank lines", () => {
     expect(toPlainText("- One\n\n\n\n- Two")).toBe("- One\n\n- Two");
   });
@@ -52,74 +66,40 @@ describe("truncate", () => {
   });
 
   it("drops a section header left with no bullets under it", () => {
-    const result = truncate("- One\n\nBug Fixes:\n- Two", 18);
+    const result = truncate("- One\n\nFixed:\n- Two", 14);
     expect(result).toBe("- One");
   });
 });
 
 describe("buildNotes", () => {
-  it("includes the summary, update log, and bug fixes", () => {
+  it("uses only the version's section", () => {
     const notes = buildNotes(
-      notesFile({
-        SUMMARY: "A big release.",
-        UPDATE_LOG: "- Added a thing",
-        BUG_FIXES: "- Fixed a thing",
-      }),
+      changelog("A summary.\n\n### Added\n- A thing\n\n### Fixed\n- A bug"),
+      "26.10.0",
     );
-
-    expect(notes).toContain("A big release.");
-    expect(notes).toContain("Update Log:");
-    expect(notes).toContain("- Added a thing");
-    expect(notes).toContain("Bug Fixes:");
-    expect(notes).toContain("- Fixed a thing");
+    expect(notes).toBe("A summary.\n\nAdded:\n- A thing\n\nFixed:\n- A bug");
+    expect(notes).not.toContain("Older");
   });
 
-  it("omits optional sections that are absent", () => {
-    const notes = buildNotes(notesFile({ SUMMARY: "Small release." }));
-
-    expect(notes).toBe("Small release.");
-    expect(notes).not.toContain("Update Log:");
-    expect(notes).not.toContain("Bug Fixes:");
-  });
-
-  it("stays within the App Store character limit", () => {
+  it("stays within the App Store limit and never ends mid-bullet", () => {
+    const bullets = Array.from(
+      { length: 400 },
+      (_, i) => `- Added feature number ${i}`,
+    );
     const notes = buildNotes(
-      notesFile({
-        SUMMARY: "Big release.",
-        UPDATE_LOG: Array.from(
-          { length: 400 },
-          (_, i) => `- Added feature number ${i}`,
-        ).join("\n"),
-        BUG_FIXES: Array.from(
-          { length: 400 },
-          (_, i) => `- Fixed bug number ${i}`,
-        ).join("\n"),
-      }),
+      changelog(`### Added\n${bullets.join("\n")}`),
+      "26.10.0",
     );
-
     expect(notes.length).toBeLessThanOrEqual(MAX_LENGTH);
-    expect(notes.length).toBeGreaterThan(0);
+    expect(notes.split("\n").at(-1)).toMatch(/^- Added feature number \d+$/);
   });
 
-  it("never ends mid-bullet when truncating", () => {
-    const notes = buildNotes(
-      notesFile({
-        SUMMARY: "Big release.",
-        UPDATE_LOG: Array.from(
-          { length: 400 },
-          (_, i) => `- Added feature number ${i}`,
-        ).join("\n"),
-      }),
-    );
-
-    const lines = notes.split("\n");
-    expect(lines[lines.length - 1]).toMatch(/^- Added feature number \d+$/);
-  });
-
-  it("produces non-empty notes for the real release notes file", () => {
+  it("produces notes for the real changelog", () => {
     const fs = require("fs");
-    const notes = buildNotes(fs.readFileSync("RELEASE_NOTES.md", "utf8"));
-
+    const notes = buildNotes(
+      fs.readFileSync("CHANGELOG.md", "utf8"),
+      require("../package.json").version,
+    );
     expect(notes.length).toBeGreaterThan(0);
     expect(notes.length).toBeLessThanOrEqual(MAX_LENGTH);
   });
diff --git a/scripts/generate-beta-body.cjs b/scripts/generate-beta-body.cjs
new file mode 100644
index 000000000..18b8f8c93
--- /dev/null
+++ b/scripts/generate-beta-body.cjs
@@ -0,0 +1,133 @@
+#!/usr/bin/env node
+/**
+ * Writes the body of a beta release: what a beta is, how to get it, how to
+ * leave, and the commits since the previous beta (or stable release) grouped
+ * by their feat:/fix: prefix.
+ *
+ * node scripts/generate-beta-body.cjs --version 26.11.0-beta.2 \
+ *   --branch dev-26.11.0 --sha <head> [--prev <ref>]
+ */
+
+const { execFileSync } = require("child_process");
+
+const REPO = "Termix-SSH/Termix";
+const MAX_COMMITS = 150;
+
+function parseArgs(argv) {
+  const args = {};
+  for (let i = 0; i < argv.length; i++) {
+    if (!argv[i].startsWith("--")) continue;
+    const next = argv[i + 1];
+    if (next === undefined || next.startsWith("--")) {
+      args[argv[i].slice(2)] = true;
+    } else {
+      args[argv[i].slice(2)] = next;
+      i++;
+    }
+  }
+  return args;
+}
+
+/** Commit subjects sorted into features, fixes and everything else. */
+function groupCommits(subjects) {
+  const groups = { features: [], fixes: [], other: [] };
+  for (const subject of subjects) {
+    const text = subject.trim();
+    if (!text) continue;
+    const match = /^(\w+)(\([^)]*\))?!?:\s*(.+)$/.exec(text);
+    const type = match?.[1].toLowerCase();
+    const message = match ? match[3] : text;
+    if (type === "feat") groups.features.push(message);
+    else if (type === "fix") groups.fixes.push(message);
+    else groups.other.push(message);
+  }
+  return groups;
+}
+
+/** "26.11.0-beta.2" reads as "26.11.0 Beta 2". */
+function betaTitle(version) {
+  const match = /^(.+)-beta\.(\d+)$/.exec(version);
+  return match ? `${match[1]} Beta ${match[2]}` : version;
+}
+
+function renderBody({ version, branch, sha, prev, subjects, repo = REPO }) {
+  const shown = subjects.slice(0, MAX_COMMITS);
+  const groups = groupCommits(shown);
+  const list = (items) => items.map((item) => `- ${item}`).join("\n");
+  const sections = [
+    ["Features", groups.features],
+    ["Fixes", groups.fixes],
+    ["Other changes", groups.other],
+  ]
+    .filter(([, items]) => items.length > 0)
+    .map(([title, items]) => `### ${title}\n\n${list(items)}`);
+
+  let changes;
+  if (!prev) {
+    changes = "First beta of this version.";
+  } else if (sections.length === 0) {
+    changes = "No changes since the last release.";
+  } else {
+    changes = sections.join("\n\n");
+    if (subjects.length > MAX_COMMITS) {
+      changes += `\n\n...and ${subjects.length - MAX_COMMITS} more.`;
+    }
+    changes += `\n\n[Full diff](https://github.com/${repo}/compare/${prev}...${sha})`;
+  }
+
+  return `> [!WARNING]
+> This is a beta of the next Termix release, built from \`${branch}\`. It can have bugs, so keep a backup and don't use it where you can't afford problems.
+
+**Found a bug or have feedback?** [Send beta feedback](https://github.com/${repo}/issues/new?template=beta_feedback.yml&termix-version=${encodeURIComponent(version)}). It is the fastest way to get it fixed before the stable release.
+
+### How to get it
+
+- **Docker:** \`ghcr.io/termix-ssh/termix:beta\` follows every beta. \`ghcr.io/termix-ssh/termix:${version}\` stays on this one.
+- **Desktop:** download an installer from the assets below.
+- **Going back:** switch to the \`latest\` image or a stable installer. Keep a backup of your data folder, since a beta can change the database.
+
+## Changes in ${betaTitle(version)}
+
+${changes}
+`;
+}
+
+function readSubjects(prev, sha) {
+  if (!prev) return [];
+  const out = execFileSync(
+    "git",
+    [
+      "log",
+      "--no-merges",
+      "--format=%s",
+      `${prev}..${sha}`,
+      "--",
+      ".",
+      ":!package-lock.json",
+    ],
+    { encoding: "utf8" },
+  );
+  return out.split("\n").filter(Boolean);
+}
+
+if (require.main === module) {
+  const args = parseArgs(process.argv.slice(2));
+  if (!args.version || !args.branch || !args.sha) {
+    console.error(
+      "generate-beta-body: --version, --branch and --sha are required",
+    );
+    process.exit(1);
+  }
+  const prev = typeof args.prev === "string" ? args.prev : "";
+  process.stdout.write(
+    renderBody({
+      version: args.version,
+      branch: args.branch,
+      sha: args.sha,
+      prev,
+      subjects: readSubjects(prev, args.sha),
+    }),
+  );
+}
+
+module.exports = { betaTitle, groupCommits, renderBody };
diff --git a/scripts/generate-beta-body.test.ts b/scripts/generate-beta-body.test.ts
new file mode 100644
index 000000000..baef8c981
--- /dev/null
+++ b/scripts/generate-beta-body.test.ts
@@ -0,0 +1,57 @@
+import { describe, expect, it } from "vitest";
+import { createRequire } from "module";
+
+const require = createRequire(import.meta.url);
+const {
+  betaTitle,
+  groupCommits,
+  renderBody,
+} = require("./generate-beta-body.cjs");
+
+describe("generate-beta-body", () => {
+  it("groups commits by their prefix", () => {
+    expect(
+      groupCommits([
+        "feat: add beta channel",
+        "fix(sync): keep links",
+        "chore: bump deps",
+        "Plain message",
+      ]),
+    ).toEqual({
+      features: ["add beta channel"],
+      fixes: ["keep links"],
+      other: ["bump deps", "Plain message"],
+    });
+  });
+
+  it("names the beta", () => {
+    expect(betaTitle("26.11.0-beta.2")).toBe("26.11.0 Beta 2");
+  });
+
+  it("links feedback with the version and lists the changes", () => {
+    const body = renderBody({
+      version: "26.11.0-beta.2",
+      branch: "dev-26.11.0",
+      sha: "abc",
+      prev: "v26.11.0-beta.1",
+      subjects: ["feat: one", "fix: two"],
+    });
+    expect(body).toContain("termix-version=26.11.0-beta.2");
+    expect(body).toContain("## Changes in 26.11.0 Beta 2");
+    expect(body).toContain("### Features\n\n- one");
+    expect(body).toContain("### Fixes\n\n- two");
+    expect(body).toContain("compare/v26.11.0-beta.1...abc");
+    expect(body).not.toContain("—");
+  });
+
+  it("says so when there is nothing to compare against", () => {
+    const body = renderBody({
+      version: "26.11.0-beta.1",
+      branch: "dev-26.11.0",
+      sha: "abc",
+      prev: "",
+      subjects: [],
+    });
+    expect(body).toContain("First beta of this version.");
+  });
+});
diff --git a/scripts/generate-dialect-schema.cjs b/scripts/generate-dialect-schema.cjs
index 337360111..2e2c60295 100644
--- a/scripts/generate-dialect-schema.cjs
+++ b/scripts/generate-dialect-schema.cjs
@@ -7,8 +7,8 @@
  * drizzle/mysql. Nothing imports them to run a query.
  *
  * That is not an oversight. The query builder needs two things from a table
- * object — the identifiers to interpolate, and the encoders that turn JS values
- * into driver values — and the sqlite definitions supply both correctly for
+ * object: the identifiers to interpolate, and the encoders that turn JS values
+ * into driver values. The sqlite definitions supply both correctly for
  * every engine, which is why all 44 repositories import schema.ts directly:
  *
  *   - text and integer encode as themselves everywhere
@@ -17,15 +17,15 @@
  *     which is true for JS `true` as well as for 1
  *   - real is a plain number on all three
  *
- * What genuinely differs between the dialects is DDL — column types, key
- * lengths, autoincrement syntax — and DDL is exactly what these files exist to
+ * What genuinely differs between the dialects is DDL (column types, key
+ * lengths, autoincrement syntax), and DDL is exactly what these files exist to
  * generate. See scripts/verify-dialects.mjs, which asserts the round-trips
  * above against real servers rather than trusting this comment.
  *
  * The schema is declared once, in sqlite-core, and the other two dialects are
  * derived. Hand-maintaining three copies of 52 tables would mean a renamed
  * table has to land in three places consistently or a foreign key silently
- * points at the wrong one — and the schema is regular enough that the mapping
+ * points at the wrong one, and the schema is regular enough that the mapping
  * is mechanical.
  *
  * What varies between dialects is small and closed:
@@ -198,7 +198,7 @@ function transform(source, dialect) {
     );
 
     // Timestamps are stored as text (see sql-timestamp.ts). MySQL only accepts
-    // DEFAULT CURRENT_TIMESTAMP on a DATETIME or TIMESTAMP column — on a TEXT
+    // DEFAULT CURRENT_TIMESTAMP on a DATETIME or TIMESTAMP column. On a TEXT
     // one it is ER_INVALID_DEFAULT, "Invalid default value". Since 8.0.13 an
     // expression default works on any type, and an expression is written
     // parenthesised. MariaDB accepts the bare form, which is why this only
@@ -272,13 +272,13 @@ function transform(source, dialect) {
 }
 
 function header(dialect) {
-  return `// GENERATED FILE — do not edit.
+  return `// GENERATED FILE, do not edit.
 //
 // Produced from schema.ts by scripts/generate-dialect-schema.cjs.
 // Edit the sqlite schema and re-run \`node scripts/generate-dialect-schema.cjs\`.
 // Target dialect: ${dialect}.
 //
-// DDL source for drizzle-kit. NOT imported to run queries — repositories use
+// DDL source for drizzle-kit. NOT imported to run queries. Repositories use
 // schema.ts on every dialect. See the generator header for why that is correct.
 `;
 }
diff --git a/scripts/generate-dialect-schema.test.ts b/scripts/generate-dialect-schema.test.ts
index 39ae102e7..9cd455569 100644
--- a/scripts/generate-dialect-schema.test.ts
+++ b/scripts/generate-dialect-schema.test.ts
@@ -137,7 +137,7 @@ describe("mysql output", () => {
     expect(out).toContain('double("score")');
   });
 
-  it("makes key columns varchar — MySQL cannot index unbounded TEXT", () => {
+  it("makes key columns varchar since MySQL cannot index unbounded TEXT", () => {
     expect(out).toContain('varchar("user_id", { length: 255 })');
     expect(out).toContain('text("name")');
   });
diff --git a/scripts/generate-icons.mjs b/scripts/generate-icons.mjs
index fac5e9f10..272049279 100644
--- a/scripts/generate-icons.mjs
+++ b/scripts/generate-icons.mjs
@@ -1,5 +1,5 @@
 import sharp from "sharp";
-import { readFileSync, writeFileSync, mkdirSync } from "fs";
+import { readFileSync, writeFileSync, mkdirSync, copyFileSync } from "fs";
 import { join, dirname } from "path";
 import { fileURLToPath } from "url";
 
@@ -10,124 +10,98 @@ const iconsDir = join(publicDir, "icons");
 
 mkdirSync(iconsDir, { recursive: true });
 
-const svgBuffer = readFileSync(join(publicDir, "icon.svg"));
+const svgBuffer = readFileSync(join(publicDir, "icon-square.svg"));
+const render = (size) =>
+  sharp(svgBuffer, { density: 72 * Math.max(1, size / 1024) })
+    .resize(size, size)
+    .png({ compressionLevel: 9 })
+    .toBuffer();
 
 const pngSizes = [16, 24, 32, 48, 64, 128, 256, 512, 1024];
+const png = Object.fromEntries(
+  await Promise.all(pngSizes.map(async (s) => [s, await render(s)])),
+);
 
-console.log("Generating PNG icons...");
-await Promise.all(
-  pngSizes.map((size) =>
-    sharp(svgBuffer)
-      .resize(size, size)
-      .png()
-      .toFile(join(iconsDir, `${size}x${size}.png`))
-      .then(() => console.log(`  ✓ icons/${size}x${size}.png`)),
+for (const size of pngSizes) {
+  writeFileSync(join(iconsDir, `${size}x${size}.png`), png[size]);
+}
+writeFileSync(join(publicDir, "icon.png"), png[1024]);
+writeFileSync(join(publicDir, "full-icon.png"), png[1024]);
+writeFileSync(join(publicDir, "icon-mac.png"), png[512]);
+
+writeFileSync(
+  join(publicDir, "favicon.ico"),
+  buildIco(
+    [16, 32, 48].map((s) => png[s]),
+    [16, 32, 48],
   ),
 );
-
-// icon.png (1024x1024) for Linux electron-builder
-await sharp(svgBuffer)
-  .resize(1024, 1024)
-  .png()
-  .toFile(join(publicDir, "icon.png"));
-console.log("  ✓ icon.png");
-
-// icon-mac.png (512x512) for macOS
-await sharp(svgBuffer)
-  .resize(512, 512)
-  .png()
-  .toFile(join(publicDir, "icon-mac.png"));
-console.log("  ✓ icon-mac.png");
-
-// full-icon.png (1024x1024) used in app UI
-await sharp(svgBuffer)
-  .resize(1024, 1024)
-  .png()
-  .toFile(join(publicDir, "full-icon.png"));
-console.log("  ✓ full-icon.png");
-
-// favicon.ico — embed 16, 32, 48 px layers
-console.log("Generating favicon.ico...");
-const icoSizes = [16, 32, 48];
-const icoBuffers = await Promise.all(
-  icoSizes.map((size) => sharp(svgBuffer).resize(size, size).png().toBuffer()),
+const winSizes = [16, 24, 32, 48, 64, 128, 256];
+writeFileSync(
+  join(publicDir, "icon.ico"),
+  buildIco(
+    winSizes.map((s) => png[s]),
+    winSizes,
+  ),
 );
-writeFileSync(join(publicDir, "favicon.ico"), buildIco(icoBuffers, icoSizes));
-console.log("  ✓ favicon.ico");
-
-// icon.ico — embed 16, 32, 48, 64, 128, 256 px layers
-console.log("Generating icon.ico...");
-const winSizes = [16, 32, 48, 64, 128, 256];
-const winBuffers = await Promise.all(
-  winSizes.map((size) => sharp(svgBuffer).resize(size, size).png().toBuffer()),
+writeFileSync(
+  join(publicDir, "icon.icns"),
+  buildIcns([
+    ["icp4", png[16]],
+    ["icp5", png[32]],
+    ["icp6", png[64]],
+    ["ic07", png[128]],
+    ["ic08", png[256]],
+    ["ic09", png[512]],
+    ["ic10", png[1024]],
+    ["ic11", png[32]],
+    ["ic12", png[64]],
+    ["ic13", png[256]],
+    ["ic14", png[512]],
+  ]),
 );
-writeFileSync(join(publicDir, "icon.ico"), buildIco(winBuffers, winSizes));
-console.log("  ✓ icon.ico");
-
-// icons/icon.ico and icons/icon.icns placeholders (stubs pointing to source)
-// electron-builder generates .icns; copy the 1024 PNG as icons/icon.png for reference
-await sharp(svgBuffer)
-  .resize(1024, 1024)
-  .png()
-  .toFile(join(iconsDir, "icon.ico").replace("icon.ico", "1024x1024.png"));
-// Copy icon.ico and icon.icns into icons/ as well
-import { copyFileSync } from "fs";
 copyFileSync(join(publicDir, "icon.ico"), join(iconsDir, "icon.ico"));
-console.log("  ✓ icons/icon.ico");
+copyFileSync(join(publicDir, "icon.icns"), join(iconsDir, "icon.icns"));
 
-console.log(
-  "\nDone! Note: icon.icns requires macOS tools (iconutil). Use electron-builder on macOS to generate it.",
-);
+console.log("Icons generated from public/icon-square.svg");
 
-/**
- * Builds a minimal ICO file from PNG buffers.
- * @param {Buffer[]} pngBuffers
- * @param {number[]} sizes
- * @returns {Buffer}
- */
 function buildIco(pngBuffers, sizes) {
-  const count = pngBuffers.length;
   const headerSize = 6;
   const dirEntrySize = 16;
-  const dirSize = headerSize + count * dirEntrySize;
-
-  let offset = dirSize;
+  let offset = headerSize + pngBuffers.length * dirEntrySize;
   const entries = pngBuffers.map((buf, i) => {
-    const size = sizes[i];
-    const entry = {
-      size,
-      width: size > 255 ? 0 : size,
-      height: size > 255 ? 0 : size,
-      buf,
-      offset,
-    };
+    const entry = { size: sizes[i], buf, offset };
     offset += buf.length;
     return entry;
   });
 
-  const totalSize = offset;
-  const ico = Buffer.alloc(totalSize);
-
-  // ICO header
-  ico.writeUInt16LE(0, 0); // reserved
-  ico.writeUInt16LE(1, 2); // type: 1 = ICO
-  ico.writeUInt16LE(count, 4); // image count
-
-  // Directory entries
+  const ico = Buffer.alloc(offset);
+  ico.writeUInt16LE(0, 0);
+  ico.writeUInt16LE(1, 2);
+  ico.writeUInt16LE(entries.length, 4);
   entries.forEach((e, i) => {
     const base = headerSize + i * dirEntrySize;
-    ico.writeUInt8(e.width, base); // width (0 = 256)
-    ico.writeUInt8(e.height, base + 1); // height (0 = 256)
-    ico.writeUInt8(0, base + 2); // color count
-    ico.writeUInt8(0, base + 3); // reserved
-    ico.writeUInt16LE(1, base + 4); // planes
-    ico.writeUInt16LE(32, base + 6); // bit count
-    ico.writeUInt32LE(e.buf.length, base + 8); // size of image data
-    ico.writeUInt32LE(e.offset, base + 12); // offset of image data
+    ico.writeUInt8(e.size > 255 ? 0 : e.size, base);
+    ico.writeUInt8(e.size > 255 ? 0 : e.size, base + 1);
+    ico.writeUInt16LE(1, base + 4);
+    ico.writeUInt16LE(32, base + 6);
+    ico.writeUInt32LE(e.buf.length, base + 8);
+    ico.writeUInt32LE(e.offset, base + 12);
+    e.buf.copy(ico, e.offset);
   });
-
-  // Image data
-  entries.forEach((e) => e.buf.copy(ico, e.offset));
-
   return ico;
 }
+
+function buildIcns(chunks) {
+  const parts = chunks.map(([type, data]) => {
+    const head = Buffer.alloc(8);
+    head.write(type, 0, "ascii");
+    head.writeUInt32BE(data.length + 8, 4);
+    return Buffer.concat([head, data]);
+  });
+  const body = Buffer.concat(parts);
+  const head = Buffer.alloc(8);
+  head.write("icns", 0, "ascii");
+  head.writeUInt32BE(body.length + 8, 4);
+  return Buffer.concat([head, body]);
+}
diff --git a/scripts/generate-openapi.mjs b/scripts/generate-openapi.mjs
new file mode 100644
index 000000000..84e14c51f
--- /dev/null
+++ b/scripts/generate-openapi.mjs
@@ -0,0 +1,32 @@
+#!/usr/bin/env node
+// Writes openapi.json for core from the @openapi blocks in src/backend.
+// The docs site runs the same builder on each release.
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { buildOpenApi } from "@termix-ssh/plugin-sdk/openapi";
+
+const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+const pkg = JSON.parse(
+  fs.readFileSync(path.join(root, "package.json"), "utf8"),
+);
+const tags = JSON.parse(
+  fs.readFileSync(
+    path.join(root, "src/backend/utils/openapi-tags.json"),
+    "utf8",
+  ),
+);
+const out = process.argv[2] ?? path.join(root, "openapi.json");
+
+const spec = await buildOpenApi({
+  title: "Termix API",
+  version: pkg.version,
+  description: "The core Termix API. Each plugin documents its own routes.",
+  files: [path.join(root, "src/backend/**/!(*.test).ts")],
+  tags,
+});
+
+fs.writeFileSync(out, `${JSON.stringify(spec, null, 2)}\n`);
+console.log(
+  `wrote ${path.relative(root, out)} (${Object.keys(spec.paths ?? {}).length} paths)`,
+);
diff --git a/scripts/generate-release-body.cjs b/scripts/generate-release-body.cjs
index a7e425fb7..98d1fd43b 100644
--- a/scripts/generate-release-body.cjs
+++ b/scripts/generate-release-body.cjs
@@ -1,5 +1,6 @@
 const fs = require("fs");
 const path = require("path");
+const { changelogSection } = require("./lib/changelog-section.cjs");
 
 function parseArgs(argv) {
   const args = {};
@@ -24,37 +25,10 @@ function fail(message) {
   process.exit(1);
 }
 
-function extractSection(notes, name) {
-  const pattern = new RegExp(
-    `<!--\\s*${name}\\s*-->([\\s\\S]*?)<!--\\s*/${name}\\s*-->`,
-  );
-  const match = notes.match(pattern);
-  if (!match) {
-    fail(`missing <!-- ${name} --> section in release notes`);
-  }
-  const value = match[1].trim();
-  if (!value) {
-    fail(`empty <!-- ${name} --> section in release notes`);
-  }
-  return value;
-}
-
-function youtubeId(raw) {
-  const value = raw.trim();
-  let match = value.match(/[?&]v=([A-Za-z0-9_-]+)/);
-  if (match) return match[1];
-  match = value.match(/youtu\.be\/([A-Za-z0-9_-]+)/);
-  if (match) return match[1];
-  match = value.match(/embed\/([A-Za-z0-9_-]+)/);
-  if (match) return match[1];
-  if (/^[A-Za-z0-9_-]+$/.test(value)) return value;
-  fail(`could not parse a YouTube video id from "${value}"`);
-}
-
-function buildTable(version, mobileVersion) {
-  const tag = `release-${version}-tag`;
+function buildTable(version, mobileVersion, mobileTag) {
+  const tag = `v${version}`;
   const base = `https://github.com/Termix-SSH/Termix/releases/download/${tag}`;
-  const mobileBase = `https://github.com/Termix-SSH/Mobile/releases/download/release-${mobileVersion}-tag`;
+  const mobileBase = `https://github.com/Termix-SSH/Mobile/releases/download/${mobileTag || `v${mobileVersion}`}`;
 
   const win = (file) => `${base}/${file}`;
   const linux = (file) => `${base}/${file}`;
@@ -63,11 +37,31 @@ function buildTable(version, mobileVersion) {
   return [
     `| Architecture      | Windows                                                                                  | Linux                                                                                     | Mac                                                                                       | Android                                      | iOS                                |`,
     `|------------------|------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------|---------------------------------------------|-----------------------------------|`,
-    `| **x86-64 (64-bit)** | [EXE](${win("termix_windows_x64_nsis.exe")}) · [MSI](${win("termix_windows_x64_msi.msi")}) · [Portable](${win("termix_windows_x64_portable.zip")}) | [AppImage](${linux("termix_linux_x64_appimage.AppImage")}) · [DEB](${linux("termix_linux_x64_deb.deb")}) · [Portable](${linux("termix_linux_x64_portable.tar.gz")}) | [DMG](${mac("termix_macos_x64_dmg.dmg")}) | — | — |`,
-    `| **AArch64 (ARM64)** | — | [AppImage](${linux("termix_linux_arm64_appimage.AppImage")}) · [DEB](${linux("termix_linux_arm64_deb.deb")}) · [Portable](${linux("termix_linux_arm64_portable.tar.gz")}) | [DMG](${mac("termix_macos_arm64_dmg.dmg")}) | [APK (${mobileVersion})](${mobileBase}/termix_android.apk) | [IPA (${mobileVersion})](${mobileBase}/termix_ios.ipa) |`,
-    `| **ARMv7 (32-bit)**  | — | [AppImage](${linux("termix_linux_armv7l_appimage.AppImage")}) · [DEB](${linux("termix_linux_armv7l_deb.deb")}) · [Portable](${linux("termix_linux_armv7l_portable.tar.gz")}) | — | — | — |`,
-    `| **x86-32 (32-bit)** | [EXE](${win("termix_windows_ia32_nsis.exe")}) · [MSI](${win("termix_windows_ia32_msi.msi")}) · [Portable](${win("termix_windows_ia32_portable.zip")}) | — | — | — | — |`,
-    `| **Universal**      | [Chocolatey](https://docs.termix.site/install/connector/windows) | [Flatpak](https://docs.termix.site/install/connector/linux) | [DMG](${mac("termix_macos_universal_dmg.dmg")}) · [App Store](https://apps.apple.com/us/app/termix-ssh-companion/id6752672071) · [Homebrew](https://docs.termix.site/install/connector/macos) | — | — |`,
+    `| **x86-64 (64-bit)** | [EXE](${win("termix_windows_x64_nsis.exe")}) · [MSI](${win("termix_windows_x64_msi.msi")}) · [Portable](${win("termix_windows_x64_portable.zip")}) | [AppImage](${linux("termix_linux_x64_appimage.AppImage")}) · [DEB](${linux("termix_linux_x64_deb.deb")}) · [Portable](${linux("termix_linux_x64_portable.tar.gz")}) | [DMG](${mac("termix_macos_x64_dmg.dmg")}) | - | - |`,
+    `| **AArch64 (ARM64)** | - | [AppImage](${linux("termix_linux_arm64_appimage.AppImage")}) · [DEB](${linux("termix_linux_arm64_deb.deb")}) · [Portable](${linux("termix_linux_arm64_portable.tar.gz")}) | [DMG](${mac("termix_macos_arm64_dmg.dmg")}) | [APK (${mobileVersion})](${mobileBase}/termix_android.apk) | [IPA (${mobileVersion})](${mobileBase}/termix_ios.ipa) |`,
+    `| **ARMv7 (32-bit)**  | - | [AppImage](${linux("termix_linux_armv7l_appimage.AppImage")}) · [DEB](${linux("termix_linux_armv7l_deb.deb")}) · [Portable](${linux("termix_linux_armv7l_portable.tar.gz")}) | - | - | - |`,
+    `| **x86-32 (32-bit)** | [EXE](${win("termix_windows_ia32_nsis.exe")}) · [MSI](${win("termix_windows_ia32_msi.msi")}) · [Portable](${win("termix_windows_ia32_portable.zip")}) | - | - | - | - |`,
+    `| **Universal**      | [Chocolatey](https://docs.termix.site/install/apps/windows) | [Flatpak](https://docs.termix.site/install/apps/linux) | [DMG](${mac("termix_macos_universal_dmg.dmg")}) · [App Store](https://apps.apple.com/us/app/termix-ssh-companion/id6752672071) · [Homebrew](https://docs.termix.site/install/apps/macos) | - | - |`,
+  ].join("\n");
+}
+
+function buildBody({ version, mobileVersion, mobileTag, changelog }) {
+  const notes = changelogSection(changelog, version);
+  if (!notes) fail(`CHANGELOG.md has no notes for ${version}`);
+
+  const donateAlert = [
+    "> [!TIP]",
+    "> Termix is free and always will be. If it's useful to you, consider [donating](https://donate.termix.site/donate/) to support development.",
+  ].join("\n");
+
+  return [
+    donateAlert,
+    "",
+    notes,
+    "",
+    "### Downloads",
+    "",
+    buildTable(version, mobileVersion, mobileTag),
   ].join("\n");
 }
 
@@ -75,54 +69,25 @@ function main() {
   const args = parseArgs(process.argv.slice(2));
   const version = args.version;
   const mobileVersion = args["mobile-version"];
-  const notesPath = args.notes || "RELEASE_NOTES.md";
+  const mobileTag =
+    typeof args["mobile-tag"] === "string" ? args["mobile-tag"] : undefined;
+  const changelogPath = path.resolve(args.changelog || "CHANGELOG.md");
 
   if (!version || version === true) fail("--version is required");
   if (!mobileVersion || mobileVersion === true)
     fail("--mobile-version is required");
-
-  const resolvedNotes = path.resolve(notesPath);
-  if (!fs.existsSync(resolvedNotes)) {
-    fail(`release notes file not found: ${resolvedNotes}`);
+  if (!fs.existsSync(changelogPath)) {
+    fail(`changelog not found: ${changelogPath}`);
   }
 
-  const notes = fs.readFileSync(resolvedNotes, "utf8");
-  const summary = extractSection(notes, "SUMMARY");
-  const youtube = extractSection(notes, "YOUTUBE");
-  const updateLog = extractSection(notes, "UPDATE_LOG");
-  const bugFixes = extractSection(notes, "BUG_FIXES");
-
-  const videoId = youtubeId(youtube);
-  const embed = [
-    `<a href="https://youtu.be/${videoId}">`,
-    `  <img src="./docs/repo-images/YouTube.png" alt="YouTube" width="500">`,
-    `</a>`,
-  ].join("\n");
-
-  const table = buildTable(version, mobileVersion);
-
-  const donateAlert = [
-    "> [!TIP]",
-    "> Termix is free and always will be. If it's useful to you, consider [donating](https://donate.termix.site/donate/) to support development.",
-  ].join("\n");
-
-  const body = [
-    donateAlert,
-    "",
-    summary,
-    "",
-    embed,
-    "",
-    table,
-    "",
-    "Update Log:",
-    updateLog,
-    "",
-    "Bug Fixes:",
-    bugFixes,
-  ].join("\n");
-
-  process.stdout.write(body + "\n");
+  const changelog = fs.readFileSync(changelogPath, "utf8");
+  process.stdout.write(
+    buildBody({ version, mobileVersion, mobileTag, changelog }) + "\n",
+  );
 }
 
-main();
+if (require.main === module) {
+  main();
+}
+
+module.exports = { buildBody };
diff --git a/scripts/generate-release-body.test.ts b/scripts/generate-release-body.test.ts
new file mode 100644
index 000000000..a5cd1d24e
--- /dev/null
+++ b/scripts/generate-release-body.test.ts
@@ -0,0 +1,46 @@
+import { describe, expect, it } from "vitest";
+import { createRequire } from "module";
+
+const require = createRequire(import.meta.url);
+const { buildBody } = require("./generate-release-body.cjs");
+
+const CHANGELOG = [
+  "# Changelog",
+  "",
+  "## 26.11.0",
+  "",
+  "### Fixed",
+  "- A bug",
+  "",
+  "## 26.10.0",
+  "",
+  "### Added",
+  "- Plugins",
+  "",
+].join("\n");
+
+describe("buildBody", () => {
+  it("uses the version's changelog section and v tags for downloads", () => {
+    const body = buildBody({
+      version: "26.10.0",
+      mobileVersion: "1.2.0",
+      changelog: CHANGELOG,
+    });
+    expect(body).toContain("### Added\n- Plugins");
+    expect(body).not.toContain("A bug");
+    expect(body).toContain("/releases/download/v26.10.0/termix_");
+    expect(body).toContain(
+      "Mobile/releases/download/v1.2.0/termix_android.apk",
+    );
+  });
+
+  it("works for the real changelog", () => {
+    const fs = require("fs");
+    const body = buildBody({
+      version: require("../package.json").version,
+      mobileVersion: "1.0.0",
+      changelog: fs.readFileSync("CHANGELOG.md", "utf8"),
+    });
+    expect(body.length).toBeGreaterThan(0);
+  });
+});
diff --git a/scripts/generate-settings-search-index.cjs b/scripts/generate-settings-search-index.cjs
new file mode 100644
index 000000000..30d94ecce
--- /dev/null
+++ b/scripts/generate-settings-search-index.cjs
@@ -0,0 +1,149 @@
+#!/usr/bin/env node
+/**
+ * Builds src/ui/settings/settings-search-index.ts: the i18n keys each core
+ * settings section shows, so the Settings search can match on any label in
+ * a section without mounting it. Run it after changing a settings section.
+ *
+ * --check fails when the committed file is out of date.
+ */
+
+const fs = require("node:fs");
+const path = require("node:path");
+
+const ROOT = path.resolve(__dirname, "..");
+const SIDEBAR = path.join(ROOT, "src", "ui", "sidebar");
+const OUT = path.join(
+  ROOT,
+  "src",
+  "ui",
+  "settings",
+  "settings-search-index.ts",
+);
+
+function keysIn(text) {
+  return [
+    ...new Set([...text.matchAll(/\bt\(\s*"([\w.-]+)"/g)].map((m) => m[1])),
+  ];
+}
+
+function read(file) {
+  return fs.readFileSync(path.join(SIDEBAR, file), "utf8");
+}
+
+/** The body of one exported or local function, by name. */
+function functionBody(source, name) {
+  const start = source.search(new RegExp(`function ${name}\\b`));
+  if (start < 0) throw new Error(`No function ${name}`);
+  const next = source.slice(start + 1).search(/\n(export )?function \w+/);
+  return next < 0 ? source.slice(start) : source.slice(start, start + 1 + next);
+}
+
+/** Profile sections, split on their AccordionSection ids. */
+function profileSections() {
+  const source = read("UserProfilePanel.tsx");
+  const lines = source.split("\n");
+  const starts = [];
+  lines.forEach((line, i) => {
+    if (/^\s{6}<AccordionSection\b/.test(line)) starts.push(i);
+  });
+  const out = {};
+  starts.forEach((start, k) => {
+    const end = k + 1 < starts.length ? starts[k + 1] : lines.length;
+    const chunk = lines.slice(start, end).join("\n");
+    const id = (chunk.match(/\bid="([^"]+)"/) || [])[1];
+    if (id) out[id] = keysIn(chunk);
+  });
+  out.interface = [
+    ...new Set([
+      ...(out.interface ?? []),
+      ...keysIn(read("InterfacePresetSettings.tsx")),
+    ]),
+  ];
+  out.security = [
+    ...new Set([
+      ...(out.security ?? []),
+      ...keysIn(read("AuthEnrollmentSections.tsx")),
+      ...keysIn(functionBody(source, "PasswordChangeSection")),
+    ]),
+  ];
+  out["api-keys"] = [
+    ...new Set([
+      ...(out["api-keys"] ?? []),
+      ...keysIn(functionBody(source, "NewApiKeyDialog")),
+    ]),
+  ];
+  out.keybindings = keysIn(
+    fs.readFileSync(
+      path.join(ROOT, "src", "ui", "settings", "KeybindingsSettings.tsx"),
+      "utf8",
+    ),
+  );
+  return out;
+}
+
+function adminSections() {
+  const settings = read("AdminSettingsSections.tsx");
+  const management = read("AdminManagementSections.tsx");
+  return {
+    "admin-general": [
+      ...new Set([
+        ...keysIn(functionBody(settings, "AdminGeneralSettingsSection")),
+        ...keysIn(read("AdminPluginDeveloperMode.tsx")),
+      ]),
+    ],
+    "admin-users": [
+      ...new Set([
+        ...keysIn(functionBody(management, "AdminUsersSection")),
+        ...keysIn(read("AdminUserDialogs.tsx")),
+      ]),
+    ],
+    "admin-sessions": keysIn(functionBody(management, "AdminSessionsSection")),
+    "admin-roles": keysIn(functionBody(management, "AdminRolesSection")),
+    "admin-host-defaults": [
+      ...new Set([
+        ...keysIn(functionBody(settings, "AdminHostDefaultsSection")),
+        ...keysIn(read("AdminHostTags.tsx")),
+      ]),
+    ],
+    "admin-branding": keysIn(read("AdminBrandingSection.tsx")),
+    "admin-database": keysIn(functionBody(settings, "AdminDatabaseSection")),
+    "admin-ssl": keysIn(functionBody(settings, "AdminSSLSection")),
+    "admin-api-keys": keysIn(read("AdminApiKeysSection.tsx")),
+    "admin-audit-log": keysIn(read("AdminAuditLogSection.tsx")),
+    updates: keysIn(
+      fs.readFileSync(
+        path.join(ROOT, "src", "ui", "settings", "UpdatesSettings.tsx"),
+        "utf8",
+      ),
+    ),
+  };
+}
+
+function render() {
+  const index = { ...profileSections(), ...adminSections() };
+  const body = Object.entries(index)
+    .sort(([a], [b]) => a.localeCompare(b))
+    .map(
+      ([id, keys]) =>
+        `  ${JSON.stringify(id)}: [\n${keys
+          .sort()
+          .map((key) => `    ${JSON.stringify(key)},`)
+          .join("\n")}\n  ],`,
+    )
+    .join("\n");
+  return `// Generated by scripts/generate-settings-search-index.cjs. Do not edit.\n\n/** The i18n keys each core settings section shows, for search. */\nexport const SETTINGS_SEARCH_INDEX: Record<string, string[]> = {\n${body}\n};\n`;
+}
+
+const next = render();
+if (process.argv.includes("--check")) {
+  const current = fs.existsSync(OUT) ? fs.readFileSync(OUT, "utf8") : "";
+  if (current !== next) {
+    console.error(
+      "src/ui/settings/settings-search-index.ts is out of date. Run: node scripts/generate-settings-search-index.cjs",
+    );
+    process.exit(1);
+  }
+} else {
+  fs.writeFileSync(OUT, next);
+  console.log(`Wrote ${path.relative(ROOT, OUT)}`);
+}
diff --git a/scripts/install-native-plugin-deps.cjs b/scripts/install-native-plugin-deps.cjs
deleted file mode 100644
index 7e880bc60..000000000
--- a/scripts/install-native-plugin-deps.cjs
+++ /dev/null
@@ -1,40 +0,0 @@
-/**
- * Installs the native dependencies bundled plugins declare. esbuild leaves a
- * nativeDependencies package out of the plugin bundle, so the server's own
- * node_modules has to have it. Run in the production image after npm ci.
- */
-
-const fs = require("node:fs");
-const path = require("node:path");
-const { spawnSync } = require("node:child_process");
-
-const root = path.resolve(__dirname, "..");
-const plugins = path.resolve(root, process.argv[2] ?? "plugins");
-const wanted = new Map();
-
-for (const id of fs.existsSync(plugins) ? fs.readdirSync(plugins) : []) {
-  const manifestPath = path.join(plugins, id, "manifest.json");
-  const pkgPath = path.join(plugins, id, "package.json");
-  if (!fs.existsSync(manifestPath) || !fs.existsSync(pkgPath)) continue;
-  const manifest = JSON.parse(fs.readFileSync(manifestPath, "utf8"));
-  const pkg = JSON.parse(fs.readFileSync(pkgPath, "utf8"));
-  for (const name of manifest.nativeDependencies ?? []) {
-    const range = pkg.dependencies?.[name];
-    if (!range) {
-      console.error(`${id}: native dependency ${name} has no version`);
-      process.exit(1);
-    }
-    wanted.set(name, range);
-  }
-}
-
-if (wanted.size === 0) process.exit(0);
-
-const specs = [...wanted].map(([name, range]) => `${name}@${range}`);
-console.log(`Installing native plugin dependencies: ${specs.join(" ")}`);
-const result = spawnSync(
-  "npm",
-  ["install", "--no-save", "--omit=dev", "--no-audit", "--no-fund", ...specs],
-  { cwd: root, stdio: "inherit", shell: process.platform === "win32" },
-);
-process.exit(result.status ?? 1);
diff --git a/scripts/latest-dev-branch.test.ts b/scripts/latest-dev-branch.test.ts
index 926b86e11..7a6080506 100644
--- a/scripts/latest-dev-branch.test.ts
+++ b/scripts/latest-dev-branch.test.ts
@@ -15,6 +15,13 @@ describe("latestDevBranch", () => {
     expect(latestDevBranch(["dev-2.10.0", "dev-2.9.0"])).toBe("dev-2.10.0");
   });
 
+  it("ranks calendar versions above the old semver ones", () => {
+    expect(
+      latestDevBranch(["dev-2.9.1", "dev-26.10.0", "dev-26.9.0", "dev-3.0.0"]),
+    ).toBe("dev-26.10.0");
+    expect(latestDevBranch(["dev-26.12.0", "dev-27.1.0"])).toBe("dev-27.1.0");
+  });
+
   it("ignores main and non-dev branches", () => {
     expect(latestDevBranch(["main", "feature/x", "dev-1.0.0"])).toBe(
       "dev-1.0.0",
diff --git a/scripts/lib/bundled-plugins.cjs b/scripts/lib/bundled-plugins.cjs
index c4681d457..ddbbc034d 100644
--- a/scripts/lib/bundled-plugins.cjs
+++ b/scripts/lib/bundled-plugins.cjs
@@ -2,12 +2,19 @@
  * Reads docker/bundled-plugins.json: which plugins ship in the image and
  * where each comes from.
  *
- *   { "id": "x", "source": "workspace" }                    built from plugins/x
  *   { "id": "x", "source": "tmxplug", "url": "...", "sha256": "..." }
  *   { "id": "x", "source": "tmxplug", "path": "...", "sha256": "..." }
  *
  * A tmxplug entry is pinned by sha256 in this file, which is reviewed like
  * any other change, so the build does not need the registry signature.
+ *
+ * An entry can also carry "onboarding": { "recommended": true | "desktop",
+ * "consent": true, "enabledByEnv": ["NAME"] }. The first-run plugin picker
+ * keeps recommended plugins by default ("desktop" only in the desktop app),
+ * and shows consent ones (like telemetry) in their own opt-in section.
+ * enabledByEnv counts the plugin as recommended when any of those
+ * environment variables is set, for a server configured before first boot.
+ * Plugins without it start unchecked.
  */
 
 const crypto = require("node:crypto");
@@ -15,9 +22,55 @@ const fs = require("node:fs");
 const path = require("node:path");
 
 const ID = /^[a-z0-9][a-z0-9-]*$/;
+const ENV_NAME = /^[A-Z][A-Z0-9_]*$/;
+const ONBOARDING_KEYS = new Set(["recommended", "consent", "enabledByEnv"]);
 const SHA256 = /^[0-9a-f]{64}$/;
 
-function parseBundledPlugins(raw, workspaceIds) {
+function parseOnboarding(value, id, problems) {
+  if (value === undefined) return null;
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    problems.push(`${id} has an onboarding field that is not an object`);
+    return null;
+  }
+  for (const key of Object.keys(value)) {
+    if (!ONBOARDING_KEYS.has(key)) {
+      problems.push(`${id} has an unknown onboarding field "${key}"`);
+      return null;
+    }
+  }
+  const { recommended = false, consent = false } = value;
+  if (
+    recommended !== true &&
+    recommended !== false &&
+    recommended !== "desktop"
+  ) {
+    problems.push(
+      `${id} onboarding.recommended must be true, false or "desktop"`,
+    );
+    return null;
+  }
+  if (typeof consent !== "boolean") {
+    problems.push(`${id} onboarding.consent must be a boolean`);
+    return null;
+  }
+  const { enabledByEnv } = value;
+  if (enabledByEnv === undefined) return { recommended, consent };
+  if (
+    !Array.isArray(enabledByEnv) ||
+    enabledByEnv.length === 0 ||
+    !enabledByEnv.every(
+      (name) => typeof name === "string" && ENV_NAME.test(name),
+    )
+  ) {
+    problems.push(
+      `${id} onboarding.enabledByEnv must be a list of environment variable names`,
+    );
+    return null;
+  }
+  return { recommended, consent, enabledByEnv };
+}
+
+function parseBundledPlugins(raw) {
   const problems = [];
   const list = raw && Array.isArray(raw.plugins) ? raw.plugins : null;
   if (!list) {
@@ -41,15 +94,7 @@ function parseBundledPlugins(raw, workspaceIds) {
     }
     seen.add(entry.id);
 
-    if (entry.source === "workspace") {
-      if (!workspaceIds.includes(entry.id)) {
-        problems.push(
-          `${entry.id} is a workspace plugin but plugins/${entry.id} does not exist`,
-        );
-        continue;
-      }
-      plugins.push({ id: entry.id, source: "workspace" });
-    } else if (entry.source === "tmxplug") {
+    if (entry.source === "tmxplug") {
       const hasUrl =
         typeof entry.url === "string" && entry.url.startsWith("https://");
       const hasPath = typeof entry.path === "string" && entry.path.length > 0;
@@ -63,51 +108,29 @@ function parseBundledPlugins(raw, workspaceIds) {
         problems.push(`${entry.id} needs a lowercase hex sha256`);
         continue;
       }
-      if (workspaceIds.includes(entry.id)) {
-        problems.push(
-          `${entry.id} comes from a .tmxplug, so delete plugins/${entry.id}`,
-        );
-        continue;
-      }
+      const before = problems.length;
+      const onboarding = parseOnboarding(entry.onboarding, entry.id, problems);
+      if (problems.length > before) continue;
       plugins.push({
         id: entry.id,
         source: "tmxplug",
         url: hasUrl ? entry.url : null,
         path: hasPath ? entry.path : null,
         sha256: entry.sha256,
+        onboarding,
       });
     } else {
       problems.push(`${entry.id} has an unknown source "${entry.source}"`);
     }
   }
 
-  for (const id of workspaceIds) {
-    if (!seen.has(id)) {
-      problems.push(
-        `plugins/${id} is not listed in docker/bundled-plugins.json`,
-      );
-    }
-  }
-
   return { plugins, problems };
 }
 
 function loadBundledPlugins(root) {
   const configPath = path.join(root, "docker", "bundled-plugins.json");
-  const pluginsDir = path.join(root, "plugins");
-  const workspaceIds = fs.existsSync(pluginsDir)
-    ? fs
-        .readdirSync(pluginsDir, { withFileTypes: true })
-        .filter((entry) => entry.isDirectory())
-        .filter((entry) =>
-          fs.existsSync(path.join(pluginsDir, entry.name, "manifest.json")),
-        )
-        .map((entry) => entry.name)
-        .sort()
-    : [];
-
   const raw = JSON.parse(fs.readFileSync(configPath, "utf8"));
-  const { plugins, problems } = parseBundledPlugins(raw, workspaceIds);
+  const { plugins, problems } = parseBundledPlugins(raw);
   if (problems.length > 0) {
     throw new Error(`docker/bundled-plugins.json:\n  ${problems.join("\n  ")}`);
   }
@@ -187,8 +210,172 @@ async function extractArtifact(buffer, outDir, id) {
   }
 }
 
+/**
+ * What dist/plugins/bundled-index.json holds: the onboarding defaults of each
+ * staged plugin, read by the backend when it seeds a fresh install.
+ */
+function buildBundledIndex(plugins, stagedIds) {
+  const staged = new Set(stagedIds);
+  const out = {};
+  for (const plugin of plugins) {
+    if (!staged.has(plugin.id) || !plugin.onboarding) continue;
+    out[plugin.id] = { onboarding: plugin.onboarding };
+  }
+  return { version: 1, plugins: out };
+}
+
+/**
+ * Pins the newest registry version of each wanted plugin. `ids` is the list
+ * to pin, or null for every plugin in the index. `current` is the existing
+ * pin list, so fields the registry does not know (onboarding) carry over.
+ */
+function pinsFromIndex(index, ids, current = []) {
+  const plugins = Array.isArray(index?.plugins) ? index.plugins : [];
+  const byId = new Map(plugins.map((plugin) => [plugin.id, plugin]));
+  const currentById = new Map(current.map((entry) => [entry.id, entry]));
+  const wanted = ids ?? plugins.map((plugin) => plugin.id);
+  return [...wanted].sort().map((id) => {
+    const latest = byId.get(id)?.versions?.[0];
+    if (!latest) throw new Error(`${id} is not in the registry index`);
+    const onboarding = currentById.get(id)?.onboarding;
+    return {
+      id,
+      source: "tmxplug",
+      url: latest.url,
+      sha256: latest.sha256,
+      ...(onboarding ? { onboarding } : {}),
+    };
+  });
+}
+
+const LOCAL_FILES = [
+  "manifest.json",
+  "dist",
+  "locales",
+  "migrations",
+  "README.md",
+  "CHANGELOG.md",
+];
+
+/**
+ * Built plugin repos under dir (each with manifest.json and dist/), by id.
+ * Used in development to stage local plugin builds instead of the pins.
+ */
+function findLocalPluginBuilds(dir) {
+  const builds = new Map();
+  if (!dir || !fs.existsSync(dir)) return builds;
+  for (const name of fs.readdirSync(dir)) {
+    const repo = path.join(dir, name);
+    const manifestPath = path.join(repo, "manifest.json");
+    if (!fs.existsSync(manifestPath)) continue;
+    if (!fs.existsSync(path.join(repo, "dist"))) continue;
+    try {
+      const { id } = JSON.parse(fs.readFileSync(manifestPath, "utf8"));
+      if (typeof id === "string" && ID.test(id)) builds.set(id, repo);
+    } catch {
+      // not a plugin repo
+    }
+  }
+  return builds;
+}
+
+const BUILD_INPUTS = [
+  "src",
+  "locales",
+  "migrations",
+  "manifest.json",
+  "package.json",
+];
+
+function newestMtime(target) {
+  if (!fs.existsSync(target)) return 0;
+  const stat = fs.statSync(target);
+  if (!stat.isDirectory()) return stat.mtimeMs;
+  let newest = 0;
+  for (const name of fs.readdirSync(target)) {
+    newest = Math.max(newest, newestMtime(path.join(target, name)));
+  }
+  return newest;
+}
+
+/** True when a plugin repo has never been built or its sources changed since. */
+/** The SDK CLI in this checkout, which dev builds local plugins with. */
+const LOCAL_SDK_CLI = path.join(
+  __dirname,
+  "..",
+  "..",
+  "packages",
+  "plugin-sdk",
+  "cli",
+);
+
+/**
+ * True when the build is missing, a source is newer than it, or the SDK CLI
+ * that builds it changed since (sdkCli, when given).
+ */
+function isLocalBuildStale(repo, sdkCli) {
+  const built = newestMtime(path.join(repo, "dist"));
+  if (!built) return true;
+  if (sdkCli && newestMtime(sdkCli) > built) return true;
+  return BUILD_INPUTS.some(
+    (entry) => newestMtime(path.join(repo, entry)) > built,
+  );
+}
+
+/**
+ * The command that builds a plugin repo with this checkout's SDK instead of
+ * the published one in its node_modules, so SDK edits apply right away.
+ */
+function localSdkBuildCommand() {
+  return [process.execPath, [path.join(LOCAL_SDK_CLI, "index.mjs"), "build"]];
+}
+
+/**
+ * Builds each plugin repo whose build is missing or out of date. ids limits
+ * it to those plugins; null builds every one.
+ */
+function rebuildLocalPlugins(dir, ids, run) {
+  const rebuilt = [];
+  if (!dir || !fs.existsSync(dir)) return rebuilt;
+  for (const name of fs.readdirSync(dir)) {
+    const repo = path.join(dir, name);
+    const manifestPath = path.join(repo, "manifest.json");
+    if (!fs.existsSync(manifestPath)) continue;
+    if (!fs.existsSync(path.join(repo, "node_modules"))) continue;
+    let id;
+    try {
+      ({ id } = JSON.parse(fs.readFileSync(manifestPath, "utf8")));
+    } catch {
+      continue;
+    }
+    if ((ids && !ids.has(id)) || !isLocalBuildStale(repo, LOCAL_SDK_CLI))
+      continue;
+    run(repo, id);
+    rebuilt.push(id);
+  }
+  return rebuilt;
+}
+
+/** Copies a local plugin build into the staging folder. */
+function copyLocalBuild(repo, destination) {
+  fs.mkdirSync(destination, { recursive: true });
+  for (const entry of LOCAL_FILES) {
+    const from = path.join(repo, entry);
+    if (fs.existsSync(from)) {
+      fs.cpSync(from, path.join(destination, entry), { recursive: true });
+    }
+  }
+}
+
 module.exports = {
+  findLocalPluginBuilds,
+  isLocalBuildStale,
+  localSdkBuildCommand,
+  rebuildLocalPlugins,
+  copyLocalBuild,
   parseBundledPlugins,
+  buildBundledIndex,
+  pinsFromIndex,
   loadBundledPlugins,
   checkSha256,
   fetchArtifact,
diff --git a/scripts/lib/changelog-section.cjs b/scripts/lib/changelog-section.cjs
new file mode 100644
index 000000000..4b8132d52
--- /dev/null
+++ b/scripts/lib/changelog-section.cjs
@@ -0,0 +1,24 @@
+/**
+ * The Markdown under one version's "## x.y.z" heading in CHANGELOG.md.
+ * The release scripts run before the SDK is built, so this is a small copy
+ * of changelogSection from packages/plugin-sdk/src/changelog.ts; lint checks
+ * the whole file with the real parser.
+ */
+function changelogSection(markdown, version) {
+  const lines = markdown.replace(/\r/g, "").split("\n");
+  const heading =
+    /^##\s+\[?(\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?)\]?(?:\s+-\s+.+?)?\s*$/;
+  let start = -1;
+  let fence = false;
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i];
+    if (line.trim().startsWith("```")) fence = !fence;
+    if (fence || !/^##\s/.test(line)) continue;
+    if (start >= 0) return lines.slice(start, i).join("\n").trim();
+    const match = heading.exec(line.trim());
+    if (match && match[1] === version) start = i + 1;
+  }
+  return start >= 0 ? lines.slice(start).join("\n").trim() : null;
+}
+
+module.exports = { changelogSection };
diff --git a/scripts/lib/dev-docker.mjs b/scripts/lib/dev-docker.mjs
new file mode 100644
index 000000000..79070ad98
--- /dev/null
+++ b/scripts/lib/dev-docker.mjs
@@ -0,0 +1,109 @@
+export const NETWORK = "termix-dev";
+export const APP_CONTAINER = "termix-dev";
+export const APP_IMAGE = "termix:dev";
+
+/** Side containers npm run dev can run. hostPort is what the local backend uses. */
+export const SERVICES = {
+  postgres: {
+    container: "termix-dev-postgres",
+    image: "postgres:16",
+    hostPort: 55432,
+    port: 5432,
+    env: {
+      POSTGRES_USER: "termix",
+      POSTGRES_PASSWORD: "termix",
+      POSTGRES_DB: "termix",
+    },
+    volume: ["termix-dev-postgres", "/var/lib/postgresql/data"],
+    // Over TCP, so the server that only runs during first-time setup does
+    // not count as ready.
+    ready: ["pg_isready", "-h", "127.0.0.1", "-U", "termix", "-d", "termix"],
+  },
+  mysql: {
+    container: "termix-dev-mysql",
+    image: "mysql:8",
+    hostPort: 33306,
+    port: 3306,
+    env: { MYSQL_ROOT_PASSWORD: "termix", MYSQL_DATABASE: "termix" },
+    volume: ["termix-dev-mysql", "/var/lib/mysql"],
+    ready: ["mysqladmin", "ping", "-h", "127.0.0.1", "-uroot", "-ptermix"],
+  },
+  guacd: {
+    container: "termix-dev-guacd",
+    image: "guacamole/guacd:1.6.0",
+    hostPort: 4822,
+    port: 4822,
+    env: {},
+    volume: null,
+    ready: null,
+  },
+};
+
+function envArgs(env) {
+  return Object.entries(env).flatMap(([key, value]) => [
+    "-e",
+    `${key}=${value}`,
+  ]);
+}
+
+export function serviceRunArgs(service) {
+  return [
+    "run",
+    "-d",
+    "--name",
+    service.container,
+    "--network",
+    NETWORK,
+    "-p",
+    `${service.hostPort}:${service.port}`,
+    ...envArgs(service.env),
+    ...(service.volume
+      ? ["-v", `${service.volume[0]}:${service.volume[1]}`]
+      : []),
+    service.image,
+  ];
+}
+
+/**
+ * Environment that points a backend at the side containers. inDocker means
+ * the backend runs in the dev network and reaches them by name.
+ */
+export function serviceEnv(options, inDocker) {
+  const env = {};
+  const address = (service) =>
+    inDocker
+      ? `${service.container}:${service.port}`
+      : `127.0.0.1:${service.hostPort}`;
+  if (options.db === "postgres") {
+    env.DATABASE_DIALECT = "postgres";
+    env.DATABASE_URL = `postgres://termix:termix@${address(SERVICES.postgres)}/termix`;
+  } else if (options.db === "mysql") {
+    env.DATABASE_DIALECT = "mysql";
+    env.DATABASE_URL = `mysql://root:termix@${address(SERVICES.mysql)}/termix`;
+  }
+  if (options.guacd) {
+    const guacd = SERVICES.guacd;
+    env.GUACD_HOST = inDocker ? guacd.container : "127.0.0.1";
+    env.GUACD_PORT = String(inDocker ? guacd.port : guacd.hostPort);
+  }
+  return env;
+}
+
+export function appRunArgs({ port, env, dataMount, pluginsDir }) {
+  return [
+    "run",
+    "-d",
+    "--name",
+    APP_CONTAINER,
+    "--network",
+    NETWORK,
+    "-p",
+    `${port}:8080`,
+    ...envArgs({ PORT: "8080", NODE_ENV: "development", ...env }),
+    "-v",
+    `${dataMount}:/app/data`,
+    "-v",
+    `${pluginsDir}:/app/dist/plugins`,
+    APP_IMAGE,
+  ];
+}
diff --git a/scripts/lib/dev-runner.mjs b/scripts/lib/dev-runner.mjs
new file mode 100644
index 000000000..20128c757
--- /dev/null
+++ b/scripts/lib/dev-runner.mjs
@@ -0,0 +1,212 @@
+import fs from "node:fs";
+import path from "node:path";
+import { createRequire } from "node:module";
+
+const { isLocalBuildStale } = createRequire(import.meta.url)(
+  "./bundled-plugins.cjs",
+);
+
+const ID = /^[a-z0-9][a-z0-9-]*$/;
+const SOURCE_DIRS = new Set(["src", "locales", "migrations"]);
+const SOURCE_FILES = new Set(["manifest.json", "package.json"]);
+
+/** The error count from tsc --watch's "Found N errors" line, else null. */
+export function parseTscStatus(line) {
+  const match = /Found (\d+) errors?\b.*Watching for file changes/.exec(line);
+  return match ? Number(match[1]) : null;
+}
+
+/** True when a changed path (relative to a plugin repo) feeds its build. */
+export function isPluginSourceChange(filename) {
+  if (!filename) return false;
+  const parts = String(filename).replaceAll("\\", "/").split("/");
+  if (parts.length === 1) return SOURCE_FILES.has(parts[0]);
+  return SOURCE_DIRS.has(parts[0]);
+}
+
+/**
+ * Whether a watcher event in a plugin repo is an edit worth a rebuild.
+ *
+ * On Windows, fs.watch also reports a folder or file being read (its last
+ * access time changing, which NTFS writes lazily), so reading a repo looks
+ * like editing it. Folder events are ignored, and a file event only counts
+ * while its sources are newer than the last build. A path that no longer
+ * exists was deleted, which always counts.
+ */
+export function isPluginEdit(repo, filename, isStale = isLocalBuildStale) {
+  if (!isPluginSourceChange(filename)) return false;
+  let stat;
+  try {
+    stat = fs.statSync(path.join(repo, String(filename)));
+  } catch {
+    return true;
+  }
+  if (stat.isDirectory()) return false;
+  return isStale(repo);
+}
+
+/** Plugin repos under dir that can be built (manifest.json and node_modules). */
+export function findBuildablePlugins(dir) {
+  const plugins = [];
+  if (!dir || !fs.existsSync(dir)) return plugins;
+  for (const name of fs.readdirSync(dir)) {
+    const repo = path.join(dir, name);
+    if (!fs.existsSync(path.join(repo, "node_modules"))) continue;
+    try {
+      const { id } = JSON.parse(
+        fs.readFileSync(path.join(repo, "manifest.json"), "utf8"),
+      );
+      if (typeof id === "string" && ID.test(id)) plugins.push({ id, repo });
+    } catch {
+      // not a plugin repo
+    }
+  }
+  return plugins.sort((a, b) => a.id.localeCompare(b.id));
+}
+
+/** Runs tasks one after another; a failed task does not stop the next. */
+export function createSerialQueue() {
+  let tail = Promise.resolve();
+  return (task) => {
+    const run = tail.then(task, task);
+    tail = run.catch(() => {});
+    return run;
+  };
+}
+
+/**
+ * Calls fn(key) once a key has gone quiet for ms. A key that changes again
+ * while fn is still running for it runs once more afterwards.
+ */
+export function createDebouncer(ms, fn) {
+  const timers = new Map();
+  const running = new Set();
+  const again = new Set();
+  const fire = async (key) => {
+    timers.delete(key);
+    if (running.has(key)) {
+      again.add(key);
+      return;
+    }
+    running.add(key);
+    try {
+      await fn(key);
+    } finally {
+      running.delete(key);
+      if (again.delete(key)) trigger(key);
+    }
+  };
+  const trigger = (key) => {
+    clearTimeout(timers.get(key));
+    timers.set(
+      key,
+      setTimeout(() => void fire(key), ms),
+    );
+  };
+  trigger.cancel = () => {
+    for (const timer of timers.values()) clearTimeout(timer);
+    timers.clear();
+  };
+  return trigger;
+}
+
+export const TARGETS = ["web", "electron", "docker"];
+export const DATABASES = ["sqlite", "postgres", "mysql"];
+
+export const HELP = `Usage: npm run dev -- [target] [options]
+       (npm run dev:electron and npm run dev:docker pick the target)
+
+Targets
+  web        Backend and Vite on http://localhost:5173 (default)
+  electron   Backend, Vite and the desktop app
+  docker     Build the production image and run it with your local plugins
+
+Options
+  --plugins <dir>  Plugin repos to build and watch (default ../Termix-Plugins)
+  --no-local       Use only the plugins pinned in docker/bundled-plugins.json
+  --db <engine>    sqlite (default), postgres or mysql. Postgres and MySQL run in Docker
+  --guacd          Run guacd in Docker for remote desktop
+  --fresh          Start from empty data (first run, onboarding)
+  --data <dir>     Data folder for the backend (default db/data, db/data-desktop for
+                   electron, plus -<engine> for postgres or mysql)
+  --port <n>       docker target: port on this machine (default 8081)
+  --no-cache       docker target: build the image without the layer cache
+  -h, --help       Show this
+
+Keys while running
+  r  restart the backend (docker: rebuild the image)
+  p  rebuild every local plugin
+  o  open the app in a browser
+  q  quit`;
+
+/** Reads npm run dev arguments. Throws on anything it does not know. */
+export function parseDevArgs(argv) {
+  const options = {
+    target: "web",
+    pluginsDir: null,
+    local: true,
+    db: "sqlite",
+    guacd: false,
+    fresh: false,
+    data: null,
+    port: 8081,
+    noCache: false,
+    help: false,
+  };
+  const value = (i, name) => {
+    const next = argv[i + 1];
+    if (!next || next.startsWith("--"))
+      throw new Error(`${name} needs a value`);
+    return next;
+  };
+  for (let i = 0; i < argv.length; i++) {
+    const arg = argv[i];
+    if (TARGETS.includes(arg)) options.target = arg;
+    else if (arg === "-h" || arg === "--help") options.help = true;
+    else if (arg === "--no-local") options.local = false;
+    else if (arg === "--guacd") options.guacd = true;
+    else if (arg === "--fresh") options.fresh = true;
+    else if (arg === "--no-cache") options.noCache = true;
+    else if (arg === "--plugins") options.pluginsDir = value(i++, arg);
+    else if (arg === "--data") options.data = value(i++, arg);
+    else if (arg === "--db") {
+      options.db = value(i++, arg).toLowerCase();
+      if (!DATABASES.includes(options.db)) {
+        throw new Error(`--db must be one of ${DATABASES.join(", ")}`);
+      }
+    } else if (arg === "--port") {
+      options.port = Number(value(i++, arg));
+      if (!Number.isInteger(options.port) || options.port < 1) {
+        throw new Error("--port must be a port number");
+      }
+    } else throw new Error(`Unknown option ${arg}. Run with --help.`);
+  }
+  if (options.fresh && options.data) {
+    throw new Error("--fresh and --data cannot be used together");
+  }
+  return options;
+}
+
+/**
+ * The data folder the local backend uses, or null for its own default. The
+ * desktop, each database engine and fresh runs get their own, so a desktop's
+ * local profile or another engine's keys never land in the everyday data.
+ */
+export function dataDirFor(options) {
+  if (options.data) return options.data;
+  const suffix = [
+    options.target === "electron" ? "desktop" : null,
+    options.db === "sqlite" ? null : options.db,
+  ]
+    .filter(Boolean)
+    .map((part) => `-${part}`)
+    .join("");
+  if (options.fresh) return `db/data-fresh${suffix}`;
+  return suffix ? `db/data${suffix}` : null;
+}
+
+export function needsDocker(options) {
+  return (
+    options.target === "docker" || options.db !== "sqlite" || options.guacd
+  );
+}
diff --git a/scripts/lib/plugin-import-map.mjs b/scripts/lib/plugin-import-map.mjs
index cc96be82c..129864ffa 100644
--- a/scripts/lib/plugin-import-map.mjs
+++ b/scripts/lib/plugin-import-map.mjs
@@ -32,8 +32,8 @@ export const SHARED_VENDOR_MODULES = SHARED_VENDORS.map(
 
 /** SDK entries that are implemented by, or hold state shared with, core. */
 export const SHARED_SDK_MODULES = [
-  "@termix/plugin-sdk/frontend",
-  "@termix/plugin-sdk/ui",
+  "@termix-ssh/plugin-sdk/frontend",
+  "@termix-ssh/plugin-sdk/ui",
 ];
 
 export function sharedModules() {
diff --git a/scripts/lib/upgrade-sql.mjs b/scripts/lib/upgrade-sql.mjs
deleted file mode 100644
index 9da218bdd..000000000
--- a/scripts/lib/upgrade-sql.mjs
+++ /dev/null
@@ -1,124 +0,0 @@
-/**
- * Every SQL statement a 2.8 install's Postgres or MySQL database runs on its
- * way to 2.9.0, in the order it runs them: core's drizzle migrations added
- * since release-2.8.0-tag, then each bundled plugin's own migrations in the
- * order the loader activates them. The data copies that run after that
- * (src/backend/upgrade/) are TypeScript, not SQL, and are covered by the
- * upgrade test and scripts/upgrade-check.sh.
- *
- * Snapshot-tested by scripts/upgrade-sql.test.ts, so any change to the
- * upgrade path shows up as a diff in review.
- *
- * Usage: node scripts/lib/upgrade-sql.mjs postgres|mysql
- */
-
-import fs from "node:fs";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-
-const ROOT = path.resolve(
-  path.dirname(fileURLToPath(import.meta.url)),
-  "../..",
-);
-
-/** The last core migration release-2.8.0-tag shipped, per dialect. */
-export const LAST_28_MIGRATION = {
-  postgres: "0024_flimsy_forge",
-  mysql: "0023_even_beast",
-};
-
-/** Plugin ids in the order the loader activates them: dependencies first. */
-export function pluginActivationOrder(root = ROOT) {
-  const dir = path.join(root, "plugins");
-  const manifests = new Map(
-    fs
-      .readdirSync(dir, { withFileTypes: true })
-      .filter(
-        (entry) =>
-          entry.isDirectory() &&
-          fs.existsSync(path.join(dir, entry.name, "manifest.json")),
-      )
-      .map((entry) => [
-        entry.name,
-        JSON.parse(
-          fs.readFileSync(path.join(dir, entry.name, "manifest.json"), "utf8"),
-        ),
-      ])
-      .sort(([a], [b]) => a.localeCompare(b)),
-  );
-
-  const order = [];
-  const done = new Set();
-  const visit = (id) => {
-    if (done.has(id) || !manifests.has(id)) return;
-    done.add(id);
-    const manifest = manifests.get(id);
-    for (const dependency of Object.keys(manifest.dependencies ?? {})) {
-      visit(dependency);
-    }
-    for (const dependency of Object.keys(manifest.optionalDependencies ?? {})) {
-      visit(dependency);
-    }
-    order.push(id);
-  };
-  for (const id of manifests.keys()) visit(id);
-  return order;
-}
-
-function section(title, sql) {
-  return `-- ==== ${title} ====\n${sql.trim()}\n`;
-}
-
-export function buildUpgradeSql(dialect, root = ROOT) {
-  if (!(dialect in LAST_28_MIGRATION)) {
-    throw new Error(`unsupported dialect "${dialect}"`);
-  }
-  const parts = [
-    `-- Termix 2.8.0 to 2.9.0 on ${dialect}, generated by scripts/lib/upgrade-sql.mjs\n`,
-  ];
-
-  const coreDir = path.join(root, "drizzle", dialect);
-  const journal = JSON.parse(
-    fs.readFileSync(path.join(coreDir, "meta", "_journal.json"), "utf8"),
-  );
-  const tags = journal.entries.map((entry) => entry.tag);
-  const last = tags.indexOf(LAST_28_MIGRATION[dialect]);
-  if (last === -1) {
-    throw new Error(
-      `${LAST_28_MIGRATION[dialect]} is not in the ${dialect} journal`,
-    );
-  }
-  for (const tag of tags.slice(last + 1)) {
-    parts.push(
-      section(
-        `core ${tag}`,
-        fs.readFileSync(path.join(coreDir, `${tag}.sql`), "utf8"),
-      ),
-    );
-  }
-
-  for (const id of pluginActivationOrder(root)) {
-    const dir = path.join(root, "plugins", id, "migrations", dialect);
-    if (!fs.existsSync(dir)) continue;
-    for (const file of fs
-      .readdirSync(dir)
-      .filter((name) => name.endsWith(".sql"))
-      .sort()) {
-      parts.push(
-        section(
-          `plugin ${id} ${file}`,
-          fs.readFileSync(path.join(dir, file), "utf8"),
-        ),
-      );
-    }
-  }
-
-  return parts.join("\n").replace(/\r\n/g, "\n");
-}
-
-if (
-  process.argv[1] &&
-  fileURLToPath(import.meta.url) === path.resolve(process.argv[1])
-) {
-  process.stdout.write(buildUpgradeSql(process.argv[2] ?? "postgres"));
-}
diff --git a/scripts/patch-guacamole-lite.test.ts b/scripts/patch-guacamole-lite.test.ts
deleted file mode 100644
index 058928bdf..000000000
--- a/scripts/patch-guacamole-lite.test.ts
+++ /dev/null
@@ -1,161 +0,0 @@
-import fs from "node:fs";
-import { createRequire } from "node:module";
-import path from "node:path";
-import { describe, expect, it, vi } from "vitest";
-
-const require = createRequire(import.meta.url);
-const GuacdClient = require("../node_modules/guacamole-lite/lib/GuacdClient.js");
-const GuacamoleLite = require("../node_modules/guacamole-lite/lib/Server.js");
-
-type PatchedGuacdClient = {
-  connectionSettings: Record<string, unknown>;
-  nextArgumentStreamIndex: number;
-  sendInstruction: ReturnType<typeof vi.fn>;
-  sendHandshakeReply: (serverHandshake: string[]) => void;
-  sendRequiredArguments: (params: string[]) => void;
-};
-
-function createPatchedClient(
-  connectionSettings: Record<string, unknown>,
-): PatchedGuacdClient {
-  return Object.assign(Object.create(GuacdClient.prototype), {
-    connectionSettings,
-    logger: { log: vi.fn() },
-    nextArgumentStreamIndex: 0,
-    sendInstruction: vi.fn(),
-  });
-}
-
-describe("patch-guacamole-lite", () => {
-  it("rejects a malformed token without starting or retaining a connection", async () => {
-    const server = Object.assign(Object.create(GuacamoleLite.prototype), {
-      connectionsCount: 0,
-      clientOptions: {
-        crypt: {
-          cypher: "AES-256-CBC",
-          key: Buffer.alloc(32, 7),
-        },
-        log: {
-          level: 0,
-          stdLog: vi.fn(),
-          errorLog: vi.fn(),
-        },
-      },
-      callbacks: {
-        processConnectionSettings: vi.fn(),
-      },
-      extractGuacdOptions: vi.fn(async () => ({
-        guacdOptions: { host: "127.0.0.1", port: 4822 },
-        connectionInfo: null,
-        isJoin: false,
-        targetSessionId: null,
-      })),
-      activeConnections: new Map(),
-      emit: vi.fn(),
-    });
-    const webSocket = {
-      OPEN: 1,
-      readyState: 1,
-      send: vi.fn(),
-      close: vi.fn(),
-      on: vi.fn(),
-      removeAllListeners: vi.fn(),
-    };
-
-    await server.newConnection(webSocket, {
-      url: "/guacamole/websocket/?token=not-an-encrypted-token",
-    });
-
-    expect(webSocket.close).toHaveBeenCalledOnce();
-    expect(server.activeConnections.size).toBe(0);
-    expect(server.emit).not.toHaveBeenCalledWith("open", expect.anything());
-  });
-
-  it("handles guacd dynamic argument requests", () => {
-    const guacdClientPath = path.join(
-      process.cwd(),
-      "node_modules",
-      "guacamole-lite",
-      "lib",
-      "GuacdClient.js",
-    );
-
-    const content = fs.readFileSync(guacdClientPath, "utf8");
-
-    expect(content).toContain("sendRequiredArguments(params)");
-    expect(content).toContain("opcode === 'required' || opcode === 'require'");
-    expect(content).toContain("this.sendInstruction(['argv'");
-    expect(content).toContain("this.sendInstruction(['blob'");
-    expect(content).toContain("this.sendInstruction(['end'");
-  });
-
-  it("keeps required-argument support when guacd offers a future 1.x protocol", () => {
-    const client = createPatchedClient({
-      hostname: "192.0.2.10",
-      port: 5900,
-      password: "secret",
-      width: 1280,
-      height: 720,
-      dpi: 96,
-    });
-
-    client.sendHandshakeReply(["VERSION_1_6_0", "hostname", "port"]);
-
-    expect(client.sendInstruction).toHaveBeenCalledWith(["timezone"]);
-    expect(client.sendInstruction).toHaveBeenCalledWith([
-      "name",
-      "guacamole-lite",
-    ]);
-    expect(client.sendInstruction).toHaveBeenCalledWith([
-      "connect",
-      "VERSION_1_5_0",
-      "192.0.2.10",
-      5900,
-    ]);
-  });
-
-  it("sends name instruction for VERSION_1_1_0 to fix guacd 1.6.0 VNC drops", () => {
-    const client = createPatchedClient({
-      hostname: "192.0.2.10",
-      port: 5900,
-      password: "secret",
-      width: 1280,
-      height: 720,
-      dpi: 96,
-    });
-
-    client.sendHandshakeReply(["VERSION_1_1_0", "hostname", "port"]);
-
-    expect(client.sendInstruction).toHaveBeenCalledWith(["timezone"]);
-    expect(client.sendInstruction).toHaveBeenCalledWith([
-      "name",
-      "guacamole-lite",
-    ]);
-    expect(client.sendInstruction).toHaveBeenCalledWith([
-      "connect",
-      "VERSION_1_1_0",
-      "192.0.2.10",
-      5900,
-    ]);
-  });
-
-  it("answers required credentials through argument value streams", () => {
-    const client = createPatchedClient({
-      username: "",
-      password: "secret",
-    });
-
-    client.sendRequiredArguments(["username", "password"]);
-
-    expect(
-      client.sendInstruction.mock.calls.map(([instruction]) => instruction),
-    ).toEqual([
-      ["argv", 0, "text/plain", "username"],
-      ["blob", 0, ""],
-      ["end", 0],
-      ["argv", 1, "text/plain", "password"],
-      ["blob", 1, Buffer.from("secret", "utf8").toString("base64")],
-      ["end", 1],
-    ]);
-  });
-});
diff --git a/scripts/pin-bundled-plugins.cjs b/scripts/pin-bundled-plugins.cjs
new file mode 100644
index 000000000..1f4362a96
--- /dev/null
+++ b/scripts/pin-bundled-plugins.cjs
@@ -0,0 +1,43 @@
+/**
+ * Points docker/bundled-plugins.json at the newest version of each plugin in
+ * the official registry index. Run it again after a plugin is released or
+ * re-released.
+ *
+ *   node scripts/pin-bundled-plugins.cjs          refresh the plugins already listed
+ *   node scripts/pin-bundled-plugins.cjs --all    list every plugin in the index
+ */
+
+const fs = require("node:fs");
+const path = require("node:path");
+const {
+  loadBundledPlugins,
+  pinsFromIndex,
+} = require("./lib/bundled-plugins.cjs");
+
+const INDEX_URL =
+  "https://raw.githubusercontent.com/Termix-SSH/Termix-Registry/main/official/index.json";
+
+const root = path.resolve(__dirname, "..");
+const configPath = path.join(root, "docker", "bundled-plugins.json");
+
+async function main() {
+  const all = process.argv.includes("--all");
+  const response = await fetch(INDEX_URL);
+  if (!response.ok) {
+    throw new Error(`registry index download failed with ${response.status}`);
+  }
+  const index = await response.json();
+
+  const current = loadBundledPlugins(root);
+  const ids = all ? null : current.map((plugin) => plugin.id);
+  const plugins = pinsFromIndex(index, ids, current);
+  fs.writeFileSync(configPath, `${JSON.stringify({ plugins }, null, 2)}\n`);
+  console.log(
+    `Pinned ${plugins.length} plugin(s) in docker/bundled-plugins.json`,
+  );
+}
+
+main().catch((error) => {
+  console.error(error?.message ?? error);
+  process.exit(1);
+});
diff --git a/scripts/plugin-build.test.ts b/scripts/plugin-build.test.ts
index f56253f59..e4b1caa96 100644
--- a/scripts/plugin-build.test.ts
+++ b/scripts/plugin-build.test.ts
@@ -7,6 +7,10 @@ import {
   build,
   lowerPluginLayers,
 } from "../packages/plugin-sdk/cli/commands/build.mjs";
+import {
+  classNamesInCss,
+  splitByCoreClasses,
+} from "../packages/plugin-sdk/cli/lib/css-classes.mjs";
 
 const cleanups: Array<() => void> = [];
 
@@ -102,6 +106,76 @@ describe("plugin CSS layers", () => {
     );
   });
 
+  it("can leave a plugin's own classes in core's utilities layer", () => {
+    expect(
+      lowerPluginLayers(
+        "@layer properties{a{b:c}}@layer utilities{.w-px{width:1px}}",
+        { utilities: false },
+      ),
+    ).toBe(
+      "@layer termix-plugin-properties{a{b:c}}@layer utilities{.w-px{width:1px}}",
+    );
+  });
+
+  it("reads class names from selectors, not declarations", () => {
+    const names = classNamesInCss(
+      String.raw`.w-28{width:calc(var(--spacing) * 28)}@media (width>=48rem){.md\:w-44{width:0.5rem}}.group-hover\:opacity-100:is(:where(.group):hover *){opacity:1}.top-1\/2{top:50%}.\32 xl\:flex{display:flex}`,
+    );
+    expect([...names].sort()).toEqual(
+      [
+        "2xl:flex",
+        "group",
+        "group-hover:opacity-100",
+        "md:w-44",
+        "top-1/2",
+        "w-28",
+      ].sort(),
+    );
+  });
+
+  it("splits a plugin's classes by whether core ships them", () => {
+    expect(
+      splitByCoreClasses(
+        ["w-28", "md:w-44", "hidden"],
+        new Set(["w-28", "hidden"]),
+      ),
+    ).toEqual({ shared: ["w-28", "hidden"], own: ["md:w-44"] });
+  });
+
+  it("keeps variants core ships with the plugin's own classes", () => {
+    expect(
+      splitByCoreClasses(
+        ["max-h-56", "md:max-h-none", "flex-col", "md:flex-row"],
+        new Set(["md:max-h-none", "flex-col", "md:flex-row"]),
+      ),
+    ).toEqual({
+      shared: ["flex-col"],
+      own: ["max-h-56", "md:max-h-none", "md:flex-row"],
+    });
+  });
+
+  it("keeps classes core ships below core and the plugin's own beside core's", async () => {
+    vi.spyOn(console, "log").mockImplementation(() => {});
+    // Core's class list comes from scanning this repo, this file included,
+    // so the plugin-only class is put together here instead of written out.
+    const width = ["w-", "[321px]"].join("");
+    const dir = fixturePlugin();
+    fs.mkdirSync(path.join(dir, "src", "frontend"), { recursive: true });
+    fs.writeFileSync(
+      path.join(dir, "src", "frontend", "index.tsx"),
+      `export const a = <div className="hidden md:${width}" />;\n`,
+    );
+
+    await build({ cwd: dir });
+
+    const css = fs.readFileSync(path.join(dir, "dist", "frontend.css"), "utf8");
+    const lowered = css.slice(css.indexOf("@layer termix-plugin-utilities"));
+    const own = css.slice(css.lastIndexOf("@layer utilities{"));
+    expect(lowered).toMatch(/^@layer termix-plugin-utilities\{[^@]*\.hidden\{/);
+    expect(own).toContain(String.raw`.md\:w-\[321px\]`);
+    expect(own).not.toContain(".hidden{");
+  });
+
   it("is ordered in core's CSS between base and core's utilities", () => {
     const css = fs.readFileSync(
       path.join(__dirname, "..", "src", "ui", "index.css"),
diff --git a/scripts/plugin-changelog.test.ts b/scripts/plugin-changelog.test.ts
new file mode 100644
index 000000000..6516b0e14
--- /dev/null
+++ b/scripts/plugin-changelog.test.ts
@@ -0,0 +1,187 @@
+import { describe, expect, it } from "vitest";
+import {
+  changelogSection,
+  parseChangelog,
+  parseReleaseNotes,
+  validateChangelog,
+} from "../packages/plugin-sdk/src/changelog.ts";
+
+const FILE = [
+  "# Changelog",
+  "",
+  "## 1.1.0 - 2026-10-06",
+  "",
+  "Second release.",
+  "",
+  "### Added",
+  "- Something new",
+  "  that wraps",
+  "* Another thing",
+  "",
+  "### Fixed",
+  "- Something broken",
+  "",
+  "## 1.0.0",
+  "",
+  "### Added",
+  "- The first version",
+  "",
+].join("\n");
+
+describe("parseChangelog", () => {
+  it("reads releases, summaries and sections", () => {
+    const { changelog, problems } = parseChangelog(FILE);
+    expect(problems).toEqual([]);
+    expect(changelog.releases).toEqual([
+      {
+        version: "1.1.0",
+        date: "2026-10-06",
+        summary: "Second release.",
+        changes: [
+          { type: "added", text: "Something new\nthat wraps" },
+          { type: "added", text: "Another thing" },
+          { type: "fixed", text: "Something broken" },
+        ],
+      },
+      {
+        version: "1.0.0",
+        changes: [{ type: "added", text: "The first version" }],
+      },
+    ]);
+  });
+
+  it("accepts Keep a Changelog brackets, CRLF and calendar versions", () => {
+    const { changelog, problems } = parseChangelog(
+      "## [26.10.0] - 2026-10-06\r\n\r\n### Changed\r\n- A thing\r\n",
+    );
+    expect(problems).toEqual([]);
+    expect(changelog.releases[0]).toMatchObject({
+      version: "26.10.0",
+      date: "2026-10-06",
+    });
+  });
+
+  it("orders a prerelease below its release", () => {
+    const md = (a: string, b: string) =>
+      `## ${a}\n### Added\n- x\n## ${b}\n### Added\n- y\n`;
+    expect(parseChangelog(md("2.0.0", "2.0.0-beta.1")).problems).toEqual([]);
+    expect(parseChangelog(md("2.0.0-beta.1", "2.0.0")).problems).toContain(
+      "releases must be listed newest first",
+    );
+  });
+
+  it("flags bad headings, dates, sections, stray text and duplicates", () => {
+    const { problems } = parseChangelog(
+      [
+        "## v1",
+        "## 1.0.0 - October 1",
+        "### Improved",
+        "- x",
+        "### Added",
+        "loose text",
+        "- y",
+        "## 1.0.0",
+        "### Added",
+        "- z",
+      ].join("\n"),
+    );
+    expect(problems).toEqual(
+      expect.arrayContaining([
+        'line 1: "## v1" should look like "## 1.2.0 - 2026-10-06"',
+        '1.0.0 has a date "October 1", use YYYY-MM-DD',
+        expect.stringContaining('unknown section "Improved"'),
+        expect.stringContaining("that is not a list item: loose text"),
+        "1.0.0 is listed twice",
+      ]),
+    );
+  });
+
+  it("flags a release with no changes", () => {
+    const { problems } = parseChangelog("## 1.0.0\n\nJust a summary.\n");
+    expect(problems).toContain("1.0.0 has no changes listed");
+  });
+
+  it("flags an Unreleased section", () => {
+    const { changelog, problems } = parseChangelog(
+      "## Unreleased\n### Added\n- x\n\n## 1.0.0\n### Added\n- y\n",
+    );
+    expect(problems).toEqual([
+      'line 1: drop "## Unreleased", notes go under the version they ship in',
+    ]);
+    expect(changelog.releases.map((r) => r.version)).toEqual(["1.0.0"]);
+  });
+
+  it("ignores headings inside code fences", () => {
+    const { changelog, problems } = parseChangelog(
+      "## 1.0.0\n\n```\n## not a heading\n```\n\n### Added\n- x\n",
+    );
+    expect(problems).toEqual([]);
+    expect(changelog.releases).toHaveLength(1);
+  });
+});
+
+describe("validateChangelog", () => {
+  it("passes when the newest release is the manifest version", () => {
+    expect(validateChangelog(FILE, "1.1.0")).toEqual([]);
+  });
+
+  it("flags a manifest version with no notes", () => {
+    expect(validateChangelog(FILE, "1.2.0")).toContain(
+      "the newest release is 1.1.0, but the manifest version is 1.2.0",
+    );
+  });
+
+  it("lets a beta through when its notes are not written yet", () => {
+    expect(validateChangelog(FILE, "1.1.0-beta.1")).toEqual([]);
+    expect(validateChangelog(FILE, "1.2.0-beta.3")).toEqual([]);
+  });
+
+  it("flags a beta older than the newest release", () => {
+    expect(validateChangelog(FILE, "1.0.1-beta.1")).toContain(
+      "the newest release is 1.1.0, but the manifest version is 1.0.1-beta.1",
+    );
+  });
+
+  it("flags a file with no releases", () => {
+    expect(validateChangelog("# Changelog\n", "1.0.0")).toEqual([
+      'no releases found, add a "## 1.0.0" heading',
+    ]);
+  });
+});
+
+describe("changelogSection", () => {
+  it("returns the Markdown under a version's heading", () => {
+    expect(changelogSection(FILE, "1.1.0")).toBe(
+      [
+        "Second release.",
+        "",
+        "### Added",
+        "- Something new",
+        "  that wraps",
+        "* Another thing",
+        "",
+        "### Fixed",
+        "- Something broken",
+      ].join("\n"),
+    );
+    expect(changelogSection(FILE, "1.0.0")).toBe(
+      "### Added\n- The first version",
+    );
+  });
+
+  it("is null for a version that is not there", () => {
+    expect(changelogSection(FILE, "9.9.9")).toBeNull();
+  });
+});
+
+describe("parseReleaseNotes", () => {
+  it("parses a section body on its own", () => {
+    expect(
+      parseReleaseNotes("Summary.\n\n### Security\n- Patched a hole"),
+    ).toEqual({
+      summary: "Summary.",
+      changes: [{ type: "security", text: "Patched a hole" }],
+      problems: [],
+    });
+  });
+});
diff --git a/scripts/plugin-cli-bootstrap.test.ts b/scripts/plugin-cli-bootstrap.test.ts
index 98cd62916..5be8186a5 100644
--- a/scripts/plugin-cli-bootstrap.test.ts
+++ b/scripts/plugin-cli-bootstrap.test.ts
@@ -24,13 +24,8 @@ function fixture() {
     path.join(root, "node_modules"),
     "dir",
   );
-  fs.mkdirSync(path.join(root, "scripts"));
-  fs.copyFileSync(
-    path.join(repo, "scripts/apply-plugin-patches.cjs"),
-    path.join(root, "scripts/apply-plugin-patches.cjs"),
-  );
-  const plugin = path.join(root, "plugins/fixture");
-  fs.mkdirSync(path.join(plugin, "patches"), { recursive: true });
+  const plugin = path.join(root, "fixture");
+  fs.mkdirSync(plugin);
   fs.writeFileSync(
     path.join(plugin, "manifest.json"),
     JSON.stringify({ id: "fixture" }),
@@ -39,10 +34,6 @@ function fixture() {
     path.join(plugin, "package.json"),
     JSON.stringify({ name: "fixture" }),
   );
-  fs.writeFileSync(
-    path.join(plugin, "patches/check.cjs"),
-    'require("node:fs").writeFileSync("patched", "ok");',
-  );
   const run = (...args: string[]) =>
     spawnSync(process.execPath, args, { cwd: plugin, encoding: "utf8" });
   return {
@@ -54,15 +45,6 @@ function fixture() {
 }
 
 describe("plugin CLI before the SDK is built", () => {
-  it("runs the postinstall plugin patches without SDK dist files", () => {
-    const { root, plugin, run } = fixture();
-    expect(fs.existsSync(path.join(root, "packages/plugin-sdk/dist"))).toBe(
-      false,
-    );
-    const result = run(path.join(root, "scripts/apply-plugin-patches.cjs"));
-    expect(result.status, result.stderr).toBe(0);
-    expect(fs.readFileSync(path.join(plugin, "patched"), "utf8")).toBe("ok");
-  });
   it("prints help without SDK dist files", () => {
     const { cli, run } = fixture();
     const result = run(cli, "--help");
@@ -77,3 +59,18 @@ describe("plugin CLI before the SDK is built", () => {
     expect(result.stderr).not.toContain("ERR_MODULE_NOT_FOUND");
   });
 });
+
+describe("termix-plugin test", () => {
+  it("applies the plugin's patches before running vitest", () => {
+    const { cli, plugin, run } = fixture();
+    fs.mkdirSync(path.join(plugin, "patches"));
+    fs.writeFileSync(
+      path.join(plugin, "patches", "mark.cjs"),
+      'require("node:fs").writeFileSync("patched.txt", "yes");',
+    );
+    run(cli, "test");
+    expect(fs.readFileSync(path.join(plugin, "patched.txt"), "utf8")).toBe(
+      "yes",
+    );
+  });
+});
diff --git a/scripts/plugin-dev.test.ts b/scripts/plugin-dev.test.ts
new file mode 100644
index 000000000..03fceb3c2
--- /dev/null
+++ b/scripts/plugin-dev.test.ts
@@ -0,0 +1,98 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import {
+  isSourceChange,
+  pushPlugin,
+  resolveDevOptions,
+} from "../packages/plugin-sdk/cli/commands/dev.mjs";
+
+const cleanups: Array<() => void> = [];
+
+afterEach(() => {
+  while (cleanups.length) cleanups.pop()!();
+});
+
+function json(status: number, body: unknown) {
+  return new Response(JSON.stringify(body), { status });
+}
+
+function tempFile(): string {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), "termix-plugin-dev-"));
+  cleanups.push(() => fs.rmSync(dir, { recursive: true, force: true }));
+  const file = path.join(dir, "demo-1.0.0.tmxplug");
+  fs.writeFileSync(file, "archive");
+  return file;
+}
+
+describe("termix-plugin dev options", () => {
+  it("reads flags first, then the environment", () => {
+    expect(
+      resolveDevOptions(["--server", "http://a:8080/", "--key", "tmx_1"], {}),
+    ).toEqual({ server: "http://a:8080", key: "tmx_1", once: false });
+    expect(
+      resolveDevOptions(["--once"], {
+        TERMIX_SERVER_URL: "http://b",
+        TERMIX_API_KEY: "tmx_2",
+      }),
+    ).toEqual({ server: "http://b", key: "tmx_2", once: true });
+    expect(resolveDevOptions([], { TERMIX_API_KEY: "tmx_3" }).server).toBe(
+      "http://localhost:30001",
+    );
+  });
+
+  it("needs an API key", () => {
+    expect(() => resolveDevOptions([], {})).toThrow(/API key/);
+  });
+
+  it("watches sources only", () => {
+    expect(isSourceChange("src/frontend/index.tsx")).toBe(true);
+    expect(isSourceChange("README.md")).toBe(true);
+    expect(isSourceChange("dist/frontend.js")).toBe(false);
+  });
+});
+
+describe("pushPlugin", () => {
+  it("uploads the file then installs it with the capabilities it asks for", async () => {
+    const fetchImpl = vi
+      .fn()
+      .mockResolvedValueOnce(
+        json(200, { token: "t".repeat(32), capabilities: ["kv:own"] }),
+      )
+      .mockResolvedValueOnce(
+        json(200, { id: "demo", version: "1.0.0", state: "active" }),
+      );
+    const { result } = await pushPlugin(
+      tempFile(),
+      { server: "http://s", key: "tmx_k" },
+      fetchImpl,
+    );
+    expect(result.state).toBe("active");
+
+    const [uploadUrl, upload] = fetchImpl.mock.calls[0];
+    expect(uploadUrl).toBe("http://s/plugins/upload");
+    expect(upload.headers.Authorization).toBe("Bearer tmx_k");
+    expect(upload.headers["Content-Type"]).toBe("application/octet-stream");
+
+    const [installUrl, install] = fetchImpl.mock.calls[1];
+    expect(installUrl).toBe(
+      `http://s/plugins/upload/${"t".repeat(32)}/install`,
+    );
+    expect(JSON.parse(install.body)).toEqual({ capabilities: ["kv:own"] });
+  });
+
+  it("explains a server with developer mode off", async () => {
+    const fetchImpl = vi.fn().mockResolvedValue(
+      json(403, {
+        error: "Installing from a file needs developer mode",
+        code: "DEVELOPER_MODE_OFF",
+      }),
+    );
+    await expect(
+      pushPlugin(tempFile(), { server: "http://s", key: "tmx_k" }, fetchImpl),
+    ).rejects.toThrow(
+      /403 Installing from a file needs developer mode\n.*developer mode/,
+    );
+  });
+});
diff --git a/scripts/plugin-validate.test.ts b/scripts/plugin-validate.test.ts
new file mode 100644
index 000000000..06b9602d1
--- /dev/null
+++ b/scripts/plugin-validate.test.ts
@@ -0,0 +1,51 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { validate } from "../packages/plugin-sdk/cli/commands/validate.mjs";
+
+const roots: string[] = [];
+afterEach(() => {
+  vi.restoreAllMocks();
+  for (const root of roots.splice(0))
+    fs.rmSync(root, { recursive: true, force: true });
+});
+
+function plugin(dialects: string[]) {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), "termix-validate-"));
+  roots.push(root);
+  fs.writeFileSync(
+    path.join(root, "manifest.json"),
+    JSON.stringify({ id: "fixture", version: "1.0.0" }),
+  );
+  for (const dialect of dialects) {
+    const dir = path.join(root, "migrations", dialect);
+    fs.mkdirSync(dir, { recursive: true });
+    fs.writeFileSync(
+      path.join(dir, "0001_init.sql"),
+      "CREATE TABLE p_fixture_items (id INTEGER PRIMARY KEY);\n",
+    );
+  }
+  return root;
+}
+
+async function problems(cwd: string) {
+  const lines: string[] = [];
+  vi.spyOn(console, "error").mockImplementation((line) => lines.push(line));
+  vi.spyOn(console, "warn").mockImplementation(() => {});
+  await expect(validate({ cwd })).rejects.toThrow();
+  return lines.join("\n");
+}
+
+describe("termix-plugin validate migrations", () => {
+  it("flags an engine with no migrations folder", async () => {
+    const output = await problems(plugin(["sqlite", "postgres"]));
+    expect(output).toContain("migrations/mysql is missing");
+    expect(output).not.toContain("migrations/postgres is missing");
+  });
+
+  it("accepts all three engines", async () => {
+    const output = await problems(plugin(["sqlite", "postgres", "mysql"]));
+    expect(output).not.toMatch(/migrations\/\w+ is missing/);
+  });
+});
diff --git a/scripts/publish-youtube.cjs b/scripts/publish-youtube.cjs
deleted file mode 100644
index a98368575..000000000
--- a/scripts/publish-youtube.cjs
+++ /dev/null
@@ -1,121 +0,0 @@
-const fs = require("fs");
-const path = require("path");
-
-function extractYoutubeId(notes) {
-  const match = notes.match(
-    /<!--\s*YOUTUBE\s*-->([\s\S]*?)<!--\s*\/YOUTUBE\s*-->/,
-  );
-  if (!match || !match[1].trim()) {
-    throw new Error(
-      "missing or empty <!-- YOUTUBE --> section in release notes",
-    );
-  }
-  return parseYoutubeId(match[1].trim());
-}
-
-function parseYoutubeId(raw) {
-  const value = raw.trim();
-  let m = value.match(/[?&]v=([A-Za-z0-9_-]+)/);
-  if (m) return m[1];
-  m = value.match(/youtu\.be\/([A-Za-z0-9_-]+)/);
-  if (m) return m[1];
-  m = value.match(/embed\/([A-Za-z0-9_-]+)/);
-  if (m) return m[1];
-  if (/^[A-Za-z0-9_-]+$/.test(value)) return value;
-  throw new Error(`could not parse a YouTube video id from "${value}"`);
-}
-
-async function getAccessToken({ clientId, clientSecret, refreshToken }) {
-  const res = await fetch("https://oauth2.googleapis.com/token", {
-    method: "POST",
-    headers: { "Content-Type": "application/x-www-form-urlencoded" },
-    body: new URLSearchParams({
-      client_id: clientId,
-      client_secret: clientSecret,
-      refresh_token: refreshToken,
-      grant_type: "refresh_token",
-    }),
-  });
-  if (!res.ok) {
-    throw new Error(
-      `token exchange failed (${res.status}): ${await res.text()}`,
-    );
-  }
-  const json = await res.json();
-  return json.access_token;
-}
-
-async function getVideoStatus(accessToken, videoId) {
-  const res = await fetch(
-    `https://www.googleapis.com/youtube/v3/videos?part=status&id=${videoId}`,
-    { headers: { Authorization: `Bearer ${accessToken}` } },
-  );
-  if (!res.ok)
-    throw new Error(`videos.list failed (${res.status}): ${await res.text()}`);
-  const json = await res.json();
-  return json.items?.[0]?.status?.privacyStatus ?? null;
-}
-
-async function setVideoPublic(accessToken, videoId) {
-  const status = await getVideoStatus(accessToken, videoId);
-  if (status === "public") {
-    console.log(`Video ${videoId} is already public, skipping.`);
-    return;
-  }
-  const res = await fetch(
-    "https://www.googleapis.com/youtube/v3/videos?part=status",
-    {
-      method: "PUT",
-      headers: {
-        Authorization: `Bearer ${accessToken}`,
-        "Content-Type": "application/json",
-      },
-      body: JSON.stringify({
-        id: videoId,
-        status: { privacyStatus: "public" },
-      }),
-    },
-  );
-  if (!res.ok) {
-    throw new Error(
-      `videos.update failed (${res.status}): ${await res.text()}`,
-    );
-  }
-  return res.json();
-}
-
-async function main() {
-  const clientId = process.env.YOUTUBE_CLIENT_ID;
-  const clientSecret = process.env.YOUTUBE_CLIENT_SECRET;
-  const refreshToken = process.env.YOUTUBE_REFRESH_TOKEN;
-
-  if (!clientId || !clientSecret || !refreshToken) {
-    throw new Error(
-      "YOUTUBE_CLIENT_ID, YOUTUBE_CLIENT_SECRET, and YOUTUBE_REFRESH_TOKEN are required",
-    );
-  }
-
-  const notesPath = path.resolve(
-    process.env.RELEASE_NOTES || "RELEASE_NOTES.md",
-  );
-  const notes = fs.readFileSync(notesPath, "utf8");
-  const videoId = extractYoutubeId(notes);
-
-  const accessToken = await getAccessToken({
-    clientId,
-    clientSecret,
-    refreshToken,
-  });
-  await setVideoPublic(accessToken, videoId);
-
-  console.log(`Set YouTube video ${videoId} to public.`);
-}
-
-module.exports = { extractYoutubeId, parseYoutubeId };
-
-if (require.main === module) {
-  main().catch((err) => {
-    console.error(`publish-youtube: ${err.message}`);
-    process.exit(1);
-  });
-}
diff --git a/scripts/publish-youtube.test.ts b/scripts/publish-youtube.test.ts
deleted file mode 100644
index 79c1fedd6..000000000
--- a/scripts/publish-youtube.test.ts
+++ /dev/null
@@ -1,55 +0,0 @@
-import { describe, it, expect } from "vitest";
-import { createRequire } from "module";
-
-const require = createRequire(import.meta.url);
-const { extractYoutubeId, parseYoutubeId } = require("./publish-youtube.cjs");
-
-describe("parseYoutubeId", () => {
-  it("parses a youtu.be short link", () => {
-    expect(parseYoutubeId("https://youtu.be/At8iDk6-Q_s")).toBe("At8iDk6-Q_s");
-  });
-
-  it("parses a watch?v= link", () => {
-    expect(parseYoutubeId("https://www.youtube.com/watch?v=At8iDk6-Q_s")).toBe(
-      "At8iDk6-Q_s",
-    );
-  });
-
-  it("parses an embed link", () => {
-    expect(parseYoutubeId("https://www.youtube.com/embed/At8iDk6-Q_s")).toBe(
-      "At8iDk6-Q_s",
-    );
-  });
-
-  it("accepts a bare id", () => {
-    expect(parseYoutubeId("At8iDk6-Q_s")).toBe("At8iDk6-Q_s");
-  });
-
-  it("throws on garbage", () => {
-    expect(() => parseYoutubeId("https://example.com/")).toThrow();
-  });
-});
-
-describe("extractYoutubeId", () => {
-  it("pulls the id from a release notes YOUTUBE section", () => {
-    const notes = [
-      "<!-- SUMMARY -->",
-      "stuff",
-      "<!-- /SUMMARY -->",
-      "<!-- YOUTUBE -->",
-      "https://youtu.be/At8iDk6-Q_s",
-      "<!-- /YOUTUBE -->",
-    ].join("\n");
-    expect(extractYoutubeId(notes)).toBe("At8iDk6-Q_s");
-  });
-
-  it("throws when the YOUTUBE section is missing", () => {
-    expect(() => extractYoutubeId("no section here")).toThrow(/YOUTUBE/);
-  });
-
-  it("throws when the YOUTUBE section is empty", () => {
-    expect(() =>
-      extractYoutubeId("<!-- YOUTUBE -->\n\n<!-- /YOUTUBE -->"),
-    ).toThrow(/empty/);
-  });
-});
diff --git a/scripts/run-plugin-tests.cjs b/scripts/run-plugin-tests.cjs
deleted file mode 100644
index 7588c27aa..000000000
--- a/scripts/run-plugin-tests.cjs
+++ /dev/null
@@ -1,85 +0,0 @@
-/**
- * Runs every plugin's own vitest suite.
- *
- * Core's `npm run test` covers src/ only. A plugin's tests live beside it and
- * run under its own config, so a plugin that moves out of this repo keeps a
- * working suite.
- */
-
-const fs = require("node:fs");
-const path = require("node:path");
-const { spawnSync } = require("node:child_process");
-
-const root = path.resolve(__dirname, "..");
-const source = path.join(root, "plugins");
-const cli = path.join(root, "packages", "plugin-sdk", "cli", "index.mjs");
-
-const pluginIds = fs
-  .readdirSync(source, { withFileTypes: true })
-  .filter((entry) => entry.isDirectory())
-  .filter((entry) =>
-    fs.existsSync(path.join(source, entry.name, "vitest.config.ts")),
-  )
-  .map((entry) => entry.name);
-
-const failed = [];
-const skipped = [];
-let ran = 0;
-
-// A vitest fork that dies mid-run (seen on Windows under memory pressure)
-// fails the suite without any test failing. That is retried once; a real
-// test failure is not.
-const WORKER_CRASH = /Worker exited unexpectedly|Worker forks emitted error/;
-
-function runSuite(pluginDir) {
-  const result = spawnSync(process.execPath, [cli, "test"], {
-    cwd: pluginDir,
-    encoding: "utf8",
-    maxBuffer: 64 * 1024 * 1024,
-  });
-  process.stdout.write(result.stdout ?? "");
-  process.stderr.write(result.stderr ?? "");
-  return result;
-}
-
-for (const id of pluginIds) {
-  const pluginDir = path.join(source, id);
-
-  const hasTests = ["tests/backend", "tests/frontend"].some((dir) => {
-    const full = path.join(pluginDir, dir);
-    return (
-      fs.existsSync(full) &&
-      fs
-        .readdirSync(full, { recursive: true })
-        .some(
-          (name) =>
-            String(name).endsWith(".test.ts") ||
-            String(name).endsWith(".test.tsx"),
-        )
-    );
-  });
-  if (!hasTests) {
-    skipped.push(id);
-    continue;
-  }
-
-  ran++;
-  let result = runSuite(pluginDir);
-  const output = `${result.stdout ?? ""}${result.stderr ?? ""}`;
-  if (result.status !== 0 && WORKER_CRASH.test(output)) {
-    console.warn(`\n${id}: a test worker crashed, running the suite again`);
-    result = runSuite(pluginDir);
-  }
-  if (result.status !== 0) failed.push(id);
-}
-
-if (skipped.length > 0) {
-  console.warn(`\nNo tests found for: ${skipped.join(", ")}`);
-}
-
-if (failed.length > 0) {
-  console.error(`\nPlugin tests failed: ${failed.join(", ")}`);
-  process.exit(1);
-}
-
-console.log(`\nPlugin tests passed for ${ran} plugin(s).`);
diff --git a/scripts/upgrade-check.compose.yml b/scripts/upgrade-check.compose.yml
deleted file mode 100644
index b111c5e77..000000000
--- a/scripts/upgrade-check.compose.yml
+++ /dev/null
@@ -1,35 +0,0 @@
-# Throwaway Postgres and MySQL servers for scripts/upgrade-check.sh. Data
-# lives in tmpfs, so every run starts from an empty server.
-name: termix-upgrade-check
-
-services:
-  postgres:
-    image: postgres:16
-    environment:
-      POSTGRES_USER: termix
-      POSTGRES_PASSWORD: termix
-      POSTGRES_DB: termix
-    ports:
-      - "55433:5432"
-    tmpfs:
-      - /var/lib/postgresql/data
-    healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U termix -d termix"]
-      interval: 2s
-      timeout: 5s
-      retries: 30
-
-  mysql:
-    image: mysql:8
-    environment:
-      MYSQL_ROOT_PASSWORD: termix
-      MYSQL_DATABASE: termix
-    ports:
-      - "33307:3306"
-    tmpfs:
-      - /var/lib/mysql
-    healthcheck:
-      test: ["CMD", "mysqladmin", "ping", "-h", "127.0.0.1", "-ptermix"]
-      interval: 2s
-      timeout: 5s
-      retries: 60
diff --git a/scripts/upgrade-check.mjs b/scripts/upgrade-check.mjs
new file mode 100644
index 000000000..27085e37a
--- /dev/null
+++ b/scripts/upgrade-check.mjs
@@ -0,0 +1,193 @@
+/**
+ * Builds a 2.9.1 database on a real Postgres or MySQL server, seeds the rows
+ * 26.10.0 rewrites or drops, then runs the real startup over it and checks
+ * the result. 2.9.1 is the oldest database this version opens.
+ *
+ * Run through scripts/upgrade-check.sh, which starts the servers:
+ *   tsx scripts/upgrade-check.mjs <postgres|mysql> <url> <legacy drizzle dir>
+ *
+ * Wipes the target database first.
+ */
+
+import path from "path";
+import { fileURLToPath, pathToFileURL } from "url";
+import { getTableColumns, getTableName, is, sql, Table } from "drizzle-orm";
+
+const [dialect, url, legacyRoot] = process.argv.slice(2);
+if (!["postgres", "mysql"].includes(dialect) || !url || !legacyRoot) {
+  console.error(
+    "usage: tsx scripts/upgrade-check.mjs <postgres|mysql> <url> <legacy drizzle dir>",
+  );
+  process.exit(2);
+}
+
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+const load = (file) => import(pathToFileURL(path.join(ROOT, file)).href);
+
+const { drizzle } = await import(
+  dialect === "postgres" ? "drizzle-orm/node-postgres" : "drizzle-orm/mysql2"
+);
+const db = drizzle(url);
+const rows = (result) =>
+  Array.isArray(result) ? result[0] : (result.rows ?? []);
+// Written with Postgres quoting; MySQL gets backticks.
+const exec = (text) =>
+  db.execute(sql.raw(dialect === "postgres" ? text : text.replace(/"/g, "`")));
+const one = async (text) => rows(await exec(text))[0];
+
+if (dialect === "postgres") {
+  await exec(`DROP SCHEMA public CASCADE`);
+  await exec(`CREATE SCHEMA public`);
+  await exec(`DROP SCHEMA IF EXISTS drizzle CASCADE`);
+} else {
+  const tables = rows(
+    await exec(
+      `SELECT table_name AS name FROM information_schema.tables WHERE table_schema = DATABASE()`,
+    ),
+  );
+  await exec(`SET FOREIGN_KEY_CHECKS = 0`);
+  for (const { name } of tables) await exec(`DROP TABLE IF EXISTS "${name}"`);
+  await exec(`SET FOREIGN_KEY_CHECKS = 1`);
+}
+
+const { migrate } =
+  dialect === "postgres"
+    ? await import("drizzle-orm/node-postgres/migrator")
+    : await import("drizzle-orm/mysql2/migrator");
+await migrate(db, { migrationsFolder: path.join(legacyRoot, dialect) });
+console.log(`${dialect}: 2.9.1 schema built`);
+
+const yes = dialect === "postgres" ? "true" : "1";
+await exec(
+  `INSERT INTO "users" ("id", "username", "password_hash", "is_admin", "is_oidc", "oidc_identifier", "client_id") VALUES ('u1', 'alice', 'x', ${yes}, ${yes}, 'sub-1', 'cid')`,
+);
+await exec(
+  `INSERT INTO "plugins" ("id", "name", "version", "state", "manifest_json") VALUES ('snippets', 'Snippets', '1.0.0', 'enabled', '{}')`,
+);
+await exec(
+  `INSERT INTO "ssh_credentials" ("id", "user_id", "name", "auth_type", "username") VALUES (1, 'u1', 'cred', 'password', '$oidc.preferred_username')`,
+);
+await exec(
+  `INSERT INTO "ssh_folders" ("id", "user_id", "name", "credential_id") VALUES (1, 'u1', 'f', 1)`,
+);
+await exec(
+  `INSERT INTO "ssh_data" ("id", "user_id", "name", "ip", "port", "username", "auth_type", "enable_rdp", "folder") VALUES (1, 'u1', 'h', '10.0.0.1', 22, '$oidc.preferred_username', 'password', ${yes}, 'f')`,
+);
+// Its JSON quotes must not become backticks.
+await db.execute(
+  sql`UPDATE ssh_data SET terminal_config = ${JSON.stringify({ sudoPassword: "s3cret" })} WHERE id = 1`,
+);
+await exec(
+  `INSERT INTO "sessions" ("id", "user_id", "jwt_token", "device_type", "device_info", "expires_at", "oidc_sub") VALUES ('s1', 'u1', 'jwt', 'web', 'ua', '2099-01-01', 'sub')`,
+);
+await exec(
+  `INSERT INTO "settings" ("key", "value") VALUES ('host_defaults', '{}'), ('allow_registration', 'true'), ('guac_url', 'x')`,
+);
+await exec(
+  `INSERT INTO "user_preferences" ("user_id", "terminal_macros", "rdp_defaults") VALUES ('u1', '[]', '{}')`,
+);
+
+process.env.DATABASE_DIALECT = dialect;
+process.env.DATABASE_URL = url;
+process.env.DRIZZLE_MIGRATIONS_DIR = path.join(ROOT, "drizzle");
+const { initializeDatabase } = await load("src/backend/database/db/index.ts");
+await initializeDatabase();
+
+let failures = 0;
+const check = (label, ok, detail) => {
+  if (!ok) failures++;
+  console.log(
+    `  ${ok ? "ok  " : "FAIL"}  ${label}${ok ? "" : ` ${JSON.stringify(detail)}`}`,
+  );
+};
+
+const schemaName = dialect === "postgres" ? "current_schema()" : "DATABASE()";
+const columns = new Set(
+  rows(
+    await exec(
+      `SELECT table_name AS t, column_name AS c FROM information_schema.columns WHERE table_schema = ${schemaName}`,
+    ),
+  ).map((row) => `${row.t}.${row.c}`),
+);
+
+const { RETIRED_COLUMNS, REMOTE_RETIRED_COLUMNS } = await load(
+  "src/backend/database/db/retired-columns.ts",
+);
+const leftover = [RETIRED_COLUMNS, REMOTE_RETIRED_COLUMNS].flatMap((group) =>
+  Object.entries(group).flatMap(([table, names]) =>
+    names.map((name) => `${table}.${name}`).filter((key) => columns.has(key)),
+  ),
+);
+check("retired columns are gone", leftover.length === 0, leftover);
+
+const schema = await load(
+  `src/backend/database/db/schema.${dialect === "postgres" ? "pg" : "mysql"}.ts`,
+);
+const missing = Object.values(schema)
+  .filter((value) => is(value, Table))
+  .flatMap((table) =>
+    Object.values(getTableColumns(table))
+      .map((column) => `${getTableName(table)}.${column.name}`)
+      .filter((key) => !columns.has(key)),
+  );
+check("every schema column exists", missing.length === 0, missing);
+
+check(
+  "user kept",
+  (await one(`SELECT "username" FROM "users" WHERE "id" = 'u1'`))?.username ===
+    "alice",
+);
+const host = await one(
+  `SELECT "username", "sudo_password" FROM "ssh_data" WHERE "id" = 1`,
+);
+check(
+  "host username placeholder rewritten",
+  host?.username === "$external.username",
+  host,
+);
+check(
+  "sudo password moved out of terminal_config",
+  host?.sudo_password === "s3cret",
+  host,
+);
+const credential = await one(
+  `SELECT "username" FROM "ssh_credentials" WHERE "id" = 1`,
+);
+check(
+  "credential username placeholder rewritten",
+  credential?.username === "$external.username",
+  credential,
+);
+check(
+  "folder kept",
+  !!(await one(`SELECT "id" FROM "ssh_folders" WHERE "id" = 1`)),
+);
+check(
+  "session kept",
+  !!(await one(`SELECT "id" FROM "sessions" WHERE "id" = 's1'`)),
+);
+const keys = rows(await exec(`SELECT "key" FROM "settings"`)).map(
+  (row) => row.key,
+);
+check(
+  "retired settings deleted",
+  !keys.includes("host_defaults") && !keys.includes("guac_url"),
+  keys,
+);
+check("other settings kept", keys.includes("allow_registration"), keys);
+check(
+  "system roles seeded",
+  rows(await exec(`SELECT "id" FROM "roles"`)).length > 0,
+);
+
+try {
+  await initializeDatabase();
+  check("a second start changes nothing", true);
+} catch (error) {
+  check("a second start changes nothing", false, String(error));
+}
+
+console.log(
+  `\n${dialect}: ${failures ? `${failures} check(s) failed` : "all checks passed"}`,
+);
+process.exit(failures ? 1 : 0);
diff --git a/scripts/upgrade-check.sh b/scripts/upgrade-check.sh
old mode 100755
new mode 100644
index 60fc6048e..9c949818e
--- a/scripts/upgrade-check.sh
+++ b/scripts/upgrade-check.sh
@@ -1,15 +1,16 @@
 #!/usr/bin/env bash
-# Upgrades the 2.8 fixture install to 2.9.0 on real Postgres and MySQL
-# servers and runs the same checks the SQLite upgrade test runs.
+# Upgrades a 2.9.1 database to this tree on real Postgres and MySQL servers,
+# then runs the dialect-aware backend tests against both.
 #
-# Needs Docker and a built tree (npm run build). Run from anywhere:
+# Needs Docker and the 2.9.1 tag (git fetch --tags). Run from anywhere:
 #   bash scripts/upgrade-check.sh            # both engines
-#   bash scripts/upgrade-check.sh postgres   # one engine
+#   bash scripts/upgrade-check.sh mysql      # one engine
 set -euo pipefail
 
 ROOT="$(cd "$(dirname "$0")/.." && pwd)"
-COMPOSE=(docker compose -f "$ROOT/scripts/upgrade-check.compose.yml")
-TAG="release-2.8.0-tag"
+TAG="release-2.9.1-tag"
+PG="termix-upgrade-check-pg"
+MY="termix-upgrade-check-mysql"
 if [ "$#" -gt 0 ]; then
   DIALECTS=("$@")
 else
@@ -18,43 +19,64 @@ fi
 
 cd "$ROOT"
 
-if [ ! -f dist/plugins/snippets/dist/backend.js ]; then
-  echo "dist/plugins is missing. Run npm run build first." >&2
-  exit 1
-fi
 if ! git rev-parse -q --verify "refs/tags/$TAG" >/dev/null; then
   echo "Tag $TAG is missing. Run git fetch --tags first." >&2
   exit 1
 fi
 
-LEGACY="$(mktemp -d)"
+WORK="$(mktemp -d)"
 cleanup() {
-  "${COMPOSE[@]}" down -v >/dev/null 2>&1 || true
-  rm -rf "$LEGACY"
+  docker rm -f "$PG" "$MY" >/dev/null 2>&1 || true
+  rm -rf "$WORK"
 }
 trap cleanup EXIT
 
-# 2.8's own drizzle migrations build the 2.8 schema on each server.
-git archive "$TAG" drizzle | tar -x -C "$LEGACY"
+git archive "$TAG" drizzle | tar -x -C "$WORK"
+mkdir -p "$WORK/data"
 
-"${COMPOSE[@]}" up -d --wait
+docker rm -f "$PG" "$MY" >/dev/null 2>&1 || true
+docker run -d --name "$PG" -e POSTGRES_USER=termix -e POSTGRES_PASSWORD=termix \
+  -e POSTGRES_DB=termix -p 55433:5432 postgres:16 >/dev/null
+docker run -d --name "$MY" -e MYSQL_ROOT_PASSWORD=termix -e MYSQL_DATABASE=termix \
+  -p 33307:3306 mysql:8 >/dev/null
+
+wait_for() {
+  for _ in $(seq 1 60); do
+    if "$@" >/dev/null 2>&1; then return 0; fi
+    sleep 2
+  done
+  echo "Timed out waiting for: $*" >&2
+  exit 1
+}
+wait_for docker exec "$PG" pg_isready -U termix -d termix
+wait_for docker exec "$MY" mysql -uroot -ptermix -e "SELECT 1"
+docker exec "$PG" psql -U termix -c "CREATE DATABASE termix_test" >/dev/null
+docker exec "$MY" mysql -uroot -ptermix -e "CREATE DATABASE termix_test" 2>/dev/null
+
+TESTS=$(grep -rl "test-support" src/backend/tests --include="*.test.ts")
 
 status=0
 for dialect in "${DIALECTS[@]}"; do
   case "$dialect" in
-    postgres) url="postgres://termix:termix@127.0.0.1:55433/termix" ;;
-    mysql) url="mysql://root:termix@127.0.0.1:33307/termix" ;;
+    postgres) base="postgres://termix:termix@127.0.0.1:55433" ;;
+    mysql) base="mysql://root:termix@127.0.0.1:33307" ;;
     *)
       echo "Unknown dialect $dialect (postgres or mysql)" >&2
       exit 2
       ;;
   esac
   echo
-  echo "== 2.8 to 2.9.0 on $dialect"
-  if ! TEST_DIALECT="$dialect" TEST_DATABASE_URL="$url" \
-    UPGRADE_LEGACY_MIGRATIONS_DIR="$LEGACY/drizzle" \
-    npx vitest run src/backend/tests/plugins/upgrade-fixture.test.ts \
-    --project backend; then
+  echo "== 2.9.1 to this tree on $dialect"
+  if ! DATA_DIR="$WORK/data" npx tsx scripts/upgrade-check.mjs \
+    "$dialect" "$base/termix" "$WORK/drizzle"; then
+    status=1
+  fi
+  echo
+  echo "== dialect tests on $dialect"
+  # One file at a time: they share the database and wipe it between tests.
+  # shellcheck disable=SC2086
+  if ! TEST_DIALECT="$dialect" TEST_DATABASE_URL="$base/termix_test" \
+    npx vitest run --project backend --no-file-parallelism $TESTS; then
     status=1
   fi
 done
diff --git a/scripts/upgrade-sql.test.ts b/scripts/upgrade-sql.test.ts
deleted file mode 100644
index 65d68d626..000000000
--- a/scripts/upgrade-sql.test.ts
+++ /dev/null
@@ -1,44 +0,0 @@
-import path from "node:path";
-import { describe, expect, it } from "vitest";
-import { LEGACY_TABLE_OWNERS } from "../packages/plugin-sdk/src/db";
-import { buildUpgradeSql } from "./lib/upgrade-sql.mjs";
-
-const SNAPSHOTS = path.resolve(
-  __dirname,
-  "../src/backend/tests/fixtures/upgrade",
-);
-
-const RENAME = {
-  postgres: /^ALTER TABLE "([a-z0-9_]+)" RENAME TO "(p_[a-z0-9_]+)";$/gm,
-  mysql: /^RENAME TABLE `([a-z0-9_]+)` TO `(p_[a-z0-9_]+)`;$/gm,
-};
-
-describe.each(["postgres", "mysql"] as const)(
-  "the 2.8 to 2.9.0 upgrade SQL on %s",
-  (dialect) => {
-    const sql = buildUpgradeSql(dialect);
-    const statements = sql.replace(/^--.*$/gm, "");
-
-    it("matches the reviewed snapshot", async () => {
-      await expect(sql).toMatchFileSnapshot(
-        path.join(SNAPSHOTS, `upgrade-${dialect}.sql`),
-      );
-    });
-
-    it("adopts every legacy table by renaming it, never by dropping it", () => {
-      const renamed = new Set(
-        [...sql.matchAll(RENAME[dialect])].map((match) => match[1]),
-      );
-      for (const table of Object.keys(LEGACY_TABLE_OWNERS)) {
-        expect(renamed, table).toContain(table);
-        expect(statements).not.toMatch(
-          new RegExp(`DROP TABLE[^;]*[\`"]${table}[\`"]`, "i"),
-        );
-      }
-    });
-
-    it("never drops a column", () => {
-      expect(statements).not.toMatch(/DROP COLUMN/i);
-    });
-  },
-);
diff --git a/scripts/validate-plugin-manifest.cjs b/scripts/validate-plugin-manifest.cjs
deleted file mode 100644
index 11f625ccb..000000000
--- a/scripts/validate-plugin-manifest.cjs
+++ /dev/null
@@ -1,94 +0,0 @@
-/**
- * Validates plugin manifests against the SDK contract.
- *
- *   node scripts/validate-plugin-manifest.cjs                 # every bundled manifest
- *   node scripts/validate-plugin-manifest.cjs path/to/manifest.json
- *
- * The rules live in packages/plugin-sdk/src/manifest.ts, which the server
- * uses too, so there is one implementation rather than a copy here that
- * drifts. This file only finds the manifests and prints the result.
- */
-
-const fs = require("node:fs");
-const path = require("node:path");
-const { pathToFileURL } = require("node:url");
-
-const root = path.resolve(__dirname, "..");
-const sdkEntry = path.join(
-  root,
-  "packages",
-  "plugin-sdk",
-  "dist",
-  "manifest.js",
-);
-
-async function loadValidator() {
-  if (!fs.existsSync(sdkEntry)) {
-    console.error(
-      `The plugin SDK is not built yet (${path.relative(root, sdkEntry)} is missing).\n` +
-        `Run: npm run build:sdk`,
-    );
-    process.exit(1);
-  }
-  return import(pathToFileURL(sdkEntry).href);
-}
-
-function bundledManifests() {
-  const pluginsDir = path.join(root, "plugins");
-  if (!fs.existsSync(pluginsDir)) return [];
-
-  return fs
-    .readdirSync(pluginsDir, { withFileTypes: true })
-    .filter((entry) => entry.isDirectory())
-    .map((entry) => path.join(pluginsDir, entry.name, "manifest.json"))
-    .filter((file) => fs.existsSync(file));
-}
-
-async function main() {
-  const { parseManifest } = await loadValidator();
-
-  const argument = process.argv[2];
-  const files = argument
-    ? [path.resolve(process.cwd(), argument)]
-    : bundledManifests();
-
-  if (files.length === 0) {
-    console.log("No plugin manifests found.");
-    return;
-  }
-
-  let failed = 0;
-
-  for (const file of files) {
-    const relative = path.relative(root, file);
-
-    let raw;
-    try {
-      raw = JSON.parse(fs.readFileSync(file, "utf8"));
-    } catch (error) {
-      console.error(`${relative}: not valid JSON: ${error.message}`);
-      failed += 1;
-      continue;
-    }
-
-    const { errors } = parseManifest(raw);
-    if (errors.length > 0) {
-      console.error(`${relative}:`);
-      for (const error of errors) console.error(`  - ${error}`);
-      failed += 1;
-      continue;
-    }
-
-    console.log(`ok  ${relative}`);
-  }
-
-  if (failed > 0) {
-    console.error(`\n${failed} manifest(s) failed validation.`);
-    process.exit(1);
-  }
-}
-
-main().catch((error) => {
-  console.error(error);
-  process.exit(1);
-});
diff --git a/scripts/validate-plugin-manifest.test.ts b/scripts/validate-plugin-manifest.test.ts
deleted file mode 100644
index 06bb88c4f..000000000
--- a/scripts/validate-plugin-manifest.test.ts
+++ /dev/null
@@ -1,97 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { execFileSync } from "node:child_process";
-import path from "node:path";
-
-const VALIDATOR = path.join(__dirname, "validate-plugin-manifest.cjs");
-const FIXTURES = path.join(__dirname, "__fixtures__", "manifests");
-
-function runValidator(fixture?: string): { status: number; output: string } {
-  const args = fixture
-    ? [VALIDATOR, path.join(FIXTURES, fixture)]
-    : [VALIDATOR];
-  try {
-    const output = execFileSync("node", args, { encoding: "utf8" });
-    return { status: 0, output };
-  } catch (err) {
-    const error = err as { status: number; stdout: string; stderr: string };
-    return { status: error.status, output: error.stdout + error.stderr };
-  }
-}
-
-describe("validate-plugin-manifest.cjs", () => {
-  it("accepts a valid manifest", () => {
-    const { status, output } = runValidator("valid.json");
-    expect(status).toBe(0);
-    expect(output).toContain("ok");
-  });
-
-  it("accepts a manifest declaring services", () => {
-    expect(runValidator("valid-services.json").status).toBe(0);
-  });
-
-  it("accepts a manifest declaring actions", () => {
-    expect(runValidator("valid-actions.json").status).toBe(0);
-  });
-
-  it("rejects a manifest missing a required field", () => {
-    const { status, output } = runValidator("invalid-missing-field.json");
-    expect(status).toBe(1);
-    expect(output).toContain("id");
-  });
-
-  it("rejects an id that is not a lowercase slug", () => {
-    const { status, output } = runValidator("invalid-bad-id.json");
-    expect(status).toBe(1);
-    expect(output).toContain("id");
-  });
-
-  it("rejects an unknown category", () => {
-    expect(runValidator("invalid-unknown-category.json").status).toBe(1);
-  });
-
-  // The dotted spelling was the v1 form. Capabilities are colon-separated now
-  // so they can never be confused with RBAC permissions.
-  it("rejects a dotted capability name", () => {
-    const { status, output } = runValidator("invalid-unknown-capability.json");
-    expect(status).toBe(1);
-    expect(output).toContain("hosts.read");
-  });
-
-  it("rejects a service permission the plugin does not declare", () => {
-    expect(runValidator("invalid-service-permission.json").status).toBe(1);
-  });
-
-  it("rejects an action permission the plugin does not declare", () => {
-    expect(runValidator("invalid-action-permission.json").status).toBe(1);
-  });
-
-  it("rejects an unknown top-level field", () => {
-    const { status, output } = runValidator("invalid-unknown-field.json");
-    expect(status).toBe(1);
-    expect(output).toContain("sudoEverything");
-  });
-
-  it("rejects an unknown field nested inside contributes", () => {
-    const { status, output } = runValidator(
-      "invalid-nested-unknown-field.json",
-    );
-    expect(status).toBe(1);
-    expect(output).toContain("extra");
-  });
-
-  // A manifest must not be able to name a core namespace, which is how a
-  // plugin could otherwise gate a route on admin authority it never had.
-  it("rejects a permission name outside the plugin's own namespace", () => {
-    const { status, output } = runValidator(
-      "invalid-role-default-escalation.json",
-    );
-    expect(status).toBe(1);
-    expect(output).toContain("admin.users.manage");
-  });
-
-  it("validates every bundled manifest when given no argument", () => {
-    const { status, output } = runValidator();
-    expect(status).toBe(0);
-    expect(output).toContain("ssh-terminal");
-  });
-});
diff --git a/scripts/verify-dialects.mjs b/scripts/verify-dialects.mjs
index 7251798ae..abac9aab0 100644
--- a/scripts/verify-dialects.mjs
+++ b/scripts/verify-dialects.mjs
@@ -2,8 +2,8 @@
  * Runs the repository layer against a real Postgres or MySQL server.
  *
  * The unit tests only ever see SQLite, so the parts of this codebase that
- * differ per engine — the RETURNING replacements, the read-then-write
- * transactions, the value encoders — have no coverage there at all. This is
+ * differ per engine (the RETURNING replacements, the read-then-write
+ * transactions, the value encoders) have no coverage there at all. This is
  * what covers them, and it needs a live server, which is why it is a script
  * rather than a test.
  *
@@ -12,7 +12,7 @@
  *   npm run verify:dialect -- mysql://user:pass@host:3306/db
  *
  * Applies the migrations first, through the same runRemoteMigrations() the
- * application uses at startup — so a broken migration fails here rather than in
+ * application uses at startup, so a broken migration fails here rather than in
  * production. Writes real rows: point it at a scratch database.
  */
 
@@ -40,7 +40,7 @@ const { drizzle } = await import(
   dialect === "postgres" ? "drizzle-orm/node-postgres" : "drizzle-orm/mysql2"
 );
 
-// No schema option on purpose — see connect.ts.
+// No schema option on purpose, see connect.ts.
 const db = drizzle(url);
 const context = { dialect, drizzle: db };
 
@@ -87,7 +87,7 @@ check("insert returns the stored row", created?.username, "before");
 check("boolean true survives the round trip", created?.isAdmin, true);
 
 // updateReturning must report the state AFTER the write. Reading first would
-// return the value the update replaced — silently, with no error.
+// return the value the update replaced, silently, with no error.
 const updated = await users.update(userId, { username: "after" });
 check("update returns the new value", updated?.username, "after");
 
diff --git a/scripts/vite-plugin-termix-plugins.mjs b/scripts/vite-plugin-termix-plugins.mjs
index f7ab8b0ba..e829fb4f1 100644
--- a/scripts/vite-plugin-termix-plugins.mjs
+++ b/scripts/vite-plugin-termix-plugins.mjs
@@ -4,10 +4,8 @@
  * - Every shared module (React, i18next and the SDK) becomes an entry chunk,
  *   reached through a stable shim at dist/shared/<name>.js.
  * - index.html gets an import map pointing those bare specifiers at the shims,
- *   so a plugin bundle's `import "react"` lands on the shell's React.
- * - In `vite dev`, src/ui/plugin-host/workspace-plugins.ts is replaced with
- *   import.meta.glob calls, so the monorepo's plugins load through Vite with
- *   HMR, and the map points at dev-server module URLs instead.
+ *   so a plugin bundle's `import "react"` lands on the shell's React. In
+ *   `vite dev` the map points at dev-server module URLs instead.
  */
 
 import fs from "node:fs";
@@ -72,16 +70,14 @@ function sourceFacade(file) {
 export function termixPluginHost({ repoRoot, sdkUiEntry, sdkFrontendEntry }) {
   let command = "build";
   let shared = [];
-  const workspaceModule = path
-    .join(repoRoot, "src", "ui", "plugin-host", "workspace-plugins.ts")
-    .replaceAll("\\", "/");
 
   const facadeSource = (specifier) => {
     if (SHARED_VENDOR_MODULES.includes(specifier)) {
       return vendorFacade(repoRoot, specifier);
     }
-    if (specifier === "@termix/plugin-sdk/ui") return sourceFacade(sdkUiEntry);
-    if (specifier === "@termix/plugin-sdk/frontend") {
+    if (specifier === "@termix-ssh/plugin-sdk/ui")
+      return sourceFacade(sdkUiEntry);
+    if (specifier === "@termix-ssh/plugin-sdk/frontend") {
       return sourceFacade(sdkFrontendEntry);
     }
     throw new Error(`termix-plugin-host: ${specifier} is not a shared module`);
@@ -119,26 +115,6 @@ export function termixPluginHost({ repoRoot, sdkUiEntry, sdkFrontendEntry }) {
       if (id.startsWith(VIRTUAL_PREFIX)) {
         return facadeSource(id.slice(VIRTUAL_PREFIX.length));
       }
-      if (
-        command === "serve" &&
-        id.replaceAll("\\", "/").split("?")[0] === workspaceModule
-      ) {
-        return [
-          'const frontends = import.meta.glob("/plugins/*/src/frontend/index.{tsx,ts}");',
-          'const locales = import.meta.glob("/plugins/*/locales/**/*.json", { import: "default" });',
-          "export const workspaceFrontends = {};",
-          "export const workspaceLocales = {};",
-          "for (const [file, load] of Object.entries(frontends)) {",
-          '  workspaceFrontends[file.split("/")[2]] = load;',
-          "}",
-          "for (const [file, load] of Object.entries(locales)) {",
-          '  const parts = file.split("/");',
-          "  const id = parts[2];",
-          '  const name = parts[parts.length - 1].replace(/\\.json$/, "");',
-          "  (workspaceLocales[id] ??= {})[name] = load;",
-          "}",
-        ].join("\n");
-      }
       return null;
     },
 
diff --git a/src/backend/auth/builtin-login-methods.ts b/src/backend/auth/builtin-login-methods.ts
index 1cf2181b2..28630b5f2 100644
--- a/src/backend/auth/builtin-login-methods.ts
+++ b/src/backend/auth/builtin-login-methods.ts
@@ -69,8 +69,11 @@ export async function verifyPasswordLogin(request: {
     throw new LoginMethodError("Invalid username or password", 401);
   }
 
-  if (user.isOidc && (!user.passwordHash || user.passwordHash.trim() === "")) {
-    authLogger.warn("OIDC-only user attempted traditional login", {
+  if (
+    user.isExternal &&
+    (!user.passwordHash || user.passwordHash.trim() === "")
+  ) {
+    authLogger.warn("External-only user attempted password login", {
       operation: "user_login",
       username,
       userId: user.id,
diff --git a/src/backend/auth/external-account.ts b/src/backend/auth/external-account.ts
index 0795e0618..03b82e509 100644
--- a/src/backend/auth/external-account.ts
+++ b/src/backend/auth/external-account.ts
@@ -1,10 +1,10 @@
 /**
  * Whether a user signs in through an external login (SSO, LDAP or any login
- * plugin) rather than only a password. Read from the is_oidc column, which
- * keeps its 2.8 name until 3.0.0 replaces it with user_external_identities.
+ * plugin) rather than only a password: they have a user_external_identities
+ * row. UserRepository fills isExternal.
  */
 export function isExternalAccount(user: {
-  isOidc?: boolean | number | null;
+  isExternal?: boolean | null;
 }): boolean {
-  return !!user.isOidc;
+  return !!user.isExternal;
 }
diff --git a/src/backend/auth/login-pipeline.ts b/src/backend/auth/login-pipeline.ts
index c3e5a3655..7ed3dffe7 100644
--- a/src/backend/auth/login-pipeline.ts
+++ b/src/backend/auth/login-pipeline.ts
@@ -14,11 +14,7 @@ import type { Request, Response } from "express";
 import { AuthManager } from "../utils/auth-manager.js";
 import { loginRateLimiter } from "../utils/login-rate-limiter.js";
 import { authLogger } from "../utils/logger.js";
-import {
-  generateDeviceFingerprint,
-  getDeviceId,
-  parseUserAgent,
-} from "../utils/user-agent-parser.js";
+import { parseUserAgent } from "../utils/user-agent-parser.js";
 import { logAudit, getRequestMeta } from "../utils/audit-logger.js";
 import {
   createCurrentUserAuthRepository,
@@ -37,6 +33,7 @@ import {
   type SecondFactor,
 } from "./registry.js";
 import {
+  isNativeAppRequest,
   issueSession,
   sendSession,
   syncSharedCredentialsForUserRoles,
@@ -131,10 +128,33 @@ function shouldRunSecondFactors(methodId: string): boolean {
   return isSecondFactorAfterExternalLoginEnabled();
 }
 
+export const TRUST_DEVICE_COOKIE = "termix_trust_device";
+const TRUST_TOKEN_PATTERN = /^[a-f0-9]{64}$/;
+const TRUST_TOKEN_MAX_AGE_MS = 30 * 24 * 60 * 60 * 1000;
+
+/**
+ * The remember-this-device token the server handed out after a full login.
+ * Browsers carry it in an HttpOnly cookie; the desktop app, which talks to
+ * the server cross-origin without cookies, sends it back as a header.
+ */
+function readTrustToken(req: Request): string | null {
+  const cookies = (req as Request & { cookies?: Record<string, string> })
+    .cookies;
+  const value =
+    cookies?.[TRUST_DEVICE_COOKIE] || req.get("x-termix-trust-token");
+  return typeof value === "string" && TRUST_TOKEN_PATTERN.test(value)
+    ? value
+    : null;
+}
+
+export function hashTrustToken(token: string): string {
+  return crypto.createHash("sha256").update(`trust-v2|${token}`).digest("hex");
+}
+
 async function isTrustedDevice(req: Request, userId: string): Promise<boolean> {
-  const deviceInfo = parseUserAgent(req);
-  const fingerprint = generateDeviceFingerprint(deviceInfo, getDeviceId(req));
-  if (!fingerprint) return false;
+  const token = readTrustToken(req);
+  if (!token) return false;
+  const fingerprint = hashTrustToken(token);
   const trusted = await AuthManager.getInstance().isTrustedDevice(
     userId,
     fingerprint,
@@ -151,6 +171,27 @@ async function isTrustedDevice(req: Request, userId: string): Promise<boolean> {
 
 type DeviceType = ReturnType<typeof parseUserAgent>["type"];
 
+/**
+ * An account that only signs in through SSO or LDAP must keep doing so. A
+ * passkey or any other local method would skip the identity provider, so a
+ * user disabled there could still get in.
+ */
+export function assertMethodAllowedFor(
+  user: Pick<UserRecord, "isExternal" | "passwordHash">,
+  identity: VerifiedIdentity,
+  methodId: string,
+): void {
+  if (identity.kind === "external" || !user.isExternal) return;
+  if (user.passwordHash && user.passwordHash.trim() !== "") return;
+  ensureCoreLoginProviders();
+  if (getLoginMethod(methodId)?.external) return;
+  throw new LoginMethodError(
+    "This account signs in through its identity provider",
+    403,
+    "external_login_required",
+  );
+}
+
 async function resolveUser(
   identity: VerifiedIdentity,
   deviceType: DeviceType,
@@ -175,7 +216,7 @@ async function unlockUser(
 ): Promise<void> {
   const authManager = AuthManager.getInstance();
 
-  if (identity.kind === "external" || user.isOidc) {
+  if (identity.kind === "external" || user.isExternal) {
     try {
       await authManager.authenticateExternalUser(user.id, deviceType);
     } catch (error) {
@@ -233,6 +274,7 @@ export async function runLogin(
 ): Promise<LoginResult> {
   const deviceType = parseUserAgent(req).type;
   const user = await resolveUser(identity, deviceType);
+  assertMethodAllowedFor(user, identity, context.methodId);
 
   await unlockUser(user, identity, deviceType);
   if ("password" in identity && identity.password) {
@@ -280,11 +322,7 @@ export async function runLogin(
     );
   }
 
-  const ssoClaims = {
-    ssoProviderId: identity.ssoProviderId ?? null,
-    oidcSub: identity.oidcSub ?? null,
-    oidcSid: identity.oidcSid ?? null,
-  };
+  const ssoClaims = { externalSession: identity.externalSession ?? null };
 
   if (
     factors.required.length > 0 &&
@@ -477,33 +515,42 @@ export async function verifySecondFactorAndRespond(
       ? req.body.rememberMe
       : (lookup.pending?.rememberMe ?? false);
 
+  let trustToken: string | null = null;
   if (rememberMe) {
     const deviceInfo = parseUserAgent(req);
-    const fingerprint = generateDeviceFingerprint(deviceInfo, getDeviceId(req));
-    if (fingerprint) {
-      await AuthManager.getInstance().addTrustedDevice(
-        user.id,
-        fingerprint,
-        deviceInfo.type,
-        deviceInfo.deviceInfo,
-      );
-      authLogger.info("Device automatically trusted via Remember Me", {
-        operation: "totp_auto_trust",
-        userId: user.id,
-        deviceType: deviceInfo.type,
-      });
-    }
+    trustToken = crypto.randomBytes(32).toString("hex");
+    await AuthManager.getInstance().addTrustedDevice(
+      user.id,
+      hashTrustToken(trustToken),
+      deviceInfo.type,
+      deviceInfo.deviceInfo,
+    );
+    res.cookie(
+      TRUST_DEVICE_COOKIE,
+      trustToken,
+      AuthManager.getInstance().getSecureCookieOptions(
+        req,
+        TRUST_TOKEN_MAX_AGE_MS,
+      ),
+    );
+    authLogger.info("Device automatically trusted via Remember Me", {
+      operation: "totp_auto_trust",
+      userId: user.id,
+      deviceType: deviceInfo.type,
+    });
   }
 
   const pending = lookup.pending;
   const session = await issueSession(req, user, {
     methodId: pending?.methodId ?? "password",
     rememberMe,
-    ssoProviderId: pending?.ssoProviderId ?? null,
-    oidcSub: pending?.oidcSub ?? null,
-    oidcSid: pending?.oidcSid ?? null,
+    externalSession: pending?.externalSession ?? null,
   });
 
+  if (trustToken && isNativeAppRequest(req)) {
+    session.body.trustToken = trustToken;
+  }
+
   consumePendingLogin(lookup.token);
   res.clearCookie(
     PENDING_LOGIN_COOKIE,
diff --git a/src/backend/auth/provisioning.ts b/src/backend/auth/provisioning.ts
index e071667a4..803fd688d 100644
--- a/src/backend/auth/provisioning.ts
+++ b/src/backend/auth/provisioning.ts
@@ -30,12 +30,15 @@ type ExternalIdentity = Extract<VerifiedIdentity, { kind: "external" }>;
 const THIRTY_DAYS_MS = 30 * 24 * 60 * 60 * 1000;
 const ONE_DAY_MS = 24 * 60 * 60 * 1000;
 
-/** SSO auto-provisioning: the admin setting, or OIDC_ALLOW_REGISTRATION. */
+/** The admin setting that turns external auto-provisioning on. */
+export const EXTERNAL_AUTO_PROVISION_KEY = "external_auto_provision";
+
+/** SSO auto-provisioning: the admin setting, or EXTERNAL_ALLOW_REGISTRATION. */
 async function isExternalProvisioningAllowed(): Promise<boolean> {
   try {
     if (
       await createCurrentSettingsRepository().getBoolean(
-        "oidc_auto_provision",
+        EXTERNAL_AUTO_PROVISION_KEY,
         false,
       )
     ) {
@@ -44,9 +47,12 @@ async function isExternalProvisioningAllowed(): Promise<boolean> {
   } catch {
     // fall through to the environment
   }
-  return (
-    (process.env.OIDC_ALLOW_REGISTRATION || "").trim().toLowerCase() === "true"
-  );
+  // OIDC_ALLOW_REGISTRATION is the 2.9 name, still read for one release.
+  const allow =
+    process.env.EXTERNAL_ALLOW_REGISTRATION ??
+    process.env.OIDC_ALLOW_REGISTRATION ??
+    "";
+  return allow.trim().toLowerCase() === "true";
 }
 
 /**
@@ -150,74 +156,12 @@ async function applyRoleSync(
 async function findLinkedUser(
   identity: ExternalIdentity,
 ): Promise<UserRecord | null> {
-  const identities = createCurrentUserAuthRepository();
-  const users = createCurrentUserRepository();
-
-  const linked = await identities.findIdentity(
+  const linked = await createCurrentUserAuthRepository().findIdentity(
     identity.provider,
     identity.subject,
   );
-  if (linked) {
-    const user = await users.findById(linked.userId);
-    if (user) return user;
-  }
-
-  // Accounts from before user_external_identities matched on the raw
-  // identifier column; link them the first time they sign in. The column is
-  // not scoped to a provider, so only an SSO account that has no link yet,
-  // from the same provider when both say which, can be claimed this way.
-  if (identity.legacyIdentifier) {
-    const legacy = await users.findByExternalIdentifier(
-      identity.legacyIdentifier,
-    );
-    if (legacy && (await mayClaimLegacyAccount(legacy, identity))) {
-      await identities.linkIdentity({
-        userId: legacy.id,
-        providerId: identity.provider,
-        subject: identity.subject,
-        email: identity.email,
-      });
-      return legacy;
-    }
-  }
-  return null;
-}
-
-async function mayClaimLegacyAccount(
-  legacy: UserRecord,
-  identity: ExternalIdentity,
-): Promise<boolean> {
-  if (!legacy.isOidc) return false;
-  if (
-    legacy.ssoProviderId != null &&
-    identity.ssoProviderId != null &&
-    legacy.ssoProviderId !== identity.ssoProviderId
-  ) {
-    return false;
-  }
-  const links = await createCurrentUserAuthRepository().listIdentitiesForUser(
-    legacy.id,
-  );
-  // An unscoped legacy subject may already have been migrated under a
-  // different provider. Creating another account loses access to the old
-  // data; claiming it automatically could cross an identity-provider boundary.
-  if (
-    legacy.ssoProviderId == null &&
-    identity.ssoProviderId != null &&
-    identity.legacyIdentifier === identity.subject &&
-    links.some(
-      (link) =>
-        link.subject === identity.subject &&
-        link.providerId !== identity.provider,
-    )
-  ) {
-    throw new LoginMethodError(
-      "A legacy SSO account has an unresolved provider mapping. Ask an administrator to verify and repair its identity mapping before signing in.",
-      409,
-      "legacy_identity_conflict",
-    );
-  }
-  return links.length === 0;
+  if (!linked) return null;
+  return createCurrentUserRepository().findById(linked.userId);
 }
 
 /**
@@ -249,10 +193,6 @@ async function createUser(
     username: await freeUsername(identity.name || identity.subject, null),
     passwordHash: "",
     isAdmin: !!identity.isAdmin,
-    isOidc: true,
-    oidcIdentifier:
-      identity.legacyIdentifier ?? `${identity.provider}:${identity.subject}`,
-    ssoProviderId: identity.ssoProviderId ?? null,
   });
 
   try {
@@ -335,7 +275,7 @@ export async function findOrProvisionExternalUser(
           provider: identity.provider,
         });
         throw new LoginMethodError(
-          "Registration is disabled",
+          "You have no Termix account yet. Ask an admin to turn on Auto-create external accounts.",
           403,
           "registration_disabled",
         );
diff --git a/src/backend/auth/registry.ts b/src/backend/auth/registry.ts
index 984dc4b4b..916f5af62 100644
--- a/src/backend/auth/registry.ts
+++ b/src/backend/auth/registry.ts
@@ -9,7 +9,7 @@
 import type {
   PluginLoginMethod,
   PluginSecondFactor,
-} from "@termix/plugin-sdk/backend";
+} from "@termix-ssh/plugin-sdk/backend";
 
 export type LoginMethod = PluginLoginMethod & { pluginId: string };
 export type SecondFactor = PluginSecondFactor & { pluginId: string };
diff --git a/src/backend/auth/session-issuer.ts b/src/backend/auth/session-issuer.ts
index be0b8fda9..17aeb3c81 100644
--- a/src/backend/auth/session-issuer.ts
+++ b/src/backend/auth/session-issuer.ts
@@ -17,6 +17,7 @@ import {
   createCurrentUserAuthRepository,
 } from "../database/repositories/factory.js";
 import type { UserRecord } from "../database/repositories/user-repository.js";
+import type { ExternalSessionRef } from "./types.js";
 
 const THIRTY_DAYS_MS = 30 * 24 * 60 * 60 * 1000;
 
@@ -64,9 +65,7 @@ export interface IssueSessionOptions {
   rememberMe: boolean;
   /** Username the rate limiter counted attempts under, to clear them. */
   rateLimitUsername?: string;
-  ssoProviderId?: number | null;
-  oidcSub?: string | null;
-  oidcSid?: string | null;
+  externalSession?: ExternalSessionRef | null;
   /** SSO logins keep desktop and mobile apps signed in for 30 days. */
   longLivedForApps?: boolean;
 }
@@ -93,9 +92,7 @@ export async function issueSession(
     rememberMe: options.rememberMe,
     deviceType: deviceInfo.type,
     deviceInfo: deviceInfo.deviceInfo,
-    oidcSub: options.oidcSub ?? null,
-    oidcSid: options.oidcSid ?? null,
-    ssoProviderId: options.ssoProviderId ?? null,
+    externalSession: options.externalSession ?? null,
   });
 
   if (options.rateLimitUsername) {
@@ -141,8 +138,6 @@ export async function issueSession(
       username: user.username,
       userId: user.id,
       is_external: isExternalAccount(user),
-      // 2.8 name, kept until 3.0.0.
-      is_oidc: !!user.isOidc,
       // Any second factor; the name is what 2.8 clients read.
       totp_enabled: await createCurrentUserAuthRepository().hasSecondFactor(
         user.id,
diff --git a/src/backend/auth/types.ts b/src/backend/auth/types.ts
index a618a305c..938c6d8f9 100644
--- a/src/backend/auth/types.ts
+++ b/src/backend/auth/types.ts
@@ -1,20 +1,24 @@
-import type { PluginVerifiedIdentity } from "@termix/plugin-sdk/backend";
+import type { PluginVerifiedIdentity } from "@termix-ssh/plugin-sdk/backend";
 
-export { LoginMethodError } from "@termix/plugin-sdk/backend";
+export { LoginMethodError } from "@termix-ssh/plugin-sdk/backend";
+
+/** The logout claims a login carried, stored as sessions.external_session_ref. */
+export interface ExternalSessionRef {
+  providerId?: number | null;
+  sub?: string | null;
+  sid?: string | null;
+}
 
 /** Extra fields core's own methods may set. Plugins never see these. */
 interface CoreIdentityExtras {
   /**
-   * The identifier string the user row carried before user_external_identities
-   * existed ("ldap:<provider>:<id>", "github:<provider>:<id>" or a bare OIDC
-   * subject). Found users get their identity row linked lazily; new users keep
-   * the column filled so older code that reads it still works.
+   * The identifier a 2.8 install kept for the user ("ldap:<provider>:<id>",
+   * "github:<provider>:<id>" or a bare OIDC subject). Only checked against
+   * the allowed-users list.
    */
   legacyIdentifier?: string;
-  /** SSO provider row the session came from, for back-channel logout. */
-  ssoProviderId?: number | null;
-  oidcSub?: string | null;
-  oidcSid?: string | null;
+  /** Kept on the session for an identity provider's back-channel logout. */
+  externalSession?: ExternalSessionRef | null;
   /** Provider group to role mapping, applied on every login. */
   roleSync?: { desired: string[]; managed: string[] };
   /** Shown when the user's data key cannot be unlocked by this method. */
@@ -30,8 +34,6 @@ export interface PendingLogin {
   userId: string;
   methodId: string;
   rememberMe: boolean;
-  ssoProviderId?: number | null;
-  oidcSub?: string | null;
-  oidcSid?: string | null;
+  externalSession?: ExternalSessionRef | null;
   createdAt: number;
 }
diff --git a/src/backend/boot.ts b/src/backend/boot.ts
index a3a73fb0e..04dd9bc98 100644
--- a/src/backend/boot.ts
+++ b/src/backend/boot.ts
@@ -65,17 +65,9 @@ export async function runCoreBootMigrations(): Promise<void> {
     await import("./utils/crypto-migration/private-shared-ssh-auth-migration.js");
   await runPrivateSharedSshAuthMigration();
 
-  const { runExternalIdentityMigration } =
-    await import("./upgrade/external-identity-migration.js");
-  await runExternalIdentityMigration();
-
-  const { runHostStatusConfigMigration } =
-    await import("./utils/crypto-migration/host-status-config-migration.js");
-  await runHostStatusConfigMigration();
-
-  const { runSshOptionsMigration } =
-    await import("./utils/crypto-migration/ssh-options-migration.js");
-  await runSshOptionsMigration();
+  const { runExternalAutoProvisionMigration } =
+    await import("./upgrade/external-auto-provision-migration.js");
+  await runExternalAutoProvisionMigration();
 
   const { runAuditNoiseCleanup } =
     await import("./upgrade/audit-noise-cleanup.js");
diff --git a/src/backend/database/database.ts b/src/backend/database/database.ts
index 7011ceaf1..3f7530abd 100644
--- a/src/backend/database/database.ts
+++ b/src/backend/database/database.ts
@@ -47,11 +47,19 @@ import "dotenv/config";
 import { databaseLogger, apiLogger } from "../utils/logger.js";
 import { getLocalVersion } from "../utils/app-version.js";
 import {
-  compareSemver,
   fetchGitHubAPI,
+  fetchLatestRelease,
+  isPrereleaseVersion,
   REPO_NAME,
   REPO_OWNER,
+  updateStatus,
 } from "../utils/latest-release.js";
+import {
+  getCoreChannel,
+  getStoredCoreChannel,
+  parseChannel,
+  setCoreChannel,
+} from "../updates/update-channel.js";
 import { AuthManager } from "../utils/auth-manager.js";
 import { DataCrypto } from "../utils/data-crypto.js";
 import { DatabaseFileEncryption } from "../utils/database-file-encryption.js";
@@ -73,6 +81,10 @@ import {
 } from "./repositories/factory.js";
 import { withCurrentSqliteForeignKeysDisabled } from "./repositories/sqlite-foreign-keys.js";
 import { applyPluginHostImportSettings } from "./routes/host-plugin-settings.js";
+import {
+  selectExportableSettings,
+  type SettingData,
+} from "../utils/export-settings.js";
 import {
   keepUsableProtocolCredentials,
   listProtocolLogins,
@@ -99,19 +111,9 @@ const requireAdmin = authManager.createAdminMiddleware();
 app.use(createCompressionMiddleware());
 app.use(createCorsMiddleware());
 
-type SettingData = {
-  key: string;
-  value: string;
-};
-
-function shouldExportSetting(key: string): boolean {
-  return !key.startsWith("reset_code_") && !key.startsWith("temp_reset_token_");
-}
-
-async function getExportableSettings(): Promise<SettingData[]> {
+async function getExportableSettings(isAdmin: boolean): Promise<SettingData[]> {
   const settingsRows = await createCurrentSettingsRepository().listAll();
-
-  return settingsRows.filter((setting) => shouldExportSetting(setting.key));
+  return selectExportableSettings(settingsRows, isAdmin);
 }
 
 function writeSettingsToExportDatabase(
@@ -242,7 +244,7 @@ app.get("/.well-known/acme-challenge/:token", acmeChallengeHandler);
  * /version:
  *   get:
  *     summary: Get version information
- *     description: Returns the running instance's version in localVersion. When the update check succeeds, remoteVersion is the latest GitHub release and version is its legacy alias, not the instance's version. Remote fields are omitted when the check is disabled, fails, or returns an unparseable release tag.
+ *     description: Returns the running instance's version in localVersion. When the update check succeeds, remoteVersion is the newest GitHub release on the instance's update channel and version is its legacy alias, not the instance's version. Remote fields are omitted when the check is disabled, fails, or returns an unparseable release tag.
  *     tags:
  *       - General
  *     parameters:
@@ -266,20 +268,24 @@ app.get("/.well-known/acme-challenge/:token", acmeChallengeHandler);
  *                 localVersion:
  *                   type: string
  *                   description: Version of the running instance. Use this field for client compatibility checks.
- *                   example: 2.7.1
+ *                   example: 26.10.0
  *                 status:
  *                   type: string
  *                   description: Update comparison result, update_check_disabled when explicitly disabled, or unknown when the remote lookup fails or the release tag cannot be parsed.
  *                   enum: [up_to_date, beta, requires_update, update_check_disabled, unknown]
+ *                 channel:
+ *                   type: string
+ *                   enum: [stable, beta]
+ *                   description: The update channel the check used. Always beta on a beta build.
  *                 remoteVersion:
  *                   type: string
- *                   description: Latest GitHub release version. Present only when the update check succeeds.
- *                   example: 2.8.0
+ *                   description: Newest release version on the channel. Present only when the update check succeeds.
+ *                   example: 26.10.0
  *                 version:
  *                   type: string
  *                   deprecated: true
  *                   description: Legacy alias of remoteVersion, not the running instance's version. Present only when the update check succeeds. Use localVersion for the instance or remoteVersion for the latest release.
- *                   example: 2.8.0
+ *                   example: 26.10.0
  *                 latest_release:
  *                   type: object
  *                   description: GitHub release metadata. Present only when the update check succeeds.
@@ -296,12 +302,8 @@ app.get("/.well-known/acme-challenge/:token", acmeChallengeHandler);
  *                     html_url:
  *                       type: string
  *                       format: uri
- *                 cached:
- *                   type: boolean
- *                   description: Whether the release lookup used a cached response. Present only when the update check succeeds.
- *                 cache_age:
- *                   type: number
- *                   description: Age of the cached response in milliseconds, when available.
+ *                     prerelease:
+ *                       type: boolean
  *       404:
  *         description: Local version not set.
  */
@@ -320,48 +322,31 @@ app.get("/version", authenticateJWT, async (req, res) => {
   }
 
   try {
-    const cacheKey = "latest_release";
-    const releaseData = await fetchGitHubAPI<GitHubRelease>(
-      `/repos/${REPO_OWNER}/${REPO_NAME}/releases/latest`,
-      cacheKey,
-    );
+    const channel = await getCoreChannel(localVersion);
+    const latest = await fetchLatestRelease(channel);
 
-    const rawTag = releaseData.data.tag_name || releaseData.data.name || "";
-    const remoteVersionMatch = rawTag.match(/(\d+\.\d+(\.\d+)?)/);
-    const remoteVersion = remoteVersionMatch ? remoteVersionMatch[1] : null;
-
-    if (!remoteVersion) {
+    if (!latest) {
       databaseLogger.warn("Remote version not found in GitHub response", {
         operation: "version_check",
-        rawTag,
+        channel,
       });
-      return res.json({ localVersion, status: "unknown" });
+      return res.json({ localVersion, status: "unknown", channel });
     }
 
-    const versionComparison = compareSemver(localVersion, remoteVersion);
-    const status =
-      versionComparison === null || versionComparison === 0
-        ? "up_to_date"
-        : versionComparison > 0
-          ? "beta"
-          : "requires_update";
-
-    const response = {
-      status,
-      localVersion: localVersion,
-      version: remoteVersion,
-      remoteVersion: remoteVersion,
+    res.json({
+      status: updateStatus(localVersion, latest.version),
+      channel,
+      localVersion,
+      version: latest.version,
+      remoteVersion: latest.version,
       latest_release: {
-        tag_name: releaseData.data.tag_name,
-        name: releaseData.data.name,
-        published_at: releaseData.data.published_at,
-        html_url: releaseData.data.html_url,
+        tag_name: latest.tagName,
+        name: latest.name,
+        published_at: latest.publishedAt,
+        html_url: latest.url,
+        prerelease: latest.prerelease,
       },
-      cached: releaseData.cached,
-      cache_age: releaseData.cache_age,
-    };
-
-    res.json(response);
+    });
   } catch (err) {
     databaseLogger.error("Version check failed", err, {
       operation: "version_check",
@@ -370,6 +355,122 @@ app.get("/version", authenticateJWT, async (req, res) => {
   }
 });
 
+/**
+ * @openapi
+ * /version/channel:
+ *   get:
+ *     summary: Get the update channel
+ *     description: Which Termix releases this instance is told about. A beta build always reports beta; stored is the admin's choice for stable builds.
+ *     tags:
+ *       - General
+ *     responses:
+ *       200:
+ *         description: The channel.
+ *         content:
+ *           application/json:
+ *             schema:
+ *               type: object
+ *               properties:
+ *                 channel:
+ *                   type: string
+ *                   enum: [stable, beta]
+ *                 stored:
+ *                   type: string
+ *                   enum: [stable, beta]
+ *                 runningBeta:
+ *                   type: boolean
+ *   put:
+ *     summary: Set the update channel
+ *     description: Admin only. Switches which Termix releases update checks and the Updates page offer. It does not change the running build.
+ *     tags:
+ *       - General
+ *     requestBody:
+ *       required: true
+ *       content:
+ *         application/json:
+ *           schema:
+ *             type: object
+ *             required: [channel]
+ *             properties:
+ *               channel:
+ *                 type: string
+ *                 enum: [stable, beta]
+ *     responses:
+ *       200:
+ *         description: The channel after the change.
+ *       400:
+ *         description: Not a known channel.
+ */
+app.get("/version/channel", authenticateJWT, async (_req, res) => {
+  try {
+    const localVersion = getLocalVersion();
+    res.json({
+      channel: await getCoreChannel(localVersion),
+      stored: await getStoredCoreChannel(),
+      runningBeta: isPrereleaseVersion(localVersion ?? undefined),
+    });
+  } catch (error) {
+    databaseLogger.error("Failed to read the update channel", error, {
+      operation: "update_channel",
+    });
+    res.status(500).json({ error: "Failed to read the update channel" });
+  }
+});
+
+app.put("/version/channel", requireAdmin, async (req, res) => {
+  const channel = parseChannel(req.body?.channel);
+  if (!channel) {
+    return res.status(400).json({ error: "channel must be stable or beta" });
+  }
+  try {
+    await setCoreChannel(channel);
+    const localVersion = getLocalVersion();
+    res.json({
+      channel: await getCoreChannel(localVersion),
+      stored: channel,
+      runningBeta: isPrereleaseVersion(localVersion ?? undefined),
+    });
+  } catch (error) {
+    databaseLogger.error("Failed to save the update channel", error, {
+      operation: "update_channel",
+    });
+    res.status(500).json({ error: "Failed to save the update channel" });
+  }
+});
+
+/**
+ * @openapi
+ * /version/releases:
+ *   get:
+ *     summary: Get the newest stable and beta releases
+ *     description: The newest stable Termix release and the newest beta, if one is newer than stable, for the Updates page.
+ *     tags:
+ *       - General
+ *     responses:
+ *       200:
+ *         description: The releases. Either may be null.
+ *       500:
+ *         description: GitHub could not be reached.
+ */
+app.get("/version/releases", authenticateJWT, async (_req, res) => {
+  try {
+    const [stable, newest] = await Promise.all([
+      fetchLatestRelease("stable"),
+      fetchLatestRelease("beta"),
+    ]);
+    res.json({
+      localVersion: getLocalVersion(),
+      stable,
+      beta: newest?.prerelease ? newest : null,
+    });
+  } catch (error) {
+    databaseLogger.error("Failed to read releases", error, {
+      operation: "version_releases",
+    });
+    res.status(500).json({ error: "Failed to read releases" });
+  }
+});
+
 /**
  * @openapi
  * /releases/rss:
@@ -630,15 +731,15 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
       return res.status(404).json({ error: "User not found" });
     }
 
-    const isOidcUser = !!user.isOidc;
+    const isExternalUser = !!user.isExternal;
 
     if (!DataCrypto.getUserDataKey(userId)) {
-      if (isOidcUser) {
-        const oidcUnlocked = await authManager.authenticateExternalUser(
+      if (isExternalUser) {
+        const externalUnlocked = await authManager.authenticateExternalUser(
           userId,
           deviceInfo.type,
         );
-        if (!oidcUnlocked) {
+        if (!externalUnlocked) {
           return res.status(403).json({
             error: "Failed to unlock user data with SSO credentials",
           });
@@ -699,17 +800,7 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
           id TEXT PRIMARY KEY,
           username TEXT NOT NULL,
           password_hash TEXT NOT NULL,
-          is_admin INTEGER NOT NULL DEFAULT 0,
-          is_oidc INTEGER NOT NULL DEFAULT 0,
-          oidc_identifier TEXT,
-          client_id TEXT,
-          client_secret TEXT,
-          issuer_url TEXT,
-          authorization_url TEXT,
-          token_url TEXT,
-          identifier_path TEXT,
-          name_path TEXT,
-          scopes TEXT DEFAULT 'openid email profile'
+          is_admin INTEGER NOT NULL DEFAULT 0
         );
 
         CREATE TABLE settings (
@@ -740,9 +831,7 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
           jump_hosts TEXT,
           status_check_enabled INTEGER NOT NULL DEFAULT 1,
           status_check_interval INTEGER,
-          terminal_config TEXT,
           ssh_options TEXT,
-          quick_actions TEXT,
           notes TEXT,
           use_socks5 INTEGER,
           socks5_host TEXT,
@@ -805,31 +894,21 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
 
       const userRecord = user;
       const insertUser = exportDb.prepare(`
-        INSERT INTO users (id, username, password_hash, is_admin, is_oidc, oidc_identifier, client_id, client_secret, issuer_url, authorization_url, token_url, identifier_path, name_path, scopes)
-        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+        INSERT INTO users (id, username, password_hash, is_admin)
+        VALUES (?, ?, ?, ?)
       `);
       insertUser.run(
         userRecord.id,
         userRecord.username,
         "[EXPORTED_USER_NO_PASSWORD]",
         userRecord.isAdmin ? 1 : 0,
-        userRecord.isOidc ? 1 : 0,
-        userRecord.oidcIdentifier || null,
-        userRecord.clientId || null,
-        userRecord.clientSecret || null,
-        userRecord.issuerUrl || null,
-        userRecord.authorizationUrl || null,
-        userRecord.tokenUrl || null,
-        userRecord.identifierPath || null,
-        userRecord.namePath || null,
-        userRecord.scopes || null,
       );
 
       const sshHosts =
         await createCurrentHostRepository().listDecryptedByUserId(userId);
       const insertHost = exportDb.prepare(`
-        INSERT INTO ssh_data (id, user_id, connection_type, name, ip, port, username, folder, tags, pin, auth_type, force_keyboard_interactive, password, key, key_password, key_type, sudo_password, credential_id, override_credential_username, jump_hosts, status_check_enabled, status_check_interval, terminal_config, ssh_options, quick_actions, notes, use_socks5, socks5_host, socks5_port, socks5_username, socks5_password, socks5_proxy_chain, port_knock_sequence, created_at, updated_at)
-        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+        INSERT INTO ssh_data (id, user_id, connection_type, name, ip, port, username, folder, tags, pin, auth_type, force_keyboard_interactive, password, key, key_password, key_type, sudo_password, credential_id, override_credential_username, jump_hosts, status_check_enabled, status_check_interval, ssh_options, notes, use_socks5, socks5_host, socks5_port, socks5_username, socks5_password, socks5_proxy_chain, port_knock_sequence, created_at, updated_at)
+        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
       `);
 
       for (const decrypted of sshHosts) {
@@ -856,9 +935,7 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
           decrypted.jumpHosts || null,
           decrypted.statusCheckEnabled === false ? 0 : 1,
           decrypted.statusCheckInterval ?? null,
-          decrypted.terminalConfig || null,
           decrypted.sshOptions || null,
-          decrypted.quickActions || null,
           decrypted.notes || null,
           decrypted.useSocks5 ? 1 : 0,
           decrypted.socks5Host || null,
@@ -964,7 +1041,10 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
         );
       }
 
-      writeSettingsToExportDatabase(exportDb, await getExportableSettings());
+      writeSettingsToExportDatabase(
+        exportDb,
+        await getExportableSettings(!!user.isAdmin),
+      );
       await writeHostDefaultsToExport(exportDb, userId);
     } finally {
       exportDb.close();
@@ -1074,15 +1154,15 @@ app.post(
         return res.status(404).json({ error: "User not found" });
       }
 
-      const isOidcUser = !!userRecord.isOidc;
+      const isExternalUser = !!userRecord.isExternal;
 
       if (!DataCrypto.getUserDataKey(userId)) {
-        if (isOidcUser) {
-          const oidcUnlocked = await authManager.authenticateExternalUser(
+        if (isExternalUser) {
+          const externalUnlocked = await authManager.authenticateExternalUser(
             userId,
             deviceInfo.type,
           );
-          if (!oidcUnlocked) {
+          if (!externalUnlocked) {
             return res.status(403).json({
               error: "Failed to unlock user data with SSO credentials",
             });
@@ -1198,7 +1278,6 @@ app.post(
                   ),
                   jumpHosts: host.jump_hosts,
                   ...legacyStatusCheck(host),
-                  terminalConfig: host.terminal_config,
                   // Exports from before 2.9.0 carry these in terminal_config.
                   sshOptions:
                     host.ssh_options ??
@@ -1206,7 +1285,6 @@ app.post(
                       terminalConfig: host.terminal_config,
                     }) ??
                     null,
-                  quickActions: host.quick_actions,
                   notes: host.notes,
                   useSocks5: Boolean(host.use_socks5),
                   socks5Host: host.socks5_host,
diff --git a/src/backend/database/db/connect.ts b/src/backend/database/db/connect.ts
index 450704081..91213dd47 100644
--- a/src/backend/database/db/connect.ts
+++ b/src/backend/database/db/connect.ts
@@ -50,7 +50,7 @@ export function sslOption(
 /**
  * Opens a connection to a client-server engine.
  *
- * SQLite is not handled here — it has its own lifecycle in db/index.ts, where
+ * SQLite is not handled here, it has its own lifecycle in db/index.ts, where
  * the database is decrypted into memory and serialised back to a file. This
  * covers the engines that connect to something already running.
  *
@@ -109,7 +109,7 @@ export async function connectRemoteDatabase(
 
   // No `schema` option: it only feeds drizzle's relational query API
   // (`db.query.*`), which nothing here uses. The query builder takes its table
-  // names and value encoders from the table objects the repositories import —
+  // names and value encoders from the table objects the repositories import,
   // see the note in schema.pg.ts on why the generated schemas are DDL-only.
   if (dialect === "postgres") {
     const { drizzle } = await import("drizzle-orm/node-postgres");
@@ -119,7 +119,7 @@ export async function connectRemoteDatabase(
   }
 
   // mysql2 names the pool limit differently and wants no `ssl` key at all when
-  // TLS is off — passing false is not the same as omitting it.
+  // TLS is off, passing false is not the same as omitting it.
   const { drizzle } = await import("drizzle-orm/mysql2");
   return drizzle({
     connection: {
diff --git a/src/backend/database/db/dialect.ts b/src/backend/database/db/dialect.ts
index 171017b56..c8b0b149f 100644
--- a/src/backend/database/db/dialect.ts
+++ b/src/backend/database/db/dialect.ts
@@ -42,7 +42,7 @@ export function resolveDatabaseDialect(
  *
  * SQLite here is an in-memory database serialised back to an encrypted file, so
  * every write needs a trigger to flush it. Client-server engines have already
- * durably committed by the time the query returns — there is no file to write
+ * durably committed by the time the query returns, there is no file to write
  * and nothing to schedule.
  */
 export function needsExplicitPersist(dialect: DatabaseDialect): boolean {
diff --git a/src/backend/database/db/index.ts b/src/backend/database/db/index.ts
index 509545c89..431e3c1db 100644
--- a/src/backend/database/db/index.ts
+++ b/src/backend/database/db/index.ts
@@ -1,4 +1,4 @@
-import { repairSnippetsNoteColumn } from "../../upgrade/snippets-schema-migration.js";
+import { repairSnippetsColumns } from "../../upgrade/snippets-schema-migration.js";
 import { getErrorMessage } from "../../utils/error-message.js";
 import { drizzle } from "drizzle-orm/better-sqlite3";
 import Database from "better-sqlite3";
@@ -24,6 +24,16 @@ import { resolveDatabaseDialect, type DatabaseDialect } from "./dialect.js";
 import { SYSTEM_ROLE_DEFAULTS } from "../../utils/permission-catalog.js";
 import { connectRemoteDatabase } from "./connect.js";
 import { runRemoteMigrations } from "./migrate.js";
+import { assertNotPre29Database } from "./upgrade-guard.js";
+import {
+  LEGACY_USERNAME_PLACEHOLDER_UPDATES,
+  legacySudoMoves,
+  RETIRED_COLUMNS,
+  RETIRED_SETTINGS,
+  REMOTE_RETIRED_COLUMNS,
+  type LegacySudoRow,
+} from "./retired-columns.js";
+import { sql, type SQL } from "drizzle-orm";
 import type { PortableDatabase } from "../repositories/database-context.js";
 
 const dataDir = process.env.DATA_DIR || "./db/data";
@@ -217,24 +227,22 @@ async function initializeCompleteDatabase(): Promise<void> {
 
   db = drizzle(sqlite, { schema });
 
+  await assertNotPre29Database(
+    (name) =>
+      !!sqlite
+        .prepare(
+          "SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = ?",
+        )
+        .get(name),
+  );
+
   sqlite.exec(`
     CREATE TABLE IF NOT EXISTS users (
         id TEXT PRIMARY KEY,
         username TEXT NOT NULL,
         password_hash TEXT NOT NULL,
         is_admin INTEGER NOT NULL DEFAULT 0,
-        is_oidc INTEGER NOT NULL DEFAULT 0,
-        oidc_identifier TEXT,
-        client_id TEXT,
-        client_secret TEXT,
-        issuer_url TEXT,
-        authorization_url TEXT,
-        token_url TEXT,
-        identifier_path TEXT,
-        name_path TEXT,
-        scopes TEXT DEFAULT 'openid email profile',
-        registered_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-        donation_modal_dismissed INTEGER NOT NULL DEFAULT 0
+        registered_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
     );
 
     CREATE TABLE IF NOT EXISTS settings (
@@ -308,7 +316,6 @@ async function initializeCompleteDatabase(): Promise<void> {
         force_keyboard_interactive TEXT,
         status_check_enabled INTEGER NOT NULL DEFAULT 1,
         status_check_interval INTEGER,
-        terminal_config TEXT,
         notes TEXT,
         use_socks5 INTEGER,
         socks5_host TEXT,
@@ -357,12 +364,10 @@ async function initializeCompleteDatabase(): Promise<void> {
         name TEXT NOT NULL,
         color TEXT,
         icon TEXT,
-        credential_id INTEGER,
         sort_order INTEGER,
         created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
         updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
-        FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE,
-        FOREIGN KEY (credential_id) REFERENCES ssh_credentials (id) ON DELETE SET NULL
+        FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
     );
 
     CREATE TABLE IF NOT EXISTS recent_activity (
@@ -502,6 +507,8 @@ async function initializeCompleteDatabase(): Promise<void> {
         installed_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
         updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
         auto_update INTEGER NOT NULL DEFAULT 0,
+        pinned_version TEXT,
+        channel TEXT NOT NULL DEFAULT 'stable',
         manifest_json TEXT NOT NULL
     );
     CREATE INDEX IF NOT EXISTS idx_plugins_registry_id ON plugins (registry_id);
@@ -672,6 +679,14 @@ async function initializeCompleteDatabase(): Promise<void> {
     });
   }
 
+  // 2.9.1 added this fix, so a 2.9.0 install has not run it yet. It reads the
+  // column migrateSchema drops.
+  if (columnNames("users").includes("oidc_identifier")) {
+    const { runSsoLegacyIdentityMigration } =
+      await import("../../upgrade/sso-legacy-identity-migration.js");
+    await runSsoLegacyIdentityMigration();
+  }
+
   migrateSchema();
   vacuumIfFreelistBloated();
 
@@ -782,14 +797,142 @@ const relaxPluginGrantGrantedBy = () => {
   }
 };
 
+const columnNames = (table: string): string[] =>
+  (
+    sqlite.prepare(`PRAGMA table_info(${table})`).all() as Array<{
+      name: string;
+    }>
+  ).map((col) => col.name);
+
+/**
+ * ssh_folders.credential_id became the folder's auth default. It carries a
+ * foreign key, which ALTER TABLE DROP COLUMN refuses, so the table is rebuilt.
+ */
+const dropFolderCredentialColumn = () => {
+  const columns = columnNames("ssh_folders");
+  if (!columns.includes("credential_id")) return;
+
+  const kept = [
+    "id",
+    "user_id",
+    "name",
+    "color",
+    "icon",
+    "sort_order",
+    "sync_id",
+    "local_only",
+    "created_at",
+    "updated_at",
+  ].filter((name) => columns.includes(name));
+  const list = kept.map((name) => `"${name}"`).join(", ");
+
+  sqlite.exec("PRAGMA foreign_keys = OFF");
+  try {
+    sqlite.exec(`
+      BEGIN;
+      CREATE TABLE ssh_folders_new (
+          id INTEGER PRIMARY KEY AUTOINCREMENT,
+          user_id TEXT NOT NULL,
+          name TEXT NOT NULL,
+          color TEXT,
+          icon TEXT,
+          sort_order INTEGER,
+          sync_id TEXT,
+          local_only INTEGER NOT NULL DEFAULT 0,
+          created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+          updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+          FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
+      );
+      INSERT INTO ssh_folders_new (${list}) SELECT ${list} FROM ssh_folders;
+      DROP TABLE ssh_folders;
+      ALTER TABLE ssh_folders_new RENAME TO ssh_folders;
+      CREATE UNIQUE INDEX IF NOT EXISTS idx_ssh_folders_sync_id ON ssh_folders(sync_id);
+      COMMIT;
+    `);
+  } catch (error) {
+    if (sqlite.inTransaction) sqlite.exec("ROLLBACK");
+    databaseLogger.warn("Failed to drop ssh_folders.credential_id", {
+      operation: "schema_migration",
+      error: getErrorMessage(error),
+    });
+  } finally {
+    sqlite.exec("PRAGMA foreign_keys = ON");
+  }
+};
+
+const moveLegacySudoPasswords = () => {
+  if (!columnNames("ssh_data").includes("terminal_config")) return;
+  try {
+    const rows = sqlite
+      .prepare(
+        "SELECT id, terminal_config, sudo_password FROM ssh_data WHERE terminal_config LIKE '%sudoPassword%'",
+      )
+      .all() as LegacySudoRow[];
+    const update = sqlite.prepare(
+      "UPDATE ssh_data SET sudo_password = ? WHERE id = ?",
+    );
+    for (const move of legacySudoMoves(rows)) {
+      update.run(move.sudoPassword, move.id);
+    }
+  } catch (error) {
+    databaseLogger.warn("Failed to move legacy sudo passwords", {
+      operation: "schema_migration",
+      error: getErrorMessage(error),
+    });
+  }
+};
+
+const dropRetiredColumns = () => {
+  moveLegacySudoPasswords();
+  for (const [table, retired] of Object.entries(RETIRED_COLUMNS)) {
+    const columns = new Set(columnNames(table));
+    for (const column of retired) {
+      if (!columns.has(column)) continue;
+      try {
+        sqlite.exec(`ALTER TABLE ${table} DROP COLUMN "${column}"`);
+      } catch (error) {
+        databaseLogger.warn(`Failed to drop ${table}.${column}`, {
+          operation: "schema_migration",
+          error: getErrorMessage(error),
+        });
+      }
+    }
+  }
+  dropFolderCredentialColumn();
+
+  // 2.8 spelled $external.username as $oidc.preferred_username.
+  for (const statement of LEGACY_USERNAME_PLACEHOLDER_UPDATES) {
+    try {
+      sqlite.exec(statement);
+    } catch (error) {
+      databaseLogger.warn("Failed to rename a legacy username placeholder", {
+        operation: "schema_migration",
+        error: getErrorMessage(error),
+      });
+    }
+  }
+
+  try {
+    sqlite
+      .prepare(
+        `DELETE FROM settings WHERE key IN (${RETIRED_SETTINGS.map(() => "?").join(", ")})`,
+      )
+      .run(...RETIRED_SETTINGS);
+  } catch (error) {
+    databaseLogger.warn("Failed to delete retired settings", {
+      operation: "schema_migration",
+      error: getErrorMessage(error),
+    });
+  }
+};
+
 const migrateSchema = () => {
-  repairSnippetsNoteColumn(sqlite);
+  repairSnippetsColumns(sqlite);
   addColumnIfNotExists("user_preferences", "theme", "TEXT");
   addColumnIfNotExists("user_preferences", "font_size", "TEXT");
   addColumnIfNotExists("user_preferences", "accent_color", "TEXT");
   addColumnIfNotExists("user_preferences", "language", "TEXT");
   addColumnIfNotExists("user_preferences", "storage_mode", "TEXT");
-  addColumnIfNotExists("user_preferences", "command_autocomplete", "INTEGER");
   addColumnIfNotExists("user_preferences", "command_palette_enabled", "INTEGER");
   addColumnIfNotExists("user_preferences", "show_host_tags", "INTEGER");
   addColumnIfNotExists("user_preferences", "host_tray_on_click", "INTEGER");
@@ -805,31 +948,15 @@ const migrateSchema = () => {
     "INTEGER",
   );
   addColumnIfNotExists("user_preferences", "folders_collapsed", "INTEGER");
-  addColumnIfNotExists("user_preferences", "confirm_snippet_execution", "INTEGER");
   addColumnIfNotExists("user_preferences", "disable_update_check", "INTEGER");
   addColumnIfNotExists("user_preferences", "confirm_tab_close", "INTEGER");
   addColumnIfNotExists("user_preferences", "hidden_rail_tabs", "TEXT");
   addColumnIfNotExists("user_preferences", "compact_host_view", "INTEGER");
   addColumnIfNotExists("user_preferences", "status_color_scheme", "TEXT");
-  addColumnIfNotExists("user_preferences", "custom_themes", "TEXT");
   addColumnIfNotExists("user_preferences", "custom_keybindings", "TEXT");
-  addColumnIfNotExists("user_preferences", "terminal_defaults", "TEXT");
-  addColumnIfNotExists("user_preferences", "terminal_macros", "TEXT");
 
   addColumnIfNotExists("users", "is_admin", "INTEGER NOT NULL DEFAULT 0");
 
-  addColumnIfNotExists("users", "is_oidc", "INTEGER NOT NULL DEFAULT 0");
-  addColumnIfNotExists("users", "oidc_identifier", "TEXT");
-  addColumnIfNotExists("users", "client_id", "TEXT");
-  addColumnIfNotExists("users", "client_secret", "TEXT");
-  addColumnIfNotExists("users", "issuer_url", "TEXT");
-  addColumnIfNotExists("users", "authorization_url", "TEXT");
-  addColumnIfNotExists("users", "token_url", "TEXT");
-
-  addColumnIfNotExists("users", "identifier_path", "TEXT");
-  addColumnIfNotExists("users", "name_path", "TEXT");
-  addColumnIfNotExists("users", "scopes", "TEXT");
-
   const hadRegisteredAtColumn = (() => {
     try {
       sqlite.prepare(`SELECT "registered_at" FROM users LIMIT 1`).get();
@@ -842,9 +969,7 @@ const migrateSchema = () => {
   // CURRENT_TIMESTAMP, so the column is added empty and backfilled below.
   addColumnIfNotExists("users", "registered_at", "TEXT");
   if (!hadRegisteredAtColumn) {
-    // Pre-existing users are backdated past the 30 day mark so they see the
-    // donation modal immediately on upgrade instead of waiting a fresh
-    // 30 days as if they had just registered.
+    // Pre-existing users get a date in the past, since their real one is unknown.
     try {
       sqlite.exec(
         `UPDATE users SET registered_at = datetime('now', '-31 days') WHERE registered_at IS NULL`,
@@ -872,15 +997,7 @@ const migrateSchema = () => {
       );
     }
   }
-  addColumnIfNotExists(
-    "users",
-    "donation_modal_dismissed",
-    "INTEGER NOT NULL DEFAULT 0",
-  );
-
-  addColumnIfNotExists("sessions", "oidc_sub", "TEXT");
-  addColumnIfNotExists("sessions", "oidc_sid", "TEXT");
-  addColumnIfNotExists("sessions", "sso_provider_id", "INTEGER");
+  addColumnIfNotExists("sessions", "external_session_ref", "TEXT");
 
   addColumnIfNotExists("ssh_data", "name", "TEXT");
   addColumnIfNotExists("ssh_data", "folder", "TEXT");
@@ -926,8 +1043,6 @@ const migrateSchema = () => {
     "INTEGER NOT NULL DEFAULT 1",
   );
   addColumnIfNotExists("ssh_data", "status_check_interval", "INTEGER");
-  addColumnIfNotExists("ssh_data", "terminal_config", "TEXT");
-  addColumnIfNotExists("ssh_data", "quick_actions", "TEXT");
 
   addColumnIfNotExists("ssh_data", "connection_type", 'TEXT NOT NULL DEFAULT "ssh"');
   addColumnIfNotExists("ssh_data", "domain", "TEXT");
@@ -979,7 +1094,7 @@ const migrateSchema = () => {
       // Derive the replacement table from the live definition instead of
       // restating it here. The table keeps gaining columns (cert_public_key,
       // pin, sort_order, sync_id, ...), and a second copy of the column list
-      // falls behind every time one is added — leaving the copy narrower than
+      // falls behind every time one is added, leaving the copy narrower than
       // the table, so the INSERT below fails and the constraint stays put.
       const createSql = sqlite
         .prepare("SELECT sql FROM sqlite_master WHERE type = 'table' AND name = 'ssh_credentials'")
@@ -1145,19 +1260,6 @@ const migrateSchema = () => {
     });
   }
 
-  try {
-    sqlite.prepare("SELECT credential_id FROM ssh_folders LIMIT 1").get();
-  } catch {
-    try {
-      sqlite.exec("ALTER TABLE ssh_folders ADD COLUMN credential_id INTEGER REFERENCES ssh_credentials(id) ON DELETE SET NULL");
-    } catch (alterError) {
-      databaseLogger.warn("Failed to add credential_id column to ssh_folders", {
-        operation: "schema_migration",
-        error: alterError,
-      });
-    }
-  }
-
   try {
     sqlite.prepare("SELECT sudo_password FROM ssh_data LIMIT 1").get();
   } catch {
@@ -1177,7 +1279,6 @@ const migrateSchema = () => {
     { column: "override_credential_username", sql: "ALTER TABLE ssh_data ADD COLUMN override_credential_username INTEGER" },
     { column: "share_ssh_auth", sql: "ALTER TABLE ssh_data ADD COLUMN share_ssh_auth INTEGER NOT NULL DEFAULT 0" },
     { column: "jump_hosts", sql: "ALTER TABLE ssh_data ADD COLUMN jump_hosts TEXT" },
-    { column: "quick_actions", sql: "ALTER TABLE ssh_data ADD COLUMN quick_actions TEXT" },
     { column: "socks5_proxy_chain", sql: "ALTER TABLE ssh_data ADD COLUMN socks5_proxy_chain TEXT" },
     { column: "host_key_fingerprint", sql: "ALTER TABLE ssh_data ADD COLUMN host_key_fingerprint TEXT" },
     { column: "host_key_type", sql: "ALTER TABLE ssh_data ADD COLUMN host_key_type TEXT" },
@@ -1459,76 +1560,6 @@ const migrateSchema = () => {
     });
   }
 
-  addColumnIfNotExists("users", "sso_provider_id", "INTEGER");
-
-  try {
-    const usersTableInfo = sqlite.prepare("PRAGMA table_info(users)").all() as Array<{
-      cid: number;
-      name: string;
-      type: string;
-      notnull: number;
-      dflt_value: string | null;
-      pk: number;
-    }>;
-    const legacyNotNullColumns = new Set([
-      "client_id",
-      "client_secret",
-      "issuer_url",
-      "authorization_url",
-      "token_url",
-      "identifier_path",
-      "name_path",
-      "scopes",
-    ]);
-    const hasStaleNotNull = usersTableInfo.some(
-      (col) => legacyNotNullColumns.has(col.name) && col.notnull === 1,
-    );
-
-    if (hasStaleNotNull) {
-      const tempTableName = "users_temp_migration";
-      const columnDefs = usersTableInfo
-        .map((col) => {
-          const parts = [`"${col.name}"`, col.type || "TEXT"];
-          if (col.pk === 1) parts.push("PRIMARY KEY");
-          if (col.notnull === 1 && !legacyNotNullColumns.has(col.name)) {
-            parts.push("NOT NULL");
-          }
-          if (col.dflt_value !== null) {
-            parts.push(`DEFAULT ${col.dflt_value}`);
-          }
-          return parts.join(" ");
-        })
-        .join(",\n          ");
-      const allColumns = usersTableInfo.map((col) => `"${col.name}"`).join(", ");
-
-      sqlite.exec(`PRAGMA foreign_keys = OFF`);
-      sqlite.exec(`
-        CREATE TABLE ${tempTableName} (
-          ${columnDefs}
-        );
-
-        INSERT INTO ${tempTableName} SELECT ${allColumns} FROM users;
-
-        DROP TABLE users;
-
-        ALTER TABLE ${tempTableName} RENAME TO users;
-      `);
-      sqlite.exec(`PRAGMA foreign_keys = ON`);
-
-      databaseLogger.info(
-        "Successfully migrated users table to remove legacy OIDC NOT NULL constraints",
-        {
-          operation: "schema_migration_users_oidc_nullable",
-        },
-      );
-    }
-  } catch (migrationError) {
-    databaseLogger.warn("Failed to migrate users table legacy OIDC columns", {
-      operation: "schema_migration",
-      error: migrationError,
-    });
-  }
-
   // --- alerts begin ---
   // alert_rules, alert_rule_channels and alert_firings were only ever created
   // here, never declared in schema.ts, so they never existed on Postgres or
@@ -1567,6 +1598,8 @@ const migrateSchema = () => {
   // Plugin runtime: lastError reports why a plugin is blocked or failed, and
   // grants record whether a capability came from an admin or from bundling.
   addColumnIfNotExists("plugins", "last_error", "TEXT");
+  addColumnIfNotExists("plugins", "pinned_version", "TEXT");
+  addColumnIfNotExists("plugins", "channel", "TEXT NOT NULL DEFAULT 'stable'");
   addColumnIfNotExists(
     "plugin_permission_grants",
     "source",
@@ -1686,6 +1719,8 @@ const migrateSchema = () => {
   // they referenced, which defeats the point of keeping them.
   migrateAuditRetention(sqlite);
 
+  dropRetiredColumns();
+
   // Runs last so every table and column added above already exists.
   createPerformanceIndexes(sqlite);
 
@@ -1832,6 +1867,94 @@ async function initializeDatabase(): Promise<void> {
  * synchronously, which better-sqlite3 allows and no remote driver does, so the
  * table is loaded once here before anything asks for it.
  */
+function resultRows<T>(result: unknown): T[] {
+  // node-postgres returns { rows }, mysql2 returns [rows, fields].
+  if (Array.isArray(result)) return result[0] as T[];
+  return ((result as { rows?: unknown[] }).rows ?? []) as T[];
+}
+
+async function moveRemoteLegacySudoPasswords(remote: {
+  execute: (query: SQL) => Promise<unknown>;
+}): Promise<void> {
+  let rows: LegacySudoRow[];
+  try {
+    rows = resultRows<LegacySudoRow>(
+      await remote.execute(
+        sql`SELECT id, terminal_config, sudo_password FROM ssh_data WHERE terminal_config LIKE '%sudoPassword%'`,
+      ),
+    );
+  } catch {
+    // A database created after the column left never had it.
+    return;
+  }
+  for (const move of legacySudoMoves(rows)) {
+    await remote.execute(
+      sql`UPDATE ssh_data SET sudo_password = ${move.sudoPassword} WHERE id = ${move.id}`,
+    );
+  }
+}
+
+/**
+ * The columns 2.9.0 left in place without a drizzle migration, so drizzle no
+ * longer knows them. Dropped by hand, only where they still exist.
+ */
+async function dropRemoteRetired(
+  dialect: Exclude<DatabaseDialect, "sqlite">,
+  remote: { execute: (query: SQL) => Promise<unknown> },
+): Promise<void> {
+  const tables = Object.keys(REMOTE_RETIRED_COLUMNS);
+  const schema =
+    dialect === "postgres" ? sql`current_schema()` : sql`DATABASE()`;
+  let present: Array<{ table_name: string; column_name: string }> = [];
+  try {
+    present = resultRows(
+      await remote.execute(
+        sql`SELECT table_name AS table_name, column_name AS column_name FROM information_schema.columns WHERE table_schema = ${schema} AND table_name IN (${sql.join(
+          tables.map((table) => sql`${table}`),
+          sql`, `,
+        )})`,
+      ),
+    );
+  } catch (error) {
+    databaseLogger.warn("Could not list retired columns", {
+      operation: "schema_migration",
+      error: getErrorMessage(error),
+    });
+    return;
+  }
+  const existing = new Set(
+    present.map((row) => `${row.table_name}.${row.column_name}`),
+  );
+  for (const [table, columns] of Object.entries(REMOTE_RETIRED_COLUMNS)) {
+    for (const column of columns) {
+      if (!existing.has(`${table}.${column}`)) continue;
+      try {
+        await remote.execute(
+          sql`ALTER TABLE ${sql.identifier(table)} DROP COLUMN ${sql.identifier(column)}`,
+        );
+      } catch (error) {
+        databaseLogger.warn(`Failed to drop ${table}.${column}`, {
+          operation: "schema_migration",
+          error: getErrorMessage(error),
+        });
+      }
+    }
+  }
+  try {
+    await remote.execute(
+      sql`DELETE FROM settings WHERE ${sql.identifier("key")} IN (${sql.join(
+        RETIRED_SETTINGS.map((key) => sql`${key}`),
+        sql`, `,
+      )})`,
+    );
+  } catch (error) {
+    databaseLogger.warn("Failed to delete retired settings", {
+      operation: "schema_migration",
+      error: getErrorMessage(error),
+    });
+  }
+}
+
 async function initializeRemoteDatabase(
   dialect: Exclude<DatabaseDialect, "sqlite">,
 ): Promise<void> {
@@ -1841,7 +1964,26 @@ async function initializeRemoteDatabase(
   });
 
   db = await connectRemoteDatabase(dialect);
+  const remote = db as unknown as { execute: (query: SQL) => Promise<unknown> };
+  await assertNotPre29Database(async (name) => {
+    try {
+      await remote.execute(sql`SELECT 1 FROM ${sql.identifier(name)} WHERE 1 = 0`);
+      return true;
+    } catch {
+      return false;
+    }
+  });
+  await moveRemoteLegacySudoPasswords(remote);
+  try {
+    await remote.execute(sql`SELECT oidc_identifier FROM users WHERE 1 = 0`);
+    const { runSsoLegacyIdentityMigration } =
+      await import("../../upgrade/sso-legacy-identity-migration.js");
+    await runSsoLegacyIdentityMigration();
+  } catch {
+    // The column is gone: the move ran before it was dropped.
+  }
   await runRemoteMigrations(dialect, db);
+  await dropRemoteRetired(dialect, remote);
 
   // Imported here rather than at the top: factory.ts imports getDb from this
   // module, and a static import would close the cycle at module-load time.
@@ -1957,7 +2099,7 @@ export function getSqlite(): Database.Database {
     if (dialect !== "sqlite") {
       throw new Error(
         `No SQLite handle: DATABASE_DIALECT is "${dialect}". This caller needs a ` +
-          `synchronous query, which only SQLite offers — give it an async path instead.`,
+          `synchronous query, which only SQLite offers. Give it an async path instead.`,
       );
     }
     throw new Error(
diff --git a/src/backend/database/db/migrate.ts b/src/backend/database/db/migrate.ts
index 57d999124..86f32f393 100644
--- a/src/backend/database/db/migrate.ts
+++ b/src/backend/database/db/migrate.ts
@@ -25,7 +25,7 @@ export function migrationsFolder(
  * Brings a remote database up to the current schema.
  *
  * drizzle's migrator records what it has applied in its own table, so this is
- * safe to run on every start — including against a database another instance
+ * safe to run on every start, including against a database another instance
  * already migrated.
  */
 export async function runRemoteMigrations(
diff --git a/src/backend/database/db/retired-columns.ts b/src/backend/database/db/retired-columns.ts
new file mode 100644
index 000000000..59f1806ae
--- /dev/null
+++ b/src/backend/database/db/retired-columns.ts
@@ -0,0 +1,178 @@
+/**
+ * What 26.10.0 removes that 2.9.0 kept so a downgrade to 2.8 lost nothing.
+ * Every 2.9 boot copied it into plugin settings, and the upgrade guard only
+ * opens a database 2.9 has seen.
+ *
+ * Kept on purpose: columns a move only reads once the owner's data key opens
+ * at a password login (users.totp_*, the rdp, vnc and telnet logins and
+ * domain), so a user who never signed in to 2.9 still gets them, and
+ * ssh_data.vault_profile_id, whose foreign key SQLite cannot drop in place.
+ */
+
+/** Columns drizzle never knew were removed, dropped by hand on every engine. */
+export const REMOTE_RETIRED_COLUMNS: Record<string, string[]> = {
+  ssh_data: [
+    "allow_session_sharing",
+    "autostart_key",
+    "autostart_key_password",
+    "autostart_password",
+    "default_path",
+    "docker_config",
+    "enable_ai_assistant",
+    "enable_command_history",
+    "enable_docker",
+    "enable_file_manager",
+    "enable_proxmox",
+    "enable_proxmox_stats",
+    "enable_rdp",
+    "enable_session_logging",
+    "enable_telnet",
+    "enable_terminal",
+    "enable_terminal_toolbar",
+    "enable_tmux_monitor",
+    "enable_tunnel",
+    "enable_vnc",
+    "enable_web_ui",
+    "guacamole_config",
+    "ignore_cert",
+    "mac_address",
+    "proxmox_config",
+    "proxmox_stats_config",
+    "rdp_ignore_cert",
+    "rdp_port",
+    "rdp_security",
+    "scp_legacy",
+    "security",
+    "show_docker_in_sidebar",
+    "show_file_manager_in_sidebar",
+    "show_server_stats_in_sidebar",
+    "show_terminal_in_sidebar",
+    "show_tunnel_in_sidebar",
+    "stats_config",
+    "telnet_port",
+    "tunnel_connections",
+    "use_warpgate",
+    "vnc_port",
+    "web_ui_config",
+    "wol_broadcast_address",
+  ],
+  user_preferences: [
+    "ai_assistant_enabled",
+    "ai_read_only_commands",
+    "rdp_defaults",
+  ],
+};
+
+/** Everything SQLite drops; the first part the drizzle migrations drop too. */
+export const RETIRED_COLUMNS: Record<string, string[]> = {
+  users: [
+    "is_oidc",
+    "oidc_identifier",
+    "sso_provider_id",
+    "client_id",
+    "client_secret",
+    "issuer_url",
+    "authorization_url",
+    "token_url",
+    "identifier_path",
+    "name_path",
+    "scopes",
+    "donation_modal_dismissed",
+  ],
+  sessions: ["oidc_sub", "oidc_sid", "sso_provider_id"],
+  user_preferences: [
+    "command_autocomplete",
+    "terminal_defaults",
+    "custom_themes",
+    "confirm_snippet_execution",
+    "terminal_macros",
+    ...REMOTE_RETIRED_COLUMNS.user_preferences,
+  ],
+  ssh_data: [
+    "terminal_config",
+    "quick_actions",
+    ...REMOTE_RETIRED_COLUMNS.ssh_data,
+  ],
+};
+
+/** Settings rows the plugins copied, and the markers of the copies. */
+export const RETIRED_SETTINGS = [
+  "host_defaults",
+  "analytics_enabled",
+  "analytics_instance_id",
+  "terminal_session_timeout_minutes",
+  "terminal_session_persistence_enabled",
+  "command_history_enabled",
+  "touch_input_settings",
+  "terminal_image_storage_mode",
+  "terminal_image_local_dir",
+  "terminal_image_host_path",
+  "terminal_image_ttl_ms",
+  "terminal_image_max_count",
+  "terminal_image_max_storage_bytes",
+  "session_sharing_globally_enabled",
+  "guac_enabled",
+  "guac_url",
+  "step_ca_url",
+  "step_ca_fingerprint",
+  "step_ca_provisioner",
+  "step_ca_private_endpoint_allowlist",
+  "acme_ssl_settings",
+  "global_metrics_interval",
+  "metrics_history_retention_days",
+  "tailscale_api_base_url",
+  "tailscale_api_key",
+  "ai_globally_enabled",
+  "ai_private_endpoint_allowlist",
+  "oidc_silent_login_default",
+  "host_status_config_migrated",
+];
+
+/**
+ * 2.8 editors kept a host's sudo password inside terminal_config, and 2.9
+ * still read it from there. Before the column goes it is copied into
+ * sudo_password, as plaintext, which the field encryption reads as it is
+ * and encrypts on the next save.
+ */
+export function legacySudoPassword(terminalConfig: unknown): string | null {
+  let parsed = terminalConfig;
+  try {
+    while (typeof parsed === "string") parsed = JSON.parse(parsed);
+  } catch {
+    return null;
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    return null;
+  }
+  const value = (parsed as { sudoPassword?: unknown }).sudoPassword;
+  return typeof value === "string" && value ? value : null;
+}
+
+export interface LegacySudoRow {
+  id: number;
+  terminal_config: unknown;
+  sudo_password: unknown;
+}
+
+/** The hosts whose sudo password still only lives in terminal_config. */
+export function legacySudoMoves(
+  rows: LegacySudoRow[],
+): Array<{ id: number; sudoPassword: string }> {
+  return rows.flatMap((row) => {
+    if (row.sudo_password) return [];
+    const sudoPassword = legacySudoPassword(row.terminal_config);
+    return sudoPassword ? [{ id: Number(row.id), sudoPassword }] : [];
+  });
+}
+
+/**
+ * Rewrites the 2.8 `$oidc.preferred_username` placeholder to
+ * `$external.username` wherever a host username is saved. Plain SQL that
+ * runs the same on SQLite, Postgres and MySQL; the drizzle migrations carry
+ * a copy.
+ */
+export const LEGACY_USERNAME_PLACEHOLDER_UPDATES = [
+  "UPDATE ssh_data SET username = REPLACE(username, '$oidc.preferred_username', '$external.username') WHERE username LIKE '%$oidc.preferred_username%'",
+  "UPDATE ssh_credentials SET username = REPLACE(username, '$oidc.preferred_username', '$external.username') WHERE username LIKE '%$oidc.preferred_username%'",
+  "UPDATE host_defaults SET value = REPLACE(value, '$oidc.preferred_username', '$external.username') WHERE value LIKE '%$oidc.preferred_username%'",
+];
diff --git a/src/backend/database/db/schema.mysql.ts b/src/backend/database/db/schema.mysql.ts
index 2c84c750a..c3545c810 100644
--- a/src/backend/database/db/schema.mysql.ts
+++ b/src/backend/database/db/schema.mysql.ts
@@ -1,10 +1,10 @@
-// GENERATED FILE — do not edit.
+// GENERATED FILE, do not edit.
 //
 // Produced from schema.ts by scripts/generate-dialect-schema.cjs.
 // Edit the sqlite schema and re-run `node scripts/generate-dialect-schema.cjs`.
 // Target dialect: mysql.
 //
-// DDL source for drizzle-kit. NOT imported to run queries — repositories use
+// DDL source for drizzle-kit. NOT imported to run queries. Repositories use
 // schema.ts on every dialect. See the generator header for why that is correct.
 
 import {
@@ -26,23 +26,7 @@ export const users = mysqlTable("users", {
   username: text("username").notNull(),
   passwordHash: text("password_hash").notNull(),
   isAdmin: boolean("is_admin").notNull().default(false),
-
-  isOidc: boolean("is_oidc").notNull().default(false),
-  oidcIdentifier: text("oidc_identifier"),
-  ssoProviderId: int("sso_provider_id"),
-  clientId: text("client_id"),
-  clientSecret: text("client_secret"),
-  issuerUrl: text("issuer_url"),
-  authorizationUrl: text("authorization_url"),
-  tokenUrl: text("token_url"),
-  identifierPath: text("identifier_path"),
-  namePath: text("name_path"),
-  scopes: text().default("openid email profile"),
-
   registeredAt: text("registered_at").notNull().default(sql`(CURRENT_TIMESTAMP)`),
-  donationModalDismissed: boolean("donation_modal_dismissed")
-    .notNull()
-    .default(false),
 });
 
 export const settings = mysqlTable("settings", {
@@ -60,9 +44,8 @@ export const sessions = mysqlTable(
     jwtToken: text("jwt_token").notNull(),
     deviceType: text("device_type").notNull(),
     deviceInfo: text("device_info").notNull(),
-    oidcSub: text("oidc_sub"),
-    oidcSid: text("oidc_sid"),
-    ssoProviderId: int("sso_provider_id"),
+    // JSON of the identity provider's logout claims, for back-channel logout.
+    externalSessionRef: text("external_session_ref"),
     createdAt: text("created_at")
       .notNull()
       .default(sql`(CURRENT_TIMESTAMP)`),
@@ -196,11 +179,9 @@ export const hosts = mysqlTable(
       .notNull()
       .default(true),
     statusCheckInterval: int("status_check_interval"),
-    terminalConfig: text("terminal_config"),
     // SSH connection options core's connect pipeline reads (keepalive,
     // legacy algorithms, agent, environment). JSON.
     sshOptions: text("ssh_options"),
-    quickActions: text("quick_actions"),
     notes: text("notes"),
     enableSsh: boolean("enable_ssh").notNull().default(true),
 
@@ -377,9 +358,6 @@ export const sshFolders = mysqlTable(
     name: text("name").notNull(),
     color: text("color"),
     icon: text("icon"),
-    credentialId: int("credential_id").references(() => sshCredentials.id, {
-      onDelete: "set null",
-    }),
     // Manual drag-to-reorder position among sibling folders. Null falls back
     // to name sort, same convention as hosts.sortOrder.
     sortOrder: int("sort_order"),
@@ -561,7 +539,7 @@ export const sharedHostSecrets = mysqlTable(
   },
   // Declared inline in the production DDL as UNIQUE(...), but never here,
   // so the generated Postgres and MySQL schemas allowed duplicates the
-  // SQLite deployment forbids — and the upsert had nothing to conflict on.
+  // SQLite deployment forbids, and the upsert had nothing to conflict on.
   (table) => [
     uniqueIndex("idx_shared_host_secrets_scope").on(
       table.hostAccessId,
@@ -611,7 +589,7 @@ export const userRoles = mysqlTable(
   },
   // Declared inline in the production DDL as UNIQUE(...), but never here,
   // so the generated Postgres and MySQL schemas allowed duplicates the
-  // SQLite deployment forbids — and the upsert had nothing to conflict on.
+  // SQLite deployment forbids, and the upsert had nothing to conflict on.
   //
   // The unique pair already serves lookups by user, since user_id leads it.
   // Listing a role's members starts from role_id, which it cannot serve.
@@ -712,7 +690,6 @@ export const userPreferences = mysqlTable("user_preferences", {
   accentColor: text("accent_color"),
   language: text("language"),
   storageMode: text("storage_mode"),
-  commandAutocomplete: boolean("command_autocomplete"),
   commandPaletteEnabled: boolean("command_palette_enabled"),
   showHostTags: boolean("show_host_tags"),
   hostTrayOnClick: boolean("host_tray_on_click"),
@@ -720,16 +697,12 @@ export const userPreferences = mysqlTable("user_preferences", {
   expandAppRailOnHover: boolean("expand_app_rail_on_hover"),
   showPinAppRailButton: boolean("show_pin_app_rail_button"),
   foldersCollapsed: boolean("folders_collapsed"),
-  confirmSnippetExecution: boolean("confirm_snippet_execution"),
   disableUpdateCheck: boolean("disable_update_check"),
   confirmTabClose: boolean("confirm_tab_close"),
   hiddenRailTabs: text("hidden_rail_tabs"),
   compactHostView: boolean("compact_host_view"),
   statusColorScheme: text("status_color_scheme"),
-  customThemes: text("custom_themes"),
   customKeybindings: text("custom_keybindings"),
-  terminalDefaults: text("terminal_defaults"),
-  terminalMacros: text("terminal_macros"),
   updatedAt: text("updated_at")
     .notNull()
     .default(sql`(CURRENT_TIMESTAMP)`),
@@ -1029,6 +1002,10 @@ export const plugins = mysqlTable(
     autoUpdate: boolean("auto_update")
       .notNull()
       .default(false),
+    /** Version an admin pinned. Never auto-updated while set. */
+    pinnedVersion: text("pinned_version"),
+    /** stable | beta: which registry releases updates offer. */
+    channel: text("channel").notNull().default("stable"),
     manifestJson: text("manifest_json").notNull(),
   },
   (table) => [index("idx_plugins_registry_id").on(table.registryId)],
@@ -1080,7 +1057,7 @@ export const pluginRegistries = mysqlTable("plugin_registries", {
 /**
  * Install counts populated by a background job (GitHub release download
  * counts, aggregated telemetry, or a manual override) rather than by the
- * install/uninstall actions themselves — kept separate from `plugins` so
+ * install/uninstall actions themselves, kept separate from `plugins` so
  * that job can overwrite counts without touching install state.
  */
 export const pluginInstallCounts = mysqlTable(
diff --git a/src/backend/database/db/schema.pg.ts b/src/backend/database/db/schema.pg.ts
index 3cf5c60a7..6523a23f7 100644
--- a/src/backend/database/db/schema.pg.ts
+++ b/src/backend/database/db/schema.pg.ts
@@ -1,10 +1,10 @@
-// GENERATED FILE — do not edit.
+// GENERATED FILE, do not edit.
 //
 // Produced from schema.ts by scripts/generate-dialect-schema.cjs.
 // Edit the sqlite schema and re-run `node scripts/generate-dialect-schema.cjs`.
 // Target dialect: postgres.
 //
-// DDL source for drizzle-kit. NOT imported to run queries — repositories use
+// DDL source for drizzle-kit. NOT imported to run queries. Repositories use
 // schema.ts on every dialect. See the generator header for why that is correct.
 
 import {
@@ -26,23 +26,7 @@ export const users = pgTable("users", {
   username: text("username").notNull(),
   passwordHash: text("password_hash").notNull(),
   isAdmin: boolean("is_admin").notNull().default(false),
-
-  isOidc: boolean("is_oidc").notNull().default(false),
-  oidcIdentifier: text("oidc_identifier"),
-  ssoProviderId: integer("sso_provider_id"),
-  clientId: text("client_id"),
-  clientSecret: text("client_secret"),
-  issuerUrl: text("issuer_url"),
-  authorizationUrl: text("authorization_url"),
-  tokenUrl: text("token_url"),
-  identifierPath: text("identifier_path"),
-  namePath: text("name_path"),
-  scopes: text().default("openid email profile"),
-
   registeredAt: text("registered_at").notNull().default(sql`CURRENT_TIMESTAMP`),
-  donationModalDismissed: boolean("donation_modal_dismissed")
-    .notNull()
-    .default(false),
 });
 
 export const settings = pgTable("settings", {
@@ -60,9 +44,8 @@ export const sessions = pgTable(
     jwtToken: text("jwt_token").notNull(),
     deviceType: text("device_type").notNull(),
     deviceInfo: text("device_info").notNull(),
-    oidcSub: text("oidc_sub"),
-    oidcSid: text("oidc_sid"),
-    ssoProviderId: integer("sso_provider_id"),
+    // JSON of the identity provider's logout claims, for back-channel logout.
+    externalSessionRef: text("external_session_ref"),
     createdAt: text("created_at")
       .notNull()
       .default(sql`CURRENT_TIMESTAMP`),
@@ -196,11 +179,9 @@ export const hosts = pgTable(
       .notNull()
       .default(true),
     statusCheckInterval: integer("status_check_interval"),
-    terminalConfig: text("terminal_config"),
     // SSH connection options core's connect pipeline reads (keepalive,
     // legacy algorithms, agent, environment). JSON.
     sshOptions: text("ssh_options"),
-    quickActions: text("quick_actions"),
     notes: text("notes"),
     enableSsh: boolean("enable_ssh").notNull().default(true),
 
@@ -377,9 +358,6 @@ export const sshFolders = pgTable(
     name: text("name").notNull(),
     color: text("color"),
     icon: text("icon"),
-    credentialId: integer("credential_id").references(() => sshCredentials.id, {
-      onDelete: "set null",
-    }),
     // Manual drag-to-reorder position among sibling folders. Null falls back
     // to name sort, same convention as hosts.sortOrder.
     sortOrder: integer("sort_order"),
@@ -561,7 +539,7 @@ export const sharedHostSecrets = pgTable(
   },
   // Declared inline in the production DDL as UNIQUE(...), but never here,
   // so the generated Postgres and MySQL schemas allowed duplicates the
-  // SQLite deployment forbids — and the upsert had nothing to conflict on.
+  // SQLite deployment forbids, and the upsert had nothing to conflict on.
   (table) => [
     uniqueIndex("idx_shared_host_secrets_scope").on(
       table.hostAccessId,
@@ -611,7 +589,7 @@ export const userRoles = pgTable(
   },
   // Declared inline in the production DDL as UNIQUE(...), but never here,
   // so the generated Postgres and MySQL schemas allowed duplicates the
-  // SQLite deployment forbids — and the upsert had nothing to conflict on.
+  // SQLite deployment forbids, and the upsert had nothing to conflict on.
   //
   // The unique pair already serves lookups by user, since user_id leads it.
   // Listing a role's members starts from role_id, which it cannot serve.
@@ -712,7 +690,6 @@ export const userPreferences = pgTable("user_preferences", {
   accentColor: text("accent_color"),
   language: text("language"),
   storageMode: text("storage_mode"),
-  commandAutocomplete: boolean("command_autocomplete"),
   commandPaletteEnabled: boolean("command_palette_enabled"),
   showHostTags: boolean("show_host_tags"),
   hostTrayOnClick: boolean("host_tray_on_click"),
@@ -720,16 +697,12 @@ export const userPreferences = pgTable("user_preferences", {
   expandAppRailOnHover: boolean("expand_app_rail_on_hover"),
   showPinAppRailButton: boolean("show_pin_app_rail_button"),
   foldersCollapsed: boolean("folders_collapsed"),
-  confirmSnippetExecution: boolean("confirm_snippet_execution"),
   disableUpdateCheck: boolean("disable_update_check"),
   confirmTabClose: boolean("confirm_tab_close"),
   hiddenRailTabs: text("hidden_rail_tabs"),
   compactHostView: boolean("compact_host_view"),
   statusColorScheme: text("status_color_scheme"),
-  customThemes: text("custom_themes"),
   customKeybindings: text("custom_keybindings"),
-  terminalDefaults: text("terminal_defaults"),
-  terminalMacros: text("terminal_macros"),
   updatedAt: text("updated_at")
     .notNull()
     .default(sql`CURRENT_TIMESTAMP`),
@@ -1029,6 +1002,10 @@ export const plugins = pgTable(
     autoUpdate: boolean("auto_update")
       .notNull()
       .default(false),
+    /** Version an admin pinned. Never auto-updated while set. */
+    pinnedVersion: text("pinned_version"),
+    /** stable | beta: which registry releases updates offer. */
+    channel: text("channel").notNull().default("stable"),
     manifestJson: text("manifest_json").notNull(),
   },
   (table) => [index("idx_plugins_registry_id").on(table.registryId)],
@@ -1080,7 +1057,7 @@ export const pluginRegistries = pgTable("plugin_registries", {
 /**
  * Install counts populated by a background job (GitHub release download
  * counts, aggregated telemetry, or a manual override) rather than by the
- * install/uninstall actions themselves — kept separate from `plugins` so
+ * install/uninstall actions themselves, kept separate from `plugins` so
  * that job can overwrite counts without touching install state.
  */
 export const pluginInstallCounts = pgTable(
diff --git a/src/backend/database/db/schema.ts b/src/backend/database/db/schema.ts
index 3b1732524..85b081ad7 100644
--- a/src/backend/database/db/schema.ts
+++ b/src/backend/database/db/schema.ts
@@ -14,25 +14,7 @@ export const users = sqliteTable("users", {
   username: text("username").notNull(),
   passwordHash: text("password_hash").notNull(),
   isAdmin: integer("is_admin", { mode: "boolean" }).notNull().default(false),
-
-  isOidc: integer("is_oidc", { mode: "boolean" }).notNull().default(false),
-  oidcIdentifier: text("oidc_identifier"),
-  ssoProviderId: integer("sso_provider_id"),
-  clientId: text("client_id"),
-  clientSecret: text("client_secret"),
-  issuerUrl: text("issuer_url"),
-  authorizationUrl: text("authorization_url"),
-  tokenUrl: text("token_url"),
-  identifierPath: text("identifier_path"),
-  namePath: text("name_path"),
-  scopes: text().default("openid email profile"),
-
   registeredAt: text("registered_at").notNull().default(sql`CURRENT_TIMESTAMP`),
-  donationModalDismissed: integer("donation_modal_dismissed", {
-    mode: "boolean",
-  })
-    .notNull()
-    .default(false),
 });
 
 export const settings = sqliteTable("settings", {
@@ -50,9 +32,8 @@ export const sessions = sqliteTable(
     jwtToken: text("jwt_token").notNull(),
     deviceType: text("device_type").notNull(),
     deviceInfo: text("device_info").notNull(),
-    oidcSub: text("oidc_sub"),
-    oidcSid: text("oidc_sid"),
-    ssoProviderId: integer("sso_provider_id"),
+    // JSON of the identity provider's logout claims, for back-channel logout.
+    externalSessionRef: text("external_session_ref"),
     createdAt: text("created_at")
       .notNull()
       .default(sql`CURRENT_TIMESTAMP`),
@@ -188,11 +169,9 @@ export const hosts = sqliteTable(
       .notNull()
       .default(true),
     statusCheckInterval: integer("status_check_interval"),
-    terminalConfig: text("terminal_config"),
     // SSH connection options core's connect pipeline reads (keepalive,
     // legacy algorithms, agent, environment). JSON.
     sshOptions: text("ssh_options"),
-    quickActions: text("quick_actions"),
     notes: text("notes"),
     enableSsh: integer("enable_ssh", { mode: "boolean" }).notNull().default(true),
 
@@ -369,9 +348,6 @@ export const sshFolders = sqliteTable(
     name: text("name").notNull(),
     color: text("color"),
     icon: text("icon"),
-    credentialId: integer("credential_id").references(() => sshCredentials.id, {
-      onDelete: "set null",
-    }),
     // Manual drag-to-reorder position among sibling folders. Null falls back
     // to name sort, same convention as hosts.sortOrder.
     sortOrder: integer("sort_order"),
@@ -553,7 +529,7 @@ export const sharedHostSecrets = sqliteTable(
   },
   // Declared inline in the production DDL as UNIQUE(...), but never here,
   // so the generated Postgres and MySQL schemas allowed duplicates the
-  // SQLite deployment forbids — and the upsert had nothing to conflict on.
+  // SQLite deployment forbids, and the upsert had nothing to conflict on.
   (table) => [
     uniqueIndex("idx_shared_host_secrets_scope").on(
       table.hostAccessId,
@@ -603,7 +579,7 @@ export const userRoles = sqliteTable(
   },
   // Declared inline in the production DDL as UNIQUE(...), but never here,
   // so the generated Postgres and MySQL schemas allowed duplicates the
-  // SQLite deployment forbids — and the upsert had nothing to conflict on.
+  // SQLite deployment forbids, and the upsert had nothing to conflict on.
   //
   // The unique pair already serves lookups by user, since user_id leads it.
   // Listing a role's members starts from role_id, which it cannot serve.
@@ -704,7 +680,6 @@ export const userPreferences = sqliteTable("user_preferences", {
   accentColor: text("accent_color"),
   language: text("language"),
   storageMode: text("storage_mode"),
-  commandAutocomplete: integer("command_autocomplete", { mode: "boolean" }),
   commandPaletteEnabled: integer("command_palette_enabled", { mode: "boolean" }),
   showHostTags: integer("show_host_tags", { mode: "boolean" }),
   hostTrayOnClick: integer("host_tray_on_click", { mode: "boolean" }),
@@ -716,16 +691,12 @@ export const userPreferences = sqliteTable("user_preferences", {
     mode: "boolean",
   }),
   foldersCollapsed: integer("folders_collapsed", { mode: "boolean" }),
-  confirmSnippetExecution: integer("confirm_snippet_execution", { mode: "boolean" }),
   disableUpdateCheck: integer("disable_update_check", { mode: "boolean" }),
   confirmTabClose: integer("confirm_tab_close", { mode: "boolean" }),
   hiddenRailTabs: text("hidden_rail_tabs"),
   compactHostView: integer("compact_host_view", { mode: "boolean" }),
   statusColorScheme: text("status_color_scheme"),
-  customThemes: text("custom_themes"),
   customKeybindings: text("custom_keybindings"),
-  terminalDefaults: text("terminal_defaults"),
-  terminalMacros: text("terminal_macros"),
   updatedAt: text("updated_at")
     .notNull()
     .default(sql`CURRENT_TIMESTAMP`),
@@ -1027,6 +998,10 @@ export const plugins = sqliteTable(
     autoUpdate: integer("auto_update", { mode: "boolean" })
       .notNull()
       .default(false),
+    /** Version an admin pinned. Never auto-updated while set. */
+    pinnedVersion: text("pinned_version"),
+    /** stable | beta: which registry releases updates offer. */
+    channel: text("channel").notNull().default("stable"),
     manifestJson: text("manifest_json").notNull(),
   },
   (table) => [index("idx_plugins_registry_id").on(table.registryId)],
@@ -1078,7 +1053,7 @@ export const pluginRegistries = sqliteTable("plugin_registries", {
 /**
  * Install counts populated by a background job (GitHub release download
  * counts, aggregated telemetry, or a manual override) rather than by the
- * install/uninstall actions themselves — kept separate from `plugins` so
+ * install/uninstall actions themselves, kept separate from `plugins` so
  * that job can overwrite counts without touching install state.
  */
 export const pluginInstallCounts = sqliteTable(
diff --git a/src/backend/database/db/upgrade-guard.ts b/src/backend/database/db/upgrade-guard.ts
new file mode 100644
index 000000000..606e9fdc4
--- /dev/null
+++ b/src/backend/database/db/upgrade-guard.ts
@@ -0,0 +1,18 @@
+/**
+ * 26.10.0 dropped the columns 2.9.0 kept for a downgrade to 2.8, and the
+ * one-time 2.8 moves that copied them into plugins went with them. A 2.8
+ * database has to pass through 2.9 first, or that data is lost.
+ *
+ * 2.8 already had a plugins table, so the marker is plugin_migrations, which
+ * 2.9.0 added on every dialect. A 2.8 database has hosts but not that.
+ */
+export const PRE_29_DATABASE_ERROR =
+  "This database is from Termix 2.8 or older. Upgrade to Termix 2.9.1 and start it once so it can move your data, then upgrade to this version.";
+
+export async function assertNotPre29Database(
+  hasTable: (name: string) => boolean | Promise<boolean>,
+): Promise<void> {
+  if ((await hasTable("ssh_data")) && !(await hasTable("plugin_migrations"))) {
+    throw new Error(PRE_29_DATABASE_ERROR);
+  }
+}
diff --git a/src/backend/database/repositories/audit-log-repository.ts b/src/backend/database/repositories/audit-log-repository.ts
index 2da752768..21e898b38 100644
--- a/src/backend/database/repositories/audit-log-repository.ts
+++ b/src/backend/database/repositories/audit-log-repository.ts
@@ -74,7 +74,7 @@ export class AuditLogRepository {
   /**
    * Cached row count backing the cap check. Static because the factory builds
    * a repository per call, so a per-instance count would never survive to be
-   * reused. Null means "unknown, re-read" — which is also how any path that
+   * reused. Null means "unknown, re-read", which is also how any path that
    * deletes rows invalidates it.
    */
   private static cachedCount: number | null = null;
@@ -233,13 +233,13 @@ export class AuditLogRepository {
    *
    * Both passes used to run inline on every insert: a retention DELETE plus a
    * COUNT over the whole table, thousands of times an hour on a busy install,
-   * almost always to find nothing to do — and audit writes sit in the request
+   * almost always to find nothing to do, and audit writes sit in the request
    * path of the actions they record.
    *
    * They are split by what they cost and what they guarantee. Retention is
    * time-based, so nothing is lost by checking it on an interval. The row cap
    * is a disk-space guard that has to react to inserts, so it is still checked
-   * on the write that crosses it — but against a cached count, so the common
+   * on the write that crosses it, but against a cached count, so the common
    * case is an integer compare rather than a COUNT.
    */
   private async pruneIfDue(): Promise<void> {
diff --git a/src/backend/database/repositories/credential-access-repository.ts b/src/backend/database/repositories/credential-access-repository.ts
index 9f921f41b..96e14de47 100644
--- a/src/backend/database/repositories/credential-access-repository.ts
+++ b/src/backend/database/repositories/credential-access-repository.ts
@@ -152,6 +152,15 @@ export class CredentialAccessRepository {
     return rows[0] ?? null;
   }
 
+  /** Credentials holding a share this user handed out. */
+  async listCredentialIdsGrantedBy(userId: string): Promise<number[]> {
+    const rows = await this.context.drizzle
+      .selectDistinct({ credentialId: credentialAccess.credentialId })
+      .from(credentialAccess)
+      .where(eq(credentialAccess.grantedBy, userId));
+    return rows.map((row) => row.credentialId);
+  }
+
   async revoke(accessId: number, credentialId: number): Promise<void> {
     await this.context.drizzle
       .delete(credentialAccess)
diff --git a/src/backend/database/repositories/database-context.ts b/src/backend/database/repositories/database-context.ts
index 4f0bb476a..03eb07a3b 100644
--- a/src/backend/database/repositories/database-context.ts
+++ b/src/backend/database/repositories/database-context.ts
@@ -2,7 +2,7 @@ import type { BetterSQLite3Database } from "drizzle-orm/better-sqlite3";
 import type * as schema from "../db/schema.js";
 
 // Re-exported so repositories can keep importing it from here, but defined in
-// db/dialect.ts — a local copy that said "sqlite" survived here for a while and
+// db/dialect.ts, a local copy that said "sqlite" survived here for a while and
 // typed every context as SQLite-only while the runtime already carried all
 // three, which silently made the dialect branches unreachable to the checker.
 export type { DatabaseDialect } from "../db/dialect.js";
@@ -18,7 +18,7 @@ import type { DatabaseDialect } from "../db/dialect.js";
  *
  * This is a deliberate approximation, not an accident. The query-builder
  * surface the repositories actually use is the same on all three engines, and
- * that equivalence is asserted in multi-dialect.test.ts rather than assumed —
+ * that equivalence is asserted in multi-dialect.test.ts rather than assumed,
  * identifier quoting, placeholder style and value coercion are all covered
  * there. At runtime this may hold a Postgres or MySQL instance.
  *
@@ -32,7 +32,7 @@ export type PortableDatabase = BetterSQLite3Database<typeof schema>;
  *
  * Deliberately drizzle-only: with no raw driver handle here, no repository can
  * reach for engine-specific SQL. Retention queries that previously needed
- * `datetime('now', ?)` compute their cutoff in JS instead — see
+ * `datetime('now', ?)` compute their cutoff in JS instead, see
  * ./sql-timestamp.ts.
  */
 export interface DatabaseContext {
diff --git a/src/backend/database/repositories/factory.ts b/src/backend/database/repositories/factory.ts
index 7b8b6c508..2c5fdb800 100644
--- a/src/backend/database/repositories/factory.ts
+++ b/src/backend/database/repositories/factory.ts
@@ -18,6 +18,7 @@ import { PluginStorageRepository } from "./plugin-storage-repository.js";
 import { PluginSettingsRepository } from "./plugin-settings-repository.js";
 import { HostDefaultsRepository } from "./host-defaults-repository.js";
 import { PluginMigrationRepository } from "./plugin-migration-repository.js";
+import { PluginInstallCountRepository } from "./plugin-install-count-repository.js";
 import { PluginPermissionGrantRepository } from "./plugin-permission-grant-repository.js";
 import { UserAuthRepository } from "./user-auth-repository.js";
 import { RbacAccessRepository } from "./rbac-access-repository.js";
@@ -48,7 +49,7 @@ import { UserRepository } from "./user-repository.js";
  * write.
  *
  * Both cross-dialect harnesses build a DatabaseContext themselves, so neither
- * exercises this function — see tests/database/repositories/factory-context.
+ * exercises this function, see tests/database/repositories/factory-context.
  */
 export function createCurrentRepositoryContext(): DatabaseContext {
   return {
@@ -63,7 +64,7 @@ export function createCurrentRepositoryContext(): DatabaseContext {
  * Only meaningful for SQLite, where the database lives in memory and has to be
  * serialised back to its encrypted file. On Postgres and MySQL the write is
  * already durable, so no hook is installed at all rather than one that does
- * nothing — repositories call it as `this.onWrite?.()`.
+ * nothing, repositories call it as `this.onWrite?.()`.
  */
 export function createCurrentRepositoryWriteHook(
   reason: string,
@@ -90,7 +91,7 @@ export function createCurrentRepositoryLazyWriteHook(
 }
 
 /**
- * Raw driver handle for the few synchronous call sites that cannot await —
+ * Raw driver handle for the few synchronous call sites that cannot await,
  * getCurrentSettingValue below, and settings reads during startup. Repositories
  * must not use this: they take a DatabaseContext, which is drizzle-only.
  * Porting to another engine means giving these callers an async path first.
@@ -240,6 +241,13 @@ export function createCurrentPluginSettingsRepository(): PluginSettingsRepositor
   );
 }
 
+export function createCurrentPluginInstallCountRepository(): PluginInstallCountRepository {
+  return new PluginInstallCountRepository(
+    createCurrentRepositoryContext(),
+    createCurrentRepositoryWriteHook("plugin_install_count_repository_write"),
+  );
+}
+
 export function createCurrentPluginMigrationRepository(): PluginMigrationRepository {
   return new PluginMigrationRepository(
     createCurrentRepositoryContext(),
@@ -395,8 +403,8 @@ let refreshTimer: NodeJS.Timeout | null = null;
  *
  * The cache is per-process and updated in the process that writes. That is
  * enough for SQLite, where there is only ever one process. On Postgres and
- * MySQL — which exist here precisely so more than one instance can share the
- * data — a setting changed on one replica would otherwise never reach the
+ * MySQL, which exist here precisely so more than one instance can share the
+ * data, a setting changed on one replica would otherwise never reach the
  * others, because the synchronous read has no way to go back to the database.
  *
  * Periodic re-priming does not make the value immediately consistent. It bounds
diff --git a/src/backend/database/repositories/host-folder-repository.ts b/src/backend/database/repositories/host-folder-repository.ts
index 1d88bcb06..9f561bad7 100644
--- a/src/backend/database/repositories/host-folder-repository.ts
+++ b/src/backend/database/repositories/host-folder-repository.ts
@@ -31,7 +31,7 @@ export class HostFolderRepository {
     now = new Date().toISOString(),
   ): Promise<RenameFolderResult> {
     // CAST target: every engine spells the text type differently enough to
-    // matter here — MySQL has no `text` cast and wants `char`.
+    // matter here, MySQL has no `text` cast and wants `char`.
     const textType = this.context.dialect === "mysql" ? "char" : "text";
     const oldPrefix = `${oldName} / `;
     const newPrefix = `${newName} / `;
@@ -112,7 +112,6 @@ export class HostFolderRepository {
     name: string,
     color: string | null | undefined,
     icon: string | null | undefined,
-    credentialId?: number | null,
     now = new Date().toISOString(),
   ): Promise<{ folder: HostFolderRecord; created: boolean }> {
     const existing = await this.findFolder(userId, name);
@@ -123,8 +122,6 @@ export class HostFolderRepository {
         {
           color,
           icon,
-          credentialId:
-            credentialId === undefined ? existing.credentialId : credentialId,
           updatedAt: now,
         },
         and(eq(sshFolders.userId, userId), eq(sshFolders.name, name)),
@@ -140,7 +137,6 @@ export class HostFolderRepository {
       name,
       color,
       icon,
-      credentialId: credentialId ?? null,
       createdAt: now,
       updatedAt: now,
     });
diff --git a/src/backend/database/repositories/host-resolution-repository.ts b/src/backend/database/repositories/host-resolution-repository.ts
index 181e85382..580850d06 100644
--- a/src/backend/database/repositories/host-resolution-repository.ts
+++ b/src/backend/database/repositories/host-resolution-repository.ts
@@ -1,5 +1,5 @@
 import { and, eq, inArray, sql } from "drizzle-orm";
-import { hosts, sshCredentials, sshFolders } from "../db/schema.js";
+import { hosts, sshCredentials } from "../db/schema.js";
 import type { DatabaseContext } from "./database-context.js";
 import { DataCrypto } from "../../utils/data-crypto.js";
 
@@ -459,34 +459,6 @@ export class HostResolutionRepository {
     return this.decryptOne("ssh_credentials", rows[0], decryptUserId);
   }
 
-  /**
-   * Resolve the nearest assigned credential for a folder path, walking up
-   * through parent folders (e.g. "Switches / Floor1" falls back to
-   * "Switches" if the child folder has no credential of its own).
-   */
-  async findFolderCredentialId(
-    userId: string,
-    folderPath: string,
-  ): Promise<number | null> {
-    const segments = folderPath.split(" / ").filter(Boolean);
-    if (segments.length === 0) return null;
-
-    const paths = segments.map((_, i) => segments.slice(0, i + 1).join(" / "));
-    const rows = await this.context.drizzle
-      .select({ name: sshFolders.name, credentialId: sshFolders.credentialId })
-      .from(sshFolders)
-      .where(
-        and(eq(sshFolders.userId, userId), inArray(sshFolders.name, paths)),
-      );
-
-    const byName = new Map(rows.map((row) => [row.name, row.credentialId]));
-    for (let i = paths.length - 1; i >= 0; i--) {
-      const credentialId = byName.get(paths[i]);
-      if (credentialId) return credentialId;
-    }
-    return null;
-  }
-
   private decryptOne<T extends Record<string, unknown>>(
     tableName: "ssh_data" | "ssh_credentials",
     record: T | undefined,
diff --git a/src/backend/database/repositories/mutation-result.ts b/src/backend/database/repositories/mutation-result.ts
index d849c7746..2ea47aa2f 100644
--- a/src/backend/database/repositories/mutation-result.ts
+++ b/src/backend/database/repositories/mutation-result.ts
@@ -4,18 +4,18 @@ import type { DatabaseDialect } from "../db/dialect.js";
  * Reading the outcome of a write without depending on RETURNING.
  *
  * SQLite and Postgres can attach `.returning()` to a delete or update and get
- * the affected rows back. **MySQL cannot** — it has no RETURNING clause, and
+ * the affected rows back. **MySQL cannot**: it has no RETURNING clause, and
  * drizzle's mysql-core does not expose the method at all, so the call is a
  * TypeError rather than a bad query. 175 call sites here read a write's result,
  * so the difference has to be absorbed somewhere.
  *
  * The split that matters is what the caller actually needs:
  *
- * - **How many rows changed** — the majority, and none of them need the rows.
+ * - **How many rows changed**: the majority, and none of them need the rows.
  *   They used to ask for them anyway, via `.returning().length`. Dropping the
  *   `.returning()` and reading the driver's own count is both portable and one
  *   less thing for the database to send back.
- * - **The rows themselves** — cannot be emulated on MySQL without reading
+ * - **The rows themselves**: cannot be emulated on MySQL without reading
  *   first, which needs a transaction to stay correct under concurrency. Those
  *   call sites are handled individually rather than behind a helper that hides
  *   an extra round trip.
@@ -33,7 +33,7 @@ import type { DatabaseDialect } from "../db/dialect.js";
  * | node-postgres  | `{ rowCount, rows, command }`          |
  * | mysql2         | `[{ affectedRows, insertId }, fields]` |
  *
- * These are the shapes returned when NO `.returning()` is attached — which is
+ * These are the shapes returned when NO `.returning()` is attached, which is
  * the portable way to write, since MySQL has no RETURNING clause at all.
  */
 interface WriteHeader {
@@ -47,7 +47,7 @@ interface WriteHeader {
 const COUNT_FIELDS = ["changes", "rowCount", "affectedRows"] as const;
 
 /**
- * mysql2 hands back `[ResultSetHeader, fields]`, which is itself an array — so
+ * mysql2 hands back `[ResultSetHeader, fields]`, which is itself an array, so
  * "is it an array" cannot distinguish a write header from a returning() result.
  * The header is identified by carrying one of the fields above instead.
  */
@@ -70,7 +70,7 @@ function asWriteHeader(result: unknown): WriteHeader | null {
 /**
  * Number of rows a write touched.
  *
- * Pass the result of the write itself — every driver's header is understood, so
+ * Pass the result of the write itself, every driver's header is understood, so
  * the caller neither branches on the dialect nor attaches `.returning()` just to
  * count what came back.
  *
@@ -97,7 +97,7 @@ export function rowsAffected(result: unknown): number {
  *
  * **Only meaningful on the result of an insert.** SQLite's `lastInsertRowid` and
  * MySQL's `insertId` are connection-level values that survive the statement that
- * set them — after a delete, SQLite still reports whatever the last insert
+ * set them, after a delete, SQLite still reports whatever the last insert
  * produced. Passing an update or delete result here gets a stale id, not null.
  *
  * Returns null when the table has no autoincrement key.
@@ -143,7 +143,7 @@ export function supportsReturning(dialect: DatabaseDialect): boolean {
  *
  * `sql<number>` is a type assertion, not a conversion. Postgres returns COUNT()
  * as bigint, which node-postgres hands back as a **string** so that values past
- * 2^53 survive — so the annotation is a lie there and comparisons like
+ * 2^53 survive, so the annotation is a lie there and comparisons like
  * `count < max` compare a string to a number.
  */
 export function countValue(value: unknown): number {
diff --git a/src/backend/database/repositories/plugin-install-count-repository.ts b/src/backend/database/repositories/plugin-install-count-repository.ts
new file mode 100644
index 000000000..a270cc93d
--- /dev/null
+++ b/src/backend/database/repositories/plugin-install-count-repository.ts
@@ -0,0 +1,68 @@
+import { and, eq } from "drizzle-orm";
+import { pluginInstallCounts } from "../db/schema.js";
+import type { DatabaseContext } from "./database-context.js";
+
+export type PluginInstallCountRecord = typeof pluginInstallCounts.$inferSelect;
+
+export interface PluginInstallCountInput {
+  pluginId: string;
+  count: number;
+  source: string;
+}
+
+/** Popularity numbers for the store, one row per plugin and registry. */
+export class PluginInstallCountRepository {
+  constructor(
+    private readonly context: DatabaseContext,
+    private readonly onWrite?: () => void | Promise<void>,
+  ) {}
+
+  async listByRegistry(
+    registryId: string,
+  ): Promise<PluginInstallCountRecord[]> {
+    return this.context.drizzle
+      .select()
+      .from(pluginInstallCounts)
+      .where(eq(pluginInstallCounts.registryId, registryId));
+  }
+
+  /** Writes only the rows that changed, so an unchanged sync costs no save. */
+  async upsertMany(
+    registryId: string,
+    entries: PluginInstallCountInput[],
+    now = new Date().toISOString(),
+  ): Promise<number> {
+    const existing = new Map(
+      (await this.listByRegistry(registryId)).map((row) => [row.pluginId, row]),
+    );
+    let written = 0;
+    for (const entry of entries) {
+      const row = existing.get(entry.pluginId);
+      if (row && row.count === entry.count && row.source === entry.source) {
+        continue;
+      }
+      if (row) {
+        await this.context.drizzle
+          .update(pluginInstallCounts)
+          .set({ count: entry.count, source: entry.source, updatedAt: now })
+          .where(
+            and(
+              eq(pluginInstallCounts.pluginId, entry.pluginId),
+              eq(pluginInstallCounts.registryId, registryId),
+            ),
+          );
+      } else {
+        await this.context.drizzle.insert(pluginInstallCounts).values({
+          pluginId: entry.pluginId,
+          registryId,
+          count: entry.count,
+          source: entry.source,
+          updatedAt: now,
+        });
+      }
+      written += 1;
+    }
+    if (written > 0) await this.onWrite?.();
+    return written;
+  }
+}
diff --git a/src/backend/database/repositories/plugin-repository.ts b/src/backend/database/repositories/plugin-repository.ts
index 7209096c9..87f35f51e 100644
--- a/src/backend/database/repositories/plugin-repository.ts
+++ b/src/backend/database/repositories/plugin-repository.ts
@@ -20,6 +20,8 @@ export interface PluginCreateInput {
   state?: string;
   lastError?: string | null;
   autoUpdate?: boolean;
+  pinnedVersion?: string | null;
+  channel?: string;
   manifestJson: string;
 }
 
@@ -32,6 +34,8 @@ export interface PluginUpdateInput {
   state?: string;
   lastError?: string | null;
   autoUpdate?: boolean;
+  pinnedVersion?: string | null;
+  channel?: string;
   manifestJson?: string;
 }
 
@@ -68,6 +72,8 @@ export class PluginRepository {
       state: input.state ?? "disabled",
       lastError: input.lastError ?? null,
       autoUpdate: input.autoUpdate ?? false,
+      pinnedVersion: input.pinnedVersion ?? null,
+      channel: input.channel ?? "stable",
       manifestJson: input.manifestJson,
       installedAt: now,
       updatedAt: now,
@@ -101,6 +107,11 @@ export class PluginRepository {
         lastError:
           input.lastError === undefined ? existing.lastError : input.lastError,
         autoUpdate: input.autoUpdate ?? existing.autoUpdate,
+        pinnedVersion:
+          input.pinnedVersion === undefined
+            ? existing.pinnedVersion
+            : input.pinnedVersion,
+        channel: input.channel ?? existing.channel,
         manifestJson: input.manifestJson ?? existing.manifestJson,
         updatedAt: now,
       },
diff --git a/src/backend/database/repositories/plugin-settings-repository.ts b/src/backend/database/repositories/plugin-settings-repository.ts
index 7199a5556..71e6ea76d 100644
--- a/src/backend/database/repositories/plugin-settings-repository.ts
+++ b/src/backend/database/repositories/plugin-settings-repository.ts
@@ -178,6 +178,28 @@ export class PluginSettingsRepository {
     return affected;
   }
 
+  /** How many stored values the plugin has in each scope. */
+  async countByScope(
+    pluginId: string,
+  ): Promise<Record<PluginSettingsScope, number>> {
+    const rows = await this.context.drizzle
+      .select({ scope: pluginSettings.scope })
+      .from(pluginSettings)
+      .where(eq(pluginSettings.pluginId, pluginId));
+
+    const counts: Record<PluginSettingsScope, number> = {
+      admin: 0,
+      user: 0,
+      host: 0,
+      secret: 0,
+    };
+    for (const row of rows) {
+      const scope = row.scope as PluginSettingsScope;
+      if (scope in counts) counts[scope] += 1;
+    }
+    return counts;
+  }
+
   async deleteByPlugin(pluginId: string): Promise<number> {
     const result = await this.context.drizzle
       .delete(pluginSettings)
diff --git a/src/backend/database/repositories/rbac-access-repository.ts b/src/backend/database/repositories/rbac-access-repository.ts
index 8556a6f8f..64dde9e2c 100644
--- a/src/backend/database/repositories/rbac-access-repository.ts
+++ b/src/backend/database/repositories/rbac-access-repository.ts
@@ -173,6 +173,15 @@ export class RbacAccessRepository {
     return rowsAffected(result);
   }
 
+  /** Hosts holding a share this user handed out. */
+  async listHostIdsGrantedBy(userId: string): Promise<number[]> {
+    const rows = await this.context.drizzle
+      .selectDistinct({ hostId: hostAccess.hostId })
+      .from(hostAccess)
+      .where(eq(hostAccess.grantedBy, userId));
+    return rows.map((row) => row.hostId);
+  }
+
   /** Grants the departing user handed out now count as the successor's. */
   async reassignHostAccessGrantedBy(
     fromUserId: string,
diff --git a/src/backend/database/repositories/returning.ts b/src/backend/database/repositories/returning.ts
index fe2e05b14..e97ae4add 100644
--- a/src/backend/database/repositories/returning.ts
+++ b/src/backend/database/repositories/returning.ts
@@ -11,15 +11,15 @@ import {
  * Writes that need the affected rows back.
  *
  * `mutation-result.ts` covers the call sites that only wanted a count. These are
- * the ones that genuinely read the rows — an updated record to return to the
+ * the ones that genuinely read the rows, an updated record to return to the
  * caller, a deleted row's fields to clean up alongside it.
  *
  * SQLite and Postgres do this in one statement with RETURNING. MySQL has no
  * such clause, so the read is a second statement, and the pair has to be atomic:
  *
- * - **insert** — write, then read the row back by its key.
- * - **update** — write, then read. Reading first would return the old values.
- * - **delete** — read, then write. Reading after would return nothing.
+ * - **insert**: write, then read the row back by its key.
+ * - **update**: write, then read. Reading first would return the old values.
+ * - **delete**: read, then write. Reading after would return nothing.
  *
  * Both run in a transaction. Without one, a concurrent write between the two
  * statements makes the returned rows describe a state that never existed, and
@@ -29,7 +29,7 @@ import {
  * ## The trap, and why it cannot bite silently
  *
  * On MySQL the update path re-reads using the same `where`. If the update
- * changes a column that `where` tests, the read finds nothing — SQLite would
+ * changes a column that `where` tests, the read finds nothing, SQLite would
  * have returned the row. Every current caller filters on an id it does not
  * modify, but that is a convention, not a guarantee, so the mismatch is
  * detected and thrown rather than returned as an empty array. Same for an
@@ -40,7 +40,7 @@ import {
  */
 
 /**
- * What `.set()` accepts: a column's own type, or a SQL expression in its place —
+ * What `.set()` accepts: a column's own type, or a SQL expression in its place,
  * `updatedAt: sql`CURRENT_TIMESTAMP`` is the common one here.
  */
 type UpdateValues<T extends SQLiteTable> = {
@@ -68,7 +68,7 @@ export async function updateReturning<T extends SQLiteTable>(
     const rows = await tx.select().from(table).where(where);
 
     // The trap this catches: if the update changed a column that `where` tests,
-    // the read finds nothing and the caller gets [] — on MySQL only, with no
+    // the read finds nothing and the caller gets [], on MySQL only, with no
     // error, where SQLite would have returned the row. Rows changed but none
     // readable back is exactly that case, so make it loud instead.
     if (rows.length === 0 && rowsAffected(written) > 0) {
@@ -108,10 +108,10 @@ type Keyed = SQLiteTable & { id: SQLiteColumn };
 
 /**
  * Inserts one row and returns it as stored, including whatever the database
- * filled in — defaults, an autoincrement id, a CURRENT_TIMESTAMP.
+ * filled in, defaults, an autoincrement id, a CURRENT_TIMESTAMP.
  *
  * This is the one case Postgres cannot shortcut either: without RETURNING there
- * is no id to read back by. Hence the split is genuinely three-way — except
+ * is no id to read back by. Hence the split is genuinely three-way, except
  * that sqlite and pg both have RETURNING, so it collapses to two again.
  *
  * On MySQL the key comes from one of two places:
@@ -161,7 +161,7 @@ export async function insertReturning<T extends Keyed>(
  * back by an explicit condition.
  *
  * `user_preferences` is keyed by `userId` and has no `id` column at all, so
- * there is no insertId to read back by — the caller has to say what identifies
+ * there is no insertId to read back by, the caller has to say what identifies
  * the row it just wrote.
  */
 export async function insertReturningWhere<T extends SQLiteTable>(
@@ -195,13 +195,13 @@ export async function insertReturningWhere<T extends SQLiteTable>(
  *
  * The clause has three spellings. SQLite and Postgres take
  * `ON CONFLICT (cols) DO UPDATE`; **MySQL takes `ON DUPLICATE KEY UPDATE` and
- * names no columns** — it uses whichever unique key was violated. drizzle
+ * names no columns**: it uses whichever unique key was violated. drizzle
  * follows suit, so `onConflictDoUpdate` does not exist on mysql-core at all and
  * calling it is a TypeError rather than a rejected query.
  *
  * The conflict target still has to be passed: it is what SQLite and Postgres
  * need, and stating it keeps the caller honest about which unique constraint it
- * is relying on — four of those were missing from the schema entirely until the
+ * is relying on, four of those were missing from the schema entirely until the
  * cross-dialect tests went looking.
  */
 export async function upsert<T extends SQLiteTable>(
diff --git a/src/backend/database/repositories/settings-cache.ts b/src/backend/database/repositories/settings-cache.ts
index a081c38f4..19c9a6273 100644
--- a/src/backend/database/repositories/settings-cache.ts
+++ b/src/backend/database/repositories/settings-cache.ts
@@ -1,7 +1,7 @@
 /**
  * Synchronous read-through cache for the settings table.
  *
- * 27 call sites read settings synchronously — during startup, inside request
+ * 27 call sites read settings synchronously, during startup, inside request
  * handlers, and from the guacd server bootstrap. On SQLite that works because
  * better-sqlite3 is synchronous; on Postgres or MySQL there is no synchronous
  * query at all, and making all 27 async would push `await` through code paths
@@ -35,7 +35,7 @@ export function primeSettingsCache(
 /**
  * Reads a cached setting.
  *
- * Returns null both for "not set" and "cache not primed yet" — every caller
+ * Returns null both for "not set" and "cache not primed yet", every caller
  * already treats a missing setting as "use the default", and startup ordering
  * means a read before priming should behave the same way rather than throw.
  */
diff --git a/src/backend/database/repositories/user-repository.ts b/src/backend/database/repositories/user-repository.ts
index 0bc7b0de0..f5c148a66 100644
--- a/src/backend/database/repositories/user-repository.ts
+++ b/src/backend/database/repositories/user-repository.ts
@@ -1,4 +1,4 @@
-import { and, asc, eq, inArray, like, sql } from "drizzle-orm";
+import { and, asc, eq, getTableColumns, inArray, like, sql } from "drizzle-orm";
 import { pluginSettings, users } from "../db/schema.js";
 import type { DatabaseContext } from "./database-context.js";
 import {
@@ -8,11 +8,22 @@ import {
 } from "./mutation-result.js";
 import { insertReturning, updateReturning } from "./returning.js";
 
-export type UserRecord = typeof users.$inferSelect;
+/** isExternal: the user has at least one external sign-in identity. */
+export type UserRecord = typeof users.$inferSelect & { isExternal: boolean };
 export type NewUserRecord = typeof users.$inferInsert;
 export type UserUpdate = Partial<Omit<NewUserRecord, "id">>;
 export type NewFirstLocalUserRecord = Omit<NewUserRecord, "isAdmin">;
 
+// Qualified by hand: drizzle prints a column in a subquery without its table,
+// which would bind users.id to the identity row's own id.
+const userColumns = {
+  ...getTableColumns(users),
+  isExternal:
+    sql<boolean>`EXISTS (SELECT 1 FROM ${sql.identifier("user_external_identities")} WHERE ${sql.identifier("user_external_identities")}.${sql.identifier("user_id")} = ${sql.identifier("users")}.${sql.identifier("id")})`.mapWith(
+      (value: unknown) => value === true || Number(value) === 1,
+    ),
+};
+
 export class UserRepository {
   constructor(
     private readonly context: DatabaseContext,
@@ -20,7 +31,7 @@ export class UserRepository {
   ) {}
 
   async listAll(): Promise<UserRecord[]> {
-    return this.context.drizzle.select().from(users);
+    return this.context.drizzle.select(userColumns).from(users);
   }
 
   /**
@@ -42,7 +53,7 @@ export class UserRepository {
 
     const [rows, totalResult] = await Promise.all([
       this.context.drizzle
-        .select()
+        .select(userColumns)
         .from(users)
         .where(where)
         // Case-insensitive: a plain sort puts every capitalised name ahead of
@@ -61,7 +72,7 @@ export class UserRepository {
 
   async findById(id: string): Promise<UserRecord | null> {
     const rows = await this.context.drizzle
-      .select()
+      .select(userColumns)
       .from(users)
       .where(eq(users.id, id))
       .limit(1);
@@ -71,7 +82,7 @@ export class UserRepository {
 
   async findByUsername(username: string): Promise<UserRecord | null> {
     const rows = await this.context.drizzle
-      .select()
+      .select(userColumns)
       .from(users)
       .where(eq(users.username, username))
       .limit(1);
@@ -79,18 +90,6 @@ export class UserRepository {
     return rows[0] ?? null;
   }
 
-  async findByExternalIdentifier(
-    oidcIdentifier: string,
-  ): Promise<UserRecord | null> {
-    const rows = await this.context.drizzle
-      .select()
-      .from(users)
-      .where(eq(users.oidcIdentifier, oidcIdentifier))
-      .limit(1);
-
-    return rows[0] ?? null;
-  }
-
   async listByIds(ids: string[]): Promise<UserRecord[]> {
     const uniqueIds = Array.from(new Set(ids.filter(Boolean)));
     if (uniqueIds.length === 0) {
@@ -98,7 +97,7 @@ export class UserRepository {
     }
 
     return this.context.drizzle
-      .select()
+      .select(userColumns)
       .from(users)
       .where(inArray(users.id, uniqueIds));
   }
@@ -106,7 +105,9 @@ export class UserRepository {
   async create(user: NewUserRecord): Promise<UserRecord> {
     const rows = await insertReturning(this.context, users, user);
     await this.afterWrite();
-    return rows[0];
+    return (
+      (await this.findById(rows[0].id)) ?? { ...rows[0], isExternal: false }
+    );
   }
 
   async createFirstLocalUser(
@@ -118,7 +119,7 @@ export class UserRepository {
     }));
 
     await this.afterWrite();
-    return result;
+    return { ...result, user: { ...result.user, isExternal: false } };
   }
 
   async createFirstSsoUser(
@@ -130,7 +131,7 @@ export class UserRepository {
     }));
 
     await this.afterWrite();
-    return result;
+    return { ...result, user: { ...result.user, isExternal: true } };
   }
 
   /**
@@ -140,13 +141,13 @@ export class UserRepository {
    * at once would otherwise both see an empty table and both become admin.
    *
    * The two branches are not a style choice. better-sqlite3 is synchronous and
-   * rejects an async transaction callback outright — "Transaction function
-   * cannot return a promise" — so a single body cannot serve both. It fails
+   * rejects an async transaction callback outright, "Transaction function
+   * cannot return a promise", so a single body cannot serve both. It fails
    * loudly rather than silently skipping the write, which is the one mercy here.
    */
   private async createCheckingIfFirst(
     build: (isFirstUser: boolean) => NewUserRecord,
-  ): Promise<{ user: UserRecord; isFirstUser: boolean }> {
+  ): Promise<{ user: typeof users.$inferSelect; isFirstUser: boolean }> {
     if (this.context.dialect === "sqlite") {
       /* eslint-disable no-restricted-syntax -- sqlite-only branch: the dialect
          is checked directly above, and better-sqlite3 rejects an async
@@ -195,7 +196,7 @@ export class UserRepository {
     );
 
     await this.afterWrite();
-    return rows[0] ?? null;
+    return rows[0] ? this.findById(rows[0].id) : null;
   }
 
   async delete(id: string): Promise<boolean> {
diff --git a/src/backend/database/routes/credential-sidebar-preferences.ts b/src/backend/database/routes/credential-sidebar-preferences.ts
index cca086f41..2a5864a04 100644
--- a/src/backend/database/routes/credential-sidebar-preferences.ts
+++ b/src/backend/database/routes/credential-sidebar-preferences.ts
@@ -17,7 +17,7 @@ const authenticateJWT = authManager.createAuthMiddleware();
  * /credential-sidebar/preferences:
  *   get:
  *     summary: Get the credential sidebar preferences for the current user
- *     description: Returns the current user's saved credential sidebar preferences (sort, filters, open folders, display settings). Unlike /host-sidebar/preferences, there is no legacy-column migration to perform here — credentials never had exploded preference columns on userPreferences — so a first-time GET simply returns the defaults without writing a row; a row is only created once the user actually changes something via PUT.
+ *     description: Returns the current user's saved credential sidebar preferences (sort, filters, open folders, display settings). Unlike /host-sidebar/preferences, there is no legacy-column migration to perform here, credentials never had exploded preference columns on userPreferences, so a first-time GET simply returns the defaults without writing a row; a row is only created once the user actually changes something via PUT.
  *     tags:
  *       - Credential Sidebar
  *     responses:
diff --git a/src/backend/database/routes/donation-modal-utils.ts b/src/backend/database/routes/donation-modal-utils.ts
deleted file mode 100644
index f0f85e9d2..000000000
--- a/src/backend/database/routes/donation-modal-utils.ts
+++ /dev/null
@@ -1,12 +0,0 @@
-const DONATION_MODAL_DELAY_MS = 30 * 24 * 60 * 60 * 1000;
-
-export function shouldShowDonationModal(
-  registeredAt: string,
-  donationModalDismissed: boolean,
-  now: number = Date.now(),
-): boolean {
-  if (donationModalDismissed) return false;
-  const registeredAtMs = Date.parse(registeredAt);
-  if (Number.isNaN(registeredAtMs)) return false;
-  return now - registeredAtMs >= DONATION_MODAL_DELAY_MS;
-}
diff --git a/src/backend/database/routes/host-bulk-routes.ts b/src/backend/database/routes/host-bulk-routes.ts
index 33c203b23..c32f01f73 100644
--- a/src/backend/database/routes/host-bulk-routes.ts
+++ b/src/backend/database/routes/host-bulk-routes.ts
@@ -23,6 +23,7 @@ import type { AuthenticatedRequest } from "../../../types/index.js";
 import type { Request, RequestHandler, Response, Router } from "express";
 import { sshLogger } from "../../utils/logger.js";
 import { DatabaseSaveTrigger } from "../../utils/database-save-trigger.js";
+import { pluginEvents, TOPICS } from "../../plugins/events.js";
 import {
   createCurrentCredentialRepository,
   createCurrentHostRepository,
@@ -135,6 +136,16 @@ export function parseSSHConfig(content: string): SSHConfigHost[] {
   return results;
 }
 
+/**
+ * Tells status checks and other pollers about hosts an import wrote, the way
+ * a single host create or update does.
+ */
+export function notifyImportedHosts(userId: string, hostIds: number[]): void {
+  for (const hostId of hostIds) {
+    pluginEvents.emit(TOPICS.hostUpdated, { hostId, userId });
+  }
+}
+
 export function importedHostUsername(
   connectionType: string,
   authType: unknown,
@@ -710,9 +721,6 @@ export function registerHostBulkRoutes(
             sudoPassword: hostData.sudoPassword || null,
             jumpHosts: jumpHosts ? JSON.stringify(jumpHosts) : null,
             ...importedStatusCheck(hostData as Record<string, unknown>),
-            terminalConfig: hostData.terminalConfig
-              ? JSON.stringify(hostData.terminalConfig)
-              : null,
             // A 2.8 export carries these inside terminalConfig.
             sshOptions:
               sshOptionsForWrite({
@@ -820,6 +828,7 @@ export function registerHostBulkRoutes(
       }
 
       await applyDefaultsAfterHostWrites(writtenHostIds);
+      notifyImportedHosts(userId, writtenHostIds);
 
       res.json({
         message: `Import completed: ${results.success} created, ${results.updated} updated, ${results.failed} failed`,
@@ -975,7 +984,6 @@ export function registerHostBulkRoutes(
               : null,
             statusCheckEnabled: true,
             statusCheckInterval: null,
-            terminalConfig: null,
             sshOptions: null,
             forceKeyboardInteractive: "false",
             notes: null,
@@ -1026,6 +1034,7 @@ export function registerHostBulkRoutes(
       }
 
       await applyDefaultsAfterHostWrites(writtenHostIds);
+      notifyImportedHosts(userId, writtenHostIds);
 
       res.json({
         message: `Import completed: ${results.success} created, ${results.updated} updated, ${results.failed} failed`,
diff --git a/src/backend/database/routes/host-folder-routes.ts b/src/backend/database/routes/host-folder-routes.ts
index dfddd50e0..4ef829549 100644
--- a/src/backend/database/routes/host-folder-routes.ts
+++ b/src/backend/database/routes/host-folder-routes.ts
@@ -12,7 +12,10 @@ import {
 } from "../repositories/factory.js";
 import { isNonEmptyString } from "./host-normalizers.js";
 import { recompute } from "../../hosts/defaults/recompute.js";
-import { setFolderCredentialDefault } from "../../hosts/defaults/service.js";
+import {
+  folderCredentialIds,
+  setFolderCredentialDefault,
+} from "../../hosts/defaults/service.js";
 
 type HostFolderRoutesDeps = {
   authenticateJWT: RequestHandler;
@@ -143,10 +146,17 @@ export function registerHostFolderRoutes(
       }
 
       try {
-        const folders =
-          await createCurrentHostFolderRepository().listFolders(userId);
+        const [folders, credentials] = await Promise.all([
+          createCurrentHostFolderRepository().listFolders(userId),
+          folderCredentialIds(userId),
+        ]);
 
-        res.json(folders);
+        res.json(
+          folders.map((folder) => ({
+            ...folder,
+            credentialId: credentials.get(folder.id) ?? null,
+          })),
+        );
       } catch (err) {
         sshLogger.error("Failed to fetch folders", err, {
           operation: "fetch_folders",
@@ -238,7 +248,6 @@ export function registerHostFolderRoutes(
             name,
             color,
             icon,
-            normalizedCredentialId,
           );
         if (typeof localOnly === "boolean") {
           await createCurrentHostFolderRepository().setLocalOnly(
diff --git a/src/backend/database/routes/host-normalizers.ts b/src/backend/database/routes/host-normalizers.ts
index 15457f15e..0202681b3 100644
--- a/src/backend/database/routes/host-normalizers.ts
+++ b/src/backend/database/routes/host-normalizers.ts
@@ -62,6 +62,7 @@ export const OWNER_PRIVATE_AUTH_FIELDS = {
   ],
 } as const;
 
+/** Keys a 2.8 client's terminalConfig may carry that only the owner may set. */
 export const OWNER_PRIVATE_TERMINAL_CONFIG_FIELDS = [
   "sudoPassword",
   "agentSocketPath",
@@ -79,6 +80,14 @@ export function containsOwnerPrivateAuthUpdate(
   );
 }
 
+/**
+ * An update that names no auth type leaves the stored password and key
+ * alone. Clearing them would leave a password host with no password.
+ */
+export function keepsStoredSshAuth(authType: unknown): boolean {
+  return authType === undefined || authType === null;
+}
+
 const FOLDER_PATH_SEPARATOR = " / ";
 
 /**
@@ -263,18 +272,10 @@ export function stripSensitiveFields(
   host: Record<string, unknown>,
 ): Record<string, unknown> {
   const result = { ...host };
-  const terminalConfigForSudo =
-    host.terminalConfig &&
-    typeof host.terminalConfig === "object" &&
-    !Array.isArray(host.terminalConfig)
-      ? (host.terminalConfig as Record<string, unknown>)
-      : undefined;
   result.hasKey = !!host.key;
   result.hasKeyPassword = !!host.keyPassword;
   result.hasPassword = !!host.password;
-  // 2.8 editors kept the sudo password inside terminal_config.
-  result.hasSudoPassword =
-    !!host.sudoPassword || !!terminalConfigForSudo?.sudoPassword;
+  result.hasSudoPassword = !!host.sudoPassword;
   for (const field of SENSITIVE_FIELDS) {
     delete result[field];
   }
@@ -283,11 +284,11 @@ export function stripSensitiveFields(
     typeof result.terminalConfig === "object" &&
     !Array.isArray(result.terminalConfig)
   ) {
-    const terminalConfig = {
-      ...(result.terminalConfig as Record<string, unknown>),
-    };
-    delete terminalConfig.sudoPassword;
-    result.terminalConfig = terminalConfig;
+    const { sudoPassword: _sudo, ...rest } = result.terminalConfig as Record<
+      string,
+      unknown
+    >;
+    result.terminalConfig = rest;
   }
   return result;
 }
@@ -295,6 +296,7 @@ export function stripSensitiveFields(
 // Connection essentials a connect-level recipient is allowed to see.
 const CONNECT_LEVEL_FIELDS = new Set([
   "id",
+  "syncId",
   "userId",
   "ownerId",
   "ownerUsername",
@@ -397,44 +399,22 @@ export function parseSharedSource(
   }
 }
 
-function parseJsonObject(value: unknown): Record<string, unknown> | null {
-  if (value && typeof value === "object" && !Array.isArray(value)) {
-    return value as Record<string, unknown>;
-  }
-  if (typeof value !== "string" || !value) return null;
-  try {
-    const parsed = JSON.parse(value);
-    return parsed && typeof parsed === "object" && !Array.isArray(parsed)
-      ? parsed
-      : null;
-  } catch {
-    return null;
-  }
-}
-
 /**
  * sshOptions, and terminalConfig in the shape 2.8 clients and exports read:
  * core's own keys only, the SSH options. Everything else 2.8 kept there now
  * belongs to plugins' host settings, which they put back through their
- * hostPayloadLegacy. A sudo password 2.8 kept in terminal_config comes out as
- * sudoPassword, for the sanitizers to handle.
+ * hostPayloadLegacy.
  */
 export function hostTerminalExport(host: Record<string, unknown>): {
   sshOptions: HostSshOptions;
   terminalConfig?: Record<string, unknown>;
-  sudoPassword?: unknown;
 } {
-  const raw = parseJsonObject(host.terminalConfig);
-  const sshOptions = parseSshOptions(
-    host.sshOptions != null ? host.sshOptions : raw,
-  );
+  const sshOptions = parseSshOptions(host.sshOptions);
   const terminalConfig: Record<string, unknown> = { ...sshOptions };
-  const legacySudo = !host.sudoPassword ? raw?.sudoPassword : undefined;
   return {
     sshOptions,
     terminalConfig:
       Object.keys(terminalConfig).length > 0 ? terminalConfig : undefined,
-    ...(legacySudo ? { sudoPassword: legacySudo } : {}),
   };
 }
 
diff --git a/src/backend/database/routes/host-plugin-settings.ts b/src/backend/database/routes/host-plugin-settings.ts
index 2f0ce34ae..4e5e2008b 100644
--- a/src/backend/database/routes/host-plugin-settings.ts
+++ b/src/backend/database/routes/host-plugin-settings.ts
@@ -10,7 +10,7 @@
  * on this path has to decrypt and the async work stays in one place.
  */
 
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 import { createCurrentPluginSettingsRepository } from "../repositories/factory.js";
 import type { PluginSettingsRecord } from "../repositories/plugin-settings-repository.js";
 import {
@@ -22,7 +22,7 @@ import {
 import {
   coerceSettingValue,
   validateSettingValue,
-} from "@termix/plugin-sdk/settings";
+} from "@termix-ssh/plugin-sdk/settings";
 import { getPluginRuntime } from "../../plugins/index.js";
 import { consume } from "../../plugins/registry.js";
 import { sshLogger } from "../../utils/logger.js";
diff --git a/src/backend/database/routes/host-terminal-fields.ts b/src/backend/database/routes/host-terminal-fields.ts
index 97d71eb36..8b7c5c69c 100644
--- a/src/backend/database/routes/host-terminal-fields.ts
+++ b/src/backend/database/routes/host-terminal-fields.ts
@@ -1,14 +1,11 @@
 /**
- * How a host update writes terminal_config and ssh_options, kept apart from
- * the route so it can be tested on its own.
+ * How a host update writes ssh_options, kept apart from the route so it can
+ * be tested on its own.
  */
 
 import { createCurrentHostResolutionRepository } from "../repositories/factory.js";
 import { parseSshOptions } from "../../hosts/ssh-options.js";
-import {
-  OWNER_PRIVATE_SSH_OPTION_FIELDS,
-  OWNER_PRIVATE_TERMINAL_CONFIG_FIELDS,
-} from "./host-normalizers.js";
+import { OWNER_PRIVATE_SSH_OPTION_FIELDS } from "./host-normalizers.js";
 
 export function parseTerminalConfig(
   value: unknown,
@@ -27,63 +24,41 @@ export function parseTerminalConfig(
 }
 
 /**
- * terminal_config is merged into what is stored rather than replaced. The
- * 2.8 keys the editor no longer sends (the terminal's look, which the
- * ssh-terminal plugin copies into its host settings, and a sudo password 2.8
- * editors kept there) stay until 3.0.0 drops the column. A shared editor
- * never changes the owner's private keys in either JSON. Returns an error
- * for a terminalConfig that cannot be read.
+ * A 2.8 client's terminalConfig only feeds sshOptions, which the route has
+ * already taken from it. A shared editor never changes the owner's private
+ * SSH options. Returns an error for a terminalConfig that cannot be read.
  */
-export async function mergeStoredTerminalFields(
+export async function mergeStoredSshOptions(
   sshDataObj: Record<string, unknown>,
   hostData: Record<string, unknown>,
   hostId: number,
   ownerId: string,
   isOwner: boolean,
 ): Promise<string | null> {
-  const sentTerminalConfig =
-    hostData.terminalConfig !== undefined && hostData.terminalConfig !== null;
-  const incoming = sentTerminalConfig
-    ? parseTerminalConfig(hostData.terminalConfig)
-    : null;
-  if (sentTerminalConfig && !incoming) return "Invalid terminal config";
+  if (
+    hostData.terminalConfig !== undefined &&
+    hostData.terminalConfig !== null &&
+    !parseTerminalConfig(hostData.terminalConfig)
+  ) {
+    return "Invalid terminal config";
+  }
   delete sshDataObj.terminalConfig;
 
-  const sentSudoPassword = isOwner && hostData.sudoPassword !== undefined;
-  if (!incoming && !sentSudoPassword && sshDataObj.sshOptions === undefined) {
-    return null;
-  }
+  if (isOwner || sshDataObj.sshOptions === undefined) return null;
 
   const stored = await createCurrentHostResolutionRepository().findHostById(
     hostId,
     ownerId,
   );
-  const storedConfig = parseTerminalConfig(stored?.terminalConfig) ?? {};
-
-  if (incoming || (sentSudoPassword && "sudoPassword" in storedConfig)) {
-    const merged = { ...storedConfig, ...(incoming ?? {}) };
-    if (!isOwner) {
-      for (const field of OWNER_PRIVATE_TERMINAL_CONFIG_FIELDS) {
-        if (field in storedConfig) merged[field] = storedConfig[field];
-        else delete merged[field];
-      }
+  const options = parseSshOptions(sshDataObj.sshOptions);
+  const storedOptions = parseSshOptions(stored?.sshOptions);
+  for (const field of OWNER_PRIVATE_SSH_OPTION_FIELDS) {
+    if (storedOptions[field] !== undefined) {
+      options[field] = storedOptions[field];
+    } else {
+      delete options[field];
     }
-    // A sudo password saved on its own lives in the encrypted column.
-    if (sentSudoPassword) delete merged.sudoPassword;
-    sshDataObj.terminalConfig = JSON.stringify(merged);
-  }
-
-  if (!isOwner && sshDataObj.sshOptions !== undefined) {
-    const options = parseSshOptions(sshDataObj.sshOptions);
-    const storedOptions = parseSshOptions(stored?.sshOptions ?? storedConfig);
-    for (const field of OWNER_PRIVATE_SSH_OPTION_FIELDS) {
-      if (storedOptions[field] !== undefined) {
-        options[field] = storedOptions[field];
-      } else {
-        delete options[field];
-      }
-    }
-    sshDataObj.sshOptions = JSON.stringify(options);
   }
+  sshDataObj.sshOptions = JSON.stringify(options);
   return null;
 }
diff --git a/src/backend/database/routes/host.ts b/src/backend/database/routes/host.ts
index 31e75a726..9b25fd3e3 100644
--- a/src/backend/database/routes/host.ts
+++ b/src/backend/database/routes/host.ts
@@ -31,6 +31,7 @@ import {
 import {
   applyHostKeyTypeUpdate,
   containsOwnerPrivateAuthUpdate,
+  keepsStoredSshAuth,
   isNonEmptyString,
   isOptionalBoolean,
   isValidPort,
@@ -98,7 +99,7 @@ import {
   listHostProtocols,
 } from "../../hosts/protocol-auth/registry.js";
 import {
-  mergeStoredTerminalFields,
+  mergeStoredSshOptions,
   parseTerminalConfig,
 } from "./host-terminal-fields.js";
 
@@ -316,11 +317,6 @@ router.post(
       jumpHosts: Array.isArray(jumpHosts) ? JSON.stringify(jumpHosts) : null,
       statusCheckEnabled: statusCheckEnabled === false ? 0 : 1,
       statusCheckInterval: normalizeStatusInterval(statusCheckInterval),
-      terminalConfig: terminalConfig
-        ? typeof terminalConfig === "string"
-          ? terminalConfig
-          : JSON.stringify(terminalConfig)
-        : null,
       sshOptions: sshOptionsForWrite({ sshOptions, terminalConfig }) ?? null,
       forceKeyboardInteractive: forceKeyboardInteractive ? "true" : "false",
       notes: notes || null,
@@ -889,11 +885,6 @@ router.put(
       jumpHosts: Array.isArray(jumpHosts) ? JSON.stringify(jumpHosts) : null,
       statusCheckEnabled: statusCheckEnabled === false ? 0 : 1,
       statusCheckInterval: normalizeStatusInterval(statusCheckInterval),
-      terminalConfig: terminalConfig
-        ? typeof terminalConfig === "string"
-          ? terminalConfig
-          : JSON.stringify(terminalConfig)
-        : null,
       forceKeyboardInteractive: forceKeyboardInteractive ? "true" : "false",
       notes: notes || null,
       useSocks5: useSocks5 ? 1 : 0,
@@ -931,6 +922,8 @@ router.put(
       sshDataObj.key = null;
       sshDataObj.keyPassword = null;
       sshDataObj.keyType = null;
+    } else if (keepsStoredSshAuth(effectiveAuthType)) {
+      // The update says nothing about authentication.
     } else if (effectiveAuthType === "password") {
       if (password) {
         sshDataObj.password = password;
@@ -1081,7 +1074,7 @@ router.put(
         }
       }
 
-      const terminalFieldsError = await mergeStoredTerminalFields(
+      const terminalFieldsError = await mergeStoredSshOptions(
         sshDataObj,
         hostData,
         Number(hostId),
@@ -1661,11 +1654,7 @@ router.get(
       }
 
       const resolved = (await resolveHostCredentials(host, userId)) || host;
-      let value = resolved[field];
-
-      if (!value && field === "sudoPassword") {
-        value = hostTerminalExport(resolved).sudoPassword || null;
-      }
+      const value = resolved[field];
 
       if (!value) {
         return res.status(404).json({ error: "No password set" });
@@ -1775,10 +1764,7 @@ router.get(
             credentialId: resolvedHost.credentialId || null,
             overrideCredentialUsername:
               !!resolvedHost.overrideCredentialUsername,
-            sudoPassword:
-              resolvedHost.sudoPassword ||
-              hostTerminalExport(resolvedHost).sudoPassword ||
-              null,
+            sudoPassword: resolvedHost.sudoPassword || null,
             jumpHosts: resolvedHost.jumpHosts
               ? JSON.parse(resolvedHost.jumpHosts as string)
               : null,
@@ -1911,9 +1897,7 @@ router.get(
                 !!resolvedHost.overrideCredentialUsername,
               sudoPassword: shareMode
                 ? null
-                : resolvedHost.sudoPassword ||
-                  hostTerminalExport(resolvedHost).sudoPassword ||
-                  null,
+                : resolvedHost.sudoPassword || null,
               jumpHosts: resolvedHost.jumpHosts
                 ? JSON.parse(resolvedHost.jumpHosts as string)
                 : null,
diff --git a/src/backend/database/routes/keybinding-validation.ts b/src/backend/database/routes/keybinding-validation.ts
index f616e706d..a6e21901c 100644
--- a/src/backend/database/routes/keybinding-validation.ts
+++ b/src/backend/database/routes/keybinding-validation.ts
@@ -2,7 +2,7 @@ import {
   CORE_KEYBINDING_ACTIONS,
   validateKeybindingActionParams,
   type PluginKeybindingActionContribution,
-} from "@termix/plugin-sdk/manifest";
+} from "@termix-ssh/plugin-sdk/manifest";
 
 export interface DeclaredKeybindingAction extends PluginKeybindingActionContribution {
   pluginId: string;
diff --git a/src/backend/database/routes/open-tabs.ts b/src/backend/database/routes/open-tabs.ts
index a58ff228f..a42f28aea 100644
--- a/src/backend/database/routes/open-tabs.ts
+++ b/src/backend/database/routes/open-tabs.ts
@@ -9,6 +9,14 @@ const router = express.Router();
 const authManager = AuthManager.getInstance();
 const authenticateJWT = authManager.createAuthMiddleware();
 
+const DEFAULT_TAB_TTL_MINUTES = 30;
+
+// Tabs live as long as the terminal keeps a detached session.
+function getTabTtlMs(): number {
+  const minutes = liveTerminalSessions.idleTimeoutMinutes();
+  return (minutes && minutes > 0 ? minutes : DEFAULT_TAB_TTL_MINUTES) * 60_000;
+}
+
 /**
  * @openapi
  * /open-tabs:
@@ -20,14 +28,6 @@ const authenticateJWT = authManager.createAuthMiddleware();
  *       200:
  *         description: List of open tabs ordered by tab_order.
  */
-const DEFAULT_TAB_TTL_MINUTES = 30;
-
-// Tabs live as long as the terminal keeps a detached session.
-function getTabTtlMs(): number {
-  const minutes = liveTerminalSessions.idleTimeoutMinutes();
-  return (minutes && minutes > 0 ? minutes : DEFAULT_TAB_TTL_MINUTES) * 60_000;
-}
-
 router.get("/", authenticateJWT, async (req: Request, res: Response) => {
   const userId = (req as AuthenticatedRequest).userId;
   try {
diff --git a/src/backend/database/routes/plugin-api-routes.ts b/src/backend/database/routes/plugin-api-routes.ts
index 76be9f37d..93ebedcae 100644
--- a/src/backend/database/routes/plugin-api-routes.ts
+++ b/src/backend/database/routes/plugin-api-routes.ts
@@ -18,7 +18,7 @@ import express, { type Request, type Response } from "express";
 import { databaseLogger } from "../../utils/logger.js";
 import { getPluginRouter, isPluginInstalled } from "../../plugins/http.js";
 import { getRequestBasePath } from "../../utils/request-origin.js";
-import type { PluginLegacyRedirect } from "@termix/plugin-sdk/manifest";
+import type { PluginLegacyRedirect } from "@termix-ssh/plugin-sdk/manifest";
 
 const router = express.Router();
 
diff --git a/src/backend/database/routes/plugins.ts b/src/backend/database/routes/plugins.ts
index 25cc60534..7eae04585 100644
--- a/src/backend/database/routes/plugins.ts
+++ b/src/backend/database/routes/plugins.ts
@@ -17,6 +17,19 @@ import { describePluginFrontend } from "../../plugins/assets.js";
 import { invalidatePluginPermissionCache } from "../../plugins/permissions.js";
 import { getPluginPublicHttpRoutes } from "../../plugins/http.js";
 import { getPluginPublicWsRoutes } from "../../plugins/ws.js";
+import { MAX_UPLOAD_BYTES, PluginManageError } from "../../plugins/manage.js";
+import { parsePluginChannel } from "../../plugins/registry-index.js";
+import {
+  pluginDocsUrl,
+  pluginEnvVars,
+  pluginFeatures,
+  youtubeVideoId,
+  type PluginEnvVar,
+} from "../../plugins/manifest.js";
+import {
+  isPluginChoice,
+  type PluginChoice,
+} from "../../../types/plugin-onboarding.js";
 import {
   findField,
   getAllSettings,
@@ -32,7 +45,7 @@ import {
 import type {
   PluginManifest,
   PluginSettingsField,
-} from "@termix/plugin-sdk/manifest";
+} from "@termix-ssh/plugin-sdk/manifest";
 
 const router = express.Router();
 
@@ -69,36 +82,55 @@ router.get("/public", async (_req: Request, res: Response) => {
   try {
     const records = await createCurrentPluginRepository().listAll();
     const { loader } = getPluginRuntime();
-    const plugins = records.flatMap((record) => {
-      if (record.state !== "enabled") return [];
-      const loaded = loader.get(record.id);
-      let manifest: {
-        contributes?: { guest?: boolean; guestViews?: string[] };
-        dependencies?: Record<string, string>;
-        optionalDependencies?: Record<string, string>;
+    type GuestManifest = {
+      contributes?: {
+        guest?: boolean;
+        guestViews?: string[];
+        tabs?: unknown[];
+        panels?: unknown[];
       };
+      dependencies?: Record<string, string>;
+      optionalDependencies?: Record<string, string>;
+    };
+    const guests = records.flatMap((record) => {
+      if (record.state !== "enabled") return [];
       try {
-        manifest = JSON.parse(record.manifestJson);
+        const manifest = JSON.parse(record.manifestJson) as GuestManifest;
+        return manifest?.contributes?.guest === true
+          ? [{ record, manifest }]
+          : [];
       } catch {
         return [];
       }
-      if (manifest?.contributes?.guest !== true) return [];
-      return [
-        {
-          id: record.id,
-          name: record.name,
-          version: record.version,
-          enabled: true,
-          state: loaded?.state ?? record.state,
-          contributes: {
-            guest: true,
-            guestViews: manifest.contributes.guestViews ?? [],
-          },
-          dependencies: manifest.dependencies ?? {},
-          optionalDependencies: manifest.optionalDependencies ?? {},
-          ...describePluginFrontend(loaded),
+    });
+    // Only guest plugins load on a guest page, so a dependency that is not
+    // one would block the plugin there for nothing.
+    const guestIds = new Set(guests.map(({ record }) => record.id));
+    const onlyGuests = (deps: Record<string, string> = {}) =>
+      Object.fromEntries(
+        Object.entries(deps).filter(([id]) => guestIds.has(id)),
+      );
+    const plugins = guests.map(({ record, manifest }) => {
+      const loaded = loader.get(record.id);
+      return {
+        id: record.id,
+        name: record.name,
+        // Not before login: it tells a scanner which known bugs apply.
+        version: "",
+        enabled: true,
+        state: loaded?.state ?? record.state,
+        // The tab and panel ids a guest page may register, which the
+        // browser checks against the manifest.
+        contributes: {
+          guest: true,
+          guestViews: manifest.contributes?.guestViews ?? [],
+          tabs: manifest.contributes?.tabs ?? [],
+          panels: manifest.contributes?.panels ?? [],
         },
-      ];
+        dependencies: onlyGuests(manifest.dependencies),
+        optionalDependencies: onlyGuests(manifest.optionalDependencies),
+        ...describePluginFrontend(loaded),
+      };
     });
     res.json(plugins);
   } catch (error) {
@@ -121,7 +153,8 @@ router.get("/public", async (_req: Request, res: Response) => {
  *       that plugins provide, before anyone has signed in. Returns only
  *       enabled plugins that contribute login methods or second factors, with
  *       the fields the browser loader needs and the ids they contribute.
- *       Nothing operational: no capabilities, grants, settings or errors.
+ *       Nothing operational: no versions, capabilities, grants, settings or
+ *       errors.
  *     tags:
  *       - Plugins
  *     responses:
@@ -165,7 +198,7 @@ export async function listPreLoginPlugins(): Promise<
       {
         id: record.id,
         name: record.name,
-        version: record.version,
+        version: "",
         enabled: true,
         state: loaded.state,
         contributes: { auth: { loginMethods, secondFactors } },
@@ -245,11 +278,25 @@ router.get("/", authenticateJWT, async (req: Request, res: Response) => {
         let icon: string | undefined;
         let dependencies: Record<string, string> = {};
         let optionalDependencies: Record<string, string> = {};
+        let description: string | undefined;
+        let author: string | undefined;
+        let repository: string | undefined;
+        let videoId: string | undefined;
+        let features: string[] = [];
+        let docs: string | undefined;
+        let env: PluginEnvVar[] = [];
         try {
           const manifest = JSON.parse(record.manifestJson) as {
             contributes?: unknown;
             capabilities?: unknown;
             icon?: unknown;
+            description?: unknown;
+            author?: unknown;
+            repository?: unknown;
+            video?: unknown;
+            features?: unknown;
+            docs?: unknown;
+            env?: unknown;
             dependencies?: Record<string, string>;
             optionalDependencies?: Record<string, string>;
           };
@@ -260,6 +307,21 @@ router.get("/", authenticateJWT, async (req: Request, res: Response) => {
           icon = typeof manifest?.icon === "string" ? manifest.icon : undefined;
           dependencies = manifest?.dependencies ?? {};
           optionalDependencies = manifest?.optionalDependencies ?? {};
+          description =
+            typeof manifest?.description === "string"
+              ? manifest.description
+              : undefined;
+          const rawAuthor = manifest?.author as { name?: unknown } | undefined;
+          author =
+            typeof rawAuthor?.name === "string" ? rawAuthor.name : undefined;
+          repository =
+            typeof manifest?.repository === "string"
+              ? manifest.repository
+              : undefined;
+          videoId = youtubeVideoId(manifest?.video) ?? undefined;
+          features = pluginFeatures(manifest?.features);
+          docs = pluginDocsUrl(manifest?.docs) ?? undefined;
+          env = pluginEnvVars(manifest?.env);
         } catch {
           contributes = null;
         }
@@ -274,6 +336,7 @@ router.get("/", authenticateJWT, async (req: Request, res: Response) => {
           icon,
           dependencies,
           optionalDependencies,
+          docs,
           ...describePluginFrontend(loaded),
         };
 
@@ -283,6 +346,17 @@ router.get("/", authenticateJWT, async (req: Request, res: Response) => {
           ...summary,
           tier: record.tier,
           source: record.source,
+          registryId: record.registryId ?? null,
+          autoUpdate: Boolean(record.autoUpdate),
+          pinnedVersion: record.pinnedVersion ?? null,
+          channel: record.channel ?? "stable",
+          description,
+          author,
+          repository,
+          videoId,
+          features,
+          env,
+          signedBy: loaded?.signedBy ?? null,
           capabilities,
           grantedCapabilities: grantsByPlugin.get(record.id) ?? [],
           lastError: loaded?.lastError ?? record.lastError ?? null,
@@ -313,12 +387,195 @@ async function isManagedByLinkedServer(pluginId: string): Promise<boolean> {
   return isServerManaged(pluginId);
 }
 
+async function auditPluginAction(
+  req: Request,
+  action: string,
+  pluginId: string,
+  details: Record<string, unknown> = {},
+): Promise<void> {
+  const userId = (req as AuthenticatedRequest).userId as string;
+  const { ipAddress, userAgent } = getRequestMeta(req);
+  try {
+    await logAudit({
+      userId,
+      username: await getAuditUsername(userId),
+      action,
+      resourceType: "plugin",
+      resourceId: pluginId,
+      resourceName: pluginId,
+      details: JSON.stringify(details),
+      ipAddress,
+      userAgent,
+      success: true,
+    });
+  } catch {
+    // An audit failure must not undo a change that already happened.
+  }
+}
+
+function sendManageError(
+  res: Response,
+  error: unknown,
+  fallback: string,
+  operation: string,
+): void {
+  if (error instanceof PluginManageError) {
+    res.status(error.status).json({
+      error: error.message,
+      code: error.code,
+      ...(error.details ?? {}),
+    });
+    return;
+  }
+  databaseLogger.error(
+    fallback,
+    error instanceof Error ? error : new Error(String(error)),
+    { operation },
+  );
+  res.status(500).json({ error: fallback });
+}
+
+async function refuseOnLinkedDesktop(res: Response): Promise<boolean> {
+  const { isLinkedDesktop } = await import("../../plugins/manage.js");
+  if (!(await isLinkedDesktop())) return false;
+  res.status(409).json({
+    error: "Plugins on a linked desktop are managed by the server",
+    code: "MANAGED_BY_SERVER",
+  });
+  return true;
+}
+
+/**
+ * @openapi
+ * /plugins/onboarding:
+ *   get:
+ *     summary: List plugins for the onboarding plugin picker
+ *     description: Every installed plugin with its category, hard dependencies, current state and the onboarding defaults from the bundled index (recommended, consent). pending is true on a fresh install until an admin confirms the picker. managedByLinkedServer is true on a desktop linked to a server, where the picker is not shown.
+ *     tags:
+ *       - Plugins
+ *     responses:
+ *       200:
+ *         description: The picker's plugin list.
+ *       403:
+ *         description: The caller lacks admin.plugins.manage.
+ *       500:
+ *         description: The list could not be read.
+ */
+router.get(
+  "/onboarding",
+  authenticateJWT,
+  requireManagePlugins,
+  async (_req: Request, res: Response) => {
+    try {
+      const { describeOnboardingPlugins } =
+        await import("../../plugins/onboarding.js");
+      res.json(await describeOnboardingPlugins());
+    } catch (error) {
+      sendManageError(
+        res,
+        error,
+        "Failed to list plugins for onboarding",
+        "plugin_onboarding_list",
+      );
+    }
+  },
+);
+
+/**
+ * @openapi
+ * /plugins/onboarding/apply:
+ *   post:
+ *     summary: Apply the onboarding plugin picker
+ *     description: Sets every listed plugin to enabled, disabled or removed in one pass. Choices are first raised so that every kept plugin still has its hard dependencies (the adjustments list says which and why). Enabling runs dependencies first, disabling and removing run dependents first, and one plugin failing does not stop the rest. Removing a bundled plugin deletes it and its data; it can be reinstalled from the registry later. Clears the fresh-install pending flag. With dryRun nothing changes and the response lists what would.
+ *     tags:
+ *       - Plugins
+ *     requestBody:
+ *       required: true
+ *       content:
+ *         application/json:
+ *           schema:
+ *             type: object
+ *             required: [choices]
+ *             properties:
+ *               choices:
+ *                 type: object
+ *                 additionalProperties:
+ *                   type: string
+ *                   enum: [enabled, disabled, remove]
+ *               dryRun:
+ *                 type: boolean
+ *     responses:
+ *       200:
+ *         description: What was enabled, disabled, removed or failed.
+ *       400:
+ *         description: The choices are not valid.
+ *       403:
+ *         description: The caller lacks admin.plugins.manage.
+ *       409:
+ *         description: Plugins on a linked desktop are managed by the server.
+ *       500:
+ *         description: The choices could not be applied.
+ */
+router.post(
+  "/onboarding/apply",
+  authenticateJWT,
+  requireManagePlugins,
+  async (req: Request, res: Response) => {
+    const { choices, dryRun } = req.body ?? {};
+    if (
+      !choices ||
+      typeof choices !== "object" ||
+      Array.isArray(choices) ||
+      !Object.values(choices).every(isPluginChoice) ||
+      (dryRun !== undefined && typeof dryRun !== "boolean")
+    ) {
+      res.status(400).json({ error: "Invalid plugin choices" });
+      return;
+    }
+    if (!dryRun && (await refuseOnLinkedDesktop(res))) return;
+
+    try {
+      const { applyOnboardingChoices } =
+        await import("../../plugins/onboarding.js");
+      const result = await applyOnboardingChoices(
+        choices as Record<string, PluginChoice>,
+        { dryRun: dryRun === true },
+      );
+      if (!dryRun) {
+        for (const id of result.enabled) {
+          await auditPluginAction(req, "enable_plugin", id, {
+            via: "onboarding",
+          });
+        }
+        for (const id of result.disabled) {
+          await auditPluginAction(req, "disable_plugin", id, {
+            via: "onboarding",
+          });
+        }
+        for (const id of result.removed) {
+          await auditPluginAction(req, "uninstall_plugin", id, {
+            via: "onboarding",
+          });
+        }
+      }
+      res.json(result);
+    } catch (error) {
+      sendManageError(
+        res,
+        error,
+        "Failed to apply plugin choices",
+        "plugin_onboarding_apply",
+      );
+    }
+  },
+);
+
 /**
  * @openapi
  * /plugins/{id}/state:
  *   patch:
  *     summary: Enable or disable a plugin
- *     description: Persists the new state and starts or stops the plugin immediately. Disabling releases everything the plugin owns, including any port it was listening on.
+ *     description: Persists the new state and starts or stops the plugin immediately. Disabling releases everything the plugin owns, including any port it was listening on. Enabling also starts any installed hard dependency that is off, and disabling also stops the running plugins that depend on it. With dryRun nothing changes and the response lists what would.
  *     tags:
  *       - Plugins
  *     parameters:
@@ -327,6 +584,10 @@ async function isManagedByLinkedServer(pluginId: string): Promise<boolean> {
  *         required: true
  *         schema:
  *           type: string
+ *       - in: query
+ *         name: dryRun
+ *         schema:
+ *           type: boolean
  *     requestBody:
  *       required: true
  *       content:
@@ -362,8 +623,7 @@ router.patch(
     }
 
     try {
-      const repository = createCurrentPluginRepository();
-      const record = await repository.findById(pluginId);
+      const record = await createCurrentPluginRepository().findById(pluginId);
       if (!record) {
         res.status(404).json({ error: "Plugin not found" });
         return;
@@ -378,33 +638,42 @@ router.patch(
         return;
       }
 
-      // Persist first: if the start or stop below throws, the recorded
-      // intent still matches what the user asked for, and the next boot
-      // acts on it rather than silently reverting.
-      await repository.update(pluginId, {
-        state: enabled ? "enabled" : "disabled",
-        lastError: null,
-      });
+      const { planStateChange, setPluginState } =
+        await import("../../plugins/manage.js");
 
-      const { activatePlugin, deactivatePlugin } =
-        await import("../../plugins/index.js");
+      if (req.query.dryRun === "1" || req.query.dryRun === "true") {
+        res.json({
+          id: pluginId,
+          enabled,
+          ...(await planStateChange(pluginId, enabled)),
+        });
+        return;
+      }
 
-      if (enabled) await activatePlugin(pluginId);
-      else await deactivatePlugin(pluginId);
+      const result = await setPluginState(pluginId, enabled);
+      await auditPluginAction(
+        req,
+        enabled ? "enable_plugin" : "disable_plugin",
+        pluginId,
+        {
+          enable: result.enable,
+          disable: result.disable,
+        },
+      );
 
       databaseLogger.info(
         `Plugin ${pluginId} ${enabled ? "enabled" : "disabled"}`,
         { operation: "plugin_state_change", pluginId },
       );
 
-      res.json({ id: pluginId, enabled });
+      res.json({ id: pluginId, enabled, ...result });
     } catch (error) {
-      databaseLogger.error(
-        `Failed to change state for plugin ${pluginId}`,
-        error instanceof Error ? error : new Error(String(error)),
-        { operation: "plugin_state_change" },
+      sendManageError(
+        res,
+        error,
+        "Failed to change plugin state",
+        "plugin_state_change",
       );
-      res.status(500).json({ error: "Failed to change plugin state" });
     }
   },
 );
@@ -666,7 +935,7 @@ router.delete(
  * /plugins/{id}/data:
  *   delete:
  *     summary: Delete everything a plugin stores
- *     description: Drops every table under the plugin's prefix and clears its key/value state, settings and secrets, capability grants and migration ledger. Role permissions stay. Disabling a plugin never touches its data; this is the explicit uninstall path, and it cannot be undone. The plugin is deactivated first so nothing is writing while its tables go.
+ *     description: Drops every table under the plugin's prefix and clears its key/value state, settings and secrets, migration ledger and files. Role permissions stay, and the capabilities the admin agreed to are granted again. The plugin stays installed but is switched off, so nothing is writing while its tables go. It cannot be undone.
  *     tags:
  *       - Plugins
  *     parameters:
@@ -698,19 +967,18 @@ router.delete(
         return;
       }
 
-      // Stopped first: dropping a table out from under a running plugin turns
-      // its next query into an error rather than a clean shutdown.
-      const { loader } = getPluginRuntime();
-      if (loader.get(pluginId)?.state === "active") {
-        await loader.deactivate(pluginId);
+      if (await isManagedByLinkedServer(pluginId)) {
+        res.status(409).json({
+          error: "Managed by the linked server",
+          code: "MANAGED_BY_SERVER",
+        });
+        return;
       }
 
-      const { removePluginData } = await import("../../plugins/data.js");
-      const removed = await removePluginData(pluginId, {
-        knownPluginIds: getPluginRuntime()
-          .loader.list()
-          .map((plugin) => plugin.id),
-      });
+      // The plugin is stopped first: dropping a table out from under a
+      // running plugin turns its next query into an error.
+      const { deletePluginData } = await import("../../plugins/manage.js");
+      const removed = await deletePluginData(pluginId, userId ?? null);
 
       databaseLogger.warn(`Removed all data for plugin ${pluginId}`, {
         operation: "plugin_remove_data",
@@ -719,6 +987,10 @@ router.delete(
         tables: removed.tables.length,
         kvKeys: removed.kvKeys,
       });
+      await auditPluginAction(req, "delete_plugin_data", pluginId, {
+        tables: removed.tables.length,
+        kvKeys: removed.kvKeys,
+      });
 
       res.json({ id: pluginId, removed });
     } catch (error) {
@@ -1297,4 +1569,818 @@ router.put(
   },
 );
 
+const ID_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
+
+/** The consented capability list, or null when the body is malformed. */
+function readCapabilities(body: unknown): string[] | undefined | null {
+  const value = (body as { capabilities?: unknown } | undefined)?.capabilities;
+  if (value === undefined) return undefined;
+  if (
+    !Array.isArray(value) ||
+    value.length > 200 ||
+    !value.every((c) => typeof c === "string" && c.length <= 128)
+  ) {
+    return null;
+  }
+  return value as string[];
+}
+
+function readVersion(body: unknown): string | undefined | null {
+  const version = (body as { version?: unknown } | undefined)?.version;
+  if (version === undefined || version === null || version === "") {
+    return undefined;
+  }
+  return typeof version === "string" && version.length <= 64 ? version : null;
+}
+
+/**
+ * @openapi
+ * /plugins/registry:
+ *   get:
+ *     summary: List the plugins in the official registry
+ *     description: >
+ *       Fetches the official registry index (cached for 15 minutes unless
+ *       refresh is set) and merges it with what is installed here: the
+ *       installed version, the newest release this build can run, whether an
+ *       update asks for new capabilities, and the pin and auto-update choices.
+ *     tags:
+ *       - Plugins
+ *     parameters:
+ *       - in: query
+ *         name: refresh
+ *         schema:
+ *           type: boolean
+ *     responses:
+ *       200:
+ *         description: The registry listing.
+ *       403:
+ *         description: The caller lacks admin.plugins.manage.
+ *       502:
+ *         description: The registry could not be reached.
+ */
+router.get(
+  "/registry",
+  authenticateJWT,
+  requireManagePlugins,
+  async (req: Request, res: Response) => {
+    try {
+      const { listRegistry } = await import("../../plugins/manage.js");
+      const force = req.query.refresh === "1" || req.query.refresh === "true";
+      res.json(await listRegistry({ force }));
+    } catch (error) {
+      databaseLogger.warn("Plugin registry fetch failed", {
+        operation: "plugin_registry",
+        error: error instanceof Error ? error.message : String(error),
+      });
+      res.status(502).json({
+        error: "Could not reach the plugin registry",
+        code: "REGISTRY_UNREACHABLE",
+      });
+    }
+  },
+);
+
+/**
+ * @openapi
+ * /plugins/update-all:
+ *   post:
+ *     summary: Update every plugin that has a newer release
+ *     description: Skips pinned plugins and any update that asks for new capabilities, which are returned under needsReview for the admin to look at one by one.
+ *     tags:
+ *       - Plugins
+ *     responses:
+ *       200:
+ *         description: What was updated, what needs review and what failed.
+ *       403:
+ *         description: The caller lacks admin.plugins.manage.
+ *       409:
+ *         description: This desktop is linked to a server, which manages its plugins.
+ */
+router.post(
+  "/update-all",
+  authenticateJWT,
+  requireManagePlugins,
+  async (req: Request, res: Response) => {
+    if (await refuseOnLinkedDesktop(res)) return;
+    try {
+      const { updateAllPlugins } = await import("../../plugins/manage.js");
+      const userId = (req as AuthenticatedRequest).userId as string;
+      const result = await updateAllPlugins({ userId });
+      for (const done of result.updated) {
+        await auditPluginAction(req, "update_plugin", done.id, {
+          version: done.version,
+        });
+      }
+      res.json(result);
+    } catch (error) {
+      sendManageError(res, error, "Failed to update plugins", "plugin_update");
+    }
+  },
+);
+
+/**
+ * @openapi
+ * /plugins/channel:
+ *   post:
+ *     summary: Move every installed plugin to one update channel
+ *     description: Sets the channel on every installed plugin. Nothing is installed here; the next update check offers what the channel allows. Going back to stable never downgrades a plugin that is on a beta.
+ *     tags:
+ *       - Plugins
+ *     requestBody:
+ *       required: true
+ *       content:
+ *         application/json:
+ *           schema:
+ *             type: object
+ *             required: [channel]
+ *             properties:
+ *               channel:
+ *                 type: string
+ *                 enum: [stable, beta]
+ *     responses:
+ *       200:
+ *         description: The plugins whose channel changed.
+ *       400:
+ *         description: Not a known channel.
+ *       403:
+ *         description: The caller lacks admin.plugins.manage.
+ *       409:
+ *         description: This desktop is linked to a server, which manages its plugins.
+ */
+router.post(
+  "/channel",
+  authenticateJWT,
+  requireManagePlugins,
+  async (req: Request, res: Response) => {
+    const channel = parsePluginChannel(req.body?.channel);
+    if (!channel) {
+      res.status(400).json({ error: "channel must be stable or beta" });
+      return;
+    }
+    if (await refuseOnLinkedDesktop(res)) return;
+    try {
+      const { setAllPluginChannels } = await import("../../plugins/manage.js");
+      const result = await setAllPluginChannels(channel);
+      await auditPluginAction(req, "update_plugin_options", "*", {
+        channel,
+        changed: result.changed,
+      });
+      res.json(result);
+    } catch (error) {
+      sendManageError(
+        res,
+        error,
+        "Failed to change the plugin channel",
+        "plugin_options",
+      );
+    }
+  },
+);
+
+/**
+ * @openapi
+ * /plugins/{id}/install:
+ *   post:
+ *     summary: Install a plugin from the official registry
+ *     description: >
+ *       Downloads the release, checks its sha256 and signature against a key
+ *       this build trusts, loads it, grants the capabilities it declares and
+ *       starts it along with any installed dependency that is off. Without a
+ *       version the newest compatible release is used; naming an older one
+ *       pins the plugin there. A bundled plugin at its shipped version needs
+ *       no download. capabilities must list exactly what the consent prompt
+ *       showed; when it differs from what the release asks for, nothing is
+ *       downloaded and the answer is 409 CONSENT_MISMATCH with the real list.
+ *     tags:
+ *       - Plugins
+ *     parameters:
+ *       - in: path
+ *         name: id
+ *         required: true
+ *         schema:
+ *           type: string
+ *     requestBody:
+ *       required: true
+ *       content:
+ *         application/json:
+ *           schema:
+ *             type: object
+ *             required:
+ *               - capabilities
+ *             properties:
+ *               version:
+ *                 type: string
+ *               channel:
+ *                 type: string
+ *                 enum: [stable, beta]
+ *                 description: The channel to follow. beta installs the newest beta when it is newer than stable.
+ *               capabilities:
+ *                 type: array
+ *                 items:
+ *                   type: string
+ *     responses:
+ *       200:
+ *         description: The installed version and the plugin's state.
+ *       400:
+ *         description: Invalid id, version or capability list, or no capability list.
+ *       403:
+ *         description: The caller lacks admin.plugins.manage.
+ *       404:
+ *         description: Not in the official registry.
+ *       409:
+ *         description: Already installed, incompatible, the consent does not match, or managed by a linked server.
+ *       502:
+ *         description: The registry could not be reached.
+ */
+router.post(
+  "/:id/install",
+  authenticateJWT,
+  requireManagePlugins,
+  async (req: Request, res: Response) => {
+    const pluginId = String(req.params.id);
+    const version = readVersion(req.body);
+    const capabilities = readCapabilities(req.body);
+    const channel =
+      req.body?.channel === undefined
+        ? "stable"
+        : parsePluginChannel(req.body.channel);
+    if (
+      !ID_PATTERN.test(pluginId) ||
+      version === null ||
+      capabilities === null ||
+      channel === null
+    ) {
+      res
+        .status(400)
+        .json({ error: "Invalid plugin id, version, channel or capabilities" });
+      return;
+    }
+    if (await refuseOnLinkedDesktop(res)) return;
+    try {
+      const { installPlugin } = await import("../../plugins/manage.js");
+      const userId = (req as AuthenticatedRequest).userId as string;
+      const result = await installPlugin(pluginId, {
+        version,
+        channel,
+        userId,
+        capabilities,
+      });
+      await auditPluginAction(req, "install_plugin", pluginId, {
+        version: result.version,
+        capabilities,
+      });
+      res.json(result);
+    } catch (error) {
+      sendManageError(
+        res,
+        error,
+        "Failed to install the plugin",
+        "plugin_install",
+      );
+    }
+  },
+);
+
+/**
+ * @openapi
+ * /plugins/{id}/update:
+ *   post:
+ *     summary: Update or change the installed version of a plugin
+ *     description: >
+ *       Swaps in another release from the official registry, newer or older.
+ *       If the release declares capabilities the installed one does not, the
+ *       request must set acceptCapabilities and list exactly those added
+ *       capabilities in capabilities, otherwise it answers 409 with code
+ *       CAPABILITIES_ADDED (or CONSENT_MISMATCH) and the list. A running plugin is started
+ *       again on the new version. Naming a version that is not the newest
+ *       pins the plugin to it.
+ *     tags:
+ *       - Plugins
+ *     parameters:
+ *       - in: path
+ *         name: id
+ *         required: true
+ *         schema:
+ *           type: string
+ *     requestBody:
+ *       content:
+ *         application/json:
+ *           schema:
+ *             type: object
+ *             properties:
+ *               version:
+ *                 type: string
+ *               acceptCapabilities:
+ *                 type: boolean
+ *               capabilities:
+ *                 type: array
+ *                 items:
+ *                   type: string
+ *     responses:
+ *       200:
+ *         description: The new version and the plugin's state.
+ *       400:
+ *         description: Invalid id or version.
+ *       403:
+ *         description: The caller lacks admin.plugins.manage.
+ *       404:
+ *         description: Not installed, or the version is not in the registry.
+ *       409:
+ *         description: Same version, new capabilities need consent, or managed by a linked server.
+ */
+router.post(
+  "/:id/update",
+  authenticateJWT,
+  requireManagePlugins,
+  async (req: Request, res: Response) => {
+    const pluginId = String(req.params.id);
+    const version = readVersion(req.body);
+    const capabilities = readCapabilities(req.body);
+    if (
+      !ID_PATTERN.test(pluginId) ||
+      version === null ||
+      capabilities === null
+    ) {
+      res
+        .status(400)
+        .json({ error: "Invalid plugin id, version or capabilities" });
+      return;
+    }
+    if (await refuseOnLinkedDesktop(res)) return;
+    try {
+      const { updatePlugin } = await import("../../plugins/manage.js");
+      const userId = (req as AuthenticatedRequest).userId as string;
+      const result = await updatePlugin(pluginId, {
+        version,
+        userId,
+        acceptCapabilities: req.body?.acceptCapabilities === true,
+        capabilities,
+      });
+      await auditPluginAction(req, "update_plugin", pluginId, {
+        version: result.version,
+      });
+      res.json(result);
+    } catch (error) {
+      sendManageError(
+        res,
+        error,
+        "Failed to update the plugin",
+        "plugin_update",
+      );
+    }
+  },
+);
+
+/**
+ * @openapi
+ * /plugins/{id}:
+ *   delete:
+ *     summary: Uninstall a plugin
+ *     description: >
+ *       Stops the plugin, drops its tables, settings, secrets, grants and
+ *       files, and removes it. A plugin that ships with Termix keeps its
+ *       files in the image but is marked uninstalled and never loads again
+ *       until it is installed from the Plugins tab. Refused while a running
+ *       plugin depends on it.
+ *     tags:
+ *       - Plugins
+ *     parameters:
+ *       - in: path
+ *         name: id
+ *         required: true
+ *         schema:
+ *           type: string
+ *     responses:
+ *       200:
+ *         description: What was removed.
+ *       403:
+ *         description: The caller lacks admin.plugins.manage.
+ *       404:
+ *         description: No such plugin.
+ *       409:
+ *         description: Other running plugins depend on it, or managed by a linked server.
+ */
+router.delete(
+  "/:id",
+  authenticateJWT,
+  requireManagePlugins,
+  async (req: Request, res: Response) => {
+    const pluginId = String(req.params.id);
+    if (!ID_PATTERN.test(pluginId)) {
+      res.status(400).json({ error: "Invalid plugin id" });
+      return;
+    }
+    if (await refuseOnLinkedDesktop(res)) return;
+    try {
+      const { uninstallPlugin } = await import("../../plugins/manage.js");
+      const result = await uninstallPlugin(pluginId);
+      await auditPluginAction(req, "uninstall_plugin", pluginId, {
+        tables: result.removed.tables.length,
+      });
+      res.json(result);
+    } catch (error) {
+      sendManageError(
+        res,
+        error,
+        "Failed to uninstall the plugin",
+        "plugin_uninstall",
+      );
+    }
+  },
+);
+
+/**
+ * @openapi
+ * /plugins/{id}/options:
+ *   patch:
+ *     summary: Change a plugin's update choices
+ *     description: autoUpdate lets the background check apply new releases that ask for nothing new. pinned holds the plugin at its installed version, which also stops auto-update. channel picks whether betas are offered; going back to stable keeps an installed beta until a stable release passes it.
+ *     tags:
+ *       - Plugins
+ *     parameters:
+ *       - in: path
+ *         name: id
+ *         required: true
+ *         schema:
+ *           type: string
+ *     requestBody:
+ *       required: true
+ *       content:
+ *         application/json:
+ *           schema:
+ *             type: object
+ *             properties:
+ *               autoUpdate:
+ *                 type: boolean
+ *               pinned:
+ *                 type: boolean
+ *               channel:
+ *                 type: string
+ *                 enum: [stable, beta]
+ *     responses:
+ *       200:
+ *         description: The saved choices.
+ *       400:
+ *         description: Invalid request body.
+ *       403:
+ *         description: The caller lacks admin.plugins.manage.
+ *       404:
+ *         description: No such plugin.
+ */
+router.patch(
+  "/:id/options",
+  authenticateJWT,
+  requireManagePlugins,
+  async (req: Request, res: Response) => {
+    const pluginId = String(req.params.id);
+    const { autoUpdate, pinned } = req.body ?? {};
+    const channel =
+      req.body?.channel === undefined
+        ? undefined
+        : parsePluginChannel(req.body.channel);
+    if (
+      (autoUpdate !== undefined && typeof autoUpdate !== "boolean") ||
+      (pinned !== undefined && typeof pinned !== "boolean") ||
+      channel === null
+    ) {
+      res.status(400).json({
+        error:
+          "autoUpdate and pinned must be booleans and channel stable or beta",
+      });
+      return;
+    }
+    try {
+      const { setPluginOptions } = await import("../../plugins/manage.js");
+      const result = await setPluginOptions(pluginId, {
+        autoUpdate,
+        pinned,
+        channel,
+      });
+      await auditPluginAction(req, "update_plugin_options", pluginId, result);
+      res.json({ id: pluginId, ...result });
+    } catch (error) {
+      sendManageError(
+        res,
+        error,
+        "Failed to save plugin options",
+        "plugin_options",
+      );
+    }
+  },
+);
+
+/**
+ * @openapi
+ * /plugins/{id}/data:
+ *   get:
+ *     summary: Summarize what a plugin stores
+ *     description: The plugin's tables with row counts, key/value count, stored settings per scope, applied migrations, capability grants and the size of its files folder. No values are returned.
+ *     tags:
+ *       - Plugins
+ *     parameters:
+ *       - in: path
+ *         name: id
+ *         required: true
+ *         schema:
+ *           type: string
+ *     responses:
+ *       200:
+ *         description: The summary.
+ *       403:
+ *         description: The caller lacks admin.plugins.manage.
+ *       404:
+ *         description: No such plugin.
+ */
+router.get(
+  "/:id/data",
+  authenticateJWT,
+  requireManagePlugins,
+  async (req: Request, res: Response) => {
+    const pluginId = String(req.params.id);
+    try {
+      const { getPluginDataSummary } = await import("../../plugins/manage.js");
+      res.json({ id: pluginId, ...(await getPluginDataSummary(pluginId)) });
+    } catch (error) {
+      sendManageError(
+        res,
+        error,
+        "Failed to read the plugin's data",
+        "plugin_data",
+      );
+    }
+  },
+);
+
+/**
+ * @openapi
+ * /plugins/{id}/changelog:
+ *   get:
+ *     summary: Read an installed plugin's release notes
+ *     description: The releases in the plugin's CHANGELOG.md, newest first, each with its date, summary and changes. Empty when the plugin ships no changelog.
+ *     tags:
+ *       - Plugins
+ *     parameters:
+ *       - in: path
+ *         name: id
+ *         required: true
+ *         schema:
+ *           type: string
+ *     responses:
+ *       200:
+ *         description: The releases.
+ *       403:
+ *         description: The caller lacks admin.plugins.manage.
+ *       404:
+ *         description: No such plugin.
+ */
+router.get(
+  "/:id/changelog",
+  authenticateJWT,
+  requireManagePlugins,
+  async (req: Request, res: Response) => {
+    const pluginId = String(req.params.id);
+    try {
+      const { getPluginChangelog } = await import("../../plugins/manage.js");
+      res.json({ id: pluginId, releases: await getPluginChangelog(pluginId) });
+    } catch (error) {
+      sendManageError(
+        res,
+        error,
+        "Failed to read the plugin's release notes",
+        "plugin_changelog",
+      );
+    }
+  },
+);
+
+/**
+ * @openapi
+ * /plugins/developer-mode:
+ *   get:
+ *     summary: Read whether plugin developer mode is on
+ *     description: Developer mode lets admins install a .tmxplug from a file, without the registry's signature check. The UI shows a banner while it is on.
+ *     tags:
+ *       - Plugins
+ *     responses:
+ *       200:
+ *         description: Whether developer mode is on, and whether TERMIX_REQUIRE_SIGNED_PLUGINS blocks file installs anyway.
+ *       403:
+ *         description: The caller lacks admin.plugins.manage.
+ */
+router.get(
+  "/developer-mode",
+  authenticateJWT,
+  requireManagePlugins,
+  async (_req: Request, res: Response) => {
+    try {
+      const { getDeveloperMode } = await import("../../plugins/manage.js");
+      const { requireSignedPlugins } = await import("../../plugins/trust.js");
+      res.json({
+        enabled: await getDeveloperMode(),
+        signedOnly: requireSignedPlugins(),
+      });
+    } catch (error) {
+      sendManageError(
+        res,
+        error,
+        "Failed to read developer mode",
+        "plugin_developer_mode",
+      );
+    }
+  },
+);
+
+/**
+ * @openapi
+ * /plugins/developer-mode:
+ *   put:
+ *     summary: Turn plugin developer mode on or off
+ *     description: Turning it off drops any file that was uploaded but not installed yet. Plugins already installed from a file keep running and stay marked unverified.
+ *     tags:
+ *       - Plugins
+ *     requestBody:
+ *       required: true
+ *       content:
+ *         application/json:
+ *           schema:
+ *             type: object
+ *             required:
+ *               - enabled
+ *             properties:
+ *               enabled:
+ *                 type: boolean
+ *     responses:
+ *       200:
+ *         description: The saved value.
+ *       400:
+ *         description: enabled is not a boolean.
+ *       403:
+ *         description: The caller lacks admin.plugins.manage.
+ */
+router.put(
+  "/developer-mode",
+  authenticateJWT,
+  requireManagePlugins,
+  async (req: Request, res: Response) => {
+    const enabled = req.body?.enabled;
+    if (typeof enabled !== "boolean") {
+      res.status(400).json({ error: "enabled must be a boolean" });
+      return;
+    }
+    try {
+      const { setDeveloperMode } = await import("../../plugins/manage.js");
+      await setDeveloperMode(enabled);
+      await auditPluginAction(req, "plugin_developer_mode", "*", { enabled });
+      res.json({ enabled });
+    } catch (error) {
+      sendManageError(
+        res,
+        error,
+        "Failed to save developer mode",
+        "plugin_developer_mode",
+      );
+    }
+  },
+);
+
+/**
+ * @openapi
+ * /plugins/upload:
+ *   post:
+ *     summary: Upload a .tmxplug to install from a file
+ *     description: >
+ *       Developer mode only. The body is the raw .tmxplug (at most 50 MB).
+ *       The file is checked (archive, manifest, plugin API) and held for 30
+ *       minutes, but nothing is loaded. The answer lists what it asks for so
+ *       the admin can agree, then POST /plugins/upload/{token}/install
+ *       installs it. A file can replace an earlier upload with the same id,
+ *       never a bundled or registry plugin.
+ *     tags:
+ *       - Plugins
+ *     requestBody:
+ *       required: true
+ *       content:
+ *         application/octet-stream:
+ *           schema:
+ *             type: string
+ *             format: binary
+ *     responses:
+ *       200:
+ *         description: A token plus the plugin's id, name, version and capabilities.
+ *       400:
+ *         description: Not a valid .tmxplug or manifest.
+ *       403:
+ *         description: Developer mode is off, signed plugins are required, or the caller lacks admin.plugins.manage.
+ *       409:
+ *         description: The id belongs to a bundled or registry plugin, the plugin API does not match, or managed by a linked server.
+ *       413:
+ *         description: The file is larger than 50 MB.
+ */
+router.post(
+  "/upload",
+  authenticateJWT,
+  requireManagePlugins,
+  express.raw({
+    type: "application/octet-stream",
+    limit: MAX_UPLOAD_BYTES,
+  }),
+  async (req: Request, res: Response) => {
+    if (await refuseOnLinkedDesktop(res)) return;
+    if (!Buffer.isBuffer(req.body) || req.body.length === 0) {
+      res.status(400).json({
+        error: "Send the .tmxplug as application/octet-stream",
+        code: "INVALID_ARTIFACT",
+      });
+      return;
+    }
+    try {
+      const { stageUpload } = await import("../../plugins/manage.js");
+      res.json(await stageUpload(req.body));
+    } catch (error) {
+      sendManageError(
+        res,
+        error,
+        "Failed to read the uploaded plugin",
+        "plugin_upload",
+      );
+    }
+  },
+);
+
+/**
+ * @openapi
+ * /plugins/upload/{token}/install:
+ *   post:
+ *     summary: Install a plugin uploaded from a file
+ *     description: >
+ *       Developer mode only. capabilities must list exactly what the upload
+ *       asks for, as the consent prompt showed it. The plugin is installed,
+ *       granted those capabilities and started, and is marked unverified for
+ *       as long as it stays installed.
+ *     tags:
+ *       - Plugins
+ *     parameters:
+ *       - in: path
+ *         name: token
+ *         required: true
+ *         schema:
+ *           type: string
+ *     requestBody:
+ *       required: true
+ *       content:
+ *         application/json:
+ *           schema:
+ *             type: object
+ *             required:
+ *               - capabilities
+ *             properties:
+ *               capabilities:
+ *                 type: array
+ *                 items:
+ *                   type: string
+ *     responses:
+ *       200:
+ *         description: The installed version and the plugin's state.
+ *       400:
+ *         description: Invalid token or capability list.
+ *       403:
+ *         description: Developer mode is off, signed plugins are required, or the caller lacks admin.plugins.manage.
+ *       404:
+ *         description: The upload expired or never existed.
+ *       409:
+ *         description: The consent does not match, the id is taken, or managed by a linked server.
+ */
+router.post(
+  "/upload/:token/install",
+  authenticateJWT,
+  requireManagePlugins,
+  async (req: Request, res: Response) => {
+    const token = String(req.params.token);
+    const capabilities = readCapabilities(req.body);
+    if (!/^[a-f0-9]{32}$/.test(token) || capabilities === null) {
+      res.status(400).json({ error: "Invalid upload token or capabilities" });
+      return;
+    }
+    if (await refuseOnLinkedDesktop(res)) return;
+    try {
+      const { installUpload } = await import("../../plugins/manage.js");
+      const userId = (req as AuthenticatedRequest).userId as string;
+      const result = await installUpload(token, { userId, capabilities });
+      await auditPluginAction(req, "install_plugin_from_file", result.id, {
+        version: result.version,
+        capabilities,
+        verified: false,
+      });
+      res.json(result);
+    } catch (error) {
+      sendManageError(
+        res,
+        error,
+        "Failed to install the plugin",
+        "plugin_install",
+      );
+    }
+  },
+);
+
 export default router;
diff --git a/src/backend/database/routes/rbac.ts b/src/backend/database/routes/rbac.ts
index 33a08d0f9..f5b6c11a4 100644
--- a/src/backend/database/routes/rbac.ts
+++ b/src/backend/database/routes/rbac.ts
@@ -75,6 +75,74 @@ async function canManageHostSharing(
   return { allowed: access.hasAccess, isOwner: access.isOwner };
 }
 
+/**
+ * Drops shares handed out by someone who can no longer manage sharing on the
+ * host, then repeats so shares they passed on further go too.
+ */
+export async function pruneHostGrants(hostId: number): Promise<number> {
+  const repository = createCurrentRbacAccessRepository();
+  const ownerId =
+    await createCurrentHostResolutionRepository().findHostOwnerId(hostId);
+  let removed = 0;
+  for (let changed = true; changed;) {
+    changed = false;
+    for (const grant of await repository.listHostAccess(hostId)) {
+      if (!grant.grantedBy || grant.grantedBy === ownerId) continue;
+      if ((await canManageHostSharing(grant.grantedBy, hostId)).allowed) {
+        continue;
+      }
+      await repository.revokeHostAccess(grant.id, hostId);
+      removed++;
+      changed = true;
+    }
+  }
+  return removed;
+}
+
+/** pruneHostGrants for credential shares. */
+export async function pruneCredentialGrants(
+  credentialId: number,
+): Promise<number> {
+  const repository = createCurrentCredentialAccessRepository();
+  const owner =
+    await createCurrentCredentialRepository().findById(credentialId);
+  if (!owner) return 0;
+  let removed = 0;
+  for (let changed = true; changed;) {
+    changed = false;
+    for (const grant of await repository.listForCredential(credentialId)) {
+      if (!grant.grantedBy || grant.grantedBy === owner.userId) continue;
+      if (
+        (await canManageCredentialSharing(grant.grantedBy, credentialId))
+          .allowed
+      ) {
+        continue;
+      }
+      await repository.revoke(grant.id, credentialId);
+      removed++;
+      changed = true;
+    }
+  }
+  return removed;
+}
+
+/** Prunes everything these users shared, after they lost a role. */
+export async function pruneGrantsBy(userIds: string[]): Promise<void> {
+  for (const userId of userIds) {
+    permissionManager.invalidateUserPermissionCache(userId);
+    for (const hostId of await createCurrentRbacAccessRepository().listHostIdsGrantedBy(
+      userId,
+    )) {
+      await pruneHostGrants(hostId);
+    }
+    for (const credentialId of await createCurrentCredentialAccessRepository().listCredentialIdsGrantedBy(
+      userId,
+    )) {
+      await pruneCredentialGrants(credentialId);
+    }
+  }
+}
+
 export interface ShareTarget {
   type: "user" | "role";
   id: string | number;
@@ -300,6 +368,7 @@ router.post(
         });
       }
 
+      await pruneHostGrants(hostId);
       databaseLogger.success("Host shared successfully", {
         operation: "rbac_host_share_success",
         userId,
@@ -780,6 +849,7 @@ router.patch(
         hostId,
         update,
       );
+      await pruneHostGrants(hostId);
 
       databaseLogger.info("Host access grant updated", {
         operation: "rbac_host_access_update",
@@ -863,6 +933,7 @@ router.delete(
         accessId,
         hostId,
       );
+      await pruneHostGrants(hostId);
       databaseLogger.info("Permission revoked", {
         operation: "rbac_permission_revoke",
         adminId: userId,
@@ -1383,6 +1454,7 @@ router.delete(
       for (const userId of deletedUserIds) {
         permissionManager.invalidateUserPermissionCache(userId);
       }
+      await pruneGrantsBy(deletedUserIds);
 
       res.json({
         success: true,
@@ -1675,6 +1747,7 @@ router.delete(
       }
 
       permissionManager.invalidateUserPermissionCache(targetUserId);
+      await pruneGrantsBy([targetUserId]);
       databaseLogger.info("Role removed from user", {
         operation: "rbac_role_remove",
         adminId: req.userId!,
@@ -1888,6 +1961,7 @@ router.post(
         success: true,
       });
 
+      await pruneCredentialGrants(credentialId);
       res.json({ success: true, permissionLevel, expiresAt });
     } catch (error) {
       databaseLogger.error("Failed to share credential", error, {
@@ -1971,6 +2045,7 @@ router.delete(
         return res.status(404).json({ error: "Access grant not found" });
       }
       await repository.revoke(accessId, credentialId);
+      await pruneCredentialGrants(credentialId);
       res.json({ success: true });
     } catch (error) {
       databaseLogger.error("Failed to revoke credential access", error, {
diff --git a/src/backend/database/routes/ui-preferences.ts b/src/backend/database/routes/ui-preferences.ts
index 9f593dc04..30df3851a 100644
--- a/src/backend/database/routes/ui-preferences.ts
+++ b/src/backend/database/routes/ui-preferences.ts
@@ -8,10 +8,11 @@ import {
 } from "../repositories/factory.js";
 import {
   defaultUiPreferences,
+  sanitizeOnboarding,
   sanitizeUiPreferences,
-  UI_ONBOARDING_VERSION,
   type UiPreferences,
 } from "../../../types/ui-preferences.js";
+import { LEGACY_SEEN, mergeSeen } from "../../../types/onboarding.js";
 
 const router = express.Router();
 const authManager = AuthManager.getInstance();
@@ -23,8 +24,8 @@ const NEW_ACCOUNT_WINDOW_MS = 24 * 60 * 60 * 1000;
 /**
  * Existing users must never be ambushed by onboarding. A user who never
  * finished it and registered more than a day ago predates this feature, so
- * they are handed a completed onboarding state. This also repairs rows that an
- * earlier PUT wrote with the not-completed default.
+ * they count as having seen every core step, and the client silently marks
+ * the plugin steps they have now as seen too (baselinePending).
  */
 export function withOnboardingBackfill(
   preferences: UiPreferences,
@@ -35,13 +36,21 @@ export function withOnboardingBackfill(
     Number.isFinite(registeredMs) &&
     Date.now() - registeredMs < NEW_ACCOUNT_WINDOW_MS;
 
-  if (isNewAccount || preferences.onboarding.completedAt) return preferences;
+  const { onboarding } = preferences;
+  if (
+    isNewAccount ||
+    onboarding.completedAt ||
+    Object.keys(onboarding.seen).length > 0
+  ) {
+    return preferences;
+  }
 
   return {
     ...preferences,
     onboarding: {
-      ...preferences.onboarding,
-      completedVersion: UI_ONBOARDING_VERSION,
+      ...onboarding,
+      seen: { ...LEGACY_SEEN },
+      baselinePending: true,
     },
   };
 }
@@ -51,7 +60,7 @@ export function withOnboardingBackfill(
  * /ui-preferences:
  *   get:
  *     summary: Get the UI complexity preferences for the current user
- *     description: Returns the current user's interface preset (simple, balanced, advanced or custom), their per-area overrides, and their onboarding state. A first-time GET returns defaults without writing a row; a row is only created once the user actually changes something via PUT. Users who registered before this feature existed are returned an already-completed onboarding state so they are never shown the first-run flow.
+ *     description: Returns the current user's interface preset (simple, balanced, advanced or custom), their per-area overrides, and their onboarding state (which onboarding steps they have seen, by version). A first-time GET returns defaults without writing a row; a row is only created once the user actually changes something via PUT. Users who registered more than a day ago and never finished onboarding are returned as having seen every core step, so they are never shown the first-run flow.
  *     tags:
  *       - UI Preferences
  *     responses:
@@ -89,7 +98,7 @@ router.get("/", authenticateJWT, async (req: Request, res: Response) => {
  * /ui-preferences:
  *   put:
  *     summary: Update the UI complexity preferences for the current user
- *     description: Persists the current user's interface preset, per-area overrides and onboarding state as a single JSON document. Overrides are merged two levels deep, so a request only has to send the keys it changes. A null at a key clears that single override; a null at an area clears every override for that area; a null at overrides clears all of them.
+ *     description: Persists the current user's interface preset, per-area overrides and onboarding state as a single JSON document. Overrides are merged two levels deep, so a request only has to send the keys it changes. A null at a key clears that single override; a null at an area clears every override for that area; a null at overrides clears all of them. Onboarding seen versions are merged per step and never go down, so two open tabs cannot undo each other.
  *     tags:
  *       - UI Preferences
  *     requestBody:
@@ -164,10 +173,7 @@ router.put("/", authenticateJWT, async (req: Request, res: Response) => {
       // Must come after the body spread, or a raw overrides payload would
       // clobber the merge above.
       overrides: mergedOverrides,
-      onboarding: {
-        ...base.onboarding,
-        ...((body.onboarding as Record<string, unknown>) ?? {}),
-      },
+      onboarding: mergeOnboarding(base, body.onboarding),
     });
 
     await repository.upsert(userId, JSON.stringify(merged));
@@ -182,4 +188,18 @@ router.put("/", authenticateJWT, async (req: Request, res: Response) => {
   }
 });
 
+function mergeOnboarding(base: UiPreferences, patch: unknown) {
+  if (!patch || typeof patch !== "object") return base.onboarding;
+  const incoming = sanitizeOnboarding({
+    ...base.onboarding,
+    ...(patch as Record<string, unknown>),
+    seen: (patch as Record<string, unknown>).seen ?? {},
+  });
+  return {
+    ...incoming,
+    seen: mergeSeen(base.onboarding.seen, incoming.seen),
+    completedAt: incoming.completedAt ?? base.onboarding.completedAt,
+  };
+}
+
 export default router;
diff --git a/src/backend/database/routes/user-admin-routes.ts b/src/backend/database/routes/user-admin-routes.ts
index 366d89a6e..cd4381b1c 100644
--- a/src/backend/database/routes/user-admin-routes.ts
+++ b/src/backend/database/routes/user-admin-routes.ts
@@ -123,7 +123,6 @@ export function registerUserAdminRoutes(
           username: u.username,
           is_admin: u.isAdmin,
           is_external: isExternalAccount(u),
-          is_oidc: u.isOidc,
           password_hash: u.passwordHash ? "set" : null,
           // Management-only details stay admin-eyes-only; regular users hit
           // this route to pick sharing targets.
@@ -470,15 +469,6 @@ export function registerUserAdminRoutes(
         username,
         passwordHash: password_hash,
         isAdmin: false,
-        isOidc: false,
-        clientId: "",
-        clientSecret: "",
-        issuerUrl: "",
-        authorizationUrl: "",
-        tokenUrl: "",
-        identifierPath: "",
-        namePath: "",
-        scopes: "openid email profile",
       });
 
       try {
@@ -631,7 +621,7 @@ export function registerUserAdminRoutes(
       if (!targetUser) {
         return res.status(404).json({ error: "User not found" });
       }
-      if (targetUser.isOidc && !targetUser.passwordHash) {
+      if (targetUser.isExternal && !targetUser.passwordHash) {
         return res.status(400).json({
           error: "This user authenticates through an external provider",
         });
diff --git a/src/backend/database/routes/user-external-account-routes.ts b/src/backend/database/routes/user-external-account-routes.ts
index b1b77f89d..296fd1045 100644
--- a/src/backend/database/routes/user-external-account-routes.ts
+++ b/src/backend/database/routes/user-external-account-routes.ts
@@ -58,7 +58,7 @@ export function registerUserExternalAccountRoutes(
    * /users/link-external-to-password:
    *   post:
    *     summary: Merge an external account into a password account
-   *     description: Moves an external-only account's sign-in identities onto a password account and deletes the external-only account (admin only). A 2.8 SSO account whose only sign-in is the matching legacy OIDC link is accepted as the target too, to merge a duplicate made by 2.9.0. The 2.8 path /users/link-oidc-to-password and its oidcUserId field are accepted too.
+   *     description: Moves an external-only account's sign-in identities onto a password account and deletes the external-only account (admin only). A 2.8 SSO account whose only sign-in is the matching legacy OIDC link is accepted as the target too, to merge a duplicate made by 2.9.0.
    *     tags:
    *       - Users
    *     requestBody:
@@ -86,7 +86,7 @@ export function registerUserExternalAccountRoutes(
    */
   const link = async (req: Request, res: Response) => {
     const adminUserId = (req as AuthenticatedRequest).userId;
-    const externalUserId = req.body?.externalUserId ?? req.body?.oidcUserId;
+    const externalUserId = req.body?.externalUserId;
     const targetUsername = req.body?.targetUsername;
 
     if (
@@ -143,11 +143,6 @@ export function registerUserExternalAccountRoutes(
         adminUserId,
       });
 
-      await userRepository.update(targetUser.id, {
-        isOidc: true,
-        oidcIdentifier:
-          externalUser.oidcIdentifier ?? targetUser.oidcIdentifier,
-      });
       await identities.moveIdentities(externalUserId, targetUser.id);
 
       await authManager.revokeAllUserSessions(externalUserId);
@@ -201,7 +196,7 @@ export function registerUserExternalAccountRoutes(
    * /users/unlink-external-from-password:
    *   post:
    *     summary: Remove external sign-in from a password account
-   *     description: Removes every external sign-in identity from an account that also has a password (admin only). The 2.8 path /users/unlink-oidc-from-password is accepted too.
+   *     description: Removes every external sign-in identity from an account that also has a password (admin only).
    *     tags:
    *       - Users
    *     requestBody:
@@ -261,10 +256,6 @@ export function registerUserExternalAccountRoutes(
         });
       }
 
-      await userRepository.update(targetUser.id, {
-        isOidc: false,
-        oidcIdentifier: null,
-      });
       await createCurrentUserAuthRepository().unlinkIdentitiesForUser(
         targetUser.id,
       );
@@ -307,7 +298,4 @@ export function registerUserExternalAccountRoutes(
 
   router.post("/link-external-to-password", authenticateJWT, link);
   router.post("/unlink-external-from-password", authenticateJWT, unlink);
-  // 2.8 paths, kept until 3.0.0.
-  router.post("/link-oidc-to-password", authenticateJWT, link);
-  router.post("/unlink-oidc-from-password", authenticateJWT, unlink);
 }
diff --git a/src/backend/database/routes/user-password-reset-routes.ts b/src/backend/database/routes/user-password-reset-routes.ts
index ef5b57a87..20a60caaf 100644
--- a/src/backend/database/routes/user-password-reset-routes.ts
+++ b/src/backend/database/routes/user-password-reset-routes.ts
@@ -173,7 +173,7 @@ export function registerUserPasswordResetRoutes(
         });
       }
 
-      if (user.isOidc) {
+      if (user.isExternal) {
         return res.json({
           message:
             "If the user exists, a password reset code has been generated. Check docker logs for the code.",
diff --git a/src/backend/database/routes/user-socket-ticket-routes.ts b/src/backend/database/routes/user-socket-ticket-routes.ts
new file mode 100644
index 000000000..cf30a01b7
--- /dev/null
+++ b/src/backend/database/routes/user-socket-ticket-routes.ts
@@ -0,0 +1,64 @@
+import type { AuthenticatedRequest } from "../../../types/index.js";
+import type { RequestHandler, Router } from "express";
+import type { AuthManager } from "../../utils/auth-manager.js";
+import { authLogger } from "../../utils/logger.js";
+import { isCookieOriginAllowed } from "../../utils/ws-auth.js";
+
+type UserSocketTicketRoutesDeps = {
+  authenticateJWT: RequestHandler;
+  authManager: AuthManager;
+};
+
+export function registerUserSocketTicketRoutes(
+  router: Router,
+  { authenticateJWT, authManager }: UserSocketTicketRoutesDeps,
+): void {
+  /**
+   * @openapi
+   * /users/ws-ticket:
+   *   post:
+   *     summary: Get a WebSocket ticket
+   *     description: Returns a token that is valid for one minute and only opens plugin WebSockets. The web app sends it as a subprotocol, so sockets work behind a proxy that rewrites the Host header. Only a page on this server can get one.
+   *     tags:
+   *       - Users
+   *     responses:
+   *       200:
+   *         description: The ticket.
+   *         content:
+   *           application/json:
+   *             schema:
+   *               type: object
+   *               properties:
+   *                 ticket:
+   *                   type: string
+   *       401:
+   *         description: Not authenticated, or not a login session.
+   *       403:
+   *         description: The request came from a page on another site.
+   *       500:
+   *         description: Failed to issue the ticket.
+   */
+  router.post("/ws-ticket", authenticateJWT, async (req, res) => {
+    const authReq = req as AuthenticatedRequest;
+    const sessionId = authReq.sessionId;
+    if (!sessionId || authReq.apiKeyId) {
+      return res.status(401).json({ error: "A login session is required" });
+    }
+    // The cookie rides along from sibling subdomains too, so the ticket only
+    // goes to a page the browser says is this server.
+    if (req.cookies?.jwt && !isCookieOriginAllowed(req)) {
+      return res.status(403).json({ error: "Not allowed from this origin" });
+    }
+    try {
+      const ticket = await authManager.issueSocketTicket(
+        authReq.userId,
+        sessionId,
+      );
+      res.setHeader("Cache-Control", "no-store");
+      res.json({ ticket });
+    } catch (err) {
+      authLogger.error("Failed to issue a socket ticket", err);
+      res.status(500).json({ error: "Failed to issue a socket ticket" });
+    }
+  });
+}
diff --git a/src/backend/database/routes/users.ts b/src/backend/database/routes/users.ts
index 939a0add9..1c8942b67 100644
--- a/src/backend/database/routes/users.ts
+++ b/src/backend/database/routes/users.ts
@@ -11,6 +11,7 @@ import { authLogger } from "../../utils/logger.js";
 import { AuthManager } from "../../utils/auth-manager.js";
 import { DatabaseSaveTrigger } from "../../utils/database-save-trigger.js";
 import { parseUserAgent } from "../../utils/user-agent-parser.js";
+import { isDesktopAppOrigin } from "../../utils/cors-config.js";
 import { deleteUserAndRelatedData } from "./delete-user-data.js";
 import {
   allowsDesktopAutoSession,
@@ -19,13 +20,13 @@ import {
   isNativeTokenExportRequest,
   resolveDesktopAutoSessionUser,
 } from "./desktop-auto-session.js";
-import { shouldShowDonationModal } from "./donation-modal-utils.js";
 import { PermissionManager } from "../../utils/permission-manager.js";
 import { registerUserApiKeyRoutes } from "./user-api-key-routes.js";
 import { registerBrandingRoutes } from "./branding-routes.js";
 import { registerUserSettingsRoutes } from "./user-settings-routes.js";
 import { registerTlsRoutes } from "./tls-routes.js";
 import { registerUserSessionRoutes } from "./user-session-routes.js";
+import { registerUserSocketTicketRoutes } from "./user-socket-ticket-routes.js";
 import { registerUserExternalAccountRoutes } from "./user-external-account-routes.js";
 import { registerUserPasswordResetRoutes } from "./user-password-reset-routes.js";
 import { registerUserAdminRoutes } from "./user-admin-routes.js";
@@ -55,6 +56,7 @@ import {
   isNativeAppRequest,
   syncSharedCredentialsForUserRoles,
 } from "../../auth/session-issuer.js";
+import { EXTERNAL_AUTO_PROVISION_KEY } from "../../auth/provisioning.js";
 
 const authManager = AuthManager.getInstance();
 
@@ -184,15 +186,6 @@ router.post("/create", async (req, res) => {
       id,
       username,
       passwordHash: password_hash,
-      isOidc: false,
-      clientId: "",
-      clientSecret: "",
-      issuerUrl: "",
-      authorizationUrl: "",
-      tokenUrl: "",
-      identifierPath: "",
-      namePath: "",
-      scopes: "openid email profile",
     });
 
     try {
@@ -361,7 +354,7 @@ router.post("/proxy-login", async (req, res) => {
       return res.status(403).json({ error: "Proxy user must already exist" });
     }
     if (
-      userRecord.isOidc ||
+      userRecord.isExternal ||
       (await createCurrentUserAuthRepository().hasSecondFactor(userRecord.id))
     ) {
       return res.status(409).json({
@@ -600,27 +593,18 @@ router.get("/me", authenticateJWT, async (req: Request, res: Response) => {
     }
 
     const hasPassword = user.passwordHash && user.passwordHash.trim() !== "";
-    const isDualAuth =
-      hasPassword && isExternalAccount(user) && !!user.oidcIdentifier;
-
-    const showDonationModal = shouldShowDonationModal(
-      user.registeredAt,
-      !!user.donationModalDismissed,
-    );
+    const isDualAuth = hasPassword && isExternalAccount(user);
 
     res.json({
       userId: user.id,
       username: user.username,
       is_admin: !!user.isAdmin,
       is_external: isExternalAccount(user),
-      // 2.8 name, kept until 3.0.0.
-      is_oidc: !!user.isOidc,
       is_dual_auth: isDualAuth,
       // Any second factor; the name is what 2.8 clients read.
       totp_enabled: await createCurrentUserAuthRepository().hasSecondFactor(
         user.id,
       ),
-      show_donation_modal: showDonationModal,
       linked: await describeDesktopLink(user.id),
     });
   } catch (err) {
@@ -629,48 +613,6 @@ router.get("/me", authenticateJWT, async (req: Request, res: Response) => {
   }
 });
 
-/**
- * @openapi
- * /users/me/dismiss-donation-modal:
- *   post:
- *     summary: Permanently dismiss the donation reminder modal
- *     description: Marks the donation reminder modal as dismissed for the currently authenticated user so it is never shown to them again.
- *     tags:
- *       - Users
- *     responses:
- *       200:
- *         description: Donation modal dismissed.
- *       401:
- *         description: Invalid userId or user not found.
- *       500:
- *         description: Failed to dismiss donation modal.
- */
-router.post(
-  "/me/dismiss-donation-modal",
-  authenticateJWT,
-  async (req: Request, res: Response) => {
-    const userId = (req as AuthenticatedRequest).userId;
-
-    if (!isNonEmptyString(userId)) {
-      return res.status(401).json({ error: "Invalid userId" });
-    }
-    try {
-      const updated = await createCurrentUserRepository().update(userId, {
-        donationModalDismissed: true,
-      });
-      if (!updated) {
-        return res.status(401).json({ error: "User not found" });
-      }
-      return res.json({ success: true });
-    } catch (err) {
-      authLogger.error("Failed to dismiss donation modal", err);
-      return res
-        .status(500)
-        .json({ error: "Failed to dismiss donation modal" });
-    }
-  },
-);
-
 /**
  * @openapi
  * /users/me/token:
@@ -755,7 +697,11 @@ router.get("/setup-required", async (req, res) => {
  */
 router.post("/internal/auto-session", async (req, res) => {
   try {
-    if (!allowsDesktopAutoSession() || !isLoopbackRequest(req)) {
+    if (
+      !allowsDesktopAutoSession() ||
+      !isLoopbackRequest(req) ||
+      !isDesktopAppOrigin(req.headers.origin)
+    ) {
       authLogger.warn(
         "Rejected non-loopback attempt to access auto-session endpoint",
         { source: req.ip },
@@ -944,7 +890,7 @@ router.patch("/registration-allowed", authenticateJWT, async (req, res) => {
  * /users/external-auto-provision:
  *   get:
  *     summary: Get the external account auto-create setting
- *     description: Whether a new account is created the first time someone signs in through an external login (SSO, LDAP or any login plugin). The 2.8 path /users/oidc-auto-provision is accepted too.
+ *     description: Whether a new account is created the first time someone signs in through an external login (SSO, LDAP or any login plugin).
  *     tags:
  *       - Users
  *     responses:
@@ -955,7 +901,7 @@ const getExternalAutoProvision: RequestHandler = async (_req, res) => {
   try {
     res.json({
       enabled: await createCurrentSettingsRepository().getBoolean(
-        "oidc_auto_provision",
+        EXTERNAL_AUTO_PROVISION_KEY,
         false,
       ),
     });
@@ -972,7 +918,7 @@ const getExternalAutoProvision: RequestHandler = async (_req, res) => {
  * /users/external-auto-provision:
  *   patch:
  *     summary: Set the external account auto-create setting
- *     description: Enables or disables creating an account on first external sign-in. The 2.8 path /users/oidc-auto-provision is accepted too.
+ *     description: Enables or disables creating an account on first external sign-in.
  *     tags:
  *       - Users
  *     requestBody:
@@ -1006,7 +952,7 @@ const setExternalAutoProvision: RequestHandler = async (req, res) => {
       return res.status(400).json({ error: "Invalid value for enabled" });
     }
     await createCurrentSettingsRepository().set(
-      "oidc_auto_provision",
+      EXTERNAL_AUTO_PROVISION_KEY,
       enabled ? "true" : "false",
     );
     res.json({ enabled });
@@ -1022,9 +968,6 @@ router.patch(
   authenticateJWT,
   setExternalAutoProvision,
 );
-// 2.8 paths, kept until 3.0.0.
-router.get("/oidc-auto-provision", getExternalAutoProvision);
-router.patch("/oidc-auto-provision", authenticateJWT, setExternalAutoProvision);
 
 /**
  * @openapi
@@ -1317,7 +1260,7 @@ router.delete("/delete-account", authenticateJWT, async (req, res) => {
       return res.status(404).json({ error: "User not found" });
     }
 
-    if (userRecord.isOidc) {
+    if (userRecord.isExternal) {
       return res.status(403).json({
         error:
           "Cannot delete external authentication accounts through this endpoint",
@@ -1588,6 +1531,7 @@ registerUserExternalAccountRoutes(router, {
 });
 
 registerUserSettingsRoutes(router, authenticateJWT);
+registerUserSocketTicketRoutes(router, { authenticateJWT, authManager });
 registerTlsRoutes(router, authenticateJWT);
 
 registerUserApiKeyRoutes(router, requireAdmin);
diff --git a/src/backend/hosts/connect/builtin-providers.ts b/src/backend/hosts/connect/builtin-providers.ts
index aa54dd585..7bd87f82c 100644
--- a/src/backend/hosts/connect/builtin-providers.ts
+++ b/src/backend/hosts/connect/builtin-providers.ts
@@ -105,7 +105,7 @@ async function prepareKey(
   if (certPublicKey && certPublicKey.trim()) {
     try {
       const { applyCertificateAuth } =
-        await import("@termix/plugin-sdk/ssh-certs");
+        await import("@termix-ssh/plugin-sdk/ssh-certs");
       await applyCertificateAuth(
         config,
         env.client,
diff --git a/src/backend/hosts/connect/keyboard-interactive.ts b/src/backend/hosts/connect/keyboard-interactive.ts
index 02cb68c8a..12030c4cf 100644
--- a/src/backend/hosts/connect/keyboard-interactive.ts
+++ b/src/backend/hosts/connect/keyboard-interactive.ts
@@ -21,10 +21,13 @@ const PASSWORD_PATTERN = /password/i;
 // because its text also says "push notification".
 const FORTI_TOKEN_PATTERN = /type\s+['"]?push['"]?/i;
 
-// JumpCloud Protect / DUO: a menu choice, then an empty-answerable confirm.
-// Checked before TOTP because "...or [2] TOTP:" would match that pattern.
+// JumpCloud Protect / DUO: a menu choice answered with a number, then an
+// empty-answerable confirm. Checked before TOTP because "...or [2] TOTP:"
+// would match that pattern. The menu needs a text field, so it is not a push.
+const PUSH_MENU_PATTERN = /choose.*push.*totp/i;
+
 const PUSH_PROMPT_PATTERN =
-  /choose.*push.*totp|press enter.*(push|send)|push notification|authentication by phone/i;
+  /press enter.*(push|send)|push notification|authentication by phone/i;
 
 const TOTP_PATTERN =
   /verification code|verification_code|token|otp|2fa|authenticator|google.*auth/i;
@@ -77,10 +80,11 @@ export function classifyKeyboardInteractive(
   const { prompts } = round;
   const texts = prompts.map((p) => p.prompt);
   const isFortiToken = texts.some((p) => FORTI_TOKEN_PATTERN.test(p));
-  const isPush =
-    !isFortiToken && texts.some((p) => PUSH_PROMPT_PATTERN.test(p));
+  const isPushFlow =
+    !isFortiToken &&
+    texts.some((p) => PUSH_MENU_PATTERN.test(p) || PUSH_PROMPT_PATTERN.test(p));
 
-  if (!isPush) {
+  if (!isPushFlow) {
     const totpIndex = prompts.findIndex((p) => TOTP_PATTERN.test(p.prompt));
     if (totpIndex !== -1) return { kind: "totp", promptIndex: totpIndex };
   }
diff --git a/src/backend/hosts/credential-username.ts b/src/backend/hosts/credential-username.ts
index d03ad704d..fc620ef8d 100644
--- a/src/backend/hosts/credential-username.ts
+++ b/src/backend/hosts/credential-username.ts
@@ -34,14 +34,13 @@ export function pickResolvedPassword(
   return undefined;
 }
 
-const USERNAME_PLACEHOLDER =
-  /\$(?:external\.username|oidc\.preferred_username)/g;
+const USERNAME_PLACEHOLDER = /\$external\.username/g;
 
 /**
- * Expands `$external.username` (or its 2.8 spelling `$oidc.preferred_username`)
- * in an SSH username to the name the connecting user signed in with through
- * SSO or LDAP. Returns the username unchanged if it has no placeholder or the
- * user has no external sign-in.
+ * Expands `$external.username` in an SSH username to the name the connecting
+ * user signed in with through SSO or LDAP: the subject of their first
+ * external identity. Returns the username unchanged if it has no placeholder
+ * or the user has no external sign-in.
  */
 export async function expandExternalUsername(
   username: string | undefined,
@@ -52,31 +51,14 @@ export async function expandExternalUsername(
   }
 
   try {
-    const { createCurrentUserRepository } =
+    const { createCurrentUserAuthRepository } =
       await import("../database/repositories/factory.js");
-    const user = await createCurrentUserRepository().findById(userId);
-    let externalName = user?.oidcIdentifier;
+    const identities =
+      await createCurrentUserAuthRepository().listIdentitiesForUser(userId);
+    const externalName = [...identities].sort((a, b) => a.id - b.id)[0]
+      ?.subject;
     if (!externalName) return username;
 
-    const match = /^ldap:(\d+):(.+)$/.exec(externalName);
-    if (match) {
-      // Only strip the prefix for a real LDAP identity, to prevent spoofing
-      // through an SSO subject that happens to look like one.
-      const { createCurrentUserAuthRepository } =
-        await import("../database/repositories/factory.js");
-      const identities =
-        await createCurrentUserAuthRepository().listIdentitiesForUser(userId);
-      if (
-        identities.some(
-          (identity) =>
-            identity.providerId === `ldap:${match[1]}` &&
-            identity.subject === match[2],
-        )
-      ) {
-        externalName = match[2];
-      }
-    }
-
     return username.replace(USERNAME_PLACEHOLDER, () => externalName);
   } catch {
     return username;
diff --git a/src/backend/hosts/defaults/catalog.ts b/src/backend/hosts/defaults/catalog.ts
index b8d019546..9e66b74c5 100644
--- a/src/backend/hosts/defaults/catalog.ts
+++ b/src/backend/hosts/defaults/catalog.ts
@@ -6,8 +6,8 @@
 import type {
   PluginManifest,
   PluginSettingsField,
-} from "@termix/plugin-sdk/manifest";
-import { coerceSettingValue } from "@termix/plugin-sdk/settings";
+} from "@termix-ssh/plugin-sdk/manifest";
+import { coerceSettingValue } from "@termix-ssh/plugin-sdk/settings";
 import {
   CORE_HOST_DEFAULTS,
   CORE_NAMESPACE,
diff --git a/src/backend/hosts/defaults/materialize.ts b/src/backend/hosts/defaults/materialize.ts
index e0edf7280..954b0cc4a 100644
--- a/src/backend/hosts/defaults/materialize.ts
+++ b/src/backend/hosts/defaults/materialize.ts
@@ -12,7 +12,7 @@
  * host's own.
  */
 
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 import {
   createCurrentHostDefaultsRepository,
   createCurrentPluginSettingsRepository,
diff --git a/src/backend/hosts/defaults/personal.ts b/src/backend/hosts/defaults/personal.ts
index 96f64805f..852e182d8 100644
--- a/src/backend/hosts/defaults/personal.ts
+++ b/src/backend/hosts/defaults/personal.ts
@@ -5,7 +5,7 @@
  * the owner's; this swaps it for the viewer's at read time.
  */
 
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 import { createCurrentHostDefaultsRepository } from "../../database/repositories/factory.js";
 import type { HostRow } from "../../database/repositories/host-defaults-repository.js";
 import {
diff --git a/src/backend/hosts/defaults/service.ts b/src/backend/hosts/defaults/service.ts
index 30a3441bc..97d2970d7 100644
--- a/src/backend/hosts/defaults/service.ts
+++ b/src/backend/hosts/defaults/service.ts
@@ -6,7 +6,7 @@
 import {
   coerceSettingValue,
   validateSettingValue,
-} from "@termix/plugin-sdk/settings";
+} from "@termix-ssh/plugin-sdk/settings";
 import { createCurrentHostDefaultsRepository } from "../../database/repositories/factory.js";
 import type { HostDefaultsScope } from "../../database/repositories/host-defaults-repository.js";
 import { validateSettingsSave } from "../../plugins/settings.js";
@@ -258,6 +258,35 @@ export async function resolveForEditor(input: {
   return resolveAll(catalog, levels, input.hostId ?? null);
 }
 
+/** Each folder's credential, from its auth default, keyed by folder id. */
+export async function folderCredentialIds(
+  userId: string,
+): Promise<Map<number, number>> {
+  const result = new Map<number, number>();
+  const rows = await createCurrentHostDefaultsRepository().listOwnedBy(userId);
+  for (const row of rows) {
+    if (
+      row.level !== "folder" ||
+      row.folderId == null ||
+      row.namespace !== CORE_NAMESPACE ||
+      row.key !== "auth"
+    ) {
+      continue;
+    }
+    const auth = decodeDefaultValue(row.value) as {
+      authType?: string;
+      credentialId?: unknown;
+    } | null;
+    if (
+      auth?.authType === "credential" &&
+      typeof auth.credentialId === "number"
+    ) {
+      result.set(row.folderId, auth.credentialId);
+    }
+  }
+  return result;
+}
+
 /**
  * A folder's credential is its auth default: hosts in the folder that follow
  * their defaults sign in with it. Null clears it.
diff --git a/src/backend/hosts/host-identity.ts b/src/backend/hosts/host-identity.ts
index b4314a687..436d78549 100644
--- a/src/backend/hosts/host-identity.ts
+++ b/src/backend/hosts/host-identity.ts
@@ -16,7 +16,7 @@ export function normalizeHostAddress(value: unknown): string {
  * A client addresses a host by the numeric row id of the database it is
  * displaying. When the desktop app delegates a connection to a remote sync
  * server, the id is resolved against *that* server's table instead, and
- * autoincrement ids need not line up between the two — they diverge as soon as
+ * autoincrement ids need not line up between the two, they diverge as soon as
  * the sides accumulate inserts and deletes in a different order.
  *
  * The resolved row then supplies the address, the credentials, the jump hosts
diff --git a/src/backend/hosts/host-key-verifier.ts b/src/backend/hosts/host-key-verifier.ts
index 375260568..89b54688c 100644
--- a/src/backend/hosts/host-key-verifier.ts
+++ b/src/backend/hosts/host-key-verifier.ts
@@ -61,6 +61,34 @@ export class SSHHostKeyVerifier {
           const keyType = this.getKeyType(hostkey);
           const algorithm = "sha256";
 
+          // An unsaved host (Quick Connect) has nowhere to keep the key, so the
+          // user checks it for this session when there is a socket to ask on.
+          if (!hostId && ws) {
+            const accepted = await this.promptUserForNewKey(
+              ws,
+              ip,
+              port,
+              undefined,
+              fingerprint,
+              keyType,
+              algorithm,
+            );
+            sshLogger.info(
+              accepted
+                ? "Quick connect host key accepted for this session"
+                : "Quick connect host key rejected",
+              {
+                operation: "host_key_quick_connect",
+                ip,
+                port,
+                fingerprint,
+                userId,
+              },
+            );
+            verify(accepted);
+            return;
+          }
+
           if (!hostId) {
             sshLogger.info(
               "Host key verification skipped (no hostId - quick connect)",
diff --git a/src/backend/hosts/host-resolver.ts b/src/backend/hosts/host-resolver.ts
index 771553b38..4ab9f037e 100644
--- a/src/backend/hosts/host-resolver.ts
+++ b/src/backend/hosts/host-resolver.ts
@@ -25,7 +25,7 @@ const sshLogger = logger;
  * `id` is an autoincrement belonging to whichever database produced the row.
  * When the desktop app delegates a connection to a sync server, the two
  * sequences have no reason to agree, and resolving the client's id here lands
- * on whatever host happens to own that number — a different machine, with its
+ * on whatever host happens to own that number, a different machine, with its
  * own address, credentials and host key. `syncId` is the same string on both
  * sides, so it names the host the user actually picked.
  *
@@ -106,37 +106,11 @@ export async function resolveHostById(
       host.jumpHosts = [];
     }
   }
-  if (typeof host.terminalConfig === "string" && host.terminalConfig) {
-    try {
-      host.terminalConfig = JSON.parse(host.terminalConfig as string);
-    } catch {
-      host.terminalConfig = undefined;
-    }
-  }
-  if (
-    host.terminalConfig &&
-    typeof host.terminalConfig === "object" &&
-    !Array.isArray(host.terminalConfig)
-  ) {
-    // 2.8 editors kept the sudo password inside terminal_config. It is only
-    // ever handed out as sudoPassword, and only to the owner.
-    const { sudoPassword: legacySudo, ...rest } = host.terminalConfig as Record<
-      string,
-      unknown
-    >;
-    if (ownerEquivalent && !host.sudoPassword && legacySudo) {
-      host.sudoPassword = legacySudo;
-    }
-    host.terminalConfig = rest;
-  }
   // Stored as the text "true"/"false"; the string "false" is truthy and would
   // make the password provider skip password auth.
   host.forceKeyboardInteractive =
     String(host.forceKeyboardInteractive) === "true";
-  // A row the boot copy has not reached yet still has them in terminal_config.
-  host.sshOptions = parseSshOptions(
-    host.sshOptions != null ? host.sshOptions : host.terminalConfig,
-  );
+  host.sshOptions = parseSshOptions(host.sshOptions);
   if (typeof host.socks5ProxyChain === "string" && host.socks5ProxyChain) {
     try {
       host.socks5ProxyChain = JSON.parse(host.socks5ProxyChain as string);
@@ -157,25 +131,8 @@ export async function resolveHostById(
     sharedAuthResolution = await resolveRecipientSshAuth(host, hostId, userId);
     if (!sharedAuthResolution) return null;
   } else {
-    let effectiveCredentialId = host.credentialId as number | null | undefined;
-    if (
-      !effectiveCredentialId &&
-      host.authType === "credential" &&
-      host.folder
-    ) {
-      try {
-        effectiveCredentialId = await repository.findFolderCredentialId(
-          ownerId,
-          host.folder as string,
-        );
-      } catch (e) {
-        sshLogger.warn("Failed to resolve folder credential for host", {
-          operation: "host_resolver_folder_credential",
-          hostId,
-          error: getErrorMessage(e, "Unknown"),
-        });
-      }
-    }
+    const effectiveCredentialId = host.credentialId as
+      number | null | undefined;
 
     if (effectiveCredentialId) {
       try {
diff --git a/src/backend/hosts/protocol-auth/protocol-auth.ts b/src/backend/hosts/protocol-auth/protocol-auth.ts
index 2d16ab80f..b38d57644 100644
--- a/src/backend/hosts/protocol-auth/protocol-auth.ts
+++ b/src/backend/hosts/protocol-auth/protocol-auth.ts
@@ -8,10 +8,7 @@
  * needs no core change.
  */
 
-import {
-  createCurrentHostProtocolAuthRepository,
-  createCurrentSharedHostAuthOverrideRepository,
-} from "../../database/repositories/factory.js";
+import { createCurrentHostProtocolAuthRepository } from "../../database/repositories/factory.js";
 import {
   decryptProtocolLogin,
   type HostProtocolAuthRecord,
@@ -434,12 +431,25 @@ export async function loadProtocolAuthSummaries(
   const rows =
     await createCurrentHostProtocolAuthRepository().listRowsForHosts(ids);
   const keys = new Map<string, Buffer | null>();
+  const usernames = new Map<string, string | null>();
   for (const row of rows) {
     if (!keys.has(row.userId)) {
       keys.set(row.userId, DataCrypto.getUserDataKey(row.userId));
     }
     const own = result.get(row.hostId) ?? {};
-    own[row.protocol] = summarize(row, keys.get(row.userId) ?? null);
+    const summary = summarize(row, keys.get(row.userId) ?? null);
+    if (row.authType === "credential" && row.credentialId) {
+      const key = `${row.userId}:${row.credentialId}`;
+      if (!usernames.has(key)) {
+        const credential = await findUsableCredential(
+          row.credentialId,
+          row.userId,
+        );
+        usernames.set(key, credential?.username || null);
+      }
+      summary.username = usernames.get(key) ?? null;
+    }
+    own[row.protocol] = summary;
     result.set(row.hostId, own);
   }
   return result;
@@ -485,6 +495,30 @@ function withDeclaredFields(
   return out;
 }
 
+/**
+ * The credential a host inherits from its folder or the user's defaults, for
+ * a protocol login set to "credential" with none picked.
+ */
+async function inheritedCredentialId(
+  ownerId: string,
+  hostId: number,
+): Promise<number | null> {
+  try {
+    const { resolveForEditor } = await import("../defaults/service.js");
+    const resolved = await resolveForEditor({ ownerId, hostId });
+    const auth = resolved["core.auth"]?.value as {
+      authType?: string;
+      credentialId?: unknown;
+    } | null;
+    return auth?.authType === "credential" &&
+      typeof auth.credentialId === "number"
+      ? auth.credentialId
+      : null;
+  } catch {
+    return null;
+  }
+}
+
 /** The owner's own login: the stored one, or the credential it points at. */
 export async function resolveOwnerProtocolLogin(
   host: Record<string, unknown>,
@@ -502,8 +536,12 @@ export async function resolveOwnerProtocolLogin(
   const authType = login?.authType || "direct";
   let username = login?.username ?? "";
   let password = login?.password ?? "";
-  if (authType === "credential" && login?.credentialId) {
-    const credential = await findUsableCredential(login.credentialId, ownerId);
+  const credentialId =
+    authType === "credential"
+      ? (login?.credentialId ?? (await inheritedCredentialId(ownerId, hostId)))
+      : null;
+  if (credentialId) {
+    const credential = await findUsableCredential(credentialId, ownerId);
     // Only the login itself comes from a stored credential, never the fields.
     if (credential?.username) username = credential.username;
     if (credential?.password) password = credential.password;
@@ -511,7 +549,10 @@ export async function resolveOwnerProtocolLogin(
 
   const fallback = declared.hostLoginFallback ?? [];
   if (fallback.includes("username")) username ||= str(host.username);
-  if (fallback.includes("password")) password ||= str(host.password);
+  // A key or credential host can still carry an old password; never send it.
+  if (fallback.includes("password") && host.authType === "password") {
+    password ||= str(host.password);
+  }
 
   const secretFields: Record<string, string> = {};
   for (const [key, value] of Object.entries(login?.secretFields ?? {})) {
@@ -589,17 +630,6 @@ export async function resolveRecipientProtocolLogin(
   };
 }
 
-/** Credential ids a recipient chose for this host, per protocol. */
-export async function listRecipientOverrideIds(
-  hostId: number,
-  userId: string,
-): Promise<Record<string, number>> {
-  return (await createCurrentSharedHostAuthOverrideRepository().listCredentialIds(
-    hostId,
-    userId,
-  )) as Record<string, number>;
-}
-
 /** A login in an export or on the sync wire: plaintext, keyed by protocol. */
 export interface PortableProtocolLogin {
   authType: string;
diff --git a/src/backend/hosts/protocol-auth/registry.ts b/src/backend/hosts/protocol-auth/registry.ts
index 0855aa81f..0275c3987 100644
--- a/src/backend/hosts/protocol-auth/registry.ts
+++ b/src/backend/hosts/protocol-auth/registry.ts
@@ -4,7 +4,7 @@
  * share and sync a protocol's login without the plugin's code running.
  */
 
-import type { PluginProtocolContribution } from "@termix/plugin-sdk/manifest";
+import type { PluginProtocolContribution } from "@termix-ssh/plugin-sdk/manifest";
 import { SSH_AUTH_PROTOCOL } from "../../../types/auth-protocols.js";
 
 export interface DeclaredHostProtocol extends PluginProtocolContribution {
diff --git a/src/backend/hosts/ssh-connection-pool.ts b/src/backend/hosts/ssh-connection-pool.ts
index b4cf0b915..d6816b0a9 100644
--- a/src/backend/hosts/ssh-connection-pool.ts
+++ b/src/backend/hosts/ssh-connection-pool.ts
@@ -169,7 +169,7 @@ export class SSHConnectionPool {
     if (available) {
       if (!this.isConnectionHealthy(available.client)) {
         connections = this.removeUnhealthy(key, connections, available);
-        // Fall through — may create or wait again.
+        // Fall through, may create or wait again.
       } else {
         const waiter = queue.shift()!;
         if (queue.length === 0) this.waiters.delete(key);
diff --git a/src/backend/hosts/ssh-options.ts b/src/backend/hosts/ssh-options.ts
index 02b90d4cf..5b0c4dc5c 100644
--- a/src/backend/hosts/ssh-options.ts
+++ b/src/backend/hosts/ssh-options.ts
@@ -6,7 +6,7 @@
  * terminal's, so they are core's and have a column of their own.
  */
 
-import type { HostSshOptions } from "@termix/plugin-sdk/backend";
+import type { HostSshOptions } from "@termix-ssh/plugin-sdk/backend";
 
 export type { HostSshOptions };
 
@@ -50,8 +50,7 @@ function optionalString(value: unknown): string | null | undefined {
 
 /**
  * The SSH options in a value (a JSON string or an object), typed and with
- * anything else dropped. A terminal_config value works too, which is how the
- * 2.8 keys are read.
+ * anything else dropped. A 2.8 client's terminalConfig works too.
  */
 export function parseSshOptions(value: unknown): HostSshOptions {
   const source = asObject(value);
diff --git a/src/backend/notify/core-notify.ts b/src/backend/notify/core-notify.ts
index 1f3b8c5b5..1c78003dc 100644
--- a/src/backend/notify/core-notify.ts
+++ b/src/backend/notify/core-notify.ts
@@ -4,7 +4,7 @@
  * reach nobody, same as a plugin's.
  */
 
-import type { PluginNotification } from "@termix/plugin-sdk/backend";
+import type { PluginNotification } from "@termix-ssh/plugin-sdk/backend";
 import { activeNotifyHub } from "../plugins/notify-hub.js";
 import { resolveAudience } from "../plugins/ctx-notify.js";
 import { systemLogger } from "../utils/logger.js";
diff --git a/src/backend/plugins/artifact-manifest.ts b/src/backend/plugins/artifact-manifest.ts
new file mode 100644
index 000000000..b1065db4f
--- /dev/null
+++ b/src/backend/plugins/artifact-manifest.ts
@@ -0,0 +1,67 @@
+import zlib from "node:zlib";
+
+const MAX_UNPACKED_BYTES = 512 * 1024 * 1024;
+
+/**
+ * Reads one file out of a .tmxplug (a gzipped tar) without unpacking it to
+ * disk. Returns null when the archive has no such file.
+ */
+export function readArtifactFile(
+  buffer: Buffer,
+  wanted: string,
+): Buffer | null {
+  const tar = zlib.gunzipSync(buffer, { maxOutputLength: MAX_UNPACKED_BYTES });
+  let offset = 0;
+  while (offset + 512 <= tar.length) {
+    const header = tar.subarray(offset, offset + 512);
+    if (header.every((byte) => byte === 0)) break;
+    const field = (start: number, length: number) =>
+      header
+        .subarray(start, start + length)
+        .toString("utf8")
+        .replace(/\0.*$/s, "");
+    const prefix = field(345, 155);
+    const name = (
+      prefix ? `${prefix}/${field(0, 100)}` : field(0, 100)
+    ).replace(/^\.\//, "");
+    const size = Number.parseInt(field(124, 12).trim() || "0", 8);
+    if (!Number.isFinite(size) || size < 0) break;
+    const start = offset + 512;
+    if (name === wanted) return tar.subarray(start, start + size);
+    offset = start + Math.ceil(size / 512) * 512;
+  }
+  return null;
+}
+
+/** The manifest.json packed in a .tmxplug, parsed but not validated. */
+export function readArtifactManifest(buffer: Buffer): Record<string, unknown> {
+  let raw: Buffer | null;
+  try {
+    raw = readArtifactFile(buffer, "manifest.json");
+  } catch {
+    throw new Error("the file is not a valid .tmxplug archive");
+  }
+  if (!raw) throw new Error("the archive has no manifest.json");
+  let parsed: unknown;
+  try {
+    parsed = JSON.parse(raw.toString("utf8"));
+  } catch {
+    throw new Error("manifest.json is not valid JSON");
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new Error("manifest.json is not an object");
+  }
+  return parsed as Record<string, unknown>;
+}
+
+/** Whether two capability lists name the same set, order ignored. */
+export function sameCapabilities(
+  a: readonly string[],
+  b: readonly string[],
+): boolean {
+  const left = new Set(a);
+  const right = new Set(b);
+  if (left.size !== right.size) return false;
+  for (const capability of left) if (!right.has(capability)) return false;
+  return true;
+}
diff --git a/src/backend/plugins/assets.ts b/src/backend/plugins/assets.ts
index 873724593..27c978b3f 100644
--- a/src/backend/plugins/assets.ts
+++ b/src/backend/plugins/assets.ts
@@ -15,7 +15,7 @@ import {
   DEFAULT_FRONTEND_ENTRY,
   DEFAULT_LOCALES_DIR,
   type PluginManifest,
-} from "@termix/plugin-sdk/manifest";
+} from "@termix-ssh/plugin-sdk/manifest";
 import type { LoadedPlugin } from "./loader.js";
 
 type AssetPlugin = Pick<LoadedPlugin, "id" | "dir" | "manifest"> &
@@ -76,13 +76,18 @@ export function describePluginFrontend(
   if (!plugin) return none;
 
   const locales: string[] = [];
+  const localeFiles: string[] = [];
   const dir = localesDir(plugin);
-  if (dir && fileExists(path.join(dir, "en.json"))) locales.push("en");
+  if (dir && fileExists(path.join(dir, "en.json"))) {
+    locales.push("en");
+    localeFiles.push(path.join(dir, "en.json"));
+  }
   if (dir) {
     try {
       for (const name of fs.readdirSync(path.join(dir, "translated"))) {
         if (/^[a-z]{2}_[A-Z]{2}\.json$/.test(name)) {
           locales.push(name.slice(0, -".json".length));
+          localeFiles.push(path.join(dir, "translated", name));
         }
       }
     } catch {
@@ -95,8 +100,9 @@ export function describePluginFrontend(
 
   const cssFile = path.join(entry.dir, "frontend.css");
   const css = fileExists(cssFile);
+  // Locales share the version, so a translations-only update must change it.
   const assetVersion = contentVersion(
-    css ? [entry.file, cssFile] : [entry.file],
+    [...(css ? [entry.file, cssFile] : [entry.file]), ...localeFiles.sort()],
     plugin.manifest.version,
   );
 
@@ -113,8 +119,8 @@ const versionCache = new Map<string, { stamp: string; version: string }>();
 /**
  * A hash of the bundle's bytes, not its mtime: assets are cached as immutable
  * for a year, and a rebuilt .tmxplug has a fixed mtime, so a same-size rebuild
- * would otherwise keep serving the stale copy. The CSS is hashed with the JS
- * because both are served under the same version.
+ * would otherwise keep serving the stale copy. The CSS and locales are hashed
+ * with the JS because all of them are served under the same version.
  */
 function contentVersion(files: string[], version: string): string {
   // ctime, unlike mtime, cannot be set by tar, so an unpack always changes it.
@@ -276,7 +282,13 @@ export function createPluginAssetsRouter(
           : "no-cache",
       );
       res.type(CONTENT_TYPES[path.extname(file)] ?? "application/octet-stream");
-      res.sendFile(file);
+      // Installed plugins unpack under .unpacked/, which send would refuse as a
+      // dotfile path. resolvePluginAsset already kept the file in the plugin.
+      res.sendFile(file, { dotfiles: "allow" }, (error) => {
+        if (error && !res.headersSent) {
+          res.status(404).json({ error: "Not found" });
+        }
+      });
     },
   );
 
diff --git a/src/backend/plugins/auto-update.ts b/src/backend/plugins/auto-update.ts
new file mode 100644
index 000000000..65cacf421
--- /dev/null
+++ b/src/backend/plugins/auto-update.ts
@@ -0,0 +1,63 @@
+/**
+ * The registry timer: refreshes the store's install counts and applies
+ * plugin updates for plugins with auto-update on. An update that asks for a
+ * new capability is never applied here; admins get an alert and review it in
+ * the Plugins tab. Nothing is ever installed from here.
+ */
+
+import { pluginLogger } from "../utils/logger.js";
+
+const FIRST_CHECK_MS = 2 * 60_000;
+const CHECK_EVERY_MS = 6 * 60 * 60_000;
+
+let timer: NodeJS.Timeout | null = null;
+
+export async function runPluginAutoUpdate(): Promise<void> {
+  const { syncInstallCounts } = await import("./install-counts.js");
+  await syncInstallCounts();
+
+  const { isLinkedDesktop, updateAllPlugins } = await import("./manage.js");
+  if (await isLinkedDesktop()) return;
+
+  const result = await updateAllPlugins({ userId: null, onlyAutoUpdate: true });
+
+  for (const done of result.updated) {
+    pluginLogger.info(`Auto-updated plugin ${done.id} to ${done.version}`, {
+      operation: "plugin_auto_update",
+    });
+  }
+  for (const failed of result.failed) {
+    pluginLogger.warn(`Auto-update of ${failed.id} failed: ${failed.error}`, {
+      operation: "plugin_auto_update",
+    });
+  }
+  if (result.needsReview.length === 0) return;
+
+  const { sendCoreAlert } = await import("../notify/core-notify.js");
+  for (const entry of result.needsReview) {
+    await sendCoreAlert({
+      title: `A plugin update needs review`,
+      body: `The new version of ${entry.id} asks for more access, so it was not installed on its own. Review it in Plugins.`,
+      severity: "info",
+      category: "termix.plugin-update",
+      dedupeKey: `plugin-review:${entry.id}:${entry.capabilities.join(",")}`,
+      audience: "admins",
+    });
+  }
+}
+
+export function startPluginAutoUpdate(): void {
+  if (timer) return;
+  const run = () =>
+    void runPluginAutoUpdate().catch((error) => {
+      pluginLogger.warn(
+        `Plugin auto-update check failed: ${
+          error instanceof Error ? error.message : String(error)
+        }`,
+        { operation: "plugin_auto_update" },
+      );
+    });
+  setTimeout(run, FIRST_CHECK_MS).unref?.();
+  timer = setInterval(run, CHECK_EVERY_MS);
+  timer.unref?.();
+}
diff --git a/src/backend/plugins/boot-state.ts b/src/backend/plugins/boot-state.ts
new file mode 100644
index 000000000..334ef3f2e
--- /dev/null
+++ b/src/backend/plugins/boot-state.ts
@@ -0,0 +1,16 @@
+/**
+ * Plugins to start at boot. One that failed or was blocked last run is still
+ * one the admin turned on, so a restart tries it again rather than leaving it
+ * looking disabled.
+ */
+export function startablePluginIds(
+  records: { id: string; state: string }[],
+): Set<string> {
+  return new Set(
+    records
+      .filter((record) =>
+        ["enabled", "failed", "blocked"].includes(record.state),
+      )
+      .map((record) => record.id),
+  );
+}
diff --git a/src/backend/plugins/bundled-index.ts b/src/backend/plugins/bundled-index.ts
new file mode 100644
index 000000000..4b5d785a9
--- /dev/null
+++ b/src/backend/plugins/bundled-index.ts
@@ -0,0 +1,101 @@
+/**
+ * The onboarding defaults of the bundled plugins, from
+ * dist/plugins/bundled-index.json (written by scripts/build-plugins.cjs from
+ * docker/bundled-plugins.json). Core never names plugins, so which ones a
+ * fresh install keeps lives in that file and not here.
+ */
+
+import fs from "node:fs";
+import path from "node:path";
+import { getBundledPluginsDir } from "./paths.js";
+
+export const BUNDLED_INDEX_FILE = "bundled-index.json";
+
+export interface OnboardingDefaults {
+  recommended: boolean;
+  consent: boolean;
+}
+
+type Recommended = boolean | "desktop";
+
+interface BundledIndex {
+  plugins: Record<
+    string,
+    {
+      onboarding?: {
+        recommended?: Recommended;
+        consent?: boolean;
+        enabledByEnv?: string[];
+      };
+    }
+  >;
+}
+
+let cached: BundledIndex | null | undefined;
+
+export function readBundledIndex(): BundledIndex | null {
+  if (cached !== undefined) return cached;
+  try {
+    const raw = JSON.parse(
+      fs.readFileSync(
+        path.join(getBundledPluginsDir(), BUNDLED_INDEX_FILE),
+        "utf8",
+      ),
+    );
+    cached =
+      raw && typeof raw.plugins === "object" && raw.plugins
+        ? { plugins: raw.plugins }
+        : null;
+  } catch {
+    cached = null;
+  }
+  return cached;
+}
+
+export function resetBundledIndexCache(): void {
+  cached = undefined;
+}
+
+function isDesktop(): boolean {
+  return process.env.ELECTRON_EMBEDDED === "true";
+}
+
+/**
+ * Without an index (a build that skipped build-plugins) every plugin counts
+ * as recommended, which is how installs behaved before the picker. A plugin
+ * whose enabledByEnv variables are set counts as recommended too, so a server
+ * set up for it through the environment works from the first boot.
+ */
+export function onboardingDefaults(pluginId: string): OnboardingDefaults {
+  const index = readBundledIndex();
+  if (!index) return { recommended: true, consent: false };
+  const entry = index.plugins[pluginId]?.onboarding;
+  const recommended = entry?.recommended;
+  const configured = (entry?.enabledByEnv ?? []).some(
+    (name) => typeof name === "string" && !!process.env[name]?.trim(),
+  );
+  return {
+    recommended:
+      recommended === true ||
+      (recommended === "desktop" && isDesktop()) ||
+      configured,
+    consent: entry?.consent === true,
+  };
+}
+
+/**
+ * The state a newly seen plugin's row starts in. Bundled plugins start
+ * enabled, except on a fresh install, where only recommended ones do and
+ * consent plugins wait for the admin. A plugin dropped into the data
+ * directory always starts disabled.
+ */
+export function initialPluginState(
+  pluginId: string,
+  source: "bundled" | "user",
+  freshInstall: boolean,
+): "enabled" | "disabled" {
+  if (source !== "bundled") return "disabled";
+  if (!freshInstall) return "enabled";
+  const { recommended, consent } = onboardingDefaults(pluginId);
+  return recommended && !consent ? "enabled" : "disabled";
+}
diff --git a/src/backend/plugins/ctx-credentials.ts b/src/backend/plugins/ctx-credentials.ts
index 5074a4fb8..8b3519151 100644
--- a/src/backend/plugins/ctx-credentials.ts
+++ b/src/backend/plugins/ctx-credentials.ts
@@ -23,9 +23,9 @@
 import type {
   PluginCredentials,
   PluginSshKeyCredential,
-} from "@termix/plugin-sdk/backend";
+} from "@termix-ssh/plugin-sdk/backend";
 import ssh2 from "ssh2";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 import { assertCapability, capabilityRefused } from "./permissions.js";
 import { getActor } from "./actor.js";
 import type { DisposableBag } from "./disposables.js";
diff --git a/src/backend/plugins/ctx-hosts.ts b/src/backend/plugins/ctx-hosts.ts
index 421ef84eb..d4ea27262 100644
--- a/src/backend/plugins/ctx-hosts.ts
+++ b/src/backend/plugins/ctx-hosts.ts
@@ -20,9 +20,9 @@ import type {
   PluginShareableUser,
   PluginShareableRole,
   PluginHostJumpHost,
-} from "@termix/plugin-sdk/backend";
-import { PLUGIN_HOST_INPUT_KEYS } from "@termix/plugin-sdk/backend";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+} from "@termix-ssh/plugin-sdk/backend";
+import { PLUGIN_HOST_INPUT_KEYS } from "@termix-ssh/plugin-sdk/backend";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 import { assertCapability, capabilityRefused } from "./permissions.js";
 import { hostSessionStatus } from "../hosts/host-session-status.js";
 import { getActor } from "./actor.js";
diff --git a/src/backend/plugins/ctx-notify.ts b/src/backend/plugins/ctx-notify.ts
index fbe4aebe6..a7c510ba4 100644
--- a/src/backend/plugins/ctx-notify.ts
+++ b/src/backend/plugins/ctx-notify.ts
@@ -10,8 +10,8 @@ import type {
   PluginNotificationAudience,
   PluginNotify,
   PluginNotifyResult,
-} from "@termix/plugin-sdk/backend";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+} from "@termix-ssh/plugin-sdk/backend";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 import { assertCapability, capabilityRefused } from "./permissions.js";
 import { getActor } from "./actor.js";
 import { activeNotifyHub, registerNotifyHub } from "./notify-hub.js";
diff --git a/src/backend/plugins/ctx-plugins.ts b/src/backend/plugins/ctx-plugins.ts
index d1499c889..7edba02db 100644
--- a/src/backend/plugins/ctx-plugins.ts
+++ b/src/backend/plugins/ctx-plugins.ts
@@ -3,8 +3,8 @@
  * plugins:read. Ids and versions only, nothing operational.
  */
 
-import type { PluginPlugins } from "@termix/plugin-sdk/backend";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginPlugins } from "@termix-ssh/plugin-sdk/backend";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 import { assertCapability } from "./permissions.js";
 
 export function createPluginPlugins(manifest: PluginManifest): PluginPlugins {
diff --git a/src/backend/plugins/ctx-process.ts b/src/backend/plugins/ctx-process.ts
index 34b71d5c6..8256f2978 100644
--- a/src/backend/plugins/ctx-process.ts
+++ b/src/backend/plugins/ctx-process.ts
@@ -16,8 +16,8 @@ import type {
   PluginBinarySpec,
   PluginProcess,
   PluginProcessHandle,
-} from "@termix/plugin-sdk/backend";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+} from "@termix-ssh/plugin-sdk/backend";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 import { assertCapability } from "./permissions.js";
 import { getPluginDataDir } from "./paths.js";
 import type { DisposableBag } from "./disposables.js";
@@ -41,6 +41,30 @@ interface Deps {
 const SHA256_PATTERN = /^[a-f0-9]{64}$/;
 const SAFE_NAME = /^[A-Za-z0-9._-]+$/;
 
+/** Larger than any CLI a plugin ships, small enough not to stall a boot. */
+const MAX_PREBUILT_BYTES = 512 * 1024 * 1024;
+
+/**
+ * Only a regular file carrying the binary's own name is hashed, so a plugin
+ * cannot use prebuilt to fingerprint arbitrary files on the server.
+ */
+async function isPrebuiltCandidate(
+  candidate: string,
+  name: string,
+): Promise<boolean> {
+  if (!path.isAbsolute(candidate) || path.basename(candidate) !== name) {
+    return false;
+  }
+  try {
+    const real = await fs.realpath(candidate);
+    if (path.basename(real) !== name) return false;
+    const stat = await fs.stat(real);
+    return stat.isFile() && stat.size <= MAX_PREBUILT_BYTES;
+  } catch {
+    return false;
+  }
+}
+
 async function sha256Of(file: string): Promise<string | null> {
   try {
     const hash = createHash("sha256");
@@ -217,6 +241,7 @@ export function createPluginProcess(deps: Deps): PluginProcess {
         }
 
         for (const candidate of spec.prebuilt ?? []) {
+          if (!(await isPrebuiltCandidate(candidate, spec.name))) continue;
           if ((await sha256Of(candidate)) === expected) return candidate;
         }
 
diff --git a/src/backend/plugins/ctx-ssh-auth.ts b/src/backend/plugins/ctx-ssh-auth.ts
index c09022ec1..bc67adc59 100644
--- a/src/backend/plugins/ctx-ssh-auth.ts
+++ b/src/backend/plugins/ctx-ssh-auth.ts
@@ -12,9 +12,9 @@ import type {
   PluginSsh,
   PluginSshConnectOptions,
   PluginSshHost,
-} from "@termix/plugin-sdk/backend";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import { PluginSshInteractionError } from "@termix/plugin-sdk/backend";
+} from "@termix-ssh/plugin-sdk/backend";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
+import { PluginSshInteractionError } from "@termix-ssh/plugin-sdk/backend";
 import {
   assertCapability,
   capabilityRefused,
@@ -601,12 +601,13 @@ export function toCoreIdentity(
     returnTo: identity.returnTo,
     rememberMe: identity.rememberMe,
     legacyIdentifier: identity.legacy?.identifier,
-    ssoProviderId:
-      identity.logoutClaims?.providerId ??
-      identity.legacy?.providerRowId ??
-      null,
-    oidcSub: identity.logoutClaims?.sub ?? null,
-    oidcSid: identity.logoutClaims?.sid ?? null,
+    externalSession: identity.logoutClaims
+      ? {
+          providerId: identity.logoutClaims.providerId ?? null,
+          sub: identity.logoutClaims.sub ?? null,
+          sid: identity.logoutClaims.sid ?? null,
+        }
+      : null,
     roleSync: identity.roles
       ? {
           desired: [...identity.roles.desired],
@@ -864,7 +865,7 @@ export function createPluginAuth({ manifest, bag, audit }: Deps): PluginAuth {
       const { AuthManager } = await import("../utils/auth-manager.js");
       const revoked =
         await AuthManager.getInstance().revokeSessionsByExternalSession({
-          ssoProviderId: match.providerId ?? null,
+          providerId: match.providerId ?? null,
           sub: match.sub ?? null,
           sid: match.sid ?? null,
         });
diff --git a/src/backend/plugins/ctx-system.ts b/src/backend/plugins/ctx-system.ts
index b0360392d..288e171e7 100644
--- a/src/backend/plugins/ctx-system.ts
+++ b/src/backend/plugins/ctx-system.ts
@@ -4,8 +4,8 @@
  * say that it renews it. Every call is audited.
  */
 
-import type { PluginSystem } from "@termix/plugin-sdk/backend";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginSystem } from "@termix-ssh/plugin-sdk/backend";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 import { assertCapability } from "./permissions.js";
 import type { DisposableBag } from "./disposables.js";
 
diff --git a/src/backend/plugins/ctx.ts b/src/backend/plugins/ctx.ts
index 6ce5d7b12..81334536a 100644
--- a/src/backend/plugins/ctx.ts
+++ b/src/backend/plugins/ctx.ts
@@ -42,14 +42,14 @@ import {
 import { registerPluginWsRoute, registerPluginWsUpgrade } from "./ws.js";
 import { resolvePermission } from "./rbac.js";
 import * as pluginSettings from "./settings.js";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 import {
   type PluginContext,
   type PluginModule,
   type PluginOpenIsolatedWindowRequest,
   type PluginExternalClientRequest,
-} from "@termix/plugin-sdk/backend";
-import type { PluginTableDefinition } from "@termix/plugin-sdk/db";
+} from "@termix-ssh/plugin-sdk/backend";
+import type { PluginTableDefinition } from "@termix-ssh/plugin-sdk/db";
 import * as syncRegistry from "./sync-registry.js";
 import {
   needsExplicitPersist,
diff --git a/src/backend/plugins/data.ts b/src/backend/plugins/data.ts
index b8f101bb7..396f29d21 100644
--- a/src/backend/plugins/data.ts
+++ b/src/backend/plugins/data.ts
@@ -11,8 +11,8 @@ import { sql } from "drizzle-orm";
 import { pluginLogger } from "../utils/logger.js";
 import { resolveDatabaseDialect } from "../database/db/dialect.js";
 import type { DatabaseDialect } from "../database/db/dialect.js";
-import type { PluginTableDefinition } from "@termix/plugin-sdk/db";
-import { prefixedTableName, tablePrefix } from "@termix/plugin-sdk/db";
+import type { PluginTableDefinition } from "@termix-ssh/plugin-sdk/db";
+import { prefixedTableName, tablePrefix } from "@termix-ssh/plugin-sdk/db";
 import { buildTable } from "./table-builder.js";
 import {
   applyPluginMigrations,
@@ -263,6 +263,34 @@ export async function removePluginData(
   return { tables: dropped, kvKeys, migrations };
 }
 
+/** The plugin's tables in the live database, with how many rows each holds. */
+export async function describePluginTables(
+  pluginId: string,
+  options: { knownPluginIds?: string[]; dialect?: DatabaseDialect } = {},
+): Promise<Array<{ name: string; rows: number | null }>> {
+  const dialect = options.dialect ?? resolveDatabaseDialect();
+  const tables = ownedTableNames(
+    pluginId,
+    await listDatabaseTables(dialect),
+    options.knownPluginIds ?? [],
+  ).sort();
+
+  const { selectRows } = await import("../utils/crypto-migration/raw-rows.js");
+  const result: Array<{ name: string; rows: number | null }> = [];
+  for (const table of tables) {
+    const quoted = dialect === "mysql" ? "`" + table + "`" : `"${table}"`;
+    try {
+      const [row] = await selectRows<Record<string, unknown>>(
+        sql.raw(`SELECT COUNT(*) AS count FROM ${quoted}`),
+      );
+      result.push({ name: table, rows: Number(row?.count ?? row?.COUNT ?? 0) });
+    } catch {
+      result.push({ name: table, rows: null });
+    }
+  }
+  return result;
+}
+
 /**
  * The tables in `all` that belong to this plugin: its prefix, minus any that
  * sit under a longer prefix another plugin owns.
diff --git a/src/backend/plugins/dev-reload.ts b/src/backend/plugins/dev-reload.ts
new file mode 100644
index 000000000..6f15b68d3
--- /dev/null
+++ b/src/backend/plugins/dev-reload.ts
@@ -0,0 +1,66 @@
+/**
+ * IPC between the backend and scripts/dev.mjs, which forks it with
+ * TERMIX_DEV_RELOAD=true. The runner asks for a plugin to be loaded again
+ * after it rebuilt and copied it into the bundled folder.
+ */
+
+import { pluginLogger } from "../utils/logger.js";
+
+interface ReloadRequest {
+  type: "plugin-reload";
+  id: string;
+}
+
+type Send = (message: unknown) => void;
+type Reload = (id: string) => Promise<{ version: string; state: string }>;
+
+function isReloadRequest(msg: unknown): msg is ReloadRequest {
+  return (
+    !!msg &&
+    typeof msg === "object" &&
+    (msg as { type?: unknown }).type === "plugin-reload" &&
+    typeof (msg as { id?: unknown }).id === "string"
+  );
+}
+
+export function isDevReloadEnabled(): boolean {
+  return (
+    process.env.TERMIX_DEV_RELOAD === "true" &&
+    typeof process.send === "function"
+  );
+}
+
+export async function handleDevMessage(
+  msg: unknown,
+  send: Send,
+  reload: Reload,
+): Promise<void> {
+  if (!isReloadRequest(msg)) return;
+  try {
+    const result = await reload(msg.id);
+    pluginLogger.info(`Reloaded ${msg.id}@${result.version}`, {
+      operation: "plugin_dev_reload",
+    });
+    send({ type: "plugin-reloaded", id: msg.id, state: result.state });
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    pluginLogger.error(`Could not reload ${msg.id}`, error, {
+      operation: "plugin_dev_reload",
+    });
+    send({ type: "plugin-reload-failed", id: msg.id, error: message });
+  }
+}
+
+export function listenForDevReloads(): void {
+  if (!isDevReloadEnabled()) return;
+  process.on("message", (msg: unknown) => {
+    void handleDevMessage(
+      msg,
+      (reply) => process.send?.(reply),
+      async (id) => {
+        const { reloadBundledPlugin } = await import("./manage.js");
+        return reloadBundledPlugin(id);
+      },
+    );
+  });
+}
diff --git a/src/backend/plugins/fs-retry.ts b/src/backend/plugins/fs-retry.ts
new file mode 100644
index 000000000..4608df972
--- /dev/null
+++ b/src/backend/plugins/fs-retry.ts
@@ -0,0 +1,42 @@
+import fs from "node:fs";
+
+// Windows refuses a rename while anything holds a file open, and antivirus
+// or the search indexer often does for a moment right after files are
+// written. These are worth waiting out.
+const TRANSIENT = new Set(["EPERM", "EACCES", "EBUSY"]);
+const DELAYS_MS = [50, 100, 200, 400, 800, 1600];
+
+function isTransient(error: unknown): boolean {
+  return TRANSIENT.has((error as NodeJS.ErrnoException)?.code ?? "");
+}
+
+const sleep = (ms: number) => new Promise((resolve) => setTimeout(resolve, ms));
+
+/**
+ * Renames, retrying while the error looks like a passing lock. A directory
+ * that still cannot be renamed is copied and the source removed instead.
+ */
+export async function moveWithRetry(
+  from: string,
+  to: string,
+  delays: readonly number[] = DELAYS_MS,
+): Promise<void> {
+  let lastError: unknown;
+  for (let attempt = 0; attempt <= delays.length; attempt++) {
+    try {
+      await fs.promises.rename(from, to);
+      return;
+    } catch (error) {
+      if (!isTransient(error)) throw error;
+      lastError = error;
+      if (attempt < delays.length) await sleep(delays[attempt]);
+    }
+  }
+
+  const stat = await fs.promises.stat(from).catch(() => null);
+  if (!stat) throw lastError;
+  await fs.promises.cp(from, to, { recursive: true, force: true });
+  await fs.promises
+    .rm(from, { recursive: true, force: true, maxRetries: 5 })
+    .catch(() => {});
+}
diff --git a/src/backend/plugins/http.ts b/src/backend/plugins/http.ts
index daafc078c..695a4791b 100644
--- a/src/backend/plugins/http.ts
+++ b/src/backend/plugins/http.ts
@@ -24,8 +24,8 @@ import express, {
 import type {
   PluginMiddleware,
   PluginRouterOptions,
-} from "@termix/plugin-sdk/backend";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+} from "@termix-ssh/plugin-sdk/backend";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 import { pluginLogger } from "../utils/logger.js";
 import { AuthManager } from "../utils/auth-manager.js";
 import { runAsActor } from "./actor.js";
@@ -162,17 +162,81 @@ function compilePublicPath(path: string): RegExp {
   return new RegExp(prefix ? `^${escaped}(?:/.*)?$` : `^${escaped}$`);
 }
 
+interface PublicPath {
+  declared: string;
+  pattern: RegExp;
+}
+
+interface RouterLayer {
+  route?: {
+    path?: unknown;
+    _handlesMethod?: (method: string) => boolean;
+  };
+  match?: (path: string) => boolean;
+}
+
+function segments(path: string): string[] {
+  return normalizePublicPath(path).split("/").slice(1);
+}
+
 /**
- * Matches the request path against the declared public paths.
- *
- * Full-path match only. A prefix match would turn one declared route into a
- * hole covering everything below it, which is not what declaring a single
- * public path should mean.
+ * Whether a declared public path names this registered route: literal
+ * segments must be equal and a ":param" must sit where the route has one, so
+ * "/webhook/:token" never covers a sibling "/webhook/config".
  */
-function isPublicRequest(req: Request, publicPaths: RegExp[]): boolean {
+function declaredCoversRoute(declared: string, routePath: string): boolean {
+  const prefix = declared.endsWith("/*");
+  const want = segments(prefix ? declared.slice(0, -2) : declared);
+  const have = segments(routePath);
+  if (prefix ? have.length < want.length : have.length !== want.length) {
+    return false;
+  }
+  return want.every((segment, index) =>
+    segment.startsWith(":")
+      ? have[index].startsWith(":")
+      : segment.toLowerCase() === have[index].toLowerCase(),
+  );
+}
+
+/**
+ * Whether the request is for a declared public path.
+ *
+ * Full-path match only, and only for the route that will actually answer:
+ * the first route in the plugin's router that matches the path and method
+ * has to be the one the declaration names. So a public "/webhook/:token"
+ * registered for POST does not open GET, and does not open a literal sibling
+ * route registered next to it. A trailing "/*" may also be served by
+ * router.use(), which has no route to compare against.
+ */
+function isPublicRequest(
+  req: Request,
+  publicPaths: PublicPath[],
+  inner: Router,
+): boolean {
   if (publicPaths.length === 0) return false;
   const path = normalizePublicPath(req.path || "/");
-  return publicPaths.some((pattern) => pattern.test(path));
+  const candidates = publicPaths.filter(({ pattern }) => pattern.test(path));
+  if (candidates.length === 0) return false;
+
+  const stack = (inner as unknown as { stack?: RouterLayer[] }).stack ?? [];
+  for (const layer of stack) {
+    if (!layer.match?.(req.path || "/")) continue;
+    if (!layer.route) {
+      if (candidates.some(({ declared }) => declared.endsWith("/*"))) {
+        return true;
+      }
+      continue;
+    }
+    if (!layer.route._handlesMethod?.(req.method)) continue;
+    const routePath = layer.route.path;
+    return (
+      typeof routePath === "string" &&
+      candidates.some(({ declared }) =>
+        declaredCoversRoute(declared, routePath),
+      )
+    );
+  }
+  return false;
 }
 
 export interface CreatePluginRouterArgs {
@@ -196,7 +260,10 @@ export function createPluginRouter({
   const declaredPublic = (options?.public ?? []).map((path) =>
     normalizePublicPath(path),
   );
-  const publicPaths = declaredPublic.map((path) => compilePublicPath(path));
+  const publicPaths = declaredPublic.map((declared) => ({
+    declared,
+    pattern: compilePublicPath(declared),
+  }));
   publicRoutes.set(pluginId, declaredPublic);
 
   if (declaredPublic.length > 0) {
@@ -250,7 +317,7 @@ export function createPluginRouter({
   const authenticate = AuthManager.getInstance().createAuthMiddleware();
 
   outer.use((req: Request, res: Response, next: NextFunction) => {
-    if (isPublicRequest(req, publicPaths)) {
+    if (isPublicRequest(req, publicPaths, inner)) {
       const ip = req.ip || req.socket?.remoteAddress || "unknown";
       if (overPublicRateLimit(pluginId, ip)) {
         res.status(429).json({ error: "Too many requests" });
diff --git a/src/backend/plugins/index.ts b/src/backend/plugins/index.ts
index 05cee58c0..a8dd5bead 100644
--- a/src/backend/plugins/index.ts
+++ b/src/backend/plugins/index.ts
@@ -22,6 +22,7 @@ import { setSshAuthTypeOwnerSource } from "../hosts/connect/auth-provider-regist
 import { setHostProtocolSource } from "../hosts/protocol-auth/registry.js";
 import { setSecretResolverOwnerSource } from "../hosts/connect/secret-resolver-registry.js";
 import { recordConflict } from "./conflicts.js";
+import { startablePluginIds } from "./boot-state.js";
 import { setPluginImpersonationCheck } from "../utils/auth-manager.js";
 import { setKeybindingActionSource } from "../database/routes/keybinding-validation.js";
 
@@ -94,9 +95,9 @@ export function getPluginRuntime(): { loader: PluginLoader } {
 }
 
 /**
- * A plugin that tripped the error budget is off until an admin retries it, so
- * it has to look off everywhere: no routes, greyed permissions, and a failed
- * row that survives a restart.
+ * A plugin that tripped the error budget is off until an admin retries it or
+ * the server restarts, so it has to look off everywhere: no routes and greyed
+ * permissions.
  */
 async function handlePluginFailed(plugin: LoadedPlugin): Promise<void> {
   unregisterPluginHttp(plugin.id);
@@ -126,11 +127,21 @@ async function handlePluginFailed(plugin: LoadedPlugin): Promise<void> {
  * `state` is only ever set on insert. Once the row exists whatever the user
  * chose wins, because re-enabling a plugin they disabled on every restart
  * would be a bug rather than a default.
+ *
+ * A fresh install (no users, no plugin rows) is different: only the bundled
+ * plugins marked recommended start enabled, and the first admin picks the
+ * rest in onboarding. Consent plugins wait for that choice too, even when
+ * the picker checks them by default.
  */
-async function seedPlugins(loaded: LoadedPlugin[]): Promise<void> {
+async function seedPlugins(
+  loaded: LoadedPlugin[],
+  freshInstall: boolean,
+): Promise<boolean> {
   const { createCurrentPluginRepository } =
     await import("../database/repositories/factory.js");
   const repository = createCurrentPluginRepository();
+  const fresh = freshInstall && (await repository.listAll()).length === 0;
+  const { initialPluginState } = await import("./bundled-index.js");
 
   for (const plugin of loaded) {
     const manifestJson = JSON.stringify(plugin.manifest);
@@ -155,7 +166,7 @@ async function seedPlugins(loaded: LoadedPlugin[]): Promise<void> {
       version: plugin.manifest.version,
       tier: plugin.source === "bundled" ? "bundled" : "community",
       source: plugin.source,
-      state: plugin.source === "bundled" ? "enabled" : "disabled",
+      state: initialPluginState(plugin.id, plugin.source, fresh),
       manifestJson,
     });
 
@@ -163,6 +174,8 @@ async function seedPlugins(loaded: LoadedPlugin[]): Promise<void> {
       operation: "plugin_seed",
     });
   }
+
+  return fresh;
 }
 
 /**
@@ -212,23 +225,28 @@ async function syncCapabilityGrants(loaded: LoadedPlugin[]): Promise<void> {
  * Loads every plugin on disk and activates the ones marked enabled, in
  * dependency order. Called once from the backend start-up sequence.
  */
-export async function initializePlugins(): Promise<LoadedPlugin[]> {
+export async function initializePlugins(
+  options: { freshInstall?: boolean } = {},
+): Promise<LoadedPlugin[]> {
   const { loader: pluginLoader } = getPluginRuntime();
 
+  const { applyStoredPluginChoices } = await import("./manage.js");
+  await applyStoredPluginChoices(pluginLoader);
+
   const loaded = await pluginLoader.loadAll();
   if (loaded.length === 0) return [];
 
-  await seedPlugins(loaded);
+  const fresh = await seedPlugins(loaded, options.freshInstall === true);
   await syncCapabilityGrants(loaded);
+  if (loaded.some((plugin) => plugin.source === "bundled")) {
+    const { offerPluginSetup } = await import("./onboarding.js");
+    await offerPluginSetup(fresh);
+  }
 
   const { createCurrentPluginRepository } =
     await import("../database/repositories/factory.js");
   const records = await createCurrentPluginRepository().listAll();
-  const enabled = new Set(
-    records
-      .filter((record) => record.state === "enabled")
-      .map((record) => record.id),
-  );
+  const enabled = startablePluginIds(records);
 
   const candidates = loaded
     .filter((plugin) => enabled.has(plugin.id))
@@ -257,14 +275,28 @@ async function persistRuntimeState(loaded: LoadedPlugin[]): Promise<void> {
   const { createCurrentPluginRepository } =
     await import("../database/repositories/factory.js");
   const repository = createCurrentPluginRepository();
+  const records = new Map(
+    (await repository.listAll()).map((record) => [record.id, record]),
+  );
 
   for (const plugin of loaded) {
-    if (plugin.state !== "blocked" && plugin.state !== "failed") continue;
+    const record = records.get(plugin.id);
     try {
-      await repository.update(plugin.id, {
-        state: plugin.state,
-        lastError: plugin.lastError,
-      });
+      if (plugin.state === "blocked" || plugin.state === "failed") {
+        await repository.update(plugin.id, {
+          state: plugin.state,
+          lastError: plugin.lastError,
+        });
+      } else if (
+        plugin.state === "active" &&
+        record &&
+        record.state !== "enabled"
+      ) {
+        await repository.update(plugin.id, {
+          state: "enabled",
+          lastError: null,
+        });
+      }
     } catch {
       // Reporting state must never stop the boot.
     }
@@ -562,11 +594,19 @@ export async function installPluginArtifact(
     file,
     pluginLoader.bundledIds(),
   );
-  await seedPlugins([plugin]);
+  await seedPlugins([plugin], false);
   await syncCapabilityGrants([plugin]);
   return plugin;
 }
 
+/** Gives freshly loaded plugins a row and their bundled grants. */
+export async function registerLoadedPlugins(
+  loaded: LoadedPlugin[],
+): Promise<void> {
+  await seedPlugins(loaded, false);
+  await syncCapabilityGrants(loaded);
+}
+
 /** Stops a plugin and forgets it, before a new version is installed. */
 export async function unloadPlugin(pluginId: string): Promise<void> {
   const { loader: pluginLoader } = getPluginRuntime();
diff --git a/src/backend/plugins/install-counts.ts b/src/backend/plugins/install-counts.ts
new file mode 100644
index 000000000..a0dd5d62b
--- /dev/null
+++ b/src/backend/plugins/install-counts.ts
@@ -0,0 +1,79 @@
+/**
+ * Popularity numbers for the plugin store, copied from the registry's
+ * stats.json into plugin_install_counts.
+ *
+ * Two sources, and the store prefers the first:
+ * - "aggregate-telemetry": instances that reported the plugin enabled in the
+ *   last 7 days through the Usage Statistics plugin. It undercounts by every
+ *   instance that turned the report off or never installed that plugin.
+ * - "github-releases": downloads of the plugin's .tmxplug release assets.
+ *   This counts downloads, not active installs: an instance that updates
+ *   three times counts three times, and Docker images that bundle the plugin
+ *   count once per build, not once per install.
+ *
+ * Treat both as a rough ranking, never as a user count.
+ */
+
+import { pluginLogger } from "../utils/logger.js";
+import { OFFICIAL_REGISTRY_ID, fetchRegistryStats } from "./registry-index.js";
+
+export const TELEMETRY_SOURCE = "aggregate-telemetry";
+export const DOWNLOADS_SOURCE = "github-releases";
+
+export interface InstallCount {
+  count: number;
+  source: string;
+}
+
+async function repository() {
+  const { createCurrentPluginInstallCountRepository } =
+    await import("../database/repositories/factory.js");
+  return createCurrentPluginInstallCountRepository();
+}
+
+/** Picks the number to show: active installs when known, downloads otherwise. */
+export function preferredCount(entry: {
+  downloads: number;
+  activeInstalls: number | null;
+}): InstallCount {
+  return entry.activeInstalls !== null && entry.activeInstalls > 0
+    ? { count: entry.activeInstalls, source: TELEMETRY_SOURCE }
+    : { count: entry.downloads, source: DOWNLOADS_SOURCE };
+}
+
+/** Returns how many rows changed. Never throws; a failed sync keeps the old numbers. */
+export async function syncInstallCounts(): Promise<number> {
+  try {
+    const stats = await fetchRegistryStats();
+    if (!stats) return 0;
+    const entries = [...stats.plugins].map(([pluginId, entry]) => ({
+      pluginId,
+      ...preferredCount(entry),
+    }));
+    return await (await repository()).upsertMany(OFFICIAL_REGISTRY_ID, entries);
+  } catch (error) {
+    pluginLogger.warn(
+      `Could not sync plugin install counts: ${
+        error instanceof Error ? error.message : String(error)
+      }`,
+      { operation: "plugin_registry" },
+    );
+    return 0;
+  }
+}
+
+export async function readInstallCounts(
+  registryId: string = OFFICIAL_REGISTRY_ID,
+): Promise<Map<string, InstallCount>> {
+  try {
+    const rows = await (await repository()).listByRegistry(registryId);
+    return new Map(
+      rows.map((row) => [
+        row.pluginId,
+        { count: row.count, source: row.source },
+      ]),
+    );
+  } catch {
+    return new Map();
+  }
+}
diff --git a/src/backend/plugins/loader.ts b/src/backend/plugins/loader.ts
index e8d668711..2b6961a71 100644
--- a/src/backend/plugins/loader.ts
+++ b/src/backend/plugins/loader.ts
@@ -20,7 +20,7 @@ import * as tar from "tar";
 import { pluginLogger } from "../utils/logger.js";
 import { isTermixCompatible, parseManifest } from "./manifest.js";
 import { getLocalVersion } from "../utils/app-version.js";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 import {
   getBundledPluginsDir,
   getPluginBackendEntry,
@@ -29,6 +29,7 @@ import {
   getUnpackedPluginsDir,
 } from "./paths.js";
 import { requireSignedPlugins, verifyPluginArtifact } from "./trust.js";
+import { moveWithRetry } from "./fs-retry.js";
 import {
   createPluginContext,
   createPluginHandle,
@@ -39,7 +40,7 @@ import {
 import { resolveRequirements } from "./service-registry.js";
 import { resolveSecretRequirements } from "./secret-registry.js";
 import { recordConflict } from "./conflicts.js";
-import { tablePrefix } from "@termix/plugin-sdk/db";
+import { tablePrefix } from "@termix-ssh/plugin-sdk/db";
 
 export type PluginState =
   | "loaded"
@@ -90,6 +91,14 @@ export class PluginLoader {
   private readonly bundledVersions = new Map<string, string>();
   /** Activation order, so shutdown can run it backwards. */
   private activationOrder: string[] = [];
+  /**
+   * Bundled plugins an admin uninstalled. The shipped copy is ignored as if
+   * it were not there, so a reinstall from the registry loads as a normal
+   * download and a recreated image cannot bring the old copy back.
+   */
+  private uninstalled = new Set<string>();
+  /** Versions an admin pinned, which may sit below the bundled copy. */
+  private pinned = new Map<string, string>();
 
   constructor(private readonly options: PluginLoaderOptions = {}) {}
 
@@ -111,6 +120,33 @@ export class PluginLoader {
     ]);
   }
 
+  setUninstalled(ids: Iterable<string>): void {
+    this.uninstalled = new Set(ids);
+    for (const id of this.uninstalled) this.bundledVersions.delete(id);
+  }
+
+  setPinned(pins: Map<string, string>): void {
+    this.pinned = new Map(pins);
+  }
+
+  /** Version of the copy that ships in the image, loaded or not. */
+  bundledVersion(pluginId: string): string | undefined {
+    return this.bundledVersions.get(pluginId);
+  }
+
+  /** Loads the shipped copy of a bundled plugin, e.g. after a reinstall. */
+  async loadBundled(pluginId: string): Promise<LoadedPlugin> {
+    if (!PLUGIN_ID_PATTERN.test(pluginId)) {
+      throw new Error(`invalid plugin id "${pluginId}"`);
+    }
+    const plugin = await this.load(
+      path.join(getBundledPluginsDir(), pluginId),
+      "bundled",
+    );
+    this.bundledVersions.set(plugin.id, plugin.manifest.version);
+    return plugin;
+  }
+
   /** Drops a stopped plugin from the list, so a new copy can load in its place. */
   forget(pluginId: string): void {
     const plugin = this.plugins.get(pluginId);
@@ -215,6 +251,7 @@ export class PluginLoader {
   async loadAll(): Promise<LoadedPlugin[]> {
     this.plugins.clear();
     this.bundledVersions.clear();
+    await removeStaleStaging();
     const loaded: LoadedPlugin[] = [];
     // Every bundled folder name, loaded or not: a bundled plugin that fails
     // to load must not leave its id free for a user plugin to take.
@@ -231,7 +268,10 @@ export class PluginLoader {
       const entries = await fs.promises.readdir(root, { withFileTypes: true });
       if (source === "bundled") {
         for (const entry of entries) {
-          if (entry.isDirectory()) bundledIds.add(entry.name);
+          if (!entry.isDirectory() || this.uninstalled.has(entry.name)) {
+            continue;
+          }
+          bundledIds.add(entry.name);
         }
       }
 
@@ -244,6 +284,7 @@ export class PluginLoader {
         if (entry.isDirectory() && entry.name.startsWith(".")) continue;
 
         const dir = path.join(root, entry.name);
+        if (source === "bundled" && this.uninstalled.has(entry.name)) continue;
         try {
           if (isArtifact) {
             const plugin = await this.loadArtifact(dir, bundledIds);
@@ -321,6 +362,13 @@ export class PluginLoader {
       );
     }
 
+    const unsafe = await unsafeArchivePath(file);
+    if (unsafe) {
+      throw new Error(
+        `${path.basename(file)} has a file outside the plugin folder: ${unsafe}`,
+      );
+    }
+
     const unpackedRoot = getUnpackedPluginsDir();
     const staging = path.join(
       unpackedRoot,
@@ -355,6 +403,7 @@ export class PluginLoader {
           raw?.version,
           signedBy,
           this.bundledVersions.get(id) ?? replaced?.manifest.version,
+          this.pinned.get(id),
         );
       } else if (this.plugins.has(id)) {
         throw new Error(`another plugin already uses the id "${id}"`);
@@ -364,8 +413,12 @@ export class PluginLoader {
       }
 
       const target = path.join(unpackedRoot, id);
-      await fs.promises.rm(target, { recursive: true, force: true });
-      await fs.promises.rename(staging, target);
+      await fs.promises.rm(target, {
+        recursive: true,
+        force: true,
+        maxRetries: 5,
+      });
+      await moveWithRetry(staging, target);
 
       if (replaced) this.plugins.delete(id);
       try {
@@ -385,7 +438,15 @@ export class PluginLoader {
         throw error;
       }
     } finally {
-      await fs.promises.rm(staging, { recursive: true, force: true });
+      // Never let a failed cleanup hide the error that got us here.
+      await fs.promises
+        .rm(staging, { recursive: true, force: true, maxRetries: 5 })
+        .catch((error) =>
+          pluginLogger.warn(`Could not remove ${staging}`, {
+            operation: "plugin_load",
+            error: error instanceof Error ? error.message : String(error),
+          }),
+        );
     }
   }
 
@@ -437,7 +498,11 @@ export class PluginLoader {
           state.set(id, "done");
           return false;
         }
-        if (!semver.satisfies(dependency.manifest.version, range)) {
+        if (
+          !semver.satisfies(dependency.manifest.version, range, {
+            includePrerelease: true,
+          })
+        ) {
           blocked.set(
             id,
             `requires "${dependencyId}" ${range}, but ${dependency.manifest.version} is installed`,
@@ -547,8 +612,10 @@ export class PluginLoader {
       // than leave it half-running against a schema that is not there. A
       // throw here lands in the catch below, which fails this plugin only.
       const { migratePlugin } = await import("./data.js");
+      // A release signed by a trusted key is official whether it shipped in
+      // the image or was downloaded, so it may adopt its 2.8 tables too.
       const applied = await migratePlugin(plugin.id, plugin.dir, {
-        bundled: plugin.source === "bundled",
+        bundled: plugin.source === "bundled" || Boolean(plugin.signedBy),
       });
       // A new table may be where core data is waiting to move.
       if (applied.length > 0) {
@@ -776,6 +843,7 @@ export function assertBundledUpdate(
   version: unknown,
   signedBy: string | undefined,
   bundledVersion: string | undefined,
+  pinnedVersion?: string,
 ): void {
   if (!signedBy) {
     throw new Error(
@@ -785,6 +853,8 @@ export function assertBundledUpdate(
   if (typeof version !== "string" || !semver.valid(version)) {
     throw new Error(`update for "${id}" has no valid version`);
   }
+  // An admin pinning an exact older release is the one allowed downgrade.
+  if (pinnedVersion && pinnedVersion === version) return;
   if (bundledVersion && !semver.gt(version, bundledVersion)) {
     throw new Error(
       `update for "${id}" is ${version}, which is not newer than the bundled ${bundledVersion}`,
@@ -830,3 +900,44 @@ export function isRealPathInside(root: string, target: string): boolean {
     return false;
   }
 }
+
+/**
+ * The first entry that would land outside the folder it is unpacked into,
+ * or null. tar skips these on its own, but its stream keeps writing after
+ * it rejects, so they are refused before anything is unpacked.
+ */
+export async function unsafeArchivePath(file: string): Promise<string | null> {
+  let unsafe: string | null = null;
+  await tar.t({
+    file,
+    onReadEntry: (entry) => {
+      const name = entry.path.replace(/\\/g, "/");
+      if (
+        !unsafe &&
+        (name.startsWith("/") ||
+          /^[a-zA-Z]:/.test(name) ||
+          name.split("/").includes(".."))
+      ) {
+        unsafe = entry.path;
+      }
+    },
+  });
+  return unsafe;
+}
+
+/** Clears unpack folders an install left behind when the process died. */
+export async function removeStaleStaging(): Promise<void> {
+  const root = getUnpackedPluginsDir();
+  let entries: fs.Dirent[];
+  try {
+    entries = await fs.promises.readdir(root, { withFileTypes: true });
+  } catch {
+    return;
+  }
+  for (const entry of entries) {
+    if (!entry.isDirectory() || !entry.name.startsWith(".staging-")) continue;
+    await fs.promises
+      .rm(path.join(root, entry.name), { recursive: true, force: true })
+      .catch(() => {});
+  }
+}
diff --git a/src/backend/plugins/manage.ts b/src/backend/plugins/manage.ts
new file mode 100644
index 000000000..da377dbfe
--- /dev/null
+++ b/src/backend/plugins/manage.ts
@@ -0,0 +1,1484 @@
+/**
+ * Installing, updating, uninstalling and switching plugins at runtime.
+ *
+ * The official registry is the one real source. With developer mode on, an
+ * admin can also install a .tmxplug from a file; that skips the download,
+ * sha256 and signature checks and stays marked unverified. Bundled plugins ship in the
+ * image and can still be uninstalled: their files are deleted and the id is
+ * recorded in the settings table, so the shipped copy is ignored from then
+ * on and a reinstall downloads the plugin like any other.
+ */
+
+import crypto from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import semver from "semver";
+import { pluginLogger } from "../utils/logger.js";
+import {
+  activatePlugin,
+  deactivatePlugin,
+  getPluginRuntime,
+  registerLoadedPlugins,
+  unloadPlugin,
+} from "./index.js";
+import type { LoadedPlugin, PluginLoader } from "./loader.js";
+import {
+  getBundledPluginsDir,
+  getPluginDataDir,
+  getPluginsDir,
+  getUnpackedPluginsDir,
+} from "./paths.js";
+import {
+  OFFICIAL_REGISTRY_ID,
+  downloadRelease,
+  fetchRegistryIndex,
+  channelReleases,
+  findRelease,
+  getDownloadsDir,
+  getRegistryStatus,
+  isApiCompatible,
+  latestOnChannel,
+  parsePluginChannel,
+  type PluginChannel,
+  type RegistryIndex,
+  type RegistryVersion,
+} from "./registry-index.js";
+import { invalidatePluginPermissionCache } from "./permissions.js";
+import { moveWithRetry } from "./fs-retry.js";
+import { readInstallCounts } from "./install-counts.js";
+import { readArtifactManifest, sameCapabilities } from "./artifact-manifest.js";
+import {
+  parseManifest,
+  pluginFeatures,
+  type PluginManifest,
+} from "./manifest.js";
+import { requireSignedPlugins } from "./trust.js";
+import {
+  parseChangelog,
+  parseReleaseNotes,
+  type ChangelogRelease,
+  type ReleaseNotes,
+} from "@termix-ssh/plugin-sdk/changelog";
+
+const UNINSTALLED_KEY = "plugins_uninstalled";
+const DEVELOPER_MODE_KEY = "plugins_developer_mode";
+/** Installed from a file with no registry signature behind it. Never cleared. */
+export const UNVERIFIED_TIER = "unverified";
+
+export class PluginManageError extends Error {
+  constructor(
+    message: string,
+    readonly status: number,
+    readonly code: string,
+    readonly details?: Record<string, unknown>,
+  ) {
+    super(message);
+  }
+}
+
+let queue: Promise<unknown> = Promise.resolve();
+
+/** One change at a time: dependencies make concurrent changes unsafe. */
+export function serialized<T>(fn: () => Promise<T>): Promise<T> {
+  const run = queue.then(fn, fn);
+  queue = run.catch(() => {});
+  return run;
+}
+
+async function repos() {
+  return import("../database/repositories/factory.js");
+}
+
+export async function readUninstalled(): Promise<Set<string>> {
+  const { createCurrentSettingsRepository } = await repos();
+  const raw = await createCurrentSettingsRepository().get(UNINSTALLED_KEY);
+  if (!raw) return new Set();
+  try {
+    const parsed = JSON.parse(raw);
+    return new Set(
+      Array.isArray(parsed)
+        ? parsed.filter((id): id is string => typeof id === "string")
+        : [],
+    );
+  } catch {
+    return new Set();
+  }
+}
+
+async function writeUninstalled(ids: Set<string>): Promise<void> {
+  const { createCurrentSettingsRepository } = await repos();
+  await createCurrentSettingsRepository().set(
+    UNINSTALLED_KEY,
+    JSON.stringify([...ids].sort()),
+  );
+  getPluginRuntime().loader.setUninstalled(ids);
+}
+
+async function readPins(): Promise<Map<string, string>> {
+  const { createCurrentPluginRepository } = await repos();
+  const pins = new Map<string, string>();
+  for (const record of await createCurrentPluginRepository().listAll()) {
+    if (record.pinnedVersion) pins.set(record.id, record.pinnedVersion);
+  }
+  return pins;
+}
+
+/** Called once before the boot scan, so it honours uninstalls and pins. */
+export async function applyStoredPluginChoices(
+  loader: PluginLoader,
+): Promise<void> {
+  try {
+    loader.setUninstalled(await readUninstalled());
+    loader.setPinned(await readPins());
+  } catch (error) {
+    pluginLogger.warn(
+      `Could not read stored plugin choices: ${
+        error instanceof Error ? error.message : String(error)
+      }`,
+      { operation: "plugin_init" },
+    );
+  }
+}
+
+const ID_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
+
+function isBundledOnDisk(pluginId: string): boolean {
+  return fs.existsSync(
+    path.join(getBundledPluginsDir(), pluginId, "manifest.json"),
+  );
+}
+
+/** Whether `target` is a folder strictly inside `root`. */
+function isStrictlyInside(root: string, target: string): boolean {
+  const relative = path.relative(path.resolve(root), path.resolve(target));
+  return (
+    relative !== "" && !relative.startsWith("..") && !path.isAbsolute(relative)
+  );
+}
+
+/** A plugin dropped in as a plain folder under the plugins directory. */
+async function removeUserFolder(
+  pluginId: string,
+  live: LoadedPlugin | undefined,
+): Promise<void> {
+  const root = getPluginsDir();
+  const candidates = new Set([path.join(root, pluginId)]);
+  if (live?.source === "user" && !live.artifact) candidates.add(live.dir);
+  for (const dir of candidates) {
+    if (!isStrictlyInside(root, dir)) continue;
+    await fs.promises.rm(dir, { recursive: true, force: true });
+  }
+}
+
+/**
+ * Deletes the copy that shipped in the image. A read-only install keeps the
+ * files, which is fine: the id is on the ignore list either way.
+ */
+async function removeShippedCopy(pluginId: string): Promise<void> {
+  const root = getBundledPluginsDir();
+  const dir = path.join(root, pluginId);
+  if (!isStrictlyInside(root, dir)) return;
+  try {
+    await fs.promises.rm(dir, { recursive: true, force: true });
+  } catch (error) {
+    pluginLogger.warn(
+      `Could not delete the shipped copy of ${pluginId}, it stays ignored: ${
+        error instanceof Error ? error.message : String(error)
+      }`,
+      { operation: "plugin_uninstall" },
+    );
+  }
+}
+
+export async function isLinkedDesktop(): Promise<boolean> {
+  if (process.env.ELECTRON_EMBEDDED !== "true") return false;
+  const { getLink } = await import("../sync/client/link-store.js");
+  return Boolean(await getLink());
+}
+
+function channelOf(record: { channel?: string | null } | null | undefined) {
+  return parsePluginChannel(record?.channel) ?? "stable";
+}
+
+function addedCapabilities(
+  current: readonly string[],
+  next: readonly string[],
+): string[] {
+  const have = new Set(current);
+  return next.filter((capability) => !have.has(capability));
+}
+
+export interface RegistryListing {
+  registry: ReturnType<typeof getRegistryStatus> & { id: string };
+  /** A linked desktop runs what its server runs, so nothing here can change. */
+  managedByServer: boolean;
+  plugins: Array<{
+    id: string;
+    name: string;
+    description: string;
+    author: string;
+    category: string;
+    repository?: string;
+    icon?: string;
+    videoId?: string;
+    features: string[];
+    docs?: string;
+    versions: Array<{
+      version: string;
+      prerelease: boolean;
+      compatible: boolean;
+      capabilities: string[];
+      publishedAt?: string;
+      releaseNotesUrl?: string;
+      notes?: ReleaseNotes;
+      size: number;
+    }>;
+    /** Newest release on the plugin's channel. */
+    latestVersion: string | null;
+    /** Newest compatible beta, when one is newer than stable. */
+    latestBeta: string | null;
+    channel: PluginChannel;
+    installed: boolean;
+    installedVersion: string | null;
+    updateAvailable: boolean;
+    addedCapabilities: string[];
+    pinnedVersion: string | null;
+    autoUpdate: boolean;
+    bundled: boolean;
+    /** See install-counts.ts for what this number does and does not mean. */
+    installCount: number | null;
+    installCountSource: string | null;
+  }>;
+}
+
+export async function listRegistry(
+  options: { force?: boolean } = {},
+): Promise<RegistryListing> {
+  const index = await fetchRegistryIndex(options);
+  const { createCurrentPluginRepository } = await repos();
+  const records = new Map(
+    (await createCurrentPluginRepository().listAll()).map((r) => [r.id, r]),
+  );
+  const counts = await readInstallCounts();
+  const { loader } = getPluginRuntime();
+  const shipped = loader.bundledIds();
+
+  return {
+    registry: { id: OFFICIAL_REGISTRY_ID, ...getRegistryStatus() },
+    managedByServer: await isLinkedDesktop(),
+    plugins: index.plugins.map((plugin) => {
+      const record = records.get(plugin.id);
+      const live = loader.get(plugin.id);
+      const channel = channelOf(record);
+      const latest = latestOnChannel(plugin, channel);
+      const latestBeta =
+        plugin.prereleases.find((entry) => isApiCompatible(entry.api)) ?? null;
+      const installedVersion =
+        live?.manifest.version ?? record?.version ?? null;
+      const updateAvailable = Boolean(
+        installedVersion &&
+        latest &&
+        semver.valid(installedVersion) &&
+        semver.gt(latest.version, installedVersion),
+      );
+      return {
+        id: plugin.id,
+        name: plugin.name,
+        description: plugin.description,
+        author: plugin.author,
+        category: plugin.category,
+        repository: plugin.repository,
+        icon: plugin.icon,
+        videoId: plugin.videoId,
+        features: plugin.features,
+        docs: plugin.docs,
+        versions: channelReleases(plugin, "beta").map((entry) => ({
+          version: entry.version,
+          prerelease: Boolean(entry.prerelease),
+          compatible: isApiCompatible(entry.api),
+          capabilities: entry.capabilities,
+          publishedAt: entry.publishedAt,
+          releaseNotesUrl: entry.releaseNotesUrl,
+          notes: readReleaseNotes(entry.notes),
+          size: entry.size,
+        })),
+        latestVersion: latest?.version ?? null,
+        latestBeta: latestBeta?.version ?? null,
+        channel,
+        installed: Boolean(record),
+        installedVersion: record ? installedVersion : null,
+        updateAvailable: Boolean(record) && updateAvailable,
+        addedCapabilities:
+          updateAvailable && latest
+            ? addedCapabilities(
+                live?.manifest.capabilities ?? [],
+                latest.capabilities,
+              )
+            : [],
+        pinnedVersion: record?.pinnedVersion ?? null,
+        autoUpdate: Boolean(record?.autoUpdate),
+        bundled: shipped.has(plugin.id),
+        installCount: counts.get(plugin.id)?.count ?? null,
+        installCountSource: counts.get(plugin.id)?.source ?? null,
+      };
+    }),
+  };
+}
+
+async function removeArtifactFiles(
+  pluginId: string,
+  extra?: string,
+): Promise<void> {
+  const candidates = new Set<string>([
+    path.join(getPluginsDir(), `${pluginId}.tmxplug`),
+  ]);
+  if (extra) candidates.add(extra);
+  for (const file of candidates) {
+    await fs.promises.rm(file, { force: true });
+    await fs.promises.rm(`${file}.sig`, { force: true });
+  }
+}
+
+/** Grants every capability the manifest declares, after the admin agreed. */
+async function grantDeclared(
+  plugin: LoadedPlugin,
+  userId: string | null,
+): Promise<void> {
+  if (plugin.source === "bundled") return;
+  const { createCurrentPluginPermissionGrantRepository } = await repos();
+  const repository = createCurrentPluginPermissionGrantRepository();
+  const granted = new Set(
+    (await repository.listByPlugin(plugin.id)).map((g) => g.capability),
+  );
+  for (const capability of plugin.manifest.capabilities) {
+    if (granted.has(capability)) continue;
+    await repository.grant({
+      pluginId: plugin.id,
+      capability,
+      grantedBy: userId,
+      source: "admin",
+    });
+  }
+  invalidatePluginPermissionCache(plugin.id);
+}
+
+type SwapSource = { release: RegistryVersion } | { upload: string };
+
+/**
+ * Puts a registry release, or an uploaded file, in place of whatever copy of
+ * the plugin is loaded. On a failed load the previous copy comes back.
+ */
+async function swapIn(
+  pluginId: string,
+  source: SwapSource,
+): Promise<LoadedPlugin> {
+  const { loader } = getPluginRuntime();
+  const previous = loader.get(pluginId);
+  const bundledVersion = loader.bundledVersion(pluginId);
+  const useBundled =
+    "release" in source &&
+    bundledVersion !== undefined &&
+    bundledVersion === source.release.version &&
+    isBundledOnDisk(pluginId);
+
+  // Fetched before anything stops, so a bad download changes nothing.
+  const staged = useBundled
+    ? null
+    : "release" in source
+      ? await downloadRelease(pluginId, source.release)
+      : { file: source.upload, signatureFile: `${source.upload}.sig` };
+
+  const finalFile = path.join(getPluginsDir(), `${pluginId}.tmxplug`);
+  const backupDir = path.join(getDownloadsDir(), `${pluginId}.previous`);
+  const previousArtifact = previous?.artifact;
+
+  await unloadPlugin(pluginId);
+
+  if (previousArtifact && fs.existsSync(previousArtifact)) {
+    await fs.promises.mkdir(backupDir, { recursive: true });
+    await fs.promises.copyFile(
+      previousArtifact,
+      path.join(backupDir, "plugin.tmxplug"),
+    );
+    if (fs.existsSync(`${previousArtifact}.sig`)) {
+      await fs.promises.copyFile(
+        `${previousArtifact}.sig`,
+        path.join(backupDir, "plugin.tmxplug.sig"),
+      );
+    }
+  }
+
+  try {
+    await removeArtifactFiles(pluginId, previousArtifact);
+    let plugin: LoadedPlugin;
+    if (staged) {
+      await fs.promises.mkdir(getPluginsDir(), { recursive: true });
+      await moveWithRetry(staged.file, finalFile);
+      if (fs.existsSync(staged.signatureFile)) {
+        await moveWithRetry(staged.signatureFile, `${finalFile}.sig`);
+      }
+      plugin = await loader.loadArtifact(finalFile, loader.bundledIds());
+    } else {
+      plugin = await loader.loadBundled(pluginId);
+    }
+    await registerLoadedPlugins([plugin]);
+    return plugin;
+  } catch (error) {
+    await removeArtifactFiles(pluginId);
+    await restorePrevious(pluginId, previousArtifact, backupDir);
+    throw error;
+  } finally {
+    await fs.promises.rm(backupDir, { recursive: true, force: true });
+    if (staged) {
+      await fs.promises.rm(staged.file, { force: true });
+      await fs.promises.rm(staged.signatureFile, { force: true });
+    }
+  }
+}
+
+async function restorePrevious(
+  pluginId: string,
+  previousArtifact: string | undefined,
+  backupDir: string,
+): Promise<void> {
+  const { loader } = getPluginRuntime();
+  if (loader.get(pluginId)) return;
+  try {
+    const backup = path.join(backupDir, "plugin.tmxplug");
+    if (previousArtifact && fs.existsSync(backup)) {
+      await fs.promises.copyFile(backup, previousArtifact);
+      if (fs.existsSync(`${backup}.sig`)) {
+        await fs.promises.copyFile(`${backup}.sig`, `${previousArtifact}.sig`);
+      }
+      await loader.loadArtifact(previousArtifact, loader.bundledIds());
+    } else if (
+      loader.bundledVersion(pluginId) !== undefined &&
+      isBundledOnDisk(pluginId)
+    ) {
+      await loader.loadBundled(pluginId);
+    }
+  } catch (error) {
+    pluginLogger.error(
+      `Could not restore the previous copy of ${pluginId}`,
+      error instanceof Error ? error : new Error(String(error)),
+      { operation: "plugin_install" },
+    );
+  }
+}
+
+async function recordState(
+  pluginId: string,
+  state: string,
+  lastError: string | null,
+): Promise<void> {
+  const { createCurrentPluginRepository } = await repos();
+  await createCurrentPluginRepository().update(pluginId, { state, lastError });
+}
+
+/** Starts a plugin and records how it went. Never throws on a failed start. */
+async function startAndRecord(pluginId: string): Promise<string> {
+  try {
+    await recordState(pluginId, "enabled", null);
+    await activatePlugin(pluginId);
+    return "active";
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    await recordState(pluginId, "failed", message);
+    return "failed";
+  }
+}
+
+async function enabledIds(): Promise<Set<string>> {
+  const { createCurrentPluginRepository } = await repos();
+  return new Set(
+    (await createCurrentPluginRepository().listAll())
+      .filter((record) => record.state === "enabled")
+      .map((record) => record.id),
+  );
+}
+
+/** Hard dependencies to start first, deepest first. */
+function dependencyChain(pluginId: string): {
+  order: string[];
+  missing: string[];
+} {
+  const { loader } = getPluginRuntime();
+  const order: string[] = [];
+  const missing: string[] = [];
+  const seen = new Set<string>();
+  const visit = (id: string) => {
+    if (seen.has(id)) return;
+    seen.add(id);
+    const plugin = loader.get(id);
+    if (!plugin) {
+      missing.push(id);
+      return;
+    }
+    for (const [dependency, range] of Object.entries(
+      plugin.manifest.dependencies ?? {},
+    )) {
+      const found = loader.get(dependency);
+      if (
+        found &&
+        !semver.satisfies(found.manifest.version, range, {
+          includePrerelease: true,
+        })
+      ) {
+        missing.push(`${dependency}@${range}`);
+        continue;
+      }
+      visit(dependency);
+    }
+    if (id !== pluginId) order.push(id);
+  };
+  visit(pluginId);
+  return { order, missing };
+}
+
+/** Running plugins that hard-depend on this one, outermost first. */
+function dependentChain(pluginId: string, enabled: Set<string>): string[] {
+  const { loader } = getPluginRuntime();
+  const result: string[] = [];
+  const visit = (id: string) => {
+    for (const plugin of loader.list()) {
+      if (!enabled.has(plugin.id) || result.includes(plugin.id)) continue;
+      if (!(id in (plugin.manifest.dependencies ?? {}))) continue;
+      visit(plugin.id);
+      result.push(plugin.id);
+    }
+  };
+  visit(pluginId);
+  return result;
+}
+
+/** Marks a plugin that was turned off only because a dependency was. */
+const STOPPED_WITH = "stopped with ";
+
+async function stoppedWith(pluginId: string): Promise<string[]> {
+  const { createCurrentPluginRepository } = await repos();
+  const marker = STOPPED_WITH + pluginId;
+  return (await createCurrentPluginRepository().listAll())
+    .filter(
+      (record) => record.state === "disabled" && record.lastError === marker,
+    )
+    .map((record) => record.id);
+}
+
+export interface StateChangePlan {
+  enable: string[];
+  disable: string[];
+  missing: string[];
+}
+
+export async function planStateChange(
+  pluginId: string,
+  enabled: boolean,
+): Promise<StateChangePlan> {
+  const current = await enabledIds();
+  if (enabled) {
+    const { order, missing } = dependencyChain(pluginId);
+    return {
+      enable: order.filter((id) => !current.has(id)),
+      disable: [],
+      missing,
+    };
+  }
+  return {
+    enable: [],
+    disable: dependentChain(pluginId, current),
+    missing: [],
+  };
+}
+
+export function setPluginState(
+  pluginId: string,
+  enabled: boolean,
+): Promise<StateChangePlan & { state: string }> {
+  return serialized(() => setPluginStateUnlocked(pluginId, enabled));
+}
+
+/** setPluginState for a caller already inside serialized(). */
+export async function setPluginStateUnlocked(
+  pluginId: string,
+  enabled: boolean,
+): Promise<StateChangePlan & { state: string }> {
+  const { loader } = getPluginRuntime();
+  if (!loader.get(pluginId)) {
+    throw new PluginManageError("Plugin not found", 404, "NOT_FOUND");
+  }
+  const plan = await planStateChange(pluginId, enabled);
+
+  if (enabled) {
+    if (plan.missing.length > 0) {
+      throw new PluginManageError(
+        "Some dependencies are not installed",
+        409,
+        "MISSING_DEPENDENCIES",
+        { missing: plan.missing },
+      );
+    }
+    for (const id of plan.enable) {
+      if ((await startAndRecord(id)) === "failed") {
+        await recordState(
+          pluginId,
+          "blocked",
+          `requires plugin "${id}", which could not start`,
+        );
+        return { ...plan, state: "blocked" };
+      }
+    }
+    const state = await startAndRecord(pluginId);
+    if (state === "active") {
+      // Bring back what turning this plugin off also turned off.
+      for (const id of await stoppedWith(pluginId)) {
+        const restore = await planStateChange(id, true);
+        if (restore.missing.length > 0) continue;
+        for (const dependency of restore.enable)
+          await startAndRecord(dependency);
+        await startAndRecord(id);
+      }
+    }
+    return { ...plan, state };
+  }
+
+  for (const id of plan.disable) {
+    await recordState(id, "disabled", STOPPED_WITH + pluginId);
+    await deactivatePlugin(id);
+  }
+  await recordState(pluginId, "disabled", null);
+  await deactivatePlugin(pluginId);
+  return { ...plan, state: "stopped" };
+}
+
+export interface InstallOptions {
+  version?: string;
+  /** Install only: the channel to follow from the start. */
+  channel?: PluginChannel;
+  userId: string | null;
+  acceptCapabilities?: boolean;
+  /**
+   * The capabilities the consent prompt showed: every one for an install,
+   * the added ones for an update. Must match what the release asks for.
+   */
+  capabilities?: string[];
+}
+
+function assertConsent(
+  consented: string[] | undefined,
+  asked: readonly string[],
+): void {
+  if (consented === undefined) {
+    throw new PluginManageError(
+      "The capabilities agreed to were not sent",
+      400,
+      "CONSENT_REQUIRED",
+    );
+  }
+  if (!sameCapabilities(consented, asked)) {
+    throw new PluginManageError(
+      "The capabilities agreed to do not match what this release asks for",
+      409,
+      "CONSENT_MISMATCH",
+      { capabilities: [...asked] },
+    );
+  }
+}
+
+async function requireRelease(
+  pluginId: string,
+  version: string | undefined,
+  channel: PluginChannel,
+): Promise<{
+  index: RegistryIndex;
+  release: RegistryVersion;
+  latest: RegistryVersion | null;
+}> {
+  let index: RegistryIndex;
+  try {
+    index = await fetchRegistryIndex();
+  } catch (error) {
+    throw new PluginManageError(
+      `Could not reach the plugin registry: ${
+        error instanceof Error ? error.message : String(error)
+      }`,
+      502,
+      "REGISTRY_UNREACHABLE",
+    );
+  }
+  const found = findRelease(index, pluginId, version, channel);
+  if (!found) {
+    throw new PluginManageError(
+      version
+        ? `${pluginId} ${version} is not in the official registry`
+        : `${pluginId} is not in the official registry`,
+      404,
+      "NOT_IN_REGISTRY",
+    );
+  }
+  if (!isApiCompatible(found.release.api)) {
+    throw new PluginManageError(
+      `${pluginId} ${found.release.version} does not run on this version of Termix`,
+      409,
+      "INCOMPATIBLE",
+    );
+  }
+  return {
+    index,
+    release: found.release,
+    latest: latestOnChannel(found.plugin, channel),
+  };
+}
+
+/** The version to hold at: an explicit pick that is not the newest. */
+function pinFor(
+  release: RegistryVersion,
+  latest: RegistryVersion | null,
+  requested: string | undefined,
+): string | null {
+  if (!requested) return null;
+  return latest && latest.version === release.version ? null : release.version;
+}
+
+async function applyPin(pluginId: string, pin: string | null): Promise<void> {
+  const { loader } = getPluginRuntime();
+  const pins = await readPins();
+  if (pin) pins.set(pluginId, pin);
+  else pins.delete(pluginId);
+  loader.setPinned(pins);
+}
+
+export function installPlugin(
+  pluginId: string,
+  options: InstallOptions,
+): Promise<{ id: string; version: string; state: string }> {
+  return serialized(async () => {
+    const { createCurrentPluginRepository } = await repos();
+    const repository = createCurrentPluginRepository();
+    if (await repository.findById(pluginId)) {
+      throw new PluginManageError(
+        "Plugin is already installed",
+        409,
+        "ALREADY_INSTALLED",
+      );
+    }
+
+    const channel = options.channel ?? "stable";
+    const { release, latest } = await requireRelease(
+      pluginId,
+      options.version,
+      channel,
+    );
+    assertConsent(options.capabilities, release.capabilities);
+    const pin = pinFor(release, latest, options.version);
+    await applyPin(pluginId, pin);
+
+    let plugin: LoadedPlugin;
+    try {
+      plugin = await swapIn(pluginId, { release });
+    } catch (error) {
+      await applyPin(pluginId, null);
+      throw new PluginManageError(
+        error instanceof Error ? error.message : String(error),
+        500,
+        "INSTALL_FAILED",
+      );
+    }
+
+    await repository.update(pluginId, {
+      registryId: OFFICIAL_REGISTRY_ID,
+      tier: plugin.source === "bundled" ? "bundled" : "official",
+      pinnedVersion: pin,
+      channel,
+    });
+    await grantDeclared(plugin, options.userId);
+
+    const { missing } = dependencyChain(pluginId);
+    if (missing.length > 0) {
+      await recordState(
+        pluginId,
+        "blocked",
+        `requires ${missing.map((id) => `"${id}"`).join(", ")}, which is not installed`,
+      );
+      return { id: pluginId, version: release.version, state: "blocked" };
+    }
+    for (const id of (await planStateChange(pluginId, true)).enable) {
+      await startAndRecord(id);
+    }
+    const state = await startAndRecord(pluginId);
+    pluginLogger.info(`Installed plugin ${pluginId}@${release.version}`, {
+      operation: "plugin_install",
+    });
+    return { id: pluginId, version: release.version, state };
+  });
+}
+
+export function updatePlugin(
+  pluginId: string,
+  options: InstallOptions,
+): Promise<{ id: string; version: string; state: string }> {
+  return serialized(() => updateUnlocked(pluginId, options));
+}
+
+async function updateUnlocked(
+  pluginId: string,
+  options: InstallOptions,
+): Promise<{ id: string; version: string; state: string }> {
+  const { createCurrentPluginRepository } = await repos();
+  const repository = createCurrentPluginRepository();
+  const record = await repository.findById(pluginId);
+  const { loader } = getPluginRuntime();
+  const live = loader.get(pluginId);
+  if (!record || !live) {
+    throw new PluginManageError("Plugin not found", 404, "NOT_FOUND");
+  }
+
+  const { release, latest } = await requireRelease(
+    pluginId,
+    options.version,
+    channelOf(record),
+  );
+  if (release.version === live.manifest.version) {
+    throw new PluginManageError(
+      `${pluginId} ${release.version} is already installed`,
+      409,
+      "SAME_VERSION",
+    );
+  }
+
+  const added = addedCapabilities(
+    live.manifest.capabilities,
+    release.capabilities,
+  );
+  if (added.length > 0) {
+    if (!options.acceptCapabilities) {
+      throw new PluginManageError(
+        "This version asks for new capabilities",
+        409,
+        "CAPABILITIES_ADDED",
+        { capabilities: added },
+      );
+    }
+    assertConsent(options.capabilities, added);
+  }
+
+  const wasEnabled = record.state !== "disabled";
+  const pin = pinFor(release, latest, options.version);
+  await applyPin(pluginId, pin);
+
+  let plugin: LoadedPlugin;
+  try {
+    plugin = await swapIn(pluginId, { release });
+  } catch (error) {
+    await applyPin(pluginId, record.pinnedVersion ?? null);
+    if (wasEnabled && loader.get(pluginId)) await startAndRecord(pluginId);
+    throw new PluginManageError(
+      error instanceof Error ? error.message : String(error),
+      500,
+      "UPDATE_FAILED",
+    );
+  }
+
+  await repository.update(pluginId, {
+    registryId: OFFICIAL_REGISTRY_ID,
+    tier: plugin.source === "bundled" ? "bundled" : "official",
+    pinnedVersion: pin,
+  });
+  await grantDeclared(plugin, options.userId);
+
+  const state = wasEnabled ? await startAndRecord(pluginId) : "stopped";
+  pluginLogger.info(
+    `Updated plugin ${pluginId} from ${live.manifest.version} to ${release.version}`,
+    { operation: "plugin_update" },
+  );
+  return { id: pluginId, version: release.version, state };
+}
+
+export interface UpdateAllResult {
+  updated: Array<{ id: string; version: string }>;
+  needsReview: Array<{ id: string; capabilities: string[] }>;
+  failed: Array<{ id: string; error: string }>;
+}
+
+/**
+ * Updates every plugin with a newer compatible release. One that asks for
+ * new capabilities is never updated here: it waits for an admin to review.
+ */
+export function updateAllPlugins(options: {
+  userId: string | null;
+  onlyAutoUpdate?: boolean;
+}): Promise<UpdateAllResult> {
+  return serialized(async () => {
+    const result: UpdateAllResult = {
+      updated: [],
+      needsReview: [],
+      failed: [],
+    };
+    const listing = await listRegistry({ force: true });
+    for (const entry of listing.plugins) {
+      if (!entry.updateAvailable || entry.pinnedVersion) continue;
+      if (options.onlyAutoUpdate && !entry.autoUpdate) continue;
+      if (entry.addedCapabilities.length > 0) {
+        result.needsReview.push({
+          id: entry.id,
+          capabilities: entry.addedCapabilities,
+        });
+        continue;
+      }
+      try {
+        const done = await updateUnlocked(entry.id, { userId: options.userId });
+        result.updated.push({ id: done.id, version: done.version });
+      } catch (error) {
+        result.failed.push({
+          id: entry.id,
+          error: error instanceof Error ? error.message : String(error),
+        });
+      }
+    }
+    return result;
+  });
+}
+
+export function uninstallPlugin(
+  pluginId: string,
+): Promise<{ id: string; removed: { tables: string[]; kvKeys: number } }> {
+  return serialized(() => uninstallPluginUnlocked(pluginId));
+}
+
+/** uninstallPlugin for a caller already inside serialized(). */
+export async function uninstallPluginUnlocked(
+  pluginId: string,
+): Promise<{ id: string; removed: { tables: string[]; kvKeys: number } }> {
+  if (!ID_PATTERN.test(pluginId)) {
+    throw new PluginManageError("Invalid plugin id", 400, "INVALID_ID");
+  }
+  const { createCurrentPluginRepository } = await repos();
+  const repository = createCurrentPluginRepository();
+  const record = await repository.findById(pluginId);
+  const { loader } = getPluginRuntime();
+  const live = loader.get(pluginId);
+  if (!record && !live) {
+    throw new PluginManageError("Plugin not found", 404, "NOT_FOUND");
+  }
+  const shipped = loader.bundledIds().has(pluginId);
+
+  const dependents = dependentChain(pluginId, await enabledIds());
+  if (dependents.length > 0) {
+    throw new PluginManageError(
+      "Other plugins depend on this one",
+      409,
+      "HAS_DEPENDENTS",
+      { dependents },
+    );
+  }
+
+  if (live) await deactivatePlugin(pluginId);
+
+  const { removePluginData } = await import("./data.js");
+  const removed = await removePluginData(pluginId, {
+    knownPluginIds: loader.list().map((plugin) => plugin.id),
+  });
+
+  if (live) loader.forget(pluginId);
+  await removeArtifactFiles(pluginId, live?.artifact);
+  await removeUserFolder(pluginId, live);
+  await fs.promises.rm(path.join(getUnpackedPluginsDir(), pluginId), {
+    recursive: true,
+    force: true,
+  });
+  await fs.promises.rm(getPluginDataDir(pluginId), {
+    recursive: true,
+    force: true,
+  });
+  await repository.delete(pluginId);
+  await applyPin(pluginId, null);
+
+  // Ignored even when the files are gone: a recreated container brings
+  // the image's copy back, and it must not load in place of a reinstall.
+  if (shipped) {
+    const uninstalled = await readUninstalled();
+    uninstalled.add(pluginId);
+    await writeUninstalled(uninstalled);
+    await removeShippedCopy(pluginId);
+  }
+
+  pluginLogger.info(`Uninstalled plugin ${pluginId}`, {
+    operation: "plugin_uninstall",
+  });
+  return {
+    id: pluginId,
+    removed: { tables: removed.tables, kvKeys: removed.kvKeys },
+  };
+}
+
+export function setPluginOptions(
+  pluginId: string,
+  options: { autoUpdate?: boolean; pinned?: boolean; channel?: PluginChannel },
+): Promise<{
+  autoUpdate: boolean;
+  pinnedVersion: string | null;
+  channel: PluginChannel;
+}> {
+  return serialized(async () => {
+    const { createCurrentPluginRepository } = await repos();
+    const repository = createCurrentPluginRepository();
+    const record = await repository.findById(pluginId);
+    if (!record) {
+      throw new PluginManageError("Plugin not found", 404, "NOT_FOUND");
+    }
+    const live = getPluginRuntime().loader.get(pluginId);
+    const pinnedVersion =
+      options.pinned === undefined
+        ? record.pinnedVersion
+        : options.pinned
+          ? (live?.manifest.version ?? record.version)
+          : null;
+    const updated = await repository.update(pluginId, {
+      autoUpdate: options.autoUpdate,
+      pinnedVersion,
+      channel: options.channel,
+    });
+    await applyPin(pluginId, pinnedVersion);
+    return {
+      autoUpdate: Boolean(updated?.autoUpdate),
+      pinnedVersion: updated?.pinnedVersion ?? null,
+      channel: channelOf(updated),
+    };
+  });
+}
+
+/**
+ * Moves every installed plugin to one channel. Going back to stable never
+ * downgrades: a plugin on a beta stays there until a stable release passes it.
+ */
+export function setAllPluginChannels(
+  channel: PluginChannel,
+): Promise<{ changed: string[] }> {
+  return serialized(async () => {
+    const { createCurrentPluginRepository } = await repos();
+    const repository = createCurrentPluginRepository();
+    const changed: string[] = [];
+    for (const record of await repository.listAll()) {
+      if (channelOf(record) === channel) continue;
+      await repository.update(record.id, { channel });
+      changed.push(record.id);
+    }
+    return { changed };
+  });
+}
+
+const MAX_CHANGELOG_BYTES = 512 * 1024;
+
+/** A registry version's Markdown notes, parsed. Undefined when empty. */
+export function readReleaseNotes(
+  markdown: string | undefined,
+): ReleaseNotes | undefined {
+  if (!markdown) return undefined;
+  const { summary, changes } = parseReleaseNotes(markdown);
+  if (!summary && changes.length === 0) return undefined;
+  return { ...(summary ? { summary } : {}), changes };
+}
+
+/**
+ * The releases in an installed plugin's CHANGELOG.md, newest first. Empty when
+ * the plugin ships none or it cannot be read.
+ */
+export async function getPluginChangelog(
+  pluginId: string,
+): Promise<ChangelogRelease[]> {
+  const plugin = getPluginRuntime().loader.get(pluginId);
+  if (!plugin) {
+    throw new PluginManageError("Plugin not found", 404, "NOT_FOUND");
+  }
+  const file = path.join(plugin.dir, "CHANGELOG.md");
+  try {
+    const stat = await fs.promises.stat(file);
+    if (!stat.isFile() || stat.size > MAX_CHANGELOG_BYTES) return [];
+    return parseChangelog(await fs.promises.readFile(file, "utf8")).changelog
+      .releases;
+  } catch {
+    return [];
+  }
+}
+
+async function directorySize(dir: string): Promise<number> {
+  let total = 0;
+  let entries: fs.Dirent[];
+  try {
+    entries = await fs.promises.readdir(dir, { withFileTypes: true });
+  } catch {
+    return 0;
+  }
+  for (const entry of entries) {
+    const full = path.join(dir, entry.name);
+    if (entry.isDirectory()) total += await directorySize(full);
+    else if (entry.isFile()) {
+      total += (await fs.promises.stat(full).catch(() => null))?.size ?? 0;
+    }
+  }
+  return total;
+}
+
+export interface PluginDataSummary {
+  tables: Array<{ name: string; rows: number | null }>;
+  kvKeys: number;
+  settings: { admin: number; user: number; host: number; secret: number };
+  migrations: Array<{ id: string; appliedAt: string | null }>;
+  grants: Array<{
+    capability: string;
+    source: string;
+    grantedAt: string | null;
+  }>;
+  filesBytes: number;
+}
+
+export async function getPluginDataSummary(
+  pluginId: string,
+): Promise<PluginDataSummary> {
+  const {
+    createCurrentPluginRepository,
+    createCurrentPluginStorageRepository,
+    createCurrentPluginSettingsRepository,
+    createCurrentPluginMigrationRepository,
+    createCurrentPluginPermissionGrantRepository,
+  } = await repos();
+  if (!(await createCurrentPluginRepository().findById(pluginId))) {
+    throw new PluginManageError("Plugin not found", 404, "NOT_FOUND");
+  }
+  const { describePluginTables } = await import("./data.js");
+  const knownPluginIds = getPluginRuntime()
+    .loader.list()
+    .map((plugin) => plugin.id);
+
+  const [tables, kvKeys, settings, migrations, grants, filesBytes] =
+    await Promise.all([
+      describePluginTables(pluginId, { knownPluginIds }),
+      createCurrentPluginStorageRepository().countKeys(pluginId),
+      createCurrentPluginSettingsRepository().countByScope(pluginId),
+      createCurrentPluginMigrationRepository().listByPlugin(pluginId),
+      createCurrentPluginPermissionGrantRepository().listByPlugin(pluginId),
+      directorySize(getPluginDataDir(pluginId)),
+    ]);
+
+  return {
+    tables,
+    kvKeys,
+    settings,
+    migrations: migrations.map((row) => ({
+      id: row.migrationId,
+      appliedAt: row.appliedAt ?? null,
+    })),
+    grants: grants.map((grant) => ({
+      capability: grant.capability,
+      source: grant.source,
+      grantedAt: grant.grantedAt ?? null,
+    })),
+    filesBytes,
+  };
+}
+
+/** Clears a plugin's data and leaves it installed but switched off. */
+export function deletePluginData(
+  pluginId: string,
+  userId: string | null,
+): Promise<{ tables: string[]; kvKeys: number; migrations: number }> {
+  return serialized(async () => {
+    const { loader } = getPluginRuntime();
+    const live = loader.get(pluginId);
+    if (live) {
+      await recordState(pluginId, "disabled", null);
+      await deactivatePlugin(pluginId);
+    }
+    const { removePluginData } = await import("./data.js");
+    const removed = await removePluginData(pluginId, {
+      knownPluginIds: loader.list().map((plugin) => plugin.id),
+    });
+    await fs.promises.rm(getPluginDataDir(pluginId), {
+      recursive: true,
+      force: true,
+    });
+    // Grants went with the data. A bundled plugin gets them straight back.
+    if (live) {
+      await registerLoadedPlugins([live]);
+      await grantDeclared(live, userId);
+    }
+    return removed;
+  });
+}
+
+export async function getDeveloperMode(): Promise<boolean> {
+  const { createCurrentSettingsRepository } = await repos();
+  return (
+    (await createCurrentSettingsRepository().get(DEVELOPER_MODE_KEY)) === "true"
+  );
+}
+
+export async function setDeveloperMode(enabled: boolean): Promise<boolean> {
+  const { createCurrentSettingsRepository } = await repos();
+  await createCurrentSettingsRepository().set(
+    DEVELOPER_MODE_KEY,
+    enabled ? "true" : "false",
+  );
+  if (!enabled) await clearUploads();
+  return enabled;
+}
+
+/** 50 MB, the most nginx lets through to /plugins. */
+export const MAX_UPLOAD_BYTES = 50 * 1024 * 1024;
+const UPLOAD_TTL_MS = 30 * 60_000;
+
+interface StagedUpload {
+  file: string;
+  manifest: PluginManifest;
+  expiresAt: number;
+}
+
+const uploads = new Map<string, StagedUpload>();
+
+async function clearUploads(now = Infinity): Promise<void> {
+  for (const [token, upload] of uploads) {
+    if (upload.expiresAt > now) continue;
+    uploads.delete(token);
+    await fs.promises.rm(upload.file, { force: true });
+  }
+}
+
+export interface UploadPreview {
+  token: string;
+  id: string;
+  name: string;
+  version: string;
+  description: string;
+  author: string;
+  features: string[];
+  capabilities: string[];
+  /** The version of an earlier upload this one replaces. */
+  replaces: string | null;
+}
+
+async function assertUploadsAllowed(): Promise<void> {
+  if (!(await getDeveloperMode())) {
+    throw new PluginManageError(
+      "Installing from a file needs developer mode",
+      403,
+      "DEVELOPER_MODE_OFF",
+    );
+  }
+  if (requireSignedPlugins()) {
+    throw new PluginManageError(
+      "TERMIX_REQUIRE_SIGNED_PLUGINS is on, so unsigned files cannot be installed",
+      403,
+      "SIGNED_ONLY",
+    );
+  }
+}
+
+function validateUpload(buffer: Buffer): PluginManifest {
+  let raw: Record<string, unknown>;
+  try {
+    raw = readArtifactManifest(buffer);
+  } catch (error) {
+    throw new PluginManageError(
+      error instanceof Error ? error.message : String(error),
+      400,
+      "INVALID_ARTIFACT",
+    );
+  }
+  const { manifest, errors } = parseManifest(raw);
+  if (!manifest) {
+    throw new PluginManageError(
+      `The manifest is not valid: ${errors.join("; ")}`,
+      400,
+      "INVALID_MANIFEST",
+    );
+  }
+  if (!isApiCompatible(String(manifest.engine.api))) {
+    throw new PluginManageError(
+      `${manifest.id} ${manifest.version} does not run on this version of Termix`,
+      409,
+      "INCOMPATIBLE",
+    );
+  }
+  return manifest;
+}
+
+/** Only another upload of the same id can be replaced from a file. */
+async function assertReplaceable(pluginId: string): Promise<string | null> {
+  const { loader } = getPluginRuntime();
+  if (loader.bundledIds().has(pluginId)) {
+    throw new PluginManageError(
+      `${pluginId} ships with Termix and can only be replaced by a signed release`,
+      409,
+      "BUNDLED_ID",
+    );
+  }
+  const { createCurrentPluginRepository } = await repos();
+  const record = await createCurrentPluginRepository().findById(pluginId);
+  if (!record) return null;
+  if (record.tier !== UNVERIFIED_TIER) {
+    throw new PluginManageError(
+      "A plugin with this id is already installed from another source",
+      409,
+      "ALREADY_INSTALLED",
+    );
+  }
+  return record.version;
+}
+
+/**
+ * Checks an uploaded .tmxplug and holds it until the admin agrees to what
+ * it asks for. Nothing is loaded yet.
+ */
+export async function stageUpload(buffer: Buffer): Promise<UploadPreview> {
+  await assertUploadsAllowed();
+  await clearUploads(Date.now());
+  const manifest = validateUpload(buffer);
+  const replaces = await assertReplaceable(manifest.id);
+
+  const token = crypto.randomBytes(16).toString("hex");
+  const dir = getDownloadsDir();
+  await fs.promises.mkdir(dir, { recursive: true });
+  const file = path.join(dir, `upload-${token}.tmxplug`);
+  await fs.promises.writeFile(file, buffer);
+  uploads.set(token, {
+    file,
+    manifest,
+    expiresAt: Date.now() + UPLOAD_TTL_MS,
+  });
+
+  return {
+    token,
+    id: manifest.id,
+    name: manifest.name,
+    version: manifest.version,
+    description: manifest.description ?? "",
+    author: manifest.author?.name ?? "",
+    features: pluginFeatures(manifest.features),
+    capabilities: [...manifest.capabilities],
+    replaces,
+  };
+}
+
+/** Installs a staged upload. It stays marked unverified for good. */
+export function installUpload(
+  token: string,
+  options: { userId: string | null; capabilities?: string[] },
+): Promise<{ id: string; version: string; state: string }> {
+  return serialized(async () => {
+    await assertUploadsAllowed();
+    const upload = uploads.get(token);
+    if (!upload || upload.expiresAt < Date.now()) {
+      throw new PluginManageError(
+        "The uploaded file has expired, upload it again",
+        404,
+        "UPLOAD_EXPIRED",
+      );
+    }
+    const pluginId = upload.manifest.id;
+    // Read again: the staged file is what gets loaded, not the first look.
+    const manifest = validateUpload(await fs.promises.readFile(upload.file));
+    if (manifest.id !== pluginId) {
+      throw new PluginManageError(
+        "The staged file changed",
+        409,
+        "UPLOAD_CHANGED",
+      );
+    }
+    assertConsent(options.capabilities, manifest.capabilities);
+    await assertReplaceable(pluginId);
+
+    const { createCurrentPluginRepository } = await repos();
+    const repository = createCurrentPluginRepository();
+    const before = await repository.findById(pluginId);
+    const wasEnabled = !before || before.state !== "disabled";
+
+    uploads.delete(token);
+    let plugin: LoadedPlugin;
+    try {
+      plugin = await swapIn(pluginId, { upload: upload.file });
+    } catch (error) {
+      await fs.promises.rm(upload.file, { force: true });
+      const { loader } = getPluginRuntime();
+      if (before && wasEnabled && loader.get(pluginId)) {
+        await startAndRecord(pluginId);
+      }
+      throw new PluginManageError(
+        error instanceof Error ? error.message : String(error),
+        500,
+        "INSTALL_FAILED",
+      );
+    }
+
+    await repository.update(pluginId, {
+      tier: UNVERIFIED_TIER,
+      registryId: null,
+      pinnedVersion: null,
+      autoUpdate: false,
+    });
+    await grantDeclared(plugin, options.userId);
+
+    if (!wasEnabled) {
+      return { id: pluginId, version: manifest.version, state: "stopped" };
+    }
+    const { missing } = dependencyChain(pluginId);
+    if (missing.length > 0) {
+      await recordState(
+        pluginId,
+        "blocked",
+        `requires ${missing.map((id) => `"${id}"`).join(", ")}, which is not installed`,
+      );
+      return { id: pluginId, version: manifest.version, state: "blocked" };
+    }
+    for (const id of (await planStateChange(pluginId, true)).enable) {
+      await startAndRecord(id);
+    }
+    const state = await startAndRecord(pluginId);
+    pluginLogger.warn(
+      `Installed unverified plugin ${pluginId}@${manifest.version} from a file`,
+      { operation: "plugin_install" },
+    );
+    return { id: pluginId, version: manifest.version, state };
+  });
+}
+
+/**
+ * Loads the copy in the bundled folder again after it was rebuilt, for the
+ * dev runner. Running dependents stop first and start again after.
+ */
+export function reloadBundledPlugin(
+  pluginId: string,
+): Promise<{ id: string; version: string; state: string }> {
+  return serialized(async () => {
+    const { loader } = getPluginRuntime();
+    const previous = loader.get(pluginId);
+    if (previous && previous.source !== "bundled") {
+      throw new PluginManageError(
+        `${pluginId} is not loaded from the bundled folder`,
+        409,
+        "NOT_BUNDLED",
+      );
+    }
+    const dependents = previous
+      ? dependentChain(pluginId, await enabledIds()).filter(
+          (id) => loader.get(id)?.state === "active",
+        )
+      : [];
+    for (const id of dependents) await deactivatePlugin(id);
+    await unloadPlugin(pluginId);
+
+    const plugin = await loader.loadBundled(pluginId);
+    await registerLoadedPlugins([plugin]);
+
+    let state = "stopped";
+    if ((await enabledIds()).has(pluginId)) {
+      const { missing } = dependencyChain(pluginId);
+      state = missing.length > 0 ? "blocked" : await startAndRecord(pluginId);
+    }
+    for (const id of [...dependents].reverse()) await startAndRecord(id);
+    return { id: pluginId, version: plugin.manifest.version, state };
+  });
+}
+
+/** Test seam. */
+export function resetUploads(): void {
+  uploads.clear();
+}
diff --git a/src/backend/plugins/manifest.ts b/src/backend/plugins/manifest.ts
index 7b099e694..ee76eb848 100644
--- a/src/backend/plugins/manifest.ts
+++ b/src/backend/plugins/manifest.ts
@@ -1,7 +1,7 @@
 /**
  * Manifest validation, re-exported from the SDK.
  *
- * The contract lives in @termix/plugin-sdk/manifest so the server, the
+ * The contract lives in @termix-ssh/plugin-sdk/manifest so the server, the
  * authoring script and plugin authors all read the same rules. This file used
  * to carry its own copy of the enums and validators, which meant three places
  * had to be edited together and quietly drifted when they were not.
@@ -17,10 +17,15 @@ export {
   SYSTEM_ROLE_NAMES,
   RESERVED_PERMISSION_PREFIXES,
   qualifyPermission,
-} from "@termix/plugin-sdk/manifest";
+  youtubeVideoId,
+  pluginFeatures,
+  pluginDocsUrl,
+  pluginEnvVars,
+} from "@termix-ssh/plugin-sdk/manifest";
 
 export type {
   PluginManifest,
+  PluginEnvVar,
   PluginAuthor,
   PluginEngine,
   PluginContributions,
@@ -36,10 +41,10 @@ export type {
   HostCapabilityContribution,
   ActionContributionKind,
   ParsedManifest,
-} from "@termix/plugin-sdk/manifest";
+} from "@termix-ssh/plugin-sdk/manifest";
 
 export type {
   Capability,
   CapabilityInfo,
   CapabilityRisk,
-} from "@termix/plugin-sdk/capabilities";
+} from "@termix-ssh/plugin-sdk/capabilities";
diff --git a/src/backend/plugins/migrations.ts b/src/backend/plugins/migrations.ts
index 120035662..9b41ea69f 100644
--- a/src/backend/plugins/migrations.ts
+++ b/src/backend/plugins/migrations.ts
@@ -18,12 +18,12 @@ import path from "node:path";
 import { sql } from "drizzle-orm";
 import { pluginLogger } from "../utils/logger.js";
 import type { DatabaseDialect } from "../database/db/dialect.js";
-import { LEGACY_TABLE_OWNERS } from "@termix/plugin-sdk/db";
+import { LEGACY_TABLE_OWNERS } from "@termix-ssh/plugin-sdk/db";
 import {
   collectOwnedIndexes,
   findUnownedTableWrites,
   splitStatements,
-} from "@termix/plugin-sdk/ddl";
+} from "@termix-ssh/plugin-sdk/ddl";
 
 // The splitter is shared with createTestDb in the SDK, so tests apply a
 // migration exactly the way this runner does.
@@ -112,8 +112,9 @@ export function readMigrations(
  *
  * A plugin owns the p_<id>_ namespace and nothing else. Enforced here as well
  * as in the CLI, because a plugin installed from a tarball never ran the CLI.
- * A legacy core table is allowed only for the bundled plugin that adopts it:
- * a user plugin with the same id gets no exemption.
+ * A legacy core table is allowed only for the official plugin that adopts
+ * it, bundled or signed by a trusted key: an unsigned plugin with the same id
+ * gets no exemption.
  */
 export function assertOwnedTables(
   pluginId: string,
diff --git a/src/backend/plugins/notify-hub.ts b/src/backend/plugins/notify-hub.ts
index db3888659..e67ee3d7e 100644
--- a/src/backend/plugins/notify-hub.ts
+++ b/src/backend/plugins/notify-hub.ts
@@ -4,7 +4,7 @@
  * alert reaches nobody.
  */
 
-import type { PluginNotifyHub } from "@termix/plugin-sdk/backend";
+import type { PluginNotifyHub } from "@termix-ssh/plugin-sdk/backend";
 import { hasCapability } from "./permissions.js";
 
 interface HubRegistration {
diff --git a/src/backend/plugins/onboarding.ts b/src/backend/plugins/onboarding.ts
new file mode 100644
index 000000000..5859d5b21
--- /dev/null
+++ b/src/backend/plugins/onboarding.ts
@@ -0,0 +1,242 @@
+/**
+ * The onboarding plugin picker: what a fresh install's first admin sees and
+ * how their choices are applied in one go.
+ */
+
+import { pluginLogger } from "../utils/logger.js";
+import { getPluginRuntime } from "./index.js";
+import { onboardingDefaults } from "./bundled-index.js";
+import {
+  isLinkedDesktop,
+  serialized,
+  setPluginStateUnlocked,
+  uninstallPluginUnlocked,
+} from "./manage.js";
+import {
+  applyOrder,
+  resolvePluginChoices,
+  type ChoiceAdjustment,
+  type ChoicePlugin,
+  type PluginChoice,
+} from "../../types/plugin-onboarding.js";
+
+/**
+ * Set until an admin confirms the picker: "fresh" on a new install, "upgrade"
+ * on one that existed before the picker (2.9 and earlier).
+ */
+export const PLUGIN_SETUP_PENDING_KEY = "onboarding_plugin_setup_pending";
+/** Set once the picker has been offered, so it is offered only once. */
+export const PLUGIN_SETUP_OFFERED_KEY = "onboarding_plugin_setup_offered";
+
+export type PluginSetupReason = "fresh" | "upgrade";
+
+export interface OnboardingPluginInfo {
+  id: string;
+  name: string;
+  description: string;
+  icon: string | null;
+  category: string;
+  version: string;
+  source: "bundled" | "user";
+  state: string;
+  dependencies: string[];
+  recommended: boolean;
+  consent: boolean;
+}
+
+export interface OnboardingPluginList {
+  pending: boolean;
+  /** Why the picker is pending. On an upgrade it starts from what is on. */
+  reason: PluginSetupReason | null;
+  managedByLinkedServer: boolean;
+  plugins: OnboardingPluginInfo[];
+}
+
+export interface OnboardingApplyResult {
+  resolved: Record<string, PluginChoice>;
+  adjustments: ChoiceAdjustment[];
+  enabled: string[];
+  disabled: string[];
+  removed: string[];
+  failed: { id: string; error: string; code?: string }[];
+}
+
+async function repos() {
+  return import("../database/repositories/factory.js");
+}
+
+export async function pluginSetupReason(): Promise<PluginSetupReason | null> {
+  const { createCurrentSettingsRepository } = await repos();
+  const value = await createCurrentSettingsRepository().get(
+    PLUGIN_SETUP_PENDING_KEY,
+  );
+  if (value === "fresh" || value === "1") return "fresh";
+  if (value === "upgrade") return "upgrade";
+  return null;
+}
+
+export async function isPluginSetupPending(): Promise<boolean> {
+  return (await pluginSetupReason()) !== null;
+}
+
+async function clearPluginSetupPending(): Promise<void> {
+  const { createCurrentSettingsRepository } = await repos();
+  const settings = createCurrentSettingsRepository();
+  await settings.delete(PLUGIN_SETUP_PENDING_KEY);
+  await settings.set(PLUGIN_SETUP_OFFERED_KEY, "1");
+}
+
+/**
+ * Called once at boot. Every install is offered the picker once: a fresh
+ * one on its first admin's first run, an upgraded one (which never saw it)
+ * the next time an admin signs in.
+ */
+export async function offerPluginSetup(fresh: boolean): Promise<void> {
+  const { createCurrentSettingsRepository } = await repos();
+  const settings = createCurrentSettingsRepository();
+  if (await settings.get(PLUGIN_SETUP_OFFERED_KEY)) return;
+  await settings.set(PLUGIN_SETUP_PENDING_KEY, fresh ? "fresh" : "upgrade");
+  await settings.set(PLUGIN_SETUP_OFFERED_KEY, "1");
+}
+
+function choicePlugins(): ChoicePlugin[] {
+  return getPluginRuntime()
+    .loader.list()
+    .map((plugin) => ({
+      id: plugin.id,
+      dependencies: Object.keys(plugin.manifest.dependencies ?? {}),
+    }));
+}
+
+export async function describeOnboardingPlugins(): Promise<OnboardingPluginList> {
+  const { createCurrentPluginRepository } = await repos();
+  const states = new Map(
+    (await createCurrentPluginRepository().listAll()).map((record) => [
+      record.id,
+      record.state,
+    ]),
+  );
+  const plugins = getPluginRuntime()
+    .loader.list()
+    .map((plugin): OnboardingPluginInfo => {
+      const defaults =
+        plugin.source === "bundled"
+          ? onboardingDefaults(plugin.id)
+          : { recommended: false, consent: false };
+      return {
+        id: plugin.id,
+        name: plugin.manifest.name,
+        description: plugin.manifest.description,
+        icon: plugin.manifest.icon ?? null,
+        category: plugin.manifest.category,
+        version: plugin.manifest.version,
+        source: plugin.source,
+        state: states.get(plugin.id) ?? "disabled",
+        dependencies: Object.keys(plugin.manifest.dependencies ?? {}),
+        ...defaults,
+      };
+    })
+    .sort((a, b) => a.name.localeCompare(b.name));
+
+  const reason = await pluginSetupReason();
+  return {
+    pending: reason !== null,
+    reason,
+    managedByLinkedServer: await isLinkedDesktop(),
+    plugins,
+  };
+}
+
+/**
+ * Applies the picker in one serialized pass: enable (dependencies first),
+ * then disable and remove (dependents first). One plugin failing does not
+ * stop the rest. Ids that are not installed are ignored.
+ */
+export function applyOnboardingChoices(
+  choices: Record<string, PluginChoice>,
+  options: { dryRun?: boolean } = {},
+): Promise<OnboardingApplyResult> {
+  return serialized(async () => {
+    const plugins = choicePlugins();
+    const installed = new Set(plugins.map((plugin) => plugin.id));
+    const wanted: Record<string, PluginChoice> = {};
+    for (const [id, choice] of Object.entries(choices)) {
+      if (installed.has(id)) wanted[id] = choice;
+    }
+    const { choices: resolved, adjustments } = resolvePluginChoices(
+      plugins,
+      wanted,
+    );
+
+    const result: OnboardingApplyResult = {
+      resolved,
+      adjustments,
+      enabled: [],
+      disabled: [],
+      removed: [],
+      failed: [],
+    };
+
+    const { createCurrentPluginRepository } = await repos();
+    const states = new Map(
+      (await createCurrentPluginRepository().listAll()).map((record) => [
+        record.id,
+        record.state,
+      ]),
+    );
+    const order = applyOrder(plugins, resolved);
+    const enable = order.enable.filter((id) => states.get(id) !== "enabled");
+    const disable = order.disable.filter((id) => states.get(id) === "enabled");
+
+    if (options.dryRun) {
+      return {
+        ...result,
+        enabled: enable,
+        disabled: disable,
+        removed: order.remove,
+      };
+    }
+
+    const attempt = async (
+      id: string,
+      run: () => Promise<unknown>,
+      done: string[],
+    ) => {
+      try {
+        const outcome = (await run()) as { state?: string } | undefined;
+        if (outcome?.state === "failed" || outcome?.state === "blocked") {
+          result.failed.push({ id, error: outcome.state });
+          return;
+        }
+        done.push(id);
+      } catch (error) {
+        result.failed.push({
+          id,
+          error: error instanceof Error ? error.message : String(error),
+          code: (error as { code?: string })?.code,
+        });
+      }
+    };
+
+    for (const id of enable) {
+      await attempt(id, () => setPluginStateUnlocked(id, true), result.enabled);
+    }
+    for (const id of disable) {
+      await attempt(
+        id,
+        () => setPluginStateUnlocked(id, false),
+        result.disabled,
+      );
+    }
+    for (const id of order.remove) {
+      await attempt(id, () => uninstallPluginUnlocked(id), result.removed);
+    }
+
+    await clearPluginSetupPending();
+    pluginLogger.info(
+      `Onboarding plugin choices applied: ${result.enabled.length} enabled, ${result.disabled.length} disabled, ${result.removed.length} removed, ${result.failed.length} failed`,
+      { operation: "plugin_onboarding" },
+    );
+    return result;
+  });
+}
diff --git a/src/backend/plugins/paths.ts b/src/backend/plugins/paths.ts
index 5b63a2bdf..2ebc038cd 100644
--- a/src/backend/plugins/paths.ts
+++ b/src/backend/plugins/paths.ts
@@ -1,10 +1,9 @@
-import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import {
   DEFAULT_BACKEND_ENTRY,
   type PluginManifest,
-} from "@termix/plugin-sdk/manifest";
+} from "@termix-ssh/plugin-sdk/manifest";
 
 /**
  * Where user-installed plugins live. Resolved per call rather than captured at
@@ -43,29 +42,21 @@ export function getUnpackedPluginsDir(): string {
  * plugin is part of the install and must not be deletable or shadowable by
  * whatever happens to be in the data directory.
  *
- * Resolved from this module's location rather than cwd, because the build
- * emits to dist/backend/backend/plugins/ and the bundled plugins sit beside
- * dist/backend.
+ * Resolved from this module's location rather than cwd. The build emits to
+ * dist/backend/backend/plugins/ with the bundled plugins beside dist/backend,
+ * and a run from source reads the same dist/plugins.
  */
 export function getBundledPluginsDir(): string {
   const override = process.env.TERMIX_BUNDLED_PLUGINS_DIR;
   if (override) return override;
 
   const here = path.dirname(fileURLToPath(import.meta.url));
-
-  const candidates = [
-    // Built server: dist/backend/backend/plugins -> dist/plugins
-    // Source tree:  src/backend/plugins          -> plugins
-    // Both are three levels up, which is why there is one entry, not two.
-    path.resolve(here, "../../../plugins"),
-    // Built server invoked from a nested layout: .../dist/backend/backend/plugins
-    path.resolve(here, "../../../../plugins"),
-  ];
-
-  for (const candidate of candidates) {
-    if (fs.existsSync(candidate)) return candidate;
-  }
-  return candidates[0];
+  // Built: dist/backend/backend/plugins -> dist/plugins
+  // Source (vitest, tsx): src/backend/plugins -> dist/plugins
+  const fromSource = path.basename(path.resolve(here, "../..")) === "src";
+  return fromSource
+    ? path.resolve(here, "../../../dist/plugins")
+    : path.resolve(here, "../../../plugins");
 }
 
 /** The backend entry, from the manifest's own `backend` field. */
diff --git a/src/backend/plugins/permissions.ts b/src/backend/plugins/permissions.ts
index e41a72679..f0bb8b420 100644
--- a/src/backend/plugins/permissions.ts
+++ b/src/backend/plugins/permissions.ts
@@ -16,7 +16,7 @@
  */
 
 import { createCurrentPluginPermissionGrantRepository } from "../database/repositories/factory.js";
-import { PluginCapabilityError } from "@termix/plugin-sdk/backend";
+import { PluginCapabilityError } from "@termix-ssh/plugin-sdk/backend";
 import { getActor } from "./actor.js";
 
 const cache = new Map<string, Set<string>>();
diff --git a/src/backend/plugins/registry-index.ts b/src/backend/plugins/registry-index.ts
new file mode 100644
index 000000000..e836c128d
--- /dev/null
+++ b/src/backend/plugins/registry-index.ts
@@ -0,0 +1,456 @@
+/**
+ * The official plugin registry: fetching its index and downloading a release.
+ *
+ * The index is a plain JSON file in Termix-SSH/Termix-Registry. Nothing in it
+ * is trusted on its own: every download is checked against the sha256 and
+ * Ed25519 signature listed for it, and the signature must come from a key
+ * pinned in trust.ts. A tampered index can at most point at a file that then
+ * fails the check.
+ */
+
+import crypto from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import semver from "semver";
+import {
+  pluginDocsUrl,
+  pluginFeatures,
+  SUPPORTED_PLUGIN_API_VERSION,
+  youtubeVideoId,
+} from "@termix-ssh/plugin-sdk/manifest";
+import { safeOutboundFetch } from "../utils/safe-outbound-fetch.js";
+import { pluginLogger } from "../utils/logger.js";
+import { verifyPluginArtifact } from "./trust.js";
+import { readArtifactManifest, sameCapabilities } from "./artifact-manifest.js";
+import { getPluginsDir } from "./paths.js";
+
+export const OFFICIAL_REGISTRY_ID = "official";
+export const OFFICIAL_REGISTRY_URL =
+  "https://raw.githubusercontent.com/Termix-SSH/Termix-Registry/main/official/index.json";
+
+const CACHE_MS = 15 * 60_000;
+const MAX_INDEX_BYTES = 5 * 1024 * 1024;
+const MAX_ARTIFACT_BYTES = 200 * 1024 * 1024;
+const MAX_REDIRECTS = 5;
+const MAX_NOTES_LENGTH = 20_000;
+const ID_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
+
+export interface RegistryVersion {
+  version: string;
+  api: string;
+  url: string;
+  sha256: string;
+  signature: string;
+  size: number;
+  capabilities: string[];
+  releaseNotesUrl?: string;
+  /** This version's CHANGELOG.md section, as Markdown. */
+  notes?: string;
+  publishedAt?: string;
+  /** Listed under the plugin's prereleases: a beta. */
+  prerelease?: boolean;
+}
+
+export type PluginChannel = "stable" | "beta";
+
+export function parsePluginChannel(value: unknown): PluginChannel | null {
+  return value === "stable" || value === "beta" ? value : null;
+}
+
+export interface RegistryPlugin {
+  id: string;
+  name: string;
+  description: string;
+  author: string;
+  category: string;
+  repository?: string;
+  icon?: string;
+  /** Only ever a YouTube video id, never a link. */
+  videoId?: string;
+  features: string[];
+  /** https docs link from the index. */
+  docs?: string;
+  /** Stable releases, newest first. */
+  versions: RegistryVersion[];
+  /**
+   * Betas newer than the newest stable release, newest first. A separate
+   * list so cores from before channels never offer one.
+   */
+  prereleases: RegistryVersion[];
+}
+
+export interface RegistryIndex {
+  registry: string;
+  name: string;
+  updatedAt?: string;
+  plugins: RegistryPlugin[];
+}
+
+export function getRegistryUrl(): string {
+  return process.env.TERMIX_PLUGIN_REGISTRY_URL || OFFICIAL_REGISTRY_URL;
+}
+
+function asString(value: unknown): string | undefined {
+  return typeof value === "string" ? value : undefined;
+}
+
+function parseVersion(raw: unknown): RegistryVersion | null {
+  if (!raw || typeof raw !== "object") return null;
+  const entry = raw as Record<string, unknown>;
+  const version = asString(entry.version);
+  const url = asString(entry.url);
+  const sha256 = asString(entry.sha256);
+  const signature = asString(entry.signature);
+  if (!version || !semver.valid(version) || !url || !sha256 || !signature) {
+    return null;
+  }
+  if (!/^[a-f0-9]{64}$/i.test(sha256)) return null;
+  try {
+    if (new URL(url).protocol !== "https:") return null;
+  } catch {
+    return null;
+  }
+  return {
+    version,
+    api: asString(entry.api) ?? "",
+    url,
+    sha256: sha256.toLowerCase(),
+    signature,
+    size: typeof entry.size === "number" ? entry.size : 0,
+    capabilities: Array.isArray(entry.capabilities)
+      ? entry.capabilities.filter((c): c is string => typeof c === "string")
+      : [],
+    releaseNotesUrl: asString(entry.releaseNotesUrl),
+    notes: asString(entry.notes)?.slice(0, MAX_NOTES_LENGTH),
+    publishedAt: asString(entry.publishedAt),
+  };
+}
+
+/** Validates a fetched index. Malformed entries are dropped, not fatal. */
+export function parseRegistryIndex(raw: unknown): RegistryIndex {
+  if (!raw || typeof raw !== "object") {
+    throw new Error("registry index is not an object");
+  }
+  const index = raw as Record<string, unknown>;
+  if (!Array.isArray(index.plugins)) {
+    throw new Error("registry index has no plugins list");
+  }
+
+  const plugins: RegistryPlugin[] = [];
+  for (const item of index.plugins) {
+    if (!item || typeof item !== "object") continue;
+    const entry = item as Record<string, unknown>;
+    const id = asString(entry.id);
+    if (!id || !ID_PATTERN.test(id)) continue;
+    const parseList = (list: unknown) =>
+      (Array.isArray(list) ? list : [])
+        .map(parseVersion)
+        .filter((v): v is RegistryVersion => v !== null)
+        .sort((a, b) => semver.rcompare(a.version, b.version));
+    const versions = parseList(entry.versions).filter(
+      (v) => !semver.prerelease(v.version),
+    );
+    const prereleases = parseList(entry.prereleases)
+      .filter((v) => semver.prerelease(v.version))
+      .map((v) => ({ ...v, prerelease: true }));
+    if (versions.length === 0 && prereleases.length === 0) continue;
+    plugins.push({
+      id,
+      name: asString(entry.name) ?? id,
+      description: asString(entry.description) ?? "",
+      author: asString(entry.author) ?? "",
+      category: asString(entry.category) ?? "",
+      repository: asString(entry.repository),
+      icon: asString(entry.icon),
+      videoId: youtubeVideoId(entry.video) ?? undefined,
+      features: pluginFeatures(entry.features),
+      docs: pluginDocsUrl(entry.docs) ?? undefined,
+      versions,
+      prereleases,
+    });
+  }
+
+  return {
+    registry: asString(index.registry) ?? OFFICIAL_REGISTRY_ID,
+    name: asString(index.name) ?? "",
+    updatedAt: asString(index.updatedAt),
+    plugins,
+  };
+}
+
+/** Whether this build can run a release built against `api`. */
+export function isApiCompatible(api: string): boolean {
+  const major = semver.coerce(api)?.major;
+  return major !== undefined && String(major) === SUPPORTED_PLUGIN_API_VERSION;
+}
+
+/** Follows redirects by hand so each hop still gets the outbound checks. */
+async function fetchFollowing(url: string): Promise<Response> {
+  let current = url;
+  for (let hop = 0; hop <= MAX_REDIRECTS; hop++) {
+    const response = await safeOutboundFetch(current, {
+      method: "GET",
+      redirect: "manual",
+      headers: { "User-Agent": "Termix" },
+    });
+    if (response.status >= 300 && response.status < 400) {
+      const location = response.headers.get("location");
+      if (!location) throw new Error(`redirect without a location: ${current}`);
+      current = new URL(location, current).toString();
+      continue;
+    }
+    if (!response.ok) {
+      throw new Error(`${current} answered ${response.status}`);
+    }
+    return response;
+  }
+  throw new Error(`too many redirects fetching ${url}`);
+}
+
+async function readLimited(response: Response, limit: number): Promise<Buffer> {
+  const declared = Number(response.headers.get("content-length") ?? 0);
+  if (declared > limit) throw new Error("download is larger than allowed");
+  if (!response.body) return Buffer.alloc(0);
+
+  const chunks: Buffer[] = [];
+  let total = 0;
+  const reader = response.body.getReader();
+  for (;;) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    total += value.byteLength;
+    if (total > limit) {
+      await reader.cancel().catch(() => {});
+      throw new Error("download is larger than allowed");
+    }
+    chunks.push(Buffer.from(value));
+  }
+  return Buffer.concat(chunks);
+}
+
+let cache: { index: RegistryIndex; at: number; hash: string } | null = null;
+let inflight: Promise<RegistryIndex> | null = null;
+
+export interface RegistryStatus {
+  url: string;
+  lastCheckedAt: string | null;
+  error: string | null;
+}
+
+let lastError: string | null = null;
+
+export function getRegistryStatus(): RegistryStatus {
+  return {
+    url: getRegistryUrl(),
+    lastCheckedAt: cache ? new Date(cache.at).toISOString() : null,
+    error: lastError,
+  };
+}
+
+export async function fetchRegistryIndex(
+  options: { force?: boolean } = {},
+): Promise<RegistryIndex> {
+  if (!options.force && cache && Date.now() - cache.at < CACHE_MS) {
+    return cache.index;
+  }
+  if (inflight) return inflight;
+
+  inflight = (async () => {
+    try {
+      const response = await fetchFollowing(getRegistryUrl());
+      const body = await readLimited(response, MAX_INDEX_BYTES);
+      const index = parseRegistryIndex(JSON.parse(body.toString("utf8")));
+      cache = {
+        index,
+        at: Date.now(),
+        hash: crypto.createHash("sha256").update(body).digest("hex"),
+      };
+      lastError = null;
+      return index;
+    } catch (error) {
+      lastError = error instanceof Error ? error.message : String(error);
+      // A stale index beats none when the registry is briefly unreachable.
+      if (cache) {
+        pluginLogger.warn(`Plugin registry check failed: ${lastError}`, {
+          operation: "plugin_registry",
+        });
+        return cache.index;
+      }
+      throw error;
+    } finally {
+      inflight = null;
+    }
+  })();
+  return inflight;
+}
+
+export interface RegistryStats {
+  plugins: Map<string, { downloads: number; activeInstalls: number | null }>;
+}
+
+/** stats.json sits next to index.json and is rebuilt daily by the registry. */
+export function getStatsUrl(): string | null {
+  if (process.env.TERMIX_PLUGIN_STATS_URL) {
+    return process.env.TERMIX_PLUGIN_STATS_URL;
+  }
+  const url = getRegistryUrl();
+  return /\/index\.json$/.test(url)
+    ? url.replace(/\/index\.json$/, "/stats.json")
+    : null;
+}
+
+function asCount(value: unknown): number | null {
+  return typeof value === "number" && Number.isFinite(value) && value >= 0
+    ? Math.floor(value)
+    : null;
+}
+
+export function parseRegistryStats(raw: unknown): RegistryStats {
+  const plugins = new Map<
+    string,
+    { downloads: number; activeInstalls: number | null }
+  >();
+  const entries = (raw as { plugins?: unknown } | null)?.plugins;
+  if (!entries || typeof entries !== "object" || Array.isArray(entries)) {
+    return { plugins };
+  }
+  for (const [id, value] of Object.entries(entries)) {
+    if (!ID_PATTERN.test(id) || !value || typeof value !== "object") continue;
+    const entry = value as Record<string, unknown>;
+    plugins.set(id, {
+      downloads: asCount(entry.downloads) ?? 0,
+      activeInstalls: asCount(entry.activeInstalls),
+    });
+  }
+  return { plugins };
+}
+
+export async function fetchRegistryStats(): Promise<RegistryStats | null> {
+  const url = getStatsUrl();
+  if (!url) return null;
+  const response = await fetchFollowing(url);
+  const body = await readLimited(response, MAX_INDEX_BYTES);
+  return parseRegistryStats(JSON.parse(body.toString("utf8")));
+}
+
+/** Test seam. */
+export function resetRegistryCache(): void {
+  cache = null;
+  inflight = null;
+  lastError = null;
+}
+
+/** Every release a channel may install, newest first. */
+export function channelReleases(
+  plugin: RegistryPlugin,
+  channel: PluginChannel,
+): RegistryVersion[] {
+  if (channel === "stable") return plugin.versions;
+  return [...plugin.prereleases, ...plugin.versions].sort((a, b) =>
+    semver.rcompare(a.version, b.version),
+  );
+}
+
+/** The newest release on a channel this build can run. */
+export function latestOnChannel(
+  plugin: RegistryPlugin,
+  channel: PluginChannel,
+): RegistryVersion | null {
+  return (
+    channelReleases(plugin, channel).find((entry) =>
+      isApiCompatible(entry.api),
+    ) ?? null
+  );
+}
+
+export function findRelease(
+  index: RegistryIndex,
+  pluginId: string,
+  version?: string,
+  channel: PluginChannel = "stable",
+): { plugin: RegistryPlugin; release: RegistryVersion } | null {
+  const plugin = index.plugins.find((entry) => entry.id === pluginId);
+  if (!plugin) return null;
+  const release = version
+    ? channelReleases(plugin, "beta").find((entry) => entry.version === version)
+    : latestOnChannel(plugin, channel);
+  if (!release) return null;
+  return { plugin, release };
+}
+
+/**
+ * The signed file is the truth and the index only describes it, so the
+ * consent the admin gave (built from the index) must match what the packed
+ * manifest asks for.
+ */
+export function assertArtifactMatches(
+  pluginId: string,
+  release: RegistryVersion,
+  manifest: Record<string, unknown>,
+): void {
+  const where = `${pluginId} ${release.version}`;
+  if (manifest.id !== pluginId) {
+    throw new Error(`${where}: the archive is for "${String(manifest.id)}"`);
+  }
+  if (manifest.version !== release.version) {
+    throw new Error(
+      `${where}: the archive is version ${String(manifest.version)}`,
+    );
+  }
+  const declared = Array.isArray(manifest.capabilities)
+    ? manifest.capabilities.filter((c): c is string => typeof c === "string")
+    : [];
+  if (!sameCapabilities(declared, release.capabilities)) {
+    throw new Error(
+      `${where}: the archive asks for different capabilities than the registry lists`,
+    );
+  }
+}
+
+/**
+ * Downloads a release, verifies it, and leaves it in a staging folder the
+ * loader never scans. The caller moves it into place.
+ */
+export async function downloadRelease(
+  pluginId: string,
+  release: RegistryVersion,
+): Promise<{ file: string; signatureFile: string }> {
+  if (!isApiCompatible(release.api)) {
+    throw new Error(
+      `${pluginId} ${release.version} needs plugin API ${release.api}, this build runs ${SUPPORTED_PLUGIN_API_VERSION}`,
+    );
+  }
+
+  const limit =
+    release.size > 0 ? release.size + 1024 * 1024 : MAX_ARTIFACT_BYTES;
+  const response = await fetchFollowing(release.url);
+  const buffer = await readLimited(
+    response,
+    Math.min(limit, MAX_ARTIFACT_BYTES),
+  );
+
+  const verified = verifyPluginArtifact(
+    buffer,
+    release.sha256,
+    release.signature,
+  );
+  if (verified.ok === false) {
+    throw new Error(`${pluginId} ${release.version}: ${verified.reason}`);
+  }
+  assertArtifactMatches(pluginId, release, readArtifactManifest(buffer));
+
+  const staging = getDownloadsDir();
+  await fs.promises.mkdir(staging, { recursive: true });
+  const base = path.join(
+    staging,
+    `${pluginId}-${release.version}-${crypto.randomBytes(4).toString("hex")}.tmxplug`,
+  );
+  await fs.promises.writeFile(base, buffer);
+  await fs.promises.writeFile(`${base}.sig`, release.signature.trim());
+  return { file: base, signatureFile: `${base}.sig` };
+}
+
+/** A dot folder inside the plugins dir, which the loader's scan skips. */
+export function getDownloadsDir(): string {
+  return path.join(getPluginsDir(), ".downloads");
+}
diff --git a/src/backend/plugins/schedule.ts b/src/backend/plugins/schedule.ts
index 9f9a8d4b2..f7aa90f12 100644
--- a/src/backend/plugins/schedule.ts
+++ b/src/backend/plugins/schedule.ts
@@ -3,7 +3,7 @@
  * bag, so deactivate clears every one of them.
  */
 
-import type { PluginSchedule } from "@termix/plugin-sdk/backend";
+import type { PluginSchedule } from "@termix-ssh/plugin-sdk/backend";
 import type { DisposableBag } from "./disposables.js";
 
 type Log = (message: string, error: unknown) => void;
diff --git a/src/backend/plugins/service-registry.ts b/src/backend/plugins/service-registry.ts
index edb45d446..0f2811577 100644
--- a/src/backend/plugins/service-registry.ts
+++ b/src/backend/plugins/service-registry.ts
@@ -229,7 +229,12 @@ export function getServiceImplementation<T extends object>(
 ): T | undefined {
   const registration = lookup(service, name);
   if (!registration) return undefined;
-  if (!semver.satisfies(registration.version, versionRange)) return undefined;
+  if (
+    !semver.satisfies(registration.version, versionRange, {
+      includePrerelease: true,
+    })
+  )
+    return undefined;
   return registration.implementation as T;
 }
 
@@ -267,7 +272,9 @@ export function resolveRequirements(
     const providers = [...(services.get(requirement.service)?.values() ?? [])];
     const registration =
       providers.find((candidate) =>
-        semver.satisfies(candidate.version, requirement.versionRange),
+        semver.satisfies(candidate.version, requirement.versionRange, {
+          includePrerelease: true,
+        }),
       ) ?? providers[0];
 
     if (!registration) {
@@ -280,7 +287,11 @@ export function resolveRequirements(
       continue;
     }
 
-    if (!semver.satisfies(registration.version, requirement.versionRange)) {
+    if (
+      !semver.satisfies(registration.version, requirement.versionRange, {
+        includePrerelease: true,
+      })
+    ) {
       recordUnsatisfied(
         requirement,
         `requires service "${requirement.service}" ${requirement.versionRange}, but ${registration.pluginId} provides ${registration.version}`,
diff --git a/src/backend/plugins/settings.ts b/src/backend/plugins/settings.ts
index 650d2be34..f55c523e3 100644
--- a/src/backend/plugins/settings.ts
+++ b/src/backend/plugins/settings.ts
@@ -14,12 +14,12 @@
 import type {
   PluginManifest,
   PluginSettingsField,
-} from "@termix/plugin-sdk/manifest";
+} from "@termix-ssh/plugin-sdk/manifest";
 import {
   coerceSettingValue,
   isRedactedSecret,
   validateSettingValue,
-} from "@termix/plugin-sdk/settings";
+} from "@termix-ssh/plugin-sdk/settings";
 import {
   createCurrentHostRepository,
   createCurrentPluginSettingsRepository,
diff --git a/src/backend/plugins/sync-registry.ts b/src/backend/plugins/sync-registry.ts
index 247d430b9..778bcd908 100644
--- a/src/backend/plugins/sync-registry.ts
+++ b/src/backend/plugins/sync-registry.ts
@@ -14,7 +14,7 @@
 import type {
   SyncEntityRegistration,
   SyncRow,
-} from "@termix/plugin-sdk/backend";
+} from "@termix-ssh/plugin-sdk/backend";
 
 /** Core-only extras a plugin registration cannot set. */
 export interface CoreSyncEntityOptions {
diff --git a/src/backend/plugins/table-builder.ts b/src/backend/plugins/table-builder.ts
index e4d4d5605..b39b32e97 100644
--- a/src/backend/plugins/table-builder.ts
+++ b/src/backend/plugins/table-builder.ts
@@ -6,11 +6,11 @@
  * core keeps one import site.
  */
 
-export { buildTable } from "@termix/plugin-sdk/table-builder";
+export { buildTable } from "@termix-ssh/plugin-sdk/table-builder";
 export {
   createTableSql,
   adoptTableSql,
   dropTableSql,
   addColumnSql,
   keyedColumns,
-} from "@termix/plugin-sdk/ddl";
+} from "@termix-ssh/plugin-sdk/ddl";
diff --git a/src/backend/plugins/trust.ts b/src/backend/plugins/trust.ts
index 8a97e4f1e..7b24d116a 100644
--- a/src/backend/plugins/trust.ts
+++ b/src/backend/plugins/trust.ts
@@ -20,7 +20,13 @@ export interface TrustedPluginKey {
  *
  * Add a key with `termix-plugin keygen` (see the Termix-Registry README).
  */
-export const TRUSTED_PLUGIN_KEYS: readonly TrustedPluginKey[] = [];
+export const TRUSTED_PLUGIN_KEYS: readonly TrustedPluginKey[] = [
+  {
+    id: "ec40e29bcc4986b2",
+    publicKey: "rF6ouWTnuLgnZi7yemr+yhZmMxvNMvgro1Mf05IkSGo=",
+    addedIn: "26.10.0",
+  },
+];
 
 export type ArtifactVerification =
   { ok: true; keyId: string } | { ok: false; reason: string };
diff --git a/src/backend/plugins/user-data.ts b/src/backend/plugins/user-data.ts
index d6a333758..4807deb07 100644
--- a/src/backend/plugins/user-data.ts
+++ b/src/backend/plugins/user-data.ts
@@ -7,9 +7,9 @@
  */
 
 import { sql } from "drizzle-orm";
-import { columnName, createTableSql } from "@termix/plugin-sdk/ddl";
-import { prefixedTableName } from "@termix/plugin-sdk/db";
-import type { PluginTableDefinition } from "@termix/plugin-sdk/db";
+import { columnName, createTableSql } from "@termix-ssh/plugin-sdk/ddl";
+import { prefixedTableName } from "@termix-ssh/plugin-sdk/db";
+import type { PluginTableDefinition } from "@termix-ssh/plugin-sdk/db";
 import {
   runStatement,
   selectRows,
@@ -29,6 +29,8 @@ export interface UserOwnedTable {
   hostColumns: string[];
   /** Columns that travel, as SQL names. The primary key and secrets do not. */
   columns: string[];
+  /** The owner column is the primary key: one row per user. */
+  userIsKey: boolean;
   definition: PluginTableDefinition;
 }
 
@@ -50,14 +52,17 @@ export function listUserOwnedTables(): UserOwnedTable[] {
       hostColumns: entries
         .filter(([, column]) => column.type === "refHost")
         .map(([property, column]) => columnName(property, column)),
+      // The owner column always travels, even as the key; import rewrites it.
       columns: entries
         .filter(
           ([, column]) =>
-            column.type !== "id" &&
-            !column.primaryKey &&
-            column.type !== "encryptedText",
+            column === user[1] ||
+            (column.type !== "id" &&
+              !column.primaryKey &&
+              column.type !== "encryptedText"),
         )
         .map(([property, column]) => columnName(property, column)),
+      userIsKey: !!user[1].primaryKey,
       definition,
     });
   }
@@ -239,13 +244,15 @@ export async function importUserPluginRows(
           summary.skipped++;
           continue;
         }
+        const matchOn = owned.userIsKey ? [owned.userColumn] : columns;
         const existing = await selectRows(
           sql`SELECT 1 FROM ${sql.identifier(owned.table)} WHERE ${sql.join(
-            columns.map((column, index) =>
-              values[index] === null
+            matchOn.map((column) => {
+              const value = values[columns.indexOf(column)];
+              return value === null
                 ? sql`${sql.identifier(column)} IS NULL`
-                : sql`${sql.identifier(column)} = ${values[index]}`,
-            ),
+                : sql`${sql.identifier(column)} = ${value}`;
+            }),
             sql` AND `,
           )} LIMIT 1`,
         );
diff --git a/src/backend/plugins/ws.ts b/src/backend/plugins/ws.ts
index d431421d1..c69eecd85 100644
--- a/src/backend/plugins/ws.ts
+++ b/src/backend/plugins/ws.ts
@@ -25,10 +25,13 @@ import { WebSocketServer, type WebSocket } from "ws";
 import type {
   PluginWebSocketHandler,
   PluginWebSocketOptions,
-} from "@termix/plugin-sdk/backend";
+} from "@termix-ssh/plugin-sdk/backend";
 import { pluginLogger } from "../utils/logger.js";
 import { recordConflict } from "./conflicts.js";
-import { extractWebSocketToken } from "../utils/ws-auth.js";
+import {
+  extractWebSocketToken,
+  isCookieOriginAllowed,
+} from "../utils/ws-auth.js";
 import { runAsActor } from "./actor.js";
 import { isPluginInstalled } from "./http.js";
 
@@ -110,7 +113,9 @@ async function verifyToken(request: IncomingMessage): Promise<string | null> {
   if (!token) return null;
   try {
     const { AuthManager } = await import("../utils/auth-manager.js");
-    const payload = await AuthManager.getInstance().verifyJWTToken(token);
+    const payload = await AuthManager.getInstance().verifyJWTToken(token, {
+      allowSocketTicket: true,
+    });
     if (!payload || payload.pendingTOTP) return null;
     return payload.userId ?? null;
   } catch {
@@ -163,6 +168,12 @@ async function handlePluginUpgrade(
     return true;
   }
 
+  // A page on another site gets the browser's cookies attached for free.
+  // Core already ignores them for auth; plugin code must not see them either.
+  if (request.headers.cookie && !isCookieOriginAllowed(request)) {
+    delete request.headers.cookie;
+  }
+
   let userId = "";
   if (!route.options.public) {
     const resolved = await verifyToken(request);
@@ -362,10 +373,6 @@ function disposeRoute(routeKey: string, pluginId: string, path: string): void {
   });
 }
 
-export function getRegisteredWsRoutes(): string[] {
-  return [...routes.keys()];
-}
-
 /** The socket paths a plugin serves without core's login check. */
 export function getPluginPublicWsRoutes(pluginId: string): string[] {
   return [...routes.values()]
diff --git a/src/backend/starter.ts b/src/backend/starter.ts
index 80981ab6a..70ab554aa 100644
--- a/src/backend/starter.ts
+++ b/src/backend/starter.ts
@@ -58,15 +58,6 @@ async function provisionLocalDesktopUserIfNeeded(): Promise<void> {
     id,
     username: "local",
     passwordHash: "",
-    isOidc: false,
-    clientId: "",
-    clientSecret: "",
-    issuerUrl: "",
-    authorizationUrl: "",
-    tokenUrl: "",
-    identifierPath: "",
-    namePath: "",
-    scopes: "openid email profile",
   });
 
   try {
@@ -191,7 +182,7 @@ async function provisionLocalDesktopUserIfNeeded(): Promise<void> {
         createCurrentUserAuthRepository().listUserIdsWithSecondFactors(),
       ]);
       const conflictingUser = users.some(
-        (user) => user.isOidc || secondFactorUsers.has(user.id),
+        (user) => user.isExternal || secondFactorUsers.has(user.id),
       );
       if (process.env.OIDC_CLIENT_ID || conflictingUser) {
         throw new Error(
@@ -213,6 +204,12 @@ async function provisionLocalDesktopUserIfNeeded(): Promise<void> {
       await import("./hosts/status/host-status-service.js");
     hostStatusService.start();
 
+    // Counted before the desktop user is provisioned, so a first desktop
+    // run counts as a fresh install too.
+    const { createCurrentUserRepository } =
+      await import("./database/repositories/factory.js");
+    const freshInstall = (await createCurrentUserRepository().countAll()) === 0;
+
     if (process.env.ELECTRON_EMBEDDED === "true") {
       await provisionLocalDesktopUserIfNeeded();
     }
@@ -226,21 +223,11 @@ async function provisionLocalDesktopUserIfNeeded(): Promise<void> {
     const { primeKnownPermissions } =
       await import("./utils/known-permissions.js");
     await primeKnownPermissions();
-    // Terminal, docker, host-metrics, file-manager and tmux monitoring are
-    // deliberately absent: the ssh-terminal, docker, host-metrics,
-    // file-manager and tmux-monitor plugins start their own servers, so
-    // disabling any of them stops its WS/HTTP server. See
-    // plugins/ssh-terminal, plugins/docker, plugins/host-metrics,
-    // plugins/file-manager and plugins/tmux-monitor.
-    // Every other plugin (AI, Proxmox, Remote Desktop, Fleets, Automations,
-    // Network Topology, Workspaces, Web Endpoint, Tunnels, Serial, Homepage)
-    // is absent for the same reason: each one serves its routes under
-    // /plugin-api/<id>/ (or a WS route under /plugin-ws/<id>/) through ctx on
-    // activate, so disabling it answers 503 instead of leaving a dead import
-    // here. The dashboard's own uptime and recent-activity routes are core
-    // and are mounted on the main server in database.ts.
-    // Automations' scheduler and tunnel autostart also start from their own
-    // activate() rather than here.
+    // Plugins serve their routes under /plugin-api/<id>/ and /plugin-ws/<id>/
+    // through ctx on activate, and start their own schedulers there, so
+    // disabling one answers 503 instead of leaving a dead import here. The
+    // dashboard's own uptime and recent-activity routes are core and are
+    // mounted on the main server in database.ts.
 
     // Initialize log level from database settings
     const { getCurrentSettingValue } =
@@ -257,7 +244,7 @@ async function provisionLocalDesktopUserIfNeeded(): Promise<void> {
     // fails to load must not stop the backend, so this never rejects.
     try {
       const { initializePlugins } = await import("./plugins/index.js");
-      const loaded = await initializePlugins();
+      const loaded = await initializePlugins({ freshInstall });
       if (loaded.length > 0) {
         systemLogger.info(`Loaded ${loaded.length} plugin(s)`, {
           operation: "plugin_init",
@@ -267,6 +254,10 @@ async function provisionLocalDesktopUserIfNeeded(): Promise<void> {
       const { runPluginDataMigrations } =
         await import("./upgrade/boot-migrations.js");
       await runPluginDataMigrations();
+
+      const { startPluginAutoUpdate } =
+        await import("./plugins/auto-update.js");
+      startPluginAutoUpdate();
     } catch (error) {
       systemLogger.warn("Plugin runtime failed to initialize", {
         operation: "plugin_init",
@@ -298,7 +289,10 @@ async function provisionLocalDesktopUserIfNeeded(): Promise<void> {
     });
 
     // Log output can be filtered by the configured level or split across chunks.
-    if (process.env.ELECTRON_EMBEDDED === "true") {
+    if (
+      process.env.ELECTRON_EMBEDDED === "true" ||
+      process.env.TERMIX_DEV_RELOAD === "true"
+    ) {
       process.send?.({ type: "backend-ready" });
     }
 
@@ -343,6 +337,11 @@ async function provisionLocalDesktopUserIfNeeded(): Promise<void> {
       }
     });
 
+    if (process.env.TERMIX_DEV_RELOAD === "true") {
+      const { listenForDevReloads } = await import("./plugins/dev-reload.js");
+      listenForDevReloads();
+    }
+
     // A single bad request must not take the server down. Exit only on errors
     // that leave the process genuinely unusable; log and keep serving
     // otherwise, since these are almost always scoped to one connection.
diff --git a/src/backend/sync/client/engine.ts b/src/backend/sync/client/engine.ts
index 8d55d6aa5..f4152ebf3 100644
--- a/src/backend/sync/client/engine.ts
+++ b/src/backend/sync/client/engine.ts
@@ -9,7 +9,7 @@
  */
 
 import os from "os";
-import type { SyncRow } from "@termix/plugin-sdk/backend";
+import type { SyncRow } from "@termix-ssh/plugin-sdk/backend";
 import {
   getEntity,
   listEntities,
diff --git a/src/backend/sync/client/plugins.ts b/src/backend/sync/client/plugins.ts
index 8a77cc6b9..6d6fbcc2c 100644
--- a/src/backend/sync/client/plugins.ts
+++ b/src/backend/sync/client/plugins.ts
@@ -10,16 +10,18 @@
 import fs from "fs";
 import path from "path";
 import semver from "semver";
-import type { PluginDesktopMode } from "@termix/plugin-sdk/manifest";
+import type { PluginDesktopMode } from "@termix-ssh/plugin-sdk/manifest";
 import { syncLogger } from "../../utils/logger.js";
 import { sendCoreAlert } from "../../notify/core-notify.js";
 import {
   getPluginRuntime,
   installPluginArtifact,
+  registerLoadedPlugins,
   setPluginEnabled,
   unloadPlugin,
 } from "../../plugins/index.js";
 import { getPluginsDir } from "../../plugins/paths.js";
+import type { LoadedPlugin } from "../../plugins/loader.js";
 import {
   createCurrentPluginPermissionGrantRepository,
   createCurrentPluginRepository,
@@ -56,6 +58,7 @@ async function isEnabledLocally(pluginId: string): Promise<boolean> {
 
 const PLUGIN_ID_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
 
+/** Downloads next to the installed copy, which stays until the swap. */
 async function download(link: SyncLink, plugin: RemotePlugin): Promise<string> {
   const response = await remoteFetch(
     link,
@@ -68,7 +71,7 @@ async function download(link: SyncLink, plugin: RemotePlugin): Promise<string> {
   const buffer = Buffer.from(await response.arrayBuffer());
   const dir = getPluginsDir();
   await fs.promises.mkdir(dir, { recursive: true });
-  const file = path.join(dir, `${plugin.id}.tmxplug`);
+  const file = path.join(dir, `${plugin.id}.tmxplug.download`);
   await fs.promises.writeFile(file, buffer);
   const signature = response.headers.get("x-termix-signature");
   const sigFile = `${file}.sig`;
@@ -83,6 +86,68 @@ async function download(link: SyncLink, plugin: RemotePlugin): Promise<string> {
   return file;
 }
 
+async function moveIfThere(from: string, to: string): Promise<void> {
+  await fs.promises.rm(to, { force: true });
+  if (fs.existsSync(from)) await fs.promises.rename(from, to);
+}
+
+/**
+ * Swaps a downloaded copy in for the installed one. If it fails to install,
+ * the old copy goes back on disk and is loaded again, so a bad download never
+ * leaves the desktop without the plugin.
+ */
+async function replaceWithDownload(
+  pluginId: string,
+  downloaded: string,
+  previous: LoadedPlugin | undefined,
+  wasEnabled: boolean,
+): Promise<LoadedPlugin> {
+  const file = path.join(getPluginsDir(), `${pluginId}.tmxplug`);
+  const backup = `${file}.previous`;
+  await moveIfThere(file, backup);
+  await moveIfThere(`${file}.sig`, `${backup}.sig`);
+  await moveIfThere(downloaded, file);
+  await moveIfThere(`${downloaded}.sig`, `${file}.sig`);
+  if (previous) await unloadPlugin(pluginId);
+  try {
+    const installed = await installPluginArtifact(file);
+    await fs.promises.rm(backup, { force: true });
+    await fs.promises.rm(`${backup}.sig`, { force: true });
+    return installed;
+  } catch (error) {
+    await moveIfThere(backup, file);
+    await moveIfThere(`${backup}.sig`, `${file}.sig`);
+    if (previous) await restorePrevious(pluginId, previous, file, wasEnabled);
+    throw error;
+  }
+}
+
+async function restorePrevious(
+  pluginId: string,
+  previous: LoadedPlugin,
+  file: string,
+  wasEnabled: boolean,
+): Promise<void> {
+  const { loader } = getPluginRuntime();
+  if (loader.get(pluginId)) return;
+  try {
+    if (fs.existsSync(file)) {
+      await installPluginArtifact(file);
+    } else if (previous.source === "bundled") {
+      await registerLoadedPlugins([await loader.loadBundled(pluginId)]);
+    }
+    if (wasEnabled && loader.get(pluginId)) {
+      await setPluginEnabled(pluginId, true);
+    }
+  } catch (error) {
+    syncLogger.warn("Could not restore a feature after a failed update", {
+      operation: "sync_plugin_restore",
+      pluginId,
+      error: error instanceof Error ? error.message : String(error),
+    });
+  }
+}
+
 async function matchGrants(plugin: RemotePlugin): Promise<void> {
   const repository = createCurrentPluginPermissionGrantRepository();
   const local = getPluginRuntime().loader.get(plugin.id);
@@ -161,9 +226,14 @@ async function mirrorOne(link: SyncLink, plugin: RemotePlugin): Promise<void> {
       // A signed update of a bundled plugin. The loader checks the signature
       // and that the version really is newer.
       const wasEnabled = await isEnabledLocally(plugin.id);
-      if (local) await unloadPlugin(plugin.id);
       try {
-        local = await installPluginArtifact(await download(link, plugin));
+        const downloaded = await download(link, plugin);
+        local = await replaceWithDownload(
+          plugin.id,
+          downloaded,
+          local,
+          wasEnabled,
+        );
       } catch (error) {
         await alertOlderDesktop(plugin);
         throw error;
@@ -180,9 +250,13 @@ async function mirrorOne(link: SyncLink, plugin: RemotePlugin): Promise<void> {
       local.manifest.version !== plugin.version;
     if (outdated && (!local || local.source === "user")) {
       const wasEnabled = local ? await isEnabledLocally(plugin.id) : false;
-      if (local) await unloadPlugin(plugin.id);
-      const file = await download(link, plugin);
-      local = await installPluginArtifact(file);
+      const downloaded = await download(link, plugin);
+      local = await replaceWithDownload(
+        plugin.id,
+        downloaded,
+        local,
+        wasEnabled,
+      );
       if (wasEnabled && !plugin.enabled) {
         await setPluginEnabled(plugin.id, false);
       }
diff --git a/src/backend/sync/client/routes.ts b/src/backend/sync/client/routes.ts
index 65f8ed438..e6d53ae58 100644
--- a/src/backend/sync/client/routes.ts
+++ b/src/backend/sync/client/routes.ts
@@ -9,7 +9,7 @@ import express, {
   type Response,
 } from "express";
 import { and, eq, isNotNull } from "drizzle-orm";
-import type { SyncRow } from "@termix/plugin-sdk/backend";
+import type { SyncRow } from "@termix-ssh/plugin-sdk/backend";
 import type { AuthenticatedRequest } from "../../../types/index.js";
 import { AuthManager } from "../../utils/auth-manager.js";
 import { syncLogger } from "../../utils/logger.js";
diff --git a/src/backend/sync/entities.ts b/src/backend/sync/entities.ts
index 131be6f1e..4d969ed01 100644
--- a/src/backend/sync/entities.ts
+++ b/src/backend/sync/entities.ts
@@ -6,8 +6,8 @@
  */
 
 import { and, eq } from "drizzle-orm";
-import type { SyncRow } from "@termix/plugin-sdk/backend";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { SyncRow } from "@termix-ssh/plugin-sdk/backend";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 import {
   hosts,
   sshCredentials,
@@ -67,11 +67,10 @@ const HOST_LOCAL_FIELDS = [
 ];
 
 /**
- * Columns kept until 3.0.0 that nothing reads any more: their values moved
- * into plugin host settings, which sync with the host's pluginSettings. They
- * stay off the wire so a stale local id never reaches the other side.
+ * Columns 26.10.0 dropped. A 2.9 desktop still sends them; they never reach
+ * the table.
  */
-const HOST_RETIRED_FIELDS = ["quickActions"];
+const HOST_RETIRED_FIELDS = ["quickActions", "terminalConfig"];
 
 let registered = false;
 
diff --git a/src/backend/sync/host-defaults.ts b/src/backend/sync/host-defaults.ts
index c36a8eda1..9a306e37d 100644
--- a/src/backend/sync/host-defaults.ts
+++ b/src/backend/sync/host-defaults.ts
@@ -9,8 +9,8 @@
  */
 
 import { and, eq } from "drizzle-orm";
-import type { SyncRow } from "@termix/plugin-sdk/backend";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { SyncRow } from "@termix-ssh/plugin-sdk/backend";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 import { hosts, sshCredentials, sshFolders } from "../database/db/schema.js";
 import {
   createCurrentHostDefaultsRepository,
diff --git a/src/backend/sync/host-protocol-auth.ts b/src/backend/sync/host-protocol-auth.ts
index ea195269f..769d7dec0 100644
--- a/src/backend/sync/host-protocol-auth.ts
+++ b/src/backend/sync/host-protocol-auth.ts
@@ -4,7 +4,7 @@
  * for the wire like the host's own and a credential named by its syncId.
  */
 
-import type { SyncRow } from "@termix/plugin-sdk/backend";
+import type { SyncRow } from "@termix-ssh/plugin-sdk/backend";
 import type { HostProtocolLogin } from "../database/repositories/host-protocol-auth-repository.js";
 import { createCurrentHostProtocolAuthRepository } from "../database/repositories/factory.js";
 import {
diff --git a/src/backend/sync/server/feed.ts b/src/backend/sync/server/feed.ts
index 5f7de00da..d1cf22780 100644
--- a/src/backend/sync/server/feed.ts
+++ b/src/backend/sync/server/feed.ts
@@ -9,7 +9,7 @@
  */
 
 import type { Response } from "express";
-import type { SyncRow } from "@termix/plugin-sdk/backend";
+import type { SyncRow } from "@termix-ssh/plugin-sdk/backend";
 import { listEntities } from "../../plugins/sync-registry.js";
 import { syncLogger } from "../../utils/logger.js";
 import { registerCoreSyncEntities } from "../entities.js";
@@ -126,11 +126,6 @@ export async function reconcileUser(
   return { changed, wire };
 }
 
-/** Forgets a user's snapshot so the next reconcile reads everything. */
-export function invalidateSnapshot(userId: string): void {
-  snapshots.delete(userId);
-}
-
 const listeners = new Map<string, Set<Response>>();
 let debounce: NodeJS.Timeout | null = null;
 let heartbeat: NodeJS.Timeout | null = null;
diff --git a/src/backend/sync/server/push.ts b/src/backend/sync/server/push.ts
index e32717393..6cf4b41ee 100644
--- a/src/backend/sync/server/push.ts
+++ b/src/backend/sync/server/push.ts
@@ -7,7 +7,7 @@
  * holds up the rest of the batch.
  */
 
-import type { SyncRow } from "@termix/plugin-sdk/backend";
+import type { SyncRow } from "@termix-ssh/plugin-sdk/backend";
 import { getEntity } from "../../plugins/sync-registry.js";
 import { PermissionManager } from "../../utils/permission-manager.js";
 import { syncLogger } from "../../utils/logger.js";
diff --git a/src/backend/sync/server/routes.ts b/src/backend/sync/server/routes.ts
index a6cfa5c0e..5e7caff85 100644
--- a/src/backend/sync/server/routes.ts
+++ b/src/backend/sync/server/routes.ts
@@ -87,12 +87,17 @@ router.get("/v2/info", async (_req: Request, res: Response) => {
  *         description: The desktop session token and the account it belongs to.
  *       401:
  *         description: Not signed in.
+ *       403:
+ *         description: API keys cannot link a desktop.
  */
 router.post(
   "/v2/link",
   authenticateJWT,
   async (req: Request, res: Response) => {
     const userId = userOf(req);
+    if ((req as AuthenticatedRequest).apiKeyId) {
+      return res.status(403).json({ error: "API keys cannot link a desktop" });
+    }
     try {
       const user = await createCurrentUserRepository().findById(userId);
       if (!user) return res.status(401).json({ error: "User not found" });
@@ -360,7 +365,7 @@ router.get("/v2/events", authenticateJWT, (req: Request, res: Response) => {
  * /sync/v2/hosts/{syncId}:
  *   get:
  *     summary: This server's id for a host, by its sync id
- *     description: For a linked desktop that asks the server to act on a host (a tunnel through it), which needs the server's own id. Only for hosts the caller can see.
+ *     description: For a linked desktop that asks the server to act on a host (a tunnel through it), which needs the server's own id. Only for hosts the caller can connect to.
  *     tags:
  *       - Sync
  *     parameters:
@@ -373,7 +378,7 @@ router.get("/v2/events", authenticateJWT, (req: Request, res: Response) => {
  *       200:
  *         description: The host's id and name.
  *       404:
- *         description: No such host the caller can see.
+ *         description: No such host the caller can connect to.
  */
 router.get(
   "/v2/hosts/:syncId",
@@ -393,7 +398,7 @@ router.get(
       const access = await PermissionManager.getInstance().canAccessHost(
         userId,
         hostId,
-        "view",
+        "connect",
       );
       if (!access.hasAccess)
         return res.status(404).json({ error: "Not found" });
diff --git a/src/backend/sync/store.ts b/src/backend/sync/store.ts
index 793b6c821..430a3258e 100644
--- a/src/backend/sync/store.ts
+++ b/src/backend/sync/store.ts
@@ -8,7 +8,7 @@
 
 import crypto from "crypto";
 import { and, eq, getTableColumns, type SQL } from "drizzle-orm";
-import type { SyncRow } from "@termix/plugin-sdk/backend";
+import type { SyncRow } from "@termix-ssh/plugin-sdk/backend";
 import { createCurrentRepositoryContext } from "../database/repositories/factory.js";
 import { DataCrypto } from "../utils/data-crypto.js";
 import { SystemCrypto } from "../utils/system-crypto.js";
@@ -64,12 +64,6 @@ export function locate(
   return and(eq(table.syncId, syncId), eq(ownerColumn(entity), userId))!;
 }
 
-export function rowSyncId(entity: RegisteredSyncEntity, row: SyncRow): string {
-  return entity.singleton
-    ? singletonSyncId(entity.type)
-    : (row.syncId as string);
-}
-
 let hashKey: Buffer | null = null;
 
 export async function getHashKey(): Promise<Buffer> {
diff --git a/src/backend/sync/wire.ts b/src/backend/sync/wire.ts
index 8356bebb8..8009528c6 100644
--- a/src/backend/sync/wire.ts
+++ b/src/backend/sync/wire.ts
@@ -7,7 +7,10 @@
  */
 
 import crypto from "crypto";
-import type { SyncEntityReference, SyncRow } from "@termix/plugin-sdk/backend";
+import type {
+  SyncEntityReference,
+  SyncRow,
+} from "@termix-ssh/plugin-sdk/backend";
 import { FieldCrypto } from "../utils/field-crypto.js";
 import type { RegisteredSyncEntity } from "../plugins/sync-registry.js";
 
diff --git a/src/backend/tests/auth/auth-test-helpers.ts b/src/backend/tests/auth/auth-test-helpers.ts
index b56bcf3b0..ca2d34d38 100644
--- a/src/backend/tests/auth/auth-test-helpers.ts
+++ b/src/backend/tests/auth/auth-test-helpers.ts
@@ -5,9 +5,6 @@ export interface FakeUser {
   username: string;
   passwordHash: string;
   isAdmin: boolean;
-  isOidc: boolean;
-  oidcIdentifier?: string | null;
-  ssoProviderId?: number | null;
 }
 
 /** In-memory stand-ins for the repositories the login pipeline touches. */
@@ -37,18 +34,28 @@ export function createAuthState() {
 
 export type AuthState = ReturnType<typeof createAuthState>;
 
+/** The user as UserRepository returns it, with isExternal filled in. */
+function withIdentities(state: AuthState, user: FakeUser | undefined) {
+  if (!user) return null;
+  return {
+    ...user,
+    isExternal: state.identities.some((row) => row.userId === user.id),
+  };
+}
+
 export function fakeFactory(state: AuthState) {
   return {
     createCurrentUserRepository: () => ({
-      findById: async (id: string) => state.users.get(id) ?? null,
+      findById: async (id: string) =>
+        withIdentities(state, state.users.get(id)),
       findByUsername: async (username: string) =>
-        [...state.users.values()].find((u) => u.username === username) ?? null,
-      findByExternalIdentifier: async (identifier: string) =>
-        [...state.users.values()].find(
-          (u) => u.oidcIdentifier === identifier,
-        ) ?? null,
+        withIdentities(
+          state,
+          [...state.users.values()].find((u) => u.username === username),
+        ),
       countAll: async () => state.users.size,
-      listAll: async () => [...state.users.values()],
+      listAll: async () =>
+        [...state.users.values()].map((u) => withIdentities(state, u)),
       createFirstSsoUser: async (user: FakeUser) => {
         const isFirstUser = state.users.size === 0;
         const created = {
@@ -228,7 +235,6 @@ export function fakeAuthManager(state: AuthState) {
 export function fakeRequest(overrides: Record<string, unknown> = {}) {
   const headers: Record<string, string> = {
     "user-agent": "Mozilla/5.0 (X11; Linux x86_64) Firefox/120.0",
-    "x-termix-device-id": "a".repeat(64),
     ...(overrides.headers as Record<string, string> | undefined),
   };
   return {
diff --git a/src/backend/tests/auth/login-pipeline.test.ts b/src/backend/tests/auth/login-pipeline.test.ts
index ad9c4f412..c74588791 100644
--- a/src/backend/tests/auth/login-pipeline.test.ts
+++ b/src/backend/tests/auth/login-pipeline.test.ts
@@ -88,6 +88,8 @@ const {
   respondWithRedirectLogin,
   verifySecondFactorAndRespond,
   resetPendingLoginsForTests,
+  TRUST_DEVICE_COOKIE,
+  hashTrustToken,
 } = await import("../../auth/login-pipeline.js");
 const { verifyPasswordLogin } =
   await import("../../auth/builtin-login-methods.js");
@@ -119,7 +121,6 @@ function addUser(
     username: "alice",
     passwordHash: bcrypt.hashSync(PASSWORD, 4),
     isAdmin: false,
-    isOidc: false,
     ...overrides,
   };
   h.state.users.set(user.id, user);
@@ -296,16 +297,46 @@ describe("second factors", () => {
     await verifySecondFactorAndRespond(req as never, res as never, "totp");
 
     expect(res.statusCode).toBe(200);
-    expect(res.cookies[0]).toMatchObject({ name: "jwt" });
+    const trust = res.cookies.find((c) => c.name === TRUST_DEVICE_COOKIE);
+    expect(trust?.value).toMatch(/^[a-f0-9]{64}$/);
+    expect(res.cookies.find((c) => c.name === "jwt")).toBeDefined();
     expect(res.body).toMatchObject({
       success: true,
       username: "alice",
       totp_enabled: true,
     });
-    expect(h.state.trustedAdded).toHaveLength(1);
+    expect(res.body).not.toHaveProperty("trustToken");
+    expect(h.state.trustedAdded).toEqual([
+      `u1:${hashTrustToken(trust!.value)}`,
+    ]);
     expect(h.state.audits.at(-1)).toMatchObject({ action: "login" });
   });
 
+  it("hands the trust token to the desktop app in the body", async () => {
+    enrolTotp();
+    const first = await passwordLogin({
+      username: "alice",
+      password: PASSWORD,
+    });
+    const res = fakeResponse();
+    await verifySecondFactorAndRespond(
+      fakeRequest({
+        headers: { "x-electron-app": "true" },
+        body: {
+          temp_token: (first.body as { temp_token: string }).temp_token,
+          totp_code: TOTP_CODE,
+          rememberMe: true,
+        },
+      }) as never,
+      res as never,
+      "totp",
+    );
+    expect(res.statusCode).toBe(200);
+    expect((res.body as { trustToken: string }).trustToken).toMatch(
+      /^[a-f0-9]{64}$/,
+    );
+  });
+
   it("answers the 2.8 route with the user's first factor when none is named", async () => {
     enrolTotp();
     const first = await passwordLogin({
@@ -370,13 +401,32 @@ describe("second factors", () => {
     expect(res.cookies).toEqual([]);
   });
 
-  it("skips the factor on a trusted device", async () => {
+  it("skips the factor with a server-issued trust cookie", async () => {
     enrolTotp();
-    h.manager.isTrustedDevice.mockResolvedValueOnce(true);
-    const res = await passwordLogin({ username: "alice", password: PASSWORD });
+    const token = "c".repeat(64);
+    h.state.trusted.add(`u1:${hashTrustToken(token)}`);
+    const req = fakeRequest({
+      body: { username: "alice", password: PASSWORD },
+      cookies: { [TRUST_DEVICE_COOKIE]: token },
+    });
+    const res = fakeResponse();
+    const identity = await verifyPasswordLogin(req as never);
+    await respondWithLogin(req as never, res as never, identity, {
+      methodId: "password",
+      rememberMe: false,
+    });
     expect(res.cookies[0]).toMatchObject({ name: "jwt" });
   });
 
+  it("never skips the factor on a client-made device id", async () => {
+    enrolTotp();
+    const deviceId = "a".repeat(64);
+    h.state.trusted.add(`u1:${deviceId}`);
+    const res = await passwordLogin({ username: "alice", password: PASSWORD });
+    expect(res.body).toMatchObject({ requires_totp: true });
+    expect(h.manager.isTrustedDevice).not.toHaveBeenCalled();
+  });
+
   it("fails closed when an enrolled factor's plugin is gone", async () => {
     addUser();
     h.state.factors.push({
@@ -461,7 +511,7 @@ describe("external identities", () => {
     email: "a@example.com",
     name: "Alice",
     legacyIdentifier: "sub-1",
-    ssoProviderId: 3,
+    externalSession: { providerId: 3, sub: "sub-1", sid: "sid-1" },
   };
 
   // The sso plugin's method, which marks itself external.
@@ -477,6 +527,46 @@ describe("external identities", () => {
   });
   afterEach(() => disposeOidc());
 
+  function addSsoUser(passwordHash = "") {
+    addUser({ passwordHash });
+    h.state.identities.push({
+      userId: "u1",
+      providerId: "3",
+      subject: "sub-1",
+    } as never);
+  }
+
+  it("refuses a passkey sign in for an account that only uses SSO", async () => {
+    addSsoUser();
+    await expect(
+      runLogin(
+        fakeRequest() as never,
+        { kind: "user", userId: "u1", mfaSatisfied: true },
+        { methodId: "passkey", rememberMe: false },
+      ),
+    ).rejects.toMatchObject({ status: 403, code: "external_login_required" });
+  });
+
+  it("still lets an SSO account with a password use a passkey", async () => {
+    addSsoUser(bcrypt.hashSync(PASSWORD, 4));
+    const result = await runLogin(
+      fakeRequest() as never,
+      { kind: "user", userId: "u1", mfaSatisfied: true },
+      { methodId: "passkey", rememberMe: false },
+    );
+    expect(result.kind).toBe("session");
+  });
+
+  it("lets an external method sign an SSO account in by user id", async () => {
+    addSsoUser();
+    const result = await runLogin(
+      fakeRequest() as never,
+      { kind: "user", userId: "u1" },
+      { methodId: "oidc", rememberMe: false },
+    );
+    expect(result.kind).toBe("session");
+  });
+
   it("provisions the first user as admin and links the identity", async () => {
     const result = await runLogin(fakeRequest() as never, external, {
       methodId: "oidc",
@@ -487,7 +577,6 @@ describe("external identities", () => {
     expect(user).toMatchObject({
       username: "Alice",
       isAdmin: true,
-      isOidc: true,
     });
     expect(h.state.identities).toEqual([
       expect.objectContaining({
@@ -511,7 +600,7 @@ describe("external identities", () => {
       }),
     ).rejects.toMatchObject({ code: "registration_disabled" });
 
-    h.state.settings.set("oidc_auto_provision", "true");
+    h.state.settings.set("external_auto_provision", "true");
     await expect(
       runLogin(
         fakeRequest() as never,
@@ -521,45 +610,11 @@ describe("external identities", () => {
     ).rejects.toMatchObject({ code: "user_not_allowed" });
   });
 
-  it.each(["true", "false"])(
-    "does not duplicate an unscoped migrated account with provisioning %s",
-    async (enabled) => {
-      addUser({
-        id: "old",
-        username: "Alice",
-        isOidc: true,
-        passwordHash: "",
-        oidcIdentifier: "sub-1",
-        ssoProviderId: null,
-      });
-      const { runExternalIdentityMigration } =
-        await import("../../upgrade/external-identity-migration.js");
-      await runExternalIdentityMigration();
-      h.state.settings.set("oidc_auto_provision", enabled);
-      await expect(
-        runLogin(fakeRequest() as never, external, {
-          methodId: "oidc",
-          rememberMe: false,
-        }),
-      ).rejects.toMatchObject({ code: "legacy_identity_conflict" });
-      expect([...h.state.users.keys()]).toEqual(["old"]);
-      expect(h.state.identities).toHaveLength(1);
-      expect(h.state.identities[0]).toMatchObject({
-        userId: "old",
-        providerId: "legacy-oidc",
-        subject: "sub-1",
-      });
-    },
-  );
-
   it("keeps equal subjects on explicitly different providers separate", async () => {
     addUser({
       id: "other",
       username: "Other Alice",
-      isOidc: true,
       passwordHash: "",
-      oidcIdentifier: "sub-1",
-      ssoProviderId: 9,
     });
     h.state.identities.push({
       id: 1,
@@ -568,7 +623,7 @@ describe("external identities", () => {
       subject: "sub-1",
       email: null,
     });
-    h.state.settings.set("oidc_auto_provision", "true");
+    h.state.settings.set("external_auto_provision", "true");
     const result = await runLogin(fakeRequest() as never, external, {
       methodId: "oidc",
       rememberMe: false,
@@ -584,10 +639,7 @@ describe("external identities", () => {
     addUser({
       id: "old",
       username: "Alice",
-      isOidc: true,
       passwordHash: "",
-      oidcIdentifier: "sub-1",
-      ssoProviderId: null,
     });
     h.state.identities.push({
       id: 1,
@@ -605,7 +657,7 @@ describe("external identities", () => {
   });
 
   it("re-checks the allowed list for existing users", async () => {
-    addUser({ id: "u9", username: "Alice", isOidc: true, passwordHash: "" });
+    addUser({ id: "u9", username: "Alice", passwordHash: "" });
     h.state.identities.push({
       id: 1,
       userId: "u9",
@@ -622,42 +674,10 @@ describe("external identities", () => {
     ).rejects.toMatchObject({ code: "user_not_allowed" });
   });
 
-  it("finds an account from before the identity table by its old identifier", async () => {
-    addUser({
-      id: "old",
-      username: "ldap-bob",
-      isOidc: true,
-      passwordHash: "",
-      oidcIdentifier: "ldap:4:bob",
-    });
-    const result = await runLogin(
-      fakeRequest() as never,
-      {
-        kind: "external",
-        provider: "4",
-        subject: "bob",
-        name: "Bob",
-        legacyIdentifier: "ldap:4:bob",
-        ssoProviderId: 4,
-      },
-      { methodId: "ldap", rememberMe: false },
-    );
-    expect(result.kind).toBe("session");
-    expect(h.state.users.size).toBe(1);
-    expect(h.state.identities).toEqual([
-      expect.objectContaining({
-        userId: "old",
-        providerId: "4",
-        subject: "bob",
-      }),
-    ]);
-  });
-
   it("keeps admin in step with the provider's admin group", async () => {
     addUser({
       id: "u9",
       username: "Alice",
-      isOidc: true,
       passwordHash: "",
       isAdmin: true,
     });
@@ -680,7 +700,6 @@ describe("external identities", () => {
     addUser({
       id: "u9",
       username: "Alice",
-      isOidc: true,
       passwordHash: "",
     });
     h.state.factors.push({ userId: "u9", pluginId: "totp", factorId: "totp" });
@@ -703,7 +722,6 @@ describe("external identities", () => {
     addUser({
       id: "u9",
       username: "Alice",
-      isOidc: true,
       passwordHash: "",
     });
     h.state.factors.push({ userId: "u9", pluginId: "totp", factorId: "totp" });
@@ -729,9 +747,7 @@ describe("redirect logins", () => {
     subject: "sub-1",
     name: "Alice",
     returnTo: "https://termix.example",
-    ssoProviderId: 3,
-    oidcSub: "sub-1",
-    oidcSid: "sid-1",
+    externalSession: { providerId: 3, sub: "sub-1", sid: "sid-1" },
   };
 
   it("sets the cookie and redirects with success, carrying the SSO claims", async () => {
@@ -748,9 +764,7 @@ describe("redirect logins", () => {
     expect(h.manager.generateJWTToken).toHaveBeenCalledWith(
       expect.any(String),
       expect.objectContaining({
-        oidcSub: "sub-1",
-        oidcSid: "sid-1",
-        ssoProviderId: 3,
+        externalSession: { providerId: 3, sub: "sub-1", sid: "sid-1" },
       }),
     );
   });
@@ -774,7 +788,6 @@ describe("redirect logins", () => {
     addUser({
       id: "u9",
       username: "Alice",
-      isOidc: true,
       passwordHash: "",
     });
     h.state.factors.push({ userId: "u9", pluginId: "totp", factorId: "totp" });
@@ -812,7 +825,9 @@ describe("redirect logins", () => {
     expect(verify.statusCode).toBe(200);
     expect(h.manager.generateJWTToken).toHaveBeenLastCalledWith(
       "u9",
-      expect.objectContaining({ oidcSid: "sid-1", ssoProviderId: 3 }),
+      expect.objectContaining({
+        externalSession: { providerId: 3, sub: "sub-1", sid: "sid-1" },
+      }),
     );
   });
 
diff --git a/src/backend/tests/database/db/audit-log-user-id-nullable.test.ts b/src/backend/tests/database/db/audit-log-user-id-nullable.test.ts
index 73fdc86a6..b070dc2d8 100644
--- a/src/backend/tests/database/db/audit-log-user-id-nullable.test.ts
+++ b/src/backend/tests/database/db/audit-log-user-id-nullable.test.ts
@@ -10,8 +10,8 @@ import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
  *
  * The Drizzle schema said so, the repository was written against it, but the
  * runtime bootstrap still created `user_id TEXT NOT NULL`. A second, corrected
- * `CREATE TABLE IF NOT EXISTS` further down was a no-op — the table already
- * existed — so every fresh install got the old constraint and every user
+ * `CREATE TABLE IF NOT EXISTS` further down was a no-op, the table already
+ * existed, so every fresh install got the old constraint and every user
  * deletion (including the OIDC account-link cleanup) failed once the account
  * had logged in at least once.
  */
diff --git a/src/backend/tests/database/db/bootstrap-covers-all-tables.test.ts b/src/backend/tests/database/db/bootstrap-covers-all-tables.test.ts
index b591da098..7088bac84 100644
--- a/src/backend/tests/database/db/bootstrap-covers-all-tables.test.ts
+++ b/src/backend/tests/database/db/bootstrap-covers-all-tables.test.ts
@@ -7,7 +7,7 @@ import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 /**
  * `migrateSchema()` carried a `SELECT id FROM <table> LIMIT 1` probe for a
  * number of tables that the primary bootstrap already creates. The probe never
- * threw, so the `CREATE TABLE IF NOT EXISTS` in its catch never ran — and one
+ * threw, so the `CREATE TABLE IF NOT EXISTS` in its catch never ran, and one
  * of those unreachable copies had drifted away from the real definition
  * (`sessions` had lost `ON DELETE CASCADE`).
  *
@@ -61,7 +61,7 @@ describe("bootstrap creates the tables the removed probes covered", () => {
   });
 
   it("creates them on a database old enough to predate them", async () => {
-    // A database with users and hosts but none of the tables above — the
+    // A database with users and hosts but none of the tables above, the
     // upgrade path the deleted probes appeared to be protecting.
     const seed = new Database(":memory:");
     seed.exec(`
diff --git a/src/backend/tests/database/db/multi-dialect.test.ts b/src/backend/tests/database/db/multi-dialect.test.ts
index d716958c4..41100b04a 100644
--- a/src/backend/tests/database/db/multi-dialect.test.ts
+++ b/src/backend/tests/database/db/multi-dialect.test.ts
@@ -59,7 +59,7 @@ describe("needsExplicitPersist", () => {
 
 /**
  * schema.pg.ts and schema.mysql.ts are generated from schema.ts. These check the
- * generated output is usable rather than merely syntactically valid — the
+ * generated output is usable rather than merely syntactically valid, the
  * repository layer's correctness rests on all three behaving the same way.
  */
 describe("generated schemas", () => {
@@ -113,8 +113,8 @@ describe("generated schemas", () => {
       expect(auditFks).toHaveLength(1);
       expect(auditFks[0].onDelete).toBe("set null");
 
-      const folderFks = read(schema.sshFolders).foreignKeys;
-      expect(folderFks.map((fk) => fk.onDelete).sort()).toEqual([
+      const hostFks = read(schema.hosts).foreignKeys;
+      expect([...new Set(hostFks.map((fk) => fk.onDelete))].sort()).toEqual([
         "cascade",
         "set null",
       ]);
@@ -133,7 +133,7 @@ describe("generated schemas", () => {
    * SQLite builds its indexes at runtime from PERFORMANCE_INDEXES; Postgres and
    * MySQL only ever get what the migrations declare, which comes from schema.ts.
    * Anything listed in one and missing from the other is an index the engines
-   * chosen for scale silently do without — which is how 31 of them went missing.
+   * chosen for scale silently do without, which is how 31 of them went missing.
    */
   it("declares every performance index in schema.ts", () => {
     // Both are the leading column of an existing composite unique index, which
diff --git a/src/backend/tests/database/db/rdp-domain-backfill.test.ts b/src/backend/tests/database/db/rdp-domain-backfill.test.ts
index c1f8637d4..b156599d0 100644
--- a/src/backend/tests/database/db/rdp-domain-backfill.test.ts
+++ b/src/backend/tests/database/db/rdp-domain-backfill.test.ts
@@ -37,6 +37,18 @@ describe("RDP domain across database boots", () => {
         "utf8",
       ),
     );
+    // 2.9 has opened it, so it has the table 2.9 added.
+    seed.exec(`
+      CREATE TABLE plugin_migrations (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        plugin_id TEXT NOT NULL,
+        migration_id TEXT NOT NULL,
+        checksum TEXT NOT NULL,
+        applied_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+        UNIQUE (plugin_id, migration_id),
+        FOREIGN KEY (plugin_id) REFERENCES plugins (id) ON DELETE CASCADE
+      );
+    `);
     seed.exec(`
       INSERT INTO users (id, username, password_hash)
         VALUES ('owner', 'alice', 'hash');
diff --git a/src/backend/tests/database/db/retire-2-8-columns.test.ts b/src/backend/tests/database/db/retire-2-8-columns.test.ts
new file mode 100644
index 000000000..61e6c5644
--- /dev/null
+++ b/src/backend/tests/database/db/retire-2-8-columns.test.ts
@@ -0,0 +1,208 @@
+import fs from "fs";
+import os from "os";
+import path from "path";
+import Database from "better-sqlite3";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+
+/**
+ * A database 2.9 left behind still has the 2.8 columns it kept for a
+ * downgrade. Opening it in 26.10.0 drops them, keeps what still matters
+ * (a sudo password kept in terminal_config, an SSO sign-in, the hosts and
+ * folders themselves) and removes the settings rows the plugins copied.
+ */
+describe("dropping the columns 2.9.0 kept", () => {
+  let dataDir: string;
+
+  beforeEach(() => {
+    dataDir = fs.mkdtempSync(path.join(os.tmpdir(), "termix-retire-"));
+    vi.resetModules();
+    process.env.DATA_DIR = dataDir;
+    process.env.DB_FILE_ENCRYPTION = "false";
+    process.env.ALLOW_EMPTY_DATA_DIR = "true";
+  });
+
+  afterEach(() => {
+    delete process.env.DATA_DIR;
+    delete process.env.DB_FILE_ENCRYPTION;
+    delete process.env.ALLOW_EMPTY_DATA_DIR;
+    fs.rmSync(dataDir, { recursive: true, force: true });
+  });
+
+  function write29Database(): void {
+    const seed = new Database(":memory:");
+    seed.exec(`
+      CREATE TABLE plugins (
+        id TEXT PRIMARY KEY,
+        name TEXT NOT NULL,
+        version TEXT NOT NULL,
+        tier TEXT NOT NULL DEFAULT 'available',
+        source TEXT NOT NULL DEFAULT 'community',
+        registry_id TEXT,
+        state TEXT NOT NULL DEFAULT 'disabled',
+        last_error TEXT,
+        installed_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+        updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+        auto_update INTEGER NOT NULL DEFAULT 0,
+        manifest_json TEXT NOT NULL
+      );
+      CREATE TABLE plugin_migrations (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        plugin_id TEXT NOT NULL,
+        migration_id TEXT NOT NULL,
+        checksum TEXT NOT NULL,
+        applied_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+        UNIQUE (plugin_id, migration_id),
+        FOREIGN KEY (plugin_id) REFERENCES plugins (id) ON DELETE CASCADE
+      );
+
+      CREATE TABLE users (
+        id TEXT PRIMARY KEY,
+        username TEXT NOT NULL,
+        password_hash TEXT NOT NULL,
+        is_oidc INTEGER NOT NULL DEFAULT 0,
+        oidc_identifier TEXT,
+        client_secret TEXT
+      );
+
+      CREATE TABLE settings (key TEXT PRIMARY KEY, value TEXT NOT NULL);
+
+      CREATE TABLE ssh_credentials (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        user_id TEXT NOT NULL,
+        name TEXT NOT NULL,
+        auth_type TEXT NOT NULL,
+        username TEXT
+      );
+
+      CREATE TABLE ssh_data (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        user_id TEXT NOT NULL,
+        name TEXT,
+        ip TEXT NOT NULL,
+        port INTEGER NOT NULL,
+        username TEXT NOT NULL,
+        auth_type TEXT NOT NULL DEFAULT 'password',
+        sudo_password TEXT,
+        terminal_config TEXT,
+        quick_actions TEXT,
+        tunnel_connections TEXT,
+        enable_docker INTEGER NOT NULL DEFAULT 0,
+        stats_config TEXT,
+        rdp_user TEXT,
+        created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+        updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
+      );
+
+      CREATE TABLE ssh_folders (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        user_id TEXT NOT NULL,
+        name TEXT NOT NULL,
+        color TEXT,
+        credential_id INTEGER REFERENCES ssh_credentials(id) ON DELETE SET NULL,
+        created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+        updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+        FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
+      );
+
+      CREATE TABLE user_preferences (
+        user_id TEXT PRIMARY KEY,
+        theme TEXT,
+        terminal_defaults TEXT,
+        rdp_defaults TEXT,
+        updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
+      );
+
+      INSERT INTO users (id, username, password_hash, is_oidc, oidc_identifier)
+        VALUES ('u1', 'alice', 'hash', 1, 'sub-1');
+      INSERT INTO ssh_credentials (id, user_id, name, auth_type)
+        VALUES (5, 'u1', 'cred', 'password');
+      INSERT INTO ssh_data (id, user_id, name, ip, port, username,
+          terminal_config, tunnel_connections, enable_docker, rdp_user)
+        VALUES
+          (1, 'u1', 'web', '10.0.0.1', 22, '$oidc.preferred_username',
+           '{"sudoPassword":"s3cret","theme":"nord"}', '[]', 1, 'admin'),
+          (2, 'u1', 'db', '10.0.0.2', 22, 'root', NULL, NULL, 0, NULL);
+      INSERT INTO ssh_folders (id, user_id, name, color, credential_id)
+        VALUES (3, 'u1', 'prod', '#fff', 5);
+      INSERT INTO user_preferences (user_id, theme, terminal_defaults, rdp_defaults)
+        VALUES ('u1', 'dark', '{}', '{}');
+      INSERT INTO settings (key, value) VALUES
+        ('guac_url', 'guacd:4822'),
+        ('analytics_enabled', 'true'),
+        ('allow_registration', 'false');
+    `);
+    fs.writeFileSync(path.join(dataDir, "db.sqlite"), seed.serialize());
+    seed.close();
+  }
+
+  const columns = (sqlite: Database.Database, table: string) =>
+    (sqlite.prepare(`PRAGMA table_info(${table})`).all() as Array<{
+      name: string;
+    }>).map((col) => col.name);
+
+  it("drops the columns and rows and keeps the data that still matters", async () => {
+    write29Database();
+    const db = await import("../../../database/db/index.js");
+    await db.initializeDatabase();
+    const sqlite = db.getSqlite();
+
+    expect(columns(sqlite, "users")).not.toContain("oidc_identifier");
+    expect(columns(sqlite, "users")).not.toContain("is_oidc");
+    expect(columns(sqlite, "ssh_data")).not.toEqual(
+      expect.arrayContaining(["terminal_config"]),
+    );
+    for (const gone of [
+      "terminal_config",
+      "quick_actions",
+      "tunnel_connections",
+      "enable_docker",
+      "stats_config",
+    ]) {
+      expect(columns(sqlite, "ssh_data")).not.toContain(gone);
+    }
+    // A login moved only once its owner signs in stays until then.
+    expect(columns(sqlite, "ssh_data")).toContain("rdp_user");
+    expect(columns(sqlite, "ssh_folders")).not.toContain("credential_id");
+    expect(columns(sqlite, "user_preferences")).not.toContain("rdp_defaults");
+    expect(columns(sqlite, "user_preferences")).not.toContain(
+      "terminal_defaults",
+    );
+
+    const hosts = sqlite
+      .prepare("SELECT id, username, sudo_password FROM ssh_data ORDER BY id")
+      .all();
+    expect(hosts).toEqual([
+      { id: 1, username: "$external.username", sudo_password: "s3cret" },
+      { id: 2, username: "root", sudo_password: null },
+    ]);
+    expect(
+      sqlite.prepare("SELECT name, color FROM ssh_folders").all(),
+    ).toEqual([{ name: "prod", color: "#fff" }]);
+    expect(
+      sqlite.prepare("SELECT theme FROM user_preferences").get(),
+    ).toEqual({ theme: "dark" });
+
+    const keys = (
+      sqlite.prepare("SELECT key FROM settings").all() as Array<{
+        key: string;
+      }>
+    ).map((row) => row.key);
+    expect(keys).toContain("allow_registration");
+    expect(keys).not.toContain("guac_url");
+    expect(keys).not.toContain("analytics_enabled");
+  });
+
+  it("refuses a 2.8 database", async () => {
+    const seed = new Database(":memory:");
+    seed.exec(`
+      CREATE TABLE users (id TEXT PRIMARY KEY, username TEXT NOT NULL,
+        password_hash TEXT NOT NULL);
+      CREATE TABLE ssh_data (id INTEGER PRIMARY KEY, user_id TEXT NOT NULL);
+    `);
+    fs.writeFileSync(path.join(dataDir, "db.sqlite"), seed.serialize());
+    seed.close();
+
+    const db = await import("../../../database/db/index.js");
+    await expect(db.initializeDatabase()).rejects.toThrow(/2\.8 or older/);
+  });
+});
diff --git a/src/backend/tests/database/db/retired-columns.test.ts b/src/backend/tests/database/db/retired-columns.test.ts
new file mode 100644
index 000000000..d2031927e
--- /dev/null
+++ b/src/backend/tests/database/db/retired-columns.test.ts
@@ -0,0 +1,34 @@
+import { describe, expect, it } from "vitest";
+import {
+  legacySudoMoves,
+  legacySudoPassword,
+} from "../../../database/db/retired-columns.js";
+
+describe("legacySudoPassword", () => {
+  it("reads the sudo password out of a terminal_config value", () => {
+    expect(legacySudoPassword('{"sudoPassword":"s3cret"}')).toBe("s3cret");
+    expect(legacySudoPassword({ sudoPassword: "s3cret" })).toBe("s3cret");
+    expect(legacySudoPassword(JSON.stringify('{"sudoPassword":"x"}'))).toBe(
+      "x",
+    );
+  });
+
+  it("finds nothing in anything else", () => {
+    expect(legacySudoPassword(null)).toBeNull();
+    expect(legacySudoPassword("{")).toBeNull();
+    expect(legacySudoPassword('{"sudoPassword":""}')).toBeNull();
+    expect(legacySudoPassword("[1]")).toBeNull();
+  });
+});
+
+describe("legacySudoMoves", () => {
+  it("moves only hosts with no sudo password of their own", () => {
+    expect(
+      legacySudoMoves([
+        { id: 1, terminal_config: '{"sudoPassword":"a"}', sudo_password: null },
+        { id: 2, terminal_config: '{"sudoPassword":"b"}', sudo_password: "own" },
+        { id: 3, terminal_config: '{"theme":"nord"}', sudo_password: null },
+      ]),
+    ).toEqual([{ id: 1, sudoPassword: "a" }]);
+  });
+});
diff --git a/src/backend/tests/database/db/share-ssh-auth-backfill.test.ts b/src/backend/tests/database/db/share-ssh-auth-backfill.test.ts
index bf7920335..90cd346e4 100644
--- a/src/backend/tests/database/db/share-ssh-auth-backfill.test.ts
+++ b/src/backend/tests/database/db/share-ssh-auth-backfill.test.ts
@@ -7,7 +7,7 @@ import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 /**
  * Sharing a host used to hand the owner's SSH authentication to the recipient
  * unconditionally. 2.6.1 put that behind `ssh_data.share_ssh_auth`, added as
- * `NOT NULL DEFAULT 0` — so every host shared before the upgrade silently
+ * `NOT NULL DEFAULT 0`, so every host shared before the upgrade silently
  * stopped supplying credentials, and recipients hit "No valid authentication
  * method provided" on hosts that had worked the day before.
  *
@@ -33,10 +33,37 @@ describe("share_ssh_auth backfill", () => {
     fs.rmSync(dataDir, { recursive: true, force: true });
   });
 
-  /** A 2.6.0 database: hosts and shares exist, the column does not. */
+  /**
+   * Hosts and shares exist, the column does not. The plugin tables are there
+   * because 26.10.0 only opens a database 2.9 has already upgraded.
+   */
   function writePreUpgradeDatabase(): void {
     const seed = new Database(":memory:");
     seed.exec(`
+      CREATE TABLE plugins (
+        id TEXT PRIMARY KEY,
+        name TEXT NOT NULL,
+        version TEXT NOT NULL,
+        tier TEXT NOT NULL DEFAULT 'available',
+        source TEXT NOT NULL DEFAULT 'community',
+        registry_id TEXT,
+        state TEXT NOT NULL DEFAULT 'disabled',
+        last_error TEXT,
+        installed_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+        updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+        auto_update INTEGER NOT NULL DEFAULT 0,
+        manifest_json TEXT NOT NULL
+      );
+      CREATE TABLE plugin_migrations (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        plugin_id TEXT NOT NULL,
+        migration_id TEXT NOT NULL,
+        checksum TEXT NOT NULL,
+        applied_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+        UNIQUE (plugin_id, migration_id),
+        FOREIGN KEY (plugin_id) REFERENCES plugins (id) ON DELETE CASCADE
+      );
+
       CREATE TABLE users (
         id TEXT PRIMARY KEY,
         username TEXT NOT NULL,
diff --git a/src/backend/tests/database/db/ssh-credentials-username-rebuild.test.ts b/src/backend/tests/database/db/ssh-credentials-username-rebuild.test.ts
index fe5a8afd9..230e9cab0 100644
--- a/src/backend/tests/database/db/ssh-credentials-username-rebuild.test.ts
+++ b/src/backend/tests/database/db/ssh-credentials-username-rebuild.test.ts
@@ -7,7 +7,7 @@ import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 /**
  * `ssh_credentials.username` became nullable when key-only credentials landed,
  * and databases created before that are rebuilt on startup to drop the
- * constraint — SQLite cannot ALTER a column.
+ * constraint, SQLite cannot ALTER a column.
  *
  * The rebuild restated the table's columns as a literal, then copied rows with
  * `INSERT INTO temp SELECT <every live column>`. The table has gained columns
diff --git a/src/backend/tests/database/db/upgrade-guard.test.ts b/src/backend/tests/database/db/upgrade-guard.test.ts
new file mode 100644
index 000000000..efaab139d
--- /dev/null
+++ b/src/backend/tests/database/db/upgrade-guard.test.ts
@@ -0,0 +1,47 @@
+import { describe, expect, it } from "vitest";
+import {
+  assertNotPre29Database,
+  PRE_29_DATABASE_ERROR,
+} from "../../../database/db/upgrade-guard.js";
+
+const tables = (...names: string[]) => (name: string) => names.includes(name);
+
+describe("assertNotPre29Database", () => {
+  it("refuses a 2.8 database, which has hosts and plugins but no plugin_migrations", async () => {
+    await expect(
+      assertNotPre29Database(tables("ssh_data", "plugins")),
+    ).rejects.toThrow(PRE_29_DATABASE_ERROR);
+  });
+
+  it("opens a database 2.9 has upgraded", async () => {
+    await expect(
+      assertNotPre29Database(tables("ssh_data", "plugins", "plugin_migrations")),
+    ).resolves.toBeUndefined();
+  });
+
+  it("opens a new database", async () => {
+    await expect(assertNotPre29Database(tables())).resolves.toBeUndefined();
+  });
+});
+
+describe("a real 2.8.0 schema", () => {
+  it("is refused", async () => {
+    const { default: Database } = await import("better-sqlite3");
+    const fs = await import("node:fs");
+    const db = new Database(":memory:");
+    db.exec(
+      fs.readFileSync(
+        new URL("../../fixtures/sqlite-2.8-schema.sql", import.meta.url),
+        "utf8",
+      ),
+    );
+    const has = (name: string) =>
+      !!db
+        .prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = ?")
+        .get(name);
+    await expect(assertNotPre29Database(has)).rejects.toThrow(
+      PRE_29_DATABASE_ERROR,
+    );
+    db.close();
+  });
+});
diff --git a/src/backend/tests/database/plugin-settings-cascade.test.ts b/src/backend/tests/database/plugin-settings-cascade.test.ts
index f9f7ddbd7..c5dde0e73 100644
--- a/src/backend/tests/database/plugin-settings-cascade.test.ts
+++ b/src/backend/tests/database/plugin-settings-cascade.test.ts
@@ -9,7 +9,10 @@
 
 import { asc } from "drizzle-orm";
 import { afterEach, describe, expect, it } from "vitest";
-import { TestSqliteDatabase } from "./repositories/test-support.js";
+import {
+  TestSqliteDatabase,
+  testDialect,
+} from "./repositories/test-support.js";
 import { HostRepository } from "../../database/repositories/host-repository.js";
 import { UserRepository } from "../../database/repositories/user-repository.js";
 import type { DatabaseContext } from "../../database/repositories/database-context.js";
@@ -48,13 +51,16 @@ async function seed(): Promise<DatabaseContext> {
   return context;
 }
 
+// key is reserved in MySQL
+const KEY_COLUMN = testDialect() === "mysql" ? "`key`" : "key";
+
 async function addSetting(
   scope: string,
   scopeId: string | null,
   key = "k",
 ): Promise<void> {
   await adapter!.exec(
-    `INSERT INTO plugin_settings (plugin_id, scope, scope_id, key, value)
+    `INSERT INTO plugin_settings (plugin_id, scope, scope_id, ${KEY_COLUMN}, value)
      VALUES ('sample', '${scope}', ${scopeId === null ? "NULL" : `'${scopeId}'`}, '${key}', '"v"')`,
   );
 }
diff --git a/src/backend/tests/database/repositories/host-folder-repository.test.ts b/src/backend/tests/database/repositories/host-folder-repository.test.ts
index 99f04c839..889948868 100644
--- a/src/backend/tests/database/repositories/host-folder-repository.test.ts
+++ b/src/backend/tests/database/repositories/host-folder-repository.test.ts
@@ -89,7 +89,6 @@ describe("HostFolderRepository", () => {
         "prod",
         "#abcdef",
         "folder",
-        undefined,
         "2026-02-01T00:00:00.000Z",
       ),
     ).resolves.toMatchObject({
@@ -102,7 +101,6 @@ describe("HostFolderRepository", () => {
         "new",
         null,
         null,
-        null,
         "2026-03-01T00:00:00.000Z",
       ),
     ).resolves.toMatchObject({
@@ -112,28 +110,6 @@ describe("HostFolderRepository", () => {
     expect(writes).toBe(2);
   });
 
-  it("assigns a credential to a folder and resolves it for nested paths", async () => {
-    const { repository } = await createRepository();
-
-    await expect(
-      repository.upsertMetadata(
-        "user-1",
-        "prod",
-        undefined,
-        undefined,
-        1,
-        "2026-02-01T00:00:00.000Z",
-      ),
-    ).resolves.toMatchObject({
-      created: false,
-      folder: { credentialId: 1 },
-    });
-
-    const folders = await repository.listFolders("user-1");
-    const prodFolder = folders.find((f) => f.name === "prod");
-    expect(prodFolder?.credentialId).toBe(1);
-  });
-
   it("lists and deletes hosts and folder records in a folder tree", async () => {
     let writes = 0;
     const { repository } = await createRepository(() => {
diff --git a/src/backend/tests/database/repositories/host-resolution-repository.test.ts b/src/backend/tests/database/repositories/host-resolution-repository.test.ts
index 318567351..38d28d4ee 100644
--- a/src/backend/tests/database/repositories/host-resolution-repository.test.ts
+++ b/src/backend/tests/database/repositories/host-resolution-repository.test.ts
@@ -44,11 +44,6 @@ describe("HostResolutionRepository", () => {
         (1, 'user-1', 'web', '10.0.0.1', 22, 'root', 'password', 7, '[{"autoStart":true}]'),
         (2, 'user-1', 'db', '10.0.0.2', 22, 'admin', 'none', NULL, NULL),
         (3, 'user-2', 'other', '10.0.0.3', 22, 'root', 'none', NULL, '[{"autoStart":false}]');
-      INSERT INTO ssh_folders (user_id, name, credential_id)
-      VALUES
-        ('user-1', 'switches', 7),
-        ('user-1', 'switches / floor1', NULL),
-        ('user-1', 'no-cred', NULL);
       INSERT INTO host_access (
         host_id, user_id, granted_by, permission_level
       )
@@ -330,26 +325,6 @@ describe("HostResolutionRepository", () => {
     ).resolves.toBeNull();
   });
 
-  it("resolves a folder's assigned credential, walking up to parent folders", async () => {
-    const repository = await createRepository();
-
-    await expect(
-      repository.findFolderCredentialId("user-1", "switches"),
-    ).resolves.toBe(7);
-    await expect(
-      repository.findFolderCredentialId("user-1", "switches / floor1"),
-    ).resolves.toBe(7);
-    await expect(
-      repository.findFolderCredentialId("user-1", "no-cred"),
-    ).resolves.toBeNull();
-    await expect(
-      repository.findFolderCredentialId("user-1", "unknown"),
-    ).resolves.toBeNull();
-    await expect(
-      repository.findFolderCredentialId("user-1", ""),
-    ).resolves.toBeNull();
-  });
-
   describe("listCredentialsByIdsForUser", () => {
     it("returns the owner's credentials keyed by id", async () => {
       const repository = await createRepository();
diff --git a/src/backend/tests/database/repositories/mutation-result.test.ts b/src/backend/tests/database/repositories/mutation-result.test.ts
index b905de24f..a4ca6f216 100644
--- a/src/backend/tests/database/repositories/mutation-result.test.ts
+++ b/src/backend/tests/database/repositories/mutation-result.test.ts
@@ -17,7 +17,7 @@ describe("rowsAffected", () => {
   });
 
   it("reads changes from a better-sqlite3 write result", () => {
-    // The shape of a write with no .returning() attached — verified against
+    // The shape of a write with no .returning() attached, verified against
     // the driver, not assumed.
     expect(rowsAffected({ changes: 1, lastInsertRowid: 7 })).toBe(1);
     expect(rowsAffected({ changes: 0, lastInsertRowid: 7 })).toBe(0);
@@ -81,7 +81,7 @@ describe("supportsReturning", () => {
     expect(supportsReturning("sqlite")).toBe(true);
     expect(supportsReturning("postgres")).toBe(true);
     // No RETURNING clause in MySQL, and drizzle's mysql-core does not expose
-    // the method — call sites that need rows back must read first.
+    // the method, call sites that need rows back must read first.
     expect(supportsReturning("mysql")).toBe(false);
   });
 });
diff --git a/src/backend/tests/database/repositories/rbac-access-repository.test.ts b/src/backend/tests/database/repositories/rbac-access-repository.test.ts
index cdb5bbd40..1b26efda7 100644
--- a/src/backend/tests/database/repositories/rbac-access-repository.test.ts
+++ b/src/backend/tests/database/repositories/rbac-access-repository.test.ts
@@ -19,11 +19,11 @@ describe("RbacAccessRepository", () => {
     adapter = new TestSqliteDatabase();
     const context = await adapter.connect();
     await adapter.exec(`
-      INSERT INTO users (id, username, password_hash, is_admin, is_oidc)
+      INSERT INTO users (id, username, password_hash, is_admin)
       VALUES
-        ('admin', 'admin', 'hash', 1, 0),
-        ('user-1', 'alice', 'hash', 0, 0),
-        ('owner-1', 'owner', 'hash', 0, 0);
+        ('admin', 'admin', 'hash', 1),
+        ('user-1', 'alice', 'hash', 0),
+        ('owner-1', 'owner', 'hash', 0);
       INSERT INTO roles (id, name, display_name, is_system)
       VALUES (7, 'ops', 'Operations', 0);
       INSERT INTO ssh_credentials (id, user_id, name, username, auth_type) VALUES
diff --git a/src/backend/tests/database/repositories/returning.test.ts b/src/backend/tests/database/repositories/returning.test.ts
index 42c1111c7..725523105 100644
--- a/src/backend/tests/database/repositories/returning.test.ts
+++ b/src/backend/tests/database/repositories/returning.test.ts
@@ -11,7 +11,7 @@ import type { DatabaseDialect } from "../../../database/db/dialect.js";
  * The MySQL path cannot be exercised against a real engine here, and its whole
  * correctness is an ordering property: an update must be read AFTER the write,
  * a delete BEFORE it. Get either backwards and the rows describe the wrong
- * state — silently, with no error anywhere.
+ * state, silently, with no error anywhere.
  *
  * So the drizzle handle is stubbed and the order of calls is recorded.
  */
@@ -169,7 +169,7 @@ describe("deleteReturning", () => {
     await deleteReturning(context, {} as never, where);
 
     // Without this, a concurrent write between them makes the returned rows
-    // describe a state that never existed — and with a pool the second
+    // describe a state that never existed, and with a pool the second
     // statement need not even reach the same connection.
     expect(calls[0]).toBe("begin");
     expect(calls[calls.length - 1]).toBe("commit");
diff --git a/src/backend/tests/database/repositories/role-repository.test.ts b/src/backend/tests/database/repositories/role-repository.test.ts
index 963c5953f..38a23ed06 100644
--- a/src/backend/tests/database/repositories/role-repository.test.ts
+++ b/src/backend/tests/database/repositories/role-repository.test.ts
@@ -18,8 +18,8 @@ describe("RoleRepository", () => {
     adapter = new TestSqliteDatabase();
     const context = await adapter.connect();
     await adapter.exec(`
-      INSERT INTO users (id, username, password_hash, is_admin, is_oidc)
-      VALUES ('admin', 'admin', 'hash', 1, 0), ('user-1', 'user', 'hash', 0, 0);
+      INSERT INTO users (id, username, password_hash, is_admin)
+      VALUES ('admin', 'admin', 'hash', 1), ('user-1', 'user', 'hash', 0);
     `);
 
     return new RoleRepository(context, onWrite);
diff --git a/src/backend/tests/database/repositories/settings-cache-refresh.test.ts b/src/backend/tests/database/repositories/settings-cache-refresh.test.ts
index 1f644d4c4..fae85bc59 100644
--- a/src/backend/tests/database/repositories/settings-cache-refresh.test.ts
+++ b/src/backend/tests/database/repositories/settings-cache-refresh.test.ts
@@ -8,8 +8,8 @@ import {
 /**
  * The settings cache lives in one process and is updated by whichever process
  * wrote the setting. On SQLite that is the only process there is. On Postgres
- * and MySQL — the reason those exist here is to let several instances share one
- * database — a setting changed on one replica would otherwise never reach the
+ * and MySQL, the reason those exist here is to let several instances share one
+ * database, a setting changed on one replica would otherwise never reach the
  * others, because the synchronous read cannot go back to the database.
  *
  * Re-priming on a timer does not make settings immediately consistent. It
@@ -57,7 +57,7 @@ describe("settings cache refresh", () => {
 
   it("keeps running after a refresh throws", async () => {
     // A transient database blip must not stop the loop, or the replica is stuck
-    // on stale settings until it restarts — the exact failure this prevents.
+    // on stale settings until it restarts, the exact failure this prevents.
     const refresh = vi
       .fn()
       .mockRejectedValueOnce(new Error("connection reset"))
diff --git a/src/backend/tests/database/repositories/test-support.ts b/src/backend/tests/database/repositories/test-support.ts
index dc8891d87..977b69590 100644
--- a/src/backend/tests/database/repositories/test-support.ts
+++ b/src/backend/tests/database/repositories/test-support.ts
@@ -20,7 +20,7 @@ import type { DatabaseDialect } from "../../../database/db/dialect.js";
  *
  * Defaults to SQLite, so `npm test` behaves as it always has and needs no
  * server. Set TEST_DIALECT=postgres or mysql, plus TEST_DATABASE_URL, to run
- * the same tests against a real one — see the database-dialects CI job.
+ * the same tests against a real one, see the database-dialects CI job.
  */
 export function testDialect(env = process.env): DatabaseDialect {
   const value = env.TEST_DIALECT?.trim().toLowerCase();
@@ -125,7 +125,7 @@ export class TestSqliteDatabase {
    * Portable write for test setup.
    *
    * Separate from query() because better-sqlite3 refuses `.all()` on a
-   * statement that returns no rows — "This statement does not return data".
+   * statement that returns no rows, "This statement does not return data".
    */
   async run(statement: SQL): Promise<void> {
     const context = this.context;
@@ -207,7 +207,7 @@ async function truncateAll(context: DatabaseContext): Promise<void> {
 }
 
 /**
- * Splits seed SQL into statements, ignoring semicolons inside string literals —
+ * Splits seed SQL into statements, ignoring semicolons inside string literals,
  * JSON payloads in the fixtures contain them.
  */
 function splitStatements(sql: string): string[] {
@@ -274,7 +274,7 @@ function portableSql(statement: string, dialect: DatabaseDialect): string {
   if (dialect !== "mysql") return out;
 
   // Only the column list, before VALUES. A blanket replace also mangles the
-  // double quotes inside JSON payloads in the values — '{"slots":[]}' became
+  // double quotes inside JSON payloads in the values, '{"slots":[]}' became
   // '{`slots`:[]}', which is valid SQL and silently wrong data.
   const split = /^(.*?\bVALUES\b)(.*)$/is.exec(out);
   if (!split) return out.replace(/"([a-z_]+)"/g, "`$1`");
@@ -354,7 +354,7 @@ async function resyncAutoIncrement(
   for (const table of tables) {
     // Only tables whose id is generated. A text primary key, like users.id,
     // has no sequence and no counter to move, and a table keyed on something
-    // else entirely — host_sidebar_preferences.user_id — has no id at all.
+    // else entirely, host_sidebar_preferences.user_id, has no id at all.
     if (context.dialect === "postgres") {
       // pg_get_serial_sequence() raises 42703 rather than returning null when
       // the column is missing, so let information_schema decide whether there
@@ -408,7 +408,7 @@ async function resyncAutoIncrement(
  *
  * Every test builds a fixture, and each would otherwise re-run the migrator
  * against the same shared database. drizzle's journal makes that a no-op only
- * when the first run finished — several fixtures racing inside one file hit
+ * when the first run finished, several fixtures racing inside one file hit
  * "table already exists" instead.
  */
 const migrations = new Map<string, Promise<void>>();
@@ -436,7 +436,7 @@ let cachedSqliteSchema: string | null = null;
  * The full schema, from the generated SQLite migrations rather than
  * hand-written DDL in each test file.
  *
- * Tests used to declare a cut-down version of every table they touched — a
+ * Tests used to declare a cut-down version of every table they touched, a
  * `users` with five columns where the real one has thirty. That drifts from the
  * schema silently, and it is the reason the same tests could not be pointed at
  * another engine.
diff --git a/src/backend/tests/database/repositories/user-preference-repository.test.ts b/src/backend/tests/database/repositories/user-preference-repository.test.ts
index febf757c5..526034907 100644
--- a/src/backend/tests/database/repositories/user-preference-repository.test.ts
+++ b/src/backend/tests/database/repositories/user-preference-repository.test.ts
@@ -34,19 +34,19 @@ describe("UserPreferenceRepository", () => {
       reopenTabsOnLogin: true,
       theme: "dark",
       storageMode: "local",
-      commandAutocomplete: true,
+      commandPaletteEnabled: true,
     });
     expect(created).toMatchObject({
       userId: "user-1",
       reopenTabsOnLogin: true,
       theme: "dark",
       storageMode: "local",
-      commandAutocomplete: true,
+      commandPaletteEnabled: true,
     });
 
     const updated = await repo.upsert("user-1", {
       theme: "light",
-      commandAutocomplete: false,
+      commandPaletteEnabled: false,
       updatedAt: "2026-06-27T00:00:00.000Z",
     });
     expect(updated).toMatchObject({
@@ -54,7 +54,7 @@ describe("UserPreferenceRepository", () => {
       reopenTabsOnLogin: true,
       theme: "light",
       storageMode: "local",
-      commandAutocomplete: false,
+      commandPaletteEnabled: false,
     });
   });
 
diff --git a/src/backend/tests/database/repositories/user-session-repositories.test.ts b/src/backend/tests/database/repositories/user-session-repositories.test.ts
index 729169b51..269de0038 100644
--- a/src/backend/tests/database/repositories/user-session-repositories.test.ts
+++ b/src/backend/tests/database/repositories/user-session-repositories.test.ts
@@ -56,7 +56,6 @@ describe("UserRepository and SessionRepository", () => {
       username: "admin",
       passwordHash: "hash",
       isAdmin: true,
-      isOidc: false,
     });
 
     expect(await repo.users.countAdmins()).toBe(1);
@@ -69,13 +68,15 @@ describe("UserRepository and SessionRepository", () => {
     ).toEqual(["user-1"]);
     expect(await repo.users.listByIds([])).toEqual([]);
 
-    const updated = await repo.users.update("user-1", {
-      oidcIdentifier: "oidc:admin",
-    });
-    expect(updated?.oidcIdentifier).toBe("oidc:admin");
-    expect((await repo.users.findByExternalIdentifier("oidc:admin"))?.id).toBe(
-      "user-1",
-    );
+    const updated = await repo.users.update("user-1", { isAdmin: false });
+    expect(updated).toMatchObject({ isAdmin: false, isExternal: false });
+
+    await adapter!.exec(`
+      INSERT INTO user_external_identities (user_id, provider_id, subject)
+      VALUES ('user-1', '3', 'sub-1');
+    `);
+    expect((await repo.users.findById("user-1"))?.isExternal).toBe(true);
+    expect((await repo.users.listAll())[0].isExternal).toBe(true);
 
     expect(await repo.users.delete("user-1")).toBe(true);
     expect(await repo.users.findById("user-1")).toBeNull();
@@ -88,13 +89,11 @@ describe("UserRepository and SessionRepository", () => {
       id: "user-1",
       username: "first",
       passwordHash: "hash",
-      isOidc: false,
     });
     const second = await repo.users.createFirstLocalUser({
       id: "user-2",
       username: "second",
       passwordHash: "hash",
-      isOidc: false,
     });
 
     expect(first.isFirstUser).toBe(true);
@@ -112,27 +111,18 @@ describe("UserRepository and SessionRepository", () => {
       username: "first",
       passwordHash: "",
       isAdmin: false,
-      isOidc: true,
-      oidcIdentifier: "ldap:provider:first",
-      ssoProviderId: 1,
     });
     const providerAdmin = await repo.users.createFirstSsoUser({
       id: "user-2",
       username: "provider-admin",
       passwordHash: "",
       isAdmin: true,
-      isOidc: true,
-      oidcIdentifier: "ldap:provider:admin",
-      ssoProviderId: 1,
     });
     const regular = await repo.users.createFirstSsoUser({
       id: "user-3",
       username: "regular",
       passwordHash: "",
       isAdmin: false,
-      isOidc: true,
-      oidcIdentifier: "ldap:provider:regular",
-      ssoProviderId: 1,
     });
 
     expect(first.isFirstUser).toBe(true);
@@ -157,7 +147,6 @@ describe("UserRepository and SessionRepository", () => {
       username: "admin",
       passwordHash: "hash",
       isAdmin: true,
-      isOidc: false,
     });
     await repo.users.update("user-1", { isAdmin: false });
     await repo.users.delete("user-1");
@@ -172,7 +161,6 @@ describe("UserRepository and SessionRepository", () => {
       username: "user",
       passwordHash: "hash",
       isAdmin: false,
-      isOidc: false,
     });
 
     await repo.sessions.create({
@@ -208,7 +196,6 @@ describe("UserRepository and SessionRepository", () => {
       username: "user",
       passwordHash: "hash",
       isAdmin: false,
-      isOidc: false,
     });
     await repo.sessions.create({
       id: "session-1",
@@ -250,7 +237,6 @@ describe("UserRepository and SessionRepository", () => {
       username: "user",
       passwordHash: "hash",
       isAdmin: false,
-      isOidc: false,
     });
     await repo.sessions.create({
       id: "session-1",
@@ -281,7 +267,6 @@ describe("UserRepository and SessionRepository", () => {
       username: "user",
       passwordHash: "hash",
       isAdmin: false,
-      isOidc: false,
     });
 
     for (const id of ["keep", "drop-1", "drop-2"]) {
@@ -308,7 +293,6 @@ describe("UserRepository and SessionRepository", () => {
       username: "user",
       passwordHash: "hash",
       isAdmin: false,
-      isOidc: false,
     });
 
     await repo.sessions.create({
diff --git a/src/backend/tests/database/routes/donation-modal-utils.test.ts b/src/backend/tests/database/routes/donation-modal-utils.test.ts
deleted file mode 100644
index 823b9e9ca..000000000
--- a/src/backend/tests/database/routes/donation-modal-utils.test.ts
+++ /dev/null
@@ -1,37 +0,0 @@
-import { describe, it, expect } from "vitest";
-import { shouldShowDonationModal } from "../../../database/routes/donation-modal-utils.js";
-
-describe("shouldShowDonationModal", () => {
-  const now = Date.parse("2026-07-17T00:00:00.000Z");
-
-  it("returns false when the user already dismissed it", () => {
-    const registeredAt = new Date(now - 60 * 24 * 60 * 60 * 1000).toISOString();
-    expect(shouldShowDonationModal(registeredAt, true, now)).toBe(false);
-  });
-
-  it("returns false before the 30 day mark", () => {
-    const registeredAt = new Date(now - 29 * 24 * 60 * 60 * 1000).toISOString();
-    expect(shouldShowDonationModal(registeredAt, false, now)).toBe(false);
-  });
-
-  it("returns true at exactly 30 days", () => {
-    const registeredAt = new Date(now - 30 * 24 * 60 * 60 * 1000).toISOString();
-    expect(shouldShowDonationModal(registeredAt, false, now)).toBe(true);
-  });
-
-  it("returns true well past the 30 day mark", () => {
-    const registeredAt = new Date(
-      now - 200 * 24 * 60 * 60 * 1000,
-    ).toISOString();
-    expect(shouldShowDonationModal(registeredAt, false, now)).toBe(true);
-  });
-
-  it("returns false for an unparseable registeredAt", () => {
-    expect(shouldShowDonationModal("not-a-date", false, now)).toBe(false);
-  });
-
-  it("treats a backdated registeredAt for pre-existing users as immediately eligible", () => {
-    const registeredAt = new Date(now - 31 * 24 * 60 * 60 * 1000).toISOString();
-    expect(shouldShowDonationModal(registeredAt, false, now)).toBe(true);
-  });
-});
diff --git a/src/backend/tests/database/routes/host-bulk-routes.test.ts b/src/backend/tests/database/routes/host-bulk-routes.test.ts
index c4f4c4db7..ac57c5a2e 100644
--- a/src/backend/tests/database/routes/host-bulk-routes.test.ts
+++ b/src/backend/tests/database/routes/host-bulk-routes.test.ts
@@ -1,8 +1,10 @@
 import { describe, it, expect } from "vitest";
 import {
   importedHostUsername,
+  notifyImportedHosts,
   parseSSHConfig,
 } from "../../../database/routes/host-bulk-routes.js";
+import { pluginEvents, TOPICS } from "../../../plugins/events.js";
 
 describe("parseSSHConfig", () => {
   it("parses a basic Host block", () => {
@@ -126,3 +128,21 @@ describe("importedHostUsername", () => {
     );
   });
 });
+
+describe("notifyImportedHosts", () => {
+  it("sends a host update for every imported host", () => {
+    const seen: unknown[] = [];
+    const off = pluginEvents.on(TOPICS.hostUpdated, (payload) => {
+      seen.push(payload);
+    });
+    try {
+      notifyImportedHosts("user-1", [4, 7]);
+    } finally {
+      off();
+    }
+    expect(seen).toEqual([
+      { hostId: 4, userId: "user-1" },
+      { hostId: 7, userId: "user-1" },
+    ]);
+  });
+});
diff --git a/src/backend/tests/database/routes/host-import-terminal-settings.test.ts b/src/backend/tests/database/routes/host-import-terminal-settings.test.ts
index 1a2000d02..fa999baf6 100644
--- a/src/backend/tests/database/routes/host-import-terminal-settings.test.ts
+++ b/src/backend/tests/database/routes/host-import-terminal-settings.test.ts
@@ -96,9 +96,8 @@ it.each([false, true])(
       overwrite ? 19 : 71,
       expect.objectContaining({ pluginSettings: host.pluginSettings }),
     );
-    expect(JSON.parse(saved.terminalConfig)).toEqual({
-      macOptionIsMeta: false,
-    });
+    // The 2.8 terminalConfig reaches the plugin, never a host column.
+    expect(saved).not.toHaveProperty("terminalConfig");
   },
 );
 
diff --git a/src/backend/tests/database/routes/host-normalizers.test.ts b/src/backend/tests/database/routes/host-normalizers.test.ts
index 29d995029..614e2c83e 100644
--- a/src/backend/tests/database/routes/host-normalizers.test.ts
+++ b/src/backend/tests/database/routes/host-normalizers.test.ts
@@ -4,6 +4,7 @@ import {
   applyHostKeyTypeUpdate,
   containsOwnerPrivateAuthUpdate,
   isNonEmptyString,
+  keepsStoredSshAuth,
   isOptionalBoolean,
   isValidPort,
   normalizeImportedHost,
@@ -284,7 +285,7 @@ describe("stripSensitiveFields", () => {
     expect(result.hasKey).toBe(false);
   });
 
-  it("detects sudo password stored only in nested terminalConfig", () => {
+  it("strips a sudo password nested in terminalConfig", () => {
     const result = stripSensitiveFields({
       name: "web",
       terminalConfig: {
@@ -292,7 +293,7 @@ describe("stripSensitiveFields", () => {
         sudoPassword: "nested-only-sudo",
       },
     });
-    expect(result.hasSudoPassword).toBe(true);
+    expect(result.hasSudoPassword).toBe(false);
     expect(
       (result.terminalConfig as Record<string, unknown>).sudoPassword,
     ).toBeUndefined();
@@ -483,25 +484,6 @@ describe("transformHostResponse terminal fields", () => {
     expect(host.terminalConfig).toEqual({ keepaliveInterval: 20 });
   });
 
-  it("reads the options out of terminal_config before the boot copy", () => {
-    const host = row({
-      sshOptions: null,
-      terminalConfig: JSON.stringify({ agentForwarding: true }),
-    });
-    expect(host.sshOptions).toEqual({ agentForwarding: true });
-  });
-
-  it("surfaces a 2.8 sudo password for the sanitizers to strip", () => {
-    const host = row({
-      sudoPassword: null,
-      terminalConfig: JSON.stringify({ sudoPassword: "legacy" }),
-    });
-    const stripped = stripSensitiveFields(host);
-    expect(stripped.hasSudoPassword).toBe(true);
-    expect(stripped).not.toHaveProperty("sudoPassword");
-    expect(JSON.stringify(stripped)).not.toContain("legacy");
-  });
-
   it("hides the owner's agent socket from a shared recipient", () => {
     const shared = sanitizeHostForRecipient(
       row({
@@ -516,3 +498,20 @@ describe("transformHostResponse terminal fields", () => {
     expect(shared.terminalConfig).toEqual({ keepaliveInterval: 9 });
   });
 });
+
+it("preserves a shared host sync identity for connect-only recipients", () => {
+  const result = sanitizeHostForRecipient(
+    { id: 9, syncId: "remote-host-41", password: "secret", notes: "private" },
+    "connect",
+  );
+  expect(result).toEqual({ id: 9, syncId: "remote-host-41" });
+});
+
+describe("keepsStoredSshAuth", () => {
+  it("keeps stored secrets only when no auth type is sent", () => {
+    expect(keepsStoredSshAuth(undefined)).toBe(true);
+    expect(keepsStoredSshAuth(null)).toBe(true);
+    expect(keepsStoredSshAuth("password")).toBe(false);
+    expect(keepsStoredSshAuth("none")).toBe(false);
+  });
+});
diff --git a/src/backend/tests/database/routes/host-plugin-settings.test.ts b/src/backend/tests/database/routes/host-plugin-settings.test.ts
index d3b6267c5..5f459cb02 100644
--- a/src/backend/tests/database/routes/host-plugin-settings.test.ts
+++ b/src/backend/tests/database/routes/host-plugin-settings.test.ts
@@ -6,7 +6,7 @@
  */
 
 import { beforeEach, describe, expect, it, vi } from "vitest";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 
 interface Row {
   pluginId: string;
diff --git a/src/backend/tests/database/routes/host-terminal-fields.test.ts b/src/backend/tests/database/routes/host-terminal-fields.test.ts
index bb062fbb1..a4120a5d9 100644
--- a/src/backend/tests/database/routes/host-terminal-fields.test.ts
+++ b/src/backend/tests/database/routes/host-terminal-fields.test.ts
@@ -10,17 +10,11 @@ vi.mock("../../../database/repositories/factory.js", () => ({
   }),
 }));
 
-const { mergeStoredTerminalFields, parseTerminalConfig } =
+const { mergeStoredSshOptions, parseTerminalConfig } =
   await import("../../../database/routes/host-terminal-fields.js");
 
 beforeEach(() => {
   state.stored = {
-    terminalConfig: JSON.stringify({
-      theme: "nord",
-      sudoPassword: "legacy-sudo",
-      agentSocketPath: "/owner/agent",
-      startupSnippetId: 1,
-    }),
     sshOptions: JSON.stringify({ agentSocketPath: "/owner/agent" }),
   };
 });
@@ -31,10 +25,10 @@ async function merge(
   sshOptions?: string,
 ) {
   const row: Record<string, unknown> = {
-    terminalConfig: "replaced wholesale",
+    terminalConfig: "from the payload",
     ...(sshOptions !== undefined ? { sshOptions } : {}),
   };
-  const error = await mergeStoredTerminalFields(row, hostData, 1, "o", isOwner);
+  const error = await mergeStoredSshOptions(row, hostData, 1, "o", isOwner);
   return { error, row };
 }
 
@@ -47,43 +41,32 @@ describe("parseTerminalConfig", () => {
   });
 });
 
-describe("mergeStoredTerminalFields", () => {
-  it("merges an editor save into the stored 2.8 keys instead of dropping them", async () => {
+describe("mergeStoredSshOptions", () => {
+  it("never writes terminalConfig, which has no column", async () => {
     const { error, row } = await merge({
       terminalConfig: { startupSnippetId: 4 },
     });
     expect(error).toBeNull();
-    expect(JSON.parse(row.terminalConfig as string)).toEqual({
-      theme: "nord",
-      sudoPassword: "legacy-sudo",
-      agentSocketPath: "/owner/agent",
-      startupSnippetId: 4,
-    });
-  });
-
-  it("leaves terminal_config alone when the payload has none", async () => {
-    const { row } = await merge({});
     expect(row).not.toHaveProperty("terminalConfig");
   });
 
-  it("drops the legacy sudo copy once the owner saves one on its own", async () => {
-    const { row } = await merge({ sudoPassword: "" });
-    expect(JSON.parse(row.terminalConfig as string)).not.toHaveProperty(
-      "sudoPassword",
+  it("leaves an owner's SSH options as sent", async () => {
+    const { row } = await merge(
+      {},
+      true,
+      JSON.stringify({ agentSocketPath: "/x" }),
     );
+    expect(JSON.parse(row.sshOptions as string)).toEqual({
+      agentSocketPath: "/x",
+    });
   });
 
-  it("keeps the owner's private keys through a shared editor's save", async () => {
+  it("keeps the owner's private SSH options through a shared editor's save", async () => {
     const { row } = await merge(
-      { terminalConfig: { startupSnippetId: 2 } },
+      {},
       false,
-      JSON.stringify({ keepaliveInterval: 9 }),
+      JSON.stringify({ keepaliveInterval: 9, agentSocketPath: "/editor" }),
     );
-    expect(JSON.parse(row.terminalConfig as string)).toMatchObject({
-      sudoPassword: "legacy-sudo",
-      agentSocketPath: "/owner/agent",
-      startupSnippetId: 2,
-    });
     expect(JSON.parse(row.sshOptions as string)).toEqual({
       keepaliveInterval: 9,
       agentSocketPath: "/owner/agent",
diff --git a/src/backend/tests/database/routes/plugins.test.ts b/src/backend/tests/database/routes/plugins.test.ts
index e0acfda86..ba0677911 100644
--- a/src/backend/tests/database/routes/plugins.test.ts
+++ b/src/backend/tests/database/routes/plugins.test.ts
@@ -6,6 +6,7 @@
  */
 
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { PluginManageError } from "../../../plugins/manage.js";
 import express from "express";
 import type { AddressInfo } from "node:net";
 import type { Server } from "node:http";
@@ -161,6 +162,45 @@ vi.mock("../../../database/repositories/factory.js", () => ({
   }),
 }));
 
+const manageMock = vi.hoisted(() => ({
+  listRegistry: vi.fn(),
+  installPlugin: vi.fn(),
+  updatePlugin: vi.fn(),
+  updateAllPlugins: vi.fn(),
+  uninstallPlugin: vi.fn(),
+  setPluginOptions: vi.fn(),
+  setAllPluginChannels: vi.fn(),
+  getPluginDataSummary: vi.fn(),
+  getPluginChangelog: vi.fn(),
+  deletePluginData: vi.fn(),
+  planStateChange: vi.fn(),
+  setPluginState: vi.fn(),
+  getDeveloperMode: vi.fn(),
+  setDeveloperMode: vi.fn(),
+  stageUpload: vi.fn(),
+  installUpload: vi.fn(),
+  isLinkedDesktop: vi.fn(async () => false),
+}));
+const auditMock = vi.hoisted(() => ({ logAudit: vi.fn(async () => {}) }));
+
+vi.mock("../../../plugins/manage.js", async (importOriginal) => ({
+  ...(await importOriginal<typeof import("../../../plugins/manage.js")>()),
+  ...manageMock,
+}));
+
+vi.mock("../../../utils/audit-logger.js", () => ({
+  logAudit: auditMock.logAudit,
+  getAuditUsername: async () => "admin",
+  getRequestMeta: () => ({ ipAddress: "127.0.0.1", userAgent: "test" }),
+}));
+
+const onboardingMock = vi.hoisted(() => ({
+  describeOnboardingPlugins: vi.fn(),
+  applyOnboardingChoices: vi.fn(),
+}));
+
+vi.mock("../../../plugins/onboarding.js", () => onboardingMock);
+
 const pluginRoutes = (await import("../../../database/routes/plugins.js"))
   .default;
 
@@ -236,9 +276,50 @@ describe("plugins route", () => {
       expect(body[0].contributes).toEqual({
         guest: true,
         guestViews: ["shared"],
+        tabs: [],
+        panels: [],
       });
       expect(body[0]).not.toHaveProperty("capabilities");
       expect(body[0]).not.toHaveProperty("lastError");
+      expect(body[0].version).toBe("");
+    });
+
+    it("leaves out dependencies that do not load on guest pages", async () => {
+      state.plugins.set(
+        "sharing",
+        makePlugin({
+          id: "sharing",
+          manifestJson: JSON.stringify({
+            contributes: {
+              guest: true,
+              guestViews: ["shared"],
+              tabs: [{ id: "collab", titleKey: "nav.collab" }],
+            },
+            dependencies: { terminal: "^1.0.0", desktop: "^1.0.0" },
+            optionalDependencies: { recorder: "^1.0.0" },
+          }),
+        }),
+      );
+      state.plugins.set(
+        "desktop",
+        makePlugin({
+          id: "desktop",
+          manifestJson: JSON.stringify({ contributes: { guest: true } }),
+        }),
+      );
+      state.plugins.set("terminal", makePlugin({ id: "terminal" }));
+
+      const res = await fetch(`${baseUrl}/plugins/public`);
+      const body = await res.json();
+      const sharing = body.find(
+        (plugin: { id: string }) => plugin.id === "sharing",
+      );
+
+      expect(sharing.dependencies).toEqual({ desktop: "^1.0.0" });
+      expect(sharing.optionalDependencies).toEqual({});
+      expect(sharing.contributes.tabs).toEqual([
+        { id: "collab", titleKey: "nav.collab" },
+      ]);
     });
 
     it("skips a plugin whose manifest does not parse", async () => {
@@ -314,6 +395,9 @@ describe("plugins route", () => {
       expect(body[0].contributes).toEqual({
         auth: { loginMethods: ["corp-sso"], secondFactors: [] },
       });
+      expect(body.map((plugin: { version: string }) => plugin.version)).toEqual(
+        ["", ""],
+      );
       for (const plugin of body) {
         expect(Object.keys(plugin).sort()).toEqual(
           [
@@ -579,4 +663,447 @@ describe("plugins route", () => {
       expect(state.grants).toHaveLength(1);
     });
   });
+  describe("onboarding plugin picker", () => {
+    const post = (body: unknown, user = "admin-1") =>
+      fetch(`${baseUrl}/plugins/onboarding/apply`, {
+        method: "POST",
+        headers: { "content-type": "application/json", "x-test-user-id": user },
+        body: JSON.stringify(body),
+      });
+
+    beforeEach(() => {
+      onboardingMock.describeOnboardingPlugins.mockReset();
+      onboardingMock.applyOnboardingChoices.mockReset();
+      manageMock.isLinkedDesktop.mockResolvedValue(false);
+      auditMock.logAudit.mockClear();
+    });
+
+    it("lists plugins for a manager only", async () => {
+      onboardingMock.describeOnboardingPlugins.mockResolvedValue({
+        pending: true,
+        managedByLinkedServer: false,
+        plugins: [],
+      });
+      const ok = await fetch(`${baseUrl}/plugins/onboarding`, {
+        headers: { "x-test-user-id": "admin-1" },
+      });
+      expect(ok.status).toBe(200);
+      expect(await ok.json()).toMatchObject({ pending: true });
+
+      const denied = await fetch(`${baseUrl}/plugins/onboarding`, {
+        headers: { "x-test-user-id": "user-2" },
+      });
+      expect(denied.status).toBe(403);
+    });
+
+    it("applies choices and audits each change", async () => {
+      onboardingMock.applyOnboardingChoices.mockResolvedValue({
+        resolved: {},
+        adjustments: [],
+        enabled: ["a"],
+        disabled: ["b"],
+        removed: ["c"],
+        failed: [],
+      });
+      const res = await post({
+        choices: { a: "enabled", b: "disabled", c: "remove" },
+      });
+      expect(res.status).toBe(200);
+      expect(onboardingMock.applyOnboardingChoices).toHaveBeenCalledWith(
+        { a: "enabled", b: "disabled", c: "remove" },
+        { dryRun: false },
+      );
+      const actions = auditMock.logAudit.mock.calls.map(
+        (call) => (call as unknown as [{ action: string }])[0].action,
+      );
+      expect(actions).toEqual([
+        "enable_plugin",
+        "disable_plugin",
+        "uninstall_plugin",
+      ]);
+    });
+
+    it("rejects bad choices", async () => {
+      expect((await post({})).status).toBe(400);
+      expect((await post({ choices: ["a"] })).status).toBe(400);
+      expect((await post({ choices: { a: "delete" } })).status).toBe(400);
+      expect(
+        (await post({ choices: { a: "enabled" }, dryRun: "yes" })).status,
+      ).toBe(400);
+      expect(onboardingMock.applyOnboardingChoices).not.toHaveBeenCalled();
+    });
+
+    it("refuses on a linked desktop and for non-managers", async () => {
+      manageMock.isLinkedDesktop.mockResolvedValue(true);
+      expect((await post({ choices: { a: "enabled" } })).status).toBe(409);
+      manageMock.isLinkedDesktop.mockResolvedValue(false);
+      expect((await post({ choices: { a: "enabled" } }, "user-2")).status).toBe(
+        403,
+      );
+      expect(onboardingMock.applyOnboardingChoices).not.toHaveBeenCalled();
+    });
+  });
+
+  describe("install, update, uninstall", () => {
+    const post = (path: string, body: unknown = {}, user = "admin-1") =>
+      fetch(`${baseUrl}${path}`, {
+        method: "POST",
+        headers: { "content-type": "application/json", "x-test-user-id": user },
+        body: JSON.stringify(body),
+      });
+
+    beforeEach(() => {
+      for (const fn of Object.values(manageMock)) fn.mockReset();
+      manageMock.isLinkedDesktop.mockResolvedValue(false);
+      auditMock.logAudit.mockClear();
+    });
+
+    it("installs a plugin as the caller and audits it", async () => {
+      manageMock.installPlugin.mockResolvedValue({
+        id: "docker",
+        version: "1.0.0",
+        state: "active",
+      });
+      const res = await post("/plugins/docker/install", {
+        version: "1.0.0",
+        capabilities: ["kv:own"],
+      });
+      expect(res.status).toBe(200);
+      expect(manageMock.installPlugin).toHaveBeenCalledWith("docker", {
+        version: "1.0.0",
+        channel: "stable",
+        userId: "admin-1",
+        capabilities: ["kv:own"],
+      });
+      expect(auditMock.logAudit).toHaveBeenCalledWith(
+        expect.objectContaining({
+          action: "install_plugin",
+          resourceId: "docker",
+        }),
+      );
+    });
+
+    it("installs on the beta channel when asked", async () => {
+      manageMock.installPlugin.mockResolvedValue({
+        id: "docker",
+        version: "1.1.0-beta.1",
+        state: "active",
+      });
+      const res = await post("/plugins/docker/install", {
+        channel: "beta",
+        capabilities: ["kv:own"],
+      });
+      expect(res.status).toBe(200);
+      expect(manageMock.installPlugin).toHaveBeenCalledWith(
+        "docker",
+        expect.objectContaining({ channel: "beta" }),
+      );
+      expect(
+        (
+          await post("/plugins/docker/install", {
+            channel: "nightly",
+            capabilities: [],
+          })
+        ).status,
+      ).toBe(400);
+    });
+
+    it("moves every plugin to one channel", async () => {
+      manageMock.setAllPluginChannels.mockResolvedValue({
+        changed: ["docker"],
+      });
+      const res = await post("/plugins/channel", { channel: "beta" });
+      expect(res.status).toBe(200);
+      expect(await res.json()).toEqual({ changed: ["docker"] });
+      expect(manageMock.setAllPluginChannels).toHaveBeenCalledWith("beta");
+      expect((await post("/plugins/channel", { channel: "x" })).status).toBe(
+        400,
+      );
+    });
+
+    it("saves a plugin's channel and refuses an unknown one", async () => {
+      manageMock.setPluginOptions.mockResolvedValue({
+        autoUpdate: false,
+        pinnedVersion: null,
+        channel: "beta",
+      });
+      const patch = (body: unknown) =>
+        fetch(`${baseUrl}/plugins/docker/options`, {
+          method: "PATCH",
+          headers: {
+            "content-type": "application/json",
+            "x-test-user-id": "admin-1",
+          },
+          body: JSON.stringify(body),
+        });
+      expect((await patch({ channel: "beta" })).status).toBe(200);
+      expect(manageMock.setPluginOptions).toHaveBeenCalledWith("docker", {
+        autoUpdate: undefined,
+        pinned: undefined,
+        channel: "beta",
+      });
+      expect((await patch({ channel: "nightly" })).status).toBe(400);
+    });
+
+    it("rejects a bad id or version before touching anything", async () => {
+      expect((await post("/plugins/..%2Fx/install")).status).toBe(400);
+      expect(
+        (await post("/plugins/docker/install", { version: 7 })).status,
+      ).toBe(400);
+      expect(
+        (await post("/plugins/docker/install", { capabilities: "kv:own" }))
+          .status,
+      ).toBe(400);
+      expect(
+        (await post("/plugins/docker/install", { capabilities: [1] })).status,
+      ).toBe(400);
+      expect(manageMock.installPlugin).not.toHaveBeenCalled();
+    });
+
+    it("passes a refusal through with its code and details", async () => {
+      manageMock.updatePlugin.mockRejectedValue(
+        new PluginManageError("new caps", 409, "CAPABILITIES_ADDED", {
+          capabilities: ["notify:send"],
+        }),
+      );
+      const res = await post("/plugins/docker/update", {});
+      expect(res.status).toBe(409);
+      expect(await res.json()).toMatchObject({
+        code: "CAPABILITIES_ADDED",
+        capabilities: ["notify:send"],
+      });
+      expect(manageMock.updatePlugin).toHaveBeenCalledWith("docker", {
+        version: undefined,
+        userId: "admin-1",
+        acceptCapabilities: false,
+        capabilities: undefined,
+      });
+    });
+
+    it("passes the consented list on an accepted update", async () => {
+      manageMock.updatePlugin.mockResolvedValue({
+        id: "docker",
+        version: "1.1.0",
+        state: "active",
+      });
+      await post("/plugins/docker/update", {
+        acceptCapabilities: true,
+        capabilities: ["notify:send"],
+      });
+      expect(manageMock.updatePlugin).toHaveBeenCalledWith("docker", {
+        version: undefined,
+        userId: "admin-1",
+        acceptCapabilities: true,
+        capabilities: ["notify:send"],
+      });
+    });
+
+    it("uninstalls", async () => {
+      manageMock.uninstallPlugin.mockResolvedValue({
+        id: "docker",
+        removed: { tables: ["p_docker_x"], kvKeys: 0 },
+      });
+      const res = await fetch(`${baseUrl}/plugins/docker`, {
+        method: "DELETE",
+      });
+      expect(res.status).toBe(200);
+      expect(manageMock.uninstallPlugin).toHaveBeenCalledWith("docker");
+    });
+
+    it("refuses changes on a linked desktop", async () => {
+      manageMock.isLinkedDesktop.mockResolvedValue(true);
+      const res = await post("/plugins/docker/install");
+      expect(res.status).toBe(409);
+      expect((await res.json()).code).toBe("MANAGED_BY_SERVER");
+      expect(manageMock.installPlugin).not.toHaveBeenCalled();
+    });
+
+    it("previews a state change without making it", async () => {
+      state.plugins.set("sample-plugin", makePlugin());
+      manageMock.planStateChange.mockResolvedValue({
+        enable: [],
+        disable: ["addon"],
+        missing: [],
+      });
+      const res = await fetch(
+        `${baseUrl}/plugins/sample-plugin/state?dryRun=1`,
+        {
+          method: "PATCH",
+          headers: { "content-type": "application/json" },
+          body: JSON.stringify({ enabled: false }),
+        },
+      );
+      expect(await res.json()).toMatchObject({ disable: ["addon"] });
+      expect(manageMock.setPluginState).not.toHaveBeenCalled();
+    });
+
+    it("returns an installed plugin's release notes", async () => {
+      manageMock.getPluginChangelog.mockResolvedValue([
+        { version: "1.0.0", changes: [{ type: "added", text: "First" }] },
+      ]);
+      const res = await fetch(`${baseUrl}/plugins/docker/changelog`);
+      expect(res.status).toBe(200);
+      expect(await res.json()).toEqual({
+        id: "docker",
+        releases: [
+          { version: "1.0.0", changes: [{ type: "added", text: "First" }] },
+        ],
+      });
+      expect(manageMock.getPluginChangelog).toHaveBeenCalledWith("docker");
+    });
+
+    it("answers 502 when the registry is unreachable", async () => {
+      manageMock.listRegistry.mockRejectedValue(new Error("offline"));
+      const res = await fetch(`${baseUrl}/plugins/registry`);
+      expect(res.status).toBe(502);
+    });
+
+    it("403s a non-admin on every management route", async () => {
+      const user = "regular-user";
+      const headers = {
+        "content-type": "application/json",
+        "x-test-user-id": user,
+      };
+      const calls = [
+        fetch(`${baseUrl}/plugins/registry`, { headers }),
+        post("/plugins/docker/install", {}, user),
+        post("/plugins/docker/update", {}, user),
+        post("/plugins/update-all", {}, user),
+        post("/plugins/channel", { channel: "beta" }, user),
+        fetch(`${baseUrl}/plugins/docker`, { method: "DELETE", headers }),
+        fetch(`${baseUrl}/plugins/docker/options`, {
+          method: "PATCH",
+          headers,
+          body: JSON.stringify({ autoUpdate: true }),
+        }),
+        fetch(`${baseUrl}/plugins/docker/data`, { headers }),
+        fetch(`${baseUrl}/plugins/docker/changelog`, { headers }),
+        fetch(`${baseUrl}/plugins/developer-mode`, { headers }),
+        fetch(`${baseUrl}/plugins/developer-mode`, {
+          method: "PUT",
+          headers,
+          body: JSON.stringify({ enabled: true }),
+        }),
+        fetch(`${baseUrl}/plugins/upload`, {
+          method: "POST",
+          headers: {
+            "content-type": "application/octet-stream",
+            "x-test-user-id": user,
+          },
+          body: Buffer.from("x"),
+        }),
+        post(`/plugins/upload/${"a".repeat(32)}/install`, {}, user),
+      ];
+      for (const res of await Promise.all(calls)) {
+        expect(res.status).toBe(403);
+      }
+      for (const fn of Object.values(manageMock)) {
+        if (fn !== manageMock.isLinkedDesktop) {
+          expect(fn).not.toHaveBeenCalled();
+        }
+      }
+    });
+  });
+
+  describe("developer mode and file installs", () => {
+    beforeEach(() => {
+      for (const fn of Object.values(manageMock)) fn.mockReset();
+      manageMock.isLinkedDesktop.mockResolvedValue(false);
+      auditMock.logAudit.mockClear();
+    });
+
+    it("reads and saves developer mode, auditing the change", async () => {
+      manageMock.getDeveloperMode.mockResolvedValue(true);
+      const read = await fetch(`${baseUrl}/plugins/developer-mode`);
+      expect(await read.json()).toEqual({ enabled: true, signedOnly: false });
+
+      const bad = await fetch(`${baseUrl}/plugins/developer-mode`, {
+        method: "PUT",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ enabled: "yes" }),
+      });
+      expect(bad.status).toBe(400);
+
+      const saved = await fetch(`${baseUrl}/plugins/developer-mode`, {
+        method: "PUT",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ enabled: false }),
+      });
+      expect(saved.status).toBe(200);
+      expect(manageMock.setDeveloperMode).toHaveBeenCalledWith(false);
+      expect(auditMock.logAudit).toHaveBeenCalledWith(
+        expect.objectContaining({ action: "plugin_developer_mode" }),
+      );
+    });
+
+    it("hands the raw upload to the stager", async () => {
+      manageMock.stageUpload.mockResolvedValue({ token: "t", id: "notes" });
+      const res = await fetch(`${baseUrl}/plugins/upload`, {
+        method: "POST",
+        headers: { "content-type": "application/octet-stream" },
+        body: Buffer.from("archive"),
+      });
+      expect(res.status).toBe(200);
+      const [buffer] = manageMock.stageUpload.mock.calls[0];
+      expect(Buffer.from(buffer).toString()).toBe("archive");
+    });
+
+    it("refuses an upload that is not octet-stream", async () => {
+      const res = await fetch(`${baseUrl}/plugins/upload`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({}),
+      });
+      expect(res.status).toBe(400);
+      expect(manageMock.stageUpload).not.toHaveBeenCalled();
+    });
+
+    it("passes the developer mode refusal through", async () => {
+      manageMock.stageUpload.mockRejectedValue(
+        new PluginManageError("off", 403, "DEVELOPER_MODE_OFF"),
+      );
+      const res = await fetch(`${baseUrl}/plugins/upload`, {
+        method: "POST",
+        headers: { "content-type": "application/octet-stream" },
+        body: Buffer.from("archive"),
+      });
+      expect(res.status).toBe(403);
+      expect((await res.json()).code).toBe("DEVELOPER_MODE_OFF");
+    });
+
+    it("installs a staged upload and audits it as unverified", async () => {
+      manageMock.installUpload.mockResolvedValue({
+        id: "notes",
+        version: "0.1.0",
+        state: "active",
+      });
+      const token = "b".repeat(32);
+      const res = await fetch(`${baseUrl}/plugins/upload/${token}/install`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ capabilities: ["kv:own"] }),
+      });
+      expect(res.status).toBe(200);
+      expect(manageMock.installUpload).toHaveBeenCalledWith(token, {
+        userId: "admin-1",
+        capabilities: ["kv:own"],
+      });
+      expect(auditMock.logAudit).toHaveBeenCalledWith(
+        expect.objectContaining({
+          action: "install_plugin_from_file",
+          resourceId: "notes",
+        }),
+      );
+    });
+
+    it("rejects a malformed upload token", async () => {
+      const res = await fetch(`${baseUrl}/plugins/upload/nope/install`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ capabilities: [] }),
+      });
+      expect(res.status).toBe(400);
+      expect(manageMock.installUpload).not.toHaveBeenCalled();
+    });
+  });
 });
diff --git a/src/backend/tests/database/routes/rbac-share-prune.test.ts b/src/backend/tests/database/routes/rbac-share-prune.test.ts
new file mode 100644
index 000000000..00da97cc0
--- /dev/null
+++ b/src/backend/tests/database/routes/rbac-share-prune.test.ts
@@ -0,0 +1,107 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+interface Grant {
+  id: number;
+  userId: string;
+  grantedBy: string;
+  permissionLevel: string;
+}
+
+const state = vi.hoisted(() => ({
+  hostGrants: [] as Grant[],
+  credentialGrants: [] as Grant[],
+}));
+
+const canManage = (grants: Grant[], userId: string) =>
+  userId === "owner" ||
+  grants.some((g) => g.userId === userId && g.permissionLevel === "manage");
+
+vi.mock("../../../utils/auth-manager.js", () => ({
+  AuthManager: {
+    getInstance: () => ({
+      createAuthMiddleware: () => vi.fn(),
+      createDataAccessMiddleware: () => vi.fn(),
+    }),
+  },
+}));
+
+vi.mock("../../../utils/permission-manager.js", () => ({
+  SHARE_PERMISSION_LEVELS: ["connect", "view", "edit", "manage"],
+  PermissionManager: {
+    getInstance: () => ({
+      canAccessHost: async (userId: string) => ({
+        hasAccess: canManage(state.hostGrants, userId),
+        isOwner: userId === "owner",
+      }),
+      requirePermission: () => vi.fn(),
+      requireAdmin: () => vi.fn(),
+      invalidateUserPermissionCache: vi.fn(),
+    }),
+  },
+}));
+
+vi.mock("../../../database/repositories/factory.js", () => ({
+  createCurrentHostResolutionRepository: () => ({
+    findHostOwnerId: async () => "owner",
+  }),
+  createCurrentRbacAccessRepository: () => ({
+    listHostAccess: async () => [...state.hostGrants],
+    revokeHostAccess: async (id: number) => {
+      state.hostGrants = state.hostGrants.filter((g) => g.id !== id);
+    },
+    listHostIdsGrantedBy: async (userId: string) =>
+      state.hostGrants.some((g) => g.grantedBy === userId) ? [1] : [],
+  }),
+  createCurrentCredentialRepository: () => ({
+    findById: async () => ({ id: 5, userId: "owner" }),
+  }),
+  createCurrentRoleRepository: () => ({ listUserRoleIds: async () => [] }),
+  createCurrentCredentialAccessRepository: () => ({
+    listForCredential: async () => [...state.credentialGrants],
+    findActiveGrant: async (_id: number, userId: string) =>
+      state.credentialGrants.find((g) => g.userId === userId) ?? null,
+    revoke: async (id: number) => {
+      state.credentialGrants = state.credentialGrants.filter(
+        (g) => g.id !== id,
+      );
+    },
+    listCredentialIdsGrantedBy: async () => [],
+  }),
+}));
+
+const { pruneHostGrants, pruneCredentialGrants } =
+  await import("../../../database/routes/rbac.js");
+
+const chain = (): Grant[] => [
+  { id: 2, userId: "bob", grantedBy: "alice", permissionLevel: "manage" },
+  { id: 3, userId: "carol", grantedBy: "bob", permissionLevel: "view" },
+  { id: 4, userId: "dave", grantedBy: "owner", permissionLevel: "view" },
+];
+
+describe("share pruning", () => {
+  beforeEach(() => {
+    state.hostGrants = chain();
+    state.credentialGrants = chain();
+  });
+
+  it("drops host shares passed on by someone who lost manage", async () => {
+    expect(await pruneHostGrants(1)).toBe(2);
+    expect(state.hostGrants.map((g) => g.userId)).toEqual(["dave"]);
+  });
+
+  it("keeps shares while the granter can still manage", async () => {
+    state.hostGrants.push({
+      id: 1,
+      userId: "alice",
+      grantedBy: "owner",
+      permissionLevel: "manage",
+    });
+    expect(await pruneHostGrants(1)).toBe(0);
+    expect(state.hostGrants).toHaveLength(4);
+  });
+
+  it("drops credential shares the same way", async () => {
+    expect(await pruneCredentialGrants(5)).toBe(2);
+    expect(state.credentialGrants.map((g) => g.userId)).toEqual(["dave"]);
+  });
+});
diff --git a/src/backend/tests/database/routes/ui-preferences.test.ts b/src/backend/tests/database/routes/ui-preferences.test.ts
index a9d84a469..9603e1afd 100644
--- a/src/backend/tests/database/routes/ui-preferences.test.ts
+++ b/src/backend/tests/database/routes/ui-preferences.test.ts
@@ -2,7 +2,7 @@ import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 import http from "node:http";
 import type { AddressInfo } from "node:net";
 import express from "express";
-import { UI_ONBOARDING_VERSION } from "../../../../types/ui-preferences.js";
+import { LEGACY_SEEN } from "../../../../types/onboarding.js";
 
 const state = vi.hoisted(() => ({
   row: null as { data: string } | null,
@@ -80,18 +80,16 @@ afterEach(async () => {
 
 describe("ui-preferences onboarding backfill", () => {
   it("treats an old account with no row as onboarded", async () => {
-    expect((await get()).onboarding.completedVersion).toBe(
-      UI_ONBOARDING_VERSION,
-    );
+    const onboarding = (await get()).onboarding;
+    expect(onboarding.seen).toEqual(LEGACY_SEEN);
+    expect(onboarding.baselinePending).toBe(true);
   });
 
   it("keeps an old account onboarded after its first write", async () => {
     await put({ overrides: { "plugin:x": { a: 1 } } });
     const stored = JSON.parse(state.row!.data);
-    expect(stored.onboarding.completedVersion).toBe(UI_ONBOARDING_VERSION);
-    expect((await get()).onboarding.completedVersion).toBe(
-      UI_ONBOARDING_VERSION,
-    );
+    expect(stored.onboarding.seen).toEqual(LEGACY_SEEN);
+    expect((await get()).onboarding.seen).toEqual(LEGACY_SEEN);
   });
 
   it("repairs a row an earlier write stored as not completed", async () => {
@@ -100,29 +98,61 @@ describe("ui-preferences onboarding backfill", () => {
         onboarding: { completedVersion: 0, completedAt: null, skipped: false },
       }),
     };
-    expect((await get()).onboarding.completedVersion).toBe(
-      UI_ONBOARDING_VERSION,
-    );
+    expect((await get()).onboarding.seen).toEqual(LEGACY_SEEN);
+  });
+
+  it("migrates the old completedVersion shape", async () => {
+    state.registeredAt = NEW;
+    state.row = {
+      data: JSON.stringify({
+        onboarding: { completedVersion: 2, completedAt: NEW, skipped: false },
+      }),
+    };
+    const onboarding = (await get()).onboarding;
+    expect(onboarding.seen).toEqual(LEGACY_SEEN);
+    expect(onboarding.baselinePending).toBe(true);
   });
 
   it("still shows onboarding to a new account", async () => {
     state.registeredAt = NEW;
     await put({ preset: "simple" });
-    expect((await get()).onboarding.completedVersion).toBe(0);
+    expect((await get()).onboarding.seen).toEqual({});
   });
+});
 
-  it("does not hide a newer onboarding version from someone who finished an older one", async () => {
-    state.row = {
-      data: JSON.stringify({
-        onboarding: {
-          completedVersion: UI_ONBOARDING_VERSION - 1,
-          completedAt: OLD,
-          skipped: false,
-        },
-      }),
-    };
-    expect((await get()).onboarding.completedVersion).toBe(
-      UI_ONBOARDING_VERSION - 1,
-    );
+describe("ui-preferences onboarding seen merge", () => {
+  beforeEach(() => {
+    state.registeredAt = NEW;
+  });
+
+  it("keeps the higher version per step", async () => {
+    await put({ onboarding: { seen: { welcome: 2, "rd:guacd": 1 } } });
+    await put({ onboarding: { seen: { welcome: 1, appearance: 1 } } });
+    expect((await get()).onboarding.seen).toEqual({
+      welcome: 2,
+      "rd:guacd": 1,
+      appearance: 1,
+    });
+  });
+
+  it("drops invalid seen entries", async () => {
+    await put({
+      onboarding: { seen: { ok: 1, zero: 0, text: "1", frac: 1.5 } },
+    });
+    expect((await get()).onboarding.seen).toEqual({ ok: 1 });
+  });
+
+  it("does not clear completedAt when a later write omits it", async () => {
+    await put({ onboarding: { completedAt: NEW, seen: { done: 1 } } });
+    await put({ onboarding: { seen: { "x:y": 1 } } });
+    expect((await get()).onboarding.completedAt).toBe(NEW);
+  });
+
+  it("clears baselinePending when told to", async () => {
+    state.registeredAt = OLD;
+    await put({ onboarding: { baselinePending: false, seen: { "x:y": 1 } } });
+    const onboarding = (await get()).onboarding;
+    expect(onboarding.baselinePending).toBe(false);
+    expect(onboarding.seen["x:y"]).toBe(1);
   });
 });
diff --git a/src/backend/tests/database/routes/user-external-account-routes.test.ts b/src/backend/tests/database/routes/user-external-account-routes.test.ts
index 7c62e979b..2f89c6547 100644
--- a/src/backend/tests/database/routes/user-external-account-routes.test.ts
+++ b/src/backend/tests/database/routes/user-external-account-routes.test.ts
@@ -13,10 +13,7 @@ interface User {
   id: string;
   username: string;
   isAdmin: boolean;
-  isOidc: boolean;
   passwordHash: string;
-  oidcIdentifier?: string | null;
-  clientId?: string;
 }
 
 const h = vi.hoisted(() => ({
@@ -30,14 +27,21 @@ const h = vi.hoisted(() => ({
   revoked: [] as string[],
 }));
 
+function withIdentities(user: User | undefined) {
+  if (!user) return null;
+  return {
+    ...user,
+    isExternal: h.identities.some((row) => row.userId === user.id),
+  };
+}
+
 vi.mock("../../../database/repositories/factory.js", () => ({
   createCurrentUserRepository: () => ({
-    findById: async (id: string) => h.users.get(id) ?? null,
+    findById: async (id: string) => withIdentities(h.users.get(id)),
     findByUsername: async (username: string) =>
-      [...h.users.values()].find((user) => user.username === username) ?? null,
-    update: async (id: string, changes: Partial<User>) => {
-      Object.assign(h.users.get(id)!, changes);
-    },
+      withIdentities(
+        [...h.users.values()].find((user) => user.username === username),
+      ),
   }),
   createCurrentUserAuthRepository: () => ({
     listIdentitiesForUser: async (userId: string) =>
@@ -84,7 +88,6 @@ beforeEach(async () => {
         id: "admin",
         username: "admin",
         isAdmin: true,
-        isOidc: false,
         passwordHash: "x",
       },
     ],
@@ -94,9 +97,7 @@ beforeEach(async () => {
         id: "sso",
         username: "alice-sso",
         isAdmin: false,
-        isOidc: true,
         passwordHash: "",
-        oidcIdentifier: "ldap:4:alice",
       },
     ],
     [
@@ -105,7 +106,6 @@ beforeEach(async () => {
         id: "local",
         username: "alice",
         isAdmin: false,
-        isOidc: false,
         passwordHash: "hash",
       },
     ],
@@ -149,16 +149,12 @@ function post(path: string, body: unknown, user = "admin") {
 }
 
 describe("linking an external account to a password account", () => {
-  it("moves the identities and the old identifier, then removes the external account", async () => {
-    const response = await post("/link-oidc-to-password", {
-      oidcUserId: "sso",
+  it("moves the identities, then removes the external account", async () => {
+    const response = await post("/link-external-to-password", {
+      externalUserId: "sso",
       targetUsername: "alice",
     });
     expect(response.status).toBe(200);
-    expect(h.users.get("local")).toMatchObject({
-      isOidc: true,
-      oidcIdentifier: "ldap:4:alice",
-    });
     expect(h.identities).toEqual([
       { userId: "local", providerId: "ldap:4", subject: "alice" },
     ]);
@@ -166,13 +162,13 @@ describe("linking an external account to a password account", () => {
     expect(h.deleted).toEqual(["sso"]);
   });
 
-  it("takes the new path and field name", async () => {
-    const response = await post("/link-external-to-password", {
-      externalUserId: "sso",
+  it("no longer takes the 2.8 path and field name", async () => {
+    const response = await post("/link-oidc-to-password", {
+      oidcUserId: "sso",
       targetUsername: "alice",
     });
-    expect(response.status).toBe(200);
-    expect(h.identities[0].userId).toBe("local");
+    expect(response.status).toBe(404);
+    expect(h.identities[0].userId).toBe("sso");
   });
 
   it("refuses a target that already signs in externally", async () => {
@@ -186,8 +182,8 @@ describe("linking an external account to a password account", () => {
 
   it("is for admins only", async () => {
     const response = await post(
-      "/link-oidc-to-password",
-      { oidcUserId: "sso", targetUsername: "alice" },
+      "/link-external-to-password",
+      { externalUserId: "sso", targetUsername: "alice" },
       "local",
     );
     expect(response.status).toBe(403);
@@ -195,8 +191,8 @@ describe("linking an external account to a password account", () => {
   });
 
   it("refuses a target that is not a password account", async () => {
-    const response = await post("/link-oidc-to-password", {
-      oidcUserId: "sso",
+    const response = await post("/link-external-to-password", {
+      externalUserId: "sso",
       targetUsername: "alice-sso",
     });
     expect(response.status).toBe(400);
@@ -207,17 +203,13 @@ describe("linking an external account to a password account", () => {
       id: "orig",
       username: "bob",
       isAdmin: false,
-      isOidc: true,
       passwordHash: "",
-      oidcIdentifier: "sub-9",
     });
     h.users.set("dup", {
       id: "dup",
       username: "bob-1",
       isAdmin: false,
-      isOidc: true,
       passwordHash: "",
-      oidcIdentifier: null,
     });
     h.identities.push(
       { userId: "orig", providerId: "legacy-oidc", subject: "sub-9" },
@@ -231,7 +223,6 @@ describe("linking an external account to a password account", () => {
 
     expect(response.status).toBe(200);
     expect(h.deleted).toEqual(["dup"]);
-    expect(h.users.get("orig")!.oidcIdentifier).toBe("sub-9");
     expect(
       h.identities
         .filter((row) => row.userId === "orig")
@@ -244,9 +235,7 @@ describe("linking an external account to a password account", () => {
       id: "other",
       username: "carol",
       isAdmin: false,
-      isOidc: true,
       passwordHash: "",
-      oidcIdentifier: "sub-x",
     });
     h.identities.push({
       userId: "other",
@@ -264,22 +253,6 @@ describe("linking an external account to a password account", () => {
 
 describe("unlinking", () => {
   it("drops the identities so the provider no longer signs in as the user", async () => {
-    await post("/link-oidc-to-password", {
-      oidcUserId: "sso",
-      targetUsername: "alice",
-    });
-    const response = await post("/unlink-oidc-from-password", {
-      userId: "local",
-    });
-    expect(response.status).toBe(200);
-    expect(h.users.get("local")).toMatchObject({
-      isOidc: false,
-      oidcIdentifier: null,
-    });
-    expect(h.identities).toEqual([]);
-  });
-
-  it("takes the new path", async () => {
     await post("/link-external-to-password", {
       externalUserId: "sso",
       targetUsername: "alice",
@@ -291,8 +264,15 @@ describe("unlinking", () => {
     expect(h.identities).toEqual([]);
   });
 
-  it("refuses to leave an account with no way in", async () => {
+  it("no longer takes the 2.8 path", async () => {
     const response = await post("/unlink-oidc-from-password", {
+      userId: "local",
+    });
+    expect(response.status).toBe(404);
+  });
+
+  it("refuses to leave an account with no way in", async () => {
+    const response = await post("/unlink-external-from-password", {
       userId: "sso",
     });
     expect(response.status).toBe(400);
diff --git a/src/backend/tests/database/routes/user-socket-ticket-routes.test.ts b/src/backend/tests/database/routes/user-socket-ticket-routes.test.ts
new file mode 100644
index 000000000..0b7312053
--- /dev/null
+++ b/src/backend/tests/database/routes/user-socket-ticket-routes.test.ts
@@ -0,0 +1,100 @@
+/**
+ * The web app's socket ticket. The cookie rides along from a sibling
+ * subdomain too, so a ticket only goes to a page on this server.
+ */
+
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import express, { type RequestHandler } from "express";
+import cookieParser from "cookie-parser";
+import request from "supertest";
+import type { AuthManager } from "../../../utils/auth-manager.js";
+
+const state = vi.hoisted(() => ({
+  sessionId: "s1" as string | undefined,
+  apiKeyId: undefined as string | undefined,
+}));
+
+vi.mock("../../../utils/logger.js", () => ({
+  authLogger: { warn: vi.fn(), error: vi.fn(), info: vi.fn() },
+}));
+
+const { registerUserSocketTicketRoutes } =
+  await import("../../../database/routes/user-socket-ticket-routes.js");
+
+const issueSocketTicket = vi.fn(
+  async (userId: string, sessionId: string) => `ticket:${userId}:${sessionId}`,
+);
+
+const authenticate: RequestHandler = (req, _res, next) => {
+  Object.assign(req, {
+    userId: "u1",
+    sessionId: state.sessionId,
+    apiKeyId: state.apiKeyId,
+  });
+  next();
+};
+
+function app() {
+  const router = express.Router();
+  registerUserSocketTicketRoutes(router, {
+    authenticateJWT: authenticate,
+    authManager: { issueSocketTicket } as unknown as AuthManager,
+  });
+  const server = express();
+  server.use(cookieParser());
+  server.use("/users", router);
+  return server;
+}
+
+beforeEach(() => {
+  state.sessionId = "s1";
+  state.apiKeyId = undefined;
+  issueSocketTicket.mockClear();
+});
+
+describe("POST /users/ws-ticket", () => {
+  it("gives this server's own page a ticket for its session", async () => {
+    const res = await request(app())
+      .post("/users/ws-ticket")
+      .set("Host", "termix.example.com")
+      .set("Origin", "https://termix.example.com")
+      .set("Cookie", "jwt=session-token");
+
+    expect(res.status).toBe(200);
+    expect(res.body.ticket).toBe("ticket:u1:s1");
+    expect(res.headers["cache-control"]).toBe("no-store");
+  });
+
+  it("trusts the browser's same-origin mark behind a proxy that rewrites Host", async () => {
+    const res = await request(app())
+      .post("/users/ws-ticket")
+      .set("Host", "10.0.0.5:8080")
+      .set("Origin", "https://termix.example.com")
+      .set("Sec-Fetch-Site", "same-origin")
+      .set("Cookie", "jwt=session-token");
+
+    expect(res.status).toBe(200);
+  });
+
+  it("refuses a page on a sibling subdomain", async () => {
+    const res = await request(app())
+      .post("/users/ws-ticket")
+      .set("Host", "termix.example.com")
+      .set("Origin", "https://evil.example.com")
+      .set("Sec-Fetch-Site", "same-site")
+      .set("Cookie", "jwt=session-token");
+
+    expect(res.status).toBe(403);
+    expect(issueSocketTicket).not.toHaveBeenCalled();
+  });
+
+  it("refuses an API key, which has no session to bind to", async () => {
+    state.sessionId = undefined;
+    state.apiKeyId = "key-1";
+
+    const res = await request(app()).post("/users/ws-ticket");
+
+    expect(res.status).toBe(401);
+    expect(issueSocketTicket).not.toHaveBeenCalled();
+  });
+});
diff --git a/src/backend/tests/database/version-route.test.ts b/src/backend/tests/database/version-route.test.ts
index a81bd9f7e..d7bbd8f1e 100644
--- a/src/backend/tests/database/version-route.test.ts
+++ b/src/backend/tests/database/version-route.test.ts
@@ -21,7 +21,10 @@ const route = ast.statements.find(
 ) as ts.ExpressionStatement;
 const callback = (route.expression as ts.CallExpression).arguments[2];
 
-async function invoke(fetchGitHubAPI: ReturnType<typeof vi.fn>) {
+async function invoke(
+  fetchLatestRelease: ReturnType<typeof vi.fn>,
+  channel = "stable",
+) {
   const handler = runInNewContext(
     ts.transpileModule(`(${callback.getText(ast)})`, {
       compilerOptions: { target: ts.ScriptTarget.ES2022 },
@@ -29,10 +32,9 @@ async function invoke(fetchGitHubAPI: ReturnType<typeof vi.fn>) {
     {
       getLocalVersion: () => "2.7.1",
       databaseLogger: { warn: vi.fn(), error: vi.fn() },
-      fetchGitHubAPI,
-      REPO_OWNER: "Termix-SSH",
-      REPO_NAME: "Termix",
-      compareSemver: () => -1,
+      fetchLatestRelease,
+      getCoreChannel: async () => channel,
+      updateStatus: () => "requires_update",
     },
   );
   const res = { json: vi.fn(), status: vi.fn(), send: vi.fn() };
@@ -50,23 +52,33 @@ it("keeps the installed version when the update service is unreachable", async (
   expect(res.status).not.toHaveBeenCalled();
 });
 it("keeps the installed version if the release has no parseable version", async () => {
-  const res = await invoke(
-    vi.fn().mockResolvedValue({ data: { tag_name: "nightly" } }),
-  );
+  const res = await invoke(vi.fn().mockResolvedValue(null));
   expect(res.json).toHaveBeenCalledWith({
     localVersion: "2.7.1",
     status: "unknown",
+    channel: "stable",
   });
 });
 it("still reports a newer release when the check succeeds", async () => {
   const res = await invoke(
-    vi.fn().mockResolvedValue({ data: { tag_name: "2.8.0" } }),
+    vi.fn().mockResolvedValue({ version: "2.8.0", tagName: "v2.8.0" }),
   );
   expect(res.json).toHaveBeenCalledWith(
     expect.objectContaining({
       localVersion: "2.7.1",
       status: "requires_update",
       remoteVersion: "2.8.0",
+      channel: "stable",
     }),
   );
 });
+it("checks the channel the instance is on", async () => {
+  const fetchLatest = vi
+    .fn()
+    .mockResolvedValue({ version: "2.8.0-beta.1", tagName: "v2.8.0-beta.1" });
+  const res = await invoke(fetchLatest, "beta");
+  expect(fetchLatest).toHaveBeenCalledWith("beta");
+  expect(res.json).toHaveBeenCalledWith(
+    expect.objectContaining({ channel: "beta", remoteVersion: "2.8.0-beta.1" }),
+  );
+});
diff --git a/src/backend/tests/electron/after-pack.test.ts b/src/backend/tests/electron/after-pack.test.ts
index bceb44609..e69137588 100644
--- a/src/backend/tests/electron/after-pack.test.ts
+++ b/src/backend/tests/electron/after-pack.test.ts
@@ -28,7 +28,7 @@ describe("afterPack plugin SDK copy", () => {
     fs.mkdirSync(path.join(sdk, "src"));
     fs.writeFileSync(
       path.join(sdk, "package.json"),
-      '{"name":"@termix/plugin-sdk"}',
+      '{"name":"@termix-ssh/plugin-sdk"}',
     );
     fs.writeFileSync(path.join(sdk, "dist", "settings.js"), "export {};");
     fs.writeFileSync(path.join(sdk, "src", "settings.ts"), "");
@@ -41,7 +41,7 @@ describe("afterPack plugin SDK copy", () => {
         resources,
         "app.asar.unpacked",
         "node_modules",
-        "@termix",
+        "@termix-ssh",
         "plugin-sdk",
       ),
     );
diff --git a/src/backend/tests/electron/c2s-runtime.test.ts b/src/backend/tests/electron/c2s-runtime.test.ts
index 8db0a24e4..734eed276 100644
--- a/src/backend/tests/electron/c2s-runtime.test.ts
+++ b/src/backend/tests/electron/c2s-runtime.test.ts
@@ -72,9 +72,12 @@ function setup() {
       runtimes.get(name).status = { connected: false, reason: error };
     },
     createC2SFailure: (error: string) => ({ success: false, error }),
+    normalizeC2SErrorMessage: (message: string) => message,
+    C2S_REMOTE_SESSION_EXPIRED_ERROR: "expired",
   });
   vm.runInContext(
-    section("async function testC2SRelay(", "async function testC2STunnel(") +
+    section("async function openC2SRelay(", "async function testC2SRelay(") +
+      section("async function testC2SRelay(", "async function testC2STunnel(") +
       section("async function startC2STunnel(", "function stopAllC2STunnels("),
     context,
   );
@@ -140,4 +143,37 @@ describe("client tunnel runtime authentication", () => {
     ).toEqual({ success: false, error: "Tunnel stopped" });
     expect(sockets).toHaveLength(1);
   });
+
+  it("keeps the tunnel connected when one of its connections fails", async () => {
+    const { context, runtimes, sockets } = setup();
+    runtimes.set("web", { status: { connected: true, status: "CONNECTED" } });
+    const local = () =>
+      Object.assign(new EventEmitter(), {
+        destroy: vi.fn(),
+        write: vi.fn(),
+      });
+
+    const first = local();
+    await context.openC2SRelay({ name: "web" }, "127.0.0.1", 8006, first);
+    await vi.waitFor(() => expect(sockets).toHaveLength(1));
+    first.emit("error", new Error("ECONNRESET"));
+    sockets[0].emit(
+      "message",
+      Buffer.from(JSON.stringify({ type: "error", error: "refused" })),
+      false,
+    );
+    expect(runtimes.get("web").status.connected).toBe(true);
+
+    await context.openC2SRelay({ name: "web" }, "127.0.0.1", 8006, local());
+    await vi.waitFor(() => expect(sockets).toHaveLength(2));
+    sockets[1].emit(
+      "message",
+      Buffer.from(JSON.stringify({ type: "error", error: "expired" })),
+      false,
+    );
+    expect(runtimes.get("web").status).toMatchObject({
+      connected: false,
+      reason: "expired",
+    });
+  });
 });
diff --git a/src/backend/tests/electron/local-shell.test.ts b/src/backend/tests/electron/local-shell.test.ts
index d8f84c12d..1d085023e 100644
--- a/src/backend/tests/electron/local-shell.test.ts
+++ b/src/backend/tests/electron/local-shell.test.ts
@@ -2,13 +2,21 @@ import { createRequire } from "node:module";
 import { describe, expect, it } from "vitest";
 
 const require = createRequire(import.meta.url);
-const { resolveLocalShell } =
+const { resolveLocalShell, repairSpawnHelpers } =
   require("../../../../electron/local-shell.cjs") as {
     resolveLocalShell: (
       platform: NodeJS.Platform,
       requestedShell?: string,
       env?: NodeJS.ProcessEnv,
+      exists?: (file: string) => boolean,
     ) => { file: string; args: string[] };
+    repairSpawnHelpers: (
+      ptyDir: string,
+      fsImpl: {
+        statSync: (file: string) => { mode: number };
+        chmodSync: (file: string, mode: number) => void;
+      },
+    ) => number;
   };
 
 describe("resolveLocalShell", () => {
@@ -27,9 +35,49 @@ describe("resolveLocalShell", () => {
   });
 
   it("preserves the configured shell on non-Windows platforms", () => {
-    expect(resolveLocalShell("linux", "wsl", { SHELL: "/bin/fish" })).toEqual({
+    expect(
+      resolveLocalShell("linux", "wsl", { SHELL: "/bin/fish" }, () => true),
+    ).toEqual({
       file: "/bin/fish",
       args: ["-l"],
     });
   });
+
+  it("skips a configured shell that is not installed", () => {
+    const installed = new Set(["/bin/bash", "/bin/zsh"]);
+    expect(
+      resolveLocalShell(
+        "darwin",
+        undefined,
+        { SHELL: "/opt/homebrew/bin/fish" },
+        (file) => installed.has(file),
+      ).file,
+    ).toBe("/bin/zsh");
+  });
+});
+
+describe("repairSpawnHelpers", () => {
+  it("restores the execute bit in the unpacked copy only when it is missing", () => {
+    const modes = new Map<string, number>();
+    const chmods: Array<[string, number]> = [];
+    const fsImpl = {
+      statSync: (file: string) => {
+        const mode = modes.get(file);
+        if (mode === undefined) throw new Error("ENOENT");
+        return { mode };
+      },
+      chmodSync: (file: string, mode: number) => {
+        chmods.push([file, mode]);
+      },
+    };
+    const dir =
+      "/Applications/Termix.app/Contents/Resources/app.asar/node_modules/node-pty";
+    const unpacked = dir.replace("app.asar", "app.asar.unpacked");
+    const release = `${unpacked}/build/Release/spawn-helper`;
+    modes.set(release.split("/").join(require("node:path").sep), 0o644);
+    modes.set(release, 0o644);
+    expect(repairSpawnHelpers(dir, fsImpl)).toBe(1);
+    expect(chmods[0][1] & 0o111).not.toBe(0);
+    expect(chmods[0][0]).toContain("app.asar.unpacked");
+  });
 });
diff --git a/src/backend/tests/fixtures/upgrade/db.sqlite b/src/backend/tests/fixtures/upgrade/db.sqlite
deleted file mode 100644
index 5ebe6743f..000000000
Binary files a/src/backend/tests/fixtures/upgrade/db.sqlite and /dev/null differ
diff --git a/src/backend/tests/fixtures/upgrade/files/session_logs/d4-user-admin/d4-session.cast b/src/backend/tests/fixtures/upgrade/files/session_logs/d4-user-admin/d4-session.cast
deleted file mode 100644
index dacf259c3..000000000
--- a/src/backend/tests/fixtures/upgrade/files/session_logs/d4-user-admin/d4-session.cast
+++ /dev/null
@@ -1 +0,0 @@
-d4 ssh recording
diff --git a/src/backend/tests/fixtures/upgrade/files/session_recordings/guacamole/d4-rdp.guac b/src/backend/tests/fixtures/upgrade/files/session_recordings/guacamole/d4-rdp.guac
deleted file mode 100644
index 2ff39ef27..000000000
--- a/src/backend/tests/fixtures/upgrade/files/session_recordings/guacamole/d4-rdp.guac
+++ /dev/null
@@ -1 +0,0 @@
-d4 rdp recording
diff --git a/src/backend/tests/fixtures/upgrade/fixture.env b/src/backend/tests/fixtures/upgrade/fixture.env
deleted file mode 100644
index 70b6439d2..000000000
--- a/src/backend/tests/fixtures/upgrade/fixture.env
+++ /dev/null
@@ -1,4 +0,0 @@
-JWT_SECRET=059e69f1248271031d958a76bd60280f09b8c99fa3414a03de84d0af886c1e4cef0ccbb4d5f1ef2d05c3607b89805134aa9cf985ebaddd3a01d7847a0772c2d7
-DATABASE_KEY=a0e3e3b679a351d0daeb0f790ecfce906c3169d966e81d2e6be89873ab4b191a
-ENCRYPTION_KEY=1c06c6a7605c71dc4724d4d39d17ea45afd44e3325115ac4e1e21e9d55f73030
-INTERNAL_AUTH_TOKEN=d1ae0f2e46a0913996148702cf5a4decb1da7b68a39098ac3a75a00f0d1278e2
diff --git a/src/backend/tests/fixtures/upgrade/rows.ts b/src/backend/tests/fixtures/upgrade/rows.ts
deleted file mode 100644
index c740d0385..000000000
--- a/src/backend/tests/fixtures/upgrade/rows.ts
+++ /dev/null
@@ -1,922 +0,0 @@
-/**
- * The rows in the committed 2.8 fixture (db.sqlite next to this file), as
- * plain data. scripts/build-upgrade-fixture.ts writes them into the real 2.8
- * schema, encrypting the columns 2.8 kept encrypted with each user's data
- * key, and the upgrade test reads them back through 2.9.0's plugins.
- *
- * Every value a test looks for carries "d4" so it is easy to find.
- */
-
-export type Row = Record<string, unknown>;
-
-/** Every password user signs in with this. */
-export const FIXTURE_PASSWORD = "d4-upgrade-password";
-
-/** The TOTP user's secret (base32) and 2.8 backup codes. */
-export const TOTP_SECRET = "JBSWY3DPEHPK3PXPJBSWY3DPEHPK3PXP";
-export const TOTP_BACKUP_CODES = ["D4BACKUP1", "D4BACKUP2", "D4BACKUP3"];
-
-export const USERS = {
-  admin: "d4-user-admin",
-  alice: "d4-user-alice",
-  totp: "d4-user-totp",
-  passkey: "d4-user-passkey",
-  sso: "d4-user-sso",
-  ldap: "d4-user-ldap",
-} as const;
-
-export const HOSTS = {
-  password: 1,
-  key: 2,
-  credential: 3,
-  none: 4,
-  agent: 5,
-  opkssh: 6,
-  stepca: 7,
-  tailscale: 8,
-  vault: 9,
-  warpgate: 10,
-  rdpOnly: 11,
-  plain: 12,
-  desktop: 13,
-} as const;
-
-/** The 2.8 auth_type each host was saved with. */
-export const HOST_AUTH_TYPES: Record<number, string> = {
-  [HOSTS.password]: "password",
-  [HOSTS.key]: "key",
-  [HOSTS.credential]: "credential",
-  [HOSTS.none]: "none",
-  [HOSTS.agent]: "agent",
-  [HOSTS.opkssh]: "opkssh",
-  [HOSTS.stepca]: "stepca",
-  [HOSTS.tailscale]: "tailscale",
-  [HOSTS.vault]: "vault",
-  [HOSTS.warpgate]: "warpgate",
-  [HOSTS.rdpOnly]: "password",
-  [HOSTS.plain]: "password",
-  [HOSTS.desktop]: "password",
-};
-
-/**
- * 2.8 stored recording paths absolute. The fixture writes this token instead,
- * and the harness swaps in the DATA_DIR it boots from, where it also copies
- * the files under upgrade/files.
- */
-export const DATA_DIR_TOKEN = "{{DATA_DIR}}";
-export const RECORDING_FILES = {
-  ssh: "session_logs/d4-user-admin/d4-session.cast",
-  rdp: "session_recordings/guacamole/d4-rdp.guac",
-};
-
-export const SSO_PROVIDER_ID = 1;
-export const LDAP_PROVIDER_ID = 2;
-/** 2.8's seeded user role, which the upgrade must leave as it was. */
-export const USER_ROLE_PERMISSIONS_28 = [
-  "hosts.*",
-  "snippets.*",
-  "automations.*",
-  "credentials.*",
-  "ai.*",
-];
-export const OPERATORS_ROLE_ID = 10;
-export const OPERATORS_PERMISSIONS = [
-  "hosts.view",
-  "credentials.view",
-  "snippets.*",
-  "automations.run",
-  "ai.use",
-];
-
-/** 2.8's electron/remote-sync-entities.cjs SYNCED_ENTITY_TYPES. */
-export const SYNCED_ENTITY_TYPES_28 = [
-  "sshCredentials",
-  "vaultProfiles",
-  "sshFolders",
-  "snippetFolders",
-  "hosts",
-  "snippets",
-  "dashboardServiceLinks",
-  "homepageItems",
-  "userPreferences",
-];
-
-const T = "2026-05-01T10:00:00.000Z";
-const LATER = "2099-01-01T00:00:00.000Z";
-
-/**
- * Columns 2.8 stored encrypted with the owning user's data key, as
- * [table, column, field name, column holding the user id]. The record id is
- * the row id, except on users where it is the user id.
- */
-export const ENCRYPTED_COLUMNS: Array<[string, string, string, string]> = [
-  ["users", "totp_secret", "totpSecret", "id"],
-  ["users", "totp_backup_codes", "totpBackupCodes", "id"],
-  ["ssh_data", "password", "password", "user_id"],
-  ["ssh_data", "key", "key", "user_id"],
-  ["ssh_data", "key_password", "keyPassword", "user_id"],
-  ["ssh_data", "sudo_password", "sudoPassword", "user_id"],
-  ["ssh_data", "rdp_password", "rdpPassword", "user_id"],
-  ["ssh_data", "vnc_password", "vncPassword", "user_id"],
-  ["ssh_data", "telnet_password", "telnetPassword", "user_id"],
-  ["ssh_credentials", "password", "password", "user_id"],
-  ["ssh_credentials", "private_key", "privateKey", "user_id"],
-  ["ssh_credentials", "key", "key", "user_id"],
-  ["ssh_credentials", "public_key", "publicKey", "user_id"],
-  ["notification_channels", "config", "config", "user_id"],
-  ["opkssh_tokens", "ssh_cert", "sshCert", "user_id"],
-  ["opkssh_tokens", "private_key", "privateKey", "user_id"],
-  ["vault_tokens", "ssh_cert", "sshCert", "user_id"],
-  ["vault_tokens", "private_key", "privateKey", "user_id"],
-  ["termix_identity_ca", "private_key", "privateKey", "user_id"],
-  ["ai_providers", "api_key", "apiKey", "user_id"],
-  ["secret_sources", "token", "token", "user_id"],
-];
-
-const PUBLIC_KEY =
-  "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGd4ZDRkNGQ0ZDRkNGQ0ZDRkNGQ0ZDRkNGQ0ZDRkNGQ0 d4";
-const PRIVATE_KEY =
-  "-----BEGIN OPENSSH PRIVATE KEY-----\nd4-private-key\n-----END OPENSSH PRIVATE KEY-----";
-
-function host(id: number, name: string, extra: Row = {}): Row {
-  return {
-    id,
-    user_id: USERS.admin,
-    name,
-    ip: `10.4.0.${id}`,
-    port: 22,
-    username: "root",
-    folder: "d4-folder",
-    tags: JSON.stringify(["d4"]),
-    auth_type: HOST_AUTH_TYPES[id],
-    sync_id: `d4-sync-host-${id}`,
-    created_at: T,
-    updated_at: T,
-    ...extra,
-  };
-}
-
-const HOST_ROWS: Row[] = [
-  // Every plugin switch changed away from its 2.8 default.
-  host(HOSTS.password, "d4-password", {
-    password: "d4-host-password",
-    sudo_password: "d4-sudo",
-    enable_terminal: 1,
-    enable_command_history: 0,
-    enable_terminal_toolbar: 0,
-    enable_session_logging: 0,
-    allow_session_sharing: 0,
-    enable_file_manager: 0,
-    default_path: "/srv/d4",
-    scp_legacy: 1,
-    enable_tunnel: 1,
-    tunnel_connections: JSON.stringify([
-      {
-        sourcePort: 8080,
-        endpointPort: 80,
-        endpointHost: "d4-key",
-        autoStart: false,
-      },
-    ]),
-    enable_web_ui: 1,
-    web_ui_config: JSON.stringify({
-      endpoints: [
-        { id: "grafana", label: "d4-grafana", port: 3000, protocol: "http" },
-      ],
-    }),
-    enable_tmux_monitor: 1,
-    enable_docker: 1,
-    docker_config: JSON.stringify({ runtime: "podman" }),
-    enable_ai_assistant: 1,
-    // Its own terminal look, behavior and SSH options, all in one JSON.
-    terminal_config: JSON.stringify({
-      theme: "dracula",
-      fontSize: 16,
-      cursorStyle: "block",
-      autoTmux: true,
-      sudoPasswordAutoFill: true,
-      localEcho: "on",
-      keepaliveInterval: 30,
-      keepaliveCountMax: 4,
-      allowLegacyAlgorithms: false,
-      agentForwarding: true,
-      environmentVariables: [{ key: "D4", value: "yes" }],
-      startupSnippetId: 1,
-    }),
-    quick_actions: JSON.stringify([{ name: "d4-uptime", snippetId: 1 }]),
-    mac_address: "AA:BB:CC:DD:EE:04",
-    wol_broadcast_address: "10.4.0.255",
-    stats_config: JSON.stringify({
-      statusCheckEnabled: false,
-      statusCheckInterval: 90,
-      metricsEnabled: false,
-      useGlobalMetricsInterval: false,
-      metricsInterval: 45,
-      enabledWidgets: ["cpu", "memory"],
-    }),
-  }),
-  host(HOSTS.key, "d4-key", {
-    // Behavior only: this host kept following the user's look.
-    terminal_config: JSON.stringify({ passwordPromptAutoFill: false }),
-    key: PRIVATE_KEY,
-    key_password: "d4-key-pass",
-    key_type: "ssh-ed25519",
-    enable_proxmox: 1,
-    proxmox_config: JSON.stringify({
-      apiUrl: "https://pve.d4.example:8006",
-      tokenId: "root@pam!d4",
-    }),
-    enable_proxmox_stats: 1,
-    proxmox_stats_config: JSON.stringify({ node: "d4-node" }),
-  }),
-  host(HOSTS.credential, "d4-credential", { credential_id: 1 }),
-  host(HOSTS.none, "d4-none"),
-  host(HOSTS.agent, "d4-agent"),
-  host(HOSTS.opkssh, "d4-opkssh"),
-  host(HOSTS.stepca, "d4-stepca"),
-  host(HOSTS.tailscale, "d4-tailscale"),
-  host(HOSTS.vault, "d4-vault", { vault_profile_id: 1 }),
-  host(HOSTS.warpgate, "d4-warpgate"),
-  // A host from before the per-protocol switches: connection_type alone made
-  // it an RDP host with SSH off.
-  host(HOSTS.rdpOnly, "d4-rdp", {
-    connection_type: "rdp",
-    rdp_user: "d4-rdp-user",
-    rdp_password: "d4-rdp-password",
-  }),
-  host(HOSTS.desktop, "d4-desktop", {
-    enable_rdp: 1,
-    enable_vnc: 1,
-    enable_telnet: 1,
-    rdp_port: 3390,
-    vnc_port: 5901,
-    telnet_port: 2323,
-    rdp_user: "d4-rdp-user",
-    rdp_password: "d4-rdp-password",
-    rdp_domain: "D4-DOMAIN",
-    rdp_auth_type: "direct",
-    vnc_user: "d4-vnc-user",
-    vnc_password: "d4-vnc-password",
-    vnc_auth_type: "direct",
-    // Telnet through the saved credential, which has no password of its own.
-    telnet_auth_type: "credential",
-    telnet_credential_id: 1,
-    rdp_security: "nla",
-    rdp_ignore_cert: 1,
-    guacamole_config: JSON.stringify({ colorDepth: 24 }),
-  }),
-  // Touches nothing, so it has to keep reading 2.8's defaults.
-  host(HOSTS.plain, "d4-plain"),
-];
-
-export const ROWS: Record<string, Row[]> = {
-  users: [
-    { id: USERS.admin, username: "d4-admin", is_admin: 1 },
-    { id: USERS.alice, username: "d4-alice" },
-    {
-      id: USERS.totp,
-      username: "d4-totp",
-      totp_enabled: 1,
-      totp_secret: TOTP_SECRET,
-      totp_backup_codes: JSON.stringify(TOTP_BACKUP_CODES),
-    },
-    { id: USERS.passkey, username: "d4-passkey" },
-    {
-      id: USERS.sso,
-      username: "d4-sso",
-      password_hash: "",
-      is_oidc: 1,
-      oidc_identifier: "d4-oidc-subject",
-      sso_provider_id: SSO_PROVIDER_ID,
-    },
-    {
-      id: USERS.ldap,
-      username: "d4-ldap",
-      password_hash: "",
-      is_oidc: 1,
-      oidc_identifier: `ldap:${LDAP_PROVIDER_ID}:d4-ldap-dn`,
-      sso_provider_id: LDAP_PROVIDER_ID,
-    },
-  ].map((user) => ({ registered_at: T, ...user })),
-
-  roles: [
-    {
-      id: 1,
-      name: "admin",
-      display_name: "rbac.roles.admin",
-      description: "Administrator with full access",
-      is_system: 1,
-      permissions: JSON.stringify(["*"]),
-    },
-    {
-      id: 2,
-      name: "user",
-      display_name: "rbac.roles.user",
-      description: "Regular user",
-      is_system: 1,
-      permissions: JSON.stringify(USER_ROLE_PERMISSIONS_28),
-    },
-    {
-      id: OPERATORS_ROLE_ID,
-      name: "d4-operators",
-      display_name: "D4 operators",
-      is_system: 0,
-      permissions: JSON.stringify(OPERATORS_PERMISSIONS),
-    },
-  ],
-  user_roles: [
-    { user_id: USERS.admin, role_id: 1 },
-    ...[USERS.alice, USERS.totp, USERS.passkey, USERS.sso, USERS.ldap].map(
-      (userId) => ({ user_id: userId, role_id: 2 }),
-    ),
-    {
-      user_id: USERS.alice,
-      role_id: OPERATORS_ROLE_ID,
-      granted_by: USERS.admin,
-    },
-  ],
-
-  ssh_credentials: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      name: "d4-credential",
-      auth_type: "key",
-      username: "deploy",
-      private_key: PRIVATE_KEY,
-      public_key: PUBLIC_KEY,
-      key_type: "ssh-ed25519",
-      sync_id: "d4-sync-credential",
-    },
-  ],
-  ssh_folders: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      name: "d4-folder",
-      sync_id: "d4-sync-folder",
-    },
-  ],
-  vault_profiles: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      name: "d4-vault",
-      vault_addr: "https://vault.d4.example",
-      ssh_mount: "ssh",
-      ssh_role: "admin",
-      shared: 0,
-      sync_id: "d4-sync-vault",
-    },
-  ],
-  ssh_data: HOST_ROWS,
-  host_access: [
-    {
-      id: 1,
-      host_id: HOSTS.password,
-      user_id: USERS.alice,
-      granted_by: USERS.admin,
-      permission_level: "connect",
-    },
-  ],
-  user_preferences: [
-    {
-      user_id: USERS.admin,
-      theme: "dark",
-      ai_assistant_enabled: 1,
-      ai_read_only_commands: 1,
-      rdp_defaults: JSON.stringify({
-        colorDepth: 16,
-        resizeMethod: "reconnect",
-        enableDrive: true,
-      }),
-      terminal_defaults: JSON.stringify({ fontSize: 18, cursorBlink: false }),
-      custom_themes: JSON.stringify([
-        {
-          id: "d4-theme",
-          name: "d4 theme",
-          colors: { background: "#101010", foreground: "#f0f0f0" },
-        },
-      ]),
-      command_autocomplete: 1,
-      confirm_snippet_execution: 1,
-      folders_collapsed: 0,
-      terminal_macros: JSON.stringify([
-        {
-          id: "d4-macro",
-          name: "d4 macro",
-          steps: [{ id: "s1", type: "send", text: "uptime", pressEnter: true }],
-        },
-      ]),
-      custom_keybindings: JSON.stringify([
-        {
-          id: "d4-kb",
-          combo: {
-            key: "u",
-            isCode: false,
-            ctrl: true,
-            alt: true,
-            shift: false,
-            meta: false,
-          },
-          action: { type: "runSnippet", snippetId: "1", appendEnter: true },
-          enabled: true,
-          createdAt: "2026-01-01T00:00:00.000Z",
-          updatedAt: "2026-01-01T00:00:00.000Z",
-        },
-      ]),
-    },
-  ],
-  sso_providers: [
-    {
-      id: SSO_PROVIDER_ID,
-      name: "d4-sso",
-      type: "oidc",
-      enabled: 1,
-      display_order: 0,
-      config: JSON.stringify({
-        issuerUrl: "https://id.d4.example",
-        clientId: "termix",
-        clientSecret: "d4-client-secret",
-      }),
-    },
-    {
-      id: LDAP_PROVIDER_ID,
-      name: "d4-ldap",
-      type: "ldap",
-      enabled: 1,
-      display_order: 1,
-      config: JSON.stringify({
-        url: "ldaps://ldap.d4.example",
-        bindDn: "cn=termix,dc=d4",
-        bindPassword: "d4-bind",
-        searchBase: "dc=d4",
-      }),
-    },
-  ],
-  webauthn_credentials: [
-    {
-      id: "d4-passkey-id",
-      user_id: USERS.passkey,
-      name: "d4-passkey",
-      credential_id: "ZDQtY3JlZGVudGlhbA",
-      public_key: "ZDQtcHVibGljLWtleQ",
-      counter: 3,
-      transports: JSON.stringify(["internal"]),
-    },
-  ],
-  notification_channels: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      name: "d4-channel",
-      type: "ntfy",
-      config: JSON.stringify({ url: "https://ntfy.d4.example/d4" }),
-      enabled: 1,
-    },
-  ],
-  dismissed_alerts: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      alert_id: "d4-dismissed-announcement",
-      dismissed_at: T,
-    },
-  ],
-
-  snippet_folders: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      name: "d4-snippet-folder",
-      sync_id: "d4-sync-snippet-folder",
-    },
-  ],
-  snippets: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      name: "d4-snippet",
-      content: "uptime",
-      folder: "d4-snippet-folder",
-      sync_id: "d4-sync-snippet",
-    },
-    {
-      id: 2,
-      user_id: USERS.admin,
-      name: "d4-shared-snippet",
-      content: "df -h",
-      sync_id: "d4-sync-snippet-shared",
-    },
-  ],
-  snippet_access: [
-    {
-      id: 1,
-      snippet_id: 2,
-      user_id: USERS.alice,
-      granted_by: USERS.admin,
-      permission_level: "view",
-    },
-  ],
-
-  fleets: [{ id: 1, user_id: USERS.admin, name: "d4-fleet" }],
-  fleet_members: [
-    { id: 1, fleet_id: 1, host_id: HOSTS.password },
-    { id: 2, fleet_id: 1, host_id: HOSTS.key },
-  ],
-  fleet_inventory: [
-    {
-      id: 1,
-      host_id: HOSTS.password,
-      user_id: USERS.admin,
-      os_pretty_name: "d4 Linux",
-      hostname: "d4-password",
-    },
-  ],
-
-  automations: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      name: "d4-automation",
-      enabled: 0,
-      definition: JSON.stringify({
-        version: 1,
-        trigger: { type: "manual" },
-        steps: [],
-      }),
-    },
-  ],
-  automation_trigger_state: [
-    { id: 1, automation_id: 1, state_key: "d4-state", last_value: 1 },
-  ],
-  automation_schedules: [
-    { id: 1, automation_id: 1, cron: "0 4 * * *", timezone: "UTC" },
-  ],
-  automation_runs: [
-    {
-      id: 1,
-      automation_id: 1,
-      user_id: USERS.admin,
-      trigger_type: "manual",
-      status: "success",
-      started_at: T,
-      finished_at: T,
-    },
-  ],
-  automation_run_steps: [
-    {
-      id: 1,
-      run_id: 1,
-      step_index: 0,
-      step_id: "d4-step",
-      step_type: "command",
-      status: "success",
-      output: "d4-output",
-    },
-  ],
-  automation_channels: [{ id: 1, automation_id: 1, channel_id: 1 }],
-
-  user_workspaces: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      name: "d4-workspace",
-      payload: JSON.stringify({}),
-      sync_id: "d4-sync-workspace",
-    },
-  ],
-  network_topology: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      topology: JSON.stringify({ nodes: [{ id: "d4-node" }], edges: [] }),
-    },
-  ],
-
-  homepage_items: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      type_id: "clock",
-      title: "d4-widget",
-      config: JSON.stringify({}),
-      sync_id: "d4-sync-homepage-item",
-    },
-  ],
-  homepage_layouts: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      layout: JSON.stringify([{ i: "1", x: 0, y: 0, w: 2, h: 2 }]),
-    },
-  ],
-  dashboard_service_links: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      label: "d4-link",
-      url: "https://d4.example",
-      sync_id: "d4-sync-service-link",
-    },
-  ],
-
-  vault_tokens: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      profile_id: 1,
-      ssh_cert: "d4-vault-cert",
-      private_key: PRIVATE_KEY,
-      expires_at: LATER,
-    },
-  ],
-  opkssh_tokens: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      host_id: HOSTS.opkssh,
-      ssh_cert: "d4-opkssh-cert",
-      private_key: PRIVATE_KEY,
-      email: "d4@example.com",
-      expires_at: LATER,
-    },
-  ],
-
-  session_recordings: [
-    {
-      id: 1,
-      host_id: HOSTS.password,
-      user_id: USERS.admin,
-      username: "d4-admin",
-      started_at: T,
-      ended_at: T,
-      duration: 12,
-      recording_path: `${DATA_DIR_TOKEN}/${RECORDING_FILES.ssh}`,
-      protocol: "ssh",
-      format: "asciicast",
-    },
-    {
-      id: 2,
-      host_id: HOSTS.desktop,
-      user_id: USERS.admin,
-      username: "d4-admin",
-      started_at: T,
-      ended_at: T,
-      duration: 30,
-      recording_path: `${DATA_DIR_TOKEN}/${RECORDING_FILES.rdp}`,
-      protocol: "rdp",
-      format: "guacamole",
-    },
-  ],
-  command_history: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      host_id: HOSTS.password,
-      command: "d4-history-command",
-      executed_at: T,
-    },
-  ],
-  c2s_tunnel_presets: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      name: "d4-preset",
-      config: JSON.stringify({ tunnels: [] }),
-    },
-  ],
-
-  ai_providers: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      provider_type: "openai",
-      label: "d4-provider",
-      api_key: "sk-d4-provider-key",
-      api_key_prefix: "sk-d4",
-      default_model: "gpt-d4",
-      enabled: 1,
-    },
-  ],
-  ai_conversations: [
-    { id: 1, user_id: USERS.admin, title: "d4-conversation", provider_id: 1 },
-  ],
-  ai_messages: [
-    { id: 1, conversation_id: 1, role: "user", content: "d4-message" },
-  ],
-  ai_proposals: [
-    {
-      id: 1,
-      conversation_id: 1,
-      user_id: USERS.admin,
-      kind: "run_command",
-      summary: "d4-proposal",
-      payload: JSON.stringify({ command: "uptime" }),
-    },
-  ],
-
-  secret_sources: [
-    {
-      id: "d4-source",
-      user_id: USERS.admin,
-      name: "d4-source",
-      kind: "vaultwarden",
-      base_url: "https://vw.d4.example",
-      token: "d4-source-token",
-    },
-  ],
-
-  termix_identities: [{ id: 1, user_id: USERS.admin, handle: "d4-handle" }],
-  termix_identity_keys: [
-    {
-      id: 1,
-      identity_id: 1,
-      user_id: USERS.admin,
-      public_key: PUBLIC_KEY,
-      key_type: "ssh-ed25519",
-      algorithm: "ed25519",
-      label: "d4-identity-key",
-    },
-  ],
-  termix_identity_ca: [
-    {
-      id: 1,
-      identity_id: 1,
-      user_id: USERS.admin,
-      public_key: PUBLIC_KEY,
-      private_key: PRIVATE_KEY,
-    },
-  ],
-
-  host_metrics_preferences: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      host_id: HOSTS.password,
-      layout: JSON.stringify({ d4: true }),
-    },
-  ],
-  host_health_checks: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      host_id: HOSTS.password,
-      checks: JSON.stringify([{ id: "d4-check", type: "tcp", port: 22 }]),
-    },
-  ],
-  host_health_history: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      host_id: HOSTS.password,
-      check_id: "d4-check",
-      ts: T,
-      ok: 1,
-      latency_ms: 4,
-    },
-  ],
-  host_metrics_history: [
-    { id: 1, host_id: HOSTS.password, ts: T, cpu_percent: 44 },
-  ],
-  proxmox_stats_preferences: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      host_id: HOSTS.key,
-      layout: JSON.stringify({ d4: true }),
-    },
-  ],
-  proxmox_node_history: [{ id: 1, host_id: HOSTS.key, ts: T, cpu_percent: 4 }],
-
-  session_shares: [
-    {
-      id: "d4-share",
-      host_id: HOSTS.password,
-      owner_user_id: USERS.admin,
-      protocol: "ssh",
-      session_id: "d4-session",
-      share_type: "user",
-      target_user_id: USERS.alice,
-      permission_level: "read",
-      expires_at: LATER,
-    },
-  ],
-  session_share_participants: [
-    { id: 1, share_id: "d4-share", user_id: USERS.alice, joined_at: T },
-  ],
-  collab_rooms: [
-    {
-      id: "d4-room",
-      name: "d4-room",
-      owner_user_id: USERS.admin,
-      persistent: 1,
-    },
-  ],
-  collab_room_members: [
-    { id: 1, room_id: "d4-room", user_id: USERS.admin, room_role: "owner" },
-    { id: 2, room_id: "d4-room", user_id: USERS.alice, added_by: USERS.admin },
-  ],
-
-  file_manager_recent: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      host_id: HOSTS.password,
-      name: "d4-recent",
-      path: "/srv/d4/recent",
-    },
-  ],
-  file_manager_pinned: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      host_id: HOSTS.password,
-      name: "d4-pinned",
-      path: "/srv/d4/pinned",
-    },
-  ],
-  file_manager_shortcuts: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      host_id: HOSTS.password,
-      name: "d4-shortcut",
-      path: "/srv/d4/shortcut",
-    },
-  ],
-  transfer_recent: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      source_host_id: HOSTS.password,
-      dest_host_id: HOSTS.key,
-      dest_path: "/srv/d4/transfer",
-      dest_path_label: "d4-transfer",
-    },
-  ],
-  tmux_session_tags: [
-    {
-      id: 1,
-      user_id: USERS.admin,
-      host_id: HOSTS.password,
-      session_name: "d4-tmux",
-      tag: "d4-tag",
-    },
-  ],
-
-  settings: [
-    ["tailscale_api_key", "tskey-d4"],
-    ["tailscale_api_base_url", "https://headscale.d4.example"],
-    ["guac_enabled", "true"],
-    ["guac_url", "guacd.d4.example:4822"],
-    ["global_metrics_interval", "40"],
-    ["metrics_history_retention_days", "14"],
-    [
-      "host_defaults",
-      JSON.stringify({
-        metricsEnabled: false,
-        enableCommandHistory: false,
-        fontSize: 20,
-        theme: "nord",
-        autoTmux: true,
-      }),
-    ],
-    ["ai_globally_enabled", "true"],
-    ["ai_private_endpoint_allowlist", JSON.stringify(["10.4.0.0/24"])],
-    [
-      "acme_ssl_settings",
-      JSON.stringify({
-        enabled: true,
-        domain: "termix.d4.example",
-        email: "d4@example.com",
-        challengeType: "cloudflare",
-        cloudflareToken: "d4-cloudflare-token",
-      }),
-    ],
-    ["step_ca_url", "https://ca.d4.example"],
-    ["step_ca_fingerprint", "d4fingerprint"],
-    ["step_ca_provisioner", "d4-provisioner"],
-    ["terminal_session_timeout_minutes", "45"],
-    ["terminal_session_persistence_enabled", "false"],
-    ["terminal_image_max_count", "7"],
-    ["session_sharing_globally_enabled", "false"],
-    ["analytics_enabled", "false"],
-    ["analytics_instance_id", "d4-instance-id"],
-    // Long enough that the fixture's recordings never age out.
-    ["session_recording_retention_days", "3650"],
-  ].map(([key, value]) => ({ key, value })),
-};
-
-/** The 2.8 core tables the fixture fills that stay core in 2.9.0. */
-export const CORE_TABLES = new Set([
-  "users",
-  "roles",
-  "user_roles",
-  "ssh_credentials",
-  "ssh_folders",
-  "ssh_data",
-  "host_access",
-  "user_preferences",
-  "settings",
-]);
diff --git a/src/backend/tests/fixtures/upgrade/upgrade-mysql.sql b/src/backend/tests/fixtures/upgrade/upgrade-mysql.sql
deleted file mode 100644
index 4ce2545e0..000000000
--- a/src/backend/tests/fixtures/upgrade/upgrade-mysql.sql
+++ /dev/null
@@ -1,1368 +0,0 @@
--- Termix 2.8.0 to 2.9.0 on mysql, generated by scripts/lib/upgrade-sql.mjs
-
--- ==== core 0024_thin_colleen_wing ====
-CREATE TABLE `plugin_storage` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`plugin_id` varchar(255) NOT NULL,
-	`key` varchar(255) NOT NULL,
-	`value` text NOT NULL,
-	`updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `plugin_storage_id` PRIMARY KEY(`id`),
-	CONSTRAINT `idx_plugin_storage_plugin_key` UNIQUE(`plugin_id`,`key`)
-);
---> statement-breakpoint
-ALTER TABLE `plugin_storage` ADD CONSTRAINT `plugin_storage_plugin_id_plugins_id_fk` FOREIGN KEY (`plugin_id`) REFERENCES `plugins`(`id`) ON DELETE cascade ON UPDATE no action;
-
--- ==== core 0025_wet_master_mold ====
-DROP TABLE `alert_firings`;--> statement-breakpoint
-DROP TABLE `alert_rule_channels`;--> statement-breakpoint
-DROP TABLE `alert_rules`;
-
--- ==== core 0026_empty_black_bird ====
-ALTER TABLE `plugin_permission_grants` MODIFY COLUMN `granted_by` varchar(255);--> statement-breakpoint
-ALTER TABLE `plugin_permission_grants` ADD `source` text DEFAULT ('admin') NOT NULL;--> statement-breakpoint
-ALTER TABLE `plugins` ADD `last_error` text;
-
--- ==== core 0027_watery_multiple_man ====
-CREATE TABLE `plugin_migrations` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`plugin_id` varchar(255) NOT NULL,
-	`migration_id` varchar(255) NOT NULL,
-	`checksum` text NOT NULL,
-	`applied_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `plugin_migrations_id` PRIMARY KEY(`id`),
-	CONSTRAINT `idx_plugin_migrations_plugin_migration` UNIQUE(`plugin_id`,`migration_id`)
-);
---> statement-breakpoint
-ALTER TABLE `plugin_migrations` ADD CONSTRAINT `plugin_migrations_plugin_id_plugins_id_fk` FOREIGN KEY (`plugin_id`) REFERENCES `plugins`(`id`) ON DELETE cascade ON UPDATE no action;
-
--- ==== core 0028_fair_tusk ====
-CREATE TABLE `rbac_applied_defaults` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`role_name` varchar(255) NOT NULL,
-	`permission` varchar(255) NOT NULL,
-	`applied_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `rbac_applied_defaults_id` PRIMARY KEY(`id`),
-	CONSTRAINT `idx_rbac_applied_defaults_role_permission` UNIQUE(`role_name`,`permission`)
-);
---> statement-breakpoint
-CREATE TABLE `rbac_known_permissions` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`permission` varchar(255) NOT NULL,
-	`plugin_id` varchar(255),
-	`first_seen_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `rbac_known_permissions_id` PRIMARY KEY(`id`),
-	CONSTRAINT `idx_rbac_known_permissions_permission` UNIQUE(`permission`)
-);
-
--- ==== core 0029_open_captain_america ====
-CREATE TABLE `plugin_settings` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`plugin_id` varchar(255) NOT NULL,
-	`scope` enum('admin','user','host','secret') NOT NULL,
-	`scope_id` varchar(255),
-	`key` varchar(255) NOT NULL,
-	`value` text,
-	`encrypted` boolean NOT NULL DEFAULT false,
-	`updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `plugin_settings_id` PRIMARY KEY(`id`),
-	CONSTRAINT `idx_plugin_settings_scope_key` UNIQUE(`plugin_id`,`scope`,`scope_id`,`key`)
-);
---> statement-breakpoint
-ALTER TABLE `plugin_settings` ADD CONSTRAINT `plugin_settings_plugin_id_plugins_id_fk` FOREIGN KEY (`plugin_id`) REFERENCES `plugins`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-CREATE INDEX `idx_plugin_settings_plugin_scope` ON `plugin_settings` (`plugin_id`,`scope`);
-
--- ==== core 0030_sweet_warlock ====
-CREATE TABLE `user_external_identities` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`provider_id` varchar(255) NOT NULL,
-	`subject` varchar(255) NOT NULL,
-	`email` text,
-	`created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `user_external_identities_id` PRIMARY KEY(`id`),
-	CONSTRAINT `idx_user_external_identities_provider_subject` UNIQUE(`provider_id`,`subject`)
-);
---> statement-breakpoint
-CREATE TABLE `user_second_factors` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`plugin_id` varchar(255) NOT NULL,
-	`factor_id` varchar(255) NOT NULL,
-	`enrolled_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `user_second_factors_id` PRIMARY KEY(`id`),
-	CONSTRAINT `idx_user_second_factors_user_factor` UNIQUE(`user_id`,`plugin_id`,`factor_id`)
-);
---> statement-breakpoint
-ALTER TABLE `user_external_identities` ADD CONSTRAINT `user_external_identities_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `user_second_factors` ADD CONSTRAINT `user_second_factors_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-CREATE INDEX `idx_user_external_identities_user` ON `user_external_identities` (`user_id`);
-
--- ==== core 0031_nebulous_diamondback ====
--- user_workspaces moved to the workspaces plugin, whose first migration renames it
--- to p_workspaces_workspaces. Dropping it here would lose every saved workspace,
--- so this only stops drizzle tracking it. SELECT 1 because MySQL rejects an
--- empty query.
-SELECT 1;
-
--- ==== core 0032_lethal_marrow ====
--- network_topology moved to the network-topology plugin, which adopts (renames)
--- this table in its own migration before this drizzle migration would run.
--- No DROP here: it would delete every row before the plugin's rename applies.
-SELECT 1;
-
--- ==== core 0033_clear_anthem ====
--- snippets, snippet_folders and snippet_access moved to the snippets plugin
--- (p_snippets_*), adopted by rename rather than dropped. A real DROP TABLE
--- here would run before the plugin's adoption migration and delete every row.
-SELECT 1;
-
--- ==== core 0034_green_vector ====
--- dropped, see plugin adoption (fleets plugin, migrations/mysql/0001_adopt_fleets.sql)
-SELECT 1;
-
--- ==== core 0035_clumsy_leech ====
--- proxmox_node_history and proxmox_stats_preferences moved to the proxmox
--- plugin (p_proxmox_*), adopted by rename rather than dropped. The four
--- ssh_data proxmox columns are copied into the plugin's host settings after
--- plugins load, which is after this migration, so a real DROP COLUMN here
--- would delete the data first. The columns stay in place, unused, until 3.0.0.
-SELECT 1;
-
--- ==== core 0036_dear_vapor ====
--- file_manager_pinned, file_manager_recent, file_manager_shortcuts and
--- transfer_recent are adopted (renamed, not dropped) by the file-manager
--- plugin's own migration, which runs at plugin activation, after core's
--- drizzle migrations. A DROP TABLE here would run first and delete the data.
-SELECT 1;
-
--- ==== core 0037_foamy_norman_osborn ====
--- c2s_tunnel_presets moved to the tunnels plugin, whose first migration renames
--- it to p_tunnels_presets. Dropping it here would lose every saved preset, so
--- this only stops drizzle tracking it. SELECT 1 because MySQL rejects an
--- empty query.
-SELECT 1;
-
--- ==== core 0038_quiet_karnak ====
--- command_history moved to the ssh-terminal plugin, whose first migration
--- renames it to p_ssh_terminal_command_history. Dropping it here would lose
--- every saved command, so this only stops drizzle tracking it. SELECT 1
--- because MySQL rejects an empty query.
-SELECT 1;
-
--- ==== core 0039_condemned_shiva ====
--- tmux_session_tags moved to the tmux-monitor plugin, whose first migration
--- renames it to p_tmux_monitor_session_tags. Dropping it here would lose
--- every saved tag, so this only stops drizzle tracking it. SELECT 1 because
--- MySQL rejects an empty query.
-SELECT 1;
-
--- ==== core 0040_misty_skin ====
--- session_shares, session_share_participants, collab_rooms and
--- collab_room_members moved to the session-sharing plugin, whose first
--- migration renames them. Dropping them here would lose every share and
--- room, so this only stops drizzle tracking them. SELECT 1 because MySQL
--- rejects an empty query.
-SELECT 1;
-
--- ==== core 0041_wonderful_cargill ====
--- session_recordings moved to the session-recording plugin, whose first
--- migration renames it. Dropping it here would lose every recording, so
--- this only stops drizzle tracking it. SELECT 1 because MySQL rejects an
--- empty query.
-SELECT 1;
-
--- ==== core 0042_colorful_bill_hollister ====
--- The remote desktop host options (enable_rdp, enable_vnc, enable_telnet,
--- the three ports, rdp_security, rdp_ignore_cert, security, ignore_cert,
--- guacamole_config) and user_preferences.rdp_defaults moved to the
--- remote-desktop plugin's settings. The copy runs after plugins load, which
--- is after this migration, so a real DROP COLUMN here would delete the data
--- first. The columns stay in place, unused, until 3.0.0.
-SELECT 1;
-
--- ==== core 0043_unusual_lucky_pierre ====
--- host_metrics_preferences, host_health_checks, host_health_history and
--- host_metrics_history moved to the host-metrics plugin, which adopts them by
--- rename in its own first migration. That runs after this one, so a real
--- DROP TABLE here would delete every row first.
-SELECT 1;--> statement-breakpoint
--- Status checks are core: the per-host switch and interval, copied out of
--- stats_config at boot by host-status-config-migration.ts.
-ALTER TABLE `ssh_data` ADD `status_check_enabled` boolean DEFAULT true NOT NULL;--> statement-breakpoint
-ALTER TABLE `ssh_data` ADD `status_check_interval` int;
-
--- ==== core 0044_jittery_thunderball ====
--- ssh_data.stats_config split: its status half moved to status_check_enabled
--- and status_check_interval, its metrics half to the host-metrics plugin's
--- host settings. Both copies run at boot, after this migration, so a real
--- DROP COLUMN here would delete the data first. The column stays in place,
--- unused, until 3.0.0.
-SELECT 1;
-
--- ==== core 0045_flowery_the_hood ====
--- ssh_data.enable_docker and docker_config moved to the docker plugin's host
--- settings. The copy runs at boot, after this migration, so a real DROP
--- COLUMN here would delete the data first. The columns stay in place,
--- unused, until 3.0.0.
-SELECT 1;
-
--- ==== core 0046_rich_logan ====
--- The automation tables moved to the automations plugin, which renames them
--- into its own namespace at activation. That runs after this migration, so a
--- real DROP TABLE here would delete every automation first.
-SELECT 1;
-
--- ==== core 0047_red_silver_sable ====
--- The ai tables moved to the ai plugin, which renames them into its own
--- namespace at activation, and ssh_data.enable_ai_assistant and the two
--- user_preferences ai columns moved to its settings. Both run after this
--- migration, so a real DROP here would delete the data first. The columns
--- stay in place, unused, until 3.0.0. The timestamp and label type changes
--- drizzle-kit also wrote are generator drift (see FINISH-LIST.md), not a
--- change to the database, and are left out on purpose.
-SELECT 1;
-
--- ==== core 0048_hard_demogoblin ====
--- dashboard_service_links, homepage_items and homepage_layouts moved to the
--- homepage plugin, which adopts them by rename at activation (see
--- plugins/homepage/migrations/mysql/0001_adopt_homepage_tables.sql).
--- Dropping them here would delete every row before the plugin's migration
--- ever runs, since this runs at boot before the plugins table exists.
-SELECT 1;
-
--- ==== core 0049_quiet_blacklash ====
--- mac_address and wol_broadcast_address move to the wake-on-lan plugin's
--- host settings at boot, after this migration runs. Dropping them here would
--- delete the data before the copy has a chance to run.
-SELECT 1;
-
--- ==== core 0050_optimal_speedball ====
--- secret_sources moves to the secret-sources plugin's adopted table at
--- activation, after this migration runs. Dropping it here would delete the
--- data before the plugin has a chance to rename it.
-SELECT 1;
-
--- ==== core 0051_icy_hercules ====
--- webauthn_credentials moves to the webauthn plugin's adopted table at
--- activation, and the users TOTP columns are read by the TOTP boot migration
--- after this runs. Dropping either here would lose the data first.
-SELECT 1;
-
--- ==== core 0052_illegal_gladiator ====
--- sso_providers moves to the sso plugin's adopted table at activation, and
--- its LDAP rows are copied into the ldap plugin by a boot migration after
--- this runs. Dropping it here would lose the data first.
-SELECT 1;
-
--- ==== core 0053_magical_groot ====
--- opkssh_tokens moves to the opkssh plugin's adopted table at activation,
--- and ssh_data.use_warpgate is copied into the warpgate plugin's host
--- settings by a boot migration after this runs. Dropping either here would
--- lose the data first.
-SELECT 1;
-
--- ==== core 0054_wakeful_misty_knight ====
--- vault_profiles and vault_tokens move to the vault plugin's adopted tables
--- at activation, and ssh_data.vault_profile_id is copied into the vault
--- plugin's host settings by a boot migration after this runs. Dropping any
--- of them here would lose the data first.
-SELECT 1;
-
--- ==== core 0055_icy_patch ====
--- termix_identities, termix_identity_keys and termix_identity_ca move to the
--- termix-identity plugin's adopted tables at activation. Dropping them here
--- would lose the data first.
-SELECT 1;
-
--- ==== core 0056_supreme_toad_men ====
--- The dialect generator now decides varchar or text per table. Columns that
--- were varchar(255) only because the same name was a key in another table
--- become text, and the timestamps and labels B18's regeneration left as
--- varchar(255) on real databases follow. varchar to text keeps every value.
-ALTER TABLE `api_keys` MODIFY COLUMN `name` text NOT NULL;--> statement-breakpoint
-ALTER TABLE `api_keys` MODIFY COLUMN `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `api_keys` MODIFY COLUMN `expires_at` text;--> statement-breakpoint
-ALTER TABLE `credential_access` MODIFY COLUMN `expires_at` text;--> statement-breakpoint
-ALTER TABLE `credential_access` MODIFY COLUMN `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `credential_sidebar_preferences` MODIFY COLUMN `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `folder_access` MODIFY COLUMN `expires_at` text;--> statement-breakpoint
-ALTER TABLE `folder_access` MODIFY COLUMN `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `host_access` MODIFY COLUMN `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `host_sidebar_preferences` MODIFY COLUMN `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `ssh_data` MODIFY COLUMN `name` text;--> statement-breakpoint
-ALTER TABLE `ssh_data` MODIFY COLUMN `folder` text;--> statement-breakpoint
-ALTER TABLE `ssh_data` MODIFY COLUMN `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `ssh_data` MODIFY COLUMN `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `notification_channels` MODIFY COLUMN `name` text NOT NULL;--> statement-breakpoint
-ALTER TABLE `notification_channels` MODIFY COLUMN `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `plugin_install_counts` MODIFY COLUMN `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `plugin_registries` MODIFY COLUMN `name` text NOT NULL;--> statement-breakpoint
-ALTER TABLE `plugin_settings` MODIFY COLUMN `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `plugin_storage` MODIFY COLUMN `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `plugins` MODIFY COLUMN `name` text NOT NULL;--> statement-breakpoint
-ALTER TABLE `plugins` MODIFY COLUMN `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `rbac_known_permissions` MODIFY COLUMN `plugin_id` text;--> statement-breakpoint
-ALTER TABLE `roles` MODIFY COLUMN `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `roles` MODIFY COLUMN `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `sessions` MODIFY COLUMN `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `shared_credential_secrets` MODIFY COLUMN `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `shared_credential_secrets` MODIFY COLUMN `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `shared_host_auth_overrides` MODIFY COLUMN `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `shared_host_auth_overrides` MODIFY COLUMN `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `shared_host_secrets` MODIFY COLUMN `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `shared_host_secrets` MODIFY COLUMN `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `ssh_credentials` MODIFY COLUMN `name` text NOT NULL;--> statement-breakpoint
-ALTER TABLE `ssh_credentials` MODIFY COLUMN `folder` text;--> statement-breakpoint
-ALTER TABLE `ssh_credentials` MODIFY COLUMN `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `ssh_credentials` MODIFY COLUMN `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `ssh_folders` MODIFY COLUMN `name` text NOT NULL;--> statement-breakpoint
-ALTER TABLE `ssh_folders` MODIFY COLUMN `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `ssh_folders` MODIFY COLUMN `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `sync_tombstones` MODIFY COLUMN `sync_id` text NOT NULL;--> statement-breakpoint
-ALTER TABLE `trusted_devices` MODIFY COLUMN `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `trusted_devices` MODIFY COLUMN `expires_at` text NOT NULL;--> statement-breakpoint
-ALTER TABLE `ui_preferences` MODIFY COLUMN `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `user_external_identities` MODIFY COLUMN `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `user_open_tabs` MODIFY COLUMN `label` text NOT NULL;--> statement-breakpoint
-ALTER TABLE `user_open_tabs` MODIFY COLUMN `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `user_open_tabs` MODIFY COLUMN `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `user_preferences` MODIFY COLUMN `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP);
-
--- ==== core 0057_serious_shatterstar ====
--- The file manager, tunnels, web endpoint, terminal, tmux monitor, session
--- sharing and session recording host columns, and the dead show_*_in_sidebar
--- columns, moved to their plugins' host settings. The copies run after
--- plugins load, which is after this migration, so a real DROP COLUMN here
--- would delete the data first. The columns stay in place, unused, until 3.0.0.
-SELECT 1;
-
--- ==== core 0058_boring_avengers ====
--- dismissed_alerts and notification_channels moved to the alerts plugin. It
--- renames the first into its own namespace and copies the second at
--- activation, both after this migration, so a real DROP TABLE here would
--- delete them first. notification_channels stays in place, unused, until
--- 3.0.0.
-SELECT 1;
-
--- ==== core 0059_military_purple_man ====
-CREATE TABLE `sync_conflicts` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`entity_type` text NOT NULL,
-	`sync_id` text NOT NULL,
-	`local_row` text NOT NULL,
-	`server_revision` int NOT NULL,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `sync_conflicts_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `sync_link` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`server_url` text NOT NULL,
-	`server_name` text,
-	`server_version` text,
-	`session_token` text,
-	`custom_headers` text,
-	`basic_auth` text,
-	`allow_invalid_certificate` boolean NOT NULL DEFAULT false,
-	`remote_user_id` text,
-	`remote_username` text,
-	`account` text,
-	`scope` text,
-	`known_types` text,
-	`cursor` int NOT NULL DEFAULT 0,
-	`status` text NOT NULL DEFAULT ('idle'),
-	`last_error` text,
-	`linked_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`last_sync_at` text,
-	CONSTRAINT `sync_link_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `sync_records` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`entity_type` varchar(255) NOT NULL,
-	`sync_id` varchar(255) NOT NULL,
-	`revision` int NOT NULL DEFAULT 0,
-	`seq` int NOT NULL DEFAULT 0,
-	`hash` text,
-	`deleted` boolean NOT NULL DEFAULT false,
-	`error` text,
-	`error_hash` text,
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `sync_records_id` PRIMARY KEY(`id`),
-	CONSTRAINT `idx_sync_records_user_entity_sync` UNIQUE(`user_id`,`entity_type`,`sync_id`)
-);
---> statement-breakpoint
-ALTER TABLE `ssh_data` ADD `local_only` boolean DEFAULT false NOT NULL;--> statement-breakpoint
-ALTER TABLE `ssh_data` ADD `shared_source` text;--> statement-breakpoint
-ALTER TABLE `ssh_credentials` ADD `shared_source` text;--> statement-breakpoint
-ALTER TABLE `ssh_folders` ADD `local_only` boolean DEFAULT false NOT NULL;--> statement-breakpoint
-ALTER TABLE `sync_conflicts` ADD CONSTRAINT `sync_conflicts_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `sync_link` ADD CONSTRAINT `sync_link_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `sync_records` ADD CONSTRAINT `sync_records_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-CREATE INDEX `idx_sync_conflicts_user` ON `sync_conflicts` (`user_id`);--> statement-breakpoint
-CREATE INDEX `idx_sync_records_user_seq` ON `sync_records` (`user_id`,`seq`);
-
--- ==== core 0060_mean_gorgon ====
-DROP TABLE `sync_tombstones`;
-
--- ==== core 0061_plugin_settings_scope_enum ====
-ALTER TABLE `plugin_settings` MODIFY COLUMN `scope` enum('admin','user','host','secret') NOT NULL;
-
--- ==== core 0062_smooth_speed ====
-ALTER TABLE `ssh_data` ADD `ssh_options` text;
-
--- ==== core 0063_needy_radioactive_man ====
--- The RDP, VNC and Telnet logins moved out of ssh_data into host_protocol_auth.
--- A boot migration copies them after this runs, so the old ssh_data columns
--- and their foreign keys stay in place, unused, until 3.0.0.
-CREATE TABLE `host_protocol_auth` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`host_id` int NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`protocol` varchar(255) NOT NULL,
-	`auth_type` text NOT NULL DEFAULT ('direct'),
-	`credential_id` int,
-	`username` text,
-	`password` text,
-	`fields` text,
-	`secret_fields` text,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `host_protocol_auth_id` PRIMARY KEY(`id`),
-	CONSTRAINT `idx_host_protocol_auth_host_protocol` UNIQUE(`host_id`,`protocol`)
-);
---> statement-breakpoint
-ALTER TABLE `shared_host_secrets` ADD `encrypted_fields` text;--> statement-breakpoint
-ALTER TABLE `host_protocol_auth` ADD CONSTRAINT `host_protocol_auth_host_id_ssh_data_id_fk` FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `host_protocol_auth` ADD CONSTRAINT `host_protocol_auth_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `host_protocol_auth` ADD CONSTRAINT `host_protocol_auth_credential_id_ssh_credentials_id_fk` FOREIGN KEY (`credential_id`) REFERENCES `ssh_credentials`(`id`) ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-CREATE INDEX `idx_host_protocol_auth_user` ON `host_protocol_auth` (`user_id`);--> statement-breakpoint
-CREATE INDEX `idx_host_protocol_auth_credential` ON `host_protocol_auth` (`credential_id`);
-
--- ==== core 0064_flippant_killer_shrike ====
--- ssh_data.autostart_password, autostart_key and autostart_key_password held
--- copies of a host's login for 2.8's autostart endpoint, which nothing has read
--- since. They leave the schema but stay in place, unused, until 3.0.0, so no
--- install loses what it stored.
-SELECT 1;
-
--- ==== core 0065_ambiguous_agent_zero ====
-CREATE TABLE `host_defaults` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`level` enum('admin','user','folder') NOT NULL,
-	`scope_key` varchar(255) NOT NULL,
-	`user_id` varchar(255),
-	`folder_id` int,
-	`namespace` varchar(255) NOT NULL,
-	`key` varchar(255) NOT NULL,
-	`value` text,
-	`updated_by` text,
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `host_defaults_id` PRIMARY KEY(`id`),
-	CONSTRAINT `idx_host_defaults_scope_key` UNIQUE(`scope_key`,`namespace`,`key`)
-);
---> statement-breakpoint
-ALTER TABLE `ssh_data` ADD `default_overrides` text;--> statement-breakpoint
-ALTER TABLE `host_defaults` ADD CONSTRAINT `host_defaults_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `host_defaults` ADD CONSTRAINT `host_defaults_folder_id_ssh_folders_id_fk` FOREIGN KEY (`folder_id`) REFERENCES `ssh_folders`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-CREATE INDEX `idx_host_defaults_user` ON `host_defaults` (`user_id`);--> statement-breakpoint
-CREATE INDEX `idx_host_defaults_folder` ON `host_defaults` (`folder_id`);
-
--- ==== plugin workspaces 0001_adopt_user_workspaces.sql ====
--- workspaces 0001: adopt_user_workspaces
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `user_workspaces` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `name` text NOT NULL,
-  `color` text,
-  `icon` text,
-  `kind` text NOT NULL DEFAULT ('manual'),
-  `is_default` boolean NOT NULL DEFAULT false,
-  `payload` text NOT NULL DEFAULT ('{}'),
-  `sync_id` varchar(255) UNIQUE,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `last_used_at` text,
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `user_workspaces` TO `p_workspaces_workspaces`;
-
--- ==== plugin network-topology 0001_adopt_network_topology.sql ====
--- network-topology 0001: adopt_network_topology
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `network_topology` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `topology` text,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `network_topology` TO `p_network_topology_graphs`;
-
--- ==== plugin snippets 0001_adopt_snippets_tables.sql ====
--- snippets 0001: adopt_snippets_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `snippets` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `name` text NOT NULL,
-  `content` text NOT NULL,
-  `description` text,
-  `folder` text,
-  `order` int NOT NULL DEFAULT 0,
-  `sync_id` varchar(255) UNIQUE,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `host_filter` text,
-  `is_note` boolean NOT NULL DEFAULT false,
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `snippets` TO `p_snippets_snippets`;
-CREATE TABLE IF NOT EXISTS `snippet_folders` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `name` text NOT NULL,
-  `color` text,
-  `icon` text,
-  `sync_id` varchar(255) UNIQUE,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `snippet_folders` TO `p_snippets_snippet_folders`;
-CREATE TABLE IF NOT EXISTS `snippet_access` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `snippet_id` int NOT NULL,
-  `user_id` varchar(255),
-  `role_id` int,
-  `granted_by` varchar(255) NOT NULL,
-  `permission_level` text NOT NULL DEFAULT ('view'),
-  `expires_at` text,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`granted_by`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `snippet_access` TO `p_snippets_snippet_access`;
-
--- ==== plugin fleets 0001_adopt_fleets.sql ====
--- fleets 0001: adopt_fleets
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `fleets` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `name` text NOT NULL,
-  `description` text,
-  `color` text,
-  `icon` text,
-  `tag_rules` text,
-  `sync_id` varchar(255) UNIQUE,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `fleets` TO `p_fleets_fleets`;
-CREATE TABLE IF NOT EXISTS `fleet_members` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `fleet_id` int NOT NULL,
-  `host_id` int NOT NULL,
-  `added_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`fleet_id`) REFERENCES `p_fleets_fleets` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `fleet_members` TO `p_fleets_members`;
-CREATE TABLE IF NOT EXISTS `fleet_inventory` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `host_id` int NOT NULL,
-  `user_id` varchar(255) NOT NULL,
-  `os_pretty_name` text,
-  `kernel` text,
-  `architecture` text,
-  `hostname` text,
-  `uptime_seconds` int,
-  `ip` text,
-  `package_manager` text,
-  `collected_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `fleet_inventory` TO `p_fleets_inventory`;
-
--- ==== plugin ssh-terminal 0001_adopt_command_history.sql ====
--- ssh-terminal 0001: adopt_command_history
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `command_history` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `host_id` int NOT NULL,
-  `command` text NOT NULL,
-  `executed_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `command_history` TO `p_ssh_terminal_command_history`;
-
--- ==== plugin tunnels 0001_adopt_c2s_tunnel_presets.sql ====
--- tunnels 0001: adopt_c2s_tunnel_presets
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `c2s_tunnel_presets` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `name` text NOT NULL,
-  `config` text NOT NULL,
-  `platform` text,
-  `computer_name` text,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `c2s_tunnel_presets` TO `p_tunnels_presets`;
-
--- ==== plugin host-metrics 0001_adopt_host_metrics_tables.sql ====
--- host-metrics 0001: adopt_host_metrics_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `host_metrics_preferences` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `host_id` int NOT NULL,
-  `layout` text NOT NULL,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `host_metrics_preferences` TO `p_host_metrics_host_metrics_preferences`;
-CREATE TABLE IF NOT EXISTS `host_health_checks` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `host_id` int NOT NULL,
-  `checks` text NOT NULL,
-  `interval_seconds` int NOT NULL DEFAULT 300,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `host_health_checks` TO `p_host_metrics_host_health_checks`;
-CREATE TABLE IF NOT EXISTS `host_health_history` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `host_id` int NOT NULL,
-  `check_id` varchar(255) NOT NULL,
-  `ts` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `ok` boolean NOT NULL,
-  `latency_ms` int,
-  `detail` text,
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `host_health_history` TO `p_host_metrics_host_health_history`;
-CREATE TABLE IF NOT EXISTS `host_metrics_history` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `host_id` int NOT NULL,
-  `ts` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `cpu_percent` double,
-  `mem_percent` double,
-  `disk_percent` double,
-  `net_rx_bytes` int,
-  `net_tx_bytes` int,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `host_metrics_history` TO `p_host_metrics_host_metrics_history`;
-
--- ==== plugin automations 0001_adopt_automations.sql ====
--- automations 0001: adopt_automations
--- Generated by termix-plugin migrations. Review before committing.
--- Hand-edited: keeps the legacy foreign keys the SDK cannot declare
--- (links between these tables, and a channel link to notification_channels).
-
-CREATE TABLE IF NOT EXISTS `automations` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `name` text NOT NULL,
-  `description` text,
-  `enabled` boolean NOT NULL DEFAULT true,
-  `definition` text NOT NULL,
-  `definition_version` int NOT NULL DEFAULT 1,
-  `concurrency_policy` text NOT NULL DEFAULT ('skip'),
-  `max_run_seconds` int NOT NULL DEFAULT 300,
-  `dry_run` boolean NOT NULL DEFAULT false,
-  `last_run_at` text,
-  `last_run_status` text,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `automations` TO `p_automations_automations`;
-CREATE TABLE IF NOT EXISTS `automation_trigger_state` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `automation_id` int NOT NULL,
-  `state_key` varchar(255) NOT NULL,
-  `breach_started_at` text,
-  `last_fired_at` text,
-  `last_value` double,
-  `last_observed_state` text,
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`automation_id`) REFERENCES `p_automations_automations` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `automation_trigger_state` TO `p_automations_trigger_state`;
-CREATE TABLE IF NOT EXISTS `automation_schedules` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `automation_id` int NOT NULL,
-  `cron` text,
-  `interval_seconds` int,
-  `timezone` text,
-  `next_due_at` varchar(255),
-  `last_tick_at` text,
-  FOREIGN KEY (`automation_id`) REFERENCES `p_automations_automations` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `automation_schedules` TO `p_automations_schedules`;
-CREATE TABLE IF NOT EXISTS `automation_runs` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `automation_id` int NOT NULL,
-  `user_id` varchar(255) NOT NULL,
-  `trigger_type` text NOT NULL,
-  `trigger_context` text,
-  `status` text NOT NULL,
-  `started_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `finished_at` text,
-  `duration_ms` int,
-  `error` text,
-  `dry_run` boolean NOT NULL DEFAULT false,
-  `parent_run_id` int,
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`automation_id`) REFERENCES `p_automations_automations` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `automation_runs` TO `p_automations_runs`;
-CREATE TABLE IF NOT EXISTS `automation_run_steps` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `run_id` int NOT NULL,
-  `step_index` int NOT NULL,
-  `step_id` text NOT NULL,
-  `step_type` text NOT NULL,
-  `status` text NOT NULL,
-  `started_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `finished_at` text,
-  `output` text,
-  `error` text,
-  `truncated` boolean NOT NULL DEFAULT false,
-  FOREIGN KEY (`run_id`) REFERENCES `p_automations_runs` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `automation_run_steps` TO `p_automations_run_steps`;
-CREATE TABLE IF NOT EXISTS `automation_channels` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `automation_id` int NOT NULL,
-  `channel_id` int NOT NULL,
-  FOREIGN KEY (`automation_id`) REFERENCES `p_automations_automations` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`channel_id`) REFERENCES `notification_channels` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `automation_channels` TO `p_automations_channels`;
-
--- ==== plugin automations 0002_unlink_channels.sql ====
--- automations 0002: unlink_channels
--- Hand-written: channels moved from core's notification_channels to the
--- alerts plugin, so the link table drops its foreign key to the old table.
--- The constraint's name differs between installs, so the table is rebuilt.
-
-CREATE TABLE IF NOT EXISTS `p_automations_channels_v2` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `automation_id` int NOT NULL,
-  `channel_id` int NOT NULL,
-  FOREIGN KEY (`automation_id`) REFERENCES `p_automations_automations` (`id`) ON DELETE CASCADE
-);
-INSERT INTO `p_automations_channels_v2` (`id`, `automation_id`, `channel_id`) SELECT `id`, `automation_id`, `channel_id` FROM `p_automations_channels`;
-DROP TABLE `p_automations_channels`;
-RENAME TABLE `p_automations_channels_v2` TO `p_automations_channels`;
-CREATE UNIQUE INDEX `idx_automation_channels_pair` ON `p_automations_channels` (`automation_id`, `channel_id`);
-
--- ==== plugin automations 0003_host_maintenance.sql ====
--- automations 0003: host_maintenance
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `p_automations_host_maintenance` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `host_id` int NOT NULL,
-  `state` text NOT NULL,
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX `maintenance_host_owner` ON `p_automations_host_maintenance` (`user_id`, `host_id`);
-
--- ==== plugin automations 0004_rename_maintenance_index.sql ====
--- automations 0004: rename_maintenance_index
--- Renames the maintenance index to the idx_ pattern every other index uses.
-
-CREATE UNIQUE INDEX `idx_automation_maintenance_host_owner` ON `p_automations_host_maintenance` (`user_id`, `host_id`);
-DROP INDEX `maintenance_host_owner` ON `p_automations_host_maintenance`;
-
--- ==== plugin homepage 0001_adopt_homepage_tables.sql ====
--- homepage 0001: adopt_homepage_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `homepage_items` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `type_id` text NOT NULL,
-  `title` text,
-  `config` text NOT NULL DEFAULT ('{}'),
-  `folder_id` int,
-  `sync_id` varchar(255) UNIQUE,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `homepage_items` TO `p_homepage_homepage_items`;
-CREATE TABLE IF NOT EXISTS `homepage_layouts` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL UNIQUE,
-  `layout` text NOT NULL DEFAULT ('{}'),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `homepage_layouts` TO `p_homepage_homepage_layouts`;
-CREATE TABLE IF NOT EXISTS `dashboard_service_links` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `label` text NOT NULL,
-  `url` text NOT NULL,
-  `order` int NOT NULL DEFAULT 0,
-  `sync_id` varchar(255) UNIQUE,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `dashboard_service_links` TO `p_homepage_dashboard_service_links`;
-
--- ==== plugin ai 0001_adopt_ai_tables.sql ====
--- ai 0001: adopt_ai_tables
--- Generated by termix-plugin migrations. Review before committing.
--- Hand-edited: keeps the legacy foreign key from messages and proposals to
--- their conversation, which the SDK cannot declare.
-
-CREATE TABLE IF NOT EXISTS `ai_providers` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `provider_type` text NOT NULL,
-  `label` varchar(255) NOT NULL,
-  `base_url` text,
-  `api_key_prefix` text,
-  `default_model` text,
-  `enabled` boolean NOT NULL DEFAULT true,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `ai_providers` TO `p_ai_providers`;
-CREATE TABLE IF NOT EXISTS `ai_conversations` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `title` text,
-  `provider_id` int,
-  `model` text,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `ai_conversations` TO `p_ai_conversations`;
-CREATE TABLE IF NOT EXISTS `ai_messages` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `conversation_id` int NOT NULL,
-  `role` text NOT NULL,
-  `content` text NOT NULL DEFAULT (''),
-  `tool_calls` text,
-  `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`conversation_id`) REFERENCES `p_ai_conversations` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `ai_messages` TO `p_ai_messages`;
-CREATE TABLE IF NOT EXISTS `ai_proposals` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `conversation_id` int NOT NULL,
-  `user_id` varchar(255) NOT NULL,
-  `kind` varchar(255) NOT NULL,
-  `summary` text,
-  `payload` text NOT NULL DEFAULT ('{}'),
-  `status` varchar(32) NOT NULL DEFAULT 'pending',
-  `applied_at` text,
-  `result_summary` text,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`conversation_id`) REFERENCES `p_ai_conversations` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `ai_proposals` TO `p_ai_proposals`;
-
--- ==== plugin ai 0002_provider_sync.sql ====
-ALTER TABLE `p_ai_providers` ADD COLUMN `sync_id` varchar(255) UNIQUE;
-
--- ==== plugin alerts 0001_create_alerts.sql ====
--- alerts 0001: create_alerts
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `p_alerts_channels` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `name` text NOT NULL,
-  `type` varchar(32) NOT NULL,
-  `config` text,
-  `enabled` boolean NOT NULL DEFAULT true,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-CREATE INDEX `idx_alerts_channels_user` ON `p_alerts_channels` (`user_id`);
-CREATE TABLE IF NOT EXISTS `p_alerts_items` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `source` varchar(64) NOT NULL,
-  `category` varchar(128) NOT NULL,
-  `severity` varchar(16) NOT NULL,
-  `title` text NOT NULL,
-  `body` text,
-  `link` text,
-  `context` text,
-  `dedupe_key` varchar(255),
-  `deliveries` text,
-  `read_at` varchar(255),
-  `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-CREATE INDEX `idx_alerts_items_user` ON `p_alerts_items` (`user_id`, `created_at`);
-CREATE INDEX `idx_alerts_items_unread` ON `p_alerts_items` (`user_id`, `read_at`);
-CREATE INDEX `idx_alerts_items_dedupe` ON `p_alerts_items` (`user_id`, `dedupe_key`);
-CREATE TABLE IF NOT EXISTS `p_alerts_rules` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `name` text NOT NULL,
-  `pattern` varchar(128) NOT NULL DEFAULT '*',
-  `min_severity` varchar(16) NOT NULL DEFAULT 'warning',
-  `channel_ids` text NOT NULL,
-  `enabled` boolean NOT NULL DEFAULT true,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-CREATE INDEX `idx_alerts_rules_user` ON `p_alerts_rules` (`user_id`);
-CREATE TABLE IF NOT EXISTS `dismissed_alerts` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `alert_id` text NOT NULL,
-  `dismissed_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `dismissed_alerts` TO `p_alerts_dismissed`;
-
--- ==== plugin file-manager 0001_adopt_file_manager_tables.sql ====
--- file-manager 0001: adopt_file_manager_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `file_manager_recent` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `host_id` int NOT NULL,
-  `name` text NOT NULL,
-  `path` text NOT NULL,
-  `last_opened` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `file_manager_recent` TO `p_file_manager_recent`;
-CREATE TABLE IF NOT EXISTS `file_manager_pinned` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `host_id` int NOT NULL,
-  `name` text NOT NULL,
-  `path` text NOT NULL,
-  `pinned_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `file_manager_pinned` TO `p_file_manager_pinned`;
-CREATE TABLE IF NOT EXISTS `file_manager_shortcuts` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `host_id` int NOT NULL,
-  `name` text NOT NULL,
-  `path` text NOT NULL,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `file_manager_shortcuts` TO `p_file_manager_shortcuts`;
-CREATE TABLE IF NOT EXISTS `transfer_recent` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `source_host_id` int NOT NULL,
-  `dest_host_id` int NOT NULL,
-  `dest_path` text NOT NULL,
-  `dest_path_label` text NOT NULL,
-  `last_used` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`source_host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`dest_host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `transfer_recent` TO `p_file_manager_transfer_recent`;
-
--- ==== plugin ldap 0001_create_providers.sql ====
--- ldap 0001: create_providers
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `p_ldap_providers` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `name` text NOT NULL,
-  `enabled` boolean NOT NULL DEFAULT true,
-  `display_order` int NOT NULL DEFAULT 0,
-  `config` text NOT NULL,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP)
-);
-
--- ==== plugin opkssh 0001_adopt_opkssh_tokens.sql ====
--- opkssh 0001: adopt_opkssh_tokens
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `opkssh_tokens` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `host_id` int NOT NULL,
-  `ssh_cert` text NOT NULL,
-  `private_key` text NOT NULL,
-  `email` text,
-  `sub` text,
-  `issuer` text,
-  `audience` text,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `expires_at` varchar(255) NOT NULL,
-  `last_used` text,
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `opkssh_tokens` TO `p_opkssh_tokens`;
-
--- ==== plugin proxmox 0001_adopt_proxmox_stats.sql ====
--- proxmox 0001: adopt_proxmox_stats
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `proxmox_node_history` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `host_id` int NOT NULL,
-  `ts` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `cpu_percent` double,
-  `mem_percent` double,
-  `disk_percent` double,
-  `net_rx_bytes` int,
-  `net_tx_bytes` int,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `proxmox_node_history` TO `p_proxmox_node_history`;
-CREATE TABLE IF NOT EXISTS `proxmox_stats_preferences` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `host_id` int NOT NULL,
-  `layout` text NOT NULL,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `proxmox_stats_preferences` TO `p_proxmox_stats_preferences`;
-
--- ==== plugin session-recording 0001_adopt_session_recordings.sql ====
--- session-recording 0001: adopt_session_recordings
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `session_recordings` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `host_id` int NOT NULL,
-  `user_id` varchar(255),
-  `username` text,
-  `access_id` int,
-  `started_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `ended_at` text,
-  `duration` int,
-  `commands` text,
-  `dangerous_actions` text,
-  `recording_path` text,
-  `protocol` text NOT NULL DEFAULT ('ssh'),
-  `format` text NOT NULL DEFAULT ('text'),
-  `terminated_by_owner` boolean DEFAULT false,
-  `termination_reason` text,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `session_recordings` TO `p_session_recording_session_recordings`;
-
--- ==== plugin secret-sources 0001_adopt_secret_sources.sql ====
--- secret-sources 0001: adopt_secret_sources
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `secret_sources` (
-  `id` varchar(255) PRIMARY KEY NOT NULL,
-  `user_id` varchar(255) NOT NULL,
-  `name` text NOT NULL,
-  `kind` text NOT NULL DEFAULT ('onepassword-connect'),
-  `base_url` text NOT NULL,
-  `shared` boolean NOT NULL DEFAULT false,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `secret_sources` TO `p_secret_sources_sources`;
-
--- ==== plugin session-sharing 0001_adopt_session_sharing.sql ====
--- session-sharing 0001: adopt_session_sharing
--- Generated by termix-plugin migrations. Review before committing.
--- Hand-edited: keeps the legacy foreign keys the SDK cannot declare
--- (nullable or set-null user and host links, and links between these tables).
-
-CREATE TABLE IF NOT EXISTS `session_shares` (
-  `id` varchar(255) PRIMARY KEY NOT NULL,
-  `host_id` int NOT NULL,
-  `owner_user_id` varchar(255) NOT NULL,
-  `protocol` text NOT NULL,
-  `session_id` varchar(255) NOT NULL,
-  `tab_instance_id` text,
-  `share_type` text NOT NULL,
-  `target_user_id` varchar(255),
-  `link_token` varchar(255) UNIQUE,
-  `permission_level` text NOT NULL DEFAULT ('read-only'),
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `expires_at` text NOT NULL,
-  `revoked_at` text,
-  `last_joined_at` text,
-  `join_count` int NOT NULL DEFAULT 0,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`owner_user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`target_user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `session_shares` TO `p_session_sharing_shares`;
-CREATE TABLE IF NOT EXISTS `session_share_participants` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `share_id` varchar(255) NOT NULL,
-  `user_id` varchar(255),
-  `guest_label` text,
-  `joined_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `left_at` text,
-  FOREIGN KEY (`share_id`) REFERENCES `p_session_sharing_shares` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `session_share_participants` TO `p_session_sharing_share_participants`;
-CREATE TABLE IF NOT EXISTS `collab_rooms` (
-  `id` varchar(255) PRIMARY KEY NOT NULL,
-  `name` text NOT NULL,
-  `owner_user_id` varchar(255) NOT NULL,
-  `persistent` boolean NOT NULL DEFAULT false,
-  `presenter_user_id` varchar(255),
-  `stage_protocol` text,
-  `stage_host_id` int,
-  `stage_share_id` varchar(255),
-  `guest_link_token` varchar(255),
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `ended_at` text,
-  FOREIGN KEY (`owner_user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`presenter_user_id`) REFERENCES `users` (`id`) ON DELETE SET NULL,
-  FOREIGN KEY (`stage_host_id`) REFERENCES `ssh_data` (`id`) ON DELETE SET NULL,
-  FOREIGN KEY (`stage_share_id`) REFERENCES `p_session_sharing_shares` (`id`) ON DELETE SET NULL
-);
-RENAME TABLE `collab_rooms` TO `p_session_sharing_rooms`;
-CREATE TABLE IF NOT EXISTS `collab_room_members` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `room_id` varchar(255) NOT NULL,
-  `user_id` varchar(255) NOT NULL,
-  `room_role` text NOT NULL DEFAULT ('member'),
-  `added_by` varchar(255),
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`room_id`) REFERENCES `p_session_sharing_rooms` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`added_by`) REFERENCES `users` (`id`) ON DELETE SET NULL
-);
-RENAME TABLE `collab_room_members` TO `p_session_sharing_room_members`;
-
--- ==== plugin sso 0001_adopt_sso_providers.sql ====
--- sso 0001: adopt_sso_providers
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `sso_providers` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `name` text NOT NULL,
-  `type` text NOT NULL,
-  `enabled` boolean NOT NULL DEFAULT true,
-  `display_order` int NOT NULL DEFAULT 0,
-  `config` text NOT NULL,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP)
-);
-RENAME TABLE `sso_providers` TO `p_sso_providers`;
-
--- ==== plugin sso 0002_legacy_callback.sql ====
--- sso 0002: legacy_callback
--- Generated by termix-plugin migrations. Review before committing.
-
-ALTER TABLE `p_sso_providers` ADD COLUMN `legacy_callback` boolean NOT NULL DEFAULT false;
--- Providers that existed before 2.9 were registered with the identity
--- provider under /users/oidc/callback, so they keep sending that URI.
-UPDATE `p_sso_providers` SET `legacy_callback` = true;
-
--- ==== plugin step-ca 0001_create_certs.sql ====
--- step-ca 0001: create_certs
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `p_step_ca_certs` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `host_id` int NOT NULL,
-  `ssh_cert` text NOT NULL,
-  `private_key` text NOT NULL,
-  `email` text,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `expires_at` varchar(255) NOT NULL,
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX `idx_step_ca_certs_user_host` ON `p_step_ca_certs` (`user_id`, `host_id`);
-
--- ==== plugin termix-identity 0001_adopt_termix_identity_tables.sql ====
--- termix-identity 0001: adopt_termix_identity_tables
--- Generated by termix-plugin migrations. Review before committing.
--- Hand-edited: keeps the legacy foreign keys the SDK cannot declare
--- (keys and ca to their identity, keys to ssh_credentials).
-
-CREATE TABLE IF NOT EXISTS `termix_identities` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL UNIQUE,
-  `handle` varchar(255) NOT NULL UNIQUE,
-  `description` text,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `termix_identities` TO `p_termix_identity_identities`;
-CREATE TABLE IF NOT EXISTS `termix_identity_keys` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `identity_id` int NOT NULL,
-  `user_id` varchar(255) NOT NULL,
-  `public_key` text NOT NULL,
-  `key_type` text NOT NULL,
-  `algorithm` text NOT NULL,
-  `label` text,
-  `comment` text,
-  `source` text NOT NULL DEFAULT ('manual'),
-  `credential_id` int,
-  `enabled` boolean NOT NULL DEFAULT true,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`identity_id`) REFERENCES `p_termix_identity_identities` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`credential_id`) REFERENCES `ssh_credentials` (`id`) ON DELETE SET NULL
-);
-RENAME TABLE `termix_identity_keys` TO `p_termix_identity_keys`;
-CREATE TABLE IF NOT EXISTS `termix_identity_ca` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `identity_id` int NOT NULL UNIQUE,
-  `user_id` varchar(255) NOT NULL,
-  `public_key` text NOT NULL,
-  `private_key` text NOT NULL,
-  `validity_days` int NOT NULL DEFAULT 90,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`identity_id`) REFERENCES `p_termix_identity_identities` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `termix_identity_ca` TO `p_termix_identity_ca`;
-
--- ==== plugin tmux-monitor 0001_adopt_tmux_session_tags.sql ====
--- tmux-monitor 0001: adopt_tmux_session_tags
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `tmux_session_tags` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `host_id` int NOT NULL,
-  `session_name` text NOT NULL,
-  `tag` text NOT NULL,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE,
-  FOREIGN KEY (`host_id`) REFERENCES `ssh_data` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `tmux_session_tags` TO `p_tmux_monitor_session_tags`;
-
--- ==== plugin totp 0001_create_enrollments.sql ====
--- totp 0001: create_enrollments
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `p_totp_enrollments` (
-  `user_id` varchar(255) PRIMARY KEY NOT NULL,
-  `secret` text,
-  `pending_secret` text,
-  `backup_codes` text,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-
--- ==== plugin vault 0001_adopt_vault_tables.sql ====
--- vault 0001: adopt_vault_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `vault_profiles` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `name` text NOT NULL,
-  `description` text,
-  `folder` text,
-  `tags` text,
-  `vault_addr` text NOT NULL,
-  `vault_namespace` text,
-  `oidc_mount` text,
-  `oidc_role` text,
-  `ssh_mount` text,
-  `ssh_role` text NOT NULL,
-  `valid_principals` text,
-  `key_type` text,
-  `shared` boolean NOT NULL DEFAULT false,
-  `sync_id` varchar(255) UNIQUE,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `vault_profiles` TO `p_vault_profiles`;
-CREATE TABLE IF NOT EXISTS `vault_tokens` (
-  `id` int AUTO_INCREMENT PRIMARY KEY,
-  `user_id` varchar(255) NOT NULL,
-  `profile_id` int NOT NULL,
-  `ssh_cert` text NOT NULL,
-  `private_key` text NOT NULL,
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `expires_at` varchar(255) NOT NULL,
-  `last_used` text,
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `vault_tokens` TO `p_vault_tokens`;
-
--- ==== plugin webauthn 0001_adopt_webauthn_credentials.sql ====
--- webauthn 0001: adopt_webauthn_credentials
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS `webauthn_credentials` (
-  `id` varchar(255) PRIMARY KEY NOT NULL,
-  `user_id` varchar(255) NOT NULL,
-  `name` text NOT NULL,
-  `credential_id` varchar(255) NOT NULL UNIQUE,
-  `public_key` text NOT NULL,
-  `counter` int NOT NULL DEFAULT 0,
-  `device_type` text,
-  `backed_up` boolean NOT NULL DEFAULT false,
-  `transports` text,
-  `user_verification` text NOT NULL DEFAULT ('preferred'),
-  `created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-  `last_used_at` text,
-  FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE CASCADE
-);
-RENAME TABLE `webauthn_credentials` TO `p_webauthn_credentials`;
diff --git a/src/backend/tests/fixtures/upgrade/upgrade-postgres.sql b/src/backend/tests/fixtures/upgrade/upgrade-postgres.sql
deleted file mode 100644
index 941e89fa1..000000000
--- a/src/backend/tests/fixtures/upgrade/upgrade-postgres.sql
+++ /dev/null
@@ -1,1434 +0,0 @@
--- Termix 2.8.0 to 2.9.0 on postgres, generated by scripts/lib/upgrade-sql.mjs
-
--- ==== core 0025_purple_squirrel_girl ====
-CREATE TABLE "plugin_storage" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"plugin_id" varchar(255) NOT NULL,
-	"key" varchar(255) NOT NULL,
-	"value" text NOT NULL,
-	"updated_at" varchar(255) DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-ALTER TABLE "plugin_storage" ADD CONSTRAINT "plugin_storage_plugin_id_plugins_id_fk" FOREIGN KEY ("plugin_id") REFERENCES "public"."plugins"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-CREATE UNIQUE INDEX "idx_plugin_storage_plugin_key" ON "plugin_storage" USING btree ("plugin_id","key");
-
--- ==== core 0026_perfect_masque ====
-DROP TABLE "alert_firings" CASCADE;--> statement-breakpoint
-DROP TABLE "alert_rule_channels" CASCADE;--> statement-breakpoint
-DROP TABLE "alert_rules" CASCADE;
-
--- ==== core 0027_sharp_guardian ====
-ALTER TABLE "plugin_permission_grants" ALTER COLUMN "granted_by" DROP NOT NULL;--> statement-breakpoint
-ALTER TABLE "plugin_permission_grants" ADD COLUMN "source" text DEFAULT 'admin' NOT NULL;--> statement-breakpoint
-ALTER TABLE "plugins" ADD COLUMN "last_error" text;
-
--- ==== core 0028_whole_zemo ====
-CREATE TABLE "plugin_migrations" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"plugin_id" varchar(255) NOT NULL,
-	"migration_id" varchar(255) NOT NULL,
-	"checksum" text NOT NULL,
-	"applied_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-ALTER TABLE "plugin_migrations" ADD CONSTRAINT "plugin_migrations_plugin_id_plugins_id_fk" FOREIGN KEY ("plugin_id") REFERENCES "public"."plugins"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-CREATE UNIQUE INDEX "idx_plugin_migrations_plugin_migration" ON "plugin_migrations" USING btree ("plugin_id","migration_id");
-
--- ==== core 0029_nosy_roulette ====
-CREATE TABLE "rbac_applied_defaults" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"role_name" varchar(255) NOT NULL,
-	"permission" varchar(255) NOT NULL,
-	"applied_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "rbac_known_permissions" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"permission" varchar(255) NOT NULL,
-	"plugin_id" varchar(255),
-	"first_seen_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE UNIQUE INDEX "idx_rbac_applied_defaults_role_permission" ON "rbac_applied_defaults" USING btree ("role_name","permission");--> statement-breakpoint
-CREATE UNIQUE INDEX "idx_rbac_known_permissions_permission" ON "rbac_known_permissions" USING btree ("permission");
-
--- ==== core 0030_cynical_callisto ====
-CREATE TABLE "plugin_settings" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"plugin_id" varchar(255) NOT NULL,
-	"scope" varchar(255) NOT NULL,
-	"scope_id" varchar(255),
-	"key" varchar(255) NOT NULL,
-	"value" text,
-	"encrypted" boolean DEFAULT false NOT NULL,
-	"updated_at" varchar(255) DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-ALTER TABLE "plugin_settings" ADD CONSTRAINT "plugin_settings_plugin_id_plugins_id_fk" FOREIGN KEY ("plugin_id") REFERENCES "public"."plugins"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-CREATE UNIQUE INDEX "idx_plugin_settings_scope_key" ON "plugin_settings" USING btree ("plugin_id","scope","scope_id","key");--> statement-breakpoint
-CREATE INDEX "idx_plugin_settings_plugin_scope" ON "plugin_settings" USING btree ("plugin_id","scope");
-
--- ==== core 0031_nifty_sentry ====
-CREATE TABLE "user_external_identities" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"provider_id" varchar(255) NOT NULL,
-	"subject" varchar(255) NOT NULL,
-	"email" text,
-	"created_at" varchar(255) DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "user_second_factors" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"plugin_id" varchar(255) NOT NULL,
-	"factor_id" varchar(255) NOT NULL,
-	"enrolled_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-ALTER TABLE "user_external_identities" ADD CONSTRAINT "user_external_identities_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "user_second_factors" ADD CONSTRAINT "user_second_factors_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-CREATE UNIQUE INDEX "idx_user_external_identities_provider_subject" ON "user_external_identities" USING btree ("provider_id","subject");--> statement-breakpoint
-CREATE INDEX "idx_user_external_identities_user" ON "user_external_identities" USING btree ("user_id");--> statement-breakpoint
-CREATE UNIQUE INDEX "idx_user_second_factors_user_factor" ON "user_second_factors" USING btree ("user_id","plugin_id","factor_id");
-
--- ==== core 0032_nifty_hedge_knight ====
--- user_workspaces moved to the workspaces plugin, whose first migration renames it
--- to p_workspaces_workspaces. Dropping it here would lose every saved workspace,
--- so this only stops drizzle tracking it. SELECT 1 because MySQL rejects an
--- empty query.
-SELECT 1;
-
--- ==== core 0033_bent_trish_tilby ====
--- network_topology moved to the network-topology plugin, which adopts (renames)
--- this table in its own migration before this drizzle migration would run.
--- No DROP here: it would delete every row before the plugin's rename applies.
-SELECT 1;
-
--- ==== core 0034_free_smiling_tiger ====
--- snippets, snippet_folders and snippet_access moved to the snippets plugin
--- (p_snippets_*), adopted by rename rather than dropped. A real DROP TABLE
--- here would run before the plugin's adoption migration and delete every row.
-SELECT 1;
-
--- ==== core 0035_ambitious_klaw ====
--- dropped, see plugin adoption (fleets plugin, migrations/postgres/0001_adopt_fleets.sql)
-SELECT 1;
-
--- ==== core 0036_redundant_ender_wiggin ====
--- proxmox_node_history and proxmox_stats_preferences moved to the proxmox
--- plugin (p_proxmox_*), adopted by rename rather than dropped. The four
--- ssh_data proxmox columns are copied into the plugin's host settings after
--- plugins load, which is after this migration, so a real DROP COLUMN here
--- would delete the data first. The columns stay in place, unused, until 3.0.0.
-SELECT 1;
-
--- ==== core 0037_dizzy_sage ====
--- file_manager_pinned, file_manager_recent, file_manager_shortcuts and
--- transfer_recent are adopted (renamed, not dropped) by the file-manager
--- plugin's own migration, which runs at plugin activation, after core's
--- drizzle migrations. A DROP TABLE here would run first and delete the data.
-SELECT 1;
-
--- ==== core 0038_cute_vermin ====
--- c2s_tunnel_presets moved to the tunnels plugin, whose first migration renames
--- it to p_tunnels_presets. Dropping it here would lose every saved preset, so
--- this only stops drizzle tracking it. SELECT 1 because MySQL rejects an
--- empty query.
-SELECT 1;
-
--- ==== core 0039_violet_firedrake ====
--- command_history moved to the ssh-terminal plugin, whose first migration
--- renames it to p_ssh_terminal_command_history. Dropping it here would lose
--- every saved command, so this only stops drizzle tracking it. SELECT 1
--- because MySQL rejects an empty query.
-SELECT 1;
-
--- ==== core 0040_narrow_hellion ====
--- tmux_session_tags moved to the tmux-monitor plugin, whose first migration
--- renames it to p_tmux_monitor_session_tags. Dropping it here would lose
--- every saved tag, so this only stops drizzle tracking it. SELECT 1 because
--- MySQL rejects an empty query.
-SELECT 1;
-
--- ==== core 0041_watery_zeigeist ====
--- session_shares, session_share_participants, collab_rooms and
--- collab_room_members moved to the session-sharing plugin, whose first
--- migration renames them. Dropping them here would lose every share and
--- room, so this only stops drizzle tracking them. SELECT 1 because MySQL
--- rejects an empty query.
-SELECT 1;
-
--- ==== core 0042_strange_shocker ====
--- session_recordings moved to the session-recording plugin, whose first
--- migration renames it. Dropping it here would lose every recording, so
--- this only stops drizzle tracking it. SELECT 1 because MySQL rejects an
--- empty query.
-SELECT 1;
-
--- ==== core 0043_melodic_terror ====
--- The remote desktop host options (enable_rdp, enable_vnc, enable_telnet,
--- the three ports, rdp_security, rdp_ignore_cert, security, ignore_cert,
--- guacamole_config) and user_preferences.rdp_defaults moved to the
--- remote-desktop plugin's settings. The copy runs after plugins load, which
--- is after this migration, so a real DROP COLUMN here would delete the data
--- first. The columns stay in place, unused, until 3.0.0.
-SELECT 1;
-
--- ==== core 0044_nostalgic_omega_sentinel ====
--- host_metrics_preferences, host_health_checks, host_health_history and
--- host_metrics_history moved to the host-metrics plugin, which adopts them by
--- rename in its own first migration. That runs after this one, so a real
--- DROP TABLE here would delete every row first.
-SELECT 1;--> statement-breakpoint
--- Status checks are core: the per-host switch and interval, copied out of
--- stats_config at boot by host-status-config-migration.ts.
-ALTER TABLE "ssh_data" ADD COLUMN "status_check_enabled" boolean DEFAULT true NOT NULL;--> statement-breakpoint
-ALTER TABLE "ssh_data" ADD COLUMN "status_check_interval" integer;
-
--- ==== core 0045_thankful_shinobi_shaw ====
--- ssh_data.stats_config split: its status half moved to status_check_enabled
--- and status_check_interval, its metrics half to the host-metrics plugin's
--- host settings. Both copies run at boot, after this migration, so a real
--- DROP COLUMN here would delete the data first. The column stays in place,
--- unused, until 3.0.0.
-SELECT 1;
-
--- ==== core 0046_small_white_tiger ====
--- ssh_data.enable_docker and docker_config moved to the docker plugin's host
--- settings. The copy runs at boot, after this migration, so a real DROP
--- COLUMN here would delete the data first. The columns stay in place,
--- unused, until 3.0.0.
-SELECT 1;
-
--- ==== core 0047_mighty_butterfly ====
--- The automation tables moved to the automations plugin, which renames them
--- into its own namespace at activation. That runs after this migration, so a
--- real DROP TABLE here would delete every automation first.
-SELECT 1;
-
--- ==== core 0048_rare_catseye ====
--- The ai tables moved to the ai plugin, which renames them into its own
--- namespace at activation, and ssh_data.enable_ai_assistant and the two
--- user_preferences ai columns moved to its settings. Both run after this
--- migration, so a real DROP here would delete the data first. The columns
--- stay in place, unused, until 3.0.0. The timestamp and label type changes
--- drizzle-kit also wrote are generator drift (see FINISH-LIST.md), not a
--- change to the database, and are left out on purpose.
-SELECT 1;
-
--- ==== core 0049_reflective_adam_destine ====
--- dashboard_service_links, homepage_items and homepage_layouts moved to the
--- homepage plugin, which adopts them by rename at activation (see
--- plugins/homepage/migrations/postgres/0001_adopt_homepage_tables.sql).
--- Dropping them here would delete every row before the plugin's migration
--- ever runs, since this runs at boot before the plugins table exists.
-SELECT 1;
-
--- ==== core 0050_acoustic_lady_bullseye ====
--- mac_address and wol_broadcast_address move to the wake-on-lan plugin's
--- host settings at boot, after this migration runs. Dropping them here would
--- delete the data before the copy has a chance to run.
-SELECT 1;
-
--- ==== core 0051_useful_slyde ====
--- secret_sources moves to the secret-sources plugin's adopted table at
--- activation, after this migration runs. Dropping it here would delete the
--- data before the plugin has a chance to rename it.
-SELECT 1;
-
--- ==== core 0052_motionless_krista_starr ====
--- webauthn_credentials moves to the webauthn plugin's adopted table at
--- activation, and the users TOTP columns are read by the TOTP boot migration
--- after this runs. Dropping either here would lose the data first.
-SELECT 1;
-
--- ==== core 0053_keen_thanos ====
--- sso_providers moves to the sso plugin's adopted table at activation, and
--- its LDAP rows are copied into the ldap plugin by a boot migration after
--- this runs. Dropping it here would lose the data first.
-SELECT 1;
-
--- ==== core 0054_cloudy_galactus ====
--- opkssh_tokens moves to the opkssh plugin's adopted table at activation,
--- and ssh_data.use_warpgate is copied into the warpgate plugin's host
--- settings by a boot migration after this runs. Dropping either here would
--- lose the data first.
-SELECT 1;
-
--- ==== core 0055_jazzy_quasimodo ====
--- vault_profiles and vault_tokens move to the vault plugin's adopted tables
--- at activation, and ssh_data.vault_profile_id is copied into the vault
--- plugin's host settings by a boot migration after this runs. Dropping any
--- of them here would lose the data first.
-SELECT 1;
-
--- ==== core 0056_chilly_vindicator ====
--- termix_identities, termix_identity_keys and termix_identity_ca move to the
--- termix-identity plugin's adopted tables at activation. Dropping them here
--- would lose the data first.
-SELECT 1;
-
--- ==== core 0057_married_dragon_lord ====
--- The dialect generator now decides varchar or text per table. Columns that
--- were varchar(255) only because the same name was a key in another table
--- become text, and the timestamps and labels B18's regeneration left as
--- varchar(255) on real databases follow. varchar to text keeps every value.
-ALTER TABLE "api_keys" ALTER COLUMN "name" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "api_keys" ALTER COLUMN "created_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "api_keys" ALTER COLUMN "created_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "api_keys" ALTER COLUMN "expires_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "credential_access" ALTER COLUMN "expires_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "credential_access" ALTER COLUMN "created_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "credential_access" ALTER COLUMN "created_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "credential_sidebar_preferences" ALTER COLUMN "updated_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "credential_sidebar_preferences" ALTER COLUMN "updated_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "folder_access" ALTER COLUMN "expires_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "folder_access" ALTER COLUMN "created_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "folder_access" ALTER COLUMN "created_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "host_access" ALTER COLUMN "created_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "host_access" ALTER COLUMN "created_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "host_sidebar_preferences" ALTER COLUMN "updated_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "host_sidebar_preferences" ALTER COLUMN "updated_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "ssh_data" ALTER COLUMN "name" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "ssh_data" ALTER COLUMN "folder" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "ssh_data" ALTER COLUMN "created_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "ssh_data" ALTER COLUMN "created_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "ssh_data" ALTER COLUMN "updated_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "ssh_data" ALTER COLUMN "updated_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "notification_channels" ALTER COLUMN "name" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "notification_channels" ALTER COLUMN "created_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "notification_channels" ALTER COLUMN "created_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "plugin_install_counts" ALTER COLUMN "updated_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "plugin_install_counts" ALTER COLUMN "updated_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "plugin_registries" ALTER COLUMN "name" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "plugin_settings" ALTER COLUMN "updated_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "plugin_settings" ALTER COLUMN "updated_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "plugin_storage" ALTER COLUMN "updated_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "plugin_storage" ALTER COLUMN "updated_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "plugins" ALTER COLUMN "name" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "plugins" ALTER COLUMN "updated_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "plugins" ALTER COLUMN "updated_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "rbac_known_permissions" ALTER COLUMN "plugin_id" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "roles" ALTER COLUMN "created_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "roles" ALTER COLUMN "created_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "roles" ALTER COLUMN "updated_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "roles" ALTER COLUMN "updated_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "sessions" ALTER COLUMN "created_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "sessions" ALTER COLUMN "created_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "shared_credential_secrets" ALTER COLUMN "created_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "shared_credential_secrets" ALTER COLUMN "created_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "shared_credential_secrets" ALTER COLUMN "updated_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "shared_credential_secrets" ALTER COLUMN "updated_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "shared_host_auth_overrides" ALTER COLUMN "created_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "shared_host_auth_overrides" ALTER COLUMN "created_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "shared_host_auth_overrides" ALTER COLUMN "updated_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "shared_host_auth_overrides" ALTER COLUMN "updated_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "shared_host_secrets" ALTER COLUMN "created_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "shared_host_secrets" ALTER COLUMN "created_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "shared_host_secrets" ALTER COLUMN "updated_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "shared_host_secrets" ALTER COLUMN "updated_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "ssh_credentials" ALTER COLUMN "name" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "ssh_credentials" ALTER COLUMN "folder" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "ssh_credentials" ALTER COLUMN "created_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "ssh_credentials" ALTER COLUMN "created_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "ssh_credentials" ALTER COLUMN "updated_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "ssh_credentials" ALTER COLUMN "updated_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "ssh_folders" ALTER COLUMN "name" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "ssh_folders" ALTER COLUMN "created_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "ssh_folders" ALTER COLUMN "created_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "ssh_folders" ALTER COLUMN "updated_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "ssh_folders" ALTER COLUMN "updated_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "sync_tombstones" ALTER COLUMN "sync_id" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "trusted_devices" ALTER COLUMN "created_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "trusted_devices" ALTER COLUMN "created_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "trusted_devices" ALTER COLUMN "expires_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "ui_preferences" ALTER COLUMN "updated_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "ui_preferences" ALTER COLUMN "updated_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "user_external_identities" ALTER COLUMN "created_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "user_external_identities" ALTER COLUMN "created_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "user_open_tabs" ALTER COLUMN "label" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "user_open_tabs" ALTER COLUMN "created_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "user_open_tabs" ALTER COLUMN "created_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "user_open_tabs" ALTER COLUMN "updated_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "user_open_tabs" ALTER COLUMN "updated_at" SET DEFAULT CURRENT_TIMESTAMP;--> statement-breakpoint
-ALTER TABLE "user_preferences" ALTER COLUMN "updated_at" SET DATA TYPE text;--> statement-breakpoint
-ALTER TABLE "user_preferences" ALTER COLUMN "updated_at" SET DEFAULT CURRENT_TIMESTAMP;
-
--- ==== core 0058_goofy_ma_gnuci ====
--- The file manager, tunnels, web endpoint, terminal, tmux monitor, session
--- sharing and session recording host columns, and the dead show_*_in_sidebar
--- columns, moved to their plugins' host settings. The copies run after
--- plugins load, which is after this migration, so a real DROP COLUMN here
--- would delete the data first. The columns stay in place, unused, until 3.0.0.
-SELECT 1;
-
--- ==== core 0059_square_korg ====
--- dismissed_alerts and notification_channels moved to the alerts plugin. It
--- renames the first into its own namespace and copies the second at
--- activation, both after this migration, so a real DROP TABLE here would
--- delete them first. notification_channels stays in place, unused, until
--- 3.0.0.
-SELECT 1;
-
--- ==== core 0060_conscious_juggernaut ====
-CREATE TABLE "sync_conflicts" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"entity_type" text NOT NULL,
-	"sync_id" text NOT NULL,
-	"local_row" text NOT NULL,
-	"server_revision" integer NOT NULL,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "sync_link" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"server_url" text NOT NULL,
-	"server_name" text,
-	"server_version" text,
-	"session_token" text,
-	"custom_headers" text,
-	"basic_auth" text,
-	"allow_invalid_certificate" boolean DEFAULT false NOT NULL,
-	"remote_user_id" text,
-	"remote_username" text,
-	"account" text,
-	"scope" text,
-	"known_types" text,
-	"cursor" integer DEFAULT 0 NOT NULL,
-	"status" text DEFAULT 'idle' NOT NULL,
-	"last_error" text,
-	"linked_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"last_sync_at" text
-);
---> statement-breakpoint
-CREATE TABLE "sync_records" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"entity_type" varchar(255) NOT NULL,
-	"sync_id" varchar(255) NOT NULL,
-	"revision" integer DEFAULT 0 NOT NULL,
-	"seq" integer DEFAULT 0 NOT NULL,
-	"hash" text,
-	"deleted" boolean DEFAULT false NOT NULL,
-	"error" text,
-	"error_hash" text,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-ALTER TABLE "ssh_data" ADD COLUMN "local_only" boolean DEFAULT false NOT NULL;--> statement-breakpoint
-ALTER TABLE "ssh_data" ADD COLUMN "shared_source" text;--> statement-breakpoint
-ALTER TABLE "ssh_credentials" ADD COLUMN "shared_source" text;--> statement-breakpoint
-ALTER TABLE "ssh_folders" ADD COLUMN "local_only" boolean DEFAULT false NOT NULL;--> statement-breakpoint
-ALTER TABLE "sync_conflicts" ADD CONSTRAINT "sync_conflicts_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "sync_link" ADD CONSTRAINT "sync_link_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "sync_records" ADD CONSTRAINT "sync_records_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-CREATE INDEX "idx_sync_conflicts_user" ON "sync_conflicts" USING btree ("user_id");--> statement-breakpoint
-CREATE UNIQUE INDEX "idx_sync_records_user_entity_sync" ON "sync_records" USING btree ("user_id","entity_type","sync_id");--> statement-breakpoint
-CREATE INDEX "idx_sync_records_user_seq" ON "sync_records" USING btree ("user_id","seq");
-
--- ==== core 0061_red_lila_cheney ====
-DROP TABLE "sync_tombstones" CASCADE;
-
--- ==== core 0062_curvy_killmonger ====
-ALTER TABLE "ssh_data" ADD COLUMN "ssh_options" text;
-
--- ==== core 0063_giant_starfox ====
--- The RDP, VNC and Telnet logins moved out of ssh_data into host_protocol_auth.
--- A boot migration copies them after this runs, so the old ssh_data columns
--- and their foreign keys stay in place, unused, until 3.0.0.
-CREATE TABLE "host_protocol_auth" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"host_id" integer NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"protocol" varchar(255) NOT NULL,
-	"auth_type" text DEFAULT 'direct' NOT NULL,
-	"credential_id" integer,
-	"username" text,
-	"password" text,
-	"fields" text,
-	"secret_fields" text,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-ALTER TABLE "shared_host_secrets" ADD COLUMN "encrypted_fields" text;--> statement-breakpoint
-ALTER TABLE "host_protocol_auth" ADD CONSTRAINT "host_protocol_auth_host_id_ssh_data_id_fk" FOREIGN KEY ("host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "host_protocol_auth" ADD CONSTRAINT "host_protocol_auth_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "host_protocol_auth" ADD CONSTRAINT "host_protocol_auth_credential_id_ssh_credentials_id_fk" FOREIGN KEY ("credential_id") REFERENCES "public"."ssh_credentials"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-CREATE UNIQUE INDEX "idx_host_protocol_auth_host_protocol" ON "host_protocol_auth" USING btree ("host_id","protocol");--> statement-breakpoint
-CREATE INDEX "idx_host_protocol_auth_user" ON "host_protocol_auth" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX "idx_host_protocol_auth_credential" ON "host_protocol_auth" USING btree ("credential_id");
-
--- ==== core 0064_sticky_pestilence ====
--- ssh_data.autostart_password, autostart_key and autostart_key_password held
--- copies of a host's login for 2.8's autostart endpoint, which nothing has read
--- since. They leave the schema but stay in place, unused, until 3.0.0, so no
--- install loses what it stored.
-SELECT 1;
-
--- ==== core 0065_regular_joystick ====
-CREATE TABLE "host_defaults" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"level" text NOT NULL,
-	"scope_key" varchar(255) NOT NULL,
-	"user_id" varchar(255),
-	"folder_id" integer,
-	"namespace" varchar(255) NOT NULL,
-	"key" varchar(255) NOT NULL,
-	"value" text,
-	"updated_by" text,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-ALTER TABLE "ssh_data" ADD COLUMN "default_overrides" text;--> statement-breakpoint
-ALTER TABLE "host_defaults" ADD CONSTRAINT "host_defaults_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "host_defaults" ADD CONSTRAINT "host_defaults_folder_id_ssh_folders_id_fk" FOREIGN KEY ("folder_id") REFERENCES "public"."ssh_folders"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-CREATE UNIQUE INDEX "idx_host_defaults_scope_key" ON "host_defaults" USING btree ("scope_key","namespace","key");--> statement-breakpoint
-CREATE INDEX "idx_host_defaults_user" ON "host_defaults" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX "idx_host_defaults_folder" ON "host_defaults" USING btree ("folder_id");
-
--- ==== plugin workspaces 0001_adopt_user_workspaces.sql ====
--- workspaces 0001: adopt_user_workspaces
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "user_workspaces" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "name" text NOT NULL,
-  "color" text,
-  "icon" text,
-  "kind" text NOT NULL DEFAULT 'manual',
-  "is_default" boolean NOT NULL DEFAULT false,
-  "payload" text NOT NULL DEFAULT '{}',
-  "sync_id" varchar(255) UNIQUE,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "last_used_at" text,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_user_workspaces_user_id" ON "user_workspaces" ("user_id");
-ALTER TABLE "user_workspaces" RENAME TO "p_workspaces_workspaces";
-
--- ==== plugin network-topology 0001_adopt_network_topology.sql ====
--- network-topology 0001: adopt_network_topology
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "network_topology" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "topology" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "network_topology" RENAME TO "p_network_topology_graphs";
-
--- ==== plugin snippets 0001_adopt_snippets_tables.sql ====
--- snippets 0001: adopt_snippets_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "snippets" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "name" text NOT NULL,
-  "content" text NOT NULL,
-  "description" text,
-  "folder" text,
-  "order" integer NOT NULL DEFAULT 0,
-  "sync_id" varchar(255) UNIQUE,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "host_filter" text,
-  "is_note" boolean NOT NULL DEFAULT false,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_snippets_user_id" ON "snippets" ("user_id");
-ALTER TABLE "snippets" RENAME TO "p_snippets_snippets";
-CREATE TABLE IF NOT EXISTS "snippet_folders" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "name" text NOT NULL,
-  "color" text,
-  "icon" text,
-  "sync_id" varchar(255) UNIQUE,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "snippet_folders" RENAME TO "p_snippets_snippet_folders";
-CREATE TABLE IF NOT EXISTS "snippet_access" (
-  "id" serial PRIMARY KEY,
-  "snippet_id" integer NOT NULL,
-  "user_id" varchar(255),
-  "role_id" integer,
-  "granted_by" varchar(255) NOT NULL,
-  "permission_level" text NOT NULL DEFAULT 'view',
-  "expires_at" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("granted_by") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_snippet_access_user_id" ON "snippet_access" ("user_id");
-CREATE INDEX IF NOT EXISTS "idx_snippet_access_snippet_id" ON "snippet_access" ("snippet_id");
-CREATE INDEX IF NOT EXISTS "idx_snippet_access_role_id" ON "snippet_access" ("role_id");
-ALTER TABLE "snippet_access" RENAME TO "p_snippets_snippet_access";
-
--- ==== plugin fleets 0001_adopt_fleets.sql ====
--- fleets 0001: adopt_fleets
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "fleets" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "name" text NOT NULL,
-  "description" text,
-  "color" text,
-  "icon" text,
-  "tag_rules" text,
-  "sync_id" varchar(255) UNIQUE,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "fleets" RENAME TO "p_fleets_fleets";
-CREATE TABLE IF NOT EXISTS "fleet_members" (
-  "id" serial PRIMARY KEY,
-  "fleet_id" integer NOT NULL,
-  "host_id" integer NOT NULL,
-  "added_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("fleet_id") REFERENCES "p_fleets_fleets" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_fleet_members_fleet_host" ON "fleet_members" ("fleet_id", "host_id");
-CREATE INDEX IF NOT EXISTS "idx_fleet_members_host" ON "fleet_members" ("host_id");
-ALTER TABLE "fleet_members" RENAME TO "p_fleets_members";
-CREATE TABLE IF NOT EXISTS "fleet_inventory" (
-  "id" serial PRIMARY KEY,
-  "host_id" integer NOT NULL,
-  "user_id" varchar(255) NOT NULL,
-  "os_pretty_name" text,
-  "kernel" text,
-  "architecture" text,
-  "hostname" text,
-  "uptime_seconds" integer,
-  "ip" text,
-  "package_manager" text,
-  "collected_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_fleet_inventory_host" ON "fleet_inventory" ("host_id", "user_id");
-CREATE INDEX IF NOT EXISTS "idx_fleet_inventory_user" ON "fleet_inventory" ("user_id");
-ALTER TABLE "fleet_inventory" RENAME TO "p_fleets_inventory";
-
--- ==== plugin ssh-terminal 0001_adopt_command_history.sql ====
--- ssh-terminal 0001: adopt_command_history
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "command_history" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "host_id" integer NOT NULL,
-  "command" text NOT NULL,
-  "executed_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_command_history_user_host" ON "command_history" ("user_id", "host_id");
-ALTER TABLE "command_history" RENAME TO "p_ssh_terminal_command_history";
-
--- ==== plugin tunnels 0001_adopt_c2s_tunnel_presets.sql ====
--- tunnels 0001: adopt_c2s_tunnel_presets
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "c2s_tunnel_presets" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "name" text NOT NULL,
-  "config" text NOT NULL,
-  "platform" text,
-  "computer_name" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "c2s_tunnel_presets" RENAME TO "p_tunnels_presets";
-
--- ==== plugin host-metrics 0001_adopt_host_metrics_tables.sql ====
--- host-metrics 0001: adopt_host_metrics_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "host_metrics_preferences" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "host_id" integer NOT NULL,
-  "layout" text NOT NULL,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_host_metrics_prefs_user_host" ON "host_metrics_preferences" ("user_id", "host_id");
-ALTER TABLE "host_metrics_preferences" RENAME TO "p_host_metrics_host_metrics_preferences";
-CREATE TABLE IF NOT EXISTS "host_health_checks" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "host_id" integer NOT NULL,
-  "checks" text NOT NULL,
-  "interval_seconds" integer NOT NULL DEFAULT 300,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_host_health_checks_user_host" ON "host_health_checks" ("user_id", "host_id");
-ALTER TABLE "host_health_checks" RENAME TO "p_host_metrics_host_health_checks";
-CREATE TABLE IF NOT EXISTS "host_health_history" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "host_id" integer NOT NULL,
-  "check_id" varchar(255) NOT NULL,
-  "ts" varchar(255) NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "ok" boolean NOT NULL,
-  "latency_ms" integer,
-  "detail" text,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_host_health_history_lookup" ON "host_health_history" ("user_id", "host_id", "check_id", "ts");
-ALTER TABLE "host_health_history" RENAME TO "p_host_metrics_host_health_history";
-CREATE TABLE IF NOT EXISTS "host_metrics_history" (
-  "id" serial PRIMARY KEY,
-  "host_id" integer NOT NULL,
-  "ts" varchar(255) NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "cpu_percent" double precision,
-  "mem_percent" double precision,
-  "disk_percent" double precision,
-  "net_rx_bytes" integer,
-  "net_tx_bytes" integer,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_host_metrics_history_host_ts" ON "host_metrics_history" ("host_id", "ts");
-ALTER TABLE "host_metrics_history" RENAME TO "p_host_metrics_host_metrics_history";
-
--- ==== plugin automations 0001_adopt_automations.sql ====
--- automations 0001: adopt_automations
--- Generated by termix-plugin migrations. Review before committing.
--- Hand-edited: keeps the legacy foreign keys the SDK cannot declare
--- (links between these tables, and a channel link to notification_channels).
-
-CREATE TABLE IF NOT EXISTS "automations" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "name" text NOT NULL,
-  "description" text,
-  "enabled" boolean NOT NULL DEFAULT true,
-  "definition" text NOT NULL,
-  "definition_version" integer NOT NULL DEFAULT 1,
-  "concurrency_policy" text NOT NULL DEFAULT 'skip',
-  "max_run_seconds" integer NOT NULL DEFAULT 300,
-  "dry_run" boolean NOT NULL DEFAULT false,
-  "last_run_at" text,
-  "last_run_status" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_automations_user" ON "automations" ("user_id", "enabled");
-ALTER TABLE "automations" RENAME TO "p_automations_automations";
-CREATE TABLE IF NOT EXISTS "automation_trigger_state" (
-  "id" serial PRIMARY KEY,
-  "automation_id" integer NOT NULL,
-  "state_key" varchar(255) NOT NULL,
-  "breach_started_at" text,
-  "last_fired_at" text,
-  "last_value" double precision,
-  "last_observed_state" text,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("automation_id") REFERENCES "p_automations_automations" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_automation_trigger_state_key" ON "automation_trigger_state" ("automation_id", "state_key");
-ALTER TABLE "automation_trigger_state" RENAME TO "p_automations_trigger_state";
-CREATE TABLE IF NOT EXISTS "automation_schedules" (
-  "id" serial PRIMARY KEY,
-  "automation_id" integer NOT NULL,
-  "cron" text,
-  "interval_seconds" integer,
-  "timezone" text,
-  "next_due_at" varchar(255),
-  "last_tick_at" text,
-  FOREIGN KEY ("automation_id") REFERENCES "p_automations_automations" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_automation_schedules_automation" ON "automation_schedules" ("automation_id");
-CREATE INDEX IF NOT EXISTS "idx_automation_schedules_due" ON "automation_schedules" ("next_due_at");
-ALTER TABLE "automation_schedules" RENAME TO "p_automations_schedules";
-CREATE TABLE IF NOT EXISTS "automation_runs" (
-  "id" serial PRIMARY KEY,
-  "automation_id" integer NOT NULL,
-  "user_id" varchar(255) NOT NULL,
-  "trigger_type" text NOT NULL,
-  "trigger_context" text,
-  "status" text NOT NULL,
-  "started_at" varchar(255) NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "finished_at" text,
-  "duration_ms" integer,
-  "error" text,
-  "dry_run" boolean NOT NULL DEFAULT false,
-  "parent_run_id" integer,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("automation_id") REFERENCES "p_automations_automations" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_automation_runs_automation" ON "automation_runs" ("automation_id", "started_at");
-CREATE INDEX IF NOT EXISTS "idx_automation_runs_user" ON "automation_runs" ("user_id", "started_at");
-ALTER TABLE "automation_runs" RENAME TO "p_automations_runs";
-CREATE TABLE IF NOT EXISTS "automation_run_steps" (
-  "id" serial PRIMARY KEY,
-  "run_id" integer NOT NULL,
-  "step_index" integer NOT NULL,
-  "step_id" text NOT NULL,
-  "step_type" text NOT NULL,
-  "status" text NOT NULL,
-  "started_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "finished_at" text,
-  "output" text,
-  "error" text,
-  "truncated" boolean NOT NULL DEFAULT false,
-  FOREIGN KEY ("run_id") REFERENCES "p_automations_runs" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_automation_run_steps_run" ON "automation_run_steps" ("run_id", "step_index");
-ALTER TABLE "automation_run_steps" RENAME TO "p_automations_run_steps";
-CREATE TABLE IF NOT EXISTS "automation_channels" (
-  "id" serial PRIMARY KEY,
-  "automation_id" integer NOT NULL,
-  "channel_id" integer NOT NULL,
-  FOREIGN KEY ("automation_id") REFERENCES "p_automations_automations" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("channel_id") REFERENCES "notification_channels" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_automation_channels_pair" ON "automation_channels" ("automation_id", "channel_id");
-ALTER TABLE "automation_channels" RENAME TO "p_automations_channels";
-
--- ==== plugin automations 0002_unlink_channels.sql ====
--- automations 0002: unlink_channels
--- Hand-written: channels moved from core's notification_channels to the
--- alerts plugin, so the link table drops its foreign key to the old table.
--- The constraint's name differs between installs, so the table is rebuilt.
-
-CREATE TABLE IF NOT EXISTS "p_automations_channels_v2" (
-  "id" serial PRIMARY KEY,
-  "automation_id" integer NOT NULL,
-  "channel_id" integer NOT NULL,
-  FOREIGN KEY ("automation_id") REFERENCES "p_automations_automations" ("id") ON DELETE CASCADE
-);
-INSERT INTO "p_automations_channels_v2" ("id", "automation_id", "channel_id") SELECT "id", "automation_id", "channel_id" FROM "p_automations_channels";
-DROP TABLE "p_automations_channels";
-ALTER TABLE "p_automations_channels_v2" RENAME TO "p_automations_channels";
-SELECT setval(pg_get_serial_sequence('p_automations_channels', 'id'), COALESCE((SELECT MAX("id") FROM "p_automations_channels"), 1));
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_automation_channels_pair" ON "p_automations_channels" ("automation_id", "channel_id");
-
--- ==== plugin automations 0003_host_maintenance.sql ====
--- automations 0003: host_maintenance
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "p_automations_host_maintenance" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "host_id" integer NOT NULL,
-  "state" text NOT NULL,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "maintenance_host_owner" ON "p_automations_host_maintenance" ("user_id", "host_id");
-
--- ==== plugin automations 0004_rename_maintenance_index.sql ====
--- automations 0004: rename_maintenance_index
--- Renames the maintenance index to the idx_ pattern every other index uses.
-
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_automation_maintenance_host_owner" ON "p_automations_host_maintenance" ("user_id", "host_id");
-DROP INDEX IF EXISTS "maintenance_host_owner";
-
--- ==== plugin homepage 0001_adopt_homepage_tables.sql ====
--- homepage 0001: adopt_homepage_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "homepage_items" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "type_id" text NOT NULL,
-  "title" text,
-  "config" text NOT NULL DEFAULT '{}',
-  "folder_id" integer,
-  "sync_id" varchar(255) UNIQUE,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_homepage_items_user_id" ON "homepage_items" ("user_id");
-ALTER TABLE "homepage_items" RENAME TO "p_homepage_homepage_items";
-CREATE TABLE IF NOT EXISTS "homepage_layouts" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL UNIQUE,
-  "layout" text NOT NULL DEFAULT '{}',
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "homepage_layouts" RENAME TO "p_homepage_homepage_layouts";
-CREATE TABLE IF NOT EXISTS "dashboard_service_links" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "label" text NOT NULL,
-  "url" text NOT NULL,
-  "order" integer NOT NULL DEFAULT 0,
-  "sync_id" varchar(255) UNIQUE,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_dashboard_service_links_user_id" ON "dashboard_service_links" ("user_id");
-ALTER TABLE "dashboard_service_links" RENAME TO "p_homepage_dashboard_service_links";
-
--- ==== plugin ai 0001_adopt_ai_tables.sql ====
--- ai 0001: adopt_ai_tables
--- Generated by termix-plugin migrations. Review before committing.
--- Hand-edited: keeps the legacy foreign key from messages and proposals to
--- their conversation, which the SDK cannot declare.
-
-CREATE TABLE IF NOT EXISTS "ai_providers" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "provider_type" text NOT NULL,
-  "label" varchar(255) NOT NULL,
-  "base_url" text,
-  "api_key_prefix" text,
-  "default_model" text,
-  "enabled" boolean NOT NULL DEFAULT true,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_ai_providers_user_label" ON "ai_providers" ("user_id", "label");
-ALTER TABLE "ai_providers" RENAME TO "p_ai_providers";
-CREATE TABLE IF NOT EXISTS "ai_conversations" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "title" text,
-  "provider_id" integer,
-  "model" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" varchar(255) NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_ai_conversations_user" ON "ai_conversations" ("user_id", "updated_at");
-ALTER TABLE "ai_conversations" RENAME TO "p_ai_conversations";
-CREATE TABLE IF NOT EXISTS "ai_messages" (
-  "id" serial PRIMARY KEY,
-  "conversation_id" integer NOT NULL,
-  "role" text NOT NULL,
-  "content" text NOT NULL DEFAULT '',
-  "tool_calls" text,
-  "created_at" varchar(255) NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("conversation_id") REFERENCES "p_ai_conversations" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_ai_messages_conversation" ON "ai_messages" ("conversation_id", "created_at");
-ALTER TABLE "ai_messages" RENAME TO "p_ai_messages";
-CREATE TABLE IF NOT EXISTS "ai_proposals" (
-  "id" serial PRIMARY KEY,
-  "conversation_id" integer NOT NULL,
-  "user_id" varchar(255) NOT NULL,
-  "kind" varchar(255) NOT NULL,
-  "summary" text,
-  "payload" text NOT NULL DEFAULT '{}',
-  "status" varchar(32) NOT NULL DEFAULT 'pending',
-  "applied_at" text,
-  "result_summary" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("conversation_id") REFERENCES "p_ai_conversations" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_ai_proposals_user" ON "ai_proposals" ("user_id", "status");
-CREATE INDEX IF NOT EXISTS "idx_ai_proposals_conversation" ON "ai_proposals" ("conversation_id");
-ALTER TABLE "ai_proposals" RENAME TO "p_ai_proposals";
-
--- ==== plugin ai 0002_provider_sync.sql ====
-ALTER TABLE "p_ai_providers" ADD COLUMN "sync_id" varchar(255) UNIQUE;
-
--- ==== plugin alerts 0001_create_alerts.sql ====
--- alerts 0001: create_alerts
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "p_alerts_channels" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "name" text NOT NULL,
-  "type" varchar(32) NOT NULL,
-  "config" text,
-  "enabled" boolean NOT NULL DEFAULT true,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_alerts_channels_user" ON "p_alerts_channels" ("user_id");
-CREATE TABLE IF NOT EXISTS "p_alerts_items" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "source" varchar(64) NOT NULL,
-  "category" varchar(128) NOT NULL,
-  "severity" varchar(16) NOT NULL,
-  "title" text NOT NULL,
-  "body" text,
-  "link" text,
-  "context" text,
-  "dedupe_key" varchar(255),
-  "deliveries" text,
-  "read_at" varchar(255),
-  "created_at" varchar(255) NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_alerts_items_user" ON "p_alerts_items" ("user_id", "created_at");
-CREATE INDEX IF NOT EXISTS "idx_alerts_items_unread" ON "p_alerts_items" ("user_id", "read_at");
-CREATE INDEX IF NOT EXISTS "idx_alerts_items_dedupe" ON "p_alerts_items" ("user_id", "dedupe_key");
-CREATE TABLE IF NOT EXISTS "p_alerts_rules" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "name" text NOT NULL,
-  "pattern" varchar(128) NOT NULL DEFAULT '*',
-  "min_severity" varchar(16) NOT NULL DEFAULT 'warning',
-  "channel_ids" text NOT NULL,
-  "enabled" boolean NOT NULL DEFAULT true,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_alerts_rules_user" ON "p_alerts_rules" ("user_id");
-CREATE TABLE IF NOT EXISTS "dismissed_alerts" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "alert_id" text NOT NULL,
-  "dismissed_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_dismissed_alerts_user_id" ON "dismissed_alerts" ("user_id");
-ALTER TABLE "dismissed_alerts" RENAME TO "p_alerts_dismissed";
-
--- ==== plugin file-manager 0001_adopt_file_manager_tables.sql ====
--- file-manager 0001: adopt_file_manager_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "file_manager_recent" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "host_id" integer NOT NULL,
-  "name" text NOT NULL,
-  "path" text NOT NULL,
-  "last_opened" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_file_manager_recent_user" ON "file_manager_recent" ("user_id", "host_id");
-ALTER TABLE "file_manager_recent" RENAME TO "p_file_manager_recent";
-CREATE TABLE IF NOT EXISTS "file_manager_pinned" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "host_id" integer NOT NULL,
-  "name" text NOT NULL,
-  "path" text NOT NULL,
-  "pinned_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_file_manager_pinned_user" ON "file_manager_pinned" ("user_id", "host_id");
-ALTER TABLE "file_manager_pinned" RENAME TO "p_file_manager_pinned";
-CREATE TABLE IF NOT EXISTS "file_manager_shortcuts" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "host_id" integer NOT NULL,
-  "name" text NOT NULL,
-  "path" text NOT NULL,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_file_manager_shortcuts_user" ON "file_manager_shortcuts" ("user_id", "host_id");
-ALTER TABLE "file_manager_shortcuts" RENAME TO "p_file_manager_shortcuts";
-CREATE TABLE IF NOT EXISTS "transfer_recent" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "source_host_id" integer NOT NULL,
-  "dest_host_id" integer NOT NULL,
-  "dest_path" text NOT NULL,
-  "dest_path_label" text NOT NULL,
-  "last_used" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("source_host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("dest_host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_transfer_recent_user" ON "transfer_recent" ("user_id");
-ALTER TABLE "transfer_recent" RENAME TO "p_file_manager_transfer_recent";
-
--- ==== plugin ldap 0001_create_providers.sql ====
--- ldap 0001: create_providers
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "p_ldap_providers" (
-  "id" serial PRIMARY KEY,
-  "name" text NOT NULL,
-  "enabled" boolean NOT NULL DEFAULT true,
-  "display_order" integer NOT NULL DEFAULT 0,
-  "config" text NOT NULL,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP
-);
-
--- ==== plugin opkssh 0001_adopt_opkssh_tokens.sql ====
--- opkssh 0001: adopt_opkssh_tokens
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "opkssh_tokens" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "host_id" integer NOT NULL,
-  "ssh_cert" text NOT NULL,
-  "private_key" text NOT NULL,
-  "email" text,
-  "sub" text,
-  "issuer" text,
-  "audience" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "expires_at" varchar(255) NOT NULL,
-  "last_used" text,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_opkssh_tokens_user_host" ON "opkssh_tokens" ("user_id", "host_id");
-ALTER TABLE "opkssh_tokens" RENAME TO "p_opkssh_tokens";
-
--- ==== plugin proxmox 0001_adopt_proxmox_stats.sql ====
--- proxmox 0001: adopt_proxmox_stats
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "proxmox_node_history" (
-  "id" serial PRIMARY KEY,
-  "host_id" integer NOT NULL,
-  "ts" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "cpu_percent" double precision,
-  "mem_percent" double precision,
-  "disk_percent" double precision,
-  "net_rx_bytes" integer,
-  "net_tx_bytes" integer,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "proxmox_node_history" RENAME TO "p_proxmox_node_history";
-CREATE TABLE IF NOT EXISTS "proxmox_stats_preferences" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "host_id" integer NOT NULL,
-  "layout" text NOT NULL,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_proxmox_stats_prefs_user_host" ON "proxmox_stats_preferences" ("user_id", "host_id");
-ALTER TABLE "proxmox_stats_preferences" RENAME TO "p_proxmox_stats_preferences";
-
--- ==== plugin session-recording 0001_adopt_session_recordings.sql ====
--- session-recording 0001: adopt_session_recordings
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "session_recordings" (
-  "id" serial PRIMARY KEY,
-  "host_id" integer NOT NULL,
-  "user_id" varchar(255),
-  "username" text,
-  "access_id" integer,
-  "started_at" varchar(255) NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "ended_at" text,
-  "duration" integer,
-  "commands" text,
-  "dangerous_actions" text,
-  "recording_path" text,
-  "protocol" text NOT NULL DEFAULT 'ssh',
-  "format" text NOT NULL DEFAULT 'text',
-  "terminated_by_owner" boolean DEFAULT false,
-  "termination_reason" text,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_session_recordings_user_started" ON "session_recordings" ("user_id", "started_at");
-CREATE INDEX IF NOT EXISTS "idx_session_recordings_host" ON "session_recordings" ("host_id");
-ALTER TABLE "session_recordings" RENAME TO "p_session_recording_session_recordings";
-
--- ==== plugin secret-sources 0001_adopt_secret_sources.sql ====
--- secret-sources 0001: adopt_secret_sources
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "secret_sources" (
-  "id" varchar(255) PRIMARY KEY NOT NULL,
-  "user_id" varchar(255) NOT NULL,
-  "name" text NOT NULL,
-  "kind" text NOT NULL DEFAULT 'onepassword-connect',
-  "base_url" text NOT NULL,
-  "shared" boolean NOT NULL DEFAULT false,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_secret_sources_user" ON "secret_sources" ("user_id");
-ALTER TABLE "secret_sources" RENAME TO "p_secret_sources_sources";
-
--- ==== plugin session-sharing 0001_adopt_session_sharing.sql ====
--- session-sharing 0001: adopt_session_sharing
--- Generated by termix-plugin migrations. Review before committing.
--- Hand-edited: keeps the legacy foreign keys the SDK cannot declare
--- (nullable or set-null user and host links, and links between these tables).
-
-CREATE TABLE IF NOT EXISTS "session_shares" (
-  "id" varchar(255) PRIMARY KEY NOT NULL,
-  "host_id" integer NOT NULL,
-  "owner_user_id" varchar(255) NOT NULL,
-  "protocol" text NOT NULL,
-  "session_id" varchar(255) NOT NULL,
-  "tab_instance_id" text,
-  "share_type" text NOT NULL,
-  "target_user_id" varchar(255),
-  "link_token" varchar(255) UNIQUE,
-  "permission_level" text NOT NULL DEFAULT 'read-only',
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "expires_at" text NOT NULL,
-  "revoked_at" text,
-  "last_joined_at" text,
-  "join_count" integer NOT NULL DEFAULT 0,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("owner_user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("target_user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE INDEX IF NOT EXISTS "idx_session_shares_session_id" ON "session_shares" ("session_id");
-CREATE INDEX IF NOT EXISTS "idx_session_shares_host_id" ON "session_shares" ("host_id");
-ALTER TABLE "session_shares" RENAME TO "p_session_sharing_shares";
-CREATE TABLE IF NOT EXISTS "session_share_participants" (
-  "id" serial PRIMARY KEY,
-  "share_id" varchar(255) NOT NULL,
-  "user_id" varchar(255),
-  "guest_label" text,
-  "joined_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "left_at" text,
-  FOREIGN KEY ("share_id") REFERENCES "p_session_sharing_shares" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "session_share_participants" RENAME TO "p_session_sharing_share_participants";
-CREATE TABLE IF NOT EXISTS "collab_rooms" (
-  "id" varchar(255) PRIMARY KEY NOT NULL,
-  "name" text NOT NULL,
-  "owner_user_id" varchar(255) NOT NULL,
-  "persistent" boolean NOT NULL DEFAULT false,
-  "presenter_user_id" varchar(255),
-  "stage_protocol" text,
-  "stage_host_id" integer,
-  "stage_share_id" varchar(255),
-  "guest_link_token" varchar(255),
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "ended_at" text,
-  FOREIGN KEY ("owner_user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("presenter_user_id") REFERENCES "users" ("id") ON DELETE SET NULL,
-  FOREIGN KEY ("stage_host_id") REFERENCES "ssh_data" ("id") ON DELETE SET NULL,
-  FOREIGN KEY ("stage_share_id") REFERENCES "p_session_sharing_shares" ("id") ON DELETE SET NULL
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_collab_rooms_guest_token" ON "collab_rooms" ("guest_link_token");
-CREATE INDEX IF NOT EXISTS "idx_collab_rooms_owner" ON "collab_rooms" ("owner_user_id");
-ALTER TABLE "collab_rooms" RENAME TO "p_session_sharing_rooms";
-CREATE TABLE IF NOT EXISTS "collab_room_members" (
-  "id" serial PRIMARY KEY,
-  "room_id" varchar(255) NOT NULL,
-  "user_id" varchar(255) NOT NULL,
-  "room_role" text NOT NULL DEFAULT 'member',
-  "added_by" varchar(255),
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("room_id") REFERENCES "p_session_sharing_rooms" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("added_by") REFERENCES "users" ("id") ON DELETE SET NULL
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_collab_room_members_room_user" ON "collab_room_members" ("room_id", "user_id");
-CREATE INDEX IF NOT EXISTS "idx_collab_room_members_user" ON "collab_room_members" ("user_id");
-ALTER TABLE "collab_room_members" RENAME TO "p_session_sharing_room_members";
-
--- ==== plugin sso 0001_adopt_sso_providers.sql ====
--- sso 0001: adopt_sso_providers
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "sso_providers" (
-  "id" serial PRIMARY KEY,
-  "name" text NOT NULL,
-  "type" text NOT NULL,
-  "enabled" boolean NOT NULL DEFAULT true,
-  "display_order" integer NOT NULL DEFAULT 0,
-  "config" text NOT NULL,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP
-);
-ALTER TABLE "sso_providers" RENAME TO "p_sso_providers";
-
--- ==== plugin sso 0002_legacy_callback.sql ====
--- sso 0002: legacy_callback
--- Generated by termix-plugin migrations. Review before committing.
-
-ALTER TABLE "p_sso_providers" ADD COLUMN "legacy_callback" boolean NOT NULL DEFAULT false;
--- Providers that existed before 2.9 were registered with the identity
--- provider under /users/oidc/callback, so they keep sending that URI.
-UPDATE "p_sso_providers" SET "legacy_callback" = true;
-
--- ==== plugin step-ca 0001_create_certs.sql ====
--- step-ca 0001: create_certs
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "p_step_ca_certs" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "host_id" integer NOT NULL,
-  "ssh_cert" text NOT NULL,
-  "private_key" text NOT NULL,
-  "email" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "expires_at" varchar(255) NOT NULL,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_step_ca_certs_user_host" ON "p_step_ca_certs" ("user_id", "host_id");
-
--- ==== plugin termix-identity 0001_adopt_termix_identity_tables.sql ====
--- termix-identity 0001: adopt_termix_identity_tables
--- Generated by termix-plugin migrations. Review before committing.
--- Hand-edited: keeps the legacy foreign keys the SDK cannot declare
--- (keys and ca to their identity, keys to ssh_credentials).
-
-CREATE TABLE IF NOT EXISTS "termix_identities" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL UNIQUE,
-  "handle" varchar(255) NOT NULL UNIQUE,
-  "description" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "termix_identities" RENAME TO "p_termix_identity_identities";
-CREATE TABLE IF NOT EXISTS "termix_identity_keys" (
-  "id" serial PRIMARY KEY,
-  "identity_id" integer NOT NULL,
-  "user_id" varchar(255) NOT NULL,
-  "public_key" text NOT NULL,
-  "key_type" text NOT NULL,
-  "algorithm" text NOT NULL,
-  "label" text,
-  "comment" text,
-  "source" text NOT NULL DEFAULT 'manual',
-  "credential_id" integer,
-  "enabled" boolean NOT NULL DEFAULT true,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("identity_id") REFERENCES "p_termix_identity_identities" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("credential_id") REFERENCES "ssh_credentials" ("id") ON DELETE SET NULL
-);
-CREATE INDEX IF NOT EXISTS "idx_termix_identity_keys_identity" ON "termix_identity_keys" ("identity_id");
-ALTER TABLE "termix_identity_keys" RENAME TO "p_termix_identity_keys";
-CREATE TABLE IF NOT EXISTS "termix_identity_ca" (
-  "id" serial PRIMARY KEY,
-  "identity_id" integer NOT NULL UNIQUE,
-  "user_id" varchar(255) NOT NULL,
-  "public_key" text NOT NULL,
-  "private_key" text NOT NULL,
-  "validity_days" integer NOT NULL DEFAULT 90,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("identity_id") REFERENCES "p_termix_identity_identities" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "termix_identity_ca" RENAME TO "p_termix_identity_ca";
-
--- ==== plugin tmux-monitor 0001_adopt_tmux_session_tags.sql ====
--- tmux-monitor 0001: adopt_tmux_session_tags
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "tmux_session_tags" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "host_id" integer NOT NULL,
-  "session_name" text NOT NULL,
-  "tag" text NOT NULL,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE,
-  FOREIGN KEY ("host_id") REFERENCES "ssh_data" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "tmux_session_tags" RENAME TO "p_tmux_monitor_session_tags";
-
--- ==== plugin totp 0001_create_enrollments.sql ====
--- totp 0001: create_enrollments
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "p_totp_enrollments" (
-  "user_id" varchar(255) PRIMARY KEY NOT NULL,
-  "secret" text,
-  "pending_secret" text,
-  "backup_codes" text,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-
--- ==== plugin vault 0001_adopt_vault_tables.sql ====
--- vault 0001: adopt_vault_tables
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "vault_profiles" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "name" text NOT NULL,
-  "description" text,
-  "folder" text,
-  "tags" text,
-  "vault_addr" text NOT NULL,
-  "vault_namespace" text,
-  "oidc_mount" text,
-  "oidc_role" text,
-  "ssh_mount" text,
-  "ssh_role" text NOT NULL,
-  "valid_principals" text,
-  "key_type" text,
-  "shared" boolean NOT NULL DEFAULT false,
-  "sync_id" varchar(255) UNIQUE,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "updated_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "vault_profiles" RENAME TO "p_vault_profiles";
-CREATE TABLE IF NOT EXISTS "vault_tokens" (
-  "id" serial PRIMARY KEY,
-  "user_id" varchar(255) NOT NULL,
-  "profile_id" integer NOT NULL,
-  "ssh_cert" text NOT NULL,
-  "private_key" text NOT NULL,
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "expires_at" varchar(255) NOT NULL,
-  "last_used" text,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-CREATE UNIQUE INDEX IF NOT EXISTS "idx_vault_tokens_user_profile" ON "vault_tokens" ("user_id", "profile_id");
-ALTER TABLE "vault_tokens" RENAME TO "p_vault_tokens";
-
--- ==== plugin webauthn 0001_adopt_webauthn_credentials.sql ====
--- webauthn 0001: adopt_webauthn_credentials
--- Generated by termix-plugin migrations. Review before committing.
-
-CREATE TABLE IF NOT EXISTS "webauthn_credentials" (
-  "id" varchar(255) PRIMARY KEY NOT NULL,
-  "user_id" varchar(255) NOT NULL,
-  "name" text NOT NULL,
-  "credential_id" varchar(255) NOT NULL UNIQUE,
-  "public_key" text NOT NULL,
-  "counter" integer NOT NULL DEFAULT 0,
-  "device_type" text,
-  "backed_up" boolean NOT NULL DEFAULT false,
-  "transports" text,
-  "user_verification" text NOT NULL DEFAULT 'preferred',
-  "created_at" text NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  "last_used_at" text,
-  FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE
-);
-ALTER TABLE "webauthn_credentials" RENAME TO "p_webauthn_credentials";
diff --git a/src/backend/tests/hosts/connect/pipeline.test.ts b/src/backend/tests/hosts/connect/pipeline.test.ts
index b1c43dc59..f42ecf8ba 100644
--- a/src/backend/tests/hosts/connect/pipeline.test.ts
+++ b/src/backend/tests/hosts/connect/pipeline.test.ts
@@ -37,7 +37,7 @@ vi.mock("../../../hosts/host-key-verifier.js", () => ({
     createHostVerifier: mocks.createHostVerifier,
   },
 }));
-vi.mock("@termix/plugin-sdk/ssh-certs", () => ({
+vi.mock("@termix-ssh/plugin-sdk/ssh-certs", () => ({
   applyCertificateAuth: mocks.applyCertificateAuth,
 }));
 vi.mock("../../../hosts/terminal-auth-helpers.js", () => ({
@@ -297,12 +297,6 @@ describe("buildConnectConfig per auth type", () => {
     expect(config.tryKeyboard).toBe(true);
   });
 
-  // OPKSSH is a plugin-registered SSH auth provider now: see
-  // plugins/opkssh/tests/backend/provider.test.ts.
-
-  // Step CA is the step-ca plugin's provider: see
-  // plugins/step-ca/tests/backend/step-ca.test.ts.
-
   it("a stepca host without the step-ca plugin names it", async () => {
     setSshAuthTypeOwnerSource(() => [
       { type: "stepca", pluginId: "step-ca", pluginName: "Step CA" },
@@ -316,9 +310,6 @@ describe("buildConnectConfig per auth type", () => {
     setSshAuthTypeOwnerSource(() => []);
   });
 
-  // Vault is the vault plugin's provider: see
-  // plugins/vault/tests/backend/vault.test.ts.
-
   it("a vault host without the vault plugin names it", async () => {
     setSshAuthTypeOwnerSource(() => [
       { type: "vault", pluginId: "vault", pluginName: "HashiCorp Vault" },
@@ -332,9 +323,6 @@ describe("buildConnectConfig per auth type", () => {
     setSshAuthTypeOwnerSource(() => []);
   });
 
-  // Tailscale is a plugin-registered SSH auth provider now: see
-  // plugins/tailscale/tests/backend/ssh-auth-provider.test.ts.
-
   it("a type nobody provides names the plugin that would", async () => {
     setSshAuthTypeOwnerSource(() => [
       { type: "made-up", pluginId: "made", pluginName: "Made Up" },
diff --git a/src/backend/tests/hosts/credential-username.test.ts b/src/backend/tests/hosts/credential-username.test.ts
index 82acfa4ad..debb0b3b9 100644
--- a/src/backend/tests/hosts/credential-username.test.ts
+++ b/src/backend/tests/hosts/credential-username.test.ts
@@ -52,6 +52,14 @@ describe("pickResolvedPassword", () => {
   });
 });
 
+function identities(rows: Array<{ id: number; subject: string }>) {
+  vi.doMock("../../database/repositories/factory.js", () => ({
+    createCurrentUserAuthRepository: () => ({
+      listIdentitiesForUser: async () => rows,
+    }),
+  }));
+}
+
 describe("expandExternalUsername", () => {
   beforeEach(() => {
     vi.resetModules();
@@ -62,29 +70,19 @@ describe("expandExternalUsername", () => {
     expect(await expandExternalUsername(undefined, "user-1")).toBeUndefined();
   });
 
-  it("expands the placeholder with the user's OIDC identifier", async () => {
-    vi.doMock("../../database/repositories/factory.js", () => ({
-      createCurrentUserRepository: () => ({
-        findById: async () => ({ oidcIdentifier: "jdoe" }),
-      }),
-    }));
-
+  it("expands the placeholder with the subject of the user's first identity", async () => {
+    identities([
+      { id: 4, subject: "later" },
+      { id: 2, subject: "jdoe" },
+    ]);
     const { expandExternalUsername: expand } =
       await import("../../hosts/credential-username.js");
-    expect(await expand("$oidc.preferred_username", "user-1")).toBe("jdoe");
     expect(await expand("$external.username", "user-1")).toBe("jdoe");
-    expect(
-      await expand("$external.username-$oidc.preferred_username", "user-1"),
-    ).toBe("jdoe-jdoe");
+    expect(await expand("$external.username-x", "user-1")).toBe("jdoe-x");
   });
 
-  it("leaves the placeholder as-is when the user has no OIDC identifier", async () => {
-    vi.doMock("../../database/repositories/factory.js", () => ({
-      createCurrentUserRepository: () => ({
-        findById: async () => ({ oidcIdentifier: null }),
-      }),
-    }));
-
+  it("no longer reads the 2.8 spelling", async () => {
+    identities([{ id: 1, subject: "jdoe" }]);
     const { expandExternalUsername: expand } =
       await import("../../hosts/credential-username.js");
     expect(await expand("$oidc.preferred_username", "user-1")).toBe(
@@ -92,81 +90,25 @@ describe("expandExternalUsername", () => {
     );
   });
 
+  it("leaves the placeholder as-is when the user has no external sign-in", async () => {
+    identities([]);
+    const { expandExternalUsername: expand } =
+      await import("../../hosts/credential-username.js");
+    expect(await expand("$external.username", "user-1")).toBe(
+      "$external.username",
+    );
+  });
+
   it("returns the username unchanged when the DB lookup throws", async () => {
     vi.doMock("../../database/repositories/factory.js", () => ({
-      createCurrentUserRepository: () => {
+      createCurrentUserAuthRepository: () => {
         throw new Error("DB unavailable");
       },
     }));
-
     const { expandExternalUsername: expand } =
       await import("../../hosts/credential-username.js");
-    expect(await expand("$oidc.preferred_username", "user-1")).toBe(
-      "$oidc.preferred_username",
-    );
-  });
-
-  it("strips the ldap:{providerId}: prefix for genuine LDAP users", async () => {
-    vi.doMock("../../database/repositories/factory.js", () => ({
-      createCurrentUserRepository: () => ({
-        findById: async () => ({
-          oidcIdentifier: "ldap:1:jdoe",
-          ssoProviderId: 1,
-        }),
-      }),
-      createCurrentUserAuthRepository: () => ({
-        listIdentitiesForUser: async () => [
-          { providerId: "ldap:1", subject: "jdoe" },
-        ],
-      }),
-    }));
-
-    const { expandExternalUsername: expand } =
-      await import("../../hosts/credential-username.js");
-    expect(await expand("$oidc.preferred_username", "user-1")).toBe("jdoe");
-  });
-
-  it("does not strip a spoofed ldap: identifier from a non-LDAP provider", async () => {
-    vi.doMock("../../database/repositories/factory.js", () => ({
-      createCurrentUserRepository: () => ({
-        findById: async () => ({
-          oidcIdentifier: "ldap:1:admin",
-          ssoProviderId: 1,
-        }),
-      }),
-      createCurrentUserAuthRepository: () => ({
-        listIdentitiesForUser: async () => [
-          { providerId: "1", subject: "ldap:1:admin" },
-        ],
-      }),
-    }));
-
-    const { expandExternalUsername: expand } =
-      await import("../../hosts/credential-username.js");
-    expect(await expand("$oidc.preferred_username", "user-1")).toBe(
-      "ldap:1:admin",
-    );
-  });
-
-  it("does not strip when the embedded provider id is not the user's provider", async () => {
-    vi.doMock("../../database/repositories/factory.js", () => ({
-      createCurrentUserRepository: () => ({
-        findById: async () => ({
-          oidcIdentifier: "ldap:1:admin",
-          ssoProviderId: 5,
-        }),
-      }),
-      createCurrentUserAuthRepository: () => ({
-        listIdentitiesForUser: async () => [
-          { providerId: "ldap:5", subject: "admin" },
-        ],
-      }),
-    }));
-
-    const { expandExternalUsername: expand } =
-      await import("../../hosts/credential-username.js");
-    expect(await expand("$oidc.preferred_username", "user-1")).toBe(
-      "ldap:1:admin",
+    expect(await expand("$external.username", "user-1")).toBe(
+      "$external.username",
     );
   });
 });
diff --git a/src/backend/tests/hosts/defaults/catalog.test.ts b/src/backend/tests/hosts/defaults/catalog.test.ts
index b878463d8..fbaebd7e1 100644
--- a/src/backend/tests/hosts/defaults/catalog.test.ts
+++ b/src/backend/tests/hosts/defaults/catalog.test.ts
@@ -1,7 +1,7 @@
 import { describe, expect, it, vi } from "vitest";
 
 vi.mock("../../../database/repositories/factory.js", () => ({}));
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 import {
   buildCatalog,
   catalogNamespaces,
diff --git a/src/backend/tests/hosts/defaults/service.test.ts b/src/backend/tests/hosts/defaults/service.test.ts
index b94b8943d..aaee13d77 100644
--- a/src/backend/tests/hosts/defaults/service.test.ts
+++ b/src/backend/tests/hosts/defaults/service.test.ts
@@ -1,12 +1,20 @@
 import { describe, expect, it, vi } from "vitest";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 
-vi.mock("../../../database/repositories/factory.js", () => ({}));
+const rows = vi.hoisted(() => ({
+  owned: [] as Array<Record<string, unknown>>,
+}));
+
+vi.mock("../../../database/repositories/factory.js", () => ({
+  createCurrentHostDefaultsRepository: () => ({
+    listOwnedBy: async () => rows.owned,
+  }),
+}));
 vi.mock("../../../database/routes/host-plugin-settings.js", () => ({
   hostSettingsPlugins: () => [],
 }));
 
-const { validateLevelChange } =
+const { folderCredentialIds, validateLevelChange } =
   await import("../../../hosts/defaults/service.js");
 const { buildCatalog } = await import("../../../hosts/defaults/catalog.js");
 
@@ -113,3 +121,39 @@ describe("validateLevelChange", () => {
     expect(change.errors["core.jumpHosts"]).toBeDefined();
   });
 });
+
+describe("folderCredentialIds", () => {
+  it("reads each folder's credential from its auth default", async () => {
+    rows.owned = [
+      {
+        level: "folder",
+        folderId: 4,
+        namespace: "core",
+        key: "auth",
+        value: JSON.stringify({ authType: "credential", credentialId: 7 }),
+      },
+      {
+        level: "folder",
+        folderId: 5,
+        namespace: "core",
+        key: "auth",
+        value: JSON.stringify({ authType: "none" }),
+      },
+      {
+        level: "user",
+        folderId: null,
+        namespace: "core",
+        key: "auth",
+        value: JSON.stringify({ authType: "credential", credentialId: 9 }),
+      },
+      {
+        level: "folder",
+        folderId: 6,
+        namespace: "fx",
+        key: "auth",
+        value: JSON.stringify({ authType: "credential", credentialId: 2 }),
+      },
+    ];
+    expect([...(await folderCredentialIds("u1"))]).toEqual([[4, 7]]);
+  });
+});
diff --git a/src/backend/tests/hosts/host-identity.test.ts b/src/backend/tests/hosts/host-identity.test.ts
index 45ee0f58f..92b4eb273 100644
--- a/src/backend/tests/hosts/host-identity.test.ts
+++ b/src/backend/tests/hosts/host-identity.test.ts
@@ -19,7 +19,7 @@ import {
  *
  * The resolved row supplies the address, the credentials, the jump hosts and
  * the stored host key, so the session opened on whichever machine owned that
- * id on the server — the host list stayed correct the whole time, and nothing
+ * id on the server, the host list stayed correct the whole time, and nothing
  * announced the substitution.
  */
 describe("hostAddressMismatch", () => {
diff --git a/src/backend/tests/hosts/host-key-verifier.test.ts b/src/backend/tests/hosts/host-key-verifier.test.ts
new file mode 100644
index 000000000..1e26cfb23
--- /dev/null
+++ b/src/backend/tests/hosts/host-key-verifier.test.ts
@@ -0,0 +1,59 @@
+import { EventEmitter } from "node:events";
+import type { WebSocket } from "ws";
+import { describe, expect, it, vi } from "vitest";
+import { SSHHostKeyVerifier } from "../../hosts/host-key-verifier.js";
+
+vi.mock("../../database/repositories/factory.js", () => ({
+  createCurrentHostResolutionRepository: () => ({}),
+}));
+vi.mock("../../utils/logger.js", () => ({
+  sshLogger: { info: vi.fn(), warn: vi.fn(), error: vi.fn() },
+}));
+
+function socketAnswering(action: "accept" | "reject") {
+  const sent: string[] = [];
+  const socket = new EventEmitter() as EventEmitter & {
+    send: (data: string) => void;
+  };
+  socket.send = (data) => {
+    sent.push(data);
+    socket.emit(
+      "message",
+      Buffer.from(
+        JSON.stringify({
+          type: "host_key_verification_response",
+          data: { action },
+        }),
+      ),
+    );
+  };
+  return { socket: socket as unknown as WebSocket, sent };
+}
+
+async function verifyUnsaved(socket: WebSocket | null) {
+  const verifier = await SSHHostKeyVerifier.createHostVerifier(
+    null,
+    "10.0.0.5",
+    22,
+    socket,
+    "user",
+  );
+  return new Promise<boolean>((resolve) =>
+    verifier(Buffer.from("quick-key"), resolve),
+  );
+}
+
+describe("quick connect host keys", () => {
+  it("asks the user and uses their answer", async () => {
+    const yes = socketAnswering("accept");
+    expect(await verifyUnsaved(yes.socket)).toBe(true);
+    expect(yes.sent[0]).toContain("host_key_verification_required");
+
+    const no = socketAnswering("reject");
+    expect(await verifyUnsaved(no.socket)).toBe(false);
+  });
+
+  it("still connects when there is no socket to ask on", async () => {
+    expect(await verifyUnsaved(null)).toBe(true);
+  });
+});
diff --git a/src/backend/tests/hosts/host-resolver-sync-id.test.ts b/src/backend/tests/hosts/host-resolver-sync-id.test.ts
index 4d7d43aa2..3b227a655 100644
--- a/src/backend/tests/hosts/host-resolver-sync-id.test.ts
+++ b/src/backend/tests/hosts/host-resolver-sync-id.test.ts
@@ -26,7 +26,7 @@ vi.mock("../../utils/shared-host-auth-resolver.js", () => ({
 /**
  * A numeric host id belongs to whichever database produced it. Resolving the
  * desktop app's id against a sync server's table lands on whatever host owns
- * that number there — a different machine, with its own address, credentials
+ * that number there, a different machine, with its own address, credentials
  * and host key. `sync_id` is the same string on both sides.
  */
 describe("resolveHostBySyncId", () => {
diff --git a/src/backend/tests/hosts/host-resolver.test.ts b/src/backend/tests/hosts/host-resolver.test.ts
index e1057d643..bdada76e0 100644
--- a/src/backend/tests/hosts/host-resolver.test.ts
+++ b/src/backend/tests/hosts/host-resolver.test.ts
@@ -7,7 +7,6 @@ const state = vi.hoisted(() => ({
   overrideCredentialId: null as number | null,
   credentials: new Map<string, Record<string, unknown>>(),
   auditCalls: [] as Record<string, unknown>[],
-  folderCredentialId: null as number | null,
   sharedSecret: null as Record<string, unknown> | null,
   activeHostAccessId: null as number | null,
   snapshotForUserCalls: [] as Record<string, unknown>[],
@@ -20,7 +19,6 @@ vi.mock("../../database/repositories/factory.js", () => ({
     findHostById: async () => (state.host ? { ...state.host } : null),
     findCredentialByIdForUser: async (credentialId: number, userId: string) =>
       state.credentials.get(`${credentialId}:${userId}`) ?? null,
-    findFolderCredentialId: async () => state.folderCredentialId,
   }),
   createCurrentSharedHostAuthOverrideRepository: () => ({
     findCredentialId: async () => state.overrideCredentialId,
@@ -114,7 +112,6 @@ function baseHost(overrides: Record<string, unknown> = {}) {
     sudoPassword: "owner-sudo",
     jumpHosts: null,
     tunnelConnections: null,
-    terminalConfig: null,
     socks5ProxyChain: null,
     quickActions: null,
     overrideCredentialUsername: false,
@@ -129,7 +126,6 @@ beforeEach(() => {
   state.overrideCredentialId = null;
   state.credentials.clear();
   state.auditCalls = [];
-  state.folderCredentialId = null;
   state.sharedSecret = null;
   state.activeHostAccessId = null;
   state.snapshotForUserCalls = [];
@@ -171,35 +167,6 @@ describe("resolveHostById", () => {
     expect(host.sudoPassword).toBe("owner-sudo");
   });
 
-  it("falls back to the host's folder-assigned credential when none is set on the host", async () => {
-    state.host = baseHost({
-      authType: "credential",
-      credentialId: null,
-      folder: "switches",
-      username: "",
-      password: null,
-    });
-    state.folderCredentialId = 11;
-    state.credentials.set("11:owner", {
-      id: 11,
-      username: "folder-user",
-      authType: "password",
-      password: "folder-pass",
-      privateKey: null,
-      key: null,
-      keyPassword: null,
-      keyType: null,
-    });
-
-    const host = (await resolveHostById(42, "owner")) as Record<
-      string,
-      unknown
-    >;
-    expect(host.password).toBe("folder-pass");
-    expect(host.username).toBe("folder-user");
-    expect(host.authType).toBe("password");
-  });
-
   it("prefers the host's own credential over its folder's credential", async () => {
     state.host = baseHost({
       authType: "credential",
@@ -208,7 +175,6 @@ describe("resolveHostById", () => {
       username: "",
       password: null,
     });
-    state.folderCredentialId = 11;
     state.credentials.set("9:owner", {
       id: 9,
       username: "host-user",
@@ -281,7 +247,7 @@ describe("resolveHostById", () => {
     state.host = baseHost({
       authType: "agent",
       password: null,
-      terminalConfig: JSON.stringify({
+      sshOptions: JSON.stringify({
         agentSocketPath: "/run/user/1000/ssh-agent.sock",
       }),
     });
@@ -294,7 +260,7 @@ describe("resolveHostById", () => {
       authType: "agent",
       password: null,
       shareSshAuth: true,
-      terminalConfig: JSON.stringify({
+      sshOptions: JSON.stringify({
         agentSocketPath: "/run/user/1000/ssh-agent.sock",
       }),
     });
@@ -307,9 +273,6 @@ describe("resolveHostById", () => {
     expect(host.sshOptions).toEqual({
       agentSocketPath: "/run/user/1000/ssh-agent.sock",
     });
-    expect(host.terminalConfig).toEqual({
-      agentSocketPath: "/run/user/1000/ssh-agent.sock",
-    });
   });
 
   it("uses the recipient's credential instead of the owner's authentication", async () => {
@@ -436,10 +399,7 @@ describe("resolveHostById", () => {
       password: "stale-owner-password",
       key: "stale-owner-key",
       credentialId: null,
-      terminalConfig: JSON.stringify({
-        theme: "termix",
-        sudoPassword: "owner-sudo",
-      }),
+      sudoPassword: "owner-sudo",
     });
     const host = (await resolveHostById(42, "recipient")) as Record<
       string,
@@ -448,37 +408,13 @@ describe("resolveHostById", () => {
     expect(host.password).toBeNull();
     expect(host.key).toBeNull();
     expect(host.credentialId).toBeNull();
-    // The owner's legacy sudo password never reaches a recipient.
-    expect(host.terminalConfig).toEqual({ theme: "termix" });
+    // The owner's sudo password never reaches a recipient.
     expect(host.sudoPassword).toBeNull();
   });
 
-  it("hands the owner a 2.8 sudo password and SSH options kept in terminal_config", async () => {
-    state.host = baseHost({
-      sudoPassword: null,
-      sshOptions: null,
-      terminalConfig: JSON.stringify({
-        sudoPassword: "legacy-sudo",
-        keepaliveInterval: 12,
-        theme: "nord",
-      }),
-    });
-    const host = (await resolveHostById(42, "owner")) as Record<
-      string,
-      unknown
-    >;
-    expect(host.sudoPassword).toBe("legacy-sudo");
-    expect(host.sshOptions).toEqual({ keepaliveInterval: 12 });
-    expect(host.terminalConfig).toEqual({
-      keepaliveInterval: 12,
-      theme: "nord",
-    });
-  });
-
-  it("prefers the ssh_options column once it is filled", async () => {
+  it("reads the ssh_options column", async () => {
     state.host = baseHost({
       sshOptions: JSON.stringify({ keepaliveCountMax: 3 }),
-      terminalConfig: JSON.stringify({ keepaliveInterval: 12 }),
     });
     const host = (await resolveHostById(42, "owner")) as Record<
       string,
diff --git a/src/backend/tests/hosts/protocol-auth/owner-login.test.ts b/src/backend/tests/hosts/protocol-auth/owner-login.test.ts
new file mode 100644
index 000000000..7ce1dd771
--- /dev/null
+++ b/src/backend/tests/hosts/protocol-auth/owner-login.test.ts
@@ -0,0 +1,60 @@
+import { describe, expect, it, vi } from "vitest";
+
+const state = vi.hoisted(() => ({
+  login: null as Record<string, unknown> | null,
+  inherited: null as Record<string, unknown> | null,
+}));
+
+vi.mock("../../../database/db/index.js", () => ({
+  getDb: () => null,
+  getSqlite: () => null,
+}));
+vi.mock("../../../utils/data-crypto.js", () => ({
+  DataCrypto: { getUserDataKey: () => Buffer.alloc(32) },
+}));
+vi.mock("../../../database/repositories/factory.js", () => ({
+  createCurrentHostProtocolAuthRepository: () => ({
+    find: async () => state.login,
+  }),
+}));
+vi.mock("../../../hosts/usable-credential.js", () => ({
+  findUsableCredential: async (id: number) =>
+    id === 9 ? { id, username: "folder-user", password: "folder-pass" } : null,
+}));
+vi.mock("../../../hosts/defaults/service.js", () => ({
+  resolveForEditor: async () =>
+    state.inherited ? { "core.auth": { value: state.inherited } } : {},
+}));
+
+const { resolveOwnerProtocolLogin } =
+  await import("../../../hosts/protocol-auth/protocol-auth.js");
+
+const RDP = { id: "rdp", pluginId: "remote-desktop", pluginName: "RD" };
+const host = { id: 4, userId: "owner" };
+
+describe("owner protocol login", () => {
+  it("uses the folder credential when none is picked", async () => {
+    state.login = { authType: "credential", credentialId: null };
+    state.inherited = { authType: "credential", credentialId: 9 };
+    const login = await resolveOwnerProtocolLogin(host, RDP as never);
+    expect(login).toMatchObject({
+      authType: "credential",
+      username: "folder-user",
+      password: "folder-pass",
+    });
+  });
+
+  it("prefers the credential picked on the host", async () => {
+    state.login = { authType: "credential", credentialId: 3 };
+    state.inherited = { authType: "credential", credentialId: 9 };
+    const login = await resolveOwnerProtocolLogin(host, RDP as never);
+    expect(login.username).toBe("");
+  });
+
+  it("leaves a direct login alone", async () => {
+    state.login = { authType: "direct", username: "me", password: "pw" };
+    state.inherited = { authType: "credential", credentialId: 9 };
+    const login = await resolveOwnerProtocolLogin(host, RDP as never);
+    expect(login).toMatchObject({ username: "me", password: "pw" });
+  });
+});
diff --git a/src/backend/tests/plugins/artifact-manifest.test.ts b/src/backend/tests/plugins/artifact-manifest.test.ts
new file mode 100644
index 000000000..0d11677a3
--- /dev/null
+++ b/src/backend/tests/plugins/artifact-manifest.test.ts
@@ -0,0 +1,80 @@
+import { describe, expect, it } from "vitest";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import * as tar from "tar";
+import {
+  readArtifactFile,
+  readArtifactManifest,
+  sameCapabilities,
+} from "../../plugins/artifact-manifest.js";
+
+function pack(files: Record<string, string>, prefix = ""): Buffer {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), "termix-artifact-"));
+  try {
+    for (const [name, content] of Object.entries(files)) {
+      fs.mkdirSync(path.dirname(path.join(dir, name)), { recursive: true });
+      fs.writeFileSync(path.join(dir, name), content);
+    }
+    const file = path.join(dir, "out.tmxplug");
+    tar.c(
+      { gzip: true, sync: true, file, cwd: dir },
+      Object.keys(files).map((name) => `${prefix}${name}`),
+    );
+    return fs.readFileSync(file);
+  } finally {
+    fs.rmSync(dir, { recursive: true, force: true });
+  }
+}
+
+describe("readArtifactFile", () => {
+  it("finds a file by name, with or without a ./ prefix", () => {
+    const plain = pack({ "manifest.json": "{}", "dist/a.js": "x" });
+    expect(readArtifactFile(plain, "dist/a.js")?.toString()).toBe("x");
+    const dotted = pack({ "manifest.json": '{"id":"a"}' }, "./");
+    expect(readArtifactFile(dotted, "manifest.json")?.toString()).toBe(
+      '{"id":"a"}',
+    );
+  });
+
+  it("returns null for a missing file", () => {
+    expect(readArtifactFile(pack({ "a.txt": "a" }), "manifest.json")).toBe(
+      null,
+    );
+  });
+});
+
+describe("readArtifactManifest", () => {
+  it("parses the manifest", () => {
+    expect(
+      readArtifactManifest(pack({ "manifest.json": '{"id":"notes"}' })),
+    ).toEqual({ id: "notes" });
+  });
+
+  it("refuses a file that is not an archive", () => {
+    expect(() => readArtifactManifest(Buffer.from("nope"))).toThrow(
+      /not a valid .tmxplug/,
+    );
+  });
+
+  it("refuses an archive with no manifest or a broken one", () => {
+    expect(() => readArtifactManifest(pack({ "a.txt": "a" }))).toThrow(
+      /no manifest.json/,
+    );
+    expect(() =>
+      readArtifactManifest(pack({ "manifest.json": "{oops" })),
+    ).toThrow(/not valid JSON/);
+    expect(() =>
+      readArtifactManifest(pack({ "manifest.json": "[1]" })),
+    ).toThrow(/not an object/);
+  });
+});
+
+describe("sameCapabilities", () => {
+  it("compares as sets", () => {
+    expect(sameCapabilities(["a", "b"], ["b", "a"])).toBe(true);
+    expect(sameCapabilities(["a"], ["a", "b"])).toBe(false);
+    expect(sameCapabilities(["a", "c"], ["a", "b"])).toBe(false);
+    expect(sameCapabilities([], [])).toBe(true);
+  });
+});
diff --git a/src/backend/tests/plugins/assets.test.ts b/src/backend/tests/plugins/assets.test.ts
index bc088dd9c..b6b876e7d 100644
--- a/src/backend/tests/plugins/assets.test.ts
+++ b/src/backend/tests/plugins/assets.test.ts
@@ -13,6 +13,7 @@ import {
 
 let root = "";
 let plugin: { id: string; dir: string; manifest: never };
+let installed: { id: string; dir: string; manifest: never };
 let server: Server;
 let baseUrl = "";
 
@@ -32,6 +33,14 @@ beforeAll(async () => {
   write("locales/translated/de_DE.json", "{}");
   write("manifest.json", "{}");
   fs.writeFileSync(path.join(root, "outside.js"), "nope");
+  const unpacked = path.join(root, ".unpacked", "gadget");
+  fs.mkdirSync(path.join(unpacked, "dist"), { recursive: true });
+  fs.writeFileSync(path.join(unpacked, "dist", "frontend.js"), "export {}");
+  installed = {
+    id: "gadget",
+    dir: unpacked,
+    manifest: { id: "gadget", version: "1.0.0" } as never,
+  };
   plugin = {
     id: "gizmo",
     dir: path.join(root, "gizmo"),
@@ -41,7 +50,9 @@ beforeAll(async () => {
   const app = express();
   app.use(
     "/plugin-assets",
-    createPluginAssetsRouter((id) => (id === "gizmo" ? plugin : undefined)),
+    createPluginAssetsRouter((id) =>
+      id === "gizmo" ? plugin : id === "gadget" ? installed : undefined,
+    ),
   );
   server = await new Promise<Server>((resolve) => {
     const created = app.listen(0, "127.0.0.1", () => resolve(created));
@@ -74,6 +85,23 @@ describe("describePluginFrontend", () => {
     }
   });
 
+  it("changes the version when only a translation changes", () => {
+    const before = describePluginFrontend(plugin).assetVersion;
+    const locale = path.join(
+      root,
+      "gizmo",
+      "locales",
+      "translated",
+      "de_DE.json",
+    );
+    fs.writeFileSync(locale, '{"hello":"Hallo"}');
+    try {
+      expect(describePluginFrontend(plugin).assetVersion).not.toBe(before);
+    } finally {
+      fs.writeFileSync(locale, "{}");
+    }
+  });
+
   it("reports nothing for an unknown plugin", () => {
     expect(describePluginFrontend(undefined)).toEqual({
       frontend: false,
@@ -111,6 +139,12 @@ describe("resolvePluginAsset", () => {
 });
 
 describe("GET /plugin-assets", () => {
+  it("serves an installed plugin unpacked under a dot folder", async () => {
+    const res = await fetch(`${baseUrl}/plugin-assets/gadget/frontend.js`);
+    expect(res.status).toBe(200);
+    expect(await res.text()).toBe("export {}");
+  });
+
   it("serves a bundle as a module any origin can load", async () => {
     const res = await fetch(`${baseUrl}/plugin-assets/gizmo/frontend.js`);
     expect(res.status).toBe(200);
diff --git a/src/backend/tests/plugins/auto-update.test.ts b/src/backend/tests/plugins/auto-update.test.ts
new file mode 100644
index 000000000..548a43c9f
--- /dev/null
+++ b/src/backend/tests/plugins/auto-update.test.ts
@@ -0,0 +1,55 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const manage = vi.hoisted(() => ({
+  isLinkedDesktop: vi.fn(async () => false),
+  updateAllPlugins: vi.fn(),
+}));
+const notify = vi.hoisted(() => ({ sendCoreAlert: vi.fn(async () => {}) }));
+
+vi.mock("../../plugins/manage.js", () => manage);
+vi.mock("../../notify/core-notify.js", () => notify);
+
+import { runPluginAutoUpdate } from "../../plugins/auto-update.js";
+
+beforeEach(() => {
+  manage.isLinkedDesktop.mockResolvedValue(false);
+  manage.updateAllPlugins.mockReset();
+  notify.sendCoreAlert.mockClear();
+});
+
+describe("runPluginAutoUpdate", () => {
+  it("only touches plugins with auto-update on", async () => {
+    manage.updateAllPlugins.mockResolvedValue({
+      updated: [{ id: "docker", version: "1.1.0" }],
+      needsReview: [],
+      failed: [],
+    });
+    await runPluginAutoUpdate();
+    expect(manage.updateAllPlugins).toHaveBeenCalledWith({
+      userId: null,
+      onlyAutoUpdate: true,
+    });
+    expect(notify.sendCoreAlert).not.toHaveBeenCalled();
+  });
+
+  it("alerts admins about an update that asks for more", async () => {
+    manage.updateAllPlugins.mockResolvedValue({
+      updated: [],
+      needsReview: [{ id: "docker", capabilities: ["notify:send"] }],
+      failed: [],
+    });
+    await runPluginAutoUpdate();
+    expect(notify.sendCoreAlert).toHaveBeenCalledWith(
+      expect.objectContaining({
+        audience: "admins",
+        dedupeKey: "plugin-review:docker:notify:send",
+      }),
+    );
+  });
+
+  it("does nothing on a linked desktop", async () => {
+    manage.isLinkedDesktop.mockResolvedValue(true);
+    await runPluginAutoUpdate();
+    expect(manage.updateAllPlugins).not.toHaveBeenCalled();
+  });
+});
diff --git a/src/backend/tests/plugins/boot-state.test.ts b/src/backend/tests/plugins/boot-state.test.ts
new file mode 100644
index 000000000..9b23d8081
--- /dev/null
+++ b/src/backend/tests/plugins/boot-state.test.ts
@@ -0,0 +1,15 @@
+import { describe, expect, it } from "vitest";
+import { startablePluginIds } from "../../plugins/boot-state.js";
+
+describe("startablePluginIds", () => {
+  it("starts enabled plugins and retries ones that failed or were blocked", () => {
+    const ids = startablePluginIds([
+      { id: "a", state: "enabled" },
+      { id: "b", state: "failed" },
+      { id: "c", state: "blocked" },
+      { id: "d", state: "disabled" },
+      { id: "e", state: "pending" },
+    ]);
+    expect([...ids].sort()).toEqual(["a", "b", "c"]);
+  });
+});
diff --git a/src/backend/tests/plugins/built-harness.ts b/src/backend/tests/plugins/built-harness.ts
deleted file mode 100644
index 62784a721..000000000
--- a/src/backend/tests/plugins/built-harness.ts
+++ /dev/null
@@ -1,225 +0,0 @@
-/**
- * Boots core the way starter.ts does, against a real SQLite database that
- * starts in 2.8 shape, with the plugin loader pointed at the built bundles in
- * dist/plugins rather than source. Shared by the boot and upgrade tests.
- *
- * Needs `npm run build` (or build:sdk and build:plugins) first.
- */
-
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import Database from "better-sqlite3";
-import { DATA_DIR_TOKEN } from "../fixtures/upgrade/rows.js";
-import { remoteTestDialect, seedRemote28 } from "./remote-seed.js";
-
-export const REPO_ROOT = path.resolve(__dirname, "../../../..");
-export const BUILT_PLUGINS_DIR = path.join(REPO_ROOT, "dist", "plugins");
-const SCHEMA_28 = path.join(__dirname, "../fixtures/sqlite-2.8-schema.sql");
-/** The committed 2.8 install: db.sqlite, the fixture.env it was keyed with and its files. */
-export const UPGRADE_FIXTURE_DIR = path.join(__dirname, "../fixtures/upgrade");
-
-/** Every plugin in the repo, by folder. */
-export function sourcePluginIds(): string[] {
-  const root = path.join(REPO_ROOT, "plugins");
-  return fs
-    .readdirSync(root, { withFileTypes: true })
-    .filter(
-      (entry) =>
-        entry.isDirectory() &&
-        fs.existsSync(path.join(root, entry.name, "manifest.json")),
-    )
-    .map((entry) => entry.name)
-    .sort();
-}
-
-/** Throws with the fix when dist/plugins is missing a plugin. */
-export function assertPluginsBuilt(): void {
-  const missing = sourcePluginIds().filter(
-    (id) =>
-      !fs.existsSync(path.join(BUILT_PLUGINS_DIR, id, "dist", "backend.js")),
-  );
-  if (missing.length > 0) {
-    throw new Error(
-      `dist/plugins is missing ${missing.join(", ")}. Run npm run build first.`,
-    );
-  }
-}
-
-export function builtManifest(id: string): Record<string, unknown> {
-  return JSON.parse(
-    fs.readFileSync(path.join(BUILT_PLUGINS_DIR, id, "manifest.json"), "utf8"),
-  );
-}
-
-type Row = Record<string, unknown>;
-
-/** A 2.8 database in memory, with a helper that ignores unknown columns. */
-export function create28Database() {
-  const sqlite = new Database(":memory:");
-  sqlite.exec(fs.readFileSync(SCHEMA_28, "utf8"));
-  const columns = new Map<string, Set<string>>();
-  const insert = (table: string, row: Row): number => {
-    let known = columns.get(table);
-    if (!known) {
-      known = new Set(
-        (
-          sqlite.prepare(`PRAGMA table_info("${table}")`).all() as Array<{
-            name: string;
-          }>
-        ).map((column) => column.name),
-      );
-      columns.set(table, known);
-    }
-    const entries = Object.entries(row).filter(([key]) => known!.has(key));
-    const sql = `INSERT INTO "${table}" (${entries
-      .map(([key]) => `"${key}"`)
-      .join(", ")}) VALUES (${entries.map(() => "?").join(", ")})`;
-    const values = entries.map(([, value]) =>
-      typeof value === "boolean"
-        ? value
-          ? 1
-          : 0
-        : value !== null && typeof value === "object"
-          ? JSON.stringify(value)
-          : value,
-    );
-    return Number(sqlite.prepare(sql).run(...values).lastInsertRowid);
-  };
-  return { sqlite, insert };
-}
-
-export interface BootedCore {
-  dataDir: string;
-  /** The live database core and the plugins write to; null on Postgres and MySQL. */
-  sqlite: Database.Database | null;
-  /** The 2.8 database file exactly as it was written to DATA_DIR, if one was. */
-  seed: Buffer | null;
-  /** keepDataDir writes the database to disk and leaves DATA_DIR for another boot. */
-  shutdown: (options?: { keepDataDir?: boolean }) => Promise<void>;
-}
-
-/** A 2.8 data directory to boot: a seeded database, or a folder holding one. */
-export type BootSource =
-  Database.Database | { fixtureDir: string } | { reuseDataDir: string };
-
-/**
- * Lays a committed 2.8 install (fixtures/upgrade) into DATA_DIR: its key file
- * and the files its rows point at, with the fixture's DATA_DIR token in those
- * rows swapped for the real path, as 2.8 stored them absolute.
- */
-function placeFixture(fixtureDir: string, dataDir: string): Buffer {
-  fs.copyFileSync(
-    path.join(fixtureDir, "fixture.env"),
-    path.join(dataDir, ".env"),
-  );
-  fs.cpSync(path.join(fixtureDir, "files"), dataDir, { recursive: true });
-
-  const sqlite = new Database(
-    fs.readFileSync(path.join(fixtureDir, "db.sqlite")),
-  );
-  try {
-    sqlite
-      .prepare(
-        "UPDATE session_recordings SET recording_path = replace(recording_path, ?, ?)",
-      )
-      .run(DATA_DIR_TOKEN, dataDir.split(path.sep).join("/"));
-    return sqlite.serialize();
-  } finally {
-    sqlite.close();
-  }
-}
-
-const SYSTEM_SECRETS = [
-  "JWT_SECRET",
-  "DATABASE_KEY",
-  "ENCRYPTION_KEY",
-  "INTERNAL_AUTH_TOKEN",
-];
-
-/**
- * Writes the seeded database into a fresh DATA_DIR and runs starter.ts's boot
- * sequence up to, not including, opening the HTTP server: the pre-upgrade
- * backup, the database, core's migrations, then the plugins and their data
- * moves. Call vi.resetModules() before, so module state from other tests is
- * gone.
- */
-export async function bootCore(source: BootSource): Promise<BootedCore> {
-  const dataDir =
-    "reuseDataDir" in source
-      ? source.reuseDataDir
-      : fs.mkdtempSync(path.join(os.tmpdir(), "termix-boot-"));
-  process.env.DATA_DIR = dataDir;
-  process.env.DB_FILE_ENCRYPTION = "false";
-  process.env.ALLOW_EMPTY_DATA_DIR = "true";
-  process.env.TERMIX_BUNDLED_PLUGINS_DIR = BUILT_PLUGINS_DIR;
-  // SystemCrypto prefers these over DATA_DIR/.env, and a previous boot in
-  // this worker set them.
-  for (const key of SYSTEM_SECRETS) delete process.env[key];
-
-  let seed: Buffer | null = null;
-  if (source instanceof Database) {
-    seed = source.serialize();
-  } else if ("fixtureDir" in source) {
-    seed = placeFixture(source.fixtureDir, dataDir);
-  }
-
-  // TEST_DIALECT=postgres|mysql puts the same 2.8 data on a real server.
-  const remote = remoteTestDialect();
-  if (remote) {
-    const url = process.env.TEST_DATABASE_URL;
-    if (!url) throw new Error(`TEST_DIALECT=${remote} needs TEST_DATABASE_URL`);
-    process.env.DATABASE_DIALECT = remote;
-    process.env.DATABASE_URL = url;
-    if (seed) await seedRemote28(remote, url, seed);
-  } else if (seed) {
-    fs.writeFileSync(path.join(dataDir, "db.sqlite"), seed);
-  }
-
-  const { SystemCrypto } = await import("../../utils/system-crypto.js");
-  const systemCrypto = SystemCrypto.getInstance();
-  await systemCrypto.initializeJWTSecret();
-  await systemCrypto.initializeDatabaseKey();
-  await systemCrypto.initializeEncryptionKey();
-  await systemCrypto.initializeInternalAuthToken();
-
-  const { backupBeforeUpgrade, runCoreBootMigrations } =
-    await import("../../boot.js");
-  await backupBeforeUpgrade({ dataDir, version: "2.9.0-test" });
-
-  const db = await import("../../database/db/index.js");
-  await db.initializeDatabase();
-
-  await runCoreBootMigrations();
-
-  const { primeKnownPermissions } =
-    await import("../../utils/known-permissions.js");
-  await primeKnownPermissions();
-
-  const { initializePlugins, shutdownPlugins } =
-    await import("../../plugins/index.js");
-  await initializePlugins();
-
-  const { runPluginDataMigrations } =
-    await import("../../upgrade/boot-migrations.js");
-  await runPluginDataMigrations();
-
-  return {
-    dataDir,
-    sqlite: remote ? null : db.getSqlite(),
-    seed,
-    shutdown: async ({ keepDataDir = false } = {}) => {
-      await shutdownPlugins();
-      if (keepDataDir) {
-        if (!remote) {
-          fs.writeFileSync(
-            path.join(dataDir, "db.sqlite"),
-            db.getSqlite().serialize(),
-          );
-        }
-        return;
-      }
-      fs.rmSync(dataDir, { recursive: true, force: true });
-    },
-  };
-}
diff --git a/src/backend/tests/plugins/built-plugins-boot.test.ts b/src/backend/tests/plugins/built-plugins-boot.test.ts
deleted file mode 100644
index 3dd11bc68..000000000
--- a/src/backend/tests/plugins/built-plugins-boot.test.ts
+++ /dev/null
@@ -1,149 +0,0 @@
-/**
- * The built plugins really load: every bundle in dist/plugins activates on a
- * database that started in 2.8 shape, in dependency order, with every
- * service it needs provided and nothing registered twice.
- */
-
-import { afterAll, beforeAll, describe, expect, it, vi } from "vitest";
-import {
-  assertPluginsBuilt,
-  bootCore,
-  builtManifest,
-  create28Database,
-  sourcePluginIds,
-  type BootedCore,
-} from "./built-harness.js";
-
-const BOOT_TIMEOUT = 180_000;
-
-let core: BootedCore;
-const logged = { errors: [] as string[], warnings: [] as string[] };
-
-beforeAll(async () => {
-  assertPluginsBuilt();
-  vi.resetModules();
-  const { sqlite } = create28Database();
-  const error = vi.spyOn(console, "error").mockImplementation((...args) => {
-    logged.errors.push(args.map(String).join(" "));
-  });
-  const warn = vi.spyOn(console, "warn").mockImplementation((...args) => {
-    logged.warnings.push(args.map(String).join(" "));
-  });
-  try {
-    core = await bootCore(sqlite);
-  } finally {
-    error.mockRestore();
-    warn.mockRestore();
-  }
-}, BOOT_TIMEOUT);
-
-afterAll(async () => {
-  await core?.shutdown();
-}, BOOT_TIMEOUT);
-
-describe("the built plugins on a 2.8 database", () => {
-  it("boots without logging an error", () => {
-    expect(logged.errors).toEqual([]);
-    if (process.env.SHOW_BOOT_WARNINGS) {
-      console.log(logged.warnings.join("\n"));
-    }
-  });
-
-  it("activates every plugin, none failed or blocked", async () => {
-    const { getPluginRuntime } = await import("../../plugins/index.js");
-    const states = Object.fromEntries(
-      getPluginRuntime()
-        .loader.list()
-        .map((plugin) => [plugin.id, plugin.state]),
-    );
-    expect(Object.keys(states).sort()).toEqual(sourcePluginIds());
-    const notActive = Object.entries(states).filter(
-      ([, state]) => state !== "active",
-    );
-    expect(notActive).toEqual([]);
-  });
-
-  it("gives every declared service a provider and meets every hard dependency", async () => {
-    const { listServices } = await import("../../plugins/service-registry.js");
-    const provided = new Set(
-      listServices().map((service) => `${service.pluginId}:${service.service}`),
-    );
-    const ids = new Set(sourcePluginIds());
-
-    for (const id of ids) {
-      const manifest = builtManifest(id) as {
-        provides?: Array<{ service: string }>;
-        requires?: Array<{ service: string; optional?: boolean }>;
-        dependencies?: Record<string, string>;
-      };
-      for (const { service } of manifest.provides ?? []) {
-        expect(provided, `${id} provides ${service}`).toContain(
-          `${id}:${service}`,
-        );
-      }
-      const available = new Set(
-        listServices().map((service) => service.service),
-      );
-      for (const requirement of manifest.requires ?? []) {
-        if (requirement.optional) continue;
-        expect(available, `${id} requires ${requirement.service}`).toContain(
-          requirement.service,
-        );
-      }
-      for (const dependency of Object.keys(manifest.dependencies ?? {})) {
-        expect(ids, `${id} depends on ${dependency}`).toContain(dependency);
-      }
-    }
-  });
-
-  it("registers no route, socket or permission that clashes", async () => {
-    const { listRegistrationConflicts } =
-      await import("../../plugins/conflicts.js");
-    expect(listRegistrationConflicts()).toEqual([]);
-
-    const { getRegisteredWsRoutes } = await import("../../plugins/ws.js");
-    const sockets = getRegisteredWsRoutes();
-    expect(new Set(sockets).size).toBe(sockets.length);
-
-    // Plugin routes live under /plugin-api/<id>/, so a clash is two plugins
-    // claiming one id, which the loader refuses; a legacy path must start
-    // with its own plugin id.
-    for (const id of sourcePluginIds()) {
-      const legacy =
-        (
-          builtManifest(id) as {
-            contributes?: { http?: { legacyPaths?: string[] } };
-          }
-        ).contributes?.http?.legacyPaths ?? [];
-      for (const legacyPath of legacy) {
-        expect(legacyPath.startsWith(`/${id}/`)).toBe(true);
-      }
-    }
-
-    const { getPermissionCatalog } =
-      await import("../../utils/permission-catalog.js");
-    const permissions = getPermissionCatalog().flatMap(
-      (entry) => entry.permissions,
-    );
-    expect(new Set(permissions).size).toBe(permissions.length);
-  });
-
-  it("records every plugin migration it ran", async () => {
-    const recorded = core
-      .sqlite!.prepare(
-        "SELECT plugin_id, COUNT(*) AS n FROM plugin_migrations GROUP BY plugin_id",
-      )
-      .all() as Array<{ plugin_id: string; n: number }>;
-    const byPlugin = new Map(recorded.map((row) => [row.plugin_id, row.n]));
-    const fs = await import("node:fs");
-    const path = await import("node:path");
-    const { BUILT_PLUGINS_DIR } = await import("./built-harness.js");
-    for (const id of sourcePluginIds()) {
-      const dir = path.join(BUILT_PLUGINS_DIR, id, "migrations", "sqlite");
-      const files = fs.existsSync(dir)
-        ? fs.readdirSync(dir).filter((name) => name.endsWith(".sql"))
-        : [];
-      expect(byPlugin.get(id) ?? 0, `${id} migrations`).toBe(files.length);
-    }
-  });
-});
diff --git a/src/backend/tests/plugins/bundled-index.test.ts b/src/backend/tests/plugins/bundled-index.test.ts
new file mode 100644
index 000000000..eff196e52
--- /dev/null
+++ b/src/backend/tests/plugins/bundled-index.test.ts
@@ -0,0 +1,105 @@
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import {
+  initialPluginState,
+  onboardingDefaults,
+  resetBundledIndexCache,
+} from "../../plugins/bundled-index.js";
+
+let dir: string;
+
+function writeIndex(plugins: Record<string, unknown>) {
+  fs.writeFileSync(
+    path.join(dir, "bundled-index.json"),
+    JSON.stringify({ version: 1, plugins }),
+  );
+  resetBundledIndexCache();
+}
+
+beforeEach(() => {
+  dir = fs.mkdtempSync(path.join(os.tmpdir(), "termix-bundled-index-"));
+  process.env.TERMIX_BUNDLED_PLUGINS_DIR = dir;
+  resetBundledIndexCache();
+});
+
+afterEach(() => {
+  delete process.env.TERMIX_BUNDLED_PLUGINS_DIR;
+  delete process.env.ELECTRON_EMBEDDED;
+  delete process.env.TEST_SSO_CLIENT;
+  fs.rmSync(dir, { recursive: true, force: true });
+  resetBundledIndexCache();
+});
+
+describe("onboardingDefaults", () => {
+  it("treats everything as recommended without an index", () => {
+    expect(onboardingDefaults("anything")).toEqual({
+      recommended: true,
+      consent: false,
+    });
+  });
+
+  it("reads recommended and consent from the index", () => {
+    writeIndex({
+      kept: { onboarding: { recommended: true, consent: false } },
+      ask: { onboarding: { recommended: true, consent: true } },
+    });
+    expect(onboardingDefaults("kept")).toEqual({
+      recommended: true,
+      consent: false,
+    });
+    expect(onboardingDefaults("ask").consent).toBe(true);
+    expect(onboardingDefaults("other")).toEqual({
+      recommended: false,
+      consent: false,
+    });
+  });
+
+  it("recommends desktop-only plugins in the desktop app only", () => {
+    writeIndex({ desk: { onboarding: { recommended: "desktop" } } });
+    expect(onboardingDefaults("desk").recommended).toBe(false);
+    process.env.ELECTRON_EMBEDDED = "true";
+    expect(onboardingDefaults("desk").recommended).toBe(true);
+  });
+});
+
+describe("enabledByEnv", () => {
+  it("recommends a plugin once its environment config is set", () => {
+    writeIndex({
+      sso: { onboarding: { enabledByEnv: ["TEST_SSO_CLIENT"] } },
+    });
+    expect(onboardingDefaults("sso").recommended).toBe(false);
+    expect(initialPluginState("sso", "bundled", true)).toBe("disabled");
+    process.env.TEST_SSO_CLIENT = "  ";
+    expect(onboardingDefaults("sso").recommended).toBe(false);
+    process.env.TEST_SSO_CLIENT = "termix";
+    expect(onboardingDefaults("sso").recommended).toBe(true);
+    expect(initialPluginState("sso", "bundled", true)).toBe("enabled");
+  });
+});
+
+describe("initialPluginState", () => {
+  beforeEach(() => {
+    writeIndex({
+      kept: { onboarding: { recommended: true } },
+      ask: { onboarding: { recommended: true, consent: true } },
+    });
+  });
+
+  it("enables every bundled plugin on an existing install", () => {
+    expect(initialPluginState("other", "bundled", false)).toBe("enabled");
+    expect(initialPluginState("ask", "bundled", false)).toBe("enabled");
+  });
+
+  it("enables only recommended, non-consent plugins on a fresh install", () => {
+    expect(initialPluginState("kept", "bundled", true)).toBe("enabled");
+    expect(initialPluginState("ask", "bundled", true)).toBe("disabled");
+    expect(initialPluginState("other", "bundled", true)).toBe("disabled");
+  });
+
+  it("never enables a plugin dropped into the data directory", () => {
+    expect(initialPluginState("kept", "user", true)).toBe("disabled");
+    expect(initialPluginState("kept", "user", false)).toBe("disabled");
+  });
+});
diff --git a/src/backend/tests/plugins/bundled-plugin.test.ts b/src/backend/tests/plugins/bundled-plugin.test.ts
deleted file mode 100644
index 11081c2e2..000000000
--- a/src/backend/tests/plugins/bundled-plugin.test.ts
+++ /dev/null
@@ -1,153 +0,0 @@
-/**
- * The bundled plugins, as they ship.
- *
- * This reads plugins/ in the repo rather than a fixture: the manifests are
- * checked-in artifacts, and a typo in one would otherwise only show up when
- * the server tried to boot.
- */
-
-import { describe, expect, it, vi } from "vitest";
-import fs from "node:fs";
-import path from "node:path";
-import { getBundledPluginsDir } from "../../plugins/paths.js";
-import { parseManifest } from "../../plugins/manifest.js";
-import { isKnownCapability } from "@termix/plugin-sdk/capabilities";
-
-vi.mock("../../utils/logger.js", () => ({
-  pluginLogger: {
-    debug: vi.fn(),
-    info: vi.fn(),
-    warn: vi.fn(),
-    error: vi.fn(),
-    success: vi.fn(),
-  },
-}));
-
-const BUNDLED_DIR = getBundledPluginsDir();
-
-function bundledIds(): string[] {
-  return fs
-    .readdirSync(BUNDLED_DIR, { withFileTypes: true })
-    .filter((entry) => entry.isDirectory())
-    .map((entry) => entry.name)
-    .filter((id) => fs.existsSync(path.join(BUNDLED_DIR, id, "manifest.json")));
-}
-
-function readManifest(pluginId: string): Record<string, unknown> {
-  return JSON.parse(
-    fs.readFileSync(path.join(BUNDLED_DIR, pluginId, "manifest.json"), "utf8"),
-  );
-}
-
-const ids = bundledIds();
-
-describe("bundled plugins", () => {
-  it("finds the bundled plugin directory", () => {
-    expect(ids.length).toBeGreaterThan(0);
-  });
-
-  it.each(ids)("%s has a manifest that parses", (id) => {
-    const { manifest, errors } = parseManifest(readManifest(id));
-
-    expect(errors).toEqual([]);
-    expect(manifest?.id).toBe(id);
-  });
-
-  it.each(ids)("%s declares only catalog capabilities", (id) => {
-    const { manifest } = parseManifest(readManifest(id));
-
-    for (const capability of manifest?.capabilities ?? []) {
-      expect(isKnownCapability(capability)).toBe(true);
-    }
-  });
-
-  it.each(ids)("%s ships the entry points its manifest names", (id) => {
-    const { manifest } = parseManifest(readManifest(id));
-    const dir = path.join(BUNDLED_DIR, id);
-
-    expect(fs.existsSync(path.join(dir, manifest!.backend!))).toBe(true);
-    expect(fs.existsSync(path.join(dir, manifest!.frontend!))).toBe(true);
-  });
-
-  // process:transport-owner was the v1 marker for the in-process tier. There
-  // is one tier now, so nothing should still be asking for it.
-  it.each(ids)("%s does not declare a v1 permission", (id) => {
-    const raw = readManifest(id);
-
-    expect(raw.permissions).toBeUndefined();
-    expect(raw.sidecars).toBeUndefined();
-    expect(JSON.stringify(raw)).not.toContain("transport-owner");
-  });
-});
-
-describe("declared dependencies", () => {
-  it("names a plugin that is actually bundled", () => {
-    for (const id of ids) {
-      const { manifest } = parseManifest(readManifest(id));
-      for (const dependency of Object.keys(manifest?.dependencies ?? {})) {
-        expect(ids).toContain(dependency);
-      }
-    }
-  });
-
-  // ai reaches automations through the automations.access service, so it
-  // keeps working when automations is off.
-  it("keeps ai's use of automations optional", () => {
-    if (!ids.includes("ai")) return;
-
-    const { manifest } = parseManifest(readManifest("ai"));
-
-    expect(manifest?.dependencies?.automations).toBeUndefined();
-    expect(manifest?.optionalDependencies?.automations).toBeTruthy();
-  });
-});
-
-describe("plugins that own a port", () => {
-  // Every one of these had its server created at module scope at some point.
-  // The rule is that it belongs inside activate, or disable leaves the port
-  // held and re-enable fails.
-  it.each(["ssh-terminal", "docker", "host-metrics", "remote-desktop"])(
-    "%s creates no listener at module scope",
-    (id) => {
-      if (!ids.includes(id)) return;
-
-      const entry = path.join(BUNDLED_DIR, id, "src", "backend", "index.ts");
-      const source = fs.readFileSync(entry, "utf8");
-      const moduleScope = source.slice(
-        0,
-        source.indexOf("export async function activate"),
-      );
-
-      expect(moduleScope).not.toMatch(/\.listen\(/);
-      expect(moduleScope).not.toMatch(/new WebSocketServer/);
-    },
-  );
-
-  it("docker does not register a process signal handler", () => {
-    if (!ids.includes("docker")) return;
-
-    // Core owns shutdown: gracefulShutdown calls shutdownPlugins, which runs
-    // every plugin's deactivate. A plugin calling process.exit() itself
-    // skipped the rest of that sequence.
-    for (const file of ["index.ts", "console.ts"]) {
-      const candidate = path.join(
-        BUNDLED_DIR,
-        "docker",
-        "src",
-        "backend",
-        file,
-      );
-      if (!fs.existsSync(candidate)) continue;
-
-      // Comments are stripped first: the rule is worth explaining in prose
-      // right where it applies, and that prose names the thing it forbids.
-      const code = fs
-        .readFileSync(candidate, "utf8")
-        .replace(/\/\*[\s\S]*?\*\//g, "")
-        .replace(/^\s*\/\/.*$/gm, "");
-
-      expect(code).not.toMatch(/process\.on\(\s*["']SIG/);
-      expect(code).not.toMatch(/process\.exit\(/);
-    }
-  });
-});
diff --git a/src/backend/tests/plugins/ctx-audit.test.ts b/src/backend/tests/plugins/ctx-audit.test.ts
index 7eef84faa..f28aaedc7 100644
--- a/src/backend/tests/plugins/ctx-audit.test.ts
+++ b/src/backend/tests/plugins/ctx-audit.test.ts
@@ -22,7 +22,7 @@ vi.mock("../../utils/audit-logger.js", () => ({
 
 import { createPluginContext, createPluginHandle } from "../../plugins/ctx.js";
 import { runAsActor } from "../../plugins/actor.js";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 
 function contextFor(pluginId: string) {
   const manifest = {
diff --git a/src/backend/tests/plugins/ctx-auth-login.test.ts b/src/backend/tests/plugins/ctx-auth-login.test.ts
index 6269cff57..9bfb69ffd 100644
--- a/src/backend/tests/plugins/ctx-auth-login.test.ts
+++ b/src/backend/tests/plugins/ctx-auth-login.test.ts
@@ -5,7 +5,7 @@
  */
 
 import { beforeEach, describe, expect, it, vi } from "vitest";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 import {
   createAuthState,
   fakeAuthManager,
@@ -53,7 +53,8 @@ vi.mock("../../utils/trusted-proxy-auth.js", () => ({
   isTrustedProxyAuthEnabled: () => h.trustedProxy,
 }));
 vi.mock("../../plugins/permissions.js", async () => {
-  const { PluginCapabilityError } = await import("@termix/plugin-sdk/backend");
+  const { PluginCapabilityError } =
+    await import("@termix-ssh/plugin-sdk/backend");
   return {
     assertCapability: async (
       pluginId: string,
@@ -170,10 +171,9 @@ function setup() {
           request.ip ?? "unknown",
           "4:bob",
         );
-        throw new (await import("@termix/plugin-sdk/backend")).LoginMethodError(
-          "Invalid username or password",
-          401,
-        );
+        throw new (
+          await import("@termix-ssh/plugin-sdk/backend")
+        ).LoginMethodError("Invalid username or password", 401);
       }
       return {
         kind: "external",
@@ -199,7 +199,7 @@ beforeEach(() => {
 });
 
 describe("a plugin's external identity", () => {
-  it("carries the 2.8 identifier, role map and logout claims into core", async () => {
+  it("carries the role map and logout claims into core", async () => {
     setup();
     const identity = await getLoginMethod("corp-sso")!.callback!(
       fakeRequest() as never,
@@ -211,7 +211,6 @@ describe("a plugin's external identity", () => {
     expect(result.kind).toBe("session");
 
     const [user] = [...h.state.users.values()];
-    expect(user).toMatchObject({ oidcIdentifier: "sub-1", ssoProviderId: 3 });
     expect(h.state.identities).toContainEqual(
       expect.objectContaining({ providerId: "3", subject: "sub-1" }),
     );
@@ -219,9 +218,7 @@ describe("a plugin's external identity", () => {
     expect(h.manager.generateJWTToken).toHaveBeenCalledWith(
       user.id,
       expect.objectContaining({
-        ssoProviderId: 3,
-        oidcSub: "sub-1",
-        oidcSid: "sid-1",
+        externalSession: { providerId: 3, sub: "sub-1", sid: "sid-1" },
       }),
     );
   });
@@ -238,29 +235,6 @@ describe("a plugin's external identity", () => {
     expect(mapped).not.toHaveProperty("unlockError", "spoofed");
     expect(mapped.rateLimitUsername).toBeUndefined();
   });
-
-  it("finds a 2.8 user by the old identifier and links the identity", async () => {
-    h.state.users.set("u-1", {
-      id: "u-1",
-      username: "Alice",
-      passwordHash: "",
-      isAdmin: false,
-      isOidc: true,
-      oidcIdentifier: "sub-1",
-    });
-    setup();
-    const identity = await getLoginMethod("corp-sso")!.callback!(
-      fakeRequest() as never,
-    );
-    await runLogin(fakeRequest() as never, identity, {
-      methodId: "corp-sso",
-      rememberMe: false,
-    });
-    expect(h.state.users.size).toBe(1);
-    expect(h.state.identities).toContainEqual(
-      expect.objectContaining({ userId: "u-1", providerId: "3" }),
-    );
-  });
 });
 
 describe("ctx.auth.completeRedirectLogin", () => {
@@ -306,7 +280,7 @@ describe("the other ctx.auth helpers", () => {
     const { auth } = setup();
     expect(await auth.revokeSessions({ providerId: 3, sid: "sid-1" })).toBe(1);
     expect(h.manager.revokeSessionsByExternalSession).toHaveBeenCalledWith({
-      ssoProviderId: 3,
+      providerId: 3,
       sub: null,
       sid: "sid-1",
     });
@@ -402,8 +376,13 @@ describe("form methods and the external second factor setting", () => {
       username: "Bob",
       passwordHash: "",
       isAdmin: false,
-      isOidc: true,
-      oidcIdentifier: "ldap:4:bob",
+    });
+    h.state.identities.push({
+      id: 1,
+      userId: "u-bob",
+      providerId: "ldap:4",
+      subject: "bob",
+      email: null,
     });
     h.state.factors.push({
       userId: "u-bob",
diff --git a/src/backend/tests/plugins/ctx-capabilities.test.ts b/src/backend/tests/plugins/ctx-capabilities.test.ts
index 237d9da98..f6853e976 100644
--- a/src/backend/tests/plugins/ctx-capabilities.test.ts
+++ b/src/backend/tests/plugins/ctx-capabilities.test.ts
@@ -28,7 +28,7 @@ vi.mock("../../utils/audit-logger.js", () => ({
 
 import { createPluginContext, createPluginHandle } from "../../plugins/ctx.js";
 import { invalidatePluginPermissionCache } from "../../plugins/permissions.js";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 
 function manifestFor(pluginId: string, capabilities: string[]): PluginManifest {
   return {
diff --git a/src/backend/tests/plugins/ctx-credentials.test.ts b/src/backend/tests/plugins/ctx-credentials.test.ts
index 867a44861..3eb8bc505 100644
--- a/src/backend/tests/plugins/ctx-credentials.test.ts
+++ b/src/backend/tests/plugins/ctx-credentials.test.ts
@@ -119,7 +119,7 @@ import {
   requireSecretResolver,
   resetSecretResolverRegistryForTests,
 } from "../../hosts/connect/secret-resolver-registry.js";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 import ssh2 from "ssh2";
 import { setHostProtocolSource } from "../../hosts/protocol-auth/registry.js";
 
@@ -156,6 +156,7 @@ const baseHost = {
   ip: "10.0.0.7",
   port: 22,
   username: "sshuser",
+  authType: "password",
   password: "ssh-secret",
   jumpHosts: JSON.stringify([{ hostId: 3 }]),
 };
@@ -285,6 +286,26 @@ describe("ctx.credentials.resolveHostProtocol", () => {
     });
   });
 
+  it("does not fall back to an old password on a key host", async () => {
+    grants.set("demo", ["credentials:read"]);
+    state.hosts.set(7, { ...baseHost, authType: "key" });
+    state.logins.set("7:spice", {
+      protocol: "spice",
+      authType: "direct",
+      credentialId: null,
+      username: null,
+      password: null,
+      fields: {},
+      secretFields: {},
+    });
+    const ctx = spiceContext(["credentials:read"]);
+
+    const target = await runAsActor("owner", "request", () =>
+      ctx.credentials.resolveHostProtocol(7, "spice"),
+    );
+    expect(target?.auth.password).toBe("");
+  });
+
   it("uses the stored credential in credential mode", async () => {
     grants.set("demo", ["credentials:read"]);
     state.logins.set("7:spice", {
diff --git a/src/backend/tests/plugins/ctx-db.test.ts b/src/backend/tests/plugins/ctx-db.test.ts
index 5252453b0..285659d90 100644
--- a/src/backend/tests/plugins/ctx-db.test.ts
+++ b/src/backend/tests/plugins/ctx-db.test.ts
@@ -70,7 +70,7 @@ import {
   resetSyncRegistry,
   listEntityTypes,
 } from "../../plugins/sync-registry.js";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 
 function manifestFor(pluginId: string, capabilities: string[]): PluginManifest {
   return {
diff --git a/src/backend/tests/plugins/ctx-desktop.test.ts b/src/backend/tests/plugins/ctx-desktop.test.ts
index 3b2c27bf1..b48831b6f 100644
--- a/src/backend/tests/plugins/ctx-desktop.test.ts
+++ b/src/backend/tests/plugins/ctx-desktop.test.ts
@@ -36,7 +36,7 @@ vi.mock("../../utils/electron-ipc-bridge.js", () => ({
 
 import { createPluginContext, createPluginHandle } from "../../plugins/ctx.js";
 import { invalidatePluginPermissionCache } from "../../plugins/permissions.js";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 
 function manifestFor(pluginId: string, capabilities: string[]): PluginManifest {
   return {
diff --git a/src/backend/tests/plugins/ctx-hosts.test.ts b/src/backend/tests/plugins/ctx-hosts.test.ts
index 4dca60acc..a3f74e30d 100644
--- a/src/backend/tests/plugins/ctx-hosts.test.ts
+++ b/src/backend/tests/plugins/ctx-hosts.test.ts
@@ -36,7 +36,8 @@ const h = vi.hoisted(() => ({
 }));
 
 vi.mock("../../plugins/permissions.js", async () => {
-  const { PluginCapabilityError } = await import("@termix/plugin-sdk/backend");
+  const { PluginCapabilityError } =
+    await import("@termix-ssh/plugin-sdk/backend");
   return {
     assertCapability: async (
       pluginId: string,
@@ -204,7 +205,8 @@ vi.mock("../../hosts/delete-host.js", () => ({
 }));
 
 const { createPluginHosts } = await import("../../plugins/ctx-hosts.js");
-const { PluginCapabilityError } = await import("@termix/plugin-sdk/backend");
+const { PluginCapabilityError } =
+  await import("@termix-ssh/plugin-sdk/backend");
 
 function manifest(capabilities: string[]) {
   return {
@@ -474,7 +476,7 @@ describe("ctx.hosts", () => {
         password: "secret",
         key: "PRIVATE",
         autostartPassword: "x",
-        terminalConfig: '{"keepaliveInterval":5,"fontSize":14}',
+        sshOptions: '{"keepaliveInterval":5}',
         enableDocker: true,
         jumpHosts: "[]",
       },
diff --git a/src/backend/tests/plugins/ctx-notify.test.ts b/src/backend/tests/plugins/ctx-notify.test.ts
index 8a8a00a6a..dea6ff4d2 100644
--- a/src/backend/tests/plugins/ctx-notify.test.ts
+++ b/src/backend/tests/plugins/ctx-notify.test.ts
@@ -8,7 +8,7 @@ import { beforeEach, describe, expect, it, vi } from "vitest";
 import type {
   PluginNotification,
   PluginNotifyHub,
-} from "@termix/plugin-sdk/backend";
+} from "@termix-ssh/plugin-sdk/backend";
 
 const grants = new Map<string, string[]>();
 const auditEntries: Array<Record<string, unknown>> = [];
@@ -81,7 +81,7 @@ import { createPluginContext, createPluginHandle } from "../../plugins/ctx.js";
 import { invalidatePluginPermissionCache } from "../../plugins/permissions.js";
 import { runAsActor } from "../../plugins/actor.js";
 import { clearNotifyHub } from "../../plugins/notify-hub.js";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 
 function contextFor(
   capabilities: string[],
diff --git a/src/backend/tests/plugins/ctx-plugins.test.ts b/src/backend/tests/plugins/ctx-plugins.test.ts
index 8c2d0e499..0479480a0 100644
--- a/src/backend/tests/plugins/ctx-plugins.test.ts
+++ b/src/backend/tests/plugins/ctx-plugins.test.ts
@@ -1,8 +1,9 @@
 import { describe, expect, it, vi } from "vitest";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 
 vi.mock("../../plugins/permissions.js", async () => {
-  const { PluginCapabilityError } = await import("@termix/plugin-sdk/backend");
+  const { PluginCapabilityError } =
+    await import("@termix-ssh/plugin-sdk/backend");
   return {
     assertCapability: async (
       pluginId: string,
@@ -40,7 +41,8 @@ vi.mock("../../plugins/index.js", () => ({
 }));
 
 const { createPluginPlugins } = await import("../../plugins/ctx-plugins.js");
-const { PluginCapabilityError } = await import("@termix/plugin-sdk/backend");
+const { PluginCapabilityError } =
+  await import("@termix-ssh/plugin-sdk/backend");
 
 const manifest = (capabilities: string[]) =>
   ({ id: "reader", capabilities }) as unknown as PluginManifest;
diff --git a/src/backend/tests/plugins/ctx-process.test.ts b/src/backend/tests/plugins/ctx-process.test.ts
index 139774e92..c50a14645 100644
--- a/src/backend/tests/plugins/ctx-process.test.ts
+++ b/src/backend/tests/plugins/ctx-process.test.ts
@@ -7,7 +7,8 @@ import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 const h = vi.hoisted(() => ({ granted: new Set<string>() }));
 
 vi.mock("../../plugins/permissions.js", async () => {
-  const { PluginCapabilityError } = await import("@termix/plugin-sdk/backend");
+  const { PluginCapabilityError } =
+    await import("@termix-ssh/plugin-sdk/backend");
   return {
     assertCapability: async (
       pluginId: string,
@@ -23,7 +24,8 @@ vi.mock("../../plugins/permissions.js", async () => {
 
 const { createPluginProcess } = await import("../../plugins/ctx-process.js");
 const { DisposableBag } = await import("../../plugins/disposables.js");
-const { PluginCapabilityError } = await import("@termix/plugin-sdk/backend");
+const { PluginCapabilityError } =
+  await import("@termix-ssh/plugin-sdk/backend");
 
 const DECLARED = ["process:spawn", "network:outbound"];
 
@@ -111,7 +113,8 @@ describe("ctx.process.ensureBinary", () => {
   const contents = "#!/bin/sh\necho hi\n";
 
   it("uses a prebuilt copy whose checksum matches, without downloading", async () => {
-    const prebuilt = path.join(dir, "prebuilt-tool");
+    await fs.mkdir(path.join(dir, "prebuilt"), { recursive: true });
+    const prebuilt = path.join(dir, "prebuilt", "tool");
     await fs.writeFile(prebuilt, contents);
     const fetch = vi.fn();
     const { process: proc } = create({ fetch: fetch as never });
@@ -127,6 +130,23 @@ describe("ctx.process.ensureBinary", () => {
     expect(fetch).not.toHaveBeenCalled();
   });
 
+  it("never hashes a prebuilt path that is not the binary itself", async () => {
+    const other = path.join(dir, "secrets.db");
+    await fs.writeFile(other, contents);
+    await fs.mkdir(path.join(dir, "tool-dir", "tool"), { recursive: true });
+    const fetch = vi.fn(async () => new Response(contents));
+    const { process: proc } = create({ fetch: fetch as never });
+    const result = await proc.ensureBinary({
+      name: "tool",
+      version: "1",
+      url: "https://example.test/tool",
+      sha256: sha256(contents),
+      prebuilt: [other, "relative/tool", path.join(dir, "tool-dir", "tool")],
+    });
+    expect(result).toBe(path.join(dir, "bin", "tool"));
+    expect(fetch).toHaveBeenCalledOnce();
+  });
+
   it("downloads once, verifies it and reuses the copy", async () => {
     const fetch = vi.fn(async () => new Response(contents));
     const { process: proc } = create({ fetch: fetch as never });
diff --git a/src/backend/tests/plugins/ctx-secrets.test.ts b/src/backend/tests/plugins/ctx-secrets.test.ts
index 3b6c655b9..5abc8c631 100644
--- a/src/backend/tests/plugins/ctx-secrets.test.ts
+++ b/src/backend/tests/plugins/ctx-secrets.test.ts
@@ -75,7 +75,7 @@ vi.mock("../../utils/audit-logger.js", () => ({
 import { createPluginContext, createPluginHandle } from "../../plugins/ctx.js";
 import { invalidatePluginPermissionCache } from "../../plugins/permissions.js";
 import { runAsActor } from "../../plugins/actor.js";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 
 function contextFor(capabilities: string[]) {
   grants.set("demo", capabilities);
diff --git a/src/backend/tests/plugins/ctx-services.test.ts b/src/backend/tests/plugins/ctx-services.test.ts
index e21e20d1b..61464f5c8 100644
--- a/src/backend/tests/plugins/ctx-services.test.ts
+++ b/src/backend/tests/plugins/ctx-services.test.ts
@@ -13,7 +13,7 @@ import {
   clearServiceRegistry,
   getRegistration,
 } from "../../plugins/service-registry.js";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 
 function contextFor(pluginId: string, names?: string[]) {
   const manifest = {
diff --git a/src/backend/tests/plugins/ctx-ssh-auth.test.ts b/src/backend/tests/plugins/ctx-ssh-auth.test.ts
index c735d1bc0..205a47c62 100644
--- a/src/backend/tests/plugins/ctx-ssh-auth.test.ts
+++ b/src/backend/tests/plugins/ctx-ssh-auth.test.ts
@@ -22,7 +22,8 @@ vi.mock("../../utils/logger.js", () => {
   return { pluginLogger: log, sshLogger: log, logger: log, authLogger: log };
 });
 vi.mock("../../plugins/permissions.js", async () => {
-  const { PluginCapabilityError } = await import("@termix/plugin-sdk/backend");
+  const { PluginCapabilityError } =
+    await import("@termix-ssh/plugin-sdk/backend");
   return {
     assertCapability: async (
       pluginId: string,
@@ -142,7 +143,8 @@ const { classifyKeyboardInteractive } =
   await import("../../hosts/connect/keyboard-interactive.js");
 const { getLoginMethod, getSecondFactor } =
   await import("../../auth/registry.js");
-const { PluginCapabilityError } = await import("@termix/plugin-sdk/backend");
+const { PluginCapabilityError } =
+  await import("@termix-ssh/plugin-sdk/backend");
 
 function manifest(capabilities: string[], auth: Record<string, string[]> = {}) {
   return {
@@ -554,6 +556,30 @@ describe("ctx.auth", () => {
     ).not.toBe("browser");
   });
 
+  it("asks for a push/TOTP menu choice as text and a press-enter confirm as a push", () => {
+    const host = { id: 1, ip: "10.0.0.1", port: 22, username: "root" };
+    expect(
+      classifyKeyboardInteractive(
+        {
+          name: "",
+          instructions: "",
+          prompts: [{ prompt: "Choose [1] Push, or [2] TOTP: ", echo: true }],
+        },
+        host,
+      ),
+    ).toEqual({ kind: "input", promptIndex: 0, isPush: false });
+    expect(
+      classifyKeyboardInteractive(
+        {
+          name: "",
+          instructions: "",
+          prompts: [{ prompt: "Press enter to send push", echo: false }],
+        },
+        host,
+      ),
+    ).toEqual({ kind: "input", promptIndex: 0, isPush: true });
+  });
+
   it("refuses a keyboard-interactive handler that is not declared", () => {
     const auth = createPluginAuth({
       manifest: manifest(["auth:provide"], { keyboardInteractive: ["gate"] }),
@@ -647,7 +673,7 @@ describe("ctx.auth", () => {
   it("refuses enrolment when core policy forbids second factors", async () => {
     h.granted = new Set(["auth:provide"]);
     h.factors = [];
-    const { LoginMethodError } = await import("@termix/plugin-sdk/backend");
+    const { LoginMethodError } = await import("@termix-ssh/plugin-sdk/backend");
     h.policyError = new LoginMethodError("password login is off", 409);
     const auth = createPluginAuth({
       manifest: manifest(["auth:provide"], { secondFactors: ["pin"] }),
diff --git a/src/backend/tests/plugins/ctx-ssh-interactive.test.ts b/src/backend/tests/plugins/ctx-ssh-interactive.test.ts
index 38f7c7635..904accc5c 100644
--- a/src/backend/tests/plugins/ctx-ssh-interactive.test.ts
+++ b/src/backend/tests/plugins/ctx-ssh-interactive.test.ts
@@ -18,7 +18,8 @@ vi.mock("../../utils/logger.js", () => {
   return { pluginLogger: log, sshLogger: log, logger: log, authLogger: log };
 });
 vi.mock("../../plugins/permissions.js", async () => {
-  const { PluginCapabilityError } = await import("@termix/plugin-sdk/backend");
+  const { PluginCapabilityError } =
+    await import("@termix-ssh/plugin-sdk/backend");
   return {
     assertCapability: async (
       pluginId: string,
@@ -110,7 +111,7 @@ const { DisposableBag } = await import("../../plugins/disposables.js");
 const { registerSshAuthProvider, resetSshAuthRegistryForTests } =
   await import("../../hosts/connect/auth-provider-registry.js");
 const { PluginCapabilityError, PluginSshInteractionError } =
-  await import("@termix/plugin-sdk/backend");
+  await import("@termix-ssh/plugin-sdk/backend");
 
 const ALL = ["ssh:connect", "credentials:use", "credentials:read"];
 
diff --git a/src/backend/tests/plugins/ctx-system.test.ts b/src/backend/tests/plugins/ctx-system.test.ts
index bca0f91c9..21491acec 100644
--- a/src/backend/tests/plugins/ctx-system.test.ts
+++ b/src/backend/tests/plugins/ctx-system.test.ts
@@ -9,7 +9,8 @@ const h = vi.hoisted(() => ({
 }));
 
 vi.mock("../../plugins/permissions.js", async () => {
-  const { PluginCapabilityError } = await import("@termix/plugin-sdk/backend");
+  const { PluginCapabilityError } =
+    await import("@termix-ssh/plugin-sdk/backend");
   return {
     assertCapability: async (
       pluginId: string,
@@ -56,7 +57,8 @@ vi.mock("../../tls/acme-challenges.js", () => ({
 
 const { createPluginSystem } = await import("../../plugins/ctx-system.js");
 const { DisposableBag } = await import("../../plugins/disposables.js");
-const { PluginCapabilityError } = await import("@termix/plugin-sdk/backend");
+const { PluginCapabilityError } =
+  await import("@termix-ssh/plugin-sdk/backend");
 
 let audits: Array<{ action: string; success: boolean }>;
 
diff --git a/src/backend/tests/plugins/dev-reload.test.ts b/src/backend/tests/plugins/dev-reload.test.ts
new file mode 100644
index 000000000..44555b9e5
--- /dev/null
+++ b/src/backend/tests/plugins/dev-reload.test.ts
@@ -0,0 +1,51 @@
+import { describe, expect, it, vi } from "vitest";
+
+vi.mock("../../utils/logger.js", () => ({
+  pluginLogger: { info: vi.fn(), error: vi.fn() },
+}));
+
+const { handleDevMessage } = await import("../../plugins/dev-reload.js");
+
+describe("dev reload messages", () => {
+  it("reloads the plugin and answers with its state", async () => {
+    const send = vi.fn();
+    const reload = vi.fn(async () => ({ version: "1.0.0", state: "active" }));
+    await handleDevMessage(
+      { type: "plugin-reload", id: "snippets" },
+      send,
+      reload,
+    );
+    expect(reload).toHaveBeenCalledWith("snippets");
+    expect(send).toHaveBeenCalledWith({
+      type: "plugin-reloaded",
+      id: "snippets",
+      state: "active",
+    });
+  });
+
+  it("answers with the error when the reload fails", async () => {
+    const send = vi.fn();
+    await handleDevMessage(
+      { type: "plugin-reload", id: "snippets" },
+      send,
+      async () => {
+        throw new Error("bad manifest");
+      },
+    );
+    expect(send).toHaveBeenCalledWith({
+      type: "plugin-reload-failed",
+      id: "snippets",
+      error: "bad manifest",
+    });
+  });
+
+  it("ignores other messages", async () => {
+    const send = vi.fn();
+    const reload = vi.fn();
+    await handleDevMessage({ type: "shutdown" }, send, reload);
+    await handleDevMessage({ type: "plugin-reload" }, send, reload);
+    await handleDevMessage(null, send, reload);
+    expect(reload).not.toHaveBeenCalled();
+    expect(send).not.toHaveBeenCalled();
+  });
+});
diff --git a/src/backend/tests/plugins/disable-isolation.test.ts b/src/backend/tests/plugins/disable-isolation.test.ts
index ae4262541..5fad15c06 100644
--- a/src/backend/tests/plugins/disable-isolation.test.ts
+++ b/src/backend/tests/plugins/disable-isolation.test.ts
@@ -33,7 +33,19 @@ vi.mock("../../plugins/permissions.js", () => ({
   invalidatePluginPermissionCache: vi.fn(),
 }));
 
-const TEST_PORT = 39102;
+// A fixed port can land in a range Windows reserves for Hyper-V or Docker.
+function freePort(): Promise<number> {
+  return new Promise((resolve, reject) => {
+    const server = net.createServer();
+    server.once("error", reject);
+    server.listen(0, "127.0.0.1", () => {
+      const { port } = server.address() as net.AddressInfo;
+      server.close(() => resolve(port));
+    });
+  });
+}
+
+const TEST_PORT = await freePort();
 
 function isListening(port: number): Promise<boolean> {
   return new Promise((resolve) => {
diff --git a/src/backend/tests/plugins/fs-retry.test.ts b/src/backend/tests/plugins/fs-retry.test.ts
new file mode 100644
index 000000000..b239036bf
--- /dev/null
+++ b/src/backend/tests/plugins/fs-retry.test.ts
@@ -0,0 +1,62 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { moveWithRetry } from "../../plugins/fs-retry.js";
+
+const roots: string[] = [];
+
+function tempDir(): string {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), "termix-move-"));
+  roots.push(root);
+  return root;
+}
+
+function locked(): NodeJS.ErrnoException {
+  return Object.assign(new Error("locked"), { code: "EPERM" });
+}
+
+afterEach(() => {
+  vi.restoreAllMocks();
+  while (roots.length) {
+    fs.rmSync(roots.pop()!, { recursive: true, force: true });
+  }
+});
+
+describe("moveWithRetry", () => {
+  it("waits out a passing lock", async () => {
+    const root = tempDir();
+    fs.mkdirSync(path.join(root, "from"));
+    const real = fs.promises.rename;
+    const rename = vi
+      .spyOn(fs.promises, "rename")
+      .mockRejectedValueOnce(locked())
+      .mockImplementation(real);
+
+    await moveWithRetry(path.join(root, "from"), path.join(root, "to"), [1, 1]);
+
+    expect(rename).toHaveBeenCalledTimes(2);
+    expect(fs.existsSync(path.join(root, "to"))).toBe(true);
+  });
+
+  it("copies a folder that never unlocks", async () => {
+    const root = tempDir();
+    fs.mkdirSync(path.join(root, "from", "nested"), { recursive: true });
+    fs.writeFileSync(path.join(root, "from", "nested", "a.js"), "x");
+    vi.spyOn(fs.promises, "rename").mockRejectedValue(locked());
+
+    await moveWithRetry(path.join(root, "from"), path.join(root, "to"), [1]);
+
+    expect(
+      fs.readFileSync(path.join(root, "to", "nested", "a.js"), "utf8"),
+    ).toBe("x");
+    expect(fs.existsSync(path.join(root, "from"))).toBe(false);
+  });
+
+  it("does not retry a real error", async () => {
+    const root = tempDir();
+    await expect(
+      moveWithRetry(path.join(root, "missing"), path.join(root, "to"), [1]),
+    ).rejects.toMatchObject({ code: "ENOENT" });
+  });
+});
diff --git a/src/backend/tests/plugins/host-commands.test.ts b/src/backend/tests/plugins/host-commands.test.ts
index 77c95bf8b..9d27a2783 100644
--- a/src/backend/tests/plugins/host-commands.test.ts
+++ b/src/backend/tests/plugins/host-commands.test.ts
@@ -6,7 +6,8 @@ import {
   isValidPackageName,
   buildSudoCommand,
   parseUpgradable,
-} from "@termix/plugin-sdk/host-commands";
+  execCommand,
+} from "@termix-ssh/plugin-sdk/host-commands";
 
 describe("parsePlatformProbe", () => {
   it("prefers dnf over yum when both are present", () => {
@@ -114,3 +115,13 @@ describe("parseUpgradable", () => {
     expect(parseUpgradable(null, "anything")).toEqual([]);
   });
 });
+
+describe("execCommand", () => {
+  it("leaves the command out of the timeout error", async () => {
+    const client = { exec: () => {} } as never;
+    const command = buildSudoCommand("apt update", "hunter2");
+    await expect(execCommand(client, command, 5)).rejects.toThrow(
+      /^Command timeout after 5ms$/,
+    );
+  });
+});
diff --git a/src/backend/tests/plugins/http.test.ts b/src/backend/tests/plugins/http.test.ts
index d38a7dfd2..a947192bb 100644
--- a/src/backend/tests/plugins/http.test.ts
+++ b/src/backend/tests/plugins/http.test.ts
@@ -234,6 +234,48 @@ describe("ctx.http authentication", () => {
     expect(response.status).toBe(401);
   });
 
+  it("only opens the methods the public route was registered for", async () => {
+    const router = http.createPluginRouter({
+      manifest: manifest(),
+      options: { public: ["/webhook/:token"] },
+      reportError: () => {},
+    });
+    router.post("/webhook/:token", (_req, res) => res.json({ ok: true }));
+    router.delete("/webhook/:token", (_req, res) => res.json({ ok: true }));
+
+    const base = await startServer();
+    const url = `${base}/plugin-api/sample-plugin/webhook/abc`;
+
+    expect((await fetch(url, { method: "POST" })).status).toBe(200);
+    expect((await fetch(url)).status).toBe(401);
+    expect((await fetch(url, { method: "PUT" })).status).toBe(401);
+  });
+
+  it("does not open a literal route beside a public parameter", async () => {
+    const router = http.createPluginRouter({
+      manifest: manifest(),
+      options: { public: ["/webhook/:token"] },
+      reportError: () => {},
+    });
+    router.get("/webhook/config", (_req, res) => res.json({ secret: true }));
+    router.post("/webhook/config", (_req, res) => res.json({ secret: true }));
+    router.get("/webhook/:token", (_req, res) => res.json({ ok: true }));
+    router.post("/webhook/:token", (_req, res) => res.json({ ok: true }));
+
+    const base = await startServer();
+    const root = `${base}/plugin-api/sample-plugin/webhook`;
+
+    expect((await fetch(`${root}/config`)).status).toBe(401);
+    expect((await fetch(`${root}/config`, { method: "POST" })).status).toBe(
+      401,
+    );
+    expect((await fetch(`${root}/abc`)).status).toBe(200);
+    expect((await fetch(`${root}/abc`, { method: "HEAD" })).status).toBe(200);
+    expect((await fetch(`${root}/config`, { headers: authed })).status).toBe(
+      200,
+    );
+  });
+
   it("opens everything below a trailing /* and nothing beside it", async () => {
     const router = http.createPluginRouter({
       manifest: manifest(),
diff --git a/src/backend/tests/plugins/install-counts.test.ts b/src/backend/tests/plugins/install-counts.test.ts
new file mode 100644
index 000000000..a3ad0e962
--- /dev/null
+++ b/src/backend/tests/plugins/install-counts.test.ts
@@ -0,0 +1,103 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const state = vi.hoisted(() => ({
+  stats: null as null | {
+    plugins: Map<string, { downloads: number; activeInstalls: number | null }>;
+  },
+  fail: false,
+  upserted: [] as Array<{ registryId: string; entries: unknown[] }>,
+  rows: [] as Array<{ pluginId: string; count: number; source: string }>,
+}));
+
+vi.mock("../../plugins/registry-index.js", () => ({
+  OFFICIAL_REGISTRY_ID: "official",
+  fetchRegistryStats: async () => {
+    if (state.fail) throw new Error("offline");
+    return state.stats;
+  },
+}));
+
+vi.mock("../../database/repositories/factory.js", () => ({
+  createCurrentPluginInstallCountRepository: () => ({
+    upsertMany: async (registryId: string, entries: unknown[]) => {
+      state.upserted.push({ registryId, entries });
+      return entries.length;
+    },
+    listByRegistry: async () => state.rows,
+  }),
+}));
+
+const {
+  DOWNLOADS_SOURCE,
+  TELEMETRY_SOURCE,
+  preferredCount,
+  readInstallCounts,
+  syncInstallCounts,
+} = await import("../../plugins/install-counts.js");
+
+beforeEach(() => {
+  state.stats = null;
+  state.fail = false;
+  state.upserted = [];
+  state.rows = [];
+});
+
+describe("preferredCount", () => {
+  it("prefers active installs and falls back to downloads", () => {
+    expect(preferredCount({ downloads: 90, activeInstalls: 12 })).toEqual({
+      count: 12,
+      source: TELEMETRY_SOURCE,
+    });
+    expect(preferredCount({ downloads: 90, activeInstalls: null })).toEqual({
+      count: 90,
+      source: DOWNLOADS_SOURCE,
+    });
+    expect(preferredCount({ downloads: 90, activeInstalls: 0 })).toEqual({
+      count: 90,
+      source: DOWNLOADS_SOURCE,
+    });
+  });
+});
+
+describe("syncInstallCounts", () => {
+  it("writes one row per plugin with its preferred source", async () => {
+    state.stats = {
+      plugins: new Map([
+        ["docker", { downloads: 50, activeInstalls: 20 }],
+        ["tunnels", { downloads: 8, activeInstalls: null }],
+      ]),
+    };
+    expect(await syncInstallCounts()).toBe(2);
+    expect(state.upserted).toEqual([
+      {
+        registryId: "official",
+        entries: [
+          { pluginId: "docker", count: 20, source: TELEMETRY_SOURCE },
+          { pluginId: "tunnels", count: 8, source: DOWNLOADS_SOURCE },
+        ],
+      },
+    ]);
+  });
+
+  it("keeps the old numbers when the registry is unreachable", async () => {
+    state.fail = true;
+    expect(await syncInstallCounts()).toBe(0);
+    expect(state.upserted).toEqual([]);
+  });
+
+  it("does nothing for a registry with no stats file", async () => {
+    expect(await syncInstallCounts()).toBe(0);
+    expect(state.upserted).toEqual([]);
+  });
+});
+
+describe("readInstallCounts", () => {
+  it("maps the stored rows by plugin id", async () => {
+    state.rows = [{ pluginId: "docker", count: 20, source: TELEMETRY_SOURCE }];
+    const counts = await readInstallCounts();
+    expect(counts.get("docker")).toEqual({
+      count: 20,
+      source: TELEMETRY_SOURCE,
+    });
+  });
+});
diff --git a/src/backend/tests/plugins/loader.test.ts b/src/backend/tests/plugins/loader.test.ts
index f4ace73df..c3da10399 100644
--- a/src/backend/tests/plugins/loader.test.ts
+++ b/src/backend/tests/plugins/loader.test.ts
@@ -11,7 +11,13 @@ import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import { PluginLoader } from "../../plugins/loader.js";
+import zlib from "node:zlib";
+import {
+  PluginLoader,
+  assertBundledUpdate,
+  removeStaleStaging,
+  unsafeArchivePath,
+} from "../../plugins/loader.js";
 import { createFixturePlugin } from "./fixture-plugin.js";
 
 vi.mock("../../database/repositories/factory.js", () => ({
@@ -484,3 +490,130 @@ describe("PluginLoader error budget", () => {
     expect(loader.get("sample-plugin")?.lastError).toBeNull();
   });
 });
+
+describe("PluginLoader uninstall and pins", () => {
+  it("ignores the shipped copy of a bundled plugin an admin uninstalled", async () => {
+    const bundled = tempRoot("termix-bundled-");
+    const user = tempRoot("termix-data-");
+    createFixturePlugin({ id: "ssh-terminal", root: bundled });
+    createFixturePlugin({ id: "docker", root: bundled });
+    setRoots(bundled, user);
+
+    const loader = new PluginLoader();
+    loader.setUninstalled(["docker"]);
+    const loaded = await loader.loadAll();
+
+    expect(loaded.map((plugin) => plugin.id)).toEqual(["ssh-terminal"]);
+    expect(loader.bundledVersion("docker")).toBeUndefined();
+    expect(loader.bundledIds().has("docker")).toBe(false);
+  });
+
+  it("loads a downloaded copy of an uninstalled bundled id as a normal plugin", async () => {
+    const bundled = tempRoot("termix-bundled-");
+    const user = tempRoot("termix-data-");
+    const userPlugins = path.join(user, "plugins");
+    fs.mkdirSync(userPlugins, { recursive: true });
+    createFixturePlugin({ id: "docker", root: bundled });
+    createFixturePlugin({ id: "docker", root: userPlugins });
+    setRoots(bundled, user);
+
+    const loader = new PluginLoader();
+    loader.setUninstalled(["docker"]);
+    const loaded = await loader.loadAll();
+
+    expect(loaded).toHaveLength(1);
+    expect(loaded[0].source).toBe("user");
+  });
+
+  it("loads the shipped copy again on reinstall", async () => {
+    const bundled = tempRoot("termix-bundled-");
+    const user = tempRoot("termix-data-");
+    createFixturePlugin({ id: "docker", root: bundled });
+    setRoots(bundled, user);
+
+    const loader = new PluginLoader();
+    loader.setUninstalled(["docker"]);
+    await loader.loadAll();
+    const plugin = await loader.loadBundled("docker");
+
+    expect(plugin.source).toBe("bundled");
+    expect(loader.get("docker")).toBe(plugin);
+  });
+
+  it("refuses an older signed update unless that exact version is pinned", () => {
+    expect(() =>
+      assertBundledUpdate("docker", "1.0.0", "key", "1.1.0"),
+    ).toThrow(/not newer/);
+    expect(() =>
+      assertBundledUpdate("docker", "1.0.0", "key", "1.1.0", "0.9.0"),
+    ).toThrow(/not newer/);
+    expect(() =>
+      assertBundledUpdate("docker", "1.0.0", "key", "1.1.0", "1.0.0"),
+    ).not.toThrow();
+    expect(() =>
+      assertBundledUpdate("docker", "1.0.0", undefined, "1.1.0", "1.0.0"),
+    ).toThrow(/signed/);
+  });
+});
+
+/** A gzipped tar with the given entry names, written by hand. */
+function rawTar(names: string[]): Buffer {
+  const blocks: Buffer[] = [];
+  for (const name of names) {
+    const header = Buffer.alloc(512);
+    header.write(name, 0, 100);
+    header.write("0000644\0", 100);
+    header.write("00000000001\0", 124);
+    header.write("        ", 148);
+    header.write("0", 156);
+    header.write("ustar\0", 257);
+    header.write("00", 263);
+    let sum = 0;
+    for (const byte of header) sum += byte;
+    header.write(sum.toString(8).padStart(6, "0") + "\0 ", 148);
+    blocks.push(header, Buffer.concat([Buffer.from("x"), Buffer.alloc(511)]));
+  }
+  blocks.push(Buffer.alloc(1024));
+  return zlib.gzipSync(Buffer.concat(blocks));
+}
+
+describe("unsafeArchivePath", () => {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), "termix-unsafe-"));
+  const write = (names: string[]) => {
+    const file = path.join(dir, `${names.length}-${Math.random()}.tmxplug`);
+    fs.writeFileSync(file, rawTar(names));
+    return file;
+  };
+
+  it("finds entries that escape the folder", async () => {
+    expect(
+      await unsafeArchivePath(write(["manifest.json", "../../etc/x"])),
+    ).toBe("../../etc/x");
+    expect(await unsafeArchivePath(write(["/tmp/x"]))).not.toBeNull();
+  });
+
+  it("passes a normal archive", async () => {
+    expect(
+      await unsafeArchivePath(write(["manifest.json", "dist/backend.js"])),
+    ).toBeNull();
+  });
+});
+
+describe("removeStaleStaging", () => {
+  it("removes unpack folders left by a crashed install", async () => {
+    const data = fs.mkdtempSync(path.join(os.tmpdir(), "termix-staging-"));
+    const previous = process.env.DATA_DIR;
+    process.env.DATA_DIR = data;
+    try {
+      const unpacked = path.join(data, "plugins", ".unpacked");
+      fs.mkdirSync(path.join(unpacked, ".staging-abc", "dist"), {
+        recursive: true,
+      });
+      fs.mkdirSync(path.join(unpacked, "serial"), { recursive: true });
+      await removeStaleStaging();
+      expect(fs.readdirSync(unpacked)).toEqual(["serial"]);
+    } finally {
+      process.env.DATA_DIR = previous;
+    }
+  });
+});
diff --git a/src/backend/tests/plugins/manage.test.ts b/src/backend/tests/plugins/manage.test.ts
new file mode 100644
index 000000000..0161b2fa5
--- /dev/null
+++ b/src/backend/tests/plugins/manage.test.ts
@@ -0,0 +1,858 @@
+/**
+ * Install, update, uninstall and switching, against a real PluginLoader and
+ * fixture plugins on disk. The database and the registry are faked.
+ */
+
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import * as tar from "tar";
+import { createFixturePlugin } from "./fixture-plugin.js";
+import type { LoadedPlugin } from "../../plugins/loader.js";
+
+interface Row {
+  id: string;
+  name: string;
+  version: string;
+  tier: string;
+  source: string;
+  state: string;
+  lastError: string | null;
+  registryId: string | null;
+  autoUpdate: boolean;
+  pinnedVersion: string | null;
+  manifestJson: string;
+}
+
+const db = vi.hoisted(() => ({
+  rows: new Map<string, Record<string, unknown>>(),
+  settings: new Map<string, string>(),
+  grants: [] as Array<{ pluginId: string; capability: string }>,
+}));
+
+const registry = vi.hoisted(() => ({
+  index: { registry: "official", name: "", plugins: [] as unknown[] },
+  download: vi.fn(),
+}));
+
+vi.mock("../../database/repositories/factory.js", () => ({
+  createCurrentPluginRepository: () => ({
+    listAll: async () => [...db.rows.values()],
+    findById: async (id: string) => db.rows.get(id) ?? null,
+    create: async (input: Record<string, unknown>) => {
+      const row = {
+        registryId: null,
+        lastError: null,
+        autoUpdate: false,
+        pinnedVersion: null,
+        ...input,
+      };
+      db.rows.set(input.id as string, row);
+      return row;
+    },
+    update: async (id: string, input: Record<string, unknown>) => {
+      const row = db.rows.get(id);
+      if (!row) return null;
+      for (const [key, value] of Object.entries(input)) {
+        if (value !== undefined) row[key] = value;
+      }
+      return row;
+    },
+    delete: async (id: string) => db.rows.delete(id),
+  }),
+  createCurrentSettingsRepository: () => ({
+    get: async (key: string) => db.settings.get(key) ?? null,
+    set: async (key: string, value: string) => void db.settings.set(key, value),
+  }),
+  createCurrentPluginPermissionGrantRepository: () => ({
+    listByPlugin: async (id: string) =>
+      db.grants.filter((g) => g.pluginId === id),
+    grant: async (input: { pluginId: string; capability: string }) =>
+      void db.grants.push(input),
+  }),
+  createCurrentPluginStorageRepository: () => ({
+    get: async () => null,
+    set: async () => {},
+    delete: async () => false,
+    listKeys: async () => [],
+    countKeys: async () => 0,
+  }),
+}));
+
+vi.mock("../../plugins/data.js", () => ({
+  migratePlugin: async () => [],
+  removePluginData: async () => ({ tables: [], kvKeys: 0, migrations: 0 }),
+  describePluginTables: async () => [],
+  registerTable: () => ({}),
+  forgetTables: () => {},
+}));
+
+vi.mock("../../plugins/permissions.js", () => ({
+  invalidatePluginPermissionCache: () => {},
+}));
+
+vi.mock("../../plugins/registry-index.js", async (importOriginal) => {
+  const actual =
+    await importOriginal<typeof import("../../plugins/registry-index.js")>();
+  return {
+    ...actual,
+    fetchRegistryIndex: async () => actual.parseRegistryIndex(registry.index),
+    downloadRelease: registry.download,
+  };
+});
+
+vi.mock("../../plugins/index.js", async () => {
+  const { PluginLoader } = await import("../../plugins/loader.js");
+  const loader = new PluginLoader();
+  const seed = async (plugins: LoadedPlugin[]) => {
+    for (const plugin of plugins) {
+      if (db.rows.has(plugin.id)) {
+        Object.assign(db.rows.get(plugin.id)!, {
+          version: plugin.manifest.version,
+          manifestJson: JSON.stringify(plugin.manifest),
+        });
+        continue;
+      }
+      db.rows.set(plugin.id, {
+        id: plugin.id,
+        name: plugin.manifest.name,
+        version: plugin.manifest.version,
+        tier: plugin.source === "bundled" ? "bundled" : "community",
+        source: plugin.source,
+        state: plugin.source === "bundled" ? "enabled" : "disabled",
+        lastError: null,
+        registryId: null,
+        autoUpdate: false,
+        pinnedVersion: null,
+        manifestJson: JSON.stringify(plugin.manifest),
+      } satisfies Row);
+    }
+  };
+  return {
+    getPluginRuntime: () => ({ loader }),
+    activatePlugin: (id: string) => loader.activate(id),
+    deactivatePlugin: (id: string) => loader.deactivate(id),
+    registerLoadedPlugins: seed,
+    unloadPlugin: async (id: string) => {
+      if (!loader.get(id)) return;
+      await loader.deactivate(id);
+      loader.forget(id);
+    },
+  };
+});
+
+const { getPluginRuntime } = await import("../../plugins/index.js");
+const manage = await import("../../plugins/manage.js");
+
+const roots: string[] = [];
+let bundled: string;
+let data: string;
+
+function tempRoot(prefix: string): string {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), prefix));
+  roots.push(root);
+  return root;
+}
+
+const DEFAULT_CAPS = ["hosts:read", "kv:own"];
+
+function registryEntry(
+  id: string,
+  versions: Array<{ version: string; capabilities?: string[] }>,
+  prereleases: Array<{ version: string; capabilities?: string[] }> = [],
+) {
+  const toEntry = (v: { version: string; capabilities?: string[] }) => ({
+    version: v.version,
+    api: "1",
+    url: `https://example.com/${id}-${v.version}.tmxplug`,
+    sha256: "a".repeat(64),
+    signature: "sig",
+    size: 1,
+    capabilities: v.capabilities ?? ["hosts:read", "kv:own"],
+  });
+  return {
+    id,
+    name: id,
+    versions: versions.map(toEntry),
+    prereleases: prereleases.map(toEntry),
+  };
+}
+
+/** A .tmxplug of a fixture plugin, standing in for a verified download. */
+async function stageArtifact(
+  id: string,
+  manifestOverrides: Record<string, unknown> = {},
+) {
+  const build = tempRoot("termix-build-");
+  createFixturePlugin({ id, root: build, manifestOverrides });
+  const staging = path.join(data, "plugins", ".downloads");
+  fs.mkdirSync(staging, { recursive: true });
+  const file = path.join(staging, `${id}-staged.tmxplug`);
+  await tar.c({ gzip: true, file, cwd: path.join(build, id) }, ["."]);
+  return { file, signatureFile: `${file}.sig` };
+}
+
+async function boot() {
+  const { loader } = getPluginRuntime();
+  await manage.applyStoredPluginChoices(loader);
+  const loaded = await loader.loadAll();
+  const { registerLoadedPlugins } = await import("../../plugins/index.js");
+  await registerLoadedPlugins(loaded);
+  for (const plugin of loaded) {
+    if (db.rows.get(plugin.id)?.state === "enabled") {
+      await loader.activate(plugin.id);
+    }
+  }
+  return loader;
+}
+
+beforeEach(() => {
+  bundled = tempRoot("termix-bundled-");
+  data = tempRoot("termix-data-");
+  process.env.TERMIX_BUNDLED_PLUGINS_DIR = bundled;
+  process.env.DATA_DIR = data;
+  db.rows.clear();
+  db.settings.clear();
+  db.grants.length = 0;
+  registry.index.plugins = [];
+  registry.download.mockReset();
+});
+
+afterEach(async () => {
+  const { loader } = getPluginRuntime();
+  await loader.shutdown();
+  for (const plugin of loader.list()) loader.forget(plugin.id);
+  delete process.env.TERMIX_BUNDLED_PLUGINS_DIR;
+  delete process.env.DATA_DIR;
+  while (roots.length) {
+    fs.rmSync(roots.pop()!, { recursive: true, force: true });
+  }
+});
+
+describe("uninstall and reinstall of a bundled plugin", () => {
+  it("deletes it, keeps it gone after a restart, and downloads it again", async () => {
+    createFixturePlugin({ id: "docker", root: bundled });
+    registry.index.plugins = [registryEntry("docker", [{ version: "1.0.0" }])];
+    let loader = await boot();
+    expect(loader.get("docker")?.state).toBe("active");
+
+    await manage.uninstallPlugin("docker");
+    expect(loader.get("docker")).toBeUndefined();
+    expect(db.rows.has("docker")).toBe(false);
+    expect(fs.existsSync(path.join(bundled, "docker"))).toBe(false);
+    expect(JSON.parse(db.settings.get("plugins_uninstalled")!)).toEqual([
+      "docker",
+    ]);
+
+    await loader.shutdown();
+    for (const plugin of loader.list()) loader.forget(plugin.id);
+    // A recreated container brings the image's copy back; it stays ignored.
+    createFixturePlugin({ id: "docker", root: bundled });
+    loader = await boot();
+    expect(loader.get("docker")).toBeUndefined();
+
+    registry.download.mockImplementation(() => stageArtifact("docker"));
+    const result = await manage.installPlugin("docker", {
+      userId: "admin",
+      capabilities: DEFAULT_CAPS,
+    });
+    expect(result.state).toBe("active");
+    expect(registry.download).toHaveBeenCalledOnce();
+    expect(loader.get("docker")?.source).toBe("user");
+    expect(fs.existsSync(path.join(data, "plugins", "docker.tmxplug"))).toBe(
+      true,
+    );
+    expect(db.rows.get("docker")).toMatchObject({
+      registryId: "official",
+      tier: "official",
+    });
+    expect(db.grants.map((g) => g.capability)).toEqual([
+      "hosts:read",
+      "kv:own",
+    ]);
+
+    await loader.shutdown();
+    for (const plugin of loader.list()) loader.forget(plugin.id);
+    loader = await boot();
+    expect(loader.get("docker")?.source).toBe("user");
+  });
+
+  it("deletes a plugin dropped in as a plain folder", async () => {
+    createFixturePlugin({ id: "notes", root: path.join(data, "plugins") });
+    const loader = await boot();
+    expect(loader.get("notes")?.source).toBe("user");
+
+    await manage.uninstallPlugin("notes");
+    expect(fs.existsSync(path.join(data, "plugins", "notes"))).toBe(false);
+    expect(fs.existsSync(path.join(data, "plugins"))).toBe(true);
+    expect(db.settings.get("plugins_uninstalled")).toBeUndefined();
+  });
+
+  it("refuses to install something already installed", async () => {
+    createFixturePlugin({ id: "docker", root: bundled });
+    registry.index.plugins = [registryEntry("docker", [{ version: "1.0.0" }])];
+    await boot();
+    await expect(
+      manage.installPlugin("docker", { userId: "admin" }),
+    ).rejects.toMatchObject({ code: "ALREADY_INSTALLED" });
+  });
+});
+
+describe("installing from the registry", () => {
+  it("puts the artifact in place, grants what it declares and starts it", async () => {
+    registry.index.plugins = [registryEntry("notes", [{ version: "1.0.0" }])];
+    registry.download.mockImplementation(() =>
+      stageArtifact("notes", { capabilities: ["kv:own"] }),
+    );
+    const loader = await boot();
+
+    const result = await manage.installPlugin("notes", {
+      userId: "admin",
+      capabilities: DEFAULT_CAPS,
+    });
+
+    expect(result).toMatchObject({ id: "notes", state: "active" });
+    expect(fs.existsSync(path.join(data, "plugins", "notes.tmxplug"))).toBe(
+      true,
+    );
+    expect(loader.get("notes")?.source).toBe("user");
+    expect(db.rows.get("notes")?.tier).toBe("official");
+    expect(db.grants).toEqual([
+      expect.objectContaining({ pluginId: "notes", capability: "kv:own" }),
+    ]);
+  });
+
+  it("refuses a plugin that is not in the registry", async () => {
+    await boot();
+    await expect(
+      manage.installPlugin("nope", { userId: "admin" }),
+    ).rejects.toMatchObject({ code: "NOT_IN_REGISTRY" });
+  });
+
+  it("pins an explicitly picked older version", async () => {
+    registry.index.plugins = [
+      registryEntry("notes", [{ version: "1.1.0" }, { version: "1.0.0" }]),
+    ];
+    registry.download.mockImplementation(() => stageArtifact("notes"));
+    await boot();
+
+    await manage.installPlugin("notes", {
+      userId: "admin",
+      version: "1.0.0",
+      capabilities: DEFAULT_CAPS,
+    });
+    expect(db.rows.get("notes")?.pinnedVersion).toBe("1.0.0");
+  });
+
+  it("uninstalls a registry plugin and its files", async () => {
+    registry.index.plugins = [registryEntry("notes", [{ version: "1.0.0" }])];
+    registry.download.mockImplementation(() => stageArtifact("notes"));
+    await boot();
+    await manage.installPlugin("notes", {
+      userId: "admin",
+      capabilities: DEFAULT_CAPS,
+    });
+
+    await manage.uninstallPlugin("notes");
+    expect(fs.existsSync(path.join(data, "plugins", "notes.tmxplug"))).toBe(
+      false,
+    );
+    expect(db.rows.has("notes")).toBe(false);
+    expect(db.settings.get("plugins_uninstalled")).toBeUndefined();
+  });
+});
+
+describe("updates", () => {
+  it("waits for consent when a release asks for new capabilities", async () => {
+    createFixturePlugin({ id: "docker", root: bundled });
+    registry.index.plugins = [
+      registryEntry("docker", [
+        {
+          version: "1.1.0",
+          capabilities: ["hosts:read", "kv:own", "notify:send"],
+        },
+        { version: "1.0.0" },
+      ]),
+    ];
+    await boot();
+
+    await expect(
+      manage.updatePlugin("docker", { userId: "admin" }),
+    ).rejects.toMatchObject({
+      code: "CAPABILITIES_ADDED",
+      details: { capabilities: ["notify:send"] },
+    });
+    expect(registry.download).not.toHaveBeenCalled();
+  });
+
+  it("lists an update and skips it in update-all when pinned", async () => {
+    createFixturePlugin({ id: "docker", root: bundled });
+    registry.index.plugins = [
+      registryEntry("docker", [{ version: "1.1.0" }, { version: "1.0.0" }]),
+    ];
+    await boot();
+
+    const listing = await manage.listRegistry();
+    expect(listing.plugins[0]).toMatchObject({
+      installed: true,
+      installedVersion: "1.0.0",
+      latestVersion: "1.1.0",
+      updateAvailable: true,
+      addedCapabilities: [],
+      bundled: true,
+    });
+
+    await manage.setPluginOptions("docker", { pinned: true });
+    const result = await manage.updateAllPlugins({ userId: "admin" });
+    expect(result.updated).toEqual([]);
+    expect(registry.download).not.toHaveBeenCalled();
+  });
+});
+
+describe("beta channel", () => {
+  it("offers betas only to a plugin on the beta channel", async () => {
+    createFixturePlugin({ id: "docker", root: bundled });
+    registry.index.plugins = [
+      registryEntry(
+        "docker",
+        [{ version: "1.0.0" }],
+        [{ version: "1.1.0-beta.1" }],
+      ),
+    ];
+    await boot();
+
+    expect((await manage.listRegistry()).plugins[0]).toMatchObject({
+      channel: "stable",
+      latestVersion: "1.0.0",
+      latestBeta: "1.1.0-beta.1",
+      updateAvailable: false,
+    });
+    expect(
+      (await manage.listRegistry()).plugins[0].versions.map((v) => [
+        v.version,
+        v.prerelease,
+      ]),
+    ).toEqual([
+      ["1.1.0-beta.1", true],
+      ["1.0.0", false],
+    ]);
+
+    await manage.setPluginOptions("docker", { channel: "beta" });
+    expect((await manage.listRegistry()).plugins[0]).toMatchObject({
+      channel: "beta",
+      latestVersion: "1.1.0-beta.1",
+      updateAvailable: true,
+    });
+  });
+
+  it("keeps an installed beta after going back to stable", async () => {
+    createFixturePlugin({
+      id: "docker",
+      root: bundled,
+      manifestOverrides: { version: "1.1.0-beta.1" },
+    });
+    registry.index.plugins = [
+      registryEntry(
+        "docker",
+        [{ version: "1.0.0" }],
+        [{ version: "1.1.0-beta.1" }],
+      ),
+    ];
+    await boot();
+
+    expect((await manage.listRegistry()).plugins[0]).toMatchObject({
+      channel: "stable",
+      installedVersion: "1.1.0-beta.1",
+      updateAvailable: false,
+    });
+    const result = await manage.updateAllPlugins({ userId: "admin" });
+    expect(result.updated).toEqual([]);
+    expect(registry.download).not.toHaveBeenCalled();
+
+    registry.index.plugins = [
+      registryEntry("docker", [{ version: "1.1.0" }, { version: "1.0.0" }]),
+    ];
+    expect((await manage.listRegistry()).plugins[0]).toMatchObject({
+      latestVersion: "1.1.0",
+      updateAvailable: true,
+    });
+  });
+
+  it("installs the newest beta when asked to follow betas", async () => {
+    registry.index.plugins = [
+      registryEntry(
+        "notes",
+        [{ version: "1.0.0" }],
+        [{ version: "1.1.0-beta.2" }],
+      ),
+    ];
+    registry.download.mockImplementation(() =>
+      stageArtifact("notes", { version: "1.1.0-beta.2" }),
+    );
+    await boot();
+
+    const result = await manage.installPlugin("notes", {
+      userId: "admin",
+      channel: "beta",
+      capabilities: DEFAULT_CAPS,
+    });
+    expect(result.version).toBe("1.1.0-beta.2");
+    expect(db.rows.get("notes")).toMatchObject({
+      channel: "beta",
+      pinnedVersion: null,
+    });
+  });
+
+  it("moves every installed plugin to one channel", async () => {
+    createFixturePlugin({ id: "docker", root: bundled });
+    createFixturePlugin({ id: "notes", root: bundled });
+    await boot();
+
+    expect((await manage.setAllPluginChannels("beta")).changed.sort()).toEqual([
+      "docker",
+      "notes",
+    ]);
+    expect(db.rows.get("docker")?.channel).toBe("beta");
+    expect((await manage.setAllPluginChannels("beta")).changed).toEqual([]);
+  });
+});
+
+describe("dependencies", () => {
+  it("starts a dependency first and stops dependents first", async () => {
+    createFixturePlugin({ id: "base", root: bundled });
+    createFixturePlugin({
+      id: "addon",
+      root: bundled,
+      manifestOverrides: { dependencies: { base: "^1.0.0" } },
+    });
+    const loader = await boot();
+
+    const off = await manage.setPluginState("base", false);
+    expect(off.disable).toEqual(["addon"]);
+    expect(loader.get("addon")?.state).toBe("stopped");
+    expect(loader.get("base")?.state).toBe("stopped");
+
+    const plan = await manage.planStateChange("addon", true);
+    expect(plan.enable).toEqual(["base"]);
+    const on = await manage.setPluginState("addon", true);
+    expect(on.state).toBe("active");
+    expect(loader.get("base")?.state).toBe("active");
+  });
+
+  it("restarts dependents it stopped when turned back on", async () => {
+    createFixturePlugin({ id: "base", root: bundled });
+    createFixturePlugin({
+      id: "addon",
+      root: bundled,
+      manifestOverrides: { dependencies: { base: "^1.0.0" } },
+    });
+    createFixturePlugin({
+      id: "manual",
+      root: bundled,
+      manifestOverrides: { dependencies: { base: "^1.0.0" } },
+    });
+    const loader = await boot();
+
+    await manage.setPluginState("manual", false);
+    await manage.setPluginState("base", false);
+    expect(loader.get("addon")?.state).toBe("stopped");
+
+    await manage.setPluginState("base", true);
+    expect(loader.get("addon")?.state).toBe("active");
+    expect(db.rows.get("addon")).toMatchObject({
+      state: "enabled",
+      lastError: null,
+    });
+    expect(loader.get("manual")?.state).not.toBe("active");
+    expect(db.rows.get("manual")?.state).toBe("disabled");
+  });
+
+  it("refuses to uninstall a plugin a running one depends on", async () => {
+    createFixturePlugin({ id: "base", root: bundled });
+    createFixturePlugin({
+      id: "addon",
+      root: bundled,
+      manifestOverrides: { dependencies: { base: "^1.0.0" } },
+    });
+    await boot();
+
+    await expect(manage.uninstallPlugin("base")).rejects.toMatchObject({
+      code: "HAS_DEPENDENTS",
+      details: { dependents: ["addon"] },
+    });
+  });
+});
+
+describe("reloading a bundled plugin for the dev runner", () => {
+  it("loads the rebuilt copy and restarts what depends on it", async () => {
+    createFixturePlugin({ id: "base", root: bundled });
+    createFixturePlugin({
+      id: "addon",
+      root: bundled,
+      manifestOverrides: { dependencies: { base: "^1.0.0" } },
+    });
+    const loader = await boot();
+    createFixturePlugin({
+      id: "base",
+      root: bundled,
+      manifestOverrides: { version: "1.1.0" },
+    });
+
+    const result = await manage.reloadBundledPlugin("base");
+    expect(result).toEqual({ id: "base", version: "1.1.0", state: "active" });
+    expect(loader.get("base")?.manifest.version).toBe("1.1.0");
+    expect(loader.get("addon")?.state).toBe("active");
+    expect(db.rows.get("base")?.version).toBe("1.1.0");
+  });
+
+  it("loads and starts a plugin added since boot", async () => {
+    const loader = await boot();
+    createFixturePlugin({ id: "fresh", root: bundled });
+    const result = await manage.reloadBundledPlugin("fresh");
+    expect(result.state).toBe("active");
+    expect(loader.get("fresh")?.state).toBe("active");
+  });
+
+  it("keeps a disabled plugin stopped", async () => {
+    createFixturePlugin({ id: "base", root: bundled });
+    const loader = await boot();
+    await manage.setPluginState("base", false);
+    const result = await manage.reloadBundledPlugin("base");
+    expect(result.state).toBe("stopped");
+    expect(loader.get("base")?.state).toBe("loaded");
+  });
+});
+
+describe("consent", () => {
+  it("refuses an install without the consented list, before any download", async () => {
+    registry.index.plugins = [registryEntry("notes", [{ version: "1.0.0" }])];
+    await boot();
+    await expect(
+      manage.installPlugin("notes", { userId: "admin" }),
+    ).rejects.toMatchObject({ code: "CONSENT_REQUIRED" });
+    expect(registry.download).not.toHaveBeenCalled();
+  });
+
+  it("refuses when the consent does not match what the release asks for", async () => {
+    registry.index.plugins = [
+      registryEntry("notes", [
+        { version: "1.0.0", capabilities: ["kv:own", "credentials:read"] },
+      ]),
+    ];
+    await boot();
+    await expect(
+      manage.installPlugin("notes", {
+        userId: "admin",
+        capabilities: ["kv:own"],
+      }),
+    ).rejects.toMatchObject({
+      code: "CONSENT_MISMATCH",
+      details: { capabilities: ["kv:own", "credentials:read"] },
+    });
+    expect(registry.download).not.toHaveBeenCalled();
+    expect(db.rows.has("notes")).toBe(false);
+  });
+
+  it("accepts the same list in another order", async () => {
+    registry.index.plugins = [registryEntry("notes", [{ version: "1.0.0" }])];
+    registry.download.mockImplementation(() => stageArtifact("notes"));
+    await boot();
+    const result = await manage.installPlugin("notes", {
+      userId: "admin",
+      capabilities: ["kv:own", "hosts:read"],
+    });
+    expect(result.state).toBe("active");
+  });
+
+  it("needs the added capabilities listed to accept an update", async () => {
+    createFixturePlugin({ id: "docker", root: bundled });
+    registry.index.plugins = [
+      registryEntry("docker", [
+        {
+          version: "1.1.0",
+          capabilities: ["hosts:read", "kv:own", "notify:send"],
+        },
+        { version: "1.0.0" },
+      ]),
+    ];
+    await boot();
+
+    await expect(
+      manage.updatePlugin("docker", {
+        userId: "admin",
+        acceptCapabilities: true,
+        capabilities: ["ssh:connect"],
+      }),
+    ).rejects.toMatchObject({ code: "CONSENT_MISMATCH" });
+    await expect(
+      manage.updatePlugin("docker", {
+        userId: "admin",
+        acceptCapabilities: true,
+      }),
+    ).rejects.toMatchObject({ code: "CONSENT_REQUIRED" });
+    expect(registry.download).not.toHaveBeenCalled();
+  });
+});
+
+describe("installing from a file", () => {
+  async function artifactBuffer(
+    id: string,
+    manifestOverrides: Record<string, unknown> = {},
+  ) {
+    const staged = await stageArtifact(id, manifestOverrides);
+    const buffer = fs.readFileSync(staged.file);
+    fs.rmSync(staged.file);
+    return buffer;
+  }
+
+  afterEach(() => {
+    manage.resetUploads();
+    delete process.env.TERMIX_REQUIRE_SIGNED_PLUGINS;
+  });
+
+  it("is refused while developer mode is off", async () => {
+    await boot();
+    await expect(
+      manage.stageUpload(await artifactBuffer("notes")),
+    ).rejects.toMatchObject({ code: "DEVELOPER_MODE_OFF" });
+  });
+
+  it("is refused when signed plugins are required", async () => {
+    await boot();
+    await manage.setDeveloperMode(true);
+    process.env.TERMIX_REQUIRE_SIGNED_PLUGINS = "true";
+    await expect(
+      manage.stageUpload(await artifactBuffer("notes")),
+    ).rejects.toMatchObject({ code: "SIGNED_ONLY" });
+  });
+
+  it("stages, asks for consent, then installs it marked unverified", async () => {
+    const loader = await boot();
+    await manage.setDeveloperMode(true);
+
+    const preview = await manage.stageUpload(
+      await artifactBuffer("notes", { capabilities: ["kv:own"] }),
+    );
+    expect(preview).toMatchObject({
+      id: "notes",
+      capabilities: ["kv:own"],
+      replaces: null,
+    });
+    expect(loader.get("notes")).toBeUndefined();
+
+    await expect(
+      manage.installUpload(preview.token, {
+        userId: "admin",
+        capabilities: ["kv:own", "hosts:read"],
+      }),
+    ).rejects.toMatchObject({ code: "CONSENT_MISMATCH" });
+
+    const result = await manage.installUpload(preview.token, {
+      userId: "admin",
+      capabilities: ["kv:own"],
+    });
+    expect(result.state).toBe("active");
+    expect(db.rows.get("notes")).toMatchObject({
+      tier: manage.UNVERIFIED_TIER,
+      registryId: null,
+    });
+    expect(loader.get("notes")?.signedBy).toBeUndefined();
+    expect(fs.existsSync(path.join(data, "plugins", "notes.tmxplug"))).toBe(
+      true,
+    );
+
+    // A token is used once.
+    await expect(
+      manage.installUpload(preview.token, {
+        userId: "admin",
+        capabilities: ["kv:own"],
+      }),
+    ).rejects.toMatchObject({ code: "UPLOAD_EXPIRED" });
+  });
+
+  it("replaces an earlier upload but never a bundled plugin", async () => {
+    createFixturePlugin({ id: "docker", root: bundled });
+    const loader = await boot();
+    await manage.setDeveloperMode(true);
+
+    await expect(
+      manage.stageUpload(await artifactBuffer("docker")),
+    ).rejects.toMatchObject({ code: "BUNDLED_ID" });
+
+    const first = await manage.stageUpload(await artifactBuffer("notes"));
+    await manage.installUpload(first.token, {
+      userId: "admin",
+      capabilities: first.capabilities,
+    });
+    const second = await manage.stageUpload(
+      await artifactBuffer("notes", { version: "1.1.0" }),
+    );
+    expect(second.replaces).toBe("1.0.0");
+    await manage.installUpload(second.token, {
+      userId: "admin",
+      capabilities: second.capabilities,
+    });
+    expect(loader.get("notes")?.manifest.version).toBe("1.1.0");
+    expect(db.rows.get("notes")?.tier).toBe(manage.UNVERIFIED_TIER);
+  });
+
+  it("refuses a file that is not a plugin archive", async () => {
+    await boot();
+    await manage.setDeveloperMode(true);
+    await expect(
+      manage.stageUpload(Buffer.from("not a tarball")),
+    ).rejects.toMatchObject({ code: "INVALID_ARTIFACT" });
+  });
+
+  it("drops staged files when developer mode is turned off", async () => {
+    await boot();
+    await manage.setDeveloperMode(true);
+    const preview = await manage.stageUpload(await artifactBuffer("notes"));
+    await manage.setDeveloperMode(false);
+    await manage.setDeveloperMode(true);
+    await expect(
+      manage.installUpload(preview.token, {
+        userId: "admin",
+        capabilities: preview.capabilities,
+      }),
+    ).rejects.toMatchObject({ code: "UPLOAD_EXPIRED" });
+  });
+});
+
+describe("release notes", () => {
+  it("reads an installed plugin's CHANGELOG.md", async () => {
+    createFixturePlugin({ id: "docker", root: bundled });
+    fs.writeFileSync(
+      path.join(bundled, "docker", "CHANGELOG.md"),
+      "# Changelog\n\n## 1.1.0 - 2026-10-06\n\n### Fixed\n- A bug\n\n## 1.0.0\n\n### Added\n- First\n",
+    );
+    await boot();
+    expect(await manage.getPluginChangelog("docker")).toEqual([
+      {
+        version: "1.1.0",
+        date: "2026-10-06",
+        changes: [{ type: "fixed", text: "A bug" }],
+      },
+      { version: "1.0.0", changes: [{ type: "added", text: "First" }] },
+    ]);
+  });
+
+  it("is empty without a changelog and 404s for an unknown plugin", async () => {
+    createFixturePlugin({ id: "docker", root: bundled });
+    await boot();
+    expect(await manage.getPluginChangelog("docker")).toEqual([]);
+    await expect(manage.getPluginChangelog("nope")).rejects.toMatchObject({
+      status: 404,
+    });
+  });
+
+  it("parses registry notes and drops empty ones", () => {
+    expect(manage.readReleaseNotes("Summary.\n\n### Added\n- Thing")).toEqual({
+      summary: "Summary.",
+      changes: [{ type: "added", text: "Thing" }],
+    });
+    expect(manage.readReleaseNotes("")).toBeUndefined();
+    expect(manage.readReleaseNotes(undefined)).toBeUndefined();
+  });
+});
diff --git a/src/backend/tests/plugins/manifest.test.ts b/src/backend/tests/plugins/manifest.test.ts
index 2f295b82a..89d95e2ad 100644
--- a/src/backend/tests/plugins/manifest.test.ts
+++ b/src/backend/tests/plugins/manifest.test.ts
@@ -12,7 +12,12 @@ import {
   validateManifest,
   SUPPORTED_PLUGIN_API_VERSION,
   isTermixCompatible,
+  youtubeVideoId,
+  pluginFeatures,
+  pluginDocsUrl,
+  pluginEnvVars,
 } from "../../plugins/manifest.js";
+import { pluginDocsPage } from "@termix-ssh/plugin-sdk/docs";
 
 function base(overrides: Record<string, unknown> = {}) {
   return {
@@ -119,8 +124,8 @@ describe("manifest v2 validation", () => {
   it("checks engine.termix against the core version", () => {
     expect(isTermixCompatible(">=2.9.0", "2.9.0")).toBe(true);
     expect(isTermixCompatible(">=2.9.0", "2.9.0-beta.3")).toBe(true);
-    expect(isTermixCompatible(">=3.0.0", "2.9.1")).toBe(false);
-    expect(isTermixCompatible(">=3.0.0", null)).toBe(true);
+    expect(isTermixCompatible(">=26.10.0", "2.9.1")).toBe(false);
+    expect(isTermixCompatible(">=26.10.0", null)).toBe(true);
   });
 
   it("fills in the entry point defaults", () => {
@@ -852,3 +857,148 @@ describe("contributes.protocols", () => {
     expect(errors.join("\n")).toMatch(/extra/);
   });
 });
+
+describe("manifest video", () => {
+  it("accepts YouTube links", () => {
+    for (const video of [
+      "https://www.youtube.com/watch?v=dQw4w9WgXcQ",
+      "https://youtu.be/dQw4w9WgXcQ",
+      "https://www.youtube.com/embed/dQw4w9WgXcQ",
+      "https://youtube.com/shorts/dQw4w9WgXcQ",
+    ]) {
+      expect(validateManifest(base({ video }))).toEqual([]);
+    }
+  });
+
+  it("rejects anything that is not a YouTube video", () => {
+    for (const video of [
+      "https://evil.example/watch?v=dQw4w9WgXcQ",
+      "http://www.youtube.com/watch?v=dQw4w9WgXcQ",
+      "https://www.youtube.com.evil.example/watch?v=dQw4w9WgXcQ",
+      "https://user@www.youtube.com/watch?v=dQw4w9WgXcQ",
+      "https://www.youtube.com/watch?v=short",
+      "https://www.youtube.com/channel/UC123",
+      "javascript:alert(1)",
+      "",
+      42,
+    ]) {
+      expect(validateManifest(base({ video }))).toEqual([
+        expect.stringContaining('Field "video" must be a YouTube link'),
+      ]);
+    }
+  });
+});
+
+describe("manifest features", () => {
+  it("accepts a short list of lines", () => {
+    expect(
+      validateManifest(base({ features: ["Start containers", "Read logs"] })),
+    ).toEqual([]);
+  });
+
+  it("rejects bad lists", () => {
+    expect(validateManifest(base({ features: "Logs" }))).toEqual([
+      'Field "features" must be an array of strings',
+    ]);
+    expect(validateManifest(base({ features: ["ok", "", 4] }))).toHaveLength(2);
+    expect(
+      validateManifest(base({ features: ["x".repeat(161)] })).join(),
+    ).toMatch(/features\[0\]/);
+    expect(
+      validateManifest(base({ features: Array(21).fill("x") })).join(),
+    ).toMatch(/at most 20/);
+  });
+});
+
+describe("pluginFeatures", () => {
+  it("keeps only usable lines", () => {
+    expect(pluginFeatures([" Logs ", "", 3, "x".repeat(161), "Stats"])).toEqual(
+      ["Logs", "Stats"],
+    );
+    expect(pluginFeatures(Array(30).fill("x"))).toHaveLength(20);
+    expect(pluginFeatures("Logs")).toEqual([]);
+  });
+});
+
+describe("youtubeVideoId", () => {
+  it("returns only the id", () => {
+    expect(
+      youtubeVideoId("https://www.youtube.com/watch?v=dQw4w9WgXcQ&t=42"),
+    ).toBe("dQw4w9WgXcQ");
+    expect(youtubeVideoId("https://youtu.be/dQw4w9WgXcQ?si=abc")).toBe(
+      "dQw4w9WgXcQ",
+    );
+    expect(youtubeVideoId("https://youtu.be/../../x")).toBeNull();
+    expect(youtubeVideoId(undefined)).toBeNull();
+  });
+});
+
+describe("docs and env fields", () => {
+  it("accepts an https docs link and well formed env entries", () => {
+    expect(
+      validateManifest(
+        base({
+          docs: "https://docs.termix.site/plugins/sample-plugin",
+          env: [
+            { name: "SAMPLE_URL", description: "Where to connect." },
+            {
+              name: "SAMPLE_TOKEN",
+              description: "Token.",
+              secret: true,
+              required: true,
+              default: "",
+            },
+          ],
+        }),
+      ),
+    ).toEqual([]);
+  });
+
+  it("refuses a docs link that is not https", () => {
+    const errors = validateManifest(base({ docs: "http://example.com" }));
+    expect(errors.join(" ")).toMatch(/"docs" must be an https URL/);
+  });
+
+  it("refuses bad env entries", () => {
+    const errors = validateManifest(
+      base({
+        env: [
+          { name: "lower_case", description: "x" },
+          { name: "DUP", description: "x" },
+          { name: "DUP", description: "x" },
+          { name: "NO_DESC", description: "" },
+          { name: "EXTRA", description: "x", other: 1 },
+          { name: "FLAG", description: "x", secret: "yes" },
+        ],
+      }),
+    ).join(" ");
+    expect(errors).toMatch(/env\[0\]\.name/);
+    expect(errors).toMatch(/env\[2\]\.name" repeats DUP/);
+    expect(errors).toMatch(/env\[3\]\.description/);
+    expect(errors).toMatch(/Unknown field "other" in env\[4\]/);
+    expect(errors).toMatch(/env\[5\]\.secret/);
+  });
+
+  it("reads docs links and env entries leniently", () => {
+    expect(pluginDocsUrl("https://docs.termix.site/plugins/x/")).toBe(
+      "https://docs.termix.site/plugins/x",
+    );
+    expect(pluginDocsUrl("file:///etc/passwd")).toBeNull();
+    expect(pluginDocsUrl(42)).toBeNull();
+    expect(
+      pluginEnvVars([
+        { name: "OK_VAR", description: "fine" },
+        { name: "bad", description: "x" },
+        "nope",
+      ]),
+    ).toEqual([{ name: "OK_VAR", description: "fine" }]);
+  });
+
+  it("joins pages and anchors onto a docs link", () => {
+    const base = "https://docs.termix.site/plugins/docker";
+    expect(pluginDocsPage(base)).toBe(base);
+    expect(pluginDocsPage(base, "/setup/")).toBe(`${base}/setup`);
+    expect(pluginDocsPage(base, "setup", "#ports")).toBe(`${base}/setup#ports`);
+    expect(pluginDocsPage(base, "", "top")).toBe(`${base}#top`);
+  });
+});
diff --git a/src/backend/tests/plugins/onboarding.test.ts b/src/backend/tests/plugins/onboarding.test.ts
new file mode 100644
index 000000000..ca8eea2af
--- /dev/null
+++ b/src/backend/tests/plugins/onboarding.test.ts
@@ -0,0 +1,284 @@
+/**
+ * The onboarding plugin picker, against a real PluginLoader and fixture
+ * plugins on disk. The database is faked.
+ */
+
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { createFixturePlugin } from "./fixture-plugin.js";
+import type { LoadedPlugin } from "../../plugins/loader.js";
+
+const db = vi.hoisted(() => ({
+  rows: new Map<string, Record<string, unknown>>(),
+  settings: new Map<string, string>(),
+}));
+
+vi.mock("../../database/repositories/factory.js", () => ({
+  createCurrentPluginRepository: () => ({
+    listAll: async () => [...db.rows.values()],
+    findById: async (id: string) => db.rows.get(id) ?? null,
+    update: async (id: string, input: Record<string, unknown>) => {
+      const row = db.rows.get(id);
+      if (!row) return null;
+      for (const [key, value] of Object.entries(input)) {
+        if (value !== undefined) row[key] = value;
+      }
+      return row;
+    },
+    delete: async (id: string) => db.rows.delete(id),
+  }),
+  createCurrentSettingsRepository: () => ({
+    get: async (key: string) => db.settings.get(key) ?? null,
+    set: async (key: string, value: string) => void db.settings.set(key, value),
+    delete: async (key: string) => void db.settings.delete(key),
+  }),
+  createCurrentPluginStorageRepository: () => ({
+    get: async () => null,
+    set: async () => {},
+    delete: async () => false,
+    listKeys: async () => [],
+    countKeys: async () => 0,
+  }),
+}));
+
+vi.mock("../../plugins/data.js", () => ({
+  migratePlugin: async () => [],
+  removePluginData: async () => ({ tables: [], kvKeys: 0, migrations: 0 }),
+  describePluginTables: async () => [],
+  registerTable: () => ({}),
+  forgetTables: () => {},
+}));
+
+vi.mock("../../plugins/permissions.js", () => ({
+  invalidatePluginPermissionCache: () => {},
+}));
+
+vi.mock("../../plugins/index.js", async () => {
+  const { PluginLoader } = await import("../../plugins/loader.js");
+  const loader = new PluginLoader();
+  return {
+    getPluginRuntime: () => ({ loader }),
+    activatePlugin: (id: string) => loader.activate(id),
+    deactivatePlugin: (id: string) => loader.deactivate(id),
+    registerLoadedPlugins: async (plugins: LoadedPlugin[]) => {
+      for (const plugin of plugins) {
+        db.rows.set(plugin.id, {
+          id: plugin.id,
+          name: plugin.manifest.name,
+          version: plugin.manifest.version,
+          source: plugin.source,
+          state: "enabled",
+          lastError: null,
+          pinnedVersion: null,
+          manifestJson: JSON.stringify(plugin.manifest),
+        });
+      }
+    },
+    unloadPlugin: async () => {},
+  };
+});
+
+const { getPluginRuntime, registerLoadedPlugins } =
+  await import("../../plugins/index.js");
+const manage = await import("../../plugins/manage.js");
+const onboarding = await import("../../plugins/onboarding.js");
+const { resetBundledIndexCache } =
+  await import("../../plugins/bundled-index.js");
+
+const roots: string[] = [];
+let bundled: string;
+let data: string;
+
+function tempRoot(prefix: string): string {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), prefix));
+  roots.push(root);
+  return root;
+}
+
+function writeIndex(plugins: Record<string, unknown>) {
+  fs.writeFileSync(
+    path.join(bundled, "bundled-index.json"),
+    JSON.stringify({ version: 1, plugins }),
+  );
+  resetBundledIndexCache();
+}
+
+async function chain() {
+  createFixturePlugin({ id: "base", root: bundled });
+  createFixturePlugin({
+    id: "addon",
+    root: bundled,
+    manifestOverrides: { dependencies: { base: "^1.0.0" } },
+  });
+  createFixturePlugin({ id: "extra", root: bundled });
+  const { loader } = getPluginRuntime();
+  await manage.applyStoredPluginChoices(loader);
+  const loaded = await loader.loadAll();
+  await registerLoadedPlugins(loaded);
+  for (const plugin of loaded) await loader.activate(plugin.id);
+  return loader;
+}
+
+beforeEach(() => {
+  bundled = tempRoot("termix-bundled-");
+  data = tempRoot("termix-data-");
+  process.env.TERMIX_BUNDLED_PLUGINS_DIR = bundled;
+  process.env.DATA_DIR = data;
+  db.rows.clear();
+  db.settings.clear();
+  resetBundledIndexCache();
+});
+
+afterEach(async () => {
+  const { loader } = getPluginRuntime();
+  await loader.shutdown();
+  for (const plugin of loader.list()) loader.forget(plugin.id);
+  delete process.env.TERMIX_BUNDLED_PLUGINS_DIR;
+  delete process.env.DATA_DIR;
+  while (roots.length) {
+    fs.rmSync(roots.pop()!, { recursive: true, force: true });
+  }
+});
+
+describe("offerPluginSetup", () => {
+  it("offers the picker once, as fresh or as an upgrade", async () => {
+    await onboarding.offerPluginSetup(false);
+    expect(db.settings.get(onboarding.PLUGIN_SETUP_PENDING_KEY)).toBe(
+      "upgrade",
+    );
+    expect(await onboarding.pluginSetupReason()).toBe("upgrade");
+
+    db.settings.delete(onboarding.PLUGIN_SETUP_PENDING_KEY);
+    await onboarding.offerPluginSetup(true);
+    expect(await onboarding.isPluginSetupPending()).toBe(false);
+  });
+
+  it("marks a fresh install", async () => {
+    await onboarding.offerPluginSetup(true);
+    expect(await onboarding.pluginSetupReason()).toBe("fresh");
+  });
+
+  it("is not offered again after the picker was applied", async () => {
+    await chain();
+    await onboarding.offerPluginSetup(false);
+    await onboarding.applyOnboardingChoices({});
+    db.settings.delete(onboarding.PLUGIN_SETUP_OFFERED_KEY);
+    await onboarding.applyOnboardingChoices({});
+    await onboarding.offerPluginSetup(false);
+    expect(await onboarding.isPluginSetupPending()).toBe(false);
+  });
+});
+
+describe("describeOnboardingPlugins", () => {
+  it("lists installed plugins with their defaults and the pending flag", async () => {
+    writeIndex({
+      base: { onboarding: { recommended: true } },
+      extra: { onboarding: { recommended: true, consent: true } },
+    });
+    await chain();
+    db.settings.set(onboarding.PLUGIN_SETUP_PENDING_KEY, "1");
+
+    const list = await onboarding.describeOnboardingPlugins();
+    expect(list.pending).toBe(true);
+    expect(list.reason).toBe("fresh");
+    expect(list.managedByLinkedServer).toBe(false);
+    const byId = Object.fromEntries(list.plugins.map((p) => [p.id, p]));
+    expect(byId.base).toMatchObject({
+      recommended: true,
+      consent: false,
+      source: "bundled",
+      state: "enabled",
+    });
+    expect(byId.addon).toMatchObject({
+      recommended: false,
+      dependencies: ["base"],
+    });
+    expect(byId.extra).toMatchObject({ recommended: true, consent: true });
+  });
+});
+
+describe("applyOnboardingChoices", () => {
+  it("enables, disables and removes, then clears the pending flag", async () => {
+    const loader = await chain();
+    db.rows.get("extra")!.state = "disabled";
+    await loader.deactivate("extra");
+    db.settings.set(onboarding.PLUGIN_SETUP_PENDING_KEY, "1");
+
+    const result = await onboarding.applyOnboardingChoices({
+      base: "disabled",
+      addon: "remove",
+      extra: "enabled",
+    });
+
+    expect(result.failed).toEqual([]);
+    expect(result.enabled).toEqual(["extra"]);
+    expect(result.disabled).toEqual(["base"]);
+    expect(result.removed).toEqual(["addon"]);
+    expect(loader.get("addon")).toBeUndefined();
+    expect(loader.get("base")?.state).toBe("stopped");
+    expect(loader.get("extra")?.state).toBe("active");
+    expect(JSON.parse(db.settings.get("plugins_uninstalled")!)).toEqual([
+      "addon",
+    ]);
+    expect(db.settings.has(onboarding.PLUGIN_SETUP_PENDING_KEY)).toBe(false);
+  });
+
+  it("keeps a dependency that a kept plugin still needs", async () => {
+    const loader = await chain();
+    const result = await onboarding.applyOnboardingChoices({
+      base: "remove",
+      addon: "disabled",
+    });
+    expect(result.adjustments).toEqual([
+      { id: "base", from: "remove", to: "disabled", requiredBy: ["addon"] },
+    ]);
+    expect(result.removed).toEqual([]);
+    expect(loader.get("base")?.state).toBe("stopped");
+    expect(loader.get("addon")?.state).toBe("stopped");
+  });
+
+  it("removes dependents before what they depend on", async () => {
+    const loader = await chain();
+    const result = await onboarding.applyOnboardingChoices({
+      base: "remove",
+      addon: "remove",
+    });
+    expect(result.failed).toEqual([]);
+    expect(result.removed).toEqual(["addon", "base"]);
+    expect(loader.get("base")).toBeUndefined();
+  });
+
+  it("changes nothing on a dry run", async () => {
+    const loader = await chain();
+    db.settings.set(onboarding.PLUGIN_SETUP_PENDING_KEY, "1");
+    const result = await onboarding.applyOnboardingChoices(
+      { extra: "remove", base: "disabled", addon: "disabled" },
+      { dryRun: true },
+    );
+    expect(result.removed).toEqual(["extra"]);
+    expect(result.disabled).toEqual(["addon", "base"]);
+    expect(loader.get("extra")?.state).toBe("active");
+    expect(db.settings.get(onboarding.PLUGIN_SETUP_PENDING_KEY)).toBe("1");
+  });
+
+  it("ignores ids that are not installed", async () => {
+    await chain();
+    const result = await onboarding.applyOnboardingChoices({
+      ghost: "remove",
+    });
+    expect(result.resolved).toEqual({});
+    expect(result.removed).toEqual([]);
+  });
+
+  it("waits for a plugin change already in progress", async () => {
+    const loader = await chain();
+    const first = manage.setPluginState("extra", false);
+    const second = onboarding.applyOnboardingChoices({ extra: "enabled" });
+    await first;
+    const result = await second;
+    expect(result.enabled).toEqual(["extra"]);
+    expect(loader.get("extra")?.state).toBe("active");
+  });
+});
diff --git a/src/backend/tests/plugins/paths.test.ts b/src/backend/tests/plugins/paths.test.ts
new file mode 100644
index 000000000..4f5931f42
--- /dev/null
+++ b/src/backend/tests/plugins/paths.test.ts
@@ -0,0 +1,24 @@
+import path from "node:path";
+import { afterEach, describe, expect, it } from "vitest";
+import { getBundledPluginsDir } from "../../plugins/paths.js";
+
+describe("getBundledPluginsDir", () => {
+  const saved = process.env.TERMIX_BUNDLED_PLUGINS_DIR;
+
+  afterEach(() => {
+    if (saved === undefined) delete process.env.TERMIX_BUNDLED_PLUGINS_DIR;
+    else process.env.TERMIX_BUNDLED_PLUGINS_DIR = saved;
+  });
+
+  it("reads dist/plugins when run from source", () => {
+    delete process.env.TERMIX_BUNDLED_PLUGINS_DIR;
+    expect(getBundledPluginsDir()).toBe(
+      path.resolve(process.cwd(), "dist", "plugins"),
+    );
+  });
+
+  it("honors the override", () => {
+    process.env.TERMIX_BUNDLED_PLUGINS_DIR = "/somewhere/else";
+    expect(getBundledPluginsDir()).toBe("/somewhere/else");
+  });
+});
diff --git a/src/backend/tests/plugins/permissions-rbac.test.ts b/src/backend/tests/plugins/permissions-rbac.test.ts
index 4e0b7c7c9..df5a1a8e2 100644
--- a/src/backend/tests/plugins/permissions-rbac.test.ts
+++ b/src/backend/tests/plugins/permissions-rbac.test.ts
@@ -9,8 +9,6 @@
 
 import type { PluginLoader } from "../../plugins/loader.js";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import fs from "node:fs";
-import path from "node:path";
 import type { Fixture } from "./fixture-plugin.js";
 
 const state = vi.hoisted(() => ({
@@ -355,82 +353,6 @@ describe("the duplicate ai group is gone", () => {
   });
 });
 
-describe("shipped manifests keep their permission ids", () => {
-  const root = path.resolve(import.meta.dirname, "../../../../plugins");
-
-  function idsFor(pluginId: string): string[] {
-    const raw = JSON.parse(
-      fs.readFileSync(path.join(root, pluginId, "manifest.json"), "utf8"),
-    );
-    const { manifest: parsed, errors } = parseManifest(raw);
-    expect(errors).toEqual([]);
-    return (parsed?.contributes?.permissions ?? []).map((entry) =>
-      qualifyPermission(pluginId, entry.name),
-    );
-  }
-
-  // A role holding these today must keep working, which is only true because
-  // <pluginId>.<name> reproduces the old id byte for byte.
-  it("ai", () => {
-    expect(idsFor("ai")).toEqual([
-      "ai.use",
-      "ai.manage_providers",
-      "ai.apply_proposals",
-      "ai.services.use",
-      "ai.secrets.share",
-    ]);
-  });
-
-  it("automations", () => {
-    expect(idsFor("automations")).toEqual([
-      "automations.view",
-      "automations.create",
-      "automations.edit",
-      "automations.delete",
-      "automations.run",
-    ]);
-  });
-
-  it("tailscale", () => {
-    expect(idsFor("tailscale")).toEqual(["tailscale.devices.view"]);
-  });
-
-  it("snippets", () => {
-    expect(idsFor("snippets")).toEqual([
-      "snippets.view",
-      "snippets.create",
-      "snippets.edit",
-      "snippets.delete",
-      "snippets.share",
-    ]);
-  });
-
-  it("a role holding the old ids still validates once registered", () => {
-    for (const pluginId of ["ai", "automations", "tailscale", "snippets"]) {
-      const ids = idsFor(pluginId);
-      registerPluginPermissions({
-        group: pluginId,
-        pluginId,
-        label: pluginId,
-        permissions: ids,
-      });
-    }
-
-    const stored = [
-      "ai.use",
-      "ai.manage_providers",
-      "ai.apply_proposals",
-      "automations.run",
-      "automations.view",
-      "tailscale.devices.view",
-      "snippets.view",
-      "snippets.share",
-    ];
-
-    expect(stored.filter((entry) => !isValidPermission(entry))).toEqual([]);
-  });
-});
-
 describe("role defaults apply exactly once", () => {
   let fixture: Fixture;
   let loader: PluginLoader;
diff --git a/src/backend/tests/plugins/plugin-data.test.ts b/src/backend/tests/plugins/plugin-data.test.ts
index b868cd637..6c6e61fdd 100644
--- a/src/backend/tests/plugins/plugin-data.test.ts
+++ b/src/backend/tests/plugins/plugin-data.test.ts
@@ -17,7 +17,7 @@ import {
   text,
   timestamp,
   varchar,
-} from "@termix/plugin-sdk/db";
+} from "@termix-ssh/plugin-sdk/db";
 import { createTableSql, dropTableSql } from "../../plugins/table-builder.js";
 import {
   adoptLegacyTableSql,
diff --git a/src/backend/tests/plugins/protocol-auth-fixture.test.ts b/src/backend/tests/plugins/protocol-auth-fixture.test.ts
index 177a67f84..96380aac0 100644
--- a/src/backend/tests/plugins/protocol-auth-fixture.test.ts
+++ b/src/backend/tests/plugins/protocol-auth-fixture.test.ts
@@ -9,7 +9,7 @@
 import crypto from "node:crypto";
 import { sql } from "drizzle-orm";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 import { TestSqliteDatabase } from "../database/repositories/test-support.js";
 import type { DatabaseContext } from "../../database/repositories/database-context.js";
 
@@ -329,6 +329,23 @@ describe("a plugin protocol core does not know", () => {
     });
   });
 
+  it("summarizes the usable credential username without exposing its secret", async () => {
+    const patch = readProtocolAuthPayload({
+      protocolAuth: { spice: { authType: "credential", credentialId: 6 } },
+    });
+    await writeProtocolAuth("owner", HOST_ID, patch!, { isOwner: true });
+    const summaries = await loadProtocolAuthSummaries([{ id: HOST_ID }]);
+    expect(summaries.get(HOST_ID)?.spice.username).toBe("cred-user");
+    expect(JSON.stringify(summaries.get(HOST_ID))).not.toContain("cred-pass");
+    const recipient = sanitizeHostForRecipient(
+      { protocolAuth: summaries.get(HOST_ID) },
+      "connect",
+    );
+    expect(recipient.protocolAuth).toEqual({
+      spice: { authType: "credential" },
+    });
+  });
+
   it("lets a shared editor change the login but not its credential", async () => {
     await storeLogin();
     const rename = readProtocolAuthPayload({
diff --git a/src/backend/tests/plugins/registry-index.test.ts b/src/backend/tests/plugins/registry-index.test.ts
new file mode 100644
index 000000000..0efacbdb7
--- /dev/null
+++ b/src/backend/tests/plugins/registry-index.test.ts
@@ -0,0 +1,436 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import crypto from "node:crypto";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import * as tar from "tar";
+
+const fetchMock = vi.hoisted(() => vi.fn());
+const testKey = vi.hoisted(() => ({ value: null as null | object }));
+
+vi.mock("../../utils/safe-outbound-fetch.js", () => ({
+  safeOutboundFetch: fetchMock,
+}));
+
+vi.mock("../../plugins/trust.js", async (importOriginal) => {
+  const actual =
+    await importOriginal<typeof import("../../plugins/trust.js")>();
+  return {
+    ...actual,
+    verifyPluginArtifact: (buffer: Buffer, sha256: string, signature: string) =>
+      actual.verifyPluginArtifact(buffer, sha256, signature, [
+        testKey.value as never,
+      ]),
+  };
+});
+
+import {
+  downloadRelease,
+  fetchRegistryIndex,
+  fetchRegistryStats,
+  findRelease,
+  latestOnChannel,
+  getStatsUrl,
+  isApiCompatible,
+  parseRegistryIndex,
+  parseRegistryStats,
+  resetRegistryCache,
+  type RegistryVersion,
+} from "../../plugins/registry-index.js";
+
+const { publicKey, privateKey } = crypto.generateKeyPairSync("ed25519");
+testKey.value = {
+  id: "test",
+  publicKey: publicKey
+    .export({ format: "der", type: "spki" })
+    .subarray(12)
+    .toString("base64"),
+  addedIn: "26.10.0",
+};
+
+function sign(buffer: Buffer) {
+  const digest = crypto.createHash("sha256").update(buffer).digest();
+  return {
+    sha256: digest.toString("hex"),
+    signature: crypto.sign(null, digest, privateKey).toString("base64"),
+  };
+}
+
+function response(body: string | Buffer, status = 200, headers = {}) {
+  return new Response(status >= 300 && status < 400 ? null : body, {
+    status,
+    headers,
+  });
+}
+
+function version(overrides: Partial<RegistryVersion> = {}) {
+  return {
+    version: "1.0.0",
+    api: "1",
+    url: "https://example.com/p-1.0.0.tmxplug",
+    sha256: "a".repeat(64),
+    signature: "sig",
+    size: 10,
+    capabilities: ["kv:own"],
+    publishedAt: "2026-10-01T00:00:00Z",
+    ...overrides,
+  };
+}
+
+let dataDir: string;
+
+beforeEach(() => {
+  dataDir = fs.mkdtempSync(path.join(os.tmpdir(), "termix-registry-"));
+  process.env.DATA_DIR = dataDir;
+  fetchMock.mockReset();
+  resetRegistryCache();
+});
+
+afterEach(() => {
+  delete process.env.DATA_DIR;
+  fs.rmSync(dataDir, { recursive: true, force: true });
+});
+
+describe("parseRegistryIndex", () => {
+  it("keeps valid entries and sorts versions newest first", () => {
+    const index = parseRegistryIndex({
+      registry: "official",
+      plugins: [
+        {
+          id: "docker",
+          name: "Docker",
+          versions: [version(), version({ version: "1.2.0" })],
+        },
+      ],
+    });
+    expect(index.plugins).toHaveLength(1);
+    expect(index.plugins[0].versions.map((v) => v.version)).toEqual([
+      "1.2.0",
+      "1.0.0",
+    ]);
+  });
+
+  it("drops entries with a bad id, no https url or a malformed sha256", () => {
+    const index = parseRegistryIndex({
+      plugins: [
+        { id: "../evil", versions: [version()] },
+        { id: "plain", versions: [version({ url: "http://x/y.tmxplug" })] },
+        { id: "short", versions: [version({ sha256: "abc" })] },
+        { id: "ok", versions: [version()] },
+      ],
+    });
+    expect(index.plugins.map((p) => p.id)).toEqual(["ok"]);
+  });
+
+  it("keeps release notes and only a YouTube video id", () => {
+    const NOTES = "### Added\n- Thing";
+    const index = parseRegistryIndex({
+      plugins: [
+        {
+          id: "docker",
+          video: "https://youtu.be/dQw4w9WgXcQ",
+          versions: [version({ notes: NOTES })],
+        },
+        {
+          id: "other",
+          video: "https://evil.example/watch?v=dQw4w9WgXcQ",
+          versions: [version({ notes: "x".repeat(30_000) })],
+        },
+      ],
+    });
+    expect(index.plugins[0].videoId).toBe("dQw4w9WgXcQ");
+    expect(index.plugins[0].versions[0].notes).toBe(NOTES);
+    expect(index.plugins[1].videoId).toBeUndefined();
+    expect(index.plugins[1].versions[0].notes).toHaveLength(20_000);
+  });
+
+  it("keeps only usable feature lines", () => {
+    const index = parseRegistryIndex({
+      plugins: [
+        { id: "docker", features: ["Logs", 5, ""], versions: [version()] },
+        { id: "other", features: "Logs", versions: [version()] },
+      ],
+    });
+    expect(index.plugins[0].features).toEqual(["Logs"]);
+    expect(index.plugins[1].features).toEqual([]);
+  });
+
+  it("keeps only https docs links", () => {
+    const index = parseRegistryIndex({
+      plugins: [
+        {
+          id: "docker",
+          docs: "https://docs.termix.site/plugins/docker/",
+          versions: [version()],
+        },
+        { id: "other", docs: "javascript:alert(1)", versions: [version()] },
+      ],
+    });
+    expect(index.plugins[0].docs).toBe(
+      "https://docs.termix.site/plugins/docker",
+    );
+    expect(index.plugins[1].docs).toBeUndefined();
+  });
+
+  it("refuses something that is not an index", () => {
+    expect(() => parseRegistryIndex({ nope: true })).toThrow(/no plugins/);
+  });
+});
+
+describe("findRelease", () => {
+  const index = parseRegistryIndex({
+    plugins: [
+      {
+        id: "docker",
+        versions: [
+          version({ version: "2.0.0", api: "2" }),
+          version({ version: "1.1.0" }),
+          version(),
+        ],
+      },
+    ],
+  });
+
+  it("picks the newest release this build can run", () => {
+    expect(isApiCompatible("1")).toBe(true);
+    expect(isApiCompatible("2")).toBe(false);
+    expect(findRelease(index, "docker")?.release.version).toBe("1.1.0");
+  });
+
+  it("finds an exact version", () => {
+    expect(findRelease(index, "docker", "1.0.0")?.release.version).toBe(
+      "1.0.0",
+    );
+    expect(findRelease(index, "docker", "9.9.9")).toBeNull();
+    expect(findRelease(index, "missing")).toBeNull();
+  });
+});
+
+describe("prereleases", () => {
+  const index = parseRegistryIndex({
+    plugins: [
+      {
+        id: "docker",
+        versions: [
+          version({ version: "1.1.0" }),
+          version({ version: "1.2.0-beta.1" }),
+        ],
+        prereleases: [
+          version({ version: "1.2.0-beta.1" }),
+          version({ version: "1.2.0-beta.10" }),
+          version({ version: "1.3.0" }),
+        ],
+      },
+      { id: "only-beta", prereleases: [version({ version: "0.1.0-beta.1" })] },
+    ],
+  });
+  const docker = index.plugins[0];
+
+  it("keeps betas out of the stable list and stable out of betas", () => {
+    expect(docker.versions.map((v) => v.version)).toEqual(["1.1.0"]);
+    expect(docker.prereleases.map((v) => v.version)).toEqual([
+      "1.2.0-beta.10",
+      "1.2.0-beta.1",
+    ]);
+    expect(docker.prereleases.every((v) => v.prerelease)).toBe(true);
+    expect(index.plugins[1].versions).toEqual([]);
+  });
+
+  it("picks by channel and finds a beta by exact version", () => {
+    expect(latestOnChannel(docker, "stable")?.version).toBe("1.1.0");
+    expect(latestOnChannel(docker, "beta")?.version).toBe("1.2.0-beta.10");
+    expect(findRelease(index, "docker")?.release.version).toBe("1.1.0");
+    expect(
+      findRelease(index, "docker", undefined, "beta")?.release.version,
+    ).toBe("1.2.0-beta.10");
+    expect(findRelease(index, "docker", "1.2.0-beta.1")?.release.version).toBe(
+      "1.2.0-beta.1",
+    );
+    expect(findRelease(index, "only-beta")).toBeNull();
+  });
+
+  it("prefers a newer stable over an older beta", () => {
+    const later = parseRegistryIndex({
+      plugins: [
+        {
+          id: "docker",
+          versions: [version({ version: "1.2.0" })],
+          prereleases: [version({ version: "1.2.0-beta.3" })],
+        },
+      ],
+    });
+    expect(latestOnChannel(later.plugins[0], "beta")?.version).toBe("1.2.0");
+  });
+});
+
+describe("fetchRegistryIndex", () => {
+  const body = JSON.stringify({
+    plugins: [{ id: "docker", versions: [version()] }],
+  });
+
+  it("follows redirects and caches the result", async () => {
+    fetchMock
+      .mockResolvedValueOnce(
+        response("", 302, { location: "https://cdn.example.com/index.json" }),
+      )
+      .mockResolvedValueOnce(response(body));
+
+    const first = await fetchRegistryIndex();
+    const second = await fetchRegistryIndex();
+    expect(first.plugins[0].id).toBe("docker");
+    expect(second).toBe(first);
+    expect(fetchMock).toHaveBeenCalledTimes(2);
+    expect(fetchMock.mock.calls[1][0]).toBe(
+      "https://cdn.example.com/index.json",
+    );
+  });
+
+  it("serves the stale copy when a refresh fails", async () => {
+    fetchMock.mockResolvedValueOnce(response(body));
+    const first = await fetchRegistryIndex();
+    fetchMock.mockResolvedValueOnce(response("down", 503));
+    expect(await fetchRegistryIndex({ force: true })).toBe(first);
+  });
+
+  it("throws when there is nothing cached", async () => {
+    fetchMock.mockResolvedValueOnce(response("down", 503));
+    await expect(fetchRegistryIndex()).rejects.toThrow(/503/);
+  });
+});
+
+/** A real .tmxplug holding only a manifest, enough for the checks. */
+function pack(manifest: Record<string, unknown>): Buffer {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), "termix-pack-"));
+  try {
+    fs.writeFileSync(path.join(dir, "manifest.json"), JSON.stringify(manifest));
+    const file = path.join(dir, "out.tmxplug");
+    tar.c({ gzip: true, sync: true, file, cwd: dir }, ["manifest.json"]);
+    return fs.readFileSync(file);
+  } finally {
+    fs.rmSync(dir, { recursive: true, force: true });
+  }
+}
+
+describe("downloadRelease", () => {
+  const artifact = pack({
+    id: "docker",
+    version: "1.0.0",
+    capabilities: ["kv:own"],
+  });
+
+  it("writes a verified artifact and its signature to staging", async () => {
+    const signed = sign(artifact);
+    fetchMock.mockResolvedValueOnce(response(artifact));
+
+    const result = await downloadRelease(
+      "docker",
+      version({ ...signed, size: artifact.length }),
+    );
+    expect(fs.readFileSync(result.file)).toEqual(artifact);
+    expect(fs.readFileSync(result.signatureFile, "utf8")).toBe(
+      signed.signature,
+    );
+    expect(
+      result.file.startsWith(path.join(dataDir, "plugins", ".downloads")),
+    ).toBe(true);
+  });
+
+  it("refuses a file signed by a key this build does not trust", async () => {
+    const other = crypto.generateKeyPairSync("ed25519").privateKey;
+    const digest = crypto.createHash("sha256").update(artifact).digest();
+    fetchMock.mockResolvedValueOnce(response(artifact));
+    await expect(
+      downloadRelease(
+        "docker",
+        version({
+          sha256: digest.toString("hex"),
+          signature: crypto.sign(null, digest, other).toString("base64"),
+          size: artifact.length,
+        }),
+      ),
+    ).rejects.toThrow(/trusted key/);
+  });
+
+  it.each([
+    ["another plugin id", { id: "evil" }, /archive is for/],
+    ["another version", { version: "9.9.9" }, /archive is version/],
+    [
+      "more capabilities than the index lists",
+      { capabilities: ["kv:own", "credentials:read"] },
+      /different capabilities/,
+    ],
+  ])("refuses a signed file with %s", async (_label, override, error) => {
+    const tampered = pack({
+      id: "docker",
+      version: "1.0.0",
+      capabilities: ["kv:own"],
+      ...override,
+    });
+    const signed = sign(tampered);
+    fetchMock.mockResolvedValueOnce(response(tampered));
+    await expect(
+      downloadRelease("docker", version({ ...signed, size: tampered.length })),
+    ).rejects.toThrow(error);
+    expect(fs.existsSync(path.join(dataDir, "plugins", ".downloads"))).toBe(
+      false,
+    );
+  });
+
+  it("refuses a file that does not match its signature", async () => {
+    const signed = sign(artifact);
+    fetchMock.mockResolvedValueOnce(response(Buffer.from("something else!!!")));
+    await expect(
+      downloadRelease("docker", version({ ...signed, size: 0 })),
+    ).rejects.toThrow(/sha256/);
+  });
+
+  it("refuses a release built for another plugin API", async () => {
+    await expect(
+      downloadRelease("docker", version({ api: "2" })),
+    ).rejects.toThrow(/plugin API/);
+    expect(fetchMock).not.toHaveBeenCalled();
+  });
+
+  it("refuses a download larger than the index says", async () => {
+    const signed = sign(artifact);
+    fetchMock.mockResolvedValueOnce(response(Buffer.alloc(3 * 1024 * 1024)));
+    await expect(
+      downloadRelease("docker", version({ ...signed, size: 10 })),
+    ).rejects.toThrow(/larger than allowed/);
+  });
+});
+
+describe("registry stats", () => {
+  it("sits next to the index", () => {
+    expect(getStatsUrl()).toBe(
+      "https://raw.githubusercontent.com/Termix-SSH/Termix-Registry/main/official/stats.json",
+    );
+  });
+
+  it("keeps valid counts and drops the rest", () => {
+    const stats = parseRegistryStats({
+      plugins: {
+        docker: { downloads: 120, activeInstalls: 40 },
+        tunnels: { downloads: 7 },
+        "../bad": { downloads: 1 },
+        broken: { downloads: -3, activeInstalls: "many" },
+      },
+    });
+    expect(Object.fromEntries(stats.plugins)).toEqual({
+      docker: { downloads: 120, activeInstalls: 40 },
+      tunnels: { downloads: 7, activeInstalls: null },
+      broken: { downloads: 0, activeInstalls: null },
+    });
+  });
+
+  it("fetches and parses stats.json", async () => {
+    fetchMock.mockResolvedValueOnce(
+      response(JSON.stringify({ plugins: { docker: { downloads: 3 } } })),
+    );
+    const stats = await fetchRegistryStats();
+    expect(stats?.plugins.get("docker")).toEqual({
+      downloads: 3,
+      activeInstalls: null,
+    });
+  });
+});
diff --git a/src/backend/tests/plugins/remote-seed.ts b/src/backend/tests/plugins/remote-seed.ts
deleted file mode 100644
index 4de246962..000000000
--- a/src/backend/tests/plugins/remote-seed.ts
+++ /dev/null
@@ -1,146 +0,0 @@
-/**
- * Puts a 2.8 install on a real Postgres or MySQL server for the upgrade test:
- * wipes the database, applies release-2.8.0-tag's own drizzle migrations
- * (UPGRADE_LEGACY_MIGRATIONS_DIR, which scripts/upgrade-check.sh extracts
- * from git), then copies every row of the SQLite fixture across. After that
- * the database is exactly what a 2.8 server left behind, and the normal boot
- * takes it the rest of the way.
- */
-
-import Database from "better-sqlite3";
-import { sql, type SQL } from "drizzle-orm";
-import { ROWS } from "../fixtures/upgrade/rows.js";
-
-export type RemoteDialect = "postgres" | "mysql";
-
-type Remote = { execute: (query: SQL) => Promise<unknown> };
-
-/** TEST_DIALECT, the same switch the repository tests use. */
-export function remoteTestDialect(
-  env: NodeJS.ProcessEnv = process.env,
-): RemoteDialect | null {
-  const value = env.TEST_DIALECT?.trim().toLowerCase();
-  return value === "postgres" || value === "mysql" ? value : null;
-}
-
-async function rows<T>(db: Remote, query: SQL): Promise<T[]> {
-  const result = (await db.execute(query)) as { rows?: T[] } | T[];
-  if (Array.isArray(result)) {
-    return (Array.isArray(result[0]) ? result[0] : result) as T[];
-  }
-  return result.rows ?? [];
-}
-
-async function wipe(db: Remote, dialect: RemoteDialect): Promise<void> {
-  if (dialect === "postgres") {
-    await db.execute(sql.raw("DROP SCHEMA IF EXISTS drizzle CASCADE"));
-    await db.execute(sql.raw("DROP SCHEMA public CASCADE"));
-    await db.execute(sql.raw("CREATE SCHEMA public"));
-    return;
-  }
-  const [{ name }] = await rows<{ name: string }>(
-    db,
-    sql.raw("SELECT DATABASE() AS name"),
-  );
-  await db.execute(sql.raw(`DROP DATABASE \`${name}\``));
-  await db.execute(sql.raw(`CREATE DATABASE \`${name}\``));
-  await db.execute(sql.raw(`USE \`${name}\``));
-}
-
-async function columnTypes(
-  db: Remote,
-  dialect: RemoteDialect,
-  table: string,
-): Promise<Map<string, string>> {
-  const schema =
-    dialect === "postgres" ? sql`current_schema()` : sql`DATABASE()`;
-  const found = await rows<{ name: string; type: string }>(
-    db,
-    sql`SELECT column_name AS name, data_type AS type FROM information_schema.columns WHERE table_schema = ${schema} AND table_name = ${table}`,
-  );
-  return new Map(found.map((column) => [column.name, column.type]));
-}
-
-async function resyncSequence(db: Remote, table: string): Promise<void> {
-  const [sequence] = await rows<{ name: string | null }>(
-    db,
-    sql.raw(
-      `SELECT pg_get_serial_sequence('"${table}"', 'id') AS name FROM information_schema.columns ` +
-        `WHERE table_schema = current_schema() AND table_name = '${table}' AND column_name = 'id'`,
-    ),
-  );
-  if (!sequence?.name) return;
-  await db.execute(
-    sql.raw(
-      `SELECT setval('${sequence.name}', COALESCE((SELECT MAX(id) FROM "${table}"), 0) + 1, false)`,
-    ),
-  );
-}
-
-export async function seedRemote28(
-  dialect: RemoteDialect,
-  url: string,
-  fixture: Buffer,
-): Promise<void> {
-  const legacyMigrations = process.env.UPGRADE_LEGACY_MIGRATIONS_DIR;
-  if (!legacyMigrations) {
-    throw new Error(
-      "UPGRADE_LEGACY_MIGRATIONS_DIR must point at release-2.8.0-tag's drizzle folder. Run scripts/upgrade-check.sh.",
-    );
-  }
-
-  const { drizzle } =
-    dialect === "postgres"
-      ? await import("drizzle-orm/node-postgres")
-      : await import("drizzle-orm/mysql2");
-  const db = (
-    drizzle as unknown as (
-      config: unknown,
-    ) => Remote & { $client: { end: () => Promise<void> } }
-  )(
-    dialect === "postgres"
-      ? { connection: url }
-      : { connection: { uri: url, connectionLimit: 1 } },
-  );
-  const source = new Database(fixture, { readonly: true });
-
-  try {
-    await wipe(db, dialect);
-
-    const { runRemoteMigrations } =
-      await import("../../database/db/migrate.js");
-    await runRemoteMigrations(dialect, db as never, {
-      DRIZZLE_MIGRATIONS_DIR: legacyMigrations,
-    });
-
-    for (const table of Object.keys(ROWS)) {
-      const types = await columnTypes(db, dialect, table);
-      if (types.size === 0) {
-        throw new Error(`2.8's ${dialect} schema has no ${table} table`);
-      }
-      for (const row of source
-        .prepare(`SELECT * FROM "${table}"`)
-        .all() as Array<Record<string, unknown>>) {
-        const columns = Object.keys(row).filter(
-          (column) => types.has(column) && row[column] !== null,
-        );
-        const values = columns.map((column) =>
-          types.get(column) === "boolean" ? Boolean(row[column]) : row[column],
-        );
-        await db.execute(
-          sql`INSERT INTO ${sql.identifier(table)} (${sql.join(
-            columns.map((column) => sql.identifier(column)),
-            sql`, `,
-          )}) VALUES (${sql.join(
-            values.map((value) => sql`${value}`),
-            sql`, `,
-          )})`,
-        );
-      }
-      if (dialect === "postgres") await resyncSequence(db, table);
-    }
-  } finally {
-    source.close();
-    await db.$client.end();
-  }
-}
diff --git a/src/backend/tests/plugins/sdk-openapi.test.ts b/src/backend/tests/plugins/sdk-openapi.test.ts
new file mode 100644
index 000000000..e23c33073
--- /dev/null
+++ b/src/backend/tests/plugins/sdk-openapi.test.ts
@@ -0,0 +1,67 @@
+import { afterEach, describe, expect, it } from "vitest";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import {
+  buildOpenApi,
+  hasOpenApiPaths,
+  TERMIX_SECURITY_SCHEMES,
+} from "@termix-ssh/plugin-sdk/openapi";
+
+let dir: string | null = null;
+
+afterEach(() => {
+  if (dir) fs.rmSync(dir, { recursive: true, force: true });
+  dir = null;
+});
+
+function source(files: Record<string, string>): string {
+  dir = fs.mkdtempSync(path.join(os.tmpdir(), "sdk-openapi-"));
+  for (const [name, text] of Object.entries(files)) {
+    fs.writeFileSync(path.join(dir, name), text);
+  }
+  return dir;
+}
+
+describe("buildOpenApi", () => {
+  it("reads @openapi blocks from TypeScript sources", async () => {
+    const root = source({
+      "routes.ts": [
+        "/**",
+        " * @openapi",
+        " * /plugin-api/sample/items:",
+        " *   get:",
+        " *     summary: List items",
+        " *     responses:",
+        " *       200:",
+        " *         description: The items",
+        " */",
+        'router.get("/items", handler);',
+      ].join("\n"),
+    });
+    const spec = await buildOpenApi({
+      title: "Sample API",
+      version: "1.2.3",
+      files: [path.join(root, "*.ts")],
+      tags: [{ name: "Sample" }],
+    });
+    expect(hasOpenApiPaths(spec)).toBe(true);
+    expect(Object.keys(spec.paths ?? {})).toEqual(["/plugin-api/sample/items"]);
+    expect(spec).toMatchObject({
+      openapi: "3.0.3",
+      info: { title: "Sample API", version: "1.2.3" },
+      tags: [{ name: "Sample" }],
+      components: { securitySchemes: TERMIX_SECURITY_SCHEMES },
+    });
+  });
+
+  it("returns a spec with no paths when nothing is documented", async () => {
+    const root = source({ "index.ts": "export const x = 1;" });
+    const spec = await buildOpenApi({
+      title: "Empty",
+      version: "1.0.0",
+      files: [path.join(root, "*.ts")],
+    });
+    expect(hasOpenApiPaths(spec)).toBe(false);
+  });
+});
diff --git a/src/backend/tests/plugins/sdk-testing.test.ts b/src/backend/tests/plugins/sdk-testing.test.ts
index fa86dd923..4dcf35744 100644
--- a/src/backend/tests/plugins/sdk-testing.test.ts
+++ b/src/backend/tests/plugins/sdk-testing.test.ts
@@ -16,9 +16,9 @@ import {
   id,
   refUser,
   text,
-} from "@termix/plugin-sdk/db";
-import { adoptTableSql } from "@termix/plugin-sdk/ddl";
-import { createMockCtx, createTestDb } from "@termix/plugin-sdk/testing";
+} from "@termix-ssh/plugin-sdk/db";
+import { adoptTableSql } from "@termix-ssh/plugin-sdk/ddl";
+import { createMockCtx, createTestDb } from "@termix-ssh/plugin-sdk/testing";
 
 let root: string;
 let pluginDir: string;
@@ -30,7 +30,7 @@ const notes = adoptLegacyTable(
 
 beforeEach(() => {
   root = fs.mkdtempSync(path.join(os.tmpdir(), "termix-sdk-testing-"));
-  // The directory name is the plugin id, as it is in plugins/.
+  // The directory name is the plugin id.
   pluginDir = path.join(root, "fleets");
   fs.mkdirSync(path.join(pluginDir, "migrations", "sqlite"), {
     recursive: true,
diff --git a/src/backend/tests/plugins/security/auth.test.ts b/src/backend/tests/plugins/security/auth.test.ts
index 17f6dc0b3..f21181a06 100644
--- a/src/backend/tests/plugins/security/auth.test.ts
+++ b/src/backend/tests/plugins/security/auth.test.ts
@@ -107,7 +107,6 @@ function addUser(overrides: Record<string, unknown> = {}) {
     username: "alice",
     passwordHash: bcrypt.hashSync(PASSWORD, 4),
     isAdmin: false,
-    isOidc: false,
     ...overrides,
   };
   h.state.users.set(user.id as string, user as never);
@@ -196,7 +195,6 @@ describe("external sign-in cannot claim another account", () => {
     email: null,
     name: "Alice",
     legacyIdentifier: "shared-id",
-    ssoProviderId: 3,
   };
 
   beforeEach(() => {
@@ -209,7 +207,7 @@ describe("external sign-in cannot claim another account", () => {
         external: true,
       }),
     );
-    h.state.settings.set("oidc_auto_provision", "true");
+    h.state.settings.set("external_auto_provision", "true");
   });
 
   async function signIn(identity: Record<string, unknown> = external) {
@@ -223,55 +221,21 @@ describe("external sign-in cannot claim another account", () => {
     return h.state.identities.find((row) => row.subject === "sub-1")?.userId;
   }
 
-  it("never links a local password account by its old identifier", async () => {
-    addUser({ id: "local", oidcIdentifier: "shared-id", isOidc: false });
-    await signIn();
-    expect(linkedTo()).not.toBe("local");
-  });
-
-  it("never links an account that already has an identity", async () => {
-    addUser({
-      id: "taken",
-      username: "bob",
-      passwordHash: "",
-      isOidc: true,
-      oidcIdentifier: "shared-id",
-    });
+  it("never links an account that has no identity for this provider", async () => {
+    addUser({ id: "local", username: "Alice" });
+    addUser({ id: "sso", username: "bob", passwordHash: "" });
     h.state.identities.push({
       id: 1,
-      userId: "taken",
+      userId: "sso",
       providerId: "9",
-      subject: "bob",
+      subject: "sub-1",
       email: null,
     });
     await signIn();
-    expect(linkedTo()).not.toBe("taken");
-  });
-
-  it("never links an account from a different provider", async () => {
-    addUser({
-      id: "other",
-      username: "bob",
-      passwordHash: "",
-      isOidc: true,
-      oidcIdentifier: "shared-id",
-      ssoProviderId: 7,
-    });
-    await signIn();
-    expect(linkedTo()).not.toBe("other");
-  });
-
-  it("still links a genuine 2.8 account on its first sign-in", async () => {
-    addUser({
-      id: "legacy",
-      username: "Alice",
-      passwordHash: "",
-      isOidc: true,
-      oidcIdentifier: "shared-id",
-      ssoProviderId: 3,
-    });
-    await signIn();
-    expect(linkedTo()).toBe("legacy");
+    expect(linkedTo()).not.toBe("local");
+    expect(
+      h.state.identities.find((row) => row.providerId === "3")?.userId,
+    ).not.toBe("sso");
   });
 
   it("never gives a new account a local user's username", async () => {
@@ -290,7 +254,6 @@ describe("external sign-in cannot claim another account", () => {
       id: "sso-user",
       username: "carol",
       passwordHash: "",
-      isOidc: true,
     });
     h.state.identities.push({
       id: 1,
diff --git a/src/backend/tests/plugins/security/credential-shapes.test.ts b/src/backend/tests/plugins/security/credential-shapes.test.ts
index 498d715b0..6aa375fff 100644
--- a/src/backend/tests/plugins/security/credential-shapes.test.ts
+++ b/src/backend/tests/plugins/security/credential-shapes.test.ts
@@ -37,7 +37,8 @@ function secretHost(id: number): Record<string, unknown> {
 }
 
 vi.mock("../../../plugins/permissions.js", async () => {
-  const { PluginCapabilityError } = await import("@termix/plugin-sdk/backend");
+  const { PluginCapabilityError } =
+    await import("@termix-ssh/plugin-sdk/backend");
   const granted = (capability: string, declared: readonly string[]) =>
     declared.includes(capability) && h.granted.has(capability);
   return {
diff --git a/src/backend/tests/plugins/security/ctx-guards.test.ts b/src/backend/tests/plugins/security/ctx-guards.test.ts
index 87b659acc..a2d83b39b 100644
--- a/src/backend/tests/plugins/security/ctx-guards.test.ts
+++ b/src/backend/tests/plugins/security/ctx-guards.test.ts
@@ -27,7 +27,8 @@ const { createPluginContext, createPluginHandle } =
 const { invalidatePluginPermissionCache } =
   await import("../../../plugins/permissions.js");
 const { runAsActor } = await import("../../../plugins/actor.js");
-const { PluginCapabilityError } = await import("@termix/plugin-sdk/backend");
+const { PluginCapabilityError } =
+  await import("@termix-ssh/plugin-sdk/backend");
 
 const PLUGIN_ID = "walker";
 const ACTOR = "user-walker";
diff --git a/src/backend/tests/plugins/security/data.test.ts b/src/backend/tests/plugins/security/data.test.ts
index 62c637fce..dfcd2cdf0 100644
--- a/src/backend/tests/plugins/security/data.test.ts
+++ b/src/backend/tests/plugins/security/data.test.ts
@@ -9,13 +9,11 @@ import { drizzle } from "drizzle-orm/better-sqlite3";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import { fileURLToPath } from "node:url";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 import {
   collectOwnedIndexes,
   findUnownedTableWrites,
-} from "@termix/plugin-sdk/ddl";
-import { LEGACY_TABLE_OWNERS } from "@termix/plugin-sdk/db";
+} from "@termix-ssh/plugin-sdk/ddl";
 
 const state = vi.hoisted(() => ({
   db: null as unknown,
@@ -155,39 +153,6 @@ describe("the migration checker", () => {
     ).not.toEqual([]);
   });
 
-  it("passes every migration a bundled plugin ships", () => {
-    const plugins = path.resolve(
-      path.dirname(fileURLToPath(import.meta.url)),
-      "../../../../../plugins",
-    );
-    for (const id of fs.readdirSync(plugins)) {
-      const legacy = new Set(
-        Object.entries(LEGACY_TABLE_OWNERS)
-          .filter(([, owner]) => owner === id)
-          .map(([table]) => table),
-      );
-      for (const dialect of ["sqlite", "postgres", "mysql"]) {
-        const dir = path.join(plugins, id, "migrations", dialect);
-        if (!fs.existsSync(dir)) continue;
-        const files = fs
-          .readdirSync(dir)
-          .filter((file) => file.endsWith(".sql"))
-          .sort();
-        const sqls = files.map((file) =>
-          fs.readFileSync(path.join(dir, file), "utf8"),
-        );
-        // The runner lets a later migration drop an index an earlier one made.
-        const ownedIndexes = collectOwnedIndexes(id, sqls, legacy);
-        files.forEach((file, index) => {
-          expect(
-            findUnownedTableWrites(id, sqls[index], legacy, ownedIndexes),
-            `${id}/${dialect}/${file}`,
-          ).toEqual([]);
-        });
-      }
-    }
-  });
-
   it("gives a user plugin no legacy exemption at runtime", () => {
     const adopt = 'ALTER TABLE "fleets" RENAME TO "p_fleets_fleets"';
     expect(() =>
diff --git a/src/backend/tests/plugins/security/discovery.test.ts b/src/backend/tests/plugins/security/discovery.test.ts
index b1c33d91c..61f396d27 100644
--- a/src/backend/tests/plugins/security/discovery.test.ts
+++ b/src/backend/tests/plugins/security/discovery.test.ts
@@ -9,10 +9,9 @@ import { afterEach, describe, expect, it, vi } from "vitest";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import { fileURLToPath } from "node:url";
 import { PluginLoader, prefixesOverlap } from "../../../plugins/loader.js";
 import { parseManifest } from "../../../plugins/manifest.js";
-import { RESERVED_PLUGIN_IDS } from "@termix/plugin-sdk/manifest";
+import { RESERVED_PLUGIN_IDS } from "@termix-ssh/plugin-sdk/manifest";
 import { createFixturePlugin } from "../fixture-plugin.js";
 
 vi.mock("../../../database/repositories/factory.js", () => ({
@@ -95,22 +94,6 @@ describe("table prefixes", () => {
       loader.load(path.join(root, "foo-bar"), "user"),
     ).rejects.toThrow(/overlaps "foo"/);
   });
-
-  it("no two bundled plugins overlap", () => {
-    const plugins = path.resolve(
-      path.dirname(fileURLToPath(import.meta.url)),
-      "../../../../../plugins",
-    );
-    const ids = fs
-      .readdirSync(plugins, { withFileTypes: true })
-      .filter((entry) => entry.isDirectory())
-      .map((entry) => entry.name);
-    for (const a of ids) {
-      for (const b of ids) {
-        expect(prefixesOverlap(a, b), `${a} and ${b}`).toBe(false);
-      }
-    }
-  });
 });
 
 describe("paths stay inside the plugin", () => {
diff --git a/src/backend/tests/plugins/settings-manifest.test.ts b/src/backend/tests/plugins/settings-manifest.test.ts
index fdc5f172a..9e35972a8 100644
--- a/src/backend/tests/plugins/settings-manifest.test.ts
+++ b/src/backend/tests/plugins/settings-manifest.test.ts
@@ -398,7 +398,7 @@ describe("host field options", () => {
       host: { enableKey: "on", enableLabelKey: "k", fields, ...extra },
     });
 
-  it("accepts enableDefault, defaultFrom, shareRead and ownerOnly", () => {
+  it("accepts enableDefault, shareRead and ownerOnly", () => {
     expect(
       validateManifest(
         host(
@@ -407,7 +407,6 @@ describe("host field options", () => {
               key: "mode",
               type: "boolean",
               labelKey: "k",
-              defaultFrom: "defaultOn",
               shareRead: "edit",
               ownerOnly: true,
             },
@@ -418,7 +417,7 @@ describe("host field options", () => {
     ).toEqual([]);
   });
 
-  it("still accepts an old defaultFrom, but only as a string", () => {
+  it("rejects the removed defaultFrom", () => {
     expect(
       validateManifest(
         host([
@@ -429,11 +428,6 @@ describe("host field options", () => {
             defaultFrom: "missing",
           },
         ]),
-      ),
-    ).toEqual([]);
-    expect(
-      validateManifest(
-        host([{ key: "mode", type: "boolean", labelKey: "k", defaultFrom: 1 }]),
       ).join(),
     ).toMatch(/defaultFrom/);
   });
diff --git a/src/backend/tests/plugins/settings-routes.test.ts b/src/backend/tests/plugins/settings-routes.test.ts
index b1e58f1b2..e7de470cd 100644
--- a/src/backend/tests/plugins/settings-routes.test.ts
+++ b/src/backend/tests/plugins/settings-routes.test.ts
@@ -11,7 +11,7 @@ import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 import express from "express";
 import type { AddressInfo } from "node:net";
 import type { Server } from "node:http";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 
 const state = vi.hoisted(() => ({
   userId: "user-1",
diff --git a/src/backend/tests/plugins/settings.test.ts b/src/backend/tests/plugins/settings.test.ts
index ae7e58ffd..a962ccad2 100644
--- a/src/backend/tests/plugins/settings.test.ts
+++ b/src/backend/tests/plugins/settings.test.ts
@@ -8,7 +8,7 @@
  */
 
 import { beforeEach, describe, expect, it, vi } from "vitest";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 
 interface Row {
   pluginId: string;
diff --git a/src/backend/tests/plugins/shutdown.test.ts b/src/backend/tests/plugins/shutdown.test.ts
index 82c84d1e6..c0a4ae243 100644
--- a/src/backend/tests/plugins/shutdown.test.ts
+++ b/src/backend/tests/plugins/shutdown.test.ts
@@ -34,7 +34,19 @@ vi.mock("../../plugins/permissions.js", () => ({
   invalidatePluginPermissionCache: vi.fn(),
 }));
 
-const CONSOLE_PORT = 39109;
+// A fixed port can land in a range Windows reserves for Hyper-V or Docker.
+function freePort(): Promise<number> {
+  return new Promise((resolve, reject) => {
+    const server = net.createServer();
+    server.once("error", reject);
+    server.listen(0, "127.0.0.1", () => {
+      const { port } = server.address() as net.AddressInfo;
+      server.close(() => resolve(port));
+    });
+  });
+}
+
+const CONSOLE_PORT = await freePort();
 const cleanups: Array<() => void> = [];
 
 function tempRoot(prefix: string): string {
diff --git a/src/backend/tests/plugins/table-ddl.test.ts b/src/backend/tests/plugins/table-ddl.test.ts
index 2f36df4d0..14f6c5aae 100644
--- a/src/backend/tests/plugins/table-ddl.test.ts
+++ b/src/backend/tests/plugins/table-ddl.test.ts
@@ -15,8 +15,8 @@ import {
   prefixedTableName,
   tablePrefix,
   adoptLegacyTable,
-} from "@termix/plugin-sdk/db";
-import { splitStatements } from "@termix/plugin-sdk/ddl";
+} from "@termix-ssh/plugin-sdk/db";
+import { splitStatements } from "@termix-ssh/plugin-sdk/ddl";
 import {
   adoptTableSql,
   createTableSql,
@@ -184,9 +184,9 @@ describe("createTableSql", () => {
         \`user_id\` varchar(255) NOT NULL,
         \`host_id\` int NOT NULL,
         \`title\` varchar(200) NOT NULL,
-        \`body\` text,
-        \`meta\` text,
-        \`secret\` text,
+        \`body\` longtext,
+        \`meta\` longtext,
+        \`secret\` longtext,
         \`pinned\` boolean DEFAULT false,
         \`position\` int DEFAULT 0,
         \`size\` bigint,
@@ -286,9 +286,9 @@ describe("adoptTableSql", () => {
     expect(mysql[1]).toBe("RENAME TABLE `fleets` TO `p_fleets_fleets`;");
   });
 
-  it("writes a TEXT default as an expression on MySQL", () => {
+  it("writes a long text default as an expression on MySQL", () => {
     expect(adoptTableSql("mysql", "fleets", adopted)[0]).toContain(
-      "`name` text NOT NULL DEFAULT ('x')",
+      "`name` longtext NOT NULL DEFAULT ('x')",
     );
     expect(createTableSql("sqlite", "fleets", adopted)[0]).toContain(
       "\"name\" text NOT NULL DEFAULT 'x'",
diff --git a/src/backend/tests/plugins/upgrade-fixture-data.test.ts b/src/backend/tests/plugins/upgrade-fixture-data.test.ts
deleted file mode 100644
index ecf4b30a7..000000000
--- a/src/backend/tests/plugins/upgrade-fixture-data.test.ts
+++ /dev/null
@@ -1,72 +0,0 @@
-/**
- * The committed 2.8 fixture still matches rows.ts and still fills every
- * table a plugin adopts. A new legacy table in LEGACY_TABLE_OWNERS fails here
- * until it gets fixture rows (npx tsx scripts/build-upgrade-fixture.ts).
- */
-
-import fs from "node:fs";
-import path from "node:path";
-import Database from "better-sqlite3";
-import { afterAll, describe, expect, it } from "vitest";
-import { LEGACY_TABLE_OWNERS } from "@termix/plugin-sdk/db";
-import { FieldCrypto } from "../../utils/field-crypto.js";
-import { UPGRADE_FIXTURE_DIR } from "./built-harness.js";
-import {
-  ENCRYPTED_COLUMNS,
-  RECORDING_FILES,
-  ROWS,
-} from "../fixtures/upgrade/rows.js";
-
-const sqlite = new Database(path.join(UPGRADE_FIXTURE_DIR, "db.sqlite"), {
-  readonly: true,
-});
-
-afterAll(() => sqlite.close());
-
-const count = (table: string) =>
-  (
-    sqlite.prepare(`SELECT COUNT(*) AS n FROM "${table}"`).get() as {
-      n: number;
-    }
-  ).n;
-
-describe("the committed 2.8 upgrade fixture", () => {
-  it("fills every table a plugin adopts", () => {
-    for (const table of Object.keys(LEGACY_TABLE_OWNERS)) {
-      expect(ROWS[table]?.length ?? 0, table).toBeGreaterThan(0);
-      expect(count(table), table).toBeGreaterThan(0);
-    }
-  });
-
-  it("holds exactly the rows in rows.ts", () => {
-    for (const [table, rows] of Object.entries(ROWS)) {
-      // Each user also has a wrapped data key in settings.
-      const extra = table === "settings" ? ROWS.users.length : 0;
-      expect(count(table), table).toBe(rows.length + extra);
-    }
-  });
-
-  it("stores the columns 2.8 encrypted as ciphertext", () => {
-    for (const [table, column] of ENCRYPTED_COLUMNS) {
-      const values = (
-        sqlite
-          .prepare(
-            `SELECT "${column}" AS value FROM "${table}" WHERE "${column}" IS NOT NULL AND "${column}" <> ''`,
-          )
-          .all() as Array<{ value: string }>
-      ).map((row) => row.value);
-      for (const value of values) {
-        expect(FieldCrypto.isEncrypted(value), `${table}.${column}`).toBe(true);
-      }
-    }
-  });
-
-  it("ships the recording files its rows point at", () => {
-    for (const relative of Object.values(RECORDING_FILES)) {
-      expect(
-        fs.existsSync(path.join(UPGRADE_FIXTURE_DIR, "files", relative)),
-        relative,
-      ).toBe(true);
-    }
-  });
-});
diff --git a/src/backend/tests/plugins/upgrade-fixture.test.ts b/src/backend/tests/plugins/upgrade-fixture.test.ts
deleted file mode 100644
index 1585efbcb..000000000
--- a/src/backend/tests/plugins/upgrade-fixture.test.ts
+++ /dev/null
@@ -1,741 +0,0 @@
-/**
- * The 2.8 to 2.9.0 upgrade, end to end. The committed 2.8 install in
- * fixtures/upgrade boots through the pre-upgrade backup, core's migrations,
- * every built plugin's migrations and the data moves, and everything it held
- * reads back through the plugins' routes, their settings and their ctx. Then
- * the same data directory boots again and nothing changes.
- *
- * TEST_DIALECT=postgres|mysql with TEST_DATABASE_URL runs it against a real
- * server instead (scripts/upgrade-check.sh sets that up).
- */
-
-import crypto from "node:crypto";
-import fs from "node:fs";
-import path from "node:path";
-import express from "express";
-import request from "supertest";
-import { sql } from "drizzle-orm";
-import { afterAll, beforeAll, describe, expect, it, vi } from "vitest";
-import { LEGACY_TABLE_OWNERS } from "@termix/plugin-sdk/db";
-import {
-  assertPluginsBuilt,
-  bootCore,
-  BUILT_PLUGINS_DIR,
-  UPGRADE_FIXTURE_DIR,
-  type BootedCore,
-} from "./built-harness.js";
-import { remoteTestDialect } from "./remote-seed.js";
-import {
-  FIXTURE_PASSWORD,
-  HOST_AUTH_TYPES,
-  HOSTS,
-  LDAP_PROVIDER_ID,
-  OPERATORS_PERMISSIONS,
-  ROWS,
-  SSO_PROVIDER_ID,
-  SYNCED_ENTITY_TYPES_28,
-  TOTP_BACKUP_CODES,
-  TOTP_SECRET,
-  USER_ROLE_PERMISSIONS_28,
-  USERS,
-} from "../fixtures/upgrade/rows.js";
-
-const BOOT_TIMEOUT = 240_000;
-
-type UserKey = keyof typeof USERS;
-
-interface Booted {
-  core: BootedCore;
-  app: express.Express;
-  tokens: Record<UserKey, string>;
-  errors: string[];
-}
-
-/** legacy table -> the p_ table its plugin renamed it to. */
-function adoptedNames(): Map<string, string> {
-  const names = new Map<string, string>();
-  for (const id of new Set(Object.values(LEGACY_TABLE_OWNERS))) {
-    const dir = path.join(BUILT_PLUGINS_DIR, id, "migrations", "sqlite");
-    for (const file of fs.readdirSync(dir)) {
-      const text = fs.readFileSync(path.join(dir, file), "utf8");
-      for (const match of text.matchAll(
-        /ALTER TABLE "([a-z0-9_]+)" RENAME TO "(p_[a-z0-9_]+)"/g,
-      )) {
-        names.set(match[1], match[2]);
-      }
-    }
-  }
-  return names;
-}
-
-async function boot(dataDir?: string): Promise<Booted> {
-  vi.resetModules();
-  const errors: string[] = [];
-  const error = vi.spyOn(console, "error").mockImplementation((...args) => {
-    errors.push(args.map(String).join(" "));
-  });
-  const warn = vi.spyOn(console, "warn").mockImplementation(() => {});
-  let core: BootedCore;
-  try {
-    core = await bootCore(
-      dataDir ? { reuseDataDir: dataDir } : { fixtureDir: UPGRADE_FIXTURE_DIR },
-    );
-  } finally {
-    error.mockRestore();
-    warn.mockRestore();
-  }
-
-  const { AuthManager } = await import("../../utils/auth-manager.js");
-  const auth = AuthManager.getInstance();
-  const tokens = {} as Record<UserKey, string>;
-  for (const [key, userId] of Object.entries(USERS)) {
-    await auth.unlockWithSystemKey(userId);
-    tokens[key as UserKey] = await auth.generateJWTToken(userId, {
-      deviceType: "web",
-      deviceInfo: "upgrade test",
-    });
-  }
-
-  const { mountPluginApi } =
-    await import("../../database/routes/plugin-api-routes.js");
-  const { default: pluginRoutes } =
-    await import("../../database/routes/plugins.js");
-  const { default: userRoutes } =
-    await import("../../database/routes/users.js");
-  const app = express();
-  app.use(express.json());
-  app.use("/users", userRoutes);
-  app.use("/plugins", pluginRoutes);
-  mountPluginApi(app);
-
-  return { core, app, tokens, errors };
-}
-
-function get(booted: Booted, url: string, as: UserKey = "admin") {
-  return request(booted.app)
-    .get(url)
-    .set("Authorization", `Bearer ${booted.tokens[as]}`);
-}
-
-async function settings(
-  booted: Booted,
-  pluginId: string,
-  scope: string,
-  as: UserKey = "admin",
-): Promise<Record<string, unknown>> {
-  const response = await get(
-    booted,
-    `/plugins/${pluginId}/settings/${scope}`,
-    as,
-  );
-  expect(response.status, `${pluginId} ${scope} settings`).toBe(200);
-  return response.body.values as Record<string, unknown>;
-}
-
-/** A ctx for a running plugin, the one its own code gets. */
-async function pluginCtx(pluginId: string) {
-  const { getPluginRuntime } = await import("../../plugins/index.js");
-  const { createPluginContext } = await import("../../plugins/ctx.js");
-  const loaded = getPluginRuntime().loader.get(pluginId);
-  if (!loaded?.handle) throw new Error(`${pluginId} is not running`);
-  return createPluginContext(loaded.manifest, loaded.handle);
-}
-
-async function asUser<T>(userId: string, fn: () => Promise<T>): Promise<T> {
-  const { runAsActor } = await import("../../plugins/actor.js");
-  return runAsActor(userId, "asUser", fn);
-}
-
-/** Every row of a plugin table, read through that plugin's ctx.db. */
-async function pluginRows(
-  pluginId: string,
-  table: string,
-): Promise<Array<Record<string, unknown>>> {
-  const ctx = await pluginCtx(pluginId);
-  /* eslint-disable @typescript-eslint/no-explicit-any */
-  const client = await ctx.db.client<any>();
-  const query = sql`SELECT * FROM ${sql.identifier(table)}`;
-  if (typeof client.all === "function") return client.all(query);
-  const result = await client.execute(query);
-  return Array.isArray(result) ? result[0] : result.rows;
-  /* eslint-enable @typescript-eslint/no-explicit-any */
-}
-
-/** Bookkeeping counts, compared between the first and second boot. */
-async function counts(): Promise<Record<string, number>> {
-  const { selectRows } =
-    await import("../../utils/crypto-migration/raw-rows.js");
-  const out: Record<string, number> = {};
-  const tables = [
-    "plugin_migrations",
-    "plugin_settings",
-    "user_second_factors",
-    "user_external_identities",
-    "roles",
-    "user_roles",
-    "ssh_data",
-    ...adoptedNames().values(),
-  ];
-  for (const table of tables) {
-    const [row] = await selectRows<{ n: number | string }>(
-      sql`SELECT COUNT(*) AS n FROM ${sql.identifier(table)}`,
-    );
-    out[table] = Number(row.n);
-  }
-  return out;
-}
-
-function totpCode(secret: string, at = Date.now()): string {
-  const alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
-  let bits = "";
-  for (const char of secret.replace(/=+$/, "")) {
-    bits += alphabet.indexOf(char).toString(2).padStart(5, "0");
-  }
-  const key = Buffer.from(
-    bits.match(/.{8}/g)!.map((byte) => parseInt(byte, 2)),
-  );
-  const counter = Buffer.alloc(8);
-  counter.writeBigUInt64BE(BigInt(Math.floor(at / 30_000)));
-  const hmac = crypto.createHmac("sha1", key).update(counter).digest();
-  const offset = hmac[hmac.length - 1] & 0xf;
-  const value = (hmac.readUInt32BE(offset) & 0x7fffffff) % 1_000_000;
-  return String(value).padStart(6, "0");
-}
-
-/** Everything a 2.8 install had, checked against a booted 2.9.0. */
-function upgradeChecks(current: () => Booted, bootIndex: number) {
-  it("boots without logging an error", () => {
-    expect(current().errors).toEqual([]);
-  });
-
-  it("activates every plugin", async () => {
-    const { getPluginRuntime } = await import("../../plugins/index.js");
-    const notActive = getPluginRuntime()
-      .loader.list()
-      .filter((plugin) => plugin.state !== "active")
-      .map((plugin) => `${plugin.id}: ${plugin.state} ${plugin.lastError}`);
-    expect(notActive).toEqual([]);
-  });
-
-  it("keeps every row of every adopted table, readable by its plugin", async () => {
-    const names = adoptedNames();
-    for (const [legacy, pluginId] of Object.entries(LEGACY_TABLE_OWNERS)) {
-      const seeded = ROWS[legacy] ?? [];
-      expect(seeded.length, `the fixture fills ${legacy}`).toBeGreaterThan(0);
-      const table = names.get(legacy);
-      expect(table, `${pluginId} adopts ${legacy}`).toBeDefined();
-      // 2.8 kept LDAP directories in sso_providers; the ldap plugin takes them.
-      const expected =
-        legacy === "sso_providers"
-          ? seeded.filter((row) => row.type !== "ldap")
-          : seeded;
-      const rows = await pluginRows(pluginId, table!);
-      const ids = rows.map((row) => String(row.id)).sort();
-      expect(ids, `${legacy} -> ${table}`).toEqual(
-        expected.map((row) => String(row.id)).sort(),
-      );
-    }
-    const ldap = await pluginRows("ldap", "p_ldap_providers");
-    expect(ldap.map((row) => String(row.id))).toEqual([
-      String(LDAP_PROVIDER_ID),
-    ]);
-  });
-
-  it("reads the adopted rows back through each plugin's routes", async () => {
-    const checks: Array<[string, string, UserKey?]> = [
-      ["/plugin-api/snippets/", "d4-snippet"],
-      ["/plugin-api/snippets/shared", "d4-shared-snippet", "alice"],
-      ["/plugin-api/fleets/", "d4-fleet"],
-      ["/plugin-api/workspaces/", "d4-workspace"],
-      ["/plugin-api/network-topology/", "d4-node"],
-      ["/plugin-api/automations/", "d4-automation"],
-      ["/plugin-api/homepage/items", "d4-widget"],
-      ["/plugin-api/homepage/service-links", "d4-link"],
-      ["/plugin-api/vault/profiles", "d4-vault"],
-      ["/plugin-api/termix-identity/me", "d4-handle"],
-      ["/plugin-api/sso/providers", "d4-sso"],
-      ["/plugin-api/ldap/providers", "d4-ldap"],
-      [
-        `/plugin-api/ssh-terminal/command-history/${HOSTS.password}`,
-        "d4-history-command",
-      ],
-      ["/plugin-api/tunnels/presets", "d4-preset"],
-      ["/plugin-api/ai/providers", "d4-provider"],
-      ["/plugin-api/ai/conversations/1", "d4-message"],
-      ["/plugin-api/secret-sources", "d4-source"],
-      ["/plugin-api/session-sharing/rooms", "d4-room"],
-      ["/plugin-api/webauthn/credentials", "d4-passkey", "passkey"],
-      ["/plugin-api/alerts/channels", "d4-channel"],
-    ];
-    const failures: string[] = [];
-    for (const [url, marker, as] of checks) {
-      const response = await get(current(), url, as);
-      if (
-        response.status !== 200 ||
-        !JSON.stringify(response.body).includes(marker)
-      ) {
-        failures.push(
-          `${url} -> ${response.status} ${JSON.stringify(response.body).slice(0, 200)}`,
-        );
-      }
-    }
-    expect(failures).toEqual([]);
-  });
-
-  it("moves every host flag into its plugin's host settings", async () => {
-    const booted = current();
-    const host = (id: string) => settings(booted, id, `host/${HOSTS.password}`);
-    expect(await host("ssh-terminal")).toMatchObject({
-      enableTerminal: true,
-      enableCommandHistory: false,
-      enableTerminalToolbar: false,
-      // The look it saved in terminal_config, which took it off the user's.
-      inheritAppearance: false,
-      theme: "dracula",
-      fontSize: 16,
-      cursorStyle: "block",
-      autoTmux: true,
-      sudoPasswordAutoFill: true,
-      localEcho: "on",
-    });
-    expect(
-      await settings(booted, "ssh-terminal", `host/${HOSTS.key}`),
-    ).toMatchObject({ inheritAppearance: true, passwordPromptAutoFill: false });
-    expect(await host("session-recording")).toMatchObject({
-      enableSessionRecording: false,
-    });
-    expect(await host("session-sharing")).toMatchObject({
-      allowSessionSharing: false,
-    });
-    expect(await host("file-manager")).toMatchObject({
-      enableFileManager: false,
-      defaultPath: "/srv/d4",
-      scpLegacy: true,
-    });
-    const tunnels = await host("tunnels");
-    expect(tunnels.enableTunnel).toBe(true);
-    expect(JSON.stringify(tunnels.tunnelConnections)).toContain("8080");
-    const web = await host("web-endpoint");
-    expect(web.enableWebUi).toBe(true);
-    expect(JSON.stringify(web.webUiConfig)).toContain("d4-grafana");
-    expect(await host("tmux-monitor")).toMatchObject({
-      enableTmuxMonitor: true,
-    });
-    expect(await host("docker")).toMatchObject({
-      enableDocker: true,
-      containerRuntime: "podman",
-    });
-    expect(await host("ai")).toMatchObject({ enableAiAssistant: true });
-    expect(await host("snippets")).toMatchObject({
-      startupSnippetId: 1,
-      quickActions: [{ name: "d4-uptime", snippetId: 1 }],
-    });
-    expect(await host("wake-on-lan")).toMatchObject({
-      macAddress: "AA:BB:CC:DD:EE:04",
-      broadcastAddress: "10.4.0.255",
-    });
-    expect(await host("host-metrics")).toMatchObject({
-      metricsEnabled: false,
-      metricsInterval: 45,
-      enabledWidgets: ["cpu", "memory"],
-    });
-
-    const proxmox = await settings(booted, "proxmox", `host/${HOSTS.key}`);
-    expect(proxmox.enableProxmox).toBe(true);
-    expect(JSON.stringify(proxmox)).toContain("pve.d4.example");
-
-    expect(
-      await settings(booted, "remote-desktop", `host/${HOSTS.desktop}`),
-    ).toMatchObject({
-      enableRdp: true,
-      enableVnc: true,
-      enableTelnet: true,
-      rdpPort: 3390,
-      vncPort: 5901,
-      telnetPort: 2323,
-    });
-    expect(
-      await settings(booted, "remote-desktop", `host/${HOSTS.rdpOnly}`),
-    ).toMatchObject({ enableRdp: true });
-
-    expect(
-      await settings(booted, "vault", `host/${HOSTS.vault}`),
-    ).toMatchObject({ profileId: 1 });
-    expect(
-      await settings(booted, "warpgate", `host/${HOSTS.warpgate}`),
-    ).toMatchObject({ useWarpgate: true });
-  });
-
-  it("keeps 2.8's defaults on a host that never changed them", async () => {
-    const booted = current();
-    const host = (id: string) => settings(booted, id, `host/${HOSTS.plain}`);
-    expect(await host("file-manager")).toMatchObject({
-      enableFileManager: true,
-    });
-    expect(await host("ssh-terminal")).toMatchObject({
-      enableTerminal: true,
-      enableCommandHistory: true,
-      enableTerminalToolbar: true,
-      inheritAppearance: true,
-      autoTmux: false,
-      passwordPromptAutoFill: true,
-    });
-    expect(await host("session-recording")).toMatchObject({
-      enableSessionRecording: true,
-    });
-    expect(await host("session-sharing")).toMatchObject({
-      allowSessionSharing: true,
-    });
-    expect(await host("docker")).toMatchObject({ enableDocker: false });
-    expect(await host("tmux-monitor")).toMatchObject({
-      enableTmuxMonitor: false,
-    });
-  });
-
-  it("keeps each host's connection and secrets", async () => {
-    const { selectRows } =
-      await import("../../utils/crypto-migration/raw-rows.js");
-    const hosts = await selectRows<{
-      id: number;
-      auth_type: string;
-      enable_ssh: unknown;
-    }>(sql`SELECT id, auth_type, enable_ssh FROM ssh_data ORDER BY id`);
-    const byId = new Map(hosts.map((row) => [row.id, row]));
-    for (const [id, authType] of Object.entries(HOST_AUTH_TYPES)) {
-      // Warpgate became a plugin setting on a host with no SSH auth of its own.
-      const want = authType === "warpgate" ? "none" : authType;
-      expect(byId.get(Number(id))?.auth_type, `host ${id}`).toBe(want);
-    }
-    expect(Number(byId.get(HOSTS.rdpOnly)?.enable_ssh)).toBe(0);
-
-    // The connection options in terminal_config moved to core's ssh_options.
-    const [options] = await selectRows<{ ssh_options: string | null }>(
-      sql`SELECT ssh_options FROM ssh_data WHERE id = ${HOSTS.password}`,
-    );
-    expect(JSON.parse(options.ssh_options ?? "{}")).toEqual({
-      keepaliveInterval: 30,
-      keepaliveCountMax: 4,
-      allowLegacyAlgorithms: false,
-      agentForwarding: true,
-      environmentVariables: [{ key: "D4", value: "yes" }],
-    });
-
-    // Every 2.8 RDP, VNC and Telnet login reads back through
-    // host_protocol_auth, the only place core reads them from now.
-    const ctx = await pluginCtx("remote-desktop");
-    const resolve = (hostId: number, protocol: string) =>
-      asUser(USERS.admin, () =>
-        ctx.credentials.resolveHostProtocol(hostId, protocol),
-      );
-    expect((await resolve(HOSTS.rdpOnly, "rdp"))?.auth).toMatchObject({
-      authType: "direct",
-      username: "d4-rdp-user",
-      password: "d4-rdp-password",
-    });
-    expect((await resolve(HOSTS.desktop, "rdp"))?.auth).toEqual({
-      authType: "direct",
-      username: "d4-rdp-user",
-      password: "d4-rdp-password",
-      fields: { domain: "D4-DOMAIN" },
-    });
-    expect((await resolve(HOSTS.desktop, "vnc"))?.auth).toMatchObject({
-      authType: "direct",
-      username: "d4-vnc-user",
-      password: "d4-vnc-password",
-    });
-    expect((await resolve(HOSTS.desktop, "telnet"))?.auth).toMatchObject({
-      authType: "credential",
-      username: "deploy",
-    });
-
-    const logins = await selectRows<{ host_id: number; protocol: string }>(
-      sql`SELECT host_id, protocol FROM host_protocol_auth ORDER BY host_id, protocol`,
-    );
-    expect(
-      logins.map((row) => `${Number(row.host_id)}:${row.protocol}`),
-    ).toEqual([
-      `${HOSTS.rdpOnly}:rdp`,
-      `${HOSTS.desktop}:rdp`,
-      `${HOSTS.desktop}:telnet`,
-      `${HOSTS.desktop}:vnc`,
-    ]);
-  });
-
-  it("registers an SSH auth provider for every 2.8 auth type", async () => {
-    const { listSshAuthProviders } =
-      await import("../../hosts/connect/auth-provider-registry.js");
-    const types = new Set(listSshAuthProviders().map((p) => p.type));
-    for (const authType of new Set(Object.values(HOST_AUTH_TYPES))) {
-      if (authType === "warpgate") continue;
-      expect(types, authType).toContain(authType);
-    }
-  });
-
-  it("plays back every 2.8 recording", async () => {
-    const booted = current();
-    const list = await get(booted, "/plugin-api/session-recording/");
-    expect(
-      (list.body.logs as Array<{ id: number }>).map((log) => log.id).sort(),
-    ).toEqual([1, 2]);
-    for (const [id, kind] of [
-      [1, "ssh"],
-      [2, "rdp"],
-    ] as const) {
-      const content = await get(
-        booted,
-        `/plugin-api/session-recording/${id}/content`,
-      )
-        .buffer(true)
-        .parse((res, done) => {
-          let text = "";
-          res.on("data", (chunk: Buffer) => (text += chunk.toString()));
-          res.on("end", () => done(null, text));
-        });
-      expect(content.status, `recording ${id}`).toBe(200);
-      expect(content.body).toContain(`d4 ${kind} recording`);
-    }
-  });
-
-  it("puts every moved setting in its plugin's admin and user scope", async () => {
-    const booted = current();
-    expect(await settings(booted, "ssh-terminal", "admin")).toMatchObject({
-      sessionTimeoutMinutes: 45,
-      sessionPersistence: false,
-      commandHistoryForNewHosts: false,
-      imageMaxCount: 7,
-      newHostFontSize: 20,
-      newHostTheme: "nord",
-      newHostAutoTmux: true,
-    });
-    expect(await settings(booted, "ssh-terminal", "user")).toMatchObject({
-      terminalDefaults: { fontSize: 18, cursorBlink: false },
-      customThemes: [expect.objectContaining({ id: "d4-theme" })],
-      commandAutocomplete: true,
-      macros: [expect.objectContaining({ id: "d4-macro", name: "d4 macro" })],
-    });
-    expect(await settings(booted, "snippets", "user")).toMatchObject({
-      confirmExecution: true,
-      foldersCollapsed: false,
-    });
-    expect(await settings(booted, "step-ca", "admin")).toMatchObject({
-      caUrl: "https://ca.d4.example",
-      fingerprint: "d4fingerprint",
-      provisioner: "d4-provisioner",
-    });
-    expect(await settings(booted, "remote-desktop", "admin")).toMatchObject({
-      enabled: true,
-      guacdUrl: "guacd.d4.example:4822",
-    });
-    expect(await settings(booted, "host-metrics", "admin")).toMatchObject({
-      metricsInterval: 40,
-      historyRetentionDays: 14,
-      enabledForNewHosts: false,
-    });
-    expect(await settings(booted, "ai", "admin")).toMatchObject({
-      globallyEnabled: true,
-    });
-    expect(await settings(booted, "session-recording", "admin")).toMatchObject({
-      retentionDays: 3650,
-    });
-    expect(
-      JSON.stringify((await settings(booted, "ai", "admin")).privateEndpoints),
-    ).toContain("10.4.0.0/24");
-    expect(await settings(booted, "session-sharing", "admin")).toMatchObject({
-      globallyEnabled: false,
-    });
-    expect(await settings(booted, "telemetry", "admin")).toMatchObject({
-      enabled: false,
-      instanceId: "d4-instance-id",
-    });
-    expect(await settings(booted, "acme-ssl", "admin")).toMatchObject({
-      domain: "termix.d4.example",
-      email: "d4@example.com",
-    });
-    expect(await settings(booted, "tailscale", "admin")).toMatchObject({
-      apiBaseUrl: "https://headscale.d4.example",
-    });
-    expect(await settings(booted, "ai", "user")).toMatchObject({
-      enabled: true,
-      allowReadOnlyCommands: true,
-    });
-    expect(await settings(booted, "remote-desktop", "user")).toMatchObject({
-      colorDepth: "16",
-      resizeMethod: "reconnect",
-      enableDrive: "on",
-    });
-  });
-
-  it("keeps every secret readable by the plugin that owns it", async () => {
-    const tailscale = await pluginCtx("tailscale");
-    expect(await tailscale.settings.get("apiKey")).toBe("tskey-d4");
-    const acme = await pluginCtx("acme-ssl");
-    expect(JSON.stringify(await acme.settings.getAll("admin"))).toContain(
-      "d4-cloudflare-token",
-    );
-    const ai = await pluginCtx("ai");
-    expect(await asUser(USERS.admin, () => ai.secrets.get("provider:1"))).toBe(
-      "sk-d4-provider-key",
-    );
-    const sources = await pluginCtx("secret-sources");
-    expect(
-      await asUser(USERS.admin, () => sources.secrets.get("source:d4-source")),
-    ).toBe("d4-source-token");
-  });
-
-  it("moves every notification channel into alerts, config readable", async () => {
-    const response = await get(current(), "/plugin-api/alerts/channels/1");
-    expect(response.status).toBe(200);
-    expect(response.body).toMatchObject({
-      name: "d4-channel",
-      type: "ntfy",
-      usable: true,
-      config: { url: "https://ntfy.d4.example/d4" },
-    });
-  });
-
-  it("keeps every role's permissions", async () => {
-    const { PermissionManager } =
-      await import("../../utils/permission-manager.js");
-    const permissions = PermissionManager.getInstance();
-    for (const permission of OPERATORS_PERMISSIONS) {
-      expect(
-        await permissions.hasPermission(USERS.alice, permission),
-        `operators: ${permission}`,
-      ).toBe(true);
-    }
-    for (const permission of USER_ROLE_PERMISSIONS_28) {
-      expect(
-        await permissions.hasPermission(USERS.passkey, permission),
-        `user: ${permission}`,
-      ).toBe(true);
-    }
-    expect(await permissions.hasPermission(USERS.admin, "sso.manage")).toBe(
-      true,
-    );
-  });
-
-  it("still asks a 2.8 TOTP user for a code, and accepts one", async () => {
-    const booted = current();
-    const login = await request(booted.app)
-      .post("/users/login")
-      .send({ username: "d4-totp", password: FIXTURE_PASSWORD });
-    expect(login.status).toBe(200);
-    expect(login.body.requires_totp).toBe(true);
-    expect(JSON.stringify(login.body.second_factors)).toContain("totp");
-
-    const wrong = await request(booted.app)
-      .post("/users/totp/verify-login")
-      .send({ temp_token: login.body.temp_token, totp_code: "000000" });
-    expect(wrong.status).not.toBe(200);
-
-    const verify = await request(booted.app)
-      .post("/users/totp/verify-login")
-      .send({
-        temp_token: login.body.temp_token,
-        totp_code: totpCode(TOTP_SECRET),
-      });
-    expect(verify.status).toBe(200);
-
-    const again = await request(booted.app)
-      .post("/users/login")
-      .send({ username: "d4-totp", password: FIXTURE_PASSWORD });
-    const backup = await request(booted.app)
-      .post("/users/totp/verify-login")
-      .send({
-        temp_token: again.body.temp_token,
-        totp_code: TOTP_BACKUP_CODES[bootIndex],
-      });
-    expect(backup.status).toBe(200);
-  });
-
-  it("signs a password user without a second factor straight in", async () => {
-    const login = await request(current().app)
-      .post("/users/login")
-      .send({ username: "d4-alice", password: FIXTURE_PASSWORD });
-    expect(login.status).toBe(200);
-    expect(login.body.requires_totp).toBeFalsy();
-  });
-
-  it("links SSO and LDAP users to their providers", async () => {
-    const { selectRows } =
-      await import("../../utils/crypto-migration/raw-rows.js");
-    const links = await selectRows<{
-      user_id: string;
-      provider_id: unknown;
-    }>(sql`SELECT user_id, provider_id FROM user_external_identities`);
-    const byUser = new Map(
-      links.map((row) => [row.user_id, String(row.provider_id)]),
-    );
-    expect(byUser.get(USERS.sso)).toBe(String(SSO_PROVIDER_ID));
-    // The ldap plugin signs in with "ldap:<provider>".
-    expect(byUser.get(USERS.ldap)).toBe(`ldap:${LDAP_PROVIDER_ID}`);
-  });
-
-  it("syncs every entity type 2.8 synced, under the same name", async () => {
-    const { listEntityTypes } = await import("../../plugins/sync-registry.js");
-    const { registerCoreSyncEntities } = await import("../../sync/entities.js");
-    registerCoreSyncEntities();
-    const known = new Set(listEntityTypes());
-    for (const type of SYNCED_ENTITY_TYPES_28) {
-      expect(known, type).toContain(type);
-    }
-
-    const snippets = await pluginRows("snippets", "p_snippets_snippets");
-    expect(snippets.map((row) => row.sync_id)).toContain("d4-sync-snippet");
-    const vault = await pluginRows("vault", "p_vault_profiles");
-    expect(vault.map((row) => row.sync_id)).toContain("d4-sync-vault");
-  });
-}
-
-let first: Booted;
-let firstCounts: Record<string, number>;
-let second: Booted;
-
-beforeAll(async () => {
-  assertPluginsBuilt();
-  first = await boot();
-}, BOOT_TIMEOUT);
-
-afterAll(async () => {
-  await (second ?? first)?.core.shutdown();
-}, BOOT_TIMEOUT);
-
-describe("a 2.8 install upgraded to 2.9.0", () => {
-  // Only SQLite is backed up by Termix; a server database is the operator's.
-  it.skipIf(remoteTestDialect())(
-    "backed up the 2.8 database before anything touched it",
-    async () => {
-      const backups = path.join(first.core.dataDir, "backups");
-      const dirs = fs
-        .readdirSync(backups)
-        .filter((name) => name.startsWith("pre-plugin-runtime-"));
-      expect(dirs).toHaveLength(1);
-      const copy = fs.readFileSync(path.join(backups, dirs[0], "db.sqlite"));
-      expect(copy.equals(first.core.seed!)).toBe(true);
-    },
-  );
-
-  upgradeChecks(() => first, 0);
-});
-
-describe("booting the upgraded install again", () => {
-  beforeAll(async () => {
-    firstCounts = await counts();
-    const dataDir = first.core.dataDir;
-    await first.core.shutdown({ keepDataDir: true });
-    second = await boot(dataDir);
-  }, BOOT_TIMEOUT);
-
-  it("changes nothing", async () => {
-    expect(await counts()).toEqual(firstCounts);
-  });
-
-  it.skipIf(remoteTestDialect())("takes no second backup", () => {
-    const backups = fs.readdirSync(path.join(second.core.dataDir, "backups"));
-    expect(
-      backups.filter((name) => name.startsWith("pre-plugin-runtime-")),
-    ).toHaveLength(1);
-  });
-
-  upgradeChecks(() => second, 1);
-});
diff --git a/src/backend/tests/plugins/user-data.test.ts b/src/backend/tests/plugins/user-data.test.ts
index d93bea668..66d0b135c 100644
--- a/src/backend/tests/plugins/user-data.test.ts
+++ b/src/backend/tests/plugins/user-data.test.ts
@@ -15,7 +15,7 @@ import {
   refUser,
   text,
   varchar,
-} from "@termix/plugin-sdk/db";
+} from "@termix-ssh/plugin-sdk/db";
 
 let sqlite: Database.Database;
 
@@ -117,6 +117,44 @@ describe("plugin user data", () => {
     expect(again).toMatchObject({ imported: 0, skipped: 1 });
   });
 
+  it("exports and imports a table keyed by its user column", async () => {
+    const keyed = defineTable("keyed", {
+      userId: refUser().primaryKey(),
+      secret: encryptedText(),
+      label: text(),
+    });
+    for (const statement of createTableSql("sqlite", "fixture", keyed)) {
+      sqlite.exec(statement);
+    }
+    registerTable("fixture", keyed);
+    sqlite.exec(
+      "INSERT INTO p_fixture_keyed (user_id, secret, label) VALUES ('u1', 'sealed', 'mine')",
+    );
+
+    const file = new Database(":memory:");
+    file.exec("CREATE TABLE users (id TEXT PRIMARY KEY)");
+    file.exec("CREATE TABLE ssh_data (id INTEGER PRIMARY KEY)");
+    file.exec("INSERT INTO users (id) VALUES ('u1')");
+    await writeUserPluginTables(file, "u1");
+    expect(file.prepare("SELECT * FROM p_fixture_keyed").all()).toEqual([
+      { user_id: "u1", secret: null, label: "mine" },
+    ]);
+
+    const result = await importUserPluginRows(file, "u2");
+    expect(result.errors).toEqual([]);
+    expect(
+      sqlite
+        .prepare(
+          "SELECT user_id, label FROM p_fixture_keyed WHERE user_id = 'u2'",
+        )
+        .all(),
+    ).toEqual([{ user_id: "u2", label: "mine" }]);
+    // The user already has their one row, so a second import skips it.
+    expect(await importUserPluginRows(file, "u2")).toMatchObject({
+      errors: [],
+    });
+  });
+
   it("writes large tables in chunks and lets the event loop run between them", async () => {
     const insert = sqlite.prepare(
       "INSERT INTO p_fixture_bookmark (user_id, path) VALUES ('u1', ?)",
diff --git a/src/backend/tests/plugins/ws.test.ts b/src/backend/tests/plugins/ws.test.ts
index ea3a2275b..13c21522c 100644
--- a/src/backend/tests/plugins/ws.test.ts
+++ b/src/backend/tests/plugins/ws.test.ts
@@ -14,6 +14,7 @@ import { WebSocket } from "ws";
 
 const state = vi.hoisted(() => ({
   validToken: "valid-token",
+  ticket: "socket-ticket",
   userId: "user-1",
   granted: new Set<string>(["network:serve"]),
 }));
@@ -31,8 +32,14 @@ vi.mock("../../utils/logger.js", () => ({
 vi.mock("../../utils/auth-manager.js", () => ({
   AuthManager: {
     getInstance: () => ({
-      verifyJWTToken: async (token: string) =>
-        token === state.validToken ? { userId: state.userId } : null,
+      verifyJWTToken: async (
+        token: string,
+        options: { allowSocketTicket?: boolean } = {},
+      ) =>
+        token === state.validToken ||
+        (token === state.ticket && options.allowSocketTicket)
+          ? { userId: state.userId }
+          : null,
     }),
   },
 }));
@@ -91,6 +98,21 @@ function connect(
   });
 }
 
+function connectWithHeaders(
+  url: string,
+  headers: Record<string, string>,
+  protocols: string[] = [],
+): Promise<{ outcome: "open"; socket: WebSocket } | { outcome: number }> {
+  return new Promise((resolve) => {
+    const socket = new WebSocket(url, protocols, { headers });
+    socket.once("open", () => resolve({ outcome: "open", socket }));
+    socket.once("unexpected-response", (_req, res) =>
+      resolve({ outcome: res.statusCode ?? 0 }),
+    );
+    socket.once("error", () => resolve({ outcome: 0 }));
+  });
+}
+
 function authProtocols(token: string): string[] {
   return [`termix.jwt.${token}`];
 }
@@ -159,6 +181,78 @@ describe("ctx.ws routing", () => {
 });
 
 describe("ctx.ws authentication", () => {
+  it("ignores the jwt cookie on an upgrade from another site", async () => {
+    ws.registerPluginWsRoute("sample-plugin", "/socket", () => {}, DECLARED);
+
+    const base = await startServer();
+    const result = await connectWithHeaders(
+      `${base}/plugin-ws/sample-plugin/socket`,
+      { Cookie: `jwt=${state.validToken}`, Origin: "https://evil.example" },
+    );
+
+    expect(result.outcome).toBe(401);
+  });
+
+  it("accepts the jwt cookie from this server's own page", async () => {
+    ws.registerPluginWsRoute("sample-plugin", "/socket", () => {}, DECLARED);
+
+    const base = await startServer();
+    const result = await connectWithHeaders(
+      `${base}/plugin-ws/sample-plugin/socket`,
+      {
+        Cookie: `jwt=${state.validToken}`,
+        Origin: base.replace(/^ws:/, "http:"),
+      },
+    );
+
+    expect(result.outcome).toBe("open");
+    if (result.outcome === "open") result.socket.close();
+  });
+
+  it("hides cross-site cookies from a public socket's handler", async () => {
+    const cookies: Array<string | undefined> = [];
+    const users: string[] = [];
+    ws.registerPluginWsRoute(
+      "sample-plugin",
+      "/public",
+      ({ request, userId, socket }) => {
+        cookies.push(request.headers.cookie);
+        users.push(userId);
+        (socket as WebSocket).close();
+      },
+      DECLARED,
+      { public: true, optionalAuth: true },
+    );
+
+    const base = await startServer();
+    const result = await connectWithHeaders(
+      `${base}/plugin-ws/sample-plugin/public`,
+      { Cookie: `jwt=${state.validToken}`, Origin: "https://evil.example" },
+    );
+
+    expect(result.outcome).toBe("open");
+    await vi.waitFor(() => expect(users).toHaveLength(1));
+    expect(users).toEqual([""]);
+    expect(cookies).toEqual([undefined]);
+  });
+
+  it("accepts a socket ticket when the proxy hid the page's origin", async () => {
+    ws.registerPluginWsRoute("sample-plugin", "/socket", () => {}, DECLARED);
+
+    const base = await startServer();
+    const result = await connectWithHeaders(
+      `${base}/plugin-ws/sample-plugin/socket`,
+      {
+        Cookie: `jwt=${state.validToken}`,
+        Origin: "https://termix.example.com",
+      },
+      authProtocols(state.ticket),
+    );
+
+    expect(result.outcome).toBe("open");
+    if (result.outcome === "open") result.socket.close();
+  });
+
   it("rejects an upgrade with no token", async () => {
     ws.registerPluginWsRoute("sample-plugin", "/socket", () => {}, DECLARED);
 
diff --git a/src/backend/tests/sync/client/plugins.test.ts b/src/backend/tests/sync/client/plugins.test.ts
new file mode 100644
index 000000000..dc442b16d
--- /dev/null
+++ b/src/backend/tests/sync/client/plugins.test.ts
@@ -0,0 +1,157 @@
+import fs from "fs";
+import os from "os";
+import path from "path";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+
+const state = vi.hoisted(() => ({
+  dir: "",
+  loaded: new Map<string, Record<string, unknown>>(),
+  enabled: new Set<string>(),
+  install: vi.fn(),
+  fetch: vi.fn(),
+  loadBundled: vi.fn(),
+}));
+
+vi.mock("../../../utils/logger.js", () => ({
+  syncLogger: { warn: vi.fn(), info: vi.fn(), error: vi.fn() },
+}));
+vi.mock("../../../notify/core-notify.js", () => ({
+  sendCoreAlert: vi.fn(async () => {}),
+}));
+vi.mock("../../../plugins/paths.js", () => ({
+  getPluginsDir: () => state.dir,
+}));
+vi.mock("../../../database/repositories/factory.js", () => ({
+  createCurrentPluginRepository: () => ({
+    findById: async (id: string) => ({
+      state: state.enabled.has(id) ? "enabled" : "disabled",
+    }),
+  }),
+  createCurrentPluginPermissionGrantRepository: () => ({}),
+}));
+vi.mock("../../../sync/client/http.js", () => ({
+  remoteFetch: state.fetch,
+  remoteJson: vi.fn(),
+}));
+vi.mock("../../../plugins/index.js", () => ({
+  getPluginRuntime: () => ({
+    loader: {
+      get: (id: string) => state.loaded.get(id),
+      list: () => [...state.loaded.values()],
+      loadBundled: state.loadBundled,
+    },
+  }),
+  installPluginArtifact: state.install,
+  registerLoadedPlugins: vi.fn(async () => {}),
+  setPluginEnabled: vi.fn(async (id: string, on: boolean) => {
+    if (on) state.enabled.add(id);
+    else state.enabled.delete(id);
+  }),
+  unloadPlugin: vi.fn(async (id: string) => {
+    state.loaded.delete(id);
+  }),
+}));
+
+const { mirrorPlugins } = await import("../../../sync/client/plugins.js");
+const { remoteJson } = await import("../../../sync/client/http.js");
+
+const bundled = {
+  id: "ssh-terminal",
+  source: "bundled",
+  state: "active",
+  manifest: { id: "ssh-terminal", version: "1.0.0", capabilities: [] },
+};
+
+function serverHas(version: string) {
+  vi.mocked(remoteJson).mockResolvedValue({
+    plugins: [
+      {
+        id: "ssh-terminal",
+        name: "SSH Terminal",
+        version,
+        source: "bundled",
+        artifact: true,
+        enabled: true,
+        active: true,
+        desktop: "mirror",
+        syncEntities: [],
+        granted: [],
+      },
+    ],
+  });
+}
+
+beforeEach(() => {
+  state.dir = fs.mkdtempSync(path.join(os.tmpdir(), "termix-mirror-"));
+  state.loaded = new Map([["ssh-terminal", { ...bundled }]]);
+  state.enabled = new Set(["ssh-terminal"]);
+  state.install.mockReset();
+  state.fetch.mockReset();
+  state.loadBundled.mockReset();
+  state.loadBundled.mockImplementation(async (id: string) => {
+    const plugin = { ...bundled, id };
+    state.loaded.set(id, plugin);
+    return plugin;
+  });
+});
+
+afterEach(() => {
+  fs.rmSync(state.dir, { recursive: true, force: true });
+});
+
+describe("mirrorPlugins", () => {
+  it("keeps the installed copy when the download fails", async () => {
+    serverHas("1.1.0");
+    state.fetch.mockResolvedValue({ ok: false, status: 502 });
+
+    await mirrorPlugins({} as never);
+
+    expect(state.loaded.has("ssh-terminal")).toBe(true);
+    expect(state.enabled.has("ssh-terminal")).toBe(true);
+    expect(state.install).not.toHaveBeenCalled();
+  });
+
+  it("puts the shipped copy back when the new one fails to install", async () => {
+    serverHas("1.1.0");
+    state.fetch.mockResolvedValue({
+      ok: true,
+      arrayBuffer: async () => new ArrayBuffer(4),
+      headers: new Headers(),
+    });
+    state.install.mockRejectedValue(new Error("signature check failed"));
+
+    await mirrorPlugins({} as never);
+
+    expect(state.loadBundled).toHaveBeenCalledWith("ssh-terminal");
+    expect(state.loaded.has("ssh-terminal")).toBe(true);
+    expect(state.enabled.has("ssh-terminal")).toBe(true);
+    expect(fs.existsSync(path.join(state.dir, "ssh-terminal.tmxplug"))).toBe(
+      false,
+    );
+  });
+
+  it("restores an earlier update file when a newer one fails", async () => {
+    serverHas("1.2.0");
+    const file = path.join(state.dir, "ssh-terminal.tmxplug");
+    fs.writeFileSync(file, "old");
+    state.fetch.mockResolvedValue({
+      ok: true,
+      arrayBuffer: async () => new ArrayBuffer(4),
+      headers: new Headers(),
+    });
+    state.install
+      .mockRejectedValueOnce(new Error("bad archive"))
+      .mockImplementationOnce(async () => {
+        const plugin = { ...bundled };
+        state.loaded.set("ssh-terminal", plugin);
+        return plugin;
+      });
+
+    await mirrorPlugins({} as never);
+
+    expect(fs.readFileSync(file, "utf8")).toBe("old");
+    expect(state.install).toHaveBeenCalledTimes(2);
+    expect(state.loaded.has("ssh-terminal")).toBe(true);
+    expect(state.enabled.has("ssh-terminal")).toBe(true);
+  });
+});
diff --git a/src/backend/tests/sync/entity-labels.test.ts b/src/backend/tests/sync/entity-labels.test.ts
new file mode 100644
index 000000000..b59a1f491
--- /dev/null
+++ b/src/backend/tests/sync/entity-labels.test.ts
@@ -0,0 +1,26 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import fs from "node:fs";
+
+vi.mock("../../database/db/index.js", () => ({}));
+
+import { registerCoreSyncEntities } from "../../sync/entities.js";
+import {
+  listEntityTypes,
+  resetSyncRegistry,
+} from "../../plugins/sync-registry.js";
+
+afterEach(() => resetSyncRegistry());
+
+describe("core sync entities", () => {
+  it("each has a label in the Sync panel", () => {
+    registerCoreSyncEntities();
+    const en = JSON.parse(
+      fs.readFileSync(
+        new URL("../../../ui/locales/en.json", import.meta.url),
+        "utf8",
+      ),
+    );
+    const missing = listEntityTypes().filter((type) => !en.sync.entities[type]);
+    expect(missing).toEqual([]);
+  });
+});
diff --git a/src/backend/tests/sync/host-plugin-settings.test.ts b/src/backend/tests/sync/host-plugin-settings.test.ts
index 424d94574..ddfeb5a06 100644
--- a/src/backend/tests/sync/host-plugin-settings.test.ts
+++ b/src/backend/tests/sync/host-plugin-settings.test.ts
@@ -4,7 +4,7 @@
  */
 
 import { beforeEach, describe, expect, it, vi } from "vitest";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 
 const h = vi.hoisted(() => ({
   stored: new Map<string, unknown>(),
diff --git a/src/backend/tests/sync/server/host-lookup.test.ts b/src/backend/tests/sync/server/host-lookup.test.ts
new file mode 100644
index 000000000..f410f6d0f
--- /dev/null
+++ b/src/backend/tests/sync/server/host-lookup.test.ts
@@ -0,0 +1,74 @@
+import { beforeEach, expect, it, vi } from "vitest";
+
+const { findHostIdBySyncId, canAccessHost } = vi.hoisted(() => ({
+  findHostIdBySyncId: vi.fn(),
+  canAccessHost: vi.fn(),
+}));
+vi.mock("../../../utils/auth-manager.js", () => ({
+  AuthManager: { getInstance: () => ({ createAuthMiddleware: () => vi.fn() }) },
+}));
+vi.mock("../../../utils/logger.js", () => ({ syncLogger: { error: vi.fn() } }));
+vi.mock("../../../utils/app-version.js", () => ({ getLocalVersion: vi.fn() }));
+vi.mock("../../../plugins/index.js", () => ({ getPluginRuntime: vi.fn() }));
+vi.mock("../../../database/repositories/factory.js", () => ({
+  createCurrentHostResolutionRepository: () => ({ findHostIdBySyncId }),
+  createCurrentHostRepository: () => ({
+    findById: async () => ({ name: "Shared host" }),
+  }),
+}));
+vi.mock("../../../utils/permission-manager.js", () => ({
+  PermissionManager: { getInstance: () => ({ canAccessHost }) },
+}));
+vi.mock("../../../sync/entities.js", () => ({
+  registerCoreSyncEntities: vi.fn(),
+}));
+vi.mock("../../../sync/records.js", () => ({}));
+vi.mock("../../../sync/server/feed.js", () => ({}));
+vi.mock("../../../sync/server/push.js", () => ({}));
+vi.mock("../../../database/routes/branding-settings.js", () => ({}));
+
+import router from "../../../sync/server/routes.js";
+
+const route = router.stack.find(
+  (layer) => layer.route?.path === "/v2/hosts/:syncId",
+)!.route!;
+const handler = route.stack[route.stack.length - 1].handle;
+
+beforeEach(() => {
+  vi.clearAllMocks();
+  findHostIdBySyncId.mockResolvedValue(41);
+  canAccessHost.mockImplementation(async (_user, _host, action) => ({
+    hasAccess: action === "connect",
+  }));
+});
+
+async function lookup() {
+  const res = { status: vi.fn().mockReturnThis(), json: vi.fn() };
+  await handler(
+    { userId: "recipient", params: { syncId: "host-sync-id" } } as never,
+    res as never,
+    vi.fn(),
+  );
+  return res;
+}
+
+it("resolves the server ID for a connect-only recipient", async () => {
+  const res = await lookup();
+  expect(findHostIdBySyncId).toHaveBeenCalledWith("host-sync-id");
+  expect(canAccessHost).toHaveBeenCalledWith("recipient", 41, "connect");
+  expect(res.json).toHaveBeenCalledWith({ id: 41, name: "Shared host" });
+});
+
+it("does not disclose a host the caller cannot connect to", async () => {
+  canAccessHost.mockResolvedValue({ hasAccess: false });
+  const res = await lookup();
+  expect(res.status).toHaveBeenCalledWith(404);
+  expect(res.json).toHaveBeenCalledWith({ error: "Not found" });
+});
+
+it("returns 404 for a missing sync ID", async () => {
+  findHostIdBySyncId.mockResolvedValue(null);
+  const res = await lookup();
+  expect(res.status).toHaveBeenCalledWith(404);
+  expect(canAccessHost).not.toHaveBeenCalled();
+});
diff --git a/src/backend/tests/updates/desktop-update-check.test.ts b/src/backend/tests/updates/desktop-update-check.test.ts
index 517cb3419..fcd057602 100644
--- a/src/backend/tests/updates/desktop-update-check.test.ts
+++ b/src/backend/tests/updates/desktop-update-check.test.ts
@@ -2,8 +2,9 @@ import { beforeEach, describe, expect, it, vi } from "vitest";
 
 const sendCoreAlert = vi.hoisted(() => vi.fn(async () => {}));
 const latest = vi.hoisted(() => ({
-  value: null as null | { version: string; url: string },
+  value: null as null | { version: string; url: string; prerelease?: boolean },
 }));
+const channel = vi.hoisted(() => ({ value: "stable", asked: [] as string[] }));
 const version = vi.hoisted(() => ({ value: "2.9.0" as string | null }));
 const disabled = vi.hoisted(() => ({ value: false }));
 
@@ -13,7 +14,13 @@ vi.mock("../../utils/app-version.js", () => ({
 }));
 vi.mock("../../utils/latest-release.js", async (importOriginal) => ({
   ...(await importOriginal<typeof import("../../utils/latest-release.js")>()),
-  fetchLatestRelease: async () => latest.value,
+  fetchLatestRelease: async (wanted: string) => {
+    channel.asked.push(wanted);
+    return latest.value;
+  },
+}));
+vi.mock("../../updates/update-channel.js", () => ({
+  getCoreChannel: async () => channel.value,
 }));
 vi.mock("../../database/repositories/factory.js", () => ({
   createCurrentUserRepository: () => ({
@@ -31,6 +38,8 @@ beforeEach(() => {
   sendCoreAlert.mockClear();
   version.value = "2.9.0";
   disabled.value = false;
+  channel.value = "stable";
+  channel.asked = [];
   latest.value = {
     version: "2.9.1",
     url: "https://github.com/Termix-SSH/Termix/releases/tag/v2.9.1",
@@ -53,11 +62,36 @@ describe("desktop update check", () => {
   it("stays quiet when up to date, ahead, or turned off", async () => {
     version.value = "2.9.1";
     await checkForDesktopUpdate();
-    version.value = "3.0.0";
+    version.value = "26.10.0";
     await checkForDesktopUpdate();
     version.value = "2.9.0";
     disabled.value = true;
     await checkForDesktopUpdate();
     expect(sendCoreAlert).not.toHaveBeenCalled();
   });
+
+  it("follows the beta channel", async () => {
+    channel.value = "beta";
+    latest.value = {
+      version: "2.9.1-beta.2",
+      url: "https://github.com/Termix-SSH/Termix/releases/tag/v2.9.1-beta.2",
+      prerelease: true,
+    };
+    await checkForDesktopUpdate();
+    expect(channel.asked).toEqual(["beta"]);
+    expect(sendCoreAlert).toHaveBeenCalledWith(
+      expect.objectContaining({
+        title: "Termix 2.9.1-beta.2 is available",
+        dedupeKey: "update:2.9.1-beta.2",
+      }),
+    );
+  });
+
+  it("does not offer the matching stable as older than its own beta", async () => {
+    version.value = "2.9.1-beta.2";
+    await checkForDesktopUpdate();
+    expect(sendCoreAlert).toHaveBeenCalledWith(
+      expect.objectContaining({ dedupeKey: "update:2.9.1" }),
+    );
+  });
 });
diff --git a/src/backend/tests/upgrade/acme-ssl-settings-migration.test.ts b/src/backend/tests/upgrade/acme-ssl-settings-migration.test.ts
deleted file mode 100644
index 116359d1f..000000000
--- a/src/backend/tests/upgrade/acme-ssl-settings-migration.test.ts
+++ /dev/null
@@ -1,144 +0,0 @@
-/**
- * The ACME settings migration: a 2.8 acme_ssl_settings row comes through into
- * the acme-ssl plugin's admin settings, the Cloudflare token stays encrypted
- * and leaves the old row, and a second run changes nothing.
- */
-
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-const state = vi.hoisted(() => ({
-  legacy: {} as Record<string, string>,
-  pluginRows: [] as Array<{
-    key: string;
-    value: string | null;
-    encrypted: boolean;
-  }>,
-  pluginInstalled: true,
-}));
-
-vi.mock("../../database/repositories/factory.js", () => ({
-  createCurrentPluginRepository: () => ({
-    findById: async (id: string) =>
-      state.pluginInstalled && id === "acme-ssl" ? { id } : null,
-  }),
-  createCurrentSettingsRepository: () => ({
-    get: async (key: string) => state.legacy[key] ?? null,
-    set: async (key: string, value: string) => {
-      state.legacy[key] = value;
-    },
-  }),
-  createCurrentPluginSettingsRepository: () => ({
-    get: async (
-      _pluginId: string,
-      _scope: string,
-      _scopeId: string | null,
-      key: string,
-    ) => state.pluginRows.find((row) => row.key === key) ?? null,
-    set: async (
-      _pluginId: string,
-      _scope: string,
-      _scopeId: string | null,
-      key: string,
-      value: string | null,
-      encrypted = false,
-    ) => {
-      state.pluginRows = state.pluginRows.filter((row) => row.key !== key);
-      state.pluginRows.push({ key, value, encrypted });
-    },
-  }),
-}));
-
-vi.mock("../../utils/system-secret-crypto.js", () => ({
-  encryptSystemSecret: async (value: string) => `enc:${value}`,
-}));
-
-vi.mock("../../utils/logger.js", () => ({
-  databaseLogger: { info: vi.fn(), warn: vi.fn() },
-}));
-
-import { runAcmeSslSettingsMigration } from "../../upgrade/acme-ssl-settings-migration.js";
-
-const value = (key: string) => {
-  const row = state.pluginRows.find((candidate) => candidate.key === key);
-  return row?.value == null ? undefined : JSON.parse(row.value);
-};
-
-beforeEach(() => {
-  state.legacy = {
-    acme_ssl_settings: JSON.stringify({
-      enabled: true,
-      domain: "termix.example.com",
-      email: "admin@example.com",
-      challengeType: "dns-cloudflare",
-      cloudflareToken: "cf-token",
-      lastIssuedAt: "2026-01-01T00:00:00.000Z",
-    }),
-  };
-  state.pluginRows = [];
-  state.pluginInstalled = true;
-});
-
-describe("runAcmeSslSettingsMigration", () => {
-  it("moves every field and encrypts the token", async () => {
-    const result = await runAcmeSslSettingsMigration();
-    expect(result.moved.sort()).toEqual(
-      [
-        "autoRenew",
-        "challengeType",
-        "cloudflareToken",
-        "domain",
-        "email",
-      ].sort(),
-    );
-    expect(value("domain")).toBe("termix.example.com");
-    expect(value("email")).toBe("admin@example.com");
-    expect(value("challengeType")).toBe("dns-cloudflare");
-    expect(value("autoRenew")).toBe(true);
-    expect(value("cloudflareToken")).toBe("enc:cf-token");
-    expect(
-      state.pluginRows.find((row) => row.key === "cloudflareToken")?.encrypted,
-    ).toBe(true);
-
-    const left = JSON.parse(state.legacy.acme_ssl_settings);
-    expect(left.cloudflareToken).toBeUndefined();
-    expect(left.domain).toBe("termix.example.com");
-  });
-
-  it("maps the webroot challenge and turns renewal off for manual", async () => {
-    state.legacy.acme_ssl_settings = JSON.stringify({
-      enabled: true,
-      domain: "a.example",
-      email: "a@example.com",
-      challengeType: "http-webroot",
-    });
-    await runAcmeSslSettingsMigration();
-    expect(value("challengeType")).toBe("http-01");
-    expect(value("autoRenew")).toBe(true);
-
-    state.pluginRows = [];
-    state.legacy.acme_ssl_settings = JSON.stringify({
-      enabled: true,
-      challengeType: "manual",
-    });
-    await runAcmeSslSettingsMigration();
-    expect(value("autoRenew")).toBe(false);
-    expect(value("challengeType")).toBeUndefined();
-  });
-
-  it("changes nothing on a second run or over values already set", async () => {
-    await runAcmeSslSettingsMigration();
-    const snapshot = JSON.stringify(state.pluginRows);
-    const second = await runAcmeSslSettingsMigration();
-    expect(second.moved).toEqual([]);
-    expect(JSON.stringify(state.pluginRows)).toBe(snapshot);
-  });
-
-  it("does nothing before the plugin row exists or without a legacy row", async () => {
-    state.pluginInstalled = false;
-    expect((await runAcmeSslSettingsMigration()).moved).toEqual([]);
-    state.pluginInstalled = true;
-    state.legacy = {};
-    expect((await runAcmeSslSettingsMigration()).moved).toEqual([]);
-    expect(state.pluginRows).toEqual([]);
-  });
-});
diff --git a/src/backend/tests/upgrade/ai-settings-migration.test.ts b/src/backend/tests/upgrade/ai-settings-migration.test.ts
index 64136ca7d..aff881c2c 100644
--- a/src/backend/tests/upgrade/ai-settings-migration.test.ts
+++ b/src/backend/tests/upgrade/ai-settings-migration.test.ts
@@ -1,10 +1,8 @@
 /**
  * The AI settings migration.
  *
- * An upgrade must be lossless: the admin switch, the private endpoint list,
- * every user's opt-in, every host's switch and every provider key have to
- * reach the ai plugin, keys encrypted and gone from the table. Running it
- * twice must not duplicate or clobber anything.
+ * Every provider key has to reach the ai plugin, encrypted and gone from the
+ * table. Running it twice must not duplicate or clobber anything.
  */
 
 import { beforeEach, describe, expect, it, vi } from "vitest";
@@ -127,10 +125,7 @@ vi.mock("../../utils/logger.js", () => ({
   databaseLogger: { info: vi.fn(), warn: vi.fn() },
 }));
 
-import {
-  allowlistToText,
-  runAiSettingsMigration,
-} from "../../upgrade/ai-settings-migration.js";
+import { runAiSettingsMigration } from "../../upgrade/ai-settings-migration.js";
 
 const value = (scope: string, scopeId: string | null, key: string) => {
   const row = state.pluginRows.find(
@@ -167,30 +162,7 @@ beforeEach(() => {
   state.deks = new Set(["u1", "u2"]);
 });
 
-describe("allowlistToText", () => {
-  it("turns the stored JSON array into one host per line", () => {
-    expect(allowlistToText('[" a ", "", "b"]')).toBe("a\nb");
-    expect(allowlistToText("[]")).toBe("");
-    expect(allowlistToText("nope")).toBeNull();
-  });
-});
-
 describe("runAiSettingsMigration", () => {
-  it("moves admin, user and host settings", async () => {
-    await runAiSettingsMigration();
-
-    expect(value("admin", null, "globallyEnabled")).toBe(true);
-    expect(value("admin", null, "privateEndpoints")).toBe(
-      "localhost\nollama.lan",
-    );
-    expect(value("user", "u1", "enabled")).toBe(true);
-    expect(value("user", "u1", "allowReadOnlyCommands")).toBe(false);
-    // Never asked stays unset, which the plugin reads as not enabled.
-    expect(value("user", "u2", "enabled")).toBeUndefined();
-    expect(value("host", "5", "enableAiAssistant")).toBe(true);
-    expect(value("host", "6", "enableAiAssistant")).toBeUndefined();
-  });
-
   it("moves each provider key into its owner's secrets, encrypted, and clears the column", async () => {
     await runAiSettingsMigration();
 
@@ -235,18 +207,18 @@ describe("runAiSettingsMigration", () => {
     expect(JSON.stringify(state.pluginRows)).toBe(first);
   });
 
-  it("does not overwrite a value the plugin already has", async () => {
+  it("does not overwrite a key the plugin already has", async () => {
     state.pluginRows.push({
       pluginId: "ai",
-      scope: "admin",
-      scopeId: null,
-      key: "globallyEnabled",
-      value: "false",
-      encrypted: false,
+      scope: "secret",
+      scopeId: "u1",
+      key: "provider:3",
+      value: JSON.stringify("sysenc:kept"),
+      encrypted: true,
     });
     await runAiSettingsMigration();
 
-    expect(value("admin", null, "globallyEnabled")).toBe(false);
+    expect(value("secret", "u1", "provider:3")).toBe("sysenc:kept");
   });
 
   it("does nothing until the plugin row exists", async () => {
diff --git a/src/backend/tests/upgrade/docker-settings-migration.test.ts b/src/backend/tests/upgrade/docker-settings-migration.test.ts
deleted file mode 100644
index 4d26034bd..000000000
--- a/src/backend/tests/upgrade/docker-settings-migration.test.ts
+++ /dev/null
@@ -1,197 +0,0 @@
-/**
- * The Docker host settings migration.
- *
- * An upgrade must be lossless: every host with Docker on, and every host on
- * Podman, must come through into the docker plugin's host settings, whatever
- * shape the engine returned the flag in. Running it twice must not duplicate
- * or clobber what it moved.
- */
-
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-const state = vi.hoisted(() => ({
-  pluginRows: [] as Array<{
-    pluginId: string;
-    scope: string;
-    scopeId: string | null;
-    key: string;
-    value: string | null;
-  }>,
-  hostRows: [] as Array<Record<string, unknown>>,
-  pluginInstalled: true,
-  columnsGone: false,
-}));
-
-vi.mock("../../database/repositories/factory.js", () => ({
-  createCurrentPluginRepository: () => ({
-    findById: async (id: string) =>
-      state.pluginInstalled && id === "docker" ? { id } : null,
-  }),
-  createCurrentPluginSettingsRepository: () => ({
-    getAll: async (_pluginId: string, scope: string, scopeId: string | null) =>
-      state.pluginRows.filter(
-        (row) => row.scope === scope && row.scopeId === scopeId,
-      ),
-    set: async (
-      pluginId: string,
-      scope: string,
-      scopeId: string | null,
-      key: string,
-      value: string | null,
-    ) => {
-      const existing = state.pluginRows.find(
-        (row) =>
-          row.scope === scope && row.scopeId === scopeId && row.key === key,
-      );
-      if (existing) {
-        existing.value = value;
-        return;
-      }
-      state.pluginRows.push({ pluginId, scope, scopeId, key, value });
-    },
-  }),
-}));
-
-vi.mock("../../utils/crypto-migration/raw-rows.js", () => ({
-  selectRows: async () => {
-    if (state.columnsGone) throw new Error("no such column: enable_docker");
-    return state.hostRows;
-  },
-}));
-
-vi.mock("../../utils/logger.js", () => ({
-  databaseLogger: { info: vi.fn(), warn: vi.fn() },
-}));
-
-import {
-  dockerSettingsFromRow,
-  runDockerSettingsMigration,
-} from "../../upgrade/docker-settings-migration.js";
-
-const hostValues = (hostId: number) =>
-  Object.fromEntries(
-    state.pluginRows
-      .filter((row) => row.scope === "host" && row.scopeId === String(hostId))
-      .map((row) => [row.key, JSON.parse(row.value ?? "null")]),
-  );
-
-beforeEach(() => {
-  state.pluginRows = [];
-  state.hostRows = [];
-  state.pluginInstalled = true;
-  state.columnsGone = false;
-});
-
-describe("dockerSettingsFromRow", () => {
-  it("reads SQLite integers, real booleans and strings", () => {
-    expect(
-      dockerSettingsFromRow({ id: 1, enable_docker: 1, docker_config: null }),
-    ).toEqual({ enableDocker: true });
-    expect(
-      dockerSettingsFromRow({
-        id: 1,
-        enable_docker: true,
-        docker_config: null,
-      }),
-    ).toEqual({ enableDocker: true });
-    expect(
-      dockerSettingsFromRow({ id: 1, enable_docker: 0, docker_config: null }),
-    ).toEqual({});
-    expect(
-      dockerSettingsFromRow({
-        id: 1,
-        enable_docker: false,
-        docker_config: null,
-      }),
-    ).toEqual({});
-  });
-
-  it("keeps a Podman runtime and ignores the default or broken config", () => {
-    expect(
-      dockerSettingsFromRow({
-        id: 1,
-        enable_docker: 1,
-        docker_config: '{"runtime":"podman"}',
-      }),
-    ).toEqual({ enableDocker: true, containerRuntime: "podman" });
-    expect(
-      dockerSettingsFromRow({
-        id: 1,
-        enable_docker: 1,
-        docker_config: '{"runtime":"docker"}',
-      }),
-    ).toEqual({ enableDocker: true });
-    expect(
-      dockerSettingsFromRow({
-        id: 1,
-        enable_docker: 1,
-        docker_config: "{oops",
-      }),
-    ).toEqual({ enableDocker: true });
-  });
-});
-
-describe("runDockerSettingsMigration", () => {
-  it("moves every host's docker options and skips hosts with nothing set", async () => {
-    state.hostRows = [
-      { id: 1, enable_docker: 1, docker_config: null },
-      { id: 2, enable_docker: 1, docker_config: '{"runtime":"podman"}' },
-      { id: 3, enable_docker: 0, docker_config: null },
-    ];
-
-    const result = await runDockerSettingsMigration();
-
-    expect(result).toEqual({ hostsMoved: 2, hostsSkipped: 0 });
-    expect(hostValues(1)).toEqual({ enableDocker: true });
-    expect(hostValues(2)).toEqual({
-      enableDocker: true,
-      containerRuntime: "podman",
-    });
-    expect(hostValues(3)).toEqual({});
-  });
-
-  it("changes nothing when run twice", async () => {
-    state.hostRows = [
-      { id: 1, enable_docker: 1, docker_config: '{"runtime":"podman"}' },
-    ];
-    await runDockerSettingsMigration();
-    const before = JSON.stringify(state.pluginRows);
-
-    const second = await runDockerSettingsMigration();
-
-    expect(second).toEqual({ hostsMoved: 0, hostsSkipped: 1 });
-    expect(JSON.stringify(state.pluginRows)).toBe(before);
-  });
-
-  it("keeps a value already saved in the plugin", async () => {
-    state.pluginRows.push({
-      pluginId: "docker",
-      scope: "host",
-      scopeId: "1",
-      key: "enableDocker",
-      value: "false",
-    });
-    state.hostRows = [{ id: 1, enable_docker: 1, docker_config: null }];
-
-    await runDockerSettingsMigration();
-
-    expect(hostValues(1)).toEqual({ enableDocker: false });
-  });
-
-  it("does nothing before the plugin row exists or once the columns are gone", async () => {
-    state.hostRows = [{ id: 1, enable_docker: 1, docker_config: null }];
-    state.pluginInstalled = false;
-    expect(await runDockerSettingsMigration()).toEqual({
-      hostsMoved: 0,
-      hostsSkipped: 0,
-    });
-
-    state.pluginInstalled = true;
-    state.columnsGone = true;
-    expect(await runDockerSettingsMigration()).toEqual({
-      hostsMoved: 0,
-      hostsSkipped: 0,
-    });
-    expect(state.pluginRows).toEqual([]);
-  });
-});
diff --git a/src/backend/tests/upgrade/external-identity-migration.test.ts b/src/backend/tests/upgrade/external-identity-migration.test.ts
deleted file mode 100644
index a7acbed1d..000000000
--- a/src/backend/tests/upgrade/external-identity-migration.test.ts
+++ /dev/null
@@ -1,130 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
-import { createAuthState, type AuthState } from "../auth/auth-test-helpers.js";
-
-const h = vi.hoisted(() => ({ state: null as unknown as AuthState }));
-
-vi.mock("../../database/repositories/factory.js", async () => {
-  const helpers = await import("../auth/auth-test-helpers.js");
-  const names = Object.keys(helpers.fakeFactory(helpers.createAuthState()));
-  return Object.fromEntries(
-    names.map((name) => [
-      name,
-      (...args: unknown[]) =>
-        (
-          helpers.fakeFactory(h.state) as Record<
-            string,
-            (...a: unknown[]) => unknown
-          >
-        )[name](...args),
-    ]),
-  );
-});
-vi.mock("../../utils/logger.js", () => ({
-  databaseLogger: { info: vi.fn(), warn: vi.fn(), error: vi.fn() },
-}));
-
-const { runExternalIdentityMigration, parseLegacyIdentifier } =
-  await import("../../upgrade/external-identity-migration.js");
-
-function user(id: string, extra: Record<string, unknown>) {
-  h.state.users.set(id, {
-    id,
-    username: id,
-    passwordHash: "",
-    isAdmin: false,
-    isOidc: true,
-    ...extra,
-  });
-}
-
-beforeEach(() => {
-  h.state = createAuthState();
-});
-
-describe("parseLegacyIdentifier", () => {
-  it("splits the prefixed forms and keeps bare subjects on their provider", () => {
-    expect(parseLegacyIdentifier("ldap:4:bob", null)).toEqual({
-      providerId: "ldap:4",
-      subject: "bob",
-    });
-    expect(parseLegacyIdentifier("github:7:42", null)).toEqual({
-      providerId: "7",
-      subject: "42",
-    });
-    expect(parseLegacyIdentifier("ldap:4:cn=a:b", null)).toEqual({
-      providerId: "ldap:4",
-      subject: "cn=a:b",
-    });
-    expect(parseLegacyIdentifier("sub-123", 3)).toEqual({
-      providerId: "3",
-      subject: "sub-123",
-    });
-    expect(parseLegacyIdentifier("sub-123", null)).toEqual({
-      providerId: "legacy-oidc",
-      subject: "sub-123",
-    });
-    expect(parseLegacyIdentifier("github:null:42", null)).toEqual({
-      providerId: "legacy-oidc",
-      subject: "42",
-    });
-  });
-});
-
-describe("runExternalIdentityMigration", () => {
-  it("moves every identifier without touching the old data", async () => {
-    user("ldap-user", { oidcIdentifier: "ldap:4:bob", ssoProviderId: 4 });
-    user("gh-user", { oidcIdentifier: "github:7:42", ssoProviderId: 7 });
-    user("oidc-user", {
-      oidcIdentifier: "sub-123",
-      ssoProviderId: 3,
-    });
-    user("env-user", { oidcIdentifier: "someone@example.com" });
-    user("local", { isOidc: false, passwordHash: "hash" });
-
-    const result = await runExternalIdentityMigration();
-
-    expect(result).toEqual({ identities: 4, skipped: 0 });
-    expect(
-      h.state.identities.map(({ userId, providerId, subject }) => ({
-        userId,
-        providerId,
-        subject,
-      })),
-    ).toEqual([
-      { userId: "ldap-user", providerId: "ldap:4", subject: "bob" },
-      { userId: "gh-user", providerId: "7", subject: "42" },
-      { userId: "oidc-user", providerId: "3", subject: "sub-123" },
-      {
-        userId: "env-user",
-        providerId: "legacy-oidc",
-        subject: "someone@example.com",
-      },
-    ]);
-    // Lossless: the old column stays.
-    expect(h.state.users.get("ldap-user")!.oidcIdentifier).toBe("ldap:4:bob");
-  });
-
-  it("is idempotent", async () => {
-    user("ldap-user", { oidcIdentifier: "ldap:4:bob" });
-    await runExternalIdentityMigration();
-    const second = await runExternalIdentityMigration();
-    expect(second).toEqual({ identities: 0, skipped: 1 });
-    expect(h.state.identities).toHaveLength(1);
-  });
-
-  it("does not recreate a legacy-oidc link that was moved to its provider", async () => {
-    user("oidc-user", { oidcIdentifier: "sub-1" });
-    h.state.identities.push({
-      id: 1,
-      userId: "oidc-user",
-      providerId: "1",
-      subject: "sub-1",
-      email: null,
-    } as never);
-
-    const result = await runExternalIdentityMigration();
-
-    expect(result).toEqual({ identities: 0, skipped: 1 });
-    expect(h.state.identities).toHaveLength(1);
-  });
-});
diff --git a/src/backend/tests/upgrade/file-manager-settings-migration.test.ts b/src/backend/tests/upgrade/file-manager-settings-migration.test.ts
deleted file mode 100644
index 55ef9d65b..000000000
--- a/src/backend/tests/upgrade/file-manager-settings-migration.test.ts
+++ /dev/null
@@ -1,163 +0,0 @@
-/**
- * The file-manager host-columns migration.
- *
- * An upgrade must be lossless: a host that had file manager disabled, a
- * custom default path, or SCP legacy mode on must keep that configuration
- * once the ssh_data columns are dropped. Running it twice must not duplicate
- * or clobber what it moved.
- */
-
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-interface HostRow {
-  id: number;
-  enable_file_manager: boolean;
-  default_path: string | null;
-  scp_legacy: boolean;
-}
-
-interface SettingsRow {
-  pluginId: string;
-  scope: string;
-  scopeId: string | null;
-  key: string;
-  value: string | null;
-}
-
-const hostRows: HostRow[] = [];
-const settingsRows: SettingsRow[] = [];
-
-const pluginSettingsRepository = {
-  get: async (
-    pluginId: string,
-    scope: string,
-    scopeId: string | null,
-    key: string,
-  ) =>
-    settingsRows.find(
-      (row) =>
-        row.pluginId === pluginId &&
-        row.scope === scope &&
-        row.scopeId === scopeId &&
-        row.key === key,
-    ) ?? null,
-  set: async (
-    pluginId: string,
-    scope: string,
-    scopeId: string | null,
-    key: string,
-    value: string | null,
-  ) => {
-    const existing = settingsRows.find(
-      (row) =>
-        row.pluginId === pluginId &&
-        row.scope === scope &&
-        row.scopeId === scopeId &&
-        row.key === key,
-    );
-    if (existing) {
-      existing.value = value;
-      return;
-    }
-    settingsRows.push({ pluginId, scope, scopeId, key, value });
-  },
-};
-
-vi.mock("../../database/repositories/factory.js", () => ({
-  createCurrentPluginSettingsRepository: () => pluginSettingsRepository,
-}));
-
-vi.mock("../../database/db/index.js", () => ({
-  getDb: () => ({
-    all: async () =>
-      hostRows.filter(
-        (row) =>
-          row.enable_file_manager === false ||
-          row.default_path !== null ||
-          row.scp_legacy,
-      ),
-  }),
-}));
-
-const { runFileManagerSettingsMigration } =
-  await import("../../upgrade/file-manager-settings-migration.js");
-
-function storedValue(hostId: number, key: string): unknown {
-  const row = settingsRows.find(
-    (entry) => entry.scopeId === String(hostId) && entry.key === key,
-  );
-  return row?.value === null || row?.value === undefined
-    ? undefined
-    : JSON.parse(row.value);
-}
-
-beforeEach(() => {
-  hostRows.length = 0;
-  settingsRows.length = 0;
-});
-
-describe("runFileManagerSettingsMigration", () => {
-  it("moves a host with file manager disabled into plugin settings", async () => {
-    hostRows.push({
-      id: 1,
-      enable_file_manager: false,
-      default_path: "/srv/app",
-      scp_legacy: true,
-    });
-
-    const result = await runFileManagerSettingsMigration();
-
-    expect(result.moved).toBe(1);
-    expect(storedValue(1, "enableFileManager")).toBe(false);
-    expect(storedValue(1, "defaultPath")).toBe("/srv/app");
-    expect(storedValue(1, "scpLegacy")).toBe(true);
-  });
-
-  it("does nothing on a fresh install with no non-default hosts", async () => {
-    const result = await runFileManagerSettingsMigration();
-
-    expect(result.moved).toBe(0);
-    expect(settingsRows).toEqual([]);
-  });
-
-  it("is idempotent: a second run changes nothing", async () => {
-    hostRows.push({
-      id: 2,
-      enable_file_manager: false,
-      default_path: null,
-      scp_legacy: false,
-    });
-
-    await runFileManagerSettingsMigration();
-    const afterFirst = JSON.parse(JSON.stringify(settingsRows));
-
-    const second = await runFileManagerSettingsMigration();
-
-    expect(second.moved).toBe(0);
-    expect(second.skipped).toBe(1);
-    expect(settingsRows).toEqual(afterFirst);
-  });
-
-  it("moves each host independently", async () => {
-    hostRows.push(
-      {
-        id: 1,
-        enable_file_manager: false,
-        default_path: null,
-        scp_legacy: false,
-      },
-      {
-        id: 2,
-        enable_file_manager: true,
-        default_path: "/data",
-        scp_legacy: false,
-      },
-    );
-
-    const result = await runFileManagerSettingsMigration();
-
-    expect(result.moved).toBe(2);
-    expect(storedValue(1, "enableFileManager")).toBe(false);
-    expect(storedValue(2, "defaultPath")).toBe("/data");
-  });
-});
diff --git a/src/backend/tests/upgrade/host-defaults-migration.test.ts b/src/backend/tests/upgrade/host-defaults-migration.test.ts
deleted file mode 100644
index 6e9ad2a56..000000000
--- a/src/backend/tests/upgrade/host-defaults-migration.test.ts
+++ /dev/null
@@ -1,311 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-type PluginRow = {
-  pluginId: string;
-  scope: string;
-  scopeId: string | null;
-  key: string;
-  value: string | null;
-};
-
-const db = vi.hoisted(() => ({
-  settings: {} as Record<string, string>,
-  pluginRows: [] as PluginRow[],
-  defaults: [] as Array<{
-    scope: Record<string, unknown>;
-    namespace: string;
-    key: string;
-    value: string;
-  }>,
-  hosts: [] as Array<Record<string, unknown>>,
-  folders: [] as Array<{ id: number; userId: string; credentialId: number }>,
-  folderCredential: new Map<string, number>(),
-}));
-
-const manifests = vi.hoisted(() => [
-  {
-    id: "ssh-terminal",
-    contributes: {
-      settings: {
-        host: {
-          fields: [
-            { key: "fontSize", type: "number", default: 14 },
-            { key: "theme", type: "string", default: "termix" },
-            { key: "localEcho", type: "select", default: "auto" },
-            { key: "linkClickBehavior", type: "select", default: "confirm" },
-          ],
-        },
-      },
-    },
-  },
-  {
-    id: "remote-desktop",
-    contributes: {
-      settings: {
-        host: {
-          fields: [{ key: "colorDepth", type: "select", default: "inherit" }],
-        },
-      },
-    },
-  },
-  { id: "host-metrics", contributes: { settings: { host: { fields: [] } } } },
-]);
-
-vi.mock("../../utils/logger.js", () => ({
-  databaseLogger: { info: vi.fn(), warn: vi.fn() },
-}));
-vi.mock("../../database/routes/host-plugin-settings.js", () => ({
-  hostSettingsPlugins: () => manifests,
-}));
-vi.mock("../../database/db/schema.js", () => ({
-  sshFolders: { id: "id", userId: "userId", credentialId: "credentialId" },
-}));
-vi.mock("../../database/repositories/factory.js", () => {
-  const scopeKey = (scope: Record<string, unknown>) =>
-    scope.level === "admin"
-      ? "admin"
-      : scope.level === "user"
-        ? `u:${scope.userId}`
-        : `f:${scope.folderId}`;
-  return {
-    createCurrentSettingsRepository: () => ({
-      get: async (key: string) => db.settings[key] ?? null,
-      set: async (key: string, value: string) => {
-        db.settings[key] = value;
-      },
-    }),
-    createCurrentPluginSettingsRepository: () => ({
-      listByKey: async (pluginId: string, scope: string, key: string) =>
-        db.pluginRows.filter(
-          (row) =>
-            row.pluginId === pluginId && row.scope === scope && row.key === key,
-        ),
-      getAll: async (pluginId: string, scope: string, scopeId: string) =>
-        db.pluginRows.filter(
-          (row) =>
-            row.pluginId === pluginId &&
-            row.scope === scope &&
-            row.scopeId === scopeId,
-        ),
-      set: async (
-        pluginId: string,
-        scope: string,
-        scopeId: string,
-        key: string,
-        value: string,
-      ) => {
-        db.pluginRows = db.pluginRows.filter(
-          (row) =>
-            !(
-              row.pluginId === pluginId &&
-              row.scope === scope &&
-              row.scopeId === scopeId &&
-              row.key === key
-            ),
-        );
-        db.pluginRows.push({ pluginId, scope, scopeId, key, value });
-      },
-      delete: async (
-        pluginId: string,
-        scope: string,
-        scopeId: string,
-        key: string,
-      ) => {
-        db.pluginRows = db.pluginRows.filter(
-          (row) =>
-            !(
-              row.pluginId === pluginId &&
-              row.scope === scope &&
-              row.scopeId === scopeId &&
-              row.key === key
-            ),
-        );
-      },
-    }),
-    createCurrentHostDefaultsRepository: () => ({
-      listScope: async (scope: Record<string, unknown>) =>
-        db.defaults.filter((row) => scopeKey(row.scope) === scopeKey(scope)),
-      apply: async (
-        scope: Record<string, unknown>,
-        set: Array<{ namespace: string; key: string; value: string }>,
-      ) => {
-        for (const entry of set) db.defaults.push({ scope, ...entry });
-      },
-      listHosts: async () => db.hosts,
-      updateHosts: async (
-        patches: Array<{ id: number; values: Record<string, unknown> }>,
-      ) => {
-        for (const patch of patches) {
-          Object.assign(
-            db.hosts.find((host) => host.id === patch.id)!,
-            patch.values,
-          );
-        }
-      },
-    }),
-    createCurrentHostResolutionRepository: () => ({
-      findFolderCredentialId: async (_userId: string, folder: string) =>
-        db.folderCredential.get(folder) ?? null,
-    }),
-    createCurrentRepositoryContext: () => ({
-      drizzle: {
-        select: () => ({
-          from: () => ({ where: async () => db.folders }),
-        }),
-      },
-    }),
-  };
-});
-
-const { runHostDefaultsMigration } =
-  await import("../../upgrade/host-defaults-migration.js");
-
-function level(namespace: string, key: string, scopeLevel: string) {
-  const row = db.defaults.find(
-    (entry) =>
-      entry.namespace === namespace &&
-      entry.key === key &&
-      entry.scope.level === scopeLevel,
-  );
-  return row ? JSON.parse(row.value) : undefined;
-}
-
-function hostValue(hostId: number, pluginId: string, key: string) {
-  const row = db.pluginRows.find(
-    (entry) =>
-      entry.pluginId === pluginId &&
-      entry.scope === "host" &&
-      entry.scopeId === String(hostId) &&
-      entry.key === key,
-  );
-  return row?.value ? JSON.parse(row.value) : undefined;
-}
-
-const plugin = (
-  pluginId: string,
-  scope: string,
-  scopeId: string | null,
-  key: string,
-  value: unknown,
-): PluginRow => ({
-  pluginId,
-  scope,
-  scopeId,
-  key,
-  value: JSON.stringify(value),
-});
-
-beforeEach(() => {
-  db.settings = {};
-  db.pluginRows = [];
-  db.defaults = [];
-  db.hosts = [];
-  db.folders = [];
-  db.folderCredential = new Map();
-});
-
-describe("runHostDefaultsMigration", () => {
-  it("moves the old server defaults, dropping the credential and password", async () => {
-    db.settings.host_defaults = JSON.stringify({
-      useSocks5: true,
-      socks5Host: "proxy",
-      socks5Port: 1081,
-      socks5Password: "secret",
-      credentialId: 3,
-      statusCheckEnabled: false,
-    });
-    db.pluginRows.push(
-      plugin("ssh-terminal", "admin", null, "newHostFontSize", 18),
-      plugin("host-metrics", "admin", null, "enabledForNewHosts", false),
-    );
-    db.folders = [{ id: 4, userId: "u1", credentialId: 9 }];
-
-    await runHostDefaultsMigration();
-
-    expect(level("core", "socks5", "admin")).toMatchObject({
-      useSocks5: true,
-      socks5Host: "proxy",
-      socks5Port: 1081,
-    });
-    expect(JSON.stringify(db.defaults)).not.toContain("secret");
-    expect(level("core", "statusCheckEnabled", "admin")).toBe(false);
-    expect(level("ssh-terminal", "fontSize", "admin")).toBe(18);
-    expect(level("host-metrics", "metricsEnabled", "admin")).toBe(false);
-    expect(level("core", "auth", "folder")).toMatchObject({
-      authType: "credential",
-      credentialId: 9,
-    });
-  });
-
-  it("moves each user's terminal and remote desktop defaults to their own level", async () => {
-    db.pluginRows.push(
-      plugin("ssh-terminal", "user", "u1", "terminalDefaults", {
-        fontSize: 20,
-      }),
-      plugin("ssh-terminal", "user", "u1", "localEcho", "on"),
-      plugin("remote-desktop", "user", "u1", "colorDepth", "16"),
-      plugin("remote-desktop", "user", "u1", "disableAudio", "inherit"),
-    );
-    await runHostDefaultsMigration();
-    expect(level("ssh-terminal", "fontSize", "user")).toBe(20);
-    expect(level("ssh-terminal", "localEcho", "user")).toBe("on");
-    expect(level("remote-desktop", "colorDepth", "user")).toBe("16");
-    expect(level("remote-desktop", "disableAudio", "user")).toBeUndefined();
-  });
-
-  it("writes in the look a host really had while it followed its user", async () => {
-    db.hosts = [
-      { id: 1, userId: "u1", defaultOverrides: null },
-      { id: 2, userId: "u1", defaultOverrides: null },
-      { id: 3, userId: "u1", defaultOverrides: '{"core":[]}' },
-    ];
-    db.pluginRows.push(
-      plugin("ssh-terminal", "user", "u1", "terminalDefaults", {
-        fontSize: 20,
-      }),
-      plugin("ssh-terminal", "user", "u1", "localEcho", "on"),
-      plugin("ssh-terminal", "host", "1", "fontSize", 30),
-      plugin("ssh-terminal", "host", "1", "localEcho", "default"),
-      plugin("ssh-terminal", "host", "2", "inheritAppearance", false),
-      plugin("ssh-terminal", "host", "2", "fontSize", 30),
-      plugin("ssh-terminal", "host", "2", "localEcho", "off"),
-      plugin("remote-desktop", "user", "u1", "colorDepth", "24"),
-    );
-
-    await runHostDefaultsMigration();
-
-    // Followed the user: the user's look, and their echo mode.
-    expect(hostValue(1, "ssh-terminal", "fontSize")).toBe(20);
-    expect(hostValue(1, "ssh-terminal", "localEcho")).toBe("on");
-    expect(hostValue(1, "remote-desktop", "colorDepth")).toBe("24");
-    // Had its own look: kept.
-    expect(hostValue(2, "ssh-terminal", "fontSize")).toBe(30);
-    expect(hostValue(2, "ssh-terminal", "localEcho")).toBe("off");
-    // Saved since host defaults: left alone.
-    expect(hostValue(3, "ssh-terminal", "fontSize")).toBeUndefined();
-  });
-
-  it("gives a credential host its folder's credential", async () => {
-    db.hosts = [
-      {
-        id: 1,
-        userId: "u1",
-        authType: "credential",
-        credentialId: null,
-        folder: "Prod",
-        defaultOverrides: null,
-      },
-    ];
-    db.folderCredential.set("Prod", 12);
-    await runHostDefaultsMigration();
-    expect(db.hosts[0].credentialId).toBe(12);
-  });
-
-  it("moves each level once", async () => {
-    db.settings.host_defaults = JSON.stringify({ statusCheckEnabled: false });
-    await runHostDefaultsMigration();
-    db.defaults = [];
-    await runHostDefaultsMigration();
-    expect(level("core", "statusCheckEnabled", "admin")).toBeUndefined();
-  });
-});
diff --git a/src/backend/tests/upgrade/host-metrics-settings-migration.test.ts b/src/backend/tests/upgrade/host-metrics-settings-migration.test.ts
deleted file mode 100644
index 748530baa..000000000
--- a/src/backend/tests/upgrade/host-metrics-settings-migration.test.ts
+++ /dev/null
@@ -1,200 +0,0 @@
-/**
- * Host Metrics' settings leaving core: the two admin keys, the new-host
- * default inside host_defaults, and the metrics half of every host's
- * stats_config. Nothing may be lost, and a second run must change nothing.
- */
-
-import Database from "better-sqlite3";
-import { drizzle } from "drizzle-orm/better-sqlite3";
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-interface Row {
-  scope: string;
-  scopeId: string | null;
-  key: string;
-  value: string | null;
-}
-
-const state = vi.hoisted(() => ({
-  coreSettings: new Map<string, string>(),
-  pluginRows: [] as Array<{
-    scope: string;
-    scopeId: string | null;
-    key: string;
-    value: string | null;
-  }>,
-  pluginInstalled: true,
-  db: null as unknown,
-}));
-
-const find = (scope: string, scopeId: string | null, key: string) =>
-  state.pluginRows.find(
-    (row) => row.scope === scope && row.scopeId === scopeId && row.key === key,
-  );
-
-vi.mock("../../database/db/index.js", () => ({ getDb: () => state.db }));
-vi.mock("../../database/repositories/factory.js", () => ({
-  createCurrentPluginRepository: () => ({
-    findById: async (id: string) =>
-      state.pluginInstalled && id === "host-metrics" ? { id } : null,
-  }),
-  createCurrentPluginSettingsRepository: () => ({
-    get: async (
-      _pluginId: string,
-      scope: string,
-      scopeId: string | null,
-      key: string,
-    ) => find(scope, scopeId, key) ?? null,
-    getAll: async (_pluginId: string, scope: string, scopeId: string | null) =>
-      state.pluginRows.filter(
-        (row) => row.scope === scope && row.scopeId === scopeId,
-      ),
-    set: async (
-      _pluginId: string,
-      scope: string,
-      scopeId: string | null,
-      key: string,
-      value: string | null,
-    ) => {
-      const existing = find(scope, scopeId, key);
-      if (existing) existing.value = value;
-      else state.pluginRows.push({ scope, scopeId, key, value });
-    },
-  }),
-  createCurrentSettingsRepository: () => ({
-    get: async (key: string) => state.coreSettings.get(key) ?? null,
-  }),
-}));
-vi.mock("../../utils/logger.js", () => ({
-  databaseLogger: { info: vi.fn(), warn: vi.fn() },
-}));
-
-const { runHostMetricsSettingsMigration, hostSettingsFromStatsConfig } =
-  await import("../../upgrade/host-metrics-settings-migration.js");
-
-let sqlite: Database.Database;
-
-const value = (scope: string, scopeId: string | null, key: string) => {
-  const row = find(scope, scopeId, key) as Row | undefined;
-  return row?.value == null ? undefined : JSON.parse(row.value);
-};
-
-beforeEach(() => {
-  state.coreSettings.clear();
-  state.pluginRows = [];
-  state.pluginInstalled = true;
-  sqlite = new Database(":memory:");
-  sqlite.exec(
-    "CREATE TABLE ssh_data (id INTEGER PRIMARY KEY, stats_config TEXT)",
-  );
-  state.db = drizzle(sqlite);
-});
-
-describe("hostSettingsFromStatsConfig", () => {
-  it("keeps only what differs from the defaults", () => {
-    expect(
-      hostSettingsFromStatsConfig(
-        JSON.stringify({
-          statusCheckEnabled: false,
-          metricsEnabled: false,
-          metricsInterval: 45,
-          useGlobalMetricsInterval: false,
-          enabledWidgets: ["cpu", "disk"],
-          excludedMounts: ["/snap"],
-          monitoredMounts: [{ path: "/data", label: "Data" }, { bad: 1 }],
-        }),
-      ),
-    ).toEqual({
-      metricsEnabled: false,
-      metricsInterval: 45,
-      enabledWidgets: ["cpu", "disk"],
-      excludedMounts: ["/snap"],
-      monitoredMounts: [{ path: "/data", label: "Data" }],
-    });
-  });
-
-  it("ignores the host's interval while it followed the global one", () => {
-    expect(
-      hostSettingsFromStatsConfig(JSON.stringify({ metricsInterval: 45 })),
-    ).toEqual({});
-  });
-
-  it("reads a value that was stringified twice", () => {
-    expect(
-      hostSettingsFromStatsConfig(
-        JSON.stringify(JSON.stringify({ metricsEnabled: false })),
-      ),
-    ).toEqual({ metricsEnabled: false });
-  });
-});
-
-describe("runHostMetricsSettingsMigration", () => {
-  it("moves the admin keys, the new-host default and every host", async () => {
-    state.coreSettings.set("global_metrics_interval", "20");
-    state.coreSettings.set("metrics_history_retention_days", "30");
-    state.coreSettings.set(
-      "host_defaults",
-      JSON.stringify({ metricsEnabled: false, statusCheckEnabled: true }),
-    );
-    const insert = sqlite.prepare(
-      "INSERT INTO ssh_data (id, stats_config) VALUES (?, ?)",
-    );
-    insert.run(1, JSON.stringify({ metricsEnabled: false }));
-    insert.run(2, JSON.stringify({ enabledWidgets: ["cpu"] }));
-    insert.run(3, JSON.stringify({ statusCheckEnabled: false }));
-    insert.run(4, null);
-
-    const result = await runHostMetricsSettingsMigration();
-
-    expect(result.moved.sort()).toEqual([
-      "global_metrics_interval",
-      "host_defaults.metricsEnabled",
-      "metrics_history_retention_days",
-    ]);
-    expect(value("admin", null, "metricsInterval")).toBe(20);
-    expect(value("admin", null, "historyRetentionDays")).toBe(30);
-    expect(value("admin", null, "enabledForNewHosts")).toBe(false);
-    expect(value("host", "1", "metricsEnabled")).toBe(false);
-    expect(value("host", "2", "enabledWidgets")).toEqual(["cpu"]);
-    // Only the status half, which is core's: nothing for the plugin.
-    expect(state.pluginRows.filter((row) => row.scopeId === "3")).toEqual([]);
-    expect(result.hostsMoved).toBe(2);
-  });
-
-  it("changes nothing the second time", async () => {
-    state.coreSettings.set("global_metrics_interval", "20");
-    sqlite
-      .prepare("INSERT INTO ssh_data (id, stats_config) VALUES (?, ?)")
-      .run(1, JSON.stringify({ metricsEnabled: false }));
-    await runHostMetricsSettingsMigration();
-
-    // Changed through the plugin after the upgrade.
-    const interval = find("admin", null, "metricsInterval")!;
-    interval.value = "90";
-    const enabled = find("host", "1", "metricsEnabled")!;
-    enabled.value = "true";
-
-    const second = await runHostMetricsSettingsMigration();
-    expect(second).toEqual({ moved: [], hostsMoved: 0, hostsSkipped: 1 });
-    expect(value("admin", null, "metricsInterval")).toBe(90);
-    expect(value("host", "1", "metricsEnabled")).toBe(true);
-  });
-
-  it("waits until the plugin row exists", async () => {
-    state.pluginInstalled = false;
-    state.coreSettings.set("global_metrics_interval", "20");
-    expect(await runHostMetricsSettingsMigration()).toEqual({
-      moved: [],
-      hostsMoved: 0,
-      hostsSkipped: 0,
-    });
-    expect(state.pluginRows).toEqual([]);
-  });
-
-  it("skips values out of range", async () => {
-    state.coreSettings.set("global_metrics_interval", "1");
-    state.coreSettings.set("metrics_history_retention_days", "900");
-    await runHostMetricsSettingsMigration();
-    expect(state.pluginRows).toEqual([]);
-  });
-});
diff --git a/src/backend/tests/upgrade/opkssh-config-migration.test.ts b/src/backend/tests/upgrade/opkssh-config-migration.test.ts
index 78ca5fb67..d54e91e7c 100644
--- a/src/backend/tests/upgrade/opkssh-config-migration.test.ts
+++ b/src/backend/tests/upgrade/opkssh-config-migration.test.ts
@@ -1,8 +1,7 @@
 /**
  * The OPKSSH config move. A 2.8 install's config must reach the opkssh
- * plugin's folder, the old file must stay for a downgrade, and the install
- * must keep the redirect URI its identity providers know. Running it twice
- * must not overwrite anything.
+ * plugin's folder and the old file must stay for a downgrade. Running it
+ * twice must not overwrite anything.
  */
 
 import fs from "node:fs/promises";
@@ -56,33 +55,22 @@ afterEach(async () => {
 });
 
 describe("runOpksshConfigMigration", () => {
-  it("copies the config, keeps the old one and the old redirect URI, once", async () => {
+  it("copies the config and keeps the old one, once", async () => {
     await fs.mkdir(path.dirname(legacy()), { recursive: true });
     await fs.writeFile(legacy(), "providers:\n  - alias: google\n");
 
-    expect(await runOpksshConfigMigration(dataDir)).toEqual({
-      copied: true,
-      legacyCallback: true,
-    });
+    expect(await runOpksshConfigMigration(dataDir)).toEqual({ copied: true });
     expect(await fs.readFile(target(), "utf8")).toContain("alias: google");
     expect(await fs.readFile(legacy(), "utf8")).toContain("alias: google");
-    expect(state.settings.get("legacyCallback")).toBe("true");
+    expect(state.settings.has("legacyCallback")).toBe(false);
 
     await fs.writeFile(target(), "providers:\n  - alias: edited\n");
-    state.settings.set("legacyCallback", "false");
-    expect(await runOpksshConfigMigration(dataDir)).toEqual({
-      copied: false,
-      legacyCallback: false,
-    });
+    expect(await runOpksshConfigMigration(dataDir)).toEqual({ copied: false });
     expect(await fs.readFile(target(), "utf8")).toContain("alias: edited");
-    expect(state.settings.get("legacyCallback")).toBe("false");
   });
 
   it("does nothing on an install that never set up OPKSSH", async () => {
-    expect(await runOpksshConfigMigration(dataDir)).toEqual({
-      copied: false,
-      legacyCallback: false,
-    });
+    expect(await runOpksshConfigMigration(dataDir)).toEqual({ copied: false });
     expect(state.settings.size).toBe(0);
   });
 
diff --git a/src/backend/tests/upgrade/protocol-auth-migration.test.ts b/src/backend/tests/upgrade/protocol-auth-migration.test.ts
index b33e0737d..9811418ac 100644
--- a/src/backend/tests/upgrade/protocol-auth-migration.test.ts
+++ b/src/backend/tests/upgrade/protocol-auth-migration.test.ts
@@ -195,7 +195,7 @@ describe("runProtocolAuthMigration", () => {
       username: "waits",
     });
     const [marker] = await database!.query<{ value: string }>(
-      sql`SELECT value FROM settings WHERE key = ${copiedMarker("locked")}`,
+      sql`SELECT value FROM settings WHERE ${sql.identifier("key")} = ${copiedMarker("locked")}`,
     );
     expect(marker.value).toBe("done");
   });
diff --git a/src/backend/tests/upgrade/proxmox-settings-migration.test.ts b/src/backend/tests/upgrade/proxmox-settings-migration.test.ts
deleted file mode 100644
index e7873ee04..000000000
--- a/src/backend/tests/upgrade/proxmox-settings-migration.test.ts
+++ /dev/null
@@ -1,171 +0,0 @@
-/**
- * The Proxmox host-columns migration.
- *
- * An upgrade must be lossless: a host that already had Proxmox discovery or
- * stats configured must keep that configuration once the ssh_data columns
- * are dropped. Running it twice must not duplicate or clobber what it moved.
- */
-
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-interface HostRow {
-  id: number;
-  enable_proxmox: boolean;
-  proxmox_config: string | null;
-  enable_proxmox_stats: boolean;
-  proxmox_stats_config: string | null;
-}
-
-interface SettingsRow {
-  pluginId: string;
-  scope: string;
-  scopeId: string | null;
-  key: string;
-  value: string | null;
-}
-
-const hostRows: HostRow[] = [];
-const settingsRows: SettingsRow[] = [];
-
-const pluginSettingsRepository = {
-  get: async (
-    pluginId: string,
-    scope: string,
-    scopeId: string | null,
-    key: string,
-  ) =>
-    settingsRows.find(
-      (row) =>
-        row.pluginId === pluginId &&
-        row.scope === scope &&
-        row.scopeId === scopeId &&
-        row.key === key,
-    ) ?? null,
-  set: async (
-    pluginId: string,
-    scope: string,
-    scopeId: string | null,
-    key: string,
-    value: string | null,
-  ) => {
-    const existing = settingsRows.find(
-      (row) =>
-        row.pluginId === pluginId &&
-        row.scope === scope &&
-        row.scopeId === scopeId &&
-        row.key === key,
-    );
-    if (existing) {
-      existing.value = value;
-      return;
-    }
-    settingsRows.push({ pluginId, scope, scopeId, key, value });
-  },
-};
-
-vi.mock("../../database/repositories/factory.js", () => ({
-  createCurrentPluginSettingsRepository: () => pluginSettingsRepository,
-}));
-
-vi.mock("../../database/db/index.js", () => ({
-  getDb: () => ({
-    all: async () =>
-      hostRows.filter(
-        (row) =>
-          row.enable_proxmox ||
-          row.proxmox_config !== null ||
-          row.enable_proxmox_stats ||
-          row.proxmox_stats_config !== null,
-      ),
-  }),
-}));
-
-const { runProxmoxSettingsMigration } =
-  await import("../../upgrade/proxmox-settings-migration.js");
-
-function storedValue(hostId: number, key: string): unknown {
-  const row = settingsRows.find(
-    (entry) => entry.scopeId === String(hostId) && entry.key === key,
-  );
-  return row?.value === null || row?.value === undefined
-    ? undefined
-    : JSON.parse(row.value);
-}
-
-beforeEach(() => {
-  hostRows.length = 0;
-  settingsRows.length = 0;
-});
-
-describe("runProxmoxSettingsMigration", () => {
-  it("moves an enabled host's columns into plugin settings", async () => {
-    hostRows.push({
-      id: 1,
-      enable_proxmox: true,
-      proxmox_config: JSON.stringify({ defaultAuthType: "password" }),
-      enable_proxmox_stats: true,
-      proxmox_stats_config: JSON.stringify({ nodeName: "pve1" }),
-    });
-
-    const result = await runProxmoxSettingsMigration();
-
-    expect(result.moved).toBe(1);
-    expect(storedValue(1, "enableProxmox")).toBe(true);
-    expect(storedValue(1, "proxmoxConfig")).toEqual({
-      defaultAuthType: "password",
-    });
-    expect(storedValue(1, "enableProxmoxStats")).toBe(true);
-    expect(storedValue(1, "proxmoxStatsConfig")).toEqual({ nodeName: "pve1" });
-  });
-
-  it("does nothing on a fresh install with no proxmox hosts", async () => {
-    const result = await runProxmoxSettingsMigration();
-
-    expect(result.moved).toBe(0);
-    expect(settingsRows).toEqual([]);
-  });
-
-  it("is idempotent: a second run changes nothing", async () => {
-    hostRows.push({
-      id: 2,
-      enable_proxmox: false,
-      proxmox_config: JSON.stringify({ autoSyncEnabled: true }),
-      enable_proxmox_stats: false,
-      proxmox_stats_config: null,
-    });
-
-    await runProxmoxSettingsMigration();
-    const afterFirst = JSON.parse(JSON.stringify(settingsRows));
-
-    const second = await runProxmoxSettingsMigration();
-
-    expect(second.moved).toBe(0);
-    expect(second.skipped).toBe(1);
-    expect(settingsRows).toEqual(afterFirst);
-  });
-
-  it("moves each host independently", async () => {
-    hostRows.push(
-      {
-        id: 1,
-        enable_proxmox: true,
-        proxmox_config: null,
-        enable_proxmox_stats: false,
-        proxmox_stats_config: null,
-      },
-      {
-        id: 2,
-        enable_proxmox: false,
-        proxmox_config: null,
-        enable_proxmox_stats: true,
-        proxmox_stats_config: JSON.stringify({ nodeName: "pve2" }),
-      },
-    );
-
-    const result = await runProxmoxSettingsMigration();
-
-    expect(result.moved).toBe(2);
-    expect(storedValue(1, "enableProxmox")).toBe(true);
-    expect(storedValue(2, "proxmoxStatsConfig")).toEqual({ nodeName: "pve2" });
-  });
-});
diff --git a/src/backend/tests/upgrade/remote-desktop-settings-migration.test.ts b/src/backend/tests/upgrade/remote-desktop-settings-migration.test.ts
deleted file mode 100644
index c6a1fcc00..000000000
--- a/src/backend/tests/upgrade/remote-desktop-settings-migration.test.ts
+++ /dev/null
@@ -1,256 +0,0 @@
-/**
- * The Remote Desktop settings migration.
- *
- * An upgrade must be lossless: the admin switch and guacd address, each
- * user's RDP defaults and every host's RDP/VNC/Telnet options must come
- * through into the plugin's own settings, whatever shape an old host had.
- * Running it twice must not duplicate or clobber what it moved.
- */
-
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-interface Row {
-  pluginId: string;
-  scope: string;
-  scopeId: string | null;
-  key: string;
-  value: string | null;
-}
-
-const state = vi.hoisted(() => ({
-  coreSettings: new Map<string, string>(),
-  pluginRows: [] as Array<{
-    pluginId: string;
-    scope: string;
-    scopeId: string | null;
-    key: string;
-    value: string | null;
-  }>,
-  hostRows: [] as Array<Record<string, unknown>>,
-  userRows: [] as Array<{ user_id: string; rdp_defaults: string | null }>,
-  statements: [] as string[],
-  pluginInstalled: true,
-}));
-
-const find = (scope: string, scopeId: string | null, key: string) =>
-  state.pluginRows.find(
-    (row) => row.scope === scope && row.scopeId === scopeId && row.key === key,
-  );
-
-vi.mock("../../database/repositories/factory.js", () => ({
-  createCurrentPluginRepository: () => ({
-    findById: async (id: string) =>
-      state.pluginInstalled && id === "remote-desktop" ? { id } : null,
-  }),
-  createCurrentPluginSettingsRepository: () => ({
-    get: async (
-      _pluginId: string,
-      scope: string,
-      scopeId: string | null,
-      key: string,
-    ) => find(scope, scopeId, key) ?? null,
-    getAll: async (_pluginId: string, scope: string, scopeId: string | null) =>
-      state.pluginRows.filter(
-        (row) => row.scope === scope && row.scopeId === scopeId,
-      ),
-    set: async (
-      pluginId: string,
-      scope: string,
-      scopeId: string | null,
-      key: string,
-      value: string | null,
-    ) => {
-      const existing = find(scope, scopeId, key);
-      if (existing) {
-        existing.value = value;
-        return;
-      }
-      state.pluginRows.push({ pluginId, scope, scopeId, key, value });
-    },
-  }),
-  createCurrentSettingsRepository: () => ({
-    get: async (key: string) => state.coreSettings.get(key) ?? null,
-  }),
-}));
-
-vi.mock("../../utils/crypto-migration/raw-rows.js", () => ({
-  selectRows: async (query: { queryChunks?: unknown[] }) => {
-    const text = JSON.stringify(query.queryChunks ?? query);
-    return text.includes("user_preferences") ? state.userRows : state.hostRows;
-  },
-  runStatement: async (query: unknown) => {
-    state.statements.push(JSON.stringify(query));
-  },
-}));
-
-vi.mock("../../utils/logger.js", () => ({
-  databaseLogger: { info: vi.fn(), warn: vi.fn() },
-}));
-
-const { runRemoteDesktopSettingsMigration, hostSettingsFromRow } =
-  await import("../../upgrade/remote-desktop-settings-migration.js");
-
-const value = (scope: string, scopeId: string | null, key: string) => {
-  const row = find(scope, scopeId, key) as Row | undefined;
-  return row?.value == null ? undefined : JSON.parse(row.value);
-};
-
-function host(overrides: Record<string, unknown>) {
-  return {
-    id: 1,
-    port: 22,
-    connection_type: "ssh",
-    enable_rdp: 0,
-    enable_vnc: 0,
-    enable_telnet: 0,
-    rdp_port: 3389,
-    vnc_port: 5900,
-    telnet_port: 23,
-    rdp_security: null,
-    rdp_ignore_cert: 0,
-    security: null,
-    ignore_cert: 0,
-    guacamole_config: null,
-    enable_terminal_toolbar: 1,
-    ...overrides,
-  };
-}
-
-beforeEach(() => {
-  state.coreSettings.clear();
-  state.pluginRows.length = 0;
-  state.hostRows.length = 0;
-  state.userRows.length = 0;
-  state.statements.length = 0;
-  state.pluginInstalled = true;
-});
-
-describe("runRemoteDesktopSettingsMigration", () => {
-  it("moves the admin switch and guacd address", async () => {
-    state.coreSettings.set("guac_enabled", "false");
-    state.coreSettings.set("guac_url", "guacd:4822");
-
-    const result = await runRemoteDesktopSettingsMigration();
-
-    expect(result.moved).toEqual(["guac_enabled", "guac_url"]);
-    expect(value("admin", null, "enabled")).toBe(false);
-    expect(value("admin", null, "guacdUrl")).toBe("guacd:4822");
-  });
-
-  it("moves a host's options, reading SQLite's 0 and 1 as booleans", async () => {
-    state.hostRows.push(
-      host({
-        id: 7,
-        enable_rdp: 1,
-        enable_vnc: 0,
-        rdp_port: 3390,
-        rdp_security: "nla",
-        rdp_ignore_cert: 1,
-        guacamole_config: JSON.stringify({ "color-depth": 24 }),
-        enable_terminal_toolbar: 0,
-      }),
-    );
-
-    const result = await runRemoteDesktopSettingsMigration();
-
-    expect(result.hostsMoved).toBe(1);
-    expect(value("host", "7", "enableRdp")).toBe(true);
-    expect(value("host", "7", "enableVnc")).toBeUndefined();
-    expect(value("host", "7", "rdpPort")).toBe(3390);
-    expect(value("host", "7", "rdpSecurity")).toBe("nla");
-    expect(value("host", "7", "rdpIgnoreCert")).toBe(true);
-    expect(value("host", "7", "guacamoleConfig")).toEqual({
-      "color-depth": 24,
-    });
-    expect(value("host", "7", "enableToolbar")).toBe(false);
-  });
-
-  it("leaves a plain SSH host alone", async () => {
-    state.hostRows.push(host({ id: 3 }));
-    const result = await runRemoteDesktopSettingsMigration();
-    expect(result.hostsMoved).toBe(0);
-    expect(state.pluginRows).toHaveLength(0);
-  });
-
-  it("reads real booleans too, as Postgres returns them", async () => {
-    state.hostRows.push(host({ id: 8, enable_vnc: true, vnc_port: 5901 }));
-    await runRemoteDesktopSettingsMigration();
-    expect(value("host", "8", "enableVnc")).toBe(true);
-    expect(value("host", "8", "vncPort")).toBe(5901);
-  });
-
-  it("moves each user's RDP defaults", async () => {
-    state.userRows.push({
-      user_id: "u1",
-      rdp_defaults: JSON.stringify({
-        colorDepth: 24,
-        resizeMethod: "reconnect",
-        disableCopy: true,
-        enableWallpaper: false,
-      }),
-    });
-    state.userRows.push({ user_id: "u2", rdp_defaults: null });
-
-    const result = await runRemoteDesktopSettingsMigration();
-
-    expect(result.usersMoved).toBe(1);
-    expect(value("user", "u1", "colorDepth")).toBe("24");
-    expect(value("user", "u1", "resizeMethod")).toBe("reconnect");
-    expect(value("user", "u1", "disableCopy")).toBe("on");
-    expect(value("user", "u1", "enableWallpaper")).toBe("off");
-  });
-
-  it("changes nothing when run twice", async () => {
-    state.coreSettings.set("guac_url", "guacd:4822");
-    state.hostRows.push(host({ id: 7, enable_rdp: 1, rdp_port: 3390 }));
-    state.userRows.push({
-      user_id: "u1",
-      rdp_defaults: JSON.stringify({ colorDepth: 16 }),
-    });
-
-    await runRemoteDesktopSettingsMigration();
-    const firstRun = JSON.stringify(state.pluginRows);
-    // Changed after the first run: must not be overwritten by the old values.
-    find("host", "7", "rdpPort")!.value = JSON.stringify(4000);
-    const second = await runRemoteDesktopSettingsMigration();
-
-    expect(second.moved).toEqual([]);
-    expect(second.usersMoved).toBe(0);
-    expect(second.hostsMoved).toBe(0);
-    expect(second.hostsSkipped).toBe(1);
-    expect(value("host", "7", "rdpPort")).toBe(4000);
-    expect(JSON.parse(firstRun)).toHaveLength(state.pluginRows.length);
-  });
-
-  it("does nothing until the plugin row exists", async () => {
-    state.pluginInstalled = false;
-    state.coreSettings.set("guac_url", "guacd:4822");
-    state.hostRows.push(host({ id: 7, enable_rdp: 1 }));
-    await runRemoteDesktopSettingsMigration();
-    expect(state.pluginRows).toHaveLength(0);
-  });
-});
-
-describe("hostSettingsFromRow", () => {
-  it("turns a connection_type-only host into its protocol switch and port", () => {
-    expect(
-      hostSettingsFromRow(
-        host({ connection_type: "vnc", port: 5905, vnc_port: null }),
-      ),
-    ).toEqual({ enableVnc: true, vncPort: 5905 });
-  });
-
-  it("folds the older security and ignore_cert columns in", () => {
-    expect(
-      hostSettingsFromRow(
-        host({
-          enable_rdp: 1,
-          rdp_security: null,
-          security: "tls",
-          rdp_ignore_cert: null,
-          ignore_cert: 1,
-        }),
-      ),
-    ).toEqual({ enableRdp: true, rdpSecurity: "tls", rdpIgnoreCert: true });
-  });
-});
diff --git a/src/backend/tests/upgrade/session-recording-settings-migration.test.ts b/src/backend/tests/upgrade/session-recording-settings-migration.test.ts
deleted file mode 100644
index 4c9eb277a..000000000
--- a/src/backend/tests/upgrade/session-recording-settings-migration.test.ts
+++ /dev/null
@@ -1,169 +0,0 @@
-/**
- * The session logging host-column migration.
- *
- * The legacy column defaulted to true, the plugin's enable switch defaults
- * to false, so every host needs an explicit row, not just the ones that
- * turned it off. Running it twice must not duplicate or clobber what it
- * moved.
- */
-
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-interface HostRow {
-  id: number;
-  enable_session_logging: boolean | number | null;
-}
-
-interface SettingsRow {
-  pluginId: string;
-  scope: string;
-  scopeId: string | null;
-  key: string;
-  value: string | null;
-}
-
-const hostRows: HostRow[] = [];
-const settingsRows: SettingsRow[] = [];
-
-const find = (
-  pluginId: string,
-  scope: string,
-  scopeId: string | null,
-  key: string,
-) =>
-  settingsRows.find(
-    (row) =>
-      row.pluginId === pluginId &&
-      row.scope === scope &&
-      row.scopeId === scopeId &&
-      row.key === key,
-  );
-
-const pluginSettingsRepository = {
-  get: async (
-    pluginId: string,
-    scope: string,
-    scopeId: string | null,
-    key: string,
-  ) => find(pluginId, scope, scopeId, key) ?? null,
-  set: async (
-    pluginId: string,
-    scope: string,
-    scopeId: string | null,
-    key: string,
-    value: string | null,
-  ) => {
-    const existing = find(pluginId, scope, scopeId, key);
-    if (existing) {
-      existing.value = value;
-      return;
-    }
-    settingsRows.push({ pluginId, scope, scopeId, key, value });
-  },
-};
-
-vi.mock("../../database/repositories/factory.js", () => ({
-  createCurrentPluginSettingsRepository: () => pluginSettingsRepository,
-}));
-
-vi.mock("../../database/db/index.js", () => ({
-  getDb: () => ({
-    all: async () => hostRows,
-  }),
-}));
-
-const { runSessionRecordingSettingsMigration } =
-  await import("../../upgrade/session-recording-settings-migration.js");
-
-function storedValue(hostId: number, key: string): unknown {
-  const row = settingsRows.find(
-    (entry) => entry.scopeId === String(hostId) && entry.key === key,
-  );
-  return row?.value === null || row?.value === undefined
-    ? undefined
-    : JSON.parse(row.value);
-}
-
-beforeEach(() => {
-  hostRows.length = 0;
-  settingsRows.length = 0;
-});
-
-describe("runSessionRecordingSettingsMigration", () => {
-  it("moves an enabled host's switch into plugin settings", async () => {
-    hostRows.push({ id: 1, enable_session_logging: true });
-
-    const result = await runSessionRecordingSettingsMigration();
-
-    expect(result.moved).toBe(1);
-    expect(storedValue(1, "enableSessionRecording")).toBe(true);
-    expect(
-      settingsRows.every((row) => row.pluginId === "session-recording"),
-    ).toBe(true);
-    expect(settingsRows.every((row) => row.scope === "host")).toBe(true);
-  });
-
-  it("moves a disabled host's switch too, since the defaults flipped", async () => {
-    hostRows.push({ id: 3, enable_session_logging: false });
-
-    const result = await runSessionRecordingSettingsMigration();
-
-    expect(result.moved).toBe(1);
-    expect(storedValue(3, "enableSessionRecording")).toBe(false);
-  });
-
-  it("reads SQLite 0 and 1 as off and on", async () => {
-    hostRows.push({ id: 6, enable_session_logging: 0 });
-    hostRows.push({ id: 7, enable_session_logging: 1 });
-
-    await runSessionRecordingSettingsMigration();
-
-    expect(storedValue(6, "enableSessionRecording")).toBe(false);
-    expect(storedValue(7, "enableSessionRecording")).toBe(true);
-  });
-
-  it("treats a null legacy value as on, matching the old column default", async () => {
-    hostRows.push({ id: 4, enable_session_logging: null });
-
-    const result = await runSessionRecordingSettingsMigration();
-
-    expect(result.moved).toBe(1);
-    expect(storedValue(4, "enableSessionRecording")).toBe(true);
-  });
-
-  it("does nothing on a fresh install", async () => {
-    const result = await runSessionRecordingSettingsMigration();
-
-    expect(result.moved).toBe(0);
-    expect(settingsRows).toEqual([]);
-  });
-
-  it("is idempotent: a second run changes nothing", async () => {
-    hostRows.push({ id: 2, enable_session_logging: true });
-
-    await runSessionRecordingSettingsMigration();
-    const afterFirst = JSON.parse(JSON.stringify(settingsRows));
-
-    const second = await runSessionRecordingSettingsMigration();
-
-    expect(second.moved).toBe(0);
-    expect(second.skipped).toBe(1);
-    expect(settingsRows).toEqual(afterFirst);
-  });
-
-  it("does not overwrite a value the plugin already saved", async () => {
-    hostRows.push({ id: 5, enable_session_logging: true });
-    await pluginSettingsRepository.set(
-      "session-recording",
-      "host",
-      "5",
-      "enableSessionRecording",
-      "false",
-    );
-
-    const result = await runSessionRecordingSettingsMigration();
-
-    expect(result.skipped).toBe(1);
-    expect(storedValue(5, "enableSessionRecording")).toBe(false);
-  });
-});
diff --git a/src/backend/tests/upgrade/session-sharing-settings-migration.test.ts b/src/backend/tests/upgrade/session-sharing-settings-migration.test.ts
deleted file mode 100644
index 33489cac4..000000000
--- a/src/backend/tests/upgrade/session-sharing-settings-migration.test.ts
+++ /dev/null
@@ -1,151 +0,0 @@
-/**
- * The session sharing settings migration.
- *
- * An upgrade must be lossless: an instance with sharing switched off, and a
- * host with sharing switched off, must stay off once the plugin reads its own
- * settings. Running it twice must not duplicate or clobber what it moved.
- */
-
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-interface SettingsRow {
-  pluginId: string;
-  scope: string;
-  scopeId: string | null;
-  key: string;
-  value: string | null;
-}
-
-const blockedHostIds: number[] = [];
-const coreSettings = new Map<string, string>();
-const settingsRows: SettingsRow[] = [];
-
-const find = (
-  pluginId: string,
-  scope: string,
-  scopeId: string | null,
-  key: string,
-) =>
-  settingsRows.find(
-    (row) =>
-      row.pluginId === pluginId &&
-      row.scope === scope &&
-      row.scopeId === scopeId &&
-      row.key === key,
-  );
-
-const pluginSettingsRepository = {
-  get: async (
-    pluginId: string,
-    scope: string,
-    scopeId: string | null,
-    key: string,
-  ) => find(pluginId, scope, scopeId, key) ?? null,
-  set: async (
-    pluginId: string,
-    scope: string,
-    scopeId: string | null,
-    key: string,
-    value: string | null,
-  ) => {
-    const existing = find(pluginId, scope, scopeId, key);
-    if (existing) {
-      existing.value = value;
-      return;
-    }
-    settingsRows.push({ pluginId, scope, scopeId, key, value });
-  },
-};
-
-vi.mock("../../database/repositories/factory.js", () => ({
-  createCurrentPluginSettingsRepository: () => pluginSettingsRepository,
-  createCurrentSettingsRepository: () => ({
-    get: async (key: string) => coreSettings.get(key) ?? null,
-  }),
-}));
-
-vi.mock("../../database/db/index.js", () => ({
-  getDb: () => ({
-    all: async () => blockedHostIds.map((id) => ({ id })),
-  }),
-}));
-
-const { runSessionSharingSettingsMigration } =
-  await import("../../upgrade/session-sharing-settings-migration.js");
-
-function stored(scopeId: string | null, key: string): unknown {
-  const row = settingsRows.find(
-    (entry) => entry.scopeId === scopeId && entry.key === key,
-  );
-  return row?.value == null ? undefined : JSON.parse(row.value);
-}
-
-beforeEach(() => {
-  blockedHostIds.length = 0;
-  coreSettings.clear();
-  settingsRows.length = 0;
-});
-
-describe("runSessionSharingSettingsMigration", () => {
-  it("moves a disabled global switch into the admin setting", async () => {
-    coreSettings.set("session_sharing_globally_enabled", "false");
-
-    const result = await runSessionSharingSettingsMigration();
-
-    expect(result.movedGlobal).toBe(true);
-    expect(stored(null, "globallyEnabled")).toBe(false);
-    expect(settingsRows[0]).toMatchObject({
-      pluginId: "session-sharing",
-      scope: "admin",
-    });
-  });
-
-  it("moves hosts that turned sharing off into host settings", async () => {
-    blockedHostIds.push(4, 9);
-
-    const result = await runSessionSharingSettingsMigration();
-
-    expect(result.movedHosts).toBe(2);
-    expect(stored("4", "allowSessionSharing")).toBe(false);
-    expect(stored("9", "allowSessionSharing")).toBe(false);
-  });
-
-  it("writes nothing when sharing was on everywhere", async () => {
-    coreSettings.set("session_sharing_globally_enabled", "true");
-
-    const result = await runSessionSharingSettingsMigration();
-
-    expect(result).toEqual({ movedGlobal: false, movedHosts: 0, skipped: 0 });
-    expect(settingsRows).toEqual([]);
-  });
-
-  it("is idempotent: a second run changes nothing", async () => {
-    coreSettings.set("session_sharing_globally_enabled", "false");
-    blockedHostIds.push(2);
-
-    await runSessionSharingSettingsMigration();
-    const afterFirst = JSON.parse(JSON.stringify(settingsRows));
-    const second = await runSessionSharingSettingsMigration();
-
-    expect(second.movedGlobal).toBe(false);
-    expect(second.movedHosts).toBe(0);
-    expect(second.skipped).toBe(2);
-    expect(settingsRows).toEqual(afterFirst);
-  });
-
-  it("does not overwrite a value the plugin already saved", async () => {
-    blockedHostIds.push(5);
-    await pluginSettingsRepository.set(
-      "session-sharing",
-      "host",
-      "5",
-      "allowSessionSharing",
-      "true",
-    );
-
-    const result = await runSessionSharingSettingsMigration();
-
-    expect(result.skipped).toBe(1);
-    expect(stored("5", "allowSessionSharing")).toBe(true);
-  });
-});
diff --git a/src/backend/tests/upgrade/snippets-schema-migration.test.ts b/src/backend/tests/upgrade/snippets-schema-migration.test.ts
index bd44d2a90..56232ec60 100644
--- a/src/backend/tests/upgrade/snippets-schema-migration.test.ts
+++ b/src/backend/tests/upgrade/snippets-schema-migration.test.ts
@@ -1,7 +1,6 @@
 import Database from "better-sqlite3";
-import { readFileSync } from "node:fs";
 import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import { repairSnippetsNoteColumn } from "../../upgrade/snippets-schema-migration.js";
+import { repairSnippetsColumns } from "../../upgrade/snippets-schema-migration.js";
 
 let sqlite: Database.Database;
 beforeEach(() => {
@@ -11,7 +10,7 @@ afterEach(() => {
   sqlite.close();
 });
 
-describe("snippet note column upgrade", () => {
+describe("snippet column upgrade", () => {
   it.each(["snippets", "p_snippets_snippets"])(
     "repairs %s without losing rows",
     (table) => {
@@ -24,14 +23,10 @@ describe("snippet note column upgrade", () => {
       expect(() => sqlite.prepare(`SELECT "is_note" FROM "${table}"`)).toThrow(
         /is_note/,
       );
-      repairSnippetsNoteColumn(sqlite);
+      repairSnippetsColumns(sqlite);
       if (table === "snippets") {
-        sqlite.exec(
-          readFileSync(
-            "plugins/snippets/migrations/sqlite/0001_adopt_snippets_tables.sql",
-            "utf8",
-          ),
-        );
+        // What the plugin migration does to the legacy table.
+        sqlite.exec(`ALTER TABLE "snippets" RENAME TO "p_snippets_snippets"`);
       }
       expect(
         sqlite
@@ -39,7 +34,7 @@ describe("snippet note column upgrade", () => {
           .get(),
       ).toEqual({ id: 7, content: "echo hello", is_note: 0 });
       sqlite.exec("UPDATE p_snippets_snippets SET is_note = 1");
-      repairSnippetsNoteColumn(sqlite);
+      repairSnippetsColumns(sqlite);
       expect(
         sqlite.prepare("SELECT is_note FROM p_snippets_snippets").get(),
       ).toEqual({ is_note: 1 });
@@ -47,11 +42,53 @@ describe("snippet note column upgrade", () => {
   );
 
   it("does not create tables on a fresh install", () => {
-    repairSnippetsNoteColumn(sqlite);
+    repairSnippetsColumns(sqlite);
     expect(
       sqlite
         .prepare("SELECT name FROM sqlite_master WHERE type = 'table'")
         .all(),
     ).toEqual([]);
   });
+
+  it("adds and fills sync ids on old snippet and folder tables", () => {
+    sqlite.exec(
+      `CREATE TABLE "p_snippets_snippets" (id INTEGER PRIMARY KEY, user_id TEXT, name TEXT, content TEXT)`,
+    );
+    sqlite.exec(
+      `CREATE TABLE "snippet_folders" (id INTEGER PRIMARY KEY, user_id TEXT, name TEXT)`,
+    );
+    sqlite.exec(
+      `INSERT INTO "p_snippets_snippets" VALUES (1, 'u', 'a', 'ls'), (2, 'u', 'b', 'pwd')`,
+    );
+    sqlite.exec(`INSERT INTO "snippet_folders" VALUES (1, 'u', 'ops')`);
+    repairSnippetsColumns(sqlite);
+
+    const snippets = sqlite
+      .prepare(
+        `SELECT "sync_id", "folder", "order", "host_filter" FROM "p_snippets_snippets"`,
+      )
+      .all() as Array<{ sync_id: string; order: number }>;
+    expect(snippets).toHaveLength(2);
+    expect(snippets[0].sync_id).toMatch(/^[0-9a-f]{32}$/);
+    expect(snippets[0].sync_id).not.toBe(snippets[1].sync_id);
+    expect(snippets[0].order).toBe(0);
+    expect(
+      sqlite
+        .prepare(`SELECT "sync_id", "color", "icon" FROM "snippet_folders"`)
+        .get(),
+    ).toMatchObject({ color: null, icon: null });
+    expect(() =>
+      sqlite.exec(`UPDATE "p_snippets_snippets" SET "sync_id" = 'same'`),
+    ).toThrow(/UNIQUE/);
+
+    const before = sqlite
+      .prepare(`SELECT "sync_id" FROM "p_snippets_snippets" ORDER BY id`)
+      .all();
+    repairSnippetsColumns(sqlite);
+    expect(
+      sqlite
+        .prepare(`SELECT "sync_id" FROM "p_snippets_snippets" ORDER BY id`)
+        .all(),
+    ).toEqual(before);
+  });
 });
diff --git a/src/backend/tests/upgrade/snippets-settings-migration.test.ts b/src/backend/tests/upgrade/snippets-settings-migration.test.ts
deleted file mode 100644
index 37d4cda68..000000000
--- a/src/backend/tests/upgrade/snippets-settings-migration.test.ts
+++ /dev/null
@@ -1,174 +0,0 @@
-/**
- * The snippets settings migration: host quick actions, the startup snippet
- * and the two snippet user preferences must come through into the snippets
- * plugin's settings, and running it twice must change nothing.
- */
-
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-interface Row {
-  pluginId: string;
-  scope: string;
-  scopeId: string | null;
-  key: string;
-  value: string | null;
-}
-
-const pluginRows: Row[] = [];
-const hostRows: Array<Record<string, unknown>> = [];
-const preferenceRows: Array<Record<string, unknown>> = [];
-let pluginInstalled = true;
-
-const find = (scope: string, scopeId: string | null, key: string) =>
-  pluginRows.find(
-    (row) =>
-      row.pluginId === "snippets" &&
-      row.scope === scope &&
-      row.scopeId === scopeId &&
-      row.key === key,
-  );
-
-vi.mock("../../database/repositories/factory.js", () => ({
-  createCurrentPluginRepository: () => ({
-    findById: async (id: string) =>
-      pluginInstalled && id === "snippets" ? { id } : null,
-  }),
-  createCurrentPluginSettingsRepository: () => ({
-    get: async (
-      _pluginId: string,
-      scope: string,
-      scopeId: string | null,
-      key: string,
-    ) => find(scope, scopeId, key) ?? null,
-    set: async (
-      pluginId: string,
-      scope: string,
-      scopeId: string | null,
-      key: string,
-      value: string | null,
-    ) => {
-      const existing = find(scope, scopeId, key);
-      if (existing) existing.value = value;
-      else pluginRows.push({ pluginId, scope, scopeId, key, value });
-    },
-  }),
-}));
-
-vi.mock("../../database/db/index.js", () => ({
-  getDb: () => ({
-    all: async (query: unknown) =>
-      JSON.stringify(query).includes("user_preferences")
-        ? preferenceRows
-        : hostRows,
-  }),
-}));
-
-const { runSnippetsSettingsMigration, snippetHostSettingsFromRow } =
-  await import("../../upgrade/snippets-settings-migration.js");
-
-function value(scope: string, scopeId: string, key: string): unknown {
-  const row = find(scope, scopeId, key);
-  return row?.value == null ? undefined : JSON.parse(row.value);
-}
-
-beforeEach(() => {
-  pluginRows.length = 0;
-  hostRows.length = 0;
-  preferenceRows.length = 0;
-  pluginInstalled = true;
-});
-
-describe("snippetHostSettingsFromRow", () => {
-  it("reads quick actions and the startup snippet, dropping broken rows", () => {
-    expect(
-      snippetHostSettingsFromRow({
-        quick_actions: JSON.stringify([
-          { name: "Restart", snippetId: 3 },
-          { name: "Broken", snippetId: "x" },
-          { name: "Str", snippetId: "4" },
-        ]),
-        terminal_config: JSON.stringify({ fontSize: 14, startupSnippetId: 9 }),
-      }),
-    ).toEqual({
-      quickActions: [
-        { name: "Restart", snippetId: 3 },
-        { name: "Str", snippetId: 4 },
-      ],
-      startupSnippetId: 9,
-    });
-  });
-
-  it("reads nothing from a row without either", () => {
-    expect(
-      snippetHostSettingsFromRow({
-        quick_actions: "[]",
-        terminal_config: JSON.stringify({ fontSize: 14 }),
-      }),
-    ).toEqual({});
-  });
-});
-
-describe("runSnippetsSettingsMigration", () => {
-  it("moves host and user values once", async () => {
-    hostRows.push(
-      {
-        id: 1,
-        quick_actions: JSON.stringify([{ name: "Up", snippetId: 2 }]),
-        terminal_config: JSON.stringify({ startupSnippetId: 5 }),
-      },
-      { id: 2, quick_actions: null, terminal_config: "{}" },
-    );
-    preferenceRows.push(
-      { user_id: "u1", confirm_snippet_execution: 1, folders_collapsed: 0 },
-      {
-        user_id: "u2",
-        confirm_snippet_execution: null,
-        folders_collapsed: null,
-      },
-    );
-
-    const first = await runSnippetsSettingsMigration();
-    expect(first).toEqual({ hostsMoved: 1, hostsSkipped: 0, usersMoved: 1 });
-    expect(value("host", "1", "quickActions")).toEqual([
-      { name: "Up", snippetId: 2 },
-    ]);
-    expect(value("host", "1", "startupSnippetId")).toBe(5);
-    expect(value("user", "u1", "confirmExecution")).toBe(true);
-    expect(value("user", "u1", "foldersCollapsed")).toBe(false);
-    expect(find("user", "u2", "confirmExecution")).toBeUndefined();
-
-    const snapshot = JSON.stringify(pluginRows);
-    const second = await runSnippetsSettingsMigration();
-    expect(second).toEqual({ hostsMoved: 0, hostsSkipped: 1, usersMoved: 0 });
-    expect(JSON.stringify(pluginRows)).toBe(snapshot);
-  });
-
-  it("never overwrites what the user already changed in the plugin", async () => {
-    pluginRows.push({
-      pluginId: "snippets",
-      scope: "host",
-      scopeId: "1",
-      key: "startupSnippetId",
-      value: "7",
-    });
-    hostRows.push({
-      id: 1,
-      quick_actions: JSON.stringify([{ name: "Up", snippetId: 2 }]),
-      terminal_config: JSON.stringify({ startupSnippetId: 5 }),
-    });
-    await runSnippetsSettingsMigration();
-    expect(value("host", "1", "startupSnippetId")).toBe(7);
-    expect(find("host", "1", "quickActions")).toBeUndefined();
-  });
-
-  it("does nothing while the plugin is not installed", async () => {
-    pluginInstalled = false;
-    hostRows.push({
-      id: 1,
-      quick_actions: JSON.stringify([{ name: "Up", snippetId: 2 }]),
-      terminal_config: null,
-    });
-    await runSnippetsSettingsMigration();
-    expect(pluginRows).toHaveLength(0);
-  });
-});
diff --git a/src/backend/tests/upgrade/ssh-terminal-look-migration.test.ts b/src/backend/tests/upgrade/ssh-terminal-look-migration.test.ts
deleted file mode 100644
index 3f9a470f2..000000000
--- a/src/backend/tests/upgrade/ssh-terminal-look-migration.test.ts
+++ /dev/null
@@ -1,248 +0,0 @@
-/**
- * The terminal's look and behavior moving out of ssh_data.terminal_config and
- * user_preferences into the ssh-terminal plugin's settings. Lossless, and a
- * second run changes nothing.
- */
-
-import Database from "better-sqlite3";
-import { drizzle } from "drizzle-orm/better-sqlite3";
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-interface Row {
-  pluginId: string;
-  scope: string;
-  scopeId: string | null;
-  key: string;
-  value: string | null;
-}
-
-const state = vi.hoisted(() => ({
-  db: null as unknown,
-  rows: [] as Row[],
-  installed: true,
-}));
-
-const find = (scope: string, scopeId: string | null, key: string) =>
-  state.rows.find(
-    (row) =>
-      row.pluginId === "ssh-terminal" &&
-      row.scope === scope &&
-      row.scopeId === scopeId &&
-      row.key === key,
-  );
-
-vi.mock("../../database/db/index.js", () => ({ getDb: () => state.db }));
-vi.mock("../../utils/logger.js", () => ({
-  databaseLogger: { info: vi.fn(), warn: vi.fn() },
-}));
-vi.mock("../../database/repositories/factory.js", () => ({
-  createCurrentPluginRepository: () => ({
-    findById: async (id: string) =>
-      state.installed && id === "ssh-terminal" ? { id } : null,
-  }),
-  createCurrentPluginSettingsRepository: () => ({
-    get: async (
-      _pluginId: string,
-      scope: string,
-      scopeId: string | null,
-      key: string,
-    ) => find(scope, scopeId, key) ?? null,
-    getAllForScopeIds: async (scope: string, scopeIds: string[]) =>
-      state.rows.filter(
-        (row) => row.scope === scope && scopeIds.includes(row.scopeId ?? ""),
-      ),
-    set: async (
-      pluginId: string,
-      scope: string,
-      scopeId: string | null,
-      key: string,
-      value: string | null,
-    ) => {
-      const existing = find(scope, scopeId, key);
-      if (existing) existing.value = value;
-      else state.rows.push({ pluginId, scope, scopeId, key, value });
-    },
-  }),
-}));
-
-const {
-  runSshTerminalLookMigration,
-  hostSettingsFromTerminalConfig,
-  userSettingsFromPreferences,
-} = await import("../../upgrade/ssh-terminal-look-migration.js");
-
-let sqlite: Database.Database;
-
-beforeEach(() => {
-  state.rows.length = 0;
-  state.installed = true;
-  sqlite = new Database(":memory:");
-  sqlite.exec(`
-    CREATE TABLE ssh_data (id INTEGER PRIMARY KEY, terminal_config TEXT);
-    CREATE TABLE user_preferences (
-      user_id TEXT PRIMARY KEY,
-      terminal_defaults TEXT,
-      custom_themes TEXT,
-      command_autocomplete INTEGER
-    );
-  `);
-  state.db = drizzle(sqlite);
-});
-
-function host(id: number, key: string): unknown {
-  const row = find("host", String(id), key);
-  return row?.value == null ? undefined : JSON.parse(row.value);
-}
-
-function user(id: string, key: string): unknown {
-  const row = find("user", id, key);
-  return row?.value == null ? undefined : JSON.parse(row.value);
-}
-
-describe("hostSettingsFromTerminalConfig", () => {
-  it("keeps a host that followed the user's look following it", () => {
-    expect(
-      hostSettingsFromTerminalConfig(
-        JSON.stringify({
-          autoTmux: true,
-          localEcho: "on",
-          keepaliveInterval: 30,
-          startupSnippetId: 3,
-        }),
-      ),
-    ).toEqual({ autoTmux: true, localEcho: "on" });
-  });
-
-  it("opts a host with its own look out of the user's defaults", () => {
-    expect(
-      hostSettingsFromTerminalConfig({
-        theme: "Termix Dark",
-        fontSize: "16",
-        cursorStyle: "wobble",
-        bellStyle: "visual",
-      }),
-    ).toEqual({
-      inheritAppearance: false,
-      theme: "termix",
-      fontSize: 16,
-      bellStyle: "visual",
-    });
-  });
-
-  it("reads nothing out of garbage", () => {
-    expect(hostSettingsFromTerminalConfig("not json")).toEqual({});
-    expect(hostSettingsFromTerminalConfig(null)).toEqual({});
-  });
-});
-
-describe("userSettingsFromPreferences", () => {
-  it("takes the defaults, saved themes and autocomplete", () => {
-    expect(
-      userSettingsFromPreferences({
-        terminal_defaults: JSON.stringify({ fontSize: 18, theme: "nord" }),
-        custom_themes: JSON.stringify([
-          { id: "a", name: "Mine", colors: { background: "#000" } },
-        ]),
-        command_autocomplete: 1,
-      }),
-    ).toEqual({
-      terminalDefaults: { fontSize: 18, theme: "nord" },
-      customThemes: [{ id: "a", name: "Mine", colors: { background: "#000" } }],
-      commandAutocomplete: true,
-    });
-    expect(userSettingsFromPreferences({ command_autocomplete: null })).toEqual(
-      {},
-    );
-  });
-});
-
-describe("runSshTerminalLookMigration", () => {
-  function seed() {
-    sqlite.prepare("INSERT INTO ssh_data VALUES (?, ?)").run(
-      1,
-      JSON.stringify({
-        theme: "dracula",
-        fontSize: 18,
-        autoTmux: true,
-        sudoPasswordAutoFill: true,
-        keepaliveInterval: 30,
-      }),
-    );
-    sqlite
-      .prepare("INSERT INTO ssh_data VALUES (?, ?)")
-      .run(2, JSON.stringify({ passwordPromptAutoFill: false }));
-    sqlite
-      .prepare("INSERT INTO ssh_data VALUES (?, ?)")
-      .run(3, JSON.stringify({ keepaliveInterval: 10 }));
-    sqlite.prepare("INSERT INTO ssh_data VALUES (?, ?)").run(4, null);
-    sqlite
-      .prepare("INSERT INTO user_preferences VALUES (?, ?, ?, ?)")
-      .run(
-        "u1",
-        JSON.stringify({ cursorBlink: false }),
-        JSON.stringify([
-          { id: "t", name: "T", colors: { background: "#111" } },
-        ]),
-        1,
-      );
-    sqlite
-      .prepare("INSERT INTO user_preferences VALUES (?, ?, ?, ?)")
-      .run("u2", null, null, null);
-  }
-
-  it("copies each host's terminal keys and each user's terminal preferences", async () => {
-    seed();
-    const result = await runSshTerminalLookMigration();
-
-    expect(result).toEqual({ hostsMoved: 2, hostsSkipped: 0, usersMoved: 1 });
-    expect(host(1, "inheritAppearance")).toBe(false);
-    expect(host(1, "theme")).toBe("dracula");
-    expect(host(1, "fontSize")).toBe(18);
-    expect(host(1, "autoTmux")).toBe(true);
-    expect(host(1, "sudoPasswordAutoFill")).toBe(true);
-    expect(host(1, "keepaliveInterval")).toBeUndefined();
-    expect(host(2, "passwordPromptAutoFill")).toBe(false);
-    expect(host(2, "inheritAppearance")).toBeUndefined();
-    expect(host(3, "keepaliveInterval")).toBeUndefined();
-    expect(user("u1", "terminalDefaults")).toEqual({ cursorBlink: false });
-    expect(user("u1", "customThemes")).toHaveLength(1);
-    expect(user("u1", "commandAutocomplete")).toBe(true);
-    expect(state.rows.some((row) => row.scopeId === "u2")).toBe(false);
-  });
-
-  it("changes nothing on a second run, even after values were edited", async () => {
-    seed();
-    await runSshTerminalLookMigration();
-    find("host", "1", "fontSize")!.value = JSON.stringify(12);
-    find("user", "u1", "commandAutocomplete")!.value = JSON.stringify(false);
-    const before = JSON.stringify(state.rows);
-
-    const second = await runSshTerminalLookMigration();
-
-    expect(second).toEqual({ hostsMoved: 0, hostsSkipped: 2, usersMoved: 0 });
-    expect(JSON.stringify(state.rows)).toBe(before);
-    expect(host(1, "fontSize")).toBe(12);
-  });
-
-  it("waits for the plugin row", async () => {
-    seed();
-    state.installed = false;
-    expect(await runSshTerminalLookMigration()).toEqual({
-      hostsMoved: 0,
-      hostsSkipped: 0,
-      usersMoved: 0,
-    });
-    expect(state.rows).toEqual([]);
-  });
-
-  it("copies nothing from a database without the columns", async () => {
-    sqlite = new Database(":memory:");
-    sqlite.exec("CREATE TABLE ssh_data (id INTEGER PRIMARY KEY)");
-    state.db = drizzle(sqlite);
-    expect(await runSshTerminalLookMigration()).toEqual({
-      hostsMoved: 0,
-      hostsSkipped: 0,
-      usersMoved: 0,
-    });
-  });
-});
diff --git a/src/backend/tests/upgrade/ssh-terminal-macros-migration.test.ts b/src/backend/tests/upgrade/ssh-terminal-macros-migration.test.ts
deleted file mode 100644
index 6fe0c6f24..000000000
--- a/src/backend/tests/upgrade/ssh-terminal-macros-migration.test.ts
+++ /dev/null
@@ -1,104 +0,0 @@
-/**
- * The terminal macros migration: a user's saved macros must come through
- * into the ssh-terminal plugin's macros setting, and running it twice must
- * change nothing.
- */
-
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-interface Row {
-  pluginId: string;
-  scope: string;
-  scopeId: string | null;
-  key: string;
-  value: string | null;
-}
-
-const pluginRows: Row[] = [];
-const preferenceRows: Array<Record<string, unknown>> = [];
-
-const find = (scopeId: string, key: string) =>
-  pluginRows.find(
-    (row) =>
-      row.pluginId === "ssh-terminal" &&
-      row.scope === "user" &&
-      row.scopeId === scopeId &&
-      row.key === key,
-  );
-
-vi.mock("../../database/repositories/factory.js", () => ({
-  createCurrentPluginRepository: () => ({
-    findById: async (id: string) => (id === "ssh-terminal" ? { id } : null),
-  }),
-  createCurrentPluginSettingsRepository: () => ({
-    get: async (_p: string, _s: string, scopeId: string, key: string) =>
-      find(scopeId, key) ?? null,
-    set: async (
-      pluginId: string,
-      scope: string,
-      scopeId: string,
-      key: string,
-      value: string | null,
-    ) => {
-      const existing = find(scopeId, key);
-      if (existing) existing.value = value;
-      else pluginRows.push({ pluginId, scope, scopeId, key, value });
-    },
-  }),
-}));
-
-vi.mock("../../database/db/index.js", () => ({
-  getDb: () => ({ all: async () => preferenceRows }),
-}));
-
-const { runSshTerminalMacrosMigration, macrosFromPreferences } =
-  await import("../../upgrade/ssh-terminal-macros-migration.js");
-
-const macro = { id: "m1", name: "Deploy", steps: [{ id: "s", type: "send" }] };
-
-beforeEach(() => {
-  pluginRows.length = 0;
-  preferenceRows.length = 0;
-});
-
-describe("macrosFromPreferences", () => {
-  it("keeps valid macros and drops the rest", () => {
-    expect(
-      macrosFromPreferences(JSON.stringify([macro, { id: 1 }, "x"])),
-    ).toEqual([macro]);
-    expect(macrosFromPreferences("[]")).toBeNull();
-    expect(macrosFromPreferences("{bad")).toBeNull();
-  });
-});
-
-describe("runSshTerminalMacrosMigration", () => {
-  it("moves each user's macros once", async () => {
-    preferenceRows.push(
-      { user_id: "u1", terminal_macros: JSON.stringify([macro]) },
-      { user_id: "u2", terminal_macros: "[]" },
-    );
-    expect(await runSshTerminalMacrosMigration()).toEqual({ usersMoved: 1 });
-    expect(JSON.parse(find("u1", "macros")!.value!)).toEqual([macro]);
-    expect(find("u2", "macros")).toBeUndefined();
-
-    const snapshot = JSON.stringify(pluginRows);
-    expect(await runSshTerminalMacrosMigration()).toEqual({ usersMoved: 0 });
-    expect(JSON.stringify(pluginRows)).toBe(snapshot);
-  });
-
-  it("leaves a user who already has macros in the plugin alone", async () => {
-    pluginRows.push({
-      pluginId: "ssh-terminal",
-      scope: "user",
-      scopeId: "u1",
-      key: "macros",
-      value: "[]",
-    });
-    preferenceRows.push({
-      user_id: "u1",
-      terminal_macros: JSON.stringify([macro]),
-    });
-    await runSshTerminalMacrosMigration();
-    expect(find("u1", "macros")!.value).toBe("[]");
-  });
-});
diff --git a/src/backend/tests/upgrade/ssh-terminal-settings-migration.test.ts b/src/backend/tests/upgrade/ssh-terminal-settings-migration.test.ts
deleted file mode 100644
index ce3e73b63..000000000
--- a/src/backend/tests/upgrade/ssh-terminal-settings-migration.test.ts
+++ /dev/null
@@ -1,241 +0,0 @@
-/**
- * The SSH terminal settings migration.
- *
- * An upgrade must be lossless: an install's session timeout, command history
- * switch, touch tuning and image storage settings, and every host that turned
- * a terminal switch off, must come through into the plugin's own settings.
- * Running it twice must not duplicate or clobber what it moved.
- */
-
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-interface Row {
-  pluginId: string;
-  scope: string;
-  scopeId: string | null;
-  key: string;
-  value: string | null;
-  encrypted: boolean;
-}
-
-interface HostRow {
-  id: number;
-  enable_terminal: number | null;
-  enable_terminal_toolbar: number | null;
-  enable_command_history: number | null;
-}
-
-const coreSettings = new Map<string, string>();
-const pluginRows: Row[] = [];
-const hostRows: HostRow[] = [];
-let pluginInstalled = true;
-
-const find = (
-  pluginId: string,
-  scope: string,
-  scopeId: string | null,
-  key: string,
-) =>
-  pluginRows.find(
-    (row) =>
-      row.pluginId === pluginId &&
-      row.scope === scope &&
-      row.scopeId === scopeId &&
-      row.key === key,
-  );
-
-vi.mock("../../database/repositories/factory.js", () => ({
-  createCurrentPluginRepository: () => ({
-    findById: async (id: string) =>
-      pluginInstalled && id === "ssh-terminal" ? { id } : null,
-  }),
-  createCurrentPluginSettingsRepository: () => ({
-    get: async (
-      pluginId: string,
-      scope: string,
-      scopeId: string | null,
-      key: string,
-    ) => find(pluginId, scope, scopeId, key) ?? null,
-    set: async (
-      pluginId: string,
-      scope: string,
-      scopeId: string | null,
-      key: string,
-      value: string | null,
-      encrypted = false,
-    ) => {
-      const existing = find(pluginId, scope, scopeId, key);
-      if (existing) {
-        existing.value = value;
-        existing.encrypted = encrypted;
-        return;
-      }
-      pluginRows.push({ pluginId, scope, scopeId, key, value, encrypted });
-    },
-  }),
-  createCurrentSettingsRepository: () => ({
-    get: async (key: string) => coreSettings.get(key) ?? null,
-  }),
-}));
-
-vi.mock("../../database/db/index.js", () => ({
-  getDb: () => ({
-    all: async () =>
-      hostRows.filter(
-        (row) =>
-          row.enable_terminal === 0 ||
-          row.enable_terminal_toolbar === 0 ||
-          row.enable_command_history === 0,
-      ),
-  }),
-}));
-
-vi.mock("../../utils/system-secret-crypto.js", () => ({
-  encryptSystemSecret: async (plaintext: string) =>
-    plaintext.startsWith("sysenc:") ? plaintext : `sysenc:${plaintext}`,
-}));
-
-const { runSshTerminalSettingsMigration } =
-  await import("../../upgrade/ssh-terminal-settings-migration.js");
-
-function admin(key: string): unknown {
-  const row = find("ssh-terminal", "admin", null, key);
-  return row?.value == null ? undefined : JSON.parse(row.value);
-}
-
-function host(id: number, key: string): unknown {
-  const row = find("ssh-terminal", "host", String(id), key);
-  return row?.value == null ? undefined : JSON.parse(row.value);
-}
-
-beforeEach(() => {
-  coreSettings.clear();
-  pluginRows.length = 0;
-  hostRows.length = 0;
-  pluginInstalled = true;
-});
-
-describe("runSshTerminalSettingsMigration", () => {
-  it("moves the admin settings with their types, the local dir as a secret", async () => {
-    coreSettings.set("terminal_session_timeout_minutes", "120");
-    coreSettings.set("terminal_session_persistence_enabled", "false");
-    coreSettings.set("command_history_enabled", "false");
-    coreSettings.set(
-      "touch_input_settings",
-      JSON.stringify({ enabled: false, dragThresholdPx: 12 }),
-    );
-    coreSettings.set("terminal_image_storage_mode", "local");
-    coreSettings.set("terminal_image_local_dir", "/data/images");
-    coreSettings.set("terminal_image_max_count", "50");
-
-    const result = await runSshTerminalSettingsMigration();
-
-    expect(result.moved).toHaveLength(7);
-    expect(admin("sessionTimeoutMinutes")).toBe(120);
-    expect(admin("sessionPersistence")).toBe(false);
-    expect(admin("commandHistoryEnabled")).toBe(false);
-    expect(admin("touchInput")).toEqual({
-      enabled: false,
-      dragThresholdPx: 12,
-    });
-    expect(admin("imageStorageMode")).toBe("local");
-    expect(admin("imageMaxCount")).toBe(50);
-    const localDir = find("ssh-terminal", "admin", null, "imageLocalDir");
-    expect(localDir?.encrypted).toBe(true);
-    expect(JSON.parse(localDir!.value!)).toBe("sysenc:/data/images");
-  });
-
-  it("moves the terminal half of the admin host defaults to the new-host settings", async () => {
-    coreSettings.set(
-      "host_defaults",
-      JSON.stringify({
-        useSocks5: true,
-        fontSize: 18,
-        fontFamily: "Fira Code",
-        theme: "Termix Dark",
-        cursorStyle: "wobble",
-        cursorBlink: false,
-        autoTmux: true,
-      }),
-    );
-
-    await runSshTerminalSettingsMigration();
-
-    expect(admin("newHostFontSize")).toBe(18);
-    expect(admin("newHostFontFamily")).toBe("Fira Code");
-    expect(admin("newHostTheme")).toBe("termix");
-    expect(admin("newHostCursorStyle")).toBeUndefined();
-    expect(admin("newHostCursorBlink")).toBe(false);
-    expect(admin("newHostAutoTmux")).toBe(true);
-  });
-
-  it("copies each host that switched something off, keeping the rest on", async () => {
-    hostRows.push(
-      {
-        id: 1,
-        enable_terminal: 1,
-        enable_terminal_toolbar: 0,
-        enable_command_history: 1,
-      },
-      {
-        id: 2,
-        enable_terminal: 0,
-        enable_terminal_toolbar: 1,
-        enable_command_history: 0,
-      },
-      {
-        id: 3,
-        enable_terminal: 1,
-        enable_terminal_toolbar: 1,
-        enable_command_history: 1,
-      },
-    );
-
-    const result = await runSshTerminalSettingsMigration();
-
-    expect(result.hostsMoved).toBe(2);
-    expect(host(1, "enableTerminal")).toBe(true);
-    expect(host(1, "enableTerminalToolbar")).toBe(false);
-    expect(host(1, "enableCommandHistory")).toBe(true);
-    expect(host(2, "enableTerminal")).toBe(false);
-    expect(host(2, "enableCommandHistory")).toBe(false);
-    // All on is the plugin's default, so it needs no row.
-    expect(host(3, "enableTerminal")).toBeUndefined();
-  });
-
-  it("changes nothing on a second run, even after the admin changed a value", async () => {
-    coreSettings.set("terminal_session_timeout_minutes", "120");
-    hostRows.push({
-      id: 1,
-      enable_terminal: 0,
-      enable_terminal_toolbar: 1,
-      enable_command_history: 1,
-    });
-    await runSshTerminalSettingsMigration();
-
-    const changed = find(
-      "ssh-terminal",
-      "admin",
-      null,
-      "sessionTimeoutMinutes",
-    );
-    changed!.value = JSON.stringify(15);
-    const rowsBefore = pluginRows.length;
-
-    const second = await runSshTerminalSettingsMigration();
-
-    expect(second.moved).toEqual([]);
-    expect(second.hostsMoved).toBe(0);
-    expect(second.hostsSkipped).toBe(1);
-    expect(pluginRows).toHaveLength(rowsBefore);
-    expect(admin("sessionTimeoutMinutes")).toBe(15);
-  });
-
-  it("does nothing until the plugin row exists", async () => {
-    pluginInstalled = false;
-    coreSettings.set("terminal_session_timeout_minutes", "120");
-    const result = await runSshTerminalSettingsMigration();
-    expect(result.moved).toEqual([]);
-    expect(pluginRows).toEqual([]);
-  });
-});
diff --git a/src/backend/tests/upgrade/sso-settings-migration.test.ts b/src/backend/tests/upgrade/sso-settings-migration.test.ts
deleted file mode 100644
index 82518ffe8..000000000
--- a/src/backend/tests/upgrade/sso-settings-migration.test.ts
+++ /dev/null
@@ -1,79 +0,0 @@
-/**
- * The silent sign-in default moving from core settings into the sso plugin's
- * admin settings.
- */
-
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-const state = vi.hoisted(() => ({
-  core: new Map<string, string>(),
-  plugin: new Map<string, string | null>(),
-  pluginInstalled: true,
-}));
-
-vi.mock("../../database/repositories/factory.js", () => ({
-  createCurrentPluginRepository: () => ({
-    findById: async (id: string) =>
-      state.pluginInstalled && id === "sso" ? { id } : null,
-  }),
-  createCurrentSettingsRepository: () => ({
-    get: async (key: string) => state.core.get(key) ?? null,
-    delete: async (key: string) => {
-      state.core.delete(key);
-    },
-  }),
-  createCurrentPluginSettingsRepository: () => ({
-    get: async (
-      _pluginId: string,
-      _scope: string,
-      _scopeId: string | null,
-      key: string,
-    ) => (state.plugin.has(key) ? { value: state.plugin.get(key) } : null),
-    set: async (
-      _pluginId: string,
-      _scope: string,
-      _scopeId: string | null,
-      key: string,
-      value: string | null,
-    ) => {
-      state.plugin.set(key, value);
-    },
-  }),
-}));
-
-vi.mock("../../utils/logger.js", () => ({
-  databaseLogger: { info: vi.fn(), warn: vi.fn() },
-}));
-
-import { runSsoSettingsMigration } from "../../upgrade/sso-settings-migration.js";
-
-beforeEach(() => {
-  state.core = new Map();
-  state.plugin = new Map();
-  state.pluginInstalled = true;
-});
-
-describe("runSsoSettingsMigration", () => {
-  it("moves the core value into the sso admin setting", async () => {
-    state.core.set("oidc_silent_login_default", "true");
-    expect(await runSsoSettingsMigration()).toEqual({ moved: true });
-    expect(state.plugin.get("silentLoginDefault")).toBe("true");
-    expect(state.core.has("oidc_silent_login_default")).toBe(false);
-  });
-
-  it("keeps a value already in plugin settings", async () => {
-    state.core.set("oidc_silent_login_default", "true");
-    state.plugin.set("silentLoginDefault", "false");
-    await runSsoSettingsMigration();
-    expect(state.plugin.get("silentLoginDefault")).toBe("false");
-    expect(state.core.has("oidc_silent_login_default")).toBe(false);
-  });
-
-  it("does nothing twice or without the plugin", async () => {
-    expect(await runSsoSettingsMigration()).toEqual({ moved: false });
-    state.core.set("oidc_silent_login_default", "true");
-    state.pluginInstalled = false;
-    expect(await runSsoSettingsMigration()).toEqual({ moved: false });
-    expect(state.core.get("oidc_silent_login_default")).toBe("true");
-  });
-});
diff --git a/src/backend/tests/upgrade/step-ca-settings-migration.test.ts b/src/backend/tests/upgrade/step-ca-settings-migration.test.ts
deleted file mode 100644
index c41f5933a..000000000
--- a/src/backend/tests/upgrade/step-ca-settings-migration.test.ts
+++ /dev/null
@@ -1,116 +0,0 @@
-/**
- * The Step CA settings migration: a 2.8 CA configuration and its private
- * endpoint allowlist come through into the step-ca plugin's admin settings,
- * the old redirect URI stays in use, and a second run changes nothing.
- */
-
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-const state = vi.hoisted(() => ({
-  legacy: {} as Record<string, string>,
-  pluginRows: [] as Array<{ key: string; value: string | null }>,
-  pluginInstalled: true,
-}));
-
-vi.mock("../../database/repositories/factory.js", () => ({
-  createCurrentPluginRepository: () => ({
-    findById: async (id: string) =>
-      state.pluginInstalled && id === "step-ca" ? { id } : null,
-  }),
-  createCurrentSettingsRepository: () => ({
-    get: async (key: string) => state.legacy[key] ?? null,
-  }),
-  createCurrentPluginSettingsRepository: () => ({
-    get: async (
-      _pluginId: string,
-      _scope: string,
-      _scopeId: string | null,
-      key: string,
-    ) => state.pluginRows.find((row) => row.key === key) ?? null,
-    set: async (
-      _pluginId: string,
-      _scope: string,
-      _scopeId: string | null,
-      key: string,
-      value: string | null,
-    ) => {
-      state.pluginRows = state.pluginRows.filter((row) => row.key !== key);
-      state.pluginRows.push({ key, value });
-    },
-  }),
-}));
-
-vi.mock("../../utils/logger.js", () => ({
-  databaseLogger: { info: vi.fn(), warn: vi.fn() },
-}));
-
-import { runStepCaSettingsMigration } from "../../upgrade/step-ca-settings-migration.js";
-
-const value = (key: string) => {
-  const row = state.pluginRows.find((candidate) => candidate.key === key);
-  return row?.value == null ? undefined : JSON.parse(row.value);
-};
-
-beforeEach(() => {
-  state.legacy = {
-    step_ca_url: "https://ca.internal:9000",
-    step_ca_fingerprint: "a".repeat(64),
-    step_ca_provisioner: "oidc",
-    step_ca_private_endpoint_allowlist: JSON.stringify([
-      "ca.internal",
-      "SSO.internal",
-    ]),
-  };
-  state.pluginRows = [];
-  state.pluginInstalled = true;
-});
-
-describe("runStepCaSettingsMigration", () => {
-  it("moves the 2.8 settings and keeps the old redirect URI", async () => {
-    const result = await runStepCaSettingsMigration();
-    expect(result.moved).toEqual([
-      "step_ca_url",
-      "step_ca_fingerprint",
-      "step_ca_provisioner",
-      "step_ca_private_endpoint_allowlist",
-    ]);
-    expect(result.legacyCallback).toBe(true);
-    expect(value("caUrl")).toBe("https://ca.internal:9000");
-    expect(value("fingerprint")).toBe("a".repeat(64));
-    expect(value("provisioner")).toBe("oidc");
-    expect(value("privateEndpoints")).toBe("ca.internal, sso.internal");
-    expect(value("legacyCallback")).toBe(true);
-  });
-
-  it("changes nothing the second time", async () => {
-    await runStepCaSettingsMigration();
-    const before = JSON.stringify(state.pluginRows);
-    const again = await runStepCaSettingsMigration();
-    expect(again).toEqual({ moved: [], legacyCallback: false });
-    expect(JSON.stringify(state.pluginRows)).toBe(before);
-  });
-
-  it("never overwrites a value set in the plugin", async () => {
-    state.pluginRows = [
-      { key: "caUrl", value: JSON.stringify("https://new.ca") },
-      { key: "legacyCallback", value: JSON.stringify(false) },
-    ];
-    await runStepCaSettingsMigration();
-    expect(value("caUrl")).toBe("https://new.ca");
-    expect(value("legacyCallback")).toBe(false);
-    expect(value("provisioner")).toBe("oidc");
-  });
-
-  it("leaves an install that never used Step CA alone", async () => {
-    state.legacy = {};
-    const result = await runStepCaSettingsMigration();
-    expect(result).toEqual({ moved: [], legacyCallback: false });
-    expect(state.pluginRows).toEqual([]);
-  });
-
-  it("does nothing until the plugin row exists", async () => {
-    state.pluginInstalled = false;
-    await runStepCaSettingsMigration();
-    expect(state.pluginRows).toEqual([]);
-  });
-});
diff --git a/src/backend/tests/upgrade/tailscale-settings-migration.test.ts b/src/backend/tests/upgrade/tailscale-settings-migration.test.ts
deleted file mode 100644
index fa00c75c1..000000000
--- a/src/backend/tests/upgrade/tailscale-settings-migration.test.ts
+++ /dev/null
@@ -1,228 +0,0 @@
-/**
- * The Tailscale settings migration.
- *
- * An upgrade must be lossless: an install that had a working API key must keep
- * working without anyone re-entering it. That is the whole point of the test,
- * and running it twice proves a restart cannot corrupt what it moved.
- */
-
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-interface Row {
-  pluginId: string;
-  scope: string;
-  scopeId: string | null;
-  key: string;
-  value: string | null;
-  encrypted: boolean;
-}
-
-const coreSettings = new Map<string, string>();
-const pluginRows: Row[] = [];
-let pluginInstalled = true;
-
-const pluginSettingsRepository = {
-  get: async (
-    pluginId: string,
-    scope: string,
-    scopeId: string | null,
-    key: string,
-  ) =>
-    pluginRows.find(
-      (row) =>
-        row.pluginId === pluginId &&
-        row.scope === scope &&
-        row.scopeId === scopeId &&
-        row.key === key,
-    ) ?? null,
-  set: async (
-    pluginId: string,
-    scope: string,
-    scopeId: string | null,
-    key: string,
-    value: string | null,
-    encrypted = false,
-  ) => {
-    const existing = pluginRows.find(
-      (row) =>
-        row.pluginId === pluginId &&
-        row.scope === scope &&
-        row.scopeId === scopeId &&
-        row.key === key,
-    );
-    if (existing) {
-      existing.value = value;
-      existing.encrypted = encrypted;
-      return;
-    }
-    pluginRows.push({ pluginId, scope, scopeId, key, value, encrypted });
-  },
-};
-
-vi.mock("../../database/repositories/factory.js", () => ({
-  createCurrentPluginRepository: () => ({
-    findById: async (id: string) =>
-      pluginInstalled && id === "tailscale" ? { id } : null,
-  }),
-  createCurrentPluginSettingsRepository: () => pluginSettingsRepository,
-  createCurrentSettingsRepository: () => ({
-    get: async (key: string) => coreSettings.get(key) ?? null,
-    delete: async (key: string) => coreSettings.delete(key),
-  }),
-}));
-
-vi.mock("../../utils/system-secret-crypto.js", () => ({
-  isSystemEncrypted: (value: string) => value.startsWith("sysenc:v1:"),
-  encryptSystemSecret: async (plaintext: string) =>
-    !plaintext || plaintext.startsWith("sysenc:v1:")
-      ? plaintext
-      : `sysenc:v1:${Buffer.from(plaintext, "utf8").toString("base64")}`,
-  decryptSystemSecret: async (stored: string) =>
-    stored.startsWith("sysenc:v1:")
-      ? Buffer.from(stored.slice("sysenc:v1:".length), "base64").toString(
-          "utf8",
-        )
-      : stored,
-}));
-
-const { runTailscaleSettingsMigration } =
-  await import("../../upgrade/tailscale-settings-migration.js");
-
-function storedValue(key: string): unknown {
-  const row = pluginRows.find((entry) => entry.key === key);
-  return row?.value === null || row?.value === undefined
-    ? undefined
-    : JSON.parse(row.value);
-}
-
-beforeEach(() => {
-  coreSettings.clear();
-  pluginRows.length = 0;
-  pluginInstalled = true;
-});
-
-describe("runTailscaleSettingsMigration", () => {
-  it("moves an existing key and base URL into plugin settings", async () => {
-    coreSettings.set("tailscale_api_key", "tskey-api-legacy");
-    coreSettings.set("tailscale_api_base_url", "https://headscale.example");
-
-    const result = await runTailscaleSettingsMigration();
-
-    expect(result.moved).toEqual([
-      "tailscale_api_key",
-      "tailscale_api_base_url",
-    ]);
-    expect(storedValue("apiKey")).toMatch(/^sysenc:v1:/);
-    expect(storedValue("apiBaseUrl")).toBe("https://headscale.example");
-  });
-
-  it("encrypts the key, which was stored in plaintext before", async () => {
-    coreSettings.set("tailscale_api_key", "tskey-api-legacy");
-
-    await runTailscaleSettingsMigration();
-
-    const row = pluginRows.find((entry) => entry.key === "apiKey")!;
-    expect(row.encrypted).toBe(true);
-    expect(row.value).not.toContain("tskey-api-legacy");
-  });
-
-  it("leaves the base URL readable, since it is not a secret", async () => {
-    coreSettings.set("tailscale_api_base_url", "https://headscale.example");
-
-    await runTailscaleSettingsMigration();
-
-    const row = pluginRows.find((entry) => entry.key === "apiBaseUrl")!;
-    expect(row.encrypted).toBe(false);
-  });
-
-  it("removes the legacy rows so no plaintext key is left behind", async () => {
-    coreSettings.set("tailscale_api_key", "tskey-api-legacy");
-    coreSettings.set("tailscale_api_base_url", "https://headscale.example");
-
-    await runTailscaleSettingsMigration();
-
-    expect(coreSettings.has("tailscale_api_key")).toBe(false);
-    expect(coreSettings.has("tailscale_api_base_url")).toBe(false);
-  });
-
-  it("is idempotent: a second run changes nothing", async () => {
-    coreSettings.set("tailscale_api_key", "tskey-api-legacy");
-    coreSettings.set("tailscale_api_base_url", "https://headscale.example");
-
-    await runTailscaleSettingsMigration();
-    const afterFirst = JSON.parse(JSON.stringify(pluginRows));
-
-    const second = await runTailscaleSettingsMigration();
-
-    expect(second.moved).toEqual([]);
-    expect(pluginRows).toEqual(afterFirst);
-  });
-
-  it("cannot double-encrypt the key across runs", async () => {
-    coreSettings.set("tailscale_api_key", "tskey-api-legacy");
-
-    await runTailscaleSettingsMigration();
-    const first = storedValue("apiKey");
-
-    await runTailscaleSettingsMigration();
-
-    expect(storedValue("apiKey")).toBe(first);
-    expect(String(storedValue("apiKey")).match(/sysenc:v1:/g)).toHaveLength(1);
-  });
-
-  it("drops a stale legacy row when the value was already moved", async () => {
-    // An interrupted run, or a downgrade that rewrote the old key.
-    await pluginSettingsRepository.set(
-      "tailscale",
-      "admin",
-      null,
-      "apiKey",
-      JSON.stringify("sysenc:v1:already"),
-      true,
-    );
-    coreSettings.set("tailscale_api_key", "tskey-plaintext-leftover");
-
-    const result = await runTailscaleSettingsMigration();
-
-    expect(result.skipped).toContain("tailscale_api_key");
-    expect(storedValue("apiKey")).toBe("sysenc:v1:already");
-    expect(coreSettings.has("tailscale_api_key")).toBe(false);
-  });
-
-  it("does nothing on a fresh install with no legacy rows", async () => {
-    const result = await runTailscaleSettingsMigration();
-
-    expect(result.moved).toEqual([]);
-    expect(pluginRows).toEqual([]);
-  });
-
-  it("skips an empty legacy value rather than storing one", async () => {
-    coreSettings.set("tailscale_api_key", "");
-
-    const result = await runTailscaleSettingsMigration();
-
-    expect(result.moved).toEqual([]);
-    expect(pluginRows).toEqual([]);
-  });
-
-  it("waits for the plugin row, because of the foreign key", async () => {
-    pluginInstalled = false;
-    coreSettings.set("tailscale_api_key", "tskey-api-legacy");
-
-    const result = await runTailscaleSettingsMigration();
-
-    expect(result.moved).toEqual([]);
-    expect(pluginRows).toEqual([]);
-    // Still there for the next boot, once the plugin is seeded.
-    expect(coreSettings.get("tailscale_api_key")).toBe("tskey-api-legacy");
-  });
-
-  it("moves each key independently", async () => {
-    coreSettings.set("tailscale_api_key", "tskey-api-legacy");
-
-    const result = await runTailscaleSettingsMigration();
-
-    expect(result.moved).toEqual(["tailscale_api_key"]);
-    expect(storedValue("apiBaseUrl")).toBeUndefined();
-  });
-});
diff --git a/src/backend/tests/upgrade/telemetry-settings-migration.test.ts b/src/backend/tests/upgrade/telemetry-settings-migration.test.ts
deleted file mode 100644
index d9d473bd2..000000000
--- a/src/backend/tests/upgrade/telemetry-settings-migration.test.ts
+++ /dev/null
@@ -1,100 +0,0 @@
-/**
- * The telemetry settings migration: an instance that turned telemetry off in
- * 2.8 stays off, keeps its instance id, and a second run changes nothing.
- */
-
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-interface SettingsRow {
-  pluginId: string;
-  key: string;
-  value: string | null;
-}
-
-const coreSettings = new Map<string, string>();
-const settingsRows: SettingsRow[] = [];
-let pluginInstalled = true;
-
-const find = (pluginId: string, key: string) =>
-  settingsRows.find((row) => row.pluginId === pluginId && row.key === key);
-
-vi.mock("../../database/repositories/factory.js", () => ({
-  createCurrentPluginRepository: () => ({
-    findById: async (id: string) => (pluginInstalled ? { id } : null),
-  }),
-  createCurrentPluginSettingsRepository: () => ({
-    get: async (pluginId: string, _scope: string, _id: null, key: string) =>
-      find(pluginId, key) ?? null,
-    set: async (
-      pluginId: string,
-      _scope: string,
-      _id: null,
-      key: string,
-      value: string | null,
-    ) => {
-      const existing = find(pluginId, key);
-      if (existing) existing.value = value;
-      else settingsRows.push({ pluginId, key, value });
-    },
-  }),
-  createCurrentSettingsRepository: () => ({
-    get: async (key: string) => coreSettings.get(key) ?? null,
-  }),
-}));
-
-const { runTelemetrySettingsMigration } =
-  await import("../../upgrade/telemetry-settings-migration.js");
-
-const stored = (key: string) => {
-  const row = find("telemetry", key);
-  return row?.value == null ? undefined : JSON.parse(row.value);
-};
-
-describe("runTelemetrySettingsMigration", () => {
-  beforeEach(() => {
-    coreSettings.clear();
-    settingsRows.length = 0;
-    pluginInstalled = true;
-  });
-
-  it("moves a disabled switch and the instance id", async () => {
-    coreSettings.set("analytics_enabled", "false");
-    coreSettings.set("analytics_instance_id", "abc-123");
-
-    const result = await runTelemetrySettingsMigration();
-
-    expect(result).toEqual({ movedEnabled: true, movedInstanceId: true });
-    expect(stored("enabled")).toBe(false);
-    expect(stored("instanceId")).toBe("abc-123");
-  });
-
-  it("writes nothing for an enabled instance without an id", async () => {
-    coreSettings.set("analytics_enabled", "true");
-    await runTelemetrySettingsMigration();
-    expect(settingsRows).toHaveLength(0);
-  });
-
-  it("is idempotent and never overwrites plugin values", async () => {
-    coreSettings.set("analytics_enabled", "false");
-    coreSettings.set("analytics_instance_id", "old");
-    settingsRows.push({
-      pluginId: "telemetry",
-      key: "instanceId",
-      value: JSON.stringify("new"),
-    });
-
-    await runTelemetrySettingsMigration();
-    const second = await runTelemetrySettingsMigration();
-
-    expect(second).toEqual({ movedEnabled: false, movedInstanceId: false });
-    expect(stored("instanceId")).toBe("new");
-    expect(settingsRows).toHaveLength(2);
-  });
-
-  it("does nothing without the plugin row", async () => {
-    pluginInstalled = false;
-    coreSettings.set("analytics_enabled", "false");
-    await runTelemetrySettingsMigration();
-    expect(settingsRows).toHaveLength(0);
-  });
-});
diff --git a/src/backend/tests/upgrade/tmux-monitor-settings-migration.test.ts b/src/backend/tests/upgrade/tmux-monitor-settings-migration.test.ts
deleted file mode 100644
index 35031c25c..000000000
--- a/src/backend/tests/upgrade/tmux-monitor-settings-migration.test.ts
+++ /dev/null
@@ -1,149 +0,0 @@
-/**
- * The tmux monitor host-column migration.
- *
- * An upgrade must be lossless: a host with the monitor on must keep it on
- * once the ssh_data column is dropped. Running it twice must not duplicate
- * or clobber what it moved.
- */
-
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-interface HostRow {
-  id: number;
-  enable_tmux_monitor: boolean;
-}
-
-interface SettingsRow {
-  pluginId: string;
-  scope: string;
-  scopeId: string | null;
-  key: string;
-  value: string | null;
-}
-
-const hostRows: HostRow[] = [];
-const settingsRows: SettingsRow[] = [];
-
-const find = (
-  pluginId: string,
-  scope: string,
-  scopeId: string | null,
-  key: string,
-) =>
-  settingsRows.find(
-    (row) =>
-      row.pluginId === pluginId &&
-      row.scope === scope &&
-      row.scopeId === scopeId &&
-      row.key === key,
-  );
-
-const pluginSettingsRepository = {
-  get: async (
-    pluginId: string,
-    scope: string,
-    scopeId: string | null,
-    key: string,
-  ) => find(pluginId, scope, scopeId, key) ?? null,
-  set: async (
-    pluginId: string,
-    scope: string,
-    scopeId: string | null,
-    key: string,
-    value: string | null,
-  ) => {
-    const existing = find(pluginId, scope, scopeId, key);
-    if (existing) {
-      existing.value = value;
-      return;
-    }
-    settingsRows.push({ pluginId, scope, scopeId, key, value });
-  },
-};
-
-vi.mock("../../database/repositories/factory.js", () => ({
-  createCurrentPluginSettingsRepository: () => pluginSettingsRepository,
-}));
-
-vi.mock("../../database/db/index.js", () => ({
-  getDb: () => ({
-    all: async () => hostRows.filter((row) => row.enable_tmux_monitor),
-  }),
-}));
-
-const { runTmuxMonitorSettingsMigration } =
-  await import("../../upgrade/tmux-monitor-settings-migration.js");
-
-function storedValue(hostId: number, key: string): unknown {
-  const row = settingsRows.find(
-    (entry) => entry.scopeId === String(hostId) && entry.key === key,
-  );
-  return row?.value === null || row?.value === undefined
-    ? undefined
-    : JSON.parse(row.value);
-}
-
-beforeEach(() => {
-  hostRows.length = 0;
-  settingsRows.length = 0;
-});
-
-describe("runTmuxMonitorSettingsMigration", () => {
-  it("moves a host's enabled switch into plugin settings", async () => {
-    hostRows.push({ id: 1, enable_tmux_monitor: true });
-
-    const result = await runTmuxMonitorSettingsMigration();
-
-    expect(result.moved).toBe(1);
-    expect(storedValue(1, "enableTmuxMonitor")).toBe(true);
-    expect(settingsRows.every((row) => row.pluginId === "tmux-monitor")).toBe(
-      true,
-    );
-    expect(settingsRows.every((row) => row.scope === "host")).toBe(true);
-  });
-
-  it("leaves a disabled host untouched", async () => {
-    hostRows.push({ id: 3, enable_tmux_monitor: false });
-
-    const result = await runTmuxMonitorSettingsMigration();
-
-    expect(result.moved).toBe(0);
-    expect(storedValue(3, "enableTmuxMonitor")).toBeUndefined();
-  });
-
-  it("does nothing on a fresh install", async () => {
-    const result = await runTmuxMonitorSettingsMigration();
-
-    expect(result.moved).toBe(0);
-    expect(settingsRows).toEqual([]);
-  });
-
-  it("is idempotent: a second run changes nothing", async () => {
-    hostRows.push({ id: 2, enable_tmux_monitor: true });
-
-    await runTmuxMonitorSettingsMigration();
-    const afterFirst = JSON.parse(JSON.stringify(settingsRows));
-
-    const second = await runTmuxMonitorSettingsMigration();
-
-    expect(second.moved).toBe(0);
-    expect(second.skipped).toBe(1);
-    expect(settingsRows).toEqual(afterFirst);
-  });
-
-  it("does not overwrite a value the plugin already saved", async () => {
-    hostRows.push({ id: 5, enable_tmux_monitor: true });
-    await pluginSettingsRepository.set(
-      "tmux-monitor",
-      "host",
-      "5",
-      "enableTmuxMonitor",
-      "false",
-    );
-
-    const result = await runTmuxMonitorSettingsMigration();
-
-    expect(result.skipped).toBe(1);
-    expect(storedValue(5, "enableTmuxMonitor")).toBe(false);
-  });
-});
diff --git a/src/backend/tests/upgrade/tunnels-settings-migration.test.ts b/src/backend/tests/upgrade/tunnels-settings-migration.test.ts
deleted file mode 100644
index 17dc9307e..000000000
--- a/src/backend/tests/upgrade/tunnels-settings-migration.test.ts
+++ /dev/null
@@ -1,185 +0,0 @@
-/**
- * The tunnel host-columns migration.
- *
- * An upgrade must be lossless: a host with tunnels on and a saved tunnel list
- * must keep both once the ssh_data columns are dropped. Running it twice
- * must not duplicate or clobber what it moved.
- */
-
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-interface HostRow {
-  id: number;
-  enable_tunnel: boolean;
-  tunnel_connections: string | null;
-}
-
-interface SettingsRow {
-  pluginId: string;
-  scope: string;
-  scopeId: string | null;
-  key: string;
-  value: string | null;
-}
-
-const hostRows: HostRow[] = [];
-const settingsRows: SettingsRow[] = [];
-
-const find = (
-  pluginId: string,
-  scope: string,
-  scopeId: string | null,
-  key: string,
-) =>
-  settingsRows.find(
-    (row) =>
-      row.pluginId === pluginId &&
-      row.scope === scope &&
-      row.scopeId === scopeId &&
-      row.key === key,
-  );
-
-const pluginSettingsRepository = {
-  get: async (
-    pluginId: string,
-    scope: string,
-    scopeId: string | null,
-    key: string,
-  ) => find(pluginId, scope, scopeId, key) ?? null,
-  set: async (
-    pluginId: string,
-    scope: string,
-    scopeId: string | null,
-    key: string,
-    value: string | null,
-  ) => {
-    const existing = find(pluginId, scope, scopeId, key);
-    if (existing) {
-      existing.value = value;
-      return;
-    }
-    settingsRows.push({ pluginId, scope, scopeId, key, value });
-  },
-};
-
-vi.mock("../../database/repositories/factory.js", () => ({
-  createCurrentPluginSettingsRepository: () => pluginSettingsRepository,
-}));
-
-vi.mock("../../database/db/index.js", () => ({
-  getDb: () => ({
-    all: async () =>
-      hostRows.filter(
-        (row) => row.enable_tunnel || row.tunnel_connections !== null,
-      ),
-  }),
-}));
-
-const { runTunnelsSettingsMigration } =
-  await import("../../upgrade/tunnels-settings-migration.js");
-
-function storedValue(hostId: number, key: string): unknown {
-  const row = settingsRows.find(
-    (entry) => entry.scopeId === String(hostId) && entry.key === key,
-  );
-  return row?.value === null || row?.value === undefined
-    ? undefined
-    : JSON.parse(row.value);
-}
-
-const tunnel = {
-  scope: "s2s",
-  mode: "local",
-  sourcePort: 8080,
-  endpointHost: "db",
-  endpointPort: 5432,
-  maxRetries: 3,
-  retryInterval: 10,
-  autoStart: true,
-};
-
-beforeEach(() => {
-  hostRows.length = 0;
-  settingsRows.length = 0;
-});
-
-describe("runTunnelsSettingsMigration", () => {
-  it("moves a host's switch and saved tunnels into plugin settings", async () => {
-    hostRows.push({
-      id: 1,
-      enable_tunnel: true,
-      tunnel_connections: JSON.stringify([tunnel]),
-    });
-
-    const result = await runTunnelsSettingsMigration();
-
-    expect(result.moved).toBe(1);
-    expect(storedValue(1, "enableTunnel")).toBe(true);
-    expect(storedValue(1, "tunnelConnections")).toEqual([tunnel]);
-    expect(settingsRows.every((row) => row.pluginId === "tunnels")).toBe(true);
-    expect(settingsRows.every((row) => row.scope === "host")).toBe(true);
-  });
-
-  it("keeps a disabled host's saved tunnels and its disabled switch", async () => {
-    hostRows.push({
-      id: 3,
-      enable_tunnel: false,
-      tunnel_connections: JSON.stringify([tunnel]),
-    });
-
-    await runTunnelsSettingsMigration();
-
-    expect(storedValue(3, "enableTunnel")).toBe(false);
-    expect(storedValue(3, "tunnelConnections")).toEqual([tunnel]);
-  });
-
-  it("stores an unreadable tunnel list as empty rather than failing", async () => {
-    hostRows.push({ id: 4, enable_tunnel: true, tunnel_connections: "{nope" });
-
-    const result = await runTunnelsSettingsMigration();
-
-    expect(result.moved).toBe(1);
-    expect(storedValue(4, "tunnelConnections")).toEqual([]);
-  });
-
-  it("does nothing on a fresh install", async () => {
-    const result = await runTunnelsSettingsMigration();
-
-    expect(result.moved).toBe(0);
-    expect(settingsRows).toEqual([]);
-  });
-
-  it("is idempotent: a second run changes nothing", async () => {
-    hostRows.push({ id: 2, enable_tunnel: true, tunnel_connections: null });
-
-    await runTunnelsSettingsMigration();
-    const afterFirst = JSON.parse(JSON.stringify(settingsRows));
-
-    const second = await runTunnelsSettingsMigration();
-
-    expect(second.moved).toBe(0);
-    expect(second.skipped).toBe(1);
-    expect(settingsRows).toEqual(afterFirst);
-  });
-
-  it("does not overwrite a value the plugin already saved", async () => {
-    hostRows.push({
-      id: 5,
-      enable_tunnel: true,
-      tunnel_connections: JSON.stringify([tunnel]),
-    });
-    await pluginSettingsRepository.set(
-      "tunnels",
-      "host",
-      "5",
-      "enableTunnel",
-      "false",
-    );
-
-    const result = await runTunnelsSettingsMigration();
-
-    expect(result.skipped).toBe(1);
-    expect(storedValue(5, "enableTunnel")).toBe(false);
-    expect(storedValue(5, "tunnelConnections")).toBeUndefined();
-  });
-});
diff --git a/src/backend/tests/upgrade/vault-settings-migration.test.ts b/src/backend/tests/upgrade/vault-settings-migration.test.ts
deleted file mode 100644
index 966ae7a5f..000000000
--- a/src/backend/tests/upgrade/vault-settings-migration.test.ts
+++ /dev/null
@@ -1,152 +0,0 @@
-/**
- * The Vault host settings migration.
- *
- * Every host's ssh_data.vault_profile_id must come through into the vault
- * plugin's profileId host setting, and an install that used Vault keeps the
- * 2.8 redirect URI. Running it twice must change nothing.
- */
-
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-const state = vi.hoisted(() => ({
-  pluginRows: [] as Array<{
-    scope: string;
-    scopeId: string | null;
-    key: string;
-    value: string | null;
-  }>,
-  hostRows: [] as Array<Record<string, unknown>>,
-  legacyProfiles: 0,
-  adoptedProfiles: 0,
-  pluginInstalled: true,
-  columnGone: false,
-}));
-
-vi.mock("../../database/repositories/factory.js", () => ({
-  createCurrentPluginRepository: () => ({
-    findById: async (id: string) =>
-      state.pluginInstalled && id === "vault" ? { id } : null,
-  }),
-  createCurrentPluginSettingsRepository: () => ({
-    get: async (
-      _pluginId: string,
-      scope: string,
-      scopeId: string | null,
-      key: string,
-    ) =>
-      state.pluginRows.find(
-        (row) =>
-          row.scope === scope && row.scopeId === scopeId && row.key === key,
-      ) ?? null,
-    set: async (
-      _pluginId: string,
-      scope: string,
-      scopeId: string | null,
-      key: string,
-      value: string | null,
-    ) => {
-      state.pluginRows.push({ scope, scopeId, key, value });
-    },
-  }),
-}));
-
-vi.mock("../../utils/crypto-migration/raw-rows.js", () => ({
-  selectRows: async (query: unknown) => {
-    const text = JSON.stringify(query);
-    if (text.includes("vault_profile_id")) {
-      if (state.columnGone) throw new Error("no such column");
-      return state.hostRows.filter((row) => row.vault_profile_id != null);
-    }
-    const count = text.includes("p_vault_profiles")
-      ? state.adoptedProfiles
-      : state.legacyProfiles;
-    return Array.from({ length: Math.min(count, 1) }, () => ({ "1": 1 }));
-  },
-  runStatement: async () => {},
-}));
-
-vi.mock("../../utils/logger.js", () => ({
-  databaseLogger: { info: vi.fn(), warn: vi.fn() },
-}));
-
-import { runVaultSettingsMigration } from "../../upgrade/vault-settings-migration.js";
-
-const setting = (scopeId: string | null, key: string) =>
-  state.pluginRows.find((row) => row.scopeId === scopeId && row.key === key)
-    ?.value;
-
-beforeEach(() => {
-  state.pluginRows = [];
-  state.hostRows = [];
-  state.legacyProfiles = 0;
-  state.adoptedProfiles = 0;
-  state.pluginInstalled = true;
-  state.columnGone = false;
-});
-
-describe("runVaultSettingsMigration", () => {
-  it("moves every host's profile, keeps the old redirect URI, and a second run changes nothing", async () => {
-    state.hostRows = [
-      { id: 1, vault_profile_id: 7 },
-      { id: 2, vault_profile_id: null },
-      { id: 3, vault_profile_id: "9" },
-    ];
-    state.adoptedProfiles = 2;
-
-    const first = await runVaultSettingsMigration();
-    expect(first).toEqual({
-      hostsMoved: 2,
-      hostsSkipped: 0,
-      legacyCallback: true,
-    });
-    expect(setting("1", "profileId")).toBe("7");
-    expect(setting("2", "profileId")).toBeUndefined();
-    expect(setting("3", "profileId")).toBe("9");
-    expect(setting(null, "legacyCallback")).toBe("true");
-
-    const rows = state.pluginRows.length;
-    const second = await runVaultSettingsMigration();
-    expect(second).toEqual({
-      hostsMoved: 0,
-      hostsSkipped: 2,
-      legacyCallback: false,
-    });
-    expect(state.pluginRows).toHaveLength(rows);
-  });
-
-  it("keeps a host's value already set in the plugin", async () => {
-    state.pluginRows.push({
-      scope: "host",
-      scopeId: "1",
-      key: "profileId",
-      value: "4",
-    });
-    state.hostRows = [{ id: 1, vault_profile_id: 7 }];
-    await runVaultSettingsMigration();
-    expect(setting("1", "profileId")).toBe("4");
-  });
-
-  it("keeps the old redirect URI for profiles the plugin has not adopted yet", async () => {
-    state.legacyProfiles = 1;
-    const result = await runVaultSettingsMigration();
-    expect(result.legacyCallback).toBe(true);
-  });
-
-  it("uses the new redirect URI on a fresh install, and profiles made later do not change that", async () => {
-    state.columnGone = true;
-    const first = await runVaultSettingsMigration();
-    expect(first.legacyCallback).toBe(false);
-    expect(setting(null, "legacyCallback")).toBe("false");
-
-    state.adoptedProfiles = 3;
-    await runVaultSettingsMigration();
-    expect(setting(null, "legacyCallback")).toBe("false");
-  });
-
-  it("waits for the plugin row", async () => {
-    state.pluginInstalled = false;
-    state.hostRows = [{ id: 1, vault_profile_id: 7 }];
-    await runVaultSettingsMigration();
-    expect(state.pluginRows).toHaveLength(0);
-  });
-});
diff --git a/src/backend/tests/upgrade/wake-on-lan-settings-migration.test.ts b/src/backend/tests/upgrade/wake-on-lan-settings-migration.test.ts
deleted file mode 100644
index fac0de47b..000000000
--- a/src/backend/tests/upgrade/wake-on-lan-settings-migration.test.ts
+++ /dev/null
@@ -1,190 +0,0 @@
-/**
- * The Wake-on-LAN host settings migration.
- *
- * An upgrade must be lossless: every host with a MAC address or a broadcast
- * address must come through into the wake-on-lan plugin's host settings.
- * Running it twice must not duplicate or clobber what it moved.
- */
-
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-const state = vi.hoisted(() => ({
-  pluginRows: [] as Array<{
-    pluginId: string;
-    scope: string;
-    scopeId: string | null;
-    key: string;
-    value: string | null;
-  }>,
-  hostRows: [] as Array<Record<string, unknown>>,
-  pluginInstalled: true,
-  columnsGone: false,
-}));
-
-vi.mock("../../database/repositories/factory.js", () => ({
-  createCurrentPluginRepository: () => ({
-    findById: async (id: string) =>
-      state.pluginInstalled && id === "wake-on-lan" ? { id } : null,
-  }),
-  createCurrentPluginSettingsRepository: () => ({
-    getAll: async (_pluginId: string, scope: string, scopeId: string | null) =>
-      state.pluginRows.filter(
-        (row) => row.scope === scope && row.scopeId === scopeId,
-      ),
-    set: async (
-      pluginId: string,
-      scope: string,
-      scopeId: string | null,
-      key: string,
-      value: string | null,
-    ) => {
-      const existing = state.pluginRows.find(
-        (row) =>
-          row.scope === scope && row.scopeId === scopeId && row.key === key,
-      );
-      if (existing) {
-        existing.value = value;
-        return;
-      }
-      state.pluginRows.push({ pluginId, scope, scopeId, key, value });
-    },
-  }),
-}));
-
-vi.mock("../../utils/crypto-migration/raw-rows.js", () => ({
-  selectRows: async () => {
-    if (state.columnsGone) throw new Error("no such column: mac_address");
-    return state.hostRows;
-  },
-}));
-
-vi.mock("../../utils/logger.js", () => ({
-  databaseLogger: { info: vi.fn(), warn: vi.fn() },
-}));
-
-import {
-  wakeOnLanSettingsFromRow,
-  runWakeOnLanSettingsMigration,
-} from "../../upgrade/wake-on-lan-settings-migration.js";
-
-const hostValues = (hostId: number) =>
-  Object.fromEntries(
-    state.pluginRows
-      .filter((row) => row.scope === "host" && row.scopeId === String(hostId))
-      .map((row) => [row.key, JSON.parse(row.value ?? "null")]),
-  );
-
-beforeEach(() => {
-  state.pluginRows = [];
-  state.hostRows = [];
-  state.pluginInstalled = true;
-  state.columnsGone = false;
-});
-
-describe("wakeOnLanSettingsFromRow", () => {
-  it("carries over a MAC address", () => {
-    expect(
-      wakeOnLanSettingsFromRow({
-        id: 1,
-        mac_address: "aa:bb:cc:dd:ee:ff",
-        wol_broadcast_address: null,
-      }),
-    ).toEqual({ macAddress: "aa:bb:cc:dd:ee:ff" });
-  });
-
-  it("carries over a broadcast address alongside the MAC address", () => {
-    expect(
-      wakeOnLanSettingsFromRow({
-        id: 1,
-        mac_address: "aa:bb:cc:dd:ee:ff",
-        wol_broadcast_address: "192.168.1.255",
-      }),
-    ).toEqual({
-      macAddress: "aa:bb:cc:dd:ee:ff",
-      broadcastAddress: "192.168.1.255",
-    });
-  });
-
-  it("produces nothing for a host with neither set", () => {
-    expect(
-      wakeOnLanSettingsFromRow({
-        id: 1,
-        mac_address: null,
-        wol_broadcast_address: null,
-      }),
-    ).toEqual({});
-  });
-});
-
-describe("runWakeOnLanSettingsMigration", () => {
-  it("moves every host's wake-on-lan settings and skips hosts with nothing set", async () => {
-    state.hostRows = [
-      { id: 1, mac_address: "aa:bb:cc:dd:ee:ff", wol_broadcast_address: null },
-      {
-        id: 2,
-        mac_address: "11:22:33:44:55:66",
-        wol_broadcast_address: "192.168.1.255",
-      },
-      { id: 3, mac_address: null, wol_broadcast_address: null },
-    ];
-
-    const result = await runWakeOnLanSettingsMigration();
-
-    expect(result).toEqual({ hostsMoved: 2, hostsSkipped: 0 });
-    expect(hostValues(1)).toEqual({ macAddress: "aa:bb:cc:dd:ee:ff" });
-    expect(hostValues(2)).toEqual({
-      macAddress: "11:22:33:44:55:66",
-      broadcastAddress: "192.168.1.255",
-    });
-    expect(hostValues(3)).toEqual({});
-  });
-
-  it("changes nothing when run twice", async () => {
-    state.hostRows = [
-      { id: 1, mac_address: "aa:bb:cc:dd:ee:ff", wol_broadcast_address: null },
-    ];
-    await runWakeOnLanSettingsMigration();
-    const before = JSON.stringify(state.pluginRows);
-
-    const second = await runWakeOnLanSettingsMigration();
-
-    expect(second).toEqual({ hostsMoved: 0, hostsSkipped: 1 });
-    expect(JSON.stringify(state.pluginRows)).toBe(before);
-  });
-
-  it("keeps a value already saved in the plugin", async () => {
-    state.pluginRows.push({
-      pluginId: "wake-on-lan",
-      scope: "host",
-      scopeId: "1",
-      key: "macAddress",
-      value: JSON.stringify("11:11:11:11:11:11"),
-    });
-    state.hostRows = [
-      { id: 1, mac_address: "aa:bb:cc:dd:ee:ff", wol_broadcast_address: null },
-    ];
-
-    await runWakeOnLanSettingsMigration();
-
-    expect(hostValues(1)).toEqual({ macAddress: "11:11:11:11:11:11" });
-  });
-
-  it("does nothing before the plugin row exists or once the columns are gone", async () => {
-    state.hostRows = [
-      { id: 1, mac_address: "aa:bb:cc:dd:ee:ff", wol_broadcast_address: null },
-    ];
-    state.pluginInstalled = false;
-    expect(await runWakeOnLanSettingsMigration()).toEqual({
-      hostsMoved: 0,
-      hostsSkipped: 0,
-    });
-
-    state.pluginInstalled = true;
-    state.columnsGone = true;
-    expect(await runWakeOnLanSettingsMigration()).toEqual({
-      hostsMoved: 0,
-      hostsSkipped: 0,
-    });
-    expect(state.pluginRows).toEqual([]);
-  });
-});
diff --git a/src/backend/tests/upgrade/warpgate-settings-migration.test.ts b/src/backend/tests/upgrade/warpgate-settings-migration.test.ts
deleted file mode 100644
index 9daabf626..000000000
--- a/src/backend/tests/upgrade/warpgate-settings-migration.test.ts
+++ /dev/null
@@ -1,161 +0,0 @@
-/**
- * The Warpgate host settings migration.
- *
- * Every host with use_warpgate on, whatever shape the engine returned it in,
- * and every pre-2.7 host still on auth type "warpgate", must come through
- * into the warpgate plugin's useWarpgate host setting. Running it twice must
- * change nothing.
- */
-
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-const state = vi.hoisted(() => ({
-  pluginRows: [] as Array<{
-    scope: string;
-    scopeId: string | null;
-    key: string;
-    value: string | null;
-  }>,
-  hostRows: [] as Array<Record<string, unknown>>,
-  statements: [] as string[],
-  pluginInstalled: true,
-  columnGone: false,
-}));
-
-vi.mock("../../database/repositories/factory.js", () => ({
-  createCurrentPluginRepository: () => ({
-    findById: async (id: string) =>
-      state.pluginInstalled && id === "warpgate" ? { id } : null,
-  }),
-  createCurrentPluginSettingsRepository: () => ({
-    get: async (
-      _pluginId: string,
-      scope: string,
-      scopeId: string | null,
-      key: string,
-    ) =>
-      state.pluginRows.find(
-        (row) =>
-          row.scope === scope && row.scopeId === scopeId && row.key === key,
-      ) ?? null,
-    set: async (
-      _pluginId: string,
-      scope: string,
-      scopeId: string | null,
-      key: string,
-      value: string | null,
-    ) => {
-      state.pluginRows.push({ scope, scopeId, key, value });
-    },
-  }),
-}));
-
-vi.mock("../../utils/crypto-migration/raw-rows.js", () => ({
-  selectRows: async (query: { queryChunks?: unknown[] }) => {
-    const text = JSON.stringify(query);
-    if (text.includes("use_warpgate") && state.columnGone) {
-      throw new Error("no such column: use_warpgate");
-    }
-    return state.hostRows.filter(
-      (row) => !text.includes("WHERE") || row.auth_type === "warpgate",
-    );
-  },
-  runStatement: async (query: unknown) => {
-    const text = JSON.stringify(query);
-    state.statements.push(text);
-    const id = (query as { queryChunks: unknown[] }).queryChunks.find(
-      (chunk) => typeof chunk === "number",
-    );
-    const row = state.hostRows.find((candidate) => candidate.id === id);
-    if (row) row.auth_type = "none";
-  },
-}));
-
-vi.mock("../../utils/logger.js", () => ({
-  databaseLogger: { info: vi.fn(), warn: vi.fn() },
-}));
-
-import {
-  runWarpgateSettingsMigration,
-  usesWarpgate,
-} from "../../upgrade/warpgate-settings-migration.js";
-
-const enabled = (hostId: number) =>
-  state.pluginRows.some(
-    (row) =>
-      row.scopeId === String(hostId) &&
-      row.key === "useWarpgate" &&
-      row.value === "true",
-  );
-
-beforeEach(() => {
-  state.pluginRows = [];
-  state.hostRows = [];
-  state.statements = [];
-  state.pluginInstalled = true;
-  state.columnGone = false;
-});
-
-describe("usesWarpgate", () => {
-  it("reads the flag in every shape the engines return", () => {
-    for (const flag of [true, 1, "1", "true"]) {
-      expect(
-        usesWarpgate({ id: 1, use_warpgate: flag, auth_type: "none" }),
-      ).toBe(true);
-    }
-    for (const flag of [false, 0, "0", null]) {
-      expect(
-        usesWarpgate({ id: 1, use_warpgate: flag, auth_type: "none" }),
-      ).toBe(false);
-    }
-    expect(usesWarpgate({ id: 1, auth_type: "warpgate" })).toBe(true);
-  });
-});
-
-describe("runWarpgateSettingsMigration", () => {
-  it("moves every flagged host and fixes the old auth type, and a second run changes nothing", async () => {
-    state.hostRows = [
-      { id: 1, use_warpgate: 1, auth_type: "password" },
-      { id: 2, use_warpgate: 0, auth_type: "key" },
-      { id: 3, use_warpgate: true, auth_type: "none" },
-      { id: 4, use_warpgate: 0, auth_type: "warpgate" },
-    ];
-
-    const first = await runWarpgateSettingsMigration();
-    expect(first).toEqual({
-      hostsMoved: 3,
-      hostsSkipped: 0,
-      authTypesFixed: 1,
-    });
-    expect(enabled(1)).toBe(true);
-    expect(enabled(2)).toBe(false);
-    expect(enabled(3)).toBe(true);
-    expect(enabled(4)).toBe(true);
-    expect(state.hostRows[3].auth_type).toBe("none");
-
-    const rows = state.pluginRows.length;
-    const second = await runWarpgateSettingsMigration();
-    // Host 4 is on auth type "none" now, so only the flagged two are seen.
-    expect(second).toEqual({
-      hostsMoved: 0,
-      hostsSkipped: 2,
-      authTypesFixed: 0,
-    });
-    expect(state.pluginRows).toHaveLength(rows);
-  });
-
-  it("still fixes old auth types on an install without the column", async () => {
-    state.columnGone = true;
-    state.hostRows = [{ id: 5, auth_type: "warpgate" }];
-    await runWarpgateSettingsMigration();
-    expect(enabled(5)).toBe(true);
-    expect(state.hostRows[0].auth_type).toBe("none");
-  });
-
-  it("waits for the plugin row", async () => {
-    state.pluginInstalled = false;
-    state.hostRows = [{ id: 1, use_warpgate: 1, auth_type: "password" }];
-    await runWarpgateSettingsMigration();
-    expect(state.pluginRows).toHaveLength(0);
-  });
-});
diff --git a/src/backend/tests/upgrade/web-endpoint-settings-migration.test.ts b/src/backend/tests/upgrade/web-endpoint-settings-migration.test.ts
deleted file mode 100644
index d5ce5fea2..000000000
--- a/src/backend/tests/upgrade/web-endpoint-settings-migration.test.ts
+++ /dev/null
@@ -1,184 +0,0 @@
-/**
- * The web endpoint host-columns migration.
- *
- * An upgrade must be lossless: a host with web endpoints on and a saved
- * config must keep both once the ssh_data columns are dropped. Running it
- * twice must not duplicate or clobber what it moved.
- */
-
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-interface HostRow {
-  id: number;
-  enable_web_ui: boolean;
-  web_ui_config: string | null;
-}
-
-interface SettingsRow {
-  pluginId: string;
-  scope: string;
-  scopeId: string | null;
-  key: string;
-  value: string | null;
-}
-
-const hostRows: HostRow[] = [];
-const settingsRows: SettingsRow[] = [];
-
-const find = (
-  pluginId: string,
-  scope: string,
-  scopeId: string | null,
-  key: string,
-) =>
-  settingsRows.find(
-    (row) =>
-      row.pluginId === pluginId &&
-      row.scope === scope &&
-      row.scopeId === scopeId &&
-      row.key === key,
-  );
-
-const pluginSettingsRepository = {
-  get: async (
-    pluginId: string,
-    scope: string,
-    scopeId: string | null,
-    key: string,
-  ) => find(pluginId, scope, scopeId, key) ?? null,
-  set: async (
-    pluginId: string,
-    scope: string,
-    scopeId: string | null,
-    key: string,
-    value: string | null,
-  ) => {
-    const existing = find(pluginId, scope, scopeId, key);
-    if (existing) {
-      existing.value = value;
-      return;
-    }
-    settingsRows.push({ pluginId, scope, scopeId, key, value });
-  },
-};
-
-vi.mock("../../database/repositories/factory.js", () => ({
-  createCurrentPluginSettingsRepository: () => pluginSettingsRepository,
-}));
-
-vi.mock("../../database/db/index.js", () => ({
-  getDb: () => ({
-    all: async () =>
-      hostRows.filter((row) => row.enable_web_ui || row.web_ui_config !== null),
-  }),
-}));
-
-const { runWebEndpointSettingsMigration } =
-  await import("../../upgrade/web-endpoint-settings-migration.js");
-
-function storedValue(hostId: number, key: string): unknown {
-  const row = settingsRows.find(
-    (entry) => entry.scopeId === String(hostId) && entry.key === key,
-  );
-  return row?.value === null || row?.value === undefined
-    ? undefined
-    : JSON.parse(row.value);
-}
-
-const endpoint = {
-  id: "e1",
-  label: "Proxmox",
-  scheme: "https",
-  port: 8006,
-  path: "/",
-  access: "direct",
-  render: "embedded",
-};
-
-beforeEach(() => {
-  hostRows.length = 0;
-  settingsRows.length = 0;
-});
-
-describe("runWebEndpointSettingsMigration", () => {
-  it("moves a host's switch and saved config into plugin settings", async () => {
-    hostRows.push({
-      id: 1,
-      enable_web_ui: true,
-      web_ui_config: JSON.stringify({ endpoints: [endpoint] }),
-    });
-
-    const result = await runWebEndpointSettingsMigration();
-
-    expect(result.moved).toBe(1);
-    expect(storedValue(1, "enableWebUi")).toBe(true);
-    expect(storedValue(1, "webUiConfig")).toEqual({ endpoints: [endpoint] });
-    expect(settingsRows.every((row) => row.pluginId === "web-endpoint")).toBe(
-      true,
-    );
-    expect(settingsRows.every((row) => row.scope === "host")).toBe(true);
-  });
-
-  it("keeps a disabled host's saved config and its disabled switch", async () => {
-    hostRows.push({
-      id: 3,
-      enable_web_ui: false,
-      web_ui_config: JSON.stringify({ endpoints: [endpoint] }),
-    });
-
-    await runWebEndpointSettingsMigration();
-
-    expect(storedValue(3, "enableWebUi")).toBe(false);
-    expect(storedValue(3, "webUiConfig")).toEqual({ endpoints: [endpoint] });
-  });
-
-  it("stores an unreadable config as null rather than failing", async () => {
-    hostRows.push({ id: 4, enable_web_ui: true, web_ui_config: "{nope" });
-
-    const result = await runWebEndpointSettingsMigration();
-
-    expect(result.moved).toBe(1);
-    expect(storedValue(4, "webUiConfig")).toBeNull();
-  });
-
-  it("does nothing on a fresh install", async () => {
-    const result = await runWebEndpointSettingsMigration();
-
-    expect(result.moved).toBe(0);
-    expect(settingsRows).toEqual([]);
-  });
-
-  it("is idempotent: a second run changes nothing", async () => {
-    hostRows.push({ id: 2, enable_web_ui: true, web_ui_config: null });
-
-    await runWebEndpointSettingsMigration();
-    const afterFirst = JSON.parse(JSON.stringify(settingsRows));
-
-    const second = await runWebEndpointSettingsMigration();
-
-    expect(second.moved).toBe(0);
-    expect(second.skipped).toBe(1);
-    expect(settingsRows).toEqual(afterFirst);
-  });
-
-  it("does not overwrite a value the plugin already saved", async () => {
-    hostRows.push({
-      id: 5,
-      enable_web_ui: true,
-      web_ui_config: JSON.stringify({ endpoints: [endpoint] }),
-    });
-    await pluginSettingsRepository.set(
-      "web-endpoint",
-      "host",
-      "5",
-      "enableWebUi",
-      "false",
-    );
-
-    const result = await runWebEndpointSettingsMigration();
-
-    expect(result.skipped).toBe(1);
-    expect(storedValue(5, "enableWebUi")).toBe(false);
-    expect(storedValue(5, "webUiConfig")).toBeUndefined();
-  });
-});
diff --git a/src/backend/tests/utils/audit-forwarder.test.ts b/src/backend/tests/utils/audit-forwarder.test.ts
index eb1c928c9..bd15e1d11 100644
--- a/src/backend/tests/utils/audit-forwarder.test.ts
+++ b/src/backend/tests/utils/audit-forwarder.test.ts
@@ -123,7 +123,7 @@ describe("forwardAuditEntry", () => {
     );
   });
 
-  it("swallows transport errors — a dead SIEM must not break auditing", async () => {
+  it("swallows transport errors, a dead SIEM must not break auditing", async () => {
     safeFetch.mockRejectedValueOnce(new Error("ECONNREFUSED"));
 
     await expect(forwardAuditEntry(ENTRY, NOW, env)).resolves.toBe(false);
@@ -140,7 +140,7 @@ describe("forwardAuditEntry", () => {
       await forwardAuditEntry(ENTRY, NOW, env);
     }
 
-    // 5 per-entry warnings, then one suppression notice — not 8.
+    // 5 per-entry warnings, then one suppression notice, not 8.
     const perEntry = logs.warn.mock.calls.filter(
       (call) => call[0] === "Failed to forward audit entry",
     );
diff --git a/src/backend/tests/utils/auth-manager-impersonation.test.ts b/src/backend/tests/utils/auth-manager-impersonation.test.ts
index e3a59d1a3..f03328da1 100644
--- a/src/backend/tests/utils/auth-manager-impersonation.test.ts
+++ b/src/backend/tests/utils/auth-manager-impersonation.test.ts
@@ -19,8 +19,14 @@ vi.mock("../../database/db/index.js", () => ({
 
 vi.mock("../../database/repositories/factory.js", () => ({
   createCurrentSettingsRepository: () => ({ get: async () => null }),
-  // No sessionId in our tokens, so the session branch is skipped.
-  createCurrentSessionRepository: () => ({ findById: async () => null }),
+  createCurrentSessionRepository: () => ({
+    findById: async (id: string) => ({
+      id,
+      expiresAt: new Date(Date.now() + 3600_000).toISOString(),
+    }),
+    touch: async () => {},
+    revoke: async () => {},
+  }),
   createCurrentUserRepository: () => ({
     findById: async (userId: string) => state.users.get(userId) ?? null,
   }),
@@ -128,7 +134,9 @@ function runMiddleware(token: string, headers: Record<string, string> = {}) {
 }
 
 function token(userId: string) {
-  return jwt.sign({ userId }, jwtSecret, { expiresIn: "1h" });
+  return jwt.sign({ userId, sessionId: `s-${userId}` }, jwtSecret, {
+    expiresIn: "1h",
+  });
 }
 
 beforeEach(() => {
diff --git a/src/backend/tests/utils/auth-manager-oidc-logout.test.ts b/src/backend/tests/utils/auth-manager-oidc-logout.test.ts
index c3d6eff56..d6d70c06b 100644
--- a/src/backend/tests/utils/auth-manager-oidc-logout.test.ts
+++ b/src/backend/tests/utils/auth-manager-oidc-logout.test.ts
@@ -75,17 +75,15 @@ function insertSession({ id, userId, sub, sid, providerId }: SessionInput) {
     .sqlite!.prepare(
       `INSERT INTO sessions (
         id, user_id, jwt_token, device_type, device_info,
-        oidc_sub, oidc_sid, sso_provider_id,
+        external_session_ref,
         created_at, expires_at, last_active_at
-      ) VALUES (?, ?, ?, 'browser', 'test', ?, ?, ?, ?, ?, ?)`,
+      ) VALUES (?, ?, ?, 'browser', 'test', ?, ?, ?, ?)`,
     )
     .run(
       id,
       userId,
       `token-${id}`,
-      sub,
-      sid,
-      providerId,
+      JSON.stringify({ providerId, sub, sid }),
       "2026-07-10T00:00:00.000Z",
       "2026-07-11T00:00:00.000Z",
       "2026-07-10T00:00:00.000Z",
@@ -108,9 +106,7 @@ describe("AuthManager.revokeSessionsByExternalSession", () => {
         jwt_token TEXT NOT NULL,
         device_type TEXT NOT NULL,
         device_info TEXT NOT NULL,
-        oidc_sub TEXT,
-        oidc_sid TEXT,
-        sso_provider_id INTEGER,
+        external_session_ref TEXT,
         created_at TEXT NOT NULL,
         expires_at TEXT NOT NULL,
         last_active_at TEXT NOT NULL
@@ -148,7 +144,7 @@ describe("AuthManager.revokeSessionsByExternalSession", () => {
 
     await expect(
       authManager.revokeSessionsByExternalSession({
-        ssoProviderId: 7,
+        providerId: 7,
         sub: "subject-1",
         sid: "session-1",
       }),
@@ -182,7 +178,7 @@ describe("AuthManager.revokeSessionsByExternalSession", () => {
 
     await expect(
       authManager.revokeSessionsByExternalSession({
-        ssoProviderId: 7,
+        providerId: 7,
         sub: "subject-1",
       }),
     ).resolves.toBe(2);
@@ -190,10 +186,34 @@ describe("AuthManager.revokeSessionsByExternalSession", () => {
     expect(sessionIds()).toEqual(["other-subject"]);
   });
 
+  it("leaves sessions with no or a broken reference alone", async () => {
+    mocks
+      .sqlite!.prepare(
+        `INSERT INTO sessions (
+          id, user_id, jwt_token, device_type, device_info,
+          external_session_ref, created_at, expires_at, last_active_at
+        ) VALUES (?, 'user-1', 't', 'browser', 'test', ?, 'a', 'b', 'c')`,
+      )
+      .run("broken", "{not json");
+    mocks
+      .sqlite!.prepare(
+        `INSERT INTO sessions (
+          id, user_id, jwt_token, device_type, device_info,
+          external_session_ref, created_at, expires_at, last_active_at
+        ) VALUES (?, 'user-1', 't', 'browser', 'test', NULL, 'a', 'b', 'c')`,
+      )
+      .run("password");
+
+    await expect(
+      authManager.revokeSessionsByExternalSession({ sub: "subject-1" }),
+    ).resolves.toBe(0);
+    expect(sessionIds()).toEqual(["broken", "password"]);
+  });
+
   it("does not persist when no session matches", async () => {
     await expect(
       authManager.revokeSessionsByExternalSession({
-        ssoProviderId: 7,
+        providerId: 7,
         sid: "missing",
       }),
     ).resolves.toBe(0);
@@ -213,7 +233,7 @@ describe("AuthManager.revokeSessionsByExternalSession", () => {
 
     await expect(
       authManager.revokeSessionsByExternalSession({
-        ssoProviderId: 7,
+        providerId: 7,
         sid: "session-1",
       }),
     ).rejects.toThrow("disk full");
diff --git a/src/backend/tests/utils/auth-manager-token.test.ts b/src/backend/tests/utils/auth-manager-token.test.ts
index 82f106396..132a1a7b9 100644
--- a/src/backend/tests/utils/auth-manager-token.test.ts
+++ b/src/backend/tests/utils/auth-manager-token.test.ts
@@ -18,7 +18,12 @@ vi.mock("../../database/db/index.js", () => ({
 
 vi.mock("../../database/repositories/factory.js", () => ({
   createCurrentSettingsRepository: () => ({ get: async () => null }),
-  createCurrentSessionRepository: () => ({}),
+  createCurrentSessionRepository: () => ({
+    findById: async (id: string) =>
+      id === "expired"
+        ? { id, expiresAt: new Date(Date.now() - 1000).toISOString() }
+        : { id },
+  }),
   createCurrentUserRepository: () => ({}),
   createCurrentApiKeyRepository: () => ({}),
   createCurrentTrustedDeviceRepository: () => ({}),
@@ -58,7 +63,7 @@ function makeLegacyDataKeyWrap(
 ): Record<string, string> {
   const iv = crypto.randomBytes(12);
   const cipher = crypto.createCipheriv("aes-256-gcm", encryptionKey, iv);
-  cipher.setAAD(Buffer.from(`${userId}:`, "utf8"));
+  cipher.setAAD(Buffer.from(`${userId}:s1`, "utf8"));
   const data = Buffer.concat([cipher.update(dek), cipher.final()]);
   return {
     version: "v1",
@@ -85,7 +90,11 @@ describe("AuthManager token handling", () => {
   it("adopts the DEK from a legacy dataKeyWrap token on verify", async () => {
     const dek = crypto.randomBytes(32);
     const token = jwt.sign(
-      { userId: "user-1", dataKeyWrap: makeLegacyDataKeyWrap("user-1", dek) },
+      {
+        userId: "user-1",
+        sessionId: "s1",
+        dataKeyWrap: makeLegacyDataKeyWrap("user-1", dek),
+      },
       jwtSecret,
       { expiresIn: "1h" },
     );
@@ -107,6 +116,7 @@ describe("AuthManager token handling", () => {
     const token = jwt.sign(
       {
         userId: "user-1",
+        sessionId: "s1",
         dataKeyWrap: makeLegacyDataKeyWrap("user-1", crypto.randomBytes(32)),
       },
       jwtSecret,
@@ -123,13 +133,79 @@ describe("AuthManager token handling", () => {
     wrap.tag = Buffer.from(
       Buffer.from(wrap.tag, "base64url").map((b) => b ^ 0xff),
     ).toString("base64url");
-    const token = jwt.sign({ userId: "user-1", dataKeyWrap: wrap }, jwtSecret, {
-      expiresIn: "1h",
-    });
+    const token = jwt.sign(
+      { userId: "user-1", sessionId: "s1", dataKeyWrap: wrap },
+      jwtSecret,
+      {
+        expiresIn: "1h",
+      },
+    );
 
     const payload = await authManager.verifyJWTToken(token);
 
     expect(payload?.userId).toBe("user-1");
     expect(mocks.adoptRecoveredDEK).not.toHaveBeenCalled();
   });
+
+  it("rejects a signed token with no session behind it", async () => {
+    const token = jwt.sign({ userId: "user-1" }, jwtSecret, {
+      expiresIn: "1h",
+    });
+    expect(await authManager.verifyJWTToken(token)).toBeNull();
+  });
+
+  it("rejects a token whose session has expired", async () => {
+    const token = jwt.sign(
+      { userId: "user-1", sessionId: "expired" },
+      jwtSecret,
+      { expiresIn: "1h" },
+    );
+    expect(await authManager.verifyJWTToken(token)).toBeNull();
+  });
+
+  it("still accepts the sessionless pending second-factor token", async () => {
+    const token = jwt.sign({ userId: "user-1", pendingTOTP: true }, jwtSecret, {
+      expiresIn: "10m",
+    });
+    const payload = await authManager.verifyJWTToken(token);
+    expect(payload?.pendingTOTP).toBe(true);
+  });
+
+  it("issues a one minute socket ticket bound to the session", async () => {
+    const ticket = await authManager.issueSocketTicket("user-1", "s1");
+    const payload = jwt.decode(ticket) as Record<string, number | string>;
+
+    expect(payload.userId).toBe("user-1");
+    expect(payload.sessionId).toBe("s1");
+    expect(payload.purpose).toBe("ws");
+    expect(Number(payload.exp) - Number(payload.iat)).toBe(60);
+  });
+
+  it("only accepts a socket ticket where a socket asks for it", async () => {
+    const ticket = await authManager.issueSocketTicket("user-1", "s1");
+
+    expect(await authManager.verifyJWTToken(ticket)).toBeNull();
+    const payload = await authManager.verifyJWTToken(ticket, {
+      allowSocketTicket: true,
+    });
+    expect(payload?.userId).toBe("user-1");
+  });
+
+  it("rejects a socket ticket whose session has expired", async () => {
+    const ticket = await authManager.issueSocketTicket("user-1", "expired");
+    expect(
+      await authManager.verifyJWTToken(ticket, { allowSocketTicket: true }),
+    ).toBeNull();
+  });
+
+  it("rejects a token with an unknown purpose", async () => {
+    const token = jwt.sign(
+      { userId: "user-1", sessionId: "s1", purpose: "other" },
+      jwtSecret,
+      { expiresIn: "1h" },
+    );
+    expect(
+      await authManager.verifyJWTToken(token, { allowSocketTicket: true }),
+    ).toBeNull();
+  });
 });
diff --git a/src/backend/tests/utils/cors-config.test.ts b/src/backend/tests/utils/cors-config.test.ts
index e511120c9..1812ca66e 100644
--- a/src/backend/tests/utils/cors-config.test.ts
+++ b/src/backend/tests/utils/cors-config.test.ts
@@ -1,6 +1,9 @@
 import { afterEach, describe, expect, it } from "vitest";
 import type { Request } from "express";
-import { isCorsOriginAllowed } from "../../utils/cors-config.js";
+import {
+  isCorsOriginAllowed,
+  isDesktopAppOrigin,
+} from "../../utils/cors-config.js";
 
 function request(headers: Record<string, string> = {}): Request {
   return {
@@ -11,6 +14,7 @@ function request(headers: Record<string, string> = {}): Request {
 
 afterEach(() => {
   delete process.env.CORS_ALLOWED_ORIGINS;
+  delete process.env.ELECTRON_EMBEDDED;
 });
 
 describe("isCorsOriginAllowed", () => {
@@ -41,4 +45,41 @@ describe("isCorsOriginAllowed", () => {
     const req = request({ host: "termix.example" });
     expect(isCorsOriginAllowed(req, "https://attacker.example")).toBe(false);
   });
+
+  describe("embedded desktop backend", () => {
+    it("rejects other websites even with no allowlist", () => {
+      process.env.ELECTRON_EMBEDDED = "true";
+      const req = request({ host: "127.0.0.1:30001" });
+      expect(isCorsOriginAllowed(req, "https://evil.example")).toBe(false);
+    });
+
+    it("still allows the desktop app and the dev server", () => {
+      process.env.ELECTRON_EMBEDDED = "true";
+      const req = request({ host: "127.0.0.1:30001" });
+      expect(isCorsOriginAllowed(req, "file://")).toBe(true);
+      expect(isCorsOriginAllowed(req, "http://localhost:5173")).toBe(true);
+      expect(isCorsOriginAllowed(req, undefined)).toBe(true);
+    });
+
+    it("allows an explicitly configured origin", () => {
+      process.env.ELECTRON_EMBEDDED = "true";
+      process.env.CORS_ALLOWED_ORIGINS = "https://portal.example";
+      expect(isCorsOriginAllowed(request(), "https://portal.example")).toBe(
+        true,
+      );
+    });
+  });
+});
+
+describe("isDesktopAppOrigin", () => {
+  it("accepts no origin, file:// and the dev server", () => {
+    expect(isDesktopAppOrigin(undefined)).toBe(true);
+    expect(isDesktopAppOrigin("file://")).toBe(true);
+    expect(isDesktopAppOrigin("http://127.0.0.1:5173")).toBe(true);
+  });
+
+  it("rejects websites", () => {
+    expect(isDesktopAppOrigin("https://evil.example")).toBe(false);
+    expect(isDesktopAppOrigin("null")).toBe(false);
+  });
 });
diff --git a/src/backend/tests/utils/crypto-migration/ssh-options-migration.test.ts b/src/backend/tests/utils/crypto-migration/ssh-options-migration.test.ts
deleted file mode 100644
index 5e8aa710a..000000000
--- a/src/backend/tests/utils/crypto-migration/ssh-options-migration.test.ts
+++ /dev/null
@@ -1,129 +0,0 @@
-/**
- * The SSH connection options moving out of ssh_data.terminal_config into
- * the core ssh_options column, against a real SQLite database through the
- * same raw SQL helpers the boot path uses.
- */
-
-import Database from "better-sqlite3";
-import { drizzle } from "drizzle-orm/better-sqlite3";
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-const state = vi.hoisted(() => ({ db: null as unknown }));
-
-vi.mock("../../../database/db/index.js", () => ({ getDb: () => state.db }));
-vi.mock("../../../utils/logger.js", () => ({
-  databaseLogger: { info: vi.fn(), warn: vi.fn() },
-}));
-
-const { runSshOptionsMigration } =
-  await import("../../../utils/crypto-migration/ssh-options-migration.js");
-
-let sqlite: Database.Database;
-
-beforeEach(() => {
-  sqlite = new Database(":memory:");
-  sqlite.exec(`
-    CREATE TABLE ssh_data (
-      id INTEGER PRIMARY KEY,
-      terminal_config TEXT,
-      ssh_options TEXT
-    );
-  `);
-  state.db = drizzle(sqlite);
-});
-
-function insert(id: number, terminalConfig: unknown, sshOptions?: string) {
-  sqlite
-    .prepare(
-      "INSERT INTO ssh_data (id, terminal_config, ssh_options) VALUES (?, ?, ?)",
-    )
-    .run(
-      id,
-      terminalConfig === null ? null : JSON.stringify(terminalConfig),
-      sshOptions ?? null,
-    );
-}
-
-function options(id: number): unknown {
-  const row = sqlite
-    .prepare("SELECT ssh_options FROM ssh_data WHERE id = ?")
-    .get(id) as { ssh_options: string | null };
-  return row.ssh_options === null ? null : JSON.parse(row.ssh_options);
-}
-
-describe("runSshOptionsMigration", () => {
-  it("copies only the connection options, leaving the look and old tunnel keys", async () => {
-    insert(1, {
-      theme: "dracula",
-      fontSize: 16,
-      keepaliveInterval: 30,
-      keepaliveCountMax: 3,
-      allowLegacyAlgorithms: false,
-      agentSocketPath: "/run/agent.sock",
-      agentIdentity: "work",
-      agentForwarding: true,
-      environmentVariables: [{ key: "LANG", value: "C" }],
-      startupSnippetId: 4,
-      cfAccessClientId: "old",
-      cfTunnelHostname: "old.example.com",
-    });
-
-    const result = await runSshOptionsMigration();
-
-    expect(result.hostsMoved).toBe(1);
-    expect(options(1)).toEqual({
-      keepaliveInterval: 30,
-      keepaliveCountMax: 3,
-      allowLegacyAlgorithms: false,
-      agentSocketPath: "/run/agent.sock",
-      agentIdentity: "work",
-      agentForwarding: true,
-      environmentVariables: [{ key: "LANG", value: "C" }],
-    });
-    const terminalConfig = sqlite
-      .prepare("SELECT terminal_config FROM ssh_data WHERE id = 1")
-      .get() as { terminal_config: string };
-    expect(JSON.parse(terminalConfig.terminal_config).keepaliveInterval).toBe(
-      30,
-    );
-  });
-
-  it("marks a host with no options as done and skips hosts with no config", async () => {
-    insert(1, { theme: "dracula" });
-    insert(2, null);
-
-    const result = await runSshOptionsMigration();
-
-    expect(result.hostsMoved).toBe(0);
-    expect(options(1)).toEqual({});
-    expect(options(2)).toBeNull();
-  });
-
-  it("changes nothing on a second run, even after the options were edited", async () => {
-    insert(1, { keepaliveInterval: 30 });
-    insert(
-      2,
-      { keepaliveInterval: 45 },
-      JSON.stringify({ keepaliveCountMax: 9 }),
-    );
-    await runSshOptionsMigration();
-
-    sqlite
-      .prepare("UPDATE ssh_data SET ssh_options = ? WHERE id = 1")
-      .run(JSON.stringify({ keepaliveInterval: 90 }));
-    const second = await runSshOptionsMigration();
-
-    expect(second.hostsMoved).toBe(0);
-    expect(options(1)).toEqual({ keepaliveInterval: 90 });
-    expect(options(2)).toEqual({ keepaliveCountMax: 9 });
-  });
-
-  it("does not throw on a database without the column", async () => {
-    sqlite = new Database(":memory:");
-    sqlite.exec("CREATE TABLE ssh_data (id INTEGER PRIMARY KEY)");
-    state.db = drizzle(sqlite);
-    await expect(runSshOptionsMigration()).resolves.toEqual({
-      hostsMoved: 0,
-    });
-  });
-});
diff --git a/src/backend/tests/utils/export-settings.test.ts b/src/backend/tests/utils/export-settings.test.ts
new file mode 100644
index 000000000..7a5d04fb1
--- /dev/null
+++ b/src/backend/tests/utils/export-settings.test.ts
@@ -0,0 +1,23 @@
+import { describe, expect, it } from "vitest";
+import { selectExportableSettings } from "../../utils/export-settings.js";
+
+const rows = [
+  { key: "allow_registration", value: "true" },
+  { key: "audit_log_forward_token", value: "secret" },
+  { key: "reset_code_alice", value: "123456" },
+  { key: "temp_reset_token_alice", value: "abc" },
+  { key: "user_dek_v3_u1", value: "{}" },
+];
+
+describe("selectExportableSettings", () => {
+  it("gives a non-admin export no global settings", () => {
+    expect(selectExportableSettings(rows, false)).toEqual([]);
+  });
+
+  it("keeps instance config for admins but drops secrets", () => {
+    expect(selectExportableSettings(rows, true).map((r) => r.key)).toEqual([
+      "allow_registration",
+      "user_dek_v3_u1",
+    ]);
+  });
+});
diff --git a/src/backend/tests/utils/host-status-config-migration.test.ts b/src/backend/tests/utils/host-status-config-migration.test.ts
deleted file mode 100644
index a1c81038a..000000000
--- a/src/backend/tests/utils/host-status-config-migration.test.ts
+++ /dev/null
@@ -1,143 +0,0 @@
-/**
- * The status half of ssh_data.stats_config moving into the core
- * status_check_enabled and status_check_interval columns. Run against a real
- * SQLite database through the same raw SQL helpers the boot path uses.
- */
-
-import Database from "better-sqlite3";
-import { drizzle } from "drizzle-orm/better-sqlite3";
-import { beforeEach, describe, expect, it, vi } from "vitest";
-
-const state = vi.hoisted(() => ({
-  settings: new Map<string, string>(),
-  db: null as unknown,
-}));
-
-vi.mock("../../database/db/index.js", () => ({ getDb: () => state.db }));
-vi.mock("../../database/repositories/factory.js", () => ({
-  createCurrentSettingsRepository: () => ({
-    get: async (key: string) => state.settings.get(key) ?? null,
-    set: async (key: string, value: string) => {
-      state.settings.set(key, value);
-    },
-  }),
-}));
-vi.mock("../../utils/logger.js", () => ({
-  databaseLogger: { info: vi.fn(), warn: vi.fn() },
-}));
-
-const {
-  runHostStatusConfigMigration,
-  statusConfigFromStatsConfig,
-  HOST_STATUS_CONFIG_MIGRATED,
-} =
-  await import("../../utils/crypto-migration/host-status-config-migration.js");
-
-let sqlite: Database.Database;
-
-function createHosts(withStatsConfig = true) {
-  sqlite = new Database(":memory:");
-  sqlite.exec(`
-    CREATE TABLE ssh_data (
-      id INTEGER PRIMARY KEY,
-      ${withStatsConfig ? "stats_config TEXT," : ""}
-      status_check_enabled INTEGER NOT NULL DEFAULT 1,
-      status_check_interval INTEGER
-    );
-  `);
-  state.db = drizzle(sqlite);
-}
-
-const hosts = () =>
-  sqlite
-    .prepare(
-      "SELECT id, status_check_enabled AS enabled, status_check_interval AS interval FROM ssh_data ORDER BY id",
-    )
-    .all();
-
-beforeEach(() => {
-  state.settings.clear();
-  createHosts();
-});
-
-describe("statusConfigFromStatsConfig", () => {
-  it.each([
-    [null, true, null],
-    ["{}", true, null],
-    ['{"statusCheckEnabled":false}', false, null],
-    ['{"disableTcpPing":true}', false, null],
-    ['{"useGlobalStatusInterval":false,"statusCheckInterval":45}', true, 45],
-    ['{"useGlobalStatusInterval":true,"statusCheckInterval":45}', true, null],
-    ['{"useGlobalStatusInterval":false,"statusCheckInterval":2}', true, null],
-    [
-      JSON.stringify(JSON.stringify({ statusCheckEnabled: false })),
-      false,
-      null,
-    ],
-    ["not json", true, null],
-  ])("%s", (raw, enabled, interval) => {
-    expect(statusConfigFromStatsConfig(raw)).toEqual({
-      statusCheckEnabled: enabled,
-      statusCheckInterval: interval,
-    });
-  });
-});
-
-describe("runHostStatusConfigMigration", () => {
-  it("copies each host's status options into the new columns", async () => {
-    const insert = sqlite.prepare(
-      "INSERT INTO ssh_data (id, stats_config) VALUES (?, ?)",
-    );
-    insert.run(1, JSON.stringify({ statusCheckEnabled: false }));
-    insert.run(
-      2,
-      JSON.stringify({
-        useGlobalStatusInterval: false,
-        statusCheckInterval: 45,
-      }),
-    );
-    insert.run(
-      3,
-      JSON.stringify({ disableTcpPing: true, metricsEnabled: false }),
-    );
-    insert.run(4, JSON.stringify({ metricsInterval: 10 }));
-    insert.run(5, null);
-
-    const result = await runHostStatusConfigMigration();
-
-    expect(result).toEqual({ skipped: false, hostsMoved: 3 });
-    expect(hosts()).toEqual([
-      { id: 1, enabled: 0, interval: null },
-      { id: 2, enabled: 1, interval: 45 },
-      { id: 3, enabled: 0, interval: null },
-      { id: 4, enabled: 1, interval: null },
-      { id: 5, enabled: 1, interval: null },
-    ]);
-    expect(state.settings.get(HOST_STATUS_CONFIG_MIGRATED)).toBe("true");
-  });
-
-  it("changes nothing the second time", async () => {
-    sqlite
-      .prepare("INSERT INTO ssh_data (id, stats_config) VALUES (?, ?)")
-      .run(1, JSON.stringify({ statusCheckEnabled: false }));
-    await runHostStatusConfigMigration();
-
-    // The user turns checks back on after the upgrade.
-    sqlite.exec("UPDATE ssh_data SET status_check_enabled = 1 WHERE id = 1");
-    expect(await runHostStatusConfigMigration()).toEqual({
-      skipped: true,
-      hostsMoved: 0,
-    });
-    expect(hosts()).toEqual([{ id: 1, enabled: 1, interval: null }]);
-  });
-
-  it("finishes on a fresh install that never had stats_config", async () => {
-    createHosts(false);
-    sqlite.exec("INSERT INTO ssh_data (id) VALUES (1)");
-    expect(await runHostStatusConfigMigration()).toEqual({
-      skipped: false,
-      hostsMoved: 0,
-    });
-    expect(state.settings.get(HOST_STATUS_CONFIG_MIGRATED)).toBe("true");
-  });
-});
diff --git a/src/backend/tests/utils/latest-release.test.ts b/src/backend/tests/utils/latest-release.test.ts
new file mode 100644
index 000000000..035ebecbb
--- /dev/null
+++ b/src/backend/tests/utils/latest-release.test.ts
@@ -0,0 +1,49 @@
+import { describe, expect, it } from "vitest";
+import {
+  compareSemver,
+  isPrereleaseVersion,
+  normalizeVersion,
+  updateStatus,
+} from "../../utils/latest-release.js";
+
+describe("normalizeVersion", () => {
+  it("reads tags and short versions and keeps the prerelease part", () => {
+    expect(normalizeVersion("v2.8")).toBe("2.8.0");
+    expect(normalizeVersion("release-2.9.1-tag")).toBe("2.9.1-tag");
+    expect(normalizeVersion("v26.11.0-beta.2")).toBe("26.11.0-beta.2");
+    expect(normalizeVersion("nightly")).toBeNull();
+  });
+});
+
+describe("compareSemver", () => {
+  it("orders betas below their stable release and by number", () => {
+    expect(compareSemver("26.11.0-beta.1", "26.11.0")).toBe(-1);
+    expect(compareSemver("26.11.0-beta.2", "26.11.0-beta.10")).toBe(-1);
+    expect(compareSemver("26.11.0-beta.1", "26.10.3")).toBe(1);
+    expect(compareSemver("v2.9.0", "2.9")).toBe(0);
+    expect(compareSemver("x", "2.9.0")).toBeNull();
+  });
+});
+
+describe("updateStatus", () => {
+  it("calls a newer release on the channel an update", () => {
+    expect(updateStatus("26.10.0", "26.10.1")).toBe("requires_update");
+    expect(updateStatus("26.11.0-beta.1", "26.11.0-beta.2")).toBe(
+      "requires_update",
+    );
+    expect(updateStatus("26.11.0-beta.2", "26.11.0")).toBe("requires_update");
+  });
+
+  it("marks betas and builds ahead of the newest release as beta", () => {
+    expect(updateStatus("26.11.0-beta.2", "26.11.0-beta.2")).toBe("beta");
+    expect(updateStatus("26.11.0-beta.2", "26.10.0")).toBe("beta");
+    expect(updateStatus("26.11.0", "26.10.0")).toBe("beta");
+    expect(updateStatus("26.10.0", "26.10.0")).toBe("up_to_date");
+    expect(updateStatus("26.10.0", null)).toBe("up_to_date");
+  });
+
+  it("knows a prerelease", () => {
+    expect(isPrereleaseVersion("26.11.0-beta.1")).toBe(true);
+    expect(isPrereleaseVersion("26.11.0")).toBe(false);
+  });
+});
diff --git a/src/backend/tests/utils/safe-outbound-fetch.test.ts b/src/backend/tests/utils/safe-outbound-fetch.test.ts
index 131d48987..5f3f3a524 100644
--- a/src/backend/tests/utils/safe-outbound-fetch.test.ts
+++ b/src/backend/tests/utils/safe-outbound-fetch.test.ts
@@ -22,6 +22,7 @@ describe("isBlockedAddress", () => {
     expect(isBlockedAddress("192.168.1.1")).toBe(true);
     expect(isBlockedAddress("127.0.0.1")).toBe(true);
     expect(isBlockedAddress("169.254.1.1")).toBe(true);
+    expect(isBlockedAddress("192.0.0.170")).toBe(true);
     expect(isBlockedAddress("100.64.0.1")).toBe(true);
   });
 
diff --git a/src/backend/tests/utils/ssh-key-utils.test.ts b/src/backend/tests/utils/ssh-key-utils.test.ts
index 534eb6cc7..22b66e39f 100644
--- a/src/backend/tests/utils/ssh-key-utils.test.ts
+++ b/src/backend/tests/utils/ssh-key-utils.test.ts
@@ -1,3 +1,6 @@
+import { generateKeyPairSync } from "node:crypto";
+import ssh2 from "ssh2";
+import sshpk from "sshpk";
 import { describe, it, expect } from "vitest";
 import { readFileSync } from "node:fs";
 import {
@@ -9,6 +12,8 @@ import {
   validateKeyPair,
 } from "../../utils/ssh-key-utils.js";
 
+const { parsePrivateKey } = sshpk;
+
 // A real OpenSSH ed25519 keypair generated solely for these tests. It grants no
 // access to anything and exists only so the ssh2 parsing path is exercised for
 // real rather than only via the text-fallback heuristics.
@@ -158,3 +163,64 @@ describe("validateKeyPair", () => {
     expect(result.error).toMatch(/private key/i);
   });
 });
+
+describe("PKCS#8 runtime key normalization", () => {
+  it.each(["ed25519", "rsa", "ec"] as const)(
+    "converts %s without changing its public key",
+    (type) => {
+      const { privateKey, publicKey } =
+        type === "rsa"
+          ? generateKeyPairSync("rsa", { modulusLength: 2048 })
+          : type === "ec"
+            ? generateKeyPairSync("ec", { namedCurve: "prime256v1" })
+            : generateKeyPairSync("ed25519");
+      const pem = privateKey
+        .export({ type: "pkcs8", format: "pem" })
+        .toString();
+      const prepared = preparePrivateKeyForSSH2(pem);
+      const parsed = ssh2.utils.parseKey(prepared);
+      expect(parsed).not.toBeInstanceOf(Error);
+      if (parsed instanceof Error) throw parsed;
+      expect(
+        parsePrivateKey(prepared).toPublic().toBuffer("pkcs8").toString(),
+      ).toBe(publicKey.export({ type: "spki", format: "pem" }).toString());
+    },
+  );
+
+  it("decrypts encrypted PKCS#8 only with the correct passphrase", () => {
+    const { privateKey } = generateKeyPairSync("ed25519");
+    const pem = privateKey
+      .export({
+        type: "pkcs8",
+        format: "pem",
+        cipher: "aes-256-cbc",
+        passphrase: " key passphrase ",
+      })
+      .toString();
+    expect(
+      ssh2.utils.parseKey(preparePrivateKeyForSSH2(pem, " key passphrase ")),
+    ).not.toBeInstanceOf(Error);
+    expect(() => preparePrivateKeyForSSH2(pem)).toThrow();
+    expect(() => preparePrivateKeyForSSH2(pem, "wrong")).toThrow();
+  });
+
+  it("keeps an already usable OpenSSH key unchanged", () => {
+    expect(preparePrivateKeyForSSH2(ED25519_PRIVATE).toString()).toBe(
+      ED25519_PRIVATE,
+    );
+  });
+
+  it("rejects unsupported X25519 keys", () => {
+    const { privateKey } = generateKeyPairSync("x25519");
+    const pem = privateKey.export({ type: "pkcs8", format: "pem" }).toString();
+    expect(() => preparePrivateKeyForSSH2(pem)).toThrow();
+  });
+
+  it("rejects malformed PKCS#8 instead of guessing from its header", () => {
+    expect(() =>
+      preparePrivateKeyForSSH2(
+        "-----BEGIN PRIVATE KEY-----\nAAAA\n-----END PRIVATE KEY-----",
+      ),
+    ).toThrow();
+  });
+});
diff --git a/src/backend/tests/utils/user-agent-parser.test.ts b/src/backend/tests/utils/user-agent-parser.test.ts
index 0121193ca..f2b504fc0 100644
--- a/src/backend/tests/utils/user-agent-parser.test.ts
+++ b/src/backend/tests/utils/user-agent-parser.test.ts
@@ -3,8 +3,6 @@ import type { Request } from "express";
 import {
   detectPlatform,
   parseUserAgent,
-  generateDeviceFingerprint,
-  getDeviceId,
 } from "../../utils/user-agent-parser.js";
 
 function reqWith(headers: Record<string, string>): Request {
@@ -97,83 +95,3 @@ describe("parseUserAgent", () => {
     expect(info.os).toContain("iOS");
   });
 });
-
-describe("generateDeviceFingerprint", () => {
-  it("is stable for the same client device id", () => {
-    const a = generateDeviceFingerprint(
-      {
-        type: "web",
-        browser: "Chrome",
-        version: "120.5",
-        os: "Windows 10/11",
-        deviceInfo: "Chrome 120.5 on Windows 10/11",
-      },
-      "a".repeat(64),
-    );
-    const b = generateDeviceFingerprint(
-      {
-        type: "web",
-        browser: "Chrome",
-        version: "121.9",
-        os: "Windows 10/11",
-        deviceInfo: "Chrome 121.9 on Windows 10/11",
-      },
-      "a".repeat(64),
-    );
-    expect(a).toBe(b);
-  });
-
-  it("differs for two clients on the same platform", () => {
-    const a = generateDeviceFingerprint(
-      {
-        type: "desktop",
-        browser: "Termix Desktop",
-        version: "2.7.0",
-        os: "Linux",
-        deviceInfo: "",
-      },
-      "a".repeat(64),
-    );
-    const b = generateDeviceFingerprint(
-      {
-        type: "desktop",
-        browser: "Termix Desktop",
-        version: "2.7.0",
-        os: "Linux",
-        deviceInfo: "",
-      },
-      "b".repeat(64),
-    );
-    expect(a).not.toBe(b);
-  });
-
-  it("does not trust clients without a device id", () => {
-    const fp = generateDeviceFingerprint(
-      {
-        type: "desktop",
-        browser: "Termix Desktop",
-        version: "2.3.1",
-        os: "macOS",
-        deviceInfo: "",
-      },
-      null,
-    );
-    expect(fp).toBeNull();
-  });
-});
-
-describe("getDeviceId", () => {
-  it("accepts a 256-bit hex device id", () => {
-    const deviceId = "a".repeat(64);
-    expect(getDeviceId(reqWith({ "x-termix-device-id": deviceId }))).toBe(
-      deviceId,
-    );
-  });
-
-  it("rejects missing or malformed device ids", () => {
-    expect(getDeviceId(reqWith({}))).toBeNull();
-    expect(
-      getDeviceId(reqWith({ "x-termix-device-id": "shared-linux" })),
-    ).toBeNull();
-  });
-});
diff --git a/src/backend/tests/utils/ws-auth.test.ts b/src/backend/tests/utils/ws-auth.test.ts
index 79159efcc..143d4ecf3 100644
--- a/src/backend/tests/utils/ws-auth.test.ts
+++ b/src/backend/tests/utils/ws-auth.test.ts
@@ -83,4 +83,29 @@ describe("the jwt cookie on a socket", () => {
       ),
     ).toBe(true);
   });
+
+  it("trusts the browser's same-origin mark behind a proxy that rewrites Host", () => {
+    expect(
+      extractWebSocketToken(
+        request({
+          cookie: "jwt=cookie-token",
+          host: "10.0.0.5:8080",
+          origin: "https://termix.example.com",
+          "sec-fetch-site": "same-origin",
+        }),
+      ),
+    ).toBe("cookie-token");
+  });
+
+  it("still ignores the cookie from a sibling subdomain", () => {
+    expect(
+      isCookieOriginAllowed(
+        request({
+          host: "termix.example.com",
+          origin: "https://evil.example.com",
+          "sec-fetch-site": "same-site",
+        }),
+      ),
+    ).toBe(false);
+  });
 });
diff --git a/src/backend/updates/desktop-update-check.ts b/src/backend/updates/desktop-update-check.ts
index 3a6ecf6a7..75a44e1da 100644
--- a/src/backend/updates/desktop-update-check.ts
+++ b/src/backend/updates/desktop-update-check.ts
@@ -6,6 +6,7 @@
 import { sendCoreAlert } from "../notify/core-notify.js";
 import { getLocalVersion } from "../utils/app-version.js";
 import { compareSemver, fetchLatestRelease } from "../utils/latest-release.js";
+import { getCoreChannel } from "./update-channel.js";
 import { systemLogger } from "../utils/logger.js";
 import {
   createCurrentUserPreferenceRepository,
@@ -33,7 +34,7 @@ export async function checkForDesktopUpdate(): Promise<void> {
   const current = getLocalVersion();
   if (!current || (await checkDisabled())) return;
 
-  const latest = await fetchLatestRelease();
+  const latest = await fetchLatestRelease(await getCoreChannel(current));
   if (!latest) return;
   const comparison = compareSemver(current, latest.version);
   if (comparison === null || comparison >= 0) return;
diff --git a/src/backend/updates/update-channel.ts b/src/backend/updates/update-channel.ts
new file mode 100644
index 000000000..6f9e6de2d
--- /dev/null
+++ b/src/backend/updates/update-channel.ts
@@ -0,0 +1,34 @@
+/**
+ * Which Termix releases this instance hears about. The server can't swap its
+ * own image or installer, so the channel only steers update checks and the
+ * Updates page. A beta build always counts as beta.
+ */
+
+import { createCurrentSettingsRepository } from "../database/repositories/factory.js";
+import { getLocalVersion } from "../utils/app-version.js";
+import {
+  isPrereleaseVersion,
+  type UpdateChannel,
+} from "../utils/latest-release.js";
+
+export const CORE_CHANNEL_KEY = "core_update_channel";
+
+export function parseChannel(value: unknown): UpdateChannel | null {
+  return value === "stable" || value === "beta" ? value : null;
+}
+
+export async function getStoredCoreChannel(): Promise<UpdateChannel> {
+  const stored = await createCurrentSettingsRepository().get(CORE_CHANNEL_KEY);
+  return parseChannel(stored) ?? "stable";
+}
+
+export async function getCoreChannel(
+  localVersion: string | null = getLocalVersion(),
+): Promise<UpdateChannel> {
+  if (localVersion && isPrereleaseVersion(localVersion)) return "beta";
+  return getStoredCoreChannel();
+}
+
+export async function setCoreChannel(channel: UpdateChannel): Promise<void> {
+  await createCurrentSettingsRepository().set(CORE_CHANNEL_KEY, channel);
+}
diff --git a/src/backend/upgrade/acme-ssl-settings-migration.ts b/src/backend/upgrade/acme-ssl-settings-migration.ts
deleted file mode 100644
index 6cac52d7e..000000000
--- a/src/backend/upgrade/acme-ssl-settings-migration.ts
+++ /dev/null
@@ -1,127 +0,0 @@
-/**
- * Moves the 2.8 ACME configuration into the acme-ssl plugin.
- *
- * 2.8 kept it as one JSON row, `acme_ssl_settings`, in core settings. Each
- * field becomes a plugin admin setting. "manual" was never ACME (it meant an
- * uploaded certificate, which core still handles), so it turns renewal off.
- * The Cloudflare token was plaintext and lands as an encrypted secret; it is
- * then removed from the old row. The rest of the row stays for one release.
- *
- * Idempotent: a field already set in plugin_settings is never overwritten.
- */
-
-import { databaseLogger } from "../utils/logger.js";
-import {
-  createCurrentPluginRepository,
-  createCurrentPluginSettingsRepository,
-  createCurrentSettingsRepository,
-} from "../database/repositories/factory.js";
-import { encryptSystemSecret } from "../utils/system-secret-crypto.js";
-
-const PLUGIN_ID = "acme-ssl";
-const LEGACY_KEY = "acme_ssl_settings";
-
-export interface AcmeSslSettingsMigrationResult {
-  moved: string[];
-}
-
-interface LegacyAcmeSettings {
-  enabled?: unknown;
-  domain?: unknown;
-  email?: unknown;
-  challengeType?: unknown;
-  cloudflareToken?: unknown;
-}
-
-const text = (value: unknown) =>
-  typeof value === "string" && value.trim() ? value.trim() : null;
-
-export async function runAcmeSslSettingsMigration(): Promise<AcmeSslSettingsMigrationResult> {
-  const result: AcmeSslSettingsMigrationResult = { moved: [] };
-
-  try {
-    const plugin = await createCurrentPluginRepository().findById(PLUGIN_ID);
-    if (!plugin) return result;
-
-    const settings = createCurrentSettingsRepository();
-    const raw = await settings.get(LEGACY_KEY);
-    if (!raw) return result;
-
-    let legacy: LegacyAcmeSettings;
-    try {
-      legacy = JSON.parse(raw) as LegacyAcmeSettings;
-    } catch {
-      return result;
-    }
-    if (!legacy || typeof legacy !== "object") return result;
-
-    const pluginSettings = createCurrentPluginSettingsRepository();
-    const writeIfUnset = async (
-      field: string,
-      value: unknown,
-      secret = false,
-    ) => {
-      const existing = await pluginSettings.get(
-        PLUGIN_ID,
-        "admin",
-        null,
-        field,
-      );
-      if (existing && existing.value !== null) return;
-      await pluginSettings.set(
-        PLUGIN_ID,
-        "admin",
-        null,
-        field,
-        JSON.stringify(value),
-        secret,
-      );
-      result.moved.push(field);
-    };
-
-    const challenge = legacy.challengeType;
-    const manual = challenge === "manual";
-
-    const domain = text(legacy.domain);
-    if (domain) await writeIfUnset("domain", domain);
-    const email = text(legacy.email);
-    if (email) await writeIfUnset("email", email);
-    if (challenge === "dns-cloudflare") {
-      await writeIfUnset("challengeType", "dns-cloudflare");
-    } else if (challenge === "http-webroot") {
-      await writeIfUnset("challengeType", "http-01");
-    }
-    if (typeof legacy.enabled === "boolean") {
-      await writeIfUnset("autoRenew", legacy.enabled && !manual);
-    }
-
-    const token = text(legacy.cloudflareToken);
-    if (token) {
-      await writeIfUnset(
-        "cloudflareToken",
-        await encryptSystemSecret(token),
-        true,
-      );
-      const { cloudflareToken: _dropped, ...rest } = legacy;
-      await settings.set(LEGACY_KEY, JSON.stringify(rest));
-    }
-
-    if (result.moved.length > 0) {
-      databaseLogger.info(
-        `Moved ${result.moved.length} ACME setting(s) into plugin settings`,
-        {
-          operation: "acme_ssl_settings_migration",
-          moved: result.moved.join(", "),
-        },
-      );
-    }
-  } catch (error) {
-    // Must not stop the backend: the plugin then shows "not configured".
-    databaseLogger.warn("ACME settings migration failed", {
-      operation: "acme_ssl_settings_migration",
-      error: error instanceof Error ? error.message : String(error),
-    });
-  }
-
-  return result;
-}
diff --git a/src/backend/upgrade/ai-settings-migration.ts b/src/backend/upgrade/ai-settings-migration.ts
index c7f781375..7b7cfb566 100644
--- a/src/backend/upgrade/ai-settings-migration.ts
+++ b/src/backend/upgrade/ai-settings-migration.ts
@@ -1,22 +1,13 @@
 /**
- * Moves the AI assistant's settings and provider keys into the ai plugin.
+ * Moves each AI provider's api_key, encrypted under its owner's data key,
+ * into a ctx.secrets row "provider:<id>" for that owner, and empties the
+ * column so no key material is left in the plugin's table. It needs the
+ * owner's data key, so it runs on every boot until the key opens.
  *
- * - settings.ai_globally_enabled and ai_private_endpoint_allowlist become the
- *   admin settings globallyEnabled and privateEndpoints (one host per line).
- * - user_preferences.ai_assistant_enabled and ai_read_only_commands become
- *   each user's enabled and allowReadOnlyCommands.
- * - ssh_data.enable_ai_assistant becomes the host setting enableAiAssistant.
- * - Each provider's api_key, encrypted under its owner's data key, becomes a
- *   ctx.secrets row "provider:<id>" for that owner, and the column is emptied
- *   so no key material is left in the plugin's table.
- *
- * The old columns stay in the database, unused: core's drizzle migrations
- * run before this does, so dropping them there would lose the data first.
  * The providers table is ai_providers until the plugin adopts it and
  * p_ai_providers after, so both names are tried.
  *
- * Idempotent: nothing is written where the plugin already has a row, and a
- * key is only cleared once its copy exists. Safe on every boot.
+ * Idempotent: a key is only cleared once its copy exists.
  */
 
 import { sql } from "drizzle-orm";
@@ -24,7 +15,6 @@ import { databaseLogger } from "../utils/logger.js";
 import {
   createCurrentPluginRepository,
   createCurrentPluginSettingsRepository,
-  createCurrentSettingsRepository,
 } from "../database/repositories/factory.js";
 import { DataCrypto } from "../utils/data-crypto.js";
 import { LazyFieldEncryption } from "../utils/lazy-field-encryption.js";
@@ -37,37 +27,9 @@ import {
 const PLUGIN_ID = "ai";
 
 export interface AiSettingsMigrationResult {
-  admin: string[];
-  users: number;
-  hosts: number;
   keys: number;
 }
 
-type Flag = number | boolean | string | null | undefined;
-
-function isTrue(value: Flag): boolean {
-  return value === true || value === 1 || value === "1" || value === "true";
-}
-
-function isSet(value: Flag): boolean {
-  return value !== null && value !== undefined;
-}
-
-/** The legacy JSON array as the textarea the plugin now reads. */
-export function allowlistToText(raw: string): string | null {
-  try {
-    const parsed = JSON.parse(raw);
-    if (!Array.isArray(parsed)) return null;
-    return parsed
-      .filter((entry): entry is string => typeof entry === "string")
-      .map((entry) => entry.trim())
-      .filter(Boolean)
-      .join("\n");
-  } catch {
-    return null;
-  }
-}
-
 async function tryRows<T>(query: ReturnType<typeof sql>): Promise<T[]> {
   try {
     return await selectRows<T>(query);
@@ -78,12 +40,7 @@ async function tryRows<T>(query: ReturnType<typeof sql>): Promise<T[]> {
 }
 
 export async function runAiSettingsMigration(): Promise<AiSettingsMigrationResult> {
-  const result: AiSettingsMigrationResult = {
-    admin: [],
-    users: 0,
-    hosts: 0,
-    keys: 0,
-  };
+  const result: AiSettingsMigrationResult = { keys: 0 };
 
   // plugin_settings has a foreign key to plugins: nothing to migrate into
   // until the plugin row exists.
@@ -96,91 +53,6 @@ export async function runAiSettingsMigration(): Promise<AiSettingsMigrationResul
 
   const pluginSettings = createCurrentPluginSettingsRepository();
 
-  const setIfMissing = async (
-    scope: "admin" | "user" | "host",
-    scopeId: string | null,
-    key: string,
-    value: unknown,
-  ): Promise<boolean> => {
-    const existing = await pluginSettings.get(PLUGIN_ID, scope, scopeId, key);
-    if (existing) return false;
-    await pluginSettings.set(
-      PLUGIN_ID,
-      scope,
-      scopeId,
-      key,
-      JSON.stringify(value),
-    );
-    return true;
-  };
-
-  try {
-    const settings = createCurrentSettingsRepository();
-    const enabled = await settings.get("ai_globally_enabled");
-    if (enabled !== null && enabled !== "") {
-      if (await setIfMissing("admin", null, "globallyEnabled", isTrue(enabled)))
-        result.admin.push("globallyEnabled");
-    }
-    const allowlist = await settings.get("ai_private_endpoint_allowlist");
-    const text = allowlist ? allowlistToText(allowlist) : null;
-    if (text !== null) {
-      if (await setIfMissing("admin", null, "privateEndpoints", text))
-        result.admin.push("privateEndpoints");
-    }
-  } catch (error) {
-    warn("admin settings", error);
-  }
-
-  const users = await tryRows<{
-    user_id: string;
-    ai_assistant_enabled: Flag;
-    ai_read_only_commands: Flag;
-  }>(
-    sql`SELECT user_id, ai_assistant_enabled, ai_read_only_commands FROM user_preferences`,
-  );
-  for (const row of users) {
-    try {
-      let moved = false;
-      if (isSet(row.ai_assistant_enabled)) {
-        moved =
-          (await setIfMissing(
-            "user",
-            row.user_id,
-            "enabled",
-            isTrue(row.ai_assistant_enabled),
-          )) || moved;
-      }
-      if (isSet(row.ai_read_only_commands)) {
-        moved =
-          (await setIfMissing(
-            "user",
-            row.user_id,
-            "allowReadOnlyCommands",
-            isTrue(row.ai_read_only_commands),
-          )) || moved;
-      }
-      if (moved) result.users++;
-    } catch (error) {
-      warn("a user's settings", error);
-    }
-  }
-
-  const hosts = await tryRows<{ id: number; enable_ai_assistant: Flag }>(
-    sql`SELECT id, enable_ai_assistant FROM ssh_data`,
-  );
-  for (const row of hosts) {
-    if (!isTrue(row.enable_ai_assistant)) continue;
-    try {
-      if (
-        await setIfMissing("host", String(row.id), "enableAiAssistant", true)
-      ) {
-        result.hosts++;
-      }
-    } catch (error) {
-      warn("a host's setting", error);
-    }
-  }
-
   for (const table of ["ai_providers", "p_ai_providers"]) {
     const providers = await tryRows<{
       id: number;
@@ -227,17 +99,9 @@ export async function runAiSettingsMigration(): Promise<AiSettingsMigrationResul
     }
   }
 
-  if (
-    result.admin.length > 0 ||
-    result.users > 0 ||
-    result.hosts > 0 ||
-    result.keys > 0
-  ) {
-    databaseLogger.info("Moved AI assistant settings into the ai plugin", {
+  if (result.keys > 0) {
+    databaseLogger.info("Moved AI provider keys into the ai plugin", {
       operation: "ai_settings_migration",
-      admin: result.admin.join(", "),
-      users: result.users,
-      hosts: result.hosts,
       keys: result.keys,
     });
   }
diff --git a/src/backend/upgrade/boot-migrations.ts b/src/backend/upgrade/boot-migrations.ts
index e517fab03..6c56c0368 100644
--- a/src/backend/upgrade/boot-migrations.ts
+++ b/src/backend/upgrade/boot-migrations.ts
@@ -1,5 +1,6 @@
 /**
- * Boot copies of 2.8 data into plugin settings and plugin tables.
+ * Boot copies of 2.8 data into plugin settings and plugin tables. Only the
+ * ones that need a user's data key are left: they finish once it opens.
  *
  * They run after the plugins are seeded and activated: plugin_settings has a
  * foreign key to plugins, and some copies write into tables a plugin adopts
@@ -10,70 +11,18 @@
 import { databaseLogger } from "../utils/logger.js";
 import { DatabaseSaveTrigger } from "../utils/database-save-trigger.js";
 import { getErrorMessage } from "../utils/error-message.js";
-import { runTailscaleSettingsMigration } from "./tailscale-settings-migration.js";
-import { runProxmoxSettingsMigration } from "./proxmox-settings-migration.js";
-import { runFileManagerSettingsMigration } from "./file-manager-settings-migration.js";
-import { runTunnelsSettingsMigration } from "./tunnels-settings-migration.js";
-import { runWebEndpointSettingsMigration } from "./web-endpoint-settings-migration.js";
-import { runSshTerminalSettingsMigration } from "./ssh-terminal-settings-migration.js";
-import { runSshTerminalLookMigration } from "./ssh-terminal-look-migration.js";
-import { runSshTerminalMacrosMigration } from "./ssh-terminal-macros-migration.js";
-import { runSnippetsSettingsMigration } from "./snippets-settings-migration.js";
-import { runTmuxMonitorSettingsMigration } from "./tmux-monitor-settings-migration.js";
-import { runSessionSharingSettingsMigration } from "./session-sharing-settings-migration.js";
-import { runTelemetrySettingsMigration } from "./telemetry-settings-migration.js";
-import { runSessionRecordingSettingsMigration } from "./session-recording-settings-migration.js";
-import { runRemoteDesktopSettingsMigration } from "./remote-desktop-settings-migration.js";
-import { runHostMetricsSettingsMigration } from "./host-metrics-settings-migration.js";
-import { runDockerSettingsMigration } from "./docker-settings-migration.js";
 import { runAiSettingsMigration } from "./ai-settings-migration.js";
-import { runWakeOnLanSettingsMigration } from "./wake-on-lan-settings-migration.js";
-import { runWarpgateSettingsMigration } from "./warpgate-settings-migration.js";
-import { runStepCaSettingsMigration } from "./step-ca-settings-migration.js";
-import { runAcmeSslSettingsMigration } from "./acme-ssl-settings-migration.js";
-import { runVaultSettingsMigration } from "./vault-settings-migration.js";
 import { runSecretSourcesTokenMigration } from "./secret-sources-token-migration.js";
 import { runTotpMigration } from "./totp-migration.js";
 import { runNotificationChannelMigration } from "./notification-channel-migration.js";
 import { runTermixIdentityCaMigration } from "./termix-identity-ca-migration.js";
-import { runSsoSettingsMigration } from "./sso-settings-migration.js";
-import { runSsoLegacyIdentityMigration } from "./sso-legacy-identity-migration.js";
-import { runHostDefaultsMigration } from "./host-defaults-migration.js";
 
 const MIGRATIONS: Array<[string, () => Promise<unknown>]> = [
-  ["runTailscaleSettingsMigration", runTailscaleSettingsMigration],
-  ["runProxmoxSettingsMigration", runProxmoxSettingsMigration],
-  ["runFileManagerSettingsMigration", runFileManagerSettingsMigration],
-  ["runTunnelsSettingsMigration", runTunnelsSettingsMigration],
-  ["runWebEndpointSettingsMigration", runWebEndpointSettingsMigration],
-  ["runSshTerminalSettingsMigration", runSshTerminalSettingsMigration],
-  ["runSshTerminalLookMigration", runSshTerminalLookMigration],
-  ["runSshTerminalMacrosMigration", runSshTerminalMacrosMigration],
-  ["runSnippetsSettingsMigration", runSnippetsSettingsMigration],
-  ["runTmuxMonitorSettingsMigration", runTmuxMonitorSettingsMigration],
-  ["runSessionSharingSettingsMigration", runSessionSharingSettingsMigration],
-  [
-    "runSessionRecordingSettingsMigration",
-    runSessionRecordingSettingsMigration,
-  ],
-  ["runRemoteDesktopSettingsMigration", runRemoteDesktopSettingsMigration],
-  ["runHostMetricsSettingsMigration", runHostMetricsSettingsMigration],
-  ["runDockerSettingsMigration", runDockerSettingsMigration],
   ["runAiSettingsMigration", runAiSettingsMigration],
-  ["runWakeOnLanSettingsMigration", runWakeOnLanSettingsMigration],
-  ["runWarpgateSettingsMigration", runWarpgateSettingsMigration],
-  ["runStepCaSettingsMigration", runStepCaSettingsMigration],
-  ["runAcmeSslSettingsMigration", runAcmeSslSettingsMigration],
-  ["runVaultSettingsMigration", runVaultSettingsMigration],
   ["runSecretSourcesTokenMigration", runSecretSourcesTokenMigration],
   ["runTotpMigration", runTotpMigration],
   ["runNotificationChannelMigration", runNotificationChannelMigration],
   ["runTermixIdentityCaMigration", runTermixIdentityCaMigration],
-  ["runSsoSettingsMigration", runSsoSettingsMigration],
-  ["runSsoLegacyIdentityMigration", runSsoLegacyIdentityMigration],
-  ["runTelemetrySettingsMigration", runTelemetrySettingsMigration],
-  // Last: it reads what the moves above wrote.
-  ["runHostDefaultsMigration", runHostDefaultsMigration],
 ];
 
 export const runPluginDataMigrations = DatabaseSaveTrigger.batched(
diff --git a/src/backend/upgrade/docker-settings-migration.ts b/src/backend/upgrade/docker-settings-migration.ts
deleted file mode 100644
index 0e0b0d956..000000000
--- a/src/backend/upgrade/docker-settings-migration.ts
+++ /dev/null
@@ -1,118 +0,0 @@
-/**
- * Moves each host's Docker options out of ssh_data and into the docker
- * plugin's host settings: enable_docker becomes enableDocker and the runtime
- * in docker_config becomes containerRuntime.
- *
- * The columns stay in the database, unused: core's drizzle migrations run
- * before this does, so dropping them there would lose the data first.
- *
- * Idempotent: a host that already has any docker row is skipped, so this is
- * safe on every boot.
- */
-
-import { sql } from "drizzle-orm";
-import { databaseLogger } from "../utils/logger.js";
-import {
-  createCurrentPluginRepository,
-  createCurrentPluginSettingsRepository,
-} from "../database/repositories/factory.js";
-import { selectRows } from "../utils/crypto-migration/raw-rows.js";
-
-const PLUGIN_ID = "docker";
-
-interface LegacyHostRow {
-  id: number;
-  enable_docker: number | boolean | string | null;
-  docker_config: string | null;
-}
-
-/** The plugin's host settings for one legacy row, defaults left out. */
-export function dockerSettingsFromRow(
-  row: LegacyHostRow,
-): Record<string, unknown> {
-  const values: Record<string, unknown> = {};
-  const flag = row.enable_docker;
-  if (flag === true || flag === 1 || flag === "1" || flag === "true") {
-    values.enableDocker = true;
-  }
-  if (row.docker_config) {
-    try {
-      const config = JSON.parse(row.docker_config) as { runtime?: unknown };
-      if (config?.runtime === "podman") values.containerRuntime = "podman";
-    } catch {
-      // unreadable config means the default runtime
-    }
-  }
-  return values;
-}
-
-export interface DockerSettingsMigrationResult {
-  hostsMoved: number;
-  hostsSkipped: number;
-}
-
-export async function runDockerSettingsMigration(): Promise<DockerSettingsMigrationResult> {
-  const result: DockerSettingsMigrationResult = {
-    hostsMoved: 0,
-    hostsSkipped: 0,
-  };
-
-  // plugin_settings has a foreign key to plugins: nothing to migrate into
-  // until the plugin row exists.
-  try {
-    const plugin = await createCurrentPluginRepository().findById(PLUGIN_ID);
-    if (!plugin) return result;
-  } catch {
-    return result;
-  }
-
-  const pluginSettings = createCurrentPluginSettingsRepository();
-
-  let rows: LegacyHostRow[];
-  try {
-    // Raw SQL: schema.ts no longer declares these columns.
-    rows = await selectRows<LegacyHostRow>(
-      sql`SELECT id, enable_docker, docker_config FROM ssh_data`,
-    );
-  } catch {
-    // A fresh install never had the columns.
-    return result;
-  }
-
-  for (const row of rows) {
-    const values = dockerSettingsFromRow(row);
-    if (Object.keys(values).length === 0) continue;
-    const scopeId = String(row.id);
-    try {
-      const existing = await pluginSettings.getAll(PLUGIN_ID, "host", scopeId);
-      if (existing.length > 0) {
-        result.hostsSkipped++;
-        continue;
-      }
-      for (const [key, value] of Object.entries(values)) {
-        await pluginSettings.set(
-          PLUGIN_ID,
-          "host",
-          scopeId,
-          key,
-          JSON.stringify(value),
-        );
-      }
-      result.hostsMoved++;
-    } catch (error) {
-      databaseLogger.warn("Docker host settings migration failed for a host", {
-        operation: "docker_settings_migration",
-        hostId: row.id,
-        error: error instanceof Error ? error.message : String(error),
-      });
-    }
-  }
-
-  if (result.hostsMoved > 0) {
-    databaseLogger.info(
-      `Moved Docker settings for ${result.hostsMoved} host(s) into plugin settings`,
-      { operation: "docker_settings_migration" },
-    );
-  }
-  return result;
-}
diff --git a/src/backend/upgrade/external-auto-provision-migration.ts b/src/backend/upgrade/external-auto-provision-migration.ts
new file mode 100644
index 000000000..16317c4c4
--- /dev/null
+++ b/src/backend/upgrade/external-auto-provision-migration.ts
@@ -0,0 +1,31 @@
+/**
+ * Renames the auto-provision setting from its 2.8 name, oidc_auto_provision,
+ * to external_auto_provision: it covers every external login, not only OIDC.
+ *
+ * Idempotent: a value already under the new key wins and the old row is
+ * dropped.
+ */
+
+import { databaseLogger } from "../utils/logger.js";
+import { createCurrentSettingsRepository } from "../database/repositories/factory.js";
+import { EXTERNAL_AUTO_PROVISION_KEY } from "../auth/provisioning.js";
+const LEGACY_KEY = "oidc_auto_provision";
+
+export async function runExternalAutoProvisionMigration(): Promise<boolean> {
+  try {
+    const settings = createCurrentSettingsRepository();
+    const legacy = await settings.get(LEGACY_KEY);
+    if (legacy === null) return false;
+    if ((await settings.get(EXTERNAL_AUTO_PROVISION_KEY)) === null) {
+      await settings.set(EXTERNAL_AUTO_PROVISION_KEY, legacy);
+    }
+    await settings.delete(LEGACY_KEY);
+    return true;
+  } catch (error) {
+    databaseLogger.warn("Auto-provision setting rename failed", {
+      operation: "external_auto_provision_migration",
+      error: error instanceof Error ? error.message : String(error),
+    });
+    return false;
+  }
+}
diff --git a/src/backend/upgrade/external-identity-migration.ts b/src/backend/upgrade/external-identity-migration.ts
deleted file mode 100644
index dae127155..000000000
--- a/src/backend/upgrade/external-identity-migration.ts
+++ /dev/null
@@ -1,117 +0,0 @@
-/**
- * Moves sign-in identities into their own table.
- *
- * users.oidc_identifier packed provider and subject into one string:
- * "ldap:<provider>:<id>", "github:<provider>:<id>", or a bare OIDC subject
- * whose provider was users.sso_provider_id. Each becomes a
- * user_external_identities row; LDAP ones under provider "ldap:<provider>",
- * the id the ldap plugin signs in with. TOTP enrolment moves in totp-migration.ts.
- *
- * Lossless: the old column is left as it is. Idempotent: rows that already
- * exist are skipped, so it runs on every boot.
- */
-
-import { databaseLogger } from "../utils/logger.js";
-import {
-  createCurrentUserAuthRepository,
-  createCurrentUserRepository,
-} from "../database/repositories/factory.js";
-
-/** The provider id the sso plugin gives its env-configured provider. */
-const LEGACY_OIDC_PROVIDER_ID = "legacy-oidc";
-
-export interface ExternalIdentityMigrationResult {
-  identities: number;
-  skipped: number;
-}
-
-/** Splits a stored identifier into provider and subject. */
-export function parseLegacyIdentifier(
-  identifier: string,
-  ssoProviderId: number | null | undefined,
-): { providerId: string; subject: string } | null {
-  if (!identifier) return null;
-
-  const prefixed = /^(ldap|github):([^:]+):(.+)$/.exec(identifier);
-  if (prefixed) {
-    const provider = prefixed[2];
-    const missing = provider === "null" || provider === "undefined";
-    // LDAP providers moved to their own table in 2.9 and their identities
-    // carry the "ldap:" prefix so their ids cannot clash with SSO ones.
-    if (prefixed[1] === "ldap") {
-      return missing
-        ? null
-        : { providerId: `ldap:${provider}`, subject: prefixed[3] };
-    }
-    return {
-      providerId: missing ? LEGACY_OIDC_PROVIDER_ID : provider,
-      subject: prefixed[3],
-    };
-  }
-
-  return {
-    providerId:
-      ssoProviderId !== null && ssoProviderId !== undefined
-        ? String(ssoProviderId)
-        : LEGACY_OIDC_PROVIDER_ID,
-    subject: identifier,
-  };
-}
-
-export async function runExternalIdentityMigration(): Promise<ExternalIdentityMigrationResult> {
-  const result: ExternalIdentityMigrationResult = {
-    identities: 0,
-    skipped: 0,
-  };
-
-  try {
-    const users = await createCurrentUserRepository().listAll();
-    const auth = createCurrentUserAuthRepository();
-
-    for (const user of users) {
-      if (user.oidcIdentifier) {
-        const parsed = parseLegacyIdentifier(
-          user.oidcIdentifier,
-          user.ssoProviderId,
-        );
-        if (parsed) {
-          const existing = await auth.findIdentity(
-            parsed.providerId,
-            parsed.subject,
-          );
-          // sso-legacy-identity-migration.ts moves "legacy-oidc" rows to
-          // their provider; recreating one would undo that on every boot.
-          const moved =
-            !existing &&
-            parsed.providerId === LEGACY_OIDC_PROVIDER_ID &&
-            (await auth.listIdentitiesForUser(user.id)).some(
-              (link) => link.subject === parsed.subject,
-            );
-          if (existing || moved) {
-            result.skipped++;
-          } else {
-            await auth.linkIdentity({
-              userId: user.id,
-              providerId: parsed.providerId,
-              subject: parsed.subject,
-            });
-            result.identities++;
-          }
-        }
-      }
-    }
-
-    if (result.identities > 0) {
-      databaseLogger.info("Moved sign-in identities", {
-        operation: "external_identity_migration",
-        ...result,
-      });
-    }
-  } catch (error) {
-    databaseLogger.error("External identity migration failed", error, {
-      operation: "external_identity_migration",
-    });
-  }
-
-  return result;
-}
diff --git a/src/backend/upgrade/file-manager-settings-migration.ts b/src/backend/upgrade/file-manager-settings-migration.ts
deleted file mode 100644
index e5acf70da..000000000
--- a/src/backend/upgrade/file-manager-settings-migration.ts
+++ /dev/null
@@ -1,102 +0,0 @@
-/**
- * Moves the three file-manager host columns into the file-manager plugin's
- * host-scope settings, before those columns are dropped from ssh_data.
- *
- * Idempotent: skips a host that already has a file-manager settings row, so
- * it is safe to run on every boot. Lossless: reads straight off the
- * still-present ssh_data columns, so it must run and finish before those
- * columns are ever dropped from schema.ts.
- */
-
-import { sql } from "drizzle-orm";
-import { databaseLogger } from "../utils/logger.js";
-import {
-  legacyFlag,
-  selectLegacyRows,
-} from "../utils/crypto-migration/raw-rows.js";
-import { createCurrentPluginSettingsRepository } from "../database/repositories/factory.js";
-
-export interface FileManagerSettingsMigrationResult {
-  moved: number;
-  skipped: number;
-}
-
-interface LegacyFileManagerRow {
-  id: number;
-  enable_file_manager: number | boolean | null;
-  default_path: string | null;
-  scp_legacy: number | boolean | null;
-}
-
-export async function runFileManagerSettingsMigration(): Promise<FileManagerSettingsMigrationResult> {
-  const result: FileManagerSettingsMigrationResult = { moved: 0, skipped: 0 };
-
-  try {
-    // Raw SQL, not the typed schema: this runs once schema.ts has already
-    // dropped these columns, so the query is the only thing left that still
-    // knows they used to exist.
-    const rows = await selectLegacyRows<LegacyFileManagerRow>(sql`
-      SELECT id, enable_file_manager, default_path, scp_legacy
-      FROM ssh_data
-      WHERE enable_file_manager = false OR default_path IS NOT NULL
-         OR scp_legacy = true
-    `);
-
-    if (rows.length === 0) return result;
-
-    const pluginSettingsRepository = createCurrentPluginSettingsRepository();
-
-    for (const row of rows) {
-      const scopeId = String(row.id);
-      const existing = await pluginSettingsRepository.get(
-        "file-manager",
-        "host",
-        scopeId,
-        "enableFileManager",
-      );
-      if (existing && existing.value !== null) {
-        result.skipped++;
-        continue;
-      }
-
-      await pluginSettingsRepository.set(
-        "file-manager",
-        "host",
-        scopeId,
-        "enableFileManager",
-        JSON.stringify(legacyFlag(row.enable_file_manager, true)),
-      );
-      await pluginSettingsRepository.set(
-        "file-manager",
-        "host",
-        scopeId,
-        "defaultPath",
-        JSON.stringify(row.default_path ?? null),
-      );
-      await pluginSettingsRepository.set(
-        "file-manager",
-        "host",
-        scopeId,
-        "scpLegacy",
-        JSON.stringify(!!row.scp_legacy),
-      );
-      result.moved++;
-    }
-
-    if (result.moved > 0) {
-      databaseLogger.info(
-        `Moved file manager settings for ${result.moved} host(s) into plugin settings`,
-        { operation: "file_manager_settings_migration", moved: result.moved },
-      );
-    }
-  } catch (error) {
-    // A failed migration must not stop the backend. Hosts simply keep
-    // whatever file-manager settings they already had (none, on a fresh run).
-    databaseLogger.warn("File manager settings migration failed", {
-      operation: "file_manager_settings_migration",
-      error: error instanceof Error ? error.message : String(error),
-    });
-  }
-
-  return result;
-}
diff --git a/src/backend/upgrade/host-defaults-migration.ts b/src/backend/upgrade/host-defaults-migration.ts
deleted file mode 100644
index 645b6d2da..000000000
--- a/src/backend/upgrade/host-defaults-migration.ts
+++ /dev/null
@@ -1,447 +0,0 @@
-/**
- * Moves 2.8 and early 2.9 default settings into host defaults, and gets hosts
- * ready to be classified against them.
- *
- * Levels, each moved once:
- * - core `settings.host_defaults` (SOCKS5 and the status check) becomes the
- *   server level. Its credential and SOCKS5 password are dropped: a
- *   credential belongs to one user and a password is never a default.
- * - a folder's credential becomes that folder's auth default.
- * - ssh-terminal's admin "new host" look, tmux and command history become the
- *   server level; each user's terminal defaults, local echo and link click
- *   setting become their user level.
- * - host-metrics' "enabled for new hosts" becomes the server level.
- * - remote-desktop's per-user display settings become the user level.
- *
- * Hosts: a host saved before host defaults gets the value it really used
- * written in, where that was not its stored value. A terminal that
- * followed the user's look used the user's look; an echo mode of "default"
- * used the user's setting; a credential host with no credential used its
- * folder's; a remote desktop used the connecting user's display settings.
- * The classify pass that follows compares those against the new levels, so
- * nothing a user sees changes.
- *
- * The old rows stay in place for a downgrade until 3.0.0.
- */
-
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
-import {
-  createCurrentHostDefaultsRepository,
-  createCurrentPluginSettingsRepository,
-  createCurrentSettingsRepository,
-} from "../database/repositories/factory.js";
-import type { HostRow } from "../database/repositories/host-defaults-repository.js";
-import { hostSettingsPlugins } from "../database/routes/host-plugin-settings.js";
-import {
-  CORE_NAMESPACE,
-  defaultValuesEqual,
-  normalizeSocks5Default,
-  parseDefaultOverrides,
-} from "../../types/host-defaults.js";
-import { encodeDefaultValue } from "../hosts/defaults/levels.js";
-import { folderChainPaths } from "../hosts/defaults/resolve.js";
-import { databaseLogger } from "../utils/logger.js";
-
-const TERMINAL = "ssh-terminal";
-const METRICS = "host-metrics";
-const DESKTOP = "remote-desktop";
-
-const TERMINAL_APPEARANCE_KEYS = [
-  "theme",
-  "cursorBlink",
-  "cursorStyle",
-  "fontSize",
-  "fontFamily",
-  "scrollback",
-  "letterSpacing",
-  "lineHeight",
-  "bellStyle",
-  "minimumContrastRatio",
-  "backgroundImage",
-  "backgroundImageOpacity",
-  "customThemeColors",
-];
-
-/** ssh-terminal admin key -> the host key it seeded. */
-const TERMINAL_NEW_HOST_KEYS: Record<string, string> = {
-  commandHistoryForNewHosts: "enableCommandHistory",
-  newHostTheme: "theme",
-  newHostFontFamily: "fontFamily",
-  newHostFontSize: "fontSize",
-  newHostCursorStyle: "cursorStyle",
-  newHostCursorBlink: "cursorBlink",
-  newHostAutoTmux: "autoTmux",
-};
-
-/** ssh-terminal keys whose "default" meant the user's own setting. */
-const TERMINAL_USER_MODES: Record<string, string> = {
-  localEcho: "auto",
-  linkClickBehavior: "confirm",
-};
-
-const DESKTOP_DISPLAY_KEYS = [
-  "colorDepth",
-  "resizeMethod",
-  "forceLossless",
-  "enableWallpaper",
-  "enableFontSmoothing",
-  "enableDesktopComposition",
-  "disableAudio",
-  "enablePrinting",
-  "enableDrive",
-  "disableCopy",
-  "disablePaste",
-];
-
-const MARKER_PREFIX = "host_defaults_moved_";
-
-function decode(raw: string | null | undefined): unknown {
-  if (raw === null || raw === undefined) return undefined;
-  try {
-    let parsed = JSON.parse(raw);
-    if (typeof parsed === "string" && /^[[{]/.test(parsed)) {
-      parsed = JSON.parse(parsed);
-    }
-    return parsed;
-  } catch {
-    return undefined;
-  }
-}
-
-function asObject(value: unknown): Record<string, unknown> | null {
-  return value && typeof value === "object" && !Array.isArray(value)
-    ? (value as Record<string, unknown>)
-    : null;
-}
-
-async function once(name: string, run: () => Promise<void>): Promise<void> {
-  const settings = createCurrentSettingsRepository();
-  const marker = `${MARKER_PREFIX}${name}`;
-  if (await settings.get(marker)) return;
-  await run();
-  await settings.set(marker, new Date().toISOString());
-}
-
-type Level =
-  | { level: "admin" }
-  | { level: "user"; userId: string }
-  | { level: "folder"; userId: string; folderId: number };
-
-async function setDefault(
-  scope: Level,
-  namespace: string,
-  key: string,
-  value: unknown,
-): Promise<void> {
-  const repository = createCurrentHostDefaultsRepository();
-  const existing = await repository.listScope(scope);
-  if (existing.some((row) => row.namespace === namespace && row.key === key)) {
-    return;
-  }
-  await repository.apply(
-    scope,
-    [{ namespace, key, value: encodeDefaultValue(value) }],
-    [],
-    null,
-  );
-}
-
-async function moveCoreLevels(): Promise<void> {
-  const raw = await createCurrentSettingsRepository().get("host_defaults");
-  const stored = asObject(decode(raw)) ?? {};
-  if (stored.useSocks5 === true) {
-    await setDefault(
-      { level: "admin" },
-      CORE_NAMESPACE,
-      "socks5",
-      normalizeSocks5Default({ ...stored, socks5ProxyChain: null }),
-    );
-  }
-  if (stored.statusCheckEnabled === false) {
-    await setDefault(
-      { level: "admin" },
-      CORE_NAMESPACE,
-      "statusCheckEnabled",
-      false,
-    );
-  }
-  if (stored.credentialId !== undefined || stored.socks5Password) {
-    databaseLogger.info(
-      "Host defaults no longer hold a credential or proxy password; set a credential per user or folder instead",
-      { operation: "host_defaults_migration" },
-    );
-  }
-}
-
-async function moveFolderCredentials(): Promise<void> {
-  const { createCurrentRepositoryContext } =
-    await import("../database/repositories/factory.js");
-  const { sshFolders } = await import("../database/db/schema.js");
-  const { isNotNull } = await import("drizzle-orm");
-  const rows = await createCurrentRepositoryContext()
-    .drizzle.select({
-      id: sshFolders.id,
-      userId: sshFolders.userId,
-      credentialId: sshFolders.credentialId,
-    })
-    .from(sshFolders)
-    .where(isNotNull(sshFolders.credentialId));
-  for (const row of rows) {
-    await setDefault(
-      { level: "folder", userId: row.userId, folderId: row.id },
-      CORE_NAMESPACE,
-      "auth",
-      {
-        authType: "credential",
-        credentialId: row.credentialId,
-        overrideCredentialUsername: false,
-        agentSocketPath: null,
-        agentIdentity: null,
-      },
-    );
-  }
-}
-
-async function storedRows(
-  pluginId: string,
-  scope: "admin" | "user",
-  key: string,
-) {
-  return (
-    await createCurrentPluginSettingsRepository().listByKey(
-      pluginId,
-      scope,
-      key,
-    )
-  ).filter((row) => row.value !== null);
-}
-
-async function moveTerminalLevels(): Promise<void> {
-  for (const [adminKey, hostKey] of Object.entries(TERMINAL_NEW_HOST_KEYS)) {
-    for (const row of await storedRows(TERMINAL, "admin", adminKey)) {
-      const value = decode(row.value);
-      if (value === undefined || value === null) continue;
-      await setDefault({ level: "admin" }, TERMINAL, hostKey, value);
-    }
-  }
-  for (const row of await storedRows(TERMINAL, "user", "terminalDefaults")) {
-    const values = asObject(decode(row.value));
-    if (!values || !row.scopeId) continue;
-    for (const key of TERMINAL_APPEARANCE_KEYS) {
-      if (values[key] === undefined) continue;
-      await setDefault(
-        { level: "user", userId: row.scopeId },
-        TERMINAL,
-        key,
-        values[key],
-      );
-    }
-  }
-  for (const key of Object.keys(TERMINAL_USER_MODES)) {
-    for (const row of await storedRows(TERMINAL, "user", key)) {
-      const value = decode(row.value);
-      if (typeof value !== "string" || !row.scopeId) continue;
-      await setDefault(
-        { level: "user", userId: row.scopeId },
-        TERMINAL,
-        key,
-        value,
-      );
-    }
-  }
-}
-
-async function moveMetricsLevels(): Promise<void> {
-  for (const row of await storedRows(METRICS, "admin", "enabledForNewHosts")) {
-    if (decode(row.value) === false) {
-      await setDefault({ level: "admin" }, METRICS, "metricsEnabled", false);
-    }
-  }
-}
-
-async function moveDesktopLevels(): Promise<void> {
-  for (const key of DESKTOP_DISPLAY_KEYS) {
-    for (const row of await storedRows(DESKTOP, "user", key)) {
-      const value = decode(row.value);
-      if (typeof value !== "string" || value === "inherit" || !row.scopeId) {
-        continue;
-      }
-      await setDefault(
-        { level: "user", userId: row.scopeId },
-        DESKTOP,
-        key,
-        value,
-      );
-    }
-  }
-}
-
-/**
- * Hosts saved before host defaults (by an older release, or 2.8 after a
- * downgrade), which still carry the old meaning. A host saved since has its
- * overrides set, and a namespace it lacks is classified as it stands.
- */
-function unclassified(rows: HostRow[]): HostRow[] {
-  return rows.filter(
-    (row) =>
-      !row.sharedSource && parseDefaultOverrides(row.defaultOverrides) === null,
-  );
-}
-
-async function userValues(
-  pluginId: string,
-  key: string,
-): Promise<Map<string, unknown>> {
-  const result = new Map<string, unknown>();
-  for (const row of await storedRows(pluginId, "user", key)) {
-    if (row.scopeId) result.set(row.scopeId, decode(row.value));
-  }
-  return result;
-}
-
-function manifestDefault(manifest: PluginManifest, key: string): unknown {
-  return manifest.contributes?.settings?.host?.fields.find(
-    (field) => field.key === key,
-  )?.default;
-}
-
-/**
- * Writes one host value, or removes the row when it is the manifest default
- * so the host reads that default the usual way.
- */
-async function writeHostValue(
-  manifest: PluginManifest,
-  hostId: number,
-  key: string,
-  value: unknown,
-): Promise<void> {
-  const settings = createCurrentPluginSettingsRepository();
-  if (defaultValuesEqual(value, manifestDefault(manifest, key))) {
-    await settings.delete(manifest.id, "host", String(hostId), key);
-  } else {
-    await settings.set(
-      manifest.id,
-      "host",
-      String(hostId),
-      key,
-      JSON.stringify(value),
-    );
-  }
-}
-
-async function bakeTerminalHosts(
-  manifest: PluginManifest,
-  rows: HostRow[],
-): Promise<void> {
-  const hosts = unclassified(rows);
-  if (hosts.length === 0) return;
-  const settings = createCurrentPluginSettingsRepository();
-  const lookByUser = await userValues(TERMINAL, "terminalDefaults");
-  const modesByUser = new Map(
-    await Promise.all(
-      Object.keys(TERMINAL_USER_MODES).map(
-        async (key) => [key, await userValues(TERMINAL, key)] as const,
-      ),
-    ),
-  );
-
-  for (const host of hosts) {
-    const stored = new Map(
-      (await settings.getAll(TERMINAL, "host", String(host.id))).map((row) => [
-        row.key,
-        decode(row.value),
-      ]),
-    );
-    if (stored.get("inheritAppearance") !== false) {
-      const look = asObject(lookByUser.get(host.userId)) ?? {};
-      for (const key of TERMINAL_APPEARANCE_KEYS) {
-        const value = look[key] ?? manifestDefault(manifest, key);
-        await writeHostValue(manifest, host.id, key, value);
-      }
-    }
-    for (const [key, fallback] of Object.entries(TERMINAL_USER_MODES)) {
-      const own = stored.get(key);
-      if (own !== undefined && own !== "default") continue;
-      const user = modesByUser.get(key)?.get(host.userId);
-      await writeHostValue(
-        manifest,
-        host.id,
-        key,
-        typeof user === "string" && user !== "default" ? user : fallback,
-      );
-    }
-  }
-}
-
-async function bakeDesktopHosts(
-  manifest: PluginManifest,
-  rows: HostRow[],
-): Promise<void> {
-  const hosts = unclassified(rows);
-  if (hosts.length === 0) return;
-  const byKey = new Map(
-    await Promise.all(
-      DESKTOP_DISPLAY_KEYS.map(
-        async (key) => [key, await userValues(DESKTOP, key)] as const,
-      ),
-    ),
-  );
-  for (const host of hosts) {
-    for (const key of DESKTOP_DISPLAY_KEYS) {
-      const value = byKey.get(key)?.get(host.userId);
-      if (typeof value !== "string" || value === "inherit") continue;
-      await writeHostValue(manifest, host.id, key, value);
-    }
-  }
-}
-
-/** A credential host with no credential of its own used its folder's. */
-async function bakeFolderCredentials(rows: HostRow[]): Promise<void> {
-  const hosts = unclassified(rows).filter(
-    (row) => row.authType === "credential" && !row.credentialId && row.folder,
-  );
-  if (hosts.length === 0) return;
-  const repository = createCurrentHostDefaultsRepository();
-  const { createCurrentHostResolutionRepository } =
-    await import("../database/repositories/factory.js");
-  const resolution = createCurrentHostResolutionRepository();
-  const patches: Array<{ id: number; values: Partial<HostRow> }> = [];
-  for (const host of hosts) {
-    if (folderChainPaths(host.folder).length === 0) continue;
-    const credentialId = await resolution.findFolderCredentialId(
-      host.userId,
-      host.folder!,
-    );
-    if (credentialId) patches.push({ id: host.id, values: { credentialId } });
-  }
-  await repository.updateHosts(patches);
-}
-
-export async function runHostDefaultsMigration(): Promise<void> {
-  const manifests = new Map(
-    hostSettingsPlugins().map((manifest) => [manifest.id, manifest]),
-  );
-  try {
-    await once("core", async () => {
-      await moveCoreLevels();
-      await moveFolderCredentials();
-    });
-    if (manifests.has(TERMINAL)) await once(TERMINAL, moveTerminalLevels);
-    if (manifests.has(METRICS)) await once(METRICS, moveMetricsLevels);
-    if (manifests.has(DESKTOP)) await once(DESKTOP, moveDesktopLevels);
-
-    const rows = await createCurrentHostDefaultsRepository().listHosts({
-      all: true,
-    });
-    await bakeFolderCredentials(rows);
-    const terminal = manifests.get(TERMINAL);
-    if (terminal) await bakeTerminalHosts(terminal, rows);
-    const desktop = manifests.get(DESKTOP);
-    if (desktop) await bakeDesktopHosts(desktop, rows);
-  } catch (error) {
-    databaseLogger.warn("Host defaults migration failed", {
-      operation: "host_defaults_migration",
-      error: error instanceof Error ? error.message : String(error),
-    });
-  }
-}
diff --git a/src/backend/upgrade/host-metrics-settings-migration.ts b/src/backend/upgrade/host-metrics-settings-migration.ts
deleted file mode 100644
index e72d274b8..000000000
--- a/src/backend/upgrade/host-metrics-settings-migration.ts
+++ /dev/null
@@ -1,182 +0,0 @@
-/**
- * Moves Host Metrics' settings out of core and into the host-metrics
- * plugin's own settings.
- *
- * Admin keys from `settings`: global_metrics_interval,
- * metrics_history_retention_days and metricsEnabled inside host_defaults (the
- * default for new hosts). Per host, the metrics half of
- * ssh_data.stats_config: metricsEnabled, the host's own interval, the enabled
- * widgets and the mount lists. The status half is core and moved by
- * host-status-config-migration.ts.
- *
- * The old settings rows and the column stay in place, unused.
- *
- * Idempotent: an admin key already set, or a host that already has any
- * host-metrics row, is skipped, so this is safe on every boot.
- */
-
-import { sql } from "drizzle-orm";
-import { databaseLogger } from "../utils/logger.js";
-import {
-  createCurrentPluginRepository,
-  createCurrentPluginSettingsRepository,
-  createCurrentSettingsRepository,
-} from "../database/repositories/factory.js";
-import { selectRows } from "../utils/crypto-migration/raw-rows.js";
-
-const PLUGIN_ID = "host-metrics";
-
-/** A JSON object stored as text, or {} when it is anything else. */
-function parseStatsConfig(raw: string | null): Record<string, unknown> {
-  try {
-    let parsed: unknown = raw ? JSON.parse(raw) : null;
-    if (typeof parsed === "string") parsed = JSON.parse(parsed);
-    return parsed && typeof parsed === "object" && !Array.isArray(parsed)
-      ? (parsed as Record<string, unknown>)
-      : {};
-  } catch {
-    return {};
-  }
-}
-
-function seconds(value: unknown, min: number, max: number): number | null {
-  const parsed = Number(value);
-  return Number.isInteger(parsed) && parsed >= min && parsed <= max
-    ? parsed
-    : null;
-}
-
-/** The plugin's host settings for one stats_config value, defaults left out. */
-export function hostSettingsFromStatsConfig(
-  raw: string | null,
-): Record<string, unknown> {
-  const config = parseStatsConfig(raw);
-  const values: Record<string, unknown> = {};
-  if (config.metricsEnabled === false) values.metricsEnabled = false;
-  if (config.useGlobalMetricsInterval === false) {
-    const interval = seconds(config.metricsInterval, 5, 3600);
-    if (interval !== null) values.metricsInterval = interval;
-  }
-  if (Array.isArray(config.enabledWidgets)) {
-    values.enabledWidgets = config.enabledWidgets.filter(
-      (widget): widget is string => typeof widget === "string",
-    );
-  }
-  if (Array.isArray(config.excludedMounts) && config.excludedMounts.length) {
-    values.excludedMounts = config.excludedMounts.filter(
-      (mount): mount is string => typeof mount === "string",
-    );
-  }
-  if (Array.isArray(config.monitoredMounts) && config.monitoredMounts.length) {
-    values.monitoredMounts = config.monitoredMounts.filter(
-      (mount) =>
-        !!mount &&
-        typeof mount === "object" &&
-        typeof (mount as { path?: unknown }).path === "string",
-    );
-  }
-  return values;
-}
-
-export interface HostMetricsSettingsMigrationResult {
-  moved: string[];
-  hostsMoved: number;
-  hostsSkipped: number;
-}
-
-export async function runHostMetricsSettingsMigration(): Promise<HostMetricsSettingsMigrationResult> {
-  const result: HostMetricsSettingsMigrationResult = {
-    moved: [],
-    hostsMoved: 0,
-    hostsSkipped: 0,
-  };
-
-  // plugin_settings has a foreign key to plugins: nothing to migrate into
-  // until the plugin row exists.
-  try {
-    const plugin = await createCurrentPluginRepository().findById(PLUGIN_ID);
-    if (!plugin) return result;
-  } catch {
-    return result;
-  }
-
-  const pluginSettings = createCurrentPluginSettingsRepository();
-  const write = (
-    scope: "admin" | "host",
-    scopeId: string | null,
-    key: string,
-    value: unknown,
-  ) =>
-    pluginSettings.set(PLUGIN_ID, scope, scopeId, key, JSON.stringify(value));
-
-  try {
-    const settings = createCurrentSettingsRepository();
-    const moves: [string, string, number, number][] = [
-      ["global_metrics_interval", "metricsInterval", 5, 3600],
-      ["metrics_history_retention_days", "historyRetentionDays", 1, 90],
-    ];
-    for (const [legacyKey, field, min, max] of moves) {
-      const value = seconds(await settings.get(legacyKey), min, max);
-      if (value === null) continue;
-      const existing = await pluginSettings.get(
-        PLUGIN_ID,
-        "admin",
-        null,
-        field,
-      );
-      if (existing && existing.value !== null) continue;
-      await write("admin", null, field, value);
-      result.moved.push(legacyKey);
-    }
-
-    const defaults = parseStatsConfig(await settings.get("host_defaults"));
-    if (defaults.metricsEnabled === false) {
-      const existing = await pluginSettings.get(
-        PLUGIN_ID,
-        "admin",
-        null,
-        "enabledForNewHosts",
-      );
-      if (!existing || existing.value === null) {
-        await write("admin", null, "enabledForNewHosts", false);
-        result.moved.push("host_defaults.metricsEnabled");
-      }
-    }
-  } catch (error) {
-    databaseLogger.warn("Host Metrics admin settings migration failed", {
-      operation: "host_metrics_settings_migration",
-      error: error instanceof Error ? error.message : String(error),
-    });
-  }
-
-  try {
-    // Raw SQL: schema.ts no longer declares stats_config.
-    const rows = await selectRows<{ id: number; stats_config: string | null }>(
-      sql`SELECT id, stats_config FROM ssh_data WHERE stats_config IS NOT NULL`,
-    );
-    for (const row of rows) {
-      const values = hostSettingsFromStatsConfig(row.stats_config);
-      if (Object.keys(values).length === 0) continue;
-      const scopeId = String(row.id);
-      const existing = await pluginSettings.getAll(PLUGIN_ID, "host", scopeId);
-      if (existing.length > 0) {
-        result.hostsSkipped++;
-        continue;
-      }
-      for (const [key, value] of Object.entries(values)) {
-        await write("host", scopeId, key, value);
-      }
-      result.hostsMoved++;
-    }
-  } catch {
-    // A fresh install never had the column.
-  }
-
-  if (result.moved.length > 0 || result.hostsMoved > 0) {
-    databaseLogger.info(
-      `Moved ${result.moved.length} Host Metrics setting(s) and ${result.hostsMoved} host(s) into plugin settings`,
-      { operation: "host_metrics_settings_migration" },
-    );
-  }
-  return result;
-}
diff --git a/src/backend/upgrade/notification-channel-migration.ts b/src/backend/upgrade/notification-channel-migration.ts
index 8ee605234..42b3862f2 100644
--- a/src/backend/upgrade/notification-channel-migration.ts
+++ b/src/backend/upgrade/notification-channel-migration.ts
@@ -12,7 +12,7 @@
  * login for a 2.8 key only the password unwraps. Until then the channel shows
  * as needing to be saved again.
  *
- * The old table stays until 3.0.0, like the old columns. Idempotent.
+ * The old table stays until 26.10.0, like the old columns. Idempotent.
  */
 
 import { sql } from "drizzle-orm";
diff --git a/src/backend/upgrade/opkssh-config-migration.ts b/src/backend/upgrade/opkssh-config-migration.ts
index da26c2ecb..a4ec657fc 100644
--- a/src/backend/upgrade/opkssh-config-migration.ts
+++ b/src/backend/upgrade/opkssh-config-migration.ts
@@ -3,27 +3,20 @@
  *
  * The config file moves from DATA_DIR/.opk/config.yml to the plugin's own
  * folder (DATA_DIR/plugin-data/opkssh/config.yml). The old file is copied, not
- * moved, so a downgrade still finds it. An install that had a config also
- * keeps sending the pre-2.9 redirect URI (/host/opkssh-callback), because
- * that is the one registered with its identity providers: the plugin's
- * legacyCallback admin setting is turned on.
+ * moved, so a downgrade still finds it.
  *
- * Idempotent: an existing target file or setting is never overwritten.
+ * Idempotent: an existing target file is never overwritten.
  */
 
 import { promises as fs } from "node:fs";
 import path from "node:path";
 import { databaseLogger } from "../utils/logger.js";
-import {
-  createCurrentPluginRepository,
-  createCurrentPluginSettingsRepository,
-} from "../database/repositories/factory.js";
+import { createCurrentPluginRepository } from "../database/repositories/factory.js";
 
 const PLUGIN_ID = "opkssh";
 
 export interface OpksshConfigMigrationResult {
   copied: boolean;
-  legacyCallback: boolean;
 }
 
 async function exists(file: string): Promise<boolean> {
@@ -39,10 +32,7 @@ export async function runOpksshConfigMigration(
   dataDir: string = process.env.DATA_DIR ||
     path.join(process.cwd(), "db", "data"),
 ): Promise<OpksshConfigMigrationResult> {
-  const result: OpksshConfigMigrationResult = {
-    copied: false,
-    legacyCallback: false,
-  };
+  const result: OpksshConfigMigrationResult = { copied: false };
 
   const legacyConfig = path.join(dataDir, ".opk", "config.yml");
   if (!(await exists(legacyConfig))) return result;
@@ -61,24 +51,6 @@ export async function runOpksshConfigMigration(
       await fs.copyFile(legacyConfig, target);
       result.copied = true;
     }
-
-    const settings = createCurrentPluginSettingsRepository();
-    const current = await settings.get(
-      PLUGIN_ID,
-      "admin",
-      null,
-      "legacyCallback",
-    );
-    if (!current) {
-      await settings.set(
-        PLUGIN_ID,
-        "admin",
-        null,
-        "legacyCallback",
-        JSON.stringify(true),
-      );
-      result.legacyCallback = true;
-    }
   } catch (error) {
     databaseLogger.warn("OPKSSH config migration failed", {
       operation: "opkssh_config_migration",
diff --git a/src/backend/upgrade/plugin-data-moves.ts b/src/backend/upgrade/plugin-data-moves.ts
index db05952bc..558b8d48f 100644
--- a/src/backend/upgrade/plugin-data-moves.ts
+++ b/src/backend/upgrade/plugin-data-moves.ts
@@ -9,16 +9,14 @@ import { runLdapProviderMigration } from "./ldap-provider-migration.js";
 import { runOpksshConfigMigration } from "./opkssh-config-migration.js";
 import { runTermixIdentityCaMigration } from "./termix-identity-ca-migration.js";
 import { runSessionRecordingDataMigration } from "./session-recording-data-migration.js";
-import { runHostMetricsSettingsMigration } from "./host-metrics-settings-migration.js";
 import { runNotificationChannelMigration } from "./notification-channel-migration.js";
 
 export async function runPluginDataMoves(): Promise<void> {
   await runLdapProviderMigration();
   await runOpksshConfigMigration();
   await runTermixIdentityCaMigration();
-  // Both set how long history is kept, which the plugin prunes by on activate.
+  // Sets how long history is kept, which the plugin prunes by on activate.
   await runSessionRecordingDataMigration();
-  await runHostMetricsSettingsMigration();
   // Automations name channels by id, so they are in place before it starts.
   await runNotificationChannelMigration();
 }
diff --git a/src/backend/upgrade/protocol-auth-migration.ts b/src/backend/upgrade/protocol-auth-migration.ts
index bad66b03e..19e27d75b 100644
--- a/src/backend/upgrade/protocol-auth-migration.ts
+++ b/src/backend/upgrade/protocol-auth-migration.ts
@@ -3,7 +3,7 @@
  * columns into host_protocol_auth, re-encrypted with the owner's data key
  * under the new table's context.
  *
- * The columns stay in the database, unused, until 3.0.0. A user's hosts are
+ * The columns stay in the database, unused, until 26.10.0. A user's hosts are
  * copied once their data key opens (at boot for a system-wrapped key, at the
  * next password login for a 2.8 key that only the password opens), and a
  * per-user marker then stops a later boot from bringing back a login the
diff --git a/src/backend/upgrade/proxmox-settings-migration.ts b/src/backend/upgrade/proxmox-settings-migration.ts
deleted file mode 100644
index 55085cd41..000000000
--- a/src/backend/upgrade/proxmox-settings-migration.ts
+++ /dev/null
@@ -1,119 +0,0 @@
-/**
- * Moves the four Proxmox host columns into the proxmox plugin's host-scope
- * settings, before those columns are dropped from ssh_data.
- *
- * Idempotent: skips a host that already has a proxmox settings row, so it is
- * safe to run on every boot. Lossless: reads straight off the still-present
- * ssh_data columns, so it must run and finish before those columns are ever
- * dropped from schema.ts.
- */
-
-import { sql } from "drizzle-orm";
-import { databaseLogger } from "../utils/logger.js";
-import { selectLegacyRows } from "../utils/crypto-migration/raw-rows.js";
-import { createCurrentPluginSettingsRepository } from "../database/repositories/factory.js";
-
-export interface ProxmoxSettingsMigrationResult {
-  moved: number;
-  skipped: number;
-}
-
-interface LegacyProxmoxRow {
-  id: number;
-  enable_proxmox: number | boolean | null;
-  proxmox_config: string | null;
-  enable_proxmox_stats: number | boolean | null;
-  proxmox_stats_config: string | null;
-}
-
-export async function runProxmoxSettingsMigration(): Promise<ProxmoxSettingsMigrationResult> {
-  const result: ProxmoxSettingsMigrationResult = { moved: 0, skipped: 0 };
-
-  try {
-    // Raw SQL, not the typed schema: this runs once schema.ts has already
-    // dropped these columns, so the query is the only thing left that still
-    // knows they used to exist.
-    const rows = await selectLegacyRows<LegacyProxmoxRow>(sql`
-      SELECT id, enable_proxmox, proxmox_config, enable_proxmox_stats, proxmox_stats_config
-      FROM ssh_data
-      WHERE enable_proxmox = true OR proxmox_config IS NOT NULL
-         OR enable_proxmox_stats = true OR proxmox_stats_config IS NOT NULL
-    `);
-
-    if (rows.length === 0) return result;
-
-    const pluginSettingsRepository = createCurrentPluginSettingsRepository();
-
-    for (const row of rows) {
-      const scopeId = String(row.id);
-      const existing = await pluginSettingsRepository.get(
-        "proxmox",
-        "host",
-        scopeId,
-        "enableProxmox",
-      );
-      if (existing && existing.value !== null) {
-        result.skipped++;
-        continue;
-      }
-
-      await pluginSettingsRepository.set(
-        "proxmox",
-        "host",
-        scopeId,
-        "enableProxmox",
-        JSON.stringify(!!row.enable_proxmox),
-      );
-      await pluginSettingsRepository.set(
-        "proxmox",
-        "host",
-        scopeId,
-        "proxmoxConfig",
-        JSON.stringify(
-          row.proxmox_config ? safeParse(row.proxmox_config) : null,
-        ),
-      );
-      await pluginSettingsRepository.set(
-        "proxmox",
-        "host",
-        scopeId,
-        "enableProxmoxStats",
-        JSON.stringify(!!row.enable_proxmox_stats),
-      );
-      await pluginSettingsRepository.set(
-        "proxmox",
-        "host",
-        scopeId,
-        "proxmoxStatsConfig",
-        JSON.stringify(
-          row.proxmox_stats_config ? safeParse(row.proxmox_stats_config) : null,
-        ),
-      );
-      result.moved++;
-    }
-
-    if (result.moved > 0) {
-      databaseLogger.info(
-        `Moved Proxmox settings for ${result.moved} host(s) into plugin settings`,
-        { operation: "proxmox_settings_migration", moved: result.moved },
-      );
-    }
-  } catch (error) {
-    // A failed migration must not stop the backend. Hosts simply keep
-    // whatever proxmox settings they already had (none, on a fresh run).
-    databaseLogger.warn("Proxmox settings migration failed", {
-      operation: "proxmox_settings_migration",
-      error: error instanceof Error ? error.message : String(error),
-    });
-  }
-
-  return result;
-}
-
-function safeParse(raw: string): unknown {
-  try {
-    return JSON.parse(raw);
-  } catch {
-    return null;
-  }
-}
diff --git a/src/backend/upgrade/remote-desktop-settings-migration.ts b/src/backend/upgrade/remote-desktop-settings-migration.ts
deleted file mode 100644
index 6d8dc7d80..000000000
--- a/src/backend/upgrade/remote-desktop-settings-migration.ts
+++ /dev/null
@@ -1,289 +0,0 @@
-/**
- * Moves Remote Desktop's settings out of core and into the remote-desktop
- * plugin's own settings.
- *
- * Admin keys from `settings`: guac_enabled and guac_url. Per user, the RDP
- * defaults JSON in user_preferences.rdp_defaults. Per host, the option
- * columns in ssh_data: the three protocol switches and ports, rdp_security,
- * rdp_ignore_cert and guacamole_config, folding in the older security,
- * ignore_cert and connection_type-only shapes, plus enable_terminal_toolbar,
- * which also drove the remote desktop toolbar.
- *
- * The logins (users, passwords, credential ids, auth types, domain) stay in
- * core, next to the host, where sharing needs them.
- *
- * The columns stay in the database, unused: core's drizzle migrations run
- * before this does, so dropping them there would lose the data first.
- *
- * Idempotent: an admin key already set, or a user or host that already has
- * any remote-desktop row, is skipped, so this is safe on every boot.
- */
-
-import { sql } from "drizzle-orm";
-import { databaseLogger } from "../utils/logger.js";
-import {
-  createCurrentPluginRepository,
-  createCurrentPluginSettingsRepository,
-  createCurrentSettingsRepository,
-} from "../database/repositories/factory.js";
-import {
-  runStatement,
-  selectRows,
-} from "../utils/crypto-migration/raw-rows.js";
-
-const PLUGIN_ID = "remote-desktop";
-const PROTOCOLS = ["rdp", "vnc", "telnet"] as const;
-const DEFAULT_PORTS = { rdp: 3389, vnc: 5900, telnet: 23 };
-
-type Flag = number | boolean | string | null | undefined;
-
-/** true, 1 and "1" are on; null means the column was never set. */
-function flag(value: Flag): boolean | undefined {
-  if (value === null || value === undefined) return undefined;
-  return value === true || value === 1 || value === "1" || value === "true";
-}
-
-function port(value: unknown): number | undefined {
-  const parsed = Number(value);
-  return Number.isInteger(parsed) && parsed > 0 && parsed <= 65535
-    ? parsed
-    : undefined;
-}
-
-function jsonObject(value: unknown): Record<string, unknown> | undefined {
-  if (typeof value !== "string" || !value) return undefined;
-  try {
-    const parsed = JSON.parse(value);
-    return parsed && typeof parsed === "object" && !Array.isArray(parsed)
-      ? parsed
-      : undefined;
-  } catch {
-    return undefined;
-  }
-}
-
-interface LegacyHostRow {
-  id: number;
-  port: number | null;
-  connection_type: string | null;
-  enable_rdp: Flag;
-  enable_vnc: Flag;
-  enable_telnet: Flag;
-  rdp_port: number | null;
-  vnc_port: number | null;
-  telnet_port: number | null;
-  rdp_security: string | null;
-  rdp_ignore_cert: Flag;
-  security: string | null;
-  ignore_cert: Flag;
-  guacamole_config: string | null;
-  enable_terminal_toolbar: Flag;
-}
-
-/** The plugin's host settings for one legacy row, defaults left out. */
-export function hostSettingsFromRow(
-  row: LegacyHostRow,
-): Record<string, unknown> {
-  const values: Record<string, unknown> = {};
-  const flags = {
-    rdp: flag(row.enable_rdp) === true,
-    vnc: flag(row.enable_vnc) === true,
-    telnet: flag(row.enable_telnet) === true,
-  };
-  const legacyType = PROTOCOLS.find((p) => p === row.connection_type);
-  // Hosts from before the per-protocol switches only had connection_type.
-  if (!flags.rdp && !flags.vnc && !flags.telnet && legacyType) {
-    flags[legacyType] = true;
-  }
-  const ports = {
-    rdp: port(row.rdp_port),
-    vnc: port(row.vnc_port),
-    telnet: port(row.telnet_port),
-  };
-  if (legacyType && ports[legacyType] === undefined) {
-    ports[legacyType] = port(row.port);
-  }
-
-  for (const protocol of PROTOCOLS) {
-    const key = `enable${protocol[0].toUpperCase()}${protocol.slice(1)}`;
-    if (flags[protocol]) values[key] = true;
-    const value = ports[protocol];
-    if (value !== undefined && value !== DEFAULT_PORTS[protocol]) {
-      values[`${protocol}Port`] = value;
-    }
-  }
-
-  const security = row.rdp_security || row.security;
-  if (security) values.rdpSecurity = security;
-  const ignoreCert = flag(row.rdp_ignore_cert) ?? flag(row.ignore_cert);
-  if (ignoreCert) values.rdpIgnoreCert = true;
-  const config = jsonObject(row.guacamole_config);
-  if (config && Object.keys(config).length > 0) values.guacamoleConfig = config;
-  if (flag(row.enable_terminal_toolbar) === false) values.enableToolbar = false;
-  return values;
-}
-
-/** Old camelCase defaults JSON -> the plugin's user settings. */
-function userSettingsFromDefaults(
-  defaults: Record<string, unknown>,
-): Record<string, string> {
-  const values: Record<string, string> = {};
-  const depth = Number(defaults.colorDepth);
-  if ([16, 24, 32].includes(depth)) values.colorDepth = String(depth);
-  if (
-    defaults.resizeMethod === "display-update" ||
-    defaults.resizeMethod === "reconnect"
-  ) {
-    values.resizeMethod = defaults.resizeMethod;
-  }
-  for (const key of [
-    "forceLossless",
-    "enableWallpaper",
-    "enableFontSmoothing",
-    "enableDesktopComposition",
-    "disableAudio",
-    "enablePrinting",
-    "enableDrive",
-    "disableCopy",
-    "disablePaste",
-  ]) {
-    if (typeof defaults[key] === "boolean") {
-      values[key] = defaults[key] ? "on" : "off";
-    }
-  }
-  return values;
-}
-
-export interface RemoteDesktopSettingsMigrationResult {
-  moved: string[];
-  usersMoved: number;
-  hostsMoved: number;
-  hostsSkipped: number;
-}
-
-export async function runRemoteDesktopSettingsMigration(): Promise<RemoteDesktopSettingsMigrationResult> {
-  const result: RemoteDesktopSettingsMigrationResult = {
-    moved: [],
-    usersMoved: 0,
-    hostsMoved: 0,
-    hostsSkipped: 0,
-  };
-
-  // plugin_settings has a foreign key to plugins: nothing to migrate into
-  // until the plugin row exists.
-  try {
-    const plugin = await createCurrentPluginRepository().findById(PLUGIN_ID);
-    if (!plugin) return result;
-  } catch {
-    return result;
-  }
-
-  const pluginSettings = createCurrentPluginSettingsRepository();
-  const write = (
-    scope: "admin" | "user" | "host",
-    scopeId: string | null,
-    key: string,
-    value: unknown,
-  ) =>
-    pluginSettings.set(PLUGIN_ID, scope, scopeId, key, JSON.stringify(value));
-
-  try {
-    const settings = createCurrentSettingsRepository();
-    const moves: [string, string, (raw: string) => unknown][] = [
-      ["guac_enabled", "enabled", (raw) => raw !== "false" && raw !== "0"],
-      ["guac_url", "guacdUrl", (raw) => raw],
-    ];
-    for (const [legacyKey, field, parse] of moves) {
-      const legacy = await settings.get(legacyKey);
-      if (legacy === null || legacy === "") continue;
-      const existing = await pluginSettings.get(
-        PLUGIN_ID,
-        "admin",
-        null,
-        field,
-      );
-      if (existing && existing.value !== null) continue;
-      await write("admin", null, field, parse(legacy));
-      result.moved.push(legacyKey);
-    }
-  } catch (error) {
-    databaseLogger.warn("Remote Desktop admin settings migration failed", {
-      operation: "remote_desktop_settings_migration",
-      error: error instanceof Error ? error.message : String(error),
-    });
-  }
-
-  try {
-    const rows = await selectRows<{
-      user_id: string;
-      rdp_defaults: string | null;
-    }>(sql`SELECT user_id, rdp_defaults FROM user_preferences`);
-    for (const row of rows) {
-      const defaults = jsonObject(row.rdp_defaults);
-      if (!defaults) continue;
-      const values = userSettingsFromDefaults(defaults);
-      if (Object.keys(values).length === 0) continue;
-      const existing = await pluginSettings.getAll(
-        PLUGIN_ID,
-        "user",
-        row.user_id,
-      );
-      if (existing.length > 0) continue;
-      for (const [key, value] of Object.entries(values)) {
-        await write("user", row.user_id, key, value);
-      }
-      result.usersMoved++;
-    }
-  } catch {
-    // A fresh install never had the column.
-  }
-
-  try {
-    // Raw SQL: schema.ts no longer declares these columns.
-    const rows = await selectRows<LegacyHostRow>(sql`
-      SELECT id, port, connection_type, enable_rdp, enable_vnc, enable_telnet,
-        rdp_port, vnc_port, telnet_port, rdp_security, rdp_ignore_cert,
-        security, ignore_cert, guacamole_config, enable_terminal_toolbar
-      FROM ssh_data
-    `);
-    for (const row of rows) {
-      const values = hostSettingsFromRow(row);
-      if (Object.keys(values).length === 0) continue;
-      const scopeId = String(row.id);
-      const existing = await pluginSettings.getAll(PLUGIN_ID, "host", scopeId);
-      if (existing.length > 0) {
-        result.hostsSkipped++;
-        continue;
-      }
-      for (const [key, value] of Object.entries(values)) {
-        await write("host", scopeId, key, value);
-      }
-      result.hostsMoved++;
-    }
-
-    // Those same connection_type-only hosts kept the enable_ssh default of
-    // on, which core used to correct on every read. FALSE and NOT read the
-    // same on SQLite's integers and on real booleans.
-    await runStatement(sql`
-      UPDATE ssh_data SET enable_ssh = FALSE
-      WHERE connection_type IN ('rdp', 'vnc', 'telnet')
-        AND (enable_rdp IS NULL OR NOT enable_rdp)
-        AND (enable_vnc IS NULL OR NOT enable_vnc)
-        AND (enable_telnet IS NULL OR NOT enable_telnet)
-    `);
-  } catch {
-    // A fresh install never had the columns.
-  }
-
-  if (
-    result.moved.length > 0 ||
-    result.usersMoved > 0 ||
-    result.hostsMoved > 0
-  ) {
-    databaseLogger.info(
-      `Moved ${result.moved.length} Remote Desktop setting(s), ${result.usersMoved} user(s) and ${result.hostsMoved} host(s) into plugin settings`,
-      { operation: "remote_desktop_settings_migration" },
-    );
-  }
-  return result;
-}
diff --git a/src/backend/upgrade/session-recording-settings-migration.ts b/src/backend/upgrade/session-recording-settings-migration.ts
deleted file mode 100644
index 99a4e9dc4..000000000
--- a/src/backend/upgrade/session-recording-settings-migration.ts
+++ /dev/null
@@ -1,91 +0,0 @@
-/**
- * Moves the session logging host column into the session-recording plugin's
- * host-scope settings, before the column is dropped from ssh_data.
- *
- * The legacy column defaulted to true; the plugin's enable switch defaults to
- * false like every other plugin's. So unlike a migration whose old and new
- * defaults agree, every host needs an explicit row here, not just the ones
- * that turned the feature off.
- *
- * Idempotent: skips a host that already has a session-recording settings row,
- * so it is safe to run on every boot.
- */
-
-import { sql } from "drizzle-orm";
-import { databaseLogger } from "../utils/logger.js";
-import {
-  legacyFlag,
-  selectLegacyRows,
-} from "../utils/crypto-migration/raw-rows.js";
-import { createCurrentPluginSettingsRepository } from "../database/repositories/factory.js";
-
-export interface SessionRecordingSettingsMigrationResult {
-  moved: number;
-  skipped: number;
-}
-
-interface LegacySessionLoggingRow {
-  id: number;
-  enable_session_logging: number | boolean | null;
-}
-
-export async function runSessionRecordingSettingsMigration(): Promise<SessionRecordingSettingsMigrationResult> {
-  const result: SessionRecordingSettingsMigrationResult = {
-    moved: 0,
-    skipped: 0,
-  };
-
-  try {
-    // Raw SQL, not the typed schema, so this keeps working once schema.ts
-    // stops declaring this column.
-    const rows = await selectLegacyRows<LegacySessionLoggingRow>(sql`
-      SELECT id, enable_session_logging FROM ssh_data
-    `);
-
-    if (rows.length === 0) return result;
-
-    const pluginSettingsRepository = createCurrentPluginSettingsRepository();
-
-    for (const row of rows) {
-      const scopeId = String(row.id);
-      const existing = await pluginSettingsRepository.get(
-        "session-recording",
-        "host",
-        scopeId,
-        "enableSessionRecording",
-      );
-      if (existing && existing.value !== null) {
-        result.skipped++;
-        continue;
-      }
-
-      await pluginSettingsRepository.set(
-        "session-recording",
-        "host",
-        scopeId,
-        "enableSessionRecording",
-        JSON.stringify(legacyFlag(row.enable_session_logging, true)),
-      );
-      result.moved++;
-    }
-
-    if (result.moved > 0) {
-      databaseLogger.info(
-        `Moved session recording settings for ${result.moved} host(s) into plugin settings`,
-        {
-          operation: "session_recording_settings_migration",
-          moved: result.moved,
-        },
-      );
-    }
-  } catch (error) {
-    // A failed migration must not stop the backend. Hosts simply keep the
-    // plugin's own default (off) until this runs successfully.
-    databaseLogger.warn("Session recording settings migration failed", {
-      operation: "session_recording_settings_migration",
-      error: error instanceof Error ? error.message : String(error),
-    });
-  }
-
-  return result;
-}
diff --git a/src/backend/upgrade/session-sharing-settings-migration.ts b/src/backend/upgrade/session-sharing-settings-migration.ts
deleted file mode 100644
index 8baa13891..000000000
--- a/src/backend/upgrade/session-sharing-settings-migration.ts
+++ /dev/null
@@ -1,107 +0,0 @@
-/**
- * Moves session sharing's two settings into the session-sharing plugin:
- * the instance-wide switch (settings.session_sharing_globally_enabled) into
- * its admin setting, and ssh_data.allow_session_sharing into its host setting.
- *
- * Idempotent: nothing is written where the plugin already has a row, so it is
- * safe on every boot. Both default to on, so only a switch that was turned off
- * needs a row. The legacy settings row is left in place for a release.
- */
-
-import { sql } from "drizzle-orm";
-import { databaseLogger } from "../utils/logger.js";
-import { selectLegacyRows } from "../utils/crypto-migration/raw-rows.js";
-import {
-  createCurrentPluginSettingsRepository,
-  createCurrentSettingsRepository,
-} from "../database/repositories/factory.js";
-
-const PLUGIN_ID = "session-sharing";
-const LEGACY_GLOBAL_KEY = "session_sharing_globally_enabled";
-
-export interface SessionSharingSettingsMigrationResult {
-  movedGlobal: boolean;
-  movedHosts: number;
-  skipped: number;
-}
-
-interface LegacyHostRow {
-  id: number;
-}
-
-export async function runSessionSharingSettingsMigration(): Promise<SessionSharingSettingsMigrationResult> {
-  const result: SessionSharingSettingsMigrationResult = {
-    movedGlobal: false,
-    movedHosts: 0,
-    skipped: 0,
-  };
-
-  try {
-    const pluginSettings = createCurrentPluginSettingsRepository();
-
-    const legacy =
-      await createCurrentSettingsRepository().get(LEGACY_GLOBAL_KEY);
-    if (legacy === "false") {
-      const existing = await pluginSettings.get(
-        PLUGIN_ID,
-        "admin",
-        null,
-        "globallyEnabled",
-      );
-      if (existing && existing.value !== null) {
-        result.skipped++;
-      } else {
-        await pluginSettings.set(
-          PLUGIN_ID,
-          "admin",
-          null,
-          "globallyEnabled",
-          JSON.stringify(false),
-        );
-        result.movedGlobal = true;
-      }
-    }
-
-    // Raw SQL, so this keeps working once schema.ts stops declaring the column.
-    const rows = await selectLegacyRows<LegacyHostRow>(sql`
-      SELECT id FROM ssh_data WHERE allow_session_sharing = false
-    `);
-    for (const row of rows) {
-      const scopeId = String(row.id);
-      const existing = await pluginSettings.get(
-        PLUGIN_ID,
-        "host",
-        scopeId,
-        "allowSessionSharing",
-      );
-      if (existing && existing.value !== null) {
-        result.skipped++;
-        continue;
-      }
-      await pluginSettings.set(
-        PLUGIN_ID,
-        "host",
-        scopeId,
-        "allowSessionSharing",
-        JSON.stringify(false),
-      );
-      result.movedHosts++;
-    }
-
-    if (result.movedGlobal || result.movedHosts > 0) {
-      databaseLogger.info("Moved session sharing settings into the plugin", {
-        operation: "session_sharing_settings_migration",
-        movedGlobal: result.movedGlobal,
-        movedHosts: result.movedHosts,
-      });
-    }
-  } catch (error) {
-    // Never stops the backend. Sharing then stays on, the plugin's default.
-    databaseLogger.warn("Session sharing settings migration failed", {
-      operation: "session_sharing_settings_migration",
-      error: error instanceof Error ? error.message : String(error),
-    });
-  }
-
-  return result;
-}
diff --git a/src/backend/upgrade/snippets-schema-migration.ts b/src/backend/upgrade/snippets-schema-migration.ts
index 0326c7d47..3a8b8088e 100644
--- a/src/backend/upgrade/snippets-schema-migration.ts
+++ b/src/backend/upgrade/snippets-schema-migration.ts
@@ -1,19 +1,48 @@
 import type Database from "better-sqlite3";
 
+// Columns old SQLite snippet tables can be missing, for tables made before
+// they were added, or adopted by the plugin before core added them.
+const SNIPPET_COLUMNS: Array<[string, string]> = [
+  ["folder", "TEXT"],
+  ["order", "INTEGER NOT NULL DEFAULT 0"],
+  ["host_filter", "TEXT"],
+  ["is_note", "INTEGER NOT NULL DEFAULT 0"],
+  ["sync_id", "TEXT"],
+];
+const FOLDER_COLUMNS: Array<[string, string]> = [
+  ["color", "TEXT"],
+  ["icon", "TEXT"],
+  ["sync_id", "TEXT"],
+];
+
+const TABLES: Array<[string, Array<[string, string]>]> = [
+  ["snippets", SNIPPET_COLUMNS],
+  ["p_snippets_snippets", SNIPPET_COLUMNS],
+  ["snippet_folders", FOLDER_COLUMNS],
+  ["p_snippets_snippet_folders", FOLDER_COLUMNS],
+];
+
 /** Repair older SQLite tables before adoption, or after an incomplete 2.9 upgrade. */
-export function repairSnippetsNoteColumn(sqlite: Database.Database): void {
-  for (const table of ["snippets", "p_snippets_snippets"]) {
+export function repairSnippetsColumns(sqlite: Database.Database): void {
+  for (const [table, wanted] of TABLES) {
     const columns = sqlite.pragma(`table_info("${table}")`) as Array<{
       name: string;
     }>;
-    if (
-      columns.length === 0 ||
-      columns.some(({ name }) => name === "is_note")
-    ) {
-      continue;
+    if (columns.length === 0) continue;
+    const have = new Set(columns.map(({ name }) => name));
+    for (const [column, type] of wanted) {
+      if (!have.has(column)) {
+        sqlite.exec(`ALTER TABLE "${table}" ADD COLUMN "${column}" ${type}`);
+      }
     }
+    // Sync matches rows by sync_id, so every row needs one.
     sqlite.exec(
-      `ALTER TABLE "${table}" ADD COLUMN "is_note" INTEGER NOT NULL DEFAULT 0`,
+      `UPDATE "${table}" SET "sync_id" = lower(hex(randomblob(16))) WHERE "sync_id" IS NULL`,
     );
+    if (!have.has("sync_id")) {
+      sqlite.exec(
+        `CREATE UNIQUE INDEX IF NOT EXISTS "idx_${table}_sync_id" ON "${table}" ("sync_id")`,
+      );
+    }
   }
 }
diff --git a/src/backend/upgrade/snippets-settings-migration.ts b/src/backend/upgrade/snippets-settings-migration.ts
deleted file mode 100644
index 9de681745..000000000
--- a/src/backend/upgrade/snippets-settings-migration.ts
+++ /dev/null
@@ -1,185 +0,0 @@
-/**
- * Moves what core kept for snippets into the snippets plugin's settings.
- *
- * Per host: ssh_data.quick_actions becomes the quickActions host setting,
- * and terminal_config.startupSnippetId the startupSnippetId one. Per user:
- * user_preferences.confirm_snippet_execution and folders_collapsed become the
- * confirmExecution and foldersCollapsed user settings.
- *
- * The columns keep their values until 3.0.0 drops them.
- *
- * Idempotent: a host that already has either host setting, and a user key
- * already set, are skipped, so this is safe on every boot.
- */
-
-import { sql } from "drizzle-orm";
-import { databaseLogger } from "../utils/logger.js";
-import {
-  legacyFlag,
-  selectLegacyRows,
-} from "../utils/crypto-migration/raw-rows.js";
-import {
-  createCurrentPluginRepository,
-  createCurrentPluginSettingsRepository,
-} from "../database/repositories/factory.js";
-
-const PLUGIN_ID = "snippets";
-const HOST_KEYS = ["quickActions", "startupSnippetId"];
-
-function parseJson(value: unknown): unknown {
-  if (typeof value !== "string" || !value) return value ?? undefined;
-  try {
-    let parsed = JSON.parse(value);
-    if (typeof parsed === "string") parsed = JSON.parse(parsed);
-    return parsed;
-  } catch {
-    return undefined;
-  }
-}
-
-function snippetId(value: unknown): number | null {
-  const id = typeof value === "string" ? Number(value) : value;
-  return typeof id === "number" && Number.isInteger(id) && id > 0 ? id : null;
-}
-
-/** The snippets host settings one 2.8 ssh_data row carried. */
-export function snippetHostSettingsFromRow(row: {
-  quick_actions?: unknown;
-  terminal_config?: unknown;
-}): Record<string, unknown> {
-  const values: Record<string, unknown> = {};
-  const actions = parseJson(row.quick_actions);
-  if (Array.isArray(actions)) {
-    const quickActions = actions.flatMap((entry) => {
-      const id = snippetId((entry as { snippetId?: unknown })?.snippetId);
-      if (id === null) return [];
-      const name = (entry as { name?: unknown }).name;
-      return [{ name: typeof name === "string" ? name : "", snippetId: id }];
-    });
-    if (quickActions.length > 0) values.quickActions = quickActions;
-  }
-  const config = parseJson(row.terminal_config) as
-    { startupSnippetId?: unknown } | undefined;
-  const startup = snippetId(config?.startupSnippetId);
-  if (startup !== null) values.startupSnippetId = startup;
-  return values;
-}
-
-export interface SnippetsSettingsMigrationResult {
-  hostsMoved: number;
-  hostsSkipped: number;
-  usersMoved: number;
-}
-
-export async function runSnippetsSettingsMigration(): Promise<SnippetsSettingsMigrationResult> {
-  const result: SnippetsSettingsMigrationResult = {
-    hostsMoved: 0,
-    hostsSkipped: 0,
-    usersMoved: 0,
-  };
-
-  try {
-    const plugin = await createCurrentPluginRepository().findById(PLUGIN_ID);
-    if (!plugin) return result;
-  } catch {
-    return result;
-  }
-
-  const pluginSettings = createCurrentPluginSettingsRepository();
-
-  try {
-    const rows = await selectLegacyRows<{
-      id: number;
-      quick_actions: unknown;
-      terminal_config: unknown;
-    }>(sql`
-      SELECT id, quick_actions, terminal_config FROM ssh_data
-      WHERE quick_actions IS NOT NULL OR terminal_config IS NOT NULL
-    `);
-    for (const row of rows) {
-      const values = snippetHostSettingsFromRow(row);
-      if (Object.keys(values).length === 0) continue;
-      const scopeId = String(row.id);
-      let done = false;
-      for (const key of HOST_KEYS) {
-        if (await pluginSettings.get(PLUGIN_ID, "host", scopeId, key)) {
-          done = true;
-        }
-      }
-      if (done) {
-        result.hostsSkipped++;
-        continue;
-      }
-      for (const [key, value] of Object.entries(values)) {
-        await pluginSettings.set(
-          PLUGIN_ID,
-          "host",
-          scopeId,
-          key,
-          JSON.stringify(value),
-        );
-      }
-      result.hostsMoved++;
-    }
-  } catch (error) {
-    databaseLogger.warn("Snippets host settings migration failed", {
-      operation: "snippets_settings_migration",
-      error: error instanceof Error ? error.message : String(error),
-    });
-  }
-
-  try {
-    const rows = await selectLegacyRows<{
-      user_id: string;
-      confirm_snippet_execution: unknown;
-      folders_collapsed: unknown;
-    }>(sql`
-      SELECT user_id, confirm_snippet_execution, folders_collapsed
-      FROM user_preferences
-    `);
-    for (const row of rows) {
-      const values: Record<string, boolean> = {};
-      if (row.confirm_snippet_execution != null) {
-        values.confirmExecution = legacyFlag(
-          row.confirm_snippet_execution,
-          false,
-        );
-      }
-      if (row.folders_collapsed != null) {
-        values.foldersCollapsed = legacyFlag(row.folders_collapsed, true);
-      }
-      let moved = false;
-      for (const [key, value] of Object.entries(values)) {
-        const existing = await pluginSettings.get(
-          PLUGIN_ID,
-          "user",
-          row.user_id,
-          key,
-        );
-        if (existing && existing.value !== null) continue;
-        await pluginSettings.set(
-          PLUGIN_ID,
-          "user",
-          row.user_id,
-          key,
-          JSON.stringify(value),
-        );
-        moved = true;
-      }
-      if (moved) result.usersMoved++;
-    }
-  } catch (error) {
-    databaseLogger.warn("Snippets user settings migration failed", {
-      operation: "snippets_settings_migration",
-      error: error instanceof Error ? error.message : String(error),
-    });
-  }
-
-  if (result.hostsMoved > 0 || result.usersMoved > 0) {
-    databaseLogger.info(
-      `Moved the snippet settings of ${result.hostsMoved} host(s) and ${result.usersMoved} user(s) into plugin settings`,
-      { operation: "snippets_settings_migration" },
-    );
-  }
-  return result;
-}
diff --git a/src/backend/upgrade/ssh-terminal-look-migration.ts b/src/backend/upgrade/ssh-terminal-look-migration.ts
deleted file mode 100644
index 7b3ff1651..000000000
--- a/src/backend/upgrade/ssh-terminal-look-migration.ts
+++ /dev/null
@@ -1,318 +0,0 @@
-/**
- * Moves the terminal's look and behavior out of core and into the
- * ssh-terminal plugin's settings.
- *
- * Per host, the terminal keys of ssh_data.terminal_config become host
- * settings: every behavior key the host saved (tmux, mosh, auto-fill, link
- * and echo modes, syntax highlighting and the rest), and its look only when
- * it saved one. 2.8 stripped the look from a host that followed the user's
- * defaults, so a host with any look key had opted out: it gets
- * inheritAppearance false and its look copied. The SSH connection options in
- * the same JSON are core's and move to ssh_data.ssh_options
- * (ssh-options-migration.ts); startupSnippetId and a legacy sudo password
- * stay where they are.
- *
- * Per user, user_preferences.terminal_defaults, custom_themes and
- * command_autocomplete become user settings.
- *
- * The columns keep their values until 3.0.0 drops them.
- *
- * Idempotent: a host that already has any of these rows, and a user key that
- * is already set, are skipped, so this is safe on every boot.
- */
-
-import { sql } from "drizzle-orm";
-import { databaseLogger } from "../utils/logger.js";
-import { selectLegacyRows } from "../utils/crypto-migration/raw-rows.js";
-import {
-  createCurrentPluginRepository,
-  createCurrentPluginSettingsRepository,
-} from "../database/repositories/factory.js";
-
-const PLUGIN_ID = "ssh-terminal";
-
-const APPEARANCE_KEYS = [
-  "theme",
-  "cursorBlink",
-  "cursorStyle",
-  "fontSize",
-  "fontFamily",
-  "scrollback",
-  "letterSpacing",
-  "lineHeight",
-  "bellStyle",
-  "minimumContrastRatio",
-  "backgroundImage",
-  "backgroundImageOpacity",
-  "customThemeColors",
-];
-
-const BEHAVIOR_KEYS = [
-  "rightClickSelectsWord",
-  "macOptionIsMeta",
-  "fastScrollModifier",
-  "fastScrollSensitivity",
-  "backspaceMode",
-  "autoMosh",
-  "moshCommand",
-  "autoTmux",
-  "useSSHTitle",
-  "syntaxHighlighting",
-  "syntaxHighlightingOptions",
-  "linkClickBehavior",
-  "localEcho",
-  "passwordPromptAutoFill",
-  "sudoPasswordAutoFill",
-];
-
-const HOST_KEYS = ["inheritAppearance", ...APPEARANCE_KEYS, ...BEHAVIOR_KEYS];
-
-/** The plugin's select fields, which refuse anything outside their options. */
-const ENUMS: Record<string, string[]> = {
-  cursorStyle: ["block", "underline", "bar"],
-  bellStyle: ["none", "sound", "visual", "both"],
-  fastScrollModifier: ["alt", "ctrl", "shift"],
-  backspaceMode: ["normal", "control-h"],
-  linkClickBehavior: ["default", "confirm", "direct"],
-  localEcho: ["default", "off", "auto", "on"],
-};
-
-const NUMBER_KEYS = new Set([
-  "fontSize",
-  "scrollback",
-  "letterSpacing",
-  "lineHeight",
-  "minimumContrastRatio",
-  "backgroundImageOpacity",
-  "fastScrollSensitivity",
-]);
-
-const LEGACY_TERMIX_THEMES = [
-  "Termix Dark",
-  "Termix Light",
-  "termixDark",
-  "termixLight",
-];
-
-function isObject(value: unknown): value is Record<string, unknown> {
-  return !!value && typeof value === "object" && !Array.isArray(value);
-}
-
-function parseJson(value: unknown): unknown {
-  if (typeof value !== "string" || !value) return undefined;
-  try {
-    let parsed = JSON.parse(value);
-    // Some rows were stringified twice.
-    if (typeof parsed === "string") parsed = JSON.parse(parsed);
-    return parsed;
-  } catch {
-    return undefined;
-  }
-}
-
-/** One key's value in the type its plugin field declares, else undefined. */
-export function terminalValue(key: string, value: unknown): unknown {
-  if (value === undefined) return undefined;
-  if (ENUMS[key]) {
-    return typeof value === "string" && ENUMS[key].includes(value)
-      ? value
-      : undefined;
-  }
-  if (NUMBER_KEYS.has(key)) {
-    if (value === null || value === "") return undefined;
-    const parsed = Number(value);
-    return Number.isFinite(parsed) ? parsed : undefined;
-  }
-  switch (key) {
-    case "theme":
-      if (typeof value !== "string" || !value) return undefined;
-      return LEGACY_TERMIX_THEMES.includes(value) ? "termix" : value;
-    case "fontFamily":
-      return typeof value === "string" && value ? value : undefined;
-    case "backgroundImage":
-    case "moshCommand":
-      return value === null
-        ? ""
-        : typeof value === "string"
-          ? value
-          : undefined;
-    case "customThemeColors":
-      return isObject(value) ? value : undefined;
-    case "syntaxHighlightingOptions":
-      return isObject(value) ? value : undefined;
-    default:
-      return typeof value === "boolean" ? value : undefined;
-  }
-}
-
-/** The ssh-terminal host settings one 2.8 terminal_config value carried. */
-export function hostSettingsFromTerminalConfig(
-  raw: unknown,
-): Record<string, unknown> {
-  const config = typeof raw === "string" ? parseJson(raw) : raw;
-  if (!isObject(config)) return {};
-  const values: Record<string, unknown> = {};
-  for (const key of BEHAVIOR_KEYS) {
-    const value = terminalValue(key, config[key]);
-    if (value !== undefined) values[key] = value;
-  }
-  if (APPEARANCE_KEYS.some((key) => key in config)) {
-    values.inheritAppearance = false;
-    for (const key of APPEARANCE_KEYS) {
-      const value = terminalValue(key, config[key]);
-      if (value !== undefined) values[key] = value;
-    }
-  }
-  return values;
-}
-
-/** The ssh-terminal user settings one user_preferences row carried. */
-export function userSettingsFromPreferences(row: {
-  terminal_defaults?: unknown;
-  custom_themes?: unknown;
-  command_autocomplete?: unknown;
-}): Record<string, unknown> {
-  const values: Record<string, unknown> = {};
-  const defaults = parseJson(row.terminal_defaults);
-  if (isObject(defaults)) {
-    const picked: Record<string, unknown> = {};
-    for (const key of APPEARANCE_KEYS) {
-      const value = terminalValue(key, defaults[key]);
-      if (value !== undefined) picked[key] = value;
-    }
-    if (Object.keys(picked).length > 0) values.terminalDefaults = picked;
-  }
-  const themes = parseJson(row.custom_themes);
-  if (Array.isArray(themes) && themes.length > 0) values.customThemes = themes;
-  const autocomplete = row.command_autocomplete;
-  if (autocomplete !== null && autocomplete !== undefined) {
-    values.commandAutocomplete =
-      autocomplete === true ||
-      autocomplete === 1 ||
-      autocomplete === "1" ||
-      autocomplete === "true";
-  }
-  return values;
-}
-
-export interface SshTerminalLookMigrationResult {
-  hostsMoved: number;
-  hostsSkipped: number;
-  usersMoved: number;
-}
-
-export async function runSshTerminalLookMigration(): Promise<SshTerminalLookMigrationResult> {
-  const result: SshTerminalLookMigrationResult = {
-    hostsMoved: 0,
-    hostsSkipped: 0,
-    usersMoved: 0,
-  };
-
-  // plugin_settings has a foreign key to plugins: nothing to migrate into
-  // until the plugin row exists.
-  try {
-    const plugin = await createCurrentPluginRepository().findById(PLUGIN_ID);
-    if (!plugin) return result;
-  } catch {
-    return result;
-  }
-
-  const pluginSettings = createCurrentPluginSettingsRepository();
-
-  try {
-    const rows = await selectLegacyRows<{
-      id: number;
-      terminal_config: string | null;
-    }>(sql`
-      SELECT id, terminal_config FROM ssh_data
-      WHERE terminal_config IS NOT NULL
-    `);
-    const moves = rows
-      .map((row) => ({
-        scopeId: String(row.id),
-        values: hostSettingsFromTerminalConfig(row.terminal_config),
-      }))
-      .filter((move) => Object.keys(move.values).length > 0);
-    // A few reads for every candidate host rather than one per host.
-    const done = new Set<string | null>();
-    for (let i = 0; i < moves.length; i += 500) {
-      const existing = await pluginSettings.getAllForScopeIds(
-        "host",
-        moves.slice(i, i + 500).map((move) => move.scopeId),
-      );
-      for (const setting of existing) {
-        if (setting.pluginId === PLUGIN_ID && HOST_KEYS.includes(setting.key)) {
-          done.add(setting.scopeId);
-        }
-      }
-    }
-    for (const { scopeId, values } of moves) {
-      if (done.has(scopeId)) {
-        result.hostsSkipped++;
-        continue;
-      }
-      for (const [key, value] of Object.entries(values)) {
-        await pluginSettings.set(
-          PLUGIN_ID,
-          "host",
-          scopeId,
-          key,
-          JSON.stringify(value),
-        );
-      }
-      result.hostsMoved++;
-    }
-  } catch (error) {
-    databaseLogger.warn("SSH terminal host look migration failed", {
-      operation: "ssh_terminal_look_migration",
-      error: error instanceof Error ? error.message : String(error),
-    });
-  }
-
-  try {
-    const rows = await selectLegacyRows<{
-      user_id: string;
-      terminal_defaults: string | null;
-      custom_themes: string | null;
-      command_autocomplete: unknown;
-    }>(sql`
-      SELECT user_id, terminal_defaults, custom_themes, command_autocomplete
-      FROM user_preferences
-    `);
-    for (const row of rows) {
-      const values = userSettingsFromPreferences(row);
-      let moved = false;
-      for (const [key, value] of Object.entries(values)) {
-        const existing = await pluginSettings.get(
-          PLUGIN_ID,
-          "user",
-          row.user_id,
-          key,
-        );
-        if (existing && existing.value !== null) continue;
-        await pluginSettings.set(
-          PLUGIN_ID,
-          "user",
-          row.user_id,
-          key,
-          JSON.stringify(value),
-        );
-        moved = true;
-      }
-      if (moved) result.usersMoved++;
-    }
-  } catch (error) {
-    databaseLogger.warn("SSH terminal user settings migration failed", {
-      operation: "ssh_terminal_look_migration",
-      error: error instanceof Error ? error.message : String(error),
-    });
-  }
-
-  if (result.hostsMoved > 0 || result.usersMoved > 0) {
-    databaseLogger.info(
-      `Moved the terminal settings of ${result.hostsMoved} host(s) and ${result.usersMoved} user(s) into plugin settings`,
-      { operation: "ssh_terminal_look_migration" },
-    );
-  }
-  return result;
-}
diff --git a/src/backend/upgrade/ssh-terminal-macros-migration.ts b/src/backend/upgrade/ssh-terminal-macros-migration.ts
deleted file mode 100644
index 4f59b1ca7..000000000
--- a/src/backend/upgrade/ssh-terminal-macros-migration.ts
+++ /dev/null
@@ -1,98 +0,0 @@
-/**
- * Moves user_preferences.terminal_macros into the ssh-terminal plugin's
- * macros user setting. Macros a browser kept on its own (storage mode
- * "local") are moved by the plugin's frontend the first time the panel opens.
- *
- * The column keeps its value until 3.0.0 drops it.
- *
- * Idempotent: a user whose macros setting is already set is skipped.
- */
-
-import { sql } from "drizzle-orm";
-import { databaseLogger } from "../utils/logger.js";
-import { selectLegacyRows } from "../utils/crypto-migration/raw-rows.js";
-import {
-  createCurrentPluginRepository,
-  createCurrentPluginSettingsRepository,
-} from "../database/repositories/factory.js";
-
-const PLUGIN_ID = "ssh-terminal";
-const MAX_MACROS = 100;
-
-/** The saved macros in a 2.8 terminal_macros value, or null for none. */
-export function macrosFromPreferences(value: unknown): unknown[] | null {
-  if (typeof value !== "string" || !value) return null;
-  let parsed: unknown;
-  try {
-    parsed = JSON.parse(value);
-  } catch {
-    return null;
-  }
-  if (!Array.isArray(parsed)) return null;
-  const macros = parsed
-    .filter(
-      (macro) =>
-        !!macro &&
-        typeof macro === "object" &&
-        typeof (macro as { id?: unknown }).id === "string" &&
-        typeof (macro as { name?: unknown }).name === "string" &&
-        Array.isArray((macro as { steps?: unknown }).steps),
-    )
-    .slice(0, MAX_MACROS);
-  return macros.length > 0 ? macros : null;
-}
-
-export async function runSshTerminalMacrosMigration(): Promise<{
-  usersMoved: number;
-}> {
-  const result = { usersMoved: 0 };
-  try {
-    const plugin = await createCurrentPluginRepository().findById(PLUGIN_ID);
-    if (!plugin) return result;
-  } catch {
-    return result;
-  }
-
-  const pluginSettings = createCurrentPluginSettingsRepository();
-  try {
-    const rows = await selectLegacyRows<{
-      user_id: string;
-      terminal_macros: unknown;
-    }>(sql`
-      SELECT user_id, terminal_macros FROM user_preferences
-      WHERE terminal_macros IS NOT NULL
-    `);
-    for (const row of rows) {
-      const macros = macrosFromPreferences(row.terminal_macros);
-      if (!macros) continue;
-      const existing = await pluginSettings.get(
-        PLUGIN_ID,
-        "user",
-        row.user_id,
-        "macros",
-      );
-      if (existing && existing.value !== null) continue;
-      await pluginSettings.set(
-        PLUGIN_ID,
-        "user",
-        row.user_id,
-        "macros",
-        JSON.stringify(macros),
-      );
-      result.usersMoved++;
-    }
-  } catch (error) {
-    databaseLogger.warn("Terminal macros migration failed", {
-      operation: "ssh_terminal_macros_migration",
-      error: error instanceof Error ? error.message : String(error),
-    });
-  }
-
-  if (result.usersMoved > 0) {
-    databaseLogger.info(
-      `Moved the terminal macros of ${result.usersMoved} user(s) into plugin settings`,
-      { operation: "ssh_terminal_macros_migration" },
-    );
-  }
-  return result;
-}
diff --git a/src/backend/upgrade/ssh-terminal-settings-migration.ts b/src/backend/upgrade/ssh-terminal-settings-migration.ts
deleted file mode 100644
index 1c3fdb152..000000000
--- a/src/backend/upgrade/ssh-terminal-settings-migration.ts
+++ /dev/null
@@ -1,299 +0,0 @@
-/**
- * Moves the terminal's settings out of core and into the ssh-terminal
- * plugin's own settings.
- *
- * Admin keys from the core `settings` table: session persistence, command
- * history, the terminal half of the admin host defaults (a new host's font,
- * theme, cursor and auto tmux), touch input tuning and terminal image
- * storage. The image storage
- * local directory was never sent to a browser, so it lands as a secret field,
- * which keeps it that way. The legacy rows are left in place for a release;
- * nothing reads them any more.
- *
- * Host columns from ssh_data: enable_terminal, enable_terminal_toolbar and
- * enable_command_history. All three default to on in the plugin, so only
- * hosts that turned one off need a row.
- *
- * Idempotent: an admin key already set in the plugin, or a host that already
- * has an enableTerminal row, is skipped, so this is safe on every boot.
- */
-
-import { sql } from "drizzle-orm";
-import { databaseLogger } from "../utils/logger.js";
-import {
-  legacyFlag,
-  selectLegacyRows,
-} from "../utils/crypto-migration/raw-rows.js";
-import {
-  createCurrentPluginRepository,
-  createCurrentPluginSettingsRepository,
-  createCurrentSettingsRepository,
-} from "../database/repositories/factory.js";
-import { encryptSystemSecret } from "../utils/system-secret-crypto.js";
-
-const PLUGIN_ID = "ssh-terminal";
-
-type Parse = (raw: string) => unknown;
-
-const asNumber: Parse = (raw) => {
-  const value = Number(raw);
-  return Number.isFinite(value) ? value : undefined;
-};
-const asBoolean: Parse = (raw) =>
-  raw === "true" || raw === "1"
-    ? true
-    : raw === "false" || raw === "0"
-      ? false
-      : undefined;
-const asString: Parse = (raw) => raw;
-const asJson: Parse = (raw) => {
-  try {
-    return JSON.parse(raw);
-  } catch {
-    return undefined;
-  }
-};
-
-const CURSOR_STYLES = ["block", "underline", "bar"];
-/** 2.8 spellings of the theme that follows the app. */
-const LEGACY_TERMIX_THEMES = [
-  "Termix Dark",
-  "Termix Light",
-  "termixDark",
-  "termixLight",
-];
-
-/** One terminal key of the admin host defaults, or undefined when unusable. */
-function newHostDefault(key: string, defaults: unknown): unknown {
-  if (!defaults || typeof defaults !== "object") return undefined;
-  const value = (defaults as Record<string, unknown>)[key];
-  switch (key) {
-    case "fontSize": {
-      const size = Number(value);
-      return Number.isFinite(size) && size >= 8 && size <= 36
-        ? size
-        : undefined;
-    }
-    case "fontFamily":
-      return typeof value === "string" && value ? value : undefined;
-    case "theme":
-      if (typeof value !== "string" || !value) return undefined;
-      return LEGACY_TERMIX_THEMES.includes(value) ? "termix" : value;
-    case "cursorStyle":
-      return typeof value === "string" && CURSOR_STYLES.includes(value)
-        ? value
-        : undefined;
-    default:
-      return typeof value === "boolean" ? value : undefined;
-  }
-}
-
-/** Legacy core key -> the admin field the plugin declares. */
-const ADMIN_MOVES: {
-  legacyKey: string;
-  field: string;
-  parse: Parse;
-  secret?: boolean;
-}[] = [
-  {
-    legacyKey: "terminal_session_timeout_minutes",
-    field: "sessionTimeoutMinutes",
-    parse: asNumber,
-  },
-  {
-    legacyKey: "terminal_session_persistence_enabled",
-    field: "sessionPersistence",
-    parse: asBoolean,
-  },
-  {
-    legacyKey: "command_history_enabled",
-    field: "commandHistoryEnabled",
-    parse: asBoolean,
-  },
-  {
-    // The admin host defaults carried the new-host command history switch.
-    legacyKey: "host_defaults",
-    field: "commandHistoryForNewHosts",
-    parse: (raw) => {
-      const value = (asJson(raw) as { enableCommandHistory?: unknown } | null)
-        ?.enableCommandHistory;
-      return typeof value === "boolean" ? value : undefined;
-    },
-  },
-  ...(
-    [
-      ["fontSize", "newHostFontSize"],
-      ["fontFamily", "newHostFontFamily"],
-      ["theme", "newHostTheme"],
-      ["cursorStyle", "newHostCursorStyle"],
-      ["cursorBlink", "newHostCursorBlink"],
-      ["autoTmux", "newHostAutoTmux"],
-    ] as const
-  ).map(([legacyField, field]) => ({
-    // The terminal half of the admin host defaults, for new hosts.
-    legacyKey: "host_defaults",
-    field,
-    parse: (raw: string) => newHostDefault(legacyField, asJson(raw)),
-  })),
-  { legacyKey: "touch_input_settings", field: "touchInput", parse: asJson },
-  {
-    legacyKey: "terminal_image_storage_mode",
-    field: "imageStorageMode",
-    parse: asString,
-  },
-  {
-    legacyKey: "terminal_image_local_dir",
-    field: "imageLocalDir",
-    parse: asString,
-    secret: true,
-  },
-  {
-    legacyKey: "terminal_image_host_path",
-    field: "imageHostPath",
-    parse: asString,
-  },
-  { legacyKey: "terminal_image_ttl_ms", field: "imageTtlMs", parse: asNumber },
-  {
-    legacyKey: "terminal_image_max_count",
-    field: "imageMaxCount",
-    parse: asNumber,
-  },
-  {
-    legacyKey: "terminal_image_max_storage_bytes",
-    field: "imageMaxBytes",
-    parse: asNumber,
-  },
-];
-
-interface LegacyTerminalHostRow {
-  id: number;
-  enable_terminal: number | boolean | null;
-  enable_terminal_toolbar: number | boolean | null;
-  enable_command_history: number | boolean | null;
-}
-
-/** A column that was never set keeps the old default, on. */
-function isOn(value: number | boolean | null): boolean {
-  return legacyFlag(value, true);
-}
-
-export interface SshTerminalSettingsMigrationResult {
-  moved: string[];
-  skipped: string[];
-  hostsMoved: number;
-  hostsSkipped: number;
-}
-
-export async function runSshTerminalSettingsMigration(): Promise<SshTerminalSettingsMigrationResult> {
-  const result: SshTerminalSettingsMigrationResult = {
-    moved: [],
-    skipped: [],
-    hostsMoved: 0,
-    hostsSkipped: 0,
-  };
-
-  try {
-    // plugin_settings has a foreign key to plugins: nothing to migrate into
-    // until the plugin row exists.
-    const plugin = await createCurrentPluginRepository().findById(PLUGIN_ID);
-    if (!plugin) return result;
-
-    const settingsRepository = createCurrentSettingsRepository();
-    const pluginSettingsRepository = createCurrentPluginSettingsRepository();
-
-    for (const move of ADMIN_MOVES) {
-      const legacyValue = await settingsRepository.get(move.legacyKey);
-      if (legacyValue === null || legacyValue === "") continue;
-
-      const existing = await pluginSettingsRepository.get(
-        PLUGIN_ID,
-        "admin",
-        null,
-        move.field,
-      );
-      if (existing && existing.value !== null) {
-        result.skipped.push(move.legacyKey);
-        continue;
-      }
-
-      const parsed = move.parse(legacyValue);
-      if (parsed === undefined) {
-        result.skipped.push(move.legacyKey);
-        continue;
-      }
-
-      const stored = move.secret
-        ? await encryptSystemSecret(String(parsed))
-        : parsed;
-      await pluginSettingsRepository.set(
-        PLUGIN_ID,
-        "admin",
-        null,
-        move.field,
-        JSON.stringify(stored),
-        !!move.secret,
-      );
-      result.moved.push(move.legacyKey);
-    }
-
-    // Raw SQL, not the typed schema, so this keeps working once schema.ts
-    // stops declaring these columns.
-    const rows = await selectLegacyRows<LegacyTerminalHostRow>(sql`
-      SELECT id, enable_terminal, enable_terminal_toolbar, enable_command_history
-      FROM ssh_data
-      WHERE enable_terminal = false
-        OR enable_terminal_toolbar = false
-        OR enable_command_history = false
-    `);
-
-    for (const row of rows) {
-      const scopeId = String(row.id);
-      const existing = await pluginSettingsRepository.get(
-        PLUGIN_ID,
-        "host",
-        scopeId,
-        "enableTerminal",
-      );
-      if (existing && existing.value !== null) {
-        result.hostsSkipped++;
-        continue;
-      }
-
-      const values: Record<string, boolean> = {
-        enableTerminal: isOn(row.enable_terminal),
-        enableTerminalToolbar: isOn(row.enable_terminal_toolbar),
-        enableCommandHistory: isOn(row.enable_command_history),
-      };
-      for (const [key, value] of Object.entries(values)) {
-        await pluginSettingsRepository.set(
-          PLUGIN_ID,
-          "host",
-          scopeId,
-          key,
-          JSON.stringify(value),
-        );
-      }
-      result.hostsMoved++;
-    }
-
-    if (result.moved.length > 0 || result.hostsMoved > 0) {
-      databaseLogger.info(
-        `Moved ${result.moved.length} terminal setting(s) and ${result.hostsMoved} host(s) into plugin settings`,
-        {
-          operation: "ssh_terminal_settings_migration",
-          moved: result.moved.join(", "),
-          hostsMoved: result.hostsMoved,
-        },
-      );
-    }
-  } catch (error) {
-    // A failed migration must not stop the backend. The terminal falls back
-    // to its defaults, which is a visible, recoverable state.
-    databaseLogger.warn("SSH terminal settings migration failed", {
-      operation: "ssh_terminal_settings_migration",
-      error: error instanceof Error ? error.message : String(error),
-    });
-  }
-
-  return result;
-}
diff --git a/src/backend/upgrade/sso-legacy-identity-migration.ts b/src/backend/upgrade/sso-legacy-identity-migration.ts
index 93134d41f..975001b62 100644
--- a/src/backend/upgrade/sso-legacy-identity-migration.ts
+++ b/src/backend/upgrade/sso-legacy-identity-migration.ts
@@ -12,6 +12,9 @@
  * and exactly one OIDC row is from before 2.9. An identity whose target is
  * already taken (a duplicate account made by 2.9.0) is left for an admin.
  * Idempotent.
+ *
+ * 2.9.1 ran it at boot. 26.10.0 runs it from the database setup, before
+ * users.oidc_identifier is dropped, for an install upgrading from 2.9.0.
  */
 
 import { sql } from "drizzle-orm";
diff --git a/src/backend/upgrade/sso-settings-migration.ts b/src/backend/upgrade/sso-settings-migration.ts
deleted file mode 100644
index 35b6c6b2e..000000000
--- a/src/backend/upgrade/sso-settings-migration.ts
+++ /dev/null
@@ -1,59 +0,0 @@
-/**
- * Moves the silent sign-in default out of core settings and into the sso
- * plugin's admin settings. Core used to own the toggle and read it on the
- * login page; the sso plugin now marks its own login instance to start on
- * its own.
- *
- * Idempotent: a value already in plugin settings wins and the core copy is
- * dropped.
- */
-
-import { databaseLogger } from "../utils/logger.js";
-import {
-  createCurrentPluginRepository,
-  createCurrentPluginSettingsRepository,
-  createCurrentSettingsRepository,
-} from "../database/repositories/factory.js";
-
-const PLUGIN_ID = "sso";
-const LEGACY_KEY = "oidc_silent_login_default";
-const FIELD = "silentLoginDefault";
-
-export interface SsoSettingsMigrationResult {
-  moved: boolean;
-}
-
-export async function runSsoSettingsMigration(): Promise<SsoSettingsMigrationResult> {
-  try {
-    const plugin = await createCurrentPluginRepository().findById(PLUGIN_ID);
-    if (!plugin) return { moved: false };
-
-    const settings = createCurrentSettingsRepository();
-    const legacy = await settings.get(LEGACY_KEY);
-    if (legacy === null || legacy === "") return { moved: false };
-
-    const pluginSettings = createCurrentPluginSettingsRepository();
-    const existing = await pluginSettings.get(PLUGIN_ID, "admin", null, FIELD);
-    if (!existing || existing.value === null) {
-      await pluginSettings.set(
-        PLUGIN_ID,
-        "admin",
-        null,
-        FIELD,
-        JSON.stringify(legacy === "true"),
-        false,
-      );
-    }
-    await settings.delete(LEGACY_KEY);
-    databaseLogger.info("Moved the silent sign-in default into sso settings", {
-      operation: "sso_settings_migration",
-    });
-    return { moved: true };
-  } catch (error) {
-    databaseLogger.warn("SSO settings migration failed", {
-      operation: "sso_settings_migration",
-      error: error instanceof Error ? error.message : String(error),
-    });
-    return { moved: false };
-  }
-}
diff --git a/src/backend/upgrade/step-ca-settings-migration.ts b/src/backend/upgrade/step-ca-settings-migration.ts
deleted file mode 100644
index 9dfc3cd70..000000000
--- a/src/backend/upgrade/step-ca-settings-migration.ts
+++ /dev/null
@@ -1,110 +0,0 @@
-/**
- * Moves the 2.8 Step CA configuration into the step-ca plugin.
- *
- * The CA URL, root fingerprint, OIDC provisioner and private endpoint
- * allowlist lived in core `settings` rows. They become the plugin's admin
- * settings. An install that had a CA configured keeps sending the pre-2.9
- * redirect URI (/host/step-ca-callback), because that is the one registered
- * with its identity provider: the plugin's legacyCallback setting is turned
- * on.
- *
- * Idempotent: a value already present in plugin_settings is never
- * overwritten. The old rows stay for one release so a downgrade still works.
- */
-
-import { databaseLogger } from "../utils/logger.js";
-import {
-  createCurrentPluginRepository,
-  createCurrentPluginSettingsRepository,
-  createCurrentSettingsRepository,
-} from "../database/repositories/factory.js";
-import { parseNotificationAllowlist } from "../utils/notification-egress.js";
-
-const PLUGIN_ID = "step-ca";
-
-const MOVES: { legacyKey: string; field: string }[] = [
-  { legacyKey: "step_ca_url", field: "caUrl" },
-  { legacyKey: "step_ca_fingerprint", field: "fingerprint" },
-  { legacyKey: "step_ca_provisioner", field: "provisioner" },
-];
-
-const LEGACY_ALLOWLIST_KEY = "step_ca_private_endpoint_allowlist";
-
-export interface StepCaSettingsMigrationResult {
-  moved: string[];
-  legacyCallback: boolean;
-}
-
-export async function runStepCaSettingsMigration(): Promise<StepCaSettingsMigrationResult> {
-  const result: StepCaSettingsMigrationResult = {
-    moved: [],
-    legacyCallback: false,
-  };
-
-  try {
-    // plugin_settings has a foreign key to plugins: nothing to move into yet.
-    const plugin = await createCurrentPluginRepository().findById(PLUGIN_ID);
-    if (!plugin) return result;
-
-    const settings = createCurrentSettingsRepository();
-    const pluginSettings = createCurrentPluginSettingsRepository();
-
-    const writeIfUnset = async (field: string, value: unknown) => {
-      const existing = await pluginSettings.get(
-        PLUGIN_ID,
-        "admin",
-        null,
-        field,
-      );
-      if (existing && existing.value !== null) return false;
-      await pluginSettings.set(
-        PLUGIN_ID,
-        "admin",
-        null,
-        field,
-        JSON.stringify(value),
-      );
-      return true;
-    };
-
-    for (const move of MOVES) {
-      const value = (await settings.get(move.legacyKey))?.trim();
-      if (!value) continue;
-      if (await writeIfUnset(move.field, value)) {
-        result.moved.push(move.legacyKey);
-      }
-    }
-
-    const hosts = parseNotificationAllowlist(
-      await settings.get(LEGACY_ALLOWLIST_KEY),
-    );
-    if (
-      hosts.length > 0 &&
-      (await writeIfUnset("privateEndpoints", hosts.join(", ")))
-    ) {
-      result.moved.push(LEGACY_ALLOWLIST_KEY);
-    }
-
-    if ((await settings.get("step_ca_url"))?.trim()) {
-      result.legacyCallback = await writeIfUnset("legacyCallback", true);
-    }
-
-    if (result.moved.length > 0) {
-      databaseLogger.info(
-        `Moved ${result.moved.length} Step CA setting(s) into plugin settings`,
-        {
-          operation: "step_ca_settings_migration",
-          moved: result.moved.join(", "),
-        },
-      );
-    }
-  } catch (error) {
-    // Must not stop the backend: the plugin then reports "not configured".
-    databaseLogger.warn("Step CA settings migration failed", {
-      operation: "step_ca_settings_migration",
-      error: error instanceof Error ? error.message : String(error),
-    });
-  }
-
-  return result;
-}
diff --git a/src/backend/upgrade/tailscale-settings-migration.ts b/src/backend/upgrade/tailscale-settings-migration.ts
deleted file mode 100644
index 141135eef..000000000
--- a/src/backend/upgrade/tailscale-settings-migration.ts
+++ /dev/null
@@ -1,105 +0,0 @@
-/**
- * Moves the Tailscale API key and base URL out of core settings.
- *
- * Both lived in the core `settings` table, written by a core route that existed
- * only to serve one plugin. A6 gives plugins their own settings, so they belong
- * in plugin_settings under the tailscale plugin.
- *
- * The key was stored in plaintext, and the route that read it back masked only
- * its tail while being open to any authenticated user. Landing it as a secret
- * field encrypts it at rest, so this migration is a fix as much as a move.
- *
- * Idempotent in two ways: it stops when a value is already present in the new
- * home, and encryptSystemSecret returns an already-encrypted value unchanged,
- * so a second pass can neither duplicate nor double-encrypt.
- */
-
-import { databaseLogger } from "../utils/logger.js";
-import {
-  createCurrentPluginRepository,
-  createCurrentPluginSettingsRepository,
-  createCurrentSettingsRepository,
-} from "../database/repositories/factory.js";
-import { encryptSystemSecret } from "../utils/system-secret-crypto.js";
-
-const PLUGIN_ID = "tailscale";
-
-/** Legacy core key -> the field the plugin now declares. */
-const MOVES: { legacyKey: string; field: string; secret: boolean }[] = [
-  { legacyKey: "tailscale_api_key", field: "apiKey", secret: true },
-  { legacyKey: "tailscale_api_base_url", field: "apiBaseUrl", secret: false },
-];
-
-export interface TailscaleSettingsMigrationResult {
-  moved: string[];
-  skipped: string[];
-}
-
-export async function runTailscaleSettingsMigration(): Promise<TailscaleSettingsMigrationResult> {
-  const moved: string[] = [];
-  const skipped: string[] = [];
-
-  try {
-    // The FK to plugins means there is nothing to migrate into until the
-    // plugin has been seeded. Not an error: a build without it just has no
-    // tailscale rows.
-    const plugin = await createCurrentPluginRepository().findById(PLUGIN_ID);
-    if (!plugin) return { moved, skipped };
-
-    const settingsRepository = createCurrentSettingsRepository();
-    const pluginSettingsRepository = createCurrentPluginSettingsRepository();
-
-    for (const move of MOVES) {
-      const legacyValue = await settingsRepository.get(move.legacyKey);
-      if (legacyValue === null || legacyValue === "") {
-        continue;
-      }
-
-      const existing = await pluginSettingsRepository.get(
-        PLUGIN_ID,
-        "admin",
-        null,
-        move.field,
-      );
-      if (existing && existing.value !== null) {
-        // Already moved. Drop the stale copy rather than leaving a plaintext
-        // key behind for a reader that predates this change.
-        await settingsRepository.delete(move.legacyKey);
-        skipped.push(move.legacyKey);
-        continue;
-      }
-
-      const stored = move.secret
-        ? await encryptSystemSecret(legacyValue)
-        : legacyValue;
-
-      await pluginSettingsRepository.set(
-        PLUGIN_ID,
-        "admin",
-        null,
-        move.field,
-        JSON.stringify(stored),
-        move.secret,
-      );
-
-      await settingsRepository.delete(move.legacyKey);
-      moved.push(move.legacyKey);
-    }
-
-    if (moved.length > 0) {
-      databaseLogger.info(
-        `Moved ${moved.length} Tailscale setting(s) into plugin settings`,
-        { operation: "tailscale_settings_migration", moved: moved.join(", ") },
-      );
-    }
-  } catch (error) {
-    // A failed migration must not stop the backend. The plugin falls back to
-    // "no key configured", which is a visible, recoverable state.
-    databaseLogger.warn("Tailscale settings migration failed", {
-      operation: "tailscale_settings_migration",
-      error: error instanceof Error ? error.message : String(error),
-    });
-  }
-
-  return { moved, skipped };
-}
diff --git a/src/backend/upgrade/telemetry-settings-migration.ts b/src/backend/upgrade/telemetry-settings-migration.ts
deleted file mode 100644
index 833791680..000000000
--- a/src/backend/upgrade/telemetry-settings-migration.ts
+++ /dev/null
@@ -1,74 +0,0 @@
-/**
- * Moves the 2.8 telemetry settings into the telemetry plugin: the admin
- * switch (settings.analytics_enabled) into its `enabled` admin setting, and
- * the instance id (settings.analytics_instance_id) into `instanceId`, so the
- * instance keeps reporting under the same id.
- *
- * Idempotent: nothing is written where the plugin already has a row. The
- * legacy settings rows stay in place until 3.0.0. The plugin waits a few
- * minutes before its first send, so this lands first.
- */
-
-import { databaseLogger } from "../utils/logger.js";
-import {
-  createCurrentPluginRepository,
-  createCurrentPluginSettingsRepository,
-  createCurrentSettingsRepository,
-} from "../database/repositories/factory.js";
-
-const PLUGIN_ID = "telemetry";
-
-export interface TelemetrySettingsMigrationResult {
-  movedEnabled: boolean;
-  movedInstanceId: boolean;
-}
-
-export async function runTelemetrySettingsMigration(): Promise<TelemetrySettingsMigrationResult> {
-  const result: TelemetrySettingsMigrationResult = {
-    movedEnabled: false,
-    movedInstanceId: false,
-  };
-
-  // plugin_settings has a foreign key to plugins.
-  try {
-    if (!(await createCurrentPluginRepository().findById(PLUGIN_ID))) {
-      return result;
-    }
-  } catch {
-    return result;
-  }
-
-  const coreSettings = createCurrentSettingsRepository();
-  const pluginSettings = createCurrentPluginSettingsRepository();
-
-  const moves: Array<[string, string, unknown]> = [];
-  if ((await coreSettings.get("analytics_enabled")) === "false") {
-    moves.push(["analytics_enabled", "enabled", false]);
-  }
-  const instanceId = await coreSettings.get("analytics_instance_id");
-  if (instanceId) {
-    moves.push(["analytics_instance_id", "instanceId", instanceId]);
-  }
-
-  for (const [, key, value] of moves) {
-    const existing = await pluginSettings.get(PLUGIN_ID, "admin", null, key);
-    if (existing && existing.value !== null) continue;
-    await pluginSettings.set(
-      PLUGIN_ID,
-      "admin",
-      null,
-      key,
-      JSON.stringify(value),
-    );
-    if (key === "enabled") result.movedEnabled = true;
-    else result.movedInstanceId = true;
-  }
-
-  if (result.movedEnabled || result.movedInstanceId) {
-    databaseLogger.info("Moved telemetry settings into plugin settings", {
-      operation: "telemetry_settings_migration",
-      ...result,
-    });
-  }
-  return result;
-}
diff --git a/src/backend/upgrade/tmux-monitor-settings-migration.ts b/src/backend/upgrade/tmux-monitor-settings-migration.ts
deleted file mode 100644
index 8ada890f5..000000000
--- a/src/backend/upgrade/tmux-monitor-settings-migration.ts
+++ /dev/null
@@ -1,83 +0,0 @@
-/**
- * Moves the tmux monitor host column into the tmux-monitor plugin's host-scope
- * settings, before the column is dropped from ssh_data.
- *
- * Idempotent: skips a host that already has a tmux-monitor settings row, so it
- * is safe to run on every boot. Lossless: reads straight off the still-present
- * ssh_data column, so it must run and finish before that column is ever
- * dropped from schema.ts.
- */
-
-import { sql } from "drizzle-orm";
-import { databaseLogger } from "../utils/logger.js";
-import { selectLegacyRows } from "../utils/crypto-migration/raw-rows.js";
-import { createCurrentPluginSettingsRepository } from "../database/repositories/factory.js";
-
-export interface TmuxMonitorSettingsMigrationResult {
-  moved: number;
-  skipped: number;
-}
-
-interface LegacyTmuxMonitorRow {
-  id: number;
-  enable_tmux_monitor: number | boolean | null;
-}
-
-export async function runTmuxMonitorSettingsMigration(): Promise<TmuxMonitorSettingsMigrationResult> {
-  const result: TmuxMonitorSettingsMigrationResult = { moved: 0, skipped: 0 };
-
-  try {
-    // Raw SQL, not the typed schema, so this keeps working once schema.ts
-    // stops declaring this column. The plugin's enable switch defaults to
-    // off, matching the old column's default, so only hosts that turned it
-    // on need a row.
-    const rows = await selectLegacyRows<LegacyTmuxMonitorRow>(sql`
-      SELECT id, enable_tmux_monitor
-      FROM ssh_data
-      WHERE enable_tmux_monitor = true
-    `);
-
-    if (rows.length === 0) return result;
-
-    const pluginSettingsRepository = createCurrentPluginSettingsRepository();
-
-    for (const row of rows) {
-      const scopeId = String(row.id);
-      const existing = await pluginSettingsRepository.get(
-        "tmux-monitor",
-        "host",
-        scopeId,
-        "enableTmuxMonitor",
-      );
-      if (existing && existing.value !== null) {
-        result.skipped++;
-        continue;
-      }
-
-      await pluginSettingsRepository.set(
-        "tmux-monitor",
-        "host",
-        scopeId,
-        "enableTmuxMonitor",
-        JSON.stringify(!!row.enable_tmux_monitor),
-      );
-      result.moved++;
-    }
-
-    if (result.moved > 0) {
-      databaseLogger.info(
-        `Moved tmux monitor settings for ${result.moved} host(s) into plugin settings`,
-        { operation: "tmux_monitor_settings_migration", moved: result.moved },
-      );
-    }
-  } catch (error) {
-    // A failed migration must not stop the backend. Hosts simply keep the
-    // monitor off, the plugin's default.
-    databaseLogger.warn("Tmux monitor settings migration failed", {
-      operation: "tmux_monitor_settings_migration",
-      error: error instanceof Error ? error.message : String(error),
-    });
-  }
-
-  return result;
-}
diff --git a/src/backend/upgrade/totp-migration.ts b/src/backend/upgrade/totp-migration.ts
index 6251149fb..f23c62458 100644
--- a/src/backend/upgrade/totp-migration.ts
+++ b/src/backend/upgrade/totp-migration.ts
@@ -11,7 +11,7 @@
  *    there sealed with the installation key (what ctx.secrets.seal writes),
  *    then the users columns are cleared.
  *
- * The columns stay in the database until 3.0.0, since core's drizzle
+ * The columns stay in the database until 26.10.0, since core's drizzle
  * migrations run before this does. A user whose data key cannot be opened
  * at boot is skipped and tried again on the next one. Idempotent.
  */
diff --git a/src/backend/upgrade/tunnels-settings-migration.ts b/src/backend/upgrade/tunnels-settings-migration.ts
deleted file mode 100644
index b99ec50f1..000000000
--- a/src/backend/upgrade/tunnels-settings-migration.ts
+++ /dev/null
@@ -1,101 +0,0 @@
-/**
- * Moves the two tunnel host columns into the tunnels plugin's host-scope
- * settings, before those columns are dropped from ssh_data.
- *
- * Idempotent: skips a host that already has a tunnels settings row, so it is
- * safe to run on every boot. Lossless: reads straight off the still-present
- * ssh_data columns, so it must run and finish before those columns are ever
- * dropped from schema.ts.
- */
-
-import { sql } from "drizzle-orm";
-import { databaseLogger } from "../utils/logger.js";
-import { selectLegacyRows } from "../utils/crypto-migration/raw-rows.js";
-import { createCurrentPluginSettingsRepository } from "../database/repositories/factory.js";
-
-export interface TunnelsSettingsMigrationResult {
-  moved: number;
-  skipped: number;
-}
-
-interface LegacyTunnelRow {
-  id: number;
-  enable_tunnel: number | boolean | null;
-  tunnel_connections: string | null;
-}
-
-function parseConnections(raw: string | null): unknown[] {
-  if (!raw) return [];
-  try {
-    const parsed = JSON.parse(raw);
-    return Array.isArray(parsed) ? parsed : [];
-  } catch {
-    return [];
-  }
-}
-
-export async function runTunnelsSettingsMigration(): Promise<TunnelsSettingsMigrationResult> {
-  const result: TunnelsSettingsMigrationResult = { moved: 0, skipped: 0 };
-
-  try {
-    // Raw SQL, not the typed schema, so this keeps working once schema.ts
-    // stops declaring these columns. The plugin's enable switch defaults to
-    // off, so every host that had tunnels on (the old column default) or
-    // any saved tunnel has to be copied, not just the non-default ones.
-    const rows = await selectLegacyRows<LegacyTunnelRow>(sql`
-      SELECT id, enable_tunnel, tunnel_connections
-      FROM ssh_data
-      WHERE enable_tunnel = true OR tunnel_connections IS NOT NULL
-    `);
-
-    if (rows.length === 0) return result;
-
-    const pluginSettingsRepository = createCurrentPluginSettingsRepository();
-
-    for (const row of rows) {
-      const scopeId = String(row.id);
-      const existing = await pluginSettingsRepository.get(
-        "tunnels",
-        "host",
-        scopeId,
-        "enableTunnel",
-      );
-      if (existing && existing.value !== null) {
-        result.skipped++;
-        continue;
-      }
-
-      await pluginSettingsRepository.set(
-        "tunnels",
-        "host",
-        scopeId,
-        "enableTunnel",
-        JSON.stringify(!!row.enable_tunnel),
-      );
-      await pluginSettingsRepository.set(
-        "tunnels",
-        "host",
-        scopeId,
-        "tunnelConnections",
-        JSON.stringify(parseConnections(row.tunnel_connections)),
-      );
-      result.moved++;
-    }
-
-    if (result.moved > 0) {
-      databaseLogger.info(
-        `Moved tunnel settings for ${result.moved} host(s) into plugin settings`,
-        { operation: "tunnels_settings_migration", moved: result.moved },
-      );
-    }
-  } catch (error) {
-    // A failed migration must not stop the backend. Hosts simply keep
-    // whatever tunnel settings they already had (none, on a fresh run).
-    databaseLogger.warn("Tunnel settings migration failed", {
-      operation: "tunnels_settings_migration",
-      error: error instanceof Error ? error.message : String(error),
-    });
-  }
-
-  return result;
-}
diff --git a/src/backend/upgrade/vault-settings-migration.ts b/src/backend/upgrade/vault-settings-migration.ts
deleted file mode 100644
index 22ea4e9f3..000000000
--- a/src/backend/upgrade/vault-settings-migration.ts
+++ /dev/null
@@ -1,149 +0,0 @@
-/**
- * Moves each host's Vault signer profile out of ssh_data and into the vault
- * plugin's profileId host setting.
- *
- * An install that used Vault keeps sending the pre-2.9 redirect URI
- * (/vault/oidc/callback), because that is the one its Vault OIDC roles
- * allow: the plugin's legacyCallback setting is turned on.
- *
- * The column stays in the database, unused: core's drizzle migrations run
- * before this does, so dropping it there would lose the data first.
- *
- * Idempotent: a host or setting that already has a value is skipped, so this
- * is safe on every boot.
- */
-
-import { sql } from "drizzle-orm";
-import { databaseLogger } from "../utils/logger.js";
-import {
-  createCurrentPluginRepository,
-  createCurrentPluginSettingsRepository,
-} from "../database/repositories/factory.js";
-import { selectRows } from "../utils/crypto-migration/raw-rows.js";
-
-const PLUGIN_ID = "vault";
-const SETTING_KEY = "profileId";
-
-interface LegacyHostRow {
-  id: number;
-  vault_profile_id: number | string | null;
-}
-
-export interface VaultSettingsMigrationResult {
-  hostsMoved: number;
-  hostsSkipped: number;
-  legacyCallback: boolean;
-}
-
-async function legacyRows(): Promise<LegacyHostRow[]> {
-  try {
-    // Raw SQL: schema.ts no longer declares vault_profile_id.
-    return await selectRows<LegacyHostRow>(
-      sql`SELECT id, vault_profile_id FROM ssh_data WHERE vault_profile_id IS NOT NULL`,
-    );
-  } catch {
-    // A fresh install never had the column.
-    return [];
-  }
-}
-
-/** Whether 2.8 had any Vault profile, before or after the plugin adopted them. */
-async function hadProfiles(): Promise<boolean> {
-  for (const table of ["vault_profiles", "p_vault_profiles"]) {
-    try {
-      const rows = await selectRows<unknown>(
-        sql`SELECT 1 FROM ${sql.identifier(table)} LIMIT 1`,
-      );
-      if (rows.length > 0) return true;
-    } catch {
-      // table not there
-    }
-  }
-  return false;
-}
-
-export async function runVaultSettingsMigration(): Promise<VaultSettingsMigrationResult> {
-  const result: VaultSettingsMigrationResult = {
-    hostsMoved: 0,
-    hostsSkipped: 0,
-    legacyCallback: false,
-  };
-
-  // plugin_settings has a foreign key to plugins: nothing to migrate into
-  // until the plugin row exists.
-  try {
-    const plugin = await createCurrentPluginRepository().findById(PLUGIN_ID);
-    if (!plugin) return result;
-  } catch {
-    return result;
-  }
-
-  const pluginSettings = createCurrentPluginSettingsRepository();
-  const rows = await legacyRows();
-
-  for (const row of rows) {
-    const profileId = Number(row.vault_profile_id);
-    if (!Number.isInteger(profileId) || profileId <= 0) continue;
-    const scopeId = String(row.id);
-    try {
-      const existing = await pluginSettings.get(
-        PLUGIN_ID,
-        "host",
-        scopeId,
-        SETTING_KEY,
-      );
-      if (existing) {
-        result.hostsSkipped++;
-        continue;
-      }
-      await pluginSettings.set(
-        PLUGIN_ID,
-        "host",
-        scopeId,
-        SETTING_KEY,
-        JSON.stringify(profileId),
-      );
-      result.hostsMoved++;
-    } catch (error) {
-      databaseLogger.warn("Vault host settings migration failed for a host", {
-        operation: "vault_settings_migration",
-        hostId: row.id,
-        error: error instanceof Error ? error.message : String(error),
-      });
-    }
-  }
-
-  // Decided once, on the first boot with the plugin: written either way, so
-  // profiles created on a fresh install later never turn it on.
-  try {
-    const existing = await pluginSettings.get(
-      PLUGIN_ID,
-      "admin",
-      null,
-      "legacyCallback",
-    );
-    if (!existing || existing.value === null) {
-      result.legacyCallback = rows.length > 0 || (await hadProfiles());
-      await pluginSettings.set(
-        PLUGIN_ID,
-        "admin",
-        null,
-        "legacyCallback",
-        JSON.stringify(result.legacyCallback),
-      );
-    }
-  } catch (error) {
-    databaseLogger.warn("Vault legacy callback migration failed", {
-      operation: "vault_settings_migration",
-      error: error instanceof Error ? error.message : String(error),
-    });
-  }
-
-  if (result.hostsMoved > 0) {
-    databaseLogger.info(
-      `Moved the Vault profile for ${result.hostsMoved} host(s) into plugin settings`,
-      { operation: "vault_settings_migration" },
-    );
-  }
-  return result;
-}
diff --git a/src/backend/upgrade/wake-on-lan-settings-migration.ts b/src/backend/upgrade/wake-on-lan-settings-migration.ts
deleted file mode 100644
index 9a5e7b479..000000000
--- a/src/backend/upgrade/wake-on-lan-settings-migration.ts
+++ /dev/null
@@ -1,113 +0,0 @@
-/**
- * Moves each host's Wake-on-LAN settings out of ssh_data and into the
- * wake-on-lan plugin's host settings: mac_address becomes macAddress and
- * wol_broadcast_address becomes broadcastAddress.
- *
- * The columns stay in the database, unused: core's drizzle migrations run
- * before this does, so dropping them there would lose the data first.
- *
- * Idempotent: a host that already has any wake-on-lan row is skipped, so
- * this is safe on every boot.
- */
-
-import { sql } from "drizzle-orm";
-import { databaseLogger } from "../utils/logger.js";
-import {
-  createCurrentPluginRepository,
-  createCurrentPluginSettingsRepository,
-} from "../database/repositories/factory.js";
-import { selectRows } from "../utils/crypto-migration/raw-rows.js";
-
-const PLUGIN_ID = "wake-on-lan";
-
-interface LegacyHostRow {
-  id: number;
-  mac_address: string | null;
-  wol_broadcast_address: string | null;
-}
-
-/** The plugin's host settings for one legacy row, defaults left out. */
-export function wakeOnLanSettingsFromRow(
-  row: LegacyHostRow,
-): Record<string, unknown> {
-  const values: Record<string, unknown> = {};
-  if (row.mac_address) values.macAddress = row.mac_address;
-  if (row.wol_broadcast_address) {
-    values.broadcastAddress = row.wol_broadcast_address;
-  }
-  return values;
-}
-
-export interface WakeOnLanSettingsMigrationResult {
-  hostsMoved: number;
-  hostsSkipped: number;
-}
-
-export async function runWakeOnLanSettingsMigration(): Promise<WakeOnLanSettingsMigrationResult> {
-  const result: WakeOnLanSettingsMigrationResult = {
-    hostsMoved: 0,
-    hostsSkipped: 0,
-  };
-
-  // plugin_settings has a foreign key to plugins: nothing to migrate into
-  // until the plugin row exists.
-  try {
-    const plugin = await createCurrentPluginRepository().findById(PLUGIN_ID);
-    if (!plugin) return result;
-  } catch {
-    return result;
-  }
-
-  const pluginSettings = createCurrentPluginSettingsRepository();
-
-  let rows: LegacyHostRow[];
-  try {
-    // Raw SQL: schema.ts no longer declares these columns.
-    rows = await selectRows<LegacyHostRow>(
-      sql`SELECT id, mac_address, wol_broadcast_address FROM ssh_data`,
-    );
-  } catch {
-    // A fresh install never had the columns.
-    return result;
-  }
-
-  for (const row of rows) {
-    const values = wakeOnLanSettingsFromRow(row);
-    if (Object.keys(values).length === 0) continue;
-    const scopeId = String(row.id);
-    try {
-      const existing = await pluginSettings.getAll(PLUGIN_ID, "host", scopeId);
-      if (existing.length > 0) {
-        result.hostsSkipped++;
-        continue;
-      }
-      for (const [key, value] of Object.entries(values)) {
-        await pluginSettings.set(
-          PLUGIN_ID,
-          "host",
-          scopeId,
-          key,
-          JSON.stringify(value),
-        );
-      }
-      result.hostsMoved++;
-    } catch (error) {
-      databaseLogger.warn(
-        "Wake-on-LAN host settings migration failed for a host",
-        {
-          operation: "wake_on_lan_settings_migration",
-          hostId: row.id,
-          error: error instanceof Error ? error.message : String(error),
-        },
-      );
-    }
-  }
-
-  if (result.hostsMoved > 0) {
-    databaseLogger.info(
-      `Moved Wake-on-LAN settings for ${result.hostsMoved} host(s) into plugin settings`,
-      { operation: "wake_on_lan_settings_migration" },
-    );
-  }
-  return result;
-}
diff --git a/src/backend/upgrade/warpgate-settings-migration.ts b/src/backend/upgrade/warpgate-settings-migration.ts
deleted file mode 100644
index 81f6a4165..000000000
--- a/src/backend/upgrade/warpgate-settings-migration.ts
+++ /dev/null
@@ -1,134 +0,0 @@
-/**
- * Moves each host's Warpgate flag out of ssh_data and into the warpgate
- * plugin's useWarpgate host setting. Hosts from before 2.7 that still carry
- * auth_type "warpgate" get the setting too, and auth type "none", which is
- * what that auth type meant.
- *
- * The column stays in the database, unused: core's drizzle migrations run
- * before this does, so dropping it there would lose the data first.
- *
- * Idempotent: a host that already has the setting is skipped, so this is
- * safe on every boot.
- */
-
-import { sql } from "drizzle-orm";
-import { databaseLogger } from "../utils/logger.js";
-import {
-  createCurrentPluginRepository,
-  createCurrentPluginSettingsRepository,
-} from "../database/repositories/factory.js";
-import {
-  runStatement,
-  selectRows,
-} from "../utils/crypto-migration/raw-rows.js";
-
-const PLUGIN_ID = "warpgate";
-const SETTING_KEY = "useWarpgate";
-
-interface LegacyHostRow {
-  id: number;
-  use_warpgate?: number | boolean | string | null;
-  auth_type: string | null;
-}
-
-export function usesWarpgate(row: LegacyHostRow): boolean {
-  const flag = row.use_warpgate;
-  return (
-    flag === true ||
-    flag === 1 ||
-    flag === "1" ||
-    flag === "true" ||
-    row.auth_type === "warpgate"
-  );
-}
-
-export interface WarpgateSettingsMigrationResult {
-  hostsMoved: number;
-  hostsSkipped: number;
-  authTypesFixed: number;
-}
-
-async function legacyRows(): Promise<LegacyHostRow[]> {
-  try {
-    // Raw SQL: schema.ts no longer declares use_warpgate.
-    return await selectRows<LegacyHostRow>(
-      sql`SELECT id, use_warpgate, auth_type FROM ssh_data`,
-    );
-  } catch {
-    // A fresh install never had the column.
-    try {
-      return await selectRows<LegacyHostRow>(
-        sql`SELECT id, auth_type FROM ssh_data WHERE auth_type = 'warpgate'`,
-      );
-    } catch {
-      return [];
-    }
-  }
-}
-
-export async function runWarpgateSettingsMigration(): Promise<WarpgateSettingsMigrationResult> {
-  const result: WarpgateSettingsMigrationResult = {
-    hostsMoved: 0,
-    hostsSkipped: 0,
-    authTypesFixed: 0,
-  };
-
-  // plugin_settings has a foreign key to plugins: nothing to migrate into
-  // until the plugin row exists.
-  try {
-    const plugin = await createCurrentPluginRepository().findById(PLUGIN_ID);
-    if (!plugin) return result;
-  } catch {
-    return result;
-  }
-
-  const pluginSettings = createCurrentPluginSettingsRepository();
-
-  for (const row of await legacyRows()) {
-    if (!usesWarpgate(row)) continue;
-    const scopeId = String(row.id);
-    try {
-      const existing = await pluginSettings.get(
-        PLUGIN_ID,
-        "host",
-        scopeId,
-        SETTING_KEY,
-      );
-      if (existing) {
-        result.hostsSkipped++;
-      } else {
-        await pluginSettings.set(
-          PLUGIN_ID,
-          "host",
-          scopeId,
-          SETTING_KEY,
-          JSON.stringify(true),
-        );
-        result.hostsMoved++;
-      }
-      if (row.auth_type === "warpgate") {
-        await runStatement(
-          sql`UPDATE ssh_data SET auth_type = 'none' WHERE id = ${row.id}`,
-        );
-        result.authTypesFixed++;
-      }
-    } catch (error) {
-      databaseLogger.warn(
-        "Warpgate host settings migration failed for a host",
-        {
-          operation: "warpgate_settings_migration",
-          hostId: row.id,
-          error: error instanceof Error ? error.message : String(error),
-        },
-      );
-    }
-  }
-
-  if (result.hostsMoved > 0) {
-    databaseLogger.info(
-      `Moved the Warpgate flag for ${result.hostsMoved} host(s) into plugin settings`,
-      { operation: "warpgate_settings_migration" },
-    );
-  }
-  return result;
-}
diff --git a/src/backend/upgrade/web-endpoint-settings-migration.ts b/src/backend/upgrade/web-endpoint-settings-migration.ts
deleted file mode 100644
index f80d1dba7..000000000
--- a/src/backend/upgrade/web-endpoint-settings-migration.ts
+++ /dev/null
@@ -1,98 +0,0 @@
-/**
- * Moves the two web endpoint host columns into the web-endpoint plugin's
- * host-scope settings, before those columns are dropped from ssh_data.
- *
- * Idempotent: skips a host that already has a web-endpoint settings row, so
- * it is safe to run on every boot. Lossless: reads straight off the
- * still-present ssh_data columns, so it must run and finish before those
- * columns are ever dropped from schema.ts.
- */
-
-import { sql } from "drizzle-orm";
-import { databaseLogger } from "../utils/logger.js";
-import { selectLegacyRows } from "../utils/crypto-migration/raw-rows.js";
-import { createCurrentPluginSettingsRepository } from "../database/repositories/factory.js";
-
-export interface WebEndpointSettingsMigrationResult {
-  moved: number;
-  skipped: number;
-}
-
-interface LegacyWebEndpointRow {
-  id: number;
-  enable_web_ui: number | boolean | null;
-  web_ui_config: string | null;
-}
-
-function parseConfig(raw: string | null): unknown {
-  if (!raw) return null;
-  try {
-    return JSON.parse(raw);
-  } catch {
-    return null;
-  }
-}
-
-export async function runWebEndpointSettingsMigration(): Promise<WebEndpointSettingsMigrationResult> {
-  const result: WebEndpointSettingsMigrationResult = { moved: 0, skipped: 0 };
-
-  try {
-    // Raw SQL, not the typed schema, so this keeps working once schema.ts
-    // stops declaring these columns.
-    const rows = await selectLegacyRows<LegacyWebEndpointRow>(sql`
-      SELECT id, enable_web_ui, web_ui_config
-      FROM ssh_data
-      WHERE enable_web_ui = true OR web_ui_config IS NOT NULL
-    `);
-
-    if (rows.length === 0) return result;
-
-    const pluginSettingsRepository = createCurrentPluginSettingsRepository();
-
-    for (const row of rows) {
-      const scopeId = String(row.id);
-      const existing = await pluginSettingsRepository.get(
-        "web-endpoint",
-        "host",
-        scopeId,
-        "enableWebUi",
-      );
-      if (existing && existing.value !== null) {
-        result.skipped++;
-        continue;
-      }
-
-      await pluginSettingsRepository.set(
-        "web-endpoint",
-        "host",
-        scopeId,
-        "enableWebUi",
-        JSON.stringify(!!row.enable_web_ui),
-      );
-      await pluginSettingsRepository.set(
-        "web-endpoint",
-        "host",
-        scopeId,
-        "webUiConfig",
-        JSON.stringify(parseConfig(row.web_ui_config)),
-      );
-      result.moved++;
-    }
-
-    if (result.moved > 0) {
-      databaseLogger.info(
-        `Moved web endpoint settings for ${result.moved} host(s) into plugin settings`,
-        { operation: "web_endpoint_settings_migration", moved: result.moved },
-      );
-    }
-  } catch (error) {
-    // A failed migration must not stop the backend. Hosts simply keep
-    // whatever web endpoint settings they already had (none, on a fresh run).
-    databaseLogger.warn("Web endpoint settings migration failed", {
-      operation: "web_endpoint_settings_migration",
-      error: error instanceof Error ? error.message : String(error),
-    });
-  }
-
-  return result;
-}
diff --git a/src/backend/utils/audit-forwarder.ts b/src/backend/utils/audit-forwarder.ts
index e757193cd..a48da2a4b 100644
--- a/src/backend/utils/audit-forwarder.ts
+++ b/src/backend/utils/audit-forwarder.ts
@@ -22,7 +22,7 @@ function readForwardSetting(key: string): string | null {
 
 /**
  * How many consecutive failures before the forwarder stops complaining on every
- * entry. It keeps trying — this only throttles the log noise, and it reports
+ * entry. It keeps trying, this only throttles the log noise, and it reports
  * again once delivery recovers.
  */
 const QUIET_AFTER_FAILURES = 5;
diff --git a/src/backend/utils/auth-manager.ts b/src/backend/utils/auth-manager.ts
index ef564da60..cfa26475d 100644
--- a/src/backend/utils/auth-manager.ts
+++ b/src/backend/utils/auth-manager.ts
@@ -13,7 +13,8 @@ import { logAudit, getRequestMeta } from "./audit-logger.js";
 import type { Request, Response, NextFunction } from "express";
 import bcrypt from "bcryptjs";
 import { nanoid } from "nanoid";
-import { and, eq, inArray } from "drizzle-orm";
+import { inArray, isNotNull } from "drizzle-orm";
+import type { ExternalSessionRef } from "../auth/types.js";
 import type { DeviceType } from "./user-agent-parser.js";
 import { getDb } from "../database/db/index.js";
 import { sessions } from "../database/db/schema.js";
@@ -41,6 +42,8 @@ interface JWTPayload {
   userId: string;
   sessionId?: string;
   pendingTOTP?: boolean;
+  /** Set on a short-lived socket ticket, which only a socket upgrade takes. */
+  purpose?: "ws";
   dataKeyWrap?: WrappedDataKey;
   iat?: number;
   exp?: number;
@@ -68,6 +71,29 @@ interface RequestWithHeaders extends Request {
   };
 }
 
+function serializeExternalSession(
+  ref: ExternalSessionRef | null | undefined,
+): string | null {
+  if (!ref || (!ref.sub && !ref.sid)) return null;
+  return JSON.stringify({
+    providerId: ref.providerId ?? null,
+    sub: ref.sub ?? null,
+    sid: ref.sid ?? null,
+  });
+}
+
+function parseExternalSession(
+  value: string | null | undefined,
+): ExternalSessionRef | null {
+  if (!value) return null;
+  try {
+    const parsed = JSON.parse(value) as ExternalSessionRef;
+    return parsed && typeof parsed === "object" ? parsed : null;
+  } catch {
+    return null;
+  }
+}
+
 const ADMIN_TARGET_USER_HEADER = "x-admin-target-user";
 
 // Core data-plane routes an admin may hit on behalf of another user.
@@ -283,9 +309,7 @@ class AuthManager {
       rememberMe?: boolean;
       deviceType?: DeviceType;
       deviceInfo?: string;
-      oidcSub?: string | null;
-      oidcSid?: string | null;
-      ssoProviderId?: number | null;
+      externalSession?: ExternalSessionRef | null;
     } = {},
   ): Promise<string> {
     const jwtSecret = await this.systemCrypto.getJWTSecret();
@@ -331,9 +355,7 @@ class AuthManager {
           jwtToken: token,
           deviceType: options.deviceType,
           deviceInfo: options.deviceInfo,
-          oidcSub: options.oidcSub ?? null,
-          oidcSid: options.oidcSid ?? null,
-          ssoProviderId: options.ssoProviderId ?? null,
+          externalSessionRef: serializeExternalSession(options.externalSession),
           createdAt,
           expiresAt,
           lastActiveAt: createdAt,
@@ -373,11 +395,32 @@ class AuthManager {
     }
   }
 
-  async verifyJWTToken(token: string): Promise<JWTPayload | null> {
+  /**
+   * A one minute token for opening a WebSocket. A browser cannot read its
+   * HttpOnly cookie, and a proxy that rewrites Host makes the cookie look
+   * like it came from another site, so the page asks for one of these.
+   */
+  async issueSocketTicket(userId: string, sessionId: string): Promise<string> {
+    const payload: JWTPayload = { userId, sessionId, purpose: "ws" };
+    return jwt.sign(payload, await this.systemCrypto.getJWTSecret(), {
+      expiresIn: 60,
+    } as jwt.SignOptions);
+  }
+
+  async verifyJWTToken(
+    token: string,
+    options: { allowSocketTicket?: boolean } = {},
+  ): Promise<JWTPayload | null> {
     try {
       const jwtSecret = await this.systemCrypto.getJWTSecret();
 
       const payload = jwt.verify(token, jwtSecret) as JWTPayload;
+      if (
+        payload.purpose !== undefined &&
+        !(payload.purpose === "ws" && options.allowSocketTicket)
+      ) {
+        return null;
+      }
 
       if (payload.sessionId) {
         try {
@@ -394,6 +437,10 @@ class AuthManager {
             return null;
           }
 
+          if (new Date(sessionRecord.expiresAt).getTime() < Date.now()) {
+            return null;
+          }
+
           await this.migrateDataKeyFromPayload(payload);
         } catch (dbError) {
           databaseLogger.error(
@@ -406,8 +453,12 @@ class AuthManager {
           );
           return null;
         }
-      } else {
+      } else if (payload.pendingTOTP) {
         await this.migrateDataKeyFromPayload(payload);
+      } else {
+        // Every real login has a session row to revoke; a signed token
+        // without one did not come from this server's login.
+        return null;
       }
       return payload;
     } catch (error) {
@@ -506,35 +557,36 @@ class AuthManager {
   }
 
   async revokeSessionsByExternalSession(params: {
-    ssoProviderId?: number | null;
+    providerId?: number | null;
     sub?: string | null;
     sid?: string | null;
   }): Promise<number> {
-    const { ssoProviderId, sub, sid } = params;
+    const { providerId, sub, sid } = params;
     if (!sub && !sid) return 0;
 
     try {
-      const conditions = [
-        sid ? eq(sessions.oidcSid, sid) : eq(sessions.oidcSub, sub!),
-      ];
-      if (ssoProviderId != null)
-        conditions.push(eq(sessions.ssoProviderId, ssoProviderId));
-
       const db = getDb();
-      const matched = await db
-        .select()
+      const candidates = await db
+        .select({ id: sessions.id, ref: sessions.externalSessionRef })
         .from(sessions)
-        .where(conditions.length === 1 ? conditions[0] : and(...conditions));
+        .where(isNotNull(sessions.externalSessionRef));
 
-      if (matched.length === 0) return 0;
+      const matchedIds = candidates
+        .filter((row) => {
+          const ref = parseExternalSession(row.ref);
+          if (!ref) return false;
+          if (sid ? ref.sid !== sid : ref.sub !== sub) return false;
+          return providerId == null || ref.providerId === providerId;
+        })
+        .map((row) => row.id);
 
-      const matchedIds = matched.map((s) => s.id);
+      if (matchedIds.length === 0) return 0;
 
       await db.delete(sessions).where(inArray(sessions.id, matchedIds));
 
-      authLogger.info("Sessions revoked via OIDC back-channel logout", {
-        operation: "oidc_backchannel_logout",
-        ssoProviderId,
+      authLogger.info("Sessions revoked via back-channel logout", {
+        operation: "external_backchannel_logout",
+        providerId,
         sessionCount: matchedIds.length,
       });
 
@@ -544,9 +596,13 @@ class AuthManager {
 
       return matchedIds.length;
     } catch (error) {
-      databaseLogger.error("Failed to revoke sessions via OIDC", error, {
-        operation: "oidc_backchannel_logout_failed",
-      });
+      databaseLogger.error(
+        "Failed to revoke sessions via back-channel logout",
+        error,
+        {
+          operation: "external_backchannel_logout_failed",
+        },
+      );
       throw error;
     }
   }
diff --git a/src/backend/utils/compression-config.ts b/src/backend/utils/compression-config.ts
index 0a003bc67..6489541d7 100644
--- a/src/backend/utils/compression-config.ts
+++ b/src/backend/utils/compression-config.ts
@@ -6,8 +6,8 @@ import { type Request, type RequestHandler, type Response } from "express";
  *
  * The default is 1KB; this is slightly higher because almost every response
  * under a few KB here is a small status or preference object where the CPU and
- * the extra headers are not worth it. The payloads that matter — host lists,
- * audit pages, fleet inventories — are orders of magnitude above this.
+ * the extra headers are not worth it. The payloads that matter, host lists,
+ * audit pages, fleet inventories, are orders of magnitude above this.
  */
 const MIN_RESPONSE_BYTES = 2048;
 
diff --git a/src/backend/utils/cors-config.ts b/src/backend/utils/cors-config.ts
index a5c7a1d78..b273e35bd 100644
--- a/src/backend/utils/cors-config.ts
+++ b/src/backend/utils/cors-config.ts
@@ -14,15 +14,28 @@ function getAllowedOrigins(): string[] {
     .filter(Boolean);
 }
 
+/**
+ * Origins allowed to drive the embedded desktop backend: the desktop app
+ * itself and the dev server. Any website open in a browser on the same
+ * machine can reach loopback too, so nothing else gets in.
+ */
+export function isDesktopAppOrigin(origin: string | undefined): boolean {
+  if (!origin) return true;
+  return (
+    DEV_ORIGINS.includes(origin) || origin.startsWith(ELECTRON_FILE_ORIGIN)
+  );
+}
+
 export function isCorsOriginAllowed(
   req: Request,
   origin: string | undefined,
 ): boolean {
-  if (!origin) return true;
-  if (DEV_ORIGINS.includes(origin)) return true;
-  if (origin.startsWith(ELECTRON_FILE_ORIGIN)) return true;
+  if (isDesktopAppOrigin(origin)) return true;
 
   const configured = getAllowedOrigins();
+  if (process.env.ELECTRON_EMBEDDED === "true") {
+    return configured.includes(origin) || origin === getRequestOrigin(req);
+  }
   if (configured.length === 0) return true;
   if (configured.includes(origin)) return true;
 
@@ -42,6 +55,7 @@ export function createCorsMiddleware(
     "User-Agent",
     "X-Electron-App",
     "X-Termix-Device-ID",
+    "X-Termix-Trust-Token",
     "Cache-Control",
     "x-admin-target-user",
     ...extraHeaders,
diff --git a/src/backend/utils/crypto-migration/host-status-config-migration.ts b/src/backend/utils/crypto-migration/host-status-config-migration.ts
deleted file mode 100644
index 1d900bc50..000000000
--- a/src/backend/utils/crypto-migration/host-status-config-migration.ts
+++ /dev/null
@@ -1,110 +0,0 @@
-/**
- * Copies the status check options out of ssh_data.stats_config into the
- * status_check_enabled and status_check_interval columns. Status checks are
- * core; the rest of stats_config belongs to the host-metrics plugin and is
- * moved by host-metrics-settings-migration.ts.
- *
- * The stats_config column stays in the database, unused: core's drizzle
- * migrations run before this does, so dropping it there would lose the data.
- *
- * Runs once, marked by a settings row, because the new columns have defaults
- * and there is no other way to tell a copied row from an untouched one.
- */
-
-import { sql } from "drizzle-orm";
-import { databaseLogger } from "../logger.js";
-import { createCurrentSettingsRepository } from "../../database/repositories/factory.js";
-import { runStatement, selectRows } from "./raw-rows.js";
-
-export const HOST_STATUS_CONFIG_MIGRATED = "host_status_config_migrated";
-
-export interface LegacyStatusConfig {
-  statusCheckEnabled: boolean;
-  statusCheckInterval: number | null;
-}
-
-/** The status part of an old stats_config value. */
-export function statusConfigFromStatsConfig(
-  raw: string | null,
-): LegacyStatusConfig {
-  let parsed: unknown = null;
-  try {
-    parsed = raw ? JSON.parse(raw) : null;
-    // Some rows were stringified twice.
-    if (typeof parsed === "string") parsed = JSON.parse(parsed);
-  } catch {
-    parsed = null;
-  }
-  const config =
-    parsed && typeof parsed === "object"
-      ? (parsed as Record<string, unknown>)
-      : {};
-  const seconds = Number(config.statusCheckInterval);
-  return {
-    statusCheckEnabled:
-      config.statusCheckEnabled !== false && config.disableTcpPing !== true,
-    statusCheckInterval:
-      config.useGlobalStatusInterval === false &&
-      Number.isInteger(seconds) &&
-      seconds >= 5
-        ? seconds
-        : null,
-  };
-}
-
-export interface HostStatusConfigMigrationResult {
-  skipped: boolean;
-  hostsMoved: number;
-}
-
-export async function runHostStatusConfigMigration(): Promise<HostStatusConfigMigrationResult> {
-  const settings = createCurrentSettingsRepository();
-  try {
-    if ((await settings.get(HOST_STATUS_CONFIG_MIGRATED)) === "true") {
-      return { skipped: true, hostsMoved: 0 };
-    }
-  } catch {
-    return { skipped: true, hostsMoved: 0 };
-  }
-
-  let hostsMoved = 0;
-  try {
-    // Raw SQL: schema.ts no longer declares stats_config.
-    const rows = await selectRows<{ id: number; stats_config: string | null }>(
-      sql`SELECT id, stats_config FROM ssh_data WHERE stats_config IS NOT NULL`,
-    );
-    for (const row of rows) {
-      const config = statusConfigFromStatsConfig(row.stats_config);
-      if (config.statusCheckEnabled && config.statusCheckInterval === null) {
-        continue;
-      }
-      // TRUE and FALSE as literals: SQLite cannot bind a JS boolean.
-      await runStatement(sql`
-        UPDATE ssh_data
-        SET status_check_enabled = ${sql.raw(config.statusCheckEnabled ? "TRUE" : "FALSE")},
-          status_check_interval = ${config.statusCheckInterval}
-        WHERE id = ${row.id}
-      `);
-      hostsMoved++;
-    }
-  } catch {
-    // A fresh install never had the column.
-  }
-
-  try {
-    await settings.set(HOST_STATUS_CONFIG_MIGRATED, "true");
-  } catch (error) {
-    databaseLogger.warn("Could not mark the host status migration done", {
-      operation: "host_status_config_migration",
-      error: error instanceof Error ? error.message : String(error),
-    });
-  }
-
-  if (hostsMoved > 0) {
-    databaseLogger.info(
-      `Moved status check options for ${hostsMoved} host(s) out of stats_config`,
-      { operation: "host_status_config_migration" },
-    );
-  }
-  return { skipped: false, hostsMoved };
-}
diff --git a/src/backend/utils/crypto-migration/legacy-share-cleanup.ts b/src/backend/utils/crypto-migration/legacy-share-cleanup.ts
index 4fa020ba6..89f1c0624 100644
--- a/src/backend/utils/crypto-migration/legacy-share-cleanup.ts
+++ b/src/backend/utils/crypto-migration/legacy-share-cleanup.ts
@@ -47,7 +47,7 @@ export async function runLegacySharedCredentialCleanup(): Promise<{
 
   // Nothing to clean up on an engine this application has never run on. A
   // Postgres or MySQL database is created by the drizzle migrations, which have
-  // never emitted these legacy columns, so there is nothing to drop — and the
+  // never emitted these legacy columns, so there is nothing to drop, and the
   // check itself needs a synchronous PRAGMA that only SQLite offers.
   if (!needsExplicitPersist(resolveDatabaseDialect())) return result;
 
diff --git a/src/backend/utils/crypto-migration/ssh-options-migration.ts b/src/backend/utils/crypto-migration/ssh-options-migration.ts
deleted file mode 100644
index 63efc9124..000000000
--- a/src/backend/utils/crypto-migration/ssh-options-migration.ts
+++ /dev/null
@@ -1,57 +0,0 @@
-/**
- * Copies each host's SSH connection options out of ssh_data.terminal_config
- * into ssh_data.ssh_options: keepalive, legacy algorithms, the agent socket
- * and identity, agent forwarding and environment variables. The terminal's
- * look and behavior in the same JSON belong to the ssh-terminal plugin and
- * are moved by upgrade/ssh-terminal-host-settings-migration.ts.
- *
- * terminal_config keeps its values; nothing reads these keys from it any
- * more. Old Cloudflare Access keys are left behind on purpose.
- *
- * Idempotent: only rows whose ssh_options is still null are read, and every
- * row it reads gets a value, even an empty object.
- */
-
-import { sql } from "drizzle-orm";
-import { databaseLogger } from "../logger.js";
-import { runStatement, selectRows } from "./raw-rows.js";
-import { parseSshOptions } from "../../hosts/ssh-options.js";
-
-export interface SshOptionsMigrationResult {
-  hostsMoved: number;
-}
-
-export async function runSshOptionsMigration(): Promise<SshOptionsMigrationResult> {
-  let hostsMoved = 0;
-  try {
-    const rows = await selectRows<{
-      id: number;
-      terminal_config: string | null;
-    }>(sql`
-      SELECT id, terminal_config FROM ssh_data
-      WHERE ssh_options IS NULL AND terminal_config IS NOT NULL
-    `);
-    for (const row of rows) {
-      const options = parseSshOptions(row.terminal_config);
-      await runStatement(sql`
-        UPDATE ssh_data SET ssh_options = ${JSON.stringify(options)}
-        WHERE id = ${row.id} AND ssh_options IS NULL
-      `);
-      if (Object.keys(options).length > 0) hostsMoved++;
-    }
-  } catch (error) {
-    databaseLogger.warn("SSH options migration failed", {
-      operation: "ssh_options_migration",
-      error: error instanceof Error ? error.message : String(error),
-    });
-    return { hostsMoved };
-  }
-
-  if (hostsMoved > 0) {
-    databaseLogger.info(
-      `Moved SSH options for ${hostsMoved} host(s) out of terminal_config`,
-      { operation: "ssh_options_migration" },
-    );
-  }
-  return { hostsMoved };
-}
diff --git a/src/backend/utils/data-crypto.ts b/src/backend/utils/data-crypto.ts
index 8115c50f4..bec129bd4 100644
--- a/src/backend/utils/data-crypto.ts
+++ b/src/backend/utils/data-crypto.ts
@@ -201,7 +201,7 @@ class DataCrypto {
     migratedFieldsCount: number;
   }> {
     // Only a database that predates field encryption has plaintext to migrate,
-    // and only SQLite deployments can predate it — Postgres and MySQL support
+    // and only SQLite deployments can predate it, Postgres and MySQL support
     // arrived after. The store also needs synchronous queries no other driver
     // has, so this would throw rather than find nothing to do.
     if (!needsExplicitPersist(resolveDatabaseDialect())) {
diff --git a/src/backend/utils/data-dir-guard.ts b/src/backend/utils/data-dir-guard.ts
index 867cbaaa0..670664cf1 100644
--- a/src/backend/utils/data-dir-guard.ts
+++ b/src/backend/utils/data-dir-guard.ts
@@ -14,7 +14,7 @@ export class DataDirMisconfiguredError extends Error {
 
 /**
  * Directories Termix has shipped or documented as a data location. A deployment
- * that loses DATA_DIR — an unloaded .env file, an unmounted volume — falls back
+ * that loses DATA_DIR, an unloaded .env file, an unmounted volume, falls back
  * to the default and finds an empty directory, which is indistinguishable from a
  * first run. Checking these tells the two apart.
  */
diff --git a/src/backend/utils/error-message.ts b/src/backend/utils/error-message.ts
index ad7d83bfa..8230cf89b 100644
--- a/src/backend/utils/error-message.ts
+++ b/src/backend/utils/error-message.ts
@@ -1,7 +1,7 @@
 /**
  * Extract a stable, human-readable message from an unknown thrown value.
  *
- * A thrown value is not guaranteed to be an `Error` — libraries may throw
+ * A thrown value is not guaranteed to be an `Error`, libraries may throw
  * strings or plain objects, which carry no useful `.message`. When that
  * happens the caller gets `fallback` instead, so error paths never surface a
  * raw `[object Object]` in logs or responses.
diff --git a/src/backend/utils/export-settings.ts b/src/backend/utils/export-settings.ts
new file mode 100644
index 000000000..154a0ac65
--- /dev/null
+++ b/src/backend/utils/export-settings.ts
@@ -0,0 +1,26 @@
+export type SettingData = {
+  key: string;
+  value: string;
+};
+
+const SECRET_SETTING_PREFIXES = [
+  "reset_code_",
+  "temp_reset_token_",
+  "audit_log_forward_token",
+];
+
+/**
+ * Global settings are instance config, not user data: only an admin's export
+ * carries them (import only applies them for admins anyway), and never the
+ * one-time reset codes or the audit forwarding token.
+ */
+export function selectExportableSettings(
+  rows: SettingData[],
+  isAdmin: boolean,
+): SettingData[] {
+  if (!isAdmin) return [];
+  return rows.filter(
+    (row) =>
+      !SECRET_SETTING_PREFIXES.some((prefix) => row.key.startsWith(prefix)),
+  );
+}
diff --git a/src/backend/utils/field-crypto.ts b/src/backend/utils/field-crypto.ts
index 5f9a924cc..2deffd9bd 100644
--- a/src/backend/utils/field-crypto.ts
+++ b/src/backend/utils/field-crypto.ts
@@ -15,7 +15,7 @@ class FieldCrypto {
   private static readonly SALT_LENGTH = 32;
 
   private static readonly ENCRYPTED_FIELDS = {
-    users: new Set(["passwordHash", "clientSecret", "oidcIdentifier"]),
+    users: new Set(["passwordHash"]),
     ssh_data: new Set([
       "password",
       "key",
diff --git a/src/backend/utils/latest-release.ts b/src/backend/utils/latest-release.ts
index d5107c68f..b8e264534 100644
--- a/src/backend/utils/latest-release.ts
+++ b/src/backend/utils/latest-release.ts
@@ -1,3 +1,4 @@
+import semver from "semver";
 import { databaseLogger } from "./logger.js";
 import { getProxyAgent } from "./proxy-agent.js";
 import type {
@@ -36,29 +37,32 @@ class GitHubCache {
 
 const githubCache = new GitHubCache();
 
-function parseSemver(
-  version: string | undefined,
-): [number, number, number] | null {
-  const match = String(version || "").match(/(\d+)\.(\d+)(?:\.(\d+))?/);
+/**
+ * A release tag or version as full semver, keeping any prerelease part:
+ * "v2.8" is 2.8.0 and "v26.11.0-beta.2" stays a prerelease.
+ */
+export function normalizeVersion(version: string | undefined): string | null {
+  const match = String(version || "").match(
+    /(\d+)\.(\d+)(?:\.(\d+))?(-[0-9A-Za-z.-]+)?/,
+  );
   if (!match) return null;
+  const normalized = `${match[1]}.${match[2]}.${match[3] || 0}${match[4] || ""}`;
+  return semver.valid(normalized);
+}
 
-  return [Number(match[1]), Number(match[2]), Number(match[3] || 0)];
+export function isPrereleaseVersion(version: string | undefined): boolean {
+  const normalized = normalizeVersion(version);
+  return Boolean(normalized && semver.prerelease(normalized));
 }
 
 export function compareSemver(
   a: string | undefined,
   b: string | undefined,
 ): number | null {
-  const parsedA = parseSemver(a);
-  const parsedB = parseSemver(b);
+  const parsedA = normalizeVersion(a);
+  const parsedB = normalizeVersion(b);
   if (!parsedA || !parsedB) return null;
-
-  for (let i = 0; i < 3; i += 1) {
-    if (parsedA[i] > parsedB[i]) return 1;
-    if (parsedA[i] < parsedB[i]) return -1;
-  }
-
-  return 0;
+  return semver.compare(parsedA, parsedB);
 }
 
 const GITHUB_API_BASE = "https://api.github.com";
@@ -116,28 +120,72 @@ export async function fetchGitHubAPI<T>(
   }
 }
 
+export type UpdateChannel = "stable" | "beta";
+
 export interface LatestRelease {
   version: string;
   tagName: string;
   name: string;
   url: string;
   publishedAt: string;
+  prerelease: boolean;
+  notes: string;
 }
 
-/** The newest Termix release on GitHub, cached for 30 minutes. */
-export async function fetchLatestRelease(): Promise<LatestRelease | null> {
-  const release = await fetchGitHubAPI<GitHubRelease>(
-    `/repos/${REPO_OWNER}/${REPO_NAME}/releases/latest`,
-    "latest_release",
-  );
-  const rawTag = release.data.tag_name || release.data.name || "";
-  const version = rawTag.match(/(\d+\.\d+(\.\d+)?)/)?.[1];
+function toLatestRelease(release: GitHubRelease): LatestRelease | null {
+  const version = normalizeVersion(release.tag_name || release.name || "");
   if (!version) return null;
   return {
     version,
-    tagName: release.data.tag_name,
-    name: release.data.name,
-    url: release.data.html_url,
-    publishedAt: release.data.published_at,
+    tagName: release.tag_name,
+    name: release.name,
+    url: release.html_url,
+    publishedAt: release.published_at,
+    prerelease: Boolean(release.prerelease) || !!semver.prerelease(version),
+    notes: (release.body || "").slice(0, 20_000),
   };
 }
+
+/**
+ * The newest Termix release on GitHub, cached for 30 minutes. On the beta
+ * channel a newer beta wins over the newest stable release.
+ */
+export async function fetchLatestRelease(
+  channel: UpdateChannel = "stable",
+): Promise<LatestRelease | null> {
+  if (channel === "stable") {
+    const release = await fetchGitHubAPI<GitHubRelease>(
+      `/repos/${REPO_OWNER}/${REPO_NAME}/releases/latest`,
+      "latest_release",
+    );
+    return toLatestRelease(release.data);
+  }
+  const releases = await fetchGitHubAPI<GitHubRelease[]>(
+    `/repos/${REPO_OWNER}/${REPO_NAME}/releases?per_page=30`,
+    "latest_releases",
+  );
+  let newest: LatestRelease | null = null;
+  for (const release of releases.data) {
+    if (release.draft) continue;
+    const parsed = toLatestRelease(release);
+    if (parsed && (!newest || semver.gt(parsed.version, newest.version))) {
+      newest = parsed;
+    }
+  }
+  return newest;
+}
+
+export type UpdateStatus = "up_to_date" | "beta" | "requires_update";
+
+/** How the running version compares with the newest release on its channel. */
+export function updateStatus(
+  localVersion: string,
+  latestVersion: string | null | undefined,
+): UpdateStatus {
+  const comparison = latestVersion
+    ? compareSemver(localVersion, latestVersion)
+    : null;
+  if (comparison !== null && comparison < 0) return "requires_update";
+  if (isPrereleaseVersion(localVersion) || (comparison ?? 0) > 0) return "beta";
+  return "up_to_date";
+}
diff --git a/src/backend/utils/lazy-field-encryption.ts b/src/backend/utils/lazy-field-encryption.ts
index dfeec04b4..09f15ea60 100644
--- a/src/backend/utils/lazy-field-encryption.ts
+++ b/src/backend/utils/lazy-field-encryption.ts
@@ -11,10 +11,8 @@ export class LazyFieldEncryption {
     private_key: "privateKey",
     public_key: "publicKey",
     password_hash: "passwordHash",
-    client_secret: "clientSecret",
     totp_secret: "totpSecret",
     totp_backup_codes: "totpBackupCodes",
-    oidc_identifier: "oidcIdentifier",
 
     keyPassword: "key_password",
     sudoPassword: "sudo_password",
@@ -22,10 +20,8 @@ export class LazyFieldEncryption {
     privateKey: "private_key",
     publicKey: "public_key",
     passwordHash: "password_hash",
-    clientSecret: "client_secret",
     totpSecret: "totp_secret",
     totpBackupCodes: "totp_backup_codes",
-    oidcIdentifier: "oidc_identifier",
   };
 
   static isPlaintextField(value: string): boolean {
@@ -95,8 +91,6 @@ export class LazyFieldEncryption {
           "socks5Password",
           "privateKey",
           "publicKey",
-          "clientSecret",
-          "oidcIdentifier",
         ];
 
         if (sensitiveFields.includes(fieldName)) {
@@ -241,8 +235,6 @@ export class LazyFieldEncryption {
     publicKey: "public_key",
     sudoPassword: "sudo_password",
     socks5Password: "socks5_password",
-    clientSecret: "client_secret",
-    oidcIdentifier: "oidc_identifier",
   };
 
   static getSensitiveFieldsForTable(tableName: string): string[] {
diff --git a/src/backend/utils/openapi-tags.json b/src/backend/utils/openapi-tags.json
new file mode 100644
index 000000000..eee05e451
--- /dev/null
+++ b/src/backend/utils/openapi-tags.json
@@ -0,0 +1,32 @@
+[
+  { "name": "Auth", "description": "Sign in, sign out and login methods" },
+  { "name": "Users", "description": "Accounts, profiles and sessions" },
+  { "name": "API Keys", "description": "API keys for scripts and the CLI" },
+  { "name": "Encryption", "description": "Data key setup and unlock" },
+  { "name": "SSH", "description": "Hosts, folders and connections" },
+  {
+    "name": "SSH Auth",
+    "description": "SSH auth types the server can connect with"
+  },
+  {
+    "name": "Host Defaults",
+    "description": "Admin, user and folder host defaults"
+  },
+  { "name": "Host Enrollment", "description": "Adding hosts from a script" },
+  { "name": "Credentials", "description": "Saved credentials" },
+  { "name": "RBAC", "description": "Roles and sharing" },
+  { "name": "Dashboard", "description": "Dashboard stats and recent activity" },
+  { "name": "Audit", "description": "Audit log search and export" },
+  { "name": "Plugins", "description": "Installing and managing plugins" },
+  { "name": "Sync", "description": "Desktop sync with a linked server" },
+  { "name": "Database", "description": "Database export, import and health" },
+  { "name": "General", "description": "Server info and settings" },
+  { "name": "Open Tabs", "description": "Saved open tabs" },
+  { "name": "User Preferences", "description": "Per-user preferences" },
+  { "name": "UI Preferences", "description": "Interface layout preferences" },
+  { "name": "Host Sidebar", "description": "Host sidebar display options" },
+  {
+    "name": "Credential Sidebar",
+    "description": "Credential sidebar display options"
+  }
+]
diff --git a/src/backend/utils/permission-manager.ts b/src/backend/utils/permission-manager.ts
index 2d42cbcbc..799237194 100644
--- a/src/backend/utils/permission-manager.ts
+++ b/src/backend/utils/permission-manager.ts
@@ -295,7 +295,7 @@ class PermissionManager {
    * queries instead of one call per host.
    *
    * canAccessHost costs between one and four queries, so filtering a list with
-   * it is linear in host count — and the status poll does exactly that every
+   * it is linear in host count, and the status poll does exactly that every
    * few seconds for the whole fleet. This answers the same question for many
    * hosts at once using the same three rules, in the same order: owner, then
    * an unexpired grant, then admin bypass.
diff --git a/src/backend/utils/request-origin.ts b/src/backend/utils/request-origin.ts
index 607018671..988ba080f 100644
--- a/src/backend/utils/request-origin.ts
+++ b/src/backend/utils/request-origin.ts
@@ -112,7 +112,10 @@ export function getRequestOrigin(req: Request | IncomingMessage): string {
 function getRequestOriginWithForceHTTPS(
   req: Request | IncomingMessage,
 ): string {
-  if (process.env.OIDC_FORCE_HTTPS === "true") {
+  // OIDC_FORCE_HTTPS is the 2.9 name, still read for one release.
+  const forceHttps =
+    process.env.EXTERNAL_FORCE_HTTPS ?? process.env.OIDC_FORCE_HTTPS;
+  if (forceHttps === "true") {
     const origin = getRequestOrigin(req);
     return origin.replace(/^http:/, "https:");
   }
diff --git a/src/backend/utils/safe-outbound-fetch.ts b/src/backend/utils/safe-outbound-fetch.ts
index f328c35a7..1d657b2b4 100644
--- a/src/backend/utils/safe-outbound-fetch.ts
+++ b/src/backend/utils/safe-outbound-fetch.ts
@@ -40,6 +40,7 @@ const blockedIpv4Ranges = [
   ["127.0.0.0", 8],
   ["169.254.0.0", 16], // link-local
   ["172.16.0.0", 12],
+  ["192.0.0.0", 24], // IETF protocol assignments
   ["192.168.0.0", 16],
   ["198.18.0.0", 15], // benchmarking
   ["224.0.0.0", 4], // multicast
@@ -70,7 +71,7 @@ export function isBlockedAddress(address: string): boolean {
 }
 
 // Extracted so the blocklist decision can be tested directly against a
-// fake DNS resolver, instead of only through a real fetch()/Agent call —
+// fake DNS resolver, instead of only through a real fetch()/Agent call,
 // the actual bug here lived entirely in this callback, several layers
 // below where undici's own "fetch failed" wrapping would otherwise hide it.
 export function createDnsLookupHook(
diff --git a/src/backend/utils/ssh-algorithms.ts b/src/backend/utils/ssh-algorithms.ts
index 68b812ffd..2e5d6a8f2 100644
--- a/src/backend/utils/ssh-algorithms.ts
+++ b/src/backend/utils/ssh-algorithms.ts
@@ -34,7 +34,7 @@ try {
   // The pure-JS fallback in ssh2 for chacha20-poly1305@openssh.com is broken and
   // corrupts the transport: the target sshd aborts the KEX with
   // "ssh_dispatch_run_fatal: ... incomplete message [preauth]" and the client times out.
-  // A working OpenSSL "chacha20" cipher is NOT sufficient here — only the native
+  // A working OpenSSL "chacha20" cipher is NOT sufficient here, only the native
   // binding (sshcrypto.node) makes chacha20-poly1305 usable. Keep it disabled otherwise
   // so filterCiphers() drops it and the connection negotiates AES-GCM instead.
   ssh2BindingAvailable = false;
diff --git a/src/backend/utils/ssh-key-utils.ts b/src/backend/utils/ssh-key-utils.ts
index f0463feea..3ee4bb0b2 100644
--- a/src/backend/utils/ssh-key-utils.ts
+++ b/src/backend/utils/ssh-key-utils.ts
@@ -1,6 +1,9 @@
+import { createPrivateKey } from "node:crypto";
+import sshpk from "sshpk";
 import { getErrorMessage } from "./error-message.js";
 import ssh2Pkg from "ssh2";
 const ssh2Utils = ssh2Pkg.utils;
+const { parsePrivateKey } = sshpk;
 
 function detectKeyTypeFromContent(keyContent: string): string {
   const content = keyContent.trim();
@@ -246,7 +249,26 @@ export function preparePrivateKeyForSSH2(
   privateKeyData: string,
   passphrase?: string,
 ): Buffer {
-  const cleanKey = normalizePrivateKeyText(privateKeyData);
+  let cleanKey = normalizePrivateKeyText(privateKeyData);
+  if (
+    /^-----BEGIN (?:ENCRYPTED )?PRIVATE KEY-----/.test(cleanKey) &&
+    ssh2Utils.parseKey(cleanKey, passphrase) instanceof Error
+  ) {
+    try {
+      const pem = createPrivateKey({ key: cleanKey, format: "pem", passphrase })
+        .export({ type: "pkcs8", format: "pem" })
+        .toString();
+      cleanKey = parsePrivateKey(pem, "pkcs8").toString("openssh");
+    } catch {
+      throw new Error(
+        cleanKey.startsWith("-----BEGIN ENCRYPTED PRIVATE KEY-----")
+          ? "Could not decrypt PKCS#8 private key; check the passphrase"
+          : "Invalid or unsupported PKCS#8 private key",
+      );
+    }
+    const parsed = ssh2Utils.parseKey(cleanKey);
+    if (parsed instanceof Error) throw parsed;
+  }
   const keyInfo = parseSSHKey(cleanKey, passphrase);
 
   if (!keyInfo.success) {
diff --git a/src/backend/utils/swagger.ts b/src/backend/utils/swagger.ts
deleted file mode 100644
index 5bda6b011..000000000
--- a/src/backend/utils/swagger.ts
+++ /dev/null
@@ -1,219 +0,0 @@
-import swaggerJSDoc from "@deadendjs/swagger-jsdoc";
-import path from "path";
-import { fileURLToPath } from "url";
-import { promises as fs } from "fs";
-import { systemLogger } from "./logger.js";
-
-type SwaggerJSDocOptions = Parameters<typeof swaggerJSDoc>[0];
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-// dist/backend/backend/utils -> the repository.
-const REPO_ROOT = path.join(__dirname, "..", "..", "..", "..");
-
-/**
- * A tag per plugin, named and described by its manifest, so the reference
- * groups a plugin's routes without core naming any plugin.
- */
-async function pluginTags(): Promise<{ name: string; description: string }[]> {
-  const pluginsDir = path.join(REPO_ROOT, "plugins");
-  const tags: { name: string; description: string }[] = [];
-  let entries: string[] = [];
-  try {
-    entries = await fs.readdir(pluginsDir);
-  } catch {
-    return tags;
-  }
-  for (const entry of entries.sort()) {
-    try {
-      const manifest = JSON.parse(
-        await fs.readFile(
-          path.join(pluginsDir, entry, "manifest.json"),
-          "utf8",
-        ),
-      ) as { name?: string; description?: string };
-      if (manifest.name) {
-        tags.push({
-          name: manifest.name,
-          description: manifest.description ?? "",
-        });
-      }
-    } catch {
-      // Not a plugin folder.
-    }
-  }
-  return tags;
-}
-
-const swaggerOptions: SwaggerJSDocOptions = {
-  definition: {
-    openapi: "3.0.3",
-    info: {
-      title: "Termix API",
-      version: "0.0.0",
-      description: "Termix Backend API Reference",
-    },
-    servers: [
-      {
-        url: "http://localhost:30001",
-        description: "Main database and authentication server",
-      },
-    ],
-    components: {
-      securitySchemes: {
-        bearerAuth: {
-          type: "http",
-          scheme: "bearer",
-          bearerFormat: "JWT",
-          description: "Session JWT sent as Authorization: Bearer <JWT>.",
-        },
-        cookieAuth: {
-          type: "apiKey",
-          in: "cookie",
-          name: "jwt",
-          description:
-            "Session JWT cookie set at sign-in. When present, it takes precedence over the Authorization header.",
-        },
-        apiKeyAuth: {
-          type: "http",
-          scheme: "bearer",
-          bearerFormat: "tmx_<api key>",
-          description:
-            "API key sent as Authorization: Bearer tmx_<api key>. Permissions follow the key owner's account; encrypted data must be unlocked separately. API keys cannot impersonate another user.",
-        },
-      },
-      schemas: {
-        Error: {
-          type: "object",
-          properties: {
-            error: { type: "string" },
-            details: { type: "string" },
-          },
-        },
-      },
-    },
-    security: [
-      {
-        bearerAuth: [],
-      },
-      {
-        cookieAuth: [],
-      },
-      {
-        apiKeyAuth: [],
-      },
-    ],
-    tags: [
-      {
-        name: "Credentials",
-        description: "SSH credential management",
-      },
-      {
-        name: "RBAC",
-        description: "Role-based access control for host sharing",
-      },
-      {
-        name: "Users",
-        description: "User management and authentication",
-      },
-      {
-        name: "Dashboard",
-        description: "Dashboard statistics and activity",
-      },
-      {
-        name: "SSH",
-        description: "SSH host management and configuration",
-      },
-      {
-        name: "Host Enrollment",
-        description: "Host enrollment and onboarding",
-      },
-      {
-        name: "Open Tabs",
-        description: "Per-user open tab state",
-      },
-      {
-        name: "Audit",
-        description: "Audit log querying and export",
-      },
-      {
-        name: "API Keys",
-        description: "API key management",
-      },
-      {
-        name: "Sync",
-        description: "Remote sync between desktop and server",
-      },
-      {
-        name: "User Preferences",
-        description: "Per-user application preferences",
-      },
-      {
-        name: "UI Preferences",
-        description: "Interface layout and display preferences",
-      },
-      {
-        name: "Host Sidebar",
-        description: "Host sidebar display preferences",
-      },
-      {
-        name: "Credential Sidebar",
-        description: "Credential sidebar display preferences",
-      },
-    ],
-  },
-  apis: [
-    path.join(__dirname, "..", "database", "database.js").replace(/\\/g, "/"),
-    path
-      .join(__dirname, "..", "database", "routes", "*.js")
-      .replace(/\\/g, "/"),
-    path.join(__dirname, "..", "services", "*.js").replace(/\\/g, "/"),
-    path.join(__dirname, "..", "hosts", "*.js").replace(/\\/g, "/"),
-    path.join(__dirname, "..", "hosts", "**", "*.js").replace(/\\/g, "/"),
-    // Plugin routes document themselves. Read from source, because a plugin's
-    // bundle drops comments.
-    path
-      .join(REPO_ROOT, "plugins", "*", "src", "backend", "**", "*.ts")
-      .replace(/\\/g, "/"),
-  ],
-};
-
-async function generateOpenAPISpec() {
-  try {
-    systemLogger.info("Generating OpenAPI specification", {
-      operation: "openapi_generate_start",
-    });
-
-    const definition = swaggerOptions.definition as { tags?: unknown[] };
-    definition.tags = [...(definition.tags ?? []), ...(await pluginTags())];
-    const swaggerSpec = await swaggerJSDoc(swaggerOptions);
-
-    const outputPath = path.join(
-      __dirname,
-      "..",
-      "..",
-      "..",
-      "..",
-      "openapi.json",
-    );
-
-    await fs.writeFile(
-      outputPath,
-      JSON.stringify(swaggerSpec, null, 2),
-      "utf-8",
-    );
-
-    systemLogger.success("OpenAPI specification generated", {
-      operation: "openapi_generate_success",
-    });
-  } catch (error) {
-    systemLogger.error("Failed to generate OpenAPI specification", error, {
-      operation: "openapi_generation",
-    });
-    process.exit(1);
-  }
-}
-
-generateOpenAPISpec();
-
-export { swaggerOptions, generateOpenAPISpec };
diff --git a/src/backend/utils/system-crypto.ts b/src/backend/utils/system-crypto.ts
index 1f3a7f7fb..c17c6a074 100644
--- a/src/backend/utils/system-crypto.ts
+++ b/src/backend/utils/system-crypto.ts
@@ -3,6 +3,16 @@ import { promises as fs } from "fs";
 import path from "path";
 import { databaseLogger } from "./logger.js";
 
+/** Owner-only access for the secrets file. Not meaningful on Windows. */
+export async function restrictToOwner(filePath: string): Promise<void> {
+  if (process.platform === "win32") return;
+  try {
+    await fs.chmod(filePath, 0o600);
+  } catch {
+    // best effort, new files are already written with 0600
+  }
+}
+
 class SystemCrypto {
   private static instance: SystemCrypto;
   private jwtSecret: string | null = null;
@@ -58,9 +68,9 @@ class SystemCrypto {
 
       const dataDir = process.env.DATA_DIR || "./db/data";
       const envPath = path.join(dataDir, ".env");
-
       try {
         const envContent = await fs.readFile(envPath, "utf8");
+        await restrictToOwner(envPath);
         const jwtMatch = envContent.match(/^JWT_SECRET=(.+)$/m);
         if (jwtMatch && jwtMatch[1] && jwtMatch[1].length >= 64) {
           this.jwtSecret = jwtMatch[1];
@@ -349,7 +359,7 @@ class SystemCrypto {
     const envPath = path.join(dataDir, ".env");
 
     try {
-      await fs.mkdir(dataDir, { recursive: true });
+      await fs.mkdir(dataDir, { recursive: true, mode: 0o700 });
 
       let envContent = "";
 
@@ -370,7 +380,8 @@ class SystemCrypto {
         envContent += `${key}=${value}\n`;
       }
 
-      await fs.writeFile(envPath, envContent);
+      await fs.writeFile(envPath, envContent, { mode: 0o600 });
+      await restrictToOwner(envPath);
 
       process.env[key] = value;
     } catch (error) {
diff --git a/src/backend/utils/system-secret-crypto.ts b/src/backend/utils/system-secret-crypto.ts
index 2eef21a12..5358527f7 100644
--- a/src/backend/utils/system-secret-crypto.ts
+++ b/src/backend/utils/system-secret-crypto.ts
@@ -7,7 +7,7 @@ import { SystemCrypto } from "./system-crypto.js";
  * Per-user field encryption (DataCrypto/FieldCrypto) derives its key from the
  * user's DEK, which works for host passwords and SSH keys. It does not work for
  * SSO provider configuration: `sso_providers` has no `userId`, and the OIDC
- * client secret and LDAP bind password must be readable during login — before
+ * client secret and LDAP bind password must be readable during login, before
  * any user is authenticated, let alone unlocked.
  *
  * Those secrets were previously stored base64-encoded behind an `encoded:`
diff --git a/src/backend/utils/user-agent-parser.ts b/src/backend/utils/user-agent-parser.ts
index cbd9db138..3477fe83b 100644
--- a/src/backend/utils/user-agent-parser.ts
+++ b/src/backend/utils/user-agent-parser.ts
@@ -1,5 +1,4 @@
 import type { Request } from "express";
-import crypto from "crypto";
 
 export type DeviceType = "web" | "desktop" | "mobile";
 
@@ -249,22 +248,3 @@ function parseMacVersion(userAgent: string): string {
   }
   return "macOS";
 }
-
-/** Return the installation-scoped identifier used for trusted-device checks. */
-export function getDeviceId(req: Request): string | null {
-  const value = req.headers["x-termix-device-id"];
-  if (typeof value !== "string" || !/^[a-f0-9]{64}$/.test(value)) return null;
-  return value;
-}
-
-/** Bind a trusted-device record to one client installation and platform. */
-export function generateDeviceFingerprint(
-  deviceInfo: DeviceInfo,
-  deviceId: string | null,
-): string | null {
-  if (!deviceId) return null;
-  return crypto
-    .createHash("sha256")
-    .update(`${deviceInfo.type}|${deviceId}`)
-    .digest("hex");
-}
diff --git a/src/backend/utils/ws-auth.ts b/src/backend/utils/ws-auth.ts
index a67ec9ff5..5ad8f50f4 100644
--- a/src/backend/utils/ws-auth.ts
+++ b/src/backend/utils/ws-auth.ts
@@ -7,10 +7,14 @@ const JWT_PROTOCOL_PREFIX = "termix.jwt.";
  * same site, including a sibling subdomain. The cookie only counts when the
  * page that opened the socket is this server. A non-web origin (the desktop
  * app) or no Origin at all is not a browser page on another host.
+ *
+ * Sec-Fetch-Site is set by the browser itself, so it holds even behind a
+ * proxy that rewrites Host.
  */
 export function isCookieOriginAllowed(req: IncomingMessage): boolean {
   const origin = req.headers.origin;
   if (!origin) return true;
+  if (req.headers["sec-fetch-site"] === "same-origin") return true;
   let parsed: URL;
   try {
     parsed = new URL(origin);
diff --git a/src/main.tsx b/src/main.tsx
index cc68373d2..ea0ed8e93 100644
--- a/src/main.tsx
+++ b/src/main.tsx
@@ -34,15 +34,25 @@ import { preloadPermissions } from "@/hooks/use-permissions";
 import { getUserPreferences } from "@/api/open-tabs-api";
 import { standaloneViewFor } from "@/shell/tab-registry";
 import { PluginViewPlaceholder } from "@/plugin-host/PluginViewPlaceholder";
+import {
+  resolveStartupOnboarding,
+  type StartupOnboarding,
+} from "@/onboarding/startup";
 
 const AppShell = lazy(() =>
   import("@/AppShell").then((m) => ({ default: m.AppShell })),
 );
+const OnboardingStage = lazy(() =>
+  import("@/onboarding/OnboardingStage").then((m) => ({
+    default: m.OnboardingStage,
+  })),
+);
 
 type Phase =
   | "verifying"
   | "idle-auth"
   | "loading-app"
+  | "onboarding"
   | "fading-in"
   | "idle-app"
   | "fading-out";
@@ -132,6 +142,7 @@ function App() {
   );
   const [authUsername, setAuthUsername] = useState(stored?.username ?? "");
   const [verifyRetryCount, setVerifyRetryCount] = useState(0);
+  const [startup, setStartup] = useState<StartupOnboarding | null>(null);
   const timerRef = useRef<ReturnType<typeof setTimeout> | null>(null);
   // Dedupes concurrent handleLogout() calls within the same tick -- see
   // handleLogout for why phase state alone isn't sufficient for this.
@@ -178,8 +189,7 @@ function App() {
           preloadPermissions(),
           getUserPreferences().catch(() => undefined),
         ]);
-        setPhase("fading-in");
-        timerRef.current = setTimeout(() => setPhase("idle-app"), 450);
+        await enterApp();
       })
       .catch((err: unknown) => {
         // Only treat a genuine auth rejection (401/403) as "not logged in".
@@ -229,8 +239,26 @@ function App() {
           }, delay);
         });
       });
+    // enterApp only touches state setters and refs.
+    // eslint-disable-next-line react-hooks/exhaustive-deps
   }, [phase, verifyRetryCount]);
 
+  function fadeIntoApp() {
+    setPhase("fading-in");
+    timerRef.current = setTimeout(() => setPhase("idle-app"), 450);
+  }
+
+  /** Opens on onboarding first when there is something to show. */
+  async function enterApp() {
+    const plan = await resolveStartupOnboarding().catch(() => null);
+    setStartup(plan);
+    if (plan?.mode) {
+      setPhase("onboarding");
+      return;
+    }
+    fadeIntoApp();
+  }
+
   function handleLogin(u: string) {
     loggingOutRef.current = false;
     clearDesktopManualLogout();
@@ -244,8 +272,7 @@ function App() {
         preloadPermissions(),
         getUserPreferences().catch(() => undefined),
       ]);
-      setPhase("fading-in");
-      timerRef.current = setTimeout(() => setPhase("idle-app"), 450);
+      await enterApp();
     })();
     if (isElectron()) {
       window.electronAPI?.startC2SAutoStartTunnels?.().catch(() => {});
@@ -282,8 +309,17 @@ function App() {
         ? "jwt=; expires=Thu, 01 Jan 1970 00:00:00 UTC; path=/; Secure; SameSite=Lax"
         : "jwt=; expires=Thu, 01 Jan 1970 00:00:00 UTC; path=/; SameSite=Lax";
     }
+    // The app never mounted, so there is nothing to fade out of.
+    if (phase === "onboarding") {
+      setStartup(null);
+      setAuthUsername("");
+      setPhase("idle-auth");
+      loggingOutRef.current = false;
+      return;
+    }
     setPhase("fading-out");
     timerRef.current = setTimeout(() => {
+      setStartup(null);
       setAuthUsername("");
       setPhase("idle-auth");
       loggingOutRef.current = false;
@@ -323,20 +359,35 @@ function App() {
         </div>
       )}
 
-      {showApp && (
-        <div
-          className="fixed inset-0 z-10 transition-opacity duration-[450ms] ease-in-out"
-          style={{
-            opacity: appOpacity,
-            pointerEvents: phase === "idle-app" ? "auto" : "none",
-          }}
-        >
-          <Suspense fallback={null}>
-            <UiPreferencesProvider>
-              <AppShell username={authUsername} onLogout={handleLogout} />
-            </UiPreferencesProvider>
-          </Suspense>
-        </div>
+      {(showApp || phase === "onboarding") && (
+        // One provider from onboarding into the app, so nothing chosen in
+        // onboarding is lost or fetched twice on the way.
+        <UiPreferencesProvider initial={startup?.preferences}>
+          {phase === "onboarding" && startup?.mode && (
+            <Suspense fallback={null}>
+              <OnboardingStage
+                mode={startup.mode}
+                initialPlugins={startup.plugins}
+                shellReady={false}
+                onDone={fadeIntoApp}
+                onLogout={() => handleLogout({ manual: true })}
+              />
+            </Suspense>
+          )}
+          {showApp && (
+            <div
+              className="fixed inset-0 z-10 transition-opacity duration-[450ms] ease-in-out"
+              style={{
+                opacity: appOpacity,
+                pointerEvents: phase === "idle-app" ? "auto" : "none",
+              }}
+            >
+              <Suspense fallback={null}>
+                <AppShell username={authUsername} onLogout={handleLogout} />
+              </Suspense>
+            </div>
+          )}
+        </UiPreferencesProvider>
       )}
 
       {showAuth && (
diff --git a/src/types/credential-sidebar-preferences.ts b/src/types/credential-sidebar-preferences.ts
index 55e33a302..02ce5c97e 100644
--- a/src/types/credential-sidebar-preferences.ts
+++ b/src/types/credential-sidebar-preferences.ts
@@ -2,7 +2,7 @@
  * Credential sidebar preferences model. Shared by the frontend sidebar and
  * the backend preferences endpoint (no framework imports, mirrors
  * ./host-sidebar-preferences.ts's dependency-free convention). Independent
- * from HostSidebarPreferences by design — a separate parallel system, not a
+ * from HostSidebarPreferences by design, a separate parallel system, not a
  * shared blob, matching how credentialSortKey/credentialFilterState were
  * already independently namespaced from hostSortKey/etc. before this port.
  *
@@ -32,7 +32,35 @@ export interface CredentialSidebarFilterState {
   tags: string[];
 }
 
-export interface CredentialSidebarDisplayPreferences {
+/** Which parts of a credential row are shown. */
+export interface CredentialRowFields {
+  showUsername: boolean;
+  /** The "3h" count of hosts using it. */
+  showUsageCount: boolean;
+  showTypeBadge: boolean;
+  showPinIcon: boolean;
+  showSharedBadge: boolean;
+}
+
+export const CREDENTIAL_ROW_FIELD_KEYS: (keyof CredentialRowFields)[] = [
+  "showUsername",
+  "showUsageCount",
+  "showTypeBadge",
+  "showPinIcon",
+  "showSharedBadge",
+];
+
+export function defaultCredentialRowFields(): CredentialRowFields {
+  return {
+    showUsername: true,
+    showUsageCount: true,
+    showTypeBadge: true,
+    showPinIcon: true,
+    showSharedBadge: true,
+  };
+}
+
+export interface CredentialSidebarDisplayPreferences extends CredentialRowFields {
   density: CredentialDensity;
   showTags: boolean;
   trayTrigger: CredentialTrayTrigger;
@@ -76,6 +104,7 @@ export function defaultCredentialSidebarPreferences(): CredentialSidebarPreferen
       density: "comfortable",
       showTags: true,
       trayTrigger: "always",
+      ...defaultCredentialRowFields(),
     },
   };
 }
@@ -114,7 +143,15 @@ export function sanitizeCredentialSidebarPreferences(
   const openFolders = sanitizeStringArray(obj.openFolders);
 
   const displayObj = (obj.display ?? {}) as Record<string, unknown>;
+  const rowFields = {} as CredentialRowFields;
+  for (const key of CREDENTIAL_ROW_FIELD_KEYS) {
+    rowFields[key] =
+      typeof displayObj[key] === "boolean"
+        ? (displayObj[key] as boolean)
+        : defaults.display[key];
+  }
   const display: CredentialSidebarDisplayPreferences = {
+    ...rowFields,
     density: DENSITIES.includes(displayObj.density as CredentialDensity)
       ? (displayObj.density as CredentialDensity)
       : defaults.display.density,
diff --git a/src/types/electron.d.ts b/src/types/electron.d.ts
index 1eedf93ad..20abeb4e6 100644
--- a/src/types/electron.d.ts
+++ b/src/types/electron.d.ts
@@ -1 +1 @@
-export type * from "@termix/plugin-sdk/desktop";
+export type * from "@termix-ssh/plugin-sdk/desktop";
diff --git a/src/types/host-sidebar-preferences.ts b/src/types/host-sidebar-preferences.ts
index d7b4f932d..bcc90f7c8 100644
--- a/src/types/host-sidebar-preferences.ts
+++ b/src/types/host-sidebar-preferences.ts
@@ -47,7 +47,38 @@ export interface HostSidebarFilterState {
   tags: string[];
 }
 
-export interface HostSidebarDisplayPreferences {
+/** Which parts of a host row are shown. */
+export interface HostRowFields {
+  showAddress: boolean;
+  showUsername: boolean;
+  showPort: boolean;
+  showPinIcon: boolean;
+  showSharedBadge: boolean;
+  /** Badges plugins add next to the name. */
+  showBadges: boolean;
+}
+
+export const HOST_ROW_FIELD_KEYS: (keyof HostRowFields)[] = [
+  "showAddress",
+  "showUsername",
+  "showPort",
+  "showPinIcon",
+  "showSharedBadge",
+  "showBadges",
+];
+
+export function defaultHostRowFields(): HostRowFields {
+  return {
+    showAddress: true,
+    showUsername: true,
+    showPort: false,
+    showPinIcon: true,
+    showSharedBadge: true,
+    showBadges: true,
+  };
+}
+
+export interface HostSidebarDisplayPreferences extends HostRowFields {
   density: HostDensity;
   showTags: boolean;
   trayTrigger: HostTrayTrigger;
@@ -57,6 +88,11 @@ export interface HostSidebarDisplayPreferences {
   /** When false, nested folders hide the parent-path breadcrumb before their name. */
   showFolderPaths: boolean;
   hostClickBehavior: HostClickBehavior;
+  /**
+   * Host action id to whether it shows in the row's connect bar. An action
+   * missing here follows its own default. Every action stays in the menu.
+   */
+  barActions: Record<string, boolean>;
 }
 
 export interface HostSidebarPreferences {
@@ -127,10 +163,25 @@ export function defaultHostSidebarPreferences(): HostSidebarPreferences {
       openOnDoubleClick: false,
       showFolderPaths: true,
       hostClickBehavior: "newTab",
+      barActions: {},
+      ...defaultHostRowFields(),
     },
   };
 }
 
+const ACTION_ID_PATTERN = /^[a-z0-9][a-z0-9._:-]{0,79}$/;
+
+function sanitizeBarActions(input: unknown): Record<string, boolean> {
+  if (!input || typeof input !== "object" || Array.isArray(input)) return {};
+  const out: Record<string, boolean> = {};
+  for (const [id, value] of Object.entries(input as Record<string, unknown>)) {
+    if (ACTION_ID_PATTERN.test(id) && typeof value === "boolean") {
+      out[id] = value;
+    }
+  }
+  return out;
+}
+
 function sanitizeStringArray(input: unknown): string[] {
   if (!Array.isArray(input)) return [];
   return input.filter((v): v is string => typeof v === "string");
@@ -184,7 +235,15 @@ export function sanitizeHostSidebarPreferences(
   const openFolders = sanitizeStringArray(obj.openFolders);
 
   const displayObj = (obj.display ?? {}) as Record<string, unknown>;
+  const rowFields = {} as HostRowFields;
+  for (const key of HOST_ROW_FIELD_KEYS) {
+    rowFields[key] =
+      typeof displayObj[key] === "boolean"
+        ? (displayObj[key] as boolean)
+        : defaults.display[key];
+  }
   const display: HostSidebarDisplayPreferences = {
+    ...rowFields,
     density: DENSITIES.includes(displayObj.density as HostDensity)
       ? (displayObj.density as HostDensity)
       : defaults.display.density,
@@ -215,6 +274,7 @@ export function sanitizeHostSidebarPreferences(
     )
       ? (displayObj.hostClickBehavior as HostClickBehavior)
       : defaults.display.hostClickBehavior,
+    barActions: sanitizeBarActions(displayObj.barActions),
   };
 
   return {
diff --git a/src/types/index.ts b/src/types/index.ts
index 0e8f5b2c3..7606a6992 100644
--- a/src/types/index.ts
+++ b/src/types/index.ts
@@ -2,7 +2,7 @@ import type {
   HostProtocolAuthSummary,
   HostProtocolAuthType,
   HostSshOptions,
-} from "@termix/plugin-sdk/frontend";
+} from "@termix-ssh/plugin-sdk/frontend";
 import type { Request } from "express";
 import type { RefObject } from "react";
 import type { HostAuthOverrides } from "./auth-protocols.js";
@@ -280,7 +280,7 @@ export interface CredentialBackend {
  */
 export type HostTerminalConfig = Record<string, unknown>;
 
-export type { HostSshOptions } from "@termix/plugin-sdk/frontend";
+export type { HostSshOptions } from "@termix-ssh/plugin-sdk/frontend";
 
 // ============================================================================
 // TAB TYPES
diff --git a/src/types/onboarding.ts b/src/types/onboarding.ts
new file mode 100644
index 000000000..b21f5e71d
--- /dev/null
+++ b/src/types/onboarding.ts
@@ -0,0 +1,76 @@
+/**
+ * Onboarding step bookkeeping, shared by the frontend and the ui-preferences
+ * route. Dependency-free for the backend's NodeNext build.
+ *
+ * Each step has a key and a version. A user's `seen` map records the highest
+ * version of each step they have been shown, so bumping one step's version
+ * shows that step again (and only that step) to everyone who saw it before.
+ * Plugin steps are keyed `<pluginId>:<id>`.
+ */
+
+export const CORE_ONBOARDING_STEPS = {
+  plugins: 1,
+  "desktop-sync": 1,
+  preset: 1,
+  appearance: 1,
+  security: 1,
+} as const;
+
+export type CoreOnboardingStepKey = keyof typeof CORE_ONBOARDING_STEPS;
+
+/**
+ * What a user who finished the old single-version onboarding counts as
+ * having seen. Frozen on purpose: a later bump in CORE_ONBOARDING_STEPS must
+ * still show the bumped step to these users.
+ */
+export const LEGACY_SEEN: Readonly<Record<string, number>> = Object.freeze({
+  plugins: 1,
+  "desktop-sync": 1,
+  preset: 1,
+  appearance: 1,
+  security: 1,
+});
+
+export const MAX_SEEN_ENTRIES = 500;
+const MAX_KEY_LENGTH = 128;
+
+export function pluginStepKey(pluginId: string, id: string): string {
+  return `${pluginId}:${id}`;
+}
+
+export function isValidSeenEntry(key: string, version: unknown): boolean {
+  return (
+    typeof key === "string" &&
+    key.length > 0 &&
+    key.length <= MAX_KEY_LENGTH &&
+    typeof version === "number" &&
+    Number.isInteger(version) &&
+    version >= 1 &&
+    version <= 1_000_000
+  );
+}
+
+export function sanitizeSeen(input: unknown): Record<string, number> {
+  const out: Record<string, number> = {};
+  if (!input || typeof input !== "object" || Array.isArray(input)) return out;
+  let count = 0;
+  for (const [key, version] of Object.entries(input)) {
+    if (count >= MAX_SEEN_ENTRIES) break;
+    if (!isValidSeenEntry(key, version)) continue;
+    out[key] = version as number;
+    count++;
+  }
+  return out;
+}
+
+/** Per-key max, so a stale tab never lowers what another tab recorded. */
+export function mergeSeen(
+  a: Record<string, number> | undefined,
+  b: Record<string, number> | undefined,
+): Record<string, number> {
+  const out: Record<string, number> = { ...(a ?? {}) };
+  for (const [key, version] of Object.entries(b ?? {})) {
+    if ((out[key] ?? 0) < version) out[key] = version;
+  }
+  return sanitizeSeen(out);
+}
diff --git a/src/types/plugin-onboarding.ts b/src/types/plugin-onboarding.ts
new file mode 100644
index 000000000..bfc55f2f4
--- /dev/null
+++ b/src/types/plugin-onboarding.ts
@@ -0,0 +1,127 @@
+/**
+ * The onboarding plugin picker: what the admin chose for each plugin, and the
+ * dependency rules that keep the result loadable. Shared by the picker (to
+ * show "kept because X needs it" live) and the backend apply route.
+ */
+
+export type PluginChoice = "enabled" | "disabled" | "remove";
+
+export const PLUGIN_CHOICES: readonly PluginChoice[] = [
+  "enabled",
+  "disabled",
+  "remove",
+];
+
+export interface ChoicePlugin {
+  id: string;
+  /** Hard dependencies (plugin ids). */
+  dependencies: string[];
+}
+
+export interface ChoiceAdjustment {
+  id: string;
+  from: PluginChoice;
+  to: PluginChoice;
+  /** The plugins whose choice forced this one up. */
+  requiredBy: string[];
+}
+
+const RANK: Record<PluginChoice, number> = {
+  remove: 0,
+  disabled: 1,
+  enabled: 2,
+};
+
+export function isPluginChoice(value: unknown): value is PluginChoice {
+  return PLUGIN_CHOICES.includes(value as PluginChoice);
+}
+
+/**
+ * Raise choices until every plugin's dependencies can serve it: an enabled
+ * plugin needs its dependencies enabled, and a kept but disabled plugin
+ * needs them at least kept. Ids missing from `choices` stay as they are and
+ * are never adjusted.
+ */
+export function resolvePluginChoices(
+  plugins: ChoicePlugin[],
+  choices: Record<string, PluginChoice>,
+): {
+  choices: Record<string, PluginChoice>;
+  adjustments: ChoiceAdjustment[];
+} {
+  const resolved: Record<string, PluginChoice> = { ...choices };
+  const requiredBy = new Map<string, Set<string>>();
+  const known = new Set(plugins.map((p) => p.id));
+
+  let changed = true;
+  while (changed) {
+    changed = false;
+    for (const plugin of plugins) {
+      const own = resolved[plugin.id];
+      if (!own || own === "remove") continue;
+      for (const dep of plugin.dependencies) {
+        if (!known.has(dep) || !resolved[dep]) continue;
+        if (RANK[resolved[dep]] >= RANK[own]) continue;
+        resolved[dep] = own;
+        if (!requiredBy.has(dep)) requiredBy.set(dep, new Set());
+        requiredBy.get(dep)!.add(plugin.id);
+        changed = true;
+      }
+    }
+  }
+
+  const adjustments: ChoiceAdjustment[] = [];
+  for (const [id, from] of Object.entries(choices)) {
+    const to = resolved[id];
+    if (to !== from) {
+      adjustments.push({
+        id,
+        from,
+        to,
+        requiredBy: [...(requiredBy.get(id) ?? [])].sort(),
+      });
+    }
+  }
+  return { choices: resolved, adjustments };
+}
+
+/** Dependencies before the plugins that need them. */
+function topoOrder(plugins: ChoicePlugin[], ids: Set<string>): string[] {
+  const byId = new Map(plugins.map((p) => [p.id, p]));
+  const out: string[] = [];
+  const visiting = new Set<string>();
+  const done = new Set<string>();
+  const visit = (id: string) => {
+    if (done.has(id) || visiting.has(id)) return;
+    visiting.add(id);
+    for (const dep of byId.get(id)?.dependencies ?? []) {
+      if (ids.has(dep)) visit(dep);
+    }
+    visiting.delete(id);
+    done.add(id);
+    out.push(id);
+  };
+  for (const id of [...ids].sort()) visit(id);
+  return out;
+}
+
+/**
+ * The order to apply resolved choices in: enable dependencies first, and
+ * disable or remove dependents first.
+ */
+export function applyOrder(
+  plugins: ChoicePlugin[],
+  resolved: Record<string, PluginChoice>,
+): { enable: string[]; disable: string[]; remove: string[] } {
+  const pick = (choice: PluginChoice) =>
+    new Set(
+      Object.entries(resolved)
+        .filter(([, c]) => c === choice)
+        .map(([id]) => id),
+    );
+  return {
+    enable: topoOrder(plugins, pick("enabled")),
+    disable: topoOrder(plugins, pick("disabled")).reverse(),
+    remove: topoOrder(plugins, pick("remove")).reverse(),
+  };
+}
diff --git a/src/types/ui-preferences.ts b/src/types/ui-preferences.ts
index 673a3544d..d7ca3b79f 100644
--- a/src/types/ui-preferences.ts
+++ b/src/types/ui-preferences.ts
@@ -1,3 +1,5 @@
+import { LEGACY_SEEN, sanitizeSeen } from "./onboarding.js";
+
 /**
  * App-wide UI complexity preferences. Shared by the frontend UI preferences
  * context and the backend preferences endpoint (no framework imports, mirrors
@@ -19,9 +21,6 @@
 /** 2: the docker and host metrics areas moved to their plugins. */
 export const UI_PREFERENCES_VERSION = 3;
 
-/** Bump when onboarding gains steps existing users should be shown again. */
-export const UI_ONBOARDING_VERSION = 2;
-
 export type UiPreset = "simple" | "balanced" | "advanced" | "custom";
 
 export type UiAreaKey =
@@ -65,6 +64,8 @@ export interface UiRailPreferences {
    * items are only known at runtime, so the preset cannot list them.
    */
   hidePluginItems?: boolean;
+  /** Rail item ids in the user's order. Items not listed keep their place. */
+  order?: string[];
 }
 
 export interface UiDashboardPreferences {
@@ -92,10 +93,17 @@ export type UiOverrides = {
 } & { [key: UiPluginAreaKey]: Record<string, unknown> };
 
 export interface UiOnboardingState {
-  /** 0 means "never completed". Compared against UI_ONBOARDING_VERSION. */
-  completedVersion: number;
+  /** Step key to the highest version of that step the user was shown. */
+  seen: Record<string, number>;
+  /** When the first full run finished. Null means it never has. */
   completedAt: string | null;
   skipped: boolean;
+  /**
+   * Set for users carried over from the old single-version onboarding. The
+   * client marks every plugin step that exists right now as seen without
+   * showing it, then clears this.
+   */
+  baselinePending: boolean;
 }
 
 export interface UiPreferences {
@@ -243,6 +251,7 @@ const AREA_SPECS: {
   },
   rail: {
     hiddenTabs: { kind: "stringArray" },
+    order: { kind: "stringArray" },
     hidePluginItems: { kind: "bool" },
   },
   dashboard: {
@@ -314,41 +323,10 @@ function sanitizePluginArea(input: unknown): Record<string, unknown> {
   return out;
 }
 
-/**
- * Areas that moved into a plugin: before `version` they were stored under
- * core's name. Version 1 had docker and host metrics, version 2 the terminal
- * and the file manager.
- */
-const MOVED_PLUGIN_AREAS: Array<{
-  before: number;
-  legacy: string;
-  area: UiPluginAreaKey;
-}> = [
-  { before: 2, legacy: "docker", area: "plugin:docker" }, // plugin-id-ok: 2.8 key
-  { before: 2, legacy: "hostMetrics", area: "plugin:host-metrics" },
-  { before: 3, legacy: "terminal", area: "plugin:ssh-terminal" },
-  { before: 3, legacy: "fileManager", area: "plugin:file-manager" },
-];
-
-export function sanitizeUiOverrides(
-  input: unknown,
-  version = UI_PREFERENCES_VERSION,
-): UiOverrides {
+export function sanitizeUiOverrides(input: unknown): UiOverrides {
   const out: Record<string, Record<string, unknown>> = {};
   if (!input || typeof input !== "object") return out as UiOverrides;
 
-  const moves = MOVED_PLUGIN_AREAS.filter((move) => version < move.before);
-  if (moves.length > 0) {
-    const upgraded = { ...(input as Record<string, unknown>) };
-    for (const { legacy, area } of moves) {
-      if (legacy in upgraded) {
-        upgraded[area] = upgraded[legacy];
-        delete upgraded[legacy];
-      }
-    }
-    input = upgraded;
-  }
-
   const specsByArea = AREA_SPECS as unknown as Record<
     string,
     Record<string, FieldSpec>
@@ -381,27 +359,42 @@ export function sanitizeUiOverrides(
   return out as UiOverrides;
 }
 
-function sanitizeOnboarding(input: unknown): UiOnboardingState {
-  const defaults: UiOnboardingState = {
-    completedVersion: 0,
+export function defaultOnboardingState(): UiOnboardingState {
+  return {
+    seen: {},
     completedAt: null,
     skipped: false,
+    baselinePending: false,
   };
+}
+
+export function sanitizeOnboarding(input: unknown): UiOnboardingState {
+  const defaults = defaultOnboardingState();
   if (!input || typeof input !== "object") return defaults;
   const obj = input as Record<string, unknown>;
+  const completedAt =
+    typeof obj.completedAt === "string" ? obj.completedAt : null;
+  const skipped = typeof obj.skipped === "boolean" ? obj.skipped : false;
+
+  // The old shape had a single completedVersion and no seen map.
+  if (
+    !("seen" in obj) &&
+    typeof obj.completedVersion === "number" &&
+    obj.completedVersion >= 1
+  ) {
+    return {
+      seen: { ...LEGACY_SEEN },
+      completedAt,
+      skipped,
+      baselinePending: true,
+    };
+  }
 
   return {
-    completedVersion:
-      typeof obj.completedVersion === "number" &&
-      Number.isFinite(obj.completedVersion) &&
-      obj.completedVersion >= 0
-        ? Math.round(obj.completedVersion)
-        : defaults.completedVersion,
-    completedAt:
-      typeof obj.completedAt === "string"
-        ? obj.completedAt
-        : defaults.completedAt,
-    skipped: typeof obj.skipped === "boolean" ? obj.skipped : defaults.skipped,
+    seen: sanitizeSeen(obj.seen),
+    completedAt,
+    skipped,
+    baselinePending: obj.baselinePending === true,
   };
 }
 
@@ -410,7 +403,7 @@ export function defaultUiPreferences(): UiPreferences {
     version: UI_PREFERENCES_VERSION,
     preset: "balanced",
     overrides: {},
-    onboarding: { completedVersion: 0, completedAt: null, skipped: false },
+    onboarding: defaultOnboardingState(),
   };
 }
 
@@ -424,10 +417,7 @@ export function sanitizeUiPreferences(input: unknown): UiPreferences {
     preset: PRESET_VALUES.includes(obj.preset as UiPreset)
       ? (obj.preset as UiPreset)
       : defaults.preset,
-    overrides: sanitizeUiOverrides(
-      obj.overrides,
-      typeof obj.version === "number" ? obj.version : 1,
-    ),
+    overrides: sanitizeUiOverrides(obj.overrides),
     onboarding: sanitizeOnboarding(obj.onboarding),
   };
 }
diff --git a/src/types/ui-types.ts b/src/types/ui-types.ts
index 6350dd02a..78a7b09ca 100644
--- a/src/types/ui-types.ts
+++ b/src/types/ui-types.ts
@@ -6,7 +6,7 @@ import type {
 } from "./index.js";
 import type { HostAuthOverrides } from "./auth-protocols.js";
 import type { DefaultOverrides } from "./host-defaults.js";
-import type { QuickConnectLogin } from "@termix/plugin-sdk/frontend";
+import type { QuickConnectLogin } from "@termix-ssh/plugin-sdk/frontend";
 
 export type Host = {
   id: string;
@@ -146,9 +146,11 @@ export type HostFolder = {
 type KnownTabType =
   | "dashboard"
   | "host-manager"
+  | "settings"
   | "user-profile"
   | "admin-settings"
-  | "split-screen";
+  | "split-screen"
+  | "plugins";
 
 /**
  * TabType covers every built-in tab plus any plugin-contributed tab id.
@@ -189,6 +191,8 @@ export type Tab = {
     refresh?: () => void;
     getApplicationCursorKeysMode?: () => boolean;
     focus?: () => void;
+    /** Asked before the tab closes; resolve false to keep it open. */
+    confirmClose?: () => boolean | Promise<boolean>;
   } | null>;
 };
 
diff --git a/src/ui/AppShell.tsx b/src/ui/AppShell.tsx
index cdb92313c..a81352fcc 100644
--- a/src/ui/AppShell.tsx
+++ b/src/ui/AppShell.tsx
@@ -1,23 +1,10 @@
 /* eslint-disable react-refresh/only-export-components */
 /* eslint-disable react-hooks/exhaustive-deps */
-import type { TabHandle } from "@termix/plugin-sdk/frontend";
+import type { TabHandle } from "@termix-ssh/plugin-sdk/frontend";
 import { toast } from "sonner";
 import { useTranslation } from "react-i18next";
-import { Separator } from "@/components/separator";
-import { Button } from "@/components/button";
 import { Sheet, SheetContent } from "@/components/sheet";
-import {
-  ChevronLeft,
-  ChevronRight,
-  Columns2,
-  Maximize2,
-  Minimize2,
-  PanelRight,
-  RotateCcw,
-  Rows2,
-  SquareArrowOutUpRight,
-  X,
-} from "lucide-react";
+import { Columns2, Maximize2, RotateCcw, Rows2, X } from "lucide-react";
 import {
   useState,
   useRef,
@@ -32,7 +19,8 @@ import {
 import { createPortal } from "react-dom";
 import { useIsMobile } from "@/hooks/use-mobile";
 import { resetPermissionsCache } from "@/hooks/use-permissions";
-import { MobileBottomBar } from "@/shell/MobileBottomBar";
+import { MobileBar } from "@/shell/MobileBar";
+import { isElectron } from "@/lib/electron";
 import { AppRail, type RailView } from "@/sidebar/AppRail";
 import { ComponentSlot } from "@/shell/ActionSlot";
 import {
@@ -42,10 +30,18 @@ import {
   rightDockableIds,
   useRailItems,
 } from "@/sidebar/rail-items";
-import { MultiPanelHint } from "@/sidebar/MultiPanelHint";
-import { OnboardingDialog } from "@/onboarding/OnboardingDialog";
-import { UI_ONBOARDING_VERSION } from "@/types/ui-preferences";
-import { useUiPreferencesContext } from "@/contexts/UiPreferencesContext";
+import {
+  DOCK_DEFAULT_WIDTH,
+  DockPanel,
+  DockReopenStrip,
+} from "@/shell/DockPanel";
+import {
+  SurfaceScope,
+  useConfirm,
+  type ConfirmOptions,
+  type EditingWidth,
+} from "@/components/surface/surface-scope";
+import { OnboardingHost } from "@/onboarding/OnboardingHost";
 import { SplitView, type SplitViewActions } from "@/shell/split/SplitView";
 import { SplitDropOverlay } from "@/shell/split/SplitDropOverlay";
 import {
@@ -55,6 +51,13 @@ import {
 import { renderTabContent } from "@/shell/tabUtils";
 import { TabBar } from "@/shell/TabBar";
 import { reconnectDisconnectedTabs } from "@/shell/reconnect-tabs";
+import { canCloseTab } from "@/shell/tab-close-guards";
+import {
+  MANAGE_REQUEST_EVENT,
+  type ManageMode,
+  requestFromLegacyEvent,
+  requestManage,
+} from "@/manage/manage-requests";
 import {
   dispatchCtrlW,
   createCommandPaletteShortcutMatcher,
@@ -87,21 +90,11 @@ const QuickConnectPanel = lazy(() =>
   })),
 );
 
-const UserProfilePanel = lazy(() =>
-  import("@/sidebar/UserProfilePanel").then((m) => ({
-    default: m.UserProfilePanel,
-  })),
-);
 const SyncPanel = lazy(() =>
   import("@/settings/sync/SyncPanel").then((m) => ({
     default: m.SyncPanel,
   })),
 );
-const AdminSettingsPanel = lazy(() =>
-  import("@/sidebar/AdminSettingsPanel").then((m) => ({
-    default: m.AdminSettingsPanel,
-  })),
-);
 const CredentialsPanel = lazy(() =>
   import("@/sidebar/CredentialsPanel").then((m) => ({
     default: m.CredentialsPanel,
@@ -145,7 +138,6 @@ import {
   getActiveSessions,
   getUserPreferences,
   saveUserPreferences,
-  dismissDonationModal,
   type UserPreferences,
   type OpenTabRecord,
 } from "@/main-axios";
@@ -155,9 +147,8 @@ import {
   resolveLayoutTabTarget,
   snapshotData,
 } from "@/shell/shell-layout";
-import { DonationReminderModal } from "@/user/DonationReminderModal.tsx";
 import { useSyncStatus } from "@/hooks/use-sync-status";
-import { rem, remScale } from "@/lib/rem";
+import { remScale } from "@/lib/rem";
 import { dbHealthMonitor } from "@/lib/db-health-monitor";
 import { ServerStatusProvider } from "@/lib/ServerStatusContext";
 import { sshHostToHost } from "@/sidebar/HostManagerData";
@@ -245,10 +236,27 @@ import {
   setShellLayoutProvider,
 } from "@/plugin-host/shell-bridge";
 import { PluginViewPlaceholder } from "@/plugin-host/PluginViewPlaceholder";
+import {
+  OPEN_PLUGINS_EVENT,
+  OPEN_PLUGIN_SETTINGS_EVENT,
+} from "@/plugins/open-plugins";
 
 export { buildHostTree } from "@/sidebar/build-host-tree";
 export { tabIcon, renderTabContent } from "@/shell/tabUtils";
 
+/** Hands the main area's confirm to code outside it, like closeTab. */
+function ShellConfirmCapture({
+  confirmRef,
+}: {
+  confirmRef: React.MutableRefObject<
+    ((options: ConfirmOptions) => Promise<boolean>) | null
+  >;
+}) {
+  const confirm = useConfirm();
+  confirmRef.current = confirm;
+  return null;
+}
+
 // ─── AppShell ────────────────────────────────────────────────────────────────
 
 export function AppShell({
@@ -280,7 +288,7 @@ export function AppShell({
   });
   const [userPrefsLoaded, setUserPrefsLoaded] = useState(false);
   const [hostsLoaded, setHostsLoaded] = useState(false);
-  // Flips to true once the initial DB read (restore or skip) is done — sync must not fire before this
+  // Flips to true once the initial DB read (restore or skip) is done. Sync must not fire before this
   const [tabsReady, setTabsReady] = useState(false);
   const [commandPaletteOpen, setCommandPaletteOpen] = useState(false);
   // Split tabs are restored once their child tabs have stable live ids.
@@ -295,77 +303,84 @@ export function AppShell({
   // The standalone desktop backend still owns system settings such as the
   // Tailscale API key, even though it has only one implicit user.
   const showAdminUI = isAdmin;
-  const [showDonationModal, setShowDonationModal] = useState(false);
-  const [showOnboarding, setShowOnboarding] = useState(false);
   const [backgroundTabRecords, setBackgroundTabRecords] = useState<
     OpenTabRecord[]
   >([]);
 
-  // First-run onboarding. The backend hands accounts that predate this feature
-  // an already-completed state, so only genuinely new users are interrupted.
-  const uiPrefs = useUiPreferencesContext();
-  const onboardingPending =
-    !!uiPrefs?.loaded &&
-    uiPrefs.preferences.onboarding.completedVersion < UI_ONBOARDING_VERSION;
-
-  /**
-   * Both onboarding entry points wait for plugins first, since plugins add
-   * steps of their own (the AI step, feature cards).
-   */
-  const loadOnboardingContext = useCallback(async () => {
-    const { settledPromise } = await import("@/plugin-host/plugin-store");
-    await settledPromise();
-  }, []);
-
-  useEffect(() => {
-    if (!username || !onboardingPending) return;
-    let cancelled = false;
-    loadOnboardingContext().finally(() => {
-      if (!cancelled) setShowOnboarding(true);
-    });
-    return () => {
-      cancelled = true;
-    };
-  }, [username, onboardingPending, loadOnboardingContext]);
-
-  // "Run setup again" from settings.
-  useEffect(() => {
-    const handler = () => {
-      loadOnboardingContext().finally(() => setShowOnboarding(true));
-    };
-    window.addEventListener("termix:open-onboarding", handler);
-    return () => window.removeEventListener("termix:open-onboarding", handler);
-  }, [loadOnboardingContext]);
-
   const [sidebarOpen, setSidebarOpen] = useState(true);
   const [railView, setRailView] = useState<RailView>("hosts");
 
-  // Host defaults open in the host manager, from anywhere (the admin panel,
-  // a folder's menu).
+  // Anything that asks to add or edit a host, a credential or host defaults
+  // ends up in the Manage tab, whichever event it still speaks.
   useEffect(() => {
+    const names = [
+      "host-manager:add-host",
+      "host-manager:edit-host",
+      "host-manager:add-credential",
+      "host-manager:show-credentials",
+      "host-manager:edit-defaults",
+      "termix:open-host-defaults",
+    ];
     const handler = (e: Event) => {
-      const detail = (e as CustomEvent).detail;
-      setSidebarOpen(true);
-      setRailView("hosts");
-      setTimeout(() => {
-        window.dispatchEvent(
-          new CustomEvent("host-manager:edit-defaults", { detail }),
-        );
-      }, 0);
+      const request = requestFromLegacyEvent(e.type, (e as CustomEvent).detail);
+      if (request) requestManage(request);
+    };
+    const open = () => openSingletonTabRef.current("host-manager");
+    for (const name of names) window.addEventListener(name, handler);
+    window.addEventListener(MANAGE_REQUEST_EVENT, open);
+    return () => {
+      for (const name of names) window.removeEventListener(name, handler);
+      window.removeEventListener(MANAGE_REQUEST_EVENT, open);
     };
-    window.addEventListener("termix:open-host-defaults", handler);
-    return () =>
-      window.removeEventListener("termix:open-host-defaults", handler);
   }, []);
   const [sidebarWidth, setSidebarWidth] = useState(() => {
     const saved = localStorage.getItem("termix_sidebarWidth");
     return saved ? parseInt(saved, 10) : 291;
   });
   const [sidebarDragging, setSidebarDragging] = useState(false);
-  const [sidebarEditing, setSidebarEditing] = useState(false);
-  const [settingsFullscreen, setSettingsFullscreen] = useState(false);
+  // How far each panel wants the sidebar widened: what the panel says itself,
+  // and what its open inline views say.
+  const [panelEditing, setPanelEditing] = useState<
+    Record<string, EditingWidth>
+  >({});
+  const [scopeEditing, setScopeEditing] = useState<
+    Record<string, EditingWidth>
+  >({});
+  const setPanelEditingFor = useCallback(
+    (view: string, editing: EditingWidth) =>
+      setPanelEditing((prev) =>
+        prev[view] === editing ? prev : { ...prev, [view]: editing },
+      ),
+    [],
+  );
+  const setScopeEditingFor = useCallback(
+    (view: string, editing: EditingWidth) =>
+      setScopeEditing((prev) =>
+        prev[view] === editing ? prev : { ...prev, [view]: editing },
+      ),
+    [],
+  );
+  const editingSetters = useRef(
+    new Map<string, (editing: EditingWidth) => void>(),
+  );
+  const panelEditingSetter = (view: string) => {
+    const key = `panel:${view}`;
+    if (!editingSetters.current.has(key))
+      editingSetters.current.set(key, (e) => setPanelEditingFor(view, e));
+    return editingSetters.current.get(key)!;
+  };
+  const scopeEditingSetter = (view: string) => {
+    const key = `scope:${view}`;
+    if (!editingSetters.current.has(key))
+      editingSetters.current.set(key, (e) => setScopeEditingFor(view, e));
+    return editingSetters.current.get(key)!;
+  };
+  // The root confirm, for questions the shell itself asks (closing a tab).
+  const shellConfirmRef = useRef<
+    ((options: ConfirmOptions) => Promise<boolean>) | null
+  >(null);
 
-  // Right dock — a second panel column so reference panels like history can
+  // Right dock: a second panel column so reference panels like history can
   // stay visible while the left sidebar is used for something else.
   const [rightRailView, setRightRailView] = useState<RailView | null>(() => {
     const saved = localStorage.getItem("termix_rightRailView");
@@ -414,22 +429,6 @@ export function AppShell({
   }, [tabs]);
 
   const isMobile = useIsMobile();
-  const isSettingsView =
-    railView === "user-profile" || railView === "admin-settings";
-
-  useEffect(() => {
-    if (!settingsFullscreen) return;
-    const closeOnEscape = (event: KeyboardEvent) => {
-      if (event.key === "Escape") setSettingsFullscreen(false);
-    };
-    window.addEventListener("keydown", closeOnEscape);
-    return () => window.removeEventListener("keydown", closeOnEscape);
-  }, [settingsFullscreen]);
-
-  useEffect(() => {
-    if (!isSettingsView) setSettingsFullscreen(false);
-  }, [isSettingsView]);
-
   const sidebarOpenBeforeMobile = useRef(sidebarOpen);
   useEffect(() => {
     if (isMobile) {
@@ -442,18 +441,10 @@ export function AppShell({
 
   useEffect(() => {
     getUserInfo()
-      .then((info) => {
-        setIsAdmin(info.is_admin);
-        setShowDonationModal(!!info.show_donation_modal);
-      })
+      .then((info) => setIsAdmin(info.is_admin))
       .catch(() => setIsAdmin(false));
   }, []);
 
-  const handleDismissDonationModal = useCallback(() => {
-    setShowDonationModal(false);
-    dismissDonationModal().catch(() => {});
-  }, []);
-
   const toggleAppFullscreen = useCallback(async () => {
     try {
       if (document.fullscreenElement) {
@@ -696,7 +687,7 @@ export function AppShell({
   const paneElsRef = useRef<Map<string, HTMLDivElement>>(new Map());
   const [, setPaneElsVersion] = useState(0);
 
-  // Stable per-tab DOM nodes — created once per tab, never destroyed while the tab lives.
+  // Stable per-tab DOM nodes, created once per tab, never destroyed while the tab lives.
   // We always portal each tab's content into its own node, then move that node between
   // the normal-view container and the pane container via vanilla DOM so React's portal
   // target never changes (changing the target causes a remount).
@@ -706,7 +697,7 @@ export function AppShell({
   const mainAreaRef = useRef<HTMLDivElement>(null);
   // Tab id the enter animation has already played for, so a re-render while
   // the tab stays active (there can be several right after a switch) doesn't
-  // replay it — only a genuine switch to a different tab should.
+  // replay it, only a genuine switch to a different tab should.
   const lastAnimatedTabIdRef = useRef<string | null>(null);
 
   const getTabNode = useCallback((tabId: string, isTerminal: boolean) => {
@@ -724,7 +715,7 @@ export function AppShell({
   // Portal render order for tab content, kept independent of the tab bar's
   // visual order. Reordering tabs in the bar reorders `tabs`, and mapping
   // that array directly to portals reshuffles the Suspense-wrapped portal
-  // children's sibling order in the fiber tree — React then runs its
+  // children's sibling order in the fiber tree, React then runs its
   // Offscreen disconnect/reconnect pass on the ones that moved, which tears
   // down and rebuilds every passive effect underneath (including
   // react-xtermjs's terminal-creation effect), dropping the live terminal
@@ -853,7 +844,7 @@ export function AppShell({
         }
       }
 
-      // Cmd+1..9 on macOS, Alt+1..9 elsewhere — jump directly to the tab at that position
+      // Cmd+1..9 on macOS, Alt+1..9 elsewhere: jump directly to the tab at that position
       const tabDigit = getTabJumpDigit(e);
       if (tabDigit !== null) {
         const currentTabs = tabsRef.current.filter(
@@ -867,7 +858,7 @@ export function AppShell({
         return;
       }
 
-      // Ctrl+Shift+] / Ctrl+Shift+[ — cycle through open tabs (] = next, [ = previous)
+      // Ctrl+Shift+] / Ctrl+Shift+[: cycle through open tabs (] = next, [ = previous)
       if (e.ctrlKey && e.shiftKey && !e.altKey && !e.metaKey) {
         if (e.code === "BracketRight" || e.code === "BracketLeft") {
           e.preventDefault();
@@ -1366,7 +1357,7 @@ export function AppShell({
             // Restored tabs are in the tab bar, not in background records
           }
         } else {
-          // Not restoring to tab bar — keep as background records for ConnectionsPanel
+          // Not restoring to tab bar, keep as background records for ConnectionsPanel
           setBackgroundTabRecords(savedTabs as OpenTabRecord[]);
         }
       } catch {
@@ -1663,41 +1654,36 @@ export function AppShell({
       if (getTabType(type)?.multiInstance) {
         return openMultiInstanceTab(type, { host, data, label: tabLabel });
       }
-      if (type === "host-manager") {
-        if (pendingEvent === "host-manager:add-credential") {
-          setSidebarOpen(true);
-          setRailView("credentials");
-          setTimeout(
-            () =>
-              window.dispatchEvent(
-                new CustomEvent("host-manager:add-credential"),
-              ),
-            0,
-          );
-        } else if (pendingEvent === "host-manager:show-credentials") {
-          setSidebarOpen(true);
-          setRailView("credentials");
-        } else {
-          setSidebarOpen(true);
-          setRailView("hosts");
-          if (pendingEvent) {
-            setTimeout(
-              () => window.dispatchEvent(new CustomEvent(pendingEvent)),
-              0,
-            );
-          }
-        }
-        return;
+      if (type === "host-manager" && pendingEvent) {
+        const request = requestFromLegacyEvent(pendingEvent);
+        if (request) requestManage(request);
       }
+      // Profile and admin are pages of the one Settings tab now.
       if (type === "user-profile" || type === "admin-settings") {
-        setSidebarEditing(false);
-        setRailView(type as RailView);
-        setSidebarOpen(true);
-        return;
+        return openSingletonTab(
+          "settings",
+          undefined,
+          undefined,
+          {
+            section:
+              typeof data?.section === "string"
+                ? data.section
+                : type === "admin-settings"
+                  ? "admin-general"
+                  : "account",
+          },
+          tabLabel,
+        );
+      }
+      // Asking for a page again still goes there after the user moved away
+      if (type === "settings" && data?.section && data.revealAt === undefined) {
+        data = { ...data, revealAt: Date.now() };
       }
       const id = type;
       const singletonLabels: Partial<Record<TabType, string>> = {
-        "host-manager": t("nav.hostManager"),
+        "host-manager": t("nav.manage"),
+        settings: t("nav.settings"),
+        plugins: t("nav.plugins"),
       };
       // A plugin tab names itself; promoted rail panels reuse the rail's own
       // label so the two stay in sync.
@@ -1748,6 +1734,29 @@ export function AppShell({
     [t],
   );
 
+  const openSingletonTabRef = useRef(openSingletonTab);
+  openSingletonTabRef.current = openSingletonTab;
+
+  useEffect(() => {
+    const handler = () => openSingletonTabRef.current("plugins");
+    window.addEventListener(OPEN_PLUGINS_EVENT, handler);
+    return () => window.removeEventListener(OPEN_PLUGINS_EVENT, handler);
+  }, []);
+
+  useEffect(() => {
+    const handler = (event: Event) => {
+      const pluginId = (event as CustomEvent<string>).detail;
+      if (typeof pluginId !== "string") return;
+      openSingletonTabRef.current("settings", undefined, undefined, {
+        section: `plugin:${pluginId}`,
+        revealAt: Date.now(),
+      });
+    };
+    window.addEventListener(OPEN_PLUGIN_SETTINGS_EVENT, handler);
+    return () =>
+      window.removeEventListener(OPEN_PLUGIN_SETTINGS_EVENT, handler);
+  }, []);
+
   const getTabCloseLabel = useCallback((tab: Tab) => {
     return tab.customLabel || tab.label || tab.host?.name || String(tab.id);
   }, []);
@@ -1776,6 +1785,8 @@ export function AppShell({
     };
   }, [hasActiveConnection]);
 
+  const doCloseTabRef = useRef<(id: string) => void>(() => {});
+  doCloseTabRef.current = doCloseTab;
   function doCloseTab(id: string) {
     const tabToClose = tabs.find((t) => t.id === id);
     if (tabToClose?.terminalRef?.current?.disconnect) {
@@ -1842,35 +1853,23 @@ export function AppShell({
     else handle.refresh?.();
   }
 
-  function closeTab(id: string) {
-    const tab = tabs.find((t) => t.id === id);
+  async function closeTab(id: string) {
+    const tab = tabsRef.current.find((t) => t.id === id);
+    const guard = tab?.terminalRef?.current?.confirmClose;
+    if (guard && !(await guard())) return;
+    if (!(await canCloseTab(id))) return;
     const confirmEnabled = localStorage.getItem("confirmTabClose") === "true";
     if (tab && confirmEnabled && isActiveConnectionTab(tab)) {
-      const closeLabel = getTabCloseLabel(tab);
-      const toastId = `close-tab-${id}`;
-      toast(t("nav.confirmCloseHost", { host: closeLabel }), {
-        id: toastId,
-        duration: 8000,
-        action: {
-          label: t("nav.close"),
-          onClick: () => {
-            toast.dismiss(toastId);
-            doCloseTab(id);
-          },
-        },
-        cancel: {
-          label: t("nav.cancel"),
-          onClick: () => toast.dismiss(toastId),
-        },
-      });
-      return;
+      const ask = shellConfirmRef.current;
+      const ok = ask
+        ? await ask({
+            title: t("nav.confirmCloseHost", { host: getTabCloseLabel(tab) }),
+            confirmLabel: t("nav.close"),
+          })
+        : true;
+      if (!ok) return;
     }
-
-    if (tab && isSessionTabType(tab.type) && confirmEnabled) {
-      toast.dismiss(`close-tab-${id}`);
-    }
-
-    doCloseTab(id);
+    doCloseTabRef.current(id);
   }
 
   // In a split, closing acts on the focused pane: its session, or the pane
@@ -2266,21 +2265,14 @@ export function AppShell({
     } else {
       // A panel lives in one dock at a time, so the left dock reclaims it.
       if (rightRailView === view) setRightRailView(null);
-      if (view !== railView) setSidebarEditing(false);
-      if (view !== railView) setSettingsFullscreen(false);
       setRailView(view);
       setSidebarOpen(true);
     }
   }
 
   function editHostInManager(host: Host) {
-    setSidebarOpen(true);
-    setRailView("hosts");
-    setTimeout(() => {
-      window.dispatchEvent(
-        new CustomEvent("host-manager:edit-host", { detail: host.id }),
-      );
-    }, 0);
+    requestManage({ kind: "host", hostId: host.id });
+    if (isMobile) setSidebarOpen(false);
   }
 
   const onSidebarMouseDown = useCallback(
@@ -2468,10 +2460,10 @@ export function AppShell({
   }, [tabs, activeTab]);
 
   // Move each tab's stable DOM node to the right container (pane or normal-view).
-  // This is vanilla DOM so React's portal target never changes — changing the portal
+  // This is vanilla DOM so React's portal target never changes. Changing the portal
   // target causes a remount which is exactly what we're trying to avoid.
   // useLayoutEffect (not useEffect) so visibility/display are corrected before
-  // the browser paints — otherwise the previous tab's node can flash on screen
+  // the browser paints, otherwise the previous tab's node can flash on screen
   // for a frame while still visible.
   useLayoutEffect(() => {
     const normalView = normalViewRef.current;
@@ -2611,18 +2603,13 @@ export function AppShell({
       setRailView((prev) => (prev === id ? "hosts" : prev));
       setRightRailView((prev) => (prev === id ? null : prev));
     },
-    openHostEditor: (draft) => {
-      setSidebarOpen(true);
-      setRailView("hosts");
-      setTimeout(
-        () =>
-          window.dispatchEvent(
-            new CustomEvent("host-manager:add-host", { detail: draft }),
-          ),
-        0,
-      );
-    },
+    openHostEditor: (draft) =>
+      requestManage({ kind: "host", hostId: null, draft }),
     saveQuickConnect: saveQuickConnectHost,
+    confirm: (options) =>
+      shellConfirmRef.current
+        ? shellConfirmRef.current(options)
+        : Promise.resolve(false),
   };
 
   // Tabs get one stable bag that forwards to the latest callbacks, so a shell
@@ -2645,6 +2632,7 @@ export function AppShell({
         shellImplRef.current.openHostEditor?.(...args),
       saveQuickConnect: (...args) =>
         shellImplRef.current.saveQuickConnect!(...args),
+      confirm: (...args) => shellImplRef.current.confirm!(...args),
     }),
     [],
   );
@@ -2675,14 +2663,34 @@ export function AppShell({
     setShellHosts(allHosts, hostsLoaded);
   }, [allHosts, hostsLoaded]);
 
+  // Every panel gets its own surface, so its inline views and confirms stay
+  // inside it. Only the left dock widens for them.
+  const panelScope = (
+    view: string,
+    owned: boolean,
+    shown: boolean,
+    children: React.ReactNode,
+    className = "",
+  ) => (
+    <SurfaceScope
+      key={view}
+      kind="panel"
+      onEditingChange={owned ? scopeEditingSetter(view) : undefined}
+      className={`${shown ? "" : "hidden"} ${className}`}
+    >
+      {children}
+    </SurfaceScope>
+  );
+
   const renderSidebarPanels = (railView: RailView, owned = true) => (
     <Suspense fallback={<SidebarPanelFallback />}>
       <div className="flex flex-col flex-1 min-h-0 overflow-hidden">
         {owned && (
           <>
-            <div
-              className={`flex flex-col flex-1 min-h-0 ${railView === "hosts" ? "" : "hidden"}`}
-            >
+            {panelScope(
+              "hosts",
+              owned,
+              railView === "hosts",
               <HostsPanel
                 onOpenTab={(host, type, options) => {
                   connectHost(host, type, options);
@@ -2691,30 +2699,34 @@ export function AppShell({
                 onEditHost={editHostInManager}
                 hostTree={realHostTree ?? undefined}
                 loading={hostsLoading}
-                onEditingChange={setSidebarEditing}
+                onEditingChange={panelEditingSetter("hosts")}
                 active={railView === "hosts"}
-              />
-            </div>
-
-            <div
-              className={`flex flex-col flex-1 min-h-0 ${railView === "credentials" ? "" : "hidden"}`}
-            >
+              />,
+            )}
+            {panelScope(
+              "credentials",
+              owned,
+              railView === "credentials",
               <CredentialsPanel
-                onEditingChange={setSidebarEditing}
+                onEditingChange={panelEditingSetter("credentials")}
                 active={railView === "credentials"}
-              />
-            </div>
+              />,
+            )}
           </>
         )}
 
-        {railView === "quick-connect" && (
-          <QuickConnectPanel
-            onConnect={(host, type) => {
-              openTab(host, type);
-              if (isMobile) setSidebarOpen(false);
-            }}
-          />
-        )}
+        {railView === "quick-connect" &&
+          panelScope(
+            "quick-connect",
+            owned,
+            true,
+            <QuickConnectPanel
+              onConnect={(host, type) => {
+                openTab(host, type);
+                if (isMobile) setSidebarOpen(false);
+              }}
+            />,
+          )}
 
         {registeredPanels.map((panel) => {
           const shown = railView === panel.id;
@@ -2722,24 +2734,26 @@ export function AppShell({
           // copies never fight over the same state.
           if (panel.keepMounted ? !owned : !shown) return null;
           const Panel = panel.component;
-          return (
-            <div
-              key={panel.id}
-              className={`flex flex-col flex-1 min-h-0 overflow-y-auto ${shown ? "" : "hidden"}`}
-            >
+          return panelScope(
+            panel.id,
+            owned,
+            shown,
+            <div className="flex flex-col flex-1 min-h-0 overflow-y-auto">
               <Panel
                 targetTab={terminalTabs.find(
                   (tab) => tab.id === targetTerminalTabId,
                 )}
                 active={shown}
                 shell={panelShell}
-                setEditing={setSidebarEditing}
+                setEditing={
+                  owned ? panelEditingSetter(panel.id) : () => undefined
+                }
                 activeTabType={
                   tabs.find((tab) => tab.id === activeTabId)?.type ?? undefined
                 }
                 placement={owned ? "left" : "right"}
               />
-            </div>
+            </div>,
           );
         })}
 
@@ -2747,80 +2761,63 @@ export function AppShell({
           <PluginViewPlaceholder kind="panel" viewId={railView} compact />
         )}
 
-        {railView === "connections" && (
-          <div className="flex-1 min-h-0 overflow-y-auto">
-            <ConnectionsPanel
-              tabs={tabs}
-              activeTabId={activeTabId}
-              allHosts={allHosts}
-              backgroundTabRecords={backgroundTabRecords}
-              onSwitchToTab={(tabId) => {
-                setActiveTabId(tabId);
-                if (isMobile) setSidebarOpen(false);
-              }}
-              onCloseTab={closeTab}
-              onReopenTab={(record, restoredSessionId) => {
-                const host = record.hostId
-                  ? allHosts.find((h) => h.id === String(record.hostId))
-                  : undefined;
-                if (!host && !getTabType(record.tabType)?.hostless) return;
-                setBackgroundTabRecords((prev) =>
-                  prev.filter((r) => r.id !== record.id),
-                );
-                if (host) {
-                  const effectiveSessionId =
-                    restoredSessionId ?? record.backendSessionId ?? null;
-                  openTab(host, record.tabType as TabType, {
-                    instanceId: record.id,
-                    restoredSessionId: effectiveSessionId,
-                    savedLabel: record.label,
-                  });
-                } else {
-                  openSingletonTab(record.tabType as TabType);
-                }
-                if (isMobile) setSidebarOpen(false);
-              }}
-              onForgetBackground={(recordId) => {
-                setBackgroundTabRecords((prev) =>
-                  prev.filter((r) => r.id !== recordId),
-                );
-              }}
-              onRenameTab={renameTab}
-              onReorderTabs={setTabs}
-            />
-          </div>
-        )}
+        {railView === "connections" &&
+          panelScope(
+            "connections",
+            owned,
+            true,
+            <div className="flex-1 min-h-0 overflow-y-auto">
+              <ConnectionsPanel
+                tabs={tabs}
+                activeTabId={activeTabId}
+                allHosts={allHosts}
+                backgroundTabRecords={backgroundTabRecords}
+                onSwitchToTab={(tabId) => {
+                  setActiveTabId(tabId);
+                  if (isMobile) setSidebarOpen(false);
+                }}
+                onCloseTab={closeTab}
+                onReopenTab={(record, restoredSessionId) => {
+                  const host = record.hostId
+                    ? allHosts.find((h) => h.id === String(record.hostId))
+                    : undefined;
+                  if (!host && !getTabType(record.tabType)?.hostless) return;
+                  setBackgroundTabRecords((prev) =>
+                    prev.filter((r) => r.id !== record.id),
+                  );
+                  if (host) {
+                    const effectiveSessionId =
+                      restoredSessionId ?? record.backendSessionId ?? null;
+                    openTab(host, record.tabType as TabType, {
+                      instanceId: record.id,
+                      restoredSessionId: effectiveSessionId,
+                      savedLabel: record.label,
+                    });
+                  } else {
+                    openSingletonTab(record.tabType as TabType);
+                  }
+                  if (isMobile) setSidebarOpen(false);
+                }}
+                onForgetBackground={(recordId) => {
+                  setBackgroundTabRecords((prev) =>
+                    prev.filter((r) => r.id !== recordId),
+                  );
+                }}
+                onRenameTab={renameTab}
+                onReorderTabs={setTabs}
+              />
+            </div>,
+          )}
 
-        {railView === "user-profile" && (
-          <div className="flex-1 min-h-0 overflow-y-auto">
-            <UserProfilePanel
-              username={username}
-              onLogout={onLogout}
-              userPrefs={userPrefs}
-              onPrefsChange={(updates) =>
-                setUserPrefs((current) => ({ ...current, ...updates }))
-              }
-            />
-          </div>
-        )}
-
-        {railView === "sync" && (
-          <div className="flex-1 min-h-0 overflow-y-auto">
-            <SyncPanel />
-          </div>
-        )}
-
-        {railView === "admin-settings" && showAdminUI && (
-          <div className="flex flex-col flex-1 min-h-0 overflow-y-auto">
-            <AdminSettingsPanel
-              onEditingChange={setSidebarEditing}
-              onOpenHostTab={(host) => {
-                connectHost(host);
-                if (isMobile) setSidebarOpen(false);
-              }}
-            />
-          </div>
-        )}
+        {railView === "sync" &&
+          panelScope(
+            "sync",
+            owned,
+            true,
+            <div className="flex-1 min-h-0 overflow-y-auto">
+              <SyncPanel />
+            </div>,
+          )}
       </div>
     </Suspense>
   );
@@ -2904,107 +2901,32 @@ export function AppShell({
 
   const sidebarPanelContent = renderSidebarPanels(railView);
 
-  // Sidebar header — shared
-  const sidebarHeader = (
-    <div className="flex flex-row items-center border-b border-border h-12.5 shrink-0">
-      <span className="flex-1 min-w-0 whitespace-nowrap text-base font-bold tracking-tight text-foreground px-3">
-        {sidebarTitle(railView)}
-      </span>
-      {!isMobile && promotableIds().includes(railView) && (
-        <>
-          <Separator orientation="vertical" />
-          <Button
-            variant="ghost"
-            size="icon"
-            className="h-full w-12.5 border-y-0 border-r-0 border-border rounded-none text-muted-foreground hover:text-foreground"
-            title={t("nav.openAsTab")}
-            aria-label={t("nav.openAsTab")}
-            onClick={() => openSingletonTab(railView as TabType)}
-          >
-            <SquareArrowOutUpRight className="size-3.5" />
-          </Button>
-        </>
-      )}
-      {!isMobile && rightDockableIds().includes(railView) && (
-        <>
-          <Separator orientation="vertical" />
-          <Button
-            variant="ghost"
-            size="icon"
-            className="h-full w-12.5 border-y-0 border-r-0 border-border rounded-none text-muted-foreground hover:text-foreground"
-            title={t("nav.openInRightDock")}
-            aria-label={t("nav.openInRightDock")}
-            onClick={() => openInRightDock(railView)}
-          >
-            <PanelRight className="size-3.5" />
-          </Button>
-        </>
-      )}
-      {!isMobile && (
-        <>
-          <Separator orientation="vertical" />
-          <Button
-            variant="ghost"
-            size="icon"
-            className="h-full w-12.5 border-y-0 border-border rounded-none text-muted-foreground hover:text-foreground"
-            title={t("nav.resetSidebarWidth")}
-            onClick={() => setSidebarWidth(291)}
-          >
-            <RotateCcw className="size-3.5" />
-          </Button>
-        </>
-      )}
-      {isSettingsView && (
-        <>
-          <Separator orientation="vertical" />
-          <Button
-            variant="ghost"
-            size="icon"
-            className="h-full w-12.5 rounded-none text-muted-foreground hover:text-foreground"
-            title={
-              settingsFullscreen
-                ? t("newUi.sidebar.userProfile.exitFullscreenSettings")
-                : t("newUi.sidebar.userProfile.openFullscreenSettings")
-            }
-            aria-label={
-              settingsFullscreen
-                ? t("newUi.sidebar.userProfile.exitFullscreenSettings")
-                : t("newUi.sidebar.userProfile.openFullscreenSettings")
-            }
-            onClick={() => setSettingsFullscreen((value) => !value)}
-          >
-            {settingsFullscreen ? (
-              <Minimize2 className="size-4" />
-            ) : (
-              <Maximize2 className="size-4" />
-            )}
-          </Button>
-        </>
-      )}
-      <Separator orientation="vertical" />
-      <Button
-        variant="ghost"
-        size="icon"
-        className="h-full w-12.5 rounded-none text-muted-foreground hover:text-foreground"
-        title={t("nav.collapseSidebar")}
-        onClick={() => {
-          setSettingsFullscreen(false);
-          setSidebarOpen(false);
-        }}
-      >
-        <ChevronLeft className="size-4" />
-      </Button>
-    </div>
-  );
+  const settingsTabProps = {
+    username,
+    isAdmin: showAdminUI,
+    onLogout,
+    userPrefs,
+    onPrefsChange: (updates: Partial<UserPreferences>) =>
+      setUserPrefs((current) => ({ ...current, ...updates })),
+    onOpenHostTab: (host: Host) => connectHost(host),
+  };
 
-  const sidebarHint = !isMobile && (
-    <MultiPanelHint
-      canPromote={promotableIds().includes(railView)}
-      canRightDock={rightDockableIds().includes(railView)}
-      onOpenAsTab={() => openSingletonTab(railView as TabType)}
-      onOpenInRightDock={() => openInRightDock(railView)}
-    />
-  );
+  const leftEditing: EditingWidth = (() => {
+    const values = [panelEditing[railView], scopeEditing[railView]];
+    if (values.includes("wide")) return "wide";
+    return values.some(Boolean);
+  })();
+
+  const dockProps = (view: RailView) => ({
+    title: sidebarTitle(view),
+    onOpenAsTab: isMobile
+      ? undefined
+      : view === "hosts" || view === "credentials"
+        ? () => requestManage({ kind: "browse", mode: view as ManageMode })
+        : promotableIds().includes(view)
+          ? () => openSingletonTab(view as TabType)
+          : undefined,
+  });
 
   return (
     <ServerStatusProvider isAuthenticated={!!username}>
@@ -3013,45 +2935,48 @@ export function AppShell({
         style={{ height: "100dvh" }}
       >
         <div className="flex flex-1 min-h-0">
-          {/* Skinny icon rail — desktop only, hidden on mobile */}
-          {!settingsFullscreen && (
-            <AppRail
-              railView={railView}
-              sidebarOpen={sidebarOpen}
-              username={username}
-              isAdmin={showAdminUI}
-              pluginsSettled={pluginsSettled}
-              onRailClick={handleRailClick}
-              onOpenTab={openSingletonTab}
-              onOpenInRightDock={openInRightDock}
-              onLogout={onLogout}
-            />
-          )}
+          {/* Skinny icon rail, desktop only */}
+          <AppRail
+            railView={railView}
+            sidebarOpen={sidebarOpen}
+            username={username}
+            isAdmin={showAdminUI}
+            pluginsSettled={pluginsSettled}
+            onRailClick={handleRailClick}
+            onOpenTab={openSingletonTab}
+            onOpenInRightDock={openInRightDock}
+            onOpenSettings={() => openSingletonTab("settings")}
+            onOpenNavigationSettings={() =>
+              openSingletonTab("settings", undefined, undefined, {
+                section: "appearance",
+                reveal: "settings-navigation",
+                revealAt: Date.now(),
+              })
+            }
+            onOpenPalette={() => setCommandPaletteOpen(true)}
+            onLogout={onLogout}
+          />
 
           {/* Desktop: inline resizable sidebar */}
           {!isMobile && (
-            <div
-              className={`${settingsFullscreen ? "fixed inset-0 z-50" : "relative"} flex flex-col min-h-0 bg-sidebar shrink-0 overflow-hidden ${sidebarOpen ? `border-r transition-colors ${sidebarDragging ? "border-accent-brand/60" : "border-border"}` : ""}`}
-              style={{
-                width: settingsFullscreen
-                  ? "100vw"
-                  : sidebarOpen
-                    ? rem(sidebarEditing ? 560 : sidebarWidth)
-                    : 0,
-                transition: sidebarDragging ? "none" : "width 0.2s",
-              }}
+            <DockPanel
+              side="left"
+              {...dockProps(railView)}
+              open={sidebarOpen}
+              width={sidebarWidth}
+              editing={leftEditing}
+              dragging={sidebarDragging}
+              onResizeStart={onSidebarMouseDown}
+              onClose={() => setSidebarOpen(false)}
+              onMoveToRightDock={
+                rightDockableIds().includes(railView)
+                  ? () => openInRightDock(railView)
+                  : undefined
+              }
+              onResetWidth={() => setSidebarWidth(DOCK_DEFAULT_WIDTH)}
             >
-              {sidebarHeader}
-              {sidebarHint}
               {sidebarPanelContent}
-
-              {sidebarOpen && !sidebarEditing && !settingsFullscreen && (
-                <div
-                  onMouseDown={onSidebarMouseDown}
-                  className={`absolute right-0 top-0 bottom-0 w-1 cursor-col-resize z-30 transition-colors ${sidebarDragging ? "bg-accent-brand/60" : "hover:bg-accent-brand/40"}`}
-                />
-              )}
-            </div>
+            </DockPanel>
           )}
 
           {/* Mobile: sidebar as overlay sheet */}
@@ -3060,150 +2985,152 @@ export function AppShell({
               <SheetContent
                 side="left"
                 showCloseButton={false}
-                className={`p-0 flex flex-col min-h-0 max-w-full bg-sidebar border-r border-border gap-0 ${settingsFullscreen ? "w-screen" : "w-[min(85vw,360px)]"}`}
+                className={`p-0 flex flex-col min-h-0 max-w-full bg-sidebar border-r border-border gap-0 ${leftEditing ? "w-screen" : "w-[min(85vw,360px)]"}`}
                 style={{ height: "100dvh" }}
               >
-                {sidebarHeader}
-                {sidebarPanelContent}
+                <DockPanel
+                  side="left"
+                  {...dockProps(railView)}
+                  open
+                  fill
+                  width={sidebarWidth}
+                  onClose={() => setSidebarOpen(false)}
+                >
+                  {sidebarPanelContent}
+                </DockPanel>
               </SheetContent>
             </Sheet>
           )}
 
           {/* Main content area */}
           <div
-            inert={settingsFullscreen ? true : undefined}
-            aria-hidden={settingsFullscreen || undefined}
             className={`relative flex flex-col flex-1 min-w-0 overflow-hidden transition-[padding] duration-200 ${!isMobile && !sidebarOpen ? "pl-6" : ""}`}
           >
             {!isMobile && !sidebarOpen && (
-              <button
-                onClick={() => setSidebarOpen(true)}
-                title={t("nav.openSidebar")}
-                className="absolute left-0 top-0 bottom-0 z-20 flex items-center justify-center w-6 bg-sidebar border-r border-border text-muted-foreground hover:text-accent-brand hover:bg-accent-brand/5 transition-colors"
-              >
-                <ChevronRight className="size-3.5" />
-              </button>
+              <DockReopenStrip onClick={() => setSidebarOpen(true)} />
             )}
-            <div className="flex flex-col flex-1 min-w-0 min-h-0 overflow-hidden">
-              <TabBar
-                tabs={topLevelTabs}
-                activeTabId={activeTabId}
-                splits={summarizeSplits(tabs, MAX_PANES)}
-                activeSplitFull={
-                  activeSplit ? !canAddPane(activeSplit.split) : false
-                }
-                onSetActiveTab={setActiveTabId}
-                onCloseTab={closeTab}
-                onRefreshTab={refreshTab}
-                onReconnectDisconnected={reconnectAllDisconnected}
-                onReorderTabs={reorderTopLevelTabs}
-                onSplitAction={handleTabSplitAction}
-                onRenameTab={renameTab}
-                isAppFullscreen={isAppFullscreen}
-                onToggleAppFullscreen={toggleAppFullscreen}
-                rightDockOpen={rightRailView !== null}
-                onToggleRightDock={isMobile ? undefined : toggleRightDock}
-                showTabNumbers={showTabNumbers}
-              />
-              <div
-                ref={mainAreaRef}
-                className="relative flex flex-col flex-1 min-h-0 overflow-hidden"
-              >
-                {activeSplit && (
-                  <div className="motion-workspace-layout absolute inset-0 flex flex-col">
-                    <SplitView
-                      splitTab={activeSplit}
-                      tabs={tabs}
-                      isMobile={isMobile}
-                      actions={splitViewActions(activeSplit.id)}
-                      onPaneContentRef={onPaneContentRef}
-                      renderEmptyPane={(paneId, paneIndex) =>
-                        renderEmptyPane(activeSplit.id, paneId, paneIndex)
-                      }
-                    />
-                  </div>
-                )}
-                <SplitDropOverlay containerRef={mainAreaRef} />
+            <SurfaceScope kind="tab" className="overflow-hidden">
+              <ShellConfirmCapture confirmRef={shellConfirmRef} />
+              <div className="flex flex-col flex-1 min-w-0 min-h-0 overflow-hidden">
+                <TabBar
+                  tabs={topLevelTabs}
+                  activeTabId={activeTabId}
+                  splits={summarizeSplits(tabs, MAX_PANES)}
+                  activeSplitFull={
+                    activeSplit ? !canAddPane(activeSplit.split) : false
+                  }
+                  onSetActiveTab={setActiveTabId}
+                  onCloseTab={closeTab}
+                  onRefreshTab={refreshTab}
+                  onReconnectDisconnected={reconnectAllDisconnected}
+                  onReorderTabs={reorderTopLevelTabs}
+                  onSplitAction={handleTabSplitAction}
+                  onRenameTab={renameTab}
+                  isAppFullscreen={isAppFullscreen}
+                  onToggleAppFullscreen={toggleAppFullscreen}
+                  rightDockOpen={rightRailView !== null}
+                  onToggleRightDock={isMobile ? undefined : toggleRightDock}
+                  showTabNumbers={showTabNumbers}
+                />
+                <div
+                  ref={mainAreaRef}
+                  className="relative flex flex-col flex-1 min-h-0 overflow-hidden"
+                >
+                  {activeSplit && (
+                    <div className="motion-workspace-layout absolute inset-0 flex flex-col">
+                      <SplitView
+                        splitTab={activeSplit}
+                        tabs={tabs}
+                        isMobile={isMobile}
+                        actions={splitViewActions(activeSplit.id)}
+                        onPaneContentRef={onPaneContentRef}
+                        renderEmptyPane={(paneId, paneIndex) =>
+                          renderEmptyPane(activeSplit.id, paneId, paneIndex)
+                        }
+                      />
+                    </div>
+                  )}
+                  <SplitDropOverlay containerRef={mainAreaRef} />
 
-                {/* Normal-view container. Tab nodes are appended here (or to pane elements)
+                  {/* Normal-view container. Tab nodes are appended here (or to pane elements)
                   by the DOM-placement effect above. React portals each tab's content
                   into its stable per-tab node so the component is never remounted.
                   Hidden while a split is active. */}
-                <div
-                  ref={normalViewRef}
-                  className="absolute inset-0"
-                  style={{ display: activeSplit ? "none" : undefined }}
-                >
-                  {tabsByPortalOrder.map((tab) => {
-                    const tabNode = getTabNode(
-                      tab.id,
-                      !!getTabType(tab.type)?.ownBackground,
-                    );
-                    const paneId = paneIdByTabId.get(tab.id);
-                    const inPane = !!paneId;
-                    const activeInline = !inPane && tab.id === activeTabId;
-                    const isFocusedPane = inPane
-                      ? paneId === focusedPaneId
-                      : activeInline;
-                    return createPortal(
-                      renderTabContent(tab, {
-                        shell: shellCallbacks,
-                        panelTargetTab: terminalTabs.find(
-                          (t) => t.id === targetTerminalTabId,
-                        ),
-                        isVisible: inPane || activeInline,
-                        isFocusedPane,
-                        inSplit: inPane,
-                      }),
-                      tabNode,
-                      tab.id,
-                    );
-                  })}
+                  <div
+                    ref={normalViewRef}
+                    className="absolute inset-0"
+                    style={{ display: activeSplit ? "none" : undefined }}
+                  >
+                    {tabsByPortalOrder.map((tab) => {
+                      const tabNode = getTabNode(
+                        tab.id,
+                        !!getTabType(tab.type)?.ownBackground,
+                      );
+                      const paneId = paneIdByTabId.get(tab.id);
+                      const inPane = !!paneId;
+                      const activeInline = !inPane && tab.id === activeTabId;
+                      const isFocusedPane = inPane
+                        ? paneId === focusedPaneId
+                        : activeInline;
+                      return createPortal(
+                        <SurfaceScope
+                          kind="tab"
+                          className="h-full w-full"
+                          onClose={
+                            tab.id === "dashboard"
+                              ? undefined
+                              : () => closeTab(tab.id)
+                          }
+                        >
+                          {renderTabContent(tab, {
+                            shell: shellCallbacks,
+                            settings: settingsTabProps,
+                            panelTargetTab: terminalTabs.find(
+                              (t) => t.id === targetTerminalTabId,
+                            ),
+                            isVisible: inPane || activeInline,
+                            isFocusedPane,
+                            inSplit: inPane,
+                          })}
+                        </SurfaceScope>,
+                        tabNode,
+                        tab.id,
+                      );
+                    })}
+                  </div>
                 </div>
               </div>
-            </div>
+            </SurfaceScope>
 
-            {/* Bottom nav bar — mobile only */}
-            <MobileBottomBar
-              railView={railView}
-              sidebarOpen={sidebarOpen}
-              onRailClick={handleRailClick}
-            />
+            {/* Bottom nav bar, mobile only. The desktop app keeps the rail. */}
+            {!isElectron() && (
+              <MobileBar
+                railView={railView}
+                sidebarOpen={sidebarOpen}
+                username={username}
+                onRailClick={handleRailClick}
+                onOpenTab={(type) => openSingletonTab(type)}
+                onOpenSettings={() => openSingletonTab("settings")}
+                onOpenPalette={() => setCommandPaletteOpen(true)}
+                onLogout={() => onLogout({ manual: true })}
+              />
+            )}
           </div>
 
-          {/* Right dock — desktop only, holds a second reference panel */}
-          {!isMobile && rightRailView && !settingsFullscreen && (
-            <div
-              className={`relative flex flex-col min-h-0 bg-sidebar shrink-0 overflow-hidden border-l transition-colors ${rightSidebarDragging ? "border-accent-brand/60" : "border-border"}`}
-              style={{
-                width: rem(rightSidebarWidth),
-                transition: rightSidebarDragging ? "none" : "width 0.2s",
-              }}
+          {/* Right dock, desktop only, holds a second reference panel */}
+          {!isMobile && rightRailView && (
+            <DockPanel
+              side="right"
+              {...dockProps(rightRailView)}
+              open
+              width={rightSidebarWidth}
+              dragging={rightSidebarDragging}
+              onResizeStart={onRightSidebarMouseDown}
+              onClose={() => setRightRailView(null)}
+              onResetWidth={() => setRightSidebarWidth(DOCK_DEFAULT_WIDTH)}
             >
-              <div className="flex flex-row items-center border-b border-border h-12.5 shrink-0">
-                <span className="flex-1 min-w-0 whitespace-nowrap text-base font-bold tracking-tight text-foreground px-3">
-                  {sidebarTitle(rightRailView)}
-                </span>
-                <Separator orientation="vertical" />
-                <Button
-                  variant="ghost"
-                  size="icon"
-                  className="h-full w-12.5 rounded-none text-muted-foreground hover:text-foreground"
-                  title={t("nav.closeRightDock")}
-                  aria-label={t("nav.closeRightDock")}
-                  onClick={() => setRightRailView(null)}
-                >
-                  <ChevronRight className="size-4" />
-                </Button>
-              </div>
-
               {renderSidebarPanels(rightRailView, false)}
-
-              <div
-                onMouseDown={onRightSidebarMouseDown}
-                className={`absolute left-0 top-0 bottom-0 w-1 cursor-col-resize z-30 transition-colors ${rightSidebarDragging ? "bg-accent-brand/60" : "hover:bg-accent-brand/40"}`}
-              />
-            </div>
+            </DockPanel>
           )}
         </div>
       </div>
@@ -3219,6 +3146,15 @@ export function AppShell({
             terminalTabs={terminalTabs}
             activeTabId={activeTabId}
             onOpenPanel={(view) => handleRailClick(view as RailView)}
+            onEditHost={editHostInManager}
+            onOpenSettings={(section) =>
+              openSingletonTab(
+                "settings",
+                undefined,
+                undefined,
+                section ? { section } : undefined,
+              )
+            }
             onOpenTab={(type, label, pendingEvent) => {
               if (
                 [
@@ -3226,6 +3162,7 @@ export function AppShell({
                   "host-manager",
                   "user-profile",
                   "admin-settings",
+                  "plugins",
                 ].includes(type)
               ) {
                 openSingletonTab(type, pendingEvent);
@@ -3246,15 +3183,7 @@ export function AppShell({
           />
         </Suspense>
       )}
-      <OnboardingDialog
-        open={showOnboarding}
-        context={{}}
-        onClose={() => setShowOnboarding(false)}
-      />
-      <DonationReminderModal
-        open={showDonationModal && !showOnboarding}
-        onDismiss={handleDismissDonationModal}
-      />
+      <OnboardingHost />
     </ServerStatusProvider>
   );
 }
diff --git a/src/ui/api/auth-methods-api.ts b/src/ui/api/auth-methods-api.ts
index d1d888179..227de3673 100644
--- a/src/ui/api/auth-methods-api.ts
+++ b/src/ui/api/auth-methods-api.ts
@@ -2,6 +2,7 @@ import {
   authApi,
   handleApiError,
   markUserAuthenticated,
+  TRUST_TOKEN_KEY,
   type AuthResponse,
 } from "@/main-axios";
 
@@ -26,8 +27,11 @@ export type LoginResponse = AuthResponse & {
   userId?: string;
 };
 
-function remember(data: LoginResponse): LoginResponse {
+function remember(
+  data: LoginResponse & { trustToken?: string },
+): LoginResponse {
   if (data?.token) localStorage.setItem("jwt", data.token);
+  if (data?.trustToken) localStorage.setItem(TRUST_TOKEN_KEY, data.trustToken);
   if (data?.success && !data.requires_totp) markUserAuthenticated();
   return data;
 }
diff --git a/src/ui/api/plugins-api.ts b/src/ui/api/plugins-api.ts
index 4a778bdc9..555c3c1a5 100644
--- a/src/ui/api/plugins-api.ts
+++ b/src/ui/api/plugins-api.ts
@@ -1,4 +1,12 @@
 import { rbacApi } from "@/main-axios";
+import type { ChoiceAdjustment, PluginChoice } from "@/types/plugin-onboarding";
+import type {
+  ChangelogRelease,
+  ReleaseNotes,
+} from "@termix-ssh/plugin-sdk/changelog";
+import type { PluginEnvVar } from "@termix-ssh/plugin-sdk/docs";
+
+export type { PluginChoice };
 
 export interface PluginTabContribution {
   id: string;
@@ -84,7 +92,7 @@ export interface PluginContributions {
 export {
   isRedactedSecret,
   type RedactedSecret,
-} from "@termix/plugin-sdk/settings";
+} from "@termix-ssh/plugin-sdk/settings";
 
 export type PluginSettingsValues = Record<string, unknown>;
 
@@ -237,9 +245,361 @@ export interface PluginSummary {
   lastError?: string | null;
   /** Paths a running plugin serves without login. Admins only. */
   publicRoutes?: { http: string[]; ws: string[] };
+  registryId?: string | null;
+  autoUpdate?: boolean;
+  pinnedVersion?: string | null;
+  channel?: PluginChannel;
+  description?: string;
+  author?: string;
+  repository?: string;
+  /** A YouTube video id from the manifest. Admins only. */
+  videoId?: string;
+  /** What the plugin does, from the manifest. Admins only. */
+  features?: string[];
+  /** https docs link from the manifest. */
+  docs?: string;
+  /** Environment variables the plugin reads. Admins only. */
+  env?: PluginEnvVar[];
+  signedBy?: string | null;
 }
 
 export async function getPlugins(): Promise<PluginSummary[]> {
   const response = await rbacApi.get("/plugins");
   return Array.isArray(response.data) ? response.data : [];
 }
+
+/** Fired after any change to installed plugins; the loader resyncs on it. */
+export const PLUGINS_CHANGED_EVENT = "termix:plugins-changed";
+
+function announcePluginsChanged(): void {
+  window.dispatchEvent(new CustomEvent(PLUGINS_CHANGED_EVENT));
+}
+
+export type PluginChannel = "stable" | "beta";
+
+export interface RegistryPluginVersion {
+  version: string;
+  /** A beta, offered only to plugins on the beta channel. */
+  prerelease?: boolean;
+  compatible: boolean;
+  capabilities: string[];
+  publishedAt?: string;
+  releaseNotesUrl?: string;
+  notes?: ReleaseNotes;
+  size: number;
+}
+
+export interface RegistryPluginEntry {
+  id: string;
+  name: string;
+  description: string;
+  author: string;
+  category: string;
+  repository?: string;
+  icon?: string;
+  videoId?: string;
+  features?: string[];
+  docs?: string;
+  versions: RegistryPluginVersion[];
+  /** Newest release on the plugin's channel. */
+  latestVersion: string | null;
+  /** Newest beta, when one is newer than stable. */
+  latestBeta?: string | null;
+  channel?: PluginChannel;
+  installed: boolean;
+  installedVersion: string | null;
+  updateAvailable: boolean;
+  addedCapabilities: string[];
+  pinnedVersion: string | null;
+  autoUpdate: boolean;
+  bundled: boolean;
+  /** Active installs when known, release downloads otherwise. */
+  installCount: number | null;
+  installCountSource: string | null;
+}
+
+export interface RegistryListing {
+  registry: {
+    id: string;
+    url: string;
+    lastCheckedAt: string | null;
+    error: string | null;
+  };
+  managedByServer: boolean;
+  plugins: RegistryPluginEntry[];
+}
+
+export interface PluginStateChange {
+  id: string;
+  enabled: boolean;
+  enable: string[];
+  disable: string[];
+  missing: string[];
+  state?: string;
+}
+
+export interface PluginDataSummary {
+  id: string;
+  tables: Array<{ name: string; rows: number | null }>;
+  kvKeys: number;
+  settings: { admin: number; user: number; host: number; secret: number };
+  migrations: Array<{ id: string; appliedAt: string | null }>;
+  grants: Array<{
+    capability: string;
+    source: string;
+    grantedAt: string | null;
+  }>;
+  filesBytes: number;
+}
+
+export interface UpdateAllResult {
+  updated: Array<{ id: string; version: string }>;
+  needsReview: Array<{ id: string; capabilities: string[] }>;
+  failed: Array<{ id: string; error: string }>;
+}
+
+const pluginPath = (pluginId: string) =>
+  `/plugins/${encodeURIComponent(pluginId)}`;
+
+export async function getPluginRegistry(
+  refresh = false,
+): Promise<RegistryListing> {
+  const response = await rbacApi.get("/plugins/registry", {
+    params: refresh ? { refresh: 1 } : undefined,
+  });
+  return response.data;
+}
+
+/** `capabilities` is exactly what the consent prompt showed. */
+export async function installPlugin(
+  pluginId: string,
+  options: { version?: string; capabilities: string[] },
+): Promise<{ id: string; version: string; state: string }> {
+  try {
+    const response = await rbacApi.post(
+      `${pluginPath(pluginId)}/install`,
+      options,
+    );
+    return response.data;
+  } finally {
+    announcePluginsChanged();
+  }
+}
+
+export async function updatePlugin(
+  pluginId: string,
+  options: {
+    version?: string;
+    acceptCapabilities?: boolean;
+    capabilities?: string[];
+  } = {},
+): Promise<{ id: string; version: string; state: string }> {
+  try {
+    const response = await rbacApi.post(
+      `${pluginPath(pluginId)}/update`,
+      options,
+    );
+    return response.data;
+  } finally {
+    announcePluginsChanged();
+  }
+}
+
+export async function updateAllPlugins(): Promise<UpdateAllResult> {
+  try {
+    const response = await rbacApi.post("/plugins/update-all");
+    return response.data;
+  } finally {
+    announcePluginsChanged();
+  }
+}
+
+export async function uninstallPlugin(pluginId: string): Promise<void> {
+  try {
+    await rbacApi.delete(pluginPath(pluginId));
+  } finally {
+    announcePluginsChanged();
+  }
+}
+
+export async function previewPluginState(
+  pluginId: string,
+  enabled: boolean,
+): Promise<PluginStateChange> {
+  const response = await rbacApi.patch(
+    `${pluginPath(pluginId)}/state`,
+    { enabled },
+    { params: { dryRun: 1 } },
+  );
+  return response.data;
+}
+
+export async function setPluginState(
+  pluginId: string,
+  enabled: boolean,
+): Promise<PluginStateChange> {
+  try {
+    const response = await rbacApi.patch(`${pluginPath(pluginId)}/state`, {
+      enabled,
+    });
+    return response.data;
+  } finally {
+    announcePluginsChanged();
+  }
+}
+
+export async function retryPlugin(pluginId: string): Promise<void> {
+  try {
+    await rbacApi.post(`${pluginPath(pluginId)}/retry`);
+  } finally {
+    announcePluginsChanged();
+  }
+}
+
+export async function setPluginOptions(
+  pluginId: string,
+  options: { autoUpdate?: boolean; pinned?: boolean; channel?: PluginChannel },
+): Promise<{
+  autoUpdate: boolean;
+  pinnedVersion: string | null;
+  channel: PluginChannel;
+}> {
+  const response = await rbacApi.patch(
+    `${pluginPath(pluginId)}/options`,
+    options,
+  );
+  return response.data;
+}
+
+export async function setAllPluginChannels(
+  channel: PluginChannel,
+): Promise<{ changed: string[] }> {
+  const response = await rbacApi.post("/plugins/channel", { channel });
+  return response.data;
+}
+
+export async function getPluginData(
+  pluginId: string,
+): Promise<PluginDataSummary> {
+  const response = await rbacApi.get(`${pluginPath(pluginId)}/data`);
+  return response.data;
+}
+
+export async function getPluginChangelog(
+  pluginId: string,
+): Promise<ChangelogRelease[]> {
+  const response = await rbacApi.get(`${pluginPath(pluginId)}/changelog`);
+  return response.data?.releases ?? [];
+}
+
+export async function deletePluginData(pluginId: string): Promise<void> {
+  try {
+    await rbacApi.delete(`${pluginPath(pluginId)}/data`);
+  } finally {
+    announcePluginsChanged();
+  }
+}
+
+export interface DeveloperModeState {
+  enabled: boolean;
+  /** TERMIX_REQUIRE_SIGNED_PLUGINS blocks file installs even in developer mode. */
+  signedOnly: boolean;
+}
+
+export async function getDeveloperMode(): Promise<DeveloperModeState> {
+  const response = await rbacApi.get("/plugins/developer-mode");
+  return response.data;
+}
+
+/** Fired after developer mode changes; detail is the new value. */
+export const DEVELOPER_MODE_CHANGED_EVENT = "termix:plugin-developer-mode";
+
+export async function setDeveloperMode(enabled: boolean): Promise<void> {
+  await rbacApi.put("/plugins/developer-mode", { enabled });
+  window.dispatchEvent(
+    new CustomEvent(DEVELOPER_MODE_CHANGED_EVENT, { detail: enabled }),
+  );
+}
+
+export interface PluginUploadPreview {
+  token: string;
+  id: string;
+  name: string;
+  version: string;
+  description: string;
+  author: string;
+  features?: string[];
+  capabilities: string[];
+  replaces: string | null;
+}
+
+export async function uploadPlugin(file: Blob): Promise<PluginUploadPreview> {
+  const response = await rbacApi.post("/plugins/upload", file, {
+    headers: { "Content-Type": "application/octet-stream" },
+  });
+  return response.data;
+}
+
+export async function installUploadedPlugin(
+  token: string,
+  capabilities: string[],
+): Promise<{ id: string; version: string; state: string }> {
+  try {
+    const response = await rbacApi.post(
+      `/plugins/upload/${encodeURIComponent(token)}/install`,
+      { capabilities },
+    );
+    return response.data;
+  } finally {
+    announcePluginsChanged();
+  }
+}
+
+export interface OnboardingPluginInfo {
+  id: string;
+  name: string;
+  description: string;
+  icon: string | null;
+  category: string;
+  version: string;
+  source: "bundled" | "user";
+  state: string;
+  dependencies: string[];
+  recommended: boolean;
+  consent: boolean;
+}
+
+export interface OnboardingPluginList {
+  pending: boolean;
+  /** On an upgrade the picker starts from what is on, not the defaults. */
+  reason: "fresh" | "upgrade" | null;
+  managedByLinkedServer: boolean;
+  plugins: OnboardingPluginInfo[];
+}
+
+export interface OnboardingApplyResult {
+  resolved: Record<string, PluginChoice>;
+  adjustments: ChoiceAdjustment[];
+  enabled: string[];
+  disabled: string[];
+  removed: string[];
+  failed: { id: string; error: string; code?: string }[];
+}
+
+export async function getOnboardingPlugins(): Promise<OnboardingPluginList> {
+  const response = await rbacApi.get("/plugins/onboarding");
+  return response.data;
+}
+
+export async function applyOnboardingPlugins(
+  choices: Record<string, PluginChoice>,
+): Promise<OnboardingApplyResult> {
+  try {
+    const response = await rbacApi.post("/plugins/onboarding/apply", {
+      choices,
+    });
+    return response.data;
+  } finally {
+    announcePluginsChanged();
+  }
+}
diff --git a/src/ui/api/rbac-api.ts b/src/ui/api/rbac-api.ts
index 37460c1cc..af2bce016 100644
--- a/src/ui/api/rbac-api.ts
+++ b/src/ui/api/rbac-api.ts
@@ -1,3 +1,4 @@
+import i18n from "i18next";
 import {
   handleApiError,
   rbacApi,
@@ -16,7 +17,7 @@ async function getSharingTarget(hostId: number, syncId?: string | null) {
   if (!api || !syncId) return { api: rbacApi, hostId };
   const remoteHostId = await resolveRemoteHostId(syncId);
   if (remoteHostId === null) {
-    throw new Error("The synced host does not exist on the remote server");
+    throw new Error(i18n.t("errors.syncedHostMissing"));
   }
   return { api, hostId: remoteHostId };
 }
@@ -27,7 +28,7 @@ async function getSharedCopyTarget(hostId: number, syncId?: string | null) {
   const api = await getConnectedRemoteApi();
   const remoteHostId = api ? await resolveRemoteHostId(syncId) : null;
   if (!api || remoteHostId === null) {
-    throw new Error("The linked server is not reachable");
+    throw new Error(i18n.t("errors.linkedServerUnreachable"));
   }
   return { api, hostId: remoteHostId };
 }
diff --git a/src/ui/api/settings-api.ts b/src/ui/api/settings-api.ts
index d7020d052..414273af6 100644
--- a/src/ui/api/settings-api.ts
+++ b/src/ui/api/settings-api.ts
@@ -43,9 +43,6 @@ export async function updateSessionTimeout(
   }
 }
 
-// Tailscale settings/device API wrappers moved to
-// plugins/tailscale/src/frontend/tailscale-api.ts.
-
 // ============================================================================
 // BRANDING SETTINGS
 // ============================================================================
diff --git a/src/ui/api/system-status-api.ts b/src/ui/api/system-status-api.ts
index 10ee66ee1..7d93db8b1 100644
--- a/src/ui/api/system-status-api.ts
+++ b/src/ui/api/system-status-api.ts
@@ -42,6 +42,7 @@ export async function getReleasesRSS(
 
 export interface VersionInfo {
   status?: "up_to_date" | "requires_update" | "beta" | "unknown";
+  channel?: "stable" | "beta";
   /** Same value as remoteVersion; the endpoint sends both. */
   version?: string;
   localVersion?: string;
@@ -81,6 +82,46 @@ export async function getVersionInfo(checkRemote = true): Promise<VersionInfo> {
   }
 }
 
+export type UpdateChannel = "stable" | "beta";
+
+export interface UpdateChannelState {
+  channel: UpdateChannel;
+  /** The admin's choice; a beta build reports beta whatever it is. */
+  stored: UpdateChannel;
+  runningBeta: boolean;
+}
+
+export async function getUpdateChannel(): Promise<UpdateChannelState> {
+  const response = await authApi.get("/version/channel");
+  return response.data;
+}
+
+export async function setUpdateChannel(
+  channel: UpdateChannel,
+): Promise<UpdateChannelState> {
+  const response = await authApi.put("/version/channel", { channel });
+  return response.data;
+}
+
+export interface ReleaseInfo {
+  version: string;
+  tagName: string;
+  name: string;
+  url: string;
+  publishedAt: string;
+  prerelease: boolean;
+  notes: string;
+}
+
+export async function getChannelReleases(): Promise<{
+  localVersion: string | null;
+  stable: ReleaseInfo | null;
+  beta: ReleaseInfo | null;
+}> {
+  const response = await authApi.get("/version/releases");
+  return response.data;
+}
+
 // ============================================================================
 // DATABASE HEALTH
 // ============================================================================
diff --git a/src/ui/auth/Auth.tsx b/src/ui/auth/Auth.tsx
index 7d6557daa..7600cc496 100644
--- a/src/ui/auth/Auth.tsx
+++ b/src/ui/auth/Auth.tsx
@@ -1,4 +1,9 @@
 /* eslint-disable react-refresh/only-export-components */
+import {
+  isInElectronWebView,
+  isInMobileWebView,
+  type EmbeddedFrameWindow,
+} from "@/lib/embedded-frame";
 import { useState, useEffect, useCallback, useRef } from "react";
 import { Button } from "@/components/button";
 import { Input } from "@/components/input";
@@ -48,6 +53,7 @@ import { useLoginMethods, useSecondFactors } from "@/plugin-host/auth-registry";
 import { startPreLoginPlugins } from "@/plugin-host/loader";
 import { Checkbox } from "@/components/checkbox";
 import { useBranding } from "@/contexts/BrandingContext";
+import { BrandPanel, CompactBrand } from "./auth-bits";
 import {
   changeAppLanguage,
   normalizeLanguageCode,
@@ -182,26 +188,6 @@ interface AuthProps {
   onLogin: (username: string, userId?: string, isAdmin?: boolean) => void;
 }
 
-interface ExtendedWindow extends Window {
-  IS_ELECTRON_WEBVIEW?: boolean;
-  ReactNativeWebView?: { postMessage: (msg: string) => void };
-}
-
-const isInMobileWebView = () =>
-  /Termix-Mobile\/(Android|iOS)/.test(navigator.userAgent) ||
-  !!(window as ExtendedWindow).ReactNativeWebView;
-
-const isInElectronWebView = () => {
-  if (isInMobileWebView()) return false;
-  if ((window as ExtendedWindow).IS_ELECTRON_WEBVIEW) return true;
-  try {
-    if (window.self !== window.top) return true;
-  } catch {
-    return true;
-  }
-  return false;
-};
-
 function PasswordInput({
   value,
   onChange,
@@ -420,7 +406,7 @@ export function Auth({ onLogin }: AuthProps) {
         );
         return;
       }
-      toast.error(event.data.error || t("errors.failedOidcLogin"));
+      toast.error(event.data.error || t("errors.failedExternalLogin"));
     };
 
     window.addEventListener("message", handleExternalBrowserResult);
@@ -604,7 +590,7 @@ export function Auth({ onLogin }: AuthProps) {
         toast.error(t("messages.userNotAllowed"));
       else if (error === "second_factor_unavailable")
         toast.error(t("auth.secondFactorUnavailable"));
-      else toast.error(`${t("errors.oidcAuthFailed")}: ${error}`);
+      else toast.error(`${t("errors.externalAuthFailed")}: ${error}`);
       window.history.replaceState({}, document.title, window.location.pathname);
       return;
     }
@@ -615,7 +601,7 @@ export function Auth({ onLogin }: AuthProps) {
         // (termix-mobile:-origin callbacks include one), otherwise read it back
         // from the cookie via /users/me/token before handing it to the app.
         const postToken = (token: string) => {
-          (window as ExtendedWindow).ReactNativeWebView?.postMessage(
+          (window as EmbeddedFrameWindow).ReactNativeWebView?.postMessage(
             JSON.stringify({ type: "AUTH_SUCCESS", token }),
           );
           setWebviewAuthSuccess(true);
@@ -739,6 +725,10 @@ export function Auth({ onLogin }: AuthProps) {
       toast.error(t("auth.secondFactorUnavailable"));
       return;
     }
+    if (error?.response?.data?.code === "external_login_required") {
+      toast.error(t("auth.externalLoginRequired"));
+      return;
+    }
     toast.error(
       error?.response?.data?.error || error?.message || t(fallbackKey),
     );
@@ -761,7 +751,7 @@ export function Auth({ onLogin }: AuthProps) {
     if (isInMobileWebView()) {
       // Native-app requests get the JWT in the login response body.
       const token = res?.token ?? "";
-      (window as ExtendedWindow).ReactNativeWebView?.postMessage(
+      (window as EmbeddedFrameWindow).ReactNativeWebView?.postMessage(
         JSON.stringify({ type: "AUTH_SUCCESS", token }),
       );
       setWebviewAuthSuccess(true);
@@ -1047,7 +1037,7 @@ export function Auth({ onLogin }: AuthProps) {
           throw new Error(t("errors.invalidAuthUrl"));
         window.location.replace(authUrl);
       } catch (err: unknown) {
-        showLoginError(err, "errors.failedOidcLogin");
+        showLoginError(err, "errors.failedExternalLogin");
         setLoading(false);
       }
     },
@@ -1133,7 +1123,7 @@ export function Auth({ onLogin }: AuthProps) {
     }
 
     if (urlTriggered) {
-      toast.info(t("errors.silentSigninOidcUnavailable"));
+      toast.info(t("errors.silentSigninExternalUnavailable"));
     }
   }, [startRedirect, authMethodsLoaded, externalMethods, t]);
 
@@ -1204,7 +1194,11 @@ export function Auth({ onLogin }: AuthProps) {
               {t("messages.databaseConnectionFailed")}
             </p>
           </div>
-          <Button onClick={() => window.location.reload()}>
+          <Button
+            variant="outline"
+            onClick={() => window.location.reload()}
+            className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand dark:border-accent-brand/40 dark:bg-transparent dark:hover:bg-accent-brand/10"
+          >
             {t("common.refresh")}
           </Button>
           <LanguageRow
@@ -1228,39 +1222,26 @@ export function Auth({ onLogin }: AuthProps) {
     return (
       <div className="fixed inset-0 flex flex-col bg-background overflow-hidden">
         <div className="flex flex-1 overflow-hidden">
-          <div className="hidden lg:flex flex-col w-[420px] shrink-0 bg-sidebar border-r border-border relative overflow-hidden select-none">
-            <div
-              className="absolute inset-0"
-              style={{
-                backgroundImage:
-                  "radial-gradient(circle, color-mix(in oklch, var(--border) 80%, transparent) 1px, transparent 1px)",
-                backgroundSize: "24px 24px",
-              }}
-            />
-            <div className="absolute inset-0 flex flex-col items-center justify-center gap-3 z-10 px-12">
-              <span className="text-4xl font-bold tracking-[0.3em] font-mono">
-                TERMIX
-              </span>
-              <div className="w-8 h-px bg-accent-brand" />
-              <span className="text-[11px] font-mono text-muted-foreground uppercase tracking-[0.25em]">
-                {t("auth.tagline")}
-              </span>
-            </div>
-          </div>
+          <BrandPanel
+            logo={branding.logo}
+            appName={branding.appName}
+            tagline={branding.tagline || t("auth.tagline")}
+          />
 
           <div className="flex flex-1 items-center justify-center p-6 overflow-y-auto relative">
-            <div className="w-full max-w-sm flex flex-col gap-6">
+            <div className="w-full max-w-[380px] flex flex-col gap-6 border border-border bg-card p-5">
+              <CompactBrand logo={branding.logo} appName={branding.appName} />
               <div className="flex flex-col gap-5">
                 <div className="flex flex-col gap-1">
                   <h1 className="text-xl font-bold">
                     {desktopManualLogoutActive
-                      ? "Local desktop signed out"
-                      : "Local desktop session unavailable"}
+                      ? t("auth.localDesktopSignedOut")
+                      : t("auth.localDesktopUnavailable")}
                   </h1>
                   <p className="text-xs text-muted-foreground leading-relaxed">
                     {desktopManualLogoutActive
-                      ? "You signed out of the local desktop session. Continue locally to use this device's embedded Termix server again."
-                      : "Termix could not create a local desktop session. Retry the embedded local session instead of registering a new account."}
+                      ? t("auth.localDesktopSignedOutDesc")
+                      : t("auth.localDesktopUnavailableDesc")}
                   </p>
                 </div>
                 <Button
@@ -1270,8 +1251,8 @@ export function Auth({ onLogin }: AuthProps) {
                   onClick={continueLocalDesktopSession}
                 >
                   {desktopManualLogoutActive
-                    ? "Continue with local desktop"
-                    : "Retry local desktop session"}
+                    ? t("auth.continueLocalDesktop")
+                    : t("auth.retryLocalDesktop")}
                 </Button>
                 <Separator />
                 <LanguageRow
@@ -1308,37 +1289,16 @@ export function Auth({ onLogin }: AuthProps) {
   return (
     <div className="fixed inset-0 flex flex-col bg-background overflow-hidden">
       <div className="flex flex-1 overflow-hidden">
-        {/* Left decorative panel */}
-        <div className="hidden lg:flex flex-col w-[420px] shrink-0 bg-sidebar border-r border-border relative overflow-hidden select-none">
-          <div
-            className="absolute inset-0"
-            style={{
-              backgroundImage:
-                "radial-gradient(circle, color-mix(in oklch, var(--border) 80%, transparent) 1px, transparent 1px)",
-              backgroundSize: "24px 24px",
-            }}
-          />
-          <div className="absolute inset-0 flex flex-col items-center justify-center gap-3 z-10 px-12">
-            {branding.logo && (
-              <img
-                src={branding.logo}
-                alt=""
-                className="w-16 h-16 object-contain mb-1"
-              />
-            )}
-            <span className="text-4xl font-bold tracking-[0.3em] font-mono uppercase">
-              {branding.appName}
-            </span>
-            <div className="w-8 h-px bg-accent-brand" />
-            <span className="text-[11px] font-mono text-muted-foreground uppercase tracking-[0.25em]">
-              {branding.tagline || t("auth.tagline")}
-            </span>
-          </div>
-        </div>
+        <BrandPanel
+          logo={branding.logo}
+          appName={branding.appName}
+          tagline={branding.tagline || t("auth.tagline")}
+        />
 
         {/* Right panel */}
         <div className="flex flex-1 items-center justify-center p-6 overflow-y-auto relative">
-          <div className="w-full max-w-sm flex flex-col gap-6">
+          <div className="w-full max-w-[380px] flex flex-col gap-6 border border-border bg-card p-5">
+            <CompactBrand logo={branding.logo} appName={branding.appName} />
             {/* TOTP view */}
             {view === "second-factor" && (
               <div className="flex flex-col gap-5">
@@ -1384,11 +1344,13 @@ export function Auth({ onLogin }: AuthProps) {
                           )}
                         </p>
                         <Button
+                          variant="outline"
                           type="button"
                           disabled={authPluginsLoading}
                           onClick={() =>
                             void retryAuthPlugins().catch(() => {})
                           }
+                          className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand dark:border-accent-brand/40 dark:bg-transparent dark:hover:bg-accent-brand/10"
                         >
                           {t("auth.retrySecondFactorUI")}
                         </Button>
diff --git a/src/ui/auth/ElectronLoginForm.tsx b/src/ui/auth/ElectronLoginForm.tsx
index 2b79bf342..dee0fa511 100644
--- a/src/ui/auth/ElectronLoginForm.tsx
+++ b/src/ui/auth/ElectronLoginForm.tsx
@@ -98,7 +98,7 @@ export function ElectronLoginForm({
           return;
         }
 
-        // OIDC login requested from inside the iframe — open the system browser
+        // OIDC login requested from inside the iframe, open the system browser
         // so captcha stages (e.g. Cloudflare Turnstile) render correctly.
         if (type === "OIDC_SYSTEM_BROWSER_AUTH" && authUrl && callbackPort) {
           const sendResultToIframe = (result: {
@@ -138,7 +138,7 @@ export function ElectronLoginForm({
           if (!electronAPI?.externalBrowserLogin) {
             sendResultToIframe({
               success: false,
-              error: t("errors.failedOidcLogin"),
+              error: t("errors.failedExternalLogin"),
             });
             return;
           }
@@ -162,7 +162,7 @@ export function ElectronLoginForm({
           }
           sendResultToIframe({
             success: false,
-            error: result.error || t("errors.failedOidcLogin"),
+            error: result.error || t("errors.failedExternalLogin"),
           });
         }
       } catch (err) {
@@ -172,7 +172,7 @@ export function ElectronLoginForm({
           typeof event.data.providerId === "number"
             ? event.data.providerId
             : undefined;
-        const error = getErrorMessage(err, t("errors.failedOidcLogin"));
+        const error = getErrorMessage(err, t("errors.failedExternalLogin"));
         iframeRef.current?.contentWindow?.postMessage(
           {
             type: "OIDC_SYSTEM_BROWSER_AUTH_RESULT",
diff --git a/src/ui/auth/auth-bits.tsx b/src/ui/auth/auth-bits.tsx
new file mode 100644
index 000000000..5b9d72ef3
--- /dev/null
+++ b/src/ui/auth/auth-bits.tsx
@@ -0,0 +1,58 @@
+/** The left half of the sign-in screen: brand mark, tagline, a rule. */
+export function BrandPanel({
+  logo,
+  appName,
+  tagline,
+}: {
+  logo?: string | null;
+  appName: string;
+  tagline: string;
+}) {
+  return (
+    <div className="relative hidden w-[46%] max-w-[560px] shrink-0 select-none flex-col justify-between overflow-hidden border-r border-border bg-sidebar p-10 lg:flex">
+      <div
+        className="absolute inset-0 opacity-70"
+        style={{
+          backgroundImage:
+            "radial-gradient(circle, color-mix(in oklch, var(--border) 80%, transparent) 1px, transparent 1px)",
+          backgroundSize: "22px 22px",
+        }}
+      />
+      <div className="absolute inset-x-0 top-0 h-px bg-accent-brand/60" />
+
+      <div className="relative flex items-center gap-3">
+        {logo && <img src={logo} alt="" className="size-8 object-contain" />}
+        <span className="font-mono text-lg font-bold uppercase tracking-[0.35em]">
+          {appName}
+        </span>
+      </div>
+
+      <div className="relative max-w-[380px]">
+        <h2 className="text-2xl font-semibold leading-tight tracking-tight">
+          {tagline}
+        </h2>
+        <div className="mt-4 h-px w-10 bg-accent-brand" />
+      </div>
+
+      <div className="relative h-3" />
+    </div>
+  );
+}
+
+/** The brand line shown above the form when the brand panel is hidden. */
+export function CompactBrand({
+  logo,
+  appName,
+}: {
+  logo?: string | null;
+  appName: string;
+}) {
+  return (
+    <div className="flex items-center gap-2.5 lg:hidden">
+      {logo && <img src={logo} alt="" className="size-7 object-contain" />}
+      <span className="font-mono text-sm font-bold uppercase tracking-[0.3em]">
+        {appName}
+      </span>
+    </div>
+  );
+}
diff --git a/src/ui/components/card-masonry.tsx b/src/ui/components/card-masonry.tsx
new file mode 100644
index 000000000..91f61f2f2
--- /dev/null
+++ b/src/ui/components/card-masonry.tsx
@@ -0,0 +1,105 @@
+/* eslint-disable react-refresh/only-export-components */
+import {
+  Children,
+  Fragment,
+  isValidElement,
+  useLayoutEffect,
+  useMemo,
+  useRef,
+  useState,
+} from "react";
+import type React from "react";
+import { PANEL } from "@/components/panel-layout";
+import { cn } from "@/lib/utils";
+
+/** Column counts per container width tier, for each column preference. */
+const COLUMN_STEPS: Record<number, [number, number, number, number]> = {
+  1: [1, 1, 1, 1],
+  2: [1, 2, 2, 2],
+  3: [1, 2, 3, 3],
+  4: [1, 2, 3, 4],
+};
+
+const TIERS = { md: 640, lg: 960, xl: 1240 };
+
+/** How many columns fit a container of this width for a column preference. */
+export function masonryColumns(width: number, columns: number): number {
+  const steps = COLUMN_STEPS[columns] ?? COLUMN_STEPS[3];
+  if (width >= TIERS.xl) return steps[3];
+  if (width >= TIERS.lg) return steps[2];
+  if (width >= TIERS.md) return steps[1];
+  return steps[0];
+}
+
+function flattenChildren(children: React.ReactNode): React.ReactNode[] {
+  return Children.toArray(children).flatMap((child) =>
+    isValidElement(child) && child.type === Fragment
+      ? flattenChildren(
+          (child.props as { children?: React.ReactNode }).children,
+        )
+      : [child],
+  );
+}
+
+/**
+ * Cards dealt round-robin into columns that stack tight. The assignment only
+ * depends on child order and column count, so live updates never reshuffle
+ * cards between columns. Width comes from the container, not the window, so
+ * split panes and docks get the right count.
+ */
+export function CardMasonry({
+  columns,
+  stack = false,
+  className,
+  children,
+}: {
+  columns: number;
+  /** Force one full-width column, for cards holding wide tables. */
+  stack?: boolean;
+  className?: string;
+  children: React.ReactNode;
+}) {
+  const ref = useRef<HTMLDivElement>(null);
+  const [width, setWidth] = useState(0);
+
+  useLayoutEffect(() => {
+    const el = ref.current;
+    if (!el) return;
+    setWidth(el.clientWidth);
+    if (typeof ResizeObserver === "undefined") return;
+    const observer = new ResizeObserver(() => setWidth(el.clientWidth));
+    observer.observe(el);
+    return () => observer.disconnect();
+  }, []);
+
+  const count = stack ? 1 : masonryColumns(width, columns);
+  const items = useMemo(() => flattenChildren(children), [children]);
+  const buckets = useMemo(() => {
+    const next: React.ReactNode[][] = Array.from({ length: count }, () => []);
+    items.forEach((child, i) => next[i % count].push(child));
+    return next;
+  }, [items, count]);
+
+  return (
+    <div
+      ref={ref}
+      className={cn(
+        count === 1
+          ? `flex flex-col ${PANEL.gap}`
+          : `flex items-start ${PANEL.gap}`,
+        className,
+      )}
+    >
+      {count === 1
+        ? items
+        : buckets.map((bucket, i) => (
+            <div
+              key={i}
+              className={`flex min-w-0 flex-1 flex-col ${PANEL.gap}`}
+            >
+              {bucket}
+            </div>
+          ))}
+    </div>
+  );
+}
diff --git a/src/ui/components/charts/LineChart.tsx b/src/ui/components/charts/LineChart.tsx
index d59a9393a..9870e9b55 100644
--- a/src/ui/components/charts/LineChart.tsx
+++ b/src/ui/components/charts/LineChart.tsx
@@ -1,5 +1,6 @@
 import { useRef, useState, useEffect, useCallback } from "react";
 import { cn } from "@/lib/utils";
+import { parseServerTime } from "@/lib/server-time";
 
 export interface LineChartSeries {
   key: string;
@@ -23,12 +24,8 @@ const X_LABEL_H = 20;
 const TOP_PAD = 6;
 const TICK_COUNT = 5;
 
-function parseTs(ts: string): Date {
-  return new Date(ts.includes("T") ? ts : ts.replace(" ", "T") + "Z");
-}
-
 function formatTimestamp(ts: string, rangeMs: number): string {
-  const d = parseTs(ts);
+  const d = parseServerTime(ts);
   if (rangeMs <= 25 * 60 * 60 * 1000) {
     return d.toLocaleTimeString([], { hour: "2-digit", minute: "2-digit" });
   }
@@ -104,8 +101,8 @@ export function LineChart({
 
   const rangeMs =
     timestamps.length >= 2
-      ? parseTs(timestamps[timestamps.length - 1]).getTime() -
-        parseTs(timestamps[0]).getTime()
+      ? parseServerTime(timestamps[timestamps.length - 1]).getTime() -
+        parseServerTime(timestamps[0]).getTime()
       : 0;
 
   const yTicks = (() => {
diff --git a/src/ui/components/connection/ConnectionGate.tsx b/src/ui/components/connection/ConnectionGate.tsx
new file mode 100644
index 000000000..18b950dff
--- /dev/null
+++ b/src/ui/components/connection/ConnectionGate.tsx
@@ -0,0 +1,267 @@
+/* eslint-disable react-refresh/only-export-components */
+import {
+  createContext,
+  useCallback,
+  useContext,
+  useMemo,
+  useRef,
+  useState,
+} from "react";
+import type React from "react";
+import { useConnectionRetry } from "@termix-ssh/plugin-sdk/frontend";
+import {
+  ConnectionLogProvider,
+  useConnectionLog,
+} from "@/ssh/connection-log/ConnectionLogContext";
+import {
+  ConnectionScreen,
+  type ConnectionUnavailable,
+} from "@/components/connection/ConnectionScreen";
+import type { ConnectionStatus } from "@/components/connection/connection-status";
+import type { ConnectionStage } from "@/types/connection-log";
+import { getErrorMessage } from "@/lib/error-message";
+
+function messageOf(err: unknown): string {
+  return typeof err === "string" ? err : getErrorMessage(err);
+}
+
+type LogFn = (message: string, stage?: ConnectionStage) => void;
+
+export interface ConnectionGateController {
+  status: ConnectionStatus;
+  attempt: number;
+  maxAttempts: number;
+  nextRetryInMs: number | null;
+  error: string | null;
+  unavailable: ConnectionUnavailable | null;
+  log: { info: LogFn; success: LogFn; warning: LogFn; error: LogFn };
+  markConnected: () => void;
+  /** It did not come up. Logs the reason and schedules a retry. */
+  markFailed: (error?: unknown) => void;
+  /** It was up and dropped. No automatic retry. */
+  markDisconnected: (error?: unknown) => void;
+  /** It cannot run here, like a feature that is off for this host. */
+  markUnavailable: (info: ConnectionUnavailable) => void;
+  retryNow: () => void;
+  reset: () => void;
+}
+
+export interface ConnectionGateProps {
+  /** Opens the connection. Throwing or rejecting counts as a failure. */
+  connect: (gate: ConnectionGateController) => void | Promise<void>;
+  message: string;
+  detail?: string;
+  disconnectedMessage?: string;
+  retry?: {
+    maxAttempts?: number;
+    baseDelayMs?: number;
+    maxDelayMs?: number;
+    autoStart?: boolean;
+    enabled?: boolean;
+  };
+  /** Keep children mounted under the screen, for a terminal or display. */
+  keepMounted?: boolean;
+  backgroundColor?: string;
+  extraActions?: React.ReactNode;
+  className?: string;
+  children:
+    React.ReactNode | ((gate: ConnectionGateController) => React.ReactNode);
+}
+
+const GateContext = createContext<ConnectionGateController | null>(null);
+
+/** The controller of the ConnectionGate this renders inside. */
+export function useConnectionGate(): ConnectionGateController {
+  const gate = useContext(GateContext);
+  if (!gate) {
+    throw new Error("useConnectionGate must be used inside a ConnectionGate");
+  }
+  return gate;
+}
+
+/**
+ * One connection lifecycle for every tab: connecting, failed with retry and
+ * a log, dropped, or unavailable. Children render once it is up.
+ */
+export function ConnectionGate(props: ConnectionGateProps) {
+  return (
+    <ConnectionLogProvider>
+      <Gate {...props} />
+    </ConnectionLogProvider>
+  );
+}
+
+function Gate({
+  connect,
+  message,
+  detail,
+  disconnectedMessage,
+  retry,
+  keepMounted,
+  backgroundColor,
+  extraActions,
+  className,
+  children,
+}: ConnectionGateProps) {
+  const { addLog, clearLogs } = useConnectionLog();
+  const [error, setError] = useState<string | null>(null);
+  const [unavailable, setUnavailable] = useState<ConnectionUnavailable | null>(
+    null,
+  );
+  const [dropped, setDropped] = useState(false);
+  const maxAttempts = retry?.maxAttempts ?? 8;
+  const gateRef = useRef<ConnectionGateController | null>(null);
+
+  const write = useCallback(
+    (type: "info" | "success" | "warning" | "error"): LogFn =>
+      (text, stage = "connection") =>
+        addLog({ type, stage, message: text }),
+    [addLog],
+  );
+
+  const retryState = useConnectionRetry({
+    connect: async () => {
+      setError(null);
+      setUnavailable(null);
+      setDropped(false);
+      try {
+        await connect(gateRef.current!);
+      } catch (err) {
+        gateRef.current?.markFailed(err);
+      }
+    },
+    maxAttempts,
+    baseDelayMs: retry?.baseDelayMs,
+    maxDelayMs: retry?.maxDelayMs,
+    autoStart: retry?.autoStart,
+    enabled: retry?.enabled,
+  });
+
+  const {
+    markConnected: retryConnected,
+    markFailed: retryFailed,
+    retryNow: retryAgain,
+    reset: retryReset,
+  } = retryState;
+
+  const log = useMemo(
+    () => ({
+      info: write("info"),
+      success: write("success"),
+      warning: write("warning"),
+      error: write("error"),
+    }),
+    [write],
+  );
+
+  const markFailed = useCallback(
+    (err?: unknown) => {
+      if (err !== undefined) {
+        const text = messageOf(err);
+        setError(text);
+        log.error(text, "error");
+      }
+      retryFailed();
+    },
+    [log, retryFailed],
+  );
+
+  const markDisconnected = useCallback(
+    (err?: unknown) => {
+      if (err !== undefined) {
+        const text = messageOf(err);
+        setError(text);
+        log.warning(text, "connection");
+      }
+      setDropped(true);
+    },
+    [log],
+  );
+
+  const markUnavailable = useCallback((info: ConnectionUnavailable) => {
+    setUnavailable(info);
+  }, []);
+
+  const retryNow = useCallback(() => {
+    clearLogs();
+    setError(null);
+    setUnavailable(null);
+    setDropped(false);
+    retryAgain();
+  }, [clearLogs, retryAgain]);
+
+  const reset = useCallback(() => {
+    setError(null);
+    setUnavailable(null);
+    setDropped(false);
+    retryReset();
+  }, [retryReset]);
+
+  let status: ConnectionStatus = retryState.status;
+  if (dropped) status = "disconnected";
+
+  const controller = useMemo<ConnectionGateController>(
+    () => ({
+      status,
+      attempt: retryState.attempt,
+      maxAttempts,
+      nextRetryInMs: retryState.nextRetryInMs,
+      error,
+      unavailable,
+      log,
+      markConnected: () => {
+        setDropped(false);
+        setError(null);
+        retryConnected();
+      },
+      markFailed,
+      markDisconnected,
+      markUnavailable,
+      retryNow,
+      reset,
+    }),
+    [
+      status,
+      retryState.attempt,
+      retryState.nextRetryInMs,
+      maxAttempts,
+      error,
+      unavailable,
+      log,
+      retryConnected,
+      markFailed,
+      markDisconnected,
+      markUnavailable,
+      retryNow,
+      reset,
+    ],
+  );
+  gateRef.current = controller;
+
+  const up = status === "connected" && !unavailable;
+  const content =
+    typeof children === "function" ? children(controller) : children;
+
+  return (
+    <GateContext.Provider value={controller}>
+      <div className={`relative h-full w-full ${className ?? ""}`}>
+        {(up || keepMounted) && content}
+        <ConnectionScreen
+          status={status}
+          message={message}
+          detail={detail}
+          errorDetail={error}
+          unavailable={unavailable}
+          disconnectedMessage={disconnectedMessage}
+          attempt={retryState.attempt}
+          maxAttempts={maxAttempts}
+          nextRetryInMs={retryState.nextRetryInMs}
+          onManualRetry={retryNow}
+          extraActions={extraActions}
+          backgroundColor={backgroundColor}
+          logPosition={status === "connecting" ? "bottom" : "top"}
+        />
+      </div>
+    </GateContext.Provider>
+  );
+}
diff --git a/src/ui/components/connection/ConnectionLogPanel.tsx b/src/ui/components/connection/ConnectionLogPanel.tsx
index 0075a8fa7..527973795 100644
--- a/src/ui/components/connection/ConnectionLogPanel.tsx
+++ b/src/ui/components/connection/ConnectionLogPanel.tsx
@@ -1,36 +1,43 @@
-import React, { useEffect, useRef, useState } from "react";
+import { useEffect, useRef, useState } from "react";
 import { useOptionalConnectionLog } from "@/ssh/connection-log/ConnectionLogContext.tsx";
 import { useTranslation } from "react-i18next";
 import { copyToClipboard } from "@/lib/clipboard.ts";
 import { Button } from "@/components/button.tsx";
 import { cn } from "@/lib/utils.ts";
-import {
-  ChevronDown,
-  ChevronUp,
-  Copy,
-  Info,
-  CheckCircle2,
-  AlertTriangle,
-  XCircle,
-} from "lucide-react";
+import { Check, ChevronDown, ChevronUp, Copy } from "lucide-react";
 import { toast } from "sonner";
 
 interface ConnectionLogPanelProps {
   isConnecting: boolean;
   isConnected: boolean;
   hasConnectionError: boolean;
+  /** Kept for older callers. The log always sits at the bottom. */
   position?: "top" | "bottom";
   className?: string;
 }
 
-const COLLAPSED_HEIGHT = "h-[140px]";
-const EXPANDED_HEIGHT = "h-[45%] min-h-[240px]";
+const COLLAPSED_HEIGHT = "h-[136px]";
+const EXPANDED_HEIGHT = "h-[46%] min-h-[220px]";
+
+/** A dot per line, so the log reads as one column of text. */
+const DOT: Record<string, string> = {
+  info: "bg-muted-foreground/50",
+  success: "bg-accent-brand",
+  warning: "bg-warning",
+  error: "bg-destructive",
+};
+
+const TEXT: Record<string, string> = {
+  info: "text-foreground-secondary",
+  success: "text-foreground",
+  warning: "text-warning",
+  error: "text-destructive",
+};
 
 export function ConnectionLogPanel({
   isConnecting,
   isConnected,
   hasConnectionError,
-  position = "bottom",
   className,
 }: ConnectionLogPanelProps) {
   const { t } = useTranslation();
@@ -39,6 +46,7 @@ export function ConnectionLogPanel({
     connectionLog ?? {};
   const lastLogRef = useRef<HTMLDivElement>(null);
   const [manuallyCollapsed, setManuallyCollapsed] = useState(false);
+  const [copied, setCopied] = useState(false);
 
   useEffect(() => {
     if (hasConnectionError && setIsExpanded) {
@@ -56,7 +64,7 @@ export function ConnectionLogPanel({
 
   useEffect(() => {
     if (lastLogRef.current) {
-      lastLogRef.current.scrollIntoView({ block: "end" });
+      lastLogRef.current.scrollIntoView?.({ block: "end" });
     }
   }, [logs]);
 
@@ -88,113 +96,99 @@ export function ConnectionLogPanel({
       .join("\n");
 
     const ok = await copyToClipboard(logsText);
-    if (ok) toast.success(t("terminal.connectionLogCopied"));
-    else toast.error(t("terminal.connectionLogCopyFailed"));
-  };
-
-  const getIcon = (type: string) => {
-    switch (type) {
-      case "info":
-        return <Info className="h-4 w-4 text-blue-500 shrink-0" />;
-      case "success":
-        return <CheckCircle2 className="h-4 w-4 text-green-500 shrink-0" />;
-      case "warning":
-        return <AlertTriangle className="h-4 w-4 text-yellow-500 shrink-0" />;
-      case "error":
-        return <XCircle className="h-4 w-4 text-red-500 shrink-0" />;
-      default:
-        return <Info className="h-4 w-4 shrink-0" />;
-    }
-  };
-
-  const getTextColor = (type: string) => {
-    switch (type) {
-      case "info":
-        return "text-blue-400";
-      case "success":
-        return "text-green-400";
-      case "warning":
-        return "text-yellow-400";
-      case "error":
-        return "text-red-400";
-      default:
-        return "text-muted-foreground";
+    if (ok) {
+      setCopied(true);
+      setTimeout(() => setCopied(false), 1400);
+      toast.success(t("sshAuth.connectionLogCopied"));
+    } else {
+      toast.error(t("sshAuth.connectionLogCopyFailed"));
     }
   };
 
   return (
     <div
       className={cn(
-        "relative z-10 shrink-0 flex flex-col bg-bg-base",
-        position === "bottom"
-          ? "border-t border-border"
-          : "border-b border-border",
+        "relative z-10 flex shrink-0 flex-col bg-surface-dim/60",
+        "border-t border-border",
         expanded ? EXPANDED_HEIGHT : COLLAPSED_HEIGHT,
-        "transition-[height] duration-150",
+        "transition-[height] duration-200",
         className,
       )}
     >
-      <div className="flex items-center justify-between px-3 py-1.5 shrink-0 border-b border-border/60">
-        <Button
-          variant="ghost"
-          size="sm"
+      <div className="flex h-9 shrink-0 items-center gap-2 border-b border-border px-2 pr-1.5">
+        <button
+          type="button"
           onClick={handleToggle}
-          className="flex items-center gap-2 -ml-2"
+          aria-expanded={expanded}
+          className="flex min-w-0 items-center gap-1.5 px-1.5 py-1 text-foreground-secondary transition-colors hover:text-foreground"
         >
           {expanded ? (
-            <ChevronDown className="h-4 w-4" />
+            <ChevronDown className="size-3.5 shrink-0" />
           ) : (
-            <ChevronUp className="h-4 w-4" />
+            <ChevronUp className="size-3.5 shrink-0" />
           )}
-          <span className="text-sm font-medium">
-            {t("terminal.connectionLogTitle")} ({logs.length})
+          <span className="text-[10px] font-semibold uppercase tracking-widest">
+            {t("sshAuth.connectionLogTitle")}
           </span>
-        </Button>
+        </button>
+
+        <span className="text-xs tabular-nums text-muted-foreground">
+          {logs.length}
+        </span>
+
         {logs.length > 0 && (
           <Button
             variant="ghost"
             size="icon-sm"
             onClick={copyLogsToClipboard}
-            title={t("terminal.connectionLogCopy")}
+            title={t("sshAuth.connectionLogCopy")}
+            className="ml-auto text-muted-foreground"
           >
-            <Copy className="h-4 w-4" />
+            {copied ? (
+              <Check className="size-3.5 text-accent-brand" />
+            ) : (
+              <Copy className="size-3.5" />
+            )}
           </Button>
         )}
       </div>
 
-      <div className="flex-1 min-h-0 overflow-y-auto overflow-x-hidden thin-scrollbar">
-        <div className="px-3 py-2">
-          {logs.length === 0 ? (
-            <div className="py-4 text-center text-sm text-muted-foreground">
-              {isConnecting
-                ? t("terminal.connectionLogWaiting")
-                : t("terminal.connectionLogEmpty")}
-            </div>
-          ) : (
-            <div className="space-y-1 font-mono text-xs">
-              {logs.map((log, index) => (
-                <div
-                  key={log.id}
-                  ref={index === logs.length - 1 ? lastLogRef : null}
-                  className="flex items-start gap-2"
+      <div className="thin-scrollbar min-h-0 flex-1 overflow-y-auto overflow-x-hidden">
+        {logs.length === 0 ? (
+          <p className="px-3 py-4 text-xs text-muted-foreground">
+            {isConnecting
+              ? t("sshAuth.connectionLogWaiting")
+              : t("sshAuth.connectionLogEmpty")}
+          </p>
+        ) : (
+          <div className="px-2 py-1.5 font-mono text-[11px] leading-[1.7]">
+            {logs.map((log, index) => (
+              <div
+                key={log.id}
+                ref={index === logs.length - 1 ? lastLogRef : null}
+                className="flex items-baseline gap-2 px-1 hover:bg-foreground/[0.03]"
+              >
+                <span className="shrink-0 tabular-nums text-muted-foreground/70">
+                  {log.timestamp.toLocaleTimeString([], { hour12: false })}
+                </span>
+                <span
+                  className={cn(
+                    "size-1.5 shrink-0 translate-y-[-1px] rounded-full",
+                    DOT[log.type] ?? DOT.info,
+                  )}
+                />
+                <span
+                  className={cn(
+                    "min-w-0 flex-1 whitespace-pre-wrap break-all",
+                    TEXT[log.type] ?? TEXT.info,
+                  )}
                 >
-                  <span className="shrink-0 text-muted-foreground">
-                    {log.timestamp.toLocaleTimeString()}
-                  </span>
-                  {getIcon(log.type)}
-                  <span
-                    className={cn(
-                      "flex-1 min-w-0 break-all whitespace-pre-wrap",
-                      getTextColor(log.type),
-                    )}
-                  >
-                    {log.message}
-                  </span>
-                </div>
-              ))}
-            </div>
-          )}
-        </div>
+                  {log.message}
+                </span>
+              </div>
+            ))}
+          </div>
+        )}
       </div>
     </div>
   );
diff --git a/src/ui/components/connection/ConnectionScreen.tsx b/src/ui/components/connection/ConnectionScreen.tsx
index 6e6e04e79..0adb106b1 100644
--- a/src/ui/components/connection/ConnectionScreen.tsx
+++ b/src/ui/components/connection/ConnectionScreen.tsx
@@ -2,120 +2,245 @@ import React from "react";
 import { useTranslation } from "react-i18next";
 import { cn } from "@/lib/utils.ts";
 import { Button } from "@/components/button.tsx";
-import { Loader2, RefreshCw } from "lucide-react";
+import { RefreshCw, X } from "lucide-react";
 import { ConnectionLogPanel } from "@/components/connection/ConnectionLogPanel.tsx";
+import { useOptionalConnectionLog } from "@/ssh/connection-log/ConnectionLogContext.tsx";
+import { useSurfaceClose } from "@/components/surface/surface-scope.tsx";
 import type { ConnectionStatus } from "@/components/connection/connection-status.ts";
 
-interface ConnectionScreenProps {
+export interface ConnectionUnavailable {
+  title: string;
+  hint?: string;
+  /** Another way forward, like opening the host editor. */
+  action?: React.ReactNode;
+}
+
+export interface ConnectionScreenProps {
   status: ConnectionStatus;
+  /** Headline while connecting. */
   message?: string;
+  /** Second line under the headline, usually user@host:port. */
+  detail?: string;
+  /** The reason it failed. Falls back to the last error in the log. */
+  errorDetail?: string | null;
+  /** Shown instead of a failure when the feature cannot run here. */
+  unavailable?: ConnectionUnavailable | null;
   backgroundColor?: string;
   attempt?: number;
   maxAttempts?: number;
   nextRetryInMs?: number | null;
   onManualRetry?: () => void;
-  retryLabel?: string;
+  /** Headline when it was up and dropped. */
   disconnectedMessage?: string;
+  /** Overrides closing the tab this sits in. False hides the button. */
+  onClose?: (() => void) | false;
   extraActions?: React.ReactNode;
   logPosition?: "top" | "bottom";
   emptyState?: React.ReactNode;
   className?: string;
 }
 
+/** The one screen every connection shows until it is up. */
 export function ConnectionScreen({
   status,
   message,
+  detail,
+  errorDetail,
+  unavailable,
   backgroundColor,
   attempt = 0,
   maxAttempts = 0,
   nextRetryInMs = null,
   onManualRetry,
-  retryLabel,
   disconnectedMessage,
+  onClose,
   extraActions,
   logPosition = "bottom",
   emptyState,
   className,
 }: ConnectionScreenProps) {
   const { t } = useTranslation();
+  const surfaceClose = useSurfaceClose();
+  const logs = useOptionalConnectionLog()?.logs;
+  const close = onClose === false ? null : (onClose ?? surfaceClose);
 
-  if (status === "connected" && !emptyState) {
+  if (status === "connected" && !emptyState && !unavailable) {
     return null;
   }
 
-  const showSpinner = status === "connecting";
-  const showRetryButton = status === "disconnected" && !!onManualRetry;
-  const showLog = status !== "connected";
+  const connecting = status === "connecting" && !unavailable;
+  const failed = status === "error" || status === "disconnected";
+  const retrying =
+    status === "error" && attempt > 0 && !!nextRetryInMs && nextRetryInMs > 0;
+  const stopped = failed || !!unavailable;
+  const showRetryButton = stopped && !!onManualRetry;
+  const showClose = stopped && !!close;
+  const reason =
+    errorDetail ||
+    [...(logs ?? [])].reverse().find((entry) => entry.type === "error")
+      ?.message ||
+    null;
+  const showLog = !emptyState && (status !== "connected" || !!unavailable);
+
+  let headline = message;
+  if (unavailable) headline = unavailable.title;
+  else if (retrying) headline = t("connection.failedRetrying");
+  else if (status === "disconnected" && disconnectedMessage)
+    headline = disconnectedMessage;
+  else if (failed) headline = t("connection.failed");
+
+  const showCountdown = attempt > 0 && (connecting || retrying);
 
   return (
     <div
       role="status"
       aria-live="polite"
-      data-status={status}
+      data-status={unavailable ? "unavailable" : status}
       className={cn(
         "motion-context-enter absolute inset-0 z-[100] flex flex-col",
         className,
       )}
       style={{ backgroundColor: backgroundColor || "var(--bg-base)" }}
     >
-      <div className="flex-1 min-h-0 flex items-center justify-center">
+      <div className="flex min-h-0 flex-1 items-center justify-center p-6">
         {emptyState ? (
           emptyState
         ) : (
-          <div className="flex flex-col items-center gap-4 px-6 text-center">
-            {showSpinner && (
-              <Loader2
-                className="size-8 animate-spin text-accent-brand"
-                aria-hidden="true"
-              />
-            )}
-            {message && (
-              <p className="text-sm text-foreground-secondary font-medium">
-                {message}
-              </p>
-            )}
-            {attempt > 0 && status !== "disconnected" && (
-              <p className="text-xs text-muted-foreground">
-                {nextRetryInMs && nextRetryInMs > 0
-                  ? t("connection.retryingIn", {
-                      seconds: Math.ceil(nextRetryInMs / 1000),
-                      attempt,
-                      max: maxAttempts,
-                    })
-                  : t("connection.retryingNow", { attempt, max: maxAttempts })}
-              </p>
-            )}
-            {showRetryButton && (
-              <div className="flex flex-col items-center gap-2">
-                <p className="text-sm text-foreground-secondary font-medium">
-                  {disconnectedMessage || t("connection.disconnected")}
+          <div className="flex max-w-md flex-col items-center gap-3.5 text-center">
+            <ConnectionMark
+              state={
+                unavailable
+                  ? "unavailable"
+                  : connecting || retrying
+                    ? "busy"
+                    : "failed"
+              }
+            />
+
+            <div className="space-y-1.5">
+              {headline && (
+                <p className="text-sm font-semibold tracking-tight text-foreground">
+                  {headline}
                 </p>
-                <div className="flex gap-2">
+              )}
+              {detail && (
+                <p className="font-mono text-xs text-muted-foreground">
+                  {detail}
+                </p>
+              )}
+              {unavailable?.hint && (
+                <p className="text-xs leading-snug text-muted-foreground">
+                  {unavailable.hint}
+                </p>
+              )}
+              {failed && !unavailable && reason && (
+                <p className="line-clamp-3 text-xs leading-snug text-destructive/80">
+                  {reason}
+                </p>
+              )}
+              {showCountdown && (
+                <p className="text-xs tabular-nums text-muted-foreground">
+                  {nextRetryInMs && nextRetryInMs > 0
+                    ? t("connection.retryingIn", {
+                        seconds: Math.ceil(nextRetryInMs / 1000),
+                        attempt,
+                        max: maxAttempts,
+                      })
+                    : t("connection.retryingNow", {
+                        attempt,
+                        max: maxAttempts,
+                      })}
+                </p>
+              )}
+            </div>
+
+            {(showRetryButton ||
+              showClose ||
+              (stopped && extraActions) ||
+              unavailable?.action) && (
+              <div className="flex flex-wrap justify-center gap-2 pt-0.5">
+                {showRetryButton && (
                   <Button
                     variant="outline"
-                    size="default"
+                    size="sm"
                     onClick={onManualRetry}
                     className="gap-2 font-semibold"
                   >
                     <RefreshCw className="size-3.5" />
-                    {retryLabel || t("connection.reconnect")}
+                    {retrying
+                      ? t("connection.retryNow")
+                      : t("connection.reconnect")}
                   </Button>
-                  {extraActions}
-                </div>
+                )}
+                {unavailable?.action}
+                {stopped && extraActions}
+                {showClose && (
+                  <Button
+                    variant="outline"
+                    size="sm"
+                    onClick={close}
+                    className="gap-2 font-semibold"
+                  >
+                    <X className="size-3.5" />
+                    {t("connection.close")}
+                  </Button>
+                )}
               </div>
             )}
           </div>
         )}
       </div>
 
-      {showLog && !emptyState && (
+      {showLog && (
         <ConnectionLogPanel
-          isConnecting={status === "connecting"}
+          isConnecting={connecting}
           isConnected={false}
-          hasConnectionError={status === "error" || status === "disconnected"}
+          hasConnectionError={stopped}
           position={logPosition}
         />
       )}
     </div>
   );
 }
+
+/** A thin arc while working, a still ring with a dot once it stops. */
+function ConnectionMark({
+  state,
+}: {
+  state: "busy" | "failed" | "unavailable";
+}) {
+  return (
+    <div className="relative size-9" aria-hidden="true">
+      <svg viewBox="0 0 36 36" className="size-full">
+        <circle
+          cx="18"
+          cy="18"
+          r="15"
+          fill="none"
+          strokeWidth="2"
+          className="stroke-border"
+        />
+        {state === "busy" && (
+          <circle
+            cx="18"
+            cy="18"
+            r="15"
+            fill="none"
+            strokeWidth="2"
+            strokeLinecap="round"
+            strokeDasharray="26 68"
+            className="origin-center animate-spin stroke-accent-brand [animation-duration:900ms]"
+          />
+        )}
+      </svg>
+      {state !== "busy" && (
+        <span
+          className={cn(
+            "absolute inset-0 m-auto size-1.5 rounded-full",
+            state === "failed" ? "bg-destructive" : "bg-muted-foreground",
+          )}
+        />
+      )}
+    </div>
+  );
+}
diff --git a/src/ui/components/data-view.tsx b/src/ui/components/data-view.tsx
new file mode 100644
index 000000000..e2dac1fa6
--- /dev/null
+++ b/src/ui/components/data-view.tsx
@@ -0,0 +1,162 @@
+import type React from "react";
+import { cn } from "@/lib/utils";
+import {
+  PANEL,
+  type PanelDensity,
+  type PanelViewMode,
+} from "@/components/panel-layout";
+
+export interface DataColumn<T> {
+  key: string;
+  header: string;
+  /** Any grid track: "1fr", "120px", "minmax(0,2fr)". */
+  width: string;
+  cell: (item: T) => React.ReactNode;
+  /** Dropped below md, for columns that are nice rather than necessary. */
+  hideBelow?: "md" | "lg";
+  align?: "start" | "end";
+}
+
+export interface GridColumns {
+  base?: number;
+  md?: number;
+  lg?: number;
+  xl?: number;
+}
+
+// Spelled out so Tailwind can see every class.
+const COLS: Record<number, string> = {
+  1: "grid-cols-1",
+  2: "grid-cols-2",
+  3: "grid-cols-3",
+  4: "grid-cols-4",
+};
+const MD_COLS: Record<number, string> = {
+  1: "md:grid-cols-1",
+  2: "md:grid-cols-2",
+  3: "md:grid-cols-3",
+  4: "md:grid-cols-4",
+};
+const LG_COLS: Record<number, string> = {
+  1: "lg:grid-cols-1",
+  2: "lg:grid-cols-2",
+  3: "lg:grid-cols-3",
+  4: "lg:grid-cols-4",
+};
+const XL_COLS: Record<number, string> = {
+  1: "xl:grid-cols-1",
+  2: "xl:grid-cols-2",
+  3: "xl:grid-cols-3",
+  4: "xl:grid-cols-4",
+};
+
+function gridClass(columns: GridColumns): string {
+  return cn(
+    COLS[columns.base ?? 1],
+    columns.md && MD_COLS[columns.md],
+    columns.lg && LG_COLS[columns.lg],
+    columns.xl && XL_COLS[columns.xl],
+  );
+}
+
+/** One collection as a card grid or a dense row table. */
+export function DataView<T>({
+  items,
+  view,
+  density,
+  getKey,
+  renderCard,
+  columns,
+  listColumns,
+  onRowClick,
+  isRowActive,
+  empty,
+  className,
+}: {
+  items: T[];
+  view: PanelViewMode;
+  density?: PanelDensity;
+  getKey: (item: T) => string;
+  renderCard: (item: T) => React.ReactNode;
+  columns: GridColumns;
+  listColumns: DataColumn<T>[];
+  onRowClick?: (item: T) => void;
+  isRowActive?: (item: T) => boolean;
+  empty: React.ReactNode;
+  className?: string;
+}) {
+  if (items.length === 0) {
+    return (
+      <div className="flex flex-1 items-center justify-center">{empty}</div>
+    );
+  }
+
+  if (view === "grid") {
+    return (
+      <div className={cn("grid", PANEL.gap, gridClass(columns), className)}>
+        {items.map((item) => (
+          <div key={getKey(item)}>{renderCard(item)}</div>
+        ))}
+      </div>
+    );
+  }
+
+  const template = listColumns.map((c) => c.width).join(" ");
+  const rowHeight = density === "compact" ? "h-7" : "h-9";
+
+  return (
+    <div className={cn("border border-border bg-card", className)} role="table">
+      <div
+        className="sticky top-0 z-10 grid items-center border-b border-border bg-card px-3 text-[10px] font-semibold uppercase tracking-widest text-muted-foreground"
+        style={{ gridTemplateColumns: template }}
+      >
+        {listColumns.map((column) => (
+          <span
+            key={column.key}
+            className={cn(
+              "truncate py-2",
+              column.align === "end" && "text-right",
+              column.hideBelow === "md" && "hidden md:block",
+              column.hideBelow === "lg" && "hidden lg:block",
+            )}
+          >
+            {column.header}
+          </span>
+        ))}
+      </div>
+
+      <div>
+        {items.map((item) => {
+          const active = isRowActive?.(item) ?? false;
+          return (
+            <div
+              key={getKey(item)}
+              onClick={onRowClick ? () => onRowClick(item) : undefined}
+              className={cn(
+                "grid items-center gap-x-2 border-b border-border/50 px-3 text-xs transition-colors last:border-0",
+                rowHeight,
+                onRowClick && "cursor-pointer",
+                active ? "bg-accent-brand/10" : "hover:bg-muted/40",
+              )}
+              style={{ gridTemplateColumns: template }}
+            >
+              {listColumns.map((column) => (
+                <div
+                  key={column.key}
+                  className={cn(
+                    "min-w-0 truncate",
+                    column.align === "end" && "text-right",
+                    column.hideBelow === "md" && "hidden md:block",
+                    column.hideBelow === "lg" && "hidden lg:block",
+                  )}
+                >
+                  {column.cell(item)}
+                </div>
+              ))}
+            </div>
+          );
+        })}
+      </div>
+    </div>
+  );
+}
diff --git a/src/ui/components/docs-link.tsx b/src/ui/components/docs-link.tsx
new file mode 100644
index 000000000..76b418318
--- /dev/null
+++ b/src/ui/components/docs-link.tsx
@@ -0,0 +1,99 @@
+/* eslint-disable react-refresh/only-export-components */
+import { BookOpen } from "lucide-react";
+import type { ReactNode } from "react";
+import { useTranslation } from "react-i18next";
+import { pluginDocsPage } from "@termix-ssh/plugin-sdk/docs";
+import { docsUrl, type DocsPage } from "@/lib/docs";
+import { cn } from "@/lib/utils";
+import { usePluginScope } from "@/plugin-host/scope";
+import { usePluginStore } from "@/plugin-host/plugin-store";
+
+/** A plugin's docs link from its manifest, or null when it has none. */
+export function usePluginDocsUrl(
+  pluginId: string | null | undefined,
+  page?: string,
+  anchor?: string,
+): string | null {
+  const { records } = usePluginStore();
+  const base = pluginId ? records.get(pluginId)?.summary.docs : undefined;
+  return base ? pluginDocsPage(base, page, anchor) : null;
+}
+
+export interface DocsLinkProps {
+  /** A core docs page. */
+  core?: DocsPage;
+  /**
+   * A page of the current plugin's docs, like "setup". Inside a plugin this
+   * resolves against its manifest docs link; "" is its main page.
+   */
+  page?: string;
+  anchor?: string;
+  /** A full URL, used as is. */
+  href?: string | null;
+  /** "text" is a small inline link, "icon" a square header button. */
+  variant?: "text" | "icon";
+  children?: ReactNode;
+  className?: string;
+}
+
+/**
+ * The one way the app links to docs. Renders nothing when there is nowhere
+ * to go, like a community plugin with no docs link.
+ */
+export function DocsLink({
+  core,
+  page,
+  anchor,
+  href,
+  variant = "text",
+  children,
+  className,
+}: DocsLinkProps) {
+  const { t } = useTranslation();
+  const pluginId = usePluginScope();
+  const pluginUrl = usePluginDocsUrl(
+    page !== undefined ? pluginId : null,
+    page,
+    anchor,
+  );
+  const url =
+    href ?? (core ? withAnchor(docsUrl(core), anchor) : null) ?? pluginUrl;
+  if (!url) return null;
+
+  const label = t("common.docs");
+  if (variant === "icon") {
+    return (
+      <a
+        href={url}
+        target="_blank"
+        rel="noopener noreferrer"
+        title={label}
+        aria-label={label}
+        className={cn(
+          "flex size-7 shrink-0 items-center justify-center text-muted-foreground transition-colors hover:bg-muted/40 hover:text-foreground",
+          className,
+        )}
+      >
+        <BookOpen className="size-3.5" />
+      </a>
+    );
+  }
+  return (
+    <a
+      href={url}
+      target="_blank"
+      rel="noopener noreferrer"
+      className={cn(
+        "shrink-0 text-[10px] text-accent-brand hover:underline",
+        className,
+      )}
+    >
+      {children ?? label}
+    </a>
+  );
+}
+
+function withAnchor(url: string, anchor?: string): string {
+  if (!anchor) return url;
+  return `${url.split("#")[0]}#${anchor.replace(/^#/, "")}`;
+}
diff --git a/src/ui/components/form-fields.tsx b/src/ui/components/form-fields.tsx
new file mode 100644
index 000000000..2ff4a2d7e
--- /dev/null
+++ b/src/ui/components/form-fields.tsx
@@ -0,0 +1,480 @@
+/* eslint-disable react-refresh/only-export-components */
+import { useState, type ReactNode } from "react";
+import { useTranslation } from "react-i18next";
+import { Plus, Trash2, X } from "lucide-react";
+import { Input } from "@/components/input";
+import { PasswordInput } from "@/components/password-input";
+import { Button } from "@/components/button";
+import { SettingRow, FakeSwitch } from "@/components/section-card";
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@/components/select";
+import { cn } from "@/lib/utils";
+
+/** Label + control + optional hint, the shape every field shares. */
+export function Field({
+  label,
+  hint,
+  error,
+  aside,
+  htmlFor,
+  className,
+  children,
+}: {
+  label: string;
+  hint?: ReactNode;
+  error?: string;
+  aside?: ReactNode;
+  htmlFor?: string;
+  className?: string;
+  children: ReactNode;
+}) {
+  return (
+    <div data-setting-row="" className={cn("flex flex-col gap-1.5", className)}>
+      {(label || aside) && (
+        <div className="flex items-center gap-2">
+          <label
+            htmlFor={htmlFor}
+            className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground"
+          >
+            {label}
+          </label>
+          {aside && <span className="ml-auto">{aside}</span>}
+        </div>
+      )}
+      {children}
+      {error ? (
+        <span className="text-[10px] text-destructive">{error}</span>
+      ) : hint ? (
+        <span className="text-[10px] text-muted-foreground">{hint}</span>
+      ) : null}
+    </div>
+  );
+}
+
+export function TextField({
+  label,
+  value,
+  onChange,
+  placeholder,
+  hint,
+  error,
+  aside,
+  disabled,
+  mono,
+  className,
+}: {
+  label: string;
+  value: string;
+  onChange: (value: string) => void;
+  placeholder?: string;
+  hint?: ReactNode;
+  error?: string;
+  aside?: ReactNode;
+  disabled?: boolean;
+  mono?: boolean;
+  className?: string;
+}) {
+  return (
+    <Field
+      label={label}
+      hint={hint}
+      error={error}
+      aside={aside}
+      className={className}
+    >
+      <Input
+        value={value}
+        placeholder={placeholder}
+        disabled={disabled}
+        aria-invalid={!!error}
+        className={mono ? "font-mono" : undefined}
+        onChange={(e) => onChange(e.target.value)}
+      />
+    </Field>
+  );
+}
+
+export function NumberField({
+  label,
+  value,
+  onChange,
+  placeholder,
+  hint,
+  error,
+  min,
+  max,
+  disabled,
+  className,
+}: {
+  label: string;
+  value: number;
+  onChange: (value: number) => void;
+  placeholder?: string;
+  hint?: ReactNode;
+  error?: string;
+  min?: number;
+  max?: number;
+  disabled?: boolean;
+  className?: string;
+}) {
+  return (
+    <Field label={label} hint={hint} error={error} className={className}>
+      <Input
+        type="number"
+        value={Number.isFinite(value) ? value : ""}
+        placeholder={placeholder}
+        min={min}
+        max={max}
+        disabled={disabled}
+        aria-invalid={!!error}
+        onChange={(e) => onChange(Number(e.target.value))}
+      />
+    </Field>
+  );
+}
+
+/** Values the server sends in place of a stored secret. */
+export const SECRET_SENTINELS = [
+  "existing_password",
+  "existing_key",
+  "existing_key_password",
+  "existing_sudo_password",
+  "existing_rdp_password",
+  "existing_vnc_password",
+  "existing_telnet_password",
+];
+
+export function isSecretSentinel(value: string): boolean {
+  return SECRET_SENTINELS.includes(value);
+}
+
+export function SecretField({
+  label,
+  value,
+  onChange,
+  placeholder,
+  hint,
+  error,
+  disabled,
+  className,
+}: {
+  label: string;
+  value: string;
+  onChange: (value: string) => void;
+  placeholder?: string;
+  hint?: ReactNode;
+  error?: string;
+  disabled?: boolean;
+  className?: string;
+}) {
+  const { t } = useTranslation();
+  const saved = isSecretSentinel(value);
+  return (
+    <Field
+      label={label}
+      hint={saved ? t("fields.secretSaved") : hint}
+      error={error}
+      className={className}
+    >
+      <PasswordInput
+        value={saved ? "" : value}
+        placeholder={saved ? "••••••••" : placeholder}
+        disabled={disabled}
+        aria-invalid={!!error}
+        onChange={(e) => onChange(e.target.value)}
+      />
+    </Field>
+  );
+}
+
+/** A Radix dropdown, so its list uses the theme tokens. */
+export function SelectField<T extends string>({
+  label,
+  value,
+  onChange,
+  options,
+  hint,
+  error,
+  disabled,
+  className,
+  placeholder,
+}: {
+  label: string;
+  value: T;
+  onChange: (value: T) => void;
+  options: readonly { value: T; label: string }[];
+  hint?: ReactNode;
+  error?: string;
+  disabled?: boolean;
+  className?: string;
+  placeholder?: string;
+}) {
+  // Radix treats "" as no selection, so empty options get a stand-in value.
+  const EMPTY = "__empty__";
+  return (
+    <Field label={label} hint={hint} error={error} className={className}>
+      <Select
+        value={value === ("" as T) ? EMPTY : value}
+        disabled={disabled}
+        onValueChange={(next) => onChange((next === EMPTY ? "" : next) as T)}
+      >
+        <SelectTrigger aria-invalid={!!error} className="h-8 w-full text-xs">
+          <SelectValue placeholder={placeholder} />
+        </SelectTrigger>
+        <SelectContent>
+          {options.map((option) => (
+            <SelectItem
+              key={option.value}
+              value={option.value === "" ? EMPTY : option.value}
+              className="text-xs"
+            >
+              {option.label}
+            </SelectItem>
+          ))}
+        </SelectContent>
+      </Select>
+    </Field>
+  );
+}
+
+export function TextAreaField({
+  label,
+  value,
+  onChange,
+  placeholder,
+  rows = 3,
+  hint,
+  error,
+  aside,
+  mono,
+  disabled,
+  className,
+}: {
+  label: string;
+  value: string;
+  onChange: (value: string) => void;
+  placeholder?: string;
+  rows?: number;
+  hint?: ReactNode;
+  error?: string;
+  aside?: ReactNode;
+  mono?: boolean;
+  disabled?: boolean;
+  className?: string;
+}) {
+  return (
+    <Field
+      label={label}
+      hint={hint}
+      error={error}
+      aside={aside}
+      className={className}
+    >
+      <textarea
+        rows={rows}
+        value={value}
+        placeholder={placeholder}
+        disabled={disabled}
+        onChange={(e) => onChange(e.target.value)}
+        className={cn(
+          "w-full resize-none border border-input bg-background px-3 py-2 text-xs text-foreground transition-colors placeholder:text-muted-foreground focus-visible:border-ring focus-visible:ring-1 focus-visible:ring-ring/50 disabled:cursor-not-allowed disabled:opacity-50 dark:bg-input/30",
+          mono && "font-mono text-[10px]",
+        )}
+      />
+    </Field>
+  );
+}
+
+/** A labelled switch. */
+export function SwitchRow({
+  label,
+  description,
+  badge,
+  checked,
+  onChange,
+  disabled,
+  defaultKey,
+  rowId,
+}: {
+  label: string;
+  description?: ReactNode;
+  badge?: string;
+  checked: boolean;
+  onChange: (value: boolean) => void;
+  disabled?: boolean;
+  defaultKey?: string;
+  rowId?: string;
+}) {
+  return (
+    <SettingRow
+      label={label}
+      description={description}
+      badge={badge}
+      defaultKey={defaultKey}
+      rowId={rowId}
+    >
+      <FakeSwitch checked={checked} onChange={onChange} disabled={disabled} />
+    </SettingRow>
+  );
+}
+
+/** A list of rows you add to and remove from. */
+export function Repeater<T>({
+  label,
+  items,
+  onChange,
+  makeItem,
+  empty,
+  addLabel,
+  hint,
+  renderItem,
+}: {
+  label: string;
+  items: T[];
+  onChange: (items: T[]) => void;
+  makeItem: () => T;
+  empty: string;
+  addLabel: string;
+  hint?: ReactNode;
+  renderItem: (item: T, update: (next: T) => void, index: number) => ReactNode;
+}) {
+  const { t } = useTranslation();
+  return (
+    <div className="flex flex-col gap-2 py-3">
+      <div className="flex items-center gap-2">
+        <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
+          {label}
+        </span>
+        <Button
+          type="button"
+          variant="outline"
+          size="xs"
+          className="ml-auto"
+          onClick={() => onChange([...items, makeItem()])}
+        >
+          <Plus className="mr-1 size-3" />
+          {addLabel}
+        </Button>
+      </div>
+
+      {hint && (
+        <span className="text-[10px] text-muted-foreground">{hint}</span>
+      )}
+
+      {items.length === 0 ? (
+        <span className="border border-dashed border-border px-3 py-2 text-[10px] text-muted-foreground">
+          {empty}
+        </span>
+      ) : (
+        <div className="flex flex-col gap-2">
+          {items.map((item, index) => (
+            <div
+              key={index}
+              className="flex items-start gap-2 border border-border bg-muted/10 p-2"
+            >
+              <div className="min-w-0 flex-1">
+                {renderItem(
+                  item,
+                  (next) =>
+                    onChange(items.map((x, i) => (i === index ? next : x))),
+                  index,
+                )}
+              </div>
+              <button
+                type="button"
+                title={t("common.remove")}
+                aria-label={t("common.remove")}
+                onClick={() => onChange(items.filter((_, i) => i !== index))}
+                className="mt-0.5 shrink-0 text-muted-foreground transition-colors hover:text-destructive focus-visible:ring-1 focus-visible:ring-ring"
+              >
+                <Trash2 className="size-3.5" />
+              </button>
+            </div>
+          ))}
+        </div>
+      )}
+    </div>
+  );
+}
+
+/** Chip input for tags. */
+export function TagInput({
+  tags,
+  input,
+  placeholder,
+  onTagsChange,
+  onInputChange,
+}: {
+  tags: string[];
+  input: string;
+  placeholder: string;
+  onTagsChange: (tags: string[]) => void;
+  onInputChange: (value: string) => void;
+}) {
+  const { t } = useTranslation();
+  return (
+    <div className="flex min-h-8 flex-wrap items-center gap-1 border border-input bg-background px-2 py-1 focus-within:border-ring focus-within:ring-1 focus-within:ring-ring/50 dark:bg-input/30">
+      {tags.map((tag) => (
+        <span
+          key={tag}
+          className="flex items-center gap-0.5 border border-border/60 bg-muted px-1.5 py-0.5 text-[10px] text-foreground"
+        >
+          {tag}
+          <button
+            type="button"
+            aria-label={t("common.remove")}
+            onClick={() => onTagsChange(tags.filter((tg) => tg !== tag))}
+            className="ml-0.5 text-muted-foreground hover:text-destructive"
+          >
+            <X className="size-2.5" />
+          </button>
+        </span>
+      ))}
+      <input
+        className="min-w-16 flex-1 bg-transparent text-xs outline-none placeholder:text-muted-foreground/50"
+        placeholder={tags.length === 0 ? placeholder : ""}
+        value={input}
+        onChange={(e) => onInputChange(e.target.value)}
+        onKeyDown={(e) => {
+          if ((e.key === " " || e.key === "Enter") && input.trim()) {
+            e.preventDefault();
+            const tag = input.trim();
+            if (!tags.includes(tag)) onTagsChange([...tags, tag]);
+            onInputChange("");
+          } else if (e.key === "Backspace" && !input && tags.length > 0) {
+            onTagsChange(tags.slice(0, -1));
+          }
+        }}
+      />
+    </div>
+  );
+}
+
+/** Two fields side by side above md, stacked below. */
+export function FieldPair({ children }: { children: ReactNode }) {
+  return (
+    <div className="grid grid-cols-1 gap-4 md:grid-cols-2">{children}</div>
+  );
+}
+
+/** Reads a picked file's text, for keys and certificates. */
+export function useFileText(onText: (text: string) => void) {
+  const [reading, setReading] = useState(false);
+  return {
+    reading,
+    onFile: async (file: File | null | undefined) => {
+      if (!file) return;
+      setReading(true);
+      try {
+        onText((await file.text()).trim());
+      } finally {
+        setReading(false);
+      }
+    },
+  };
+}
diff --git a/src/ui/components/list-kit.tsx b/src/ui/components/list-kit.tsx
new file mode 100644
index 000000000..9dd0c5e57
--- /dev/null
+++ b/src/ui/components/list-kit.tsx
@@ -0,0 +1,467 @@
+import { useState } from "react";
+import type React from "react";
+import { ChevronRight, Plus, Trash2 } from "lucide-react";
+import { useTranslation } from "react-i18next";
+import { cn } from "@/lib/utils";
+import { Button } from "@/components/button";
+
+export type ListRowTone =
+  "brand" | "muted" | "success" | "warning" | "destructive" | "none";
+
+const STRIPE: Record<ListRowTone, string> = {
+  brand: "bg-accent-brand/60",
+  muted: "bg-muted-foreground/30",
+  success: "bg-green-500/70",
+  warning: "bg-warning/70",
+  destructive: "bg-destructive/70",
+  none: "bg-transparent",
+};
+
+/** Scrolling list body. Rows sit flush, divided by their own borders. */
+export function PanelList({
+  empty,
+  className,
+  children,
+}: {
+  /** Shown instead of the rows when there are none. */
+  empty?: React.ReactNode;
+  className?: string;
+  children?: React.ReactNode;
+}) {
+  const hasRows = Array.isArray(children)
+    ? children.flat().some(Boolean)
+    : Boolean(children);
+  return (
+    <div
+      className={cn(
+        "flex min-h-0 flex-1 flex-col overflow-y-auto thin-scrollbar",
+        className,
+      )}
+    >
+      {hasRows ? children : empty}
+    </div>
+  );
+}
+
+/**
+ * One row in a sidebar list, drawn like the host list: a coloured stripe on
+ * the left, a name with an optional line under it, and a row of action
+ * buttons that opens under it on hover.
+ */
+export function ListRow({
+  title,
+  icon,
+  badges,
+  meta,
+  stripe = 0,
+  tone = "brand",
+  color,
+  selected,
+  active,
+  dimmed,
+  leading,
+  trailing,
+  actions,
+  onClick,
+  className,
+  children,
+  ...rest
+}: {
+  title: React.ReactNode;
+  icon?: React.ReactNode;
+  /** Small chips after the title. */
+  badges?: React.ReactNode;
+  /** Muted line under the title, like a description or Facts. */
+  meta?: React.ReactNode;
+  /** Position in the list, odd rows get the zebra tint. */
+  stripe?: number;
+  tone?: ListRowTone;
+  /** A custom stripe colour, like a group's own colour. */
+  color?: string;
+  selected?: boolean;
+  /** Keeps the tray open, like while its menu is showing. */
+  active?: boolean;
+  dimmed?: boolean;
+  /** Sits between the stripe and the text, like a drag handle. */
+  leading?: React.ReactNode;
+  /** Always visible on the right, like a switch. */
+  trailing?: React.ReactNode;
+  /** Buttons under the row that open on hover, like the host list. */
+  actions?: React.ReactNode;
+  onClick?: () => void;
+  className?: string;
+  /** Extra lines under the meta. */
+  children?: React.ReactNode;
+} & Omit<
+  React.HTMLAttributes<HTMLDivElement>,
+  "title" | "onClick" | "children"
+>) {
+  return (
+    <div
+      {...rest}
+      role={onClick ? "button" : rest.role}
+      tabIndex={onClick ? 0 : rest.tabIndex}
+      onClick={onClick}
+      onKeyDown={(e) => {
+        rest.onKeyDown?.(e);
+        if (!onClick || e.defaultPrevented || e.target !== e.currentTarget)
+          return;
+        if (e.key === "Enter" || e.key === " ") {
+          e.preventDefault();
+          onClick();
+        }
+      }}
+      data-selected={selected || undefined}
+      className={cn(
+        "group/row relative flex items-stretch select-none border-b border-border/40 transition-colors hover:bg-muted/50 focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-inset focus-visible:ring-ring",
+        onClick && "cursor-pointer",
+        selected
+          ? "bg-accent-brand/10 hover:bg-accent-brand/15"
+          : active
+            ? "bg-muted/50"
+            : stripe % 2 === 1 && "bg-muted/15",
+        dimmed && "opacity-60",
+        className,
+      )}
+    >
+      <div
+        className={cn(
+          "w-[3px] shrink-0",
+          selected ? "bg-accent-brand" : !color && STRIPE[tone],
+        )}
+        style={color && !selected ? { backgroundColor: color } : undefined}
+      />
+      {leading}
+      <div className="flex min-w-0 flex-1 flex-col gap-[3.5px] py-[7px] pl-[8.75px] pr-[7px]">
+        <div className="flex min-w-0 items-center gap-1.5">
+          {icon && (
+            <span className="flex shrink-0 text-muted-foreground/60 [&_svg]:size-3">
+              {icon}
+            </span>
+          )}
+          <span className="truncate text-[13px] font-semibold leading-none tracking-tight text-foreground">
+            {title}
+          </span>
+          {badges}
+        </div>
+        {meta && (
+          <div className="min-w-0 truncate text-[11px] leading-tight text-muted-foreground/80">
+            {meta}
+          </div>
+        )}
+        {children}
+        {actions && (
+          <div
+            onClick={(e) => e.stopPropagation()}
+            className={cn(
+              "flex-wrap items-center gap-[1.75px] border-t border-border/30 pt-[3.5px]",
+              active
+                ? "flex"
+                : "hidden group-hover/row:flex group-focus-within/row:flex pointer-coarse:flex",
+            )}
+          >
+            {actions}
+          </div>
+        )}
+      </div>
+      {trailing && (
+        <div className="flex shrink-0 items-center pr-2">{trailing}</div>
+      )}
+    </div>
+  );
+}
+
+/** Square icon button for a ListRow tray. */
+export function ListRowAction({
+  label,
+  tone = "default",
+  className,
+  children,
+  ...rest
+}: {
+  label: string;
+  tone?: "default" | "brand" | "destructive";
+  className?: string;
+  children: React.ReactNode;
+} & Omit<React.ButtonHTMLAttributes<HTMLButtonElement>, "children"> & {
+    ref?: React.Ref<HTMLButtonElement>;
+  }) {
+  return (
+    <button
+      type="button"
+      title={label}
+      aria-label={label}
+      {...rest}
+      className={cn(
+        "flex size-[22.75px] items-center justify-center transition-colors hover:bg-muted disabled:pointer-events-none disabled:opacity-40 [&_svg]:size-3.5",
+        tone === "brand"
+          ? "text-accent-brand/80 hover:text-accent-brand"
+          : tone === "destructive"
+            ? "text-muted-foreground/60 hover:bg-destructive/10 hover:text-destructive"
+            : "text-muted-foreground/60 hover:text-foreground",
+        className,
+      )}
+    >
+      {children}
+    </button>
+  );
+}
+
+/** Small uppercase chip for a ListRow's badges. */
+export function ListBadge({
+  tone = "muted",
+  className,
+  children,
+}: {
+  tone?: "muted" | "brand" | "warning" | "destructive" | "success";
+  className?: string;
+  children: React.ReactNode;
+}) {
+  return (
+    <span
+      className={cn(
+        "flex shrink-0 items-center gap-0.5 border px-1 py-px text-[9px] uppercase leading-none tracking-wider [&_svg]:size-2.5",
+        tone === "brand" &&
+          "border-accent-brand/30 bg-accent-brand/10 text-accent-brand",
+        tone === "warning" && "border-warning/30 bg-warning/10 text-warning",
+        tone === "destructive" &&
+          "border-destructive/30 bg-destructive/10 text-destructive",
+        tone === "success" &&
+          "border-green-500/30 bg-green-500/10 text-green-500",
+        tone === "muted" && "border-border bg-muted/40 text-muted-foreground",
+        className,
+      )}
+    >
+      {children}
+    </span>
+  );
+}
+
+/** A collapsible group in a ListRow list, drawn like a host folder. */
+export function ListRowFolder({
+  name,
+  icon,
+  count,
+  open,
+  onToggle,
+  stripe = 0,
+  actions,
+  dropActive,
+  onDropItem,
+  emptyText,
+  className,
+  children,
+}: {
+  name: React.ReactNode;
+  icon?: React.ReactNode;
+  count?: number;
+  open: boolean;
+  onToggle: () => void;
+  stripe?: number;
+  /** Shown on hover, usually a DropdownMenu trigger. */
+  actions?: React.ReactNode;
+  /** True while something is being dragged that could drop in here. */
+  dropActive?: boolean;
+  onDropItem?: () => void;
+  emptyText?: React.ReactNode;
+  className?: string;
+  children?: React.ReactNode;
+}) {
+  const [dragOver, setDragOver] = useState(false);
+  const empty = count === 0;
+  return (
+    <div className={cn("border-b border-border/40", className)}>
+      <div
+        role="button"
+        tabIndex={0}
+        aria-expanded={open}
+        onClick={onToggle}
+        onKeyDown={(e) => {
+          if (e.target !== e.currentTarget) return;
+          if (e.key === "Enter" || e.key === " ") {
+            e.preventDefault();
+            onToggle();
+          }
+        }}
+        onDragOver={(e) => {
+          if (!dropActive) return;
+          e.preventDefault();
+          setDragOver(true);
+        }}
+        onDragLeave={(e) => {
+          if (e.currentTarget === e.target) setDragOver(false);
+        }}
+        onDrop={(e) => {
+          if (!dropActive) return;
+          e.preventDefault();
+          setDragOver(false);
+          onDropItem?.();
+        }}
+        className={cn(
+          "group/folder flex w-full cursor-pointer select-none items-center gap-2 py-1.5 pl-2.5 pr-2 transition-colors focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-inset focus-visible:ring-ring",
+          open ? "bg-muted/40" : "hover:bg-muted/30",
+          stripe % 2 === 1 && !open && "bg-muted/[0.08]",
+          dragOver &&
+            dropActive &&
+            "bg-accent-brand/10 ring-1 ring-inset ring-accent-brand",
+        )}
+      >
+        <ChevronRight
+          className={cn(
+            "size-3.5 shrink-0 text-muted-foreground/60 transition-transform",
+            open && "rotate-90",
+          )}
+        />
+        {icon && (
+          <span
+            className={cn(
+              "flex shrink-0 [&_svg]:size-4",
+              open ? "text-accent-brand" : "text-muted-foreground/70",
+            )}
+          >
+            {icon}
+          </span>
+        )}
+        <span className="min-w-0 flex-1 truncate text-[13px] font-bold tracking-tight text-foreground">
+          {name}
+        </span>
+        {count !== undefined && (
+          <span className="shrink-0 bg-muted/70 px-1.5 py-[1px] text-[10px] tabular-nums text-muted-foreground/70">
+            {count}
+          </span>
+        )}
+        {actions && (
+          <div
+            onClick={(e) => e.stopPropagation()}
+            className="flex shrink-0 items-center opacity-0 transition-opacity focus-within:opacity-100 group-hover/folder:opacity-100 pointer-coarse:opacity-100 has-[[data-state=open]]:opacity-100"
+          >
+            {actions}
+          </div>
+        )}
+      </div>
+      {open && (
+        <div className="ml-[27px] border-l border-t border-border/50 border-t-border/40 [&>*:last-child]:border-b-0">
+          {empty && emptyText ? (
+            <div className="px-3 py-2 text-[11px] text-muted-foreground/60">
+              {emptyText}
+            </div>
+          ) : (
+            children
+          )}
+        </div>
+      )}
+    </div>
+  );
+}
+
+/** The one "add" button, placed beside a panel's search box. */
+export function AddButton({
+  label,
+  compact,
+  className,
+  ...rest
+}: {
+  label?: string;
+  /** Icon only, for tight toolbars. */
+  compact?: boolean;
+  className?: string;
+} & Omit<React.ButtonHTMLAttributes<HTMLButtonElement>, "children"> & {
+    ref?: React.Ref<HTMLButtonElement>;
+  }) {
+  const { t } = useTranslation();
+  const text = label ?? t("common.new");
+  return (
+    <Button
+      variant="outline"
+      size={compact ? "icon" : "default"}
+      title={text}
+      aria-label={text}
+      {...rest}
+      className={cn(
+        "shrink-0 border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand dark:border-accent-brand/40 dark:bg-transparent dark:hover:bg-accent-brand/10",
+        className,
+      )}
+    >
+      <Plus className="size-3.5" />
+      {!compact && <span>{text}</span>}
+    </Button>
+  );
+}
+
+/** The one Save bar, for a PanelShell or InlineView footer. */
+export function FormFooter({
+  onCancel,
+  onSave,
+  saveLabel,
+  cancelLabel,
+  saving,
+  dirty,
+  status,
+  disabled,
+  onDelete,
+  deleteLabel,
+  extra,
+  saveType = "button",
+  form,
+}: {
+  onCancel?: () => void;
+  onSave?: () => void;
+  saveLabel?: string;
+  cancelLabel?: string;
+  saving?: boolean;
+  /** Shows the unsaved changes note. */
+  dirty?: boolean;
+  /** Replaces the unsaved note, like an error count. */
+  status?: React.ReactNode;
+  disabled?: boolean;
+  onDelete?: () => void;
+  deleteLabel?: string;
+  /** More buttons, placed before Save. */
+  extra?: React.ReactNode;
+  saveType?: "button" | "submit";
+  /** Id of the form a submit Save belongs to. */
+  form?: string;
+}) {
+  const { t } = useTranslation();
+  return (
+    <div className="flex w-full min-w-0 items-center gap-2">
+      {onDelete && (
+        <Button
+          variant="ghost"
+          size="sm"
+          onClick={onDelete}
+          disabled={saving}
+          className="text-destructive hover:bg-destructive/10 hover:text-destructive dark:hover:bg-destructive/10"
+        >
+          <Trash2 />
+          {deleteLabel ?? t("common.delete")}
+        </Button>
+      )}
+      <div className="min-w-0 flex-1 truncate text-[11px]">
+        {status ??
+          (dirty && (
+            <span className="text-warning">{t("common.unsavedChanges")}</span>
+          ))}
+      </div>
+      {onCancel && (
+        <Button variant="ghost" size="sm" onClick={onCancel} disabled={saving}>
+          {cancelLabel ?? t("common.cancel")}
+        </Button>
+      )}
+      {extra}
+      {(onSave || saveType === "submit") && (
+        <Button
+          type={saveType}
+          form={form}
+          variant="outline"
+          size="sm"
+          onClick={onSave}
+          disabled={disabled || saving}
+          className="border-accent-brand/40 px-6 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand dark:border-accent-brand/40 dark:bg-transparent dark:hover:bg-accent-brand/10"
+        >
+          {saving ? t("common.saving") : (saveLabel ?? t("common.save"))}
+        </Button>
+      )}
+    </div>
+  );
+}
diff --git a/src/ui/components/manager-card.tsx b/src/ui/components/manager-card.tsx
index e2d5e11ea..137afc0fa 100644
--- a/src/ui/components/manager-card.tsx
+++ b/src/ui/components/manager-card.tsx
@@ -52,7 +52,7 @@ export function ManagerCardShell({
     >
       {error ? (
         <div className="flex flex-col items-center gap-2 py-6 text-center">
-          <AlertTriangle className="size-6 text-yellow-500" />
+          <AlertTriangle className="size-6 text-warning" />
           <span className="text-xs text-muted-foreground">{error.message}</span>
           {error.code === "SUDO_REQUIRED" && (
             <span className="text-[10px] text-muted-foreground">
diff --git a/src/ui/components/meter.tsx b/src/ui/components/meter.tsx
new file mode 100644
index 000000000..88dd3cef0
--- /dev/null
+++ b/src/ui/components/meter.tsx
@@ -0,0 +1,55 @@
+import { cn } from "@/lib/utils";
+import { usageBarColor, usageColor } from "@/lib/usage-color";
+
+/** A usage bar on the shared color ramp. */
+export function Meter({
+  percent,
+  className,
+}: {
+  percent: number | null;
+  className?: string;
+}) {
+  const clamped = percent === null ? 0 : Math.min(100, Math.max(0, percent));
+  return (
+    <div className={cn("h-1.5 w-full overflow-hidden bg-muted", className)}>
+      <div
+        className={cn("motion-meter h-full", usageBarColor(percent))}
+        style={{ width: `${clamped}%` }}
+      />
+    </div>
+  );
+}
+
+/**
+ * A meter with its readout. Pass `label` for the stacked card form; leave it off
+ * for the bare form a table cell wants.
+ */
+export function UsagePair({
+  label,
+  percent,
+  detail,
+}: {
+  label?: string;
+  percent: number;
+  detail?: string;
+}) {
+  const clamped = Math.min(100, Math.max(0, percent));
+  return (
+    <div className="flex min-w-0 items-center gap-2">
+      {label && (
+        <span className="w-10 shrink-0 text-[10px] uppercase text-muted-foreground">
+          {label}
+        </span>
+      )}
+      <Meter percent={clamped} className="flex-1" />
+      <span
+        className={cn(
+          "shrink-0 text-right text-[11px] tabular-nums",
+          detail ? "text-muted-foreground" : usageColor(clamped),
+        )}
+      >
+        {detail ?? `${Math.round(clamped)}%`}
+      </span>
+    </div>
+  );
+}
diff --git a/src/ui/components/panel-layout.tsx b/src/ui/components/panel-layout.tsx
new file mode 100644
index 000000000..fe1b99c50
--- /dev/null
+++ b/src/ui/components/panel-layout.tsx
@@ -0,0 +1,458 @@
+/* eslint-disable react-refresh/only-export-components */
+import { Children, Fragment, isValidElement, useRef } from "react";
+import type React from "react";
+import { ArrowLeft, Grid3X3, List, Rows3, Search, X } from "lucide-react";
+import { useTranslation } from "react-i18next";
+import { cn } from "@/lib/utils";
+import { Separator } from "@/components/separator";
+import { DocsLink } from "@/components/docs-link";
+
+/** One spacing rhythm for every panel and tab. */
+export const PANEL = {
+  body: "p-2.5",
+  gap: "gap-2",
+  band: "px-3 py-2",
+  cardHead: "px-3 py-2.5",
+  header: "h-12.5",
+} as const;
+
+export type PanelViewMode = "grid" | "list";
+export type PanelDensity = "comfortable" | "compact";
+
+/** The header, toolbar band and body every tab and panel draws. */
+export function PanelShell({
+  chrome = true,
+  icon,
+  title,
+  status,
+  leading,
+  actions,
+  toolbar,
+  tabs,
+  footer,
+  scroll = true,
+  docs,
+  className,
+  children,
+}: {
+  /** False inside a sidebar, which draws its own header. */
+  chrome?: boolean;
+  icon?: React.ReactNode;
+  title?: React.ReactNode;
+  /** Short caption beside the title, like "12 of 18 running". */
+  status?: React.ReactNode;
+  /** Sits before the title, usually a BackButton. */
+  leading?: React.ReactNode;
+  actions?: React.ReactNode;
+  toolbar?: React.ReactNode;
+  /** A full-bleed tab strip in place of a toolbar. */
+  tabs?: React.ReactNode;
+  /** A bar pinned under the body, like Cancel and Save. */
+  footer?: React.ReactNode;
+  /** False when the body scrolls itself. */
+  scroll?: boolean;
+  /** Docs URL for this screen, shown as a book icon in the header. */
+  docs?: string | null;
+  className?: string;
+  children: React.ReactNode;
+}) {
+  const body = (
+    <div
+      className={cn(
+        "flex min-h-0 flex-1 flex-col",
+        scroll && "overflow-y-auto thin-scrollbar",
+        className,
+      )}
+    >
+      {children}
+    </div>
+  );
+
+  const bands = (
+    <>
+      {toolbar && (
+        <div
+          className={`flex shrink-0 items-center gap-2 border-b border-border ${PANEL.band}`}
+        >
+          {toolbar}
+        </div>
+      )}
+      {tabs && (
+        <div className="shrink-0 border-b border-border px-1">{tabs}</div>
+      )}
+    </>
+  );
+
+  const foot = footer && (
+    <div className="flex shrink-0 items-center gap-2 border-t border-border px-3 py-2">
+      {footer}
+    </div>
+  );
+
+  if (!chrome) {
+    return (
+      <div className="flex min-h-0 flex-1 flex-col">
+        {bands}
+        {body}
+        {foot}
+      </div>
+    );
+  }
+
+  return (
+    <div className="flex h-full min-h-0 flex-1 flex-col overflow-hidden bg-background">
+      <header
+        className={`flex ${PANEL.header} shrink-0 flex-row items-center border-b border-border`}
+      >
+        {leading && (
+          <div className="flex h-full shrink-0 border-r border-border">
+            {leading}
+          </div>
+        )}
+        <div className="flex min-w-0 flex-1 items-center gap-2 px-3">
+          {icon && <span className="shrink-0 text-accent-brand">{icon}</span>}
+          <span className="truncate text-base font-bold tracking-tight">
+            {title}
+          </span>
+          {status && (
+            <>
+              <Separator
+                orientation="vertical"
+                className="h-4 data-[orientation=vertical]:self-center"
+              />
+              <span className="truncate text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
+                {status}
+              </span>
+            </>
+          )}
+        </div>
+        {(actions || docs) && (
+          <div className="flex shrink-0 items-center gap-1 px-2">
+            {actions}
+            {docs && <DocsLink href={docs} variant="icon" />}
+          </div>
+        )}
+      </header>
+      {bands}
+      {body}
+      {foot}
+    </div>
+  );
+}
+
+/** Square back button sized for the PanelShell header. */
+export function BackButton({
+  onClick,
+  label,
+  className,
+}: {
+  onClick: () => void;
+  label?: string;
+  className?: string;
+}) {
+  const { t } = useTranslation();
+  const text = label ?? t("common.back");
+  return (
+    <button
+      type="button"
+      onClick={onClick}
+      title={text}
+      aria-label={text}
+      className={cn(
+        "flex h-full w-12.5 shrink-0 items-center justify-center text-muted-foreground transition-colors hover:bg-muted/40 hover:text-foreground focus-visible:ring-1 focus-visible:ring-ring",
+        className,
+      )}
+    >
+      <ArrowLeft className="size-4" />
+    </button>
+  );
+}
+
+/** Search box sized to match toolbar buttons. Esc clears it. */
+export function PanelSearch({
+  value,
+  onChange,
+  placeholder,
+  fill,
+  autoFocus,
+  disabled,
+  title,
+  onEnter,
+  inputRef,
+  className,
+}: {
+  value: string;
+  onChange: (next: string) => void;
+  placeholder?: string;
+  /** Takes the whole toolbar, for panels where search is the only control. */
+  fill?: boolean;
+  autoFocus?: boolean;
+  disabled?: boolean;
+  title?: string;
+  /** Runs on Enter, for searches that query a server. */
+  onEnter?: () => void;
+  inputRef?: React.Ref<HTMLInputElement>;
+  className?: string;
+}) {
+  const { t } = useTranslation();
+  const localRef = useRef<HTMLInputElement>(null);
+  const text = placeholder ?? t("common.search");
+  return (
+    <div
+      className={cn(
+        "relative",
+        fill ? "w-full min-w-0 flex-1" : "w-40 md:w-56",
+        className,
+      )}
+    >
+      <Search className="pointer-events-none absolute left-2.5 top-1/2 size-3.5 -translate-y-1/2 text-muted-foreground" />
+      <input
+        ref={(el) => {
+          localRef.current = el;
+          if (typeof inputRef === "function") inputRef(el);
+          else if (inputRef)
+            (
+              inputRef as React.MutableRefObject<HTMLInputElement | null>
+            ).current = el;
+        }}
+        type="text"
+        value={value}
+        autoFocus={autoFocus}
+        disabled={disabled}
+        title={title}
+        aria-label={text}
+        placeholder={text}
+        onChange={(e) => onChange(e.target.value)}
+        onKeyDown={(e) => {
+          if (e.key === "Escape" && value) {
+            e.stopPropagation();
+            onChange("");
+          }
+          if (e.key === "Enter" && onEnter) {
+            e.preventDefault();
+            onEnter();
+          }
+        }}
+        className="h-8 w-full min-w-0 border border-input bg-transparent pl-8 pr-7 text-xs outline-none transition-colors placeholder:text-muted-foreground focus-visible:border-ring focus-visible:ring-1 focus-visible:ring-ring/50 disabled:cursor-not-allowed disabled:opacity-50 dark:bg-input/30"
+      />
+      {value && (
+        <button
+          type="button"
+          aria-label={t("panel.clearSearch")}
+          title={t("panel.clearSearch")}
+          onClick={() => {
+            onChange("");
+            localRef.current?.focus();
+          }}
+          className="absolute right-1.5 top-1/2 flex size-5 -translate-y-1/2 items-center justify-center text-muted-foreground hover:text-foreground"
+        >
+          <X className="size-3" />
+        </button>
+      )}
+    </div>
+  );
+}
+
+/** Square segmented control. */
+export function Segmented<T extends string>({
+  value,
+  onChange,
+  options,
+  className,
+}: {
+  value: T;
+  onChange: (next: T) => void;
+  options: readonly {
+    value: NoInfer<T>;
+    label: string;
+    icon?: React.ReactNode;
+    count?: number;
+    title?: string;
+  }[];
+  className?: string;
+}) {
+  return (
+    <div
+      role="radiogroup"
+      className={cn("flex items-center border border-border", className)}
+    >
+      {options.map((option, i) => {
+        const active = option.value === value;
+        return (
+          <button
+            key={option.value}
+            type="button"
+            role="radio"
+            aria-checked={active}
+            title={option.title ?? option.label}
+            onClick={() => onChange(option.value)}
+            className={cn(
+              "flex h-8 items-center justify-center gap-1.5 px-2.5 text-[11px] font-medium transition-colors focus-visible:relative focus-visible:z-10 focus-visible:ring-1 focus-visible:ring-ring",
+              i > 0 && "border-l border-border",
+              active
+                ? "bg-accent-brand/10 text-accent-brand"
+                : "text-muted-foreground hover:text-foreground",
+            )}
+          >
+            {option.icon}
+            {option.label}
+            {option.count !== undefined && (
+              <span className="text-[10px] tabular-nums opacity-60">
+                {option.count}
+              </span>
+            )}
+          </button>
+        );
+      })}
+    </div>
+  );
+}
+
+/** Grid or list, plus the compact rows toggle. */
+export function ViewToggle({
+  view,
+  onView,
+  density,
+  onDensity,
+}: {
+  view: PanelViewMode;
+  onView: (next: PanelViewMode) => void;
+  density?: PanelDensity;
+  onDensity?: (next: PanelDensity) => void;
+}) {
+  const { t } = useTranslation();
+  return (
+    <div className="flex items-center border border-border">
+      <ToggleButton
+        active={view === "grid"}
+        onClick={() => onView("grid")}
+        title={t("panel.gridView")}
+      >
+        <Grid3X3 className="size-4" />
+      </ToggleButton>
+      <ToggleButton
+        active={view === "list"}
+        onClick={() => onView("list")}
+        title={t("panel.listView")}
+        bordered
+      >
+        <List className="size-4" />
+      </ToggleButton>
+      {density && onDensity && (
+        <ToggleButton
+          active={density === "compact"}
+          onClick={() =>
+            onDensity(density === "compact" ? "comfortable" : "compact")
+          }
+          title={
+            density === "compact"
+              ? t("panel.comfortableRows")
+              : t("panel.compactRows")
+          }
+          bordered
+        >
+          <Rows3 className="size-4" />
+        </ToggleButton>
+      )}
+    </div>
+  );
+}
+
+function ToggleButton({
+  active,
+  onClick,
+  title,
+  bordered,
+  children,
+}: {
+  active: boolean;
+  onClick: () => void;
+  title: string;
+  bordered?: boolean;
+  children: React.ReactNode;
+}) {
+  return (
+    <button
+      type="button"
+      onClick={onClick}
+      title={title}
+      aria-label={title}
+      aria-pressed={active}
+      className={cn(
+        "flex size-8 items-center justify-center transition-colors focus-visible:relative focus-visible:z-10 focus-visible:ring-1 focus-visible:ring-ring",
+        bordered && "border-l border-border",
+        active
+          ? "bg-accent-brand/10 text-accent-brand"
+          : "text-muted-foreground hover:text-foreground",
+      )}
+    >
+      {children}
+    </button>
+  );
+}
+
+/**
+ * A run of peer facts with a rule between each pair, like "12 online | 40
+ * hosts". Never wraps; a fact that does not fit is truncated.
+ */
+/** Children with fragments opened up, so each fact gets its own divider. */
+function flattenFacts(children: React.ReactNode): React.ReactNode[] {
+  return Children.toArray(children).flatMap((child) =>
+    isValidElement<{ children?: React.ReactNode }>(child) &&
+    child.type === Fragment
+      ? flattenFacts(child.props.children)
+      : [child],
+  );
+}
+
+export function Facts({
+  className,
+  children,
+}: {
+  className?: string;
+  children: React.ReactNode;
+}) {
+  const items = flattenFacts(children);
+  if (items.length === 0) return null;
+
+  return (
+    <span className={cn("flex min-w-0 items-center gap-2", className)}>
+      {items.map((child, i) => (
+        <Fragment key={i}>
+          {i > 0 && (
+            <span aria-hidden className="h-3 w-px shrink-0 bg-border" />
+          )}
+          <span className="min-w-0 truncate">{child}</span>
+        </Fragment>
+      ))}
+    </span>
+  );
+}
+
+/** Section label with a rule running to the edge. */
+export function GroupHeading({
+  title,
+  count,
+  action,
+  className,
+}: {
+  title: string;
+  count?: number;
+  action?: React.ReactNode;
+  className?: string;
+}) {
+  return (
+    <div className={cn("flex items-center gap-2", className)}>
+      <span className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
+        {title}
+      </span>
+      {count !== undefined && (
+        <span className="text-[10px] tabular-nums text-muted-foreground/60">
+          {count}
+        </span>
+      )}
+      <div className="h-px flex-1 bg-border" />
+      {action}
+    </div>
+  );
+}
diff --git a/src/ui/components/section-card.tsx b/src/ui/components/section-card.tsx
index 3f61832aa..8fa7877f8 100644
--- a/src/ui/components/section-card.tsx
+++ b/src/ui/components/section-card.tsx
@@ -8,20 +8,24 @@ export function SectionCard({
   action,
   children,
   className,
+  rowId,
 }: {
   title: string;
   icon: React.ReactNode;
   action?: React.ReactNode;
   children: React.ReactNode;
   className?: string;
+  /** Lets settings search jump to this card. */
+  rowId?: string;
 }) {
   return (
     <div
+      data-setting-row={rowId}
       className={`flex flex-col border border-border bg-card overflow-hidden ${className ?? ""}`}
     >
       <div className="flex items-center gap-2 px-4 py-2.5 border-b border-border shrink-0">
         <span className="text-muted-foreground">{icon}</span>
-        <span className="text-xs font-semibold uppercase tracking-widest text-muted-foreground flex-1">
+        <span className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground flex-1">
           {title}
         </span>
         {action && <div className="ml-auto">{action}</div>}
@@ -36,6 +40,7 @@ export function SettingRow({
   badge,
   description,
   defaultKey,
+  rowId,
   children,
 }: {
   label: string;
@@ -46,18 +51,23 @@ export function SettingRow({
    * field key, or "core.<key>". Shows where the value comes from.
    */
   defaultKey?: string;
+  /** Lets settings search jump to this row. */
+  rowId?: string;
   children: React.ReactNode;
 }) {
   return (
     <DefaultsOnly settingKey={defaultKey ?? ""}>
       {/* In a gap-4 form stack the gap already spaces the row, so its own
           padding and divider would double up. */}
-      <div className="flex items-center justify-between gap-3 py-3 border-b border-border last:border-0 [.gap-4>&]:py-0 [.gap-4>&]:border-0">
+      <div
+        data-setting-row={rowId ?? ""}
+        className="flex items-center justify-between gap-3 py-3 border-b border-border last:border-0 [.gap-4>&]:py-0 [.gap-4>&]:border-0"
+      >
         <div className="flex flex-col gap-0.5 min-w-0 flex-1">
           <div className="flex items-center gap-1.5 flex-wrap">
             <span className="text-sm font-medium leading-snug">{label}</span>
             {badge && (
-              <span className="text-[10px] font-bold text-yellow-500 border border-yellow-500/40 px-1 shrink-0">
+              <span className="text-[10px] font-bold text-warning border border-warning/40 px-1 shrink-0">
                 {badge}
               </span>
             )}
@@ -90,13 +100,16 @@ export function FakeSwitch({
   const on = checked !== undefined ? checked : internalOn;
   return (
     <button
+      type="button"
+      role="switch"
+      aria-checked={on}
       disabled={disabled}
       onClick={() => {
         const next = !on;
         if (checked === undefined) setInternalOn(next);
         onChange?.(next);
       }}
-      className={`relative inline-flex h-5 w-9 shrink-0 cursor-pointer items-center border-2 transition-colors ${on ? "bg-accent-brand border-accent-brand" : "bg-muted border-border"}`}
+      className={`relative inline-flex h-5 w-9 shrink-0 cursor-pointer items-center border-2 transition-colors disabled:cursor-not-allowed disabled:opacity-50 ${on ? "bg-accent-brand border-accent-brand" : "bg-muted border-border"}`}
     >
       <span
         className={`pointer-events-none inline-block h-3 w-3 bg-background shadow-sm transition-transform ${on ? "translate-x-4" : "translate-x-0.5"}`}
diff --git a/src/ui/components/select2.tsx b/src/ui/components/select2.tsx
index e9405242d..991a1d471 100644
--- a/src/ui/components/select2.tsx
+++ b/src/ui/components/select2.tsx
@@ -154,7 +154,7 @@ function Select2({
           aria-expanded={open}
           aria-required={required}
           className={cn(
-            "border-input bg-background text-foreground flex h-9 w-full items-center justify-between gap-2 rounded-none border px-3 py-2 text-sm shadow-xs transition-[color,box-shadow] outline-none focus-visible:border-ring focus-visible:ring-ring/50 focus-visible:ring-[3px] disabled:cursor-not-allowed disabled:opacity-50",
+            "border-input bg-transparent dark:bg-input/30 dark:hover:bg-input/50 text-foreground flex h-9 w-full items-center justify-between gap-2 rounded-none border px-3 py-2 text-sm shadow-xs transition-[color,box-shadow] outline-none focus-visible:border-ring focus-visible:ring-ring/50 focus-visible:ring-[3px] disabled:cursor-not-allowed disabled:opacity-50",
             className,
           )}
           onKeyDown={(event) => {
diff --git a/src/ui/components/separator.tsx b/src/ui/components/separator.tsx
index d7fc9faa5..b05a0f3bb 100644
--- a/src/ui/components/separator.tsx
+++ b/src/ui/components/separator.tsx
@@ -15,7 +15,7 @@ function Separator({
       decorative={decorative}
       orientation={orientation}
       className={cn(
-        "shrink-0 bg-border data-horizontal:h-px data-horizontal:w-full data-vertical:w-px data-vertical:self-stretch",
+        "shrink-0 bg-border data-[orientation=horizontal]:h-px data-[orientation=horizontal]:w-full data-[orientation=vertical]:w-px data-[orientation=vertical]:self-stretch",
         className,
       )}
       {...props}
diff --git a/src/ui/components/surface/prompt-styles.ts b/src/ui/components/surface/prompt-styles.ts
new file mode 100644
index 000000000..f68e45ec0
--- /dev/null
+++ b/src/ui/components/surface/prompt-styles.ts
@@ -0,0 +1,9 @@
+/** Buttons shared by every PanePrompt, so confirms and prompts match. */
+export const PROMPT_BUTTON =
+  "inline-flex h-7 items-center justify-center gap-1.5 border border-border px-3 text-xs text-muted-foreground transition-colors hover:bg-muted hover:text-foreground focus-visible:ring-1 focus-visible:ring-ring disabled:pointer-events-none disabled:opacity-50";
+
+export const PROMPT_PRIMARY_BUTTON =
+  "inline-flex h-7 items-center justify-center gap-1.5 border border-accent-brand/40 px-3 text-xs font-medium text-accent-brand transition-colors hover:bg-accent-brand/10 focus-visible:ring-1 focus-visible:ring-ring disabled:pointer-events-none disabled:opacity-50";
+
+export const PROMPT_DESTRUCTIVE_BUTTON =
+  "inline-flex h-7 items-center justify-center gap-1.5 bg-destructive px-3 text-xs font-medium text-white transition-colors hover:bg-destructive/90 focus-visible:ring-1 focus-visible:ring-ring disabled:pointer-events-none disabled:opacity-50";
diff --git a/src/ui/components/surface/surface-scope.tsx b/src/ui/components/surface/surface-scope.tsx
new file mode 100644
index 000000000..8aced0893
--- /dev/null
+++ b/src/ui/components/surface/surface-scope.tsx
@@ -0,0 +1,487 @@
+/* eslint-disable react-refresh/only-export-components */
+import {
+  createContext,
+  useCallback,
+  useContext,
+  useEffect,
+  useId,
+  useLayoutEffect,
+  useMemo,
+  useRef,
+  useState,
+} from "react";
+import type React from "react";
+import { createPortal } from "react-dom";
+import { useTranslation } from "react-i18next";
+import { cn } from "@/lib/utils";
+import { BackButton, PanelShell } from "@/components/panel-layout";
+import {
+  PROMPT_BUTTON,
+  PROMPT_DESTRUCTIVE_BUTTON,
+  PROMPT_PRIMARY_BUTTON,
+} from "./prompt-styles";
+
+/**
+ * A surface is a sidebar panel, a tab or a split pane. Inline views and
+ * confirmations draw over the surface that asked, never over the whole app.
+ */
+
+export type EditingWidth = boolean | "wide";
+export type SurfaceKind = "panel" | "tab" | "pane";
+
+export interface ConfirmOptions {
+  title: string;
+  description?: React.ReactNode;
+  confirmLabel?: string;
+  cancelLabel?: string;
+  /** Red confirm button. Defaults to true, since most confirms delete. */
+  destructive?: boolean;
+}
+
+interface PendingConfirm extends ConfirmOptions {
+  id: number;
+  resolve: (ok: boolean) => void;
+}
+
+interface ScopeValue {
+  kind: SurfaceKind;
+  overlay: HTMLElement | null;
+  openView: (id: string, width: EditingWidth) => void;
+  closeView: (id: string) => void;
+  topView: string | null;
+  confirm: (options: ConfirmOptions) => Promise<boolean>;
+  close: (() => void) | null;
+}
+
+const ScopeContext = createContext<ScopeValue | null>(null);
+
+function widest(widths: EditingWidth[]): EditingWidth {
+  if (widths.includes("wide")) return "wide";
+  return widths.some(Boolean);
+}
+
+// Only the most recently opened confirm, anywhere in the app, owns the keyboard.
+const keyOwners: number[] = [];
+
+export function SurfaceScope({
+  kind = "panel",
+  onEditingChange,
+  onClose,
+  className,
+  children,
+}: {
+  kind?: SurfaceKind;
+  /** Closes whatever this surface is, like the tab it fills. */
+  onClose?: () => void;
+  /** Gets the widest open inline view, so a sidebar can widen for it. */
+  onEditingChange?: (editing: EditingWidth) => void;
+  className?: string;
+  children: React.ReactNode;
+}) {
+  const [overlay, setOverlay] = useState<HTMLElement | null>(null);
+  const [views, setViews] = useState<{ id: string; width: EditingWidth }[]>([]);
+  const [confirms, setConfirms] = useState<PendingConfirm[]>([]);
+  const nextConfirm = useRef(0);
+  const editingRef = useRef(onEditingChange);
+  editingRef.current = onEditingChange;
+  const closeRef = useRef(onClose);
+  closeRef.current = onClose;
+  const hasClose = !!onClose;
+  const close = useMemo(
+    () => (hasClose ? () => closeRef.current?.() : null),
+    [hasClose],
+  );
+
+  const openView = useCallback((id: string, width: EditingWidth) => {
+    setViews((prev) => [...prev.filter((v) => v.id !== id), { id, width }]);
+  }, []);
+  const closeView = useCallback((id: string) => {
+    setViews((prev) => prev.filter((v) => v.id !== id));
+  }, []);
+
+  const editing = widest(views.map((v) => v.width));
+  useEffect(() => {
+    editingRef.current?.(editing);
+  }, [editing]);
+  useEffect(() => () => editingRef.current?.(false), []);
+
+  const confirm = useCallback(
+    (options: ConfirmOptions) =>
+      new Promise<boolean>((resolve) => {
+        const id = ++nextConfirm.current;
+        setConfirms((prev) => [...prev, { ...options, id, resolve }]);
+      }),
+    [],
+  );
+
+  const settle = useCallback((id: number, ok: boolean) => {
+    setConfirms((prev) => {
+      prev.find((c) => c.id === id)?.resolve(ok);
+      return prev.filter((c) => c.id !== id);
+    });
+  }, []);
+
+  // A scope that unmounts with a question open answers it with no.
+  const confirmsRef = useRef(confirms);
+  confirmsRef.current = confirms;
+  useEffect(
+    () => () => confirmsRef.current.forEach((c) => c.resolve(false)),
+    [],
+  );
+
+  const value = useMemo<ScopeValue>(
+    () => ({
+      kind,
+      overlay,
+      openView,
+      closeView,
+      topView: views.length ? views[views.length - 1].id : null,
+      confirm,
+      close,
+    }),
+    [kind, overlay, openView, closeView, views, confirm, close],
+  );
+
+  const current = confirms[0];
+
+  return (
+    <ScopeContext.Provider value={value}>
+      <div
+        className={cn(
+          "relative flex min-h-0 min-w-0 flex-1 flex-col",
+          className,
+        )}
+      >
+        {children}
+        <div
+          ref={setOverlay}
+          className={cn(
+            "absolute inset-0 z-40 flex flex-col bg-background",
+            views.length === 0 && "hidden",
+          )}
+        />
+        {current && (
+          <ConfirmCard
+            key={current.id}
+            options={current}
+            onSettle={(ok) => settle(current.id, ok)}
+          />
+        )}
+      </div>
+    </ScopeContext.Provider>
+  );
+}
+
+/** Which kind of surface this code renders in, or null outside any. */
+export function useSurfaceKind(): SurfaceKind | null {
+  return useContext(ScopeContext)?.kind ?? null;
+}
+
+/** Closes the surface this code renders in, or null when it can't be closed. */
+export function useSurfaceClose(): (() => void) | null {
+  return useContext(ScopeContext)?.close ?? null;
+}
+
+/**
+ * Asks a yes or no question over the surface that called it. Enter confirms
+ * and Esc cancels, before a terminal can see the key.
+ */
+export function useConfirm(): (options: ConfirmOptions) => Promise<boolean> {
+  const scope = useContext(ScopeContext);
+  return useCallback(
+    (options: ConfirmOptions) => {
+      if (scope) return scope.confirm(options);
+      const text = [options.title, options.description]
+        .filter((part) => typeof part === "string")
+        .join("\n\n");
+      return Promise.resolve(window.confirm(text));
+    },
+    [scope],
+  );
+}
+
+function ConfirmCard({
+  options,
+  onSettle,
+}: {
+  options: ConfirmOptions;
+  onSettle: (ok: boolean) => void;
+}) {
+  const { t } = useTranslation();
+  const confirmRef = useRef<HTMLButtonElement>(null);
+  const titleId = useId();
+  const destructive = options.destructive ?? true;
+  const settleRef = useRef(onSettle);
+  settleRef.current = onSettle;
+
+  useEffect(() => {
+    const owner = Math.random();
+    keyOwners.push(owner);
+    const previous = document.activeElement as HTMLElement | null;
+    confirmRef.current?.focus();
+
+    const onKey = (e: KeyboardEvent) => {
+      if (keyOwners[keyOwners.length - 1] !== owner) return;
+      if (e.key !== "Enter" && e.key !== "Escape") return;
+      e.preventDefault();
+      e.stopPropagation();
+      settleRef.current(e.key === "Enter");
+    };
+    window.addEventListener("keydown", onKey, true);
+    return () => {
+      window.removeEventListener("keydown", onKey, true);
+      keyOwners.splice(keyOwners.indexOf(owner), 1);
+      if (previous && document.contains(previous)) previous.focus();
+    };
+  }, []);
+
+  return (
+    <PanePrompt
+      open
+      role="alertdialog"
+      labelledBy={titleId}
+      title={options.title}
+      titleId={titleId}
+      description={options.description}
+      tone={destructive ? "destructive" : "default"}
+      onCancel={() => onSettle(false)}
+      actions={
+        <>
+          <button
+            type="button"
+            onClick={() => onSettle(false)}
+            className={PROMPT_BUTTON}
+          >
+            {options.cancelLabel ?? t("common.cancel")}
+          </button>
+          <button
+            ref={confirmRef}
+            type="button"
+            onClick={() => onSettle(true)}
+            className={
+              destructive ? PROMPT_DESTRUCTIVE_BUTTON : PROMPT_PRIMARY_BUTTON
+            }
+          >
+            {options.confirmLabel ??
+              (destructive ? t("common.delete") : t("common.confirm"))}
+            <span aria-hidden className="ml-1.5 opacity-60">
+              ↵
+            </span>
+          </button>
+        </>
+      }
+    />
+  );
+}
+
+/**
+ * A small card over the surface it sits in. Confirmations use it, and so do
+ * prompts that belong to a connection, like a sudo password.
+ */
+export function PanePrompt({
+  open,
+  title,
+  titleId,
+  description,
+  icon,
+  tone = "default",
+  actions,
+  onCancel,
+  role = "dialog",
+  labelledBy,
+  layer = "pane",
+  backgroundColor,
+  className,
+  children,
+}: {
+  open: boolean;
+  title: React.ReactNode;
+  titleId?: string;
+  description?: React.ReactNode;
+  icon?: React.ReactNode;
+  tone?: "default" | "destructive";
+  actions?: React.ReactNode;
+  /** Clicking the dimmed backdrop. */
+  onCancel?: () => void;
+  role?: "dialog" | "alertdialog";
+  labelledBy?: string;
+  /**
+   * "connection" covers a connecting surface (a terminal waiting on a login)
+   * with an opaque backdrop, above everything the surface draws.
+   */
+  layer?: "pane" | "connection";
+  /** Backdrop color for the connection layer, usually the terminal theme. */
+  backgroundColor?: string;
+  className?: string;
+  children?: React.ReactNode;
+}) {
+  const fallbackId = useId();
+  if (!open) return null;
+  const headingId = titleId ?? fallbackId;
+  return (
+    <div
+      className={cn(
+        "motion-fade-enter absolute inset-0 flex items-center justify-center overflow-y-auto p-4",
+        layer === "connection" ? "z-500 bg-canvas" : "z-50 bg-background/85",
+      )}
+      style={
+        layer === "connection" && backgroundColor
+          ? { backgroundColor }
+          : undefined
+      }
+      onMouseDown={(e) => {
+        if (e.target === e.currentTarget) onCancel?.();
+      }}
+    >
+      <div
+        role={role}
+        aria-modal="true"
+        aria-labelledby={labelledBy ?? headingId}
+        className={cn(
+          "motion-context-enter my-auto flex w-full max-w-sm flex-col border bg-popover shadow-xl",
+          tone === "destructive" ? "border-destructive/40" : "border-border",
+          className,
+        )}
+      >
+        <div className="flex items-start gap-2.5 px-4 pt-4">
+          {icon && (
+            <span
+              className={cn(
+                "mt-0.5 shrink-0",
+                tone === "destructive"
+                  ? "text-destructive"
+                  : "text-accent-brand",
+              )}
+            >
+              {icon}
+            </span>
+          )}
+          <div className="flex min-w-0 flex-col gap-1">
+            <p
+              id={headingId}
+              className="text-sm font-semibold tracking-tight text-foreground"
+            >
+              {title}
+            </p>
+            {description && (
+              <div className="text-xs leading-snug text-muted-foreground">
+                {description}
+              </div>
+            )}
+          </div>
+        </div>
+        {children && <div className="px-4 pt-3">{children}</div>}
+        {actions && (
+          <div className="flex justify-end gap-2 px-4 py-3">{actions}</div>
+        )}
+        {!actions && <div className="h-4" />}
+      </div>
+    </div>
+  );
+}
+
+/**
+ * What used to be a modal: a view that takes over the surface it was opened
+ * from, with a Back button. Opened from a sidebar it widens the sidebar.
+ */
+export function InlineView({
+  open,
+  onOpenChange,
+  title,
+  icon,
+  status,
+  actions,
+  toolbar,
+  footer,
+  width = true,
+  onBeforeClose,
+  scroll = true,
+  bare = false,
+  className,
+  children,
+}: {
+  open: boolean;
+  onOpenChange: (open: boolean) => void;
+  title: React.ReactNode;
+  icon?: React.ReactNode;
+  status?: React.ReactNode;
+  actions?: React.ReactNode;
+  toolbar?: React.ReactNode;
+  /** Pinned under the body, usually Cancel and Save. */
+  footer?: React.ReactNode;
+  /** How far a sidebar widens while this is open. */
+  width?: EditingWidth;
+  /** Return false to stay open, for an unsaved changes guard. */
+  onBeforeClose?: () => boolean | Promise<boolean>;
+  scroll?: boolean;
+  /** Draw children edge to edge, for views with their own bands. */
+  bare?: boolean;
+  className?: string;
+  children: React.ReactNode;
+}) {
+  const scope = useContext(ScopeContext);
+  const id = useId();
+  const { openView, closeView } = scope ?? {};
+
+  useLayoutEffect(() => {
+    if (!open || !openView || !closeView) return;
+    openView(id, width);
+    return () => closeView(id);
+  }, [open, id, width, openView, closeView]);
+
+  const requestClose = useCallback(async () => {
+    if (onBeforeClose && !(await onBeforeClose())) return;
+    onOpenChange(false);
+  }, [onBeforeClose, onOpenChange]);
+
+  if (!open) return null;
+
+  const padded = scope?.kind === "tab" || scope?.kind === "pane";
+  const view = (
+    <div
+      className={cn(
+        "absolute inset-0 flex flex-col",
+        scope && scope.topView !== id && "hidden",
+      )}
+      onKeyDown={(e) => {
+        if (e.key === "Escape" && !e.defaultPrevented) {
+          e.stopPropagation();
+          void requestClose();
+        }
+      }}
+    >
+      <PanelShell
+        leading={<BackButton onClick={() => void requestClose()} />}
+        icon={icon}
+        title={title}
+        status={status}
+        actions={actions}
+        toolbar={toolbar}
+        footer={footer}
+        scroll={scroll}
+      >
+        {bare ? (
+          children
+        ) : (
+          <div
+            className={cn(
+              "flex w-full flex-col gap-3",
+              padded ? "mx-auto max-w-3xl p-3" : "p-3",
+              !scroll && "min-h-0 flex-1",
+              className,
+            )}
+          >
+            {children}
+          </div>
+        )}
+      </PanelShell>
+    </div>
+  );
+
+  if (scope?.overlay) return createPortal(view, scope.overlay);
+  if (scope) return null;
+  return createPortal(
+    <div className="fixed inset-0 z-50 bg-background">{view}</div>,
+    document.body,
+  );
+}
diff --git a/src/ui/components/switch.tsx b/src/ui/components/switch.tsx
index e8daa1ebb..08c549b89 100644
--- a/src/ui/components/switch.tsx
+++ b/src/ui/components/switch.tsx
@@ -11,16 +11,14 @@ function Switch({
     <SwitchPrimitive.Root
       data-slot="switch"
       className={cn(
-        "peer data-[state=checked]:bg-primary data-[state=unchecked]:bg-input focus-visible:border-ring focus-visible:ring-ring/50 dark:data-[state=unchecked]:bg-input/80 inline-flex h-[1.15rem] w-8 shrink-0 items-center rounded-full border border-transparent shadow-xs transition-[background-color,border-color,box-shadow,opacity] outline-none focus-visible:ring-[3px] disabled:cursor-not-allowed disabled:opacity-50",
+        "peer relative inline-flex h-5 w-9 shrink-0 cursor-pointer items-center border-2 transition-colors outline-none focus-visible:ring-[3px] focus-visible:ring-ring/50 disabled:cursor-not-allowed disabled:opacity-50 data-[state=checked]:bg-accent-brand data-[state=checked]:border-accent-brand data-[state=unchecked]:bg-muted data-[state=unchecked]:border-border",
         className,
       )}
       {...props}
     >
       <SwitchPrimitive.Thumb
         data-slot="switch-thumb"
-        className={cn(
-          "bg-background dark:data-[state=unchecked]:bg-foreground dark:data-[state=checked]:bg-primary-foreground pointer-events-none block size-4 rounded-full ring-0 transition-transform data-[state=checked]:translate-x-[calc(100%-2px)] data-[state=unchecked]:translate-x-0",
-        )}
+        className="pointer-events-none block h-3 w-3 bg-background shadow-sm transition-transform data-[state=checked]:translate-x-4 data-[state=unchecked]:translate-x-0.5"
       />
     </SwitchPrimitive.Root>
   );
diff --git a/src/ui/components/tab-strip.tsx b/src/ui/components/tab-strip.tsx
new file mode 100644
index 000000000..c3bea4e61
--- /dev/null
+++ b/src/ui/components/tab-strip.tsx
@@ -0,0 +1,145 @@
+import { useEffect, useRef, useState, type ReactNode } from "react";
+import { ChevronLeft, ChevronRight } from "lucide-react";
+import { useTranslation } from "react-i18next";
+import { cn } from "@/lib/utils";
+
+export interface TabStripItem {
+  id: string;
+  label: string;
+  icon?: ReactNode;
+  /** Small count after the label. */
+  count?: number;
+}
+
+/** Scrollable underline tabs with overflow arrows. */
+export function TabStrip({
+  tabs,
+  activeTab,
+  onTabChange,
+  isActive,
+  variant = "primary",
+  trailing,
+  className,
+}: {
+  tabs: TabStripItem[];
+  activeTab: string;
+  onTabChange: (id: string) => void;
+  isActive?: (id: string) => boolean;
+  variant?: "primary" | "secondary";
+  /** Sits after the tabs, outside the scroll area. */
+  trailing?: ReactNode;
+  className?: string;
+}) {
+  const ref = useRef<HTMLDivElement>(null);
+  const { t } = useTranslation();
+  const [scroll, setScroll] = useState({ left: false, right: false });
+  useEffect(() => {
+    const el = ref.current;
+    if (!el) return;
+    const update = () =>
+      setScroll({
+        left: el.scrollLeft > 1,
+        right: el.scrollLeft + el.clientWidth < el.scrollWidth - 1,
+      });
+    const observer =
+      typeof ResizeObserver === "undefined" ? null : new ResizeObserver(update);
+    observer?.observe(el);
+    if (el.firstElementChild) observer?.observe(el.firstElementChild);
+    el.addEventListener("scroll", update);
+    update();
+    return () => {
+      observer?.disconnect();
+      el.removeEventListener("scroll", update);
+    };
+  }, [tabs]);
+
+  useEffect(() => {
+    const el = ref.current;
+    if (!el) return;
+    const onWheel = (e: WheelEvent) => {
+      if (e.deltaY === 0) return;
+      e.preventDefault();
+      el.scrollLeft += e.deltaY;
+    };
+    el.addEventListener("wheel", onWheel, { passive: false });
+    return () => el.removeEventListener("wheel", onWheel);
+  }, []);
+
+  const renderTab = (tab: TabStripItem) => {
+    const active = isActive ? isActive(tab.id) : activeTab === tab.id;
+    return (
+      <button
+        key={tab.id}
+        type="button"
+        onClick={() => onTabChange(tab.id)}
+        className={`flex items-center gap-1.5 px-3 ${
+          variant === "secondary" ? "py-1.5 text-[11px]" : "py-2 text-xs"
+        } font-medium whitespace-nowrap border-b-2 transition-colors shrink-0 ${
+          active
+            ? "border-accent-brand text-accent-brand"
+            : "border-transparent text-muted-foreground hover:text-foreground"
+        }`}
+      >
+        {tab.icon}
+        {tab.label}
+        {tab.count !== undefined && (
+          <span className="text-[10px] tabular-nums opacity-60">
+            {tab.count}
+          </span>
+        )}
+      </button>
+    );
+  };
+
+  const overflow = scroll.left || scroll.right;
+  return (
+    <div
+      className={cn(
+        "flex min-w-0 items-center",
+        variant === "secondary" && "border-t border-border bg-card",
+        className,
+      )}
+    >
+      {overflow && (
+        <button
+          type="button"
+          aria-label={t("common.scrollTabsLeft")}
+          title={t("common.scrollTabsLeft")}
+          disabled={!scroll.left}
+          className="shrink-0 p-1 disabled:opacity-30"
+          onClick={() =>
+            ref.current?.scrollBy({
+              left: -ref.current.clientWidth * 0.75,
+              behavior: "smooth",
+            })
+          }
+        >
+          <ChevronLeft className="size-4" />
+        </button>
+      )}
+      <div ref={ref} className="min-w-0 flex-1 overflow-x-auto scrollbar-none">
+        <div className="flex min-w-max">{tabs.map(renderTab)}</div>
+      </div>
+      {overflow && (
+        <button
+          type="button"
+          aria-label={t("common.scrollTabsRight")}
+          title={t("common.scrollTabsRight")}
+          disabled={!scroll.right}
+          className="shrink-0 p-1 disabled:opacity-30"
+          onClick={() =>
+            ref.current?.scrollBy({
+              left: ref.current.clientWidth * 0.75,
+              behavior: "smooth",
+            })
+          }
+        >
+          <ChevronRight className="size-4" />
+        </button>
+      )}
+      {trailing && (
+        <div className="flex shrink-0 items-center gap-1 px-1">{trailing}</div>
+      )}
+    </div>
+  );
+}
diff --git a/src/ui/components/version-badge.tsx b/src/ui/components/version-badge.tsx
index de744f92b..bd79acaa4 100644
--- a/src/ui/components/version-badge.tsx
+++ b/src/ui/components/version-badge.tsx
@@ -1,4 +1,5 @@
 import { useTranslation } from "react-i18next";
+import { cn } from "@/lib/utils";
 
 interface VersionBadgeProps {
   status: "up_to_date" | "requires_update" | "beta" | "unknown";
@@ -14,13 +15,15 @@ export function VersionBadge({
   const { t } = useTranslation();
   if (status === "unknown") return null;
 
-  const badgeClassName = `text-[10px] px-1.5 py-0.5 font-semibold leading-none ${
+  const badgeClassName = cn(
+    "text-[10px] px-1.5 py-0.5 font-semibold leading-none",
     status === "beta"
       ? "bg-blue-500/20 text-blue-400"
       : status === "requires_update"
-        ? "bg-yellow-500/20 text-yellow-400"
-        : "bg-accent-brand/20 text-accent-brand"
-  }${className ? ` ${className}` : ""}`;
+        ? "bg-warning/20 text-warning"
+        : "bg-accent-brand/20 text-accent-brand",
+    className,
+  );
 
   const label =
     status === "beta"
@@ -42,7 +45,7 @@ export function VersionBadge({
         rel="noopener noreferrer"
         title={linkLabel}
         aria-label={linkLabel}
-        className={`${badgeClassName} cursor-pointer hover:underline`}
+        className={cn(badgeClassName, "cursor-pointer hover:underline")}
       >
         {label}
       </a>
diff --git a/src/ui/contexts/UiPreferencesContext.tsx b/src/ui/contexts/UiPreferencesContext.tsx
index 1ee00878b..613a9e355 100644
--- a/src/ui/contexts/UiPreferencesContext.tsx
+++ b/src/ui/contexts/UiPreferencesContext.tsx
@@ -21,13 +21,13 @@ import {
   resolvePluginArea,
   type UiPluginPresets,
   sanitizeUiPreferences,
-  UI_ONBOARDING_VERSION,
   type UiAreaKey,
   type UiAreaPreferences,
   type UiOverrides,
   type UiPreferences,
   type UiPreset,
 } from "@/types/ui-preferences";
+import { mergeSeen } from "@/types/onboarding";
 
 const SAVE_DEBOUNCE_MS = 500;
 const LS_KEY = "uiPreferences";
@@ -62,7 +62,21 @@ interface UiPreferencesContextValue {
   ) => void;
   clearArea: (area: UiAreaKey) => void;
   clearAllOverrides: () => void;
-  completeOnboarding: (skipped: boolean) => void;
+  /**
+   * Records onboarding steps as seen (per-step max, never lowered).
+   * `completed` stamps completedAt the first time a run finishes, and
+   * `baselineDone` clears the carried-over-user flag.
+   */
+  markOnboardingSeen: (
+    seen: Record<string, number>,
+    options?: {
+      completed?: boolean;
+      skipped?: boolean;
+      baselineDone?: boolean;
+    },
+  ) => void;
+  /** Sends any queued change now instead of after the debounce. */
+  flushNow: () => Promise<void>;
   /** A plugin's own area, from the presets it declared. */
   resolvePlugin: (
     pluginId: string,
@@ -85,15 +99,26 @@ const UiPreferencesContext = createContext<UiPreferencesContextValue | null>(
  * deep and treats null as "clear this", so handing a knob back to the preset is
  * a single PUT rather than a read-modify-write of the whole document.
  */
-export function UiPreferencesProvider({ children }: { children: ReactNode }) {
+export function UiPreferencesProvider({
+  children,
+  initial,
+}: {
+  children: ReactNode;
+  /** Already fetched (by the onboarding gate), so no second request. */
+  initial?: UiPreferences | null;
+}) {
   const [preferences, setPreferences] = useState<UiPreferences>(
-    () => readCache() ?? defaultUiPreferences(),
+    () => initial ?? readCache() ?? defaultUiPreferences(),
   );
-  const [loaded, setLoaded] = useState(false);
+  const [loaded, setLoaded] = useState(!!initial);
   const saveTimer = useRef<ReturnType<typeof setTimeout> | null>(null);
   const pendingPatch = useRef<Record<string, unknown>>({});
 
   useEffect(() => {
+    if (initial) {
+      writeCache(initial);
+      return;
+    }
     let cancelled = false;
 
     getUiPreferences()
@@ -112,49 +137,74 @@ export function UiPreferencesProvider({ children }: { children: ReactNode }) {
     return () => {
       cancelled = true;
     };
+    // initial only matters on mount.
+    // eslint-disable-next-line react-hooks/exhaustive-deps
   }, []);
 
+  const flush = useCallback((): Promise<void> => {
+    if (saveTimer.current) {
+      clearTimeout(saveTimer.current);
+      saveTimer.current = null;
+    }
+    const body = pendingPatch.current;
+    pendingPatch.current = {};
+    if (Object.keys(body).length === 0) return Promise.resolve();
+    return getUserPreferences()
+      .then((prefs) => {
+        if (prefs.storageMode === "cloud") return saveUiPreferences(body);
+        // The server copy replaces the cache on load, so onboarding has to
+        // reach it even in local mode or it reruns every time.
+        if (body.onboarding)
+          return saveUiPreferences({
+            onboarding: body.onboarding as UiPreferences["onboarding"],
+          });
+      })
+      .catch(() => {
+        /* best-effort; cache already holds it */
+      });
+  }, []);
+
+  // A pending edit must not be lost when the provider goes away.
   useEffect(() => {
     return () => {
-      if (saveTimer.current) clearTimeout(saveTimer.current);
+      void flush();
     };
-  }, []);
+  }, [flush]);
 
-  const queueSave = useCallback((patch: Record<string, unknown>) => {
-    // Overrides accumulate key by key so a burst of edits still sends every
-    // change; anything else is last-write-wins.
-    const merged = { ...pendingPatch.current };
-    for (const [key, value] of Object.entries(patch)) {
-      if (key === "overrides" && value && typeof value === "object") {
-        merged.overrides = {
-          ...((merged.overrides as Record<string, unknown>) ?? {}),
-          ...(value as Record<string, unknown>),
-        };
-      } else {
-        merged[key] = value;
+  const queueSave = useCallback(
+    (patch: Record<string, unknown>) => {
+      // Overrides accumulate key by key so a burst of edits still sends every
+      // change, and onboarding seen maps merge; anything else is
+      // last-write-wins.
+      const merged = { ...pendingPatch.current };
+      for (const [key, value] of Object.entries(patch)) {
+        if (key === "overrides" && value && typeof value === "object") {
+          merged.overrides = {
+            ...((merged.overrides as Record<string, unknown>) ?? {}),
+            ...(value as Record<string, unknown>),
+          };
+        } else if (key === "onboarding" && value && typeof value === "object") {
+          const prev = (merged.onboarding ?? {}) as Record<string, unknown>;
+          const next = value as Record<string, unknown>;
+          merged.onboarding = {
+            ...prev,
+            ...next,
+            seen: mergeSeen(
+              prev.seen as Record<string, number>,
+              next.seen as Record<string, number>,
+            ),
+          };
+        } else {
+          merged[key] = value;
+        }
       }
-    }
-    pendingPatch.current = merged;
+      pendingPatch.current = merged;
 
-    if (saveTimer.current) clearTimeout(saveTimer.current);
-    saveTimer.current = setTimeout(() => {
-      const body = pendingPatch.current;
-      pendingPatch.current = {};
-      getUserPreferences()
-        .then((prefs) => {
-          if (prefs.storageMode === "cloud") return saveUiPreferences(body);
-          // The server copy replaces the cache on load, so onboarding has to
-          // reach it even in local mode or it reruns every time.
-          if (body.onboarding)
-            return saveUiPreferences({
-              onboarding: body.onboarding as UiPreferences["onboarding"],
-            });
-        })
-        .catch(() => {
-          /* best-effort; cache already holds it */
-        });
-    }, SAVE_DEBOUNCE_MS);
-  }, []);
+      if (saveTimer.current) clearTimeout(saveTimer.current);
+      saveTimer.current = setTimeout(() => void flush(), SAVE_DEBOUNCE_MS);
+    },
+    [flush],
+  );
 
   /** Applies the local mirror of a patch, then queues the same patch remotely. */
   const applyLocal = useCallback(
@@ -227,14 +277,34 @@ export function UiPreferencesProvider({ children }: { children: ReactNode }) {
     applyLocal((prev) => ({ ...prev, overrides: {} }), { overrides: null });
   }, [applyLocal]);
 
-  const completeOnboarding = useCallback(
-    (skipped: boolean) => {
-      const onboarding = {
-        completedVersion: UI_ONBOARDING_VERSION,
-        completedAt: new Date().toISOString(),
-        skipped,
-      };
-      applyLocal((prev) => ({ ...prev, onboarding }), { onboarding });
+  const markOnboardingSeen = useCallback(
+    (
+      seen: Record<string, number>,
+      options: {
+        completed?: boolean;
+        skipped?: boolean;
+        baselineDone?: boolean;
+      } = {},
+    ) => {
+      const patch: Record<string, unknown> = { seen };
+      if (options.completed) patch.completedAt = new Date().toISOString();
+      if (options.skipped !== undefined) patch.skipped = options.skipped;
+      if (options.baselineDone) patch.baselinePending = false;
+      applyLocal(
+        (prev) => ({
+          ...prev,
+          onboarding: {
+            ...prev.onboarding,
+            ...patch,
+            completedAt:
+              prev.onboarding.completedAt ??
+              (patch.completedAt as string | undefined) ??
+              null,
+            seen: mergeSeen(prev.onboarding.seen, seen),
+          },
+        }),
+        { onboarding: patch },
+      );
     },
     [applyLocal],
   );
@@ -248,7 +318,8 @@ export function UiPreferencesProvider({ children }: { children: ReactNode }) {
       setOverride,
       clearArea,
       clearAllOverrides,
-      completeOnboarding,
+      markOnboardingSeen,
+      flushNow: flush,
       resolvePlugin: (pluginId, presets) =>
         resolvePluginArea(preferences, pluginId, presets),
       setPluginOverride: (pluginId, key, value) =>
@@ -265,7 +336,8 @@ export function UiPreferencesProvider({ children }: { children: ReactNode }) {
       setOverride,
       clearArea,
       clearAllOverrides,
-      completeOnboarding,
+      markOnboardingSeen,
+      flush,
     ],
   );
 
diff --git a/src/ui/dashboard/DashboardTab.tsx b/src/ui/dashboard/DashboardTab.tsx
index f70508e0d..892140fa4 100644
--- a/src/ui/dashboard/DashboardTab.tsx
+++ b/src/ui/dashboard/DashboardTab.tsx
@@ -1,30 +1,30 @@
 import { useState, useRef, useCallback, useEffect, useMemo } from "react";
-import { enabledHostProtocols, protocolPort } from "@/sidebar/host-protocols";
-import { ComponentSlot } from "@/shell/ActionSlot";
 import { useActionSlot } from "@/hooks/use-action-slot";
 import { useIsMobile } from "@/hooks/use-mobile";
 import { usePluginStore } from "@/plugin-host/plugin-store";
 import { Button } from "@/components/button";
-import { Card } from "@/components/card";
-import { Separator } from "@/components/separator";
 import { Skeleton } from "@/components/skeleton";
+import { Kbd } from "@/components/kbd";
+import {
+  Facts,
+  GroupHeading,
+  PanelShell,
+  Segmented,
+} from "@/components/panel-layout";
+import { useConfirm } from "@/components/surface/surface-scope";
 import {
   Activity,
+  Check,
   Database,
-  ExternalLink,
-  GripHorizontal,
   GripVertical,
-  KeyRound,
-  LayoutDashboard,
+  LayoutGrid,
+  Pencil,
   Plus,
+  RotateCcw,
   Server,
-  Settings,
-  Trash2,
-  User,
+  X,
   Zap,
 } from "lucide-react";
-import { Kbd } from "@/components/kbd";
-import { VersionBadge } from "@/components/version-badge";
 import { DASHBOARD_CARDS } from "@/lib/theme";
 import type { DashboardCardId, TabType, Host } from "@/types/ui-types";
 import {
@@ -46,24 +46,25 @@ import {
   useRegisteredDashboardCards,
 } from "./dashboard-cards-registry";
 import { PluginViewPlaceholder } from "@/plugin-host/PluginViewPlaceholder";
-import { activityTarget } from "@/lib/activity-types";
 import { shell } from "@/plugin-host/shell-bridge";
-import {
-  defaultConnectAction,
-  hostActionsFor,
-  listHostActions,
-} from "@/sidebar/host-contributions";
-import {
-  useStatusColorScheme,
-  getStatusClasses,
-} from "@/hooks/use-status-color-scheme";
 import {
   useServerStatus,
   useServerStatusMeta,
 } from "@/lib/ServerStatusContext";
 import { withLiveHostStatus } from "@/sidebar/live-host-status";
 import { sshHostToHost } from "@/sidebar/HostManagerData";
-import { getDefaultConnectionTab } from "@/lib/host-connection-tabs";
+import {
+  CountersStrip,
+  HostStatusList,
+  QuickActions,
+  RecentActivityList,
+  StatsStrip,
+  type VersionStatus,
+} from "./dashboard-core-cards";
+import { reportCoreIssueUrl } from "@/lib/issue-url";
+import { docsUrl } from "@/lib/docs";
+
+export { HostStatusList as HostStatusCard } from "./dashboard-core-cards";
 
 // ─── Types ────────────────────────────────────────────────────────────────────
 
@@ -77,55 +78,51 @@ type CardSlot = {
   height: number | null;
 };
 
-type DragState = {
-  key: string;
-  id: DashboardCardId;
-  sourcePanel: PanelId;
-  sourceOrder: number;
-} | null;
-
 // ─── Default layout ───────────────────────────────────────────────────────────
 
 const DEFAULT_SLOTS: CardSlot[] = [
-  { key: "stats_bar_0", id: "stats_bar", panel: "main", order: 0, height: 96 },
+  { key: "stats_bar_0", id: "stats_bar", panel: "main", order: 0, height: 76 },
   {
     key: "counters_bar_0",
     id: "counters_bar",
     panel: "main",
     order: 1,
-    height: 48,
-  },
-  {
-    key: "quick_actions_0",
-    id: "quick_actions",
-    panel: "main",
-    order: 2,
-    height: 160,
+    height: 52,
   },
   {
     key: "host_status_0",
     id: "host_status",
     panel: "main",
-    order: 3,
+    order: 2,
     height: null,
   },
+  {
+    key: "quick_actions_0",
+    id: "quick_actions",
+    panel: "side",
+    order: 0,
+    height: 180,
+  },
   {
     key: "recent_activity_0",
     id: "recent_activity",
     panel: "side",
-    order: 0,
+    order: 1,
     height: null,
   },
 ];
 
-/** Cards core draws itself; any other id belongs to a plugin. */
-const CORE_CARD_IDS = new Set<string>([
-  "stats_bar",
-  "counters_bar",
-  "quick_actions",
-  "host_status",
-  "recent_activity",
-]);
+/** Cards core draws itself, how they are framed and what marks them. */
+const CORE_CARD_META: Record<
+  string,
+  { icon: React.ElementType; frame: "framed" | "bare" }
+> = {
+  stats_bar: { icon: Activity, frame: "bare" },
+  counters_bar: { icon: Database, frame: "bare" },
+  quick_actions: { icon: Zap, frame: "framed" },
+  host_status: { icon: Server, frame: "framed" },
+  recent_activity: { icon: Activity, frame: "framed" },
+};
 
 /**
  * A plugin's card, or a placeholder that keeps the slot while its plugin is
@@ -151,846 +148,194 @@ export function PluginCardSlot({
   const card = getRegisteredDashboardCard(id);
   if (!card) {
     return (
-      <Card className="flex h-full w-full overflow-hidden py-0">
+      <div className="flex h-full w-full overflow-hidden">
         <PluginViewPlaceholder kind="card" viewId={id} compact />
-      </Card>
+      </div>
     );
   }
   const Component = card.component;
   return <Component isVisible={isVisible} shell={cardShell} />;
 }
 
-// ─── Card components ──────────────────────────────────────────────────────────
-
-function StatsBarCard({
-  hosts,
-  uptimeFormatted,
-  versionText,
-  versionStatus,
-  releaseUrl,
-  dbHealth,
-}: {
-  hosts: Host[];
-  uptimeFormatted: string;
-  versionText: string;
-  versionStatus: "up_to_date" | "requires_update" | "beta" | "unknown";
-  releaseUrl: string;
-  dbHealth: "healthy" | "error";
-}) {
-  const { t } = useTranslation();
-  const online = hosts.filter((h) => h.status === "online").length;
-  return (
-    <Card className="grid grid-cols-4 divide-x divide-border overflow-hidden w-full h-full py-0 gap-0">
-      <div className="flex flex-col justify-center px-4 py-2 gap-1">
-        <span className="text-[10px] text-muted-foreground uppercase tracking-widest font-semibold">
-          {t("dashboard.version")}
-        </span>
-        <span className="text-xl font-bold text-accent-brand leading-none">
-          {versionText || "—"}
-        </span>
-        <VersionBadge
-          status={versionStatus}
-          releaseUrl={releaseUrl}
-          className="w-fit"
-        />
-      </div>
-      <div className="flex flex-col justify-center px-4 py-2 gap-1">
-        <span className="text-[10px] text-muted-foreground uppercase tracking-widest font-semibold">
-          {t("dashboard.uptime")}
-        </span>
-        <span className="text-xl font-bold leading-none">
-          {uptimeFormatted || "—"}
-        </span>
-      </div>
-      <div className="flex flex-col justify-center px-4 py-2 gap-1">
-        <span className="text-[10px] text-muted-foreground uppercase tracking-widest font-semibold">
-          {t("dashboard.database")}
-        </span>
-        <span
-          className={`text-xl font-bold leading-none ${dbHealth === "healthy" ? "text-accent-brand" : "text-red-400"}`}
-        >
-          {dbHealth === "healthy"
-            ? t("dashboard.healthy")
-            : t("dashboard.error")}
-        </span>
-      </div>
-      <div className="flex flex-col justify-center px-4 py-2 gap-1">
-        <span className="text-[10px] text-muted-foreground uppercase tracking-widest font-semibold">
-          {t("dashboardTab.hostsAvailable")}
-        </span>
-        <div className="flex items-baseline gap-1">
-          <span className="text-xl font-bold leading-none">{online}</span>
-          <span className="text-base text-muted-foreground leading-none">
-            /{hosts.length}
-          </span>
-        </div>
-      </div>
-    </Card>
-  );
-}
-
-function CountersBarCard({
-  hosts,
-  credentialCount,
-  onOpenSingletonTab,
-}: {
-  hosts: Host[];
-  credentialCount: number;
-  onOpenSingletonTab: (type: TabType, pendingEvent?: string) => void;
-}) {
-  const { t } = useTranslation();
-  return (
-    <Card className="grid grid-flow-col auto-cols-fr divide-x divide-border overflow-hidden w-full h-full py-0 gap-0">
-      <button
-        onClick={() => onOpenSingletonTab("host-manager")}
-        className="flex items-center gap-2.5 px-4 py-2.5 hover:bg-muted transition-colors cursor-pointer text-left"
-      >
-        <Server className="size-3.5 text-muted-foreground shrink-0" />
-        <span className="text-base font-bold">{hosts.length}</span>
-        <span className="text-[10px] text-muted-foreground uppercase tracking-widest font-semibold">
-          {t("dashboard.totalHosts")}
-        </span>
-      </button>
-      <button
-        onClick={() =>
-          onOpenSingletonTab("host-manager", "host-manager:show-credentials")
-        }
-        className="flex items-center gap-2.5 px-4 py-2.5 hover:bg-muted transition-colors cursor-pointer text-left"
-      >
-        <KeyRound className="size-3.5 text-muted-foreground shrink-0" />
-        <span className="text-base font-bold">{credentialCount}</span>
-        <span className="text-[10px] text-muted-foreground uppercase tracking-widest font-semibold">
-          {t("dashboard.totalCredentials")}
-        </span>
-      </button>
-      <ComponentSlot slotId="dashboard.counters" />
-    </Card>
-  );
-}
-
-function QuickActionsCard({
-  onOpenSingletonTab,
-  hosts,
-  onOpenTab,
-  isAdmin,
-}: {
-  onOpenSingletonTab: (type: TabType, pendingEvent?: string) => void;
-  hosts: Host[];
-  onOpenTab: (host: Host, type: TabType) => void;
-  isAdmin: boolean;
-}) {
-  const { t } = useTranslation();
-  const pinnedHosts = hosts.filter((h) => h.pin);
-  const getConnectionEndpoint = (host: Host) => {
-    const protocol = host.enableSsh ? undefined : enabledHostProtocols(host)[0];
-    const port = host.enableSsh
-      ? host.sshPort
-      : protocol
-        ? protocolPort(host.pluginSettings, protocol)
-        : host.port;
-    return `${host.ip}:${port ?? host.port}`;
-  };
-  const renderConnectionIcon = (host: Host) => {
-    const Icon = defaultConnectAction(listHostActions(), host)?.icon ?? Server;
-    return <Icon className="size-3 text-accent-brand" />;
-  };
-  return (
-    <Card className="flex flex-col overflow-hidden w-full h-full py-0 gap-0">
-      <div className="flex items-center gap-2 px-4 py-2.5 border-b border-border shrink-0">
-        <Zap className="size-3.5 text-muted-foreground" />
-        <span className="text-xs text-muted-foreground uppercase tracking-widest font-semibold">
-          {t("dashboard.quickActions")}
-        </span>
-      </div>
-      <div className="flex flex-1 min-h-0">
-        <div className="flex flex-col flex-1 border-r border-border">
-          <button
-            onClick={() =>
-              onOpenSingletonTab("host-manager", "host-manager:add-host")
-            }
-            className="group/btn flex items-center gap-2.5 px-4 py-2.5 hover:bg-muted transition-colors cursor-pointer border-b border-border flex-1"
-          >
-            <div className="size-7 border border-border bg-muted flex items-center justify-center shrink-0 group-hover/btn:bg-accent-brand/20 group-hover/btn:border-accent-brand/40 transition-colors">
-              <Plus className="size-3 text-accent-brand" />
-            </div>
-            <div className="flex flex-col items-start text-left">
-              <span className="text-xs font-semibold">
-                {t("dashboard.addHost")}
-              </span>
-              <span className="text-[10px] text-muted-foreground">
-                {t("dashboardTab.registerNewServer")}
-              </span>
-            </div>
-          </button>
-          <button
-            onClick={() =>
-              onOpenSingletonTab("host-manager", "host-manager:add-credential")
-            }
-            className="group/btn flex items-center gap-2.5 px-4 py-2.5 hover:bg-muted transition-colors cursor-pointer flex-1"
-          >
-            <div className="size-7 border border-border bg-muted flex items-center justify-center shrink-0 group-hover/btn:bg-accent-brand/20 group-hover/btn:border-accent-brand/40 transition-colors">
-              <KeyRound className="size-3 text-accent-brand" />
-            </div>
-            <div className="flex flex-col items-start text-left">
-              <span className="text-xs font-semibold">
-                {t("dashboard.addCredential")}
-              </span>
-              <span className="text-[10px] text-muted-foreground">
-                {t("dashboardTab.storeSshKeysOrPasswords")}
-              </span>
-            </div>
-          </button>
-        </div>
-        <div className="flex flex-col flex-1">
-          {pinnedHosts.length > 0 ? (
-            <div className="flex flex-col flex-1 overflow-y-auto thin-scrollbar">
-              {pinnedHosts.slice(0, 4).map((host) => (
-                <button
-                  key={host.id}
-                  onClick={() => {
-                    const type = getDefaultConnectionTab(host);
-                    if (type) onOpenTab(host, type);
-                  }}
-                  className="group/btn flex items-center gap-2.5 px-4 py-2 hover:bg-muted transition-colors cursor-pointer border-b border-border last:border-b-0"
-                >
-                  <div className="size-7 border border-border bg-muted flex items-center justify-center shrink-0 group-hover/btn:bg-accent-brand/20 group-hover/btn:border-accent-brand/40 transition-colors">
-                    {renderConnectionIcon(host)}
-                  </div>
-                  <div className="flex flex-col items-start text-left min-w-0">
-                    <span className="text-xs font-semibold truncate w-full">
-                      {host.name || host.ip}
-                    </span>
-                    <span className="text-[10px] text-muted-foreground truncate w-full">
-                      {getConnectionEndpoint(host)}
-                    </span>
-                  </div>
-                </button>
-              ))}
-            </div>
-          ) : (
-            <>
-              {isAdmin && (
-                <button
-                  onClick={() => onOpenSingletonTab("admin-settings")}
-                  className="group/btn flex items-center gap-2.5 px-4 py-2.5 hover:bg-muted transition-colors cursor-pointer border-b border-border flex-1"
-                >
-                  <div className="size-7 border border-border bg-muted flex items-center justify-center shrink-0 group-hover/btn:bg-accent-brand/20 group-hover/btn:border-accent-brand/40 transition-colors">
-                    <Settings className="size-3 text-accent-brand" />
-                  </div>
-                  <div className="flex flex-col items-start text-left">
-                    <span className="text-xs font-semibold">
-                      {t("dashboard.adminSettings")}
-                    </span>
-                    <span className="text-[10px] text-muted-foreground">
-                      {t("dashboardTab.manageUsersAndRoles")}
-                    </span>
-                  </div>
-                </button>
-              )}
-              <button
-                onClick={() => onOpenSingletonTab("user-profile")}
-                className="group/btn flex items-center gap-2.5 px-4 py-2.5 hover:bg-muted transition-colors cursor-pointer flex-1"
-              >
-                <div className="size-7 border border-border bg-muted flex items-center justify-center shrink-0 group-hover/btn:bg-accent-brand/20 group-hover/btn:border-accent-brand/40 transition-colors">
-                  <User className="size-3 text-accent-brand" />
-                </div>
-                <div className="flex flex-col items-start text-left">
-                  <span className="text-xs font-semibold">
-                    {t("dashboard.userProfile")}
-                  </span>
-                  <span className="text-[10px] text-muted-foreground">
-                    {t("dashboardTab.manageYourAccount")}
-                  </span>
-                </div>
-              </button>
-            </>
-          )}
-        </div>
-      </div>
-    </Card>
-  );
-}
-
-export function HostStatusCard({
-  hosts,
-  onOpenTab,
-  statusLoading,
-}: {
-  hosts: Host[];
-  onOpenTab: (host: Host, type: TabType) => void;
-  statusLoading?: boolean;
-}) {
-  const { t } = useTranslation();
-  const statusScheme = useStatusColorScheme();
-  const online = hosts.filter((h) => h.status === "online").length;
-  return (
-    <Card className="flex flex-col overflow-hidden w-full h-full py-0 gap-0">
-      <div className="flex items-center justify-between px-4 py-3 border-b border-border shrink-0">
-        <div className="flex items-center gap-2">
-          <Database className="size-3.5 text-muted-foreground" />
-          <span className="text-xs text-muted-foreground uppercase tracking-widest font-semibold">
-            {t("dashboardTab.hostStatus")}
-          </span>
-        </div>
-        <span className="text-xs text-muted-foreground">
-          {online}/{hosts.length} {t("hosts.status.online")}
-        </span>
-      </div>
-      <div className="flex flex-col overflow-auto flex-1">
-        {hosts.length === 0 && (
-          <div className="flex-1 flex items-center justify-center text-xs text-muted-foreground/40 py-8">
-            {t("dashboardTab.noHostsConfigured")}
-          </div>
-        )}
-        {hosts.map((host, i) => {
-          const availability = host.status ?? "offline";
-          return (
-            <div
-              key={i}
-              onClick={() => {
-                // An overview action (a metrics view) wins over connecting.
-                const actions = hostActionsFor(listHostActions(), host);
-                const target =
-                  actions.find((action) => action.overview)?.tabType ??
-                  defaultConnectAction(actions, host)?.tabType;
-                if (target) onOpenTab(host, target);
-              }}
-              className="flex min-w-0 items-center justify-between px-4 py-2.5 border-b border-border last:border-0 hover:bg-muted/50 cursor-pointer group/row"
-            >
-              <div className="flex min-w-0 flex-1 items-center gap-2.5">
-                <span
-                  className={`size-1.5 rounded-full shrink-0 ${getStatusClasses(availability, statusScheme, "dot", statusLoading)}`}
-                />
-                <div className="flex min-w-0 flex-col">
-                  <div className="flex min-w-0 items-center gap-1">
-                    <span
-                      className="truncate text-xs font-semibold"
-                      title={host.name}
-                    >
-                      {host.name}
-                    </span>
-                    <ExternalLink className="size-2.5 text-muted-foreground/0 group-hover/row:text-muted-foreground/60 transition-colors shrink-0" />
-                  </div>
-                  <span
-                    className="truncate text-[10px] text-muted-foreground font-mono"
-                    title={host.ip}
-                  >
-                    {host.ip}
-                  </span>
-                </div>
-              </div>
-              <div className="flex shrink-0 items-center gap-3">
-                {/* Plugins add live details to a host row here. */}
-                <ComponentSlot
-                  slotId="dashboard.hostRow"
-                  props={{
-                    hostId: Number(host.id),
-                    online: availability === "online",
-                  }}
-                />
-                <span
-                  className={`text-[10px] px-2 py-0.5 font-semibold border ${getStatusClasses(availability, statusScheme, "badge", statusLoading)}`}
-                >
-                  {statusLoading || availability === "unknown"
-                    ? t("dashboardTab.checking")
-                    : availability === "online"
-                      ? t("hosts.status.online")
-                      : t("hosts.status.offline")}
-                </span>
-              </div>
-            </div>
-          );
-        })}
-      </div>
-    </Card>
-  );
-}
-
 function isStatusCheckEnabled(host: Host): boolean {
   return host.statusCheckEnabled !== false;
 }
 
-function RecentActivityCard({
-  activity,
-  hosts,
-  onOpenTab,
-  onClear,
-  statusLoading,
-}: {
-  activity: RecentActivityItem[];
-  hosts: Host[];
-  onOpenTab: (host: Host, type: TabType) => void;
-  onClear: () => void;
-  statusLoading?: boolean;
-}) {
-  const { t } = useTranslation();
-  const statusScheme = useStatusColorScheme();
-  const typeIcon = (type: string): React.ReactNode => {
-    const Icon = activityTarget(type)?.icon ?? Server;
-    return <Icon className="size-2.5" />;
-  };
-  const typeLabel = (type: string): string => {
-    const labelKey = activityTarget(type)?.labelKey;
-    return labelKey ? t(labelKey) : type.replace("_", " ");
-  };
-  function formatTime(ts: string) {
-    const diffMs = Date.now() - new Date(ts).getTime();
-    if (diffMs < 0) return t("dashboard.justNow");
-    const diff = Math.floor(diffMs / 1000);
-    if (diff < 60) return t("dashboard.justNow");
-    if (diff < 3600) return `${Math.floor(diff / 60)}m`;
-    if (diff < 86400) return `${Math.floor(diff / 3600)}h`;
-    return `${Math.floor(diff / 86400)}d`;
-  }
-  return (
-    <Card className="flex flex-col overflow-hidden w-full h-full py-0 gap-0">
-      <div className="flex items-center justify-between px-4 py-3 border-b border-border shrink-0">
-        <div className="flex items-center gap-2">
-          <Activity className="size-3.5 text-muted-foreground" />
-          <span className="text-xs text-muted-foreground uppercase tracking-widest font-semibold">
-            {t("dashboard.recentActivity")}
-          </span>
-        </div>
-        <Button
-          variant="ghost"
-          size="sm"
-          className="text-xs text-accent-brand h-auto py-0.5 px-2"
-          onClick={onClear}
-        >
-          {t("dashboardTab.clear")}
-        </Button>
-      </div>
-      <div className="flex flex-col overflow-auto flex-1">
-        {activity.length === 0 && (
-          <div className="flex-1 flex items-center justify-center text-xs text-muted-foreground/40 py-8">
-            {t("dashboard.noRecentActivity")}
-          </div>
-        )}
-        {activity.map((item) => {
-          const host = hosts.find((h) => h.id === String(item.hostId));
-          return (
-            <div
-              key={item.id}
-              onClick={() => {
-                const target = activityTarget(item.type);
-                if (host && target) onOpenTab(host, target.tab);
-              }}
-              className="flex items-center justify-between gap-3 px-4 py-2 border-b border-border last:border-0 hover:bg-muted/50 cursor-pointer"
-            >
-              <div className="flex items-center gap-2 min-w-0 flex-1">
-                <span
-                  className={`size-1.5 rounded-full shrink-0 ${getStatusClasses(host?.status ?? false, statusScheme, "dot", statusLoading)}`}
-                />
-                <div className="flex flex-col min-w-0 flex-1">
-                  <span className="text-xs font-semibold truncate">
-                    {item.hostName}
-                  </span>
-                  <div className="flex items-center gap-1 min-w-0 text-muted-foreground">
-                    {typeIcon(item.type)}
-                    <span className="text-[10px] truncate">
-                      {typeLabel(item.type)}
-                    </span>
-                  </div>
-                </div>
-              </div>
-              <span className="text-[10px] text-muted-foreground shrink-0">
-                {formatTime(item.timestamp)}
-              </span>
-            </div>
-          );
-        })}
-      </div>
-    </Card>
-  );
+// ─── Sections ─────────────────────────────────────────────────────────────────
+
+interface CardMeta {
+  label: string;
+  icon: React.ElementType;
+  frame: "framed" | "bare";
+  action?: React.ReactNode;
 }
 
-// ─── CardItem ─────────────────────────────────────────────────────────────────
-
-function CardItem({
+/** One section of a column, separated from the next by a hairline. */
+function Section({
   slot,
+  meta,
   editMode,
-  isDragging,
+  last,
+  dragging,
   onDragStart,
   onDrop,
-  onDragOver,
   onRemove,
   onHeightChange,
-  onOpenSingletonTab,
-  onOpenTab,
-  hosts,
-  uptimeFormatted,
-  versionText,
-  versionStatus,
-  releaseUrl,
-  dbHealth,
-  credentialCount,
-  activity,
-  onClearActivity,
-  isAdmin,
-  statusLoading,
-  isVisible = true,
+  autoHeight,
+  children,
 }: {
   slot: CardSlot;
+  meta: CardMeta;
   editMode: boolean;
-  isDragging: boolean;
+  last: boolean;
+  dragging: boolean;
   onDragStart: () => void;
   onDrop: () => void;
-  onDragOver: (e: React.DragEvent) => void;
   onRemove: () => void;
   onHeightChange: (key: string, h: number) => void;
-  onOpenSingletonTab: (type: TabType, pendingEvent?: string) => void;
-  onOpenTab: (host: Host, type: TabType) => void;
-  hosts: Host[];
-  uptimeFormatted: string;
-  versionText: string;
-  versionStatus: "up_to_date" | "requires_update" | "beta" | "unknown";
-  releaseUrl: string;
-  dbHealth: "healthy" | "error";
-  credentialCount: number;
-  activity: RecentActivityItem[];
-  onClearActivity: () => void;
-  isAdmin: boolean;
-  statusLoading?: boolean;
-  isVisible?: boolean;
+  /** Phones stack cards, so each takes the height of its content. */
+  autoHeight?: boolean;
+  children: React.ReactNode;
 }) {
   const { t } = useTranslation();
-  const cardRef = useRef<HTMLDivElement | null>(null);
+  const ref = useRef<HTMLDivElement | null>(null);
+  // The last section always fills the column, so resizing one never leaves
+  // dead space underneath.
+  const flex = last || slot.height === null;
+  const Icon = meta.icon;
 
-  const onResizeMouseDown = useCallback(
-    (e: React.MouseEvent) => {
-      e.preventDefault();
-      e.stopPropagation();
-      const startY = e.clientY;
-      const startH = cardRef.current?.getBoundingClientRect().height ?? 100;
-      const onMove = (ev: MouseEvent) => {
-        onHeightChange(slot.key, Math.max(50, startH + (ev.clientY - startY)));
-      };
-      const onUp = () => {
-        window.removeEventListener("mousemove", onMove);
-        window.removeEventListener("mouseup", onUp);
-      };
-      window.addEventListener("mousemove", onMove);
-      window.addEventListener("mouseup", onUp);
-    },
-    [slot.key, onHeightChange],
-  );
-
-  const isFlex = slot.height === null;
+  const onResizeMouseDown = (e: React.MouseEvent) => {
+    e.preventDefault();
+    e.stopPropagation();
+    const startY = e.clientY;
+    const startH = ref.current?.getBoundingClientRect().height ?? 100;
+    const onMove = (ev: MouseEvent) =>
+      onHeightChange(slot.key, Math.max(48, startH + (ev.clientY - startY)));
+    const onUp = () => {
+      window.removeEventListener("mousemove", onMove);
+      window.removeEventListener("mouseup", onUp);
+    };
+    window.addEventListener("mousemove", onMove);
+    window.addEventListener("mouseup", onUp);
+  };
 
   return (
     <div
-      ref={cardRef}
-      className={`relative flex flex-col transition-opacity select-none ${isDragging ? "opacity-40" : "opacity-100"} ${isFlex ? "flex-1 min-h-0" : "shrink-0"}`}
-      style={!isFlex ? { height: slot.height } : undefined}
+      ref={ref}
       draggable={editMode}
       onDragStart={onDragStart}
-      onDrop={onDrop}
-      onDragOver={onDragOver}
+      onDragOver={(e) => editMode && e.preventDefault()}
+      onDrop={(e) => {
+        if (!editMode) return;
+        e.stopPropagation();
+        onDrop();
+      }}
+      style={{
+        height: flex || autoHeight ? undefined : (slot.height ?? undefined),
+      }}
+      className={`relative flex shrink-0 flex-col border-b border-border last:border-b-0 ${
+        flex ? "min-h-48 flex-1" : ""
+      } ${dragging ? "opacity-40" : ""} ${editMode ? "cursor-grab select-none" : ""}`}
     >
-      {editMode && (
-        <div className="absolute inset-0 z-10 pointer-events-none border-2 border-dashed border-accent-brand/30" />
-      )}
-      {editMode && (
-        <div className="absolute top-2 right-2 z-20 flex items-center gap-1">
-          <div className="size-6 bg-card border border-border flex items-center justify-center cursor-grab active:cursor-grabbing pointer-events-auto">
-            <GripVertical className="size-3 text-muted-foreground" />
-          </div>
-          <button
-            onClick={onRemove}
-            className="size-6 bg-card border border-border flex items-center justify-center hover:bg-destructive/10 hover:border-destructive/40 transition-colors pointer-events-auto"
-          >
-            <Trash2 className="size-3 text-muted-foreground" />
-          </button>
+      {(meta.frame === "framed" || editMode) && (
+        <div className="flex shrink-0 items-center gap-2 border-b border-border px-3 py-1.5">
+          {editMode && (
+            <GripVertical className="size-3 shrink-0 text-muted-foreground/50" />
+          )}
+          <Icon className="size-3 shrink-0 text-muted-foreground" />
+          <span className="truncate text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
+            {meta.label}
+          </span>
+          <span className="ml-auto flex shrink-0 items-center gap-1">
+            {!editMode && meta.action}
+            {editMode && (
+              <button
+                type="button"
+                onClick={onRemove}
+                title={t("dashboardTab.removeSection")}
+                aria-label={t("dashboardTab.removeSection")}
+                className="text-muted-foreground transition-colors hover:text-destructive"
+              >
+                <X className="size-3.5" />
+              </button>
+            )}
+          </span>
         </div>
       )}
-      <div className="flex-1 min-h-0 overflow-hidden">
-        {slot.id === "stats_bar" && (
-          <StatsBarCard
-            hosts={hosts}
-            uptimeFormatted={uptimeFormatted}
-            versionText={versionText}
-            versionStatus={versionStatus}
-            releaseUrl={releaseUrl}
-            dbHealth={dbHealth}
-          />
-        )}
-        {slot.id === "counters_bar" && (
-          <CountersBarCard
-            hosts={hosts}
-            credentialCount={credentialCount}
-            onOpenSingletonTab={onOpenSingletonTab}
-          />
-        )}
-        {slot.id === "quick_actions" && (
-          <QuickActionsCard
-            onOpenSingletonTab={onOpenSingletonTab}
-            hosts={hosts}
-            onOpenTab={onOpenTab}
-            isAdmin={isAdmin}
-          />
-        )}
-        {slot.id === "host_status" && (
-          <HostStatusCard
-            hosts={hosts}
-            onOpenTab={onOpenTab}
-            statusLoading={statusLoading}
-          />
-        )}
-        {slot.id === "recent_activity" && (
-          <RecentActivityCard
-            activity={activity}
-            hosts={hosts}
-            onOpenTab={onOpenTab}
-            onClear={onClearActivity}
-            statusLoading={statusLoading}
-          />
-        )}
-        {!CORE_CARD_IDS.has(slot.id) && (
-          <PluginCardSlot
-            id={slot.id}
-            isVisible={isVisible}
-            onOpenSingletonTab={onOpenSingletonTab}
-          />
-        )}
+      <div className="flex min-h-0 flex-1 flex-col overflow-auto thin-scrollbar">
+        {children}
       </div>
-      {editMode && !isFlex && (
+      {!last && (
         <div
+          draggable={false}
+          onDragStart={(e) => {
+            e.preventDefault();
+            e.stopPropagation();
+          }}
           onMouseDown={onResizeMouseDown}
-          className="absolute bottom-0 left-0 right-0 h-2 z-20 flex items-center justify-center cursor-row-resize group/resize"
           title={t("cardGrid.dragToResize")}
-        >
-          <div className="w-12 h-0.5 bg-border group-hover/resize:bg-accent-brand/60 transition-colors rounded-full" />
-        </div>
+          className="absolute inset-x-0 bottom-0 z-10 h-1.5 cursor-ns-resize transition-colors hover:bg-accent-brand/40"
+        />
       )}
     </div>
   );
 }
 
-// ─── DropZone ─────────────────────────────────────────────────────────────────
-
-function DropZone({
-  panel,
-  order,
-  onDrop,
-  onDragOver,
-  active,
-}: {
-  panel: PanelId;
-  order: number;
-  onDrop: (panel: PanelId, order: number) => void;
-  onDragOver: (e: React.DragEvent) => void;
-  active: boolean;
-}) {
-  const [over, setOver] = useState(false);
-  if (!active) return null;
-  return (
-    <div
-      className={`shrink-0 transition-all duration-150 ${over ? "h-10 border-2 border-dashed border-accent-brand/60 bg-accent-brand/5" : "h-2"}`}
-      onDragOver={(e) => {
-        onDragOver(e);
-        setOver(true);
-      }}
-      onDragLeave={() => setOver(false)}
-      onDrop={() => {
-        setOver(false);
-        onDrop(panel, order);
-      }}
-    />
-  );
-}
-
-// ─── AddCardTray ──────────────────────────────────────────────────────────────
-
-function AddCardTray({
-  activeIds,
+/** Everything that could go on the dashboard but is not on it. */
+function AddTray({
+  available,
+  labels,
   onAdd,
-  cardLabels,
 }: {
-  activeIds: string[];
+  available: { id: string; plugin: boolean }[];
+  labels: Record<string, string>;
   onAdd: (id: string) => void;
-  cardLabels: Record<string, string>;
 }) {
   const { t } = useTranslation();
-  const registeredCards = useRegisteredDashboardCards();
-  const available = [
-    ...DASHBOARD_CARDS.map((card) => ({ id: card.id as string })),
-    ...registeredCards.map((card) => ({ id: card.id })),
-  ].filter((c) => !activeIds.includes(c.id));
-  if (available.length === 0) return null;
-  return (
-    <div className="flex items-center gap-2 px-1 py-2 flex-wrap shrink-0">
-      <span className="text-[10px] text-muted-foreground uppercase tracking-widest font-semibold shrink-0">
-        {t("dashboardTab.add")}
-      </span>
-      {available.map((card) => (
+  const builtin = available.filter((c) => !c.plugin);
+  const fromPlugins = available.filter((c) => c.plugin);
+  const row = (cards: typeof available) => (
+    <div className="flex flex-wrap gap-1.5">
+      {cards.map((card) => (
         <button
           key={card.id}
+          type="button"
           onClick={() => onAdd(card.id)}
-          className="flex items-center gap-1.5 px-2.5 py-1 border border-dashed border-border text-xs text-muted-foreground hover:text-foreground hover:border-accent-brand/60 hover:bg-accent-brand/5 transition-colors"
+          className="flex h-7 items-center gap-1.5 border border-border px-2 text-[11px] text-muted-foreground transition-colors hover:border-accent-brand hover:text-accent-brand focus-visible:ring-1 focus-visible:ring-ring"
         >
-          <Plus className="size-3 text-accent-brand" />
-          {cardLabels[card.id]}
+          <Plus className="size-3" />
+          {labels[card.id] ?? card.id}
         </button>
       ))}
     </div>
   );
-}
-
-// ─── PanelColumn ─────────────────────────────────────────────────────────────
-
-type PanelColumnProps = {
-  panel: PanelId;
-  slots: CardSlot[];
-  editMode: boolean;
-  dragState: DragState;
-  onDragStart: (slot: CardSlot) => void;
-  onDrop: (targetPanel: PanelId, targetOrder: number) => void;
-  onDragOver: (e: React.DragEvent) => void;
-  onRemove: (key: string) => void;
-  onAdd: (id: DashboardCardId, panel: PanelId) => void;
-  onHeightChange: (key: string, h: number) => void;
-  onOpenSingletonTab: (type: TabType, pendingEvent?: string) => void;
-  onOpenTab: (host: Host, type: TabType) => void;
-  hosts: Host[];
-  uptimeFormatted: string;
-  versionText: string;
-  versionStatus: "up_to_date" | "requires_update" | "beta" | "unknown";
-  releaseUrl: string;
-  dbHealth: "healthy" | "error";
-  credentialCount: number;
-  activity: RecentActivityItem[];
-  onClearActivity: () => void;
-  cardLabels: Record<DashboardCardId, string>;
-  isAdmin: boolean;
-  statusLoading: boolean;
-  isVisible?: boolean;
-};
-
-function PanelColumn({
-  panel,
-  slots,
-  editMode,
-  dragState,
-  onDragStart,
-  onDrop,
-  onDragOver,
-  onRemove,
-  onAdd,
-  onHeightChange,
-  onOpenSingletonTab,
-  onOpenTab,
-  hosts,
-  uptimeFormatted,
-  versionText,
-  versionStatus,
-  releaseUrl,
-  dbHealth,
-  credentialCount,
-  activity,
-  onClearActivity,
-  cardLabels,
-  isAdmin,
-  statusLoading,
-  isVisible = true,
-}: PanelColumnProps) {
-  const { t } = useTranslation();
-  const sorted = [...slots].sort((a, b) => a.order - b.order);
-  const allIds = slots.map((s) => s.id);
-
   return (
-    <div className="flex flex-col flex-1 min-h-0">
-      <DropZone
-        panel={panel}
-        order={-1}
-        onDrop={onDrop}
-        onDragOver={onDragOver}
-        active={!!dragState}
+    <div className="shrink-0 border-t border-border bg-surface/40 p-2.5">
+      <GroupHeading
+        title={t("dashboardTab.addSection")}
+        count={available.length}
       />
-      {sorted.map((slot, idx) => (
-        <div
-          key={slot.key}
-          className={`flex flex-col min-h-0 ${slot.height === null ? "flex-1" : "shrink-0"}`}
-        >
-          {idx > 0 && (
-            <div className={editMode ? "" : "h-4 shrink-0"}>
-              <DropZone
-                panel={panel}
-                order={slot.order - 0.5}
-                onDrop={onDrop}
-                onDragOver={onDragOver}
-                active={!!dragState}
-              />
-            </div>
+      {available.length === 0 ? (
+        <p className="pt-2 text-xs text-muted-foreground">
+          {t("dashboardTab.allSectionsShown")}
+        </p>
+      ) : (
+        <div className="flex flex-col gap-2 pt-2">
+          {builtin.length > 0 && row(builtin)}
+          {fromPlugins.length > 0 && (
+            <>
+              <span className="text-[11px] text-muted-foreground/70">
+                {t("dashboardTab.fromPlugins")}
+              </span>
+              {row(fromPlugins)}
+            </>
           )}
-          <CardItem
-            slot={slot}
-            editMode={editMode}
-            isDragging={dragState?.key === slot.key}
-            onDragStart={() => onDragStart(slot)}
-            onDrop={() => onDrop(slot.panel, slot.order)}
-            onDragOver={onDragOver}
-            onRemove={() => onRemove(slot.key)}
-            onHeightChange={onHeightChange}
-            onOpenSingletonTab={onOpenSingletonTab}
-            onOpenTab={onOpenTab}
-            hosts={hosts}
-            uptimeFormatted={uptimeFormatted}
-            versionText={versionText}
-            versionStatus={versionStatus}
-            releaseUrl={releaseUrl}
-            dbHealth={dbHealth}
-            credentialCount={credentialCount}
-            activity={activity}
-            onClearActivity={onClearActivity}
-            isAdmin={isAdmin}
-            statusLoading={statusLoading}
-            isVisible={isVisible}
-          />
-        </div>
-      ))}
-      <DropZone
-        panel={panel}
-        order={sorted.length}
-        onDrop={onDrop}
-        onDragOver={onDragOver}
-        active={!!dragState}
-      />
-      {editMode && (
-        <AddCardTray
-          activeIds={allIds}
-          onAdd={(id) => onAdd(id, panel)}
-          cardLabels={cardLabels}
-        />
-      )}
-      {sorted.length === 0 && !editMode && (
-        <div className="flex-1 flex items-center justify-center text-muted-foreground/20 text-xs border border-dashed border-border/30">
-          {t("dashboardTab.empty")}
         </div>
       )}
     </div>
   );
 }
 
-function ColumnDivider({
-  onMouseDown,
-}: {
-  onMouseDown: (e: React.MouseEvent) => void;
-}) {
-  const { t } = useTranslation();
-  return (
-    <div
-      onMouseDown={onMouseDown}
-      className="w-3 shrink-0 flex items-center justify-center cursor-col-resize group/divider self-stretch z-10"
-      title={t("dashboardTab.dragToResizeColumns")}
-    >
-      <div className="w-px h-full bg-border group-hover/divider:bg-accent-brand/50 transition-colors" />
-      <div className="absolute size-4 flex items-center justify-center opacity-0 group-hover/divider:opacity-100 transition-opacity">
-        <GripHorizontal className="size-3 text-accent-brand" />
-      </div>
-    </div>
-  );
-}
-
 // ─── DashboardTab ─────────────────────────────────────────────────────────────
 
 export function DashboardTab({
@@ -1005,6 +350,7 @@ export function DashboardTab({
 }) {
   const registeredCards = useRegisteredDashboardCards();
   const { t, i18n } = useTranslation();
+  const confirm = useConfirm();
   const { initialLoadComplete } = useServerStatusMeta();
   const statusLoading = !initialLoadComplete;
 
@@ -1021,8 +367,8 @@ export function DashboardTab({
     return DEFAULT_SLOTS;
   });
 
-  // Picking an interface preset rewrites the stored layout from the settings
-  // panel, so pick it up without waiting for a remount.
+  // Picking an interface preset rewrites the stored layout from settings, so
+  // pick it up without waiting for a remount.
   useEffect(() => {
     const handler = () => {
       try {
@@ -1040,8 +386,7 @@ export function DashboardTab({
     return () => window.removeEventListener("dashboardSlotsChanged", handler);
   }, []);
 
-  // A plugin's own view next to the dashboard, e.g. the homepage plugin's
-  // canvas preview. Only one is offered today; "dashboard" always exists.
+  // A plugin's own view next to the dashboard, e.g. the homepage canvas.
   const secondaryViews = useActionSlot("dashboard.secondaryView");
   const secondaryView = secondaryViews[0];
   const { settled: pluginsSettled } = usePluginStore();
@@ -1053,10 +398,9 @@ export function DashboardTab({
       return "dashboard";
     }
   });
-  // Until plugins settle, a plugin view saved from last session hasn't had a
-  // chance to register yet, so its absence doesn't mean it's really gone.
+  // Until plugins settle, a plugin view saved last session has not had a
+  // chance to register, so its absence does not mean it is gone.
   const viewPending = !pluginsSettled && dashboardView !== "dashboard";
-  // Falls back to the dashboard when the view a plugin contributed is off.
   const isDashboardView =
     dashboardView === "dashboard" ||
     (!viewPending && !secondaryView) ||
@@ -1071,7 +415,7 @@ export function DashboardTab({
   }, [dashboardView]);
 
   const [editMode, setEditMode] = useState(false);
-  const [dragState, setDragState] = useState<DragState>(null);
+  const [dragKey, setDragKey] = useState<string | null>(null);
 
   const [mainWidthPct, setMainWidthPct] = useState(() => {
     try {
@@ -1110,9 +454,8 @@ export function DashboardTab({
   const [isAdmin, setIsAdmin] = useState(false);
   const [uptimeFormatted, setUptimeFormatted] = useState("");
   const [versionText, setVersionText] = useState("");
-  const [versionStatus, setVersionStatus] = useState<
-    "up_to_date" | "requires_update" | "beta" | "unknown"
-  >("up_to_date");
+  const [versionStatus, setVersionStatus] =
+    useState<VersionStatus>("up_to_date");
   const [releaseUrl, setReleaseUrl] = useState("");
   const [dbHealth, setDbHealth] = useState<"healthy" | "error">("healthy");
   const [credentialCount, setCredentialCount] = useState(0);
@@ -1189,6 +532,11 @@ export function DashboardTab({
   }, [isVisible]);
 
   const handleClearActivity = async () => {
+    const ok = await confirm({
+      title: t("dashboardTab.clearActivityConfirm"),
+      confirmLabel: t("dashboardTab.clear"),
+    });
+    if (!ok) return;
     try {
       await resetRecentActivity();
       setActivity([]);
@@ -1201,9 +549,9 @@ export function DashboardTab({
     weekday: "long",
     month: "long",
     day: "numeric",
-    year: "numeric",
   });
   const bodyRef = useRef<HTMLDivElement | null>(null);
+  const isMobile = useIsMobile();
 
   const mainSlots = slots
     .filter((s) => s.panel === "main")
@@ -1211,9 +559,9 @@ export function DashboardTab({
   const sideSlots = slots
     .filter((s) => s.panel === "side")
     .sort((a, b) => a.order - b.order);
-  const hasSide = sideSlots.length > 0;
+  const showSide = sideSlots.length > 0 || editMode;
 
-  const cardLabels: Record<string, string> = {
+  const labels: Record<string, string> = {
     stats_bar: t("dashboard.serverOverview"),
     counters_bar: t("dashboard.serverStats"),
     quick_actions: t("dashboard.quickActions"),
@@ -1224,6 +572,90 @@ export function DashboardTab({
     ),
   };
 
+  const metaFor = (id: string): CardMeta => {
+    const core = CORE_CARD_META[id];
+    if (core)
+      return {
+        label: labels[id] ?? id,
+        icon: core.icon,
+        frame: core.frame,
+        action:
+          id === "recent_activity" && activity.length > 0 ? (
+            <button
+              type="button"
+              onClick={() => void handleClearActivity()}
+              className="text-[10px] font-medium text-accent-brand hover:underline"
+            >
+              {t("dashboardTab.clear")}
+            </button>
+          ) : undefined,
+      };
+    const registered = getRegisteredDashboardCard(id);
+    return {
+      label: labels[id] ?? id,
+      icon: LayoutGrid,
+      frame: registered?.frame ?? "bare",
+    };
+  };
+
+  const renderCard = (id: string) => {
+    switch (id) {
+      case "stats_bar":
+        return (
+          <StatsStrip
+            hosts={hosts}
+            uptimeFormatted={uptimeFormatted}
+            versionText={versionText}
+            versionStatus={versionStatus}
+            releaseUrl={releaseUrl}
+            dbHealth={dbHealth}
+          />
+        );
+      case "counters_bar":
+        return (
+          <CountersStrip
+            hosts={hosts}
+            credentialCount={credentialCount}
+            onOpenSingletonTab={onOpenSingletonTab}
+          />
+        );
+      case "quick_actions":
+        return (
+          <QuickActions
+            onOpenSingletonTab={onOpenSingletonTab}
+            hosts={hosts}
+            onOpenTab={onOpenTab}
+            isAdmin={isAdmin}
+          />
+        );
+      case "host_status":
+        return (
+          <HostStatusList
+            hosts={statusCheckHosts}
+            onOpenTab={onOpenTab}
+            statusLoading={statusLoading}
+          />
+        );
+      case "recent_activity":
+        return (
+          <RecentActivityList
+            activity={activity}
+            hosts={hosts}
+            onOpenTab={onOpenTab}
+            statusLoading={statusLoading}
+          />
+        );
+      default:
+        return (
+          <PluginCardSlot
+            id={id}
+            isVisible={isVisible}
+            onOpenSingletonTab={onOpenSingletonTab}
+          />
+        );
+    }
+  };
+
   const onColumnDividerMouseDown = useCallback(
     (e: React.MouseEvent) => {
       e.preventDefault();
@@ -1231,7 +663,6 @@ export function DashboardTab({
       const startPct = mainWidthPct;
       const totalW = bodyRef.current?.getBoundingClientRect().width ?? 0;
       if (!totalW) return;
-      // One update per frame, not per mousemove.
       let frame = 0;
       let clientX = startX;
       const onMove = (ev: MouseEvent) => {
@@ -1257,63 +688,58 @@ export function DashboardTab({
     [mainWidthPct],
   );
 
-  const handleDragStart = (slot: CardSlot) =>
-    setDragState({
-      key: slot.key,
-      id: slot.id,
-      sourcePanel: slot.panel,
-      sourceOrder: slot.order,
-    });
-  const handleDragOver = (e: React.DragEvent) => e.preventDefault();
-  const handleDrop = (targetPanel: PanelId, targetOrder: number) => {
-    if (!dragState) return;
+  const drop = (panel: PanelId, order: number) => {
+    if (!dragKey) return;
     setSlots((prev) => {
-      const without = prev.filter((s) => s.key !== dragState.key);
-      const panelSlots = without
-        .filter((s) => s.panel === targetPanel)
+      const moving = prev.find((s) => s.key === dragKey);
+      if (!moving) return prev;
+      const rest = prev.filter((s) => s.key !== dragKey);
+      const target = rest
+        .filter((s) => s.panel === panel)
         .sort((a, b) => a.order - b.order);
-      const others = without.filter((s) => s.panel !== targetPanel);
-      const insertIdx = panelSlots.findIndex((s) => s.order > targetOrder);
-      const insertAt = insertIdx === -1 ? panelSlots.length : insertIdx;
-      const newPanelSlots = [
-        ...panelSlots.slice(0, insertAt),
-        {
-          key: dragState.key,
-          id: dragState.id,
-          panel: targetPanel,
-          order: 0,
-          height: prev.find((s) => s.key === dragState.key)?.height ?? null,
-        },
-        ...panelSlots.slice(insertAt),
+      const others = rest.filter((s) => s.panel !== panel);
+      const at = target.findIndex((s) => s.order > order);
+      const index = at === -1 ? target.length : at;
+      const next = [
+        ...target.slice(0, index),
+        { ...moving, panel },
+        ...target.slice(index),
       ].map((s, i) => ({ ...s, order: i }));
-      return [...others, ...newPanelSlots];
+      return [...others, ...next];
     });
-    setDragState(null);
+    setDragKey(null);
   };
-  const handleRemove = (key: string) =>
-    setSlots((prev) => prev.filter((s) => s.key !== key));
-  const handleAdd = (id: DashboardCardId, panel: PanelId) => {
+
+  const handleAdd = (id: DashboardCardId) => {
+    const registered = getRegisteredDashboardCard(id);
+    const panel: PanelId = registered?.defaultPanel ?? "main";
     setSlots((prev) => {
       const panelSlots = prev.filter((s) => s.panel === panel);
-      const maxOrder =
+      const order =
         panelSlots.length > 0
           ? Math.max(...panelSlots.map((s) => s.order)) + 1
           : 0;
-      const defaultHeight: number | null =
-        getRegisteredDashboardCard(id)?.defaultHeight ??
+      const height: number | null =
+        registered?.defaultHeight ??
         (id === "host_status" || id === "recent_activity" ? null : 150);
-      const key = `${id}_${Date.now()}`;
       return [
         ...prev,
-        { key, id, panel, order: maxOrder, height: defaultHeight },
+        { key: `${id}_${Date.now()}`, id, panel, order, height },
       ];
     });
   };
+
   const handleHeightChange = (key: string, h: number) =>
     setSlots((prev) =>
       prev.map((s) => (s.key === key ? { ...s, height: h } : s)),
     );
-  const handleReset = () => {
+
+  const handleReset = async () => {
+    const ok = await confirm({
+      title: t("dashboardTab.resetConfirm"),
+      confirmLabel: t("dashboard.reset"),
+    });
+    if (!ok) return;
     setSlots(DEFAULT_SLOTS);
     setMainWidthPct(68);
     setEditMode(false);
@@ -1325,391 +751,218 @@ export function DashboardTab({
     }
   };
 
-  const columnProps = {
-    hosts,
-    uptimeFormatted,
-    versionText,
-    versionStatus,
-    releaseUrl,
-    dbHealth,
-    credentialCount,
-    activity,
-    onClearActivity: handleClearActivity,
-    onOpenSingletonTab,
-    onOpenTab,
-    cardLabels,
-    isAdmin,
-    statusLoading,
-    isVisible,
-  };
+  const placed = new Set(slots.map((s) => s.id as string));
+  const available = [
+    ...DASHBOARD_CARDS.map((card) => ({
+      id: card.id as string,
+      plugin: false,
+    })),
+    ...registeredCards.map((card) => ({ id: card.id, plugin: true })),
+  ].filter((card) => !placed.has(card.id));
 
-  const isMobile = useIsMobile();
-
-  if (isMobile) {
-    const allSlots = [...mainSlots, ...sideSlots];
-    return (
-      <div className="flex flex-col w-full h-full min-h-0 overflow-hidden">
-        <div className="flex-1 min-h-0 overflow-y-auto px-3 pb-3 pt-3 flex flex-col gap-3">
-          <Card className="flex-row items-center justify-between px-4 py-3 shrink-0 gap-0">
-            <div>
-              <h1 className="text-base font-bold leading-tight">
-                {t("dashboard.title")}
-              </h1>
-              <p className="text-xs text-muted-foreground">{todayLabel}</p>
-            </div>
-            <div className="flex items-center gap-1">
-              <Button
-                variant="ghost"
-                size="sm"
-                className="text-xs text-muted-foreground hover:text-foreground"
-                asChild
-              >
-                <a
-                  href="https://github.com/Termix-SSH/Termix"
-                  target="_blank"
-                  rel="noreferrer"
-                >
-                  {t("dashboard.github")}
-                </a>
-              </Button>
-              <Button
-                variant="ghost"
-                size="sm"
-                className="text-xs text-muted-foreground hover:text-foreground"
-                asChild
-              >
-                <a
-                  href="https://github.com/Termix-SSH/Support"
-                  target="_blank"
-                  rel="noreferrer"
-                >
-                  {t("dashboard.support")}
-                </a>
-              </Button>
-              <Button
-                variant="ghost"
-                size="sm"
-                className="text-xs text-muted-foreground hover:text-foreground"
-                asChild
-              >
-                <a
-                  href="https://discord.com/invite/jVQGdvHDrf"
-                  target="_blank"
-                  rel="noreferrer"
-                >
-                  {t("dashboard.discord")}
-                </a>
-              </Button>
-              <Button
-                variant="ghost"
-                size="sm"
-                className="text-xs text-muted-foreground hover:text-foreground"
-                asChild
-              >
-                <a
-                  href="https://docs.termix.site/"
-                  target="_blank"
-                  rel="noreferrer"
-                >
-                  {t("dashboard.docs")}
-                </a>
-              </Button>
-              <Button
-                variant="ghost"
-                size="sm"
-                className="text-xs text-muted-foreground hover:text-foreground"
-                asChild
-              >
-                <a
-                  href="https://donate.termix.site/"
-                  target="_blank"
-                  rel="noreferrer"
-                >
-                  {t("dashboard.donate")}
-                </a>
-              </Button>
-            </div>
-          </Card>
-          {allSlots.map((slot) => (
-            <div
-              key={slot.id}
-              className={`shrink-0 ${slot.id === "host_status" || slot.id === "recent_activity" ? "max-h-72 flex flex-col overflow-hidden" : ""}`}
-            >
-              {slot.id === "stats_bar" && (
-                <StatsBarCard
-                  hosts={hosts}
-                  uptimeFormatted={uptimeFormatted}
-                  versionText={versionText}
-                  versionStatus={versionStatus}
-                  releaseUrl={releaseUrl}
-                  dbHealth={dbHealth}
-                />
-              )}
-              {slot.id === "counters_bar" && (
-                <CountersBarCard
-                  hosts={hosts}
-                  credentialCount={credentialCount}
-                  onOpenSingletonTab={onOpenSingletonTab}
-                />
-              )}
-              {slot.id === "quick_actions" && (
-                <QuickActionsCard
-                  onOpenSingletonTab={onOpenSingletonTab}
-                  hosts={hosts}
-                  onOpenTab={onOpenTab}
-                  isAdmin={isAdmin}
-                />
-              )}
-              {slot.id === "host_status" && (
-                <HostStatusCard
-                  hosts={statusCheckHosts}
-                  onOpenTab={onOpenTab}
-                  statusLoading={statusLoading}
-                />
-              )}
-              {slot.id === "recent_activity" && (
-                <RecentActivityCard
-                  activity={activity}
-                  hosts={hosts}
-                  onOpenTab={onOpenTab}
-                  onClear={handleClearActivity}
-                  statusLoading={statusLoading}
-                />
-              )}
-              {!CORE_CARD_IDS.has(slot.id) && (
-                <PluginCardSlot
-                  id={slot.id}
-                  isVisible={isVisible}
-                  onOpenSingletonTab={onOpenSingletonTab}
-                />
-              )}
-            </div>
-          ))}
+  const column = (panel: PanelId, columnSlots: CardSlot[], width: string) => (
+    <div
+      style={{ width }}
+      className={`flex min-w-0 flex-col ${
+        isMobile ? "shrink-0" : "min-h-0 overflow-y-auto thin-scrollbar"
+      } ${panel === "side" ? "bg-surface-dim/40" : ""}`}
+      onDragOver={(e) => editMode && e.preventDefault()}
+      onDrop={() => editMode && drop(panel, columnSlots.length)}
+    >
+      {columnSlots.length === 0 && editMode && (
+        <div className="m-2.5 flex flex-1 items-center justify-center border border-dashed border-border p-6 text-xs text-muted-foreground">
+          {t("dashboardTab.dropHere")}
         </div>
-      </div>
+      )}
+      {columnSlots.map((slot, i) => (
+        <Section
+          key={slot.key}
+          slot={slot}
+          meta={metaFor(slot.id)}
+          editMode={editMode}
+          last={isMobile ? false : i === columnSlots.length - 1}
+          dragging={dragKey === slot.key}
+          onDragStart={() => setDragKey(slot.key)}
+          onDrop={() => drop(panel, slot.order - 0.5)}
+          onRemove={() =>
+            setSlots((prev) => prev.filter((s) => s.key !== slot.key))
+          }
+          onHeightChange={handleHeightChange}
+          autoHeight={isMobile}
+        >
+          {renderCard(slot.id)}
+        </Section>
+      ))}
+    </div>
+  );
+
+  const online = hosts.filter((h) => h.status === "online").length;
+  const links = [
+    {
+      href: "https://github.com/Termix-SSH/Termix",
+      label: t("dashboard.github"),
+    },
+    {
+      href: reportCoreIssueUrl(import.meta.env.VITE_APP_VERSION || undefined),
+      label: t("dashboard.reportBug"),
+    },
+    {
+      href: "https://discord.com/invite/jVQGdvHDrf",
+      label: t("dashboard.discord"),
+    },
+    { href: docsUrl(), label: t("dashboard.docs") },
+    { href: "https://donate.termix.site/", label: t("dashboard.donate") },
+  ];
+
+  const title =
+    secondaryView && !viewPending ? (
+      <Segmented
+        value={isDashboardView ? "dashboard" : secondaryView.actionId}
+        onChange={setDashboardView}
+        options={[
+          { value: "dashboard", label: t("dashboard.title") },
+          { value: secondaryView.actionId, label: t(secondaryView.titleKey) },
+        ]}
+      />
+    ) : (
+      t("dashboard.title")
     );
-  }
 
   return (
-    <div className="flex flex-col w-full h-full min-h-0 overflow-hidden">
-      <Card className="flex-row items-center justify-between px-5 py-3 shrink-0 mx-5 mt-5 gap-0">
-        <div className="flex items-center gap-3">
-          {viewPending ? (
-            <Skeleton className="h-7 w-40" />
-          ) : (
-            <div className="flex items-center gap-0 bg-muted/40 border border-border p-0.5">
-              <button
-                onClick={() => setDashboardView("dashboard")}
-                className={`px-3 py-1 text-sm font-medium transition-colors ${isDashboardView ? "bg-background text-foreground shadow-sm" : "text-muted-foreground hover:text-foreground"}`}
-              >
-                {t("dashboard.title")}
-              </button>
-              {secondaryView && (
-                <button
-                  onClick={() => setDashboardView(secondaryView.actionId)}
-                  className={`px-3 py-1 text-sm font-medium transition-colors ${!isDashboardView ? "bg-background text-foreground shadow-sm" : "text-muted-foreground hover:text-foreground"}`}
-                >
-                  {t(secondaryView.titleKey)}
-                </button>
-              )}
-            </div>
-          )}
+    <PanelShell
+      icon={<LayoutGrid className="size-4" />}
+      title={title}
+      status={isDashboardView ? todayLabel : undefined}
+      scroll={false}
+      docs={docsUrl("dashboard")}
+      actions={
+        <>
           {isDashboardView && !viewPending && (
-            <p className="text-xs text-muted-foreground hidden sm:block">
-              {todayLabel}
-            </p>
-          )}
-        </div>
-        <div className="flex items-center gap-1">
-          <div className="hidden sm:flex items-center gap-2 mr-2 bg-muted/50 px-2.5 py-1 rounded-none border border-border">
-            <span className="text-[10px] font-bold text-muted-foreground uppercase tracking-widest">
-              {t("dashboardTab.commandPalette")}
-            </span>
-            <div className="flex items-center gap-1">
-              <Kbd className="h-5 px-1.5 bg-background text-[10px]">Shift</Kbd>
-              <span className="text-[10px] text-muted-foreground">+</span>
-              <Kbd className="h-5 px-1.5 bg-background text-[10px]">Shift</Kbd>
-            </div>
-          </div>
-          <Button
-            variant="ghost"
-            size="sm"
-            className="text-xs text-muted-foreground hover:text-foreground"
-            asChild
-          >
-            <a
-              href="https://github.com/Termix-SSH/Termix"
-              target="_blank"
-              rel="noreferrer"
-            >
-              {t("dashboard.github")}
-            </a>
-          </Button>
-          <Button
-            variant="ghost"
-            size="sm"
-            className="text-xs text-muted-foreground hover:text-foreground"
-            asChild
-          >
-            <a
-              href="https://github.com/Termix-SSH/Support"
-              target="_blank"
-              rel="noreferrer"
-            >
-              {t("dashboard.support")}
-            </a>
-          </Button>
-          <Button
-            variant="ghost"
-            size="sm"
-            className="text-xs text-muted-foreground hover:text-foreground"
-            asChild
-          >
-            <a
-              href="https://discord.com/invite/jVQGdvHDrf"
-              target="_blank"
-              rel="noreferrer"
-            >
-              {t("dashboard.discord")}
-            </a>
-          </Button>
-          <Button
-            variant="ghost"
-            size="sm"
-            className="text-xs text-muted-foreground hover:text-foreground"
-            asChild
-          >
-            <a
-              href="https://docs.termix.site/"
-              target="_blank"
-              rel="noreferrer"
-            >
-              {t("dashboard.docs")}
-            </a>
-          </Button>
-          <Button
-            variant="ghost"
-            size="sm"
-            className="text-xs text-muted-foreground hover:text-foreground"
-            asChild
-          >
-            <a
-              href="https://donate.termix.site/"
-              target="_blank"
-              rel="noreferrer"
-            >
-              {t("dashboard.donate")}
-            </a>
-          </Button>
-          {isDashboardView && (
             <>
-              <Separator orientation="vertical" className="mx-1 h-5" />
               {editMode ? (
                 <>
+                  <span className="hidden text-[11px] text-muted-foreground lg:inline">
+                    {t("dashboardTab.dragToReorder")}
+                  </span>
                   <Button
                     variant="ghost"
-                    size="sm"
-                    className="text-xs text-muted-foreground"
-                    onClick={handleReset}
+                    size="xs"
+                    className="gap-1"
+                    onClick={() => void handleReset()}
                   >
+                    <RotateCcw className="size-3" />
                     {t("dashboard.reset")}
                   </Button>
-                  <Button
-                    size="sm"
-                    className="text-xs bg-accent-brand hover:bg-accent-brand/90 text-white"
-                    onClick={() => setEditMode(false)}
-                  >
-                    {t("dashboardTab.done")}
-                  </Button>
                 </>
               ) : (
-                <Button
-                  variant="ghost"
-                  size="icon"
-                  onClick={() => setEditMode(true)}
-                  title={t("dashboard.customizeLayout")}
-                >
-                  <LayoutDashboard className="size-4 text-accent-brand" />
-                </Button>
+                <Facts className="hidden px-1.5 text-[11px] text-muted-foreground md:flex">
+                  <span>
+                    {t("dashboardTab.onlineCount", { count: online })}
+                  </span>
+                  <span>
+                    {t("dashboardTab.hostCount", { count: hosts.length })}
+                  </span>
+                  <span className="flex items-center gap-1">
+                    {t("dashboardTab.commandPalette")}
+                    <Kbd className="h-4">⇧⇧</Kbd>
+                  </span>
+                </Facts>
               )}
+              <span
+                aria-hidden
+                className="hidden h-4 w-px bg-border xl:block"
+              />
             </>
           )}
-        </div>
-      </Card>
-
+          <span className="hidden items-center gap-0.5 xl:flex">
+            {links.map((link) => (
+              <a
+                key={link.href}
+                href={link.href}
+                target="_blank"
+                rel="noreferrer"
+                className="px-1.5 py-1 text-[11px] text-muted-foreground transition-colors hover:text-foreground"
+              >
+                {link.label}
+              </a>
+            ))}
+          </span>
+          {isDashboardView && (
+            <Button
+              variant="ghost"
+              size="icon-sm"
+              title={
+                editMode
+                  ? t("dashboardTab.done")
+                  : t("dashboard.customizeLayout")
+              }
+              aria-label={
+                editMode
+                  ? t("dashboardTab.done")
+                  : t("dashboard.customizeLayout")
+              }
+              className={editMode ? "text-accent-brand" : ""}
+              onClick={() => setEditMode((v) => !v)}
+            >
+              {editMode ? (
+                <Check className="size-4" />
+              ) : (
+                <Pencil className="size-4" />
+              )}
+            </Button>
+          )}
+        </>
+      }
+    >
       {viewPending ? (
-        <div className="flex-1 min-h-0 overflow-hidden mx-5 mb-5 mt-4 border border-border flex flex-col p-5 gap-3">
-          <Skeleton className="h-24 w-full" />
-          <Skeleton className="h-24 w-full" />
-          <Skeleton className="h-24 w-full flex-1" />
+        <div className="flex flex-1 flex-col gap-2 p-2.5">
+          <Skeleton className="h-20 w-full" />
+          <Skeleton className="h-20 w-full" />
+          <Skeleton className="w-full flex-1" />
         </div>
       ) : !isDashboardView && secondaryView?.component ? (
-        <div className="flex-1 min-h-0 overflow-hidden mx-5 mb-5 mt-4 border border-border flex flex-col">
+        <div className="flex min-h-0 flex-1 flex-col overflow-hidden">
           <secondaryView.component onOpenSingletonTab={onOpenSingletonTab} />
         </div>
       ) : (
-        <>
-          {editMode && (
-            <div className="mx-5 mt-4 px-4 py-2 border border-dashed border-accent-brand/40 bg-accent-brand/5 shrink-0 flex items-center gap-2">
-              <LayoutDashboard className="size-3.5 text-accent-brand shrink-0" />
-              <span className="text-xs text-accent-brand font-semibold">
-                {t("dashboardTab.editModeInstructions")}
-              </span>
-            </div>
-          )}
-
+        <div className="flex min-h-0 flex-1 flex-col">
           <div
             ref={bodyRef}
-            className="flex flex-row flex-1 min-h-0 px-5 pb-5 pt-4 overflow-hidden"
+            className={`flex min-h-0 flex-1 ${isMobile ? "flex-col overflow-y-auto" : ""}`}
           >
-            <div
-              className="flex flex-col min-h-0"
-              style={{
-                width: hasSide || editMode ? `${mainWidthPct}%` : "100%",
-              }}
-            >
-              <PanelColumn
-                panel="main"
-                slots={mainSlots}
-                editMode={editMode}
-                dragState={dragState}
-                onDragStart={handleDragStart}
-                onDrop={handleDrop}
-                onDragOver={handleDragOver}
-                onRemove={handleRemove}
-                onAdd={handleAdd}
-                onHeightChange={handleHeightChange}
-                {...columnProps}
-              />
-            </div>
-
-            {(hasSide || editMode) &&
-              (editMode ? (
-                <ColumnDivider onMouseDown={onColumnDividerMouseDown} />
-              ) : (
-                <div className="w-4 shrink-0" />
-              ))}
-
-            {(hasSide || editMode) && (
-              <div className="flex flex-col min-h-0 flex-1">
-                <PanelColumn
-                  panel="side"
-                  slots={sideSlots}
-                  editMode={editMode}
-                  dragState={dragState}
-                  onDragStart={handleDragStart}
-                  onDrop={handleDrop}
-                  onDragOver={handleDragOver}
-                  onRemove={handleRemove}
-                  onAdd={handleAdd}
-                  onHeightChange={handleHeightChange}
-                  {...columnProps}
+            {column(
+              "main",
+              mainSlots,
+              isMobile || !showSide ? "100%" : `${mainWidthPct}%`,
+            )}
+            {showSide && (
+              <>
+                <div
+                  onMouseDown={isMobile ? undefined : onColumnDividerMouseDown}
+                  title={t("dashboardTab.dragToResizeColumns")}
+                  className={`shrink-0 bg-border transition-colors ${
+                    isMobile
+                      ? "h-px w-full"
+                      : "w-px cursor-col-resize hover:bg-accent-brand"
+                  }`}
                 />
-              </div>
+                {column(
+                  "side",
+                  sideSlots,
+                  isMobile ? "100%" : `${100 - mainWidthPct}%`,
+                )}
+              </>
             )}
           </div>
-        </>
+          {editMode && (
+            <AddTray
+              available={available}
+              labels={labels}
+              onAdd={(id) => handleAdd(id as DashboardCardId)}
+            />
+          )}
+        </div>
       )}
-    </div>
+    </PanelShell>
   );
 }
diff --git a/src/ui/dashboard/dashboard-cards-registry.ts b/src/ui/dashboard/dashboard-cards-registry.ts
index 3ba0880e4..09c560e80 100644
--- a/src/ui/dashboard/dashboard-cards-registry.ts
+++ b/src/ui/dashboard/dashboard-cards-registry.ts
@@ -21,6 +21,8 @@ export interface RegisteredDashboardCard {
   defaultHeight?: number;
   /** Which column a preset places this card in by default. Defaults to "main". */
   defaultPanel?: "main" | "side";
+  /** "framed" gets a titled header from the dashboard; "bare" draws its own. */
+  frame?: "framed" | "bare";
   component: ComponentType<DashboardCardRenderProps>;
 }
 
diff --git a/src/ui/dashboard/dashboard-core-cards.tsx b/src/ui/dashboard/dashboard-core-cards.tsx
new file mode 100644
index 000000000..f4789eef1
--- /dev/null
+++ b/src/ui/dashboard/dashboard-core-cards.tsx
@@ -0,0 +1,448 @@
+import { useIsMobile } from "@/hooks/use-mobile";
+import { useTranslation } from "react-i18next";
+import {
+  ExternalLink,
+  KeyRound,
+  Plus,
+  Server,
+  Settings,
+  User,
+} from "lucide-react";
+import { ComponentSlot } from "@/shell/ActionSlot";
+import { VersionBadge } from "@/components/version-badge";
+import { Facts } from "@/components/panel-layout";
+import { enabledHostProtocols, protocolPort } from "@/sidebar/host-protocols";
+import { activityTarget } from "@/lib/activity-types";
+import {
+  defaultConnectAction,
+  hostActionsFor,
+  listHostActions,
+} from "@/sidebar/host-contributions";
+import {
+  getStatusClasses,
+  useStatusColorScheme,
+} from "@/hooks/use-status-color-scheme";
+import { getDefaultConnectionTab } from "@/lib/host-connection-tabs";
+import type { RecentActivityItem } from "@/main-axios";
+import type { Host, TabType } from "@/types/ui-types";
+import { quarterBorders } from "./quarter-borders";
+import { parseServerTime } from "@/lib/server-time";
+
+export type VersionStatus =
+  "up_to_date" | "requires_update" | "beta" | "unknown";
+
+function Stat({
+  label,
+  aside,
+  children,
+}: {
+  label: string;
+  /** Sits beside the label, like the release channel. */
+  aside?: React.ReactNode;
+  children: React.ReactNode;
+}) {
+  return (
+    <div className="flex min-w-0 flex-col justify-center gap-1 px-3 py-2">
+      {children}
+      <div className="flex min-w-0 items-center gap-1.5">
+        <span className="truncate text-[10px] text-muted-foreground">
+          {label}
+        </span>
+        {aside}
+      </div>
+    </div>
+  );
+}
+
+export function StatsStrip({
+  hosts,
+  uptimeFormatted,
+  versionText,
+  versionStatus,
+  releaseUrl,
+  dbHealth,
+}: {
+  hosts: Host[];
+  uptimeFormatted: string;
+  versionText: string;
+  versionStatus: VersionStatus;
+  releaseUrl: string;
+  dbHealth: "healthy" | "error";
+}) {
+  const { t } = useTranslation();
+  const online = hosts.filter((h) => h.status === "online").length;
+  const big = "text-2xl font-bold leading-none tracking-tight";
+  return (
+    <div className="grid h-full grid-cols-2 divide-x divide-border md:grid-cols-4">
+      <Stat
+        label={t("dashboard.version")}
+        aside={
+          <VersionBadge
+            status={versionStatus}
+            releaseUrl={releaseUrl}
+            className="shrink-0 px-1 py-px text-[9px]"
+          />
+        }
+      >
+        <span className={`${big} truncate`} title={versionText || undefined}>
+          {versionText || "-"}
+        </span>
+      </Stat>
+      <Stat label={t("dashboard.uptime")}>
+        <span className={big}>{uptimeFormatted || "-"}</span>
+      </Stat>
+      <Stat label={t("dashboard.database")}>
+        <span
+          className={`${big} ${dbHealth === "healthy" ? "text-accent-brand" : "text-destructive"}`}
+        >
+          {dbHealth === "healthy"
+            ? t("dashboard.healthy")
+            : t("dashboard.error")}
+        </span>
+      </Stat>
+      <Stat label={t("dashboardTab.hostsAvailable")}>
+        <div className="flex items-baseline gap-1">
+          <span className={big}>{online}</span>
+          <span className="text-sm leading-none text-muted-foreground">
+            /{hosts.length}
+          </span>
+        </div>
+      </Stat>
+    </div>
+  );
+}
+
+export function CountersStrip({
+  hosts,
+  credentialCount,
+  onOpenSingletonTab,
+}: {
+  hosts: Host[];
+  credentialCount: number;
+  onOpenSingletonTab: (type: TabType, pendingEvent?: string) => void;
+}) {
+  const { t } = useTranslation();
+  const item =
+    "flex items-center gap-2 px-3 py-2 text-left transition-colors hover:bg-muted/50";
+  return (
+    <div className="grid h-full auto-cols-fr grid-flow-col divide-x divide-border">
+      <button
+        type="button"
+        onClick={() => onOpenSingletonTab("host-manager")}
+        className={item}
+      >
+        <Server className="size-3.5 shrink-0 text-muted-foreground" />
+        <span className="text-xl font-bold leading-none tracking-tight">
+          {hosts.length}
+        </span>
+        <span className="truncate text-[11px] text-muted-foreground">
+          {t("dashboard.totalHosts")}
+        </span>
+      </button>
+      <button
+        type="button"
+        onClick={() =>
+          onOpenSingletonTab("host-manager", "host-manager:show-credentials")
+        }
+        className={item}
+      >
+        <KeyRound className="size-3.5 shrink-0 text-muted-foreground" />
+        <span className="text-xl font-bold leading-none tracking-tight">
+          {credentialCount}
+        </span>
+        <span className="truncate text-[11px] text-muted-foreground">
+          {t("dashboard.totalCredentials")}
+        </span>
+      </button>
+      <ComponentSlot slotId="dashboard.counters" />
+    </div>
+  );
+}
+
+function ActionButton({
+  icon: Icon,
+  label,
+  hint,
+  onClick,
+  className,
+}: {
+  icon: React.ElementType;
+  label: string;
+  hint: string;
+  onClick: () => void;
+  className?: string;
+}) {
+  return (
+    <button
+      type="button"
+      onClick={onClick}
+      className={`group/btn flex h-full min-w-0 items-center gap-2 px-3 py-2 text-left transition-colors hover:bg-muted/50 ${className ?? ""}`}
+    >
+      <span className="flex size-6 shrink-0 items-center justify-center border border-border bg-muted transition-colors group-hover/btn:border-accent-brand/40 group-hover/btn:bg-accent-brand/20">
+        <Icon className="size-3 text-accent-brand" />
+      </span>
+      <span className="flex min-w-0 flex-col">
+        <span className="truncate text-xs font-medium">{label}</span>
+        <span className="truncate text-[10px] text-muted-foreground">
+          {hint}
+        </span>
+      </span>
+    </button>
+  );
+}
+
+export function QuickActions({
+  onOpenSingletonTab,
+  hosts,
+  onOpenTab,
+  isAdmin,
+}: {
+  onOpenSingletonTab: (type: TabType, pendingEvent?: string) => void;
+  hosts: Host[];
+  onOpenTab: (host: Host, type: TabType) => void;
+  isAdmin: boolean;
+}) {
+  const { t } = useTranslation();
+  const pinnedHosts = hosts.filter((h) => h.pin).slice(0, 4);
+  const endpoint = (host: Host) => {
+    const protocol = host.enableSsh ? undefined : enabledHostProtocols(host)[0];
+    const port = host.enableSsh
+      ? host.sshPort
+      : protocol
+        ? protocolPort(host.pluginSettings, protocol)
+        : host.port;
+    return `${host.ip}:${port ?? host.port}`;
+  };
+  const actions = [
+    {
+      icon: Plus,
+      label: t("dashboard.addHost"),
+      hint: t("dashboardTab.registerNewServer"),
+      onClick: () =>
+        onOpenSingletonTab("host-manager", "host-manager:add-host"),
+    },
+    {
+      icon: KeyRound,
+      label: t("dashboard.addCredential"),
+      hint: t("dashboardTab.storeSshKeysOrPasswords"),
+      onClick: () =>
+        onOpenSingletonTab("host-manager", "host-manager:add-credential"),
+    },
+    ...(isAdmin
+      ? [
+          {
+            icon: Settings,
+            label: t("dashboard.adminSettings"),
+            hint: t("dashboardTab.manageUsersAndRoles"),
+            onClick: () => onOpenSingletonTab("admin-settings"),
+          },
+        ]
+      : []),
+    {
+      icon: User,
+      label: t("dashboard.userProfile"),
+      hint: t("dashboardTab.manageYourAccount"),
+      onClick: () => onOpenSingletonTab("user-profile"),
+    },
+  ];
+  return (
+    <div className="flex min-h-full flex-1 flex-col">
+      <div className="grid flex-1 auto-rows-fr grid-cols-1 sm:grid-cols-2">
+        {actions.map((action, i) => (
+          <ActionButton
+            key={action.label}
+            {...action}
+            className={quarterBorders(i, actions.length)}
+          />
+        ))}
+      </div>
+      {pinnedHosts.length > 0 && (
+        <div className="flex flex-col border-t border-border">
+          {pinnedHosts.map((host) => {
+            const Icon =
+              defaultConnectAction(listHostActions(), host)?.icon ?? Server;
+            return (
+              <button
+                key={host.id}
+                type="button"
+                onClick={() => {
+                  const type = getDefaultConnectionTab(host);
+                  if (type) onOpenTab(host, type);
+                }}
+                className="flex items-center gap-2 border-b border-border/60 px-3 py-1.5 text-left transition-colors last:border-b-0 hover:bg-muted/50"
+              >
+                <Icon className="size-3 shrink-0 text-accent-brand" />
+                <span className="truncate text-xs font-medium">
+                  {host.name || host.ip}
+                </span>
+                <span className="ml-auto truncate font-mono text-[10px] text-muted-foreground">
+                  {endpoint(host)}
+                </span>
+              </button>
+            );
+          })}
+        </div>
+      )}
+    </div>
+  );
+}
+
+export function HostStatusList({
+  hosts,
+  onOpenTab,
+  statusLoading,
+}: {
+  hosts: Host[];
+  onOpenTab: (host: Host, type: TabType) => void;
+  statusLoading?: boolean;
+}) {
+  const { t } = useTranslation();
+  const scheme = useStatusColorScheme();
+  // A phone has no room for the metric bars next to the host name.
+  const isMobile = useIsMobile();
+  if (hosts.length === 0) {
+    return (
+      <div className="flex flex-1 items-center justify-center py-8 text-xs text-muted-foreground/60">
+        {t("dashboardTab.noHostsConfigured")}
+      </div>
+    );
+  }
+  return (
+    <div className="flex flex-col">
+      {hosts.map((host) => {
+        const availability = host.status ?? "offline";
+        return (
+          <div
+            key={host.id}
+            role="button"
+            tabIndex={0}
+            onClick={() => {
+              // An overview action (a metrics view) wins over connecting.
+              const actions = hostActionsFor(listHostActions(), host);
+              const target =
+                actions.find((action) => action.overview)?.tabType ??
+                defaultConnectAction(actions, host)?.tabType;
+              if (target) onOpenTab(host, target);
+            }}
+            className="group/row flex min-w-0 cursor-pointer items-center gap-2 px-3 py-1.5 hover:bg-muted/50"
+          >
+            <span
+              className={`size-1.5 shrink-0 rounded-full ${getStatusClasses(availability, scheme, "dot", statusLoading)}`}
+            />
+            <span className="min-w-0 flex-1">
+              <Facts className="min-w-0">
+                <span
+                  className="truncate text-xs font-medium"
+                  title={host.name}
+                >
+                  {host.name}
+                </span>
+                <span
+                  className="truncate font-mono text-[10px] text-muted-foreground"
+                  title={host.ip}
+                >
+                  {host.ip}
+                </span>
+              </Facts>
+            </span>
+            {/* Plugins add live details to a host row here. */}
+            {!isMobile && (
+              <ComponentSlot
+                slotId="dashboard.hostRow"
+                props={{
+                  hostId: Number(host.id),
+                  host,
+                  online: availability === "online",
+                }}
+              />
+            )}
+            <span
+              className={`shrink-0 border px-1.5 py-0.5 text-[10px] font-semibold ${getStatusClasses(availability, scheme, "badge", statusLoading)}`}
+            >
+              {statusLoading || availability === "unknown"
+                ? t("dashboardTab.checking")
+                : availability === "online"
+                  ? t("hosts.status.online")
+                  : t("hosts.status.offline")}
+            </span>
+            <ExternalLink className="size-2.5 shrink-0 text-muted-foreground/0 transition-colors group-hover/row:text-muted-foreground/60" />
+          </div>
+        );
+      })}
+    </div>
+  );
+}
+
+export function RecentActivityList({
+  activity,
+  hosts,
+  onOpenTab,
+  statusLoading,
+}: {
+  activity: RecentActivityItem[];
+  hosts: Host[];
+  onOpenTab: (host: Host, type: TabType) => void;
+  statusLoading?: boolean;
+}) {
+  const { t } = useTranslation();
+  const scheme = useStatusColorScheme();
+  const ago = (ts: string) => {
+    const diff = Math.floor(
+      (Date.now() - parseServerTime(ts).getTime()) / 1000,
+    );
+    if (diff < 60) return t("dashboard.justNow");
+    if (diff < 3600) return `${Math.floor(diff / 60)}m`;
+    if (diff < 86400) return `${Math.floor(diff / 3600)}h`;
+    return `${Math.floor(diff / 86400)}d`;
+  };
+  if (activity.length === 0) {
+    return (
+      <div className="flex flex-1 items-center justify-center py-8 text-xs text-muted-foreground/60">
+        {t("dashboard.noRecentActivity")}
+      </div>
+    );
+  }
+  return (
+    <div className="flex flex-col">
+      {activity.map((item) => {
+        const host = hosts.find((h) => h.id === String(item.hostId));
+        const target = activityTarget(item.type);
+        const Icon = target?.icon ?? Server;
+        return (
+          <div
+            key={item.id}
+            role="button"
+            tabIndex={0}
+            onClick={() => {
+              if (host && target) onOpenTab(host, target.tab);
+            }}
+            className="flex cursor-pointer items-center gap-2 px-3 py-1.5 hover:bg-muted/50"
+          >
+            <span
+              className={`size-1.5 shrink-0 rounded-full ${getStatusClasses(host?.status ?? false, scheme, "dot", statusLoading)}`}
+            />
+            <Facts className="min-w-0">
+              <span
+                className="truncate text-xs font-medium"
+                title={item.hostName}
+              >
+                {item.hostName}
+              </span>
+              <span className="flex min-w-0 items-center gap-1 text-[10px] text-muted-foreground">
+                <Icon className="size-2.5 shrink-0" />
+                <span className="truncate">
+                  {target?.labelKey
+                    ? t(target.labelKey)
+                    : item.type.replace("_", " ")}
+                </span>
+              </span>
+            </Facts>
+            <span className="ml-auto shrink-0 text-[10px] tabular-nums text-muted-foreground">
+              {ago(item.timestamp)}
+            </span>
+          </div>
+        );
+      })}
+    </div>
+  );
+}
diff --git a/src/ui/dashboard/quarter-borders.ts b/src/ui/dashboard/quarter-borders.ts
new file mode 100644
index 000000000..f2944c8dc
--- /dev/null
+++ b/src/ui/dashboard/quarter-borders.ts
@@ -0,0 +1,15 @@
+/**
+ * Lines only between cells, so the actions read as quarters: one column on
+ * small screens, two above. An odd last cell spans the full row.
+ */
+export function quarterBorders(index: number, count: number): string {
+  const classes = ["border-border"];
+  const last = index === count - 1;
+  if (!last) classes.push("border-b");
+  if (Math.floor(index / 2) === Math.floor((count - 1) / 2)) {
+    classes.push("sm:border-b-0");
+  }
+  if (index % 2 === 0 && !last) classes.push("sm:border-r");
+  if (last && count % 2 === 1) classes.push("sm:col-span-2");
+  return classes.join(" ");
+}
diff --git a/src/ui/hooks/use-action-slot.ts b/src/ui/hooks/use-action-slot.ts
index e450c345d..54fd9d35e 100644
--- a/src/ui/hooks/use-action-slot.ts
+++ b/src/ui/hooks/use-action-slot.ts
@@ -52,6 +52,10 @@ function contextKey(context: Record<string, unknown> | undefined): string {
   try {
     return JSON.stringify(context);
   } catch {
-    return String(Object.keys(context));
+    // A value that will not serialize still counts as there or not, so a
+    // handle filling in changes the key.
+    return Object.entries(context)
+      .map(([key, value]) => `${key}:${value == null ? "-" : typeof value}`)
+      .join(",");
   }
 }
diff --git a/src/ui/hooks/use-confirmation.ts b/src/ui/hooks/use-confirmation.ts
deleted file mode 100644
index 16013f7f0..000000000
--- a/src/ui/hooks/use-confirmation.ts
+++ /dev/null
@@ -1,167 +0,0 @@
-import { useState, useEffect, useCallback } from "react";
-import { toast } from "sonner";
-
-interface ConfirmationOptions {
-  title: string;
-  description: string;
-  confirmText?: string;
-  cancelText?: string;
-  variant?: "default" | "destructive";
-}
-
-interface ToastConfirmOptions {
-  confirmOnEnter?: boolean;
-  duration?: number;
-}
-
-export function useConfirmation() {
-  const [isOpen, setIsOpen] = useState(false);
-  const [options, setOptions] = useState<ConfirmationOptions | null>(null);
-  const [onConfirm, setOnConfirm] = useState<(() => void) | null>(null);
-  const [activeToastId, setActiveToastId] = useState<string | number | null>(
-    null,
-  );
-  const [pendingConfirmCallback, setPendingConfirmCallback] = useState<
-    (() => void) | null
-  >(null);
-  const [pendingResolve, setPendingResolve] = useState<
-    ((value: boolean) => void) | null
-  >(null);
-
-  const handleEnterKey = useCallback(
-    (event: KeyboardEvent) => {
-      if (event.key === "Enter" && activeToastId !== null) {
-        event.preventDefault();
-        event.stopPropagation();
-
-        if (pendingConfirmCallback) {
-          pendingConfirmCallback();
-        }
-        if (pendingResolve) {
-          pendingResolve(true);
-        }
-
-        toast.dismiss(activeToastId);
-        setActiveToastId(null);
-        setPendingConfirmCallback(null);
-        setPendingResolve(null);
-      }
-    },
-    [activeToastId, pendingConfirmCallback, pendingResolve],
-  );
-
-  useEffect(() => {
-    if (activeToastId !== null) {
-      // Use capture phase to intercept Enter before terminal receives it
-      window.addEventListener("keydown", handleEnterKey, true);
-      return () => {
-        window.removeEventListener("keydown", handleEnterKey, true);
-      };
-    }
-  }, [activeToastId, handleEnterKey]);
-
-  const confirm = (opts: ConfirmationOptions, callback: () => void) => {
-    setOptions(opts);
-    setOnConfirm(() => callback);
-    setIsOpen(true);
-  };
-
-  const handleConfirm = () => {
-    if (onConfirm) {
-      onConfirm();
-    }
-    setIsOpen(false);
-    setOptions(null);
-    setOnConfirm(null);
-  };
-
-  const handleCancel = () => {
-    setIsOpen(false);
-    setOptions(null);
-    setOnConfirm(null);
-  };
-
-  const confirmWithToast = (
-    opts: ConfirmationOptions | string,
-    callback?: () => void,
-    variantOrConfirmLabel: "default" | "destructive" | string = "Confirm",
-    cancelLabel: string = "Cancel",
-    toastOptions: ToastConfirmOptions = { confirmOnEnter: false },
-  ): Promise<boolean> => {
-    return new Promise((resolve) => {
-      const isVariant =
-        variantOrConfirmLabel === "default" ||
-        variantOrConfirmLabel === "destructive";
-      const confirmLabel = isVariant ? "Confirm" : variantOrConfirmLabel;
-
-      const { confirmOnEnter = false, duration = 8000 } = toastOptions;
-
-      const handleToastConfirm = () => {
-        if (callback) callback();
-        resolve(true);
-        setActiveToastId(null);
-        setPendingConfirmCallback(null);
-        setPendingResolve(null);
-      };
-
-      const handleToastCancel = () => {
-        resolve(false);
-        setActiveToastId(null);
-        setPendingConfirmCallback(null);
-        setPendingResolve(null);
-      };
-
-      const message = typeof opts === "string" ? opts : opts.description;
-      const actualConfirmLabel =
-        typeof opts === "object" && opts.confirmText
-          ? opts.confirmText
-          : confirmLabel;
-      const actualCancelLabel =
-        typeof opts === "object" && opts.cancelText
-          ? opts.cancelText
-          : cancelLabel;
-
-      const toastId = toast(message, {
-        duration,
-        action: {
-          label: confirmOnEnter
-            ? `${actualConfirmLabel} ↵`
-            : actualConfirmLabel,
-          onClick: handleToastConfirm,
-        },
-        cancel: {
-          label: actualCancelLabel,
-          onClick: handleToastCancel,
-        },
-        onDismiss: () => {
-          setActiveToastId(null);
-          setPendingConfirmCallback(null);
-          setPendingResolve(null);
-        },
-        onAutoClose: () => {
-          resolve(false);
-          setActiveToastId(null);
-          setPendingConfirmCallback(null);
-          setPendingResolve(null);
-        },
-      } as NonNullable<Parameters<typeof toast>[1]>);
-
-      if (confirmOnEnter) {
-        setActiveToastId(toastId);
-        setPendingConfirmCallback(() => () => {
-          if (callback) callback();
-        });
-        setPendingResolve(() => resolve);
-      }
-    });
-  };
-
-  return {
-    isOpen,
-    options,
-    confirm,
-    handleConfirm,
-    handleCancel,
-    confirmWithToast,
-  };
-}
diff --git a/src/ui/hooks/use-installed-plugins.ts b/src/ui/hooks/use-installed-plugins.ts
new file mode 100644
index 000000000..e623357c4
--- /dev/null
+++ b/src/ui/hooks/use-installed-plugins.ts
@@ -0,0 +1,35 @@
+import { useEffect, useState } from "react";
+import {
+  getPlugins,
+  PLUGINS_CHANGED_EVENT,
+  type PluginSummary,
+} from "@/api/plugins-api";
+
+/**
+ * Every installed plugin, read again whenever one is enabled, disabled,
+ * installed or removed, so what a plugin adds shows up without a reload.
+ */
+export function useInstalledPlugins(): PluginSummary[] {
+  const [plugins, setPlugins] = useState<PluginSummary[]>([]);
+
+  useEffect(() => {
+    let cancelled = false;
+    let request = 0;
+    const load = () => {
+      const current = ++request;
+      void getPlugins()
+        .then((loaded) => {
+          if (!cancelled && current === request) setPlugins(loaded);
+        })
+        .catch(() => {});
+    };
+    load();
+    window.addEventListener(PLUGINS_CHANGED_EVENT, load);
+    return () => {
+      cancelled = true;
+      window.removeEventListener(PLUGINS_CHANGED_EVENT, load);
+    };
+  }, []);
+
+  return plugins;
+}
diff --git a/src/ui/hooks/use-mobile.ts b/src/ui/hooks/use-mobile.ts
index a93d58393..21ea8d478 100644
--- a/src/ui/hooks/use-mobile.ts
+++ b/src/ui/hooks/use-mobile.ts
@@ -1,13 +1,19 @@
 import * as React from "react";
+import { isElectron } from "@/lib/electron";
 
 const MOBILE_BREAKPOINT = 768;
 
+/** Phone layout below the breakpoint. The desktop app always stays desktop. */
 export function useIsMobile() {
   const [isMobile, setIsMobile] = React.useState<boolean | undefined>(
     undefined,
   );
 
   React.useEffect(() => {
+    if (isElectron()) {
+      setIsMobile(false);
+      return;
+    }
     const mql = window.matchMedia(`(max-width: ${MOBILE_BREAKPOINT - 1}px)`);
     const onChange = () => {
       setIsMobile(window.innerWidth < MOBILE_BREAKPOINT);
diff --git a/src/ui/hooks/use-permissions.ts b/src/ui/hooks/use-permissions.ts
index f8df68e19..f12292050 100644
--- a/src/ui/hooks/use-permissions.ts
+++ b/src/ui/hooks/use-permissions.ts
@@ -56,6 +56,14 @@ export async function hasPermission(permission: string): Promise<boolean> {
   return matchesPermission(permissions, isAdmin, permission);
 }
 
+/** A sync has() over the current grants, for code outside a component. */
+export async function loadPermissionChecker(): Promise<
+  (permission: string) => boolean
+> {
+  const { permissions, isAdmin } = await load();
+  return (permission) => matchesPermission(permissions, isAdmin, permission);
+}
+
 /**
  * Warms the permissions cache before the shell mounts, so permission-gated
  * rail items are already known on first paint instead of popping in once
diff --git a/src/ui/hooks/use-status-color-scheme.ts b/src/ui/hooks/use-status-color-scheme.ts
index 44711e2f1..ed482fe2c 100644
--- a/src/ui/hooks/use-status-color-scheme.ts
+++ b/src/ui/hooks/use-status-color-scheme.ts
@@ -56,9 +56,9 @@ export function getStatusClasses(
   const online = status === true || status === "online";
   if (loading || status === "unknown") {
     if (scheme === "status") {
-      if (variant === "dot") return "bg-yellow-400 animate-pulse";
-      if (variant === "stripe") return "bg-yellow-400/40 animate-pulse";
-      return "border-yellow-400/40 text-yellow-400 bg-yellow-400/10 animate-pulse";
+      if (variant === "dot") return "bg-warning animate-pulse";
+      if (variant === "stripe") return "bg-warning/40 animate-pulse";
+      return "border-warning/40 text-warning bg-warning/10 animate-pulse";
     }
     if (variant === "dot") return "bg-muted-foreground/40 animate-pulse";
     if (variant === "stripe") return "bg-muted-foreground/20 animate-pulse";
diff --git a/src/ui/i18n/i18n.ts b/src/ui/i18n/i18n.ts
index c26a1845e..8921b3642 100644
--- a/src/ui/i18n/i18n.ts
+++ b/src/ui/i18n/i18n.ts
@@ -168,6 +168,8 @@ i18n
 
     react: {
       useSuspense: false,
+      // Repaint when a plugin enabled later loads its strings.
+      bindI18n: "languageChanged loaded",
     },
   });
 
diff --git a/src/ui/index.css b/src/ui/index.css
index 916780970..cf65a150d 100644
--- a/src/ui/index.css
+++ b/src/ui/index.css
@@ -88,6 +88,14 @@
   --sidebar-accent-foreground: oklch(0.2115 0.0042 128.68);
   --sidebar-border: oklch(0.922 0 0);
   --sidebar-ring: oklch(0.708 0 0);
+  --warning: oklch(0.795 0.162 86.05);
+  --terminal-bg: #ffffff;
+  --surface-dim: oklch(0.945 0 0);
+  --bg-base: var(--background);
+  --border-base: var(--border);
+  --foreground-secondary: var(--muted-foreground);
+  --canvas: var(--background);
+  --overlay: oklch(0 0 0 / 50%);
 }
 
 .dark {
@@ -124,6 +132,8 @@
   --sidebar-accent-foreground: oklch(0.985 0 0);
   --sidebar-border: oklch(1 0 0 / 12%);
   --sidebar-ring: oklch(0.556 0 0);
+  --warning: oklch(0.852 0.156 91.94);
+  --terminal-bg: #0c0d0b;
 }
 
 /* ── Dracula ────────────────────────────────────────────────── */
@@ -162,6 +172,8 @@
   --sidebar-accent-foreground: #f8f8f2;
   --sidebar-border: rgba(168, 179, 217, 0.18);
   --sidebar-ring: #8be9fd;
+  --warning: #f1fa8c;
+  --terminal-bg: #282a36;
 }
 
 /* ── Catppuccin Mocha ───────────────────────────────────────── */
@@ -200,6 +212,8 @@
   --sidebar-accent-foreground: #cdd6f4;
   --sidebar-border: rgba(186, 194, 222, 0.18);
   --sidebar-ring: #89b4fa;
+  --warning: #f9e2af;
+  --terminal-bg: #1e1e2e;
 }
 
 /* ── Nord ───────────────────────────────────────────────────── */
@@ -238,6 +252,8 @@
   --sidebar-accent-foreground: #eceff4;
   --sidebar-border: rgba(180, 192, 212, 0.18);
   --sidebar-ring: #88c0d0;
+  --warning: #ebcb8b;
+  --terminal-bg: #2e3440;
 }
 
 /* ── Solarized Dark ─────────────────────────────────────────── */
@@ -276,6 +292,8 @@
   --sidebar-accent-foreground: #d5dddd;
   --sidebar-border: rgba(159, 179, 179, 0.2);
   --sidebar-ring: #268bd2;
+  --warning: #b58900;
+  --terminal-bg: #002b36;
 }
 
 /* ── Tokyo Night ────────────────────────────────────────────── */
@@ -315,6 +333,8 @@
   --sidebar-accent-foreground: #c0caf5;
   --sidebar-border: rgba(139, 147, 189, 0.2);
   --sidebar-ring: #7aa2f7;
+  --warning: #e0af68;
+  --terminal-bg: #1a1b26;
 }
 
 /* ── One Dark ───────────────────────────────────────────────── */
@@ -353,6 +373,8 @@
   --sidebar-accent-foreground: #abb2bf;
   --sidebar-border: rgba(154, 163, 178, 0.18);
   --sidebar-ring: #61afef;
+  --warning: #e5c07b;
+  --terminal-bg: #282c34;
 }
 
 /* ── Gruvbox Dark ───────────────────────────────────────────── */
@@ -392,6 +414,8 @@
   --sidebar-accent-foreground: #ebdbb2;
   --sidebar-border: rgba(196, 181, 157, 0.18);
   --sidebar-ring: #fabd2f;
+  --warning: #fabd2f;
+  --terminal-bg: #282828;
 }
 
 @layer base {
@@ -612,6 +636,11 @@ html.fs-xl {
     var(--motion-ease-enter) both;
 }
 
+.motion-fade-enter {
+  animation: motion-fade-enter var(--motion-duration-context)
+    var(--motion-ease-enter) both;
+}
+
 .motion-workspace-enter {
   animation: motion-workspace-enter var(--motion-duration-panel)
     var(--motion-ease-enter) both;
@@ -699,6 +728,12 @@ html.fs-xl {
   }
 }
 
+@keyframes motion-fade-enter {
+  from {
+    opacity: 0;
+  }
+}
+
 @keyframes motion-workspace-enter {
   from {
     opacity: 0;
@@ -759,6 +794,7 @@ html.fs-xl {
 
   .motion-panel-enter,
   .motion-context-enter,
+  .motion-fade-enter,
   .motion-workspace-enter,
   .motion-workspace-layout,
   .motion-transfer-phase,
@@ -784,3 +820,20 @@ html.fs-xl {
     transition-duration: 1ms !important;
   }
 }
+
+/* A settings search result, marked briefly after the page opens. */
+.settings-search-hit {
+  outline: 1px solid var(--accent-brand);
+  outline-offset: 2px;
+  transition: outline-color 1.2s ease;
+}
+
+/* Cards and rows the settings page search filtered out. */
+[data-search-hidden] {
+  display: none !important;
+}
+
+::highlight(settings-search) {
+  background-color: color-mix(in oklab, var(--accent-brand) 35%, transparent);
+  color: inherit;
+}
diff --git a/src/ui/lib/docs-pages.json b/src/ui/lib/docs-pages.json
new file mode 100644
index 000000000..ecfc2a689
--- /dev/null
+++ b/src/ui/lib/docs-pages.json
@@ -0,0 +1,42 @@
+{
+  "home": "",
+  "install": "install",
+  "updating": "install/updating",
+  "betas": "configure/betas",
+  "envVars": "configure/environment-variables",
+  "https": "configure/https",
+  "database": "configure/database",
+  "reverseProxy": "configure/reverse-proxy",
+  "desktopSync": "configure/desktop-sync",
+  "interface": "guide/interface",
+  "dashboard": "guide/dashboard",
+  "manage": "guide/manage",
+  "hosts": "guide/hosts",
+  "portKnocking": "guide/hosts#port-knocking",
+  "hostDefaults": "guide/host-defaults",
+  "credentials": "guide/credentials",
+  "sharing": "guide/sharing",
+  "account": "guide/account",
+  "accountSecurity": "guide/account#security",
+  "accountData": "guide/account#your-data",
+  "apiKeys": "guide/api-keys",
+  "commandPalette": "guide/command-palette",
+  "settings": "guide/settings",
+  "interfaceSettings": "guide/settings#interface",
+  "appearance": "guide/settings#appearance",
+  "keybindings": "guide/settings#keybindings",
+  "users": "guide/users",
+  "sessions": "guide/users#sessions",
+  "roles": "guide/roles",
+  "adminGeneral": "guide/admin-settings",
+  "branding": "guide/admin-settings#branding",
+  "adminDatabase": "guide/admin-settings#database",
+  "adminSsl": "configure/https",
+  "auditLog": "guide/audit-log",
+  "importExport": "guide/import-export",
+  "plugins": "guide/plugins",
+  "pluginCatalog": "plugins",
+  "cli": "cli",
+  "develop": "develop",
+  "communityRegistry": "develop/community-registry"
+}
diff --git a/src/ui/lib/docs.ts b/src/ui/lib/docs.ts
new file mode 100644
index 000000000..28d456b7c
--- /dev/null
+++ b/src/ui/lib/docs.ts
@@ -0,0 +1,17 @@
+import DOCS_PAGES from "./docs-pages.json";
+
+export const DOCS_URL = "https://docs.termix.site";
+
+/**
+ * Every core docs page the app links to. The docs site checks each one
+ * exists, so add new links here rather than writing URLs inline.
+ */
+export type DocsPage = keyof typeof DOCS_PAGES;
+
+/** Full URL of a core docs page. */
+export function docsUrl(page: DocsPage = "home"): string {
+  const path = DOCS_PAGES[page] ?? "";
+  return path ? `${DOCS_URL}/${path}` : `${DOCS_URL}/`;
+}
+
+export { DOCS_PAGES };
diff --git a/src/ui/lib/embedded-frame.ts b/src/ui/lib/embedded-frame.ts
new file mode 100644
index 000000000..b5aab312a
--- /dev/null
+++ b/src/ui/lib/embedded-frame.ts
@@ -0,0 +1,32 @@
+/**
+ * The two places this web UI runs only to sign someone in for another app:
+ * the Termix mobile app's WebView, and the iframe a desktop app shows a
+ * server's login in while linking. Neither should ever show onboarding.
+ */
+
+export interface EmbeddedFrameWindow extends Window {
+  IS_ELECTRON_WEBVIEW?: boolean;
+  ReactNativeWebView?: { postMessage: (msg: string) => void };
+}
+
+export function isInMobileWebView(): boolean {
+  return (
+    /Termix-Mobile\/(Android|iOS)/.test(navigator.userAgent) ||
+    !!(window as EmbeddedFrameWindow).ReactNativeWebView
+  );
+}
+
+export function isInElectronWebView(): boolean {
+  if (isInMobileWebView()) return false;
+  if ((window as EmbeddedFrameWindow).IS_ELECTRON_WEBVIEW) return true;
+  try {
+    if (window.self !== window.top) return true;
+  } catch {
+    return true;
+  }
+  return false;
+}
+
+export function isEmbeddedAuthFrame(): boolean {
+  return isInMobileWebView() || isInElectronWebView();
+}
diff --git a/src/ui/lib/error-message.ts b/src/ui/lib/error-message.ts
index 393de3d64..35d6f4b3f 100644
--- a/src/ui/lib/error-message.ts
+++ b/src/ui/lib/error-message.ts
@@ -1,7 +1,7 @@
 /**
  * Extract a stable, human-readable message from an unknown thrown value.
  *
- * A thrown value is not guaranteed to be an `Error` — libraries may throw
+ * A thrown value is not guaranteed to be an `Error`, libraries may throw
  * strings or plain objects, which carry no useful `.message`. When that
  * happens the caller gets `fallback` instead, so error paths never surface a
  * raw `[object Object]` in logs or UI.
diff --git a/src/ui/lib/host-key-fingerprint.ts b/src/ui/lib/host-key-fingerprint.ts
new file mode 100644
index 000000000..80863571b
--- /dev/null
+++ b/src/ui/lib/host-key-fingerprint.ts
@@ -0,0 +1,16 @@
+import { sha256 } from "@noble/hashes/sha2.js";
+
+/**
+ * The backend sends the raw host key as hex. This turns it into the
+ * SHA256:... form ssh-keygen -lf prints, so users can compare the two.
+ */
+export function hostKeyFingerprint(hex: string): string {
+  if (!hex || hex.length % 2 !== 0 || !/^[0-9a-f]+$/i.test(hex)) return hex;
+  const bytes = new Uint8Array(hex.length / 2);
+  for (let i = 0; i < bytes.length; i++) {
+    bytes[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+  }
+  let binary = "";
+  for (const byte of sha256(bytes)) binary += String.fromCharCode(byte);
+  return `SHA256:${btoa(binary).replace(/=+$/, "")}`;
+}
diff --git a/src/ui/lib/issue-url.ts b/src/ui/lib/issue-url.ts
new file mode 100644
index 000000000..cc2b22a62
--- /dev/null
+++ b/src/ui/lib/issue-url.ts
@@ -0,0 +1,115 @@
+import { isElectron } from "@/lib/electron";
+
+export const CORE_REPO_URL = "https://github.com/Termix-SSH/Termix";
+
+const MAX_URL_LENGTH = 7500;
+
+/** A GitHub repo URL without .git or a trailing slash, or null if it is not one. */
+export function normalizeGitHubRepo(repository?: string | null): string | null {
+  const repo = repository
+    ?.trim()
+    .replace(/\.git$/, "")
+    .replace(/\/+$/, "");
+  if (!repo || !/^https:\/\/github\.com\/[^/]+\/[^/]+$/.test(repo)) {
+    return null;
+  }
+  return repo;
+}
+
+/**
+ * A new issue from one of the repo's issue forms, with fields prefilled by
+ * their form ids. Logs get cut first when the URL would be too long.
+ */
+export function buildIssueUrl(
+  repo: string,
+  options: {
+    template: string;
+    title?: string;
+    fields?: Record<string, string | null | undefined>;
+  },
+): string {
+  const fields = Object.fromEntries(
+    Object.entries(options.fields ?? {}).filter(
+      (entry): entry is [string, string] => !!entry[1]?.trim(),
+    ),
+  );
+  const build = () => {
+    const params = new URLSearchParams({ template: options.template });
+    if (options.title) params.set("title", options.title);
+    for (const [key, value] of Object.entries(fields)) params.set(key, value);
+    return `${repo}/issues/new?${params.toString()}`;
+  };
+  let url = build();
+  while (url.length > MAX_URL_LENGTH && fields.logs) {
+    const cut = Math.max(0, fields.logs.length - (url.length - MAX_URL_LENGTH));
+    fields.logs =
+      cut > 200 ? `${fields.logs.slice(0, cut - 20)}\n...(cut)` : undefined;
+    if (!fields.logs) delete fields.logs;
+    url = build();
+  }
+  return url;
+}
+
+function osName(ua: string): string {
+  if (/Android/i.test(ua)) return "Android";
+  if (/iPhone|iPad|iPod/i.test(ua)) return "iOS";
+  if (/Windows/i.test(ua)) return "Windows";
+  if (/Mac OS X|Macintosh/i.test(ua)) return "macOS";
+  if (/CrOS/i.test(ua)) return "ChromeOS";
+  if (/Linux/i.test(ua)) return "Linux";
+  return "Unknown OS";
+}
+
+function browserName(ua: string): string {
+  const match =
+    ua.match(/(Edg)\/(\d+)/) ??
+    ua.match(/(OPR)\/(\d+)/) ??
+    ua.match(/(Firefox)\/(\d+)/) ??
+    ua.match(/(Chrome)\/(\d+)/) ??
+    ua.match(/Version\/(\d+).*(Safari)/);
+  if (!match) return "Unknown browser";
+  if (match[2] === "Safari") return `Safari ${match[1]}`;
+  const names: Record<string, string> = { Edg: "Edge", OPR: "Opera" };
+  return `${names[match[1]] ?? match[1]} ${match[2]}`;
+}
+
+/** One line on where Termix is running, for the environment field. */
+export function describeEnvironment(
+  userAgent: string = typeof navigator === "undefined"
+    ? ""
+    : navigator.userAgent,
+  desktop: boolean = isElectron(),
+): string {
+  const os = osName(userAgent);
+  return desktop
+    ? `Desktop app on ${os}`
+    : `Web, ${browserName(userAgent)} on ${os}`;
+}
+
+/** A bug report on the Termix core repo. */
+export function reportCoreIssueUrl(termixVersion?: string): string {
+  return buildIssueUrl(CORE_REPO_URL, {
+    template: "bug_report.yml",
+    fields: {
+      "termix-version": termixVersion,
+      environment: describeEnvironment(),
+    },
+  });
+}
+
+/** Beta feedback on the core repo, listing every plugin running a beta. */
+export function reportBetaFeedbackUrl(
+  termixVersion?: string,
+  betaPlugins: Array<{ id: string; version: string }> = [],
+): string {
+  return buildIssueUrl(CORE_REPO_URL, {
+    template: "beta_feedback.yml",
+    fields: {
+      "termix-version": termixVersion,
+      environment: describeEnvironment(),
+      "beta-plugins": betaPlugins
+        .map((plugin) => `${plugin.id} ${plugin.version}`)
+        .join("\n"),
+    },
+  });
+}
diff --git a/src/ui/lib/plugin-transport.ts b/src/ui/lib/plugin-transport.ts
index 3aa376918..2df0aea2c 100644
--- a/src/ui/lib/plugin-transport.ts
+++ b/src/ui/lib/plugin-transport.ts
@@ -12,7 +12,7 @@
  *   - Electron pointed at a remote Termix server, for hosts whose connection
  *     origin resolves there.
  *
- * A7 re-exports both through @termix/plugin-sdk/frontend. They live here for
+ * A7 re-exports both through @termix-ssh/plugin-sdk/frontend. They live here for
  * now because plugin frontends are still bundled with the shell.
  */
 
@@ -61,7 +61,10 @@ export function createPluginApi(pluginId: string): AxiosInstance {
         property === "options" ||
         property === "post" ||
         property === "put" ||
-        property === "patch"
+        property === "patch" ||
+        property === "postForm" ||
+        property === "putForm" ||
+        property === "patchForm"
       ) {
         return (url: string, ...rest: unknown[]) =>
           (value as (...args: unknown[]) => unknown).call(
@@ -123,6 +126,26 @@ export function pluginApiFor(
   return client;
 }
 
+/**
+ * A one minute socket token for the web app. The HttpOnly cookie alone fails
+ * behind a proxy that rewrites Host. Null for a guest or an older server, and
+ * the socket then falls back to the cookie.
+ */
+async function fetchSocketTicket(): Promise<string | null> {
+  const base = (authApi.defaults.baseURL ?? "").replace(/\/+$/, "");
+  try {
+    const response = await fetch(`${base}/users/ws-ticket`, {
+      method: "POST",
+      credentials: "include",
+    });
+    if (!response.ok) return null;
+    const data = (await response.json()) as { ticket?: unknown };
+    return typeof data.ticket === "string" ? data.ticket : null;
+  } catch {
+    return null;
+  }
+}
+
 /**
  * The WebSocket URL for /plugin-ws/<id>/<path>, plus the subprotocols that
  * carry the JWT.
@@ -148,7 +171,7 @@ export async function pluginWsUrl(
     });
   }
 
-  const token = localStorage.getItem("jwt");
+  const token = (await fetchSocketTicket()) ?? localStorage.getItem("jwt");
   const protocols = websocketAuthProtocols(token);
 
   // Dev without a configured API host goes through Vite's proxy, which is
diff --git a/src/ui/lib/role-label.ts b/src/ui/lib/role-label.ts
new file mode 100644
index 000000000..4dbae6719
--- /dev/null
+++ b/src/ui/lib/role-label.ts
@@ -0,0 +1,12 @@
+import type { TFunction } from "i18next";
+
+/** System roles store an i18n key as their display name. */
+export function roleLabel<T extends string | null | undefined>(
+  t: TFunction,
+  displayName: T,
+): T | string {
+  return typeof displayName === "string" &&
+    displayName.startsWith("rbac.roles.")
+    ? t(displayName)
+    : displayName;
+}
diff --git a/src/ui/lib/server-time.ts b/src/ui/lib/server-time.ts
new file mode 100644
index 000000000..199583553
--- /dev/null
+++ b/src/ui/lib/server-time.ts
@@ -0,0 +1,8 @@
+/**
+ * Parses a timestamp from the API. SQLite stores CURRENT_TIMESTAMP as UTC
+ * with no zone ("2026-10-09 23:11:54"), which browsers read as local time.
+ */
+export function parseServerTime(ts: string): Date {
+  const bare = /^\d{4}-\d{2}-\d{2}[ T]\d{2}:\d{2}(:\d{2}(\.\d+)?)?$/.test(ts);
+  return new Date(bare ? `${ts.replace(" ", "T")}Z` : ts);
+}
diff --git a/src/ui/lib/usage-color.ts b/src/ui/lib/usage-color.ts
new file mode 100644
index 000000000..ae7bfa36a
--- /dev/null
+++ b/src/ui/lib/usage-color.ts
@@ -0,0 +1,17 @@
+/** Usage ramp for resource readouts: warning from 75, destructive from 90. */
+
+/** Text color class for a percentage. */
+export function usageColor(percent: number | null): string {
+  if (percent === null) return "text-muted-foreground";
+  if (percent >= 90) return "text-destructive";
+  if (percent >= 75) return "text-warning";
+  return "text-accent-brand";
+}
+
+/** Background class for the same ramp. */
+export function usageBarColor(percent: number | null): string {
+  if (percent === null) return "bg-muted-foreground/30";
+  if (percent >= 90) return "bg-destructive";
+  if (percent >= 75) return "bg-warning";
+  return "bg-accent-brand";
+}
diff --git a/src/ui/locales/README.md b/src/ui/locales/README.md
index fd9bb60f4..094c3a098 100644
--- a/src/ui/locales/README.md
+++ b/src/ui/locales/README.md
@@ -1,3 +1,5 @@
-# DO NOT MODIFY TRANSLATED FILES DIRECTLY
+# Translations
 
-Instead, use Crowdsin. See [docs](https://docs.termix.site/translations).
+Only `en.json` needs to be updated. Every other language in `translated/` is filled in automatically for any string that doesn't have a translation yet.
+
+If an automatic translation is wrong, fix it in that language's file. Strings that already have a translation are never overwritten.
diff --git a/src/ui/locales/en.json b/src/ui/locales/en.json
index 4bc6beefa..2d8337615 100644
--- a/src/ui/locales/en.json
+++ b/src/ui/locales/en.json
@@ -2,8 +2,11 @@
   "connection": {
     "retryingIn": "Retrying in {{seconds}}s ({{attempt}}/{{max}})",
     "retryingNow": "Retrying... ({{attempt}}/{{max}})",
-    "disconnected": "Unable to connect",
-    "reconnect": "Reconnect"
+    "reconnect": "Reconnect",
+    "close": "Close",
+    "failed": "Could not connect",
+    "failedRetrying": "Connection failed, trying again",
+    "retryNow": "Retry now"
   },
   "credentials": {
     "folders": "Folders",
@@ -87,6 +90,18 @@
     "customizeBehaviorTitle": "Behavior",
     "showCredentialTags": "Show Tags",
     "showCredentialTagsDesc": "Display tags in the credential list",
+    "rowDetailsTitle": "Row details",
+    "rowDetailsDesc": "Choose what shows on each credential.",
+    "showUsername": "Username",
+    "showUsernameDesc": "Show the username under the credential name.",
+    "showUsageCount": "Host count",
+    "showUsageCountDesc": "Show how many hosts use the credential.",
+    "showTypeBadge": "Type badge",
+    "showTypeBadgeDesc": "Show the key or password badge.",
+    "showPinIcon": "Pin icon",
+    "showPinIconDesc": "Show a pin next to pinned credentials.",
+    "showSharedBadge": "Shared badge",
+    "showSharedBadgeDesc": "Show a badge on credentials shared with you.",
     "actionsVisibility": "Credential actions",
     "actionsVisibilityDesc": "When the connection and management buttons on each credential show up",
     "actionsAlways": "Always visible",
@@ -124,12 +139,8 @@
     "offline": "Offline",
     "unknown": "Unknown",
     "continue": "Continue",
-    "maintenance": "Maintenance",
-    "degraded": "Degraded",
     "error": "Error",
-    "warning": "Warning",
     "unsavedChanges": "Unsaved changes",
-    "dismiss": "Dismiss",
     "more": "More",
     "loading": "Loading...",
     "host": "Host",
@@ -139,15 +150,7 @@
     "connect": "Connect",
     "copied": "Copied",
     "connecting": "Connecting...",
-    "updateAvailable": "Update Available",
-    "appName": "Termix",
     "openInNewTab": "Open in New Tab",
-    "noReleases": "No Releases",
-    "updatesAndReleases": "Updates & Releases",
-    "newVersionAvailable": "A new version ({{version}}) is available.",
-    "failedToFetchUpdateInfo": "Failed to fetch update information",
-    "preRelease": "Pre-release",
-    "noReleasesFound": "No releases found.",
     "cancel": "Cancel",
     "username": "Username",
     "login": "Login",
@@ -162,15 +165,10 @@
     "rename": "Rename",
     "edit": "Edit",
     "confirm": "Confirm",
-    "no": "No",
-    "or": "OR",
     "next": "Next",
     "previous": "Previous",
     "refresh": "Refresh",
     "language": "Language",
-    "checking": "Checking...",
-    "checkingDatabase": "Checking database connection...",
-    "checkingAuthentication": "Checking authentication...",
     "backendReconnected": "Server connection restored",
     "connectionDegraded": "Server connection lost, recovering…",
     "reload": "Reload",
@@ -179,12 +177,6 @@
     "copyFailed": "Failed to copy to clipboard",
     "maximize": "Maximize",
     "restore": "Restore",
-    "of": "of",
-    "saved": "Saved",
-    "deleted": "Deleted",
-    "deleteFailed": "Failed to delete",
-    "saveFailed": "Failed to save",
-    "required": "Required",
     "remove": "Remove",
     "add": "Add",
     "update": "Update",
@@ -192,91 +184,63 @@
     "sidebar": "Sidebar",
     "mobileSidebarDescription": "Displays the mobile sidebar.",
     "toggleSidebar": "Toggle Sidebar",
-    "search": "Search..."
+    "search": "Search...",
+    "new": "New",
+    "docs": "Docs"
   },
   "onboarding": {
     "stepCounter": "Step {{current}} of {{total}}",
+    "stageLabel": "Termix setup",
+    "setupHeading": "Set up your workspace",
+    "partialHeading": "A few new things to set up",
+    "signOut": "Sign out",
+    "skipPartial": "Not now",
     "skip": "Skip setup",
     "next": "Next",
-    "finish": "Get started",
-    "welcomeTitle": "Welcome to Termix",
-    "welcomeIntro": "Termix manages your servers from one place. This setup takes about a minute and nothing here is permanent.",
-    "welcome_hosts": "Save your servers",
-    "welcome_hosts_desc": "Keep every machine you manage in one list.",
-    "welcome_terminal": "Connect instantly",
-    "welcome_terminal_desc": "Open a terminal in a tab, no separate SSH client.",
-    "welcome_files": "Browse and edit files",
-    "welcome_files_desc": "Upload, download and edit remote files.",
+    "finish": "Done",
+    "pluginsTitle": "Choose your plugins",
+    "pluginsIntro": "Pick the plugins to keep. The recommended ones cover what most people need.",
+    "pluginsUpgradeNote": "Everything you use now is kept as it is. Turn off or remove what you do not need.",
+    "pluginsRemoveNote": "Plugins set to Remove are deleted from this server, with their data, when you continue. You can install any of them again at any time from the Plugins tab (this needs an internet connection). Pick Off to keep a plugin installed but turned off.",
+    "pluginsUseRecommended": "Recommended",
+    "pluginsEnableAll": "Turn all on",
+    "pluginsDisableAll": "Turn all off",
+    "pluginsCounts": "{{enabled}} on, {{disabled}} off, {{removed}} to remove",
+    "pluginsRecommended": "Recommended",
+    "pluginsKeptBecause": "Kept because {{names}} needs it",
+    "pluginsChoice_enabled": "On",
+    "pluginsChoice_disabled": "Off",
+    "pluginsChoice_remove": "Remove",
+    "pluginsConsentTitle": "Help improve Termix",
+    "pluginsConsentNote": "You can turn this off at any time from the Plugins tab.",
+    "pluginsApplying": "Applying your choices",
+    "pluginsSomeFailed": "Some plugins could not be changed. You can fix them later from the Plugins tab. Press Next to continue.",
+    "pluginsApplyFailed": "Your choices could not be saved. Try again, or continue and change them later from the Plugins tab.",
+    "pluginsLoadFailed": "The plugin list could not be loaded. You can choose plugins later from the Plugins tab.",
     "presetTitle": "How much do you want on screen?",
-    "presetIntro": "Termix can be as simple or as detailed as you like. Pick a starting point.",
+    "presetIntro": "Choose how much shows on screen.",
     "presetChangeLater": "You can switch presets or change any single setting later in Settings, under Interface.",
     "appearanceTitle": "Make it yours",
-    "appearanceIntro": "Pick a theme, an accent color and your language. All three can be changed later in Settings.",
-    "featuresTitle": "What else Termix does",
-    "featuresIntro": "Every server you save can be opened in more than a terminal. Here is what is waiting behind the icons on the left.",
-    "featuresRailHint": "Do not need one of these? Hide any icon from the sidebar in Settings, under Navigation.",
-    "workflowTitle": "Move around faster",
-    "workflowIntro": "A few habits that save the most time once you have a couple of servers.",
-    "workflow_palette": "Command palette",
-    "workflow_palette_desc": "Jump to any server or action by typing. Tap Shift twice to open it.",
-    "workflow_split": "Split screen",
-    "workflow_split_desc": "Show several tabs side by side, for example to watch logs while you work.",
-    "workflow_dock": "Side panel",
-    "workflow_dock_desc": "Middle click or right click a sidebar icon to open it as a tab or pin it to the right.",
-    "securityTitle": "Keeping your logins safe",
-    "securityIntro": "Termix stores credentials for you, so it is worth a minute to see how that works.",
-    "security_credentials": "Reusable credentials",
-    "security_credentials_desc": "Save a key or password once and attach it to as many servers as you like.",
-    "security_twofa": "Two factor and passkeys",
-    "security_twofa_desc": "Add TOTP or a passkey to your account in Settings, under Security.",
-    "security_identity": "Termix ID",
-    "security_identity_desc": "Issue short lived SSH certificates instead of copying keys to every server.",
-    "security_sharing": "Sharing",
-    "security_sharing_desc": "Give other users access to a server without handing over the password.",
-    "securityEncryptionNote": "Credentials are encrypted before they are stored, and only decrypted when a connection needs them.",
-    "doneTitle": "You are all set",
-    "doneHeading": "Setup complete",
-    "doneDesc": "Pick a server from the sidebar to open a terminal, browse its files or see its metrics.",
-    "done_settings": "Change anything later",
-    "done_settings_desc": "Themes, layout density and which icons show up all live in Settings.",
-    "done_rerun": "Want this again?",
-    "done_rerun_desc": "Open Settings, go to Interface and choose Run setup to walk through these steps again.",
-    "done_desktop": "Desktop app",
-    "done_desktop_desc": "Termix runs as a desktop app on Windows, macOS and Linux.",
-    "done_desktop_link": "Get the desktop app",
-    "done_mobile": "Mobile app",
-    "done_mobile_desc": "Take your servers with you on iOS and Android.",
-    "done_mobile_link": "Get the mobile app",
-    "done_docs": "Full documentation",
-    "done_docs_desc": "Guides for every feature, including ones not covered here.",
-    "done_docs_link": "Open the docs",
-    "done_cli": "Command line tool",
-    "done_cli_desc": "Manage your servers from a terminal, and use Termix in your own scripts.",
-    "done_cli_link": "Open the CLI docs",
+    "appearanceIntro": "Pick a theme, an accent color, a font and your language. Changes show right away, and you can change them later in Settings.",
+    "securityTitle": "Secure your account",
+    "securityIntro": "Add a passkey or an authenticator app to your account. You can also do this later in Settings, under Security.",
     "desktopTitle": "How do you want to use Termix?",
     "desktopBody": "You can change this any time from Sync in the sidebar.",
     "desktopLocalTitle": "On this device only",
     "desktopLocalBody": "Everything is stored here. Nothing to set up.",
     "desktopLinkTitle": "With my Termix server",
     "desktopLinkBody": "Sign in to your server to use the same hosts and settings on every device.",
-    "desktopLinked": "Linked to {{server}}"
+    "desktopLinked": "Linked to {{server}}",
+    "pluginsDocsLink": "Read about each one"
   },
   "nav": {
     "home": "Home",
     "terminal": "Terminal",
-    "fileManager": "File Manager",
-    "serverStats": "Host Metrics",
-    "admin": "Admin",
-    "userProfile": "User Profile",
-    "confirmClose": "Close this active session?",
     "close": "Close",
-    "cancel": "Cancel",
-    "sshManager": "SSH Manager",
     "hostTabTitle": "{{username}}@{{ip}}:{{port}}",
     "copyPassword": "Copy Password",
     "copySudoPassword": "Copy Sudo Password",
     "passwordCopied": "Password copied to clipboard",
-    "noPasswordAvailable": "No password available",
     "failedToCopyPassword": "Failed to copy password",
     "refreshTab": "Refresh connection",
     "renameTab": "Rename tab",
@@ -287,13 +251,7 @@
     "openInRightDock": "Open in right dock",
     "closeRightDock": "Close right dock",
     "toggleRightDock": "Toggle right dock",
-    "multiPanelHintTitle": "Work with more than one panel",
-    "multiPanelHintBody": "Keep this panel open while the sidebar is used for something else. Two ways to move it:",
-    "multiPanelHintTabHow": "Ctrl+click its rail icon, or use the button in this header.",
-    "multiPanelHintDockHow": "Right-click its rail icon, or use the panel icon in the tab bar.",
-    "sidebarSettings": "Sidebar Settings...",
     "hosts": "Hosts",
-    "hostManager": "Host Manager",
     "credentials": "Credentials",
     "connections": "Connections",
     "keepSideMenuOpen": "Keep Menu Open",
@@ -314,7 +272,25 @@
     "openSidebar": "Open sidebar",
     "confirmCloseHost": "Close {{host}}?",
     "enterFullscreen": "Enter fullscreen (Ctrl+Shift+F)",
-    "exitFullscreen": "Exit fullscreen (Ctrl+Shift+F)"
+    "exitFullscreen": "Exit fullscreen (Ctrl+Shift+F)",
+    "group": {
+      "objects": "Yours",
+      "tools": "Tools",
+      "system": "System"
+    },
+    "searchEverything": "Search hosts, tabs and actions",
+    "search": "Search",
+    "hiddenCount": "{{count}} hidden",
+    "showInRail": "Show in sidebar",
+    "moveUp": "Move up",
+    "moveDown": "Move down",
+    "resetRailOrder": "Reset order",
+    "hideFromRail": "Hide from sidebar",
+    "openSettings": "Open settings",
+    "settings": "Settings",
+    "manage": "Manage",
+    "mobileNavigation": "Navigation",
+    "plugins": "Plugins"
   },
   "hosts": {
     "hosts": "Hosts",
@@ -377,7 +353,7 @@
     "forceKeyboardInteractive": "Force Keyboard-Interactive",
     "overrideCredentialUsername": "Override Credential Username",
     "overrideCredentialUsernameDesc": "Use the username specified above instead of the credential's username",
-    "oidcUsernameHint": "Use $external.username to fill in the name you signed in with through SSO or LDAP.",
+    "externalUsernameHint": "Use $external.username to fill in the name you signed in with through SSO or LDAP.",
     "jumpHostChain": "Jump Host Chain",
     "portKnocking": "Port Knocking",
     "addKnock": "Add Port",
@@ -614,6 +590,8 @@
     "customizeSidebarDescription": "Choose how the host list looks and behaves.",
     "customizeDensityTitle": "Density",
     "customizeBehaviorTitle": "Behavior",
+    "connectBarTitle": "Connect bar",
+    "connectBarDesc": "Choose which actions show as buttons on a host. Every action stays in the host's menu.",
     "customizeSortHint": "Sort order and grouping live in the sort and group menus in the toolbar.",
     "densityComfortableDesc": "More detail per host: address, tags, and resource usage.",
     "densityCompactDesc": "One line per host, for longer lists.",
@@ -633,6 +611,20 @@
     "openOnDoubleClickDesc": "Require a double click to open a host session instead of a single click",
     "showFolderPaths": "Show folder paths",
     "showFolderPathsDesc": "Show the parent folder path above nested subfolder names. Subfolders stay indented either way.",
+    "rowDetailsTitle": "Row details",
+    "rowDetailsDesc": "Choose what shows on each host.",
+    "showAddress": "Address",
+    "showAddressDesc": "Show the host address under the name.",
+    "showUsername": "Username",
+    "showUsernameDesc": "Show the username before the address.",
+    "showPort": "Port",
+    "showPortDesc": "Show the port after the address.",
+    "showPinIcon": "Pin icon",
+    "showPinIconDesc": "Show a pin next to pinned hosts.",
+    "showSharedBadge": "Shared badge",
+    "showSharedBadgeDesc": "Show a badge on hosts shared with you.",
+    "showBadges": "Plugin badges",
+    "showBadgesDesc": "Show badges that plugins add next to the host name.",
     "hostClickBehavior": "Clicking a host",
     "hostClickBehaviorDesc": "What happens when you click a host that already has an open tab. Ctrl/Cmd click, middle click, or \"Open in new tab\" always start a new one.",
     "hostClickNewTab": "Always open a new tab",
@@ -705,7 +697,7 @@
       "groupTags": "Tags & pin",
       "groupProxy": "Proxy",
       "groupJumpHosts": "Jump hosts",
-      "groupFeatureFlags": "Feature flags",
+      "groupFeatureFlags": "Plugin settings",
       "groupAdvanced": "Advanced config",
       "preview": "Preview",
       "moreHosts": "... {{count}} more hosts",
@@ -722,7 +714,7 @@
     "failedToDeleteCredential2": "Failed to delete credential",
     "noFolderOption": "(No folder)",
     "nSelected": "{{count}} selected",
-    "featuresMenu": "Features",
+    "featuresMenu": "Plugins",
     "moveMenu": "Move",
     "connectSelected": "Connect",
     "cancelSelection": "Cancel",
@@ -738,6 +730,7 @@
     "noHostsYet": "No hosts yet",
     "noHostsYetHint": "Add a server to open terminals, browse files and see metrics.",
     "noHostsMatchSearch": "No hosts match your search",
+    "noHostSelected": "Pick a host to open this.",
     "searchHosts": "Search hosts...",
     "sortHosts": "Sort Hosts",
     "sortDefault": "Default Order",
@@ -863,12 +856,12 @@
     "authFieldsAfterSave": "Save the host first, then fill in these fields.",
     "enablePluginFeature": "Enable {{name}}",
     "disablePluginFeature": "Disable {{name}}",
-    "filterFeaturesGroup": "Features",
+    "filterFeaturesGroup": "Plugins",
     "localOnly": "Keep on this device only",
     "localOnlyDesc": "This host is not sent to the server and does not appear on your other devices.",
     "folderLocalOnly": "Keep on this device only",
     "folderLocalOnlyDesc": "This folder and every host in it stay on this device and are not sent to the server.",
-    "sudoPasswordDesc": "Used when the terminal fills a sudo prompt, and by features that run commands with sudo.",
+    "sudoPasswordDesc": "Used when the terminal fills a sudo prompt, and by plugins that run commands with sudo.",
     "editorCancel": "Cancel",
     "editorSaving": "Saving...",
     "editorUpdate": "Update Host",
@@ -885,25 +878,18 @@
     "quickActions": "Quick Actions",
     "navigation": "Navigation",
     "orShortcut": "or",
-    "hostManager": "Host Manager",
-    "hostManagerDesc": "Manage, add, or edit hosts",
     "addNewHost": "Add New Host",
-    "addNewHostDesc": "Register a new host",
     "adminSettings": "Admin Settings",
-    "adminSettingsDesc": "Configure system preferences and users",
-    "userProfile": "User Profile",
-    "userProfileDesc": "Manage your account and preferences",
     "addCredential": "Add Credential",
-    "addCredentialDesc": "Store SSH keys or passwords",
     "recentActivity": "Recent Activity",
     "serversAndHosts": "Servers & Hosts",
     "noHostsFound": "No hosts found matching \"{{search}}\"",
     "links": "Links",
     "navigate": "Navigate",
     "select": "Select",
-    "toggleWith": "Toggle with",
     "pluginActions": "More actions",
-    "noTargetTab": "No terminal tab is open"
+    "noTargetTab": "No terminal tab is open",
+    "documentation": "Documentation"
   },
   "splitScreen": {
     "title": "Split screen",
@@ -935,7 +921,6 @@
     "unsplit": "Unsplit",
     "layouts": "Layouts",
     "applyLayout": "Change layout",
-    "newSplit": "New split",
     "maxPanes": "A split can hold up to {{count}} panes",
     "dropSplit": "Drop to split",
     "dropHere": "Drop to show here",
@@ -962,22 +947,18 @@
     "connectedFor": "Connected for {{duration}}",
     "connected": "Connected",
     "disconnected": "Disconnected",
-    "closeTab": "Close tab",
-    "closeConnection": "Close connection",
-    "forgetTab": "Forget",
-    "removeBackground": "Remove",
     "reconnect": "Reconnect",
-    "reopenTab": "Reopen",
     "sectionOpen": "Open",
     "sectionBackground": "Background",
     "backgroundDesc": "Sessions persist for {{minutes}} minutes after disconnect and can be reconnected.",
-    "persisted": "Persisted in background",
     "expiresIn": "Expires in {{duration}}",
     "search": "Search connections...",
     "noSearchResults": "No connections match your search",
-    "rename": "Rename session"
+    "rename": "Rename session",
+    "forgetConfirm": "End the background session for {{name}}?",
+    "forget": "End session"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Two-Factor Authentication Required",
     "totpCodeLabel": "Verification Code",
     "totpVerify": "Verify",
@@ -1009,7 +990,7 @@
     "empty": "No cards. Use Add below to place cards."
   },
   "auth": {
-    "tagline": "Self-hosted SSH and remote desktop management",
+    "tagline": "Self-hosted, plugin-based server management.",
     "loginTitle": "Welcome back",
     "registerTitle": "Create Account",
     "forgotPassword": "Forgot Password?",
@@ -1031,40 +1012,32 @@
     "sshKeyPasswordDescription": "If your SSH key is encrypted, enter the passphrase here.",
     "passphraseRequired": "Passphrase Required",
     "passphraseRequiredDescription": "The SSH key is encrypted. Please enter the passphrase to unlock it.",
-    "back": "Back",
-    "firstUser": "First User",
-    "firstUserMessage": "You are the first user and will be made an admin. You can view admin settings in the sidebar user dropdown. If you think this is a mistake, check the docker logs, or create a GitHub issue.",
     "external": "External",
     "loginWithExternal": "Login with External Provider",
     "loginWithExternalDesc": "Login using your configured external identity provider",
-    "externalNotSupportedInElectron": "External sign-in is not supported in the desktop app yet. Please use the web version.",
     "loginWithProvider": "Login with {{name}}",
-    "orContinueWith": "or continue with",
     "resetPasswordButton": "Reset Password",
     "sendResetCode": "Send Reset Code",
     "resetCodeDesc": "Enter your username to receive a password reset code. The code will be logged in the docker container logs.",
     "resetCode": "Reset Code",
     "verifyCodeButton": "Verify Code",
-    "enterResetCode": "Enter the 6-digit code from the docker container logs for user:",
     "newPassword": "New Password",
     "confirmNewPassword": "Confirm Password",
-    "enterNewPassword": "Enter your new password for user:",
     "signUp": "Sign Up",
-    "desktopApp": "Desktop App",
-    "loggingInToDesktopApp": "Logging in to the desktop app",
     "loadingServer": "Loading server...",
-    "dataLossWarning": "Resetting your password this way will delete all your saved SSH hosts, credentials, and other encrypted data. This action cannot be undone. Only use this if you have forgotten your password and are not logged in.",
-    "authenticationDisabled": "Authentication Disabled",
-    "authenticationDisabledDesc": "All authentication methods are currently disabled. Please contact your administrator.",
-    "passwordLoginDisabledDesc": "Password login is disabled. Use a passkey or an external authentication provider.",
-    "attemptsRemaining": "{{count}} attempts remaining",
-    "confirmResetDataWipe": "This account has not logged in since the encryption upgrade, so its stored data cannot be recovered without the old password. Resetting will permanently delete its hosts, credentials and snippets. Continue?",
     "password": "Password",
     "secondFactorUnavailable": "Your account uses a second factor that is not available right now. Contact an admin to reset it.",
+    "externalLoginRequired": "This account signs in through single sign-on. Use that button to sign in.",
     "secondFactorNoUI": "This second factor cannot be shown on this screen. Contact an admin.",
     "serverAuthentication": "Server sign-in",
     "minChars": "min. {{min}} characters",
-    "retrySecondFactorUI": "Reload verification methods"
+    "retrySecondFactorUI": "Reload verification methods",
+    "localDesktopSignedOut": "Local desktop signed out",
+    "localDesktopUnavailable": "Local desktop session unavailable",
+    "localDesktopSignedOutDesc": "You signed out of the local desktop session. Continue locally to use this device's built-in Termix server again.",
+    "localDesktopUnavailableDesc": "Termix could not start a local desktop session. Retry it instead of registering a new account.",
+    "continueLocalDesktop": "Continue with local desktop",
+    "retryLocalDesktop": "Retry local desktop session"
   },
   "hostKey": {
     "verifyNewHost": "Verify SSH Host Key",
@@ -1084,32 +1057,29 @@
     "databaseConnection": "Could not connect to the database",
     "embeddedServerFailed": "Termix's local server could not start",
     "unknownError": "Unknown error",
+    "syncedHostMissing": "The synced host does not exist on the linked server",
+    "linkedServerUnreachable": "The linked server is not reachable",
     "loginFailed": "Login failed",
     "failedPasswordReset": "Failed to initiate password reset",
     "failedVerifyCode": "Failed to verify reset code",
     "failedCompleteReset": "Failed to complete password reset",
     "invalidTotpCode": "Invalid TOTP code",
-    "failedOidcLogin": "Failed to start external sign-in",
-    "silentSigninOidcUnavailable": "Silent sign-in was requested, but no external sign-in is set up.",
+    "failedExternalLogin": "Failed to start external sign-in",
+    "silentSigninExternalUnavailable": "Silent sign-in was requested, but no external sign-in is set up.",
     "failedUserInfo": "Failed to get user info after login",
-    "oidcAuthFailed": "External sign-in failed",
+    "externalAuthFailed": "External sign-in failed",
     "invalidAuthUrl": "Invalid authorization URL received from backend",
     "requiredField": "This field is required",
     "minLength": "Minimum length is {{min}}",
     "passwordMismatch": "Passwords do not match",
-    "passwordLoginDisabled": "Username/password login is currently disabled",
     "sessionExpired": "Session expired - please log in again",
-    "totpRateLimited": "Rate limited: Too many TOTP verification attempts. Please try again later.",
-    "totpRateLimitedWithTime": "Rate limited: Too many TOTP verification attempts. Please wait {{time}} seconds before trying again.",
-    "resetCodeRateLimited": "Rate limited: Too many verification attempts. Please try again later.",
-    "resetCodeRateLimitedWithTime": "Rate limited: Too many verification attempts. Please wait {{time}} seconds before trying again.",
     "authTokenSaveFailed": "Failed to save authentication token",
     "authTokenMissing": "The server did not return a new authentication token. Please sign in again.",
     "failedToLoadServer": "Failed to load server",
     "sessionExpiredLogin": "Session expired. Please log in again."
   },
   "messages": {
-    "registrationDisabled": "New account registration is currently disabled by an admin. Please log in or contact an administrator.",
+    "registrationDisabled": "You have no Termix account yet. Ask an admin to turn on Auto-create external accounts.",
     "userNotAllowed": "Your account is not authorized to register. Please contact an administrator.",
     "databaseConnectionFailed": "Failed to connect to the database server",
     "embeddedServerPortInUse": "Port {{port}} is already in use by another program. This is usually a Termix Docker container or a leftover Termix process from a previous session. Close it, then restart Termix.",
@@ -1122,7 +1092,6 @@
     "registrationSuccess": "Registration successful"
   },
   "placeholders": {
-    "language": "Language",
     "keyPassword": "key password",
     "pastePrivateKey": "Paste your private key here...",
     "enterPassword": "Enter your password",
@@ -1135,15 +1104,13 @@
   },
   "dashboard": {
     "title": "Dashboard",
-    "loading": "Loading dashboard...",
     "github": "GitHub",
-    "support": "Support",
+    "reportBug": "Report a bug",
     "discord": "Discord",
     "docs": "Docs",
     "donate": "Donate",
     "serverOverview": "Server Overview",
     "version": "Version",
-    "upToDate": "Up to Date",
     "updateAvailable": "Update Available",
     "beta": "Beta",
     "uptime": "Uptime",
@@ -1154,7 +1121,6 @@
     "totalCredentials": "Total Credentials",
     "recentActivity": "Recent Activity",
     "reset": "Reset",
-    "loadingRecentActivity": "Loading recent activity...",
     "noRecentActivity": "No recent activity",
     "quickActions": "Quick Actions",
     "addHost": "Add Host",
@@ -1162,50 +1128,35 @@
     "adminSettings": "Admin Settings",
     "userProfile": "User Profile",
     "serverStats": "Server Stats",
-    "loadingServerStats": "Loading server stats...",
-    "noServerData": "No server data available",
     "customizeLayout": "Customize Dashboard",
-    "dashboardSettings": "Dashboard Settings",
-    "enableDisableCards": "Enable/Disable Cards",
-    "resetLayout": "Reset to Default",
-    "serverOverviewCard": "Server Overview",
-    "recentActivityCard": "Recent Activity",
-    "quickActionsCard": "Quick Actions",
-    "serverStatsCard": "Server Stats",
-    "panelMain": "Main",
-    "panelSide": "Side",
-    "justNow": "just now",
-    "activityFileManager": "File manager"
-  },
-  "donation": {
-    "title": "Enjoying Termix?",
-    "body": "Termix is free and open source, built and maintained by a two-person team in our spare time. If it's replaced a commercial tool you'd otherwise be paying for, a donation helps cover hosting costs and keeps development going. As of now, donations are crypto only.",
-    "milestones": "Donations also help fund the time to research and learn what's needed to build features like SAML and Kubernetes support. See the progress on the donate page.",
-    "cta": "Donate",
-    "dismiss": "Maybe later"
+    "justNow": "just now"
   },
   "dashboardTab": {
     "stable": "STABLE",
-    "hostsOnline": "Hosts Online",
     "registerNewServer": "Register a new server",
     "storeSshKeysOrPasswords": "Store SSH keys or passwords",
     "manageUsersAndRoles": "Manage users and roles",
     "manageYourAccount": "Manage your account",
     "hostStatus": "Host Status",
     "noHostsConfigured": "No hosts configured",
-    "online": "ONLINE",
-    "offline": "OFFLINE",
     "checking": "CHECKING",
-    "onlineLower": "Online",
-    "add": "Add:",
     "commandPalette": "Command Palette",
     "done": "Done",
-    "editModeInstructions": "Drag cards to reorder. Drag the column divider to resize columns. Drag the bottom edge of a card to change its height. Use the trash button to remove a card.",
-    "empty": "Empty",
     "clear": "Clear",
-    "viewServerDetails": "View server details",
     "dragToResizeColumns": "Drag to resize columns",
-    "hostsAvailable": "Hosts Available"
+    "hostsAvailable": "Hosts Available",
+    "removeSection": "Remove section",
+    "addSection": "Add a section",
+    "allSectionsShown": "Everything is already on the dashboard.",
+    "fromPlugins": "From plugins",
+    "dropHere": "Drop a section here",
+    "dragToReorder": "Drag sections to reorder them",
+    "clearActivityConfirm": "Clear your recent activity?",
+    "resetConfirm": "Reset the dashboard to its default layout?",
+    "onlineCount_one": "{{count}} online",
+    "onlineCount_other": "{{count}} online",
+    "hostCount_one": "{{count}} host",
+    "hostCount_other": "{{count}} hosts"
   },
   "admin": {
     "sectionGeneral": "General",
@@ -1266,8 +1217,8 @@
     "allowRegistrationDesc": "Let new users self-register with a username and password",
     "allowPasswordLogin": "Allow Password Login",
     "allowPasswordLoginDesc": "Username/password login",
-    "oidcAutoProvision": "Auto-create external accounts",
-    "oidcAutoProvisionDesc": "Create an account the first time someone signs in through an external login such as SSO or LDAP, even when registration is off",
+    "externalAutoProvision": "Auto-create external accounts",
+    "externalAutoProvisionDesc": "Create an account the first time someone signs in through an external login such as SSO or LDAP. When off, only people who already have an account can sign in that way",
     "secondFactorAfterExternalLogin": "Ask for a second factor after external logins (SSO, GitHub, Google, LDAP)",
     "secondFactorAfterExternalLoginDesc": "Off, an enrolled second factor is only asked for after password and other local logins, same as before. On, it is asked for after every login method, including SSO and LDAP.",
     "allowPasswordReset": "Allow Password Reset",
@@ -1324,7 +1275,7 @@
     "apiKeyNoExpiry": "No expiry",
     "revokedBadge": "REVOKED",
     "authTypeDual": "Dual Auth",
-    "authTypeOidc": "External",
+    "authTypeExternal": "External",
     "authTypeLocal": "Local",
     "adminStatusAdministrator": "Administrator",
     "adminStatusRegularUser": "Regular User",
@@ -1343,7 +1294,6 @@
     "noCustomRoles": "No custom roles defined",
     "removeRoleFailed": "Failed to remove role",
     "assignRoleFailed": "Failed to assign role",
-    "deleteRoleFailed": "Failed to delete role",
     "userAdminAccess": "Administrator",
     "userAdminAccessDesc": "Full access to all admin settings",
     "userRoles": "Roles",
@@ -1366,7 +1316,6 @@
     "createUserPassword": "Password",
     "createUserPasswordHint": "Minimum 6 characters.",
     "createUserEnterUsername": "Enter username",
-    "createUserEnterPassword": "Enter password",
     "createUserSubmit": "Create User",
     "editUserTitle": "Manage User: {{username}}",
     "editUserDesc": "Edit roles, admin status, sessions, and account settings.",
@@ -1383,9 +1332,9 @@
     "linkAccountEffect3": "Allow both external and password sign-in",
     "linkAccountTargetUsername": "Local Account Username",
     "linkAccountTargetPlaceholder": "Enter the local account username to link to",
-    "linkAccountOidcUsername": "External Account Username",
-    "linkAccountOidcPlaceholder": "Enter the external-only account username to merge in",
-    "linkAccountOidcNotFound": "No external-only account found with that username",
+    "linkAccountExternalUsername": "External Account Username",
+    "linkAccountExternalPlaceholder": "Enter the external-only account username to merge in",
+    "linkAccountExternalNotFound": "No external-only account found with that username",
     "linkAccounts": "Link Accounts",
     "linkAccountSuccess": "Accounts linked successfully",
     "linkAccountFailed": "Failed to link accounts",
@@ -1397,10 +1346,8 @@
     "unlinkAccountInProgress": "Unlinking...",
     "unlinkAccountSuccess": "External sign-in unlinked",
     "unlinkAccountFailed": "Failed to unlink external sign-in",
-    "saving": "Saving...",
     "updateRegistrationFailed": "Failed to update registration setting",
     "updatePasswordLoginFailed": "Failed to update password login setting",
-    "updateOidcAutoProvisionFailed": "Failed to update the auto-create setting",
     "updateSecondFactorAfterExternalLoginFailed": "Failed to update second factor setting",
     "updatePasswordResetFailed": "Failed to update password reset setting",
     "sessionTimeoutRange2": "Session timeout must be between 1 and 720 hours",
@@ -1428,7 +1375,7 @@
     "dataLockedBadge": "LOCKED",
     "dataLockedNotice": "{{username}}'s data stays locked until they next log in. Their hosts, credentials and snippets cannot be viewed or edited until then.",
     "resetPasswordTitle": "Reset Password",
-    "resetPasswordOidcOnly": "This user signs in through an external provider and has no password.",
+    "resetPasswordExternalOnly": "This user signs in through an external provider and has no password.",
     "resetPasswordPlaceholder": "New password",
     "resetPasswordBtn": "Reset",
     "resetPasswordWorking": "Resetting...",
@@ -1480,7 +1427,6 @@
     "importFailed": "Import failed: {{error}}",
     "importError": "Database import failed",
     "sectionHostDefaults": "Host Defaults",
-    "minutes": "minutes",
     "rolePermissions": {
       "count": "{{count}} permissions",
       "editAction": "Edit permissions",
@@ -1489,7 +1435,7 @@
       "saveError": "Failed to save role permissions",
       "save": "Save",
       "saving": "Saving...",
-      "pluginDisabled": "Feature disabled",
+      "pluginDisabled": "Plugin disabled",
       "groups": {
         "hosts": "Hosts",
         "credentials": "Credentials",
@@ -1516,15 +1462,22 @@
     "updateExternalAutoProvisionFailed": "Failed to update the auto-create setting",
     "hostTags": "Predefined host tags",
     "hostTagsDesc": "Tags every user sees as suggestions in the host editor. Press Space or Enter to add one. Removing a tag here does not remove it from hosts.",
-    "hostTagsError": "Could not load or save host tag suggestions."
+    "hostTagsError": "Could not load or save host tag suggestions.",
+    "revokeAllSessionsConfirm": "Sign {{username}} out everywhere?",
+    "revokeSessionConfirm": "Sign out this session?",
+    "revokeSession": "Sign out",
+    "deleteRoleConfirm": "Delete the {{name}} role?",
+    "revokeKeyConfirm": "Revoke the API key {{name}}?",
+    "revokeKey": "Revoke"
   },
   "newUi": {
     "sidebar": {
       "quickConnect": {
+        "where": "Where",
+        "who": "Who",
         "hostLabel": "Host",
         "hostPlaceholder": "192.168.1.1 or example.com",
         "portLabel": "Port",
-        "portPlaceholder": "22",
         "usernameLabel": "Username",
         "usernamePlaceholder": "username",
         "authLabel": "Auth",
@@ -1542,7 +1495,6 @@
         "noTarget": "Nothing installed can connect to this host type"
       },
       "keybindings": {
-        "title": "Keyboard Shortcuts",
         "description": "Bind keys to actions in the terminal and the app, or change the built-in shortcuts.",
         "defaultsHeading": "Built-in Shortcuts",
         "fixedHeading": "App Shortcuts",
@@ -1568,7 +1520,6 @@
         "customize": "Customize",
         "resetToDefault": "Reset to default",
         "resetAllToDefaults": "Reset all to defaults",
-        "close": "Close",
         "cancel": "Cancel",
         "saveBinding": "Save Shortcut",
         "saveError": "Failed to save keyboard shortcuts",
@@ -1583,13 +1534,11 @@
         "actionOpenCommandPalette": "Open quick search",
         "actionReconnectSession": "Reconnect current session",
         "unavailableAction": "{{type}} (not available)",
-        "actionRequiredError": "Pick an action first"
+        "actionRequiredError": "Pick an action first",
+        "deleteConfirm": "Delete this keybinding?",
+        "resetAllConfirm": "Reset every keybinding to its default?"
       },
       "userProfile": {
-        "donateTitle": "Keep Termix alive",
-        "donateDescription": "Termix is free, self-hosted, and built by only a few people in their spare time. If it's saved you time or money, a crypto donation helps keep it going.",
-        "donateMilestones": "Donations help fund the time to research and learn what's needed to build SAML, Kubernetes, and Agent support. See the progress and donate.",
-        "donateButton": "Donate crypto",
         "storageModeLocal": "Browser",
         "storageModeCloud": "Database",
         "storageModeDescription": "Browser stores settings in this browser only. Database syncs to the server and loads on any device.",
@@ -1636,16 +1585,11 @@
         "twoFaOn": "On",
         "twoFaOff": "Off",
         "versionLabel": "Version",
-        "betaProgramTitle": "Beta Program",
-        "betaProgramDescription": "Try upcoming features early with the weekly rolling :beta Docker tag. Unstable, not for production.",
-        "betaProgramFeedback": "Found a bug? Report it here.",
-        "betaProgramLearnMore": "Learn More",
         "cliTitle": "Termix CLI",
         "cliDescription": "Open terminals, run commands and move files from your own shell.",
         "cliLearnMore": "Learn More",
         "deleteAccount": "Delete Account",
         "deleteAccountDescription": "Permanently delete your account",
-        "changeServerDescription": "Switch to a different Termix backend server",
         "deleteButton": "Delete",
         "deleteAccountPermanent": "This action is permanent and cannot be undone.",
         "deleteAccountWarning": "All sessions, hosts, credentials, and settings will be permanently deleted.",
@@ -1659,8 +1603,6 @@
         "keyboardShortcuts": "Keyboard Shortcuts",
         "keyboardShortcutsDescription": "Customize terminal copy, paste, and command shortcuts",
         "manageShortcuts": "Manage",
-        "historyTracking": "History Tracking",
-        "historyTrackingDesc": "Track terminal commands",
         "commandPalette": "Command Palette",
         "commandPaletteDesc": "Enable keyboard shortcut",
         "reopenTabsOnLogin": "Reopen Tabs on Login",
@@ -1673,28 +1615,16 @@
         "sidebarSettingsMoved": "Host sidebar display settings have moved to the Customize sidebar panel, opened from the Hosts toolbar.",
         "showHostTags": "Show Host Tags",
         "showHostTagsDesc": "Display tags in host list",
-        "hostTrayOnClick": "Click to Expand Host Actions",
-        "hostTrayOnClickDesc": "Always show connection buttons; click to expand management options instead of hover",
-        "compactHostView": "Compact Host View",
-        "compactHostViewDesc": "Collapse each host to a single line showing only its name and address",
         "statusColors": "Real Status Colors",
         "statusColorsDesc": "Use green/red for online/offline status instead of the accent color",
         "pinAppRail": "Pin App Rail",
         "pinAppRailDesc": "Keep the left sidebar app rail always expanded instead of expanding on hover",
-        "openFullscreenSettings": "Open settings full screen",
-        "exitFullscreenSettings": "Exit full-screen settings",
         "expandAppRailOnHover": "Expand App Rail on Hover",
         "expandAppRailOnHoverDesc": "Allow the left sidebar app rail to expand when the pointer moves over it",
         "showPinAppRailButton": "Show Pin App Rail Button",
         "showPinAppRailButtonDesc": "Show a button in the app rail to pin it open. Off by default.",
         "settingsNavigation": "Navigation",
         "navigationTabsDesc": "Choose which tabs appear in the app rail",
-        "showSnippetCommands": "Show Commands",
-        "showSnippetCommandsDesc": "Show each snippet's command under its name. Turn off for a compact list.",
-        "foldersCollapsed": "Folders Collapsed",
-        "foldersCollapsedDesc": "Collapse folders by default",
-        "confirmExecution": "Confirm Execution",
-        "confirmExecutionDesc": "Confirm before running snippets",
         "settingsUpdates": "Updates",
         "disableUpdateChecks": "Disable Update Checks",
         "disableUpdateChecksDesc": "Stop checking for updates",
@@ -1742,7 +1672,7 @@
         "importFailed": "Import failed: {{error}}",
         "roleUser": "User",
         "authMethodDual": "Dual Auth",
-        "authMethodOidc": "External",
+        "authMethodExternal": "External",
         "done": "Done",
         "apiKeyNameRequired": "Key name is required",
         "apiKeyCreated": "API key \"{{name}}\" created",
@@ -1774,11 +1704,16 @@
         "linkedProfileDescription": "This device uses your account on the server and keeps a copy of your data, so it still works offline.",
         "manageSync": "Manage sync",
         "setUpSync": "Link to a server",
-        "settingsTabsAndShortcuts": "Tabs and Shortcuts"
+        "settingsTabsAndShortcuts": "Tabs and Shortcuts",
+        "onBetaTitle": "You are on a beta",
+        "onBetaDescription": "Thanks for testing. Tell us what breaks.",
+        "tryBetaTitle": "Try new features early",
+        "tryBetaDescription": "Join the beta program in Updates.",
+        "sendBetaFeedback": "Send beta feedback",
+        "openUpdates": "Updates"
       }
     }
   },
-  "terminalToolbar": {},
   "plugins": {
     "capabilities": {
       "credentials:read": {
@@ -1890,8 +1825,8 @@
         "consequence": "Server settings, not your hosts or credentials."
       },
       "plugins:read": {
-        "title": "See installed features",
-        "consequence": "It can see which features are installed and running."
+        "title": "See installed plugins",
+        "consequence": "It can see which plugins are installed and running."
       },
       "ui:surface": {
         "title": "Add its own screens",
@@ -1900,14 +1835,257 @@
     },
     "runtime": {
       "needsPlugin": "{{name}} is not available",
-      "needsUnknownPlugin": "This feature is not available",
+      "needsUnknownPlugin": "This plugin is not available",
       "disabledHint": "It is turned off on this server.",
-      "missingHint": "The feature it came from has been removed.",
+      "missingHint": "The plugin it came from has been removed.",
       "failed": "{{name}} could not start",
       "failedHint": "An admin can check the server logs for details.",
       "loading": "Loading {{name}}",
       "crashed": "Something went wrong in {{name}}",
       "retry": "Try again"
+    },
+    "manager": {
+      "tabs": {
+        "installed": "Installed",
+        "browse": "Browse",
+        "updates": "Updates"
+      },
+      "status": {
+        "summary": "{{installed}} installed, {{running}} running",
+        "running": "Running",
+        "disabled": "Disabled",
+        "failed": "Stopped unexpectedly",
+        "blocked": "Waiting on another plugin"
+      },
+      "groups": {
+        "running": "Running",
+        "notRunning": "Not running"
+      },
+      "sort": {
+        "popular": "Most popular",
+        "name": "Name",
+        "updated": "Recently updated",
+        "category": "Category"
+      },
+      "columns": {
+        "title": "Columns",
+        "auto": "Auto",
+        "count": "{{count}} wide"
+      },
+      "table": {
+        "name": "Name",
+        "description": "Description",
+        "version": "Version",
+        "status": "Status",
+        "category": "Category",
+        "installs": "Installs"
+      },
+      "risk": {
+        "critical": "Critical",
+        "high": "High risk",
+        "medium": "Medium risk",
+        "low": "Low risk"
+      },
+      "contributes": {
+        "tabs_one": "{{count}} tab",
+        "tabs_other": "{{count}} tabs",
+        "panels_one": "{{count}} panel",
+        "panels_other": "{{count}} panels",
+        "dashboardCards_one": "{{count}} dashboard card",
+        "dashboardCards_other": "{{count}} dashboard cards",
+        "actions_one": "{{count}} action",
+        "actions_other": "{{count}} actions",
+        "protocols_one": "{{count}} connection type",
+        "protocols_other": "{{count}} connection types",
+        "auth_one": "{{count}} sign in method",
+        "auth_other": "{{count}} sign in methods",
+        "settings_one": "Settings",
+        "settings_other": "Settings",
+        "hostCapability_one": "Host settings",
+        "hostCapability_other": "Host settings",
+        "permissions_one": "{{count}} role permission",
+        "permissions_other": "{{count}} role permissions",
+        "keybindingActions_one": "{{count}} shortcut",
+        "keybindingActions_other": "{{count}} shortcuts",
+        "syncEntities_one": "Desktop sync",
+        "syncEntities_other": "Desktop sync"
+      },
+      "consent": {
+        "installTitle": "Install {{name}}",
+        "updateTitle": "Update {{name}}",
+        "agreeUpdate": "Agree and update",
+        "updateExplain": "This version asks for something the one you have does not, so it will not install on its own.",
+        "newInVersion": "New in this version",
+        "minor": "It also adds its own screens and stores its own data, kept separate from other plugins.",
+        "none": "It asks for no special access.",
+        "uploadTitle": "Install {{name}} from a file",
+        "uploadWarning": "This file was not checked or signed by the Termix registry. Only install it if you built it yourself or trust whoever did."
+      },
+      "confirm": {
+        "uninstallTitle": "Uninstall {{name}}?",
+        "uninstallBody": "This stops it and deletes everything it stores, including its settings and secrets. You can install it again later, but the data will not come back.",
+        "deleteDataTitle": "Delete all data for {{name}}?",
+        "deleteDataBody": "Its tables, settings, secrets and files are deleted and it is turned off. This cannot be undone.",
+        "enableAlsoTitle": "Turn on {{name}}?",
+        "enableAlsoBody": "It needs these to run, so they will be turned on too: {{list}}.",
+        "disableAlsoTitle": "Turn off {{name}}?",
+        "disableAlsoBody": "These need it to run, so they will be turned off too: {{list}}.",
+        "downgradeTitle": "Go back to {{name}} {{version}}?",
+        "downgradeBody": "Data written by the newer version stays as it is, and an older version may not understand it. The plugin will stay on this version until you unpin it.",
+        "downgradeConfirm": "Switch version"
+      },
+      "toast": {
+        "installed": "{{name}} installed",
+        "installedNotRunning": "{{name}} installed but could not start. Open it to see why.",
+        "updated": "{{name}} updated to {{version}}",
+        "updatedMany_one": "{{count}} plugin updated",
+        "updatedMany_other": "{{count}} plugins updated",
+        "uninstalled": "{{name}} uninstalled",
+        "dataDeleted": "Data for {{name}} deleted",
+        "failedToStart": "{{name}} could not start. Open it to see why."
+      },
+      "errors": {
+        "generic": "Something went wrong",
+        "install": "Could not install {{name}}: {{error}}",
+        "update": "Could not update {{name}}: {{error}}",
+        "updateAll": "Could not update plugins: {{error}}",
+        "uninstall": "Could not uninstall {{name}}: {{error}}",
+        "state": "Could not change {{name}}: {{error}}",
+        "retry": "Could not restart {{name}}: {{error}}",
+        "options": "Could not save options for {{name}}: {{error}}",
+        "deleteData": "Could not delete data for {{name}}: {{error}}",
+        "managedByServer": "This desktop is linked to a server, which decides its plugins.",
+        "hasDependents": "{{name}} is needed by {{list}}. Turn those off or uninstall them first.",
+        "missingDependencies": "{{name}} needs {{list}}, which is not installed.",
+        "consentChanged": "What this plugin asks for changed since you looked. Check the list again.",
+        "upload": "Could not read {{name}}: {{error}}",
+        "developerMode": "Could not change developer mode: {{error}}"
+      },
+      "data": {
+        "title": "Stored data",
+        "delete": "Delete data",
+        "loadFailed": "Could not read what this plugin stores.",
+        "tables": "Tables",
+        "kv": "Keys",
+        "settings": "Settings",
+        "files": "Files",
+        "rows_one": "{{count}} row",
+        "rows_other": "{{count}} rows",
+        "secrets_one": "{{count}} secret",
+        "secrets_other": "{{count}} secrets",
+        "migrations_one": "{{count}} migration applied",
+        "migrations_other": "{{count}} migrations applied",
+        "grants_one": "{{count}} capability granted",
+        "grants_other": "{{count}} capabilities granted"
+      },
+      "install": "Install",
+      "uninstall": "Uninstall",
+      "enable": "Enable",
+      "disable": "Disable",
+      "restart": "Restart",
+      "update": "Update",
+      "updateAll": "Update all",
+      "updateTo": "Update to {{version}}",
+      "review": "Review",
+      "reviewUpdate": "Review update",
+      "updates": "Updates",
+      "auto": "Auto",
+      "autoUpdate": "Update on its own",
+      "autoUpdateHint": "Never when the update asks for something new.",
+      "pin": "Stay on this version",
+      "pinHint": "Keeps {{version}} and skips every update until you turn this off.",
+      "pinnedTo": "Pinned to {{version}}",
+      "version": "Version",
+      "versionPickHint": "Install an older release instead of the newest. It stays on that version until you unpin it.",
+      "versionPickHintInstalled": "Switch to another release. Picking one that is not the newest pins it.",
+      "switchVersion": "Switch",
+      "latestVersion": "{{version}} (latest)",
+      "versionChange": "{{from}} to {{to}}",
+      "releaseNotes": "Release notes",
+      "noReleaseNotes": "No notes for this version.",
+      "viewRelease": "View on GitHub",
+      "showOlderReleases": "Older releases ({{count}})",
+      "hideOlderReleases": "Hide older releases",
+      "showMoreChanges": "Show {{count}} more",
+      "videoTitle": "{{name}} video",
+      "changeTypes": {
+        "added": "Added",
+        "changed": "Changed",
+        "fixed": "Fixed",
+        "removed": "Removed",
+        "deprecated": "Deprecated",
+        "security": "Security"
+      },
+      "installedBadge": "Installed",
+      "incompatible": "Needs a newer Termix",
+      "features": "Features",
+      "whatItCanDo": "What it can do",
+      "addsToTermix": "Adds to Termix",
+      "addsToTermixHint": "Uninstall and every one of these goes away.",
+      "noServerAccess": "No access to your servers",
+      "searchInstalled": "Search installed",
+      "searchPlugins": "Search plugins",
+      "allCategories": "All",
+      "nothingMatches": "Nothing matches that.",
+      "noneInstalled": "No plugins installed yet. Browse to add some.",
+      "nothingHere": "Nothing here.",
+      "nothingHereHint": "Try another category or search.",
+      "communitySoon": "Community plugins are coming in a later update. Plugin authors can already submit theirs to the community registry.",
+      "communitySubmit": "How to submit",
+      "upToDate": "Everything is up to date.",
+      "lastChecked": "Last checked {{time}}",
+      "updatesReady_one": "{{count}} update ready.",
+      "updatesReady_other": "{{count}} updates ready.",
+      "updatesNeedReview_one": "{{count}} more needs your review first.",
+      "updatesNeedReview_other": "{{count}} more need your review first.",
+      "updateAsksMore": "This update asks for more access, so it waits for you.",
+      "checkRegistry": "Check for plugins and updates",
+      "registryUnreachable": "Could not reach the plugin registry ({{error}}). Installed plugins still work.",
+      "managedByServer": "This desktop is linked to a server, which decides its plugins. Changes are made on the server.",
+      "browsePlugins": "Browse plugins",
+      "loading": "Loading",
+      "developer": {
+        "title": "Plugin developer mode",
+        "hint": "Lets admins install plugins from a .tmxplug file in the Plugins tab, without the registry checks. Use it to build and test your own plugins.",
+        "enableTitle": "Turn on developer mode?",
+        "enableBody": "Admins will be able to install plugins from files that Termix has not checked. A plugin can do anything its capabilities allow, so only turn this on while you are building or testing plugins.",
+        "enable": "Turn on",
+        "installFromFile": "Install from file",
+        "signedOnly": "TERMIX_REQUIRE_SIGNED_PLUGINS is set, so installing from a file stays blocked."
+      },
+      "count": {
+        "active_one": "{{formatted}} active install",
+        "active_other": "{{formatted}} active installs",
+        "downloads_one": "{{formatted}} download",
+        "downloads_other": "{{formatted}} downloads",
+        "activeHint": "Instances that reported this plugin turned on in the last week. Instances with usage statistics turned off are not counted.",
+        "downloadsHint": "How many times a release was downloaded. This is not the number of installs."
+      },
+      "unverified": "Unverified",
+      "unverifiedHint": "Installed from a file. Termix did not check or sign it.",
+      "reportIssue": "Report an issue",
+      "reportTo": "Report to {{author}}",
+      "requestFeature": "Request a feature",
+      "openSettings": "Open its settings",
+      "beta": {
+        "badge": "Beta",
+        "badgeHint": "This is a beta version. It can have bugs.",
+        "try": "Try beta {{version}}",
+        "confirmTitle": "Use betas for {{name}}?",
+        "confirmBody": "Betas get new features and fixes first, but they can have bugs. You can switch back to stable at any time.",
+        "confirmInstall": "Install {{version}}",
+        "confirmSwitch": "Use betas",
+        "leftWhileOnBeta": "{{name}} stays on {{version}} until a stable release is newer.",
+        "channel": "Beta versions",
+        "channelHint": "Get new versions early. They can have bugs.",
+        "waitingForStable": "Back on stable. Stays on {{version}} until a stable release is newer.",
+        "versionLabel": "{{version}} (beta)",
+        "sendFeedback": "Send beta feedback"
+      },
+      "documentation": "Documentation",
+      "envVars": "Environment variables",
+      "envRequired": "Required",
+      "envDefault": "Default: {{value}}"
     }
   },
   "settings": {
@@ -1918,7 +2096,67 @@
     "pluginSettingsInvalid": "Some settings could not be saved. Check the highlighted fields.",
     "pluginSettingsSaveFailed": "Failed to save settings",
     "pluginSettingsLoadFailed": "Failed to load settings",
-    "featureUnavailable": "{{name}} is unavailable right now. These settings are saved but will not take effect."
+    "featureUnavailable": "{{name}} is unavailable right now. These settings are saved but will not take effect.",
+    "account": "Account",
+    "security": "Security",
+    "apiKeys": "API keys",
+    "data": "Data and sync",
+    "interface": "Interface",
+    "appearance": "Appearance",
+    "keybindings": "Keybindings",
+    "adminGeneral": "General",
+    "adminUsers": "Users",
+    "adminSessions": "Sessions",
+    "adminRoles": "Roles",
+    "adminHostDefaults": "Host defaults",
+    "adminBranding": "Branding",
+    "adminDatabase": "Database",
+    "adminSsl": "SSL",
+    "adminApiKeys": "API keys",
+    "adminAuditLog": "Audit log",
+    "bandYou": "Your account",
+    "bandApp": "This app",
+    "bandPlugins": "Plugins",
+    "bandInstance": "This server",
+    "searchPlaceholder": "Search settings",
+    "noResults": "No settings match.",
+    "pages": "Pages",
+    "instanceSettings": "Server settings",
+    "nothingHere": "Nothing to set here.",
+    "searchPage": "Search this page",
+    "noPageMatches": "Nothing on this page matches.",
+    "updates": {
+      "title": "Updates",
+      "betaProgram": "Beta program",
+      "betaIntro": "Betas are early builds of the next Termix version. They come out on Tuesdays and Fridays when there is something new to try. They can have bugs, and your feedback is what makes the stable release better.",
+      "termixBetas": "Termix betas",
+      "termixBetasHint": "Tell me about new betas, not only stable releases.",
+      "runningBetaBuild": "You are running a beta build. To leave, switch back to a stable image or installer.",
+      "howToInstall": "How to get the beta",
+      "desktopInstall": "Download the beta installer and install it over this one.",
+      "downloadBeta": "Download {{version}}",
+      "dockerInstall": "Change your image to the beta tag and restart the container:",
+      "copy": "Copy",
+      "copied": "Copied",
+      "copyFailed": "Could not copy",
+      "learnMore": "Learn more about betas",
+      "feedback": "Feedback",
+      "feedbackHint": "Found a bug or have an idea? It goes straight to the developers with your version filled in.",
+      "sendFeedback": "Send beta feedback",
+      "releases": "Releases",
+      "thisVersion": "This version",
+      "newestStable": "Newest stable",
+      "newestBeta": "Newest beta",
+      "noRelease": "None right now",
+      "pluginBetas": "Plugin betas",
+      "pluginBetasIntro": "Each plugin can use betas on its own. To try one, open it and press Try beta.",
+      "openPlugins": "Open Plugins",
+      "waitingForStable": "Back on stable. Stays on {{version}} until a stable release is newer.",
+      "backToStable": "Back to stable",
+      "allPluginsBeta": "Use betas for all plugins",
+      "allPluginsStable": "All plugins back to stable",
+      "saveFailed": "Could not save the change"
+    }
   },
   "managerCard": {
     "refresh": "Refresh",
@@ -1986,7 +2224,7 @@
       "sshCredentials": "Credentials",
       "sshFolders": "Folders",
       "userPreferences": "Preferences",
-      "pluginUserSettings": "Feature settings",
+      "pluginUserSettings": "Plugin settings",
       "sharedHosts": "Hosts shared with you",
       "sharedCredentials": "Credentials shared with you",
       "vaultProfiles": "Vault profiles",
@@ -1995,7 +2233,12 @@
       "dashboardServiceLinks": "Service links",
       "homepageItems": "Homepage items",
       "networkTopology": "Network map",
-      "workspaces": "Workspaces"
+      "workspaces": "Workspaces",
+      "hostDefaults": "Host defaults",
+      "hostDefaultsAdmin": "Server host defaults",
+      "aiProviders": "AI providers",
+      "homepageLayouts": "Homepage layouts",
+      "accountProfile": "Account profile"
     },
     "proxy": {
       "title": "Reverse proxy",
@@ -2042,9 +2285,11 @@
       "continue": "Continue",
       "back": "Back",
       "mergeTitle": "Add it to my account",
-      "mergeBody": "The {{count}} items on this device are added to your account. Items your account already has stay as they are on the server.",
+      "mergeBody_one": "The item on this device is added to your account. Items your account already has stay as they are on the server.",
+      "mergeBody_other": "The {{count}} items on this device are added to your account. Items your account already has stay as they are on the server.",
       "replaceTitle": "Replace it with my account",
-      "replaceBody": "The {{count}} items on this device are removed, and this device takes everything from your account. Hosts kept on this device only stay.",
+      "replaceBody_one": "The item on this device is removed, and this device takes everything from your account. Hosts kept on this device only stay.",
+      "replaceBody_other": "The {{count}} items on this device are removed, and this device takes everything from your account. Hosts kept on this device only stay.",
       "link": "Link",
       "linking": "Linking and running the first sync...",
       "linked": "Linked. Your data is syncing now.",
@@ -2085,12 +2330,70 @@
     "confirmNoChanges": "No existing host changes. New hosts will start with these defaults.",
     "menuMyDefaults": "My host defaults",
     "folderDefaultsAction": "Folder defaults",
-    "adminSectionDescription": "Set the defaults every host on this server follows, for every setting a host has, including each feature's. Users and folders can set their own on top, and any host can still use its own value.",
+    "adminSectionDescription": "Set the defaults every host on this server follows, for every setting a host has, including each plugin's. Users and folders can set their own on top, and any host can still use its own value.",
     "editServerDefaults": "Edit server defaults",
     "resetMenu": "Reset",
     "resetAll": "Everything to defaults",
     "resetCore": "Connection and SSH to defaults",
     "resetDone_one": "{{count}} host now follows its defaults.",
     "resetDone_other": "{{count}} hosts now follow their defaults."
+  },
+  "panel": {
+    "clearSearch": "Clear search",
+    "gridView": "Grid",
+    "listView": "List",
+    "compactRows": "Compact rows",
+    "comfortableRows": "Comfortable rows"
+  },
+  "fields": {
+    "secretSaved": "Saved. Type to replace it."
+  },
+  "sharing": {
+    "revokeConfirm": "Remove access for {{name}}?",
+    "revoke": "Remove access"
+  },
+  "manage": {
+    "searchSettings": "Search settings",
+    "noMatchingSettings": "No settings match.",
+    "sections": "Sections",
+    "sectionNeedsAttention": "Something here needs attention",
+    "needsAttention_one": "One thing needs attention.",
+    "needsAttention_other": "{{count}} things need attention.",
+    "bandHost": "Host",
+    "bandFeatures": "Protocols and plugins",
+    "bandCredential": "Credential",
+    "sshConnection": "SSH connection",
+    "errorAddressRequired": "An address is required.",
+    "errorPortRange": "Use a port between 1 and 65535.",
+    "defaults": "Defaults",
+    "searchHosts": "Search hosts",
+    "searchCredentials": "Search credentials",
+    "searchDefaults": "Search defaults",
+    "addCredential": "Add credential",
+    "nothingMatches": "Nothing matches",
+    "nothingYet": "Nothing here yet",
+    "emptyHostsHint": "Add a host and it shows up here, in whatever folder you give it.",
+    "emptyCredentialsHint": "Credentials you save can be reused by any host.",
+    "collapse": "Collapse",
+    "expand": "Expand",
+    "cannotBeUndone": "This cannot be undone.",
+    "hostNotFound": "Couldn't find that host. Try refreshing the list.",
+    "hostCount_one": "{{count}} host",
+    "hostCount_other": "{{count}} hosts",
+    "credentialCount_one": "{{count}} credential",
+    "credentialCount_other": "{{count}} credentials",
+    "newHost": "New host",
+    "newCredential": "New credential",
+    "advanced": "Advanced",
+    "pickHost": "Pick a host to edit",
+    "pickCredential": "Pick a credential to edit",
+    "pickDefaults": "Pick a level of defaults to edit",
+    "pickHint": "Everything about a connection lives here, grouped so you can find it."
+  },
+  "rbac": {
+    "roles": {
+      "admin": "Admin",
+      "user": "User"
+    }
   }
 }
diff --git a/src/ui/locales/translated/af_ZA.json b/src/ui/locales/translated/af_ZA.json
index 1512cf91d..df3ad9e70 100644
--- a/src/ui/locales/translated/af_ZA.json
+++ b/src/ui/locales/translated/af_ZA.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Forseer sleutelbord-interaktief",
     "overrideCredentialUsername": "Oorskryf geloofsbriewe gebruikersnaam",
     "overrideCredentialUsernameDesc": "Gebruik die gebruikersnaam wat hierbo gespesifiseer is in plaas van die gebruikersnaam van die geloofsbriewe",
-    "oidcUsernameHint": "Gebruik $external.username om die naam in te vul waarmee jy aangemeld het via SSO of LDAP.",
+    "externalUsernameHint": "Gebruik $external.username om die naam in te vul waarmee jy aangemeld het via SSO of LDAP.",
     "jumpHostChain": "Springgasheerketting",
     "portKnocking": "Port Knocking",
     "addKnock": "Voeg poort by",
@@ -977,7 +977,7 @@
     "noSearchResults": "Geen verbindings stem ooreen met jou soektog nie",
     "rename": "Hernoem sessie"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Tweefaktor-verifikasie vereis",
     "totpCodeLabel": "Verifikasiekode",
     "totpVerify": "Verifieer",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "Kon nie die terugstelkode verifieer nie",
     "failedCompleteReset": "Kon nie wagwoordterugstelling voltooi nie",
     "invalidTotpCode": "Ongeldige TOTP-kode",
-    "failedOidcLogin": "Kon nie eksterne aanmelding begin nie",
-    "silentSigninOidcUnavailable": "Stille aanmelding is versoek, maar geen eksterne aanmelding is opgestel nie.",
+    "failedExternalLogin": "Kon nie eksterne aanmelding begin nie",
+    "silentSigninExternalUnavailable": "Stille aanmelding is versoek, maar geen eksterne aanmelding is opgestel nie.",
     "failedUserInfo": "Kon nie gebruikersinligting kry na aanmelding nie",
-    "oidcAuthFailed": "Eksterne aanmelding het misluk",
+    "externalAuthFailed": "Eksterne aanmelding het misluk",
     "invalidAuthUrl": "Ongeldige magtigings-URL ontvang van backend",
     "requiredField": "Hierdie veld is verpligtend",
     "minLength": "Minimum lengte is {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "Laat nuwe gebruikers hulself registreer met 'n gebruikersnaam en wagwoord",
     "allowPasswordLogin": "Laat Wagwoord Aanmelding Toe",
     "allowPasswordLoginDesc": "Gebruikersnaam/wagwoord aanmelding",
-    "oidcAutoProvision": "Skep eksterne rekeninge outomaties",
-    "oidcAutoProvisionDesc": "Skep 'n rekening die eerste keer wat iemand aanmeld deur 'n eksterne aanmelding soos SSO of LDAP, selfs wanneer registrasie afgeskakel is.",
+    "externalAutoProvision": "Skep eksterne rekeninge outomaties",
+    "externalAutoProvisionDesc": "Skep 'n rekening die eerste keer wat iemand aanmeld deur 'n eksterne aanmelding soos SSO of LDAP, selfs wanneer registrasie afgeskakel is.",
     "secondFactorAfterExternalLogin": "Vra vir 'n tweede faktor na eksterne aanmeldings (SSO, GitHub, Google, LDAP)",
     "secondFactorAfterExternalLoginDesc": "Af, 'n ingeskrewe tweede faktor word slegs gevra na wagwoord en ander plaaslike aanmeldings, dieselfde as voorheen. Aan, dit word gevra na elke aanmeldmetode, insluitend SSO en LDAP.",
     "allowPasswordReset": "Laat wagwoordherstel toe",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Geen vervaldatum",
     "revokedBadge": "HERROEP",
     "authTypeDual": "Dubbele Magtiging",
-    "authTypeOidc": "Eksterne",
+    "authTypeExternal": "Eksterne",
     "authTypeLocal": "Plaaslik",
     "adminStatusAdministrator": "Administrateur",
     "adminStatusRegularUser": "Gereelde Gebruiker",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Laat beide eksterne en wagwoordaanmelding toe",
     "linkAccountTargetUsername": "Gebruikersnaam van die plaaslike rekening",
     "linkAccountTargetPlaceholder": "Voer die plaaslike rekeninggebruikersnaam in om aan te koppel",
-    "linkAccountOidcUsername": "Eksterne rekening gebruikersnaam",
-    "linkAccountOidcPlaceholder": "Voer die gebruikersnaam van die slegs-eksterne rekening in om saam te voeg",
-    "linkAccountOidcNotFound": "Geen eksterne rekening gevind met daardie gebruikersnaam nie",
+    "linkAccountExternalUsername": "Eksterne rekening gebruikersnaam",
+    "linkAccountExternalPlaceholder": "Voer die gebruikersnaam van die slegs-eksterne rekening in om saam te voeg",
+    "linkAccountExternalNotFound": "Geen eksterne rekening gevind met daardie gebruikersnaam nie",
     "linkAccounts": "Koppel rekeninge",
     "linkAccountSuccess": "Rekeninge suksesvol gekoppel",
     "linkAccountFailed": "Kon nie rekeninge koppel nie",
@@ -1400,7 +1400,6 @@
     "saving": "Stoor...",
     "updateRegistrationFailed": "Kon nie registrasie-instellings opdateer nie",
     "updatePasswordLoginFailed": "Kon nie wagwoord-aanmeldinstelling opdateer nie",
-    "updateOidcAutoProvisionFailed": "Kon nie die outomatiese skep-instelling opdateer nie",
     "updateSecondFactorAfterExternalLoginFailed": "Kon nie die tweede faktorinstelling opdateer nie",
     "updatePasswordResetFailed": "Kon nie wagwoordterugstellinginstelling opdateer nie",
     "sessionTimeoutRange2": "Sessie-tydsberekening moet tussen 1 en 720 uur wees",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "GESLUIT",
     "dataLockedNotice": "{{username}}se data bly gesluit totdat hulle weer aanmeld. Hul gashere, geloofsbriewe en brokkies kan nie tot dan besigtig of geredigeer word nie.",
     "resetPasswordTitle": "Herstel wagwoord",
-    "resetPasswordOidcOnly": "Hierdie gebruiker meld aan deur 'n eksterne verskaffer en het geen wagwoord nie.",
+    "resetPasswordExternalOnly": "Hierdie gebruiker meld aan deur 'n eksterne verskaffer en het geen wagwoord nie.",
     "resetPasswordPlaceholder": "Nuwe wagwoord",
     "resetPasswordBtn": "Herstel",
     "resetPasswordWorking": "Herstel tans...",
@@ -1742,7 +1741,7 @@
         "importFailed": "Invoer het misluk: {{error}}",
         "roleUser": "Gebruiker",
         "authMethodDual": "Dubbele Magtiging",
-        "authMethodOidc": "Eksterne",
+        "authMethodExternal": "Eksterne",
         "done": "Klaar",
         "apiKeyNameRequired": "Sleutelnaam word vereis",
         "apiKeyCreated": "API-sleutel \"{{name}}\" geskep",
diff --git a/src/ui/locales/translated/ar_SA.json b/src/ui/locales/translated/ar_SA.json
index a3e4e5eca..b990c7473 100644
--- a/src/ui/locales/translated/ar_SA.json
+++ b/src/ui/locales/translated/ar_SA.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "فرض تفاعل لوحة المفاتيح",
     "overrideCredentialUsername": "تجاوز اسم مستخدم الاعتماد",
     "overrideCredentialUsernameDesc": "استخدم اسم المستخدم المحدد أعلاه بدلاً من اسم مستخدم الاعتماد",
-    "oidcUsernameHint": "استخدم $external.username لملء الاسم الذي قمت بتسجيل الدخول به من خلال SSO أو LDAP.",
+    "externalUsernameHint": "استخدم $external.username لملء الاسم الذي قمت بتسجيل الدخول به من خلال SSO أو LDAP.",
     "jumpHostChain": "سلسلة مضيفات الانتقال",
     "portKnocking": "طرق المنفذ",
     "addKnock": "إضافة منفذ",
@@ -977,7 +977,7 @@
     "noSearchResults": "لا توجد اتصالات تطابق بحثك",
     "rename": "إعادة تسمية الجلسة"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "مطلوب المصادقة الثنائية",
     "totpCodeLabel": "رمز التحقق",
     "totpVerify": "تحقق",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "فشل التحقق من رمز إعادة التعيين",
     "failedCompleteReset": "فشل إكمال إعادة تعيين كلمة المرور",
     "invalidTotpCode": "رمز TOTP غير صالح",
-    "failedOidcLogin": "فشل بدء تسجيل الدخول الخارجي",
-    "silentSigninOidcUnavailable": "تم طلب تسجيل الدخول الصامت، ولكن لم يتم إعداد أي تسجيل دخول خارجي.",
+    "failedExternalLogin": "فشل بدء تسجيل الدخول الخارجي",
+    "silentSigninExternalUnavailable": "تم طلب تسجيل الدخول الصامت، ولكن لم يتم إعداد أي تسجيل دخول خارجي.",
     "failedUserInfo": "فشل الحصول على معلومات المستخدم بعد تسجيل الدخول",
-    "oidcAuthFailed": "فشل تسجيل الدخول الخارجي",
+    "externalAuthFailed": "فشل تسجيل الدخول الخارجي",
     "invalidAuthUrl": "تم استلام عنوان URL تفويض غير صالح من الخادم الخلفي",
     "requiredField": "هذا الحقل مطلوب",
     "minLength": "الحد الأدنى للطول هو {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "يسمح للمستخدمين الجدد بالتسجيل الذاتي باستخدام اسم مستخدم وكلمة مرور",
     "allowPasswordLogin": "السماح بتسجيل الدخول بكلمة المرور",
     "allowPasswordLoginDesc": "تسجيل الدخول باسم المستخدم/كلمة المرور",
-    "oidcAutoProvision": "إنشاء حسابات خارجية تلقائياً",
-    "oidcAutoProvisionDesc": "أنشئ حسابًا في المرة الأولى التي يسجل فيها شخص ما الدخول من خلال تسجيل دخول خارجي مثل SSO أو LDAP، حتى عندما يكون التسجيل معطلاً",
+    "externalAutoProvision": "إنشاء حسابات خارجية تلقائياً",
+    "externalAutoProvisionDesc": "أنشئ حسابًا في المرة الأولى التي يسجل فيها شخص ما الدخول من خلال تسجيل دخول خارجي مثل SSO أو LDAP، حتى عندما يكون التسجيل معطلاً",
     "secondFactorAfterExternalLogin": "اطلب عامل مصادقة ثانٍ بعد عمليات تسجيل الدخول الخارجية (SSO، GitHub، Google، LDAP)",
     "secondFactorAfterExternalLoginDesc": "في حالة عدم تفعيل عامل التحقق الثاني، يُطلب فقط بعد إدخال كلمة المرور وتسجيلات الدخول المحلية الأخرى، كما كان الحال سابقًا. أما في حالة تفعيله، فيُطلب بعد كل طريقة تسجيل دخول، بما في ذلك تسجيل الدخول الموحد (SSO) وبروتوكول LDAP.",
     "allowPasswordReset": "السماح بإعادة تعيين كلمة المرور",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "بدون انتهاء صلاحية",
     "revokedBadge": "ملغى",
     "authTypeDual": "مصادقة مزدوجة",
-    "authTypeOidc": "خارجي",
+    "authTypeExternal": "خارجي",
     "authTypeLocal": "محلي",
     "adminStatusAdministrator": "مدير",
     "adminStatusRegularUser": "مستخدم عادي",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "السماح بتسجيل الدخول الخارجي وتسجيل الدخول باستخدام كلمة المرور",
     "linkAccountTargetUsername": "اسم مستخدم الحساب المحلي",
     "linkAccountTargetPlaceholder": "أدخل اسم مستخدم الحساب المحلي للربط به",
-    "linkAccountOidcUsername": "اسم مستخدم الحساب الخارجي",
-    "linkAccountOidcPlaceholder": "أدخل اسم مستخدم الحساب الخارجي فقط لدمجه",
-    "linkAccountOidcNotFound": "لم يتم العثور على حساب خارجي فقط بهذا الاسم المستخدم",
+    "linkAccountExternalUsername": "اسم مستخدم الحساب الخارجي",
+    "linkAccountExternalPlaceholder": "أدخل اسم مستخدم الحساب الخارجي فقط لدمجه",
+    "linkAccountExternalNotFound": "لم يتم العثور على حساب خارجي فقط بهذا الاسم المستخدم",
     "linkAccounts": "ربط الحسابات",
     "linkAccountSuccess": "تم ربط الحسابات بنجاح",
     "linkAccountFailed": "فشل ربط الحسابات",
@@ -1400,7 +1400,6 @@
     "saving": "جارٍ الحفظ...",
     "updateRegistrationFailed": "فشل تحديث إعداد التسجيل",
     "updatePasswordLoginFailed": "فشل تحديث إعداد تسجيل الدخول بكلمة المرور",
-    "updateOidcAutoProvisionFailed": "فشل تحديث إعداد الإنشاء التلقائي",
     "updateSecondFactorAfterExternalLoginFailed": "فشل تحديث إعدادات العامل الثاني",
     "updatePasswordResetFailed": "فشل تحديث إعداد إعادة تعيين كلمة المرور",
     "sessionTimeoutRange2": "يجب أن تكون مهلة الجلسة بين 1 و 720 ساعة",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "مقفل",
     "dataLockedNotice": "تظل بيانات {{username}} مقفلة حتى تسجيل الدخول التالي. لا يمكن عرض أو تعديل مضيفيه وبيانات اعتماده ومقاطع حتى ذلك الحين.",
     "resetPasswordTitle": "إعادة تعيين كلمة المرور",
-    "resetPasswordOidcOnly": "يسجل هذا المستخدم الدخول عبر مزود خارجي ولا يملك كلمة مرور.",
+    "resetPasswordExternalOnly": "يسجل هذا المستخدم الدخول عبر مزود خارجي ولا يملك كلمة مرور.",
     "resetPasswordPlaceholder": "كلمة مرور جديدة",
     "resetPasswordBtn": "إعادة تعيين",
     "resetPasswordWorking": "جارٍ إعادة التعيين...",
@@ -1742,7 +1741,7 @@
         "importFailed": "فشل الاستيراد: {{error}}",
         "roleUser": "مستخدم",
         "authMethodDual": "مصادقة مزدوجة",
-        "authMethodOidc": "خارجي",
+        "authMethodExternal": "خارجي",
         "done": "تم",
         "apiKeyNameRequired": "اسم المفتاح مطلوب",
         "apiKeyCreated": "تم إنشاء مفتاح API \"{{name}}\"",
diff --git a/src/ui/locales/translated/bg_BG.json b/src/ui/locales/translated/bg_BG.json
index ae6ebcf4b..60679825d 100644
--- a/src/ui/locales/translated/bg_BG.json
+++ b/src/ui/locales/translated/bg_BG.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Принудително интерактивно с клавиатура",
     "overrideCredentialUsername": "Замяна на потребителско име за идентификационни данни",
     "overrideCredentialUsernameDesc": "Използвайте посоченото по-горе потребителско име вместо потребителското име от идентификационните данни",
-    "oidcUsernameHint": "Използвайте $external.username, за да попълните името, с което сте влезли чрез SSO или LDAP.",
+    "externalUsernameHint": "Използвайте $external.username, за да попълните името, с което сте влезли чрез SSO или LDAP.",
     "jumpHostChain": "Верига за прескачане на хост",
     "portKnocking": "Порт Нокинг",
     "addKnock": "Добавяне на порт",
@@ -977,7 +977,7 @@
     "noSearchResults": "Няма връзки, които да отговарят на търсенето ви",
     "rename": "Преименуване на сесия"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Изисква се двуфакторно удостоверяване",
     "totpCodeLabel": "Код за потвърждение",
     "totpVerify": "Проверка",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "Неуспешно потвърждаване на кода за нулиране",
     "failedCompleteReset": "Неуспешно завършване на нулирането на паролата",
     "invalidTotpCode": "Невалиден TOTP код",
-    "failedOidcLogin": "Стартирането на външно влизане не бе успешно",
-    "silentSigninOidcUnavailable": "Заявено е безшумно влизане, но не е настроено външно влизане.",
+    "failedExternalLogin": "Стартирането на външно влизане не бе успешно",
+    "silentSigninExternalUnavailable": "Заявено е безшумно влизане, но не е настроено външно влизане.",
     "failedUserInfo": "Неуспешно получаване на потребителска информация след влизане",
-    "oidcAuthFailed": "Външното влизане не бе успешно",
+    "externalAuthFailed": "Външното влизане не бе успешно",
     "invalidAuthUrl": "Невалиден URL адрес за оторизация, получен от бекенд системата",
     "requiredField": "Това поле е задължително",
     "minLength": "Минималната дължина е {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "Позволете на новите потребители да се регистрират сами с потребителско име и парола",
     "allowPasswordLogin": "Разрешаване на вход с парола",
     "allowPasswordLoginDesc": "Вход с потребителско име/парола",
-    "oidcAutoProvision": "Автоматично създаване на външни акаунти",
-    "oidcAutoProvisionDesc": "Създайте акаунт при първото влизане на някого чрез външен вход, като например SSO или LDAP, дори когато регистрацията е изключена",
+    "externalAutoProvision": "Автоматично създаване на външни акаунти",
+    "externalAutoProvisionDesc": "Създайте акаунт при първото влизане на някого чрез външен вход, като например SSO или LDAP, дори когато регистрацията е изключена",
     "secondFactorAfterExternalLogin": "Искайте втори фактор след външни входове (SSO, GitHub, Google, LDAP)",
     "secondFactorAfterExternalLoginDesc": "Изключено, регистриран втори фактор се изисква само след парола и други локални входове, както преди. Включено, той се изисква след всеки метод за вход, включително SSO и LDAP.",
     "allowPasswordReset": "Разрешаване на нулиране на паролата",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Без срок на годност",
     "revokedBadge": "ОТМЕНЕНО",
     "authTypeDual": "Двойно удостоверяване",
-    "authTypeOidc": "Външен",
+    "authTypeExternal": "Външен",
     "authTypeLocal": "Местно",
     "adminStatusAdministrator": "Администратор",
     "adminStatusRegularUser": "Редовен потребител",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Разрешаване на външно влизане и влизане с парола",
     "linkAccountTargetUsername": "Потребителско име за локален акаунт",
     "linkAccountTargetPlaceholder": "Въведете потребителското име на локалния акаунт, към който да се свържете",
-    "linkAccountOidcUsername": "Потребителско име за външен акаунт",
-    "linkAccountOidcPlaceholder": "Въведете потребителското име само за външен акаунт, за да го обедините",
-    "linkAccountOidcNotFound": "Не е намерен само външен акаунт с това потребителско име",
+    "linkAccountExternalUsername": "Потребителско име за външен акаунт",
+    "linkAccountExternalPlaceholder": "Въведете потребителското име само за външен акаунт, за да го обедините",
+    "linkAccountExternalNotFound": "Не е намерен само външен акаунт с това потребителско име",
     "linkAccounts": "Свързване на акаунти",
     "linkAccountSuccess": "Профилите са свързани успешно",
     "linkAccountFailed": "Свързването на акаунти не бе успешно",
@@ -1400,7 +1400,6 @@
     "saving": "Запазване...",
     "updateRegistrationFailed": "Актуализирането на настройката за регистрация не бе успешно",
     "updatePasswordLoginFailed": "Актуализирането на настройката за вход с парола не бе успешно",
-    "updateOidcAutoProvisionFailed": "Актуализирането на настройката за автоматично създаване не бе успешно",
     "updateSecondFactorAfterExternalLoginFailed": "Актуализирането на настройката за втори фактор не бе успешно",
     "updatePasswordResetFailed": "Актуализирането на настройката за нулиране на паролата не бе успешно",
     "sessionTimeoutRange2": "Времето за изчакване на сесията трябва да е между 1 и 720 часа",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "ЗАКЛЮЧЕНО",
     "dataLockedNotice": "Данните на {{username}}остават заключени до следващото им влизане. Техните хостове, идентификационни данни и фрагменти не могат да бъдат преглеждани или редактирани дотогава.",
     "resetPasswordTitle": "Нулиране на парола",
-    "resetPasswordOidcOnly": "Този потребител влиза чрез външен доставчик и няма парола.",
+    "resetPasswordExternalOnly": "Този потребител влиза чрез външен доставчик и няма парола.",
     "resetPasswordPlaceholder": "Нова парола",
     "resetPasswordBtn": "Нулиране",
     "resetPasswordWorking": "Нулиране...",
@@ -1742,7 +1741,7 @@
         "importFailed": "Импортирането не бе успешно: {{error}}",
         "roleUser": "Потребител",
         "authMethodDual": "Двойно удостоверяване",
-        "authMethodOidc": "Външен",
+        "authMethodExternal": "Външен",
         "done": "Готово",
         "apiKeyNameRequired": "Името на ключа е задължително",
         "apiKeyCreated": "API ключът „{{name}}“ е създаден",
diff --git a/src/ui/locales/translated/bn_BD.json b/src/ui/locales/translated/bn_BD.json
index ea12b481b..180898b04 100644
--- a/src/ui/locales/translated/bn_BD.json
+++ b/src/ui/locales/translated/bn_BD.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "ফোর্স কীবোর্ড-ইন্টারেক্টিভ",
     "overrideCredentialUsername": "ক্রেডেনশিয়াল ব্যবহারকারীর নাম ওভাররাইড করুন",
     "overrideCredentialUsernameDesc": "ক্রেডেনশিয়ালের ইউজারনেমের পরিবর্তে উপরে উল্লেখিত ইউজারনেমটি ব্যবহার করুন।",
-    "oidcUsernameHint": "SSO বা LDAP-এর মাধ্যমে আপনি যে নামটি দিয়ে সাইন ইন করেছেন, সেটি পূরণ করতে $external.username ব্যবহার করুন।",
+    "externalUsernameHint": "SSO বা LDAP-এর মাধ্যমে আপনি যে নামটি দিয়ে সাইন ইন করেছেন, সেটি পূরণ করতে $external.username ব্যবহার করুন।",
     "jumpHostChain": "জাম্প হোস্ট চেইন",
     "portKnocking": "পোর্ট নকিং",
     "addKnock": "পোর্ট যোগ করুন",
@@ -977,7 +977,7 @@
     "noSearchResults": "আপনার অনুসন্ধানের সাথে কোনো সংযোগ মেলেনি।",
     "rename": "পুনঃনামকরণ অধিবেশন"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "দ্বি-স্তরীয় প্রমাণীকরণ আবশ্যক",
     "totpCodeLabel": "যাচাইকরণ কোড",
     "totpVerify": "যাচাই করুন",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "রিসেট কোড যাচাই করতে ব্যর্থ হয়েছে",
     "failedCompleteReset": "পাসওয়ার্ড রিসেট সম্পন্ন করা যায়নি",
     "invalidTotpCode": "অবৈধ TOTP কোড",
-    "failedOidcLogin": "বাহ্যিক সাইন-ইন শুরু করতে ব্যর্থ হয়েছে",
-    "silentSigninOidcUnavailable": "নীরব সাইন-ইন-এর জন্য অনুরোধ করা হয়েছিল, কিন্তু কোনো বাহ্যিক সাইন-ইন সেট আপ করা নেই।",
+    "failedExternalLogin": "বাহ্যিক সাইন-ইন শুরু করতে ব্যর্থ হয়েছে",
+    "silentSigninExternalUnavailable": "নীরব সাইন-ইন-এর জন্য অনুরোধ করা হয়েছিল, কিন্তু কোনো বাহ্যিক সাইন-ইন সেট আপ করা নেই।",
     "failedUserInfo": "লগইন করার পর ব্যবহারকারীর তথ্য পেতে ব্যর্থ হয়েছে",
-    "oidcAuthFailed": "বাহ্যিক সাইন-ইন ব্যর্থ হয়েছে",
+    "externalAuthFailed": "বাহ্যিক সাইন-ইন ব্যর্থ হয়েছে",
     "invalidAuthUrl": "ব্যাকএন্ড থেকে প্রাপ্ত অনুমোদন URLটি অবৈধ।",
     "requiredField": "এই ক্ষেত্রটি আবশ্যক",
     "minLength": "সর্বনিম্ন দৈর্ঘ্য হল {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "নতুন ব্যবহারকারীদের একটি ইউজারনেম ও পাসওয়ার্ড দিয়ে স্ব-নিবন্ধন করতে দিন।",
     "allowPasswordLogin": "পাসওয়ার্ড লগইনের অনুমতি দিন",
     "allowPasswordLoginDesc": "ব্যবহারকারীর নাম/পাসওয়ার্ড লগইন",
-    "oidcAutoProvision": "স্বয়ংক্রিয়ভাবে বাহ্যিক অ্যাকাউন্ট তৈরি করুন",
-    "oidcAutoProvisionDesc": "কেউ যখন SSO বা LDAP-এর মতো কোনো বাহ্যিক লগইনের মাধ্যমে প্রথমবার সাইন ইন করে, তখন রেজিস্ট্রেশন বন্ধ থাকলেও একটি অ্যাকাউন্ট তৈরি করুন।",
+    "externalAutoProvision": "স্বয়ংক্রিয়ভাবে বাহ্যিক অ্যাকাউন্ট তৈরি করুন",
+    "externalAutoProvisionDesc": "কেউ যখন SSO বা LDAP-এর মতো কোনো বাহ্যিক লগইনের মাধ্যমে প্রথমবার সাইন ইন করে, তখন রেজিস্ট্রেশন বন্ধ থাকলেও একটি অ্যাকাউন্ট তৈরি করুন।",
     "secondFactorAfterExternalLogin": "বাহ্যিক লগইনের (এসএসও, গিটহাব, গুগল, এলড্যাপ) পর দ্বিতীয় ফ্যাক্টরের জন্য অনুরোধ করুন।",
     "secondFactorAfterExternalLoginDesc": "অফ থাকলে, আগের মতোই শুধুমাত্র পাসওয়ার্ড এবং অন্যান্য লোকাল লগইনের পরেই নথিভুক্ত দ্বিতীয় ফ্যাক্টরটি চাওয়া হয়। অন থাকলে, SSO এবং LDAP সহ প্রতিটি লগইন পদ্ধতির পরেই এটি চাওয়া হয়।",
     "allowPasswordReset": "পাসওয়ার্ড রিসেট করার অনুমতি দিন",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "কোনো মেয়াদ নেই",
     "revokedBadge": "বাতিল করা হয়েছে",
     "authTypeDual": "দ্বৈত প্রমাণীকরণ",
-    "authTypeOidc": "বাহ্যিক",
+    "authTypeExternal": "বাহ্যিক",
     "authTypeLocal": "স্থানীয়",
     "adminStatusAdministrator": "প্রশাসক",
     "adminStatusRegularUser": "নিয়মিত ব্যবহারকারী",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "বাহ্যিক এবং পাসওয়ার্ড উভয় সাইন-ইনের অনুমতি দিন",
     "linkAccountTargetUsername": "স্থানীয় অ্যাকাউন্টের ব্যবহারকারীর নাম",
     "linkAccountTargetPlaceholder": "লিঙ্ক করার জন্য স্থানীয় অ্যাকাউন্টের ব্যবহারকারীর নাম লিখুন",
-    "linkAccountOidcUsername": "বাহ্যিক অ্যাকাউন্টের ব্যবহারকারীর নাম",
-    "linkAccountOidcPlaceholder": "মার্জ করার জন্য শুধুমাত্র বাহ্যিক অ্যাকাউন্টের ইউজারনেমটি প্রবেশ করান।",
-    "linkAccountOidcNotFound": "এই ইউজারনেম দিয়ে কোনো শুধুমাত্র বাহ্যিক ব্যবহারের অ্যাকাউন্ট খুঁজে পাওয়া যায়নি।",
+    "linkAccountExternalUsername": "বাহ্যিক অ্যাকাউন্টের ব্যবহারকারীর নাম",
+    "linkAccountExternalPlaceholder": "মার্জ করার জন্য শুধুমাত্র বাহ্যিক অ্যাকাউন্টের ইউজারনেমটি প্রবেশ করান।",
+    "linkAccountExternalNotFound": "এই ইউজারনেম দিয়ে কোনো শুধুমাত্র বাহ্যিক ব্যবহারের অ্যাকাউন্ট খুঁজে পাওয়া যায়নি।",
     "linkAccounts": "অ্যাকাউন্ট লিঙ্ক করুন",
     "linkAccountSuccess": "অ্যাকাউন্টগুলি সফলভাবে লিঙ্ক করা হয়েছে",
     "linkAccountFailed": "অ্যাকাউন্ট লিঙ্ক করতে ব্যর্থ হয়েছে",
@@ -1400,7 +1400,6 @@
     "saving": "সঞ্চয়...",
     "updateRegistrationFailed": "নিবন্ধন সেটিং আপডেট করতে ব্যর্থ হয়েছে",
     "updatePasswordLoginFailed": "পাসওয়ার্ড লগইন সেটিং আপডেট করতে ব্যর্থ হয়েছে",
-    "updateOidcAutoProvisionFailed": "স্বয়ংক্রিয়-সৃষ্টি সেটিং আপডেট করতে ব্যর্থ হয়েছে",
     "updateSecondFactorAfterExternalLoginFailed": "দ্বিতীয় ফ্যাক্টর সেটিং আপডেট করতে ব্যর্থ হয়েছে",
     "updatePasswordResetFailed": "পাসওয়ার্ড রিসেট সেটিং আপডেট করতে ব্যর্থ হয়েছে",
     "sessionTimeoutRange2": "সেশন টাইমআউট অবশ্যই ১ থেকে ৭২০ ঘণ্টার মধ্যে হতে হবে।",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "লক করা",
     "dataLockedNotice": "{{username}}-এর ডেটা পরবর্তী লগইন পর্যন্ত লক করা থাকে। ততক্ষণ পর্যন্ত তাদের হোস্ট, ক্রেডেনশিয়াল এবং স্নিপেট দেখা বা সম্পাদনা করা যায় না।",
     "resetPasswordTitle": "পাসওয়ার্ড রিসেট করুন",
-    "resetPasswordOidcOnly": "এই ব্যবহারকারী একটি বাহ্যিক প্রদানকারীর মাধ্যমে সাইন ইন করেন এবং তার কোনো পাসওয়ার্ড নেই।",
+    "resetPasswordExternalOnly": "এই ব্যবহারকারী একটি বাহ্যিক প্রদানকারীর মাধ্যমে সাইন ইন করেন এবং তার কোনো পাসওয়ার্ড নেই।",
     "resetPasswordPlaceholder": "নতুন পাসওয়ার্ড",
     "resetPasswordBtn": "রিসেট",
     "resetPasswordWorking": "রিসেট করা হচ্ছে...",
@@ -1742,7 +1741,7 @@
         "importFailed": "আমদানি ব্যর্থ হয়েছে: {{error}}",
         "roleUser": "ব্যবহারকারী",
         "authMethodDual": "দ্বৈত প্রমাণীকরণ",
-        "authMethodOidc": "বাহ্যিক",
+        "authMethodExternal": "বাহ্যিক",
         "done": "সম্পন্ন হয়েছে",
         "apiKeyNameRequired": "কী-এর নাম আবশ্যক।",
         "apiKeyCreated": "এপিআই কী \"{{name}}\" তৈরি করা হয়েছে",
diff --git a/src/ui/locales/translated/ca_ES.json b/src/ui/locales/translated/ca_ES.json
index 62670e223..cca0449be 100644
--- a/src/ui/locales/translated/ca_ES.json
+++ b/src/ui/locales/translated/ca_ES.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Forçar la interacció del teclat",
     "overrideCredentialUsername": "Substitueix les credencials i el nom d'usuari",
     "overrideCredentialUsernameDesc": "Feu servir el nom d'usuari especificat anteriorment en comptes del nom d'usuari de la credencial",
-    "oidcUsernameHint": "Feu servir $external.username per omplir el nom amb què heu iniciat la sessió mitjançant SSO o LDAP.",
+    "externalUsernameHint": "Feu servir $external.username per omplir el nom amb què heu iniciat la sessió mitjançant SSO o LDAP.",
     "jumpHostChain": "Cadena d'amfitrió de salt",
     "portKnocking": "Cop de port",
     "addKnock": "Afegeix un port",
@@ -977,7 +977,7 @@
     "noSearchResults": "No hi ha connexions que coincideixin amb la teva cerca",
     "rename": "Canvia el nom de la sessió"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Cal autenticació de dos factors",
     "totpCodeLabel": "Codi de verificació",
     "totpVerify": "Verifica",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "No s'ha pogut verificar el codi de restabliment",
     "failedCompleteReset": "No s'ha pogut completar el restabliment de la contrasenya",
     "invalidTotpCode": "Codi TOTP no vàlid",
-    "failedOidcLogin": "No s'ha pogut iniciar l'inici de sessió extern",
-    "silentSigninOidcUnavailable": "S'ha sol·licitat l'inici de sessió silenciós, però no hi ha cap inici de sessió extern configurat.",
+    "failedExternalLogin": "No s'ha pogut iniciar l'inici de sessió extern",
+    "silentSigninExternalUnavailable": "S'ha sol·licitat l'inici de sessió silenciós, però no hi ha cap inici de sessió extern configurat.",
     "failedUserInfo": "No s'ha pogut obtenir la informació de l'usuari després de l'inici de sessió",
-    "oidcAuthFailed": "L'inici de sessió extern ha fallat",
+    "externalAuthFailed": "L'inici de sessió extern ha fallat",
     "invalidAuthUrl": "URL d'autorització no vàlida rebuda del backend",
     "requiredField": "Aquest camp és obligatori",
     "minLength": "La longitud mínima és {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "Permet que els nous usuaris s'autoregistrin amb un nom d'usuari i una contrasenya",
     "allowPasswordLogin": "Permet l'inici de sessió amb contrasenya",
     "allowPasswordLoginDesc": "Inici de sessió amb nom d'usuari/contrasenya",
-    "oidcAutoProvision": "Crea automàticament comptes externs",
-    "oidcAutoProvisionDesc": "Crea un compte la primera vegada que algú iniciï la sessió mitjançant un inici de sessió extern com ara SSO o LDAP, fins i tot quan el registre estigui desactivat",
+    "externalAutoProvision": "Crea automàticament comptes externs",
+    "externalAutoProvisionDesc": "Crea un compte la primera vegada que algú iniciï la sessió mitjançant un inici de sessió extern com ara SSO o LDAP, fins i tot quan el registre estigui desactivat",
     "secondFactorAfterExternalLogin": "Demanar un segon factor després d'inicis de sessió externs (SSO, GitHub, Google, LDAP)",
     "secondFactorAfterExternalLoginDesc": "Desactivat, només es demana un segon factor inscrit després de la contrasenya i altres inicis de sessió locals, igual que abans. Activat, es demana després de cada mètode d'inici de sessió, inclosos SSO i LDAP.",
     "allowPasswordReset": "Permet el restabliment de la contrasenya",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Sense caducitat",
     "revokedBadge": "REVOCAT",
     "authTypeDual": "Doble autenticació",
-    "authTypeOidc": "Extern",
+    "authTypeExternal": "Extern",
     "authTypeLocal": "Local",
     "adminStatusAdministrator": "Administrador/a",
     "adminStatusRegularUser": "Usuari habitual",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Permet l'inici de sessió extern i amb contrasenya",
     "linkAccountTargetUsername": "Nom d'usuari del compte local",
     "linkAccountTargetPlaceholder": "Introduïu el nom d'usuari del compte local al qual voleu enllaçar",
-    "linkAccountOidcUsername": "Nom d'usuari del compte extern",
-    "linkAccountOidcPlaceholder": "Introduïu el nom d'usuari del compte només extern per fusionar-lo",
-    "linkAccountOidcNotFound": "No s'ha trobat cap compte només extern amb aquest nom d'usuari",
+    "linkAccountExternalUsername": "Nom d'usuari del compte extern",
+    "linkAccountExternalPlaceholder": "Introduïu el nom d'usuari del compte només extern per fusionar-lo",
+    "linkAccountExternalNotFound": "No s'ha trobat cap compte només extern amb aquest nom d'usuari",
     "linkAccounts": "Enllaçar comptes",
     "linkAccountSuccess": "Comptes enllaçats correctament",
     "linkAccountFailed": "No s'han pogut enllaçar els comptes",
@@ -1400,7 +1400,6 @@
     "saving": "Desant...",
     "updateRegistrationFailed": "No s'ha pogut actualitzar la configuració del registre",
     "updatePasswordLoginFailed": "No s'ha pogut actualitzar la configuració d'inici de sessió amb contrasenya",
-    "updateOidcAutoProvisionFailed": "No s'ha pogut actualitzar la configuració de creació automàtica",
     "updateSecondFactorAfterExternalLoginFailed": "No s'ha pogut actualitzar la configuració del segon factor",
     "updatePasswordResetFailed": "No s'ha pogut actualitzar la configuració de restabliment de la contrasenya",
     "sessionTimeoutRange2": "El temps d'espera de la sessió ha d'estar entre 1 i 720 hores",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "BLOQUEJAT",
     "dataLockedNotice": "Les dades de {{username}}romanen bloquejades fins que inicien la sessió de nou. Els seus amfitrions, credencials i fragments no es poden veure ni editar fins aleshores.",
     "resetPasswordTitle": "Restablir contrasenya",
-    "resetPasswordOidcOnly": "Aquest usuari inicia la sessió a través d'un proveïdor extern i no té contrasenya.",
+    "resetPasswordExternalOnly": "Aquest usuari inicia la sessió a través d'un proveïdor extern i no té contrasenya.",
     "resetPasswordPlaceholder": "Nova contrasenya",
     "resetPasswordBtn": "Restablir",
     "resetPasswordWorking": "Restableix...",
@@ -1742,7 +1741,7 @@
         "importFailed": "La importació ha fallat: {{error}}",
         "roleUser": "Usuari",
         "authMethodDual": "Doble autenticació",
-        "authMethodOidc": "Extern",
+        "authMethodExternal": "Extern",
         "done": "Fet",
         "apiKeyNameRequired": "El nom de la clau és obligatori",
         "apiKeyCreated": "Clau API \"{{name}}\" creada",
diff --git a/src/ui/locales/translated/cs_CZ.json b/src/ui/locales/translated/cs_CZ.json
index 66767fcb6..e4e91b7a8 100644
--- a/src/ui/locales/translated/cs_CZ.json
+++ b/src/ui/locales/translated/cs_CZ.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Vynutit interaktivní klávesnici",
     "overrideCredentialUsername": "Přepsat uživatelské jméno pro přihlašovací údaje",
     "overrideCredentialUsernameDesc": "Použijte výše uvedené uživatelské jméno místo uživatelského jména z přihlašovacích údajů.",
-    "oidcUsernameHint": "Použijte $external.username k vyplnění jména, pod kterým jste se přihlásili přes SSO nebo LDAP.",
+    "externalUsernameHint": "Použijte $external.username k vyplnění jména, pod kterým jste se přihlásili přes SSO nebo LDAP.",
     "jumpHostChain": "Přejít k hostitelskému řetězci",
     "portKnocking": "Klepnutí na přístav",
     "addKnock": "Přidat port",
@@ -977,7 +977,7 @@
     "noSearchResults": "Vašemu vyhledávání neodpovídají žádná spojení",
     "rename": "Přejmenovat relaci"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Vyžadováno dvoufaktorové ověřování",
     "totpCodeLabel": "Ověřovací kód",
     "totpVerify": "Ověřit",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "Nepodařilo se ověřit resetovací kód",
     "failedCompleteReset": "Obnovení hesla se nepodařilo dokončit",
     "invalidTotpCode": "Neplatný kód TOTP",
-    "failedOidcLogin": "Nepodařilo se spustit externí přihlášení",
-    "silentSigninOidcUnavailable": "Bylo požádáno o tiché přihlášení, ale není nastaveno žádné externí přihlášení.",
+    "failedExternalLogin": "Nepodařilo se spustit externí přihlášení",
+    "silentSigninExternalUnavailable": "Bylo požádáno o tiché přihlášení, ale není nastaveno žádné externí přihlášení.",
     "failedUserInfo": "Po přihlášení se nepodařilo získat informace o uživateli",
-    "oidcAuthFailed": "Externí přihlášení se nezdařilo",
+    "externalAuthFailed": "Externí přihlášení se nezdařilo",
     "invalidAuthUrl": "Z backendu byla přijata neplatná autorizační URL.",
     "requiredField": "Toto pole je povinné",
     "minLength": "Minimální délka je {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "Umožnit novým uživatelům samoregistraci pomocí uživatelského jména a hesla",
     "allowPasswordLogin": "Povolit přihlášení heslem",
     "allowPasswordLoginDesc": "Přihlášení pomocí uživatelského jména/hesla",
-    "oidcAutoProvision": "Automatické vytváření externích účtů",
-    "oidcAutoProvisionDesc": "Vytvořte účet při prvním přihlášení uživatele pomocí externího přihlašovacího systému, jako je SSO nebo LDAP, a to i v případě, že je registrace vypnutá.",
+    "externalAutoProvision": "Automatické vytváření externích účtů",
+    "externalAutoProvisionDesc": "Vytvořte účet při prvním přihlášení uživatele pomocí externího přihlašovacího systému, jako je SSO nebo LDAP, a to i v případě, že je registrace vypnutá.",
     "secondFactorAfterExternalLogin": "Požadovat druhý faktor po externích přihlášeních (SSO, GitHub, Google, LDAP)",
     "secondFactorAfterExternalLoginDesc": "Pokud je vypnuto, je zaregistrovaný druhý faktor vyžadován pouze po zadání hesla a dalších lokálních přihlášeních, stejně jako dříve. Pokud je zapnuto, je vyžadován po každé metodě přihlášení, včetně SSO a LDAP.",
     "allowPasswordReset": "Povolit resetování hesla",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Bez expirace",
     "revokedBadge": "ZRUŠENO",
     "authTypeDual": "Duální ověřování",
-    "authTypeOidc": "Externí",
+    "authTypeExternal": "Externí",
     "authTypeLocal": "Místní",
     "adminStatusAdministrator": "Správce",
     "adminStatusRegularUser": "Běžný uživatel",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Povolit externí přihlášení i přihlášení pomocí hesla",
     "linkAccountTargetUsername": "Uživatelské jméno lokálního účtu",
     "linkAccountTargetPlaceholder": "Zadejte uživatelské jméno místního účtu, ke kterému chcete připojit",
-    "linkAccountOidcUsername": "Uživatelské jméno externího účtu",
-    "linkAccountOidcPlaceholder": "Zadejte uživatelské jméno externího účtu, který chcete sloučit",
-    "linkAccountOidcNotFound": "S tímto uživatelským jménem nebyl nalezen žádný externí účet.",
+    "linkAccountExternalUsername": "Uživatelské jméno externího účtu",
+    "linkAccountExternalPlaceholder": "Zadejte uživatelské jméno externího účtu, který chcete sloučit",
+    "linkAccountExternalNotFound": "S tímto uživatelským jménem nebyl nalezen žádný externí účet.",
     "linkAccounts": "Propojit účty",
     "linkAccountSuccess": "Účty byly úspěšně propojeny",
     "linkAccountFailed": "Propojení účtů se nezdařilo",
@@ -1400,7 +1400,6 @@
     "saving": "Ukládání...",
     "updateRegistrationFailed": "Nepodařilo se aktualizovat nastavení registrace",
     "updatePasswordLoginFailed": "Nepodařilo se aktualizovat nastavení přihlašovacího hesla",
-    "updateOidcAutoProvisionFailed": "Nepodařilo se aktualizovat nastavení automatického vytváření",
     "updateSecondFactorAfterExternalLoginFailed": "Nepodařilo se aktualizovat nastavení druhého faktoru",
     "updatePasswordResetFailed": "Nastavení resetování hesla se nepodařilo aktualizovat",
     "sessionTimeoutRange2": "Časový limit relace musí být mezi 1 a 720 hodinami.",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "ZAMČENO",
     "dataLockedNotice": "Data uživatele {{username}}zůstanou uzamčena až do jeho dalšího přihlášení. Do té doby nelze jeho hostitele, přihlašovací údaje a úryvky zobrazit ani upravovat.",
     "resetPasswordTitle": "Obnovit heslo",
-    "resetPasswordOidcOnly": "Tento uživatel se přihlašuje přes externího poskytovatele a nemá heslo.",
+    "resetPasswordExternalOnly": "Tento uživatel se přihlašuje přes externího poskytovatele a nemá heslo.",
     "resetPasswordPlaceholder": "Nové heslo",
     "resetPasswordBtn": "Obnovit",
     "resetPasswordWorking": "Resetování...",
@@ -1742,7 +1741,7 @@
         "importFailed": "Import se nezdařil: {{error}}",
         "roleUser": "Uživatel",
         "authMethodDual": "Duální ověřování",
-        "authMethodOidc": "Externí",
+        "authMethodExternal": "Externí",
         "done": "Hotovo",
         "apiKeyNameRequired": "Název klíče je povinný",
         "apiKeyCreated": "Klíč API „{{name}}“ byl vytvořen",
diff --git a/src/ui/locales/translated/da_DK.json b/src/ui/locales/translated/da_DK.json
index 2927b76ad..f50257ffd 100644
--- a/src/ui/locales/translated/da_DK.json
+++ b/src/ui/locales/translated/da_DK.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Tving tastaturinteraktivt",
     "overrideCredentialUsername": "Tilsidesæt brugernavn til legitimationsoplysninger",
     "overrideCredentialUsernameDesc": "Brug det ovenfor angivne brugernavn i stedet for legitimationsoplysningernes brugernavn",
-    "oidcUsernameHint": "Brug $external.username til at udfylde det navn, du loggede ind med via SSO eller LDAP.",
+    "externalUsernameHint": "Brug $external.username til at udfylde det navn, du loggede ind med via SSO eller LDAP.",
     "jumpHostChain": "Jump Host Chain",
     "portKnocking": "Port Knocking",
     "addKnock": "Tilføj port",
@@ -977,7 +977,7 @@
     "noSearchResults": "Ingen forbindelser matcher din søgning",
     "rename": "Omdøb session"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Tofaktorgodkendelse påkrævet",
     "totpCodeLabel": "Bekræftelseskode",
     "totpVerify": "Verificere",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "Kunne ikke bekræfte nulstillingskoden",
     "failedCompleteReset": "Nulstilling af adgangskode mislykkedes",
     "invalidTotpCode": "Ugyldig TOTP-kode",
-    "failedOidcLogin": "Kunne ikke starte ekstern login",
-    "silentSigninOidcUnavailable": "Der blev anmodet om lydløs login, men der er ikke konfigureret ekstern login.",
+    "failedExternalLogin": "Kunne ikke starte ekstern login",
+    "silentSigninExternalUnavailable": "Der blev anmodet om lydløs login, men der er ikke konfigureret ekstern login.",
     "failedUserInfo": "Kunne ikke hente brugeroplysninger efter login",
-    "oidcAuthFailed": "Ekstern login mislykkedes",
+    "externalAuthFailed": "Ekstern login mislykkedes",
     "invalidAuthUrl": "Ugyldig godkendelses-URL modtaget fra backend",
     "requiredField": "Dette felt er påkrævet",
     "minLength": "Minimumslængden er {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "Lad nye brugere selv registrere sig med brugernavn og adgangskode",
     "allowPasswordLogin": "Tillad adgangskodelogin",
     "allowPasswordLoginDesc": "Brugernavn/adgangskode til login",
-    "oidcAutoProvision": "Opret eksterne konti automatisk",
-    "oidcAutoProvisionDesc": "Opret en konto første gang nogen logger ind via et eksternt login, f.eks. SSO eller LDAP, selv når registrering er slået fra.",
+    "externalAutoProvision": "Opret eksterne konti automatisk",
+    "externalAutoProvisionDesc": "Opret en konto første gang nogen logger ind via et eksternt login, f.eks. SSO eller LDAP, selv når registrering er slået fra.",
     "secondFactorAfterExternalLogin": "Bed om en anden faktor efter eksterne logins (SSO, GitHub, Google, LDAP)",
     "secondFactorAfterExternalLoginDesc": "Fra, en tilmeldt sekundær faktor bliver kun bedt om efter adgangskode og andre lokale logins, ligesom før. Til, bliver bedt om den efter hver loginmetode, inklusive SSO og LDAP.",
     "allowPasswordReset": "Tillad nulstilling af adgangskode",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Ingen udløbsdato",
     "revokedBadge": "TILBAGETAGET",
     "authTypeDual": "Dobbeltgodkendelse",
-    "authTypeOidc": "Ekstern",
+    "authTypeExternal": "Ekstern",
     "authTypeLocal": "Lokal",
     "adminStatusAdministrator": "Administrator",
     "adminStatusRegularUser": "Almindelig bruger",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Tillad både ekstern login og login med adgangskode",
     "linkAccountTargetUsername": "Brugernavn for lokal konto",
     "linkAccountTargetPlaceholder": "Indtast brugernavnet på den lokale konto, der skal linkes til",
-    "linkAccountOidcUsername": "Brugernavn til ekstern konto",
-    "linkAccountOidcPlaceholder": "Indtast brugernavnet til den eksterne konto, der skal flettes ind",
-    "linkAccountOidcNotFound": "Ingen ekstern konto fundet med det brugernavn",
+    "linkAccountExternalUsername": "Brugernavn til ekstern konto",
+    "linkAccountExternalPlaceholder": "Indtast brugernavnet til den eksterne konto, der skal flettes ind",
+    "linkAccountExternalNotFound": "Ingen ekstern konto fundet med det brugernavn",
     "linkAccounts": "Tilknyt konti",
     "linkAccountSuccess": "Konti er blevet linket",
     "linkAccountFailed": "Kunne ikke linke konti",
@@ -1400,7 +1400,6 @@
     "saving": "Gemmer...",
     "updateRegistrationFailed": "Kunne ikke opdatere registreringsindstillingerne",
     "updatePasswordLoginFailed": "Kunne ikke opdatere adgangskodeindstillingen for login",
-    "updateOidcAutoProvisionFailed": "Kunne ikke opdatere indstillingen for automatisk oprettelse",
     "updateSecondFactorAfterExternalLoginFailed": "Kunne ikke opdatere indstillingen for anden faktor",
     "updatePasswordResetFailed": "Indstillingen for nulstilling af adgangskode kunne ikke opdateres",
     "sessionTimeoutRange2": "Sessionstimeout skal være mellem 1 og 720 timer",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "LÅST",
     "dataLockedNotice": "{{username}}s data forbliver låst, indtil de logger ind næste gang. Deres værter, legitimationsoplysninger og kodestykker kan ikke ses eller redigeres indtil da.",
     "resetPasswordTitle": "Nulstil adgangskode",
-    "resetPasswordOidcOnly": "Denne bruger logger ind via en ekstern udbyder og har ingen adgangskode.",
+    "resetPasswordExternalOnly": "Denne bruger logger ind via en ekstern udbyder og har ingen adgangskode.",
     "resetPasswordPlaceholder": "Ny adgangskode",
     "resetPasswordBtn": "Nulstil",
     "resetPasswordWorking": "Nulstiller...",
@@ -1742,7 +1741,7 @@
         "importFailed": "Import mislykkedes: {{error}}",
         "roleUser": "Bruger",
         "authMethodDual": "Dobbeltgodkendelse",
-        "authMethodOidc": "Ekstern",
+        "authMethodExternal": "Ekstern",
         "done": "Færdig",
         "apiKeyNameRequired": "Nøglenavn er påkrævet",
         "apiKeyCreated": "API-nøglen \"{{name}}\" blev oprettet",
diff --git a/src/ui/locales/translated/de_DE.json b/src/ui/locales/translated/de_DE.json
index 5345b8b46..f0373a6c5 100644
--- a/src/ui/locales/translated/de_DE.json
+++ b/src/ui/locales/translated/de_DE.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Keyboard-Interactive erzwingen",
     "overrideCredentialUsername": "Benutzernamen der Anmeldeinformationen überschreiben",
     "overrideCredentialUsernameDesc": "Den oben angegebenen Benutzernamen anstelle des Benutzernamens der Anmeldeinformationen verwenden",
-    "oidcUsernameHint": "Verwenden Sie $external.username, um den Namen einzufügen, mit dem Sie sich über SSO oder LDAP angemeldet haben.",
+    "externalUsernameHint": "Verwenden Sie $external.username, um den Namen einzufügen, mit dem Sie sich über SSO oder LDAP angemeldet haben.",
     "jumpHostChain": "Jump-Host-Kette",
     "portKnocking": "Port-Knocking",
     "addKnock": "Port hinzufügen",
@@ -977,7 +977,7 @@
     "noSearchResults": "Keine Verbindungen entsprechen Ihrer Suche",
     "rename": "Sitzung umbenennen"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Zwei-Faktor-Authentifizierung erforderlich",
     "totpCodeLabel": "Verifizierungscode",
     "totpVerify": "Verifizieren",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "Bestätigungscode konnte nicht überprüft werden",
     "failedCompleteReset": "Passwort-Zurücksetzung konnte nicht abgeschlossen werden",
     "invalidTotpCode": "Ungültiger TOTP-Code",
-    "failedOidcLogin": "Externe Anmeldung konnte nicht gestartet werden",
-    "silentSigninOidcUnavailable": "Es wurde eine stille Anmeldung angefordert, aber es ist keine externe Anmeldung eingerichtet.",
+    "failedExternalLogin": "Externe Anmeldung konnte nicht gestartet werden",
+    "silentSigninExternalUnavailable": "Es wurde eine stille Anmeldung angefordert, aber es ist keine externe Anmeldung eingerichtet.",
     "failedUserInfo": "Benutzerinfo nach Anmeldung konnte nicht abgerufen werden",
-    "oidcAuthFailed": "Externe Anmeldung fehlgeschlagen",
+    "externalAuthFailed": "Externe Anmeldung fehlgeschlagen",
     "invalidAuthUrl": "Ungültige Autorisierungs-URL vom Backend erhalten",
     "requiredField": "Dieses Feld ist erforderlich",
     "minLength": "Mindestlänge ist {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "Neuen Benutzern die Selbstregistrierung mit Benutzernamen und Passwort erlauben",
     "allowPasswordLogin": "Passwort-Login erlauben",
     "allowPasswordLoginDesc": "Login mit Benutzernamen/Passwort",
-    "oidcAutoProvision": "Automatische Erstellung externer Konten",
-    "oidcAutoProvisionDesc": "Erstellen Sie ein Konto, sobald sich jemand zum ersten Mal über einen externen Login wie SSO oder LDAP anmeldet, auch wenn die Registrierung deaktiviert ist.",
+    "externalAutoProvision": "Automatische Erstellung externer Konten",
+    "externalAutoProvisionDesc": "Erstellen Sie ein Konto, sobald sich jemand zum ersten Mal über einen externen Login wie SSO oder LDAP anmeldet, auch wenn die Registrierung deaktiviert ist.",
     "secondFactorAfterExternalLogin": "Fordern Sie nach externen Anmeldungen (SSO, GitHub, Google, LDAP) einen zweiten Faktor an.",
     "secondFactorAfterExternalLoginDesc": "Ist die Zwei-Faktor-Authentifizierung deaktiviert, wird sie wie bisher nur nach dem Passwort und anderen lokalen Anmeldungen abgefragt. Ist sie aktiviert, wird sie nach jeder Anmeldemethode abgefragt, einschließlich SSO und LDAP.",
     "allowPasswordReset": "Passwort-Zurücksetzen erlauben",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Kein Ablauf",
     "revokedBadge": "WIDERRUFEN",
     "authTypeDual": "Duale Authentifizierung",
-    "authTypeOidc": "Extern",
+    "authTypeExternal": "Extern",
     "authTypeLocal": "Lokal",
     "adminStatusAdministrator": "Administrator",
     "adminStatusRegularUser": "Normaler Benutzer",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Sowohl externe Anmeldung als auch Anmeldung mit Passwort zulassen",
     "linkAccountTargetUsername": "Benutzername des lokalen Kontos",
     "linkAccountTargetPlaceholder": "Geben Sie den Benutzernamen des lokalen Kontos ein, mit dem verknüpft werden soll",
-    "linkAccountOidcUsername": "Benutzername des externen Kontos",
-    "linkAccountOidcPlaceholder": "Geben Sie den Benutzernamen des externen Kontos ein, das zusammengeführt werden soll.",
-    "linkAccountOidcNotFound": "Es wurde kein externes Konto mit diesem Benutzernamen gefunden.",
+    "linkAccountExternalUsername": "Benutzername des externen Kontos",
+    "linkAccountExternalPlaceholder": "Geben Sie den Benutzernamen des externen Kontos ein, das zusammengeführt werden soll.",
+    "linkAccountExternalNotFound": "Es wurde kein externes Konto mit diesem Benutzernamen gefunden.",
     "linkAccounts": "Konten verknüpfen",
     "linkAccountSuccess": "Konten erfolgreich verknüpft",
     "linkAccountFailed": "Fehler beim Verknüpfen der Konten",
@@ -1400,7 +1400,6 @@
     "saving": "Speichern...",
     "updateRegistrationFailed": "Fehler beim Aktualisieren der Registrierungseinstellung",
     "updatePasswordLoginFailed": "Fehler beim Aktualisieren der Passwort-Anmeldeeinstellung",
-    "updateOidcAutoProvisionFailed": "Die Aktualisierung der Einstellung für die automatische Erstellung ist fehlgeschlagen.",
     "updateSecondFactorAfterExternalLoginFailed": "Zweiter-Faktor-Einstellung konnte nicht aktualisiert werden",
     "updatePasswordResetFailed": "Fehler beim Aktualisieren der Passwort-Zurücksetzen-Einstellung",
     "sessionTimeoutRange2": "Sitzungszeitüberschreitung muss zwischen 1 und 720 Stunden liegen",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "GESPERRT",
     "dataLockedNotice": "{{username}}s Daten bleiben gesperrt, bis die nächste Anmeldung erfolgt. Hosts, Zugangsdaten und Snippets können bis dahin nicht eingesehen oder bearbeitet werden.",
     "resetPasswordTitle": "Passwort zurücksetzen",
-    "resetPasswordOidcOnly": "Dieser Benutzer meldet sich über einen externen Anbieter an und hat kein Passwort.",
+    "resetPasswordExternalOnly": "Dieser Benutzer meldet sich über einen externen Anbieter an und hat kein Passwort.",
     "resetPasswordPlaceholder": "Neues Passwort",
     "resetPasswordBtn": "Zurücksetzen",
     "resetPasswordWorking": "Wird zurückgesetzt...",
@@ -1742,7 +1741,7 @@
         "importFailed": "Import fehlgeschlagen: {{error}}",
         "roleUser": "Benutzer",
         "authMethodDual": "Duale Authentifizierung",
-        "authMethodOidc": "Extern",
+        "authMethodExternal": "Extern",
         "done": "Fertig",
         "apiKeyNameRequired": "Schlüsselname ist erforderlich",
         "apiKeyCreated": "API-Schlüssel \"{{name}}\" erstellt",
diff --git a/src/ui/locales/translated/el_GR.json b/src/ui/locales/translated/el_GR.json
index 4fb516f72..259d5f524 100644
--- a/src/ui/locales/translated/el_GR.json
+++ b/src/ui/locales/translated/el_GR.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Force Keyboard-Interactive",
     "overrideCredentialUsername": "Παράκαμψη ονόματος χρήστη διαπιστευτηρίων",
     "overrideCredentialUsernameDesc": "Χρησιμοποιήστε το όνομα χρήστη που καθορίστηκε παραπάνω αντί για το όνομα χρήστη του πιστοποιητικού",
-    "oidcUsernameHint": "Χρησιμοποιήστε την εντολή $external.username για να συμπληρώσετε το όνομα με το οποίο συνδεθήκατε μέσω SSO ή LDAP.",
+    "externalUsernameHint": "Χρησιμοποιήστε την εντολή $external.username για να συμπληρώσετε το όνομα με το οποίο συνδεθήκατε μέσω SSO ή LDAP.",
     "jumpHostChain": "Αλυσίδα υποδοχής άλματος",
     "portKnocking": "Χτύπημα στο λιμάνι",
     "addKnock": "Προσθήκη θύρας",
@@ -977,7 +977,7 @@
     "noSearchResults": "Δεν υπάρχουν συνδέσεις που να αντιστοιχούν στην αναζήτησή σας",
     "rename": "Μετονομασία συνεδρίας"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Απαιτείται έλεγχος ταυτότητας δύο παραγόντων",
     "totpCodeLabel": "Κωδικός επαλήθευσης",
     "totpVerify": "Επαληθεύω",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "Αποτυχία επαλήθευσης κωδικού επαναφοράς",
     "failedCompleteReset": "Η ολοκλήρωση της επαναφοράς του κωδικού πρόσβασης απέτυχε",
     "invalidTotpCode": "Μη έγκυρος κωδικός TOTP",
-    "failedOidcLogin": "Αποτυχία έναρξης εξωτερικής σύνδεσης",
-    "silentSigninOidcUnavailable": "Ζητήθηκε αθόρυβη σύνδεση, αλλά δεν έχει ρυθμιστεί εξωτερική σύνδεση.",
+    "failedExternalLogin": "Αποτυχία έναρξης εξωτερικής σύνδεσης",
+    "silentSigninExternalUnavailable": "Ζητήθηκε αθόρυβη σύνδεση, αλλά δεν έχει ρυθμιστεί εξωτερική σύνδεση.",
     "failedUserInfo": "Αποτυχία λήψης πληροφοριών χρήστη μετά τη σύνδεση",
-    "oidcAuthFailed": "Η εξωτερική σύνδεση απέτυχε",
+    "externalAuthFailed": "Η εξωτερική σύνδεση απέτυχε",
     "invalidAuthUrl": "Λήψη μη έγκυρης διεύθυνσης URL εξουσιοδότησης από το backend",
     "requiredField": "Αυτό το πεδίο είναι υποχρεωτικό",
     "minLength": "Το ελάχιστο μήκος είναι {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "Επιτρέψτε στους νέους χρήστες να εγγραφούν μόνοι τους με όνομα χρήστη και κωδικό πρόσβασης",
     "allowPasswordLogin": "Επιτρέψτε την είσοδο με κωδικό πρόσβασης",
     "allowPasswordLoginDesc": "Όνομα χρήστη/κωδικός πρόσβασης σύνδεσης",
-    "oidcAutoProvision": "Αυτόματη δημιουργία εξωτερικών λογαριασμών",
-    "oidcAutoProvisionDesc": "Δημιουργήστε έναν λογαριασμό την πρώτη φορά που κάποιος συνδέεται μέσω εξωτερικής σύνδεσης, όπως SSO ή LDAP, ακόμα και όταν η εγγραφή είναι απενεργοποιημένη.",
+    "externalAutoProvision": "Αυτόματη δημιουργία εξωτερικών λογαριασμών",
+    "externalAutoProvisionDesc": "Δημιουργήστε έναν λογαριασμό την πρώτη φορά που κάποιος συνδέεται μέσω εξωτερικής σύνδεσης, όπως SSO ή LDAP, ακόμα και όταν η εγγραφή είναι απενεργοποιημένη.",
     "secondFactorAfterExternalLogin": "Ζητήστε έναν δεύτερο παράγοντα μετά από εξωτερικές συνδέσεις (SSO, GitHub, Google, LDAP)",
     "secondFactorAfterExternalLoginDesc": "Όταν είναι απενεργοποιημένο, ζητείται ένας εγγεγραμμένος δεύτερος παράγοντας μόνο μετά τον κωδικό πρόσβασης και άλλες τοπικές συνδέσεις, όπως και πριν. Όταν είναι ενεργοποιημένο, ζητείται μετά από κάθε μέθοδο σύνδεσης, συμπεριλαμβανομένων των SSO και LDAP.",
     "allowPasswordReset": "Να επιτρέπεται η επαναφορά κωδικού πρόσβασης",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Χωρίς λήξη",
     "revokedBadge": "ΑΝΑΚΛΗΘΗΚΕ",
     "authTypeDual": "Διπλή Εξουσιοδότηση",
-    "authTypeOidc": "Εξωτερικός",
+    "authTypeExternal": "Εξωτερικός",
     "authTypeLocal": "Τοπικός",
     "adminStatusAdministrator": "Διαχειριστής",
     "adminStatusRegularUser": "Τακτικός χρήστης",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Να επιτρέπεται η εξωτερική σύνδεση και η σύνδεση με κωδικό πρόσβασης",
     "linkAccountTargetUsername": "Όνομα χρήστη τοπικού λογαριασμού",
     "linkAccountTargetPlaceholder": "Εισαγάγετε το όνομα χρήστη του τοπικού λογαριασμού για να συνδεθείτε",
-    "linkAccountOidcUsername": "Όνομα χρήστη εξωτερικού λογαριασμού",
-    "linkAccountOidcPlaceholder": "Εισαγάγετε το όνομα χρήστη που προορίζεται μόνο για εξωτερικούς λογαριασμούς για συγχώνευση",
-    "linkAccountOidcNotFound": "Δεν βρέθηκε λογαριασμός μόνο για εξωτερικούς χρήστες με αυτό το όνομα χρήστη",
+    "linkAccountExternalUsername": "Όνομα χρήστη εξωτερικού λογαριασμού",
+    "linkAccountExternalPlaceholder": "Εισαγάγετε το όνομα χρήστη που προορίζεται μόνο για εξωτερικούς λογαριασμούς για συγχώνευση",
+    "linkAccountExternalNotFound": "Δεν βρέθηκε λογαριασμός μόνο για εξωτερικούς χρήστες με αυτό το όνομα χρήστη",
     "linkAccounts": "Σύνδεση λογαριασμών",
     "linkAccountSuccess": "Οι λογαριασμοί συνδέθηκαν με επιτυχία",
     "linkAccountFailed": "Η σύνδεση λογαριασμών απέτυχε",
@@ -1400,7 +1400,6 @@
     "saving": "Οικονομία...",
     "updateRegistrationFailed": "Η ενημέρωση της ρύθμισης εγγραφής απέτυχε",
     "updatePasswordLoginFailed": "Αποτυχία ενημέρωσης ρύθμισης κωδικού πρόσβασης σύνδεσης",
-    "updateOidcAutoProvisionFailed": "Η ενημέρωση της ρύθμισης αυτόματης δημιουργίας απέτυχε",
     "updateSecondFactorAfterExternalLoginFailed": "Αποτυχία ενημέρωσης της ρύθμισης του δεύτερου παράγοντα",
     "updatePasswordResetFailed": "Η ενημέρωση της ρύθμισης επαναφοράς κωδικού πρόσβασης απέτυχε",
     "sessionTimeoutRange2": "Το χρονικό όριο λήξης της περιόδου σύνδεσης πρέπει να είναι μεταξύ 1 και 720 ωρών",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "ΚΛΕΙΔΩΜΕΝΟ",
     "dataLockedNotice": "Τα δεδομένα του χρήστη {{username}}παραμένουν κλειδωμένα μέχρι την επόμενη σύνδεσή τους. Οι κεντρικοί υπολογιστές, τα διαπιστευτήρια και τα αποσπάσματα δεδομένων τους δεν μπορούν να προβληθούν ή να επεξεργαστούν μέχρι τότε.",
     "resetPasswordTitle": "Επαναφορά κωδικού πρόσβασης",
-    "resetPasswordOidcOnly": "Αυτός ο χρήστης συνδέεται μέσω εξωτερικού παρόχου και δεν έχει κωδικό πρόσβασης.",
+    "resetPasswordExternalOnly": "Αυτός ο χρήστης συνδέεται μέσω εξωτερικού παρόχου και δεν έχει κωδικό πρόσβασης.",
     "resetPasswordPlaceholder": "Νέος κωδικός πρόσβασης",
     "resetPasswordBtn": "Επαναφορά",
     "resetPasswordWorking": "Επαναφορά...",
@@ -1742,7 +1741,7 @@
         "importFailed": "Η εισαγωγή απέτυχε: {{error}}",
         "roleUser": "Μεταχειριζόμενος",
         "authMethodDual": "Διπλή Εξουσιοδότηση",
-        "authMethodOidc": "Εξωτερικός",
+        "authMethodExternal": "Εξωτερικός",
         "done": "Γινώμενος",
         "apiKeyNameRequired": "Απαιτείται όνομα κλειδιού",
         "apiKeyCreated": "Κλειδί API \"{{name}}\" δημιουργήθηκε",
diff --git a/src/ui/locales/translated/es_ES.json b/src/ui/locales/translated/es_ES.json
index 61ff23814..ba400a846 100644
--- a/src/ui/locales/translated/es_ES.json
+++ b/src/ui/locales/translated/es_ES.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Forzar autenticación interactiva por teclado",
     "overrideCredentialUsername": "Anular nombre de usuario de la credencial",
     "overrideCredentialUsernameDesc": "Usar el nombre de usuario especificado arriba en lugar del nombre de usuario de la credencial",
-    "oidcUsernameHint": "Utilice $external.username para completar el nombre con el que inició sesión a través de SSO o LDAP.",
+    "externalUsernameHint": "Utilice $external.username para completar el nombre con el que inició sesión a través de SSO o LDAP.",
     "jumpHostChain": "Cadena de hosts de salto",
     "portKnocking": "Port Knocking",
     "addKnock": "Añadir puerto",
@@ -977,7 +977,7 @@
     "noSearchResults": "Ninguna conexión coincide con tu búsqueda",
     "rename": "Renombrar sesión"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Autenticación de dos factores requerida",
     "totpCodeLabel": "Código de verificación",
     "totpVerify": "Verificar",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "Error al verificar el código de restablecimiento",
     "failedCompleteReset": "Error al completar el restablecimiento de contraseña",
     "invalidTotpCode": "Código TOTP no válido",
-    "failedOidcLogin": "No se pudo iniciar el inicio de sesión externo.",
-    "silentSigninOidcUnavailable": "Se solicitó el inicio de sesión silencioso, pero no hay ningún inicio de sesión externo configurado.",
+    "failedExternalLogin": "No se pudo iniciar el inicio de sesión externo.",
+    "silentSigninExternalUnavailable": "Se solicitó el inicio de sesión silencioso, pero no hay ningún inicio de sesión externo configurado.",
     "failedUserInfo": "Error al obtener la información del usuario después del inicio de sesión",
-    "oidcAuthFailed": "Falló el inicio de sesión externo",
+    "externalAuthFailed": "Falló el inicio de sesión externo",
     "invalidAuthUrl": "URL de autorización no válida recibida del backend",
     "requiredField": "Este campo es obligatorio",
     "minLength": "La longitud mínima es {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "Permite a los nuevos usuarios registrarse con un nombre de usuario y contraseña",
     "allowPasswordLogin": "Permitir inicio de sesión con contraseña",
     "allowPasswordLoginDesc": "Inicio de sesión con usuario/contraseña",
-    "oidcAutoProvision": "Crear automáticamente cuentas externas",
-    "oidcAutoProvisionDesc": "Crea una cuenta la primera vez que alguien inicie sesión a través de un inicio de sesión externo como SSO o LDAP, incluso cuando el registro esté desactivado.",
+    "externalAutoProvision": "Crear automáticamente cuentas externas",
+    "externalAutoProvisionDesc": "Crea una cuenta la primera vez que alguien inicie sesión a través de un inicio de sesión externo como SSO o LDAP, incluso cuando el registro esté desactivado.",
     "secondFactorAfterExternalLogin": "Solicita un segundo factor de autenticación después de los inicios de sesión externos (SSO, GitHub, Google, LDAP).",
     "secondFactorAfterExternalLoginDesc": "Desactivado, el segundo factor registrado solo se solicita después de la contraseña y otros inicios de sesión locales, igual que antes. Activado, se solicita después de cada método de inicio de sesión, incluidos SSO y LDAP.",
     "allowPasswordReset": "Permitir restablecimiento de contraseña",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Sin caducidad",
     "revokedBadge": "REVOCADA",
     "authTypeDual": "Autenticación dual",
-    "authTypeOidc": "Externo",
+    "authTypeExternal": "Externo",
     "authTypeLocal": "Local",
     "adminStatusAdministrator": "Administrador",
     "adminStatusRegularUser": "Usuario normal",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Permitir tanto el inicio de sesión externo como el inicio de sesión mediante contraseña.",
     "linkAccountTargetUsername": "Nombre de usuario de la cuenta local",
     "linkAccountTargetPlaceholder": "Introduzca el nombre de usuario de la cuenta local a vincular",
-    "linkAccountOidcUsername": "Nombre de usuario de cuenta externa",
-    "linkAccountOidcPlaceholder": "Ingrese el nombre de usuario de la cuenta externa para fusionarla",
-    "linkAccountOidcNotFound": "No se encontró ninguna cuenta externa con ese nombre de usuario.",
+    "linkAccountExternalUsername": "Nombre de usuario de cuenta externa",
+    "linkAccountExternalPlaceholder": "Ingrese el nombre de usuario de la cuenta externa para fusionarla",
+    "linkAccountExternalNotFound": "No se encontró ninguna cuenta externa con ese nombre de usuario.",
     "linkAccounts": "Vincular cuentas",
     "linkAccountSuccess": "Cuentas vinculadas correctamente",
     "linkAccountFailed": "Error al vincular cuentas",
@@ -1400,7 +1400,6 @@
     "saving": "Guardando...",
     "updateRegistrationFailed": "Error al actualizar la configuración de registro",
     "updatePasswordLoginFailed": "Error al actualizar la configuración de inicio de sesión por contraseña",
-    "updateOidcAutoProvisionFailed": "No se pudo actualizar la configuración de creación automática.",
     "updateSecondFactorAfterExternalLoginFailed": "No se pudo actualizar la configuración del segundo factor.",
     "updatePasswordResetFailed": "Error al actualizar la configuración de restablecimiento de contraseña",
     "sessionTimeoutRange2": "El tiempo de espera de sesión debe estar entre 1 y 720 horas",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "BLOQUEADO",
     "dataLockedNotice": "Los datos de {{username}} permanecen bloqueados hasta que inicien sesión de nuevo. Sus hosts, credenciales y fragmentos no se pueden ver ni editar hasta entonces.",
     "resetPasswordTitle": "Restablecer contraseña",
-    "resetPasswordOidcOnly": "Este usuario inicia sesión a través de un proveedor externo y no tiene contraseña.",
+    "resetPasswordExternalOnly": "Este usuario inicia sesión a través de un proveedor externo y no tiene contraseña.",
     "resetPasswordPlaceholder": "Nueva contraseña",
     "resetPasswordBtn": "Restablecer",
     "resetPasswordWorking": "Restableciendo...",
@@ -1742,7 +1741,7 @@
         "importFailed": "Error al importar: {{error}}",
         "roleUser": "Usuario",
         "authMethodDual": "Autenticación dual",
-        "authMethodOidc": "Externo",
+        "authMethodExternal": "Externo",
         "done": "Listo",
         "apiKeyNameRequired": "El nombre de la clave es obligatorio",
         "apiKeyCreated": "Clave API \"{{name}}\" creada",
diff --git a/src/ui/locales/translated/fi_FI.json b/src/ui/locales/translated/fi_FI.json
index 50c4f0e29..e59bda280 100644
--- a/src/ui/locales/translated/fi_FI.json
+++ b/src/ui/locales/translated/fi_FI.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Pakota näppäimistöinteraktiivinen",
     "overrideCredentialUsername": "Ohita tunnistetiedot Käyttäjätunnus",
     "overrideCredentialUsernameDesc": "Käytä yllä määritettyä käyttäjätunnusta tunnistetiedon käyttäjätunnuksen sijaan.",
-    "oidcUsernameHint": "Käytä muotoa $external.username täyttääksesi nimen, jolla kirjauduit sisään SSO:n tai LDAP:n kautta.",
+    "externalUsernameHint": "Käytä muotoa $external.username täyttääksesi nimen, jolla kirjauduit sisään SSO:n tai LDAP:n kautta.",
     "jumpHostChain": "Hyppyisäntäketju",
     "portKnocking": "Portin koputus",
     "addKnock": "Lisää portti",
@@ -977,7 +977,7 @@
     "noSearchResults": "Ei hakuasi vastaavia yhteyksiä",
     "rename": "Nimeä istunto uudelleen"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Kaksivaiheinen todennus vaaditaan",
     "totpCodeLabel": "Vahvistuskoodi",
     "totpVerify": "Vahvista",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "Nollauskoodin vahvistaminen epäonnistui",
     "failedCompleteReset": "Salasanan vaihtaminen epäonnistui",
     "invalidTotpCode": "Virheellinen TOTP-koodi",
-    "failedOidcLogin": "Ulkoisen kirjautumisen aloittaminen epäonnistui",
-    "silentSigninOidcUnavailable": "Hiljaista kirjautumista pyydettiin, mutta ulkoista kirjautumista ei ole määritetty.",
+    "failedExternalLogin": "Ulkoisen kirjautumisen aloittaminen epäonnistui",
+    "silentSigninExternalUnavailable": "Hiljaista kirjautumista pyydettiin, mutta ulkoista kirjautumista ei ole määritetty.",
     "failedUserInfo": "Käyttäjätietojen hakeminen epäonnistui kirjautumisen jälkeen",
-    "oidcAuthFailed": "Ulkoinen kirjautuminen epäonnistui",
+    "externalAuthFailed": "Ulkoinen kirjautuminen epäonnistui",
     "invalidAuthUrl": "Virheellinen valtuutus-URL-osoite vastaanotettu taustajärjestelmästä",
     "requiredField": "Tämä kenttä on pakollinen",
     "minLength": "Minimipituus on {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "Anna uusien käyttäjien rekisteröityä itse käyttäjätunnuksella ja salasanalla",
     "allowPasswordLogin": "Salli salasanalla kirjautuminen",
     "allowPasswordLoginDesc": "Käyttäjätunnus/salasana kirjautuminen",
-    "oidcAutoProvision": "Luo ulkoiset tilit automaattisesti",
-    "oidcAutoProvisionDesc": "Luo tili, kun joku kirjautuu sisään ensimmäisen kerran ulkoisella kirjautumisella, kuten SSO:lla tai LDAP:lla, vaikka rekisteröinti olisi pois päältä.",
+    "externalAutoProvision": "Luo ulkoiset tilit automaattisesti",
+    "externalAutoProvisionDesc": "Luo tili, kun joku kirjautuu sisään ensimmäisen kerran ulkoisella kirjautumisella, kuten SSO:lla tai LDAP:lla, vaikka rekisteröinti olisi pois päältä.",
     "secondFactorAfterExternalLogin": "Kysy toista kirjautumistekijää ulkoisten kirjautumisten (SSO, GitHub, Google, LDAP) jälkeen",
     "secondFactorAfterExternalLoginDesc": "Pois päältä -tilassa rekisteröityä toista kirjautumistapaa kysytään vain salasanan ja muiden paikallisten kirjautumisten jälkeen, kuten aiemmin. Päällä -tilassa sitä kysytään jokaisen kirjautumistavan, mukaan lukien kertakirjautumisen ja LDAP:n, jälkeen.",
     "allowPasswordReset": "Salli salasanan palautus",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Ei vanhenemista",
     "revokedBadge": "PERUTTU",
     "authTypeDual": "Kaksoistutkimus",
-    "authTypeOidc": "Ulkoinen",
+    "authTypeExternal": "Ulkoinen",
     "authTypeLocal": "Paikallinen",
     "adminStatusAdministrator": "Ylläpitäjä",
     "adminStatusRegularUser": "Tavallinen käyttäjä",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Salli sekä ulkoinen että salasanalla kirjautuminen",
     "linkAccountTargetUsername": "Paikallisen tilin käyttäjätunnus",
     "linkAccountTargetPlaceholder": "Anna paikallisen tilin käyttäjätunnus, johon linkitetään",
-    "linkAccountOidcUsername": "Ulkoisen tilin käyttäjätunnus",
-    "linkAccountOidcPlaceholder": "Anna yhdistettävän ulkoisen tilin käyttäjätunnus",
-    "linkAccountOidcNotFound": "Käyttäjätunnuksella ei löytynyt ulkoista tiliä.",
+    "linkAccountExternalUsername": "Ulkoisen tilin käyttäjätunnus",
+    "linkAccountExternalPlaceholder": "Anna yhdistettävän ulkoisen tilin käyttäjätunnus",
+    "linkAccountExternalNotFound": "Käyttäjätunnuksella ei löytynyt ulkoista tiliä.",
     "linkAccounts": "Linkitä tilit",
     "linkAccountSuccess": "Tilit linkitetty onnistuneesti",
     "linkAccountFailed": "Tilien linkittäminen epäonnistui",
@@ -1400,7 +1400,6 @@
     "saving": "Tallennetaan...",
     "updateRegistrationFailed": "Rekisteröintiasetuksen päivittäminen epäonnistui",
     "updatePasswordLoginFailed": "Salasanan kirjautumisasetusten päivittäminen epäonnistui",
-    "updateOidcAutoProvisionFailed": "Automaattisen luomisen asetuksen päivittäminen epäonnistui",
     "updateSecondFactorAfterExternalLoginFailed": "Toisen vaiheen asetuksen päivittäminen epäonnistui",
     "updatePasswordResetFailed": "Salasanan palautusasetuksen päivittäminen epäonnistui",
     "sessionTimeoutRange2": "Istunnon aikakatkaisun on oltava 1–720 tuntia",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "LUKITTU",
     "dataLockedNotice": "{{username}}:n tiedot pysyvät lukittuina, kunnes he kirjautuvat sisään seuraavalla kerralla. Heidän palvelimiaan, tunnistetietojaan ja koodinpätkiään ei voida tarkastella tai muokata ennen sitä.",
     "resetPasswordTitle": "Palauta salasana",
-    "resetPasswordOidcOnly": "Tämä käyttäjä kirjautuu sisään ulkoisen palveluntarjoajan kautta eikä hänellä ole salasanaa.",
+    "resetPasswordExternalOnly": "Tämä käyttäjä kirjautuu sisään ulkoisen palveluntarjoajan kautta eikä hänellä ole salasanaa.",
     "resetPasswordPlaceholder": "Uusi salasana",
     "resetPasswordBtn": "Nollaa",
     "resetPasswordWorking": "Nollataan...",
@@ -1742,7 +1741,7 @@
         "importFailed": "Tuonti epäonnistui: {{error}}",
         "roleUser": "Käyttäjä",
         "authMethodDual": "Kaksoistutkimus",
-        "authMethodOidc": "Ulkoinen",
+        "authMethodExternal": "Ulkoinen",
         "done": "Tehty",
         "apiKeyNameRequired": "Avaimen nimi on pakollinen",
         "apiKeyCreated": "API-avain \"{{name}}\" luotu",
diff --git a/src/ui/locales/translated/fr_FR.json b/src/ui/locales/translated/fr_FR.json
index ae29f6389..f4b22f329 100644
--- a/src/ui/locales/translated/fr_FR.json
+++ b/src/ui/locales/translated/fr_FR.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Forcer Keyboard-Interactive",
     "overrideCredentialUsername": "Remplacer le nom d'utilisateur des identifiants",
     "overrideCredentialUsernameDesc": "Utiliser le nom d'utilisateur spécifié ci-dessus au lieu de celui des identifiants",
-    "oidcUsernameHint": "Utilisez $external.username pour renseigner le nom avec lequel vous vous êtes connecté via SSO ou LDAP.",
+    "externalUsernameHint": "Utilisez $external.username pour renseigner le nom avec lequel vous vous êtes connecté via SSO ou LDAP.",
     "jumpHostChain": "Chaîne de Jump Hosts",
     "portKnocking": "Port Knocking",
     "addKnock": "Ajouter un port",
@@ -977,7 +977,7 @@
     "noSearchResults": "Aucune connexion ne correspond à votre recherche",
     "rename": "Renommer la session"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Authentification à deux facteurs requise",
     "totpCodeLabel": "Code de vérification",
     "totpVerify": "Vérifier",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "Échec de la vérification du code de réinitialisation",
     "failedCompleteReset": "Échec de la finalisation de la réinitialisation du mot de passe",
     "invalidTotpCode": "Code TOTP invalide",
-    "failedOidcLogin": "Échec de la connexion externe",
-    "silentSigninOidcUnavailable": "Une connexion silencieuse a été demandée, mais aucune connexion externe n'est configurée.",
+    "failedExternalLogin": "Échec de la connexion externe",
+    "silentSigninExternalUnavailable": "Une connexion silencieuse a été demandée, mais aucune connexion externe n'est configurée.",
     "failedUserInfo": "Échec de la récupération des informations utilisateur après la connexion",
-    "oidcAuthFailed": "Échec de la connexion externe",
+    "externalAuthFailed": "Échec de la connexion externe",
     "invalidAuthUrl": "URL d'autorisation invalide reçue du backend",
     "requiredField": "Ce champ est obligatoire",
     "minLength": "La longueur minimale est de {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "Permettre aux nouveaux utilisateurs de s'enregistrer avec un nom d'utilisateur et un mot de passe",
     "allowPasswordLogin": "Autoriser la connexion par mot de passe",
     "allowPasswordLoginDesc": "Connexion par nom d'utilisateur/mot de passe",
-    "oidcAutoProvision": "Création automatique de comptes externes",
-    "oidcAutoProvisionDesc": "Créer un compte lors de la première connexion via une authentification externe telle que SSO ou LDAP, même si l'inscription est désactivée.",
+    "externalAutoProvision": "Création automatique de comptes externes",
+    "externalAutoProvisionDesc": "Créer un compte lors de la première connexion via une authentification externe telle que SSO ou LDAP, même si l'inscription est désactivée.",
     "secondFactorAfterExternalLogin": "Demander une authentification à deux facteurs après les connexions externes (SSO, GitHub, Google, LDAP).",
     "secondFactorAfterExternalLoginDesc": "Désactivé, le second facteur d'authentification n'est demandé qu'après la saisie du mot de passe et les autres connexions locales, comme auparavant. Activé, il est demandé après chaque méthode de connexion, y compris l'authentification unique (SSO) et LDAP.",
     "allowPasswordReset": "Autoriser la réinitialisation du mot de passe",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Aucune expiration",
     "revokedBadge": "RÉVOQUÉE",
     "authTypeDual": "Authentification double",
-    "authTypeOidc": "Externe",
+    "authTypeExternal": "Externe",
     "authTypeLocal": "Locale",
     "adminStatusAdministrator": "Administrateur",
     "adminStatusRegularUser": "Utilisateur standard",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Autoriser la connexion externe et par mot de passe",
     "linkAccountTargetUsername": "Nom d'utilisateur du compte local",
     "linkAccountTargetPlaceholder": "Saisissez le nom d'utilisateur du compte local à lier",
-    "linkAccountOidcUsername": "Nom d'utilisateur du compte externe",
-    "linkAccountOidcPlaceholder": "Saisissez le nom d'utilisateur du compte externe uniquement à fusionner.",
-    "linkAccountOidcNotFound": "Aucun compte externe n'a été trouvé avec ce nom d'utilisateur.",
+    "linkAccountExternalUsername": "Nom d'utilisateur du compte externe",
+    "linkAccountExternalPlaceholder": "Saisissez le nom d'utilisateur du compte externe uniquement à fusionner.",
+    "linkAccountExternalNotFound": "Aucun compte externe n'a été trouvé avec ce nom d'utilisateur.",
     "linkAccounts": "Lier les comptes",
     "linkAccountSuccess": "Comptes liés avec succès",
     "linkAccountFailed": "Échec de la liaison des comptes",
@@ -1400,7 +1400,6 @@
     "saving": "Enregistrement…",
     "updateRegistrationFailed": "Échec de la mise à jour du paramètre d'enregistrement",
     "updatePasswordLoginFailed": "Échec de la mise à jour du paramètre de connexion par mot de passe",
-    "updateOidcAutoProvisionFailed": "Échec de la mise à jour du paramètre de création automatique",
     "updateSecondFactorAfterExternalLoginFailed": "Échec de la mise à jour du paramètre de deuxième facteur",
     "updatePasswordResetFailed": "Échec de la mise à jour du paramètre de réinitialisation du mot de passe",
     "sessionTimeoutRange2": "Le délai d'expiration de session doit être compris entre 1 et 720 heures",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "VERROUILLÉ",
     "dataLockedNotice": "Les données de {{username}} restent verrouillées jusqu'à leur prochaine connexion. Leurs hôtes, identifiants et extraits ne peuvent être consultés ni modifiés d'ici là.",
     "resetPasswordTitle": "Réinitialiser le mot de passe",
-    "resetPasswordOidcOnly": "Cet utilisateur se connecte via un fournisseur externe et n'a pas de mot de passe.",
+    "resetPasswordExternalOnly": "Cet utilisateur se connecte via un fournisseur externe et n'a pas de mot de passe.",
     "resetPasswordPlaceholder": "Nouveau mot de passe",
     "resetPasswordBtn": "Réinitialiser",
     "resetPasswordWorking": "Réinitialisation en cours...",
@@ -1742,7 +1741,7 @@
         "importFailed": "Échec de l'importation : {{error}}",
         "roleUser": "Utilisateur",
         "authMethodDual": "Authentification double",
-        "authMethodOidc": "Externe",
+        "authMethodExternal": "Externe",
         "done": "Terminé",
         "apiKeyNameRequired": "Le nom de la clé est requis",
         "apiKeyCreated": "Clé API \"{{name}}\" créée",
diff --git a/src/ui/locales/translated/he_IL.json b/src/ui/locales/translated/he_IL.json
index d96e0fe03..eac4a7653 100644
--- a/src/ui/locales/translated/he_IL.json
+++ b/src/ui/locales/translated/he_IL.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "כפיית מקלדת אינטראקטיבית",
     "overrideCredentialUsername": "עקיפת שם משתמש של פרטי כניסה",
     "overrideCredentialUsernameDesc": "השתמש בשם המשתמש שצוין למעלה במקום שם המשתמש של פרטי האישור",
-    "oidcUsernameHint": "השתמשו ב- $external.username כדי למלא את השם שאיתו נכנסתם דרך SSO או LDAP.",
+    "externalUsernameHint": "השתמשו ב- $external.username כדי למלא את השם שאיתו נכנסתם דרך SSO או LDAP.",
     "jumpHostChain": "שרשרת מארח קפיצה",
     "portKnocking": "פורט נוקינג",
     "addKnock": "הוסף יציאה",
@@ -977,7 +977,7 @@
     "noSearchResults": "אין קשרים התואמים את החיפוש שלך",
     "rename": "שינוי שם של סשן"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "נדרש אימות דו-שלבי",
     "totpCodeLabel": "קוד אימות",
     "totpVerify": "לְאַמֵת",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "נכשל אימות קוד האיפוס",
     "failedCompleteReset": "נכשל השלמת איפוס הסיסמה",
     "invalidTotpCode": "קוד TOTP לא חוקי",
-    "failedOidcLogin": "נכשלה התחלת הכניסה החיצונית",
-    "silentSigninOidcUnavailable": "התבקשה כניסה שקטה, אך לא הוגדרה כניסה חיצונית.",
+    "failedExternalLogin": "נכשלה התחלת הכניסה החיצונית",
+    "silentSigninExternalUnavailable": "התבקשה כניסה שקטה, אך לא הוגדרה כניסה חיצונית.",
     "failedUserInfo": "נכשלה קבלת פרטי המשתמש לאחר הכניסה",
-    "oidcAuthFailed": "הכניסה החיצונית נכשלה",
+    "externalAuthFailed": "הכניסה החיצונית נכשלה",
     "invalidAuthUrl": "כתובת URL לא חוקית להרשאה התקבלה מה-backend",
     "requiredField": "שדה זה נדרש",
     "minLength": "אורך מינימלי הוא {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "לאפשר למשתמשים חדשים להירשם באופן עצמאי באמצעות שם משתמש וסיסמה",
     "allowPasswordLogin": "אפשר כניסה עם סיסמה",
     "allowPasswordLoginDesc": "שם משתמש/סיסמה להתחברות",
-    "oidcAutoProvision": "יצירה אוטומטית של חשבונות חיצוניים",
-    "oidcAutoProvisionDesc": "צור חשבון בפעם הראשונה שמישהו מתחבר דרך התחברות חיצונית כגון SSO או LDAP, גם כאשר ההרשמה כבויה",
+    "externalAutoProvision": "יצירה אוטומטית של חשבונות חיצוניים",
+    "externalAutoProvisionDesc": "צור חשבון בפעם הראשונה שמישהו מתחבר דרך התחברות חיצונית כגון SSO או LDAP, גם כאשר ההרשמה כבויה",
     "secondFactorAfterExternalLogin": "בקשת גורם שני לאחר כניסות חיצוניות (SSO, GitHub, Google, LDAP)",
     "secondFactorAfterExternalLoginDesc": "כבוי, גורם שני רשום מתבקש רק לאחר סיסמה וכניסות מקומיות אחרות, כמו קודם. פעיל, הוא מתבקש לאחר כל שיטת כניסה, כולל SSO ו-LDAP.",
     "allowPasswordReset": "אפשר איפוס סיסמה",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "אין תפוגה",
     "revokedBadge": "בוטל",
     "authTypeDual": "אימות כפול",
-    "authTypeOidc": "חִיצוֹנִי",
+    "authTypeExternal": "חִיצוֹנִי",
     "authTypeLocal": "מְקוֹמִי",
     "adminStatusAdministrator": "מְנַהֵל",
     "adminStatusRegularUser": "משתמש רגיל",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "אפשר כניסה חיצונית וכניסה באמצעות סיסמה",
     "linkAccountTargetUsername": "שם משתמש של חשבון מקומי",
     "linkAccountTargetPlaceholder": "הזן את שם המשתמש של החשבון המקומי שאליו ברצונך לקשר",
-    "linkAccountOidcUsername": "שם משתמש של חשבון חיצוני",
-    "linkAccountOidcPlaceholder": "הזן את שם המשתמש של החשבון החיצוני בלבד כדי למזג אותו",
-    "linkAccountOidcNotFound": "לא נמצא חשבון חיצוני בלבד עם שם משתמש זה",
+    "linkAccountExternalUsername": "שם משתמש של חשבון חיצוני",
+    "linkAccountExternalPlaceholder": "הזן את שם המשתמש של החשבון החיצוני בלבד כדי למזג אותו",
+    "linkAccountExternalNotFound": "לא נמצא חשבון חיצוני בלבד עם שם משתמש זה",
     "linkAccounts": "קישור חשבונות",
     "linkAccountSuccess": "חשבונות קושרו בהצלחה",
     "linkAccountFailed": "קישור החשבונות נכשל",
@@ -1400,7 +1400,6 @@
     "saving": "חִסָכוֹן...",
     "updateRegistrationFailed": "עדכון הגדרות הרישום נכשל",
     "updatePasswordLoginFailed": "נכשל עדכון הגדרות הכניסה באמצעות סיסמה",
-    "updateOidcAutoProvisionFailed": "נכשל עדכון הגדרת היצירה האוטומטית",
     "updateSecondFactorAfterExternalLoginFailed": "נכשל עדכון הגדרת הגורם השני",
     "updatePasswordResetFailed": "נכשל עדכון הגדרת איפוס הסיסמה",
     "sessionTimeoutRange2": "זמן הקצוב לסשן חייב להיות בין שעה ל-720 שעות",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "נָעוּל",
     "dataLockedNotice": "הנתונים של {{username}}נשארים נעולים עד לכניסה הבאה שלהם. לא ניתן יהיה לצפות או לערוך את המארחים, האישורים והקטעים שלהם עד אז.",
     "resetPasswordTitle": "איפוס סיסמה",
-    "resetPasswordOidcOnly": "משתמש זה מתחבר דרך ספק חיצוני ואין לו סיסמה.",
+    "resetPasswordExternalOnly": "משתמש זה מתחבר דרך ספק חיצוני ואין לו סיסמה.",
     "resetPasswordPlaceholder": "סיסמה חדשה",
     "resetPasswordBtn": "אִתחוּל",
     "resetPasswordWorking": "איפוס...",
@@ -1742,7 +1741,7 @@
         "importFailed": "ייבוא נכשל: {{error}}",
         "roleUser": "מִשׁתַמֵשׁ",
         "authMethodDual": "אימות כפול",
-        "authMethodOidc": "חִיצוֹנִי",
+        "authMethodExternal": "חִיצוֹנִי",
         "done": "נַעֲשָׂה",
         "apiKeyNameRequired": "נדרש שם מפתח",
         "apiKeyCreated": "מפתח ה-API \"{{name}}\" נוצר",
diff --git a/src/ui/locales/translated/hi_IN.json b/src/ui/locales/translated/hi_IN.json
index 1328f20bb..d5f3da957 100644
--- a/src/ui/locales/translated/hi_IN.json
+++ b/src/ui/locales/translated/hi_IN.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "कीबोर्ड-इंटरैक्टिव बाध्य करें",
     "overrideCredentialUsername": "क्रेडेंशियल यूज़रनेम ओवरराइड करें",
     "overrideCredentialUsernameDesc": "क्रेडेंशियल के यूज़रनेम के बजाय ऊपर दिए गए यूज़रनेम का उपयोग करें",
-    "oidcUsernameHint": "SSO या LDAP के माध्यम से साइन इन करने के लिए आपने जिस नाम का उपयोग किया है, उसे भरने के लिए $external.username का उपयोग करें।",
+    "externalUsernameHint": "SSO या LDAP के माध्यम से साइन इन करने के लिए आपने जिस नाम का उपयोग किया है, उसे भरने के लिए $external.username का उपयोग करें।",
     "jumpHostChain": "जंप होस्ट श्रृंखला",
     "portKnocking": "पोर्ट नॉकिंग",
     "addKnock": "पोर्ट जोड़ें",
@@ -977,7 +977,7 @@
     "noSearchResults": "आपकी खोज से मेल खाने वाला कोई कनेक्शन नहीं",
     "rename": "सत्र का नाम बदलें"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "दो-कारक प्रमाणीकरण आवश्यक है",
     "totpCodeLabel": "सत्यापन कोड",
     "totpVerify": "सत्यापित करें",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "रीसेट कोड सत्यापित करने में विफल",
     "failedCompleteReset": "पासवर्ड रीसेट पूरा करने में विफल",
     "invalidTotpCode": "अमान्य TOTP कोड",
-    "failedOidcLogin": "बाहरी साइन-इन शुरू करने में विफल",
-    "silentSigninOidcUnavailable": "साइलेंट साइन-इन का अनुरोध किया गया था, लेकिन कोई बाहरी साइन-इन सेट अप नहीं किया गया है।",
+    "failedExternalLogin": "बाहरी साइन-इन शुरू करने में विफल",
+    "silentSigninExternalUnavailable": "साइलेंट साइन-इन का अनुरोध किया गया था, लेकिन कोई बाहरी साइन-इन सेट अप नहीं किया गया है।",
     "failedUserInfo": "लॉगिन के बाद उपयोगकर्ता जानकारी प्राप्त करने में विफल",
-    "oidcAuthFailed": "बाहरी साइन-इन विफल रहा",
+    "externalAuthFailed": "बाहरी साइन-इन विफल रहा",
     "invalidAuthUrl": "बैकएंड से अमान्य प्राधिकरण URL प्राप्त हुआ",
     "requiredField": "यह फ़ील्ड आवश्यक है",
     "minLength": "न्यूनतम लंबाई {{min}} है",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "नए उपयोगकर्ताओं को उपयोगकर्ता नाम और पासवर्ड के साथ स्वयं पंजीकरण करने दें",
     "allowPasswordLogin": "पासवर्ड लॉगिन की अनुमति दें",
     "allowPasswordLoginDesc": "उपयोगकर्ता नाम/पासवर्ड लॉगिन",
-    "oidcAutoProvision": "बाह्य खाते स्वतः बनाएँ",
-    "oidcAutoProvisionDesc": "जब कोई व्यक्ति एसएसओ या एलडीएपी जैसे बाहरी लॉगिन के माध्यम से पहली बार साइन इन करता है, तो पंजीकरण बंद होने पर भी एक खाता बनाएं।",
+    "externalAutoProvision": "बाह्य खाते स्वतः बनाएँ",
+    "externalAutoProvisionDesc": "जब कोई व्यक्ति एसएसओ या एलडीएपी जैसे बाहरी लॉगिन के माध्यम से पहली बार साइन इन करता है, तो पंजीकरण बंद होने पर भी एक खाता बनाएं।",
     "secondFactorAfterExternalLogin": "बाहरी लॉगिन (एसएसओ, गिटहब, गूगल, एलडीएपी) के बाद दूसरे फैक्टर की मांग करें।",
     "secondFactorAfterExternalLoginDesc": "बंद होने पर, पासवर्ड और अन्य स्थानीय लॉगिन के बाद ही पंजीकृत द्वितीय कारक प्रमाणीकरण मांगा जाता है, जैसा कि पहले होता था। चालू होने पर, एसएसओ और एलडीएपी सहित प्रत्येक लॉगिन विधि के बाद इसे मांगा जाता है।",
     "allowPasswordReset": "पासवर्ड रीसेट की अनुमति दें",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "कोई समाप्ति नहीं",
     "revokedBadge": "रद्द",
     "authTypeDual": "दोहरा प्रमाणीकरण",
-    "authTypeOidc": "बाहरी",
+    "authTypeExternal": "बाहरी",
     "authTypeLocal": "स्थानीय",
     "adminStatusAdministrator": "प्रशासक",
     "adminStatusRegularUser": "सामान्य उपयोगकर्ता",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "बाहरी और पासवर्ड दोनों तरह के साइन-इन की अनुमति दें",
     "linkAccountTargetUsername": "स्थानीय खाते का उपयोगकर्ता नाम",
     "linkAccountTargetPlaceholder": "लिंक करने के लिए स्थानीय खाते का उपयोगकर्ता नाम दर्ज करें",
-    "linkAccountOidcUsername": "बाह्य खाता उपयोगकर्ता नाम",
-    "linkAccountOidcPlaceholder": "विलय करने के लिए केवल बाहरी खाते का उपयोगकर्ता नाम दर्ज करें",
-    "linkAccountOidcNotFound": "उस उपयोगकर्ता नाम से कोई बाहरी खाता नहीं मिला।",
+    "linkAccountExternalUsername": "बाह्य खाता उपयोगकर्ता नाम",
+    "linkAccountExternalPlaceholder": "विलय करने के लिए केवल बाहरी खाते का उपयोगकर्ता नाम दर्ज करें",
+    "linkAccountExternalNotFound": "उस उपयोगकर्ता नाम से कोई बाहरी खाता नहीं मिला।",
     "linkAccounts": "खाते लिंक करें",
     "linkAccountSuccess": "खाते सफलतापूर्वक लिंक किए गए",
     "linkAccountFailed": "खाते लिंक करने में विफल",
@@ -1400,7 +1400,6 @@
     "saving": "सहेजा जा रहा है...",
     "updateRegistrationFailed": "पंजीकरण सेटिंग अपडेट करने में विफल",
     "updatePasswordLoginFailed": "पासवर्ड लॉगिन सेटिंग अपडेट करने में विफल",
-    "updateOidcAutoProvisionFailed": "ऑटो-क्रिएट सेटिंग को अपडेट करने में विफलता",
     "updateSecondFactorAfterExternalLoginFailed": "द्वितीय कारक सेटिंग को अपडेट करने में विफल",
     "updatePasswordResetFailed": "पासवर्ड रीसेट सेटिंग अपडेट करने में विफल",
     "sessionTimeoutRange2": "सत्र समय-सीमा 1 से 720 घंटों के बीच होनी चाहिए",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "लॉक्ड",
     "dataLockedNotice": "{{username}} का डेटा तब तक लॉक रहता है जब तक वे अगली बार लॉग इन नहीं कर लेते। तब तक उनके होस्ट, क्रेडेंशियल और स्निपेट को न तो देखा जा सकता है और न ही संपादित किया जा सकता है।",
     "resetPasswordTitle": "पासवर्ड रीसेट करें",
-    "resetPasswordOidcOnly": "यह उपयोगकर्ता किसी बाहरी प्रदाता के माध्यम से साइन इन करता है और उसका कोई पासवर्ड नहीं है।",
+    "resetPasswordExternalOnly": "यह उपयोगकर्ता किसी बाहरी प्रदाता के माध्यम से साइन इन करता है और उसका कोई पासवर्ड नहीं है।",
     "resetPasswordPlaceholder": "नया पासवर्ड",
     "resetPasswordBtn": "रीसेट",
     "resetPasswordWorking": "रीसेट हो रहा है...",
@@ -1742,7 +1741,7 @@
         "importFailed": "आयात विफल: {{error}}",
         "roleUser": "उपयोगकर्ता",
         "authMethodDual": "दोहरा प्रमाणीकरण",
-        "authMethodOidc": "बाहरी",
+        "authMethodExternal": "बाहरी",
         "done": "पूर्ण",
         "apiKeyNameRequired": "कुंजी नाम आवश्यक है",
         "apiKeyCreated": "API कुंजी \"{{name}}\" बनाई गई",
diff --git a/src/ui/locales/translated/hu_HU.json b/src/ui/locales/translated/hu_HU.json
index c9955ee6b..5f03e7b26 100644
--- a/src/ui/locales/translated/hu_HU.json
+++ b/src/ui/locales/translated/hu_HU.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Kényszerítse a billentyűzet interaktivitását",
     "overrideCredentialUsername": "Hitelesítő adat felülírása Felhasználónév",
     "overrideCredentialUsernameDesc": "Használja a fent megadott felhasználónevet a hitelesítő adat felhasználóneve helyett.",
-    "oidcUsernameHint": "A $external.username paraméterrel töltse ki azt a nevet, amellyel SSO-n vagy LDAP-on keresztül bejelentkezett.",
+    "externalUsernameHint": "A $external.username paraméterrel töltse ki azt a nevet, amellyel SSO-n vagy LDAP-on keresztül bejelentkezett.",
     "jumpHostChain": "Jump Host Chain",
     "portKnocking": "Port Knocking",
     "addKnock": "Port hozzáadása",
@@ -977,7 +977,7 @@
     "noSearchResults": "Nincsenek a keresésnek megfelelő kapcsolatok",
     "rename": "Munkamenet átnevezése"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Kétfaktoros hitelesítés szükséges",
     "totpCodeLabel": "Ellenőrző kód",
     "totpVerify": "Ellenőrzés",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "Nem sikerült ellenőrizni a visszaállítási kódot",
     "failedCompleteReset": "Nem sikerült befejezni a jelszó visszaállítását",
     "invalidTotpCode": "Érvénytelen TOTP-kód",
-    "failedOidcLogin": "Nem sikerült elindítani a külső bejelentkezést",
-    "silentSigninOidcUnavailable": "Csendes bejelentkezést kértek, de nincs beállítva külső bejelentkezés.",
+    "failedExternalLogin": "Nem sikerült elindítani a külső bejelentkezést",
+    "silentSigninExternalUnavailable": "Csendes bejelentkezést kértek, de nincs beállítva külső bejelentkezés.",
     "failedUserInfo": "Bejelentkezés után nem sikerült lekérni a felhasználói adatokat",
-    "oidcAuthFailed": "Külső bejelentkezés sikertelen",
+    "externalAuthFailed": "Külső bejelentkezés sikertelen",
     "invalidAuthUrl": "Érvénytelen engedélyezési URL érkezett a háttérrendszertől",
     "requiredField": "Ez a mező kötelező",
     "minLength": "A minimális hossz {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "Új felhasználók regisztrálhatnak felhasználónévvel és jelszóval",
     "allowPasswordLogin": "Jelszó bejelentkezés engedélyezése",
     "allowPasswordLoginDesc": "Felhasználónév/jelszó bejelentkezés",
-    "oidcAutoProvision": "Külső fiókok automatikus létrehozása",
-    "oidcAutoProvisionDesc": "Fiók létrehozása, amikor valaki először jelentkezik be külső bejelentkezéssel, például SSO-val vagy LDAP-pal, még akkor is, ha a regisztráció ki van kapcsolva.",
+    "externalAutoProvision": "Külső fiókok automatikus létrehozása",
+    "externalAutoProvisionDesc": "Fiók létrehozása, amikor valaki először jelentkezik be külső bejelentkezéssel, például SSO-val vagy LDAP-pal, még akkor is, ha a regisztráció ki van kapcsolva.",
     "secondFactorAfterExternalLogin": "Külső bejelentkezések (SSO, GitHub, Google, LDAP) után kérjen második tényezőt",
     "secondFactorAfterExternalLoginDesc": "Kikapcsolt állapotban a regisztrált második bejelentkezési tényezőt csak a jelszó és más helyi bejelentkezések után kéri a rendszer, ugyanúgy, mint korábban. Bekapcsolt állapotban minden bejelentkezési módszer után kéri, beleértve az SSO-t és az LDAP-t is.",
     "allowPasswordReset": "Jelszó-visszaállítás engedélyezése",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Nincs lejárati idő",
     "revokedBadge": "VISSZAVONVA",
     "authTypeDual": "Kettős hitelesítés",
-    "authTypeOidc": "Külső",
+    "authTypeExternal": "Külső",
     "authTypeLocal": "Helyi",
     "adminStatusAdministrator": "Adminisztrátor",
     "adminStatusRegularUser": "Rendszeres felhasználó",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Külső és jelszóval történő bejelentkezés engedélyezése",
     "linkAccountTargetUsername": "Helyi fiók felhasználóneve",
     "linkAccountTargetPlaceholder": "Add meg a helyi fiók felhasználónevét a csatoláshoz",
-    "linkAccountOidcUsername": "Külső fiók felhasználóneve",
-    "linkAccountOidcPlaceholder": "Adja meg a csak külső fiókhoz tartozó felhasználónevet az egyesítéshez",
-    "linkAccountOidcNotFound": "Nem található külső fiók ezzel a felhasználónévvel.",
+    "linkAccountExternalUsername": "Külső fiók felhasználóneve",
+    "linkAccountExternalPlaceholder": "Adja meg a csak külső fiókhoz tartozó felhasználónevet az egyesítéshez",
+    "linkAccountExternalNotFound": "Nem található külső fiók ezzel a felhasználónévvel.",
     "linkAccounts": "Fiókok összekapcsolása",
     "linkAccountSuccess": "Fiókok sikeresen összekapcsolva",
     "linkAccountFailed": "Nem sikerült összekapcsolni a fiókokat",
@@ -1400,7 +1400,6 @@
     "saving": "Megtakarítás...",
     "updateRegistrationFailed": "Nem sikerült frissíteni a regisztrációs beállításokat",
     "updatePasswordLoginFailed": "Nem sikerült frissíteni a jelszó bejelentkezési beállítását",
-    "updateOidcAutoProvisionFailed": "Nem sikerült frissíteni az automatikus létrehozási beállítást",
     "updateSecondFactorAfterExternalLoginFailed": "Nem sikerült frissíteni a második tényező beállítását",
     "updatePasswordResetFailed": "Nem sikerült frissíteni a jelszó-visszaállítási beállítást",
     "sessionTimeoutRange2": "A munkamenet időkorlátjának 1 és 720 óra között kell lennie.",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "BEZÁRT",
     "dataLockedNotice": "{{username}}adatai zárolva maradnak a következő bejelentkezésig. A hosztjaik, hitelesítő adataik és kódrészleteik addig nem tekinthetők meg és nem szerkeszthetők.",
     "resetPasswordTitle": "Jelszó visszaállítása",
-    "resetPasswordOidcOnly": "Ez a felhasználó egy külső szolgáltatón keresztül jelentkezik be, és nincs jelszava.",
+    "resetPasswordExternalOnly": "Ez a felhasználó egy külső szolgáltatón keresztül jelentkezik be, és nincs jelszava.",
     "resetPasswordPlaceholder": "Új jelszó",
     "resetPasswordBtn": "Visszaállítás",
     "resetPasswordWorking": "Visszaállítás...",
@@ -1742,7 +1741,7 @@
         "importFailed": "Importálás sikertelen: {{error}}",
         "roleUser": "Felhasználó",
         "authMethodDual": "Kettős hitelesítés",
-        "authMethodOidc": "Külső",
+        "authMethodExternal": "Külső",
         "done": "Kész",
         "apiKeyNameRequired": "Kulcsnév megadása kötelező",
         "apiKeyCreated": "„{{name}}” API-kulcs létrehozva",
diff --git a/src/ui/locales/translated/id_ID.json b/src/ui/locales/translated/id_ID.json
index f899b3a64..d7450e8f7 100644
--- a/src/ui/locales/translated/id_ID.json
+++ b/src/ui/locales/translated/id_ID.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Paksa Interaktif Keyboard",
     "overrideCredentialUsername": "Ganti Nama Pengguna Kredensial",
     "overrideCredentialUsernameDesc": "Gunakan nama pengguna yang telah ditentukan di atas, bukan nama pengguna kredensial.",
-    "oidcUsernameHint": "Gunakan $external.username untuk mengisi nama yang Anda gunakan saat masuk melalui SSO atau LDAP.",
+    "externalUsernameHint": "Gunakan $external.username untuk mengisi nama yang Anda gunakan saat masuk melalui SSO atau LDAP.",
     "jumpHostChain": "Rantai Host Lompatan",
     "portKnocking": "Ketukan Pelabuhan",
     "addKnock": "Tambahkan Port",
@@ -977,7 +977,7 @@
     "noSearchResults": "Tidak ada koneksi yang sesuai dengan pencarian Anda.",
     "rename": "Ganti nama sesi"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Diperlukan Otentikasi Dua Faktor",
     "totpCodeLabel": "Kode Verifikasi",
     "totpVerify": "Memeriksa",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "Gagal memverifikasi kode reset",
     "failedCompleteReset": "Gagal menyelesaikan pengaturan ulang kata sandi.",
     "invalidTotpCode": "Kode TOTP tidak valid",
-    "failedOidcLogin": "Gagal memulai proses masuk eksternal.",
-    "silentSigninOidcUnavailable": "Login tanpa interaksi pengguna telah diminta, tetapi tidak ada login eksternal yang diatur.",
+    "failedExternalLogin": "Gagal memulai proses masuk eksternal.",
+    "silentSigninExternalUnavailable": "Login tanpa interaksi pengguna telah diminta, tetapi tidak ada login eksternal yang diatur.",
     "failedUserInfo": "Gagal mendapatkan informasi pengguna setelah login.",
-    "oidcAuthFailed": "Login eksternal gagal.",
+    "externalAuthFailed": "Login eksternal gagal.",
     "invalidAuthUrl": "URL otorisasi yang diterima dari backend tidak valid.",
     "requiredField": "Kolom ini wajib diisi.",
     "minLength": "Panjang minimumnya adalah {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "Izinkan pengguna baru mendaftar sendiri dengan nama pengguna dan kata sandi.",
     "allowPasswordLogin": "Izinkan Login dengan Kata Sandi",
     "allowPasswordLoginDesc": "Login dengan nama pengguna/kata sandi",
-    "oidcAutoProvision": "Buat akun eksternal secara otomatis",
-    "oidcAutoProvisionDesc": "Buat akun saat pertama kali seseorang masuk melalui login eksternal seperti SSO atau LDAP, bahkan saat pendaftaran dimatikan.",
+    "externalAutoProvision": "Buat akun eksternal secara otomatis",
+    "externalAutoProvisionDesc": "Buat akun saat pertama kali seseorang masuk melalui login eksternal seperti SSO atau LDAP, bahkan saat pendaftaran dimatikan.",
     "secondFactorAfterExternalLogin": "Mintalah faktor otentikasi kedua setelah login eksternal (SSO, GitHub, Google, LDAP)",
     "secondFactorAfterExternalLoginDesc": "Jika dinonaktifkan, faktor otentikasi kedua yang terdaftar hanya diminta setelah kata sandi dan login lokal lainnya, sama seperti sebelumnya. Jika diaktifkan, faktor otentikasi kedua diminta setelah setiap metode login, termasuk SSO dan LDAP.",
     "allowPasswordReset": "Izinkan Reset Kata Sandi",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Tidak ada tanggal kedaluwarsa",
     "revokedBadge": "DICABUT",
     "authTypeDual": "Otorisasi Ganda",
-    "authTypeOidc": "Luar",
+    "authTypeExternal": "Luar",
     "authTypeLocal": "Lokal",
     "adminStatusAdministrator": "Administrator",
     "adminStatusRegularUser": "Pengguna Biasa",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Izinkan login eksternal dan login menggunakan kata sandi.",
     "linkAccountTargetUsername": "Nama Pengguna Akun Lokal",
     "linkAccountTargetPlaceholder": "Masukkan nama pengguna akun lokal yang ingin dihubungkan.",
-    "linkAccountOidcUsername": "Nama Pengguna Akun Eksternal",
-    "linkAccountOidcPlaceholder": "Masukkan nama pengguna akun khusus eksternal yang ingin digabungkan.",
-    "linkAccountOidcNotFound": "Tidak ditemukan akun eksternal saja dengan nama pengguna tersebut.",
+    "linkAccountExternalUsername": "Nama Pengguna Akun Eksternal",
+    "linkAccountExternalPlaceholder": "Masukkan nama pengguna akun khusus eksternal yang ingin digabungkan.",
+    "linkAccountExternalNotFound": "Tidak ditemukan akun eksternal saja dengan nama pengguna tersebut.",
     "linkAccounts": "Tautkan Akun",
     "linkAccountSuccess": "Akun berhasil dihubungkan.",
     "linkAccountFailed": "Gagal menautkan akun",
@@ -1400,7 +1400,6 @@
     "saving": "Penghematan...",
     "updateRegistrationFailed": "Gagal memperbarui pengaturan pendaftaran",
     "updatePasswordLoginFailed": "Gagal memperbarui pengaturan login kata sandi.",
-    "updateOidcAutoProvisionFailed": "Gagal memperbarui pengaturan pembuatan otomatis.",
     "updateSecondFactorAfterExternalLoginFailed": "Gagal memperbarui pengaturan faktor kedua.",
     "updatePasswordResetFailed": "Gagal memperbarui pengaturan pengaturan ulang kata sandi.",
     "sessionTimeoutRange2": "Batas waktu sesi harus antara 1 dan 720 jam.",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "TERKUNCI",
     "dataLockedNotice": "Data {{username}}tetap terkunci hingga mereka masuk kembali. Host, kredensial, dan cuplikan mereka tidak dapat dilihat atau diedit hingga saat itu.",
     "resetPasswordTitle": "Atur Ulang Kata Sandi",
-    "resetPasswordOidcOnly": "Pengguna ini masuk melalui penyedia eksternal dan tidak memiliki kata sandi.",
+    "resetPasswordExternalOnly": "Pengguna ini masuk melalui penyedia eksternal dan tidak memiliki kata sandi.",
     "resetPasswordPlaceholder": "Kata sandi baru",
     "resetPasswordBtn": "Mengatur ulang",
     "resetPasswordWorking": "Mengatur ulang...",
@@ -1742,7 +1741,7 @@
         "importFailed": "Impor gagal: {{error}}",
         "roleUser": "Pengguna",
         "authMethodDual": "Otorisasi Ganda",
-        "authMethodOidc": "Luar",
+        "authMethodExternal": "Luar",
         "done": "Selesai",
         "apiKeyNameRequired": "Nama kunci wajib diisi.",
         "apiKeyCreated": "Kunci API \"{{name}}\" berhasil dibuat",
diff --git a/src/ui/locales/translated/it_IT.json b/src/ui/locales/translated/it_IT.json
index 78af13da2..e676d67b4 100644
--- a/src/ui/locales/translated/it_IT.json
+++ b/src/ui/locales/translated/it_IT.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Forza Keyboard-Interactive",
     "overrideCredentialUsername": "Sovrascrivi nome utente della credenziale",
     "overrideCredentialUsernameDesc": "Utilizza il nome utente specificato sopra invece di quello della credenziale",
-    "oidcUsernameHint": "Utilizza $external.username per inserire il nome con cui hai effettuato l'accesso tramite SSO o LDAP.",
+    "externalUsernameHint": "Utilizza $external.username per inserire il nome con cui hai effettuato l'accesso tramite SSO o LDAP.",
     "jumpHostChain": "Catena Jump Host",
     "portKnocking": "Port Knocking",
     "addKnock": "Aggiungi porta",
@@ -977,7 +977,7 @@
     "noSearchResults": "Nessuna connessione corrisponde alla ricerca",
     "rename": "Rinomina sessione"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Autenticazione a due fattori richiesta",
     "totpCodeLabel": "Codice di verifica",
     "totpVerify": "Verifica",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "Verifica del codice di ripristino non riuscita",
     "failedCompleteReset": "Completamento del ripristino della password non riuscito",
     "invalidTotpCode": "Codice TOTP non valido",
-    "failedOidcLogin": "Impossibile avviare l'accesso esterno",
-    "silentSigninOidcUnavailable": "È stata richiesta l'attivazione dell'accesso silenzioso, ma non è stato configurato alcun accesso esterno.",
+    "failedExternalLogin": "Impossibile avviare l'accesso esterno",
+    "silentSigninExternalUnavailable": "È stata richiesta l'attivazione dell'accesso silenzioso, ma non è stato configurato alcun accesso esterno.",
     "failedUserInfo": "Impossibile ottenere le informazioni utente dopo l'accesso",
-    "oidcAuthFailed": "Accesso esterno non riuscito",
+    "externalAuthFailed": "Accesso esterno non riuscito",
     "invalidAuthUrl": "URL di autorizzazione non valido ricevuto dal backend",
     "requiredField": "Questo campo è obbligatorio",
     "minLength": "La lunghezza minima è {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "Consenti ai nuovi utenti di registrarsi autonomamente con nome utente e password",
     "allowPasswordLogin": "Consenti accesso con password",
     "allowPasswordLoginDesc": "Accesso con nome utente/password",
-    "oidcAutoProvision": "Creazione automatica di account esterni",
-    "oidcAutoProvisionDesc": "Crea un account la prima volta che qualcuno effettua l'accesso tramite un login esterno come SSO o LDAP, anche quando la registrazione è disattivata",
+    "externalAutoProvision": "Creazione automatica di account esterni",
+    "externalAutoProvisionDesc": "Crea un account la prima volta che qualcuno effettua l'accesso tramite un login esterno come SSO o LDAP, anche quando la registrazione è disattivata",
     "secondFactorAfterExternalLogin": "Richiedi un secondo fattore di autenticazione dopo l'accesso da fonti esterne (SSO, GitHub, Google, LDAP)",
     "secondFactorAfterExternalLoginDesc": "In modalità disattivata, l'autenticazione a due fattori viene richiesta solo dopo la password e altri accessi locali, come in precedenza. In modalità attivata, viene richiesta dopo ogni metodo di accesso, inclusi SSO e LDAP.",
     "allowPasswordReset": "Consenti reset password",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Senza scadenza",
     "revokedBadge": "REVOCATO",
     "authTypeDual": "Autenticazione doppia",
-    "authTypeOidc": "Esterno",
+    "authTypeExternal": "Esterno",
     "authTypeLocal": "Locale",
     "adminStatusAdministrator": "Amministratore",
     "adminStatusRegularUser": "Utente regolare",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Consenti l'accesso sia tramite credenziali esterne che tramite password.",
     "linkAccountTargetUsername": "Nome utente account locale",
     "linkAccountTargetPlaceholder": "Inserisci il nome utente dell'account locale da collegare",
-    "linkAccountOidcUsername": "Nome utente dell'account esterno",
-    "linkAccountOidcPlaceholder": "Inserisci il nome utente dell'account esterno da unire",
-    "linkAccountOidcNotFound": "Nessun account esterno trovato con quel nome utente",
+    "linkAccountExternalUsername": "Nome utente dell'account esterno",
+    "linkAccountExternalPlaceholder": "Inserisci il nome utente dell'account esterno da unire",
+    "linkAccountExternalNotFound": "Nessun account esterno trovato con quel nome utente",
     "linkAccounts": "Collega account",
     "linkAccountSuccess": "Account collegati con successo",
     "linkAccountFailed": "Collegamento account non riuscito",
@@ -1400,7 +1400,6 @@
     "saving": "Salvataggio in corso...",
     "updateRegistrationFailed": "Aggiornamento impostazione registrazione non riuscito",
     "updatePasswordLoginFailed": "Aggiornamento impostazione accesso con password non riuscito",
-    "updateOidcAutoProvisionFailed": "Impossibile aggiornare l'impostazione di creazione automatica",
     "updateSecondFactorAfterExternalLoginFailed": "Impossibile aggiornare l'impostazione del secondo fattore di autenticazione.",
     "updatePasswordResetFailed": "Aggiornamento impostazione reimpostazione password non riuscito",
     "sessionTimeoutRange2": "Il timeout della sessione deve essere compreso tra 1 e 720 ore",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "BLOCCATO",
     "dataLockedNotice": "I dati di {{username}} rimangono bloccati fino al prossimo accesso. I relativi host, credenziali e frammenti non possono essere visualizzati o modificati fino ad allora.",
     "resetPasswordTitle": "Reimposta password",
-    "resetPasswordOidcOnly": "Questo utente accede tramite un provider esterno e non ha una password.",
+    "resetPasswordExternalOnly": "Questo utente accede tramite un provider esterno e non ha una password.",
     "resetPasswordPlaceholder": "Nuova password",
     "resetPasswordBtn": "Reimposta",
     "resetPasswordWorking": "Reimpostazione in corso...",
@@ -1742,7 +1741,7 @@
         "importFailed": "Importazione non riuscita: {{error}}",
         "roleUser": "Utente",
         "authMethodDual": "Doppia autenticazione",
-        "authMethodOidc": "Esterno",
+        "authMethodExternal": "Esterno",
         "done": "Fatto",
         "apiKeyNameRequired": "Il nome della chiave è obbligatorio",
         "apiKeyCreated": "Chiave API \"{{name}}\" creata",
diff --git a/src/ui/locales/translated/ja_JP.json b/src/ui/locales/translated/ja_JP.json
index c7fe5b1c8..ffe705775 100644
--- a/src/ui/locales/translated/ja_JP.json
+++ b/src/ui/locales/translated/ja_JP.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Keyboard-Interactive を強制",
     "overrideCredentialUsername": "認証情報のユーザー名を上書き",
     "overrideCredentialUsernameDesc": "認証情報のユーザー名の代わりに上記で指定したユーザー名を使用します",
-    "oidcUsernameHint": "$external.username を使用して、SSO または LDAP でサインインした名前を入力します。",
+    "externalUsernameHint": "$external.username を使用して、SSO または LDAP でサインインした名前を入力します。",
     "jumpHostChain": "ジャンプホストチェーン",
     "portKnocking": "ポートノッキング",
     "addKnock": "ポートを追加",
@@ -977,7 +977,7 @@
     "noSearchResults": "検索条件に一致する接続はありません",
     "rename": "セッション名を変更"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "二要素認証が必要です",
     "totpCodeLabel": "確認コード",
     "totpVerify": "確認",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "リセットコードの検証に失敗しました",
     "failedCompleteReset": "パスワードリセットの完了に失敗しました",
     "invalidTotpCode": "無効なTOTPコードです",
-    "failedOidcLogin": "外部サインインの開始に失敗しました",
-    "silentSigninOidcUnavailable": "サイレントサインインが要求されましたが、外部サインインは設定されていません。",
+    "failedExternalLogin": "外部サインインの開始に失敗しました",
+    "silentSigninExternalUnavailable": "サイレントサインインが要求されましたが、外部サインインは設定されていません。",
     "failedUserInfo": "ログイン後のユーザー情報の取得に失敗しました",
-    "oidcAuthFailed": "外部からのサインインに失敗しました",
+    "externalAuthFailed": "外部からのサインインに失敗しました",
     "invalidAuthUrl": "バックエンドから無効な認証URLを受信しました",
     "requiredField": "この項目は必須です",
     "minLength": "最小{{min}}文字です",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "新規ユーザーがユーザー名とパスワードで自己登録できます",
     "allowPasswordLogin": "パスワードログインを許可",
     "allowPasswordLoginDesc": "ユーザー名/パスワードログイン",
-    "oidcAutoProvision": "外部アカウントを自動作成",
-    "oidcAutoProvisionDesc": "SSOやLDAPなどの外部ログイン経由で初めてサインインした際に、登録が無効になっている場合でもアカウントを作成する",
+    "externalAutoProvision": "外部アカウントを自動作成",
+    "externalAutoProvisionDesc": "SSOやLDAPなどの外部ログイン経由で初めてサインインした際に、登録が無効になっている場合でもアカウントを作成する",
     "secondFactorAfterExternalLogin": "外部ログイン（SSO、GitHub、Google、LDAPなど）後に二段階認証を要求する",
     "secondFactorAfterExternalLoginDesc": "オフの場合、登録済みの二要素認証は、以前と同様にパスワードやその他のローカルログイン後にのみ要求されます。オンの場合、SSOやLDAPを含むすべてのログイン方法後に要求されます。",
     "allowPasswordReset": "パスワードリセットを許可",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "期限なし",
     "revokedBadge": "失効",
     "authTypeDual": "二要素認証",
-    "authTypeOidc": "外部",
+    "authTypeExternal": "外部",
     "authTypeLocal": "ローカル",
     "adminStatusAdministrator": "管理者",
     "adminStatusRegularUser": "一般ユーザー",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "外部アカウントとパスワードによるサインインの両方を許可する",
     "linkAccountTargetUsername": "ローカルアカウントのユーザー名",
     "linkAccountTargetPlaceholder": "リンク先のローカルアカウントのユーザー名を入力",
-    "linkAccountOidcUsername": "外部アカウントのユーザー名",
-    "linkAccountOidcPlaceholder": "外部専用アカウントのユーザー名を入力して統合します",
-    "linkAccountOidcNotFound": "そのユーザー名の外部専用アカウントは見つかりませんでした。",
+    "linkAccountExternalUsername": "外部アカウントのユーザー名",
+    "linkAccountExternalPlaceholder": "外部専用アカウントのユーザー名を入力して統合します",
+    "linkAccountExternalNotFound": "そのユーザー名の外部専用アカウントは見つかりませんでした。",
     "linkAccounts": "アカウントをリンク",
     "linkAccountSuccess": "アカウントのリンクに成功しました",
     "linkAccountFailed": "アカウントのリンクに失敗しました",
@@ -1400,7 +1400,6 @@
     "saving": "保存中...",
     "updateRegistrationFailed": "登録設定の更新に失敗しました",
     "updatePasswordLoginFailed": "パスワードログイン設定の更新に失敗しました",
-    "updateOidcAutoProvisionFailed": "自動作成設定の更新に失敗しました",
     "updateSecondFactorAfterExternalLoginFailed": "2段階認証設定の更新に失敗しました",
     "updatePasswordResetFailed": "パスワードリセット設定の更新に失敗しました",
     "sessionTimeoutRange2": "セッションタイムアウトは1時間から720時間の間である必要があります",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "ロック済み",
     "dataLockedNotice": "{{username}} のデータは次回ログインまでロックされたままです。それまで、ホスト、認証情報、スニペットの閲覧や編集はできません。",
     "resetPasswordTitle": "パスワードをリセット",
-    "resetPasswordOidcOnly": "このユーザーは外部プロバイダー経由でサインインしており、パスワードはありません。",
+    "resetPasswordExternalOnly": "このユーザーは外部プロバイダー経由でサインインしており、パスワードはありません。",
     "resetPasswordPlaceholder": "新しいパスワード",
     "resetPasswordBtn": "リセット",
     "resetPasswordWorking": "リセット中...",
@@ -1742,7 +1741,7 @@
         "importFailed": "インポートに失敗しました: {{error}}",
         "roleUser": "ユーザー",
         "authMethodDual": "二要素認証",
-        "authMethodOidc": "外部",
+        "authMethodExternal": "外部",
         "done": "完了",
         "apiKeyNameRequired": "キー名は必須です",
         "apiKeyCreated": "APIキー「{{name}}」が作成されました",
diff --git a/src/ui/locales/translated/ko_KR.json b/src/ui/locales/translated/ko_KR.json
index 931203bb9..481d64f18 100644
--- a/src/ui/locales/translated/ko_KR.json
+++ b/src/ui/locales/translated/ko_KR.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "키보드 인터랙티브 강제",
     "overrideCredentialUsername": "자격 증명 사용자 이름 재정의",
     "overrideCredentialUsernameDesc": "자격 증명의 사용자 이름 대신 위에 지정된 사용자 이름을 사용합니다",
-    "oidcUsernameHint": "$external.username을 사용하여 SSO 또는 LDAP를 통해 로그인할 때 사용한 이름을 입력하세요.",
+    "externalUsernameHint": "$external.username을 사용하여 SSO 또는 LDAP를 통해 로그인할 때 사용한 이름을 입력하세요.",
     "jumpHostChain": "점프 호스트 체인",
     "portKnocking": "포트 노킹",
     "addKnock": "포트 추가",
@@ -977,7 +977,7 @@
     "noSearchResults": "검색과 일치하는 연결이 없습니다.",
     "rename": "세션 이름 바꾸기"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "2단계 인증 필요",
     "totpCodeLabel": "인증 코드",
     "totpVerify": "인증",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "재설정 코드 인증 실패",
     "failedCompleteReset": "비밀번호 재설정 완료 실패",
     "invalidTotpCode": "잘못된 TOTP 코드",
-    "failedOidcLogin": "외부 로그인 시작에 실패했습니다.",
-    "silentSigninOidcUnavailable": "자동 로그인 요청이 있었지만 외부 로그인은 설정되어 있지 않습니다.",
+    "failedExternalLogin": "외부 로그인 시작에 실패했습니다.",
+    "silentSigninExternalUnavailable": "자동 로그인 요청이 있었지만 외부 로그인은 설정되어 있지 않습니다.",
     "failedUserInfo": "로그인 후 사용자 정보를 가져오지 못했습니다",
-    "oidcAuthFailed": "외부 로그인 실패",
+    "externalAuthFailed": "외부 로그인 실패",
     "invalidAuthUrl": "백엔드에서 받은 잘못된 인증 URL",
     "requiredField": "필수 입력란입니다",
     "minLength": "최소 {{min}}자",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "새 사용자가 사용자 이름과 비밀번호로 자가 등록할 수 있도록 허용",
     "allowPasswordLogin": "비밀번호 로그인 허용",
     "allowPasswordLoginDesc": "사용자 이름/비밀번호 로그인",
-    "oidcAutoProvision": "외부 계정 자동 생성",
-    "oidcAutoProvisionDesc": "회원가입이 비활성화된 경우에도 SSO 또는 LDAP와 같은 외부 로그인을 통해 처음 로그인할 때 계정을 생성합니다.",
+    "externalAutoProvision": "외부 계정 자동 생성",
+    "externalAutoProvisionDesc": "회원가입이 비활성화된 경우에도 SSO 또는 LDAP와 같은 외부 로그인을 통해 처음 로그인할 때 계정을 생성합니다.",
     "secondFactorAfterExternalLogin": "외부 로그인(SSO, GitHub, Google, LDAP) 후에는 2단계 인증을 요청하세요.",
     "secondFactorAfterExternalLoginDesc": "비활성화된 경우, 등록된 2단계 인증은 이전과 마찬가지로 비밀번호 및 기타 로컬 로그인 후에만 요청됩니다. 활성화된 경우, SSO 및 LDAP를 포함한 모든 로그인 방식 후에 2단계 인증이 요청됩니다.",
     "allowPasswordReset": "비밀번호 재설정 허용",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "만료 없음",
     "revokedBadge": "취소됨",
     "authTypeDual": "이중 인증",
-    "authTypeOidc": "외부",
+    "authTypeExternal": "외부",
     "authTypeLocal": "로컬",
     "adminStatusAdministrator": "관리자",
     "adminStatusRegularUser": "일반 사용자",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "외부 로그인과 비밀번호 로그인을 모두 허용합니다.",
     "linkAccountTargetUsername": "로컬 계정 사용자 이름",
     "linkAccountTargetPlaceholder": "연결할 로컬 계정 사용자 이름 입력",
-    "linkAccountOidcUsername": "외부 계정 사용자 이름",
-    "linkAccountOidcPlaceholder": "병합할 외부 전용 계정 사용자 이름을 입력하세요.",
-    "linkAccountOidcNotFound": "해당 사용자 이름으로 된 외부 전용 계정을 찾을 수 없습니다.",
+    "linkAccountExternalUsername": "외부 계정 사용자 이름",
+    "linkAccountExternalPlaceholder": "병합할 외부 전용 계정 사용자 이름을 입력하세요.",
+    "linkAccountExternalNotFound": "해당 사용자 이름으로 된 외부 전용 계정을 찾을 수 없습니다.",
     "linkAccounts": "계정 연결",
     "linkAccountSuccess": "계정이 성공적으로 연결되었습니다.",
     "linkAccountFailed": "계정 연결에 실패했습니다.",
@@ -1400,7 +1400,6 @@
     "saving": "저장 중...",
     "updateRegistrationFailed": "등록 설정 업데이트에 실패했습니다.",
     "updatePasswordLoginFailed": "비밀번호 로그인 설정 업데이트에 실패했습니다.",
-    "updateOidcAutoProvisionFailed": "자동 생성 설정을 업데이트하는 데 실패했습니다.",
     "updateSecondFactorAfterExternalLoginFailed": "두 번째 인증 설정 업데이트에 실패했습니다.",
     "updatePasswordResetFailed": "비밀번호 재설정 설정 업데이트에 실패했습니다.",
     "sessionTimeoutRange2": "세션 제한 시간은 1시간 이상 720시간 이하여야 합니다.",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "잠김",
     "dataLockedNotice": "{{username}}님의 데이터는 다음 로그인까지 잠금 상태로 유지됩니다. 그때까지 호스트, 자격 증명 및 스니펫을 보거나 편집할 수 없습니다.",
     "resetPasswordTitle": "비밀번호 재설정",
-    "resetPasswordOidcOnly": "이 사용자는 외부 제공업체를 통해 로그인하며 비밀번호가 없습니다.",
+    "resetPasswordExternalOnly": "이 사용자는 외부 제공업체를 통해 로그인하며 비밀번호가 없습니다.",
     "resetPasswordPlaceholder": "새 비밀번호",
     "resetPasswordBtn": "재설정",
     "resetPasswordWorking": "재설정 중...",
@@ -1742,7 +1741,7 @@
         "importFailed": "가져오기 실패: {{error}}",
         "roleUser": "사용자",
         "authMethodDual": "이중 인증",
-        "authMethodOidc": "외부",
+        "authMethodExternal": "외부",
         "done": "완료",
         "apiKeyNameRequired": "API 키 이름이 필요합니다",
         "apiKeyCreated": "API 키 \"{{name}}\" 생성됨",
diff --git a/src/ui/locales/translated/nl_NL.json b/src/ui/locales/translated/nl_NL.json
index 969516568..1887ef0aa 100644
--- a/src/ui/locales/translated/nl_NL.json
+++ b/src/ui/locales/translated/nl_NL.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Toetsenbordinteractief forceren",
     "overrideCredentialUsername": "Gebruikersnaam voor het overschrijven van inloggegevens",
     "overrideCredentialUsernameDesc": "Gebruik de hierboven opgegeven gebruikersnaam in plaats van de gebruikersnaam van de inloggegevens.",
-    "oidcUsernameHint": "Gebruik $external.username om de naam in te vullen waarmee u zich via SSO of LDAP hebt aangemeld.",
+    "externalUsernameHint": "Gebruik $external.username om de naam in te vullen waarmee u zich via SSO of LDAP hebt aangemeld.",
     "jumpHostChain": "Spring naar de hostketen",
     "portKnocking": "Havenkloppen",
     "addKnock": "Poort toevoegen",
@@ -977,7 +977,7 @@
     "noSearchResults": "Er zijn geen resultaten gevonden die overeenkomen met uw zoekopdracht.",
     "rename": "Sessie hernoemen"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Tweefactorauthenticatie vereist",
     "totpCodeLabel": "Verificatiecode",
     "totpVerify": "Verifiëren",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "Het verifiëren van de resetcode is mislukt.",
     "failedCompleteReset": "Wachtwoordherstel is mislukt.",
     "invalidTotpCode": "Ongeldige TOTP-code",
-    "failedOidcLogin": "Externe aanmelding is mislukt.",
-    "silentSigninOidcUnavailable": "Er is een verzoek ingediend voor een stille aanmelding, maar er is geen externe aanmelding ingesteld.",
+    "failedExternalLogin": "Externe aanmelding is mislukt.",
+    "silentSigninExternalUnavailable": "Er is een verzoek ingediend voor een stille aanmelding, maar er is geen externe aanmelding ingesteld.",
     "failedUserInfo": "Het ophalen van gebruikersgegevens na het inloggen is mislukt.",
-    "oidcAuthFailed": "Externe aanmelding mislukt",
+    "externalAuthFailed": "Externe aanmelding mislukt",
     "invalidAuthUrl": "Ongeldige autorisatie-URL ontvangen van de backend.",
     "requiredField": "Dit veld is verplicht.",
     "minLength": "De minimale lengte is {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "Laat nieuwe gebruikers zich zelf registreren met een gebruikersnaam en wachtwoord.",
     "allowPasswordLogin": "Wachtwoordaanmelding toestaan",
     "allowPasswordLoginDesc": "Inloggen met gebruikersnaam/wachtwoord",
-    "oidcAutoProvision": "Externe accounts automatisch aanmaken",
-    "oidcAutoProvisionDesc": "Maak een account aan de eerste keer dat iemand inlogt via een externe login zoals SSO of LDAP, zelfs als registratie is uitgeschakeld.",
+    "externalAutoProvision": "Externe accounts automatisch aanmaken",
+    "externalAutoProvisionDesc": "Maak een account aan de eerste keer dat iemand inlogt via een externe login zoals SSO of LDAP, zelfs als registratie is uitgeschakeld.",
     "secondFactorAfterExternalLogin": "Vraag om een tweede authenticatiefactor na externe aanmeldingen (SSO, GitHub, Google, LDAP).",
     "secondFactorAfterExternalLoginDesc": "Uitgeschakeld: een geregistreerde tweede authenticatiefactor wordt alleen na het wachtwoord en andere lokale aanmeldingen gevraagd, net als voorheen. Aangeschakeld: deze wordt na elke aanmeldingsmethode gevraagd, inclusief SSO en LDAP.",
     "allowPasswordReset": "Wachtwoordherstel toestaan",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Geen vervaldatum",
     "revokedBadge": "INGETROKKEN",
     "authTypeDual": "Dubbele authenticatie",
-    "authTypeOidc": "Extern",
+    "authTypeExternal": "Extern",
     "authTypeLocal": "Lokaal",
     "adminStatusAdministrator": "Beheerder",
     "adminStatusRegularUser": "Regelmatige gebruiker",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Sta zowel externe aanmelding als aanmelding met wachtwoord toe.",
     "linkAccountTargetUsername": "Lokale accountgebruikersnaam",
     "linkAccountTargetPlaceholder": "Voer de gebruikersnaam van het lokale account in om te koppelen.",
-    "linkAccountOidcUsername": "Externe accountgebruikersnaam",
-    "linkAccountOidcPlaceholder": "Voer de gebruikersnaam van het externe account in om deze samen te voegen.",
-    "linkAccountOidcNotFound": "Er is geen extern account gevonden met die gebruikersnaam.",
+    "linkAccountExternalUsername": "Externe accountgebruikersnaam",
+    "linkAccountExternalPlaceholder": "Voer de gebruikersnaam van het externe account in om deze samen te voegen.",
+    "linkAccountExternalNotFound": "Er is geen extern account gevonden met die gebruikersnaam.",
     "linkAccounts": "Accounts koppelen",
     "linkAccountSuccess": "Accounts succesvol gekoppeld",
     "linkAccountFailed": "Het koppelen van accounts is mislukt.",
@@ -1400,7 +1400,6 @@
     "saving": "Besparing...",
     "updateRegistrationFailed": "Het bijwerken van de registratie-instellingen is mislukt.",
     "updatePasswordLoginFailed": "Het bijwerken van de wachtwoordinstellingen is mislukt.",
-    "updateOidcAutoProvisionFailed": "Het bijwerken van de instelling voor automatisch aanmaken is mislukt.",
     "updateSecondFactorAfterExternalLoginFailed": "Het bijwerken van de tweede authenticatie-instelling is mislukt.",
     "updatePasswordResetFailed": "Het bijwerken van de instellingen voor het opnieuw instellen van het wachtwoord is mislukt.",
     "sessionTimeoutRange2": "De sessietime-out moet tussen 1 en 720 uur liggen.",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "VERGRENDELD",
     "dataLockedNotice": "De gegevens van {{username}}blijven vergrendeld tot de volgende keer dat ze inloggen. Hun hosts, inloggegevens en codefragmenten kunnen tot die tijd niet worden bekeken of bewerkt.",
     "resetPasswordTitle": "Wachtwoord opnieuw instellen",
-    "resetPasswordOidcOnly": "Deze gebruiker meldt zich aan via een externe provider en heeft geen wachtwoord.",
+    "resetPasswordExternalOnly": "Deze gebruiker meldt zich aan via een externe provider en heeft geen wachtwoord.",
     "resetPasswordPlaceholder": "Nieuw wachtwoord",
     "resetPasswordBtn": "Reset",
     "resetPasswordWorking": "Opnieuw instellen...",
@@ -1742,7 +1741,7 @@
         "importFailed": "Import mislukt: {{error}}",
         "roleUser": "Gebruiker",
         "authMethodDual": "Dubbele authenticatie",
-        "authMethodOidc": "Extern",
+        "authMethodExternal": "Extern",
         "done": "Klaar",
         "apiKeyNameRequired": "Sleutelnaam is vereist",
         "apiKeyCreated": "API-sleutel \"{{name}}\" aangemaakt",
diff --git a/src/ui/locales/translated/no_NO.json b/src/ui/locales/translated/no_NO.json
index ba0b509a4..9793bdcd9 100644
--- a/src/ui/locales/translated/no_NO.json
+++ b/src/ui/locales/translated/no_NO.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Tving tastaturinteraktivt",
     "overrideCredentialUsername": "Overstyr brukernavn for legitimasjon",
     "overrideCredentialUsernameDesc": "Bruk brukernavnet som er spesifisert ovenfor i stedet for brukernavnet til legitimasjonen",
-    "oidcUsernameHint": "Bruk $external.username for å fylle ut navnet du logget på med via SSO eller LDAP.",
+    "externalUsernameHint": "Bruk $external.username for å fylle ut navnet du logget på med via SSO eller LDAP.",
     "jumpHostChain": "Hoppvertkjede",
     "portKnocking": "Port Knocking",
     "addKnock": "Legg til port",
@@ -977,7 +977,7 @@
     "noSearchResults": "Ingen forbindelser samsvarer med søket ditt",
     "rename": "Gi nytt navn til økten"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Tofaktorautentisering kreves",
     "totpCodeLabel": "Verifiseringskode",
     "totpVerify": "Verifisere",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "Kunne ikke bekrefte tilbakestillingskoden",
     "failedCompleteReset": "Kunne ikke fullføre tilbakestillingen av passordet",
     "invalidTotpCode": "Ugyldig TOTP-kode",
-    "failedOidcLogin": "Kunne ikke starte ekstern pålogging",
-    "silentSigninOidcUnavailable": "Stille pålogging ble forespurt, men ingen ekstern pålogging er konfigurert.",
+    "failedExternalLogin": "Kunne ikke starte ekstern pålogging",
+    "silentSigninExternalUnavailable": "Stille pålogging ble forespurt, men ingen ekstern pålogging er konfigurert.",
     "failedUserInfo": "Klarte ikke å hente brukerinformasjon etter innlogging",
-    "oidcAuthFailed": "Ekstern pålogging mislyktes",
+    "externalAuthFailed": "Ekstern pålogging mislyktes",
     "invalidAuthUrl": "Ugyldig autorisasjons-URL mottatt fra backend",
     "requiredField": "Dette feltet er obligatorisk",
     "minLength": "Minimumslengden er {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "La nye brukere registrere seg selv med brukernavn og passord",
     "allowPasswordLogin": "Tillat passordpålogging",
     "allowPasswordLoginDesc": "Brukernavn/passord pålogging",
-    "oidcAutoProvision": "Opprett eksterne kontoer automatisk",
-    "oidcAutoProvisionDesc": "Opprett en konto første gang noen logger på via en ekstern pålogging som SSO eller LDAP, selv når registreringen er av",
+    "externalAutoProvision": "Opprett eksterne kontoer automatisk",
+    "externalAutoProvisionDesc": "Opprett en konto første gang noen logger på via en ekstern pålogging som SSO eller LDAP, selv når registreringen er av",
     "secondFactorAfterExternalLogin": "Be om en annen faktor etter eksterne pålogginger (SSO, GitHub, Google, LDAP)",
     "secondFactorAfterExternalLoginDesc": "Av, en registrert sekundær faktor blir bare spurt etter passord og andre lokale pålogginger, samme som før. På, den blir spurt etter hver påloggingsmetode, inkludert SSO og LDAP.",
     "allowPasswordReset": "Tillat tilbakestilling av passord",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Ingen utløpsdato",
     "revokedBadge": "OPPHEVET",
     "authTypeDual": "Dobbel autentisering",
-    "authTypeOidc": "Ekstern",
+    "authTypeExternal": "Ekstern",
     "authTypeLocal": "Lokalt",
     "adminStatusAdministrator": "Administrator",
     "adminStatusRegularUser": "Vanlig bruker",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Tillat både ekstern pålogging og passordpålogging",
     "linkAccountTargetUsername": "Brukernavn for lokal konto",
     "linkAccountTargetPlaceholder": "Skriv inn brukernavnet for den lokale kontoen som skal kobles til",
-    "linkAccountOidcUsername": "Brukernavn for ekstern konto",
-    "linkAccountOidcPlaceholder": "Skriv inn brukernavnet for den eksterne kontoen som skal slås sammen",
-    "linkAccountOidcNotFound": "Ingen ekstern konto funnet med det brukernavnet",
+    "linkAccountExternalUsername": "Brukernavn for ekstern konto",
+    "linkAccountExternalPlaceholder": "Skriv inn brukernavnet for den eksterne kontoen som skal slås sammen",
+    "linkAccountExternalNotFound": "Ingen ekstern konto funnet med det brukernavnet",
     "linkAccounts": "Koble sammen kontoer",
     "linkAccountSuccess": "Kontoer er koblet sammen",
     "linkAccountFailed": "Kunne ikke koble kontoer",
@@ -1400,7 +1400,6 @@
     "saving": "Lagrer...",
     "updateRegistrationFailed": "Kunne ikke oppdatere registreringsinnstillingene",
     "updatePasswordLoginFailed": "Kunne ikke oppdatere passordinnstillingen for pålogging",
-    "updateOidcAutoProvisionFailed": "Kunne ikke oppdatere innstillingen for automatisk oppretting",
     "updateSecondFactorAfterExternalLoginFailed": "Kunne ikke oppdatere innstillingen for den andre faktoren",
     "updatePasswordResetFailed": "Kunne ikke oppdatere innstillingen for tilbakestilling av passord",
     "sessionTimeoutRange2": "Øktens tidsavbrudd må være mellom 1 og 720 timer",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "LÅST",
     "dataLockedNotice": "{{username}}sine data forblir låst til de logger seg inn igjen. Vertene, påloggingsinformasjonen og kodeutdragene deres kan ikke vises eller redigeres før da.",
     "resetPasswordTitle": "Tilbakestill passord",
-    "resetPasswordOidcOnly": "Denne brukeren logger seg på via en ekstern leverandør og har ikke noe passord.",
+    "resetPasswordExternalOnly": "Denne brukeren logger seg på via en ekstern leverandør og har ikke noe passord.",
     "resetPasswordPlaceholder": "Nytt passord",
     "resetPasswordBtn": "Tilbakestill",
     "resetPasswordWorking": "Tilbakestiller...",
@@ -1742,7 +1741,7 @@
         "importFailed": "Importen mislyktes: {{error}}",
         "roleUser": "Bruker",
         "authMethodDual": "Dobbel autentisering",
-        "authMethodOidc": "Ekstern",
+        "authMethodExternal": "Ekstern",
         "done": "Ferdig",
         "apiKeyNameRequired": "Nøkkelnavn er obligatorisk",
         "apiKeyCreated": "API-nøkkelen «{{name}}» ble opprettet",
diff --git a/src/ui/locales/translated/pl_PL.json b/src/ui/locales/translated/pl_PL.json
index 58e5d63b3..090ed9af4 100644
--- a/src/ui/locales/translated/pl_PL.json
+++ b/src/ui/locales/translated/pl_PL.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Wymuś keyboard-interactive",
     "overrideCredentialUsername": "Zastąp nazwę użytkownika poświadczeń",
     "overrideCredentialUsernameDesc": "Użyj nazwy użytkownika określonej powyżej zamiast nazwy użytkownika podanej w poświadczeniu",
-    "oidcUsernameHint": "Użyj $external.username, aby wpisać nazwę, której użyłeś do zalogowania się za pomocą SSO lub LDAP.",
+    "externalUsernameHint": "Użyj $external.username, aby wpisać nazwę, której użyłeś do zalogowania się za pomocą SSO lub LDAP.",
     "jumpHostChain": "Łańcuch hostów pośrednich",
     "portKnocking": "Port Knocking",
     "addKnock": "Dodaj port",
@@ -977,7 +977,7 @@
     "noSearchResults": "Brak połączeń pasujących do wyszukiwania",
     "rename": "Zmień nazwę sesji"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Wymagane uwierzytelnianie dwuskładnikowe",
     "totpCodeLabel": "Kod weryfikacyjny",
     "totpVerify": "Zweryfikuj",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "Nie udało się zweryfikować kodu resetowania",
     "failedCompleteReset": "Nie udało się ukończyć resetowania hasła",
     "invalidTotpCode": "Nieprawidłowy kod TOTP",
-    "failedOidcLogin": "Nie udało się rozpocząć logowania zewnętrznego",
-    "silentSigninOidcUnavailable": "Poproszono o ciche logowanie, ale nie skonfigurowano logowania zewnętrznego.",
+    "failedExternalLogin": "Nie udało się rozpocząć logowania zewnętrznego",
+    "silentSigninExternalUnavailable": "Poproszono o ciche logowanie, ale nie skonfigurowano logowania zewnętrznego.",
     "failedUserInfo": "Nie udało się pobrać informacji o użytkowniku po zalogowaniu",
-    "oidcAuthFailed": "Nie udało się zalogować z zewnątrz",
+    "externalAuthFailed": "Nie udało się zalogować z zewnątrz",
     "invalidAuthUrl": "Otrzymano nieprawidłowy adres URL autoryzacji z serwera",
     "requiredField": "To pole jest wymagane",
     "minLength": "Minimalna długość to {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "Pozwól nowym użytkownikom na samodzielną rejestrację przy użyciu nazwy użytkownika i hasła",
     "allowPasswordLogin": "Zezwalaj na logowanie hasłem",
     "allowPasswordLoginDesc": "Logowanie nazwą użytkownika i hasłem",
-    "oidcAutoProvision": "Automatyczne tworzenie kont zewnętrznych",
-    "oidcAutoProvisionDesc": "Utwórz konto za pierwszym razem, gdy ktoś zaloguje się za pomocą logowania zewnętrznego, takiego jak SSO lub LDAP, nawet jeśli rejestracja jest wyłączona",
+    "externalAutoProvision": "Automatyczne tworzenie kont zewnętrznych",
+    "externalAutoProvisionDesc": "Utwórz konto za pierwszym razem, gdy ktoś zaloguje się za pomocą logowania zewnętrznego, takiego jak SSO lub LDAP, nawet jeśli rejestracja jest wyłączona",
     "secondFactorAfterExternalLogin": "Poproś o drugi czynnik po logowaniu zewnętrznym (SSO, GitHub, Google, LDAP)",
     "secondFactorAfterExternalLoginDesc": "Wyłączona, drugi czynnik uwierzytelniania jest wymagany tylko po podaniu hasła i innych lokalnych logowaniach, tak jak poprzednio. Włączona, jest wymagany po każdej metodzie logowania, w tym SSO i LDAP.",
     "allowPasswordReset": "Zezwól na resetowanie hasła",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Brak wygaśnięcia",
     "revokedBadge": "UNIEWAŻNIONY",
     "authTypeDual": "Podwójne uwierzytelnianie",
-    "authTypeOidc": "Zewnętrzny",
+    "authTypeExternal": "Zewnętrzny",
     "authTypeLocal": "Lokalne",
     "adminStatusAdministrator": "Administrator",
     "adminStatusRegularUser": "Zwykły użytkownik",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Zezwalaj na logowanie zewnętrzne i za pomocą hasła",
     "linkAccountTargetUsername": "Nazwa użytkownika konta lokalnego",
     "linkAccountTargetPlaceholder": "Wprowadź nazwę użytkownika konta lokalnego, z którym chcesz je połączyć",
-    "linkAccountOidcUsername": "Nazwa użytkownika konta zewnętrznego",
-    "linkAccountOidcPlaceholder": "Wprowadź nazwę użytkownika konta przeznaczonego wyłącznie do użytku zewnętrznego, aby je scalić",
-    "linkAccountOidcNotFound": "Nie znaleziono konta przeznaczonego wyłącznie do użytku zewnętrznego o tej nazwie użytkownika",
+    "linkAccountExternalUsername": "Nazwa użytkownika konta zewnętrznego",
+    "linkAccountExternalPlaceholder": "Wprowadź nazwę użytkownika konta przeznaczonego wyłącznie do użytku zewnętrznego, aby je scalić",
+    "linkAccountExternalNotFound": "Nie znaleziono konta przeznaczonego wyłącznie do użytku zewnętrznego o tej nazwie użytkownika",
     "linkAccounts": "Połącz konta",
     "linkAccountSuccess": "Konta zostały pomyślnie połączone",
     "linkAccountFailed": "Nie udało się połączyć kont",
@@ -1400,7 +1400,6 @@
     "saving": "Zapisywanie...",
     "updateRegistrationFailed": "Nie udało się zaktualizować ustawień rejestracji",
     "updatePasswordLoginFailed": "Nie udało się zaktualizować ustawień logowania hasłem",
-    "updateOidcAutoProvisionFailed": "Nie udało się zaktualizować ustawienia automatycznego tworzenia",
     "updateSecondFactorAfterExternalLoginFailed": "Nie udało się zaktualizować ustawień drugiego czynnika uwierzytelniania",
     "updatePasswordResetFailed": "Nie udało się zaktualizować ustawienia resetowania hasła",
     "sessionTimeoutRange2": "Limit czasu sesji musi mieścić się w przedziale od 1 do 720 godzin",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "ZABLOKOWANE",
     "dataLockedNotice": "Dane użytkownika {{username}} pozostaną zablokowane do jego następnego zalogowania. Do tego czasu nie można przeglądać ani edytować jego hostów, poświadczeń i snippetów.",
     "resetPasswordTitle": "Zresetuj hasło",
-    "resetPasswordOidcOnly": "Ten użytkownik loguje się za pośrednictwem zewnętrznego dostawcy i nie ma hasła.",
+    "resetPasswordExternalOnly": "Ten użytkownik loguje się za pośrednictwem zewnętrznego dostawcy i nie ma hasła.",
     "resetPasswordPlaceholder": "Nowe hasło",
     "resetPasswordBtn": "Resetuj",
     "resetPasswordWorking": "Resetowanie...",
@@ -1742,7 +1741,7 @@
         "importFailed": "Import nie powiódł się: {{error}}",
         "roleUser": "Użytkownik",
         "authMethodDual": "Podwójne uwierzytelnianie",
-        "authMethodOidc": "Zewnętrzny",
+        "authMethodExternal": "Zewnętrzny",
         "done": "Gotowe",
         "apiKeyNameRequired": "Nazwa klucza jest wymagana",
         "apiKeyCreated": "Utworzono klucz API „{{name}}”",
diff --git a/src/ui/locales/translated/pt_BR.json b/src/ui/locales/translated/pt_BR.json
index c278da5d7..5f28a52a8 100644
--- a/src/ui/locales/translated/pt_BR.json
+++ b/src/ui/locales/translated/pt_BR.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Forçar interação por teclado",
     "overrideCredentialUsername": "Substituir nome de usuário da credencial",
     "overrideCredentialUsernameDesc": "Use o nome de usuário especificado acima em vez do nome de usuário da credencial.",
-    "oidcUsernameHint": "Use $external.username para preencher o nome com o qual você fez login por meio de SSO ou LDAP.",
+    "externalUsernameHint": "Use $external.username para preencher o nome com o qual você fez login por meio de SSO ou LDAP.",
     "jumpHostChain": "Cadeia de anfitriões de salto",
     "portKnocking": "Batendo ao porto",
     "addKnock": "Adicionar porta",
@@ -977,7 +977,7 @@
     "noSearchResults": "Nenhuma conexão corresponde à sua pesquisa.",
     "rename": "Renomear sessão"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Autenticação de dois fatores obrigatória",
     "totpCodeLabel": "Código de verificação",
     "totpVerify": "Verificar",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "Falha ao verificar o código de reinicialização",
     "failedCompleteReset": "Falha ao concluir a redefinição de senha.",
     "invalidTotpCode": "Código TOTP inválido",
-    "failedOidcLogin": "Falha ao iniciar o login externo.",
-    "silentSigninOidcUnavailable": "Foi solicitado o login silencioso, mas nenhum login externo está configurado.",
+    "failedExternalLogin": "Falha ao iniciar o login externo.",
+    "silentSigninExternalUnavailable": "Foi solicitado o login silencioso, mas nenhum login externo está configurado.",
     "failedUserInfo": "Falha ao obter informações do usuário após o login",
-    "oidcAuthFailed": "Falha no login externo",
+    "externalAuthFailed": "Falha no login externo",
     "invalidAuthUrl": "URL de autorização inválida recebida do backend.",
     "requiredField": "Este campo é obrigatório",
     "minLength": "O comprimento mínimo é {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "Permita que novos usuários se cadastrem automaticamente com um nome de usuário e senha.",
     "allowPasswordLogin": "Permitir login com senha",
     "allowPasswordLoginDesc": "Login com nome de usuário/senha",
-    "oidcAutoProvision": "Criar contas externas automaticamente",
-    "oidcAutoProvisionDesc": "Criar uma conta na primeira vez que alguém fizer login por meio de um método externo, como SSO ou LDAP, mesmo quando o registro estiver desativado.",
+    "externalAutoProvision": "Criar contas externas automaticamente",
+    "externalAutoProvisionDesc": "Criar uma conta na primeira vez que alguém fizer login por meio de um método externo, como SSO ou LDAP, mesmo quando o registro estiver desativado.",
     "secondFactorAfterExternalLogin": "Solicitar um segundo fator de autenticação após logins externos (SSO, GitHub, Google, LDAP)",
     "secondFactorAfterExternalLoginDesc": "Desativado, o segundo fator de autenticação cadastrado só é solicitado após a senha e outros logins locais, como antes. Ativado, ele é solicitado após todos os métodos de login, incluindo SSO e LDAP.",
     "allowPasswordReset": "Permitir redefinição de senha",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Sem data de validade",
     "revokedBadge": "REVOGADO",
     "authTypeDual": "Autenticação dupla",
-    "authTypeOidc": "Externo",
+    "authTypeExternal": "Externo",
     "authTypeLocal": "Local",
     "adminStatusAdministrator": "Administrador",
     "adminStatusRegularUser": "Usuário regular",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Permitir login externo e com senha",
     "linkAccountTargetUsername": "Nome de usuário da conta local",
     "linkAccountTargetPlaceholder": "Insira o nome de usuário da conta local para vincular.",
-    "linkAccountOidcUsername": "Nome de usuário da conta externa",
-    "linkAccountOidcPlaceholder": "Insira o nome de usuário da conta externa para mesclar.",
-    "linkAccountOidcNotFound": "Nenhuma conta externa encontrada com esse nome de usuário.",
+    "linkAccountExternalUsername": "Nome de usuário da conta externa",
+    "linkAccountExternalPlaceholder": "Insira o nome de usuário da conta externa para mesclar.",
+    "linkAccountExternalNotFound": "Nenhuma conta externa encontrada com esse nome de usuário.",
     "linkAccounts": "Vincular contas",
     "linkAccountSuccess": "Contas vinculadas com sucesso",
     "linkAccountFailed": "Falha ao vincular as contas",
@@ -1400,7 +1400,6 @@
     "saving": "Salvando...",
     "updateRegistrationFailed": "Falha ao atualizar as configurações de registro",
     "updatePasswordLoginFailed": "Falha ao atualizar as configurações de login da senha.",
-    "updateOidcAutoProvisionFailed": "Falha ao atualizar a configuração de criação automática.",
     "updateSecondFactorAfterExternalLoginFailed": "Falha ao atualizar a configuração do segundo fator.",
     "updatePasswordResetFailed": "Falha ao atualizar as configurações de redefinição de senha",
     "sessionTimeoutRange2": "O tempo limite da sessão deve estar entre 1 e 720 horas.",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "TRANCADO",
     "dataLockedNotice": "Os dados de {{username}}permanecem bloqueados até o próximo login. Seus hosts, credenciais e trechos de código não podem ser visualizados ou editados até então.",
     "resetPasswordTitle": "Redefinir senha",
-    "resetPasswordOidcOnly": "Este usuário faz login por meio de um provedor externo e não possui senha.",
+    "resetPasswordExternalOnly": "Este usuário faz login por meio de um provedor externo e não possui senha.",
     "resetPasswordPlaceholder": "Nova Senha",
     "resetPasswordBtn": "Reiniciar",
     "resetPasswordWorking": "Reiniciando...",
@@ -1742,7 +1741,7 @@
         "importFailed": "A importação falhou: {{error}}",
         "roleUser": "Usuário",
         "authMethodDual": "Autenticação dupla",
-        "authMethodOidc": "Externo",
+        "authMethodExternal": "Externo",
         "done": "Feito",
         "apiKeyNameRequired": "É necessário nomear a chave.",
         "apiKeyCreated": "Chave de API \"{{name}}\" criada",
diff --git a/src/ui/locales/translated/pt_PT.json b/src/ui/locales/translated/pt_PT.json
index 0f4a1129e..f29466b70 100644
--- a/src/ui/locales/translated/pt_PT.json
+++ b/src/ui/locales/translated/pt_PT.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Forçar autenticação Keyboard-Interactive",
     "overrideCredentialUsername": "Substituir nome de utilizador da credencial",
     "overrideCredentialUsernameDesc": "Utilizar o nome de utilizador especificado acima em vez do nome de utilizador da credencial",
-    "oidcUsernameHint": "Utilize $external. username para preencher o nome com o qual iniciou sessão através de SSO ou LDAP.",
+    "externalUsernameHint": "Utilize $external. username para preencher o nome com o qual iniciou sessão através de SSO ou LDAP.",
     "jumpHostChain": "Cadeia de hosts de salto",
     "portKnocking": "Port Knocking",
     "addKnock": "Adicionar porta",
@@ -977,7 +977,7 @@
     "noSearchResults": "Nenhuma ligação corresponde à sua pesquisa",
     "rename": "Renomear sessão"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Autenticação de dois fatores necessária",
     "totpCodeLabel": "Código de verificação",
     "totpVerify": "Verificar",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "Falha ao verificar o código de reposição",
     "failedCompleteReset": "Falha ao concluir a reposição da palavra-passe",
     "invalidTotpCode": "Código TOTP inválido",
-    "failedOidcLogin": "Falha ao iniciar o login externo.",
-    "silentSigninOidcUnavailable": "Foi solicitado o login silencioso, mas não está configurado nenhum login externo.",
+    "failedExternalLogin": "Falha ao iniciar o login externo.",
+    "silentSigninExternalUnavailable": "Foi solicitado o login silencioso, mas não está configurado nenhum login externo.",
     "failedUserInfo": "Falha ao obter informações do utilizador após o início de sessão",
-    "oidcAuthFailed": "Falha no login externo",
+    "externalAuthFailed": "Falha no login externo",
     "invalidAuthUrl": "URL de autorização inválida recebida do backend",
     "requiredField": "Este campo é obrigatório",
     "minLength": "O comprimento mínimo é {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "Permitir que novos utilizadores se auto-registem com nome de utilizador e palavra-passe",
     "allowPasswordLogin": "Permitir Início de Sessão com Palavra-passe",
     "allowPasswordLoginDesc": "Início de sessão com nome de utilizador/palavra-passe",
-    "oidcAutoProvision": "Criar contas externas automaticamente",
-    "oidcAutoProvisionDesc": "Criar uma conta na primeira vez que alguém inicia sessão através de um método externo, como SSO ou LDAP, mesmo quando o registo está desativado.",
+    "externalAutoProvision": "Criar contas externas automaticamente",
+    "externalAutoProvisionDesc": "Criar uma conta na primeira vez que alguém inicia sessão através de um método externo, como SSO ou LDAP, mesmo quando o registo está desativado.",
     "secondFactorAfterExternalLogin": "Solicitar um segundo fator de autenticação após os logins externos (SSO, GitHub, Google, LDAP)",
     "secondFactorAfterExternalLoginDesc": "Desativado, o segundo fator de autenticação registado só é solicitado após a password e outros logins locais, como anteriormente. Ativado, é solicitado após todos os métodos de login, incluindo SSO e LDAP.",
     "allowPasswordReset": "Permitir Reposição de Palavra-passe",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Sem expiração",
     "revokedBadge": "REVOGADA",
     "authTypeDual": "Autenticação Dupla",
-    "authTypeOidc": "Externo",
+    "authTypeExternal": "Externo",
     "authTypeLocal": "Local",
     "adminStatusAdministrator": "Administrador",
     "adminStatusRegularUser": "Utilizador Regular",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Permitir login externo e com password",
     "linkAccountTargetUsername": "Nome de utilizador da conta local",
     "linkAccountTargetPlaceholder": "Introduza o nome de utilizador da conta local a associar",
-    "linkAccountOidcUsername": "Nome de utilizador da conta externa",
-    "linkAccountOidcPlaceholder": "Introduza o nome de utilizador da conta externa para fundir.",
-    "linkAccountOidcNotFound": "Nenhuma conta externa encontrada com este nome de utilizador.",
+    "linkAccountExternalUsername": "Nome de utilizador da conta externa",
+    "linkAccountExternalPlaceholder": "Introduza o nome de utilizador da conta externa para fundir.",
+    "linkAccountExternalNotFound": "Nenhuma conta externa encontrada com este nome de utilizador.",
     "linkAccounts": "Associar contas",
     "linkAccountSuccess": "Contas associadas com sucesso",
     "linkAccountFailed": "Falha ao associar contas",
@@ -1400,7 +1400,6 @@
     "saving": "A guardar...",
     "updateRegistrationFailed": "Falha ao atualizar a definição de registo",
     "updatePasswordLoginFailed": "Falha ao atualizar a definição de início de sessão por palavra-passe",
-    "updateOidcAutoProvisionFailed": "Falha ao atualizar a configuração de criação automática.",
     "updateSecondFactorAfterExternalLoginFailed": "Falha ao atualizar a configuração do segundo fator.",
     "updatePasswordResetFailed": "Falha ao atualizar a definição de reposição de palavra-passe",
     "sessionTimeoutRange2": "O tempo limite da sessão deve estar entre 1 e 720 horas",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "BLOQUEADO",
     "dataLockedNotice": "Os dados de {{username}} permanecem bloqueados até ao próximo início de sessão. As suas máquinas, credenciais e fragmentos não podem ser visualizados nem editados até lá.",
     "resetPasswordTitle": "Redefinir palavra-passe",
-    "resetPasswordOidcOnly": "Este utilizador autentica-se através de um fornecedor externo e não tem palavra-passe.",
+    "resetPasswordExternalOnly": "Este utilizador autentica-se através de um fornecedor externo e não tem palavra-passe.",
     "resetPasswordPlaceholder": "Nova palavra-passe",
     "resetPasswordBtn": "Redefinir",
     "resetPasswordWorking": "A redefinir...",
@@ -1742,7 +1741,7 @@
         "importFailed": "A importação falhou: {{error}}",
         "roleUser": "Utilizador",
         "authMethodDual": "Autenticação Dupla",
-        "authMethodOidc": "Externo",
+        "authMethodExternal": "Externo",
         "done": "Concluído",
         "apiKeyNameRequired": "Nome da chave é obrigatório",
         "apiKeyCreated": "Chave de API \"{{name}}\" criada",
diff --git a/src/ui/locales/translated/ro_RO.json b/src/ui/locales/translated/ro_RO.json
index 5a849e40d..320b0cde9 100644
--- a/src/ui/locales/translated/ro_RO.json
+++ b/src/ui/locales/translated/ro_RO.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Forțați interacțiunea cu tastatura",
     "overrideCredentialUsername": "Suprascrierea acreditărilor de utilizator",
     "overrideCredentialUsernameDesc": "Folosește numele de utilizator specificat mai sus în locul numelui de utilizator al acreditării",
-    "oidcUsernameHint": "Folosește $external.username pentru a completa numele cu care te-ai conectat prin SSO sau LDAP.",
+    "externalUsernameHint": "Folosește $external.username pentru a completa numele cu care te-ai conectat prin SSO sau LDAP.",
     "jumpHostChain": "Lanțul gazdă Jump",
     "portKnocking": "Lovitura în port",
     "addKnock": "Adăugați port",
@@ -977,7 +977,7 @@
     "noSearchResults": "Nicio conexiune nu corespunde căutării dvs.",
     "rename": "Redenumiți sesiunea"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Autentificare cu doi factori necesară",
     "totpCodeLabel": "Cod de verificare",
     "totpVerify": "Verifica",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "Nu s-a putut verifica codul de resetare",
     "failedCompleteReset": "Resetarea parolei nu a reușit",
     "invalidTotpCode": "Cod TOTP nevalid",
-    "failedOidcLogin": "Nu s-a putut porni conectarea externă",
-    "silentSigninOidcUnavailable": "A fost solicitată conectarea silențioasă, dar nu este configurată nicio conectare externă.",
+    "failedExternalLogin": "Nu s-a putut porni conectarea externă",
+    "silentSigninExternalUnavailable": "A fost solicitată conectarea silențioasă, dar nu este configurată nicio conectare externă.",
     "failedUserInfo": "Nu s-au putut obține informații despre utilizator după conectare",
-    "oidcAuthFailed": "Conectarea externă a eșuat",
+    "externalAuthFailed": "Conectarea externă a eșuat",
     "invalidAuthUrl": "Adresă URL de autorizare nevalidă primită de la backend",
     "requiredField": "Acest câmp este obligatoriu",
     "minLength": "Lungimea minimă este {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "Permiteți noilor utilizatori să se înregistreze automat cu un nume de utilizator și o parolă",
     "allowPasswordLogin": "Permiteți conectarea cu parolă",
     "allowPasswordLoginDesc": "Nume de utilizator/parolă de conectare",
-    "oidcAutoProvision": "Creați automat conturi externe",
-    "oidcAutoProvisionDesc": "Creați un cont prima dată când cineva se conectează printr-o conexiune externă, cum ar fi SSO sau LDAP, chiar și atunci când înregistrarea este dezactivată",
+    "externalAutoProvision": "Creați automat conturi externe",
+    "externalAutoProvisionDesc": "Creați un cont prima dată când cineva se conectează printr-o conexiune externă, cum ar fi SSO sau LDAP, chiar și atunci când înregistrarea este dezactivată",
     "secondFactorAfterExternalLogin": "Solicitați un al doilea factor după autentificările externe (SSO, GitHub, Google, LDAP)",
     "secondFactorAfterExternalLoginDesc": "Dezactivat, un al doilea factor înregistrat este solicitat doar după parolă și alte autentificări locale, la fel ca înainte. Activat, este solicitat după fiecare metodă de autentificare, inclusiv SSO și LDAP.",
     "allowPasswordReset": "Permite resetarea parolei",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Fără expirare",
     "revokedBadge": "REVOCAT",
     "authTypeDual": "Autentificare duală",
-    "authTypeOidc": "Extern",
+    "authTypeExternal": "Extern",
     "authTypeLocal": "Local",
     "adminStatusAdministrator": "Administrator",
     "adminStatusRegularUser": "Utilizator obișnuit",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Permiteți atât conectarea externă, cât și cea cu parolă",
     "linkAccountTargetUsername": "Nume de utilizator al contului local",
     "linkAccountTargetPlaceholder": "Introduceți numele de utilizator al contului local la care doriți să faceți legătura",
-    "linkAccountOidcUsername": "Nume de utilizator al contului extern",
-    "linkAccountOidcPlaceholder": "Introduceți numele de utilizator al contului extern pentru care doriți să îl îmbinați",
-    "linkAccountOidcNotFound": "Nu s-a găsit niciun cont extern cu acel nume de utilizator.",
+    "linkAccountExternalUsername": "Nume de utilizator al contului extern",
+    "linkAccountExternalPlaceholder": "Introduceți numele de utilizator al contului extern pentru care doriți să îl îmbinați",
+    "linkAccountExternalNotFound": "Nu s-a găsit niciun cont extern cu acel nume de utilizator.",
     "linkAccounts": "Conectare conturi",
     "linkAccountSuccess": "Conturi conectate cu succes",
     "linkAccountFailed": "Conectarea conturilor nu a reușit",
@@ -1400,7 +1400,6 @@
     "saving": "Economisire...",
     "updateRegistrationFailed": "Nu s-a putut actualiza setările de înregistrare",
     "updatePasswordLoginFailed": "Setările de conectare cu parola nu au putut fi actualizate.",
-    "updateOidcAutoProvisionFailed": "Nu s-a putut actualiza setarea de creare automată",
     "updateSecondFactorAfterExternalLoginFailed": "Nu s-a putut actualiza setarea celui de-al doilea factor",
     "updatePasswordResetFailed": "Setările de resetare a parolei nu au putut fi actualizate.",
     "sessionTimeoutRange2": "Timpul de expirare al sesiunii trebuie să fie între 1 și 720 de ore",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "BLOCAT",
     "dataLockedNotice": "Datele utilizatorului {{username}}rămân blocate până la următoarea conectare. Gazdele, acreditările și fragmentele de date nu pot fi vizualizate sau editate până atunci.",
     "resetPasswordTitle": "Resetare parolă",
-    "resetPasswordOidcOnly": "Acest utilizator se conectează printr-un furnizor extern și nu are parolă.",
+    "resetPasswordExternalOnly": "Acest utilizator se conectează printr-un furnizor extern și nu are parolă.",
     "resetPasswordPlaceholder": "Parolă Nouă",
     "resetPasswordBtn": "Resetare",
     "resetPasswordWorking": "Resetare...",
@@ -1742,7 +1741,7 @@
         "importFailed": "Importul a eșuat: {{error}}",
         "roleUser": "Utilizator",
         "authMethodDual": "Autentificare duală",
-        "authMethodOidc": "Extern",
+        "authMethodExternal": "Extern",
         "done": "Făcut",
         "apiKeyNameRequired": "Numele cheii este obligatoriu",
         "apiKeyCreated": "Cheia API „{{name}}” a fost creată",
diff --git a/src/ui/locales/translated/ru_RU.json b/src/ui/locales/translated/ru_RU.json
index 7d78861cd..6d32650d0 100644
--- a/src/ui/locales/translated/ru_RU.json
+++ b/src/ui/locales/translated/ru_RU.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Принудительно Keyboard-Interactive",
     "overrideCredentialUsername": "Переопределить имя пользователя учётных данных",
     "overrideCredentialUsernameDesc": "Использовать указанное выше имя пользователя вместо имени из учётных данных",
-    "oidcUsernameHint": "Используйте $external.username, чтобы указать имя, под которым вы вошли в систему через SSO или LDAP.",
+    "externalUsernameHint": "Используйте $external.username, чтобы указать имя, под которым вы вошли в систему через SSO или LDAP.",
     "jumpHostChain": "Цепочка Jump Host",
     "portKnocking": "Port Knocking",
     "addKnock": "Добавить порт",
@@ -977,7 +977,7 @@
     "noSearchResults": "Нет подключений, соответствующих поиску",
     "rename": "Переименовать сессию"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Требуется двухфакторная аутентификация",
     "totpCodeLabel": "Код подтверждения",
     "totpVerify": "Подтвердить",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "Не удалось проверить код сброса",
     "failedCompleteReset": "Не удалось завершить сброс пароля",
     "invalidTotpCode": "Неверный TOTP-код",
-    "failedOidcLogin": "Не удалось запустить внешний вход в систему.",
-    "silentSigninOidcUnavailable": "Был запрошен бесшумный вход в систему, но внешний вход не настроен.",
+    "failedExternalLogin": "Не удалось запустить внешний вход в систему.",
+    "silentSigninExternalUnavailable": "Был запрошен бесшумный вход в систему, но внешний вход не настроен.",
     "failedUserInfo": "Не удалось получить информацию о пользователе после входа",
-    "oidcAuthFailed": "Внешняя авторизация не удалась",
+    "externalAuthFailed": "Внешняя авторизация не удалась",
     "invalidAuthUrl": "Получен некорректный URL авторизации от серверной части",
     "requiredField": "Обязательное поле",
     "minLength": "Минимальная длина: {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "Позволяет новым пользователям регистрироваться, указывая имя пользователя и пароль",
     "allowPasswordLogin": "Разрешить вход по паролю",
     "allowPasswordLoginDesc": "Вход по имени пользователя и паролю",
-    "oidcAutoProvision": "Автоматическое создание внешних учетных записей",
-    "oidcAutoProvisionDesc": "При первом входе пользователя через внешний источник авторизации, такой как SSO или LDAP, учетная запись создается, даже если регистрация отключена.",
+    "externalAutoProvision": "Автоматическое создание внешних учетных записей",
+    "externalAutoProvisionDesc": "При первом входе пользователя через внешний источник авторизации, такой как SSO или LDAP, учетная запись создается, даже если регистрация отключена.",
     "secondFactorAfterExternalLogin": "После авторизации через внешние сервисы (SSO, GitHub, Google, LDAP) может потребоваться дополнительная авторизация.",
     "secondFactorAfterExternalLoginDesc": "Если отключено, зарегистрированный второй фактор аутентификации запрашивается только после ввода пароля и других локальных учетных записей, как и раньше. Если включено, он запрашивается после каждого метода входа в систему, включая SSO и LDAP.",
     "allowPasswordReset": "Разрешить сброс пароля",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Без срока действия",
     "revokedBadge": "ОТОЗВАН",
     "authTypeDual": "Двухфакторная аутентификация",
-    "authTypeOidc": "Внешний",
+    "authTypeExternal": "Внешний",
     "authTypeLocal": "Локальная",
     "adminStatusAdministrator": "Администратор",
     "adminStatusRegularUser": "Обычный пользователь",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Разрешите вход как извне, так и по паролю.",
     "linkAccountTargetUsername": "Имя пользователя локального аккаунта",
     "linkAccountTargetPlaceholder": "Введите имя пользователя локального аккаунта для связывания",
-    "linkAccountOidcUsername": "Имя пользователя внешней учетной записи",
-    "linkAccountOidcPlaceholder": "Введите имя пользователя внешней учетной записи для объединения.",
-    "linkAccountOidcNotFound": "Внешняя учетная запись с таким именем пользователя не найдена.",
+    "linkAccountExternalUsername": "Имя пользователя внешней учетной записи",
+    "linkAccountExternalPlaceholder": "Введите имя пользователя внешней учетной записи для объединения.",
+    "linkAccountExternalNotFound": "Внешняя учетная запись с таким именем пользователя не найдена.",
     "linkAccounts": "Связать аккаунты",
     "linkAccountSuccess": "Аккаунты успешно связаны",
     "linkAccountFailed": "Не удалось связать аккаунты",
@@ -1400,7 +1400,6 @@
     "saving": "Сохранение...",
     "updateRegistrationFailed": "Не удалось обновить настройки регистрации",
     "updatePasswordLoginFailed": "Не удалось обновить настройки входа по паролю",
-    "updateOidcAutoProvisionFailed": "Не удалось обновить настройку автоматического создания.",
     "updateSecondFactorAfterExternalLoginFailed": "Не удалось обновить настройки второго фактора.",
     "updatePasswordResetFailed": "Не удалось обновить настройки сброса пароля",
     "sessionTimeoutRange2": "Тайм-аут сеанса должен быть от 1 до 720 часов",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "ЗАБЛОКИРОВАНО",
     "dataLockedNotice": "Данные {{username}} остаются заблокированными до следующего входа. Хосты, учётные данные и сниппеты нельзя просмотреть или отредактировать до тех пор.",
     "resetPasswordTitle": "Сброс пароля",
-    "resetPasswordOidcOnly": "Этот пользователь входит через внешнего провайдера и не имеет пароля.",
+    "resetPasswordExternalOnly": "Этот пользователь входит через внешнего провайдера и не имеет пароля.",
     "resetPasswordPlaceholder": "Новый пароль",
     "resetPasswordBtn": "Сбросить",
     "resetPasswordWorking": "Сброс...",
@@ -1742,7 +1741,7 @@
         "importFailed": "Импорт не удался: {{error}}",
         "roleUser": "Пользователь",
         "authMethodDual": "Двойная аутентификация",
-        "authMethodOidc": "Внешний",
+        "authMethodExternal": "Внешний",
         "done": "Готово",
         "apiKeyNameRequired": "Требуется имя ключа",
         "apiKeyCreated": "API-ключ «{{name}}» создан",
diff --git a/src/ui/locales/translated/sr_SP.json b/src/ui/locales/translated/sr_SP.json
index 1092a9a88..77e00008d 100644
--- a/src/ui/locales/translated/sr_SP.json
+++ b/src/ui/locales/translated/sr_SP.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Присилна интерактивност тастатуре",
     "overrideCredentialUsername": "Замени корисничко име акредитива",
     "overrideCredentialUsernameDesc": "Користите корисничко име наведено горе уместо корисничког имена акредитива",
-    "oidcUsernameHint": "Користите $external.корисничко име да бисте попунили име са којим сте се пријавили путем SSO или LDAP.",
+    "externalUsernameHint": "Користите $external.корисничко име да бисте попунили име са којим сте се пријавили путем SSO или LDAP.",
     "jumpHostChain": "Скок ланца хоста",
     "portKnocking": "Лук Нокинг",
     "addKnock": "Додај порт",
@@ -977,7 +977,7 @@
     "noSearchResults": "Ниједна веза не одговара вашој претрази",
     "rename": "Преименуј сесију"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Потребна је двофакторска аутентификација",
     "totpCodeLabel": "Верификациони код",
     "totpVerify": "Верификуј",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "Није успело потврђивање кода за ресетовање",
     "failedCompleteReset": "Ресетовање лозинке није успело",
     "invalidTotpCode": "Неважећи TOTP код",
-    "failedOidcLogin": "Покретање екстерног пријављивања није успело",
-    "silentSigninOidcUnavailable": "Затражено је тихо пријављивање, али није подешено спољно пријављивање.",
+    "failedExternalLogin": "Покретање екстерног пријављивања није успело",
+    "silentSigninExternalUnavailable": "Затражено је тихо пријављивање, али није подешено спољно пријављивање.",
     "failedUserInfo": "Није успело добијање корисничких података након пријаве",
-    "oidcAuthFailed": "Спољно пријављивање није успело",
+    "externalAuthFailed": "Спољно пријављивање није успело",
     "invalidAuthUrl": "Неважећи URL за ауторизацију примљен од бекенда",
     "requiredField": "Ово поље је обавезно",
     "minLength": "Минимална дужина је {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "Дозволите новим корисницима да се сами региструју помоћу корисничког имена и лозинке",
     "allowPasswordLogin": "Дозволи пријаву лозинком",
     "allowPasswordLoginDesc": "Пријава корисничким именом/лозинком",
-    "oidcAutoProvision": "Аутоматски креирај екстерне налоге",
-    "oidcAutoProvisionDesc": "Креирајте налог први пут када се неко пријави путем екстерног пријављивања као што је SSO или LDAP, чак и када је регистрација искључена",
+    "externalAutoProvision": "Аутоматски креирај екстерне налоге",
+    "externalAutoProvisionDesc": "Креирајте налог први пут када се неко пријави путем екстерног пријављивања као што је SSO или LDAP, чак и када је регистрација искључена",
     "secondFactorAfterExternalLogin": "Захтевајте други фактор након екстерних пријављивања (SSO, GitHub, Google, LDAP)",
     "secondFactorAfterExternalLoginDesc": "Искључено, регистровани други фактор се тражи само након лозинке и других локалних пријављивања, исто као и пре. Укључено, тражи се након сваке методе пријављивања, укључујући SSO и LDAP.",
     "allowPasswordReset": "Дозволи ресетовање лозинке",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Без истека",
     "revokedBadge": "ПОНИШТЕНО",
     "authTypeDual": "Двострука аутентификација",
-    "authTypeOidc": "Спољни",
+    "authTypeExternal": "Спољни",
     "authTypeLocal": "Локално",
     "adminStatusAdministrator": "Администратор",
     "adminStatusRegularUser": "Редован корисник",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Дозволи и спољашње пријављивање и пријављивање лозинком",
     "linkAccountTargetUsername": "Корисничко име локалног налога",
     "linkAccountTargetPlaceholder": "Унесите корисничко име локалног налога за повезивање",
-    "linkAccountOidcUsername": "Корисничко име екстерног налога",
-    "linkAccountOidcPlaceholder": "Унесите корисничко име само за екстерни налог за спајање",
-    "linkAccountOidcNotFound": "Није пронађен ниједан спољни налог са тим корисничким именом",
+    "linkAccountExternalUsername": "Корисничко име екстерног налога",
+    "linkAccountExternalPlaceholder": "Унесите корисничко име само за екстерни налог за спајање",
+    "linkAccountExternalNotFound": "Није пронађен ниједан спољни налог са тим корисничким именом",
     "linkAccounts": "Повежи налоге",
     "linkAccountSuccess": "Налози су успешно повезани",
     "linkAccountFailed": "Повезивање налога није успело",
@@ -1400,7 +1400,6 @@
     "saving": "Чување...",
     "updateRegistrationFailed": "Ажурирање подешавања регистрације није успело",
     "updatePasswordLoginFailed": "Ажурирање подешавања за пријаву лозинком није успело",
-    "updateOidcAutoProvisionFailed": "Ажурирање подешавања аутоматског креирања није успело",
     "updateSecondFactorAfterExternalLoginFailed": "Ажурирање подешавања другог фактора није успело",
     "updatePasswordResetFailed": "Ажурирање подешавања за ресетовање лозинке није успело",
     "sessionTimeoutRange2": "Временско ограничење сесије мора бити између 1 и 720 сати",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "ЗАКЉУЧАНО",
     "dataLockedNotice": "Подаци корисника {{username}}остају закључани до њиховог следећег пријављивања. Њихови хостови, акредитиви и исечци не могу бити прегледани или уређивани до тада.",
     "resetPasswordTitle": "Ресетуј лозинку",
-    "resetPasswordOidcOnly": "Овај корисник се пријављује преко екстерног провајдера и нема лозинку.",
+    "resetPasswordExternalOnly": "Овај корисник се пријављује преко екстерног провајдера и нема лозинку.",
     "resetPasswordPlaceholder": "Нова лозинка",
     "resetPasswordBtn": "Ресетуј",
     "resetPasswordWorking": "Ресетовање...",
@@ -1742,7 +1741,7 @@
         "importFailed": "Увоз није успео: {{error}}",
         "roleUser": "Корисник",
         "authMethodDual": "Двострука аутентификација",
-        "authMethodOidc": "Спољни",
+        "authMethodExternal": "Спољни",
         "done": "Готово",
         "apiKeyNameRequired": "Назив кључа је обавезан",
         "apiKeyCreated": "API кључ „{{name}}“ је креиран",
diff --git a/src/ui/locales/translated/sv_SE.json b/src/ui/locales/translated/sv_SE.json
index 9cd5f55ec..6934e279a 100644
--- a/src/ui/locales/translated/sv_SE.json
+++ b/src/ui/locales/translated/sv_SE.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Tvinga tangentbordsinteraktivt",
     "overrideCredentialUsername": "Åsidosätt användarnamn för inloggningsuppgifter",
     "overrideCredentialUsernameDesc": "Använd användarnamnet som anges ovan istället för användarnamnet för inloggningsuppgifterna",
-    "oidcUsernameHint": "Använd $external.username för att fylla i namnet du loggade in med via SSO eller LDAP.",
+    "externalUsernameHint": "Använd $external.username för att fylla i namnet du loggade in med via SSO eller LDAP.",
     "jumpHostChain": "Hoppa värdkedja",
     "portKnocking": "Port Knocking",
     "addKnock": "Lägg till port",
@@ -977,7 +977,7 @@
     "noSearchResults": "Inga kontakter matchar din sökning",
     "rename": "Byt namn på sessionen"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Tvåfaktorsautentisering krävs",
     "totpCodeLabel": "Verifieringskod",
     "totpVerify": "Kontrollera",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "Misslyckades med att verifiera återställningskoden",
     "failedCompleteReset": "Misslyckades med att slutföra återställning av lösenord",
     "invalidTotpCode": "Ogiltig TOTP-kod",
-    "failedOidcLogin": "Misslyckades med att starta extern inloggning",
-    "silentSigninOidcUnavailable": "Tyst inloggning begärdes, men ingen extern inloggning är konfigurerad.",
+    "failedExternalLogin": "Misslyckades med att starta extern inloggning",
+    "silentSigninExternalUnavailable": "Tyst inloggning begärdes, men ingen extern inloggning är konfigurerad.",
     "failedUserInfo": "Misslyckades med att hämta användarinformation efter inloggning",
-    "oidcAuthFailed": "Extern inloggning misslyckades",
+    "externalAuthFailed": "Extern inloggning misslyckades",
     "invalidAuthUrl": "Ogiltig auktoriserings-URL mottagen från backend",
     "requiredField": "Detta fält är obligatoriskt",
     "minLength": "Minimilängden är {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "Låt nya användare registrera sig själva med användarnamn och lösenord",
     "allowPasswordLogin": "Tillåt lösenordsinloggning",
     "allowPasswordLoginDesc": "Användarnamn/lösenord inloggning",
-    "oidcAutoProvision": "Skapa externa konton automatiskt",
-    "oidcAutoProvisionDesc": "Skapa ett konto första gången någon loggar in via en extern inloggning som SSO eller LDAP, även när registreringen är avstängd",
+    "externalAutoProvision": "Skapa externa konton automatiskt",
+    "externalAutoProvisionDesc": "Skapa ett konto första gången någon loggar in via en extern inloggning som SSO eller LDAP, även när registreringen är avstängd",
     "secondFactorAfterExternalLogin": "Be om en andra faktor efter externa inloggningar (SSO, GitHub, Google, LDAP)",
     "secondFactorAfterExternalLoginDesc": "Av, en registrerad andra faktor efterfrågas endast efter lösenord och andra lokala inloggningar, samma som tidigare. På, den efterfrågas efter varje inloggningsmetod, inklusive SSO och LDAP.",
     "allowPasswordReset": "Tillåt lösenordsåterställning",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Ingen utgångsdatum",
     "revokedBadge": "ÅTERKALLAD",
     "authTypeDual": "Dubbel autentisering",
-    "authTypeOidc": "Extern",
+    "authTypeExternal": "Extern",
     "authTypeLocal": "Lokal",
     "adminStatusAdministrator": "Administratör",
     "adminStatusRegularUser": "Vanlig användare",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Tillåt både extern inloggning och lösenordsinloggning",
     "linkAccountTargetUsername": "Användarnamn för lokalt konto",
     "linkAccountTargetPlaceholder": "Ange användarnamnet för det lokala kontot som ska länkas till",
-    "linkAccountOidcUsername": "Användarnamn för externt konto",
-    "linkAccountOidcPlaceholder": "Ange användarnamnet för det endast externa kontot som ska sammanfogas",
-    "linkAccountOidcNotFound": "Inget externt konto hittades med det användarnamnet",
+    "linkAccountExternalUsername": "Användarnamn för externt konto",
+    "linkAccountExternalPlaceholder": "Ange användarnamnet för det endast externa kontot som ska sammanfogas",
+    "linkAccountExternalNotFound": "Inget externt konto hittades med det användarnamnet",
     "linkAccounts": "Länka konton",
     "linkAccountSuccess": "Konton har länkats",
     "linkAccountFailed": "Misslyckades med att länka konton",
@@ -1400,7 +1400,6 @@
     "saving": "Sparande...",
     "updateRegistrationFailed": "Misslyckades med att uppdatera registreringsinställningen",
     "updatePasswordLoginFailed": "Misslyckades med att uppdatera lösenordsinställningen för inloggning",
-    "updateOidcAutoProvisionFailed": "Misslyckades med att uppdatera inställningen för automatiskt skapande",
     "updateSecondFactorAfterExternalLoginFailed": "Misslyckades med att uppdatera inställningen för den andra faktorn",
     "updatePasswordResetFailed": "Misslyckades med att uppdatera inställningen för lösenordsåterställning",
     "sessionTimeoutRange2": "Sessionens tidsgräns måste vara mellan 1 och 720 timmar",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "LÅST",
     "dataLockedNotice": "{{username}}s data förblir låsta tills de loggar in nästa gång. Deras värdar, inloggningsuppgifter och utdrag kan inte visas eller redigeras förrän då.",
     "resetPasswordTitle": "Återställ lösenord",
-    "resetPasswordOidcOnly": "Den här användaren loggar in via en extern leverantör och har inget lösenord.",
+    "resetPasswordExternalOnly": "Den här användaren loggar in via en extern leverantör och har inget lösenord.",
     "resetPasswordPlaceholder": "Nytt lösenord",
     "resetPasswordBtn": "Återställa",
     "resetPasswordWorking": "Återställer...",
@@ -1742,7 +1741,7 @@
         "importFailed": "Importen misslyckades: {{error}}",
         "roleUser": "Användare",
         "authMethodDual": "Dubbel autentisering",
-        "authMethodOidc": "Extern",
+        "authMethodExternal": "Extern",
         "done": "Gjort",
         "apiKeyNameRequired": "Nyckelnamn krävs",
         "apiKeyCreated": "API-nyckeln \"{{name}}\" skapad",
diff --git a/src/ui/locales/translated/th_TH.json b/src/ui/locales/translated/th_TH.json
index f69b9cfa9..2ff1e5ed4 100644
--- a/src/ui/locales/translated/th_TH.json
+++ b/src/ui/locales/translated/th_TH.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "แป้นพิมพ์แบบอินเทอร์แอคทีฟของ Force",
     "overrideCredentialUsername": "แทนที่ชื่อผู้ใช้ข้อมูลประจำตัว",
     "overrideCredentialUsernameDesc": "ใช้ชื่อผู้ใช้ที่ระบุไว้ข้างต้นแทนชื่อผู้ใช้ของข้อมูลประจำตัว",
-    "oidcUsernameHint": "ใช้ $external.username เพื่อกรอกชื่อที่คุณใช้เข้าสู่ระบบผ่าน SSO หรือ LDAP",
+    "externalUsernameHint": "ใช้ $external.username เพื่อกรอกชื่อที่คุณใช้เข้าสู่ระบบผ่าน SSO หรือ LDAP",
     "jumpHostChain": "ห่วงโซ่ Jump Host",
     "portKnocking": "การเคาะพอร์ต",
     "addKnock": "เพิ่มพอร์ต",
@@ -977,7 +977,7 @@
     "noSearchResults": "ไม่พบผลลัพธ์ที่ตรงกับการค้นหาของคุณ",
     "rename": "เปลี่ยนชื่อเซสชัน"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "ต้องใช้การยืนยันตัวตนสองขั้นตอน",
     "totpCodeLabel": "รหัสยืนยัน",
     "totpVerify": "ตรวจสอบ",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "ไม่สามารถตรวจสอบรหัสรีเซ็ตได้",
     "failedCompleteReset": "การรีเซ็ตรหัสผ่านล้มเหลว",
     "invalidTotpCode": "รหัส TOTP ไม่ถูกต้อง",
-    "failedOidcLogin": "ไม่สามารถเริ่มต้นการเข้าสู่ระบบจากภายนอกได้",
-    "silentSigninOidcUnavailable": "มีการร้องขอการเข้าสู่ระบบแบบเงียบ แต่ไม่ได้ตั้งค่าการเข้าสู่ระบบภายนอกไว้",
+    "failedExternalLogin": "ไม่สามารถเริ่มต้นการเข้าสู่ระบบจากภายนอกได้",
+    "silentSigninExternalUnavailable": "มีการร้องขอการเข้าสู่ระบบแบบเงียบ แต่ไม่ได้ตั้งค่าการเข้าสู่ระบบภายนอกไว้",
     "failedUserInfo": "ไม่สามารถดึงข้อมูลผู้ใช้ได้หลังจากเข้าสู่ระบบ",
-    "oidcAuthFailed": "การเข้าสู่ระบบจากภายนอกล้มเหลว",
+    "externalAuthFailed": "การเข้าสู่ระบบจากภายนอกล้มเหลว",
     "invalidAuthUrl": "ได้รับ URL การอนุญาตที่ไม่ถูกต้องจากแบ็กเอนด์",
     "requiredField": "ช่องนี้จำเป็นต้องกรอก",
     "minLength": "ความยาวขั้นต่ำคือ {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "อนุญาตให้ผู้ใช้ใหม่ลงทะเบียนด้วยตนเองโดยใช้ชื่อผู้ใช้และรหัสผ่าน",
     "allowPasswordLogin": "อนุญาตให้เข้าสู่ระบบด้วยรหัสผ่าน",
     "allowPasswordLoginDesc": "เข้าสู่ระบบด้วยชื่อผู้ใช้/รหัสผ่าน",
-    "oidcAutoProvision": "สร้างบัญชีภายนอกโดยอัตโนมัติ",
-    "oidcAutoProvisionDesc": "สร้างบัญชีผู้ใช้ในครั้งแรกที่มีคนเข้าสู่ระบบผ่านการเข้าสู่ระบบภายนอก เช่น SSO หรือ LDAP แม้ว่าการลงทะเบียนจะปิดอยู่ก็ตาม",
+    "externalAutoProvision": "สร้างบัญชีภายนอกโดยอัตโนมัติ",
+    "externalAutoProvisionDesc": "สร้างบัญชีผู้ใช้ในครั้งแรกที่มีคนเข้าสู่ระบบผ่านการเข้าสู่ระบบภายนอก เช่น SSO หรือ LDAP แม้ว่าการลงทะเบียนจะปิดอยู่ก็ตาม",
     "secondFactorAfterExternalLogin": "ขอให้ยืนยันตัวตนสองขั้นตอนหลังจากเข้าสู่ระบบจากภายนอก (SSO, GitHub, Google, LDAP)",
     "secondFactorAfterExternalLoginDesc": "หากปิดใช้งาน ระบบจะขอการยืนยันตัวตนสองขั้นตอนที่ลงทะเบียนไว้เฉพาะหลังจากป้อนรหัสผ่านและการเข้าสู่ระบบภายในเครื่องอื่นๆ เท่านั้น เช่นเดียวกับก่อนหน้านี้ หากเปิดใช้งาน ระบบจะขอการยืนยันตัวตนสองขั้นตอนหลังจากวิธีการเข้าสู่ระบบทุกวิธี รวมถึง SSO และ LDAP",
     "allowPasswordReset": "อนุญาตให้รีเซ็ตรหัสผ่าน",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "ไม่มีวันหมดอายุ",
     "revokedBadge": "เพิกถอน",
     "authTypeDual": "การตรวจสอบสิทธิ์แบบคู่",
-    "authTypeOidc": "ภายนอก",
+    "authTypeExternal": "ภายนอก",
     "authTypeLocal": "ท้องถิ่น",
     "adminStatusAdministrator": "ผู้ดูแลระบบ",
     "adminStatusRegularUser": "ผู้ใช้ทั่วไป",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "อนุญาตให้เข้าสู่ระบบทั้งจากภายนอกและโดยใช้รหัสผ่าน",
     "linkAccountTargetUsername": "ชื่อผู้ใช้บัญชีภายในเครื่อง",
     "linkAccountTargetPlaceholder": "ป้อนชื่อผู้ใช้บัญชีท้องถิ่นเพื่อเชื่อมโยง",
-    "linkAccountOidcUsername": "ชื่อผู้ใช้บัญชีภายนอก",
-    "linkAccountOidcPlaceholder": "ป้อนชื่อผู้ใช้บัญชีภายนอกเพื่อผสานรวม",
-    "linkAccountOidcNotFound": "ไม่พบบัญชีผู้ใช้ภายนอกที่มีชื่อผู้ใช้ดังกล่าว",
+    "linkAccountExternalUsername": "ชื่อผู้ใช้บัญชีภายนอก",
+    "linkAccountExternalPlaceholder": "ป้อนชื่อผู้ใช้บัญชีภายนอกเพื่อผสานรวม",
+    "linkAccountExternalNotFound": "ไม่พบบัญชีผู้ใช้ภายนอกที่มีชื่อผู้ใช้ดังกล่าว",
     "linkAccounts": "เชื่อมโยงบัญชี",
     "linkAccountSuccess": "เชื่อมโยงบัญชีสำเร็จแล้ว",
     "linkAccountFailed": "ไม่สามารถเชื่อมโยงบัญชีได้",
@@ -1400,7 +1400,6 @@
     "saving": "ประหยัด...",
     "updateRegistrationFailed": "ไม่สามารถอัปเดตการตั้งค่าการลงทะเบียนได้",
     "updatePasswordLoginFailed": "ไม่สามารถอัปเดตการตั้งค่าการเข้าสู่ระบบด้วยรหัสผ่านได้",
-    "updateOidcAutoProvisionFailed": "ไม่สามารถอัปเดตการตั้งค่าการสร้างอัตโนมัติได้",
     "updateSecondFactorAfterExternalLoginFailed": "ไม่สามารถอัปเดตการตั้งค่าปัจจัยยืนยันตัวตนที่สองได้",
     "updatePasswordResetFailed": "ไม่สามารถอัปเดตการตั้งค่าการรีเซ็ตรหัสผ่านได้",
     "sessionTimeoutRange2": "เวลาหมดอายุของเซสชันต้องอยู่ระหว่าง 1 ถึง 720 ชั่วโมง",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "ล็อกอยู่",
     "dataLockedNotice": "ข้อมูลของ {{username}}จะถูกล็อกไว้จนกว่าพวกเขาจะเข้าสู่ระบบครั้งถัดไป จะไม่สามารถดูหรือแก้ไขโฮสต์ ข้อมูลประจำตัว และข้อความย่อของพวกเขาได้จนกว่าจะถึงเวลานั้น",
     "resetPasswordTitle": "รีเซ็ตรหัสผ่าน",
-    "resetPasswordOidcOnly": "ผู้ใช้รายนี้เข้าสู่ระบบผ่านผู้ให้บริการภายนอกและไม่มีรหัสผ่าน",
+    "resetPasswordExternalOnly": "ผู้ใช้รายนี้เข้าสู่ระบบผ่านผู้ให้บริการภายนอกและไม่มีรหัสผ่าน",
     "resetPasswordPlaceholder": "รหัสผ่านใหม่",
     "resetPasswordBtn": "รีเซ็ต",
     "resetPasswordWorking": "กำลังรีเซ็ต...",
@@ -1742,7 +1741,7 @@
         "importFailed": "การนำเข้าล้มเหลว: {{error}}",
         "roleUser": "ผู้ใช้",
         "authMethodDual": "การตรวจสอบสิทธิ์แบบคู่",
-        "authMethodOidc": "ภายนอก",
+        "authMethodExternal": "ภายนอก",
         "done": "เสร็จแล้ว",
         "apiKeyNameRequired": "จำเป็นต้องระบุชื่อคีย์",
         "apiKeyCreated": "สร้างคีย์ API \"{{name}}\" แล้ว",
diff --git a/src/ui/locales/translated/tr_TR.json b/src/ui/locales/translated/tr_TR.json
index 0c68cca0d..88d8b7287 100644
--- a/src/ui/locales/translated/tr_TR.json
+++ b/src/ui/locales/translated/tr_TR.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Klavye Etkileşimini Zorunlu Kıl",
     "overrideCredentialUsername": "Kimlik Kullanıcı Adını Geçersiz Kıl",
     "overrideCredentialUsernameDesc": "Kimlik bilgisinin kullanıcı adı yerine yukarıda belirtilen kullanıcı adını kullan",
-    "oidcUsernameHint": "SSO veya LDAP aracılığıyla oturum açtığınız adı girmek için $external.username ifadesini kullanın.",
+    "externalUsernameHint": "SSO veya LDAP aracılığıyla oturum açtığınız adı girmek için $external.username ifadesini kullanın.",
     "jumpHostChain": "Atlama Sunucu Zinciri",
     "portKnocking": "Port Vuruşu",
     "addKnock": "Port Ekle",
@@ -977,7 +977,7 @@
     "noSearchResults": "Aramanızla eşleşen bağlantı yok",
     "rename": "Oturumu yeniden adlandır"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "İki Faktörlü Kimlik Doğrulama Gerekli",
     "totpCodeLabel": "Doğrulama Kodu",
     "totpVerify": "Doğrula",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "Sıfırlama kodu doğrulanamadı",
     "failedCompleteReset": "Şifre sıfırlama tamamlanamadı",
     "invalidTotpCode": "Geçersiz TOTP kodu",
-    "failedOidcLogin": "Harici oturum açma işlemi başlatılamadı.",
-    "silentSigninOidcUnavailable": "Sessiz oturum açma isteği yapıldı, ancak harici oturum açma ayarı yapılmamış.",
+    "failedExternalLogin": "Harici oturum açma işlemi başlatılamadı.",
+    "silentSigninExternalUnavailable": "Sessiz oturum açma isteği yapıldı, ancak harici oturum açma ayarı yapılmamış.",
     "failedUserInfo": "Giriş sonrası kullanıcı bilgileri alınamadı",
-    "oidcAuthFailed": "Harici oturum açma başarısız oldu",
+    "externalAuthFailed": "Harici oturum açma başarısız oldu",
     "invalidAuthUrl": "Arka uçtan geçersiz yetkilendirme URL'si alındı",
     "requiredField": "Bu alan zorunludur",
     "minLength": "Minimum uzunluk {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "Yeni kullanıcıların kullanıcı adı ve parola ile kendilerini kaydetmesine izin ver",
     "allowPasswordLogin": "Parola ile Girişe İzin Ver",
     "allowPasswordLoginDesc": "Kullanıcı adı/parola ile giriş",
-    "oidcAutoProvision": "Harici hesapları otomatik olarak oluştur",
-    "oidcAutoProvisionDesc": "Kayıt kapalı olsa bile, SSO veya LDAP gibi harici bir giriş yöntemiyle ilk kez oturum açıldığında bir hesap oluşturulur.",
+    "externalAutoProvision": "Harici hesapları otomatik olarak oluştur",
+    "externalAutoProvisionDesc": "Kayıt kapalı olsa bile, SSO veya LDAP gibi harici bir giriş yöntemiyle ilk kez oturum açıldığında bir hesap oluşturulur.",
     "secondFactorAfterExternalLogin": "Harici oturum açma işlemlerinden sonra ikinci bir doğrulama faktörü isteyin (SSO, GitHub, Google, LDAP).",
     "secondFactorAfterExternalLoginDesc": "Kapalı modda, kayıtlı ikinci faktör yalnızca parola ve diğer yerel oturum açma işlemlerinden sonra istenir, tıpkı eskisi gibi. Açık modda ise, SSO ve LDAP dahil olmak üzere her oturum açma yönteminden sonra istenir.",
     "allowPasswordReset": "Parola Sıfırlamaya İzin Ver",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Süresiz",
     "revokedBadge": "İPTAL EDİLDİ",
     "authTypeDual": "Çift Doğrulama",
-    "authTypeOidc": "Harici",
+    "authTypeExternal": "Harici",
     "authTypeLocal": "Yerel",
     "adminStatusAdministrator": "Yönetici",
     "adminStatusRegularUser": "Normal Kullanıcı",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Hem harici giriş hem de parola ile giriş yapılmasına izin verin.",
     "linkAccountTargetUsername": "Yerel Hesap Kullanıcı Adı",
     "linkAccountTargetPlaceholder": "Bağlanacak yerel hesap kullanıcı adını girin",
-    "linkAccountOidcUsername": "Harici Hesap Kullanıcı Adı",
-    "linkAccountOidcPlaceholder": "Birleştirmek istediğiniz yalnızca harici hesap kullanıcı adını girin.",
-    "linkAccountOidcNotFound": "Bu kullanıcı adıyla harici erişime açık bir hesap bulunamadı.",
+    "linkAccountExternalUsername": "Harici Hesap Kullanıcı Adı",
+    "linkAccountExternalPlaceholder": "Birleştirmek istediğiniz yalnızca harici hesap kullanıcı adını girin.",
+    "linkAccountExternalNotFound": "Bu kullanıcı adıyla harici erişime açık bir hesap bulunamadı.",
     "linkAccounts": "Hesapları Bağla",
     "linkAccountSuccess": "Hesaplar başarıyla bağlandı",
     "linkAccountFailed": "Hesaplar bağlanamadı",
@@ -1400,7 +1400,6 @@
     "saving": "Kaydediliyor...",
     "updateRegistrationFailed": "Kayıt ayarı güncellenemedi",
     "updatePasswordLoginFailed": "Parola girişi ayarı güncellenemedi",
-    "updateOidcAutoProvisionFailed": "Otomatik oluşturma ayarı güncellenemedi.",
     "updateSecondFactorAfterExternalLoginFailed": "İkinci faktör ayarı güncellenemedi.",
     "updatePasswordResetFailed": "Parola sıfırlama ayarı güncellenemedi",
     "sessionTimeoutRange2": "Oturum zaman aşımı 1 ile 720 saat arasında olmalıdır",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "KİLİTLİ",
     "dataLockedNotice": "{{username}} kullanıcısının verileri, bir sonraki oturum açana kadar kilitli kalır. Bu süre zarfında ana makineleri, kimlik bilgileri ve kod parçacıkları görüntülenemez veya düzenlenemez.",
     "resetPasswordTitle": "Parolayı Sıfırla",
-    "resetPasswordOidcOnly": "Bu kullanıcı harici bir sağlayıcı üzerinden oturum açar ve parolası yoktur.",
+    "resetPasswordExternalOnly": "Bu kullanıcı harici bir sağlayıcı üzerinden oturum açar ve parolası yoktur.",
     "resetPasswordPlaceholder": "Yeni parola",
     "resetPasswordBtn": "Sıfırla",
     "resetPasswordWorking": "Sıfırlanıyor...",
@@ -1742,7 +1741,7 @@
         "importFailed": "İçe aktarma başarısız oldu: {{error}}",
         "roleUser": "Kullanıcı",
         "authMethodDual": "Çift Kimlik Doğrulama",
-        "authMethodOidc": "Harici",
+        "authMethodExternal": "Harici",
         "done": "Tamam",
         "apiKeyNameRequired": "Anahtar adı zorunludur",
         "apiKeyCreated": "API anahtarı \"{{name}}\" oluşturuldu",
diff --git a/src/ui/locales/translated/uk_UA.json b/src/ui/locales/translated/uk_UA.json
index 5a5be9dd5..afb5b5072 100644
--- a/src/ui/locales/translated/uk_UA.json
+++ b/src/ui/locales/translated/uk_UA.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Примусова інтерактивна клавіатура",
     "overrideCredentialUsername": "Перезаписати ім'я користувача облікових даних",
     "overrideCredentialUsernameDesc": "Використовуйте вказане вище ім'я користувача замість імені користувача облікових даних",
-    "oidcUsernameHint": "Використовуйте $external.username, щоб ввести ім’я користувача, яке ви використовували для входу через SSO або LDAP.",
+    "externalUsernameHint": "Використовуйте $external.username, щоб ввести ім’я користувача, яке ви використовували для входу через SSO або LDAP.",
     "jumpHostChain": "Ланцюг хоста стрибка",
     "portKnocking": "Порт-Нокінґ",
     "addKnock": "Додати порт",
@@ -977,7 +977,7 @@
     "noSearchResults": "Немає з'єднань, що відповідають вашому пошуку",
     "rename": "Перейменувати сеанс"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Потрібна двофакторна автентифікація",
     "totpCodeLabel": "Код підтвердження",
     "totpVerify": "Перевірити",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "Не вдалося перевірити код скидання",
     "failedCompleteReset": "Не вдалося завершити скидання пароля",
     "invalidTotpCode": "Недійсний код TOTP",
-    "failedOidcLogin": "Не вдалося розпочати зовнішній вхід",
-    "silentSigninOidcUnavailable": "Було надіслано запит на тихий вхід, але зовнішній вхід не налаштовано.",
+    "failedExternalLogin": "Не вдалося розпочати зовнішній вхід",
+    "silentSigninExternalUnavailable": "Було надіслано запит на тихий вхід, але зовнішній вхід не налаштовано.",
     "failedUserInfo": "Не вдалося отримати інформацію про користувача після входу",
-    "oidcAuthFailed": "Зовнішній вхід не вдалося",
+    "externalAuthFailed": "Зовнішній вхід не вдалося",
     "invalidAuthUrl": "Недійсна URL-адреса авторизації отримана від серверної частини",
     "requiredField": "Це поле обов'язкове",
     "minLength": "Мінімальна довжина {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "Дозвольте новим користувачам самостійно реєструватися, використовуючи ім'я користувача та пароль",
     "allowPasswordLogin": "Дозволити вхід з паролем",
     "allowPasswordLoginDesc": "Вхід за ім'ям користувача/паролем",
-    "oidcAutoProvision": "Автоматичне створення зовнішніх облікових записів",
-    "oidcAutoProvisionDesc": "Створіть обліковий запис під час першого входу через зовнішній логін, такий як SSO або LDAP, навіть якщо реєстрацію вимкнено.",
+    "externalAutoProvision": "Автоматичне створення зовнішніх облікових записів",
+    "externalAutoProvisionDesc": "Створіть обліковий запис під час першого входу через зовнішній логін, такий як SSO або LDAP, навіть якщо реєстрацію вимкнено.",
     "secondFactorAfterExternalLogin": "Запитувати другий фактор після зовнішніх входів (SSO, GitHub, Google, LDAP)",
     "secondFactorAfterExternalLoginDesc": "Вимкнено, зареєстрований другий фактор запитується лише після пароля та інших локальних входів, як і раніше. Увімкнено, запитується після кожного методу входу, включаючи SSO та LDAP.",
     "allowPasswordReset": "Дозволити скидання пароля",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Без терміну дії",
     "revokedBadge": "СКАСОВАНО",
     "authTypeDual": "Подвійна автентифікація",
-    "authTypeOidc": "Зовнішній",
+    "authTypeExternal": "Зовнішній",
     "authTypeLocal": "Місцевий",
     "adminStatusAdministrator": "Адміністратор",
     "adminStatusRegularUser": "Звичайний користувач",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Дозволити як зовнішній вхід, так і вхід за паролем",
     "linkAccountTargetUsername": "Ім'я користувача локального облікового запису",
     "linkAccountTargetPlaceholder": "Введіть ім'я користувача локального облікового запису для підключення",
-    "linkAccountOidcUsername": "Ім'я користувача зовнішнього облікового запису",
-    "linkAccountOidcPlaceholder": "Введіть ім'я користувача зовнішнього облікового запису для об'єднання",
-    "linkAccountOidcNotFound": "Зовнішній обліковий запис із цим іменем користувача не знайдено",
+    "linkAccountExternalUsername": "Ім'я користувача зовнішнього облікового запису",
+    "linkAccountExternalPlaceholder": "Введіть ім'я користувача зовнішнього облікового запису для об'єднання",
+    "linkAccountExternalNotFound": "Зовнішній обліковий запис із цим іменем користувача не знайдено",
     "linkAccounts": "Зв'язати облікові записи",
     "linkAccountSuccess": "Облікові записи успішно пов’язано",
     "linkAccountFailed": "Не вдалося зв'язати облікові записи",
@@ -1400,7 +1400,6 @@
     "saving": "Збереження...",
     "updateRegistrationFailed": "Не вдалося оновити налаштування реєстрації",
     "updatePasswordLoginFailed": "Не вдалося оновити налаштування входу з паролем",
-    "updateOidcAutoProvisionFailed": "Не вдалося оновити налаштування автоматичного створення",
     "updateSecondFactorAfterExternalLoginFailed": "Не вдалося оновити налаштування другого фактора",
     "updatePasswordResetFailed": "Не вдалося оновити налаштування скидання пароля",
     "sessionTimeoutRange2": "Час очікування сеансу має бути від 1 до 720 годин",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "ЗАБЛОКОВАНО",
     "dataLockedNotice": "Дані {{username}}залишаються заблокованими до наступного входу в систему. До того часу їхні хости, облікові дані та фрагменти не можна переглядати або редагувати.",
     "resetPasswordTitle": "Скинути пароль",
-    "resetPasswordOidcOnly": "Цей користувач входить через зовнішнього постачальника та не має пароля.",
+    "resetPasswordExternalOnly": "Цей користувач входить через зовнішнього постачальника та не має пароля.",
     "resetPasswordPlaceholder": "Новий пароль",
     "resetPasswordBtn": "Скинути",
     "resetPasswordWorking": "Скидання...",
@@ -1742,7 +1741,7 @@
         "importFailed": "Помилка імпорту: {{error}}",
         "roleUser": "Користувач",
         "authMethodDual": "Подвійна автентифікація",
-        "authMethodOidc": "Зовнішній",
+        "authMethodExternal": "Зовнішній",
         "done": "Готово",
         "apiKeyNameRequired": "Потрібне ім'я ключа",
         "apiKeyCreated": "Ключ API \"{{name}}\" створено",
diff --git a/src/ui/locales/translated/vi_VN.json b/src/ui/locales/translated/vi_VN.json
index 9e3b0d694..4cd2a2cb4 100644
--- a/src/ui/locales/translated/vi_VN.json
+++ b/src/ui/locales/translated/vi_VN.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "Buộc dùng Keyboard-Interactive",
     "overrideCredentialUsername": "Ghi đè tên đăng nhập thông tin xác thực",
     "overrideCredentialUsernameDesc": "Sử dụng tên đăng nhập ở trên thay vì tên trong thông tin xác thực",
-    "oidcUsernameHint": "Sử dụng $external.username để điền tên bạn đã đăng nhập thông qua SSO hoặc LDAP.",
+    "externalUsernameHint": "Sử dụng $external.username để điền tên bạn đã đăng nhập thông qua SSO hoặc LDAP.",
     "jumpHostChain": "Chuỗi máy chủ trung gian",
     "portKnocking": "Port Knocking",
     "addKnock": "Thêm cổng",
@@ -977,7 +977,7 @@
     "noSearchResults": "Không có kết nối nào khớp với tìm kiếm của bạn",
     "rename": "Đổi tên phiên"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "Yêu cầu xác thực hai yếu tố",
     "totpCodeLabel": "Mã xác minh",
     "totpVerify": "Xác minh",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "Không thể xác minh mã đặt lại",
     "failedCompleteReset": "Không thể hoàn tất đặt lại mật khẩu",
     "invalidTotpCode": "Mã TOTP không hợp lệ",
-    "failedOidcLogin": "Đăng nhập bằng tài khoản bên ngoài không thành công.",
-    "silentSigninOidcUnavailable": "Đã yêu cầu đăng nhập im lặng, nhưng chưa thiết lập đăng nhập bằng tài khoản bên ngoài.",
+    "failedExternalLogin": "Đăng nhập bằng tài khoản bên ngoài không thành công.",
+    "silentSigninExternalUnavailable": "Đã yêu cầu đăng nhập im lặng, nhưng chưa thiết lập đăng nhập bằng tài khoản bên ngoài.",
     "failedUserInfo": "Không thể lấy thông tin người dùng sau khi đăng nhập",
-    "oidcAuthFailed": "Đăng nhập bên ngoài không thành công",
+    "externalAuthFailed": "Đăng nhập bên ngoài không thành công",
     "invalidAuthUrl": "URL ủy quyền không hợp lệ nhận được từ máy chủ",
     "requiredField": "Trường này là bắt buộc",
     "minLength": "Độ dài tối thiểu là {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "Cho phép người dùng mới tự đăng ký bằng tên người dùng và mật khẩu",
     "allowPasswordLogin": "Cho phép đăng nhập bằng mật khẩu",
     "allowPasswordLoginDesc": "Đăng nhập bằng tên người dùng/mật khẩu",
-    "oidcAutoProvision": "Tự động tạo tài khoản bên ngoài",
-    "oidcAutoProvisionDesc": "Tạo tài khoản lần đầu tiên khi ai đó đăng nhập thông qua phương thức đăng nhập bên ngoài như SSO hoặc LDAP, ngay cả khi tính năng đăng ký chưa được bật.",
+    "externalAutoProvision": "Tự động tạo tài khoản bên ngoài",
+    "externalAutoProvisionDesc": "Tạo tài khoản lần đầu tiên khi ai đó đăng nhập thông qua phương thức đăng nhập bên ngoài như SSO hoặc LDAP, ngay cả khi tính năng đăng ký chưa được bật.",
     "secondFactorAfterExternalLogin": "Hãy yêu cầu xác thực hai yếu tố sau khi đăng nhập bằng tài khoản bên ngoài (SSO, GitHub, Google, LDAP).",
     "secondFactorAfterExternalLoginDesc": "Ở chế độ Tắt, xác thực yếu tố thứ hai chỉ được yêu cầu sau khi nhập mật khẩu và các thông tin đăng nhập cục bộ khác, giống như trước đây. Ở chế độ Bật, xác thực yếu tố thứ hai sẽ được yêu cầu sau mọi phương thức đăng nhập, bao gồm cả SSO và LDAP.",
     "allowPasswordReset": "Cho phép đặt lại mật khẩu",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "Không hết hạn",
     "revokedBadge": "ĐÃ THU HỒI",
     "authTypeDual": "Xác thực kép",
-    "authTypeOidc": "Bên ngoài",
+    "authTypeExternal": "Bên ngoài",
     "authTypeLocal": "Cục bộ",
     "adminStatusAdministrator": "Quản trị viên",
     "adminStatusRegularUser": "Người dùng thông thường",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "Cho phép cả đăng nhập bằng tài khoản ngoài và đăng nhập bằng mật khẩu.",
     "linkAccountTargetUsername": "Tên đăng nhập tài khoản cục bộ",
     "linkAccountTargetPlaceholder": "Nhập tên đăng nhập tài khoản cục bộ để liên kết",
-    "linkAccountOidcUsername": "Tên người dùng tài khoản bên ngoài",
-    "linkAccountOidcPlaceholder": "Nhập tên người dùng tài khoản chỉ dùng bên ngoài để hợp nhất.",
-    "linkAccountOidcNotFound": "Không tìm thấy tài khoản chỉ dùng bên ngoài nào có tên người dùng đó.",
+    "linkAccountExternalUsername": "Tên người dùng tài khoản bên ngoài",
+    "linkAccountExternalPlaceholder": "Nhập tên người dùng tài khoản chỉ dùng bên ngoài để hợp nhất.",
+    "linkAccountExternalNotFound": "Không tìm thấy tài khoản chỉ dùng bên ngoài nào có tên người dùng đó.",
     "linkAccounts": "Liên kết tài khoản",
     "linkAccountSuccess": "Liên kết tài khoản thành công",
     "linkAccountFailed": "Liên kết tài khoản thất bại",
@@ -1400,7 +1400,6 @@
     "saving": "Đang lưu...",
     "updateRegistrationFailed": "Cập nhật cài đặt đăng ký thất bại",
     "updatePasswordLoginFailed": "Cập nhật cài đặt đăng nhập bằng mật khẩu thất bại",
-    "updateOidcAutoProvisionFailed": "Không thể cập nhật cài đặt tự động tạo.",
     "updateSecondFactorAfterExternalLoginFailed": "Không thể cập nhật cài đặt yếu tố xác thực thứ hai.",
     "updatePasswordResetFailed": "Cập nhật cài đặt đặt lại mật khẩu thất bại",
     "sessionTimeoutRange2": "Thời gian chờ phiên phải từ 1 đến 720 giờ",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "ĐÃ KHÓA",
     "dataLockedNotice": "Dữ liệu của {{username}} vẫn bị khóa cho đến khi họ đăng nhập lần tiếp theo. Máy chủ, thông tin đăng nhập và đoạn mã của họ không thể xem hoặc chỉnh sửa cho đến lúc đó.",
     "resetPasswordTitle": "Đặt lại mật khẩu",
-    "resetPasswordOidcOnly": "Người dùng này đăng nhập qua nhà cung cấp bên ngoài và không có mật khẩu.",
+    "resetPasswordExternalOnly": "Người dùng này đăng nhập qua nhà cung cấp bên ngoài và không có mật khẩu.",
     "resetPasswordPlaceholder": "Mật khẩu mới",
     "resetPasswordBtn": "Đặt lại",
     "resetPasswordWorking": "Đang đặt lại...",
@@ -1742,7 +1741,7 @@
         "importFailed": "Nhập khẩu thất bại: {{error}}",
         "roleUser": "Người dùng",
         "authMethodDual": "Xác thực kép",
-        "authMethodOidc": "Bên ngoài",
+        "authMethodExternal": "Bên ngoài",
         "done": "Xong",
         "apiKeyNameRequired": "Tên khóa là bắt buộc",
         "apiKeyCreated": "Đã tạo khóa API \"{{name}}\"",
diff --git a/src/ui/locales/translated/zh_CN.json b/src/ui/locales/translated/zh_CN.json
index 03fca7461..9370dc265 100644
--- a/src/ui/locales/translated/zh_CN.json
+++ b/src/ui/locales/translated/zh_CN.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "强制键盘交互认证",
     "overrideCredentialUsername": "覆盖凭据用户名",
     "overrideCredentialUsernameDesc": "使用上方指定的用户名代替凭据中的用户名",
-    "oidcUsernameHint": "使用 $external.username 填写您通过 SSO 或 LDAP 登录的名称。",
+    "externalUsernameHint": "使用 $external.username 填写您通过 SSO 或 LDAP 登录的名称。",
     "jumpHostChain": "跳板主机链",
     "portKnocking": "端口敲门",
     "addKnock": "添加端口",
@@ -977,7 +977,7 @@
     "noSearchResults": "没有连接匹配您的搜索",
     "rename": "重命名会话"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "需要双因素认证",
     "totpCodeLabel": "验证码",
     "totpVerify": "验证",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "验证重置代码失败",
     "failedCompleteReset": "无法完成密码重置",
     "invalidTotpCode": "无效的 TOTP 代码",
-    "failedOidcLogin": "外部登录失败",
-    "silentSigninOidcUnavailable": "已请求静默登录，但未设置外部登录。",
+    "failedExternalLogin": "外部登录失败",
+    "silentSigninExternalUnavailable": "已请求静默登录，但未设置外部登录。",
     "failedUserInfo": "登录后无法获取用户信息",
-    "oidcAuthFailed": "外部登录失败",
+    "externalAuthFailed": "外部登录失败",
     "invalidAuthUrl": "从后端接收到无效的授权 URL",
     "requiredField": "此字段为必填项",
     "minLength": "最小长度为 {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "允许新用户使用用户名和密码自行注册",
     "allowPasswordLogin": "允许密码登录",
     "allowPasswordLoginDesc": "用户名/密码登录",
-    "oidcAutoProvision": "自动创建外部帐户",
-    "oidcAutoProvisionDesc": "即使注册功能已关闭，当用户首次通过外部登录（例如 SSO 或 LDAP）登录时，也应创建帐户。",
+    "externalAutoProvision": "自动创建外部帐户",
+    "externalAutoProvisionDesc": "即使注册功能已关闭，当用户首次通过外部登录（例如 SSO 或 LDAP）登录时，也应创建帐户。",
     "secondFactorAfterExternalLogin": "在外部登录（SSO、GitHub、Google、LDAP）后要求进行第二重验证",
     "secondFactorAfterExternalLoginDesc": "关闭双因素身份验证后，仅在密码登录和其他本地登录后才会要求输入已注册的双因素身份验证信息，与之前相同。开启双因素身份验证后，每次登录都会要求输入双因素身份验证信息，包括单点登录 (SSO) 和 LDAP 登录。",
     "allowPasswordReset": "允许密码重置",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "无过期",
     "revokedBadge": "已吊销",
     "authTypeDual": "双重认证",
-    "authTypeOidc": "外部",
+    "authTypeExternal": "外部",
     "authTypeLocal": "本地",
     "adminStatusAdministrator": "管理员",
     "adminStatusRegularUser": "普通用户",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "允许外部登录和密码登录",
     "linkAccountTargetUsername": "本地账号用户名",
     "linkAccountTargetPlaceholder": "输入要链接的本地账号用户名",
-    "linkAccountOidcUsername": "外部帐户用户名",
-    "linkAccountOidcPlaceholder": "输入仅供外部使用的帐户用户名以进行合并",
-    "linkAccountOidcNotFound": "未找到使用该用户名的仅限外部访问的帐户",
+    "linkAccountExternalUsername": "外部帐户用户名",
+    "linkAccountExternalPlaceholder": "输入仅供外部使用的帐户用户名以进行合并",
+    "linkAccountExternalNotFound": "未找到使用该用户名的仅限外部访问的帐户",
     "linkAccounts": "链接账号",
     "linkAccountSuccess": "账号已成功链接",
     "linkAccountFailed": "链接账号失败",
@@ -1400,7 +1400,6 @@
     "saving": "保存中...",
     "updateRegistrationFailed": "更新注册设置失败",
     "updatePasswordLoginFailed": "更新密码登录设置失败",
-    "updateOidcAutoProvisionFailed": "自动创建设置更新失败",
     "updateSecondFactorAfterExternalLoginFailed": "更新第二因素设置失败",
     "updatePasswordResetFailed": "更新密码重置设置失败",
     "sessionTimeoutRange2": "会话超时必须在 1 到 720 小时之间",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "已锁定",
     "dataLockedNotice": "{{username}} 的数据将保持锁定状态，直到其下次登录。在此之前，无法查看或编辑其主机、凭据和代码片段。",
     "resetPasswordTitle": "重置密码",
-    "resetPasswordOidcOnly": "此用户通过外部提供商登录，没有密码。",
+    "resetPasswordExternalOnly": "此用户通过外部提供商登录，没有密码。",
     "resetPasswordPlaceholder": "新密码",
     "resetPasswordBtn": "重置",
     "resetPasswordWorking": "正在重置...",
@@ -1742,7 +1741,7 @@
         "importFailed": "导入失败：{{error}}",
         "roleUser": "用户",
         "authMethodDual": "双重认证",
-        "authMethodOidc": "外部",
+        "authMethodExternal": "外部",
         "done": "完成",
         "apiKeyNameRequired": "密钥名称为必填项",
         "apiKeyCreated": "API 密钥 \"{{name}}\" 已创建",
diff --git a/src/ui/locales/translated/zh_TW.json b/src/ui/locales/translated/zh_TW.json
index 6e3285d63..052793841 100644
--- a/src/ui/locales/translated/zh_TW.json
+++ b/src/ui/locales/translated/zh_TW.json
@@ -377,7 +377,7 @@
     "forceKeyboardInteractive": "強制鍵盤互動式驗證",
     "overrideCredentialUsername": "覆寫憑證使用者名稱",
     "overrideCredentialUsernameDesc": "使用上方指定的使用者名稱，而非憑證中的使用者名稱",
-    "oidcUsernameHint": "使用 $external.username 填寫您透過 SSO 或 LDAP 登入的名稱。",
+    "externalUsernameHint": "使用 $external.username 填寫您透過 SSO 或 LDAP 登入的名稱。",
     "jumpHostChain": "跳板主機鏈",
     "portKnocking": "連接埠敲門",
     "addKnock": "新增連接埠",
@@ -977,7 +977,7 @@
     "noSearchResults": "無符合搜尋條件的連線",
     "rename": "重新命名工作階段"
   },
-  "terminal": {
+  "sshAuth": {
     "totpRequired": "需要雙因素驗證",
     "totpCodeLabel": "驗證碼",
     "totpVerify": "驗證",
@@ -1089,10 +1089,10 @@
     "failedVerifyCode": "驗證重設碼失敗",
     "failedCompleteReset": "無法完成密碼重設",
     "invalidTotpCode": "無效的 TOTP 驗證碼",
-    "failedOidcLogin": "外部登入失敗",
-    "silentSigninOidcUnavailable": "已要求靜默登錄，但未設定外部登入。",
+    "failedExternalLogin": "外部登入失敗",
+    "silentSigninExternalUnavailable": "已要求靜默登錄，但未設定外部登入。",
     "failedUserInfo": "登入後無法取得使用者資訊",
-    "oidcAuthFailed": "外部登入失敗",
+    "externalAuthFailed": "外部登入失敗",
     "invalidAuthUrl": "從後端接收到無效的授權 URL",
     "requiredField": "此欄位為必填",
     "minLength": "最小長度為 {{min}}",
@@ -1266,8 +1266,8 @@
     "allowRegistrationDesc": "允許新使用者使用使用者名稱和密碼自行註冊",
     "allowPasswordLogin": "允許密碼登入",
     "allowPasswordLoginDesc": "使用者名稱/密碼登入",
-    "oidcAutoProvision": "自動建立外部帳戶",
-    "oidcAutoProvisionDesc": "即使註冊功能已關閉，當使用者首次透過外部登入（例如 SSO 或 LDAP）登入時，也應建立帳戶。",
+    "externalAutoProvision": "自動建立外部帳戶",
+    "externalAutoProvisionDesc": "即使註冊功能已關閉，當使用者首次透過外部登入（例如 SSO 或 LDAP）登入時，也應建立帳戶。",
     "secondFactorAfterExternalLogin": "在外部登入（SSO、GitHub、Google、LDAP）後要求進行第二重驗證",
     "secondFactorAfterExternalLoginDesc": "關閉雙重認證後，僅在密碼登入和其他本地登入後才會要求輸入已註冊的雙重認證訊息，與之前相同。開啟雙重認證後，每次登入都會要求輸入雙重認證訊息，包括單一登入 (SSO) 和 LDAP 登入。",
     "allowPasswordReset": "允許密碼重設",
@@ -1324,7 +1324,7 @@
     "apiKeyNoExpiry": "無到期日",
     "revokedBadge": "已撤銷",
     "authTypeDual": "雙重驗證",
-    "authTypeOidc": "外部",
+    "authTypeExternal": "外部",
     "authTypeLocal": "本機",
     "adminStatusAdministrator": "管理員",
     "adminStatusRegularUser": "一般使用者",
@@ -1383,9 +1383,9 @@
     "linkAccountEffect3": "允許外部登入和密碼登入",
     "linkAccountTargetUsername": "本機帳號使用者名稱",
     "linkAccountTargetPlaceholder": "輸入要連結到的本機帳號使用者名稱",
-    "linkAccountOidcUsername": "外部帳戶使用者名稱",
-    "linkAccountOidcPlaceholder": "輸入僅供外部使用的帳戶使用者名稱以進行合併",
-    "linkAccountOidcNotFound": "未找到使用該使用者名稱的僅限外部存取的帳戶",
+    "linkAccountExternalUsername": "外部帳戶使用者名稱",
+    "linkAccountExternalPlaceholder": "輸入僅供外部使用的帳戶使用者名稱以進行合併",
+    "linkAccountExternalNotFound": "未找到使用該使用者名稱的僅限外部存取的帳戶",
     "linkAccounts": "連結帳號",
     "linkAccountSuccess": "帳號連結成功",
     "linkAccountFailed": "帳號連結失敗",
@@ -1400,7 +1400,6 @@
     "saving": "儲存中...",
     "updateRegistrationFailed": "更新註冊設定失敗",
     "updatePasswordLoginFailed": "更新密碼登入設定失敗",
-    "updateOidcAutoProvisionFailed": "自動建立設定更新失敗",
     "updateSecondFactorAfterExternalLoginFailed": "更新第二因素設定失敗",
     "updatePasswordResetFailed": "更新密碼重設設定失敗",
     "sessionTimeoutRange2": "工作階段逾時必須介於 1 到 720 小時之間",
@@ -1428,7 +1427,7 @@
     "dataLockedBadge": "已鎖定",
     "dataLockedNotice": "{{username}} 的資料將保持鎖定，直到他們下次登入為止。在此之前無法檢視或編輯其主機、憑證和程式碼片段。",
     "resetPasswordTitle": "重設密碼",
-    "resetPasswordOidcOnly": "此使用者透過外部提供者登入，沒有密碼。",
+    "resetPasswordExternalOnly": "此使用者透過外部提供者登入，沒有密碼。",
     "resetPasswordPlaceholder": "新密碼",
     "resetPasswordBtn": "重設",
     "resetPasswordWorking": "重設中...",
@@ -1742,7 +1741,7 @@
         "importFailed": "導入失敗： {{error}}",
         "roleUser": "使用者",
         "authMethodDual": "雙重驗證",
-        "authMethodOidc": "外部",
+        "authMethodExternal": "外部",
         "done": "完成",
         "apiKeyNameRequired": "必須提供金鑰名稱",
         "apiKeyCreated": "API 金鑰「{{name}}」已建立",
diff --git a/src/ui/main-axios.ts b/src/ui/main-axios.ts
index 8c496f3d0..67ca0874e 100644
--- a/src/ui/main-axios.ts
+++ b/src/ui/main-axios.ts
@@ -77,8 +77,6 @@ export interface AuthResponse {
   username?: string;
   userId?: string;
   is_external?: boolean;
-  /** 2.8 name for is_external. */
-  is_oidc?: boolean;
   totp_enabled?: boolean;
   requires_totp?: boolean;
   temp_token?: string;
@@ -96,12 +94,9 @@ export interface UserInfo {
   is_admin: boolean;
   /** Signs in through an external login such as SSO or LDAP. */
   is_external?: boolean;
-  /** 2.8 name for is_external. */
-  is_oidc: boolean;
   is_dual_auth?: boolean;
   password_hash?: string;
   data_unlocked?: boolean;
-  show_donation_modal?: boolean;
   /** On a desktop linked to a server, the account it is signed in to there. */
   linked?: LinkedAccountInfo | null;
 }
@@ -139,6 +134,8 @@ type ElectronWindow = Window &
 
 export { isElectron };
 
+export const TRUST_TOKEN_KEY = "termixTrustToken";
+
 function getLoggerForService(serviceName: string) {
   if (serviceName.includes("SSH") || serviceName.includes("ssh")) {
     return sshLogger;
@@ -172,7 +169,6 @@ if (isElectron()) {
             if (!localStorage.getItem(key)) {
               electronSettingsCache.set(key, value);
               localStorage.setItem(key, value);
-              console.log(`[Electron] Loaded setting ${key} from main process`);
             } else {
               // Even if we don't overwrite localStorage, update the cache
               electronSettingsCache.set(key, localStorage.getItem(key)!);
@@ -206,8 +202,6 @@ export function setCookie(
           console.error(`[Electron] Failed to persist setting ${name}:`, err);
         });
       }
-
-      console.log(`[Electron] Set setting: ${name}`);
     } catch (error) {
       console.error(`[Electron] Failed to set setting: ${name}`, error);
     }
@@ -232,7 +226,6 @@ export function getCookie(name: string): string | undefined {
       if (token) {
         electronSettingsCache.set(name, token);
       }
-      console.log(`[Electron] Get setting: ${name} = ${token}`);
       return token;
     } catch (error) {
       console.error(`[Electron] Failed to get setting: ${name}`, error);
@@ -374,6 +367,17 @@ function createApiInstance(
           config.headers["Authorization"] = `Bearer ${jwt}`;
         }
       }
+      // The desktop app has no cookies with the server, so it carries the
+      // remember-this-device token itself, and only to login.
+      const trustToken = localStorage.getItem(TRUST_TOKEN_KEY);
+      const isLogin = isLoginRequestUrl(config.url);
+      if (trustToken && isLogin) {
+        if (config.headers.set) {
+          config.headers.set("X-Termix-Trust-Token", trustToken);
+        } else {
+          config.headers["X-Termix-Trust-Token"] = trustToken;
+        }
+      }
     }
 
     if (
@@ -722,6 +726,19 @@ class ApiError extends Error {
   }
 }
 
+/**
+ * Requests that sign someone in. A 401 from one of these means wrong
+ * credentials or a wrong code, not an expired session.
+ */
+export function isLoginRequestUrl(url: string | undefined): boolean {
+  if (!url) return false;
+  return (
+    url.includes("/users/login") ||
+    url.includes("/users/totp/verify-login") ||
+    /\/users\/auth\/(second-factor\/)?[^/?]+\/verify(\?|$)/.test(url)
+  );
+}
+
 export function handleApiError(error: unknown, operation: string): never {
   const context: LogContext = {
     operation: "error_handling",
@@ -753,8 +770,7 @@ export function handleApiError(error: unknown, operation: string): never {
         errorContext,
       );
 
-      const isLoginEndpoint = url?.includes("/users/login");
-      const errorMessage = isLoginEndpoint
+      const errorMessage = isLoginRequestUrl(url)
         ? message
         : "Authentication required. Please log in again.";
 
@@ -960,8 +976,7 @@ export async function loginUser(
       requires_totp: response.data.requires_totp,
       temp_token: response.data.temp_token,
       rememberMe: response.data.rememberMe,
-      is_external: response.data.is_external ?? response.data.is_oidc,
-      is_oidc: response.data.is_oidc,
+      is_external: response.data.is_external,
       totp_enabled: response.data.totp_enabled,
       token: response.data.token,
     };
@@ -1012,14 +1027,6 @@ export async function getUserInfo(): Promise<UserInfo> {
   }
 }
 
-export async function dismissDonationModal(): Promise<void> {
-  try {
-    await authApi.post("/users/me/dismiss-donation-modal");
-  } catch (error) {
-    handleApiError(error, "dismiss donation modal");
-  }
-}
-
 export async function getCurrentToken(): Promise<string | null> {
   try {
     const response = await authApi.get("/users/me/token");
diff --git a/src/ui/manage/EditorPane.tsx b/src/ui/manage/EditorPane.tsx
new file mode 100644
index 000000000..8b1acd6c2
--- /dev/null
+++ b/src/ui/manage/EditorPane.tsx
@@ -0,0 +1,357 @@
+/* eslint-disable react-refresh/only-export-components */
+import type React from "react";
+import {
+  createContext,
+  useCallback,
+  useContext,
+  useEffect,
+  useLayoutEffect,
+  useRef,
+  useState,
+  type ReactNode,
+  type RefObject,
+} from "react";
+import { useTranslation } from "react-i18next";
+import { Search } from "lucide-react";
+import { GroupHeading, PANEL, PanelSearch } from "@/components/panel-layout";
+import { TabStrip } from "@/components/tab-strip";
+import { EmptyState } from "@/components/empty-state";
+import { HIDDEN_ATTR, useSettingsPageFilter } from "@/settings/page-filter";
+import { cn } from "@/lib/utils";
+
+/** True while the editor is searched, so every lazy section mounts. */
+const SearchingContext = createContext(false);
+
+export interface EditorNavItem {
+  id: string;
+  label: string;
+  icon?: ReactNode;
+  /** Marks a section holding something that needs fixing. */
+  error?: boolean;
+}
+
+export interface EditorNavBand {
+  id: string;
+  label: string;
+  items: EditorNavItem[];
+}
+
+/**
+ * The element that really scrolls: the editor's own area, or the page around
+ * it when the editor is embedded somewhere that scrolls itself.
+ */
+function scroller(el: HTMLElement): HTMLElement {
+  let node: HTMLElement | null = el;
+  while (node) {
+    const overflow = getComputedStyle(node).overflowY;
+    if (
+      (overflow === "auto" || overflow === "scroll") &&
+      node.scrollHeight > node.clientHeight + 1
+    ) {
+      return node;
+    }
+    node = node.parentElement;
+  }
+  return el;
+}
+
+/** Which section is in view, and a way to jump to one. */
+export function useScrollSpy(
+  containerRef: RefObject<HTMLElement | null>,
+  ids: string[],
+): { active: string; scrollTo: (id: string) => void } {
+  const [active, setActive] = useState(ids[0] ?? "");
+  const idsKey = ids.join("|");
+  // A jump scrolls past every section between; the spy waits it out.
+  const lockUntil = useRef(0);
+
+  useEffect(() => {
+    const container = containerRef.current;
+    if (!container) return;
+    const onScroll = () => {
+      if (Date.now() < lockUntil.current) return;
+      const area = scroller(container);
+      const top = area.getBoundingClientRect().top;
+      let current = ids[0] ?? "";
+      for (const id of ids) {
+        const el = container.querySelector<HTMLElement>(
+          `[data-section="${id}"]`,
+        );
+        if (!el) continue;
+        if (el.getBoundingClientRect().top - top <= 24) current = id;
+      }
+      if (
+        area.scrollHeight > area.clientHeight &&
+        area.scrollTop + area.clientHeight >= area.scrollHeight - 8
+      ) {
+        current = ids[ids.length - 1] ?? current;
+      }
+      setActive(current);
+    };
+    onScroll();
+    // Captured on the document so an outer scroller is heard too.
+    document.addEventListener("scroll", onScroll, {
+      passive: true,
+      capture: true,
+    });
+    return () =>
+      document.removeEventListener("scroll", onScroll, { capture: true });
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [containerRef, idsKey]);
+
+  return {
+    active: ids.includes(active) ? active : (ids[0] ?? ""),
+    scrollTo: (id: string) => {
+      const container = containerRef.current;
+      const el = container?.querySelector<HTMLElement>(
+        `[data-section="${id}"]`,
+      );
+      if (!container || !el) return;
+      lockUntil.current = Date.now() + 600;
+      setActive(id);
+      const area = scroller(container);
+      const target = () =>
+        el.getBoundingClientRect().top -
+        area.getBoundingClientRect().top +
+        area.scrollTop -
+        8;
+      let lastTop = target();
+      let lastHeight = area.scrollHeight;
+      area.scrollTo?.({ top: lastTop, behavior: "smooth" });
+      // Sections above can still be mounting, which moves the target or
+      // cuts the scroll short. Follow it until the layout settles.
+      const started = Date.now();
+      const follow = () => {
+        if (!el.isConnected || Date.now() - started > 1500) return;
+        const top = target();
+        if (Math.abs(top - lastTop) > 4 || area.scrollHeight !== lastHeight) {
+          lastTop = top;
+          lastHeight = area.scrollHeight;
+          lockUntil.current = Date.now() + 600;
+          area.scrollTo?.({ top, behavior: "smooth" });
+        }
+        requestAnimationFrame(follow);
+      };
+      requestAnimationFrame(follow);
+    },
+  };
+}
+
+/** Wraps a section so the nav can find it. */
+export function EditorSection({
+  id,
+  label,
+  showHeading = true,
+  children,
+}: {
+  id: string;
+  label?: string;
+  showHeading?: boolean;
+  children: ReactNode;
+}) {
+  return (
+    <section data-section={id} className={`flex flex-col ${PANEL.gap}`}>
+      {showHeading && label && <GroupHeading title={label} className="pt-1" />}
+      {children}
+    </section>
+  );
+}
+
+/**
+ * Mounts its children the first time they scroll near view, so a long editor
+ * does not start every section's requests at once.
+ */
+export function LazySection({ children }: { children: ReactNode }) {
+  const ref = useRef<HTMLDivElement>(null);
+  const searching = useContext(SearchingContext);
+  const [shown, setShown] = useState(
+    () => typeof IntersectionObserver === "undefined",
+  );
+  useEffect(() => {
+    if (searching) setShown(true);
+  }, [searching]);
+  useLayoutEffect(() => {
+    if (shown) return;
+    const el = ref.current;
+    if (!el) return;
+    const observer = new IntersectionObserver(
+      (entries) => {
+        if (entries.some((entry) => entry.isIntersecting)) {
+          setShown(true);
+          observer.disconnect();
+        }
+      },
+      { rootMargin: "400px 0px" },
+    );
+    observer.observe(el);
+    return () => observer.disconnect();
+  }, [shown]);
+  return (
+    <div ref={ref} className={shown ? "contents" : "min-h-24"}>
+      {shown && children}
+    </div>
+  );
+}
+
+/**
+ * An editor laid out like the settings screen: a section nav beside one
+ * scrolling form, and the actions pinned under it.
+ */
+export function EditorPane({
+  bands,
+  banner,
+  footer,
+  errorCount = 0,
+  revealRef,
+  children,
+  className,
+}: {
+  bands: EditorNavBand[];
+  /** Filled with a function that scrolls a section into view. */
+  revealRef?: React.MutableRefObject<((id: string) => void) | null>;
+  /** Sits above the form, inside the scroll area. */
+  banner?: ReactNode;
+  /** Usually Cancel and Save, pinned at the bottom. */
+  footer?: ReactNode;
+  /** Shown beside the footer so a problem in a hidden section is not missed. */
+  errorCount?: number;
+  children: ReactNode;
+  className?: string;
+}) {
+  const { t } = useTranslation();
+  const scrollRef = useRef<HTMLDivElement>(null);
+  const formRef = useRef<HTMLDivElement>(null);
+  const [query, setQuery] = useState("");
+  const [hiddenIds, setHiddenIds] = useState<Set<string>>(new Set());
+  const searching = query.trim().length > 0;
+  const onFiltered = useCallback((root: HTMLElement) => {
+    const next = new Set<string>();
+    for (const el of root.querySelectorAll<HTMLElement>(
+      `[data-section][${HIDDEN_ATTR}]`,
+    )) {
+      if (el.dataset.section) next.add(el.dataset.section);
+    }
+    setHiddenIds((prev) =>
+      prev.size === next.size && [...next].every((id) => prev.has(id))
+        ? prev
+        : next,
+    );
+  }, []);
+  const anyShown = useSettingsPageFilter(
+    formRef,
+    query,
+    "editor",
+    "[data-section]",
+    onFiltered,
+  );
+  const visibleBands = bands
+    .map((band) => ({
+      ...band,
+      items: band.items.filter((item) => !hiddenIds.has(item.id)),
+    }))
+    .filter((band) => band.items.length > 0);
+  const ids = visibleBands.flatMap((band) => band.items.map((item) => item.id));
+  const { active, scrollTo } = useScrollSpy(scrollRef, ids);
+  const showNav = bands.flatMap((band) => band.items).length > 1;
+  if (revealRef) revealRef.current = scrollTo;
+
+  return (
+    <div className={cn("flex min-h-0 flex-1", className)}>
+      {showNav && (
+        <nav
+          aria-label={t("manage.sections")}
+          className="hidden w-52 shrink-0 flex-col gap-3 overflow-y-auto border-r border-border py-2.5 thin-scrollbar lg:flex"
+        >
+          {visibleBands.map((band) => (
+            <div key={band.id} className="flex flex-col">
+              <GroupHeading title={band.label} className="px-2.5 pb-1.5" />
+              {band.items.map((item) => {
+                const on = item.id === active;
+                return (
+                  <button
+                    key={item.id}
+                    type="button"
+                    aria-current={on ? "true" : undefined}
+                    onClick={() => scrollTo(item.id)}
+                    className={cn(
+                      "flex w-full items-center gap-2 border-l-2 py-1.5 pl-2 pr-2 text-left transition-colors focus-visible:relative focus-visible:z-10 focus-visible:ring-1 focus-visible:ring-ring",
+                      on
+                        ? "border-accent-brand bg-accent-brand/10 text-accent-brand"
+                        : "border-transparent text-muted-foreground hover:bg-muted hover:text-foreground",
+                    )}
+                  >
+                    {item.icon && (
+                      <span className="flex shrink-0 [&_svg]:size-3.5">
+                        {item.icon}
+                      </span>
+                    )}
+                    <span className="truncate text-xs font-medium">
+                      {item.label}
+                    </span>
+                    {item.error && (
+                      <span
+                        title={t("manage.sectionNeedsAttention")}
+                        className="ml-auto size-1.5 shrink-0 rounded-full bg-destructive"
+                      />
+                    )}
+                  </button>
+                );
+              })}
+            </div>
+          ))}
+        </nav>
+      )}
+
+      <div className="flex min-h-0 min-w-0 flex-1 flex-col">
+        <div className={`shrink-0 border-b border-border ${PANEL.band}`}>
+          <div className="mx-auto w-full max-w-3xl">
+            <PanelSearch
+              value={query}
+              onChange={setQuery}
+              placeholder={t("manage.searchSettings")}
+              fill
+            />
+          </div>
+        </div>
+        {showNav && (
+          <div className="shrink-0 border-b border-border px-1 lg:hidden">
+            <TabStrip
+              tabs={visibleBands.flatMap((band) =>
+                band.items.map((item) => ({ id: item.id, label: item.label })),
+              )}
+              activeTab={active}
+              onTabChange={scrollTo}
+            />
+          </div>
+        )}
+        <div
+          ref={scrollRef}
+          className={`min-h-0 flex-1 overflow-y-auto thin-scrollbar ${PANEL.body}`}
+        >
+          {!anyShown && (
+            <EmptyState icon={Search} title={t("manage.noMatchingSettings")} />
+          )}
+          <div
+            ref={formRef}
+            className={`mx-auto flex max-w-3xl flex-col ${PANEL.gap} pb-6`}
+          >
+            {banner}
+            <SearchingContext.Provider value={searching}>
+              {children}
+            </SearchingContext.Provider>
+          </div>
+        </div>
+        {(footer || errorCount > 0) && (
+          <div className="flex shrink-0 items-center gap-3 border-t border-border px-3 py-2">
+            {errorCount > 0 && (
+              <span className="text-[10px] text-destructive">
+                {t("manage.needsAttention", { count: errorCount })}
+              </span>
+            )}
+            <div className="ml-auto flex items-center gap-2">{footer}</div>
+          </div>
+        )}
+      </div>
+    </div>
+  );
+}
diff --git a/src/ui/manage/ManageList.tsx b/src/ui/manage/ManageList.tsx
new file mode 100644
index 000000000..8c714b7e2
--- /dev/null
+++ b/src/ui/manage/ManageList.tsx
@@ -0,0 +1,467 @@
+import { useEffect, useMemo, useState } from "react";
+import { useTranslation } from "react-i18next";
+import {
+  ChevronDown,
+  ChevronRight,
+  Folder,
+  FolderOpen,
+  Globe,
+  KeyRound,
+  Plus,
+  Server,
+  SlidersHorizontal,
+  User,
+} from "lucide-react";
+import { Button } from "@/components/button";
+import { EmptyState } from "@/components/empty-state";
+import { PanelSearch } from "@/components/panel-layout";
+import { cn } from "@/lib/utils";
+import { rem } from "@/lib/rem";
+import type { Credential, Host } from "@/types/ui-types";
+import { defaultsRows, type DefaultsRow } from "./defaults-rows";
+import {
+  allFolderPaths,
+  allParentIds,
+  buildCredentialManageTree,
+  buildHostManageTree,
+  flattenTree,
+  type ManageRow,
+} from "./manage-tree";
+import type { ManageMode } from "./manage-requests";
+import {
+  getStatusClasses,
+  useStatusColorScheme,
+} from "@/hooks/use-status-color-scheme";
+
+function indent(depth: number) {
+  return 6 + depth * 13;
+}
+
+/** Rules marking each open ancestor, so deep rows still read as nested. */
+function Guides({ depth }: { depth: number }) {
+  if (depth === 0) return null;
+  return (
+    <>
+      {Array.from({ length: depth }, (_, i) => (
+        <span
+          key={i}
+          aria-hidden
+          className="absolute inset-y-0 w-px bg-border"
+          style={{ left: rem(indent(i) + 7) }}
+        />
+      ))}
+    </>
+  );
+}
+
+const rowFocus =
+  "focus-visible:relative focus-visible:z-10 focus-visible:ring-1 focus-visible:ring-ring";
+
+/** The list column of the Manage tab. */
+export function ManageList({
+  editing,
+  mode,
+  onMode,
+  hosts,
+  credentials,
+  canEditInstanceDefaults,
+  isOnline,
+  selectedKey,
+  onPickHost,
+  onPickCredential,
+  onPickDefaults,
+  onAdd,
+}: {
+  editing: boolean;
+  mode: ManageMode;
+  onMode: (mode: ManageMode) => void;
+  hosts: Host[];
+  credentials: Credential[];
+  canEditInstanceDefaults: boolean;
+  isOnline: (host: Host) => boolean;
+  /** "h:<id>", "c:<id>" or a defaults row key. */
+  selectedKey: string | null;
+  onPickHost: (host: Host) => void;
+  onPickCredential: (credential: Credential) => void;
+  onPickDefaults: (row: DefaultsRow) => void;
+  onAdd: () => void;
+}) {
+  const { t } = useTranslation();
+  const [query, setQuery] = useState("");
+  const needle = query.trim().toLowerCase();
+
+  const tree = useMemo(
+    () =>
+      mode === "credentials"
+        ? buildCredentialManageTree(credentials)
+        : buildHostManageTree(hosts, isOnline),
+    [mode, hosts, credentials, isOnline],
+  );
+
+  // Everything starts open; closing something is remembered while mounted.
+  const [open, setOpen] = useState<Set<string>>(new Set());
+  useEffect(() => {
+    setOpen(new Set([...allFolderPaths(tree), ...allParentIds(tree)]));
+    // Rebuilt only when the side changes, so toggles survive an edit.
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [mode]);
+
+  const toggle = (key: string) =>
+    setOpen((prev) => {
+      const next = new Set(prev);
+      if (next.has(key)) next.delete(key);
+      else next.add(key);
+      return next;
+    });
+
+  const rows = useMemo(
+    () => (mode === "defaults" ? [] : flattenTree(tree, open, needle)),
+    [mode, tree, open, needle],
+  );
+
+  const defaults = useMemo(
+    () =>
+      defaultsRows(hosts, canEditInstanceDefaults, t).filter(
+        (row) => !needle || row.label.toLowerCase().includes(needle),
+      ),
+    [hosts, canEditInstanceDefaults, t, needle],
+  );
+
+  const pick = (id: string) => {
+    if (mode === "hosts") {
+      const host = hosts.find((h) => h.id === id);
+      if (host) onPickHost(host);
+    } else {
+      const credential = credentials.find((c) => c.id === id);
+      if (credential) onPickCredential(credential);
+    }
+  };
+
+  const empty = mode === "defaults" ? defaults.length === 0 : rows.length === 0;
+
+  return (
+    <div
+      className={cn(
+        editing ? "hidden md:flex" : "flex",
+        "w-full shrink-0 flex-col border-r border-border bg-background md:w-72",
+      )}
+    >
+      <nav
+        aria-label={t("manage.sections")}
+        className="flex shrink-0 flex-col border-b border-border py-1"
+      >
+        {(
+          [
+            {
+              value: "hosts",
+              label: t("nav.hosts"),
+              icon: Server,
+              count: hosts.length,
+            },
+            {
+              value: "credentials",
+              label: t("nav.credentials"),
+              icon: KeyRound,
+              count: credentials.length,
+            },
+            {
+              value: "defaults",
+              label: t("manage.defaults"),
+              icon: SlidersHorizontal,
+            },
+          ] as {
+            value: ManageMode;
+            label: string;
+            icon: typeof Server;
+            count?: number;
+          }[]
+        ).map((item) => {
+          const active = item.value === mode;
+          const Icon = item.icon;
+          return (
+            <button
+              key={item.value}
+              type="button"
+              aria-current={active ? "page" : undefined}
+              onClick={() => onMode(item.value)}
+              className={cn(
+                "flex w-full items-center gap-2 border-l-2 py-1.5 pl-2 pr-2.5 text-left transition-colors",
+                rowFocus,
+                active
+                  ? "border-accent-brand bg-accent-brand/10 text-accent-brand"
+                  : "border-transparent text-muted-foreground hover:bg-muted hover:text-foreground",
+              )}
+            >
+              <Icon className="size-3.5 shrink-0" />
+              <span className="min-w-0 flex-1 truncate text-xs font-medium">
+                {item.label}
+              </span>
+              {item.count !== undefined && (
+                <span className="shrink-0 text-[10px] tabular-nums opacity-60">
+                  {item.count}
+                </span>
+              )}
+            </button>
+          );
+        })}
+      </nav>
+      <div className="flex flex-col gap-2 border-b border-border px-2.5 py-2">
+        <div className="flex items-center gap-2">
+          <PanelSearch
+            value={query}
+            onChange={setQuery}
+            placeholder={
+              mode === "hosts"
+                ? t("manage.searchHosts")
+                : mode === "credentials"
+                  ? t("manage.searchCredentials")
+                  : t("manage.searchDefaults")
+            }
+            fill
+          />
+          {mode !== "defaults" && (
+            <Button
+              variant="outline"
+              size="icon"
+              title={
+                mode === "hosts"
+                  ? t("hosts.addHost")
+                  : t("manage.addCredential")
+              }
+              aria-label={
+                mode === "hosts"
+                  ? t("hosts.addHost")
+                  : t("manage.addCredential")
+              }
+              onClick={onAdd}
+              className="shrink-0 border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
+            >
+              <Plus className="size-3.5" />
+            </Button>
+          )}
+        </div>
+      </div>
+
+      <div className="min-h-0 flex-1 overflow-y-auto py-1 thin-scrollbar">
+        {empty ? (
+          <EmptyState
+            icon={mode === "credentials" ? KeyRound : Server}
+            title={needle ? t("manage.nothingMatches") : t("manage.nothingYet")}
+            hint={
+              needle
+                ? undefined
+                : mode === "hosts"
+                  ? t("manage.emptyHostsHint")
+                  : t("manage.emptyCredentialsHint")
+            }
+          />
+        ) : mode === "defaults" ? (
+          defaults.map((row) => {
+            const Icon =
+              row.level === "admin"
+                ? Globe
+                : row.level === "user"
+                  ? User
+                  : Folder;
+            const selected = selectedKey === row.key;
+            return (
+              <button
+                key={row.key}
+                type="button"
+                onClick={() => onPickDefaults(row)}
+                className={cn(
+                  "flex w-full items-center gap-2 border-l-2 px-2.5 py-1.5 text-left transition-colors",
+                  rowFocus,
+                  selected
+                    ? "border-accent-brand bg-accent-brand/10 text-accent-brand"
+                    : "border-transparent text-foreground hover:bg-muted",
+                )}
+              >
+                <Icon
+                  className={cn(
+                    "size-3.5 shrink-0",
+                    !selected && "text-muted-foreground",
+                  )}
+                />
+                <span className="min-w-0 flex-1 truncate text-xs font-medium">
+                  {row.label}
+                </span>
+                <SlidersHorizontal className="size-3 shrink-0 text-muted-foreground/60" />
+              </button>
+            );
+          })
+        ) : (
+          rows.map((row) =>
+            row.kind === "folder" ? (
+              <FolderRow
+                key={`f:${row.folder.path}`}
+                row={row}
+                showOnline={mode === "hosts"}
+                open={!!needle || open.has(row.folder.path)}
+                locked={!!needle}
+                onToggle={() => toggle(row.folder.path)}
+              />
+            ) : (
+              <ItemRow
+                key={`i:${row.item.id}`}
+                row={row}
+                isHost={mode === "hosts"}
+                selected={
+                  selectedKey ===
+                  `${mode === "hosts" ? "h" : "c"}:${row.item.id}`
+                }
+                open={!!needle || open.has(row.item.id)}
+                locked={!!needle}
+                onToggle={() => toggle(row.item.id)}
+                onPick={() => pick(row.item.id)}
+              />
+            ),
+          )
+        )}
+      </div>
+    </div>
+  );
+}
+
+function FolderRow({
+  row,
+  open,
+  locked,
+  showOnline,
+  onToggle,
+}: {
+  row: Extract<ManageRow, { kind: "folder" }>;
+  open: boolean;
+  /** Search forces folders open, so the chevron stops responding. */
+  locked: boolean;
+  showOnline: boolean;
+  onToggle: () => void;
+}) {
+  const Icon = open ? FolderOpen : Folder;
+  return (
+    <div className="relative">
+      <Guides depth={row.depth} />
+      <button
+        type="button"
+        aria-expanded={open}
+        onClick={locked ? undefined : onToggle}
+        style={{ paddingLeft: rem(indent(row.depth)) }}
+        className={cn(
+          "group flex w-full items-center gap-1.5 py-1.5 pr-2.5 text-left transition-colors hover:bg-muted",
+          rowFocus,
+        )}
+      >
+        {open ? (
+          <ChevronDown className="size-3 shrink-0 text-muted-foreground" />
+        ) : (
+          <ChevronRight className="size-3 shrink-0 text-muted-foreground" />
+        )}
+        <Icon className="size-3.5 shrink-0 text-muted-foreground" />
+        <span className="min-w-0 flex-1 truncate text-[11px] font-semibold uppercase tracking-wide text-muted-foreground">
+          {row.folder.name}
+        </span>
+        <span className="shrink-0 text-[10px] tabular-nums text-muted-foreground/60">
+          {showOnline ? `${row.online}/${row.count}` : row.count}
+        </span>
+      </button>
+    </div>
+  );
+}
+
+function ItemRow({
+  row,
+  isHost,
+  selected,
+  open,
+  locked,
+  onToggle,
+  onPick,
+}: {
+  row: Extract<ManageRow, { kind: "item" }>;
+  isHost: boolean;
+  selected: boolean;
+  open: boolean;
+  locked: boolean;
+  onToggle: () => void;
+  onPick: () => void;
+}) {
+  const { t } = useTranslation();
+  const scheme = useStatusColorScheme();
+  const nests = row.item.children.length > 0;
+  const Icon = isHost ? Server : KeyRound;
+
+  return (
+    <div className="relative">
+      <Guides depth={row.depth} />
+      <div
+        className={cn(
+          "flex items-center border-l-2 transition-colors",
+          selected
+            ? "border-accent-brand bg-accent-brand/10"
+            : "border-transparent hover:bg-muted",
+        )}
+      >
+        <div
+          className="flex shrink-0 items-center justify-center"
+          style={{ paddingLeft: rem(indent(row.depth)) }}
+        >
+          {nests ? (
+            <button
+              type="button"
+              onClick={locked ? undefined : onToggle}
+              aria-expanded={open}
+              title={open ? t("manage.collapse") : t("manage.expand")}
+              aria-label={open ? t("manage.collapse") : t("manage.expand")}
+              className={cn(
+                "flex size-4 items-center justify-center text-muted-foreground hover:text-foreground",
+                rowFocus,
+              )}
+            >
+              {open ? (
+                <ChevronDown className="size-3" />
+              ) : (
+                <ChevronRight className="size-3" />
+              )}
+            </button>
+          ) : (
+            <span aria-hidden className="size-4" />
+          )}
+        </div>
+
+        <button
+          type="button"
+          onClick={onPick}
+          aria-current={selected ? "true" : undefined}
+          className={cn(
+            "flex min-w-0 flex-1 items-center gap-2 py-1.5 pl-1 pr-2.5 text-left transition-colors",
+            rowFocus,
+            selected ? "text-accent-brand" : "text-foreground",
+          )}
+        >
+          <Icon
+            className={cn(
+              "size-3.5 shrink-0",
+              !selected && "text-muted-foreground",
+            )}
+          />
+          <span className="min-w-0 flex-1 truncate text-xs font-medium">
+            {row.item.name}
+          </span>
+          <span className="shrink-0 truncate font-mono text-[10px] text-muted-foreground">
+            {row.item.note}
+          </span>
+          {isHost && (
+            <span
+              aria-hidden
+              title={row.item.online ? t("common.online") : t("common.offline")}
+              className={cn(
+                "size-1.5 shrink-0 rounded-full",
+                getStatusClasses(!!row.item.online, scheme, "dot"),
+              )}
+            />
+          )}
+        </button>
+      </div>
+    </div>
+  );
+}
diff --git a/src/ui/manage/ManageTab.tsx b/src/ui/manage/ManageTab.tsx
new file mode 100644
index 000000000..16d75fdcf
--- /dev/null
+++ b/src/ui/manage/ManageTab.tsx
@@ -0,0 +1,588 @@
+import { useCallback, useEffect, useMemo, useRef, useState } from "react";
+import { useTranslation } from "react-i18next";
+import { KeyRound, LibraryBig, Plus, Server, Trash2 } from "lucide-react";
+import { toast } from "sonner";
+import type { HostDraft } from "@termix-ssh/plugin-sdk/frontend";
+import { Button } from "@/components/button";
+import { EmptyState } from "@/components/empty-state";
+import { FakeSwitch } from "@/components/section-card";
+import { BackButton, PanelShell } from "@/components/panel-layout";
+import { useConfirm } from "@/components/surface/surface-scope";
+import { useUiPreference } from "@/contexts/UiPreferencesContext";
+import { usePermissions } from "@/hooks/use-permissions";
+import { useServerStatus } from "@/lib/ServerStatusContext";
+import {
+  deleteCredential,
+  deleteSSHHost,
+  getCredentialDetails,
+  getCredentials,
+  getSSHHosts,
+  type SSHHostWithStatus,
+} from "@/main-axios";
+import { getFolderDefaultsId } from "@/api/host-defaults-api";
+import { invalidateHostsAndStatusCaches } from "@/lib/hosts-request-cache";
+import { registerTabCloseGuard } from "@/shell/tab-close-guards";
+import { HostEditor } from "@/sidebar/HostEditor";
+import { CredentialEditorView } from "@/sidebar/CredentialEditorView";
+import {
+  HostDefaultsEditorView,
+  hostDefaultsTitle,
+  type HostDefaultsEditorTarget,
+} from "@/sidebar/host-defaults/HostDefaultsEditorView";
+import { mapCredentials, sshHostToHost } from "@/sidebar/HostManagerData";
+import {
+  hostProtocolFlags,
+  type HostProtocols,
+} from "@/sidebar/host-protocols";
+import { canDeleteHost } from "@/sidebar/host-permissions";
+import type { Credential, Host } from "@/types/ui-types";
+import { ManageList } from "./ManageList";
+import type { DefaultsRow } from "./defaults-rows";
+import {
+  MANAGE_REQUEST_EVENT,
+  takePendingManageRequest,
+  type ManageMode,
+  type ManageRequest,
+} from "./manage-requests";
+import { docsUrl } from "@/lib/docs";
+
+type Editing =
+  | {
+      kind: "host";
+      host: Host | null;
+      draft?: HostDraft;
+      key: number;
+      protocols: HostProtocols;
+    }
+  | { kind: "credential"; credential: Credential | null; key: number }
+  | { kind: "defaults"; target: HostDefaultsEditorTarget; rowKey: string };
+
+const TAB_ID = "host-manager";
+
+/** Fetches a credential with its secrets marked as stored, for the editor. */
+async function loadCredentialForEdit(cred: Credential): Promise<Credential> {
+  try {
+    const full = (await getCredentialDetails(Number(cred.id))) as {
+      hasKey?: boolean;
+      hasKeyPassword?: boolean;
+      password?: string;
+      certPublicKey?: string;
+    };
+    return {
+      ...cred,
+      value: full.hasKey ? "existing_key" : (full.password ?? ""),
+      password: full.password ?? "",
+      passphrase: full.hasKeyPassword ? "existing_key_password" : "",
+      publicKey: full.certPublicKey ?? cred.publicKey,
+    };
+  } catch {
+    return cred;
+  }
+}
+
+/**
+ * Hosts, credentials and host defaults, edited at full width: a list on the
+ * left, the thing you picked on the right.
+ */
+export function ManageTab() {
+  const { t } = useTranslation();
+  const confirm = useConfirm();
+  const { has } = usePermissions();
+  const { statuses } = useServerStatus();
+  const presetMode = useUiPreference("hostEditor", "mode");
+
+  const [mode, setMode] = useState<ManageMode>("hosts");
+  const [hosts, setHosts] = useState<Host[]>([]);
+  const [credentials, setCredentials] = useState<Credential[]>([]);
+  const [editing, setEditing] = useState<Editing | null>(null);
+  const [dirty, setDirty] = useState(false);
+  // Starts from the preset and stays where the user puts it this session.
+  const [advanced, setAdvanced] = useState(presetMode !== "simple");
+  // The host a credential was opened from, so Back returns to it.
+  const [returnHost, setReturnHost] = useState<Host | "new" | null>(null);
+
+  const hostsRef = useRef(hosts);
+  hostsRef.current = hosts;
+  const credentialsRef = useRef(credentials);
+  credentialsRef.current = credentials;
+  const dirtyRef = useRef(dirty);
+  dirtyRef.current = dirty;
+
+  const reloadHosts = useCallback(() => {
+    return getSSHHosts()
+      .then((raw) => {
+        const list = raw.map(sshHostToHost);
+        hostsRef.current = list;
+        setHosts(list);
+      })
+      .catch(() => {});
+  }, []);
+  const reloadCredentials = useCallback(() => {
+    return getCredentials()
+      .then((res) => {
+        const list = mapCredentials(res);
+        credentialsRef.current = list;
+        setCredentials(list);
+      })
+      .catch(() => {});
+  }, []);
+
+  const loaded = useRef<Promise<unknown>>(Promise.resolve());
+
+  useEffect(() => {
+    loaded.current = Promise.all([reloadHosts(), reloadCredentials()]);
+  }, [reloadHosts, reloadCredentials]);
+
+  useEffect(() => {
+    window.addEventListener("termix:hosts-changed", reloadHosts);
+    window.addEventListener("ssh-hosts:changed", reloadHosts);
+    window.addEventListener("hosts:refresh", reloadHosts);
+    window.addEventListener("termix:credentials-changed", reloadCredentials);
+    return () => {
+      window.removeEventListener("termix:hosts-changed", reloadHosts);
+      window.removeEventListener("ssh-hosts:changed", reloadHosts);
+      window.removeEventListener("hosts:refresh", reloadHosts);
+      window.removeEventListener(
+        "termix:credentials-changed",
+        reloadCredentials,
+      );
+    };
+  }, [reloadHosts, reloadCredentials]);
+
+  /** Asks before throwing away unsaved changes. True means go ahead. */
+  const confirmDiscard = useCallback(async () => {
+    if (!dirtyRef.current) return true;
+    return confirm({
+      title: t("common.unsavedChanges"),
+      description: t("hosts.unsavedChangesDescription"),
+      confirmLabel: t("hosts.discardChanges"),
+      cancelLabel: t("hosts.keepEditing"),
+    });
+  }, [confirm, t]);
+
+  useEffect(
+    () => registerTabCloseGuard(TAB_ID, confirmDiscard),
+    [confirmDiscard],
+  );
+
+  const openHost = useCallback((host: Host | null, draft?: HostDraft) => {
+    setMode("hosts");
+    setReturnHost(null);
+    setDirty(false);
+    setEditing({
+      kind: "host",
+      host,
+      draft,
+      key: Date.now(),
+      protocols: hostProtocolFlags(host),
+    });
+  }, []);
+
+  const openCredential = useCallback(async (credential: Credential | null) => {
+    setMode("credentials");
+    setDirty(false);
+    const full = credential ? await loadCredentialForEdit(credential) : null;
+    setEditing({ kind: "credential", credential: full, key: Date.now() });
+  }, []);
+
+  const openDefaults = useCallback(
+    async (row: Pick<DefaultsRow, "level" | "folderName">) => {
+      setMode("defaults");
+      setReturnHost(null);
+      setDirty(false);
+      const rowKey =
+        row.level === "folder" ? `folder:${row.folderName}` : row.level;
+      if (row.level === "folder" && row.folderName) {
+        try {
+          const folderId = await getFolderDefaultsId(row.folderName);
+          setEditing({
+            kind: "defaults",
+            rowKey,
+            target: { level: "folder", folderId, folderName: row.folderName },
+          });
+        } catch {
+          toast.error(t("hostDefaults.loadFailed"));
+        }
+        return;
+      }
+      setEditing({ kind: "defaults", rowKey, target: { level: row.level } });
+    },
+    [t],
+  );
+
+  const apply = useCallback(
+    async (request: ManageRequest | null) => {
+      if (!request) return;
+      if (!(await confirmDiscard())) return;
+      await loaded.current;
+      if (request.kind === "host") {
+        const find = () =>
+          hostsRef.current.find((h) => h.id === request.hostId) ?? null;
+        let host = request.hostId ? find() : null;
+        // Our list can lag the sidebar's, so refetch once before giving up.
+        if (request.hostId && !host) {
+          invalidateHostsAndStatusCaches();
+          await reloadHosts();
+          host = find();
+          if (!host) {
+            toast.error(t("manage.hostNotFound"));
+            return;
+          }
+        }
+        openHost(host, request.draft);
+      } else if (request.kind === "credential") {
+        const find = () =>
+          credentialsRef.current.find(
+            (c) => String(c.id) === String(request.credentialId),
+          ) ?? null;
+        let credential = request.credentialId ? find() : null;
+        if (request.credentialId && !credential) {
+          await reloadCredentials();
+          credential = find();
+        }
+        void openCredential(credential);
+      } else if (request.kind === "defaults") {
+        void openDefaults(request);
+      } else {
+        setDirty(false);
+        setEditing(null);
+        setMode(request.mode);
+      }
+    },
+    [
+      confirmDiscard,
+      openHost,
+      openCredential,
+      openDefaults,
+      reloadHosts,
+      reloadCredentials,
+      t,
+    ],
+  );
+
+  // The request that opened this tab was parked before it mounted.
+  useEffect(() => {
+    void apply(takePendingManageRequest());
+    const onRequest = () => void apply(takePendingManageRequest());
+    window.addEventListener(MANAGE_REQUEST_EVENT, onRequest);
+    return () => window.removeEventListener(MANAGE_REQUEST_EVENT, onRequest);
+  }, [apply]);
+
+  const guarded =
+    <A extends unknown[]>(fn: (...args: A) => void) =>
+    async (...args: A) => {
+      if (await confirmDiscard()) fn(...args);
+    };
+
+  const close = () => {
+    setDirty(false);
+    setEditing(null);
+  };
+
+  const backFromCredential = () => {
+    if (returnHost) {
+      const host = returnHost;
+      setReturnHost(null);
+      openHost(host === "new" ? null : host);
+      return;
+    }
+    close();
+  };
+
+  const editCredentialFromHost = async (credentialId: string) => {
+    const cred = credentials.find((c) => String(c.id) === String(credentialId));
+    if (!cred || editing?.kind !== "host") return;
+    if (!(await confirmDiscard())) return;
+    setReturnHost(editing.host ?? "new");
+    await openCredential(cred);
+  };
+
+  const deleteCurrent = async () => {
+    if (editing?.kind === "host" && editing.host) {
+      const host = editing.host;
+      const ok = await confirm({
+        title: t("hosts.deleteHostConfirm", { name: host.name || host.ip }),
+        description: t("manage.cannotBeUndone"),
+      });
+      if (!ok) return;
+      try {
+        await deleteSSHHost(Number(host.id));
+        window.dispatchEvent(new CustomEvent("termix:hosts-changed"));
+        toast.success(t("hosts.deletedCount", { count: 1 }));
+        close();
+      } catch {
+        toast.error(t("hosts.failedToDeleteCount", { count: 1 }));
+      }
+    } else if (editing?.kind === "credential" && editing.credential) {
+      const cred = editing.credential;
+      const ok = await confirm({
+        title: t("credentials.deleteCredentialConfirm", { name: cred.name }),
+        description: t("manage.cannotBeUndone"),
+      });
+      if (!ok) return;
+      try {
+        await deleteCredential(Number(cred.id));
+        setCredentials((prev) => prev.filter((c) => c.id !== cred.id));
+        window.dispatchEvent(new CustomEvent("termix:credentials-changed"));
+        toast.success(t("credentials.deletedCredential", { name: cred.name }));
+        close();
+      } catch {
+        toast.error(t("credentials.failedToDeleteCredential"));
+      }
+    }
+  };
+
+  const isOnline = useCallback(
+    (host: Host) => statuses.get(Number(host.id))?.status === "online",
+    [statuses],
+  );
+
+  const existingFolders = useMemo(
+    () =>
+      [
+        ...new Set(
+          credentials.map((c) => c.folder).filter((f): f is string => !!f),
+        ),
+      ].sort(),
+    [credentials],
+  );
+
+  const selectedKey = !editing
+    ? null
+    : editing.kind === "host"
+      ? editing.host
+        ? `h:${editing.host.id}`
+        : null
+      : editing.kind === "credential"
+        ? editing.credential
+          ? `c:${editing.credential.id}`
+          : null
+        : editing.rowKey;
+
+  const status = !editing
+    ? mode === "hosts"
+      ? t("manage.hostCount", { count: hosts.length })
+      : mode === "credentials"
+        ? t("manage.credentialCount", { count: credentials.length })
+        : t("manage.defaults")
+    : editing.kind === "host"
+      ? editing.host
+        ? editing.host.name || editing.host.ip
+        : t("manage.newHost")
+      : editing.kind === "credential"
+        ? editing.credential
+          ? editing.credential.name
+          : t("manage.newCredential")
+        : hostDefaultsTitle(editing.target, t);
+
+  const canDelete =
+    (editing?.kind === "host" &&
+      !!editing.host &&
+      canDeleteHost(editing.host)) ||
+    (editing?.kind === "credential" && !!editing.credential);
+
+  const renderEditor = () => {
+    if (!editing) return null;
+    if (editing.kind === "defaults") {
+      return (
+        <HostDefaultsEditorView
+          key={editing.rowKey}
+          target={editing.target}
+          onClose={guarded(close)}
+          onDirtyChange={setDirty}
+          hosts={hosts}
+          credentials={credentials}
+        />
+      );
+    }
+    if (editing.kind === "credential") {
+      return (
+        <CredentialEditorView
+          key={`c:${editing.credential?.id ?? "new"}:${editing.key}`}
+          credential={editing.credential}
+          existingFolders={existingFolders}
+          saveAsNewHost={returnHost ?? undefined}
+          onBack={backFromCredential}
+          onSave={(saved, options) => {
+            const id = String((saved as { id: number | string }).id);
+            void reloadCredentials();
+            if (options?.assignToHost && returnHost) {
+              const host = returnHost;
+              setReturnHost(null);
+              setDirty(false);
+              setMode("hosts");
+              const next =
+                host === "new" ? null : { ...host, credentialId: id };
+              setEditing({
+                kind: "host",
+                host: next,
+                key: Date.now(),
+                protocols: hostProtocolFlags(next),
+              });
+              return;
+            }
+            if (returnHost) {
+              backFromCredential();
+              return;
+            }
+            close();
+          }}
+        />
+      );
+    }
+    return (
+      <HostEditor
+        key={`h:${editing.host?.id ?? "new"}:${editing.key}`}
+        host={editing.host}
+        draft={editing.host ? undefined : editing.draft}
+        advanced={advanced}
+        onBack={guarded(close)}
+        onSave={(saved) => {
+          const updated = sshHostToHost(saved as unknown as SSHHostWithStatus);
+          setHosts((prev) => {
+            const idx = prev.findIndex((h) => h.id === updated.id);
+            if (idx < 0) return [...prev, updated];
+            const next = [...prev];
+            next[idx] = updated;
+            return next;
+          });
+          window.dispatchEvent(new CustomEvent("termix:hosts-changed"));
+          close();
+        }}
+        protocols={editing.protocols}
+        onProtocolChange={(p) =>
+          setEditing((current) =>
+            current?.kind === "host"
+              ? { ...current, protocols: { ...current.protocols, ...p } }
+              : current,
+          )
+        }
+        onDirtyChange={setDirty}
+        hosts={hosts}
+        credentials={credentials}
+        onEditCredential={(id) => void editCredentialFromHost(id)}
+      />
+    );
+  };
+
+  return (
+    <PanelShell
+      icon={<LibraryBig className="size-4" />}
+      title={t("nav.manage")}
+      status={status}
+      scroll={false}
+      docs={docsUrl(
+        mode === "credentials"
+          ? "credentials"
+          : mode === "hosts"
+            ? "hosts"
+            : "hostDefaults",
+      )}
+      leading={
+        editing ? (
+          <span className="flex h-full md:hidden">
+            <BackButton
+              onClick={() =>
+                void guarded(
+                  editing.kind === "credential" ? backFromCredential : close,
+                )()
+              }
+            />
+          </span>
+        ) : undefined
+      }
+      actions={
+        <>
+          {editing?.kind === "host" && (
+            <label className="flex items-center gap-2 px-1">
+              <span className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
+                {t("manage.advanced")}
+              </span>
+              <FakeSwitch checked={advanced} onChange={setAdvanced} />
+            </label>
+          )}
+          {canDelete && (
+            <Button
+              variant="ghost"
+              size="icon-sm"
+              title={t("common.delete")}
+              aria-label={t("common.delete")}
+              onClick={() => void deleteCurrent()}
+              className="text-muted-foreground hover:text-destructive"
+            >
+              <Trash2 className="size-3.5" />
+            </Button>
+          )}
+        </>
+      }
+    >
+      <div className="flex min-h-0 flex-1">
+        <ManageList
+          editing={!!editing}
+          mode={mode}
+          onMode={(next) =>
+            void guarded(() => {
+              setMode(next);
+              close();
+            })()
+          }
+          hosts={hosts}
+          credentials={credentials}
+          canEditInstanceDefaults={has("admin.settings.manage")}
+          isOnline={isOnline}
+          selectedKey={selectedKey}
+          onPickHost={(host) => void guarded(() => openHost(host))()}
+          onPickCredential={(cred) =>
+            void guarded(() => void openCredential(cred))()
+          }
+          onPickDefaults={(row) => void guarded(() => void openDefaults(row))()}
+          onAdd={() =>
+            void guarded(() =>
+              mode === "credentials"
+                ? void openCredential(null)
+                : openHost(null),
+            )()
+          }
+        />
+
+        {editing ? (
+          <div className="flex min-h-0 min-w-0 flex-1 flex-col">
+            {renderEditor()}
+          </div>
+        ) : (
+          <div className="hidden min-h-0 flex-1 items-center justify-center md:flex">
+            <EmptyState
+              icon={mode === "credentials" ? KeyRound : Server}
+              title={
+                mode === "hosts"
+                  ? t("manage.pickHost")
+                  : mode === "credentials"
+                    ? t("manage.pickCredential")
+                    : t("manage.pickDefaults")
+              }
+              hint={t("manage.pickHint")}
+              action={
+                mode !== "defaults" ? (
+                  <Button
+                    variant="outline"
+                    size="sm"
+                    onClick={() =>
+                      mode === "hosts"
+                        ? openHost(null)
+                        : void openCredential(null)
+                    }
+                  >
+                    <Plus className="mr-1 size-3" />
+                    {mode === "hosts"
+                      ? t("hosts.addHost")
+                      : t("manage.addCredential")}
+                  </Button>
+                ) : undefined
+              }
+            />
+          </div>
+        )}
+      </div>
+    </PanelShell>
+  );
+}
diff --git a/src/ui/manage/defaults-rows.ts b/src/ui/manage/defaults-rows.ts
new file mode 100644
index 000000000..13965d51c
--- /dev/null
+++ b/src/ui/manage/defaults-rows.ts
@@ -0,0 +1,43 @@
+import type { Host } from "@/types/ui-types";
+import type { HostDefaultsLevel } from "@/types/host-defaults";
+
+export interface DefaultsRow {
+  key: string;
+  level: HostDefaultsLevel;
+  folderName?: string;
+  label: string;
+}
+
+/** The levels of host defaults a user can open: instance, their own, folders. */
+export function defaultsRows(
+  hosts: Host[],
+  canEditInstance: boolean,
+  t: (key: string, options?: Record<string, unknown>) => string,
+): DefaultsRow[] {
+  const rows: DefaultsRow[] = [];
+  if (canEditInstance)
+    rows.push({
+      key: "admin",
+      level: "admin",
+      label: t("hostDefaults.titleAdmin"),
+    });
+  rows.push({ key: "user", level: "user", label: t("hostDefaults.titleUser") });
+  const folders = new Set<string>();
+  for (const host of hosts) {
+    if (!host.folder) continue;
+    let path = "";
+    for (const part of host.folder.split(" / ")) {
+      path = path ? `${path} / ${part}` : part;
+      folders.add(path);
+    }
+  }
+  for (const folder of [...folders].sort((a, b) => a.localeCompare(b))) {
+    rows.push({
+      key: `folder:${folder}`,
+      level: "folder",
+      folderName: folder,
+      label: folder,
+    });
+  }
+  return rows;
+}
diff --git a/src/ui/manage/host-validation.ts b/src/ui/manage/host-validation.ts
new file mode 100644
index 000000000..9b8b0b169
--- /dev/null
+++ b/src/ui/manage/host-validation.ts
@@ -0,0 +1,21 @@
+import type { HostEditorForm, HostProtocols } from "@/sidebar/HostEditorData";
+
+/** Field keys mapped to an i18n key saying what is wrong. */
+export type HostFormErrors = Partial<Record<"ip" | "sshPort", string>>;
+
+function validPort(port: unknown): boolean {
+  const n = Number(port);
+  return Number.isInteger(n) && n >= 1 && n <= 65535;
+}
+
+/** What has to be fixed before a host can be saved. */
+export function validateHostForm(
+  form: Pick<HostEditorForm, "ip" | "sshPort">,
+  protocols: Pick<HostProtocols, "enableSsh">,
+): HostFormErrors {
+  const errors: HostFormErrors = {};
+  if (!form.ip.trim()) errors.ip = "manage.errorAddressRequired";
+  if (protocols.enableSsh && !validPort(form.sshPort))
+    errors.sshPort = "manage.errorPortRange";
+  return errors;
+}
diff --git a/src/ui/manage/manage-requests.ts b/src/ui/manage/manage-requests.ts
new file mode 100644
index 000000000..ce3d71b60
--- /dev/null
+++ b/src/ui/manage/manage-requests.ts
@@ -0,0 +1,73 @@
+import type { HostDraft } from "@termix-ssh/plugin-sdk/frontend";
+import type { HostDefaultsLevel } from "@/types/host-defaults";
+
+export type ManageMode = "hosts" | "credentials" | "defaults";
+
+/** What to open in the Manage tab. */
+export type ManageRequest =
+  | { kind: "host"; hostId: string | null; draft?: HostDraft }
+  | { kind: "credential"; credentialId: string | null }
+  | { kind: "defaults"; level: HostDefaultsLevel; folderName?: string }
+  | { kind: "browse"; mode: ManageMode };
+
+export const MANAGE_REQUEST_EVENT = "manage:request";
+
+let pending: ManageRequest | null = null;
+
+/**
+ * Parks a request for the Manage tab and pokes it. The shell opens the tab on
+ * the same event, and the tab claims the parked request once it mounts.
+ */
+export function requestManage(request: ManageRequest): void {
+  pending = request;
+  window.dispatchEvent(new Event(MANAGE_REQUEST_EVENT));
+}
+
+/** Takes the parked request, leaving none behind. */
+export function takePendingManageRequest(): ManageRequest | null {
+  const request = pending;
+  pending = null;
+  return request;
+}
+
+/**
+ * The window events older callers fire (the dashboard, folder menus, the
+ * palette), turned into a request. Null for anything else.
+ */
+export function requestFromLegacyEvent(
+  name: string,
+  detail?: unknown,
+): ManageRequest | null {
+  switch (name) {
+    case "host-manager:add-host":
+      return {
+        kind: "host",
+        hostId: null,
+        draft: (detail as HostDraft | undefined) ?? undefined,
+      };
+    case "host-manager:edit-host":
+      return detail ? { kind: "host", hostId: String(detail) } : null;
+    case "host-manager:add-credential":
+      return { kind: "credential", credentialId: null };
+    case "host-manager:show-credentials":
+      return { kind: "browse", mode: "credentials" };
+    case "host-manager:edit-defaults":
+    case "termix:open-host-defaults": {
+      const target = detail as
+        { level?: HostDefaultsLevel; folderName?: string } | undefined;
+      if (!target?.level) return { kind: "browse", mode: "defaults" };
+      return {
+        kind: "defaults",
+        level: target.level,
+        folderName: target.folderName,
+      };
+    }
+    default:
+      return null;
+  }
+}
+
+/** Test seam. */
+export function resetManageRequests(): void {
+  pending = null;
+}
diff --git a/src/ui/manage/manage-tree.ts b/src/ui/manage/manage-tree.ts
new file mode 100644
index 000000000..9862c4da9
--- /dev/null
+++ b/src/ui/manage/manage-tree.ts
@@ -0,0 +1,256 @@
+import type { Credential, Host } from "@/types/ui-types";
+
+/**
+ * The Manage list as a tree: folders from the " / " path, sub-hosts under
+ * their parent host.
+ */
+
+export type ManageItem = {
+  id: string;
+  name: string;
+  /** IP for a host, username for a credential. */
+  note: string;
+  /** Extra search text, e.g. tags. */
+  search: string;
+  online?: boolean;
+  children: ManageItem[];
+};
+
+export type ManageFolder = {
+  /** Full " / " path, unique across the tree. */
+  path: string;
+  /** Last segment, what the row shows. */
+  name: string;
+  folders: ManageFolder[];
+  items: ManageItem[];
+};
+
+export type ManageRow =
+  | {
+      kind: "folder";
+      depth: number;
+      folder: ManageFolder;
+      count: number;
+      online: number;
+    }
+  | { kind: "item"; depth: number; item: ManageItem; folderPath: string };
+
+function emptyFolder(path: string, name: string): ManageFolder {
+  return { path, name, folders: [], items: [] };
+}
+
+/** Walks to the folder at `path`, creating each missing segment on the way. */
+function folderAt(
+  root: ManageFolder,
+  index: Map<string, ManageFolder>,
+  path: string,
+) {
+  if (!path) return root;
+  const existing = index.get(path);
+  if (existing) return existing;
+
+  let current = root;
+  let accumulated = "";
+  for (const part of path.split(" / ")) {
+    const trimmed = part.trim();
+    if (!trimmed) continue;
+    accumulated = accumulated ? `${accumulated} / ${trimmed}` : trimmed;
+    let next = index.get(accumulated);
+    if (!next) {
+      next = emptyFolder(accumulated, trimmed);
+      index.set(accumulated, next);
+      current.folders.push(next);
+    }
+    current = next;
+  }
+  return current;
+}
+
+export function buildHostManageTree(
+  hosts: Host[],
+  isOnline: (host: Host) => boolean = (host) => host.online,
+): ManageFolder {
+  const root = emptyFolder("", "");
+  const index = new Map<string, ManageFolder>();
+
+  const toItem = (host: Host): ManageItem => ({
+    id: host.id,
+    name: host.name || host.ip,
+    note: host.ip,
+    search: `${host.username} ${(host.tags ?? []).join(" ")}`,
+    online: isOnline(host),
+    children: [],
+  });
+
+  const items = new Map(hosts.map((h) => [h.id, toItem(h)]));
+
+  // A parent that is gone or would close a loop drops the host back to its
+  // folder, the same as buildHostTree.
+  const byId = new Map(hosts.map((h) => [h.id, h]));
+  const isDescendant = (candidate: string, ancestor: string) => {
+    const seen = new Set<string>();
+    let current: string | null | undefined = candidate;
+    while (current) {
+      if (current === ancestor) return true;
+      if (seen.has(current)) return false;
+      seen.add(current);
+      current = byId.get(current)?.parentHostId;
+    }
+    return false;
+  };
+
+  const nested = new Set<string>();
+  for (const host of hosts) {
+    if (!host.parentHostId) continue;
+    const parent = items.get(host.parentHostId);
+    if (!parent) continue;
+    if (isDescendant(host.parentHostId, host.id)) continue;
+    parent.children.push(items.get(host.id)!);
+    nested.add(host.id);
+  }
+
+  for (const host of hosts) {
+    if (nested.has(host.id)) continue;
+    folderAt(root, index, host.folder ?? "").items.push(items.get(host.id)!);
+  }
+  return sortFolder(root);
+}
+
+export function buildCredentialManageTree(
+  credentials: Credential[],
+): ManageFolder {
+  const root = emptyFolder("", "");
+  const index = new Map<string, ManageFolder>();
+
+  for (const cred of credentials) {
+    folderAt(root, index, cred.folder ?? "").items.push({
+      id: cred.id,
+      name: cred.name,
+      note: cred.username,
+      search: `${cred.type} ${(cred.tags ?? []).join(" ")}`,
+      children: [],
+    });
+  }
+  return sortFolder(root);
+}
+
+function sortFolder(folder: ManageFolder): ManageFolder {
+  folder.folders.sort((a, b) => a.name.localeCompare(b.name));
+  folder.items.sort((a, b) => a.name.localeCompare(b.name));
+  folder.folders.forEach(sortFolder);
+  return folder;
+}
+
+function itemMatches(item: ManageItem, needle: string): boolean {
+  if (`${item.name} ${item.note} ${item.search}`.toLowerCase().includes(needle))
+    return true;
+  return item.children.some((child) => itemMatches(child, needle));
+}
+
+/** Total items in a folder and its subfolders, plus how many are online. */
+export function folderCounts(folder: ManageFolder): {
+  count: number;
+  online: number;
+} {
+  let count = 0;
+  let online = 0;
+  const walk = (item: ManageItem) => {
+    count++;
+    if (item.online) online++;
+    item.children.forEach(walk);
+  };
+  folder.items.forEach(walk);
+  for (const child of folder.folders) {
+    const sub = folderCounts(child);
+    count += sub.count;
+    online += sub.online;
+  }
+  return { count, online };
+}
+
+/** The rows actually drawn. While searching, folders holding a match open on their own. */
+export function flattenTree(
+  folder: ManageFolder,
+  open: Set<string>,
+  needle: string,
+  depth = 0,
+  rows: ManageRow[] = [],
+): ManageRow[] {
+  for (const child of folder.folders) {
+    const counts = folderCounts(child);
+    const matching = filterFolder(child, needle);
+    if (!matching) continue;
+    rows.push({
+      kind: "folder",
+      depth,
+      folder: child,
+      count: counts.count,
+      online: counts.online,
+    });
+    if (needle || open.has(child.path))
+      flattenTree(matching, open, needle, depth + 1, rows);
+  }
+
+  for (const item of folder.items) {
+    if (needle && !itemMatches(item, needle)) continue;
+    pushItem(item, folder.path, depth, open, needle, rows);
+  }
+  return rows;
+}
+
+function pushItem(
+  item: ManageItem,
+  folderPath: string,
+  depth: number,
+  open: Set<string>,
+  needle: string,
+  rows: ManageRow[],
+) {
+  rows.push({ kind: "item", depth, item, folderPath });
+  if (item.children.length === 0) return;
+  if (!needle && !open.has(item.id)) return;
+  for (const child of item.children) {
+    if (needle && !itemMatches(child, needle)) continue;
+    pushItem(child, folderPath, depth + 1, open, needle, rows);
+  }
+}
+
+/** Drops folders with nothing matching, so search never leaves empty headers. */
+function filterFolder(
+  folder: ManageFolder,
+  needle: string,
+): ManageFolder | null {
+  if (!needle) return folder;
+  const folders = folder.folders
+    .map((child) => filterFolder(child, needle))
+    .filter((child): child is ManageFolder => child !== null);
+  const items = folder.items.filter((item) => itemMatches(item, needle));
+  if (folders.length === 0 && items.length === 0) return null;
+  return { ...folder, folders, items };
+}
+
+/** Every folder path in the tree, for expand-all and the default open set. */
+export function allFolderPaths(
+  folder: ManageFolder,
+  out: string[] = [],
+): string[] {
+  for (const child of folder.folders) {
+    out.push(child.path);
+    allFolderPaths(child, out);
+  }
+  return out;
+}
+
+/** Every parent host id, so sub-hosts can start expanded too. */
+export function allParentIds(
+  folder: ManageFolder,
+  out: string[] = [],
+): string[] {
+  const walk = (item: ManageItem) => {
+    if (item.children.length > 0) out.push(item.id);
+    item.children.forEach(walk);
+  };
+  folder.items.forEach(walk);
+  folder.folders.forEach((child) => allParentIds(child, out));
+  return out;
+}
diff --git a/src/ui/onboarding/OnboardingDialog.tsx b/src/ui/onboarding/OnboardingDialog.tsx
deleted file mode 100644
index 25e47409a..000000000
--- a/src/ui/onboarding/OnboardingDialog.tsx
+++ /dev/null
@@ -1,158 +0,0 @@
-import { useEffect, useMemo, useState } from "react";
-import { useTranslation } from "react-i18next";
-import { ArrowLeft, ArrowRight } from "lucide-react";
-import { Button } from "@/components/button";
-import {
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogHeader,
-  DialogTitle,
-} from "@/components/dialog";
-import { useUiPreferencesContext } from "@/contexts/UiPreferencesContext";
-import { useActionSlot } from "@/hooks/use-action-slot";
-import {
-  relevantSteps,
-  type OnboardingContext,
-  type OnboardingStep,
-} from "./onboarding-steps";
-
-/** Plugin steps go in before this one. */
-const PLUGIN_STEPS_BEFORE = "security";
-
-export function OnboardingDialog({
-  open,
-  context,
-  onClose,
-}: {
-  open: boolean;
-  context: OnboardingContext;
-  onClose: (skipped: boolean) => void;
-}) {
-  const { t } = useTranslation();
-  const ctx = useUiPreferencesContext();
-  const pluginSteps = useActionSlot("onboarding.steps");
-  const steps = useMemo(() => {
-    const core = relevantSteps(context);
-    const extra: OnboardingStep[] = pluginSteps
-      .filter((contribution) => contribution.component)
-      .map((contribution) => ({
-        id: contribution.actionId,
-        titleKey: contribution.titleKey,
-        Component:
-          contribution.component as unknown as OnboardingStep["Component"],
-      }));
-    const at = core.findIndex((step) => step.id === PLUGIN_STEPS_BEFORE);
-    return at < 0
-      ? [...core, ...extra]
-      : [...core.slice(0, at), ...extra, ...core.slice(at)];
-  }, [context, pluginSteps]);
-  const [index, setIndex] = useState(0);
-
-  // A reopened run always starts from the top.
-  useEffect(() => {
-    if (open) setIndex(0);
-  }, [open]);
-
-  if (steps.length === 0) return null;
-
-  const clamped = Math.min(index, steps.length - 1);
-  const step = steps[clamped];
-  const isLast = clamped === steps.length - 1;
-  const StepComponent = step.Component;
-
-  function finish(skipped: boolean) {
-    ctx?.completeOnboarding(skipped);
-    onClose(skipped);
-  }
-
-  return (
-    <Dialog
-      open={open}
-      onOpenChange={(next) => {
-        if (!next) finish(true);
-      }}
-    >
-      <DialogContent
-        className="sm:max-w-xl max-h-[85vh] overflow-y-auto"
-        onInteractOutside={(e) => e.preventDefault()}
-      >
-        <DialogHeader>
-          <DialogTitle className="text-base font-bold">
-            {t(step.titleKey)}
-          </DialogTitle>
-          <DialogDescription className="text-xs text-muted-foreground">
-            {t("onboarding.stepCounter", {
-              current: clamped + 1,
-              total: steps.length,
-            })}
-          </DialogDescription>
-        </DialogHeader>
-
-        <div className="h-0.5 w-full bg-muted-foreground/15">
-          <div
-            className="h-full bg-accent-brand transition-all duration-200"
-            style={{ width: `${((clamped + 1) / steps.length) * 100}%` }}
-          />
-        </div>
-
-        <div className="mt-1">
-          <StepComponent context={context} />
-        </div>
-
-        <div className="mt-3 flex items-center justify-between gap-3 border-t border-border pt-3">
-          <div className="flex items-center gap-1.5">
-            {steps.map((s, i) => (
-              <button
-                key={s.id}
-                type="button"
-                title={t(s.titleKey)}
-                aria-label={t(s.titleKey)}
-                aria-current={i === clamped}
-                onClick={() => setIndex(i)}
-                className={`h-1.5 w-1.5 rounded-full transition-colors ${
-                  i === clamped
-                    ? "bg-accent-brand"
-                    : "bg-muted-foreground/25 hover:bg-muted-foreground/50"
-                }`}
-              />
-            ))}
-          </div>
-
-          <div className="flex items-center gap-2">
-            {!isLast && (
-              <Button
-                variant="ghost"
-                size="sm"
-                className="h-7 text-[11px]"
-                onClick={() => finish(true)}
-              >
-                {t("onboarding.skip")}
-              </Button>
-            )}
-            {clamped > 0 && (
-              <Button
-                variant="outline"
-                size="sm"
-                className="h-7 text-[11px]"
-                onClick={() => setIndex(clamped - 1)}
-              >
-                <ArrowLeft size={12} />
-                {t("common.back")}
-              </Button>
-            )}
-            <Button
-              size="sm"
-              variant="outline"
-              className="h-7 text-[11px] border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-              onClick={() => (isLast ? finish(false) : setIndex(clamped + 1))}
-            >
-              {isLast ? t("onboarding.finish") : t("onboarding.next")}
-              {!isLast && <ArrowRight size={12} />}
-            </Button>
-          </div>
-        </div>
-      </DialogContent>
-    </Dialog>
-  );
-}
diff --git a/src/ui/onboarding/OnboardingHost.tsx b/src/ui/onboarding/OnboardingHost.tsx
new file mode 100644
index 000000000..28e4e57cd
--- /dev/null
+++ b/src/ui/onboarding/OnboardingHost.tsx
@@ -0,0 +1,126 @@
+import { lazy, Suspense, useEffect, useRef, useState } from "react";
+import { useUiPreferencesContext } from "@/contexts/UiPreferencesContext";
+import { usePermissions } from "@/hooks/use-permissions";
+import { isElectron } from "@/lib/electron";
+import { isEmbeddedAuthFrame } from "@/lib/embedded-frame";
+import { settledPromise } from "@/plugin-host/plugin-store";
+import { subscribeToActionRegistry } from "@/shell/action-registry";
+import { onboardingSteps, type OnboardingMode } from "./onboarding-registry";
+import {
+  baselineSeen,
+  computeFlow,
+  needsFullFlow,
+  ONBOARDING_ADMIN_PERMISSION,
+} from "./onboarding-flow";
+import { canEnrollSecondFactor, currentStepDefs } from "./use-onboarding-steps";
+
+const OnboardingStage = lazy(() =>
+  import("./OnboardingStage").then((m) => ({ default: m.OnboardingStage })),
+);
+
+/** Fired by "Run setup again" in settings. */
+export const OPEN_ONBOARDING_EVENT = "termix:open-onboarding";
+
+const RECHECK_DELAY_MS = 750;
+
+/**
+ * Onboarding once the app is up: the rerun from settings, and a partial run
+ * whenever steps appear that the user has not seen (a plugin installed here
+ * or elsewhere, a step whose version went up). Both draw full screen over
+ * the shell without unmounting it.
+ */
+export function OnboardingHost({
+  onOpenChange,
+}: {
+  onOpenChange?: (open: boolean) => void;
+}) {
+  const prefs = useUiPreferencesContext();
+  const { has, loaded } = usePermissions();
+  const [mode, setMode] = useState<OnboardingMode | null>(null);
+  const [settled, setSettled] = useState(false);
+  const modeRef = useRef(mode);
+  modeRef.current = mode;
+  const embedded = isEmbeddedAuthFrame();
+
+  useEffect(() => {
+    onOpenChange?.(mode !== null);
+  }, [mode, onOpenChange]);
+
+  useEffect(() => {
+    let cancelled = false;
+    void settledPromise().then(() => !cancelled && setSettled(true));
+    return () => {
+      cancelled = true;
+    };
+  }, []);
+
+  useEffect(() => {
+    if (embedded) return;
+    const open = () => {
+      void settledPromise().then(() => setMode("rerun"));
+    };
+    window.addEventListener(OPEN_ONBOARDING_EVENT, open);
+    return () => window.removeEventListener(OPEN_ONBOARDING_EVENT, open);
+  }, [embedded]);
+
+  const onboarding = prefs?.preferences.onboarding;
+  const ready = !embedded && settled && loaded && !!prefs?.loaded;
+
+  // Carried over from the old onboarding: plugin steps that already exist
+  // count as seen, without showing any of them.
+  useEffect(() => {
+    if (!ready || !onboarding?.baselinePending) return;
+    prefs?.markOnboardingSeen(baselineSeen(currentStepDefs(has)), {
+      baselineDone: true,
+    });
+  }, [ready, onboarding?.baselinePending, prefs, has]);
+
+  useEffect(() => {
+    if (!ready || !onboarding || onboarding.baselinePending) return;
+    if (needsFullFlow(onboarding)) return;
+
+    let timer: ReturnType<typeof setTimeout> | null = null;
+    const check = () => {
+      if (modeRef.current !== null) return;
+      if (document.visibilityState === "hidden") return;
+      const isAdmin = has(ONBOARDING_ADMIN_PERMISSION);
+      const pending = computeFlow(currentStepDefs(has), onboarding.seen, {
+        mode: "partial",
+        isAdmin,
+        isDesktop: isElectron(),
+        has,
+        pluginSetupPending: false,
+        pluginsManagedElsewhere: false,
+        canEnrollSecondFactor: canEnrollSecondFactor(),
+      });
+      if (pending.length > 0) setMode("partial");
+    };
+    const schedule = () => {
+      if (timer) clearTimeout(timer);
+      timer = setTimeout(check, RECHECK_DELAY_MS);
+    };
+    schedule();
+    const offSteps = onboardingSteps.subscribe(schedule);
+    const offSlots = subscribeToActionRegistry(schedule);
+    document.addEventListener("visibilitychange", schedule);
+    return () => {
+      if (timer) clearTimeout(timer);
+      offSteps();
+      offSlots();
+      document.removeEventListener("visibilitychange", schedule);
+    };
+  }, [ready, onboarding, has]);
+
+  if (!mode || embedded) return null;
+
+  return (
+    <Suspense fallback={null}>
+      <OnboardingStage
+        key={mode}
+        mode={mode}
+        shellReady
+        onDone={() => setMode(null)}
+      />
+    </Suspense>
+  );
+}
diff --git a/src/ui/onboarding/OnboardingStage.tsx b/src/ui/onboarding/OnboardingStage.tsx
new file mode 100644
index 000000000..470ebc856
--- /dev/null
+++ b/src/ui/onboarding/OnboardingStage.tsx
@@ -0,0 +1,358 @@
+import { useCallback, useEffect, useMemo, useRef, useState } from "react";
+import { useTranslation } from "react-i18next";
+import { ArrowLeft, ArrowRight, Loader2, LogOut } from "lucide-react";
+import { Button } from "@/components/button";
+import { SurfaceScope } from "@/components/surface/surface-scope";
+import { useUiPreferencesContext } from "@/contexts/UiPreferencesContext";
+import { usePermissions } from "@/hooks/use-permissions";
+import { isElectron } from "@/lib/electron";
+import {
+  getOnboardingPlugins,
+  type OnboardingPluginList,
+} from "@/api/plugins-api";
+import {
+  sortSteps,
+  type OnboardingCtx,
+  type OnboardingMode,
+  type OnboardingStepDef,
+} from "./onboarding-registry";
+import {
+  computeFlow,
+  ONBOARDING_ADMIN_PERMISSION,
+  seenFor,
+} from "./onboarding-flow";
+import { OnboardingStageContext } from "./onboarding-stage-context";
+import {
+  useCanEnrollSecondFactor,
+  useOnboardingStepDefs,
+} from "./use-onboarding-steps";
+
+type BeforeNext = () => boolean | Promise<boolean>;
+
+export interface OnboardingStageProps {
+  mode: OnboardingMode;
+  /** The picker's plugin list, when the boot gate already fetched it. */
+  initialPlugins?: OnboardingPluginList | null;
+  /** False on a first run, which shows before the app shell exists. */
+  shellReady: boolean;
+  onDone: () => void;
+  onLogout?: () => void;
+}
+
+/**
+ * Onboarding as a page of its own, laid out like the settings pages: one
+ * centred column with the step in a card and Back / Skip / Next under it.
+ * The same stage runs a new user's first run, a partial run of steps
+ * someone has not seen yet, and a rerun from settings.
+ */
+export function OnboardingStage({
+  mode,
+  initialPlugins = null,
+  shellReady,
+  onDone,
+  onLogout,
+}: OnboardingStageProps) {
+  const { t } = useTranslation();
+  const prefs = useUiPreferencesContext();
+  const { has, loaded: permissionsLoaded } = usePermissions();
+  const isAdmin = has(ONBOARDING_ADMIN_PERMISSION);
+  const isDesktop = isElectron();
+  const canEnroll = useCanEnrollSecondFactor();
+
+  const [plugins, setPlugins] = useState<OnboardingPluginList | null>(
+    initialPlugins,
+  );
+
+  // A rerun or a partial run opened inside the app has no list yet, and
+  // whether the picker applies depends on it.
+  useEffect(() => {
+    if (plugins || !isAdmin) return;
+    let cancelled = false;
+    getOnboardingPlugins()
+      .then((list) => !cancelled && setPlugins(list))
+      .catch(() => {});
+    return () => {
+      cancelled = true;
+    };
+  }, [plugins, isAdmin]);
+
+  const allSteps = useOnboardingStepDefs();
+
+  const ctx = useMemo<OnboardingCtx>(
+    () => ({
+      mode,
+      isAdmin,
+      isDesktop,
+      has,
+      pluginSetupPending: !!plugins?.pending,
+      pluginsManagedElsewhere: !!plugins?.managedByLinkedServer,
+      canEnrollSecondFactor: canEnroll,
+    }),
+    [mode, isAdmin, isDesktop, has, plugins, canEnroll],
+  );
+
+  // What was seen when the run started. Marking steps as seen happens at the
+  // end, but the run itself must not shift under the user if it changes.
+  const seenAtStart = useRef(prefs?.preferences.onboarding.seen ?? {});
+  // Someone carried over from an older version gets their plugins' steps
+  // marked seen by the shell, not shown, so only core steps run for them.
+  const coreOnly = useRef(
+    mode === "partial" && !!prefs?.preferences.onboarding.baselinePending,
+  );
+  const sticky = useRef(new Set<string>());
+
+  const flow = useMemo(() => {
+    const candidates = coreOnly.current
+      ? allSteps.filter((step) => !step.pluginId)
+      : allSteps;
+    const live = computeFlow(candidates, seenAtStart.current, ctx);
+    for (const step of live) sticky.current.add(step.id);
+    // A step that was in the run stays in it (the picker stops being
+    // pending once applied), unless its plugin went away.
+    const kept = allSteps.filter(
+      (step) =>
+        sticky.current.has(step.id) && !live.some((s) => s.id === step.id),
+    );
+    return sortSteps([...live, ...kept]);
+  }, [allSteps, ctx]);
+
+  const [currentId, setCurrentId] = useState<string | null>(null);
+  const [viewOpen, setViewOpen] = useState(false);
+  const lastPosition = useRef(0);
+  const [confirmed, setConfirmed] = useState<Set<string>>(() => new Set());
+  const [canContinue, setCanContinueMap] = useState<Record<string, boolean>>(
+    {},
+  );
+  const beforeNext = useRef<Record<string, BeforeNext | null>>({});
+  const [busy, setBusy] = useState(false);
+  const finishing = useRef(false);
+
+  // Track the current step by key: a step disappearing (its plugin was
+  // removed) moves on to whatever now sits in its place.
+  let index = flow.findIndex((step) => step.id === currentId);
+  if (index < 0) {
+    index = flow.findIndex((step) => step.position >= lastPosition.current);
+    if (index < 0) index = flow.length - 1;
+  }
+  const step: OnboardingStepDef | undefined = flow[index];
+
+  useEffect(() => {
+    if (!step) return;
+    lastPosition.current = step.position;
+    if (step.id !== currentId) setCurrentId(step.id);
+  }, [step, currentId]);
+
+  const finish = useCallback(
+    async (skipped: boolean) => {
+      if (finishing.current) return;
+      finishing.current = true;
+      prefs?.markOnboardingSeen(seenFor(flow), {
+        completed: true,
+        skipped,
+      });
+      await prefs?.flushNow().catch(() => {});
+      onDone();
+    },
+    [prefs, flow, onDone],
+  );
+
+  // Nothing to show (a partial run whose step vanished).
+  useEffect(() => {
+    if (permissionsLoaded && flow.length === 0) void finish(false);
+  }, [permissionsLoaded, flow.length, finish]);
+
+  const canSkip = !flow.some((s) => s.required && !confirmed.has(s.id));
+  const isLast = index === flow.length - 1;
+  const stepId = step?.id ?? "";
+  const stepCanContinue = canContinue[stepId] !== false;
+
+  const goNext = useCallback(async () => {
+    if (!step || busy) return;
+    const hook = beforeNext.current[step.id];
+    if (hook) {
+      setBusy(true);
+      let ok = false;
+      try {
+        ok = await hook();
+      } catch {
+        ok = false;
+      } finally {
+        setBusy(false);
+      }
+      if (!ok) return;
+    }
+    if (step.required) {
+      setConfirmed((prev) => new Set(prev).add(step.id));
+    }
+    if (isLast) {
+      void finish(false);
+      return;
+    }
+    setCurrentId(flow[index + 1].id);
+  }, [step, busy, isLast, finish, flow, index]);
+
+  const skip = useCallback(() => {
+    if (canSkip) void finish(true);
+  }, [canSkip, finish]);
+
+  useEffect(() => {
+    const onKey = (event: KeyboardEvent) => {
+      if (event.key !== "Escape" || mode === "full") return;
+      if (event.defaultPrevented) return;
+      skip();
+    };
+    window.addEventListener("keydown", onKey);
+    return () => window.removeEventListener("keydown", onKey);
+  }, [mode, skip]);
+
+  const setCanContinue = useCallback(
+    (ok: boolean) =>
+      setCanContinueMap((prev) =>
+        prev[stepId] === ok ? prev : { ...prev, [stepId]: ok },
+      ),
+    [stepId],
+  );
+  const setBeforeNext = useCallback(
+    (fn: BeforeNext | null) => {
+      beforeNext.current[stepId] = fn;
+    },
+    [stepId],
+  );
+
+  const stageValue = useMemo(() => ({ plugins, setPlugins }), [plugins]);
+
+  if (!permissionsLoaded || !step) {
+    return (
+      <div className="fixed inset-0 z-[60] flex items-center justify-center bg-background">
+        <Loader2 className="size-5 animate-spin text-muted-foreground" />
+      </div>
+    );
+  }
+
+  const StepComponent = step.Component;
+  const Icon = step.icon;
+
+  return (
+    <OnboardingStageContext.Provider value={stageValue}>
+      <div
+        className="fixed inset-0 z-[60] overflow-y-auto bg-background text-foreground"
+        role="dialog"
+        aria-modal="true"
+        aria-label={t("onboarding.stageLabel")}
+      >
+        <div className="mx-auto flex min-h-full w-full max-w-2xl flex-col gap-4 px-4 py-8 sm:py-14">
+          <div className="flex items-center justify-between gap-3">
+            <div className="flex flex-col gap-0.5">
+              <span className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
+                {mode === "partial"
+                  ? t("onboarding.partialHeading")
+                  : t("onboarding.setupHeading")}
+              </span>
+              <span className="text-[11px] text-muted-foreground">
+                {t("onboarding.stepCounter", {
+                  current: index + 1,
+                  total: flow.length,
+                })}
+              </span>
+            </div>
+            {onLogout && mode === "full" && (
+              <Button
+                variant="ghost"
+                size="sm"
+                className="h-7 text-[11px] text-muted-foreground"
+                onClick={onLogout}
+              >
+                <LogOut size={12} />
+                {t("onboarding.signOut")}
+              </Button>
+            )}
+          </div>
+
+          <div className="flex gap-1">
+            {flow.map((s, i) => (
+              <div
+                key={s.id}
+                className={`h-0.5 flex-1 ${
+                  i <= index ? "bg-accent-brand" : "bg-muted-foreground/20"
+                }`}
+              />
+            ))}
+          </div>
+
+          <SurfaceScope
+            kind="tab"
+            onEditingChange={(editing) => setViewOpen(!!editing)}
+            className={`relative flex flex-col border border-border bg-card ${
+              viewOpen ? "min-h-[70vh]" : ""
+            }`}
+          >
+            <div className="flex items-center gap-2 border-b border-border px-4 py-2.5">
+              {Icon && <Icon size={14} className="text-muted-foreground" />}
+              <span className="flex-1 text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
+                {t(step.titleKey)}
+              </span>
+            </div>
+            <div className="flex flex-col gap-3 px-3 py-4 md:px-4">
+              {step.descriptionKey && (
+                <p className="text-xs text-muted-foreground">
+                  {t(step.descriptionKey)}
+                </p>
+              )}
+              <StepComponent
+                key={step.id}
+                mode={mode}
+                isAdmin={isAdmin}
+                isDesktop={isDesktop}
+                shellReady={shellReady}
+                setCanContinue={setCanContinue}
+                setBeforeNext={setBeforeNext}
+              />
+            </div>
+          </SurfaceScope>
+
+          <div className="flex items-center justify-between gap-3">
+            <div>
+              {canSkip && !isLast && (
+                <Button
+                  variant="ghost"
+                  size="sm"
+                  className="h-8 text-xs"
+                  onClick={skip}
+                >
+                  {mode === "partial"
+                    ? t("onboarding.skipPartial")
+                    : t("onboarding.skip")}
+                </Button>
+              )}
+            </div>
+            <div className="flex items-center gap-2">
+              {index > 0 && (
+                <Button
+                  variant="outline"
+                  size="sm"
+                  className="h-8 text-xs"
+                  disabled={busy}
+                  onClick={() => setCurrentId(flow[index - 1].id)}
+                >
+                  <ArrowLeft size={13} />
+                  {t("common.back")}
+                </Button>
+              )}
+              <Button
+                size="sm"
+                variant="outline"
+                className="h-8 border-accent-brand/40 text-xs text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
+                disabled={busy || !stepCanContinue}
+                onClick={() => void goNext()}
+              >
+                {busy && <Loader2 size={13} className="animate-spin" />}
+                {isLast ? t("onboarding.finish") : t("onboarding.next")}
+                {!isLast && !busy && <ArrowRight size={13} />}
+              </Button>
+            </div>
+          </div>
+        </div>
+      </div>
+    </OnboardingStageContext.Provider>
+  );
+}
diff --git a/src/ui/onboarding/onboarding-flow.ts b/src/ui/onboarding/onboarding-flow.ts
new file mode 100644
index 000000000..6434e6a1a
--- /dev/null
+++ b/src/ui/onboarding/onboarding-flow.ts
@@ -0,0 +1,70 @@
+import type { UiOnboardingState } from "@/types/ui-preferences";
+import type { OnboardingCtx, OnboardingStepDef } from "./onboarding-registry";
+
+/** The permission that makes someone an admin as far as onboarding goes. */
+export const ONBOARDING_ADMIN_PERMISSION = "admin.plugins.manage";
+
+export function isStepRelevant(
+  step: OnboardingStepDef,
+  ctx: OnboardingCtx,
+): boolean {
+  if (step.audience === "admin" && !ctx.isAdmin) return false;
+  if (step.permission && !ctx.has(step.permission)) return false;
+  if (step.isRelevant) {
+    try {
+      if (!step.isRelevant(ctx)) return false;
+    } catch {
+      return false;
+    }
+  }
+  return true;
+}
+
+export function isStepPending(
+  step: OnboardingStepDef,
+  seen: Record<string, number>,
+  ctx: OnboardingCtx,
+): boolean {
+  if ((seen[step.id] ?? 0) < step.version) return true;
+  try {
+    return step.forcePending?.(ctx) === true;
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * The steps a run shows, in order. A full run or a rerun shows every step
+ * that applies to the user; a partial run only the ones they have not seen
+ * at their current version.
+ */
+export function computeFlow(
+  steps: OnboardingStepDef[],
+  seen: Record<string, number>,
+  ctx: OnboardingCtx,
+): OnboardingStepDef[] {
+  const relevant = steps.filter((step) => isStepRelevant(step, ctx));
+  if (ctx.mode !== "partial") return relevant;
+  return relevant.filter((step) => isStepPending(step, seen, ctx));
+}
+
+/** A user who has never finished or skipped a run gets the full one. */
+export function needsFullFlow(state: UiOnboardingState): boolean {
+  return Object.keys(state.seen).length === 0 && !state.completedAt;
+}
+
+/** What to record once a run ends, finished or skipped. */
+export function seenFor(steps: OnboardingStepDef[]): Record<string, number> {
+  return Object.fromEntries(steps.map((step) => [step.id, step.version]));
+}
+
+/**
+ * For a user carried over from the old onboarding: every plugin step that
+ * exists right now counts as seen, so the upgrade does not show them a pile
+ * of steps for plugins they have been using all along.
+ */
+export function baselineSeen(
+  steps: OnboardingStepDef[],
+): Record<string, number> {
+  return seenFor(steps.filter((step) => step.pluginId));
+}
diff --git a/src/ui/onboarding/onboarding-registry.ts b/src/ui/onboarding/onboarding-registry.ts
new file mode 100644
index 000000000..0317e2a3d
--- /dev/null
+++ b/src/ui/onboarding/onboarding-registry.ts
@@ -0,0 +1,102 @@
+import type { ComponentType } from "react";
+import type { LucideIcon } from "lucide-react";
+import type {
+  OnboardingMode,
+  OnboardingSection,
+  OnboardingStepProps,
+} from "@termix-ssh/plugin-sdk/frontend";
+import { createRegistry } from "@/lib/registry";
+import type { SlotContribution } from "@/shell/action-registry";
+import { pluginStepKey } from "@/types/onboarding";
+
+export type { OnboardingMode, OnboardingSection, OnboardingStepProps };
+
+export interface OnboardingCtx {
+  mode: OnboardingMode;
+  isAdmin: boolean;
+  isDesktop: boolean;
+  has: (permission: string) => boolean;
+  /** True on a fresh install until an admin confirms the plugin picker. */
+  pluginSetupPending: boolean;
+  /** A linked desktop runs what its server runs. */
+  pluginsManagedElsewhere: boolean;
+  /** Whether a sign in plugin offers a passkey or authenticator to set up. */
+  canEnrollSecondFactor?: boolean;
+}
+
+export interface OnboardingStepDef {
+  /** The key stored in the seen map: a core id, or `<pluginId>:<id>`. */
+  id: string;
+  pluginId?: string;
+  version: number;
+  titleKey: string;
+  descriptionKey?: string;
+  icon?: LucideIcon | ComponentType<{ size?: number; className?: string }>;
+  Component: ComponentType<OnboardingStepProps>;
+  audience: "all" | "admin";
+  permission?: string;
+  /** Position in the flow; plugin steps get theirs from their section. */
+  position: number;
+  isRelevant?: (ctx: OnboardingCtx) => boolean;
+  /** Shown in a partial run even when already seen. */
+  forcePending?: (ctx: OnboardingCtx) => boolean;
+  /** Skip stays hidden until this step has been confirmed. */
+  required?: boolean;
+}
+
+/** Where each section of plugin steps sits among the core steps. */
+export const SECTION_POSITION: Record<OnboardingSection, number> = {
+  setup: 50,
+  explore: 80,
+  security: 95,
+};
+
+export const onboardingSteps = createRegistry<OnboardingStepDef>();
+
+/** Plugin steps sort inside their section by order, then key. */
+export function sectionPosition(
+  section: OnboardingSection | undefined,
+  order = 0,
+): number {
+  const base = SECTION_POSITION[section ?? "explore"];
+  return base + Math.max(-1, Math.min(1, order / 1000)) * 0.4;
+}
+
+export function sortSteps(steps: OnboardingStepDef[]): OnboardingStepDef[] {
+  return [...steps].sort(
+    (a, b) => a.position - b.position || a.id.localeCompare(b.id),
+  );
+}
+
+/** Steps still on the deprecated onboarding.steps slot, read as version 1. */
+export function legacyStepDefs(
+  contributions: SlotContribution[],
+): OnboardingStepDef[] {
+  return contributions
+    .filter((c) => c.component && c.pluginId)
+    .map((c) => ({
+      id: pluginStepKey(c.pluginId!, c.actionId),
+      pluginId: c.pluginId,
+      version: 1,
+      titleKey: c.titleKey,
+      descriptionKey: c.descriptionKey,
+      icon: c.icon as OnboardingStepDef["icon"],
+      Component: c.component as unknown as ComponentType<OnboardingStepProps>,
+      audience: "all" as const,
+      position: sectionPosition("explore", c.order),
+    }));
+}
+
+/** Core, registered and legacy steps in flow order, registered winning ties. */
+export function mergeStepDefs(
+  core: OnboardingStepDef[],
+  registered: OnboardingStepDef[],
+  legacy: OnboardingStepDef[],
+): OnboardingStepDef[] {
+  const keys = new Set([...core, ...registered].map((step) => step.id));
+  return sortSteps([
+    ...core,
+    ...registered,
+    ...legacy.filter((step) => !keys.has(step.id)),
+  ]);
+}
diff --git a/src/ui/onboarding/onboarding-stage-context.ts b/src/ui/onboarding/onboarding-stage-context.ts
new file mode 100644
index 000000000..d040d43ce
--- /dev/null
+++ b/src/ui/onboarding/onboarding-stage-context.ts
@@ -0,0 +1,15 @@
+import { createContext, useContext } from "react";
+import type { OnboardingPluginList } from "@/api/plugins-api";
+
+export interface OnboardingStageValue {
+  /** Fetched by the boot gate for admins; null means fetch on demand. */
+  plugins: OnboardingPluginList | null;
+  setPlugins: (list: OnboardingPluginList) => void;
+}
+
+export const OnboardingStageContext =
+  createContext<OnboardingStageValue | null>(null);
+
+export function useOnboardingStage(): OnboardingStageValue | null {
+  return useContext(OnboardingStageContext);
+}
diff --git a/src/ui/onboarding/onboarding-steps.ts b/src/ui/onboarding/onboarding-steps.ts
index 1b87476ed..aabde0c20 100644
--- a/src/ui/onboarding/onboarding-steps.ts
+++ b/src/ui/onboarding/onboarding-steps.ts
@@ -1,72 +1,71 @@
-import type { ComponentType } from "react";
-import { WelcomeStep } from "./steps/WelcomeStep";
+import { LayoutTemplate, Monitor, Palette, Puzzle, Shield } from "lucide-react";
+import { CORE_ONBOARDING_STEPS } from "@/types/onboarding";
+import { PluginsStep } from "./steps/PluginsStep";
 import { PresetStep } from "./steps/PresetStep";
 import { AppearanceStep } from "./steps/AppearanceStep";
-import { FeaturesStep } from "./steps/FeaturesStep";
-import { WorkflowStep } from "./steps/WorkflowStep";
 import { SecurityStep } from "./steps/SecurityStep";
-import { DoneStep } from "./steps/DoneStep";
 import { DesktopSyncStep } from "./steps/DesktopSyncStep";
-import { isElectron } from "@/lib/electron";
-
-// eslint-disable-next-line @typescript-eslint/no-empty-object-type
-export interface OnboardingContext {}
-
-export interface OnboardingStepProps {
-  context: OnboardingContext;
-}
-
-export interface OnboardingStep {
-  id: string;
-  titleKey: string;
-  Component: ComponentType<OnboardingStepProps>;
-  /** Steps that do not apply to this account are skipped entirely. */
-  isRelevant?: (context: OnboardingContext) => boolean;
-}
+import type { OnboardingStepDef } from "./onboarding-registry";
 
 /**
- * Onboarding as data rather than hardcoded JSX, so steps can be added,
- * reordered or made conditional without touching the dialog shell. Plugins
- * add steps through the "onboarding.steps" slot; they land before security.
+ * Core onboarding as data: only choices, no tour. Plugin steps slot in
+ * between these by section (see SECTION_POSITION). To show a changed step
+ * again to people who saw it, bump its version in CORE_ONBOARDING_STEPS;
+ * only that step reruns.
  */
-export const ONBOARDING_STEPS: OnboardingStep[] = [
+export const CORE_STEPS: OnboardingStepDef[] = [
   {
-    id: "welcome",
-    titleKey: "onboarding.welcomeTitle",
-    Component: WelcomeStep,
+    id: "plugins",
+    version: CORE_ONBOARDING_STEPS.plugins,
+    titleKey: "onboarding.pluginsTitle",
+    icon: Puzzle,
+    Component: PluginsStep,
+    audience: "admin",
+    position: 10,
+    required: true,
+    // Once applied there is nothing to redo here; the Plugins tab is where
+    // plugins change after that, so a rerun leaves it out.
+    isRelevant: (ctx) => !ctx.pluginsManagedElsewhere && ctx.pluginSetupPending,
+    forcePending: (ctx) => ctx.pluginSetupPending,
   },
-  { id: "preset", titleKey: "onboarding.presetTitle", Component: PresetStep },
   {
     id: "desktop-sync",
+    version: CORE_ONBOARDING_STEPS["desktop-sync"],
     titleKey: "onboarding.desktopTitle",
+    icon: Monitor,
     Component: DesktopSyncStep,
-    isRelevant: () => isElectron(),
+    audience: "all",
+    position: 20,
+    isRelevant: (ctx) => ctx.isDesktop,
+  },
+  {
+    id: "preset",
+    version: CORE_ONBOARDING_STEPS.preset,
+    titleKey: "onboarding.presetTitle",
+    icon: LayoutTemplate,
+    Component: PresetStep,
+    audience: "all",
+    position: 30,
   },
   {
     id: "appearance",
+    version: CORE_ONBOARDING_STEPS.appearance,
     titleKey: "onboarding.appearanceTitle",
+    icon: Palette,
     Component: AppearanceStep,
-  },
-  {
-    id: "features",
-    titleKey: "onboarding.featuresTitle",
-    Component: FeaturesStep,
-  },
-  {
-    id: "workflow",
-    titleKey: "onboarding.workflowTitle",
-    Component: WorkflowStep,
+    audience: "all",
+    position: 40,
   },
   {
     id: "security",
+    version: CORE_ONBOARDING_STEPS.security,
     titleKey: "onboarding.securityTitle",
+    icon: Shield,
     Component: SecurityStep,
+    audience: "all",
+    position: 90,
+    // The desktop signs its local account in by itself, so a second factor
+    // set up there would never be asked for.
+    isRelevant: (ctx) => !ctx.isDesktop && ctx.canEnrollSecondFactor === true,
   },
-  { id: "done", titleKey: "onboarding.doneTitle", Component: DoneStep },
 ];
-
-export function relevantSteps(context: OnboardingContext): OnboardingStep[] {
-  return ONBOARDING_STEPS.filter(
-    (step) => !step.isRelevant || step.isRelevant(context),
-  );
-}
diff --git a/src/ui/onboarding/plugin-choices.ts b/src/ui/onboarding/plugin-choices.ts
new file mode 100644
index 000000000..8d576e44c
--- /dev/null
+++ b/src/ui/onboarding/plugin-choices.ts
@@ -0,0 +1,43 @@
+import type {
+  OnboardingPluginInfo,
+  OnboardingPluginList,
+  PluginChoice,
+} from "@/api/plugins-api";
+
+export function currentChoice(plugin: OnboardingPluginInfo): PluginChoice {
+  return plugin.state === "enabled" ? "enabled" : "disabled";
+}
+
+/**
+ * What the picker starts on. On a fresh install recommended plugins are on
+ * and the rest are set to be removed; consent ones start on. Later runs
+ * start from how things are now.
+ */
+export function defaultChoices(
+  list: OnboardingPluginList,
+): Record<string, PluginChoice> {
+  return Object.fromEntries(
+    list.plugins.map((plugin) => {
+      if (
+        !list.pending ||
+        list.reason !== "fresh" ||
+        plugin.source !== "bundled"
+      ) {
+        return [plugin.id, currentChoice(plugin)];
+      }
+      if (plugin.consent) return [plugin.id, "enabled"];
+      return [plugin.id, plugin.recommended ? "enabled" : "remove"];
+    }),
+  );
+}
+
+export function recommendedChoices(
+  list: OnboardingPluginList,
+): Record<string, PluginChoice> {
+  return Object.fromEntries(
+    list.plugins.map((plugin) => [
+      plugin.id,
+      plugin.recommended || plugin.consent ? "enabled" : "remove",
+    ]),
+  );
+}
diff --git a/src/ui/onboarding/startup.ts b/src/ui/onboarding/startup.ts
new file mode 100644
index 000000000..219603dfd
--- /dev/null
+++ b/src/ui/onboarding/startup.ts
@@ -0,0 +1,75 @@
+import { getUiPreferences } from "@/api/ui-preferences-api";
+import {
+  getOnboardingPlugins,
+  type OnboardingPluginList,
+} from "@/api/plugins-api";
+import { loadPermissionChecker } from "@/hooks/use-permissions";
+import { isElectron } from "@/lib/electron";
+import { isEmbeddedAuthFrame } from "@/lib/embedded-frame";
+import type { UiPreferences } from "@/types/ui-preferences";
+import {
+  computeFlow,
+  needsFullFlow,
+  ONBOARDING_ADMIN_PERMISSION,
+} from "./onboarding-flow";
+import type { OnboardingCtx, OnboardingMode } from "./onboarding-registry";
+import { canEnrollSecondFactor, currentStepDefs } from "./use-onboarding-steps";
+
+export interface StartupOnboarding {
+  preferences: UiPreferences | null;
+  /** Null when there is nothing to show. */
+  mode: Exclude<OnboardingMode, "rerun"> | null;
+  plugins: OnboardingPluginList | null;
+}
+
+/**
+ * Decides, after sign in and once plugins have loaded, whether the app opens
+ * on onboarding: the full run for a new user, or just the steps someone has
+ * not seen yet. Never inside the mobile app or a desktop's link window,
+ * which only borrow this page to sign in.
+ */
+export async function resolveStartupOnboarding(): Promise<StartupOnboarding> {
+  const none: StartupOnboarding = {
+    preferences: null,
+    mode: null,
+    plugins: null,
+  };
+  if (isEmbeddedAuthFrame()) return none;
+  if (new URLSearchParams(window.location.search).has("view")) return none;
+
+  let preferences: UiPreferences;
+  try {
+    preferences = await getUiPreferences();
+  } catch {
+    return none;
+  }
+
+  const has = await loadPermissionChecker();
+  const isAdmin = has(ONBOARDING_ADMIN_PERMISSION);
+  const plugins = isAdmin
+    ? await getOnboardingPlugins().catch(() => null)
+    : null;
+
+  const result: StartupOnboarding = { preferences, mode: null, plugins };
+  const { onboarding } = preferences;
+
+  if (needsFullFlow(onboarding)) return { ...result, mode: "full" };
+
+  const ctx: OnboardingCtx = {
+    mode: "partial",
+    isAdmin,
+    isDesktop: isElectron(),
+    has,
+    pluginSetupPending: !!plugins?.pending,
+    pluginsManagedElsewhere: !!plugins?.managedByLinkedServer,
+    canEnrollSecondFactor: canEnrollSecondFactor(),
+  };
+  const steps = currentStepDefs(has);
+  // Someone carried over from the old onboarding has their plugin steps
+  // marked seen by the shell first, so only core steps count for them here.
+  const candidates = onboarding.baselinePending
+    ? steps.filter((step) => !step.pluginId)
+    : steps;
+  const pending = computeFlow(candidates, onboarding.seen, ctx);
+  return { ...result, mode: pending.length > 0 ? "partial" : null };
+}
diff --git a/src/ui/onboarding/steps/AppearanceStep.tsx b/src/ui/onboarding/steps/AppearanceStep.tsx
index 0350e78f8..b539700cc 100644
--- a/src/ui/onboarding/steps/AppearanceStep.tsx
+++ b/src/ui/onboarding/steps/AppearanceStep.tsx
@@ -1,101 +1,82 @@
-import { useState } from "react";
+import type { ReactNode } from "react";
 import { useTranslation } from "react-i18next";
-import { Check } from "lucide-react";
-import { useTheme } from "@/components/theme-provider";
-import { LanguageSwitcher } from "@/user/LanguageSwitcher";
-import { ACCENT_PRESET_COLORS, applyAccentColor } from "@/lib/theme";
-import type { ThemeId } from "@/types/ui-types";
+import {
+  AccentPicker,
+  FontSizePicker,
+  LanguageSelect,
+  ThemeGrid,
+  UiFontSelect,
+  useAppearanceSettings,
+} from "@/settings/appearance/appearance-controls";
 
-const THEME_CHOICES: { id: ThemeId; swatch: string; labelKey: string }[] = [
-  {
-    id: "system",
-    swatch: "linear-gradient(135deg,#ffffff 50%,#1a1c22 50%)",
-    labelKey: "newUi.sidebar.userProfile.themeSystem",
-  },
-  {
-    id: "light",
-    swatch: "#ffffff",
-    labelKey: "newUi.sidebar.userProfile.themeLight",
-  },
-  {
-    id: "dark",
-    swatch: "#1a1c22",
-    labelKey: "newUi.sidebar.userProfile.themeDark",
-  },
-];
+function Field({
+  label,
+  hint,
+  children,
+}: {
+  label: string;
+  hint?: string;
+  children: ReactNode;
+}) {
+  return (
+    <div className="flex flex-col gap-1.5">
+      <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
+        {label}
+      </span>
+      {children}
+      {hint && (
+        <span className="text-[10px] text-muted-foreground">{hint}</span>
+      )}
+    </div>
+  );
+}
 
+/** Every change applies right away, so the page itself is the preview. */
 export function AppearanceStep() {
   const { t } = useTranslation();
-  const { theme, setTheme } = useTheme();
-  const [accent, setAccent] = useState(
-    () =>
-      localStorage.getItem("termix-accent") ?? ACCENT_PRESET_COLORS[0].value,
-  );
+  const appearance = useAppearanceSettings();
 
   return (
-    <div className="flex flex-col gap-4">
+    <div className="flex flex-col gap-5">
       <p className="text-xs text-muted-foreground">
         {t("onboarding.appearanceIntro")}
       </p>
 
-      <div className="flex flex-col gap-1.5">
-        <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-          {t("newUi.sidebar.userProfile.themeLabel")}
-        </span>
-        <div className="grid grid-cols-3 gap-2">
-          {THEME_CHOICES.map((choice) => (
-            <button
-              key={choice.id}
-              type="button"
-              onClick={() => setTheme(choice.id)}
-              className={`flex items-center gap-2 border p-2 text-xs transition-colors ${
-                theme === choice.id
-                  ? "border-accent-brand bg-accent-brand/10"
-                  : "border-border bg-card hover:bg-muted/40"
-              }`}
-            >
-              <span
-                className="size-4 shrink-0 border border-border"
-                style={{ background: choice.swatch }}
-              />
-              {t(choice.labelKey)}
-            </button>
-          ))}
-        </div>
+      <Field label={t("newUi.sidebar.userProfile.themeLabel")}>
+        <ThemeGrid value={appearance.theme} onChange={appearance.setTheme} />
+      </Field>
+
+      <Field label={t("newUi.sidebar.userProfile.accentColorLabel")}>
+        <AccentPicker
+          value={appearance.accent}
+          onChange={appearance.setAccent}
+        />
+      </Field>
+
+      <div className="grid grid-cols-1 gap-5 sm:grid-cols-2">
+        <Field
+          label={t("newUi.sidebar.userProfile.interfaceFontLabel")}
+          hint={t("newUi.sidebar.userProfile.interfaceFontDescription")}
+        >
+          <UiFontSelect
+            value={appearance.uiFont}
+            onChange={appearance.setUiFont}
+          />
+        </Field>
+        <Field label={t("newUi.sidebar.userProfile.fontSizeLabel")}>
+          <FontSizePicker
+            value={appearance.fontSize}
+            onChange={appearance.setFontSize}
+          />
+        </Field>
       </div>
 
-      <div className="flex flex-col gap-1.5">
-        <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-          {t("newUi.sidebar.userProfile.accentColorLabel")}
-        </span>
-        <div className="grid grid-cols-6 gap-1.5">
-          {ACCENT_PRESET_COLORS.map((color) => (
-            <button
-              key={color.value}
-              type="button"
-              title={color.label}
-              onClick={() => {
-                setAccent(color.value);
-                localStorage.setItem("termix-accent", color.value);
-                applyAccentColor(color.value);
-              }}
-              className="flex h-7 items-center justify-center border border-border"
-              style={{ background: color.value }}
-            >
-              {accent === color.value && (
-                <Check size={12} className="text-white drop-shadow" />
-              )}
-            </button>
-          ))}
-        </div>
-      </div>
-
-      <div className="flex flex-col gap-1.5">
-        <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-          {t("newUi.sidebar.userProfile.languageLabel")}
-        </span>
-        <LanguageSwitcher />
-      </div>
+      <Field label={t("newUi.sidebar.userProfile.languageLabel")}>
+        <LanguageSelect
+          value={appearance.language}
+          onChange={appearance.setLanguage}
+        />
+      </Field>
     </div>
   );
 }
diff --git a/src/ui/onboarding/steps/DoneStep.tsx b/src/ui/onboarding/steps/DoneStep.tsx
deleted file mode 100644
index 51288146d..000000000
--- a/src/ui/onboarding/steps/DoneStep.tsx
+++ /dev/null
@@ -1,72 +0,0 @@
-import { useTranslation } from "react-i18next";
-import {
-  BookOpen,
-  CheckCircle2,
-  Monitor,
-  RotateCcw,
-  Settings,
-  Smartphone,
-  Terminal,
-} from "lucide-react";
-
-const NEXT_STEPS = [
-  { icon: Settings, key: "settings" },
-  { icon: RotateCcw, key: "rerun" },
-  { icon: Monitor, key: "desktop", href: "https://docs.termix.site/install" },
-  { icon: Smartphone, key: "mobile", href: "https://docs.termix.site/install" },
-  { icon: BookOpen, key: "docs", href: "https://docs.termix.site" },
-  { icon: Terminal, key: "cli", href: "https://docs.termix.site/cli" },
-] as const;
-
-export function DoneStep() {
-  const { t } = useTranslation();
-
-  return (
-    <div className="flex flex-col gap-3">
-      <div className="flex flex-col items-center gap-2 py-2 text-center">
-        <CheckCircle2 size={26} className="text-accent-brand" />
-        <div className="flex flex-col gap-1">
-          <span className="text-sm font-semibold">
-            {t("onboarding.doneHeading")}
-          </span>
-          <span className="max-w-sm text-[11px] leading-snug text-muted-foreground">
-            {t("onboarding.doneDesc")}
-          </span>
-        </div>
-      </div>
-
-      <div className="flex flex-col gap-1.5">
-        {NEXT_STEPS.map((step) => {
-          const { icon: Icon, key } = step;
-          const href = "href" in step ? step.href : null;
-          return (
-            <div
-              key={key}
-              className="flex items-start gap-2.5 border border-border bg-card p-2.5"
-            >
-              <Icon size={14} className="mt-0.5 shrink-0 text-accent-brand" />
-              <div className="flex flex-col gap-0.5">
-                <span className="text-xs font-medium">
-                  {t(`onboarding.done_${key}`)}
-                </span>
-                <span className="text-[10px] leading-snug text-muted-foreground">
-                  {t(`onboarding.done_${key}_desc`)}
-                </span>
-                {href && (
-                  <a
-                    href={href}
-                    target="_blank"
-                    rel="noreferrer"
-                    className="mt-0.5 w-fit text-[10px] font-medium text-accent-brand hover:underline"
-                  >
-                    {t(`onboarding.done_${key}_link`)}
-                  </a>
-                )}
-              </div>
-            </div>
-          );
-        })}
-      </div>
-    </div>
-  );
-}
diff --git a/src/ui/onboarding/steps/FeaturesStep.tsx b/src/ui/onboarding/steps/FeaturesStep.tsx
deleted file mode 100644
index c9f4e70d6..000000000
--- a/src/ui/onboarding/steps/FeaturesStep.tsx
+++ /dev/null
@@ -1,52 +0,0 @@
-import { useTranslation } from "react-i18next";
-import type { LucideIcon } from "lucide-react";
-import { useActionSlot } from "@/hooks/use-action-slot";
-
-/**
- * A tour of the things people miss because they live behind a rail icon.
- * Terminal and hosts are covered by the welcome step, so this is deliberately
- * the "there is more than SSH here" list. Every entry comes from a plugin,
- * through the "onboarding.features" slot.
- */
-
-export function FeaturesStep() {
-  const { t } = useTranslation();
-  const pluginFeatures = useActionSlot("onboarding.features");
-  const features = pluginFeatures.map((feature) => ({
-    id: feature.actionId,
-    icon: feature.icon as LucideIcon | undefined,
-    title: t(feature.titleKey),
-    description: feature.descriptionKey ? t(feature.descriptionKey) : "",
-  }));
-
-  return (
-    <div className="flex flex-col gap-3">
-      <p className="text-xs text-muted-foreground">
-        {t("onboarding.featuresIntro")}
-      </p>
-
-      <div className="grid grid-cols-1 gap-1.5 sm:grid-cols-2">
-        {features.map(({ icon: Icon, id, title, description }) => (
-          <div
-            key={id}
-            className="flex items-start gap-2.5 border border-border bg-card p-2.5"
-          >
-            {Icon && (
-              <Icon size={14} className="mt-0.5 shrink-0 text-accent-brand" />
-            )}
-            <div className="flex flex-col gap-0.5">
-              <span className="text-xs font-medium">{title}</span>
-              <span className="text-[10px] leading-snug text-muted-foreground">
-                {description}
-              </span>
-            </div>
-          </div>
-        ))}
-      </div>
-
-      <p className="text-[10px] text-muted-foreground/70">
-        {t("onboarding.featuresRailHint")}
-      </p>
-    </div>
-  );
-}
diff --git a/src/ui/onboarding/steps/PluginsStep.tsx b/src/ui/onboarding/steps/PluginsStep.tsx
new file mode 100644
index 000000000..22435e56b
--- /dev/null
+++ b/src/ui/onboarding/steps/PluginsStep.tsx
@@ -0,0 +1,374 @@
+import { useCallback, useEffect, useMemo, useState } from "react";
+import { useTranslation } from "react-i18next";
+import { AlertTriangle, Info, Loader2 } from "lucide-react";
+import type { OnboardingStepProps } from "@termix-ssh/plugin-sdk/frontend";
+import { Button } from "@/components/button";
+import { PluginIconBox } from "@/plugins/plugin-bits";
+import {
+  applyOnboardingPlugins,
+  getOnboardingPlugins,
+  type OnboardingPluginInfo,
+  type OnboardingPluginList,
+  type PluginChoice,
+} from "@/api/plugins-api";
+import { syncPlugins } from "@/plugin-host/loader";
+import { resolvePluginChoices } from "@/types/plugin-onboarding";
+import { useOnboardingStage } from "../onboarding-stage-context";
+import {
+  currentChoice,
+  defaultChoices,
+  recommendedChoices,
+} from "../plugin-choices";
+import { DocsLink } from "@/components/docs-link";
+
+const CATEGORY_ORDER = [
+  "Terminal",
+  "Files & Transfer",
+  "Infrastructure",
+  "Monitoring",
+  "Networking",
+  "Access & Security",
+  "Productivity",
+];
+
+const CHOICES: PluginChoice[] = ["enabled", "disabled", "remove"];
+const RANK: Record<PluginChoice, number> = {
+  remove: 0,
+  disabled: 1,
+  enabled: 2,
+};
+
+export function PluginsStep({
+  setCanContinue,
+  setBeforeNext,
+}: OnboardingStepProps) {
+  const { t } = useTranslation();
+  const stage = useOnboardingStage();
+  const [list, setList] = useState<OnboardingPluginList | null>(
+    stage?.plugins ?? null,
+  );
+  const [loadError, setLoadError] = useState(false);
+  const [choices, setChoices] = useState<Record<string, PluginChoice>>(() =>
+    stage?.plugins ? defaultChoices(stage.plugins) : {},
+  );
+  const [applying, setApplying] = useState(false);
+  const [failed, setFailed] = useState<{ id: string; error: string }[]>([]);
+
+  useEffect(() => {
+    if (list) return;
+    let cancelled = false;
+    getOnboardingPlugins()
+      .then((next) => {
+        if (cancelled) return;
+        setList(next);
+        setChoices(defaultChoices(next));
+        stage?.setPlugins(next);
+      })
+      .catch(() => !cancelled && setLoadError(true));
+    return () => {
+      cancelled = true;
+    };
+  }, [list, stage]);
+
+  const resolved = useMemo(() => {
+    if (!list) return null;
+    return resolvePluginChoices(
+      list.plugins.map((p) => ({ id: p.id, dependencies: p.dependencies })),
+      choices,
+    );
+  }, [list, choices]);
+
+  const names = useMemo(
+    () => new Map(list?.plugins.map((p) => [p.id, p.name]) ?? []),
+    [list],
+  );
+
+  const changed = useMemo(() => {
+    if (!list || !resolved) return false;
+    if (list.pending) return true;
+    return list.plugins.some(
+      (plugin) => resolved.choices[plugin.id] !== currentChoice(plugin),
+    );
+  }, [list, resolved]);
+
+  const apply = useCallback(async (): Promise<boolean> => {
+    if (!list || !resolved) return !!loadError;
+    if (!changed) return true;
+    setApplying(true);
+    setFailed([]);
+    try {
+      const result = await applyOnboardingPlugins(resolved.choices);
+      await syncPlugins().catch(() => {});
+      // Start again from how things are now, so going back and on again
+      // does not apply twice, and a failure only stops Next once.
+      const fresh = await getOnboardingPlugins().catch(() => null);
+      const next = fresh ?? { ...list, pending: false };
+      setList(next);
+      setChoices(defaultChoices(next));
+      stage?.setPlugins(next);
+      if (result.failed.length > 0) {
+        setFailed(result.failed);
+        return false;
+      }
+      return true;
+    } catch {
+      setFailed([{ id: "", error: t("onboarding.pluginsApplyFailed") }]);
+      return false;
+    } finally {
+      setApplying(false);
+    }
+  }, [list, resolved, changed, loadError, stage, t]);
+
+  useEffect(() => {
+    setBeforeNext(apply);
+    return () => setBeforeNext(null);
+  }, [apply, setBeforeNext]);
+
+  useEffect(() => {
+    setCanContinue(!!list || loadError);
+  }, [list, loadError, setCanContinue]);
+
+  if (loadError) {
+    return (
+      <p className="text-xs text-muted-foreground">
+        {t("onboarding.pluginsLoadFailed")}
+      </p>
+    );
+  }
+
+  if (!list || !resolved) {
+    return (
+      <div className="flex items-center gap-2 text-xs text-muted-foreground">
+        <Loader2 size={14} className="animate-spin" />
+        {t("common.loading")}
+      </div>
+    );
+  }
+
+  const regular = list.plugins.filter((p) => !p.consent);
+  const consent = list.plugins.filter((p) => p.consent);
+  const groups = new Map<string, OnboardingPluginInfo[]>();
+  for (const plugin of regular) {
+    const group = groups.get(plugin.category) ?? [];
+    group.push(plugin);
+    groups.set(plugin.category, group);
+  }
+  const orderedGroups = [...groups.entries()].sort(
+    ([a], [b]) =>
+      (CATEGORY_ORDER.indexOf(a) + 1 || 99) -
+      (CATEGORY_ORDER.indexOf(b) + 1 || 99),
+  );
+
+  const counts = { enabled: 0, disabled: 0, remove: 0 };
+  for (const plugin of list.plugins) counts[resolved.choices[plugin.id]]++;
+  const forcedBy = new Map(
+    resolved.adjustments.map((a) => [
+      a.id,
+      a.requiredBy.map((id) => names.get(id) ?? id).join(", "),
+    ]),
+  );
+
+  const setChoice = (id: string, choice: PluginChoice) =>
+    setChoices((prev) => ({ ...prev, [id]: choice }));
+
+  return (
+    <div className="flex flex-col gap-4">
+      <p className="text-xs text-muted-foreground">
+        {t("onboarding.pluginsIntro")}{" "}
+        <DocsLink core="pluginCatalog" className="text-xs">
+          {t("onboarding.pluginsDocsLink")}
+        </DocsLink>
+      </p>
+
+      <div className="flex items-start gap-2 border border-border bg-muted/30 p-2.5 text-[11px] leading-snug text-muted-foreground">
+        <Info size={13} className="mt-0.5 shrink-0 text-accent-brand" />
+        <span>
+          {list.reason === "upgrade" && (
+            <>{t("onboarding.pluginsUpgradeNote")} </>
+          )}
+          {t("onboarding.pluginsRemoveNote")}
+        </span>
+      </div>
+
+      <div className="flex flex-wrap items-center justify-between gap-2">
+        <div className="flex flex-wrap gap-1.5">
+          <Button
+            variant="outline"
+            size="sm"
+            className="h-7 text-[11px]"
+            onClick={() => setChoices(recommendedChoices(list))}
+          >
+            {t("onboarding.pluginsUseRecommended")}
+          </Button>
+          <Button
+            variant="outline"
+            size="sm"
+            className="h-7 text-[11px]"
+            onClick={() =>
+              setChoices(
+                Object.fromEntries(list.plugins.map((p) => [p.id, "enabled"])),
+              )
+            }
+          >
+            {t("onboarding.pluginsEnableAll")}
+          </Button>
+          <Button
+            variant="outline"
+            size="sm"
+            className="h-7 text-[11px]"
+            onClick={() =>
+              setChoices(
+                Object.fromEntries(
+                  list.plugins.map((p) => [
+                    p.id,
+                    p.consent ? choices[p.id] : "disabled",
+                  ]),
+                ),
+              )
+            }
+          >
+            {t("onboarding.pluginsDisableAll")}
+          </Button>
+        </div>
+        <span className="text-[11px] text-muted-foreground">
+          {t("onboarding.pluginsCounts", {
+            enabled: counts.enabled,
+            disabled: counts.disabled,
+            removed: counts.remove,
+          })}
+        </span>
+      </div>
+
+      {orderedGroups.map(([category, plugins]) => (
+        <div key={category} className="flex flex-col gap-1.5">
+          <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
+            {category}
+          </span>
+          {plugins.map((plugin) => {
+            const choice = resolved.choices[plugin.id];
+            const floor = forcedBy.has(plugin.id) ? RANK[choice] : 0;
+            return (
+              <div
+                key={plugin.id}
+                className="flex flex-col gap-2 border border-border bg-card p-2.5 sm:flex-row sm:items-center"
+              >
+                <div className="flex min-w-0 flex-1 items-start gap-2.5">
+                  <PluginIconBox
+                    name={plugin.icon ?? undefined}
+                    size="sm"
+                    muted={choice === "remove"}
+                  />
+                  <div className="flex min-w-0 flex-col gap-0.5">
+                    <span className="flex items-center gap-1.5 text-xs font-medium">
+                      {plugin.name}
+                      {plugin.recommended && (
+                        <span className="border border-accent-brand/40 px-1 text-[9px] font-semibold uppercase tracking-wider text-accent-brand">
+                          {t("onboarding.pluginsRecommended")}
+                        </span>
+                      )}
+                    </span>
+                    <span className="text-[10px] leading-snug text-muted-foreground">
+                      {plugin.description}
+                    </span>
+                    {forcedBy.has(plugin.id) && (
+                      <span className="text-[10px] text-accent-brand">
+                        {t("onboarding.pluginsKeptBecause", {
+                          names: forcedBy.get(plugin.id),
+                        })}
+                      </span>
+                    )}
+                  </div>
+                </div>
+                <div
+                  role="radiogroup"
+                  aria-label={plugin.name}
+                  className="flex shrink-0 border border-border"
+                >
+                  {CHOICES.map((option) => (
+                    <button
+                      key={option}
+                      type="button"
+                      role="radio"
+                      aria-checked={choice === option}
+                      disabled={RANK[option] < floor}
+                      onClick={() => setChoice(plugin.id, option)}
+                      className={`px-2.5 py-1 text-[11px] transition-colors disabled:cursor-not-allowed disabled:opacity-40 ${
+                        choice === option
+                          ? option === "remove"
+                            ? "bg-destructive/15 text-destructive"
+                            : "bg-accent-brand/15 text-accent-brand"
+                          : "text-muted-foreground hover:bg-muted/50"
+                      }`}
+                    >
+                      {t(`onboarding.pluginsChoice_${option}`)}
+                    </button>
+                  ))}
+                </div>
+              </div>
+            );
+          })}
+        </div>
+      ))}
+
+      {consent.length > 0 && (
+        <div className="flex flex-col gap-1.5">
+          <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
+            {t("onboarding.pluginsConsentTitle")}
+          </span>
+          {consent.map((plugin) => {
+            const on = resolved.choices[plugin.id] === "enabled";
+            return (
+              <label
+                key={plugin.id}
+                className="flex cursor-pointer items-start gap-2.5 border border-border bg-card p-2.5"
+              >
+                <input
+                  type="checkbox"
+                  className="mt-0.5 accent-[var(--accent-brand)]"
+                  checked={on}
+                  disabled={forcedBy.has(plugin.id)}
+                  onChange={(e) =>
+                    setChoice(
+                      plugin.id,
+                      e.target.checked ? "enabled" : "disabled",
+                    )
+                  }
+                />
+                <div className="flex flex-col gap-0.5">
+                  <span className="text-xs font-medium">{plugin.name}</span>
+                  <span className="text-[10px] leading-snug text-muted-foreground">
+                    {plugin.description}
+                  </span>
+                  <span className="text-[10px] text-muted-foreground/80">
+                    {t("onboarding.pluginsConsentNote")}
+                  </span>
+                </div>
+              </label>
+            );
+          })}
+        </div>
+      )}
+
+      {applying && (
+        <div className="flex items-center gap-2 text-xs text-muted-foreground">
+          <Loader2 size={14} className="animate-spin" />
+          {t("onboarding.pluginsApplying")}
+        </div>
+      )}
+
+      {failed.length > 0 && (
+        <div className="flex flex-col gap-1 border border-destructive/40 bg-destructive/10 p-2.5 text-[11px]">
+          <span className="flex items-center gap-1.5 font-medium text-destructive">
+            <AlertTriangle size={13} />
+            {t("onboarding.pluginsSomeFailed")}
+          </span>
+          {failed.map((f) => (
+            <span key={`${f.id}:${f.error}`} className="text-muted-foreground">
+              {f.id ? `${names.get(f.id) ?? f.id}: ${f.error}` : f.error}
+            </span>
+          ))}
+        </div>
+      )}
+    </div>
+  );
+}
diff --git a/src/ui/onboarding/steps/SecurityStep.tsx b/src/ui/onboarding/steps/SecurityStep.tsx
index c329e93c8..3d2470d24 100644
--- a/src/ui/onboarding/steps/SecurityStep.tsx
+++ b/src/ui/onboarding/steps/SecurityStep.tsx
@@ -1,49 +1,16 @@
 import { useTranslation } from "react-i18next";
-import { Fingerprint, KeyRound, ShieldCheck, Users } from "lucide-react";
+import { AuthEnrollmentSections } from "@/sidebar/AuthEnrollmentSections";
 
-const ITEMS = [
-  { icon: KeyRound, key: "credentials" },
-  { icon: ShieldCheck, key: "twofa" },
-  { icon: Fingerprint, key: "identity" },
-  { icon: Users, key: "sharing" },
-] as const;
-
-/**
- * Credential reuse and 2FA are the two things worth knowing before someone
- * types a password into a host form, so they get their own step rather than a
- * line buried in the feature list.
- */
+/** A passkey or authenticator, set up right here when a plugin offers one. */
 export function SecurityStep() {
   const { t } = useTranslation();
 
   return (
-    <div className="flex flex-col gap-3">
+    <div className="flex flex-col gap-4">
       <p className="text-xs text-muted-foreground">
         {t("onboarding.securityIntro")}
       </p>
-
-      <div className="flex flex-col gap-1.5">
-        {ITEMS.map(({ icon: Icon, key }) => (
-          <div
-            key={key}
-            className="flex items-start gap-2.5 border border-border bg-card p-2.5"
-          >
-            <Icon size={14} className="mt-0.5 shrink-0 text-accent-brand" />
-            <div className="flex flex-col gap-0.5">
-              <span className="text-xs font-medium">
-                {t(`onboarding.security_${key}`)}
-              </span>
-              <span className="text-[10px] leading-snug text-muted-foreground">
-                {t(`onboarding.security_${key}_desc`)}
-              </span>
-            </div>
-          </div>
-        ))}
-      </div>
-
-      <p className="text-[10px] text-muted-foreground/70">
-        {t("onboarding.securityEncryptionNote")}
-      </p>
+      <AuthEnrollmentSections />
     </div>
   );
 }
diff --git a/src/ui/onboarding/steps/WelcomeStep.tsx b/src/ui/onboarding/steps/WelcomeStep.tsx
deleted file mode 100644
index 0e10ff0c0..000000000
--- a/src/ui/onboarding/steps/WelcomeStep.tsx
+++ /dev/null
@@ -1,49 +0,0 @@
-import { useTranslation } from "react-i18next";
-import { FolderTree, Server, TerminalSquare } from "lucide-react";
-
-const HIGHLIGHTS = [
-  {
-    icon: Server,
-    titleKey: "onboarding.welcome_hosts",
-    descKey: "onboarding.welcome_hosts_desc",
-  },
-  {
-    icon: TerminalSquare,
-    titleKey: "onboarding.welcome_terminal",
-    descKey: "onboarding.welcome_terminal_desc",
-  },
-  {
-    icon: FolderTree,
-    titleKey: "onboarding.welcome_files",
-    descKey: "onboarding.welcome_files_desc",
-  },
-] as const;
-
-export function WelcomeStep() {
-  const { t } = useTranslation();
-
-  return (
-    <div className="flex flex-col gap-3">
-      <p className="text-xs text-muted-foreground">
-        {t("onboarding.welcomeIntro")}
-      </p>
-
-      <div className="flex flex-col gap-1.5">
-        {HIGHLIGHTS.map(({ icon: Icon, titleKey, descKey }) => (
-          <div
-            key={titleKey}
-            className="flex items-start gap-2.5 border border-border bg-card p-2.5"
-          >
-            <Icon size={14} className="mt-0.5 shrink-0 text-accent-brand" />
-            <div className="flex flex-col gap-0.5">
-              <span className="text-xs font-medium">{t(titleKey)}</span>
-              <span className="text-[10px] leading-snug text-muted-foreground">
-                {t(descKey)}
-              </span>
-            </div>
-          </div>
-        ))}
-      </div>
-    </div>
-  );
-}
diff --git a/src/ui/onboarding/steps/WorkflowStep.tsx b/src/ui/onboarding/steps/WorkflowStep.tsx
deleted file mode 100644
index 66b3f34e3..000000000
--- a/src/ui/onboarding/steps/WorkflowStep.tsx
+++ /dev/null
@@ -1,74 +0,0 @@
-import { useTranslation } from "react-i18next";
-import { Columns2, PanelRight, Search, type LucideIcon } from "lucide-react";
-import { Kbd } from "@/components/kbd";
-import { useActionSlot } from "@/hooks/use-action-slot";
-
-/**
- * The handful of navigation habits that make the app feel fast. Each row shows
- * the actual gesture rather than describing it, so it reads as a cheat sheet
- * people can come back to via "Run setup again".
- */
-export function WorkflowStep() {
-  const { t } = useTranslation();
-  const pluginTips = useActionSlot("onboarding.workflow");
-  const tips = [
-    ...[
-      { icon: Columns2, key: "split" },
-      { icon: PanelRight, key: "dock" },
-    ].map(({ icon, key }) => ({
-      id: key,
-      icon: icon as LucideIcon | undefined,
-      title: t(`onboarding.workflow_${key}`),
-      description: t(`onboarding.workflow_${key}_desc`),
-    })),
-    ...pluginTips.map((tip) => ({
-      id: tip.actionId,
-      icon: tip.icon as LucideIcon | undefined,
-      title: t(tip.titleKey),
-      description: tip.descriptionKey ? t(tip.descriptionKey) : "",
-    })),
-  ];
-
-  return (
-    <div className="flex flex-col gap-3">
-      <p className="text-xs text-muted-foreground">
-        {t("onboarding.workflowIntro")}
-      </p>
-
-      <div className="flex flex-col gap-1.5">
-        <div className="flex items-start gap-2.5 border border-border bg-card p-2.5">
-          <Search size={14} className="mt-0.5 shrink-0 text-accent-brand" />
-          <div className="flex flex-1 flex-col gap-1">
-            <span className="text-xs font-medium">
-              {t("onboarding.workflow_palette")}
-            </span>
-            <span className="text-[10px] leading-snug text-muted-foreground">
-              {t("onboarding.workflow_palette_desc")}
-            </span>
-            <span className="mt-0.5 flex items-center gap-1">
-              <Kbd className="h-5 rounded-none bg-background px-1.5">Shift</Kbd>
-              <Kbd className="h-5 rounded-none bg-background px-1.5">Shift</Kbd>
-            </span>
-          </div>
-        </div>
-
-        {tips.map(({ icon: Icon, id, title, description }) => (
-          <div
-            key={id}
-            className="flex items-start gap-2.5 border border-border bg-card p-2.5"
-          >
-            {Icon && (
-              <Icon size={14} className="mt-0.5 shrink-0 text-accent-brand" />
-            )}
-            <div className="flex flex-col gap-0.5">
-              <span className="text-xs font-medium">{title}</span>
-              <span className="text-[10px] leading-snug text-muted-foreground">
-                {description}
-              </span>
-            </div>
-          </div>
-        ))}
-      </div>
-    </div>
-  );
-}
diff --git a/src/ui/onboarding/use-onboarding-steps.ts b/src/ui/onboarding/use-onboarding-steps.ts
new file mode 100644
index 000000000..802f95103
--- /dev/null
+++ b/src/ui/onboarding/use-onboarding-steps.ts
@@ -0,0 +1,57 @@
+import { useMemo } from "react";
+import { useActionSlot } from "@/hooks/use-action-slot";
+import {
+  getActionPermission,
+  getSlotContributions,
+} from "@/shell/action-registry";
+import {
+  legacyStepDefs,
+  mergeStepDefs,
+  onboardingSteps,
+  type OnboardingStepDef,
+} from "./onboarding-registry";
+import { CORE_STEPS } from "./onboarding-steps";
+import {
+  listLoginMethodUIs,
+  listSecondFactorUIs,
+  useLoginMethods,
+  useSecondFactors,
+} from "@/plugin-host/auth-registry";
+
+/** Every onboarding step that exists right now, in flow order. */
+export function useOnboardingStepDefs(): OnboardingStepDef[] {
+  const registered = onboardingSteps.useList();
+  const legacy = useActionSlot("onboarding.steps");
+  return useMemo(
+    () => mergeStepDefs(CORE_STEPS, registered, legacyStepDefs(legacy)),
+    [registered, legacy],
+  );
+}
+
+/** The same list outside React, for the boot gate and the baseline pass. */
+export function currentStepDefs(
+  has: (permission: string) => boolean,
+): OnboardingStepDef[] {
+  const legacy = getSlotContributions("onboarding.steps").filter((c) => {
+    const permission = getActionPermission(c.actionId);
+    return !permission || has(permission);
+  });
+  return mergeStepDefs(
+    CORE_STEPS,
+    onboardingSteps.list(),
+    legacyStepDefs(legacy),
+  );
+}
+
+/** Whether a sign in plugin offers something to set up for the account. */
+export function canEnrollSecondFactor(): boolean {
+  return [...listLoginMethodUIs(), ...listSecondFactorUIs()].some(
+    (entry) => entry.enrollment,
+  );
+}
+
+export function useCanEnrollSecondFactor(): boolean {
+  const methods = useLoginMethods();
+  const factors = useSecondFactors();
+  return [...methods, ...factors].some((entry) => entry.enrollment);
+}
diff --git a/src/ui/plugin-host/PluginViewPlaceholder.tsx b/src/ui/plugin-host/PluginViewPlaceholder.tsx
index 54082d494..b8d411b06 100644
--- a/src/ui/plugin-host/PluginViewPlaceholder.tsx
+++ b/src/ui/plugin-host/PluginViewPlaceholder.tsx
@@ -1,5 +1,8 @@
 import { CircleSlash } from "lucide-react";
 import { useTranslation } from "react-i18next";
+import { Button } from "@/components/button";
+import { usePermissions } from "@/hooks/use-permissions";
+import { OPEN_PLUGINS_EVENT } from "@/plugins/open-plugins";
 import { usePluginStore } from "./plugin-store";
 import { unregisteredViewStatus, type ViewKind } from "./view-ownership";
 
@@ -22,6 +25,7 @@ export function PluginViewPlaceholder({
   const { t } = useTranslation();
   // Subscribing re-renders this when plugin state changes.
   usePluginStore();
+  const { has } = usePermissions();
   const { status, owner } = unregisteredViewStatus(kind, viewId);
   const name = owner?.summary.name ?? viewId;
 
@@ -60,6 +64,18 @@ export function PluginViewPlaceholder({
         {title}
       </span>
       <span className="text-xs text-muted-foreground/70">{hint}</span>
+      {!compact && status !== "failed" && has("admin.plugins.manage") && (
+        <Button
+          variant="outline"
+          size="sm"
+          className="mt-1"
+          onClick={() =>
+            window.dispatchEvent(new CustomEvent(OPEN_PLUGINS_EVENT))
+          }
+        >
+          {t("plugins.manager.browsePlugins")}
+        </Button>
+      )}
     </div>
   );
 }
diff --git a/src/ui/plugin-host/app.ts b/src/ui/plugin-host/app.ts
index 5ca105b9a..100b8d560 100644
--- a/src/ui/plugin-host/app.ts
+++ b/src/ui/plugin-host/app.ts
@@ -3,7 +3,7 @@ import type {
   Disposer,
   PluginManifest,
   TermixApp,
-} from "@termix/plugin-sdk/frontend";
+} from "@termix-ssh/plugin-sdk/frontend";
 import {
   PLUGIN_SETTINGS_CHANGED_EVENT,
   type PluginContributions,
@@ -45,6 +45,11 @@ import {
 } from "@/shell/action-registry";
 import { pluginApiFor, pluginFetch, pluginWsUrl } from "@/lib/plugin-transport";
 import { registerPluginComponent } from "./component-registry";
+import {
+  onboardingSteps,
+  sectionPosition,
+} from "@/onboarding/onboarding-registry";
+import { pluginStepKey } from "@/types/onboarding";
 import type { LucideIcon } from "lucide-react";
 import {
   registerLoginMethod,
@@ -67,15 +72,32 @@ import {
 } from "./host-scope";
 import { manifestDeclares, type ViewKind } from "./view-ownership";
 import { pluginKey } from "@/lib/plugin-i18n";
+import { pluginDocsPage, pluginDocsUrl } from "@termix-ssh/plugin-sdk/docs";
 import { hasPermission } from "@/hooks/use-permissions";
 import i18n from "@/i18n/i18n";
 
+const ONBOARDING_ID = /^[a-z0-9][a-z0-9-]{0,63}$/;
+
 export interface PluginAppHandle {
   app: TermixApp;
   /** Runs every disposer, newest first, isolating failures. */
   dispose: () => void;
 }
 
+function createDocsApi(manifest: PluginManifest): TermixApp["docs"] {
+  const url = pluginDocsUrl(manifest?.docs);
+  const page = (name?: string, anchor?: string) =>
+    url ? pluginDocsPage(url, name, anchor) : null;
+  return {
+    url,
+    page,
+    open(name, anchor) {
+      const target = page(name, anchor);
+      if (target) window.open(target, "_blank", "noopener,noreferrer");
+    },
+  };
+}
+
 /**
  * Builds the object a plugin's `activate(app)` receives.
  *
@@ -122,6 +144,12 @@ export function createPluginApp(
     fn: F | undefined,
   ): F | undefined => scopeHostCallback(fn, pluginId);
 
+  const requireStepId = (id: string, what: string) => {
+    if (typeof id !== "string" || !ONBOARDING_ID.test(id)) {
+      throw new Error(`${pluginId}: ${what} id "${id}" is not valid`);
+    }
+  };
+
   const requireDeclared = (kind: ViewKind, id: string, what: string) => {
     if (!manifestDeclares(contributes, kind, id)) {
       const field =
@@ -159,6 +187,7 @@ export function createPluginApp(
           mobilePrimary: item.mobilePrimary,
           electronOnly: item.electronOnly,
           separatorAfter: item.separatorAfter ?? true,
+          group: item.group,
           hidden: item.hidden,
           after: item.after,
           order: item.order,
@@ -392,6 +421,7 @@ export function createPluginApp(
           titleKey: key(card.titleKey),
           defaultHeight: card.defaultHeight,
           defaultPanel: card.defaultPanel,
+          frame: card.frame,
           component: scoped(
             card.component as unknown as ComponentType<DashboardCardRenderProps>,
           ),
@@ -461,6 +491,45 @@ export function createPluginApp(
       );
     },
 
+    registerOnboardingStep(step) {
+      requireStepId(step.id, "onboarding step");
+      const version = step.version ?? 1;
+      if (!Number.isInteger(version) || version < 1) {
+        throw new Error(
+          `${pluginId}: onboarding step "${step.id}" needs a whole version of 1 or more`,
+        );
+      }
+      const when = guardCallback(pluginId, step.when, false);
+      return track(
+        onboardingSteps.register({
+          id: pluginStepKey(pluginId, step.id),
+          pluginId,
+          version,
+          titleKey: key(step.titleKey),
+          descriptionKey: step.descriptionKey
+            ? key(step.descriptionKey)
+            : undefined,
+          icon: step.icon
+            ? (withIconBoundary(pluginId, step.icon as never) as never)
+            : undefined,
+          Component: scoped(step.component),
+          audience: step.audience ?? "all",
+          permission: step.permission
+            ? resolvePluginPermission(pluginId, step.permission)
+            : undefined,
+          position: sectionPosition(step.section, step.order),
+          isRelevant: when
+            ? (ctx) =>
+                when({
+                  isAdmin: ctx.isAdmin,
+                  isDesktop: ctx.isDesktop,
+                  mode: ctx.mode,
+                }) === true
+            : undefined,
+        }),
+      );
+    },
+
     invokeAction: (id, ...args) => invokeAction(id, ...args),
 
     registerComponent(id, component) {
@@ -546,6 +615,10 @@ export function createPluginApp(
       onReady: (listener) => track(tabsApi.onReady(listener)),
     },
 
+    confirm: (options) => shell.confirm!(options),
+
+    docs: createDocsApi(manifest),
+
     desktop: {
       available: isElectron(),
       remoteServerUrl,
diff --git a/src/ui/plugin-host/auth-registry.ts b/src/ui/plugin-host/auth-registry.ts
index 9cbebcf40..741cfe7f1 100644
--- a/src/ui/plugin-host/auth-registry.ts
+++ b/src/ui/plugin-host/auth-registry.ts
@@ -2,7 +2,7 @@ import type { ComponentType } from "react";
 import type {
   LoginMethodUIProps,
   SecondFactorUIProps,
-} from "@termix/plugin-sdk/frontend";
+} from "@termix-ssh/plugin-sdk/frontend";
 import { createRegistry } from "@/lib/registry";
 
 /**
diff --git a/src/ui/plugin-host/bridge.ts b/src/ui/plugin-host/bridge.ts
index 39a668fcd..53cb693fb 100644
--- a/src/ui/plugin-host/bridge.ts
+++ b/src/ui/plugin-host/bridge.ts
@@ -15,7 +15,7 @@ import {
   type PluginHostRecord,
   type SettingsScope,
   type SettingsState,
-} from "@termix/plugin-sdk/frontend";
+} from "@termix-ssh/plugin-sdk/frontend";
 import { usePermissions } from "@/hooks/use-permissions";
 import { useTheme } from "@/components/theme-provider";
 import { createPluginApi, pluginApiFor } from "@/lib/plugin-transport";
@@ -23,6 +23,7 @@ import {
   getPluginAdminSettings,
   getPluginHostSettings,
   getPluginUserSettings,
+  PLUGIN_SETTINGS_CHANGED_EVENT,
   updatePluginAdminSettings,
   updatePluginHostSettings,
   updatePluginUserSettings,
@@ -38,6 +39,7 @@ import {
 } from "@/api/open-tabs-api";
 import { runKeybindingAction } from "@/shell/keybinding-registry";
 import { usePluginScope } from "./scope";
+import { usePluginDocsUrl } from "@/components/docs-link";
 import { knownPluginIds, usePluginStore } from "./plugin-store";
 import { useUiPreferencesContext } from "@/contexts/UiPreferencesContext";
 import type { UiPluginPresets } from "@/types/ui-preferences";
@@ -122,6 +124,12 @@ function loadCurrentUser() {
   return currentUser;
 }
 
+interface SettingsChangeDetail {
+  pluginId: string;
+  scope: SettingsScope;
+  hostId?: number;
+}
+
 const SETTINGS_READERS: Record<
   SettingsScope,
   (pluginId: string, hostId?: number) => Promise<Record<string, unknown>>
@@ -218,6 +226,10 @@ export const pluginHostBridge: PluginHostBridge = {
     return pluginId;
   },
 
+  useDocsUrl(pluginId, page, anchor) {
+    return usePluginDocsUrl(pluginId, page, anchor);
+  },
+
   useTranslation(pluginId) {
     const { t, i18n } = useI18nTranslation(pluginId);
     return {
@@ -245,15 +257,26 @@ export const pluginHostBridge: PluginHostBridge = {
     useEffect(() => {
       let cancelled = false;
       if (scope === "host" && !Number.isFinite(numericHostId)) return;
-      SETTINGS_READERS[scope](pluginId, numericHostId)
-        .then((values) => {
-          if (!cancelled) setState({ values, loaded: true });
-        })
-        .catch(() => {
-          if (!cancelled) setState((prev) => ({ ...prev, loaded: true }));
-        });
+      const read = () =>
+        SETTINGS_READERS[scope](pluginId, numericHostId)
+          .then((values) => {
+            if (!cancelled) setState({ values, loaded: true });
+          })
+          .catch(() => {
+            if (!cancelled) setState((prev) => ({ ...prev, loaded: true }));
+          });
+      void read();
+      // Saved from the settings page, which keeps its own copy of the form.
+      const onChanged = (event: Event) => {
+        const detail = (event as CustomEvent<SettingsChangeDetail>).detail;
+        if (detail?.pluginId !== pluginId || detail.scope !== scope) return;
+        if (scope === "host" && detail.hostId !== numericHostId) return;
+        void read();
+      };
+      window.addEventListener(PLUGIN_SETTINGS_CHANGED_EVENT, onChanged);
       return () => {
         cancelled = true;
+        window.removeEventListener(PLUGIN_SETTINGS_CHANGED_EVENT, onChanged);
       };
     }, [pluginId, scope, numericHostId]);
 
diff --git a/src/ui/plugin-host/loader.ts b/src/ui/plugin-host/loader.ts
index d40d93143..1f2e2a3ae 100644
--- a/src/ui/plugin-host/loader.ts
+++ b/src/ui/plugin-host/loader.ts
@@ -2,7 +2,7 @@ import type { ResourceKey } from "i18next";
 import type {
   FrontendModule,
   PluginManifest,
-} from "@termix/plugin-sdk/frontend";
+} from "@termix-ssh/plugin-sdk/frontend";
 import i18n, { setPluginLocaleResolver } from "@/i18n/i18n";
 import { getPlugins, type PluginSummary } from "@/api/plugins-api";
 import { getBackendUrl } from "@/main-axios";
@@ -15,7 +15,6 @@ import {
   setFrontendState,
   setPluginSummaries,
 } from "./plugin-store";
-import { workspaceFrontends, workspaceLocales } from "./workspace-plugins";
 import { syncHostFeatureTabs } from "@/settings/host-feature-tabs";
 
 /**
@@ -75,16 +74,12 @@ const defaultDeps: PluginLoaderDeps = {
   fetchPlugins: getPlugins,
 
   async importFrontend(summary) {
-    const workspace = workspaceFrontends[summary.id];
-    if (workspace) return (await workspace()) as FrontendModule;
     return (await import(
       /* @vite-ignore */ absolute(assetUrl(summary, "frontend.js"))
     )) as FrontendModule;
   },
 
   async loadLocale(summary, file) {
-    const workspace = workspaceLocales[summary.id]?.[file];
-    if (workspace) return (await workspace()) as ResourceKey;
     const hasFile = summary.locales?.includes(file);
     if (!hasFile) return null;
     const path = file === "en" ? "en.json" : `translated/${file}.json`;
@@ -282,13 +277,18 @@ async function loadNamespaces(summaries: PluginSummary[]): Promise<void> {
   }
 }
 
+/** The server only serves assets of a running plugin. */
+function serverServesAssets(summary: PluginSummary): boolean {
+  return summary.enabled && (!summary.state || summary.state === "active");
+}
+
 function namespaceVersion(summary: PluginSummary): string {
   return `${summary.version}|${summary.assetVersion ?? ""}`;
 }
 
 async function reconcile(summaries: PluginSummary[]): Promise<void> {
   setPluginSummaries(summaries);
-  await loadNamespaces(summaries);
+  await loadNamespaces(summaries.filter(serverServesAssets));
 
   const { order, blocked } = orderForActivation(summaries);
   const wanted = new Map(order.map((summary) => [summary.id, summary]));
@@ -403,6 +403,11 @@ function onPluginsChanged() {
   void syncPlugins();
 }
 
+// Sent by scripts/dev.mjs after it rebuilt a plugin or restarted the backend.
+import.meta.hot?.on("termix:plugins-reloaded", () => {
+  if (started) void syncPlugins();
+});
+
 function onFocus() {
   const now = Date.now();
   if (now - lastFocusSync < FOCUS_SYNC_INTERVAL_MS) return;
@@ -410,6 +415,14 @@ function onFocus() {
   void syncPlugins();
 }
 
+function installLocaleResolver(): void {
+  setPluginLocaleResolver((namespace, _language, file) => {
+    const summary = getPluginRecord(namespace)?.summary;
+    if (!summary) return Promise.resolve(null);
+    return currentDeps().loadLocale(summary, file);
+  });
+}
+
 async function fetchGuestPlugins(): Promise<PluginSummary[]> {
   const response = await fetch(getBackendUrl("/plugins/public"));
   if (!response.ok) return [];
@@ -460,11 +473,7 @@ export async function startPreLoginPlugins(
     return;
   }
   if (list.length === 0 || started) return;
-  setPluginLocaleResolver((namespace, _language, file) => {
-    const summary = getPluginRecord(namespace)?.summary;
-    if (!summary) return Promise.resolve(null);
-    return currentDeps().loadLocale(summary, file);
-  });
+  installLocaleResolver();
   await enqueue(async () => {
     // Once signed in the full sync owns the list, and reconciling this
     // subset would unload everything else. Auth remounts during the
@@ -487,16 +496,12 @@ export function startPluginRuntime(
   options: { guest?: boolean } = {},
 ): Promise<void> {
   installPluginHostBridge();
+  installLocaleResolver();
   if (options.guest) {
     guestMode = true;
     if (!deps) configurePluginLoader({ fetchPlugins: fetchGuestPlugins });
     return syncPlugins();
   }
-  setPluginLocaleResolver((namespace, _language, file) => {
-    const summary = getPluginRecord(namespace)?.summary;
-    if (!summary) return Promise.resolve(null);
-    return currentDeps().loadLocale(summary, file);
-  });
 
   if (!started && typeof window !== "undefined") {
     started = true;
@@ -527,6 +532,7 @@ export function isPluginFrontendActive(pluginId: string): boolean {
 export async function resetPluginLoader(): Promise<void> {
   await stopPluginRuntime();
   deps = null;
+  guestMode = false;
   queue = Promise.resolve();
   failedVersions.clear();
 }
diff --git a/src/ui/plugin-host/sdk-ui.ts b/src/ui/plugin-host/sdk-ui.ts
index aa0316901..78fd103b4 100644
--- a/src/ui/plugin-host/sdk-ui.ts
+++ b/src/ui/plugin-host/sdk-ui.ts
@@ -1,5 +1,5 @@
 /**
- * @termix/plugin-sdk/ui: the shell's components, for plugins.
+ * @termix-ssh/plugin-sdk/ui: the shell's components, for plugins.
  *
  * Everything exported here is public API. A plugin builds its UI from these
  * so it looks like the rest of the app and picks up theme changes, and it
@@ -194,7 +194,6 @@ export {
   ManagerSearch,
   type ManagerCardError,
 } from "@/components/manager-card";
-export { useConfirmation } from "@/hooks/use-confirmation";
 export { useAdaptivePolling } from "@/hooks/use-adaptive-polling";
 // Homepage widget pieces, for plugins that register a widget.
 export { WidgetTitle } from "@/lib/widget-title";
@@ -245,7 +244,7 @@ export { remoteServerUrl as linkedServerUrl } from "@/plugin-host/desktop";
 
 // Dashboard reads. The calls a plugin makes on the user's behalf (recent
 // activity, sudo autofill, open tabs, keybindings) are typed in
-// @termix/plugin-sdk/frontend instead.
+// @termix-ssh/plugin-sdk/frontend instead.
 export {
   getRecentActivity,
   getUptime,
@@ -276,3 +275,78 @@ export { getDeviceId } from "@/lib/device-id";
 
 // A host that is never saved, for connecting to an address straight away.
 export { createQuickConnectHost } from "@/sidebar/quick-connect-host";
+
+// The panel kit every tab and sidebar panel is built from.
+export {
+  BackButton,
+  Facts,
+  GroupHeading,
+  PANEL,
+  PanelSearch,
+  PanelShell,
+  Segmented,
+  ViewToggle,
+  type PanelDensity,
+  type PanelViewMode,
+} from "@/components/panel-layout";
+// A link to docs. Inside a plugin, page="setup" opens that page of its docs.
+export { DocsLink, type DocsLinkProps } from "@/components/docs-link";
+export {
+  AddButton,
+  FormFooter,
+  ListBadge,
+  ListRow,
+  ListRowAction,
+  ListRowFolder,
+  PanelList,
+  type ListRowTone,
+} from "@/components/list-kit";
+export {
+  DataView,
+  type DataColumn,
+  type GridColumns,
+} from "@/components/data-view";
+export { TabStrip, type TabStripItem } from "@/components/tab-strip";
+export { CardMasonry } from "@/components/card-masonry";
+export { Meter, UsagePair } from "@/components/meter";
+export { usageBarColor, usageColor } from "@/lib/usage-color";
+export {
+  Field,
+  FieldPair,
+  NumberField,
+  Repeater,
+  SecretField,
+  SelectField,
+  SwitchRow,
+  TagInput,
+  TextAreaField,
+  TextField,
+} from "@/components/form-fields";
+
+// Views and questions drawn over the panel, tab or pane that asked, instead
+// of modals over the whole app.
+export {
+  InlineView,
+  PanePrompt,
+  SurfaceScope,
+  useConfirm,
+  useSurfaceKind,
+  type ConfirmOptions,
+  type EditingWidth,
+  type SurfaceKind,
+} from "@/components/surface/surface-scope";
+export {
+  PROMPT_BUTTON,
+  PROMPT_DESTRUCTIVE_BUTTON,
+  PROMPT_PRIMARY_BUTTON,
+} from "@/components/surface/prompt-styles";
+
+// One connection lifecycle: connecting, failed with retry and a log, dropped,
+// or unavailable.
+export {
+  ConnectionGate,
+  useConnectionGate,
+  type ConnectionGateController,
+  type ConnectionGateProps,
+} from "@/components/connection/ConnectionGate";
+export { type ConnectionUnavailable } from "@/components/connection/ConnectionScreen";
diff --git a/src/ui/plugin-host/shell-bridge.ts b/src/ui/plugin-host/shell-bridge.ts
index b5678efab..1654a058c 100644
--- a/src/ui/plugin-host/shell-bridge.ts
+++ b/src/ui/plugin-host/shell-bridge.ts
@@ -116,6 +116,14 @@ export const shell: TabShellCallbacks = {
   openHostEditor: (...args) => callbacks?.openHostEditor?.(...args),
   saveQuickConnect: (...args) =>
     callbacks?.saveQuickConnect?.(...args) ?? Promise.resolve(),
+  confirm: (options) =>
+    callbacks?.confirm
+      ? callbacks.confirm(options)
+      : Promise.resolve(
+          window.confirm(
+            [options.title, options.description].filter(Boolean).join(" "),
+          ),
+        ),
 };
 
 export const tabsApi = {
diff --git a/src/ui/plugin-host/testing-host.tsx b/src/ui/plugin-host/testing-host.tsx
index c7f997c85..342644be1 100644
--- a/src/ui/plugin-host/testing-host.tsx
+++ b/src/ui/plugin-host/testing-host.tsx
@@ -1,5 +1,5 @@
 /**
- * The Termix side of @termix/plugin-sdk/testing's renderWithApp.
+ * The Termix side of @termix-ssh/plugin-sdk/testing's renderWithApp.
  *
  * Activates a plugin against the real registries, the real app object and
  * the real SDK bridge, then renders whatever it registered with Testing
@@ -12,16 +12,17 @@ import { render } from "@testing-library/react";
 import type {
   HostActionContribution,
   PluginManifest,
-} from "@termix/plugin-sdk/frontend";
+} from "@termix-ssh/plugin-sdk/frontend";
 import type {
   FrontendPluginModule,
   RenderWithAppOptions,
   RenderedPluginApp,
   ShellCall,
-} from "@termix/plugin-sdk/testing";
+} from "@termix-ssh/plugin-sdk/testing";
 import i18n from "@/i18n/i18n";
 import type { PluginSummary } from "@/api/plugins-api";
 import { ThemeProvider } from "@/components/theme-provider";
+import { SurfaceScope } from "@/components/surface/surface-scope";
 import { setPermissionsForTesting } from "@/hooks/use-permissions";
 import {
   getTabType,
@@ -72,6 +73,7 @@ import {
 import { PluginViewPlaceholder } from "./PluginViewPlaceholder";
 import { resolveLayoutTabTarget } from "@/shell/shell-layout";
 import { getExtension, listExtensions } from "./extension-registry";
+import { onboardingSteps } from "@/onboarding/onboarding-registry";
 import type { WorkspaceTabSnapshot } from "@/types/ui-types";
 
 function recordingShell(calls: ShellCall[]): TabShellCallbacks {
@@ -98,7 +100,7 @@ function recordingShell(calls: ShellCall[]): TabShellCallbacks {
 function wrap(element: ReactElement): HTMLElement {
   return render(
     <ThemeProvider defaultTheme="dark" storageKey="termix-test-theme">
-      {element}
+      <SurfaceScope className="h-full">{element}</SurfaceScope>
     </ThemeProvider>,
   ).container;
 }
@@ -200,6 +202,8 @@ export async function renderPlugin(
 
   const mine = <T extends { pluginId?: string }>(items: T[]) =>
     items.filter((item) => item.pluginId === pluginId);
+  const unprefixed = (items: { id: string; pluginId?: string }[]) =>
+    mine(items).map((item) => item.id.slice(pluginId.length + 1));
 
   const tabRecord = (type: string, host?: Host): Tab => ({
     id: `${type}-test`,
@@ -256,6 +260,7 @@ export async function renderPlugin(
         mine(listKeybindingActions()).map((action) => action.id),
       keybindingDefaults: () =>
         mine(listKeybindingDefaults()).map((binding) => binding.id),
+      onboardingSteps: () => unprefixed(onboardingSteps.list()),
     },
 
     async loadPaletteGroup(id) {
@@ -331,6 +336,35 @@ export async function renderPlugin(
       return wrap(<Component {...props} />);
     },
 
+    renderOnboardingStep(id, props = {}) {
+      const step =
+        onboardingSteps.get(`${pluginId}:${id}`) ??
+        missing("an onboarding step", id);
+      const Component = step.Component;
+      let canContinue = true;
+      let beforeNext: (() => boolean | Promise<boolean>) | null = null;
+      const element = wrap(
+        <Component
+          mode="full"
+          isAdmin
+          isDesktop={false}
+          shellReady={false}
+          setCanContinue={(ok) => {
+            canContinue = ok;
+          }}
+          setBeforeNext={(fn) => {
+            beforeNext = fn;
+          }}
+          {...props}
+        />,
+      );
+      return {
+        element,
+        canContinue: () => canContinue,
+        next: async () => (beforeNext ? await beforeNext() : true),
+      };
+    },
+
     renderDashboardCard(id) {
       const card = getRegisteredDashboardCard(id) ?? missing("a card", id);
       const Component = card.component;
diff --git a/src/ui/plugin-host/workspace-plugins.ts b/src/ui/plugin-host/workspace-plugins.ts
deleted file mode 100644
index a406a6a71..000000000
--- a/src/ui/plugin-host/workspace-plugins.ts
+++ /dev/null
@@ -1,17 +0,0 @@
-/**
- * Plugin sources in this monorepo, for the Vite dev server.
- *
- * Empty everywhere except `vite dev`, where the termix-plugin-host Vite plugin
- * replaces this module with import.meta.glob calls over plugins/<id>/, so
- * plugin frontends load through Vite with HMR instead of from their built
- * bundles. A production build keeps it empty: plugins are separate bundles
- * served from /plugin-assets, never part of the shell's own build.
- */
-
-type Loader = () => Promise<unknown>;
-
-/** plugin id -> its src/frontend/index.tsx */
-export const workspaceFrontends: Record<string, Loader> = {};
-
-/** plugin id -> locale file ("en", "de_DE") -> JSON */
-export const workspaceLocales: Record<string, Record<string, Loader>> = {};
diff --git a/src/ui/plugins/PluginConsentPrompt.tsx b/src/ui/plugins/PluginConsentPrompt.tsx
new file mode 100644
index 000000000..fa54bac7d
--- /dev/null
+++ b/src/ui/plugins/PluginConsentPrompt.tsx
@@ -0,0 +1,128 @@
+import { useTranslation } from "react-i18next";
+import { TriangleAlert } from "lucide-react";
+import { Button } from "@/components/button";
+import { Facts } from "@/components/panel-layout";
+import { PanePrompt } from "@/components/surface/surface-scope";
+import { CapabilityRow, PluginIconBox } from "./plugin-bits";
+import { capabilityRisk, orderByRisk, type PluginEntry } from "./plugin-model";
+
+export interface ConsentRequest {
+  plugin: PluginEntry;
+  mode: "install" | "update" | "upload";
+  version: string;
+  /** What the prompt lists: all of them to install, only the new ones to update. */
+  capabilities: string[];
+  /** Set for a file uploaded in developer mode. */
+  uploadToken?: string;
+}
+
+/**
+ * Install and update consent. Capabilities read as consequences, worst first;
+ * the low risk ones fold into one line so the list stays short enough to read.
+ */
+export function PluginConsentPrompt({
+  request,
+  busy,
+  onCancel,
+  onConfirm,
+}: {
+  request: ConsentRequest | null;
+  busy?: boolean;
+  onCancel: () => void;
+  onConfirm: () => void;
+}) {
+  const { t } = useTranslation();
+  if (!request) return null;
+  const { plugin, mode, version } = request;
+  const ordered = orderByRisk(request.capabilities);
+  const notable = ordered.filter((c) => capabilityRisk(c) !== "low");
+  const minor = ordered.filter((c) => capabilityRisk(c) === "low");
+
+  return (
+    <PanePrompt
+      open
+      className="max-w-md"
+      onCancel={busy ? undefined : onCancel}
+      icon={<PluginIconBox name={plugin.icon} size="sm" />}
+      title={
+        mode === "update"
+          ? t("plugins.manager.consent.updateTitle", { name: plugin.name })
+          : mode === "upload"
+            ? t("plugins.manager.consent.uploadTitle", { name: plugin.name })
+            : t("plugins.manager.consent.installTitle", { name: plugin.name })
+      }
+      description={
+        <Facts>
+          {plugin.author && <span className="truncate">{plugin.author}</span>}
+          <span className="shrink-0">
+            {mode !== "install" && plugin.version
+              ? t("plugins.manager.versionChange", {
+                  from: plugin.version,
+                  to: version,
+                })
+              : version}
+          </span>
+        </Facts>
+      }
+      actions={
+        <>
+          <Button variant="ghost" onClick={onCancel} disabled={busy}>
+            {t("common.cancel")}
+          </Button>
+          <Button
+            variant="outline"
+            onClick={onConfirm}
+            disabled={busy}
+            className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand dark:border-accent-brand/40 dark:bg-transparent dark:hover:bg-accent-brand/10"
+          >
+            {mode === "update"
+              ? t("plugins.manager.consent.agreeUpdate")
+              : t("plugins.manager.install")}
+          </Button>
+        </>
+      }
+    >
+      <div className="flex flex-col gap-3">
+        {mode === "upload" && (
+          <div className="flex items-start gap-2 border border-warning/40 bg-warning/10 px-3 py-2">
+            <TriangleAlert className="mt-px size-3.5 shrink-0 text-warning" />
+            <span className="text-[11px] leading-snug text-foreground">
+              {t("plugins.manager.consent.uploadWarning")}
+            </span>
+          </div>
+        )}
+        {mode === "update" && (
+          <p className="text-xs leading-relaxed text-foreground">
+            {t("plugins.manager.consent.updateExplain")}
+          </p>
+        )}
+        <div className="flex flex-col">
+          <span className="pb-2 text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
+            {mode === "update"
+              ? t("plugins.manager.consent.newInVersion")
+              : t("plugins.manager.whatItCanDo")}
+          </span>
+          <div className="divide-y divide-border border-y border-border">
+            {notable.map((capability) => (
+              <CapabilityRow
+                key={capability}
+                capability={capability}
+                className="py-2.5"
+              />
+            ))}
+            {minor.length > 0 && (
+              <div className="py-2.5 text-[11px] leading-snug text-muted-foreground">
+                {t("plugins.manager.consent.minor")}
+              </div>
+            )}
+            {ordered.length === 0 && (
+              <div className="py-2.5 text-[11px] leading-snug text-muted-foreground">
+                {t("plugins.manager.consent.none")}
+              </div>
+            )}
+          </div>
+        </div>
+      </div>
+    </PanePrompt>
+  );
+}
diff --git a/src/ui/plugins/PluginDetail.tsx b/src/ui/plugins/PluginDetail.tsx
new file mode 100644
index 000000000..294094c72
--- /dev/null
+++ b/src/ui/plugins/PluginDetail.tsx
@@ -0,0 +1,689 @@
+import { useEffect, useState } from "react";
+import { useTranslation } from "react-i18next";
+import {
+  BookOpen,
+  Bug,
+  Check,
+  Database,
+  Download,
+  ExternalLink,
+  FlaskConical,
+  Lightbulb,
+  Pin,
+  RotateCcw,
+  Settings,
+  Trash2,
+  TriangleAlert,
+} from "lucide-react";
+import { Button } from "@/components/button";
+import { Card } from "@/components/card";
+import { Facts, PANEL } from "@/components/panel-layout";
+import { FakeSwitch, SectionCard } from "@/components/section-card";
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@/components/select";
+import { getPluginData, type PluginDataSummary } from "@/api/plugins-api";
+import {
+  BetaBadge,
+  CapabilityRow,
+  InstallCountFact,
+  PluginIconBox,
+  UnverifiedBadge,
+} from "./plugin-bits";
+import {
+  betaFeedbackUrl,
+  betaToTry,
+  describeContributions,
+  formatBytes,
+  orderByRisk,
+  reportIssueUrl,
+  requestFeatureUrl,
+  type PluginEntry,
+} from "./plugin-model";
+import { openPluginSettings } from "./open-plugins";
+import { hasSettingsPage } from "@/settings/settings-fields-util";
+import { PluginReleaseNotes, PluginVideo } from "./PluginReleaseNotes";
+import type { PluginsManager } from "./use-plugins-manager";
+
+const LINK_ROW =
+  "flex items-center gap-2 border border-border bg-card px-3 py-2.5 text-left text-[11px] text-muted-foreground transition-colors hover:border-accent-brand/40 hover:text-foreground";
+
+export function PluginDetail({
+  plugin,
+  manager,
+  onUninstalled,
+}: {
+  plugin: PluginEntry;
+  manager: PluginsManager;
+  onUninstalled: () => void;
+}) {
+  const { t } = useTranslation();
+  const busy = manager.busy.has(plugin.id) || manager.busy.has("*");
+  const locked = manager.managedByServer;
+  const running = plugin.status === "running";
+  const failed = plugin.status === "failed" || plugin.status === "blocked";
+  const compatible = plugin.versions.filter((v) => v.compatible);
+  const [picked, setPicked] = useState<string>(
+    plugin.version ?? plugin.latestVersion ?? "",
+  );
+
+  useEffect(() => {
+    setPicked(plugin.version ?? plugin.latestVersion ?? "");
+  }, [plugin.version, plugin.latestVersion]);
+
+  const contributions = describeContributions(plugin.contributes);
+  // Only people who can manage plugins get here, and they see admin settings
+  const hasSettings =
+    plugin.installed &&
+    hasSettingsPage(plugin as Parameters<typeof hasSettingsPage>[0], true);
+  const issueUrl = reportIssueUrl(
+    plugin,
+    import.meta.env.VITE_APP_VERSION || undefined,
+  );
+  const featureUrl = requestFeatureUrl(plugin);
+  const feedbackUrl = plugin.isBeta
+    ? betaFeedbackUrl(plugin, import.meta.env.VITE_APP_VERSION || undefined)
+    : null;
+  const tryableBeta = betaToTry(plugin);
+
+  return (
+    <div
+      className={`mx-auto flex w-full max-w-5xl flex-col ${PANEL.gap} ${PANEL.body}`}
+    >
+      <Card className="flex-row flex-wrap items-start gap-4 px-4 py-4">
+        <PluginIconBox
+          name={plugin.icon}
+          size="lg"
+          muted={plugin.installed && !running}
+        />
+        <div className="flex min-w-0 flex-1 flex-col gap-1.5">
+          <h1 className="text-lg font-bold tracking-tight">{plugin.name}</h1>
+          <span className="text-xs leading-relaxed text-muted-foreground">
+            {plugin.description}
+          </span>
+          <Facts className="text-[11px] text-muted-foreground/70">
+            {plugin.unverified && <UnverifiedBadge />}
+            {plugin.isBeta && <BetaBadge />}
+            {plugin.author && <span>{plugin.author}</span>}
+            {plugin.version ? (
+              <span>v{plugin.version}</span>
+            ) : (
+              plugin.latestVersion && <span>v{plugin.latestVersion}</span>
+            )}
+            {plugin.category && <span>{plugin.category}</span>}
+            {plugin.pinnedVersion && (
+              <span>
+                {t("plugins.manager.pinnedTo", {
+                  version: plugin.pinnedVersion,
+                })}
+              </span>
+            )}
+            <InstallCountFact
+              count={plugin.installCount}
+              source={plugin.installCountSource}
+            />
+          </Facts>
+        </div>
+        <div className="flex shrink-0 flex-col gap-1.5">
+          {plugin.installed &&
+            plugin.updateAvailable &&
+            !plugin.pinnedVersion && (
+              <Button
+                variant="outline"
+                size="sm"
+                className="gap-1.5 border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand dark:border-accent-brand/40 dark:bg-transparent dark:hover:bg-accent-brand/10"
+                disabled={busy || locked}
+                onClick={() => void manager.requestUpdate(plugin)}
+              >
+                <Download className="size-3.5" />
+                {t("plugins.manager.updateTo", {
+                  version: plugin.latestVersion,
+                })}
+              </Button>
+            )}
+          {tryableBeta && (
+            <Button
+              variant="outline"
+              size="sm"
+              className="gap-1.5"
+              disabled={busy || locked}
+              onClick={() => void manager.tryBeta(plugin)}
+            >
+              <FlaskConical className="size-3.5" />
+              {t("plugins.manager.beta.try", { version: tryableBeta })}
+            </Button>
+          )}
+          {plugin.installed ? (
+            <>
+              {failed ? (
+                <Button
+                  variant="outline"
+                  size="sm"
+                  className="gap-1.5"
+                  disabled={busy || locked}
+                  onClick={() => void manager.retry(plugin)}
+                >
+                  <RotateCcw className="size-3.5" />
+                  {t("plugins.manager.restart")}
+                </Button>
+              ) : null}
+              <Button
+                variant="outline"
+                size="sm"
+                disabled={busy || locked}
+                onClick={() => void manager.toggle(plugin)}
+              >
+                {plugin.enabled
+                  ? t("plugins.manager.disable")
+                  : t("plugins.manager.enable")}
+              </Button>
+              <Button
+                variant="destructive"
+                size="sm"
+                className="gap-1.5"
+                disabled={busy || locked}
+                onClick={async () => {
+                  if (await manager.uninstall(plugin)) onUninstalled();
+                }}
+              >
+                <Trash2 className="size-3.5" />
+                {t("plugins.manager.uninstall")}
+              </Button>
+            </>
+          ) : (
+            <Button
+              variant="outline"
+              size="sm"
+              className="gap-1.5 border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand dark:border-accent-brand/40 dark:bg-transparent dark:hover:bg-accent-brand/10"
+              disabled={busy || locked || !plugin.latestVersion}
+              onClick={() => manager.requestInstall(plugin)}
+            >
+              <Download className="size-3.5" />
+              {t("plugins.manager.install")}
+            </Button>
+          )}
+        </div>
+      </Card>
+
+      {plugin.installed && failed && plugin.lastError && (
+        <div className="flex items-start gap-2 border border-destructive/30 bg-destructive/5 px-3 py-2.5">
+          <TriangleAlert className="mt-px size-3.5 shrink-0 text-destructive" />
+          <div className="flex min-w-0 flex-col gap-0.5">
+            <span className="text-xs font-medium">
+              {plugin.status === "blocked"
+                ? t("plugins.manager.status.blocked")
+                : t("plugins.manager.status.failed")}
+            </span>
+            <span className="break-words font-mono text-[11px] leading-snug text-muted-foreground">
+              {plugin.lastError}
+            </span>
+          </div>
+        </div>
+      )}
+
+      <div className="grid grid-cols-1 gap-2 lg:grid-cols-3">
+        <div className="flex flex-col gap-2 lg:col-span-2">
+          <PluginVideo videoId={plugin.videoId} name={plugin.name} />
+
+          {plugin.features.length > 0 && (
+            <SectionCard title={t("plugins.manager.features")} icon={null}>
+              <ul className="grid grid-cols-1 gap-x-4 gap-y-1.5 px-4 py-3 sm:grid-cols-2">
+                {plugin.features.map((feature) => (
+                  <li
+                    key={feature}
+                    className="flex items-start gap-2 text-xs leading-snug"
+                  >
+                    <Check className="mt-px size-3.5 shrink-0 text-accent-brand" />
+                    <span>{feature}</span>
+                  </li>
+                ))}
+              </ul>
+            </SectionCard>
+          )}
+
+          <SectionCard title={t("plugins.manager.whatItCanDo")} icon={null}>
+            <div className="divide-y divide-border">
+              {orderByRisk(plugin.capabilities).map((capability) => (
+                <CapabilityRow
+                  key={capability}
+                  capability={capability}
+                  showId
+                  className="px-4 py-2.5"
+                />
+              ))}
+              {plugin.capabilities.length === 0 && (
+                <div className="px-4 py-2.5 text-[11px] text-muted-foreground">
+                  {t("plugins.manager.consent.none")}
+                </div>
+              )}
+            </div>
+          </SectionCard>
+
+          {plugin.env.length > 0 && (
+            <SectionCard title={t("plugins.manager.envVars")} icon={null}>
+              <div className="divide-y divide-border">
+                {plugin.env.map((v) => (
+                  <div
+                    key={v.name}
+                    className="flex flex-col gap-0.5 px-4 py-2.5"
+                  >
+                    <div className="flex flex-wrap items-center gap-2">
+                      <code className="font-mono text-xs font-semibold">
+                        {v.name}
+                      </code>
+                      {v.required && (
+                        <span className="text-[9px] font-bold uppercase tracking-widest text-accent-brand">
+                          {t("plugins.manager.envRequired")}
+                        </span>
+                      )}
+                      {v.default !== undefined && (
+                        <span className="font-mono text-[10px] text-muted-foreground">
+                          {t("plugins.manager.envDefault", {
+                            value: v.default,
+                          })}
+                        </span>
+                      )}
+                    </div>
+                    <span className="text-[11px] leading-snug text-muted-foreground">
+                      {v.description}
+                    </span>
+                  </div>
+                ))}
+              </div>
+            </SectionCard>
+          )}
+
+          <PluginReleaseNotes plugin={plugin} />
+
+          {plugin.installed && (
+            <DataCard
+              plugin={plugin}
+              disabled={busy || locked}
+              onDelete={() => manager.removeData(plugin)}
+            />
+          )}
+        </div>
+
+        <div className="flex flex-col gap-2">
+          {contributions.length > 0 && (
+            <SectionCard title={t("plugins.manager.addsToTermix")} icon={null}>
+              <div className="flex flex-col gap-2 px-4 py-3">
+                <div className="flex flex-wrap gap-1">
+                  {contributions.map((c) => (
+                    <span
+                      key={c.kind}
+                      className="border border-border px-1.5 py-0.5 text-[10px] text-muted-foreground"
+                    >
+                      {t(`plugins.manager.contributes.${c.kind}`, {
+                        count: c.count,
+                      })}
+                    </span>
+                  ))}
+                </div>
+                <span className="text-[11px] leading-snug text-muted-foreground/70">
+                  {t("plugins.manager.addsToTermixHint")}
+                </span>
+              </div>
+            </SectionCard>
+          )}
+
+          {plugin.inRegistry && compatible.length > 0 && (
+            <SectionCard title={t("plugins.manager.version")} icon={null}>
+              <div className="flex flex-col gap-2 px-4 py-3">
+                <span className="text-[11px] leading-snug text-muted-foreground">
+                  {plugin.installed
+                    ? t("plugins.manager.versionPickHintInstalled")
+                    : t("plugins.manager.versionPickHint")}
+                </span>
+                <div className="flex items-center gap-2">
+                  <Select value={picked} onValueChange={setPicked}>
+                    <SelectTrigger size="sm" className="flex-1 text-xs">
+                      <SelectValue />
+                    </SelectTrigger>
+                    <SelectContent>
+                      {compatible.map((v) => (
+                        <SelectItem
+                          key={v.version}
+                          value={v.version}
+                          className="text-xs"
+                        >
+                          {v.version === plugin.latestVersion
+                            ? t("plugins.manager.latestVersion", {
+                                version: v.version,
+                              })
+                            : v.prerelease
+                              ? t("plugins.manager.beta.versionLabel", {
+                                  version: v.version,
+                                })
+                              : v.version}
+                        </SelectItem>
+                      ))}
+                    </SelectContent>
+                  </Select>
+                  <Button
+                    size="sm"
+                    variant="outline"
+                    className="h-8"
+                    disabled={
+                      busy || locked || !picked || picked === plugin.version
+                    }
+                    onClick={() =>
+                      plugin.installed
+                        ? void manager.requestUpdate(plugin, picked)
+                        : manager.requestInstall(plugin, picked)
+                    }
+                  >
+                    {plugin.installed
+                      ? t("plugins.manager.switchVersion")
+                      : t("plugins.manager.install")}
+                  </Button>
+                </div>
+              </div>
+            </SectionCard>
+          )}
+
+          {plugin.installed && (
+            <SectionCard title={t("plugins.manager.updates")} icon={null}>
+              <div className="divide-y divide-border">
+                <div className="flex items-center justify-between gap-3 px-4 py-3">
+                  <div className="flex min-w-0 flex-col gap-0.5">
+                    <span className="text-xs font-medium">
+                      {t("plugins.manager.autoUpdate")}
+                    </span>
+                    <span className="text-[11px] leading-snug text-muted-foreground">
+                      {t("plugins.manager.autoUpdateHint")}
+                    </span>
+                  </div>
+                  <FakeSwitch
+                    checked={plugin.autoUpdate}
+                    disabled={busy || locked || !!plugin.pinnedVersion}
+                    onChange={(v) =>
+                      void manager.setOptions(plugin, { autoUpdate: v })
+                    }
+                  />
+                </div>
+                <div className="flex items-center justify-between gap-3 px-4 py-3">
+                  <div className="flex min-w-0 flex-col gap-0.5">
+                    <span className="flex items-center gap-1.5 text-xs font-medium">
+                      <FlaskConical className="size-3 text-muted-foreground" />
+                      {t("plugins.manager.beta.channel")}
+                    </span>
+                    <span className="text-[11px] leading-snug text-muted-foreground">
+                      {plugin.channel === "stable" && plugin.isBeta
+                        ? t("plugins.manager.beta.waitingForStable", {
+                            version: plugin.version,
+                          })
+                        : t("plugins.manager.beta.channelHint")}
+                    </span>
+                  </div>
+                  <FakeSwitch
+                    checked={plugin.channel === "beta"}
+                    disabled={busy || locked}
+                    onChange={(v) =>
+                      void (v
+                        ? manager.tryBeta(plugin)
+                        : manager.leaveBeta(plugin))
+                    }
+                  />
+                </div>
+                <div className="flex items-center justify-between gap-3 px-4 py-3">
+                  <div className="flex min-w-0 flex-col gap-0.5">
+                    <span className="flex items-center gap-1.5 text-xs font-medium">
+                      <Pin className="size-3 text-muted-foreground" />
+                      {t("plugins.manager.pin")}
+                    </span>
+                    <span className="text-[11px] leading-snug text-muted-foreground">
+                      {t("plugins.manager.pinHint", {
+                        version: plugin.version,
+                      })}
+                    </span>
+                  </div>
+                  <FakeSwitch
+                    checked={!!plugin.pinnedVersion}
+                    disabled={busy || locked}
+                    onChange={(v) =>
+                      void manager.setOptions(plugin, { pinned: v })
+                    }
+                  />
+                </div>
+              </div>
+            </SectionCard>
+          )}
+
+          {plugin.docs && (
+            <a
+              href={plugin.docs}
+              target="_blank"
+              rel="noreferrer"
+              className={LINK_ROW}
+            >
+              <BookOpen className="size-3.5 shrink-0" />
+              <span className="truncate">
+                {t("plugins.manager.documentation")}
+              </span>
+            </a>
+          )}
+
+          {hasSettings && (
+            <button
+              type="button"
+              onClick={() => openPluginSettings(plugin.id)}
+              className={LINK_ROW}
+            >
+              <Settings className="size-3.5 shrink-0" />
+              <span className="truncate">
+                {t("plugins.manager.openSettings")}
+              </span>
+            </button>
+          )}
+
+          {issueUrl && (
+            <a
+              href={issueUrl}
+              target="_blank"
+              rel="noreferrer"
+              className={LINK_ROW}
+            >
+              <Bug className="size-3.5 shrink-0" />
+              <span className="truncate">
+                {plugin.source === "official" ||
+                plugin.source === "bundled" ||
+                !plugin.author
+                  ? t("plugins.manager.reportIssue")
+                  : t("plugins.manager.reportTo", { author: plugin.author })}
+              </span>
+            </a>
+          )}
+
+          {feedbackUrl && (
+            <a
+              href={feedbackUrl}
+              target="_blank"
+              rel="noreferrer"
+              className={LINK_ROW}
+            >
+              <FlaskConical className="size-3.5 shrink-0" />
+              <span className="truncate">
+                {t("plugins.manager.beta.sendFeedback")}
+              </span>
+            </a>
+          )}
+
+          {featureUrl && (
+            <a
+              href={featureUrl}
+              target="_blank"
+              rel="noreferrer"
+              className={LINK_ROW}
+            >
+              <Lightbulb className="size-3.5 shrink-0" />
+              <span className="truncate">
+                {t("plugins.manager.requestFeature")}
+              </span>
+            </a>
+          )}
+
+          {plugin.repository && (
+            <a
+              href={plugin.repository}
+              target="_blank"
+              rel="noreferrer"
+              className={LINK_ROW}
+            >
+              <ExternalLink className="size-3.5 shrink-0" />
+              <span className="truncate">
+                {plugin.repository.replace(/^https?:\/\//, "")}
+              </span>
+            </a>
+          )}
+        </div>
+      </div>
+    </div>
+  );
+}
+
+function DataCard({
+  plugin,
+  disabled,
+  onDelete,
+}: {
+  plugin: PluginEntry;
+  disabled: boolean;
+  onDelete: () => Promise<boolean>;
+}) {
+  const { t } = useTranslation();
+  const [data, setData] = useState<PluginDataSummary | null>(null);
+  const [error, setError] = useState(false);
+  const [version, setVersion] = useState(0);
+
+  useEffect(() => {
+    let cancelled = false;
+    setError(false);
+    getPluginData(plugin.id)
+      .then((summary) => {
+        if (!cancelled) setData(summary);
+      })
+      .catch(() => {
+        if (!cancelled) setError(true);
+      });
+    return () => {
+      cancelled = true;
+    };
+  }, [plugin.id, plugin.version, version]);
+
+  const settings = data
+    ? data.settings.admin + data.settings.user + data.settings.host
+    : 0;
+  const rows = data?.tables.reduce((sum, table) => sum + (table.rows ?? 0), 0);
+
+  return (
+    <SectionCard
+      title={t("plugins.manager.data.title")}
+      icon={<Database className="size-3.5" />}
+      action={
+        <Button
+          variant="ghost"
+          size="xs"
+          className="gap-1 text-muted-foreground hover:text-destructive"
+          disabled={disabled}
+          onClick={async () => {
+            if (await onDelete()) setVersion((v) => v + 1);
+          }}
+        >
+          <Trash2 className="size-3" />
+          {t("plugins.manager.data.delete")}
+        </Button>
+      }
+    >
+      {error ? (
+        <div className="px-4 py-3 text-[11px] text-muted-foreground">
+          {t("plugins.manager.data.loadFailed")}
+        </div>
+      ) : !data ? (
+        <div className="px-4 py-3 text-[11px] text-muted-foreground">
+          {t("plugins.manager.loading")}
+        </div>
+      ) : (
+        <div className="-mx-3 -my-1 flex flex-col md:-mx-4">
+          <div className="grid grid-cols-2 gap-px bg-border sm:grid-cols-4">
+            <Stat
+              label={t("plugins.manager.data.tables")}
+              value={`${data.tables.length}`}
+              hint={t("plugins.manager.data.rows", { count: rows ?? 0 })}
+            />
+            <Stat
+              label={t("plugins.manager.data.kv")}
+              value={`${data.kvKeys}`}
+            />
+            <Stat
+              label={t("plugins.manager.data.settings")}
+              value={`${settings}`}
+              hint={t("plugins.manager.data.secrets", {
+                count: data.settings.secret,
+              })}
+            />
+            <Stat
+              label={t("plugins.manager.data.files")}
+              value={formatBytes(data.filesBytes)}
+            />
+          </div>
+          {data.tables.length > 0 && (
+            <div className="divide-y divide-border border-t border-border">
+              {data.tables.map((table) => (
+                <div
+                  key={table.name}
+                  className="flex items-center gap-2 px-4 py-1.5"
+                >
+                  <span className="min-w-0 flex-1 truncate font-mono text-[11px]">
+                    {table.name}
+                  </span>
+                  <span className="shrink-0 text-[11px] text-muted-foreground">
+                    {table.rows === null
+                      ? "-"
+                      : t("plugins.manager.data.rows", { count: table.rows })}
+                  </span>
+                </div>
+              ))}
+            </div>
+          )}
+          <div className="flex flex-wrap gap-x-4 gap-y-1 border-t border-border px-4 py-2 text-[11px] text-muted-foreground">
+            <span>
+              {t("plugins.manager.data.migrations", {
+                count: data.migrations.length,
+              })}
+            </span>
+            <span>
+              {t("plugins.manager.data.grants", { count: data.grants.length })}
+            </span>
+          </div>
+        </div>
+      )}
+    </SectionCard>
+  );
+}
+
+function Stat({
+  label,
+  value,
+  hint,
+}: {
+  label: string;
+  value: string;
+  hint?: string;
+}) {
+  return (
+    <div className="flex flex-col gap-0.5 bg-card px-4 py-2.5">
+      <span className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground">
+        {label}
+      </span>
+      <span className="text-sm font-semibold">{value}</span>
+      {hint && (
+        <span className="text-[10px] text-muted-foreground">{hint}</span>
+      )}
+    </div>
+  );
+}
diff --git a/src/ui/plugins/PluginReleaseNotes.tsx b/src/ui/plugins/PluginReleaseNotes.tsx
new file mode 100644
index 000000000..621285462
--- /dev/null
+++ b/src/ui/plugins/PluginReleaseNotes.tsx
@@ -0,0 +1,227 @@
+import { useEffect, useMemo, useState } from "react";
+import { useTranslation } from "react-i18next";
+import { Button } from "@/components/button";
+import { SectionCard } from "@/components/section-card";
+import { getPluginChangelog } from "@/api/plugins-api";
+import type { ChangelogRelease } from "@termix-ssh/plugin-sdk/changelog";
+import {
+  groupChanges,
+  mergeReleaseNotes,
+  youtubeEmbedUrl,
+  type PluginEntry,
+  type ReleaseRow,
+} from "./plugin-model";
+
+/** A long release shows this many changes until it is opened up. */
+const MAX_CHANGES = 8;
+
+function formatDate(value: string | null): string {
+  if (!value) return "";
+  const date = new Date(value);
+  return Number.isNaN(date.getTime()) ? value : date.toLocaleDateString();
+}
+
+/** Backticks become code, everything else stays plain text. */
+function InlineText({ text }: { text: string }) {
+  return (
+    <>
+      {text.split(/(`[^`]+`)/).map((part, i) =>
+        part.length > 2 && part.startsWith("`") && part.endsWith("`") ? (
+          <code
+            key={i}
+            className="bg-muted px-1 py-px font-mono text-[10px] text-foreground"
+          >
+            {part.slice(1, -1)}
+          </code>
+        ) : (
+          <span key={i}>{part}</span>
+        ),
+      )}
+    </>
+  );
+}
+
+function Release({
+  row,
+  installedVersion,
+}: {
+  row: ReleaseRow;
+  installedVersion: string | null;
+}) {
+  const { t } = useTranslation();
+  const [full, setFull] = useState(false);
+  const all = groupChanges(row.changes);
+  const hidden = full ? 0 : Math.max(0, row.changes.length - MAX_CHANGES);
+  let budget = full ? Infinity : MAX_CHANGES;
+  const groups = all
+    .map((group) => {
+      const items = group.items.slice(0, Math.max(0, budget));
+      budget -= items.length;
+      return { ...group, items };
+    })
+    .filter((group) => group.items.length > 0);
+
+  return (
+    <div className="flex flex-col gap-2 px-4 py-3">
+      <div className="flex flex-wrap items-center gap-2">
+        <span className="text-xs font-semibold">{row.version}</span>
+        {row.version === installedVersion && (
+          <span className="border border-accent-brand/40 bg-accent-brand/10 px-1.5 py-0.5 text-[10px] font-bold uppercase tracking-wider text-accent-brand">
+            {t("plugins.manager.installedBadge")}
+          </span>
+        )}
+        {!row.compatible && (
+          <span className="border border-warning/40 bg-warning/10 px-1.5 py-0.5 text-[10px] font-bold uppercase tracking-wider text-warning">
+            {t("plugins.manager.incompatible")}
+          </span>
+        )}
+        <span className="ml-auto text-[10px] text-muted-foreground">
+          {formatDate(row.date)}
+        </span>
+      </div>
+      {row.summary && (
+        <p
+          className={`whitespace-pre-line text-[11px] leading-relaxed text-muted-foreground ${full ? "" : "line-clamp-4"}`}
+        >
+          <InlineText text={row.summary} />
+        </p>
+      )}
+      {groups.map((group) => (
+        <div key={group.type} className="flex flex-col gap-1">
+          <span className="text-[10px] font-semibold uppercase tracking-widest text-muted-foreground/70">
+            {t(`plugins.manager.changeTypes.${group.type}`)}
+          </span>
+          <ul className="flex list-disc flex-col gap-0.5 pl-4 text-[11px] leading-snug">
+            {group.items.map((item, i) => (
+              <li key={i} className="whitespace-pre-line">
+                <InlineText text={item} />
+              </li>
+            ))}
+          </ul>
+        </div>
+      ))}
+      {hidden > 0 && (
+        <button
+          type="button"
+          onClick={() => setFull(true)}
+          className="w-fit text-[11px] text-muted-foreground hover:text-accent-brand"
+        >
+          {t("plugins.manager.showMoreChanges", { count: hidden })}
+        </button>
+      )}
+      {groups.length === 0 && !row.summary && (
+        <span className="text-[11px] text-muted-foreground">
+          {t("plugins.manager.noReleaseNotes")}
+        </span>
+      )}
+      {row.releaseNotesUrl && (
+        <a
+          href={row.releaseNotesUrl}
+          target="_blank"
+          rel="noreferrer"
+          className="w-fit text-[11px] text-muted-foreground hover:text-accent-brand"
+        >
+          {t("plugins.manager.viewRelease")}
+        </a>
+      )}
+    </div>
+  );
+}
+
+/**
+ * The newest version's notes, from the registry and the installed
+ * CHANGELOG.md, with older versions behind a toggle in a capped scroll area.
+ * Renders nothing when there are no versions to list.
+ */
+export function PluginReleaseNotes({ plugin }: { plugin: PluginEntry }) {
+  const { t } = useTranslation();
+  const [local, setLocal] = useState<ChangelogRelease[]>([]);
+  const [showOlder, setShowOlder] = useState(false);
+
+  useEffect(() => {
+    let cancelled = false;
+    setLocal([]);
+    if (!plugin.installed) return;
+    getPluginChangelog(plugin.id)
+      .then((releases) => {
+        if (!cancelled) setLocal(releases);
+      })
+      .catch(() => {});
+    return () => {
+      cancelled = true;
+    };
+  }, [plugin.id, plugin.installed, plugin.version]);
+
+  const rows = useMemo(
+    () => mergeReleaseNotes(plugin.versions, local),
+    [plugin.versions, local],
+  );
+  if (rows.length === 0) return null;
+  const [latest, ...older] = rows;
+
+  return (
+    <SectionCard
+      title={t("plugins.manager.releaseNotes")}
+      icon={null}
+      action={
+        older.length > 0 ? (
+          <Button
+            variant="ghost"
+            size="xs"
+            className="text-muted-foreground"
+            onClick={() => setShowOlder((v) => !v)}
+          >
+            {showOlder
+              ? t("plugins.manager.hideOlderReleases")
+              : t("plugins.manager.showOlderReleases", {
+                  count: older.length,
+                })}
+          </Button>
+        ) : undefined
+      }
+    >
+      <div className="-mx-3 -my-1 md:-mx-4">
+        <Release row={latest} installedVersion={plugin.version} />
+        {showOlder && older.length > 0 && (
+          <div className="max-h-96 divide-y divide-border overflow-y-auto border-t border-border">
+            {older.map((row) => (
+              <Release
+                key={row.version}
+                row={row}
+                installedVersion={plugin.version}
+              />
+            ))}
+          </div>
+        )}
+      </div>
+    </SectionCard>
+  );
+}
+
+/** The plugin's YouTube video. Nothing is loaded when it has none. */
+export function PluginVideo({
+  videoId,
+  name,
+}: {
+  videoId?: string;
+  name: string;
+}) {
+  const { t } = useTranslation();
+  const src = youtubeEmbedUrl(videoId);
+  if (!src) return null;
+
+  return (
+    <div className="aspect-video w-full border border-border bg-black">
+      <iframe
+        src={src}
+        title={t("plugins.manager.videoTitle", { name })}
+        className="size-full"
+        loading="lazy"
+        referrerPolicy="strict-origin-when-cross-origin"
+        sandbox="allow-scripts allow-same-origin allow-presentation allow-popups allow-popups-to-escape-sandbox"
+        allow="encrypted-media; picture-in-picture; fullscreen"
+        allowFullScreen
+      />
+    </div>
+  );
+}
diff --git a/src/ui/plugins/PluginsTab.tsx b/src/ui/plugins/PluginsTab.tsx
new file mode 100644
index 000000000..7f841dde0
--- /dev/null
+++ b/src/ui/plugins/PluginsTab.tsx
@@ -0,0 +1,1294 @@
+import { useEffect, useMemo, useRef, useState } from "react";
+import { useTranslation } from "react-i18next";
+import {
+  ArrowDownWideNarrow,
+  Check,
+  Columns3,
+  Download,
+  Globe,
+  Puzzle,
+  RefreshCw,
+  RotateCcw,
+  Search,
+  Trash2,
+  TriangleAlert,
+  Upload,
+} from "lucide-react";
+import { Button } from "@/components/button";
+import { Card } from "@/components/card";
+import { Input } from "@/components/input";
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@/components/select";
+import { EmptyState } from "@/components/empty-state";
+import { TabStrip } from "@/components/tab-strip";
+import { FakeSwitch } from "@/components/section-card";
+import {
+  Facts,
+  GroupHeading,
+  PANEL,
+  PanelShell,
+  ViewToggle,
+  type PanelViewMode,
+} from "@/components/panel-layout";
+import { DataView, type DataColumn } from "@/components/data-view";
+import { InlineView, SurfaceScope } from "@/components/surface/surface-scope";
+import { cn } from "@/lib/utils";
+import {
+  BetaBadge,
+  InstallCountFact,
+  PluginIconBox,
+  UnverifiedBadge,
+} from "./plugin-bits";
+import { PluginConsentPrompt } from "./PluginConsentPrompt";
+import { PluginDetail } from "./PluginDetail";
+import {
+  categoriesOf,
+  describeContributions,
+  isSevere,
+  matchesQuery,
+  orderByRisk,
+  sortPlugins,
+  type PluginEntry,
+  type SortKey,
+} from "./plugin-model";
+import { usePluginsManager, type PluginsManager } from "./use-plugins-manager";
+import { docsUrl } from "@/lib/docs";
+import { DocsLink } from "@/components/docs-link";
+
+type Section = "installed" | "browse" | "updates";
+
+const GRID_SIZES = ["auto", "2", "3", "4", "5", "6"] as const;
+type GridSize = (typeof GRID_SIZES)[number];
+
+interface Layout {
+  view: PanelViewMode;
+  columns: GridSize;
+}
+
+function useStoredChoice<T extends string>(
+  key: string,
+  allowed: readonly T[],
+  fallback: T,
+) {
+  const [value, setValue] = useState<T>(() => {
+    try {
+      const saved = localStorage.getItem(key);
+      return allowed.includes(saved as T) ? (saved as T) : fallback;
+    } catch {
+      return fallback;
+    }
+  });
+  useEffect(() => {
+    try {
+      localStorage.setItem(key, value);
+    } catch {
+      // blocked storage just means the choice won't stick
+    }
+  }, [key, value]);
+  return [value, setValue] as const;
+}
+
+export function PluginsTab() {
+  return (
+    <SurfaceScope kind="tab" className="h-full min-h-0">
+      <PluginsTabBody />
+    </SurfaceScope>
+  );
+}
+
+function PluginsTabBody() {
+  const { t } = useTranslation();
+  const manager = usePluginsManager();
+  const [section, setSection] = useState<Section>("installed");
+  const [query, setQuery] = useState("");
+  const [detailId, setDetailId] = useState<string | null>(null);
+  const [view, setView] = useStoredChoice<PanelViewMode>(
+    "pluginsTab.view",
+    ["grid", "list"],
+    "grid",
+  );
+  const [columns, setColumns] = useStoredChoice<GridSize>(
+    "pluginsTab.columns",
+    GRID_SIZES,
+    "auto",
+  );
+  const layout: Layout = { view, columns };
+  const layoutControls = (
+    <LayoutControls layout={layout} onView={setView} onColumns={setColumns} />
+  );
+
+  const installed = manager.plugins.filter((p) => p.installed);
+  const available = manager.plugins.filter((p) => p.inRegistry);
+  const updates = installed.filter((p) => p.updateAvailable);
+  const running = installed.filter((p) => p.status === "running").length;
+  const detail = manager.plugins.find((p) => p.id === detailId) ?? null;
+
+  const tabs = [
+    {
+      id: "installed",
+      label: t("plugins.manager.tabs.installed"),
+      icon: <Puzzle className="size-3" />,
+      count: installed.length,
+    },
+    {
+      id: "browse",
+      label: t("plugins.manager.tabs.browse"),
+      icon: <Globe className="size-3" />,
+    },
+    {
+      id: "updates",
+      label: t("plugins.manager.tabs.updates"),
+      icon: <Download className="size-3" />,
+      count: updates.filter((p) => !p.pinnedVersion).length || undefined,
+    },
+  ];
+
+  return (
+    <>
+      <PanelShell
+        icon={<Puzzle className="size-4" />}
+        title={t("nav.plugins")}
+        docs={docsUrl("plugins")}
+        status={t("plugins.manager.status.summary", {
+          installed: installed.length,
+          running,
+        })}
+        scroll={false}
+        actions={
+          <Button
+            variant="ghost"
+            size="icon-sm"
+            title={t("plugins.manager.checkRegistry")}
+            aria-label={t("plugins.manager.checkRegistry")}
+            disabled={manager.refreshing}
+            onClick={() => void manager.refresh()}
+            className="text-muted-foreground"
+          >
+            <RefreshCw
+              className={cn("size-3.5", manager.refreshing && "animate-spin")}
+            />
+          </Button>
+        }
+        tabs={
+          <TabStrip
+            tabs={tabs}
+            activeTab={section}
+            onTabChange={(id) => setSection(id as Section)}
+          />
+        }
+      >
+        <div className="min-h-0 flex-1 overflow-y-auto thin-scrollbar">
+          {manager.managedByServer && (
+            <Notice>{t("plugins.manager.managedByServer")}</Notice>
+          )}
+          {manager.registryError && (
+            <Notice>
+              {t("plugins.manager.registryUnreachable", {
+                error: manager.registryError,
+              })}
+            </Notice>
+          )}
+          {manager.loading ? (
+            <div className={PANEL.body}>
+              <EmptyState icon={Puzzle} title={t("plugins.manager.loading")} />
+            </div>
+          ) : section === "installed" ? (
+            <InstalledSection
+              plugins={installed}
+              manager={manager}
+              query={query}
+              onQuery={setQuery}
+              onOpen={setDetailId}
+              layout={layout}
+              layoutControls={layoutControls}
+            />
+          ) : section === "browse" ? (
+            <BrowseSection
+              plugins={available}
+              manager={manager}
+              query={query}
+              onQuery={setQuery}
+              onOpen={setDetailId}
+              layout={layout}
+              layoutControls={layoutControls}
+            />
+          ) : (
+            <UpdatesSection
+              plugins={updates}
+              manager={manager}
+              onOpen={setDetailId}
+            />
+          )}
+        </div>
+      </PanelShell>
+
+      <InlineView
+        open={!!detail}
+        onOpenChange={(open) => !open && setDetailId(null)}
+        title={detail?.name ?? ""}
+        icon={<Puzzle className="size-4" />}
+        width="wide"
+        bare
+      >
+        {detail && (
+          <PluginDetail
+            plugin={detail}
+            manager={manager}
+            onUninstalled={() => setDetailId(null)}
+          />
+        )}
+      </InlineView>
+
+      <PluginConsentPrompt
+        request={manager.consent}
+        onCancel={() => manager.setConsent(null)}
+        onConfirm={() => void manager.confirmConsent()}
+      />
+    </>
+  );
+}
+
+function Notice({ children }: { children: React.ReactNode }) {
+  return (
+    <div className="flex items-start gap-2 border-b border-warning/30 bg-warning/5 px-3 py-2">
+      <TriangleAlert className="mt-px size-3.5 shrink-0 text-warning" />
+      <span className="text-[11px] leading-snug text-muted-foreground">
+        {children}
+      </span>
+    </div>
+  );
+}
+
+function SortSelect({
+  value,
+  onChange,
+}: {
+  value: SortKey;
+  onChange: (next: SortKey) => void;
+}) {
+  const { t } = useTranslation();
+  const keys: SortKey[] = ["popular", "name", "updated", "category"];
+  return (
+    <Select value={value} onValueChange={(v) => onChange(v as SortKey)}>
+      <SelectTrigger size="sm" className="w-auto gap-1.5 text-xs">
+        <ArrowDownWideNarrow className="size-3.5 text-muted-foreground" />
+        <SelectValue />
+      </SelectTrigger>
+      <SelectContent>
+        {keys.map((key) => (
+          <SelectItem key={key} value={key} className="text-xs">
+            {t(`plugins.manager.sort.${key}`)}
+          </SelectItem>
+        ))}
+      </SelectContent>
+    </Select>
+  );
+}
+
+function Toolbar({
+  query,
+  onQuery,
+  placeholder,
+  children,
+}: {
+  query: string;
+  onQuery: (v: string) => void;
+  placeholder: string;
+  children?: React.ReactNode;
+}) {
+  return (
+    <div className="flex flex-wrap items-center gap-2">
+      <div className="relative min-w-40 max-w-xs flex-1">
+        <Search className="pointer-events-none absolute left-2.5 top-1/2 size-3.5 -translate-y-1/2 text-muted-foreground" />
+        <Input
+          value={query}
+          onChange={(e) => onQuery(e.target.value)}
+          placeholder={placeholder}
+          className="h-8 pl-8 text-xs"
+        />
+      </div>
+      {children}
+    </div>
+  );
+}
+
+function Group({
+  title,
+  count,
+  children,
+}: {
+  title: string;
+  count: number;
+  children: React.ReactNode;
+}) {
+  return (
+    <section className="flex flex-col gap-2.5">
+      <GroupHeading title={title} count={count} />
+      {children}
+    </section>
+  );
+}
+
+function LayoutControls({
+  layout,
+  onView,
+  onColumns,
+}: {
+  layout: Layout;
+  onView: (next: PanelViewMode) => void;
+  onColumns: (next: GridSize) => void;
+}) {
+  const { t } = useTranslation();
+  return (
+    <>
+      {layout.view === "grid" && (
+        <Select
+          value={layout.columns}
+          onValueChange={(v) => onColumns(v as GridSize)}
+        >
+          <SelectTrigger
+            size="sm"
+            className="w-auto gap-1.5 text-xs"
+            title={t("plugins.manager.columns.title")}
+            aria-label={t("plugins.manager.columns.title")}
+          >
+            <Columns3 className="size-3.5 text-muted-foreground" />
+            <SelectValue />
+          </SelectTrigger>
+          <SelectContent>
+            {GRID_SIZES.map((size) => (
+              <SelectItem key={size} value={size} className="text-xs">
+                {size === "auto"
+                  ? t("plugins.manager.columns.auto")
+                  : t("plugins.manager.columns.count", { count: Number(size) })}
+              </SelectItem>
+            ))}
+          </SelectContent>
+        </Select>
+      )}
+      <ViewToggle view={layout.view} onView={onView} />
+    </>
+  );
+}
+
+// Sized off the tab's own width, not the window. Cards keep a min width,
+// so narrow panes drop columns on their own.
+function gridStyle(columns: GridSize): React.CSSProperties {
+  if (columns === "auto") {
+    return {
+      gridTemplateColumns: "repeat(auto-fill, minmax(min(100%, 400px), 1fr))",
+    };
+  }
+  const n = Number(columns);
+  const gaps = (n - 1) * 12;
+  return {
+    gridTemplateColumns: `repeat(auto-fill, minmax(max(220px, calc((100% - ${gaps}px) / ${n} - 0.5px)), 1fr))`,
+  };
+}
+
+function PluginCollection({
+  plugins,
+  layout,
+  renderCard,
+  listColumns,
+  onOpen,
+}: {
+  plugins: PluginEntry[];
+  layout: Layout;
+  renderCard: (plugin: PluginEntry) => React.ReactNode;
+  listColumns: DataColumn<PluginEntry>[];
+  onOpen: (id: string) => void;
+}) {
+  if (layout.view === "list") {
+    return (
+      <DataView
+        items={plugins}
+        view="list"
+        getKey={(p) => p.id}
+        renderCard={renderCard}
+        columns={{}}
+        listColumns={listColumns}
+        onRowClick={(p) => onOpen(p.id)}
+        empty={null}
+      />
+    );
+  }
+  return (
+    <div className="grid gap-3" style={gridStyle(layout.columns)}>
+      {plugins.map((p) => (
+        <div key={p.id} className="flex flex-col *:flex-1">
+          {renderCard(p)}
+        </div>
+      ))}
+    </div>
+  );
+}
+
+function NameCell({ plugin, muted }: { plugin: PluginEntry; muted?: boolean }) {
+  return (
+    <div className="flex min-w-0 items-center gap-2">
+      <PluginIconBox name={plugin.icon} size="sm" muted={muted} />
+      <span
+        className={cn(
+          "truncate font-semibold",
+          muted && "text-muted-foreground",
+        )}
+      >
+        {plugin.name}
+      </span>
+      {plugin.unverified && <UnverifiedBadge />}
+      {plugin.isBeta && <BetaBadge />}
+    </div>
+  );
+}
+
+function DescriptionCell({ plugin }: { plugin: PluginEntry }) {
+  return (
+    <span className="text-muted-foreground" title={plugin.description}>
+      {plugin.description}
+    </span>
+  );
+}
+
+function stop(e: React.MouseEvent) {
+  e.stopPropagation();
+}
+
+function InstalledSection({
+  plugins,
+  manager,
+  query,
+  onQuery,
+  onOpen,
+  layout,
+  layoutControls,
+}: {
+  plugins: PluginEntry[];
+  manager: PluginsManager;
+  query: string;
+  onQuery: (v: string) => void;
+  onOpen: (id: string) => void;
+  layout: Layout;
+  layoutControls: React.ReactNode;
+}) {
+  const { t } = useTranslation();
+  const [sort, setSort] = useState<SortKey>("name");
+  const rows = sortPlugins(
+    plugins.filter((p) => matchesQuery(p, query)),
+    sort,
+  );
+  const running = rows.filter((p) => p.status === "running");
+  const stopped = rows.filter((p) => p.status !== "running");
+  const pending = plugins.filter((p) => p.updateAvailable && !p.pinnedVersion);
+
+  const listColumns: DataColumn<PluginEntry>[] = [
+    {
+      key: "name",
+      header: t("plugins.manager.table.name"),
+      width: "minmax(0,1.3fr)",
+      cell: (p) => <NameCell plugin={p} muted={p.status !== "running"} />,
+    },
+    {
+      key: "description",
+      header: t("plugins.manager.table.description"),
+      width: "minmax(0,2fr)",
+      hideBelow: "md",
+      cell: (p) => <DescriptionCell plugin={p} />,
+    },
+    {
+      key: "version",
+      header: t("plugins.manager.table.version"),
+      width: "80px",
+      cell: (p) => (
+        <span className="tabular-nums text-muted-foreground">v{p.version}</span>
+      ),
+    },
+    {
+      key: "status",
+      header: t("plugins.manager.table.status"),
+      width: "140px",
+      hideBelow: "lg",
+      cell: (p) => <StatusCell plugin={p} />,
+    },
+    {
+      key: "actions",
+      header: "",
+      width: "150px",
+      align: "end",
+      cell: (p) => <InstalledRowActions plugin={p} manager={manager} />,
+    },
+  ];
+  const collection = (items: PluginEntry[]) => (
+    <PluginCollection
+      plugins={items}
+      layout={layout}
+      renderCard={(p) => (
+        <InstalledCard
+          plugin={p}
+          manager={manager}
+          onOpen={() => onOpen(p.id)}
+        />
+      )}
+      listColumns={listColumns}
+      onOpen={onOpen}
+    />
+  );
+
+  return (
+    <div className={`flex flex-col ${PANEL.gap} ${PANEL.body}`}>
+      <Toolbar
+        query={query}
+        onQuery={onQuery}
+        placeholder={t("plugins.manager.searchInstalled")}
+      >
+        <div className="ml-auto flex items-center gap-2">
+          <SortSelect value={sort} onChange={setSort} />
+          {layoutControls}
+          {manager.developerMode && !manager.signedOnly && (
+            <UploadButton manager={manager} />
+          )}
+          <Button
+            variant="outline"
+            className="gap-1.5"
+            disabled={
+              pending.length === 0 ||
+              manager.busy.size > 0 ||
+              manager.managedByServer
+            }
+            onClick={() => void manager.updateAll()}
+          >
+            <Download className="size-3.5" />
+            {t("plugins.manager.updateAll")}
+          </Button>
+        </div>
+      </Toolbar>
+
+      {rows.length === 0 ? (
+        <EmptyState
+          icon={Puzzle}
+          title={
+            plugins.length === 0
+              ? t("plugins.manager.noneInstalled")
+              : t("plugins.manager.nothingMatches")
+          }
+        />
+      ) : (
+        <>
+          {running.length > 0 && (
+            <Group
+              title={t("plugins.manager.groups.running")}
+              count={running.length}
+            >
+              {collection(running)}
+            </Group>
+          )}
+          {stopped.length > 0 && (
+            <Group
+              title={t("plugins.manager.groups.notRunning")}
+              count={stopped.length}
+            >
+              {collection(stopped)}
+            </Group>
+          )}
+        </>
+      )}
+    </div>
+  );
+}
+
+function UploadButton({ manager }: { manager: PluginsManager }) {
+  const { t } = useTranslation();
+  const input = useRef<HTMLInputElement>(null);
+  return (
+    <>
+      <input
+        ref={input}
+        type="file"
+        accept=".tmxplug"
+        className="hidden"
+        onChange={(e) => {
+          const file = e.target.files?.[0];
+          e.target.value = "";
+          if (file) void manager.requestUpload(file);
+        }}
+      />
+      <Button
+        variant="outline"
+        className="gap-1.5"
+        disabled={manager.busy.size > 0 || manager.managedByServer}
+        onClick={() => input.current?.click()}
+      >
+        <Upload className="size-3.5" />
+        {t("plugins.manager.developer.installFromFile")}
+      </Button>
+    </>
+  );
+}
+
+function CardHead({
+  plugin,
+  muted,
+  facts,
+  onOpen,
+}: {
+  plugin: PluginEntry;
+  muted?: boolean;
+  facts: React.ReactNode;
+  onOpen: () => void;
+}) {
+  return (
+    <button
+      type="button"
+      onClick={onOpen}
+      className="group/open flex flex-1 items-start gap-3 p-3 text-left"
+    >
+      <PluginIconBox name={plugin.icon} muted={muted} />
+      <div className="flex min-w-0 flex-1 flex-col gap-1">
+        <span
+          className={cn(
+            "truncate text-sm font-semibold transition-colors group-hover/open:text-accent-brand",
+            muted && "text-muted-foreground",
+          )}
+        >
+          {plugin.name}
+        </span>
+        <span className="line-clamp-2 text-[11px] leading-snug text-muted-foreground">
+          {plugin.description}
+        </span>
+        <Facts className="text-[10px] text-muted-foreground/70">{facts}</Facts>
+      </div>
+    </button>
+  );
+}
+
+function InstalledCard({
+  plugin,
+  manager,
+  onOpen,
+}: {
+  plugin: PluginEntry;
+  manager: PluginsManager;
+  onOpen: () => void;
+}) {
+  const { t } = useTranslation();
+  const running = plugin.status === "running";
+  const failed = plugin.status === "failed" || plugin.status === "blocked";
+  const busy = manager.busy.has(plugin.id) || manager.busy.has("*");
+  const locked = manager.managedByServer;
+  const adds = describeContributions(plugin.contributes)
+    .slice(0, 3)
+    .map((c) => t(`plugins.manager.contributes.${c.kind}`, { count: c.count }));
+
+  return (
+    <Card className="gap-0 overflow-hidden py-0">
+      <CardHead
+        plugin={plugin}
+        muted={!running}
+        onOpen={onOpen}
+        facts={
+          <>
+            {plugin.unverified && <UnverifiedBadge />}
+            {plugin.isBeta && <BetaBadge />}
+            {plugin.author && <span>{plugin.author}</span>}
+            <span>v{plugin.version}</span>
+            {adds.length > 0 && <span>{adds.join(", ")}</span>}
+          </>
+        }
+      />
+
+      {failed ? (
+        <div className="flex items-center gap-2 border-t border-border bg-destructive/5 px-3 py-2">
+          <TriangleAlert className="size-3.5 shrink-0 text-destructive" />
+          <span
+            className="flex-1 truncate text-[11px] text-muted-foreground"
+            title={plugin.lastError ?? undefined}
+          >
+            {plugin.status === "blocked"
+              ? t("plugins.manager.status.blocked")
+              : t("plugins.manager.status.failed")}
+          </span>
+        </div>
+      ) : !running ? (
+        <div className="flex items-center gap-2 border-t border-border px-3 py-2">
+          <span className="size-1.5 shrink-0 bg-muted-foreground/40" />
+          <span className="text-[11px] text-muted-foreground">
+            {t("plugins.manager.status.disabled")}
+          </span>
+        </div>
+      ) : (
+        <div className="flex items-center gap-2 border-t border-border px-3 py-2">
+          <span className="size-1.5 shrink-0 bg-green-500" />
+          <span className="text-[11px] text-muted-foreground">
+            {plugin.pinnedVersion
+              ? t("plugins.manager.pinnedTo", {
+                  version: plugin.pinnedVersion,
+                })
+              : t("plugins.manager.status.running")}
+          </span>
+        </div>
+      )}
+
+      <div className="flex items-center gap-1.5 border-t border-border px-3 py-2">
+        {plugin.updateAvailable && !plugin.pinnedVersion && !failed && (
+          <Button
+            variant="outline"
+            size="xs"
+            className="gap-1 border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand dark:border-accent-brand/40 dark:bg-transparent dark:hover:bg-accent-brand/10"
+            disabled={busy || locked}
+            onClick={() => void manager.requestUpdate(plugin)}
+          >
+            <Download className="size-3" />
+            {plugin.addedCapabilities.length > 0
+              ? t("plugins.manager.reviewUpdate")
+              : t("plugins.manager.updateTo", {
+                  version: plugin.latestVersion,
+                })}
+          </Button>
+        )}
+        {failed ? (
+          <Button
+            variant="outline"
+            size="xs"
+            className="gap-1"
+            disabled={busy || locked}
+            onClick={() => void manager.retry(plugin)}
+          >
+            <RotateCcw className="size-3" />
+            {t("plugins.manager.restart")}
+          </Button>
+        ) : (
+          <Button
+            variant="outline"
+            size="xs"
+            disabled={busy || locked}
+            onClick={() => void manager.toggle(plugin)}
+          >
+            {plugin.enabled
+              ? t("plugins.manager.disable")
+              : t("plugins.manager.enable")}
+          </Button>
+        )}
+        <DocsLink
+          href={plugin.docs}
+          variant="icon"
+          className="ml-auto size-6"
+        />
+        <Button
+          variant="ghost"
+          size="icon-xs"
+          disabled={busy || locked}
+          title={t("plugins.manager.uninstall")}
+          aria-label={t("plugins.manager.uninstall")}
+          className={cn(
+            "text-muted-foreground hover:text-destructive",
+            !plugin.docs && "ml-auto",
+          )}
+          onClick={() => void manager.uninstall(plugin)}
+        >
+          <Trash2 className="size-3" />
+        </Button>
+      </div>
+    </Card>
+  );
+}
+
+function StatusCell({ plugin }: { plugin: PluginEntry }) {
+  const { t } = useTranslation();
+  const running = plugin.status === "running";
+  const failed = plugin.status === "failed" || plugin.status === "blocked";
+  const label =
+    plugin.status === "blocked"
+      ? t("plugins.manager.status.blocked")
+      : failed
+        ? t("plugins.manager.status.failed")
+        : !running
+          ? t("plugins.manager.status.disabled")
+          : plugin.pinnedVersion
+            ? t("plugins.manager.pinnedTo", { version: plugin.pinnedVersion })
+            : t("plugins.manager.status.running");
+  return (
+    <span
+      className="flex min-w-0 items-center gap-1.5 text-muted-foreground"
+      title={failed ? (plugin.lastError ?? undefined) : undefined}
+    >
+      {failed ? (
+        <TriangleAlert className="size-3 shrink-0 text-destructive" />
+      ) : (
+        <span
+          className={cn(
+            "size-1.5 shrink-0",
+            running ? "bg-green-500" : "bg-muted-foreground/40",
+          )}
+        />
+      )}
+      <span className="truncate">{label}</span>
+    </span>
+  );
+}
+
+function InstalledRowActions({
+  plugin,
+  manager,
+}: {
+  plugin: PluginEntry;
+  manager: PluginsManager;
+}) {
+  const { t } = useTranslation();
+  const failed = plugin.status === "failed" || plugin.status === "blocked";
+  const busy = manager.busy.has(plugin.id) || manager.busy.has("*");
+  const locked = manager.managedByServer;
+  const updateLabel =
+    plugin.addedCapabilities.length > 0
+      ? t("plugins.manager.reviewUpdate")
+      : t("plugins.manager.updateTo", { version: plugin.latestVersion });
+
+  return (
+    <div className="flex items-center justify-end gap-1" onClick={stop}>
+      {plugin.updateAvailable && !plugin.pinnedVersion && !failed && (
+        <Button
+          variant="ghost"
+          size="icon-xs"
+          title={updateLabel}
+          aria-label={updateLabel}
+          className="text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
+          disabled={busy || locked}
+          onClick={() => void manager.requestUpdate(plugin)}
+        >
+          <Download className="size-3" />
+        </Button>
+      )}
+      {failed ? (
+        <Button
+          variant="outline"
+          size="xs"
+          className="gap-1"
+          disabled={busy || locked}
+          onClick={() => void manager.retry(plugin)}
+        >
+          <RotateCcw className="size-3" />
+          {t("plugins.manager.restart")}
+        </Button>
+      ) : (
+        <Button
+          variant="outline"
+          size="xs"
+          disabled={busy || locked}
+          onClick={() => void manager.toggle(plugin)}
+        >
+          {plugin.enabled
+            ? t("plugins.manager.disable")
+            : t("plugins.manager.enable")}
+        </Button>
+      )}
+      <DocsLink href={plugin.docs} variant="icon" className="size-6" />
+      <Button
+        variant="ghost"
+        size="icon-xs"
+        disabled={busy || locked}
+        title={t("plugins.manager.uninstall")}
+        aria-label={t("plugins.manager.uninstall")}
+        className="text-muted-foreground hover:text-destructive"
+        onClick={() => void manager.uninstall(plugin)}
+      >
+        <Trash2 className="size-3" />
+      </Button>
+    </div>
+  );
+}
+
+function BrowseSection({
+  plugins,
+  manager,
+  query,
+  onQuery,
+  onOpen,
+  layout,
+  layoutControls,
+}: {
+  plugins: PluginEntry[];
+  manager: PluginsManager;
+  query: string;
+  onQuery: (v: string) => void;
+  onOpen: (id: string) => void;
+  layout: Layout;
+  layoutControls: React.ReactNode;
+}) {
+  const { t } = useTranslation();
+  const [category, setCategory] = useState<string | null>(null);
+  const [sort, setSort] = useState<SortKey>("popular");
+  const categories = useMemo(() => categoriesOf(plugins), [plugins]);
+
+  const rows = sortPlugins(
+    plugins.filter(
+      (p) =>
+        matchesQuery(p, query) &&
+        (category === null || p.category === category),
+    ),
+    sort,
+  );
+
+  const listColumns: DataColumn<PluginEntry>[] = [
+    {
+      key: "name",
+      header: t("plugins.manager.table.name"),
+      width: "minmax(0,1.3fr)",
+      cell: (p) => <NameCell plugin={p} />,
+    },
+    {
+      key: "description",
+      header: t("plugins.manager.table.description"),
+      width: "minmax(0,2fr)",
+      hideBelow: "md",
+      cell: (p) => <DescriptionCell plugin={p} />,
+    },
+    {
+      key: "category",
+      header: t("plugins.manager.table.category"),
+      width: "120px",
+      hideBelow: "lg",
+      cell: (p) => (
+        <span className="text-muted-foreground">{p.category ?? ""}</span>
+      ),
+    },
+    {
+      key: "installs",
+      header: t("plugins.manager.table.installs"),
+      width: "110px",
+      hideBelow: "lg",
+      cell: (p) => (
+        <span className="text-muted-foreground">
+          <InstallCountFact
+            count={p.installCount}
+            source={p.installCountSource}
+          />
+        </span>
+      ),
+    },
+    {
+      key: "version",
+      header: t("plugins.manager.table.version"),
+      width: "80px",
+      cell: (p) => (
+        <span className="tabular-nums text-muted-foreground">
+          {p.latestVersion ? `v${p.latestVersion}` : ""}
+        </span>
+      ),
+    },
+    {
+      key: "actions",
+      header: "",
+      width: "120px",
+      align: "end",
+      cell: (p) => <BrowseAction plugin={p} manager={manager} />,
+    },
+  ];
+
+  return (
+    <div className={`flex flex-col ${PANEL.gap} ${PANEL.body}`}>
+      <Toolbar
+        query={query}
+        onQuery={onQuery}
+        placeholder={t("plugins.manager.searchPlugins")}
+      >
+        <div className="ml-auto flex items-center gap-2">
+          <SortSelect value={sort} onChange={setSort} />
+          {layoutControls}
+        </div>
+      </Toolbar>
+
+      {categories.length > 0 && (
+        <div className="flex flex-wrap items-center gap-1">
+          {[null, ...categories].map((c) => (
+            <button
+              key={c ?? "__all"}
+              type="button"
+              onClick={() => setCategory(c)}
+              className={cn(
+                "border px-2 py-1 text-[11px] font-medium transition-colors",
+                category === c
+                  ? "border-accent-brand bg-accent-brand/10 text-accent-brand"
+                  : "border-border text-muted-foreground hover:text-foreground",
+              )}
+            >
+              {c ?? t("plugins.manager.allCategories")}
+            </button>
+          ))}
+        </div>
+      )}
+
+      {rows.length === 0 ? (
+        <EmptyState
+          icon={Puzzle}
+          title={t("plugins.manager.nothingHere")}
+          hint={
+            plugins.length === 0
+              ? undefined
+              : t("plugins.manager.nothingHereHint")
+          }
+        />
+      ) : (
+        <PluginCollection
+          plugins={rows}
+          layout={layout}
+          renderCard={(p) => (
+            <BrowseCard
+              plugin={p}
+              manager={manager}
+              onOpen={() => onOpen(p.id)}
+            />
+          )}
+          listColumns={listColumns}
+          onOpen={onOpen}
+        />
+      )}
+
+      <p className="text-[11px] text-muted-foreground">
+        {t("plugins.manager.communitySoon")}{" "}
+        <DocsLink core="communityRegistry" className="text-[11px]">
+          {t("plugins.manager.communitySubmit")}
+        </DocsLink>
+      </p>
+    </div>
+  );
+}
+
+function BrowseCard({
+  plugin,
+  manager,
+  onOpen,
+}: {
+  plugin: PluginEntry;
+  manager: PluginsManager;
+  onOpen: () => void;
+}) {
+  const { t } = useTranslation();
+  const severe = orderByRisk(plugin.capabilities).filter(isSevere);
+
+  return (
+    <Card className="gap-0 overflow-hidden py-0">
+      <CardHead
+        plugin={plugin}
+        onOpen={onOpen}
+        facts={
+          <>
+            {plugin.author && <span>{plugin.author}</span>}
+            {plugin.latestVersion && <span>v{plugin.latestVersion}</span>}
+            {plugin.category && <span>{plugin.category}</span>}
+            <InstallCountFact
+              count={plugin.installCount}
+              source={plugin.installCountSource}
+            />
+          </>
+        }
+      />
+      <div className="flex items-center gap-2 border-t border-border px-3 py-2">
+        <span className="min-w-0 flex-1 truncate text-[10px] text-muted-foreground">
+          {severe.length > 0
+            ? t(`plugins.capabilities.${severe[0]}.title`, {
+                defaultValue: severe[0],
+                nsSeparator: false,
+              })
+            : t("plugins.manager.noServerAccess")}
+        </span>
+        <BrowseAction plugin={plugin} manager={manager} />
+      </div>
+    </Card>
+  );
+}
+
+function BrowseAction({
+  plugin,
+  manager,
+}: {
+  plugin: PluginEntry;
+  manager: PluginsManager;
+}) {
+  const { t } = useTranslation();
+  const busy = manager.busy.has(plugin.id) || manager.busy.has("*");
+  return (
+    <div
+      className="flex shrink-0 items-center justify-end gap-2"
+      onClick={stop}
+    >
+      <DocsLink href={plugin.docs} variant="icon" className="size-6" />
+      {plugin.installed ? (
+        <span className="flex shrink-0 items-center gap-1 text-[11px] font-medium text-accent-brand">
+          <Check className="size-3" />
+          {t("plugins.manager.installedBadge")}
+        </span>
+      ) : (
+        <Button
+          variant="outline"
+          size="xs"
+          disabled={busy || manager.managedByServer || !plugin.latestVersion}
+          onClick={() => manager.requestInstall(plugin)}
+          className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand dark:border-accent-brand/40 dark:bg-transparent dark:hover:bg-accent-brand/10"
+        >
+          {t("plugins.manager.install")}
+        </Button>
+      )}
+    </div>
+  );
+}
+
+function UpdatesSection({
+  plugins,
+  manager,
+  onOpen,
+}: {
+  plugins: PluginEntry[];
+  manager: PluginsManager;
+  onOpen: (id: string) => void;
+}) {
+  const { t } = useTranslation();
+  const pinned = plugins.filter((p) => p.pinnedVersion);
+  const open = plugins.filter((p) => !p.pinnedVersion);
+  const gated = open.filter((p) => p.addedCapabilities.length > 0);
+  const plain = open.filter((p) => p.addedCapabilities.length === 0);
+
+  if (plugins.length === 0) {
+    return (
+      <div className={PANEL.body}>
+        <EmptyState
+          icon={Check}
+          title={t("plugins.manager.upToDate")}
+          hint={
+            manager.lastCheckedAt
+              ? t("plugins.manager.lastChecked", {
+                  time: new Date(manager.lastCheckedAt).toLocaleString(),
+                })
+              : undefined
+          }
+        />
+      </div>
+    );
+  }
+
+  return (
+    <div className={`flex flex-col ${PANEL.gap} ${PANEL.body}`}>
+      {plain.length > 0 && (
+        <Card className="flex-row items-center gap-3 px-3 py-2.5">
+          <span className="flex-1 text-xs text-muted-foreground">
+            {t("plugins.manager.updatesReady", { count: plain.length })}
+            {gated.length > 0 &&
+              ` ${t("plugins.manager.updatesNeedReview", { count: gated.length })}`}
+          </span>
+          <Button
+            variant="outline"
+            size="sm"
+            className="gap-1.5 border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand dark:border-accent-brand/40 dark:bg-transparent dark:hover:bg-accent-brand/10"
+            disabled={manager.busy.size > 0 || manager.managedByServer}
+            onClick={() => void manager.updateAll()}
+          >
+            <Download className="size-3.5" />
+            {t("plugins.manager.updateAll")}
+          </Button>
+        </Card>
+      )}
+
+      <div className="flex flex-col gap-3">
+        {[...gated, ...plain, ...pinned].map((p) => (
+          <UpdateRow
+            key={p.id}
+            plugin={p}
+            manager={manager}
+            onOpen={() => onOpen(p.id)}
+          />
+        ))}
+      </div>
+    </div>
+  );
+}
+
+function UpdateRow({
+  plugin,
+  manager,
+  onOpen,
+}: {
+  plugin: PluginEntry;
+  manager: PluginsManager;
+  onOpen: () => void;
+}) {
+  const { t } = useTranslation();
+  const gated = plugin.addedCapabilities.length > 0;
+  const busy = manager.busy.has(plugin.id) || manager.busy.has("*");
+  const notes = plugin.versions.find((v) => v.version === plugin.latestVersion);
+
+  return (
+    <Card className="gap-0 overflow-hidden py-0">
+      <div className="flex flex-wrap items-start gap-3 p-3">
+        <PluginIconBox name={plugin.icon} />
+        <div className="flex min-w-0 flex-1 flex-col gap-1">
+          <div className="flex flex-wrap items-center gap-1.5">
+            <button
+              type="button"
+              onClick={onOpen}
+              className="truncate text-sm font-semibold hover:text-accent-brand"
+            >
+              {plugin.name}
+            </button>
+            <span className="shrink-0 text-[11px] text-muted-foreground">
+              {t("plugins.manager.versionChange", {
+                from: plugin.version,
+                to: plugin.latestVersion,
+              })}
+            </span>
+          </div>
+          {plugin.pinnedVersion ? (
+            <span className="text-[11px] leading-snug text-muted-foreground">
+              {t("plugins.manager.pinnedTo", { version: plugin.pinnedVersion })}
+            </span>
+          ) : gated ? (
+            <span className="text-[11px] leading-snug text-muted-foreground">
+              {t("plugins.manager.updateAsksMore")}
+            </span>
+          ) : null}
+          {notes?.releaseNotesUrl && (
+            <a
+              href={notes.releaseNotesUrl}
+              target="_blank"
+              rel="noreferrer"
+              className="w-fit text-[11px] text-muted-foreground hover:text-accent-brand"
+            >
+              {t("plugins.manager.releaseNotes")}
+            </a>
+          )}
+        </div>
+        <div className="flex shrink-0 items-center gap-3">
+          <label className="flex items-center gap-1.5">
+            <span className="text-[10px] text-muted-foreground">
+              {t("plugins.manager.auto")}
+            </span>
+            <FakeSwitch
+              checked={plugin.autoUpdate}
+              disabled={
+                busy || manager.managedByServer || !!plugin.pinnedVersion
+              }
+              onChange={(v) =>
+                void manager.setOptions(plugin, { autoUpdate: v })
+              }
+            />
+          </label>
+          {!plugin.pinnedVersion && (
+            <Button
+              variant="outline"
+              size="xs"
+              disabled={busy || manager.managedByServer}
+              onClick={() => void manager.requestUpdate(plugin)}
+              className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand dark:border-accent-brand/40 dark:bg-transparent dark:hover:bg-accent-brand/10"
+            >
+              {gated
+                ? t("plugins.manager.review")
+                : t("plugins.manager.update")}
+            </Button>
+          )}
+        </div>
+      </div>
+    </Card>
+  );
+}
diff --git a/src/ui/plugins/open-plugins.ts b/src/ui/plugins/open-plugins.ts
new file mode 100644
index 000000000..3bec49aa2
--- /dev/null
+++ b/src/ui/plugins/open-plugins.ts
@@ -0,0 +1,11 @@
+/** Asks the shell to open the Plugins tab. */
+export const OPEN_PLUGINS_EVENT = "termix:open-plugins";
+
+/** Asks the shell to open Settings at a plugin's page; detail is the plugin id. */
+export const OPEN_PLUGIN_SETTINGS_EVENT = "termix:open-plugin-settings";
+
+export function openPluginSettings(pluginId: string): void {
+  window.dispatchEvent(
+    new CustomEvent(OPEN_PLUGIN_SETTINGS_EVENT, { detail: pluginId }),
+  );
+}
diff --git a/src/ui/plugins/plugin-bits.tsx b/src/ui/plugins/plugin-bits.tsx
new file mode 100644
index 000000000..b6c3ae5b9
--- /dev/null
+++ b/src/ui/plugins/plugin-bits.tsx
@@ -0,0 +1,130 @@
+import { useTranslation } from "react-i18next";
+import { PluginIcon } from "@/lib/plugin-icon";
+import { cn } from "@/lib/utils";
+import { capabilityRisk, formatCount, isSevere } from "./plugin-model";
+
+export function PluginIconBox({
+  name,
+  size = "md",
+  muted,
+}: {
+  name?: string;
+  size?: "sm" | "md" | "lg";
+  muted?: boolean;
+}) {
+  const box = size === "lg" ? "size-10" : size === "sm" ? "size-7" : "size-9";
+  const glyph =
+    size === "lg" ? "size-5" : size === "sm" ? "size-3.5" : "size-4";
+  return (
+    <div
+      className={cn(
+        box,
+        "flex shrink-0 items-center justify-center border border-border bg-muted",
+        muted && "opacity-40",
+      )}
+    >
+      <PluginIcon name={name} className={cn(glyph, "text-accent-brand")} />
+    </div>
+  );
+}
+
+/** One capability as its consequence, with a mark only on the severe ones. */
+export function CapabilityRow({
+  capability,
+  showId,
+  className,
+}: {
+  capability: string;
+  showId?: boolean;
+  className?: string;
+}) {
+  const { t } = useTranslation();
+  const severe = isSevere(capability);
+  return (
+    <div className={cn("flex items-start gap-2.5", className)}>
+      <span className="mt-0.5 flex size-4 shrink-0 items-center justify-center">
+        {severe && (
+          <span
+            className="flex size-4 items-center justify-center border border-destructive/50 bg-destructive/10 text-[10px] font-bold text-destructive"
+            title={t(`plugins.manager.risk.${capabilityRisk(capability)}`)}
+          >
+            !
+          </span>
+        )}
+      </span>
+      <div className="flex min-w-0 flex-1 flex-col gap-0.5">
+        <span className="text-xs font-medium leading-snug">
+          {t(`plugins.capabilities.${capability}.title`, {
+            defaultValue: capability,
+            nsSeparator: false,
+          })}
+        </span>
+        <span className="text-[11px] leading-snug text-muted-foreground">
+          {t(`plugins.capabilities.${capability}.consequence`, {
+            defaultValue: "",
+            nsSeparator: false,
+          })}
+        </span>
+      </div>
+      {showId && (
+        <span className="shrink-0 text-[10px] text-muted-foreground/50">
+          {capability}
+        </span>
+      )}
+    </div>
+  );
+}
+
+/** Permanent mark on anything installed without a registry signature. */
+export function UnverifiedBadge() {
+  const { t } = useTranslation();
+  return (
+    <span
+      className="shrink-0 border border-warning/40 bg-warning/10 px-1.5 py-0.5 text-[10px] font-bold uppercase tracking-wider text-warning"
+      title={t("plugins.manager.unverifiedHint")}
+    >
+      {t("plugins.manager.unverified")}
+    </span>
+  );
+}
+
+export function BetaBadge() {
+  const { t } = useTranslation();
+  return (
+    <span
+      className="shrink-0 border border-accent-brand/40 bg-accent-brand/10 px-1.5 py-0.5 text-[10px] font-bold uppercase tracking-wider text-accent-brand"
+      title={t("plugins.manager.beta.badgeHint")}
+    >
+      {t("plugins.manager.beta.badge")}
+    </span>
+  );
+}
+
+/** Active installs when the registry has them, release downloads otherwise. */
+export function InstallCountFact({
+  count,
+  source,
+}: {
+  count: number | null;
+  source: string | null;
+}) {
+  const { t } = useTranslation();
+  if (count === null || count <= 0) return null;
+  const active = source === "aggregate-telemetry";
+  return (
+    <span
+      title={
+        active
+          ? t("plugins.manager.count.activeHint")
+          : t("plugins.manager.count.downloadsHint")
+      }
+    >
+      {t(
+        active
+          ? "plugins.manager.count.active"
+          : "plugins.manager.count.downloads",
+        { count, formatted: formatCount(count) },
+      )}
+    </span>
+  );
+}
diff --git a/src/ui/plugins/plugin-model.ts b/src/ui/plugins/plugin-model.ts
new file mode 100644
index 000000000..0f1e210d3
--- /dev/null
+++ b/src/ui/plugins/plugin-model.ts
@@ -0,0 +1,503 @@
+import {
+  CAPABILITY_RISK_ORDER,
+  getCapabilityInfo,
+  type CapabilityRisk,
+} from "@termix-ssh/plugin-sdk/capabilities";
+import type { PluginEnvVar } from "@termix-ssh/plugin-sdk/docs";
+import semver from "semver";
+import {
+  CHANGE_TYPES,
+  type ChangeType,
+  type ChangelogChange,
+  type ChangelogRelease,
+} from "@termix-ssh/plugin-sdk/changelog";
+import type {
+  PluginChannel,
+  PluginSummary,
+  PluginUploadPreview,
+  RegistryPluginEntry,
+  RegistryPluginVersion,
+} from "@/api/plugins-api";
+import {
+  buildIssueUrl,
+  describeEnvironment,
+  normalizeGitHubRepo,
+} from "@/lib/issue-url";
+
+export type PluginStatus = "running" | "disabled" | "failed" | "blocked";
+
+/** One row of the Plugins tab: what is installed merged with the registry. */
+export interface PluginEntry {
+  id: string;
+  name: string;
+  description: string;
+  author: string;
+  category: string;
+  icon?: string;
+  repository?: string;
+  videoId?: string;
+  features: string[];
+  /** Docs link: the installed manifest's, else the registry's. */
+  docs?: string;
+  env: PluginEnvVar[];
+  installed: boolean;
+  version: string | null;
+  latestVersion: string | null;
+  /** Newest beta, when one is newer than stable. */
+  latestBeta: string | null;
+  channel: PluginChannel;
+  /** The installed copy is a beta. */
+  isBeta: boolean;
+  updateAvailable: boolean;
+  addedCapabilities: string[];
+  versions: RegistryPluginVersion[];
+  capabilities: string[];
+  status: PluginStatus | null;
+  enabled: boolean;
+  lastError: string | null;
+  autoUpdate: boolean;
+  pinnedVersion: string | null;
+  bundled: boolean;
+  inRegistry: boolean;
+  contributes: Record<string, unknown> | null;
+  publishedAt: string | null;
+  installCount: number | null;
+  installCountSource: string | null;
+  source: PluginSource;
+  /** Installed from a file or folder with no registry signature behind it. */
+  unverified: boolean;
+}
+
+export type PluginSource = "bundled" | "official" | "unverified";
+
+export function isPrerelease(version: string | null | undefined): boolean {
+  return Boolean(
+    version && semver.valid(version) && semver.prerelease(version),
+  );
+}
+
+/** A beta newer than what is installed, worth offering with "Try beta". */
+export function betaToTry(
+  plugin: Pick<PluginEntry, "installed" | "version" | "latestBeta" | "channel">,
+): string | null {
+  const { latestBeta, version } = plugin;
+  if (!plugin.installed || plugin.channel === "beta" || !latestBeta) {
+    return null;
+  }
+  if (!version || !semver.valid(version) || !semver.valid(latestBeta)) {
+    return null;
+  }
+  return semver.gt(latestBeta, version) ? latestBeta : null;
+}
+
+/** Where an installed copy came from, as the issue report names it. */
+export function pluginSource(summary: PluginSummary): PluginSource {
+  if (summary.tier === "unverified") return "unverified";
+  if (summary.source === "bundled" || summary.tier === "bundled") {
+    return "bundled";
+  }
+  return summary.signedBy ? "official" : "unverified";
+}
+
+export function pluginStatus(summary: PluginSummary): PluginStatus {
+  if (summary.state === "failed") return "failed";
+  if (summary.state === "blocked") return "blocked";
+  if (!summary.enabled) return "disabled";
+  return "running";
+}
+
+export function mergePlugins(
+  installed: PluginSummary[],
+  registry: RegistryPluginEntry[] | null,
+): PluginEntry[] {
+  const byId = new Map((registry ?? []).map((entry) => [entry.id, entry]));
+  const rows: PluginEntry[] = [];
+
+  for (const summary of installed) {
+    const entry = byId.get(summary.id);
+    byId.delete(summary.id);
+    rows.push({
+      id: summary.id,
+      name: summary.name,
+      description: summary.description ?? entry?.description ?? "",
+      author: summary.author ?? entry?.author ?? "",
+      category: entry?.category ?? "",
+      icon: summary.icon ?? entry?.icon,
+      repository: summary.repository ?? entry?.repository,
+      videoId: summary.videoId ?? entry?.videoId,
+      features: summary.features?.length
+        ? summary.features
+        : (entry?.features ?? []),
+      docs: summary.docs ?? entry?.docs,
+      env: summary.env ?? [],
+      installed: true,
+      version: summary.version,
+      latestVersion: entry?.latestVersion ?? null,
+      latestBeta: entry?.latestBeta ?? null,
+      channel: summary.channel ?? entry?.channel ?? "stable",
+      isBeta: isPrerelease(summary.version),
+      updateAvailable: entry?.updateAvailable ?? false,
+      addedCapabilities: entry?.addedCapabilities ?? [],
+      versions: entry?.versions ?? [],
+      capabilities: summary.capabilities ?? [],
+      status: pluginStatus(summary),
+      enabled: summary.enabled,
+      lastError: summary.lastError ?? null,
+      autoUpdate: summary.autoUpdate ?? entry?.autoUpdate ?? false,
+      pinnedVersion: summary.pinnedVersion ?? entry?.pinnedVersion ?? null,
+      bundled: entry?.bundled ?? summary.tier === "bundled",
+      inRegistry: Boolean(entry),
+      contributes: (summary.contributes as Record<string, unknown>) ?? null,
+      publishedAt: latestPublished(entry?.versions ?? []),
+      installCount: entry?.installCount ?? null,
+      installCountSource: entry?.installCountSource ?? null,
+      source: pluginSource(summary),
+      unverified: pluginSource(summary) === "unverified",
+    });
+  }
+
+  for (const entry of byId.values()) {
+    const latest =
+      entry.versions.find((v) => v.version === entry.latestVersion) ??
+      entry.versions[0];
+    rows.push({
+      id: entry.id,
+      name: entry.name,
+      description: entry.description,
+      author: entry.author,
+      category: entry.category,
+      icon: entry.icon,
+      repository: entry.repository,
+      videoId: entry.videoId,
+      features: entry.features ?? [],
+      docs: entry.docs,
+      env: [],
+      installed: false,
+      version: null,
+      latestVersion: entry.latestVersion,
+      latestBeta: entry.latestBeta ?? null,
+      channel: "stable",
+      isBeta: false,
+      updateAvailable: false,
+      addedCapabilities: [],
+      versions: entry.versions,
+      capabilities: latest?.capabilities ?? [],
+      status: null,
+      enabled: false,
+      lastError: null,
+      autoUpdate: false,
+      pinnedVersion: null,
+      bundled: entry.bundled,
+      inRegistry: true,
+      contributes: null,
+      publishedAt: latestPublished(entry.versions),
+      installCount: entry.installCount ?? null,
+      installCountSource: entry.installCountSource ?? null,
+      source: "official",
+      unverified: false,
+    });
+  }
+
+  return rows;
+}
+
+/** A row for a file that was uploaded but not installed yet. */
+export function uploadEntry(preview: PluginUploadPreview): PluginEntry {
+  return {
+    id: preview.id,
+    name: preview.name,
+    description: preview.description,
+    author: preview.author,
+    features: preview.features ?? [],
+    env: [],
+    category: "",
+    installed: preview.replaces !== null,
+    version: preview.replaces,
+    latestVersion: preview.version,
+    latestBeta: null,
+    channel: "stable",
+    isBeta: isPrerelease(preview.replaces),
+    updateAvailable: false,
+    addedCapabilities: [],
+    versions: [],
+    capabilities: preview.capabilities,
+    status: null,
+    enabled: false,
+    lastError: null,
+    autoUpdate: false,
+    pinnedVersion: null,
+    bundled: false,
+    inRegistry: false,
+    contributes: null,
+    publishedAt: null,
+    installCount: null,
+    installCountSource: null,
+    source: "unverified",
+    unverified: true,
+  };
+}
+
+function latestPublished(versions: RegistryPluginVersion[]): string | null {
+  const dates = versions
+    .map((v) => v.publishedAt)
+    .filter((d): d is string => Boolean(d))
+    .sort();
+  return dates.at(-1) ?? null;
+}
+
+export type SortKey = "popular" | "name" | "updated" | "category";
+
+export function sortPlugins(rows: PluginEntry[], key: SortKey): PluginEntry[] {
+  const sorted = [...rows];
+  if (key === "popular") {
+    sorted.sort(
+      (a, b) =>
+        (b.installCount ?? -1) - (a.installCount ?? -1) ||
+        a.name.localeCompare(b.name),
+    );
+  } else if (key === "updated") {
+    sorted.sort((a, b) =>
+      (b.publishedAt ?? "").localeCompare(a.publishedAt ?? ""),
+    );
+  } else if (key === "category") {
+    sorted.sort(
+      (a, b) =>
+        a.category.localeCompare(b.category) || a.name.localeCompare(b.name),
+    );
+  } else {
+    sorted.sort((a, b) => a.name.localeCompare(b.name));
+  }
+  return sorted;
+}
+
+export function matchesQuery(row: PluginEntry, query: string): boolean {
+  const q = query.trim().toLowerCase();
+  if (!q) return true;
+  return (
+    row.name.toLowerCase().includes(q) ||
+    row.description.toLowerCase().includes(q) ||
+    row.features.some((f) => f.toLowerCase().includes(q)) ||
+    row.id.includes(q)
+  );
+}
+
+export function categoriesOf(rows: PluginEntry[]): string[] {
+  return [...new Set(rows.map((row) => row.category).filter(Boolean))].sort();
+}
+
+export function capabilityRisk(capability: string): CapabilityRisk {
+  return getCapabilityInfo(capability)?.risk ?? "medium";
+}
+
+/** Worst first, the order the consent copy is read in. */
+export function orderByRisk(capabilities: string[]): string[] {
+  return [...capabilities].sort(
+    (a, b) =>
+      CAPABILITY_RISK_ORDER.indexOf(capabilityRisk(a)) -
+      CAPABILITY_RISK_ORDER.indexOf(capabilityRisk(b)),
+  );
+}
+
+export function isSevere(capability: string): boolean {
+  const risk = capabilityRisk(capability);
+  return risk === "critical" || risk === "high";
+}
+
+/** Contribution kinds worth naming in "Adds to Termix", with a count each. */
+const CONTRIBUTION_KINDS = [
+  "tabs",
+  "panels",
+  "dashboardCards",
+  "actions",
+  "protocols",
+  "auth",
+  "settings",
+  "hostCapability",
+  "permissions",
+  "keybindingActions",
+  "syncEntities",
+] as const;
+
+export type ContributionKind = (typeof CONTRIBUTION_KINDS)[number];
+
+export function describeContributions(
+  contributes: Record<string, unknown> | null,
+): Array<{ kind: ContributionKind; count: number }> {
+  if (!contributes) return [];
+  const result: Array<{ kind: ContributionKind; count: number }> = [];
+  for (const kind of CONTRIBUTION_KINDS) {
+    const value = contributes[kind];
+    if (value === undefined || value === null || value === false) continue;
+    if (Array.isArray(value)) {
+      if (value.length > 0) result.push({ kind, count: value.length });
+      continue;
+    }
+    if (kind === "auth" && typeof value === "object") {
+      const auth = value as {
+        loginMethods?: unknown[];
+        secondFactors?: unknown[];
+      };
+      const count =
+        (auth.loginMethods?.length ?? 0) + (auth.secondFactors?.length ?? 0);
+      if (count > 0) result.push({ kind, count });
+      continue;
+    }
+    result.push({ kind, count: 1 });
+  }
+  return result;
+}
+
+export function formatBytes(bytes: number): string {
+  if (bytes < 1024) return `${bytes} B`;
+  const units = ["KB", "MB", "GB"];
+  let value = bytes / 1024;
+  let unit = 0;
+  while (value >= 1024 && unit < units.length - 1) {
+    value /= 1024;
+    unit += 1;
+  }
+  return `${value.toFixed(value >= 10 ? 0 : 1)} ${units[unit]}`;
+}
+
+/** 1234 reads as 1.2k, so the number stays a rough ranking. */
+export function formatCount(count: number): string {
+  if (count < 1000) return String(count);
+  if (count < 1_000_000) {
+    return `${(count / 1000).toFixed(count < 10_000 ? 1 : 0)}k`;
+  }
+  return `${(count / 1_000_000).toFixed(1)}M`;
+}
+
+/**
+ * A new bug report on the plugin's own repo with what a maintainer asks first
+ * already filled in. Official plugins use the org bug form and the plugin
+ * template ships the same one. Null when the repository is not on GitHub.
+ */
+export function reportIssueUrl(
+  plugin: Pick<
+    PluginEntry,
+    | "id"
+    | "repository"
+    | "version"
+    | "latestVersion"
+    | "status"
+    | "source"
+    | "lastError"
+  >,
+  termixVersion?: string,
+): string | null {
+  const repo = normalizeGitHubRepo(plugin.repository);
+  if (!repo) return null;
+  const version = plugin.version ?? plugin.latestVersion ?? "not installed";
+  const state = `Plugin ${plugin.id}, ${plugin.source}, ${plugin.status ?? "not installed"}`;
+  return buildIssueUrl(repo, {
+    template: "bug_report.yml",
+    fields: {
+      "termix-version": termixVersion,
+      "plugin-version": version,
+      environment: `${describeEnvironment()}
+${state}`,
+      logs: plugin.lastError,
+    },
+  });
+}
+
+/**
+ * Beta feedback on the plugin's own repo, through the org beta form. Null when
+ * the repository is not on GitHub.
+ */
+export function betaFeedbackUrl(
+  plugin: Pick<PluginEntry, "id" | "repository" | "version" | "lastError">,
+  termixVersion?: string,
+): string | null {
+  const repo = normalizeGitHubRepo(plugin.repository);
+  if (!repo) return null;
+  return buildIssueUrl(repo, {
+    template: "beta_feedback.yml",
+    fields: {
+      "termix-version": termixVersion,
+      "plugin-version": plugin.version,
+      environment: describeEnvironment(),
+      logs: plugin.lastError,
+    },
+  });
+}
+
+/** A new feature request on the plugin's own repo, or null when not on GitHub. */
+export function requestFeatureUrl(
+  plugin: Pick<PluginEntry, "repository">,
+): string | null {
+  const repo = normalizeGitHubRepo(plugin.repository);
+  if (!repo) return null;
+  return buildIssueUrl(repo, { template: "feature_request.yml" });
+}
+
+/** One version in a plugin's release notes. */
+export interface ReleaseRow {
+  version: string;
+  date: string | null;
+  summary?: string;
+  changes: ChangelogChange[];
+  /** False only for a registry version this build cannot run. */
+  compatible: boolean;
+  releaseNotesUrl?: string;
+}
+
+/**
+ * The registry's versions and the installed copy's CHANGELOG.md as one list,
+ * newest first. The installed copy's notes win for a version in both.
+ */
+export function mergeReleaseNotes(
+  versions: RegistryPluginVersion[],
+  local: ChangelogRelease[],
+): ReleaseRow[] {
+  const rows = new Map<string, ReleaseRow>();
+  for (const v of versions) {
+    rows.set(v.version, {
+      version: v.version,
+      date: v.publishedAt ?? null,
+      summary: v.notes?.summary,
+      changes: v.notes?.changes ?? [],
+      compatible: v.compatible,
+      releaseNotesUrl: v.releaseNotesUrl,
+    });
+  }
+  for (const release of local) {
+    const row = rows.get(release.version);
+    rows.set(release.version, {
+      version: release.version,
+      date: release.date ?? row?.date ?? null,
+      summary: release.summary ?? row?.summary,
+      changes:
+        release.changes.length > 0 ? release.changes : (row?.changes ?? []),
+      compatible: row?.compatible ?? true,
+      releaseNotesUrl: row?.releaseNotesUrl,
+    });
+  }
+  return [...rows.values()].sort((a, b) =>
+    semver.valid(a.version) && semver.valid(b.version)
+      ? semver.rcompare(a.version, b.version)
+      : 0,
+  );
+}
+
+/** The changes of one release grouped by type, in the changelog's order. */
+export function groupChanges(
+  changes: ChangelogChange[],
+): Array<{ type: ChangeType; items: string[] }> {
+  const groups: Array<{ type: ChangeType; items: string[] }> = [];
+  for (const type of CHANGE_TYPES) {
+    const items = changes.filter((c) => c.type === type).map((c) => c.text);
+    if (items.length > 0) groups.push({ type, items });
+  }
+  return groups;
+}
+
+const YOUTUBE_ID = /^[A-Za-z0-9_-]{11}$/;
+
+/** The embed address for a video id, or null for anything that is not one. */
+export function youtubeEmbedUrl(videoId: string | undefined): string | null {
+  return videoId && YOUTUBE_ID.test(videoId)
+    ? `https://www.youtube-nocookie.com/embed/${videoId}?rel=0`
+    : null;
+}
diff --git a/src/ui/plugins/use-plugins-manager.ts b/src/ui/plugins/use-plugins-manager.ts
new file mode 100644
index 000000000..e92f69692
--- /dev/null
+++ b/src/ui/plugins/use-plugins-manager.ts
@@ -0,0 +1,610 @@
+import { useCallback, useEffect, useMemo, useRef, useState } from "react";
+import { useTranslation } from "react-i18next";
+import { toast } from "sonner";
+import semver from "semver";
+import {
+  DEVELOPER_MODE_CHANGED_EVENT,
+  deletePluginData,
+  getDeveloperMode,
+  getPluginRegistry,
+  getPlugins,
+  installPlugin,
+  installUploadedPlugin,
+  previewPluginState,
+  retryPlugin,
+  setAllPluginChannels,
+  setPluginOptions,
+  setPluginState,
+  uninstallPlugin,
+  updateAllPlugins,
+  updatePlugin,
+  uploadPlugin,
+  type DeveloperModeState,
+  type PluginChannel,
+  type PluginSummary,
+  type RegistryListing,
+} from "@/api/plugins-api";
+import { useConfirm } from "@/components/surface/surface-scope";
+import { mergePlugins, uploadEntry, type PluginEntry } from "./plugin-model";
+import type { ConsentRequest } from "./PluginConsentPrompt";
+
+interface ApiError {
+  message: string;
+  code?: string;
+  data: Record<string, unknown>;
+}
+
+function readError(error: unknown, fallback: string): ApiError {
+  const data = (error as { response?: { data?: Record<string, unknown> } })
+    ?.response?.data;
+  if (data && typeof data === "object") {
+    return {
+      message: typeof data.error === "string" ? data.error : fallback,
+      code: typeof data.code === "string" ? data.code : undefined,
+      data,
+    };
+  }
+  return {
+    message: error instanceof Error ? error.message : fallback,
+    data: {},
+  };
+}
+
+export function usePluginsManager() {
+  const { t } = useTranslation();
+  const confirm = useConfirm();
+  const [installed, setInstalled] = useState<PluginSummary[]>([]);
+  const [registry, setRegistry] = useState<RegistryListing | null>(null);
+  const [registryError, setRegistryError] = useState<string | null>(null);
+  const [loading, setLoading] = useState(true);
+  const [refreshing, setRefreshing] = useState(false);
+  const [busy, setBusy] = useState<Set<string>>(new Set());
+  const [consent, setConsent] = useState<ConsentRequest | null>(null);
+  const [developer, setDeveloper] = useState<DeveloperModeState>({
+    enabled: false,
+    signedOnly: false,
+  });
+  const mounted = useRef(true);
+
+  useEffect(() => {
+    mounted.current = true;
+    return () => {
+      mounted.current = false;
+    };
+  }, []);
+
+  const load = useCallback(async (refresh = false) => {
+    if (refresh) setRefreshing(true);
+    const [plugins, listing, devMode] = await Promise.allSettled([
+      getPlugins(),
+      getPluginRegistry(refresh),
+      getDeveloperMode(),
+    ]);
+    if (!mounted.current) return;
+    if (plugins.status === "fulfilled") setInstalled(plugins.value);
+    if (devMode.status === "fulfilled") setDeveloper(devMode.value);
+    if (listing.status === "fulfilled") {
+      setRegistry(listing.value);
+      setRegistryError(listing.value.registry.error);
+    } else {
+      setRegistryError(readError(listing.reason, "").message || "unreachable");
+    }
+    setLoading(false);
+    setRefreshing(false);
+  }, []);
+
+  useEffect(() => {
+    void load();
+  }, [load]);
+
+  // The switch lives in admin settings, which may change while this is open.
+  useEffect(() => {
+    const onChange = (event: Event) => {
+      const enabled = (event as CustomEvent<boolean>).detail;
+      if (typeof enabled !== "boolean") return;
+      setDeveloper((current) => ({ ...current, enabled }));
+    };
+    window.addEventListener(DEVELOPER_MODE_CHANGED_EVENT, onChange);
+    return () =>
+      window.removeEventListener(DEVELOPER_MODE_CHANGED_EVENT, onChange);
+  }, []);
+
+  const plugins = useMemo(
+    () => mergePlugins(installed, registry?.plugins ?? null),
+    [installed, registry],
+  );
+
+  const run = useCallback(
+    async (id: string, action: () => Promise<void>) => {
+      setBusy((current) => new Set(current).add(id));
+      try {
+        await action();
+      } finally {
+        if (mounted.current) {
+          setBusy((current) => {
+            const next = new Set(current);
+            next.delete(id);
+            return next;
+          });
+        }
+        await load();
+      }
+    },
+    [load],
+  );
+
+  const failToast = useCallback(
+    (error: unknown, key: string, name: string) => {
+      const info = readError(error, t("plugins.manager.errors.generic"));
+      if (info.code === "MANAGED_BY_SERVER") {
+        toast.error(t("plugins.manager.errors.managedByServer"));
+      } else if (info.code === "HAS_DEPENDENTS") {
+        toast.error(
+          t("plugins.manager.errors.hasDependents", {
+            name,
+            list: ((info.data.dependents as string[]) ?? []).join(", "),
+          }),
+        );
+      } else if (info.code === "MISSING_DEPENDENCIES") {
+        toast.error(
+          t("plugins.manager.errors.missingDependencies", {
+            name,
+            list: ((info.data.missing as string[]) ?? []).join(", "),
+          }),
+        );
+      } else {
+        toast.error(t(key, { name, error: info.message }));
+      }
+    },
+    [t],
+  );
+
+  const versionCapabilities = (plugin: PluginEntry, version: string) =>
+    plugin.versions.find((v) => v.version === version)?.capabilities ?? [];
+
+  const requestInstall = useCallback(
+    (plugin: PluginEntry, version?: string) => {
+      const target = version ?? plugin.latestVersion;
+      if (!target) return;
+      setConsent({
+        plugin,
+        mode: "install",
+        version: target,
+        capabilities: versionCapabilities(plugin, target),
+      });
+    },
+    [],
+  );
+
+  const doInstall = useCallback(
+    (plugin: PluginEntry, version: string, capabilities: string[]) =>
+      run(plugin.id, async () => {
+        try {
+          const result = await installPlugin(plugin.id, {
+            version: version === plugin.latestVersion ? undefined : version,
+            capabilities,
+          });
+          if (result.state === "failed" || result.state === "blocked") {
+            toast.error(
+              t("plugins.manager.toast.installedNotRunning", {
+                name: plugin.name,
+              }),
+            );
+          } else {
+            toast.success(
+              t("plugins.manager.toast.installed", { name: plugin.name }),
+            );
+          }
+        } catch (error) {
+          const info = readError(error, "");
+          if (info.code === "CONSENT_MISMATCH") {
+            toast.error(t("plugins.manager.errors.consentChanged"));
+            setConsent({
+              plugin,
+              mode: "install",
+              version,
+              capabilities: (info.data.capabilities as string[]) ?? [],
+            });
+            return;
+          }
+          failToast(error, "plugins.manager.errors.install", plugin.name);
+        }
+      }),
+    [run, t, failToast],
+  );
+
+  const doUpdate = useCallback(
+    (plugin: PluginEntry, version: string, accepted: string[] | null) =>
+      run(plugin.id, async () => {
+        try {
+          await updatePlugin(plugin.id, {
+            version: version === plugin.latestVersion ? undefined : version,
+            acceptCapabilities: accepted !== null,
+            capabilities: accepted ?? undefined,
+          });
+          toast.success(
+            t("plugins.manager.toast.updated", {
+              name: plugin.name,
+              version,
+            }),
+          );
+        } catch (error) {
+          const info = readError(error, "");
+          if (
+            info.code === "CAPABILITIES_ADDED" ||
+            info.code === "CONSENT_MISMATCH"
+          ) {
+            if (info.code === "CONSENT_MISMATCH") {
+              toast.error(t("plugins.manager.errors.consentChanged"));
+            }
+            setConsent({
+              plugin,
+              mode: "update",
+              version,
+              capabilities: (info.data.capabilities as string[]) ?? [],
+            });
+            return;
+          }
+          failToast(error, "plugins.manager.errors.update", plugin.name);
+        }
+      }),
+    [run, t, failToast],
+  );
+
+  /** Updates, or changes to another version. New capabilities ask first. */
+  const requestUpdate = useCallback(
+    async (plugin: PluginEntry, version?: string) => {
+      const target = version ?? plugin.latestVersion;
+      if (!target || !plugin.version) return;
+      if (
+        semver.valid(target) &&
+        semver.valid(plugin.version) &&
+        semver.lt(target, plugin.version)
+      ) {
+        const ok = await confirm({
+          title: t("plugins.manager.confirm.downgradeTitle", {
+            name: plugin.name,
+            version: target,
+          }),
+          description: t("plugins.manager.confirm.downgradeBody"),
+          confirmLabel: t("plugins.manager.confirm.downgradeConfirm"),
+          destructive: false,
+        });
+        if (!ok) return;
+      }
+      const have = new Set(plugin.capabilities);
+      const added = versionCapabilities(plugin, target).filter(
+        (c) => !have.has(c),
+      );
+      if (added.length > 0) {
+        setConsent({
+          plugin,
+          mode: "update",
+          version: target,
+          capabilities: added,
+        });
+        return;
+      }
+      await doUpdate(plugin, target, null);
+    },
+    [confirm, t, doUpdate],
+  );
+
+  const doInstallUpload = useCallback(
+    (request: ConsentRequest) =>
+      run(request.plugin.id, async () => {
+        try {
+          const result = await installUploadedPlugin(
+            request.uploadToken!,
+            request.capabilities,
+          );
+          if (result.state === "failed" || result.state === "blocked") {
+            toast.error(
+              t("plugins.manager.toast.installedNotRunning", {
+                name: request.plugin.name,
+              }),
+            );
+          } else {
+            toast.success(
+              t("plugins.manager.toast.installed", {
+                name: request.plugin.name,
+              }),
+            );
+          }
+        } catch (error) {
+          failToast(
+            error,
+            "plugins.manager.errors.install",
+            request.plugin.name,
+          );
+        }
+      }),
+    [run, t, failToast],
+  );
+
+  /** Reads a picked .tmxplug and asks for consent before anything loads. */
+  const requestUpload = useCallback(
+    async (file: File) => {
+      try {
+        const preview = await uploadPlugin(file);
+        setConsent({
+          plugin: uploadEntry(preview),
+          mode: "upload",
+          version: preview.version,
+          capabilities: preview.capabilities,
+          uploadToken: preview.token,
+        });
+      } catch (error) {
+        failToast(error, "plugins.manager.errors.upload", file.name);
+      }
+    },
+    [failToast],
+  );
+
+  const confirmConsent = useCallback(async () => {
+    if (!consent) return;
+    const request = consent;
+    setConsent(null);
+    if (request.mode === "upload" && request.uploadToken) {
+      await doInstallUpload(request);
+    } else if (request.mode === "install") {
+      await doInstall(request.plugin, request.version, request.capabilities);
+    } else {
+      await doUpdate(request.plugin, request.version, request.capabilities);
+    }
+  }, [consent, doInstall, doUpdate, doInstallUpload]);
+
+  const nameOf = useCallback(
+    (id: string) => plugins.find((p) => p.id === id)?.name ?? id,
+    [plugins],
+  );
+
+  const toggle = useCallback(
+    async (plugin: PluginEntry) => {
+      const enable = !plugin.enabled;
+      try {
+        const preview = await previewPluginState(plugin.id, enable);
+        if (enable && preview.missing.length > 0) {
+          toast.error(
+            t("plugins.manager.errors.missingDependencies", {
+              name: plugin.name,
+              list: preview.missing.join(", "),
+            }),
+          );
+          return;
+        }
+        const others = enable ? preview.enable : preview.disable;
+        if (others.length > 0) {
+          const ok = await confirm({
+            title: enable
+              ? t("plugins.manager.confirm.enableAlsoTitle", {
+                  name: plugin.name,
+                })
+              : t("plugins.manager.confirm.disableAlsoTitle", {
+                  name: plugin.name,
+                }),
+            description: enable
+              ? t("plugins.manager.confirm.enableAlsoBody", {
+                  list: others.map(nameOf).join(", "),
+                })
+              : t("plugins.manager.confirm.disableAlsoBody", {
+                  list: others.map(nameOf).join(", "),
+                }),
+            confirmLabel: enable
+              ? t("plugins.manager.enable")
+              : t("plugins.manager.disable"),
+            destructive: !enable,
+          });
+          if (!ok) return;
+        }
+      } catch (error) {
+        failToast(error, "plugins.manager.errors.state", plugin.name);
+        return;
+      }
+      await run(plugin.id, async () => {
+        try {
+          const result = await setPluginState(plugin.id, enable);
+          if (result.state === "failed" || result.state === "blocked") {
+            toast.error(
+              t("plugins.manager.toast.failedToStart", { name: plugin.name }),
+            );
+          }
+        } catch (error) {
+          failToast(error, "plugins.manager.errors.state", plugin.name);
+        }
+      });
+    },
+    [confirm, t, run, failToast, nameOf],
+  );
+
+  const retry = useCallback(
+    (plugin: PluginEntry) =>
+      run(plugin.id, async () => {
+        try {
+          await retryPlugin(plugin.id);
+        } catch (error) {
+          failToast(error, "plugins.manager.errors.retry", plugin.name);
+        }
+      }),
+    [run, failToast],
+  );
+
+  const uninstall = useCallback(
+    async (plugin: PluginEntry): Promise<boolean> => {
+      const ok = await confirm({
+        title: t("plugins.manager.confirm.uninstallTitle", {
+          name: plugin.name,
+        }),
+        description: t("plugins.manager.confirm.uninstallBody"),
+        confirmLabel: t("plugins.manager.uninstall"),
+      });
+      if (!ok) return false;
+      let done = false;
+      await run(plugin.id, async () => {
+        try {
+          await uninstallPlugin(plugin.id);
+          done = true;
+          toast.success(
+            t("plugins.manager.toast.uninstalled", { name: plugin.name }),
+          );
+        } catch (error) {
+          failToast(error, "plugins.manager.errors.uninstall", plugin.name);
+        }
+      });
+      return done;
+    },
+    [confirm, t, run, failToast],
+  );
+
+  const removeData = useCallback(
+    async (plugin: PluginEntry): Promise<boolean> => {
+      const ok = await confirm({
+        title: t("plugins.manager.confirm.deleteDataTitle", {
+          name: plugin.name,
+        }),
+        description: t("plugins.manager.confirm.deleteDataBody"),
+        confirmLabel: t("plugins.manager.data.delete"),
+      });
+      if (!ok) return false;
+      let done = false;
+      await run(plugin.id, async () => {
+        try {
+          await deletePluginData(plugin.id);
+          done = true;
+          toast.success(
+            t("plugins.manager.toast.dataDeleted", { name: plugin.name }),
+          );
+        } catch (error) {
+          failToast(error, "plugins.manager.errors.deleteData", plugin.name);
+        }
+      });
+      return done;
+    },
+    [confirm, t, run, failToast],
+  );
+
+  const setOptions = useCallback(
+    (
+      plugin: PluginEntry,
+      options: {
+        autoUpdate?: boolean;
+        pinned?: boolean;
+        channel?: PluginChannel;
+      },
+    ) =>
+      run(plugin.id, async () => {
+        try {
+          await setPluginOptions(plugin.id, options);
+        } catch (error) {
+          failToast(error, "plugins.manager.errors.options", plugin.name);
+        }
+      }),
+    [run, failToast],
+  );
+
+  /** Moves a plugin to betas and installs the newest one. */
+  const tryBeta = useCallback(
+    async (plugin: PluginEntry) => {
+      const version = plugin.latestBeta;
+      const ok = await confirm({
+        title: t("plugins.manager.beta.confirmTitle", { name: plugin.name }),
+        description: t("plugins.manager.beta.confirmBody"),
+        confirmLabel: version
+          ? t("plugins.manager.beta.confirmInstall", { version })
+          : t("plugins.manager.beta.confirmSwitch"),
+        destructive: false,
+      });
+      if (!ok) return;
+      await setOptions(plugin, { channel: "beta", pinned: false });
+      if (version && version !== plugin.version) {
+        await requestUpdate({ ...plugin, pinnedVersion: null }, version);
+      }
+    },
+    [confirm, t, setOptions, requestUpdate],
+  );
+
+  /** Back to stable. An installed beta stays until stable passes it. */
+  const leaveBeta = useCallback(
+    async (plugin: PluginEntry) => {
+      await setOptions(plugin, { channel: "stable" });
+      if (plugin.isBeta) {
+        toast.info(
+          t("plugins.manager.beta.leftWhileOnBeta", {
+            name: plugin.name,
+            version: plugin.version,
+          }),
+        );
+      }
+    },
+    [setOptions, t],
+  );
+
+  const setAllChannels = useCallback(
+    (channel: PluginChannel) =>
+      run("*", async () => {
+        try {
+          await setAllPluginChannels(channel);
+        } catch (error) {
+          failToast(error, "plugins.manager.errors.options", "");
+        }
+      }),
+    [run, failToast],
+  );
+
+  const updateAll = useCallback(
+    () =>
+      run("*", async () => {
+        try {
+          const result = await updateAllPlugins();
+          if (result.updated.length > 0) {
+            toast.success(
+              t("plugins.manager.toast.updatedMany", {
+                count: result.updated.length,
+              }),
+            );
+          }
+          for (const failed of result.failed) {
+            toast.error(
+              t("plugins.manager.errors.update", {
+                name: nameOf(failed.id),
+                error: failed.error,
+              }),
+            );
+          }
+        } catch (error) {
+          failToast(error, "plugins.manager.errors.updateAll", "");
+        }
+      }),
+    [run, t, failToast, nameOf],
+  );
+
+  return {
+    plugins,
+    loading,
+    refreshing,
+    registryError,
+    managedByServer: registry?.managedByServer ?? false,
+    lastCheckedAt: registry?.registry.lastCheckedAt ?? null,
+    busy,
+    consent,
+    setConsent,
+    developerMode: developer.enabled,
+    signedOnly: developer.signedOnly,
+    requestUpload,
+    refresh: () => load(true),
+    requestInstall,
+    requestUpdate,
+    confirmConsent,
+    toggle,
+    retry,
+    uninstall,
+    removeData,
+    setOptions,
+    tryBeta,
+    leaveBeta,
+    setAllChannels,
+    updateAll,
+  };
+}
+
+export type PluginsManager = ReturnType<typeof usePluginsManager>;
diff --git a/src/ui/settings/FeatureSettingsSections.tsx b/src/ui/settings/FeatureSettingsSections.tsx
index 31ca161cb..b1047924a 100644
--- a/src/ui/settings/FeatureSettingsSections.tsx
+++ b/src/ui/settings/FeatureSettingsSections.tsx
@@ -14,7 +14,6 @@ import { AccordionSection } from "@/sidebar/AdminSettingsShared";
 import { pluginKey } from "@/lib/plugin-i18n";
 import { PluginIcon } from "@/lib/plugin-icon";
 import {
-  getPlugins,
   getPluginAdminSettings,
   getPluginUserSettings,
   updatePluginAdminSettings,
@@ -24,6 +23,7 @@ import {
   type PluginSettingsField,
   type PluginSummary,
 } from "@/api/plugins-api";
+import { useInstalledPlugins } from "@/hooks/use-installed-plugins";
 import { SettingsFieldRow } from "./SettingsFields";
 import { hasVisibleFields, isFieldShown } from "./settings-fields-util";
 
@@ -39,19 +39,7 @@ export function featureSectionId(pluginId: string): FeatureSectionId {
 export function useFeatureSettings(
   scope: FeatureSettingsScope,
 ): PluginSummary[] {
-  const [plugins, setPlugins] = useState<PluginSummary[]>([]);
-
-  useEffect(() => {
-    let cancelled = false;
-    void getPlugins()
-      .then((loaded) => {
-        if (!cancelled) setPlugins(loaded);
-      })
-      .catch(() => {});
-    return () => {
-      cancelled = true;
-    };
-  }, []);
+  const plugins = useInstalledPlugins();
 
   return useMemo(
     () =>
@@ -96,7 +84,7 @@ export function FeatureSettingsSection({
   );
 }
 
-function FeatureSettingsForm({
+export function FeatureSettingsForm({
   plugin,
   scope,
   fields,
@@ -208,7 +196,7 @@ function FeatureSettingsForm({
   return (
     <div className="flex flex-col gap-2 pt-2">
       {!running && (
-        <div className="border border-yellow-500/40 bg-yellow-500/10 px-3 py-2 text-xs text-yellow-500">
+        <div className="border border-warning/40 bg-warning/10 px-3 py-2 text-xs text-warning">
           {t("settings.featureUnavailable", {
             name: t(pluginKey(plugin.id, "plugin.name"), {
               defaultValue: plugin.name,
@@ -233,8 +221,9 @@ function FeatureSettingsForm({
 
       <div className="flex justify-end">
         <Button
+          variant="outline"
           size="sm"
-          className="h-7 text-xs"
+          className="h-7 text-xs border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand dark:border-accent-brand/40 dark:bg-transparent dark:hover:bg-accent-brand/10"
           disabled={!dirty || saving}
           onClick={() => void save()}
         >
diff --git a/src/ui/settings/HostPluginSections.tsx b/src/ui/settings/HostPluginSections.tsx
index 948adbae7..a3c895596 100644
--- a/src/ui/settings/HostPluginSections.tsx
+++ b/src/ui/settings/HostPluginSections.tsx
@@ -10,11 +10,13 @@
  * group does not appear as an empty tab.
  */
 
-import { useEffect, useMemo, useState } from "react";
+import { useMemo } from "react";
 import { useTranslation } from "react-i18next";
 import { SectionCard } from "@/components/section-card";
+import { DocsLink } from "@/components/docs-link";
 import { PluginIcon } from "@/lib/plugin-icon";
-import { getPlugins, type PluginSummary } from "@/api/plugins-api";
+import { type PluginSummary } from "@/api/plugins-api";
+import { useInstalledPlugins } from "@/hooks/use-installed-plugins";
 import { usePluginScope } from "@/plugin-host/scope";
 import { SettingsFieldRow } from "./SettingsFields";
 import { hasVisibleFields, isFieldShown } from "./settings-fields-util";
@@ -24,21 +26,7 @@ export type HostPluginSettings = Record<string, Record<string, unknown>>;
 
 /** Enabled plugins declaring host-scope settings. */
 export function usePluginHostSections(): PluginSummary[] {
-  const [plugins, setPlugins] = useState<PluginSummary[]>([]);
-
-  useEffect(() => {
-    let cancelled = false;
-    void getPlugins()
-      .then((loaded) => {
-        if (!cancelled) setPlugins(loaded);
-      })
-      .catch(() => {
-        // Additive: the built-in host tabs do not depend on this.
-      });
-    return () => {
-      cancelled = true;
-    };
-  }, []);
+  const plugins = useInstalledPlugins();
 
   return useMemo(
     () =>
@@ -155,9 +143,10 @@ function HostPluginSection({
     <SectionCard
       title={plugin.name}
       icon={<PluginIcon name={plugin.icon} className="size-3.5" />}
+      action={<DocsLink href={plugin.docs} />}
     >
       {!running && (
-        <div className="my-3 border border-yellow-500/40 bg-yellow-500/10 px-3 py-2 text-xs text-yellow-500">
+        <div className="my-3 border border-warning/40 bg-warning/10 px-3 py-2 text-xs text-warning">
           {t("settings.featureUnavailable", { name: plugin.name })}
         </div>
       )}
diff --git a/src/ui/settings/KeybindingsSettings.tsx b/src/ui/settings/KeybindingsSettings.tsx
new file mode 100644
index 000000000..d68eebc3b
--- /dev/null
+++ b/src/ui/settings/KeybindingsSettings.tsx
@@ -0,0 +1,478 @@
+import { Select2 } from "@/components/select2";
+import { useEffect, useMemo, useState } from "react";
+import { useTranslation } from "react-i18next";
+import { toast } from "sonner";
+import {
+  getUserPreferences,
+  parseCustomKeybindings,
+} from "@/api/open-tabs-api";
+import { saveUserPreferences } from "@/main-axios";
+import {
+  useKeybindingActions,
+  useKeybindingDefaults,
+  type KeybindingActionDef,
+} from "@/shell/keybinding-registry";
+import type {
+  CustomKeybinding,
+  KeybindingAction,
+  KeyCombo,
+} from "@/types/keybindings";
+import { InlineView, useConfirm } from "@/components/surface/surface-scope";
+import { GroupHeading } from "@/components/panel-layout";
+import { Button } from "@/components/button";
+import { Input } from "@/components/input";
+import { Keyboard, Pencil, Plus, RotateCcw, Trash2 } from "lucide-react";
+import { FixedShortcutsList } from "@/sidebar/FixedShortcutsList";
+
+function formatCombo(combo: KeyCombo): string {
+  const parts: string[] = [];
+  if (combo.ctrl) parts.push("Ctrl");
+  if (combo.alt) parts.push("Alt");
+  if (combo.shift) parts.push("Shift");
+  if (combo.meta) parts.push("Cmd");
+  parts.push(combo.key.length === 1 ? combo.key.toUpperCase() : combo.key);
+  return parts.join(" + ");
+}
+
+function generateId(): string {
+  return typeof crypto !== "undefined" && "randomUUID" in crypto
+    ? crypto.randomUUID()
+    : `kb-${Date.now()}-${Math.random().toString(36).slice(2)}`;
+}
+
+/** An action without the keys an editor cleared, so it saves clean. */
+function withoutEmpty(action: KeybindingAction): KeybindingAction {
+  const out: KeybindingAction = { type: action.type };
+  for (const [key, value] of Object.entries(action)) {
+    if (key !== "type" && value !== undefined && value !== null) {
+      out[key] = value;
+    }
+  }
+  return out;
+}
+
+/**
+ * Settings > Keybindings. The actions come from the keybinding registry:
+ * the shell's own and whatever the running plugins register, each with its
+ * own parameter editor. A saved binding whose plugin is off stays in the
+ * list and keeps working once the plugin is back.
+ */
+export function KeybindingsSettings() {
+  const { t } = useTranslation();
+  const confirm = useConfirm();
+  const actions = useKeybindingActions();
+  const defaults = useKeybindingDefaults();
+  const [bindings, setBindings] = useState<CustomKeybinding[]>([]);
+  const [loading, setLoading] = useState(false);
+  const [formOpen, setFormOpen] = useState(false);
+  const [editingId, setEditingId] = useState<string | null>(null);
+  const [overridesDefaultId, setOverridesDefaultId] = useState<
+    string | undefined
+  >(undefined);
+
+  const [recordedCombo, setRecordedCombo] = useState<KeyCombo | null>(null);
+  const [recording, setRecording] = useState(false);
+  const [draft, setDraft] = useState<KeybindingAction>({ type: "" });
+
+  const actionById = useMemo(
+    () => new Map(actions.map((action) => [action.id, action])),
+    [actions],
+  );
+  const draftDef: KeybindingActionDef | undefined = actionById.get(draft.type);
+
+  useEffect(() => {
+    setLoading(true);
+    getUserPreferences()
+      .then((prefs) =>
+        setBindings(parseCustomKeybindings(prefs.customKeybindings)),
+      )
+      .catch(() => setBindings([]))
+      .finally(() => setLoading(false));
+  }, []);
+
+  const conflictWarning = useMemo(() => {
+    if (!recordedCombo) return null;
+    const conflict = bindings.find(
+      (kb) =>
+        kb.id !== editingId &&
+        kb.enabled &&
+        kb.combo.ctrl === recordedCombo.ctrl &&
+        kb.combo.alt === recordedCombo.alt &&
+        kb.combo.shift === recordedCombo.shift &&
+        kb.combo.meta === recordedCombo.meta &&
+        kb.combo.key === recordedCombo.key,
+    );
+    if (conflict) {
+      return t("newUi.sidebar.keybindings.conflictWarning", {
+        combo: formatCombo(conflict.combo),
+      });
+    }
+    return null;
+  }, [recordedCombo, bindings, editingId, t]);
+
+  function actionLabel(type: string): string {
+    const def = actionById.get(type);
+    return def
+      ? t(def.labelKey)
+      : t("newUi.sidebar.keybindings.unavailableAction", { type });
+  }
+
+  function resetForm() {
+    setEditingId(null);
+    setOverridesDefaultId(undefined);
+    setRecordedCombo(null);
+    setRecording(false);
+    setDraft({ type: actions[0]?.id ?? "" });
+  }
+
+  function openAddForm() {
+    resetForm();
+    setFormOpen(true);
+  }
+
+  function openEditForm(kb: CustomKeybinding) {
+    setEditingId(kb.id);
+    setOverridesDefaultId(kb.overridesDefaultId);
+    setRecordedCombo(kb.combo);
+    setRecording(false);
+    setDraft({ ...kb.action });
+    setFormOpen(true);
+  }
+
+  function openOverrideDefaultForm(defaultId: string, combo: KeyCombo) {
+    resetForm();
+    setOverridesDefaultId(defaultId);
+    setRecordedCombo(combo);
+    setFormOpen(true);
+  }
+
+  async function persist(updated: CustomKeybinding[]) {
+    try {
+      await saveUserPreferences({
+        customKeybindings: JSON.stringify(updated),
+      });
+      setBindings(updated);
+      window.dispatchEvent(new Event("customKeybindingsChanged"));
+    } catch {
+      toast.error(t("newUi.sidebar.keybindings.saveError"));
+    }
+  }
+
+  async function handleDelete(id: string) {
+    const ok = await confirm({
+      title: t("newUi.sidebar.keybindings.deleteConfirm"),
+    });
+    if (ok) persist(bindings.filter((kb) => kb.id !== id));
+  }
+
+  async function handleResetAll() {
+    const ok = await confirm({
+      title: t("newUi.sidebar.keybindings.resetAllConfirm"),
+      confirmLabel: t("newUi.sidebar.keybindings.resetAllToDefaults"),
+    });
+    if (ok) persist([]);
+  }
+
+  function startRecording(inputEl: HTMLInputElement) {
+    setRecording(true);
+    const handler = (e: KeyboardEvent) => {
+      e.preventDefault();
+      e.stopPropagation();
+      if (["Control", "Alt", "Shift", "Meta"].includes(e.key)) {
+        return;
+      }
+      const isAlnum = /^[a-zA-Z0-9]$/.test(e.key);
+      const combo: KeyCombo = {
+        key: isAlnum ? e.key.toLowerCase() : e.code,
+        isCode: !isAlnum,
+        ctrl: e.ctrlKey,
+        alt: e.altKey,
+        shift: e.shiftKey,
+        meta: e.metaKey,
+      };
+      setRecordedCombo(combo);
+      setRecording(false);
+      inputEl.removeEventListener("keydown", handler, true);
+      inputEl.blur();
+    };
+    inputEl.addEventListener("keydown", handler, true);
+  }
+
+  function handleSave() {
+    if (!recordedCombo) {
+      toast.error(t("newUi.sidebar.keybindings.comboRequiredError"));
+      return;
+    }
+    if (!draftDef) {
+      toast.error(t("newUi.sidebar.keybindings.actionRequiredError"));
+      return;
+    }
+    const action = withoutEmpty(draft);
+    const problem = draftDef.validate?.(action);
+    if (problem) {
+      toast.error(t(problem));
+      return;
+    }
+
+    const now = new Date().toISOString();
+    const existing = editingId
+      ? bindings.find((kb) => kb.id === editingId)
+      : undefined;
+
+    const newBinding: CustomKeybinding = {
+      id: editingId ?? generateId(),
+      combo: recordedCombo,
+      action,
+      enabled: true,
+      overridesDefaultId,
+      createdAt: existing?.createdAt ?? now,
+      updatedAt: now,
+    };
+
+    const updated = editingId
+      ? bindings.map((kb) => (kb.id === editingId ? newBinding : kb))
+      : [...bindings, newBinding];
+
+    persist(updated);
+    setFormOpen(false);
+    resetForm();
+  }
+
+  const customOnlyBindings = bindings.filter((kb) => !kb.overridesDefaultId);
+  const Editor = draftDef?.editor;
+
+  return (
+    <>
+      <div className="flex flex-col gap-4 border border-border bg-card p-3">
+        <p className="text-xs text-muted-foreground">
+          {t("newUi.sidebar.keybindings.description")}
+        </p>
+        {defaults.length > 0 && (
+          <div className="flex flex-col gap-1.5">
+            <GroupHeading
+              title={t("newUi.sidebar.keybindings.defaultsHeading")}
+            />
+            {defaults.map((def) => {
+              const override = bindings.find(
+                (kb) => kb.overridesDefaultId === def.id,
+              );
+              return (
+                <div
+                  key={def.id}
+                  className="flex items-center justify-between gap-2 border border-border bg-background px-2.5 py-2"
+                >
+                  <div className="flex flex-col min-w-0">
+                    <span className="text-xs font-mono">
+                      {override
+                        ? formatCombo(override.combo)
+                        : formatCombo(def.combo)}
+                    </span>
+                    <span className="text-xs text-muted-foreground truncate">
+                      {t(def.descriptionKey)}
+                    </span>
+                  </div>
+                  <div className="flex items-center gap-1 shrink-0">
+                    {override ? (
+                      <>
+                        <span className="text-[10px] font-bold text-accent-brand border border-accent-brand/40 px-1">
+                          {t("newUi.sidebar.keybindings.customizedBadge")}
+                        </span>
+                        <Button
+                          variant="ghost"
+                          size="icon"
+                          className="size-7"
+                          onClick={() => openEditForm(override)}
+                        >
+                          <Pencil className="size-3.5" />
+                        </Button>
+                        <Button
+                          variant="ghost"
+                          size="icon"
+                          className="size-7 text-muted-foreground hover:text-destructive"
+                          onClick={() => void handleDelete(override.id)}
+                          title={t("newUi.sidebar.keybindings.resetToDefault")}
+                        >
+                          <RotateCcw className="size-3.5" />
+                        </Button>
+                      </>
+                    ) : (
+                      <>
+                        <span className="text-[10px] text-muted-foreground border border-border px-1">
+                          {t("newUi.sidebar.keybindings.defaultBadge")}
+                        </span>
+                        <Button
+                          variant="ghost"
+                          size="icon"
+                          className="size-7"
+                          onClick={() =>
+                            openOverrideDefaultForm(def.id, def.combo)
+                          }
+                          title={t("newUi.sidebar.keybindings.customize")}
+                        >
+                          <Pencil className="size-3.5" />
+                        </Button>
+                      </>
+                    )}
+                  </div>
+                </div>
+              );
+            })}
+          </div>
+        )}
+
+        <div className="flex flex-col gap-1.5">
+          <GroupHeading
+            title={t("newUi.sidebar.keybindings.customHeading")}
+            action={
+              <Button variant="outline" size="sm" onClick={openAddForm}>
+                <Plus className="size-3.5 mr-1" />
+                {t("newUi.sidebar.keybindings.addBinding")}
+              </Button>
+            }
+          />
+          {loading ? (
+            <span className="text-xs text-muted-foreground">
+              {t("newUi.sidebar.keybindings.loading")}
+            </span>
+          ) : customOnlyBindings.length === 0 ? (
+            <span className="text-xs text-muted-foreground/60">
+              {t("newUi.sidebar.keybindings.noCustomBindings")}
+            </span>
+          ) : (
+            customOnlyBindings.map((kb) => {
+              const Summary = actionById.get(kb.action.type)?.summary;
+              return (
+                <div
+                  key={kb.id}
+                  className="flex items-center justify-between gap-2 border border-border bg-background px-2.5 py-2"
+                >
+                  <div className="flex flex-col min-w-0">
+                    <span className="text-xs font-mono">
+                      {formatCombo(kb.combo)}
+                    </span>
+                    <span className="text-xs text-muted-foreground truncate">
+                      {actionLabel(kb.action.type)}
+                      {Summary && (
+                        <>
+                          {" "}
+                          <Summary action={kb.action} onChange={() => {}} />
+                        </>
+                      )}
+                    </span>
+                  </div>
+                  <div className="flex items-center gap-1 shrink-0">
+                    <Button
+                      variant="ghost"
+                      size="icon"
+                      className="size-7"
+                      onClick={() => openEditForm(kb)}
+                    >
+                      <Pencil className="size-3.5" />
+                    </Button>
+                    <Button
+                      variant="ghost"
+                      size="icon"
+                      className="size-7 text-muted-foreground hover:text-destructive"
+                      onClick={() => void handleDelete(kb.id)}
+                    >
+                      <Trash2 className="size-3.5" />
+                    </Button>
+                  </div>
+                </div>
+              );
+            })
+          )}
+        </div>
+        <FixedShortcutsList />
+        <Button
+          variant="ghost"
+          size="sm"
+          className="self-start text-muted-foreground"
+          onClick={() => void handleResetAll()}
+          disabled={bindings.length === 0}
+        >
+          <RotateCcw className="size-3.5 mr-1" />
+          {t("newUi.sidebar.keybindings.resetAllToDefaults")}
+        </Button>
+      </div>
+
+      <InlineView
+        open={formOpen}
+        onOpenChange={setFormOpen}
+        icon={<Keyboard className="size-4" />}
+        title={
+          editingId || overridesDefaultId
+            ? t("newUi.sidebar.keybindings.editBindingTitle")
+            : t("newUi.sidebar.keybindings.addBindingTitle")
+        }
+        footer={
+          <div className="ml-auto flex items-center gap-2">
+            <Button
+              variant="ghost"
+              size="sm"
+              onClick={() => setFormOpen(false)}
+            >
+              {t("newUi.sidebar.keybindings.cancel")}
+            </Button>
+            <Button
+              variant="outline"
+              size="sm"
+              className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
+              onClick={handleSave}
+            >
+              {t("newUi.sidebar.keybindings.saveBinding")}
+            </Button>
+          </div>
+        }
+      >
+        <div className="flex flex-col gap-4">
+          <div className="flex flex-col gap-1.5">
+            <label className="text-xs font-semibold">
+              {t("newUi.sidebar.keybindings.pressKeysToRecord")}{" "}
+              <span className="text-accent-brand">*</span>
+            </label>
+            <Input
+              data-keybinding-recorder
+              readOnly
+              value={
+                recording
+                  ? t("newUi.sidebar.keybindings.recording")
+                  : recordedCombo
+                    ? formatCombo(recordedCombo)
+                    : ""
+              }
+              placeholder={t("newUi.sidebar.keybindings.pressKeysPlaceholder")}
+              onFocus={(e) => startRecording(e.currentTarget)}
+              className="font-mono cursor-pointer"
+            />
+            {conflictWarning && (
+              <span className="text-xs text-warning">{conflictWarning}</span>
+            )}
+          </div>
+
+          <div className="flex flex-col gap-1.5">
+            <label className="text-xs font-semibold">
+              {t("newUi.sidebar.keybindings.actionLabel")}
+            </label>
+            <Select2
+              value={draft.type}
+              onChange={(e) => setDraft({ type: e.target.value })}
+              className="h-8 border border-border bg-background px-2 text-xs outline-none focus:ring-1 focus:ring-ring"
+            >
+              {!draftDef && draft.type && (
+                <option value={draft.type}>{actionLabel(draft.type)}</option>
+              )}
+              {actions.map((action) => (
+                <option key={action.id} value={action.id}>
+                  {t(action.labelKey)}
+                </option>
+              ))}
+            </Select2>
+          </div>
+
+          {Editor && <Editor action={draft} onChange={setDraft} />}
+        </div>
+      </InlineView>
+    </>
+  );
+}
diff --git a/src/ui/settings/SettingsFields.tsx b/src/ui/settings/SettingsFields.tsx
index 9045d7c29..f6909cb02 100644
--- a/src/ui/settings/SettingsFields.tsx
+++ b/src/ui/settings/SettingsFields.tsx
@@ -117,7 +117,7 @@ export function SettingsFieldRow({
             {label(field.labelKey)}
           </span>
           {error && (
-            <span className="text-[10px] font-bold text-yellow-500 border border-yellow-500/40 px-1 shrink-0">
+            <span className="text-[10px] font-bold text-warning border border-warning/40 px-1 shrink-0">
               {t("common.error")}
             </span>
           )}
diff --git a/src/ui/settings/SettingsTab.tsx b/src/ui/settings/SettingsTab.tsx
new file mode 100644
index 000000000..bb790075d
--- /dev/null
+++ b/src/ui/settings/SettingsTab.tsx
@@ -0,0 +1,431 @@
+import { useEffect, useMemo, useRef, useState } from "react";
+import { useTranslation } from "react-i18next";
+import {
+  Bug,
+  ChevronDown,
+  ExternalLink,
+  Search,
+  Settings as SettingsIcon,
+} from "lucide-react";
+import {
+  GroupHeading,
+  PANEL,
+  PanelSearch,
+  PanelShell,
+} from "@/components/panel-layout";
+import { SurfaceScope } from "@/components/surface/surface-scope";
+import { EmptyState } from "@/components/empty-state";
+import { isElectron } from "@/lib/electron";
+import { reportCoreIssueUrl } from "@/lib/issue-url";
+import { cn } from "@/lib/utils";
+import { pluginKey } from "@/lib/plugin-i18n";
+import { PluginIcon } from "@/lib/plugin-icon";
+import type { Host } from "@/types/ui-types";
+import type { UserPreferences } from "@/main-axios";
+import { UserProfilePanel } from "@/sidebar/UserProfilePanel";
+import { AdminSettingsPanel } from "@/sidebar/AdminSettingsPanel";
+import {
+  FeatureSettingsForm,
+  useFeatureSettings,
+} from "./FeatureSettingsSections";
+import { KeybindingsSettings } from "./KeybindingsSettings";
+import { UpdatesSettings } from "./UpdatesSettings";
+import { SettingsEmbedContext } from "./settings-embed";
+import { useSettingsPageFilter } from "./page-filter";
+import {
+  CORE_SETTINGS_PAGES,
+  SETTINGS_BAND_ORDER,
+  searchSettingsPages,
+  visibleSettingsPages,
+  type SettingsBand,
+  type SettingsPage,
+} from "./settings-pages";
+import { usePluginDocsUrl } from "@/components/docs-link";
+import { docsUrl } from "@/lib/docs";
+
+export interface SettingsTabProps {
+  /** The page to open, from the tab's data. */
+  section?: string;
+  /** Changes on every open request, so asking for the same page again still goes there. */
+  sectionAt?: string | number;
+  /** An element id on that page to scroll to, as "id@nonce". */
+  reveal?: string;
+  username: string;
+  isAdmin: boolean;
+  onLogout?: () => void;
+  userPrefs?: UserPreferences;
+  onPrefsChange?: (prefs: Partial<UserPreferences>) => void;
+  onOpenHostTab?: (host: Host) => void;
+}
+
+const BAND_LABEL: Record<SettingsBand, string> = {
+  you: "settings.bandYou",
+  app: "settings.bandApp",
+  plugins: "settings.bandPlugins",
+  instance: "settings.bandInstance",
+};
+
+/** Scrolls to the first text on the page containing the query and marks it. */
+function revealText(container: HTMLElement, needle: string): boolean {
+  const lower = needle.toLowerCase();
+  const walker = document.createTreeWalker(container, NodeFilter.SHOW_TEXT);
+  let node = walker.nextNode();
+  while (node) {
+    if (node.textContent?.toLowerCase().includes(lower)) {
+      const el = node.parentElement;
+      if (el && el.offsetParent !== null) {
+        el.scrollIntoView?.({ block: "center", behavior: "smooth" });
+        el.classList.add("settings-search-hit");
+        window.setTimeout(
+          () => el.classList.remove("settings-search-hit"),
+          1600,
+        );
+        return true;
+      }
+    }
+    node = walker.nextNode();
+  }
+  return false;
+}
+
+/** Everything that configures the app, one page at a time. */
+export function SettingsTab({
+  section,
+  sectionAt,
+  reveal,
+  username,
+  isAdmin,
+  onLogout,
+  userPrefs,
+  onPrefsChange,
+  onOpenHostTab,
+}: SettingsTabProps) {
+  const { t } = useTranslation();
+  const userFeatures = useFeatureSettings("user");
+  const adminFeatures = useFeatureSettings("admin");
+  const [query, setQuery] = useState("");
+  const [navOpen, setNavOpen] = useState(false);
+  const [pageQuery, setPageQuery] = useState("");
+  const contentRef = useRef<HTMLDivElement>(null);
+  const pageRef = useRef<HTMLDivElement>(null);
+
+  const pages = useMemo(() => {
+    const plugins = new Map<string, SettingsPage>();
+    for (const plugin of [...userFeatures, ...(isAdmin ? adminFeatures : [])]) {
+      if (plugins.has(plugin.id)) continue;
+      const fields = [
+        ...(plugin.contributes?.settings?.user ?? []),
+        ...(isAdmin ? (plugin.contributes?.settings?.admin ?? []) : []),
+      ];
+      plugins.set(plugin.id, {
+        id: `plugin:${plugin.id}`,
+        band: "plugins",
+        labelKey: pluginKey(plugin.id, "plugin.name"),
+        label: t(pluginKey(plugin.id, "plugin.name"), {
+          defaultValue: plugin.name,
+        }),
+        icon: SettingsIcon,
+        pluginId: plugin.id,
+        searchKeys: fields.flatMap((field) =>
+          [field.labelKey, field.descriptionKey]
+            .filter((key): key is string => !!key)
+            .map((key) => pluginKey(plugin.id, key)),
+        ),
+      });
+    }
+    return visibleSettingsPages(
+      [
+        ...CORE_SETTINGS_PAGES,
+        ...[...plugins.values()].sort((a, b) =>
+          (a.label ?? "").localeCompare(b.label ?? ""),
+        ),
+      ],
+      { isAdmin, isElectron: isElectron() },
+    );
+  }, [userFeatures, adminFeatures, isAdmin, t]);
+
+  const [current, setCurrent] = useState(section ?? "account");
+  useEffect(() => {
+    if (section) setCurrent(section);
+  }, [section, sectionAt]);
+
+  // The page renders lazily, so the target may take a moment to appear.
+  useEffect(() => {
+    const target = reveal?.split("@")[0];
+    if (!target) return;
+    let tries = 0;
+    let timer = 0;
+    const attempt = () => {
+      const el = contentRef.current?.querySelector<HTMLElement>(
+        `#${CSS.escape(target)}`,
+      );
+      if (el) {
+        el.scrollIntoView?.({ block: "start", behavior: "smooth" });
+        el.classList.add("settings-search-hit");
+        timer = window.setTimeout(
+          () => el.classList.remove("settings-search-hit"),
+          1600,
+        );
+        return;
+      }
+      if (++tries < 15) timer = window.setTimeout(attempt, 120);
+    };
+    timer = window.setTimeout(attempt, 60);
+    return () => window.clearTimeout(timer);
+  }, [reveal]);
+
+  const page =
+    pages.find((p) => p.id === current) ??
+    pages.find((p) => p.id === "account")!;
+  const pageHasMatches = useSettingsPageFilter(pageRef, pageQuery, page.id);
+  const hits = searchSettingsPages(pages, query, (key) => t(key));
+  const pageLabel = (p: SettingsPage) => p.label ?? t(p.labelKey);
+
+  const go = (id: string) => {
+    setCurrent(id);
+    setNavOpen(false);
+    setPageQuery("");
+    contentRef.current?.scrollTo?.({ top: 0 });
+    const needle = query.trim();
+    if (!needle) return;
+    let tries = 0;
+    const attempt = () => {
+      if (!contentRef.current) return;
+      if (revealText(contentRef.current, needle) || ++tries > 12) return;
+      window.setTimeout(attempt, 150);
+    };
+    window.setTimeout(attempt, 60);
+  };
+
+  const pluginDocs = usePluginDocsUrl(page.pluginId);
+  const pageDocs = page.pluginId
+    ? pluginDocs
+    : page.docs
+      ? docsUrl(page.docs)
+      : null;
+
+  const pluginFeature = page.pluginId
+    ? {
+        user: userFeatures.find((p) => p.id === page.pluginId),
+        admin: isAdmin
+          ? adminFeatures.find((p) => p.id === page.pluginId)
+          : undefined,
+      }
+    : null;
+
+  const nav = (
+    <div className="flex flex-col gap-3 py-2.5">
+      <div className="px-2.5">
+        <PanelSearch
+          value={query}
+          onChange={setQuery}
+          placeholder={t("settings.searchPlaceholder")}
+          fill
+        />
+      </div>
+      {query.trim() && hits.length === 0 && (
+        <p className="px-3 text-xs text-muted-foreground">
+          {t("settings.noResults")}
+        </p>
+      )}
+      {SETTINGS_BAND_ORDER.map((band) => {
+        const items = hits.filter((hit) => hit.page.band === band);
+        const reportBug =
+          band === "you" &&
+          (!query.trim() ||
+            t("dashboard.reportBug")
+              .toLowerCase()
+              .includes(query.trim().toLowerCase()));
+        if (items.length === 0 && !reportBug) return null;
+        return (
+          <div key={band} className="flex flex-col">
+            <GroupHeading
+              title={t(BAND_LABEL[band])}
+              className="px-2.5 pb-1.5"
+            />
+            {items.map(({ page: item, match }) => {
+              const on = item.id === page.id;
+              const Icon = item.icon;
+              return (
+                <button
+                  key={item.id}
+                  type="button"
+                  onClick={() => go(item.id)}
+                  aria-current={on ? "page" : undefined}
+                  className={cn(
+                    "flex w-full flex-col border-l-2 py-1.5 pl-2 pr-2 text-left transition-colors focus-visible:relative focus-visible:z-10 focus-visible:ring-1 focus-visible:ring-ring",
+                    on
+                      ? "border-accent-brand bg-accent-brand/10 text-accent-brand"
+                      : "border-transparent text-muted-foreground hover:bg-muted hover:text-foreground",
+                  )}
+                >
+                  <span className="flex items-center gap-2">
+                    {item.pluginId ? (
+                      <PluginIcon
+                        name={
+                          [...userFeatures, ...adminFeatures].find(
+                            (p) => p.id === item.pluginId,
+                          )?.icon
+                        }
+                        className="size-3.5 shrink-0"
+                      />
+                    ) : (
+                      <Icon className="size-3.5 shrink-0" />
+                    )}
+                    <span className="truncate text-xs font-medium">
+                      {pageLabel(item)}
+                    </span>
+                  </span>
+                  {match && (
+                    <span className="truncate pl-5.5 text-[10px] text-muted-foreground">
+                      {match}
+                    </span>
+                  )}
+                </button>
+              );
+            })}
+            {reportBug && (
+              <a
+                href={reportCoreIssueUrl(
+                  import.meta.env.VITE_APP_VERSION || undefined,
+                )}
+                target="_blank"
+                rel="noopener noreferrer"
+                className="flex w-full items-center gap-2 border-l-2 border-transparent py-1.5 pl-2 pr-2 text-left text-muted-foreground transition-colors hover:bg-muted hover:text-foreground focus-visible:relative focus-visible:z-10 focus-visible:ring-1 focus-visible:ring-ring"
+              >
+                <Bug className="size-3.5 shrink-0" />
+                <span className="truncate text-xs font-medium">
+                  {t("dashboard.reportBug")}
+                </span>
+                <ExternalLink className="ml-auto size-3 shrink-0" />
+              </a>
+            )}
+          </div>
+        );
+      })}
+    </div>
+  );
+
+  const showProfile = !!page.profileSection && page.id !== "keybindings";
+  const showAdmin = !!page.adminSection;
+
+  return (
+    <PanelShell
+      icon={<SettingsIcon className="size-4" />}
+      title={t("nav.settings")}
+      status={pageLabel(page)}
+      scroll={false}
+      docs={pageDocs}
+      actions={
+        <button
+          type="button"
+          onClick={() => setNavOpen((v) => !v)}
+          aria-expanded={navOpen}
+          className="flex items-center gap-1 px-2 py-1 text-xs text-muted-foreground hover:text-foreground md:hidden"
+        >
+          {t("settings.pages")}
+          <ChevronDown
+            className={cn(
+              "size-3.5 transition-transform",
+              navOpen && "rotate-180",
+            )}
+          />
+        </button>
+      }
+    >
+      <div className="relative flex min-h-0 flex-1">
+        <nav
+          aria-label={t("settings.pages")}
+          className={cn(
+            "w-full shrink-0 overflow-y-auto border-r border-border bg-background thin-scrollbar md:static md:block md:w-60",
+            navOpen ? "absolute inset-0 z-20 block" : "hidden",
+          )}
+        >
+          {nav}
+        </nav>
+
+        <SurfaceScope kind="tab" className="min-w-0">
+          <div className={`shrink-0 border-b border-border ${PANEL.band}`}>
+            <div className="mx-auto w-full max-w-3xl">
+              <PanelSearch
+                value={pageQuery}
+                onChange={setPageQuery}
+                placeholder={t("settings.searchPage")}
+                fill
+              />
+            </div>
+          </div>
+          <div
+            ref={contentRef}
+            className={`min-h-0 flex-1 overflow-y-auto thin-scrollbar ${PANEL.body}`}
+          >
+            {!pageHasMatches && (
+              <EmptyState icon={Search} title={t("settings.noPageMatches")} />
+            )}
+            <div
+              ref={pageRef}
+              className={`mx-auto flex w-full max-w-3xl flex-col ${PANEL.gap} pb-6`}
+            >
+              <SettingsEmbedContext.Provider value>
+                <div className={showProfile ? "contents" : "hidden"}>
+                  <UserProfilePanel
+                    section={page.profileSection ?? "__none__"}
+                    username={username}
+                    onLogout={onLogout}
+                    userPrefs={userPrefs}
+                    onPrefsChange={onPrefsChange}
+                    onOpenSettingsPage={go}
+                  />
+                </div>
+                {isAdmin && (
+                  <div className={showAdmin ? "contents" : "hidden"}>
+                    <AdminSettingsPanel
+                      section={page.adminSection ?? ("__none__" as never)}
+                      onOpenHostTab={onOpenHostTab}
+                    />
+                  </div>
+                )}
+              </SettingsEmbedContext.Provider>
+              {page.id === "keybindings" && <KeybindingsSettings />}
+              {page.id === "updates" && isAdmin && <UpdatesSettings />}
+              {pluginFeature && (
+                <>
+                  {pluginFeature.user && (
+                    <FeatureSettingsForm
+                      plugin={pluginFeature.user}
+                      scope="user"
+                      fields={
+                        pluginFeature.user.contributes?.settings?.user ?? []
+                      }
+                    />
+                  )}
+                  {pluginFeature.admin && (
+                    <>
+                      <GroupHeading
+                        title={t("settings.instanceSettings")}
+                        className="pt-2"
+                      />
+                      <FeatureSettingsForm
+                        plugin={pluginFeature.admin}
+                        scope="admin"
+                        fields={
+                          pluginFeature.admin.contributes?.settings?.admin ?? []
+                        }
+                      />
+                    </>
+                  )}
+                  {!pluginFeature.user && !pluginFeature.admin && (
+                    <EmptyState
+                      icon={SettingsIcon}
+                      title={t("settings.nothingHere")}
+                    />
+                  )}
+                </>
+              )}
+            </div>
+          </div>
+        </SurfaceScope>
+      </div>
+    </PanelShell>
+  );
+}
diff --git a/src/ui/settings/UpdatesSettings.tsx b/src/ui/settings/UpdatesSettings.tsx
new file mode 100644
index 000000000..1c9c99c8a
--- /dev/null
+++ b/src/ui/settings/UpdatesSettings.tsx
@@ -0,0 +1,319 @@
+import { useCallback, useEffect, useState } from "react";
+import { useTranslation } from "react-i18next";
+import { toast } from "sonner";
+import { Copy, ExternalLink, FlaskConical, Puzzle, Tag } from "lucide-react";
+import { Button } from "@/components/button";
+import { FakeSwitch, SectionCard, SettingRow } from "@/components/section-card";
+import {
+  getChannelReleases,
+  getUpdateChannel,
+  setUpdateChannel,
+  type ReleaseInfo,
+  type UpdateChannelState,
+} from "@/api/system-status-api";
+import {
+  getPlugins,
+  setAllPluginChannels,
+  setPluginOptions,
+  type PluginSummary,
+} from "@/api/plugins-api";
+import { reportBetaFeedbackUrl } from "@/lib/issue-url";
+import { isElectron } from "@/lib/electron";
+import { isPrerelease } from "@/plugins/plugin-model";
+import { OPEN_PLUGINS_EVENT } from "@/plugins/open-plugins";
+import { docsUrl } from "@/lib/docs";
+
+const DOCKER_BETA_IMAGE = "ghcr.io/termix-ssh/termix:beta";
+
+function onBeta(plugin: PluginSummary): boolean {
+  return plugin.channel === "beta" || isPrerelease(plugin.version);
+}
+
+function ReleaseRow({
+  label,
+  release,
+}: {
+  label: string;
+  release: ReleaseInfo | null;
+}) {
+  const { t } = useTranslation();
+  return (
+    <SettingRow
+      label={label}
+      description={
+        release
+          ? new Date(release.publishedAt).toLocaleDateString()
+          : t("settings.updates.noRelease")
+      }
+    >
+      {release && (
+        <a
+          href={release.url}
+          target="_blank"
+          rel="noopener noreferrer"
+          className="flex items-center gap-1 text-xs font-medium text-accent-brand hover:underline"
+        >
+          v{release.version}
+          <ExternalLink className="size-3" />
+        </a>
+      )}
+    </SettingRow>
+  );
+}
+
+export function UpdatesSettings() {
+  const { t } = useTranslation();
+  const [channel, setChannel] = useState<UpdateChannelState | null>(null);
+  const [releases, setReleases] = useState<{
+    stable: ReleaseInfo | null;
+    beta: ReleaseInfo | null;
+  } | null>(null);
+  const [plugins, setPlugins] = useState<PluginSummary[]>([]);
+  const [busy, setBusy] = useState(false);
+  const version = import.meta.env.VITE_APP_VERSION || undefined;
+
+  const loadPlugins = useCallback(async () => {
+    try {
+      setPlugins(await getPlugins());
+    } catch {
+      setPlugins([]);
+    }
+  }, []);
+
+  useEffect(() => {
+    getUpdateChannel()
+      .then(setChannel)
+      .catch(() => setChannel(null));
+    getChannelReleases()
+      .then(setReleases)
+      .catch(() => setReleases({ stable: null, beta: null }));
+    void loadPlugins();
+  }, [loadPlugins]);
+
+  const betaPlugins = plugins.filter(onBeta);
+  const runningBetas = plugins
+    .filter((plugin) => isPrerelease(plugin.version))
+    .map((plugin) => ({ id: plugin.id, version: plugin.version }));
+  const joined = channel?.channel === "beta";
+
+  const changeChannel = async (next: boolean) => {
+    setBusy(true);
+    try {
+      setChannel(await setUpdateChannel(next ? "beta" : "stable"));
+    } catch {
+      toast.error(t("settings.updates.saveFailed"));
+    } finally {
+      setBusy(false);
+    }
+  };
+
+  const changePlugins = async (action: () => Promise<unknown>) => {
+    setBusy(true);
+    try {
+      await action();
+    } catch {
+      toast.error(t("settings.updates.saveFailed"));
+    } finally {
+      await loadPlugins();
+      setBusy(false);
+    }
+  };
+
+  const copyImage = async () => {
+    try {
+      await navigator.clipboard.writeText(DOCKER_BETA_IMAGE);
+      toast.success(t("settings.updates.copied"));
+    } catch {
+      toast.error(t("settings.updates.copyFailed"));
+    }
+  };
+
+  return (
+    <div className="flex flex-col gap-3">
+      <SectionCard
+        title={t("settings.updates.betaProgram")}
+        icon={<FlaskConical className="size-3.5" />}
+        rowId="updates-beta"
+      >
+        <p className="py-3 text-xs leading-relaxed text-muted-foreground">
+          {t("settings.updates.betaIntro")}
+        </p>
+        <SettingRow
+          label={t("settings.updates.termixBetas")}
+          description={
+            channel?.runningBeta
+              ? t("settings.updates.runningBetaBuild")
+              : t("settings.updates.termixBetasHint")
+          }
+        >
+          <FakeSwitch
+            checked={joined}
+            disabled={busy || !channel || channel.runningBeta}
+            onChange={(next) => void changeChannel(next)}
+          />
+        </SettingRow>
+        {joined && !channel?.runningBeta && (
+          <div className="flex flex-col gap-2 py-3 text-xs">
+            <span className="font-medium">
+              {t("settings.updates.howToInstall")}
+            </span>
+            {isElectron() ? (
+              <span className="text-muted-foreground">
+                {t("settings.updates.desktopInstall")}{" "}
+                {releases?.beta && (
+                  <a
+                    href={releases.beta.url}
+                    target="_blank"
+                    rel="noopener noreferrer"
+                    className="text-accent-brand hover:underline"
+                  >
+                    {t("settings.updates.downloadBeta", {
+                      version: releases.beta.version,
+                    })}
+                  </a>
+                )}
+              </span>
+            ) : (
+              <>
+                <span className="text-muted-foreground">
+                  {t("settings.updates.dockerInstall")}
+                </span>
+                <div className="flex items-center gap-2">
+                  <code className="flex-1 truncate border border-border bg-muted/40 px-2 py-1.5 font-mono text-[11px]">
+                    {DOCKER_BETA_IMAGE}
+                  </code>
+                  <Button
+                    size="sm"
+                    variant="outline"
+                    className="h-8 gap-1.5"
+                    onClick={() => void copyImage()}
+                  >
+                    <Copy className="size-3.5" />
+                    {t("settings.updates.copy")}
+                  </Button>
+                </div>
+              </>
+            )}
+            <a
+              href={docsUrl("betas")}
+              target="_blank"
+              rel="noopener noreferrer"
+              className="flex items-center gap-1 text-accent-brand hover:underline"
+            >
+              {t("settings.updates.learnMore")}
+              <ExternalLink className="size-3" />
+            </a>
+          </div>
+        )}
+        <SettingRow
+          label={t("settings.updates.feedback")}
+          description={t("settings.updates.feedbackHint")}
+        >
+          <Button size="sm" variant="outline" className="h-8 gap-1.5" asChild>
+            <a
+              href={reportBetaFeedbackUrl(version, runningBetas)}
+              target="_blank"
+              rel="noopener noreferrer"
+            >
+              {t("settings.updates.sendFeedback")}
+            </a>
+          </Button>
+        </SettingRow>
+      </SectionCard>
+
+      <SectionCard
+        title={t("settings.updates.releases")}
+        icon={<Tag className="size-3.5" />}
+        rowId="updates-releases"
+      >
+        <SettingRow label={t("settings.updates.thisVersion")}>
+          <span className="text-xs font-medium">
+            {version ? `v${version}` : "-"}
+          </span>
+        </SettingRow>
+        <ReleaseRow
+          label={t("settings.updates.newestStable")}
+          release={releases?.stable ?? null}
+        />
+        <ReleaseRow
+          label={t("settings.updates.newestBeta")}
+          release={releases?.beta ?? null}
+        />
+      </SectionCard>
+
+      <SectionCard
+        title={t("settings.updates.pluginBetas")}
+        icon={<Puzzle className="size-3.5" />}
+        rowId="updates-plugins"
+      >
+        <p className="py-3 text-xs leading-relaxed text-muted-foreground">
+          {t("settings.updates.pluginBetasIntro")}{" "}
+          <button
+            type="button"
+            className="text-accent-brand hover:underline"
+            onClick={() =>
+              window.dispatchEvent(new CustomEvent(OPEN_PLUGINS_EVENT))
+            }
+          >
+            {t("settings.updates.openPlugins")}
+          </button>
+        </p>
+        {betaPlugins.map((plugin) => (
+          <SettingRow
+            key={plugin.id}
+            label={plugin.name}
+            description={
+              plugin.channel === "beta"
+                ? `v${plugin.version}`
+                : t("settings.updates.waitingForStable", {
+                    version: plugin.version,
+                  })
+            }
+          >
+            {plugin.channel === "beta" && (
+              <Button
+                size="sm"
+                variant="outline"
+                className="h-8"
+                disabled={busy}
+                onClick={() =>
+                  void changePlugins(() =>
+                    setPluginOptions(plugin.id, { channel: "stable" }),
+                  )
+                }
+              >
+                {t("settings.updates.backToStable")}
+              </Button>
+            )}
+          </SettingRow>
+        ))}
+        {plugins.length > 0 && (
+          <div className="flex flex-wrap gap-2 py-3">
+            <Button
+              size="sm"
+              variant="outline"
+              className="h-8"
+              disabled={busy}
+              onClick={() =>
+                void changePlugins(() => setAllPluginChannels("beta"))
+              }
+            >
+              {t("settings.updates.allPluginsBeta")}
+            </Button>
+            <Button
+              size="sm"
+              variant="outline"
+              className="h-8"
+              disabled={busy || betaPlugins.length === 0}
+              onClick={() =>
+                void changePlugins(() => setAllPluginChannels("stable"))
+              }
+            >
+              {t("settings.updates.allPluginsStable")}
+            </Button>
+          </div>
+        )}
+      </SectionCard>
+    </div>
+  );
+}
diff --git a/src/ui/settings/appearance/appearance-controls.tsx b/src/ui/settings/appearance/appearance-controls.tsx
new file mode 100644
index 000000000..823c029bf
--- /dev/null
+++ b/src/ui/settings/appearance/appearance-controls.tsx
@@ -0,0 +1,412 @@
+/* eslint-disable react-refresh/only-export-components */
+import { useRef, useState } from "react";
+import { useTranslation } from "react-i18next";
+import { Check } from "lucide-react";
+import { useTheme } from "@/components/theme-provider";
+import { Input } from "@/components/input";
+import { Select2 } from "@/components/select2";
+import {
+  ACCENT_PRESET_COLORS,
+  applyAccentColor,
+  applyFontSize,
+  applyUiFont,
+  FONT_SIZES,
+  UI_FONTS,
+} from "@/lib/theme";
+import { changeAppLanguage, normalizeLanguageCode } from "@/i18n/i18n";
+import { getUserPreferences, saveUserPreferences } from "@/api/open-tabs-api";
+import type { FontSizeId, ThemeId, UiFontId } from "@/types/ui-types";
+
+export const DEFAULT_ACCENT = "#f59145";
+
+export const THEMES: { id: ThemeId; preview: string }[] = [
+  { id: "system", preview: "auto" },
+  { id: "light", preview: "#ffffff" },
+  { id: "dark", preview: "#1a1c22" },
+  { id: "dracula", preview: "#282a36" },
+  { id: "catppuccin", preview: "#1e1e2e" },
+  { id: "nord", preview: "#2e3440" },
+  { id: "solarized", preview: "#002b36" },
+  { id: "tokyo-night", preview: "#1a1b26" },
+  { id: "one-dark", preview: "#282c34" },
+  { id: "gruvbox", preview: "#282828" },
+];
+
+/** Background, panel and text colours for the little theme previews. */
+const THEME_PALETTES: Record<
+  Exclude<ThemeId, "system">,
+  { bg: string; panel: string; text: string }
+> = {
+  light: { bg: "#ffffff", panel: "#eef0f3", text: "#1f2937" },
+  dark: { bg: "#1a1c22", panel: "#25272e", text: "#e5e7eb" },
+  dracula: { bg: "#282a36", panel: "#44475a", text: "#f8f8f2" },
+  catppuccin: { bg: "#1e1e2e", panel: "#313244", text: "#cdd6f4" },
+  nord: { bg: "#2e3440", panel: "#3b4252", text: "#eceff4" },
+  solarized: { bg: "#002b36", panel: "#073642", text: "#93a1a1" },
+  "tokyo-night": { bg: "#1a1b26", panel: "#24283b", text: "#c0caf5" },
+  "one-dark": { bg: "#282c34", panel: "#21252b", text: "#abb2bf" },
+  gruvbox: { bg: "#282828", panel: "#3c3836", text: "#ebdbb2" },
+};
+
+export const LANGUAGES = [
+  { code: "en", label: "English" },
+  { code: "af", label: "Afrikaans" },
+  { code: "ar", label: "العربية" },
+  { code: "bn", label: "বাংলা" },
+  { code: "bg", label: "Български" },
+  { code: "ca", label: "Català" },
+  { code: "zh-CN", label: "中文 (简体)" },
+  { code: "zh-TW", label: "中文 (繁體)" },
+  { code: "cs", label: "Čeština" },
+  { code: "da", label: "Dansk" },
+  { code: "nl", label: "Nederlands" },
+  { code: "fi", label: "Suomi" },
+  { code: "fr", label: "Français" },
+  { code: "de", label: "Deutsch" },
+  { code: "el", label: "Ελληνικά" },
+  { code: "he", label: "עברית" },
+  { code: "hi", label: "हिन्दी" },
+  { code: "hu", label: "Magyar" },
+  { code: "id", label: "Indonesia" },
+  { code: "it", label: "Italiano" },
+  { code: "ja", label: "日本語" },
+  { code: "ko", label: "한국어" },
+  { code: "no", label: "Norsk" },
+  { code: "pl", label: "Polski" },
+  { code: "pt-PT", label: "Português (PT)" },
+  { code: "pt-BR", label: "Português (BR)" },
+  { code: "ro", label: "Română" },
+  { code: "ru", label: "Русский" },
+  { code: "sr", label: "Српски" },
+  { code: "es-ES", label: "Español" },
+  { code: "sv-SE", label: "Svenska" },
+  { code: "th", label: "ไทย" },
+  { code: "tr", label: "Türkçe" },
+  { code: "uk", label: "Українська" },
+  { code: "vi", label: "Tiếng Việt" },
+];
+
+export const THEME_LABEL_KEYS: Record<ThemeId, string> = {
+  system: "newUi.sidebar.userProfile.themeSystem",
+  light: "newUi.sidebar.userProfile.themeLight",
+  dark: "newUi.sidebar.userProfile.themeDark",
+  dracula: "newUi.sidebar.userProfile.themeDracula",
+  catppuccin: "newUi.sidebar.userProfile.themeCatppuccin",
+  nord: "newUi.sidebar.userProfile.themeNord",
+  solarized: "newUi.sidebar.userProfile.themeSolarized",
+  "tokyo-night": "newUi.sidebar.userProfile.themeTokyoNight",
+  "one-dark": "newUi.sidebar.userProfile.themeOneDark",
+  gruvbox: "newUi.sidebar.userProfile.themeGruvbox",
+};
+
+export function isHexColor(value: string): boolean {
+  return /^#[0-9a-fA-F]{6}$/.test(value) || /^#[0-9a-fA-F]{3}$/.test(value);
+}
+
+type CloudPrefs = Parameters<typeof saveUserPreferences>[0];
+
+/** Saves to the account only for users who sync settings to the server. */
+async function saveIfCloud(prefs: CloudPrefs): Promise<void> {
+  try {
+    const current = await getUserPreferences();
+    if (current?.storageMode === "cloud") await saveUserPreferences(prefs);
+  } catch {
+    // The local copy already holds the change.
+  }
+}
+
+/**
+ * Theme, accent, font and language, applied right away and stored the same
+ * way the profile settings store them.
+ */
+export function useAppearanceSettings() {
+  const { theme, setTheme } = useTheme();
+  const [accent, setAccentState] = useState(
+    () => localStorage.getItem("termix-accent") ?? DEFAULT_ACCENT,
+  );
+  const [fontSize, setFontSizeState] = useState<FontSizeId>(
+    () => (localStorage.getItem("termix-font-size") as FontSizeId) ?? "md",
+  );
+  const [uiFont, setUiFontState] = useState<UiFontId>(
+    () =>
+      (localStorage.getItem("termix-ui-font") as UiFontId) ?? "jetbrains-mono",
+  );
+  const [language, setLanguageState] = useState(() =>
+    normalizeLanguageCode(localStorage.getItem("i18nextLng")),
+  );
+
+  return {
+    theme,
+    accent,
+    fontSize,
+    uiFont,
+    language,
+    setTheme(id: ThemeId) {
+      setTheme(id);
+      void saveIfCloud({ theme: id });
+    },
+    setAccent(value: string) {
+      setAccentState(value);
+      localStorage.setItem("termix-accent", value);
+      applyAccentColor(value);
+      void saveIfCloud({ accentColor: value });
+    },
+    setFontSize(id: FontSizeId) {
+      setFontSizeState(id);
+      applyFontSize(id);
+      void saveIfCloud({ fontSize: id });
+    },
+    setUiFont(id: UiFontId) {
+      setUiFontState(id);
+      applyUiFont(id);
+    },
+    setLanguage(code: string) {
+      void changeAppLanguage(code)
+        .then((next) => {
+          setLanguageState(next);
+          void saveIfCloud({ language: next });
+        })
+        .catch(() => {});
+    },
+  };
+}
+
+function ThemePreview({ id }: { id: ThemeId }) {
+  if (id === "system") {
+    return (
+      <div className="flex h-14 w-full">
+        <div className="flex-1">
+          <MiniWindow {...THEME_PALETTES.light} />
+        </div>
+        <div className="flex-1">
+          <MiniWindow {...THEME_PALETTES.dark} />
+        </div>
+      </div>
+    );
+  }
+  return (
+    <div className="h-14 w-full">
+      <MiniWindow {...THEME_PALETTES[id]} />
+    </div>
+  );
+}
+
+function MiniWindow({
+  bg,
+  panel,
+  text,
+}: {
+  bg: string;
+  panel: string;
+  text: string;
+}) {
+  return (
+    <div className="flex h-full w-full" style={{ background: bg }}>
+      <div
+        className="flex w-1/4 flex-col gap-1 p-1"
+        style={{ background: panel }}
+      >
+        <div className="h-1 w-3/4" style={{ background: text, opacity: 0.6 }} />
+        <div
+          className="h-1 w-1/2"
+          style={{ background: text, opacity: 0.35 }}
+        />
+        <div
+          className="h-1 w-2/3"
+          style={{ background: text, opacity: 0.35 }}
+        />
+      </div>
+      <div className="flex flex-1 flex-col gap-1 p-1.5">
+        <div className="h-1 w-1/2 bg-accent-brand" />
+        <div
+          className="h-1 w-5/6"
+          style={{ background: text, opacity: 0.45 }}
+        />
+        <div className="h-1 w-2/3" style={{ background: text, opacity: 0.3 }} />
+      </div>
+    </div>
+  );
+}
+
+export function ThemeGrid({
+  value,
+  onChange,
+}: {
+  value: ThemeId;
+  onChange: (id: ThemeId) => void;
+}) {
+  const { t } = useTranslation();
+  return (
+    <div className="grid grid-cols-2 gap-2 sm:grid-cols-3 lg:grid-cols-5">
+      {THEMES.map(({ id }) => {
+        const active = value === id;
+        return (
+          <button
+            key={id}
+            type="button"
+            aria-pressed={active}
+            onClick={() => onChange(id)}
+            className={`flex flex-col overflow-hidden border text-left transition-colors ${
+              active
+                ? "border-accent-brand ring-1 ring-accent-brand"
+                : "border-border hover:border-foreground/40"
+            }`}
+          >
+            <ThemePreview id={id} />
+            <span className="flex items-center justify-between gap-1 border-t border-border bg-card px-2 py-1.5 text-[11px]">
+              {t(THEME_LABEL_KEYS[id])}
+              {active && <Check size={11} className="text-accent-brand" />}
+            </span>
+          </button>
+        );
+      })}
+    </div>
+  );
+}
+
+export function AccentPicker({
+  value,
+  onChange,
+}: {
+  value: string;
+  onChange: (value: string) => void;
+}) {
+  const { t } = useTranslation();
+  const colorInputRef = useRef<HTMLInputElement>(null);
+  const [draft, setDraft] = useState(value);
+  const [lastValue, setLastValue] = useState(value);
+  if (value !== lastValue) {
+    setLastValue(value);
+    setDraft(value);
+  }
+
+  const commit = () => {
+    const next = draft.trim();
+    if (isHexColor(next)) onChange(next);
+    else setDraft(value);
+  };
+
+  return (
+    <div className="flex flex-col gap-2">
+      <div className="grid grid-cols-6 gap-1.5 sm:grid-cols-12">
+        {ACCENT_PRESET_COLORS.map((color) => (
+          <button
+            key={color.value}
+            type="button"
+            title={color.label}
+            aria-label={color.label}
+            aria-pressed={value === color.value}
+            onClick={() => onChange(color.value)}
+            className="flex h-7 items-center justify-center border border-border"
+            style={{ background: color.value }}
+          >
+            {value === color.value && (
+              <Check size={12} className="text-white drop-shadow" />
+            )}
+          </button>
+        ))}
+      </div>
+      <div className="flex items-center gap-2 border border-border bg-muted/30 px-2 py-1.5">
+        <button
+          type="button"
+          onClick={() => colorInputRef.current?.click()}
+          className="size-5 shrink-0 cursor-pointer border border-border/60"
+          style={{ background: value }}
+          title={t("newUi.sidebar.userProfile.colorPickerTooltip")}
+        />
+        <input
+          ref={colorInputRef}
+          type="color"
+          value={
+            value.startsWith("#") && value.length === 7 ? value : "#f97316"
+          }
+          onChange={(e) => onChange(e.target.value)}
+          className="sr-only"
+        />
+        <Input
+          value={draft}
+          onChange={(e) => setDraft(e.target.value)}
+          onBlur={commit}
+          onKeyDown={(e) => {
+            if (e.key === "Enter") commit();
+          }}
+          placeholder="#f97316"
+          className="h-6 min-w-0 flex-1 border-0 bg-transparent p-0 font-mono text-[11px] focus-visible:ring-0"
+        />
+        <span className="shrink-0 text-[10px] text-muted-foreground">hex</span>
+      </div>
+    </div>
+  );
+}
+
+export function FontSizePicker({
+  value,
+  onChange,
+}: {
+  value: FontSizeId;
+  onChange: (id: FontSizeId) => void;
+}) {
+  return (
+    <div className="flex gap-1">
+      {FONT_SIZES.map((size) => (
+        <button
+          key={size.id}
+          type="button"
+          aria-pressed={value === size.id}
+          onClick={() => onChange(size.id)}
+          className={`flex-1 border py-1.5 text-[10px] font-bold transition-colors ${
+            value === size.id
+              ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand"
+              : "border-border text-muted-foreground hover:text-foreground"
+          }`}
+        >
+          {size.label}
+        </button>
+      ))}
+    </div>
+  );
+}
+
+export function UiFontSelect({
+  value,
+  onChange,
+}: {
+  value: UiFontId;
+  onChange: (id: UiFontId) => void;
+}) {
+  return (
+    <Select2
+      value={value}
+      onChange={(e) => onChange(e.target.value as UiFontId)}
+      className="w-full border border-border bg-background px-2.5 py-1.5 text-xs text-foreground outline-none focus:ring-1 focus:ring-ring"
+    >
+      {UI_FONTS.map((font) => (
+        <option key={font.id} value={font.id}>
+          {font.label}
+        </option>
+      ))}
+    </Select2>
+  );
+}
+
+export function LanguageSelect({
+  value,
+  onChange,
+}: {
+  value: string;
+  onChange: (code: string) => void;
+}) {
+  return (
+    <Select2
+      value={value}
+      onChange={(e) => onChange(e.target.value)}
+      className="w-full border border-border bg-background px-2.5 py-1.5 text-xs text-foreground outline-none focus:ring-1 focus:ring-ring"
+    >
+      {LANGUAGES.map((lang) => (
+        <option key={lang.code} value={lang.code}>
+          {lang.label}
+        </option>
+      ))}
+    </Select2>
+  );
+}
diff --git a/src/ui/settings/page-filter.ts b/src/ui/settings/page-filter.ts
new file mode 100644
index 000000000..991d4bc46
--- /dev/null
+++ b/src/ui/settings/page-filter.ts
@@ -0,0 +1,139 @@
+import { useEffect, useState, type RefObject } from "react";
+
+export const HIDDEN_ATTR = "data-search-hidden";
+const HIGHLIGHT = "settings-search";
+const BLOCK = ".bg-card, [data-setting-row]";
+
+function matches(el: Element, needle: string) {
+  return (el.textContent ?? "").toLowerCase().includes(needle);
+}
+
+/** Visible blocks with no other block above them inside root. */
+function topBlocks(root: HTMLElement, blocks: Element[], selector: string) {
+  return blocks.filter((el) => {
+    let parent = el.parentElement;
+    while (parent && parent !== root) {
+      if (parent.matches(selector) || parent.classList.contains("hidden"))
+        return false;
+      parent = parent.parentElement;
+    }
+    return true;
+  });
+}
+
+/**
+ * Hides the cards and rows on a settings page that do not contain the query.
+ * A card whose own text matches keeps every row; otherwise only its matching
+ * rows stay. Returns how many cards are still showing.
+ */
+export function filterSettingsPage(
+  root: HTMLElement,
+  query: string,
+  blockSelector: string = BLOCK,
+): number {
+  for (const el of root.querySelectorAll(`[${HIDDEN_ATTR}]`)) {
+    el.removeAttribute(HIDDEN_ATTR);
+  }
+  const needle = query.trim().toLowerCase();
+  const blocks = [...root.querySelectorAll(blockSelector)];
+  const cards = topBlocks(root, blocks, blockSelector);
+  if (!needle) return cards.length;
+
+  let shown = 0;
+  for (const card of cards) {
+    if (!matches(card, needle)) {
+      card.setAttribute(HIDDEN_ATTR, "");
+      continue;
+    }
+    shown++;
+    const rows = [...card.querySelectorAll("[data-setting-row]")].filter(
+      (row) => row !== card,
+    );
+    if (!rows.some((row) => matches(row, needle))) continue;
+    for (const row of rows) {
+      if (!matches(row, needle)) row.setAttribute(HIDDEN_ATTR, "");
+    }
+    for (const inner of card.querySelectorAll(".bg-card")) {
+      if (inner !== card && !matches(inner, needle)) {
+        inner.setAttribute(HIDDEN_ATTR, "");
+      }
+    }
+  }
+  return shown;
+}
+
+type HighlightRegistry = Map<string, unknown>;
+
+function highlights(): HighlightRegistry | undefined {
+  const css = (globalThis as { CSS?: { highlights?: HighlightRegistry } }).CSS;
+  return css?.highlights;
+}
+
+/** Marks every match with the CSS highlight API where the browser has it. */
+function highlightMatches(root: HTMLElement, query: string) {
+  const registry = highlights();
+  const Highlight = (
+    globalThis as { Highlight?: new (...r: Range[]) => unknown }
+  ).Highlight;
+  if (!registry || !Highlight) return;
+  registry.delete(HIGHLIGHT);
+  const needle = query.trim().toLowerCase();
+  if (!needle) return;
+  const ranges: Range[] = [];
+  const walker = document.createTreeWalker(root, NodeFilter.SHOW_TEXT);
+  for (let node = walker.nextNode(); node; node = walker.nextNode()) {
+    const text = node.textContent?.toLowerCase() ?? "";
+    let at = text.indexOf(needle);
+    while (at !== -1) {
+      const range = document.createRange();
+      range.setStart(node, at);
+      range.setEnd(node, at + needle.length);
+      ranges.push(range);
+      at = text.indexOf(needle, at + needle.length);
+    }
+  }
+  registry.set(HIGHLIGHT, new Highlight(...ranges));
+}
+
+/**
+ * Keeps a settings page filtered while its content loads and changes.
+ * Returns false when the query hides everything.
+ */
+export function useSettingsPageFilter(
+  rootRef: RefObject<HTMLElement | null>,
+  query: string,
+  pageKey: string,
+  blockSelector: string = BLOCK,
+  onFiltered?: (root: HTMLElement) => void,
+): boolean {
+  const [anyShown, setAnyShown] = useState(true);
+  useEffect(() => {
+    const root = rootRef.current;
+    if (!root) return;
+    let frame = 0;
+    const run = () => {
+      cancelAnimationFrame(frame);
+      frame = requestAnimationFrame(() => {
+        setAnyShown(
+          filterSettingsPage(root, query, blockSelector) > 0 || !query.trim(),
+        );
+        highlightMatches(root, query);
+        onFiltered?.(root);
+      });
+    };
+    run();
+    if (!query.trim()) return () => cancelAnimationFrame(frame);
+    const observer = new MutationObserver(run);
+    observer.observe(root, {
+      childList: true,
+      subtree: true,
+      characterData: true,
+    });
+    return () => {
+      observer.disconnect();
+      cancelAnimationFrame(frame);
+      highlights()?.delete(HIGHLIGHT);
+    };
+  }, [rootRef, query, pageKey, blockSelector, onFiltered]);
+  return anyShown;
+}
diff --git a/src/ui/settings/settings-embed.ts b/src/ui/settings/settings-embed.ts
new file mode 100644
index 000000000..2316ccfa4
--- /dev/null
+++ b/src/ui/settings/settings-embed.ts
@@ -0,0 +1,11 @@
+import { createContext, useContext } from "react";
+
+/**
+ * True inside a Settings tab page. Panels built from accordion sections then
+ * show only the open one, flat, since the page already names it.
+ */
+export const SettingsEmbedContext = createContext(false);
+
+export function useSettingsEmbedded(): boolean {
+  return useContext(SettingsEmbedContext);
+}
diff --git a/src/ui/settings/settings-fields-util.ts b/src/ui/settings/settings-fields-util.ts
index 5aa83e0ce..9f2a2ff89 100644
--- a/src/ui/settings/settings-fields-util.ts
+++ b/src/ui/settings/settings-fields-util.ts
@@ -1,4 +1,4 @@
-import { isFieldActive } from "@termix/plugin-sdk/settings";
+import { isFieldActive } from "@termix-ssh/plugin-sdk/settings";
 import type { PluginSettingsField } from "@/api/plugins-api";
 
 /**
@@ -19,3 +19,24 @@ export function isFieldShown(
 export function hasVisibleFields(fields: PluginSettingsField[]): boolean {
   return fields.some((field) => !field.hidden);
 }
+
+/** Whether Settings lists a page for this plugin, by the same rule it uses. */
+export function hasSettingsPage(
+  plugin: {
+    enabled: boolean;
+    contributes?: {
+      settings?: {
+        user?: PluginSettingsField[];
+        admin?: PluginSettingsField[];
+      };
+    } | null;
+  },
+  isAdmin: boolean,
+): boolean {
+  const settings = plugin.contributes?.settings;
+  return (
+    plugin.enabled &&
+    (hasVisibleFields(settings?.user ?? []) ||
+      (isAdmin && hasVisibleFields(settings?.admin ?? [])))
+  );
+}
diff --git a/src/ui/settings/settings-pages.ts b/src/ui/settings/settings-pages.ts
new file mode 100644
index 000000000..2d94ee148
--- /dev/null
+++ b/src/ui/settings/settings-pages.ts
@@ -0,0 +1,259 @@
+import {
+  Database,
+  FileText,
+  FlaskConical,
+  Globe,
+  KeyRound,
+  Keyboard,
+  Lock,
+  Monitor,
+  Palette,
+  Server,
+  Settings,
+  Shield,
+  SlidersHorizontal,
+  User,
+  Users,
+  type LucideIcon,
+} from "lucide-react";
+import type { AdminSection } from "@/types/ui-types";
+import type { DocsPage } from "@/lib/docs";
+import { SETTINGS_SEARCH_INDEX } from "./settings-search-index";
+
+export type SettingsBand = "you" | "app" | "plugins" | "instance";
+
+export const SETTINGS_BAND_ORDER: SettingsBand[] = [
+  "you",
+  "app",
+  "plugins",
+  "instance",
+];
+
+export interface SettingsPage {
+  id: string;
+  band: SettingsBand;
+  labelKey: string;
+  /** Already translated, for plugin pages named after the plugin. */
+  label?: string;
+  icon: LucideIcon;
+  /** Only for admins. */
+  admin?: boolean;
+  /** Left out of the desktop app. */
+  browserOnly?: boolean;
+  /** The profile section this page shows. */
+  profileSection?: string;
+  /** The admin section this page shows. */
+  adminSection?: AdminSection;
+  /** A plugin's settings page. */
+  pluginId?: string;
+  /** The docs page for this settings page. Plugin pages use the plugin's docs. */
+  docs?: DocsPage;
+  /** i18n keys whose text search matches. */
+  searchKeys: string[];
+}
+
+function core(
+  page: Omit<SettingsPage, "searchKeys"> & { indexId?: string },
+): SettingsPage {
+  return {
+    ...page,
+    searchKeys: SETTINGS_SEARCH_INDEX[page.indexId ?? page.id] ?? [],
+  };
+}
+
+export const CORE_SETTINGS_PAGES: SettingsPage[] = [
+  core({
+    id: "account",
+    docs: "account",
+    band: "you",
+    labelKey: "settings.account",
+    icon: User,
+    profileSection: "account",
+  }),
+  core({
+    id: "security",
+    docs: "accountSecurity",
+    band: "you",
+    labelKey: "settings.security",
+    icon: Shield,
+    profileSection: "security",
+    browserOnly: true,
+  }),
+  core({
+    id: "api-keys",
+    docs: "apiKeys",
+    band: "you",
+    labelKey: "settings.apiKeys",
+    icon: KeyRound,
+    profileSection: "api-keys",
+  }),
+  core({
+    id: "data",
+    docs: "accountData",
+    band: "you",
+    labelKey: "settings.data",
+    icon: Database,
+    profileSection: "data",
+  }),
+  core({
+    id: "interface",
+    docs: "interfaceSettings",
+    band: "app",
+    labelKey: "settings.interface",
+    icon: SlidersHorizontal,
+    profileSection: "interface",
+  }),
+  core({
+    id: "appearance",
+    docs: "appearance",
+    band: "app",
+    labelKey: "settings.appearance",
+    icon: Palette,
+    profileSection: "appearance",
+  }),
+  core({
+    id: "keybindings",
+    docs: "keybindings",
+    band: "app",
+    labelKey: "settings.keybindings",
+    icon: Keyboard,
+    profileSection: "keybindings",
+  }),
+  core({
+    id: "admin-general",
+    docs: "adminGeneral",
+    band: "instance",
+    labelKey: "settings.adminGeneral",
+    icon: Settings,
+    admin: true,
+    adminSection: "general",
+  }),
+  core({
+    id: "updates",
+    docs: "updating",
+    band: "instance",
+    labelKey: "settings.updates.title",
+    icon: FlaskConical,
+    admin: true,
+  }),
+  core({
+    id: "admin-users",
+    docs: "users",
+    band: "instance",
+    labelKey: "settings.adminUsers",
+    icon: Users,
+    admin: true,
+    adminSection: "users",
+  }),
+  core({
+    id: "admin-sessions",
+    docs: "sessions",
+    band: "instance",
+    labelKey: "settings.adminSessions",
+    icon: Monitor,
+    admin: true,
+    adminSection: "sessions",
+  }),
+  core({
+    id: "admin-roles",
+    docs: "roles",
+    band: "instance",
+    labelKey: "settings.adminRoles",
+    icon: Lock,
+    admin: true,
+    adminSection: "roles",
+  }),
+  core({
+    id: "admin-host-defaults",
+    docs: "hostDefaults",
+    band: "instance",
+    labelKey: "settings.adminHostDefaults",
+    icon: Server,
+    admin: true,
+    adminSection: "host-defaults",
+  }),
+  core({
+    id: "admin-branding",
+    docs: "branding",
+    band: "instance",
+    labelKey: "settings.adminBranding",
+    icon: Palette,
+    admin: true,
+    adminSection: "branding",
+  }),
+  core({
+    id: "admin-database",
+    docs: "adminDatabase",
+    band: "instance",
+    labelKey: "settings.adminDatabase",
+    icon: Database,
+    admin: true,
+    adminSection: "database",
+  }),
+  core({
+    id: "admin-ssl",
+    docs: "adminSsl",
+    band: "instance",
+    labelKey: "settings.adminSsl",
+    icon: Globe,
+    admin: true,
+    adminSection: "ssl",
+  }),
+  core({
+    id: "admin-api-keys",
+    docs: "apiKeys",
+    band: "instance",
+    labelKey: "settings.adminApiKeys",
+    icon: KeyRound,
+    admin: true,
+    adminSection: "api-keys",
+  }),
+  core({
+    id: "admin-audit-log",
+    docs: "auditLog",
+    band: "instance",
+    labelKey: "settings.adminAuditLog",
+    icon: FileText,
+    admin: true,
+    adminSection: "audit-log",
+  }),
+];
+
+/** The pages this user can reach, in nav order. */
+export function visibleSettingsPages(
+  pages: SettingsPage[],
+  { isAdmin, isElectron }: { isAdmin: boolean; isElectron: boolean },
+): SettingsPage[] {
+  return pages.filter(
+    (page) => (!page.admin || isAdmin) && (!page.browserOnly || !isElectron),
+  );
+}
+
+export interface SettingsSearchHit {
+  page: SettingsPage;
+  /** The first matching phrase, to show under the page name. */
+  match: string;
+}
+
+/** Pages whose name or any label on them contains the query. */
+export function searchSettingsPages(
+  pages: SettingsPage[],
+  query: string,
+  translate: (key: string) => string,
+): SettingsSearchHit[] {
+  const needle = query.trim().toLowerCase();
+  if (!needle) return pages.map((page) => ({ page, match: "" }));
+  const hits: SettingsSearchHit[] = [];
+  for (const page of pages) {
+    const label = page.label ?? translate(page.labelKey);
+    if (label.toLowerCase().includes(needle)) {
+      hits.push({ page, match: "" });
+      continue;
+    }
+    const phrase = page.searchKeys
+      .map((key) => translate(key))
+      .find((text) => text.toLowerCase().includes(needle));
+    if (phrase) hits.push({ page, match: phrase });
+  }
+  return hits;
+}
diff --git a/src/ui/settings/settings-search-index.ts b/src/ui/settings/settings-search-index.ts
new file mode 100644
index 000000000..799be11fc
--- /dev/null
+++ b/src/ui/settings/settings-search-index.ts
@@ -0,0 +1,467 @@
+// Generated by scripts/generate-settings-search-index.cjs. Do not edit.
+
+/** The i18n keys each core settings section shows, for search. */
+export const SETTINGS_SEARCH_INDEX: Record<string, string[]> = {
+  "account": [
+    "newUi.sidebar.userProfile.authMethodLabel",
+    "newUi.sidebar.userProfile.cliDescription",
+    "newUi.sidebar.userProfile.cliLearnMore",
+    "newUi.sidebar.userProfile.cliTitle",
+    "newUi.sidebar.userProfile.deleteAccount",
+    "newUi.sidebar.userProfile.deleteAccountDescription",
+    "newUi.sidebar.userProfile.deleteButton",
+    "newUi.sidebar.userProfile.desktopProfileDescription",
+    "newUi.sidebar.userProfile.desktopProfileTitle",
+    "newUi.sidebar.userProfile.linkedProfileDescription",
+    "newUi.sidebar.userProfile.linkedProfileTitle",
+    "newUi.sidebar.userProfile.manageSync",
+    "newUi.sidebar.userProfile.onBetaDescription",
+    "newUi.sidebar.userProfile.onBetaTitle",
+    "newUi.sidebar.userProfile.openUpdates",
+    "newUi.sidebar.userProfile.roleLabel",
+    "newUi.sidebar.userProfile.sectionAccount",
+    "newUi.sidebar.userProfile.sendBetaFeedback",
+    "newUi.sidebar.userProfile.setUpSync",
+    "newUi.sidebar.userProfile.tryBetaDescription",
+    "newUi.sidebar.userProfile.tryBetaTitle",
+    "newUi.sidebar.userProfile.twoFaLabel",
+    "newUi.sidebar.userProfile.twoFaOff",
+    "newUi.sidebar.userProfile.twoFaOn",
+    "newUi.sidebar.userProfile.usernameLabel",
+    "newUi.sidebar.userProfile.versionLabel",
+  ],
+  "admin-api-keys": [
+    "admin.apiKeyCreatedWarning",
+    "admin.apiKeyExpiresAt",
+    "admin.apiKeyName",
+    "admin.apiKeyNoExpiry",
+    "admin.apiKeySelectUser",
+    "admin.apiKeyUser",
+    "admin.apiKeysCliHint",
+    "admin.apiKeysCliLink",
+    "admin.apiKeysCount",
+    "admin.apiKeysDocsLink",
+    "admin.copiedToClipboard",
+    "admin.createKey",
+    "admin.createRole",
+    "admin.creating",
+    "admin.done",
+    "admin.newApiKey",
+    "admin.revokeKey",
+    "admin.revokeKeyConfirm",
+    "admin.revokeKeyFailed",
+    "admin.revokeKeySuccess",
+    "admin.revokedBadge",
+    "admin.sectionApiKeys",
+    "common.cancel",
+    "placeholders.apiKeyName",
+  ],
+  "admin-audit-log": [
+    "admin.auditForwardingDesc",
+    "admin.auditForwardingEnvNotice",
+    "admin.auditForwardingSaveError",
+    "admin.auditForwardingSaved",
+    "admin.auditForwardingTitle",
+    "admin.auditForwardingToken",
+    "admin.auditForwardingTokenStored",
+    "admin.auditLogClearFilters",
+    "admin.auditLogEmpty",
+    "admin.auditLogFailed",
+    "admin.auditLogFilterAction",
+    "admin.auditLogFilterAll",
+    "admin.auditLogFilterFrom",
+    "admin.auditLogFilterResourceType",
+    "admin.auditLogFilterStatus",
+    "admin.auditLogFilterTo",
+    "admin.auditLogFilterUser",
+    "admin.auditLogIp",
+    "admin.auditLogPage",
+    "admin.auditLogResourceId",
+    "admin.auditLogSuccess",
+    "admin.auditLogTotal",
+    "admin.sectionAuditLog",
+    "common.save",
+  ],
+  "admin-branding": [
+    "admin.brandingAppName",
+    "admin.brandingAppNameDesc",
+    "admin.brandingLogo",
+    "admin.brandingLogoDesc",
+    "admin.brandingLogoInvalid",
+    "admin.brandingLogoReset",
+    "admin.brandingLogoUpload",
+    "admin.brandingTagline",
+    "admin.brandingTaglineDesc",
+    "admin.sectionBranding",
+    "common.loading",
+    "common.save",
+    "common.saving",
+  ],
+  "admin-database": [
+    "admin.changeFile",
+    "admin.export",
+    "admin.exportDatabase",
+    "admin.exportDatabaseDesc",
+    "admin.exporting",
+    "admin.import",
+    "admin.importDatabase",
+    "admin.importDatabaseDesc",
+    "admin.importDatabaseSelected",
+    "admin.importing",
+    "admin.sectionDatabase",
+    "admin.selectFile",
+  ],
+  "admin-general": [
+    "admin.allowPasswordLogin",
+    "admin.allowPasswordLoginDesc",
+    "admin.allowPasswordReset",
+    "admin.allowPasswordResetDesc",
+    "admin.allowRegistration",
+    "admin.allowRegistrationDesc",
+    "admin.externalAutoProvision",
+    "admin.externalAutoProvisionDesc",
+    "admin.hours",
+    "admin.logLevel",
+    "admin.monitoringDefaults",
+    "admin.notificationPrivateEndpoints",
+    "admin.notificationPrivateEndpointsDesc",
+    "admin.passwordLoginForced",
+    "admin.sec",
+    "admin.secondFactorAfterExternalLogin",
+    "admin.secondFactorAfterExternalLoginDesc",
+    "admin.sectionGeneral",
+    "admin.sessionTimeout",
+    "admin.sessionTimeoutRange",
+    "admin.statusCheck",
+    "common.save",
+    "plugins.manager.developer.enable",
+    "plugins.manager.developer.enableBody",
+    "plugins.manager.developer.enableTitle",
+    "plugins.manager.developer.hint",
+    "plugins.manager.developer.signedOnly",
+    "plugins.manager.developer.title",
+    "plugins.manager.errors.developerMode",
+  ],
+  "admin-host-defaults": [
+    "admin.hostTags",
+    "admin.hostTagsDesc",
+    "admin.hostTagsError",
+    "admin.sectionHostDefaults",
+    "common.remove",
+    "hostDefaults.adminSectionDescription",
+    "hostDefaults.editServerDefaults",
+    "hosts.addTag",
+  ],
+  "admin-roles": [
+    "admin.createRole",
+    "admin.creating",
+    "admin.customBadge",
+    "admin.deleteRoleConfirm",
+    "admin.deleteRoleSuccess",
+    "admin.newRole",
+    "admin.roleDescription",
+    "admin.roleDisplayName",
+    "admin.roleName",
+    "admin.rolePermissions.count",
+    "admin.rolePermissions.editAction",
+    "admin.rolePermissions.loadError",
+    "admin.rolePermissions.pluginDisabled",
+    "admin.rolePermissions.save",
+    "admin.rolePermissions.saveError",
+    "admin.rolePermissions.saved",
+    "admin.rolePermissions.saving",
+    "admin.rolesCount",
+    "admin.sectionRoles",
+    "admin.systemBadge",
+    "common.cancel",
+    "common.optional",
+  ],
+  "admin-sessions": [
+    "admin.revokeAll",
+    "admin.revokeAllSessionsConfirm",
+    "admin.revokeAllSessionsFailed",
+    "admin.revokeAllSessionsSuccess",
+    "admin.revokeSession",
+    "admin.revokeSessionConfirm",
+    "admin.revokeSessionFailed",
+    "admin.sectionSessions",
+    "admin.sessionActive",
+    "admin.sessionExpires",
+    "admin.sessionsActive",
+    "admin.youBadge",
+  ],
+  "admin-ssl": [
+    "admin.sectionSsl",
+    "admin.sslCertExpiresAt",
+    "admin.sslCertStatus",
+    "admin.sslCertStatusExpired",
+    "admin.sslCertStatusExpiring",
+    "admin.sslCertStatusNone",
+    "admin.sslCertStatusValid",
+    "admin.sslDescription",
+    "admin.sslDocsLink",
+    "admin.sslInfoNote",
+    "admin.sslIssuer",
+    "admin.sslManualCert",
+    "admin.sslManualCertPlaceholder",
+    "admin.sslManualDesc",
+    "admin.sslManualKey",
+    "admin.sslManualKeyPlaceholder",
+    "admin.sslManualTitle",
+    "admin.sslManualUpload",
+    "admin.sslManualUploadLoading",
+    "admin.sslNames",
+    "admin.sslNotRenewed",
+    "admin.sslRenewedBy",
+    "admin.sslSelfSigned",
+  ],
+  "admin-users": [
+    "admin.addRole",
+    "admin.adminBadge",
+    "admin.adminStatusAdministrator",
+    "admin.adminStatusRegularUser",
+    "admin.assignRoleFailed",
+    "admin.authTypeDual",
+    "admin.authTypeExternal",
+    "admin.authTypeLocal",
+    "admin.createUser",
+    "admin.createUserDesc",
+    "admin.createUserEnterUsername",
+    "admin.createUserPassword",
+    "admin.createUserPasswordHint",
+    "admin.createUserSubmit",
+    "admin.createUserTitle",
+    "admin.createUserUsername",
+    "admin.creating",
+    "admin.deleteUser",
+    "admin.deleteUserConfirm",
+    "admin.deleteUserFailed",
+    "admin.deleteUserSuccess",
+    "admin.deleteUserWarning",
+    "admin.deleting",
+    "admin.editUserAdminStatus",
+    "admin.editUserAuthType",
+    "admin.editUserDesc",
+    "admin.editUserTitle",
+    "admin.editUserUserId",
+    "admin.editUserUsername",
+    "admin.linkAccountDesc",
+    "admin.linkAccountDescLocal",
+    "admin.linkAccountEffect1",
+    "admin.linkAccountEffect2",
+    "admin.linkAccountEffect3",
+    "admin.linkAccountExternalNotFound",
+    "admin.linkAccountExternalPlaceholder",
+    "admin.linkAccountExternalUsername",
+    "admin.linkAccountFailed",
+    "admin.linkAccountInProgress",
+    "admin.linkAccountSuccess",
+    "admin.linkAccountTargetPlaceholder",
+    "admin.linkAccountTargetUsername",
+    "admin.linkAccountTitle",
+    "admin.linkAccountWarningTitle",
+    "admin.linkAccounts",
+    "admin.manageUserData",
+    "admin.noCustomRoles",
+    "admin.noUsers",
+    "admin.noUsersMatch",
+    "admin.pageOf",
+    "admin.removeRoleFailed",
+    "admin.revoke",
+    "admin.revokeAllUserSessions",
+    "admin.revokeAllUserSessionsDesc",
+    "admin.searchUsers",
+    "admin.sectionUsers",
+    "admin.unlinkAccount",
+    "admin.unlinkAccountDesc",
+    "admin.unlinkAccountFailed",
+    "admin.unlinkAccountInProgress",
+    "admin.unlinkAccountSuccess",
+    "admin.unlinkAccountTitle",
+    "admin.unlinkAccountWarning",
+    "admin.userAdminAccess",
+    "admin.userAdminAccessDesc",
+    "admin.userRoles",
+    "admin.usersCount",
+    "common.cancel",
+    "common.loading",
+    "common.next",
+    "common.previous",
+    "manage.cannotBeUndone",
+    "placeholders.enterPassword",
+  ],
+  "api-keys": [
+    "admin.revokeKey",
+    "admin.revokeKeyConfirm",
+    "newUi.sidebar.userProfile.apiKeyActive",
+    "newUi.sidebar.userProfile.apiKeyCount",
+    "newUi.sidebar.userProfile.apiKeyCreateFailed",
+    "newUi.sidebar.userProfile.apiKeyCreated",
+    "newUi.sidebar.userProfile.apiKeyCreatedWarning",
+    "newUi.sidebar.userProfile.apiKeyExpires",
+    "newUi.sidebar.userProfile.apiKeyNameLabel",
+    "newUi.sidebar.userProfile.apiKeyNamePlaceholder",
+    "newUi.sidebar.userProfile.apiKeyNameRequired",
+    "newUi.sidebar.userProfile.apiKeyPermissionsHint",
+    "newUi.sidebar.userProfile.apiKeyRevokeFailed",
+    "newUi.sidebar.userProfile.apiKeyRevoked",
+    "newUi.sidebar.userProfile.apiKeyUsageHint",
+    "newUi.sidebar.userProfile.apiKeyUsageHintHeader",
+    "newUi.sidebar.userProfile.apiKeyUser",
+    "newUi.sidebar.userProfile.cancel",
+    "newUi.sidebar.userProfile.copiedToClipboard",
+    "newUi.sidebar.userProfile.copyApiKey",
+    "newUi.sidebar.userProfile.createApiKeyDescription",
+    "newUi.sidebar.userProfile.createApiKeyTitle",
+    "newUi.sidebar.userProfile.createKey",
+    "newUi.sidebar.userProfile.done",
+    "newUi.sidebar.userProfile.expiryDateLabel",
+    "newUi.sidebar.userProfile.newKey",
+    "newUi.sidebar.userProfile.noApiKeys",
+    "newUi.sidebar.userProfile.optional",
+    "newUi.sidebar.userProfile.sectionApiKeys",
+  ],
+  "appearance": [
+    "newUi.sidebar.userProfile.accentColorLabel",
+    "newUi.sidebar.userProfile.colorPickerTooltip",
+    "newUi.sidebar.userProfile.commandPalette",
+    "newUi.sidebar.userProfile.commandPaletteDesc",
+    "newUi.sidebar.userProfile.confirmTabClose",
+    "newUi.sidebar.userProfile.confirmTabCloseDesc",
+    "newUi.sidebar.userProfile.disableUpdateChecks",
+    "newUi.sidebar.userProfile.disableUpdateChecksDesc",
+    "newUi.sidebar.userProfile.expandAppRailOnHover",
+    "newUi.sidebar.userProfile.expandAppRailOnHoverDesc",
+    "newUi.sidebar.userProfile.fontSizeLabel",
+    "newUi.sidebar.userProfile.interfaceFontDescription",
+    "newUi.sidebar.userProfile.interfaceFontLabel",
+    "newUi.sidebar.userProfile.keyboardShortcuts",
+    "newUi.sidebar.userProfile.keyboardShortcutsDescription",
+    "newUi.sidebar.userProfile.languageLabel",
+    "newUi.sidebar.userProfile.manageShortcuts",
+    "newUi.sidebar.userProfile.navigationTabsDesc",
+    "newUi.sidebar.userProfile.pinAppRail",
+    "newUi.sidebar.userProfile.pinAppRailDesc",
+    "newUi.sidebar.userProfile.reopenTabsOnLogin",
+    "newUi.sidebar.userProfile.reopenTabsOnLoginDesc",
+    "newUi.sidebar.userProfile.sectionAppearance",
+    "newUi.sidebar.userProfile.settingsAppRail",
+    "newUi.sidebar.userProfile.settingsNavigation",
+    "newUi.sidebar.userProfile.settingsTabsAndShortcuts",
+    "newUi.sidebar.userProfile.settingsUpdates",
+    "newUi.sidebar.userProfile.showPinAppRailButton",
+    "newUi.sidebar.userProfile.showPinAppRailButtonDesc",
+    "newUi.sidebar.userProfile.showTabNumbers",
+    "newUi.sidebar.userProfile.showTabNumbersDesc",
+    "newUi.sidebar.userProfile.sidebarSettingsMoved",
+    "newUi.sidebar.userProfile.themeLabel",
+  ],
+  "data": [
+    "newUi.sidebar.userProfile.cancel",
+    "newUi.sidebar.userProfile.changeFile",
+    "newUi.sidebar.userProfile.confirmPasswordDeletePlaceholder",
+    "newUi.sidebar.userProfile.confirmPasswordLabel",
+    "newUi.sidebar.userProfile.deleteAccount",
+    "newUi.sidebar.userProfile.deleteAccountPermanent",
+    "newUi.sidebar.userProfile.deleteAccountWarning",
+    "newUi.sidebar.userProfile.deleting",
+    "newUi.sidebar.userProfile.export",
+    "newUi.sidebar.userProfile.exportData",
+    "newUi.sidebar.userProfile.exportDataDesc",
+    "newUi.sidebar.userProfile.exporting",
+    "newUi.sidebar.userProfile.import",
+    "newUi.sidebar.userProfile.importData",
+    "newUi.sidebar.userProfile.importDataDesc",
+    "newUi.sidebar.userProfile.importDataSelected",
+    "newUi.sidebar.userProfile.importing",
+    "newUi.sidebar.userProfile.sectionData",
+    "newUi.sidebar.userProfile.selectFile",
+  ],
+  "interface": [
+    "newUi.sidebar.userProfile.interfacePresetDesc",
+    "newUi.sidebar.userProfile.presetClearOverrides",
+    "newUi.sidebar.userProfile.presetConfirmApply",
+    "newUi.sidebar.userProfile.presetConfirmDesc",
+    "newUi.sidebar.userProfile.presetConfirmTitle",
+    "newUi.sidebar.userProfile.presetOverridesTitle",
+    "newUi.sidebar.userProfile.presetRevertArea",
+    "newUi.sidebar.userProfile.runSetupAgainButton",
+    "newUi.sidebar.userProfile.runSetupAgainDesc",
+    "newUi.sidebar.userProfile.sectionInterface",
+  ],
+  "keybindings": [
+    "newUi.sidebar.keybindings.actionLabel",
+    "newUi.sidebar.keybindings.actionRequiredError",
+    "newUi.sidebar.keybindings.addBinding",
+    "newUi.sidebar.keybindings.addBindingTitle",
+    "newUi.sidebar.keybindings.cancel",
+    "newUi.sidebar.keybindings.comboRequiredError",
+    "newUi.sidebar.keybindings.conflictWarning",
+    "newUi.sidebar.keybindings.customHeading",
+    "newUi.sidebar.keybindings.customize",
+    "newUi.sidebar.keybindings.customizedBadge",
+    "newUi.sidebar.keybindings.defaultBadge",
+    "newUi.sidebar.keybindings.defaultsHeading",
+    "newUi.sidebar.keybindings.deleteConfirm",
+    "newUi.sidebar.keybindings.description",
+    "newUi.sidebar.keybindings.editBindingTitle",
+    "newUi.sidebar.keybindings.loading",
+    "newUi.sidebar.keybindings.noCustomBindings",
+    "newUi.sidebar.keybindings.pressKeysPlaceholder",
+    "newUi.sidebar.keybindings.pressKeysToRecord",
+    "newUi.sidebar.keybindings.recording",
+    "newUi.sidebar.keybindings.resetAllConfirm",
+    "newUi.sidebar.keybindings.resetAllToDefaults",
+    "newUi.sidebar.keybindings.resetToDefault",
+    "newUi.sidebar.keybindings.saveBinding",
+    "newUi.sidebar.keybindings.saveError",
+    "newUi.sidebar.keybindings.unavailableAction",
+  ],
+  "security": [
+    "newUi.sidebar.userProfile.changePassword",
+    "newUi.sidebar.userProfile.confirmPasswordLabel",
+    "newUi.sidebar.userProfile.confirmPasswordPlaceholder",
+    "newUi.sidebar.userProfile.currentPasswordLabel",
+    "newUi.sidebar.userProfile.currentPasswordPlaceholder",
+    "newUi.sidebar.userProfile.newPasswordLabel",
+    "newUi.sidebar.userProfile.newPasswordPlaceholder",
+    "newUi.sidebar.userProfile.passwordFieldsRequired",
+    "newUi.sidebar.userProfile.passwordMismatch",
+    "newUi.sidebar.userProfile.passwordTooShort",
+    "newUi.sidebar.userProfile.passwordUpdateFailed",
+    "newUi.sidebar.userProfile.passwordUpdated",
+    "newUi.sidebar.userProfile.sectionSecurity",
+    "newUi.sidebar.userProfile.updatePassword",
+  ],
+  "updates": [
+    "settings.updates.allPluginsBeta",
+    "settings.updates.allPluginsStable",
+    "settings.updates.backToStable",
+    "settings.updates.betaIntro",
+    "settings.updates.betaProgram",
+    "settings.updates.copied",
+    "settings.updates.copy",
+    "settings.updates.copyFailed",
+    "settings.updates.desktopInstall",
+    "settings.updates.dockerInstall",
+    "settings.updates.downloadBeta",
+    "settings.updates.feedback",
+    "settings.updates.feedbackHint",
+    "settings.updates.howToInstall",
+    "settings.updates.learnMore",
+    "settings.updates.newestBeta",
+    "settings.updates.newestStable",
+    "settings.updates.noRelease",
+    "settings.updates.openPlugins",
+    "settings.updates.pluginBetas",
+    "settings.updates.pluginBetasIntro",
+    "settings.updates.releases",
+    "settings.updates.runningBetaBuild",
+    "settings.updates.saveFailed",
+    "settings.updates.sendFeedback",
+    "settings.updates.termixBetas",
+    "settings.updates.termixBetasHint",
+    "settings.updates.thisVersion",
+    "settings.updates.waitingForStable",
+  ],
+};
diff --git a/src/ui/settings/sync/LinkServerDialog.tsx b/src/ui/settings/sync/LinkServerDialog.tsx
index a656a17bf..57b8db76f 100644
--- a/src/ui/settings/sync/LinkServerDialog.tsx
+++ b/src/ui/settings/sync/LinkServerDialog.tsx
@@ -1,17 +1,11 @@
 import { useEffect, useState } from "react";
 import { useTranslation } from "react-i18next";
+import { InlineView } from "@/components/surface/surface-scope";
 import { toast } from "sonner";
 import { AlertCircle, Loader2, X } from "lucide-react";
 import { Button } from "@/components/button";
 import { Input } from "@/components/input";
 import { Switch } from "@/components/switch";
-import {
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogHeader,
-  DialogTitle,
-} from "@/components/dialog";
 import { ElectronLoginForm } from "@/auth/ElectronLoginForm";
 import {
   completeLink,
@@ -28,6 +22,7 @@ import {
   getSavedServerUrls,
   rememberServerUrl,
 } from "./saved-servers";
+import { DocsLink } from "@/components/docs-link";
 
 type Step = "server" | "signin" | "choose" | "finishing";
 
@@ -223,233 +218,238 @@ export function LinkServerDialog({
   );
   const wide = step === "signin";
 
-  return (
-    <Dialog open={open} onOpenChange={onOpenChange}>
-      <DialogContent
-        className={`bg-card border border-border rounded-none ${
-          wide ? "sm:max-w-4xl h-[80vh] flex flex-col p-0 gap-0" : "sm:max-w-lg"
-        }`}
-        // The sign-in step is a page from another origin in an iframe; clicks
-        // inside it look like outside clicks to the dialog.
-        onPointerDownOutside={(event) => wide && event.preventDefault()}
-        onInteractOutside={(event) => wide && event.preventDefault()}
-      >
-        <DialogHeader className={wide ? "sr-only" : undefined}>
-          <DialogTitle>
-            {relogin ? t("sync.wizard.reloginTitle") : t("sync.wizard.title")}
-          </DialogTitle>
-          <DialogDescription>
-            {step === "server" && t("sync.wizard.serverDescription")}
-            {step === "signin" &&
-              t("sync.wizard.signinDescription", { url: target.serverUrl })}
-            {step === "choose" && t("sync.wizard.chooseDescription")}
-            {step === "finishing" && t("sync.wizard.finishingDescription")}
-          </DialogDescription>
-        </DialogHeader>
-
-        {step === "server" && (
-          <form
-            className="flex flex-col gap-4"
-            onSubmit={(event) => {
-              event.preventDefault();
-              void handleCheck();
-            }}
-          >
-            <div className="flex flex-col gap-1.5">
-              <label
-                className="text-xs font-semibold"
-                htmlFor="sync-server-url"
-              >
-                {t("sync.wizard.serverUrl")}
-              </label>
-              <Input
-                id="sync-server-url"
-                autoFocus
-                className="rounded-none"
-                placeholder="https://termix.example.com"
-                value={target.serverUrl}
-                onChange={(event) =>
-                  setTarget({ ...target, serverUrl: event.target.value })
-                }
-              />
-              <p className="text-[10px] text-muted-foreground">
-                {t("sync.wizard.serverUrlHint")}
-              </p>
-              {!relogin && savedUrls.length > 0 && (
-                <div className="flex flex-col gap-1 pt-1">
-                  <span className="text-[10px] font-semibold uppercase tracking-wider text-muted-foreground">
-                    {t("sync.wizard.savedServers")}
-                  </span>
-                  {savedUrls.map((url) => (
-                    <div
-                      key={url}
-                      className="flex items-center border border-border hover:bg-muted"
-                    >
-                      <button
-                        type="button"
-                        className="flex-1 min-w-0 truncate px-2 py-1.5 text-left font-mono text-xs"
-                        onClick={() => setTarget({ ...target, serverUrl: url })}
-                      >
-                        {url}
-                      </button>
-                      <button
-                        type="button"
-                        title={t("sync.wizard.removeServer")}
-                        className="px-2 py-1.5 text-muted-foreground hover:text-destructive"
-                        onClick={() => setSavedUrls(forgetServerUrl(url))}
-                      >
-                        <X className="size-3" />
-                      </button>
-                    </div>
-                  ))}
-                </div>
-              )}
-            </div>
-
-            {problem && (
-              <div className="flex gap-2 border border-destructive/40 bg-destructive/10 p-2.5 text-xs">
-                <AlertCircle className="size-4 shrink-0 text-destructive" />
-                <span>{problem}</span>
-              </div>
-            )}
-
-            {(problemKind === "tls_untrusted" ||
-              target.allowInvalidCertificate) && (
-              <div className="flex items-center justify-between gap-3 border border-border p-2.5">
-                <div className="flex flex-col gap-0.5">
-                  <span className="text-xs font-medium">
-                    {t("sync.proxy.allowInvalidCertificate")}
-                  </span>
-                  <span className="text-[10px] text-muted-foreground">
-                    {t("sync.proxy.allowInvalidCertificateHint")}
-                  </span>
-                </div>
-                <Switch
-                  checked={!!target.allowInvalidCertificate}
-                  onCheckedChange={(checked) =>
-                    setTarget({ ...target, allowInvalidCertificate: checked })
-                  }
-                />
-              </div>
-            )}
-
-            <button
-              type="button"
-              className="self-start text-[10px] font-bold uppercase tracking-widest text-muted-foreground hover:text-foreground"
-              onClick={() => setShowAdvanced((value) => !value)}
-            >
-              {showAdvanced
-                ? t("sync.wizard.hideProxySettings")
-                : t("sync.wizard.showProxySettings")}
-            </button>
-            {showAdvanced && (
-              <ProxySettingsFields
-                customHeaders={target.customHeaders ?? []}
-                basicAuth={target.basicAuth ?? null}
-                onChange={(next) => setTarget({ ...target, ...next })}
-              />
-            )}
-
-            <div className="flex justify-end gap-2">
-              <Button
-                type="button"
-                variant="outline"
-                className="rounded-none"
-                onClick={() => onOpenChange(false)}
-              >
-                {t("common.cancel")}
-              </Button>
-              <Button
-                type="submit"
-                className="rounded-none"
-                disabled={checking || !target.serverUrl.trim()}
-              >
-                {checking && <Loader2 className="size-4 animate-spin" />}
-                {t("sync.wizard.continue")}
-              </Button>
-            </div>
-          </form>
-        )}
-
-        {step === "signin" && (
-          <div className="flex-1 min-h-0">
-            <ElectronLoginForm
-              serverUrl={target.serverUrl}
-              targetPurpose="link"
-              onAuthSuccess={handleSignedIn}
-              onChangeServer={() =>
-                relogin ? onOpenChange(false) : setStep("server")
+  const title = relogin
+    ? t("sync.wizard.reloginTitle")
+    : t("sync.wizard.title");
+  const description =
+    step === "server"
+      ? t("sync.wizard.serverDescription")
+      : step === "signin"
+        ? t("sync.wizard.signinDescription", { url: target.serverUrl })
+        : step === "choose"
+          ? t("sync.wizard.chooseDescription")
+          : t("sync.wizard.finishingDescription");
+  const content = (
+    <>
+      {step === "server" && (
+        <form
+          className="flex flex-col gap-4"
+          onSubmit={(event) => {
+            event.preventDefault();
+            void handleCheck();
+          }}
+        >
+          <div className="flex flex-col gap-1.5">
+            <label className="text-xs font-semibold" htmlFor="sync-server-url">
+              {t("sync.wizard.serverUrl")}
+            </label>
+            <Input
+              id="sync-server-url"
+              autoFocus
+              className="rounded-none"
+              placeholder="https://termix.example.com"
+              value={target.serverUrl}
+              onChange={(event) =>
+                setTarget({ ...target, serverUrl: event.target.value })
               }
             />
-          </div>
-        )}
-
-        {step === "choose" && (
-          <div className="flex flex-col gap-3">
-            {finishError && (
-              <div className="flex gap-2 border border-destructive/40 bg-destructive/10 p-2.5 text-xs">
-                <AlertCircle className="size-4 shrink-0 text-destructive" />
-                <span>{finishError}</span>
+            <p className="text-[10px] text-muted-foreground">
+              {t("sync.wizard.serverUrlHint")}
+            </p>
+            {!relogin && savedUrls.length > 0 && (
+              <div className="flex flex-col gap-1 pt-1">
+                <span className="text-[10px] font-semibold uppercase tracking-wider text-muted-foreground">
+                  {t("sync.wizard.savedServers")}
+                </span>
+                {savedUrls.map((url) => (
+                  <div
+                    key={url}
+                    className="flex items-center border border-border hover:bg-muted"
+                  >
+                    <button
+                      type="button"
+                      className="flex-1 min-w-0 truncate px-2 py-1.5 text-left font-mono text-xs"
+                      onClick={() => setTarget({ ...target, serverUrl: url })}
+                    >
+                      {url}
+                    </button>
+                    <button
+                      type="button"
+                      title={t("sync.wizard.removeServer")}
+                      className="px-2 py-1.5 text-muted-foreground hover:text-destructive"
+                      onClick={() => setSavedUrls(forgetServerUrl(url))}
+                    >
+                      <X className="size-3" />
+                    </button>
+                  </div>
+                ))}
               </div>
             )}
-            {(
-              [
-                {
-                  value: "merge",
-                  title: t("sync.wizard.mergeTitle"),
-                  body: t("sync.wizard.mergeBody", { count: localTotal }),
-                },
-                {
-                  value: "replace",
-                  title: t("sync.wizard.replaceTitle"),
-                  body: t("sync.wizard.replaceBody", { count: localTotal }),
-                },
-              ] as const
-            ).map((option) => (
-              <button
-                key={option.value}
-                type="button"
-                onClick={() => setMode(option.value)}
-                className={`text-left border p-3 flex flex-col gap-1 transition-colors ${
-                  mode === option.value
-                    ? "border-accent-brand bg-accent-brand/10"
-                    : "border-border hover:bg-muted/40"
-                }`}
-              >
-                <span className="text-sm font-semibold">{option.title}</span>
-                <span className="text-xs text-muted-foreground">
-                  {option.body}
-                </span>
-              </button>
-            ))}
-            <div className="flex justify-end gap-2">
-              <Button
-                type="button"
-                variant="outline"
-                className="rounded-none"
-                onClick={() => onOpenChange(false)}
-              >
-                {t("common.cancel")}
-              </Button>
-              <Button
-                type="button"
-                className="rounded-none"
-                disabled={!token}
-                onClick={() => token && void finish(token, mode)}
-              >
-                {t("sync.wizard.link")}
-              </Button>
-            </div>
           </div>
-        )}
 
-        {step === "finishing" && (
-          <div className="flex items-center gap-3 py-6 text-sm text-muted-foreground">
-            <Loader2 className="size-5 animate-spin text-accent-brand" />
-            {t("sync.wizard.linking")}
+          {problem && (
+            <div className="flex gap-2 border border-destructive/40 bg-destructive/10 p-2.5 text-xs">
+              <AlertCircle className="size-4 shrink-0 text-destructive" />
+              <span>{problem}</span>
+            </div>
+          )}
+
+          {(problemKind === "tls_untrusted" ||
+            target.allowInvalidCertificate) && (
+            <div className="flex items-center justify-between gap-3 border border-border p-2.5">
+              <div className="flex flex-col gap-0.5">
+                <span className="text-xs font-medium">
+                  {t("sync.proxy.allowInvalidCertificate")}
+                </span>
+                <span className="text-[10px] text-muted-foreground">
+                  {t("sync.proxy.allowInvalidCertificateHint")}
+                </span>
+              </div>
+              <Switch
+                checked={!!target.allowInvalidCertificate}
+                onCheckedChange={(checked) =>
+                  setTarget({ ...target, allowInvalidCertificate: checked })
+                }
+              />
+            </div>
+          )}
+
+          <button
+            type="button"
+            className="self-start text-[10px] font-bold uppercase tracking-widest text-muted-foreground hover:text-foreground"
+            onClick={() => setShowAdvanced((value) => !value)}
+          >
+            {showAdvanced
+              ? t("sync.wizard.hideProxySettings")
+              : t("sync.wizard.showProxySettings")}
+          </button>
+          {showAdvanced && (
+            <ProxySettingsFields
+              customHeaders={target.customHeaders ?? []}
+              basicAuth={target.basicAuth ?? null}
+              onChange={(next) => setTarget({ ...target, ...next })}
+            />
+          )}
+
+          <div className="flex justify-end gap-2">
+            <Button
+              type="button"
+              variant="outline"
+              className="rounded-none"
+              onClick={() => onOpenChange(false)}
+            >
+              {t("common.cancel")}
+            </Button>
+            <Button
+              variant="outline"
+              type="submit"
+              className="rounded-none border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand dark:border-accent-brand/40 dark:bg-transparent dark:hover:bg-accent-brand/10"
+              disabled={checking || !target.serverUrl.trim()}
+            >
+              {checking && <Loader2 className="size-4 animate-spin" />}
+              {t("sync.wizard.continue")}
+            </Button>
           </div>
-        )}
-      </DialogContent>
-    </Dialog>
+        </form>
+      )}
+
+      {step === "signin" && (
+        <div className="flex-1 min-h-0">
+          <ElectronLoginForm
+            serverUrl={target.serverUrl}
+            targetPurpose="link"
+            onAuthSuccess={handleSignedIn}
+            onChangeServer={() =>
+              relogin ? onOpenChange(false) : setStep("server")
+            }
+          />
+        </div>
+      )}
+
+      {step === "choose" && (
+        <div className="flex flex-col gap-3">
+          {finishError && (
+            <div className="flex gap-2 border border-destructive/40 bg-destructive/10 p-2.5 text-xs">
+              <AlertCircle className="size-4 shrink-0 text-destructive" />
+              <span>{finishError}</span>
+            </div>
+          )}
+          {(
+            [
+              {
+                value: "merge",
+                title: t("sync.wizard.mergeTitle"),
+                body: t("sync.wizard.mergeBody", { count: localTotal }),
+              },
+              {
+                value: "replace",
+                title: t("sync.wizard.replaceTitle"),
+                body: t("sync.wizard.replaceBody", { count: localTotal }),
+              },
+            ] as const
+          ).map((option) => (
+            <button
+              key={option.value}
+              type="button"
+              onClick={() => setMode(option.value)}
+              className={`text-left border p-3 flex flex-col gap-1 transition-colors ${
+                mode === option.value
+                  ? "border-accent-brand bg-accent-brand/10"
+                  : "border-border hover:bg-muted/40"
+              }`}
+            >
+              <span className="text-sm font-semibold">{option.title}</span>
+              <span className="text-xs text-muted-foreground">
+                {option.body}
+              </span>
+            </button>
+          ))}
+          <div className="flex justify-end gap-2">
+            <Button
+              type="button"
+              variant="outline"
+              className="rounded-none"
+              onClick={() => onOpenChange(false)}
+            >
+              {t("common.cancel")}
+            </Button>
+            <Button
+              variant="outline"
+              type="button"
+              className="rounded-none border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand dark:border-accent-brand/40 dark:bg-transparent dark:hover:bg-accent-brand/10"
+              disabled={!token}
+              onClick={() => token && void finish(token, mode)}
+            >
+              {t("sync.wizard.link")}
+            </Button>
+          </div>
+        </div>
+      )}
+
+      {step === "finishing" && (
+        <div className="flex items-center gap-3 py-6 text-sm text-muted-foreground">
+          <Loader2 className="size-5 animate-spin text-accent-brand" />
+          {t("sync.wizard.linking")}
+        </div>
+      )}
+    </>
+  );
+
+  // The wizard takes over the panel, tab or onboarding step it opens from.
+  return (
+    <InlineView
+      open={open}
+      onOpenChange={onOpenChange}
+      title={title}
+      width="wide"
+      scroll={!wide}
+    >
+      {!wide && (
+        <p className="text-xs text-muted-foreground">
+          {description} {step === "server" && <DocsLink core="desktopSync" />}
+        </p>
+      )}
+      {content}
+    </InlineView>
   );
 }
diff --git a/src/ui/settings/sync/SyncPanel.tsx b/src/ui/settings/sync/SyncPanel.tsx
index da3aab5c4..a68a9ac64 100644
--- a/src/ui/settings/sync/SyncPanel.tsx
+++ b/src/ui/settings/sync/SyncPanel.tsx
@@ -1,3 +1,4 @@
+import { InlineView } from "@/components/surface/surface-scope";
 import {
   useCallback,
   useEffect,
@@ -17,14 +18,6 @@ import {
 } from "lucide-react";
 import { Button } from "@/components/button";
 import { Switch } from "@/components/switch";
-import {
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogFooter,
-  DialogHeader,
-  DialogTitle,
-} from "@/components/dialog";
 import { useSyncStatus } from "@/hooks/use-sync-status";
 import { refreshSyncStatus, setSyncStatus } from "@/lib/sync-status";
 import { notifySyncChanged } from "@/lib/linked-server";
@@ -205,7 +198,8 @@ export function SyncPanel() {
             <li>{t("sync.unlinkedPointAccount")}</li>
           </ul>
           <Button
-            className="self-start rounded-none"
+            variant="outline"
+            className="self-start rounded-none border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand dark:border-accent-brand/40 dark:bg-transparent dark:hover:bg-accent-brand/10"
             onClick={() => setLinkOpen(true)}
           >
             <Cloud className="size-4" />
@@ -275,7 +269,7 @@ export function SyncPanel() {
               {t("sync.account")}
             </span>
             <span className="font-semibold truncate">
-              {status.account?.username || "—"}
+              {status.account?.username || "-"}
             </span>
           </div>
           <div className="flex flex-col">
@@ -309,8 +303,9 @@ export function SyncPanel() {
         <div className="flex flex-wrap gap-2">
           {state === "signed_out" ? (
             <Button
+              variant="outline"
               size="sm"
-              className="h-7 text-[10px] rounded-none"
+              className="h-7 text-[10px] rounded-none border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand dark:border-accent-brand/40 dark:bg-transparent dark:hover:bg-accent-brand/10"
               onClick={() => setReloginOpen(true)}
             >
               {t("sync.signInAgain")}
@@ -542,8 +537,9 @@ export function SyncPanel() {
         </div>
         {proxyDraft && (
           <Button
+            variant="outline"
             size="sm"
-            className="self-start h-7 text-[10px] rounded-none"
+            className="self-start h-7 text-[10px] rounded-none border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand dark:border-accent-brand/40 dark:bg-transparent dark:hover:bg-accent-brand/10"
             disabled={busy === "proxy"}
             onClick={() =>
               run("proxy", async () => {
@@ -565,45 +561,12 @@ export function SyncPanel() {
         relogin={status.serverUrl ? { serverUrl: status.serverUrl } : undefined}
       />
 
-      <Dialog open={unlinkOpen} onOpenChange={setUnlinkOpen}>
-        <DialogContent className="bg-card border border-border rounded-none sm:max-w-md">
-          <DialogHeader>
-            <DialogTitle>{t("sync.unlinkTitle")}</DialogTitle>
-            <DialogDescription>{t("sync.unlinkDescription")}</DialogDescription>
-          </DialogHeader>
-          <div className="flex flex-col gap-2">
-            {(
-              [
-                {
-                  value: true,
-                  title: t("sync.unlinkKeepTitle"),
-                  body: t("sync.unlinkKeepBody"),
-                },
-                {
-                  value: false,
-                  title: t("sync.unlinkRemoveTitle"),
-                  body: t("sync.unlinkRemoveBody"),
-                },
-              ] as const
-            ).map((option) => (
-              <button
-                key={String(option.value)}
-                type="button"
-                onClick={() => setKeepData(option.value)}
-                className={`text-left border p-3 flex flex-col gap-1 transition-colors ${
-                  keepData === option.value
-                    ? "border-accent-brand bg-accent-brand/10"
-                    : "border-border hover:bg-muted/40"
-                }`}
-              >
-                <span className="text-sm font-semibold">{option.title}</span>
-                <span className="text-xs text-muted-foreground">
-                  {option.body}
-                </span>
-              </button>
-            ))}
-          </div>
-          <DialogFooter>
+      <InlineView
+        open={unlinkOpen}
+        onOpenChange={setUnlinkOpen}
+        title={t("sync.unlinkTitle")}
+        footer={
+          <div className="ml-auto flex flex-wrap items-center justify-end gap-2">
             <Button
               variant="outline"
               className="rounded-none"
@@ -626,9 +589,46 @@ export function SyncPanel() {
               {busy === "unlink" && <Loader2 className="size-4 animate-spin" />}
               {t("sync.unlink")}
             </Button>
-          </DialogFooter>
-        </DialogContent>
-      </Dialog>
+          </div>
+        }
+      >
+        <p className="text-xs text-muted-foreground">
+          {t("sync.unlinkDescription")}
+        </p>
+        <div className="flex flex-col gap-2">
+          {(
+            [
+              {
+                value: true,
+                title: t("sync.unlinkKeepTitle"),
+                body: t("sync.unlinkKeepBody"),
+              },
+              {
+                value: false,
+                title: t("sync.unlinkRemoveTitle"),
+                body: t("sync.unlinkRemoveBody"),
+              },
+            ] as const
+          ).map((option) => (
+            <button
+              key={String(option.value)}
+              type="button"
+              onClick={() => setKeepData(option.value)}
+              className={`text-left border p-3 flex flex-col gap-1 transition-colors ${
+                keepData === option.value
+                  ? "border-accent-brand bg-accent-brand/10"
+                  : "border-border hover:bg-muted/40"
+              }`}
+            >
+              <span className="text-sm font-semibold">{option.title}</span>
+              <span className="text-xs text-muted-foreground">
+                {option.body}
+              </span>
+            </button>
+          ))}
+        </div>
+      </InlineView>
+
       {linkDialog}
     </div>
   );
diff --git a/src/ui/shell/CommandPalette.tsx b/src/ui/shell/CommandPalette.tsx
index 8f3f02271..8f3af229e 100644
--- a/src/ui/shell/CommandPalette.tsx
+++ b/src/ui/shell/CommandPalette.tsx
@@ -8,26 +8,28 @@ import {
   CommandItem,
   CommandList,
   CommandGroup,
-  CommandSeparator,
+  CommandEmpty,
 } from "@/components/command";
 import {
+  BookOpen,
+  Bug,
+  Clock,
+  FlaskConical,
+  Folder,
+  Globe,
+  KeyRound,
+  MessagesSquare,
+  Pencil,
+  Plus,
+  Search,
   Server,
   Settings,
-  Globe,
-  Plus,
-  MessagesSquare,
-  LifeBuoy,
-  Search,
-  User,
-  KeyRound,
-  Clock,
-  Folder,
-  Pencil,
+  ShieldCheck,
 } from "lucide-react";
 import { getRecentActivity, type RecentActivityItem } from "@/main-axios";
 import type { Host, TabType, Tab } from "@/types/ui-types";
 import { canEditHost } from "@/sidebar/host-permissions";
-import { RAIL_UTILITY_ITEMS, useRailItems } from "@/sidebar/rail-items";
+import { useRailItems } from "@/sidebar/rail-items";
 import {
   defaultConnectAction,
   hostActionsFor,
@@ -43,10 +45,18 @@ import {
   type PaletteItemDef,
 } from "./palette-registry";
 import { activityTarget } from "@/lib/activity-types";
+import { reportBetaFeedbackUrl, reportCoreIssueUrl } from "@/lib/issue-url";
+import { isPrerelease } from "@/plugins/plugin-model";
 import { shell } from "@/plugin-host/shell-bridge";
 import { getLiveHostStatus } from "@/lib/ServerStatusContext";
+import { docsUrl } from "@/lib/docs";
+import { parseServerTime } from "@/lib/server-time";
 
 interface CommandPaletteProps {
+  /** Opens settings, optionally at one section. */
+  onOpenSettings?: (section?: string) => void;
+  /** Opens a host in the editor. */
+  onEditHost?: (host: Host) => void;
   isOpen: boolean;
   setIsOpen: (isOpen: boolean) => void;
   hosts: Host[];
@@ -65,6 +75,8 @@ export function CommandPalette({
   activeTabId = "",
   onOpenTab,
   onOpenPanel,
+  onOpenSettings,
+  onEditHost,
 }: CommandPaletteProps) {
   const { t } = useTranslation();
   const railItems = useRailItems();
@@ -120,22 +132,26 @@ export function CommandPalette({
     return () => window.removeEventListener("keydown", handleKeyDown, true);
   }, [isOpen, setIsOpen]);
 
-  const filteredHosts = hosts.filter((h) => {
-    const query = search.toLowerCase();
-    return (
-      h.name.toLowerCase().includes(query) ||
-      h.ip.toLowerCase().includes(query) ||
-      h.username.toLowerCase().includes(query) ||
-      h.tags?.some((tag) => tag.toLowerCase().includes(query))
-    );
-  });
+  const query = search.trim().toLowerCase();
+  const searching = query.length > 0;
+  // Without a query the list is a short starting point, not every host.
+  const filteredHosts = searching
+    ? hosts.filter(
+        (h) =>
+          h.name.toLowerCase().includes(query) ||
+          h.ip.toLowerCase().includes(query) ||
+          h.username.toLowerCase().includes(query) ||
+          h.folder?.toLowerCase().includes(query) ||
+          h.tags?.some((tag) => tag.toLowerCase().includes(query)),
+      )
+    : hosts.slice(0, 6);
 
-  // Group hosts by folder; ungrouped hosts appear first under an implicit root group
+  // Group hosts by folder; ungrouped hosts appear first.
   const groupedHosts: { folder: string | null; hosts: Host[] }[] = [];
   const folderMap = new Map<string, Host[]>();
   const ungrouped: Host[] = [];
   for (const h of filteredHosts) {
-    if (h.folder) {
+    if (h.folder && searching) {
       if (!folderMap.has(h.folder)) folderMap.set(h.folder, []);
       folderMap.get(h.folder)!.push(h);
     } else {
@@ -151,12 +167,9 @@ export function CommandPalette({
   useEffect(() => {
     if (!isOpen) return;
     const firstHost = filteredHosts[0];
-    if (search.trim() && firstHost) {
-      setSelectedValue(`host-${firstHost.id}`);
-      return;
-    }
-    setSelectedValue("quick-action-add-host");
-  }, [filteredHosts, isOpen, search]);
+    setSelectedValue(searching && firstHost ? `host-${firstHost.id}` : "");
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [isOpen, search]);
 
   const activeTargetTab =
     terminalTabs.find((tab) => tab.id === activeTabId) ?? terminalTabs[0];
@@ -165,21 +178,99 @@ export function CommandPalette({
     action();
     setIsOpen(false);
   };
-  const showHostResultsFirst = search.trim().length > 0;
+
+  const matches = (...texts: (string | undefined)[]) =>
+    !searching || texts.some((text) => text?.toLowerCase().includes(query));
+
+  const destinations = railItems.filter((item) => matches(t(item.labelKey)));
+
+  const quickActions = [
+    {
+      id: "quick-action-add-host",
+      label: t("commandPalette.addNewHost"),
+      icon: Plus,
+      run: () => onOpenTab("host-manager", undefined, "host-manager:add-host"),
+    },
+    {
+      id: "quick-action-add-credential",
+      label: t("commandPalette.addCredential"),
+      icon: KeyRound,
+      run: () =>
+        onOpenTab("host-manager", undefined, "host-manager:add-credential"),
+    },
+    {
+      id: "quick-action-settings",
+      label: t("nav.settings"),
+      icon: Settings,
+      run: () =>
+        onOpenSettings ? onOpenSettings() : onOpenTab("user-profile"),
+    },
+    {
+      id: "quick-action-admin-settings",
+      label: t("commandPalette.adminSettings"),
+      icon: ShieldCheck,
+      run: () =>
+        onOpenSettings
+          ? onOpenSettings("admin-general")
+          : onOpenTab("admin-settings"),
+    },
+  ].filter((action) => matches(action.label));
+
+  const globalEntries = paletteEntriesFor(paletteEntries, "global").filter(
+    (entry) => matches(t(entry.titleKey), ...(entry.keywords ?? [])),
+  );
+
+  const links = [
+    {
+      id: "link-docs",
+      label: t("commandPalette.documentation"),
+      icon: BookOpen,
+      url: docsUrl(),
+    },
+    {
+      id: "link-github",
+      label: "GitHub",
+      icon: Globe,
+      url: "https://github.com/Termix-SSH/Termix",
+    },
+    {
+      id: "link-discord",
+      label: "Discord",
+      icon: MessagesSquare,
+      url: "https://discord.com/invite/jVQGdvHDrf",
+    },
+    {
+      id: "link-report-bug",
+      label: t("dashboard.reportBug"),
+      icon: Bug,
+      url: reportCoreIssueUrl(import.meta.env.VITE_APP_VERSION || undefined),
+    },
+    ...(isPrerelease(import.meta.env.VITE_APP_VERSION)
+      ? [
+          {
+            id: "link-beta-feedback",
+            label: t("newUi.sidebar.userProfile.sendBetaFeedback"),
+            icon: FlaskConical,
+            url: reportBetaFeedbackUrl(import.meta.env.VITE_APP_VERSION),
+          },
+        ]
+      : []),
+  ].filter((link) => matches(link.label));
+
+  const rowClass = "group gap-2 rounded-none";
+  const iconClass = "size-3.5 shrink-0 text-muted-foreground";
+  const hostButton =
+    "flex size-6 items-center justify-center border border-border text-muted-foreground transition-colors hover:border-accent-brand hover:text-accent-brand";
 
   if (!isOpen) return null;
 
   return (
     <div
-      className={cn(
-        "fixed inset-0 z-[100] flex items-start justify-center pt-[15vh] bg-background/40 backdrop-blur-sm transition-all duration-200 animate-in fade-in",
-      )}
+      className="fixed inset-0 z-[100] flex items-start justify-center bg-background/70 pt-[15vh]"
       onClick={() => setIsOpen(false)}
     >
       <div
-        className={cn(
-          "w-full max-w-2xl mx-4 overflow-hidden rounded-none border border-border bg-card shadow-2xl animate-in zoom-in-95 duration-200",
-        )}
+        className="motion-context-enter mx-4 w-full max-w-2xl overflow-hidden border border-border bg-card shadow-2xl"
         onClick={(e) => e.stopPropagation()}
       >
         <Command
@@ -189,247 +280,28 @@ export function CommandPalette({
           value={selectedValue}
           onValueChange={setSelectedValue}
         >
-          <div className="flex items-center border-b border-border px-4 py-1">
-            <Search className="size-4 text-muted-foreground mr-3" />
+          <div className="flex items-center border-b border-border px-3">
+            <Search className="mr-2 size-4 shrink-0 text-muted-foreground" />
             <CommandPrimitive.Input
               ref={inputRef}
               value={search}
               onValueChange={setSearch}
               placeholder={t("commandPalette.searchPlaceholder")}
-              className="flex-1 h-12 bg-transparent text-sm outline-none placeholder:text-muted-foreground"
+              className="h-12 flex-1 bg-transparent text-sm outline-none placeholder:text-muted-foreground"
             />
-            <div className="flex items-center gap-1.5 ml-2">
-              <Kbd className="bg-muted/50 border-none h-6 px-2 text-[11px] rounded-none">
-                ESC
-              </Kbd>
-            </div>
+            <Kbd className="ml-2">ESC</Kbd>
           </div>
 
-          <CommandList className="max-h-[60vh] thin-scrollbar flex flex-col">
-            <CommandGroup
-              heading={t("commandPalette.quickActions")}
-              className="px-2"
-            >
-              <CommandItem
-                value="quick-action-add-host"
-                onSelect={() =>
-                  handleAction(() =>
-                    onOpenTab(
-                      "host-manager",
-                      undefined,
-                      "host-manager:add-host",
-                    ),
-                  )
-                }
-                className="group flex items-center gap-3 px-3 py-2.5 rounded-none hover:bg-accent-brand/10 cursor-pointer"
-              >
-                <div className="size-8 rounded-none bg-muted flex items-center justify-center group-hover:bg-accent-brand/20 transition-colors">
-                  <Plus className="size-4 text-accent-brand" />
-                </div>
-                <div className="flex flex-col flex-1">
-                  <span className="text-sm font-semibold">
-                    {t("commandPalette.addNewHost")}
-                  </span>
-                  <span className="text-xs text-muted-foreground">
-                    {t("commandPalette.addNewHostDesc")}
-                  </span>
-                </div>
-              </CommandItem>
+          <CommandList className="thin-scrollbar max-h-[60vh] [contain:content]">
+            <CommandEmpty className="py-8 text-center text-xs text-muted-foreground">
+              {t("commandPalette.noHostsFound", { search })}
+            </CommandEmpty>
 
-              <CommandItem
-                value="quick-action-admin-settings"
-                onSelect={() => handleAction(() => onOpenTab("admin-settings"))}
-                className="group flex items-center gap-3 px-3 py-2.5 rounded-none hover:bg-accent-brand/10 cursor-pointer"
-              >
-                <div className="size-8 rounded-none bg-muted flex items-center justify-center group-hover:bg-accent-brand/20 transition-colors">
-                  <Settings className="size-4 text-accent-brand" />
-                </div>
-                <div className="flex flex-col flex-1">
-                  <span className="text-sm font-semibold">
-                    {t("commandPalette.adminSettings")}
-                  </span>
-                  <span className="text-xs text-muted-foreground">
-                    {t("commandPalette.adminSettingsDesc")}
-                  </span>
-                </div>
-              </CommandItem>
-
-              <CommandItem
-                value="quick-action-user-profile"
-                onSelect={() => handleAction(() => onOpenTab("user-profile"))}
-                className="group flex items-center gap-3 px-3 py-2.5 rounded-none hover:bg-accent-brand/10 cursor-pointer"
-              >
-                <div className="size-8 rounded-none bg-muted flex items-center justify-center group-hover:bg-accent-brand/20 transition-colors">
-                  <User className="size-4 text-accent-brand" />
-                </div>
-                <div className="flex flex-col flex-1">
-                  <span className="text-sm font-semibold">
-                    {t("commandPalette.userProfile")}
-                  </span>
-                  <span className="text-xs text-muted-foreground">
-                    {t("commandPalette.userProfileDesc")}
-                  </span>
-                </div>
-              </CommandItem>
-
-              <CommandItem
-                value="quick-action-add-credential"
-                onSelect={() =>
-                  handleAction(() =>
-                    onOpenTab(
-                      "host-manager",
-                      undefined,
-                      "host-manager:add-credential",
-                    ),
-                  )
-                }
-                className="group flex items-center gap-3 px-3 py-2.5 rounded-none hover:bg-accent-brand/10 cursor-pointer"
-              >
-                <div className="size-8 rounded-none bg-muted flex items-center justify-center group-hover:bg-accent-brand/20 transition-colors">
-                  <KeyRound className="size-4 text-accent-brand" />
-                </div>
-                <div className="flex flex-col flex-1">
-                  <span className="text-sm font-semibold">
-                    {t("commandPalette.addCredential")}
-                  </span>
-                  <span className="text-xs text-muted-foreground">
-                    {t("commandPalette.addCredentialDesc")}
-                  </span>
-                </div>
-              </CommandItem>
-            </CommandGroup>
-
-            {onOpenPanel && (
-              <>
-                <CommandSeparator className="my-2" />
-                <CommandGroup
-                  heading={t("commandPalette.navigation")}
-                  className="px-2"
-                >
-                  {[...railItems, ...RAIL_UTILITY_ITEMS]
-                    .filter((item) => item.kind !== "tab")
-                    .map((item) => {
-                      const Icon = item.icon;
-                      return (
-                        <CommandItem
-                          key={`nav-${item.id}`}
-                          value={`nav-${item.id} ${t(item.labelKey)}`}
-                          onSelect={() =>
-                            handleAction(() => onOpenPanel(item.id))
-                          }
-                          className="group flex items-center gap-3 px-3 py-2.5 rounded-none hover:bg-accent-brand/10 cursor-pointer"
-                        >
-                          <div className="size-8 rounded-none bg-muted flex items-center justify-center group-hover:bg-accent-brand/20 transition-colors">
-                            <Icon className="size-4 text-accent-brand" />
-                          </div>
-                          <span className="text-sm font-semibold flex-1">
-                            {t(item.labelKey)}
-                          </span>
-                        </CommandItem>
-                      );
-                    })}
-                </CommandGroup>
-              </>
-            )}
-
-            {paletteGroups.map((group) => {
-              const items = filterPaletteItems(
-                groupItems[group.id] ?? [],
-                search,
-                group.showWhenEmpty,
-              );
-              if (items.length === 0) return null;
-              return (
-                <React.Fragment key={`group-${group.id}`}>
-                  <CommandSeparator className="my-2" />
-                  <CommandGroup heading={t(group.titleKey)} className="px-2">
-                    {items.map((item) => {
-                      const Icon = item.icon;
-                      const blocked = !!item.needsTarget && !activeTargetTab;
-                      return (
-                        <CommandItem
-                          key={`${group.id}-${item.id}`}
-                          value={`group-${group.id}-${item.id}`}
-                          onSelect={() => {
-                            if (blocked) return;
-                            handleAction(() =>
-                              item.run({ targetTab: activeTargetTab, shell }),
-                            );
-                          }}
-                          className={cn(
-                            "group flex items-center gap-3 px-3 py-2.5 rounded-none hover:bg-accent-brand/10 cursor-pointer",
-                            blocked && "pointer-events-none opacity-50",
-                          )}
-                        >
-                          <div className="size-8 rounded-none bg-muted flex items-center justify-center group-hover:bg-accent-brand/20 transition-colors shrink-0">
-                            {Icon && (
-                              <Icon className="size-4 text-accent-brand" />
-                            )}
-                          </div>
-                          <div className="flex flex-col flex-1 min-w-0">
-                            <span className="text-sm font-semibold truncate">
-                              {item.title}
-                            </span>
-                            {item.description && (
-                              <span className="text-xs text-muted-foreground truncate font-mono">
-                                {item.description}
-                              </span>
-                            )}
-                          </div>
-                          {(blocked || item.hint) && (
-                            <span className="text-[10px] text-muted-foreground/60 shrink-0">
-                              {blocked
-                                ? t("commandPalette.noTargetTab")
-                                : item.hint}
-                            </span>
-                          )}
-                        </CommandItem>
-                      );
-                    })}
-                  </CommandGroup>
-                </React.Fragment>
-              );
-            })}
-
-            {paletteEntriesFor(paletteEntries, "global").length > 0 && (
-              <>
-                <CommandSeparator className="my-2" />
-                <CommandGroup
-                  heading={t("commandPalette.pluginActions")}
-                  className="px-2"
-                >
-                  {paletteEntriesFor(paletteEntries, "global").map((entry) => {
-                    const Icon = entry.icon;
-                    return (
-                      <CommandItem
-                        key={`plugin-${entry.id}`}
-                        value={`plugin-${entry.id} ${t(entry.titleKey)} ${(entry.keywords ?? []).join(" ")}`}
-                        onSelect={() => handleAction(() => entry.run(shell))}
-                        className="group flex items-center gap-3 px-3 py-2.5 rounded-none hover:bg-accent-brand/10 cursor-pointer"
-                      >
-                        <div className="size-8 rounded-none bg-muted flex items-center justify-center group-hover:bg-accent-brand/20 transition-colors">
-                          {Icon && (
-                            <Icon className="size-4 text-accent-brand" />
-                          )}
-                        </div>
-                        <span className="text-sm font-semibold flex-1">
-                          {t(entry.titleKey)}
-                        </span>
-                      </CommandItem>
-                    );
-                  })}
-                </CommandGroup>
-              </>
-            )}
-
-            {recentActivity.length > 0 && (
-              <>
-                <CommandSeparator className="my-2" />
-                <CommandGroup
-                  heading={t("commandPalette.recentActivity")}
-                  className="px-2"
-                >
-                  {recentActivity.map((item) => (
+            {!searching && recentActivity.length > 0 && (
+              <CommandGroup heading={t("commandPalette.recentActivity")}>
+                {recentActivity.slice(0, 4).map((item) => {
+                  const Icon = activityTarget(item.type)?.icon ?? Server;
+                  return (
                     <CommandItem
                       key={item.id}
                       value={`recent-activity-${item.id}`}
@@ -439,53 +311,36 @@ export function CommandPalette({
                           if (target) onOpenTab(target.tab, item.hostName);
                         })
                       }
-                      className="group flex items-center gap-3 px-3 py-2 rounded-none hover:bg-accent-brand/10 cursor-pointer"
+                      className={rowClass}
                     >
-                      <div className="size-7 rounded-none bg-muted flex items-center justify-center group-hover:bg-accent-brand/20 transition-colors text-muted-foreground group-hover:text-accent-brand">
-                        {(() => {
-                          const Icon = activityTarget(item.type)?.icon;
-                          return Icon ? <Icon className="size-3.5" /> : null;
-                        })()}
-                      </div>
-                      <div className="flex flex-col flex-1 min-w-0">
-                        <span className="text-sm font-semibold truncate">
-                          {item.hostName}
-                        </span>
-                        <span className="text-xs text-muted-foreground capitalize">
-                          {item.type.replace("_", " ")}
-                        </span>
-                      </div>
-                      <div className="flex items-center gap-1 text-muted-foreground/50">
+                      <Icon className={iconClass} />
+                      <span className="truncate">{item.hostName}</span>
+                      <span className="ml-auto flex shrink-0 items-center gap-1 text-[10px] text-muted-foreground">
                         <Clock className="size-3" />
-                        <span className="text-[10px]">
-                          {new Date(item.timestamp).toLocaleDateString()}
-                        </span>
-                      </div>
+                        {parseServerTime(item.timestamp).toLocaleDateString()}
+                      </span>
                     </CommandItem>
-                  ))}
-                </CommandGroup>
-              </>
+                  );
+                })}
+              </CommandGroup>
             )}
 
-            <div className={cn(showHostResultsFirst && "order-first")}>
-              {!showHostResultsFirst && <CommandSeparator className="my-2" />}
-
-              <CommandGroup
-                heading={t("commandPalette.serversAndHosts")}
-                className="px-2"
-              >
-                {filteredHosts.length > 0 ? (
-                  groupedHosts.map(({ folder, hosts: groupHosts }) => (
-                    <div key={folder ?? "__root__"}>
-                      {folder && (
-                        <div className="flex items-center gap-1.5 px-3 py-1.5 text-[11px] font-semibold text-muted-foreground/60 uppercase tracking-wide">
-                          <Folder className="size-3" />
-                          {folder}
-                        </div>
-                      )}
-                      {groupHosts.map((host, i) => (
+            {filteredHosts.length > 0 && (
+              <CommandGroup heading={t("commandPalette.serversAndHosts")}>
+                {groupedHosts.map(({ folder, hosts: groupHosts }) => (
+                  <div key={folder ?? "__root__"}>
+                    {folder && (
+                      <div className="flex items-center gap-1.5 px-2 py-1 text-[10px] font-semibold uppercase tracking-widest text-muted-foreground/60">
+                        <Folder className="size-3" />
+                        {folder}
+                      </div>
+                    )}
+                    {groupHosts.map((host) => {
+                      const online =
+                        getLiveHostStatus(Number(host.id)) === "online";
+                      return (
                         <CommandItem
-                          key={i}
+                          key={host.id}
                           value={`host-${host.id}`}
                           onSelect={() =>
                             handleAction(() => {
@@ -496,38 +351,32 @@ export function CommandPalette({
                               if (action) runHostAction(action, host, shell);
                             })
                           }
-                          className="group flex items-center gap-3 px-3 py-2.5 rounded-none hover:bg-accent-brand/10 cursor-pointer"
+                          className={rowClass}
                         >
-                          <div className="size-8 rounded-none bg-muted flex items-center justify-center group-hover:bg-accent-brand/20 transition-colors shrink-0">
-                            <Server
-                              className={cn(
-                                "size-4",
-                                getLiveHostStatus(Number(host.id)) === "online"
-                                  ? "text-accent-brand"
-                                  : "text-muted-foreground",
-                              )}
-                            />
-                          </div>
-                          <div className="flex flex-col flex-1 min-w-0">
-                            <div className="flex items-center gap-2">
-                              <span className="text-sm font-semibold truncate">
-                                {host.name}
-                              </span>
-                              {host.isShared && (
-                                <span className="text-[9px] px-1 py-px border border-accent-brand/30 bg-accent-brand/10 text-accent-brand shrink-0 leading-none uppercase tracking-wider">
-                                  {t("hosts.sharing.sharedBadge")}
-                                </span>
-                              )}
-                              {getLiveHostStatus(Number(host.id)) ===
-                                "online" && (
-                                <span className="size-1.5 rounded-full bg-accent-brand animate-pulse shrink-0" />
-                              )}
-                            </div>
-                            <span className="text-xs text-muted-foreground font-mono">
-                              {host.username}@{host.ip}
+                          <Server
+                            className={cn(
+                              "size-3.5 shrink-0",
+                              online
+                                ? "text-accent-brand"
+                                : "text-muted-foreground",
+                            )}
+                          />
+                          <span className="truncate">{host.name}</span>
+                          <span className="truncate font-mono text-[11px] text-muted-foreground">
+                            {host.username}@{host.ip}
+                          </span>
+                          {host.isShared && (
+                            <span className="shrink-0 border border-accent-brand/30 bg-accent-brand/10 px-1 text-[9px] uppercase leading-none tracking-wider text-accent-brand">
+                              {t("hosts.sharing.sharedBadge")}
                             </span>
-                          </div>
-                          <div className="flex items-center gap-0.5 opacity-0 group-hover:opacity-100 transition-opacity">
+                          )}
+                          <span
+                            className={cn(
+                              "ml-auto flex shrink-0 items-center gap-1",
+                              !searching &&
+                                "opacity-0 transition-opacity group-hover:opacity-100 group-data-[selected=true]:opacity-100",
+                            )}
+                          >
                             {hostActionsFor(hostActions, host).map((action) => {
                               const Icon = action.icon;
                               const label =
@@ -535,16 +384,18 @@ export function CommandPalette({
                               return (
                                 <button
                                   key={action.id}
+                                  type="button"
                                   title={label}
+                                  aria-label={label}
                                   onClick={(e) => {
                                     e.stopPropagation();
                                     handleAction(() =>
                                       runHostAction(action, host, shell),
                                     );
                                   }}
-                                  className="flex items-center justify-center size-7 rounded text-muted-foreground/50 hover:text-foreground hover:bg-muted-foreground/10 transition-colors"
+                                  className={hostButton}
                                 >
-                                  <Icon className="size-3.5" />
+                                  <Icon className="size-3" />
                                 </button>
                               );
                             })}
@@ -557,126 +408,194 @@ export function CommandPalette({
                               return (
                                 <button
                                   key={entry.id}
+                                  type="button"
                                   title={t(entry.titleKey)}
+                                  aria-label={t(entry.titleKey)}
                                   onClick={(e) => {
                                     e.stopPropagation();
                                     handleAction(() => entry.run(shell, host));
                                   }}
-                                  className="flex items-center justify-center size-7 rounded text-muted-foreground/50 hover:text-foreground hover:bg-muted-foreground/10 transition-colors"
+                                  className={hostButton}
                                 >
-                                  {Icon && <Icon className="size-3.5" />}
+                                  {Icon && <Icon className="size-3" />}
                                 </button>
                               );
                             })}
                             {canEditHost(host) && (
-                              <>
-                                <div className="w-px h-3.5 bg-border/60 mx-0.5 shrink-0" />
-                                <button
-                                  title={t("hosts.editHost")}
-                                  onClick={(e) => {
-                                    e.stopPropagation();
-                                    setIsOpen(false);
-                                    onOpenTab("host-manager");
-                                    setTimeout(() => {
-                                      window.dispatchEvent(
-                                        new CustomEvent(
-                                          "host-manager:edit-host",
-                                          {
-                                            detail: host.id,
-                                          },
-                                        ),
-                                      );
-                                    }, 100);
-                                  }}
-                                  className="flex items-center justify-center size-7 rounded text-muted-foreground/50 hover:text-foreground hover:bg-muted-foreground/10 transition-colors"
-                                >
-                                  <Pencil className="size-3.5" />
-                                </button>
-                              </>
+                              <button
+                                type="button"
+                                title={t("hosts.editHost")}
+                                aria-label={t("hosts.editHost")}
+                                onClick={(e) => {
+                                  e.stopPropagation();
+                                  handleAction(() => onEditHost?.(host));
+                                }}
+                                className={hostButton}
+                              >
+                                <Pencil className="size-3" />
+                              </button>
                             )}
-                          </div>
+                          </span>
                         </CommandItem>
-                      ))}
-                    </div>
-                  ))
-                ) : (
-                  <div className="py-6 text-center text-sm text-muted-foreground">
-                    {t("commandPalette.noHostsFound", { search })}
+                      );
+                    })}
                   </div>
-                )}
+                ))}
               </CommandGroup>
-            </div>
+            )}
 
-            <CommandSeparator className="my-2" />
+            {paletteGroups.map((group) => {
+              const items = filterPaletteItems(
+                groupItems[group.id] ?? [],
+                search,
+                group.showWhenEmpty,
+              );
+              if (items.length === 0) return null;
+              return (
+                <CommandGroup
+                  key={`group-${group.id}`}
+                  heading={t(group.titleKey)}
+                >
+                  {items.map((item) => {
+                    const Icon = item.icon;
+                    const blocked = !!item.needsTarget && !activeTargetTab;
+                    return (
+                      <CommandItem
+                        key={`${group.id}-${item.id}`}
+                        value={`group-${group.id}-${item.id}`}
+                        onSelect={() => {
+                          if (blocked) return;
+                          handleAction(() =>
+                            item.run({ targetTab: activeTargetTab, shell }),
+                          );
+                        }}
+                        className={cn(
+                          rowClass,
+                          blocked && "pointer-events-none opacity-50",
+                        )}
+                      >
+                        {Icon && <Icon className={iconClass} />}
+                        <span className="truncate">{item.title}</span>
+                        {item.description && (
+                          <span className="truncate font-mono text-[11px] text-muted-foreground">
+                            {item.description}
+                          </span>
+                        )}
+                        {(blocked || item.hint) && (
+                          <span className="ml-auto shrink-0 text-[10px] text-muted-foreground/60">
+                            {blocked
+                              ? t("commandPalette.noTargetTab")
+                              : item.hint}
+                          </span>
+                        )}
+                      </CommandItem>
+                    );
+                  })}
+                </CommandGroup>
+              );
+            })}
 
-            <CommandGroup heading={t("commandPalette.links")} className="px-2">
-              <div className="grid grid-cols-3 gap-1">
-                <CommandItem
-                  value="link-github"
-                  onSelect={() =>
-                    window.open(
-                      "https://github.com/Termix-SSH/Termix",
-                      "_blank",
-                    )
-                  }
-                  className="flex items-center gap-3 px-3 py-2 rounded-none hover:bg-accent-brand/10 cursor-pointer"
-                >
-                  <Globe className="size-4 text-muted-foreground" />
-                  <span className="text-sm font-medium">GitHub</span>
-                </CommandItem>
-                <CommandItem
-                  value="link-discord"
-                  onSelect={() =>
-                    window.open(
-                      "https://discord.com/invite/jVQGdvHDrf",
-                      "_blank",
-                    )
-                  }
-                  className="flex items-center gap-3 px-3 py-2 rounded-none hover:bg-accent-brand/10 cursor-pointer"
-                >
-                  <MessagesSquare className="size-4 text-muted-foreground" />
-                  <span className="text-sm font-medium">Discord</span>
-                </CommandItem>
-                <CommandItem
-                  value="link-support"
-                  onSelect={() =>
-                    window.open(
-                      "https://github.com/Termix-SSH/Support/issues/new",
-                      "_blank",
-                    )
-                  }
-                  className="flex items-center gap-3 px-3 py-2 rounded-none hover:bg-accent-brand/10 cursor-pointer"
-                >
-                  <LifeBuoy className="size-4 text-muted-foreground" />
-                  <span className="text-sm font-medium">
-                    {t("dashboard.support")}
-                  </span>
-                </CommandItem>
-              </div>
-            </CommandGroup>
+            {onOpenPanel && destinations.length > 0 && (
+              <CommandGroup heading={t("commandPalette.navigation")}>
+                {destinations.map((item) => {
+                  const Icon = item.icon;
+                  return (
+                    <CommandItem
+                      key={`nav-${item.id}`}
+                      value={`nav-${item.id}`}
+                      onSelect={() =>
+                        handleAction(() =>
+                          item.kind === "tab"
+                            ? onOpenTab(item.id as TabType)
+                            : onOpenPanel(item.id),
+                        )
+                      }
+                      className={rowClass}
+                    >
+                      <Icon className={iconClass} />
+                      <span className="truncate">{t(item.labelKey)}</span>
+                    </CommandItem>
+                  );
+                })}
+              </CommandGroup>
+            )}
+
+            {quickActions.length > 0 && (
+              <CommandGroup heading={t("commandPalette.quickActions")}>
+                {quickActions.map((action) => {
+                  const Icon = action.icon;
+                  return (
+                    <CommandItem
+                      key={action.id}
+                      value={action.id}
+                      onSelect={() => handleAction(action.run)}
+                      className={rowClass}
+                    >
+                      <Icon className={iconClass} />
+                      {action.label}
+                    </CommandItem>
+                  );
+                })}
+              </CommandGroup>
+            )}
+
+            {globalEntries.length > 0 && (
+              <CommandGroup heading={t("commandPalette.pluginActions")}>
+                {globalEntries.map((entry) => {
+                  const Icon = entry.icon;
+                  return (
+                    <CommandItem
+                      key={`plugin-${entry.id}`}
+                      value={`plugin-${entry.id}`}
+                      onSelect={() => handleAction(() => entry.run(shell))}
+                      className={rowClass}
+                    >
+                      {Icon && <Icon className={iconClass} />}
+                      {t(entry.titleKey)}
+                    </CommandItem>
+                  );
+                })}
+              </CommandGroup>
+            )}
+
+            {links.length > 0 && (
+              <CommandGroup heading={t("commandPalette.links")}>
+                {links.map((link) => {
+                  const Icon = link.icon;
+                  return (
+                    <CommandItem
+                      key={link.id}
+                      value={link.id}
+                      onSelect={() => window.open(link.url, "_blank")}
+                      className={rowClass}
+                    >
+                      <Icon className={iconClass} />
+                      {link.label}
+                    </CommandItem>
+                  );
+                })}
+              </CommandGroup>
+            )}
           </CommandList>
 
-          <div className="border-t border-border px-4 py-3 bg-muted/30 flex items-center justify-between text-[11px] text-muted-foreground">
-            <div className="flex items-center gap-3">
-              <div className="flex items-center gap-1">
-                <Kbd className="h-5 px-1 bg-background rounded-none">↑↓</Kbd>
-                <span>{t("commandPalette.navigate")}</span>
-              </div>
-              <div className="flex items-center gap-1">
-                <Kbd className="h-5 px-1 bg-background rounded-none">ENTER</Kbd>
-                <span>{t("commandPalette.select")}</span>
-              </div>
-            </div>
-            <div className="flex items-center gap-1">
-              <span>{t("commandPalette.toggleWith")}</span>
-              <Kbd className="h-5 px-1.5 bg-background rounded-none">Ctrl</Kbd>
-              <span>+</span>
-              <Kbd className="h-5 px-1.5 bg-background rounded-none">K</Kbd>
-              <span>{t("commandPalette.orShortcut")}</span>
-              <Kbd className="h-5 px-1.5 bg-background rounded-none">Shift</Kbd>
-              <span>+</span>
-              <Kbd className="h-5 px-1.5 bg-background rounded-none">Shift</Kbd>
-            </div>
+          <div className="flex items-center gap-3 border-t border-border px-3 py-2 text-[10px] text-muted-foreground">
+            <span className="flex items-center gap-1">
+              <Kbd className="h-4">↑↓</Kbd>
+              {t("commandPalette.navigate")}
+            </span>
+            <span className="flex items-center gap-1">
+              <Kbd className="h-4">↵</Kbd>
+              {t("commandPalette.select")}
+            </span>
+            <span className="ml-auto flex items-center gap-1">
+              <Kbd className="h-4">Ctrl</Kbd>
+              <span className="opacity-50">+</span>
+              <Kbd className="h-4">K</Kbd>
+              <span className="px-1 opacity-50">
+                {t("commandPalette.orShortcut")}
+              </span>
+              <Kbd className="h-4">⇧⇧</Kbd>
+            </span>
           </div>
         </Command>
       </div>
diff --git a/src/ui/shell/DockPanel.tsx b/src/ui/shell/DockPanel.tsx
new file mode 100644
index 000000000..cc4933766
--- /dev/null
+++ b/src/ui/shell/DockPanel.tsx
@@ -0,0 +1,175 @@
+/* eslint-disable react-refresh/only-export-components */
+import type React from "react";
+import { useTranslation } from "react-i18next";
+import {
+  ChevronLeft,
+  ChevronRight,
+  PanelRight,
+  RotateCcw,
+  SquareArrowOutUpRight,
+} from "lucide-react";
+import { PANEL } from "@/components/panel-layout";
+import type { EditingWidth } from "@/components/surface/surface-scope";
+import { cn } from "@/lib/utils";
+import { rem } from "@/lib/rem";
+
+export const DOCK_DEFAULT_WIDTH = 291;
+export const DOCK_MIN_WIDTH = 160;
+export const DOCK_MAX_WIDTH = 480;
+const EDITING_WIDTH = 560;
+const WIDE_EDITING_WIDTH = 760;
+
+/** The width a dock renders at, in Normal-size pixels. */
+export function dockWidth(width: number, editing: EditingWidth): number {
+  if (editing === "wide") return WIDE_EDITING_WIDTH;
+  if (editing) return Math.max(width, EDITING_WIDTH);
+  return width;
+}
+
+function HeaderButton({
+  title,
+  onClick,
+  children,
+}: {
+  title: string;
+  onClick: () => void;
+  children: React.ReactNode;
+}) {
+  return (
+    <button
+      type="button"
+      title={title}
+      aria-label={title}
+      onClick={onClick}
+      className="flex h-full w-12.5 shrink-0 items-center justify-center border-l border-border text-muted-foreground transition-colors hover:bg-muted/40 hover:text-foreground focus-visible:ring-1 focus-visible:ring-ring"
+    >
+      {children}
+    </button>
+  );
+}
+
+/** The shared header and frame of the left sidebar and the right dock. */
+export function DockPanel({
+  side,
+  title,
+  open,
+  width,
+  editing = false,
+  dragging = false,
+  fill = false,
+  onResizeStart,
+  onClose,
+  onOpenAsTab,
+  onMoveToRightDock,
+  onResetWidth,
+  children,
+}: {
+  side: "left" | "right";
+  title: string;
+  open: boolean;
+  width: number;
+  editing?: EditingWidth;
+  dragging?: boolean;
+  /** Fill the parent instead of sizing itself, as in the mobile sheet. */
+  fill?: boolean;
+  onResizeStart?: (e: React.MouseEvent) => void;
+  onClose: () => void;
+  onOpenAsTab?: () => void;
+  onMoveToRightDock?: () => void;
+  onResetWidth?: () => void;
+  children: React.ReactNode;
+}) {
+  const { t } = useTranslation();
+  const CollapseIcon = side === "left" ? ChevronLeft : ChevronRight;
+
+  return (
+    <div
+      className={cn(
+        "relative flex min-h-0 flex-col overflow-hidden bg-sidebar",
+        fill ? "flex-1" : "shrink-0",
+        open &&
+          !fill && [
+            side === "left" ? "border-r" : "border-l",
+            "transition-colors",
+            dragging ? "border-accent-brand/60" : "border-border",
+          ],
+      )}
+      style={
+        fill
+          ? undefined
+          : {
+              width: open ? rem(dockWidth(width, editing)) : 0,
+              transition: dragging ? "none" : "width 0.2s",
+            }
+      }
+    >
+      <div
+        className={`flex ${PANEL.header} shrink-0 flex-row items-center border-b border-border`}
+      >
+        <span className="min-w-0 flex-1 truncate whitespace-nowrap px-3 text-base font-bold tracking-tight text-foreground">
+          {title}
+        </span>
+        {onOpenAsTab && (
+          <HeaderButton title={t("nav.openAsTab")} onClick={onOpenAsTab}>
+            <SquareArrowOutUpRight className="size-3.5" />
+          </HeaderButton>
+        )}
+        {onMoveToRightDock && (
+          <HeaderButton
+            title={t("nav.openInRightDock")}
+            onClick={onMoveToRightDock}
+          >
+            <PanelRight className="size-3.5" />
+          </HeaderButton>
+        )}
+        {onResetWidth && (
+          <HeaderButton
+            title={t("nav.resetSidebarWidth")}
+            onClick={onResetWidth}
+          >
+            <RotateCcw className="size-3.5" />
+          </HeaderButton>
+        )}
+        <HeaderButton
+          title={
+            side === "left" ? t("nav.collapseSidebar") : t("nav.closeRightDock")
+          }
+          onClick={onClose}
+        >
+          <CollapseIcon className="size-4" />
+        </HeaderButton>
+      </div>
+
+      <div className="flex min-h-0 flex-1 flex-col overflow-hidden">
+        {children}
+      </div>
+
+      {open && onResizeStart && !editing && (
+        <div
+          onMouseDown={onResizeStart}
+          className={cn(
+            "absolute bottom-0 top-0 z-30 w-1 cursor-col-resize transition-colors",
+            side === "left" ? "right-0" : "left-0",
+            dragging ? "bg-accent-brand/60" : "hover:bg-accent-brand/40",
+          )}
+        />
+      )}
+    </div>
+  );
+}
+
+/** The thin strip that reopens a collapsed left dock. */
+export function DockReopenStrip({ onClick }: { onClick: () => void }) {
+  const { t } = useTranslation();
+  return (
+    <button
+      type="button"
+      onClick={onClick}
+      title={t("nav.openSidebar")}
+      aria-label={t("nav.openSidebar")}
+      className="absolute bottom-0 left-0 top-0 z-20 flex w-6 items-center justify-center border-r border-border bg-sidebar text-muted-foreground transition-colors hover:bg-accent-brand/5 hover:text-accent-brand"
+    >
+      <ChevronRight className="size-3.5" />
+    </button>
+  );
+}
diff --git a/src/ui/shell/MobileBar.tsx b/src/ui/shell/MobileBar.tsx
new file mode 100644
index 000000000..7ee5372ad
--- /dev/null
+++ b/src/ui/shell/MobileBar.tsx
@@ -0,0 +1,301 @@
+/* eslint-disable react-refresh/only-export-components */
+import { useMemo, useState } from "react";
+import { useTranslation } from "react-i18next";
+import {
+  LogOut,
+  MoreHorizontal,
+  Search,
+  Settings,
+  SquareArrowOutUpRight,
+  X,
+} from "lucide-react";
+import type { TabType } from "@/types/ui-types";
+import type { RailView } from "@/sidebar/AppRail";
+import {
+  groupRailItems,
+  useRailItems,
+  type RailItemDef,
+} from "@/sidebar/rail-items";
+import { useHiddenRailTabs } from "@/sidebar/hidden-rail-tabs";
+import { RailBadge } from "@/sidebar/RailBadge";
+import { cn } from "@/lib/utils";
+import { isElectron } from "@/lib/electron";
+
+const PRIMARY_COUNT = 4;
+
+/** The four bar slots: flagged items first, then the rest in rail order. */
+export function pickPrimaryItems(items: RailItemDef[]): RailItemDef[] {
+  const usable = items.filter((item) => item.kind !== "tab");
+  return [
+    ...usable.filter((item) => item.mobilePrimary),
+    ...usable.filter((item) => !item.mobilePrimary),
+  ].slice(0, PRIMARY_COUNT);
+}
+
+/**
+ * The rail on a phone: the most used destinations on the bar, everything else
+ * in a sheet behind More with search, settings and logout.
+ */
+export function MobileBar({
+  railView,
+  sidebarOpen,
+  username,
+  onRailClick,
+  onOpenTab,
+  onOpenSettings,
+  onOpenPalette,
+  onLogout,
+}: {
+  railView: RailView;
+  sidebarOpen: boolean;
+  username: string;
+  onRailClick: (view: RailView) => void;
+  onOpenTab: (type: TabType) => void;
+  onOpenSettings: () => void;
+  onOpenPalette: () => void;
+  onLogout: () => void;
+}) {
+  const { t } = useTranslation();
+  const [moreOpen, setMoreOpen] = useState(false);
+  const railItems = useRailItems();
+  const hidden = useHiddenRailTabs();
+
+  const visible = useMemo(
+    () => railItems.filter((item) => !hidden.has(item.id)),
+    [railItems, hidden],
+  );
+  const main = visible.filter((item) => item.placement !== "footer");
+  const footer = visible.filter((item) => item.placement === "footer");
+  const primary = useMemo(() => pickPrimaryItems(main), [main]);
+  const bands = useMemo(() => groupRailItems(main), [main]);
+  const badged = footer.find((item) => item.useBadge);
+
+  const close = () => setMoreOpen(false);
+  const open = (item: RailItemDef) => {
+    close();
+    if (item.kind === "tab") onOpenTab(item.id as TabType);
+    else onRailClick(item.id as RailView);
+  };
+
+  return (
+    <>
+      <nav
+        aria-label={t("nav.mobileNavigation")}
+        className="flex shrink-0 items-stretch border-t border-border bg-sidebar safe-bottom md:hidden"
+      >
+        {primary.map((item) => (
+          <BarButton
+            key={item.id}
+            icon={item.icon}
+            label={t(item.labelKey)}
+            active={sidebarOpen && railView === item.id}
+            useBadge={item.useBadge}
+            onClick={() => open(item)}
+          />
+        ))}
+        <BarButton
+          icon={MoreHorizontal}
+          label={t("common.more")}
+          active={moreOpen}
+          useBadge={badged?.useBadge}
+          onClick={() => setMoreOpen(true)}
+        />
+      </nav>
+
+      {moreOpen && (
+        <div className="fixed inset-0 z-[200] flex flex-col justify-end md:hidden">
+          <button
+            type="button"
+            aria-label={t("common.close")}
+            className="absolute inset-0 bg-overlay"
+            onClick={close}
+          />
+          <div
+            role="dialog"
+            aria-label={t("common.more")}
+            className="motion-panel-enter relative flex max-h-[80dvh] flex-col border-t border-border bg-sidebar safe-bottom"
+          >
+            <div className="flex h-12.5 shrink-0 items-center border-b border-border px-3">
+              <span className="flex-1 text-base font-bold tracking-tight text-foreground">
+                {t("common.more")}
+              </span>
+              <button
+                type="button"
+                onClick={close}
+                aria-label={t("common.close")}
+                className="flex size-9 items-center justify-center text-muted-foreground"
+              >
+                <X className="size-4" />
+              </button>
+            </div>
+
+            <div className="min-h-0 flex-1 overflow-y-auto py-2">
+              <SheetRow
+                icon={Search}
+                label={t("nav.search")}
+                onClick={() => {
+                  close();
+                  onOpenPalette();
+                }}
+              />
+              {bands.map((band) => (
+                <div key={band.group} className="mt-1 flex flex-col">
+                  <div className="px-3 pb-1 pt-2 text-[10px] font-semibold uppercase tracking-widest text-muted-foreground/60">
+                    {t(`nav.group.${band.group}`)}
+                  </div>
+                  {band.items.map((item) => (
+                    <SheetRow
+                      key={item.id}
+                      icon={item.icon}
+                      label={t(item.labelKey)}
+                      useBadge={item.useBadge}
+                      active={sidebarOpen && railView === item.id}
+                      onOpenAsTab={
+                        item.promotable
+                          ? () => {
+                              close();
+                              onOpenTab(item.id as TabType);
+                            }
+                          : undefined
+                      }
+                      onClick={() => open(item)}
+                    />
+                  ))}
+                </div>
+              ))}
+
+              <div className="mt-2 border-t border-border pt-2">
+                {footer.map((item) => (
+                  <SheetRow
+                    key={item.id}
+                    icon={item.icon}
+                    label={t(item.labelKey)}
+                    useBadge={item.useBadge}
+                    active={sidebarOpen && railView === item.id}
+                    onClick={() => open(item)}
+                  />
+                ))}
+                <SheetRow
+                  icon={Settings}
+                  label={t("nav.settings")}
+                  hint={username}
+                  onClick={() => {
+                    close();
+                    onOpenSettings();
+                  }}
+                />
+                {!isElectron() && (
+                  <SheetRow
+                    icon={LogOut}
+                    label={t("common.logout")}
+                    onClick={() => {
+                      close();
+                      onLogout();
+                    }}
+                  />
+                )}
+              </div>
+            </div>
+          </div>
+        </div>
+      )}
+    </>
+  );
+}
+
+function BarButton({
+  icon: Icon,
+  label,
+  active,
+  useBadge,
+  onClick,
+}: {
+  icon: React.ElementType;
+  label: string;
+  active?: boolean;
+  useBadge?: () => number | null | undefined;
+  onClick: () => void;
+}) {
+  return (
+    <button
+      type="button"
+      onClick={onClick}
+      aria-label={label}
+      aria-pressed={!!active}
+      className={cn(
+        "relative flex h-14 flex-1 flex-col items-center justify-center gap-1 transition-colors",
+        active
+          ? "bg-accent-brand/10 text-accent-brand"
+          : "text-muted-foreground active:bg-muted/60",
+      )}
+    >
+      <span className="relative flex items-center justify-center">
+        <Icon className="size-5" />
+        {useBadge && (
+          <RailBadge useBadge={useBadge} className="-right-2.5 -top-1.5" />
+        )}
+      </span>
+      <span className="max-w-full truncate px-1 text-[10px] font-medium leading-none">
+        {label}
+      </span>
+    </button>
+  );
+}
+
+function SheetRow({
+  icon: Icon,
+  label,
+  hint,
+  useBadge,
+  active,
+  onClick,
+  onOpenAsTab,
+}: {
+  icon: React.ElementType;
+  label: string;
+  hint?: string;
+  useBadge?: () => number | null | undefined;
+  active?: boolean;
+  onClick: () => void;
+  onOpenAsTab?: () => void;
+}) {
+  const { t } = useTranslation();
+  return (
+    <div className="flex items-stretch">
+      <button
+        type="button"
+        onClick={onClick}
+        className={cn(
+          "flex min-h-11 flex-1 items-center gap-3 border-l-2 px-3 text-left transition-colors",
+          active
+            ? "border-accent-brand bg-accent-brand/10 text-accent-brand"
+            : "border-transparent text-foreground active:bg-muted",
+        )}
+      >
+        <span className="relative flex shrink-0">
+          <Icon className="size-4 text-muted-foreground" />
+          {useBadge && (
+            <RailBadge useBadge={useBadge} className="-right-2 -top-1.5" />
+          )}
+        </span>
+        <span className="flex-1 truncate text-sm font-medium">{label}</span>
+        {hint && (
+          <span className="shrink-0 truncate text-[11px] text-muted-foreground">
+            {hint}
+          </span>
+        )}
+      </button>
+      {onOpenAsTab && (
+        <button
+          type="button"
+          onClick={onOpenAsTab}
+          aria-label={t("nav.openAsTab")}
+          title={t("nav.openAsTab")}
+          className="flex w-11 shrink-0 items-center justify-center text-muted-foreground active:bg-muted"
+        >
+          <SquareArrowOutUpRight className="size-3.5" />
+        </button>
+      )}
+    </div>
+  );
+}
diff --git a/src/ui/shell/MobileBottomBar.tsx b/src/ui/shell/MobileBottomBar.tsx
deleted file mode 100644
index 32850ee06..000000000
--- a/src/ui/shell/MobileBottomBar.tsx
+++ /dev/null
@@ -1,189 +0,0 @@
-import { useEffect, useMemo, useState } from "react";
-import { useTranslation } from "react-i18next";
-import { LogOut, MoreHorizontal, Settings, User } from "lucide-react";
-import {
-  DropdownMenu,
-  DropdownMenuContent,
-  DropdownMenuItem,
-  DropdownMenuTrigger,
-  DropdownMenuSeparator,
-} from "@/components/dropdown-menu";
-import type { RailView } from "@/sidebar/AppRail";
-import { useRailItems } from "@/sidebar/rail-items";
-import { readHiddenRailTabs } from "@/sidebar/hidden-rail-tabs";
-import { RailBadge } from "@/sidebar/RailBadge";
-
-export function MobileBottomBar({
-  railView,
-  sidebarOpen,
-  onRailClick,
-}: {
-  railView: RailView;
-  sidebarOpen: boolean;
-  onRailClick: (view: RailView) => void;
-}) {
-  const { t } = useTranslation();
-  const [moreOpen, setMoreOpen] = useState(false);
-  const [hidden, setHidden] = useState<Set<string>>(readHiddenRailTabs);
-  const railItems = useRailItems();
-
-  // The rail's visibility toggles apply on mobile too; this used to ignore
-  // them, so hiding a tab did nothing on a phone.
-  useEffect(() => {
-    const handler = () => setHidden(readHiddenRailTabs());
-    window.addEventListener("hiddenRailTabsChanged", handler);
-    return () => window.removeEventListener("hiddenRailTabsChanged", handler);
-  }, []);
-
-  const { primaryItems, moreItems } = useMemo(() => {
-    // Tab-opening entries (network graph) have no sidebar panel to show here.
-    const visible = railItems.filter(
-      (item) => item.kind !== "tab" && !hidden.has(item.id),
-    );
-    const preferred = visible.filter((item) => item.mobilePrimary);
-    // Keep four primary slots filled even when the user hides the defaults,
-    // so the bar never collapses to just "More".
-    const primary = [
-      ...preferred,
-      ...visible.filter((item) => !item.mobilePrimary),
-    ].slice(0, 4);
-    const primaryIds = new Set(primary.map((item) => item.id));
-    return {
-      primaryItems: primary,
-      moreItems: visible.filter((item) => !primaryIds.has(item.id)),
-    };
-  }, [hidden, railItems]);
-
-  const moreActive =
-    sidebarOpen &&
-    (moreItems.some((item) => item.id === railView) ||
-      railView === "user-profile" ||
-      railView === "admin-settings");
-
-  return (
-    <div className="md:hidden flex items-stretch shrink-0 bg-sidebar border-t border-border safe-bottom">
-      {primaryItems.map((item) => {
-        const active = sidebarOpen && railView === item.id;
-        const Icon = item.icon;
-        return (
-          <button
-            key={item.id}
-            onClick={() => onRailClick(item.id as RailView)}
-            className={`relative flex flex-col items-center justify-center flex-1 gap-0.5 py-2 min-h-[56px] transition-colors text-[10px] font-medium
-              ${active ? "text-accent-brand" : "text-muted-foreground"}`}
-          >
-            <span className="relative">
-              <Icon className="size-5" />
-              {item.useBadge && (
-                <RailBadge
-                  useBadge={item.useBadge}
-                  className="-top-1.5 -right-2.5"
-                />
-              )}
-            </span>
-            <span className="max-w-full truncate px-0.5">
-              {t(item.labelKey)}
-            </span>
-          </button>
-        );
-      })}
-
-      <DropdownMenu open={moreOpen} onOpenChange={setMoreOpen}>
-        <DropdownMenuTrigger asChild>
-          <button
-            className={`relative flex flex-col items-center justify-center flex-1 gap-0.5 py-2 min-h-[56px] transition-colors text-[10px] font-medium
-              ${moreActive ? "text-accent-brand" : "text-muted-foreground"}`}
-          >
-            <span className="relative">
-              <MoreHorizontal className="size-5" />
-              {moreItems.map((item) =>
-                item.useBadge ? (
-                  <RailBadge
-                    key={item.id}
-                    useBadge={item.useBadge}
-                    variant="dot"
-                    className="-top-0.5 -right-1"
-                  />
-                ) : null,
-              )}
-            </span>
-            <span>{t("common.more")}</span>
-          </button>
-        </DropdownMenuTrigger>
-        <DropdownMenuContent
-          side="top"
-          align="end"
-          className="mb-1 min-w-[180px] max-h-[60vh] overflow-y-auto"
-        >
-          {moreItems.map((item) => {
-            const active = sidebarOpen && railView === item.id;
-            const Icon = item.icon;
-            return (
-              <DropdownMenuItem
-                key={item.id}
-                onClick={() => {
-                  onRailClick(item.id as RailView);
-                  setMoreOpen(false);
-                }}
-                className={active ? "text-accent-brand" : ""}
-              >
-                <Icon className="size-4" />
-                {t(item.labelKey)}
-                {item.useBadge && (
-                  <span className="relative ml-auto w-5 h-3.5">
-                    <RailBadge useBadge={item.useBadge} className="right-0" />
-                  </span>
-                )}
-              </DropdownMenuItem>
-            );
-          })}
-
-          <DropdownMenuSeparator />
-          <DropdownMenuItem
-            onClick={() => {
-              onRailClick("user-profile");
-              setMoreOpen(false);
-            }}
-            className={
-              sidebarOpen && railView === "user-profile"
-                ? "text-accent-brand"
-                : ""
-            }
-          >
-            <User className="size-4" />
-            {t("nav.userProfile")}
-          </DropdownMenuItem>
-          <DropdownMenuItem
-            onClick={() => {
-              onRailClick("admin-settings");
-              setMoreOpen(false);
-            }}
-            className={
-              sidebarOpen && railView === "admin-settings"
-                ? "text-accent-brand"
-                : ""
-            }
-          >
-            <Settings className="size-4" />
-            {t("nav.admin")}
-          </DropdownMenuItem>
-
-          <DropdownMenuSeparator />
-          <DropdownMenuItem
-            variant="destructive"
-            onClick={() =>
-              window.dispatchEvent(
-                new CustomEvent("termix:logout", {
-                  detail: { manual: true },
-                }),
-              )
-            }
-          >
-            <LogOut className="size-4" />
-            {t("common.logout")}
-          </DropdownMenuItem>
-        </DropdownMenuContent>
-      </DropdownMenu>
-    </div>
-  );
-}
diff --git a/src/ui/shell/TabBar.tsx b/src/ui/shell/TabBar.tsx
index b6e4b057a..82c38269d 100644
--- a/src/ui/shell/TabBar.tsx
+++ b/src/ui/shell/TabBar.tsx
@@ -33,6 +33,7 @@ import { isSessionTabType } from "@/shell/tab-registry";
 import { isElectron } from "@/lib/electron";
 import type { Tab, TabType } from "@/types/ui-types";
 import { ActionSlot } from "@/shell/ActionSlot";
+import { useTabHandlesVersion } from "@/shell/tab-handles";
 import {
   canJoinSplit,
   isSplitTab,
@@ -97,6 +98,8 @@ export function TabBar({
   showTabNumbers?: boolean;
 }) {
   const { t } = useTranslation();
+  // Re-renders when a tab's handle attaches, for buttons whose when reads it.
+  useTabHandlesVersion();
   const reduceMotion = useReducedMotion();
   const [open, setOpen] = useState(true);
   const [dragTabId, setDragTabId] = useState<string | null>(null);
@@ -573,7 +576,7 @@ export function TabBar({
               <Button
                 variant="ghost"
                 size="icon"
-                className="h-full w-12.5 border-y-0 border-r-0 border-border rounded-none text-muted-foreground hover:text-foreground"
+                className="h-full w-12.5 rounded-none text-muted-foreground hover:text-foreground"
               >
                 <ChevronDown className="size-4" />
               </Button>
@@ -632,7 +635,7 @@ export function TabBar({
               <Button
                 variant="ghost"
                 size="icon"
-                className={`h-full w-12.5 rounded-none border-y-0 border-border ${rightDockOpen ? "text-accent-brand bg-accent-brand/10" : "text-muted-foreground hover:text-foreground"}`}
+                className={`h-full w-12.5 rounded-none ${rightDockOpen ? "text-accent-brand bg-accent-brand/10" : "text-muted-foreground hover:text-foreground"}`}
                 title={t("nav.toggleRightDock")}
                 aria-label={t("nav.toggleRightDock")}
                 aria-pressed={!!rightDockOpen}
@@ -648,7 +651,7 @@ export function TabBar({
               <Button
                 variant="ghost"
                 size="icon"
-                className="h-full w-12.5 rounded-none border-y-0 border-border text-muted-foreground hover:text-foreground"
+                className="h-full w-12.5 rounded-none text-muted-foreground hover:text-foreground"
                 title={
                   isAppFullscreen
                     ? t("nav.exitFullscreen")
@@ -673,7 +676,7 @@ export function TabBar({
           <Button
             variant="ghost"
             size="icon"
-            className="h-full w-12.5 rounded-none border-y-0 border-border text-muted-foreground hover:text-foreground"
+            className="h-full w-12.5 rounded-none text-muted-foreground hover:text-foreground"
             onClick={() => setOpen((o) => !o)}
           >
             <ChevronUp
diff --git a/src/ui/shell/shell-layout.ts b/src/ui/shell/shell-layout.ts
index 8d096c2b3..2c6f0dca8 100644
--- a/src/ui/shell/shell-layout.ts
+++ b/src/ui/shell/shell-layout.ts
@@ -22,9 +22,11 @@ import { listPanes, mapTabIds } from "./split/split-tree";
 const CORE_UNSAVED = new Set([
   "dashboard",
   "host-manager",
+  "settings",
   "user-profile",
   "admin-settings",
   "split-screen",
+  "plugins",
 ]);
 
 /**
diff --git a/src/ui/shell/split/SplitLayoutMenu.tsx b/src/ui/shell/split/SplitLayoutMenu.tsx
index 011a451d7..b2cb4c1df 100644
--- a/src/ui/shell/split/SplitLayoutMenu.tsx
+++ b/src/ui/shell/split/SplitLayoutMenu.tsx
@@ -71,7 +71,7 @@ export function SplitLayoutMenu({
         <Button
           variant="ghost"
           size="icon"
-          className={`h-full w-12.5 rounded-none border-y-0 border-border ${activeIsSplit ? "text-accent-brand" : "text-muted-foreground hover:text-foreground"}`}
+          className={`h-full w-12.5 rounded-none ${activeIsSplit ? "text-accent-brand" : "text-muted-foreground hover:text-foreground"}`}
           title={t("splitScreen.title")}
           aria-label={t("splitScreen.title")}
         >
diff --git a/src/ui/shell/tab-close-guards.ts b/src/ui/shell/tab-close-guards.ts
new file mode 100644
index 000000000..abfaa7776
--- /dev/null
+++ b/src/ui/shell/tab-close-guards.ts
@@ -0,0 +1,20 @@
+type Guard = () => boolean | Promise<boolean>;
+
+const guards = new Map<string, Guard>();
+
+/**
+ * Lets a tab with no session handle, like Manage, ask before it closes.
+ * Returns the unregister function.
+ */
+export function registerTabCloseGuard(tabId: string, guard: Guard): () => void {
+  guards.set(tabId, guard);
+  return () => {
+    if (guards.get(tabId) === guard) guards.delete(tabId);
+  };
+}
+
+/** Whether the tab may close: true when it has no guard or the guard agrees. */
+export async function canCloseTab(tabId: string): Promise<boolean> {
+  const guard = guards.get(tabId);
+  return guard ? await guard() : true;
+}
diff --git a/src/ui/shell/tab-handles.ts b/src/ui/shell/tab-handles.ts
new file mode 100644
index 000000000..b679858e0
--- /dev/null
+++ b/src/ui/shell/tab-handles.ts
@@ -0,0 +1,45 @@
+import { useSyncExternalStore, type Ref, type RefObject } from "react";
+
+/**
+ * Lets the tab bar know when a tab's surface handle attaches. A ref filling
+ * in renders nothing on its own, so a tab button whose `when` reads the
+ * handle (like Share) would wait for some unrelated render to show up.
+ */
+let version = 0;
+const listeners = new Set<() => void>();
+const callbacks = new WeakMap<RefObject<unknown>, (value: unknown) => void>();
+
+function subscribe(listener: () => void): () => void {
+  listeners.add(listener);
+  return () => listeners.delete(listener);
+}
+
+/**
+ * A callback ref that fills `ref` and tells the tab bar. The same function
+ * comes back for the same ref, so React never detaches and reattaches it.
+ */
+export function trackTabHandle(
+  ref: RefObject<unknown> | undefined,
+): Ref<unknown> | undefined {
+  if (!ref) return undefined;
+  let callback = callbacks.get(ref);
+  if (!callback) {
+    callback = (value: unknown) => {
+      if (ref.current === value) return;
+      (ref as { current: unknown }).current = value;
+      version += 1;
+      for (const listener of listeners) listener();
+    };
+    callbacks.set(ref, callback);
+  }
+  return callback;
+}
+
+/** Changes whenever any tab's handle attaches or goes away. */
+export function useTabHandlesVersion(): number {
+  return useSyncExternalStore(
+    subscribe,
+    () => version,
+    () => version,
+  );
+}
diff --git a/src/ui/shell/tab-registry.ts b/src/ui/shell/tab-registry.ts
index e2239bbd9..f820cccbf 100644
--- a/src/ui/shell/tab-registry.ts
+++ b/src/ui/shell/tab-registry.ts
@@ -1,5 +1,6 @@
+import type { ConfirmOptions } from "@/components/surface/surface-scope";
 import type { ComponentType, Ref } from "react";
-import type { HostDraft } from "@termix/plugin-sdk/frontend";
+import type { HostDraft } from "@termix-ssh/plugin-sdk/frontend";
 import type { Host, Tab } from "@/types/ui-types";
 import { createRegistry } from "@/lib/registry";
 import { viewOwner } from "@/plugin-host/view-ownership";
@@ -34,6 +35,8 @@ export interface TabShellCallbacks {
   openHostEditor?: (draft?: HostDraft) => void;
   /** Saves a quick-connect tab's host. Core terminal only. */
   saveQuickConnect?: (tab: Tab, host: Host) => Promise<void>;
+  /** Asks a yes or no question over the main area. */
+  confirm?: (options: ConfirmOptions) => Promise<boolean>;
 }
 
 export interface TabRenderProps {
diff --git a/src/ui/shell/tabUtils.tsx b/src/ui/shell/tabUtils.tsx
index 8bfec9562..027ffdc01 100644
--- a/src/ui/shell/tabUtils.tsx
+++ b/src/ui/shell/tabUtils.tsx
@@ -1,14 +1,20 @@
 /* eslint-disable react-refresh/only-export-components */
+import {
+  requestFromLegacyEvent,
+  requestManage,
+} from "@/manage/manage-requests";
 import {
   LayoutDashboard,
   LayoutPanelLeft,
+  Puzzle,
+  LibraryBig,
   Server,
   Settings,
-  User,
 } from "lucide-react";
 import { lazy, memo, Suspense } from "react";
 import { useTranslation } from "react-i18next";
 import type { Tab, TabType } from "@/types/ui-types";
+import { trackTabHandle } from "@/shell/tab-handles";
 import { hostToSSHHost } from "@/lib/host-to-ssh-host";
 import { PluginViewPlaceholder } from "@/plugin-host/PluginViewPlaceholder";
 import {
@@ -17,12 +23,22 @@ import {
   type TabTypeDef,
 } from "./tab-registry";
 import { getPanel, type PanelDef } from "./panel-registry";
+import type { SettingsTabProps } from "@/settings/SettingsTab";
 import {
   markAdaptiveResourceUsed,
   runAdaptiveBackgroundTask,
 } from "@/lib/adaptive-resource-budget";
 
-// Heavy tab surfaces — keep out of the AppShell critical path.
+// Heavy tab surfaces, kept out of the AppShell critical path.
+const ManageTab = lazy(() =>
+  import("@/manage/ManageTab").then((m) => ({ default: m.ManageTab })),
+);
+const SettingsTab = lazy(() =>
+  import("@/settings/SettingsTab").then((m) => ({ default: m.SettingsTab })),
+);
+const PluginsTab = lazy(() =>
+  import("@/plugins/PluginsTab").then((m) => ({ default: m.PluginsTab })),
+);
 const DashboardTab = lazy(() =>
   import("@/dashboard/DashboardTab").then((m) => ({
     default: m.DashboardTab,
@@ -91,13 +107,15 @@ export function tabIcon(type: TabType) {
     case "dashboard":
       return <LayoutDashboard className="size-3.5" />;
     case "host-manager":
-      return <Server className="size-3.5" />;
+      return <LibraryBig className="size-3.5" />;
+    case "settings":
     case "user-profile":
-      return <User className="size-3.5" />;
     case "admin-settings":
       return <Settings className="size-3.5" />;
     case "split-screen":
       return <LayoutPanelLeft className="size-3.5" />;
+    case "plugins":
+      return <Puzzle className="size-3.5" />;
     default: {
       const Icon = getTabType(type)?.icon;
       return Icon ? <Icon className="size-3.5" /> : null;
@@ -147,7 +165,9 @@ const RegisteredTab = memo(function RegisteredTab({
       isVisible={isVisible}
       isFocusedPane={isFocusedPane}
       inSplit={inSplit}
-      handleRef={tab.terminalRef as React.Ref<unknown>}
+      handleRef={trackTabHandle(
+        tab.terminalRef as React.RefObject<unknown> | undefined,
+      )}
       shell={shell}
     />
   );
@@ -165,7 +185,14 @@ const DashboardTabHost = memo(function DashboardTabHost({
 }) {
   return withTabSuspense(
     <DashboardTab
-      onOpenSingletonTab={(type) => shell.openSingletonTab(type)}
+      onOpenSingletonTab={(type, pendingEvent) => {
+        // "Add host" and friends say what to open in the Manage tab.
+        const request = pendingEvent
+          ? requestFromLegacyEvent(pendingEvent)
+          : null;
+        if (request) requestManage(request);
+        else shell.openSingletonTab(type);
+      }}
       onOpenTab={(host, type) => shell.openTab(host, type)}
       isVisible={isVisible}
     />,
@@ -202,6 +229,8 @@ function noop() {}
 
 export interface TabRenderContext {
   shell: TabShellCallbacks;
+  /** What the Settings tab needs from the shell. */
+  settings?: Omit<SettingsTabProps, "section" | "sectionAt">;
   /** The terminal a panel shown as a tab sends commands to. */
   panelTargetTab?: Tab;
   isVisible?: boolean;
@@ -225,6 +254,36 @@ export function renderTabContent(tab: Tab, context: TabRenderContext) {
       return null;
 
     case "host-manager":
+      return withTabSuspense(<ManageTab />);
+
+    case "plugins":
+      return withTabSuspense(<PluginsTab />);
+
+    case "settings":
+      return context.settings
+        ? withTabSuspense(
+            <SettingsTab
+              {...context.settings}
+              section={
+                typeof tab.data?.section === "string"
+                  ? tab.data.section
+                  : undefined
+              }
+              sectionAt={
+                typeof tab.data?.revealAt === "number" ||
+                typeof tab.data?.revealAt === "string"
+                  ? tab.data.revealAt
+                  : undefined
+              }
+              reveal={
+                typeof tab.data?.reveal === "string"
+                  ? `${tab.data.reveal}@${String(tab.data.revealAt ?? "")}`
+                  : undefined
+              }
+            />,
+          )
+        : null;
+
     case "user-profile":
     case "admin-settings":
       return null;
diff --git a/src/ui/sidebar/AdminApiKeysSection.tsx b/src/ui/sidebar/AdminApiKeysSection.tsx
index ddcbfdc1f..95b8ae1cf 100644
--- a/src/ui/sidebar/AdminApiKeysSection.tsx
+++ b/src/ui/sidebar/AdminApiKeysSection.tsx
@@ -1,3 +1,4 @@
+import { useConfirm } from "@/components/surface/surface-scope";
 import type { Dispatch, SetStateAction } from "react";
 import { useTranslation } from "react-i18next";
 import { copyToClipboard } from "@/lib/clipboard";
@@ -9,6 +10,7 @@ import { toast } from "sonner";
 import { AccordionSection } from "./AdminSettingsShared";
 import type { AdminUser } from "./AdminManagementSections";
 import { Select2 } from "@/components/select2";
+import { DocsLink } from "@/components/docs-link";
 
 type AdminApiKeysSectionProps = {
   open: boolean;
@@ -52,6 +54,7 @@ export function AdminApiKeysSection({
   newKeyLoading,
 }: AdminApiKeysSectionProps) {
   const { t } = useTranslation();
+  const confirm = useConfirm();
 
   return (
     <AccordionSection
@@ -64,24 +67,10 @@ export function AdminApiKeysSection({
         <div className="flex items-center justify-between py-2 border-b border-border">
           <span className="text-[10px] text-muted-foreground">
             {t("admin.apiKeysCount", { count: apiKeys.length })}{" "}
-            <a
-              href="https://docs.termix.site/features/api/api-keys"
-              target="_blank"
-              rel="noreferrer"
-              className="text-accent-brand hover:underline"
-            >
-              {t("admin.apiKeysDocsLink")}
-            </a>
+            <DocsLink core="apiKeys">{t("admin.apiKeysDocsLink")}</DocsLink>
             <br />
             {t("admin.apiKeysCliHint")}{" "}
-            <a
-              href="https://docs.termix.site/cli"
-              target="_blank"
-              rel="noreferrer"
-              className="text-accent-brand hover:underline"
-            >
-              {t("admin.apiKeysCliLink")}
-            </a>
+            <DocsLink core="cli">{t("admin.apiKeysCliLink")}</DocsLink>
           </span>
           <div className="flex items-center gap-1">
             <Button
@@ -244,6 +233,11 @@ export function AdminApiKeysSection({
               size="icon"
               className="size-6 text-muted-foreground hover:text-destructive shrink-0"
               onClick={async () => {
+                const ok = await confirm({
+                  title: t("admin.revokeKeyConfirm", { name: key.name }),
+                  confirmLabel: t("admin.revokeKey"),
+                });
+                if (!ok) return;
                 try {
                   await deleteApiKey(key.id);
                   setApiKeys((prev) => prev.filter((k) => k.id !== key.id));
diff --git a/src/ui/sidebar/AdminAuditLogSection.tsx b/src/ui/sidebar/AdminAuditLogSection.tsx
index 947f0db55..d9e0a273b 100644
--- a/src/ui/sidebar/AdminAuditLogSection.tsx
+++ b/src/ui/sidebar/AdminAuditLogSection.tsx
@@ -21,6 +21,7 @@ import {
 import { toast } from "sonner";
 import type { AdminUser } from "./AdminManagementSections";
 import { Select2 } from "@/components/select2";
+import { parseServerTime } from "@/lib/server-time";
 
 const RESOURCE_TYPES = [
   "user",
@@ -177,7 +178,7 @@ export function AdminAuditLogSection({
 
   function formatTimestamp(ts: string) {
     try {
-      return new Date(ts).toLocaleString(undefined, {
+      return parseServerTime(ts).toLocaleString(undefined, {
         year: "numeric",
         month: "short",
         day: "numeric",
diff --git a/src/ui/sidebar/AdminManagementSections.tsx b/src/ui/sidebar/AdminManagementSections.tsx
index 6c2f08fb9..ce052c7e3 100644
--- a/src/ui/sidebar/AdminManagementSections.tsx
+++ b/src/ui/sidebar/AdminManagementSections.tsx
@@ -1,3 +1,4 @@
+import { useConfirm } from "@/components/surface/surface-scope";
 import { useState, type Dispatch, type SetStateAction } from "react";
 import { useTranslation } from "react-i18next";
 import {
@@ -13,6 +14,7 @@ import { pluginKey } from "@/lib/plugin-i18n";
 import { PluginIcon } from "@/lib/plugin-icon";
 import { Button } from "@/components/button";
 import { Input } from "@/components/input";
+import { PanelSearch } from "@/components/panel-layout";
 import {
   Activity,
   Check,
@@ -28,12 +30,13 @@ import {
 } from "lucide-react";
 import { toast } from "sonner";
 import { AccordionSection } from "./AdminSettingsShared";
+import { roleLabel } from "@/lib/role-label";
 
 export type AdminUser = {
   id: string;
   username: string;
   isAdmin: boolean;
-  isOidc: boolean;
+  isExternal: boolean;
   passwordHash?: string;
   dataUnlocked?: boolean;
   secondFactorEnabled?: boolean;
@@ -74,7 +77,7 @@ type UsersSectionProps = {
   setEditUserTarget: Dispatch<SetStateAction<AdminUser | null>>;
   setEditUserOpen: Dispatch<SetStateAction<boolean>>;
   setLinkAccountTarget: Dispatch<
-    SetStateAction<{ id: string; username: string; isOidc: boolean } | null>
+    SetStateAction<{ id: string; username: string; isExternal: boolean } | null>
   >;
   setLinkAccountOpen: Dispatch<SetStateAction<boolean>>;
   setUnlinkAccountTarget: Dispatch<
@@ -112,6 +115,7 @@ export function AdminUsersSection({
   onPageChange,
 }: UsersSectionProps) {
   const { t } = useTranslation();
+  const confirm = useConfirm();
   const pageCount = Math.max(1, Math.ceil(total / pageSize));
   const hasPrev = page > 0;
   const hasNext = page + 1 < pageCount;
@@ -149,19 +153,19 @@ export function AdminUsersSection({
           </div>
         </div>
         <div className="py-2 border-b border-border">
-          <Input
+          <PanelSearch
             value={search}
-            onChange={(e) => onSearchChange(e.target.value)}
+            onChange={onSearchChange}
             placeholder={t("admin.searchUsers")}
-            className="h-7 text-xs rounded-none"
+            fill
           />
         </div>
         {users.map((user) => {
           const authLabel =
-            user.isOidc && user.passwordHash
+            user.isExternal && user.passwordHash
               ? t("admin.authTypeDual")
-              : user.isOidc
-                ? t("admin.authTypeOidc")
+              : user.isExternal
+                ? t("admin.authTypeExternal")
                 : t("admin.authTypeLocal");
           return (
             <div
@@ -209,7 +213,7 @@ export function AdminUsersSection({
                 >
                   <Pencil className="size-3" />
                 </Button>
-                {user.isOidc && user.passwordHash ? (
+                {user.isExternal && user.passwordHash ? (
                   <Button
                     variant="ghost"
                     size="icon"
@@ -235,7 +239,7 @@ export function AdminUsersSection({
                       setLinkAccountTarget({
                         id: user.id,
                         username: user.username,
-                        isOidc: user.isOidc,
+                        isExternal: user.isExternal,
                       });
                       setLinkAccountOpen(true);
                     }}
@@ -249,6 +253,13 @@ export function AdminUsersSection({
                   className="size-6 text-muted-foreground hover:text-destructive"
                   disabled={user.isAdmin}
                   onClick={async () => {
+                    const ok = await confirm({
+                      title: t("admin.deleteUserConfirm", {
+                        username: user.username,
+                      }),
+                      description: t("manage.cannotBeUndone"),
+                    });
+                    if (!ok) return;
                     try {
                       await deleteUser(user.username);
                       setUsers((prev) => prev.filter((u) => u.id !== user.id));
@@ -321,6 +332,7 @@ export function AdminSessionsSection({
   loadSessions,
 }: SessionsSectionProps) {
   const { t } = useTranslation();
+  const confirm = useConfirm();
 
   return (
     <AccordionSection
@@ -375,6 +387,13 @@ export function AdminSessionsSection({
                 size="sm"
                 className="text-[10px] text-muted-foreground hover:text-destructive h-6 px-1.5"
                 onClick={async () => {
+                  const ok = await confirm({
+                    title: t("admin.revokeAllSessionsConfirm", {
+                      username: session.username ?? "",
+                    }),
+                    confirmLabel: t("admin.revokeAll"),
+                  });
+                  if (!ok) return;
                   try {
                     await revokeAllUserSessions(session.userId);
                     setSessions((prev) =>
@@ -393,6 +412,11 @@ export function AdminSessionsSection({
                 size="icon"
                 className="size-6 text-muted-foreground hover:text-destructive"
                 onClick={async () => {
+                  const ok = await confirm({
+                    title: t("admin.revokeSessionConfirm"),
+                    confirmLabel: t("admin.revokeSession"),
+                  });
+                  if (!ok) return;
                   try {
                     await revokeSession(session.id);
                     setSessions((prev) =>
@@ -447,6 +471,7 @@ export function AdminRolesSection({
   createRoleLoading,
 }: RolesSectionProps) {
   const { t } = useTranslation();
+  const confirm = useConfirm();
   const [catalog, setCatalog] = useState<PermissionCatalogEntry[]>([]);
   const [editingRoleId, setEditingRoleId] = useState<number | null>(null);
   const [editingPermissions, setEditingPermissions] = useState<Set<string>>(
@@ -544,7 +569,7 @@ export function AdminRolesSection({
                 <span className="text-accent-brand">*</span>
               </label>
               <Input
-                placeholder="e.g., developer"
+                placeholder="developer"
                 value={newRoleName}
                 onChange={(e) => setNewRoleName(e.target.value)}
                 className="text-xs"
@@ -556,7 +581,7 @@ export function AdminRolesSection({
                 <span className="text-accent-brand">*</span>
               </label>
               <Input
-                placeholder="e.g., Developer"
+                placeholder="Developer"
                 value={newRoleDisplayName}
                 onChange={(e) => setNewRoleDisplayName(e.target.value)}
                 className="text-xs"
@@ -613,7 +638,7 @@ export function AdminRolesSection({
                 <div className="flex flex-col gap-0.5 min-w-0">
                   <div className="flex items-center gap-1.5 flex-wrap">
                     <span className="text-xs font-semibold truncate">
-                      {role.displayName}
+                      {roleLabel(t, role.displayName)}
                     </span>
                     {role.isSystem ? (
                       <span className="text-[9px] font-semibold px-1 py-px border border-border text-muted-foreground">
@@ -652,6 +677,12 @@ export function AdminRolesSection({
                       size="icon"
                       className="size-6 text-muted-foreground hover:text-destructive"
                       onClick={async () => {
+                        const ok = await confirm({
+                          title: t("admin.deleteRoleConfirm", {
+                            name: role.displayName,
+                          }),
+                        });
+                        if (!ok) return;
                         await deleteRole(role.id);
                         setRoles((prev) =>
                           prev.filter((r) => r.id !== role.id),
diff --git a/src/ui/sidebar/AdminPluginDeveloperMode.tsx b/src/ui/sidebar/AdminPluginDeveloperMode.tsx
new file mode 100644
index 000000000..da2499f84
--- /dev/null
+++ b/src/ui/sidebar/AdminPluginDeveloperMode.tsx
@@ -0,0 +1,77 @@
+import { useEffect, useState } from "react";
+import { useTranslation } from "react-i18next";
+import { toast } from "sonner";
+import { SettingRow } from "@/components/section-card";
+import { useConfirm } from "@/components/surface/surface-scope";
+import { getDeveloperMode, setDeveloperMode } from "@/api/plugins-api";
+import { AdminToggle } from "./AdminSettingsShared";
+
+/** Lets admins install plugins from a file. Asks before turning it on. */
+export function AdminPluginDeveloperMode() {
+  const { t } = useTranslation();
+  const confirm = useConfirm();
+  const [enabled, setEnabled] = useState(false);
+  const [signedOnly, setSignedOnly] = useState(false);
+  const [loaded, setLoaded] = useState(false);
+  const [saving, setSaving] = useState(false);
+
+  useEffect(() => {
+    let cancelled = false;
+    getDeveloperMode()
+      .then((state) => {
+        if (cancelled) return;
+        setEnabled(state.enabled);
+        setSignedOnly(state.signedOnly);
+        setLoaded(true);
+      })
+      .catch(() => {});
+    return () => {
+      cancelled = true;
+    };
+  }, []);
+
+  const toggle = async () => {
+    const next = !enabled;
+    if (next) {
+      const ok = await confirm({
+        title: t("plugins.manager.developer.enableTitle"),
+        description: t("plugins.manager.developer.enableBody"),
+        confirmLabel: t("plugins.manager.developer.enable"),
+      });
+      if (!ok) return;
+    }
+    setSaving(true);
+    try {
+      await setDeveloperMode(next);
+      setEnabled(next);
+    } catch (error) {
+      toast.error(
+        t("plugins.manager.errors.developerMode", {
+          error: error instanceof Error ? error.message : String(error),
+        }),
+      );
+    } finally {
+      setSaving(false);
+    }
+  };
+
+  return (
+    <>
+      <SettingRow
+        label={t("plugins.manager.developer.title")}
+        description={t("plugins.manager.developer.hint")}
+      >
+        <AdminToggle
+          on={enabled}
+          onToggle={() => void toggle()}
+          disabled={!loaded || saving}
+        />
+      </SettingRow>
+      {enabled && signedOnly && (
+        <p className="text-[10px] text-destructive">
+          {t("plugins.manager.developer.signedOnly")}
+        </p>
+      )}
+    </>
+  );
+}
diff --git a/src/ui/sidebar/AdminSettingsPanel.tsx b/src/ui/sidebar/AdminSettingsPanel.tsx
index a816765ba..535126c2d 100644
--- a/src/ui/sidebar/AdminSettingsPanel.tsx
+++ b/src/ui/sidebar/AdminSettingsPanel.tsx
@@ -1,3 +1,4 @@
+import { useConfirm } from "@/components/surface/surface-scope";
 import { useState, useEffect } from "react";
 import { useTranslation } from "react-i18next";
 import { useBranding } from "@/contexts/BrandingContext";
@@ -102,11 +103,15 @@ const USERS_PAGE_SIZE = 25;
 export function AdminSettingsPanel({
   onEditingChange,
   onOpenHostTab,
+  section,
 }: {
   onEditingChange?: (editing: boolean) => void;
   onOpenHostTab?: (host: Host) => void;
+  /** Shows just this section, flat, as a Settings page. */
+  section?: AdminSection;
 } = {}) {
   const { t } = useTranslation();
+  const confirm = useConfirm();
   const [openSections, setOpenSections] = useState<
     Set<AdminSection | FeatureSectionId>
   >(() => new Set(["general"]));
@@ -151,7 +156,7 @@ export function AdminSettingsPanel({
   const [linkAccountTarget, setLinkAccountTarget] = useState<{
     id: string;
     username: string;
-    isOidc: boolean;
+    isExternal: boolean;
   } | null>(null);
 
   // Unlink account dialog
@@ -242,7 +247,7 @@ export function AdminSettingsPanel({
             id: user.userId,
             username: user.username,
             isAdmin: user.is_admin,
-            isOidc: user.is_external ?? user.is_oidc,
+            isExternal: user.is_external ?? false,
             passwordHash: user.password_hash,
             dataUnlocked: user.data_unlocked,
             secondFactorEnabled: user.second_factor_enabled,
@@ -567,6 +572,13 @@ export function AdminSettingsPanel({
 
   async function handleDeleteEditUser() {
     if (!editUserTarget) return;
+    const ok = await confirm({
+      title: t("admin.deleteUserConfirm", {
+        username: editUserTarget.username,
+      }),
+      description: t("manage.cannotBeUndone"),
+    });
+    if (!ok) return;
     setEditUserLoading(true);
     try {
       await deleteUser(editUserTarget.username);
@@ -734,6 +746,9 @@ export function AdminSettingsPanel({
     }
   }
 
+  const isOpen = (id: AdminSection | FeatureSectionId) =>
+    section ? section === id : openSections.has(id);
+
   if (manageUser) {
     return (
       <AdminUserManagePanel
@@ -758,9 +773,15 @@ export function AdminSettingsPanel({
   }
 
   return (
-    <div className="mx-auto flex w-full max-w-5xl flex-col gap-2 p-3 flex-1 min-h-0 overflow-y-auto">
+    <div
+      className={
+        section
+          ? "flex w-full flex-col gap-2"
+          : "mx-auto flex w-full max-w-5xl flex-col gap-2 p-3 flex-1 min-h-0 overflow-y-auto"
+      }
+    >
       <AdminGeneralSettingsSection
-        open={openSections.has("general")}
+        open={isOpen("general")}
         onToggle={() => toggle("general")}
         notificationPrivateEndpoints={notificationPrivateEndpoints}
         onSaveNotificationPrivateEndpoints={
@@ -790,7 +811,7 @@ export function AdminSettingsPanel({
       />
 
       <AdminUsersSection
-        open={openSections.has("users")}
+        open={isOpen("users")}
         onToggle={() => toggle("users")}
         users={users}
         setUsers={setUsers}
@@ -812,7 +833,7 @@ export function AdminSettingsPanel({
       />
 
       <AdminSessionsSection
-        open={openSections.has("sessions")}
+        open={isOpen("sessions")}
         onToggle={() => toggle("sessions")}
         sessions={sessions}
         setSessions={setSessions}
@@ -820,7 +841,7 @@ export function AdminSettingsPanel({
       />
 
       <AdminRolesSection
-        open={openSections.has("roles")}
+        open={isOpen("roles")}
         onToggle={() => toggle("roles")}
         roles={roles}
         setRoles={setRoles}
@@ -837,12 +858,12 @@ export function AdminSettingsPanel({
       />
 
       <AdminHostDefaultsSection
-        open={openSections.has("host-defaults")}
+        open={isOpen("host-defaults")}
         onToggle={() => toggle("host-defaults")}
       />
 
       <AdminBrandingSection
-        open={openSections.has("branding")}
+        open={isOpen("branding")}
         onToggle={() => toggle("branding")}
         settings={brandingSettings}
         setSettings={setBrandingSettings}
@@ -852,7 +873,7 @@ export function AdminSettingsPanel({
       />
 
       <AdminDatabaseSection
-        open={openSections.has("database")}
+        open={isOpen("database")}
         onToggle={() => toggle("database")}
         importFile={importFile}
         setImportFile={setImportFile}
@@ -863,7 +884,7 @@ export function AdminSettingsPanel({
       />
 
       <AdminSSLSection
-        open={openSections.has("ssl")}
+        open={isOpen("ssl")}
         onToggle={() => toggle("ssl")}
         status={tlsStatus}
         manualCertDraft={manualCertDraft}
@@ -875,7 +896,7 @@ export function AdminSettingsPanel({
       />
 
       <AdminApiKeysSection
-        open={openSections.has("api-keys")}
+        open={isOpen("api-keys")}
         onToggle={() => toggle("api-keys")}
         apiKeys={apiKeys}
         setApiKeys={setApiKeys}
@@ -896,7 +917,7 @@ export function AdminSettingsPanel({
       />
 
       <AdminAuditLogSection
-        open={openSections.has("audit-log")}
+        open={isOpen("audit-log")}
         onToggle={() => toggle("audit-log")}
         users={users}
       />
@@ -906,7 +927,7 @@ export function AdminSettingsPanel({
           key={plugin.id}
           plugin={plugin}
           scope="admin"
-          open={openSections.has(featureSectionId(plugin.id))}
+          open={isOpen(featureSectionId(plugin.id))}
           onToggle={() => toggle(featureSectionId(plugin.id))}
         />
       ))}
@@ -954,7 +975,7 @@ export function AdminSettingsPanel({
           setUsers((prev) =>
             prev.map((u) =>
               u.id === userId
-                ? { ...u, isOidc: false, passwordHash: undefined }
+                ? { ...u, isExternal: false, passwordHash: undefined }
                 : u,
             ),
           )
diff --git a/src/ui/sidebar/AdminSettingsSections.tsx b/src/ui/sidebar/AdminSettingsSections.tsx
index f51bc7583..c4781c36d 100644
--- a/src/ui/sidebar/AdminSettingsSections.tsx
+++ b/src/ui/sidebar/AdminSettingsSections.tsx
@@ -6,7 +6,9 @@ import { SettingRow } from "@/components/section-card";
 import { Database, Lock, RefreshCw, Server, Settings } from "lucide-react";
 import { AccordionSection, AdminToggle } from "./AdminSettingsShared";
 import { AdminHostTags } from "./AdminHostTags";
+import { AdminPluginDeveloperMode } from "./AdminPluginDeveloperMode";
 import type { TlsStatus } from "@/api/tls-api";
+import { DocsLink } from "@/components/docs-link";
 
 type GeneralSettingsSectionProps = {
   open: boolean;
@@ -116,8 +118,8 @@ export function AdminGeneralSettingsSection({
           </p>
         )}
         <SettingRow
-          label={t("admin.oidcAutoProvision")}
-          description={t("admin.oidcAutoProvisionDesc")}
+          label={t("admin.externalAutoProvision")}
+          description={t("admin.externalAutoProvisionDesc")}
         >
           <AdminToggle
             on={externalAutoProvision}
@@ -142,6 +144,7 @@ export function AdminGeneralSettingsSection({
             onToggle={handleTogglePasswordReset}
           />
         </SettingRow>
+        <AdminPluginDeveloperMode />
         <div className="flex flex-col gap-2 pt-3 mt-2">
           <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
             {t("admin.sessionTimeout")}
@@ -372,7 +375,7 @@ function certState(
 const CERT_STATUS_STYLES: Record<ReturnType<typeof certState>, string> = {
   none: "text-muted-foreground",
   valid: "text-green-500",
-  expiring: "text-yellow-500",
+  expiring: "text-warning",
   expired: "text-destructive",
 };
 
@@ -421,14 +424,7 @@ export function AdminSSLSection({
       <div className="flex flex-col gap-3 pt-3">
         <span className="text-[10px] text-muted-foreground">
           {t("admin.sslDescription")}{" "}
-          <a
-            href="https://docs.termix.site/features/networking/ssl"
-            target="_blank"
-            rel="noreferrer"
-            className="text-accent-brand hover:underline"
-          >
-            {t("admin.sslDocsLink")}
-          </a>
+          <DocsLink core="https">{t("admin.sslDocsLink")}</DocsLink>
         </span>
 
         <div className="flex flex-col gap-0.5 p-2 border border-border bg-background/50">
@@ -470,7 +466,7 @@ export function AdminSSLSection({
         </div>
 
         {cert && !cert.selfSigned && !status?.renewal && (
-          <div className="p-2 border border-yellow-500/40 bg-yellow-500/10 text-[10px] text-yellow-600 dark:text-yellow-400">
+          <div className="p-2 border border-warning/40 bg-warning/10 text-[10px] text-warning">
             {t("admin.sslNotRenewed", { date: expiry })}
           </div>
         )}
diff --git a/src/ui/sidebar/AdminSettingsShared.tsx b/src/ui/sidebar/AdminSettingsShared.tsx
index d8516ed59..5db3ab0c7 100644
--- a/src/ui/sidebar/AdminSettingsShared.tsx
+++ b/src/ui/sidebar/AdminSettingsShared.tsx
@@ -1,5 +1,6 @@
 import type React from "react";
 import { ChevronDown } from "lucide-react";
+import { useSettingsEmbedded } from "@/settings/settings-embed";
 
 export function AdminToggle({
   on,
@@ -36,6 +37,15 @@ export function AccordionSection({
   onToggle: () => void;
   children: React.ReactNode;
 }) {
+  const embedded = useSettingsEmbedded();
+  if (embedded) {
+    if (!open) return null;
+    return (
+      <div className="flex flex-col border border-border bg-card px-3 pb-3">
+        {children}
+      </div>
+    );
+  }
   return (
     <div className="border border-border bg-card overflow-hidden shrink-0">
       <button
diff --git a/src/ui/sidebar/AdminUserDialogs.tsx b/src/ui/sidebar/AdminUserDialogs.tsx
index 18c0e309e..5fa8f38a3 100644
--- a/src/ui/sidebar/AdminUserDialogs.tsx
+++ b/src/ui/sidebar/AdminUserDialogs.tsx
@@ -1,3 +1,4 @@
+import { InlineView } from "@/components/surface/surface-scope";
 import { useEffect, useState, type Dispatch, type SetStateAction } from "react";
 import { useTranslation } from "react-i18next";
 import {
@@ -9,17 +10,11 @@ import {
 import type { Role, UserRole } from "@/main-axios";
 import { Button } from "@/components/button";
 import { Input } from "@/components/input";
-import {
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogHeader,
-  DialogTitle,
-} from "@/components/dialog";
 import { AlertCircle, Eye, EyeOff, Trash2 } from "lucide-react";
 import { toast } from "sonner";
 import { AdminToggle } from "./AdminSettingsShared";
 import type { AdminUser } from "./AdminManagementSections";
+import { roleLabel } from "@/lib/role-label";
 
 type ApiErrorLike = {
   response?: {
@@ -63,83 +58,80 @@ export function AdminCreateUserDialog({
   const { t } = useTranslation();
 
   return (
-    <Dialog open={open} onOpenChange={onOpenChange}>
-      <DialogContent className="w-[calc(100vw-2rem)] sm:max-w-lg">
-        <DialogHeader>
-          <DialogTitle className="text-lg font-bold">
-            {t("admin.createUserTitle")}
-          </DialogTitle>
-          <DialogDescription className="text-xs text-muted-foreground">
-            {t("admin.createUserDesc")}
-          </DialogDescription>
-        </DialogHeader>
-        <div className="flex flex-col gap-4 mt-1">
-          <div className="flex flex-col gap-1.5">
-            <label className="text-xs font-semibold uppercase tracking-widest text-muted-foreground">
-              {t("admin.createUserUsername")}{" "}
-              <span className="text-accent-brand">*</span>
-            </label>
+    <InlineView
+      open={open}
+      onOpenChange={onOpenChange}
+      title={t("admin.createUserTitle")}
+    >
+      <p className="text-xs text-muted-foreground">
+        {t("admin.createUserDesc")}
+      </p>
+      <div className="flex flex-col gap-4 mt-1">
+        <div className="flex flex-col gap-1.5">
+          <label className="text-xs font-semibold uppercase tracking-widest text-muted-foreground">
+            {t("admin.createUserUsername")}{" "}
+            <span className="text-accent-brand">*</span>
+          </label>
+          <Input
+            placeholder={t("admin.createUserEnterUsername")}
+            value={newUsername}
+            onChange={(e) => setNewUsername(e.target.value)}
+            onKeyDown={(e) => e.key === "Enter" && handleCreateUser()}
+          />
+        </div>
+        <div className="flex flex-col gap-1.5">
+          <label className="text-xs font-semibold uppercase tracking-widest text-muted-foreground">
+            {t("admin.createUserPassword")}{" "}
+            <span className="text-accent-brand">*</span>
+          </label>
+          <div className="relative">
             <Input
-              placeholder={t("admin.createUserEnterUsername")}
-              value={newUsername}
-              onChange={(e) => setNewUsername(e.target.value)}
+              type={showNewPassword ? "text" : "password"}
+              placeholder={t("placeholders.enterPassword")}
+              value={newPassword}
+              onChange={(e) => setNewPassword(e.target.value)}
               onKeyDown={(e) => e.key === "Enter" && handleCreateUser()}
+              className="pr-9"
             />
+            <button
+              onClick={() => setShowNewPassword((o) => !o)}
+              className="absolute right-2.5 top-1/2 -translate-y-1/2 text-muted-foreground hover:text-foreground"
+            >
+              {showNewPassword ? (
+                <EyeOff className="size-4" />
+              ) : (
+                <Eye className="size-4" />
+              )}
+            </button>
           </div>
-          <div className="flex flex-col gap-1.5">
-            <label className="text-xs font-semibold uppercase tracking-widest text-muted-foreground">
-              {t("admin.createUserPassword")}{" "}
-              <span className="text-accent-brand">*</span>
-            </label>
-            <div className="relative">
-              <Input
-                type={showNewPassword ? "text" : "password"}
-                placeholder={t("placeholders.enterPassword")}
-                value={newPassword}
-                onChange={(e) => setNewPassword(e.target.value)}
-                onKeyDown={(e) => e.key === "Enter" && handleCreateUser()}
-                className="pr-9"
-              />
-              <button
-                onClick={() => setShowNewPassword((o) => !o)}
-                className="absolute right-2.5 top-1/2 -translate-y-1/2 text-muted-foreground hover:text-foreground"
-              >
-                {showNewPassword ? (
-                  <EyeOff className="size-4" />
-                ) : (
-                  <Eye className="size-4" />
-                )}
-              </button>
-            </div>
-            <span className="text-xs text-muted-foreground">
-              {t("admin.createUserPasswordHint")}
-            </span>
-          </div>
+          <span className="text-xs text-muted-foreground">
+            {t("admin.createUserPasswordHint")}
+          </span>
         </div>
-        <div className="flex justify-end gap-2 mt-2">
-          <Button
-            variant="ghost"
-            onClick={() => {
-              onOpenChange(false);
-              setNewUsername("");
-              setNewPassword("");
-            }}
-          >
-            {t("common.cancel")}
-          </Button>
-          <Button
-            variant="outline"
-            className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-            onClick={handleCreateUser}
-            disabled={createUserLoading}
-          >
-            {createUserLoading
-              ? t("admin.creating")
-              : t("admin.createUserSubmit")}
-          </Button>
-        </div>
-      </DialogContent>
-    </Dialog>
+      </div>
+      <div className="flex justify-end gap-2 mt-2">
+        <Button
+          variant="ghost"
+          onClick={() => {
+            onOpenChange(false);
+            setNewUsername("");
+            setNewPassword("");
+          }}
+        >
+          {t("common.cancel")}
+        </Button>
+        <Button
+          variant="outline"
+          className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
+          onClick={handleCreateUser}
+          disabled={createUserLoading}
+        >
+          {createUserLoading
+            ? t("admin.creating")
+            : t("admin.createUserSubmit")}
+        </Button>
+      </div>
+    </InlineView>
   );
 }
 
@@ -173,222 +165,210 @@ export function AdminEditUserDialog({
   const { t } = useTranslation();
 
   return (
-    <Dialog open={open} onOpenChange={onOpenChange}>
-      <DialogContent className="w-[calc(100vw-2rem)] sm:max-w-lg">
-        <DialogHeader>
-          <DialogTitle className="text-lg font-bold">
-            {t("admin.editUserTitle", { username: editUserTarget?.username })}
-          </DialogTitle>
-          <DialogDescription className="text-xs text-muted-foreground">
-            {t("admin.editUserDesc")}
-          </DialogDescription>
-        </DialogHeader>
-        {editUserTarget && (
-          <div className="flex flex-col gap-0 mt-1 divide-y divide-border">
-            <div className="grid grid-cols-1 md:grid-cols-2 gap-x-6 gap-y-2 py-3">
-              <div className="flex flex-col gap-0.5">
-                <span className="text-xs text-muted-foreground uppercase tracking-widest font-semibold">
-                  {t("admin.editUserUsername")}
-                </span>
-                <span className="text-sm font-semibold">
-                  {editUserTarget.username}
-                </span>
-              </div>
-              <div className="flex flex-col gap-0.5">
-                <span className="text-xs text-muted-foreground uppercase tracking-widest font-semibold">
-                  {t("admin.editUserAuthType")}
-                </span>
-                <span className="text-sm font-semibold">
-                  {editUserTarget.isOidc && editUserTarget.passwordHash
-                    ? t("admin.authTypeDual")
-                    : editUserTarget.isOidc
-                      ? t("admin.authTypeOidc")
-                      : t("admin.authTypeLocal")}
-                </span>
-              </div>
-              <div className="flex flex-col gap-0.5">
-                <span className="text-xs text-muted-foreground uppercase tracking-widest font-semibold">
-                  {t("admin.editUserAdminStatus")}
-                </span>
-                <span className="text-sm font-semibold">
-                  {editUserTarget.isAdmin
-                    ? t("admin.adminStatusAdministrator")
-                    : t("admin.adminStatusRegularUser")}
-                </span>
-              </div>
-              <div className="flex flex-col gap-0.5">
-                <span className="text-xs text-muted-foreground uppercase tracking-widest font-semibold">
-                  {t("admin.editUserUserId")}
-                </span>
-                <span className="text-xs font-mono text-muted-foreground truncate">
-                  {editUserTarget.id}
-                </span>
-              </div>
-            </div>
-            <div className="flex items-center justify-between py-3">
-              <div className="flex flex-col gap-0.5">
-                <span className="text-sm font-medium">
-                  {t("admin.userAdminAccess")}
-                </span>
-                <span className="text-xs text-muted-foreground">
-                  {t("admin.userAdminAccessDesc")}
-                </span>
-              </div>
-              <AdminToggle
-                on={editUserTarget.isAdmin}
-                onToggle={() => handleToggleAdmin(editUserTarget)}
-              />
-            </div>
-            <div className="flex flex-col gap-2 py-3">
-              <span className="text-sm font-medium">
-                {t("admin.userRoles")}
+    <InlineView
+      open={open}
+      onOpenChange={onOpenChange}
+      title={t("admin.editUserTitle", { username: editUserTarget?.username })}
+    >
+      <p className="text-xs text-muted-foreground">{t("admin.editUserDesc")}</p>
+      {editUserTarget && (
+        <div className="flex flex-col gap-0 mt-1 divide-y divide-border">
+          <div className="grid grid-cols-1 md:grid-cols-2 gap-x-6 gap-y-2 py-3">
+            <div className="flex flex-col gap-0.5">
+              <span className="text-xs text-muted-foreground uppercase tracking-widest font-semibold">
+                {t("admin.editUserUsername")}
+              </span>
+              <span className="text-sm font-semibold">
+                {editUserTarget.username}
               </span>
-              {editUserRolesLoading ? (
-                <span className="text-xs text-muted-foreground">
-                  {t("common.loading")}
-                </span>
-              ) : (
-                <>
-                  {editUserRoles.length > 0 && (
-                    <div className="flex flex-wrap gap-1.5">
-                      {editUserRoles.map((ur) => {
-                        const roleInfo = roles.find((r) => r.id === ur.roleId);
-                        const isSystem = roleInfo?.isSystem ?? false;
-                        return (
-                          <span
-                            key={ur.roleId}
-                            className="inline-flex items-center gap-1 text-[10px] font-semibold px-1.5 py-0.5 border border-accent-brand/40 bg-accent-brand/10 text-accent-brand"
-                          >
-                            {ur.roleDisplayName}
-                            {!isSystem && (
-                              <button
-                                onClick={async () => {
-                                  try {
-                                    await removeRoleFromUser(
-                                      editUserTarget.id,
-                                      ur.roleId,
-                                    );
-                                    setEditUserRoles((prev) =>
-                                      prev.filter(
-                                        (r) => r.roleId !== ur.roleId,
-                                      ),
-                                    );
-                                  } catch {
-                                    toast.error(t("admin.removeRoleFailed"));
-                                  }
-                                }}
-                                className="hover:text-destructive ml-0.5"
-                              >
-                                ×
-                              </button>
-                            )}
-                          </span>
-                        );
-                      })}
-                    </div>
-                  )}
-                  {roles.filter(
-                    (r) =>
-                      !r.isSystem &&
-                      !editUserRoles.some((ur) => ur.roleId === r.id),
-                  ).length > 0 && (
-                    <div className="flex flex-col gap-1">
-                      <span className="text-[10px] text-muted-foreground uppercase tracking-widest font-semibold">
-                        {t("admin.addRole")}
-                      </span>
-                      <div className="flex flex-wrap gap-1.5">
-                        {roles
-                          .filter(
-                            (r) =>
-                              !r.isSystem &&
-                              !editUserRoles.some((ur) => ur.roleId === r.id),
-                          )
-                          .map((r) => (
-                            <button
-                              key={r.id}
-                              onClick={async () => {
-                                try {
-                                  await assignRoleToUser(
-                                    editUserTarget.id,
-                                    r.id,
-                                  );
-                                  setEditUserRoles((prev) => [
-                                    ...prev,
-                                    {
-                                      userId: editUserTarget.id,
-                                      roleId: r.id,
-                                      roleName: r.name,
-                                      roleDisplayName: r.displayName,
-                                      grantedBy: "",
-                                      grantedByUsername: "",
-                                      grantedAt: new Date().toISOString(),
-                                    },
-                                  ]);
-                                } catch {
-                                  toast.error(t("admin.assignRoleFailed"));
-                                }
-                              }}
-                              className="inline-flex items-center gap-1 text-[10px] font-semibold px-1.5 py-0.5 border border-border text-muted-foreground hover:border-accent-brand/40 hover:text-accent-brand transition-colors"
-                            >
-                              + {r.displayName}
-                            </button>
-                          ))}
-                      </div>
-                    </div>
-                  )}
-                  {editUserRoles.length === 0 &&
-                    roles.filter((r) => !r.isSystem).length === 0 && (
-                      <span className="text-xs text-muted-foreground">
-                        {t("admin.noCustomRoles")}
-                      </span>
-                    )}
-                </>
-              )}
             </div>
-            <div className="flex items-center justify-between py-3">
-              <div className="flex flex-col gap-0.5">
-                <span className="text-sm font-medium">
-                  {t("admin.revokeAllUserSessions")}
-                </span>
-                <span className="text-xs text-muted-foreground">
-                  {t("admin.revokeAllUserSessionsDesc")}
-                </span>
-              </div>
-              <Button
-                variant="outline"
-                size="sm"
-                className="border-destructive/40 text-destructive hover:bg-destructive/10 hover:text-destructive shrink-0 ml-8"
-                onClick={() => handleRevokeUserSessions(editUserTarget.id)}
-                disabled={editUserLoading}
-              >
-                {t("admin.revoke")}
-              </Button>
+            <div className="flex flex-col gap-0.5">
+              <span className="text-xs text-muted-foreground uppercase tracking-widest font-semibold">
+                {t("admin.editUserAuthType")}
+              </span>
+              <span className="text-sm font-semibold">
+                {editUserTarget.isExternal && editUserTarget.passwordHash
+                  ? t("admin.authTypeDual")
+                  : editUserTarget.isExternal
+                    ? t("admin.authTypeExternal")
+                    : t("admin.authTypeLocal")}
+              </span>
             </div>
-            <div className="flex flex-col gap-2 py-3">
-              <div className="flex items-start gap-2.5 border border-destructive/30 bg-destructive/5 px-3 py-2.5">
-                <AlertCircle className="size-4 text-destructive shrink-0 mt-0.5" />
-                <span className="text-xs text-destructive">
-                  {t("admin.deleteUserWarning")}
-                </span>
-              </div>
-              <Button
-                variant="outline"
-                className="w-full border-destructive/40 text-destructive hover:bg-destructive/10 hover:text-destructive"
-                disabled={editUserTarget.isAdmin || editUserLoading}
-                onClick={handleDeleteEditUser}
-              >
-                <Trash2 className="size-3.5" />
-                {editUserLoading
-                  ? t("admin.deleting")
-                  : t("admin.deleteUser", {
-                      username: editUserTarget.username,
-                    })}
-              </Button>
+            <div className="flex flex-col gap-0.5">
+              <span className="text-xs text-muted-foreground uppercase tracking-widest font-semibold">
+                {t("admin.editUserAdminStatus")}
+              </span>
+              <span className="text-sm font-semibold">
+                {editUserTarget.isAdmin
+                  ? t("admin.adminStatusAdministrator")
+                  : t("admin.adminStatusRegularUser")}
+              </span>
+            </div>
+            <div className="flex flex-col gap-0.5">
+              <span className="text-xs text-muted-foreground uppercase tracking-widest font-semibold">
+                {t("admin.editUserUserId")}
+              </span>
+              <span className="text-xs font-mono text-muted-foreground truncate">
+                {editUserTarget.id}
+              </span>
             </div>
           </div>
-        )}
-      </DialogContent>
-    </Dialog>
+          <div className="flex items-center justify-between py-3">
+            <div className="flex flex-col gap-0.5">
+              <span className="text-sm font-medium">
+                {t("admin.userAdminAccess")}
+              </span>
+              <span className="text-xs text-muted-foreground">
+                {t("admin.userAdminAccessDesc")}
+              </span>
+            </div>
+            <AdminToggle
+              on={editUserTarget.isAdmin}
+              onToggle={() => handleToggleAdmin(editUserTarget)}
+            />
+          </div>
+          <div className="flex flex-col gap-2 py-3">
+            <span className="text-sm font-medium">{t("admin.userRoles")}</span>
+            {editUserRolesLoading ? (
+              <span className="text-xs text-muted-foreground">
+                {t("common.loading")}
+              </span>
+            ) : (
+              <>
+                {editUserRoles.length > 0 && (
+                  <div className="flex flex-wrap gap-1.5">
+                    {editUserRoles.map((ur) => {
+                      const roleInfo = roles.find((r) => r.id === ur.roleId);
+                      const isSystem = roleInfo?.isSystem ?? false;
+                      return (
+                        <span
+                          key={ur.roleId}
+                          className="inline-flex items-center gap-1 text-[10px] font-semibold px-1.5 py-0.5 border border-accent-brand/40 bg-accent-brand/10 text-accent-brand"
+                        >
+                          {roleLabel(t, ur.roleDisplayName)}
+                          {!isSystem && (
+                            <button
+                              onClick={async () => {
+                                try {
+                                  await removeRoleFromUser(
+                                    editUserTarget.id,
+                                    ur.roleId,
+                                  );
+                                  setEditUserRoles((prev) =>
+                                    prev.filter((r) => r.roleId !== ur.roleId),
+                                  );
+                                } catch {
+                                  toast.error(t("admin.removeRoleFailed"));
+                                }
+                              }}
+                              className="hover:text-destructive ml-0.5"
+                            >
+                              ×
+                            </button>
+                          )}
+                        </span>
+                      );
+                    })}
+                  </div>
+                )}
+                {roles.filter(
+                  (r) =>
+                    !r.isSystem &&
+                    !editUserRoles.some((ur) => ur.roleId === r.id),
+                ).length > 0 && (
+                  <div className="flex flex-col gap-1">
+                    <span className="text-[10px] text-muted-foreground uppercase tracking-widest font-semibold">
+                      {t("admin.addRole")}
+                    </span>
+                    <div className="flex flex-wrap gap-1.5">
+                      {roles
+                        .filter(
+                          (r) =>
+                            !r.isSystem &&
+                            !editUserRoles.some((ur) => ur.roleId === r.id),
+                        )
+                        .map((r) => (
+                          <button
+                            key={r.id}
+                            onClick={async () => {
+                              try {
+                                await assignRoleToUser(editUserTarget.id, r.id);
+                                setEditUserRoles((prev) => [
+                                  ...prev,
+                                  {
+                                    userId: editUserTarget.id,
+                                    roleId: r.id,
+                                    roleName: r.name,
+                                    roleDisplayName: r.displayName,
+                                    grantedBy: "",
+                                    grantedByUsername: "",
+                                    grantedAt: new Date().toISOString(),
+                                  },
+                                ]);
+                              } catch {
+                                toast.error(t("admin.assignRoleFailed"));
+                              }
+                            }}
+                            className="inline-flex items-center gap-1 text-[10px] font-semibold px-1.5 py-0.5 border border-border text-muted-foreground hover:border-accent-brand/40 hover:text-accent-brand transition-colors"
+                          >
+                            + {r.displayName}
+                          </button>
+                        ))}
+                    </div>
+                  </div>
+                )}
+                {editUserRoles.length === 0 &&
+                  roles.filter((r) => !r.isSystem).length === 0 && (
+                    <span className="text-xs text-muted-foreground">
+                      {t("admin.noCustomRoles")}
+                    </span>
+                  )}
+              </>
+            )}
+          </div>
+          <div className="flex items-center justify-between py-3">
+            <div className="flex flex-col gap-0.5">
+              <span className="text-sm font-medium">
+                {t("admin.revokeAllUserSessions")}
+              </span>
+              <span className="text-xs text-muted-foreground">
+                {t("admin.revokeAllUserSessionsDesc")}
+              </span>
+            </div>
+            <Button
+              variant="outline"
+              size="sm"
+              className="border-destructive/40 text-destructive hover:bg-destructive/10 hover:text-destructive shrink-0 ml-8"
+              onClick={() => handleRevokeUserSessions(editUserTarget.id)}
+              disabled={editUserLoading}
+            >
+              {t("admin.revoke")}
+            </Button>
+          </div>
+          <div className="flex flex-col gap-2 py-3">
+            <div className="flex items-start gap-2.5 border border-destructive/30 bg-destructive/5 px-3 py-2.5">
+              <AlertCircle className="size-4 text-destructive shrink-0 mt-0.5" />
+              <span className="text-xs text-destructive">
+                {t("admin.deleteUserWarning")}
+              </span>
+            </div>
+            <Button
+              variant="outline"
+              className="w-full border-destructive/40 text-destructive hover:bg-destructive/10 hover:text-destructive"
+              disabled={editUserTarget.isAdmin || editUserLoading}
+              onClick={handleDeleteEditUser}
+            >
+              <Trash2 className="size-3.5" />
+              {editUserLoading
+                ? t("admin.deleting")
+                : t("admin.deleteUser", {
+                    username: editUserTarget.username,
+                  })}
+            </Button>
+          </div>
+        </div>
+      )}
+    </InlineView>
   );
 }
 
@@ -424,52 +404,53 @@ export function AdminUnlinkAccountDialog({
   };
 
   return (
-    <Dialog open={open} onOpenChange={onOpenChange}>
-      <DialogContent className="w-[calc(100vw-2rem)] sm:max-w-lg">
-        <DialogHeader>
-          <DialogTitle className="text-lg font-bold">
-            {t("admin.unlinkAccountTitle")}
-          </DialogTitle>
-          <DialogDescription className="text-xs text-muted-foreground">
-            {t("admin.unlinkAccountDesc", {
-              username: unlinkAccountTarget?.username,
-            })}
-          </DialogDescription>
-        </DialogHeader>
-        <div className="flex items-start gap-2.5 border border-destructive/30 bg-destructive/5 px-3 py-2.5">
-          <AlertCircle className="size-4 text-destructive shrink-0 mt-0.5" />
-          <span className="text-xs text-destructive">
-            {t("admin.unlinkAccountWarning")}
-          </span>
-        </div>
-        <div className="flex justify-end gap-2 mt-2">
-          <Button
-            variant="ghost"
-            onClick={() => onOpenChange(false)}
-            disabled={submitting}
-          >
-            {t("common.cancel")}
-          </Button>
-          <Button
-            variant="outline"
-            className="border-destructive/40 text-destructive hover:bg-destructive/10 hover:text-destructive"
-            disabled={submitting || !unlinkAccountTarget}
-            onClick={handleSubmit}
-          >
-            {submitting
-              ? t("admin.unlinkAccountInProgress")
-              : t("admin.unlinkAccount")}
-          </Button>
-        </div>
-      </DialogContent>
-    </Dialog>
+    <InlineView
+      open={open}
+      onOpenChange={onOpenChange}
+      title={t("admin.unlinkAccountTitle")}
+    >
+      <p className="text-xs text-muted-foreground">
+        {t("admin.unlinkAccountDesc", {
+          username: unlinkAccountTarget?.username,
+        })}
+      </p>
+      <div className="flex items-start gap-2.5 border border-destructive/30 bg-destructive/5 px-3 py-2.5">
+        <AlertCircle className="size-4 text-destructive shrink-0 mt-0.5" />
+        <span className="text-xs text-destructive">
+          {t("admin.unlinkAccountWarning")}
+        </span>
+      </div>
+      <div className="flex justify-end gap-2 mt-2">
+        <Button
+          variant="ghost"
+          onClick={() => onOpenChange(false)}
+          disabled={submitting}
+        >
+          {t("common.cancel")}
+        </Button>
+        <Button
+          variant="outline"
+          className="border-destructive/40 text-destructive hover:bg-destructive/10 hover:text-destructive"
+          disabled={submitting || !unlinkAccountTarget}
+          onClick={handleSubmit}
+        >
+          {submitting
+            ? t("admin.unlinkAccountInProgress")
+            : t("admin.unlinkAccount")}
+        </Button>
+      </div>
+    </InlineView>
   );
 }
 
 type LinkAccountDialogProps = {
   open: boolean;
   onOpenChange: Dispatch<SetStateAction<boolean>>;
-  linkAccountTarget: { id: string; username: string; isOidc: boolean } | null;
+  linkAccountTarget: {
+    id: string;
+    username: string;
+    isExternal: boolean;
+  } | null;
   setUsers: Dispatch<SetStateAction<AdminUser[]>>;
   users: AdminUser[];
 };
@@ -489,7 +470,7 @@ export function AdminLinkAccountDialog({
     if (open) setOtherUsername("");
   }, [open, linkAccountTarget]);
 
-  const isOidcInitiator = linkAccountTarget?.isOidc ?? true;
+  const isExternalInitiator = linkAccountTarget?.isExternal ?? true;
 
   const handleSubmit = async () => {
     const trimmed = otherUsername.trim();
@@ -497,15 +478,15 @@ export function AdminLinkAccountDialog({
 
     setSubmitting(true);
     try {
-      if (isOidcInitiator) {
+      if (isExternalInitiator) {
         await linkExternalToPasswordAccount(linkAccountTarget.id, trimmed);
         setUsers((prev) => prev.filter((u) => u.id !== linkAccountTarget.id));
       } else {
         const oidcUser = users.find(
-          (u) => u.username === trimmed && u.isOidc && !u.passwordHash,
+          (u) => u.username === trimmed && u.isExternal && !u.passwordHash,
         );
         if (!oidcUser) {
-          toast.error(t("admin.linkAccountOidcNotFound"));
+          toast.error(t("admin.linkAccountExternalNotFound"));
           return;
         }
         await linkExternalToPasswordAccount(
@@ -525,74 +506,71 @@ export function AdminLinkAccountDialog({
   };
 
   return (
-    <Dialog open={open} onOpenChange={onOpenChange}>
-      <DialogContent className="w-[calc(100vw-2rem)] sm:max-w-lg">
-        <DialogHeader>
-          <DialogTitle className="text-lg font-bold">
-            {t("admin.linkAccountTitle")}
-          </DialogTitle>
-          <DialogDescription className="text-xs text-muted-foreground">
-            {isOidcInitiator
-              ? t("admin.linkAccountDesc", {
-                  username: linkAccountTarget?.username,
-                })
-              : t("admin.linkAccountDescLocal", {
-                  username: linkAccountTarget?.username,
-                })}
-          </DialogDescription>
-        </DialogHeader>
-        <div className="flex flex-col gap-4 mt-1">
-          <div className="flex items-start gap-2.5 border border-destructive/30 bg-destructive/5 px-3 py-2.5">
-            <AlertCircle className="size-4 text-destructive shrink-0 mt-0.5" />
-            <div className="flex flex-col gap-1 text-xs text-destructive">
-              <span>{t("admin.linkAccountWarningTitle")}</span>
-              <ul className="list-disc list-inside space-y-0.5 ml-1">
-                <li>{t("admin.linkAccountEffect1")}</li>
-                <li>{t("admin.linkAccountEffect2")}</li>
-                <li>{t("admin.linkAccountEffect3")}</li>
-              </ul>
-            </div>
-          </div>
-          <div className="flex flex-col gap-1.5">
-            <label className="text-xs font-semibold uppercase tracking-widest text-muted-foreground">
-              {isOidcInitiator
-                ? t("admin.linkAccountTargetUsername")
-                : t("admin.linkAccountOidcUsername")}{" "}
-              <span className="text-accent-brand">*</span>
-            </label>
-            <Input
-              value={otherUsername}
-              onChange={(e) => setOtherUsername(e.target.value)}
-              placeholder={
-                isOidcInitiator
-                  ? t("admin.linkAccountTargetPlaceholder")
-                  : t("admin.linkAccountOidcPlaceholder")
-              }
-              autoFocus
-              disabled={submitting}
-            />
+    <InlineView
+      open={open}
+      onOpenChange={onOpenChange}
+      title={t("admin.linkAccountTitle")}
+    >
+      <p className="text-xs text-muted-foreground">
+        {isExternalInitiator
+          ? t("admin.linkAccountDesc", {
+              username: linkAccountTarget?.username,
+            })
+          : t("admin.linkAccountDescLocal", {
+              username: linkAccountTarget?.username,
+            })}
+      </p>
+      <div className="flex flex-col gap-4 mt-1">
+        <div className="flex items-start gap-2.5 border border-destructive/30 bg-destructive/5 px-3 py-2.5">
+          <AlertCircle className="size-4 text-destructive shrink-0 mt-0.5" />
+          <div className="flex flex-col gap-1 text-xs text-destructive">
+            <span>{t("admin.linkAccountWarningTitle")}</span>
+            <ul className="list-disc list-inside space-y-0.5 ml-1">
+              <li>{t("admin.linkAccountEffect1")}</li>
+              <li>{t("admin.linkAccountEffect2")}</li>
+              <li>{t("admin.linkAccountEffect3")}</li>
+            </ul>
           </div>
         </div>
-        <div className="flex justify-end gap-2 mt-2">
-          <Button
-            variant="ghost"
-            onClick={() => onOpenChange(false)}
+        <div className="flex flex-col gap-1.5">
+          <label className="text-xs font-semibold uppercase tracking-widest text-muted-foreground">
+            {isExternalInitiator
+              ? t("admin.linkAccountTargetUsername")
+              : t("admin.linkAccountExternalUsername")}{" "}
+            <span className="text-accent-brand">*</span>
+          </label>
+          <Input
+            value={otherUsername}
+            onChange={(e) => setOtherUsername(e.target.value)}
+            placeholder={
+              isExternalInitiator
+                ? t("admin.linkAccountTargetPlaceholder")
+                : t("admin.linkAccountExternalPlaceholder")
+            }
+            autoFocus
             disabled={submitting}
-          >
-            {t("common.cancel")}
-          </Button>
-          <Button
-            variant="outline"
-            className="border-destructive/40 text-destructive hover:bg-destructive/10 hover:text-destructive"
-            disabled={submitting || !linkAccountTarget || !otherUsername.trim()}
-            onClick={handleSubmit}
-          >
-            {submitting
-              ? t("admin.linkAccountInProgress")
-              : t("admin.linkAccounts")}
-          </Button>
+          />
         </div>
-      </DialogContent>
-    </Dialog>
+      </div>
+      <div className="flex justify-end gap-2 mt-2">
+        <Button
+          variant="ghost"
+          onClick={() => onOpenChange(false)}
+          disabled={submitting}
+        >
+          {t("common.cancel")}
+        </Button>
+        <Button
+          variant="outline"
+          className="border-destructive/40 text-destructive hover:bg-destructive/10 hover:text-destructive"
+          disabled={submitting || !linkAccountTarget || !otherUsername.trim()}
+          onClick={handleSubmit}
+        >
+          {submitting
+            ? t("admin.linkAccountInProgress")
+            : t("admin.linkAccounts")}
+        </Button>
+      </div>
+    </InlineView>
   );
 }
diff --git a/src/ui/sidebar/AdminUserManagePanel.tsx b/src/ui/sidebar/AdminUserManagePanel.tsx
index a37baf369..7fb146f2f 100644
--- a/src/ui/sidebar/AdminUserManagePanel.tsx
+++ b/src/ui/sidebar/AdminUserManagePanel.tsx
@@ -1,3 +1,5 @@
+import { Select2 } from "@/components/select2";
+import { useConfirm } from "@/components/surface/surface-scope";
 import { useEffect, useState } from "react";
 import { hostProtocolFlags, type HostProtocols } from "./host-protocols";
 import { getUserList } from "@/main-axios";
@@ -50,8 +52,11 @@ import { AdminSecondFactorsSection } from "./AdminSecondFactorsSection";
 import { HostEditor } from "./HostEditor";
 import { mapCredentials, sshHostToHost } from "./HostManagerData";
 import type { AdminSession, AdminUser } from "./AdminManagementSections";
-import { makeCredentialTabs, makeHostTabs, TabStrip } from "./HostManagerTabs";
+import { TabStrip } from "./HostManagerTabs";
+import { BackButton, PanelShell } from "@/components/panel-layout";
 import { useActionSlot } from "@/hooks/use-action-slot";
+import { docsUrl } from "@/lib/docs";
+import { roleLabel } from "@/lib/role-label";
 
 type ApiErrorLike = {
   response?: {
@@ -114,14 +119,18 @@ export function AdminUserManagePanel({
       .catch(() => {});
   }, [user.id]);
   const [editor, setEditor] = useState<EditorState>(null);
-  const [editorTab, setEditorTab] = useState("general");
   const [editorProtocols, setEditorProtocols] = useState<HostProtocols>(() =>
     hostProtocolFlags(null),
   );
-  const [confirmDialog, setConfirmDialog] = useState<{
-    message: string;
-    onConfirm: () => void;
-  } | null>(null);
+  const confirm = useConfirm();
+  const setConfirmDialog = (
+    request: { message: string; onConfirm: () => void } | null,
+  ) => {
+    if (!request) return;
+    void confirm({ title: request.message }).then((ok) => {
+      if (ok) void request.onConfirm();
+    });
+  };
 
   const [hosts, setHosts] = useState<Host[]>([]);
   const [credentials, setCredentials] = useState<Credential[]>([]);
@@ -323,57 +332,35 @@ export function AdminUserManagePanel({
     </span>
   );
 
-  // Full-panel host/credential editor view (mirrors HostManager's editor view)
+  // Editing one of the user's hosts or credentials takes over the panel.
   if (editor) {
-    const isHost = editor.kind === "host";
-    const tabs = isHost
-      ? makeHostTabs(
-          t,
-          editorProtocols as unknown as Record<string, boolean>,
-        ).filter((tab) => tab.id !== "ssh" || editorProtocols.enableSsh)
-      : makeCredentialTabs(t);
-
+    const close = () => setEditor(null);
     return (
       <div className="flex flex-col flex-1 min-h-0">
-        <div className="flex flex-col shrink-0 border-b border-border">
-          <button
-            onClick={() => {
-              setEditor(null);
-              setEditorTab("general");
-            }}
-            className="flex items-center gap-2 px-3 py-2 text-xs text-muted-foreground hover:text-foreground hover:bg-muted/40 transition-colors border-b border-border/50"
-          >
-            <ArrowLeft className="size-3.5 shrink-0" />
-            <span>
-              {t("admin.manageEditorBack", { username: user.username })}
-            </span>
-          </button>
-          <TabStrip
-            tabs={tabs}
-            activeTab={editorTab}
-            onTabChange={setEditorTab}
-          />
-        </div>
-        <div className="flex-1 min-h-0 overflow-y-auto px-3 py-3 flex flex-col gap-3">
-          {isHost ? (
+        <PanelShell
+          leading={<BackButton onClick={close} />}
+          title={t("admin.manageEditorBack", { username: user.username })}
+          docs={docsUrl("users")}
+          status={
+            editor.kind === "host"
+              ? (editor.host?.name ?? t("manage.newHost"))
+              : (editor.credential?.name ?? t("manage.newCredential"))
+          }
+          scroll={false}
+        >
+          {editor.kind === "host" ? (
             <HostEditor
               key={editor.host ? editor.host.id : "new-host"}
               host={editor.host}
-              activeTab={editorTab}
-              onBack={() => {
-                setEditor(null);
-                setEditorTab("general");
-              }}
+              onBack={close}
               onSave={() => {
-                setEditor(null);
-                setEditorTab("general");
+                close();
                 reloadHosts();
               }}
               protocols={editorProtocols}
               onProtocolChange={(p) =>
                 setEditorProtocols((prev) => ({ ...prev, ...p }))
               }
-              onTabChange={setEditorTab}
               hosts={hosts}
               credentials={credentials}
               adminTargetUserId={user.id}
@@ -382,7 +369,6 @@ export function AdminUserManagePanel({
             <CredentialEditorView
               key={editor.credential ? editor.credential.id : "new-cred"}
               credential={editor.credential}
-              activeTab={editorTab}
               existingFolders={Array.from(
                 new Set(
                   credentials
@@ -390,19 +376,15 @@ export function AdminUserManagePanel({
                     .filter((f): f is string => !!f),
                 ),
               ).sort()}
-              onBack={() => {
-                setEditor(null);
-                setEditorTab("general");
-              }}
+              onBack={close}
               onSave={() => {
-                setEditor(null);
-                setEditorTab("general");
+                close();
                 reloadCredentials();
               }}
               adminTargetUserId={user.id}
             />
           )}
-        </div>
+        </PanelShell>
       </div>
     );
   }
@@ -450,9 +432,9 @@ export function AdminUserManagePanel({
             {/* Password reset */}
             <div className="flex flex-col gap-2">
               {sectionHeading(t("admin.resetPasswordTitle"))}
-              {user.isOidc && !user.passwordHash ? (
+              {user.isExternal && !user.passwordHash ? (
                 <span className="text-xs text-muted-foreground">
-                  {t("admin.resetPasswordOidcOnly")}
+                  {t("admin.resetPasswordExternalOnly")}
                 </span>
               ) : (
                 <div className="flex items-center gap-2">
@@ -500,7 +482,7 @@ export function AdminUserManagePanel({
                         key={ur.roleId}
                         className="inline-flex items-center gap-1 text-[10px] font-semibold px-1.5 py-0.5 border border-accent-brand/40 bg-accent-brand/10 text-accent-brand"
                       >
-                        {ur.roleDisplayName}
+                        {roleLabel(t, ur.roleDisplayName)}
                         {!isSystem && (
                           <button
                             onClick={async () => {
@@ -678,7 +660,6 @@ export function AdminUserManagePanel({
                     className="h-6 text-[10px] border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
                     onClick={() => {
                       setEditorProtocols(hostProtocolFlags(null));
-                      setEditorTab("general");
                       setEditor({ kind: "host", host: null });
                     }}
                   >
@@ -724,7 +705,6 @@ export function AdminUserManagePanel({
                       className="size-6 text-muted-foreground hover:text-foreground"
                       onClick={() => {
                         setEditorProtocols(hostProtocolFlags(host));
-                        setEditorTab("general");
                         setEditor({ kind: "host", host });
                       }}
                     >
@@ -790,7 +770,6 @@ export function AdminUserManagePanel({
                     size="sm"
                     className="h-6 text-[10px] border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
                     onClick={() => {
-                      setEditorTab("general");
                       setEditor({ kind: "credential", credential: null });
                     }}
                   >
@@ -827,7 +806,6 @@ export function AdminUserManagePanel({
                       size="icon"
                       className="size-6 text-muted-foreground hover:text-foreground"
                       onClick={() => {
-                        setEditorTab("general");
                         setEditor({ kind: "credential", credential: cred });
                       }}
                     >
@@ -969,7 +947,7 @@ export function AdminUserManagePanel({
                 </span>
                 <label className="flex flex-col gap-1 text-[10px] text-muted-foreground">
                   {t("admin.deleteSuccessorLabel")}
-                  <select
+                  <Select2
                     value={successor}
                     onChange={(e) => setSuccessor(e.target.value)}
                     className="h-7 border border-border bg-background px-2 text-xs text-foreground outline-none"
@@ -983,7 +961,7 @@ export function AdminUserManagePanel({
                     <option value="none">
                       {t("admin.deleteSuccessorNone")}
                     </option>
-                  </select>
+                  </Select2>
                   <span>{t("admin.deleteSuccessorDesc")}</span>
                 </label>
                 <Button
@@ -1013,32 +991,6 @@ export function AdminUserManagePanel({
           </div>
         )}
       </div>
-
-      {/* Confirm dialog overlay */}
-      {confirmDialog && (
-        <div className="absolute inset-0 z-50 flex items-center justify-center bg-background/80 backdrop-blur-sm p-4">
-          <div className="bg-popover border border-border shadow-xl w-full max-w-xs flex flex-col gap-4 p-4">
-            <p className="text-sm text-foreground">{confirmDialog.message}</p>
-            <div className="flex justify-end gap-2">
-              <button
-                onClick={() => setConfirmDialog(null)}
-                className="px-3 py-1.5 text-xs border border-border text-muted-foreground hover:text-foreground hover:bg-muted rounded transition-colors"
-              >
-                {t("common.cancel")}
-              </button>
-              <button
-                onClick={() => {
-                  confirmDialog.onConfirm();
-                  setConfirmDialog(null);
-                }}
-                className="px-3 py-1.5 text-xs bg-destructive text-destructive-foreground hover:bg-destructive/90 rounded transition-colors"
-              >
-                {t("common.confirm")}
-              </button>
-            </div>
-          </div>
-        </div>
-      )}
     </div>
   );
 }
diff --git a/src/ui/sidebar/AppRail.tsx b/src/ui/sidebar/AppRail.tsx
index a1b292997..e80c0700f 100644
--- a/src/ui/sidebar/AppRail.tsx
+++ b/src/ui/sidebar/AppRail.tsx
@@ -1,106 +1,125 @@
-import { useState, useEffect, type ReactElement } from "react";
+import { useState, useEffect, useMemo } from "react";
 import { useTranslation } from "react-i18next";
 import {
   Check,
+  Eye,
+  EyeOff,
   LogOut,
   PanelRight,
   Pin,
-  Settings,
+  Search,
   SlidersHorizontal,
   SquareArrowOutUpRight,
-  User,
 } from "lucide-react";
 import type { TabType, ToolsTab } from "@/types/ui-types";
 import { Skeleton } from "@/components/skeleton";
 import { readRailPreference, setRailPreference } from "./rail-preferences";
-import { useRailItems, type RailItemDef } from "./rail-items";
+import {
+  groupRailItems,
+  moveRailItem,
+  useRailItems,
+  type RailGroup,
+  type RailItemDef,
+} from "./rail-items";
+import { useUiPreferencesContext } from "@/contexts/UiPreferencesContext";
+import { toggleHiddenRailTab, useHiddenRailTabs } from "./hidden-rail-tabs";
 import { RailBadge } from "./RailBadge";
 import { rem } from "@/lib/rem";
+import { isElectron } from "@/lib/electron";
 
 /** Core rail views; plugins add their own ids at runtime. */
 export type CoreRailView =
-  | "hosts"
-  | "credentials"
-  | "quick-connect"
-  | ToolsTab
-  | "connections"
-  | "user-profile"
-  | "admin-settings";
+  "hosts" | "credentials" | "quick-connect" | ToolsTab | "connections";
 
 export type RailView = CoreRailView | (string & {});
 
-type RailItem =
-  | {
-      kind?: undefined;
-      view: RailView;
-      icon: React.ReactNode;
-      title: string;
-      promotable?: boolean;
-      rightDockable?: boolean;
-      useBadge?: () => number | null | undefined;
-    }
-  | {
-      kind: "tab";
-      tabType: TabType;
-      icon: React.ReactNode;
-      title: string;
-      useBadge?: () => number | null | undefined;
-    }
-  | { kind: "separator" };
+const btnBase =
+  "relative flex items-center h-7 shrink-0 transition-colors gap-2.5 focus-visible:ring-1 focus-visible:ring-ring";
+const btnStyle = { margin: `0 ${rem(4)}`, padding: `0 ${rem(8)}` };
+const idle = "text-muted-foreground hover:text-foreground hover:bg-muted/60";
+const activeClass = "text-accent-brand bg-accent-brand/10";
 
-function buildRailButtons(
-  items: RailItemDef[],
-  t: (key: string) => string,
-  hidden: Set<string>,
-): RailItem[] {
-  const all: RailItem[] = [];
-  for (const item of items) {
-    const Icon = item.icon;
-    if (item.kind === "tab") {
-      all.push({
-        kind: "tab",
-        tabType: item.id as TabType,
-        icon: <Icon size={16} />,
-        title: t(item.labelKey),
-        useBadge: item.useBadge,
-      });
-    } else {
-      all.push({
-        view: item.id as RailView,
-        icon: <Icon size={16} />,
-        title: t(item.labelKey),
-        promotable: item.promotable,
-        rightDockable: item.rightDockable,
-        useBadge: item.useBadge,
-      });
-    }
-    if (item.separatorAfter) all.push({ kind: "separator" });
-  }
-
-  // Filter out hidden items, then collapse consecutive/leading/trailing separators
-  const filtered = all.filter((item) => {
-    if (item.kind === "separator") return true;
-    if ("tabType" in item) return !hidden.has(item.tabType);
-    return !hidden.has(item.view);
-  });
-
-  const result: RailItem[] = [];
-  for (const item of filtered) {
-    if (item.kind === "separator") {
-      if (result.length === 0 || result[result.length - 1].kind === "separator")
-        continue;
-      result.push(item);
-    } else {
-      result.push(item);
-    }
-  }
-  if (result[result.length - 1]?.kind === "separator") result.pop();
-  return result;
+function RailLabel({
+  expanded,
+  children,
+}: {
+  expanded: boolean;
+  children: React.ReactNode;
+}) {
+  return (
+    <span
+      className={`text-xs font-medium whitespace-nowrap overflow-hidden transition-[opacity,width] duration-150 ${
+        expanded ? "opacity-100 delay-75" : "opacity-0 w-0"
+      }`}
+    >
+      {children}
+    </span>
+  );
 }
 
-const btnBase =
-  "relative flex items-center h-7 rounded shrink-0 transition-colors gap-2.5";
-const btnStyle = { margin: `0 ${rem(4)}`, padding: `0 ${rem(8)}` };
+function RailIcon({
+  children,
+  useBadge,
+}: {
+  children: React.ReactNode;
+  useBadge?: () => number | null | undefined;
+}) {
+  return (
+    <span
+      className="relative shrink-0 flex items-center justify-center"
+      style={{ width: rem(16), height: rem(16) }}
+    >
+      {children}
+      {useBadge && (
+        <RailBadge useBadge={useBadge} className="-top-1.5 -right-2" />
+      )}
+    </span>
+  );
+}
+
+function Rule({ expanded }: { expanded: boolean }) {
+  return (
+    <div
+      className="mx-auto h-px bg-border my-0.5 shrink-0 transition-[width] duration-200"
+      style={{ width: expanded ? `calc(100% - ${rem(16)})` : rem(20) }}
+    />
+  );
+}
+
+/**
+ * The band name rides on the divider between bands, so expanding the rail
+ * never pushes items down from under the pointer.
+ */
+function GroupDivider({
+  group,
+  expanded,
+}: {
+  group: RailGroup;
+  expanded: boolean;
+}) {
+  const { t } = useTranslation();
+  return (
+    <div className="my-0.5 flex h-3 shrink-0 items-center gap-1.5 px-2.5">
+      <span
+        aria-hidden={!expanded}
+        className={`shrink-0 overflow-hidden text-[10px] font-semibold uppercase leading-none tracking-widest whitespace-nowrap text-muted-foreground/60 transition-[opacity,max-width] duration-200 ${
+          expanded ? "max-w-32 opacity-100 delay-75" : "max-w-0 opacity-0"
+        }`}
+      >
+        {t(`nav.group.${group}`)}
+      </span>
+      <div className="h-px min-w-3 flex-1 bg-border" />
+    </div>
+  );
+}
+
+interface MenuTarget {
+  id: string;
+  title: string;
+  promotable?: boolean;
+  rightDockable?: boolean;
+  hideable: boolean;
+}
 
 export function AppRail({
   railView,
@@ -111,6 +130,9 @@ export function AppRail({
   onRailClick,
   onOpenTab,
   onOpenInRightDock,
+  onOpenSettings,
+  onOpenNavigationSettings,
+  onOpenPalette,
   onLogout,
 }: {
   railView: RailView;
@@ -122,6 +144,10 @@ export function AppRail({
   onRailClick: (view: RailView) => void;
   onOpenTab?: (type: TabType) => void;
   onOpenInRightDock?: (view: RailView) => void;
+  onOpenSettings: () => void;
+  /** The rail menu's own entry, which jumps to the navigation settings. */
+  onOpenNavigationSettings: () => void;
+  onOpenPalette?: () => void;
   onLogout: (options?: { manual?: boolean }) => void;
 }) {
   const { t } = useTranslation();
@@ -134,22 +160,9 @@ export function AppRail({
     readRailPreference("showPinAppRailButton"),
   );
   const [menuPos, setMenuPos] = useState<{ x: number; y: number } | null>(null);
-  // Which promotable item was right-clicked, so the menu can offer to open it
-  // as a tab. Null when the right-click landed on empty rail space.
-  const [menuTarget, setMenuTarget] = useState<{
-    view: RailView;
-    title: string;
-    promotable?: boolean;
-    rightDockable?: boolean;
-  } | null>(null);
-  const [hiddenTabs, setHiddenTabs] = useState<Set<string>>(() => {
-    try {
-      const stored = localStorage.getItem("hiddenRailTabs");
-      return stored ? new Set(JSON.parse(stored)) : new Set();
-    } catch {
-      return new Set();
-    }
-  });
+  const [menuTarget, setMenuTarget] = useState<MenuTarget | null>(null);
+  const [managing, setManaging] = useState(false);
+  const hiddenTabs = useHiddenRailTabs();
 
   useEffect(() => {
     const pinHandler = () => setPinned(readRailPreference("pinAppRail"));
@@ -193,34 +206,24 @@ export function AppRail({
 
   // Plugins add and remove rail items at runtime, and permissions hide some.
   const railItems = useRailItems();
+  const uiPrefs = useUiPreferencesContext();
+  const [dragId, setDragId] = useState<string | null>(null);
+  const [dropBefore, setDropBefore] = useState<string | null>(null);
 
-  useEffect(() => {
-    const handler = () => {
-      try {
-        const stored = localStorage.getItem("hiddenRailTabs");
-        setHiddenTabs(stored ? new Set(JSON.parse(stored)) : new Set());
-      } catch {
-        setHiddenTabs(new Set());
-      }
-    };
-    window.addEventListener("hiddenRailTabsChanged", handler);
-    return () => window.removeEventListener("hiddenRailTabsChanged", handler);
-  }, []);
-
-  const railExpanded = pinned || (expandOnHover && hovered);
-  const railButtons = buildRailButtons(
-    railItems.filter((item) => item.placement !== "footer"),
-    t,
-    hiddenTabs,
+  const railExpanded = pinned || (expandOnHover && hovered) || managing;
+  const mainItems = railItems.filter((item) => item.placement !== "footer");
+  const bands = useMemo(
+    () => groupRailItems(mainItems.filter((item) => !hiddenTabs.has(item.id))),
+    [mainItems, hiddenTabs],
   );
+  const hiddenItems = mainItems.filter((item) => hiddenTabs.has(item.id));
   const footerItems = railItems.filter(
     (item) => item.placement === "footer" && !hiddenTabs.has(item.id),
   );
-  const setRailPinned = (nextPinned: boolean) => {
-    setPinned(nextPinned);
-    localStorage.setItem("pinAppRail", String(nextPinned));
-    window.dispatchEvent(new Event("pinAppRailChanged"));
-  };
+
+  useEffect(() => {
+    if (hiddenItems.length === 0) setManaging(false);
+  }, [hiddenItems.length]);
 
   const togglePinned = () => {
     setRailPreference("pinAppRail", !pinned);
@@ -232,29 +235,126 @@ export function AppRail({
     setMenuPos(null);
   };
 
+  const sameBand = (a: string, b: string) =>
+    (mainItems.find((item) => item.id === a)?.group ?? "tools") ===
+    (mainItems.find((item) => item.id === b)?.group ?? "tools");
+
+  const renderItem = (item: RailItemDef) => {
+    const Icon = item.icon;
+    const title = t(item.labelKey);
+    const isTab = item.kind === "tab";
+    const active = !isTab && sidebarOpen && railView === item.id;
+    const reorderable = item.placement !== "footer" && !!uiPrefs;
+    const dropHere =
+      dragId !== null && dropBefore === item.id && dragId !== item.id;
+    return (
+      <button
+        key={item.id}
+        type="button"
+        draggable={reorderable}
+        onDragStart={(e) => {
+          e.dataTransfer.effectAllowed = "move";
+          setDragId(item.id);
+        }}
+        onDragEnd={() => {
+          setDragId(null);
+          setDropBefore(null);
+        }}
+        onDragOver={(e) => {
+          if (!dragId || dragId === item.id || !sameBand(dragId, item.id))
+            return;
+          e.preventDefault();
+          setDropBefore(item.id);
+        }}
+        onDrop={(e) => {
+          if (!dragId || !sameBand(dragId, item.id)) return;
+          e.preventDefault();
+          uiPrefs?.setOverride(
+            "rail",
+            "order",
+            moveRailItem(mainItems, dragId, item.id),
+          );
+          setDragId(null);
+          setDropBefore(null);
+        }}
+        onClick={(e) => {
+          if (isTab || (item.promotable && (e.ctrlKey || e.metaKey))) {
+            onOpenTab?.(item.id as TabType);
+            return;
+          }
+          onRailClick(item.id as RailView);
+        }}
+        onAuxClick={(e) => {
+          if (e.button !== 1 || !item.promotable) return;
+          e.preventDefault();
+          onOpenTab?.(item.id as TabType);
+        }}
+        onContextMenu={() =>
+          setMenuTarget({
+            id: item.id,
+            title,
+            promotable: item.promotable,
+            rightDockable: item.rightDockable,
+            hideable: !item.alwaysVisible && item.hideable !== false,
+          })
+        }
+        data-rail-item=""
+        aria-current={active ? "page" : undefined}
+        title={item.promotable ? `${title}\n${t("nav.openAsTabHint")}` : title}
+        style={btnStyle}
+        className={`${btnBase} ${active ? activeClass : idle} ${dragId === item.id ? "opacity-40" : ""} ${dropHere ? "relative before:absolute before:inset-x-1 before:-top-0.5 before:h-0.5 before:bg-accent-brand" : ""}`}
+      >
+        <RailIcon useBadge={item.useBadge}>
+          <Icon size={16} />
+        </RailIcon>
+        <RailLabel expanded={railExpanded}>{title}</RailLabel>
+      </button>
+    );
+  };
+
   return (
     <div
-      className="hidden md:flex flex-col items-stretch bg-sidebar border-r border-border shrink-0 overflow-hidden pt-2 gap-1 transition-[width] duration-200 min-h-0"
-      style={{ width: rem(railExpanded ? 160 : 40) }}
+      // The desktop app keeps the rail however narrow its window gets.
+      className={`${isElectron() ? "flex" : "hidden md:flex"} flex-col items-stretch bg-sidebar border-r border-border shrink-0 overflow-hidden pt-2 gap-1 transition-[width] duration-200 min-h-0`}
+      style={{ width: rem(railExpanded ? 172 : 40) }}
       onMouseEnter={() => setHovered(true)}
       onMouseLeave={() => setHovered(false)}
       onContextMenu={(e) => {
         e.preventDefault();
         // Keep the menu on screen when right-clicking near the viewport edges
-        const MENU_W = 190;
-        const MENU_H = 96;
+        const MENU_W = 200;
+        const MENU_H = 180;
         setMenuPos({
           x: Math.min(e.clientX, window.innerWidth - MENU_W - 8),
           y: Math.min(e.clientY, window.innerHeight - MENU_H - 8),
         });
-        if (!(e.target as HTMLElement).closest("[data-rail-promotable]")) {
+        if (!(e.target as HTMLElement).closest("[data-rail-item]")) {
           setMenuTarget(null);
         }
       }}
     >
+      {onOpenPalette && (
+        <>
+          <button
+            type="button"
+            onClick={onOpenPalette}
+            title={t("nav.searchEverything")}
+            aria-label={t("nav.searchEverything")}
+            style={btnStyle}
+            className={`${btnBase} ${idle}`}
+          >
+            <RailIcon>
+              <Search size={16} />
+            </RailIcon>
+            <RailLabel expanded={railExpanded}>{t("nav.search")}</RailLabel>
+          </button>
+          <Rule expanded={railExpanded} />
+        </>
+      )}
+
       <div className="flex flex-col flex-1 gap-1 overflow-y-auto scrollbar-none min-h-0">
         {!pluginsSettled
-          ? Array.from({ length: railButtons.length || 8 }, (_, i) => (
+          ? Array.from({ length: mainItems.length || 8 }, (_, i) => (
               <div
                 key={`rail-skeleton-${i}`}
                 style={btnStyle}
@@ -263,307 +363,111 @@ export function AppRail({
                 <Skeleton className="size-4 shrink-0" />
               </div>
             ))
-          : railButtons.map((item, i) =>
-              item.kind === "separator" ? (
-                <div
-                  key={`sep-${i}`}
-                  className="mx-auto h-px bg-border my-0.5 shrink-0 transition-[width] duration-200"
-                  style={{
-                    width: railExpanded ? `calc(100% - ${rem(16)})` : rem(20),
-                  }}
-                />
-              ) : "tabType" in item ? (
-                <button
-                  key={item.tabType}
-                  onClick={() => onOpenTab?.(item.tabType)}
-                  style={btnStyle}
-                  className={`${btnBase} text-muted-foreground hover:text-foreground hover:bg-muted/60`}
-                >
-                  <span
-                    className="relative shrink-0 flex items-center justify-center"
-                    style={{ width: rem(16), height: rem(16) }}
+          : bands.map((band, i) => (
+              <div key={band.group} className="flex flex-col gap-1">
+                {i > 0 && (
+                  <GroupDivider group={band.group} expanded={railExpanded} />
+                )}
+                {band.items.map(renderItem)}
+              </div>
+            ))}
+
+        {pluginsSettled && hiddenItems.length > 0 && (
+          <>
+            <Rule expanded={railExpanded} />
+            <button
+              type="button"
+              onClick={() => setManaging((v) => !v)}
+              aria-expanded={managing}
+              title={t("nav.hiddenCount", { count: hiddenItems.length })}
+              style={btnStyle}
+              className={`${btnBase} ${managing ? activeClass : idle}`}
+            >
+              <RailIcon>
+                <EyeOff size={16} />
+              </RailIcon>
+              <RailLabel expanded={railExpanded}>
+                {t("nav.hiddenCount", { count: hiddenItems.length })}
+              </RailLabel>
+            </button>
+            {managing &&
+              hiddenItems.map((item) => {
+                const Icon = item.icon;
+                return (
+                  <button
+                    key={`hidden-${item.id}`}
+                    type="button"
+                    onClick={() => void toggleHiddenRailTab(item.id)}
+                    title={t("nav.showInRail")}
+                    style={btnStyle}
+                    className={`${btnBase} text-muted-foreground/70 hover:text-foreground hover:bg-muted/60`}
                   >
-                    {item.icon}
-                    {item.useBadge && (
-                      <RailBadge
-                        useBadge={item.useBadge}
-                        className="-top-1.5 -right-2"
-                      />
-                    )}
-                  </span>
-                  <span
-                    className={`text-xs font-medium whitespace-nowrap overflow-hidden transition-[opacity,width] duration-150 ${
-                      railExpanded ? "opacity-100 delay-75" : "opacity-0 w-0"
-                    }`}
-                  >
-                    {item.title}
-                  </span>
-                </button>
-              ) : (
-                <button
-                  key={item.view}
-                  onClick={(e) => {
-                    if (item.promotable && (e.ctrlKey || e.metaKey)) {
-                      onOpenTab?.(item.view as TabType);
-                      return;
-                    }
-                    onRailClick(item.view);
-                  }}
-                  onAuxClick={(e) => {
-                    if (e.button !== 1 || !item.promotable) return;
-                    e.preventDefault();
-                    onOpenTab?.(item.view as TabType);
-                  }}
-                  onContextMenu={() => {
-                    if (item.promotable || item.rightDockable)
-                      setMenuTarget({
-                        view: item.view,
-                        title: item.title,
-                        promotable: item.promotable,
-                        rightDockable: item.rightDockable,
-                      });
-                  }}
-                  data-rail-promotable={
-                    item.promotable || item.rightDockable ? "" : undefined
-                  }
-                  title={
-                    item.promotable
-                      ? `${item.title}\n${t("nav.openAsTabHint")}`
-                      : item.title
-                  }
-                  style={btnStyle}
-                  className={`${btnBase} ${
-                    sidebarOpen && railView === item.view
-                      ? "text-accent-brand bg-accent-brand/10"
-                      : "text-muted-foreground hover:text-foreground hover:bg-muted/60"
-                  }`}
-                >
-                  <span
-                    className="relative shrink-0 flex items-center justify-center"
-                    style={{ width: rem(16), height: rem(16) }}
-                  >
-                    {item.icon}
-                    {item.useBadge && (
-                      <RailBadge
-                        useBadge={item.useBadge}
-                        className="-top-1.5 -right-2"
-                      />
-                    )}
-                  </span>
-                  <span
-                    className={`text-xs font-medium whitespace-nowrap overflow-hidden transition-[opacity,width] duration-150 ${
-                      railExpanded ? "opacity-100 delay-75" : "opacity-0 w-0"
-                    }`}
-                  >
-                    {item.title}
-                  </span>
-                </button>
-              ),
-            )}
+                    <RailIcon>
+                      <Icon size={16} />
+                    </RailIcon>
+                    <span className="min-w-0 truncate text-xs font-medium whitespace-nowrap">
+                      {t(item.labelKey)}
+                    </span>
+                    <Eye className="ml-auto size-3 shrink-0 opacity-60" />
+                  </button>
+                );
+              })}
+          </>
+        )}
       </div>
 
       <div className="shrink-0 flex flex-col gap-1 border-t border-border pt-1 pb-1">
         {showPinButton && (
-          <button
-            onClick={() => setRailPinned(!pinned)}
-            style={btnStyle}
-            title={
-              pinned ? t("nav.collapseSideMenu") : t("nav.keepSideMenuOpen")
-            }
-            className={`${btnBase} ${
-              pinned
-                ? "text-accent-brand bg-accent-brand/10 hover:text-accent-brand"
-                : "text-muted-foreground hover:text-foreground hover:bg-muted/60"
-            }`}
-          >
-            <span
-              className="shrink-0 flex items-center justify-center"
-              style={{ width: rem(16), height: rem(16) }}
-            >
-              <Pin size={16} />
-            </span>
-            <span
-              className={`text-xs font-medium whitespace-nowrap overflow-hidden transition-[opacity,width] duration-150 ${
-                railExpanded ? "opacity-100 delay-75" : "opacity-0 w-0"
-              }`}
-            >
-              {pinned ? t("nav.collapseSideMenu") : t("nav.keepSideMenuOpen")}
-            </span>
-          </button>
-        )}
-        {showPinButton && (
-          <div
-            className="mx-auto h-px bg-border my-0.5 shrink-0 transition-[width] duration-200"
-            style={{
-              width: railExpanded ? `calc(100% - ${rem(16)})` : rem(20),
-            }}
-          />
-        )}
-        {footerItems.map((item) => {
-          const Icon = item.icon;
-          const title = t(item.labelKey);
-          return (
+          <>
             <button
-              key={item.id}
-              onClick={(e) => {
-                if (item.kind === "tab") {
-                  onOpenTab?.(item.id as TabType);
-                  return;
-                }
-                if (item.promotable && (e.ctrlKey || e.metaKey)) {
-                  onOpenTab?.(item.id as TabType);
-                  return;
-                }
-                onRailClick(item.id as RailView);
-              }}
-              onAuxClick={(e) => {
-                if (e.button !== 1 || !item.promotable) return;
-                e.preventDefault();
-                onOpenTab?.(item.id as TabType);
-              }}
-              onContextMenu={() => {
-                if (item.promotable || item.rightDockable)
-                  setMenuTarget({
-                    view: item.id as RailView,
-                    title,
-                    promotable: item.promotable,
-                    rightDockable: item.rightDockable,
-                  });
-              }}
-              data-rail-promotable={
-                item.promotable || item.rightDockable ? "" : undefined
-              }
-              title={
-                item.promotable ? `${title}\n${t("nav.openAsTabHint")}` : title
-              }
+              type="button"
+              onClick={() => setRailPreference("pinAppRail", !pinned)}
               style={btnStyle}
-              className={`${btnBase} ${
-                sidebarOpen && railView === item.id
-                  ? "text-accent-brand bg-accent-brand/10"
-                  : "text-muted-foreground hover:text-foreground hover:bg-muted/60"
-              }`}
-            >
-              <span
-                className="relative shrink-0 flex items-center justify-center"
-                style={{ width: rem(16), height: rem(16) }}
-              >
-                <Icon size={16} />
-                {item.useBadge && (
-                  <RailBadge
-                    useBadge={item.useBadge}
-                    className="-top-1.5 -right-2"
-                  />
-                )}
-              </span>
-              <span
-                className={`text-xs font-medium whitespace-nowrap overflow-hidden transition-[opacity,width] duration-150 ${railExpanded ? "opacity-100 delay-75" : "opacity-0 w-0"}`}
-              >
-                {title}
-              </span>
-            </button>
-          );
-        })}
-        {(
-          [
-            {
-              view: "user-profile" as RailView,
-              icon: <User size={16} />,
-              title: t("nav.userProfile"),
-            },
-            ...(isAdmin
-              ? [
-                  {
-                    view: "admin-settings" as RailView,
-                    icon: <Settings size={16} />,
-                    title: t("nav.admin"),
-                  },
-                ]
-              : []),
-          ] as {
-            view: RailView;
-            icon: ReactElement;
-            title: string;
-            promotable?: boolean;
-          }[]
-        ).map((item) => (
-          <button
-            key={item.view}
-            onClick={(e) => {
-              if (item.promotable && (e.ctrlKey || e.metaKey)) {
-                onOpenTab?.(item.view as TabType);
-                return;
+              title={
+                pinned ? t("nav.collapseSideMenu") : t("nav.keepSideMenuOpen")
               }
-              onRailClick(item.view);
-            }}
-            onAuxClick={(e) => {
-              if (e.button !== 1 || !item.promotable) return;
-              e.preventDefault();
-              onOpenTab?.(item.view as TabType);
-            }}
-            onContextMenu={() => {
-              if (item.promotable)
-                setMenuTarget({
-                  view: item.view,
-                  title: item.title,
-                  promotable: item.promotable,
-                  rightDockable: true,
-                });
-            }}
-            data-rail-promotable={item.promotable ? "" : undefined}
-            title={
-              item.promotable
-                ? `${item.title}\n${t("nav.openAsTabHint")}`
-                : item.title
-            }
+              className={`${btnBase} ${pinned ? activeClass : idle}`}
+            >
+              <RailIcon>
+                <Pin size={16} />
+              </RailIcon>
+              <RailLabel expanded={railExpanded}>
+                {pinned ? t("nav.collapseSideMenu") : t("nav.keepSideMenuOpen")}
+              </RailLabel>
+            </button>
+            <Rule expanded={railExpanded} />
+          </>
+        )}
+        {footerItems.map(renderItem)}
+        {footerItems.length > 0 && !isElectron() && (
+          <Rule expanded={railExpanded} />
+        )}
+        {/* The desktop signs in to its own local profile by itself. */}
+        {!isElectron() && (
+          <button
+            type="button"
+            onClick={() => onLogout({ manual: true })}
             style={btnStyle}
-            className={`${btnBase} ${
-              sidebarOpen && railView === item.view
-                ? "text-accent-brand bg-accent-brand/10"
-                : "text-muted-foreground hover:text-foreground hover:bg-muted/60"
-            }`}
+            title={t("common.logout")}
+            aria-label={t("common.logout")}
+            className={`${btnBase} text-muted-foreground hover:text-destructive hover:bg-destructive/10`}
           >
-            <span
-              className="relative shrink-0 flex items-center justify-center"
-              style={{ width: rem(16), height: rem(16) }}
-            >
-              {item.icon}
-            </span>
-            <span
-              className={`text-xs font-medium whitespace-nowrap overflow-hidden transition-[opacity,width] duration-150 ${railExpanded ? "opacity-100 delay-75" : "opacity-0 w-0"}`}
-            >
-              {item.title}
-            </span>
+            <RailIcon>
+              <LogOut size={16} />
+            </RailIcon>
+            <RailLabel expanded={railExpanded}>{t("common.logout")}</RailLabel>
           </button>
-        ))}
-        <div className="mx-2 my-1 border-t border-border" />
-        <button
-          onClick={() => onLogout({ manual: true })}
-          style={btnStyle}
-          title={t("common.logout")}
-          aria-label={t("common.logout")}
-          className={`${btnBase} text-muted-foreground hover:text-destructive hover:bg-destructive/10`}
-        >
-          <span
-            className="shrink-0 flex items-center justify-center"
-            style={{ width: rem(16), height: rem(16) }}
-          >
-            <LogOut size={16} />
-          </span>
-          <span
-            className={`text-xs font-medium whitespace-nowrap overflow-hidden transition-[opacity,width] duration-150 ${railExpanded ? "opacity-100 delay-75" : "opacity-0 w-0"}`}
-          >
-            {t("common.logout")}
-          </span>
-        </button>
+        )}
       </div>
 
       <div className="shrink-0 border-t border-border">
         <button
-          onClick={() => onRailClick("user-profile")}
-          title={t("nav.userProfile")}
-          aria-label={t("nav.userProfile")}
-          className="flex items-center gap-2.5 w-full h-10 text-muted-foreground hover:text-foreground hover:bg-muted/60 transition-colors"
-          style={{ padding: "0 8px" }}
+          type="button"
+          onClick={onOpenSettings}
+          title={t("nav.openSettings")}
+          aria-label={t("nav.openSettings")}
+          className="flex items-center gap-2.5 w-full h-10 text-muted-foreground hover:text-foreground hover:bg-muted/60 transition-colors focus-visible:ring-1 focus-visible:ring-ring"
+          style={{ padding: `0 ${rem(8)}` }}
         >
           <div
             className="rounded-full bg-accent-brand/20 border border-accent-brand/30 flex items-center justify-center font-bold text-accent-brand shrink-0"
@@ -577,7 +481,7 @@ export function AppRail({
             }`}
           >
             <span className="text-xs font-semibold leading-tight whitespace-nowrap">
-              {username || "User"}
+              {username || t("nav.roleUser")}
             </span>
             <span className="text-[10px] text-muted-foreground leading-tight whitespace-nowrap">
               {isAdmin ? t("nav.roleAdministrator") : t("nav.roleUser")}
@@ -589,79 +493,101 @@ export function AppRail({
       {menuPos && (
         <div
           data-rail-context-menu
+          role="menu"
           style={{ position: "fixed", left: menuPos.x, top: menuPos.y }}
-          className="z-[10000] bg-popover border border-border shadow-lg py-1 min-w-[190px]"
+          className="z-[10000] bg-popover border border-border shadow-lg py-1 min-w-[200px]"
         >
           {menuTarget && (
             <>
               {menuTarget.promotable && (
-                <button
+                <MenuItem
+                  icon={<SquareArrowOutUpRight className="size-3" />}
                   onClick={() => {
-                    onOpenTab?.(menuTarget.view as TabType);
+                    onOpenTab?.(menuTarget.id as TabType);
                     setMenuPos(null);
                   }}
-                  className="flex items-center gap-2 w-full px-3 py-1.5 text-xs text-left hover:bg-accent hover:text-accent-foreground"
                 >
-                  <span className="shrink-0 w-3 flex items-center justify-center">
-                    <SquareArrowOutUpRight className="size-3" />
-                  </span>
                   {t("nav.openAsTab")}
-                </button>
+                </MenuItem>
               )}
               {menuTarget.rightDockable && (
-                <button
+                <MenuItem
+                  icon={<PanelRight className="size-3" />}
                   onClick={() => {
-                    onOpenInRightDock?.(menuTarget.view);
+                    onOpenInRightDock?.(menuTarget.id);
                     setMenuPos(null);
                   }}
-                  className="flex items-center gap-2 w-full px-3 py-1.5 text-xs text-left hover:bg-accent hover:text-accent-foreground"
                 >
-                  <span className="shrink-0 w-3 flex items-center justify-center">
-                    <PanelRight className="size-3" />
-                  </span>
                   {t("nav.openInRightDock")}
-                </button>
+                </MenuItem>
+              )}
+              {menuTarget.hideable && (
+                <MenuItem
+                  icon={<EyeOff className="size-3" />}
+                  onClick={() => {
+                    void toggleHiddenRailTab(menuTarget.id);
+                    setMenuPos(null);
+                  }}
+                >
+                  {t("nav.hideFromRail")}
+                </MenuItem>
               )}
               <div className="h-px bg-border my-1" />
             </>
           )}
-          <button
+          <MenuItem
+            icon={pinned ? <Check className="size-3" /> : null}
             onClick={togglePinned}
-            className="flex items-center gap-2 w-full px-3 py-1.5 text-xs text-left hover:bg-accent hover:text-accent-foreground"
-            role="menuitemcheckbox"
-            aria-checked={pinned}
+            checked={pinned}
           >
-            <span className="shrink-0 w-3 flex items-center justify-center">
-              {pinned && <Check className="size-3" />}
-            </span>
             {t("newUi.sidebar.userProfile.pinAppRail")}
-          </button>
-          <button
+          </MenuItem>
+          <MenuItem
+            icon={expandOnHover ? <Check className="size-3" /> : null}
             onClick={toggleExpandOnHover}
-            className="flex items-center gap-2 w-full px-3 py-1.5 text-xs text-left hover:bg-accent hover:text-accent-foreground"
-            role="menuitemcheckbox"
-            aria-checked={expandOnHover}
+            checked={expandOnHover}
           >
-            <span className="shrink-0 w-3 flex items-center justify-center">
-              {expandOnHover && <Check className="size-3" />}
-            </span>
             {t("newUi.sidebar.userProfile.expandAppRailOnHover")}
-          </button>
+          </MenuItem>
           <div className="h-px bg-border my-1" />
-          <button
+          <MenuItem
+            icon={<SlidersHorizontal className="size-3" />}
             onClick={() => {
-              onRailClick("user-profile");
+              onOpenNavigationSettings();
               setMenuPos(null);
             }}
-            className="flex items-center gap-2 w-full px-3 py-1.5 text-xs text-left hover:bg-accent hover:text-accent-foreground"
           >
-            <span className="shrink-0 w-3 flex items-center justify-center">
-              <SlidersHorizontal className="size-3" />
-            </span>
-            {t("nav.sidebarSettings")}
-          </button>
+            {t("nav.openSettings")}
+          </MenuItem>
         </div>
       )}
     </div>
   );
 }
+
+function MenuItem({
+  icon,
+  onClick,
+  checked,
+  children,
+}: {
+  icon: React.ReactNode;
+  onClick: () => void;
+  checked?: boolean;
+  children: React.ReactNode;
+}) {
+  return (
+    <button
+      type="button"
+      role={checked === undefined ? "menuitem" : "menuitemcheckbox"}
+      aria-checked={checked}
+      onClick={onClick}
+      className="flex items-center gap-2 w-full px-3 py-1.5 text-xs text-left hover:bg-accent hover:text-accent-foreground"
+    >
+      <span className="shrink-0 w-3 flex items-center justify-center">
+        {icon}
+      </span>
+      {children}
+    </button>
+  );
+}
diff --git a/src/ui/sidebar/ConnectionsPanel.tsx b/src/ui/sidebar/ConnectionsPanel.tsx
index 58c8498fa..ed5dcb12b 100644
--- a/src/ui/sidebar/ConnectionsPanel.tsx
+++ b/src/ui/sidebar/ConnectionsPanel.tsx
@@ -1,8 +1,9 @@
+import { useConfirm } from "@/components/surface/surface-scope";
 import { getTabType, isPersistentTabType } from "@/shell/tab-registry";
 import { ComponentSlot } from "@/shell/ActionSlot";
 import { useState, useEffect, useRef, useCallback } from "react";
 import { useTranslation } from "react-i18next";
-import { ExternalLink, Plug, Search, X, Pencil, Check } from "lucide-react";
+import { ExternalLink, Plug, X, Pencil, Check } from "lucide-react";
 import {
   getActiveSessions,
   deleteOpenTab,
@@ -12,14 +13,9 @@ import {
 import { tabIcon } from "@/shell/tabUtils";
 import { getSessionTimeoutMinutes } from "@/api/open-tabs-api";
 import type { Tab, TabType } from "@/types/ui-types";
-import { Badge } from "@/components/badge";
-import { Input } from "@/components/input";
-import {
-  Tooltip,
-  TooltipContent,
-  TooltipProvider,
-  TooltipTrigger,
-} from "@/components/tooltip";
+import { EmptyState } from "@/components/empty-state";
+import { Facts, GroupHeading, PanelSearch } from "@/components/panel-layout";
+import { ListBadge, ListRow, ListRowAction } from "@/components/list-kit";
 import { usePageVisibleInterval } from "@/hooks/use-page-visible-interval";
 import { useAdaptivePolling } from "@/hooks/use-adaptive-polling";
 
@@ -80,6 +76,7 @@ function ConnectionRow({
   hostName,
   subLabel,
   icon,
+  stripe,
   onSwitch,
   onClose,
   switchTitle,
@@ -94,6 +91,7 @@ function ConnectionRow({
   hostName?: string;
   subLabel: string;
   icon: React.ReactNode;
+  stripe: number;
   onSwitch?: () => void;
   onClose: () => void;
   switchTitle?: string;
@@ -105,12 +103,6 @@ function ConnectionRow({
   const [editing, setEditing] = useState(false);
   const [editValue, setEditValue] = useState(name);
 
-  function startEdit(e: React.MouseEvent) {
-    e.stopPropagation();
-    setEditValue(name);
-    setEditing(true);
-  }
-
   function commitEdit() {
     const trimmed = editValue.trim();
     if (trimmed && trimmed !== name && onRename) {
@@ -119,155 +111,103 @@ function ConnectionRow({
     setEditing(false);
   }
 
-  function handleKeyDown(e: React.KeyboardEvent) {
-    if (e.key === "Enter") commitEdit();
-    if (e.key === "Escape") setEditing(false);
-  }
+  const registered = getTabType(tabType)?.titleKey;
+  const typeLabel =
+    CORE_TYPE_LABELS[tabType] ?? (registered ? t(registered) : tabType);
+  const stop = (e: React.PointerEvent) => e.stopPropagation();
 
   return (
-    <div
-      role={onSwitch && !editing ? "button" : undefined}
-      tabIndex={onSwitch && !editing ? 0 : undefined}
+    <ListRow
+      stripe={stripe}
+      tone={isLive ? "success" : "muted"}
+      selected={isActive}
+      active={editing}
+      dimmed={faded || isDragging}
       onClick={!editing ? onSwitch : undefined}
-      onKeyDown={(e) => !editing && e.key === "Enter" && onSwitch?.()}
-      className={`group flex items-center gap-2.5 px-3 py-2.5 border-b border-border/40 transition-colors last:border-b-0 ${
-        faded ? "opacity-60" : ""
-      } ${isDragging ? "opacity-30" : ""} ${
-        isActive
-          ? "bg-accent-brand/8 cursor-pointer border-l-2 border-l-accent-brand"
-          : onSwitch && !editing
-            ? "hover:bg-muted/40 cursor-pointer"
-            : ""
-      }`}
-    >
-      <div
-        className={`shrink-0 flex items-center justify-center size-7 rounded ${
-          isActive
-            ? "bg-accent-brand/15 text-accent-brand"
-            : "bg-muted/60 text-muted-foreground"
-        }`}
-      >
-        {icon}
-      </div>
-
-      <div className="flex flex-col flex-1 min-w-0 gap-0.5">
-        <div className="flex items-center gap-1.5 min-w-0">
-          <span
-            className={`shrink-0 size-1.5 rounded-full ${
-              isLive ? "bg-green-500" : "bg-muted-foreground/30"
-            }`}
+      icon={icon}
+      title={
+        editing ? (
+          <input
+            value={editValue}
+            onChange={(e) => setEditValue(e.target.value)}
+            onBlur={commitEdit}
+            onKeyDown={(e) => {
+              e.stopPropagation();
+              if (e.key === "Enter") commitEdit();
+              if (e.key === "Escape") setEditing(false);
+            }}
+            onClick={(e) => e.stopPropagation()}
+            onPointerDown={stop}
+            className="w-full min-w-0 border-b border-accent-brand bg-transparent text-[13px] font-semibold text-foreground outline-none"
+            autoFocus
           />
-          {editing ? (
-            <input
-              value={editValue}
-              onChange={(e) => setEditValue(e.target.value)}
-              onBlur={commitEdit}
-              onKeyDown={handleKeyDown}
-              onClick={(e) => e.stopPropagation()}
-              onPointerDown={(e) => e.stopPropagation()}
-              className="text-xs font-semibold flex-1 min-w-0 bg-transparent border-b border-accent-brand outline-none text-foreground"
-              autoFocus
-            />
-          ) : (
-            <span
-              className={`text-xs font-semibold truncate flex-1 ${
-                isActive ? "text-accent-brand" : "text-foreground"
-              }`}
-            >
-              {name}
-            </span>
-          )}
-          <Badge
-            variant="outline"
-            className="text-[9px] px-1 py-0 h-4 font-mono shrink-0 text-muted-foreground/60 border-border/60"
+        ) : (
+          name
+        )
+      }
+      badges={<ListBadge className="ml-auto font-mono">{typeLabel}</ListBadge>}
+      meta={
+        <Facts>
+          {hostName && hostName !== name ? <span>{hostName}</span> : null}
+          <span>{subLabel}</span>
+        </Facts>
+      }
+      actions={
+        editing ? (
+          <ListRowAction
+            label={t("common.save")}
+            tone="brand"
+            onPointerDown={stop}
+            onClick={commitEdit}
           >
-            {CORE_TYPE_LABELS[tabType] ??
-              (getTabType(tabType)?.titleKey
-                ? t(getTabType(tabType)!.titleKey!)
-                : tabType)}
-          </Badge>
-        </div>
-        <span className="text-[10px] text-muted-foreground/60 truncate pl-3">
-          {hostName && hostName !== name ? (
-            <span className="text-muted-foreground/50 mr-2.5">{hostName}</span>
-          ) : null}
-          {subLabel}
-        </span>
-      </div>
-
-      <TooltipProvider>
-        <div className="shrink-0 flex items-center gap-0.5 opacity-0 group-hover:opacity-100 transition-opacity">
-          {editing ? (
-            <button
-              onClick={(e) => {
-                e.stopPropagation();
-                commitEdit();
-              }}
-              className="size-6 flex items-center justify-center text-accent-brand hover:bg-muted/60 rounded transition-colors"
+            <Check />
+          </ListRowAction>
+        ) : (
+          <>
+            {onRename && (
+              <ListRowAction
+                label={t("connections.rename")}
+                onPointerDown={stop}
+                onClick={() => {
+                  setEditValue(name);
+                  setEditing(true);
+                }}
+              >
+                <Pencil />
+              </ListRowAction>
+            )}
+            {switchTitle && onSwitch && (
+              <ListRowAction
+                label={switchTitle}
+                tone="brand"
+                onPointerDown={stop}
+                onClick={onSwitch}
+              >
+                <ExternalLink />
+              </ListRowAction>
+            )}
+            <ListRowAction
+              label={t("common.close")}
+              tone="destructive"
+              onPointerDown={stop}
+              onClick={onClose}
             >
-              <Check className="size-3" />
-            </button>
-          ) : (
-            onRename && (
-              <Tooltip>
-                <TooltipTrigger asChild>
-                  <button
-                    onClick={startEdit}
-                    onPointerDown={(e) => e.stopPropagation()}
-                    className="size-6 flex items-center justify-center text-muted-foreground/50 hover:text-foreground hover:bg-muted/60 rounded transition-colors"
-                  >
-                    <Pencil className="size-3" />
-                  </button>
-                </TooltipTrigger>
-                <TooltipContent side="left">
-                  {t("connections.rename")}
-                </TooltipContent>
-              </Tooltip>
-            )
-          )}
-          {switchTitle && onSwitch && !editing && (
-            <Tooltip>
-              <TooltipTrigger asChild>
-                <button
-                  onClick={(e) => {
-                    e.stopPropagation();
-                    onSwitch();
-                  }}
-                  className="size-6 flex items-center justify-center text-muted-foreground/50 hover:text-foreground hover:bg-muted/60 rounded transition-colors"
-                >
-                  <ExternalLink className="size-3" />
-                </button>
-              </TooltipTrigger>
-              <TooltipContent side="left">{switchTitle}</TooltipContent>
-            </Tooltip>
-          )}
-          {!editing && (
-            <button
-              onClick={(e) => {
-                e.stopPropagation();
-                onClose();
-              }}
-              className="size-6 flex items-center justify-center text-muted-foreground/50 hover:text-destructive hover:bg-destructive/10 rounded transition-colors"
-            >
-              <X className="size-3" />
-            </button>
-          )}
-        </div>
-      </TooltipProvider>
-    </div>
+              <X />
+            </ListRowAction>
+          </>
+        )
+      }
+    />
   );
 }
 
 function SectionHeader({ label, count }: { label: string; count: number }) {
   return (
-    <div className="flex items-center gap-2 px-3 py-2 border-b border-border/60 bg-muted/20">
-      <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground/60 flex-1">
-        {label}
-      </span>
-      <span className="text-[10px] font-semibold text-muted-foreground/40 bg-muted/60 rounded px-1.5 py-0.5">
-        {count}
-      </span>
-    </div>
+    <GroupHeading
+      title={label}
+      count={count}
+      className="border-b border-border/40 px-3 pb-1.5 pt-2.5"
+    />
   );
 }
 
@@ -298,6 +238,7 @@ export function ConnectionsPanel({
   onReorderTabs?: (tabs: Tab[]) => void;
 }) {
   const { t } = useTranslation();
+  const confirm = useConfirm();
   const [now, setNow] = useState(Date.now());
 
   const [persistMinutes, setPersistMinutes] = useState(30);
@@ -448,42 +389,28 @@ export function ConnectionsPanel({
     return (
       <div className="flex flex-col flex-1">
         {pluginSections}
-        <div className="flex flex-col items-center justify-center flex-1 gap-3 p-6 text-center py-16">
-          <div className="size-10 rounded-full bg-muted/40 flex items-center justify-center">
-            <Plug className="size-5 text-muted-foreground/30" />
-          </div>
-          <div className="flex flex-col gap-1">
-            <span className="text-sm font-semibold text-muted-foreground/60">
-              {t("connections.noConnections")}
-            </span>
-            <span className="text-xs text-muted-foreground/40">
-              {t("connections.noConnectionsDesc")}
-            </span>
-          </div>
-        </div>
+        <EmptyState
+          icon={Plug}
+          title={t("connections.noConnections")}
+          hint={t("connections.noConnectionsDesc")}
+          className="flex-1"
+        />
       </div>
     );
   }
 
   return (
     <div className="flex flex-col">
-      <div className="relative px-3 py-2 border-b border-border/60">
-        <Search className="absolute left-5.5 top-1/2 -translate-y-1/2 size-3.5 text-muted-foreground/50 pointer-events-none" />
-        <Input
-          placeholder={t("connections.search")}
+      <div className="flex items-center gap-2 border-b border-border px-3 py-2">
+        <PanelSearch
           value={search}
-          onChange={(e) => setSearch(e.target.value)}
-          className="pl-8 h-7 text-xs"
+          onChange={setSearch}
+          placeholder={t("connections.search")}
+          fill
         />
       </div>
 
-      {!hasResults && (
-        <div className="flex flex-col items-center justify-center gap-2 py-10 text-center">
-          <span className="text-xs text-muted-foreground/50">
-            {t("connections.noSearchResults")}
-          </span>
-        </div>
-      )}
+      {!hasResults && <EmptyState title={t("connections.noSearchResults")} />}
 
       {filteredOpenTabs.length > 0 && (
         <div className="flex flex-col">
@@ -491,7 +418,7 @@ export function ConnectionsPanel({
             label={t("connections.sectionOpen")}
             count={filteredOpenTabs.length}
           />
-          {filteredOpenTabs.map((tab) => {
+          {filteredOpenTabs.map((tab, index) => {
             const isActive = tab.id === activeTabId;
             const liveSession = tab.instanceId
               ? sessionByInstanceId.get(tab.instanceId)
@@ -522,7 +449,7 @@ export function ConnectionsPanel({
                   didDragRef.current = false;
                   setDragTabId(tab.id);
                 }}
-                className={`relative ${isDropTarget ? "border-t-2 border-accent-brand" : ""}`}
+                className={`relative ${isDropTarget ? "before:absolute before:inset-x-0 before:-top-px before:z-20 before:h-0.5 before:bg-accent-brand" : ""}`}
                 style={{
                   cursor: dragTabId
                     ? isDraggingThis
@@ -532,6 +459,7 @@ export function ConnectionsPanel({
                 }}
               >
                 <ConnectionRow
+                  stripe={index}
                   isActive={isActive}
                   isLive={isLive}
                   tabType={tab.type}
@@ -563,9 +491,7 @@ export function ConnectionsPanel({
       )}
 
       {filteredBackgroundTabs.length > 0 && (
-        <div
-          className={`flex flex-col ${filteredOpenTabs.length > 0 ? "mt-2" : ""}`}
-        >
+        <div className="flex flex-col">
           <SectionHeader
             label={t("connections.sectionBackground")}
             count={filteredBackgroundTabs.length}
@@ -577,7 +503,7 @@ export function ConnectionsPanel({
               })}
             </span>
           </div>
-          {filteredBackgroundTabs.map((record) => {
+          {filteredBackgroundTabs.map((record, index) => {
             const host = record.hostId
               ? allHosts.find((h) => h.id === String(record.hostId))
               : undefined;
@@ -586,6 +512,7 @@ export function ConnectionsPanel({
             return (
               <ConnectionRow
                 key={record.id}
+                stripe={index}
                 isLive={false}
                 faded
                 tabType={record.tabType}
@@ -597,6 +524,13 @@ export function ConnectionsPanel({
                   onReopenTab(record, liveSession?.sessionId ?? null);
                 }}
                 onClose={async () => {
+                  const ok = await confirm({
+                    title: t("connections.forgetConfirm", {
+                      name: host?.name ?? record.label,
+                    }),
+                    confirmLabel: t("connections.forget"),
+                  });
+                  if (!ok) return;
                   await deleteOpenTab(record.id).catch(() => {});
                   onForgetBackground(record.id);
                 }}
diff --git a/src/ui/sidebar/CredentialEditorView.tsx b/src/ui/sidebar/CredentialEditorView.tsx
index 9fa4fb841..f9abe00de 100644
--- a/src/ui/sidebar/CredentialEditorView.tsx
+++ b/src/ui/sidebar/CredentialEditorView.tsx
@@ -1,4 +1,6 @@
+import type React from "react";
 import { useRef, useState } from "react";
+import { EditorPane, EditorSection } from "@/manage/EditorPane";
 import { PluginComponent } from "@/plugin-host/component-registry";
 import { useTranslation } from "react-i18next";
 import { copyToClipboard } from "@/lib/clipboard";
@@ -23,7 +25,7 @@ import { FolderPathPicker } from "./FolderPathPicker";
 
 export function CredentialEditorView({
   credential,
-  activeTab,
+  banner,
   onBack,
   onSave,
   adminTargetUserId,
@@ -31,7 +33,8 @@ export function CredentialEditorView({
   saveAsNewHost,
 }: {
   credential: Credential | null;
-  activeTab: string;
+  /** Shown above the form. */
+  banner?: React.ReactNode;
   onBack: () => void;
   onSave: (
     saved: Record<string, unknown>,
@@ -170,9 +173,73 @@ export function CredentialEditorView({
     }
   };
 
+  const nameMissing = !credForm.name.trim();
+  const bands = [
+    {
+      id: "credential",
+      label: t("manage.bandCredential"),
+      items: [
+        {
+          id: "general",
+          label: t("hosts.basicInformation"),
+          icon: <Info className="size-3.5" />,
+          error: nameMissing,
+        },
+        {
+          id: "auth",
+          label: t("hosts.authDetailsSection"),
+          icon: <Lock className="size-3.5" />,
+        },
+      ],
+    },
+  ];
+
   return (
-    <div className="flex flex-col gap-3">
-      {activeTab === "general" && (
+    <EditorPane
+      bands={bands}
+      banner={banner}
+      errorCount={nameMissing ? 1 : 0}
+      footer={
+        <>
+          <Button
+            variant="ghost"
+            size="sm"
+            onClick={onBack}
+            disabled={saving || savingAsNew}
+          >
+            {t("hosts.cancelBtn")}
+          </Button>
+          {saveAsNewHost && credential && !adminTargetUserId && (
+            <Button
+              variant="outline"
+              size="sm"
+              className="px-4"
+              onClick={handleSaveAsNew}
+              disabled={saving || savingAsNew || nameMissing}
+              title={t("hosts.saveCredentialAsNewDesc")}
+            >
+              {savingAsNew
+                ? t("hosts.savingBtn")
+                : t("hosts.saveCredentialAsNewBtn")}
+            </Button>
+          )}
+          <Button
+            variant="outline"
+            size="sm"
+            className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand px-6"
+            onClick={handleSave}
+            disabled={saving || savingAsNew || nameMissing}
+          >
+            {saving
+              ? t("hosts.savingBtn")
+              : credential
+                ? t("hosts.updateCredentialBtn")
+                : t("hosts.addCredentialBtn")}
+          </Button>
+        </>
+      }
+    >
+      <EditorSection id="general" showHeading={false}>
         <SectionCard
           title={t("hosts.basicInformation")}
           icon={<Info className="size-3.5" />}
@@ -265,9 +332,9 @@ export function CredentialEditorView({
             </div>
           </div>
         </SectionCard>
-      )}
+      </EditorSection>
 
-      {activeTab === "auth" && (
+      <EditorSection id="auth" showHeading={false}>
         <SectionCard
           title={t("hosts.authDetailsSection")}
           icon={<Lock className="size-3.5" />}
@@ -544,42 +611,7 @@ export function CredentialEditorView({
             </div>
           </div>
         </SectionCard>
-      )}
-
-      <div className="flex justify-end gap-3 mt-3">
-        <Button
-          variant="ghost"
-          onClick={onBack}
-          disabled={saving || savingAsNew}
-        >
-          {t("hosts.cancelBtn")}
-        </Button>
-        {saveAsNewHost && credential && !adminTargetUserId && (
-          <Button
-            variant="outline"
-            className="px-6"
-            onClick={handleSaveAsNew}
-            disabled={saving || savingAsNew}
-            title={t("hosts.saveCredentialAsNewDesc")}
-          >
-            {savingAsNew
-              ? t("hosts.savingBtn")
-              : t("hosts.saveCredentialAsNewBtn")}
-          </Button>
-        )}
-        <Button
-          variant="outline"
-          className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand px-8"
-          onClick={handleSave}
-          disabled={saving || savingAsNew}
-        >
-          {saving
-            ? t("hosts.savingBtn")
-            : credential
-              ? t("hosts.updateCredentialBtn")
-              : t("hosts.addCredentialBtn")}
-        </Button>
-      </div>
-    </div>
+      </EditorSection>
+    </EditorPane>
   );
 }
diff --git a/src/ui/sidebar/CredentialList.tsx b/src/ui/sidebar/CredentialList.tsx
new file mode 100644
index 000000000..e02d24424
--- /dev/null
+++ b/src/ui/sidebar/CredentialList.tsx
@@ -0,0 +1,321 @@
+import { useEffect, useState } from "react";
+import { useTranslation } from "react-i18next";
+import { toast } from "sonner";
+import { Upload } from "lucide-react";
+import { Button } from "@/components/button";
+import { Select2 } from "@/components/select2";
+import { InlineView, useConfirm } from "@/components/surface/surface-scope";
+import {
+  deleteCredential,
+  deployCredentialToHost,
+  duplicateCredential,
+  getCredentials,
+  getSSHHosts,
+  renameCredentialFolder,
+  updateCredential,
+} from "@/main-axios";
+import { requestManage } from "@/manage/manage-requests";
+import type { Credential, Host } from "@/types/ui-types";
+import type {
+  CredentialRowFields,
+  CredentialSidebarFilterState,
+  CredentialSortKey,
+} from "@/types/credential-sidebar-preferences";
+import { CredentialShareModal } from "./CredentialShareModal";
+import { CredentialSidebarTree } from "./credential-tree";
+import { credentialPassesFilters, sortCredentials } from "./credential-sort";
+import { enabledHostProtocols } from "./host-protocols";
+import { mapCredentials, sshHostToHost } from "./HostManagerData";
+
+const UNCATEGORIZED = "Uncategorized";
+
+/**
+ * The credentials sidebar list. Editing happens in the Manage tab; this keeps
+ * the tree, its folder moves and the quick actions on each row.
+ */
+export function CredentialList({
+  search = "",
+  sort = "default",
+  arrangeLocked = true,
+  filter,
+  density = "comfortable",
+  trayTrigger = "hover",
+  showTags = true,
+  rowFields,
+  onTagsChange,
+}: {
+  search?: string;
+  sort?: CredentialSortKey;
+  arrangeLocked?: boolean;
+  filter?: CredentialSidebarFilterState;
+  density?: "comfortable" | "compact";
+  trayTrigger?: "always" | "hover" | "click" | "actionsOnly";
+  showTags?: boolean;
+  rowFields?: CredentialRowFields;
+  onTagsChange?: (tags: string[]) => void;
+}) {
+  const { t } = useTranslation();
+  const confirm = useConfirm();
+  const [hosts, setHosts] = useState<Host[]>([]);
+  const [credentials, setCredentials] = useState<Credential[]>([]);
+  const [loading, setLoading] = useState(true);
+  const [shareCredential, setShareCredential] = useState<Credential | null>(
+    null,
+  );
+  const [deployTarget, setDeployTarget] = useState<Credential | null>(null);
+  const [deployHostId, setDeployHostId] = useState("");
+  const [deploying, setDeploying] = useState(false);
+  const [editingFolderName, setEditingFolderName] = useState<string | null>(
+    null,
+  );
+  const [editingFolderValue, setEditingFolderValue] = useState("");
+
+  useEffect(() => {
+    onTagsChange?.([...new Set(credentials.flatMap((c) => c.tags ?? []))]);
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [credentials]);
+
+  useEffect(() => {
+    const reloadHosts = () => {
+      getSSHHosts()
+        .then((raw) => setHosts(raw.map(sshHostToHost)))
+        .catch(() => {});
+    };
+    const reloadCredentials = () => {
+      getCredentials()
+        .then((res) => setCredentials(mapCredentials(res)))
+        .catch(() => {})
+        .finally(() => setLoading(false));
+    };
+    reloadHosts();
+    reloadCredentials();
+    window.addEventListener("termix:hosts-changed", reloadHosts);
+    window.addEventListener("ssh-hosts:changed", reloadHosts);
+    window.addEventListener("termix:credentials-changed", reloadCredentials);
+    return () => {
+      window.removeEventListener("termix:hosts-changed", reloadHosts);
+      window.removeEventListener("ssh-hosts:changed", reloadHosts);
+      window.removeEventListener(
+        "termix:credentials-changed",
+        reloadCredentials,
+      );
+    };
+  }, []);
+
+  const needle = search.toLowerCase();
+  const searched = credentials.filter(
+    (c) =>
+      c.name.toLowerCase().includes(needle) ||
+      c.username.toLowerCase().includes(needle),
+  );
+  const filtered = sortCredentials(
+    filter
+      ? searched.filter((c) => credentialPassesFilters(c, filter))
+      : searched,
+    sort,
+  );
+  const folderNames = Array.from(
+    new Set(filtered.map((c) => c.folder || UNCATEGORIZED)),
+  ).sort();
+  const folderTree = folderNames.map((name) => ({
+    name,
+    children: filtered.filter((c) => (c.folder || UNCATEGORIZED) === name),
+  }));
+  const usedByCounts = new Map<string, number>();
+  for (const cred of filtered) {
+    usedByCounts.set(
+      cred.id,
+      hosts.filter((h) => h.credentialId === cred.id).length,
+    );
+  }
+
+  const reload = async () => {
+    const res = await getCredentials();
+    setCredentials(mapCredentials(res));
+  };
+
+  const renameFolder = async (folder: string, newName: string) => {
+    try {
+      await renameCredentialFolder(folder, newName);
+      await reload();
+      toast.success(t("credentials.folderRenamedTo", { name: newName }));
+    } catch {
+      toast.error(t("credentials.failedToRenameFolder"));
+    }
+  };
+
+  const moveToFolder = async (credentialId: string, targetFolder: string) => {
+    const cred = credentials.find((c) => c.id === credentialId);
+    if (!cred || (cred.folder || UNCATEGORIZED) === targetFolder) return;
+    const folderValue = targetFolder === UNCATEGORIZED ? "" : targetFolder;
+    try {
+      await updateCredential(Number(credentialId), { folder: folderValue });
+      setCredentials((prev) =>
+        prev.map((c) =>
+          c.id === credentialId ? { ...c, folder: folderValue } : c,
+        ),
+      );
+    } catch {
+      toast.error(t("credentials.failedToMoveCredential"));
+    }
+  };
+
+  const clone = async (cred: Credential) => {
+    try {
+      await duplicateCredential(Number(cred.id), {
+        name: t("credentials.clonedCredentialName", { name: cred.name }),
+      });
+      await reload();
+      window.dispatchEvent(new CustomEvent("termix:credentials-changed"));
+      toast.success(t("credentials.clonedCredential", { name: cred.name }));
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : null;
+      toast.error(msg || t("credentials.failedToCloneCredential"));
+    }
+  };
+
+  const remove = async (cred: Credential) => {
+    const ok = await confirm({
+      title: t("credentials.deleteCredentialConfirm", { name: cred.name }),
+      description: t("manage.cannotBeUndone"),
+    });
+    if (!ok) return;
+    try {
+      await deleteCredential(Number(cred.id));
+      setCredentials((prev) => prev.filter((c) => c.id !== cred.id));
+      window.dispatchEvent(new CustomEvent("termix:credentials-changed"));
+      toast.success(t("credentials.deletedCredential", { name: cred.name }));
+    } catch {
+      toast.error(t("credentials.failedToDeleteCredential"));
+    }
+  };
+
+  const deploy = async () => {
+    if (!deployTarget || !deployHostId) return;
+    setDeploying(true);
+    try {
+      await deployCredentialToHost(
+        Number(deployTarget.id),
+        Number(deployHostId),
+      );
+      toast.success(t("credentials.keyDeployedSuccess"));
+      setDeployTarget(null);
+    } catch {
+      toast.error(t("credentials.failedToDeployKey"));
+    } finally {
+      setDeploying(false);
+    }
+  };
+
+  return (
+    <div className="relative flex min-h-0 flex-1 flex-col overflow-hidden">
+      {!loading && filtered.length === 0 ? (
+        <div className="flex flex-col items-center justify-center px-4 py-12 text-center">
+          <span className="text-sm font-semibold text-muted-foreground/60">
+            {t("credentials.noCredentialsFound")}
+          </span>
+          <Button
+            variant="outline"
+            size="sm"
+            className="mt-3 h-7 border-accent-brand/40 text-xs text-accent-brand hover:bg-accent-brand/10"
+            onClick={() =>
+              requestManage({ kind: "credential", credentialId: null })
+            }
+          >
+            {t("credentials.addCredentialBtn")}
+          </Button>
+        </div>
+      ) : (
+        <CredentialSidebarTree
+          folders={folderTree}
+          usedByCounts={usedByCounts}
+          query=""
+          loading={loading}
+          arrangeLocked={arrangeLocked}
+          density={density}
+          trayTrigger={trayTrigger}
+          showTags={showTags}
+          rowFields={rowFields}
+          editingFolderName={editingFolderName}
+          editingFolderValue={editingFolderValue}
+          onEditingFolderNameChange={setEditingFolderName}
+          onEditingFolderValueChange={setEditingFolderValue}
+          onRenameFolder={renameFolder}
+          onMoveCredentialToFolder={moveToFolder}
+          onDeployCredential={(cred) => {
+            setDeployHostId("");
+            setDeployTarget(cred);
+          }}
+          onEditCredential={(cred) =>
+            requestManage({ kind: "credential", credentialId: cred.id })
+          }
+          onCloneCredential={clone}
+          onDeleteCredential={remove}
+          onShareCredential={setShareCredential}
+        />
+      )}
+
+      <CredentialShareModal
+        credential={shareCredential}
+        onClose={() => setShareCredential(null)}
+      />
+
+      <InlineView
+        open={!!deployTarget}
+        onOpenChange={(open) => {
+          if (!open) setDeployTarget(null);
+        }}
+        icon={<Upload className="size-4" />}
+        title={t("credentials.deployDialogTitle")}
+        footer={
+          <div className="ml-auto flex gap-2">
+            <Button
+              variant="ghost"
+              size="sm"
+              onClick={() => setDeployTarget(null)}
+              disabled={deploying}
+            >
+              {t("hosts.cancelBtn")}
+            </Button>
+            <Button
+              variant="outline"
+              size="sm"
+              className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10"
+              disabled={!deployHostId || deploying}
+              onClick={() => void deploy()}
+            >
+              {deploying
+                ? t("credentials.deployingBtn")
+                : t("credentials.deployBtn")}
+            </Button>
+          </div>
+        }
+      >
+        <p className="text-xs text-muted-foreground">
+          {t("credentials.deployDialogDesc", { name: deployTarget?.name })}
+        </p>
+        <div className="flex flex-col gap-1.5">
+          <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
+            {t("credentials.targetHostLabel")}
+          </label>
+          <Select2
+            className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
+            value={deployHostId}
+            onChange={(e) => setDeployHostId(e.target.value)}
+          >
+            <option value="">{t("credentials.selectHostOption")}</option>
+            {hosts
+              .filter(
+                (h) => h.enableSsh || enabledHostProtocols(h).length === 0,
+              )
+              .map((h) => (
+                <option key={h.id} value={h.id}>
+                  {h.name || h.ip}
+                </option>
+              ))}
+          </Select2>
+        </div>
+      </InlineView>
+    </div>
+  );
+}
diff --git a/src/ui/sidebar/CredentialShareModal.tsx b/src/ui/sidebar/CredentialShareModal.tsx
index 0830a3c44..4382e84c3 100644
--- a/src/ui/sidebar/CredentialShareModal.tsx
+++ b/src/ui/sidebar/CredentialShareModal.tsx
@@ -2,7 +2,6 @@ import { useCallback, useEffect, useMemo, useState } from "react";
 import { useTranslation } from "react-i18next";
 import { toast } from "sonner";
 import {
-  ArrowLeft,
   Check,
   ListChecks,
   Search,
@@ -13,6 +12,7 @@ import {
   X,
 } from "lucide-react";
 import { Button } from "@/components/button";
+import { InlineView, useConfirm } from "@/components/surface/surface-scope";
 import { Input } from "@/components/input";
 import {
   DropdownMenu,
@@ -29,9 +29,11 @@ import {
   type CredentialPermissionLevel,
   type ShareTarget,
 } from "@/api/rbac-api";
-import { getUserList, type AccessRecord } from "@/main-axios";
+import { getUserInfo, getUserList, type AccessRecord } from "@/main-axios";
 import type { Credential } from "@/types/ui-types";
 import { getErrorMessage } from "@/lib/error-message";
+import { DocsLink } from "@/components/docs-link";
+import { roleLabel } from "@/lib/role-label";
 
 const PERMISSION_LEVELS: CredentialPermissionLevel[] = ["use", "manage"];
 
@@ -72,6 +74,7 @@ export function CredentialShareModal({
   onClose: () => void;
 }) {
   const { t } = useTranslation();
+  const confirm = useConfirm();
   const [targetTab, setTargetTab] = useState<"user" | "role">("user");
   const [search, setSearch] = useState("");
   const [shareUsers, setShareUsers] = useState<
@@ -117,14 +120,15 @@ export function CredentialShareModal({
       getCredentialAccess(credentialId).catch(() => ({ access: [] })),
       getUserList().catch(() => ({ users: [] })),
       getRoles().catch(() => ({ roles: [] })),
+      getUserInfo().catch(() => null),
     ])
-      .then(([accessRes, usersRes, rolesRes]) => {
+      .then(([accessRes, usersRes, rolesRes, me]) => {
         setAccessList(accessRes.access ?? []);
+        // Nobody shares a credential with themselves.
         setShareUsers(
-          (usersRes.users ?? []).map((u) => ({
-            id: String(u.userId),
-            username: u.username,
-          })),
+          (usersRes.users ?? [])
+            .map((u) => ({ id: String(u.userId), username: u.username }))
+            .filter((u) => u.id !== me?.userId),
         );
         setShareRoles(
           (rolesRes.roles ?? [])
@@ -228,6 +232,16 @@ export function CredentialShareModal({
 
   async function handleRevoke(record: AccessRecord) {
     if (!credentialId) return;
+    const who =
+      record.username ??
+      roleLabel(t, record.roleDisplayName) ??
+      record.roleName ??
+      "";
+    const ok = await confirm({
+      title: t("sharing.revokeConfirm", { name: who }),
+      confirmLabel: t("sharing.revoke"),
+    });
+    if (!ok) return;
     try {
       await revokeCredentialAccess(credentialId, record.id);
       setAccessList((prev) => prev.filter((entry) => entry.id !== record.id));
@@ -237,20 +251,16 @@ export function CredentialShareModal({
     }
   }
 
-  if (!credential) return null;
-
   return (
-    <div className="absolute inset-0 z-20 flex flex-col bg-sidebar">
-      <button
-        onClick={onClose}
-        className="flex items-center gap-2 px-3 py-2 shrink-0 border-b border-border text-xs text-muted-foreground hover:text-foreground transition-colors w-full text-left"
-      >
-        <ArrowLeft className="size-3.5 shrink-0" />
-        <span className="truncate">
-          {t("credentials.share.title", { name: credential.name ?? "" })}
-        </span>
-      </button>
-
+    <InlineView
+      open={!!credential}
+      onOpenChange={(open) => {
+        if (!open) onClose();
+      }}
+      icon={<Share2 className="size-4" />}
+      title={t("credentials.share.title", { name: credential?.name ?? "" })}
+      bare
+    >
       {loadError && (
         <div className="flex items-start gap-2 px-3 py-2 shrink-0 border-b border-destructive/30 bg-destructive/5 text-xs text-destructive">
           <Shield className="size-3.5 shrink-0 mt-0.5" />
@@ -264,14 +274,7 @@ export function CredentialShareModal({
             <Users className="size-3.5" />
             {t("hosts.sharing.shareWithSection")}
           </div>
-          <a
-            href="https://docs.termix.site/features/authentication/rbac"
-            target="_blank"
-            rel="noreferrer"
-            className="text-[10px] text-accent-brand hover:underline shrink-0"
-          >
-            {t("hosts.docsLink")}
-          </a>
+          <DocsLink core="sharing">{t("hosts.docsLink")}</DocsLink>
         </div>
 
         <p className="text-[11px] text-muted-foreground leading-snug">
@@ -378,7 +381,7 @@ export function CredentialShareModal({
                     </div>
                     <Shield className="size-3 text-muted-foreground shrink-0" />
                     <span className="truncate">
-                      {role.displayName || role.name}
+                      {roleLabel(t, role.displayName || role.name)}
                     </span>
                   </button>
                 );
@@ -501,7 +504,7 @@ export function CredentialShareModal({
                     )}
                     <span className="font-semibold truncate">
                       {record.username ??
-                        record.roleDisplayName ??
+                        roleLabel(t, record.roleDisplayName) ??
                         record.roleName ??
                         record.userId ??
                         record.roleId}
@@ -570,6 +573,6 @@ export function CredentialShareModal({
           })}
         </div>
       </div>
-    </div>
+    </InlineView>
   );
 }
diff --git a/src/ui/sidebar/CredentialsPanel.tsx b/src/ui/sidebar/CredentialsPanel.tsx
index 76e1d28cb..76881a65f 100644
--- a/src/ui/sidebar/CredentialsPanel.tsx
+++ b/src/ui/sidebar/CredentialsPanel.tsx
@@ -4,7 +4,6 @@ import { useTranslation } from "react-i18next";
 import {
   ArrowUpDown,
   Check,
-  ExternalLink,
   Filter,
   GripVertical,
   Plus,
@@ -13,7 +12,8 @@ import {
   X,
 } from "lucide-react";
 import { toast } from "sonner";
-import { HostManager } from "@/sidebar/HostManager";
+import { CredentialList } from "@/sidebar/CredentialList";
+import { requestManage } from "@/manage/manage-requests";
 import { useCredentialSidebarPreferences } from "@/sidebar/credential-tree/hooks/useCredentialSidebarPreferences";
 import { useArrangeLock } from "@/sidebar/use-arrange-lock";
 import { CustomizeCredentialsSidebarPanel } from "@/sidebar/CustomizeCredentialsSidebarPanel";
@@ -28,10 +28,10 @@ import {
   DropdownMenuTrigger,
 } from "@/components/dropdown-menu";
 import type { CredentialSortKey } from "@/types/credential-sidebar-preferences";
+import { DocsLink } from "@/components/docs-link";
 
 export function CredentialsPanel({
-  onEditingChange,
-  active = true,
+  active: _active = true,
 }: {
   onEditingChange?: (editing: boolean) => void;
   active?: boolean;
@@ -41,7 +41,6 @@ export function CredentialsPanel({
   const { preferences: sidebarPrefs, update: updateSidebarPrefs } =
     useCredentialSidebarPreferences();
   const [search, setSearch] = useState("");
-  const [managerEditing, setManagerEditing] = useState(false);
   const [allTags, setAllTags] = useState<string[]>([]);
   const [customizePanelOpen, setCustomizePanelOpen] = useState(false);
 
@@ -94,14 +93,9 @@ export function CredentialsPanel({
     }));
   }
 
-  function handleEditingChange(editing: boolean) {
-    setManagerEditing(editing);
-    onEditingChange?.(editing);
-  }
-
   return (
     <div className="flex flex-col flex-1 min-h-0 overflow-hidden">
-      {!managerEditing && (
+      {
         <div className="flex flex-col px-2 py-1.5 shrink-0 border-b border-border/60 gap-1.5">
           <div className="flex items-center gap-2 px-2.5 h-7 bg-muted/60 border border-border/60 rounded-sm">
             <Search className="size-3 text-muted-foreground/60 shrink-0" />
@@ -275,15 +269,7 @@ export function CredentialsPanel({
                 </DropdownMenuContent>
               </DropdownMenu>
               <div className="w-px self-stretch bg-border" />
-              <a
-                href="https://docs.termix.site/features/files-and-hosts/credentials"
-                target="_blank"
-                rel="noreferrer"
-                title={t("hosts.docsLink")}
-                className="flex items-center justify-center size-7 text-muted-foreground hover:text-foreground shrink-0 transition-colors"
-              >
-                <ExternalLink className="size-3.5" />
-              </a>
+              <DocsLink core="credentials" variant="icon" />
             </div>
             <div className="flex items-center border border-border shrink-0">
               <button
@@ -297,9 +283,7 @@ export function CredentialsPanel({
             <div className="flex items-center border border-accent-brand/30 ml-auto shrink-0">
               <button
                 onClick={() =>
-                  window.dispatchEvent(
-                    new CustomEvent("host-manager:add-credential"),
-                  )
+                  requestManage({ kind: "credential", credentialId: null })
                 }
                 title={t("credentials.addCredential")}
                 className="flex items-center justify-center gap-1 h-7 px-2 text-[10px] font-medium text-accent-brand hover:bg-accent-brand/10 transition-colors"
@@ -312,21 +296,19 @@ export function CredentialsPanel({
             </div>
           </div>
         </div>
-      )}
+      }
 
       <div className="flex flex-col flex-1 min-h-0">
-        <HostManager
-          hideListHeader
-          externalSearch={managerEditing ? undefined : search}
-          externalSort={sortKey}
-          externalArrangeLocked={arrangeLocked}
-          externalFilter={filterState}
+        <CredentialList
+          search={search}
+          sort={sortKey}
+          arrangeLocked={arrangeLocked}
+          filter={filterState}
           density={sidebarPrefs.display.density}
           trayTrigger={sidebarPrefs.display.trayTrigger}
           showTags={sidebarPrefs.display.showTags}
+          rowFields={sidebarPrefs.display}
           onTagsChange={setAllTags}
-          onEditingChange={handleEditingChange}
-          active={active}
         />
       </div>
 
diff --git a/src/ui/sidebar/CustomizeCredentialsSidebarPanel.tsx b/src/ui/sidebar/CustomizeCredentialsSidebarPanel.tsx
index 030e2f795..d50b2b8af 100644
--- a/src/ui/sidebar/CustomizeCredentialsSidebarPanel.tsx
+++ b/src/ui/sidebar/CustomizeCredentialsSidebarPanel.tsx
@@ -1,17 +1,13 @@
+import { Select2 } from "@/components/select2";
+import { InlineView } from "@/components/surface/surface-scope";
 import { useTranslation } from "react-i18next";
-import { Rows3, SquareStack } from "lucide-react";
-import {
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogHeader,
-  DialogTitle,
-} from "@/components/dialog";
+import { ListChecks, Rows3, SquareStack } from "lucide-react";
 import { SectionCard, SettingRow, FakeSwitch } from "@/components/section-card";
-import type {
-  CredentialDensity,
-  CredentialSidebarPreferences,
-  CredentialTrayTrigger,
+import {
+  CREDENTIAL_ROW_FIELD_KEYS,
+  type CredentialDensity,
+  type CredentialSidebarPreferences,
+  type CredentialTrayTrigger,
 } from "@/types/credential-sidebar-preferences";
 
 export function CustomizeCredentialsSidebarPanel({
@@ -32,108 +28,130 @@ export function CustomizeCredentialsSidebarPanel({
   const { t } = useTranslation();
 
   return (
-    <Dialog open={open} onOpenChange={onOpenChange}>
-      <DialogContent className="sm:max-w-md max-h-[85vh] overflow-y-auto">
-        <DialogHeader>
-          <DialogTitle className="text-lg font-bold">
-            {t("credentials.customizeSidebar")}
-          </DialogTitle>
-          <DialogDescription className="text-xs text-muted-foreground">
-            {t("credentials.customizeSidebarDescription")}
-          </DialogDescription>
-        </DialogHeader>
-
-        <div className="flex flex-col gap-4 mt-1">
-          <SectionCard
-            title={t("credentials.customizeDensityTitle")}
-            icon={<Rows3 className="size-3.5" />}
+    <InlineView
+      open={open}
+      onOpenChange={onOpenChange}
+      title={t("credentials.customizeSidebar")}
+    >
+      <p className="text-xs text-muted-foreground">
+        {t("credentials.customizeSidebarDescription")}
+      </p>
+      <div className="flex flex-col gap-4 mt-1">
+        <SectionCard
+          title={t("credentials.customizeDensityTitle")}
+          icon={<Rows3 className="size-3.5" />}
+        >
+          <SettingRow
+            label={t("credentials.customizeDensityTitle")}
+            description={
+              preferences.display.density === "comfortable"
+                ? t("credentials.densityComfortableDesc")
+                : t("credentials.densityCompactDesc")
+            }
           >
-            <SettingRow
-              label={t("credentials.customizeDensityTitle")}
-              description={
-                preferences.display.density === "comfortable"
-                  ? t("credentials.densityComfortableDesc")
-                  : t("credentials.densityCompactDesc")
+            <Select2
+              value={preferences.display.density}
+              onChange={(e) =>
+                update((prev) => ({
+                  ...prev,
+                  display: {
+                    ...prev.display,
+                    density: e.target.value as CredentialDensity,
+                  },
+                }))
               }
+              className="h-8 border border-border bg-background px-2 text-xs outline-none focus:ring-1 focus:ring-ring"
             >
-              <select
-                value={preferences.display.density}
-                onChange={(e) =>
-                  update((prev) => ({
-                    ...prev,
-                    display: {
-                      ...prev.display,
-                      density: e.target.value as CredentialDensity,
-                    },
-                  }))
-                }
-                className="h-8 border border-border bg-background px-2 text-xs outline-none focus:ring-1 focus:ring-ring"
-              >
-                <option value="comfortable">
-                  {t("credentials.displayDensityComfortable")}
-                </option>
-                <option value="compact">
-                  {t("credentials.displayDensityCompact")}
-                </option>
-              </select>
-            </SettingRow>
-          </SectionCard>
+              <option value="comfortable">
+                {t("credentials.displayDensityComfortable")}
+              </option>
+              <option value="compact">
+                {t("credentials.displayDensityCompact")}
+              </option>
+            </Select2>
+          </SettingRow>
+        </SectionCard>
 
-          <SectionCard
-            title={t("credentials.customizeBehaviorTitle")}
-            icon={<SquareStack className="size-3.5" />}
-          >
+        <SectionCard
+          title={t("credentials.rowDetailsTitle")}
+          icon={<ListChecks className="size-3.5" />}
+        >
+          <p className="pt-2 text-xs text-muted-foreground">
+            {t("credentials.rowDetailsDesc")}
+          </p>
+          {CREDENTIAL_ROW_FIELD_KEYS.map((key) => (
             <SettingRow
-              label={t("credentials.showCredentialTags")}
-              description={t("credentials.showCredentialTagsDesc")}
+              key={key}
+              label={t(`credentials.${key}`)}
+              description={t(`credentials.${key}Desc`)}
             >
               <FakeSwitch
-                checked={preferences.display.showTags}
+                checked={preferences.display[key]}
                 onChange={(v) =>
                   update((prev) => ({
                     ...prev,
-                    display: { ...prev.display, showTags: v },
+                    display: { ...prev.display, [key]: v },
                   }))
                 }
               />
             </SettingRow>
-            <div className="flex flex-col gap-1.5 py-3 border-b border-border last:border-0">
-              <div className="flex flex-col gap-0.5">
-                <span className="text-sm font-medium leading-snug">
-                  {t("credentials.actionsVisibility")}
-                </span>
-                <span className="text-xs text-muted-foreground leading-snug">
-                  {t("credentials.actionsVisibilityDesc")}
-                </span>
-              </div>
-              <select
-                value={preferences.display.trayTrigger}
-                onChange={(e) =>
-                  update((prev) => ({
-                    ...prev,
-                    display: {
-                      ...prev.display,
-                      trayTrigger: e.target.value as CredentialTrayTrigger,
-                    },
-                  }))
-                }
-                className="h-8 w-full border border-border bg-background px-2 text-xs outline-none focus:ring-1 focus:ring-ring"
-              >
-                <option value="always">{t("credentials.actionsAlways")}</option>
-                <option value="actionsOnly">
-                  {t("credentials.actionsOnly")}
-                </option>
-                <option value="hover">{t("credentials.actionsHover")}</option>
-                <option value="click">{t("credentials.actionsClick")}</option>
-              </select>
-            </div>
-          </SectionCard>
+          ))}
+        </SectionCard>
 
-          <p className="text-[11px] text-muted-foreground/70 leading-snug">
-            {t("credentials.customizeSortHint")}
-          </p>
-        </div>
-      </DialogContent>
-    </Dialog>
+        <SectionCard
+          title={t("credentials.customizeBehaviorTitle")}
+          icon={<SquareStack className="size-3.5" />}
+        >
+          <SettingRow
+            label={t("credentials.showCredentialTags")}
+            description={t("credentials.showCredentialTagsDesc")}
+          >
+            <FakeSwitch
+              checked={preferences.display.showTags}
+              onChange={(v) =>
+                update((prev) => ({
+                  ...prev,
+                  display: { ...prev.display, showTags: v },
+                }))
+              }
+            />
+          </SettingRow>
+          <div className="flex flex-col gap-1.5 py-3 border-b border-border last:border-0">
+            <div className="flex flex-col gap-0.5">
+              <span className="text-sm font-medium leading-snug">
+                {t("credentials.actionsVisibility")}
+              </span>
+              <span className="text-xs text-muted-foreground leading-snug">
+                {t("credentials.actionsVisibilityDesc")}
+              </span>
+            </div>
+            <Select2
+              value={preferences.display.trayTrigger}
+              onChange={(e) =>
+                update((prev) => ({
+                  ...prev,
+                  display: {
+                    ...prev.display,
+                    trayTrigger: e.target.value as CredentialTrayTrigger,
+                  },
+                }))
+              }
+              className="h-8 w-full border border-border bg-background px-2 text-xs outline-none focus:ring-1 focus:ring-ring"
+            >
+              <option value="always">{t("credentials.actionsAlways")}</option>
+              <option value="actionsOnly">
+                {t("credentials.actionsOnly")}
+              </option>
+              <option value="hover">{t("credentials.actionsHover")}</option>
+              <option value="click">{t("credentials.actionsClick")}</option>
+            </Select2>
+          </div>
+        </SectionCard>
+
+        <p className="text-[11px] text-muted-foreground/70 leading-snug">
+          {t("credentials.customizeSortHint")}
+        </p>
+      </div>
+    </InlineView>
   );
 }
diff --git a/src/ui/sidebar/CustomizeSidebarPanel.tsx b/src/ui/sidebar/CustomizeSidebarPanel.tsx
index fd2d24b76..64014aaac 100644
--- a/src/ui/sidebar/CustomizeSidebarPanel.tsx
+++ b/src/ui/sidebar/CustomizeSidebarPanel.tsx
@@ -1,20 +1,27 @@
+import { Select2 } from "@/components/select2";
+import { InlineView } from "@/components/surface/surface-scope";
 import { useTranslation } from "react-i18next";
-import { Rows3, SquareStack } from "lucide-react";
-import {
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogHeader,
-  DialogTitle,
-} from "@/components/dialog";
+import { ListChecks, PanelTop, Rows3, SquareStack } from "lucide-react";
+import { actionOrder, useHostActions } from "./host-contributions";
+import { showsInBar } from "./tree/host-bar-actions";
 import { SectionCard, SettingRow, FakeSwitch } from "@/components/section-card";
 import type {
   HostClickBehavior,
   HostDensity,
+  HostRowFields,
   HostSidebarPreferences,
   HostTrayTrigger,
 } from "@/types/host-sidebar-preferences";
 
+const ROW_FIELDS: { key: keyof HostRowFields; dependsOnAddress?: boolean }[] = [
+  { key: "showAddress" },
+  { key: "showUsername", dependsOnAddress: true },
+  { key: "showPort", dependsOnAddress: true },
+  { key: "showPinIcon" },
+  { key: "showSharedBadge" },
+  { key: "showBadges" },
+];
+
 export function CustomizeSidebarPanel({
   open,
   onOpenChange,
@@ -31,188 +38,257 @@ export function CustomizeSidebarPanel({
   ) => void;
 }) {
   const { t } = useTranslation();
+  const actions = [...useHostActions()].sort(
+    (a, b) => actionOrder(a) - actionOrder(b) || a.id.localeCompare(b.id),
+  );
 
   return (
-    <Dialog open={open} onOpenChange={onOpenChange}>
-      <DialogContent className="sm:max-w-md max-h-[85vh] overflow-y-auto">
-        <DialogHeader>
-          <DialogTitle className="text-lg font-bold">
-            {t("hosts.customizeSidebar")}
-          </DialogTitle>
-          <DialogDescription className="text-xs text-muted-foreground">
-            {t("hosts.customizeSidebarDescription")}
-          </DialogDescription>
-        </DialogHeader>
-
-        <div className="flex flex-col gap-4 mt-1">
-          <SectionCard
-            title={t("hosts.customizeDensityTitle")}
-            icon={<Rows3 className="size-3.5" />}
+    <InlineView
+      open={open}
+      onOpenChange={onOpenChange}
+      title={t("hosts.customizeSidebar")}
+    >
+      <p className="text-xs text-muted-foreground">
+        {t("hosts.customizeSidebarDescription")}
+      </p>
+      <div className="flex flex-col gap-4 mt-1">
+        <SectionCard
+          title={t("hosts.customizeDensityTitle")}
+          icon={<Rows3 className="size-3.5" />}
+        >
+          <SettingRow
+            label={t("hosts.customizeDensityTitle")}
+            description={
+              preferences.display.density === "comfortable"
+                ? t("hosts.densityComfortableDesc")
+                : t("hosts.densityCompactDesc")
+            }
           >
-            <SettingRow
-              label={t("hosts.customizeDensityTitle")}
-              description={
-                preferences.display.density === "comfortable"
-                  ? t("hosts.densityComfortableDesc")
-                  : t("hosts.densityCompactDesc")
+            <Select2
+              value={preferences.display.density}
+              onChange={(e) =>
+                update((prev) => ({
+                  ...prev,
+                  display: {
+                    ...prev.display,
+                    density: e.target.value as HostDensity,
+                  },
+                }))
               }
+              className="h-8 border border-border bg-background px-2 text-xs outline-none focus:ring-1 focus:ring-ring"
             >
-              <select
-                value={preferences.display.density}
-                onChange={(e) =>
-                  update((prev) => ({
-                    ...prev,
-                    display: {
-                      ...prev.display,
-                      density: e.target.value as HostDensity,
-                    },
-                  }))
-                }
-                className="h-8 border border-border bg-background px-2 text-xs outline-none focus:ring-1 focus:ring-ring"
-              >
-                <option value="comfortable">
-                  {t("hosts.displayDensityComfortable")}
-                </option>
-                <option value="compact">
-                  {t("hosts.displayDensityCompact")}
-                </option>
-              </select>
-            </SettingRow>
-          </SectionCard>
+              <option value="comfortable">
+                {t("hosts.displayDensityComfortable")}
+              </option>
+              <option value="compact">
+                {t("hosts.displayDensityCompact")}
+              </option>
+            </Select2>
+          </SettingRow>
+        </SectionCard>
 
-          <SectionCard
-            title={t("hosts.customizeBehaviorTitle")}
-            icon={<SquareStack className="size-3.5" />}
-          >
-            <SettingRow
-              label={t("newUi.sidebar.userProfile.showHostTags")}
-              description={t("newUi.sidebar.userProfile.showHostTagsDesc")}
-            >
-              <FakeSwitch
-                checked={preferences.display.showTags}
-                onChange={(v) =>
-                  update((prev) => ({
-                    ...prev,
-                    display: { ...prev.display, showTags: v },
-                  }))
-                }
-              />
-            </SettingRow>
-            <SettingRow
-              label={t("hosts.showFolderPaths")}
-              description={t("hosts.showFolderPathsDesc")}
-            >
-              <FakeSwitch
-                checked={preferences.display.showFolderPaths}
-                onChange={(v) =>
-                  update((prev) => ({
-                    ...prev,
-                    display: { ...prev.display, showFolderPaths: v },
-                  }))
-                }
-              />
-            </SettingRow>
-            <div className="flex flex-col gap-1.5 py-3 border-b border-border last:border-0">
-              <div className="flex flex-col gap-0.5">
-                <span className="text-sm font-medium leading-snug">
-                  {t("hosts.actionsVisibility")}
-                </span>
-                <span className="text-xs text-muted-foreground leading-snug">
-                  {t("hosts.actionsVisibilityDesc")}
-                </span>
-              </div>
-              <select
-                value={preferences.display.trayTrigger}
-                onChange={(e) =>
-                  update((prev) => ({
-                    ...prev,
-                    display: {
-                      ...prev.display,
-                      trayTrigger: e.target.value as HostTrayTrigger,
-                    },
-                  }))
-                }
-                className="h-8 w-full border border-border bg-background px-2 text-xs outline-none focus:ring-1 focus:ring-ring"
-              >
-                <option value="always">{t("hosts.actionsAlways")}</option>
-                <option value="actionsOnly">{t("hosts.actionsOnly")}</option>
-                <option value="hover">{t("hosts.actionsHover")}</option>
-                <option value="click">{t("hosts.actionsClick")}</option>
-              </select>
-            </div>
-            <div className="flex flex-col gap-1.5 py-3 border-b border-border last:border-0">
-              <div className="flex flex-col gap-0.5">
-                <span className="text-sm font-medium leading-snug">
-                  {t("hosts.hostClickBehavior")}
-                </span>
-                <span className="text-xs text-muted-foreground leading-snug">
-                  {t("hosts.hostClickBehaviorDesc")}
-                </span>
-              </div>
-              <select
-                value={preferences.display.hostClickBehavior}
-                onChange={(e) =>
-                  update((prev) => ({
-                    ...prev,
-                    display: {
-                      ...prev.display,
-                      hostClickBehavior: e.target.value as HostClickBehavior,
-                    },
-                  }))
-                }
-                className="h-8 w-full border border-border bg-background px-2 text-xs outline-none focus:ring-1 focus:ring-ring"
-              >
-                <option value="newTab">{t("hosts.hostClickNewTab")}</option>
-                <option value="focusExisting">
-                  {t("hosts.hostClickFocusExisting")}
-                </option>
-                <option value="focusExistingDoubleClickNew">
-                  {t("hosts.hostClickFocusExistingDoubleNew")}
-                </option>
-              </select>
-            </div>
-            <SettingRow
-              label={t("hosts.openOnDoubleClick")}
-              description={t("hosts.openOnDoubleClickDesc")}
-            >
-              <FakeSwitch
-                checked={preferences.display.openOnDoubleClick}
-                disabled={
-                  preferences.display.hostClickBehavior ===
-                  "focusExistingDoubleClickNew"
-                }
-                onChange={(v) =>
-                  update((prev) => ({
-                    ...prev,
-                    display: { ...prev.display, openOnDoubleClick: v },
-                  }))
-                }
-              />
-            </SettingRow>
-            <SettingRow
-              label={t("newUi.sidebar.userProfile.statusColors")}
-              description={t("newUi.sidebar.userProfile.statusColorsDesc")}
-            >
-              <FakeSwitch
-                checked={preferences.display.statusColorScheme === "status"}
-                onChange={(v) =>
-                  update((prev) => ({
-                    ...prev,
-                    display: {
-                      ...prev.display,
-                      statusColorScheme: v ? "status" : "accent",
-                    },
-                  }))
-                }
-              />
-            </SettingRow>
-          </SectionCard>
-
-          <p className="text-[11px] text-muted-foreground/70 leading-snug">
-            {t("hosts.customizeSortHint")}
+        <SectionCard
+          title={t("hosts.rowDetailsTitle")}
+          icon={<ListChecks className="size-3.5" />}
+        >
+          <p className="pt-2 text-xs text-muted-foreground">
+            {t("hosts.rowDetailsDesc")}
           </p>
-        </div>
-      </DialogContent>
-    </Dialog>
+          {ROW_FIELDS.map(({ key, dependsOnAddress }) => (
+            <SettingRow
+              key={key}
+              label={t(`hosts.${key}`)}
+              description={t(`hosts.${key}Desc`)}
+            >
+              <FakeSwitch
+                checked={preferences.display[key]}
+                disabled={dependsOnAddress && !preferences.display.showAddress}
+                onChange={(v) =>
+                  update((prev) => ({
+                    ...prev,
+                    display: { ...prev.display, [key]: v },
+                  }))
+                }
+              />
+            </SettingRow>
+          ))}
+        </SectionCard>
+
+        <SectionCard
+          title={t("hosts.customizeBehaviorTitle")}
+          icon={<SquareStack className="size-3.5" />}
+        >
+          <SettingRow
+            label={t("newUi.sidebar.userProfile.showHostTags")}
+            description={t("newUi.sidebar.userProfile.showHostTagsDesc")}
+          >
+            <FakeSwitch
+              checked={preferences.display.showTags}
+              onChange={(v) =>
+                update((prev) => ({
+                  ...prev,
+                  display: { ...prev.display, showTags: v },
+                }))
+              }
+            />
+          </SettingRow>
+          <SettingRow
+            label={t("hosts.showFolderPaths")}
+            description={t("hosts.showFolderPathsDesc")}
+          >
+            <FakeSwitch
+              checked={preferences.display.showFolderPaths}
+              onChange={(v) =>
+                update((prev) => ({
+                  ...prev,
+                  display: { ...prev.display, showFolderPaths: v },
+                }))
+              }
+            />
+          </SettingRow>
+          <div className="flex flex-col gap-1.5 py-3 border-b border-border last:border-0">
+            <div className="flex flex-col gap-0.5">
+              <span className="text-sm font-medium leading-snug">
+                {t("hosts.actionsVisibility")}
+              </span>
+              <span className="text-xs text-muted-foreground leading-snug">
+                {t("hosts.actionsVisibilityDesc")}
+              </span>
+            </div>
+            <Select2
+              value={preferences.display.trayTrigger}
+              onChange={(e) =>
+                update((prev) => ({
+                  ...prev,
+                  display: {
+                    ...prev.display,
+                    trayTrigger: e.target.value as HostTrayTrigger,
+                  },
+                }))
+              }
+              className="h-8 w-full border border-border bg-background px-2 text-xs outline-none focus:ring-1 focus:ring-ring"
+            >
+              <option value="always">{t("hosts.actionsAlways")}</option>
+              <option value="actionsOnly">{t("hosts.actionsOnly")}</option>
+              <option value="hover">{t("hosts.actionsHover")}</option>
+              <option value="click">{t("hosts.actionsClick")}</option>
+            </Select2>
+          </div>
+          <div className="flex flex-col gap-1.5 py-3 border-b border-border last:border-0">
+            <div className="flex flex-col gap-0.5">
+              <span className="text-sm font-medium leading-snug">
+                {t("hosts.hostClickBehavior")}
+              </span>
+              <span className="text-xs text-muted-foreground leading-snug">
+                {t("hosts.hostClickBehaviorDesc")}
+              </span>
+            </div>
+            <Select2
+              value={preferences.display.hostClickBehavior}
+              onChange={(e) =>
+                update((prev) => ({
+                  ...prev,
+                  display: {
+                    ...prev.display,
+                    hostClickBehavior: e.target.value as HostClickBehavior,
+                  },
+                }))
+              }
+              className="h-8 w-full border border-border bg-background px-2 text-xs outline-none focus:ring-1 focus:ring-ring"
+            >
+              <option value="newTab">{t("hosts.hostClickNewTab")}</option>
+              <option value="focusExisting">
+                {t("hosts.hostClickFocusExisting")}
+              </option>
+              <option value="focusExistingDoubleClickNew">
+                {t("hosts.hostClickFocusExistingDoubleNew")}
+              </option>
+            </Select2>
+          </div>
+          <SettingRow
+            label={t("hosts.openOnDoubleClick")}
+            description={t("hosts.openOnDoubleClickDesc")}
+          >
+            <FakeSwitch
+              checked={preferences.display.openOnDoubleClick}
+              disabled={
+                preferences.display.hostClickBehavior ===
+                "focusExistingDoubleClickNew"
+              }
+              onChange={(v) =>
+                update((prev) => ({
+                  ...prev,
+                  display: { ...prev.display, openOnDoubleClick: v },
+                }))
+              }
+            />
+          </SettingRow>
+          <SettingRow
+            label={t("newUi.sidebar.userProfile.statusColors")}
+            description={t("newUi.sidebar.userProfile.statusColorsDesc")}
+          >
+            <FakeSwitch
+              checked={preferences.display.statusColorScheme === "status"}
+              onChange={(v) =>
+                update((prev) => ({
+                  ...prev,
+                  display: {
+                    ...prev.display,
+                    statusColorScheme: v ? "status" : "accent",
+                  },
+                }))
+              }
+            />
+          </SettingRow>
+        </SectionCard>
+
+        {actions.length > 0 && (
+          <SectionCard
+            title={t("hosts.connectBarTitle")}
+            icon={<PanelTop className="size-3.5" />}
+          >
+            <p className="pt-2 text-xs text-muted-foreground">
+              {t("hosts.connectBarDesc")}
+            </p>
+            {actions.map((action) => {
+              const Icon = action.icon;
+              return (
+                <SettingRow
+                  key={action.id}
+                  label={t(action.titleKey)}
+                  rowId={`bar-action-${action.id}`}
+                >
+                  <span className="flex items-center gap-2">
+                    <Icon className="size-3.5 text-muted-foreground" />
+                    <FakeSwitch
+                      checked={showsInBar(
+                        preferences.display.barActions,
+                        action,
+                      )}
+                      onChange={(v) =>
+                        update((prev) => ({
+                          ...prev,
+                          display: {
+                            ...prev.display,
+                            barActions: {
+                              ...prev.display.barActions,
+                              [action.id]: v,
+                            },
+                          },
+                        }))
+                      }
+                    />
+                  </span>
+                </SettingRow>
+              );
+            })}
+          </SectionCard>
+        )}
+
+        <p className="text-[11px] text-muted-foreground/70 leading-snug">
+          {t("hosts.customizeSortHint")}
+        </p>
+      </div>
+    </InlineView>
   );
 }
diff --git a/src/ui/sidebar/FolderMetadataDialog.tsx b/src/ui/sidebar/FolderMetadataDialog.tsx
index 157c362c3..5a9e8cd42 100644
--- a/src/ui/sidebar/FolderMetadataDialog.tsx
+++ b/src/ui/sidebar/FolderMetadataDialog.tsx
@@ -1,13 +1,8 @@
+import { Select2 } from "@/components/select2";
+import { InlineView } from "@/components/surface/surface-scope";
 import { useEffect, useState } from "react";
 import { useTranslation } from "react-i18next";
 import { ChevronRight } from "lucide-react";
-import {
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogHeader,
-  DialogTitle,
-} from "@/components/dialog";
 import { Button } from "@/components/button";
 import { Input } from "@/components/input";
 import {
@@ -124,125 +119,126 @@ export function FolderMetadataDialog({
   }
 
   return (
-    <Dialog open={open} onOpenChange={onOpenChange}>
-      <DialogContent className="sm:max-w-md">
-        <DialogHeader>
-          <DialogTitle className="text-lg font-bold">
-            {mode === "create"
-              ? t("hosts.createFolderTitle")
-              : t("hosts.editFolderTitle")}
-          </DialogTitle>
-          <DialogDescription className="text-xs text-muted-foreground">
-            {t("hosts.folderDialogDescription")}
-          </DialogDescription>
-        </DialogHeader>
-        <div className="flex flex-col gap-4 mt-1">
-          <div className="flex flex-col gap-1.5">
-            <label className="text-xs font-semibold">
-              {t("hosts.folderNameLabel")}{" "}
-              <span className="text-accent-brand">*</span>
-            </label>
-            <Input
-              placeholder={t("hosts.folderNamePlaceholder")}
-              value={name}
-              onChange={(e) => setName(e.target.value)}
-              onKeyDown={(e) => {
-                if (e.key === "Enter" && !isDuplicate) handleSubmit();
-              }}
-              aria-invalid={isDuplicate}
-              className={isDuplicate ? "border-destructive" : undefined}
-            />
-            {isDuplicate ? (
-              <p className="text-[10px] text-destructive">
-                {t("hosts.folderNameDuplicate")}
-              </p>
-            ) : (
-              <p className="text-[10px] text-muted-foreground">
-                {t("hosts.folderNestingHint")}
-              </p>
-            )}
-          </div>
-          <div className="flex flex-col gap-2">
-            <label className="text-xs font-semibold">
-              {t("hosts.folderColor")}
-            </label>
-            <HexColorPicker value={color} onChange={setColor} />
-          </div>
-          <div className="flex flex-col gap-2">
-            <label className="text-xs font-semibold">
-              {t("hosts.folderIcon")}
-            </label>
-            <IconPicker value={icon} color={color} onChange={setIcon} />
-          </div>
-          <div className="flex flex-col gap-1.5">
-            <label className="text-xs font-semibold">
-              {t("hosts.folderCredential")}
-            </label>
-            <select
-              value={credentialId}
-              onChange={(e) => setCredentialId(e.target.value)}
-              className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-            >
-              <option value="">{t("hosts.folderCredentialNone")}</option>
-              {credentials.map((c) => (
-                <option key={c.id} value={c.id}>
-                  {c.username ? `${c.name} (${c.username})` : c.name}
-                </option>
-              ))}
-            </select>
+    <InlineView
+      open={open}
+      onOpenChange={onOpenChange}
+      title={
+        <>
+          {mode === "create"
+            ? t("hosts.createFolderTitle")
+            : t("hosts.editFolderTitle")}
+        </>
+      }
+    >
+      <p className="text-xs text-muted-foreground">
+        {t("hosts.folderDialogDescription")}
+      </p>
+      <div className="flex flex-col gap-4 mt-1">
+        <div className="flex flex-col gap-1.5">
+          <label className="text-xs font-semibold">
+            {t("hosts.folderNameLabel")}{" "}
+            <span className="text-accent-brand">*</span>
+          </label>
+          <Input
+            placeholder={t("hosts.folderNamePlaceholder")}
+            value={name}
+            onChange={(e) => setName(e.target.value)}
+            onKeyDown={(e) => {
+              if (e.key === "Enter" && !isDuplicate) handleSubmit();
+            }}
+            aria-invalid={isDuplicate}
+            className={isDuplicate ? "border-destructive" : undefined}
+          />
+          {isDuplicate ? (
+            <p className="text-[10px] text-destructive">
+              {t("hosts.folderNameDuplicate")}
+            </p>
+          ) : (
             <p className="text-[10px] text-muted-foreground">
-              {t("hosts.folderCredentialHint")}
+              {t("hosts.folderNestingHint")}
             </p>
-          </div>
-          {syncLinked && (
-            <SettingRow
-              label={t("hosts.folderLocalOnly")}
-              description={t("hosts.folderLocalOnlyDesc")}
-            >
-              <FakeSwitch checked={localOnly} onChange={setLocalOnly} />
-            </SettingRow>
           )}
-          <div className="flex flex-col gap-1.5">
-            <label className="text-xs font-semibold">
-              {t("hosts.folderPreview")}
-            </label>
-            <div className="flex items-center gap-2 px-3 py-3 border border-border bg-muted/20">
-              <FolderIconEl
-                icon={icon}
-                className="size-4 shrink-0"
-                style={{ color }}
-              />
-              <span className="flex items-center gap-0.5 text-sm font-semibold flex-wrap">
-                {name
-                  ? splitPath(name).map((seg, i) => (
-                      <span key={i} className="flex items-center gap-0.5">
-                        {i > 0 && (
-                          <ChevronRight className="size-3.5 shrink-0 text-muted-foreground/50" />
-                        )}
-                        {seg}
-                      </span>
-                    ))
-                  : t("hosts.folderNameFallback")}
-              </span>
-            </div>
+        </div>
+        <div className="flex flex-col gap-2">
+          <label className="text-xs font-semibold">
+            {t("hosts.folderColor")}
+          </label>
+          <HexColorPicker value={color} onChange={setColor} />
+        </div>
+        <div className="flex flex-col gap-2">
+          <label className="text-xs font-semibold">
+            {t("hosts.folderIcon")}
+          </label>
+          <IconPicker value={icon} color={color} onChange={setIcon} />
+        </div>
+        <div className="flex flex-col gap-1.5">
+          <label className="text-xs font-semibold">
+            {t("hosts.folderCredential")}
+          </label>
+          <Select2
+            value={credentialId}
+            onChange={(e) => setCredentialId(e.target.value)}
+            className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
+          >
+            <option value="">{t("hosts.folderCredentialNone")}</option>
+            {credentials.map((c) => (
+              <option key={c.id} value={c.id}>
+                {c.username ? `${c.name} (${c.username})` : c.name}
+              </option>
+            ))}
+          </Select2>
+          <p className="text-[10px] text-muted-foreground">
+            {t("hosts.folderCredentialHint")}
+          </p>
+        </div>
+        {syncLinked && (
+          <SettingRow
+            label={t("hosts.folderLocalOnly")}
+            description={t("hosts.folderLocalOnlyDesc")}
+          >
+            <FakeSwitch checked={localOnly} onChange={setLocalOnly} />
+          </SettingRow>
+        )}
+        <div className="flex flex-col gap-1.5">
+          <label className="text-xs font-semibold">
+            {t("hosts.folderPreview")}
+          </label>
+          <div className="flex items-center gap-2 px-3 py-3 border border-border bg-muted/20">
+            <FolderIconEl
+              icon={icon}
+              className="size-4 shrink-0"
+              style={{ color }}
+            />
+            <span className="flex items-center gap-0.5 text-sm font-semibold flex-wrap">
+              {name
+                ? splitPath(name).map((seg, i) => (
+                    <span key={i} className="flex items-center gap-0.5">
+                      {i > 0 && (
+                        <ChevronRight className="size-3.5 shrink-0 text-muted-foreground/50" />
+                      )}
+                      {seg}
+                    </span>
+                  ))
+                : t("hosts.folderNameFallback")}
+            </span>
           </div>
         </div>
-        <div className="flex items-center justify-end gap-2 mt-2">
-          <Button variant="ghost" onClick={() => onOpenChange(false)}>
-            {t("hosts.cancel")}
-          </Button>
-          <Button
-            variant="outline"
-            className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-            onClick={handleSubmit}
-            disabled={!name.trim() || isDuplicate}
-          >
-            {mode === "create"
-              ? t("hosts.createFolderButton")
-              : t("hosts.saveFolderButton")}
-          </Button>
-        </div>
-      </DialogContent>
-    </Dialog>
+      </div>
+      <div className="flex items-center justify-end gap-2 mt-2">
+        <Button variant="ghost" onClick={() => onOpenChange(false)}>
+          {t("hosts.cancel")}
+        </Button>
+        <Button
+          variant="outline"
+          className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
+          onClick={handleSubmit}
+          disabled={!name.trim() || isDuplicate}
+        >
+          {mode === "create"
+            ? t("hosts.createFolderButton")
+            : t("hosts.saveFolderButton")}
+        </Button>
+      </div>
+    </InlineView>
   );
 }
diff --git a/src/ui/sidebar/HostAuthOverrideModal.tsx b/src/ui/sidebar/HostAuthOverrideModal.tsx
index 4f07444c5..197964ba0 100644
--- a/src/ui/sidebar/HostAuthOverrideModal.tsx
+++ b/src/ui/sidebar/HostAuthOverrideModal.tsx
@@ -1,15 +1,9 @@
+import { Select2 } from "@/components/select2";
+import { FormFooter } from "@/components/list-kit";
+import { InlineView } from "@/components/surface/surface-scope";
 import { useEffect, useState } from "react";
 import { useTranslation } from "react-i18next";
 import { toast } from "sonner";
-import { Button } from "@/components/button";
-import {
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogFooter,
-  DialogHeader,
-  DialogTitle,
-} from "@/components/dialog";
 import {
   getCredentials,
   getHostAuthOverride,
@@ -123,98 +117,86 @@ export function HostAuthOverrideModal({
       onClick={(event) => event.stopPropagation()}
       onPointerDown={(event) => event.stopPropagation()}
     >
-      <Dialog open={open} onOpenChange={onOpenChange}>
-        <DialogContent>
-          <DialogHeader>
-            <DialogTitle>
-              {t("hosts.sharing.authOverrideTitleProtocol", {
-                protocol: authProtocolLabel(protocol, t),
-              })}
-            </DialogTitle>
-            <DialogDescription>
-              {t(
-                ownerAuthShared
-                  ? "hosts.sharing.authOverrideDescriptionShared"
-                  : "hosts.sharing.authOverrideDescriptionPrivate",
-                { host: host.name },
-              )}
-            </DialogDescription>
-          </DialogHeader>
-
-          {loading ? (
-            <p className="py-4 text-center text-muted-foreground">
-              {t("common.loading")}
-            </p>
-          ) : loadError ? (
-            <p className="border border-destructive/30 bg-destructive/5 p-3 text-destructive">
-              {t("hosts.sharing.authOverrideLoadError")}
-            </p>
-          ) : (
-            <div className="flex flex-col gap-2">
-              <label
-                htmlFor={`auth-override-${host.id}`}
-                className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground"
-              >
-                {t("hosts.sharing.authOverrideCredentialLabel")}
-              </label>
-              <select
-                id={`auth-override-${host.id}`}
-                value={selectedId}
-                onChange={(event) => setSelectedId(event.target.value)}
-                className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-              >
-                <option value="">
-                  {t(
-                    ownerAuthShared
-                      ? "hosts.sharing.useSharedAuthentication"
-                      : "hosts.sharing.noPersonalCredential",
-                  )}
-                </option>
-                {credentials.map((credential) => (
-                  <option key={credential.id} value={credential.id}>
-                    {credential.username
-                      ? `${credential.name} (${credential.username})`
-                      : credential.name}
-                  </option>
-                ))}
-              </select>
-              {credentials.length === 0 && (
-                <p className="text-[10px] text-muted-foreground">
-                  {t("hosts.sharing.authOverrideNoCredentials")}
-                </p>
-              )}
-              {overrideState?.required && selectedId === "" && (
-                <p className="border border-amber-500/30 bg-amber-500/5 p-2 text-[10px] text-amber-600 dark:text-amber-400">
-                  {t("hosts.sharing.authOverrideRequired")}
-                </p>
-              )}
-              <p className="text-[10px] text-muted-foreground">
-                {t("hosts.sharing.authOverridePrivateHint")}
-              </p>
-            </div>
+      <InlineView
+        open={open}
+        onOpenChange={onOpenChange}
+        title={
+          <>
+            {t("hosts.sharing.authOverrideTitleProtocol", {
+              protocol: authProtocolLabel(protocol, t),
+            })}
+          </>
+        }
+        footer={
+          <FormFooter
+            onCancel={() => onOpenChange(false)}
+            onSave={() => void handleSave()}
+            saving={saving}
+            disabled={loading || loadError || selectedId === initialId}
+          />
+        }
+      >
+        <p className="text-xs text-muted-foreground">
+          {t(
+            ownerAuthShared
+              ? "hosts.sharing.authOverrideDescriptionShared"
+              : "hosts.sharing.authOverrideDescriptionPrivate",
+            { host: host.name },
           )}
-
-          <DialogFooter>
-            <Button
-              variant="outline"
-              onClick={() => onOpenChange(false)}
-              disabled={saving}
+        </p>
+        {loading ? (
+          <p className="py-4 text-center text-muted-foreground">
+            {t("common.loading")}
+          </p>
+        ) : loadError ? (
+          <p className="border border-destructive/30 bg-destructive/5 p-3 text-destructive">
+            {t("hosts.sharing.authOverrideLoadError")}
+          </p>
+        ) : (
+          <div className="flex flex-col gap-2">
+            <label
+              htmlFor={`auth-override-${host.id}`}
+              className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground"
             >
-              {t("common.cancel")}
-            </Button>
-            <Button
-              variant="outline"
-              className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-              onClick={handleSave}
-              disabled={
-                loading || loadError || saving || selectedId === initialId
-              }
+              {t("hosts.sharing.authOverrideCredentialLabel")}
+            </label>
+            <Select2
+              id={`auth-override-${host.id}`}
+              value={selectedId}
+              onChange={(event) => setSelectedId(event.target.value)}
+              className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
             >
-              {saving ? t("common.saving") : t("common.save")}
-            </Button>
-          </DialogFooter>
-        </DialogContent>
-      </Dialog>
+              <option value="">
+                {t(
+                  ownerAuthShared
+                    ? "hosts.sharing.useSharedAuthentication"
+                    : "hosts.sharing.noPersonalCredential",
+                )}
+              </option>
+              {credentials.map((credential) => (
+                <option key={credential.id} value={credential.id}>
+                  {credential.username
+                    ? `${credential.name} (${credential.username})`
+                    : credential.name}
+                </option>
+              ))}
+            </Select2>
+            {credentials.length === 0 && (
+              <p className="text-[10px] text-muted-foreground">
+                {t("hosts.sharing.authOverrideNoCredentials")}
+              </p>
+            )}
+            {overrideState?.required && selectedId === "" && (
+              <p className="border border-warning/30 bg-warning/5 p-2 text-[10px] text-warning">
+                {t("hosts.sharing.authOverrideRequired")}
+              </p>
+            )}
+            <p className="text-[10px] text-muted-foreground">
+              {t("hosts.sharing.authOverridePrivateHint")}
+            </p>
+          </div>
+        )}
+      </InlineView>
     </span>
   );
 }
diff --git a/src/ui/sidebar/HostEditor.tsx b/src/ui/sidebar/HostEditor.tsx
index cfe69a2ff..ee74ab588 100644
--- a/src/ui/sidebar/HostEditor.tsx
+++ b/src/ui/sidebar/HostEditor.tsx
@@ -1,10 +1,28 @@
 import { Select2 } from "@/components/select2";
-import React, { useEffect, useRef, useState } from "react";
+import React, { useEffect, useMemo, useRef, useState } from "react";
 import { useTranslation } from "react-i18next";
 import { Button } from "@/components/button";
 import { Input } from "@/components/input";
 import { PasswordInput } from "@/components/password-input";
-import { Globe, Pencil, Plus, Shield, Upload, X } from "lucide-react";
+import {
+  Globe,
+  Pencil,
+  Plus,
+  Puzzle,
+  Settings,
+  Shield,
+  Terminal,
+  Upload,
+  X,
+} from "lucide-react";
+import { InlineView, useConfirm } from "@/components/surface/surface-scope";
+import {
+  EditorPane,
+  EditorSection,
+  LazySection,
+  type EditorNavBand,
+} from "@/manage/EditorPane";
+import { validateHostForm } from "@/manage/host-validation";
 import { toast } from "sonner";
 import { SectionCard, SettingRow, FakeSwitch } from "@/components/section-card";
 import {
@@ -65,14 +83,15 @@ import { withProtocolSettings } from "./host-protocols";
 import { canEditHost } from "./host-permissions";
 import {
   getHostEditorSection,
-  isSshGroupTab,
+  makeHostSshSubTabs,
   makeHostTabs,
+  useHostEditorSections,
 } from "./HostManagerTabs";
 import { useSshAuthEditors } from "@/plugin-host/auth-registry";
 import { useSshAuthProviders } from "@/hooks/useSshAuthProviders";
 import { SshAuthProviderFields } from "./SshAuthProviderFields";
-import type { PluginSettingsField } from "@termix/plugin-sdk/manifest";
-import type { HostDraft } from "@termix/plugin-sdk/frontend";
+import type { PluginSettingsField } from "@termix-ssh/plugin-sdk/manifest";
+import type { HostDraft } from "@termix-ssh/plugin-sdk/frontend";
 import { PluginComponent } from "@/plugin-host/component-registry";
 import {
   toCredentialOption,
@@ -82,17 +101,16 @@ import {
 export function HostEditor({
   host,
   draft,
-  activeTab,
+  advanced = true,
+  banner,
   onBack,
   onSave,
   protocols,
   onProtocolChange,
   onDirtyChange,
-  onTabChange,
   hosts,
   credentials,
   adminTargetUserId,
-  simpleMode = false,
   onEditCredential,
   defaultsTarget,
   onDefaultsSaved,
@@ -100,15 +118,18 @@ export function HostEditor({
   host: Host | null;
   /** Fields a plugin filled in for a new host. */
   draft?: HostDraft;
-  activeTab: string;
-  /** Collapses the General tab to the fields needed to reach a host. */
-  simpleMode?: boolean;
+  /**
+   * False keeps to what is needed to reach a host: General and SSH, with the
+   * organizing fields folded away. Hidden fields still save unchanged.
+   */
+  advanced?: boolean;
+  /** Shown above the form, like the defaults level's description. */
+  banner?: React.ReactNode;
   onBack: () => void;
   onSave: (saved: SSHHost) => void;
   protocols: HostProtocols;
   onProtocolChange: (p: Partial<typeof protocols>) => void;
   onDirtyChange?: (dirty: boolean) => void;
-  onTabChange: (tab: string) => void;
   hosts: Host[];
   credentials: { id: string; name: string; username: string }[];
   // When set, the editor works on another user's host through the admin
@@ -122,7 +143,13 @@ export function HostEditor({
   onDefaultsSaved?: () => void;
 }) {
   const { t } = useTranslation();
+  const confirm = useConfirm();
+  // Re-render when a plugin adds or removes a section.
+  useHostEditorSections();
+  const simpleMode = !advanced;
   const defaultsMode = !!defaultsTarget;
+  const revealRef = useRef<((id: string) => void) | null>(null);
+  const [pendingReveal, setPendingReveal] = useState<string | null>(null);
   const defaultKeys = useEditorDefaultKeys();
   const trackedKeys = useRef<string[]>([]);
   trackedKeys.current = [...defaultKeys.keys()];
@@ -147,10 +174,6 @@ export function HostEditor({
   );
   /** The keys the level held when it was loaded, in the defaults editor. */
   const [levelKeys, setLevelKeys] = useState<string[]>([]);
-  const [pendingDefaults, setPendingDefaults] = useState<{
-    change: HostDefaultsChange;
-    changedHosts: number;
-  } | null>(null);
 
   /** A value the user changed is the host's own from then on. */
   const markOwn = (before: HostEditorForm, after: HostEditorForm) => {
@@ -182,7 +205,7 @@ export function HostEditor({
   };
 
   const [saving, setSaving] = useState(false);
-  const [isOidcUser, setIsOidcUser] = useState(false);
+  const [isExternalUser, setIsExternalUser] = useState(false);
   const [showSecretSources, setShowSecretSources] = useState(false);
   const [quickCredentialName, setQuickCredentialName] = useState("");
   const [creatingQuickCredential, setCreatingQuickCredential] = useState(false);
@@ -192,7 +215,7 @@ export function HostEditor({
     useState<CredentialOption | null>(null);
   useEffect(() => {
     getUserInfo()
-      .then((info) => setIsOidcUser(info.is_external ?? info.is_oidc))
+      .then((info) => setIsExternalUser(info.is_external))
       .catch(() => {});
   }, []);
 
@@ -360,7 +383,17 @@ export function HostEditor({
     setSaving(true);
     try {
       const preview = await previewHostDefaultsLevel(defaultsTarget, change);
-      setPendingDefaults({ change, changedHosts: preview.changedHosts });
+      setSaving(false);
+      const ok = await confirm({
+        title: t("hostDefaults.confirmTitle"),
+        description:
+          preview.changedHosts > 0
+            ? t("hostDefaults.confirmChanges", { count: preview.changedHosts })
+            : t("hostDefaults.confirmNoChanges"),
+        confirmLabel: t("hostDefaults.save"),
+        destructive: false,
+      });
+      if (ok) await confirmDefaults(change);
     } catch {
       toast.error(t("hostDefaults.saveFailed"));
     } finally {
@@ -368,16 +401,12 @@ export function HostEditor({
     }
   };
 
-  const confirmDefaults = async () => {
-    if (!defaultsTarget || !pendingDefaults) return;
+  const confirmDefaults = async (change: HostDefaultsChange) => {
+    if (!defaultsTarget) return;
     setSaving(true);
     try {
-      const result = await saveHostDefaultsLevel(
-        defaultsTarget,
-        pendingDefaults.change,
-      );
-      setLevelKeys(Object.keys(pendingDefaults.change.set));
-      setPendingDefaults(null);
+      const result = await saveHostDefaultsLevel(defaultsTarget, change);
+      setLevelKeys(Object.keys(change.set));
       onDirtyChange?.(false);
       if (result.jobId) {
         toast.success(t("hostDefaults.savedInBackground"));
@@ -603,326 +632,597 @@ export function HostEditor({
   ) => {
     onDirtyChange?.(true);
     onProtocolChange({ [proto]: value });
-    // Tabs are shown per protocol: SSH owns its group, plugins decide their
-    // own visibility. Jump to a tab the change reveals, and away from one it
-    // hides.
+    if (!value) return;
+    if (proto === "enableSsh") {
+      setPendingReveal("ssh");
+      return;
+    }
     const before = protocols as unknown as Record<string, boolean>;
     const after = { ...before, [proto]: value };
     const visibleBefore = new Set(
       makeHostTabs((k) => k, before).map((tab) => tab.id),
     );
-    const visibleAfter = makeHostTabs((k) => k, after).map((tab) => tab.id);
-    if (!value) {
-      if (proto === "enableSsh" && isSshGroupTab(activeTab)) {
-        onTabChange("general");
-      } else if (!visibleAfter.includes(activeTab)) {
-        onTabChange("general");
-      }
-      return;
+    const revealed = makeHostTabs((k) => k, after)
+      .map((tab) => tab.id)
+      .find((id) => id !== "ssh" && !visibleBefore.has(id));
+    if (revealed) setPendingReveal(revealed);
+  };
+
+  useEffect(() => {
+    if (!pendingReveal) return;
+    const id = pendingReveal;
+    setPendingReveal(null);
+    requestAnimationFrame(() => revealRef.current?.(id));
+  }, [pendingReveal]);
+
+  const flags = protocols as unknown as Record<string, boolean>;
+  // The editor is one scrolling form. Sections follow the old tab order:
+  // General, then SSH and its plugin sections, then other plugins.
+  const sectionBands = useMemo(() => {
+    const top = makeHostTabs(t, flags, defaultsMode).filter(
+      (tab) => tab.id !== "general" && tab.id !== "ssh",
+    );
+    const sshGroup = makeHostSshSubTabs(t, flags, defaultsMode).filter(
+      (tab) => tab.id !== "ssh",
+    );
+    const bands: EditorNavBand[] = [
+      {
+        id: "host",
+        label: t("manage.bandHost"),
+        items: [
+          {
+            id: "general",
+            label: t("hosts.tabGeneral"),
+            icon: <Settings className="size-3.5" />,
+          },
+        ],
+      },
+    ];
+    if (protocols.enableSsh || defaultsMode) {
+      bands.push({
+        id: "ssh",
+        label: t("hosts.tabSsh"),
+        items: [
+          {
+            id: "ssh",
+            label: t("manage.sshConnection"),
+            icon: <Terminal className="size-3.5" />,
+          },
+          ...(simpleMode ? [] : sshGroup),
+        ],
+      });
     }
-    if (proto === "enableSsh") {
-      onTabChange("ssh");
-      return;
+    if (!simpleMode && top.length > 0) {
+      bands.push({
+        id: "features",
+        label: t("manage.bandFeatures"),
+        items: top.map((tab) => ({
+          ...tab,
+          icon: tab.icon ?? <Puzzle className="size-3.5" />,
+        })),
+      });
     }
-    const revealed = visibleAfter.find(
-      (id) => id !== "ssh" && !visibleBefore.has(id),
+    return bands;
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [t, JSON.stringify(flags), defaultsMode, simpleMode]);
+
+  const errors = defaultsMode ? {} : validateHostForm(form, protocols);
+  const errorCount = Object.keys(errors).length;
+  const errorSections = new Set<string>(
+    Object.keys(errors).map((key) => (key === "sshPort" ? "ssh" : "general")),
+  );
+  const bands = sectionBands.map((band) => ({
+    ...band,
+    items: band.items.map((item) => ({
+      ...item,
+      error: errorSections.has(item.id),
+    })),
+  }));
+  const pluginSectionIds = bands
+    .flatMap((band) => band.items.map((item) => item.id))
+    .filter((id) => id !== "general" && id !== "ssh");
+
+  const renderPluginSection = (id: string) => {
+    const section = getHostEditorSection(id);
+    if (!section) return null;
+    const Section = section.component;
+    return (
+      <EditorSection
+        key={id}
+        id={id}
+        label={section.label ?? t(section.labelKey)}
+      >
+        <LazySection>
+          <Section
+            form={form}
+            setField={
+              setField as unknown as (key: string, value: unknown) => void
+            }
+            updateForm={updateForm}
+            host={host}
+            credentials={availableCredentials}
+            adminTargetUserId={adminTargetUserId}
+            protocols={flags}
+            mode={defaultsMode ? "defaults" : "host"}
+          />
+        </LazySection>
+      </EditorSection>
     );
-    if (revealed) onTabChange(revealed);
   };
 
   return (
     <HostDefaultsContext.Provider value={defaultsContext}>
-      <div className="flex flex-col gap-3">
-        {isSharedHost && (
-          <div className="flex items-start gap-2.5 p-3 border border-accent-brand/30 bg-accent-brand/5 text-xs text-muted-foreground">
-            <Shield className="size-3.5 shrink-0 mt-0.5 text-accent-brand" />
-            <div>
-              {readOnly
-                ? t("hosts.sharing.viewOnlyBanner", {
-                    owner: host?.ownerUsername || "?",
-                  })
-                : t("hosts.sharing.sharedEditBanner", {
-                    owner: host?.ownerUsername || "?",
-                  })}
-            </div>
-          </div>
-        )}
+      <EditorPane
+        bands={bands}
+        revealRef={revealRef}
+        errorCount={errorCount}
+        banner={
+          <>
+            {banner}
+            {isSharedHost && (
+              <div className="flex items-start gap-2.5 p-3 border border-accent-brand/30 bg-accent-brand/5 text-xs text-muted-foreground">
+                <Shield className="size-3.5 shrink-0 mt-0.5 text-accent-brand" />
+                <div>
+                  {readOnly
+                    ? t("hosts.sharing.viewOnlyBanner", {
+                        owner: host?.ownerUsername || "?",
+                      })
+                    : t("hosts.sharing.sharedEditBanner", {
+                        owner: host?.ownerUsername || "?",
+                      })}
+                </div>
+              </div>
+            )}
+          </>
+        }
+        footer={
+          <>
+            <Button
+              variant="ghost"
+              size="sm"
+              onClick={onBack}
+              disabled={saving}
+            >
+              {t("hosts.editorCancel")}
+            </Button>
+            {!readOnly && (
+              <Button
+                variant="outline"
+                size="sm"
+                className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand px-6"
+                onClick={handleSave}
+                disabled={saving || errorCount > 0}
+              >
+                {saving
+                  ? t("hosts.editorSaving")
+                  : defaultsMode
+                    ? t("hostDefaults.save")
+                    : host
+                      ? t("hosts.editorUpdate")
+                      : t("hosts.editorAdd")}
+              </Button>
+            )}
+          </>
+        }
+      >
         <fieldset
           disabled={readOnly}
-          className={`flex flex-col gap-3 min-w-0 ${readOnly ? "opacity-80" : ""}`}
+          className={`flex flex-col gap-2 min-w-0 ${readOnly ? "opacity-80" : ""}`}
         >
-          <div className="flex flex-col gap-3">
-            {activeTab === "general" && (
-              <HostEditorGeneralTab
-                form={form}
-                setField={setField}
-                protocols={protocols}
-                handleProtocolToggle={handleProtocolToggle}
-                hosts={hosts}
-                host={host}
-                simpleMode={simpleMode}
-              />
-            )}
+          <EditorSection id="general" label={t("hosts.tabGeneral")}>
+            <HostEditorGeneralTab
+              form={form}
+              setField={setField}
+              protocols={protocols}
+              handleProtocolToggle={handleProtocolToggle}
+              hosts={hosts}
+              host={host}
+              simpleMode={simpleMode}
+              errors={errors}
+            />
+          </EditorSection>
 
-            {activeTab === "ssh" && (
-              <>
-                <SectionCard
-                  title={t("hosts.connectionLabel")}
-                  icon={<Globe className="size-3.5" />}
-                >
-                  <div className="flex flex-col gap-4 py-3">
+          {(protocols.enableSsh || defaultsMode) && (
+            <EditorSection id="ssh" label={t("manage.sshConnection")}>
+              <SectionCard
+                title={t("hosts.connectionLabel")}
+                icon={<Globe className="size-3.5" />}
+              >
+                <div className="flex flex-col gap-4 py-3">
+                  <div className="flex flex-col gap-1.5">
+                    <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
+                      {t("hosts.sshPort")}
+                      <HostDefaultBadge settingKey="core.sshPort" />
+                    </label>
+                    <Input
+                      type="number"
+                      placeholder="22"
+                      value={form.sshPort}
+                      aria-invalid={!!errors.sshPort}
+                      onChange={(e) =>
+                        setField("sshPort", Number(e.target.value))
+                      }
+                      className="[appearance:textfield] [&::-webkit-outer-spin-button]:appearance-none [&::-webkit-inner-spin-button]:appearance-none"
+                    />
+                    {errors.sshPort && (
+                      <span className="text-[10px] text-destructive">
+                        {t(errors.sshPort)}
+                      </span>
+                    )}
+                  </div>
+                  <div className="grid grid-cols-1 md:grid-cols-2 gap-4 border-t border-border pt-4">
                     <div className="flex flex-col gap-1.5">
                       <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                        {t("hosts.sshPort")}
-                        <HostDefaultBadge settingKey="core.sshPort" />
+                        {t("hosts.keepaliveIntervalLabel")}
+                        <HostDefaultBadge settingKey="core.keepaliveInterval" />
                       </label>
                       <Input
                         type="number"
-                        placeholder="22"
-                        value={form.sshPort}
+                        value={form.keepaliveInterval}
                         onChange={(e) =>
-                          setField("sshPort", Number(e.target.value))
+                          setField("keepaliveInterval", Number(e.target.value))
                         }
                         className="[appearance:textfield] [&::-webkit-outer-spin-button]:appearance-none [&::-webkit-inner-spin-button]:appearance-none"
                       />
                     </div>
-                    <div className="grid grid-cols-1 md:grid-cols-2 gap-4 border-t border-border pt-4">
-                      <div className="flex flex-col gap-1.5">
-                        <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                          {t("hosts.keepaliveIntervalLabel")}
-                          <HostDefaultBadge settingKey="core.keepaliveInterval" />
-                        </label>
-                        <Input
-                          type="number"
-                          value={form.keepaliveInterval}
-                          onChange={(e) =>
-                            setField(
-                              "keepaliveInterval",
-                              Number(e.target.value),
-                            )
-                          }
-                          className="[appearance:textfield] [&::-webkit-outer-spin-button]:appearance-none [&::-webkit-inner-spin-button]:appearance-none"
-                        />
-                      </div>
-                      <div className="flex flex-col gap-1.5">
-                        <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                          {t("hosts.maxKeepaliveMisses")}
-                          <HostDefaultBadge settingKey="core.keepaliveCountMax" />
-                        </label>
-                        <Input
-                          type="number"
-                          value={form.keepaliveCountMax}
-                          onChange={(e) =>
-                            setField(
-                              "keepaliveCountMax",
-                              Number(e.target.value),
-                            )
-                          }
-                          className="[appearance:textfield] [&::-webkit-outer-spin-button]:appearance-none [&::-webkit-inner-spin-button]:appearance-none"
-                        />
-                      </div>
-                    </div>
-                    <SettingRow
-                      label={t("hosts.sshAgentForwardingLabel")}
-                      description={t("hosts.sshAgentForwardingShortDesc")}
-                      defaultKey="core.agentForwarding"
-                    >
-                      <FakeSwitch
-                        checked={form.agentForwarding}
-                        onChange={(v) => setField("agentForwarding", v)}
-                      />
-                    </SettingRow>
-                    <div className="flex flex-col gap-3 border-t border-border pt-4">
-                      <div className="flex items-center justify-between">
-                        <span className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                          {t("hosts.environmentVariablesLabel")}
-                          <HostDefaultBadge settingKey="core.environmentVariables" />
-                        </span>
-                        <Button
-                          variant="outline"
-                          size="sm"
-                          className="h-6 text-[10px] px-2 border-accent-brand/40 text-accent-brand"
-                          onClick={() =>
-                            setField("environmentVariables", [
-                              ...form.environmentVariables,
-                              { key: "", value: "" },
-                            ])
-                          }
-                        >
-                          <Plus className="size-3 mr-1" />{" "}
-                          {t("hosts.addVariableBtn")}
-                        </Button>
-                      </div>
-                      {form.environmentVariables.length === 0 && (
-                        <p className="text-[10px] text-muted-foreground/50">
-                          {t("hosts.noEnvVars")}
-                        </p>
-                      )}
-                      <div className="flex flex-col gap-2">
-                        {form.environmentVariables.map((ev, i) => (
-                          <div key={i} className="flex items-center gap-2">
-                            <Input
-                              className="h-7 text-xs flex-1"
-                              placeholder="KEY"
-                              value={ev.key}
-                              onChange={(e) => {
-                                const updated = [...form.environmentVariables];
-                                updated[i] = {
-                                  ...updated[i],
-                                  key: e.target.value,
-                                };
-                                setField("environmentVariables", updated);
-                              }}
-                            />
-                            <Input
-                              className="h-7 text-xs flex-1"
-                              placeholder="VALUE"
-                              value={ev.value}
-                              onChange={(e) => {
-                                const updated = [...form.environmentVariables];
-                                updated[i] = {
-                                  ...updated[i],
-                                  value: e.target.value,
-                                };
-                                setField("environmentVariables", updated);
-                              }}
-                            />
-                            <button
-                              type="button"
-                              className="text-destructive"
-                              onClick={() =>
-                                setField(
-                                  "environmentVariables",
-                                  form.environmentVariables.filter(
-                                    (_, idx) => idx !== i,
-                                  ),
-                                )
-                              }
-                            >
-                              <X className="size-4" />
-                            </button>
-                          </div>
-                        ))}
-                      </div>
-                    </div>
-                  </div>
-                </SectionCard>
-                <SectionCard
-                  title={t("hosts.authenticationLabel")}
-                  icon={<Shield className="size-3.5" />}
-                  action={
-                    !isSharedHost &&
-                    !defaultsMode &&
-                    canQuickCreateCredential && (
-                      <Button
-                        type="button"
-                        variant="outline"
-                        size="sm"
-                        className="h-6 text-[10px] px-2 border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10"
-                        onClick={openQuickCredentialDialog}
-                      >
-                        <Plus className="size-3 mr-1" />
-                        {t("hosts.createCredentialFromHostBtn")}
-                      </Button>
-                    )
-                  }
-                >
-                  {isSharedHost && (
-                    <div className="py-3 text-xs text-muted-foreground">
-                      {t(
-                        host?.shareSshAuth
-                          ? "hosts.sharing.ownerAuthShared"
-                          : "hosts.sharing.ownerAuthPrivate",
-                      )}
-                    </div>
-                  )}
-                  <div
-                    className={`flex flex-col gap-4 py-3 ${isSharedHost ? "hidden" : ""}`}
-                  >
                     <div className="flex flex-col gap-1.5">
                       <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                        {t("hosts.authenticationMethod")}
-                        <HostDefaultBadge settingKey="core.auth" />
+                        {t("hosts.maxKeepaliveMisses")}
+                        <HostDefaultBadge settingKey="core.keepaliveCountMax" />
                       </label>
-                      <p className="text-[10px] text-muted-foreground">
-                        {t("hosts.authenticationMethodDesc")}
-                      </p>
-                      <div
-                        className="flex flex-wrap gap-2"
-                        role="radiogroup"
-                        aria-label={t("hosts.authenticationMethod")}
+                      <Input
+                        type="number"
+                        value={form.keepaliveCountMax}
+                        onChange={(e) =>
+                          setField("keepaliveCountMax", Number(e.target.value))
+                        }
+                        className="[appearance:textfield] [&::-webkit-outer-spin-button]:appearance-none [&::-webkit-inner-spin-button]:appearance-none"
+                      />
+                    </div>
+                  </div>
+                  <SettingRow
+                    label={t("hosts.sshAgentForwardingLabel")}
+                    description={t("hosts.sshAgentForwardingShortDesc")}
+                    defaultKey="core.agentForwarding"
+                  >
+                    <FakeSwitch
+                      checked={form.agentForwarding}
+                      onChange={(v) => setField("agentForwarding", v)}
+                    />
+                  </SettingRow>
+                  <div className="flex flex-col gap-3 border-t border-border pt-4">
+                    <div className="flex items-center justify-between">
+                      <span className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
+                        {t("hosts.environmentVariablesLabel")}
+                        <HostDefaultBadge settingKey="core.environmentVariables" />
+                      </span>
+                      <Button
+                        variant="outline"
+                        size="sm"
+                        className="h-6 text-[10px] px-2 border-accent-brand/40 text-accent-brand"
+                        onClick={() =>
+                          setField("environmentVariables", [
+                            ...form.environmentVariables,
+                            { key: "", value: "" },
+                          ])
+                        }
                       >
-                        {selectableAuthMethods.map((m) => (
-                          <button
-                            key={m}
-                            type="button"
-                            role="radio"
-                            aria-checked={authMethod === m}
-                            disabled={lockAuthReferences}
-                            title={
-                              lockAuthReferences
-                                ? t("hosts.sharing.ownerOnlyControl")
-                                : undefined
-                            }
-                            onClick={() => {
-                              setField("authType", m as HostAuthType);
+                        <Plus className="size-3 mr-1" />{" "}
+                        {t("hosts.addVariableBtn")}
+                      </Button>
+                    </div>
+                    {form.environmentVariables.length === 0 && (
+                      <p className="text-[10px] text-muted-foreground/50">
+                        {t("hosts.noEnvVars")}
+                      </p>
+                    )}
+                    <div className="flex flex-col gap-2">
+                      {form.environmentVariables.map((ev, i) => (
+                        <div key={i} className="flex items-center gap-2">
+                          <Input
+                            className="h-7 text-xs flex-1"
+                            placeholder="KEY"
+                            value={ev.key}
+                            onChange={(e) => {
+                              const updated = [...form.environmentVariables];
+                              updated[i] = {
+                                ...updated[i],
+                                key: e.target.value,
+                              };
+                              setField("environmentVariables", updated);
                             }}
-                            className={`px-3 py-1.5 text-[10px] font-bold uppercase tracking-widest border transition-colors disabled:opacity-50 disabled:cursor-not-allowed ${authMethod === m ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand" : "border-border text-muted-foreground hover:text-foreground"}`}
+                          />
+                          <Input
+                            className="h-7 text-xs flex-1"
+                            placeholder="VALUE"
+                            value={ev.value}
+                            onChange={(e) => {
+                              const updated = [...form.environmentVariables];
+                              updated[i] = {
+                                ...updated[i],
+                                value: e.target.value,
+                              };
+                              setField("environmentVariables", updated);
+                            }}
+                          />
+                          <button
+                            type="button"
+                            className="text-destructive"
+                            onClick={() =>
+                              setField(
+                                "environmentVariables",
+                                form.environmentVariables.filter(
+                                  (_, idx) => idx !== i,
+                                ),
+                              )
+                            }
                           >
-                            {authEditorLabel(m)}
+                            <X className="size-4" />
                           </button>
-                        ))}
-                      </div>
-                      {lockAuthReferences && (
+                        </div>
+                      ))}
+                    </div>
+                  </div>
+                </div>
+              </SectionCard>
+              <SectionCard
+                title={t("hosts.authenticationLabel")}
+                icon={<Shield className="size-3.5" />}
+                action={
+                  !isSharedHost &&
+                  !defaultsMode &&
+                  canQuickCreateCredential && (
+                    <Button
+                      type="button"
+                      variant="outline"
+                      size="sm"
+                      className="h-6 text-[10px] px-2 border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10"
+                      onClick={openQuickCredentialDialog}
+                    >
+                      <Plus className="size-3 mr-1" />
+                      {t("hosts.createCredentialFromHostBtn")}
+                    </Button>
+                  )
+                }
+              >
+                {isSharedHost && (
+                  <div className="py-3 text-xs text-muted-foreground">
+                    {t(
+                      host?.shareSshAuth
+                        ? "hosts.sharing.ownerAuthShared"
+                        : "hosts.sharing.ownerAuthPrivate",
+                    )}
+                  </div>
+                )}
+                <div
+                  className={`flex flex-col gap-4 py-3 ${isSharedHost ? "hidden" : ""}`}
+                >
+                  <div className="flex flex-col gap-1.5">
+                    <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
+                      {t("hosts.authenticationMethod")}
+                      <HostDefaultBadge settingKey="core.auth" />
+                    </label>
+                    <p className="text-[10px] text-muted-foreground">
+                      {t("hosts.authenticationMethodDesc")}
+                    </p>
+                    <div
+                      className="flex flex-wrap gap-2"
+                      role="radiogroup"
+                      aria-label={t("hosts.authenticationMethod")}
+                    >
+                      {selectableAuthMethods.map((m) => (
+                        <button
+                          key={m}
+                          type="button"
+                          role="radio"
+                          aria-checked={authMethod === m}
+                          disabled={lockAuthReferences}
+                          title={
+                            lockAuthReferences
+                              ? t("hosts.sharing.ownerOnlyControl")
+                              : undefined
+                          }
+                          onClick={() => {
+                            setField("authType", m as HostAuthType);
+                          }}
+                          className={`px-3 py-1.5 text-[10px] font-bold uppercase tracking-widest border transition-colors disabled:opacity-50 disabled:cursor-not-allowed ${authMethod === m ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand" : "border-border text-muted-foreground hover:text-foreground"}`}
+                        >
+                          {authEditorLabel(m)}
+                        </button>
+                      ))}
+                    </div>
+                    {lockAuthReferences && (
+                      <p className="text-[10px] text-muted-foreground/60">
+                        {t("hosts.sharing.ownerOnlyControl")}
+                      </p>
+                    )}
+                    {missingAuthNotice && (
+                      <p className="text-[10px] text-destructive">
+                        {missingAuthNotice}
+                      </p>
+                    )}
+                  </div>
+                  <div className="grid grid-cols-1 md:grid-cols-2 gap-4 border-t border-border pt-4 mt-1">
+                    <div className="flex flex-col gap-1.5">
+                      <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
+                        {t("hosts.username")}
+                        <HostDefaultBadge settingKey="core.username" />
+                      </label>
+                      <Input
+                        placeholder="root"
+                        value={form.username}
+                        disabled={
+                          authMethod === "credential" &&
+                          !!selectedCredential?.username &&
+                          !form.overrideCredentialUsername
+                        }
+                        onFocus={() => {
+                          if (!defaultsMode && form.username === "root")
+                            setField("username", "");
+                        }}
+                        onBlur={() => {
+                          if (!defaultsMode && form.username === "")
+                            setField("username", "root");
+                        }}
+                        onChange={(e) => setField("username", e.target.value)}
+                      />
+                      {isExternalUser && (
                         <p className="text-[10px] text-muted-foreground/60">
-                          {t("hosts.sharing.ownerOnlyControl")}
+                          {t("hosts.externalUsernameHint")}
                         </p>
                       )}
-                      {missingAuthNotice && (
-                        <p className="text-[10px] text-destructive">
-                          {missingAuthNotice}
+                      {activeAuthEditor?.hintKey && (
+                        <p className="text-[10px] text-muted-foreground/60">
+                          {t(activeAuthEditor.hintKey)}
                         </p>
                       )}
                     </div>
-                    <div className="grid grid-cols-1 md:grid-cols-2 gap-4 border-t border-border pt-4 mt-1">
+                    {authMethod === "password" && (
                       <div className="flex flex-col gap-1.5">
-                        <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                          {t("hosts.username")}
-                          <HostDefaultBadge settingKey="core.username" />
+                        <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
+                          {t("hosts.password")}
                         </label>
-                        <Input
-                          placeholder="root"
-                          value={form.username}
-                          disabled={
-                            authMethod === "credential" &&
-                            !!selectedCredential?.username &&
-                            !form.overrideCredentialUsername
+                        <PasswordInput
+                          className="h-8 text-xs pr-8"
+                          placeholder={
+                            form.password === "existing_password"
+                              ? t("hosts.passwordSaved")
+                              : "••••••••"
+                          }
+                          value={
+                            form.password === "existing_password"
+                              ? ""
+                              : form.password
                           }
                           onFocus={() => {
-                            if (!defaultsMode && form.username === "root")
-                              setField("username", "");
+                            if (form.password === "existing_password")
+                              setField("password", "");
                           }}
-                          onBlur={() => {
-                            if (!defaultsMode && form.username === "")
-                              setField("username", "root");
-                          }}
-                          onChange={(e) => setField("username", e.target.value)}
+                          onChange={(e) => setField("password", e.target.value)}
+                        />
+                        <PluginComponent
+                          id="credentials.secretHint"
+                          onManage={() => setShowSecretSources((v) => !v)}
                         />
-                        {isOidcUser && (
-                          <p className="text-[10px] text-muted-foreground/60">
-                            {t("hosts.oidcUsernameHint")}
-                          </p>
-                        )}
-                        {activeAuthEditor?.hintKey && (
-                          <p className="text-[10px] text-muted-foreground/60">
-                            {t(activeAuthEditor.hintKey)}
-                          </p>
-                        )}
                       </div>
-                      {authMethod === "password" && (
+                    )}
+                    {(authMethod === "password" || authMethod === "key") &&
+                      showSecretSources && (
+                        <PluginComponent
+                          id="credentials.secretManager"
+                          onClose={() => setShowSecretSources(false)}
+                        />
+                      )}
+                    {authMethod === "key" && (
+                      <>
+                        <div className="flex flex-col gap-1.5 col-span-2">
+                          <div className="flex items-center justify-between">
+                            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
+                              {t("hosts.sshPrivateKey")}
+                            </label>
+                            <div className="flex gap-1">
+                              {(["paste", "upload"] as const).map((tab) => (
+                                <button
+                                  key={tab}
+                                  type="button"
+                                  onClick={() => setField("keySubTab", tab)}
+                                  className={`px-2 py-0.5 text-[9px] font-bold uppercase tracking-widest border transition-colors ${form.keySubTab === tab ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand" : "border-border text-muted-foreground hover:text-foreground"}`}
+                                >
+                                  {tab === "paste"
+                                    ? t("hosts.keyPasteTab")
+                                    : t("hosts.keyUploadTab")}
+                                </button>
+                              ))}
+                            </div>
+                          </div>
+                          {form.keySubTab === "paste" ? (
+                            <div className="flex flex-col gap-1.5">
+                              {form.key === "existing_key" && (
+                                <div className="px-3 py-2 text-[10px] border border-accent-brand/30 bg-accent-brand/5 text-accent-brand">
+                                  {t("hosts.keySaved")}.{" "}
+                                  {t("hosts.keyReplaceNotice")}
+                                </div>
+                              )}
+                              <textarea
+                                placeholder="-----BEGIN OPENSSH PRIVATE KEY-----"
+                                rows={5}
+                                value={
+                                  form.key === "existing_key" ? "" : form.key
+                                }
+                                onChange={(e) =>
+                                  setField("key", e.target.value)
+                                }
+                                className="w-full px-3 py-2 text-[10px] bg-background border border-border text-foreground placeholder:text-muted-foreground resize-none outline-none focus:ring-1 focus:ring-ring font-mono"
+                              />
+                            </div>
+                          ) : (
+                            <div className="flex flex-col gap-2">
+                              <label
+                                className={`flex items-center justify-center gap-2 h-16 border-2 border-dashed cursor-pointer transition-colors ${form.key ? "border-accent-brand/40 bg-accent-brand/5 text-accent-brand" : "border-border text-muted-foreground hover:border-accent-brand/30 hover:text-foreground"}`}
+                              >
+                                <Upload className="size-4" />
+                                <span className="text-xs">
+                                  {form.key === "existing_key"
+                                    ? t("hosts.keySaved")
+                                    : form.key
+                                      ? t("hosts.keyFileLoaded")
+                                      : t("hosts.keyUploadClick")}
+                                </span>
+                                <input
+                                  type="file"
+                                  accept=".pem,.key,.ppk,.txt"
+                                  className="hidden"
+                                  onChange={async (e) => {
+                                    const file = e.target.files?.[0];
+                                    if (!file) return;
+                                    const text = await file.text();
+                                    setField("key", text);
+                                    e.target.value = "";
+                                  }}
+                                />
+                              </label>
+                              {form.key && (
+                                <button
+                                  type="button"
+                                  onClick={() => setField("key", "")}
+                                  className="text-[10px] text-destructive self-start"
+                                >
+                                  {form.key === "existing_key"
+                                    ? t("hosts.replaceKey")
+                                    : t("hosts.clearKey")}
+                                </button>
+                              )}
+                            </div>
+                          )}
+                        </div>
                         <div className="flex flex-col gap-1.5">
                           <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                            {t("hosts.password")}
+                            {t("hosts.keyPassphrase")}
+                          </label>
+                          <PasswordInput
+                            className="h-8 text-xs pr-8"
+                            placeholder={
+                              form.keyPassword === "existing_key_password"
+                                ? t("hosts.keyPassphraseSaved")
+                                : t("hosts.optional")
+                            }
+                            value={
+                              form.keyPassword === "existing_key_password"
+                                ? ""
+                                : form.keyPassword
+                            }
+                            onFocus={() => {
+                              if (form.keyPassword === "existing_key_password")
+                                setField("keyPassword", "");
+                            }}
+                            onChange={(e) =>
+                              setField("keyPassword", e.target.value)
+                            }
+                          />
+                        </div>
+                        <div className="flex flex-col gap-1.5">
+                          <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
+                            {t("hosts.password")} ({t("common.optional")})
                           </label>
                           <PasswordInput
                             className="h-8 text-xs pr-8"
@@ -944,128 +1244,123 @@ export function HostEditor({
                               setField("password", e.target.value)
                             }
                           />
-                          <PluginComponent
-                            id="credentials.secretHint"
-                            onManage={() => setShowSecretSources((v) => !v)}
-                          />
                         </div>
-                      )}
-                      {(authMethod === "password" || authMethod === "key") &&
-                        showSecretSources && (
-                          <PluginComponent
-                            id="credentials.secretManager"
-                            onClose={() => setShowSecretSources(false)}
-                          />
-                        )}
-                      {authMethod === "key" && (
-                        <>
-                          <div className="flex flex-col gap-1.5 col-span-2">
-                            <div className="flex items-center justify-between">
-                              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                                {t("hosts.sshPrivateKey")}
-                              </label>
-                              <div className="flex gap-1">
-                                {(["paste", "upload"] as const).map((tab) => (
-                                  <button
-                                    key={tab}
-                                    type="button"
-                                    onClick={() => setField("keySubTab", tab)}
-                                    className={`px-2 py-0.5 text-[9px] font-bold uppercase tracking-widest border transition-colors ${form.keySubTab === tab ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand" : "border-border text-muted-foreground hover:text-foreground"}`}
-                                  >
-                                    {tab === "paste"
-                                      ? t("hosts.keyPasteTab")
-                                      : t("hosts.keyUploadTab")}
-                                  </button>
-                                ))}
-                              </div>
-                            </div>
-                            {form.keySubTab === "paste" ? (
-                              <div className="flex flex-col gap-1.5">
-                                {form.key === "existing_key" && (
-                                  <div className="px-3 py-2 text-[10px] border border-accent-brand/30 bg-accent-brand/5 text-accent-brand">
-                                    {t("hosts.keySaved")}.{" "}
-                                    {t("hosts.keyReplaceNotice")}
-                                  </div>
-                                )}
-                                <textarea
-                                  placeholder="-----BEGIN OPENSSH PRIVATE KEY-----"
-                                  rows={5}
-                                  value={
-                                    form.key === "existing_key" ? "" : form.key
-                                  }
-                                  onChange={(e) =>
-                                    setField("key", e.target.value)
-                                  }
-                                  className="w-full px-3 py-2 text-[10px] bg-background border border-border text-foreground placeholder:text-muted-foreground resize-none outline-none focus:ring-1 focus:ring-ring font-mono"
-                                />
-                              </div>
-                            ) : (
-                              <div className="flex flex-col gap-2">
-                                <label
-                                  className={`flex items-center justify-center gap-2 h-16 border-2 border-dashed cursor-pointer transition-colors ${form.key ? "border-accent-brand/40 bg-accent-brand/5 text-accent-brand" : "border-border text-muted-foreground hover:border-accent-brand/30 hover:text-foreground"}`}
-                                >
-                                  <Upload className="size-4" />
-                                  <span className="text-xs">
-                                    {form.key === "existing_key"
-                                      ? t("hosts.keySaved")
-                                      : form.key
-                                        ? t("hosts.keyFileLoaded")
-                                        : t("hosts.keyUploadClick")}
-                                  </span>
-                                  <input
-                                    type="file"
-                                    accept=".pem,.key,.ppk,.txt"
-                                    className="hidden"
-                                    onChange={async (e) => {
-                                      const file = e.target.files?.[0];
-                                      if (!file) return;
-                                      const text = await file.text();
-                                      setField("key", text);
-                                      e.target.value = "";
-                                    }}
-                                  />
-                                </label>
-                                {form.key && (
-                                  <button
-                                    type="button"
-                                    onClick={() => setField("key", "")}
-                                    className="text-[10px] text-destructive self-start"
-                                  >
-                                    {form.key === "existing_key"
-                                      ? t("hosts.replaceKey")
-                                      : t("hosts.clearKey")}
-                                  </button>
-                                )}
-                              </div>
+                        <div className="flex flex-col gap-1.5">
+                          <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
+                            {t("hosts.keyTypeLabel")}
+                          </label>
+                          <Select2
+                            value={form.keyType}
+                            onChange={(e) =>
+                              setField("keyType", e.target.value)
+                            }
+                            className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
+                          >
+                            <option value="auto">
+                              {t("hosts.keyTypeAuto")}
+                            </option>
+                            <option value="ssh-rsa">RSA</option>
+                            <option value="ssh-ed25519">Ed25519</option>
+                            <option value="ecdsa-sha2-nistp256">
+                              ECDSA P-256
+                            </option>
+                            <option value="ecdsa-sha2-nistp384">
+                              ECDSA P-384
+                            </option>
+                            <option value="ecdsa-sha2-nistp521">
+                              ECDSA P-521
+                            </option>
+                            <option value="ssh-dss">DSA</option>
+                            <option value="ssh-rsa-sha2-256">
+                              RSA SHA2-256
+                            </option>
+                            <option value="ssh-rsa-sha2-512">
+                              RSA SHA2-512
+                            </option>
+                          </Select2>
+                        </div>
+                      </>
+                    )}
+                    {authMethod === "credential" && (
+                      <>
+                        <div className="flex flex-col gap-1.5">
+                          <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
+                            {t("hosts.storedCredential")}
+                          </label>
+                          <div className="flex items-center gap-2">
+                            <Select2
+                              value={form.credentialId}
+                              disabled={lockAuthReferences}
+                              title={
+                                lockAuthReferences
+                                  ? t("hosts.sharing.ownerOnlyControl")
+                                  : undefined
+                              }
+                              onChange={(e) => {
+                                const newId = e.target.value;
+                                setField("credentialId", newId);
+                                if (!form.overrideCredentialUsername) {
+                                  const cred = availableCredentials.find(
+                                    (c) => c.id === newId,
+                                  );
+                                  if (cred?.username)
+                                    setField("username", cred.username);
+                                }
+                              }}
+                              className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring disabled:opacity-50 disabled:cursor-not-allowed"
+                            >
+                              <option value="">
+                                {t("hosts.selectACredential")}
+                              </option>
+                              {availableCredentials.map((c) => (
+                                <option key={c.id} value={c.id}>
+                                  {c.username
+                                    ? `${c.name} (${c.username})`
+                                    : c.name}
+                                </option>
+                              ))}
+                            </Select2>
+                            {onEditCredential && form.credentialId && (
+                              <Button
+                                type="button"
+                                variant="outline"
+                                size="sm"
+                                className="h-9 px-2.5 shrink-0"
+                                title={t("hosts.editCredentialAction")}
+                                onClick={() =>
+                                  onEditCredential(form.credentialId)
+                                }
+                              >
+                                <Pencil className="size-3.5" />
+                              </Button>
                             )}
                           </div>
-                          <div className="flex flex-col gap-1.5">
-                            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                              {t("hosts.keyPassphrase")}
-                            </label>
-                            <PasswordInput
-                              className="h-8 text-xs pr-8"
-                              placeholder={
-                                form.keyPassword === "existing_key_password"
-                                  ? t("hosts.keyPassphraseSaved")
-                                  : t("hosts.optional")
-                              }
-                              value={
-                                form.keyPassword === "existing_key_password"
-                                  ? ""
-                                  : form.keyPassword
-                              }
-                              onFocus={() => {
-                                if (
-                                  form.keyPassword === "existing_key_password"
-                                )
-                                  setField("keyPassword", "");
+                        </div>
+                        {selectedCredential?.username && (
+                          <div className="flex items-center justify-between col-span-2 pt-1">
+                            <div className="flex flex-col gap-0.5">
+                              <span className="text-xs font-medium">
+                                {t("hosts.overrideCredentialUsername")}
+                              </span>
+                              <span className="text-[10px] text-muted-foreground">
+                                {t("hosts.overrideCredentialUsernameDesc")}
+                              </span>
+                            </div>
+                            <FakeSwitch
+                              checked={form.overrideCredentialUsername}
+                              onChange={(v) => {
+                                setField("overrideCredentialUsername", v);
+                                if (!v && selectedCredential?.username) {
+                                  setField(
+                                    "username",
+                                    selectedCredential.username,
+                                  );
+                                }
                               }}
-                              onChange={(e) =>
-                                setField("keyPassword", e.target.value)
-                              }
                             />
                           </div>
+                        )}
+                        <HostOnly>
                           <div className="flex flex-col gap-1.5">
                             <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
                               {t("hosts.password")} ({t("common.optional")})
@@ -1091,425 +1386,194 @@ export function HostEditor({
                               }
                             />
                           </div>
-                          <div className="flex flex-col gap-1.5">
-                            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                              {t("hosts.keyTypeLabel")}
-                            </label>
-                            <Select2
-                              value={form.keyType}
-                              onChange={(e) =>
-                                setField("keyType", e.target.value)
-                              }
-                              className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-                            >
-                              <option value="auto">
-                                {t("hosts.keyTypeAuto")}
-                              </option>
-                              <option value="ssh-rsa">RSA</option>
-                              <option value="ssh-ed25519">Ed25519</option>
-                              <option value="ecdsa-sha2-nistp256">
-                                ECDSA P-256
-                              </option>
-                              <option value="ecdsa-sha2-nistp384">
-                                ECDSA P-384
-                              </option>
-                              <option value="ecdsa-sha2-nistp521">
-                                ECDSA P-521
-                              </option>
-                              <option value="ssh-dss">DSA</option>
-                              <option value="ssh-rsa-sha2-256">
-                                RSA SHA2-256
-                              </option>
-                              <option value="ssh-rsa-sha2-512">
-                                RSA SHA2-512
-                              </option>
-                            </Select2>
-                          </div>
-                        </>
-                      )}
-                      {authMethod === "credential" && (
-                        <>
-                          <div className="flex flex-col gap-1.5">
-                            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                              {t("hosts.storedCredential")}
-                            </label>
-                            <div className="flex items-center gap-2">
-                              <Select2
-                                value={form.credentialId}
-                                disabled={lockAuthReferences}
-                                title={
-                                  lockAuthReferences
-                                    ? t("hosts.sharing.ownerOnlyControl")
-                                    : undefined
-                                }
-                                onChange={(e) => {
-                                  const newId = e.target.value;
-                                  setField("credentialId", newId);
-                                  if (!form.overrideCredentialUsername) {
-                                    const cred = availableCredentials.find(
-                                      (c) => c.id === newId,
-                                    );
-                                    if (cred?.username)
-                                      setField("username", cred.username);
-                                  }
-                                }}
-                                className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring disabled:opacity-50 disabled:cursor-not-allowed"
-                              >
-                                <option value="">
-                                  {t("hosts.selectACredential")}
-                                </option>
-                                {availableCredentials.map((c) => (
-                                  <option key={c.id} value={c.id}>
-                                    {c.username
-                                      ? `${c.name} (${c.username})`
-                                      : c.name}
-                                  </option>
-                                ))}
-                              </Select2>
-                              {onEditCredential && form.credentialId && (
-                                <Button
-                                  type="button"
-                                  variant="outline"
-                                  size="sm"
-                                  className="h-9 px-2.5 shrink-0"
-                                  title={t("hosts.editCredentialAction")}
-                                  onClick={() =>
-                                    onEditCredential(form.credentialId)
-                                  }
-                                >
-                                  <Pencil className="size-3.5" />
-                                </Button>
-                              )}
-                            </div>
-                          </div>
-                          {selectedCredential?.username && (
-                            <div className="flex items-center justify-between col-span-2 pt-1">
-                              <div className="flex flex-col gap-0.5">
-                                <span className="text-xs font-medium">
-                                  {t("hosts.overrideCredentialUsername")}
-                                </span>
-                                <span className="text-[10px] text-muted-foreground">
-                                  {t("hosts.overrideCredentialUsernameDesc")}
-                                </span>
-                              </div>
-                              <FakeSwitch
-                                checked={form.overrideCredentialUsername}
-                                onChange={(v) => {
-                                  setField("overrideCredentialUsername", v);
-                                  if (!v && selectedCredential?.username) {
-                                    setField(
-                                      "username",
-                                      selectedCredential.username,
-                                    );
-                                  }
-                                }}
-                              />
-                            </div>
-                          )}
-                          <HostOnly>
-                            <div className="flex flex-col gap-1.5">
-                              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                                {t("hosts.password")} ({t("common.optional")})
-                              </label>
-                              <PasswordInput
-                                className="h-8 text-xs pr-8"
-                                placeholder={
-                                  form.password === "existing_password"
-                                    ? t("hosts.passwordSaved")
-                                    : "••••••••"
-                                }
-                                value={
-                                  form.password === "existing_password"
-                                    ? ""
-                                    : form.password
-                                }
-                                onFocus={() => {
-                                  if (form.password === "existing_password")
-                                    setField("password", "");
-                                }}
-                                onChange={(e) =>
-                                  setField("password", e.target.value)
-                                }
-                              />
-                            </div>
-                          </HostOnly>
-                        </>
-                      )}
-                    </div>
-                    {!ActiveAuthEditor &&
-                      currentAuthOption?.available &&
-                      currentAuthOption.pluginId !== "core" &&
-                      currentAuthOption.fields.length > 0 && (
-                        <SshAuthProviderFields
-                          pluginId={currentAuthOption.pluginId}
-                          hostId={host?.id ? Number(host.id) : undefined}
-                          fields={
-                            currentAuthOption.fields as unknown as PluginSettingsField[]
-                          }
-                        />
-                      )}
-                    {ActiveAuthEditor && (
-                      <ActiveAuthEditor
-                        form={form}
-                        setField={
-                          setField as unknown as (
-                            key: string,
-                            value: unknown,
-                          ) => void
+                        </HostOnly>
+                      </>
+                    )}
+                  </div>
+                  {!ActiveAuthEditor &&
+                    currentAuthOption?.available &&
+                    currentAuthOption.pluginId !== "core" &&
+                    currentAuthOption.fields.length > 0 && (
+                      <SshAuthProviderFields
+                        pluginId={currentAuthOption.pluginId}
+                        hostId={host?.id ? Number(host.id) : undefined}
+                        fields={
+                          currentAuthOption.fields as unknown as PluginSettingsField[]
                         }
                       />
                     )}
-                    {authMethod === "agent" && (
-                      <div className="flex flex-col gap-2 border-t border-border pt-3">
-                        <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                          {t("hosts.agentLabel")}
-                        </span>
-                        <p className="text-[10px] text-muted-foreground">
-                          {t("hosts.agentAuthenticationDesc")}
-                        </p>
-                        <div className="flex flex-col gap-1.5">
-                          <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                            {t("hosts.agentSocketPathLabel")}
-                          </label>
-                          <Input
-                            placeholder={t("hosts.agentSocketPathPlaceholder")}
-                            value={form.agentSocketPath}
-                            onChange={(e) =>
-                              setField("agentSocketPath", e.target.value)
-                            }
-                          />
-                          <p className="text-[10px] text-muted-foreground">
-                            {t("hosts.agentSocketPathHint")}
-                          </p>
-                        </div>
-                        <div className="flex flex-col gap-1.5">
-                          <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                            {t("hosts.agentIdentityLabel")}
-                          </label>
-                          <Input
-                            placeholder={t("hosts.agentIdentityPlaceholder")}
-                            value={form.agentIdentity}
-                            onChange={(e) =>
-                              setField("agentIdentity", e.target.value)
-                            }
-                          />
-                          <p className="text-[10px] text-muted-foreground">
-                            {t("hosts.agentIdentityHint")}
-                          </p>
-                        </div>
-                      </div>
-                    )}
-                    <HostOnly>
-                      <SettingRow
-                        label={t("hosts.shareSshAuthLabel")}
-                        description={t("hosts.shareSshAuthDesc")}
-                      >
-                        <FakeSwitch
-                          checked={form.shareSshAuth}
-                          onChange={(v) => setField("shareSshAuth", v)}
-                        />
-                      </SettingRow>
-                    </HostOnly>
-                    <SettingRow
-                      label={t("hosts.forceKeyboardInteractiveLabel")}
-                      description={t("hosts.forceKeyboardInteractiveShortDesc")}
-                      defaultKey="core.forceKeyboardInteractive"
-                    >
-                      <FakeSwitch
-                        checked={form.forceKeyboardInteractive}
-                        onChange={(v) =>
-                          setField("forceKeyboardInteractive", v)
-                        }
-                      />
-                    </SettingRow>
-                    <SettingRow
-                      label={t("hosts.allowLegacyAlgorithmsLabel")}
-                      defaultKey="core.allowLegacyAlgorithms"
-                      badge={
-                        form.allowLegacyAlgorithms
-                          ? t("hosts.insecure")
-                          : undefined
+                  {ActiveAuthEditor && (
+                    <ActiveAuthEditor
+                      form={form}
+                      setField={
+                        setField as unknown as (
+                          key: string,
+                          value: unknown,
+                        ) => void
                       }
-                      description={t("hosts.allowLegacyAlgorithmsDesc")}
-                    >
-                      <FakeSwitch
-                        checked={form.allowLegacyAlgorithms}
-                        onChange={(v) => setField("allowLegacyAlgorithms", v)}
-                      />
-                    </SettingRow>
-                    <HostOnly>
+                    />
+                  )}
+                  {authMethod === "agent" && (
+                    <div className="flex flex-col gap-2 border-t border-border pt-3">
+                      <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
+                        {t("hosts.agentLabel")}
+                      </span>
+                      <p className="text-[10px] text-muted-foreground">
+                        {t("hosts.agentAuthenticationDesc")}
+                      </p>
                       <div className="flex flex-col gap-1.5">
                         <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                          {t("hosts.sudoPasswordLabel")}
+                          {t("hosts.agentSocketPathLabel")}
                         </label>
-                        <PasswordInput
-                          className="h-8 text-xs pr-8"
-                          placeholder={
-                            form.sudoPassword === "existing_sudo_password"
-                              ? t("hosts.sudoPasswordSaved")
-                              : "••••••••"
-                          }
-                          value={
-                            form.sudoPassword === "existing_sudo_password"
-                              ? ""
-                              : form.sudoPassword
-                          }
-                          onFocus={() => {
-                            if (form.sudoPassword === "existing_sudo_password")
-                              setField("sudoPassword", "");
-                          }}
+                        <Input
+                          placeholder={t("hosts.agentSocketPathPlaceholder")}
+                          value={form.agentSocketPath}
                           onChange={(e) =>
-                            setField("sudoPassword", e.target.value)
+                            setField("agentSocketPath", e.target.value)
                           }
                         />
                         <p className="text-[10px] text-muted-foreground">
-                          {t("hosts.sudoPasswordDesc")}
+                          {t("hosts.agentSocketPathHint")}
                         </p>
                       </div>
-                    </HostOnly>
-                  </div>
-                </SectionCard>
-              </>
-            )}
+                      <div className="flex flex-col gap-1.5">
+                        <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
+                          {t("hosts.agentIdentityLabel")}
+                        </label>
+                        <Input
+                          placeholder={t("hosts.agentIdentityPlaceholder")}
+                          value={form.agentIdentity}
+                          onChange={(e) =>
+                            setField("agentIdentity", e.target.value)
+                          }
+                        />
+                        <p className="text-[10px] text-muted-foreground">
+                          {t("hosts.agentIdentityHint")}
+                        </p>
+                      </div>
+                    </div>
+                  )}
+                  <HostOnly>
+                    <SettingRow
+                      label={t("hosts.shareSshAuthLabel")}
+                      description={t("hosts.shareSshAuthDesc")}
+                    >
+                      <FakeSwitch
+                        checked={form.shareSshAuth}
+                        onChange={(v) => setField("shareSshAuth", v)}
+                      />
+                    </SettingRow>
+                  </HostOnly>
+                  <SettingRow
+                    label={t("hosts.forceKeyboardInteractiveLabel")}
+                    description={t("hosts.forceKeyboardInteractiveShortDesc")}
+                    defaultKey="core.forceKeyboardInteractive"
+                  >
+                    <FakeSwitch
+                      checked={form.forceKeyboardInteractive}
+                      onChange={(v) => setField("forceKeyboardInteractive", v)}
+                    />
+                  </SettingRow>
+                  <SettingRow
+                    label={t("hosts.allowLegacyAlgorithmsLabel")}
+                    defaultKey="core.allowLegacyAlgorithms"
+                    badge={
+                      form.allowLegacyAlgorithms
+                        ? t("hosts.insecure")
+                        : undefined
+                    }
+                    description={t("hosts.allowLegacyAlgorithmsDesc")}
+                  >
+                    <FakeSwitch
+                      checked={form.allowLegacyAlgorithms}
+                      onChange={(v) => setField("allowLegacyAlgorithms", v)}
+                    />
+                  </SettingRow>
+                  <HostOnly>
+                    <div className="flex flex-col gap-1.5">
+                      <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
+                        {t("hosts.sudoPasswordLabel")}
+                      </label>
+                      <PasswordInput
+                        className="h-8 text-xs pr-8"
+                        placeholder={
+                          form.sudoPassword === "existing_sudo_password"
+                            ? t("hosts.sudoPasswordSaved")
+                            : "••••••••"
+                        }
+                        value={
+                          form.sudoPassword === "existing_sudo_password"
+                            ? ""
+                            : form.sudoPassword
+                        }
+                        onFocus={() => {
+                          if (form.sudoPassword === "existing_sudo_password")
+                            setField("sudoPassword", "");
+                        }}
+                        onChange={(e) =>
+                          setField("sudoPassword", e.target.value)
+                        }
+                      />
+                      <p className="text-[10px] text-muted-foreground">
+                        {t("hosts.sudoPasswordDesc")}
+                      </p>
+                    </div>
+                  </HostOnly>
+                </div>
+              </SectionCard>
+            </EditorSection>
+          )}
 
-            {(() => {
-              const section = getHostEditorSection(activeTab);
-              if (!section) return null;
-              const Section = section.component;
-              return (
-                <Section
-                  form={form}
-                  setField={
-                    setField as unknown as (key: string, value: unknown) => void
-                  }
-                  updateForm={updateForm}
-                  host={host}
-                  credentials={availableCredentials}
-                  adminTargetUserId={adminTargetUserId}
-                  protocols={protocols as unknown as Record<string, boolean>}
-                  mode={defaultsMode ? "defaults" : "host"}
-                />
-              );
-            })()}
-          </div>
+          {pluginSectionIds.map(renderPluginSection)}
         </fieldset>
+      </EditorPane>
 
-        <div className="flex justify-end gap-3 mt-3 mb-6">
-          <Button
-            variant="ghost"
-            onClick={() => {
-              onBack();
-            }}
-            disabled={saving}
-          >
-            {t("hosts.editorCancel")}
-          </Button>
-          {!readOnly && (
+      <InlineView
+        open={showQuickCredentialDialog}
+        onOpenChange={setShowQuickCredentialDialog}
+        title={t("hosts.createCredentialFromHostTitle")}
+        footer={
+          <div className="ml-auto flex gap-2">
+            <Button
+              variant="ghost"
+              size="sm"
+              onClick={() => setShowQuickCredentialDialog(false)}
+              disabled={creatingQuickCredential}
+            >
+              {t("hosts.cancelBtn")}
+            </Button>
             <Button
               variant="outline"
-              className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand px-8"
-              onClick={handleSave}
-              disabled={saving}
+              size="sm"
+              className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
+              onClick={handleQuickCreateCredential}
+              disabled={creatingQuickCredential}
             >
-              {saving
-                ? t("hosts.editorSaving")
-                : defaultsMode
-                  ? t("hostDefaults.save")
-                  : host
-                    ? t("hosts.editorUpdate")
-                    : t("hosts.editorAdd")}
+              {creatingQuickCredential
+                ? t("hosts.savingBtn")
+                : t("hosts.addCredentialBtn")}
             </Button>
-          )}
+          </div>
+        }
+      >
+        <p className="text-xs text-muted-foreground">
+          {t("hosts.createCredentialFromHostDesc")}
+        </p>
+        <div className="flex flex-col gap-1.5">
+          <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
+            {t("hosts.friendlyNameLabel")}
+          </label>
+          <Input
+            autoFocus
+            placeholder={t("placeholders.credentialName")}
+            value={quickCredentialName}
+            onChange={(e) => setQuickCredentialName(e.target.value)}
+            onKeyDown={(e) => {
+              if (e.key === "Enter") void handleQuickCreateCredential();
+            }}
+          />
         </div>
-
-        {showQuickCredentialDialog && (
-          <div className="fixed inset-0 z-50 flex items-center justify-center bg-background/80 backdrop-blur-sm p-4">
-            <div className="bg-popover border border-border shadow-xl w-full max-w-sm flex flex-col gap-4 p-4">
-              <div className="flex items-center justify-between">
-                <span className="text-sm font-bold">
-                  {t("hosts.createCredentialFromHostTitle")}
-                </span>
-                <button
-                  onClick={() => setShowQuickCredentialDialog(false)}
-                  className="text-muted-foreground hover:text-foreground"
-                >
-                  <X className="size-4" />
-                </button>
-              </div>
-              <div className="text-xs text-muted-foreground">
-                {t("hosts.createCredentialFromHostDesc")}
-              </div>
-              <div className="flex flex-col gap-1.5">
-                <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                  {t("hosts.friendlyNameLabel")}
-                </label>
-                <Input
-                  placeholder={t("placeholders.credentialName")}
-                  value={quickCredentialName}
-                  onChange={(e) => setQuickCredentialName(e.target.value)}
-                />
-              </div>
-              <div className="flex justify-end gap-2">
-                <Button
-                  variant="ghost"
-                  size="sm"
-                  onClick={() => setShowQuickCredentialDialog(false)}
-                  disabled={creatingQuickCredential}
-                >
-                  {t("hosts.cancelBtn")}
-                </Button>
-                <Button
-                  variant="outline"
-                  size="sm"
-                  className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-                  onClick={handleQuickCreateCredential}
-                  disabled={creatingQuickCredential}
-                >
-                  {creatingQuickCredential
-                    ? t("hosts.savingBtn")
-                    : t("hosts.addCredentialBtn")}
-                </Button>
-              </div>
-            </div>
-          </div>
-        )}
-
-        {pendingDefaults && (
-          <div className="fixed inset-0 z-50 flex items-center justify-center bg-background/80 backdrop-blur-sm p-4">
-            <div className="bg-popover border border-border shadow-xl w-full max-w-sm flex flex-col gap-4 p-4">
-              <span className="text-sm font-bold">
-                {t("hostDefaults.confirmTitle")}
-              </span>
-              <div className="text-xs text-muted-foreground">
-                {pendingDefaults.changedHosts > 0
-                  ? t("hostDefaults.confirmChanges", {
-                      count: pendingDefaults.changedHosts,
-                    })
-                  : t("hostDefaults.confirmNoChanges")}
-              </div>
-              <div className="flex justify-end gap-2">
-                <Button
-                  variant="ghost"
-                  size="sm"
-                  onClick={() => setPendingDefaults(null)}
-                  disabled={saving}
-                >
-                  {t("hosts.cancelBtn")}
-                </Button>
-                <Button
-                  variant="outline"
-                  size="sm"
-                  className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-                  onClick={confirmDefaults}
-                  disabled={saving}
-                >
-                  {t("hostDefaults.save")}
-                </Button>
-              </div>
-            </div>
-          </div>
-        )}
-      </div>
+      </InlineView>
     </HostDefaultsContext.Provider>
   );
 }
diff --git a/src/ui/sidebar/HostEditorData.ts b/src/ui/sidebar/HostEditorData.ts
index 2ac189b5c..e9b0768e0 100644
--- a/src/ui/sidebar/HostEditorData.ts
+++ b/src/ui/sidebar/HostEditorData.ts
@@ -5,7 +5,7 @@ import {
   type HostDraft,
   type HostProtocolAuthForm,
   type HostProtocolAuthSummary,
-} from "@termix/plugin-sdk/frontend";
+} from "@termix-ssh/plugin-sdk/frontend";
 import type { DefaultOverrides } from "@/types/host-defaults";
 import {
   listHostProtocols,
diff --git a/src/ui/sidebar/HostEditorGeneralTab.tsx b/src/ui/sidebar/HostEditorGeneralTab.tsx
index 62ca80cfd..4e8d1aa91 100644
--- a/src/ui/sidebar/HostEditorGeneralTab.tsx
+++ b/src/ui/sidebar/HostEditorGeneralTab.tsx
@@ -14,6 +14,7 @@ import { getSSHFolders, isElectron } from "@/main-axios";
 import { connectionOriginAppliesTo } from "./HostEditorData";
 import { useSyncStatus } from "@/hooks/use-sync-status";
 import type { HostEditorForm, HostProtocols } from "./HostEditorData";
+import type { HostFormErrors } from "@/manage/host-validation";
 import { Select2 } from "@/components/select2";
 import { useHostProtocols } from "./host-protocols";
 import {
@@ -21,6 +22,7 @@ import {
   HostDefaultBadge,
   HostOnly,
 } from "@/lib/host-defaults-context";
+import { DocsLink } from "@/components/docs-link";
 
 type HostEditorSetField = <K extends keyof HostEditorForm>(
   key: K,
@@ -35,6 +37,7 @@ export function HostEditorGeneralTab({
   hosts,
   host,
   simpleMode = false,
+  errors = {},
 }: {
   form: HostEditorForm;
   setField: HostEditorSetField;
@@ -44,6 +47,7 @@ export function HostEditorGeneralTab({
   host: Host | null;
   /** Hides organizational/advanced fields; their values still save unchanged. */
   simpleMode?: boolean;
+  errors?: HostFormErrors;
 }) {
   const { t } = useTranslation();
   const syncLinked = !!useSyncStatus()?.linked;
@@ -142,7 +146,7 @@ export function HostEditorGeneralTab({
   return (
     <>
       <HostOnly>
-        {/* Protocols — enable/disable each connection type */}
+        {/* Protocols, enable/disable each connection type */}
         <SectionCard
           title={t("hosts.protocols")}
           icon={<Globe className="size-3.5" />}
@@ -210,8 +214,14 @@ export function HostEditorGeneralTab({
               <Input
                 placeholder={t("placeholders.hostAddress")}
                 value={form.ip}
+                aria-invalid={!!errors.ip}
                 onChange={(e) => setField("ip", e.target.value)}
               />
+              {errors.ip && (
+                <span className="text-[10px] text-destructive">
+                  {t(errors.ip)}
+                </span>
+              )}
             </div>
 
             <div className="grid grid-cols-1 md:grid-cols-2 gap-4">
@@ -393,14 +403,7 @@ export function HostEditorGeneralTab({
                 {t("hosts.portKnockingSequence")}
               </span>
               <HostDefaultBadge settingKey="core.portKnockSequence" />
-              <a
-                href="https://docs.termix.site/features/networking/port-knocking"
-                target="_blank"
-                rel="noreferrer"
-                className="text-[10px] text-accent-brand hover:underline"
-              >
-                {t("hosts.docsLink")}
-              </a>
+              <DocsLink core="portKnocking">{t("hosts.docsLink")}</DocsLink>
             </div>
             <Button
               variant="outline"
@@ -800,7 +803,7 @@ export function HostEditorGeneralTab({
                   ),
                 ].join(" ")}
               >
-                <select
+                <Select2
                   className="flex h-7 border border-border bg-background px-2 py-0 text-xs outline-none focus:ring-1 focus:ring-ring"
                   value={form.connectionOrigin ?? ""}
                   onChange={(e) =>
@@ -817,7 +820,7 @@ export function HostEditorGeneralTab({
                   <option value="remote">
                     {t("hosts.connectionOriginRemote")}
                   </option>
-                </select>
+                </Select2>
               </SettingRow>
             </HostOnly>
           )}
diff --git a/src/ui/sidebar/HostExportDialog.tsx b/src/ui/sidebar/HostExportDialog.tsx
index 21020d345..48f4701fa 100644
--- a/src/ui/sidebar/HostExportDialog.tsx
+++ b/src/ui/sidebar/HostExportDialog.tsx
@@ -1,19 +1,14 @@
+import { InlineView } from "@/components/surface/surface-scope";
+import { FormFooter } from "@/components/list-kit";
 import { getErrorMessage } from "../lib/error-message.js";
 import { usePluginStore } from "@/plugin-host/plugin-store";
 import { useEffect, useMemo, useRef, useState } from "react";
 import { useTranslation } from "react-i18next";
-import { Download, Search } from "lucide-react";
+import { Search } from "lucide-react";
 import { toast } from "sonner";
 import { Button } from "@/components/button";
 import { Checkbox } from "@/components/checkbox";
 import { Input } from "@/components/input";
-import {
-  Dialog,
-  DialogContent,
-  DialogFooter,
-  DialogHeader,
-  DialogTitle,
-} from "@/components/dialog";
 import { exportAllSSHHosts, type SSHHostWithStatus } from "@/main-axios";
 import { isFolder } from "@/sidebar/SidebarTree";
 import {
@@ -220,140 +215,133 @@ export function HostExportDialog({
   const canExport = !loading && count > 0;
 
   return (
-    <Dialog open={open} onOpenChange={(next) => !next && onClose()}>
-      <DialogContent className="flex flex-col w-[95vw] sm:max-w-6xl max-h-[85dvh] overflow-hidden">
-        <DialogHeader>
-          <DialogTitle>{t("hosts.export.title")}</DialogTitle>
-        </DialogHeader>
-
-        <div className="flex flex-col md:flex-row gap-4 flex-1 min-h-0 min-w-0 overflow-y-auto md:overflow-visible">
-          {/* Scope + host picker */}
-          <div className="flex flex-col gap-2 md:w-56 shrink-0 min-h-0">
-            <div className="text-xs text-muted-foreground">
-              {t("hosts.export.scope")}
-            </div>
-            <div className="flex gap-1">
-              <Button
-                size="sm"
-                variant={scope === "all" ? "default" : "outline"}
-                onClick={() => setScope("all")}
-              >
-                {t("hosts.export.scopeAll")}
-              </Button>
-              <Button
-                size="sm"
-                variant={scope === "selected" ? "default" : "outline"}
-                onClick={() => setScope("selected")}
-              >
-                {t("hosts.export.scopeSelected")}
-              </Button>
-            </div>
-            <div className="relative">
-              <Search className="size-3.5 absolute left-2 top-1/2 -translate-y-1/2 text-muted-foreground" />
-              <Input
-                className="pl-7 h-8 text-xs"
-                placeholder={t("hosts.export.searchHosts")}
-                value={search}
-                onChange={(e) => setSearch(e.target.value)}
-                disabled={scope === "all"}
-              />
-            </div>
-            <div className="flex-1 min-h-0 overflow-y-auto max-h-64 flex flex-col gap-1 pr-1">
-              {visibleHosts.map((host) => {
-                const key = hostKey(host as unknown as Record<string, unknown>);
-                return (
-                  <label
-                    key={String(host.id)}
-                    className="flex items-center gap-2 text-xs cursor-pointer"
-                  >
-                    <Checkbox
-                      checked={scope === "all" || selectedKeys.has(key)}
-                      disabled={scope === "all"}
-                      onCheckedChange={() => toggleHost(key)}
-                    />
-                    <span className="truncate">{host.name}</span>
-                  </label>
-                );
-              })}
-            </div>
+    <InlineView
+      open={open}
+      onOpenChange={(next) => !next && onClose()}
+      title={t("hosts.export.title")}
+      width="wide"
+      footer={
+        <FormFooter
+          onCancel={onClose}
+          cancelLabel={t("hosts.export.cancel")}
+          onSave={() => void handleExport()}
+          saveLabel={t("hosts.export.confirm")}
+          disabled={!canExport}
+        />
+      }
+    >
+      <div className="flex flex-col md:flex-row gap-4 flex-1 min-h-0 min-w-0 overflow-y-auto md:overflow-visible">
+        {/* Scope + host picker */}
+        <div className="flex flex-col gap-2 md:w-56 shrink-0 min-h-0">
+          <div className="text-xs text-muted-foreground">
+            {t("hosts.export.scope")}
           </div>
+          <div className="flex gap-1">
+            <Button
+              size="sm"
+              variant={scope === "all" ? "default" : "outline"}
+              onClick={() => setScope("all")}
+            >
+              {t("hosts.export.scopeAll")}
+            </Button>
+            <Button
+              size="sm"
+              variant={scope === "selected" ? "default" : "outline"}
+              onClick={() => setScope("selected")}
+            >
+              {t("hosts.export.scopeSelected")}
+            </Button>
+          </div>
+          <div className="relative">
+            <Search className="size-3.5 absolute left-2 top-1/2 -translate-y-1/2 text-muted-foreground" />
+            <Input
+              className="pl-7 h-8 text-xs"
+              placeholder={t("hosts.export.searchHosts")}
+              value={search}
+              onChange={(e) => setSearch(e.target.value)}
+              disabled={scope === "all"}
+            />
+          </div>
+          <div className="flex-1 min-h-0 overflow-y-auto max-h-64 flex flex-col gap-1 pr-1">
+            {visibleHosts.map((host) => {
+              const key = hostKey(host as unknown as Record<string, unknown>);
+              return (
+                <label
+                  key={String(host.id)}
+                  className="flex items-center gap-2 text-xs cursor-pointer"
+                >
+                  <Checkbox
+                    checked={scope === "all" || selectedKeys.has(key)}
+                    disabled={scope === "all"}
+                    onCheckedChange={() => toggleHost(key)}
+                  />
+                  <span className="truncate">{host.name}</span>
+                </label>
+              );
+            })}
+          </div>
+        </div>
 
-          {/* Field groups */}
-          <div className="flex flex-col gap-2 md:w-48 shrink-0 md:overflow-y-auto">
-            <div className="text-xs text-muted-foreground">
-              {t("hosts.export.include")}
-            </div>
-            <label className="flex items-center gap-2 text-xs opacity-60">
-              <Checkbox checked disabled />
-              <span>{t("hosts.export.groupConnection")}</span>
-            </label>
-            <label className="flex items-center gap-2 text-xs cursor-pointer">
+        {/* Field groups */}
+        <div className="flex flex-col gap-2 md:w-48 shrink-0 md:overflow-y-auto">
+          <div className="text-xs text-muted-foreground">
+            {t("hosts.export.include")}
+          </div>
+          <label className="flex items-center gap-2 text-xs opacity-60">
+            <Checkbox checked disabled />
+            <span>{t("hosts.export.groupConnection")}</span>
+          </label>
+          <label className="flex items-center gap-2 text-xs cursor-pointer">
+            <Checkbox
+              checked={withCredentials}
+              onCheckedChange={(v) => setWithCredentials(v === true)}
+            />
+            <span>{t("hosts.export.groupCredentials")}</span>
+          </label>
+          {GROUPS.filter((g) => g.key !== "connection").map((group) => (
+            <label
+              key={group.key}
+              className="flex items-center gap-2 text-xs cursor-pointer"
+            >
               <Checkbox
-                checked={withCredentials}
-                onCheckedChange={(v) => setWithCredentials(v === true)}
+                checked={groups.has(group.key)}
+                onCheckedChange={() => toggleGroup(group.key)}
               />
-              <span>{t("hosts.export.groupCredentials")}</span>
+              <span>{t(`hosts.export.${group.label}`)}</span>
             </label>
-            {GROUPS.filter((g) => g.key !== "connection").map((group) => (
-              <label
-                key={group.key}
-                className="flex items-center gap-2 text-xs cursor-pointer"
-              >
-                <Checkbox
-                  checked={groups.has(group.key)}
-                  onCheckedChange={() => toggleGroup(group.key)}
-                />
-                <span>{t(`hosts.export.${group.label}`)}</span>
-              </label>
-            ))}
-          </div>
-
-          {/* Preview */}
-          <div className="flex flex-col gap-2 flex-1 min-w-0 min-h-0">
-            <div className="text-xs text-muted-foreground">
-              {t("hosts.export.preview")}
-            </div>
-            <pre className="flex-1 w-full min-w-0 overflow-auto max-h-64 md:max-h-none rounded-sm bg-muted border border-border p-2 text-[11px] leading-relaxed whitespace-pre">
-              {preview}
-            </pre>
-          </div>
+          ))}
         </div>
 
-        <div className="shrink-0 text-xs text-muted-foreground">
-          {count === 0 ? (
-            t("hosts.export.noneSelected")
-          ) : (
-            <span className="flex flex-wrap gap-x-3">
-              <span>
-                {t("hosts.export.summary", {
-                  selected: count,
-                  total: exportableHosts.length,
-                })}
-              </span>
-              <span>
-                {withCredentials
-                  ? t("hosts.export.credentialsIncluded")
-                  : t("hosts.export.credentialsExcluded")}
-              </span>
+        {/* Preview */}
+        <div className="flex flex-col gap-2 flex-1 min-w-0 min-h-0">
+          <div className="text-xs text-muted-foreground">
+            {t("hosts.export.preview")}
+          </div>
+          <pre className="flex-1 w-full min-w-0 overflow-auto max-h-64 md:max-h-none rounded-sm bg-muted border border-border p-2 text-[11px] leading-relaxed whitespace-pre">
+            {preview}
+          </pre>
+        </div>
+      </div>
+
+      <div className="shrink-0 text-xs text-muted-foreground">
+        {count === 0 ? (
+          t("hosts.export.noneSelected")
+        ) : (
+          <span className="flex flex-wrap gap-x-3">
+            <span>
+              {t("hosts.export.summary", {
+                selected: count,
+                total: exportableHosts.length,
+              })}
             </span>
-          )}
-        </div>
-
-        <DialogFooter className="shrink-0">
-          <Button variant="outline" onClick={onClose}>
-            {t("hosts.export.cancel")}
-          </Button>
-          <Button
-            variant="outline"
-            className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-            onClick={handleExport}
-            disabled={!canExport}
-          >
-            <Download className="size-3.5 mr-2" />
-            {t("hosts.export.confirm")}
-          </Button>
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
+            <span>
+              {withCredentials
+                ? t("hosts.export.credentialsIncluded")
+                : t("hosts.export.credentialsExcluded")}
+            </span>
+          </span>
+        )}
+      </div>
+    </InlineView>
   );
 }
diff --git a/src/ui/sidebar/HostManager.tsx b/src/ui/sidebar/HostManager.tsx
deleted file mode 100644
index 696befa41..000000000
--- a/src/ui/sidebar/HostManager.tsx
+++ /dev/null
@@ -1,928 +0,0 @@
-/* eslint-disable react-hooks/exhaustive-deps */
-import {
-  enabledHostProtocols,
-  hostProtocolFlags,
-  type HostProtocols,
-} from "./host-protocols";
-import React, {
-  useState,
-  useEffect,
-  useRef,
-  type MutableRefObject,
-} from "react";
-import { useTranslation } from "react-i18next";
-import type { HostDefaultsLevel } from "@/types/host-defaults";
-import { getFolderDefaultsId } from "@/api/host-defaults-api";
-import {
-  HostDefaultsEditorView,
-  type HostDefaultsEditorTarget,
-} from "./host-defaults/HostDefaultsEditorView";
-import type { HostDraft } from "@termix/plugin-sdk/frontend";
-import { CredentialShareModal } from "./CredentialShareModal";
-
-import { Button } from "@/components/button";
-import { ArrowLeft, ChevronDown, Search, X } from "lucide-react";
-import { useUiPreference } from "@/contexts/UiPreferencesContext";
-import { toast } from "sonner";
-import {
-  getSSHHosts,
-  getCredentials,
-  getCredentialDetails,
-  deleteCredential,
-  duplicateCredential,
-  updateCredential,
-  deployCredentialToHost,
-  renameCredentialFolder,
-} from "@/main-axios";
-
-import type { Host, Credential } from "@/types/ui-types";
-import type { SSHHostWithStatus } from "@/main-axios";
-import type {
-  CredentialSidebarFilterState,
-  CredentialSortKey,
-} from "@/types/credential-sidebar-preferences";
-import { CredentialEditorView } from "./CredentialEditorView";
-import { HostEditor } from "./HostEditor";
-import { mapCredentials, sshHostToHost } from "./HostManagerData";
-import { CredentialSidebarTree } from "./credential-tree";
-import { sortCredentials, credentialPassesFilters } from "./credential-sort";
-import {
-  makeCredentialTabs,
-  makeHostTabs,
-  makeHostSshSubTabs,
-  isSshGroupTab,
-  useHostEditorSections,
-  TabStrip,
-} from "./HostManagerTabs";
-import { Select2 } from "@/components/select2";
-
-export function HostManager({
-  pendingEditId,
-  pendingAction,
-  onEditingChange,
-  hideListHeader,
-  externalSearch,
-  externalSort,
-  externalArrangeLocked = true,
-  externalFilter,
-  density = "comfortable",
-  trayTrigger = "hover",
-  showTags = true,
-  onTagsChange,
-  active = true,
-}: {
-  pendingEditId?: MutableRefObject<string | null>;
-  pendingAction?: MutableRefObject<"add-host" | "add-credential" | null>;
-  onEditingChange?: (editing: boolean) => void;
-  hideListHeader?: boolean;
-  externalSearch?: string;
-  externalSort?: CredentialSortKey;
-  externalArrangeLocked?: boolean;
-  externalFilter?: CredentialSidebarFilterState;
-  density?: "comfortable" | "compact";
-  trayTrigger?: "always" | "hover" | "click" | "actionsOnly";
-  showTags?: boolean;
-  onTagsChange?: (tags: string[]) => void;
-  active?: boolean;
-} = {}) {
-  // Re-render when a plugin adds or removes a host editor tab.
-  useHostEditorSections();
-  const { t } = useTranslation();
-  const [editingHost, setEditingHost] = useState<Host | "new" | null>(null);
-  // A level of host defaults open in the editor instead of a host.
-  const [editingDefaults, setEditingDefaults] =
-    useState<HostDefaultsEditorTarget | null>(null);
-  // Fields a plugin filled in for a new host, keyed so a second draft remounts
-  // the editor.
-  const [hostDraft, setHostDraft] = useState<{
-    key: number;
-    draft: HostDraft;
-  } | null>(null);
-  const [shareCredential, setShareCredential] = useState<Credential | null>(
-    null,
-  );
-  const [editingCredential, setEditingCredential] = useState<
-    Credential | "new" | null
-  >(null);
-  const [activeHostTab, setActiveHostTab] = useState("general");
-  const [activeCredentialTab, setActiveCredentialTab] = useState("general");
-  const [searchQuery, setSearchQuery] = useState("");
-  const effectiveSearch = externalSearch ?? searchQuery;
-  const [hosts, setHosts] = useState<Host[]>([]);
-  const [credentials, setCredentials] = useState<Credential[]>([]);
-  const [credentialsLoading, setCredentialsLoading] = useState(true);
-  const [deployDialog, setDeployDialog] = useState<{
-    cred: Credential;
-    hostId: string;
-  } | null>(null);
-  const [deploying, setDeploying] = useState(false);
-  const [confirmDialog, setConfirmDialog] = useState<{
-    message: string;
-    onConfirm: () => void;
-  } | null>(null);
-  const [hostEditorDirty, setHostEditorDirty] = useState(false);
-  const [showUnsavedHostDialog, setShowUnsavedHostDialog] = useState(false);
-  const [editingProtocols, setEditingProtocols] = useState<HostProtocols>(() =>
-    hostProtocolFlags(null),
-  );
-  const simpleEditor = useUiPreference("hostEditor", "mode") === "simple";
-  // Expanding advanced is a per-session choice; fixing one host's SSH options
-  // shouldn't quietly move the whole app off the Simple preset.
-  const [showAdvancedEditor, setShowAdvancedEditor] = useState(false);
-  const hostsRef = useRef<Host[]>([]);
-  useEffect(() => {
-    hostsRef.current = hosts;
-  }, [hosts]);
-  const [editingCredFolderName, setEditingCredFolderName] = useState<
-    string | null
-  >(null);
-  const [editingCredFolderValue, setEditingCredFolderValue] = useState("");
-  // Remembers the host being edited when its credential is opened for
-  // editing, so "back" can return to that host instead of the list.
-  const [credentialReturnHost, setCredentialReturnHost] = useState<
-    Host | "new" | null
-  >(null);
-
-  useEffect(() => {
-    onTagsChange?.([...new Set(credentials.flatMap((c) => c.tags ?? []))]);
-  }, [credentials]);
-
-  const applyPendingEdit = (hostList: Host[]) => {
-    if (pendingEditId?.current) {
-      const id = pendingEditId.current;
-      pendingEditId.current = null;
-      const host = hostList.find((h) => h.id === id);
-      if (host) {
-        setEditingHost(host);
-        setEditingCredential(null);
-        setActiveHostTab("general");
-        setEditingProtocols(hostProtocolFlags(host));
-        return true;
-      }
-    }
-    return false;
-  };
-
-  const reloadHosts = () => {
-    getSSHHosts()
-      .then((raw) => {
-        const converted = raw.map(sshHostToHost);
-        setHosts(converted);
-        applyPendingEdit(converted);
-      })
-      .catch(() => {});
-  };
-
-  const reloadCredentials = () => {
-    getCredentials()
-      .then((res) => setCredentials(mapCredentials(res)))
-      .catch(() => {})
-      .finally(() => setCredentialsLoading(false));
-  };
-
-  useEffect(() => {
-    reloadHosts();
-    reloadCredentials();
-
-    window.addEventListener("termix:hosts-changed", reloadHosts);
-    window.addEventListener("ssh-hosts:changed", reloadHosts);
-    window.addEventListener("hosts:refresh", reloadHosts);
-    window.addEventListener("termix:credentials-changed", reloadCredentials);
-    return () => {
-      window.removeEventListener("termix:hosts-changed", reloadHosts);
-      window.removeEventListener("ssh-hosts:changed", reloadHosts);
-      window.removeEventListener("hosts:refresh", reloadHosts);
-      window.removeEventListener(
-        "termix:credentials-changed",
-        reloadCredentials,
-      );
-    };
-  }, []);
-
-  useEffect(() => {
-    if (pendingAction?.current) {
-      const action = pendingAction.current;
-      pendingAction.current = null;
-      if (action === "add-host") {
-        setEditingHost("new");
-        setHostDraft(null);
-        setEditingCredential(null);
-        setEditingProtocols(hostProtocolFlags(null));
-        setActiveHostTab("general");
-      } else if (action === "add-credential") {
-        setEditingCredential("new");
-        setEditingHost(null);
-        setActiveCredentialTab("general");
-      }
-    }
-  }, [pendingEditId, pendingAction]);
-
-  useEffect(() => {
-    if (!active) return;
-    const handleAddHost = (e: Event) => {
-      const draft = (e as CustomEvent<HostDraft | undefined>).detail;
-      setEditingHost("new");
-      setHostDraft(draft ? { key: Date.now(), draft } : null);
-      setEditingCredential(null);
-      setEditingProtocols(hostProtocolFlags(null));
-      setActiveHostTab("general");
-    };
-    const handleAddCredential = () => {
-      setEditingCredential("new");
-      setEditingHost(null);
-      setActiveCredentialTab("general");
-    };
-    const handleEditDefaults = (e: Event) => {
-      const detail = (
-        e as CustomEvent<{ level: HostDefaultsLevel; folderName?: string }>
-      ).detail;
-      if (!detail) return;
-      const open = (target: HostDefaultsEditorTarget) => {
-        setEditingHost(null);
-        setEditingCredential(null);
-        setEditingDefaults(target);
-      };
-      if (detail.level === "folder" && detail.folderName) {
-        const folderName = detail.folderName;
-        getFolderDefaultsId(folderName)
-          .then((folderId) => open({ level: "folder", folderId, folderName }))
-          .catch(() => toast.error(t("hostDefaults.loadFailed")));
-      } else if (detail.level !== "folder") {
-        open({ level: detail.level });
-      }
-    };
-    const handleEditHost = (e: Event) => {
-      const id = (e as CustomEvent<string>).detail;
-      const host = hostsRef.current.find((h) => h.id === id);
-      if (host) {
-        setEditingHost(host);
-        setEditingCredential(null);
-        setActiveHostTab("general");
-        setEditingProtocols(hostProtocolFlags(host));
-      }
-    };
-    window.addEventListener("host-manager:add-host", handleAddHost);
-    window.addEventListener("host-manager:add-credential", handleAddCredential);
-    window.addEventListener("host-manager:edit-host", handleEditHost);
-    window.addEventListener("host-manager:edit-defaults", handleEditDefaults);
-    return () => {
-      window.removeEventListener(
-        "host-manager:edit-defaults",
-        handleEditDefaults,
-      );
-      window.removeEventListener("host-manager:add-host", handleAddHost);
-      window.removeEventListener(
-        "host-manager:add-credential",
-        handleAddCredential,
-      );
-      window.removeEventListener("host-manager:edit-host", handleEditHost);
-    };
-  }, [active]);
-
-  const allHosts = hosts;
-  const searchedCredentials = credentials.filter(
-    (c) =>
-      c.name.toLowerCase().includes(effectiveSearch.toLowerCase()) ||
-      c.username.toLowerCase().includes(effectiveSearch.toLowerCase()),
-  );
-  const filteredCredentials = sortCredentials(
-    externalFilter
-      ? searchedCredentials.filter((c) =>
-          credentialPassesFilters(c, externalFilter),
-        )
-      : searchedCredentials,
-    externalSort ?? "default",
-  );
-
-  const credentialFolderNames = Array.from(
-    new Set(filteredCredentials.map((c) => c.folder || "Uncategorized")),
-  ).sort();
-  const credentialFolderTree = credentialFolderNames.map((name) => ({
-    name,
-    children: filteredCredentials.filter(
-      (c) => (c.folder || "Uncategorized") === name,
-    ),
-  }));
-  const usedByCounts = new Map<string, number>();
-  for (const cred of filteredCredentials) {
-    usedByCounts.set(
-      cred.id,
-      allHosts.filter((h) => h.credentialId === cred.id).length,
-    );
-  }
-
-  const handleRenameCredentialFolder = async (
-    folder: string,
-    newName: string,
-  ) => {
-    try {
-      await renameCredentialFolder(folder, newName);
-      const res = await getCredentials();
-      setCredentials(mapCredentials(res));
-      toast.success(t("credentials.folderRenamedTo", { name: newName }));
-    } catch {
-      toast.error(t("credentials.failedToRenameFolder"));
-    }
-  };
-
-  const handleMoveCredentialToFolder = async (
-    credentialId: string,
-    targetFolder: string,
-  ) => {
-    const cred = credentials.find((c) => c.id === credentialId);
-    if (!cred || (cred.folder || "Uncategorized") === targetFolder) return;
-    const folderValue = targetFolder === "Uncategorized" ? "" : targetFolder;
-    try {
-      await updateCredential(Number(credentialId), { folder: folderValue });
-      setCredentials((prev) =>
-        prev.map((c) =>
-          c.id === credentialId ? { ...c, folder: folderValue } : c,
-        ),
-      );
-    } catch {
-      toast.error(t("credentials.failedToMoveCredential"));
-    }
-  };
-
-  const handleCloneCredential = async (cred: Credential) => {
-    try {
-      await duplicateCredential(Number(cred.id), {
-        name: t("credentials.clonedCredentialName", { name: cred.name }),
-      });
-      const res = await getCredentials();
-      setCredentials(mapCredentials(res));
-      window.dispatchEvent(new CustomEvent("termix:credentials-changed"));
-      toast.success(t("credentials.clonedCredential", { name: cred.name }));
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : null;
-      toast.error(msg || t("credentials.failedToCloneCredential"));
-    }
-  };
-
-  const handleDeleteCredential = async (cred: Credential) => {
-    await deleteCredential(Number(cred.id));
-    setCredentials((prev) => prev.filter((c) => c.id !== cred.id));
-  };
-
-  function handleConfirmDeleteCredential(cred: Credential) {
-    setConfirmDialog({
-      message: t("credentials.deleteCredentialConfirm", { name: cred.name }),
-      onConfirm: async () => {
-        try {
-          await handleDeleteCredential(cred);
-          toast.success(
-            t("credentials.deletedCredential", { name: cred.name }),
-          );
-        } catch {
-          toast.error(t("credentials.failedToDeleteCredential"));
-        }
-      },
-    });
-  }
-
-  async function handleEditCredential(cred: Credential) {
-    try {
-      const full = (await getCredentialDetails(Number(cred.id))) as {
-        hasKey?: boolean;
-        hasKeyPassword?: boolean;
-        password?: string;
-        certPublicKey?: string;
-      };
-      setEditingCredential({
-        ...cred,
-        value: full.hasKey ? "existing_key" : (full.password ?? ""),
-        password: full.password ?? "",
-        passphrase: full.hasKeyPassword ? "existing_key_password" : "",
-        publicKey: full.certPublicKey ?? cred.publicKey,
-      });
-      setActiveCredentialTab("general");
-    } catch {
-      setEditingCredential(cred);
-      setActiveCredentialTab("general");
-    }
-  }
-
-  // Opens a host's credential for editing from within the host editor,
-  // remembering the host so "back" returns to it instead of the list.
-  async function handleEditCredentialFromHost(credentialId: string) {
-    const cred = credentials.find((c) => String(c.id) === String(credentialId));
-    if (!cred) return;
-    setCredentialReturnHost(editingHost);
-    await handleEditCredential(cred);
-    // The editor view keys off editingHost, so it has to be cleared or the
-    // host editor keeps rendering over the credential we just opened.
-    setEditingHost(null);
-  }
-
-  // Editor view: full-width with top tab bar instead of side nav
-  const closeHostEditor = () => {
-    setHostEditorDirty(false);
-    setShowUnsavedHostDialog(false);
-    setEditingHost(null);
-    setEditingDefaults(null);
-    setActiveHostTab("general");
-  };
-
-  const requestCloseHostEditor = () => {
-    if (hostEditorDirty) {
-      setShowUnsavedHostDialog(true);
-      return;
-    }
-    closeHostEditor();
-  };
-
-  const renderEditorView = () => {
-    if (editingDefaults) {
-      return (
-        <HostDefaultsEditorView
-          target={editingDefaults}
-          onClose={requestCloseHostEditor}
-          onDirtyChange={setHostEditorDirty}
-          hosts={hosts}
-          credentials={credentials}
-        />
-      );
-    }
-    const isHost = !!editingHost;
-    // Simple mode keeps General and SSH -- between them they hold everything
-    // needed to reach a host (name, address, username, auth) -- and hides the
-    // other protocol tabs plus the seven SSH sub-tabs. Nothing is lost:
-    // createHostEditorForm still materializes every field with its default and
-    // buildHostEditorPayload still serializes all of them, so hiding a tab
-    // hides its inputs, not its values.
-    const collapseAdvanced = isHost && simpleEditor && !showAdvancedEditor;
-    const protocols = editingProtocols as unknown as Record<string, boolean>;
-    // Plugin tabs decide their own visibility from the host's protocols.
-    const tabs = isHost
-      ? makeHostTabs(t, protocols).filter((tab) => {
-          if (tab.id === "general") return true;
-          if (tab.id === "ssh") return editingProtocols.enableSsh;
-          return !collapseAdvanced;
-        })
-      : makeCredentialTabs(t);
-    // Collapsing while on a now-hidden tab would leave nothing selected. The
-    // SSH group collapses to its own "ssh" tab, everything else to General.
-    // The top-level strip only lists general, ssh and protocol tabs -- the SSH
-    // sub-tabs live in the secondary strip, so they count as visible whenever
-    // the SSH group is expanded.
-    const sshSubTabs = makeHostSshSubTabs(t, protocols);
-    // Registered SSH-group tabs count too: checking a fixed list here is what
-    // left plugin tabs unreachable.
-    const hostTabVisible =
-      tabs.some((tab) => tab.id === activeHostTab) ||
-      (!collapseAdvanced &&
-        editingProtocols.enableSsh &&
-        sshSubTabs.some((tab) => tab.id === activeHostTab));
-    const effectiveHostTab = hostTabVisible
-      ? activeHostTab
-      : collapseAdvanced && isSshGroupTab(activeHostTab)
-        ? "ssh"
-        : "general";
-    const activeTab = isHost ? effectiveHostTab : activeCredentialTab;
-    const setActiveTab = isHost ? setActiveHostTab : setActiveCredentialTab;
-    const showSshSubTabs =
-      isHost &&
-      !collapseAdvanced &&
-      editingProtocols.enableSsh &&
-      isSshGroupTab(activeHostTab);
-
-    return (
-      <div className="flex flex-col flex-1 min-h-0">
-        {/* Back bar + tab strip */}
-        <div className="flex flex-col shrink-0 border-b border-border">
-          <button
-            onClick={() => {
-              if (isHost) {
-                requestCloseHostEditor();
-              } else if (credentialReturnHost) {
-                setEditingHost(credentialReturnHost);
-                setCredentialReturnHost(null);
-                setEditingCredential(null);
-                setActiveCredentialTab("general");
-              } else {
-                setEditingCredential(null);
-                setActiveCredentialTab("general");
-              }
-            }}
-            className="flex items-center gap-2 px-3 py-2 text-xs text-muted-foreground hover:text-foreground hover:bg-muted/40 transition-colors border-b border-border/50"
-          >
-            <ArrowLeft className="size-3.5 shrink-0" />
-            <span>
-              {isHost
-                ? t("hosts.backToHosts")
-                : credentialReturnHost
-                  ? t("hosts.backToHost")
-                  : t("credentials.backToCredentials")}
-            </span>
-            {isHost && editingHost !== "new" && (
-              <span
-                className="ml-auto font-semibold text-foreground truncate max-w-[200px]"
-                title={(editingHost as Host).name}
-              >
-                {(editingHost as Host).name}
-              </span>
-            )}
-          </button>
-          <TabStrip
-            tabs={tabs}
-            activeTab={activeTab}
-            onTabChange={(id) => {
-              if (isHost && id === "ssh") {
-                if (!isSshGroupTab(activeHostTab)) {
-                  setActiveHostTab("ssh");
-                }
-              } else {
-                setActiveTab(id);
-              }
-            }}
-            isActive={
-              isHost
-                ? (id) =>
-                    id === "ssh"
-                      ? isSshGroupTab(activeHostTab)
-                      : activeHostTab === id
-                : undefined
-            }
-          />
-          {showSshSubTabs && (
-            <TabStrip
-              tabs={sshSubTabs}
-              activeTab={activeHostTab}
-              onTabChange={setActiveHostTab}
-              variant="secondary"
-            />
-          )}
-          {isHost && simpleEditor && (
-            <button
-              onClick={() => {
-                if (showAdvancedEditor) setActiveHostTab("general");
-                setShowAdvancedEditor(!showAdvancedEditor);
-              }}
-              className="flex items-center gap-1.5 px-3 py-1.5 text-[11px] text-muted-foreground hover:text-foreground hover:bg-muted/40 transition-colors border-t border-border/50"
-            >
-              <ChevronDown
-                className={`size-3 transition-transform ${showAdvancedEditor ? "rotate-180" : ""}`}
-              />
-              {showAdvancedEditor
-                ? t("hosts.hideAdvancedSettings")
-                : t("hosts.showAdvancedSettings")}
-            </button>
-          )}
-        </div>
-        <div className="flex-1 min-h-0 overflow-y-auto px-3 py-3 flex flex-col gap-3">
-          {isHost ? (
-            <HostEditor
-              key={
-                editingHost === "new"
-                  ? `new-host-${hostDraft?.key ?? ""}`
-                  : (editingHost as Host).id
-              }
-              host={editingHost === "new" ? null : (editingHost as Host)}
-              draft={editingHost === "new" ? hostDraft?.draft : undefined}
-              activeTab={effectiveHostTab}
-              simpleMode={collapseAdvanced}
-              onBack={requestCloseHostEditor}
-              onSave={(saved) => {
-                const updated = sshHostToHost(
-                  saved as unknown as SSHHostWithStatus,
-                );
-                setHosts((prev) => {
-                  const idx = prev.findIndex((h) => h.id === updated.id);
-                  if (idx >= 0) {
-                    const next = [...prev];
-                    next[idx] = updated;
-                    return next;
-                  }
-                  return [...prev, updated];
-                });
-                window.dispatchEvent(new CustomEvent("termix:hosts-changed"));
-                closeHostEditor();
-              }}
-              protocols={editingProtocols}
-              onProtocolChange={(p) =>
-                setEditingProtocols((prev) => ({ ...prev, ...p }))
-              }
-              onDirtyChange={setHostEditorDirty}
-              onTabChange={setActiveHostTab}
-              hosts={hosts}
-              credentials={credentials}
-              onEditCredential={handleEditCredentialFromHost}
-            />
-          ) : (
-            <CredentialEditorView
-              key={
-                editingCredential === "new"
-                  ? "new-cred"
-                  : (editingCredential as Credential).id
-              }
-              credential={
-                editingCredential === "new"
-                  ? null
-                  : (editingCredential as Credential)
-              }
-              activeTab={activeCredentialTab}
-              existingFolders={Array.from(
-                new Set(
-                  credentials
-                    .map((c) => c.folder)
-                    .filter((f): f is string => !!f),
-                ),
-              ).sort()}
-              saveAsNewHost={
-                credentialReturnHost ? credentialReturnHost : undefined
-              }
-              onBack={() => {
-                if (credentialReturnHost) {
-                  setEditingHost(credentialReturnHost);
-                  setCredentialReturnHost(null);
-                  setEditingCredential(null);
-                  setActiveCredentialTab("general");
-                  return;
-                }
-                setEditingCredential(null);
-                setActiveCredentialTab("general");
-              }}
-              onSave={(saved, options) => {
-                // The save endpoints are typed as an untyped record; these are
-                // the fields this view reads back off the response.
-                const result = saved as Partial<Credential> & {
-                  id: number | string;
-                  authType?: string;
-                };
-                setCredentials((prev) => {
-                  const idx = prev.findIndex((c) => c.id === String(result.id));
-                  const updated: Credential = {
-                    id: String(result.id),
-                    name: result.name ?? "",
-                    username: result.username ?? "",
-                    type: result.authType === "key" ? "key" : "password",
-                    value: result.value,
-                    password: result.password,
-                    publicKey: result.publicKey,
-                    passphrase: result.passphrase,
-                    description: result.description,
-                    folder: result.folder ?? "",
-                    tags: result.tags ?? [],
-                  };
-                  if (idx >= 0) {
-                    const next = [...prev];
-                    next[idx] = updated;
-                    return next;
-                  }
-                  return [...prev, updated];
-                });
-                if (options?.assignToHost && credentialReturnHost) {
-                  const returnHost = credentialReturnHost;
-                  setCredentialReturnHost(null);
-                  if (returnHost !== "new") {
-                    setHosts((prev) =>
-                      prev.map((h) =>
-                        h.id === returnHost.id
-                          ? { ...h, credentialId: String(result.id) }
-                          : h,
-                      ),
-                    );
-                  }
-                  setEditingHost(
-                    returnHost === "new"
-                      ? "new"
-                      : { ...returnHost, credentialId: String(result.id) },
-                  );
-                  setActiveHostTab("ssh");
-                  setEditingCredential(null);
-                  return;
-                }
-                setEditingCredential(null);
-                setActiveCredentialTab("general");
-              }}
-            />
-          )}
-        </div>
-      </div>
-    );
-  };
-
-  const isEditing = !!editingHost || !!editingCredential || !!editingDefaults;
-
-  useEffect(() => {
-    if (active) onEditingChange?.(isEditing);
-  }, [isEditing, active]);
-
-  return (
-    <div className="relative flex flex-col flex-1 min-h-0 overflow-hidden">
-      {isEditing ? (
-        renderEditorView()
-      ) : (
-        <div className="flex flex-col flex-1 min-h-0 overflow-hidden">
-          {/* Search bar — hidden when parent supplies its own */}
-          {!hideListHeader && (
-            <div className="px-2 py-1.5 shrink-0 border-b border-border/40">
-              <div className="flex items-center gap-2 px-2.5 h-7 bg-muted/60 border border-border/60">
-                <Search className="size-3 text-muted-foreground/60 shrink-0" />
-                <input
-                  value={searchQuery}
-                  onChange={(e) => setSearchQuery(e.target.value)}
-                  placeholder={t("credentials.searchCredentialsPlaceholder")}
-                  className="flex-1 text-xs bg-transparent outline-none placeholder:text-muted-foreground/50 text-foreground min-w-0"
-                />
-                {searchQuery && (
-                  <button
-                    onClick={() => setSearchQuery("")}
-                    className="text-muted-foreground/60 hover:text-muted-foreground transition-colors"
-                  >
-                    <X className="size-3" />
-                  </button>
-                )}
-              </div>
-            </div>
-          )}
-
-          {!credentialsLoading && filteredCredentials.length === 0 ? (
-            <div className="flex flex-col items-center justify-center py-12 text-center px-4">
-              <span className="text-sm font-semibold text-muted-foreground/60">
-                {t("credentials.noCredentialsFound")}
-              </span>
-              <Button
-                variant="outline"
-                size="sm"
-                className="mt-3 h-7 text-xs border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10"
-                onClick={() => {
-                  setEditingCredential("new");
-                  setActiveCredentialTab("general");
-                }}
-              >
-                {t("credentials.addCredentialBtn")}
-              </Button>
-            </div>
-          ) : (
-            <CredentialSidebarTree
-              folders={credentialFolderTree}
-              usedByCounts={usedByCounts}
-              query=""
-              loading={credentialsLoading}
-              arrangeLocked={externalArrangeLocked}
-              density={density}
-              trayTrigger={trayTrigger}
-              showTags={showTags}
-              editingFolderName={editingCredFolderName}
-              editingFolderValue={editingCredFolderValue}
-              onEditingFolderNameChange={setEditingCredFolderName}
-              onEditingFolderValueChange={setEditingCredFolderValue}
-              onRenameFolder={handleRenameCredentialFolder}
-              onMoveCredentialToFolder={handleMoveCredentialToFolder}
-              onDeployCredential={(cred) =>
-                setDeployDialog({ cred, hostId: "" })
-              }
-              onEditCredential={handleEditCredential}
-              onCloneCredential={handleCloneCredential}
-              onDeleteCredential={handleConfirmDeleteCredential}
-              onShareCredential={setShareCredential}
-            />
-          )}
-        </div>
-      )}
-
-      <CredentialShareModal
-        credential={shareCredential}
-        onClose={() => setShareCredential(null)}
-      />
-
-      {/* Confirm dialog */}
-      {confirmDialog && (
-        <div className="absolute inset-0 z-50 flex items-center justify-center bg-background/80 backdrop-blur-sm p-4">
-          <div className="bg-popover border border-border shadow-xl w-full max-w-xs flex flex-col gap-4 p-4">
-            <p className="text-sm text-foreground">{confirmDialog.message}</p>
-            <div className="flex justify-end gap-2">
-              <button
-                onClick={() => setConfirmDialog(null)}
-                className="px-3 py-1.5 text-xs border border-border text-muted-foreground hover:text-foreground hover:bg-muted rounded transition-colors"
-              >
-                {t("hosts.cancelBtn")}
-              </button>
-              <button
-                onClick={() => {
-                  confirmDialog.onConfirm();
-                  setConfirmDialog(null);
-                }}
-                className="px-3 py-1.5 text-xs bg-destructive text-destructive-foreground hover:bg-destructive/90 rounded transition-colors"
-              >
-                {t("hosts.deleteConfirmBtn")}
-              </button>
-            </div>
-          </div>
-        </div>
-      )}
-
-      {showUnsavedHostDialog && (
-        <div className="absolute inset-0 z-50 flex items-center justify-center bg-background/80 backdrop-blur-sm p-4">
-          <div className="bg-popover border border-border shadow-xl w-full max-w-xs flex flex-col gap-4 p-4">
-            <div className="flex flex-col gap-1">
-              <p className="text-sm font-semibold text-foreground">
-                {t("common.unsavedChanges")}
-              </p>
-              <p className="text-xs text-muted-foreground">
-                {t("hosts.unsavedChangesDescription")}
-              </p>
-            </div>
-            <div className="flex justify-end gap-2">
-              <button
-                onClick={() => setShowUnsavedHostDialog(false)}
-                className="px-3 py-1.5 text-xs border border-border text-muted-foreground hover:text-foreground hover:bg-muted rounded transition-colors"
-              >
-                {t("hosts.keepEditing")}
-              </button>
-              <button
-                onClick={closeHostEditor}
-                className="px-3 py-1.5 text-xs bg-destructive text-destructive-foreground hover:bg-destructive/90 rounded transition-colors"
-              >
-                {t("hosts.discardChanges")}
-              </button>
-            </div>
-          </div>
-        </div>
-      )}
-
-      {/* Deploy credential dialog */}
-      {deployDialog && (
-        <div className="absolute inset-0 z-50 flex items-center justify-center bg-background/80 backdrop-blur-sm p-4">
-          <div className="bg-popover border border-border shadow-xl w-full max-w-sm flex flex-col gap-4 p-4">
-            <div className="flex items-center justify-between">
-              <span className="text-sm font-bold">
-                {t("credentials.deployDialogTitle")}
-              </span>
-              <button
-                onClick={() => setDeployDialog(null)}
-                className="text-muted-foreground hover:text-foreground"
-              >
-                <X className="size-4" />
-              </button>
-            </div>
-            <div className="text-xs text-muted-foreground">
-              {t("credentials.deployDialogDesc", {
-                name: deployDialog.cred.name,
-              })}
-            </div>
-            <div className="flex flex-col gap-1.5">
-              <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("credentials.targetHostLabel")}
-              </label>
-              <Select2
-                className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
-                value={deployDialog.hostId}
-                onChange={(e) =>
-                  setDeployDialog({ ...deployDialog, hostId: e.target.value })
-                }
-              >
-                <option value="">{t("credentials.selectHostOption")}</option>
-                {allHosts
-                  .filter(
-                    (h) => h.enableSsh || enabledHostProtocols(h).length === 0,
-                  )
-                  .map((h) => (
-                    <option key={h.id} value={h.id}>
-                      {h.name || h.ip}
-                    </option>
-                  ))}
-              </Select2>
-            </div>
-            <div className="flex justify-end gap-2">
-              <Button
-                variant="ghost"
-                size="sm"
-                onClick={() => setDeployDialog(null)}
-                disabled={deploying}
-              >
-                {t("hosts.cancelBtn")}
-              </Button>
-              <Button
-                variant="outline"
-                size="sm"
-                className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10"
-                disabled={!deployDialog.hostId || deploying}
-                onClick={async () => {
-                  setDeploying(true);
-                  try {
-                    await deployCredentialToHost(
-                      Number(deployDialog.cred.id),
-                      Number(deployDialog.hostId),
-                    );
-                    toast.success(t("credentials.keyDeployedSuccess"));
-                    setDeployDialog(null);
-                  } catch {
-                    toast.error(t("credentials.failedToDeployKey"));
-                  } finally {
-                    setDeploying(false);
-                  }
-                }}
-              >
-                {deploying
-                  ? t("credentials.deployingBtn")
-                  : t("credentials.deployBtn")}
-              </Button>
-            </div>
-          </div>
-        </div>
-      )}
-    </div>
-  );
-}
diff --git a/src/ui/sidebar/HostManagerTabs.tsx b/src/ui/sidebar/HostManagerTabs.tsx
index d1e39a4f8..cadb1a016 100644
--- a/src/ui/sidebar/HostManagerTabs.tsx
+++ b/src/ui/sidebar/HostManagerTabs.tsx
@@ -1,19 +1,6 @@
 /* eslint-disable react-refresh/only-export-components */
-import {
-  useEffect,
-  useRef,
-  useState,
-  type ComponentType,
-  type ReactNode,
-} from "react";
-import {
-  ChevronLeft,
-  ChevronRight,
-  KeyRound,
-  Settings,
-  Terminal,
-} from "lucide-react";
-import { useTranslation } from "react-i18next";
+import { type ComponentType, type ReactNode } from "react";
+import { KeyRound, Settings, Terminal } from "lucide-react";
 import { byOrderThenId, createRegistry } from "@/lib/registry";
 
 /** Core host editor tabs. Plugins add theirs through registerHostEditorSection. */
@@ -196,115 +183,4 @@ export function makeCredentialTabs(
   ];
 }
 
-export function TabStrip({
-  tabs,
-  activeTab,
-  onTabChange,
-  isActive,
-  variant = "primary",
-}: {
-  tabs: { id: string; label: string; icon: ReactNode }[];
-  activeTab: string;
-  onTabChange: (id: string) => void;
-  isActive?: (id: string) => boolean;
-  variant?: "primary" | "secondary";
-}) {
-  const ref = useRef<HTMLDivElement>(null);
-  const { t } = useTranslation();
-  const [scroll, setScroll] = useState({ left: false, right: false });
-  useEffect(() => {
-    const el = ref.current;
-    if (!el) return;
-    const update = () =>
-      setScroll({
-        left: el.scrollLeft > 1,
-        right: el.scrollLeft + el.clientWidth < el.scrollWidth - 1,
-      });
-    const observer = new ResizeObserver(update);
-    observer.observe(el);
-    if (el.firstElementChild) observer.observe(el.firstElementChild);
-    el.addEventListener("scroll", update);
-    update();
-    return () => {
-      observer.disconnect();
-      el.removeEventListener("scroll", update);
-    };
-  }, [tabs]);
-
-  useEffect(() => {
-    const el = ref.current;
-    if (!el) return;
-    const onWheel = (e: WheelEvent) => {
-      if (e.deltaY === 0) return;
-      e.preventDefault();
-      el.scrollLeft += e.deltaY;
-    };
-    el.addEventListener("wheel", onWheel, { passive: false });
-    return () => el.removeEventListener("wheel", onWheel);
-  }, []);
-
-  const renderTab = (tab: (typeof tabs)[0]) => {
-    const active = isActive ? isActive(tab.id) : activeTab === tab.id;
-    return (
-      <button
-        key={tab.id}
-        onClick={() => onTabChange(tab.id)}
-        className={`flex items-center gap-1.5 px-3 ${
-          variant === "secondary" ? "py-1.5 text-[11px]" : "py-2 text-xs"
-        } font-medium whitespace-nowrap border-b-2 transition-colors shrink-0 ${
-          active
-            ? "border-accent-brand text-accent-brand"
-            : "border-transparent text-muted-foreground hover:text-foreground"
-        }`}
-      >
-        {tab.icon}
-        {tab.label}
-      </button>
-    );
-  };
-
-  const overflow = scroll.left || scroll.right;
-  return (
-    <div
-      className={`flex min-w-0 items-center ${variant === "secondary" ? "border-t border-border bg-card" : ""}`}
-    >
-      {overflow && (
-        <button
-          type="button"
-          aria-label={t("common.scrollTabsLeft")}
-          title={t("common.scrollTabsLeft")}
-          disabled={!scroll.left}
-          className="shrink-0 p-1 disabled:opacity-30"
-          onClick={() =>
-            ref.current?.scrollBy({
-              left: -ref.current.clientWidth * 0.75,
-              behavior: "smooth",
-            })
-          }
-        >
-          <ChevronLeft className="size-4" />
-        </button>
-      )}
-      <div ref={ref} className="min-w-0 flex-1 overflow-x-auto scrollbar-none">
-        <div className="flex min-w-max">{tabs.map(renderTab)}</div>
-      </div>
-      {overflow && (
-        <button
-          type="button"
-          aria-label={t("common.scrollTabsRight")}
-          title={t("common.scrollTabsRight")}
-          disabled={!scroll.right}
-          className="shrink-0 p-1 disabled:opacity-30"
-          onClick={() =>
-            ref.current?.scrollBy({
-              left: ref.current.clientWidth * 0.75,
-              behavior: "smooth",
-            })
-          }
-        >
-          <ChevronRight className="size-4" />
-        </button>
-      )}
-    </div>
-  );
-}
+export { TabStrip } from "@/components/tab-strip";
diff --git a/src/ui/sidebar/HostShareModal.tsx b/src/ui/sidebar/HostShareModal.tsx
index 3bc5cf0c7..49e73ab7c 100644
--- a/src/ui/sidebar/HostShareModal.tsx
+++ b/src/ui/sidebar/HostShareModal.tsx
@@ -5,8 +5,8 @@ import {
   type FolderAccessRule,
 } from "@/api/rbac-api";
 import { useTranslation } from "react-i18next";
+import { InlineView, useConfirm } from "@/components/surface/surface-scope";
 import {
-  ArrowLeft,
   Check,
   ListChecks,
   Search,
@@ -32,6 +32,7 @@ import {
   updateHostAccess,
   revokeHostAccess,
   getUserList,
+  getUserInfo,
   getRoles,
   type AccessRecord,
   type SharePermissionLevel,
@@ -39,6 +40,8 @@ import {
 } from "@/main-axios";
 import type { Host } from "@/types/ui-types";
 import { Select2 } from "@/components/select2";
+import { DocsLink } from "@/components/docs-link";
+import { roleLabel } from "@/lib/role-label";
 
 const PERMISSION_LEVELS: SharePermissionLevel[] = [
   "connect",
@@ -70,6 +73,7 @@ export function HostShareModal({
   folder?: string | null;
 }) {
   const { t } = useTranslation();
+  const confirm = useConfirm();
   const isFolderShare = !host && !!folder;
   const [targetTab, setTargetTab] = useState<"user" | "role">("user");
   const [search, setSearch] = useState("");
@@ -110,14 +114,18 @@ export function HostShareModal({
         : Promise.resolve({ accessList: [] }),
       getUserList().catch(() => ({ users: [] })),
       getRoles().catch(() => ({ roles: [] })),
+      getUserInfo().catch(() => null),
     ])
-      .then(([accessRes, usersRes, rolesRes]) => {
+      .then(([accessRes, usersRes, rolesRes, me]) => {
         setAccessList(accessRes.accessList ?? []);
+        // Nobody shares with themselves.
         setShareUsers(
-          (usersRes.users ?? []).map((u) => ({
-            id: String(u.id ?? u.userId),
-            username: u.username,
-          })),
+          (usersRes.users ?? [])
+            .map((u) => ({
+              id: String(u.id ?? u.userId),
+              username: u.username,
+            }))
+            .filter((u) => u.id !== me?.userId),
         );
         setShareRoles(
           (rolesRes.roles ?? [])
@@ -278,23 +286,20 @@ export function HostShareModal({
     }
   }
 
-  if (!open) return null;
-
   return (
-    <div className="absolute inset-0 z-20 flex flex-col bg-sidebar">
-      {/* Header */}
-      <button
-        onClick={onClose}
-        className="flex items-center gap-2 px-3 py-2 shrink-0 border-b border-border text-xs text-muted-foreground hover:text-foreground transition-colors w-full text-left"
-      >
-        <ArrowLeft className="size-3.5 shrink-0" />
-        <span className="truncate">
-          {isFolderShare
-            ? t("hosts.shareFolderTitle", { name: folder ?? "" })
-            : t("hosts.shareHostTitle", { name: host?.name ?? "" })}
-        </span>
-      </button>
-
+    <InlineView
+      open={open}
+      onOpenChange={(next) => {
+        if (!next) onClose();
+      }}
+      icon={<Share2 className="size-4" />}
+      title={
+        isFolderShare
+          ? t("hosts.shareFolderTitle", { name: folder ?? "" })
+          : t("hosts.shareHostTitle", { name: host?.name ?? "" })
+      }
+      bare
+    >
       {sharingLoadError && (
         <div className="flex items-start gap-2 px-3 py-2 shrink-0 border-b border-destructive/30 bg-destructive/5 text-xs text-destructive">
           <Shield className="size-3.5 shrink-0 mt-0.5" />
@@ -309,14 +314,7 @@ export function HostShareModal({
             <Users className="size-3.5" />
             {t("hosts.sharing.shareWithSection")}
           </div>
-          <a
-            href="https://docs.termix.site/features/authentication/rbac"
-            target="_blank"
-            rel="noreferrer"
-            className="text-[10px] text-accent-brand hover:underline shrink-0"
-          >
-            {t("hosts.docsLink")}
-          </a>
+          <DocsLink core="sharing">{t("hosts.docsLink")}</DocsLink>
         </div>
 
         <div className="flex gap-1.5">
@@ -419,7 +417,7 @@ export function HostShareModal({
                     </div>
                     <Shield className="size-3 text-muted-foreground shrink-0" />
                     <span className="truncate">
-                      {role.displayName || role.name}
+                      {roleLabel(t, role.displayName || role.name)}
                     </span>
                   </button>
                 );
@@ -534,7 +532,7 @@ export function HostShareModal({
             >
               <span className="flex-1 truncate">
                 {rule.targetType === "role"
-                  ? rule.roleDisplayName || rule.roleName
+                  ? roleLabel(t, rule.roleDisplayName) || rule.roleName
                   : rule.username}
               </span>
               <span className="text-[10px] uppercase text-muted-foreground">
@@ -544,8 +542,19 @@ export function HostShareModal({
                 type="button"
                 className="text-[10px] text-muted-foreground hover:text-destructive"
                 title={t("hosts.sharing.folderRuleRemove")}
-                onClick={() => {
-                  void revokeFolderAccess(rule.id).then(refreshFolderRules);
+                onClick={async () => {
+                  const ok = await confirm({
+                    title: t("sharing.revokeConfirm", {
+                      name:
+                        rule.username ??
+                        roleLabel(t, rule.roleDisplayName) ??
+                        rule.roleName ??
+                        "",
+                    }),
+                    confirmLabel: t("sharing.revoke"),
+                  });
+                  if (ok)
+                    void revokeFolderAccess(rule.id).then(refreshFolderRules);
                 }}
               >
                 <X className="size-3.5" />
@@ -590,7 +599,7 @@ export function HostShareModal({
                       )}
                       <span className="font-semibold truncate">
                         {record.username ??
-                          record.roleDisplayName ??
+                          roleLabel(t, record.roleDisplayName) ??
                           record.roleName ??
                           record.userId ??
                           record.roleId}
@@ -626,6 +635,17 @@ export function HostShareModal({
                         size="sm"
                         className="h-6 text-[10px] px-2 text-destructive hover:bg-destructive/10"
                         onClick={async () => {
+                          const ok = await confirm({
+                            title: t("sharing.revokeConfirm", {
+                              name:
+                                record.username ??
+                                roleLabel(t, record.roleDisplayName) ??
+                                record.roleName ??
+                                "",
+                            }),
+                            confirmLabel: t("sharing.revoke"),
+                          });
+                          if (!ok) return;
                           try {
                             await revokeHostAccess(
                               Number(host!.id),
@@ -676,6 +696,6 @@ export function HostShareModal({
           </div>
         </div>
       )}
-    </div>
+    </InlineView>
   );
 }
diff --git a/src/ui/sidebar/HostsPanel.tsx b/src/ui/sidebar/HostsPanel.tsx
index 6dec58d26..d51f9ead5 100644
--- a/src/ui/sidebar/HostsPanel.tsx
+++ b/src/ui/sidebar/HostsPanel.tsx
@@ -1,4 +1,5 @@
 import { getErrorMessage } from "../lib/error-message.js";
+import { setBarActions } from "@/sidebar/tree/host-bar-actions";
 import { enabledHostProtocols, useHostProtocols } from "./host-protocols";
 import { useSshAuthProviders } from "@/hooks/useSshAuthProviders";
 import { useEffect, useMemo, useRef, useState } from "react";
@@ -26,7 +27,6 @@ import {
 } from "lucide-react";
 import { toast } from "sonner";
 import { SidebarTree, isFolder } from "@/sidebar/SidebarTree";
-import { HostManager } from "@/sidebar/HostManager";
 import { HostShareModal } from "@/sidebar/HostShareModal";
 import { HostExportDialog } from "@/sidebar/HostExportDialog";
 import { CustomizeSidebarPanel } from "@/sidebar/CustomizeSidebarPanel";
@@ -200,7 +200,6 @@ export function HostsPanel({
   onEditHost,
   hostTree,
   loading,
-  onEditingChange,
   active = true,
 }: {
   onOpenTab: (
@@ -215,6 +214,7 @@ export function HostsPanel({
   onEditHost: (host: Host) => void;
   hostTree?: HostFolder;
   loading?: boolean;
+  /** Unused since editing moved to the Manage tab. */
   onEditingChange?: (editing: boolean) => void;
   active?: boolean;
 }) {
@@ -238,7 +238,6 @@ export function HostsPanel({
   const hostProtocols = useHostProtocols();
   const sshAuthProviders = useSshAuthProviders();
   const [hostSearch, setHostSearch] = useState("");
-  const [managerEditing, setManagerEditing] = useState(false);
   const [customizePanelOpen, setCustomizePanelOpen] = useState(false);
   const [selectionMode, setSelectionMode] = useState(false);
   const [refreshing, setRefreshing] = useState(false);
@@ -250,6 +249,9 @@ export function HostsPanel({
   );
   const { preferences: sidebarPrefs, update: updateSidebarPrefs } =
     useHostSidebarPreferences();
+  useEffect(() => {
+    setBarActions(sidebarPrefs.display.barActions);
+  }, [sidebarPrefs.display.barActions]);
   const sortKey = sidebarPrefs.sort.key;
   const pinnedFirst = sidebarPrefs.sort.pinnedFirst;
   const { arrangeLocked, toggleArrangeLock } = useArrangeLock(
@@ -345,11 +347,6 @@ export function HostsPanel({
     };
   }, []);
 
-  function handleEditingChange(editing: boolean) {
-    setManagerEditing(editing);
-    onEditingChange?.(editing);
-  }
-
   function toggleSelectionMode() {
     setSelectionMode((v) => !v);
   }
@@ -422,7 +419,7 @@ export function HostsPanel({
 
   return (
     <div className="relative flex flex-col flex-1 min-h-0 overflow-hidden">
-      {!managerEditing && (
+      {
         <div className="flex flex-col px-2 py-1.5 shrink-0 border-b border-border/60 gap-1.5">
           <div className="flex items-center gap-2 px-2.5 h-7 bg-muted/60 border border-border/60 rounded-none">
             <Search className="size-3 text-muted-foreground/60 shrink-0" />
@@ -1023,7 +1020,7 @@ export function HostsPanel({
             </div>
           </div>
         </div>
-      )}
+      }
       <CustomizeSidebarPanel
         open={customizePanelOpen}
         onOpenChange={setCustomizePanelOpen}
@@ -1031,7 +1028,7 @@ export function HostsPanel({
         update={updateSidebarPrefs}
       />
 
-      {active && !managerEditing && (
+      {active && (
         <div className="flex flex-col flex-1 min-h-0">
           <SidebarTree
             children={
@@ -1064,17 +1061,12 @@ export function HostsPanel({
             showTags={sidebarPrefs.display.showTags}
             openOnDoubleClick={sidebarPrefs.display.openOnDoubleClick}
             showFolderPaths={sidebarPrefs.display.showFolderPaths}
+            rowFields={sidebarPrefs.display}
             hostClickBehavior={sidebarPrefs.display.hostClickBehavior}
           />
         </div>
       )}
 
-      <div
-        className={managerEditing ? "flex flex-col flex-1 min-h-0" : "hidden"}
-      >
-        <HostManager onEditingChange={handleEditingChange} active={active} />
-      </div>
-
       <HostShareModal
         open={shareModalHost !== null}
         onClose={() => setShareModalHost(null)}
diff --git a/src/ui/sidebar/InterfacePresetSettings.tsx b/src/ui/sidebar/InterfacePresetSettings.tsx
index c154035e1..b305c69a2 100644
--- a/src/ui/sidebar/InterfacePresetSettings.tsx
+++ b/src/ui/sidebar/InterfacePresetSettings.tsx
@@ -1,5 +1,6 @@
 import { useMemo, useState } from "react";
 import { useTranslation } from "react-i18next";
+import { useConfirm } from "@/components/surface/surface-scope";
 import {
   Check,
   Gauge,
@@ -9,14 +10,6 @@ import {
   Wrench,
 } from "lucide-react";
 import { Button } from "@/components/button";
-import {
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogFooter,
-  DialogHeader,
-  DialogTitle,
-} from "@/components/dialog";
 import { useUiPreferencesContext } from "@/contexts/UiPreferencesContext";
 import { applyPresetSideEffects } from "@/lib/apply-ui-preset";
 import { usePluginStore } from "@/plugin-host/plugin-store";
@@ -45,10 +38,7 @@ export function InterfacePresetSettings({
 }) {
   const { t } = useTranslation();
   const ctx = useUiPreferencesContext();
-  const [pendingPreset, setPendingPreset] = useState<Exclude<
-    UiPreset,
-    "custom"
-  > | null>(null);
+  const confirm = useConfirm();
   const [applying, setApplying] = useState(false);
 
   // The chosen preset stays highlighted even once knobs diverge from it --
@@ -87,18 +77,25 @@ export function InterfacePresetSettings({
 
   if (!ctx) return null;
 
-  async function confirmPreset() {
-    if (!pendingPreset) return;
+  async function choosePreset(preset: Exclude<UiPreset, "custom">) {
+    const ok = await confirm({
+      title: t("newUi.sidebar.userProfile.presetConfirmTitle", {
+        preset: t(`newUi.sidebar.userProfile.preset_${preset}`),
+      }),
+      description: t("newUi.sidebar.userProfile.presetConfirmDesc"),
+      confirmLabel: t("newUi.sidebar.userProfile.presetConfirmApply"),
+      destructive: false,
+    });
+    if (!ok) return;
     setApplying(true);
     try {
-      ctx.setPreset(pendingPreset);
+      ctx.setPreset(preset);
       // Picking a preset is a deliberate reset, so any knob the user had
       // pinned goes back to following the preset.
       ctx.clearAllOverrides();
-      await applyPresetSideEffects(pendingPreset);
+      await applyPresetSideEffects(preset);
     } finally {
       setApplying(false);
-      setPendingPreset(null);
     }
   }
 
@@ -118,7 +115,8 @@ export function InterfacePresetSettings({
             <button
               key={preset}
               type="button"
-              onClick={() => setPendingPreset(preset)}
+              disabled={applying}
+              onClick={() => void choosePreset(preset)}
               aria-pressed={active}
               className={`flex w-full items-start gap-2 border p-2 text-left transition-colors ${
                 active
@@ -203,44 +201,6 @@ export function InterfacePresetSettings({
           </Button>
         </div>
       )}
-
-      <Dialog
-        open={!!pendingPreset}
-        onOpenChange={(open) => !open && setPendingPreset(null)}
-      >
-        <DialogContent className="sm:max-w-md">
-          <DialogHeader>
-            <DialogTitle className="text-base font-bold">
-              {t("newUi.sidebar.userProfile.presetConfirmTitle", {
-                preset: pendingPreset
-                  ? t(`newUi.sidebar.userProfile.preset_${pendingPreset}`)
-                  : "",
-              })}
-            </DialogTitle>
-            <DialogDescription className="text-xs text-muted-foreground">
-              {t("newUi.sidebar.userProfile.presetConfirmDesc")}
-            </DialogDescription>
-          </DialogHeader>
-          <DialogFooter>
-            <Button
-              variant="outline"
-              size="sm"
-              onClick={() => setPendingPreset(null)}
-            >
-              {t("common.cancel")}
-            </Button>
-            <Button
-              size="sm"
-              variant="outline"
-              className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-              disabled={applying}
-              onClick={confirmPreset}
-            >
-              {t("newUi.sidebar.userProfile.presetConfirmApply")}
-            </Button>
-          </DialogFooter>
-        </DialogContent>
-      </Dialog>
     </div>
   );
 }
diff --git a/src/ui/sidebar/KeybindingsDialog.tsx b/src/ui/sidebar/KeybindingsDialog.tsx
deleted file mode 100644
index a5eb0b84a..000000000
--- a/src/ui/sidebar/KeybindingsDialog.tsx
+++ /dev/null
@@ -1,494 +0,0 @@
-import { useEffect, useMemo, useState } from "react";
-import { useTranslation } from "react-i18next";
-import { toast } from "sonner";
-import {
-  getUserPreferences,
-  parseCustomKeybindings,
-} from "@/api/open-tabs-api";
-import { saveUserPreferences } from "@/main-axios";
-import {
-  useKeybindingActions,
-  useKeybindingDefaults,
-  type KeybindingActionDef,
-} from "@/shell/keybinding-registry";
-import type {
-  CustomKeybinding,
-  KeybindingAction,
-  KeyCombo,
-} from "@/types/keybindings";
-import {
-  Dialog,
-  DialogContent,
-  DialogHeader,
-  DialogTitle,
-  DialogDescription,
-} from "@/components/dialog";
-import { Button } from "@/components/button";
-import { Input } from "@/components/input";
-import { Pencil, Plus, RotateCcw, Trash2 } from "lucide-react";
-import { FixedShortcutsList } from "./FixedShortcutsList";
-
-function formatCombo(combo: KeyCombo): string {
-  const parts: string[] = [];
-  if (combo.ctrl) parts.push("Ctrl");
-  if (combo.alt) parts.push("Alt");
-  if (combo.shift) parts.push("Shift");
-  if (combo.meta) parts.push("Cmd");
-  parts.push(combo.key.length === 1 ? combo.key.toUpperCase() : combo.key);
-  return parts.join(" + ");
-}
-
-function generateId(): string {
-  return typeof crypto !== "undefined" && "randomUUID" in crypto
-    ? crypto.randomUUID()
-    : `kb-${Date.now()}-${Math.random().toString(36).slice(2)}`;
-}
-
-/** An action without the keys an editor cleared, so it saves clean. */
-function withoutEmpty(action: KeybindingAction): KeybindingAction {
-  const out: KeybindingAction = { type: action.type };
-  for (const [key, value] of Object.entries(action)) {
-    if (key !== "type" && value !== undefined && value !== null) {
-      out[key] = value;
-    }
-  }
-  return out;
-}
-
-/**
- * Appearance > Keybindings. The actions come from the keybinding registry:
- * the shell's own and whatever the running plugins register, each with its
- * own parameter editor. A saved binding whose plugin is off stays in the
- * list and keeps working once the plugin is back.
- */
-export function KeybindingsDialog({
-  open,
-  onOpenChange,
-}: {
-  open: boolean;
-  onOpenChange: (v: boolean) => void;
-}) {
-  const { t } = useTranslation();
-  const actions = useKeybindingActions();
-  const defaults = useKeybindingDefaults();
-  const [bindings, setBindings] = useState<CustomKeybinding[]>([]);
-  const [loading, setLoading] = useState(false);
-  const [formOpen, setFormOpen] = useState(false);
-  const [editingId, setEditingId] = useState<string | null>(null);
-  const [overridesDefaultId, setOverridesDefaultId] = useState<
-    string | undefined
-  >(undefined);
-
-  const [recordedCombo, setRecordedCombo] = useState<KeyCombo | null>(null);
-  const [recording, setRecording] = useState(false);
-  const [draft, setDraft] = useState<KeybindingAction>({ type: "" });
-
-  const actionById = useMemo(
-    () => new Map(actions.map((action) => [action.id, action])),
-    [actions],
-  );
-  const draftDef: KeybindingActionDef | undefined = actionById.get(draft.type);
-
-  useEffect(() => {
-    if (!open) return;
-    setLoading(true);
-    getUserPreferences()
-      .then((prefs) =>
-        setBindings(parseCustomKeybindings(prefs.customKeybindings)),
-      )
-      .catch(() => setBindings([]))
-      .finally(() => setLoading(false));
-  }, [open]);
-
-  const conflictWarning = useMemo(() => {
-    if (!recordedCombo) return null;
-    const conflict = bindings.find(
-      (kb) =>
-        kb.id !== editingId &&
-        kb.enabled &&
-        kb.combo.ctrl === recordedCombo.ctrl &&
-        kb.combo.alt === recordedCombo.alt &&
-        kb.combo.shift === recordedCombo.shift &&
-        kb.combo.meta === recordedCombo.meta &&
-        kb.combo.key === recordedCombo.key,
-    );
-    if (conflict) {
-      return t("newUi.sidebar.keybindings.conflictWarning", {
-        combo: formatCombo(conflict.combo),
-      });
-    }
-    return null;
-  }, [recordedCombo, bindings, editingId, t]);
-
-  function actionLabel(type: string): string {
-    const def = actionById.get(type);
-    return def
-      ? t(def.labelKey)
-      : t("newUi.sidebar.keybindings.unavailableAction", { type });
-  }
-
-  function resetForm() {
-    setEditingId(null);
-    setOverridesDefaultId(undefined);
-    setRecordedCombo(null);
-    setRecording(false);
-    setDraft({ type: actions[0]?.id ?? "" });
-  }
-
-  function openAddForm() {
-    resetForm();
-    setFormOpen(true);
-  }
-
-  function openEditForm(kb: CustomKeybinding) {
-    setEditingId(kb.id);
-    setOverridesDefaultId(kb.overridesDefaultId);
-    setRecordedCombo(kb.combo);
-    setRecording(false);
-    setDraft({ ...kb.action });
-    setFormOpen(true);
-  }
-
-  function openOverrideDefaultForm(defaultId: string, combo: KeyCombo) {
-    resetForm();
-    setOverridesDefaultId(defaultId);
-    setRecordedCombo(combo);
-    setFormOpen(true);
-  }
-
-  async function persist(updated: CustomKeybinding[]) {
-    try {
-      await saveUserPreferences({
-        customKeybindings: JSON.stringify(updated),
-      });
-      setBindings(updated);
-      window.dispatchEvent(new Event("customKeybindingsChanged"));
-    } catch {
-      toast.error(t("newUi.sidebar.keybindings.saveError"));
-    }
-  }
-
-  function handleDelete(id: string) {
-    persist(bindings.filter((kb) => kb.id !== id));
-  }
-
-  function handleResetAll() {
-    persist([]);
-  }
-
-  function startRecording(inputEl: HTMLInputElement) {
-    setRecording(true);
-    const handler = (e: KeyboardEvent) => {
-      e.preventDefault();
-      e.stopPropagation();
-      if (["Control", "Alt", "Shift", "Meta"].includes(e.key)) {
-        return;
-      }
-      const isAlnum = /^[a-zA-Z0-9]$/.test(e.key);
-      const combo: KeyCombo = {
-        key: isAlnum ? e.key.toLowerCase() : e.code,
-        isCode: !isAlnum,
-        ctrl: e.ctrlKey,
-        alt: e.altKey,
-        shift: e.shiftKey,
-        meta: e.metaKey,
-      };
-      setRecordedCombo(combo);
-      setRecording(false);
-      inputEl.removeEventListener("keydown", handler, true);
-      inputEl.blur();
-    };
-    inputEl.addEventListener("keydown", handler, true);
-  }
-
-  function handleSave() {
-    if (!recordedCombo) {
-      toast.error(t("newUi.sidebar.keybindings.comboRequiredError"));
-      return;
-    }
-    if (!draftDef) {
-      toast.error(t("newUi.sidebar.keybindings.actionRequiredError"));
-      return;
-    }
-    const action = withoutEmpty(draft);
-    const problem = draftDef.validate?.(action);
-    if (problem) {
-      toast.error(t(problem));
-      return;
-    }
-
-    const now = new Date().toISOString();
-    const existing = editingId
-      ? bindings.find((kb) => kb.id === editingId)
-      : undefined;
-
-    const newBinding: CustomKeybinding = {
-      id: editingId ?? generateId(),
-      combo: recordedCombo,
-      action,
-      enabled: true,
-      overridesDefaultId,
-      createdAt: existing?.createdAt ?? now,
-      updatedAt: now,
-    };
-
-    const updated = editingId
-      ? bindings.map((kb) => (kb.id === editingId ? newBinding : kb))
-      : [...bindings, newBinding];
-
-    persist(updated);
-    setFormOpen(false);
-    resetForm();
-  }
-
-  const customOnlyBindings = bindings.filter((kb) => !kb.overridesDefaultId);
-  const Editor = draftDef?.editor;
-
-  return (
-    <>
-      <Dialog open={open} onOpenChange={onOpenChange}>
-        <DialogContent className="sm:max-w-xl">
-          <DialogHeader>
-            <DialogTitle className="text-lg font-bold">
-              {t("newUi.sidebar.keybindings.title")}
-            </DialogTitle>
-            <DialogDescription className="text-xs text-muted-foreground">
-              {t("newUi.sidebar.keybindings.description")}
-            </DialogDescription>
-          </DialogHeader>
-
-          <div className="flex flex-col gap-4 mt-1 max-h-[60vh] overflow-y-auto">
-            {defaults.length > 0 && (
-              <div className="flex flex-col gap-1.5">
-                <span className="text-xs font-semibold text-muted-foreground">
-                  {t("newUi.sidebar.keybindings.defaultsHeading")}
-                </span>
-                {defaults.map((def) => {
-                  const override = bindings.find(
-                    (kb) => kb.overridesDefaultId === def.id,
-                  );
-                  return (
-                    <div
-                      key={def.id}
-                      className="flex items-center justify-between gap-2 border border-border bg-background px-2.5 py-2"
-                    >
-                      <div className="flex flex-col min-w-0">
-                        <span className="text-xs font-mono">
-                          {override
-                            ? formatCombo(override.combo)
-                            : formatCombo(def.combo)}
-                        </span>
-                        <span className="text-xs text-muted-foreground truncate">
-                          {t(def.descriptionKey)}
-                        </span>
-                      </div>
-                      <div className="flex items-center gap-1 shrink-0">
-                        {override ? (
-                          <>
-                            <span className="text-[10px] font-bold text-accent-brand border border-accent-brand/40 px-1">
-                              {t("newUi.sidebar.keybindings.customizedBadge")}
-                            </span>
-                            <Button
-                              variant="ghost"
-                              size="icon"
-                              className="size-7"
-                              onClick={() => openEditForm(override)}
-                            >
-                              <Pencil className="size-3.5" />
-                            </Button>
-                            <Button
-                              variant="ghost"
-                              size="icon"
-                              className="size-7 text-muted-foreground hover:text-destructive"
-                              onClick={() => handleDelete(override.id)}
-                              title={t(
-                                "newUi.sidebar.keybindings.resetToDefault",
-                              )}
-                            >
-                              <RotateCcw className="size-3.5" />
-                            </Button>
-                          </>
-                        ) : (
-                          <>
-                            <span className="text-[10px] text-muted-foreground border border-border px-1">
-                              {t("newUi.sidebar.keybindings.defaultBadge")}
-                            </span>
-                            <Button
-                              variant="ghost"
-                              size="icon"
-                              className="size-7"
-                              onClick={() =>
-                                openOverrideDefaultForm(def.id, def.combo)
-                              }
-                              title={t("newUi.sidebar.keybindings.customize")}
-                            >
-                              <Pencil className="size-3.5" />
-                            </Button>
-                          </>
-                        )}
-                      </div>
-                    </div>
-                  );
-                })}
-              </div>
-            )}
-
-            <div className="flex flex-col gap-1.5">
-              <div className="flex items-center justify-between">
-                <span className="text-xs font-semibold text-muted-foreground">
-                  {t("newUi.sidebar.keybindings.customHeading")}
-                </span>
-                <Button variant="outline" size="sm" onClick={openAddForm}>
-                  <Plus className="size-3.5 mr-1" />
-                  {t("newUi.sidebar.keybindings.addBinding")}
-                </Button>
-              </div>
-              {loading ? (
-                <span className="text-xs text-muted-foreground">
-                  {t("newUi.sidebar.keybindings.loading")}
-                </span>
-              ) : customOnlyBindings.length === 0 ? (
-                <span className="text-xs text-muted-foreground/60">
-                  {t("newUi.sidebar.keybindings.noCustomBindings")}
-                </span>
-              ) : (
-                customOnlyBindings.map((kb) => {
-                  const Summary = actionById.get(kb.action.type)?.summary;
-                  return (
-                    <div
-                      key={kb.id}
-                      className="flex items-center justify-between gap-2 border border-border bg-background px-2.5 py-2"
-                    >
-                      <div className="flex flex-col min-w-0">
-                        <span className="text-xs font-mono">
-                          {formatCombo(kb.combo)}
-                        </span>
-                        <span className="text-xs text-muted-foreground truncate">
-                          {actionLabel(kb.action.type)}
-                          {Summary && (
-                            <>
-                              {" "}
-                              <Summary action={kb.action} onChange={() => {}} />
-                            </>
-                          )}
-                        </span>
-                      </div>
-                      <div className="flex items-center gap-1 shrink-0">
-                        <Button
-                          variant="ghost"
-                          size="icon"
-                          className="size-7"
-                          onClick={() => openEditForm(kb)}
-                        >
-                          <Pencil className="size-3.5" />
-                        </Button>
-                        <Button
-                          variant="ghost"
-                          size="icon"
-                          className="size-7 text-muted-foreground hover:text-destructive"
-                          onClick={() => handleDelete(kb.id)}
-                        >
-                          <Trash2 className="size-3.5" />
-                        </Button>
-                      </div>
-                    </div>
-                  );
-                })
-              )}
-            </div>
-            <FixedShortcutsList />
-          </div>
-
-          <div className="flex items-center justify-between gap-2 mt-2">
-            <Button
-              variant="ghost"
-              className="text-muted-foreground"
-              onClick={handleResetAll}
-              disabled={bindings.length === 0}
-            >
-              {t("newUi.sidebar.keybindings.resetAllToDefaults")}
-            </Button>
-            <Button variant="outline" onClick={() => onOpenChange(false)}>
-              {t("newUi.sidebar.keybindings.close")}
-            </Button>
-          </div>
-        </DialogContent>
-      </Dialog>
-
-      <Dialog open={formOpen} onOpenChange={setFormOpen}>
-        <DialogContent className="sm:max-w-md">
-          <DialogHeader>
-            <DialogTitle className="text-lg font-bold">
-              {editingId || overridesDefaultId
-                ? t("newUi.sidebar.keybindings.editBindingTitle")
-                : t("newUi.sidebar.keybindings.addBindingTitle")}
-            </DialogTitle>
-          </DialogHeader>
-          <div className="flex flex-col gap-4 mt-1">
-            <div className="flex flex-col gap-1.5">
-              <label className="text-xs font-semibold">
-                {t("newUi.sidebar.keybindings.pressKeysToRecord")}{" "}
-                <span className="text-accent-brand">*</span>
-              </label>
-              <Input
-                data-keybinding-recorder
-                readOnly
-                value={
-                  recording
-                    ? t("newUi.sidebar.keybindings.recording")
-                    : recordedCombo
-                      ? formatCombo(recordedCombo)
-                      : ""
-                }
-                placeholder={t(
-                  "newUi.sidebar.keybindings.pressKeysPlaceholder",
-                )}
-                onFocus={(e) => startRecording(e.currentTarget)}
-                className="font-mono cursor-pointer"
-              />
-              {conflictWarning && (
-                <span className="text-xs text-yellow-500">
-                  {conflictWarning}
-                </span>
-              )}
-            </div>
-
-            <div className="flex flex-col gap-1.5">
-              <label className="text-xs font-semibold">
-                {t("newUi.sidebar.keybindings.actionLabel")}
-              </label>
-              <select
-                value={draft.type}
-                onChange={(e) => setDraft({ type: e.target.value })}
-                className="h-8 border border-border bg-background px-2 text-xs outline-none focus:ring-1 focus:ring-ring"
-              >
-                {!draftDef && draft.type && (
-                  <option value={draft.type}>{actionLabel(draft.type)}</option>
-                )}
-                {actions.map((action) => (
-                  <option key={action.id} value={action.id}>
-                    {t(action.labelKey)}
-                  </option>
-                ))}
-              </select>
-            </div>
-
-            {Editor && <Editor action={draft} onChange={setDraft} />}
-          </div>
-          <div className="flex items-center justify-end gap-2 mt-2">
-            <Button variant="ghost" onClick={() => setFormOpen(false)}>
-              {t("newUi.sidebar.keybindings.cancel")}
-            </Button>
-            <Button
-              variant="outline"
-              className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
-              onClick={handleSave}
-            >
-              {t("newUi.sidebar.keybindings.saveBinding")}
-            </Button>
-          </div>
-        </DialogContent>
-      </Dialog>
-    </>
-  );
-}
diff --git a/src/ui/sidebar/MultiPanelHint.tsx b/src/ui/sidebar/MultiPanelHint.tsx
deleted file mode 100644
index d0e2e11b0..000000000
--- a/src/ui/sidebar/MultiPanelHint.tsx
+++ /dev/null
@@ -1,93 +0,0 @@
-import { useState } from "react";
-import { useTranslation } from "react-i18next";
-import { PanelRight, SquareArrowOutUpRight, X } from "lucide-react";
-
-const STORAGE_KEY = "termix_multiPanelHintDismissed";
-
-function multiPanelHintDismissed(): boolean {
-  return localStorage.getItem(STORAGE_KEY) === "true";
-}
-
-/**
- * One-time nudge telling users a panel can leave the sidebar. Both actions are
- * otherwise only reachable through modifier clicks and the rail context menu,
- * which nobody finds on their own.
- */
-export function MultiPanelHint({
-  canPromote,
-  canRightDock,
-  onOpenAsTab,
-  onOpenInRightDock,
-}: {
-  canPromote: boolean;
-  canRightDock: boolean;
-  onOpenAsTab: () => void;
-  onOpenInRightDock: () => void;
-}) {
-  const { t } = useTranslation();
-  const [dismissed, setDismissed] = useState(multiPanelHintDismissed);
-
-  if (dismissed || (!canPromote && !canRightDock)) return null;
-
-  function dismiss() {
-    localStorage.setItem(STORAGE_KEY, "true");
-    setDismissed(true);
-  }
-
-  return (
-    <div className="relative shrink-0 border-b border-border bg-accent-brand/5 px-3 py-2.5">
-      <button
-        onClick={dismiss}
-        title={t("common.dismiss")}
-        aria-label={t("common.dismiss")}
-        className="absolute right-1.5 top-1.5 text-muted-foreground hover:text-foreground"
-      >
-        <X className="size-3" />
-      </button>
-      <p className="pr-5 text-xs font-semibold text-foreground">
-        {t("nav.multiPanelHintTitle")}
-      </p>
-      <p className="mt-0.5 pr-5 text-[11px] leading-snug text-muted-foreground">
-        {t("nav.multiPanelHintBody")}
-      </p>
-      <div className="mt-2 flex flex-col gap-1.5">
-        {canPromote && (
-          <div className="flex items-start gap-1.5 text-[11px] leading-snug text-muted-foreground">
-            <SquareArrowOutUpRight className="mt-0.5 size-3 shrink-0 text-accent-brand" />
-            <span>
-              <button
-                onClick={() => {
-                  dismiss();
-                  onOpenAsTab();
-                }}
-                className="font-medium text-foreground underline underline-offset-2 hover:text-accent-brand"
-              >
-                {t("nav.openAsTab")}
-              </button>
-              {": "}
-              {t("nav.multiPanelHintTabHow")}
-            </span>
-          </div>
-        )}
-        {canRightDock && (
-          <div className="flex items-start gap-1.5 text-[11px] leading-snug text-muted-foreground">
-            <PanelRight className="mt-0.5 size-3 shrink-0 text-accent-brand" />
-            <span>
-              <button
-                onClick={() => {
-                  dismiss();
-                  onOpenInRightDock();
-                }}
-                className="font-medium text-foreground underline underline-offset-2 hover:text-accent-brand"
-              >
-                {t("nav.openInRightDock")}
-              </button>
-              {": "}
-              {t("nav.multiPanelHintDockHow")}
-            </span>
-          </div>
-        )}
-      </div>
-    </div>
-  );
-}
diff --git a/src/ui/sidebar/NavigationVisibilityToggles.tsx b/src/ui/sidebar/NavigationVisibilityToggles.tsx
index 1830cfaf6..21f08e95d 100644
--- a/src/ui/sidebar/NavigationVisibilityToggles.tsx
+++ b/src/ui/sidebar/NavigationVisibilityToggles.tsx
@@ -1,11 +1,17 @@
 import { useTranslation } from "react-i18next";
+import { ChevronDown, ChevronUp, RotateCcw } from "lucide-react";
 import { FakeSwitch } from "@/components/section-card";
-import { useRailItems } from "./rail-items";
+import { Button } from "@/components/button";
+import {
+  useAreaPreferences,
+  useUiPreferencesContext,
+} from "@/contexts/UiPreferencesContext";
+import { moveRailItem, useRailItems } from "./rail-items";
 
 /**
  * Appearance > Sidebar > Navigation: one switch per rail destination,
  * including the ones plugins register, which appear and disappear here as
- * their plugin is turned on and off.
+ * their plugin is turned on and off. The arrows reorder the rail.
  */
 export function NavigationVisibilityToggles({
   hidden,
@@ -16,34 +22,92 @@ export function NavigationVisibilityToggles({
 }) {
   const { t } = useTranslation();
   const railItems = useRailItems();
+  const uiPrefs = useUiPreferencesContext();
+  const { order } = useAreaPreferences("rail");
+  const main = railItems.filter((item) => item.placement !== "footer");
+  const band = (id: string) =>
+    main.find((item) => item.id === id)?.group ?? "tools";
+
+  const move = (id: string, direction: -1 | 1) => {
+    const peers = main.filter((item) => band(item.id) === band(id));
+    const at = peers.findIndex((item) => item.id === id);
+    const target = at + direction;
+    if (target < 0 || target >= peers.length) return;
+    // Moving down means sitting before the item after the next one.
+    const before =
+      direction === -1 ? peers[target].id : (peers[target + 1]?.id ?? null);
+    uiPrefs?.setOverride("rail", "order", moveRailItem(main, id, before));
+  };
 
   return (
     <>
       {railItems
         .filter((item) => item.hideable !== false)
-        .map((item) => (
-          <div
-            key={item.id}
-            className="flex items-center justify-between py-1.5"
-            data-testid={`nav-toggle-${item.id}`}
-          >
-            <span className="flex items-center gap-1.5 text-xs font-medium text-foreground">
-              <span className="text-muted-foreground">
-                <item.icon size={12} />
+        .map((item) => {
+          const reorderable = item.placement !== "footer" && !!uiPrefs;
+          const peers = main.filter((peer) => band(peer.id) === band(item.id));
+          const index = peers.findIndex((peer) => peer.id === item.id);
+          return (
+            <div
+              key={item.id}
+              className="flex items-center justify-between gap-2 py-1.5"
+              data-testid={`nav-toggle-${item.id}`}
+            >
+              <span className="flex min-w-0 items-center gap-1.5 text-xs font-medium text-foreground">
+                <span className="text-muted-foreground">
+                  <item.icon size={12} />
+                </span>
+                <span className="truncate">{t(item.labelKey)}</span>
               </span>
-              {t(item.labelKey)}
-            </span>
-            <FakeSwitch
-              checked={!hidden.has(item.id)}
-              onChange={(visible) => {
-                const next = new Set(hidden);
-                if (visible) next.delete(item.id);
-                else next.add(item.id);
-                onChange(next);
-              }}
-            />
-          </div>
-        ))}
+              <span className="flex shrink-0 items-center gap-1">
+                {reorderable && (
+                  <>
+                    <Button
+                      variant="ghost"
+                      size="icon-xs"
+                      disabled={index <= 0}
+                      title={t("nav.moveUp")}
+                      aria-label={t("nav.moveUp")}
+                      onClick={() => move(item.id, -1)}
+                    >
+                      <ChevronUp />
+                    </Button>
+                    <Button
+                      variant="ghost"
+                      size="icon-xs"
+                      disabled={index < 0 || index >= peers.length - 1}
+                      title={t("nav.moveDown")}
+                      aria-label={t("nav.moveDown")}
+                      onClick={() => move(item.id, 1)}
+                    >
+                      <ChevronDown />
+                    </Button>
+                  </>
+                )}
+                <FakeSwitch
+                  checked={!hidden.has(item.id)}
+                  onChange={(visible) => {
+                    const next = new Set(hidden);
+                    if (visible) next.delete(item.id);
+                    else next.add(item.id);
+                    onChange(next);
+                  }}
+                />
+              </span>
+            </div>
+          );
+        })}
+      {uiPrefs && order && order.length > 0 && (
+        <Button
+          variant="ghost"
+          size="xs"
+          className="mt-1 self-start text-muted-foreground"
+          onClick={() => uiPrefs.setOverride("rail", "order", null)}
+        >
+          <RotateCcw />
+          {t("nav.resetRailOrder")}
+        </Button>
+      )}
     </>
   );
 }
diff --git a/src/ui/sidebar/QuickConnectPanel.tsx b/src/ui/sidebar/QuickConnectPanel.tsx
index 611beb63a..1fcab0067 100644
--- a/src/ui/sidebar/QuickConnectPanel.tsx
+++ b/src/ui/sidebar/QuickConnectPanel.tsx
@@ -1,8 +1,10 @@
 import { useEffect, useState, type ReactNode } from "react";
 import { useTranslation } from "react-i18next";
-import { Eye, EyeOff } from "lucide-react";
 import { toast } from "sonner";
 import { Input } from "@/components/input";
+import { PasswordInput } from "@/components/password-input";
+import { Textarea } from "@/components/textarea";
+import { GroupHeading, PANEL } from "@/components/panel-layout";
 import type { Host } from "@/types/ui-types";
 import { getCredentials } from "@/api/credentials-api";
 import { mapCredentials } from "./HostManagerData";
@@ -27,7 +29,7 @@ const INLINE_AUTH_TYPES = new Set(["password", "key", "credential"]);
 const LABEL_CLASS =
   "text-[10px] font-semibold uppercase tracking-widest text-muted-foreground";
 const SELECT_CLASS =
-  "flex h-7 w-full border border-border bg-background px-2.5 py-1 text-xs outline-none focus:ring-1 focus:ring-ring";
+  "flex h-8 w-full border border-border bg-background px-2.5 py-1 text-xs outline-none focus:ring-1 focus:ring-ring";
 
 interface QuickConnectPanelProps {
   onConnect: (host: Host, type: string) => void;
@@ -54,7 +56,6 @@ export function QuickConnectPanel({ onConnect }: QuickConnectPanelProps) {
   const [authFields, setAuthFields] = useState<Record<string, unknown>>({});
   const [password, setPassword] = useState("");
   const [privateKey, setPrivateKey] = useState("");
-  const [showPassword, setShowPassword] = useState(false);
   const [credentialId, setCredentialId] = useState("");
   const [credentials, setCredentials] = useState<
     { id: string; name: string; username: string }[]
@@ -140,7 +141,8 @@ export function QuickConnectPanel({ onConnect }: QuickConnectPanelProps) {
 
   return (
     <div className="flex flex-col flex-1 min-h-0 overflow-y-auto">
-      <div className="flex flex-col gap-3 p-3">
+      <div className={`flex flex-col ${PANEL.gap} ${PANEL.body}`}>
+        <GroupHeading title={t("newUi.sidebar.quickConnect.where")} />
         <div className="grid grid-cols-[1fr_5rem] gap-2">
           <Field label={t("newUi.sidebar.quickConnect.protocolLabel")}>
             <Select2
@@ -164,7 +166,7 @@ export function QuickConnectPanel({ onConnect }: QuickConnectPanelProps) {
               value={port}
               onChange={(e) => setPort(e.target.value)}
               onKeyDown={onEnter}
-              className="h-7 text-xs"
+              className="h-8 text-xs"
             />
           </Field>
         </div>
@@ -174,9 +176,13 @@ export function QuickConnectPanel({ onConnect }: QuickConnectPanelProps) {
             value={host}
             onChange={(e) => setHost(e.target.value)}
             onKeyDown={onEnter}
-            className="h-7 text-xs"
+            className="h-8 text-xs"
           />
         </Field>
+        <GroupHeading
+          title={t("newUi.sidebar.quickConnect.who")}
+          className="pt-1"
+        />
         <Field label={t("newUi.sidebar.quickConnect.usernameLabel")}>
           <Input
             placeholder={t("newUi.sidebar.quickConnect.usernamePlaceholder")}
@@ -189,7 +195,7 @@ export function QuickConnectPanel({ onConnect }: QuickConnectPanelProps) {
             }}
             onChange={(e) => setUsername(e.target.value)}
             onKeyDown={onEnter}
-            className="h-7 text-xs"
+            className="h-8 text-xs"
           />
         </Field>
         {!isDesktop && authOptions.length > 0 && (
@@ -212,29 +218,13 @@ export function QuickConnectPanel({ onConnect }: QuickConnectPanelProps) {
         )}
         {(isDesktop || authType === "password") && (
           <Field label={t("newUi.sidebar.quickConnect.passwordLabel")}>
-            <div className="relative">
-              <Input
-                type={showPassword ? "text" : "password"}
-                placeholder={t(
-                  "newUi.sidebar.quickConnect.passwordPlaceholder",
-                )}
-                value={password}
-                onChange={(e) => setPassword(e.target.value)}
-                onKeyDown={onEnter}
-                className="h-7 text-xs pr-8"
-              />
-              <button
-                type="button"
-                onClick={() => setShowPassword((o) => !o)}
-                className="absolute right-2 top-1/2 -translate-y-1/2 text-muted-foreground hover:text-foreground"
-              >
-                {showPassword ? (
-                  <EyeOff className="size-3.5" />
-                ) : (
-                  <Eye className="size-3.5" />
-                )}
-              </button>
-            </div>
+            <PasswordInput
+              placeholder={t("newUi.sidebar.quickConnect.passwordPlaceholder")}
+              value={password}
+              onChange={(e) => setPassword(e.target.value)}
+              onKeyDown={onEnter}
+              className="h-8 pr-8 text-xs"
+            />
           </Field>
         )}
         {selected?.quickConnect?.showDomain && (
@@ -244,19 +234,19 @@ export function QuickConnectPanel({ onConnect }: QuickConnectPanelProps) {
               value={domain}
               onChange={(e) => setDomain(e.target.value)}
               onKeyDown={onEnter}
-              className="h-7 text-xs"
+              className="h-8 text-xs"
             />
           </Field>
         )}
         {!isDesktop && authType === "key" && (
           <Field label={t("newUi.sidebar.quickConnect.privateKeyLabel")}>
-            <textarea
+            <Textarea
               placeholder={t(
                 "newUi.sidebar.quickConnect.privateKeyPlaceholder",
               )}
               value={privateKey}
               onChange={(e) => setPrivateKey(e.target.value)}
-              className="w-full h-24 px-2.5 py-2 text-xs bg-background border border-border text-foreground placeholder:text-muted-foreground resize-none outline-none focus:ring-1 focus:ring-ring font-mono"
+              className="h-24 resize-none font-mono text-xs"
             />
           </Field>
         )}
@@ -294,7 +284,7 @@ export function QuickConnectPanel({ onConnect }: QuickConnectPanelProps) {
             }}
           />
         )}
-        <div className="flex flex-col gap-1.5 pt-1">
+        <div className="flex flex-col gap-1.5 pt-2">
           {targets.length === 0 ? (
             <p className="text-xs text-muted-foreground">
               {t("newUi.sidebar.quickConnect.noTarget")}
@@ -306,9 +296,9 @@ export function QuickConnectPanel({ onConnect }: QuickConnectPanelProps) {
                 type="button"
                 disabled={!host.trim()}
                 onClick={() => connect(action)}
-                className={`flex items-center justify-center gap-1.5 h-7 w-full border text-xs font-semibold transition-colors disabled:opacity-50 disabled:pointer-events-none ${
+                className={`flex h-8 w-full items-center justify-center gap-1.5 border text-xs font-medium transition-colors disabled:pointer-events-none disabled:opacity-50 ${
                   index === 0
-                    ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand hover:bg-accent-brand/20"
+                    ? "border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10"
                     : "border-border text-foreground hover:bg-muted"
                 }`}
               >
diff --git a/src/ui/sidebar/SshAuthProviderFields.tsx b/src/ui/sidebar/SshAuthProviderFields.tsx
index 36d2820ed..61d0e6391 100644
--- a/src/ui/sidebar/SshAuthProviderFields.tsx
+++ b/src/ui/sidebar/SshAuthProviderFields.tsx
@@ -1,6 +1,6 @@
 import { useEffect, useRef, useState } from "react";
 import { useTranslation } from "react-i18next";
-import type { PluginSettingsField } from "@termix/plugin-sdk/manifest";
+import type { PluginSettingsField } from "@termix-ssh/plugin-sdk/manifest";
 import { SettingsFieldRow } from "@/settings/SettingsFields";
 import {
   getPluginHostSettings,
diff --git a/src/ui/sidebar/UserProfilePanel.tsx b/src/ui/sidebar/UserProfilePanel.tsx
index 4aebfa812..0665d911b 100644
--- a/src/ui/sidebar/UserProfilePanel.tsx
+++ b/src/ui/sidebar/UserProfilePanel.tsx
@@ -1,3 +1,5 @@
+import { InlineView, useConfirm } from "@/components/surface/surface-scope";
+import { FormFooter } from "@/components/list-kit";
 import { useState, useRef, useEffect } from "react";
 import { AuthEnrollmentSections } from "./AuthEnrollmentSections";
 import { useTranslation } from "react-i18next";
@@ -26,14 +28,6 @@ import { shell } from "@/plugin-host/shell-bridge";
 import { Button } from "@/components/button";
 import { Input } from "@/components/input";
 import { VersionBadge } from "@/components/version-badge";
-import {
-  Dialog,
-  DialogContent,
-  DialogHeader,
-  DialogTitle,
-  DialogDescription,
-  DialogFooter,
-} from "@/components/dialog";
 import {
   AlertCircle,
   ChevronDown,
@@ -56,8 +50,8 @@ import {
 import { SettingRow, FakeSwitch } from "@/components/section-card";
 import { NavigationVisibilityToggles } from "./NavigationVisibilityToggles";
 import { InterfacePresetSettings } from "./InterfacePresetSettings";
+import { useSettingsEmbedded } from "@/settings/settings-embed";
 import { useUiPreferencesContext } from "@/contexts/UiPreferencesContext";
-import { KeybindingsDialog } from "./KeybindingsDialog";
 import {
   ACCENT_PRESET_COLORS,
   applyAccentColor,
@@ -72,13 +66,18 @@ import type { FontSizeId, ThemeId, UiFontId } from "@/types/ui-types";
 import { toast } from "sonner";
 import { changeAppLanguage, normalizeLanguageCode } from "@/i18n/i18n";
 import { Select2 } from "@/components/select2";
+import { LANGUAGES, THEMES } from "@/settings/appearance/appearance-controls";
 import { clearLocalAdaptivePreferences } from "@/lib/local-adaptive-preferences";
+import { reportBetaFeedbackUrl } from "@/lib/issue-url";
+import { isPrerelease } from "@/plugins/plugin-model";
 import {
   FeatureSettingsSection,
   featureSectionId,
   useFeatureSettings,
   type FeatureSectionId,
 } from "@/settings/FeatureSettingsSections";
+import { docsUrl } from "@/lib/docs";
+import { roleLabel } from "@/lib/role-label";
 
 type UserProfileSection =
   | "account"
@@ -89,57 +88,6 @@ type UserProfileSection =
   | "data"
   | FeatureSectionId;
 
-const THEMES: { id: ThemeId; preview: string }[] = [
-  { id: "system", preview: "auto" },
-  { id: "light", preview: "#ffffff" },
-  { id: "dark", preview: "#1a1c22" },
-  { id: "dracula", preview: "#282a36" },
-  { id: "catppuccin", preview: "#1e1e2e" },
-  { id: "nord", preview: "#2e3440" },
-  { id: "solarized", preview: "#002b36" },
-  { id: "tokyo-night", preview: "#1a1b26" },
-  { id: "one-dark", preview: "#282c34" },
-  { id: "gruvbox", preview: "#282828" },
-];
-
-const LANGUAGES = [
-  { code: "en", label: "English" },
-  { code: "af", label: "Afrikaans" },
-  { code: "ar", label: "العربية" },
-  { code: "bn", label: "বাংলা" },
-  { code: "bg", label: "Български" },
-  { code: "ca", label: "Català" },
-  { code: "zh-CN", label: "中文 (简体)" },
-  { code: "zh-TW", label: "中文 (繁體)" },
-  { code: "cs", label: "Čeština" },
-  { code: "da", label: "Dansk" },
-  { code: "nl", label: "Nederlands" },
-  { code: "fi", label: "Suomi" },
-  { code: "fr", label: "Français" },
-  { code: "de", label: "Deutsch" },
-  { code: "el", label: "Ελληνικά" },
-  { code: "he", label: "עברית" },
-  { code: "hi", label: "हिन्दी" },
-  { code: "hu", label: "Magyar" },
-  { code: "id", label: "Indonesia" },
-  { code: "it", label: "Italiano" },
-  { code: "ja", label: "日本語" },
-  { code: "ko", label: "한국어" },
-  { code: "no", label: "Norsk" },
-  { code: "pl", label: "Polski" },
-  { code: "pt-PT", label: "Português (PT)" },
-  { code: "pt-BR", label: "Português (BR)" },
-  { code: "ro", label: "Română" },
-  { code: "ru", label: "Русский" },
-  { code: "sr", label: "Српски" },
-  { code: "es-ES", label: "Español" },
-  { code: "sv-SE", label: "Svenska" },
-  { code: "th", label: "ไทย" },
-  { code: "tr", label: "Türkçe" },
-  { code: "uk", label: "Українська" },
-  { code: "vi", label: "Tiếng Việt" },
-];
-
 export function AccordionSection({
   id,
   label,
@@ -157,7 +105,19 @@ export function AccordionSection({
   hidden?: boolean;
   children: React.ReactNode;
 }) {
+  const embedded = useSettingsEmbedded();
   if (hidden) return null;
+  if (embedded) {
+    if (!open) return null;
+    return (
+      <div
+        id={`${id}-content`}
+        className="flex flex-col border border-border bg-card px-3 pb-3"
+      >
+        {children}
+      </div>
+    );
+  }
 
   return (
     <div className="border border-border bg-card overflow-hidden">
@@ -253,119 +213,88 @@ export function NewApiKeyDialog({
   };
 
   return (
-    <Dialog
+    <InlineView
       open={open}
       onOpenChange={(nextOpen) => {
         if (nextOpen || !createdToken) onOpenChange(nextOpen);
       }}
-    >
-      <DialogContent className="sm:max-w-md rounded-none border-border bg-card p-0 gap-0 overflow-hidden">
-        <DialogHeader className="px-5 pt-5 pb-4 border-b border-border">
-          <div className="flex items-center gap-2.5">
-            <div className="size-8 border border-border bg-muted flex items-center justify-center shrink-0">
-              <Network className="size-3.5 text-accent-brand" />
-            </div>
-            <div>
-              <DialogTitle className="text-base font-bold leading-none">
-                {t("newUi.sidebar.userProfile.createApiKeyTitle")}
-              </DialogTitle>
-              <DialogDescription className="text-xs text-muted-foreground mt-0.5">
-                {t("newUi.sidebar.userProfile.createApiKeyDescription")}
-              </DialogDescription>
-            </div>
-          </div>
-        </DialogHeader>
-
-        {createdToken ? (
-          <div className="flex flex-col gap-3 px-5 py-4">
-            <span className="text-xs font-semibold text-accent-brand">
-              {t("newUi.sidebar.userProfile.apiKeyCreatedWarning")}
-            </span>
-            <div className="flex items-center gap-2 border border-border bg-muted/30 px-2 py-2">
-              <code className="min-w-0 flex-1 break-all text-xs text-accent-brand">
-                {createdToken}
-              </code>
-              <Button
-                variant="ghost"
-                size="icon"
-                className="size-7 shrink-0"
-                aria-label={t("newUi.sidebar.userProfile.copyApiKey")}
-                onClick={() => {
-                  copyToClipboard(createdToken);
-                  toast.info(t("newUi.sidebar.userProfile.copiedToClipboard"));
-                }}
-              >
-                <Copy className="size-3.5" />
-              </Button>
-            </div>
-          </div>
+      title={t("newUi.sidebar.userProfile.createApiKeyTitle")}
+      footer={
+        createdToken ? (
+          <FormFooter
+            onSave={close}
+            saveLabel={t("newUi.sidebar.userProfile.done")}
+          />
         ) : (
-          <div className="flex flex-col gap-4 px-5 py-4">
-            <div className="flex flex-col gap-1.5">
-              <label className="text-xs font-bold uppercase tracking-widest text-muted-foreground">
-                {t("newUi.sidebar.userProfile.apiKeyNameLabel")}
-              </label>
-              <Input
-                autoFocus
-                placeholder={t(
-                  "newUi.sidebar.userProfile.apiKeyNamePlaceholder",
-                )}
-                value={name}
-                onChange={(e) => setName(e.target.value)}
-                onKeyDown={(e) => e.key === "Enter" && handleCreate()}
-                className="rounded-none bg-muted/50 border-border text-sm h-9"
-              />
-            </div>
-
-            <div className="flex flex-col gap-1.5">
-              <label className="text-xs font-bold uppercase tracking-widest text-muted-foreground">
-                {t("newUi.sidebar.userProfile.expiryDateLabel")}{" "}
-                <span className="text-muted-foreground/50 normal-case font-medium">
-                  ({t("newUi.sidebar.userProfile.optional")})
-                </span>
-              </label>
-              <Input
-                type="date"
-                value={expiry}
-                onChange={(e) => setExpiry(e.target.value)}
-                className="rounded-none bg-muted/50 border-border text-sm h-9"
-              />
-            </div>
-          </div>
-        )}
-
-        <DialogFooter className="px-5 py-3 border-t border-border bg-muted/20">
-          {createdToken ? (
+          <FormFooter
+            onCancel={close}
+            cancelLabel={t("newUi.sidebar.userProfile.cancel")}
+            onSave={() => void handleCreate()}
+            saveLabel={t("newUi.sidebar.userProfile.createKey")}
+            saving={creating}
+          />
+        )
+      }
+    >
+      <p className="text-xs text-muted-foreground">
+        {t("newUi.sidebar.userProfile.createApiKeyDescription")}
+      </p>
+      {createdToken ? (
+        <div className="flex flex-col gap-3 px-5 py-4">
+          <span className="text-xs font-semibold text-accent-brand">
+            {t("newUi.sidebar.userProfile.apiKeyCreatedWarning")}
+          </span>
+          <div className="flex items-center gap-2 border border-border bg-muted/30 px-2 py-2">
+            <code className="min-w-0 flex-1 break-all text-xs text-accent-brand">
+              {createdToken}
+            </code>
             <Button
-              variant="outline"
-              className="rounded-none border-accent-brand/40 text-[10px] font-bold uppercase tracking-widest text-accent-brand"
-              onClick={close}
+              variant="ghost"
+              size="icon"
+              className="size-7 shrink-0"
+              aria-label={t("newUi.sidebar.userProfile.copyApiKey")}
+              onClick={() => {
+                copyToClipboard(createdToken);
+                toast.info(t("newUi.sidebar.userProfile.copiedToClipboard"));
+              }}
             >
-              {t("newUi.sidebar.userProfile.done")}
+              <Copy className="size-3.5" />
             </Button>
-          ) : (
-            <>
-              <Button
-                variant="ghost"
-                onClick={close}
-                className="rounded-none text-[10px] font-bold uppercase tracking-widest"
-              >
-                {t("newUi.sidebar.userProfile.cancel")}
-              </Button>
-              <Button
-                variant="outline"
-                className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 rounded-none text-[10px] font-bold uppercase tracking-widest gap-1.5"
-                onClick={handleCreate}
-                disabled={creating}
-              >
-                <KeyRound className="size-3" />{" "}
-                {t("newUi.sidebar.userProfile.createKey")}
-              </Button>
-            </>
-          )}
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
+          </div>
+        </div>
+      ) : (
+        <div className="flex flex-col gap-4 px-5 py-4">
+          <div className="flex flex-col gap-1.5">
+            <label className="text-xs font-bold uppercase tracking-widest text-muted-foreground">
+              {t("newUi.sidebar.userProfile.apiKeyNameLabel")}
+            </label>
+            <Input
+              autoFocus
+              placeholder={t("newUi.sidebar.userProfile.apiKeyNamePlaceholder")}
+              value={name}
+              onChange={(e) => setName(e.target.value)}
+              onKeyDown={(e) => e.key === "Enter" && handleCreate()}
+              className="rounded-none bg-muted/50 border-border text-sm h-9"
+            />
+          </div>
+
+          <div className="flex flex-col gap-1.5">
+            <label className="text-xs font-bold uppercase tracking-widest text-muted-foreground">
+              {t("newUi.sidebar.userProfile.expiryDateLabel")}{" "}
+              <span className="text-muted-foreground/50 normal-case font-medium">
+                ({t("newUi.sidebar.userProfile.optional")})
+              </span>
+            </label>
+            <Input
+              type="date"
+              value={expiry}
+              onChange={(e) => setExpiry(e.target.value)}
+              className="rounded-none bg-muted/50 border-border text-sm h-9"
+            />
+          </div>
+        </div>
+      )}
+    </InlineView>
   );
 }
 
@@ -485,7 +414,13 @@ export function UserProfilePanel({
   onLogout,
   userPrefs,
   onPrefsChange,
+  section,
+  onOpenSettingsPage,
 }: {
+  /** Shows just this section, flat, as a Settings page. */
+  section?: string;
+  /** Moves the Settings tab to another page. */
+  onOpenSettingsPage?: (id: string) => void;
   username?: string;
   onLogout?: () => void;
   userPrefs?: {
@@ -509,6 +444,7 @@ export function UserProfilePanel({
   }) => void;
 }) {
   const { t } = useTranslation();
+  const confirm = useConfirm();
   const themeLabel: Record<ThemeId, string> = {
     system: t("newUi.sidebar.userProfile.themeSystem"),
     light: t("newUi.sidebar.userProfile.themeLight"),
@@ -531,13 +467,14 @@ export function UserProfilePanel({
   const [accountUsername, setAccountUsername] = useState(username ?? "");
   const [accountTotpEnabled, setAccountTotpEnabled] = useState(false);
   const [userRole, setUserRole] = useState("");
+  const [isAdmin, setIsAdmin] = useState(false);
   const [authMethod, setAuthMethod] = useState("");
   const [version, setVersion] = useState("");
   const [versionStatus, setVersionStatus] = useState<
     "up_to_date" | "requires_update" | "beta" | "unknown"
   >("up_to_date");
   const [releaseUrl, setReleaseUrl] = useState("");
-  const [isOidc, setIsOidc] = useState(false);
+  const [isExternal, setIsExternal] = useState(false);
   const [isDualAuth, setIsDualAuth] = useState(false);
 
   // Delete account
@@ -557,7 +494,7 @@ export function UserProfilePanel({
   const { theme, setTheme } = useTheme();
   const localSnapshot = useRef<Record<string, string | null>>({});
 
-  // Appearance state — initialized from localStorage
+  // Appearance state, initialized from localStorage
   const [accentColor, setAccentColor] = useState(
     () => localStorage.getItem("termix-accent") ?? "#f59145",
   );
@@ -598,12 +535,11 @@ export function UserProfilePanel({
     }
   }, [linkedAccount, storageMode, onPrefsChange]);
 
-  // Settings toggles — all backed by localStorage
+  // Settings toggles, all backed by localStorage
   const [commandPaletteEnabled, setCommandPaletteEnabled] = useState(() => {
     const v = localStorage.getItem("commandPaletteShortcutEnabled");
     return v !== null ? v === "true" : true;
   });
-  const [keybindingsDialogOpen, setKeybindingsDialogOpen] = useState(false);
   // Sidebar display customization (density, tags, tray trigger, status
   // colors) now lives in the dedicated Customize Sidebar panel opened from
   // the Hosts toolbar, not here -- resetToDefaults still needs write access.
@@ -647,13 +583,14 @@ export function UserProfilePanel({
     getUserInfo()
       .then((info) => {
         setUserId(info.userId);
-        setIsOidc(info.is_external ?? info.is_oidc ?? false);
+        setIsExternal(info.is_external ?? false);
         setIsDualAuth(info.is_dual_auth ?? false);
         const linked = info.linked ?? null;
         setLinkedAccount(linked);
         // A linked desktop is the account it is signed in to on the server.
         setAccountUsername(linked?.username || info.username);
         setAccountTotpEnabled(info.totp_enabled ?? false);
+        setIsAdmin(Boolean(linked ? linked.isAdmin : info.is_admin));
         setUserRole(
           (linked ? linked.isAdmin : info.is_admin)
             ? t("newUi.sidebar.userProfile.roleAdministrator")
@@ -661,8 +598,8 @@ export function UserProfilePanel({
         );
         if (info.is_dual_auth) {
           setAuthMethod(t("newUi.sidebar.userProfile.authMethodDual"));
-        } else if (info.is_external ?? info.is_oidc) {
-          setAuthMethod(t("newUi.sidebar.userProfile.authMethodOidc"));
+        } else if (info.is_external) {
+          setAuthMethod(t("newUi.sidebar.userProfile.authMethodExternal"));
         } else {
           setAuthMethod(t("newUi.sidebar.userProfile.authMethodLocal"));
         }
@@ -1181,10 +1118,19 @@ export function UserProfilePanel({
     }
   }
 
-  const canChangePasword = !isOidc || isDualAuth;
+  const canChangePasword = !isExternal || isDualAuth;
+  const isOpen = (id: string) =>
+    section ? section === id : openSections.has(id as UserProfileSection);
+  const shows = (id: string) => !section || section === id;
 
   return (
-    <div className="mx-auto flex w-full max-w-5xl flex-col gap-2 p-3">
+    <div
+      className={
+        section
+          ? "flex w-full flex-col gap-2"
+          : "mx-auto flex w-full max-w-5xl flex-col gap-2 p-3"
+      }
+    >
       <NewApiKeyDialog
         open={newKeyOpen}
         onOpenChange={setNewKeyOpen}
@@ -1192,31 +1138,10 @@ export function UserProfilePanel({
         userId={userId}
       />
 
-      {/* Donate banner */}
-      <div className="border border-accent-brand/40 bg-accent-brand/10 px-3 py-2.5 flex flex-col gap-1.5">
-        <div className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-accent-brand">
-          {t("newUi.sidebar.userProfile.donateTitle")}
-        </div>
-        <p className="text-[10px] text-muted-foreground leading-relaxed">
-          {t("newUi.sidebar.userProfile.donateDescription")}
-        </p>
-        <p className="text-[10px] text-muted-foreground leading-relaxed">
-          {t("newUi.sidebar.userProfile.donateMilestones")}
-        </p>
-        <a
-          href="https://donate.termix.site/"
-          target="_blank"
-          rel="noopener noreferrer"
-          className="self-start flex items-center gap-1 text-[10px] font-bold uppercase tracking-widest bg-accent-brand text-white px-2 py-1 hover:opacity-90 transition-opacity"
-        >
-          {t("newUi.sidebar.userProfile.donateButton")}
-        </a>
-      </div>
-
-      {/* Storage mode toggle — only meaningful once a remote server is
+      {/* Storage mode toggle, only meaningful once a remote server is
           connected; with no sync there's nowhere for "cloud" to sync to,
           so this stays forced to local storage and hidden. */}
-      {(!isElectron() || isLinked) && (
+      {(!isElectron() || isLinked) && shows("data") && (
         <div className="border border-border bg-card px-3 py-2.5 flex flex-col gap-2">
           <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
             {t("newUi.sidebar.userProfile.storageModeSwitch")}
@@ -1226,7 +1151,7 @@ export function UserProfilePanel({
               onClick={() => handleStorageModeChange("local")}
               className={`flex-1 py-1 text-[10px] font-bold uppercase tracking-widest transition-colors ${
                 storageMode === "local"
-                  ? "bg-accent-brand text-white"
+                  ? "bg-accent-brand/10 text-accent-brand"
                   : "text-muted-foreground hover:text-foreground hover:bg-muted/40"
               }`}
             >
@@ -1236,7 +1161,7 @@ export function UserProfilePanel({
               onClick={() => handleStorageModeChange("cloud")}
               className={`flex-1 py-1 text-[10px] font-bold uppercase tracking-widest transition-colors ${
                 storageMode === "cloud"
-                  ? "bg-accent-brand text-white"
+                  ? "bg-accent-brand/10 text-accent-brand"
                   : "text-muted-foreground hover:text-foreground hover:bg-muted/40"
               }`}
             >
@@ -1261,7 +1186,7 @@ export function UserProfilePanel({
         id="account"
         label={t("newUi.sidebar.userProfile.sectionAccount")}
         icon={<User className="size-3.5" />}
-        open={openSections.has("account")}
+        open={isOpen("account")}
         onToggle={() => toggle("account")}
       >
         <div className="flex flex-col gap-0 pt-2">
@@ -1300,7 +1225,7 @@ export function UserProfilePanel({
                   {t("newUi.sidebar.userProfile.usernameLabel")}
                 </span>
                 <span className="text-sm font-semibold mt-0.5">
-                  {accountUsername || "—"}
+                  {accountUsername || "-"}
                 </span>
               </div>
               <div className="flex flex-col py-2">
@@ -1309,14 +1234,14 @@ export function UserProfilePanel({
                 </span>
                 <div className="flex flex-wrap gap-1 mt-0.5">
                   <span className="inline-flex items-center px-1.5 py-0.5 text-[10px] font-semibold border border-accent-brand/40 bg-accent-brand/10 text-accent-brand w-fit">
-                    {userRole || "—"}
+                    {userRole || "-"}
                   </span>
                   {userRoles.map((r) => (
                     <span
                       key={r.roleId}
                       className="inline-flex items-center px-1.5 py-0.5 text-[10px] font-semibold border border-border bg-muted text-muted-foreground w-fit"
                     >
-                      {r.roleDisplayName}
+                      {roleLabel(t, r.roleDisplayName)}
                     </span>
                   ))}
                 </div>
@@ -1328,7 +1253,7 @@ export function UserProfilePanel({
                       {t("newUi.sidebar.userProfile.authMethodLabel")}
                     </span>
                     <span className="text-sm font-semibold mt-0.5">
-                      {authMethod || "—"}
+                      {authMethod || "-"}
                     </span>
                   </div>
                   <div className="flex flex-col py-2">
@@ -1356,45 +1281,60 @@ export function UserProfilePanel({
           )}
 
           <div className="border-t border-border pt-3 mt-1">
-            <span className="text-[10px] text-muted-foreground uppercase tracking-widest font-semibold">
-              {t("newUi.sidebar.userProfile.versionLabel")}
-            </span>
-            <div className="flex items-center justify-between mt-1.5">
-              <span className="text-sm font-bold text-accent-brand">
-                {version ? `v${version}` : "—"}
+            <div className="flex items-center gap-1.5">
+              <span className="text-[10px] text-muted-foreground uppercase tracking-widest font-semibold">
+                {t("newUi.sidebar.userProfile.versionLabel")}
               </span>
-              <VersionBadge status={versionStatus} releaseUrl={releaseUrl} />
+              <VersionBadge
+                status={versionStatus}
+                releaseUrl={releaseUrl}
+                className="shrink-0 px-1 py-px text-[9px]"
+              />
             </div>
+            <span
+              className="mt-1.5 block truncate text-sm font-bold text-accent-brand"
+              title={version ? `v${version}` : undefined}
+            >
+              {version ? `v${version}` : "-"}
+            </span>
           </div>
 
-          <div className="border-t border-border pt-3 mt-3">
-            <div className="flex items-center justify-between">
-              <div className="flex flex-col gap-0.5">
-                <span className="text-xs font-medium">
-                  {t("newUi.sidebar.userProfile.betaProgramTitle")}
-                </span>
-                <span className="text-[10px] text-muted-foreground">
-                  {t("newUi.sidebar.userProfile.betaProgramDescription")}{" "}
+          {(isPrerelease(version) || isAdmin) && (
+            <div className="border-t border-border pt-3 mt-3">
+              <div className="flex items-center justify-between">
+                <div className="flex flex-col gap-0.5">
+                  <span className="text-xs font-medium">
+                    {isPrerelease(version)
+                      ? t("newUi.sidebar.userProfile.onBetaTitle")
+                      : t("newUi.sidebar.userProfile.tryBetaTitle")}
+                  </span>
+                  <span className="text-[10px] text-muted-foreground">
+                    {isPrerelease(version)
+                      ? t("newUi.sidebar.userProfile.onBetaDescription")
+                      : t("newUi.sidebar.userProfile.tryBetaDescription")}
+                  </span>
+                </div>
+                {isPrerelease(version) ? (
                   <a
-                    href="https://github.com/Termix-SSH/Support/issues/new?template=beta_feedback.yml"
+                    href={reportBetaFeedbackUrl(version)}
                     target="_blank"
                     rel="noopener noreferrer"
-                    className="text-accent-brand hover:underline"
+                    className="shrink-0 ml-3 flex items-center gap-1 text-[10px] font-bold uppercase tracking-widest border border-border px-2 py-1.5 hover:bg-muted/40 transition-colors"
                   >
-                    {t("newUi.sidebar.userProfile.betaProgramFeedback")}
+                    {t("newUi.sidebar.userProfile.sendBetaFeedback")}
                   </a>
-                </span>
+                ) : (
+                  <button
+                    type="button"
+                    onClick={() => onOpenSettingsPage?.("updates")}
+                    className="shrink-0 ml-3 flex items-center gap-1 text-[10px] font-bold uppercase tracking-widest border border-border px-2 py-1.5 hover:bg-muted/40 transition-colors"
+                  >
+                    {t("newUi.sidebar.userProfile.openUpdates")}
+                  </button>
+                )}
               </div>
-              <a
-                href="https://docs.termix.site/install/server/docker#beta-builds"
-                target="_blank"
-                rel="noopener noreferrer"
-                className="shrink-0 ml-3 flex items-center gap-1 text-[10px] font-bold uppercase tracking-widest border border-border px-2 py-1.5 hover:bg-muted/40 transition-colors"
-              >
-                {t("newUi.sidebar.userProfile.betaProgramLearnMore")}
-              </a>
             </div>
-          </div>
+          )}
 
           <div className="border-t border-border pt-3 mt-3">
             <div className="flex items-center justify-between">
@@ -1407,7 +1347,7 @@ export function UserProfilePanel({
                 </span>
               </div>
               <a
-                href="https://docs.termix.site/cli"
+                href={docsUrl("cli")}
                 target="_blank"
                 rel="noopener noreferrer"
                 className="shrink-0 ml-3 flex items-center gap-1 text-[10px] font-bold uppercase tracking-widest border border-border px-2 py-1.5 hover:bg-muted/40 transition-colors"
@@ -1447,7 +1387,7 @@ export function UserProfilePanel({
         id="interface"
         label={t("newUi.sidebar.userProfile.sectionInterface")}
         icon={<LayoutTemplate size={13} />}
-        open={openSections.has("interface")}
+        open={isOpen("interface")}
         onToggle={() => toggle("interface")}
       >
         <div className="flex flex-col gap-4 pt-3">
@@ -1464,7 +1404,7 @@ export function UserProfilePanel({
         id="appearance"
         label={t("newUi.sidebar.userProfile.sectionAppearance")}
         icon={<Palette className="size-3.5" />}
-        open={openSections.has("appearance")}
+        open={isOpen("appearance")}
         onToggle={() => toggle("appearance")}
       >
         <div className="flex flex-col gap-4 pt-3">
@@ -1501,7 +1441,6 @@ export function UserProfilePanel({
                   </option>
                 ))}
               </Select2>
-              <ChevronDown className="absolute right-2 top-1/2 -translate-y-1/2 size-3 text-muted-foreground pointer-events-none" />
             </div>
             <div className="flex gap-1 mt-0.5">
               {THEMES.filter((th) => th.id !== "system").map((th) => (
@@ -1521,7 +1460,7 @@ export function UserProfilePanel({
               <Type className="size-3" />
               {t("newUi.sidebar.userProfile.interfaceFontLabel")}
             </span>
-            <select
+            <Select2
               value={uiFont}
               onChange={(event) =>
                 handleUiFontChange(event.target.value as UiFontId)
@@ -1533,7 +1472,7 @@ export function UserProfilePanel({
                   {font.label}
                 </option>
               ))}
-            </select>
+            </Select2>
             <span className="text-[10px] text-muted-foreground">
               {t("newUi.sidebar.userProfile.interfaceFontDescription")}
             </span>
@@ -1641,7 +1580,7 @@ export function UserProfilePanel({
               <Button
                 variant="outline"
                 size="sm"
-                onClick={() => setKeybindingsDialogOpen(true)}
+                onClick={() => onOpenSettingsPage?.("keybindings")}
               >
                 {t("newUi.sidebar.userProfile.manageShortcuts")}
               </Button>
@@ -1760,7 +1699,10 @@ export function UserProfilePanel({
             </SettingRow>
           </div>
 
-          <div className="flex flex-col gap-1 border-t border-border pt-3">
+          <div
+            id="settings-navigation"
+            className="flex flex-col gap-1 border-t border-border pt-3"
+          >
             <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground mb-1">
               {t("newUi.sidebar.userProfile.settingsNavigation")}
             </span>
@@ -1812,7 +1754,7 @@ export function UserProfilePanel({
         id="security"
         label={t("newUi.sidebar.userProfile.sectionSecurity")}
         icon={<Shield className="size-3.5" />}
-        open={openSections.has("security")}
+        open={isOpen("security")}
         onToggle={() => toggle("security")}
       >
         <div className="flex flex-col gap-4 pt-3">
@@ -1833,7 +1775,7 @@ export function UserProfilePanel({
         id="api-keys"
         label={t("newUi.sidebar.userProfile.sectionApiKeys")}
         icon={<Network className="size-3.5" />}
-        open={openSections.has("api-keys")}
+        open={isOpen("api-keys")}
         onToggle={() => toggle("api-keys")}
       >
         <div className="flex flex-col gap-2 pt-3">
@@ -1896,6 +1838,13 @@ export function UserProfilePanel({
                       size="icon"
                       className="size-6 text-muted-foreground hover:text-destructive"
                       onClick={async () => {
+                        const ok = await confirm({
+                          title: t("admin.revokeKeyConfirm", {
+                            name: key.name,
+                          }),
+                          confirmLabel: t("admin.revokeKey"),
+                        });
+                        if (!ok) return;
                         try {
                           await deleteApiKey(key.id);
                           setApiKeys((prev) =>
@@ -1938,7 +1887,7 @@ export function UserProfilePanel({
         id="data"
         label={t("newUi.sidebar.userProfile.sectionData")}
         icon={<Database className="size-3.5" />}
-        open={openSections.has("data")}
+        open={isOpen("data")}
         onToggle={() => toggle("data")}
       >
         <div className="flex flex-col gap-3 pt-3">
@@ -2013,78 +1962,69 @@ export function UserProfilePanel({
           key={plugin.id}
           plugin={plugin}
           scope="user"
-          open={openSections.has(featureSectionId(plugin.id))}
+          open={isOpen(featureSectionId(plugin.id))}
           onToggle={() => toggle(featureSectionId(plugin.id))}
         />
       ))}
 
       {/* Delete account dialog */}
-      <Dialog
+
+      <InlineView
         open={showDeleteConfirm}
         onOpenChange={(open) => {
           setShowDeleteConfirm(open);
           if (!open) setDeletePassword("");
         }}
+        title={t("newUi.sidebar.userProfile.deleteAccount")}
       >
-        <DialogContent className="sm:max-w-md">
-          <DialogHeader>
-            <DialogTitle className="text-lg font-bold text-destructive">
-              {t("newUi.sidebar.userProfile.deleteAccount")}
-            </DialogTitle>
-            <DialogDescription className="text-xs text-muted-foreground">
-              {t("newUi.sidebar.userProfile.deleteAccountPermanent")}
-            </DialogDescription>
-          </DialogHeader>
-          <div className="flex flex-col gap-3 mt-1">
-            <div className="flex items-start gap-2.5 border border-destructive/30 bg-destructive/5 px-3 py-2.5">
-              <AlertCircle className="size-4 text-destructive shrink-0 mt-0.5" />
-              <span className="text-xs text-destructive">
-                {t("newUi.sidebar.userProfile.deleteAccountWarning")}
-              </span>
-            </div>
-            <div className="flex flex-col gap-1.5">
-              <label className="text-xs font-semibold uppercase tracking-widest text-muted-foreground">
-                {t("newUi.sidebar.userProfile.confirmPasswordLabel")}
-              </label>
-              <Input
-                type="password"
-                placeholder={t(
-                  "newUi.sidebar.userProfile.confirmPasswordDeletePlaceholder",
-                )}
-                value={deletePassword}
-                onChange={(e) => setDeletePassword(e.target.value)}
-                onKeyDown={(e) => e.key === "Enter" && handleDeleteAccount()}
-              />
-            </div>
+        <p className="text-xs text-muted-foreground">
+          {t("newUi.sidebar.userProfile.deleteAccountPermanent")}
+        </p>
+        <div className="flex flex-col gap-3 mt-1">
+          <div className="flex items-start gap-2.5 border border-destructive/30 bg-destructive/5 px-3 py-2.5">
+            <AlertCircle className="size-4 text-destructive shrink-0 mt-0.5" />
+            <span className="text-xs text-destructive">
+              {t("newUi.sidebar.userProfile.deleteAccountWarning")}
+            </span>
           </div>
-          <div className="flex items-center justify-end gap-2 mt-2">
-            <Button
-              variant="ghost"
-              onClick={() => {
-                setShowDeleteConfirm(false);
-                setDeletePassword("");
-              }}
-            >
-              {t("newUi.sidebar.userProfile.cancel")}
-            </Button>
-            <Button
-              variant="outline"
-              className="border-destructive/40 text-destructive hover:bg-destructive/10 hover:text-destructive"
-              onClick={handleDeleteAccount}
-              disabled={deleteLoading || !deletePassword.trim()}
-            >
-              <Trash2 className="size-3.5" />
-              {deleteLoading
-                ? t("newUi.sidebar.userProfile.deleting")
-                : t("newUi.sidebar.userProfile.deleteAccount")}
-            </Button>
+          <div className="flex flex-col gap-1.5">
+            <label className="text-xs font-semibold uppercase tracking-widest text-muted-foreground">
+              {t("newUi.sidebar.userProfile.confirmPasswordLabel")}
+            </label>
+            <Input
+              type="password"
+              placeholder={t(
+                "newUi.sidebar.userProfile.confirmPasswordDeletePlaceholder",
+              )}
+              value={deletePassword}
+              onChange={(e) => setDeletePassword(e.target.value)}
+              onKeyDown={(e) => e.key === "Enter" && handleDeleteAccount()}
+            />
           </div>
-        </DialogContent>
-      </Dialog>
-      <KeybindingsDialog
-        open={keybindingsDialogOpen}
-        onOpenChange={setKeybindingsDialogOpen}
-      />
+        </div>
+        <div className="flex items-center justify-end gap-2 mt-2">
+          <Button
+            variant="ghost"
+            onClick={() => {
+              setShowDeleteConfirm(false);
+              setDeletePassword("");
+            }}
+          >
+            {t("newUi.sidebar.userProfile.cancel")}
+          </Button>
+          <Button
+            variant="outline"
+            className="border-destructive/40 text-destructive hover:bg-destructive/10 hover:text-destructive"
+            onClick={handleDeleteAccount}
+            disabled={deleteLoading || !deletePassword.trim()}
+          >
+            <Trash2 className="size-3.5" />
+            {deleteLoading
+              ? t("newUi.sidebar.userProfile.deleting")
+              : t("newUi.sidebar.userProfile.deleteAccount")}
+          </Button>
+        </div>
+      </InlineView>
     </div>
   );
 }
diff --git a/src/ui/sidebar/credential-tree/CredentialItem/CredentialItem.tsx b/src/ui/sidebar/credential-tree/CredentialItem/CredentialItem.tsx
index 978959e74..8d1c3c8a2 100644
--- a/src/ui/sidebar/credential-tree/CredentialItem/CredentialItem.tsx
+++ b/src/ui/sidebar/credential-tree/CredentialItem/CredentialItem.tsx
@@ -15,9 +15,11 @@ import { toast } from "sonner";
 import { copyToClipboard } from "@/lib/clipboard";
 import { ComponentSlot } from "@/shell/ActionSlot";
 import type { Credential } from "@/types/ui-types";
-import type {
-  CredentialDensity,
-  CredentialTrayTrigger,
+import {
+  defaultCredentialRowFields,
+  type CredentialDensity,
+  type CredentialRowFields,
+  type CredentialTrayTrigger,
 } from "@/types/credential-sidebar-preferences";
 
 /**
@@ -40,6 +42,8 @@ const CREDENTIAL_ITEM_DENSITY_TOKENS = {
   },
 } as const;
 
+const DEFAULT_ROW_FIELDS = defaultCredentialRowFields();
+
 export function CredentialItem({
   cred,
   usedByCount = 0,
@@ -53,6 +57,7 @@ export function CredentialItem({
   density = "comfortable",
   trayTrigger = "hover",
   showTags = true,
+  rowFields = DEFAULT_ROW_FIELDS,
   arrangeMode = false,
   isDragging = false,
   onReorderDrop,
@@ -80,6 +85,7 @@ export function CredentialItem({
   density?: CredentialDensity;
   trayTrigger?: CredentialTrayTrigger;
   showTags?: boolean;
+  rowFields?: CredentialRowFields;
   /** When true (rearranging unlocked), the row can be dragged to reorder or
    * onto a folder header to move. */
   arrangeMode?: boolean;
@@ -103,6 +109,8 @@ export function CredentialItem({
   const isKey = cred.type === "key";
   const tokens = CREDENTIAL_ITEM_DENSITY_TOKENS[density];
   const isCompact = density === "compact";
+  const showUsername = rowFields.showUsername && !!cred.username;
+  const showUsage = rowFields.showUsageCount && usedByCount > 0;
   const isTouchOnly =
     typeof window !== "undefined" && window.matchMedia("(hover: none)").matches;
 
@@ -281,7 +289,7 @@ export function CredentialItem({
             className={`${tokens.nameTextSize} font-semibold truncate text-foreground leading-none tracking-tight`}
           >
             {cred.name}
-            {cred.isShared && (
+            {rowFields.showSharedBadge && cred.isShared && (
               <span
                 className="ml-1 inline-flex items-center gap-0.5 text-[9px] uppercase text-accent-brand/80"
                 title={t("credentials.sharedBy", {
@@ -293,21 +301,27 @@ export function CredentialItem({
               </span>
             )}
           </span>
-          <span
-            className={`text-[9px] px-1 py-px font-bold border leading-none shrink-0 ${isKey ? "border-accent-brand/30 text-accent-brand" : "border-border/60 text-muted-foreground/60"}`}
-          >
-            {isKey ? t("credentials.keyBadge") : t("credentials.passwordBadge")}
-          </span>
+          {rowFields.showTypeBadge && (
+            <span
+              className={`text-[9px] px-1 py-px font-bold border leading-none shrink-0 ${isKey ? "border-accent-brand/30 text-accent-brand" : "border-border/60 text-muted-foreground/60"}`}
+            >
+              {isKey
+                ? t("credentials.keyBadge")
+                : t("credentials.passwordBadge")}
+            </span>
+          )}
           <ComponentSlot
             slotId="credentials.badges"
             props={{ credentialId: Number(cred.id) }}
           />
-          {cred.pin && (
+          {rowFields.showPinIcon && cred.pin && (
             <Pin className="size-2.5 text-accent-brand/50 shrink-0" />
           )}
           {!shouldUseClickTray && !actionsOnly && (
             <span className="text-[11px] text-muted-foreground/45 truncate leading-none ml-auto shrink-0 group-hover:hidden">
-              {usedByCount > 0 ? `${usedByCount}h` : ""}
+              {rowFields.showUsageCount && usedByCount > 0
+                ? `${usedByCount}h`
+                : ""}
             </span>
           )}
           {(shouldUseClickTray || actionsOnly) && (
@@ -331,12 +345,12 @@ export function CredentialItem({
         </div>
 
         {/* Username row */}
-        {tokens.showUsernameRow && (cred.username || usedByCount > 0) && (
+        {tokens.showUsernameRow && (showUsername || showUsage) && (
           <span className="text-[11px] text-muted-foreground/60 truncate leading-none font-mono">
-            {cred.username}
-            {usedByCount > 0 && (
+            {showUsername && cred.username}
+            {showUsage && (
               <span
-                className={`text-muted-foreground/40${cred.username ? " ml-2" : ""}`}
+                className={`text-muted-foreground/40${showUsername ? " ml-2" : ""}`}
               >
                 {usedByCount}h
               </span>
diff --git a/src/ui/sidebar/credential-tree/CredentialSidebarTree.tsx b/src/ui/sidebar/credential-tree/CredentialSidebarTree.tsx
index 26535552a..fe48928d1 100644
--- a/src/ui/sidebar/credential-tree/CredentialSidebarTree.tsx
+++ b/src/ui/sidebar/credential-tree/CredentialSidebarTree.tsx
@@ -15,6 +15,7 @@ import { ReorderIndicator } from "@/sidebar/ReorderIndicator";
 import type { Credential } from "@/types/ui-types";
 import type {
   CredentialDensity,
+  CredentialRowFields,
   CredentialTrayTrigger,
 } from "@/types/credential-sidebar-preferences";
 import { CredentialItem } from "./CredentialItem/CredentialItem";
@@ -41,6 +42,7 @@ export function CredentialSidebarTree({
   density = "comfortable",
   trayTrigger = "hover",
   showTags = true,
+  rowFields,
   editingFolderName,
   editingFolderValue,
   onEditingFolderNameChange,
@@ -63,6 +65,7 @@ export function CredentialSidebarTree({
   density?: CredentialDensity;
   trayTrigger?: CredentialTrayTrigger;
   showTags?: boolean;
+  rowFields?: CredentialRowFields;
   editingFolderName: string | null;
   editingFolderValue: string;
   onEditingFolderNameChange: (name: string | null) => void;
@@ -165,6 +168,11 @@ export function CredentialSidebarTree({
         isOpen,
         showTags,
         tagCount: row.item.tags?.length ?? 0,
+        hasDetailRow:
+          !rowFields ||
+          (rowFields.showUsername && !!row.item.username) ||
+          (rowFields.showUsageCount &&
+            (usedByCounts?.get(row.item.id) ?? 0) > 0),
       });
     },
     [
@@ -176,6 +184,8 @@ export function CredentialSidebarTree({
       actionsOnly,
       density,
       showTags,
+      rowFields,
+      usedByCounts,
     ],
   );
 
@@ -223,6 +233,7 @@ export function CredentialSidebarTree({
     density,
     trayTrigger,
     showTags,
+    rowFields,
   ]);
 
   function toggleFolder(name: string) {
@@ -422,6 +433,7 @@ export function CredentialSidebarTree({
                       density={density}
                       trayTrigger={trayTrigger}
                       showTags={showTags}
+                      rowFields={rowFields}
                       arrangeMode={arrangeMode}
                       isDragging={draggedReorderKey === `cred:${item.id}`}
                       onReorderDrop={(position) =>
diff --git a/src/ui/sidebar/credential-tree/credential-row-height.ts b/src/ui/sidebar/credential-tree/credential-row-height.ts
index 53b70cc17..e9c7c8abf 100644
--- a/src/ui/sidebar/credential-tree/credential-row-height.ts
+++ b/src/ui/sidebar/credential-tree/credential-row-height.ts
@@ -10,6 +10,7 @@ const HEIGHTS = {
     alwaysKey: 100.25,
     alwaysPassword: 74,
     tags: 18.5,
+    detail: 15,
   },
   compact: {
     base: 23,
@@ -20,6 +21,7 @@ const HEIGHTS = {
     alwaysKey: 74.75,
     alwaysPassword: 52,
     tags: 12.5,
+    detail: 0,
   },
 } as const;
 
@@ -31,6 +33,7 @@ export function getCredentialRowHeight({
   isOpen,
   showTags,
   tagCount,
+  hasDetailRow = true,
 }: {
   density: CredentialDensity;
   isKey: boolean;
@@ -39,6 +42,8 @@ export function getCredentialRowHeight({
   isOpen: boolean;
   showTags: boolean;
   tagCount: number;
+  /** False when the username and usage line has nothing to show. */
+  hasDetailRow?: boolean;
 }): number {
   const heights = HEIGHTS[density];
   let height: number = heights.base;
@@ -51,5 +56,9 @@ export function getCredentialRowHeight({
     height = isKey ? heights.actionsOnlyKey : heights.actionsOnlyPassword;
   }
 
-  return height + (showTags && tagCount > 0 ? heights.tags : 0);
+  return (
+    height +
+    (showTags && tagCount > 0 ? heights.tags : 0) -
+    (hasDetailRow ? 0 : heights.detail)
+  );
 }
diff --git a/src/ui/sidebar/hidden-rail-tabs.ts b/src/ui/sidebar/hidden-rail-tabs.ts
index f3defa982..f24934166 100644
--- a/src/ui/sidebar/hidden-rail-tabs.ts
+++ b/src/ui/sidebar/hidden-rail-tabs.ts
@@ -1,3 +1,8 @@
+import { useEffect, useState } from "react";
+import { getUserPreferences, saveUserPreferences } from "@/main-axios";
+
+export const HIDDEN_RAIL_TABS_EVENT = "hiddenRailTabsChanged";
+
 export function readHiddenRailTabs(): Set<string> {
   try {
     const raw = localStorage.getItem("hiddenRailTabs");
@@ -8,3 +13,47 @@ export function readHiddenRailTabs(): Set<string> {
     return new Set();
   }
 }
+
+/**
+ * The one writer for hidden rail items: the rail's restore list, the
+ * Navigation toggles in settings and presets all go through here, so they
+ * never disagree. Saved to the account when settings sync to the cloud.
+ */
+export async function writeHiddenRailTabs(
+  next: Iterable<string>,
+): Promise<void> {
+  const serialized = JSON.stringify([...next]);
+  try {
+    localStorage.setItem("hiddenRailTabs", serialized);
+  } catch {
+    // A private window refuses the write; the change still applies this session.
+  }
+  window.dispatchEvent(new Event(HIDDEN_RAIL_TABS_EVENT));
+  try {
+    const prefs = await getUserPreferences();
+    if (prefs?.storageMode === "cloud") {
+      await saveUserPreferences({ hiddenRailTabs: serialized });
+    }
+  } catch {
+    // Offline; the local copy is already updated.
+  }
+}
+
+/** Hides one item if it is shown, shows it if hidden. */
+export function toggleHiddenRailTab(id: string): Promise<void> {
+  const hidden = readHiddenRailTabs();
+  if (hidden.has(id)) hidden.delete(id);
+  else hidden.add(id);
+  return writeHiddenRailTabs(hidden);
+}
+
+/** The hidden rail items, kept current as anything changes them. */
+export function useHiddenRailTabs(): Set<string> {
+  const [hidden, setHidden] = useState(readHiddenRailTabs);
+  useEffect(() => {
+    const handler = () => setHidden(readHiddenRailTabs());
+    window.addEventListener(HIDDEN_RAIL_TABS_EVENT, handler);
+    return () => window.removeEventListener(HIDDEN_RAIL_TABS_EVENT, handler);
+  }, []);
+  return hidden;
+}
diff --git a/src/ui/sidebar/host-contributions.ts b/src/ui/sidebar/host-contributions.ts
index 19dc0bc13..40086d4e6 100644
--- a/src/ui/sidebar/host-contributions.ts
+++ b/src/ui/sidebar/host-contributions.ts
@@ -61,6 +61,11 @@ const menuItems = createRegistry<HostContextMenuItemDef>(byOrderThenId);
 
 export const registerHostAction = actions.register;
 export const useHostActions = actions.useList;
+
+/** Plugin actions sort by order; connect actions default to the end. */
+export function actionOrder(action: HostActionDef): number {
+  return action.order ?? (action.kind === "connect" ? 100 : 50);
+}
 export const listHostActions = actions.list;
 export const registerHostBadge = badges.register;
 export const useHostBadges = badges.useList;
diff --git a/src/ui/sidebar/host-defaults/HostDefaultsEditorView.tsx b/src/ui/sidebar/host-defaults/HostDefaultsEditorView.tsx
index 0994c5111..302671365 100644
--- a/src/ui/sidebar/host-defaults/HostDefaultsEditorView.tsx
+++ b/src/ui/sidebar/host-defaults/HostDefaultsEditorView.tsx
@@ -1,16 +1,10 @@
-import { useMemo, useState } from "react";
+/* eslint-disable react-refresh/only-export-components */
+import { useMemo } from "react";
 import { useTranslation } from "react-i18next";
-import { ArrowLeft } from "lucide-react";
 import type { Host } from "@/types/ui-types";
 import type { HostDefaultsTarget } from "@/api/host-defaults-api";
 import { HostEditor } from "../HostEditor";
-import {
-  isSshGroupTab,
-  makeHostSshSubTabs,
-  makeHostTabs,
-  TabStrip,
-  useHostEditorSections,
-} from "../HostManagerTabs";
+import { useHostEditorSections } from "../HostManagerTabs";
 import { listHostProtocols, type HostProtocols } from "../host-protocols";
 
 export interface HostDefaultsEditorTarget extends HostDefaultsTarget {
@@ -18,8 +12,18 @@ export interface HostDefaultsEditorTarget extends HostDefaultsTarget {
   folderName?: string;
 }
 
+/** The title a level of defaults goes by. */
+export function hostDefaultsTitle(
+  target: HostDefaultsEditorTarget,
+  t: (key: string, options?: Record<string, unknown>) => string,
+): string {
+  if (target.level === "admin") return t("hostDefaults.titleAdmin");
+  if (target.level === "user") return t("hostDefaults.titleUser");
+  return t("hostDefaults.titleFolder", { name: target.folderName ?? "" });
+}
+
 /**
- * The host editor as a form for one level of host defaults: the same tabs
+ * The host editor as a form for one level of host defaults: the same sections
  * and fields as a new host, minus what only one host can have (its name,
  * address, secrets, folder).
  */
@@ -38,25 +42,14 @@ export function HostDefaultsEditorView({
 }) {
   const { t } = useTranslation();
   useHostEditorSections();
-  const [activeTab, setActiveTab] = useState("general");
 
-  // Every protocol counts as on, so every tab that has defaults shows.
+  // Every protocol counts as on, so every section that has defaults shows.
   const protocols = useMemo<HostProtocols>(() => {
     const all: HostProtocols = { enableSsh: true };
     for (const protocol of listHostProtocols()) all[protocol.settingKey] = true;
     return all;
   }, []);
-  const flags = protocols as unknown as Record<string, boolean>;
-  const tabs = makeHostTabs(t, flags, true);
-  const sshSubTabs = makeHostSshSubTabs(t, flags, true);
-  const inSshGroup = isSshGroupTab(activeTab);
 
-  const title =
-    target.level === "admin"
-      ? t("hostDefaults.titleAdmin")
-      : target.level === "user"
-        ? t("hostDefaults.titleUser")
-        : t("hostDefaults.titleFolder", { name: target.folderName ?? "" });
   const description =
     target.level === "admin"
       ? t("hostDefaults.descriptionAdmin")
@@ -65,61 +58,22 @@ export function HostDefaultsEditorView({
         : t("hostDefaults.descriptionFolder");
 
   return (
-    <div className="flex flex-col flex-1 min-h-0">
-      <div className="flex flex-col shrink-0 border-b border-border">
-        <button
-          onClick={onClose}
-          className="flex items-center gap-2 px-3 py-2 text-xs text-muted-foreground hover:text-foreground hover:bg-muted/40 transition-colors border-b border-border/50"
-        >
-          <ArrowLeft className="size-3.5 shrink-0" />
-          <span>{t("hosts.backToHosts")}</span>
-          <span
-            className="ml-auto font-semibold text-foreground truncate max-w-[220px]"
-            title={title}
-          >
-            {title}
-          </span>
-        </button>
-        <TabStrip
-          tabs={tabs}
-          activeTab={activeTab}
-          onTabChange={(id) => {
-            if (id === "ssh") {
-              if (!inSshGroup) setActiveTab("ssh");
-            } else {
-              setActiveTab(id);
-            }
-          }}
-          isActive={(id) => (id === "ssh" ? inSshGroup : activeTab === id)}
-        />
-        {inSshGroup && (
-          <TabStrip
-            tabs={sshSubTabs}
-            activeTab={activeTab}
-            onTabChange={setActiveTab}
-            variant="secondary"
-          />
-        )}
-      </div>
-      <div className="flex-1 min-h-0 overflow-y-auto px-3 py-3 flex flex-col gap-3">
-        <p className="text-xs text-muted-foreground border border-border bg-muted/20 px-3 py-2">
+    <HostEditor
+      key={`${target.level}:${target.folderId ?? ""}`}
+      host={null}
+      banner={
+        <p className="border border-border bg-muted/20 px-3 py-2 text-xs text-muted-foreground">
           {description}
         </p>
-        <HostEditor
-          key={`${target.level}:${target.folderId ?? ""}`}
-          host={null}
-          activeTab={activeTab}
-          onBack={onClose}
-          onSave={onClose}
-          protocols={protocols}
-          onProtocolChange={() => {}}
-          onDirtyChange={onDirtyChange}
-          onTabChange={setActiveTab}
-          hosts={hosts}
-          credentials={credentials}
-          defaultsTarget={target}
-        />
-      </div>
-    </div>
+      }
+      onBack={onClose}
+      onSave={onClose}
+      protocols={protocols}
+      onProtocolChange={() => {}}
+      onDirtyChange={onDirtyChange}
+      hosts={hosts}
+      credentials={credentials}
+      defaultsTarget={target}
+    />
   );
 }
diff --git a/src/ui/sidebar/host-defaults/catalog.ts b/src/ui/sidebar/host-defaults/catalog.ts
index 9730660b3..b4574f811 100644
--- a/src/ui/sidebar/host-defaults/catalog.ts
+++ b/src/ui/sidebar/host-defaults/catalog.ts
@@ -3,7 +3,7 @@
  * running plugin's host fields that can have one.
  */
 
-import { useEffect, useMemo, useState } from "react";
+import { useMemo } from "react";
 import {
   CORE_HOST_DEFAULTS,
   CORE_NAMESPACE,
@@ -11,10 +11,10 @@ import {
   type HostDefaultsLevel,
 } from "@/types/host-defaults";
 import {
-  getPlugins,
   type PluginSettingsField,
   type PluginSummary,
 } from "@/api/plugins-api";
+import { useInstalledPlugins } from "@/hooks/use-installed-plugins";
 
 export interface EditorDefaultKey {
   fullKey: string;
@@ -71,18 +71,7 @@ export const CORE_EDITOR_KEYS: EditorDefaultKey[] = CORE_HOST_DEFAULTS.map(
 
 /** Every key, by full key. Refreshed when the plugin list is. */
 export function useEditorDefaultKeys(): Map<string, EditorDefaultKey> {
-  const [plugins, setPlugins] = useState<PluginSummary[]>([]);
-  useEffect(() => {
-    let cancelled = false;
-    void getPlugins()
-      .then((loaded) => {
-        if (!cancelled) setPlugins(loaded);
-      })
-      .catch(() => {});
-    return () => {
-      cancelled = true;
-    };
-  }, []);
+  const plugins = useInstalledPlugins();
   return useMemo(
     () =>
       new Map(
diff --git a/src/ui/sidebar/rail-items.ts b/src/ui/sidebar/rail-items.ts
index 32e9edf44..1309da483 100644
--- a/src/ui/sidebar/rail-items.ts
+++ b/src/ui/sidebar/rail-items.ts
@@ -3,13 +3,15 @@ import {
   KeyRound,
   Plug,
   Server,
+  LibraryBig,
+  Puzzle,
   Settings,
-  User,
   Zap,
   type LucideIcon,
 } from "lucide-react";
 import { useMemo, useSyncExternalStore } from "react";
 import { usePermissions } from "@/hooks/use-permissions";
+import { useAreaPreferences } from "@/contexts/UiPreferencesContext";
 import { useSyncAttentionCount } from "@/hooks/use-sync-status";
 import { isElectron } from "@/lib/electron";
 import { createRegistry } from "@/lib/registry";
@@ -21,7 +23,7 @@ import { getTabType } from "@/shell/tab-registry";
  *
  * This used to be duplicated in four places -- AppRail's button array, the
  * visibility toggles in UserProfilePanel, AppShell's sidebar title map, and
- * MobileBottomBar's own primary/more lists -- which drifted: half the sidebar
+ * the mobile bar's own primary/more lists -- which drifted: half the sidebar
  * titles were hardcoded English, the alerts entry had no visibility toggle,
  * and the mobile bar ignored hidden tabs entirely. Everything now derives from
  * here, so adding a destination is a single edit.
@@ -38,6 +40,8 @@ export interface RailItemDef {
   alwaysVisible?: boolean;
   /** Renders a separator after this item in the rail. */
   separatorAfter?: boolean;
+  /** The rail band it sits in. Defaults to "tools". */
+  group?: RailGroup;
   /** Shown on the mobile bottom bar's primary row rather than its More menu. */
   mobilePrimary?: boolean;
   /**
@@ -72,13 +76,24 @@ export interface RailItemDef {
   useBadge?: () => number | null | undefined;
 }
 
+/** Things you keep, things you do, and the instance itself. */
+export type RailGroup = "objects" | "tools" | "system";
+export const RAIL_GROUP_ORDER: RailGroup[] = ["objects", "tools", "system"];
+
 export const RAIL_ITEMS: RailItemDef[] = [
-  { id: "hosts", icon: Server, labelKey: "nav.hosts", mobilePrimary: true },
+  {
+    id: "hosts",
+    icon: Server,
+    labelKey: "nav.hosts",
+    mobilePrimary: true,
+    group: "objects",
+  },
   {
     id: "credentials",
     icon: KeyRound,
     labelKey: "nav.credentials",
     separatorAfter: true,
+    group: "objects",
   },
   {
     id: "connections",
@@ -86,6 +101,7 @@ export const RAIL_ITEMS: RailItemDef[] = [
     labelKey: "nav.connections",
     separatorAfter: true,
     rightDockable: true,
+    group: "tools",
   },
   {
     id: "quick-connect",
@@ -93,6 +109,7 @@ export const RAIL_ITEMS: RailItemDef[] = [
     labelKey: "nav.quickConnect",
     separatorAfter: true,
     mobilePrimary: true,
+    group: "tools",
   },
   {
     id: "sync",
@@ -100,10 +117,30 @@ export const RAIL_ITEMS: RailItemDef[] = [
     labelKey: "nav.sync",
     electronOnly: true,
     placement: "footer",
+    group: "system",
     useBadge: useSyncAttentionCount,
   },
+  {
+    id: "plugins",
+    icon: Puzzle,
+    labelKey: "nav.plugins",
+    kind: "tab",
+    placement: "footer",
+    group: "system",
+    permission: "admin.plugins.manage",
+  },
 ];
 
+/** Main rail items split into their bands, in band order, empty bands left out. */
+export function groupRailItems(
+  items: RailItemDef[],
+): { group: RailGroup; items: RailItemDef[] }[] {
+  return RAIL_GROUP_ORDER.map((group) => ({
+    group,
+    items: items.filter((item) => (item.group ?? "tools") === group),
+  })).filter((band) => band.items.length > 0);
+}
+
 /**
  * Rail items registered by plugins at runtime. Reactive, because a plugin can
  * be enabled or disabled while the app is open and the rail, the mobile bar
@@ -197,19 +234,59 @@ export function useRailItems(): RailItemDef[] {
     railItemsSnapshot,
   );
   const { has, loaded } = usePermissions();
+  const { order } = useAreaPreferences("rail");
   return useMemo(
-    () => permittedRailItems(items, { has, loaded }),
-    [items, has, loaded],
+    () => applyRailOrder(permittedRailItems(items, { has, loaded }), order),
+    [items, has, loaded, order],
   );
 }
 
 /**
- * Destinations that live outside the rail's hideable list but still need a
- * title and a mobile entry.
+ * Items in the user's order. Listed ids come first in that order within the
+ * default sequence; unlisted ones keep their default place relative to it.
  */
+export function applyRailOrder(
+  items: RailItemDef[],
+  order: string[] | undefined,
+): RailItemDef[] {
+  if (!order || order.length === 0) return items;
+  const rank = new Map(order.map((id, index) => [id, index]));
+  const listed = items
+    .filter((item) => rank.has(item.id))
+    .sort((a, b) => rank.get(a.id)! - rank.get(b.id)!);
+  let next = 0;
+  return items.map((item) => (rank.has(item.id) ? listed[next++] : item));
+}
+
+/**
+ * The order after moving `id` to sit before `beforeId` (or to the end of its
+ * band when null), as a full list of the given items' ids.
+ */
+export function moveRailItem(
+  items: RailItemDef[],
+  id: string,
+  beforeId: string | null,
+): string[] {
+  const ids = items.map((item) => item.id).filter((other) => other !== id);
+  const at = beforeId ? ids.indexOf(beforeId) : -1;
+  if (at < 0) {
+    const group = items.find((item) => item.id === id)?.group ?? "tools";
+    const lastInBand = items
+      .map((item, index) => ({ item, index }))
+      .filter(({ item }) => item.id !== id && (item.group ?? "tools") === group)
+      .map(({ item }) => ids.indexOf(item.id))
+      .pop();
+    ids.splice(lastInBand === undefined ? ids.length : lastInBand + 1, 0, id);
+  } else {
+    ids.splice(at, 0, id);
+  }
+  return ids;
+}
+
+/** Places outside the rail that still need a title, like the Settings tab. */
 export const RAIL_UTILITY_ITEMS: RailItemDef[] = [
-  { id: "user-profile", icon: User, labelKey: "nav.userProfile" },
-  { id: "admin-settings", icon: Settings, labelKey: "nav.admin" },
+  { id: "settings", icon: Settings, labelKey: "nav.settings" },
+  { id: "host-manager", icon: LibraryBig, labelKey: "nav.manage" },
 ];
 
 /** Ids that may be opened in the right dock. */
diff --git a/src/ui/sidebar/tree/FolderItem/FolderActions.tsx b/src/ui/sidebar/tree/FolderItem/FolderActions.tsx
index 31fdb1226..34f7b9708 100644
--- a/src/ui/sidebar/tree/FolderItem/FolderActions.tsx
+++ b/src/ui/sidebar/tree/FolderItem/FolderActions.tsx
@@ -19,7 +19,7 @@ export function FolderActions({
   const actionButtonClass =
     "flex items-center justify-center size-6 text-muted-foreground/60 hover:text-foreground hover:bg-background/80 transition-colors";
   return (
-    <span className="flex items-center gap-0.5 ml-0.5 opacity-0 group-hover/folder:opacity-100 transition-opacity">
+    <span className="hidden items-center gap-0.5 ml-0.5 group-hover/folder:flex group-focus-within/folder:flex [@media(hover:none)]:flex">
       <button
         type="button"
         title={t("hosts.openAllSessions")}
diff --git a/src/ui/sidebar/tree/FolderItem/FolderItem.tsx b/src/ui/sidebar/tree/FolderItem/FolderItem.tsx
index 6ebad7dd4..5e7bfe3eb 100644
--- a/src/ui/sidebar/tree/FolderItem/FolderItem.tsx
+++ b/src/ui/sidebar/tree/FolderItem/FolderItem.tsx
@@ -168,7 +168,18 @@ export function FolderItem({
       style={depth > 0 ? { paddingLeft: rem(depth * 12) } : undefined}
     >
       <div className="relative">
-        <button
+        {/* A div, not a button: the folder actions inside are buttons. */}
+        <div
+          role="button"
+          tabIndex={0}
+          aria-expanded={isOpen}
+          onKeyDown={(e) => {
+            if (e.target !== e.currentTarget) return;
+            if (e.key === "Enter" || e.key === " ") {
+              e.preventDefault();
+              if (!query) onToggleFolder(folderPath);
+            }
+          }}
           draggable={canDragFolder}
           onDragStart={(e) => {
             if (!canDragFolder) return;
@@ -294,7 +305,7 @@ export function FolderItem({
               )}
             </>
           }
-        </button>
+        </div>
       </div>
       {!flat && isOpen && (
         <div className="border-l border-border/50 ml-[27px]">
diff --git a/src/ui/sidebar/tree/HostItem/HostItem.tsx b/src/ui/sidebar/tree/HostItem/HostItem.tsx
index 293be1774..f23c2f2f5 100644
--- a/src/ui/sidebar/tree/HostItem/HostItem.tsx
+++ b/src/ui/sidebar/tree/HostItem/HostItem.tsx
@@ -1,4 +1,6 @@
 /* eslint-disable react-refresh/only-export-components */
+import { actionOrder } from "@/sidebar/host-contributions";
+import { showsInBar, useBarActions } from "@/sidebar/tree/host-bar-actions";
 import { rem } from "@/lib/rem";
 import { enabledHostProtocols } from "@/sidebar/host-protocols";
 import { useEffect, useRef, useState, type MouseEvent } from "react";
@@ -39,10 +41,12 @@ import {
 import { toast } from "sonner";
 import { getHostPassword } from "@/main-axios";
 import type { Host, TabType } from "@/types/ui-types";
-import type {
-  HostDensity,
-  HostClickBehavior,
-  HostTrayTrigger,
+import {
+  defaultHostRowFields,
+  type HostDensity,
+  type HostClickBehavior,
+  type HostRowFields,
+  type HostTrayTrigger,
 } from "@/types/host-sidebar-preferences";
 import { copyToClipboard } from "@/lib/clipboard";
 import {
@@ -116,11 +120,6 @@ export function buildStatusTooltip(
   return `${protocols.join(", ")}: ${statusLabel}`;
 }
 
-/** Plugin actions sort by order; connect actions default to the end. */
-function actionOrder(action: HostActionDef): number {
-  return action.order ?? (action.kind === "connect" ? 100 : 50);
-}
-
 async function writeClipboardText(value: string): Promise<void> {
   await copyToClipboard(value);
 }
@@ -146,6 +145,26 @@ function canCopyHostSudoPassword(host: Host): boolean {
  */
 const DOUBLE_CLICK_WINDOW_MS = 250;
 
+const DEFAULT_ROW_FIELDS = defaultHostRowFields();
+
+export function formatHostAddress(
+  host: Pick<Host, "username" | "ip" | "port"> &
+    Partial<Pick<Host, "enableSsh" | "pluginSettings" | "protocolAuth">>,
+  fields: Pick<HostRowFields, "showUsername" | "showPort">,
+): string {
+  const protocol =
+    host.enableSsh === false ? enabledHostProtocols(host)[0] : undefined;
+  const username =
+    host.enableSsh === false
+      ? protocol
+        ? host.protocolAuth?.[protocol.id]?.username
+        : undefined
+      : host.username;
+  const user = fields.showUsername && username ? `${username}@` : "";
+  const port = fields.showPort && host.port ? `:${host.port}` : "";
+  return `${user}${host.ip}${port}`;
+}
+
 const HOST_ITEM_DENSITY_TOKENS = {
   comfortable: {
     rowPadding: "pl-[8.75px] pr-[7px] py-[7px]",
@@ -191,6 +210,7 @@ export function HostItem({
   hostClickBehavior = "newTab",
   showResourceBars = true,
   showStatusStripes = true,
+  rowFields = DEFAULT_ROW_FIELDS,
   rowActions = "full",
   arrangeMode = false,
   isDragging = false,
@@ -242,6 +262,7 @@ export function HostItem({
   showResourceBars?: boolean;
   /** Preset-driven: hides the per-row status color stripe. */
   showStatusStripes?: boolean;
+  rowFields?: HostRowFields;
   /** "essential" trims the row's management actions to the common few. */
   rowActions?: "essential" | "full";
   /** When true (rearranging unlocked), the row can be dragged: its edges
@@ -275,6 +296,7 @@ export function HostItem({
   const allowDelete = canDeleteHost(host);
   const allHostActions = useHostActions();
   const pluginActions = hostActionsFor(allHostActions, host);
+  const barActions = useBarActions();
   const badges = hostBadgesFor(useHostBadges(), host);
   const pluginMenuItems = hostMenuItemsFor(useHostContextMenuItems(), host);
   const splitTargets = useSplitTargets();
@@ -322,6 +344,7 @@ export function HostItem({
   const densityTokens = HOST_ITEM_DENSITY_TOKENS[density];
   const tokens = {
     ...densityTokens,
+    showAddressRow: densityTokens.showAddressRow && rowFields.showAddress,
     showTagsRow: densityTokens.showTagsRow && showTags,
     showResourceRow: densityTokens.showResourceRow && showResourceBars,
   };
@@ -421,7 +444,7 @@ export function HostItem({
         icon: action.icon as typeof Terminal,
         label: action.label?.(host) ?? t(action.titleKey),
         tabType: action.tabType,
-        tray: action.tray !== false,
+        tray: showsInBar(barActions, action),
         items:
           items && items.length > 1
             ? items.map((item) => ({
@@ -773,7 +796,12 @@ export function HostItem({
           <DropdownMenuItem
             onClick={(e) => {
               e.stopPropagation();
-              writeClipboardText(`${host.username}@${host.ip}`);
+              writeClipboardText(
+                formatHostAddress(host, {
+                  showUsername: true,
+                  showPort: false,
+                }),
+              );
               toast.success(t("hosts.copiedToClipboard"));
             }}
           >
@@ -1125,14 +1153,15 @@ export function HostItem({
               </TooltipContent>
             </Tooltip>
           </TooltipProvider>
-          {host.pin && (
+          {rowFields.showPinIcon && host.pin && (
             <Pin className="size-2.5 text-accent-brand/50 shrink-0" />
           )}
-          {badges.map((badge) => {
-            const Badge = badge.component;
-            return <Badge key={badge.id} host={host} />;
-          })}
-          {host.isShared && (
+          {rowFields.showBadges &&
+            badges.map((badge) => {
+              const Badge = badge.component;
+              return <Badge key={badge.id} host={host} />;
+            })}
+          {rowFields.showSharedBadge && host.isShared && (
             <TooltipProvider delayDuration={300}>
               <Tooltip>
                 <TooltipTrigger asChild>
@@ -1168,12 +1197,12 @@ export function HostItem({
               +{host.tags!.length - 2}
             </span>
           )}
-          {isCompact && (
+          {isCompact && rowFields.showAddress && (
             <span
               className="text-[11px] text-muted-foreground/70 truncate leading-none ml-auto max-w-[50%] shrink-0"
               title={host.ip}
             >
-              {host.ip}
+              {formatHostAddress(host, { ...rowFields, showUsername: false })}
             </span>
           )}
           {isCompact && !selectionMode && (
@@ -1213,10 +1242,9 @@ export function HostItem({
           )}
         </div>
 
-        {/* Address — always visible in comfortable density */}
         {tokens.showAddressRow && (
           <span className="text-[11px] text-muted-foreground/60 truncate leading-none font-mono">
-            {host.username}@{host.ip}
+            {formatHostAddress(host, rowFields)}
           </span>
         )}
 
@@ -1254,7 +1282,7 @@ export function HostItem({
             </div>
           )}
 
-        {/* Action tray — slides open on hover (default) or via chevron in click-tray mode */}
+        {/* Action tray, slides open on hover (default) or via chevron in click-tray mode */}
         {!isCompact && (
           <div className={trayVisibilityClass}>
             {tokens.showResourceRow &&
@@ -1267,7 +1295,7 @@ export function HostItem({
                       <Cpu className="size-2.5 shrink-0 text-muted-foreground/40" />
                       <div className="w-9 h-1 bg-muted-foreground/15 rounded-full overflow-hidden">
                         <div
-                          className={`motion-meter h-full rounded-full ${host.cpu > 80 ? "bg-red-400" : host.cpu > 50 ? "bg-yellow-400" : "bg-accent-brand"}`}
+                          className={`motion-meter h-full rounded-full ${host.cpu > 80 ? "bg-red-400" : host.cpu > 50 ? "bg-warning" : "bg-accent-brand"}`}
                           style={{ width: `${host.cpu}%` }}
                         />
                       </div>
@@ -1281,7 +1309,7 @@ export function HostItem({
                       <MemoryStick className="size-2.5 shrink-0 text-muted-foreground/40" />
                       <div className="w-9 h-1 bg-muted-foreground/15 rounded-full overflow-hidden">
                         <div
-                          className={`motion-meter h-full rounded-full ${host.ram > 80 ? "bg-red-400" : host.ram > 60 ? "bg-yellow-400" : "bg-accent-brand/60"}`}
+                          className={`motion-meter h-full rounded-full ${host.ram > 80 ? "bg-red-400" : host.ram > 60 ? "bg-warning" : "bg-accent-brand/60"}`}
                           style={{ width: `${host.ram}%` }}
                         />
                       </div>
diff --git a/src/ui/sidebar/tree/SidebarTree.tsx b/src/ui/sidebar/tree/SidebarTree.tsx
index 96a6b8031..8d68ff952 100644
--- a/src/ui/sidebar/tree/SidebarTree.tsx
+++ b/src/ui/sidebar/tree/SidebarTree.tsx
@@ -1,3 +1,4 @@
+import { useConfirm } from "@/components/surface/surface-scope";
 import { useHostSpeedSearch } from "./hooks/useHostSpeedSearch";
 import {
   useCallback,
@@ -49,6 +50,7 @@ import type { SSHHostData } from "@/types/index";
 import type {
   HostDensity,
   HostClickBehavior,
+  HostRowFields,
   HostTrayTrigger,
 } from "@/types/host-sidebar-preferences";
 import { resolveHostTabType } from "@/lib/host-connection-tabs";
@@ -92,6 +94,7 @@ export function SidebarTree({
   openOnDoubleClick = false,
   showFolderPaths = true,
   hostClickBehavior = "newTab",
+  rowFields,
 }: {
   children: (Host | HostFolder)[];
   onOpenTab: (
@@ -119,6 +122,7 @@ export function SidebarTree({
   /** When false, nested folders hide the parent-path breadcrumb before their name. */
   showFolderPaths?: boolean;
   hostClickBehavior?: HostClickBehavior;
+  rowFields?: HostRowFields;
 }) {
   const { t } = useTranslation();
   const hostSettingPlugins = usePluginHostSections();
@@ -179,10 +183,15 @@ export function SidebarTree({
   useEffect(() => {
     if (!selectionMode) setSelectedHostIds(new Set());
   }, [selectionMode, setSelectedHostIds]);
-  const [confirmDialog, setConfirmDialog] = useState<{
-    message: string;
-    onConfirm: () => Promise<void> | void;
-  } | null>(null);
+  const confirm = useConfirm();
+  const setConfirmDialog = (
+    request: { message: string; onConfirm: () => Promise<void> | void } | null,
+  ) => {
+    if (!request) return;
+    void confirm({ title: request.message }).then((ok) => {
+      if (ok) void request.onConfirm();
+    });
+  };
   const { draggedHostIds, setDraggedHostIds, rootDragOver, setRootDragOver } =
     useSidebarDragState();
   const [folderDialog, setFolderDialog] = useState<{
@@ -608,7 +617,7 @@ export function SidebarTree({
         pin: host.pin ?? false,
         notes: host.notes,
         // Key material is never sent to the frontend, so a cloned key-auth
-        // host would have authType "key" with no key — unusable. Reset to
+        // host would have authType "key" with no key, which is unusable. Reset to
         // password so the clone is in a connectable (editable) state.
         authType: host.authType === "key" ? "password" : host.authType,
         password: host.authType === "key" ? null : (host.password ?? null),
@@ -747,6 +756,8 @@ export function SidebarTree({
   // Tag pills are a separate flex row. Comfortable density adds the row plus
   // its gap; compact density pulls it upward by 2px but still needs a slot.
   const TAG_ROW_EXTRA = isCompactDensity ? 12.5 : 18.5;
+  // The username@ip line plus its gap.
+  const ADDRESS_ROW_SAVED = rowFields && !rowFields.showAddress ? 14.5 : 0;
   // showResourceBars:false simply drops RESOURCE_ROW_EXTRA from every row.
 
   const rowHeight = useCallback(
@@ -755,7 +766,7 @@ export function SidebarTree({
       if (!row) return FOLDER_ROW_HEIGHT;
       if (isFolder(row.item)) return FOLDER_ROW_HEIGHT;
       if (isCompactDensity) return 29;
-      const tagExtra = showTags && row.item.tags?.length ? TAG_ROW_EXTRA : 0;
+      const tagRowExtra = showTags && row.item.tags?.length ? TAG_ROW_EXTRA : 0;
       // The resource bars only render for an online host that reported CPU/RAM.
       // Reserving their height unconditionally left a gap under every offline
       // row. measureElement corrects any drift from live status this estimate
@@ -767,6 +778,7 @@ export function SidebarTree({
       )
         ? RESOURCE_ROW_EXTRA
         : 0;
+      const tagExtra = tagRowExtra - ADDRESS_ROW_SAVED;
       if (alwaysShowActions)
         return ALWAYS_ROW_HEIGHT + tagExtra + resourceExtra;
       const toggledOpen =
@@ -812,6 +824,7 @@ export function SidebarTree({
       ACTIONS_ONLY_ROW_HEIGHT,
       ACTIONS_ONLY_OPEN_ROW_HEIGHT,
       TAG_ROW_EXTRA,
+      ADDRESS_ROW_SAVED,
       showResourceBars,
       isCompactDensity,
     ],
@@ -881,7 +894,14 @@ export function SidebarTree({
     parentRef.current
       ?.querySelectorAll<HTMLElement>("[data-index]")
       .forEach((element) => virtualizer.measureElement(element));
-  }, [virtualizer, density, trayTrigger, showTags, showResourceBars]);
+  }, [
+    virtualizer,
+    density,
+    trayTrigger,
+    showTags,
+    showResourceBars,
+    ADDRESS_ROW_SAVED,
+  ]);
 
   useEffect(() => {
     if (speedSearch.open) speedSearch.inputRef.current?.focus();
@@ -1162,6 +1182,7 @@ export function SidebarTree({
                       hostClickBehavior={hostClickBehavior}
                       showResourceBars={showResourceBars}
                       showStatusStripes={showStatusStripes}
+                      rowFields={rowFields}
                       rowActions={rowActions}
                       arrangeMode={arrangeMode}
                       isDragging={draggedReorderKey === `host:${item.id}`}
@@ -1437,32 +1458,6 @@ export function SidebarTree({
         </div>
       )}
 
-      {/* Confirm dialog */}
-      {confirmDialog && (
-        <div className="absolute inset-0 z-50 flex items-center justify-center bg-background/80 backdrop-blur-sm p-4">
-          <div className="bg-popover border border-border shadow-xl w-full max-w-xs flex flex-col gap-4 p-4">
-            <p className="text-sm text-foreground">{confirmDialog.message}</p>
-            <div className="flex justify-end gap-2">
-              <button
-                onClick={() => setConfirmDialog(null)}
-                className="px-3 py-1.5 text-xs border border-border text-muted-foreground hover:text-foreground hover:bg-muted rounded transition-colors"
-              >
-                {t("hosts.cancelBtn")}
-              </button>
-              <button
-                onClick={() => {
-                  confirmDialog.onConfirm();
-                  setConfirmDialog(null);
-                }}
-                className="px-3 py-1.5 text-xs bg-destructive text-destructive-foreground hover:bg-destructive/90 rounded transition-colors"
-              >
-                {t("hosts.deleteConfirmBtn")}
-              </button>
-            </div>
-          </div>
-        </div>
-      )}
-
       <FolderMetadataDialog
         open={folderDialog !== null}
         mode={folderDialog?.mode ?? "create"}
diff --git a/src/ui/sidebar/tree/host-bar-actions.ts b/src/ui/sidebar/tree/host-bar-actions.ts
new file mode 100644
index 000000000..cc48b0ba6
--- /dev/null
+++ b/src/ui/sidebar/tree/host-bar-actions.ts
@@ -0,0 +1,39 @@
+import { useSyncExternalStore } from "react";
+
+/**
+ * Which host actions the user put in or took out of the row's connect bar.
+ * The hosts panel owns the preference and mirrors it here, so every row can
+ * read it without its own fetch.
+ */
+let current: Record<string, boolean> = {};
+const listeners = new Set<() => void>();
+
+export function setBarActions(next: Record<string, boolean>): void {
+  const same =
+    Object.keys(next).length === Object.keys(current).length &&
+    Object.entries(next).every(([id, value]) => current[id] === value);
+  if (same) return;
+  current = next;
+  for (const listener of listeners) listener();
+}
+
+function subscribe(listener: () => void): () => void {
+  listeners.add(listener);
+  return () => listeners.delete(listener);
+}
+
+export function useBarActions(): Record<string, boolean> {
+  return useSyncExternalStore(
+    subscribe,
+    () => current,
+    () => current,
+  );
+}
+
+/** Whether an action shows in the bar: the user's choice, else its own. */
+export function showsInBar(
+  barActions: Record<string, boolean>,
+  action: { id: string; tray?: boolean },
+): boolean {
+  return barActions[action.id] ?? action.tray !== false;
+}
diff --git a/src/ui/ssh/dialogs/BrowserSignInDialog.tsx b/src/ui/ssh/dialogs/BrowserSignInDialog.tsx
index 280bdb97a..ff623fe72 100644
--- a/src/ui/ssh/dialogs/BrowserSignInDialog.tsx
+++ b/src/ui/ssh/dialogs/BrowserSignInDialog.tsx
@@ -1,6 +1,10 @@
 import { useState } from "react";
-import { Button } from "@/components/button.tsx";
 import { Input } from "@/components/input.tsx";
+import { PanePrompt } from "@/components/surface/surface-scope";
+import {
+  PROMPT_BUTTON,
+  PROMPT_PRIMARY_BUTTON,
+} from "@/components/surface/prompt-styles";
 import { Shield, Copy, ExternalLink, Check } from "lucide-react";
 import { useTranslation } from "react-i18next";
 import { toast } from "sonner";
@@ -50,91 +54,76 @@ export function BrowserSignInDialog({
   };
 
   return (
-    <div className="absolute inset-0 flex items-center justify-center z-500 animate-in fade-in duration-200 overflow-y-auto">
-      <div
-        className="absolute inset-0 bg-canvas"
-        style={{ backgroundColor: backgroundColor || undefined }}
-      />
-      <div className="bg-card border border-border w-full max-w-md mx-4 my-4 relative z-10 animate-in fade-in zoom-in-95 duration-200">
-        <div className="p-4 border-b border-border">
-          <div className="flex items-center gap-2">
-            <Shield className="size-4 text-accent-brand" />
-            <h3 className="text-xs font-bold uppercase tracking-widest">
-              {t("terminal.browserSignInRequired", { provider: label })}
-            </h3>
-          </div>
-        </div>
-        <div className="p-4 flex flex-col gap-4">
-          {code && code !== "N/A" && (
-            <div className="flex flex-col gap-1.5">
-              <p className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                {t("terminal.browserSignInCode")}
-              </p>
-              <div className="border border-border bg-muted/10 p-4 text-center">
-                <div className="text-2xl font-mono font-bold tracking-wider text-accent-brand">
-                  {code}
-                </div>
-              </div>
-            </div>
-          )}
-
+    <PanePrompt
+      open
+      layer="connection"
+      backgroundColor={backgroundColor}
+      icon={<Shield className="size-4" />}
+      title={t("sshAuth.browserSignInRequired", { provider: label })}
+      className="max-w-md"
+    >
+      <div className="flex flex-col gap-3">
+        {code && code !== "N/A" && (
           <div className="flex flex-col gap-1.5">
             <p className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-              {t("terminal.browserSignInUrl")}
+              {t("sshAuth.browserSignInCode")}
             </p>
-            <div className="flex gap-2">
-              <Input
-                type="text"
-                value={url}
-                readOnly
-                className="rounded-none bg-muted/50 border-border text-xs font-mono flex-1"
-              />
-              <Button
-                type="button"
-                variant="outline"
-                size="icon"
-                onClick={handleCopyUrl}
-                className="rounded-none border-border shrink-0"
-                title={t("common.copy")}
-              >
-                {copied ? (
-                  <Check className="size-4 text-accent-brand" />
-                ) : (
-                  <Copy className="size-4" />
-                )}
-              </Button>
+            <div className="border border-border bg-muted/10 p-4 text-center">
+              <div className="text-2xl font-mono font-bold tracking-wider text-accent-brand">
+                {code}
+              </div>
             </div>
           </div>
+        )}
 
-          <div className="flex flex-wrap justify-end gap-2 pt-1">
-            <Button
+        <div className="flex flex-col gap-1.5">
+          <p className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
+            {t("sshAuth.browserSignInUrl")}
+          </p>
+          <div className="flex gap-2">
+            <Input
+              type="text"
+              value={url}
+              readOnly
+              className="rounded-none bg-muted/50 border-border text-xs font-mono flex-1"
+            />
+            <button
               type="button"
-              variant="ghost"
-              onClick={onCancel}
-              className="rounded-none text-[10px] font-bold uppercase tracking-widest sm:mr-auto"
+              onClick={handleCopyUrl}
+              className={`${PROMPT_BUTTON} h-9 w-9 shrink-0 px-0`}
+              title={t("common.copy")}
+              aria-label={t("common.copy")}
             >
-              {t("common.cancel")}
-            </Button>
-            <Button
-              type="button"
-              variant="outline"
-              onClick={onContinue}
-              className="rounded-none text-[10px] font-bold uppercase tracking-widest"
-            >
-              {t("terminal.browserSignInContinue")}
-            </Button>
-            <Button
-              type="button"
-              variant="outline"
-              onClick={onOpenUrl}
-              className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 rounded-none text-[10px] font-bold uppercase tracking-widest flex items-center gap-1.5"
-            >
-              <ExternalLink className="size-3.5" />
-              {t("terminal.browserSignInOpen")}
-            </Button>
+              {copied ? (
+                <Check className="size-4 text-accent-brand" />
+              ) : (
+                <Copy className="size-4" />
+              )}
+            </button>
           </div>
         </div>
+
+        <div className="flex flex-wrap justify-end gap-2">
+          <button
+            type="button"
+            onClick={onCancel}
+            className={`${PROMPT_BUTTON} sm:mr-auto`}
+          >
+            {t("common.cancel")}
+          </button>
+          <button type="button" onClick={onContinue} className={PROMPT_BUTTON}>
+            {t("sshAuth.browserSignInContinue")}
+          </button>
+          <button
+            type="button"
+            onClick={onOpenUrl}
+            className={PROMPT_PRIMARY_BUTTON}
+          >
+            <ExternalLink className="size-3.5" />
+            {t("sshAuth.browserSignInOpen")}
+          </button>
+        </div>
       </div>
-    </div>
+    </PanePrompt>
   );
 }
diff --git a/src/ui/ssh/dialogs/HostKeyVerificationDialog.tsx b/src/ui/ssh/dialogs/HostKeyVerificationDialog.tsx
index 7c10e73e4..18920b2d6 100644
--- a/src/ui/ssh/dialogs/HostKeyVerificationDialog.tsx
+++ b/src/ui/ssh/dialogs/HostKeyVerificationDialog.tsx
@@ -1,8 +1,14 @@
-import React, { useState } from "react";
-import { Button } from "@/components/button.tsx";
+import { useState } from "react";
+import { PanePrompt } from "@/components/surface/surface-scope";
+import {
+  PROMPT_BUTTON,
+  PROMPT_DESTRUCTIVE_BUTTON,
+  PROMPT_PRIMARY_BUTTON,
+} from "@/components/surface/prompt-styles";
 import { Shield, AlertTriangle, Copy, Check } from "lucide-react";
 import { useTranslation } from "react-i18next";
 import { copyToClipboard } from "@/lib/clipboard";
+import { hostKeyFingerprint } from "@/lib/host-key-fingerprint";
 
 interface HostKeyVerificationDialogProps {
   isOpen: boolean;
@@ -20,6 +26,45 @@ interface HostKeyVerificationDialogProps {
   backgroundColor?: string;
 }
 
+function FingerprintRow({
+  label,
+  value,
+  copied,
+  onCopy,
+}: {
+  label: string;
+  value: string;
+  copied: boolean;
+  onCopy: () => void;
+}) {
+  const { t } = useTranslation();
+  return (
+    <div className="flex flex-col gap-1.5">
+      <p className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
+        {label}
+      </p>
+      <div className="flex items-stretch gap-2">
+        <div className="flex-1 bg-muted/50 border border-border p-3 font-mono text-xs break-all">
+          {value}
+        </div>
+        <button
+          type="button"
+          onClick={onCopy}
+          title={t("common.copy")}
+          aria-label={t("common.copy")}
+          className="flex w-11 shrink-0 items-center justify-center border border-border text-muted-foreground transition-colors hover:bg-muted hover:text-foreground focus-visible:ring-1 focus-visible:ring-ring"
+        >
+          {copied ? (
+            <Check className="size-4 text-accent-brand" />
+          ) : (
+            <Copy className="size-4" />
+          )}
+        </button>
+      </div>
+    </div>
+  );
+}
+
 export function HostKeyVerificationDialog({
   isOpen,
   scenario,
@@ -28,7 +73,6 @@ export function HostKeyVerificationDialog({
   hostname,
   fingerprint,
   oldFingerprint,
-  algorithm,
   onAccept,
   onReject,
   backgroundColor,
@@ -50,168 +94,103 @@ export function HostKeyVerificationDialog({
     }
   };
 
-  const formatFingerprint = (fp: string) =>
-    fp.match(/.{1,2}/g)?.join(":") || fp;
+  const changed = scenario === "changed";
+  const newPrint = hostKeyFingerprint(fingerprint);
+  const oldPrint = hostKeyFingerprint(oldFingerprint || "");
 
   return (
-    <div className="absolute inset-0 flex items-center justify-center z-500 animate-in fade-in duration-200">
-      <div
-        className="absolute inset-0 bg-canvas rounded-md"
-        style={{ backgroundColor: backgroundColor || undefined }}
-      />
-      <div className="bg-card border border-border w-full max-w-lg mx-4 relative z-10 animate-in fade-in zoom-in-95 duration-200">
-        <div className="p-4 border-b border-border">
-          <div className="flex items-center gap-2">
-            {scenario === "new" ? (
-              <Shield className="size-4 text-accent-brand" />
-            ) : (
-              <AlertTriangle className="size-4 text-destructive" />
-            )}
-            <h3 className="text-xs font-bold uppercase tracking-widest">
-              {scenario === "new"
-                ? t("hostKey.verifyNewHost")
-                : t("hostKey.keyChangedWarning")}
-            </h3>
-          </div>
-          <p className="text-[10px] font-mono font-bold tracking-tight text-muted-foreground mt-1">
-            {hostname || ip}:{port}
-          </p>
-        </div>
-
-        <div className="p-4 flex flex-col gap-4">
-          {scenario === "new" ? (
-            <>
-              <div className="flex items-start gap-3 p-3 border border-border bg-muted/10">
-                <Shield className="size-4 text-accent-brand shrink-0 mt-0.5" />
-                <div>
-                  <p className="text-[10px] font-bold uppercase tracking-widest">
-                    {t("hostKey.firstConnectionTitle")}
-                  </p>
-                  <p className="text-xs text-muted-foreground mt-1">
-                    {t("hostKey.firstConnectionDescription")}
-                  </p>
-                </div>
-              </div>
-
-              <div className="flex flex-col gap-1.5">
-                <p className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                  {t("hostKey.fingerprint")} ({algorithm.toUpperCase()})
-                </p>
-                <div className="flex items-center gap-2">
-                  <div className="flex-1 bg-muted/50 border border-border p-3 font-mono text-xs break-all">
-                    {formatFingerprint(fingerprint)}
-                  </div>
-                  <Button
-                    variant="ghost"
-                    size="icon"
-                    onClick={() => copyFingerprint(fingerprint)}
-                    className="rounded-none shrink-0"
-                  >
-                    {copiedFingerprint ? (
-                      <Check className="size-4 text-accent-brand" />
-                    ) : (
-                      <Copy className="size-4" />
-                    )}
-                  </Button>
-                </div>
-              </div>
-
-              <p className="text-[10px] text-muted-foreground">
-                {t("hostKey.verifyInstructions")}
-              </p>
-            </>
-          ) : (
-            <>
-              <div className="flex items-start gap-3 p-3 border border-destructive/20 bg-destructive/10">
-                <AlertTriangle className="size-4 text-destructive shrink-0 mt-0.5" />
-                <div>
-                  <p className="text-[10px] font-bold uppercase tracking-widest text-destructive">
-                    {t("hostKey.securityWarning")}
-                  </p>
-                  <p className="text-xs text-destructive/80 mt-1">
-                    {t("hostKey.keyChangedDescription")}
-                  </p>
-                </div>
-              </div>
-
-              <div className="flex flex-col gap-3">
-                <div className="flex flex-col gap-1.5">
-                  <p className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                    {t("hostKey.previousKey")}
-                  </p>
-                  <div className="flex items-center gap-2">
-                    <div className="flex-1 bg-muted/50 border border-border p-3 font-mono text-xs break-all">
-                      {formatFingerprint(oldFingerprint || "")}
-                    </div>
-                    <Button
-                      variant="ghost"
-                      size="icon"
-                      onClick={() =>
-                        copyFingerprint(oldFingerprint || "", true)
-                      }
-                      className="rounded-none shrink-0"
-                    >
-                      {copiedOldFingerprint ? (
-                        <Check className="size-4 text-accent-brand" />
-                      ) : (
-                        <Copy className="size-4" />
-                      )}
-                    </Button>
-                  </div>
-                </div>
-
-                <div className="flex flex-col gap-1.5">
-                  <p className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                    {t("hostKey.newFingerprint")}
-                  </p>
-                  <div className="flex items-center gap-2">
-                    <div className="flex-1 bg-muted/50 border border-border p-3 font-mono text-xs break-all">
-                      {formatFingerprint(fingerprint)}
-                    </div>
-                    <Button
-                      variant="ghost"
-                      size="icon"
-                      onClick={() => copyFingerprint(fingerprint)}
-                      className="rounded-none shrink-0"
-                    >
-                      {copiedFingerprint ? (
-                        <Check className="size-4 text-accent-brand" />
-                      ) : (
-                        <Copy className="size-4" />
-                      )}
-                    </Button>
-                  </div>
-                </div>
-              </div>
-            </>
-          )}
-        </div>
-
-        <div className="p-4 border-t border-border flex justify-end gap-2">
-          <Button
-            type="button"
-            variant="ghost"
-            onClick={onReject}
-            className="rounded-none text-[10px] font-bold uppercase tracking-widest"
-          >
+    <PanePrompt
+      open
+      layer="connection"
+      backgroundColor={backgroundColor}
+      tone={changed ? "destructive" : "default"}
+      icon={
+        changed ? (
+          <AlertTriangle className="size-4" />
+        ) : (
+          <Shield className="size-4" />
+        )
+      }
+      title={
+        changed ? t("hostKey.keyChangedWarning") : t("hostKey.verifyNewHost")
+      }
+      description={
+        <span className="font-mono">
+          {hostname || ip}:{port}
+        </span>
+      }
+      className="max-w-lg"
+      actions={
+        <>
+          <button type="button" onClick={onReject} className={PROMPT_BUTTON}>
             {t("common.cancel")}
-          </Button>
-          <Button
+          </button>
+          <button
             type="button"
             onClick={onAccept}
-            variant="outline"
             className={
-              scenario === "changed"
-                ? "border-destructive/40 text-destructive hover:bg-destructive/10 rounded-none text-[10px] font-bold uppercase tracking-widest"
-                : "border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 rounded-none text-[10px] font-bold uppercase tracking-widest"
+              changed ? PROMPT_DESTRUCTIVE_BUTTON : PROMPT_PRIMARY_BUTTON
             }
           >
-            {scenario === "new"
-              ? t("hostKey.acceptAndContinue")
-              : t("hostKey.acceptNewKey")}
-          </Button>
-        </div>
+            {changed
+              ? t("hostKey.acceptNewKey")
+              : t("hostKey.acceptAndContinue")}
+          </button>
+        </>
+      }
+    >
+      <div className="flex flex-col gap-3">
+        {changed ? (
+          <>
+            <div className="flex items-start gap-3 p-3 border border-destructive/20 bg-destructive/10">
+              <AlertTriangle className="size-4 text-destructive shrink-0 mt-0.5" />
+              <div>
+                <p className="text-[10px] font-bold uppercase tracking-widest text-destructive">
+                  {t("hostKey.securityWarning")}
+                </p>
+                <p className="text-xs text-destructive/80 mt-1">
+                  {t("hostKey.keyChangedDescription")}
+                </p>
+              </div>
+            </div>
+            <FingerprintRow
+              label={t("hostKey.previousKey")}
+              value={oldPrint}
+              copied={copiedOldFingerprint}
+              onCopy={() => copyFingerprint(oldPrint, true)}
+            />
+            <FingerprintRow
+              label={t("hostKey.newFingerprint")}
+              value={newPrint}
+              copied={copiedFingerprint}
+              onCopy={() => copyFingerprint(newPrint)}
+            />
+          </>
+        ) : (
+          <>
+            <div className="flex items-start gap-3 p-3 border border-border bg-muted/10">
+              <Shield className="size-4 text-accent-brand shrink-0 mt-0.5" />
+              <div>
+                <p className="text-[10px] font-bold uppercase tracking-widest">
+                  {t("hostKey.firstConnectionTitle")}
+                </p>
+                <p className="text-xs text-muted-foreground mt-1">
+                  {t("hostKey.firstConnectionDescription")}
+                </p>
+              </div>
+            </div>
+            <FingerprintRow
+              label={t("hostKey.fingerprint")}
+              value={newPrint}
+              copied={copiedFingerprint}
+              onCopy={() => copyFingerprint(newPrint)}
+            />
+            <p className="text-[10px] text-muted-foreground">
+              {t("hostKey.verifyInstructions")}
+            </p>
+          </>
+        )}
       </div>
-    </div>
+    </PanePrompt>
   );
 }
diff --git a/src/ui/ssh/dialogs/PassphraseDialog.tsx b/src/ui/ssh/dialogs/PassphraseDialog.tsx
index 00311272c..3651e8122 100644
--- a/src/ui/ssh/dialogs/PassphraseDialog.tsx
+++ b/src/ui/ssh/dialogs/PassphraseDialog.tsx
@@ -1,6 +1,10 @@
 import React from "react";
-import { Button } from "@/components/button.tsx";
 import { PasswordInput } from "@/components/password-input.tsx";
+import { PanePrompt } from "@/components/surface/surface-scope";
+import {
+  PROMPT_BUTTON,
+  PROMPT_PRIMARY_BUTTON,
+} from "@/components/surface/prompt-styles";
 import { KeyRound } from "lucide-react";
 import { useTranslation } from "react-i18next";
 
@@ -38,55 +42,36 @@ export function PassphraseDialog({
   };
 
   return (
-    <div className="absolute inset-0 flex items-center justify-center z-500 animate-in fade-in duration-200">
-      <div
-        className="absolute inset-0 bg-canvas rounded-md"
-        style={{ backgroundColor: backgroundColor || undefined }}
-      />
-      <div className="bg-card border border-border w-full max-w-sm mx-4 relative z-10 animate-in fade-in zoom-in-95 duration-200">
-        <div className="p-4 border-b border-border">
-          <div className="flex items-center gap-2">
-            <KeyRound className="size-4 text-accent-brand" />
-            <h3 className="text-xs font-bold uppercase tracking-widest">
-              {t("auth.passphraseRequired")}
-            </h3>
-          </div>
-          <p className="text-[10px] font-mono font-bold tracking-tight text-muted-foreground mt-1">
-            {hostDisplay}
+    <PanePrompt
+      open
+      layer="connection"
+      backgroundColor={backgroundColor}
+      icon={<KeyRound className="size-4" />}
+      title={t("auth.passphraseRequired")}
+      description={<span className="font-mono">{hostDisplay}</span>}
+    >
+      <form onSubmit={handleSubmit} className="flex flex-col gap-3">
+        <div className="flex flex-col gap-1.5">
+          <PasswordInput
+            id="passphrase"
+            name="passphrase"
+            autoFocus
+            placeholder={t("placeholders.keyPassword")}
+            className="rounded-none bg-muted/50 border-border text-xs"
+          />
+          <p className="text-[10px] text-muted-foreground">
+            {t("auth.passphraseRequiredDescription")}
           </p>
         </div>
-        <form onSubmit={handleSubmit} className="p-4 flex flex-col gap-4">
-          <div className="flex flex-col gap-1.5">
-            <PasswordInput
-              id="passphrase"
-              name="passphrase"
-              autoFocus
-              placeholder={t("placeholders.keyPassword")}
-              className="rounded-none bg-muted/50 border-border text-xs"
-            />
-            <p className="text-[10px] text-muted-foreground">
-              {t("auth.passphraseRequiredDescription")}
-            </p>
-          </div>
-          <div className="flex justify-end gap-2">
-            <Button
-              type="button"
-              variant="ghost"
-              onClick={onCancel}
-              className="rounded-none text-[10px] font-bold uppercase tracking-widest"
-            >
-              {t("common.cancel")}
-            </Button>
-            <Button
-              type="submit"
-              variant="outline"
-              className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 rounded-none text-[10px] font-bold uppercase tracking-widest"
-            >
-              {t("common.connect")}
-            </Button>
-          </div>
-        </form>
-      </div>
-    </div>
+        <div className="flex justify-end gap-2">
+          <button type="button" onClick={onCancel} className={PROMPT_BUTTON}>
+            {t("common.cancel")}
+          </button>
+          <button type="submit" className={PROMPT_PRIMARY_BUTTON}>
+            {t("common.connect")}
+          </button>
+        </div>
+      </form>
+    </PanePrompt>
   );
 }
diff --git a/src/ui/ssh/dialogs/SSHAuthDialog.tsx b/src/ui/ssh/dialogs/SSHAuthDialog.tsx
index 7070c9a48..b79273321 100644
--- a/src/ui/ssh/dialogs/SSHAuthDialog.tsx
+++ b/src/ui/ssh/dialogs/SSHAuthDialog.tsx
@@ -2,6 +2,11 @@ import React, { useState } from "react";
 import { Button } from "@/components/button.tsx";
 import { PasswordInput } from "@/components/password-input.tsx";
 import { Label } from "@/components/label.tsx";
+import { PanePrompt } from "@/components/surface/surface-scope";
+import {
+  PROMPT_BUTTON,
+  PROMPT_PRIMARY_BUTTON,
+} from "@/components/surface/prompt-styles";
 import {
   Tabs,
   TabsContent,
@@ -120,191 +125,176 @@ export function SSHAuthDialog({
   };
 
   return (
-    <div className="absolute inset-0 flex items-center justify-center z-500 animate-in fade-in duration-200">
-      <div
-        className="absolute inset-0 bg-canvas rounded-md"
-        style={{ backgroundColor: backgroundColor || undefined }}
-      />
-      <div className="bg-card border border-border w-full max-w-xl mx-4 relative z-10 animate-in fade-in zoom-in-95 duration-200">
-        <div className="p-4 border-b border-border">
-          <div className="flex items-center gap-2">
-            <Shield className="size-4 text-accent-brand" />
-            <h3 className="text-xs font-bold uppercase tracking-widest">
-              {t("auth.sshAuthenticationRequired")}
-            </h3>
+    <PanePrompt
+      open
+      layer="connection"
+      backgroundColor={backgroundColor}
+      icon={<Shield className="size-4" />}
+      title={t("auth.sshAuthenticationRequired")}
+      description={<span className="font-mono">{hostDisplay}</span>}
+      className="max-w-xl"
+    >
+      <form onSubmit={handleSubmit}>
+        <div className="flex flex-col gap-3">
+          <div
+            className={`flex items-start gap-3 p-3 border ${
+              reason === "auth_failed"
+                ? "border-destructive/20 bg-destructive/10"
+                : "border-border bg-muted/10"
+            }`}
+          >
+            <AlertCircle
+              className={`size-4 shrink-0 mt-0.5 ${reason === "auth_failed" ? "text-destructive" : "text-accent-brand"}`}
+            />
+            <div>
+              <p
+                className={`text-[10px] font-bold uppercase tracking-widest ${reason === "auth_failed" ? "text-destructive" : ""}`}
+              >
+                {getReasonMessage()}
+              </p>
+              <p
+                className={`text-xs mt-1 ${reason === "auth_failed" ? "text-destructive/80" : "text-muted-foreground"}`}
+              >
+                {getReasonDescription()}
+              </p>
+            </div>
           </div>
-          <p className="text-[10px] font-mono font-bold tracking-tight text-muted-foreground mt-1">
-            {hostDisplay}
-          </p>
-        </div>
 
-        <form onSubmit={handleSubmit}>
-          <div className="p-4 flex flex-col gap-4">
-            <div
-              className={`flex items-start gap-3 p-3 border ${
-                reason === "auth_failed"
-                  ? "border-destructive/20 bg-destructive/10"
-                  : "border-border bg-muted/10"
-              }`}
-            >
-              <AlertCircle
-                className={`size-4 shrink-0 mt-0.5 ${reason === "auth_failed" ? "text-destructive" : "text-accent-brand"}`}
+          <Tabs
+            value={authTab}
+            onValueChange={(v) => setAuthTab(v as "password" | "key")}
+          >
+            <TabsList className="w-full rounded-none">
+              <TabsTrigger
+                value="password"
+                className="flex-1 rounded-none text-[10px] font-bold uppercase tracking-widest"
+              >
+                {t("credentials.password")}
+              </TabsTrigger>
+              <TabsTrigger
+                value="key"
+                className="flex-1 rounded-none text-[10px] font-bold uppercase tracking-widest"
+              >
+                {t("credentials.sshKey")}
+              </TabsTrigger>
+            </TabsList>
+
+            <TabsContent value="password" className="mt-3 flex flex-col gap-2">
+              <Label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
+                {t("credentials.password")}
+              </Label>
+              <PasswordInput
+                placeholder={t("placeholders.enterPassword")}
+                value={password}
+                onChange={(e) => setPassword(e.target.value)}
+                autoFocus
+                className="rounded-none bg-muted/50 border-border text-xs"
               />
-              <div>
-                <p
-                  className={`text-[10px] font-bold uppercase tracking-widest ${reason === "auth_failed" ? "text-destructive" : ""}`}
-                >
-                  {getReasonMessage()}
-                </p>
-                <p
-                  className={`text-xs mt-1 ${reason === "auth_failed" ? "text-destructive/80" : "text-muted-foreground"}`}
-                >
-                  {getReasonDescription()}
+              <p className="text-[10px] text-muted-foreground">
+                {t("auth.sshPasswordDescription")}
+              </p>
+            </TabsContent>
+
+            <TabsContent value="key" className="mt-3 flex flex-col gap-3">
+              <div className="flex flex-col gap-2">
+                <Label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
+                  {t("credentials.sshPrivateKey")}
+                </Label>
+                <div className="relative">
+                  <input
+                    id="key-upload"
+                    type="file"
+                    accept="*,.pem,.key,.ppk,.txt"
+                    onChange={handleKeyFileUpload}
+                    className="absolute inset-0 w-full h-full opacity-0 cursor-pointer"
+                  />
+                  <Button
+                    type="button"
+                    variant="outline"
+                    className="w-full justify-start rounded-none text-[10px] font-bold uppercase tracking-widest border-border"
+                  >
+                    <Upload className="size-3.5 mr-2" />
+                    <span className="truncate">
+                      {t("credentials.uploadPrivateKeyFile")}
+                    </span>
+                  </Button>
+                </div>
+                <CodeMirror
+                  value={sshKey}
+                  onChange={(value) => setSshKey(value)}
+                  placeholder={t("placeholders.pastePrivateKey")}
+                  theme={oneDark}
+                  className="border border-border text-xs"
+                  minHeight="160px"
+                  maxHeight="260px"
+                  basicSetup={{
+                    lineNumbers: true,
+                    foldGutter: false,
+                    dropCursor: false,
+                    allowMultipleSelections: false,
+                    highlightSelectionMatches: false,
+                    searchKeymap: false,
+                  }}
+                  extensions={[
+                    EditorView.theme({
+                      ".cm-scroller": {
+                        overflow: "auto",
+                        scrollbarWidth: "thin",
+                        scrollbarColor:
+                          "var(--scrollbar-thumb) var(--scrollbar-track)",
+                      },
+                    }),
+                  ]}
+                />
+              </div>
+
+              <div className="flex flex-col gap-2">
+                <Label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
+                  {t("credentials.keyPassword")} ({t("common.optional")})
+                </Label>
+                <PasswordInput
+                  placeholder={t("placeholders.keyPassword")}
+                  value={keyPassword}
+                  onChange={(e) => setKeyPassword(e.target.value)}
+                  className="rounded-none bg-muted/50 border-border text-xs"
+                />
+                <p className="text-[10px] text-muted-foreground">
+                  {t("auth.sshKeyPasswordDescription")}
                 </p>
               </div>
-            </div>
-
-            <Tabs
-              value={authTab}
-              onValueChange={(v) => setAuthTab(v as "password" | "key")}
-            >
-              <TabsList className="w-full rounded-none">
-                <TabsTrigger
-                  value="password"
-                  className="flex-1 rounded-none text-[10px] font-bold uppercase tracking-widest"
-                >
-                  {t("credentials.password")}
-                </TabsTrigger>
-                <TabsTrigger
-                  value="key"
-                  className="flex-1 rounded-none text-[10px] font-bold uppercase tracking-widest"
-                >
-                  {t("credentials.sshKey")}
-                </TabsTrigger>
-              </TabsList>
-
-              <TabsContent
-                value="password"
-                className="mt-3 flex flex-col gap-2"
-              >
+              <div className="flex flex-col gap-2">
                 <Label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                  {t("credentials.password")}
+                  {t("credentials.password")} ({t("common.optional")})
                 </Label>
                 <PasswordInput
                   placeholder={t("placeholders.enterPassword")}
                   value={password}
                   onChange={(e) => setPassword(e.target.value)}
-                  autoFocus
                   className="rounded-none bg-muted/50 border-border text-xs"
                 />
-                <p className="text-[10px] text-muted-foreground">
-                  {t("auth.sshPasswordDescription")}
-                </p>
-              </TabsContent>
+              </div>
+            </TabsContent>
+          </Tabs>
+        </div>
 
-              <TabsContent value="key" className="mt-3 flex flex-col gap-3">
-                <div className="flex flex-col gap-2">
-                  <Label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                    {t("credentials.sshPrivateKey")}
-                  </Label>
-                  <div className="relative">
-                    <input
-                      id="key-upload"
-                      type="file"
-                      accept="*,.pem,.key,.ppk,.txt"
-                      onChange={handleKeyFileUpload}
-                      className="absolute inset-0 w-full h-full opacity-0 cursor-pointer"
-                    />
-                    <Button
-                      type="button"
-                      variant="outline"
-                      className="w-full justify-start rounded-none text-[10px] font-bold uppercase tracking-widest border-border"
-                    >
-                      <Upload className="size-3.5 mr-2" />
-                      <span className="truncate">
-                        {t("credentials.uploadPrivateKeyFile")}
-                      </span>
-                    </Button>
-                  </div>
-                  <CodeMirror
-                    value={sshKey}
-                    onChange={(value) => setSshKey(value)}
-                    placeholder={t("placeholders.pastePrivateKey")}
-                    theme={oneDark}
-                    className="border border-border text-xs"
-                    minHeight="160px"
-                    maxHeight="260px"
-                    basicSetup={{
-                      lineNumbers: true,
-                      foldGutter: false,
-                      dropCursor: false,
-                      allowMultipleSelections: false,
-                      highlightSelectionMatches: false,
-                      searchKeymap: false,
-                    }}
-                    extensions={[
-                      EditorView.theme({
-                        ".cm-scroller": {
-                          overflow: "auto",
-                          scrollbarWidth: "thin",
-                          scrollbarColor:
-                            "var(--scrollbar-thumb) var(--scrollbar-track)",
-                        },
-                      }),
-                    ]}
-                  />
-                </div>
-
-                <div className="flex flex-col gap-2">
-                  <Label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                    {t("credentials.keyPassword")} ({t("common.optional")})
-                  </Label>
-                  <PasswordInput
-                    placeholder={t("placeholders.keyPassword")}
-                    value={keyPassword}
-                    onChange={(e) => setKeyPassword(e.target.value)}
-                    className="rounded-none bg-muted/50 border-border text-xs"
-                  />
-                  <p className="text-[10px] text-muted-foreground">
-                    {t("auth.sshKeyPasswordDescription")}
-                  </p>
-                </div>
-                <div className="flex flex-col gap-2">
-                  <Label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
-                    {t("credentials.password")} ({t("common.optional")})
-                  </Label>
-                  <PasswordInput
-                    placeholder={t("placeholders.enterPassword")}
-                    value={password}
-                    onChange={(e) => setPassword(e.target.value)}
-                    className="rounded-none bg-muted/50 border-border text-xs"
-                  />
-                </div>
-              </TabsContent>
-            </Tabs>
-          </div>
-
-          <div className="p-4 border-t border-border flex justify-end gap-2">
-            <Button
-              type="button"
-              variant="ghost"
-              onClick={onCancel}
-              disabled={loading}
-              className="rounded-none text-[10px] font-bold uppercase tracking-widest"
-            >
-              {t("common.cancel")}
-            </Button>
-            <Button
-              type="submit"
-              variant="outline"
-              disabled={!canSubmit() || loading}
-              className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 rounded-none text-[10px] font-bold uppercase tracking-widest"
-            >
-              {loading ? t("common.connecting") : t("common.connect")}
-            </Button>
-          </div>
-        </form>
-      </div>
-    </div>
+        <div className="flex justify-end gap-2 pt-3">
+          <button
+            type="button"
+            onClick={onCancel}
+            disabled={loading}
+            className={PROMPT_BUTTON}
+          >
+            {t("common.cancel")}
+          </button>
+          <button
+            type="submit"
+            disabled={!canSubmit() || loading}
+            className={PROMPT_PRIMARY_BUTTON}
+          >
+            {loading ? t("common.connecting") : t("common.connect")}
+          </button>
+        </div>
+      </form>
+    </PanePrompt>
   );
 }
diff --git a/src/ui/ssh/dialogs/TOTPDialog.tsx b/src/ui/ssh/dialogs/TOTPDialog.tsx
index 243bf578b..47d1dbf2f 100644
--- a/src/ui/ssh/dialogs/TOTPDialog.tsx
+++ b/src/ui/ssh/dialogs/TOTPDialog.tsx
@@ -1,9 +1,13 @@
 import React, { useEffect, useState } from "react";
-import { Button } from "@/components/button.tsx";
 import { Input } from "@/components/input.tsx";
+import { PanePrompt } from "@/components/surface/surface-scope";
+import {
+  PROMPT_BUTTON,
+  PROMPT_PRIMARY_BUTTON,
+} from "@/components/surface/prompt-styles";
 import { Shield, Loader2 } from "lucide-react";
 import { useTranslation } from "react-i18next";
-import type { MFAPromptMode } from "@termix/plugin-sdk/frontend";
+import type { MFAPromptMode } from "@termix-ssh/plugin-sdk/frontend";
 
 export type { MFAPromptMode };
 
@@ -17,6 +21,9 @@ interface TOTPDialogProps {
   backgroundColor?: string;
 }
 
+const CODE_INPUT =
+  "rounded-none bg-muted/50 border-border text-center text-sm tracking-widest";
+
 export function TOTPDialog({
   isOpen,
   prompt,
@@ -37,6 +44,7 @@ export function TOTPDialog({
 
   if (!isOpen) return null;
 
+  const isPassword = mode === "password";
   const isPush = mode === "push";
   const isMenu = mode === "menu";
   const isTotp = !isPush && !isMenu && mode !== "password";
@@ -55,114 +63,101 @@ export function TOTPDialog({
     const input = e.currentTarget.elements.namedItem(
       "totpCode",
     ) as HTMLInputElement;
-    if (input?.value.trim()) {
-      onSubmit(input.value.trim());
-    }
+    const value = isPassword ? input?.value : input?.value.trim();
+    if (value) onSubmit(value);
   };
 
   const title = isPush
-    ? t("terminal.mfaPushRequired")
-    : isMenu
-      ? t("terminal.mfaPromptRequired")
-      : t("terminal.totpRequired");
+    ? t("sshAuth.mfaPushRequired")
+    : isPassword
+      ? t("common.password")
+      : isMenu
+        ? t("sshAuth.mfaPromptRequired")
+        : t("sshAuth.totpRequired");
 
-  const label = prompt || (isTotp ? t("terminal.totpCodeLabel") : undefined);
+  const label = prompt || (isTotp ? t("sshAuth.totpCodeLabel") : undefined);
+
+  const cancel = (
+    <button type="button" onClick={onCancel} className={PROMPT_BUTTON}>
+      {t("common.cancel")}
+    </button>
+  );
 
   return (
-    <div className="absolute inset-0 flex items-center justify-center z-500 animate-in fade-in duration-200">
-      <div
-        className="absolute inset-0 bg-canvas rounded-md"
-        style={{ backgroundColor: backgroundColor || undefined }}
-      />
-      <div className="bg-card border border-border w-full max-w-sm mx-4 relative z-10 animate-in fade-in zoom-in-95 duration-200">
-        <div className="p-4 border-b border-border">
-          <div className="flex items-center gap-2">
-            <Shield className="size-4 text-accent-brand" />
-            <h3 className="text-xs font-bold uppercase tracking-widest">
-              {title}
-            </h3>
-          </div>
-          {label && (
-            <p className="text-[10px] font-bold uppercase tracking-tight text-muted-foreground mt-1">
-              {label}
+    <PanePrompt
+      open
+      layer="connection"
+      backgroundColor={backgroundColor}
+      icon={<Shield className="size-4" />}
+      title={title}
+      description={label}
+    >
+      {showWaiting ? (
+        <div className="flex flex-col gap-3">
+          <div className="flex items-center gap-3 py-1">
+            <Loader2 className="size-4 animate-spin text-accent-brand shrink-0" />
+            <p className="text-xs text-muted-foreground">
+              {t("sshAuth.mfaWaitingApproval")}
             </p>
-          )}
-        </div>
-        {showWaiting ? (
-          <div className="p-4 flex flex-col gap-4">
-            <div className="flex items-center gap-3 py-2">
-              <Loader2 className="size-4 animate-spin text-accent-brand shrink-0" />
-              <p className="text-xs text-muted-foreground">
-                {t("terminal.mfaWaitingApproval")}
-              </p>
-            </div>
-            <div className="flex justify-end gap-2">
-              <Button
-                type="button"
-                variant="ghost"
-                onClick={onCancel}
-                className="rounded-none text-[10px] font-bold uppercase tracking-widest"
-              >
-                {t("common.cancel")}
-              </Button>
-            </div>
           </div>
-        ) : (
-          <form onSubmit={handleSubmit} className="p-4 flex flex-col gap-4">
-            {isPush ? null : isMenu ? (
-              <Input
-                id="totpCode"
-                name="totpCode"
-                type="text"
-                autoFocus
-                placeholder={t("terminal.mfaMenuPlaceholder")}
-                className="rounded-none bg-muted/50 border-border text-center text-sm tracking-widest"
-              />
-            ) : allowsPushKeyword ? (
-              <Input
-                id="totpCode"
-                name="totpCode"
-                type="text"
-                autoFocus
-                placeholder={t("terminal.mfaCodeOrPushPlaceholder")}
-                className="rounded-none bg-muted/50 border-border text-center text-sm tracking-widest"
-              />
-            ) : (
-              <Input
-                id="totpCode"
-                name="totpCode"
-                type="text"
-                autoFocus
-                // Some Secure Auth codes can be longer than 6 digits, so allow up to 8 digits here.
-                maxLength={8}
-                pattern="[0-9]*"
-                inputMode="numeric"
-                placeholder="000000"
-                className="rounded-none bg-muted/50 border-border text-center text-sm tracking-widest"
-              />
-            )}
-            <div className="flex justify-end gap-2">
-              <Button
-                type="button"
-                variant="ghost"
-                onClick={onCancel}
-                className="rounded-none text-[10px] font-bold uppercase tracking-widest"
-              >
-                {t("common.cancel")}
-              </Button>
-              <Button
-                type="submit"
-                variant="outline"
-                className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 rounded-none text-[10px] font-bold uppercase tracking-widest"
-              >
-                {isPush
-                  ? t("terminal.mfaSendRequest")
-                  : t("terminal.totpVerify")}
-              </Button>
-            </div>
-          </form>
-        )}
-      </div>
-    </div>
+          <div className="flex justify-end gap-2">{cancel}</div>
+        </div>
+      ) : (
+        <form onSubmit={handleSubmit} className="flex flex-col gap-3">
+          {isPush ? null : isPassword ? (
+            <Input
+              id="totpCode"
+              name="totpCode"
+              type="password"
+              autoComplete="current-password"
+              autoFocus
+              placeholder={t("placeholders.enterPassword")}
+              className="rounded-none bg-muted/50 border-border text-sm"
+            />
+          ) : isMenu ? (
+            <Input
+              id="totpCode"
+              name="totpCode"
+              type="text"
+              autoFocus
+              placeholder={t("sshAuth.mfaMenuPlaceholder")}
+              className={CODE_INPUT}
+            />
+          ) : allowsPushKeyword ? (
+            <Input
+              id="totpCode"
+              name="totpCode"
+              type="text"
+              autoFocus
+              placeholder={t("sshAuth.mfaCodeOrPushPlaceholder")}
+              className={CODE_INPUT}
+            />
+          ) : (
+            <Input
+              id="totpCode"
+              name="totpCode"
+              type="text"
+              autoFocus
+              // Some Secure Auth codes can be longer than 6 digits, so allow up to 8 digits here.
+              maxLength={8}
+              pattern="[0-9]*"
+              inputMode="numeric"
+              placeholder="000000"
+              className={CODE_INPUT}
+            />
+          )}
+          <div className="flex justify-end gap-2">
+            {cancel}
+            <button type="submit" className={PROMPT_PRIMARY_BUTTON}>
+              {isPush
+                ? t("sshAuth.mfaSendRequest")
+                : isPassword
+                  ? t("common.connect")
+                  : t("sshAuth.totpVerify")}
+            </button>
+          </div>
+        </form>
+      )}
+    </PanePrompt>
   );
 }
diff --git a/src/ui/tests/auth/Auth.test.tsx b/src/ui/tests/auth/Auth.test.tsx
index cfc5802b5..de48b53d5 100644
--- a/src/ui/tests/auth/Auth.test.tsx
+++ b/src/ui/tests/auth/Auth.test.tsx
@@ -114,9 +114,9 @@ describe("Auth local desktop flow", () => {
     renderAuth();
 
     await waitFor(() => {
-      expect(screen.getByText("Local desktop signed out")).toBeTruthy();
+      expect(screen.getByText("auth.localDesktopSignedOut")).toBeTruthy();
     });
-    expect(screen.getByText("Continue with local desktop")).toBeTruthy();
+    expect(screen.getByText("auth.continueLocalDesktop")).toBeTruthy();
     expect(screen.queryByText("common.register")).toBeNull();
     expect(screen.queryByLabelText("common.username")).toBeNull();
     expect(screen.queryByText("auth.forgotPassword")).toBeNull();
@@ -134,11 +134,9 @@ describe("Auth local desktop flow", () => {
     renderAuth();
 
     await waitFor(() => {
-      expect(
-        screen.getByText("Local desktop session unavailable"),
-      ).toBeTruthy();
+      expect(screen.getByText("auth.localDesktopUnavailable")).toBeTruthy();
     });
-    expect(screen.getByText("Retry local desktop session")).toBeTruthy();
+    expect(screen.getByText("auth.retryLocalDesktop")).toBeTruthy();
     expect(screen.queryByText("common.register")).toBeNull();
     expect(screen.queryByLabelText("common.username")).toBeNull();
     expect(mainAxios.requestDesktopAutoSession).toHaveBeenCalled();
diff --git a/src/ui/tests/auth/AuthLoginMethods.test.tsx b/src/ui/tests/auth/AuthLoginMethods.test.tsx
index 57bb87b8f..8a0803216 100644
--- a/src/ui/tests/auth/AuthLoginMethods.test.tsx
+++ b/src/ui/tests/auth/AuthLoginMethods.test.tsx
@@ -18,7 +18,7 @@ import {
 import type {
   LoginMethodUIProps,
   SecondFactorUIProps,
-} from "@termix/plugin-sdk/frontend";
+} from "@termix-ssh/plugin-sdk/frontend";
 
 const mainAxios = vi.hoisted(() => ({
   loginUser: vi.fn(),
diff --git a/src/ui/tests/components/card-masonry.test.tsx b/src/ui/tests/components/card-masonry.test.tsx
new file mode 100644
index 000000000..035e47777
--- /dev/null
+++ b/src/ui/tests/components/card-masonry.test.tsx
@@ -0,0 +1,19 @@
+import { describe, expect, it } from "vitest";
+import { masonryColumns } from "@/components/card-masonry";
+
+describe("masonryColumns", () => {
+  it("stacks into one column when narrow", () => {
+    expect(masonryColumns(400, 4)).toBe(1);
+  });
+
+  it("grows with the container up to the preference", () => {
+    expect(masonryColumns(700, 3)).toBe(2);
+    expect(masonryColumns(1000, 3)).toBe(3);
+    expect(masonryColumns(1300, 3)).toBe(3);
+    expect(masonryColumns(1300, 4)).toBe(4);
+  });
+
+  it("falls back to three for an unknown preference", () => {
+    expect(masonryColumns(1300, 9)).toBe(3);
+  });
+});
diff --git a/src/ui/tests/components/connection/ConnectionGate.test.tsx b/src/ui/tests/components/connection/ConnectionGate.test.tsx
new file mode 100644
index 000000000..0eb5e4179
--- /dev/null
+++ b/src/ui/tests/components/connection/ConnectionGate.test.tsx
@@ -0,0 +1,93 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import {
+  act,
+  cleanup,
+  fireEvent,
+  render,
+  screen,
+} from "@testing-library/react";
+
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({ t: (key: string) => key }),
+}));
+
+import {
+  ConnectionGate,
+  type ConnectionGateController,
+} from "@/components/connection/ConnectionGate";
+
+beforeEach(() => vi.useFakeTimers());
+afterEach(() => {
+  cleanup();
+  vi.useRealTimers();
+});
+
+describe("ConnectionGate", () => {
+  it("shows the children once connected", async () => {
+    render(
+      <ConnectionGate
+        message="docker.connecting"
+        connect={(gate) => gate.markConnected()}
+      >
+        <span>containers</span>
+      </ConnectionGate>,
+    );
+    await act(async () => {});
+    expect(screen.getByText("containers")).toBeTruthy();
+    expect(screen.queryByRole("status")).toBeNull();
+  });
+
+  it("keeps the screen up with the reason and a retry when connect throws", async () => {
+    const connect = vi
+      .fn<(gate: ConnectionGateController) => Promise<void> | void>()
+      .mockRejectedValueOnce(new Error("No route to host"))
+      .mockImplementation((gate) => gate.markConnected());
+    render(
+      <ConnectionGate message="files.connecting" connect={connect}>
+        <span>tree</span>
+      </ConnectionGate>,
+    );
+    await act(async () => {});
+    expect(screen.queryByText("tree")).toBeNull();
+    expect(screen.getAllByText("No route to host").length).toBeGreaterThan(0);
+    expect(screen.getByText("connection.failedRetrying")).toBeTruthy();
+
+    await act(async () => {
+      fireEvent.click(screen.getByText("connection.retryNow"));
+    });
+    expect(screen.getByText("tree")).toBeTruthy();
+  });
+
+  it("does not retry on its own when unavailable", async () => {
+    const connect = vi.fn((gate: ConnectionGateController) =>
+      gate.markUnavailable({ title: "docker.notEnabled" }),
+    );
+    render(
+      <ConnectionGate message="docker.connecting" connect={connect}>
+        <span>containers</span>
+      </ConnectionGate>,
+    );
+    await act(async () => {});
+    expect(screen.getByText("docker.notEnabled")).toBeTruthy();
+    await act(async () => {
+      vi.advanceTimersByTime(60_000);
+    });
+    expect(connect).toHaveBeenCalledTimes(1);
+    expect(screen.queryByText("containers")).toBeNull();
+  });
+
+  it("keeps children mounted under the screen when asked", async () => {
+    render(
+      <ConnectionGate
+        message="serial.connecting"
+        keepMounted
+        connect={() => new Promise(() => {})}
+      >
+        <span>xterm</span>
+      </ConnectionGate>,
+    );
+    await act(async () => {});
+    expect(screen.getByText("xterm")).toBeTruthy();
+    expect(screen.getByRole("status")).toBeTruthy();
+  });
+});
diff --git a/src/ui/tests/components/connection/ConnectionScreen.test.tsx b/src/ui/tests/components/connection/ConnectionScreen.test.tsx
index 45713cf85..d431e7b23 100644
--- a/src/ui/tests/components/connection/ConnectionScreen.test.tsx
+++ b/src/ui/tests/components/connection/ConnectionScreen.test.tsx
@@ -1,12 +1,17 @@
 import { describe, it, expect, vi, afterEach } from "vitest";
-import { render, screen, cleanup } from "@testing-library/react";
+import { render, screen, cleanup, fireEvent } from "@testing-library/react";
 
 vi.mock("react-i18next", () => ({
   useTranslation: () => ({ t: (key: string) => key }),
 }));
 
 import { ConnectionScreen } from "../../../components/connection/ConnectionScreen";
-import { ConnectionLogProvider } from "../../../ssh/connection-log/ConnectionLogContext";
+import {
+  ConnectionLogProvider,
+  useConnectionLog,
+} from "../../../ssh/connection-log/ConnectionLogContext";
+import { SurfaceScope } from "../../../components/surface/surface-scope";
+import { useEffect } from "react";
 
 afterEach(cleanup);
 
@@ -25,16 +30,16 @@ describe("ConnectionScreen", () => {
   });
 
   it("renders the disconnected state without a provider", () => {
-    expect(() =>
-      render(
-        <ConnectionScreen
-          status="disconnected"
-          message="remoteDesktop.hostNotFound"
-        />,
-      ),
-    ).not.toThrow();
+    render(
+      <ConnectionScreen
+        status="disconnected"
+        message="common.loading"
+        disconnectedMessage="terminal.connectionLost"
+      />,
+    );
 
-    expect(screen.getByText("remoteDesktop.hostNotFound")).toBeTruthy();
+    expect(screen.getByText("terminal.connectionLost")).toBeTruthy();
+    expect(screen.queryByText("common.loading")).toBeNull();
     expect(screen.getByRole("status").getAttribute("data-status")).toBe(
       "disconnected",
     );
@@ -47,6 +52,137 @@ describe("ConnectionScreen", () => {
       </ConnectionLogProvider>,
     );
 
-    expect(screen.getByText(/terminal\.connectionLogTitle/)).toBeTruthy();
+    expect(screen.getByText(/sshAuth\.connectionLogTitle/)).toBeTruthy();
+  });
+
+  it("offers retry and the reason once a connect fails", () => {
+    const retry = vi.fn();
+    render(
+      <ConnectionScreen
+        status="error"
+        message="common.loading"
+        errorDetail="Authentication failed"
+        onManualRetry={retry}
+      />,
+    );
+
+    expect(screen.getByText("connection.failed")).toBeTruthy();
+    expect(screen.getByText("Authentication failed")).toBeTruthy();
+    fireEvent.click(screen.getByText("connection.reconnect"));
+    expect(retry).toHaveBeenCalledTimes(1);
+  });
+
+  it("lets the user skip the wait while it retries on its own", () => {
+    const retry = vi.fn();
+    render(
+      <ConnectionScreen
+        status="error"
+        attempt={2}
+        maxAttempts={8}
+        nextRetryInMs={4000}
+        onManualRetry={retry}
+      />,
+    );
+
+    expect(screen.getByText("connection.failedRetrying")).toBeTruthy();
+    expect(screen.getByText("connection.retryingIn")).toBeTruthy();
+    fireEvent.click(screen.getByText("connection.retryNow"));
+    expect(retry).toHaveBeenCalled();
+  });
+
+  it("shows an unavailable state with its hint, action and retry", () => {
+    render(
+      <ConnectionScreen
+        status="connected"
+        unavailable={{
+          title: "docker.notEnabled",
+          hint: "docker.notEnabledHint",
+          action: <button>open editor</button>,
+        }}
+        onManualRetry={() => {}}
+      />,
+    );
+
+    expect(screen.getByRole("status").getAttribute("data-status")).toBe(
+      "unavailable",
+    );
+    expect(screen.getByText("docker.notEnabled")).toBeTruthy();
+    expect(screen.getByText("docker.notEnabledHint")).toBeTruthy();
+    expect(screen.getByText("open editor")).toBeTruthy();
+    expect(screen.getByText("connection.reconnect")).toBeTruthy();
+  });
+
+  it("uses the same headline when retries run out", () => {
+    render(<ConnectionScreen status="disconnected" message="common.loading" />);
+    expect(screen.getByText("connection.failed")).toBeTruthy();
+  });
+
+  it("closes the tab it sits in once it stops", () => {
+    const close = vi.fn();
+    render(
+      <SurfaceScope kind="tab" onClose={close}>
+        <ConnectionScreen status="error" onManualRetry={() => {}} />
+      </SurfaceScope>,
+    );
+    fireEvent.click(screen.getByText("connection.close"));
+    expect(close).toHaveBeenCalledTimes(1);
+  });
+
+  it("prefers its own close and can hide it", () => {
+    const own = vi.fn();
+    const { rerender } = render(
+      <SurfaceScope kind="tab" onClose={() => {}}>
+        <ConnectionScreen status="error" onClose={own} />
+      </SurfaceScope>,
+    );
+    fireEvent.click(screen.getByText("connection.close"));
+    expect(own).toHaveBeenCalledTimes(1);
+
+    rerender(
+      <SurfaceScope kind="tab" onClose={() => {}}>
+        <ConnectionScreen status="error" onClose={false} />
+      </SurfaceScope>,
+    );
+    expect(screen.queryByText("connection.close")).toBeNull();
+  });
+
+  it("shows no close while connecting or outside a tab", () => {
+    render(
+      <SurfaceScope kind="tab" onClose={() => {}}>
+        <ConnectionScreen status="connecting" />
+      </SurfaceScope>,
+    );
+    expect(screen.queryByText("connection.close")).toBeNull();
+    cleanup();
+    render(<ConnectionScreen status="error" />);
+    expect(screen.queryByText("connection.close")).toBeNull();
+  });
+
+  it("falls back to the last logged error for the reason", () => {
+    function Seed() {
+      const { addLog } = useConnectionLog();
+      useEffect(() => {
+        addLog({ type: "error", stage: "connection", message: "old" });
+        addLog({ type: "info", stage: "connection", message: "trying" });
+        addLog({
+          type: "error",
+          stage: "connection",
+          message: "Docker not found",
+        });
+      }, [addLog]);
+      return null;
+    }
+    render(
+      <ConnectionLogProvider>
+        <Seed />
+        <ConnectionScreen status="error" />
+      </ConnectionLogProvider>,
+    );
+    expect(screen.getAllByText("Docker not found").length).toBeGreaterThan(1);
+  });
+
+  it("renders nothing once connected", () => {
+    const { container } = render(<ConnectionScreen status="connected" />);
+    expect(container.innerHTML).toBe("");
   });
 });
diff --git a/src/ui/tests/components/data-view.test.tsx b/src/ui/tests/components/data-view.test.tsx
new file mode 100644
index 000000000..c572e208f
--- /dev/null
+++ b/src/ui/tests/components/data-view.test.tsx
@@ -0,0 +1,59 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { cleanup, fireEvent, render, screen } from "@testing-library/react";
+import { DataView } from "@/components/data-view";
+
+afterEach(cleanup);
+
+const items = [
+  { id: "a", name: "alpha" },
+  { id: "b", name: "beta" },
+];
+
+function renderView(view: "grid" | "list", onRowClick = vi.fn()) {
+  return render(
+    <DataView
+      items={items}
+      view={view}
+      density="compact"
+      getKey={(item) => item.id}
+      renderCard={(item) => <div>card {item.name}</div>}
+      columns={{ base: 1, md: 2 }}
+      listColumns={[
+        { key: "name", header: "Name", width: "1fr", cell: (i) => i.name },
+      ]}
+      onRowClick={onRowClick}
+      empty={<span>nothing</span>}
+    />,
+  );
+}
+
+describe("DataView", () => {
+  it("renders cards in grid mode", () => {
+    renderView("grid");
+    expect(screen.getByText("card alpha")).toBeTruthy();
+    expect(screen.queryByText("Name")).toBeNull();
+  });
+
+  it("renders a header and clickable rows in list mode", () => {
+    const onRowClick = vi.fn();
+    renderView("list", onRowClick);
+    expect(screen.getByText("Name")).toBeTruthy();
+    fireEvent.click(screen.getByText("beta"));
+    expect(onRowClick).toHaveBeenCalledWith(items[1]);
+  });
+
+  it("shows the empty state with no items", () => {
+    render(
+      <DataView
+        items={[]}
+        view="grid"
+        getKey={() => ""}
+        renderCard={() => null}
+        columns={{}}
+        listColumns={[]}
+        empty={<span>nothing</span>}
+      />,
+    );
+    expect(screen.getByText("nothing")).toBeTruthy();
+  });
+});
diff --git a/src/ui/tests/components/list-kit.test.tsx b/src/ui/tests/components/list-kit.test.tsx
new file mode 100644
index 000000000..25be6d902
--- /dev/null
+++ b/src/ui/tests/components/list-kit.test.tsx
@@ -0,0 +1,153 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { cleanup, fireEvent, render, screen } from "@testing-library/react";
+
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({ t: (key: string) => key }),
+}));
+
+import {
+  AddButton,
+  FormFooter,
+  ListRow,
+  ListRowAction,
+  ListRowFolder,
+  PanelList,
+} from "@/components/list-kit";
+
+afterEach(cleanup);
+
+describe("ListRow", () => {
+  it("tints odd rows and marks the selected one", () => {
+    const { container, rerender } = render(<ListRow title="a" stripe={1} />);
+    const row = container.firstElementChild as HTMLElement;
+    expect(row.className).toContain("bg-muted/15");
+
+    rerender(<ListRow title="a" stripe={1} selected />);
+    expect(row.className).toContain("bg-accent-brand/10");
+    expect(row.getAttribute("data-selected")).toBe("true");
+  });
+
+  it("clicks and opens with Enter, but tray clicks do not reach the row", () => {
+    const onClick = vi.fn();
+    const onAction = vi.fn();
+    render(
+      <ListRow
+        title="web"
+        onClick={onClick}
+        actions={
+          <ListRowAction label="Edit" onClick={onAction}>
+            <span />
+          </ListRowAction>
+        }
+      />,
+    );
+    const row = screen.getByRole("button", { name: /web/ });
+    fireEvent.keyDown(row, { key: "Enter" });
+    expect(onClick).toHaveBeenCalledTimes(1);
+
+    fireEvent.click(screen.getByLabelText("Edit"));
+    expect(onAction).toHaveBeenCalledTimes(1);
+    expect(onClick).toHaveBeenCalledTimes(1);
+  });
+
+  it("keeps the tray visible while active", () => {
+    render(
+      <ListRow
+        title="a"
+        active
+        actions={
+          <ListRowAction label="More">
+            <span />
+          </ListRowAction>
+        }
+      />,
+    );
+    const tray = screen.getByLabelText("More").parentElement as HTMLElement;
+    expect(tray.className).toMatch(/(^| )flex( |$)/);
+    expect(tray.className).not.toContain("hidden");
+  });
+});
+
+describe("ListRowFolder", () => {
+  it("toggles and shows the empty text when open with no items", () => {
+    const onToggle = vi.fn();
+    const { rerender } = render(
+      <ListRowFolder
+        name="Prod"
+        count={0}
+        open={false}
+        onToggle={onToggle}
+        emptyText="Nothing here"
+      />,
+    );
+    fireEvent.click(screen.getByRole("button", { name: /Prod/ }));
+    expect(onToggle).toHaveBeenCalled();
+    expect(screen.queryByText("Nothing here")).toBeNull();
+
+    rerender(
+      <ListRowFolder
+        name="Prod"
+        count={0}
+        open
+        onToggle={onToggle}
+        emptyText="Nothing here"
+      />,
+    );
+    expect(screen.getByText("Nothing here")).toBeTruthy();
+  });
+});
+
+describe("PanelList", () => {
+  it("shows the empty slot only without rows", () => {
+    const { rerender } = render(
+      <PanelList empty={<span>empty</span>}>{[false, null]}</PanelList>,
+    );
+    expect(screen.getByText("empty")).toBeTruthy();
+    rerender(
+      <PanelList empty={<span>empty</span>}>
+        <ListRow title="row" />
+      </PanelList>,
+    );
+    expect(screen.queryByText("empty")).toBeNull();
+  });
+});
+
+describe("AddButton", () => {
+  it("defaults its label and hides it when compact", () => {
+    const { rerender } = render(<AddButton />);
+    expect(screen.getByText("common.new")).toBeTruthy();
+    rerender(<AddButton compact label="Add host" />);
+    expect(screen.queryByText("Add host")).toBeNull();
+    expect(screen.getByLabelText("Add host")).toBeTruthy();
+  });
+});
+
+describe("FormFooter", () => {
+  it("shows the unsaved note, delete and a saving state", () => {
+    const onSave = vi.fn();
+    const onDelete = vi.fn();
+    const { rerender } = render(
+      <FormFooter
+        dirty
+        onSave={onSave}
+        onCancel={() => {}}
+        onDelete={onDelete}
+      />,
+    );
+    expect(screen.getByText("common.unsavedChanges")).toBeTruthy();
+    fireEvent.click(screen.getByText("common.delete"));
+    expect(onDelete).toHaveBeenCalled();
+    fireEvent.click(screen.getByText("common.save"));
+    expect(onSave).toHaveBeenCalled();
+
+    rerender(<FormFooter saving onSave={onSave} />);
+    const saving = screen.getByText("common.saving").closest("button");
+    expect(saving?.disabled).toBe(true);
+  });
+
+  it("lets a status replace the unsaved note", () => {
+    render(<FormFooter dirty status="2 errors" onSave={() => {}} />);
+    expect(screen.getByText("2 errors")).toBeTruthy();
+    expect(screen.queryByText("common.unsavedChanges")).toBeNull();
+  });
+});
diff --git a/src/ui/tests/components/panel-layout.test.tsx b/src/ui/tests/components/panel-layout.test.tsx
new file mode 100644
index 000000000..905aba277
--- /dev/null
+++ b/src/ui/tests/components/panel-layout.test.tsx
@@ -0,0 +1,121 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { cleanup, fireEvent, render, screen } from "@testing-library/react";
+
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({ t: (key: string) => key }),
+}));
+
+import {
+  Facts,
+  PanelSearch,
+  PanelShell,
+  Segmented,
+  ViewToggle,
+} from "@/components/panel-layout";
+
+afterEach(cleanup);
+
+describe("PanelSearch", () => {
+  it("clears with the button and with Esc", () => {
+    const onChange = vi.fn();
+    const { rerender } = render(
+      <PanelSearch value="web" onChange={onChange} />,
+    );
+    fireEvent.click(screen.getByLabelText("panel.clearSearch"));
+    expect(onChange).toHaveBeenLastCalledWith("");
+
+    rerender(<PanelSearch value="db" onChange={onChange} />);
+    fireEvent.keyDown(screen.getByRole("textbox"), { key: "Escape" });
+    expect(onChange).toHaveBeenCalledTimes(2);
+  });
+
+  it("hides the clear button while empty", () => {
+    render(<PanelSearch value="" onChange={() => {}} />);
+    expect(screen.queryByLabelText("panel.clearSearch")).toBeNull();
+  });
+});
+
+describe("Segmented", () => {
+  it("marks the active option and reports a pick", () => {
+    const onChange = vi.fn();
+    render(
+      <Segmented
+        value="hosts"
+        onChange={onChange}
+        options={[
+          { value: "hosts", label: "Hosts", count: 3 },
+          { value: "credentials", label: "Credentials" },
+        ]}
+      />,
+    );
+    const radios = screen.getAllByRole("radio");
+    expect(radios[0].getAttribute("aria-checked")).toBe("true");
+    fireEvent.click(radios[1]);
+    expect(onChange).toHaveBeenCalledWith("credentials");
+  });
+});
+
+describe("ViewToggle", () => {
+  it("switches view and density", () => {
+    const onView = vi.fn();
+    const onDensity = vi.fn();
+    render(
+      <ViewToggle
+        view="grid"
+        onView={onView}
+        density="comfortable"
+        onDensity={onDensity}
+      />,
+    );
+    fireEvent.click(screen.getByLabelText("panel.listView"));
+    expect(onView).toHaveBeenCalledWith("list");
+    fireEvent.click(screen.getByLabelText("panel.compactRows"));
+    expect(onDensity).toHaveBeenCalledWith("compact");
+  });
+});
+
+describe("Facts", () => {
+  it("puts a rule only between facts", () => {
+    const { container } = render(
+      <Facts>
+        <span>one</span>
+        {null}
+        <span>two</span>
+      </Facts>,
+    );
+    expect(container.querySelectorAll("[aria-hidden]")).toHaveLength(1);
+  });
+
+  it("separates facts passed inside a fragment", () => {
+    const { container } = render(
+      <Facts>
+        <>
+          <span>Termix</span>
+          {false}
+          <span>v1.0.0</span>
+          <span>Monitoring</span>
+        </>
+      </Facts>,
+    );
+    expect(container.querySelectorAll("[aria-hidden]")).toHaveLength(2);
+  });
+});
+
+describe("PanelShell", () => {
+  it("draws the header, toolbar and footer", () => {
+    render(
+      <PanelShell
+        title="Docker"
+        status="2 running"
+        toolbar={<span>toolbar</span>}
+        footer={<span>footer</span>}
+      >
+        body
+      </PanelShell>,
+    );
+    expect(screen.getByText("Docker")).toBeTruthy();
+    expect(screen.getByText("2 running")).toBeTruthy();
+    expect(screen.getByText("toolbar")).toBeTruthy();
+    expect(screen.getByText("footer")).toBeTruthy();
+  });
+});
diff --git a/src/ui/tests/components/surface/surface-scope.test.tsx b/src/ui/tests/components/surface/surface-scope.test.tsx
new file mode 100644
index 000000000..6ebcb7228
--- /dev/null
+++ b/src/ui/tests/components/surface/surface-scope.test.tsx
@@ -0,0 +1,218 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import {
+  act,
+  cleanup,
+  fireEvent,
+  render,
+  screen,
+} from "@testing-library/react";
+import { useState } from "react";
+
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({ t: (key: string) => key }),
+}));
+
+import {
+  InlineView,
+  PanePrompt,
+  SurfaceScope,
+  useConfirm,
+  type ConfirmOptions,
+} from "@/components/surface/surface-scope";
+
+afterEach(cleanup);
+
+function Asker({
+  options,
+  onResult,
+}: {
+  options: ConfirmOptions;
+  onResult: (ok: boolean) => void;
+}) {
+  const confirm = useConfirm();
+  return (
+    <button onClick={() => void confirm(options).then(onResult)}>ask</button>
+  );
+}
+
+describe("useConfirm", () => {
+  it("resolves true when confirmed with Enter", async () => {
+    const onResult = vi.fn();
+    render(
+      <SurfaceScope>
+        <Asker options={{ title: "Delete web-01?" }} onResult={onResult} />
+      </SurfaceScope>,
+    );
+    fireEvent.click(screen.getByText("ask"));
+    expect(screen.getByRole("alertdialog")).toBeTruthy();
+    expect(screen.getByText("Delete web-01?")).toBeTruthy();
+
+    await act(async () => {
+      fireEvent.keyDown(window, { key: "Enter" });
+    });
+    expect(onResult).toHaveBeenCalledWith(true);
+    expect(screen.queryByRole("alertdialog")).toBeNull();
+  });
+
+  it("resolves false on Esc and on Cancel", async () => {
+    const onResult = vi.fn();
+    render(
+      <SurfaceScope>
+        <Asker options={{ title: "Remove?" }} onResult={onResult} />
+      </SurfaceScope>,
+    );
+    fireEvent.click(screen.getByText("ask"));
+    await act(async () => {
+      fireEvent.keyDown(window, { key: "Escape" });
+    });
+    expect(onResult).toHaveBeenLastCalledWith(false);
+
+    fireEvent.click(screen.getByText("ask"));
+    await act(async () => {
+      fireEvent.click(screen.getByText("common.cancel"));
+    });
+    expect(onResult).toHaveBeenCalledTimes(2);
+    expect(onResult).toHaveBeenLastCalledWith(false);
+  });
+
+  it("stops Enter from reaching anything listening underneath", async () => {
+    const underneath = vi.fn();
+    window.addEventListener("keydown", underneath);
+    render(
+      <SurfaceScope>
+        <Asker options={{ title: "Close?" }} onResult={() => {}} />
+      </SurfaceScope>,
+    );
+    fireEvent.click(screen.getByText("ask"));
+    await act(async () => {
+      fireEvent.keyDown(window, { key: "Enter" });
+    });
+    expect(underneath).not.toHaveBeenCalled();
+    window.removeEventListener("keydown", underneath);
+  });
+
+  it("uses a neutral confirm button when not destructive", () => {
+    render(
+      <SurfaceScope>
+        <Asker
+          options={{ title: "Apply?", destructive: false }}
+          onResult={() => {}}
+        />
+      </SurfaceScope>,
+    );
+    fireEvent.click(screen.getByText("ask"));
+    expect(screen.getByText("common.confirm")).toBeTruthy();
+  });
+});
+
+function Editor({ onBeforeClose }: { onBeforeClose?: () => boolean }) {
+  const [open, setOpen] = useState(false);
+  const [nested, setNested] = useState(false);
+  return (
+    <>
+      <button onClick={() => setOpen(true)}>open</button>
+      <InlineView
+        open={open}
+        onOpenChange={setOpen}
+        title="Edit folder"
+        onBeforeClose={onBeforeClose}
+      >
+        <span>folder form</span>
+        <button onClick={() => setNested(true)}>nested</button>
+        <InlineView
+          open={nested}
+          onOpenChange={setNested}
+          title="Pick icon"
+          width="wide"
+        >
+          <span>icon grid</span>
+        </InlineView>
+      </InlineView>
+    </>
+  );
+}
+
+describe("InlineView", () => {
+  it("takes over the surface and reports the widening", () => {
+    const onEditingChange = vi.fn();
+    render(
+      <SurfaceScope onEditingChange={onEditingChange}>
+        <Editor />
+      </SurfaceScope>,
+    );
+    expect(onEditingChange).toHaveBeenLastCalledWith(false);
+    fireEvent.click(screen.getByText("open"));
+    expect(screen.getByText("folder form")).toBeTruthy();
+    expect(onEditingChange).toHaveBeenLastCalledWith(true);
+
+    fireEvent.click(screen.getByText("nested"));
+    expect(screen.getByText("icon grid")).toBeTruthy();
+    expect(onEditingChange).toHaveBeenLastCalledWith("wide");
+  });
+
+  it("goes back one view at a time", async () => {
+    render(
+      <SurfaceScope>
+        <Editor />
+      </SurfaceScope>,
+    );
+    fireEvent.click(screen.getByText("open"));
+    fireEvent.click(screen.getByText("nested"));
+    const backs = screen.getAllByLabelText("common.back");
+    await act(async () => {
+      fireEvent.click(backs[backs.length - 1]);
+    });
+    expect(screen.queryByText("icon grid")).toBeNull();
+    expect(screen.getByText("folder form")).toBeTruthy();
+  });
+
+  it("stays open when the close guard says no", async () => {
+    render(
+      <SurfaceScope>
+        <Editor onBeforeClose={() => false} />
+      </SurfaceScope>,
+    );
+    fireEvent.click(screen.getByText("open"));
+    await act(async () => {
+      fireEvent.click(screen.getByLabelText("common.back"));
+    });
+    expect(screen.getByText("folder form")).toBeTruthy();
+  });
+});
+
+describe("PanePrompt", () => {
+  it("dims the pane by default and closes on a backdrop click", () => {
+    const onCancel = vi.fn();
+    render(
+      <PanePrompt open title="Title" onCancel={onCancel}>
+        <p>body</p>
+      </PanePrompt>,
+    );
+    const card = screen.getByRole("dialog", { name: "Title" });
+    const layer = card.parentElement!;
+    expect(layer.className).toContain("z-50");
+    fireEvent.mouseDown(card);
+    expect(onCancel).not.toHaveBeenCalled();
+    fireEvent.mouseDown(layer);
+    expect(onCancel).toHaveBeenCalledOnce();
+  });
+
+  it("covers a connecting surface with an opaque layer", () => {
+    render(
+      <PanePrompt
+        open
+        title="Login"
+        layer="connection"
+        backgroundColor="rgb(1, 2, 3)"
+      />,
+    );
+    const layer = screen.getByRole("dialog", { name: "Login" }).parentElement!;
+    expect(layer.className).toContain("z-500");
+    expect(layer.style.backgroundColor).toBe("rgb(1, 2, 3)");
+  });
+
+  it("renders nothing when closed", () => {
+    render(<PanePrompt open={false} title="Hidden" />);
+    expect(screen.queryByRole("dialog")).toBeNull();
+  });
+});
diff --git a/src/ui/tests/sidebar/tab-strip-scroll.test.tsx b/src/ui/tests/components/tab-strip.test.tsx
similarity index 97%
rename from src/ui/tests/sidebar/tab-strip-scroll.test.tsx
rename to src/ui/tests/components/tab-strip.test.tsx
index ea99c5d5f..31434b58b 100644
--- a/src/ui/tests/sidebar/tab-strip-scroll.test.tsx
+++ b/src/ui/tests/components/tab-strip.test.tsx
@@ -6,7 +6,7 @@ import {
   screen,
 } from "@testing-library/react";
 import { afterEach, expect, it, vi } from "vitest";
-import { TabStrip } from "@/sidebar/HostManagerTabs";
+import { TabStrip } from "@/components/tab-strip";
 
 vi.mock("react-i18next", () => ({
   useTranslation: () => ({ t: (key: string) => key }),
diff --git a/src/ui/tests/components/version-badge.test.tsx b/src/ui/tests/components/version-badge.test.tsx
index 3dbb01571..3be80e323 100644
--- a/src/ui/tests/components/version-badge.test.tsx
+++ b/src/ui/tests/components/version-badge.test.tsx
@@ -29,12 +29,12 @@ describe("VersionBadge", () => {
     expect(link.textContent).toBe(UPDATE_TEXT);
   });
 
-  it("keeps the yellow update treatment on the link", () => {
+  it("keeps the warning update treatment on the link", () => {
     render(<VersionBadge status="requires_update" releaseUrl={RELEASE_URL} />);
 
     const className = screen.getByRole("link").className;
-    expect(className).toContain("bg-yellow-500/20");
-    expect(className).toContain("text-yellow-400");
+    expect(className).toContain("bg-warning/20");
+    expect(className).toContain("text-warning");
     expect(className).toContain("hover:underline");
   });
 
@@ -74,7 +74,7 @@ describe("VersionBadge", () => {
 
     const className = screen.getByRole("link").className;
     expect(className).toContain("w-fit");
-    expect(className).toContain("bg-yellow-500/20");
+    expect(className).toContain("bg-warning/20");
   });
 
   it("applies the className on the inert span too", () => {
diff --git a/src/ui/tests/contexts/UiPreferencesContext.test.tsx b/src/ui/tests/contexts/UiPreferencesContext.test.tsx
index 96765e9ab..31f806cc3 100644
--- a/src/ui/tests/contexts/UiPreferencesContext.test.tsx
+++ b/src/ui/tests/contexts/UiPreferencesContext.test.tsx
@@ -4,7 +4,7 @@ import type { ReactNode } from "react";
 
 const api = vi.hoisted(() => ({
   getUiPreferences: vi.fn(),
-  saveUiPreferences: vi.fn(async () => {}),
+  saveUiPreferences: vi.fn(async (_body: unknown) => {}),
   getUserPreferences: vi.fn(async () => ({ storageMode: "local" })),
 }));
 
@@ -199,3 +199,64 @@ describe("UiPreferencesProvider", () => {
     expect(result.current?.preferences.overrides).toEqual({});
   });
 });
+
+describe("onboarding state", () => {
+  it("uses preferences handed in by the boot gate without fetching", () => {
+    const initial = { ...defaultUiPreferences(), preset: "advanced" as const };
+    const { result } = renderHook(() => useUiPreferencesContext(), {
+      wrapper: ({ children }: { children: ReactNode }) => (
+        <UiPreferencesProvider initial={initial}>
+          {children}
+        </UiPreferencesProvider>
+      ),
+    });
+    expect(result.current?.loaded).toBe(true);
+    expect(result.current?.preferences.preset).toBe("advanced");
+    expect(api.getUiPreferences).not.toHaveBeenCalled();
+  });
+
+  it("merges seen steps and sends them right away on flushNow, even in local mode", async () => {
+    const { result } = renderHook(() => useUiPreferencesContext(), { wrapper });
+    await waitFor(() => expect(result.current?.loaded).toBe(true));
+
+    act(() => {
+      result.current?.markOnboardingSeen({ welcome: 1, "rd:guacd": 2 });
+      result.current?.markOnboardingSeen(
+        { "rd:guacd": 1, done: 1 },
+        { completed: true, skipped: false },
+      );
+    });
+    expect(result.current?.preferences.onboarding.seen).toEqual({
+      welcome: 1,
+      "rd:guacd": 2,
+      done: 1,
+    });
+    expect(result.current?.preferences.onboarding.completedAt).toBeTruthy();
+
+    await act(async () => {
+      await result.current?.flushNow();
+    });
+    expect(api.saveUiPreferences).toHaveBeenCalledTimes(1);
+    const body = api.saveUiPreferences.mock.calls[0][0] as {
+      onboarding: { seen: Record<string, number>; skipped: boolean };
+    };
+    expect(body.onboarding.seen).toEqual({
+      welcome: 1,
+      "rd:guacd": 2,
+      done: 1,
+    });
+    expect(body.onboarding.skipped).toBe(false);
+  });
+
+  it("sends a queued change when the provider unmounts", async () => {
+    const { result, unmount } = renderHook(() => useUiPreferencesContext(), {
+      wrapper,
+    });
+    await waitFor(() => expect(result.current?.loaded).toBe(true));
+    act(() => {
+      result.current?.markOnboardingSeen({ appearance: 1 });
+    });
+    unmount();
+    await waitFor(() => expect(api.saveUiPreferences).toHaveBeenCalled());
+  });
+});
diff --git a/src/ui/tests/dashboard/HostStatusCard.test.tsx b/src/ui/tests/dashboard/HostStatusCard.test.tsx
index 03aed5817..78e458d4d 100644
--- a/src/ui/tests/dashboard/HostStatusCard.test.tsx
+++ b/src/ui/tests/dashboard/HostStatusCard.test.tsx
@@ -27,16 +27,17 @@ describe("HostStatusCard", () => {
 
     const name = screen.getByText(host.name);
     const ip = screen.getByText(host.ip);
-    const identity = name.parentElement?.parentElement;
-    const row = identity?.parentElement?.parentElement;
-    const metrics = row?.lastElementChild;
+    const row = name.closest("[role=button]");
+    const badge = screen.getByText("hosts.status.offline");
 
     expect(name.className).toContain("truncate");
     expect(name.getAttribute("title")).toBe(host.name);
     expect(ip.className).toContain("truncate");
     expect(ip.getAttribute("title")).toBe(host.ip);
-    expect(identity?.className).toContain("min-w-0");
-    expect(metrics?.className).toContain("shrink-0");
+    expect(row?.firstElementChild?.nextElementSibling?.className).toContain(
+      "min-w-0",
+    );
+    expect(badge.className).toContain("shrink-0");
   });
 });
 
diff --git a/src/ui/tests/dashboard/HostStatusMobile.test.tsx b/src/ui/tests/dashboard/HostStatusMobile.test.tsx
new file mode 100644
index 000000000..1dc9233e2
--- /dev/null
+++ b/src/ui/tests/dashboard/HostStatusMobile.test.tsx
@@ -0,0 +1,33 @@
+import { cleanup, render, screen } from "@testing-library/react";
+import { afterEach, describe, expect, it, vi } from "vitest";
+
+const mobile = vi.hoisted(() => ({ value: true }));
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({ t: (key: string) => key }),
+}));
+vi.mock("@/hooks/use-mobile", () => ({ useIsMobile: () => mobile.value }));
+vi.mock("@/shell/ActionSlot", async (importOriginal) => ({
+  ...(await importOriginal<typeof import("@/shell/ActionSlot")>()),
+  ComponentSlot: ({ slotId }: { slotId: string }) => <span>{slotId}</span>,
+}));
+
+import { HostStatusCard } from "@/dashboard/DashboardTab";
+import type { Host } from "@/types/ui-types";
+
+afterEach(cleanup);
+
+const host = { id: "1", name: "web", ip: "10.0.0.1", online: true } as Host;
+
+describe("HostStatusCard on a phone", () => {
+  it("leaves out plugin metrics so the host name has room", () => {
+    mobile.value = true;
+    render(<HostStatusCard hosts={[host]} onOpenTab={() => {}} />);
+    expect(screen.queryByText("dashboard.hostRow")).toBeNull();
+  });
+
+  it("keeps them on a wide screen", () => {
+    mobile.value = false;
+    render(<HostStatusCard hosts={[host]} onOpenTab={() => {}} />);
+    expect(screen.getByText("dashboard.hostRow")).toBeTruthy();
+  });
+});
diff --git a/src/ui/tests/dashboard/quarter-borders.test.ts b/src/ui/tests/dashboard/quarter-borders.test.ts
new file mode 100644
index 000000000..09b1db43e
--- /dev/null
+++ b/src/ui/tests/dashboard/quarter-borders.test.ts
@@ -0,0 +1,20 @@
+import { describe, expect, it } from "vitest";
+import { quarterBorders } from "@/dashboard/quarter-borders";
+
+describe("quarterBorders", () => {
+  it("draws a cross between four cells", () => {
+    expect([0, 1, 2, 3].map((i) => quarterBorders(i, 4))).toEqual([
+      "border-border border-b sm:border-r",
+      "border-border border-b",
+      "border-border border-b sm:border-b-0 sm:border-r",
+      "border-border sm:border-b-0",
+    ]);
+  });
+
+  it("stretches an odd last cell across the row", () => {
+    expect(quarterBorders(2, 3)).toBe(
+      "border-border sm:border-b-0 sm:col-span-2",
+    );
+    expect(quarterBorders(1, 3)).toBe("border-border border-b");
+  });
+});
diff --git a/src/ui/tests/hooks/use-mobile.test.ts b/src/ui/tests/hooks/use-mobile.test.ts
index 42cc4a146..8ee0f7895 100644
--- a/src/ui/tests/hooks/use-mobile.test.ts
+++ b/src/ui/tests/hooks/use-mobile.test.ts
@@ -22,6 +22,7 @@ function setViewport(width: number) {
 
 afterEach(() => {
   vi.restoreAllMocks();
+  delete (window as { electronAPI?: unknown }).electronAPI;
 });
 
 describe("useIsMobile", () => {
@@ -42,4 +43,11 @@ describe("useIsMobile", () => {
     const { result } = renderHook(() => useIsMobile());
     expect(result.current).toBe(false);
   });
+
+  it("keeps the desktop layout in the desktop app, however narrow", () => {
+    setViewport(500);
+    (window as { electronAPI?: unknown }).electronAPI = { isElectron: true };
+    const { result } = renderHook(() => useIsMobile());
+    expect(result.current).toBe(false);
+  });
 });
diff --git a/src/ui/tests/lib/docs.test.ts b/src/ui/tests/lib/docs.test.ts
new file mode 100644
index 000000000..8301a9211
--- /dev/null
+++ b/src/ui/tests/lib/docs.test.ts
@@ -0,0 +1,18 @@
+import { describe, expect, it } from "vitest";
+import { DOCS_PAGES, DOCS_URL, docsUrl } from "@/lib/docs";
+
+describe("docsUrl", () => {
+  it("builds full links to core docs pages", () => {
+    expect(docsUrl()).toBe(`${DOCS_URL}/`);
+    expect(docsUrl("hosts")).toBe(`${DOCS_URL}/guide/hosts`);
+    expect(docsUrl("portKnocking")).toBe(
+      `${DOCS_URL}/guide/hosts#port-knocking`,
+    );
+  });
+
+  it("keeps every page a relative path", () => {
+    for (const path of Object.values(DOCS_PAGES)) {
+      expect(path).not.toMatch(/^\/|^https?:/);
+    }
+  });
+});
diff --git a/src/ui/tests/lib/embedded-frame.test.ts b/src/ui/tests/lib/embedded-frame.test.ts
new file mode 100644
index 000000000..0ed596678
--- /dev/null
+++ b/src/ui/tests/lib/embedded-frame.test.ts
@@ -0,0 +1,43 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import {
+  isEmbeddedAuthFrame,
+  isInElectronWebView,
+  isInMobileWebView,
+} from "@/lib/embedded-frame";
+
+type TestWindow = Window & {
+  ReactNativeWebView?: unknown;
+  IS_ELECTRON_WEBVIEW?: boolean;
+};
+
+afterEach(() => {
+  vi.restoreAllMocks();
+  delete (window as TestWindow).ReactNativeWebView;
+  delete (window as TestWindow).IS_ELECTRON_WEBVIEW;
+});
+
+describe("embedded frame detection", () => {
+  it("is false for a normal browser tab", () => {
+    expect(isInMobileWebView()).toBe(false);
+    expect(isInElectronWebView()).toBe(false);
+    expect(isEmbeddedAuthFrame()).toBe(false);
+  });
+
+  it("spots the mobile app by user agent or bridge", () => {
+    vi.spyOn(navigator, "userAgent", "get").mockReturnValue(
+      "Mozilla/5.0 Termix-Mobile/Android",
+    );
+    expect(isInMobileWebView()).toBe(true);
+    vi.restoreAllMocks();
+    (window as TestWindow).ReactNativeWebView = { postMessage() {} };
+    expect(isInMobileWebView()).toBe(true);
+    expect(isInElectronWebView()).toBe(false);
+    expect(isEmbeddedAuthFrame()).toBe(true);
+  });
+
+  it("spots the desktop link window by flag", () => {
+    (window as TestWindow).IS_ELECTRON_WEBVIEW = true;
+    expect(isInElectronWebView()).toBe(true);
+    expect(isEmbeddedAuthFrame()).toBe(true);
+  });
+});
diff --git a/src/ui/tests/lib/host-key-fingerprint.test.ts b/src/ui/tests/lib/host-key-fingerprint.test.ts
new file mode 100644
index 000000000..330c3c66e
--- /dev/null
+++ b/src/ui/tests/lib/host-key-fingerprint.test.ts
@@ -0,0 +1,17 @@
+import { describe, expect, it } from "vitest";
+import { hostKeyFingerprint } from "@/lib/host-key-fingerprint";
+
+describe("hostKeyFingerprint", () => {
+  it("matches ssh-keygen -lf for an ed25519 key", () => {
+    const hex =
+      "0000000b7373682d656432353531390000002068baf48c33774769fc29e545d108119da4c6186dffb0b00fe887316935630379";
+    expect(hostKeyFingerprint(hex)).toBe(
+      "SHA256:4AQQyjAyA8CDb9y/vb1q02wyz6f8tagQ4qK41tmJ/d8",
+    );
+  });
+
+  it("leaves values that are not hex alone", () => {
+    expect(hostKeyFingerprint("")).toBe("");
+    expect(hostKeyFingerprint("SHA256:abc")).toBe("SHA256:abc");
+  });
+});
diff --git a/src/ui/tests/lib/issue-url.test.ts b/src/ui/tests/lib/issue-url.test.ts
new file mode 100644
index 000000000..98396db9b
--- /dev/null
+++ b/src/ui/tests/lib/issue-url.test.ts
@@ -0,0 +1,118 @@
+import { describe, expect, it } from "vitest";
+import {
+  buildIssueUrl,
+  describeEnvironment,
+  normalizeGitHubRepo,
+  reportBetaFeedbackUrl,
+  reportCoreIssueUrl,
+} from "@/lib/issue-url";
+
+const CHROME_WIN =
+  "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36";
+const SAFARI_MAC =
+  "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15";
+const FIREFOX_LINUX =
+  "Mozilla/5.0 (X11; Linux x86_64; rv:130.0) Gecko/20100101 Firefox/130.0";
+
+describe("normalizeGitHubRepo", () => {
+  it("strips .git and trailing slashes", () => {
+    expect(normalizeGitHubRepo(" https://github.com/a/b.git ")).toBe(
+      "https://github.com/a/b",
+    );
+    expect(normalizeGitHubRepo("https://github.com/a/b/")).toBe(
+      "https://github.com/a/b",
+    );
+  });
+
+  it("rejects anything that is not a GitHub repo", () => {
+    expect(normalizeGitHubRepo("https://gitlab.com/a/b")).toBeNull();
+    expect(normalizeGitHubRepo("https://github.com/a")).toBeNull();
+    expect(normalizeGitHubRepo(undefined)).toBeNull();
+  });
+});
+
+describe("buildIssueUrl", () => {
+  it("sets the template and skips empty fields", () => {
+    const url = new URL(
+      buildIssueUrl("https://github.com/a/b", {
+        template: "bug_report.yml",
+        fields: { "termix-version": "26.10.0", logs: "", other: undefined },
+      }),
+    );
+    expect(url.pathname).toBe("/a/b/issues/new");
+    expect(url.searchParams.get("template")).toBe("bug_report.yml");
+    expect(url.searchParams.get("termix-version")).toBe("26.10.0");
+    expect(url.searchParams.has("logs")).toBe(false);
+    expect(url.searchParams.has("other")).toBe(false);
+  });
+
+  it("encodes values safely", () => {
+    const url = new URL(
+      buildIssueUrl("https://github.com/a/b", {
+        template: "bug_report.yml",
+        fields: { environment: "a & b\nc=d" },
+      }),
+    );
+    expect(url.searchParams.get("environment")).toBe("a & b\nc=d");
+  });
+
+  it("cuts long logs to keep the URL short", () => {
+    const url = buildIssueUrl("https://github.com/a/b", {
+      template: "bug_report.yml",
+      fields: { logs: "x".repeat(20000) },
+    });
+    expect(url.length).toBeLessThanOrEqual(7500);
+    expect(new URL(url).searchParams.get("logs")).toMatch(/\(cut\)$/);
+  });
+});
+
+describe("describeEnvironment", () => {
+  it("names the browser and OS on the web", () => {
+    expect(describeEnvironment(CHROME_WIN, false)).toBe(
+      "Web, Chrome 141 on Windows",
+    );
+    expect(describeEnvironment(SAFARI_MAC, false)).toBe(
+      "Web, Safari 18 on macOS",
+    );
+    expect(describeEnvironment(FIREFOX_LINUX, false)).toBe(
+      "Web, Firefox 130 on Linux",
+    );
+  });
+
+  it("names the desktop app", () => {
+    expect(describeEnvironment(CHROME_WIN, true)).toBe(
+      "Desktop app on Windows",
+    );
+  });
+});
+
+describe("reportCoreIssueUrl", () => {
+  it("points at the core repo with the version filled in", () => {
+    const url = new URL(reportCoreIssueUrl("26.10.0"));
+    expect(url.pathname).toBe("/Termix-SSH/Termix/issues/new");
+    expect(url.searchParams.get("template")).toBe("bug_report.yml");
+    expect(url.searchParams.get("termix-version")).toBe("26.10.0");
+    expect(url.searchParams.get("environment")).toBeTruthy();
+  });
+});
+
+describe("reportBetaFeedbackUrl", () => {
+  it("uses the beta form and lists plugins on a beta", () => {
+    const url = new URL(
+      reportBetaFeedbackUrl("26.11.0-beta.2", [
+        { id: "docker", version: "1.2.0-beta.1" },
+        { id: "tunnels", version: "1.1.0-beta.3" },
+      ]),
+    );
+    expect(url.searchParams.get("template")).toBe("beta_feedback.yml");
+    expect(url.searchParams.get("termix-version")).toBe("26.11.0-beta.2");
+    expect(url.searchParams.get("beta-plugins")).toBe(
+      "docker 1.2.0-beta.1\ntunnels 1.1.0-beta.3",
+    );
+  });
+
+  it("leaves the plugin list out when none are on a beta", () => {
+    const url = new URL(reportBetaFeedbackUrl("26.11.0-beta.2"));
+    expect(url.searchParams.has("beta-plugins")).toBe(false);
+  });
+});
diff --git a/src/ui/tests/lib/plugin-transport.test.ts b/src/ui/tests/lib/plugin-transport.test.ts
index b125d2c8f..15f665d3c 100644
--- a/src/ui/tests/lib/plugin-transport.test.ts
+++ b/src/ui/tests/lib/plugin-transport.test.ts
@@ -1,15 +1,27 @@
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 
 const state = vi.hoisted(() => ({ electron: false }));
+const axiosMethods = vi.hoisted(() => ({
+  get: vi.fn(),
+  postForm: vi.fn(),
+}));
 
 vi.mock("@/main-axios", () => ({
-  authApi: { defaults: { baseURL: "http://server:8080/" } },
+  authApi: {
+    defaults: { baseURL: "http://server:8080/" },
+    ...axiosMethods,
+  },
   createRemoteOriginApiInstance: vi.fn(),
 }));
 vi.mock("@/lib/electron", () => ({ isElectron: () => state.electron }));
 vi.mock("@/lib/device-id", () => ({ getDeviceId: () => "device-1" }));
+vi.mock("@/lib/base-path", () => ({ getBasePath: () => "" }));
 
-import { pluginFetch } from "@/lib/plugin-transport";
+import {
+  createPluginApi,
+  pluginFetch,
+  pluginWsUrl,
+} from "@/lib/plugin-transport";
 
 const fetchMock = vi.fn(async () => new Response("ok"));
 
@@ -61,3 +73,57 @@ describe("pluginFetch", () => {
     expect(headers.get("authorization")).toBe("Bearer token-1");
   });
 });
+
+describe("createPluginApi", () => {
+  it("puts the plugin's mount point in front of request and form paths", () => {
+    const api = createPluginApi("file-manager");
+    const form = new FormData();
+    api.get("/listFiles");
+    api.postForm("uploadFileStream", form);
+    expect(axiosMethods.get).toHaveBeenCalledWith(
+      "/plugin-api/file-manager/listFiles",
+    );
+    expect(axiosMethods.postForm).toHaveBeenCalledWith(
+      "/plugin-api/file-manager/uploadFileStream",
+      form,
+    );
+  });
+});
+
+describe("pluginWsUrl in the browser", () => {
+  it("sends a socket ticket, since the cookie can fail behind a proxy", async () => {
+    fetchMock.mockResolvedValueOnce(
+      new Response(JSON.stringify({ ticket: "ticket-1" })),
+    );
+
+    const target = await pluginWsUrl("ssh-terminal", "/terminal");
+
+    const [url, init] = fetchMock.mock.calls[0] as unknown as [
+      string,
+      RequestInit,
+    ];
+    expect(url).toBe("http://server:8080/users/ws-ticket");
+    expect(init.method).toBe("POST");
+    expect(init.credentials).toBe("include");
+    expect(target?.url).toBe(
+      `ws://${window.location.host}/plugin-ws/ssh-terminal/terminal`,
+    );
+    expect(target?.protocols).toEqual(["termix.jwt.ticket-1"]);
+  });
+
+  it("falls back to the cookie alone for a guest", async () => {
+    fetchMock.mockResolvedValueOnce(new Response("{}", { status: 401 }));
+
+    const target = await pluginWsUrl("ssh-terminal", "/terminal");
+
+    expect(target?.protocols).toEqual([]);
+  });
+
+  it("falls back when the server is older and has no ticket route", async () => {
+    fetchMock.mockRejectedValueOnce(new Error("offline"));
+
+    const target = await pluginWsUrl("ssh-terminal", "/terminal");
+
+    expect(target?.protocols).toEqual([]);
+  });
+});
diff --git a/src/ui/tests/lib/role-label.test.ts b/src/ui/tests/lib/role-label.test.ts
new file mode 100644
index 000000000..02125e152
--- /dev/null
+++ b/src/ui/tests/lib/role-label.test.ts
@@ -0,0 +1,17 @@
+import { describe, expect, it } from "vitest";
+import type { TFunction } from "i18next";
+import { roleLabel } from "@/lib/role-label";
+
+const t = ((key: string) => `T(${key})`) as unknown as TFunction;
+
+describe("roleLabel", () => {
+  it("translates system role keys", () => {
+    expect(roleLabel(t, "rbac.roles.admin")).toBe("T(rbac.roles.admin)");
+  });
+
+  it("keeps custom names and empty values", () => {
+    expect(roleLabel(t, "Ops team")).toBe("Ops team");
+    expect(roleLabel(t, null)).toBeNull();
+    expect(roleLabel(t, undefined)).toBeUndefined();
+  });
+});
diff --git a/src/ui/tests/lib/server-time.test.ts b/src/ui/tests/lib/server-time.test.ts
new file mode 100644
index 000000000..a4a7bcd92
--- /dev/null
+++ b/src/ui/tests/lib/server-time.test.ts
@@ -0,0 +1,19 @@
+import { describe, expect, it } from "vitest";
+import { parseServerTime } from "@/lib/server-time";
+
+describe("parseServerTime", () => {
+  it("reads a zone-less SQLite timestamp as UTC", () => {
+    expect(parseServerTime("2026-10-09 23:11:54").toISOString()).toBe(
+      "2026-10-09T23:11:54.000Z",
+    );
+  });
+
+  it("keeps timestamps that already carry a zone", () => {
+    expect(parseServerTime("2026-10-09T22:05:30.871Z").toISOString()).toBe(
+      "2026-10-09T22:05:30.871Z",
+    );
+    expect(parseServerTime("2026-10-09T23:00:00+02:00").toISOString()).toBe(
+      "2026-10-09T21:00:00.000Z",
+    );
+  });
+});
diff --git a/src/ui/tests/lib/usage-color.test.ts b/src/ui/tests/lib/usage-color.test.ts
new file mode 100644
index 000000000..8e66cb913
--- /dev/null
+++ b/src/ui/tests/lib/usage-color.test.ts
@@ -0,0 +1,21 @@
+import { describe, expect, it } from "vitest";
+import { usageBarColor, usageColor } from "@/lib/usage-color";
+
+describe("usage color ramp", () => {
+  it("uses the brand color below 75", () => {
+    expect(usageColor(10)).toBe("text-accent-brand");
+    expect(usageBarColor(74.9)).toBe("bg-accent-brand");
+  });
+
+  it("warns from 75 and turns destructive from 90", () => {
+    expect(usageColor(75)).toBe("text-warning");
+    expect(usageBarColor(89)).toBe("bg-warning");
+    expect(usageColor(90)).toBe("text-destructive");
+    expect(usageBarColor(100)).toBe("bg-destructive");
+  });
+
+  it("mutes an unknown value", () => {
+    expect(usageColor(null)).toBe("text-muted-foreground");
+    expect(usageBarColor(null)).toBe("bg-muted-foreground/30");
+  });
+});
diff --git a/src/ui/tests/main-axios.test.ts b/src/ui/tests/main-axios.test.ts
new file mode 100644
index 000000000..6626922f9
--- /dev/null
+++ b/src/ui/tests/main-axios.test.ts
@@ -0,0 +1,19 @@
+import { describe, expect, it } from "vitest";
+import { isLoginRequestUrl } from "@/main-axios";
+
+describe("isLoginRequestUrl", () => {
+  it("knows every sign in request", () => {
+    expect(isLoginRequestUrl("/users/login")).toBe(true);
+    expect(isLoginRequestUrl("/users/totp/verify-login")).toBe(true);
+    expect(isLoginRequestUrl("/users/auth/ldap/verify")).toBe(true);
+    expect(isLoginRequestUrl("/users/auth/second-factor/totp/verify")).toBe(
+      true,
+    );
+  });
+
+  it("leaves other requests alone", () => {
+    expect(isLoginRequestUrl("/host/db/host")).toBe(false);
+    expect(isLoginRequestUrl("/users/auth/ldap/start")).toBe(false);
+    expect(isLoginRequestUrl(undefined)).toBe(false);
+  });
+});
diff --git a/src/ui/tests/manage/EditorPane.test.tsx b/src/ui/tests/manage/EditorPane.test.tsx
new file mode 100644
index 000000000..caab9826e
--- /dev/null
+++ b/src/ui/tests/manage/EditorPane.test.tsx
@@ -0,0 +1,119 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import {
+  act,
+  cleanup,
+  fireEvent,
+  render,
+  renderHook,
+  screen,
+  waitFor,
+} from "@testing-library/react";
+
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({ t: (key: string) => key }),
+}));
+
+import {
+  EditorPane,
+  EditorSection,
+  LazySection,
+  useScrollSpy,
+} from "@/manage/EditorPane";
+import { Field } from "@/components/form-fields";
+import { HIDDEN_ATTR } from "@/settings/page-filter";
+
+afterEach(cleanup);
+
+function renderEditor() {
+  return render(
+    <EditorPane
+      bands={[
+        {
+          id: "main",
+          label: "Main",
+          items: [
+            { id: "general", label: "General" },
+            { id: "terminal", label: "Terminal" },
+          ],
+        },
+      ]}
+    >
+      <EditorSection id="general" label="General">
+        <Field label="Address">
+          <input />
+        </Field>
+        <Field label="Port">
+          <input />
+        </Field>
+      </EditorSection>
+      <EditorSection id="terminal" label="Terminal">
+        <LazySection>
+          <Field label="Font size">
+            <input />
+          </Field>
+        </LazySection>
+      </EditorSection>
+    </EditorPane>,
+  );
+}
+
+const hidden = (el: Element | null) => !!el?.closest(`[${HIDDEN_ATTR}]`);
+
+describe("EditorPane search", () => {
+  it("filters sections and fields, and hides their nav entries", async () => {
+    renderEditor();
+    fireEvent.change(screen.getByLabelText("manage.searchSettings"), {
+      target: { value: "port" },
+    });
+
+    await waitFor(() => {
+      expect(hidden(screen.getByText("Port"))).toBe(false);
+      expect(hidden(screen.getByText("Address"))).toBe(true);
+      expect(hidden(document.querySelector('[data-section="terminal"]'))).toBe(
+        true,
+      );
+    });
+    await waitFor(() =>
+      expect(screen.queryByRole("button", { name: "Terminal" })).toBeNull(),
+    );
+  });
+
+  it("mounts lazy sections so their fields can be found", async () => {
+    renderEditor();
+    fireEvent.change(screen.getByLabelText("manage.searchSettings"), {
+      target: { value: "font" },
+    });
+    await waitFor(() => {
+      expect(hidden(screen.getByText("Font size"))).toBe(false);
+      expect(hidden(document.querySelector('[data-section="general"]'))).toBe(
+        true,
+      );
+    });
+  });
+});
+
+describe("useScrollSpy scrollTo", () => {
+  it("follows a section that moves while the form is still mounting", async () => {
+    const container = document.createElement("div");
+    const section = document.createElement("div");
+    section.dataset.section = "rdp";
+    container.appendChild(section);
+    document.body.appendChild(container);
+    let sectionTop = 300;
+    section.getBoundingClientRect = () => ({ top: sectionTop }) as DOMRect;
+    container.getBoundingClientRect = () => ({ top: 0 }) as DOMRect;
+    const calls: number[] = [];
+    container.scrollTo = ((options: ScrollToOptions) => {
+      calls.push(options.top ?? 0);
+    }) as typeof container.scrollTo;
+
+    const ref = { current: container };
+    const { result } = renderHook(() => useScrollSpy(ref, ["general", "rdp"]));
+    act(() => result.current.scrollTo("rdp"));
+    expect(calls).toEqual([292]);
+
+    sectionTop = 900;
+    await waitFor(() => expect(calls).toContain(892));
+    container.remove();
+  });
+});
diff --git a/src/ui/tests/manage/ManageList.test.tsx b/src/ui/tests/manage/ManageList.test.tsx
new file mode 100644
index 000000000..1f493e21a
--- /dev/null
+++ b/src/ui/tests/manage/ManageList.test.tsx
@@ -0,0 +1,72 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { cleanup, fireEvent, render, screen } from "@testing-library/react";
+
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({ t: (key: string) => key }),
+}));
+
+import { ManageList } from "@/manage/ManageList";
+import type { Credential, Host } from "@/types/ui-types";
+
+afterEach(cleanup);
+
+const hosts = [
+  { id: "1", name: "web-01", ip: "10.0.0.1", folder: "Prod", tags: [] },
+  { id: "2", name: "db-01", ip: "10.0.0.2", folder: "Prod", tags: ["sql"] },
+] as unknown as Host[];
+const credentials = [
+  { id: "c1", name: "deploy", username: "ci", folder: "" },
+] as Credential[];
+
+function renderList(overrides: Partial<Parameters<typeof ManageList>[0]> = {}) {
+  const props = {
+    editing: false,
+    mode: "hosts" as const,
+    onMode: vi.fn(),
+    hosts,
+    credentials,
+    canEditInstanceDefaults: false,
+    isOnline: () => false,
+    selectedKey: null,
+    onPickHost: vi.fn(),
+    onPickCredential: vi.fn(),
+    onPickDefaults: vi.fn(),
+    onAdd: vi.fn(),
+    ...overrides,
+  };
+  render(<ManageList {...props} />);
+  return props;
+}
+
+describe("ManageList", () => {
+  it("lists hosts under their folder and picks one", () => {
+    const props = renderList();
+    expect(screen.getByText("Prod")).toBeTruthy();
+    fireEvent.click(screen.getByText("db-01"));
+    expect(props.onPickHost).toHaveBeenCalledWith(hosts[1]);
+  });
+
+  it("filters by tags as well as names", () => {
+    renderList();
+    fireEvent.change(screen.getByRole("textbox"), { target: { value: "sql" } });
+    expect(screen.queryByText("web-01")).toBeNull();
+    expect(screen.getByText("db-01")).toBeTruthy();
+  });
+
+  it("switches mode and adds", () => {
+    const props = renderList();
+    fireEvent.click(screen.getByText("nav.credentials"));
+    expect(props.onMode).toHaveBeenCalledWith("credentials");
+    fireEvent.click(screen.getByLabelText("hosts.addHost"));
+    expect(props.onAdd).toHaveBeenCalled();
+  });
+
+  it("lists levels of defaults", () => {
+    const props = renderList({ mode: "defaults" });
+    fireEvent.click(screen.getByText("hostDefaults.titleUser"));
+    expect(props.onPickDefaults).toHaveBeenCalledWith(
+      expect.objectContaining({ level: "user" }),
+    );
+    expect(screen.getByText("Prod")).toBeTruthy();
+  });
+});
diff --git a/src/ui/tests/manage/defaults-rows.test.ts b/src/ui/tests/manage/defaults-rows.test.ts
new file mode 100644
index 000000000..5cf110434
--- /dev/null
+++ b/src/ui/tests/manage/defaults-rows.test.ts
@@ -0,0 +1,20 @@
+import { describe, expect, it } from "vitest";
+import { defaultsRows } from "@/manage/defaults-rows";
+import type { Host } from "@/types/ui-types";
+
+const t = (key: string) => key;
+
+describe("defaultsRows", () => {
+  it("lists instance defaults only for those who can edit them", () => {
+    const hosts = [{ folder: "A / B" }, { folder: "" }] as Host[];
+    expect(defaultsRows(hosts, false, t).map((r) => r.key)).toEqual([
+      "user",
+      "folder:A",
+      "folder:A / B",
+    ]);
+    expect(defaultsRows(hosts, true, t)[0]).toMatchObject({
+      key: "admin",
+      level: "admin",
+    });
+  });
+});
diff --git a/src/ui/tests/manage/host-validation.test.ts b/src/ui/tests/manage/host-validation.test.ts
new file mode 100644
index 000000000..77833692d
--- /dev/null
+++ b/src/ui/tests/manage/host-validation.test.ts
@@ -0,0 +1,21 @@
+import { describe, expect, it } from "vitest";
+import { validateHostForm } from "@/manage/host-validation";
+
+describe("validateHostForm", () => {
+  it("needs an address", () => {
+    expect(
+      validateHostForm({ ip: " ", sshPort: 22 }, { enableSsh: true }),
+    ).toEqual({
+      ip: "manage.errorAddressRequired",
+    });
+  });
+
+  it("checks the SSH port only when SSH is on", () => {
+    expect(
+      validateHostForm({ ip: "h", sshPort: 70000 }, { enableSsh: true }),
+    ).toEqual({ sshPort: "manage.errorPortRange" });
+    expect(
+      validateHostForm({ ip: "h", sshPort: 70000 }, { enableSsh: false }),
+    ).toEqual({});
+  });
+});
diff --git a/src/ui/tests/manage/manage-requests.test.ts b/src/ui/tests/manage/manage-requests.test.ts
new file mode 100644
index 000000000..966045e56
--- /dev/null
+++ b/src/ui/tests/manage/manage-requests.test.ts
@@ -0,0 +1,62 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import {
+  MANAGE_REQUEST_EVENT,
+  requestFromLegacyEvent,
+  requestManage,
+  resetManageRequests,
+  takePendingManageRequest,
+} from "@/manage/manage-requests";
+
+afterEach(resetManageRequests);
+
+describe("manage requests", () => {
+  it("parks a request until the tab claims it, once", () => {
+    const listener = vi.fn();
+    window.addEventListener(MANAGE_REQUEST_EVENT, listener);
+    requestManage({ kind: "host", hostId: "7" });
+    window.removeEventListener(MANAGE_REQUEST_EVENT, listener);
+
+    expect(listener).toHaveBeenCalledTimes(1);
+    expect(takePendingManageRequest()).toEqual({ kind: "host", hostId: "7" });
+    expect(takePendingManageRequest()).toBeNull();
+  });
+
+  it("keeps only the latest request", () => {
+    requestManage({ kind: "browse", mode: "credentials" });
+    requestManage({ kind: "credential", credentialId: null });
+    expect(takePendingManageRequest()).toEqual({
+      kind: "credential",
+      credentialId: null,
+    });
+  });
+
+  it("translates the old host manager events", () => {
+    expect(requestFromLegacyEvent("host-manager:add-host")).toEqual({
+      kind: "host",
+      hostId: null,
+      draft: undefined,
+    });
+    expect(
+      requestFromLegacyEvent("host-manager:add-host", { name: "web" }),
+    ).toEqual({ kind: "host", hostId: null, draft: { name: "web" } });
+    expect(requestFromLegacyEvent("host-manager:edit-host", 12)).toEqual({
+      kind: "host",
+      hostId: "12",
+    });
+    expect(requestFromLegacyEvent("host-manager:edit-host")).toBeNull();
+    expect(requestFromLegacyEvent("host-manager:add-credential")).toEqual({
+      kind: "credential",
+      credentialId: null,
+    });
+    expect(
+      requestFromLegacyEvent("termix:open-host-defaults", { level: "admin" }),
+    ).toEqual({ kind: "defaults", level: "admin", folderName: undefined });
+    expect(
+      requestFromLegacyEvent("host-manager:edit-defaults", {
+        level: "folder",
+        folderName: "Prod",
+      }),
+    ).toEqual({ kind: "defaults", level: "folder", folderName: "Prod" });
+    expect(requestFromLegacyEvent("something-else")).toBeNull();
+  });
+});
diff --git a/src/ui/tests/manage/manage-tree.test.ts b/src/ui/tests/manage/manage-tree.test.ts
new file mode 100644
index 000000000..225099be4
--- /dev/null
+++ b/src/ui/tests/manage/manage-tree.test.ts
@@ -0,0 +1,80 @@
+import { describe, expect, it } from "vitest";
+import {
+  allFolderPaths,
+  buildCredentialManageTree,
+  buildHostManageTree,
+  flattenTree,
+} from "@/manage/manage-tree";
+import type { Credential, Host } from "@/types/ui-types";
+
+function host(id: string, folder: string, extra: Partial<Host> = {}): Host {
+  return {
+    id,
+    name: `host-${id}`,
+    username: "root",
+    ip: `10.0.0.${id}`,
+    port: 22,
+    folder,
+    online: false,
+    cpu: null,
+    ram: null,
+    lastAccess: "",
+    authType: "password",
+    ...extra,
+  } as Host;
+}
+
+describe("manage tree", () => {
+  it("nests folder paths and sub-hosts", () => {
+    const tree = buildHostManageTree([
+      host("1", "Prod / EU"),
+      host("2", "Prod"),
+      host("3", "", { parentHostId: "2" }),
+    ]);
+    expect(allFolderPaths(tree)).toEqual(["Prod", "Prod / EU"]);
+    const prod = tree.folders[0];
+    expect(prod.folders[0].items[0].id).toBe("1");
+    expect(prod.items[0].children[0].id).toBe("3");
+  });
+
+  it("drops a parent loop back to folder placement", () => {
+    const tree = buildHostManageTree([
+      host("1", "", { parentHostId: "2" }),
+      host("2", "", { parentHostId: "1" }),
+    ]);
+    const total =
+      tree.items.length + tree.items.flatMap((i) => i.children).length;
+    expect(total).toBe(2);
+  });
+
+  it("uses the online check it is given", () => {
+    const tree = buildHostManageTree([host("1", "")], () => true);
+    expect(tree.items[0].online).toBe(true);
+  });
+
+  it("opens folders holding a search match and hides the rest", () => {
+    const tree = buildHostManageTree([
+      host("1", "Prod / EU", { tags: ["db"] }),
+      host("2", "Staging"),
+    ]);
+    const rows = flattenTree(tree, new Set(), "db");
+    expect(
+      rows.map((r) => (r.kind === "folder" ? r.folder.path : r.item.id)),
+    ).toEqual(["Prod", "Prod / EU", "1"]);
+  });
+
+  it("respects collapsed folders without a search", () => {
+    const tree = buildHostManageTree([host("1", "Prod")]);
+    expect(flattenTree(tree, new Set(), "")).toHaveLength(1);
+    expect(flattenTree(tree, new Set(["Prod"]), "")).toHaveLength(2);
+  });
+
+  it("groups credentials by folder", () => {
+    const tree = buildCredentialManageTree([
+      { id: "c1", name: "deploy", username: "ci", folder: "Keys" },
+      { id: "c2", name: "root", username: "root", folder: "" },
+    ] as Credential[]);
+    expect(tree.folders[0].items[0].note).toBe("ci");
+    expect(tree.items[0].id).toBe("c2");
+  });
+});
diff --git a/src/ui/tests/onboarding/OnboardingHost.test.tsx b/src/ui/tests/onboarding/OnboardingHost.test.tsx
new file mode 100644
index 000000000..58db45c79
--- /dev/null
+++ b/src/ui/tests/onboarding/OnboardingHost.test.tsx
@@ -0,0 +1,136 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { act, render, screen, waitFor } from "@testing-library/react";
+
+const api = vi.hoisted(() => ({
+  getUiPreferences: vi.fn(),
+  saveUiPreferences: vi.fn(async () => {}),
+  getUserPreferences: vi.fn(async () => ({ storageMode: "local" })),
+}));
+vi.mock("@/main-axios", () => api);
+
+const frame = vi.hoisted(() => ({ embedded: false }));
+vi.mock("@/lib/embedded-frame", () => ({
+  isEmbeddedAuthFrame: () => frame.embedded,
+}));
+
+vi.mock("@/plugin-host/plugin-store", () => ({
+  settledPromise: () => Promise.resolve(),
+}));
+
+vi.mock("@/onboarding/OnboardingStage", () => ({
+  OnboardingStage: ({ mode }: { mode: string }) => <p>stage {mode}</p>,
+}));
+
+vi.mock("@/onboarding/onboarding-steps", () => ({
+  CORE_STEPS: [
+    {
+      id: "appearance",
+      version: 1,
+      titleKey: "a",
+      Component: () => null,
+      audience: "all",
+      position: 40,
+    },
+  ],
+}));
+
+import {
+  OnboardingHost,
+  OPEN_ONBOARDING_EVENT,
+} from "@/onboarding/OnboardingHost";
+import { onboardingSteps } from "@/onboarding/onboarding-registry";
+import {
+  UiPreferencesProvider,
+  useUiPreferencesContext,
+} from "@/contexts/UiPreferencesContext";
+import { setPermissionsForTesting } from "@/hooks/use-permissions";
+import { defaultUiPreferences } from "@/types/ui-preferences";
+
+function prefs(extra = {}) {
+  return {
+    ...defaultUiPreferences(),
+    onboarding: {
+      seen: { appearance: 1 },
+      completedAt: "2026-01-01T00:00:00.000Z",
+      skipped: false,
+      baselinePending: false,
+      ...extra,
+    },
+  };
+}
+
+let seen: Record<string, number> = {};
+function SeenProbe() {
+  seen = useUiPreferencesContext()?.preferences.onboarding.seen ?? {};
+  return null;
+}
+
+function renderHost(preferences = prefs()) {
+  render(
+    <UiPreferencesProvider initial={preferences}>
+      <OnboardingHost />
+      <SeenProbe />
+    </UiPreferencesProvider>,
+  );
+}
+
+const guacd = {
+  id: "rd:guacd",
+  pluginId: "rd",
+  version: 1,
+  titleKey: "g",
+  Component: () => null,
+  audience: "all" as const,
+  position: 50,
+};
+
+beforeEach(() => {
+  frame.embedded = false;
+  setPermissionsForTesting([]);
+  onboardingSteps.reset();
+});
+
+afterEach(() => {
+  localStorage.clear();
+});
+
+describe("OnboardingHost", () => {
+  it("opens a rerun when settings asks for one", async () => {
+    renderHost();
+    await act(async () => {
+      window.dispatchEvent(new Event(OPEN_ONBOARDING_EVENT));
+    });
+    expect(await screen.findByText("stage rerun")).toBeTruthy();
+  });
+
+  it("opens a partial run when a plugin adds a step mid-session", async () => {
+    renderHost();
+    await new Promise((r) => setTimeout(r, 50));
+    expect(screen.queryByText(/stage/)).toBeNull();
+    act(() => {
+      onboardingSteps.register(guacd);
+    });
+    expect(
+      await screen.findByText("stage partial", {}, { timeout: 2000 }),
+    ).toBeTruthy();
+  });
+
+  it("marks existing plugin steps seen for a carried over user without showing them", async () => {
+    onboardingSteps.register(guacd);
+    renderHost(prefs({ baselinePending: true }));
+    await waitFor(() => expect(seen["rd:guacd"]).toBe(1));
+    await new Promise((r) => setTimeout(r, 900));
+    expect(screen.queryByText(/stage/)).toBeNull();
+  });
+
+  it("does nothing inside an embedded sign in frame", async () => {
+    frame.embedded = true;
+    onboardingSteps.register(guacd);
+    renderHost();
+    await act(async () => {
+      window.dispatchEvent(new Event(OPEN_ONBOARDING_EVENT));
+    });
+    await new Promise((r) => setTimeout(r, 900));
+    expect(screen.queryByText(/stage/)).toBeNull();
+  });
+});
diff --git a/src/ui/tests/onboarding/OnboardingStage.test.tsx b/src/ui/tests/onboarding/OnboardingStage.test.tsx
new file mode 100644
index 000000000..977947bda
--- /dev/null
+++ b/src/ui/tests/onboarding/OnboardingStage.test.tsx
@@ -0,0 +1,219 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import {
+  act,
+  fireEvent,
+  render,
+  screen,
+  waitFor,
+} from "@testing-library/react";
+import { useEffect } from "react";
+import type { OnboardingStepProps } from "@termix-ssh/plugin-sdk/frontend";
+
+const api = vi.hoisted(() => ({
+  getUiPreferences: vi.fn(),
+  saveUiPreferences: vi.fn(async (_body: unknown) => {}),
+  getUserPreferences: vi.fn(async () => ({ storageMode: "local" })),
+}));
+vi.mock("@/main-axios", () => api);
+
+vi.mock("@/api/plugins-api", () => ({
+  getOnboardingPlugins: vi.fn(async () => ({
+    pending: false,
+    managedByLinkedServer: false,
+    plugins: [],
+  })),
+}));
+
+const gate = vi.hoisted(() => ({ allow: true }));
+
+function Plain({ label }: { label: string }) {
+  return <p>{label} body</p>;
+}
+
+function Gated({ setBeforeNext }: OnboardingStepProps) {
+  useEffect(() => {
+    setBeforeNext(() => gate.allow);
+    return () => setBeforeNext(null);
+  }, [setBeforeNext]);
+  return <p>picker body</p>;
+}
+
+vi.mock("@/onboarding/onboarding-steps", () => ({
+  CORE_STEPS: [
+    {
+      id: "preset",
+      version: 1,
+      titleKey: "preset",
+      Component: () => <Plain label="preset" />,
+      audience: "all",
+      position: 0,
+    },
+    {
+      id: "plugins",
+      version: 1,
+      titleKey: "picker",
+      Component: Gated,
+      audience: "all",
+      position: 10,
+      required: true,
+    },
+    {
+      id: "appearance",
+      version: 2,
+      titleKey: "appearance",
+      Component: () => <Plain label="appearance" />,
+      audience: "all",
+      position: 40,
+    },
+    {
+      id: "security",
+      version: 1,
+      titleKey: "security",
+      Component: () => <Plain label="security" />,
+      audience: "all",
+      position: 100,
+    },
+  ],
+}));
+
+import { OnboardingStage } from "@/onboarding/OnboardingStage";
+import { UiPreferencesProvider } from "@/contexts/UiPreferencesContext";
+import { setPermissionsForTesting } from "@/hooks/use-permissions";
+import { onboardingSteps } from "@/onboarding/onboarding-registry";
+import {
+  defaultUiPreferences,
+  type UiPreferences,
+} from "@/types/ui-preferences";
+
+function renderStage(
+  mode: "full" | "partial" | "rerun",
+  preferences: UiPreferences = defaultUiPreferences(),
+) {
+  const onDone = vi.fn();
+  render(
+    <UiPreferencesProvider initial={preferences}>
+      <OnboardingStage mode={mode} shellReady={false} onDone={onDone} />
+    </UiPreferencesProvider>,
+  );
+  return onDone;
+}
+
+const next = () =>
+  fireEvent.click(screen.getByRole("button", { name: /onboarding.next|Next/ }));
+
+beforeEach(() => {
+  gate.allow = true;
+  api.saveUiPreferences.mockClear();
+  setPermissionsForTesting([]);
+});
+
+afterEach(() => {
+  localStorage.clear();
+});
+
+describe("OnboardingStage", () => {
+  it("hides Skip until the required step is confirmed, then Skip finishes", async () => {
+    const onDone = renderStage("full");
+    await screen.findByText("preset body");
+    expect(screen.queryByRole("button", { name: /skip/i })).toBeNull();
+
+    next();
+    await screen.findByText("picker body");
+    expect(screen.queryByRole("button", { name: /skip/i })).toBeNull();
+
+    await act(async () => next());
+    await screen.findByText("appearance body");
+    await act(async () =>
+      fireEvent.click(screen.getByRole("button", { name: /skip/i })),
+    );
+    await waitFor(() => expect(onDone).toHaveBeenCalled());
+    const body = api.saveUiPreferences.mock.calls.at(-1)?.[0] as {
+      onboarding: { skipped: boolean };
+    };
+    expect(body.onboarding.skipped).toBe(true);
+  });
+
+  it("stays on a step whose beforeNext says no", async () => {
+    gate.allow = false;
+    renderStage("full");
+    await screen.findByText("preset body");
+    next();
+    await screen.findByText("picker body");
+    await act(async () => next());
+    expect(screen.getByText("picker body")).toBeTruthy();
+  });
+
+  it("marks every step in the run as seen when it finishes", async () => {
+    const onDone = renderStage("full");
+    await screen.findByText("preset body");
+    next();
+    await screen.findByText("picker body");
+    await act(async () => next());
+    await screen.findByText("appearance body");
+    next();
+    await screen.findByText("security body");
+    await act(async () =>
+      fireEvent.click(screen.getByRole("button", { name: /finish|Done/ })),
+    );
+    await waitFor(() => expect(onDone).toHaveBeenCalled());
+    const body = api.saveUiPreferences.mock.calls.at(-1)?.[0] as {
+      onboarding: { seen: Record<string, number> };
+    };
+    expect(body.onboarding.seen).toEqual({
+      preset: 1,
+      plugins: 1,
+      appearance: 2,
+      security: 1,
+    });
+  });
+
+  it("has no sidebar, just the step and the buttons", async () => {
+    renderStage("full");
+    await screen.findByText("preset body");
+    expect(screen.queryByRole("navigation")).toBeNull();
+  });
+
+  it("leaves plugin steps out for someone carried over from an older version", async () => {
+    const off = onboardingSteps.register({
+      id: "rd:guacd",
+      pluginId: "rd",
+      version: 1,
+      titleKey: "guacd",
+      Component: () => <Plain label="guacd" />,
+      audience: "all",
+      position: 50,
+    });
+    const preferences = {
+      ...defaultUiPreferences(),
+      onboarding: {
+        seen: { preset: 1, plugins: 1, appearance: 1, security: 1 },
+        completedAt: null,
+        skipped: false,
+        baselinePending: true,
+      },
+    };
+    renderStage("partial", preferences);
+    await screen.findByText("appearance body");
+    expect(screen.queryByText("guacd body")).toBeNull();
+    off();
+  });
+
+  it("shows only what someone has not seen on a partial run", async () => {
+    const preferences = {
+      ...defaultUiPreferences(),
+      onboarding: {
+        seen: { preset: 1, plugins: 1, appearance: 1, security: 1 },
+        completedAt: "2026-01-01T00:00:00.000Z",
+        skipped: false,
+        baselinePending: false,
+      },
+    };
+    const onDone = renderStage("partial", preferences);
+    await screen.findByText("appearance body");
+    expect(screen.queryByText("preset body")).toBeNull();
+    await act(async () =>
+      fireEvent.click(screen.getByRole("button", { name: /finish|Done/ })),
+    );
+    await waitFor(() => expect(onDone).toHaveBeenCalled());
+  });
+});
diff --git a/src/ui/tests/onboarding/onboarding-flow.test.ts b/src/ui/tests/onboarding/onboarding-flow.test.ts
new file mode 100644
index 000000000..c38b98e45
--- /dev/null
+++ b/src/ui/tests/onboarding/onboarding-flow.test.ts
@@ -0,0 +1,174 @@
+import { describe, expect, it } from "vitest";
+import {
+  baselineSeen,
+  computeFlow,
+  needsFullFlow,
+  seenFor,
+} from "@/onboarding/onboarding-flow";
+import {
+  mergeStepDefs,
+  sectionPosition,
+  type OnboardingCtx,
+  type OnboardingStepDef,
+} from "@/onboarding/onboarding-registry";
+import { defaultOnboardingState } from "@/types/ui-preferences";
+
+const Noop = () => null;
+
+function step(
+  id: string,
+  position: number,
+  extra: Partial<OnboardingStepDef> = {},
+): OnboardingStepDef {
+  return {
+    id,
+    version: 1,
+    titleKey: id,
+    Component: Noop,
+    audience: "all",
+    position,
+    ...extra,
+  };
+}
+
+function ctx(overrides: Partial<OnboardingCtx> = {}): OnboardingCtx {
+  return {
+    mode: "partial",
+    isAdmin: false,
+    isDesktop: false,
+    has: () => false,
+    pluginSetupPending: false,
+    pluginsManagedElsewhere: false,
+    ...overrides,
+  };
+}
+
+const steps = [
+  step("welcome", 0),
+  step("appearance", 40, { version: 2 }),
+  step("rd:guacd", sectionPosition("setup"), {
+    pluginId: "rd",
+    audience: "admin",
+  }),
+  step("ai:assistant", sectionPosition("explore"), {
+    pluginId: "ai",
+    permission: "ai.use",
+  }),
+  step("done", 100),
+];
+
+const ids = (list: OnboardingStepDef[]) => list.map((s) => s.id);
+
+describe("computeFlow", () => {
+  it("shows every relevant step on a full run", () => {
+    expect(ids(computeFlow(steps, {}, ctx({ mode: "full" })))).toEqual([
+      "welcome",
+      "appearance",
+      "done",
+    ]);
+  });
+
+  it("filters admin and permission steps", () => {
+    const flow = computeFlow(
+      steps,
+      {},
+      ctx({ mode: "rerun", isAdmin: true, has: (p) => p === "ai.use" }),
+    );
+    expect(ids(flow)).toEqual([
+      "welcome",
+      "appearance",
+      "rd:guacd",
+      "ai:assistant",
+      "done",
+    ]);
+  });
+
+  it("shows only unseen or bumped steps on a partial run", () => {
+    const flow = computeFlow(
+      steps,
+      { welcome: 1, appearance: 1, "rd:guacd": 1, done: 1 },
+      ctx({ isAdmin: true, has: () => true }),
+    );
+    expect(ids(flow)).toEqual(["appearance", "ai:assistant"]);
+  });
+
+  it("is empty when everything is seen", () => {
+    expect(
+      computeFlow(
+        steps,
+        { welcome: 1, appearance: 2, "rd:guacd": 1, done: 1 },
+        ctx({ isAdmin: true }),
+      ),
+    ).toEqual([]);
+  });
+
+  it("includes a seen step that forces itself pending", () => {
+    const picker = step("plugins", 10, {
+      forcePending: (c) => c.pluginSetupPending,
+    });
+    expect(
+      ids(
+        computeFlow(
+          [picker],
+          { plugins: 1 },
+          ctx({ pluginSetupPending: true }),
+        ),
+      ),
+    ).toEqual(["plugins"]);
+    expect(computeFlow([picker], { plugins: 1 }, ctx())).toEqual([]);
+  });
+
+  it("drops a step whose relevance check throws", () => {
+    const broken = step("x:y", 50, {
+      isRelevant: () => {
+        throw new Error("boom");
+      },
+    });
+    expect(computeFlow([broken], {}, ctx())).toEqual([]);
+  });
+});
+
+describe("seen bookkeeping", () => {
+  it("records every step in a run at its version", () => {
+    expect(seenFor(steps.slice(0, 2))).toEqual({ welcome: 1, appearance: 2 });
+  });
+
+  it("baselines only plugin steps", () => {
+    expect(baselineSeen(steps)).toEqual({ "rd:guacd": 1, "ai:assistant": 1 });
+  });
+
+  it("needs the full run only for someone who never finished one", () => {
+    expect(needsFullFlow(defaultOnboardingState())).toBe(true);
+    expect(
+      needsFullFlow({ ...defaultOnboardingState(), seen: { welcome: 1 } }),
+    ).toBe(false);
+    expect(
+      needsFullFlow({ ...defaultOnboardingState(), completedAt: "x" }),
+    ).toBe(false);
+  });
+});
+
+describe("mergeStepDefs", () => {
+  it("orders by position and lets a registered step win over a legacy one", () => {
+    const legacy = step("ai:assistant", 80, { titleKey: "old" });
+    const registered = step("ai:assistant", 50, { titleKey: "new" });
+    const merged = mergeStepDefs(
+      [step("welcome", 0), step("done", 100)],
+      [registered],
+      [legacy, step("x:legacy", 80)],
+    );
+    expect(merged.map((s) => [s.id, s.titleKey])).toEqual([
+      ["welcome", "welcome"],
+      ["ai:assistant", "new"],
+      ["x:legacy", "x:legacy"],
+      ["done", "done"],
+    ]);
+  });
+
+  it("places plugin sections between the core steps", () => {
+    expect(sectionPosition("setup")).toBeGreaterThan(40);
+    expect(sectionPosition("setup")).toBeLessThan(60);
+    expect(sectionPosition("explore", 1000)).toBeLessThan(90);
+    expect(sectionPosition("security")).toBeLessThan(100);
+  });
+});
diff --git a/src/ui/tests/onboarding/onboarding-steps.test.ts b/src/ui/tests/onboarding/onboarding-steps.test.ts
index c9bbad6ee..b8784a354 100644
--- a/src/ui/tests/onboarding/onboarding-steps.test.ts
+++ b/src/ui/tests/onboarding/onboarding-steps.test.ts
@@ -1,11 +1,11 @@
-import { describe, expect, it, vi } from "vitest";
-import { ONBOARDING_STEPS, relevantSteps } from "@/onboarding/onboarding-steps";
+import { describe, expect, it } from "vitest";
+import { CORE_STEPS } from "@/onboarding/onboarding-steps";
+import { computeFlow } from "@/onboarding/onboarding-flow";
+import type { OnboardingCtx } from "@/onboarding/onboarding-registry";
+import { CORE_ONBOARDING_STEPS } from "@/types/onboarding";
 import { UI_AREA_KEYS, PRESETS } from "@/types/ui-preferences";
 import en from "@/locales/en.json";
 
-const isElectron = vi.hoisted(() => vi.fn(() => false));
-vi.mock("@/lib/electron", () => ({ isElectron }));
-
 function lookup(key: string): unknown {
   return key
     .split(".")
@@ -18,83 +18,131 @@ function lookup(key: string): unknown {
     );
 }
 
-describe("ONBOARDING_STEPS", () => {
-  it("has unique ids and real title translations", () => {
-    const ids = ONBOARDING_STEPS.map((s) => s.id);
-    expect(new Set(ids).size).toBe(ids.length);
-    for (const step of ONBOARDING_STEPS) {
+function ctx(overrides: Partial<OnboardingCtx> = {}): OnboardingCtx {
+  return {
+    mode: "full",
+    isAdmin: false,
+    isDesktop: false,
+    has: () => false,
+    pluginSetupPending: false,
+    pluginsManagedElsewhere: false,
+    canEnrollSecondFactor: false,
+    ...overrides,
+  };
+}
+
+const ids = (c: OnboardingCtx) =>
+  computeFlow(CORE_STEPS, {}, c).map((s) => s.id);
+
+describe("CORE_STEPS", () => {
+  it("has unique ids, real titles and the versions in CORE_ONBOARDING_STEPS", () => {
+    const stepIds = CORE_STEPS.map((s) => s.id);
+    expect(new Set(stepIds).size).toBe(stepIds.length);
+    expect(stepIds.sort()).toEqual(Object.keys(CORE_ONBOARDING_STEPS).sort());
+    for (const step of CORE_STEPS) {
       expect(typeof lookup(step.titleKey), step.titleKey).toBe("string");
+      expect(step.version).toBe(
+        CORE_ONBOARDING_STEPS[step.id as keyof typeof CORE_ONBOARDING_STEPS],
+      );
     }
   });
 
-  it("opens with the preset picker right after the welcome", () => {
-    expect(ONBOARDING_STEPS[0].id).toBe("welcome");
-    expect(ONBOARDING_STEPS[1].id).toBe("preset");
+  it("is only choices: preset and appearance for everyone", () => {
+    expect(ids(ctx())).toEqual(["preset", "appearance"]);
   });
 
-  it("has no add-a-host step, which used to close onboarding mid-flow", () => {
-    const ids = relevantSteps({}).map((s) => s.id);
-    expect(ids).not.toContain("first-host");
+  it("opens on the plugin picker for an admin on a fresh install", () => {
+    expect(ids(ctx({ isAdmin: true, pluginSetupPending: true }))).toEqual([
+      "plugins",
+      "preset",
+      "appearance",
+    ]);
+  });
+
+  it("never shows the plugin picker to someone who is not an admin", () => {
+    expect(ids(ctx({ pluginSetupPending: true }))).not.toContain("plugins");
+    expect(ids(ctx({ mode: "rerun" }))).not.toContain("plugins");
+  });
+
+  it("leaves the picker out once it was applied, even on a rerun", () => {
+    expect(ids(ctx({ isAdmin: true, mode: "rerun" }))).not.toContain("plugins");
+    expect(ids(ctx({ isAdmin: true }))).not.toContain("plugins");
+  });
+
+  it("never shows the picker on a linked desktop", () => {
+    expect(
+      ids(
+        ctx({
+          isAdmin: true,
+          pluginSetupPending: true,
+          pluginsManagedElsewhere: true,
+        }),
+      ),
+    ).not.toContain("plugins");
+  });
+
+  it("makes the plugin picker required", () => {
+    expect(CORE_STEPS.find((s) => s.id === "plugins")?.required).toBe(true);
   });
 
   it("asks how the desktop app is used only on the desktop", () => {
-    isElectron.mockReturnValue(false);
-    expect(relevantSteps({}).map((s) => s.id)).not.toContain("desktop-sync");
-    isElectron.mockReturnValue(true);
-    expect(relevantSteps({}).map((s) => s.id)).toContain("desktop-sync");
-    isElectron.mockReturnValue(false);
+    expect(ids(ctx({ isDesktop: true }))).toEqual([
+      "desktop-sync",
+      "preset",
+      "appearance",
+    ]);
   });
 
-  it("ends on the done step", () => {
-    const ids = relevantSteps({}).map((s) => s.id);
-    expect(ids[ids.length - 1]).toBe("done");
+  it("offers account security only when there is something to set up", () => {
+    expect(ids(ctx({ canEnrollSecondFactor: true }))).toEqual([
+      "preset",
+      "appearance",
+      "security",
+    ]);
   });
 
-  it("tours the feature set after the setup choices", () => {
-    const ids = ONBOARDING_STEPS.map((s) => s.id);
-    for (const id of ["features", "workflow", "security"]) {
-      expect(ids).toContain(id);
-      expect(ids.indexOf(id)).toBeGreaterThan(ids.indexOf("appearance"));
-    }
+  it("skips account security on the desktop, which signs in by itself", () => {
+    expect(
+      ids(ctx({ isDesktop: true, canEnrollSecondFactor: true })),
+    ).not.toContain("security");
   });
 });
 
-describe("onboarding step body translations", () => {
-  const KEYS: Record<string, string[]> = {
-    welcome: ["hosts", "terminal", "files"],
-    workflow: ["palette", "split", "dock"],
-    security: ["credentials", "twofa", "identity", "sharing"],
-    done: ["settings", "rerun", "docs"],
-  };
-
-  it("has a title and description for every card the steps render", () => {
-    for (const [prefix, keys] of Object.entries(KEYS)) {
-      for (const key of keys) {
-        expect(
-          lookup(`onboarding.${prefix}_${key}`),
-          `${prefix}_${key}`,
-        ).toBeTypeOf("string");
-        expect(
-          lookup(`onboarding.${prefix}_${key}_desc`),
-          `${prefix}_${key}_desc`,
-        ).toBeTypeOf("string");
-      }
-    }
-  });
-
-  it("has the intro copy each step shows above its cards", () => {
+describe("onboarding translations", () => {
+  it("has the copy the stage and the steps show", () => {
     for (const key of [
-      "welcomeIntro",
       "presetIntro",
       "appearanceIntro",
-      "featuresIntro",
-      "workflowIntro",
       "securityIntro",
-      "doneDesc",
+      "pluginsIntro",
+      "pluginsRemoveNote",
+      "pluginsChoice_enabled",
+      "pluginsChoice_disabled",
+      "pluginsChoice_remove",
+      "pluginsConsentTitle",
+      "partialHeading",
+      "setupHeading",
+      "skipPartial",
+      "next",
+      "finish",
     ]) {
       expect(lookup(`onboarding.${key}`), key).toBeTypeOf("string");
     }
   });
+
+  it("no longer carries the feature tour", () => {
+    const keys = Object.keys(
+      (en as Record<string, Record<string, unknown>>).onboarding,
+    );
+    expect(
+      keys.filter((k) => /^(welcome|features|workflow|done)/.test(k)),
+    ).toEqual([]);
+  });
+
+  it("uses no em dashes", () => {
+    const text = JSON.stringify((en as Record<string, unknown>).onboarding);
+    expect(text).not.toContain("\u2014");
+  });
 });
 
 describe("interface settings translations", () => {
diff --git a/src/ui/tests/onboarding/startup.test.ts b/src/ui/tests/onboarding/startup.test.ts
new file mode 100644
index 000000000..bec5b0093
--- /dev/null
+++ b/src/ui/tests/onboarding/startup.test.ts
@@ -0,0 +1,184 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { defaultUiPreferences } from "@/types/ui-preferences";
+
+const mocks = vi.hoisted(() => ({
+  getUiPreferences: vi.fn(),
+  getOnboardingPlugins: vi.fn(),
+  has: vi.fn((_p: string) => false),
+  embedded: false,
+}));
+
+vi.mock("@/api/ui-preferences-api", () => ({
+  getUiPreferences: mocks.getUiPreferences,
+}));
+vi.mock("@/api/plugins-api", () => ({
+  getOnboardingPlugins: mocks.getOnboardingPlugins,
+}));
+vi.mock("@/hooks/use-permissions", () => ({
+  loadPermissionChecker: async () => mocks.has,
+}));
+vi.mock("@/lib/embedded-frame", () => ({
+  isEmbeddedAuthFrame: () => mocks.embedded,
+}));
+vi.mock("@/onboarding/onboarding-steps", () => ({
+  CORE_STEPS: [
+    {
+      id: "welcome",
+      version: 1,
+      titleKey: "w",
+      Component: () => null,
+      audience: "all",
+      position: 0,
+    },
+    {
+      id: "plugins",
+      version: 1,
+      titleKey: "p",
+      Component: () => null,
+      audience: "admin",
+      position: 10,
+      isRelevant: (ctx: { pluginSetupPending: boolean }) =>
+        ctx.pluginSetupPending,
+      forcePending: (ctx: { pluginSetupPending: boolean }) =>
+        ctx.pluginSetupPending,
+    },
+    {
+      id: "appearance",
+      version: 2,
+      titleKey: "a",
+      Component: () => null,
+      audience: "all",
+      position: 40,
+    },
+  ],
+}));
+
+import { resolveStartupOnboarding } from "@/onboarding/startup";
+import { onboardingSteps } from "@/onboarding/onboarding-registry";
+
+function prefs(seen: Record<string, number>, extra = {}) {
+  return {
+    ...defaultUiPreferences(),
+    onboarding: {
+      seen,
+      completedAt: "2026-01-01T00:00:00.000Z",
+      skipped: false,
+      baselinePending: false,
+      ...extra,
+    },
+  };
+}
+
+beforeEach(() => {
+  mocks.embedded = false;
+  mocks.has.mockReset();
+  mocks.has.mockReturnValue(false);
+  mocks.getUiPreferences.mockReset();
+  mocks.getOnboardingPlugins.mockReset();
+  mocks.getOnboardingPlugins.mockResolvedValue({
+    pending: false,
+    managedByLinkedServer: false,
+    plugins: [],
+  });
+  onboardingSteps.reset();
+});
+
+describe("resolveStartupOnboarding", () => {
+  it("never runs inside the mobile app or a desktop link window", async () => {
+    mocks.embedded = true;
+    expect((await resolveStartupOnboarding()).mode).toBeNull();
+    expect(mocks.getUiPreferences).not.toHaveBeenCalled();
+  });
+
+  it("runs the full flow for a new user", async () => {
+    mocks.getUiPreferences.mockResolvedValue(defaultUiPreferences());
+    const plan = await resolveStartupOnboarding();
+    expect(plan.mode).toBe("full");
+    expect(plan.preferences).toBeTruthy();
+  });
+
+  it("does not ask for the plugin list as a non-admin", async () => {
+    mocks.getUiPreferences.mockResolvedValue(defaultUiPreferences());
+    await resolveStartupOnboarding();
+    expect(mocks.getOnboardingPlugins).not.toHaveBeenCalled();
+  });
+
+  it("shows nothing to someone who has seen everything", async () => {
+    mocks.getUiPreferences.mockResolvedValue(
+      prefs({ welcome: 1, plugins: 1, appearance: 2 }),
+    );
+    expect((await resolveStartupOnboarding()).mode).toBeNull();
+  });
+
+  it("runs a partial flow for a bumped core step", async () => {
+    mocks.getUiPreferences.mockResolvedValue(
+      prefs({ welcome: 1, appearance: 1 }),
+    );
+    expect((await resolveStartupOnboarding()).mode).toBe("partial");
+  });
+
+  it("brings an admin back to the picker while it is still pending", async () => {
+    mocks.has.mockReturnValue(true);
+    mocks.getOnboardingPlugins.mockResolvedValue({
+      pending: true,
+      managedByLinkedServer: false,
+      plugins: [],
+    });
+    mocks.getUiPreferences.mockResolvedValue(
+      prefs({ welcome: 1, plugins: 1, appearance: 2 }),
+    );
+    const plan = await resolveStartupOnboarding();
+    expect(plan.mode).toBe("partial");
+    expect(plan.plugins?.pending).toBe(true);
+  });
+
+  it("treats a failed plugin list as not pending", async () => {
+    mocks.has.mockReturnValue(true);
+    mocks.getOnboardingPlugins.mockRejectedValue(new Error("403"));
+    mocks.getUiPreferences.mockResolvedValue(
+      prefs({ welcome: 1, plugins: 1, appearance: 2 }),
+    );
+    expect((await resolveStartupOnboarding()).mode).toBeNull();
+  });
+
+  it("runs a partial flow for a new plugin step", async () => {
+    onboardingSteps.register({
+      id: "rd:guacd",
+      pluginId: "rd",
+      version: 1,
+      titleKey: "g",
+      Component: () => null,
+      audience: "all",
+      position: 50,
+    });
+    mocks.getUiPreferences.mockResolvedValue(
+      prefs({ welcome: 1, appearance: 2 }),
+    );
+    expect((await resolveStartupOnboarding()).mode).toBe("partial");
+  });
+
+  it("leaves plugin steps to the baseline pass for carried over users", async () => {
+    onboardingSteps.register({
+      id: "rd:guacd",
+      pluginId: "rd",
+      version: 1,
+      titleKey: "g",
+      Component: () => null,
+      audience: "all",
+      position: 50,
+    });
+    mocks.getUiPreferences.mockResolvedValue(
+      prefs({ welcome: 1, appearance: 2 }, { baselinePending: true }),
+    );
+    expect((await resolveStartupOnboarding()).mode).toBeNull();
+  });
+
+  it("gives up quietly when preferences cannot load", async () => {
+    mocks.getUiPreferences.mockRejectedValue(new Error("offline"));
+    expect(await resolveStartupOnboarding()).toEqual({
+      preferences: null,
+      mode: null,
+      plugins: null,
+    });
+  });
+});
diff --git a/src/ui/tests/onboarding/steps/PluginsStep.test.tsx b/src/ui/tests/onboarding/steps/PluginsStep.test.tsx
new file mode 100644
index 000000000..3958011ad
--- /dev/null
+++ b/src/ui/tests/onboarding/steps/PluginsStep.test.tsx
@@ -0,0 +1,189 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { act, fireEvent, render, screen, within } from "@testing-library/react";
+import type { OnboardingPluginList } from "@/api/plugins-api";
+
+const api = vi.hoisted(() => ({
+  getOnboardingPlugins: vi.fn(),
+  applyOnboardingPlugins: vi.fn(),
+}));
+vi.mock("@/api/plugins-api", () => api);
+
+const loader = vi.hoisted(() => ({ syncPlugins: vi.fn(async () => {}) }));
+vi.mock("@/plugin-host/loader", () => loader);
+
+import { PluginsStep } from "@/onboarding/steps/PluginsStep";
+import { defaultChoices } from "@/onboarding/plugin-choices";
+
+function plugin(
+  id: string,
+  extra: Partial<OnboardingPluginList["plugins"][number]> = {},
+) {
+  return {
+    id,
+    name: id.toUpperCase(),
+    description: `${id} plugin`,
+    icon: null,
+    category: "Terminal",
+    version: "1.0.0",
+    source: "bundled" as const,
+    state: "enabled",
+    dependencies: [],
+    recommended: false,
+    consent: false,
+    ...extra,
+  };
+}
+
+const LIST: OnboardingPluginList = {
+  pending: true,
+  reason: "fresh",
+  managedByLinkedServer: false,
+  plugins: [
+    plugin("term", { recommended: true }),
+    plugin("base", { category: "Infrastructure" }),
+    plugin("addon", { category: "Infrastructure", dependencies: ["base"] }),
+    plugin("stats", { recommended: true, consent: true, state: "disabled" }),
+  ],
+};
+
+describe("defaultChoices", () => {
+  it("keeps recommended plugins and removes the rest on a fresh install", () => {
+    expect(defaultChoices(LIST)).toEqual({
+      term: "enabled",
+      base: "remove",
+      addon: "remove",
+      stats: "enabled",
+    });
+  });
+
+  it("starts from how things are now on an upgraded install", () => {
+    expect(defaultChoices({ ...LIST, reason: "upgrade" })).toEqual({
+      term: "enabled",
+      base: "enabled",
+      addon: "enabled",
+      stats: "disabled",
+    });
+  });
+
+  it("starts from how things are now on a later run", () => {
+    expect(defaultChoices({ ...LIST, pending: false })).toEqual({
+      term: "enabled",
+      base: "enabled",
+      addon: "enabled",
+      stats: "disabled",
+    });
+  });
+});
+
+describe("PluginsStep", () => {
+  let beforeNext: (() => boolean | Promise<boolean>) | null = null;
+
+  beforeEach(() => {
+    beforeNext = null;
+    api.getOnboardingPlugins.mockResolvedValue(LIST);
+    api.applyOnboardingPlugins.mockReset();
+    loader.syncPlugins.mockClear();
+  });
+
+  async function renderStep() {
+    render(
+      <PluginsStep
+        mode="full"
+        isAdmin
+        isDesktop={false}
+        shellReady={false}
+        setCanContinue={() => {}}
+        setBeforeNext={(fn) => {
+          beforeNext = fn;
+        }}
+      />,
+    );
+    await screen.findByText("TERM");
+    // findByText resolves on the DOM change, before the effect that hands
+    // over the loaded apply has run. Flush it so beforeNext is never stale.
+    await act(async () => {});
+  }
+
+  it("groups plugins by category and puts consent plugins in their own section", async () => {
+    await renderStep();
+    expect(screen.getByText("Terminal")).toBeTruthy();
+    expect(screen.getByText("Infrastructure")).toBeTruthy();
+    expect(screen.getByRole("checkbox")).toHaveProperty("checked", true);
+  });
+
+  it("tells an upgrading admin that nothing changes unless they say so", async () => {
+    api.getOnboardingPlugins.mockResolvedValue({ ...LIST, reason: "upgrade" });
+    await renderStep();
+    expect(screen.getByText(/onboarding.pluginsUpgradeNote/)).toBeTruthy();
+  });
+
+  it("keeps a dependency the admin kept something for, and says why", async () => {
+    await renderStep();
+    const addon = screen.getByRole("radiogroup", { name: "ADDON" });
+    fireEvent.click(within(addon).getByRole("radio", { name: /enabled|On/ }));
+    expect(
+      await screen.findByText("onboarding.pluginsKeptBecause"),
+    ).toBeTruthy();
+    const base = screen.getByRole("radiogroup", { name: "BASE" });
+    expect(
+      within(base)
+        .getByRole("radio", { name: /enabled|On/ })
+        .getAttribute("aria-checked"),
+    ).toBe("true");
+  });
+
+  it("applies the choices on Next and resyncs the plugin runtime", async () => {
+    api.applyOnboardingPlugins.mockResolvedValue({
+      resolved: {},
+      adjustments: [],
+      enabled: [],
+      disabled: [],
+      removed: ["base", "addon"],
+      failed: [],
+    });
+    api.getOnboardingPlugins.mockResolvedValueOnce(LIST).mockResolvedValue({
+      ...LIST,
+      pending: false,
+    });
+    await renderStep();
+    let ok: boolean | undefined;
+    await act(async () => {
+      ok = await beforeNext!();
+    });
+    expect(ok).toBe(true);
+    expect(api.applyOnboardingPlugins).toHaveBeenCalledWith({
+      term: "enabled",
+      base: "remove",
+      addon: "remove",
+      stats: "enabled",
+    });
+    expect(loader.syncPlugins).toHaveBeenCalled();
+  });
+
+  it("stops once to show failures, then lets the admin move on", async () => {
+    api.applyOnboardingPlugins.mockResolvedValue({
+      resolved: {},
+      adjustments: [],
+      enabled: [],
+      disabled: [],
+      removed: [],
+      failed: [{ id: "base", error: "busy" }],
+    });
+    api.getOnboardingPlugins.mockResolvedValueOnce(LIST).mockResolvedValue({
+      ...LIST,
+      pending: false,
+    });
+    await renderStep();
+    let ok: boolean | undefined;
+    await act(async () => {
+      ok = await beforeNext!();
+    });
+    expect(ok).toBe(false);
+    expect(screen.getByText("BASE: busy")).toBeTruthy();
+    await act(async () => {
+      ok = await beforeNext!();
+    });
+    expect(ok).toBe(true);
+    expect(api.applyOnboardingPlugins).toHaveBeenCalledTimes(1);
+  });
+});
diff --git a/src/ui/tests/plugin-host/bridge.test.ts b/src/ui/tests/plugin-host/bridge.test.ts
index d2dbf8b9d..c533df669 100644
--- a/src/ui/tests/plugin-host/bridge.test.ts
+++ b/src/ui/tests/plugin-host/bridge.test.ts
@@ -1,5 +1,48 @@
-import { describe, expect, it } from "vitest";
-import { toHostRecord } from "@/plugin-host/bridge";
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { act, cleanup, renderHook, waitFor } from "@testing-library/react";
+
+const getPluginUserSettings = vi.hoisted(() => vi.fn());
+
+vi.mock("@/api/plugins-api", async (importOriginal) => ({
+  ...(await importOriginal<typeof import("@/api/plugins-api")>()),
+  getPluginUserSettings,
+}));
+
+import { pluginHostBridge, toHostRecord } from "@/plugin-host/bridge";
+import { PLUGIN_SETTINGS_CHANGED_EVENT } from "@/api/plugins-api";
+
+afterEach(cleanup);
+
+function announce(pluginId: string, scope: string) {
+  act(() => {
+    window.dispatchEvent(
+      new CustomEvent(PLUGIN_SETTINGS_CHANGED_EVENT, {
+        detail: { pluginId, scope },
+      }),
+    );
+  });
+}
+
+describe("useSettings", () => {
+  it("reads again when the settings page saves the same plugin and scope", async () => {
+    getPluginUserSettings.mockResolvedValueOnce({ enabled: false });
+    const { result } = renderHook(() =>
+      pluginHostBridge.useSettings("ai", "user"),
+    );
+    await waitFor(() => expect(result.current.loaded).toBe(true));
+    expect(result.current.values).toEqual({ enabled: false });
+
+    getPluginUserSettings.mockResolvedValue({ enabled: true });
+    announce("other", "user");
+    announce("ai", "admin");
+    expect(getPluginUserSettings).toHaveBeenCalledTimes(1);
+
+    announce("ai", "user");
+    await waitFor(() =>
+      expect(result.current.values).toEqual({ enabled: true }),
+    );
+  });
+});
 
 describe("toHostRecord", () => {
   it("copies only the fields the SDK types", () => {
diff --git a/src/ui/tests/plugin-host/built-bundles.test.tsx b/src/ui/tests/plugin-host/built-bundles.test.tsx
deleted file mode 100644
index 4fa288551..000000000
--- a/src/ui/tests/plugin-host/built-bundles.test.tsx
+++ /dev/null
@@ -1,140 +0,0 @@
-/**
- * Every built plugin frontend in dist/plugins imports through the real loader
- * and runs activate(app) without an error. Needs `npm run build` first.
- */
-
-import fs from "node:fs";
-import path from "node:path";
-import { pathToFileURL } from "node:url";
-import { afterAll, beforeAll, describe, expect, it, vi } from "vitest";
-import type { FrontendModule } from "@termix/plugin-sdk/frontend";
-import type { PluginSummary } from "@/api/plugins-api";
-import {
-  configurePluginLoader,
-  resetPluginLoader,
-  syncPlugins,
-} from "@/plugin-host/loader";
-import { getPluginRecord } from "@/plugin-host/plugin-store";
-
-const REPO_ROOT = path.resolve(__dirname, "../../../..");
-const BUILT = path.join(REPO_ROOT, "dist", "plugins");
-
-function pluginIds(): string[] {
-  const root = path.join(REPO_ROOT, "plugins");
-  return fs
-    .readdirSync(root, { withFileTypes: true })
-    .filter(
-      (entry) =>
-        entry.isDirectory() &&
-        fs.existsSync(path.join(root, entry.name, "manifest.json")),
-    )
-    .map((entry) => entry.name)
-    .sort();
-}
-
-function manifest(id: string) {
-  return JSON.parse(
-    fs.readFileSync(path.join(BUILT, id, "manifest.json"), "utf8"),
-  ) as {
-    id: string;
-    name: string;
-    version: string;
-    icon?: string;
-    dependencies?: Record<string, string>;
-    optionalDependencies?: Record<string, string>;
-    contributes?: PluginSummary["contributes"];
-  };
-}
-
-function frontendFile(id: string): string {
-  return path.join(BUILT, id, "dist", "frontend.js");
-}
-
-/** What GET /plugins would answer for a running, enabled plugin. */
-function summaryFor(id: string): PluginSummary {
-  const m = manifest(id);
-  return {
-    id,
-    name: m.name,
-    version: m.version,
-    enabled: true,
-    state: "active",
-    contributes: m.contributes ?? null,
-    icon: m.icon,
-    dependencies: m.dependencies ?? {},
-    optionalDependencies: m.optionalDependencies ?? {},
-    frontend: fs.existsSync(frontendFile(id)),
-    assetVersion: "test",
-    locales: ["en"],
-  };
-}
-
-const errors: unknown[][] = [];
-
-beforeAll(async () => {
-  const missing = pluginIds().filter(
-    (id) => !fs.existsSync(path.join(BUILT, id, "manifest.json")),
-  );
-  if (missing.length > 0) {
-    throw new Error(
-      `dist/plugins is missing ${missing.join(", ")}. Run npm run build first.`,
-    );
-  }
-
-  // Nothing here talks to a server; a plugin that fetches on activate gets
-  // an empty answer rather than a network error.
-  vi.stubGlobal(
-    "fetch",
-    vi.fn(async () => new Response("{}", { status: 200 })),
-  );
-  vi.spyOn(console, "error").mockImplementation((...args) => {
-    errors.push(args);
-  });
-
-  configurePluginLoader({
-    fetchPlugins: async () => pluginIds().map(summaryFor),
-    importFrontend: async (summary) =>
-      (await import(
-        /* @vite-ignore */ pathToFileURL(frontendFile(summary.id)).href
-      )) as FrontendModule,
-    loadLocale: async (summary, file) => {
-      if (file !== "en") return null;
-      const locale = path.join(BUILT, summary.id, "locales", "en.json");
-      return fs.existsSync(locale)
-        ? JSON.parse(fs.readFileSync(locale, "utf8"))
-        : null;
-    },
-    injectCss: () => null,
-  });
-
-  await syncPlugins();
-}, 180_000);
-
-afterAll(async () => {
-  await resetPluginLoader();
-  vi.unstubAllGlobals();
-  vi.restoreAllMocks();
-});
-
-describe("built plugin frontends", () => {
-  it("activates every plugin that ships a frontend", () => {
-    const notActive = pluginIds()
-      .filter((id) => fs.existsSync(frontendFile(id)))
-      .map((id) => [
-        id,
-        getPluginRecord(id)?.frontend,
-        getPluginRecord(id)?.error,
-      ])
-      .filter(([, state]) => state !== "active");
-    expect(notActive).toEqual([]);
-  });
-
-  it("logs no error while importing and activating them", () => {
-    // Axios has no server to reach here; a failed request is the test
-    // environment, not the plugin.
-    const real = errors
-      .map((args) => args.map(String).join(" "))
-      .filter((line) => !/Network Error/.test(line));
-    expect(real).toEqual([]);
-  });
-});
diff --git a/src/ui/tests/plugin-host/cli-bundle.test.tsx b/src/ui/tests/plugin-host/cli-bundle.test.tsx
index 76e2a870c..b04a65a77 100644
--- a/src/ui/tests/plugin-host/cli-bundle.test.tsx
+++ b/src/ui/tests/plugin-host/cli-bundle.test.tsx
@@ -17,7 +17,7 @@ import {
   renderWithApp,
   type FrontendPluginModule,
   type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
+} from "@termix-ssh/plugin-sdk/testing";
 import { resetPanels } from "@/shell/panel-registry";
 import { resetPluginStore } from "@/plugin-host/plugin-store";
 
@@ -48,7 +48,7 @@ afterAll(async () => {
 describe("a CLI-built plugin bundle", () => {
   it("leaves React and the SDK out of the bundle", () => {
     expect(bundle).toMatch(/from\s*"react"/);
-    expect(bundle).toMatch(/from\s*"@termix\/plugin-sdk\/frontend"/);
+    expect(bundle).toMatch(/from\s*"@termix-ssh\/plugin-sdk\/frontend"/);
     expect(bundle).not.toMatch(/react\.production|react\.development/);
   });
 
diff --git a/src/ui/tests/plugin-host/fixtures/hook-plugin/src/frontend/index.tsx b/src/ui/tests/plugin-host/fixtures/hook-plugin/src/frontend/index.tsx
index fee1efca7..3563e2c1d 100644
--- a/src/ui/tests/plugin-host/fixtures/hook-plugin/src/frontend/index.tsx
+++ b/src/ui/tests/plugin-host/fixtures/hook-plugin/src/frontend/index.tsx
@@ -1,5 +1,8 @@
 import { useState } from "react";
-import { useTranslation, type TermixApp } from "@termix/plugin-sdk/frontend";
+import {
+  useTranslation,
+  type TermixApp,
+} from "@termix-ssh/plugin-sdk/frontend";
 
 function Counter() {
   const { t } = useTranslation();
diff --git a/src/ui/tests/plugin-host/host-scope.test.tsx b/src/ui/tests/plugin-host/host-scope.test.tsx
index a6eed8890..91f8d6de2 100644
--- a/src/ui/tests/plugin-host/host-scope.test.tsx
+++ b/src/ui/tests/plugin-host/host-scope.test.tsx
@@ -6,12 +6,12 @@ import {
   useHost,
   type PluginHostRecord,
   type TermixApp,
-} from "@termix/plugin-sdk/frontend";
+} from "@termix-ssh/plugin-sdk/frontend";
 import {
   renderWithApp,
   type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+} from "@termix-ssh/plugin-sdk/testing";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 import {
   scopeHost,
   scopeHostArgs,
diff --git a/src/ui/tests/plugin-host/loader.test.tsx b/src/ui/tests/plugin-host/loader.test.tsx
index acd56dbfe..69f168d97 100644
--- a/src/ui/tests/plugin-host/loader.test.tsx
+++ b/src/ui/tests/plugin-host/loader.test.tsx
@@ -1,6 +1,9 @@
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 import { Puzzle } from "lucide-react";
-import type { FrontendModule, TermixApp } from "@termix/plugin-sdk/frontend";
+import type {
+  FrontendModule,
+  TermixApp,
+} from "@termix-ssh/plugin-sdk/frontend";
 import type { PluginSummary } from "@/api/plugins-api";
 import {
   configurePluginLoader,
@@ -21,6 +24,7 @@ import {
   visibleRailItems,
 } from "@/sidebar/rail-items";
 import { getTabType, resetTabTypes } from "@/shell/tab-registry";
+import i18n from "@/i18n/i18n";
 
 function summary(
   id: string,
@@ -260,6 +264,43 @@ describe("plugin loader", () => {
     expect(isPluginFrontendActive("alpha")).toBe(true);
   });
 
+  it("loads plugin strings on guest pages", async () => {
+    modules.guest = railPlugin("guest");
+    plugins = [summary("guest", { locales: ["en"] })];
+    configurePluginLoader({
+      fetchPlugins: async () => plugins,
+      importFrontend: async (entry) => modules[entry.id],
+      loadLocale: async () => ({ hello: "Hello guest" }),
+      injectCss: () => null,
+    });
+
+    await startPluginRuntime({ guest: true });
+    await i18n.loadNamespaces("guest");
+    expect(i18n.t("hello", { ns: "guest" })).toBe("Hello guest");
+  });
+
+  it("does not fetch strings for a disabled plugin", async () => {
+    const loadLocale = vi.fn(async () => null);
+    modules.on = railPlugin("on");
+    plugins = [
+      summary("on", { locales: ["en"] }),
+      summary("off", { enabled: false, locales: ["en"] }),
+    ];
+    configurePluginLoader({
+      fetchPlugins: async () => plugins,
+      importFrontend: async (entry) => modules[entry.id],
+      loadLocale,
+      injectCss: () => null,
+    });
+
+    await syncPlugins();
+    const loaded = loadLocale.mock.calls.map(
+      (call) => (call as unknown as [PluginSummary])[0].id,
+    );
+    expect(loaded).toContain("on");
+    expect(loaded).not.toContain("off");
+  });
+
   it("settles even when the plugin list cannot be fetched", async () => {
     vi.spyOn(console, "error").mockImplementation(() => {});
     configurePluginLoader({
diff --git a/src/ui/tests/plugin-host/onboarding-contributions.test.tsx b/src/ui/tests/plugin-host/onboarding-contributions.test.tsx
new file mode 100644
index 000000000..0ca6df867
--- /dev/null
+++ b/src/ui/tests/plugin-host/onboarding-contributions.test.tsx
@@ -0,0 +1,164 @@
+import { afterEach, describe, expect, it } from "vitest";
+import type { TermixApp } from "@termix-ssh/plugin-sdk/frontend";
+import {
+  renderWithApp,
+  type RenderedPluginApp,
+} from "@termix-ssh/plugin-sdk/testing";
+import { resetActionRegistry } from "@/shell/action-registry";
+import { resetPluginStore } from "@/plugin-host/plugin-store";
+import {
+  onboardingSteps,
+  SECTION_POSITION,
+} from "@/onboarding/onboarding-registry";
+import { pluginKey } from "@/lib/plugin-i18n";
+
+const mounted: RenderedPluginApp[] = [];
+
+afterEach(async () => {
+  while (mounted.length > 0) await mounted.pop()!.deactivate();
+  resetActionRegistry();
+  resetPluginStore();
+  onboardingSteps.reset();
+});
+
+const Step = () => <span>step</span>;
+
+async function mount(activate: (app: TermixApp) => void) {
+  const rendered = await renderWithApp(
+    { activate: async (app: TermixApp) => activate(app) },
+    { manifest: { id: "guac" } },
+  );
+  mounted.push(rendered);
+  return rendered;
+}
+
+describe("app.registerOnboardingStep", () => {
+  it("keys the step by plugin, namespaces its text and places it by section", async () => {
+    await mount((app) => {
+      app.registerOnboardingStep({
+        id: "setup",
+        version: 2,
+        titleKey: "onboarding.title",
+        descriptionKey: "onboarding.desc",
+        component: Step,
+        audience: "admin",
+        section: "setup",
+        permission: "manage",
+      });
+    });
+    const [step] = onboardingSteps.list();
+    expect(step).toMatchObject({
+      id: "guac:setup",
+      pluginId: "guac",
+      version: 2,
+      audience: "admin",
+      titleKey: pluginKey("guac", "onboarding.title"),
+      descriptionKey: pluginKey("guac", "onboarding.desc"),
+      permission: "guac.manage",
+    });
+    expect(Math.floor(step.position)).toBe(SECTION_POSITION.setup);
+  });
+
+  it("defaults to version 1, everyone, and the explore section", async () => {
+    await mount((app) => {
+      app.registerOnboardingStep({
+        id: "tour",
+        titleKey: "t",
+        component: Step,
+      });
+    });
+    const [step] = onboardingSteps.list();
+    expect(step.version).toBe(1);
+    expect(step.audience).toBe("all");
+    expect(Math.round(step.position)).toBe(SECTION_POSITION.explore);
+  });
+
+  it("passes only the documented context to when, and survives it throwing", async () => {
+    let seen: unknown;
+    await mount((app) => {
+      app.registerOnboardingStep({
+        id: "a",
+        titleKey: "t",
+        component: Step,
+        when: (context) => {
+          seen = context;
+          return context.isDesktop;
+        },
+      });
+      app.registerOnboardingStep({
+        id: "b",
+        titleKey: "t",
+        component: Step,
+        when: () => {
+          throw new Error("boom");
+        },
+      });
+    });
+    const ctx = {
+      mode: "full" as const,
+      isAdmin: true,
+      isDesktop: true,
+      has: () => true,
+      pluginSetupPending: true,
+      pluginsManagedElsewhere: false,
+    };
+    const [a, b] = onboardingSteps.list();
+    expect(a.isRelevant?.(ctx)).toBe(true);
+    expect(seen).toEqual({ isAdmin: true, isDesktop: true, mode: "full" });
+    expect(b.isRelevant?.(ctx)).toBe(false);
+  });
+
+  it("refuses a bad id or version", async () => {
+    await expect(
+      mount((app) => {
+        app.registerOnboardingStep({
+          id: "Bad Id",
+          titleKey: "t",
+          component: Step,
+        });
+      }),
+    ).rejects.toThrow(/not valid/);
+    await expect(
+      mount((app) => {
+        app.registerOnboardingStep({
+          id: "ok",
+          version: 0,
+          titleKey: "t",
+          component: Step,
+        });
+      }),
+    ).rejects.toThrow(/version/);
+  });
+
+  it("removes everything when the plugin is turned off", async () => {
+    const rendered = await mount((app) => {
+      app.registerOnboardingStep({ id: "s", titleKey: "t", component: Step });
+    });
+    expect(onboardingSteps.list()).toHaveLength(1);
+
+    mounted.splice(mounted.indexOf(rendered), 1);
+    await rendered.deactivate();
+    expect(onboardingSteps.list()).toEqual([]);
+  });
+});
+
+describe("renderWithApp onboarding helpers", () => {
+  it("lists and renders a plugin's onboarding step", async () => {
+    const rendered = await mount((app) => {
+      app.registerOnboardingStep({
+        id: "check",
+        titleKey: "t",
+        component: ({ setCanContinue, setBeforeNext }) => {
+          setCanContinue(false);
+          setBeforeNext(() => false);
+          return <span>checking</span>;
+        },
+      });
+    });
+    expect(rendered.registered.onboardingSteps()).toEqual(["check"]);
+    const step = rendered.renderOnboardingStep("check");
+    expect(step.element.textContent).toContain("checking");
+    expect(step.canContinue()).toBe(false);
+    expect(await step.next()).toBe(false);
+  });
+});
diff --git a/src/ui/tests/plugin-host/registries.test.tsx b/src/ui/tests/plugin-host/registries.test.tsx
index 20dd302e9..3b89f9611 100644
--- a/src/ui/tests/plugin-host/registries.test.tsx
+++ b/src/ui/tests/plugin-host/registries.test.tsx
@@ -10,12 +10,12 @@ import {
   usePermission,
   useTranslation,
   type TermixApp,
-} from "@termix/plugin-sdk/frontend";
+} from "@termix-ssh/plugin-sdk/frontend";
 import {
   renderWithApp,
   type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
-import type { PluginManifest } from "@termix/plugin-sdk/manifest";
+} from "@termix-ssh/plugin-sdk/testing";
+import type { PluginManifest } from "@termix-ssh/plugin-sdk/manifest";
 import { NavigationVisibilityToggles } from "@/sidebar/NavigationVisibilityToggles";
 import {
   hostActionsFor,
diff --git a/src/ui/tests/plugin-host/security/guards.test.tsx b/src/ui/tests/plugin-host/security/guards.test.tsx
index b29345a0b..b1ee67d20 100644
--- a/src/ui/tests/plugin-host/security/guards.test.tsx
+++ b/src/ui/tests/plugin-host/security/guards.test.tsx
@@ -1,7 +1,7 @@
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 import { render, screen } from "@testing-library/react";
 import { Puzzle } from "lucide-react";
-import type { FrontendModule } from "@termix/plugin-sdk/frontend";
+import type { FrontendModule } from "@termix-ssh/plugin-sdk/frontend";
 import type { PluginSummary } from "@/api/plugins-api";
 import {
   configurePluginLoader,
diff --git a/src/ui/tests/plugin-host/slots-and-i18n.test.tsx b/src/ui/tests/plugin-host/slots-and-i18n.test.tsx
index 232e28535..5d8346648 100644
--- a/src/ui/tests/plugin-host/slots-and-i18n.test.tsx
+++ b/src/ui/tests/plugin-host/slots-and-i18n.test.tsx
@@ -1,10 +1,13 @@
 import { afterEach, describe, expect, it } from "vitest";
 import { render, screen } from "@testing-library/react";
-import { useTranslation, type TermixApp } from "@termix/plugin-sdk/frontend";
+import {
+  useTranslation,
+  type TermixApp,
+} from "@termix-ssh/plugin-sdk/frontend";
 import {
   renderWithApp,
   type RenderedPluginApp,
-} from "@termix/plugin-sdk/testing";
+} from "@termix-ssh/plugin-sdk/testing";
 import { ComponentSlot } from "@/shell/ActionSlot";
 import { resetActionRegistry } from "@/shell/action-registry";
 import { resetPluginStore } from "@/plugin-host/plugin-store";
diff --git a/src/ui/tests/plugins/PluginConsentPrompt.test.tsx b/src/ui/tests/plugins/PluginConsentPrompt.test.tsx
new file mode 100644
index 000000000..5a1885170
--- /dev/null
+++ b/src/ui/tests/plugins/PluginConsentPrompt.test.tsx
@@ -0,0 +1,92 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { cleanup, fireEvent, render, screen } from "@testing-library/react";
+
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({ t: (key: string) => key }),
+}));
+
+import { PluginConsentPrompt } from "@/plugins/PluginConsentPrompt";
+import { mergePlugins } from "@/plugins/plugin-model";
+
+afterEach(cleanup);
+
+const [plugin] = mergePlugins(
+  [],
+  [
+    {
+      id: "docker",
+      name: "Docker",
+      description: "",
+      author: "Termix",
+      category: "",
+      versions: [],
+      latestVersion: "1.0.0",
+      installed: false,
+      installedVersion: null,
+      updateAvailable: false,
+      addedCapabilities: [],
+      pinnedVersion: null,
+      autoUpdate: false,
+      bundled: false,
+      installCount: null,
+      installCountSource: null,
+    },
+  ],
+);
+
+describe("PluginConsentPrompt", () => {
+  it("lists notable capabilities and folds the low risk ones", () => {
+    render(
+      <PluginConsentPrompt
+        request={{
+          plugin,
+          mode: "install",
+          version: "1.0.0",
+          capabilities: ["kv:own", "ssh:connect", "ui:surface"],
+        }}
+        onCancel={() => {}}
+        onConfirm={() => {}}
+      />,
+    );
+    expect(
+      screen.getByText("plugins.capabilities.ssh:connect.title"),
+    ).toBeTruthy();
+    expect(screen.queryByText("plugins.capabilities.kv:own.title")).toBeNull();
+    expect(screen.getByText("plugins.manager.consent.minor")).toBeTruthy();
+  });
+
+  it("confirms and cancels", () => {
+    const onConfirm = vi.fn();
+    const onCancel = vi.fn();
+    render(
+      <PluginConsentPrompt
+        request={{
+          plugin,
+          mode: "update",
+          version: "1.1.0",
+          capabilities: ["notify:send"],
+        }}
+        onCancel={onCancel}
+        onConfirm={onConfirm}
+      />,
+    );
+    expect(
+      screen.getByText("plugins.manager.consent.updateExplain"),
+    ).toBeTruthy();
+    fireEvent.click(screen.getByText("plugins.manager.consent.agreeUpdate"));
+    fireEvent.click(screen.getByText("common.cancel"));
+    expect(onConfirm).toHaveBeenCalledOnce();
+    expect(onCancel).toHaveBeenCalledOnce();
+  });
+
+  it("renders nothing without a request", () => {
+    const { container } = render(
+      <PluginConsentPrompt
+        request={null}
+        onCancel={() => {}}
+        onConfirm={() => {}}
+      />,
+    );
+    expect(container.innerHTML).toBe("");
+  });
+});
diff --git a/src/ui/tests/plugins/PluginReleaseNotes.test.tsx b/src/ui/tests/plugins/PluginReleaseNotes.test.tsx
new file mode 100644
index 000000000..4ab6d6cb5
--- /dev/null
+++ b/src/ui/tests/plugins/PluginReleaseNotes.test.tsx
@@ -0,0 +1,153 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import {
+  cleanup,
+  fireEvent,
+  render,
+  screen,
+  waitFor,
+} from "@testing-library/react";
+import i18next from "i18next";
+import { I18nextProvider, initReactI18next } from "react-i18next";
+import type { PluginEntry } from "@/plugins/plugin-model";
+
+const getPluginChangelog = vi.hoisted(() => vi.fn());
+vi.mock("@/api/plugins-api", () => ({ getPluginChangelog }));
+
+const { PluginReleaseNotes, PluginVideo } =
+  await import("@/plugins/PluginReleaseNotes");
+
+afterEach(() => {
+  cleanup();
+  getPluginChangelog.mockReset();
+});
+
+async function i18n() {
+  const instance = i18next.createInstance();
+  await instance.use(initReactI18next).init({
+    lng: "en",
+    resources: {
+      en: {
+        translation: {
+          plugins: {
+            manager: {
+              releaseNotes: "Release notes",
+              installedBadge: "Installed",
+              changeTypes: { added: "Added", fixed: "Fixed" },
+              showOlderReleases: "Older releases ({{count}})",
+              hideOlderReleases: "Hide older releases",
+              showMoreChanges: "Show {{count}} more",
+              videoTitle: "{{name}} video",
+            },
+          },
+        },
+      },
+    },
+  });
+  return instance;
+}
+
+function plugin(overrides: Partial<PluginEntry> = {}): PluginEntry {
+  return {
+    id: "docker",
+    name: "Docker",
+    installed: true,
+    version: "1.0.0",
+    versions: [],
+    ...overrides,
+  } as PluginEntry;
+}
+
+describe("PluginReleaseNotes", () => {
+  it("shows the installed copy's changelog grouped by type", async () => {
+    getPluginChangelog.mockResolvedValue([
+      {
+        version: "1.0.0",
+        changes: [
+          { type: "added", text: "Runs `docker ps`" },
+          { type: "fixed", text: "A crash" },
+        ],
+      },
+    ]);
+    render(
+      <I18nextProvider i18n={await i18n()}>
+        <PluginReleaseNotes plugin={plugin()} />
+      </I18nextProvider>,
+    );
+    await waitFor(() => expect(screen.getByText("A crash")).toBeTruthy());
+    expect(getPluginChangelog).toHaveBeenCalledWith("docker");
+    expect(screen.getByText("Added")).toBeTruthy();
+    expect(screen.getByText("docker ps").tagName).toBe("CODE");
+    expect(screen.getByText("Installed")).toBeTruthy();
+  });
+
+  it("shows only the newest release until older ones are opened", async () => {
+    getPluginChangelog.mockResolvedValue([
+      { version: "1.1.0", changes: [{ type: "fixed", text: "Newest" }] },
+      { version: "1.0.0", changes: [{ type: "added", text: "Oldest" }] },
+    ]);
+    render(
+      <I18nextProvider i18n={await i18n()}>
+        <PluginReleaseNotes plugin={plugin({ version: "1.1.0" })} />
+      </I18nextProvider>,
+    );
+    await waitFor(() => expect(screen.getByText("Newest")).toBeTruthy());
+    expect(screen.queryByText("Oldest")).toBeNull();
+    fireEvent.click(screen.getByText("Older releases (1)"));
+    expect(screen.getByText("Oldest")).toBeTruthy();
+  });
+
+  it("cuts a long release down until it is opened up", async () => {
+    getPluginChangelog.mockResolvedValue([
+      {
+        version: "1.0.0",
+        changes: Array.from({ length: 12 }, (_, i) => ({
+          type: "added",
+          text: `Change ${i}`,
+        })),
+      },
+    ]);
+    render(
+      <I18nextProvider i18n={await i18n()}>
+        <PluginReleaseNotes plugin={plugin()} />
+      </I18nextProvider>,
+    );
+    await waitFor(() => expect(screen.getByText("Change 7")).toBeTruthy());
+    expect(screen.queryByText("Change 8")).toBeNull();
+    fireEvent.click(screen.getByText("Show 4 more"));
+    expect(screen.getByText("Change 11")).toBeTruthy();
+  });
+
+  it("renders nothing for a plugin with no versions", async () => {
+    const { container } = render(
+      <I18nextProvider i18n={await i18n()}>
+        <PluginReleaseNotes plugin={plugin({ installed: false })} />
+      </I18nextProvider>,
+    );
+    expect(container.innerHTML).toBe("");
+    expect(getPluginChangelog).not.toHaveBeenCalled();
+  });
+});
+
+describe("PluginVideo", () => {
+  it("embeds a YouTube id", async () => {
+    render(
+      <I18nextProvider i18n={await i18n()}>
+        <PluginVideo videoId="dQw4w9WgXcQ" name="Docker" />
+      </I18nextProvider>,
+    );
+    const frame = screen.getByTitle("Docker video") as HTMLIFrameElement;
+    expect(frame.src).toBe(
+      "https://www.youtube-nocookie.com/embed/dQw4w9WgXcQ?rel=0",
+    );
+  });
+
+  it("loads nothing without a valid id", async () => {
+    const { container } = render(
+      <I18nextProvider i18n={await i18n()}>
+        <PluginVideo videoId="https://evil.example" name="Docker" />
+        <PluginVideo name="Docker" />
+      </I18nextProvider>,
+    );
+    expect(container.querySelector("iframe")).toBeNull();
+  });
+});
diff --git a/src/ui/tests/plugins/PluginsTab.test.tsx b/src/ui/tests/plugins/PluginsTab.test.tsx
new file mode 100644
index 000000000..ca1c0a129
--- /dev/null
+++ b/src/ui/tests/plugins/PluginsTab.test.tsx
@@ -0,0 +1,111 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { cleanup, fireEvent, render, screen } from "@testing-library/react";
+import i18next from "i18next";
+import { I18nextProvider, initReactI18next } from "react-i18next";
+import en from "@/locales/en.json";
+import { PluginsTab } from "@/plugins/PluginsTab";
+import { docsUrl } from "@/lib/docs";
+
+const plugin = {
+  id: "demo",
+  name: "Demo Plugin",
+  description: "Does demo things",
+  version: "1.0.0",
+  latestVersion: "1.0.0",
+  installed: true,
+  inRegistry: true,
+  enabled: true,
+  status: "running",
+  updateAvailable: false,
+  pinnedVersion: null,
+  addedCapabilities: [],
+  capabilities: [],
+  contributes: {},
+  versions: [],
+  installCount: null,
+  installCountSource: null,
+};
+
+vi.mock("@/plugins/use-plugins-manager", () => ({
+  usePluginsManager: () => ({
+    plugins: [plugin],
+    loading: false,
+    refreshing: false,
+    refresh: vi.fn(),
+    registryError: null,
+    managedByServer: false,
+    busy: new Set(),
+    consent: null,
+    setConsent: vi.fn(),
+    confirmConsent: vi.fn(),
+    developerMode: false,
+    signedOnly: false,
+  }),
+}));
+
+async function renderTab() {
+  const i18n = i18next.createInstance();
+  await i18n.use(initReactI18next).init({
+    lng: "en",
+    resources: { en: { translation: en } },
+  });
+  return render(
+    <I18nextProvider i18n={i18n}>
+      <PluginsTab />
+    </I18nextProvider>,
+  );
+}
+
+beforeEach(() => localStorage.clear());
+afterEach(cleanup);
+
+describe("PluginsTab", () => {
+  it("tells people community plugins are coming and links the guide", async () => {
+    await renderTab();
+    fireEvent.click(screen.getByText(en.plugins.manager.tabs.browse));
+
+    expect(
+      screen.getByText(en.plugins.manager.communitySoon, { exact: false }),
+    ).toBeTruthy();
+    const link = screen.getByText(en.plugins.manager.communitySubmit);
+    expect(link.getAttribute("href")).toBe(docsUrl("communityRegistry"));
+  });
+
+  it("switches to a table and remembers it", async () => {
+    await renderTab();
+    expect(screen.queryByRole("table")).toBeNull();
+    expect(
+      screen.getByLabelText(en.plugins.manager.columns.title),
+    ).toBeTruthy();
+
+    fireEvent.click(screen.getByLabelText(en.panel.listView));
+
+    expect(screen.getByRole("table")).toBeTruthy();
+    expect(screen.getByText(en.plugins.manager.table.version)).toBeTruthy();
+    expect(
+      screen.queryByLabelText(en.plugins.manager.columns.title),
+    ).toBeNull();
+    expect(localStorage.getItem("pluginsTab.view")).toBe("list");
+
+    cleanup();
+    await renderTab();
+    expect(screen.getByRole("table")).toBeTruthy();
+  });
+
+  it("uses the saved column count for the grid", async () => {
+    localStorage.setItem("pluginsTab.columns", "5");
+    const { container } = await renderTab();
+    const grid = container.querySelector<HTMLElement>(
+      "[style*='grid-template-columns']",
+    );
+    expect(grid?.style.gridTemplateColumns).toContain("/ 5");
+  });
+
+  it("fits auto columns to the tab width, not the window", async () => {
+    const { container } = await renderTab();
+    const grid = container.querySelector<HTMLElement>(
+      "[style*='grid-template-columns']",
+    );
+    expect(grid?.style.gridTemplateColumns).toContain("auto-fill");
+  });
+});
diff --git a/src/ui/tests/plugins/plugin-bits.test.tsx b/src/ui/tests/plugins/plugin-bits.test.tsx
new file mode 100644
index 000000000..45ad2779d
--- /dev/null
+++ b/src/ui/tests/plugins/plugin-bits.test.tsx
@@ -0,0 +1,39 @@
+import { afterEach, describe, expect, it } from "vitest";
+import { cleanup, render, screen } from "@testing-library/react";
+import i18next from "i18next";
+import { I18nextProvider, initReactI18next } from "react-i18next";
+import { CapabilityRow } from "@/plugins/plugin-bits";
+
+afterEach(cleanup);
+
+describe("CapabilityRow", () => {
+  it("resolves capability ids that contain a colon", async () => {
+    const i18n = i18next.createInstance();
+    await i18n.use(initReactI18next).init({
+      lng: "en",
+      resources: {
+        en: {
+          translation: {
+            plugins: {
+              capabilities: {
+                "users:impersonate": {
+                  title: "Act as other users",
+                  consequence: "It can do anything a user can.",
+                },
+              },
+            },
+          },
+        },
+      },
+    });
+
+    render(
+      <I18nextProvider i18n={i18n}>
+        <CapabilityRow capability="users:impersonate" />
+      </I18nextProvider>,
+    );
+
+    expect(screen.getByText("Act as other users")).toBeTruthy();
+    expect(screen.getByText("It can do anything a user can.")).toBeTruthy();
+  });
+});
diff --git a/src/ui/tests/plugins/plugin-model.test.ts b/src/ui/tests/plugins/plugin-model.test.ts
new file mode 100644
index 000000000..6da7939c7
--- /dev/null
+++ b/src/ui/tests/plugins/plugin-model.test.ts
@@ -0,0 +1,485 @@
+import { describe, expect, it } from "vitest";
+import type { PluginSummary, RegistryPluginEntry } from "@/api/plugins-api";
+import {
+  betaFeedbackUrl,
+  betaToTry,
+  isPrerelease,
+  categoriesOf,
+  describeContributions,
+  formatBytes,
+  formatCount,
+  groupChanges,
+  matchesQuery,
+  mergeReleaseNotes,
+  mergePlugins,
+  orderByRisk,
+  pluginSource,
+  pluginStatus,
+  reportIssueUrl,
+  requestFeatureUrl,
+  sortPlugins,
+  uploadEntry,
+  youtubeEmbedUrl,
+} from "@/plugins/plugin-model";
+
+function summary(overrides: Partial<PluginSummary> = {}): PluginSummary {
+  return {
+    id: "docker",
+    name: "Docker",
+    version: "1.0.0",
+    enabled: true,
+    state: "active",
+    contributes: null,
+    capabilities: ["kv:own"],
+    ...overrides,
+  };
+}
+
+function entry(
+  overrides: Partial<RegistryPluginEntry> = {},
+): RegistryPluginEntry {
+  return {
+    id: "docker",
+    name: "Docker",
+    description: "Containers",
+    author: "Termix",
+    category: "Infrastructure",
+    versions: [
+      {
+        version: "1.1.0",
+        compatible: true,
+        capabilities: ["kv:own", "ssh:connect"],
+        publishedAt: "2026-10-02",
+        size: 1,
+      },
+    ],
+    latestVersion: "1.1.0",
+    installed: true,
+    installedVersion: "1.0.0",
+    updateAvailable: true,
+    addedCapabilities: ["ssh:connect"],
+    pinnedVersion: null,
+    autoUpdate: false,
+    bundled: true,
+    installCount: null,
+    installCountSource: null,
+    ...overrides,
+  };
+}
+
+describe("mergePlugins", () => {
+  it("joins an installed plugin with its registry entry", () => {
+    const [row] = mergePlugins([summary()], [entry()]);
+    expect(row).toMatchObject({
+      installed: true,
+      version: "1.0.0",
+      latestVersion: "1.1.0",
+      updateAvailable: true,
+      addedCapabilities: ["ssh:connect"],
+      capabilities: ["kv:own"],
+      category: "Infrastructure",
+      inRegistry: true,
+      status: "running",
+    });
+  });
+
+  it("lists registry plugins that are not installed with the latest capabilities", () => {
+    const rows = mergePlugins(
+      [],
+      [entry({ installed: false, installedVersion: null })],
+    );
+    expect(rows[0]).toMatchObject({
+      installed: false,
+      version: null,
+      status: null,
+      capabilities: ["kv:own", "ssh:connect"],
+    });
+  });
+
+  it("uses the installed features and falls back to the registry", () => {
+    const registry = entry({ features: ["From registry"] });
+    expect(
+      mergePlugins([summary({ features: ["Installed"] })], [registry])[0]
+        .features,
+    ).toEqual(["Installed"]);
+    expect(mergePlugins([summary()], [registry])[0].features).toEqual([
+      "From registry",
+    ]);
+    expect(mergePlugins([summary()], null)[0].features).toEqual([]);
+  });
+
+  it("uses the installed docs link and falls back to the registry", () => {
+    const registry = entry({ docs: "https://docs.example.com/registry" });
+    expect(
+      mergePlugins(
+        [summary({ docs: "https://docs.example.com/installed" })],
+        [registry],
+      )[0].docs,
+    ).toBe("https://docs.example.com/installed");
+    expect(mergePlugins([summary()], [registry])[0].docs).toBe(
+      "https://docs.example.com/registry",
+    );
+    expect(mergePlugins([summary()], null)[0].docs).toBeUndefined();
+    expect(mergePlugins([], [registry])[0].docs).toBe(
+      "https://docs.example.com/registry",
+    );
+  });
+
+  it("keeps installed plugins when the registry is unreachable", () => {
+    const rows = mergePlugins([summary()], null);
+    expect(rows).toHaveLength(1);
+    expect(rows[0].inRegistry).toBe(false);
+  });
+});
+
+describe("pluginStatus", () => {
+  it("maps loader and stored states", () => {
+    expect(pluginStatus(summary({ state: "failed" }))).toBe("failed");
+    expect(pluginStatus(summary({ state: "blocked" }))).toBe("blocked");
+    expect(pluginStatus(summary({ enabled: false, state: "disabled" }))).toBe(
+      "disabled",
+    );
+    expect(pluginStatus(summary())).toBe("running");
+  });
+});
+
+describe("sorting and filtering", () => {
+  const rows = mergePlugins(
+    [],
+    [
+      entry({ id: "b", name: "Beta", category: "Monitoring" }),
+      entry({
+        id: "a",
+        name: "Alpha",
+        category: "Access",
+        description: "Sign in",
+        features: ["Works with Podman"],
+        versions: [
+          {
+            version: "1.0.0",
+            compatible: true,
+            capabilities: [],
+            publishedAt: "2026-10-05",
+            size: 1,
+          },
+        ],
+      }),
+    ],
+  );
+
+  it("sorts by name, date and category", () => {
+    expect(sortPlugins(rows, "name").map((r) => r.id)).toEqual(["a", "b"]);
+    expect(sortPlugins(rows, "updated").map((r) => r.id)).toEqual(["a", "b"]);
+    expect(sortPlugins(rows, "category").map((r) => r.id)).toEqual(["a", "b"]);
+  });
+
+  it("searches name, description and id", () => {
+    expect(
+      rows.filter((r) => matchesQuery(r, "sign")).map((r) => r.id),
+    ).toEqual(["a"]);
+    expect(
+      rows.filter((r) => matchesQuery(r, "podman")).map((r) => r.id),
+    ).toEqual(["a"]);
+    expect(rows.filter((r) => matchesQuery(r, "  ")).length).toBe(2);
+  });
+
+  it("collects categories", () => {
+    expect(categoriesOf(rows)).toEqual(["Access", "Monitoring"]);
+  });
+});
+
+describe("helpers", () => {
+  it("orders capabilities worst first", () => {
+    expect(orderByRisk(["kv:own", "hosts:write", "credentials:read"])).toEqual([
+      "credentials:read",
+      "hosts:write",
+      "kv:own",
+    ]);
+  });
+
+  it("counts contributions", () => {
+    expect(
+      describeContributions({
+        tabs: [{}, {}],
+        settings: { admin: [] },
+        auth: { loginMethods: [{}], secondFactors: [] },
+        panels: [],
+      }),
+    ).toEqual([
+      { kind: "tabs", count: 2 },
+      { kind: "auth", count: 1 },
+      { kind: "settings", count: 1 },
+    ]);
+  });
+
+  it("formats sizes", () => {
+    expect(formatBytes(512)).toBe("512 B");
+    expect(formatBytes(2048)).toBe("2.0 KB");
+    expect(formatBytes(50 * 1024 * 1024)).toBe("50 MB");
+  });
+});
+
+describe("popularity", () => {
+  it("sorts by install count, unknown counts last", () => {
+    const rows = mergePlugins(
+      [],
+      [
+        entry({ id: "a", name: "A", installed: false, installCount: 5 }),
+        entry({ id: "b", name: "B", installed: false, installCount: null }),
+        entry({ id: "c", name: "C", installed: false, installCount: 90 }),
+      ],
+    );
+    expect(sortPlugins(rows, "popular").map((r) => r.id)).toEqual([
+      "c",
+      "a",
+      "b",
+    ]);
+  });
+
+  it("formats counts roughly", () => {
+    expect(formatCount(950)).toBe("950");
+    expect(formatCount(1234)).toBe("1.2k");
+    expect(formatCount(45_000)).toBe("45k");
+    expect(formatCount(2_500_000)).toBe("2.5M");
+  });
+});
+
+describe("source and trust", () => {
+  it("tells bundled, signed and unverified copies apart", () => {
+    expect(pluginSource(summary({ source: "bundled", tier: "bundled" }))).toBe(
+      "bundled",
+    );
+    expect(
+      pluginSource(
+        summary({ source: "user", tier: "official", signedBy: "k" }),
+      ),
+    ).toBe("official");
+    expect(pluginSource(summary({ source: "user", tier: "community" }))).toBe(
+      "unverified",
+    );
+    expect(
+      pluginSource(
+        summary({ source: "user", tier: "unverified", signedBy: "k" }),
+      ),
+    ).toBe("unverified");
+  });
+
+  it("marks an upload as unverified", () => {
+    const row = uploadEntry({
+      token: "t",
+      id: "notes",
+      name: "Notes",
+      version: "0.2.0",
+      description: "",
+      author: "me",
+      capabilities: ["kv:own"],
+      replaces: "0.1.0",
+    });
+    expect(row).toMatchObject({
+      unverified: true,
+      installed: true,
+      version: "0.1.0",
+      latestVersion: "0.2.0",
+    });
+  });
+});
+
+describe("reportIssueUrl", () => {
+  const base = {
+    id: "docker",
+    repository: "https://github.com/Termix-SSH/Plugin-Docker.git",
+    version: "1.0.0",
+    latestVersion: "1.1.0",
+    status: "failed" as const,
+    source: "official" as const,
+    lastError: "boom",
+  };
+
+  it("fills the bug form on an official plugin repo", () => {
+    const parsed = new URL(reportIssueUrl(base, "26.10.0")!);
+    expect(parsed.origin + parsed.pathname).toBe(
+      "https://github.com/Termix-SSH/Plugin-Docker/issues/new",
+    );
+    expect(parsed.searchParams.get("template")).toBe("bug_report.yml");
+    expect(parsed.searchParams.get("termix-version")).toBe("26.10.0");
+    expect(parsed.searchParams.get("plugin-version")).toBe("1.0.0");
+    expect(parsed.searchParams.get("environment")).toContain(
+      "Plugin docker, official, failed",
+    );
+    expect(parsed.searchParams.get("logs")).toBe("boom");
+    expect(parsed.searchParams.has("body")).toBe(false);
+  });
+
+  it("fills the same bug form on an unverified plugin repo", () => {
+    const parsed = new URL(
+      reportIssueUrl({ ...base, source: "unverified" }, "26.10.0")!,
+    );
+    expect(parsed.searchParams.get("template")).toBe("bug_report.yml");
+    expect(parsed.searchParams.get("plugin-version")).toBe("1.0.0");
+    expect(parsed.searchParams.get("environment")).toContain(
+      "Plugin docker, unverified, failed",
+    );
+    expect(parsed.searchParams.has("body")).toBe(false);
+  });
+
+  it("gives nothing for a repo that is not on GitHub", () => {
+    expect(
+      reportIssueUrl({
+        ...base,
+        repository: "https://gitlab.com/a/b",
+      }),
+    ).toBeNull();
+  });
+});
+
+describe("requestFeatureUrl", () => {
+  it("opens the feature form on the plugin repo", () => {
+    const parsed = new URL(
+      requestFeatureUrl({
+        repository: "https://github.com/Termix-SSH/Plugin-Docker/",
+      })!,
+    );
+    expect(parsed.origin + parsed.pathname).toBe(
+      "https://github.com/Termix-SSH/Plugin-Docker/issues/new",
+    );
+    expect(parsed.searchParams.get("template")).toBe("feature_request.yml");
+  });
+
+  it("gives nothing for a repo that is not on GitHub", () => {
+    expect(
+      requestFeatureUrl({ repository: "https://gitlab.com/a/b" }),
+    ).toBeNull();
+  });
+});
+
+describe("mergeReleaseNotes", () => {
+  const registryVersion = (version: string, extra = {}) => ({
+    version,
+    compatible: true,
+    capabilities: [],
+    size: 1,
+    publishedAt: "2026-10-01T00:00:00Z",
+    ...extra,
+  });
+
+  it("joins registry and local notes newest first, local winning", () => {
+    const rows = mergeReleaseNotes(
+      [
+        registryVersion("1.2.0", {
+          compatible: false,
+          notes: { changes: [{ type: "added", text: "Registry" }] },
+        }),
+        registryVersion("1.0.0", {
+          releaseNotesUrl: "https://github.com/x/y/releases/tag/v1.0.0",
+          notes: { changes: [{ type: "added", text: "Old" }] },
+        }),
+      ],
+      [
+        {
+          version: "1.0.0",
+          date: "2026-09-01",
+          summary: "First.",
+          changes: [{ type: "added", text: "Local" }],
+        },
+        { version: "0.9.0", changes: [{ type: "fixed", text: "Beta" }] },
+      ],
+    );
+    expect(rows.map((r) => r.version)).toEqual(["1.2.0", "1.0.0", "0.9.0"]);
+    expect(rows[0]).toMatchObject({ compatible: false });
+    expect(rows[1]).toEqual({
+      version: "1.0.0",
+      date: "2026-09-01",
+      summary: "First.",
+      changes: [{ type: "added", text: "Local" }],
+      compatible: true,
+      releaseNotesUrl: "https://github.com/x/y/releases/tag/v1.0.0",
+    });
+    expect(rows[2]).toMatchObject({ date: null, compatible: true });
+  });
+
+  it("is empty with nothing to show", () => {
+    expect(mergeReleaseNotes([], [])).toEqual([]);
+  });
+});
+
+describe("groupChanges", () => {
+  it("groups by type in a fixed order", () => {
+    expect(
+      groupChanges([
+        { type: "fixed", text: "b" },
+        { type: "added", text: "a" },
+        { type: "fixed", text: "c" },
+      ]),
+    ).toEqual([
+      { type: "added", items: ["a"] },
+      { type: "fixed", items: ["b", "c"] },
+    ]);
+  });
+});
+
+describe("youtubeEmbedUrl", () => {
+  it("builds a privacy embed from a video id only", () => {
+    expect(youtubeEmbedUrl("dQw4w9WgXcQ")).toBe(
+      "https://www.youtube-nocookie.com/embed/dQw4w9WgXcQ?rel=0",
+    );
+  });
+
+  it("refuses anything that is not an id", () => {
+    for (const value of [
+      undefined,
+      "",
+      "https://evil.example/x",
+      "dQw4w9WgXcQ/../../x",
+      "javascript:alert(1)",
+    ]) {
+      expect(youtubeEmbedUrl(value)).toBeNull();
+    }
+  });
+});
+
+describe("betas", () => {
+  it("knows a prerelease", () => {
+    expect(isPrerelease("1.2.0-beta.1")).toBe(true);
+    expect(isPrerelease("1.2.0")).toBe(false);
+    expect(isPrerelease(null)).toBe(false);
+  });
+
+  it("offers a beta only when newer than what is installed on stable", () => {
+    const base = {
+      installed: true,
+      version: "1.1.0",
+      latestBeta: "1.2.0-beta.1",
+      channel: "stable" as const,
+    };
+    expect(betaToTry(base)).toBe("1.2.0-beta.1");
+    expect(betaToTry({ ...base, channel: "beta" })).toBeNull();
+    expect(betaToTry({ ...base, version: "1.2.0-beta.1" })).toBeNull();
+    expect(betaToTry({ ...base, installed: false })).toBeNull();
+    expect(betaToTry({ ...base, latestBeta: null })).toBeNull();
+  });
+
+  it("sends beta feedback to the plugin's repo", () => {
+    const url = new URL(
+      betaFeedbackUrl(
+        {
+          id: "docker",
+          repository: "https://github.com/Termix-SSH/Plugin-Docker",
+          version: "1.2.0-beta.1",
+          lastError: null,
+        },
+        "26.11.0",
+      )!,
+    );
+    expect(url.pathname).toBe("/Termix-SSH/Plugin-Docker/issues/new");
+    expect(url.searchParams.get("template")).toBe("beta_feedback.yml");
+    expect(url.searchParams.get("plugin-version")).toBe("1.2.0-beta.1");
+    expect(
+      betaFeedbackUrl({
+        id: "x",
+        repository: "https://gitlab.com/a/b",
+        version: "1.0.0",
+        lastError: null,
+      }),
+    ).toBeNull();
+  });
+});
diff --git a/src/ui/tests/settings/FeatureSettingsSections.test.tsx b/src/ui/tests/settings/FeatureSettingsSections.test.tsx
index e962cfc86..cf361ffe4 100644
--- a/src/ui/tests/settings/FeatureSettingsSections.test.tsx
+++ b/src/ui/tests/settings/FeatureSettingsSections.test.tsx
@@ -106,6 +106,22 @@ describe("useFeatureSettings", () => {
     await waitFor(() => expect(api.getPlugins).toHaveBeenCalled());
     expect(result.current).toEqual([]);
   });
+
+  it("picks up a feature enabled while it is open", async () => {
+    api.getPlugins.mockResolvedValue([
+      plugin({ id: "late", name: "Late", enabled: false }),
+    ]);
+    const { result } = renderHook(() => useFeatureSettings("user"));
+    await waitFor(() => expect(api.getPlugins).toHaveBeenCalledTimes(1));
+    expect(result.current).toEqual([]);
+
+    api.getPlugins.mockResolvedValue([plugin({ id: "late", name: "Late" })]);
+    window.dispatchEvent(new CustomEvent("termix:plugins-changed"));
+
+    await waitFor(() =>
+      expect(result.current.map((p) => p.id)).toEqual(["late"]),
+    );
+  });
 });
 
 describe("FeatureSettingsSection", () => {
@@ -155,11 +171,7 @@ describe("FeatureSettingsSection", () => {
     const save = screen.getByText("common.save").closest("button")!;
     expect(save.disabled).toBe(true);
 
-    fireEvent.click(
-      screen
-        .getAllByRole("button")
-        .find((b) => b !== save && b.textContent === "")!,
-    );
+    fireEvent.click(screen.getByRole("switch"));
     fireEvent.click(save);
 
     await waitFor(() =>
diff --git a/src/ui/tests/sidebar/KeybindingsDialog.test.tsx b/src/ui/tests/settings/KeybindingsSettings.test.tsx
similarity index 85%
rename from src/ui/tests/sidebar/KeybindingsDialog.test.tsx
rename to src/ui/tests/settings/KeybindingsSettings.test.tsx
index 4cebd2bd8..fea04ee75 100644
--- a/src/ui/tests/sidebar/KeybindingsDialog.test.tsx
+++ b/src/ui/tests/settings/KeybindingsSettings.test.tsx
@@ -9,7 +9,16 @@ vi.mock("@/api/open-tabs-api", async (importOriginal) => ({
 }));
 vi.mock("@/main-axios", () => ({ saveUserPreferences: vi.fn() }));
 
-const { KeybindingsDialog } = await import("../../sidebar/KeybindingsDialog");
+const { KeybindingsSettings } = await import("@/settings/KeybindingsSettings");
+const { SurfaceScope } = await import("@/components/surface/surface-scope");
+
+function renderSettings() {
+  return render(
+    <SurfaceScope>
+      <KeybindingsSettings />
+    </SurfaceScope>,
+  );
+}
 const {
   registerKeybindingAction,
   registerKeybindingDefault,
@@ -31,7 +40,7 @@ const combo = {
   meta: false,
 };
 
-describe("KeybindingsDialog", () => {
+describe("KeybindingsSettings", () => {
   it("lists registered defaults and keeps a binding whose plugin is off", async () => {
     registerKeybindingDefault({
       id: "default-x",
@@ -49,7 +58,7 @@ describe("KeybindingsDialog", () => {
         updatedAt: "",
       },
     ]);
-    render(<KeybindingsDialog open onOpenChange={() => {}} />);
+    renderSettings();
     expect(await screen.findByText("sample:builtInX")).toBeTruthy();
     expect(
       await screen.findByText("newUi.sidebar.keybindings.unavailableAction"),
@@ -64,7 +73,7 @@ describe("KeybindingsDialog", () => {
       scope: "session",
       editor: () => <span>sample editor</span>,
     });
-    render(<KeybindingsDialog open onOpenChange={() => {}} />);
+    renderSettings();
     fireEvent.click(
       await screen.findByText("newUi.sidebar.keybindings.addBinding"),
     );
diff --git a/src/ui/tests/settings/SettingsFields.test.tsx b/src/ui/tests/settings/SettingsFields.test.tsx
index 493c274e5..026ec4f7e 100644
--- a/src/ui/tests/settings/SettingsFields.test.tsx
+++ b/src/ui/tests/settings/SettingsFields.test.tsx
@@ -55,7 +55,7 @@ describe("field types", () => {
       { enabled: false },
     );
 
-    const toggle = screen.getByRole("button");
+    const toggle = screen.getByRole("switch");
     fireEvent.click(toggle);
 
     expect(setValue).toHaveBeenCalledWith("enabled", true);
diff --git a/src/ui/tests/settings/appearance/appearance-controls.test.tsx b/src/ui/tests/settings/appearance/appearance-controls.test.tsx
new file mode 100644
index 000000000..a9d3c6468
--- /dev/null
+++ b/src/ui/tests/settings/appearance/appearance-controls.test.tsx
@@ -0,0 +1,94 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import {
+  act,
+  fireEvent,
+  render,
+  renderHook,
+  screen,
+} from "@testing-library/react";
+
+const prefsApi = vi.hoisted(() => ({
+  getUserPreferences: vi.fn(),
+  saveUserPreferences: vi.fn(async () => {}),
+}));
+vi.mock("@/api/open-tabs-api", () => prefsApi);
+
+const theme = vi.hoisted(() => ({ value: "dark", setTheme: vi.fn() }));
+vi.mock("@/components/theme-provider", () => ({
+  useTheme: () => ({ theme: theme.value, setTheme: theme.setTheme }),
+}));
+
+import {
+  AccentPicker,
+  isHexColor,
+  ThemeGrid,
+  THEMES,
+  useAppearanceSettings,
+} from "@/settings/appearance/appearance-controls";
+
+beforeEach(() => {
+  localStorage.clear();
+  prefsApi.getUserPreferences.mockReset();
+  prefsApi.saveUserPreferences.mockClear();
+  theme.setTheme.mockClear();
+});
+
+describe("isHexColor", () => {
+  it("accepts 3 and 6 digit hex only", () => {
+    expect(isHexColor("#fff")).toBe(true);
+    expect(isHexColor("#f59145")).toBe(true);
+    expect(isHexColor("f59145")).toBe(false);
+    expect(isHexColor("#f5914")).toBe(false);
+    expect(isHexColor("red")).toBe(false);
+  });
+});
+
+describe("useAppearanceSettings", () => {
+  it("saves to the account only in cloud mode", async () => {
+    prefsApi.getUserPreferences.mockResolvedValue({ storageMode: "local" });
+    const { result } = renderHook(() => useAppearanceSettings());
+    await act(async () => {
+      result.current.setAccent("#123456");
+    });
+    expect(localStorage.getItem("termix-accent")).toBe("#123456");
+    expect(prefsApi.saveUserPreferences).not.toHaveBeenCalled();
+
+    prefsApi.getUserPreferences.mockResolvedValue({ storageMode: "cloud" });
+    await act(async () => {
+      result.current.setTheme("nord");
+      result.current.setFontSize("lg");
+    });
+    expect(theme.setTheme).toHaveBeenCalledWith("nord");
+    expect(prefsApi.saveUserPreferences).toHaveBeenCalledWith({
+      theme: "nord",
+    });
+    expect(prefsApi.saveUserPreferences).toHaveBeenCalledWith({
+      fontSize: "lg",
+    });
+  });
+});
+
+describe("ThemeGrid", () => {
+  it("offers every theme and reports the pick", () => {
+    const onChange = vi.fn();
+    render(<ThemeGrid value="dark" onChange={onChange} />);
+    const buttons = screen.getAllByRole("button");
+    expect(buttons).toHaveLength(THEMES.length);
+    fireEvent.click(buttons[THEMES.findIndex((t) => t.id === "gruvbox")]);
+    expect(onChange).toHaveBeenCalledWith("gruvbox");
+  });
+});
+
+describe("AccentPicker", () => {
+  it("takes a typed hex on Enter and ignores anything else", () => {
+    const onChange = vi.fn();
+    render(<AccentPicker value="#f59145" onChange={onChange} />);
+    const input = screen.getByPlaceholderText("#f97316");
+    fireEvent.change(input, { target: { value: "nope" } });
+    fireEvent.keyDown(input, { key: "Enter" });
+    expect(onChange).not.toHaveBeenCalled();
+    fireEvent.change(input, { target: { value: "#abcdef" } });
+    fireEvent.keyDown(input, { key: "Enter" });
+    expect(onChange).toHaveBeenCalledWith("#abcdef");
+  });
+});
diff --git a/src/ui/tests/settings/host-feature-tabs.test.tsx b/src/ui/tests/settings/host-feature-tabs.test.tsx
index 6b080c196..cb44b9b67 100644
--- a/src/ui/tests/settings/host-feature-tabs.test.tsx
+++ b/src/ui/tests/settings/host-feature-tabs.test.tsx
@@ -28,6 +28,7 @@ import { withPluginScope } from "@/plugin-host/scope";
 
 const getPlugins = vi.fn();
 vi.mock("@/api/plugins-api", () => ({
+  PLUGINS_CHANGED_EVENT: "termix:plugins-changed",
   getPlugins: () => getPlugins(),
 }));
 
@@ -297,7 +298,7 @@ describe("HostPluginSections", () => {
       />,
     );
 
-    fireEvent.click(screen.getAllByRole("button")[0]);
+    fireEvent.click(screen.getAllByRole("switch")[0]);
 
     expect(setValue).toHaveBeenCalledWith("docker", "enableDocker", true);
   });
@@ -373,7 +374,7 @@ describe("HostFeatureFields", () => {
     expect(screen.getAllByText("Docker")).toHaveLength(1);
     expect(screen.queryByText("Warpgate")).toBeNull();
 
-    fireEvent.click(screen.getAllByRole("button")[0]);
+    fireEvent.click(screen.getAllByRole("switch")[0]);
     const patch = updateForm.mock.calls[0][0];
     expect(patch(form).pluginSettings).toEqual({
       docker: { enableDocker: true },
diff --git a/src/ui/tests/settings/page-filter.test.ts b/src/ui/tests/settings/page-filter.test.ts
new file mode 100644
index 000000000..286be963d
--- /dev/null
+++ b/src/ui/tests/settings/page-filter.test.ts
@@ -0,0 +1,44 @@
+import { describe, expect, it } from "vitest";
+import { filterSettingsPage, HIDDEN_ATTR } from "@/settings/page-filter";
+
+function page() {
+  const root = document.createElement("div");
+  root.innerHTML = `
+    <div class="bg-card" id="theme">
+      <span>Appearance</span>
+      <div data-setting-row="" id="font">Font size</div>
+      <div data-setting-row="" id="accent">Accent color</div>
+    </div>
+    <div class="bg-card" id="account"><span>Account</span><div data-setting-row="" id="name">Username</div></div>
+    <div class="hidden"><div class="bg-card" id="admin">Font policy</div></div>
+  `;
+  return root;
+}
+
+const hidden = (root: HTMLElement, id: string) =>
+  root.querySelector(`#${id}`)!.hasAttribute(HIDDEN_ATTR);
+
+describe("filterSettingsPage", () => {
+  it("keeps only matching cards and rows", () => {
+    const root = page();
+    expect(filterSettingsPage(root, "font")).toBe(1);
+    expect(hidden(root, "theme")).toBe(false);
+    expect(hidden(root, "font")).toBe(false);
+    expect(hidden(root, "accent")).toBe(true);
+    expect(hidden(root, "account")).toBe(true);
+  });
+
+  it("keeps every row when only the card title matches", () => {
+    const root = page();
+    filterSettingsPage(root, "appearance");
+    expect(hidden(root, "font")).toBe(false);
+    expect(hidden(root, "accent")).toBe(false);
+  });
+
+  it("ignores cards in hidden panels and clears on an empty query", () => {
+    const root = page();
+    expect(filterSettingsPage(root, "policy")).toBe(0);
+    expect(filterSettingsPage(root, "")).toBe(2);
+    expect(root.querySelectorAll(`[${HIDDEN_ATTR}]`).length).toBe(0);
+  });
+});
diff --git a/src/ui/tests/settings/settings-fields-util.test.ts b/src/ui/tests/settings/settings-fields-util.test.ts
new file mode 100644
index 000000000..b4e4cfd8b
--- /dev/null
+++ b/src/ui/tests/settings/settings-fields-util.test.ts
@@ -0,0 +1,57 @@
+import { describe, expect, it } from "vitest";
+import {
+  hasSettingsPage,
+  hasVisibleFields,
+} from "@/settings/settings-fields-util";
+import type { PluginSettingsField } from "@/api/plugins-api";
+
+const field = (hidden = false) =>
+  ({ key: "a", type: "string", hidden }) as unknown as PluginSettingsField;
+
+describe("hasVisibleFields", () => {
+  it("ignores hidden fields", () => {
+    expect(hasVisibleFields([field(true)])).toBe(false);
+    expect(hasVisibleFields([field(true), field()])).toBe(true);
+  });
+});
+
+describe("hasSettingsPage", () => {
+  it("needs an enabled plugin", () => {
+    expect(
+      hasSettingsPage(
+        { enabled: false, contributes: { settings: { user: [field()] } } },
+        true,
+      ),
+    ).toBe(false);
+  });
+
+  it("is false with no settings or only hidden ones", () => {
+    expect(hasSettingsPage({ enabled: true, contributes: null }, true)).toBe(
+      false,
+    );
+    expect(
+      hasSettingsPage(
+        { enabled: true, contributes: { settings: { user: [field(true)] } } },
+        true,
+      ),
+    ).toBe(false);
+  });
+
+  it("counts admin settings only for admins", () => {
+    const plugin = {
+      enabled: true,
+      contributes: { settings: { admin: [field()] } },
+    };
+    expect(hasSettingsPage(plugin, true)).toBe(true);
+    expect(hasSettingsPage(plugin, false)).toBe(false);
+  });
+
+  it("counts user settings for anyone", () => {
+    expect(
+      hasSettingsPage(
+        { enabled: true, contributes: { settings: { user: [field()] } } },
+        false,
+      ),
+    ).toBe(true);
+  });
+});
diff --git a/src/ui/tests/settings/settings-pages.test.ts b/src/ui/tests/settings/settings-pages.test.ts
new file mode 100644
index 000000000..e3724abc5
--- /dev/null
+++ b/src/ui/tests/settings/settings-pages.test.ts
@@ -0,0 +1,60 @@
+import { describe, expect, it } from "vitest";
+import en from "@/locales/en.json";
+import {
+  CORE_SETTINGS_PAGES,
+  searchSettingsPages,
+  visibleSettingsPages,
+} from "@/settings/settings-pages";
+import { SETTINGS_SEARCH_INDEX } from "@/settings/settings-search-index";
+
+function translate(key: string): string {
+  let node: unknown = en;
+  for (const part of key.split(".")) {
+    node = (node as Record<string, unknown> | undefined)?.[part];
+  }
+  return typeof node === "string" ? node : key;
+}
+
+describe("settings pages", () => {
+  it("hides admin pages from users and browser-only pages on desktop", () => {
+    const user = visibleSettingsPages(CORE_SETTINGS_PAGES, {
+      isAdmin: false,
+      isElectron: true,
+    }).map((page) => page.id);
+    expect(user).not.toContain("admin-users");
+    expect(user).not.toContain("security");
+    expect(user).toContain("account");
+
+    const admin = visibleSettingsPages(CORE_SETTINGS_PAGES, {
+      isAdmin: true,
+      isElectron: false,
+    }).map((page) => page.id);
+    expect(admin).toContain("admin-users");
+    expect(admin).toContain("security");
+  });
+
+  it("finds a page by a label shown on it, not only its name", () => {
+    const hits = searchSettingsPages(CORE_SETTINGS_PAGES, "theme", translate);
+    expect(hits.some((hit) => hit.page.id === "appearance")).toBe(true);
+    expect(
+      hits.find((hit) => hit.page.id === "appearance")?.match,
+    ).toBeTruthy();
+  });
+
+  it("lists every page for an empty query", () => {
+    expect(
+      searchSettingsPages(CORE_SETTINGS_PAGES, " ", translate),
+    ).toHaveLength(CORE_SETTINGS_PAGES.length);
+  });
+
+  it("gives every core page labels to search, all of them real keys", () => {
+    for (const page of CORE_SETTINGS_PAGES) {
+      expect(translate(page.labelKey)).not.toBe(page.labelKey);
+      expect(page.searchKeys.length).toBeGreaterThan(0);
+    }
+    const missing = Object.values(SETTINGS_SEARCH_INDEX)
+      .flat()
+      .filter((key) => translate(key) === key);
+    expect(missing).toEqual([]);
+  });
+});
diff --git a/src/ui/tests/settings/sync/LinkServerDialog.test.tsx b/src/ui/tests/settings/sync/LinkServerDialog.test.tsx
new file mode 100644
index 000000000..fc79c405c
--- /dev/null
+++ b/src/ui/tests/settings/sync/LinkServerDialog.test.tsx
@@ -0,0 +1,31 @@
+import { cleanup, render, screen } from "@testing-library/react";
+import { afterEach, describe, expect, it, vi } from "vitest";
+
+vi.mock("@/api/sync-api", () => ({
+  probeServer: vi.fn(),
+  getLinkPreview: vi.fn(),
+  completeLink: vi.fn(),
+  reloginLink: vi.fn(),
+}));
+vi.mock("@/auth/ElectronLoginForm", () => ({ ElectronLoginForm: () => null }));
+vi.mock("sonner", () => ({ toast: { success: vi.fn(), error: vi.fn() } }));
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({ t: (key: string) => key }),
+}));
+
+const { SurfaceScope } = await import("@/components/surface/surface-scope");
+const { LinkServerDialog } = await import("@/settings/sync/LinkServerDialog");
+
+afterEach(cleanup);
+
+describe("LinkServerDialog", () => {
+  it("opens inline in the surface instead of a popup", () => {
+    render(
+      <SurfaceScope kind="tab">
+        <LinkServerDialog open onOpenChange={() => {}} onLinked={() => {}} />
+      </SurfaceScope>,
+    );
+    expect(screen.getByText("sync.wizard.title")).toBeTruthy();
+    expect(screen.queryByRole("dialog")).toBeNull();
+  });
+});
diff --git a/src/ui/tests/shell/MobileBar.test.tsx b/src/ui/tests/shell/MobileBar.test.tsx
new file mode 100644
index 000000000..cf1a646f5
--- /dev/null
+++ b/src/ui/tests/shell/MobileBar.test.tsx
@@ -0,0 +1,97 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { cleanup, fireEvent, render, screen } from "@testing-library/react";
+import { Bell, Boxes } from "lucide-react";
+
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({ t: (key: string) => key }),
+}));
+vi.mock("@/hooks/use-permissions", () => ({
+  usePermissions: () => ({ has: () => true, loaded: true }),
+}));
+vi.mock("@/main-axios", () => ({
+  getUserPreferences: vi.fn(async () => ({})),
+  saveUserPreferences: vi.fn(async () => undefined),
+}));
+
+import { MobileBar, pickPrimaryItems } from "@/shell/MobileBar";
+import {
+  RAIL_ITEMS,
+  registerRailItem,
+  resetRegisteredRailItems,
+} from "@/sidebar/rail-items";
+
+afterEach(() => {
+  cleanup();
+  resetRegisteredRailItems();
+  localStorage.clear();
+  delete (window as { IS_ELECTRON?: boolean }).IS_ELECTRON;
+});
+
+function renderBar(onRailClick = vi.fn()) {
+  render(
+    <MobileBar
+      railView="hosts"
+      sidebarOpen={false}
+      username="alice"
+      onRailClick={onRailClick}
+      onOpenTab={vi.fn()}
+      onOpenSettings={vi.fn()}
+      onOpenPalette={vi.fn()}
+      onLogout={vi.fn()}
+    />,
+  );
+  return onRailClick;
+}
+
+describe("MobileBar", () => {
+  it("puts flagged items first and caps the bar at four", () => {
+    const ids = pickPrimaryItems(RAIL_ITEMS).map((item) => item.id);
+    expect(ids.slice(0, 2)).toEqual(["hosts", "quick-connect"]);
+    expect(ids).toHaveLength(4);
+  });
+
+  it("opens a destination from the bar", () => {
+    const onRailClick = renderBar();
+    fireEvent.click(screen.getByLabelText("nav.hosts"));
+    expect(onRailClick).toHaveBeenCalledWith("hosts");
+  });
+
+  it("lists footer items and settings behind More", () => {
+    registerRailItem({
+      id: "inbox",
+      icon: Bell,
+      labelKey: "test.inbox",
+      placement: "footer",
+      pluginId: "demo",
+    });
+    registerRailItem({
+      id: "boxes",
+      icon: Boxes,
+      labelKey: "test.boxes",
+      group: "objects",
+      pluginId: "demo",
+    });
+    renderBar();
+    fireEvent.click(screen.getByLabelText("common.more"));
+    expect(screen.getByText("test.inbox")).toBeTruthy();
+    expect(screen.getByText("nav.settings")).toBeTruthy();
+    expect(screen.getByText("nav.group.objects")).toBeTruthy();
+  });
+
+  it("leaves logout out of More on the desktop", () => {
+    renderBar();
+    fireEvent.click(screen.getByLabelText("common.more"));
+    expect(screen.getByText("common.logout")).toBeTruthy();
+    cleanup();
+    (window as { IS_ELECTRON?: boolean }).IS_ELECTRON = true;
+    renderBar();
+    fireEvent.click(screen.getByLabelText("common.more"));
+    expect(screen.queryByText("common.logout")).toBeNull();
+  });
+
+  it("leaves out hidden items", () => {
+    localStorage.setItem("hiddenRailTabs", JSON.stringify(["hosts"]));
+    renderBar();
+    expect(screen.queryByLabelText("nav.hosts")).toBeNull();
+  });
+});
diff --git a/src/ui/tests/shell/tab-handles.test.tsx b/src/ui/tests/shell/tab-handles.test.tsx
new file mode 100644
index 000000000..3b55ba52f
--- /dev/null
+++ b/src/ui/tests/shell/tab-handles.test.tsx
@@ -0,0 +1,105 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import {
+  act,
+  cleanup,
+  render,
+  renderHook,
+  screen,
+} from "@testing-library/react";
+import "@testing-library/jest-dom/vitest";
+import { createRef } from "react";
+import { Share2 } from "lucide-react";
+import type { Tab } from "@/types/ui-types";
+
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({ t: (key: string) => key }),
+}));
+vi.mock("@/lib/electron", () => ({ isElectron: () => true }));
+vi.mock("@/hooks/use-permissions", () => ({
+  usePermissions: () => ({
+    permissions: [],
+    isAdmin: false,
+    loaded: true,
+    has: () => true,
+  }),
+}));
+
+import { trackTabHandle, useTabHandlesVersion } from "@/shell/tab-handles";
+import { TabBar } from "@/shell/TabBar";
+import {
+  declareActionSlot,
+  registerAction,
+  registerSlotContribution,
+  resetActionRegistry,
+} from "@/shell/action-registry";
+
+afterEach(() => {
+  cleanup();
+  resetActionRegistry();
+});
+
+describe("trackTabHandle", () => {
+  it("passes no ref through", () => {
+    expect(trackTabHandle(undefined)).toBeUndefined();
+  });
+
+  it("returns one callback per ref that fills it and bumps the version", () => {
+    const ref = createRef<unknown>();
+    const callback = trackTabHandle(ref) as (value: unknown) => void;
+    expect(trackTabHandle(ref)).toBe(callback);
+
+    const { result } = renderHook(() => useTabHandlesVersion());
+    const before = result.current;
+    const handle = { disconnect: () => {} };
+    act(() => callback(handle));
+    expect(ref.current).toBe(handle);
+    expect(result.current).toBe(before + 1);
+
+    act(() => callback(handle));
+    expect(result.current).toBe(before + 1);
+
+    act(() => callback(null));
+    expect(ref.current).toBeNull();
+    expect(result.current).toBe(before + 2);
+  });
+});
+
+describe("tab inline buttons", () => {
+  it("show as soon as the tab's handle attaches", () => {
+    declareActionSlot({ id: "tab.inline", accepts: ["button"] });
+    registerAction("test.share", () => {});
+    registerSlotContribution("tab.inline", {
+      actionId: "test.share",
+      titleKey: "share",
+      icon: Share2,
+      when: (context) =>
+        typeof (context.handle as { getShareTarget?: unknown } | undefined)
+          ?.getShareTarget === "function",
+    });
+    const terminalRef = createRef<unknown>();
+    const tabs = [
+      { id: "terminal-1", type: "terminal", label: "web-01", terminalRef },
+    ] as unknown as Tab[];
+
+    render(
+      <TabBar
+        tabs={tabs}
+        activeTabId="terminal-1"
+        splits={[]}
+        activeSplitFull={false}
+        onSetActiveTab={() => {}}
+        onCloseTab={() => {}}
+        onRefreshTab={() => {}}
+        onReorderTabs={() => {}}
+        onSplitAction={() => {}}
+        isAppFullscreen={false}
+        onToggleAppFullscreen={() => {}}
+      />,
+    );
+    expect(screen.queryByTitle("share")).toBeNull();
+
+    const attach = trackTabHandle(terminalRef) as (value: unknown) => void;
+    act(() => attach({ getShareTarget: () => null }));
+    expect(screen.getByTitle("share")).toBeInTheDocument();
+  });
+});
diff --git a/src/ui/tests/sidebar/AdminUserManagePanel.test.tsx b/src/ui/tests/sidebar/AdminUserManagePanel.test.tsx
index 83f830cfe..7dc4dfde1 100644
--- a/src/ui/tests/sidebar/AdminUserManagePanel.test.tsx
+++ b/src/ui/tests/sidebar/AdminUserManagePanel.test.tsx
@@ -3,6 +3,7 @@ import { cleanup, render, screen, waitFor } from "@testing-library/react";
 import userEvent from "@testing-library/user-event";
 
 import { AdminUserManagePanel } from "../../sidebar/AdminUserManagePanel";
+import { SurfaceScope } from "@/components/surface/surface-scope";
 import type { AdminUser } from "../../sidebar/AdminManagementSections";
 
 const api = vi.hoisted(() => ({
@@ -48,7 +49,7 @@ function makeUser(overrides: Partial<AdminUser> = {}): AdminUser {
     id: "u2",
     username: "bob",
     isAdmin: false,
-    isOidc: false,
+    isExternal: false,
     passwordHash: "hash",
     dataUnlocked: true,
     ...overrides,
@@ -60,14 +61,16 @@ function renderPanel(
   callbacks: Partial<Record<string, () => void>> = {},
 ) {
   return render(
-    <AdminUserManagePanel
-      user={user}
-      roles={[]}
-      onBack={callbacks.onBack ?? vi.fn()}
-      onOpenHostTab={callbacks.onOpenHostTab as never}
-      onUserDeleted={callbacks.onUserDeleted ?? vi.fn()}
-      onSecondFactorsReset={callbacks.onSecondFactorsReset ?? vi.fn()}
-    />,
+    <SurfaceScope>
+      <AdminUserManagePanel
+        user={user}
+        roles={[]}
+        onBack={callbacks.onBack ?? vi.fn()}
+        onOpenHostTab={callbacks.onOpenHostTab as never}
+        onUserDeleted={callbacks.onUserDeleted ?? vi.fn()}
+        onSecondFactorsReset={callbacks.onSecondFactorsReset ?? vi.fn()}
+      />
+    </SurfaceScope>,
   );
 }
 
@@ -193,7 +196,7 @@ describe("AdminUserManagePanel", () => {
 
     await userEvent.click(screen.getByText("admin.manageTabDanger"));
     await userEvent.click(screen.getByText("admin.deleteUser"));
-    await userEvent.click(screen.getByText("common.confirm"));
+    await userEvent.click(screen.getByText("common.delete"));
 
     await waitFor(() => {
       expect(api.deleteUser).toHaveBeenCalledWith("bob");
diff --git a/src/ui/tests/sidebar/AppRail.test.tsx b/src/ui/tests/sidebar/AppRail.test.tsx
index 6b4e60edb..fc22a105e 100644
--- a/src/ui/tests/sidebar/AppRail.test.tsx
+++ b/src/ui/tests/sidebar/AppRail.test.tsx
@@ -1,5 +1,5 @@
 import { afterEach, describe, expect, it, vi } from "vitest";
-import { render, screen } from "@testing-library/react";
+import { cleanup, fireEvent, render, screen } from "@testing-library/react";
 import userEvent from "@testing-library/user-event";
 import { Bell, Boxes } from "lucide-react";
 import { AppRail } from "../../sidebar/AppRail";
@@ -13,6 +13,11 @@ vi.mock("react-i18next", () => ({
   useTranslation: () => ({ t: (key: string) => key }),
 }));
 
+vi.mock("@/main-axios", () => ({
+  getUserPreferences: vi.fn(async () => ({ storageMode: "local" })),
+  saveUserPreferences: vi.fn(async () => undefined),
+}));
+
 vi.mock("@/hooks/use-permissions", () => ({
   usePermissions: () => ({ has: () => true, loaded: true }),
 }));
@@ -20,6 +25,7 @@ vi.mock("@/hooks/use-permissions", () => ({
 afterEach(() => {
   resetRegisteredRailItems();
   localStorage.clear();
+  delete (window as { IS_ELECTRON?: boolean }).IS_ELECTRON;
 });
 
 function renderRail(onRailClick = vi.fn()) {
@@ -30,6 +36,8 @@ function renderRail(onRailClick = vi.fn()) {
       username="alice"
       isAdmin={false}
       onRailClick={onRailClick}
+      onOpenSettings={vi.fn()}
+      onOpenNavigationSettings={vi.fn()}
       onLogout={vi.fn()}
     />,
   );
@@ -37,6 +45,15 @@ function renderRail(onRailClick = vi.fn()) {
 }
 
 describe("AppRail", () => {
+  it("shows logout in the browser but not on the desktop", () => {
+    renderRail();
+    expect(screen.getByLabelText("common.logout")).toBeTruthy();
+    cleanup();
+    (window as { IS_ELECTRON?: boolean }).IS_ELECTRON = true;
+    renderRail();
+    expect(screen.queryByLabelText("common.logout")).toBeNull();
+  });
+
   it("puts a footer item above the profile with its badge", async () => {
     registerRailItem({
       id: "inbox",
@@ -55,7 +72,7 @@ describe("AppRail", () => {
     const onRailClick = renderRail();
 
     const inbox = screen.getByTitle("test.inbox");
-    const profile = screen.getAllByTitle("nav.userProfile")[0];
+    const profile = screen.getAllByTitle("nav.openSettings")[0];
     const boxes = screen.getByTitle("test.boxes");
     // Footer items render after the main list and before the profile.
     expect(
@@ -82,6 +99,75 @@ describe("AppRail", () => {
     renderRail();
     expect(screen.queryByTitle("test.inbox")).toBeNull();
   });
+
+  it("groups items into bands with a labelled divider", () => {
+    registerRailItem({
+      id: "fleets",
+      icon: Boxes,
+      labelKey: "test.fleets",
+      group: "objects",
+      pluginId: "demo",
+    });
+    renderRail();
+    expect(screen.getByText("nav.group.tools")).toBeTruthy();
+    const fleets = screen.getByTitle("test.fleets");
+    const connections = screen.getByTitle("nav.connections");
+    expect(
+      fleets.compareDocumentPosition(connections) &
+        Node.DOCUMENT_POSITION_FOLLOWING,
+    ).toBeTruthy();
+  });
+
+  it("lists hidden items and brings one back", async () => {
+    localStorage.setItem("hiddenRailTabs", JSON.stringify(["connections"]));
+    renderRail();
+    expect(screen.queryByTitle("nav.connections")).toBeNull();
+    await userEvent.click(screen.getByTitle("nav.hiddenCount"));
+    await userEvent.click(screen.getByTitle("nav.showInRail"));
+    expect(JSON.parse(localStorage.getItem("hiddenRailTabs")!)).toEqual([]);
+    expect(await screen.findByTitle("nav.connections")).toBeTruthy();
+  });
+
+  it("opens plain settings from the account button", async () => {
+    const onOpenSettings = vi.fn();
+    const onOpenNavigationSettings = vi.fn();
+    render(
+      <AppRail
+        railView="hosts"
+        sidebarOpen={false}
+        username="alice"
+        isAdmin
+        onRailClick={vi.fn()}
+        onOpenSettings={onOpenSettings}
+        onOpenNavigationSettings={onOpenNavigationSettings}
+        onLogout={vi.fn()}
+      />,
+    );
+    await userEvent.click(screen.getByLabelText("nav.openSettings"));
+    expect(onOpenSettings).toHaveBeenCalled();
+    expect(onOpenNavigationSettings).not.toHaveBeenCalled();
+  });
+
+  it("opens the navigation settings from the rail menu", async () => {
+    const onOpenSettings = vi.fn();
+    const onOpenNavigationSettings = vi.fn();
+    render(
+      <AppRail
+        railView="hosts"
+        sidebarOpen={false}
+        username="alice"
+        isAdmin
+        onRailClick={vi.fn()}
+        onOpenSettings={onOpenSettings}
+        onOpenNavigationSettings={onOpenNavigationSettings}
+        onLogout={vi.fn()}
+      />,
+    );
+    fireEvent.contextMenu(screen.getByTitle("nav.connections"));
+    await userEvent.click(screen.getByText("nav.openSettings"));
+    expect(onOpenNavigationSettings).toHaveBeenCalled();
+    expect(onOpenSettings).not.toHaveBeenCalled();
+  });
 });
 
 describe("RailBadge", () => {
diff --git a/src/ui/tests/sidebar/HostAuthOverrideModal.test.tsx b/src/ui/tests/sidebar/HostAuthOverrideModal.test.tsx
index a9caf2a57..30da8e821 100644
--- a/src/ui/tests/sidebar/HostAuthOverrideModal.test.tsx
+++ b/src/ui/tests/sidebar/HostAuthOverrideModal.test.tsx
@@ -94,9 +94,8 @@ describe("HostAuthOverrideModal", () => {
       />,
     );
 
-    const select = await screen.findByLabelText(
-      "hosts.sharing.authOverrideCredentialLabel",
-    );
+    await screen.findByLabelText("hosts.sharing.authOverrideCredentialLabel");
+    const select = document.querySelector("select") as HTMLSelectElement;
     expect((select as HTMLSelectElement).value).toBe("7");
 
     fireEvent.change(select, { target: { value: "8" } });
@@ -119,9 +118,8 @@ describe("HostAuthOverrideModal", () => {
       />,
     );
 
-    const select = await screen.findByLabelText(
-      "hosts.sharing.authOverrideCredentialLabel",
-    );
+    await screen.findByLabelText("hosts.sharing.authOverrideCredentialLabel");
+    const select = document.querySelector("select") as HTMLSelectElement;
     expect(screen.getByText("hosts.sharing.noPersonalCredential")).toBeTruthy();
     fireEvent.change(select, { target: { value: "" } });
     expect(screen.getByText("hosts.sharing.authOverrideRequired")).toBeTruthy();
@@ -187,9 +185,8 @@ describe("HostAuthOverrideModal", () => {
       />,
     );
 
-    const select = await screen.findByLabelText(
-      "hosts.sharing.authOverrideCredentialLabel",
-    );
+    await screen.findByLabelText("hosts.sharing.authOverrideCredentialLabel");
+    const select = document.querySelector("select") as HTMLSelectElement;
     expect((select as HTMLSelectElement).value).toBe("19");
     expect(remote.get).toHaveBeenCalledWith("/credentials");
     expect(api.getCredentials).not.toHaveBeenCalled();
diff --git a/src/ui/tests/sidebar/HostEditorData.test.ts b/src/ui/tests/sidebar/HostEditorData.test.ts
index 8a7bc8b8c..9e4601cbb 100644
--- a/src/ui/tests/sidebar/HostEditorData.test.ts
+++ b/src/ui/tests/sidebar/HostEditorData.test.ts
@@ -9,7 +9,7 @@ import {
   type HostProtocols,
 } from "../../sidebar/HostEditorData";
 import type { Host } from "@/types/ui-types";
-import { HOST_PROTOCOL_SECRET_KEPT } from "@termix/plugin-sdk/frontend";
+import { HOST_PROTOCOL_SECRET_KEPT } from "@termix-ssh/plugin-sdk/frontend";
 
 const sshOnly: HostProtocols = {
   enableSsh: true,
diff --git a/src/ui/tests/sidebar/HostShareModal.test.tsx b/src/ui/tests/sidebar/HostShareModal.test.tsx
new file mode 100644
index 000000000..b510aeaf8
--- /dev/null
+++ b/src/ui/tests/sidebar/HostShareModal.test.tsx
@@ -0,0 +1,41 @@
+import { describe, expect, it, vi } from "vitest";
+import { render, screen } from "@testing-library/react";
+
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({ t: (key: string) => key }),
+}));
+vi.mock("@/main-axios", () => ({
+  getHostAccess: vi.fn(async () => ({ accessList: [] })),
+  getUserList: vi.fn(async () => ({
+    users: [
+      { userId: "me", username: "admin" },
+      { userId: "u2", username: "bob" },
+    ],
+  })),
+  getUserInfo: vi.fn(async () => ({ userId: "me", username: "admin" })),
+  getRoles: vi.fn(async () => ({ roles: [] })),
+  shareHost: vi.fn(),
+  shareFolder: vi.fn(),
+  updateHostAccess: vi.fn(),
+  revokeHostAccess: vi.fn(),
+}));
+
+import { SurfaceScope } from "@/components/surface/surface-scope";
+import { HostShareModal } from "@/sidebar/HostShareModal";
+import type { Host } from "@/types/ui-types";
+
+describe("HostShareModal", () => {
+  it("does not offer the current user as someone to share with", async () => {
+    render(
+      <SurfaceScope>
+        <HostShareModal
+          open
+          onClose={() => {}}
+          host={{ id: 1, name: "web" } as unknown as Host}
+        />
+      </SurfaceScope>,
+    );
+    expect(await screen.findByText("bob")).toBeTruthy();
+    expect(screen.queryByText("admin")).toBeNull();
+  });
+});
diff --git a/src/ui/tests/sidebar/MultiPanelHint.test.tsx b/src/ui/tests/sidebar/MultiPanelHint.test.tsx
deleted file mode 100644
index dbda3f0fc..000000000
--- a/src/ui/tests/sidebar/MultiPanelHint.test.tsx
+++ /dev/null
@@ -1,80 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from "vitest";
-import { render, screen } from "@testing-library/react";
-import userEvent from "@testing-library/user-event";
-import { MultiPanelHint } from "../../sidebar/MultiPanelHint";
-
-vi.mock("react-i18next", () => ({
-  useTranslation: () => ({ t: (key: string) => key }),
-}));
-
-const STORAGE_KEY = "termix_multiPanelHintDismissed";
-
-function renderHint(props: Partial<Parameters<typeof MultiPanelHint>[0]> = {}) {
-  return render(
-    <MultiPanelHint
-      canPromote
-      canRightDock
-      onOpenAsTab={vi.fn()}
-      onOpenInRightDock={vi.fn()}
-      {...props}
-    />,
-  );
-}
-
-describe("MultiPanelHint", () => {
-  beforeEach(() => {
-    localStorage.clear();
-  });
-
-  it("shows both actions to a user who has not dismissed it", () => {
-    renderHint();
-    expect(screen.getByText("nav.multiPanelHintTitle")).toBeTruthy();
-    expect(screen.getByText("nav.openAsTab")).toBeTruthy();
-    expect(screen.getByText("nav.openInRightDock")).toBeTruthy();
-  });
-
-  it("spells out how to do each action without the hint", () => {
-    // The whole point of the hint is that the knowledge outlives it, so the
-    // shortcut and the permanent button must both be named.
-    const { container } = renderHint();
-    expect(container.textContent).toContain("nav.multiPanelHintTabHow");
-    expect(container.textContent).toContain("nav.multiPanelHintDockHow");
-  });
-
-  it("stays hidden once dismissed", () => {
-    localStorage.setItem(STORAGE_KEY, "true");
-    renderHint();
-    expect(screen.queryByText("nav.multiPanelHintTitle")).toBeNull();
-  });
-
-  it("hides and persists the choice when dismissed", async () => {
-    const user = userEvent.setup();
-    renderHint();
-    await user.click(screen.getByLabelText("common.dismiss"));
-
-    expect(screen.queryByText("nav.multiPanelHintTitle")).toBeNull();
-    expect(localStorage.getItem(STORAGE_KEY)).toBe("true");
-  });
-
-  it("renders nothing when the panel supports neither action", () => {
-    renderHint({ canPromote: false, canRightDock: false });
-    expect(screen.queryByText("nav.multiPanelHintTitle")).toBeNull();
-  });
-
-  it("only offers the actions the panel actually supports", () => {
-    renderHint({ canPromote: false });
-    expect(screen.queryByText("nav.openAsTab")).toBeNull();
-    expect(screen.getByText("nav.openInRightDock")).toBeTruthy();
-  });
-
-  it("runs the action and dismisses so it does not come back", async () => {
-    const user = userEvent.setup();
-    const onOpenAsTab = vi.fn();
-    renderHint({ onOpenAsTab });
-
-    await user.click(screen.getByText("nav.openAsTab"));
-
-    expect(onOpenAsTab).toHaveBeenCalledOnce();
-    expect(localStorage.getItem(STORAGE_KEY)).toBe("true");
-  });
-});
diff --git a/src/ui/tests/sidebar/QuickConnectPanel.test.tsx b/src/ui/tests/sidebar/QuickConnectPanel.test.tsx
index 8bd181ffc..60a759b38 100644
--- a/src/ui/tests/sidebar/QuickConnectPanel.test.tsx
+++ b/src/ui/tests/sidebar/QuickConnectPanel.test.tsx
@@ -1,5 +1,6 @@
 import { describe, it, expect, vi, afterEach } from "vitest";
 import {
+  act,
   render,
   screen,
   cleanup,
@@ -11,6 +12,9 @@ import { FolderSearch, Monitor, Server, Terminal } from "lucide-react";
 vi.mock("@/api/credentials-api", () => ({
   getCredentials: vi.fn(async () => []),
 }));
+vi.mock("@/api/host-defaults-api", () => ({
+  resolveHostDefaults: vi.fn(async () => ({})),
+}));
 vi.mock("@/api/auth-methods-api", () => ({
   getSshAuthProviders: vi.fn(async () => []),
 }));
@@ -83,13 +87,22 @@ function registerDefaults() {
   });
 }
 
+// The panel loads credentials and host defaults on mount; settle them inside
+// act so their state updates never land after the test ends.
+async function renderPanel(onConnect = vi.fn()) {
+  await act(async () => {
+    render(<QuickConnectPanel onConnect={onConnect} />);
+  });
+  return onConnect;
+}
+
 const buttonName = (key: string) =>
   `newUi.sidebar.quickConnect.connectToAction:${JSON.stringify({ name: key })}`;
 
 describe("QuickConnectPanel", () => {
-  it("offers every usable connect target and opt-in tool", () => {
+  it("offers every usable connect target and opt-in tool", async () => {
     registerDefaults();
-    render(<QuickConnectPanel onConnect={vi.fn()} />);
+    await renderPanel();
     expect(screen.getByText(buttonName("nav.terminal"))).toBeTruthy();
     expect(screen.getByText(buttonName("nav.files"))).toBeTruthy();
     expect(screen.queryByText(buttonName("nav.docker"))).toBeNull();
@@ -99,7 +112,7 @@ describe("QuickConnectPanel", () => {
   it("opens the chosen tab for the typed address", async () => {
     registerDefaults();
     const onConnect = vi.fn();
-    render(<QuickConnectPanel onConnect={onConnect} />);
+    await renderPanel(onConnect);
     fireEvent.change(
       screen.getByPlaceholderText("newUi.sidebar.quickConnect.hostPlaceholder"),
       { target: { value: "10.0.0.1" } },
@@ -111,10 +124,10 @@ describe("QuickConnectPanel", () => {
     expect(host).toMatchObject({ ip: "10.0.0.1", username: "root", port: 22 });
   });
 
-  it("connects with the top target on Enter", () => {
+  it("connects with the top target on Enter", async () => {
     registerDefaults();
     const onConnect = vi.fn();
-    render(<QuickConnectPanel onConnect={onConnect} />);
+    await renderPanel(onConnect);
     const input = screen.getByPlaceholderText(
       "newUi.sidebar.quickConnect.hostPlaceholder",
     );
@@ -126,16 +139,16 @@ describe("QuickConnectPanel", () => {
     );
   });
 
-  it("does nothing without an address", () => {
+  it("does nothing without an address", async () => {
     registerDefaults();
     const onConnect = vi.fn();
-    render(<QuickConnectPanel onConnect={onConnect} />);
+    await renderPanel(onConnect);
     fireEvent.click(screen.getByText(buttonName("nav.terminal")));
     expect(onConnect).not.toHaveBeenCalled();
   });
 
-  it("says so when nothing can connect", () => {
-    render(<QuickConnectPanel onConnect={vi.fn()} />);
+  it("says so when nothing can connect", async () => {
+    await renderPanel();
     expect(
       screen.getByText("newUi.sidebar.quickConnect.noTarget"),
     ).toBeTruthy();
@@ -172,7 +185,7 @@ describe("QuickConnectPanel", () => {
       },
     ];
     const onConnect = vi.fn();
-    render(<QuickConnectPanel onConnect={onConnect} />);
+    await renderPanel(onConnect);
     fireEvent.change(screen.getByDisplayValue("password"), {
       target: { value: "tailnet" },
     });
diff --git a/src/ui/tests/sidebar/credential-tree/credential-row-height.test.ts b/src/ui/tests/sidebar/credential-tree/credential-row-height.test.ts
index ba4f8d477..a92e5cba5 100644
--- a/src/ui/tests/sidebar/credential-tree/credential-row-height.test.ts
+++ b/src/ui/tests/sidebar/credential-tree/credential-row-height.test.ts
@@ -56,3 +56,31 @@ describe("getCredentialRowHeight", () => {
     ).toBe(base);
   });
 });
+
+describe("detail row", () => {
+  it("drops the username line height in comfortable density only", () => {
+    const shape = {
+      isKey: false,
+      alwaysShowActions: false,
+      actionsOnly: false,
+      isOpen: false,
+      showTags: false,
+      tagCount: 0,
+    };
+    const full = getCredentialRowHeight({ density: "comfortable", ...shape });
+    expect(
+      getCredentialRowHeight({
+        density: "comfortable",
+        ...shape,
+        hasDetailRow: false,
+      }),
+    ).toBe(full - 15);
+    expect(
+      getCredentialRowHeight({
+        density: "compact",
+        ...shape,
+        hasDetailRow: false,
+      }),
+    ).toBe(getCredentialRowHeight({ density: "compact", ...shape }));
+  });
+});
diff --git a/src/ui/tests/sidebar/host-recording-settings.test.tsx b/src/ui/tests/sidebar/host-recording-settings.test.tsx
index b9b0f73d4..0e05227c4 100644
--- a/src/ui/tests/sidebar/host-recording-settings.test.tsx
+++ b/src/ui/tests/sidebar/host-recording-settings.test.tsx
@@ -4,14 +4,48 @@ import type { PluginSummary } from "@/api/plugins-api";
 import { sshHostToHost } from "@/sidebar/HostManagerData";
 import { createHostEditorForm } from "@/sidebar/HostEditorData";
 import { HostPluginSections } from "@/settings/HostPluginSections";
-import recording from "../../../../plugins/session-recording/manifest.json";
-import sharing from "../../../../plugins/session-sharing/manifest.json";
 
 vi.mock("react-i18next", () => ({
   useTranslation: () => ({ t: (key: string) => key }),
 }));
 afterEach(cleanup);
 
+const recording = {
+  id: "session-recording",
+  name: "Session Recording",
+  contributes: {
+    settings: {
+      host: {
+        editorGroup: "ssh",
+        enableKey: "enableSessionRecording",
+        enableLabelKey: "settings.host.enable.label",
+        enableDescriptionKey: "settings.host.enable.description",
+        fields: [],
+      },
+    },
+  },
+};
+
+const sharing = {
+  id: "session-sharing",
+  name: "Session Sharing",
+  contributes: {
+    settings: {
+      host: {
+        editorGroup: "ssh",
+        fields: [
+          {
+            key: "allowSessionSharing",
+            type: "boolean",
+            labelKey: "settings.host.allowSessionSharing.label",
+            default: true,
+          },
+        ],
+      },
+    },
+  },
+};
+
 describe.each([
   { manifest: recording, key: "enableSessionRecording" },
   { manifest: sharing, key: "allowSessionSharing" },
@@ -54,7 +88,7 @@ describe.each([
           setValue={setValue}
         />,
       );
-      fireEvent.click(screen.getByRole("button"));
+      fireEvent.click(screen.getByRole("switch"));
       expect(setValue).toHaveBeenCalledWith(manifest.id, key, !saved);
       // These are the values HostEditor writes through each plugin's host settings API.
       expect(form.pluginSettings).toEqual(pluginSettings);
diff --git a/src/ui/tests/sidebar/host-sharing-settings.test.tsx b/src/ui/tests/sidebar/host-sharing-settings.test.tsx
index 7a0fca96f..58b34c466 100644
--- a/src/ui/tests/sidebar/host-sharing-settings.test.tsx
+++ b/src/ui/tests/sidebar/host-sharing-settings.test.tsx
@@ -4,7 +4,6 @@ import type { PluginSummary } from "@/api/plugins-api";
 import { sshHostToHost } from "@/sidebar/HostManagerData";
 import { createHostEditorForm } from "@/sidebar/HostEditorData";
 import { HostPluginSections } from "@/settings/HostPluginSections";
-import manifest from "../../../../plugins/session-sharing/manifest.json";
 
 vi.mock("react-i18next", () => ({
   useTranslation: () => ({ t: (key: string) => key }),
@@ -12,6 +11,26 @@ vi.mock("react-i18next", () => ({
 
 afterEach(cleanup);
 
+const manifest = {
+  id: "session-sharing",
+  name: "Session Sharing",
+  contributes: {
+    settings: {
+      host: {
+        editorGroup: "ssh",
+        fields: [
+          {
+            key: "allowSessionSharing",
+            type: "boolean",
+            labelKey: "settings.host.allowSessionSharing.label",
+            default: true,
+          },
+        ],
+      },
+    },
+  },
+};
+
 describe("host sharing settings on reopening the editor", () => {
   it.each([false, true])("retains the saved sharing value %s", (saved) => {
     const pluginSettings = {
@@ -50,7 +69,7 @@ describe("host sharing settings on reopening the editor", () => {
     );
 
     // The toggle starts from the server value, including false despite its true default.
-    fireEvent.click(screen.getByRole("button"));
+    fireEvent.click(screen.getByRole("switch"));
     expect(setValue).toHaveBeenCalledWith(
       "session-sharing",
       "allowSessionSharing",
diff --git a/src/ui/tests/sidebar/rail-items.test.ts b/src/ui/tests/sidebar/rail-items.test.ts
index ae4f2f53c..b58439b51 100644
--- a/src/ui/tests/sidebar/rail-items.test.ts
+++ b/src/ui/tests/sidebar/rail-items.test.ts
@@ -11,6 +11,8 @@ import {
   rightDockableIds,
   railItemLabel,
   visibleRailItems,
+  applyRailOrder,
+  moveRailItem,
 } from "@/sidebar/rail-items";
 import { isCapturableTabType } from "@/shell/shell-layout";
 import { registerPanel, resetPanels } from "@/shell/panel-registry";
@@ -63,9 +65,19 @@ describe("RAIL_ITEMS", () => {
       "connections",
       "quick-connect",
       "sync",
+      "plugins",
     ]);
   });
 
+  it("opens the Plugins tab only for plugin managers", () => {
+    const plugins = RAIL_ITEMS.find((item) => item.id === "plugins");
+    expect(plugins).toMatchObject({
+      kind: "tab",
+      placement: "footer",
+      permission: "admin.plugins.manage",
+    });
+  });
+
   it("exposes every visible rail item as hideable", () => {
     expect(hideableRailIds()).toEqual(
       visibleRailItems().map((item) => item.id),
@@ -265,3 +277,50 @@ describe("permittedRailItems", () => {
     expect(ids).toEqual(["open"]);
   });
 });
+
+describe("rail order", () => {
+  const item = (id: string, group: "objects" | "tools" = "tools") =>
+    ({ id, icon: Boxes, labelKey: id, group }) as const;
+  const items = [
+    item("hosts", "objects"),
+    item("credentials", "objects"),
+    item("snippets"),
+    item("macros"),
+    item("history"),
+  ];
+
+  it("leaves the default order without a saved one", () => {
+    expect(applyRailOrder(items, undefined)).toBe(items);
+    expect(applyRailOrder(items, [])).toBe(items);
+  });
+
+  it("puts listed items in the saved order and keeps the rest in place", () => {
+    const ids = applyRailOrder(items, ["history", "snippets"]).map(
+      (entry) => entry.id,
+    );
+    expect(ids).toEqual([
+      "hosts",
+      "credentials",
+      "history",
+      "macros",
+      "snippets",
+    ]);
+  });
+
+  it("moves an item before another, or to the end of its band", () => {
+    expect(moveRailItem(items, "history", "snippets")).toEqual([
+      "hosts",
+      "credentials",
+      "history",
+      "snippets",
+      "macros",
+    ]);
+    expect(moveRailItem(items, "hosts", null)).toEqual([
+      "credentials",
+      "hosts",
+      "snippets",
+      "macros",
+      "history",
+    ]);
+  });
+});
diff --git a/src/ui/tests/sidebar/tree/FolderItem/FolderItem.test.tsx b/src/ui/tests/sidebar/tree/FolderItem/FolderItem.test.tsx
new file mode 100644
index 000000000..ada1e93a2
--- /dev/null
+++ b/src/ui/tests/sidebar/tree/FolderItem/FolderItem.test.tsx
@@ -0,0 +1,73 @@
+import { fireEvent, render } from "@testing-library/react";
+import { expect, it, vi } from "vitest";
+import type { HostFolder } from "@/types/ui-types";
+import { FolderItem } from "@/sidebar/tree/FolderItem/FolderItem";
+
+vi.mock("@/lib/ServerStatusContext", () => ({
+  useServerStatus: () => ({ getStatus: () => "online" }),
+}));
+vi.mock("@/sidebar/tree/HostItem/HostItem", () => ({
+  HostItem: () => null,
+  statusCheckEnabled: () => true,
+}));
+
+const folder = {
+  name: "Production",
+  path: "Production",
+  children: [],
+} as unknown as HostFolder;
+
+function renderFolder(onToggleFolder = vi.fn()) {
+  const noop = vi.fn();
+  render(
+    <FolderItem
+      folder={folder}
+      flat
+      onOpenTab={noop}
+      onDeleteHost={noop}
+      onDuplicateHost={noop}
+      openFolders={new Set()}
+      onToggleFolder={onToggleFolder}
+      selectionMode={false}
+      selectedHostIds={new Set()}
+      onToggleSelect={noop}
+      onToggleSelectFolder={noop}
+      openMenuHostId={null}
+      onMenuOpenChange={noop}
+      openTrayHostId={null}
+      onTrayOpenChange={noop}
+      onManageFolder={noop}
+      onDeleteFolder={noop}
+      onOpenAllSessions={noop}
+      onMoveHostsToFolder={noop}
+      draggedHostIds={null}
+      onDragHostStart={noop}
+      onDragEnd={noop}
+    />,
+  );
+  return onToggleFolder;
+}
+
+it("never nests the folder actions inside a button element", () => {
+  renderFolder();
+  for (const button of document.querySelectorAll("button")) {
+    expect(button.parentElement?.closest("button")).toBeNull();
+  }
+});
+
+it("toggles the folder by click, Enter and Space", () => {
+  const onToggle = renderFolder();
+  const header = document.querySelector('[role="button"][aria-expanded]')!;
+  fireEvent.click(header);
+  fireEvent.keyDown(header, { key: "Enter" });
+  fireEvent.keyDown(header, { key: " " });
+  expect(onToggle).toHaveBeenCalledTimes(3);
+  expect(onToggle).toHaveBeenCalledWith("Production");
+});
+
+it("ignores keys pressed on a folder action", () => {
+  const onToggle = renderFolder();
+  const action = document.querySelector("button")!;
+  fireEvent.keyDown(action, { key: "Enter" });
+  expect(onToggle).not.toHaveBeenCalled();
+});
diff --git a/src/ui/tests/sidebar/tree/HostItem/HostItem.test.tsx b/src/ui/tests/sidebar/tree/HostItem/HostItem.test.tsx
index 5424ecc91..16fd83424 100644
--- a/src/ui/tests/sidebar/tree/HostItem/HostItem.test.tsx
+++ b/src/ui/tests/sidebar/tree/HostItem/HostItem.test.tsx
@@ -1,3 +1,4 @@
+import { registerHostProtocol } from "@/sidebar/host-protocols";
 import {
   act,
   cleanup,
@@ -43,7 +44,11 @@ vi.mock("@/main-axios", () => ({
   getHostPassword: vi.fn(),
 }));
 
-import { HostItem } from "../../../../sidebar/tree/HostItem/HostItem";
+import {
+  HostItem,
+  formatHostAddress,
+} from "../../../../sidebar/tree/HostItem/HostItem";
+import { defaultHostRowFields } from "@/types/host-sidebar-preferences";
 
 const baseHost: Host = {
   id: "1",
@@ -356,3 +361,84 @@ describe("HostItem click behavior", () => {
     }
   });
 });
+
+describe("HostItem row fields", () => {
+  function renderWith(
+    fields: Partial<ReturnType<typeof defaultHostRowFields>>,
+  ) {
+    return render(
+      <HostItem
+        host={baseHost}
+        onOpenTab={noop}
+        onEditHost={noop}
+        onDelete={noop}
+        onDuplicate={noop}
+        density="comfortable"
+        rowFields={{ ...defaultHostRowFields(), ...fields }}
+      />,
+    );
+  }
+
+  it("shows user@address by default", () => {
+    renderWith({});
+    expect(screen.getByText("root@10.0.0.5")).toBeTruthy();
+  });
+
+  it("hides the address when turned off", () => {
+    renderWith({ showAddress: false });
+    expect(screen.queryByText(/10\.0\.0\.5/)).toBeNull();
+  });
+
+  it("hides the pin icon when turned off", () => {
+    renderWith({ showPinIcon: false });
+    expect(document.querySelector(".lucide-pin")).toBeNull();
+  });
+
+  it("formats the address from the chosen parts", () => {
+    expect(
+      formatHostAddress(baseHost, { showUsername: false, showPort: true }),
+    ).toBe("10.0.0.5:22");
+    expect(
+      formatHostAddress(baseHost, { showUsername: true, showPort: false }),
+    ).toBe("root@10.0.0.5");
+  });
+});
+
+it("uses the enabled protocol username for non-SSH hosts", () => {
+  const dispose = registerHostProtocol({
+    id: "rdp",
+    pluginId: "remote-desktop",
+    settingKey: "enableRdp",
+    defaultPort: 3389,
+    titleKey: "rdp",
+    icon: () => null,
+  });
+  try {
+    const host: Host = {
+      ...baseHost,
+      enableSsh: false,
+      pluginSettings: { "remote-desktop": { enableRdp: true } },
+      protocolAuth: {
+        rdp: {
+          authType: "credential",
+          credentialId: 6,
+          username: "Administrator",
+          fields: {},
+        },
+      },
+    };
+    const fields = { showUsername: true, showPort: false };
+    expect(formatHostAddress(host, fields)).toBe("Administrator@10.0.0.5");
+    expect(formatHostAddress({ ...host, enableSsh: true }, fields)).toBe(
+      "root@10.0.0.5",
+    );
+    expect(formatHostAddress({ ...host, protocolAuth: {} }, fields)).toBe(
+      "10.0.0.5",
+    );
+    expect(formatHostAddress(host, { ...fields, showUsername: false })).toBe(
+      "10.0.0.5",
+    );
+  } finally {
+    dispose();
+  }
+});
diff --git a/src/ui/tests/sidebar/tree/HostItem/host-status-tooltip.test.ts b/src/ui/tests/sidebar/tree/HostItem/host-status-tooltip.test.ts
index 6e32cea13..80d8c2198 100644
--- a/src/ui/tests/sidebar/tree/HostItem/host-status-tooltip.test.ts
+++ b/src/ui/tests/sidebar/tree/HostItem/host-status-tooltip.test.ts
@@ -6,7 +6,7 @@ import {
   statusCheckEnabled,
 } from "@/sidebar/tree/HostItem/HostItem";
 
-// Minimal host factory – only the fields buildStatusTooltip reads.
+// Minimal host factory, only the fields buildStatusTooltip reads.
 function makeHost(overrides: Partial<Host> = {}): Host {
   return {
     id: 1,
@@ -90,7 +90,7 @@ describe("buildStatusTooltip", () => {
   it("does not render key paths when a translator is supplied", () => {
     const host = makeHost();
     const tooltip = buildStatusTooltip(host, "online", t);
-    // The tooltip must never show the raw key path – that means the
+    // The tooltip must never show the raw key path, that means the
     // translation resource is missing, which is the bug #1265 fixed.
     expect(tooltip).not.toMatch(/hosts\.status\./);
   });
diff --git a/src/ui/tests/sidebar/tree/host-bar-actions.test.ts b/src/ui/tests/sidebar/tree/host-bar-actions.test.ts
new file mode 100644
index 000000000..7023e3f18
--- /dev/null
+++ b/src/ui/tests/sidebar/tree/host-bar-actions.test.ts
@@ -0,0 +1,16 @@
+import { describe, expect, it } from "vitest";
+import { showsInBar } from "@/sidebar/tree/host-bar-actions";
+
+describe("showsInBar", () => {
+  it("follows the action's own default without a choice", () => {
+    expect(showsInBar({}, { id: "terminal" })).toBe(true);
+    expect(showsInBar({}, { id: "maintenance", tray: false })).toBe(false);
+  });
+
+  it("lets the user's choice win either way", () => {
+    expect(
+      showsInBar({ maintenance: true }, { id: "maintenance", tray: false }),
+    ).toBe(true);
+    expect(showsInBar({ "ai-agent": false }, { id: "ai-agent" })).toBe(false);
+  });
+});
diff --git a/src/ui/tests/ssh/TOTPDialog.test.tsx b/src/ui/tests/ssh/TOTPDialog.test.tsx
new file mode 100644
index 000000000..0580a8ea1
--- /dev/null
+++ b/src/ui/tests/ssh/TOTPDialog.test.tsx
@@ -0,0 +1,50 @@
+import "@testing-library/jest-dom/vitest";
+import React from "react";
+import { fireEvent, render, screen } from "@testing-library/react";
+import { describe, expect, it, vi } from "vitest";
+import { TOTPDialog } from "@/ssh/dialogs/TOTPDialog";
+
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({ t: (key: string) => key }),
+}));
+
+describe("SSH password prompts", () => {
+  it("accepts a full password and preserves whitespace", () => {
+    const onSubmit = vi.fn();
+    const { container } = render(
+      <TOTPDialog
+        isOpen
+        prompt="Password:"
+        mode="password"
+        onSubmit={onSubmit}
+        onCancel={vi.fn()}
+      />,
+    );
+    const input = container.querySelector("input")!;
+    expect(input.type).toBe("password");
+    expect(input).not.toHaveAttribute("maxLength");
+    expect(input).not.toHaveAttribute("pattern");
+    expect(input).not.toHaveAttribute("inputMode", "numeric");
+    fireEvent.change(input, { target: { value: "  LongPassword!123  " } });
+    fireEvent.submit(container.querySelector("form")!);
+    expect(onSubmit).toHaveBeenCalledWith("  LongPassword!123  ");
+    expect(screen.queryByText("sshAuth.totpRequired")).not.toBeInTheDocument();
+  });
+
+  it("still restricts verification codes to digits", () => {
+    const { container } = render(
+      <TOTPDialog
+        isOpen
+        prompt="Code:"
+        mode="totp"
+        onSubmit={vi.fn()}
+        onCancel={vi.fn()}
+      />,
+    );
+    expect(container.querySelector("input")).toHaveAttribute(
+      "pattern",
+      "[0-9]*",
+    );
+    expect(container.querySelector("input")).toHaveAttribute("maxLength", "8");
+  });
+});
diff --git a/src/ui/tests/ssh/dialogs/TOTPDialog.test.tsx b/src/ui/tests/ssh/dialogs/TOTPDialog.test.tsx
new file mode 100644
index 000000000..ff16938f2
--- /dev/null
+++ b/src/ui/tests/ssh/dialogs/TOTPDialog.test.tsx
@@ -0,0 +1,66 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { cleanup, fireEvent, render, screen } from "@testing-library/react";
+
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({ t: (key: string) => key }),
+}));
+
+import { TOTPDialog } from "@/ssh/dialogs/TOTPDialog";
+
+afterEach(cleanup);
+
+describe("TOTPDialog", () => {
+  it("submits the code", () => {
+    const onSubmit = vi.fn();
+    render(
+      <TOTPDialog isOpen prompt="" onSubmit={onSubmit} onCancel={vi.fn()} />,
+    );
+    expect(
+      screen.getByRole("dialog", { name: "sshAuth.totpRequired" }),
+    ).toBeTruthy();
+    fireEvent.change(screen.getByPlaceholderText("000000"), {
+      target: { value: "123456" },
+    });
+    fireEvent.click(screen.getByRole("button", { name: "sshAuth.totpVerify" }));
+    expect(onSubmit).toHaveBeenCalledWith("123456");
+  });
+
+  it("sends an empty answer for a push prompt and then waits", () => {
+    const onSubmit = vi.fn();
+    render(
+      <TOTPDialog
+        isOpen
+        prompt=""
+        mode="push"
+        onSubmit={onSubmit}
+        onCancel={vi.fn()}
+      />,
+    );
+    fireEvent.click(
+      screen.getByRole("button", { name: "sshAuth.mfaSendRequest" }),
+    );
+    expect(onSubmit).toHaveBeenCalledWith("");
+    expect(screen.getByText("sshAuth.mfaWaitingApproval")).toBeTruthy();
+  });
+
+  it("cancels", () => {
+    const onCancel = vi.fn();
+    render(
+      <TOTPDialog isOpen prompt="" onSubmit={vi.fn()} onCancel={onCancel} />,
+    );
+    fireEvent.click(screen.getByRole("button", { name: "common.cancel" }));
+    expect(onCancel).toHaveBeenCalledOnce();
+  });
+
+  it("renders nothing when closed", () => {
+    render(
+      <TOTPDialog
+        isOpen={false}
+        prompt=""
+        onSubmit={vi.fn()}
+        onCancel={vi.fn()}
+      />,
+    );
+    expect(screen.queryByRole("dialog")).toBeNull();
+  });
+});
diff --git a/src/ui/tests/types/credential-sidebar-preferences.test.ts b/src/ui/tests/types/credential-sidebar-preferences.test.ts
index 57f80d702..f103b50ef 100644
--- a/src/ui/tests/types/credential-sidebar-preferences.test.ts
+++ b/src/ui/tests/types/credential-sidebar-preferences.test.ts
@@ -20,6 +20,11 @@ describe("defaultCredentialSidebarPreferences", () => {
         density: "comfortable",
         showTags: true,
         trayTrigger: "always",
+        showUsername: true,
+        showUsageCount: true,
+        showTypeBadge: true,
+        showPinIcon: true,
+        showSharedBadge: true,
       },
     });
   });
@@ -51,6 +56,11 @@ describe("sanitizeCredentialSidebarPreferences", () => {
         density: "compact",
         showTags: false,
         trayTrigger: "click",
+        showUsername: false,
+        showUsageCount: false,
+        showTypeBadge: false,
+        showPinIcon: true,
+        showSharedBadge: false,
       },
     };
     expect(sanitizeCredentialSidebarPreferences(valid)).toEqual(valid);
@@ -90,3 +100,14 @@ describe("sanitizeCredentialSidebarPreferences", () => {
     expect(result.version).toBe(CREDENTIAL_SIDEBAR_PREFS_VERSION);
   });
 });
+
+describe("credential row fields", () => {
+  it("keeps boolean choices and defaults the rest", () => {
+    const prefs = sanitizeCredentialSidebarPreferences({
+      display: { showUsername: false, showTypeBadge: "off" },
+    });
+    expect(prefs.display.showUsername).toBe(false);
+    expect(prefs.display.showTypeBadge).toBe(true);
+    expect(prefs.display.showUsageCount).toBe(true);
+  });
+});
diff --git a/src/ui/tests/types/host-sidebar-preferences.test.ts b/src/ui/tests/types/host-sidebar-preferences.test.ts
index ce10c6261..470ab4c95 100644
--- a/src/ui/tests/types/host-sidebar-preferences.test.ts
+++ b/src/ui/tests/types/host-sidebar-preferences.test.ts
@@ -28,6 +28,13 @@ describe("defaultHostSidebarPreferences", () => {
         openOnDoubleClick: false,
         showFolderPaths: true,
         hostClickBehavior: "newTab",
+        barActions: {},
+        showAddress: true,
+        showUsername: true,
+        showPort: false,
+        showPinIcon: true,
+        showSharedBadge: true,
+        showBadges: true,
       },
     });
   });
@@ -67,6 +74,13 @@ describe("sanitizeHostSidebarPreferences", () => {
         openOnDoubleClick: true,
         showFolderPaths: false,
         hostClickBehavior: "focusExistingDoubleClickNew",
+        barActions: { maintenance: true },
+        showAddress: false,
+        showUsername: false,
+        showPort: true,
+        showPinIcon: false,
+        showSharedBadge: false,
+        showBadges: true,
       },
     };
     expect(sanitizeHostSidebarPreferences(valid)).toEqual(valid);
@@ -145,3 +159,50 @@ describe("sanitizeHostSidebarPreferences", () => {
     expect(result.version).toBe(HOST_SIDEBAR_PREFS_VERSION);
   });
 });
+
+describe("barActions", () => {
+  it("keeps boolean choices for valid action ids only", () => {
+    const prefs = sanitizeHostSidebarPreferences({
+      display: {
+        barActions: {
+          maintenance: true,
+          "ai-agent": false,
+          "Bad Id": true,
+          docker: "yes",
+        },
+      },
+    });
+    expect(prefs.display.barActions).toEqual({
+      maintenance: true,
+      "ai-agent": false,
+    });
+  });
+
+  it("defaults to no overrides", () => {
+    expect(sanitizeHostSidebarPreferences({}).display.barActions).toEqual({});
+    expect(
+      sanitizeHostSidebarPreferences({ display: { barActions: [] } }).display
+        .barActions,
+    ).toEqual({});
+  });
+});
+
+describe("row fields", () => {
+  it("keeps boolean row field choices", () => {
+    const prefs = sanitizeHostSidebarPreferences({
+      display: { showAddress: false, showPort: true, showBadges: false },
+    });
+    expect(prefs.display.showAddress).toBe(false);
+    expect(prefs.display.showPort).toBe(true);
+    expect(prefs.display.showBadges).toBe(false);
+    expect(prefs.display.showUsername).toBe(true);
+  });
+
+  it("falls back to defaults for non-boolean values", () => {
+    const prefs = sanitizeHostSidebarPreferences({
+      display: { showAddress: "no", showPort: 1 },
+    });
+    expect(prefs.display.showAddress).toBe(true);
+    expect(prefs.display.showPort).toBe(false);
+  });
+});
diff --git a/src/ui/tests/types/onboarding.test.ts b/src/ui/tests/types/onboarding.test.ts
new file mode 100644
index 000000000..47320e83c
--- /dev/null
+++ b/src/ui/tests/types/onboarding.test.ts
@@ -0,0 +1,45 @@
+import { describe, expect, it } from "vitest";
+import {
+  CORE_ONBOARDING_STEPS,
+  LEGACY_SEEN,
+  MAX_SEEN_ENTRIES,
+  mergeSeen,
+  pluginStepKey,
+  sanitizeSeen,
+} from "@/types/onboarding";
+
+describe("onboarding seen map", () => {
+  it("keys plugin steps by plugin id", () => {
+    expect(pluginStepKey("remote-desktop", "guacd")).toBe(
+      "remote-desktop:guacd",
+    );
+  });
+
+  it("merges per key keeping the higher version", () => {
+    expect(mergeSeen({ a: 2, b: 1 }, { a: 1, b: 3, c: 1 })).toEqual({
+      a: 2,
+      b: 3,
+      c: 1,
+    });
+  });
+
+  it("drops invalid entries", () => {
+    expect(
+      sanitizeSeen({ ok: 1, zero: 0, neg: -1, frac: 1.2, str: "1", "": 1 }),
+    ).toEqual({ ok: 1 });
+    expect(sanitizeSeen(["a"])).toEqual({});
+    expect(sanitizeSeen(null)).toEqual({});
+  });
+
+  it("caps the number of entries", () => {
+    const big: Record<string, number> = {};
+    for (let i = 0; i < MAX_SEEN_ENTRIES + 20; i++) big[`k${i}`] = 1;
+    expect(Object.keys(sanitizeSeen(big))).toHaveLength(MAX_SEEN_ENTRIES);
+  });
+
+  it("legacy seen covers every core step at launch", () => {
+    expect(Object.keys(LEGACY_SEEN).sort()).toEqual(
+      Object.keys(CORE_ONBOARDING_STEPS).sort(),
+    );
+  });
+});
diff --git a/src/ui/tests/types/plugin-onboarding.test.ts b/src/ui/tests/types/plugin-onboarding.test.ts
new file mode 100644
index 000000000..297c8fac1
--- /dev/null
+++ b/src/ui/tests/types/plugin-onboarding.test.ts
@@ -0,0 +1,99 @@
+import { describe, expect, it } from "vitest";
+import {
+  applyOrder,
+  isPluginChoice,
+  resolvePluginChoices,
+  type ChoicePlugin,
+} from "@/types/plugin-onboarding";
+
+const plugins: ChoicePlugin[] = [
+  { id: "base", dependencies: [] },
+  { id: "mid", dependencies: ["base"] },
+  { id: "top", dependencies: ["mid"] },
+  { id: "solo", dependencies: [] },
+];
+
+describe("resolvePluginChoices", () => {
+  it("leaves consistent choices alone", () => {
+    const choices = {
+      base: "enabled",
+      mid: "enabled",
+      top: "disabled",
+      solo: "remove",
+    } as const;
+    const result = resolvePluginChoices(plugins, choices);
+    expect(result.choices).toEqual(choices);
+    expect(result.adjustments).toEqual([]);
+  });
+
+  it("enables the whole chain under an enabled plugin", () => {
+    const result = resolvePluginChoices(plugins, {
+      base: "remove",
+      mid: "disabled",
+      top: "enabled",
+    });
+    expect(result.choices).toEqual({
+      base: "enabled",
+      mid: "enabled",
+      top: "enabled",
+    });
+    expect(result.adjustments).toEqual([
+      { id: "base", from: "remove", to: "enabled", requiredBy: ["mid"] },
+      { id: "mid", from: "disabled", to: "enabled", requiredBy: ["top"] },
+    ]);
+  });
+
+  it("keeps a dependency of a disabled plugin instead of removing it", () => {
+    const result = resolvePluginChoices(plugins, {
+      base: "remove",
+      mid: "disabled",
+    });
+    expect(result.choices.base).toBe("disabled");
+  });
+
+  it("lets a removed plugin take nothing with it", () => {
+    const result = resolvePluginChoices(plugins, {
+      base: "remove",
+      mid: "remove",
+      top: "remove",
+    });
+    expect(result.adjustments).toEqual([]);
+  });
+
+  it("ignores unknown dependencies and survives cycles", () => {
+    const cyclic: ChoicePlugin[] = [
+      { id: "a", dependencies: ["b", "ghost"] },
+      { id: "b", dependencies: ["a"] },
+    ];
+    const result = resolvePluginChoices(cyclic, { a: "enabled", b: "remove" });
+    expect(result.choices).toEqual({ a: "enabled", b: "enabled" });
+  });
+});
+
+describe("applyOrder", () => {
+  it("enables dependencies first and removes dependents first", () => {
+    const order = applyOrder(plugins, {
+      base: "enabled",
+      mid: "enabled",
+      top: "enabled",
+    });
+    expect(order.enable).toEqual(["base", "mid", "top"]);
+
+    const removal = applyOrder(plugins, {
+      base: "remove",
+      mid: "remove",
+      top: "remove",
+      solo: "disabled",
+    });
+    expect(removal.remove).toEqual(["top", "mid", "base"]);
+    expect(removal.disable).toEqual(["solo"]);
+  });
+});
+
+describe("isPluginChoice", () => {
+  it("accepts only the three choices", () => {
+    expect(isPluginChoice("enabled")).toBe(true);
+    expect(isPluginChoice("remove")).toBe(true);
+    expect(isPluginChoice("delete")).toBe(false);
+  });
+});
diff --git a/src/ui/tests/types/ui-preferences.test.ts b/src/ui/tests/types/ui-preferences.test.ts
index ff0c8609a..02e7b62a6 100644
--- a/src/ui/tests/types/ui-preferences.test.ts
+++ b/src/ui/tests/types/ui-preferences.test.ts
@@ -9,6 +9,7 @@ import {
   sanitizeUiPreferences,
   UI_PREFERENCES_VERSION,
 } from "@/types/ui-preferences";
+import { LEGACY_SEEN } from "@/types/onboarding";
 
 describe("defaultUiPreferences", () => {
   it("starts every user on balanced with no overrides", () => {
@@ -16,9 +17,10 @@ describe("defaultUiPreferences", () => {
     expect(defaults.preset).toBe("balanced");
     expect(defaults.overrides).toEqual({});
     expect(defaults.onboarding).toEqual({
-      completedVersion: 0,
+      seen: {},
       completedAt: null,
       skipped: false,
+      baselinePending: false,
     });
   });
 });
@@ -36,9 +38,10 @@ describe("sanitizeUiPreferences", () => {
       preset: "simple" as const,
       overrides: { hostList: { density: "compact" as const, showTags: true } },
       onboarding: {
-        completedVersion: 1,
+        seen: { welcome: 1, "remote-desktop:guacd": 2 },
         completedAt: "2026-01-01T00:00:00.000Z",
         skipped: false,
+        baselinePending: false,
       },
     };
     expect(sanitizeUiPreferences(valid)).toEqual(valid);
@@ -56,11 +59,28 @@ describe("sanitizeUiPreferences", () => {
 
   it("ignores a malformed onboarding block", () => {
     expect(sanitizeUiPreferences({ onboarding: "done" }).onboarding).toEqual({
-      completedVersion: 0,
+      seen: {},
       completedAt: null,
       skipped: false,
+      baselinePending: false,
     });
   });
+
+  it("migrates the old completedVersion shape to the legacy seen map", () => {
+    const onboarding = sanitizeUiPreferences({
+      onboarding: { completedVersion: 2, completedAt: null, skipped: true },
+    }).onboarding;
+    expect(onboarding.seen).toEqual(LEGACY_SEEN);
+    expect(onboarding.baselinePending).toBe(true);
+    expect(onboarding.skipped).toBe(true);
+  });
+
+  it("treats an old never-completed shape as new", () => {
+    expect(
+      sanitizeUiPreferences({ onboarding: { completedVersion: 0 } }).onboarding
+        .seen,
+    ).toEqual({});
+  });
 });
 
 describe("sanitizeUiOverrides", () => {
@@ -175,7 +195,7 @@ describe("PRESETS.balanced", () => {
 });
 
 describe("plugin areas", () => {
-  it("moves version 1 docker and host metrics overrides to their plugins", () => {
+  it("drops 2.8 area names, even from an old version", () => {
     const upgraded = sanitizeUiPreferences({
       version: 1,
       preset: "balanced",
@@ -184,10 +204,7 @@ describe("plugin areas", () => {
         hostMetrics: { columns: 2 },
       },
     });
-    expect(upgraded.overrides).toEqual({
-      "plugin:docker": { containerLayout: "table" },
-      "plugin:host-metrics": { columns: 2 },
-    });
+    expect(upgraded.overrides).toEqual({});
   });
 
   it("resolves a plugin area from its presets and the user's overrides", () => {
@@ -220,24 +237,12 @@ describe("plugin areas", () => {
 });
 
 describe("areas that moved into plugins", () => {
-  it("maps version 2 terminal and file manager overrides to their plugins", () => {
+  it("drops the old names", () => {
     expect(
-      sanitizeUiOverrides(
-        {
-          terminal: { toolbarDensity: "expanded" },
-          fileManager: { viewMode: "list" },
-        },
-        2,
-      ),
-    ).toEqual({
-      "plugin:ssh-terminal": { toolbarDensity: "expanded" },
-      "plugin:file-manager": { viewMode: "list" },
-    });
-  });
-
-  it("drops the old names from a current payload", () => {
-    expect(
-      sanitizeUiOverrides({ terminal: { toolbarDensity: "icon" } }),
+      sanitizeUiOverrides({
+        terminal: { toolbarDensity: "icon" },
+        fileManager: { viewMode: "list" },
+      }),
     ).toEqual({});
   });
 });
diff --git a/src/ui/theme.css b/src/ui/theme.css
index 50d76484d..345b4307d 100644
--- a/src/ui/theme.css
+++ b/src/ui/theme.css
@@ -52,6 +52,13 @@
   --color-background: var(--background);
   --color-surface: var(--surface);
   --color-surface-dim: var(--surface-dim);
+  --color-warning: var(--warning);
+  --color-terminal-bg: var(--terminal-bg);
+  --color-bg-base: var(--bg-base);
+  --color-border-base: var(--border-base);
+  --color-foreground-secondary: var(--foreground-secondary);
+  --color-canvas: var(--canvas);
+  --color-overlay: var(--overlay);
   --radius-sm: calc(var(--radius) * 0.6);
   --radius-md: calc(var(--radius) * 0.8);
   --radius-lg: var(--radius);
diff --git a/src/ui/user/DonationReminderModal.tsx b/src/ui/user/DonationReminderModal.tsx
deleted file mode 100644
index 7a902842d..000000000
--- a/src/ui/user/DonationReminderModal.tsx
+++ /dev/null
@@ -1,53 +0,0 @@
-import React from "react";
-import { useTranslation } from "react-i18next";
-import {
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogFooter,
-  DialogHeader,
-  DialogTitle,
-} from "@/components/dialog.tsx";
-import { Button } from "@/components/button.tsx";
-
-const DONATE_URL = "https://donate.termix.site/donate/";
-
-interface DonationReminderModalProps {
-  open: boolean;
-  onDismiss: () => void;
-}
-
-export function DonationReminderModal({
-  open,
-  onDismiss,
-}: DonationReminderModalProps) {
-  const { t } = useTranslation();
-
-  const handleDonate = () => {
-    window.open(DONATE_URL, "_blank", "noopener,noreferrer");
-    onDismiss();
-  };
-
-  return (
-    <Dialog
-      open={open}
-      onOpenChange={(next) => {
-        if (!next) onDismiss();
-      }}
-    >
-      <DialogContent>
-        <DialogHeader>
-          <DialogTitle>{t("donation.title")}</DialogTitle>
-          <DialogDescription>{t("donation.body")}</DialogDescription>
-          <DialogDescription>{t("donation.milestones")}</DialogDescription>
-        </DialogHeader>
-        <DialogFooter>
-          <Button variant="outline" onClick={onDismiss}>
-            {t("donation.dismiss")}
-          </Button>
-          <Button onClick={handleDonate}>{t("donation.cta")}</Button>
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
-  );
-}
diff --git a/src/ui/user/LanguageSwitcher.tsx b/src/ui/user/LanguageSwitcher.tsx
deleted file mode 100644
index a5be3a674..000000000
--- a/src/ui/user/LanguageSwitcher.tsx
+++ /dev/null
@@ -1,80 +0,0 @@
-import React from "react";
-import { useTranslation } from "react-i18next";
-import { Select2 } from "@/components/select2";
-import { Globe } from "lucide-react";
-import { saveUserPreferences } from "@/main-axios";
-import { changeAppLanguage, normalizeLanguageCode } from "@/i18n/i18n";
-
-const languages = [
-  { code: "en", name: "English", nativeName: "English" },
-  { code: "af", name: "Afrikaans", nativeName: "Afrikaans" },
-  { code: "ar", name: "Arabic", nativeName: "العربية" },
-  { code: "bn", name: "Bengali", nativeName: "বাংলা" },
-  { code: "bg", name: "Bulgarian", nativeName: "Български" },
-  { code: "ca", name: "Catalan", nativeName: "Català" },
-  { code: "zh-CN", name: "Chinese Simplified", nativeName: "简体中文" },
-  { code: "zh-TW", name: "Chinese Traditional", nativeName: "繁体中文" },
-  { code: "cs", name: "Czech", nativeName: "Čeština" },
-  { code: "da", name: "Danish", nativeName: "Dansk" },
-  { code: "nl", name: "Dutch", nativeName: "Nederlands" },
-  { code: "fi", name: "Finnish", nativeName: "Suomi" },
-  { code: "fr", name: "French", nativeName: "Français" },
-  { code: "de", name: "German", nativeName: "Deutsch" },
-  { code: "el", name: "Greek", nativeName: "Ελληνικά" },
-  { code: "he", name: "Hebrew", nativeName: "עברית" },
-  { code: "hi", name: "Hindi", nativeName: "हिन्दी" },
-  { code: "hu", name: "Hungarian", nativeName: "Magyar" },
-  { code: "id", name: "Indonesian", nativeName: "Bahasa Indonesia" },
-  { code: "it", name: "Italian", nativeName: "Italiano" },
-  { code: "ja", name: "Japanese", nativeName: "日本語" },
-  { code: "ko", name: "Korean", nativeName: "한국어" },
-  { code: "no", name: "Norwegian", nativeName: "Norsk" },
-  { code: "pl", name: "Polish", nativeName: "Polski" },
-  {
-    code: "pt-PT",
-    name: "Portuguese",
-    nativeName: "Português",
-  },
-  {
-    code: "pt-BR",
-    name: "Portuguese (Brazil)",
-    nativeName: "Português (Brasil)",
-  },
-  { code: "ro", name: "Romanian", nativeName: "Română" },
-  { code: "ru", name: "Russian", nativeName: "Русский" },
-  { code: "sr", name: "Serbian", nativeName: "Српски" },
-  { code: "es-ES", name: "Spanish", nativeName: "Español" },
-  { code: "sv-SE", name: "Swedish", nativeName: "Svenska" },
-  { code: "th", name: "Thai", nativeName: "ไทย" },
-  { code: "tr", name: "Turkish", nativeName: "Türkçe" },
-  { code: "uk", name: "Ukrainian", nativeName: "Українська" },
-  { code: "vi", name: "Vietnamese", nativeName: "Tiếng Việt" },
-];
-
-export function LanguageSwitcher() {
-  const { i18n, t } = useTranslation();
-
-  const handleLanguageChange = (value: string) => {
-    void changeAppLanguage(value)
-      .then((language) => saveUserPreferences({ language }))
-      .catch(() => {});
-  };
-
-  return (
-    <div className="flex items-center gap-2 relative z-[99999]">
-      <Globe className="h-4 w-4 text-muted-foreground" />
-      <Select2
-        value={normalizeLanguageCode(i18n.resolvedLanguage || i18n.language)}
-        onChange={(event) => handleLanguageChange(event.target.value)}
-        placeholder={t("placeholders.language")}
-        className="w-[120px]"
-      >
-        {languages.map((lang) => (
-          <option key={lang.code} value={lang.code}>
-            {lang.nativeName}
-          </option>
-        ))}
-      </Select2>
-    </div>
-  );
-}
diff --git a/tsconfig.app.json b/tsconfig.app.json
index 97c4765d8..cd1e11b47 100644
--- a/tsconfig.app.json
+++ b/tsconfig.app.json
@@ -28,8 +28,10 @@
     "noImplicitOverride": false,
     "noEmitOnError": false,
     "paths": {
-      "@termix/plugin-sdk/frontend": ["./packages/plugin-sdk/src/frontend.ts"],
-      "@termix/plugin-sdk/ui": ["./src/ui/plugin-host/sdk-ui.ts"],
+      "@termix-ssh/plugin-sdk/frontend": [
+        "./packages/plugin-sdk/src/frontend.ts"
+      ],
+      "@termix-ssh/plugin-sdk/ui": ["./src/ui/plugin-host/sdk-ui.ts"],
       "@/types": ["./src/types/index.ts"],
       "@/types/*": ["./src/types/*"],
       "@/*": ["./src/ui/*"]
diff --git a/tsconfig.json b/tsconfig.json
index 2b6f42bf6..20b681814 100644
--- a/tsconfig.json
+++ b/tsconfig.json
@@ -6,9 +6,6 @@
     },
     {
       "path": "./tsconfig.node.json"
-    },
-    {
-      "path": "./tsconfig.plugins.json"
     }
   ],
   "compilerOptions": {
diff --git a/tsconfig.plugins.json b/tsconfig.plugins.json
deleted file mode 100644
index 16ac677b6..000000000
--- a/tsconfig.plugins.json
+++ /dev/null
@@ -1,12 +0,0 @@
-{
-  "extends": "./packages/plugin-sdk/tsconfig.plugin.json",
-  "compilerOptions": {
-    "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.plugins.tsbuildinfo"
-  },
-  "include": [
-    "plugins/*/src/**/*.ts",
-    "plugins/*/src/**/*.tsx",
-    "plugins/*/tests/**/*.ts",
-    "plugins/*/tests/**/*.tsx"
-  ]
-}
diff --git a/vite.config.ts b/vite.config.ts
index 03076e2cd..94f1e0a35 100644
--- a/vite.config.ts
+++ b/vite.config.ts
@@ -95,8 +95,8 @@ export default defineConfig({
   },
   resolve: {
     alias: {
-      "@termix/plugin-sdk/frontend": sdkFrontendEntry,
-      "@termix/plugin-sdk/ui": sdkUiEntry,
+      "@termix-ssh/plugin-sdk/frontend": sdkFrontendEntry,
+      "@termix-ssh/plugin-sdk/ui": sdkUiEntry,
       "@/types": path.resolve(__dirname, "./src/types"),
       "@": path.resolve(__dirname, "./src/ui"),
     },
diff --git a/vitest.config.ts b/vitest.config.ts
index 01aa2aed4..161ba7df7 100644
--- a/vitest.config.ts
+++ b/vitest.config.ts
@@ -5,18 +5,18 @@ export default defineConfig({
   resolve: {
     alias: [
       {
-        find: "@termix/plugin-sdk/frontend",
+        find: "@termix-ssh/plugin-sdk/frontend",
         replacement: path.resolve(
           __dirname,
           "./packages/plugin-sdk/src/frontend.ts",
         ),
       },
       {
-        find: "@termix/plugin-sdk/ui",
+        find: "@termix-ssh/plugin-sdk/ui",
         replacement: path.resolve(__dirname, "./src/ui/plugin-host/sdk-ui.ts"),
       },
       {
-        find: "@termix/plugin-host/testing",
+        find: "@termix-ssh/plugin-host/testing",
         replacement: path.resolve(
           __dirname,
           "./src/ui/plugin-host/testing-host.tsx",
@@ -29,6 +29,9 @@ export default defineConfig({
   test: {
     globals: true,
     setupFiles: ["./vitest.setup.ts"],
+    // Forks workers on Windows abort now and then (0xC0000409) in a random
+    // file and Vitest reports "Worker exited unexpectedly". Threads don't.
+    pool: "threads",
     coverage: {
       provider: "v8",
       reporter: ["text", "html"],
diff --git a/vitest.setup.ts b/vitest.setup.ts
index fe27dc3b0..5eb8a2363 100644
--- a/vitest.setup.ts
+++ b/vitest.setup.ts
@@ -4,4 +4,4 @@
  * The polyfills live in the SDK so core and every plugin suite share one copy.
  */
 
-import "@termix/plugin-sdk/testing/setup";
+import "@termix-ssh/plugin-sdk/testing/setup";